# 4.18.23

Created: 2025-08-28 10:32:19 +0000 UTC

Image Digest: `sha256:0bf2e8c1edf16de717c330b94d85f6d463c7208956b0a545cbb3fcf715e14c38`


## Changes from 4.18.3

### Components

* Kubectl 1.31.1
* Kubernetes upgraded from 1.31.6 to 1.31.11
* Kubernetes Tests upgraded from 1.31.1 to 1.31.10
* Red Hat Enterprise Linux CoreOS upgraded from 418.94.202502250906-0 to 418.94.202508261658-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| OnClusterBuild <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| ExternalOIDCWithUIDAndExtraClaimMappings <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### Removed images

* ovirt-machine-controllers


### Rebuilt images without code change

* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [c3951906](https://github.com/openshift/cloud-provider-aws/commit/c395190655cbb92689a572dcd71c4e2a6c5744b5) `sha256:4237d1f3bbe422147b295bf918d3c355edc2286c3ffcb8e6944d83ac0207d610`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [b51cd6b8](https://github.com/openshift/aws-ebs-csi-driver/commit/b51cd6b8e54d5682cf5491a9eb5af1570261a409) `sha256:b97f78e0989a59a188b3c2308b04798e2e2aef7cedb20c561b84c72b1336a24a`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [088dcaf7](https://github.com/openshift/aws-encryption-provider/commit/088dcaf73f980b977ef4f5d2f99e2a93deb87eef) `sha256:63065ab750db3c24e3380fa9c89b26891c441512e2791068eaeaf37d041d34eb`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [53274f11](https://github.com/openshift/machine-api-provider-aws/commit/53274f11f0780d9a96af1c349ac1ed1a4c0f3a08) `sha256:207cd7351841bd0b8b56d6252f014fbaddfd436882b73f1db8a64ffc204ead86`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [9c24d768](https://github.com/openshift/cloud-provider-azure/commit/9c24d768d8789fd677b09c9e7b3dd9118b41a558) `sha256:7da284e7d4a33a3c46922673324213de447f99dfb7cf120c5bf184816fe58387`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [9c24d768](https://github.com/openshift/cloud-provider-azure/commit/9c24d768d8789fd677b09c9e7b3dd9118b41a558) `sha256:6c0be90a6cc5e5c2e42df9230f6d6feae14dbfc95683094b3597f5dd75685f34`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [6cced666](https://github.com/openshift/azure-disk-csi-driver/commit/6cced6667a8e896c191bd678f740d2b7e0629538) `sha256:6c6c911d3aac2792169bd09b0c638fa068e1fc8ee77c047ddfaced6e984aec23`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [4b34592e](https://github.com/openshift/azure-file-csi-driver/commit/4b34592e8ea0a3f5cc937457a6fc79c1a6ac95cd) `sha256:44b1c4eb1a9b38dd2945dcb51d5e1e63fc60d6fdbd9e42f57c3f4e685a1549ab`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [1ede6c3f](https://github.com/openshift/cluster-api-provider-baremetal/commit/1ede6c3f08d4a3955bfa1ea5cbbd92f9831c78e7) `sha256:c4407e42ecec19e9eaaea79c51e9147bf4302af5b35c08c31ea4993d38ff6931`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [474ad65c](https://github.com/openshift/cluster-autoscaler-operator/commit/474ad65cde3d965a565d41cac5bfd96a92f880fa) `sha256:db66960eb91d3348c05323a38aa77186df1562b55baadf5b5bcdce0955b12d59`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [d1e01954](https://github.com/openshift/cluster-bootstrap/commit/d1e019545aee3250920a01a5f5c465c570de573c) `sha256:3cbba55ecd5bb44889c6c4434325c4fc3a10f8c6951b15c8b12f319ba7bc6a04`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [85cb4072](https://github.com/openshift/cluster-config-operator/commit/85cb40728227fac13a2983fb6e3170d67cf62075) `sha256:a4779ad93682b206d84ba3d3405cf093f7616de223e31f07c4ef3068be850b83`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [d17bf3a1](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/d17bf3a1b14e5bc6a8dff6569bfb02d523320990) `sha256:2d726021db05e85c22966c5e8810be86c8fde70944d4c1adc075c513253cac77`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [6fe70008](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/6fe700087e8be6513285edd18f461790fecc65c3) `sha256:05ec4fc0483339ecaddbdb723142437e62ab796bc2080098e24a3d6fef87e761`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [33a1141e](https://github.com/openshift/cluster-api-operator/commit/33a1141ebfe0476e9f8c9d7dc20e49e42c52a9dd) `sha256:b2f94b354de0cf44ed4b6440ee3875757a809eeb18eefc28ab133c5e1b8a5990`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [6182930d](https://github.com/openshift/cluster-kube-scheduler-operator/commit/6182930dde5ec8dd22bd50481e8b369ce673484c) `sha256:0c5748932e208068e4c6285d06df7e44af61cccfdfd9a110dbf4ec41383161ea`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [59ba356f](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/59ba356f50ea3128905ffdb7137f868aa0588bab) `sha256:b64076e354e182632e9bb1a732cdcac31c7b67f377a3a6d3e16f43878579e72e`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [01d5fbbe](https://github.com/openshift/cluster-machine-approver/commit/01d5fbbe0bb798db32e5168dde46e6ed0c873b36) `sha256:9761c8ea9b23641fdbc3fa7ee163e1dda1e65dac2b381dd007657c5e6f0f6990`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [0a6f6eb9](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/0a6f6eb9efec43dfd3c8570b7a08a3d00afc5534) `sha256:2038cad7cef0b373f5297bc9bf338df1f777b79fe270edb9d1bba2440d552410`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [f1711cf3](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/f1711cf30f683ec0eaa187cd5168caae9e8c1254) `sha256:caaa0a3ed9bb61b3356e29c08ccab4b07b543bd4661785e11af9548383aff831`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [5fd85252](https://github.com/openshift/cluster-policy-controller/commit/5fd852525909ce6eab52972ba9ce8fcf56528eb9) `sha256:4d4dbd56edde5b9dc1f8e8ee4f5b709928efaece3943b580a738c3735f19f0ea`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [32e77590](https://github.com/openshift/csi-driver-nfs/commit/32e775900642ab9c3560a06219104d7c38f8461c) `sha256:f45f6555fb87398d083da14d93d643db7e24ef9b4994a87d807a3a1b4793ee0d`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [39b37c06](https://github.com/openshift/csi-external-attacher/commit/39b37c06a27481c708f071464bd1049ea7db97c7) `sha256:0b397ed89ad84e5fc20bcb4546d98e887e6c7e64ed467f603fc1f2b790a1f83d`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [376f0ea0](https://github.com/openshift/csi-external-provisioner/commit/376f0ea04c64a41cb5166ff415fff849ff2da380) `sha256:44b7de7780e7851318a8c68638c1fc221f97ac2e5e8a50fca465a6467be3df9d`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [cca3837a](https://github.com/openshift/csi-external-resizer/commit/cca3837a84fcade22bd7b935c68d02904faa12aa) `sha256:99e071daac0bda292be8db1fd188ffddd474cff4e88d0655e4a793396de528da`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [838d2484](https://github.com/openshift/csi-external-snapshotter/commit/838d2484157f076bbb81f1b584898aec6f051c2f) `sha256:dde11d10138f3af41d989eb88a34d9ba0bdc3aec129a3931a6689df3990d492f`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [3a977844](https://github.com/openshift/csi-livenessprobe/commit/3a977844a9373d9b330fa923994a4c800e2cc745) `sha256:8786f067fc9b55c3a5c3d9b252c479a31b1aaf68b99c94e79e4076a3285f95ce`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [c21f5d02](https://github.com/openshift/csi-node-driver-registrar/commit/c21f5d02b498e9e49d94818f4ad3eaaae77ca161) `sha256:c9fcdb547528145d1334652190386064d77d60774c4adf186d776871f36c31bd`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [838d2484](https://github.com/openshift/csi-external-snapshotter/commit/838d2484157f076bbb81f1b584898aec6f051c2f) `sha256:398184506d43278f5abb00b3dacb766c6cc3cffd94fa821c701e747add69a40c`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [838d2484](https://github.com/openshift/csi-external-snapshotter/commit/838d2484157f076bbb81f1b584898aec6f051c2f) `sha256:6b845f5709b42acc145314447679bbb4537882813335d904e653772341d95d7b`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [2e139edc](https://github.com/openshift/driver-toolkit/commit/2e139edc4aeefbbc41536eeeedc91f317f0835fd) `sha256:5281268088cbd188713e386c74604c5a6084f5b6ee5cff58bfe5071e5c932a00`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [3193a756](https://github.com/openshift/egress-router-cni/commit/3193a756d60e14f7139992e2e42b7036955652e7) `sha256:923672855d9ca60bef182b77d23cb4161828e6ae5d9dc65a6a417728fb323e3f`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [6ea23561](https://github.com/openshift/cloud-provider-gcp/commit/6ea235614f445951c7a4b5525f64f51548461a0d) `sha256:8e35649c4edbf940628ea29885ce9e9e67ca748f622ef482503032d14e17d1ea`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [7cb8b38c](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/7cb8b38ceae1e2f38149df0e111a40ba38b49aeb) `sha256:8f597e03dfc9fdbb8632646c72bdb15c690816166e5d93b6645adb5b7185c07d`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [f0a670c7](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/f0a670c7ad8f3694c87f2e3d9e6e7c024f49b411) `sha256:f2cb5840deacac20bbe75f2af6972387a78a502d865de1ab5a4a12c9475b4a5f`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [a33026b1](https://github.com/openshift/cloud-provider-ibm/commit/a33026b12f204a9fe2580fcce13d52b11cfb1b1c) `sha256:0242190f05088ce500fc80dff474d15e3a764aa21be0a6d9aa5da781e1472aae`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [7149f2d5](https://github.com/openshift/insights-runtime-extractor/commit/7149f2d5ed4682258bd429cd719ea154e1a27550) `sha256:19cdfbadf2838045e8bb2694fd8a50de53429cb7058db5db0fb4e606990e9485`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [7149f2d5](https://github.com/openshift/insights-runtime-extractor/commit/7149f2d5ed4682258bd429cd719ea154e1a27550) `sha256:5b7b100d26aba70b4484b72550db4b095eff0bd0ba2f290f7c9a5c7ba37104b7`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [cfbae04f](https://github.com/openshift/ironic-static-ip-manager/commit/cfbae04f288d79c123ee8f817d88562948bc6e5c) `sha256:8d1c5d4a234b11636ed9f4607d7dd47c289bae05f1c600b2dbcc1a93a4b1bec1`
* [keepalived-ipfailover](https://github.com/openshift/images) git [716eb0ef](https://github.com/openshift/images/commit/716eb0efe8473796868c0d5a5574349f15129a6a) `sha256:dbb088683a748bca1691afc439d012e00e782744a059c9cddf62e5ed1447455f`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [962ccca2](https://github.com/openshift/kubernetes-metrics-server/commit/962ccca2b9ad6d0c0e16576c2fac4a71112bf0bf) `sha256:53259c7236fed212959564f05a214e6d1aa879ea1ac3265df9e203f30abe4445`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [526498ab](https://github.com/openshift/kube-rbac-proxy/commit/526498ab32996a0f67a96530ad7173f955e3fbe2) `sha256:05ea4625eec55253f86b454dec2742638bd4f4993d2ba0d5422e8d7beaef864b`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [cb5a9296](https://github.com/openshift/kube-state-metrics/commit/cb5a92969b18ac1cc5bded06f6d722d8ab6b8e61) `sha256:8cb8b5d563cf802ae5a0cd506b27d14b1eff02ee783a41e946ba2236070918f2`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:7756873cd0ff6ff3861176d4bad3cd177578ffd4842770115a42e326cf726660`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:2735f7ba604c51d1c625b0e9b0df3e8b96ac1a8b559a2ebd8ae8ca79b5d4203b`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:e80ff4942f266d709603587b560aee86a3df5531d616452158c59d36e451dd8d`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [d9fe8f38](https://github.com/openshift/cloud-provider-nutanix/commit/d9fe8f38811ca81c23191f0048a70e88b5ccaa04) `sha256:aeea500de4c45cefe60e18ed4db4ca9de48e46cec7d1b63e51734193e12f7a5a`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [2575ff41](https://github.com/openshift/oauth-apiserver/commit/2575ff417406ea6680aff0de6efb524dbbe2b8d2) `sha256:f3703bb8357eff03415433744e1813ad5b158a4612d3aa55dc67d23942f238ea`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [d914e77e](https://github.com/openshift/machine-api-provider-openstack/commit/d914e77ee67211024153b1535e8709c3cf190512) `sha256:7f42daa503a2742e421ecb808d12423df6fc3bd80e5230dd9ec1c865decce692`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:c461b27d74cfc5b6e619a31a1bf5f8e387ddd7ab119b98a04d656b199f429a06`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [0feae256](https://github.com/openshift/ovirt-csi-driver-operator/commit/0feae256abcc9b86c0276eaf2fc233cf899fb0ae) `sha256:937207bc65e9f296fc780d8b008e8c4e4eb281c2462cc980993584eaf157c74c`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [d36aea34](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/d36aea34452210f988f74e93e0640318f3db1938) `sha256:2ebca57291d84f8a18bdb73d1bdd08c16950c5e39eb19bce2bdc0c9356a3732c`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [01fc505a](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/01fc505abcf3b83bba284a00258b6761a9b7ce8a) `sha256:145196f7dd84c4a287833a6841514887c452fd2b668a433af249ed3010ec5406`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [17ae6fba](https://github.com/openshift/cloud-provider-powervs/commit/17ae6fba6eda58aa0d91f162206386105dff9962) `sha256:5a5792751c2fb9cbe385130151c3bbc660baa125c7eb49c0ad791662be845293`
* rhel-coreos `sha256:b91753ec7ab0ecb55a4fa86d5c1c0ebe34a0343109879347f0a9a0884552a34c`
* rhel-coreos-extensions `sha256:114fa02047f86ded5c40c4d136ca41fb2ba16bd6df894e71dff78e1fe1b2f29e`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [c414d1f5](https://github.com/openshift/cloud-provider-vsphere/commit/c414d1f5b0d910300cafda742aca146d41fce98a) `sha256:68f158b3197523fb5b23da23ebdc5b54f83c8d688808f5f69a1b3e483c857554`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [cfcad01d](https://github.com/openshift/vmware-vsphere-csi-driver/commit/cfcad01dbca611e0bf7d54af099bba8563acfd4f) `sha256:a2d736bebb280eb8469b1adb6018eef4afe36234ad9ff944fe18fe9be083bba2`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [cfcad01d](https://github.com/openshift/vmware-vsphere-csi-driver/commit/cfcad01dbca611e0bf7d54af099bba8563acfd4f) `sha256:2706433ecd1a4e21d08eda9385c3e31ea3dd1a25c741862a6325d04d93feed4d`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/bb74f0ad324ba24c300d0b4f08519d0cc250c1c5)

* [OCPBUGS-58635](https://issues.redhat.com/browse/OCPBUGS-58635), [OCPBUGS-58640](https://issues.redhat.com/browse/OCPBUGS-58640): Bump glog to v1.2.5 in release-4.18 (#7877) [#7877](https://github.com/openshift/assisted-service/pull/7877)
* [OCPBUGS-56596](https://issues.redhat.com/browse/OCPBUGS-56596): Include AdditionalTrustBundlePolicy in installConfig (#7751) [#7751](https://github.com/openshift/assisted-service/pull/7751)
* [OCPBUGS-47627](https://issues.redhat.com/browse/OCPBUGS-47627): dnsmasq service on OCP SNO fails to read /etc/resolv.conf file during system startup (#7257) [#7257](https://github.com/openshift/assisted-service/pull/7257)
* [OCPBUGS-54378](https://issues.redhat.com/browse/OCPBUGS-54378): Bump go-jwt to 4.5.2 to fix CVE-30204 (#7483) [#7483](https://github.com/openshift/assisted-service/pull/7483)
* [MGMT-20183](https://issues.redhat.com/browse/MGMT-20183): CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#7456) [#7456](https://github.com/openshift/assisted-service/pull/7456)
* [Full changelog](https://github.com/openshift/assisted-service/compare/e5a400590fed00f895a08245ef70df00ae97f28f...bb74f0ad324ba24c300d0b4f08519d0cc250c1c5)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/81d6bc2771d3d34de3c364e349ca7f2983e454a2)

* [OCPBUGS-58650](https://issues.redhat.com/browse/OCPBUGS-58650): Bump glog pkg to 1.2.4 (#1181) [#1181](https://github.com/openshift/assisted-installer/pull/1181)
* [OCPBUGS-53721](https://issues.redhat.com/browse/OCPBUGS-53721): Bump jwt to 4.5.2 in release-4.18 (#1085) [#1085](https://github.com/openshift/assisted-installer/pull/1085)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/8bb42ac9fd9624f86c97c4422bd5f982251e5d91...81d6bc2771d3d34de3c364e349ca7f2983e454a2)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/32a1f2a4c87eb63ebac848a5edb6c73c5a66dfbb)

