# 4.20.9

Created: 2026-01-09 08:53:19 +0000 UTC

Image Digest: `sha256:4ca459a8eebc78d940682aaa5a57f6d72d8559259fba49f1ec25c2ae15931724`


## Changes from 4.20.0

### Components

* Kubectl 1.33.3
* Kubernetes upgraded from 1.33.5 to 1.33.6
* Kubernetes Tests 1.33.4
* Red Hat Enterprise Linux CoreOS upgraded from 9.6.20250925-0 to 9.6.20260107-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| ExternalOIDCWithUIDAndExtraClaimMappings <br/> (5 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| PreconfiguredUDNAddresses <br/> (10 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| ExternalOIDC <br/> (9 tests)| Enabled| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |


### New images

* [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui) git [c0370c19](https://github.com/openshift-assisted/assisted-installer-ui/commit/c0370c199bd9d314d14cdf668f4dddff6d475514) `sha256:defac9014efb6c87c7e70a90e4c53aeb287adc33d27ca43edc3cadb3f8e73d55`


### Rebuilt images without code change

* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [3accbb7b](https://github.com/openshift/assisted-installer/commit/3accbb7bd0dd865744e0ef0808b65be5914b157e) `sha256:799fc20a01a67efe4540bda482405f8351b8a61d8ddcc18f5ffea6d471043cf8`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [3accbb7b](https://github.com/openshift/assisted-installer/commit/3accbb7bd0dd865744e0ef0808b65be5914b157e) `sha256:5b3c190468764191b1c48ea34486d2d918a30037a2e4bc332ff960f376e37074`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [11b24a2c](https://github.com/openshift/apiserver-network-proxy/commit/11b24a2c7452ef683a1d989f1016e6e815f5c112) `sha256:aa5ed53cb04fe8fcd098162389bf62a41a140f2c11c005b292f7f4eff162bd81`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [bb88da16](https://github.com/openshift/cloud-provider-aws/commit/bb88da16b29d63573861351afc5ca8c4547775d6) `sha256:82a3952f4ff8f9a740b687c56cd66ccfbbb7f858f17a29054bb300e52c3fdb99`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [a8ef205c](https://github.com/openshift/aws-ebs-csi-driver/commit/a8ef205c28b7b8c80b0caf1c1a9e12f81f4fdbb9) `sha256:57d50368b7e0b806b8f8e09b7ce9abf77419c9392dc9b23f0abf4a0e471e2203`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [b37141b0](https://github.com/openshift/aws-karpenter-provider-aws/commit/b37141b051bdf790eb7e8f45b95f6bd7dc8140f4) `sha256:209ad9f3ef6e3eb71c8a563cffcb994a67513cfa9bf8208e99b6cd30781168ad`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [088dcaf7](https://github.com/openshift/aws-encryption-provider/commit/088dcaf73f980b977ef4f5d2f99e2a93deb87eef) `sha256:075da983820a64eb195c5602201437c1b2ad25e0baeefc024c4475d3831d8f82`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [a2ecb150](https://github.com/openshift/aws-pod-identity-webhook/commit/a2ecb1502280feb8e82c9cf6f3f77d62797e4445) `sha256:a580d234ec0ac2250e23e1149c20ed6257e8cd5519ec253243a5b1e1060735b6`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [d469d04e](https://github.com/openshift/cloud-provider-azure/commit/d469d04ed645358d942af442fe21e2c2b44b9b2c) `sha256:d94cb678afeaa633096c2035147c2e003c04422a57d68c67f29efa4a6ce5ee0b`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [d469d04e](https://github.com/openshift/cloud-provider-azure/commit/d469d04ed645358d942af442fe21e2c2b44b9b2c) `sha256:33e5da34cc62ed6489108761e6e0a908a76786da566fb7d91a6d22d793a57dd7`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [cb8b5b6a](https://github.com/openshift/cluster-api-provider-azure/commit/cb8b5b6a485971a95c5a74508d76ab19b23cbf29) `sha256:e1e209c4273add43fb0afc2265e428d1814e90c85b71b7103284844f528da974`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [0b8e4d22](https://github.com/openshift/azure-disk-csi-driver/commit/0b8e4d2202b0d17942fd745a5e1948f46bdd0350) `sha256:c44c1008292cc2431b000652956451fd704110fee91e396c9256d4906990066e`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [45d505bc](https://github.com/openshift/azure-file-csi-driver/commit/45d505bc11fedadece5ae27147c9595877e39f2a) `sha256:04802c8c802bd606588126b9ef45c8d507e127469f7e2dbb14cf538991fbf1b4`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [ea0b9944](https://github.com/openshift/azure-kubernetes-kms/commit/ea0b9944dddcc7043065a1fab5fca72dd17450da) `sha256:f4c8fc109f2cdcc9c8682530d57ff51787c267f0fca2ced62058f52445f21c3d`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [6e2f3626](https://github.com/openshift/azure-service-operator/commit/6e2f362623720f7b6d634fbc424fbc61e4b481ae) `sha256:7c0e5ceabe6d22c1867affeac72371dccdf7f4651ceb9f9eb0a00466c6d2980b`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [88b18175](https://github.com/openshift/azure-workload-identity/commit/88b18175e46fe305486d172ec0b4e8471c55e30b) `sha256:f39bd20024f101fa71945310640e6d66dcdbd57c0864b579a7cee748bf2bc8ae`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [f782ba74](https://github.com/openshift/cluster-api-provider-metal3/commit/f782ba747ed353721c84ceb754ca8403f94adb6a) `sha256:c1bec056dfeb969c2359df7fe4e6da33c25bc13a4103b35a2d869aef7cb665d9`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [fb678fec](https://github.com/openshift/cluster-api-provider-baremetal/commit/fb678fec5f7e08348b281341481f33a848204e50) `sha256:5473799753349a6b2339af826a6723c703db808c72ef1ed9f9bd4066e43b61d1`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [6553765e](https://github.com/openshift/baremetal-runtimecfg/commit/6553765e71c7f8d7db120af94473c9c0cb44d453) `sha256:88b2e3ba9b979cffcca95034fa0bfe48372528dc3bad02460c0fb32c199a225f`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [147e5a7f](https://github.com/openshift/cluster-autoscaler-operator/commit/147e5a7ff20b46ade7dd932b47e06ca82729f5e8) `sha256:508f9ee32a09036fd5c62d73cbd66e18c6283623aec019b605d37ef24b9930f9`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [74abc555](https://github.com/openshift/cluster-bootstrap/commit/74abc555111bac56a67957ef517ef086e4643c50) `sha256:c74de6c348b0ee286cb328688afbbb6ff85a657df85b3ea54e7e2f5282c6a0a1`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [de1db297](https://github.com/openshift/cluster-api/commit/de1db2970e7fede7101e5a8188e74942ab6665e3) `sha256:ac61cd6752ba51abe034ce4f4c9cb2fc0b65dc6f1672539a30bc24d8605b58d5`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [657754e2](https://github.com/openshift/cluster-config-operator/commit/657754e2beaed6295ff28bb0f7813cb1c9ce35b2) `sha256:93ab788fd8d92b518be81686ec8617ba50525bdb88744c589cfc9c9cb13762d9`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [0bbafe24](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/0bbafe24ade564bc62554251f36de90d524abcde) `sha256:fc7d9a05ad1352238a1866449527a3a5553eb90faf33ef9882f59bc12e78ff58`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [019abe0c](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/019abe0c7671962829eb91269e1d76916966320e) `sha256:770ad86b70115aa84a0230375dab1718027bbff33b4e7d31f6652eb7097e08b6`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [82578923](https://github.com/openshift/cluster-dns-operator/commit/82578923164636746e0d74d594ab32d83a660c0b) `sha256:183372d567de77c5bcac3a8ff252fad33aad5680cbbc587629f28de467562dd8`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [b04c7c12](https://github.com/openshift/cluster-image-registry-operator/commit/b04c7c121851704973a94a50e42af1425045899c) `sha256:007bec4336a5f314b2ed7fc1d63c29d1304ff6af49ad7171ea6f224a4b2aff71`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [58cbd296](https://github.com/openshift/cluster-kube-scheduler-operator/commit/58cbd296eecc61c0871739588ae65af9c05e87a6) `sha256:5e61633fd4b8481ff18ce20fec3685e7daec8d39a4ec0ad9e7741d7a17b63def`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [5adc1429](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/5adc14299739bc64c8812cbab0b0ff2d12863602) `sha256:65dd57d3637bb5a2676567003ec43963f63bef14b79e2e0a8868ef7a395c0d38`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [e4917368](https://github.com/openshift/cluster-olm-operator/commit/e4917368b6a547f97a0fb411fea90de246d1417e) `sha256:8c20a925b3bbf5195a31f01bc2e749fb191791b769edd5867254c4b1919e6870`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [9cfa5679](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/9cfa5679a8ac1e5a68eea32179d9e069da85dfcf) `sha256:fa787b8c57b76c9d4cff0db22d20fd6b215193dbaa4cd436140671c1b10fd375`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [aa455c04](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/aa455c043152123595c2b4f72e02279aad9dd48a) `sha256:ac77470292255723a600d4ac6d5685e77b20c23d72be28f6491e7cb1ea3d1d7a`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [47c78310](https://github.com/openshift/cluster-policy-controller/commit/47c783103216aa5e1242632127a5d8f98b8b7455) `sha256:fcb9dd818fc696906d1312c84f79bfe90f4e9bc78cefb2d6985e875a4b43c7cf`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [c40e7b9b](https://github.com/openshift/cluster-update-keys/commit/c40e7b9b60c62690a25333fc54ae0d3705474afb) `sha256:ab32da4cd38b244e2169a10af13ccd91ce9721c7826f841f0b1e5c73a27c2711`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [2438d7c8](https://github.com/openshift/configmap-reload/commit/2438d7c8e495201361d87da205649bc38fc4822b) `sha256:bd8b915054884bd18513f127e066e9bbda7a955982708846f1909efe220330ba`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [184a9601](https://github.com/openshift/containernetworking-plugins/commit/184a96011a8cacb72319cdccb904271a99c5928d) `sha256:1dfaab66149af2236571cf145bc0720ea967adb31ba13abc5315f0105da7b037`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [184a9601](https://github.com/openshift/containernetworking-plugins/commit/184a96011a8cacb72319cdccb904271a99c5928d) `sha256:49c3797fb00465b61f4b0d4a28a3bb29df6500d0796522ec67f40f45bc853747`
* [coredns](https://github.com/openshift/coredns) git [6f39336e](https://github.com/openshift/coredns/commit/6f39336e6da9dc77b2db140a96773c413d50a665) `sha256:0b8c13edbf1678c977192c7fae7e46a4043676dd6476a4459aa1956684e1ab78`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [1abaf844](https://github.com/openshift/csi-driver-nfs/commit/1abaf84447384a486a9f9da7cd7b9e53784c8a55) `sha256:63bb7116f2d8e0e143fec7b87555531e0367a584825c041a9fa6c85cee483036`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [45239149](https://github.com/openshift/csi-external-attacher/commit/45239149cb387bcc51d944b802db0e804dc02688) `sha256:3a616b92ceb2d2f4f0c0262071ad8d3121e8c493440fd6255cd26b95ecbc62b3`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [81fca036](https://github.com/openshift/csi-external-provisioner/commit/81fca03694bca1bae8606d8970472330e1e4fcad) `sha256:7341d13cffeb90cc902ee863576610c89357f949c61119edd0e91b4b816a52ac`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [c674bea9](https://github.com/openshift/csi-external-resizer/commit/c674bea9bb6a81e463c7fefa974e2109d829daef) `sha256:f834871444eadd0c7232c9b3485fb984b8f5fe5667128a5fc79b8c3fcd9a58bc`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [693a8264](https://github.com/openshift/csi-external-snapshot-metadata/commit/693a826455777eaafc677bb2195dc071d184243b) `sha256:107e47f5d94f87dce8ec06905f7cc8ab0c931917bce7d90c3ab8eceb65f9679f`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [42604822](https://github.com/openshift/csi-external-snapshotter/commit/42604822c25eb2aa0ecb017c24e328221b238eb9) `sha256:e12310640374e3616758f8b4596f34310e4e10766d3b5bf7806382d6e0ea0f79`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [1d6d6b27](https://github.com/openshift/csi-livenessprobe/commit/1d6d6b27460e58f24110c72ec9c96afe2c1d891d) `sha256:75b6543998b6c6b35b9f6dc2cad0ad9fbba061068c3012a306becb74080dc1df`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [42604822](https://github.com/openshift/csi-external-snapshotter/commit/42604822c25eb2aa0ecb017c24e328221b238eb9) `sha256:c0ca2fe1b5a902d5713455cddd7dd2bc60f438ce71008fbd6a5a020a7700981c`
* [docker-registry](https://github.com/openshift/image-registry) git [0c09647a](https://github.com/openshift/image-registry/commit/0c09647aa2db93a8584dfe8079ed919145c662fb) `sha256:5101791f36572fb63ca855a4b3e07ee937260b9054d2de3cf8948936c075031f`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [9d55fd1a](https://github.com/openshift/driver-toolkit/commit/9d55fd1aaba05830f857132bd149ee3cf18cc20f) `sha256:6a659550af0acd4ac7198897ae6c35ec8330975a7f9a143a107f07c9efe5f7ad`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [5e0f8d1b](https://github.com/openshift/egress-router-cni/commit/5e0f8d1b545899fda27c5e1cc8707d33cba1b534) `sha256:282637ec5313b063f969cb5afbaaa2ad6a5f42dae998bd98c6f83d05a5b3cd5a`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [f940e72e](https://github.com/openshift/cloud-provider-gcp/commit/f940e72e7611ce4a96da3e47966ba1befd25c474) `sha256:1d4a406e6c897fea71d071f86306b18696dd6e34b4de70eec4598dd68bf933cd`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [65539c71](https://github.com/openshift/cluster-api-provider-gcp/commit/65539c71b4c292fc0f4eeb572dfe490af63063d9) `sha256:a1be5ee8bbfcc84ab3a9db06118bddff26d22f0300ab11987abe62d8aeb2bed2`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [01515888](https://github.com/openshift/machine-api-provider-gcp/commit/01515888c83526ec235b7bc3a27df6eba3034b00) `sha256:c8d950aed436b442118372364991259b22981d104973b7bbd20d78c49606d235`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [500ab5d3](https://github.com/openshift/gcp-pd-csi-driver/commit/500ab5d31ad382805070c8ae329a9a34163ebc99) `sha256:df4dfeccda58564eba96c719923a735c8cdd5f4024724a0e31c1af87fb86c156`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [e0ad050a](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/e0ad050a84bab669e0f11e080fc4c388ef417bba) `sha256:cc98d412e3dba2db4ce9801bb82d9bd440715a030ee84e8a6009fc4c6e27af9d`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [b36788ed](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/b36788edd4c559cffd5f7f1b2e3e51b98c3e92b8) `sha256:7aeaf0f56fa1b2f2acf1ff888a3ea98d56918f682c64b56ab3cb1832901380e1`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [36ab30f9](https://github.com/openshift/cloud-provider-ibm/commit/36ab30f90e87de0daa926d20ccda88c41abed191) `sha256:f83edc4e6ffe117bf4e30b995c218ed2c3873167737361be6eb62fc8b11d36d7`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [19801353](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/19801353c97d08b1333177be45c848082af0643c) `sha256:5cfafe3d800f854aa55fb9d75bd9e2a37756724e960934231fe8b3014e9634d4`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [21f405cc](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/21f405cce9573eee1c4f1cf95c0eb601ae77ed99) `sha256:4a48a222468f269b102eb2be5bf7ed00b58c5460376f32eb0ec3ab258073756b`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [8b6396a4](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/8b6396a4c78f4791b7f3c5ec404a78b499f8546b) `sha256:65967972dd578ceca1e6a0f5b0af31496f749872c535a2f3b2a958885a6d2acf`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [035805df](https://github.com/openshift/machine-api-provider-ibmcloud/commit/035805df5277c9f9c0cd9d4a44f59a08ab3ce031) `sha256:7877c259188b06a20cc4938b794c81822414bc60450b60cb178a3012d70da4d9`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [3d378369](https://github.com/openshift/insights-runtime-extractor/commit/3d3783698b20f5c27e4f35051b1450e47e789068) `sha256:cf7d474a13ae881f8bee135a0f2cbb285d36724714a36c8a274885040ac59fd9`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [3d378369](https://github.com/openshift/insights-runtime-extractor/commit/3d3783698b20f5c27e4f35051b1450e47e789068) `sha256:e213acef00da1985104a05f3ed9fdc3244cc9d1da576191224fbcc3f8b7a923b`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [6c92e542](https://github.com/openshift/ironic-rhcos-downloader/commit/6c92e5425b58baa9d4dd951a992b7460e8407247) `sha256:96e7bc5437100e7626a81e91d430f8ec5278e0fd1be22e6bc04f73334bf06b8a`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [fa5b8b8b](https://github.com/openshift/ironic-static-ip-manager/commit/fa5b8b8bb73e509f74205a99a0ed1cb07a843885) `sha256:73af17607fa41e7f538aca40a0b2a7350fba03d88bcba05206fc2e9187144f59`
* [keepalived-ipfailover](https://github.com/openshift/images) git [bb4535b7](https://github.com/openshift/images/commit/bb4535b7069cab2de0174be29bccccde6d623b4f) `sha256:dec2991919fe5f0c7b2f0ea6dddff7b46dfdcb658d9e2f6710149743a2d6b0b0`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [cfa5ee9f](https://github.com/openshift/kubernetes-metrics-server/commit/cfa5ee9f1c94d7faec36de970033b9e329326f38) `sha256:2239862167dff00503912a7a8ebe73b9623c646c4b7f2f3f3ff1316ed745e497`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [b9134351](https://github.com/openshift/kube-rbac-proxy/commit/b9134351be37c43408334047d8eb85d0ac01fe4e) `sha256:d211689c6fca13bcba2091e9a6ca3e4bc37c1bc1b8bbbb2f0278767868093fb9`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [a8c9a5f0](https://github.com/openshift/kube-state-metrics/commit/a8c9a5f08f675ae9afbaafdc47d7d2acb4a3709d) `sha256:90ffe853b729370649f0265d8f523604fc591b30451b43add52e6f325353d884`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [0f8a4eb8](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/0f8a4eb84ace9b746cf25d51d80dacf34ca5f953) `sha256:ff2299ddfd2cdcd6f1fe06d4d02fe160783635c2977ecb61e52b99cb982cc700`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:daaa2aa7f417c12f643ef51d1639de08ffb044fabb23f3cc37796977ce8bcf2e`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [8b8dd30e](https://github.com/openshift/kubevirt-csi-driver/commit/8b8dd30ecd302e2b260c666702dffb19abf7c1aa) `sha256:45852455dff1d5a00f620cb7a56d2f825e9f1a66347342afcdbfac0c80fe096f`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:01ea0c3aada49c02eb3ab1347fd82ae5e7ba1ddff42e81b36b4d4b20c695c136`
* [machine-api-operator](https://github.com/openshift/machine-api-operator) git [4a9b90e3](https://github.com/openshift/machine-api-operator/commit/4a9b90e306a04ddfacfa408609c98b48a1cdea17) `sha256:09ef66d90ca7500b48a3dfdf8747b5e60296bc308506383c0dcb7a437efdba72`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [20f6d615](https://github.com/openshift/image-customization-controller/commit/20f6d615c03b9c579037cdcdc327bd2bcefde4e6) `sha256:a992f5ec1401b2f68414846bace8c6425adc221d13dc1258b572747753ecec9d`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [64bfec79](https://github.com/openshift/machine-os-images/commit/64bfec79ae03b50b1da5b614a4cca2937ea9927d) `sha256:2478b1a5381b7d75e69bc1842fa6a7f2f7d2dcdce20676771397fcb6e5cd50f5`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [fc73c803](https://github.com/openshift/multus-admission-controller/commit/fc73c803caa1140e5a9115ceeb0e38504b001722) `sha256:7c2bffdd3309e8f635d18c40f794d09df33e785fc21a67793d683a50f4c43df1`
* [multus-cni](https://github.com/openshift/multus-cni) git [cf0f68ec](https://github.com/openshift/multus-cni/commit/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe) `sha256:eed5513eede84299b1855078a9efbdde17bf2411392051eb87c39d9f67d3e260`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [cf0f68ec](https://github.com/openshift/multus-cni/commit/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe) `sha256:8688debacf215c769cd90f4db01be854fe6ec7c8d3c715c2abab4aad79f21f5b`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [278ec20e](https://github.com/openshift/multus-networkpolicy/commit/278ec20e795c3a590500e789716be7fcc4d7107b) `sha256:bafbf1ea97a5e978d9254f255ecbff09204b01968dda9603d2217b8c42782b4d`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:823c75e86b095dc333f124a69ecb97094282ed5c72e61a805654a223bbae8769`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [43c89591](https://github.com/openshift/whereabouts-cni/commit/43c8959152a6ca8afdc73eaed624286628c2c22e) `sha256:9cd52a92f89bda1807364f3653a4ea3b3831c2a8d45045f163e95ae68406e036`
* [must-gather](https://github.com/openshift/must-gather) git [f0c64742](https://github.com/openshift/must-gather/commit/f0c64742c79afce5e367ca2c7b830ad448abe1df) `sha256:a2031bcdc43ff0cd8df8debd859212bed3a1d6259f23a5c06a8692cc618945bb`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [dd3c4d0b](https://github.com/openshift/bond-cni/commit/dd3c4d0b886138d974022b963e72f2e90293abfe) `sha256:e41259b03c5c081bae007f1347e41198721101058ea96fabb3c8f31e337b4d6b`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [b81340a9](https://github.com/openshift/network-metrics-daemon/commit/b81340a9fc6963fa3d64d215a12e8528ca797131) `sha256:3faeba4d130ef294e891b7ea43e133770ab80cfb8d4e4464bce82fa414a2f9e6`
* [network-tools](https://github.com/openshift/network-tools) git [26d09174](https://github.com/openshift/network-tools/commit/26d09174cbd92386469e777e3bf49bfa95d035d5) `sha256:40186705f4d981c77ca621b7292c155327db0b23f585ba115c4bbc6336bb7437`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [b575ef15](https://github.com/openshift/cloud-provider-nutanix/commit/b575ef15f13e1434c793ae50824fd0676480be05) `sha256:98a5d1d5078018e5c187a7d9c1fdbe3a41cd538dd882aad9f1e325a25be64320`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [3200ddef](https://github.com/openshift/machine-api-provider-nutanix/commit/3200ddef48a5a8d47b96539419c51f3619cb1fd5) `sha256:2fcadba7b806c71bb3e79b520c603d6ee2dec264d2ad953371bc0b0765a1dc73`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [6649cb8a](https://github.com/openshift/oauth-proxy/commit/6649cb8a7c4dd7d1c4e03c9b0bc7594089fba991) `sha256:5cc900e3c98dc331534309a07e32011c9c7a5f7316fc35bed03e4d5fae396f0a`
* [oauth-server](https://github.com/openshift/oauth-server) git [81098796](https://github.com/openshift/oauth-server/commit/81098796234cbe75e656ffddd8a015953e0bb1c7) `sha256:686057a0e45eb8680eb1d054b4c493cdf7769abe0f306ce0acd570dd742ac27a`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [d9e543dd](https://github.com/openshift/openshift-controller-manager/commit/d9e543dd31e981f279c447e4f92f0dac3f665f9e) `sha256:1ac8704c84e9972a14d2cc8a8fbf23b605bd20e7388faa06547be260854a358f`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [b04e2ef0](https://github.com/openshift/openshift-state-metrics/commit/b04e2ef05498c2a4504bd9396a3290c4f263fc37) `sha256:0945e1f5548117d6d4ee00276223901e54d2ecb759917e3243a30204abd7e662`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [5085f184](https://github.com/openshift/machine-api-provider-openstack/commit/5085f184c7d2ed21f36e5e3fe65bf023b38afe67) `sha256:51e385b972e334831f1095c9f2f01b3a6f1d4f6228f6e0d786595141b22ef89e`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [bf0d2c88](https://github.com/openshift/openstack-resource-controller/commit/bf0d2c88d6bf9bd90b24c979ea63dc37606b45fc) `sha256:7c5418cc6a5a001be4850981ec503597a6e8ddddc6af8b2792000d9ae88426ac`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:2c0351d3235935dde1e1d6bb1a6d1bff51ff5b951f74503a7023a78e7195688e`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [76db379d](https://github.com/openshift/ovirt-csi-driver-operator/commit/76db379d075fdae94ca604f3fa83b0612b36ef8d) `sha256:177fa1c700467302babf8099aa2c5ab9da76334dd5e6d9d294b0a8337716353f`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [0693fe5d](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/0693fe5dcfab224466fba7a19e614de71f727999) `sha256:be874b06811548e190c7ee516778309309da57874d6fc041784928b93210d3a0`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [319efc99](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/319efc99be8cc2603fad1677acee7c4a4a096913) `sha256:eed08a623c9b805ebe13181ba343a265eece13ee9a9c0ffdbc10003a3814d633`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [2424e8dd](https://github.com/openshift/cloud-provider-powervs/commit/2424e8dd4bf3e19c3e65efebc03bf4942665f7c4) `sha256:626884865d9e07228c86707572eacf22ef2908e5c30f09a64dc64bdf8348a6b2`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [f011b3c7](https://github.com/openshift/machine-api-provider-powervs/commit/f011b3c727c5377302b2ab0a203457490b930a3d) `sha256:0e574d3c593f79e3019ee77cc836d090f3d7658eaffc1827d58bb089eb965ae7`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [f2529aee](https://github.com/openshift/prom-label-proxy/commit/f2529aee3dc2e9065de08b035d53151e007136fd) `sha256:3dfb3b83a7bbcbaf69c4fbe73762908274e698aaa175fdb65c507a98319a6adc`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [419f2843](https://github.com/openshift/prometheus-alertmanager/commit/419f2843332265d44982920d6fb4db220ec26f91) `sha256:0da52a0c002d63e4c9cf8bdd7558d3b78825080ee4e254555fa0716eee8a5358`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [e2bd260c](https://github.com/openshift/prometheus-operator/commit/e2bd260c9d686192a5ed9b85dfd4a9f7a2a03666) `sha256:33b7cfb046b16508c941e6b950b96770f8637a9c26a5e9591a6afc5a04d7df64`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [e2bd260c](https://github.com/openshift/prometheus-operator/commit/e2bd260c9d686192a5ed9b85dfd4a9f7a2a03666) `sha256:908c7a69c423958ddda5cae4bc9006d7f668e05898498b0b0573a87a3215d079`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [e2bd260c](https://github.com/openshift/prometheus-operator/commit/e2bd260c9d686192a5ed9b85dfd4a9f7a2a03666) `sha256:b6ab886079e33a3a5ecee0257ebbe883db56217c3083482f756a200b09ac19f0`
* [rhel-coreos](https://github.com/openshift/os) git [63e9aa40](https://github.com/openshift/os/commit/63e9aa4008eb65a02a2d70c9c086cbd8e18e149f) `sha256:7eaa7ed13ded2219002fcb9f490479f770619c77b46aef302e107163cb07cb4e`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [63e9aa40](https://github.com/openshift/os/commit/63e9aa4008eb65a02a2d70c9c086cbd8e18e149f) `sha256:733ef3dd5e7a0c6b1227ae35b25de3bb7aea581743e0a4de96093376518a4c2e`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [bf2fa662](https://github.com/openshift/route-controller-manager/commit/bf2fa662f57f233d8541f94c4953e0dcd7a5ab20) `sha256:c7ba2558da19f5b7d5fa982b915dec1e2c400f8b9cbbf3e36dcf7255277969b8`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [37e0c317](https://github.com/openshift/service-ca-operator/commit/37e0c31790b6a954214817974a56c9a699d0cf78) `sha256:84a95fa06a3867fd716469f9709abdceffbfa8a912df069dc58a28ad0f879245`
* [telemeter](https://github.com/openshift/telemeter) git [4c6036ee](https://github.com/openshift/telemeter/commit/4c6036eeb851ad6e0e837e214a2d08ffc8f0d1d0) `sha256:4c4d351d2f4c5c03b0f4af22e3e6e0bcbc1dd07f5302177a96dffc97dd46aacc`
* [thanos](https://github.com/openshift/thanos) git [c0951032](https://github.com/openshift/thanos/commit/c0951032b34b832d0f5467e616999490a284101b) `sha256:293d4993a05c75653752739a2bb18d2b804d84edd1d212d20c8cd0663fb63018`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [0e61642f](https://github.com/openshift/volume-data-source-validator/commit/0e61642f8d898ee199e42f37319864851dd3627f) `sha256:3a7a7cac42a04a19694a95408f3f017b681a230205e692adcab1e934c2ea5642`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [b93eb64f](https://github.com/openshift/cloud-provider-vsphere/commit/b93eb64ff72e7c005687813c8b478d694a0f517a) `sha256:03fd76692f107557b47e4f7936d97625f4665001defa2bbed8cd6954bfefd227`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [1ff9e11f](https://github.com/openshift/cluster-api-provider-vsphere/commit/1ff9e11f5a117505d935549b96cd0d129917c015) `sha256:2bc5547585532266b076e7d197290c43699ea22f44b7a1c2d7d50f9fc8eba0f6`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [61d0d00a](https://github.com/openshift/vmware-vsphere-csi-driver/commit/61d0d00a78ee60ee57fcc99648a8851f0db52e5a) `sha256:27be9534041335a80e7ec694c6c4a463b132fa54c7e3683a86d2188244ead6af`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [5cd04d61](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/5cd04d61c20872edaaa2c3958779ff29ea6e6d82) `sha256:55a96d09b5dde9d9bfd3dcfe0d30db940cff803843b4ded59f020e848ec45255`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [61d0d00a](https://github.com/openshift/vmware-vsphere-csi-driver/commit/61d0d00a78ee60ee57fcc99648a8851f0db52e5a) `sha256:2d92d0205b7a2e7bfb918c5d8b086e12f8aac42f48550456e179036cdbbcc469`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/43bfecff9fdba24bfa8ce1ffdcb3a7d72b6e6286)

