# 4.19.25

Created: 2026-02-26 09:07:45 +0000 UTC

Image Digest: `sha256:02dc35500ba334f341cccbd671471d0941417d135c958a357fb17de61c3ec743`


## Changes from 4.19.8

### Components

* Kubectl 1.32.1
* Kubernetes upgraded from 1.32.7 to 1.32.12
* Kubernetes Tests upgraded from 1.32.6 to 1.32.8
* Red Hat Enterprise Linux CoreOS upgraded from 9.6.20250805-0 to 9.6.20260225-1



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| MachineConfigNodes <br/> (13 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| PinnedImages <br/> (5 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| RouteAdvertisements <br/> (11 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| StreamingCollectionEncodingToJSON <br/> (0 tests)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| StreamingCollectionEncodingToProtobuf <br/> (0 tests)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### Rebuilt images without code change

* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [0de29205](https://github.com/openshift/assisted-installer/commit/0de29205c8b99bdfdc12271281d5830f185d8f8c) `sha256:81e881ceb06c30f13d7b624dcfeb805938f0fcb4f4db42568ce65749bead7e35`
* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [1753a85e](https://github.com/openshift/assisted-installer-agent/commit/1753a85e3d8cf18e10bdf35c3a4ac87a74cab44e) `sha256:f6c96c390a7e699904acca2e7e5129251bb9acd69a93cdba56d945801f474f9a`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [0de29205](https://github.com/openshift/assisted-installer/commit/0de29205c8b99bdfdc12271281d5830f185d8f8c) `sha256:c7deb2d3ec233fc37bc70c1633a298a267b50685b89e62e2a33f7a5c95d38910`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [77213cc5](https://github.com/openshift/apiserver-network-proxy/commit/77213cc5eed50f6c0ec0600133e01274020657ef) `sha256:81b0e907ec57074cde1bbb2dddb248e7f7e2a4f950dc246520a6cbb43ca662ed`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [425c1c5b](https://github.com/openshift/cloud-provider-aws/commit/425c1c5be39628421bdfb63caf25beb169307473) `sha256:f7ca34a66cd025c60aa9c1b082af34db5fe3a47b1605e9c856a24b59ae87ebbb`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [68ae0c26](https://github.com/openshift/aws-karpenter-provider-aws/commit/68ae0c265271b4447f42decf88c6a44b343eeec9) `sha256:4d4e580d060e61774ff444c016108a34a3880b12647507fc50c21f25462229a8`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [b0a16d53](https://github.com/openshift/aws-pod-identity-webhook/commit/b0a16d53fbf28a55110bbb36a69f23bc772b3297) `sha256:7bc46c7fd91521e2ee9fe3085f2f87693331c360da2e16b22795c3c72dcb4581`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [7109d6b4](https://github.com/openshift/cloud-provider-azure/commit/7109d6b4eaefda87b235c88b92c2e17fd3dd0117) `sha256:4c83327df7c431e2707d2023cac970631e3343cf31962ab26939797d628dad35`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [7109d6b4](https://github.com/openshift/cloud-provider-azure/commit/7109d6b4eaefda87b235c88b92c2e17fd3dd0117) `sha256:badc1819953ffe65771329837615b0b22251ea8a3e899e536302f752ee92fc3a`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [2e2909cf](https://github.com/openshift/cluster-api-provider-azure/commit/2e2909cf1317cb84285de3c73f6acadb9e8a31f2) `sha256:b7ad1644f37edc21f3f20d84089eb12c8eaf5b207f1695109a24a9099e523eb4`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [466334d4](https://github.com/openshift/azure-disk-csi-driver/commit/466334d41a33d801cef0e81bc7186b8fd42b3f30) `sha256:d96ca0e6f078128dc87c84439aaa08dd26489b96fa61043899a2df5fd512013b`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [20a9ba53](https://github.com/openshift/azure-kubernetes-kms/commit/20a9ba53d5900578d497c84bb09cd46bc5859a29) `sha256:b3fef46c8c922118ee13e1edb919e04711ed74f28bb4e607ce45453eab69302f`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [0ae129b4](https://github.com/openshift/azure-service-operator/commit/0ae129b4768d2e10e0ca215d272e207bfae963a3) `sha256:462434e9502036feb9f9e87fb01fba37dab18f5a66ee177691394da2abfc4515`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [e5c6c44c](https://github.com/openshift/azure-workload-identity/commit/e5c6c44c87ebbe57a33650dd6270275e7cca771e) `sha256:50a2191a4bb7b03609d0c2a0837ec74ddbd1650f3916398e61e9a07946da10e4`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [06a66db1](https://github.com/openshift/cluster-api-provider-metal3/commit/06a66db1ac3c28f6d9a1adf16146ebec219c8534) `sha256:4e50e93c512a66b18afa5801e78a3a9a43ade263c94e422c752d3eae340d5fbe`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [f7a78954](https://github.com/openshift/cluster-api-provider-baremetal/commit/f7a789548f76d3117f3400ac597c0db615778d57) `sha256:51ca3f9c2ddb06f8b214cc467ee5324d0fb8d552f0c304e420646db1edbce5e1`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [f4e49d5f](https://github.com/openshift/baremetal-operator/commit/f4e49d5f3b0a2a3ee7a2cc7716bc8d70f33f3506) `sha256:c41dd6b8aa4abec78e60e48c7c1994fa5369e897b581c3ad41cc5fda36b0be52`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [8fde9c52](https://github.com/openshift/cluster-bootstrap/commit/8fde9c52fbb6b6044785ebae0751000b049fd0ed) `sha256:5b939b2c215c435cfdd9127d917578cada4acc845b100909793e7010d8378281`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [479f0c4e](https://github.com/openshift/cluster-api/commit/479f0c4edcfc5bc5706600070e8b8c142e59a5d4) `sha256:eddecda6e7610840eb1e462397271d8b9e2690045f5a054d574ebf4c4a813965`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [cf9e6e9b](https://github.com/openshift/cluster-capi-operator/commit/cf9e6e9bf7f28ac52ea7b2f0af6b0b80cd7c32b9) `sha256:3367205bcfe5416a5175832764f1ce5b57dc1796a9ad5a9beb6df8408a570397`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [96607b59](https://github.com/openshift/cluster-config-operator/commit/96607b590ba35a8f008073e105e01e72a5bfba2e) `sha256:8c6731ec89ecc64dac9bb354e336c6d7bd4ff34b05b6d788e59a6ea6cf4046e4`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [1dbf0c7a](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/1dbf0c7a5d513dedcc18de0ee5fb34e18b8b53f2) `sha256:5bf0fdd3117bea5554054b58171682277aa29c7db975174cc6061c72e9b02f3a`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [cf99de97](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/cf99de974354133f853928cff9e19ad19c5347d9) `sha256:849c7c8030ab254cc4453e64bf1f8b98ea4351e52ee32c75d0eca5bf653572ab`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [65981306](https://github.com/openshift/cluster-dns-operator/commit/659813065170f4e52f80b7a29bbab64bfa9aa172) `sha256:50bcc8acc5ff4dac0c0c8ad337243dbfdd476517f1d70843438ad616f6b72103`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [3ec30377](https://github.com/openshift/cluster-api-operator/commit/3ec30377ffff951dc9c0fc2257d290e4b4958465) `sha256:0fc9d5553763068351d2f66729cdd0b2ad83203db88e626765e043f11307ad64`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [4e514049](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/4e51404906f0648304e81414e0d299c52214f7a8) `sha256:9f745785b5961ca1d28c266f1ab439638e5c84707572fbd5e9d30c95e99ec6b4`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [efb91390](https://github.com/openshift/cluster-olm-operator/commit/efb91390ee10673d8f3f16e604390bd68d361d50) `sha256:97a92c57587252c60757ef83cdc2b9f65cf7bb14bb1f4481ad7410835ea3ed85`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [5f66a3e1](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/5f66a3e13fd98eaaa0941e8e0724b1f56a797d6d) `sha256:a166dd4031a8729b41e5dab01b97326ecb02a11487743e2d2781646a9fc57ccc`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [0ab30996](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/0ab30996207ada63ef2e2fd4f47aac03b0872c9a) `sha256:995d4bdd7f40a61dfa9c7b9dc880109cd34eb1fb7b9f105d53696d83439a0cd0`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [74852478](https://github.com/openshift/cluster-policy-controller/commit/748524784686a5f397490563882cbfb88f9acd01) `sha256:00034a965d6c6c23529c116bcc371c0cd7c9c06c09fa106de7f26687e567e7c9`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [a2a48a3a](https://github.com/openshift/configmap-reload/commit/a2a48a3a767fdb70644c65ab863bd4fc125987d2) `sha256:70adb64d0431740d944c5f05bd91133bd5f3352c7e7667ca80738319c96e5621`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [b09f487c](https://github.com/openshift/containernetworking-plugins/commit/b09f487cf0529098b2065ca169ae85ccec955796) `sha256:80d8357c5fc3eab5cb1f093e59798f70f131fd78e449e8d3c2f018a1c1554444`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [b09f487c](https://github.com/openshift/containernetworking-plugins/commit/b09f487cf0529098b2065ca169ae85ccec955796) `sha256:b81a55ad2817606b428f0f1dccabd1e0ea9de0ecadeecb64208faa75f7019bcf`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [2eb5c109](https://github.com/openshift/csi-driver-nfs/commit/2eb5c109dd19f5a1b84410c0952db5cfaecb2f56) `sha256:3164f27f8e05a1707140ca68b6a7e7a452fdd604d0e3508df977f4b403ca384b`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [a8175e39](https://github.com/openshift/csi-external-attacher/commit/a8175e3908635cc8357ac845a271f9e5b278c6aa) `sha256:d35cdd2e2dbd2532534e4a3dd72a2458d4540e764090e03086583c716dbf2c5f`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [9db1cdb1](https://github.com/openshift/csi-external-provisioner/commit/9db1cdb1e0dfbe29529561bbdb55b45bd2b1e321) `sha256:c8a977dbb8e261aaae999dd78a888c052c233b5fa0c927589c9fc068ff7aec18`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [ca514478](https://github.com/openshift/csi-livenessprobe/commit/ca5144785b2c8caa6fe0ffcf7837e8e17b4864fb) `sha256:257b8b8a9b12cc77cf8bab563d6f594e6fd80434b77aa68daaf9f0a2708b2345`
* [docker-registry](https://github.com/openshift/image-registry) git [b1d09765](https://github.com/openshift/image-registry/commit/b1d09765386d98825e92d8759767a53849d82e9a) `sha256:9fbd0a565cf749cb69cebfffe98ce96b14d03666137400c4f12a68e9e525cf03`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [686fdac5](https://github.com/openshift/driver-toolkit/commit/686fdac595884ade83fef7b2b9c41169bf3fcb21) `sha256:7b90fe002528098941040998e1ce38c81eee4e16c4032bab397c6549bd75ba11`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [85353bb9](https://github.com/openshift/egress-router-cni/commit/85353bb936a289b8b817f7b437afacdf7458c667) `sha256:74549acb4bb2798cd37cd12f11bf8c7aeef1e806808878241a3267e3f40bb55d`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [d8d3aeba](https://github.com/openshift/cloud-provider-gcp/commit/d8d3aeba536f4c9f6593a08045466f06dc7406ff) `sha256:e5eac6fa2e8cb899edf3ea501d3f0fe46c26cd06f424391c7ff88bcc0cd84cdf`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [c8b865a1](https://github.com/openshift/cluster-api-provider-gcp/commit/c8b865a1c4045a3b62dbf5ffea514f2c62d893f8) `sha256:6766e9fbd75e0c1ae392eeb2645e256c79a6f8c5c393eb7297d30ebde6d9fc1d`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [4fd69cf5](https://github.com/openshift/machine-api-provider-gcp/commit/4fd69cf5c0b71fb477271c69d6ddd4b276b18092) `sha256:ff8b8ccc0e56a414eb80101486f904170ca0090ecf4334090769d565be05836c`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [44c74f24](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/44c74f24fba97b4afdbac55c9e77eb50eb21a4d1) `sha256:7e1f7620b46a4f4287c4ac4d9438c9e439703ba449ff5122f7c767bf27fba194`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [fbf4c1b2](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/fbf4c1b2b233806f8233b89abca2795a4cadef14) `sha256:a268e2ba398012c78caf58f254e5ad2e580481bd8bbd1ca64470340faaafbc2a`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [7422aab2](https://github.com/openshift/cloud-provider-ibm/commit/7422aab27110768d8604539b9bb01ca329ff70b7) `sha256:280aa8c9055d9bb5e7a9ea50996b3bd782cf8818551e0825f74b99a2062058f8`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [176b6ef1](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/176b6ef1136c45b8e3cb24a48458a251deca99bc) `sha256:16bd14530164d8c5a9de368ce9d506292b451619b62758c992689583fd917e70`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [3dfcfa12](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/3dfcfa12e31bccd7c43018e1324a391b0bc03244) `sha256:a0664f6d415c93d8c791a2b1ceab24204eb5bcb102255f0dc82e5e8440cea024`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [989bd874](https://github.com/openshift/machine-api-provider-ibmcloud/commit/989bd87446d6fcbb2d7db20c90224621fac6ddb4) `sha256:130dc6abeb0961c8bd25e797da902a33064b79f4ebd51c81a2328e58c8a002f6`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [0bee2d9b](https://github.com/openshift/insights-runtime-extractor/commit/0bee2d9be935de315081be77c910a8e40204e0b8) `sha256:f2fbdc6ff8ebb75e98a5bf3aa8254bda5810a53cb36b515aa044e506829bc6cf`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [0bee2d9b](https://github.com/openshift/insights-runtime-extractor/commit/0bee2d9be935de315081be77c910a8e40204e0b8) `sha256:59f0fdb04c5505431c81dccc6db5f277452be119bc06df3b958833e4ce1c41f4`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [dacba7d7](https://github.com/openshift/ironic-rhcos-downloader/commit/dacba7d7809a048392d18050096dcc20f2878b6f) `sha256:811f46eafe91292ff88d2a420b7a109d35c65e32f9c9ef56abcb421200d84d5f`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [fcd9564e](https://github.com/openshift/ironic-static-ip-manager/commit/fcd9564e3bfa12e45576af376d168b5036dd8206) `sha256:d4210c22bcb93f270cae401cba154ed7edc2d263c1dbb701da48bdcfb8cfcf43`
* [keepalived-ipfailover](https://github.com/openshift/images) git [b42e7cf2](https://github.com/openshift/images/commit/b42e7cf218c4eef071cc29e0894fe8cfaed80b7f) `sha256:43c80dfc530d2e1406d7acd256ad7abfdfde216c7cc1a874bcba956fa94b6ce5`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [037a0e7e](https://github.com/openshift/kubernetes-metrics-server/commit/037a0e7e4ef401cd81d3e8330eeed26c8c753592) `sha256:72680032d1b74a6e8ec21ab4f4919496602f01b594e76be6ac3fa0603f4fe78e`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [59127756](https://github.com/openshift/kube-rbac-proxy/commit/591277560f328601273f88f2881e09ccccd90a97) `sha256:f4ca53c3983376f4a539c1139b87d3f9526db1d8ec8a362d73c9e0af46142e30`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [c3da3b5f](https://github.com/openshift/kube-state-metrics/commit/c3da3b5fdc5bd2d23966e33b676701a4950b1a53) `sha256:519ba889aae7d4ff7ee7fe30b879531a961fbc749b87f938ced18fdb0d202dc1`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [fdef30c8](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/fdef30c84b3d45ede364500984221c3f492b1415) `sha256:c8d635e15298e747a516b0f05a9c6ba0aa526b8926bfcc08500ef5c40d049200`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:0213bac1130f2d781ca40d90e3844824c5f46e4458c55aa7f828def71e51d31f`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [f535e9a1](https://github.com/openshift/kubevirt-csi-driver/commit/f535e9a1a27ebfeca0fa1ac33f19383f46629141) `sha256:29f1e221e947a7bc6c0085b4885d78f2e9e47ffa1be0e324241e2819e02ca94b`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:cbaab58e507625f962047cd000900e342655e87d2b84d3eaa9d207d5c88e5ac5`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [7d066746](https://github.com/openshift/image-customization-controller/commit/7d0667469c6a7980f0f6cbaeb2b17686378696f1) `sha256:560917ec35c4e2db558f8877d534bebef22b31dd1cdbfafb5c3a61ef76de08c6`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [32b5f16c](https://github.com/openshift/machine-os-images/commit/32b5f16c7f59698b40cc2a23116804d9067824d2) `sha256:129f2a426934aa1d6d8397a70004bcfca1dfa99bb291656bf6783df495d2cd4c`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [381c36ba](https://github.com/openshift/multus-admission-controller/commit/381c36baaad8e45ba10cca43aeeaf00dfc907462) `sha256:d03e10e8d00bd53b0bc525201313a73d8adb5b18ac99e0f8da8d03488e5da0b2`
* [multus-cni](https://github.com/openshift/multus-cni) git [cf0f68ec](https://github.com/openshift/multus-cni/commit/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe) `sha256:b44b4848d48ec22fd426b5755939a789bfba9b677c614871854194d5ec8f52d9`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [cf0f68ec](https://github.com/openshift/multus-cni/commit/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe) `sha256:9be4e6fe6e3ce6fcc3acbd45bf6784f8b9a2c3da5180b60e7d33e40cdb4af29b`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:2eb89228134d48daaacc51a93369300d92067e467cb11bb93172b00d7df51137`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [0e1112ce](https://github.com/openshift/whereabouts-cni/commit/0e1112cea12c707a93bd01d408c598dd070c8676) `sha256:5f43938f0d00a9556390e1d950792f4ac6d9c84cf51e528750d600b11bb9267e`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [db1f264a](https://github.com/openshift/cloud-provider-nutanix/commit/db1f264a7b04784e5f671e61cda0609695e555bb) `sha256:4ac1301fcb85e96fd5d88b6027f2ebf018cb735a8e692511d313de64c602cbe9`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [a26db5a0](https://github.com/openshift/machine-api-provider-nutanix/commit/a26db5a04ecffd98c6a9ee8204af621bf2416ec9) `sha256:a4d9eb2512d672a7c9a49d661cb4fd92935c8ab083e740d2a4bec2b21801c311`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [f74e8e00](https://github.com/openshift/oauth-proxy/commit/f74e8e006cd47ae9b7cab525796f53af8fb1da9c) `sha256:1bc6f7ef3af372b8e198180c1b6bf8f5ef3bb8ff4508829a000bd589df3e75d6`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [c604f81c](https://github.com/openshift/openshift-state-metrics/commit/c604f81c4953f0feacfcf927cb5de883af027060) `sha256:d9d1e7dcd68a3fb3432072b07dad81b42e4d034f481cce4e1dec0561bb7d47ed`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [d00bab2b](https://github.com/openshift/openstack-resource-controller/commit/d00bab2b3029ead7cd0e2ae61c7d396239434b48) `sha256:0855f07a7b39071cd60edd3852def1cffc424dff77dd315af5032ddc8a3a309f`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:a11067b6924129213792f5da1e0fbf900690c15f1986ec845eae0e22ed535650`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [f681413d](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/f681413d902e6634afd9d4ae80fd3b6e915f6585) `sha256:a9782b938c2d6c1c68bf86f3122affb5a391f7762846729b72f1db85bd5fa701`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [059d95c2](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/059d95c2941b5f8127d92b83e099a7e14021f2c2) `sha256:6dd4b2fafa3e65fc44eb52e71ed3f80cdfbafbf513ebebfbcc73bec6a8e5ad18`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [ef83f3f5](https://github.com/openshift/cloud-provider-powervs/commit/ef83f3f5b8bf00f829bb71d1857a5f59e63f9f17) `sha256:70c80806906efa331daa1b12d0d817bceba9d4a711baa9322058a43ae833e892`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [13666465](https://github.com/openshift/prom-label-proxy/commit/13666465233bfe72a19d6d3f48576a508fdea145) `sha256:4abc36b98a4e0da4d12061b901a6c72aa60ab45dcb746d9c7fafa3ba50924081`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [c90542d8](https://github.com/openshift/node_exporter/commit/c90542d8cef6d25545ae00481ffff5622cdce928) `sha256:dbeb41699be2baa2ec0ddaa49012da1ca4892b4c6906f27c1f7026f1e76f2bbd`
* [rhel-coreos](https://github.com/openshift/os) git [e97898c8](https://github.com/openshift/os/commit/e97898c8af9cad8e5375e4860a7d79c39a1c79fa) `sha256:2313bbf186db068d941baef479f9758a6ba44dff9f6d47079627aeed3a15674f`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [e97898c8](https://github.com/openshift/os/commit/e97898c8af9cad8e5375e4860a7d79c39a1c79fa) `sha256:6c25847549b4bfbfe5274021bc00c57b761fe2735804660de9362d221d39da6e`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [bc97534a](https://github.com/openshift/route-controller-manager/commit/bc97534a12a7a6bac096e4ed488b29535c8d4f33) `sha256:d4a3b7b8110cadf48da5229a916d40b1c90fa1b9e1753adb05bf4be4333e2065`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [4dfa6916](https://github.com/openshift/service-ca-operator/commit/4dfa6916f984d0fd7188380edc88b250738f07f7) `sha256:00eb0ce15a7919b63f1376e11b4112d08e8a8b2288d96965e183473cc7645a2e`
* [telemeter](https://github.com/openshift/telemeter) git [d72f1570](https://github.com/openshift/telemeter/commit/d72f157000039dddd96962d08d51c17ef716a7d4) `sha256:f78db829eed5768a10267058d25430b4e5d99ebef4a8569346b5e839aa2c8f35`
* [thanos](https://github.com/openshift/thanos) git [95f7bb21](https://github.com/openshift/thanos/commit/95f7bb216c27bea9c8001a7b49fbd66d23286f80) `sha256:9fff71cbce33407c9ad1dd83646ea5b46f02211e2ae78cd22f2867c057e0cf23`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [2c21c8ce](https://github.com/openshift/cloud-provider-vsphere/commit/2c21c8ce8dd8f7b86483d74336fc4baba9fa009d) `sha256:b6d17691f58ab8bd8d00674c2b1275b592e98b48aae8bf6cba96532048e084ae`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [c2b41c36](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/c2b41c36105daa94272ff4c5a32ec9d5637626a4) `sha256:1ed4237901137686ccefb893a2d6412dcd6359ee3cdc6b0ccf036743e4be6e20`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/85b575584ff64a9d47c41b66fbfa797765f22337)