* [OCPBUGS-58655](https://issues.redhat.com/browse/OCPBUGS-58655), [OCPBUGS-58660](https://issues.redhat.com/browse/OCPBUGS-58660): Bump glog to v1.2.5 in release-4.18 (#1069) [#1069](https://github.com/openshift/assisted-installer-agent/pull/1069)
* [OCPBUGS-52994](https://issues.redhat.com/browse/OCPBUGS-52994): Update to latest ghw version (#958) [#958](https://github.com/openshift/assisted-installer-agent/pull/958)
* [MGMT-20227](https://issues.redhat.com/browse/MGMT-20227): Skip Motherboard serial if set to "-" (#955) (#957) [#955](https://github.com/openshift/assisted-installer-agent/pull/955)
* [OCPBUGS-54544](https://issues.redhat.com/browse/OCPBUGS-54544): Bump github.com/go-jose/go-jose/v4 to v4.0.5 in release-4.18 (#965) [#965](https://github.com/openshift/assisted-installer-agent/pull/965)
* [OCPBUGS-53713](https://issues.redhat.com/browse/OCPBUGS-53713): Bump golang-jwt/jwt/v4 to 4.5.2 in release-4.18 (#963) [#963](https://github.com/openshift/assisted-installer-agent/pull/963)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/593c9c284e43fd00095cfdf3f55b9017f4104663...32a1f2a4c87eb63ebac848a5edb6c73c5a66dfbb)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/0e41f7d51a7e74d8f8f33c3c5da65f6dc4c16923)

* append .0 to go.mod version [#109](https://github.com/openshift/agent-installer-utils/pull/109)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/3f6d1d8b1884552e0bb7c6320804e0d2ea8c589d...0e41f7d51a7e74d8f8f33c3c5da65f6dc4c16923)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/2f62712d5db70df25490361749e93a552ffb5a24)

* append .0 to go.mod version. [#81](https://github.com/openshift/apiserver-network-proxy/pull/81)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/0e116160848d1eb189c5b5f77330f36e20c7e450...2f62712d5db70df25490361749e93a552ffb5a24)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/d631c2245d9481500627297244464f553d787782)

* [OCPBUGS-58670](https://issues.redhat.com/browse/OCPBUGS-58670), [OCPBUGS-58675](https://issues.redhat.com/browse/OCPBUGS-58675): bump github.com/golang/glog to v1.2.5 [#556](https://github.com/openshift/cluster-api-provider-aws/pull/556)
* [OCPBUGS-56434](https://issues.redhat.com/browse/OCPBUGS-56434): Update manifests to use v1 admissionregistration group [#554](https://github.com/openshift/cluster-api-provider-aws/pull/554)
* [OCPBUGS-53729](https://issues.redhat.com/browse/OCPBUGS-53729): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.7.2 (9283e64) into release-4.18 [#543](https://github.com/openshift/cluster-api-provider-aws/pull/543)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/b3446080be1c2898ee039030c346020fa6c1ed13...d631c2245d9481500627297244464f553d787782)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/ff513d371d28ea16042c10960d7d3e430428ed69)

* [OCPBUGS-60203](https://issues.redhat.com/browse/OCPBUGS-60203): Remove stale conditions [#413](https://github.com/openshift/csi-operator/pull/413)
* [OCPBUGS-54383](https://issues.redhat.com/browse/OCPBUGS-54383): Disable remove-not-ready-taint for azure disk csi driver [#374](https://github.com/openshift/csi-operator/pull/374)
* [Full changelog](https://github.com/openshift/csi-operator/compare/a95f8b365dda90ca1cb9d85a13c84670f6200cff...ff513d371d28ea16042c10960d7d3e430428ed69)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/f54f9a19adb43b395a880ca046aed0841466c28d)

* [OCPBUGS-51231](https://issues.redhat.com/browse/OCPBUGS-51231): github.com/go-jose/go-jose/v4 v4.0.5 [#201](https://github.com/openshift/aws-pod-identity-webhook/pull/201)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/5c43fe8e6c86c24f467070a8e5965a83c24f4360...f54f9a19adb43b395a880ca046aed0841466c28d)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/b29c582ec409fc7da93a70b624e6f959165cefe1)

* [OCPBUGS-58861](https://issues.redhat.com/browse/OCPBUGS-58861): Update manifests to remove reliance on admission registration v1beta1 [#348](https://github.com/openshift/cluster-api-provider-azure/pull/348)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/987615c80bfa65a5c70fbed3ff06e405ef6d88ed...b29c582ec409fc7da93a70b624e6f959165cefe1)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/c937080f51cec58650daa15805be548d09310c64)

* [OCPBUGS-53497](https://issues.redhat.com/browse/OCPBUGS-53497): bump golang-jwt v4 [#11](https://github.com/openshift/azure-kubernetes-kms/pull/11)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/d4fb1b6db34b00c12f27003f09ca8e7218ece54e...c937080f51cec58650daa15805be548d09310c64)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/457dead4a58293dec7fb7854e14640c10cf69278)

* [OCPBUGS-56167](https://issues.redhat.com/browse/OCPBUGS-56167): [release-4.18] Update virtualmachines service to armcompute/v5 SDK [#145](https://github.com/openshift/machine-api-provider-azure/pull/145)
* [OCPBUGS-56654](https://issues.redhat.com/browse/OCPBUGS-56654): Fix failure when attempting to modify immutable availabilitySet [#153](https://github.com/openshift/machine-api-provider-azure/pull/153)
* [OCPBUGS-55373](https://issues.redhat.com/browse/OCPBUGS-55373): Update eviction policy for Spot VMs from Deallocate to Delete [#139](https://github.com/openshift/machine-api-provider-azure/pull/139)
* [OCPBUGS-54355](https://issues.redhat.com/browse/OCPBUGS-54355): Re-reconcile machine on NIC provisioning failure [#135](https://github.com/openshift/machine-api-provider-azure/pull/135)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/62f62f7a0bb3d836e238588527627684018e229b...457dead4a58293dec7fb7854e14640c10cf69278)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/f60e4029d64de202e81d2cd114f8a90dc0a1878e)

* [OCPBUGS-53801](https://issues.redhat.com/browse/OCPBUGS-53801): github.com/golang-jwt/jwt/v4 v4.5.2 [#31](https://github.com/openshift/azure-workload-identity/pull/31)
* [OCPBUGS-51233](https://issues.redhat.com/browse/OCPBUGS-51233): github.com/go-jose/go-jose/v4 v4.0.5 [#27](https://github.com/openshift/azure-workload-identity/pull/27)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/344c5dc56d6b7b1297db1b19eaa121bdbe0cec5b...f60e4029d64de202e81d2cd114f8a90dc0a1878e)


### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/80c3a0638eacd65c0d6f54fbd3f4c593085528e8)

* [OCPBUGS-58861](https://issues.redhat.com/browse/OCPBUGS-58861): Update manifests to remove reliance on admission registration v1beta1 [#51](https://github.com/openshift/cluster-api-provider-metal3/pull/51)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/7ec03e9408ff7973e461da5330e1f2b63dc5e0ec...80c3a0638eacd65c0d6f54fbd3f4c593085528e8)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/53d25898f4a68451e9e1478336e1991fd5ded04f)

* [OCPBUGS-60592](https://issues.redhat.com/browse/OCPBUGS-60592): baremetal: always set external v6 URL on dualstack [#9895](https://github.com/openshift/installer/pull/9895)
* [OCPBUGS-54598](https://issues.redhat.com/browse/OCPBUGS-54598): Update the RHCOS 4.18 bootimage metadata [#9900](https://github.com/openshift/installer/pull/9900)
* [OCPBUGS-56177](https://issues.redhat.com/browse/OCPBUGS-56177), [OCPBUGS-59155](https://issues.redhat.com/browse/OCPBUGS-59155), [OCPBUGS-59158](https://issues.redhat.com/browse/OCPBUGS-59158): Migrate AWS SDK to V2 to support MX-Central Region [#9709](https://github.com/openshift/installer/pull/9709)
* [OCPBUGS-58321](https://issues.redhat.com/browse/OCPBUGS-58321): allow to deploy single nodes with UPI [#9824](https://github.com/openshift/installer/pull/9824)
* [OCPBUGS-54744](https://issues.redhat.com/browse/OCPBUGS-54744): Filter out excess CA certs when adding node [#9647](https://github.com/openshift/installer/pull/9647)
* [OCPBUGS-58264](https://issues.redhat.com/browse/OCPBUGS-58264): vSphere - remove unit tests using nip.io [#9813](https://github.com/openshift/installer/pull/9813)
* [OCPBUGS-56797](https://issues.redhat.com/browse/OCPBUGS-56797): [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field [#9747](https://github.com/openshift/installer/pull/9747)
* [OCPBUGS-57139](https://issues.redhat.com/browse/OCPBUGS-57139): ensure ctrplane nodes can access bootstrap MCS [#9772](https://github.com/openshift/installer/pull/9772)
* [OCPBUGS-57220](https://issues.redhat.com/browse/OCPBUGS-57220): sort zone slices extracted from map of byo subnets [#9774](https://github.com/openshift/installer/pull/9774)
* [OCPBUGS-56864](https://issues.redhat.com/browse/OCPBUGS-56864): Update Control Plane replica validation for Single Node OpenShift [#9758](https://github.com/openshift/installer/pull/9758)
* [OCPBUGS-50690](https://issues.redhat.com/browse/OCPBUGS-50690): vsphere - check if host is powered down or on standby before uploading template [#9468](https://github.com/openshift/installer/pull/9468)
* [OCPBUGS-53142](https://issues.redhat.com/browse/OCPBUGS-53142): PowerVS: COS eu-es hack [#9626](https://github.com/openshift/installer/pull/9626)
* [OCPBUGS-50840](https://issues.redhat.com/browse/OCPBUGS-50840): Fix panic when there are no available IPs [#9479](https://github.com/openshift/installer/pull/9479)
* [OCPBUGS-55794](https://issues.redhat.com/browse/OCPBUGS-55794): IBI nmstate unit test fix [#9692](https://github.com/openshift/installer/pull/9692)
* [OCPBUGS-54947](https://issues.redhat.com/browse/OCPBUGS-54947): Fix Load balancer IP setup [#9659](https://github.com/openshift/installer/pull/9659)
* [OCPBUGS-45564](https://issues.redhat.com/browse/OCPBUGS-45564): Align vSphere UPI haproxy config with IPI [#9276](https://github.com/openshift/installer/pull/9276)
* [OCPBUGS-53453](https://issues.redhat.com/browse/OCPBUGS-53453): IBMCloud: Move to IBM TF openshift fork [#9592](https://github.com/openshift/installer/pull/9592)
* [OCPBUGS-53422](https://issues.redhat.com/browse/OCPBUGS-53422): Avoid adding duplicate entries to NO_PROXY [#9588](https://github.com/openshift/installer/pull/9588)
* [OCPBUGS-52515](https://issues.redhat.com/browse/OCPBUGS-52515): Remove error logging when determining image arch [#9539](https://github.com/openshift/installer/pull/9539)
* [OCPBUGS-52429](https://issues.redhat.com/browse/OCPBUGS-52429): Remove tmp directory used for agent pxe files [#9536](https://github.com/openshift/installer/pull/9536)
* [OCPBUGS-51211](https://issues.redhat.com/browse/OCPBUGS-51211): Fixes panic during GCP tags fetch due to unstable network [#9513](https://github.com/openshift/installer/pull/9513)
* [OCPBUGS-49885](https://issues.redhat.com/browse/OCPBUGS-49885): [Nutanix] Install multi-NICs cluster failed with failureDomains [#9440](https://github.com/openshift/installer/pull/9440)
* [Full changelog](https://github.com/openshift/installer/compare/0ed93a189e3e0a84a2f3284b8b8fa8f12c21b10f...53d25898f4a68451e9e1478336e1991fd5ded04f)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/45c6255cafc5633d1ab6b9460ececa5c9197cce8)

* [OCPBUGS-56766](https://issues.redhat.com/browse/OCPBUGS-56766): Make firmware update handle only a subset of `Spec.Updates` [#421](https://github.com/openshift/baremetal-operator/pull/421)
* [OCPBUGS-56431](https://issues.redhat.com/browse/OCPBUGS-56431): Redfish: correctly handle missing system ID [#417](https://github.com/openshift/baremetal-operator/pull/417)
* [OCPBUGS-53324](https://issues.redhat.com/browse/OCPBUGS-53324): BMO can expose any secret via BMCEventSubscription CRD [#405](https://github.com/openshift/baremetal-operator/pull/405)
* [OCPBUGS-45250](https://issues.redhat.com/browse/OCPBUGS-45250): Remove dataImage finalizer if BMH is missing [#389](https://github.com/openshift/baremetal-operator/pull/389)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/3d9304e76903b639b6d06e3b00d655e1ad5dbb9b...45c6255cafc5633d1ab6b9460ececa5c9197cce8)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/7145e606c7aec1966be90d7f8cd1083886b9afc8)

* [OCPBUGS-59280](https://issues.redhat.com/browse/OCPBUGS-59280): Bump logrus version [#354](https://github.com/openshift/baremetal-runtimecfg/pull/354)
* [OCPBUGS-57782](https://issues.redhat.com/browse/OCPBUGS-57782): iptables: Switch PREROUTING REDIRECT rule to DNAT instead [#351](https://github.com/openshift/baremetal-runtimecfg/pull/351)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/9e2015c30f48013e895eb8dfc43695780e0d9162...7145e606c7aec1966be90d7f8cd1083886b9afc8)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/4fcb2d07875f05d881ac90af73723db0ae5b1d6e)

* [OCPBUGS-58233](https://issues.redhat.com/browse/OCPBUGS-58233): Return error in case of error [#2054](https://github.com/openshift/oc/pull/2054)
* [OCPBUGS-57507](https://issues.redhat.com/browse/OCPBUGS-57507): avoid transfering permissions when copying artifacts from node-joiner pod [#2039](https://github.com/openshift/oc/pull/2039)
* [OCPBUGS-56240](https://issues.redhat.com/browse/OCPBUGS-56240): Adding sos.conf file for default sos config into the tools image [#2021](https://github.com/openshift/oc/pull/2021)
* [OCPBUGS-55449](https://issues.redhat.com/browse/OCPBUGS-55449): Get installer image from configMap for node-image command [#2013](https://github.com/openshift/oc/pull/2013)
* [OCPBUGS-55647](https://issues.redhat.com/browse/OCPBUGS-55647): Use fedora image in unit tests instead of centos [#2014](https://github.com/openshift/oc/pull/2014)
* [Full changelog](https://github.com/openshift/oc/compare/eb9bc9b02fc27a48cceccc0140fc3f8ee1414c64...4fcb2d07875f05d881ac90af73723db0ae5b1d6e)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/225d52e6bf118b2d218c2a180f9b07a67f913e95)

* [OCPBUGS-60618](https://issues.redhat.com/browse/OCPBUGS-60618): ccoctl azure dnszone-resource-group-name now optional [#899](https://github.com/openshift/cloud-credential-operator/pull/899)
* [OCPBUGS-58680](https://issues.redhat.com/browse/OCPBUGS-58680): github.com/golang/glog v1.2.5 [#891](https://github.com/openshift/cloud-credential-operator/pull/891)
* [OCPBUGS-58247](https://issues.redhat.com/browse/OCPBUGS-58247): ccoctl: only add owned tag to azure resources on create [#882](https://github.com/openshift/cloud-credential-operator/pull/882)
* [OCPBUGS-56979](https://issues.redhat.com/browse/OCPBUGS-56979): Azure: resolve nil pointer exception when role assignment exists [#869](https://github.com/openshift/cloud-credential-operator/pull/869)
* [OCPBUGS-54827](https://issues.redhat.com/browse/OCPBUGS-54827): Render: configure proxy on bootstrap static pod [#862](https://github.com/openshift/cloud-credential-operator/pull/862)
* [OCPBUGS-53825](https://issues.redhat.com/browse/OCPBUGS-53825): update github.com/golang-jwt/jwt [#837](https://github.com/openshift/cloud-credential-operator/pull/837)
* [OCPBUGS-53345](https://issues.redhat.com/browse/OCPBUGS-53345): github.com/golang/glog v1.2.4 [#835](https://github.com/openshift/cloud-credential-operator/pull/835)
* [OCPBUGS-51550](https://issues.redhat.com/browse/OCPBUGS-51550): Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected [#822](https://github.com/openshift/cloud-credential-operator/pull/822)
* [OCPBUGS-51237](https://issues.redhat.com/browse/OCPBUGS-51237): github.com/go-jose/go-jose/v4 v4.0.5 [#824](https://github.com/openshift/cloud-credential-operator/pull/824)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/020f8b841abf6284642cd182d95611b79c2f3a19...225d52e6bf118b2d218c2a180f9b07a67f913e95)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/beacfbc2f2afa651616ad1c3c6712c511318a8d4)

* [OCPBUGS-56156](https://issues.redhat.com/browse/OCPBUGS-56156): Increase API call timeout to 30 second [#170](https://github.com/openshift/cloud-network-config-controller/pull/170)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/f648c78dba768619f0c6e2120132ee1aeefb8571...beacfbc2f2afa651616ad1c3c6712c511318a8d4)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/882f8799b8a550605e4812479272691de3f5c0d2)

* [OCPBUGS-49749](https://issues.redhat.com/browse/OCPBUGS-49749): Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups [#754](https://github.com/openshift/cluster-authentication-operator/pull/754)
* [OCPBUGS-54569](https://issues.redhat.com/browse/OCPBUGS-54569): Avoid duplicate OAuth client creation [#764](https://github.com/openshift/cluster-authentication-operator/pull/764)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/e8c7c47e485a54cd8e2fc0ece74bd110c190e3c9...882f8799b8a550605e4812479272691de3f5c0d2)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/e38eab0804cde47396fd1af94bfd80cff5a6d0aa)