* [OCPBUGS-57606](https://issues.redhat.com/browse/OCPBUGS-57606): Updating ose-agent-installer-api-server-container image to be consist… [#8399](https://github.com/openshift/assisted-service/pull/8399)
* [OCPBUGS-63486](https://issues.redhat.com/browse/OCPBUGS-63486): Align kube descheduler activation CR with OVE needs [#8136](https://github.com/openshift/assisted-service/pull/8136)
* [Full changelog](https://github.com/openshift/assisted-service/compare/c616cdc940cf15bc911d0228e589d931c5a741d3...43bfecff9fdba24bfa8ce1ffdcb3a7d72b6e6286)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/637327ec40cd1f85ac5d7d4f114a2fae89baa8b0)

* [OCPBUGS-57718](https://issues.redhat.com/browse/OCPBUGS-57718): Update golang images to 1.24 for OpenShift 4.20 [#1194](https://github.com/openshift/assisted-installer-agent/pull/1194)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/62dc63f18f2c4a6a0cf1043710d055fe57f8fa28...637327ec40cd1f85ac5d7d4f114a2fae89baa8b0)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/523e7d76637bd70cec447e7ce4655bf2bfee9272)

* [OCPBUGS-69834](https://issues.redhat.com/browse/OCPBUGS-69834): Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 20eb21c [#208](https://github.com/openshift/agent-installer-utils/pull/208)
* [OCPBUGS-69830](https://issues.redhat.com/browse/OCPBUGS-69830): Update Konflux references [#207](https://github.com/openshift/agent-installer-utils/pull/207)
* [OCPBUGS-67306](https://issues.redhat.com/browse/OCPBUGS-67306): Update Konflux release version to 4.20.8 [#212](https://github.com/openshift/agent-installer-utils/pull/212)
* [OCPBUGS-66431](https://issues.redhat.com/browse/OCPBUGS-66431): Add Konflux PipelineRun params required by release pipeline [#206](https://github.com/openshift/agent-installer-utils/pull/206)
* [OCPBUGS-66425](https://issues.redhat.com/browse/OCPBUGS-66425): Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 13cf619 [#186](https://github.com/openshift/agent-installer-utils/pull/186)
* [OCPBUGS-66422](https://issues.redhat.com/browse/OCPBUGS-66422): Update Konflux references [#185](https://github.com/openshift/agent-installer-utils/pull/185)
* [OCPBUGS-66406](https://issues.redhat.com/browse/OCPBUGS-66406): Update Konflux release version to 4.20.6 [#204](https://github.com/openshift/agent-installer-utils/pull/204)
* [OCPBUGS-65715](https://issues.redhat.com/browse/OCPBUGS-65715): Update 4.20 version to 4.20.4 [#196](https://github.com/openshift/agent-installer-utils/pull/196)
* [OCPBUGS-64694](https://issues.redhat.com/browse/OCPBUGS-64694): Update 4.20 version to 4.20.2 [#193](https://github.com/openshift/agent-installer-utils/pull/193)
* [OCPBUGS-63585](https://issues.redhat.com/browse/OCPBUGS-63585): AGENT-1203: Simplify isobuilder [#189](https://github.com/openshift/agent-installer-utils/pull/189)
* [OCPBUGS-63590](https://issues.redhat.com/browse/OCPBUGS-63590): Update 4.20 version to 4.20.1 [#190](https://github.com/openshift/agent-installer-utils/pull/190)
* [OCPBUGS-63372](https://issues.redhat.com/browse/OCPBUGS-63372): Backport Konflux changes [#183](https://github.com/openshift/agent-installer-utils/pull/183)
* [OCPBUGS-62749](https://issues.redhat.com/browse/OCPBUGS-62749): Red Hat Konflux kflux-prd-rh02 update ove-ui-iso-4-20 [#172](https://github.com/openshift/agent-installer-utils/pull/172)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/b5330d86e38009af7b8a9fd32d84b8800fd2f27f...523e7d76637bd70cec447e7ce4655bf2bfee9272)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/300439ea0736444a160c061578b3bd8956d4f7e6)

* [OCPBUGS-61040](https://issues.redhat.com/browse/OCPBUGS-61040): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.2 (d3a7da1) into release-4.20 [#578](https://github.com/openshift/cluster-api-provider-aws/pull/578)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/9467200c8073d4609cfca356bc6fc8126c505886...300439ea0736444a160c061578b3bd8956d4f7e6)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/878ef6cbe06fabf3cb82ad0ca1c1226e03dfef91)

* [OCPBUGS-65895](https://issues.redhat.com/browse/OCPBUGS-65895): allow all-egress for efs operator [#473](https://github.com/openshift/csi-operator/pull/473)
* [OCPBUGS-65686](https://issues.redhat.com/browse/OCPBUGS-65686): Bump gophercloud [#470](https://github.com/openshift/csi-operator/pull/470)
* [OCPBUGS-63560](https://issues.redhat.com/browse/OCPBUGS-63560): Add RBAC ClusterRole and Binding for driver node [#456](https://github.com/openshift/csi-operator/pull/456)
* [OCPBUGS-62688](https://issues.redhat.com/browse/OCPBUGS-62688): Add withCABundleDaemonSetHook() to AWS EFS operator [#441](https://github.com/openshift/csi-operator/pull/441)
* [Full changelog](https://github.com/openshift/csi-operator/compare/a92ebd03f1d495e27a76b03e9db002e08fcb8ac8...878ef6cbe06fabf3cb82ad0ca1c1226e03dfef91)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/f5c125807016b8e0187654e53762532d8c2fe923)

* [OCPBUGS-63136](https://issues.redhat.com/browse/OCPBUGS-63136): client: re-use a single file for building the session instead of randomly named files [#148](https://github.com/openshift/machine-api-provider-aws/pull/148)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/d1cc300e80d2c02c234a04b8c72b71e720bc311f...f5c125807016b8e0187654e53762532d8c2fe923)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/68db91507ea47f767ee0dc838c08cc371d2ff69f)

* [OCPBUGS-65708](https://issues.redhat.com/browse/OCPBUGS-65708): Set updateDomainCount to one when faultDomainCount is one [#173](https://github.com/openshift/machine-api-provider-azure/pull/173)
* [OCPBUGS-63535](https://issues.redhat.com/browse/OCPBUGS-63535): Support DataDisks on Azure Stack Hub [#165](https://github.com/openshift/machine-api-provider-azure/pull/165)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/4927cc2be4f629e367d2a79a310900c7cced3f6c...68db91507ea47f767ee0dc838c08cc371d2ff69f)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/db608c3e6a8817e3304bf16c2f4d9661d9bb35cb)

* [OCPBUGS-71212](https://issues.redhat.com/browse/OCPBUGS-71212): Increase agent-installer pre-network-manager timeout [#10199](https://github.com/openshift/installer/pull/10199)
* [OCPBUGS-65767](https://issues.redhat.com/browse/OCPBUGS-65767): Add StandardFXmdsv2Family to azure tested instance type list [#10104](https://github.com/openshift/installer/pull/10104)
* [OCPBUGS-66231](https://issues.redhat.com/browse/OCPBUGS-66231): Use separate tmpfs for ostree checkout on live ISO [#10140](https://github.com/openshift/installer/pull/10140)
* [OCPBUGS-65763](https://issues.redhat.com/browse/OCPBUGS-65763): continue to update 02_storage.json using new property storageAccountId [#10103](https://github.com/openshift/installer/pull/10103)
* [OCPBUGS-66257](https://issues.redhat.com/browse/OCPBUGS-66257): CORS-4249: bump ARO marketplace images [#10142](https://github.com/openshift/installer/pull/10142)
* [OCPBUGS-66207](https://issues.redhat.com/browse/OCPBUGS-66207), [OCPBUGS-66208](https://issues.redhat.com/browse/OCPBUGS-66208): Fix console info for interactive agent installer [#10136](https://github.com/openshift/installer/pull/10136)
* Revert "OCPBUGS-65586: Update the RHCOS 4.20 bootimage metadata to 9.6.202511…" [#10093](https://github.com/openshift/installer/pull/10093)
* [OCPBUGS-65586](https://issues.redhat.com/browse/OCPBUGS-65586): Update the RHCOS 4.20 bootimage metadata to 9.6.202511… [#10084](https://github.com/openshift/installer/pull/10084)
* [OCPBUGS-64924](https://issues.redhat.com/browse/OCPBUGS-64924): Azure UPI ARM template: use storageAccountId [#10069](https://github.com/openshift/installer/pull/10069)
* [OCPBUGS-64595](https://issues.redhat.com/browse/OCPBUGS-64595): Remove pending items on gcp no-op [#10056](https://github.com/openshift/installer/pull/10056)
* [OCPBUGS-63633](https://issues.redhat.com/browse/OCPBUGS-63633): Update the RHCOS 4.20 bootimage metadata to 9.6.20251023-0 [#10037](https://github.com/openshift/installer/pull/10037)
* [OCPBUGS-63461](https://issues.redhat.com/browse/OCPBUGS-63461): Prevent duplicate noProxy when adding nodes [#10028](https://github.com/openshift/installer/pull/10028)
* [OCPBUGS-62920](https://issues.redhat.com/browse/OCPBUGS-62920): AGENT-1269: Use agent-installer-ui image from release [#10009](https://github.com/openshift/installer/pull/10009)
* [OCPBUGS-62343](https://issues.redhat.com/browse/OCPBUGS-62343): [release-4.20] vSphere 7 deprecation [#9973](https://github.com/openshift/installer/pull/9973)
* [OCPBUGS-62124](https://issues.redhat.com/browse/OCPBUGS-62124): Update the RHCOS 4.20 bootimage metadata [#9997](https://github.com/openshift/installer/pull/9997)
* [OCPBUGS-62948](https://issues.redhat.com/browse/OCPBUGS-62948): Add an option in image-based installation to specify architecture [#9943](https://github.com/openshift/installer/pull/9943)
* [OCPBUGS-62935](https://issues.redhat.com/browse/OCPBUGS-62935): Add MTU validation for networkConfig [#10010](https://github.com/openshift/installer/pull/10010)
* [OCPBUGS-62846](https://issues.redhat.com/browse/OCPBUGS-62846): None: Allow IPv6 Primary DualStack installs on platforms None and External [#10005](https://github.com/openshift/installer/pull/10005)
* [OCPBUGS-62656](https://issues.redhat.com/browse/OCPBUGS-62656): Set agent-extract-tui start timeout [#9990](https://github.com/openshift/installer/pull/9990)
* [OCPBUGS-62640](https://issues.redhat.com/browse/OCPBUGS-62640): Wildcards not reliable for copying container files [#9986](https://github.com/openshift/installer/pull/9986)
* [Full changelog](https://github.com/openshift/installer/compare/98df3532f59ede67f5ebb2e9ee0be2e7e89eea4b...db608c3e6a8817e3304bf16c2f4d9661d9bb35cb)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/8000d7e910a6c08481beca722074d12419e25edf)