* [OCPBUGS-74630](https://issues.redhat.com/browse/OCPBUGS-74630): Retry incomplete cluster registration in ABI [#8809](https://github.com/openshift/assisted-service/pull/8809)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-service/compare/be6aa91006d445bdaace0fdf6ed16b105ce930ee...85b575584ff64a9d47c41b66fbfa797765f22337)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/34af4548d9d162c4e07e7426d4c672d8fbc3500c)

* [OCPBUGS-68295](https://issues.redhat.com/browse/OCPBUGS-68295): bump github.com/sirupsen/logrus to v1.9.3 [#236](https://github.com/openshift/agent-installer-utils/pull/236)
* [OCPBUGS-60938](https://issues.redhat.com/browse/OCPBUGS-60938): Update ISOBuilder OCP 4.19 Dev Preview Release notes [#142](https://github.com/openshift/agent-installer-utils/pull/142)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/f2d7fdb22c82e9561f607d93ce80c22a43ea39cd...34af4548d9d162c4e07e7426d4c672d8fbc3500c)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/0a740b04471ca2bc5bb7a3034e78a62cfc2c24a2)

* [OCPBUGS-61794](https://issues.redhat.com/browse/OCPBUGS-61794): UPSTREAM &lt;carry&gt;: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It [#568](https://github.com/openshift/cluster-api-provider-aws/pull/568)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/778bbd27922126b112451f54f57b439f6a28951b...0a740b04471ca2bc5bb7a3034e78a62cfc2c24a2)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/3f7eede5a2a7962f682a1fa87f9fcb90e7533117)

* [OCPBUGS-72365](https://issues.redhat.com/browse/OCPBUGS-72365): Fix incomplete vendor/ after vendoring [#295](https://github.com/openshift/aws-ebs-csi-driver/pull/295)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/d686e7d16a00cedcc1c42165e1996a4a9255d1a0...3f7eede5a2a7962f682a1fa87f9fcb90e7533117)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/99b646dbac5540b4054300df6a535d10e475d8b0)

* [OCPBUGS-56898](https://issues.redhat.com/browse/OCPBUGS-56898): Fix Cinder, Manila driver metrics [#386](https://github.com/openshift/csi-operator/pull/386)
* [OCPBUGS-63559](https://issues.redhat.com/browse/OCPBUGS-63559): Add RBAC ClusterRole and Binding for driver node [#455](https://github.com/openshift/csi-operator/pull/455)
* [OCPBUGS-62926](https://issues.redhat.com/browse/OCPBUGS-62926): Add withCABundleDaemonSetHook() to AWS EFS operator [#444](https://github.com/openshift/csi-operator/pull/444)
* [OCPBUGS-60595](https://issues.redhat.com/browse/OCPBUGS-60595): Bump library-go [#420](https://github.com/openshift/csi-operator/pull/420)
* [Full changelog](https://github.com/openshift/csi-operator/compare/e5d84763b378fff025540cb9a459dcf1bdfd903d...99b646dbac5540b4054300df6a535d10e475d8b0)


### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/6dd8d81c504b39d0b80ca5b8df9a1c534fc1d6f8)

* [OCPBUGS-45666](https://issues.redhat.com/browse/OCPBUGS-45666): Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.19 [#27](https://github.com/openshift/aws-encryption-provider/pull/27)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/088dcaf73f980b977ef4f5d2f99e2a93deb87eef...6dd8d81c504b39d0b80ca5b8df9a1c534fc1d6f8)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/14f4b995a810d26516d5f1c88f7bee1d524686b0)

* [OCPBUGS-73729](https://issues.redhat.com/browse/OCPBUGS-73729): Fix reconciler consistency checks in Update and Exists [#165](https://github.com/openshift/machine-api-provider-aws/pull/165)
* [OCPBUGS-63137](https://issues.redhat.com/browse/OCPBUGS-63137): client: re-use a single file for building the session instead of randomly named files [#152](https://github.com/openshift/machine-api-provider-aws/pull/152)
* [OCPBUGS-63137](https://issues.redhat.com/browse/OCPBUGS-63137): revert: client: re-use a single file for building the session instead of randomly named files [#149](https://github.com/openshift/machine-api-provider-aws/pull/149)
* [OCPBUGS-63137](https://issues.redhat.com/browse/OCPBUGS-63137): client: re-use a single file for building the session instead of randomly named files [#147](https://github.com/openshift/machine-api-provider-aws/pull/147)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/84fbc02a1b018ffc93ba05622282889a28343db0...14f4b995a810d26516d5f1c88f7bee1d524686b0)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/8970409a952051e3fdc08728eddadb24bba94b70)

* [OCPBUGS-61975](https://issues.redhat.com/browse/OCPBUGS-61975): Rebase to upstream v1.32.3 for OCP 4.19 [#103](https://github.com/openshift/azure-file-csi-driver/pull/103)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/762a2b94b237cf16b56bb5085bcaa1471537cb52...8970409a952051e3fdc08728eddadb24bba94b70)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/163515df04124d4e2daaab47dc6fd30a1e5b246e)

* [OCPBUGS-65782](https://issues.redhat.com/browse/OCPBUGS-65782): Set updateDomainCount to one when faultDomainCount is one [#174](https://github.com/openshift/machine-api-provider-azure/pull/174)
* [OCPBUGS-63578](https://issues.redhat.com/browse/OCPBUGS-63578): Support DataDisks on Azure Stack Hub [#166](https://github.com/openshift/machine-api-provider-azure/pull/166)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/04987a4f8fbf36196044db0e1863cb0febf4a88e...163515df04124d4e2daaab47dc6fd30a1e5b246e)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/d906eea80751eafabbdba31e5011b248b4e7c5e1)