* [OCPBUGS-60235](https://issues.redhat.com/browse/OCPBUGS-60235): fix checkpoint gc of unknown recommenders [#368](https://github.com/openshift/kubernetes-autoscaler/pull/368)
* [OCPBUGS-59260](https://issues.redhat.com/browse/OCPBUGS-59260): Fix cool down status condition to trigger scale down [#361](https://github.com/openshift/kubernetes-autoscaler/pull/361)
* [OCPBUGS-53241](https://issues.redhat.com/browse/OCPBUGS-53241): improve replica counting and decrease target size behavior [#346](https://github.com/openshift/kubernetes-autoscaler/pull/346)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/4674e81c349b841a139af8a5b5041722ec2f7b2f...e38eab0804cde47396fd1af94bfd80cff5a6d0aa)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/d9b102d78588dd6648ff7572b0ef76b1200ce4ab)

* [OCPBUGS-58315](https://issues.redhat.com/browse/OCPBUGS-58315): Bump github.com/go-errors/errors to v1.5.1 [#492](https://github.com/openshift/cluster-baremetal-operator/pull/492)
* [OCPBUGS-53080](https://issues.redhat.com/browse/OCPBUGS-53080): Add missing relatedObjects [#467](https://github.com/openshift/cluster-baremetal-operator/pull/467)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/dfc6c062e17a22923547188cf893509524931a7f...d9b102d78588dd6648ff7572b0ef76b1200ce4ab)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/63df38bcdb4aa8ca25c26b1f70321d5d198e27d1)

* [OCPBUGS-56434](https://issues.redhat.com/browse/OCPBUGS-56434): Update manifests to leverage v1 admissionregistration group [#241](https://github.com/openshift/cluster-api/pull/241)
* [Full changelog](https://github.com/openshift/cluster-api/compare/d05a6defdc3602918de8db0f93744ca8f6b2b820...63df38bcdb4aa8ca25c26b1f70321d5d198e27d1)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/2f2737e1ed649009eef31c19ffff7468b67de32d)

* [OCPBUGS-56919](https://issues.redhat.com/browse/OCPBUGS-56919): fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller [#308](https://github.com/openshift/cluster-capi-operator/pull/308)
* [OCPBUGS-56434](https://issues.redhat.com/browse/OCPBUGS-56434): Should not use v1beta1 of the AdmissionRegistration API group [#298](https://github.com/openshift/cluster-capi-operator/pull/298)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/4e26a69d2740029b37469c5677a5ed0f129eed8f...2f2737e1ed649009eef31c19ffff7468b67de32d)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/1f8672a663e5c0ad873eb9c3760ed430c7369fa5)

* [OCPBUGS-60015](https://issues.redhat.com/browse/OCPBUGS-60015): Add Service using common resource templating [#405](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/405)
* [OCPBUGS-60015](https://issues.redhat.com/browse/OCPBUGS-60015): Update service selector to match deployment label [#403](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/403)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/33856906970a98ac05a042a8058902458d623e0f...1f8672a663e5c0ad873eb9c3760ed430c7369fa5)


### [cluster-config-api](https://github.com/openshift/api/tree/c86d80652a9ed6a3a6b35d9d81c06aaeb723f8e1)

* : add OnClusterBuilds to default config [#2365](https://github.com/openshift/api/pull/2365)
* Merge [#2316](https://github.com/openshift/api/pull/2316)
* [OCPBUGS-56183](https://issues.redhat.com/browse/OCPBUGS-56183): Add IPsec API for NAT-T UDP encapsulation support [#2331](https://github.com/openshift/api/pull/2331)
* [OCPBUGS-55792](https://issues.redhat.com/browse/OCPBUGS-55792): [release-4.18] config: add uid and extra claim mappings for external OIDC configuration [#2311](https://github.com/openshift/api/pull/2311)
* [OCPBUGS-53221](https://issues.redhat.com/browse/OCPBUGS-53221): Allow spaces in AWS resource tags [#2239](https://github.com/openshift/api/pull/2239)
* [OCPBUGS-54784](https://issues.redhat.com/browse/OCPBUGS-54784): [release-4.18] Bump openshift/controller-tools to latest commit [#2267](https://github.com/openshift/api/pull/2267)
* [OCPBUGS-51295](https://issues.redhat.com/browse/OCPBUGS-51295), [OCPBUGS-51380](https://issues.redhat.com/browse/OCPBUGS-51380): Reject new NodeStatus with revision set [#2215](https://github.com/openshift/api/pull/2215)
* [OCPBUGS-51295](https://issues.redhat.com/browse/OCPBUGS-51295): [release-4.18] Add the option to test ratcheting validations within integration tests [#2217](https://github.com/openshift/api/pull/2217)
* [Full changelog](https://github.com/openshift/api/compare/cb44c196e68fc38178d56190d9de078069154a7b...c86d80652a9ed6a3a6b35d9d81c06aaeb723f8e1)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/7cafd0c7dca2edb154b8444602b600b5901afeba)

* [OCPBUGS-52514](https://issues.redhat.com/browse/OCPBUGS-52514): [release-4.18] Add runbook_url for CoreDNSErrorsHigh [#429](https://github.com/openshift/cluster-dns-operator/pull/429)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/208d50c1a5e0aaeb991366daa749abdffa803224...7cafd0c7dca2edb154b8444602b600b5901afeba)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/8460bede0e45549f1cf03c85c69380b18de44a08)

* [OCPBUGS-59803](https://issues.redhat.com/browse/OCPBUGS-59803): add missing ports to svc and pod spec [#1455](https://github.com/openshift/cluster-etcd-operator/pull/1455)
* [OCPBUGS-56834](https://issues.redhat.com/browse/OCPBUGS-56834): etcd pod containers do not start when tls min version is 1.3 [#1428](https://github.com/openshift/cluster-etcd-operator/pull/1428)
* [OCPBUGS-56110](https://issues.redhat.com/browse/OCPBUGS-56110): adjust alerts according to platform [#1424](https://github.com/openshift/cluster-etcd-operator/pull/1424)
* [OCPBUGS-53513](https://issues.redhat.com/browse/OCPBUGS-53513): fix CVE-2025-30204 [#1413](https://github.com/openshift/cluster-etcd-operator/pull/1413)
* [OCPBUGS-55066](https://issues.redhat.com/browse/OCPBUGS-55066): increase etcdGRPCRequestsSlow duration [#1408](https://github.com/openshift/cluster-etcd-operator/pull/1408)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/26f6cb2494275fb713edbb535c3fe1d02fde94de...8460bede0e45549f1cf03c85c69380b18de44a08)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/1e3caa4b5abe4e3dad914a337f87408d060b1fb2)

* [OCPBUGS-53873](https://issues.redhat.com/browse/OCPBUGS-53873): bump github.com/golang-jwt/jwt [#1217](https://github.com/openshift/cluster-image-registry-operator/pull/1217)
* [OCPBUGS-51606](https://issues.redhat.com/browse/OCPBUGS-51606): bump golang.org/x/oauth2 [#1208](https://github.com/openshift/cluster-image-registry-operator/pull/1208)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/33197688ad59aed5cd6d51c34cb114944125b6a7...1e3caa4b5abe4e3dad914a337f87408d060b1fb2)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/d967a73c5f7da76783ee1af093f21817e7681e1d)

* [NE-1951](https://issues.redhat.com/browse/NE-1951): Pre-upgrade Admin Gate for Gateway API CRD Management Succession [#1196](https://github.com/openshift/cluster-ingress-operator/pull/1196)
* [NE-1952](https://issues.redhat.com/browse/NE-1952): Pre-upgrade check for Gateway API CRD Management Succession [#1193](https://github.com/openshift/cluster-ingress-operator/pull/1193)
* [OCPBUGS-48377](https://issues.redhat.com/browse/OCPBUGS-48377): Add e2e tests for IdleConnectionTerminationPolicy [#1194](https://github.com/openshift/cluster-ingress-operator/pull/1194)
* [OCPBUGS-48377](https://issues.redhat.com/browse/OCPBUGS-48377): Add support for IdleConnectionTerminationPolicy [#1188](https://github.com/openshift/cluster-ingress-operator/pull/1188)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/8be174945db79b0660bd0fd21ed279ab7b6aafbf...d967a73c5f7da76783ee1af093f21817e7681e1d)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/b46a20724df762e2df17956d9eb341252e73fccb)

* [OCPBUGS-60176](https://issues.redhat.com/browse/OCPBUGS-60176): Add missing service ports to apiserver service [#1888](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1888)
* [OCPBUGS-56030](https://issues.redhat.com/browse/OCPBUGS-56030): bump library-go to bring in updated audit policies [#1843](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1843)
* [OCPBUGS-49898](https://issues.redhat.com/browse/OCPBUGS-49898): bindata/alerts/slo: improve burnrate calculation [#1808](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1808)
* [OCPBUGS-53066](https://issues.redhat.com/browse/OCPBUGS-53066): Bump library-go [#1828](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1828)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/087c72f1e261fb7c42fe6fc5d73a1f70d3c76d2f...b46a20724df762e2df17956d9eb341252e73fccb)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/a2cbb5725fe5e560ba40d884cfd079b3f8391f03)

* [OCPBUGS-60131](https://issues.redhat.com/browse/OCPBUGS-60131): Missing endpoint slices for open ports the operator uses [#852](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/852)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/0fac9aa9a20b3c843e0e832a2849db6a7e3441c1...a2cbb5725fe5e560ba40d884cfd079b3f8391f03)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/7337d93da1df9b60751d146f0b7df1bc2436b595)

* [OCPBUGS-59962](https://issues.redhat.com/browse/OCPBUGS-59962): operator: increase wait time till degraded to max 4 times 5m [#2633](https://github.com/openshift/cluster-monitoring-operator/pull/2633)
* [OCPBUGS-56251](https://issues.redhat.com/browse/OCPBUGS-56251): set upgradable false when alertmanager v1 is specified [#2591](https://github.com/openshift/cluster-monitoring-operator/pull/2591)
* [OCPBUGS-55005](https://issues.redhat.com/browse/OCPBUGS-55005): chore: introduce context-rich anb case sensitive unmarshaller for the monitoring and  set CMO to Upgradeable=false if errors are found [#2592](https://github.com/openshift/cluster-monitoring-operator/pull/2592)
* [OCPBUGS-53024](https://issues.redhat.com/browse/OCPBUGS-53024): Fix opentelemetry metrics to use regexp on label match [#2578](https://github.com/openshift/cluster-monitoring-operator/pull/2578)
* [OCPBUGS-52565](https://issues.redhat.com/browse/OCPBUGS-52565): Bump prometheus-operator to 0.78.2 [#2576](https://github.com/openshift/cluster-monitoring-operator/pull/2576)
* [OCPBUGS-50706](https://issues.redhat.com/browse/OCPBUGS-50706): Add incidents metric to telemetry [#2570](https://github.com/openshift/cluster-monitoring-operator/pull/2570)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/9852f98d559a7153213164e3518ffd6576b47b87...7337d93da1df9b60751d146f0b7df1bc2436b595)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/c1a702897dc2ca3dc4cdc04f4984a718960ea46a)

* [OCPBUGS-47651](https://issues.redhat.com/browse/OCPBUGS-47651): Re-disable metrics server [#2622](https://github.com/openshift/cluster-network-operator/pull/2622)
* [OCPBUGS-58047](https://issues.redhat.com/browse/OCPBUGS-58047): Add cert-rotation script into cno [#2702](https://github.com/openshift/cluster-network-operator/pull/2702)
* [OCPBUGS-56183](https://issues.redhat.com/browse/OCPBUGS-56183): Implement IPsec NAT-Traversal encapsulation option [#2711](https://github.com/openshift/cluster-network-operator/pull/2711)
* [OCPBUGS-54717](https://issues.redhat.com/browse/OCPBUGS-54717): Add IPv6 NGINX configuration [#2683](https://github.com/openshift/cluster-network-operator/pull/2683)
* [OCPBUGS-50582](https://issues.redhat.com/browse/OCPBUGS-50582), [OCPBUGS-52949](https://issues.redhat.com/browse/OCPBUGS-52949): Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods [#2644](https://github.com/openshift/cluster-network-operator/pull/2644)
* [OCPBUGS-52837](https://issues.redhat.com/browse/OCPBUGS-52837): frr-k8s: rename validatingwebhook name [#2661](https://github.com/openshift/cluster-network-operator/pull/2661)
* [OCPBUGS-48305](https://issues.redhat.com/browse/OCPBUGS-48305): frr-k8s: align manifests with operator [#2657](https://github.com/openshift/cluster-network-operator/pull/2657)
* [OCPBUGS-41178](https://issues.redhat.com/browse/OCPBUGS-41178): Updating cluster-network-operator-container image to be consistent with ART for 4.18 [#2491](https://github.com/openshift/cluster-network-operator/pull/2491)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/cad5e40c4c21a8d1d638c20ed23529aa05ab0824...c1a702897dc2ca3dc4cdc04f4984a718960ea46a)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/59320245b2d880a4f8cf532cd8e9958df1c12700)

* e2e: arm: Add arm kernelPageSize e2e testing suite (#1355) [#1355](https://github.com/openshift/cluster-node-tuning-operator/pull/1355)
* : OCPBUGS-57947: kernelPageSize + hugepages combinations validation [3/3] (#1343) [#1343](https://github.com/openshift/cluster-node-tuning-operator/pull/1343)
* : OCPBUGS-57947: Support hugepage size selection for ARM-based clusters [2/3] (#1342) [#1342](https://github.com/openshift/cluster-node-tuning-operator/pull/1342)
* [OCPBUGS-57947](https://issues.redhat.com/browse/OCPBUGS-57947): CNF-18142: Add kernel page size field [1/3] (#1341) [#1341](https://github.com/openshift/cluster-node-tuning-operator/pull/1341)
* [OCPBUGS-52352](https://issues.redhat.com/browse/OCPBUGS-52352): Treat all aarch64 platforms as equals in tuned (#1303) (#1306) [#1303](https://github.com/openshift/cluster-node-tuning-operator/pull/1303)
* machineconfig: add support for various hugepage sizes. (#1299) [#1299](https://github.com/openshift/cluster-node-tuning-operator/pull/1299)
* [OCPBUGS-51088](https://issues.redhat.com/browse/OCPBUGS-51088): E2E: Add configuration tests related to align cpus by uncorecache feature (#1298) [#1298](https://github.com/openshift/cluster-node-tuning-operator/pull/1298)
* e2e: common way to fetch poolName (#1255) (#1300) [#1255](https://github.com/openshift/cluster-node-tuning-operator/pull/1255)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/b707be66f55efc54a9b348cd7f4b5fdcf5a58679...59320245b2d880a4f8cf532cd8e9958df1c12700)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/88088e4bfe9f55ea7ab2c4331cebee727c8c0c34)

* [OCPBUGS-57767](https://issues.redhat.com/browse/OCPBUGS-57767): fix olm.maxOpenShiftVersion float parsing [#125](https://github.com/openshift/cluster-olm-operator/pull/125)
* [OCPBUGS-48478](https://issues.redhat.com/browse/OCPBUGS-48478): [release-4.18] Add openshift node selector annotation [#116](https://github.com/openshift/cluster-olm-operator/pull/116)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/6da706d712dda30cec7ff92c5bfb76074df3d5fe...88088e4bfe9f55ea7ab2c4331cebee727c8c0c34)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/5cdbe18d6dcf2ad4db3f0c2e10c20b67749384fa)

* [OCPBUGS-55783](https://issues.redhat.com/browse/OCPBUGS-55783): Samples Operator should sort failing image imports [#638](https://github.com/openshift/cluster-samples-operator/pull/638)
* [OCPBUGS-55782](https://issues.redhat.com/browse/OCPBUGS-55782): only update LastTransitionTime if operator status change [#637](https://github.com/openshift/cluster-samples-operator/pull/637)
* [OCPBUGS-55781](https://issues.redhat.com/browse/OCPBUGS-55781): Adding filter to clusterOperatorInformerEventHandler [#636](https://github.com/openshift/cluster-samples-operator/pull/636)
* [OCPBUGS-54258](https://issues.redhat.com/browse/OCPBUGS-54258): Adding mutex to func createSamples on handler.go [#615](https://github.com/openshift/cluster-samples-operator/pull/615)
* [OCPBUGS-54351](https://issues.redhat.com/browse/OCPBUGS-54351): add rhdmalone to owners [#617](https://github.com/openshift/cluster-samples-operator/pull/617)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/de85e478a2f3dcc712ce5f02b56279cb116357f5...5cdbe18d6dcf2ad4db3f0c2e10c20b67749384fa)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/65d06444110f8044a84ccf4f977ee9520f2bdf89)

* [OCPBUGS-51320](https://issues.redhat.com/browse/OCPBUGS-51320): fix Vsphere cluster Storage operator in Unavailable state [#558](https://github.com/openshift/cluster-storage-operator/pull/558)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/d5869b21eee0acc5d734d92fa283b737b9e90b83...65d06444110f8044a84ccf4f977ee9520f2bdf89)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/8caab452b91df0d77ab052b1833a4d54a1374634)

* NO-JIRA: Updating openshift-ci-release-key for 2 years [#72](https://github.com/openshift/cluster-update-keys/pull/72)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/d44fca585d081a72cb2c67734556a27bbfc9470e...8caab452b91df0d77ab052b1833a4d54a1374634)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/b3d78f348154609ae86078caa4d416c592f3662e)

