# 4.19.43 Created: 2026-08-14 12:48:03 +0000 UTC Image Digest: `sha256:9dc530839ca5adfa742d89d7c0a5893d8d5351592972ded701b6b22499606a0f` ## Changes from 4.19.22 ### Components * Kubectl 1.32.1 * Kubernetes upgraded from 1.32.10 to 1.32.13 * Kubernetes Tests 1.32.8 * Red Hat Enterprise Linux CoreOS upgraded from 9.6.20260112-0 to 9.6.20260811-0 ### Removed images * ovirt-csi-driver * ovirt-csi-driver-operator ### Rebuilt images without code change * [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [0de29205](https://github.com/openshift/assisted-installer/commit/0de29205c8b99bdfdc12271281d5830f185d8f8c) `sha256:f9a6ccd14237ad72c142cfc461a838d96cab0901b2aa3f800d170837893f3ba3` * [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [1753a85e](https://github.com/openshift/assisted-installer-agent/commit/1753a85e3d8cf18e10bdf35c3a4ac87a74cab44e) `sha256:400d866643f9b4d5023467a688e3b6a09163051894bd63d8605316415a44409c` * [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [0de29205](https://github.com/openshift/assisted-installer/commit/0de29205c8b99bdfdc12271281d5830f185d8f8c) `sha256:3141fe7adafc672c78455b4d443b1bc4a54982ba593ad25dbc1675f4fc6da05e` * [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [77213cc5](https://github.com/openshift/apiserver-network-proxy/commit/77213cc5eed50f6c0ec0600133e01274020657ef) `sha256:c19dba3b8395b01c93b6a5ec8640486bf01d40121b00a724c55df932e2b93e23` * [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [425c1c5b](https://github.com/openshift/cloud-provider-aws/commit/425c1c5be39628421bdfb63caf25beb169307473) `sha256:425c40df7db2b5a0a152e5e716235f66cc4b0ad12721d476c489dda0cad3c881` * [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [0a740b04](https://github.com/openshift/cluster-api-provider-aws/commit/0a740b04471ca2bc5bb7a3034e78a62cfc2c24a2) `sha256:d781d167691e393def9418b0e0c13e1c6af9aff1c70eaa92d3841fbdca52a4be` * [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [68ae0c26](https://github.com/openshift/aws-karpenter-provider-aws/commit/68ae0c265271b4447f42decf88c6a44b343eeec9) `sha256:49ba5ee0e8eb80e60d528badc85ab4ee4f69ecfaa0bf82c335e83d3e24f2f7f3` * [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [b0a16d53](https://github.com/openshift/aws-pod-identity-webhook/commit/b0a16d53fbf28a55110bbb36a69f23bc772b3297) `sha256:2ae5668bdbf49a1db3b0c3c0d87c01589b46b6f85f19d8d3206287afe4ecd77c` * [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [163515df](https://github.com/openshift/machine-api-provider-azure/commit/163515df04124d4e2daaab47dc6fd30a1e5b246e) `sha256:a5ddb2c77e25f132324e2f2a6243a07704c7d6c567a2e980cf31e352dba126f9` * [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [e5c6c44c](https://github.com/openshift/azure-workload-identity/commit/e5c6c44c87ebbe57a33650dd6270275e7cca771e) `sha256:c6667f541bc71019fb8c63761d822be8a4c000cffc90fc08628736c7894e74b0` * [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [06a66db1](https://github.com/openshift/cluster-api-provider-metal3/commit/06a66db1ac3c28f6d9a1adf16146ebec219c8534) `sha256:de34c0c2236d4020d4634f868c1ca02e67596aa09d4ae00f4b797800d38ddbfe` * [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [f7a78954](https://github.com/openshift/cluster-api-provider-baremetal/commit/f7a789548f76d3117f3400ac597c0db615778d57) `sha256:3946ae9251003951c62b6a87868f068d3e68b3ce56244aa30941359ab369620a` * [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [2f969c7a](https://github.com/openshift/baremetal-runtimecfg/commit/2f969c7a1df33a398298df731505a508ad120db9) `sha256:55637a1a95ef9b404aa3f913c40fa8085940f65a363751b7fe85827f5a0378a2` * [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [49b7a9e2](https://github.com/openshift/cloud-network-config-controller/commit/49b7a9e2f1cc77fee3a8ee776d3eac8bae1be86e) `sha256:1cc1ead4ee877aafb69e18f402af03d765cb7ccde42099812c828fef78aa10ae` * [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [8fde9c52](https://github.com/openshift/cluster-bootstrap/commit/8fde9c52fbb6b6044785ebae0751000b049fd0ed) `sha256:69007207b8d18729194eea762ff8b726d94cb75fe68dc3969bcdfc9fea4cca65` * [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [5b39a4df](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/5b39a4dfc245942db4a21cec493bfb2a15bb4b21) `sha256:264bcc953754ec199948a574e93b0b1d553aba26a2343a0850ca2c23f5125a15` * [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [96607b59](https://github.com/openshift/cluster-config-operator/commit/96607b590ba35a8f008073e105e01e72a5bfba2e) `sha256:e98e7b1e323494afa4de3ad90efd34b8db2326db172003fd2a9b6736bb6f0b7b` * [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [1dbf0c7a](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/1dbf0c7a5d513dedcc18de0ee5fb34e18b8b53f2) `sha256:0f47910a4574cae59a5d6ee902f040f7c75885b1f27766229dc018313d523440` * [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [cf99de97](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/cf99de974354133f853928cff9e19ad19c5347d9) `sha256:49f76d9a956e8d40d5de2465cfd31d3256a1d27beabf57c08c7b614f4125a9c3` * [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [65981306](https://github.com/openshift/cluster-dns-operator/commit/659813065170f4e52f80b7a29bbab64bfa9aa172) `sha256:76f0cd4203098811a3be155e97f92cc4684f3c4ee9cae51ceaf75da1b7b0d910` * [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [3335b120](https://github.com/openshift/cluster-image-registry-operator/commit/3335b120ecbae4a792373a814474aeebde58d6c2) `sha256:78eb99e46600a0b9f9b9d45c889c416ee07d9e8b942bc7cd83c01124a54c4c93` * [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [7c4e4469](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/7c4e44698b6004e52c59e03dd0c89611fbbfa999) `sha256:18d8f817313ba67b50e92be4a9f9a1425a61607b63e6174613a481e007c4280d` * [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [4e514049](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/4e51404906f0648304e81414e0d299c52214f7a8) `sha256:9b81fbff710292fd05af476841fafafa702fc816f89462af127a627e3b220b5c` * [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [49517f79](https://github.com/openshift/cluster-machine-approver/commit/49517f79bdfeb0fa06f2bc80d793a0c9db194aab) `sha256:2768e57cf486cd66024e81904619b368947562a7709526de2f0034160d771cf6` * [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [5f66a3e1](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/5f66a3e13fd98eaaa0941e8e0724b1f56a797d6d) `sha256:8aee8c54ad613271fbb994a819bf354818f73e003ccba831be8c8464f348ab77` * [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [0ab30996](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/0ab30996207ada63ef2e2fd4f47aac03b0872c9a) `sha256:8d942b897b082a2e7a1ec84ef8220ef817da6115ff9305e6c6696053c26af216` * [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [aa7f05d2](https://github.com/openshift/cluster-samples-operator/commit/aa7f05d27fb2a60314278f0c248fd961442a4144) `sha256:760def3f696e9e47761a1a12a7af4cd69343ea63a0a7ef39dd75584b10c71d2d` * [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [0ea36f0a](https://github.com/openshift/cluster-update-keys/commit/0ea36f0a4c0ad6a6abc81a91b2ac87d68d294020) `sha256:2340c2028e98b0cf74c8791f6fdc4bc969f218841bd2ffb5c1718dde64c13c2d` * [configmap-reloader](https://github.com/openshift/configmap-reload) git [a2a48a3a](https://github.com/openshift/configmap-reload/commit/a2a48a3a767fdb70644c65ab863bd4fc125987d2) `sha256:f0b4fc4fba5757115ca6cd61380bb67b2ed917fdb30754125b147e6a69120ca4` * [coredns](https://github.com/openshift/coredns) git [4f649314](https://github.com/openshift/coredns/commit/4f64931403bf747b78bccb40ad877b08da534e23) `sha256:de630786dfea7b0a33f2e77814590fc85c0c4df671bbda2aea8f5f9b8d06be7f` * [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [ac275c3a](https://github.com/openshift/csi-external-resizer/commit/ac275c3a81edcc4edf23aecf8974c9c23f2aaea9) `sha256:6dab7a49b0d7fd17b213146910fba0fd7edb7a1ade1e78613829d7fd75097da6` * [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [ca514478](https://github.com/openshift/csi-livenessprobe/commit/ca5144785b2c8caa6fe0ffcf7837e8e17b4864fb) `sha256:cb32de0551a8385de8182ef55a01c8fb9a5f161d21a7c01f49b1f3ea62f57c12` * [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [fa578445](https://github.com/openshift/csi-node-driver-registrar/commit/fa578445467753d2a000cb1ba1cb5dc91cfb9542) `sha256:53067d5bb33bad8dc32987eb2fb0954e75f501c8f33780594c77a6909134c446` * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [686fdac5](https://github.com/openshift/driver-toolkit/commit/686fdac595884ade83fef7b2b9c41169bf3fcb21) `sha256:47165e9013be2b968bdb30d53399f33d136cb00bbfd7167eab90fb67d6ee0538` * [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [d8d3aeba](https://github.com/openshift/cloud-provider-gcp/commit/d8d3aeba536f4c9f6593a08045466f06dc7406ff) `sha256:f1fc1dcda7a8116eb70097b2c335cb56aafb13f49d01fa7f357de66b2a063a2d` * [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [fbf4c1b2](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/fbf4c1b2b233806f8233b89abca2795a4cadef14) `sha256:722abfc2b30f8c16d1024cf1d354069d543cfeae88e5dc1183d047ee22c1de14` * [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [7422aab2](https://github.com/openshift/cloud-provider-ibm/commit/7422aab27110768d8604539b9bb01ca329ff70b7) `sha256:81e6a31f2d1bccfd799ce51e3d88fc8bdfd10c10192b9c9cbd68f0ffdf85668e` * [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [3dfcfa12](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/3dfcfa12e31bccd7c43018e1324a391b0bc03244) `sha256:babdfe2c0191e5d6c5ecaaaa9d4db271f72018e4b3ac72ea5adba9f411b1c750` * [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [940ac1c2](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/940ac1c27e5548f738219b8c2ea4d1b6924e60e5) `sha256:e63c45e5be0fb36825aa70df89f86c8b3c2b6cb5b4a44339b9a26313e437f5ef` * [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [dacba7d7](https://github.com/openshift/ironic-rhcos-downloader/commit/dacba7d7809a048392d18050096dcc20f2878b6f) `sha256:7e847d3509b067e44c0a8f5a6542a7fed0fafa986c9679276197c9e7387f181e` * [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [fcd9564e](https://github.com/openshift/ironic-static-ip-manager/commit/fcd9564e3bfa12e45576af376d168b5036dd8206) `sha256:6ba7d787e6e56600fdac32c287113cb89e66390d6817c92462e8e9d20cc8334a` * [keepalived-ipfailover](https://github.com/openshift/images) git [b42e7cf2](https://github.com/openshift/images/commit/b42e7cf218c4eef071cc29e0894fe8cfaed80b7f) `sha256:e353e91b3e4fcdf4e5a934252b0063b61ba36b4b19a45114b73b952fa3b695dc` * [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [59127756](https://github.com/openshift/kube-rbac-proxy/commit/591277560f328601273f88f2881e09ccccd90a97) `sha256:11f51cd548988065314dd7e311b890b8f3957af34302bf4413bf2b4a9ad7e78f` * [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [fdef30c8](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/fdef30c84b3d45ede364500984221c3f492b1415) `sha256:dbb92177235f866b400a5478fb375b34991fff5fceb4bc4cca8592fb9e7e1500` * [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [381c36ba](https://github.com/openshift/multus-admission-controller/commit/381c36baaad8e45ba10cca43aeeaf00dfc907462) `sha256:d94afc4b3a1ad24842ad1af21af6f137dd4257d732ec85e910e62226754f0e69` * [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:0f9ca049574abaec31d31066670d9fd195e29b5cb5e1a5f84c829d6669a3327e` * [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [0e1112ce](https://github.com/openshift/whereabouts-cni/commit/0e1112cea12c707a93bd01d408c598dd070c8676) `sha256:742d4d2be3c6837a8ae3d6e98b36418dfe547927a0515962dd82070fa935b14f` * [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [fd8f506d](https://github.com/openshift/bond-cni/commit/fd8f506d59353ac89db5c8015969e81dafdab774) `sha256:3fac9ff8d814ea093737e1f8af488b5e17285f4320fdc08fe1de0bb9f5f9543b` * [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [89e48826](https://github.com/openshift/network-metrics-daemon/commit/89e4882698653fdd80fcee2e9d92e668cb02d2d1) `sha256:8acbdb1d50597d3f932a2697aad3162ea3f80a02917d6466947d9080a8a8e251` * [network-tools](https://github.com/openshift/network-tools) git [633767b2](https://github.com/openshift/network-tools/commit/633767b26eb0d7c69e370599d40458e72e7d1a69) `sha256:2b0f9d9966b65f9ca1f1eaf21c85dfffdde29b39f58bf6c3281c64dd89d553cd` * [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [db1f264a](https://github.com/openshift/cloud-provider-nutanix/commit/db1f264a7b04784e5f671e61cda0609695e555bb) `sha256:da91f4db9663ca66555990b41247ca810f50c519725a06fa52a9f67bbc58f46e` * [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [a26db5a0](https://github.com/openshift/machine-api-provider-nutanix/commit/a26db5a04ecffd98c6a9ee8204af621bf2416ec9) `sha256:43037c1c6fbba37c7d005d365188a7e3623791acf0cd4dd8e561f3e4181c5753` * [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [5b3063ff](https://github.com/openshift/openshift-controller-manager/commit/5b3063ff149f290bebca0783fc508dfbf07689a5) `sha256:c5795ca0ad389115c99ecddaa026a86e71201bde4e8fbbf16c06ee307f1b8c0d` * [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [c604f81c](https://github.com/openshift/openshift-state-metrics/commit/c604f81c4953f0feacfcf927cb5de883af027060) `sha256:80bda4fec30a873743da92770b87b2c0eeac8baac7bb61c2b58beb990eb8573e` * [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [d00bab2b](https://github.com/openshift/openstack-resource-controller/commit/d00bab2b3029ead7cd0e2ae61c7d396239434b48) `sha256:879c217df7e7c95b7b0fc4d5661e2f916d32eba24495c1eb8c1221c948d11586` * [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [ff6e9a8e](https://github.com/openshift/machine-api-provider-powervs/commit/ff6e9a8e1ea2eebb552cdc64974f8f6e7e5cbd1a) `sha256:66af18ac663ec661563a91b8168f5f9e30a54840de01299d54fc9efedbb17d3d` * [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [13666465](https://github.com/openshift/prom-label-proxy/commit/13666465233bfe72a19d6d3f48576a508fdea145) `sha256:444bc3dd78c6a6daa1c10c0651d10969dbaa8d4f2ff34e4ff4aba0a8510b9354` * [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [c90542d8](https://github.com/openshift/node_exporter/commit/c90542d8cef6d25545ae00481ffff5622cdce928) `sha256:dfc88b31b12159853f8128ed6c13f17ba0094d5b4030e96a68973a53c8a13007` * [service-ca-operator](https://github.com/openshift/service-ca-operator) git [4dfa6916](https://github.com/openshift/service-ca-operator/commit/4dfa6916f984d0fd7188380edc88b250738f07f7) `sha256:c5e07e7ae43335a8425a74f6930ada2fdd17658aefe2f00ce51b75a30840bcc6` ### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/de5d04b1db10aa8b3864d1e8f42a7fc23aadd4ae) * [OCPBUGS-94046](https://issues.redhat.com/browse/OCPBUGS-94046): Add sourcedir /run/chrony-dhcp to generated chrony.conf [#10545](https://github.com/openshift/assisted-service/pull/10545) * [MGMT-23439](https://issues.redhat.com/browse/MGMT-23439): Pin gotestsum to v1.12.2 for Go 1.21 compatibility [#10020](https://github.com/openshift/assisted-service/pull/10020) * [OCPBUGS-74630](https://issues.redhat.com/browse/OCPBUGS-74630): Retry incomplete cluster registration in ABI [#8809](https://github.com/openshift/assisted-service/pull/8809) * [Full changelog](https://github.com/openshift/assisted-service/compare/f56d2b039a7a924ae51be9475ebe11d6709878c4...de5d04b1db10aa8b3864d1e8f42a7fc23aadd4ae) ### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/34af4548d9d162c4e07e7426d4c672d8fbc3500c) * [OCPBUGS-68295](https://issues.redhat.com/browse/OCPBUGS-68295): bump github.com/sirupsen/logrus to v1.9.3 [#236](https://github.com/openshift/agent-installer-utils/pull/236) * [Full changelog](https://github.com/openshift/agent-installer-utils/compare/edfddbc100302df013eb3303c41da28f074e8dd4...34af4548d9d162c4e07e7426d4c672d8fbc3500c) ### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/c6b30f20d3102016749dec90e8be4574caaa3368) * [OCPBUGS-82794](https://issues.redhat.com/browse/OCPBUGS-82794): Address CVE-2026-35469 [#330](https://github.com/openshift/aws-ebs-csi-driver/pull/330) * [OCPBUGS-80386](https://issues.redhat.com/browse/OCPBUGS-80386): Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.75.1-sec.1 [#312](https://github.com/openshift/aws-ebs-csi-driver/pull/312) * [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/3f7eede5a2a7962f682a1fa87f9fcb90e7533117...c6b30f20d3102016749dec90e8be4574caaa3368) ### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/735dc3c611fa79701ebe42ef01ec8f4fab84d2b5) * [OCPBUGS-80489](https://issues.redhat.com/browse/OCPBUGS-80489): Bump google.golang.org/grpc [#541](https://github.com/openshift/csi-operator/pull/541) * [OCPBUGS-84242](https://issues.redhat.com/browse/OCPBUGS-84242): [release-4.19] adds the csi-external-resizer to the image-references [#546](https://github.com/openshift/csi-operator/pull/546) * [Full changelog](https://github.com/openshift/csi-operator/compare/99b646dbac5540b4054300df6a535d10e475d8b0...735dc3c611fa79701ebe42ef01ec8f4fab84d2b5) ### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/65915f01ac0077888c21cd6450cba2a9e2d998ad) * [OCPBUGS-80360](https://issues.redhat.com/browse/OCPBUGS-80360): Bump google.golang.org/grpc to v1.79.3 [#42](https://github.com/openshift/aws-encryption-provider/pull/42) * [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/6dd8d81c504b39d0b80ca5b8df9a1c534fc1d6f8...65915f01ac0077888c21cd6450cba2a9e2d998ad) ### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/14f4b995a810d26516d5f1c88f7bee1d524686b0) * [OCPBUGS-73729](https://issues.redhat.com/browse/OCPBUGS-73729): Fix reconciler consistency checks in Update and Exists [#165](https://github.com/openshift/machine-api-provider-aws/pull/165) * [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/60e5ddf81262d360c5e6a2c4c7a25e67d7d5f766...14f4b995a810d26516d5f1c88f7bee1d524686b0) ### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/6282230dc14b5bdc5ae902bfdf4aa3d2ce1fdcbd) * [OCPBUGS-80390](https://issues.redhat.com/browse/OCPBUGS-80390), [OCPBUGS-80391](https://issues.redhat.com/browse/OCPBUGS-80391), [OCPBUGS-80533](https://issues.redhat.com/browse/OCPBUGS-80533): Bump google.golang.org/grpc to v1.79.3 [#180](https://github.com/openshift/cloud-provider-azure/pull/180) * [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/7109d6b4eaefda87b235c88b92c2e17fd3dd0117...6282230dc14b5bdc5ae902bfdf4aa3d2ce1fdcbd) ### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/dc228673549ec5dd87f0ecf35a57bfc3ab380dc1) * [OCPBUGS-80392](https://issues.redhat.com/browse/OCPBUGS-80392): Bump google.golang.org/grpc to v1.79.3 [#385](https://github.com/openshift/cluster-api-provider-azure/pull/385) * [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/2e2909cf1317cb84285de3c73f6acadb9e8a31f2...dc228673549ec5dd87f0ecf35a57bfc3ab380dc1) ### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/de70652140c556f46393edf885f86a96c0c6fa7c) * [OCPBUGS-80393](https://issues.redhat.com/browse/OCPBUGS-80393): Bump google.golang.org/grpc to v1.79.3 [#141](https://github.com/openshift/azure-disk-csi-driver/pull/141) * [OCPBUGS-78035](https://issues.redhat.com/browse/OCPBUGS-78035): add instantAccessDurationMinutes parameter to enable IA snapshots for PremiumV2/UltraSSD disks [#129](https://github.com/openshift/azure-disk-csi-driver/pull/129) * [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/466334d41a33d801cef0e81bc7186b8fd42b3f30...de70652140c556f46393edf885f86a96c0c6fa7c) ### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/f087a2dd9c8e43f9a6a5025cb5d43e9cf663f0b1) * [OCPBUGS-80396](https://issues.redhat.com/browse/OCPBUGS-80396): Bump google.golang.org/grpc to v1.79.3 [#129](https://github.com/openshift/azure-file-csi-driver/pull/129) * [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/8970409a952051e3fdc08728eddadb24bba94b70...f087a2dd9c8e43f9a6a5025cb5d43e9cf663f0b1) ### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/945244c7763c5ff5683eb2dfc0887e5e149263a4) * [OCPBUGS-80361](https://issues.redhat.com/browse/OCPBUGS-80361): Bump google.golang.org/grpc to 1.64.1-sec.1 patch [#45](https://github.com/openshift/azure-kubernetes-kms/pull/45) * [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/20a9ba53d5900578d497c84bb09cd46bc5859a29...945244c7763c5ff5683eb2dfc0887e5e149263a4) ### [azure-service-operator](https://github.com/openshift/azure-service-operator/tree/3bb352c18a940bf419a3ed8b1e7e5f23c3ba286e) * [OCPBUGS-80362](https://issues.redhat.com/browse/OCPBUGS-80362): Bump google.golang.org/grpc to v1.79.3 [#30](https://github.com/openshift/azure-service-operator/pull/30) * [Full changelog](https://github.com/openshift/azure-service-operator/compare/0ae129b4768d2e10e0ca215d272e207bfae963a3...3bb352c18a940bf419a3ed8b1e7e5f23c3ba286e) ### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/2493db4d14208d90f64b4d5951f5229d5116e725) * [OCPBUGS-79002](https://issues.redhat.com/browse/OCPBUGS-79002): [release-4.19] - Allow all instance types in the install config for GCP [#10505](https://github.com/openshift/installer/pull/10505) * [OCPBUGS-91984](https://issues.redhat.com/browse/OCPBUGS-91984): azure: Add field in installconfig to disallow shared access key [#10653](https://github.com/openshift/installer/pull/10653) * [OCPBUGS-77051](https://issues.redhat.com/browse/OCPBUGS-77051): Update RHCOS-release-4.19 data/data/coreos/rhcos.json to 9.6.20260616-0 [#10652](https://github.com/openshift/installer/pull/10652) * [OCPBUGS-79503](https://issues.redhat.com/browse/OCPBUGS-79503): Increase size of /var/ostreecontainer mount [#10433](https://github.com/openshift/installer/pull/10433) * [OCPBUGS-57323](https://issues.redhat.com/browse/OCPBUGS-57323): Power VS: Provide detailed error when entered VPCName cannot be found [#9779](https://github.com/openshift/installer/pull/9779) * [OCPBUGS-78496](https://issues.redhat.com/browse/OCPBUGS-78496): fix wavelength zone name regex [#10391](https://github.com/openshift/installer/pull/10391) * [OCPBUGS-73781](https://issues.redhat.com/browse/OCPBUGS-73781): pkg/asset/manifests/azure: save cidr blocks [#10216](https://github.com/openshift/installer/pull/10216) * [OCPBUGS-74940](https://issues.redhat.com/browse/OCPBUGS-74940): Increase agent-installer pre-network-manager timeout [#10284](https://github.com/openshift/installer/pull/10284) * [OCPBUGS-74675](https://issues.redhat.com/browse/OCPBUGS-74675): [release-4.19] GCP: skip AI zones [#10274](https://github.com/openshift/installer/pull/10274) * [OCPBUGS-74629](https://issues.redhat.com/browse/OCPBUGS-74629): add support for NVIDIA H100 and H200 enabled machine series [#10270](https://github.com/openshift/installer/pull/10270) * [OCPBUGS-66358](https://issues.redhat.com/browse/OCPBUGS-66358): Update the RHCOS 4.19 bootimage metadata to 9.6.20260112-0 [#10248](https://github.com/openshift/installer/pull/10248) * [OCPBUGS-68296](https://issues.redhat.com/browse/OCPBUGS-68296): [4.19] uplift logrus [#10165](https://github.com/openshift/installer/pull/10165) * [Full changelog](https://github.com/openshift/installer/compare/0202fe69bbcaab2a10ca00f3ae01b6027b71e83d...2493db4d14208d90f64b4d5951f5229d5116e725) ### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/8fa7f68fd41fa2bb78cd8f0a4d758c703b37a672) * [OCPBUGS-98209](https://issues.redhat.com/browse/OCPBUGS-98209): Add BMH finalizer on PreprovisioningImage [#508](https://github.com/openshift/baremetal-operator/pull/508) * [OCPBUGS-87966](https://issues.redhat.com/browse/OCPBUGS-87966): Fix preprovisioning network Secret lifecycle during BMH deletion [#494](https://github.com/openshift/baremetal-operator/pull/494) * [OCPBUGS-88039](https://issues.redhat.com/browse/OCPBUGS-88039): Fix invalidDNSNameinvalidipv6 test [#496](https://github.com/openshift/baremetal-operator/pull/496) * [Full changelog](https://github.com/openshift/baremetal-operator/compare/f4e49d5f3b0a2a3ee7a2cc7716bc8d70f33f3506...8fa7f68fd41fa2bb78cd8f0a4d758c703b37a672) ### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/b2a93a639c07ebf4d547d10877b6c13f65583248) * [OCPBUGS-77802](https://issues.redhat.com/browse/OCPBUGS-77802): Makefile: Strip debugging symbols by default [#2217](https://github.com/openshift/oc/pull/2217) * [Full