* [OCPBUGS-73781](https://issues.redhat.com/browse/OCPBUGS-73781): pkg/asset/manifests/azure: save cidr blocks [#10216](https://github.com/openshift/installer/pull/10216)
* [OCPBUGS-74940](https://issues.redhat.com/browse/OCPBUGS-74940): Increase agent-installer pre-network-manager timeout [#10284](https://github.com/openshift/installer/pull/10284)
* [OCPBUGS-74675](https://issues.redhat.com/browse/OCPBUGS-74675): [release-4.19] GCP: skip AI zones [#10274](https://github.com/openshift/installer/pull/10274)
* [OCPBUGS-74629](https://issues.redhat.com/browse/OCPBUGS-74629): add support for NVIDIA H100 and H200 enabled machine series [#10270](https://github.com/openshift/installer/pull/10270)
* [OCPBUGS-66358](https://issues.redhat.com/browse/OCPBUGS-66358): Update the RHCOS 4.19 bootimage metadata to 9.6.20260112-0 [#10248](https://github.com/openshift/installer/pull/10248)
* [OCPBUGS-68296](https://issues.redhat.com/browse/OCPBUGS-68296): [4.19] uplift logrus [#10165](https://github.com/openshift/installer/pull/10165)
* [OCPBUGS-65610](https://issues.redhat.com/browse/OCPBUGS-65610): Azure UPI ARM template: use storageAccountId [#10151](https://github.com/openshift/installer/pull/10151)
* [OCPBUGS-63437](https://issues.redhat.com/browse/OCPBUGS-63437): vSphere 7 deprecation [#10026](https://github.com/openshift/installer/pull/10026)
* [OCPBUGS-66999](https://issues.redhat.com/browse/OCPBUGS-66999): Use separate tmpfs for ostree checkout on live ISO [#10153](https://github.com/openshift/installer/pull/10153)
* [OCPBUGS-65512](https://issues.redhat.com/browse/OCPBUGS-65512): Remove pending items on gcp no-op [#10074](https://github.com/openshift/installer/pull/10074)
* Revert "OCPBUGS-65587: Update the RHCOS 4.19 bootimage metadata to 9.6.20251113-0" [#10094](https://github.com/openshift/installer/pull/10094)
* [OCPBUGS-65587](https://issues.redhat.com/browse/OCPBUGS-65587): Update the RHCOS 4.19 bootimage metadata to 9.6.20251113-0 [#10085](https://github.com/openshift/installer/pull/10085)
* [OCPBUGS-63634](https://issues.redhat.com/browse/OCPBUGS-63634): Update the RHCOS 4.19 bootimage metadata to 9.6.20251023-0 [#10038](https://github.com/openshift/installer/pull/10038)
* [OCPBUGS-63702](https://issues.redhat.com/browse/OCPBUGS-63702): Prevent duplicate noProxy when adding nodes [#10045](https://github.com/openshift/installer/pull/10045)
* [OCPBUGS-62981](https://issues.redhat.com/browse/OCPBUGS-62981): Catch gcp destroy cases where the operation is nil [#10013](https://github.com/openshift/installer/pull/10013)
* [OCPBUGS-62159](https://issues.redhat.com/browse/OCPBUGS-62159): Update the RHCOS 4.19 bootimage metadata [#9996](https://github.com/openshift/installer/pull/9996)
* [OCPBUGS-62911](https://issues.redhat.com/browse/OCPBUGS-62911): None: Allow IPv6 Primary DualStack installs on platforms None and External [#10008](https://github.com/openshift/installer/pull/10008)
* [OCPBUGS-61313](https://issues.redhat.com/browse/OCPBUGS-61313): Use less permissive access for /var/lib/etcd for SNO [#9927](https://github.com/openshift/installer/pull/9927)
* [OCPBUGS-59573](https://issues.redhat.com/browse/OCPBUGS-59573): Checking for selected PE retrieved data and returning errors for missing values [#9842](https://github.com/openshift/installer/pull/9842)
* [OCPBUGS-60832](https://issues.redhat.com/browse/OCPBUGS-60832): node-joner ignore error if SSH key was not found [#9910](https://github.com/openshift/installer/pull/9910)
* [OCPBUGS-61109](https://issues.redhat.com/browse/OCPBUGS-61109): Misleading error when confidentialCompute: Enabled [#9920](https://github.com/openshift/installer/pull/9920)
* [OCPBUGS-60925](https://issues.redhat.com/browse/OCPBUGS-60925): Update the RHCOS 4.19 bootimage metadata [#9915](https://github.com/openshift/installer/pull/9915)
* [OCPBUGS-60652](https://issues.redhat.com/browse/OCPBUGS-60652): PowerVS: config variables not honored [#9901](https://github.com/openshift/installer/pull/9901)
* [OCPBUGS-60666](https://issues.redhat.com/browse/OCPBUGS-60666): Azure: change LB and pubic IP skus to Standard [#9903](https://github.com/openshift/installer/pull/9903)
* [OCPBUGS-59607](https://issues.redhat.com/browse/OCPBUGS-59607): Refine check for supported SNO platforms [#9843](https://github.com/openshift/installer/pull/9843)
* Revert "Update RHCOS 4.19 bootimage metadata to 9.6.20250811-0" [#9906](https://github.com/openshift/installer/pull/9906)
* [OCPBUGS-60402](https://issues.redhat.com/browse/OCPBUGS-60402): baremetal: always set external v6 URL on dualstack [#9879](https://github.com/openshift/installer/pull/9879)
* [OCPBUGS-58905](https://issues.redhat.com/browse/OCPBUGS-58905): Update RHCOS 4.19 bootimage metadata to 9.6.20250811-0 [#9888](https://github.com/openshift/installer/pull/9888)
* [Full changelog](https://github.com/openshift/installer/compare/249d7428c51fe85cabdab6394c4aed86fc24d398...d906eea80751eafabbdba31e5011b248b4e7c5e1)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/2f969c7a1df33a398298df731505a508ad120db9)

* [OCPBUGS-60110](https://issues.redhat.com/browse/OCPBUGS-60110): Re-add ENABLE_NODEIP_DEBUG env var [#365](https://github.com/openshift/baremetal-runtimecfg/pull/365)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/33a1d92344c6b56721a745fbe2e41d3ca899aa78...2f969c7a1df33a398298df731505a508ad120db9)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/24755b6e82745a4dfa5a6db4b467564c237f244c)

* [OCPBUGS-65757](https://issues.redhat.com/browse/OCPBUGS-65757): pkg/cli/admin/upgrade: Tighten force warnings [#2146](https://github.com/openshift/oc/pull/2146)
* [OCPBUGS-65594](https://issues.redhat.com/browse/OCPBUGS-65594): fix(must-gather): do not set node affinity if nodename is set [#2143](https://github.com/openshift/oc/pull/2143)
* [OCPBUGS-64585](https://issues.redhat.com/browse/OCPBUGS-64585): Help with must-gather scheduling through suggesting preferance of nodes [#2124](https://github.com/openshift/oc/pull/2124)
* [OCPBUGS-59487](https://issues.redhat.com/browse/OCPBUGS-59487): adm, inspect, ns: Collect UserDefinedNetwork CRs [#2061](https://github.com/openshift/oc/pull/2061)
* [Full changelog](https://github.com/openshift/oc/compare/298429ba9831d1d72b89edd9beb82a6ee665c3b7...24755b6e82745a4dfa5a6db4b467564c237f244c)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/2faf05d3fe49f9aefd1e96249d58e686a3f1ce8e)

* [OCPBUGS-74547](https://issues.redhat.com/browse/OCPBUGS-74547): Resolve nil pointer exception in hasResourceTags [#971](https://github.com/openshift/cloud-credential-operator/pull/971)
* [OCPBUGS-65799](https://issues.redhat.com/browse/OCPBUGS-65799): ccoctl azure: retry custom role creation on consistency errors [#949](https://github.com/openshift/cloud-credential-operator/pull/949)
* [OCPBUGS-65478](https://issues.redhat.com/browse/OCPBUGS-65478): ccoctl: use pagination when listing resources in aws [#946](https://github.com/openshift/cloud-credential-operator/pull/946)
* [OCPBUGS-63547](https://issues.redhat.com/browse/OCPBUGS-63547): ccoctl: add public-key-file flag to create-all [#937](https://github.com/openshift/cloud-credential-operator/pull/937)
* [OCPBUGS-60970](https://issues.redhat.com/browse/OCPBUGS-60970): ccoctl: aws to use proper issuer url on subsequent runs [#906](https://github.com/openshift/cloud-credential-operator/pull/906)
* [OCPBUGS-60617](https://issues.redhat.com/browse/OCPBUGS-60617): ccoctl azure dnszone-resource-group-name now optional [#900](https://github.com/openshift/cloud-credential-operator/pull/900)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/a5d62675b21911cdff2bfd257a85ef0b5a793731...2faf05d3fe49f9aefd1e96249d58e686a3f1ce8e)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/49b7a9e2f1cc77fee3a8ee776d3eac8bae1be86e)

* [OCPBUGS-65513](https://issues.redhat.com/browse/OCPBUGS-65513): Fix capacity calculation [#190](https://github.com/openshift/cloud-network-config-controller/pull/190)
* [OCPBUGS-63753](https://issues.redhat.com/browse/OCPBUGS-63753): Change the capacity struct from int to ptrOfInt [#186](https://github.com/openshift/cloud-network-config-controller/pull/186)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/98ae311b854223a99e258d3c3369455d983de239...49b7a9e2f1cc77fee3a8ee776d3eac8bae1be86e)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/1d930619673e99029a1e5cec0194b5a3580ec35a)

* [OCPBUGS-65602](https://issues.redhat.com/browse/OCPBUGS-65602): set appropriate rolling update settings [#809](https://github.com/openshift/cluster-authentication-operator/pull/809)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/ceeb021d7562cf3d669ed7293f46b2a50e848c73...1d930619673e99029a1e5cec0194b5a3580ec35a)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/5ab386f01957f72d3cf39ed0016e6e9f53e75e7f)

* [OCPBUGS-63676](https://issues.redhat.com/browse/OCPBUGS-63676): update node info processors to include unschedulable nodes [#392](https://github.com/openshift/kubernetes-autoscaler/pull/392)
* [OCPBUGS-63603](https://issues.redhat.com/browse/OCPBUGS-63603): refactor cloud provider options [#388](https://github.com/openshift/kubernetes-autoscaler/pull/388)
* [OCPBUGS-63455](https://issues.redhat.com/browse/OCPBUGS-63455): Fixes histograms becoming empty after loaded from checkpoints [#395](https://github.com/openshift/kubernetes-autoscaler/pull/395)
* [OCPBUGS-60900](https://issues.redhat.com/browse/OCPBUGS-60900): revert openshift replica fix [#374](https://github.com/openshift/kubernetes-autoscaler/pull/374)
* [OCPBUGS-59638](https://issues.redhat.com/browse/OCPBUGS-59638): fix checkpoint gc of unknown recommenders [#366](https://github.com/openshift/kubernetes-autoscaler/pull/366)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/f746d442e69be1cf82cef1c473ddc0ab8a15d22f...5ab386f01957f72d3cf39ed0016e6e9f53e75e7f)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/dd778375334821fb94db695ec1963e2f7f001893)

* [OCPBUGS-73954](https://issues.redhat.com/browse/OCPBUGS-73954): Add rbac for volumeattachments [#359](https://github.com/openshift/cluster-autoscaler-operator/pull/359)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/227f7537c3b459d4940522809df60b2dfca738ed...dd778375334821fb94db695ec1963e2f7f001893)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/acb33d2c220339f6ab02522f388810e87eeaa120)

* [OCPBUGS-63134](https://issues.redhat.com/browse/OCPBUGS-63134): Always have a service for ironic-api port [#512](https://github.com/openshift/cluster-baremetal-operator/pull/512)
* [OCPBUGS-60286](https://issues.redhat.com/browse/OCPBUGS-60286): Remove webhookport (9447) as HostPort [#498](https://github.com/openshift/cluster-baremetal-operator/pull/498)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/0c3beae1a216187270d60af49117a82e74de4020...acb33d2c220339f6ab02522f388810e87eeaa120)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/5b39a4dfc245942db4a21cec493bfb2a15bb4b21)

* [OCPBUGS-63165](https://issues.redhat.com/browse/OCPBUGS-63165): ccm: disable unused secure-serving port and webhook [#420](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/420)
* [OCPBUGS-56788](https://issues.redhat.com/browse/OCPBUGS-56788): Fix config-sync-controller logging [#390](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/390)
* [OCPBUGS-60950](https://issues.redhat.com/browse/OCPBUGS-60950): Default cloud.conf if no configmap is found [#412](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/412)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/5a484a0f3d97801bd3f1cc2db69e477fa9d13a9a...5b39a4dfc245942db4a21cec493bfb2a15bb4b21)


### [cluster-config-api](https://github.com/openshift/api/tree/482f1b56dcc4d97ab9d3f7c22f102ecb54af83bb)

* [OCPBUGS-68378](https://issues.redhat.com/browse/OCPBUGS-68378): Add HTTPKeepAliveTimeout to IngressController API [#2627](https://github.com/openshift/api/pull/2627)
* OWNERS: update approvers/reviewers [#2624](https://github.com/openshift/api/pull/2624)
* [OCPBUGS-66984](https://issues.redhat.com/browse/OCPBUGS-66984): Introduce ClosedClientConnectionPolicy to IngressController API [#2616](https://github.com/openshift/api/pull/2616)
* [CNTRLPLANE-1979](https://issues.redhat.com/browse/CNTRLPLANE-1979): Promote streaming list encoding to Default [#2597](https://github.com/openshift/api/pull/2597)
* NO-JIRA: Promote streaming list encoding to Default on Hypershift. [#2559](https://github.com/openshift/api/pull/2559)
* [CNTRLPLANE-1609](https://issues.redhat.com/browse/CNTRLPLANE-1609): Add feature gates for StreamingCollectionEncoding [#2517](https://github.com/openshift/api/pull/2517)
* [OCPBUGS-62155](https://issues.redhat.com/browse/OCPBUGS-62155): Add 'AGE' print column to MachineConfigNode object [#2500](https://github.com/openshift/api/pull/2500)
* [OCPBUGS-61096](https://issues.redhat.com/browse/OCPBUGS-61096): Add default value for MachineHealthCheck's maxUnhealthy to the description [#2464](https://github.com/openshift/api/pull/2464)
* [MCO-1766](https://issues.redhat.com/browse/MCO-1766): Promote PinnedImageSets feature gate to default [#2377](https://github.com/openshift/api/pull/2377)
* [MCO-1720](https://issues.redhat.com/browse/MCO-1720): Promote MachineConfigNode feature gate to default [#2376](https://github.com/openshift/api/pull/2376)
* [CORENET-6148](https://issues.redhat.com/browse/CORENET-6148): Promote RouteAdvertisements feature gate to default feature set [#2425](https://github.com/openshift/api/pull/2425)
* [OCPBUGS-60414](https://issues.redhat.com/browse/OCPBUGS-60414): MachineOSConfig name should match MachineConfigPool [#2449](https://github.com/openshift/api/pull/2449)
* Update crd-schema.json to release 1.33 branch [#2447](https://github.com/openshift/api/pull/2447)
* [Full changelog](https://github.com/openshift/api/compare/97812373b6b447ff6b55d3e2625b4f62aff1a16f...482f1b56dcc4d97ab9d3f7c22f102ecb54af83bb)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/0e8a8c38e40da0e474ece21ee91ff50c86e8741f)

* [OCPBUGS-74628](https://issues.redhat.com/browse/OCPBUGS-74628): Add priority field to prevent early shutdown [#1539](https://github.com/openshift/cluster-etcd-operator/pull/1539)
* [OCPBUGS-63338](https://issues.redhat.com/browse/OCPBUGS-63338): Ensure revision.json persists on ungraceful shutdown [#1502](https://github.com/openshift/cluster-etcd-operator/pull/1502)
* [OCPBUGS-61019](https://issues.redhat.com/browse/OCPBUGS-61019): add individual context to the health check [#1475](https://github.com/openshift/cluster-etcd-operator/pull/1475)
* [OCPBUGS-60443](https://issues.redhat.com/browse/OCPBUGS-60443): Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace [#1472](https://github.com/openshift/cluster-etcd-operator/pull/1472)
* [OCPBUGS-59802](https://issues.redhat.com/browse/OCPBUGS-59802): add missing informer syncs [#1454](https://github.com/openshift/cluster-etcd-operator/pull/1454)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/1d890f9a4e6f0090040b5c31527397f1d34d1b96...0e8a8c38e40da0e474ece21ee91ff50c86e8741f)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/3335b120ecbae4a792373a814474aeebde58d6c2)