* [OCPBUGS-58450](https://issues.redhat.com/browse/OCPBUGS-58450): Failing=Unknown upon long CO updating [#1211](https://github.com/openshift/cluster-version-operator/pull/1211)
* [OCPBUGS-60222](https://issues.redhat.com/browse/OCPBUGS-60222): CVO protects /metrics with authorization [#1223](https://github.com/openshift/cluster-version-operator/pull/1223)
* [OCPBUGS-55359](https://issues.redhat.com/browse/OCPBUGS-55359): install/0000_00_cluster-version-operator_01_admingate_configmap: Add ack-4.18-kube-1.32-api-removals-in-4.19 [#1181](https://github.com/openshift/cluster-version-operator/pull/1181)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/3646a107905b6c9c28cf52c5ae129a1e0d9cc9b4...b3d78f348154609ae86078caa4d416c592f3662e)


### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/e2aaf00a381b57874178a4272f3bc5257cf8dd98)

* append .0 to go.mod version [#69](https://github.com/openshift/configmap-reload/pull/69)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/cde5e473c23ca38917fe7e8ebdf7d15c467d977d...e2aaf00a381b57874178a4272f3bc5257cf8dd98)


### [console](https://github.com/openshift/console/tree/9b0a1a1022cabc2aa94ff6d8fecb513fceffc58b)

* [OCPBUGS-54660](https://issues.redhat.com/browse/OCPBUGS-54660): Added patternfly/react-topology to shared module list of dynamic plugin sdk [#15371](https://github.com/openshift/console/pull/15371)
* [OCPBUGS-50570](https://issues.redhat.com/browse/OCPBUGS-50570): Fix regression where plugins were not tracking CSP violation status a… [#14754](https://github.com/openshift/console/pull/14754)
* [OCPBUGS-60140](https://issues.redhat.com/browse/OCPBUGS-60140): Recognize Detached BMH status [#15362](https://github.com/openshift/console/pull/15362)
* [OCPBUGS-54660](https://issues.redhat.com/browse/OCPBUGS-54660): Add BaseNode in topology folder into Dynamic Plugin SDK [#15369](https://github.com/openshift/console/pull/15369)
* : OCPBUGS-60278: Fix i18n string for event stream [#15403](https://github.com/openshift/console/pull/15403)
* [OCPBUGS-54660](https://issues.redhat.com/browse/OCPBUGS-54660): Expose OdcBaseNode through the dynamic plugin SDK [#15370](https://github.com/openshift/console/pull/15370)
* [OCPBUGS-54660](https://issues.redhat.com/browse/OCPBUGS-54660): Expose topology components and utils via plugin SDK internal package [#14777](https://github.com/openshift/console/pull/14777)
* [OCPBUGS-58364](https://issues.redhat.com/browse/OCPBUGS-58364): change '/metrics/usage' endpoint to '/api/metrics/usage' [#15272](https://github.com/openshift/console/pull/15272)
* [OCPBUGS-59778](https://issues.redhat.com/browse/OCPBUGS-59778): add data-test attrs to console plugins table [#15327](https://github.com/openshift/console/pull/15327)
* [OCPBUGS-59786](https://issues.redhat.com/browse/OCPBUGS-59786): Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image [#15330](https://github.com/openshift/console/pull/15330)
* [OCPBUGS-59501](https://issues.redhat.com/browse/OCPBUGS-59501): Add the Origin header to the HeaderBlacklist in the co… [#15295](https://github.com/openshift/console/pull/15295)
* [OCPBUGS-59443](https://issues.redhat.com/browse/OCPBUGS-59443): Not able to launch terminal window from OCP web console due to console plugin conflicts [#15290](https://github.com/openshift/console/pull/15290)
* [OCPBUGS-59446](https://issues.redhat.com/browse/OCPBUGS-59446): Cannot read properties of undefined (reading 'node-role.kubernetes.io/master') error while accessing node logs from console [#15292](https://github.com/openshift/console/pull/15292)
* [OCPBUGS-58457](https://issues.redhat.com/browse/OCPBUGS-58457): fix bug where / in console.tab/horizontalNav href brea… [#15250](https://github.com/openshift/console/pull/15250)
* [OCPBUGS-58203](https://issues.redhat.com/browse/OCPBUGS-58203): OpenShift console PVC clone cannot use B as the unit [#15215](https://github.com/openshift/console/pull/15215)
* [OCPBUGS-58317](https://issues.redhat.com/browse/OCPBUGS-58317): Implement sessions in openshift authenticator [#15237](https://github.com/openshift/console/pull/15237)
* [OCPBUGS-58088](https://issues.redhat.com/browse/OCPBUGS-58088): Cannot read properties of undefined (reading 'filter') error while accessing nodes from console. [#15202](https://github.com/openshift/console/pull/15202)
* [OCPBUGS-58089](https://issues.redhat.com/browse/OCPBUGS-58089): Getting "Oh no something went wrong" error message in web console. [#15203](https://github.com/openshift/console/pull/15203)
* [OCPBUGS-57931](https://issues.redhat.com/browse/OCPBUGS-57931): Add the ability to launch multiple modals with useModal hook [#15196](https://github.com/openshift/console/pull/15196)
* [OCPBUGS-57580](https://issues.redhat.com/browse/OCPBUGS-57580): Update vSphere configuration form to support CM YAML f… [#15191](https://github.com/openshift/console/pull/15191)
* [OCPBUGS-57743](https://issues.redhat.com/browse/OCPBUGS-57743): Fix TypeError Cannot read properties of null (reading 'metadata') [#15188](https://github.com/openshift/console/pull/15188)
* [OCPBUGS-57209](https://issues.redhat.com/browse/OCPBUGS-57209): Add flags in console static plugin for all the components of this epic [#15160](https://github.com/openshift/console/pull/15160)
* [OCPBUGS-36173](https://issues.redhat.com/browse/OCPBUGS-36173): Secret key with binary file changes when edited via Console. [#15178](https://github.com/openshift/console/pull/15178)
* [OCPBUGS-57181](https://issues.redhat.com/browse/OCPBUGS-57181): Fix '/metrics' endpoint token review to handle interna… [#15153](https://github.com/openshift/console/pull/15153)
* [OCPBUGS-57353](https://issues.redhat.com/browse/OCPBUGS-57353): fix VirtualizedTable runtime error if sortColumn is no… [#15173](https://github.com/openshift/console/pull/15173)
* [OCPBUGS-57093](https://issues.redhat.com/browse/OCPBUGS-57093): Add all files to `vendor` regardless of gitignore [#15131](https://github.com/openshift/console/pull/15131)
* [OCPBUGS-56774](https://issues.redhat.com/browse/OCPBUGS-56774): [knative] Self-provisioner user can not access or create event sources via ODC [#15095](https://github.com/openshift/console/pull/15095)
* [OCPBUGS-56862](https://issues.redhat.com/browse/OCPBUGS-56862): Sample segment sessions [#15103](https://github.com/openshift/console/pull/15103)
* [OCPBUGS-56757](https://issues.redhat.com/browse/OCPBUGS-56757): HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling [#15093](https://github.com/openshift/console/pull/15093)
* [OCPBUGS-54337](https://issues.redhat.com/browse/OCPBUGS-54337): Debug pod logs are not accessible when debugging a node via OpenShift Console [#14942](https://github.com/openshift/console/pull/14942)
* [OCPBUGS-56255](https://issues.redhat.com/browse/OCPBUGS-56255): remove 60 day alert from cluster update modal [#15055](https://github.com/openshift/console/pull/15055)
* [OCPBUGS-55991](https://issues.redhat.com/browse/OCPBUGS-55991): Remove the devconsole backend common internet proxy and replace it with dedicated ones [#15043](https://github.com/openshift/console/pull/15043)
* [OCPBUGS-53172](https://issues.redhat.com/browse/OCPBUGS-53172): Include init containers in readiness count if ready and started is true [#14884](https://github.com/openshift/console/pull/14884)
* [OCPBUGS-54899](https://issues.redhat.com/browse/OCPBUGS-54899): Fetching taskRuns in PLR details page using PLR UID also [#14961](https://github.com/openshift/console/pull/14961)
* [OCPBUGS-54888](https://issues.redhat.com/browse/OCPBUGS-54888): Can't edit deployment (from the private git repository) in RHOCP 4.15 via console [#14959](https://github.com/openshift/console/pull/14959)
* [OCPBUGS-45369](https://issues.redhat.com/browse/OCPBUGS-45369): Authenticate user token in openshift Authenticate func [#14664](https://github.com/openshift/console/pull/14664)
* [OCPBUGS-55195](https://issues.redhat.com/browse/OCPBUGS-55195): fix bug where operator appears twice [#14984](https://github.com/openshift/console/pull/14984)
* [OCPBUGS-54269](https://issues.redhat.com/browse/OCPBUGS-54269): fix bug where /k8s/all-namespaces/volumesnapshots 404s [#14905](https://github.com/openshift/console/pull/14905)
* [OCPBUGS-52372](https://issues.redhat.com/browse/OCPBUGS-52372): VolumeSnapshots are not displayed in OpenShift Web Console [#14833](https://github.com/openshift/console/pull/14833)
* [OCPBUGS-52406](https://issues.redhat.com/browse/OCPBUGS-52406): Retain original path when detecting perspective [#14834](https://github.com/openshift/console/pull/14834)
* [OCPBUGS-52371](https://issues.redhat.com/browse/OCPBUGS-52371): Update the monitoring topic used by the console team [#14832](https://github.com/openshift/console/pull/14832)
* [OCPBUGS-52490](https://issues.redhat.com/browse/OCPBUGS-52490): enable clicking outside NodeLogs Selects to close them [#14843](https://github.com/openshift/console/pull/14843)
* [OCPBUGS-50501](https://issues.redhat.com/browse/OCPBUGS-50501): Updating cypress config to have video enabled for the CI results [#14831](https://github.com/openshift/console/pull/14831)
* [OCPBUGS-52511](https://issues.redhat.com/browse/OCPBUGS-52511): Remove logoutOpenShift method call [#14845](https://github.com/openshift/console/pull/14845)
* [OCPBUGS-50609](https://issues.redhat.com/browse/OCPBUGS-50609): update the Deployment pod on change in imageStream [#14757](https://github.com/openshift/console/pull/14757)
* [OCPBUGS-50648](https://issues.redhat.com/browse/OCPBUGS-50648): add support for "OpenShift Virtualization Engine" valid subscription filter on OperatorHub [#14761](https://github.com/openshift/console/pull/14761)
* [OCPBUGS-51086](https://issues.redhat.com/browse/OCPBUGS-51086): Show Observe section without PROMETHEUS and MONITORING flags [#14784](https://github.com/openshift/console/pull/14784)
* [OCPBUGS-48798](https://issues.redhat.com/browse/OCPBUGS-48798): Pipeline visualisation shows all tasks as Failed and after that goes to Running state [#14698](https://github.com/openshift/console/pull/14698)
* [OCPBUGS-51180](https://issues.redhat.com/browse/OCPBUGS-51180): Linkify OLM operator uninstall message [#14789](https://github.com/openshift/console/pull/14789)
* [OCPBUGS-51149](https://issues.redhat.com/browse/OCPBUGS-51149): Do not load CSRs if user does not have permissions [#14787](https://github.com/openshift/console/pull/14787)
* [Full changelog](https://github.com/openshift/console/compare/478e9451a372c184ef12713b9d7f840a06444064...9b0a1a1022cabc2aa94ff6d8fecb513fceffc58b)


### [console-operator](https://github.com/openshift/console-operator/tree/60dd3f557240d2408b7c12409d727732f8b355a3)

* [NETOBSERV-2023](https://issues.redhat.com/browse/NETOBSERV-2023), [OCPBUGS-60304](https://issues.redhat.com/browse/OCPBUGS-60304): Implement a quickstart for netobserv operator [#997](https://github.com/openshift/console-operator/pull/997)
* [OCPBUGS-60081](https://issues.redhat.com/browse/OCPBUGS-60081): Fetch synced CM for the CertificateAuthority issuer + Wire synced OIDC Auth CM to Console [#1031](https://github.com/openshift/console-operator/pull/1031)
* [OCPBUGS-59786](https://issues.redhat.com/browse/OCPBUGS-59786): Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image [#1027](https://github.com/openshift/console-operator/pull/1027)
* [OCPBUGS-45869](https://issues.redhat.com/browse/OCPBUGS-45869): don't set current clients when no OIDC providers are configured [#948](https://github.com/openshift/console-operator/pull/948)
* [OCPBUGS-52294](https://issues.redhat.com/browse/OCPBUGS-52294): Custom route TLS should be optional when IngressController's DefaultCertificate is set [#966](https://github.com/openshift/console-operator/pull/966)
* [Full changelog](https://github.com/openshift/console-operator/compare/49cd98bc72f18eefd6baf36b69fedaf305720ed5...60dd3f557240d2408b7c12409d727732f8b355a3)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/b4e1047104eb2d81dd46ebbb24fb88cdaf175b90)

* [OCPBUGS-56928](https://issues.redhat.com/browse/OCPBUGS-56928): bridge: Add option to enable port isolation [#203](https://github.com/openshift/containernetworking-plugins/pull/203)
* append .0 to go.mod version [#196](https://github.com/openshift/containernetworking-plugins/pull/196)
* : OCPBUGS-56928: Add a new firewall ingress-policy "isolated" [#191](https://github.com/openshift/containernetworking-plugins/pull/191)
* [OCPBUGS-55354](https://issues.redhat.com/browse/OCPBUGS-55354): Fix dhcp [#186](https://github.com/openshift/containernetworking-plugins/pull/186)
* [OCPBUGS-55346](https://issues.redhat.com/browse/OCPBUGS-55346): Check error returned by ipv6 SettleAddresses [#185](https://github.com/openshift/containernetworking-plugins/pull/185)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/24a653296bab25b772cf6a573cc26f6f884be4ae...b4e1047104eb2d81dd46ebbb24fb88cdaf175b90)


### [coredns](https://github.com/openshift/coredns/tree/eb75d9b4f41a5ce0258d6f245c6206715ecb283b)

* append .0 to go.mod version [#134](https://github.com/openshift/coredns/pull/134)
* [Full changelog](https://github.com/openshift/coredns/compare/cb1abfaeb7b0c5df4f0c56b0a009b439db1d0949...eb75d9b4f41a5ce0258d6f245c6206715ecb283b)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/f03b55e67d688991eb053b78e7dd2ed5a29304ba)

* [OCPBUGS-58835](https://issues.redhat.com/browse/OCPBUGS-58835): CARRY: don't ignore json files [#339](https://github.com/openshift/cloud-provider-openstack/pull/339)
* [OCPBUGS-43430](https://issues.redhat.com/browse/OCPBUGS-43430): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into release-4.18 [#312](https://github.com/openshift/cloud-provider-openstack/pull/312)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/90891d4634af0fe61393de5ad5b448eb5d070f48...f03b55e67d688991eb053b78e7dd2ed5a29304ba)


### [docker-builder](https://github.com/openshift/builder/tree/a5cbc2b1862e9fbf2bb0ca52ec54ce85e67f1d7f)

* [OCPBUGS-57758](https://issues.redhat.com/browse/OCPBUGS-57758): S2I build cpu limits observed by assemble are limited to 1 cpu [#473](https://github.com/openshift/builder/pull/473)
* [OCPBUGS-48071](https://issues.redhat.com/browse/OCPBUGS-48071): Upgrade Kubernetes to 1.30.2 and Golang to 1.22 for compatibility [#464](https://github.com/openshift/builder/pull/464)
* [OCPBUGS-46580](https://issues.redhat.com/browse/OCPBUGS-46580): buildah dependency bump to 1.37.6 [#453](https://github.com/openshift/builder/pull/453)
* [Full changelog](https://github.com/openshift/builder/compare/336d783e6fb6d10c32b4e386523325751c33b3ee...a5cbc2b1862e9fbf2bb0ca52ec54ce85e67f1d7f)


### [docker-registry](https://github.com/openshift/image-registry/tree/cfa51ab4b60fc0e836547626a5fd02b97ee82708)

* [IR-526](https://issues.redhat.com/browse/IR-526): remove AWS region check [#437](https://github.com/openshift/image-registry/pull/437)
* [OCPBUGS-53657](https://issues.redhat.com/browse/OCPBUGS-53657): bump jwt and oauth dependencies [#430](https://github.com/openshift/image-registry/pull/430)
* [Full changelog](https://github.com/openshift/image-registry/compare/e36d3655ba8c33cff1afaa9f816ae2399f4cd42f...cfa51ab4b60fc0e836547626a5fd02b97ee82708)


### [etcd](https://github.com/openshift/etcd/tree/b5a4f8d079fbb04200251d5a6bc7c56f79d9d1e3)

* [OCPBUGS-57112](https://issues.redhat.com/browse/OCPBUGS-57112): Updating ose-etcd-container image to be consistent with ART for 4.18 [#333](https://github.com/openshift/etcd/pull/333)
* Revert "ETCD-727: Rebase etcd 3.5.21 openshift 4.18" [#332](https://github.com/openshift/etcd/pull/332)
* [ETCD-727](https://issues.redhat.com/browse/ETCD-727): Rebase etcd 3.5.21 openshift 4.18 [#325](https://github.com/openshift/etcd/pull/325)
* [OCPBUGS-55724](https://issues.redhat.com/browse/OCPBUGS-55724): Add configurable option for hardware-related timeout delay [#328](https://github.com/openshift/etcd/pull/328)
* DOWNSTREAM: &lt;carry&gt;: OCPBUGS-51971: fix a compaction induce latency issue [#312](https://github.com/openshift/etcd/pull/312)
* [ETCD-708](https://issues.redhat.com/browse/ETCD-708): Rebase etcd 3.5.18 openshift 4.18 [#307](https://github.com/openshift/etcd/pull/307)
* [Full changelog](https://github.com/openshift/etcd/compare/914783cae63a13b90971c65e28c3349c1ecb7dfb...b5a4f8d079fbb04200251d5a6bc7c56f79d9d1e3)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/1fff69026f5478680ee535531ab8dc2fb76f2f5c)