changelog](https://github.com/openshift/oc/compare/24755b6e82745a4dfa5a6db4b467564c237f244c...b2a93a639c07ebf4d547d10877b6c13f65583248) ### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/eaa3ebdcc89590be47d55fd7d474267f42b005fa) * [OCPBUGS-80400](https://issues.redhat.com/browse/OCPBUGS-80400): Bump google.golang.org/grpc to v1.79.3 [#1023](https://github.com/openshift/cloud-credential-operator/pull/1023) * [OCPBUGS-74547](https://issues.redhat.com/browse/OCPBUGS-74547): Resolve nil pointer exception in hasResourceTags [#971](https://github.com/openshift/cloud-credential-operator/pull/971) * [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d0a5db481b4aef8f7304a069f6a94430230a0ca6...eaa3ebdcc89590be47d55fd7d474267f42b005fa) ### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/1d930619673e99029a1e5cec0194b5a3580ec35a) * [OCPBUGS-65602](https://issues.redhat.com/browse/OCPBUGS-65602): set appropriate rolling update settings [#809](https://github.com/openshift/cluster-authentication-operator/pull/809) * [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/ceeb021d7562cf3d669ed7293f46b2a50e848c73...1d930619673e99029a1e5cec0194b5a3580ec35a) ### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/33b1498504745b15dff672a68f4005e35855cc4e) * [OCPBUGS-78697](https://issues.redhat.com/browse/OCPBUGS-78697): allow clusterapi provider to skip paused resources [#412](https://github.com/openshift/kubernetes-autoscaler/pull/412) * [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/5ab386f01957f72d3cf39ed0016e6e9f53e75e7f...33b1498504745b15dff672a68f4005e35855cc4e) ### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/dd778375334821fb94db695ec1963e2f7f001893) * [OCPBUGS-73954](https://issues.redhat.com/browse/OCPBUGS-73954): Add rbac for volumeattachments [#359](https://github.com/openshift/cluster-autoscaler-operator/pull/359) * [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/227f7537c3b459d4940522809df60b2dfca738ed...dd778375334821fb94db695ec1963e2f7f001893) ### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/d25f65138ada818ff264f66e239e856a5e51abed) * [OCPBUGS-78457](https://issues.redhat.com/browse/OCPBUGS-78457): Explicitly set the ReadOnlyRootFilesystem flag to false [#574](https://github.com/openshift/cluster-baremetal-operator/pull/574) * [OCPBUGS-78704](https://issues.redhat.com/browse/OCPBUGS-78704): Update kubebuilder tools to more latest version [#578](https://github.com/openshift/cluster-baremetal-operator/pull/578) * [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/acb33d2c220339f6ab02522f388810e87eeaa120...d25f65138ada818ff264f66e239e856a5e51abed) ### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/42b8aeca8d812175660e6b372fc2145792b48f2d) * [OCPBUGS-80401](https://issues.redhat.com/browse/OCPBUGS-80401): Bump google.golang.org/grpc to v1.79.3 [#295](https://github.com/openshift/cluster-api/pull/295) * [Full changelog](https://github.com/openshift/cluster-api/compare/479f0c4edcfc5bc5706600070e8b8c142e59a5d4...42b8aeca8d812175660e6b372fc2145792b48f2d) ### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/cc2093ef2d72cd3cf0a42519f5e791e1b95ed6a5) * [OCPBUGS-80405](https://issues.redhat.com/browse/OCPBUGS-80405): Bump google.golang.org/grpc to v1.79.3 [#546](https://github.com/openshift/cluster-capi-operator/pull/546) * NO-JIRA: Allow sustaining engineering to self serve dependency updates [#557](https://github.com/openshift/cluster-capi-operator/pull/557) * [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/cf9e6e9bf7f28ac52ea7b2f0af6b0b80cd7c32b9...cc2093ef2d72cd3cf0a42519f5e791e1b95ed6a5) ### [cluster-config-api](https://github.com/openshift/api/tree/1ebdd7bba8e6c503a1f61c6d467ed877783826e1) * [OCPBUGS-98410](https://issues.redhat.com/browse/OCPBUGS-98410): add new serviceAccountToken fs type [#2926](https://github.com/openshift/api/pull/2926) * [Full changelog](https://github.com/openshift/api/compare/482f1b56dcc4d97ab9d3f7c22f102ecb54af83bb...1ebdd7bba8e6c503a1f61c6d467ed877783826e1) ### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/024f8af5195a6bdbe0eb7e253ba83b5d3190247f) * [OCPBUGS-85275](https://issues.redhat.com/browse/OCPBUGS-85275): Wait for revision stability before removing etcd members [#1613](https://github.com/openshift/cluster-etcd-operator/pull/1613) * [OCPBUGS-78353](https://issues.redhat.com/browse/OCPBUGS-78353): Prefer to remove members where they have another healthy machine in the same failure domain index [#1565](https://github.com/openshift/cluster-etcd-operator/pull/1565) * [OCPBUGS-74628](https://issues.redhat.com/browse/OCPBUGS-74628): Add priority field to prevent early shutdown [#1539](https://github.com/openshift/cluster-etcd-operator/pull/1539) * [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/10416b858f836add882417cdf67314f9368f1f8b...024f8af5195a6bdbe0eb7e253ba83b5d3190247f) ### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/a3c5d8daff2a53d7e05649a31a233fa1f0cf0977) * [OCPBUGS-86716](https://issues.redhat.com/browse/OCPBUGS-86716): Add configuration override for X-SSL strip [#1476](https://github.com/openshift/cluster-ingress-operator/pull/1476) * [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/7ce99b2c11f456e0e6e3cfa80ebf7682466eb0ea...a3c5d8daff2a53d7e05649a31a233fa1f0cf0977) ### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/1b48403438c3e0eb2ccb5cae331f12fe9abe169c) * [OCPBUGS-83857](https://issues.redhat.com/browse/OCPBUGS-83857): Allow setting the oauthMetadata when auth type is None [#2118](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2118) * [OCPBUGS-74628](https://issues.redhat.com/browse/OCPBUGS-74628): Add priority field to prevent early shutdown [#1959](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1959) * [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/8ce34d695b2ee3a93e748cd039db7c238ffc9f12...1b48403438c3e0eb2ccb5cae331f12fe9abe169c) ### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/21f858318e12e7fc2304ea6d3639680b6863a597) * [OCPBUGS-80412](https://issues.redhat.com/browse/OCPBUGS-80412): Bump google.golang.org/grpc to v1.79.3 [#76](https://github.com/openshift/cluster-api-operator/pull/76) * [Full changelog](https://github.com/openshift/cluster-api-operator/compare/3ec30377ffff951dc9c0fc2257d290e4b4958465...21f858318e12e7fc2304ea6d3639680b6863a597) ### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/bf8cd78f223b3d27ea4fb170d22edea14df26df3) * [CNTRLPLANE-2843](https://issues.redhat.com/browse/CNTRLPLANE-2843): chore: update OWNERS [#621](https://github.com/openshift/cluster-kube-scheduler-operator/pull/621) * [OCPBUGS-74628](https://issues.redhat.com/browse/OCPBUGS-74628): Add priority field to prevent early shutdown [#609](https://github.com/openshift/cluster-kube-scheduler-operator/pull/609) * [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/8740a60de76690a17d5081db078eb93dfdb7a066...bf8cd78f223b3d27ea4fb170d22edea14df26df3) ### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/d7be4f8c4a070f38507e9522741c5fc60eac2233) * [OCPBUGS-104539](https://issues.redhat.com/browse/OCPBUGS-104539): Backport e2e stabilization 4.19 [#3029](https://github.com/openshift/cluster-monitoring-operator/pull/3029) * [OCPBUGS-100373](https://issues.redhat.com/browse/OCPBUGS-100373): [release-4.19] fix: watch cluster wide proxy changes and apply changes accordingly [#3023](https://github.com/openshift/cluster-monitoring-operator/pull/3023) * [OCPBUGS-94080](https://issues.redhat.com/browse/OCPBUGS-94080): ship collector:node_scrape_collector_success:avg to Telemetry [#2991](https://github.com/openshift/cluster-monitoring-operator/pull/2991) * [OCPBUGS-86994](https://issues.redhat.com/browse/OCPBUGS-86994): increase lookup interval [#2948](https://github.com/openshift/cluster-monitoring-operator/pull/2948) * [OCPBUGS-77273](https://issues.redhat.com/browse/OCPBUGS-77273): AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change [#2834](https://github.com/openshift/cluster-monitoring-operator/pull/2834) * [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/8a6f22d186d6186a77272672864b94b5b3765b49...d7be4f8c4a070f38507e9522741c5fc60eac2233) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/d0c6f75e06c861c7f2d5355dab0e7bd8a20de43c) * [OCPBUGS-99750](https://issues.redhat.com/browse/OCPBUGS-99750): Bump github.com/containernetworking/cni v0.8.0 -> v1.3.0 [#3094](https://github.com/openshift/cluster-network-operator/pull/3094) * [OCPBUGS-84177](https://issues.redhat.com/browse/OCPBUGS-84177): Handle zero-worker HyperShift clusters in daemonset rollout [4.19 backport] [#2974](https://github.com/openshift/cluster-network-operator/pull/2974) * [OCPBUGS-85404](https://issues.redhat.com/browse/OCPBUGS-85404): Remove duplicated openssl parameter [#3003](https://github.com/openshift/cluster-network-operator/pull/3003) * [OCPBUGS-84201](https://issues.redhat.com/browse/OCPBUGS-84201): wait for patch port to apply drop garp flows [#2971](https://github.com/openshift/cluster-network-operator/pull/2971) * [OCPBUGS-84143](https://issues.redhat.com/browse/OCPBUGS-84143): fix(hypershift): use net.JoinHostPort for URL construction [#2969](https://github.com/openshift/cluster-network-operator/pull/2969) * [OCPBUGS-77150](https://issues.redhat.com/browse/OCPBUGS-77150): Add config override for openflow-probe [#2964](https://github.com/openshift/cluster-network-operator/pull/2964) * [CORENET-6311](https://issues.redhat.com/browse/CORENET-6311), [OCPBUGS-74205](https://issues.redhat.com/browse/OCPBUGS-74205): Skip running _stackmanager for libreswan 5.3+ [#2885](https://github.com/openshift/cluster-network-operator/pull/2885) * [OCPBUGS-67208](https://issues.redhat.com/browse/OCPBUGS-67208): Fix whereabouts-token-watcher DaemonSet improvements [#2857](https://github.com/openshift/cluster-network-operator/pull/2857) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/f5aaab800060be6b8c299d2a1feaaaa40298d71a...d0c6f75e06c861c7f2d5355dab0e7bd8a20de43c) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/f7ed3c80209e2aa5f66dced81b265a3868b70e2c) * [OCPBUGS-87932](https://issues.redhat.com/browse/OCPBUGS-87932): Requeue PerformanceStatus update when status write fails [#1543](https://github.com/openshift/cluster-node-tuning-operator/pull/1543) * [OCPBUGS-82802](https://issues.redhat.com/browse/OCPBUGS-82802): Bump github.com/moby/spdystream from v0.5.0 to v0.5.1 [#1533](https://github.com/openshift/cluster-node-tuning-operator/pull/1533) * [OCPBUGS-85438](https://issues.redhat.com/browse/OCPBUGS-85438): e2e: Add irqbalance StartLimitBurst >= 100 [#1514](https://github.com/openshift/cluster-node-tuning-operator/pull/1514) * [OCPBUGS-73797](https://issues.redhat.com/browse/OCPBUGS-73797): PPC: ghw: filter out namespaces dir [#1455](https://github.com/openshift/cluster-node-tuning-operator/pull/1455) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/1928af1d0912b55cfb57c5c86b1f2c7d6159a7d8...f7ed3c80209e2aa5f66dced81b265a3868b70e2c) ### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/88faec2c2449f9f4ed3cfc4b8893cc29e6bfbbf3) * [OCPBUGS-80420](https://issues.redhat.com/browse/OCPBUGS-80420): Bump google.golang.org/grpc to v1.79.3 [#199](https://github.com/openshift/cluster-olm-operator/pull/199) * [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/efb91390ee10673d8f3f16e604390bd68d361d50...88faec2c2449f9f4ed3cfc4b8893cc29e6bfbbf3) ### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/d1ea75b45228a6af17f3a1899ab4bd214e28f54b) * [OCPBUGS-98410](https://issues.redhat.com/browse/OCPBUGS-98410): [4.19] add serviceAccountToken volume type to psalabelsyncer [#195](https://github.com/openshift/cluster-policy-controller/pull/195) * [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/748524784686a5f397490563882cbfb88f9acd01...d1ea75b45228a6af17f3a1899ab4bd214e28f54b) ### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/17d139ee754b3fadec3e5130cc868e8f281a6e1e) * [OCPBUGS-87095](https://issues.redhat.com/browse/OCPBUGS-87095): remove oVirt code from CSO 4.19 [#705](https://github.com/openshift/cluster-storage-operator/pull/705) * [OCPBUGS-77007](https://issues.redhat.com/browse/OCPBUGS-77007): add vsphere permissions for checking if users is authorized to see metrics [#667](https://github.com/openshift/cluster-storage-operator/pull/667) * [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/47fff3642e619b7dc2c84831573c41e692d1a58c...17d139ee754b3fadec3e5130cc868e8f281a6e1e) ### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/842a2ac2261e03bc5b6717620c076bf58652c1f6) * [OCPBUGS-70181](https://issues.redhat.com/browse/OCPBUGS-70181): OCPBUGS-70181: Unify capitalization when comparing architectures for available updates [#1291](https://github.com/openshift/cluster-version-operator/pull/1291) * [Full changelog](https://github.com/openshift/cluster-version-operator/compare/306af582be129d34ebdbde35707ac148a1eb666e...842a2ac2261e03bc5b6717620c076bf58652c1f6) ### [console](https://github.com/openshift/console/tree/817b7639e78afb67864f79b83d5ddd2e9c1a870b) * [OCPBUGS-100068](https://issues.redhat.com/browse/OCPBUGS-100068): quickstart page i18n misses (Fix Quick Starts i18n bundle lookup for zh-CN)- #16869 [#16871](https://github.com/openshift/console/pull/16871) * [OCPBUGS-86751](https://issues.redhat.com/browse/OCPBUGS-86751), [OCPBUGS-87083](https://issues.redhat.com/browse/OCPBUGS-87083), [OCPBUGS-88750](https://issues.redhat.com/browse/OCPBUGS-88750): [release-4.19] bump package: webpack-dev-server, protobufjs, fast-uri [#16727](https://github.com/openshift/console/pull/16727) * [OCPBUGS-99486](https://issues.redhat.com/browse/OCPBUGS-99486): Disable Knative e2e Cypress tests in CI [#16802](https://github.com/openshift/console/pull/16802) * [OCPBUGS-84285](https://issues.redhat.com/browse/OCPBUGS-84285): Bump follow-redirects to 1.16.0 to fix CVE-2026-40895 [#16672](https://github.com/openshift/console/pull/16672) * Fix for OCPBUGS-81608: CVE-2026-4800 [#16562](https://github.com/openshift/console/pull/16562) * [OCPBUGS-86454](https://issues.redhat.com/browse/OCPBUGS-86454): [release-4.19] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators [#16526](https://github.com/openshift/console/pull/16526) * [OCPBUGS-97966](https://issues.redhat.com/browse/OCPBUGS-97966): Fix false positive scheduler degradation caused by user workloads [#16725](https://github.com/openshift/console/pull/16725) * [OCPBUGS-90623](https://issues.redhat.com/browse/OCPBUGS-90623): Allow VolumeSnapshot restore when parent PVC is deleted [#16661](https://github.com/openshift/console/pull/16661) * [OCPBUGS-89712](https://issues.redhat.com/browse/OCPBUGS-89712): Prevent binary secret data corruption when editing [#16640](https://github.com/openshift/console/pull/16640) * [OCPBUGS-79451](https://issues.redhat.com/browse/OCPBUGS-79451): Bump immutable [#16324](https://github.com/openshift/console/pull/16324) * [OCPBUGS-77126](https://issues.redhat.com/browse/OCPBUGS-77126): [release-4.19] CVE-2026-26996 Bump minimatch library [#16343](https://github.com/openshift/console/pull/16343) * [OCPBUGS-85308](https://issues.redhat.com/browse/OCPBUGS-85308): [release-4.19] Backport OCPBUGS-78439: vsphere settings [#16413](https://github.com/openshift/console/pull/16413) * [OCPBUGS-84772](https://issues.redhat.com/browse/OCPBUGS-84772): Add robots.txt policy to console [#16378](https://github.com/openshift/console/pull/16378) * NO-JIRA: enable multi-architecture yarn builds [#16416](https://github.com/openshift/console/pull/16416) * [OCPBUGS-84271](https://issues.redhat.com/browse/OCPBUGS-84271): Fix VolumeSnapshot and VolumeSnapshotContent table sorting [#16335](https://github.com/openshift/console/pull/16335) * [OCPBUGS-81738](https://issues.redhat.com/browse/OCPBUGS-81738): Fix editing secrets with mixed text and binary data [#16257](https://github.com/openshift/console/pull/16257) * [OCPBUGS-81736](https://issues.redhat.com/browse/OCPBUGS-81736): Migrate InstallPlan components table to PatternFly Table [#16256](https://github.com/openshift/console/pull/16256) * [OCPBUGS-81574](https://issues.redhat.com/browse/OCPBUGS-81574): Clean up old session cookies to prevent accumulation [#16242](https://github.com/openshift/console/pull/16242) * [OCPBUGS-81515](https://issues.redhat.com/browse/OCPBUGS-81515): Visiting Group Detail Page > RoleBindings will show error [#16234](https://github.com/openshift/console/pull/16234) * [OCPBUGS-78292](https://issues.redhat.com/browse/OCPBUGS-78292): Fix infinite recursion in project access form [#16130](https://github.com/openshift/console/pull/16130) * [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16071](https://github.com/openshift/console/pull/16071) * [OCPBUGS-76950](https://issues.redhat.com/browse/OCPBUGS-76950): “Import from Git” should not force HTTPS/443 for Git providers (GitHub/GitLab/Bitbucket) [#16028](https://github.com/openshift/console/pull/16028) * [OCPBUGS-74464](https://issues.redhat.com/browse/OCPBUGS-74464): Bump lodash to latest [#15964](https://github.com/openshift/console/pull/15964) * [OCPBUGS-74341](https://issues.redhat.com/browse/OCPBUGS-74341): Do not resolve disabled catalog type extensions [#15945](https://github.com/openshift/console/pull/15945) * [OCPBUGS-70335](https://issues.redhat.com/browse/OCPBUGS-70335): OpenShift Console can only show user name instead of full name as the display name [#15888](https://github.com/openshift/console/pull/15888) * [OCPBUGS-72399](https://issues.redhat.com/browse/OCPBUGS-72399): Fix Helm chart installation with CA/TLS certificates [#15898](https://github.com/openshift/console/pull/15898) * [Full changelog](https://github.com/openshift/console/compare/2bcbee16872e74981977ffabb014064b51df0d99...817b7639e78afb67864f79b83d5ddd2e9c1a870b) ### [console-operator](https://github.com/openshift/console-operator/tree/49cae5ed768e5df8f1f8e3585017a6a8a03aa952) * [NETOBSERV-2296](https://issues.redhat.com/browse/NETOBSERV-2296): add missing annotations on netobserv quickstart [#1094](https://github.com/openshift/console-operator/pull/1094) * [OCPBUGS-98988](https://issues.redhat.com/browse/OCPBUGS-98988): [4.19] Stabilize telemetry config to prevent continuous console pod rollouts [#1193](https://github.com/openshift/console-operator/pull/1193) * [Full changelog](https://github.com/openshift/console-operator/compare/034e4865824a6c10c48b912e8584bf7afb095852...49cae5ed768e5df8f1f8e3585017a6a8a03aa952) ### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/810a3b3f62b0c0c981813e2c8ee70ae24e30fca1) * [OCPBUGS-85715](https://issues.redhat.com/browse/OCPBUGS-85715): CI Build root image tag sync with ART [#238](https://github.com/openshift/containernetworking-plugins/pull/238) * [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/b09f487cf0529098b2065ca169ae85ccec955796...810a3b3f62b0c0c981813e2c8ee70ae24e30fca1) ### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/cad695482eba6c96c5ab52e6c71188f44f85646f) * [OCPBUGS-80490](https://issues.redhat.com/browse/OCPBUGS-80490): Bump google.golang.org/grpc [#386](https://github.com/openshift/cloud-provider-openstack/pull/386) * [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/5f3ccea6b322ae392c328f9aefa390747a7fa035...cad695482eba6c96c5ab52e6c71188f44f85646f) ### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/f604d3542c65ba79c0980a335d6db9cbac7e32d1) * [OCPBUGS-82805](https://issues.redhat.com/browse/OCPBUGS-82805): Bump github.com/moby/spdystream@v0.5.1 [#193](https://github.com/openshift/csi-driver-nfs/pull/193) * [OCPBUGS-80434](https://issues.redhat.com/browse/OCPBUGS-80434): Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.75.1-sec.1 to avoid go version bump and fix CVE-2026-33186 [#178](https://github.com/openshift/csi-driver-nfs/pull/178) * [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/2eb5c109dd19f5a1b84410c0952db5cfaecb2f56...f604d3542c65ba79c0980a335d6db9cbac7e32d1) ### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/4c8a8a5dbf081c2e1ae992cbfa7f419ca5850f0b) * [OCPBUGS-80435](https://issues.redhat.com/browse/OCPBUGS-80435): Bump google.golang.org/grpc to v1.79.3 [#104](https://github.com/openshift/csi-external-attacher/pull/104) * [Full changelog](https://github.com/openshift/csi-external-attacher/compare/a8175e3908635cc8357ac845a271f9e5b278c6aa...4c8a8a5dbf081c2e1ae992cbfa7f419ca5850f0b) ### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/34ed6f82e8789bd26dbd4399d7833e3d09b56173) * [OCPBUGS-82806](https://issues.redhat.com/browse/OCPBUGS-82806): Address CVE-2026-35469 [#140](https://github.com/openshift/csi-external-provisioner/pull/140) * [OCPBUGS-80436](https://issues.redhat.com/browse/OCPBUGS-80436): Bump google.golang.org/grpc [#129](https://github.com/openshift/csi-external-provisioner/pull/129) * [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/9db1cdb1e0dfbe29529561bbdb55b45bd2b1e321...34ed6f82e8789bd26dbd4399d7833e3d09b56173) ### [csi-external-snapshotter, csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter/tree/8a319b5b9df2d4f596b4619f73cf5a65eab031c1) * [OCPBUGS-80438](https://issues.redhat.com/browse/OCPBUGS-80438), [OCPBUGS-80441](https://issues.redhat.com/browse/OCPBUGS-80441): Bump google.golang.org/grpc to v1.79.3 [#210](https://github.com/openshift/csi-external-snapshotter/pull/210) * [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/580c6960cd665dfdc3d77538bb7744b8754aca26...8a319b5b9df2d4f596b4619f73cf5a65eab031c1) ### [docker-builder](https://github.com/openshift/builder/tree/35d2a5fcfb1f791d9da6d6e0dc1de9723d773891) * NO-JIRA: Bump Go builder image from 1.23 to 1.24 for OpenShift 4.19 [#536](https://github.com/openshift/builder/pull/536) * [OCPBUGS-66993](https://issues.redhat.com/browse/OCPBUGS-66993): bump buildah to 1.39.7 to fix CVE-2025-52881 [#497](https://github.com/openshift/builder/pull/497) * [Full changelog](https://github.com/openshift/builder/compare/1909110ecd2034553c5c3d973a6800b4ab75ef78...35d2a5fcfb1f791d9da6d6e0dc1de9723d773891) ### [docker-registry](https://github.com/openshift/image-registry/tree/53c4fd9d7448c1bad07cb45abfb47b25046deedc) * [OCPBUGS-68302](https://issues.redhat.com/browse/OCPBUGS-68302): update logrus to v1.9.1 [#463](https://github.com/openshift/image-registry/pull/463) * [Full changelog](https://github.com/openshift/image-registry/compare/b1d09765386d98825e92d8759767a53849d82e9a...53c4fd9d7448c1bad07cb45abfb47b25046deedc) ### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/b9ba5d49ffcd39bbd9a54033032496985bd99489) * [OCPBUGS-99750](https://issues.redhat.com/browse/OCPBUGS-99750): Bump containernetworking/cni to v1.3.0 github.com/containernetworking/plugins to 1.4.0 [#108](https://github.com/openshift/egress-router-cni/pull/108) * [Full changelog](https://github.com/openshift/egress-router-cni/compare/85353bb936a289b8b817f7b437afacdf7458c667...b9ba5d49ffcd39bbd9a54033032496985bd99489) ### [etcd](https://github.com/openshift/etcd/tree/3ebce536634cb76794f1b9668072a094c132c16a) * [OCPBUGS-74602](https://issues.redhat.com/browse/OCPBUGS-74602): 4.19 rebase 3.5.26 [#360](https://github.com/openshift/etcd/pull/360) * [Full changelog](https://github.com/openshift/etcd/compare/0737eac4bbe3903f725064c06a88af761418e5fd...3ebce536634cb76794f1b9668072a094c132c16a) ### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/cc42384fe0834f4d1711bc4e2794fab2886f292f) * [OCPBUGS-80451](https://issues.redhat.com/browse/OCPBUGS-80451): Bump google.golang.org/grpc to v1.79.3 [#289](https://github.com/openshift/cluster-api-provider-gcp/pull/289) * [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/c8b865a1c4045a3b62dbf5ffea514f2c62d893f8...cc42384fe0834f4d1711bc4e2794fab2886f292f) ### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/d4bcb42cde235fd104ce5e1937618a0d3c44dea0) * [OCPBUGS-80473](https://issues.redhat.com/browse/OCPBUGS-80473): Bump google.golang.org/grpc to v1.79.3 [#164](https://github.com/openshift/machine-api-provider-gcp/pull/164) * [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/4fd69cf5c0b71fb477271c69d6ddd4b276b18092...d4bcb42cde235fd104ce5e1937618a0d3c44dea0) ### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/68f780b93df28977b0f0569814b14d7db2500edb) * [OCPBUGS-80455](https://issues.redhat.com/browse/OCPBUGS-80455): Bump