* [OCPBUGS-69667](https://issues.redhat.com/browse/OCPBUGS-69667): Change architecture default to match controller [#440](https://github.com/openshift/baremetal-operator/pull/440)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/a7d0035a144d5b51c1401426bbe7ce518f24f154...8000d7e910a6c08481beca722074d12419e25edf)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/dc61926008ad5333863dd1ae2902b95aed6dceaa)

* [OCPBUGS-66241](https://issues.redhat.com/browse/OCPBUGS-66241): Fall back to simpler behavior, if setsid,ps,pkill are not installed [#2158](https://github.com/openshift/oc/pull/2158)
* [OCPBUGS-65481](https://issues.redhat.com/browse/OCPBUGS-65481): pkg/cli/admin/upgrade: Tighten force warnings [#2140](https://github.com/openshift/oc/pull/2140)
* [OCPBUGS-65523](https://issues.redhat.com/browse/OCPBUGS-65523): fix(must-gather): do not set node affinity if nodename is set [#2142](https://github.com/openshift/oc/pull/2142)
* [OCPBUGS-64791](https://issues.redhat.com/browse/OCPBUGS-64791): Rely on overall available disk space of the mounted volume [#2133](https://github.com/openshift/oc/pull/2133)
* [OCPBUGS-64773](https://issues.redhat.com/browse/OCPBUGS-64773): oc adm must-gather: Wrap gather in a session [#2132](https://github.com/openshift/oc/pull/2132)
* [OCPBUGS-61757](https://issues.redhat.com/browse/OCPBUGS-61757): pkg/cli/admin/upgrade/recommend: Enable precheck and accept gates [#2097](https://github.com/openshift/oc/pull/2097)
* [Full changelog](https://github.com/openshift/oc/compare/a43428189603f12ae190703cb725f66f742fbe52...dc61926008ad5333863dd1ae2902b95aed6dceaa)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/0e03b7a0fa39e7da3a4b5a180915adc44c408d08)

* [OCPBUGS-65798](https://issues.redhat.com/browse/OCPBUGS-65798): ccoctl azure: retry custom role creation on consistency errors [#948](https://github.com/openshift/cloud-credential-operator/pull/948)
* [OCPBUGS-63690](https://issues.redhat.com/browse/OCPBUGS-63690): ccoctl: use pagination when listing resources in aws [#941](https://github.com/openshift/cloud-credential-operator/pull/941)
* [OCPBUGS-63546](https://issues.redhat.com/browse/OCPBUGS-63546): ccoctl: add public-key-file flag to create-all [#936](https://github.com/openshift/cloud-credential-operator/pull/936)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d391c0b339c48f49711ccff9ebac62039bf5c6f7...0e03b7a0fa39e7da3a4b5a180915adc44c408d08)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/d22915bc82993ce11cb3fb97e6ae00602f30549b)

* [OCPBUGS-64742](https://issues.redhat.com/browse/OCPBUGS-64742): Fix capacity calculation [#188](https://github.com/openshift/cloud-network-config-controller/pull/188)
* [OCPBUGS-63542](https://issues.redhat.com/browse/OCPBUGS-63542): Change the capacity struct from int to ptrOfInt [#185](https://github.com/openshift/cloud-network-config-controller/pull/185)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/467e50feff5a56afbf9ccefc025781c9ccff8eca...d22915bc82993ce11cb3fb97e6ae00602f30549b)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/fb1a9ab21d72903f79a45f916c6443c0709b9b0c)

* [OCPBUGS-66315](https://issues.redhat.com/browse/OCPBUGS-66315): externaloidc: return errors when node statuses cannot be used to determine oidc state [#814](https://github.com/openshift/cluster-authentication-operator/pull/814)
* [OCPBUGS-61896](https://issues.redhat.com/browse/OCPBUGS-61896): set appropriate rolling update settings [#792](https://github.com/openshift/cluster-authentication-operator/pull/792)
* [OCPBUGS-63319](https://issues.redhat.com/browse/OCPBUGS-63319): (bugfix): configure status controller to remove unset versions [#802](https://github.com/openshift/cluster-authentication-operator/pull/802)
* [OCPBUGS-64668](https://issues.redhat.com/browse/OCPBUGS-64668): Update OIDC e2e test to expect admission-time validation error of invalid CEL expression [#804](https://github.com/openshift/cluster-authentication-operator/pull/804)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/11e57aa35590d3481288e09003c9109e0bfc62ce...fb1a9ab21d72903f79a45f916c6443c0709b9b0c)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/aaf5a61941b70a3b5792c0541e97356565c9977f)

* [OCPBUGS-63675](https://issues.redhat.com/browse/OCPBUGS-63675): update node info processors to include unschedulable nodes [#391](https://github.com/openshift/kubernetes-autoscaler/pull/391)
* [OCPBUGS-63495](https://issues.redhat.com/browse/OCPBUGS-63495): refactor cloud provider options [#387](https://github.com/openshift/kubernetes-autoscaler/pull/387)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/d883d0e6dbb74f0839631ebc7a584669f0e955a3...aaf5a61941b70a3b5792c0541e97356565c9977f)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/2c9f77f2a7fe3c7233a50b2ba0acb3155f9d34bb)

* [OCPBUGS-62316](https://issues.redhat.com/browse/OCPBUGS-62316): Always have a service for ironic-api port [#511](https://github.com/openshift/cluster-baremetal-operator/pull/511)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/19d38730cbeb7e99a3f695aaf4bcb7d24d3c2db8...2c9f77f2a7fe3c7233a50b2ba0acb3155f9d34bb)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/acf331446369b5307b6b435af14daabdca9fafbc)

* [OCPBUGS-62755](https://issues.redhat.com/browse/OCPBUGS-62755): kubeconfig controller: do not error on token secret not yet populated [#377](https://github.com/openshift/cluster-capi-operator/pull/377)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/3bbc3ef38955e1935d97afaff537cb15567c796a...acf331446369b5307b6b435af14daabdca9fafbc)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/276696ccf679830b25df341edb7aae9bb3f4e763)

* [OCPBUGS-63164](https://issues.redhat.com/browse/OCPBUGS-63164): ccm: disable unused secure-serving port and webhook [#419](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/419)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/e355ad389d1d09be1a83f024f54b15e844982d0a...276696ccf679830b25df341edb7aae9bb3f4e763)


### [cluster-config-api](https://github.com/openshift/api/tree/50517c6f4bfdbf9fc2cb291fd97cce150a3237ca)

* [CORENET-6431](https://issues.redhat.com/browse/CORENET-6431): network, virt: Graduate PreconfiguredUDNAddresses feature gate [#2546](https://github.com/openshift/api/pull/2546)
* [OCPBUGS-66204](https://issues.redhat.com/browse/OCPBUGS-66204): Introduce ClosedClientConnectionPolicy to IngressController API [#2609](https://github.com/openshift/api/pull/2609)
* [OCPBUGS-66135](https://issues.redhat.com/browse/OCPBUGS-66135): Add HTTPKeepAliveTimeout to IngressController API [#2607](https://github.com/openshift/api/pull/2607)
* [OCPBUGS-64843](https://issues.redhat.com/browse/OCPBUGS-64843): payload-command: remove authentication CR from hypershift payload [#2573](https://github.com/openshift/api/pull/2573)
* [OCPBUGS-64940](https://issues.redhat.com/browse/OCPBUGS-64940): Promote BYO OIDC features [#2515](https://github.com/openshift/api/pull/2515)
* [OCPBUGS-62280](https://issues.redhat.com/browse/OCPBUGS-62280): ConsoleLink CRD has incorrect additionalPrinterColumns entry [#2509](https://github.com/openshift/api/pull/2509)
* [OCPBUGS-62256](https://issues.redhat.com/browse/OCPBUGS-62256): ConsoleLink CRD has incorrect additionalPrinterColumns entry [#2508](https://github.com/openshift/api/pull/2508)
* [Full changelog](https://github.com/openshift/api/compare/491784f55cb31c550e9a82f13166d7e08d800ae9...50517c6f4bfdbf9fc2cb291fd97cce150a3237ca)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/c706661bce28d9f2beb0c1c0037f1481160db396)

* [OCPBUGS-63677](https://issues.redhat.com/browse/OCPBUGS-63677): Backport 1504 1514 release.420 [#1516](https://github.com/openshift/cluster-etcd-operator/pull/1516)
* [OCPBUGS-62738](https://issues.redhat.com/browse/OCPBUGS-62738): CNTRLPLANE-1315:Add OpenShift Tests Extension (OTE) for cluster-etcd-operator [#1491](https://github.com/openshift/cluster-etcd-operator/pull/1491)
* [OCPBUGS-63249](https://issues.redhat.com/browse/OCPBUGS-63249): Ensure revision.json persists on ungraceful shutdown [#1501](https://github.com/openshift/cluster-etcd-operator/pull/1501)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/9091149b9060f8c45a925d8e7add781f49ba827f...c706661bce28d9f2beb0c1c0037f1481160db396)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/24ef5ae121b8f658b649bb555be827f114ead438)

* NO-JIRA: Add new NID team members to OWNERS [#1317](https://github.com/openshift/cluster-ingress-operator/pull/1317)
* [OCPBUGS-66135](https://issues.redhat.com/browse/OCPBUGS-66135): Implement HTTPKeepAliveTimeout tuning option [#1312](https://github.com/openshift/cluster-ingress-operator/pull/1312)
* [OCPBUGS-66204](https://issues.redhat.com/browse/OCPBUGS-66204): Implement ClosedClientConnectionPolicy field [#1314](https://github.com/openshift/cluster-ingress-operator/pull/1314)
* [OCPBUGS-65664](https://issues.redhat.com/browse/OCPBUGS-65664): IngressOperator not exposing some metrics for degraded… [#1305](https://github.com/openshift/cluster-ingress-operator/pull/1305)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/2371120eedb27049160c70859ef9972a7599c7e3...24ef5ae121b8f658b649bb555be827f114ead438)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/974542ae2ef86a631546b3a48fd0da3c2e3b74dd)

* [OCPBUGS-65679](https://issues.redhat.com/browse/OCPBUGS-65679): enable resource v1beta2 api if DynamicResourceAllocation is enabled [#1929](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1929)
* [OCPBUGS-62057](https://issues.redhat.com/browse/OCPBUGS-62057): OpenShift cluster got degraded after rotating the kube-apiserver-service-network-signer cert [#1961](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1961)
* [OCPBUGS-64689](https://issues.redhat.com/browse/OCPBUGS-64689): Add priority field to prevent early shutdown [#1955](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1955)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/cae310f190fccb3f0fa613de50c484afb039c098...974542ae2ef86a631546b3a48fd0da3c2e3b74dd)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/234e218207ec963df04ec1fedad85a421eb7a1ff)

* [OCPBUGS-63173](https://issues.redhat.com/browse/OCPBUGS-63173): Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.20 [#62](https://github.com/openshift/cluster-api-operator/pull/62)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/3ec30377ffff951dc9c0fc2257d290e4b4958465...234e218207ec963df04ec1fedad85a421eb7a1ff)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/438c9dba80ddadeabe9efe4a654297a7b550b2b8)

* [OCPBUGS-64684](https://issues.redhat.com/browse/OCPBUGS-64684): Add priority field to prevent early shutdown [#890](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/890)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/5a7da72ce2d21fc0900b428334865d97f39f6037...438c9dba80ddadeabe9efe4a654297a7b550b2b8)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/b3c82b2eec66ae3ae510df0603af1212c34be618)

* [OCPBUGS-63587](https://issues.redhat.com/browse/OCPBUGS-63587): port 9193 need to be internal and port 9194 need to have a service [#280](https://github.com/openshift/cluster-machine-approver/pull/280)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/ce2750589129dd20b3d1b6a5e7bb8c392d658c5c...b3c82b2eec66ae3ae510df0603af1212c34be618)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/47ab4cb2b5bb27718150b82bb3e0a03755200ca3)