* [OCPBUGS-58861](https://issues.redhat.com/browse/OCPBUGS-58861): Update manifests to remove reliance on admission registration v1beta1 [#247](https://github.com/openshift/cluster-api-provider-gcp/pull/247)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/af54f5287c7d363c6bc7abe4ad9e72f4131d534c...1fff69026f5478680ee535531ab8dc2fb76f2f5c)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/b2f858ba546520410f391b5f6afdbe0b1562903d)

* [OCPBUGS-59387](https://issues.redhat.com/browse/OCPBUGS-59387): Add max-concurrent-reconciles flag to machine actuator [#126](https://github.com/openshift/machine-api-provider-gcp/pull/126)
* [OCPBUGS-52495](https://issues.redhat.com/browse/OCPBUGS-52495): OCPBUGS-52494:  Disable shielded VMs for non-UEFI disks [#112](https://github.com/openshift/machine-api-provider-gcp/pull/112)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/a3716418ec55c5767f4dab86991ffad6161031e9...b2f858ba546520410f391b5f6afdbe0b1562903d)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/1b8c94ac55d8602ba6669325ade654ae47ea74cf)

* [OCPBUGS-44769](https://issues.redhat.com/browse/OCPBUGS-44769): Fix RWX mode for hyperdisks [#74](https://github.com/openshift/gcp-pd-csi-driver/pull/74)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/14fa4d9a2c2c66ee796035e01b39aa0f6f4cf7a5...1b8c94ac55d8602ba6669325ade654ae47ea74cf)


### [haproxy-router](https://github.com/openshift/router/tree/d8058949aaf91dcdea050c58e6a34ef5f6670c67)

* [OCPBUGS-48377](https://issues.redhat.com/browse/OCPBUGS-48377): Add support for IdleCloseTerminationPolicy [#647](https://github.com/openshift/router/pull/647)
* [Full changelog](https://github.com/openshift/router/compare/15430fd4fa51f63bb5413200fe524b670e79c1cf...d8058949aaf91dcdea050c58e6a34ef5f6670c67)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/3c7968e741684de8dc08ebc8aef1890b099eccae)

* [OCPBUGS-60524](https://issues.redhat.com/browse/OCPBUGS-60524): podresources: list: use active pods [#2413](https://github.com/openshift/kubernetes/pull/2413)
* UPSTREAM: revert&lt;carry&gt;: Mark admissionregistration.k8s.io/v1beta1 as deprecated." [#2422](https://github.com/openshift/kubernetes/pull/2422)
* [OCPBUGS-57488](https://issues.redhat.com/browse/OCPBUGS-57488): UPSTREAM: &lt;carry&gt;: Mark admissionregistration.k8s.io/v1beta1 as deprecated. [#2333](https://github.com/openshift/kubernetes/pull/2333)
* [OCPBUGS-57499](https://issues.redhat.com/browse/OCPBUGS-57499): UPSTREAM:131579: fix(kubelet): acquire imageRecordsLock when removing image [#2399](https://github.com/openshift/kubernetes/pull/2399)
* [OCPBUGS-44757](https://issues.redhat.com/browse/OCPBUGS-44757): Adjust NodeMonitorGracePeriod to 50s [#2385](https://github.com/openshift/kubernetes/pull/2385)
* [OCPBUGS-59535](https://issues.redhat.com/browse/OCPBUGS-59535): Rebase v1.31.11 to 4.18 [#2377](https://github.com/openshift/kubernetes/pull/2377)
* [OCPBUGS-57887](https://issues.redhat.com/browse/OCPBUGS-57887): Update to Kubernetes v1.31.10 [#2348](https://github.com/openshift/kubernetes/pull/2348)
* [OCPBUGS-57070](https://issues.redhat.com/browse/OCPBUGS-57070): UPSTREAM: &lt;carry&gt;: Bump cadvisor version to fix container_fs metrics [#2332](https://github.com/openshift/kubernetes/pull/2332)
* [OCPBUGS-57219](https://issues.redhat.com/browse/OCPBUGS-57219): kubelet: fix a stall on startup from waiting too long for a stat call [#2324](https://github.com/openshift/kubernetes/pull/2324)
* [OCPBUGS-56835](https://issues.redhat.com/browse/OCPBUGS-56835): UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver [#2316](https://github.com/openshift/kubernetes/pull/2316)
* [OCPBUGS-56384](https://issues.redhat.com/browse/OCPBUGS-56384): Propagate error when creating CustomResourceStorage instead of panicking [#2303](https://github.com/openshift/kubernetes/pull/2303)
* [OCPBUGS-56438](https://issues.redhat.com/browse/OCPBUGS-56438): Update to Kubernetes v1.31.9 [#2307](https://github.com/openshift/kubernetes/pull/2307)
* [OCPBUGS-56192](https://issues.redhat.com/browse/OCPBUGS-56192): UPSTREAM: 131236: RWX tests should create RWX volumes [#2300](https://github.com/openshift/kubernetes/pull/2300)
* UPSTREAM: 127757 : OCPBUGS-55639: scheduler: Improve CSILimits plugi… [#2283](https://github.com/openshift/kubernetes/pull/2283)
* [OCPBUGS-55267](https://issues.redhat.com/browse/OCPBUGS-55267): Update to Kubernetes v1.31.8 [#2278](https://github.com/openshift/kubernetes/pull/2278)
* : OCPBUGS-54807: skip tests on platform type External [#2268](https://github.com/openshift/kubernetes/pull/2268)
* [OCPBUGS-53015](https://issues.redhat.com/browse/OCPBUGS-53015): Update to Kubernetes v1.31.7 [#2248](https://github.com/openshift/kubernetes/pull/2248)
* [Full changelog](https://github.com/openshift/kubernetes/compare/6020cf5333bdeb77f95fa33f8272e5251ea28edc...3c7968e741684de8dc08ebc8aef1890b099eccae)


### [hypershift](https://github.com/openshift/hypershift/tree/e055b4b383bf7aa60e1dbe29ea436882ced60cc2)

* [OCPBUGS-60458](https://issues.redhat.com/browse/OCPBUGS-60458): Update PSA from v1beta1 to v1 [#6644](https://github.com/openshift/hypershift/pull/6644)
* [CNTRLPLANE-1269](https://issues.redhat.com/browse/CNTRLPLANE-1269): chore(deps): update konflux references [#6658](https://github.com/openshift/hypershift/pull/6658)
* [CNTRLPLANE-1205](https://issues.redhat.com/browse/CNTRLPLANE-1205): Add missing mce-2.8 pipeline [#6656](https://github.com/openshift/hypershift/pull/6656)
* [OCPBUGS-59503](https://issues.redhat.com/browse/OCPBUGS-59503): [release-4.18] Support proxy authentication when user/pass is included in URL [#6460](https://github.com/openshift/hypershift/pull/6460)
* [CNTRLPLANE-1229](https://issues.redhat.com/browse/CNTRLPLANE-1229): Move CPO pipeline to hermetic builds [#6597](https://github.com/openshift/hypershift/pull/6597)
* [OCPBUGS-57818](https://issues.redhat.com/browse/OCPBUGS-57818): Reuse hosted cluster release and metadata providers [#6301](https://github.com/openshift/hypershift/pull/6301)
* [OCPBUGS-58126](https://issues.redhat.com/browse/OCPBUGS-58126): Don't use /version for haproxy health checks [#6323](https://github.com/openshift/hypershift/pull/6323)
* [OCPBUGS-57273](https://issues.redhat.com/browse/OCPBUGS-57273): Add proxy variables for the MCD Pod [#6247](https://github.com/openshift/hypershift/pull/6247)
* [OCPBUGS-56166](https://issues.redhat.com/browse/OCPBUGS-56166), [OCPBUGS-56955](https://issues.redhat.com/browse/OCPBUGS-56955): Fix CatalogSource images check when unauthorized [#6237](https://github.com/openshift/hypershift/pull/6237)
* [OCPBUGS-56166](https://issues.redhat.com/browse/OCPBUGS-56166), [OCPBUGS-56955](https://issues.redhat.com/browse/OCPBUGS-56955): Add support for registry root entry only in the IDMS/ICSP [#6163](https://github.com/openshift/hypershift/pull/6163)
* [OCPBUGS-56627](https://issues.redhat.com/browse/OCPBUGS-56627): Do not validate OCP API Server SANS if PKI reconciliation is disabled [#6186](https://github.com/openshift/hypershift/pull/6186)
* [CNTRLPLANE-917](https://issues.redhat.com/browse/CNTRLPLANE-917): Konflux build pipeline service account migration [#6084](https://github.com/openshift/hypershift/pull/6084)
* [OCPBUGS-56524](https://issues.redhat.com/browse/OCPBUGS-56524): switch admissionregistration API to v1 [#6172](https://github.com/openshift/hypershift/pull/6172)
* [OCPBUGS-55177](https://issues.redhat.com/browse/OCPBUGS-55177): Don't check if olm images exist if guest cluster [#6065](https://github.com/openshift/hypershift/pull/6065)
* [OCPBUGS-55230](https://issues.redhat.com/browse/OCPBUGS-55230): Add annotation to configure KAS goaway-chance [#6066](https://github.com/openshift/hypershift/pull/6066)
* [OCPBUGS-54865](https://issues.redhat.com/browse/OCPBUGS-54865): KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled [#6020](https://github.com/openshift/hypershift/pull/6020)
* [OCPBUGS-54737](https://issues.redhat.com/browse/OCPBUGS-54737): Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests [#6052](https://github.com/openshift/hypershift/pull/6052)
* [OCPBUGS-55148](https://issues.redhat.com/browse/OCPBUGS-55148): Update OpenShift apiserver liveness and readiness probe endpoints to livez and readyz [#6059](https://github.com/openshift/hypershift/pull/6059)
* [OCPBUGS-54946](https://issues.redhat.com/browse/OCPBUGS-54946), [RHOCPPRIO-433](https://issues.redhat.com/browse/RHOCPPRIO-433): Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs [#6091](https://github.com/openshift/hypershift/pull/6091)
* [OCPBUGS-55146](https://issues.redhat.com/browse/OCPBUGS-55146): Use 135 for terminationGracePeriodSeconds for v2 KAS [#6057](https://github.com/openshift/hypershift/pull/6057)
* [OCPBUGS-54698](https://issues.redhat.com/browse/OCPBUGS-54698): Add missing servicemonitors and prometheusrules permissions for non-OVN [#6000](https://github.com/openshift/hypershift/pull/6000)
* [OCPBUGS-53404](https://issues.redhat.com/browse/OCPBUGS-53404): Set shutdown watch termination grace period on kube-apiserver [#5874](https://github.com/openshift/hypershift/pull/5874)
* [OCPBUGS-51810](https://issues.redhat.com/browse/OCPBUGS-51810): Fix golang crypto dependency go.mod replacement [#5992](https://github.com/openshift/hypershift/pull/5992)
* [OCPBUGS-54814](https://issues.redhat.com/browse/OCPBUGS-54814): [release-4.18] add feature set aware feature gates to HO and CPO [#6014](https://github.com/openshift/hypershift/pull/6014)
* [OCPBUGS-54624](https://issues.redhat.com/browse/OCPBUGS-54624): Don't set IgnitionServerTokenExpirationTimestampAnnotation if already set [#5980](https://github.com/openshift/hypershift/pull/5980)
* [OCPBUGS-54630](https://issues.redhat.com/browse/OCPBUGS-54630): Sync RBAC for attaching volumes on VM level [#5988](https://github.com/openshift/hypershift/pull/5988)
* [OCPBUGS-54627](https://issues.redhat.com/browse/OCPBUGS-54627): Use system trust bundle in CPO IDP https client [#5981](https://github.com/openshift/hypershift/pull/5981)
* [ARO-15695](https://issues.redhat.com/browse/ARO-15695), [OCPBUGS-54625](https://issues.redhat.com/browse/OCPBUGS-54625): backport capabilities api [#5964](https://github.com/openshift/hypershift/pull/5964)
* [OCPBUGS-54411](https://issues.redhat.com/browse/OCPBUGS-54411): Backport PR 5876 to release-4.18 [#5936](https://github.com/openshift/hypershift/pull/5936)
* [OCPBUGS-54498](https://issues.redhat.com/browse/OCPBUGS-54498): Support hypershift-operator scoping for secretJanitor [#5961](https://github.com/openshift/hypershift/pull/5961)
* [OCPBUGS-54609](https://issues.redhat.com/browse/OCPBUGS-54609): [release-4.18] fix(api): Adjust CRD validation rules to account for ignition server disable [#5950](https://github.com/openshift/hypershift/pull/5950)
* NO-JIRA: Red Hat Konflux update control-plane-operator-4-18 [#5963](https://github.com/openshift/hypershift/pull/5963)
* [OCPBUGS-53905](https://issues.redhat.com/browse/OCPBUGS-53905): bump golang-jwt v4 and v5 [#5905](https://github.com/openshift/hypershift/pull/5905)
* [ART-11792](https://issues.redhat.com/browse/ART-11792): update go mod dependency for konflux [#5919](https://github.com/openshift/hypershift/pull/5919)
* [OCPBUGS-51739](https://issues.redhat.com/browse/OCPBUGS-51739), [OCPBUGS-51810](https://issues.redhat.com/browse/OCPBUGS-51810): Bump dependencies to OCP fork in backports [#5898](https://github.com/openshift/hypershift/pull/5898)
* [OCPBUGS-53321](https://issues.redhat.com/browse/OCPBUGS-53321): Handle multiple mirror entries for source [#5890](https://github.com/openshift/hypershift/pull/5890)
* [OCPBUGS-51239](https://issues.redhat.com/browse/OCPBUGS-51239): fix(deps): bump go-jose [#5858](https://github.com/openshift/hypershift/pull/5858)
* [OCPBUGS-52982](https://issues.redhat.com/browse/OCPBUGS-52982): Fix audit-logs container to properly handle SIGTERM [#5774](https://github.com/openshift/hypershift/pull/5774)
* [OCPBUGS-52863](https://issues.redhat.com/browse/OCPBUGS-52863): stop using dev mode for loggers [#5811](https://github.com/openshift/hypershift/pull/5811)
* [OCPBUGS-52878](https://issues.redhat.com/browse/OCPBUGS-52878): Kubernetes API Server apply-bootstrap container does not respect SIGTERM [#5780](https://github.com/openshift/hypershift/pull/5780)
* [OCPBUGS-52516](https://issues.redhat.com/browse/OCPBUGS-52516): Make managed-trust-bundle optional [#5783](https://github.com/openshift/hypershift/pull/5783)
* [OCPBUGS-52417](https://issues.redhat.com/browse/OCPBUGS-52417): [release-4.18] refactor aws identity health check into new controller [#5770](https://github.com/openshift/hypershift/pull/5770)
* [OCPBUGS-51375](https://issues.redhat.com/browse/OCPBUGS-51375): use registryOverrides when automaitcally retrieving catalog images for hosted control plane [#5723](https://github.com/openshift/hypershift/pull/5723)
* [Full changelog](https://github.com/openshift/hypershift/compare/b1be2a651f26e755fd37f631273a74876a8a3893...e055b4b383bf7aa60e1dbe29ea436882ced60cc2)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/c7d883c586f548093481d87d7226d875502b30da)

* [OCPBUGS-58741](https://issues.redhat.com/browse/OCPBUGS-58741): bump github.com/golang/glog to version v1.2.4 [#104](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/104)
* append .0 to go.mod version [#96](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/96)
* [OCPBUGS-55283](https://issues.redhat.com/browse/OCPBUGS-55283): tech debt: rework vendor patches [#89](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/89)
* [OCPBUGS-53913](https://issues.redhat.com/browse/OCPBUGS-53913): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#82](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/82)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/59a8340c20192b70c5d597555554856d3712aee9...c7d883c586f548093481d87d7226d875502b30da)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/1c7bc07e69c1e74a36b39b31f878da6391fdeefe)

* [OCPBUGS-55297](https://issues.redhat.com/browse/OCPBUGS-55297): [IBM VPC] set offlineExpansion to false in e2e test manifest [#144](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/144)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/feae260577a5ed5428432de9b7ca1439c98064de...1c7bc07e69c1e74a36b39b31f878da6391fdeefe)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/5df161611ece493f54bb8a14963449102b763836)

* [OCPBUGS-51825](https://issues.redhat.com/browse/OCPBUGS-51825): CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork [#120](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/120)
* [OCPBUGS-58861](https://issues.redhat.com/browse/OCPBUGS-58861): Update manifests to remove reliance on admission registration v1beta1 [#119](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/119)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/2ba764f9a38c27f82a9198472c584fa633c8f2cd...5df161611ece493f54bb8a14963449102b763836)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/e6eddf85c26eb056108b67fdad43bbbd2d9b4718)

* [OCPBUGS-47135](https://issues.redhat.com/browse/OCPBUGS-47135): CVE-2024-45338 ose-ibmcloud-machine-controllers-container: Non-linear parsing of case-insensitive content in golang.org/x/net/html [openshift-4.18] [#69](https://github.com/openshift/machine-api-provider-ibmcloud/pull/69)
* [OCPBUGS-52872](https://issues.redhat.com/browse/OCPBUGS-52872): IBMCloud: MAPI replacing unhealthy CP nodes [#62](https://github.com/openshift/machine-api-provider-ibmcloud/pull/62)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/0fdb727264afaa7f02c8bd602f3769427e520300...e6eddf85c26eb056108b67fdad43bbbd2d9b4718)