google.golang.org/grpc to v1.79.3 in release-4.19 [#110](https://github.com/openshift/gcp-pd-csi-driver/pull/110) * [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/cdaddac53f3a5624216a0b8a08953a3d5d572a9d...68f780b93df28977b0f0569814b14d7db2500edb) ### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/19962336d00de10a9e173dbae33973a1abcaeb3f) * [OCPBUGS-80454](https://issues.redhat.com/browse/OCPBUGS-80454): Replace google.golang.org/grpc with fork [#186](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/186) * [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/44c74f24fba97b4afdbac55c9e77eb50eb21a4d1...19962336d00de10a9e173dbae33973a1abcaeb3f) ### [haproxy-router](https://github.com/openshift/router/tree/2ea2a16ff8a5f25e4212bee0a5206dc8aa697534) * [OCPBUGS-86716](https://issues.redhat.com/browse/OCPBUGS-86716): Strip X-SSL-* headers for plain HTTP [#799](https://github.com/openshift/router/pull/799) * [OCPBUGS-80456](https://issues.redhat.com/browse/OCPBUGS-80456): Bump google.golang.org/grpc to v1.79.3 [#767](https://github.com/openshift/router/pull/767) * [Full changelog](https://github.com/openshift/router/compare/5fe8cc069b2f44b3393545ac92c3201e8a87d82b...2ea2a16ff8a5f25e4212bee0a5206dc8aa697534) ### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/63adf010aa20e104c0b7043b47f42f50c9f72b17) * [OCPBUGS-82786](https://issues.redhat.com/browse/OCPBUGS-82786), [OCPBUGS-82814](https://issues.redhat.com/browse/OCPBUGS-82814): Address CVE-2026-35469 [#2680](https://github.com/openshift/kubernetes/pull/2680) * [OCPBUGS-77478](https://issues.redhat.com/browse/OCPBUGS-77478): Rebase v1.32.13 to release-4.19 [#2602](https://github.com/openshift/kubernetes/pull/2602) * [OCPBUGS-76518](https://issues.redhat.com/browse/OCPBUGS-76518): Rebase v1.32.12 [#2592](https://github.com/openshift/kubernetes/pull/2592) * [Full changelog](https://github.com/openshift/kubernetes/compare/9d45edc58ca6d5240fc84d3d50eb7490aa683c16...63adf010aa20e104c0b7043b47f42f50c9f72b17) ### [hypershift](https://github.com/openshift/hypershift/tree/513432298d58160933165042456e543ace99b66b) * [OCPBUGS-99116](https://issues.redhat.com/browse/OCPBUGS-99116): fix(backport): konnectivity agent auth [#9094](https://github.com/openshift/hypershift/pull/9094) * [OCPBUGS-89355](https://issues.redhat.com/browse/OCPBUGS-89355): build(operator): drop hypershift-no-cgo from operator container images [#8759](https://github.com/openshift/hypershift/pull/8759) * NO-JIRA: fix(tekton): remove path filter from control-plane-operator pipelines [#8664](https://github.com/openshift/hypershift/pull/8664) * [OCPBUGS-85623](https://issues.redhat.com/browse/OCPBUGS-85623): fix CVE-2026-33186 by replacing grpc-go [#8512](https://github.com/openshift/hypershift/pull/8512) * [OCPBUGS-84143](https://issues.redhat.com/browse/OCPBUGS-84143): fix(cno): use brackets only for IPv6 in server URL [#8345](https://github.com/openshift/hypershift/pull/8345) * [OCPBUGS-81161](https://issues.redhat.com/browse/OCPBUGS-81161): [release-4.19] fix(cpo): Don't remove HCP Ingress from routes when CapabilityRoute is disabled [#8093](https://github.com/openshift/hypershift/pull/8093) * [OCPBUGS-78742](https://issues.redhat.com/browse/OCPBUGS-78742): fix(sync-global-pullsecret): compare content ignoring trailing newlines [#7992](https://github.com/openshift/hypershift/pull/7992) * [OCPBUGS-74106](https://issues.redhat.com/browse/OCPBUGS-74106): Fix CVE-2025-58183 [#7547](https://github.com/openshift/hypershift/pull/7547) * [OCPBUGS-76531](https://issues.redhat.com/browse/OCPBUGS-76531): feat(updates): enable CVO metrics access with RHOBS monitoring flag [#7698](https://github.com/openshift/hypershift/pull/7698) * [OCPBUGS-77367](https://issues.redhat.com/browse/OCPBUGS-77367), [OCPBUGS-77844](https://issues.redhat.com/browse/OCPBUGS-77844): Fix ignition-server pod restarts [#7858](https://github.com/openshift/hypershift/pull/7858) * [OCPBUGS-75932](https://issues.redhat.com/browse/OCPBUGS-75932): [release-4.19] fix(cpo): Correct route labeling logic for HCP router infrastructure [#7643](https://github.com/openshift/hypershift/pull/7643) * [Full changelog](https://github.com/openshift/hypershift/compare/e10a26e9d62fcb2eb0ebe83c57fdfd1815e7354e...513432298d58160933165042456e543ace99b66b) ### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/7923f6c19410d90324a22e34b7eb7ee2dae8197c) * [OCPBUGS-80461](https://issues.redhat.com/browse/OCPBUGS-80461): Bump google.golang.org/grpc to v1.79.3 [#142](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/142) * [OCPBUGS-77206](https://issues.redhat.com/browse/OCPBUGS-77206): [release-4.19] standardize build paths [#119](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/119) * [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/176b6ef1136c45b8e3cb24a48458a251deca99bc...7923f6c19410d90324a22e34b7eb7ee2dae8197c) ### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/bdbc75c1786a8a58e7d1a9c24db95e6a5a334266) * [OCPBUGS-81483](https://issues.redhat.com/browse/OCPBUGS-81483): bump vpc go sdk [#90](https://github.com/openshift/machine-api-provider-ibmcloud/pull/90) * NO-JIRA: Modernize test infrastructure to align with other MAPI providers [#86](https://github.com/openshift/machine-api-provider-ibmcloud/pull/86) * [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/989bd87446d6fcbb2d7db20c90224621fac6ddb4...bdbc75c1786a8a58e7d1a9c24db95e6a5a334266) ### [insights-operator](https://github.com/openshift/insights-operator/tree/4ce5a29f1e17621217eb2b811dbf8d3cbbd663df) * [OCPBUGS-105424](https://issues.redhat.com/browse/OCPBUGS-105424): Fix indentation bug on livenessProbe [#1340](https://github.com/openshift/insights-operator/pull/1340) * [OCPBUGS-99987](https://issues.redhat.com/browse/OCPBUGS-99987): update HyperShift deployment manifest [#1328](https://github.com/openshift/insights-operator/pull/1328) * [OCPBUGS-88482](https://issues.redhat.com/browse/OCPBUGS-88482): [release-4.19] extractor-controller [#1306](https://github.com/openshift/insights-operator/pull/1306) * [OCPBUGS-87808](https://issues.redhat.com/browse/OCPBUGS-87808): add config option to disable runtime extractor [#1303](https://github.com/openshift/insights-operator/pull/1303) * [OCPBUGS-80464](https://issues.redhat.com/browse/OCPBUGS-80464): Bump google.golang.org/grpc to v1.79.3 [#1282](https://github.com/openshift/insights-operator/pull/1282) * [OCPBUGS-83563](https://issues.redhat.com/browse/OCPBUGS-83563): kubeletconfig gatherer [#1272](https://github.com/openshift/insights-operator/pull/1272) * [OCPBUGS-76962](https://issues.redhat.com/browse/OCPBUGS-76962): Extends the time for the extractor liveness probe [#1230](https://github.com/openshift/insights-operator/pull/1230) * [OCPBUGS-75902](https://issues.redhat.com/browse/OCPBUGS-75902): [bugfix] The ConfigMap value for StoragePath is ignored on basic routine [#1224](https://github.com/openshift/insights-operator/pull/1224) * [Full changelog](https://github.com/openshift/insights-operator/compare/73c8e92a8b9c37e3f2432861e21964495e435d86...4ce5a29f1e17621217eb2b811dbf8d3cbbd663df) ### [insights-runtime-exporter, insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor/tree/f897761561e72281c27a9aac851ef936b874a2b9) * [OCPBUGS-77779](https://issues.redhat.com/browse/OCPBUGS-77779): remove dnf cache from the container images [#68](https://github.com/openshift/insights-runtime-extractor/pull/68) * [Full changelog](https://github.com/openshift/insights-runtime-extractor/compare/0bee2d9be935de315081be77c910a8e40204e0b8...f897761561e72281c27a9aac851ef936b874a2b9) ### [ironic](https://github.com/openshift/ironic-image/tree/28707d95dfeb0dbd81089a9feb9dc16d8df7a824) * [OCPBUGS-84855](https://issues.redhat.com/browse/OCPBUGS-84855): Bump pyasn1 to 0.5.1-4 [#825](https://github.com/openshift/ironic-image/pull/825) * [OCPBUGS-74406](https://issues.redhat.com/browse/OCPBUGS-74406): Update sushy to include DGX B200 credentials fix [#819](https://github.com/openshift/ironic-image/pull/819) * [OCPBUGS-74116](https://issues.redhat.com/browse/OCPBUGS-74116): Bump keystonemiddleware version to 10.9.0-0.20260216145500.557d173 for CVE-2026-22797 fix [#794](https://github.com/openshift/ironic-image/pull/794) * [OCPBUGS-77028](https://issues.redhat.com/browse/OCPBUGS-77028): Update ironic hash for 4.19 with heartbeat inspection fix [#797](https://github.com/openshift/ironic-image/pull/797) * [OCPBUGS-69785](https://issues.redhat.com/browse/OCPBUGS-69785): Bump eventlet version to 0.33.1-7 [#759](https://github.com/openshift/ironic-image/pull/759) * [Full changelog](https://github.com/openshift/ironic-image/compare/d4486ad74e3f52ae77ce4efde325eda09867901d...28707d95dfeb0dbd81089a9feb9dc16d8df7a824) ### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/93cb0c2763ae37db868038423a4eda6431dbcc13) * [OCPBUGS-95065](https://issues.redhat.com/browse/OCPBUGS-95065): Replace individual package removal with a single rpm -e loop [#285](https://github.com/openshift/ironic-agent-image/pull/285) * [OCPBUGS-95065](https://issues.redhat.com/browse/OCPBUGS-95065): Replace dnf remove with rpm -e to prevent dependency removal [#273](https://github.com/openshift/ironic-agent-image/pull/273) * [OCPBUGS-69783](https://issues.redhat.com/browse/OCPBUGS-69783): Bump eventlet version to 0.33.1-7 [#229](https://github.com/openshift/ironic-agent-image/pull/229) * [Full changelog](https://github.com/openshift/ironic-agent-image/compare/56c08b16061b026429f342fc6905e04894101591...93cb0c2763ae37db868038423a4eda6431dbcc13) ### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/d482dffae6a16460fc34ddd896d1d8cef3af50bd) * [OCPBUGS-80365](https://issues.redhat.com/browse/OCPBUGS-80365): Bump google.golang.org/grpc to v1.79.3 [#63](https://github.com/openshift/kubernetes-metrics-server/pull/63) * [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/037a0e7e4ef401cd81d3e8330eeed26c8c753592...d482dffae6a16460fc34ddd896d1d8cef3af50bd) ### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/ea8b50c5554ce2ce56ec925d67791e5ed655957c) * [OCPBUGS-99405](https://issues.redhat.com/browse/OCPBUGS-99405): fix CronJob timezone panic and embed tzdata in kube-state-metrics [#154](https://github.com/openshift/kube-state-metrics/pull/154) * [Full changelog](https://github.com/openshift/kube-state-metrics/compare/c3da3b5fdc5bd2d23966e33b676701a4950b1a53...ea8b50c5554ce2ce56ec925d67791e5ed655957c) ### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/f0ff269ad70900ec841e2e47a9d92e6703bc6539) * [OCPBUGS-78392](https://issues.redhat.com/browse/OCPBUGS-78392): Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART for 4.19 [#63](https://github.com/openshift/cloud-provider-kubevirt/pull/63) * [OCPBUGS-78392](https://issues.redhat.com/browse/OCPBUGS-78392): Regenerate go.sum to fix verify-deps [#85](https://github.com/openshift/cloud-provider-kubevirt/pull/85) * [OCPBUGS-95085](https://issues.redhat.com/browse/OCPBUGS-95085): OWNERS: Update component to Cloud Compute / KubeVirt Provider [#84](https://github.com/openshift/cloud-provider-kubevirt/pull/84) * [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b...f0ff269ad70900ec841e2e47a9d92e6703bc6539) ### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/f7dbbba1f6134ac84ad00e6849003a75c4b4a076) * [OCPBUGS-80366](https://issues.redhat.com/browse/OCPBUGS-80366): Bump google.golang.org/grpc to v1.79.3 [#100](https://github.com/openshift/kubevirt-csi-driver/pull/100) * [OCPBUGS-79322](https://issues.redhat.com/browse/OCPBUGS-79322): Add annotation-based fallback for infra VM node ID resolution [#85](https://github.com/openshift/kubevirt-csi-driver/pull/85) * [OCPBUGS-78389](https://issues.redhat.com/browse/OCPBUGS-78389): Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.19 [#79](https://github.com/openshift/kubevirt-csi-driver/pull/79) * [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/f535e9a1a27ebfeca0fa1ac33f19383f46629141...f7dbbba1f6134ac84ad00e6849003a75c4b4a076) ### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/be869073822c90e5d2e026f6af76a20d7e570ccc) * [OCPBUGS-77193](https://issues.redhat.com/browse/OCPBUGS-77193): Fix