* [OCPBUGS-67166](https://issues.redhat.com/browse/OCPBUGS-67166): Add the collection of MTV migration metrics [#2772](https://github.com/openshift/cluster-monitoring-operator/pull/2772)
* [OCPBUGS-62978](https://issues.redhat.com/browse/OCPBUGS-62978): add tls configuration for the monitoring plugin deployment [#2718](https://github.com/openshift/cluster-monitoring-operator/pull/2718)
* [OCPBUGS-62829](https://issues.redhat.com/browse/OCPBUGS-62829): Remove cluster from non-multicluster dashboards [#2701](https://github.com/openshift/cluster-monitoring-operator/pull/2701)
* [OCPBUGS-64577](https://issues.redhat.com/browse/OCPBUGS-64577): Fix KSM deny-list typo [#2729](https://github.com/openshift/cluster-monitoring-operator/pull/2729)
* [OCPBUGS-63408](https://issues.redhat.com/browse/OCPBUGS-63408): chore(prometheus/remotewrite): [release-4.20] clarify that the in-cluster proxy env vars set in prometheus container can be used in all configs that support proxyConfig.proxyFromEnvironment [#2721](https://github.com/openshift/cluster-monitoring-operator/pull/2721)
* [OCPBUGS-62979](https://issues.redhat.com/browse/OCPBUGS-62979): Remove AlertManager endpoints when disabled [#2710](https://github.com/openshift/cluster-monitoring-operator/pull/2710)
* [OCPBUGS-62750](https://issues.redhat.com/browse/OCPBUGS-62750): Add mcd_local_unsupported_packages metric from MCO to telemetry 4.20 [#2692](https://github.com/openshift/cluster-monitoring-operator/pull/2692)
* [OCPBUGS-62308](https://issues.redhat.com/browse/OCPBUGS-62308): test: remove image registry e2e tests [#2686](https://github.com/openshift/cluster-monitoring-operator/pull/2686)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/bd582f758b9ccbfe8ce859ab3764a4b232ef66e9...47ab4cb2b5bb27718150b82bb3e0a03755200ca3)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/dbd9826dbe5373bd3605dfef606d118ffc65b830)

* [OCPBUGS-66253](https://issues.redhat.com/browse/OCPBUGS-66253): Add kubevirt platform to dual-stack supported platforms [#2860](https://github.com/openshift/cluster-network-operator/pull/2860)
* [OCPBUGS-66412](https://issues.redhat.com/browse/OCPBUGS-66412): Fix whereabouts-token-watcher DaemonSet improvements [#2850](https://github.com/openshift/cluster-network-operator/pull/2850)
* [OCPBUGS-66164](https://issues.redhat.com/browse/OCPBUGS-66164): [release-4.20] CORENET-6465: Remove unneeded logging config from managed ovn-kubernetes [#2838](https://github.com/openshift/cluster-network-operator/pull/2838)
* [OCPBUGS-66162](https://issues.redhat.com/browse/OCPBUGS-66162): [release-4.20] CORENET-6488: Preserve custom resource requests on ovn-control-plane pods [#2835](https://github.com/openshift/cluster-network-operator/pull/2835)
* [OCPBUGS-46422](https://issues.redhat.com/browse/OCPBUGS-46422): Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes [4.20] [#2827](https://github.com/openshift/cluster-network-operator/pull/2827)
* [OCPBUGS-64733](https://issues.redhat.com/browse/OCPBUGS-64733): api, l2udn: subnets must be masked [#2823](https://github.com/openshift/cluster-network-operator/pull/2823)
* [OCPBUGS-62678](https://issues.redhat.com/browse/OCPBUGS-62678): Tweak iptables-alerter to try to avoid crictl bug [#2811](https://github.com/openshift/cluster-network-operator/pull/2811)
* [OCPBUGS-62273](https://issues.redhat.com/browse/OCPBUGS-62273): Fix EgressIP stale GARP post reboot + pod restart [#2806](https://github.com/openshift/cluster-network-operator/pull/2806)
* [OCPBUGS-61779](https://issues.redhat.com/browse/OCPBUGS-61779): Relax label req. of DPU/DPU Host/Smart NIC [#2800](https://github.com/openshift/cluster-network-operator/pull/2800)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/6a287ae0e3a52b664ac6dc5dfc4f2913d1d1ef2a...dbd9826dbe5373bd3605dfef606d118ffc65b830)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/ae91d95f908377c7852d44249364d59b6f3bd14d)

* [OCPBUGS-64832](https://issues.redhat.com/browse/OCPBUGS-64832): e2e:hugepages: changing tests to use hugepages-allocator tool [#1427](https://github.com/openshift/cluster-node-tuning-operator/pull/1427)
* [OCPBUGS-64588](https://issues.redhat.com/browse/OCPBUGS-64588): e2e:llc: skip test when no BM worker is found [#1422](https://github.com/openshift/cluster-node-tuning-operator/pull/1422)
* [OCPBUGS-63010](https://issues.redhat.com/browse/OCPBUGS-63010): E2E: Add test cases related to schedulable control plane nodes [#1409](https://github.com/openshift/cluster-node-tuning-operator/pull/1409)
* [OCPBUGS-62889](https://issues.redhat.com/browse/OCPBUGS-62889): E2E: llc: make sure to remove any trailing newspaces [#1408](https://github.com/openshift/cluster-node-tuning-operator/pull/1408)
* [OCPBUGS-63334](https://issues.redhat.com/browse/OCPBUGS-63334): Do not cause kubelet failed dependency by ocp-tuned-one-shot.service [#1415](https://github.com/openshift/cluster-node-tuning-operator/pull/1415)
* [OCPBUGS-62214](https://issues.redhat.com/browse/OCPBUGS-62214): E2E: Add function to check control plane nodes are schedulable. [#1398](https://github.com/openshift/cluster-node-tuning-operator/pull/1398)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/4463f9b9efd96c7210c3e21da0c244d679988f9d...ae91d95f908377c7852d44249364d59b6f3bd14d)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/b343f70f19ffd559e1a81d3a3e65bd106e634c13)

* [OCPBUGS-63507](https://issues.redhat.com/browse/OCPBUGS-63507): references to github.com/sclorg/django-ex.git now also refer to the branch [#655](https://github.com/openshift/cluster-samples-operator/pull/655)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/62b3623c6a2860e7a8cc368dbe76e767508cd261...b343f70f19ffd559e1a81d3a3e65bd106e634c13)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/d6b7775e872264a8e53f4bfe3ba884a3888367b7)

* [OCPBUGS-62668](https://issues.redhat.com/browse/OCPBUGS-62668), [OCPBUGS-62993](https://issues.redhat.com/browse/OCPBUGS-62993): Move metrics to vsphere driver [#630](https://github.com/openshift/cluster-storage-operator/pull/630)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/f18c176658ed3372a73c11fd3533965cf6877ef0...d6b7775e872264a8e53f4bfe3ba884a3888367b7)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/73583cd49830e22349b5d8bf25dc2e95f3882692)

* [OCPBUGS-70180](https://issues.redhat.com/browse/OCPBUGS-70180): [release-4.20] OCPBUGS-70180: Unify capitalization when comparing architectures for available updates [#1281](https://github.com/openshift/cluster-version-operator/pull/1281)
* [OCPBUGS-63001](https://issues.redhat.com/browse/OCPBUGS-63001): Add ClusterVersionOperator manifests to TechPreviewNoUpgrade clusters in 4.20 [#1247](https://github.com/openshift/cluster-version-operator/pull/1247)
* [OCPBUGS-62867](https://issues.redhat.com/browse/OCPBUGS-62867): temporarily disable metrics auth for hypershift clusters [#1244](https://github.com/openshift/cluster-version-operator/pull/1244)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/9de00ba8fb8330b3a1b440396dc2c5dbe974119b...73583cd49830e22349b5d8bf25dc2e95f3882692)


### [console](https://github.com/openshift/console/tree/e46a42a6b67699f738fb8854fad3f64d3dbd39a3)

* [OCPBUGS-69732](https://issues.redhat.com/browse/OCPBUGS-69732): Fix Helm chart installation with CA/TLS certificates [#15862](https://github.com/openshift/console/pull/15862)
* [OCPBUGS-70332](https://issues.redhat.com/browse/OCPBUGS-70332): Visiting Group Detail Page &gt; RoleBindings will show error [#15887](https://github.com/openshift/console/pull/15887)
* [OCPBUGS-67136](https://issues.redhat.com/browse/OCPBUGS-67136): Spread operand details across 2 col [#15858](https://github.com/openshift/console/pull/15858)
* [OCPBUGS-66427](https://issues.redhat.com/browse/OCPBUGS-66427): Update client initialization in checkPackageManifestHandler [#15822](https://github.com/openshift/console/pull/15822)
* [OCPBUGS-67221](https://issues.redhat.com/browse/OCPBUGS-67221): Disallowed Pipelines-plugin Pipelines navigation section [#15833](https://github.com/openshift/console/pull/15833)
* [OCPBUGS-66248](https://issues.redhat.com/browse/OCPBUGS-66248): The number of Quick Starts item is wrong [#15797](https://github.com/openshift/console/pull/15797)
* [OCPBUGS-66206](https://issues.redhat.com/browse/OCPBUGS-66206): Sync YAML editor modal settings [#15787](https://github.com/openshift/console/pull/15787)
* [OCPBUGS-65900](https://issues.redhat.com/browse/OCPBUGS-65900): Fix unnecessary rerenders with pod-connect [#15758](https://github.com/openshift/console/pull/15758)
* [OCPBUGS-61785](https://issues.redhat.com/browse/OCPBUGS-61785): Add validation and type guards on healthHandler calls to prevent errors [#15500](https://github.com/openshift/console/pull/15500)
* [OCPBUGS-65793](https://issues.redhat.com/browse/OCPBUGS-65793): OpenShift Console can only show user name instead of full name as the display name [#15743](https://github.com/openshift/console/pull/15743)
* [OCPBUGS-65949](https://issues.redhat.com/browse/OCPBUGS-65949): Add SDK-webpack 4.20 changelogs [#15768](https://github.com/openshift/console/pull/15768)
* NO-JIRA: Add SDK 4.20 changelogs [#15765](https://github.com/openshift/console/pull/15765)
* [OCPBUGS-65761](https://issues.redhat.com/browse/OCPBUGS-65761): Preserve query string in perspective switch + remove dev console folks from `reviewers` [#15740](https://github.com/openshift/console/pull/15740)
* [OCPBUGS-64861](https://issues.redhat.com/browse/OCPBUGS-64861), [OCPBUGS-64863](https://issues.redhat.com/browse/OCPBUGS-64863): Upgrade Helm to 3.18.5 [#15705](https://github.com/openshift/console/pull/15705)
* [OCPBUGS-64702](https://issues.redhat.com/browse/OCPBUGS-64702): Lack Chinese/Japanese/Korean translations for 'On/Off' switch button on editor setting modal of yaml page. [#15683](https://github.com/openshift/console/pull/15683)
* [OCPBUGS-63125](https://issues.redhat.com/browse/OCPBUGS-63125): use tenancy path for project scoped status card [#15608](https://github.com/openshift/console/pull/15608)
* [OCPBUGS-61330](https://issues.redhat.com/browse/OCPBUGS-61330): fix namespace path generation for non-namespaced resources [#15498](https://github.com/openshift/console/pull/15498)
* [OCPBUGS-62953](https://issues.redhat.com/browse/OCPBUGS-62953): Automatically redirect all-namespaces catalog to default namespace [#15640](https://github.com/openshift/console/pull/15640)
* [OCPBUGS-64862](https://issues.redhat.com/browse/OCPBUGS-64862): Convert standalone terminal route to extension [#15702](https://github.com/openshift/console/pull/15702)
* [OCPBUGS-63499](https://issues.redhat.com/browse/OCPBUGS-63499): Turn on `fContentSecurityPolicyEnabled` by default [#15639](https://github.com/openshift/console/pull/15639)
* [OCPBUGS-64639](https://issues.redhat.com/browse/OCPBUGS-64639): HPA Form View in RHOCP Web Console Incorrectly Requires Both CPU and … [#15673](https://github.com/openshift/console/pull/15673)
* [OCPBUGS-63616](https://issues.redhat.com/browse/OCPBUGS-63616): Preserve path on perspective switch [#15650](https://github.com/openshift/console/pull/15650)
* [OCPBUGS-64809](https://issues.redhat.com/browse/OCPBUGS-64809): Never allow OTHER_CATEGORY in categories [#15690](https://github.com/openshift/console/pull/15690)
* [OCPBUGS-63608](https://issues.redhat.com/browse/OCPBUGS-63608): Fix catalog search relevance scoring, so that operators with attribute.keywords are displayed and remove unnecessary metadataName from calculation [#15648](https://github.com/openshift/console/pull/15648)
* [OCPBUGS-63470](https://issues.redhat.com/browse/OCPBUGS-63470): limit node log length to 1000 lines [#15635](https://github.com/openshift/console/pull/15635)
* [OCPBUGS-63440](https://issues.redhat.com/browse/OCPBUGS-63440): Expose prometheus tenancy label path as a proxy [#15632](https://github.com/openshift/console/pull/15632)
* [OCPBUGS-63465](https://issues.redhat.com/browse/OCPBUGS-63465): Remove required flag from 'console.flag/model' pipelines-plugin extension [#15634](https://github.com/openshift/console/pull/15634)
* [OCPBUGS-63403](https://issues.redhat.com/browse/OCPBUGS-63403): Fix Bare Metal Hosts nav item [#15628](https://github.com/openshift/console/pull/15628)
* [OCPBUGS-62644](https://issues.redhat.com/browse/OCPBUGS-62644): bump dompurify to latest [#15587](https://github.com/openshift/console/pull/15587)
* [OCPBUGS-61926](https://issues.redhat.com/browse/OCPBUGS-61926): PVC shows negative Available space in OpenShift Console on RHOCP 4 [#15512](https://github.com/openshift/console/pull/15512)
* [OCPBUGS-61861](https://issues.redhat.com/browse/OCPBUGS-61861): cluster in workload identity mode is not applied with the token-auth-… [#15507](https://github.com/openshift/console/pull/15507)
* [OCPBUGS-61848](https://issues.redhat.com/browse/OCPBUGS-61848): Updation of label from edit label doesn't work [#15506](https://github.com/openshift/console/pull/15506)
* [Full changelog](https://github.com/openshift/console/compare/8c75a91da473ef8996ddcda917618ab6e371b633...e46a42a6b67699f738fb8854fad3f64d3dbd39a3)