### [insights-operator](https://github.com/openshift/insights-operator/tree/f6ca835b30d24ebe76ad2d80be638776cc4a5cdd)

* feat: add permissions to gather clusterrole (#1113) [#1113](https://github.com/openshift/insights-operator/pull/1113)
* feat: copy proxy envs from IO pod to gathering pods (#1105) [#1105](https://github.com/openshift/insights-operator/pull/1105)
* [OCPBUGS-51163](https://issues.redhat.com/browse/OCPBUGS-51163): Fix bad IPv6 address (#1074) [#1074](https://github.com/openshift/insights-operator/pull/1074)
* [Full changelog](https://github.com/openshift/insights-operator/compare/8a9746e4b1bbe139d162ecc894041495059dac4a...f6ca835b30d24ebe76ad2d80be638776cc4a5cdd)


### [ironic](https://github.com/openshift/ironic-image/tree/9161a5fdb75042856bd40eec31bdba7b7c07d4a2)

* [OCPBUGS-55938](https://issues.redhat.com/browse/OCPBUGS-55938): Extract files one-by-one in logwatch [#657](https://github.com/openshift/ironic-image/pull/657)
* [METAL-1302](https://issues.redhat.com/browse/METAL-1302): Do not use openstack packages [#646](https://github.com/openshift/ironic-image/pull/646)
* [OCPBUGS-52290](https://issues.redhat.com/browse/OCPBUGS-52290): Fix runlogwatch script [#642](https://github.com/openshift/ironic-image/pull/642)
* [Full changelog](https://github.com/openshift/ironic-image/compare/afb7947613cac32c5c136e1757d7f21d0b034dd9...9161a5fdb75042856bd40eec31bdba7b7c07d4a2)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/b79bddef03460124923c7ce8616d83f719a49960)

* [OCPBUGS-56097](https://issues.redhat.com/browse/OCPBUGS-56097): collect the entire journal from the host [#189](https://github.com/openshift/ironic-agent-image/pull/189)
* [OCPBUGS-55364](https://issues.redhat.com/browse/OCPBUGS-55364): Delay determining the hostname to put into ignition [#183](https://github.com/openshift/ironic-agent-image/pull/183)
* [METAL-1302](https://issues.redhat.com/browse/METAL-1302): Do not use openstack packages [#178](https://github.com/openshift/ironic-agent-image/pull/178)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/a26fffeb4d36b22951095e20988f1757044e8d2a...b79bddef03460124923c7ce8616d83f719a49960)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/50ca44fd48943433d502e8bcff3804f5cac7cb5a)

* append .0 to go.mod version [#103](https://github.com/openshift/ironic-rhcos-downloader/pull/103)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/04c22eee43786b4a8bc53441b7e8173372251bd8...50ca44fd48943433d502e8bcff3804f5cac7cb5a)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/c0f1886ab08d8c2ed84c9ea648b3f65cd82dc5f5)

* NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-18). [#225](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/225)
* append .0 to go.mod version [#216](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/216)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/50d17147f15d8b216e7c41f91d1bd7d307ca8c73...c0f1886ab08d8c2ed84c9ea648b3f65cd82dc5f5)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/2111495e6d03f1bfe0702996fdd1355ca21b78cf)

* [OCPBUGS-54630](https://issues.redhat.com/browse/OCPBUGS-54630): Ensure volume stays attached through reboots [#55](https://github.com/openshift/kubevirt-csi-driver/pull/55)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/ba2234bd5974a6f9dae6d7f9caec56485351db0a...2111495e6d03f1bfe0702996fdd1355ca21b78cf)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/6261ac9a27cfa7e3c85932ce8347fb1969cb3fdc)

* [OCPBUGS-57057](https://issues.redhat.com/browse/OCPBUGS-57057): Updates GCP CredentialsRequest [#1376](https://github.com/openshift/machine-api-operator/pull/1376)
* [OCPBUGS-52494](https://issues.redhat.com/browse/OCPBUGS-52494), [OCPBUGS-52496](https://issues.redhat.com/browse/OCPBUGS-52496): Updates GCP credentials request [#1341](https://github.com/openshift/machine-api-operator/pull/1341)
* [OCPBUGS-52567](https://issues.redhat.com/browse/OCPBUGS-52567): add image/read permissions [#1342](https://github.com/openshift/machine-api-operator/pull/1342)
* [OCPBUGS-51263](https://issues.redhat.com/browse/OCPBUGS-51263): Drop oVirt support [#1333](https://github.com/openshift/machine-api-operator/pull/1333)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/53c01a7cc698b55ec71b3000f0781dfa267f6168...6261ac9a27cfa7e3c85932ce8347fb1969cb3fdc)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/6cabdc1467e3bcc9961544e148530a9c88789856)

* [OCPBUGS-57357](https://issues.redhat.com/browse/OCPBUGS-57357): Race in configure-ovs.sh affects bonding interface configuration. [#5118](https://github.com/openshift/machine-config-operator/pull/5118)
* [OCPBUGS-59929](https://issues.redhat.com/browse/OCPBUGS-59929), [OPNET-681](https://issues.redhat.com/browse/OPNET-681): Support migration to NMState [#5207](https://github.com/openshift/machine-config-operator/pull/5207)
* [OCPBUGS-60034](https://issues.redhat.com/browse/OCPBUGS-60034): Add workaround fix for static pod race [#5212](https://github.com/openshift/machine-config-operator/pull/5212)
* [OCPBUGS-56751](https://issues.redhat.com/browse/OCPBUGS-56751): Support NODEIP_HINT in IPI deployments too [#5081](https://github.com/openshift/machine-config-operator/pull/5081)
* [OCPBUGS-55246](https://issues.redhat.com/browse/OCPBUGS-55246): kubelet: readonly mounts for criometricsproxy [#4998](https://github.com/openshift/machine-config-operator/pull/4998)
* [OCPBUGS-58067](https://issues.redhat.com/browse/OCPBUGS-58067): Ensure the build controller restarts on upgrade [#5140](https://github.com/openshift/machine-config-operator/pull/5140)
* [OCPBUGS-57328](https://issues.redhat.com/browse/OCPBUGS-57328): Do not set cpu system reserve below the default value [#5152](https://github.com/openshift/machine-config-operator/pull/5152)
* [OCPBUGS-56624](https://issues.redhat.com/browse/OCPBUGS-56624): Give keepalived container chroot cap [#5073](https://github.com/openshift/machine-config-operator/pull/5073)
* [OCPBUGS-58044](https://issues.redhat.com/browse/OCPBUGS-58044): Boot image controller should correctly handle marketplace boot images [#5138](https://github.com/openshift/machine-config-operator/pull/5138)
* [OCPBUGS-57935](https://issues.redhat.com/browse/OCPBUGS-57935): add MachineConfiguration to CO related objects [#5134](https://github.com/openshift/machine-config-operator/pull/5134)
* [OCPBUGS-54463](https://issues.redhat.com/browse/OCPBUGS-54463): Update desired config in MCN on OCL update [#5026](https://github.com/openshift/machine-config-operator/pull/5026)
* [OCPBUGS-57900](https://issues.redhat.com/browse/OCPBUGS-57900): MCC complains about v1 MachineOSConfig in default featureset [#5131](https://github.com/openshift/machine-config-operator/pull/5131)
* [OCPBUGS-56900](https://issues.redhat.com/browse/OCPBUGS-56900): Fix `dynamic-system-reserved-calc.sh` when only `true` parameter is used [#5095](https://github.com/openshift/machine-config-operator/pull/5095)
* [OCPBUGS-56517](https://issues.redhat.com/browse/OCPBUGS-56517): pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition [#5065](https://github.com/openshift/machine-config-operator/pull/5065)
* [OCPBUGS-56585](https://issues.redhat.com/browse/OCPBUGS-56585): scope MCD node listers to current node [#5068](https://github.com/openshift/machine-config-operator/pull/5068)
* [OCPBUGS-56867](https://issues.redhat.com/browse/OCPBUGS-56867): Only update boot disks during GCP boot image updates [#5089](https://github.com/openshift/machine-config-operator/pull/5089)
* [OCPBUGS-56823](https://issues.redhat.com/browse/OCPBUGS-56823): Boot Image Controller should not degrade when golden configmap is slow to update [#5085](https://github.com/openshift/machine-config-operator/pull/5085)
* [OCPBUGS-56703](https://issues.redhat.com/browse/OCPBUGS-56703): daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers [#5078](https://github.com/openshift/machine-config-operator/pull/5078)
* Merge [#5025](https://github.com/openshift/machine-config-operator/pull/5025)
* [OCPBUGS-56401](https://issues.redhat.com/browse/OCPBUGS-56401): Add hot loop detection in the boot image controller [#5062](https://github.com/openshift/machine-config-operator/pull/5062)
* [OCPBUGS-55638](https://issues.redhat.com/browse/OCPBUGS-55638): OCPBUGS-55637: Add admin_acks handling in the MCO [#5027](https://github.com/openshift/machine-config-operator/pull/5027)
* [OCPBUGS-56217](https://issues.redhat.com/browse/OCPBUGS-56217): Compare the osImageURLs for OS validation check [#5052](https://github.com/openshift/machine-config-operator/pull/5052)
* [OCPBUGS-56170](https://issues.redhat.com/browse/OCPBUGS-56170): error from generateAndValidateRenderedMachineConfig function can be misleading [#5049](https://github.com/openshift/machine-config-operator/pull/5049)
* [OCPBUGS-55383](https://issues.redhat.com/browse/OCPBUGS-55383): Leverage shared node.env for both AWS providerID and hostname units [#5008](https://github.com/openshift/machine-config-operator/pull/5008)
* [OCPBUGS-53427](https://issues.redhat.com/browse/OCPBUGS-53427): pkg/operator/status: Drop kubelet skew guard, add RHEL guard [#4956](https://github.com/openshift/machine-config-operator/pull/4956)
* [release 4.18] OCPBUGS-55473: In OCL. Usbguard service fails when we install the usbguard extension [#5018](https://github.com/openshift/machine-config-operator/pull/5018)
* [OCPBUGS-54765](https://issues.redhat.com/browse/OCPBUGS-54765): [release-4.18] kubelet-service: narrow down restorecon path [#4978](https://github.com/openshift/machine-config-operator/pull/4978)
* [OCPBUGS-55428](https://issues.redhat.com/browse/OCPBUGS-55428): MSBIC should not update windows machinesets [#5012](https://github.com/openshift/machine-config-operator/pull/5012)
* [OCPBUGS-55290](https://issues.redhat.com/browse/OCPBUGS-55290): MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists [#5000](https://github.com/openshift/machine-config-operator/pull/5000)
* [OCPBUGS-55293](https://issues.redhat.com/browse/OCPBUGS-55293): Fix PollUntilContextTimeout in syncRenderConfig [#5001](https://github.com/openshift/machine-config-operator/pull/5001)
* Update cluster operator's status condition message [#4993](https://github.com/openshift/machine-config-operator/pull/4993)
* [OCPBUGS-53278](https://issues.redhat.com/browse/OCPBUGS-53278): In OCL. Cannot install extensions [#4945](https://github.com/openshift/machine-config-operator/pull/4945)
* [OCPBUGS-54817](https://issues.redhat.com/browse/OCPBUGS-54817): Make mtu-migration run after wait-for-primary-ip [#4979](https://github.com/openshift/machine-config-operator/pull/4979)
* [OKD-239](https://issues.redhat.com/browse/OKD-239): Consolidate OpenStack and PowerVS hostname handling into mco-hostname script [#4955](https://github.com/openshift/machine-config-operator/pull/4955)
* [OCPBUGS-54462](https://issues.redhat.com/browse/OCPBUGS-54462): OSUpdateStarted event should only be emitted on actual OS updates [#4967](https://github.com/openshift/machine-config-operator/pull/4967)
* [OCPBUGS-51132](https://issues.redhat.com/browse/OCPBUGS-51132): [release-4.18] /etc/crio/crio.conf.d/00-default should contain runtime_root for runc [#4869](https://github.com/openshift/machine-config-operator/pull/4869)
* [OCPBUGS-52949](https://issues.redhat.com/browse/OCPBUGS-52949): Add ipsec connect wait service [#4926](https://github.com/openshift/machine-config-operator/pull/4926)
* [OCPBUGS-53306](https://issues.redhat.com/browse/OCPBUGS-53306): Fixing typos for MachineConfigNode [#4927](https://github.com/openshift/machine-config-operator/pull/4927)
* [OCPNODE-2276](https://issues.redhat.com/browse/OCPNODE-2276): Set `Upgradeable=False` when cluster is on cgroup `v1` [#4921](https://github.com/openshift/machine-config-operator/pull/4921)
* [OCPBUGS-53111](https://issues.redhat.com/browse/OCPBUGS-53111): daemon: ensure ostree-finalize-staged is started before rebooting [#4918](https://github.com/openshift/machine-config-operator/pull/4918)
* [OCPBUGS-53110](https://issues.redhat.com/browse/OCPBUGS-53110): Update ObservedGeneration in KubeletConfig [#4917](https://github.com/openshift/machine-config-operator/pull/4917)
* [release 4.18] OCPBUGS-50954: In OCL, MCPs are reporting Updating=false while the image is being built [#4859](https://github.com/openshift/machine-config-operator/pull/4859)
* [OCPBUGS-50865](https://issues.redhat.com/browse/OCPBUGS-50865): Make resolv-prepender env file optional [#4855](https://github.com/openshift/machine-config-operator/pull/4855)
* [OCPBUGS-48809](https://issues.redhat.com/browse/OCPBUGS-48809): Enable nmstate-configuration on all platforms [#4804](https://github.com/openshift/machine-config-operator/pull/4804)
* [OCPBUGS-48296](https://issues.redhat.com/browse/OCPBUGS-48296): Update machine-config-daemon-pull.service to use custom policy for Podman &lt; 4.4.1 [#4788](https://github.com/openshift/machine-config-operator/pull/4788)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/7c298166c9057d806b1395e4a6fdd229e2aee508...6cabdc1467e3bcc9961544e148530a9c88789856)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/d9a71247dafd469182d4bd13ef227c9be82a1e32)

* append .0 to go.mod version [#134](https://github.com/openshift/image-customization-controller/pull/134)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/e905646a4aa24e6ad54f27776d3dfd64a7d6f609...d9a71247dafd469182d4bd13ef227c9be82a1e32)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/ab43283689560737ad32566dd59e0d3d77fee4e1)

* [OCPBUGS-53141](https://issues.redhat.com/browse/OCPBUGS-53141): Change rhcos release browser url [#55](https://github.com/openshift/machine-os-images/pull/55)
* [OCPBUGS-51266](https://issues.redhat.com/browse/OCPBUGS-51266): Decompress pxe file only if it's a valid compressed file [#52](https://github.com/openshift/machine-os-images/pull/52)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/6d082d8041b06d062f95dd2ad1445150f2c0b305...ab43283689560737ad32566dd59e0d3d77fee4e1)


### [metallb-frr](https://github.com/openshift/frr/tree/98ccbe64c9b76aabb6a7bb2ff8cf61cc8e6d9f91)

* [OCPBUGS-55343](https://issues.redhat.com/browse/OCPBUGS-55343): OpenShift Only: TEMPORARY: pin FRR version to known working rpm [#88](https://github.com/openshift/frr/pull/88)
* [OCPBUGS-48305](https://issues.redhat.com/browse/OCPBUGS-48305): Use metrics for readiness/liveness probes [#76](https://github.com/openshift/frr/pull/76)
* [Full changelog](https://github.com/openshift/frr/compare/1ad8f2e711d33fd0416b8e2b8d26a413d26b38e2...98ccbe64c9b76aabb6a7bb2ff8cf61cc8e6d9f91)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/fafea6bc427827c137eb312d9a8d31ad2893114e)

* NO-JIRA: update i18n strings [#508](https://github.com/openshift/monitoring-plugin/pull/508)
* [OCPBUGS-60199](https://issues.redhat.com/browse/OCPBUGS-60199): feat: add alerting rules tab to dev console [#493](https://github.com/openshift/monitoring-plugin/pull/493)
* [OCPBUGS-54314](https://issues.redhat.com/browse/OCPBUGS-54314): Fix "Export as CSV" [#461](https://github.com/openshift/monitoring-plugin/pull/461)
* [OU-724](https://issues.redhat.com/browse/OU-724): remove deleted image [#376](https://github.com/openshift/monitoring-plugin/pull/376)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/a5a82997a17cdcee03e9a4a58ac42c694d4174aa...fafea6bc427827c137eb312d9a8d31ad2893114e)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/0d7ea6c766349243ade17707af7bd2b43c3b4b8e)

* [OCPBUGS-58771](https://issues.redhat.com/browse/OCPBUGS-58771): Update the github.com/golang/glog module to v1.2.4 [#101](https://github.com/openshift/multus-admission-controller/pull/101)
* append .0 to go.mod version [#96](https://github.com/openshift/multus-admission-controller/pull/96)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/1b2791b74bdc5913697ab01515f0bdf0f3dfe7a0...0d7ea6c766349243ade17707af7bd2b43c3b4b8e)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/21fb8e05e5de697bbb4ec3c7ca685b0518aca82d)