incomplete vendor/ [#299](https://github.com/openshift/cluster-api-provider-libvirt/pull/299) * [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/a336f0b5f7ee99c418aaab3d511707bd0064bd56...be869073822c90e5d2e026f6af76a20d7e570ccc) ### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/d89af39e4ddb9b0a89d400664cb496e505e71991) * [OCPBUGS-78715](https://issues.redhat.com/browse/OCPBUGS-78715): : [release-4.19] Use resource group when generating default Azure image [#1479](https://github.com/openshift/machine-api-operator/pull/1479) * [Full changelog](https://github.com/openshift/machine-api-operator/compare/dd0126864cf2196ac84b4c1fe862178b70aebc7a...d89af39e4ddb9b0a89d400664cb496e505e71991) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/1a6905d980fd4c4f3869492b98cb696f09a46cff) * [OCPBUGS-105427](https://issues.redhat.com/browse/OCPBUGS-105427): Replace wildcard permissions with explicit verbs and resources in MCC ClusterRole [#6384](https://github.com/openshift/machine-config-operator/pull/6384) * [OCPBUGS-105216](https://issues.redhat.com/browse/OCPBUGS-105216): Update AMI Whitelist [#6378](https://github.com/openshift/machine-config-operator/pull/6378) * [OCPBUGS-93808](https://issues.redhat.com/browse/OCPBUGS-93808): move cleanUpDuplicatedMC to avoid double reboot on first updated Master node [#6243](https://github.com/openshift/machine-config-operator/pull/6243) * [OCPBUGS-98103](https://issues.redhat.com/browse/OCPBUGS-98103): Remove sensitive ControllerConfig logging [#6287](https://github.com/openshift/machine-config-operator/pull/6287) * [OCPBUGS-95589](https://issues.redhat.com/browse/OCPBUGS-95589): Bootstrap MCS logging entire ignition [#6258](https://github.com/openshift/machine-config-operator/pull/6258) * [OCPBUGS-95273](https://issues.redhat.com/browse/OCPBUGS-95273): Update custom containerfile OCB test to work in a disconnected environment [#6255](https://github.com/openshift/machine-config-operator/pull/6255) * [OCPBUGS-96167](https://issues.redhat.com/browse/OCPBUGS-96167): Update AMI Whitelist [#6263](https://github.com/openshift/machine-config-operator/pull/6263) * [OCPBUGS-88566](https://issues.redhat.com/browse/OCPBUGS-88566): Verify extension packages are installed [#6182](https://github.com/openshift/machine-config-operator/pull/6182) * [OCPBUGS-86986](https://issues.redhat.com/browse/OCPBUGS-86986): Update AMI Whitelist [#6131](https://github.com/openshift/machine-config-operator/pull/6131) * [OCPBUGS-86650](https://issues.redhat.com/browse/OCPBUGS-86650): Apply password only if changes exist [#6097](https://github.com/openshift/machine-config-operator/pull/6097) * [OCPBUGS-86575](https://issues.redhat.com/browse/OCPBUGS-86575): use --delete-if-present for karg removal [#6088](https://github.com/openshift/machine-config-operator/pull/6088) * [OCPBUGS-86586](https://issues.redhat.com/browse/OCPBUGS-86586): Fix re-cordon detection [#6093](https://github.com/openshift/machine-config-operator/pull/6093) * [OCPBUGS-86233](https://issues.redhat.com/browse/OCPBUGS-86233): Fix ssh and password rollbacks [#6069](https://github.com/openshift/machine-config-operator/pull/6069) * [OCPBUGS-66284](https://issues.redhat.com/browse/OCPBUGS-66284): Set -fin timeouts in HAProxy config [#5461](https://github.com/openshift/machine-config-operator/pull/5461) * [OCPBUGS-86165](https://issues.redhat.com/browse/OCPBUGS-86165): Add terminationMessagePolicy to build pod containers [#6064](https://github.com/openshift/machine-config-operator/pull/6064) * [OCPBUGS-85581](https://issues.redhat.com/browse/OCPBUGS-85581): Fix units rollback if update failure [#6039](https://github.com/openshift/machine-config-operator/pull/6039) * [OCPBUGS-85018](https://issues.redhat.com/browse/OCPBUGS-85018): Update AMI Whitelist [#5997](https://github.com/openshift/machine-config-operator/pull/5997) * [OCPBUGS-84042](https://issues.redhat.com/browse/OCPBUGS-84042): Update AMI Whitelist [#5871](https://github.com/openshift/machine-config-operator/pull/5871) * [release 4.19] OCPBUGS-81289: Calculate machine counts in MCP status from node properties [#5823](https://github.com/openshift/machine-config-operator/pull/5823) * [OCPBUGS-76920](https://issues.redhat.com/browse/OCPBUGS-76920): Degrade MCPs status based on MCN `NodeDegraded` condition [#5662](https://github.com/openshift/machine-config-operator/pull/5662) * [OCPBUGS-81282](https://issues.redhat.com/browse/OCPBUGS-81282): Re-order logger setting to eliminate race condition [#5822](https://github.com/openshift/machine-config-operator/pull/5822) * [OCPBUGS-81144](https://issues.redhat.com/browse/OCPBUGS-81144): Update AMI Whitelist [#5817](https://github.com/openshift/machine-config-operator/pull/5817) * [OCPBUGS-79473](https://issues.redhat.com/browse/OCPBUGS-79473): set default-timeout-stop to 200s globally [#5802](https://github.com/openshift/machine-config-operator/pull/5802) * [OCPBUGS-77955](https://issues.redhat.com/browse/OCPBUGS-77955): Update AMI Whitelist [#5749](https://github.com/openshift/machine-config-operator/pull/5749) * [OCPBUGS-77221](https://issues.redhat.com/browse/OCPBUGS-77221): Prevent unnecessary systemd unit disable [#5688](https://github.com/openshift/machine-config-operator/pull/5688) * [OCPBUGS-77828](https://issues.redhat.com/browse/OCPBUGS-77828): Update AMI Whitelist [#5742](https://github.com/openshift/machine-config-operator/pull/5742) * [OCPBUGS-77725](https://issues.redhat.com/browse/OCPBUGS-77725): reduce MCO image size [#5737](https://github.com/openshift/machine-config-operator/pull/5737) * [OCPBUGS-74147](https://issues.redhat.com/browse/OCPBUGS-74147): enable nodeip-configuration for platform external [#5579](https://github.com/openshift/machine-config-operator/pull/5579) * [OCPBUGS-77229](https://issues.redhat.com/browse/OCPBUGS-77229): Backport: Add delays to reduce TestOSBuildController failures [#5690](https://github.com/openshift/machine-config-operator/pull/5690) * [OCPBUGS-77420](https://issues.redhat.com/browse/OCPBUGS-77420): Remove MCD liveness probe [#5711](https://github.com/openshift/machine-config-operator/pull/5711) * [OCPBUGS-77306](https://issues.redhat.com/browse/OCPBUGS-77306): mcd_config_drift not working properly [#5700](https://github.com/openshift/machine-config-operator/pull/5700) * [OCPBUGS-77240](https://issues.redhat.com/browse/OCPBUGS-77240): Fix MCN conditions not updating during OCL sync [#5693](https://github.com/openshift/machine-config-operator/pull/5693) * [OCPBUGS-77071](https://issues.redhat.com/browse/OCPBUGS-77071): Machine-config controller should not log about non-existent pull-secret changes [#5674](https://github.com/openshift/machine-config-operator/pull/5674) * [OCPBUGS-76831](https://issues.redhat.com/browse/OCPBUGS-76831): machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] [#5658](https://github.com/openshift/machine-config-operator/pull/5658) * [OCPBUGS-76362](https://issues.redhat.com/browse/OCPBUGS-76362): Update AMI script and list [#5640](https://github.com/openshift/machine-config-operator/pull/5640) * [OCPBUGS-43435](https://issues.redhat.com/browse/OCPBUGS-43435): After OCL is enabled few phases in MCN are not updating as expected [#5606](https://github.com/openshift/machine-config-operator/pull/5606) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/b405535023b88949e231be90778e5cf63e438c40...1a6905d980fd4c4f3869492b98cb696f09a46cff) ### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/6d34fbab6ca22e74eb1761278f05d28c42518d8a) * [OCPBUGS-81713](https://issues.redhat.com/browse/OCPBUGS-81713): Return error when network data Secret lacks nmstate key [#173](https://github.com/openshift/image-customization-controller/pull/173) * [OCPBUGS-77567](https://issues.redhat.com/browse/OCPBUGS-77567): Clean up dnf cache to reduce container image size [#166](https://github.com/openshift/image-customization-controller/pull/166) * [Full changelog](https://github.com/openshift/image-customization-controller/compare/7d0667469c6a7980f0f6cbaeb2b17686378696f1...6d34fbab6ca22e74eb1761278f05d28c42518d8a) ### [machine-os-images](https://github.com/openshift/machine-os-images/tree/147cdd71cfee75248abb8138990e82ea8376b3d4) * [OCPBUGS-87875](https://issues.redhat.com/browse/OCPBUGS-87875): Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs [#99](https://github.com/openshift/machine-os-images/pull/99) * [Full changelog](https://github.com/openshift/machine-os-images/compare/32b5f16c7f59698b40cc2a23116804d9067824d2...147cdd71cfee75248abb8138990e82ea8376b3d4) ### [metallb-frr](https://github.com/openshift/frr/tree/9c93b083918f4266b7139ae39207c12cd4824345) * [OCPBUGS-66055](https://issues.redhat.com/browse/OCPBUGS-66055): Dockerfile: unpin FRR rpm [#113](https://github.com/openshift/frr/pull/113) * [Full changelog](https://github.com/openshift/frr/compare/5076dbc4f8483a844f1fce06b57216d743600237...9c93b083918f4266b7139ae39207c12cd4824345) ### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/a628d28e10998d4daa6ee0087ace6610e938b7d2) * [OCPBUGS-99026](https://issues.redhat.com/browse/OCPBUGS-99026): Fix CVE-2026-49978 - bump DOMPurify to >= 3.4.7 [#1088](https://github.com/openshift/monitoring-plugin/pull/1088) * [OU-1240](https://issues.redhat.com/browse/OU-1240): Makefile and package.json to enable test-frontend-ci [#1097](https://github.com/openshift/monitoring-plugin/pull/1097) * [OU-1240](https://issues.redhat.com/browse/OU-1240): Dockerfile.test permission [#1082](https://github.com/openshift/monitoring-plugin/pull/1082) * [OCPBUGS-99306](https://issues.redhat.com/browse/OCPBUGS-99306): graph redirect query parameter [#1075](https://github.com/openshift/monitoring-plugin/pull/1075) * Fix for OCPBUGS-91617: CVE-2026-45736 [#1026](https://github.com/openshift/monitoring-plugin/pull/1026) * [OU-651](https://issues.redhat.com/browse/OU-651): Fix AlertRules page to display user defined loki alerts [#1059](https://github.com/openshift/monitoring-plugin/pull/1059) * Fix for OCPBUGS-94010: CVE-2026-13676 [#1031](https://github.com/openshift/monitoring-plugin/pull/1031) * NO-JIRA: fix incidents unit test [#1040](https://github.com/openshift/monitoring-plugin/pull/1040) * [OCPBUGS-87084](https://issues.redhat.com/browse/OCPBUGS-87084): [release-4.19] fast-uri: URI authority bypass due to improper delimiter handling [#993](https://github.com/openshift/monitoring-plugin/pull/993) * [OCPBUGS-84288](https://issues.redhat.com/browse/OCPBUGS-84288): bump follow-redirects to 1.16.0 [#988](https://github.com/openshift/monitoring-plugin/pull/988) * [OCPBUGS-86923](https://issues.redhat.com/browse/OCPBUGS-86923): Updating monitoring-plugin-container image to be consistent with ART for 4.19 [#970](https://github.com/openshift/monitoring-plugin/pull/970) * [OCPBUGS-79452](https://issues.redhat.com/browse/OCPBUGS-79452): immutable bump: fix for CVE-2026-29063 [4.19] [#952](https://github.com/openshift/monitoring-plugin/pull/952) * [OU-1372](https://issues.redhat.com/browse/OU-1372): reset queries when namespace changes in dev perspective [#950](https://github.com/openshift/monitoring-plugin/pull/950) * [OU-1370](https://issues.redhat.com/browse/OU-1370): prevent namespace and project desync [#944](https://github.com/openshift/monitoring-plugin/pull/944) * [OCPBUGS-83496](https://issues.redhat.com/browse/OCPBUGS-83496): [release-4.19] feat: re enable dev console views [#858](https://github.com/openshift/monitoring-plugin/pull/858) * [OCPBUGS-83300](https://issues.redhat.com/browse/OCPBUGS-83300): [release-4.19] openshift4/ose-monitoring-plugin-rhel9: Axios: Remote Code Execution via Prototype Pollution escalation [#889](https://github.com/openshift/monitoring-plugin/pull/889) * [OCPBUGS-82520](https://issues.redhat.com/browse/OCPBUGS-82520): fix: re encode params when redirecting from graph to query-browser [#874](https://github.com/openshift/monitoring-plugin/pull/874) * [OCPBUGS-77407](https://issues.redhat.com/browse/OCPBUGS-77407): koa