### [console-operator](https://github.com/openshift/console-operator/tree/ac81d030ea60351838be670de5ddca92a0320d45)

* [OCPBUGS-69960](https://issues.redhat.com/browse/OCPBUGS-69960): Reset StorageVersionMigrationDegraded condition [#1085](https://github.com/openshift/console-operator/pull/1085)
* [OCPBUGS-69654](https://issues.redhat.com/browse/OCPBUGS-69654): Update path for browsing catalogs and operators in quickstarts. [#1083](https://github.com/openshift/console-operator/pull/1083)
* [OCPBUGS-64602](https://issues.redhat.com/browse/OCPBUGS-64602): Remove v1alpha1 ConsolePlugin version from CRDs status [#1060](https://github.com/openshift/console-operator/pull/1060)
* [Full changelog](https://github.com/openshift/console-operator/compare/5e127e5f49c56b47914e2ba4aedb09e99b165800...ac81d030ea60351838be670de5ddca92a0320d45)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/eeae3b042d3de06808d00c7f4e72c014e25ffb1c)

* [OCPBUGS-64811](https://issues.redhat.com/browse/OCPBUGS-64811): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.33 into release-4.20 [#355](https://github.com/openshift/cloud-provider-openstack/pull/355)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/c4fe3e8ad29e58f081f3883de0893c2025a097b2...eeae3b042d3de06808d00c7f4e72c014e25ffb1c)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/6ce4713c87b735e2546a65a871bd2c7cfe383c31)

* [OCPBUGS-62844](https://issues.redhat.com/browse/OCPBUGS-62844): update log level verbosity to not clutter logs [#87](https://github.com/openshift/csi-node-driver-registrar/pull/87)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/3a2c732e73b19c947945256e9ea0581653988ab0...6ce4713c87b735e2546a65a871bd2c7cfe383c31)


### [docker-builder](https://github.com/openshift/builder/tree/8c0a564f464540d0e2ffc0ce4c98d90a730bc2d2)

* [OCPBUGS-64857](https://issues.redhat.com/browse/OCPBUGS-64857): BuildConfig inline Dockerfile fails with heredoc syntax [#483](https://github.com/openshift/builder/pull/483)
* [Full changelog](https://github.com/openshift/builder/compare/ff595e4bbf5301039fc62f0cdd7b5610605f633e...8c0a564f464540d0e2ffc0ce4c98d90a730bc2d2)


### [etcd](https://github.com/openshift/etcd/tree/eac09c01677bb03daed156d407be27785fd61e0d)

* [OCPBUGS-63474](https://issues.redhat.com/browse/OCPBUGS-63474): 4.20 rebase 3.5.24 [#347](https://github.com/openshift/etcd/pull/347)
* [Full changelog](https://github.com/openshift/etcd/compare/9c065d4d842c8de57806426c13201413b4d595e2...eac09c01677bb03daed156d407be27785fd61e0d)


### [haproxy-router](https://github.com/openshift/router/tree/db8d384266051ef06b67883aaa83674bc6c9f1ae)

* [OCPBUGS-66204](https://issues.redhat.com/browse/OCPBUGS-66204): Add option abortonclose to HAProxy configuration template [#695](https://github.com/openshift/router/pull/695)
* [Full changelog](https://github.com/openshift/router/compare/96bfd2164c7885df9019ce9eeb79d506bd7e871b...db8d384266051ef06b67883aaa83674bc6c9f1ae)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/33a825ebe5da727e8ccce0fb3c9d33fce7c6bdd9)

* [OCPBUGS-61843](https://issues.redhat.com/browse/OCPBUGS-61843): UPSTREAM: 131850: cpumanager: uncorecache alignment for odd integer cpus [#2498](https://github.com/openshift/kubernetes/pull/2498)
* [OCPBUGS-65551](https://issues.redhat.com/browse/OCPBUGS-65551): Bump 1.33.6 [#2518](https://github.com/openshift/kubernetes/pull/2518)
* [OCPBUGS-46422](https://issues.redhat.com/browse/OCPBUGS-46422): Remove patch/update from ServiceCIDR API conformance test [#2466](https://github.com/openshift/kubernetes/pull/2466)
* NO-JIRA: enable CBOR tests [#2502](https://github.com/openshift/kubernetes/pull/2502)
* [OCPBUGS-63601](https://issues.redhat.com/browse/OCPBUGS-63601): UPSTREAM: &lt;carry&gt;: Skip CPU resource status for workload-partitioning [#2504](https://github.com/openshift/kubernetes/pull/2504)
* [Full changelog](https://github.com/openshift/kubernetes/compare/e0d42164c84ee27644b85a1d2c9bbb062066056d...33a825ebe5da727e8ccce0fb3c9d33fce7c6bdd9)


### [hypershift](https://github.com/openshift/hypershift/tree/0877ad678ffc7687c02ce8e890d35f2e2206f9eb)

* [OCPBUGS-66409](https://issues.redhat.com/browse/OCPBUGS-66409): test: Fix control plane components rollout failure when NetworkType is not OVNKubernetes [#7337](https://github.com/openshift/hypershift/pull/7337)
* [CNTRLPLANE-2205](https://issues.redhat.com/browse/CNTRLPLANE-2205): fix(hcco): allow for ARN reuse across components [#7383](https://github.com/openshift/hypershift/pull/7383)
* [OCPBUGS-69378](https://issues.redhat.com/browse/OCPBUGS-69378): test: remove network-dependent unit tests for image metadata [#7391](https://github.com/openshift/hypershift/pull/7391)
* [OCPBUGS-66397](https://issues.redhat.com/browse/OCPBUGS-66397): fix(kas): apply LoadBalancerSourceRanges only for LoadBalancer service type [#7336](https://github.com/openshift/hypershift/pull/7336)
* NO-JIRA: Update expected digest for busybox:latest in TestGetDigest [#7350](https://github.com/openshift/hypershift/pull/7350)
* [CNTRLPLANE-1710](https://issues.redhat.com/browse/CNTRLPLANE-1710): feat(globalps): security enhancements on GlobalPullSecret feature [#7234](https://github.com/openshift/hypershift/pull/7234)
* [OCPBUGS-65576](https://issues.redhat.com/browse/OCPBUGS-65576): add hypershift-no-cgo to the latest operator conta… [#7229](https://github.com/openshift/hypershift/pull/7229)
* [CORENET-6484](https://issues.redhat.com/browse/CORENET-6484): Restart ovnkube-control-plane pods when restart-date annotation is set [#7190](https://github.com/openshift/hypershift/pull/7190)
* [OCPBUGS-63509](https://issues.redhat.com/browse/OCPBUGS-63509): fix(ingress): add LoadBalancerSourceRanges support for external router service [#7098](https://github.com/openshift/hypershift/pull/7098)
* [OCPBUGS-64848](https://issues.redhat.com/browse/OCPBUGS-64848): feat: Promote ExternalOIDCWithUIDAndExtraClaimMappings feature to GA for Hypershift [#7204](https://github.com/openshift/hypershift/pull/7204)
* [OCPBUGS-61774](https://issues.redhat.com/browse/OCPBUGS-61774): fix(capi-provider): use single replica deployment for aws and azure [#6834](https://github.com/openshift/hypershift/pull/6834)
* [CNTRLPLANE-1908](https://issues.redhat.com/browse/CNTRLPLANE-1908): control-plane-operator-4-20 Konflux pipelines [#7216](https://github.com/openshift/hypershift/pull/7216)
* [OCPBUGS-63539](https://issues.redhat.com/browse/OCPBUGS-63539): remove NTO Service and ServiceMonitor [#7099](https://github.com/openshift/hypershift/pull/7099)
* [OCPBUGS-63718](https://issues.redhat.com/browse/OCPBUGS-63718): specify SCC annotation for pods in data plane [#7132](https://github.com/openshift/hypershift/pull/7132)
* [OCPBUGS-63128](https://issues.redhat.com/browse/OCPBUGS-63128): resolve initContainer permission issue after node reboot [#7080](https://github.com/openshift/hypershift/pull/7080)
* [OCPBUGS-63604](https://issues.redhat.com/browse/OCPBUGS-63604): fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries [#7107](https://github.com/openshift/hypershift/pull/7107)
* [OCPBUGS-63367](https://issues.redhat.com/browse/OCPBUGS-63367): FIPS compliant hypershift binary [#7083](https://github.com/openshift/hypershift/pull/7083)
* [OCPBUGS-62020](https://issues.redhat.com/browse/OCPBUGS-62020): fix(security): harden konnectivity-agent DaemonSet security context [#6870](https://github.com/openshift/hypershift/pull/6870)
* [OCPBUGS-62806](https://issues.redhat.com/browse/OCPBUGS-62806): Fix driver-config ConfigMap content flapping due to random ordering [#6945](https://github.com/openshift/hypershift/pull/6945)
* [OCPBUGS-63387](https://issues.redhat.com/browse/OCPBUGS-63387): fix: routes are not used in case of IBM Cloud [#7079](https://github.com/openshift/hypershift/pull/7079)
* [CNTRLPLANE-1648](https://issues.redhat.com/browse/CNTRLPLANE-1648): Remove main-branch build pipelines from release-4.20 [#7050](https://github.com/openshift/hypershift/pull/7050)
* [OCPSTRAT-2472](https://issues.redhat.com/browse/OCPSTRAT-2472): Add latest tag to MCE 2.10 build pipeline [#6912](https://github.com/openshift/hypershift/pull/6912)
* [Full changelog](https://github.com/openshift/hypershift/compare/2bad9cc3e25649fb8031b1a5e22400ceb812ccba...0877ad678ffc7687c02ce8e890d35f2e2206f9eb)


### [insights-operator](https://github.com/openshift/insights-operator/tree/d677651537715900907eec88e6f0537c8c94c6e9)

* [OCPBUGS-66062](https://issues.redhat.com/browse/OCPBUGS-66062): Add filtering to add other possible pod status to QEMU gatherer [#1185](https://github.com/openshift/insights-operator/pull/1185)
* [OCPBUGS-64800](https://issues.redhat.com/browse/OCPBUGS-64800): QEMU logs are not gathered if there are pending status virt-launcher pods [#1174](https://github.com/openshift/insights-operator/pull/1174)
* [OCPBUGS-65660](https://issues.redhat.com/browse/OCPBUGS-65660): [bugfix] The archive's records may include files whose names are out of bounds [#1177](https://github.com/openshift/insights-operator/pull/1177)
* [OCPBUGS-62019](https://issues.redhat.com/browse/OCPBUGS-62019): update DataGather condition when gathering job fails [#1155](https://github.com/openshift/insights-operator/pull/1155)
* [OCPBUGS-61784](https://issues.redhat.com/browse/OCPBUGS-61784): Update error message for missing SCA certificates [#1139](https://github.com/openshift/insights-operator/pull/1139)
* [OCPBUGS-61845](https://issues.redhat.com/browse/OCPBUGS-61845): add missing permissions for replicasets and events [#1144](https://github.com/openshift/insights-operator/pull/1144)
* [Full changelog](https://github.com/openshift/insights-operator/compare/7fd1a7fc0971d18f2340e316f357ad3848d7d4c3...d677651537715900907eec88e6f0537c8c94c6e9)


### [ironic](https://github.com/openshift/ironic-image/tree/c6c2be3dbdedd8ab7c0b9701307c17df7d2bb591)

* [OCPBUGS-69786](https://issues.redhat.com/browse/OCPBUGS-69786): Bump eventlet version [#756](https://github.com/openshift/ironic-image/pull/756)
* [METAL-1695](https://issues.redhat.com/browse/METAL-1695): OKD: install Ironic from the OpenShift fork [#740](https://github.com/openshift/ironic-image/pull/740)
* [OKD-304](https://issues.redhat.com/browse/OKD-304): Fix python dependencies for OKD [#731](https://github.com/openshift/ironic-image/pull/731)
* [OCPBUGS-64850](https://issues.redhat.com/browse/OCPBUGS-64850): Handle HTTP 400 and 409 race condition in Redfish power operations [#720](https://github.com/openshift/ironic-image/pull/720)
* [OCPBUGS-64820](https://issues.redhat.com/browse/OCPBUGS-64820): Fix IPA external inspection callback url override [#713](https://github.com/openshift/ironic-image/pull/713)
* [OCPBUGS-52427](https://issues.redhat.com/browse/OCPBUGS-52427): Bump ironic and sushy to fix idrac10 [#698](https://github.com/openshift/ironic-image/pull/698)
* [Full changelog](https://github.com/openshift/ironic-image/compare/d510875995cc1b78667bf6d5f01a15573335e3b8...c6c2be3dbdedd8ab7c0b9701307c17df7d2bb591)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/6ae9e9e35571eedf00c240e10f62b56bbac1af07)