* [OCPBUGS-47470](https://issues.redhat.com/browse/OCPBUGS-47470): adds getpodcontext (backport 4.18) [#259](https://github.com/openshift/multus-cni/pull/259)
* [Full changelog](https://github.com/openshift/multus-cni/compare/69733b264233684deb30defbc357a1ecf03c0d02...21fb8e05e5de697bbb4ec3c7ca685b0518aca82d)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/5f37d0c8195fa5e8b23cfd0ac4bec37eb1fa5c32)

* append .0 to go.mod version [#70](https://github.com/openshift/multus-networkpolicy/pull/70)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/82c77316ea4dcf0c14f8717984a1faa6f731b553...5f37d0c8195fa5e8b23cfd0ac4bec37eb1fa5c32)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/86191ded510a5ec05f05b77ae847b86f50673258)

* [OCPBUGS-59697](https://issues.redhat.com/browse/OCPBUGS-59697): Prevent accidental IP deallocation in statefulsets [#376](https://github.com/openshift/whereabouts-cni/pull/376)
* [OCPBUGS-58360](https://issues.redhat.com/browse/OCPBUGS-58360): The node slice controller should only process valid whereabouts confi… [#381](https://github.com/openshift/whereabouts-cni/pull/381)
* [OCPBUGS-58360](https://issues.redhat.com/browse/OCPBUGS-58360): Add nodeslicecontroller bin to dockerfile [#373](https://github.com/openshift/whereabouts-cni/pull/373)
* append .0 to go.mod version [#370](https://github.com/openshift/whereabouts-cni/pull/370)
* [OCPBUGS-55270](https://issues.redhat.com/browse/OCPBUGS-55270): Fix whereabouts-reconciler no namespace error [#362](https://github.com/openshift/whereabouts-cni/pull/362)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/74f285c3d6c642d96039067a5e99e8db85b146f9...86191ded510a5ec05f05b77ae847b86f50673258)


### [must-gather](https://github.com/openshift/must-gather/tree/02e536cc7b3a6632da0643ab78f8dd6570e7f122)

* [OCPBUGS-46437](https://issues.redhat.com/browse/OCPBUGS-46437): Separate resources with comma to fix malformed inspect [#470](https://github.com/openshift/must-gather/pull/470)
* append .0 to go.mod version [#491](https://github.com/openshift/must-gather/pull/491)
* [Full changelog](https://github.com/openshift/must-gather/compare/c864494e2b10793ec1de833ade2fda7afe6a7c88...02e536cc7b3a6632da0643ab78f8dd6570e7f122)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/a5e5e80be5698c12d3223cf377386baa977bc587)

* [OCPBUGS-58095](https://issues.redhat.com/browse/OCPBUGS-58095): Bump github.com/containernetworking/plugins from to 1.7.1 [#79](https://github.com/openshift/bond-cni/pull/79)
* [OCPBUGS-57794](https://issues.redhat.com/browse/OCPBUGS-57794): Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.18 [#74](https://github.com/openshift/bond-cni/pull/74)
* NO-JIRA: Add ci-operator yaml file [#78](https://github.com/openshift/bond-cni/pull/78)
* [Full changelog](https://github.com/openshift/bond-cni/compare/9506a1ff3e0b3b1cdddbd0fbb0ed687e289166b0...a5e5e80be5698c12d3223cf377386baa977bc587)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/11e2dec958aa2adcad07b9eecaf8f50479e0880a)

* [OCPBUGS-58781](https://issues.redhat.com/browse/OCPBUGS-58781): Bump github.com/golang/glog to v1.2.4 (#111) [#111](https://github.com/openshift/network-metrics-daemon/pull/111)
* [OCPBUGS-60174](https://issues.redhat.com/browse/OCPBUGS-60174): Replace e2e test image (#120) [#120](https://github.com/openshift/network-metrics-daemon/pull/120)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/e4c214c3736fcb69b3160421f06e9b1a837b300b...11e2dec958aa2adcad07b9eecaf8f50479e0880a)


### [network-tools](https://github.com/openshift/network-tools/tree/47b13549115a59d82dbf4c61f9160432608cb9d8)

* Fix build error [#147](https://github.com/openshift/network-tools/pull/147)
* [Full changelog](https://github.com/openshift/network-tools/compare/f76635f2dcfc14dd70e25cc3771c9ef59ef2a30f...47b13549115a59d82dbf4c61f9160432608cb9d8)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/15535681de838e97e0a137fb0cc7123746019b08)

* [OCPBUGS-60178](https://issues.redhat.com/browse/OCPBUGS-60178): Fix ingress details [#264](https://github.com/openshift/networking-console-plugin/pull/264)
* [OCPBUGS-60124](https://issues.redhat.com/browse/OCPBUGS-60124): Fix requiremenets with no value [#259](https://github.com/openshift/networking-console-plugin/pull/259)
* [OCPBUGS-57286](https://issues.redhat.com/browse/OCPBUGS-57286): Fix pod context [#251](https://github.com/openshift/networking-console-plugin/pull/251)
* [CNV-60065](https://issues.redhat.com/browse/CNV-60065): fix cudn input name [#240](https://github.com/openshift/networking-console-plugin/pull/240)
* [OCPBUGS-49395](https://issues.redhat.com/browse/OCPBUGS-49395): Add translations [#238](https://github.com/openshift/networking-console-plugin/pull/238)
* Add translations scripts [#234](https://github.com/openshift/networking-console-plugin/pull/234)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/d9f7f31c78c4f4eeee734936cd814ab0542e4ad0...15535681de838e97e0a137fb0cc7123746019b08)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/afe324bf56e0348fb45e5fbb9c832c1587482153)

* [OCPBUGS-51861](https://issues.redhat.com/browse/OCPBUGS-51861): fixing CVE-2025-22868 [#96](https://github.com/openshift/machine-api-provider-nutanix/pull/96)
* [OCPBUGS-54616](https://issues.redhat.com/browse/OCPBUGS-54616): Fix link-local addresses being added to machine [#101](https://github.com/openshift/machine-api-provider-nutanix/pull/101)
* [OCPBUGS-47268](https://issues.redhat.com/browse/OCPBUGS-47268): fixing CVE-2024-45338 [#91](https://github.com/openshift/machine-api-provider-nutanix/pull/91)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/9c2ff5e75240902a64b13aabbd39c0ae7b970473...afe324bf56e0348fb45e5fbb9c832c1587482153)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/91582506b4dc8344743ef8ce5e5cfa2773ff1773)

* [OCPBUGS-57172](https://issues.redhat.com/browse/OCPBUGS-57172): 4.18 kube 1.31 [#317](https://github.com/openshift/oauth-proxy/pull/317)
* [OCPBUGS-58312](https://issues.redhat.com/browse/OCPBUGS-58312): fix e2e tests [#325](https://github.com/openshift/oauth-proxy/pull/325)
* [OCPBUGS-48332](https://issues.redhat.com/browse/OCPBUGS-48332): Update dependencies to address CVE-2024-24786 [#312](https://github.com/openshift/oauth-proxy/pull/312)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/2957f139b4a9982163e4ee76fdc7c532669b6b9f...91582506b4dc8344743ef8ce5e5cfa2773ff1773)


### [oauth-server](https://github.com/openshift/oauth-server/tree/287caff3aef5b5f8535ac2bf1242671a5c7701b7)

* [OCPBUGS-57300](https://issues.redhat.com/browse/OCPBUGS-57300): Updating oauth-server-container image to be consistent with ART for 4.18 [#186](https://github.com/openshift/oauth-server/pull/186)
* append .0 to go.mod version [#179](https://github.com/openshift/oauth-server/pull/179)
* [Full changelog](https://github.com/openshift/oauth-server/compare/d3527783a5ceb1f33f790b7ab5edbea17f5cc6a8...287caff3aef5b5f8535ac2bf1242671a5c7701b7)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/f0d9279179b0d676387b7ed783452f2c6ecf3c8b)

* [OCPBUGS-54622](https://issues.redhat.com/browse/OCPBUGS-54622): cli/delete: fix workflow mode name output (#1229) [#1229](https://github.com/openshift/oc-mirror/pull/1229)
* [OCPBUGS-59396](https://issues.redhat.com/browse/OCPBUGS-59396): v2/archive: handle 0b mirror archive files (#1227) [#1227](https://github.com/openshift/oc-mirror/pull/1227)
* [OCPBUGS-59798](https://issues.redhat.com/browse/OCPBUGS-59798): Detect images from a Helm Chart with an aliased chart dependency (#1224) [#1224](https://github.com/openshift/oc-mirror/pull/1224)
* [OCPBUGS-59235](https://issues.redhat.com/browse/OCPBUGS-59235): [release-4.18] v2/archive: error d2m when no tar files found (#1212) [#1212](https://github.com/openshift/oc-mirror/pull/1212)
* [OCPBUGS-58280](https://issues.redhat.com/browse/OCPBUGS-58280): v2/defaults Fix rate limiting issues by enabling exponential backoff retries (#1206) [#1206](https://github.com/openshift/oc-mirror/pull/1206)
* [OCPBUGS-58272](https://issues.redhat.com/browse/OCPBUGS-58272): Fixes the tag when rebuilt catalog by digest only (#1204) [#1204](https://github.com/openshift/oc-mirror/pull/1204)
* [OCPBUGS-57387](https://issues.redhat.com/browse/OCPBUGS-57387): v2/archive: fix sanitization of `.` (#1196) [#1196](https://github.com/openshift/oc-mirror/pull/1196)
* [OCPBUGS-57461](https://issues.redhat.com/browse/OCPBUGS-57461): v2/operator: add rebuilt catalog to tar file (#1195) [#1195](https://github.com/openshift/oc-mirror/pull/1195)
* [OCPBUGS-57197](https://issues.redhat.com/browse/OCPBUGS-57197): [release-4.18] v2/cli: always remove past archives before m2d (#1176) [#1176](https://github.com/openshift/oc-mirror/pull/1176)
* [OCPBUGS-56486](https://issues.redhat.com/browse/OCPBUGS-56486): v2/config: allow `delete` and `mirror` words (#1175) [#1175](https://github.com/openshift/oc-mirror/pull/1175)
* [OCPBUGS-55701](https://issues.redhat.com/browse/OCPBUGS-55701): v2/imgbuilder: use --authfile when set (#1173) [#1173](https://github.com/openshift/oc-mirror/pull/1173)
* [OCPBUGS-56659](https://issues.redhat.com/browse/OCPBUGS-56659): v2/archive: print unarchive progress (#1160) [#1160](https://github.com/openshift/oc-mirror/pull/1160)
* [OCPBUGS-54653](https://issues.redhat.com/browse/OCPBUGS-54653): delete: continue on errors (#1146) [#1146](https://github.com/openshift/oc-mirror/pull/1146)
* [OCPBUGS-56043](https://issues.redhat.com/browse/OCPBUGS-56043): Fix mirroring images with tag&digest in charts (#1142) [#1142](https://github.com/openshift/oc-mirror/pull/1142)
* [OCPBUGS-54626](https://issues.redhat.com/browse/OCPBUGS-54626): [release-4.18] cli: return distinct error codes depending on failure (#1125) [#1125](https://github.com/openshift/oc-mirror/pull/1125)
* [OCPBUGS-55361](https://issues.redhat.com/browse/OCPBUGS-55361): v2/operator: refactor operator FilteredCollector (#1134) [#1134](https://github.com/openshift/oc-mirror/pull/1134)
* [OCPBUGS-51217](https://issues.redhat.com/browse/OCPBUGS-51217): Fix CVE-2025-27144 (#1108) [#1108](https://github.com/openshift/oc-mirror/pull/1108)
* [OCPBUGS-54727](https://issues.redhat.com/browse/OCPBUGS-54727): Use tag 0.0.3+2 of catalog-filter (#1128) [#1128](https://github.com/openshift/oc-mirror/pull/1128)
* [OCPBUGS-52978](https://issues.redhat.com/browse/OCPBUGS-52978): delete: fix typo in --help output (#1121) [#1121](https://github.com/openshift/oc-mirror/pull/1121)
* [OCPBUGS-52960](https://issues.redhat.com/browse/OCPBUGS-52960): v2: fix setting version during build (#1118) [#1118](https://github.com/openshift/oc-mirror/pull/1118)
* [OCPBUGS-52969](https://issues.redhat.com/browse/OCPBUGS-52969): remove TechPreview mentions of v2 in --help (#1114) [#1114](https://github.com/openshift/oc-mirror/pull/1114)
* [OCPBUGS-52588](https://issues.redhat.com/browse/OCPBUGS-52588): fix: error when no related image was found (#1106) [#1106](https://github.com/openshift/oc-mirror/pull/1106)
* [CLID-325](https://issues.redhat.com/browse/CLID-325): adds cpu and memory profiling (#1103) [#1103](https://github.com/openshift/oc-mirror/pull/1103)
* fixes CVE-2024-0406 (#1101) [#1101](https://github.com/openshift/oc-mirror/pull/1101)
* v2: disable spinners when not running in a tty (#1082) [#1082](https://github.com/openshift/oc-mirror/pull/1082)
* [OCPBUGS-49990](https://issues.redhat.com/browse/OCPBUGS-49990): v2/release: error out for kubevirt/graph image errors (#1081) [#1081](https://github.com/openshift/oc-mirror/pull/1081)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/fcb9fbb2878a502d51a290fe4c9275850d02a888...f0d9279179b0d676387b7ed783452f2c6ecf3c8b)


### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/9f981b3ee5822098c6e648aa30742da07318f954)

* UPSTREAM: 502: Upgrade golang.org/x/net (#502) [#502](https://github.com/openshift/operator-framework-catalogd/pull/502)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/2d0126fb2a3e187ad6586526cf2868cb38bde777...9f981b3ee5822098c6e648aa30742da07318f954)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/000dd09dfaab76307cd9f3b760dd8123d4aac07a)

* UPSTREAM: &lt;carry&gt;: fix crdupgradesafety diff when items schema differ (#1863) [#1863](https://github.com/openshift/operator-framework-operator-controller/pull/1863)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/7f28e1ef788d4d795d17f63b01602237fc7d2e5c...000dd09dfaab76307cd9f3b760dd8123d4aac07a)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/5d7a65bad932a0434928571b74db27588bb9be2d)

* [OCPBUGS-58461](https://issues.redhat.com/browse/OCPBUGS-58461): Wire dry run option to Image API server operations [#531](https://github.com/openshift/openshift-apiserver/pull/531)
* [OCPBUGS-56609](https://issues.redhat.com/browse/OCPBUGS-56609): Fix image reference in TestImageStreamImportQuayIO [#514](https://github.com/openshift/openshift-apiserver/pull/514)
* [OCPBUGS-52312](https://issues.redhat.com/browse/OCPBUGS-52312): Skip blocked registry check for registries with mirrors [#498](https://github.com/openshift/openshift-apiserver/pull/498)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/73d65dbb875ed0302360eabdeaf11658752d1499...5d7a65bad932a0434928571b74db27588bb9be2d)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/c87671821e6b05173e5bdc0aab1f80f29438e192)

* [OCPBUGS-57949](https://issues.redhat.com/browse/OCPBUGS-57949): ignore error failing to find pull/push secrets [#399](https://github.com/openshift/openshift-controller-manager/pull/399)
* [OCPBUGS-57344](https://issues.redhat.com/browse/OCPBUGS-57344): Set node-pullsecrets volume to read-only to protect image pull credentials [#392](https://github.com/openshift/openshift-controller-manager/pull/392)
* [OCPBUGS-55699](https://issues.redhat.com/browse/OCPBUGS-55699): Empty proxy variables are causing issues during the build [#377](https://github.com/openshift/openshift-controller-manager/pull/377)
* [OCPBUGS-54304](https://issues.redhat.com/browse/OCPBUGS-54304): Intermittent authentication issues when accessing OpenShift registry [#369](https://github.com/openshift/openshift-controller-manager/pull/369)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/5bfc8081a65ea3e0d23306c0398143a9987d659e...c87671821e6b05173e5bdc0aab1f80f29438e192)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/3cca6feee0d646331bdbc9d49732fbdf49448d41)

* append .0 to go.mod version [#123](https://github.com/openshift/openshift-state-metrics/pull/123)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/f5b14702aefd0ea480d9b5e7ba8717af36ba67e9...3cca6feee0d646331bdbc9d49732fbdf49448d41)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/ce2c2d17d9c489d776f0383869d453dff89b0462)

* [OCPBUGS-44458](https://issues.redhat.com/browse/OCPBUGS-44458): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into release-4.18 [#365](https://github.com/openshift/cluster-api-provider-openstack/pull/365)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/b0f0dc4e1a9123815cdc2124579b6f4367500a73...ce2c2d17d9c489d776f0383869d453dff89b0462)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/a62bebb1c75e41da8b01024f01a9b1e8a1fe3f8f)