* [OCPBUGS-60517](https://issues.redhat.com/browse/OCPBUGS-60517): fix(azure): resolve credential caching issues around UAMI support [#1243](https://github.com/openshift/cluster-image-registry-operator/pull/1243)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/328419e7a2aba288a3405e76449f84d42b1952b3...3335b120ecbae4a792373a814474aeebde58d6c2)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/7ce99b2c11f456e0e6e3cfa80ebf7682466eb0ea)

* [OCPBUGS-65723](https://issues.redhat.com/browse/OCPBUGS-65723): IngressOperator not exposing some metrics for degraded… [#1308](https://github.com/openshift/cluster-ingress-operator/pull/1308)
* [OCPBUGS-68378](https://issues.redhat.com/browse/OCPBUGS-68378): Implement HTTPKeepAliveTimeout tuning option [#1323](https://github.com/openshift/cluster-ingress-operator/pull/1323)
* NO-JIRA: Add new NID team members to OWNERS [release-4.19] [#1318](https://github.com/openshift/cluster-ingress-operator/pull/1318)
* [OCPBUGS-66984](https://issues.redhat.com/browse/OCPBUGS-66984): Implement ClosedClientConnectionPolicy field [#1320](https://github.com/openshift/cluster-ingress-operator/pull/1320)
* [NE-2102](https://issues.redhat.com/browse/NE-2102): Bump to OSSM 3.1.0 and Istio 1.26.2 [#1264](https://github.com/openshift/cluster-ingress-operator/pull/1264)
* NO-JIRA: [release-4.19] docs - correct Istio version format in ossm-overrides.md [#1255](https://github.com/openshift/cluster-ingress-operator/pull/1255)
* [OCPBUGS-60204](https://issues.redhat.com/browse/OCPBUGS-60204): Update GatewayAPI test to check if deployment has 1 or more pod [#1260](https://github.com/openshift/cluster-ingress-operator/pull/1260)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/cee87b619fed55a2fcf7e5f74bc72fa486d8e4ec...7ce99b2c11f456e0e6e3cfa80ebf7682466eb0ea)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/4bbd3be9dfda4a08dca98648209151de2a869f25)

* [OCPBUGS-74628](https://issues.redhat.com/browse/OCPBUGS-74628): Add priority field to prevent early shutdown [#1959](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1959)
* [OCPBUGS-65525](https://issues.redhat.com/browse/OCPBUGS-65525): OpenShift cluster got degraded after rotating the kube-apiserver-service-network-signer cert [#1964](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1964)
* Revert "[release-4.19] OCPBUGS-65560: Optimistically update Kube Server and Client CA bundles" [#1963](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1963)
* [OCPBUGS-63342](https://issues.redhat.com/browse/OCPBUGS-63342): [release-4.19] Revert "Revert "OCPBUGS-58116: certregenerationcontroller: start configInformers [#1945](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1945)
* [OCPBUGS-60682](https://issues.redhat.com/browse/OCPBUGS-60682): Optimistically update Kube Server and Client CA bundles [#1920](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1920)
* [OCPBUGS-60121](https://issues.redhat.com/browse/OCPBUGS-60121): [release-4.19] Set goaway chance to 0.001 [#1887](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1887)
* [OCPBUGS-60677](https://issues.redhat.com/browse/OCPBUGS-60677): certrotation: ensure that all rotated secrets/configmaps have RefreshOnlyWhenExpired set [#1901](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1901)
* [OCPBUGS-60495](https://issues.redhat.com/browse/OCPBUGS-60495): certrotationcontroller: extend node-system-admin-signer lifetime [#1897](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1897)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/e2ad6c193a3a0ee71a2bd128d5a4692ad8a6776a...4bbd3be9dfda4a08dca98648209151de2a869f25)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/7c4e44698b6004e52c59e03dd0c89611fbbfa999)

* [OCPBUGS-64687](https://issues.redhat.com/browse/OCPBUGS-64687): Add priority field to prevent early shutdown [#893](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/893)
* [OCPBUGS-60682](https://issues.redhat.com/browse/OCPBUGS-60682): Throttle resourcesynccontroller on pairs with dual writers. [#884](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/884)
* [OCPBUGS-60682](https://issues.redhat.com/browse/OCPBUGS-60682): certrotationcontroller: set RefreshOnlyWhenExpired for CA bundle [#861](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/861)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/3dfbb67635ce056fd55c360937be9868a3cf8ad5...7c4e44698b6004e52c59e03dd0c89611fbbfa999)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/b5671f10f0b03ac19e584e08b08267f67dd2d709)

* [OCPBUGS-74628](https://issues.redhat.com/browse/OCPBUGS-74628): Add priority field to prevent early shutdown [#609](https://github.com/openshift/cluster-kube-scheduler-operator/pull/609)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/8740a60de76690a17d5081db078eb93dfdb7a066...b5671f10f0b03ac19e584e08b08267f67dd2d709)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/49517f79bdfeb0fa06f2bc80d793a0c9db194aab)

* [OCPBUGS-63586](https://issues.redhat.com/browse/OCPBUGS-63586): port 9193 need to be internal and port 9194 need to have a service [#281](https://github.com/openshift/cluster-machine-approver/pull/281)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/a52da47f2c5f0dab8db7bdfd9bc1f31a3ba5e404...49517f79bdfeb0fa06f2bc80d793a0c9db194aab)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/8a6f22d186d6186a77272672864b94b5b3765b49)

* [OCPBUGS-67167](https://issues.redhat.com/browse/OCPBUGS-67167): Add the collection of MTV migration metrics [#2773](https://github.com/openshift/cluster-monitoring-operator/pull/2773)
* [OCPBUGS-67003](https://issues.redhat.com/browse/OCPBUGS-67003): make CMO Upgradeable=false if invalid Prometheus externalLabels are used [#2775](https://github.com/openshift/cluster-monitoring-operator/pull/2775)
* [OCPBUGS-62830](https://issues.redhat.com/browse/OCPBUGS-62830): Remove cluster from non-multicluster dashboards [#2760](https://github.com/openshift/cluster-monitoring-operator/pull/2760)
* [OCPBUGS-63236](https://issues.redhat.com/browse/OCPBUGS-63236): Remove AlertManager endpoints when disabled [#2716](https://github.com/openshift/cluster-monitoring-operator/pull/2716)
* [OCPBUGS-64578](https://issues.redhat.com/browse/OCPBUGS-64578): Fix KSM deny-list typo [#2730](https://github.com/openshift/cluster-monitoring-operator/pull/2730)
* [OCPBUGS-63409](https://issues.redhat.com/browse/OCPBUGS-63409): chore(prometheus/remotewrite): [release-4.19] clarify that the in-cluster proxy env vars set in prometheus container can be used in all configs that support proxyConfig.proxyFromEnvironment [#2722](https://github.com/openshift/cluster-monitoring-operator/pull/2722)
* [OCPBUGS-63197](https://issues.redhat.com/browse/OCPBUGS-63197): add flag --watch-referenced-objects-in-all-namespaces to prometheus-operator [#2678](https://github.com/openshift/cluster-monitoring-operator/pull/2678)
* [OCPBUGS-62965](https://issues.redhat.com/browse/OCPBUGS-62965), [OCPBUGS-62966](https://issues.redhat.com/browse/OCPBUGS-62966), [OCPBUGS-62967](https://issues.redhat.com/browse/OCPBUGS-62967), [OCPBUGS-62968](https://issues.redhat.com/browse/OCPBUGS-62968), [OCPBUGS-62969](https://issues.redhat.com/browse/OCPBUGS-62969): [Backport] non-HA alert cases [#2709](https://github.com/openshift/cluster-monitoring-operator/pull/2709)
* [OCPBUGS-62752](https://issues.redhat.com/browse/OCPBUGS-62752): Add mcd_local_unsupported_packages metric from MCO to telemetry 4.19 [#2697](https://github.com/openshift/cluster-monitoring-operator/pull/2697)
* [OCPBUGS-62453](https://issues.redhat.com/browse/OCPBUGS-62453): test: remove image registry e2e tests [#2690](https://github.com/openshift/cluster-monitoring-operator/pull/2690)
* [OCPBUGS-61486](https://issues.redhat.com/browse/OCPBUGS-61486): chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind [#2666](https://github.com/openshift/cluster-monitoring-operator/pull/2666)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/b9fd02fe0dfee74ae25f93ed67deda8bf4529419...8a6f22d186d6186a77272672864b94b5b3765b49)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/f5aaab800060be6b8c299d2a1feaaaa40298d71a)

* [OCPBUGS-70328](https://issues.redhat.com/browse/OCPBUGS-70328): Tweak iptables-alerter to try to avoid crictl bug [#2867](https://github.com/openshift/cluster-network-operator/pull/2867)
* [OCPBUGS-57134](https://issues.redhat.com/browse/OCPBUGS-57134): whereabouts-config is a reserved name for user interaction. [#2719](https://github.com/openshift/cluster-network-operator/pull/2719)
* [OCPBUGS-63447](https://issues.redhat.com/browse/OCPBUGS-63447), [OCPBUGS-63448](https://issues.redhat.com/browse/OCPBUGS-63448): Annotate whereabouts-controller [#2822](https://github.com/openshift/cluster-network-operator/pull/2822)
* [OCPBUGS-62670](https://issues.redhat.com/browse/OCPBUGS-62670): Add drop flows for GARP [#2809](https://github.com/openshift/cluster-network-operator/pull/2809)
* [OCPBUGS-61460](https://issues.redhat.com/browse/OCPBUGS-61460): Set maxUnavailable 10% on MultiNetworkPolicy DS [#2794](https://github.com/openshift/cluster-network-operator/pull/2794)
* [OCPBUGS-61185](https://issues.redhat.com/browse/OCPBUGS-61185): Consume latest OCP API in 4.19 [#2790](https://github.com/openshift/cluster-network-operator/pull/2790)
* [OCPBUGS-60983](https://issues.redhat.com/browse/OCPBUGS-60983): Update CNO reviewers/approvers [#2765](https://github.com/openshift/cluster-network-operator/pull/2765)
* [OCPBUGS-60761](https://issues.redhat.com/browse/OCPBUGS-60761): Allow overriding OVN-Kubernetes configuration [#2781](https://github.com/openshift/cluster-network-operator/pull/2781)
* [OCPBUGS-60534](https://issues.redhat.com/browse/OCPBUGS-60534): Fix multus webhook match condition for spec changes [#2777](https://github.com/openshift/cluster-network-operator/pull/2777)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/f17bb7a589e7a9516c35aa0a3bd1bbc55f071ebd...f5aaab800060be6b8c299d2a1feaaaa40298d71a)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/bf23cbf12f5fd764cbf01ba911cb7e1bc623c82f)

* [OCPBUGS-73797](https://issues.redhat.com/browse/OCPBUGS-73797): PPC: ghw: filter out namespaces dir [#1455](https://github.com/openshift/cluster-node-tuning-operator/pull/1455)
* [OCPBUGS-63418](https://issues.redhat.com/browse/OCPBUGS-63418): Do not cause kubelet failed dependency by ocp-tuned-one-shot.service [#1416](https://github.com/openshift/cluster-node-tuning-operator/pull/1416)
* And 4 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/61b6637d88503c5ddaace05a3e7a3f0b04d49183...bf23cbf12f5fd764cbf01ba911cb7e1bc623c82f)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/aa7f05d27fb2a60314278f0c248fd961442a4144)

* [OCPBUGS-63510](https://issues.redhat.com/browse/OCPBUGS-63510): references to github.com/sclorg/django-ex.git now also refer to the branch [#656](https://github.com/openshift/cluster-samples-operator/pull/656)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/4cb291973ad887b3506af1d0f86ba5c3e326d372...aa7f05d27fb2a60314278f0c248fd961442a4144)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/47fff3642e619b7dc2c84831573c41e692d1a58c)

* [OCPBUGS-62667](https://issues.redhat.com/browse/OCPBUGS-62667): Move metrics to vsphere driver [#631](https://github.com/openshift/cluster-storage-operator/pull/631)
* [OCPBUGS-60152](https://issues.redhat.com/browse/OCPBUGS-60152): hypershift: add app label to csdriveroperators running in HCP [#604](https://github.com/openshift/cluster-storage-operator/pull/604)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/c09f715fa8592f79d2436218779614b13cd9c592...47fff3642e619b7dc2c84831573c41e692d1a58c)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/0ea36f0a4c0ad6a6abc81a91b2ac87d68d294020)

* NO-ISSUE: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.19 [#80](https://github.com/openshift/cluster-update-keys/pull/80)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/c1c56b4cfb93588290de3734031b1a2d556788fc...0ea36f0a4c0ad6a6abc81a91b2ac87d68d294020)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/842a2ac2261e03bc5b6717620c076bf58652c1f6)

* [OCPBUGS-70181](https://issues.redhat.com/browse/OCPBUGS-70181): OCPBUGS-70181: Unify capitalization when comparing architectures for available updates [#1291](https://github.com/openshift/cluster-version-operator/pull/1291)
* NO-ISSUE: hongkai becomes an approver release-4.19 [#1285](https://github.com/openshift/cluster-version-operator/pull/1285)
* [OCPBUGS-70296](https://issues.redhat.com/browse/OCPBUGS-70296): add the ports Field into the CVO's container spec [#1283](https://github.com/openshift/cluster-version-operator/pull/1283)
* [OCPBUGS-62868](https://issues.redhat.com/browse/OCPBUGS-62868): temporarily disable metrics auth for hypershift clusters [#1245](https://github.com/openshift/cluster-version-operator/pull/1245)
* [OCPBUGS-55937](https://issues.redhat.com/browse/OCPBUGS-55937): Gate 4.19 -&gt; 4.20 upgrade due to admissionregistration.k8s.io/v1beta1 API removal [#1193](https://github.com/openshift/cluster-version-operator/pull/1193)
* [OCPBUGS-60168](https://issues.redhat.com/browse/OCPBUGS-60168): CVO protects /metrics with authorization [#1222](https://github.com/openshift/cluster-version-operator/pull/1222)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/06f6aa6e22eadcc38d57f5786c50ceef38bb4d5e...842a2ac2261e03bc5b6717620c076bf58652c1f6)