bump [#867](https://github.com/openshift/monitoring-plugin/pull/867) * [OCPBUGS-76579](https://issues.redhat.com/browse/OCPBUGS-76579): [release-4.19]CVE-2026-25639 openshift4/ose-monitoring-plugin-rhel9: Axios affected by Denial of Service via __proto__ Key in mergeConfig [#789](https://github.com/openshift/monitoring-plugin/pull/789) * [OCPBUGS-78360](https://issues.redhat.com/browse/OCPBUGS-78360): fix for CVE-2025-69873 [#847](https://github.com/openshift/monitoring-plugin/pull/847) * [OCPBUGS-78397](https://issues.redhat.com/browse/OCPBUGS-78397): Updating monitoring-plugin-container image to be consistent with ART for 4.19 [#842](https://github.com/openshift/monitoring-plugin/pull/842) * NO-JIRA: simplify dockerfile by removing cachito dependencies [release-4.19] [#806](https://github.com/openshift/monitoring-plugin/pull/806) * [OCPBUGS-76937](https://issues.redhat.com/browse/OCPBUGS-76937): fix: update vulnerable dependencies [#773](https://github.com/openshift/monitoring-plugin/pull/773) * [OU-1233](https://issues.redhat.com/browse/OU-1233): monitoring testing on release-4.19 branch - fix [#785](https://github.com/openshift/monitoring-plugin/pull/785) * [OU-1233](https://issues.redhat.com/browse/OU-1233): automation task - main into 419 and alerting conditional filtering [#772](https://github.com/openshift/monitoring-plugin/pull/772) * [OCPBUGS-74166](https://issues.redhat.com/browse/OCPBUGS-74166): fix: update qs vulnerable dependency [#737](https://github.com/openshift/monitoring-plugin/pull/737) * And 1 elided commits (e.g. from squash or rebase merges) * [Full changelog](https://github.com/openshift/monitoring-plugin/compare/6f4e1f7cb29473af8d8ceb65c70eeff0cc0ea53b...a628d28e10998d4daa6ee0087ace6610e938b7d2) ### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/096dd40376213f75c34fee9b1b56ed3693c288d5) * [OCPBUGS-85248](https://issues.redhat.com/browse/OCPBUGS-85248): Fix server url in kubeconfig [#288](https://github.com/openshift/multus-cni/pull/288) * NO-ISSUE: [release-4.19] fix CI build root image [#289](https://github.com/openshift/multus-cni/pull/289) * [Full changelog](https://github.com/openshift/multus-cni/compare/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe...096dd40376213f75c34fee9b1b56ed3693c288d5) ### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/0451c87778f69356a705e79a9575b1e61c80f09c) * [OCPBUGS-77778](https://issues.redhat.com/browse/OCPBUGS-77778): Clean up dnf cache [#103](https://github.com/openshift/multus-networkpolicy/pull/103) * [OCPBUGS-77158](https://issues.redhat.com/browse/OCPBUGS-77158): Fix modified vendor/ and go.sum after vendoring [#82](https://github.com/openshift/multus-networkpolicy/pull/82) * [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/6fffe5d78f52e01e51110d178b433788ef98c8ae...0451c87778f69356a705e79a9575b1e61c80f09c) ### [must-gather](https://github.com/openshift/must-gather/tree/cbe044bce8937a811d97719e13b1459d9e8b1fb0) * [OCPBUGS-85578](https://issues.redhat.com/browse/OCPBUGS-85578): Collect object size with the object count [#546](https://github.com/openshift/must-gather/pull/546) * [Full changelog](https://github.com/openshift/must-gather/compare/b8318d0796b685953b495fc9dcbbc0a6c411b1b6...cbe044bce8937a811d97719e13b1459d9e8b1fb0) ### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/788a4fa09547f838f504f376ff06ad2703ba985b) * [OCPBUGS-60277](https://issues.redhat.com/browse/OCPBUGS-60277): fixed broken link in empty state [#441](https://github.com/openshift/networking-console-plugin/pull/441) * [OCPBUGS-41605](https://issues.redhat.com/browse/OCPBUGS-41605): Retain namespace selection between network policies tabs [#422](https://github.com/openshift/networking-console-plugin/pull/422) * [OCPBUGS-83384](https://issues.redhat.com/browse/OCPBUGS-83384): Fix CVE-2026-34043 in serialize-javascript [#395](https://github.com/openshift/networking-console-plugin/pull/395) * [release-4:19] OCPBUGS-84634: Migration from yarn to npm [#398](https://github.com/openshift/networking-console-plugin/pull/398) * [OCPBUGS-66279](https://issues.redhat.com/browse/OCPBUGS-66279), [OCPBUGS-67251](https://issues.redhat.com/browse/OCPBUGS-67251): fix node-forge by upgrading webpack-dev-server: ^4.7.4 → ^5.2.3" [#410](https://github.com/openshift/networking-console-plugin/pull/410) * [OCPBUGS-73654](https://issues.redhat.com/browse/OCPBUGS-73654): CVE-2026-22029 fix to @remix-run/router to 1.23.2 [#405](https://github.com/openshift/networking-console-plugin/pull/405) * [OCPBUGS-81610](https://issues.redhat.com/browse/OCPBUGS-81610): Fix CVE-2026-CVE-2026-4800 in lodash [#400](https://github.com/openshift/networking-console-plugin/pull/400) * [OCPBUGS-79453](https://issues.redhat.com/browse/OCPBUGS-79453): Bump immutable [#391](https://github.com/openshift/networking-console-plugin/pull/391) * [OCPBUGS-41199](https://issues.redhat.com/browse/OCPBUGS-41199): Fix NAD creation using default namespace instead of selected one [#351](https://github.com/openshift/networking-console-plugin/pull/351) * And 1 elided commits (e.g. from squash or rebase merges) * [Full changelog](https://github.com/openshift/networking-console-plugin/compare/ff0b84b4f4b15e8e7e33741182e5e33c4e68d1b1...788a4fa09547f838f504f376ff06ad2703ba985b) ### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/5539eb2b1174fe0d8a65287c449c99ec3a362122) * NO-JIRA: (chore): update OWNERS file [#169](https://github.com/openshift/oauth-apiserver/pull/169) * [Full changelog](https://github.com/openshift/oauth-apiserver/compare/33c6d284c652a1a2088c943d19732f23c86b1da8...5539eb2b1174fe0d8a65287c449c99ec3a362122) ### [oauth-server](https://github.com/openshift/oauth-server/tree/88571ca76b4b039c33dec0b66e0a853b4447c8b1) * [OCPBUGS-81808](https://issues.redhat.com/browse/OCPBUGS-81808): Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 [#237](https://github.com/openshift/oauth-server/pull/237) * [Full changelog](https://github.com/openshift/oauth-server/compare/eafa143a67a0ba86439f96ceb6a1ca9d2b3815e3...88571ca76b4b039c33dec0b66e0a853b4447c8b1) ### [oc-mirror](https://github.com/openshift/oc-mirror/tree/9700b486d6b4b4625060caef2c2804c429d676fb) * [OCPBUGS-78147](https://issues.redhat.com/browse/OCPBUGS-78147): Fix registriesd "unknown userid" failure for arbitrary UIDs [#1367](https://github.com/openshift/oc-mirror/pull/1367) * [OCPBUGS-77663](https://issues.redhat.com/browse/OCPBUGS-77663): Fix reg config detection for explicit false values [#1363](https://github.com/openshift/oc-mirror/pull/1363) * [Full changelog](https://github.com/openshift/oc-mirror/compare/140e0b81946e64e8ec0a3aade50ed219769b5ea6...9700b486d6b4b4625060caef2c2804c429d676fb) ### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/47555147813f3e646c86193f88f94ccbb2d0e619) * [OCPBUGS-104519](https://issues.redhat.com/browse/OCPBUGS-104519): Fix cache path to avoid /var/cache/dnf conflict [#789](https://github.com/openshift/operator-framework-operator-controller/pull/789) * [OCPBUGS-100313](https://issues.redhat.com/browse/OCPBUGS-100313): increase catalog HTTP client timeout from 10s to 5m [#784](https://github.com/openshift/operator-framework-operator-controller/pull/784) * [OCPBUGS-87180](https://issues.redhat.com/browse/OCPBUGS-87180): [release-4.19] catalogd: clean up orphaned temp dirs in catalog storage [#748](https://github.com/openshift/operator-framework-operator-controller/pull/748) * [OCPBUGS-80484](https://issues.redhat.com/browse/OCPBUGS-80484), [OCPBUGS-80485](https://issues.redhat.com/browse/OCPBUGS-80485): Update grpc to v1.75.1-sec.1 to fix CVE-2026-33186 [#731](https://github.com/openshift/operator-framework-operator-controller/pull/731) * [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/4b3ad172bc6e39f82cf1a1925df2cd1ef294d0d8...47555147813f3e646c86193f88f94ccbb2d0e619) ### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/0a0123dc2dfb4a9148c1d0b3c032034555eb8969) * [OCPBUGS-82820](https://issues.redhat.com/browse/OCPBUGS-82820): Address CVE-2026-35469 [#647](https://github.com/openshift/openshift-apiserver/pull/647) * [Full changelog](https://github.com/openshift/openshift-apiserver/compare/a5eb0298114e532b8b1e3cca74e3c263136892ac...0a0123dc2dfb4a9148c1d0b3c032034555eb8969) ### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/bd1fc7041d18f108120a86a4429c4f45b624b04b) * UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into release-4.19 [#393](https://github.com/openshift/cluster-api-provider-openstack/pull/393) * [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/4e7f9611b32128a93fac36d2ea554a931dfe4f85...bd1fc7041d18f108120a86a4429c4f45b624b04b) ### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/bc4fe51daf4f4a9329ec15745b0b3b9188f23729) * [OCPBUGS-94015](https://issues.redhat.com/browse/OCPBUGS-94015): Revendor CAPO [#173](https://github.com/openshift/machine-api-provider-openstack/pull/173) * [OCPBUGS-69646](https://issues.redhat.com/browse/OCPBUGS-69646): Don't record event for every reconcile [#144](https://github.com/openshift/machine-api-provider-openstack/pull/144) * [OCPBUGS-76791](https://issues.redhat.com/browse/OCPBUGS-76791): Fix make test [#158](https://github.com/openshift/machine-api-provider-openstack/pull/158) * [OCPBUGS-74586](https://issues.redhat.com/browse/OCPBUGS-74586): Revendor CAPO [#151](https://github.com/openshift/machine-api-provider-openstack/pull/151) * [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/848bf658a280e6ab6f660c290a24e16fa29252e3...bc4fe51daf4f4a9329ec15745b0b3b9188f23729) ### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/c606498ade273e9392d6b10713a1e926c09095b0) * [OCPBUGS-80492](https://issues.redhat.com/browse/OCPBUGS-80492), [OCPBUGS-80493](https://issues.redhat.com/browse/OCPBUGS-80493), [OCPBUGS-80494](https://issues.redhat.com/browse/OCPBUGS-80494): Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.75.1-sec.1 [release-4.19] [#1310](https://github.com/openshift/operator-framework-olm/pull/1310) * [OCPBUGS-79700](https://issues.redhat.com/browse/OCPBUGS-79700): Fix nil pointer dereference in sortUnpackJobs when sorting non-failed jobs [#1270](https://github.com/openshift/operator-framework-olm/pull/1270) * [OCPBUGS-77437](https://issues.redhat.com/browse/OCPBUGS-77437): Remove the collect-profiles info from the microshift kustomization file [#1240](https://github.com/openshift/operator-framework-olm/pull/1240) * [OCPBUGS-76587](https://issues.redhat.com/browse/OCPBUGS-76587): Remove the collect-profiles job [#1229](https://github.com/openshift/operator-framework-olm/pull/1229) * [Full changelog](https://github.com/openshift/operator-framework-olm/compare/8332256a5954ab312b33e91fd1befa847f551a0b...c606498ade273e9392d6b10713a1e926c09095b0) ### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/ca41bfdd1a96f70632ea3d218a9a007ecbcf76f5) * [OCPBUGS-73882](https://issues.redhat.com/browse/OCPBUGS-73882): Increase default catalog polling interval to 4h (240m) [#706](https://github.com/operator-framework/operator-marketplace/pull/706) * [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/149d0563f4120e60ace15b90b736953c57e73249...ca41bfdd1a96f70632ea3d218a9a007ecbcf76f5) ### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/6672a3cf649d5a6763386259588ad23d9fca2038) * [OCPBUGS-98616](https://issues.redhat.com/browse/OCPBUGS-98616): Branch Sync release-4.20 to release-4.19 [07-09-2026] [#3289](https://github.com/openshift/ovn-kubernetes/pull/3289) * [OCPBUGS-82825](https://issues.redhat.com/browse/OCPBUGS-82825): Bump github.com/moby/spdystream to v0.5.1 [#3320](https://github.com/openshift/ovn-kubernetes/pull/3320) * [OCPBUGS-98212](https://issues.redhat.com/browse/OCPBUGS-98212): Branch Sync release-4.20 to release-4.19 [05-27-2026] [#3207](https://github.com/openshift/ovn-kubernetes/pull/3207) * [OCPBUGS-85512](https://issues.redhat.com/browse/OCPBUGS-85512): Branch Sync release-4.20 to release-4.19 [05-12-2026] [#3186](https://github.com/openshift/ovn-kubernetes/pull/3186) * [OCPBUGS-74397](https://issues.redhat.com/browse/OCPBUGS-74397), [OCPBUGS-85355](https://issues.redhat.com/browse/OCPBUGS-85355): Branch