* [OCPBUGS-60644](https://issues.redhat.com/browse/OCPBUGS-60644): Add NetworkPolicy as a supported kind [#1048](https://github.com/openshift/operator-framework-olm/pull/1048)
* [OCPBUGS-59421](https://issues.redhat.com/browse/OCPBUGS-59421): 🐛 add catalog-operator control-plane-specific tolerations to unpack jobs [#1040](https://github.com/openshift/operator-framework-olm/pull/1040)
* [OCPBUGS-58882](https://issues.redhat.com/browse/OCPBUGS-58882): Reduce Frequency of Update Requests for Copied CSVs (#3597) [#1034](https://github.com/openshift/operator-framework-olm/pull/1034)
* [OCPBUGS-57427](https://issues.redhat.com/browse/OCPBUGS-57427): reduce cache expiry frequency [release-4.19] [#1020](https://github.com/openshift/operator-framework-olm/pull/1020)
* [OCPBUGS-57314](https://issues.redhat.com/browse/OCPBUGS-57314): operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted [#1017](https://github.com/openshift/operator-framework-olm/pull/1017)
* [OCPBUGS-56098](https://issues.redhat.com/browse/OCPBUGS-56098): fix(olm): improve error logging for missing olm.managed label (#3558) [#1001](https://github.com/openshift/operator-framework-olm/pull/1001)
* [OCPBUGS-51225](https://issues.redhat.com/browse/OCPBUGS-51225), [OCPBUGS-51227](https://issues.redhat.com/browse/OCPBUGS-51227), [OCPBUGS-51245](https://issues.redhat.com/browse/OCPBUGS-51245): pin go-jose/v4@v4.0.5 (#3550) [#992](https://github.com/openshift/operator-framework-olm/pull/992)
* [OCPBUGS-53108](https://issues.redhat.com/browse/OCPBUGS-53108): Ensure that PSA label is latest instead of pinning versions [#983](https://github.com/openshift/operator-framework-olm/pull/983)
* [OCPBUGS-53040](https://issues.redhat.com/browse/OCPBUGS-53040): add missing pod disruption reasons to isPodDead [#981](https://github.com/openshift/operator-framework-olm/pull/981)
* [OCPBUGS-50830](https://issues.redhat.com/browse/OCPBUGS-50830), [OCPBUGS-50832](https://issues.redhat.com/browse/OCPBUGS-50832), [OCPBUGS-50836](https://issues.redhat.com/browse/OCPBUGS-50836): Bump github.com/distribution/distribution/v3 [#965](https://github.com/openshift/operator-framework-olm/pull/965)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/182471a8d72ee38d2ff82ce44db6903e66c4b22b...a62bebb1c75e41da8b01024f01a9b1e8a1fe3f8f)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/c06a810b321ad79ef572ce36ed935332a58ea319)

* [ART-13123](https://issues.redhat.com/browse/ART-13123): append .0 to go.mod version [#637](https://github.com/operator-framework/operator-marketplace/pull/637)
* [OCPBUGS-53149](https://issues.redhat.com/browse/OCPBUGS-53149): Ensure that PSA label is latest instead of pinning versions [#601](https://github.com/operator-framework/operator-marketplace/pull/601)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/5a1e906724ed6d88161f8faaa90e4fe447689725...c06a810b321ad79ef572ce36ed935332a58ea319)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/2cbd05df74c6ab851fc644a8614417f104d5a494)

* [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710): Update OWNERS file: Add Patryk/Martin as approvers [#2700](https://github.com/openshift/ovn-kubernetes/pull/2700)
* [OCPBUGS-59371](https://issues.redhat.com/browse/OCPBUGS-59371): EIP OVN controller: stop pod config flap [#2703](https://github.com/openshift/ovn-kubernetes/pull/2703)
* [OCPBUGS-59531](https://issues.redhat.com/browse/OCPBUGS-59531): EgressIP: fix startup syncer [#2690](https://github.com/openshift/ovn-kubernetes/pull/2690)
* [OCPBUGS-59623](https://issues.redhat.com/browse/OCPBUGS-59623): Revert "unpin libreswan version" [#2678](https://github.com/openshift/ovn-kubernetes/pull/2678)
* [OCPBUGS-57318](https://issues.redhat.com/browse/OCPBUGS-57318), [OCPBUGS-58159](https://issues.redhat.com/browse/OCPBUGS-58159): DownStream Merge Sync from 4.19 [06-26-2025] [#2646](https://github.com/openshift/ovn-kubernetes/pull/2646)
* [OCPBUGS-46401](https://issues.redhat.com/browse/OCPBUGS-46401), [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710), [OCPBUGS-55263](https://issues.redhat.com/browse/OCPBUGS-55263): DownStream Merge Sync from 4.19 [05-28-2025] [#2593](https://github.com/openshift/ovn-kubernetes/pull/2593)
* [OCPBUGS-57108](https://issues.redhat.com/browse/OCPBUGS-57108): Fix hybrid overlay node subnets collision with cluster subnets [#2619](https://github.com/openshift/ovn-kubernetes/pull/2619)
* [OCPBUGS-57106](https://issues.redhat.com/browse/OCPBUGS-57106): Increase InformerSyncTimeout to 60s [#2622](https://github.com/openshift/ovn-kubernetes/pull/2622)
* [OCPBUGS-55016](https://issues.redhat.com/browse/OCPBUGS-55016): DownStream Merge Sync from 4.19 [05-08-2025] [#2555](https://github.com/openshift/ovn-kubernetes/pull/2555)
* [OCPBUGS-54671](https://issues.redhat.com/browse/OCPBUGS-54671): EIP no reroute: allow multiple entries for pod to pod and pod to join [#2510](https://github.com/openshift/ovn-kubernetes/pull/2510)
* [OCPBUGS-54187](https://issues.redhat.com/browse/OCPBUGS-54187): Update OVN to FDP25.A.1 24.09.2-41. [#2495](https://github.com/openshift/ovn-kubernetes/pull/2495)
* [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710): DownStream Merge Sync from 4.19 [02-13-2025] [#2470](https://github.com/openshift/ovn-kubernetes/pull/2470)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/5f6ad07d88d8470b2d525803c60bdb5cd0164639...2cbd05df74c6ab851fc644a8614417f104d5a494)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/10ac06f57bface0b3481e111c4e1d5b7f52db7f4)

* [OCPBUGS-54243](https://issues.redhat.com/browse/OCPBUGS-54243): Fix for  CVE-2024-51744 in github.com/golang-jwt/jwt/v4 [#111](https://github.com/openshift/machine-api-provider-powervs/pull/111)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/e253fa30d99bb7ed00c1f27ca3d810fa682a1901...10ac06f57bface0b3481e111c4e1d5b7f52db7f4)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/35c1136915f7a6896dfcb479e1f686fd18542856)

* append .0 to go.mod version [#380](https://github.com/openshift/prom-label-proxy/pull/380)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/d9fe2d8ebc1b311be71172676d61710fd5c7400b...35c1136915f7a6896dfcb479e1f686fd18542856)


### [prometheus](https://github.com/openshift/prometheus/tree/df5ef25778ad5949c637beae1b9c303b4c044302)

* [OCPBUGS-56732](https://issues.redhat.com/browse/OCPBUGS-56732): BACKPORT: fix promtool analyze block shows metric name with 0 cardinality [#253](https://github.com/openshift/prometheus/pull/253)
* [OCPBUGS-54940](https://issues.redhat.com/browse/OCPBUGS-54940): Scraping: Bump cache iteration after error to avoid false duplicate detection. [#247](https://github.com/openshift/prometheus/pull/247)
* [Full changelog](https://github.com/openshift/prometheus/compare/8de8eb11dfe734331762bc8d4839ec3b47084743...df5ef25778ad5949c637beae1b9c303b4c044302)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/a432067579aaa60326a104f4ce2eba18e1ab444c)

* append .0 to go.mod version [#101](https://github.com/openshift/prometheus-alertmanager/pull/101)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/e513c918214acfa6f60ba5ab3e107f57fd3df156...a432067579aaa60326a104f4ce2eba18e1ab444c)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/74987748a60f14816975fa1070ce485393a38f64)

* [OCPBUGS-52565](https://issues.redhat.com/browse/OCPBUGS-52565): Bump openshift/prometheus-operator to v0.78.2 [#327](https://github.com/openshift/prometheus-operator/pull/327)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/ede3c1406e70f359c76c1403a2b14bc60ad386bf...74987748a60f14816975fa1070ce485393a38f64)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/92e17ff5c45807198adc8b59f5b3f63a9b7f1726)

* append .0 to go.mod version [#166](https://github.com/openshift/node_exporter/pull/166)
* [Full changelog](https://github.com/openshift/node_exporter/compare/b7efb8c0f7d45f4ccb9120d4bcfb60ebe721ed69...92e17ff5c45807198adc8b59f5b3f63a9b7f1726)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/ce6ffa24dac3a5f49f70818e1159e40eaf27a6a3)

* [OCPBUGS-55338](https://issues.redhat.com/browse/OCPBUGS-55338): Added error event for failed ingress to route conversion [#59](https://github.com/openshift/route-controller-manager/pull/59)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/07daee4d2f0b5c7aaca56ee45ff6dfdf97680db0...ce6ffa24dac3a5f49f70818e1159e40eaf27a6a3)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/30efb529a5b7db5d6f352f6ac0470d8385268539)

* [OCPBUGS-44952](https://issues.redhat.com/browse/OCPBUGS-44952): [release-4.18] Bump go to 1.22.0 [#253](https://github.com/openshift/service-ca-operator/pull/253)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/1f7d6472fea332fc307d9c8911f8c3cf57347755...30efb529a5b7db5d6f352f6ac0470d8385268539)


### [telemeter](https://github.com/openshift/telemeter/tree/490612bdaa6412762403c8eee902c20f033ca5aa)

* append .0 to go.mod version [#561](https://github.com/openshift/telemeter/pull/561)
* [Full changelog](https://github.com/openshift/telemeter/compare/700802fe29aba4ed602309f0c68222c4bedb08f5...490612bdaa6412762403c8eee902c20f033ca5aa)


### [tests](https://github.com/openshift/origin/tree/4df75d04c7d0d10e8a66d980460d22d41cd75900)

* [OCPBUGS-60881](https://issues.redhat.com/browse/OCPBUGS-60881): extended/machines: add --no-pager to journalctl cmds [#30180](https://github.com/openshift/origin/pull/30180)
* [OCPBUGS-60927](https://issues.redhat.com/browse/OCPBUGS-60927): Wait 30s after the upgrade is complete to validate workloads [#30179](https://github.com/openshift/origin/pull/30179)
* NO-JIRA: Update extended/networking OWNERS [#30089](https://github.com/openshift/origin/pull/30089)
* [OCPBUGS-58461](https://issues.redhat.com/browse/OCPBUGS-58461): Backport pr 29834 to release-4.18 [#29968](https://github.com/openshift/origin/pull/29968)
* [OCPBUGS-60066](https://issues.redhat.com/browse/OCPBUGS-60066), [OCPBUGS-60067](https://issues.redhat.com/browse/OCPBUGS-60067): Don't check for isNoUpgrade [#30053](https://github.com/openshift/origin/pull/30053)
* [OCPBUGS-60066](https://issues.redhat.com/browse/OCPBUGS-60066), [OCPBUGS-60067](https://issues.redhat.com/browse/OCPBUGS-60067): Tolerate various expected Upgradeable=False conditions [#30048](https://github.com/openshift/origin/pull/30048)
* [OCPBUGS-57887](https://issues.redhat.com/browse/OCPBUGS-57887): Update to Kubernetes v1.31.10 [#29941](https://github.com/openshift/origin/pull/29941)
* [OCPBUGS-58366](https://issues.redhat.com/browse/OCPBUGS-58366): Make EgressIP helper functions more reliable [#29950](https://github.com/openshift/origin/pull/29950)
* [OCPBUGS-57081](https://issues.redhat.com/browse/OCPBUGS-57081): Do not set the MTU when using NetworkAttachementDefinition [#29891](https://github.com/openshift/origin/pull/29891)
* [OCPBUGS-58044](https://issues.redhat.com/browse/OCPBUGS-58044): Boot image controller should correctly handle marketplace boot images [#29937](https://github.com/openshift/origin/pull/29937)
* [OCPBUGS-57329](https://issues.redhat.com/browse/OCPBUGS-57329): Fix failed tests of e2e-aws-ovn-tls-13 [#29911](https://github.com/openshift/origin/pull/29911)
* [OCPBUGS-56995](https://issues.redhat.com/browse/OCPBUGS-56995): Fix bearer token exposure in exit condition as well [#29882](https://github.com/openshift/origin/pull/29882)
* [OCPBUGS-56438](https://issues.redhat.com/browse/OCPBUGS-56438): Update to Kubernetes v1.31.9 [#29871](https://github.com/openshift/origin/pull/29871)
* [OCPBUGS-56867](https://issues.redhat.com/browse/OCPBUGS-56867): Only update boot disks during GCP boot image updates tests [#29894](https://github.com/openshift/origin/pull/29894)
* [OCPBUGS-55277](https://issues.redhat.com/browse/OCPBUGS-55277): backport watch count tracking fixes to 4.18 [#29725](https://github.com/openshift/origin/pull/29725)
* [OCPBUGS-55667](https://issues.redhat.com/browse/OCPBUGS-55667): aws/edge: prevent test using unschedulable nodes [#29750](https://github.com/openshift/origin/pull/29750)
* [OCPBUGS-55267](https://issues.redhat.com/browse/OCPBUGS-55267): Update to Kubernetes v1.31.8 [#29765](https://github.com/openshift/origin/pull/29765)
* [OCPBUGS-50628](https://issues.redhat.com/browse/OCPBUGS-50628): [test: networking] Skip isolation test when cgroupv1 nodes are present [#29541](https://github.com/openshift/origin/pull/29541)
* [OCPBUGS-55470](https://issues.redhat.com/browse/OCPBUGS-55470): [build] Ensure Git Clone Does Not Run Privileged [#29736](https://github.com/openshift/origin/pull/29736)
* Revert "OCPBUGS-55277: backport 4.18" [#29720](https://github.com/openshift/origin/pull/29720)
* [OCPBUGS-55277](https://issues.redhat.com/browse/OCPBUGS-55277): backport 4.18 [#29645](https://github.com/openshift/origin/pull/29645)
* [OCPBUGS-55110](https://issues.redhat.com/browse/OCPBUGS-55110): Backport `MetricsCollectionProfiles` patches to 4.18 [#29561](https://github.com/openshift/origin/pull/29561)
* [OCPBUGS-54807](https://issues.redhat.com/browse/OCPBUGS-54807): support provider type external [#29666](https://github.com/openshift/origin/pull/29666)
* [OCPBUGS-54725](https://issues.redhat.com/browse/OCPBUGS-54725): Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com [#29657](https://github.com/openshift/origin/pull/29657)
* [OCPBUGS-53015](https://issues.redhat.com/browse/OCPBUGS-53015): bump(k8s): update k8s.io/* dependencies to v1.31.7 [#29634](https://github.com/openshift/origin/pull/29634)
* [OCPBUGS-52496](https://issues.redhat.com/browse/OCPBUGS-52496): use non-fake boot image for patch [#29584](https://github.com/openshift/origin/pull/29584)
* [OCPBUGS-52579](https://issues.redhat.com/browse/OCPBUGS-52579): Use payload pullspec for image info test [#29587](https://github.com/openshift/origin/pull/29587)
* [OCPBUGS-51295](https://issues.redhat.com/browse/OCPBUGS-51295): Rely on unstructured for update status instead of type conversion [#29564](https://github.com/openshift/origin/pull/29564)
* [OCPBUGS-50929](https://issues.redhat.com/browse/OCPBUGS-50929): Update to Kubernetes v1.31.6 [#29548](https://github.com/openshift/origin/pull/29548)
* [OCPBUGS-48389](https://issues.redhat.com/browse/OCPBUGS-48389): move initialization of OC to test instead of package level [#29472](https://github.com/openshift/origin/pull/29472)
* [OCPBUGS-50921](https://issues.redhat.com/browse/OCPBUGS-50921): managed services: add hcp crd to unstable list [#29545](https://github.com/openshift/origin/pull/29545)
* [OCPBUGS-50930](https://issues.redhat.com/browse/OCPBUGS-50930): managed services: add known image check for gcp [#29547](https://github.com/openshift/origin/pull/29547)
* [Full changelog](https://github.com/openshift/origin/compare/f5a460e98df6ae0f232754ee7d1e2aea92e020d1...4df75d04c7d0d10e8a66d980460d22d41cd75900)


### [thanos](https://github.com/openshift/thanos/tree/f1599f65c5fd652150821ae954d563747a649b53)

* [OCPBUGS-52945](https://issues.redhat.com/browse/OCPBUGS-52945): Update Go version in go.mod to 1.22.0 [#159](https://github.com/openshift/thanos/pull/159)
* [Full changelog](https://github.com/openshift/thanos/compare/314589cf9b4e86507634ab3406deb08402fa7af9...f1599f65c5fd652150821ae954d563747a649b53)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/014a2e54ee08659d93dc30414131efd6dac96dff)

* [OCPBUGS-58861](https://issues.redhat.com/browse/OCPBUGS-58861): [release-4.18] Update manifests to remove reliance on admissionregistration v1beta1 [#62](https://github.com/openshift/cluster-api-provider-vsphere/pull/62)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/d664fe2b56964a5320057ac8c7b7fd4b50045851...014a2e54ee08659d93dc30414131efd6dac96dff)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/2b241410a972898f0ce80dec3bfdf4f974721937)

* [OCPBUGS-54701](https://issues.redhat.com/browse/OCPBUGS-54701): add manifest-topology.yaml for topology related feature and test [#303](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/303)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/b8ed572d70acddd695a769fac3d1ba93f168fd05...2b241410a972898f0ce80dec3bfdf4f974721937)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/1a2036121a48da7493bdb50913c2b71c2372be60)

* [OCPBUGS-60784](https://issues.redhat.com/browse/OCPBUGS-60784): Check for number of FailureDomain-s in GetVCenter() [#189](https://github.com/openshift/vsphere-problem-detector/pull/189)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/7cf7fe24116aa9515a6fbcef3fb85567e19d21b4...1a2036121a48da7493bdb50913c2b71c2372be60)