### [console](https://github.com/openshift/console/tree/4c33dcafd863e351cd55fb18708cf924a2f1fd2b)

* [OCPBUGS-74464](https://issues.redhat.com/browse/OCPBUGS-74464): Bump lodash to latest [#15964](https://github.com/openshift/console/pull/15964)
* [OCPBUGS-74341](https://issues.redhat.com/browse/OCPBUGS-74341): Do not resolve disabled catalog type extensions [#15945](https://github.com/openshift/console/pull/15945)
* [OCPBUGS-70335](https://issues.redhat.com/browse/OCPBUGS-70335): OpenShift Console can only show user name instead of full name as the display name [#15888](https://github.com/openshift/console/pull/15888)
* [OCPBUGS-72399](https://issues.redhat.com/browse/OCPBUGS-72399): Fix Helm chart installation with CA/TLS certificates [#15898](https://github.com/openshift/console/pull/15898)
* [OCPBUGS-70135](https://issues.redhat.com/browse/OCPBUGS-70135): Update client initialization in checkPackageManifestHandler [#15877](https://github.com/openshift/console/pull/15877)
* [OCPBUGS-69677](https://issues.redhat.com/browse/OCPBUGS-69677): Spread operand details across 2 col [#15859](https://github.com/openshift/console/pull/15859)
* [OCPBUGS-69860](https://issues.redhat.com/browse/OCPBUGS-69860): PVC shows negative Available space in OpenShift Console on RHOCP 4 [#15866](https://github.com/openshift/console/pull/15866)
* [OCPBUGS-62725](https://issues.redhat.com/browse/OCPBUGS-62725): Fixes namespace-scoped operators that were not showing as installed when viewing OperatorHub in "All Projects" mode [#15816](https://github.com/openshift/console/pull/15816)
* [OCPBUGS-67361](https://issues.redhat.com/browse/OCPBUGS-67361): Disallowed Pipelines-plugin Pipelines navigation section [#15839](https://github.com/openshift/console/pull/15839)
* [OCPBUGS-66245](https://issues.redhat.com/browse/OCPBUGS-66245): The number of Quick Starts item is wrong [#15793](https://github.com/openshift/console/pull/15793)
* [OCPBUGS-66179](https://issues.redhat.com/browse/OCPBUGS-66179): Fix unnecessary rerenders with pod-connect [#15784](https://github.com/openshift/console/pull/15784)
* [OCPBUGS-62438](https://issues.redhat.com/browse/OCPBUGS-62438): Updation of label from edit label doesn't work [#15547](https://github.com/openshift/console/pull/15547)
* [OCPBUGS-65930](https://issues.redhat.com/browse/OCPBUGS-65930): Preserve query string in perspective switch + remove dev console folks from `reviewers` [#15760](https://github.com/openshift/console/pull/15760)
* [OCPBUGS-63703](https://issues.redhat.com/browse/OCPBUGS-63703): Fix dynamic form spacing and layout issues [#15706](https://github.com/openshift/console/pull/15706)
* [OCPBUGS-64834](https://issues.redhat.com/browse/OCPBUGS-64834): Preserve path on perspective switch [#15697](https://github.com/openshift/console/pull/15697)
* [OCPBUGS-64849](https://issues.redhat.com/browse/OCPBUGS-64849): HPA Form View in RHOCP Web Console Incorrectly Requires Both CPU and … [#15698](https://github.com/openshift/console/pull/15698)
* [OCPBUGS-64746](https://issues.redhat.com/browse/OCPBUGS-64746): Fix Bare Metal Hosts nav item [#15687](https://github.com/openshift/console/pull/15687)
* [OCPBUGS-63588](https://issues.redhat.com/browse/OCPBUGS-63588): Expose prometheus tenancy label path as a proxy [#15645](https://github.com/openshift/console/pull/15645)
* [OCPBUGS-63607](https://issues.redhat.com/browse/OCPBUGS-63607): limit node log length to 1000 lines [#15647](https://github.com/openshift/console/pull/15647)
* [OCPBUGS-63530](https://issues.redhat.com/browse/OCPBUGS-63530): Remove required flag from 'console.flag/model' pipelines-plugin extension [#15642](https://github.com/openshift/console/pull/15642)
* [OCPBUGS-63156](https://issues.redhat.com/browse/OCPBUGS-63156): Initialize log package [#15610](https://github.com/openshift/console/pull/15610)
* [OCPBUGS-62999](https://issues.redhat.com/browse/OCPBUGS-62999): switch to dev perspective for `/dev-monitoring` [#15598](https://github.com/openshift/console/pull/15598)
* [OCPBUGS-59953](https://issues.redhat.com/browse/OCPBUGS-59953): fix: Fix negative CPU util graphs [#15345](https://github.com/openshift/console/pull/15345)
* [OCPBUGS-62643](https://issues.redhat.com/browse/OCPBUGS-62643): bump dompurify to latest [#15588](https://github.com/openshift/console/pull/15588)
* [OCPBUGS-62083](https://issues.redhat.com/browse/OCPBUGS-62083): `/auth/error?error=missing_state&error_type=auth` is showing blank page [#15523](https://github.com/openshift/console/pull/15523)
* [OCPBUGS-62087](https://issues.redhat.com/browse/OCPBUGS-62087): Help dropdown should be closed automatically after tour model opened [#15527](https://github.com/openshift/console/pull/15527)
* [OCPBUGS-61821](https://issues.redhat.com/browse/OCPBUGS-61821): Refactor PodConnect and Terminal to TypeScript [#15503](https://github.com/openshift/console/pull/15503)
* [OCPBUGS-61781](https://issues.redhat.com/browse/OCPBUGS-61781): Fix improper DescriptionList refactor [#15497](https://github.com/openshift/console/pull/15497)
* NO-JIRA: Update CHANGELOG in relation to 4.18 plugin SDK package publish [#15457](https://github.com/openshift/console/pull/15457)
* [OCPBUGS-60420](https://issues.redhat.com/browse/OCPBUGS-60420): QuickStarts Link buttons to other quickstarts are duplicate [#15391](https://github.com/openshift/console/pull/15391)
* [OCPBUGS-50571](https://issues.redhat.com/browse/OCPBUGS-50571): Make sure CSP violations are only reported to telemetry once per day per browser [#15366](https://github.com/openshift/console/pull/15366)
* [OCPBUGS-60279](https://issues.redhat.com/browse/OCPBUGS-60279): Remove ancient `X-XSS-Protection` header [#15381](https://github.com/openshift/console/pull/15381)
* [OCPBUGS-60038](https://issues.redhat.com/browse/OCPBUGS-60038): Resolving API Version Conflicts in Tekton Pipeline Runs [#15354](https://github.com/openshift/console/pull/15354)
* [OCPBUGS-60294](https://issues.redhat.com/browse/OCPBUGS-60294): OpenShift Console's "Start Job" action overrides configured "backoffLimit" to "6" [#15382](https://github.com/openshift/console/pull/15382)
* NO-JIRA: Update CHANGELOG for latest 4.19 plugin SDK package publish [#15406](https://github.com/openshift/console/pull/15406)
* [OCPBUGS-60039](https://issues.redhat.com/browse/OCPBUGS-60039): Fix i18n string for event stream (again) [#15388](https://github.com/openshift/console/pull/15388)
* [OCPBUGS-60039](https://issues.redhat.com/browse/OCPBUGS-60039): Fix i18n string for event stream [#15355](https://github.com/openshift/console/pull/15355)
* [Full changelog](https://github.com/openshift/console/compare/6fbae6bc7a4507a7858f8e0878bb7af23f41ad62...4c33dcafd863e351cd55fb18708cf924a2f1fd2b)


### [console-operator](https://github.com/openshift/console-operator/tree/034e4865824a6c10c48b912e8584bf7afb095852)

* [OCPBUGS-61879](https://issues.redhat.com/browse/OCPBUGS-61879): pluginOrder field should only contain available plugins [#1047](https://github.com/openshift/console-operator/pull/1047)
* [OCPBUGS-61119](https://issues.redhat.com/browse/OCPBUGS-61119): Consolidate telemetry values oscilation [#1037](https://github.com/openshift/console-operator/pull/1037)
* [Full changelog](https://github.com/openshift/console-operator/compare/3861c72d7928d87bafa94260b6a0038b21821843...034e4865824a6c10c48b912e8584bf7afb095852)


### [coredns](https://github.com/openshift/coredns/tree/4f64931403bf747b78bccb40ad877b08da534e23)

* [OCPBUGS-60246](https://issues.redhat.com/browse/OCPBUGS-60246): UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy [#148](https://github.com/openshift/coredns/pull/148)
* [Full changelog](https://github.com/openshift/coredns/compare/74776b850522c912db5fbadf7353f1eab669bd2a...4f64931403bf747b78bccb40ad877b08da534e23)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/5f3ccea6b322ae392c328f9aefa390747a7fa035)

* [OCPBUGS-64812](https://issues.redhat.com/browse/OCPBUGS-64812): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into release-4.19 [#335](https://github.com/openshift/cloud-provider-openstack/pull/335)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/d9b2461604dba3821d3c044843e428645f925734...5f3ccea6b322ae392c328f9aefa390747a7fa035)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/ac275c3a81edcc4edf23aecf8974c9c23f2aaea9)

* [OCPBUGS-62468](https://issues.redhat.com/browse/OCPBUGS-62468): Requeue PVC over PV creation [#177](https://github.com/openshift/csi-external-resizer/pull/177)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/cca04e3957d4732fd1775e0dc2f757b78ae113a8...ac275c3a81edcc4edf23aecf8974c9c23f2aaea9)


### [csi-external-snapshotter, csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter/tree/580c6960cd665dfdc3d77538bb7744b8754aca26)

* [OCPBUGS-58463](https://issues.redhat.com/browse/OCPBUGS-58463): UPSTREAM: 1303: Fix requeueing snapshot content after deletion error [#182](https://github.com/openshift/csi-external-snapshotter/pull/182)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/ac82cafc95b301f67f46ee0db93720d55177a19b...580c6960cd665dfdc3d77538bb7744b8754aca26)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/fa578445467753d2a000cb1ba1cb5dc91cfb9542)

* [OCPBUGS-63193](https://issues.redhat.com/browse/OCPBUGS-63193): update log level verbosity to not clutter logs [#88](https://github.com/openshift/csi-node-driver-registrar/pull/88)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/d18edb3aa61e673b33ec3a114e9f7dd4136f799e...fa578445467753d2a000cb1ba1cb5dc91cfb9542)


### [docker-builder](https://github.com/openshift/builder/tree/493200aed335b88aaec66f4d35622fef43eae47a)

* [OCPBUGS-66993](https://issues.redhat.com/browse/OCPBUGS-66993): bump buildah to 1.39.7 to fix CVE-2025-52881 [#497](https://github.com/openshift/builder/pull/497)
* [OCPBUGS-65624](https://issues.redhat.com/browse/OCPBUGS-65624): BuildConfig inline Dockerfile fails with heredoc syntax [#485](https://github.com/openshift/builder/pull/485)
* [Full changelog](https://github.com/openshift/builder/compare/28622dd3fdd350a440576f6c9a867fd8296bde0f...493200aed335b88aaec66f4d35622fef43eae47a)


### [etcd](https://github.com/openshift/etcd/tree/3ebce536634cb76794f1b9668072a094c132c16a)

* [OCPBUGS-74602](https://issues.redhat.com/browse/OCPBUGS-74602): 4.19 rebase 3.5.26 [#360](https://github.com/openshift/etcd/pull/360)
* [OCPBUGS-63476](https://issues.redhat.com/browse/OCPBUGS-63476): 4.19 rebase 3.5.24 [#348](https://github.com/openshift/etcd/pull/348)
* [OCPBUGS-61041](https://issues.redhat.com/browse/OCPBUGS-61041): Revert "OCPBUGS-52181: Ensure cluster id changes during force-new-cluster" [#340](https://github.com/openshift/etcd/pull/340)
* [Full changelog](https://github.com/openshift/etcd/compare/a5421dfe551a2e9c911a75062a4cdeb7473f5c26...3ebce536634cb76794f1b9668072a094c132c16a)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/cdaddac53f3a5624216a0b8a08953a3d5d572a9d)

* [OCPBUGS-68307](https://issues.redhat.com/browse/OCPBUGS-68307): Update logrus to 1.9.3 [#88](https://github.com/openshift/gcp-pd-csi-driver/pull/88)
* [OCPBUGS-62116](https://issues.redhat.com/browse/OCPBUGS-62116): UPSTREAM: 2054: Fix Hyperdisk Resize That Requires Iops/Throughput Adjustment [#82](https://github.com/openshift/gcp-pd-csi-driver/pull/82)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/063b256caae5fbe3b6f2a5b1c35339220c7b4188...cdaddac53f3a5624216a0b8a08953a3d5d572a9d)


### [haproxy-router](https://github.com/openshift/router/tree/5fe8cc069b2f44b3393545ac92c3201e8a87d82b)

* [OCPBUGS-66984](https://issues.redhat.com/browse/OCPBUGS-66984): Add option abortonclose to HAProxy configuration template [#701](https://github.com/openshift/router/pull/701)
* [Full changelog](https://github.com/openshift/router/compare/b41f9d05467fb7b3f6c2dafa6ac4b5e25164c0b6...5fe8cc069b2f44b3393545ac92c3201e8a87d82b)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/346896bae752bb9def8cacca75fdc7f7dcae9496)

* [OCPBUGS-76518](https://issues.redhat.com/browse/OCPBUGS-76518): Rebase v1.32.12 [#2592](https://github.com/openshift/kubernetes/pull/2592)
* [OCPBUGS-65552](https://issues.redhat.com/browse/OCPBUGS-65552): Rebase v1.32.10 [#2515](https://github.com/openshift/kubernetes/pull/2515)
* [OCPBUGS-59651](https://issues.redhat.com/browse/OCPBUGS-59651): Fix Concurrentmap Iteration [#2509](https://github.com/openshift/kubernetes/pull/2509)
* [CNTRLPLANE-1609](https://issues.redhat.com/browse/CNTRLPLANE-1609): Backport StreamingCollectionEncoding for JSON and protobuf [#2478](https://github.com/openshift/kubernetes/pull/2478)
* [OCPBUGS-61556](https://issues.redhat.com/browse/OCPBUGS-61556): Rebase v1.32.9 [#2464](https://github.com/openshift/kubernetes/pull/2464)
* [OCPBUGS-61488](https://issues.redhat.com/browse/OCPBUGS-61488): UPSTREAM: &lt;carry&gt;: backporting fix for concurrent map iteration and write [#2456](https://github.com/openshift/kubernetes/pull/2456)
* [OCPBUGS-60510](https://issues.redhat.com/browse/OCPBUGS-60510): Unrevert bump to v1.32.8 [#2439](https://github.com/openshift/kubernetes/pull/2439)
* [OCPBUGS-61021](https://issues.redhat.com/browse/OCPBUGS-61021): UPSTREAM: &lt;carry&gt;: Revert "Rebase v1.32.8 to 4.19" [#2433](https://github.com/openshift/kubernetes/pull/2433)
* [OCPBUGS-60510](https://issues.redhat.com/browse/OCPBUGS-60510): Rebase v1.32.8 to 4.19 [#2412](https://github.com/openshift/kubernetes/pull/2412)
* [OCPBUGS-60074](https://issues.redhat.com/browse/OCPBUGS-60074): UPSTREAM: 132028: podresources: list: use active pods [#2391](https://github.com/openshift/kubernetes/pull/2391)
* [Full changelog](https://github.com/openshift/kubernetes/compare/138db5223eea57e4408598a32320896c216724e1...346896bae752bb9def8cacca75fdc7f7dcae9496)