* [OCPBUGS-69777](https://issues.redhat.com/browse/OCPBUGS-69777): Bump eventlet version [#228](https://github.com/openshift/ironic-agent-image/pull/228)
* [OCPBUGS-66934](https://issues.redhat.com/browse/OCPBUGS-66934): Filter out more USB network devices [#221](https://github.com/openshift/ironic-agent-image/pull/221)
* [OCPBUGS-66084](https://issues.redhat.com/browse/OCPBUGS-66084), [OKD-295](https://issues.redhat.com/browse/OKD-295): Fix broken OKD ironic-agent-image [#216](https://github.com/openshift/ironic-agent-image/pull/216)
* [OCPBUGS-65519](https://issues.redhat.com/browse/OCPBUGS-65519): Include Test advertised ip reachability before assigning it [#212](https://github.com/openshift/ironic-agent-image/pull/212)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/ce01f3c1ed6022f9eecc164b2ae34aec25b3dee4...6ae9e9e35571eedf00c240e10f62b56bbac1af07)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/8af0c84e6fcc34c60768b3955366a78a440b7a85)

* [OCPBUGS-70322](https://issues.redhat.com/browse/OCPBUGS-70322): Skip boot image updates if arch annotation is not found [#5525](https://github.com/openshift/machine-config-operator/pull/5525)
* [OCPBUGS-70349](https://issues.redhat.com/browse/OCPBUGS-70349): Remove the dead code of setting the operator status for cgroupv1 based clusters [#5446](https://github.com/openshift/machine-config-operator/pull/5446)
* [OCPBUGS-69666](https://issues.redhat.com/browse/OCPBUGS-69666): Remove log exposing kubeconfig [#5505](https://github.com/openshift/machine-config-operator/pull/5505)
* [OCPBUGS-69444](https://issues.redhat.com/browse/OCPBUGS-69444): MCP is not correctly degraded when a pivotError happens [#5503](https://github.com/openshift/machine-config-operator/pull/5503)
* [OCPBUGS-65545](https://issues.redhat.com/browse/OCPBUGS-65545), [OCPBUGS-67007](https://issues.redhat.com/browse/OCPBUGS-67007): cherry pick to few fixes that needed for missing services and configuration [#5480](https://github.com/openshift/machine-config-operator/pull/5480)
* [OCPBUGS-67137](https://issues.redhat.com/browse/OCPBUGS-67137): Fix cleanup in `TestInstallRPMAndCheckMCDMetrics` to decrease risk of test failures due to interference [#5478](https://github.com/openshift/machine-config-operator/pull/5478)
* [OKD-294](https://issues.redhat.com/browse/OKD-294): Migrate runtime from runc to crun on an upgrade for OKD [#5467](https://github.com/openshift/machine-config-operator/pull/5467)
* [OCPBUGS-65898](https://issues.redhat.com/browse/OCPBUGS-65898): fixes systemd unit creation for empty units [#5437](https://github.com/openshift/machine-config-operator/pull/5437)
* [OCPBUGS-64822](https://issues.redhat.com/browse/OCPBUGS-64822): block upgrades for conflict  non-default ClusterImagePolicy resources [#5414](https://github.com/openshift/machine-config-operator/pull/5414)
* [OCPBUGS-65777](https://issues.redhat.com/browse/OCPBUGS-65777): Enforce OCP 4.20 and earlier cluster to have AutoSizingReserved disabled by default [#5387](https://github.com/openshift/machine-config-operator/pull/5387)
* [OCPBUGS-65781](https://issues.redhat.com/browse/OCPBUGS-65781): Remove --mount directives [#5425](https://github.com/openshift/machine-config-operator/pull/5425)
* [OCPBUGS-65556](https://issues.redhat.com/browse/OCPBUGS-65556): [release-4.20] Backport: Add delays to reduce TestOSBuildController failures [#5396](https://github.com/openshift/machine-config-operator/pull/5396)
* [OCPBUGS-64822](https://issues.redhat.com/browse/OCPBUGS-64822): remove check for conflicting ClusterImagePolicy in syncUpgradeableStatus [#5413](https://github.com/openshift/machine-config-operator/pull/5413)
* [OCPBUGS-65509](https://issues.redhat.com/browse/OCPBUGS-65509): e2e gcp ocl PR backport [#5407](https://github.com/openshift/machine-config-operator/pull/5407)
* [OCPBUGS-64822](https://issues.redhat.com/browse/OCPBUGS-64822): Implement upgrade blocking for conflicting ClusterImagePolicy named "openshift" [#5397](https://github.com/openshift/machine-config-operator/pull/5397)
* [OCPBUGS-59766](https://issues.redhat.com/browse/OCPBUGS-59766): Update timing of MCN desired config spec update to align with node annotation setting [#5367](https://github.com/openshift/machine-config-operator/pull/5367)
* [OCPBUGS-64656](https://issues.redhat.com/browse/OCPBUGS-64656): Update the OCP base image in Dockerfile to 4.20 reference [#5392](https://github.com/openshift/machine-config-operator/pull/5392)
* [OCPBUGS-63534](https://issues.redhat.com/browse/OCPBUGS-63534): Create temporal allow policy [#5373](https://github.com/openshift/machine-config-operator/pull/5373)
* [OCPBUGS-62167](https://issues.redhat.com/browse/OCPBUGS-62167): Fix - NetworkManager restart or crash renders br-ex unusable [#5353](https://github.com/openshift/machine-config-operator/pull/5353)
* [OCPBUGS-63127](https://issues.redhat.com/browse/OCPBUGS-63127): Ensure the node passed to RunCordonOrUncordon comes from the latest updated state [#5349](https://github.com/openshift/machine-config-operator/pull/5349)
* [OCPBUGS-63337](https://issues.redhat.com/browse/OCPBUGS-63337): RHEL10 RT kernel packages filtering [#5365](https://github.com/openshift/machine-config-operator/pull/5365)
* [OCPBUGS-62801](https://issues.redhat.com/browse/OCPBUGS-62801): Only fire OSImageURLOverridden and set metrics on changes [#5339](https://github.com/openshift/machine-config-operator/pull/5339)
* [OCPBUGS-62273](https://issues.redhat.com/browse/OCPBUGS-62273): Networking: reset ovn-remote config and allow ovnkube controller to s… [#5317](https://github.com/openshift/machine-config-operator/pull/5317)
* [OCPBUGS-62803](https://issues.redhat.com/browse/OCPBUGS-62803): Skip rpm-ostree local rebase if no PIS [#5340](https://github.com/openshift/machine-config-operator/pull/5340)
* [OCPBUGS-62095](https://issues.redhat.com/browse/OCPBUGS-62095): CRI-O: set hard/soft file descriptor ulimits to `1048576` [#5308](https://github.com/openshift/machine-config-operator/pull/5308)
* [OCPBUGS-62174](https://issues.redhat.com/browse/OCPBUGS-62174): Fix MCP updated machine count for image mode disabling case [#5307](https://github.com/openshift/machine-config-operator/pull/5307)
* [OCPBUGS-62675](https://issues.redhat.com/browse/OCPBUGS-62675): Cert Controller should live fetch SAN IPs during cert rotation [#5326](https://github.com/openshift/machine-config-operator/pull/5326)
* [OCPBUGS-62602](https://issues.redhat.com/browse/OCPBUGS-62602): configure-ovs: work around a Cisco switch issue [#5321](https://github.com/openshift/machine-config-operator/pull/5321)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/c258b4ed3a457081e001c234ab289c5526572c64...8af0c84e6fcc34c60768b3955366a78a440b7a85)


### [metallb-frr](https://github.com/openshift/frr/tree/3ca45c517eafe07aac0866e5cbd32a5c08081f22)

* [OCPBUGS-65516](https://issues.redhat.com/browse/OCPBUGS-65516): [release-4.20] Dockerfile: unpin FRR rpm [#111](https://github.com/openshift/frr/pull/111)
* [Full changelog](https://github.com/openshift/frr/compare/fc0fe74f94b415b28d772dbc61f6323171a11b50...3ca45c517eafe07aac0866e5cbd32a5c08081f22)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/b0bf464e64bc17bcd2f9d06e8d47d45915115624)

* [OU-1146](https://issues.redhat.com/browse/OU-1146): remove random multiplication [#704](https://github.com/openshift/monitoring-plugin/pull/704)
* [OU-1135](https://issues.redhat.com/browse/OU-1135): [release-4.20] monitoring testing backport [#700](https://github.com/openshift/monitoring-plugin/pull/700)
* [OCPBUGS-69725](https://issues.redhat.com/browse/OCPBUGS-69725): [release-4.20] fix: upgrade node-forge vulnerable dependency [#701](https://github.com/openshift/monitoring-plugin/pull/701)
* [OU-1130](https://issues.redhat.com/browse/OU-1130): Merge main to release 4.20 [#683](https://github.com/openshift/monitoring-plugin/pull/683)
* [OCPBUGS-66389](https://issues.redhat.com/browse/OCPBUGS-66389): Time range and Refresh interval dropdown button lack of unique identifier [#668](https://github.com/openshift/monitoring-plugin/pull/668)
* [OCPBUGS-66240](https://issues.redhat.com/browse/OCPBUGS-66240): configure max TLS version only when specified [#664](https://github.com/openshift/monitoring-plugin/pull/664)
* [OCPBUGS-65947](https://issues.redhat.com/browse/OCPBUGS-65947): add missing conversion units [#654](https://github.com/openshift/monitoring-plugin/pull/654)
* [OCPBUGS-63440](https://issues.redhat.com/browse/OCPBUGS-63440): fetch metric labels with tenancy [#617](https://github.com/openshift/monitoring-plugin/pull/617)
* [OCPBUGS-63162](https://issues.redhat.com/browse/OCPBUGS-63162): [release-4.20]  Improve alignment with console SDK [#604](https://github.com/openshift/monitoring-plugin/pull/604)
* [OCPBUGS-62978](https://issues.redhat.com/browse/OCPBUGS-62978): allow additional TLS config [#592](https://github.com/openshift/monitoring-plugin/pull/592)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/9a8dd0eef84c579a3d1352860dbc7349f08ee1a2...b0bf464e64bc17bcd2f9d06e8d47d45915115624)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/7df8cc9ca8362fecc840653bba092d02f15a19ed)

* [CNV-72230](https://issues.redhat.com/browse/CNV-72230): fix networking links [#308](https://github.com/openshift/networking-console-plugin/pull/308)
* [OCPBUGS-66335](https://issues.redhat.com/browse/OCPBUGS-66335): fix flickerying in synced editor [#304](https://github.com/openshift/networking-console-plugin/pull/304)
* [CNV-72771](https://issues.redhat.com/browse/CNV-72771): fix null error [#300](https://github.com/openshift/networking-console-plugin/pull/300)
* [CNV-71965](https://issues.redhat.com/browse/CNV-71965): replacing the broken link to VirtualMachine network docs [#298](https://github.com/openshift/networking-console-plugin/pull/298)
* Hide VirtualMachine networks page in 4.20 release [#290](https://github.com/openshift/networking-console-plugin/pull/290)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/f09c58b909fd6479e0099f7962ef73b70e280685...7df8cc9ca8362fecc840653bba092d02f15a19ed)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/e5ad4f6fdc093595f6d939eb43868ae36ae3fdaa)

* [OCPBUGS-63052](https://issues.redhat.com/browse/OCPBUGS-63052): (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission [#151](https://github.com/openshift/oauth-apiserver/pull/151)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/f12b1b4455dd9a4bc5dbc9b2d4ccacb9ee7e388f...e5ad4f6fdc093595f6d939eb43868ae36ae3fdaa)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/f4775a263f2ddbc9f94c9349231883614dce0193)

* [OCPBUGS-64647](https://issues.redhat.com/browse/OCPBUGS-64647): fix: return only requested version [#1306](https://github.com/openshift/oc-mirror/pull/1306)
* [OCPBUGS-65787](https://issues.redhat.com/browse/OCPBUGS-65787): Remove empty status field from generated IDMS/ITMS files [#1313](https://github.com/openshift/oc-mirror/pull/1313)
* [OCPBUGS-63030](https://issues.redhat.com/browse/OCPBUGS-63030): removes unintended exec permissions [#1291](https://github.com/openshift/oc-mirror/pull/1291)
* [OCPBUGS-62463](https://issues.redhat.com/browse/OCPBUGS-62463): generate the archive only after mirroring [#1279](https://github.com/openshift/oc-mirror/pull/1279)
* [OCPBUGS-62283](https://issues.redhat.com/browse/OCPBUGS-62283): v2/cli: show binary version in output [#1276](https://github.com/openshift/oc-mirror/pull/1276)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/767d31f19e91d387f62c700ef45002a712da87c5...f4775a263f2ddbc9f94c9349231883614dce0193)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/3e2401f23ef666e8f33789a397d81a7d352b0a33)