Sync release-4.20 to release-4.19 [05-10-2026] [#3181](https://github.com/openshift/ovn-kubernetes/pull/3181) * [OCPBUGS-81478](https://issues.redhat.com/browse/OCPBUGS-81478): node: fix serviceUpdateNotNeeded nil pointer comparison [#3100](https://github.com/openshift/ovn-kubernetes/pull/3100) * [OCPBUGS-82032](https://issues.redhat.com/browse/OCPBUGS-82032): Branch Sync release-4.20 to release-4.19 [04-04-2026] [#3116](https://github.com/openshift/ovn-kubernetes/pull/3116) * [OCPBUGS-81526](https://issues.redhat.com/browse/OCPBUGS-81526): Branch Sync release-4.20 to release-4.19 [03-03-2026] [#3034](https://github.com/openshift/ovn-kubernetes/pull/3034) * [OCPBUGS-77442](https://issues.redhat.com/browse/OCPBUGS-77442): Clear stale conntrack UDP entries for nodePorts [#3015](https://github.com/openshift/ovn-kubernetes/pull/3015) * [OCPBUGS-77082](https://issues.redhat.com/browse/OCPBUGS-77082), [OCPBUGS-77096](https://issues.redhat.com/browse/OCPBUGS-77096): [release-4.19] combined backport PR for 2 escalations [#2986](https://github.com/openshift/ovn-kubernetes/pull/2986) * [OCPBUGS-74269](https://issues.redhat.com/browse/OCPBUGS-74269): release-4.19 fix(localnet, ipamless): Prevent LSP deletion on sync [#2942](https://github.com/openshift/ovn-kubernetes/pull/2942) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/16e5e201025c67a8cc2253851ebbbe3dfa7d7910...6672a3cf649d5a6763386259588ad23d9fca2038) ### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/c96184e9ef1c49b83ebbde7aa5610d24ea3ff6ac) * [OCPBUGS-86907](https://issues.redhat.com/browse/OCPBUGS-86907): Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.19 [#135](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/135) * [OCPBUGS-80497](https://issues.redhat.com/browse/OCPBUGS-80497): Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 [#129](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/129) * [OCPBUGS-82826](https://issues.redhat.com/browse/OCPBUGS-82826): Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 [#123](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/123) * [OCPBUGS-75601](https://issues.redhat.com/browse/OCPBUGS-75601): Mitigate CVE-2025-61726 by bumping golang to 1.24.13 [#119](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/119) * [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/f681413d902e6634afd9d4ae80fd3b6e915f6585...c96184e9ef1c49b83ebbde7aa5610d24ea3ff6ac) ### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/ad49862f7580502d75985117bb52bafb78d8ee78) * [OCPBUGS-80498](https://issues.redhat.com/browse/OCPBUGS-80498): Fix CVE-2026-33186 by bumping google.golang.org/grpc to v1.79.3 [#109](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/109) * [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/059d95c2941b5f8127d92b83e099a7e14021f2c2...ad49862f7580502d75985117bb52bafb78d8ee78) ### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/fd25fd0b25a51474d045d74fd571ecb4d1e7f3c5) * [OCPBUGS-80499](https://issues.redhat.com/browse/OCPBUGS-80499): Replace google.golang.org/grpc with openshift-sustaining fork v1.75.1-sec.1 to v1.79.3 to fix CVE-2026-33186 [#100](https://github.com/openshift/cloud-provider-powervs/pull/100) * [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/ef83f3f5b8bf00f829bb71d1857a5f59e63f9f17...fd25fd0b25a51474d045d74fd571ecb4d1e7f3c5) ### [prometheus](https://github.com/openshift/prometheus/tree/6ab29bbc7903e6493b6e1b5aaf3e0df26ac47295) * [OCPBUGS-88654](https://issues.redhat.com/browse/OCPBUGS-88654): remote: validate snappy decoded length before allocation in read endpoint [#343](https://github.com/openshift/prometheus/pull/343) * [OCPBUGS-98388](https://issues.redhat.com/browse/OCPBUGS-98388): fix: TLS client cert rotation when no CA is configured [#341](https://github.com/openshift/prometheus/pull/341) * [OCPBUGS-80500](https://issues.redhat.com/browse/OCPBUGS-80500): Bump google.golang.org/grpc to v1.79.3 [#307](https://github.com/openshift/prometheus/pull/307) * [Full changelog](https://github.com/openshift/prometheus/compare/396601b64177f9c6f9d52ff8ac53017c9d150ff7...6ab29bbc7903e6493b6e1b5aaf3e0df26ac47295) ### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/e01fd7c2f6bf9c14c4e110dd06c33840369b0b1c) * [OCPBUGS-100354](https://issues.redhat.com/browse/OCPBUGS-100354): Set testdata CA expiry to 20 years from issue date (#4112) [#150](https://github.com/openshift/prometheus-alertmanager/pull/150) * [OCPBUGS-99450](https://issues.redhat.com/browse/OCPBUGS-99450): embed tzdata in the alertmanager binary [#144](https://github.com/openshift/prometheus-alertmanager/pull/144) * [OCPBUGS-73759](https://issues.redhat.com/browse/OCPBUGS-73759): Include go-verify-deps expected files in gitignore [#111](https://github.com/openshift/prometheus-alertmanager/pull/111) * [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/a2346ca5bd71f535399435cd70a8e9519e521c4b...e01fd7c2f6bf9c14c4e110dd06c33840369b0b1c) ### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/40703af366f376665b8b0c303233463845de285c) * [OCPBUGS-77297](https://issues.redhat.com/browse/OCPBUGS-77297): backport upstream fix to reconcile resources with inconsistent status [#368](https://github.com/openshift/prometheus-operator/pull/368) * [OCPBUGS-77269](https://issues.redhat.com/browse/OCPBUGS-77269): Validate `webhookURL` secret for `MSTeams` receiver in `AlertmanagerConfig` CRD [#363](https://github.com/openshift/prometheus-operator/pull/363) * [Full changelog](https://github.com/openshift/prometheus-operator/compare/69f2cb92ad5f03ecbe03793f0ee197aa2be67480...40703af366f376665b8b0c303233463845de285c) ### [rhel-coreos, rhel-coreos-extensions](https://github.com/openshift/os/tree/48a00b3b021336fe75a4f104af5383cc7589c5a0) * NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches [#1921](https://github.com/openshift/os/pull/1921) * [OCPBUGS-82525](https://issues.redhat.com/browse/OCPBUGS-82525): post-process: Remove workaround for openvswitch additional group [#1927](https://github.com/openshift/os/pull/1927) * And 1 elided commits (e.g. from squash or rebase merges) * [Full changelog](https://github.com/openshift/os/compare/e97898c8af9cad8e5375e4860a7d79c39a1c79fa...48a00b3b021336fe75a4f104af5383cc7589c5a0) ### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/6068e2c71fc1efb67324a91f48c1470c647f1344) * [OCPBUGS-80378](https://issues.redhat.com/browse/OCPBUGS-80378): Bump google.golang.org/grpc to v1.79.3 [#84](https://github.com/openshift/route-controller-manager/pull/84) * [OCPBUGS-77172](https://issues.redhat.com/browse/OCPBUGS-77172): filter ingress namespace on UnmanagedRoutes metric [#75](https://github.com/openshift/route-controller-manager/pull/75) * [Full changelog](https://github.com/openshift/route-controller-manager/compare/bc97534a12a7a6bac096e4ed488b29535c8d4f33...6068e2c71fc1efb67324a91f48c1470c647f1344) ### [telemeter](https://github.com/openshift/telemeter/tree/4da8f469ce9059cfacc55fd3f83e2b32a56de444) * [OCPBUGS-80513](https://issues.redhat.com/browse/OCPBUGS-80513): Bump google.golang.org/grpc to v1.79.3 [#591](https://github.com/openshift/telemeter/pull/591) * [OCPBUGS-81809](https://issues.redhat.com/browse/OCPBUGS-81809): [release-1.19] Fix CVE-2026-34986 [#595](https://github.com/openshift/telemeter/pull/595) * [Full changelog](https://github.com/openshift/telemeter/compare/d72f157000039dddd96962d08d51c17ef716a7d4...4da8f469ce9059cfacc55fd3f83e2b32a56de444) ### [tests](https://github.com/openshift/origin/tree/39c48fb6fe4b4b1063041c64dfe0c027f49928d2) * [OCPBUGS-100045](https://issues.redhat.com/browse/OCPBUGS-100045): Add openshift/disruptive-longrunning testsuite in release-4.19 [#31438](https://github.com/openshift/origin/pull/31438) * [OCPBUGS-99302](https://issues.redhat.com/browse/OCPBUGS-99302): admit and extract non-payload 4.19 [#31404](https://github.com/openshift/origin/pull/31404) * [OCPBUGS-77878](https://issues.redhat.com/browse/OCPBUGS-77878): auditloganalyzer: update test name, remove duplicated test [#29992](https://github.com/openshift/origin/pull/29992) * [OCPBUGS-85275](https://issues.redhat.com/browse/OCPBUGS-85275): Add test for CPMS OnDelete strategy with full master replacement [#31054](https://github.com/openshift/origin/pull/31054) * [OCPBUGS-83656](https://issues.redhat.com/browse/OCPBUGS-83656): Fix PinnedImages test to respect node taints [#30971](https://github.com/openshift/origin/pull/30971) * [OCPBUGS-78545](https://issues.redhat.com/browse/OCPBUGS-78545): Skip oauth test for external control plane topology [#30887](https://github.com/openshift/origin/pull/30887) * : run resource request/limit check early [#30898](https://github.com/openshift/origin/pull/30898) * [OCPBUGS-77825](https://issues.redhat.com/browse/OCPBUGS-77825): add the missing namespace from managed openshift [#30836](https://github.com/openshift/origin/pull/30836) * [OCPBUGS-77790](https://issues.redhat.com/browse/OCPBUGS-77790): Update MCN tests to better handle condition transitions through the "Unknown" state [#30833](https://github.com/openshift/origin/pull/30833) * [OCPBUGS-74201](https://issues.redhat.com/browse/OCPBUGS-74201): Unrevert TLS tests with fixes [#30707](https://github.com/openshift/origin/pull/30707) * [Full changelog](https://github.com/openshift/origin/compare/ca74ee1cf58b2c8e769a09ff0ccd186855b1e0f0...39c48fb6fe4b4b1063041c64dfe0c027f49928d2) ### [thanos](https://github.com/openshift/thanos/tree/a4c98b8568a067fcb499cd040a5177b31ea1832b) * [OCPBUGS-80515](https://issues.redhat.com/browse/OCPBUGS-80515): Bump google.golang.org/grpc to v1.79.3 [#183](https://github.com/openshift/thanos/pull/183) * [Full changelog](https://github.com/openshift/thanos/compare/95f7bb216c27bea9c8001a7b49fbd66d23286f80...a4c98b8568a067fcb499cd040a5177b31ea1832b) ### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/ce0f10cbccf0a7427bfa66df86187a5b2e184974) * [OCPBUGS-77513](https://issues.redhat.com/browse/OCPBUGS-77513): hermetic migration 4.19 [#104](https://github.com/openshift/cloud-provider-vsphere/pull/104) * [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/2c21c8ce8dd8f7b86483d74336fc4baba9fa009d...ce0f10cbccf0a7427bfa66df86187a5b2e184974) ### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/87699d7edbe20ceb08760581c0eebae59265d821) * [OCPBUGS-80520](https://issues.redhat.com/browse/OCPBUGS-80520): Bump google.golang.org/grpc to v1.79.3 [#103](https://github.com/openshift/cluster-api-provider-vsphere/pull/103) * [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/f33d67f8f38e33af45efcb25003a001a17165cdc...87699d7edbe20ceb08760581c0eebae59265d821) ### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/4af5e765c661136c58490b27627a597469fea375) * [OCPBUGS-80523](https://issues.redhat.com/browse/OCPBUGS-80523): Bump google.golang.org/grpc to v1.79.3 [#175](https://github.com/openshift/vmware-vsphere-csi-driver/pull/175) * [OCPBUGS-68315](https://issues.redhat.com/browse/OCPBUGS-68315): CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 [#155](https://github.com/openshift/vmware-vsphere-csi-driver/pull/155) * [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/15134035e9bd1e6dde10547cdba8d390d90f1072...4af5e765c661136c58490b27627a597469fea375) ### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/c8a4359510f52ebdb30210049b1d2058e62eb7fd) * [OCPBUGS-84895](https://issues.redhat.com/browse/OCPBUGS-84895): Fix password escaping [#341](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/341) * [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/c2b41c36105daa94272ff4c5a32ec9d5637626a4...c8a4359510f52ebdb30210049b1d2058e62eb7fd) ### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/7b8e065fef1a8a4a43f023abc777c3b6b6bcb3a7) * [OCPBUGS-76081](https://issues.redhat.com/browse/OCPBUGS-76081): fix concurrent map writes [#210](https://github.com/openshift/vsphere-problem-detector/pull/210) * [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/d074cb1d32b51319a280d58416dca0dde88d665a...7b8e065fef1a8a4a43f023abc777c3b6b6bcb3a7)