### [hypershift](https://github.com/openshift/hypershift/tree/e10a26e9d62fcb2eb0ebe83c57fdfd1815e7354e)

* [OCPBUGS-72393](https://issues.redhat.com/browse/OCPBUGS-72393): Fix Konflux EC voilation, nginx image deprecated [#7440](https://github.com/openshift/hypershift/pull/7440)
* [CNV-70889](https://issues.redhat.com/browse/CNV-70889): use csi-resizer image from release provider [#7102](https://github.com/openshift/hypershift/pull/7102)
* [OCPBUGS-65829](https://issues.redhat.com/browse/OCPBUGS-65829): The Containerfile in the repo has hypershift-no-cgo, but the published image quay.io/hypershift/hypershift-operator:latest doesn't [#7256](https://github.com/openshift/hypershift/pull/7256)
* [CNTRLPLANE-1709](https://issues.redhat.com/browse/CNTRLPLANE-1709): feat: Backport Customer Global Pull Secret to OpenShift 4.19.z [#7316](https://github.com/openshift/hypershift/pull/7316)
* [OCPBUGS-69415](https://issues.redhat.com/browse/OCPBUGS-69415): test: remove unit tests that depend on network communication [release-4.19] [#7395](https://github.com/openshift/hypershift/pull/7395)
* [OCPBUGS-65693](https://issues.redhat.com/browse/OCPBUGS-65693): specify SCC annotation for pods in data plane [#7255](https://github.com/openshift/hypershift/pull/7255)
* [OCPBUGS-62959](https://issues.redhat.com/browse/OCPBUGS-62959): fix(cvo): support image overrides annotation for CVO deployment [#7065](https://github.com/openshift/hypershift/pull/7065)
* [OCPBUGS-64817](https://issues.redhat.com/browse/OCPBUGS-64817): Add CPO hotfix arm64 builds [#7195](https://github.com/openshift/hypershift/pull/7195)
* [OCPBUGS-63129](https://issues.redhat.com/browse/OCPBUGS-63129): resolve initContainer permission issue after node reboot [#7145](https://github.com/openshift/hypershift/pull/7145)
* [OCPBUGS-63636](https://issues.redhat.com/browse/OCPBUGS-63636): [release-4.19] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries [#7110](https://github.com/openshift/hypershift/pull/7110)
* [OCPBUGS-63368](https://issues.redhat.com/browse/OCPBUGS-63368): Make the hypershift CLI binary FIPS-compliant [#7092](https://github.com/openshift/hypershift/pull/7092)
* [OCPBUGS-61407](https://issues.redhat.com/browse/OCPBUGS-61407): fix: Do not admit OAuth route by private router unless… [#6780](https://github.com/openshift/hypershift/pull/6780)
* [OCPBUGS-62807](https://issues.redhat.com/browse/OCPBUGS-62807): Fix driver-config ConfigMap content flapping due to random ordering [#6944](https://github.com/openshift/hypershift/pull/6944)
* [CNTRLPLANE-1423](https://issues.redhat.com/browse/CNTRLPLANE-1423): feat(konflux): tag MCE HO images with latest [#6833](https://github.com/openshift/hypershift/pull/6833)
* [OCPBUGS-62183](https://issues.redhat.com/browse/OCPBUGS-62183): fix(kas-bootstrap): increase wait timeouts to avoid KAS startup races [#6886](https://github.com/openshift/hypershift/pull/6886)
* [OCPBUGS-62202](https://issues.redhat.com/browse/OCPBUGS-62202): Enable VolumeAttributesClass runtime config [#6890](https://github.com/openshift/hypershift/pull/6890)
* [OCPBUGS-60630](https://issues.redhat.com/browse/OCPBUGS-60630): order ICSPs for determinism of OPENSHIFT_IMG_OVERRIDES [#6674](https://github.com/openshift/hypershift/pull/6674)
* [OCPBUGS-61567](https://issues.redhat.com/browse/OCPBUGS-61567): [release-4.19] fix(proxy): ensure URLs have scheme before proxy resolution [#6792](https://github.com/openshift/hypershift/pull/6792)
* [OCPBUGS-61677](https://issues.redhat.com/browse/OCPBUGS-61677): resolve MIRRORED_RELEASE_IMAGE flapping [#6825](https://github.com/openshift/hypershift/pull/6825)
* [OCPBUGS-61206](https://issues.redhat.com/browse/OCPBUGS-61206): use common MCE konflux pipeline [#6748](https://github.com/openshift/hypershift/pull/6748)
* [OCPBUGS-61031](https://issues.redhat.com/browse/OCPBUGS-61031): [release-4.19]: set default goaway-chance to 0.001 [#6712](https://github.com/openshift/hypershift/pull/6712)
* [OCPBUGS-60483](https://issues.redhat.com/browse/OCPBUGS-60483): feat(validations): add wildcard support to DNS SAN conflict detection [#6648](https://github.com/openshift/hypershift/pull/6648)
* [OCPBUGS-60147](https://issues.redhat.com/browse/OCPBUGS-60147): Always compress and encode payload in token secret for inplace upgrades [#6606](https://github.com/openshift/hypershift/pull/6606)
* [OCPBUGS-60152](https://issues.redhat.com/browse/OCPBUGS-60152): add missing app label to some components [#6636](https://github.com/openshift/hypershift/pull/6636)
* [OCPBUGS-60125](https://issues.redhat.com/browse/OCPBUGS-60125): fix(OCPBUGS-60125): Allow HCCO to set registry managementState to Removed; delete VAP during HC deletion [#6689](https://github.com/openshift/hypershift/pull/6689)
* [OCPBUGS-60648](https://issues.redhat.com/browse/OCPBUGS-60648): Cache Azure KMS TokenCredential for ARO HCP and clarify CPO credentials cache naming [#6677](https://github.com/openshift/hypershift/pull/6677)
* [OCPBUGS-60100](https://issues.redhat.com/browse/OCPBUGS-60100): fix: add dynamic security context uid to 4.19 missing components [#6675](https://github.com/openshift/hypershift/pull/6675)
* [OCPBUGS-57141](https://issues.redhat.com/browse/OCPBUGS-57141): HCP payload doesn't respect multiple mirrors [#6517](https://github.com/openshift/hypershift/pull/6517)
* [CNTRLPLANE-1270](https://issues.redhat.com/browse/CNTRLPLANE-1270): Red Hat Konflux update control-plane-operator-4-19 [#6660](https://github.com/openshift/hypershift/pull/6660)
* Red Hat Konflux purge control-plane-operator-4-19 [#6659](https://github.com/openshift/hypershift/pull/6659)
* [CNTRLPLANE-1267](https://issues.redhat.com/browse/CNTRLPLANE-1267): conditional builds for mce-2.9 [#6657](https://github.com/openshift/hypershift/pull/6657)
* [OCPBUGS-57588](https://issues.redhat.com/browse/OCPBUGS-57588): Update PSA from v1beta1 to v1 [#6302](https://github.com/openshift/hypershift/pull/6302)
* [OCPBUGS-59805](https://issues.redhat.com/browse/OCPBUGS-59805): Router publish strategy related changes for IBM Cloud platform [#6490](https://github.com/openshift/hypershift/pull/6490)
* [OCPBUGS-59933](https://issues.redhat.com/browse/OCPBUGS-59933): Use the image reference for the cache in the image metadata provider [#6535](https://github.com/openshift/hypershift/pull/6535)
* [CNTRLPLANE-1016](https://issues.redhat.com/browse/CNTRLPLANE-1016): Support day2 tags changes for AWS default SecurityGroup [#6455](https://github.com/openshift/hypershift/pull/6455)
* [CNTRLPLANE-1034](https://issues.redhat.com/browse/CNTRLPLANE-1034): chore: Relax the kas healthcheck for aro when AllowedCIDRBlocks [#6617](https://github.com/openshift/hypershift/pull/6617)
* [Full changelog](https://github.com/openshift/hypershift/compare/9c2f0e259551e68742c007ca9f22339ed83d0b18...e10a26e9d62fcb2eb0ebe83c57fdfd1815e7354e)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/940ac1c27e5548f738219b8c2ea4d1b6924e60e5)

* [OCPBUGS-52542](https://issues.redhat.com/browse/OCPBUGS-52542): CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork [#118](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/118)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/877ef8cd546facbc2416c194128557a25b95d141...940ac1c27e5548f738219b8c2ea4d1b6924e60e5)


### [insights-operator](https://github.com/openshift/insights-operator/tree/9a099795207fb69c18adc25638d8086284bfb1c6)

* [OCPBUGS-75902](https://issues.redhat.com/browse/OCPBUGS-75902): [bugfix] The ConfigMap value for StoragePath is ignored on basic routine [#1224](https://github.com/openshift/insights-operator/pull/1224)
* [OCPBUGS-66202](https://issues.redhat.com/browse/OCPBUGS-66202): Add filtering to add other possible pod status to QEMU gatherer [#1190](https://github.com/openshift/insights-operator/pull/1190)
* [OCPBUGS-66058](https://issues.redhat.com/browse/OCPBUGS-66058): [bugfix] The archive's records may include files whose names are out of bounds [#1183](https://github.com/openshift/insights-operator/pull/1183)
* [OCPBUGS-66061](https://issues.redhat.com/browse/OCPBUGS-66061): QEMU logs are not gathered if there are pending status virt-launcher pods [#1184](https://github.com/openshift/insights-operator/pull/1184)
* [OCPBUGS-62489](https://issues.redhat.com/browse/OCPBUGS-62489): Update error message for missing SCA certificates [#1152](https://github.com/openshift/insights-operator/pull/1152)
* [OCPBUGS-61971](https://issues.redhat.com/browse/OCPBUGS-61971): add missing permissions for replicasets and events [#1145](https://github.com/openshift/insights-operator/pull/1145)
* And 3 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/insights-operator/compare/8fffce910f39cf33efa97a24a894c84cf3f3d1f6...9a099795207fb69c18adc25638d8086284bfb1c6)


### [ironic](https://github.com/openshift/ironic-image/tree/7ac59af8729c999105c36744584e91ed28dd22c4)

* [OCPBUGS-77028](https://issues.redhat.com/browse/OCPBUGS-77028): Update ironic hash for 4.19 with heartbeat inspection fix [#797](https://github.com/openshift/ironic-image/pull/797)
* [OCPBUGS-69785](https://issues.redhat.com/browse/OCPBUGS-69785): Bump eventlet version to 0.33.1-7 [#759](https://github.com/openshift/ironic-image/pull/759)
* [OCPBUGS-65572](https://issues.redhat.com/browse/OCPBUGS-65572): Include Handle HTTP 400 and 409 race condition in Redfish power opera… [#724](https://github.com/openshift/ironic-image/pull/724)
* [OCPBUGS-62961](https://issues.redhat.com/browse/OCPBUGS-62961): Bump sushy to include fix [#700](https://github.com/openshift/ironic-image/pull/700)
* [Full changelog](https://github.com/openshift/ironic-image/compare/fe31e71dbbbd24c77adaecdc3d4d895375a611a5...7ac59af8729c999105c36744584e91ed28dd22c4)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/d7f33593262aadda98c83a369cad2e3ee92054ad)

* [OCPBUGS-69783](https://issues.redhat.com/browse/OCPBUGS-69783): Bump eventlet version to 0.33.1-7 [#229](https://github.com/openshift/ironic-agent-image/pull/229)
* [OCPBUGS-67304](https://issues.redhat.com/browse/OCPBUGS-67304): Include Test advertised ip reachability before assigning it [#224](https://github.com/openshift/ironic-agent-image/pull/224)
* [OCPBUGS-62441](https://issues.redhat.com/browse/OCPBUGS-62441): netutils: Use ethtool ioctl to get permanent mac address [#198](https://github.com/openshift/ironic-agent-image/pull/198)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/5b5afbd42650dacfc34d03f599ebd980d55e10e6...d7f33593262aadda98c83a369cad2e3ee92054ad)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/dd0126864cf2196ac84b4c1fe862178b70aebc7a)

* [OCPBUGS-61096](https://issues.redhat.com/browse/OCPBUGS-61096): bump openshift/api [#1411](https://github.com/openshift/machine-api-operator/pull/1411)
* fix for OCPBUGS-60427: userDataSecret.name should be a Required value on AWS [#1403](https://github.com/openshift/machine-api-operator/pull/1403)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/7cf7a446c086a97cb15766cb100b468573192b8e...dd0126864cf2196ac84b4c1fe862178b70aebc7a)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/1d699383bfd81188d2ab77fc9e0c659ab3683c12)