* [OCPBUGS-61890](https://issues.redhat.com/browse/OCPBUGS-61890): 🐛 CRD upgrade safety fixes and ratcheting (#2123) [#527](https://github.com/openshift/operator-framework-operator-controller/pull/527)
* NO-ISSUE: add jiazha to approvers [#513](https://github.com/openshift/operator-framework-operator-controller/pull/513)
* [OCPBUGS-62811](https://issues.redhat.com/browse/OCPBUGS-62811): for incompatible test add func to wait builder and deployer SA creation by OCP controller [#503](https://github.com/openshift/operator-framework-operator-controller/pull/503)
* [OCPBUGS-62722](https://issues.redhat.com/browse/OCPBUGS-62722): (cherry-pick) Fix truncate large error messages and unhandle changes for crd upgrade safety in status conditions [#496](https://github.com/openshift/operator-framework-operator-controller/pull/496)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/881b35e1029ed5debaa400a43f1446d3ed23e3d6...3e2401f23ef666e8f33789a397d81a7d352b0a33)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/34cb4762e1716c1a31a344118b8a3ad00c28d831)

* [OCPBUGS-65848](https://issues.redhat.com/browse/OCPBUGS-65848): Add ValidatingAdmissionPolicy and check for omissions next time. [#577](https://github.com/openshift/openshift-apiserver/pull/577)
* [OCPBUGS-61982](https://issues.redhat.com/browse/OCPBUGS-61982): pkg/image: conditionally parse raw image manifest [#559](https://github.com/openshift/openshift-apiserver/pull/559)
* [OCPBUGS-65814](https://issues.redhat.com/browse/OCPBUGS-65814): update pkg/image/OWNERS [#575](https://github.com/openshift/openshift-apiserver/pull/575)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/a1535bf4ed12bd3210135bbe459f9324875f24ce...34cb4762e1716c1a31a344118b8a3ad00c28d831)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/d1c8e7edf11e78db401bc1672e0f17d551fe09db)

* [OCPBUGS-64814](https://issues.redhat.com/browse/OCPBUGS-64814): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into release-4.20 [#381](https://github.com/openshift/cluster-api-provider-openstack/pull/381)
* [OCPBUGS-64814](https://issues.redhat.com/browse/OCPBUGS-64814): Fix verify step [#389](https://github.com/openshift/cluster-api-provider-openstack/pull/389)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/30944900c974852654db4125082d616f9be4b1a6...d1c8e7edf11e78db401bc1672e0f17d551fe09db)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/0d95a7ef5d73153f5593e67bc41c0c7a53567ee6)

* [OCPBUGS-62014](https://issues.redhat.com/browse/OCPBUGS-62014): rorfs for cacheless lacks write access to /tmp/ to generate cache [#1170](https://github.com/openshift/operator-framework-olm/pull/1170)
* [OCPBUGS-64724](https://issues.redhat.com/browse/OCPBUGS-64724): Fix TOCTOU race condition in ensureInstallPlan (#3682) [#1139](https://github.com/openshift/operator-framework-olm/pull/1139)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/10d327b38876b2fbc654ddc54eee6199ea0dbbb8...0d95a7ef5d73153f5593e67bc41c0c7a53567ee6)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/e88619ea60753b276b2d813e050d8cfbbfce5a41)

* [OCPBUGS-65680](https://issues.redhat.com/browse/OCPBUGS-65680): enforce client side auth requirement for metrics endpoint [#688](https://github.com/operator-framework/operator-marketplace/pull/688)
* [OCPBUGS-62216](https://issues.redhat.com/browse/OCPBUGS-62216): Remove Expect func so that the test case can use the retry logic [#667](https://github.com/operator-framework/operator-marketplace/pull/667)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/3e102a57f11f3a47dbe2f967157c39cc2230de11...e88619ea60753b276b2d813e050d8cfbbfce5a41)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/1faf1ac5bb2e604f745d93a5fe70bec93024ad7f)

* [OCPBUGS-66049](https://issues.redhat.com/browse/OCPBUGS-66049): Fix conntrack reconciliation to use service port instead of endpoint port [#2874](https://github.com/openshift/ovn-kubernetes/pull/2874)
* [OCPBUGS-64836](https://issues.redhat.com/browse/OCPBUGS-64836): back-port IP & MAC conflict detection [#2827](https://github.com/openshift/ovn-kubernetes/pull/2827)
* [OCPBUGS-65514](https://issues.redhat.com/browse/OCPBUGS-65514): [4.20] status manager: remove managedFields for deleted zone upon zone deletion [#2855](https://github.com/openshift/ovn-kubernetes/pull/2855)
* [OCPBUGS-65951](https://issues.redhat.com/browse/OCPBUGS-65951): [release-4.20]: Fix linter issues, add missing cheryy-pick bits of #2844 [#2866](https://github.com/openshift/ovn-kubernetes/pull/2866)
* [OCPBUGS-65618](https://issues.redhat.com/browse/OCPBUGS-65618): [release-4.20] OCP4: 4.18.22 EgressIP Failover does not succeed - extended downtime and no reassignment between egress-capable peers [#2865](https://github.com/openshift/ovn-kubernetes/pull/2865)
* [OCPBUGS-65605](https://issues.redhat.com/browse/OCPBUGS-65605): add lint target to run golanci natively [#2856](https://github.com/openshift/ovn-kubernetes/pull/2856)
* [OCPBUGS-64697](https://issues.redhat.com/browse/OCPBUGS-64697): [release-4.20] Referencing pod named ports within a service results in bad DNAT rules containing tcp/0 target port [#2844](https://github.com/openshift/ovn-kubernetes/pull/2844)
* [OCPBUGS-63686](https://issues.redhat.com/browse/OCPBUGS-63686): Fix stale EIP assignments during failover and controller restart [#2835](https://github.com/openshift/ovn-kubernetes/pull/2835)
* [OCPBUGS-64590](https://issues.redhat.com/browse/OCPBUGS-64590): NetPol & MultiNetPol: Process update only when spec fields and/or related annotation are updated [#2841](https://github.com/openshift/ovn-kubernetes/pull/2841)
* [OCPBUGS-63696](https://issues.redhat.com/browse/OCPBUGS-63696): Fixes OF flows to be VLAN aware as well as add DPU checks for certain features [#2837](https://github.com/openshift/ovn-kubernetes/pull/2837)
* [OCPBUGS-63007](https://issues.redhat.com/browse/OCPBUGS-63007): kubevirt: fix bad release of IPs of live migratable pods [#2801](https://github.com/openshift/ovn-kubernetes/pull/2801)
* [OCPBUGS-63577](https://issues.redhat.com/browse/OCPBUGS-63577): [release-4.20] CORENET-6055: Dockerfile: Unpin OVN and consume the latest from FDP. [#2808](https://github.com/openshift/ovn-kubernetes/pull/2808)
* [OCPBUGS-63631](https://issues.redhat.com/browse/OCPBUGS-63631): Skip Pending pods in EgressIP status updates [#2831](https://github.com/openshift/ovn-kubernetes/pull/2831)
* [OCPBUGS-62913](https://issues.redhat.com/browse/OCPBUGS-62913): Configure sec nic EIPv6 address with NODAD and maximum lifetime [#2797](https://github.com/openshift/ovn-kubernetes/pull/2797)
* [OCPBUGS-62273](https://issues.redhat.com/browse/OCPBUGS-62273): Fix EgressIP stale GARP post reboot + pod restart [#2767](https://github.com/openshift/ovn-kubernetes/pull/2767)
* [OCPBUGS-61453](https://issues.redhat.com/browse/OCPBUGS-61453): [4.20] allow default network -&gt; localnet on the same node for any localnet subnet [#2751](https://github.com/openshift/ovn-kubernetes/pull/2751)
* [OCPBUGS-62336](https://issues.redhat.com/browse/OCPBUGS-62336): Fix EgressIP controller deadlock by sorting node locks lexicographically [#2770](https://github.com/openshift/ovn-kubernetes/pull/2770)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/74b1c90eb97bea68bf708d47f28fce7de9adc7b9...1faf1ac5bb2e604f745d93a5fe70bec93024ad7f)


### [prometheus](https://github.com/openshift/prometheus/tree/af9b206808f8eaeb4acec7fe74ba6b145bbdc921)

* [OCPBUGS-62275](https://issues.redhat.com/browse/OCPBUGS-62275): chore(scrape): default to legacy validation/escaping scheme until utf-8 is fully supported by prometheus-operator [#273](https://github.com/openshift/prometheus/pull/273)
* [Full changelog](https://github.com/openshift/prometheus/compare/61b4510b7ee21216303a9e31a34081045f11ddbb...af9b206808f8eaeb4acec7fe74ba6b145bbdc921)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/fa749d65d8eca1cc937554baab91385a78ec8ce1)

* [OCPBUGS-63624](https://issues.redhat.com/browse/OCPBUGS-63624): bump github.com/prometheus/procfs to v0.16.1 [#173](https://github.com/openshift/node_exporter/pull/173)
* [Full changelog](https://github.com/openshift/node_exporter/compare/56f6158e797ab80e5e0da2cb0ba701cb02902ef7...fa749d65d8eca1cc937554baab91385a78ec8ce1)


### [tests](https://github.com/openshift/origin/tree/b3dfe24701b9b592b9c55153974804db7ec76459)

* [OCPBUGS-69686](https://issues.redhat.com/browse/OCPBUGS-69686): BeforeEach was indirectly called in DetermineReleasePayloadImage [#30620](https://github.com/openshift/origin/pull/30620)
* [OCPBUGS-66072](https://issues.redhat.com/browse/OCPBUGS-66072): [release-4.20] net(virt) remove virtctl if not correctly retrieved [#30538](https://github.com/openshift/origin/pull/30538)
* [OCPBUGS-64836](https://issues.redhat.com/browse/OCPBUGS-64836): back-port IP & MAC conflict detection e2e tests [#30414](https://github.com/openshift/origin/pull/30414)
* [OCPBUGS-66963](https://issues.redhat.com/browse/OCPBUGS-66963): Fix MachineConfigNode test in two-node fencing clusters [#30540](https://github.com/openshift/origin/pull/30540)
* [OCPBUGS-66365](https://issues.redhat.com/browse/OCPBUGS-66365): update watch request limits for marketplace-operator [#30569](https://github.com/openshift/origin/pull/30569)
* [OCPBUGS-66979](https://issues.redhat.com/browse/OCPBUGS-66979): Revert "OCPNODE-3912: Add a test for NodeSizing default change to OCP 4.20" [#30582](https://github.com/openshift/origin/pull/30582)
* [OCPNODE-3912](https://issues.redhat.com/browse/OCPNODE-3912): Add a test for NodeSizing default change to OCP 4.20 [#30467](https://github.com/openshift/origin/pull/30467)
* [OCPBUGS-64777](https://issues.redhat.com/browse/OCPBUGS-64777): [release-4.20] Add e2e tests for storage network policy [#30468](https://github.com/openshift/origin/pull/30468)
* [OCPBUGS-46422](https://issues.redhat.com/browse/OCPBUGS-46422): Add test that the ServiceCIDR API is blocked [4.20] [#30434](https://github.com/openshift/origin/pull/30434)
* [OCPBUGS-63656](https://issues.redhat.com/browse/OCPBUGS-63656): Redact bearertoken in TestContext [#30435](https://github.com/openshift/origin/pull/30435)
* [OCPBUGS-64598](https://issues.redhat.com/browse/OCPBUGS-64598): Updated the upgrade duration limit to 100 minutes for ppc64le [#30451](https://github.com/openshift/origin/pull/30451)
* [OCPBUGS-64593](https://issues.redhat.com/browse/OCPBUGS-64593): [release-4.20] NO-JIRA: Filter preconfiguredIPs based on cluster IP family support [#30415](https://github.com/openshift/origin/pull/30415)
* [OCPBUGS-63725](https://issues.redhat.com/browse/OCPBUGS-63725): CNTRLPLANE-1766:fix(disruption): Using correct internal LB of apiserver for monitor test on ARO and Baremetal Hypershift [#30439](https://github.com/openshift/origin/pull/30439)
* [OCPBUGS-63171](https://issues.redhat.com/browse/OCPBUGS-63171): Add imagestream update dryrun test [#30389](https://github.com/openshift/origin/pull/30389)
* [OCPBUGS-63513](https://issues.redhat.com/browse/OCPBUGS-63513): Migrate OCP-32383 to upstream [#30423](https://github.com/openshift/origin/pull/30423)
* [OCPBUGS-62841](https://issues.redhat.com/browse/OCPBUGS-62841): fix(test): prevent nil pointer dereference in ginkgo test runner [#30350](https://github.com/openshift/origin/pull/30350)
* [OCPBUGS-46422](https://issues.redhat.com/browse/OCPBUGS-46422): Skip ServiceCIDR in etcd_storage_path test (4.20) [#30257](https://github.com/openshift/origin/pull/30257)
* [OCPBUGS-62695](https://issues.redhat.com/browse/OCPBUGS-62695): cherry-pick 30270 to release-4.20 [#30335](https://github.com/openshift/origin/pull/30335)
* [Full changelog](https://github.com/openshift/origin/compare/3bbd10e37553217da450cfad172a16fc31441aba...b3dfe24701b9b592b9c55153974804db7ec76459)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/a417b217d7f39b02ba0bc1b75aa3bf52602df189)

* [OCPBUGS-65795](https://issues.redhat.com/browse/OCPBUGS-65795): Fixed logic for vSphere compute cluster permission [#197](https://github.com/openshift/vsphere-problem-detector/pull/197)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/9d55c028b27bc63c687342f0b7172ce39e07ec5a...a417b217d7f39b02ba0bc1b75aa3bf52602df189)