* [OCPBUGS-77240](https://issues.redhat.com/browse/OCPBUGS-77240): Fix MCN conditions not updating during OCL sync [#5693](https://github.com/openshift/machine-config-operator/pull/5693)
* [OCPBUGS-77071](https://issues.redhat.com/browse/OCPBUGS-77071): Machine-config controller should not log about non-existent pull-secret changes [#5674](https://github.com/openshift/machine-config-operator/pull/5674)
* [OCPBUGS-76831](https://issues.redhat.com/browse/OCPBUGS-76831): machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] [#5658](https://github.com/openshift/machine-config-operator/pull/5658)
* [OCPBUGS-76362](https://issues.redhat.com/browse/OCPBUGS-76362): Update AMI script and list [#5640](https://github.com/openshift/machine-config-operator/pull/5640)
* [OCPBUGS-43435](https://issues.redhat.com/browse/OCPBUGS-43435): After OCL is enabled few phases in MCN are not updating as expected [#5606](https://github.com/openshift/machine-config-operator/pull/5606)
* [OCPBUGS-71210](https://issues.redhat.com/browse/OCPBUGS-71210): MCP is not correctly degraded when a pivotError happens [#5532](https://github.com/openshift/machine-config-operator/pull/5532)
* [OCPBUGS-70325](https://issues.redhat.com/browse/OCPBUGS-70325): Remove log exposing kubeconfig [#5526](https://github.com/openshift/machine-config-operator/pull/5526)
* [OCPBUGS-67264](https://issues.redhat.com/browse/OCPBUGS-67264): cherry pick to few fixes that needed for missing services and configuration [#5490](https://github.com/openshift/machine-config-operator/pull/5490)
* [OCPBUGS-67198](https://issues.redhat.com/browse/OCPBUGS-67198): Fix cleanup in TestInstallRPMAndCheckMCDMetrics to decrease risk of test failures due to interference [#5496](https://github.com/openshift/machine-config-operator/pull/5496)
* [OCPBUGS-64922](https://issues.redhat.com/browse/OCPBUGS-64922): Update timing of MCN desired config spec update to align with node annotation setting [#5439](https://github.com/openshift/machine-config-operator/pull/5439)
* [OCPBUGS-65839](https://issues.redhat.com/browse/OCPBUGS-65839): Remove --mount directives [#5430](https://github.com/openshift/machine-config-operator/pull/5430)
* [OCPBUGS-62168](https://issues.redhat.com/browse/OCPBUGS-62168): Fix - NetworkManager restart or crash renders br-ex unusable [#5352](https://github.com/openshift/machine-config-operator/pull/5352)
* [OCPBUGS-64844](https://issues.redhat.com/browse/OCPBUGS-64844): Create temporal allow policy [#5398](https://github.com/openshift/machine-config-operator/pull/5398)
* [OCPBUGS-63126](https://issues.redhat.com/browse/OCPBUGS-63126): Ensure the node passed to RunCordonOrUncordon comes from the latest updated state [#5348](https://github.com/openshift/machine-config-operator/pull/5348)
* [OCPBUGS-62670](https://issues.redhat.com/browse/OCPBUGS-62670): [release-4.19] Networking: reset ovn-remote config and allow ovnkube controller to set it [#5324](https://github.com/openshift/machine-config-operator/pull/5324)
* [OCPBUGS-62746](https://issues.redhat.com/browse/OCPBUGS-62746): Fix MCP updated machine count for image mode disabling case [#5336](https://github.com/openshift/machine-config-operator/pull/5336)
* [OCPBUGS-62788](https://issues.redhat.com/browse/OCPBUGS-62788): Skip rpm-ostree local rebase if no PIS [#5337](https://github.com/openshift/machine-config-operator/pull/5337)
* [OCPBUGS-61738](https://issues.redhat.com/browse/OCPBUGS-61738): Recheck generatedByControllerVersion annotation prior to deleting a degraded MC [#5283](https://github.com/openshift/machine-config-operator/pull/5283)
* [OCPBUGS-62706](https://issues.redhat.com/browse/OCPBUGS-62706): Cert Controller should live fetch SAN IPs during cert rotation [#5330](https://github.com/openshift/machine-config-operator/pull/5330)
* [OCPBUGS-62649](https://issues.redhat.com/browse/OCPBUGS-62649): configure-ovs: work around a Cisco switch issue [#5323](https://github.com/openshift/machine-config-operator/pull/5323)
* [OCPBUGS-62003](https://issues.redhat.com/browse/OCPBUGS-62003): Machine-config controller should actively manage cordon while draining [#5300](https://github.com/openshift/machine-config-operator/pull/5300)
* [OCPBUGS-62164](https://issues.redhat.com/browse/OCPBUGS-62164): Add mcd_local_unsupported_packages recording rule [#5306](https://github.com/openshift/machine-config-operator/pull/5306)
* [OCPBUGS-62114](https://issues.redhat.com/browse/OCPBUGS-62114): Improve MCN CRD clean-up script [#5299](https://github.com/openshift/machine-config-operator/pull/5299)
* [OCPBUGS-61835](https://issues.redhat.com/browse/OCPBUGS-61835): Override NMState service definition [#5287](https://github.com/openshift/machine-config-operator/pull/5287)
* [OCPBUGS-61284](https://issues.redhat.com/browse/OCPBUGS-61284): Make MCN e2e tests blocking [#5275](https://github.com/openshift/machine-config-operator/pull/5275)
* [OCPBUGS-60110](https://issues.redhat.com/browse/OCPBUGS-60110): Enable debug logging for nodeip-configuration [#5221](https://github.com/openshift/machine-config-operator/pull/5221)
* [OCPBUGS-59871](https://issues.redhat.com/browse/OCPBUGS-59871): Understand and eliminate noisy logs for MCN [#5199](https://github.com/openshift/machine-config-operator/pull/5199)
* [OCPBUGS-60767](https://issues.redhat.com/browse/OCPBUGS-60767): Update the OnClusterBuild payload tests to reflect the validation rule requiring MCP & MOSC names to match [#5258](https://github.com/openshift/machine-config-operator/pull/5258)
* [OCPBUGS-60265](https://issues.redhat.com/browse/OCPBUGS-60265): Reintroduce cronjob that deletes MCN v1alpha1 CRD [#5243](https://github.com/openshift/machine-config-operator/pull/5243)
* [OCPBUGS-60224](https://issues.redhat.com/browse/OCPBUGS-60224): Invalid architecture value found in annotation during 4.19 update [#5227](https://github.com/openshift/machine-config-operator/pull/5227)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/1b3ce4ea5b1943283ed703f55800a8f08d26e4a8...1d699383bfd81188d2ab77fc9e0c659ab3683c12)


### [metallb-frr](https://github.com/openshift/frr/tree/9c93b083918f4266b7139ae39207c12cd4824345)

* [OCPBUGS-66055](https://issues.redhat.com/browse/OCPBUGS-66055): Dockerfile: unpin FRR rpm [#113](https://github.com/openshift/frr/pull/113)
* [Full changelog](https://github.com/openshift/frr/compare/5076dbc4f8483a844f1fce06b57216d743600237...9c93b083918f4266b7139ae39207c12cd4824345)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/6c14875473b70231d2678561a30806af7a84bc35)

* [OU-1233](https://issues.redhat.com/browse/OU-1233): monitoring testing on release-4.19 branch - fix [#785](https://github.com/openshift/monitoring-plugin/pull/785)
* [OU-1233](https://issues.redhat.com/browse/OU-1233): automation task - main into 419 and alerting conditional filtering [#772](https://github.com/openshift/monitoring-plugin/pull/772)
* [OCPBUGS-74166](https://issues.redhat.com/browse/OCPBUGS-74166): fix: update qs vulnerable dependency [#737](https://github.com/openshift/monitoring-plugin/pull/737)
* [OU-1157](https://issues.redhat.com/browse/OU-1157): remove random multiplication [#706](https://github.com/openshift/monitoring-plugin/pull/706)
* [OU-1131](https://issues.redhat.com/browse/OU-1131): Merge main into release-4.19 [#693](https://github.com/openshift/monitoring-plugin/pull/693)
* [OCPBUGS-66388](https://issues.redhat.com/browse/OCPBUGS-66388): Time range and Refresh interval dropdown button lack of unique identifier [#671](https://github.com/openshift/monitoring-plugin/pull/671)
* [OU-863](https://issues.redhat.com/browse/OU-863): [release-4.19]: Fix step calculation for metric explorer 4.19 [#655](https://github.com/openshift/monitoring-plugin/pull/655)
* [OCPBUGS-63531](https://issues.redhat.com/browse/OCPBUGS-63531): [release-4.19] Improve alignment with console SDK [#647](https://github.com/openshift/monitoring-plugin/pull/647)
* [OCPBUGS-63588](https://issues.redhat.com/browse/OCPBUGS-63588): [release-4.19] allow tenancy access to metrics tags [#618](https://github.com/openshift/monitoring-plugin/pull/618)
* [OU-1060](https://issues.redhat.com/browse/OU-1060): remove troubleshooting panel links from non-admin [#629](https://github.com/openshift/monitoring-plugin/pull/629)
* NO-JIRA: [release-4.19] OCPBUGS-60296: fix legend height to avoid scroll overlap [#498](https://github.com/openshift/monitoring-plugin/pull/498)
* NO-JIRA: improve consistency in tab string [#496](https://github.com/openshift/monitoring-plugin/pull/496)
* : NO-JIRA: update the i18n [#495](https://github.com/openshift/monitoring-plugin/pull/495)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/ca8edb7a12b7a884a07122490502509d28a3c7a0...6c14875473b70231d2678561a30806af7a84bc35)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/632d814a2916372a0ca69e0a0bc3d6f5f5d6ff1c)

* [OCPBUGS-77158](https://issues.redhat.com/browse/OCPBUGS-77158): Fix modified vendor/ and go.sum after vendoring [#82](https://github.com/openshift/multus-networkpolicy/pull/82)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/6fffe5d78f52e01e51110d178b433788ef98c8ae...632d814a2916372a0ca69e0a0bc3d6f5f5d6ff1c)


### [must-gather](https://github.com/openshift/must-gather/tree/b8318d0796b685953b495fc9dcbbc0a6c411b1b6)

* [OCPBUGS-59487](https://issues.redhat.com/browse/OCPBUGS-59487): network: Gather OVN-Kubernetes CUDN CRs [#499](https://github.com/openshift/must-gather/pull/499)
* [Full changelog](https://github.com/openshift/must-gather/compare/463c03ca559bb00f324b11273763aa64543f9006...b8318d0796b685953b495fc9dcbbc0a6c411b1b6)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/fd8f506d59353ac89db5c8015969e81dafdab774)

* [OCPBUGS-62107](https://issues.redhat.com/browse/OCPBUGS-62107): Use netlinksafe instead of netlink to avoid netlink.ErrDumpInterrupted [#96](https://github.com/openshift/bond-cni/pull/96)
* [Full changelog](https://github.com/openshift/bond-cni/compare/9788e753f0f98d9bdef41898701c3aa9ad6b031e...fd8f506d59353ac89db5c8015969e81dafdab774)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/89e4882698653fdd80fcee2e9d92e668cb02d2d1)

* [OCPBUGS-58851](https://issues.redhat.com/browse/OCPBUGS-58851): Bump github.com/golang/glog to v1.2.4 (#110) [#110](https://github.com/openshift/network-metrics-daemon/pull/110)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/4a61b9a44f04505e4e28943d5d964a208fdf2b8a...89e4882698653fdd80fcee2e9d92e668cb02d2d1)


### [network-tools](https://github.com/openshift/network-tools/tree/633767b26eb0d7c69e370599d40458e72e7d1a69)

* NO-JIRA: fix prefetch-dependencies step failure [#166](https://github.com/openshift/network-tools/pull/166)
* [Full changelog](https://github.com/openshift/network-tools/compare/81f7aebeb1553998800c32644a8d982121277b4e...633767b26eb0d7c69e370599d40458e72e7d1a69)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/6e1a6e53741b2f92983baf3433df64f4fe8e6e07)

* [OCPBUGS-41199](https://issues.redhat.com/browse/OCPBUGS-41199): Fix NAD creation using default namespace instead of selected one [#351](https://github.com/openshift/networking-console-plugin/pull/351)
* [CNV-76277](https://issues.redhat.com/browse/CNV-76277): Fix name generator with unprofessional names [#318](https://github.com/openshift/networking-console-plugin/pull/318)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/f37c618af0ac1c9122486c068cc99df4ffd1e70f...6e1a6e53741b2f92983baf3433df64f4fe8e6e07)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/5539eb2b1174fe0d8a65287c449c99ec3a362122)

* NO-JIRA: (chore): update OWNERS file [#169](https://github.com/openshift/oauth-apiserver/pull/169)
* [OCPBUGS-61760](https://issues.redhat.com/browse/OCPBUGS-61760): bump kubernetes-apiserver to pick up loopback certificate expiration update [#152](https://github.com/openshift/oauth-apiserver/pull/152)
* [OCPBUGS-63051](https://issues.redhat.com/browse/OCPBUGS-63051): (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission [#150](https://github.com/openshift/oauth-apiserver/pull/150)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/75914068d66a8b5502906526942c2423bec86f7a...5539eb2b1174fe0d8a65287c449c99ec3a362122)


### [oauth-server](https://github.com/openshift/oauth-server/tree/eafa143a67a0ba86439f96ceb6a1ca9d2b3815e3)

* [OCPBUGS-58892](https://issues.redhat.com/browse/OCPBUGS-58892): Fix mixup with Spanish and French locale variable names [#192](https://github.com/openshift/oauth-server/pull/192)
* [Full changelog](https://github.com/openshift/oauth-server/compare/14780f7c67d5929c3db84504d10625710fcf5fe0...eafa143a67a0ba86439f96ceb6a1ca9d2b3815e3)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/140e0b81946e64e8ec0a3aade50ed219769b5ea6)

* [OCPBUGS-66410](https://issues.redhat.com/browse/OCPBUGS-66410): fix: return only requested version [#1323](https://github.com/openshift/oc-mirror/pull/1323)
* [OCPBUGS-65968](https://issues.redhat.com/browse/OCPBUGS-65968): Remove empty status field from generated IDMS/ITMS files [#1318](https://github.com/openshift/oc-mirror/pull/1318)
* [OCPBUGS-64683](https://issues.redhat.com/browse/OCPBUGS-64683): removes unintended exec permissions [#1307](https://github.com/openshift/oc-mirror/pull/1307)
* [OCPBUGS-62311](https://issues.redhat.com/browse/OCPBUGS-62311): v2/cli: show binary version in output [#1277](https://github.com/openshift/oc-mirror/pull/1277)
* [OCPBUGS-62606](https://issues.redhat.com/browse/OCPBUGS-62606): generate the archive only after mirroring [#1282](https://github.com/openshift/oc-mirror/pull/1282)
* [OCPBUGS-62062](https://issues.redhat.com/browse/OCPBUGS-62062): [release-4.19] changes the warning message of 4.21 [#1271](https://github.com/openshift/oc-mirror/pull/1271)
* And 5 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/e91ec32c8c0195393280c734ba46de5a31637479...140e0b81946e64e8ec0a3aade50ed219769b5ea6)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/4b3ad172bc6e39f82cf1a1925df2cd1ef294d0d8)

* [OCPBUGS-63405](https://issues.redhat.com/browse/OCPBUGS-63405), [OPRUN-4216](https://issues.redhat.com/browse/OPRUN-4216): Port CRD upgrade safety carry from 4.20 without bumping deps [#543](https://github.com/openshift/operator-framework-operator-controller/pull/543)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/8f42f09b2a9faecefb6ab22afe4a75c1a8d5a584...4b3ad172bc6e39f82cf1a1925df2cd1ef294d0d8)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/a5eb0298114e532b8b1e3cca74e3c263136892ac)

* [OCPBUGS-66920](https://issues.redhat.com/browse/OCPBUGS-66920): Add ValidatingAdmissionPolicy and check for omissions next time. [#588](https://github.com/openshift/openshift-apiserver/pull/588)
* [OCPBUGS-61662](https://issues.redhat.com/browse/OCPBUGS-61662): Adding validation directly and calling existing library-go validation [#576](https://github.com/openshift/openshift-apiserver/pull/576)
* [OCPBUGS-65962](https://issues.redhat.com/browse/OCPBUGS-65962): pkg/image: conditionally parse raw image manifest [#582](https://github.com/openshift/openshift-apiserver/pull/582)
* NO-JIRA: add .0 to go version [#583](https://github.com/openshift/openshift-apiserver/pull/583)
* [OCPBUGS-65863](https://issues.redhat.com/browse/OCPBUGS-65863): update pkg/image/OWNERS [#578](https://github.com/openshift/openshift-apiserver/pull/578)
* [OCPBUGS-61759](https://issues.redhat.com/browse/OCPBUGS-61759): bump kubernetes-apiserver to pick up loopback certificate expiration update [#569](https://github.com/openshift/openshift-apiserver/pull/569)
* [OCPBUGS-57043](https://issues.redhat.com/browse/OCPBUGS-57043): Updating ose-openshift-apiserver-container image to be consistent with ART for 4.19 [#564](https://github.com/openshift/openshift-apiserver/pull/564)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/7fe57362c4f64c0d4caf52a0bb26a59b2799b227...a5eb0298114e532b8b1e3cca74e3c263136892ac)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/5b3063ff149f290bebca0783fc508dfbf07689a5)

* [OCPBUGS-56614](https://issues.redhat.com/browse/OCPBUGS-56614): legacy image pull secret rollback controller [#384](https://github.com/openshift/openshift-controller-manager/pull/384)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/a672407574befa9faf6a56078d6852229701f8c6...5b3063ff149f290bebca0783fc508dfbf07689a5)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/4e7f9611b32128a93fac36d2ea554a931dfe4f85)

* [OCPBUGS-64815](https://issues.redhat.com/browse/OCPBUGS-64815): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into release-4.19 [#370](https://github.com/openshift/cluster-api-provider-openstack/pull/370)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/53190949835e1d94e07bbcfc13804fc959b9028a...4e7f9611b32128a93fac36d2ea554a931dfe4f85)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/c0a9ac574f7fd39e3cb7d3cf2fa8aec1a55889ae)

* [OCPBUGS-76791](https://issues.redhat.com/browse/OCPBUGS-76791): Fix make test [#158](https://github.com/openshift/machine-api-provider-openstack/pull/158)
* [OCPBUGS-74586](https://issues.redhat.com/browse/OCPBUGS-74586): Revendor CAPO [#151](https://github.com/openshift/machine-api-provider-openstack/pull/151)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/848bf658a280e6ab6f660c290a24e16fa29252e3...c0a9ac574f7fd39e3cb7d3cf2fa8aec1a55889ae)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/05a5a754366264a0926abf61e1ae11837a94b393)

* [OCPBUGS-76587](https://issues.redhat.com/browse/OCPBUGS-76587): Remove the collect-profiles job [#1229](https://github.com/openshift/operator-framework-olm/pull/1229)
* [OCPBUGS-64925](https://issues.redhat.com/browse/OCPBUGS-64925): Fix TOCTOU race condition in ensureInstallPlan (#3682) [#1145](https://github.com/openshift/operator-framework-olm/pull/1145)
* [OCPBUGS-61363](https://issues.redhat.com/browse/OCPBUGS-61363): [4.19] e2e stability fixes [#1079](https://github.com/openshift/operator-framework-olm/pull/1079)
* [OCPBUGS-60525](https://issues.redhat.com/browse/OCPBUGS-60525): Add NetworkPolicy as a supported kind [#1047](https://github.com/openshift/operator-framework-olm/pull/1047)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/8bcf1556a550efa7bb380ec315c077cf29438695...05a5a754366264a0926abf61e1ae11837a94b393)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/ca41bfdd1a96f70632ea3d218a9a007ecbcf76f5)

* [OCPBUGS-73882](https://issues.redhat.com/browse/OCPBUGS-73882): Increase default catalog polling interval to 4h (240m) [#706](https://github.com/operator-framework/operator-marketplace/pull/706)
* [OCPBUGS-62217](https://issues.redhat.com/browse/OCPBUGS-62217): Remove Expect func so that the test case can use the retry logic [#668](https://github.com/operator-framework/operator-marketplace/pull/668)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/02d245516289b2f3a27b81ce59b9cef66750501c...ca41bfdd1a96f70632ea3d218a9a007ecbcf76f5)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/b4ebba787de2dd0730be4cd3b6f469389585d316)

* [OCPBUGS-68321](https://issues.redhat.com/browse/OCPBUGS-68321): Bump github.com/sirupsen/logrus to v1.9.3 [#149](https://github.com/openshift/ovirt-csi-driver-operator/pull/149)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/76db379d075fdae94ca604f3fa83b0612b36ef8d...b4ebba787de2dd0730be4cd3b6f469389585d316)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/194e289903051ba951e479c227ad3d44f9fc321a)

* [OCPBUGS-74269](https://issues.redhat.com/browse/OCPBUGS-74269): release-4.19 fix(localnet, ipamless): Prevent LSP deletion on sync [#2942](https://github.com/openshift/ovn-kubernetes/pull/2942)
* [OCPBUGS-70345](https://issues.redhat.com/browse/OCPBUGS-70345): Branch Sync release-4.20 to release-4.19 [12-31-2025] [#2915](https://github.com/openshift/ovn-kubernetes/pull/2915)
* [OCPBUGS-66139](https://issues.redhat.com/browse/OCPBUGS-66139): Branch Sync release-4.20 to release-4.19 [12-03-2025] [#2890](https://github.com/openshift/ovn-kubernetes/pull/2890)
* [CORENET-6055](https://issues.redhat.com/browse/CORENET-6055), [OCPBUGS-65658](https://issues.redhat.com/browse/OCPBUGS-65658), [OCPBUGS-65909](https://issues.redhat.com/browse/OCPBUGS-65909), [OCPBUGS-65956](https://issues.redhat.com/browse/OCPBUGS-65956): Branch Sync release-4.20 to release-4.19 [11-26-2025] [#2872](https://github.com/openshift/ovn-kubernetes/pull/2872)
* [OCPBUGS-64854](https://issues.redhat.com/browse/OCPBUGS-64854): Fix stale EIP assignments during failover and controller restart [#2848](https://github.com/openshift/ovn-kubernetes/pull/2848)
* [OCPBUGS-64645](https://issues.redhat.com/browse/OCPBUGS-64645): kubevirt: fix bad release of IPs of live migratable pods [#2842](https://github.com/openshift/ovn-kubernetes/pull/2842)
* [OCPBUGS-63660](https://issues.redhat.com/browse/OCPBUGS-63660): Skip Pending pods in EgressIP status updates [#2834](https://github.com/openshift/ovn-kubernetes/pull/2834)
* [OCPBUGS-63234](https://issues.redhat.com/browse/OCPBUGS-63234): [release-4.19] DownStream Merge Sync from 4.20 [10-16-2025] [#2810](https://github.com/openshift/ovn-kubernetes/pull/2810)
* [OCPBUGS-62670](https://issues.redhat.com/browse/OCPBUGS-62670): Fix EgressIP stale GARP post reboot + pod restart [#2774](https://github.com/openshift/ovn-kubernetes/pull/2774)
* [OCPBUGS-62800](https://issues.redhat.com/browse/OCPBUGS-62800): [release-4.19] DownStream Merge Sync from 4.20 [10-07-2025] [#2786](https://github.com/openshift/ovn-kubernetes/pull/2786)
* [OCPBUGS-61454](https://issues.redhat.com/browse/OCPBUGS-61454): [4.19] allow default network -&gt; localnet on the same node for any localnet subnet [#2753](https://github.com/openshift/ovn-kubernetes/pull/2753)
* [OCPBUGS-48709](https://issues.redhat.com/browse/OCPBUGS-48709), [OCPBUGS-60797](https://issues.redhat.com/browse/OCPBUGS-60797), [OCPBUGS-60979](https://issues.redhat.com/browse/OCPBUGS-60979): DownStream Merge Sync from 4.20 [08-22-2025] [#2733](https://github.com/openshift/ovn-kubernetes/pull/2733)
* [OCPBUGS-48709](https://issues.redhat.com/browse/OCPBUGS-48709): DownStream Merge Sync from 4.20 [08-06-2025] [#2704](https://github.com/openshift/ovn-kubernetes/pull/2704)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/e24389403dd961a14b6512e40cda7e3e5d0a4b20...194e289903051ba951e479c227ad3d44f9fc321a)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/ff6e9a8e1ea2eebb552cdc64974f8f6e7e5cbd1a)

* [OCPBUGS-61134](https://issues.redhat.com/browse/OCPBUGS-61134): Use OS_GIT_VERSION in Makefile when found (for Konflux builds) [#124](https://github.com/openshift/machine-api-provider-powervs/pull/124)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/87f8e306940e6b0231e6b8fb655ca1e6f21ba95a...ff6e9a8e1ea2eebb552cdc64974f8f6e7e5cbd1a)


### [prometheus](https://github.com/openshift/prometheus/tree/396601b64177f9c6f9d52ff8ac53017c9d150ff7)

* [OCPBUGS-62429](https://issues.redhat.com/browse/OCPBUGS-62429): chore(scrape): default to legacy validation/escaping scheme until utf-8 is fully supported by prometheus-operator [#275](https://github.com/openshift/prometheus/pull/275)
* [OCPBUGS-61486](https://issues.redhat.com/browse/OCPBUGS-61486): chore: compute highestTimestamp at queryManager level [#265](https://github.com/openshift/prometheus/pull/265)
* [Full changelog](https://github.com/openshift/prometheus/compare/7935baede79e0e2fbf117781fa3843bea10dfbf8...396601b64177f9c6f9d52ff8ac53017c9d150ff7)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/6ff6a8848263ceb5fbac784f4976d9c04e92e61e)

* [OCPBUGS-73759](https://issues.redhat.com/browse/OCPBUGS-73759): Include go-verify-deps expected files in gitignore [#111](https://github.com/openshift/prometheus-alertmanager/pull/111)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/a2346ca5bd71f535399435cd70a8e9519e521c4b...6ff6a8848263ceb5fbac784f4976d9c04e92e61e)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/69f2cb92ad5f03ecbe03793f0ee197aa2be67480)

* [OCPBUGS-63197](https://issues.redhat.com/browse/OCPBUGS-63197): reconcile workload configurations when a referenced secret/configmap key is updated [#339](https://github.com/openshift/prometheus-operator/pull/339)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/b8debb4c0493078dd64bf8a74cee9f0649705f51...69f2cb92ad5f03ecbe03793f0ee197aa2be67480)


### [tests](https://github.com/openshift/origin/tree/53102bee611e3e6c3509df958f9d5a123ad5db26)

* [OCPBUGS-74201](https://issues.redhat.com/browse/OCPBUGS-74201): Unrevert TLS tests with fixes [#30707](https://github.com/openshift/origin/pull/30707)
* [OCPBUGS-67146](https://issues.redhat.com/browse/OCPBUGS-67146): Fix MachineConfigNode test in two-node fencing clusters [#30590](https://github.com/openshift/origin/pull/30590)
* [OCPBUGS-67365](https://issues.redhat.com/browse/OCPBUGS-67365): Updated the upgrade duration limit to 100 minutes for ppc64le [#30606](https://github.com/openshift/origin/pull/30606)
* [OCPBUGS-63727](https://issues.redhat.com/browse/OCPBUGS-63727): CNTRLPLANE-1767:fix(disruption): Using correct internal LB of apiserver for monitor test on ARO and Baremetal Hypershift [#30440](https://github.com/openshift/origin/pull/30440)
* [OCPBUGS-63609](https://issues.redhat.com/browse/OCPBUGS-63609): Migrate OCP-32383 to upstream [#30429](https://github.com/openshift/origin/pull/30429)
* [OCPBUGS-63637](https://issues.redhat.com/browse/OCPBUGS-63637): Add imagestream update dryrun test [#30432](https://github.com/openshift/origin/pull/30432)
* [OCPBUGS-62642](https://issues.redhat.com/browse/OCPBUGS-62642): Fix endpoint admission test namespace creation for ROSA [#30331](https://github.com/openshift/origin/pull/30331)
* [OCPBUGS-61172](https://issues.redhat.com/browse/OCPBUGS-61172): OCPBUGS-60883: Fix PinnedImageSet test instability & update flow for tests using custom MCPs [#30205](https://github.com/openshift/origin/pull/30205)
* [OCPBUGS-56213](https://issues.redhat.com/browse/OCPBUGS-56213): Skip GatewayAPIController tests on clusters without OLM capabilities [#29815](https://github.com/openshift/origin/pull/29815)
* [OCPBUGS-61666](https://issues.redhat.com/browse/OCPBUGS-61666): chore(test/extended/prometheus): bump the series limit of total series sent via telemetry from each cluster [#30249](https://github.com/openshift/origin/pull/30249)
* [OCPBUGS-59512](https://issues.redhat.com/browse/OCPBUGS-59512): disruptioninclusterapiserver: bump timeout to 10 mins [#29999](https://github.com/openshift/origin/pull/29999)
* [OCPBUGS-60510](https://issues.redhat.com/browse/OCPBUGS-60510): Bump to latest openshift/kubernetes (v1.32.8) [#30229](https://github.com/openshift/origin/pull/30229)
* [OCPBUGS-60244](https://issues.redhat.com/browse/OCPBUGS-60244): Wait 30s after the upgrade is complete to validate workloads [#30144](https://github.com/openshift/origin/pull/30144)
* [OCPBUGS-60797](https://issues.redhat.com/browse/OCPBUGS-60797): Don't check for remote node subnet BGP routes [#30156](https://github.com/openshift/origin/pull/30156)
* NO-JIRA: Update extended/networking OWNERS [#30088](https://github.com/openshift/origin/pull/30088)
* [OCPBUGS-60569](https://issues.redhat.com/browse/OCPBUGS-60569): images/tests: Remove rteval [#30124](https://github.com/openshift/origin/pull/30124)
* [OCPBUGS-60429](https://issues.redhat.com/browse/OCPBUGS-60429): Load our MCO's OTE binary [#30043](https://github.com/openshift/origin/pull/30043)
* [OCPBUGS-59757](https://issues.redhat.com/browse/OCPBUGS-59757): OCPBUGS-59758: Improve MCN test stability [#30018](https://github.com/openshift/origin/pull/30018)
* [OCPBUGS-60117](https://issues.redhat.com/browse/OCPBUGS-60117): Enable test for LGW L2 [#30052](https://github.com/openshift/origin/pull/30052)
* [OCPBUGS-60234](https://issues.redhat.com/browse/OCPBUGS-60234): Move the legacy container failures [#30073](https://github.com/openshift/origin/pull/30073)
* [Full changelog](https://github.com/openshift/origin/compare/1a15c85aaa9f0b6c1e7ed2f9776a6c1d98b5cb1f...53102bee611e3e6c3509df958f9d5a123ad5db26)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/f33d67f8f38e33af45efcb25003a001a17165cdc)

* [OCPBUGS-61650](https://issues.redhat.com/browse/OCPBUGS-61650): Fix unit tests [#69](https://github.com/openshift/cluster-api-provider-vsphere/pull/69)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/55cce625800f2ef5adc53b9512fd52f8a5054964...f33d67f8f38e33af45efcb25003a001a17165cdc)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/b8d3322fec45db4d4a8233527364f336d5e3560b)

* [OCPBUGS-68315](https://issues.redhat.com/browse/OCPBUGS-68315): CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 [#155](https://github.com/openshift/vmware-vsphere-csi-driver/pull/155)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/15134035e9bd1e6dde10547cdba8d390d90f1072...b8d3322fec45db4d4a8233527364f336d5e3560b)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/d074cb1d32b51319a280d58416dca0dde88d665a)

* [OCPBUGS-66198](https://issues.redhat.com/browse/OCPBUGS-66198): Fixed logic for vSphere compute cluster permission [#198](https://github.com/openshift/vsphere-problem-detector/pull/198)
* [OCPBUGS-60535](https://issues.redhat.com/browse/OCPBUGS-60535): Check for number of FailureDomain-s in GetVCenter() [#188](https://github.com/openshift/vsphere-problem-detector/pull/188)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/32b15d87f5fd387dd5d04b96b7250a353240bf92...d074cb1d32b51319a280d58416dca0dde88d665a)