# 4.20.0-rc.0
Created: 2025-09-05 18:07:48 +0000 UTC
Image Digest: `sha256:e7edd14c7b42042bea98f9265af65d7fdbc740e2a6ac4c989d3666a42e06406b`
## Changes from 4.20.0-ec.5
### Components
* Kubectl 1.33.3
* Kubernetes upgraded from 1.33.2 to 1.33.3
* Kubernetes Tests upgraded from 1.33.2 to 1.33.3
* Red Hat Enterprise Linux CoreOS upgraded from 9.6.20250726-0 to 9.6.20250826-1
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: |
| ChunkSizeMiB
(5 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| InsightsRuntimeExtractor
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| OnClusterBuild
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| SigstoreImageVerification
(5 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed) |
| HighlyAvailableArbiter
(8 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| ImageVolume
(7 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| StoragePerformantSecurityPolicy
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| UpgradeStatus
(1 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| VSphereMultiDisk
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| ClusterVersionOperatorConfiguration
(0 tests)| Disabled| Disabled| Enabled| Enabled| Enabled
(Changed)| Enabled
(Changed) |
| SELinuxMount
(17 tests)| Disabled| Disabled| Enabled| Enabled| Enabled
(Changed)| Enabled
(Changed) |
| NoRegistryClusterOperations
(0 tests)| Disabled| Disabled| Disabled| Enabled| Disabled| Enabled
(Changed) |
| AWSClusterHostedDNSInstall
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| AzureClusterHostedDNSInstall
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| GCPClusterHostedDNSInstall
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| GCPCustomAPIEndpointsInstall
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| IrreconcilableMachineConfig
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
### New images
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [693a8264](https://github.com/openshift/csi-external-snapshot-metadata/commit/693a826455777eaafc677bb2195dc071d184243b) `sha256:4a0f46f8a59cdf4a2b92ed02b298788863fb69e7eef44fe6e8aa55e47e763913`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [0e61642f](https://github.com/openshift/volume-data-source-validator/commit/0e61642f8d898ee199e42f37319864851dd3627f) `sha256:fdefaea02b5c97a65eca8343fd8417814b58d44e7a97e69a5a8a682e4ede2b9a`
### Rebuilt images without code change
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [a8ef205c](https://github.com/openshift/aws-ebs-csi-driver/commit/a8ef205c28b7b8c80b0caf1c1a9e12f81f4fdbb9) `sha256:7be34722d8a64cde61d7d835a63853927165dcb7ef65b20301c9a5c047112fa3`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [b37141b0](https://github.com/openshift/aws-karpenter-provider-aws/commit/b37141b051bdf790eb7e8f45b95f6bd7dc8140f4) `sha256:b3cc4c5fe37dbf8c75f6ceab1571ba6a155e694c4c470ebddd897e782a4e063e`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [088dcaf7](https://github.com/openshift/aws-encryption-provider/commit/088dcaf73f980b977ef4f5d2f99e2a93deb87eef) `sha256:07da05db0bc2b14adb596a7c130e18c5bf2e4719756ed2ee40a1a845b12c569e`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [d1cc300e](https://github.com/openshift/machine-api-provider-aws/commit/d1cc300e80d2c02c234a04b8c72b71e720bc311f) `sha256:873c6afda932ce3e994e4d4d4a14d8e59c1b977a76ef18724dbc987c771c3b80`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [a2ecb150](https://github.com/openshift/aws-pod-identity-webhook/commit/a2ecb1502280feb8e82c9cf6f3f77d62797e4445) `sha256:b7b4251bdfaffaff6cce643339f83cbe1929e4417b5a4f19b78251047b68ef4f`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [d469d04e](https://github.com/openshift/cloud-provider-azure/commit/d469d04ed645358d942af442fe21e2c2b44b9b2c) `sha256:2a7eec3e51d346374848fa998097cc025392d243ae7d25cf28a5e9c229d525af`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [d469d04e](https://github.com/openshift/cloud-provider-azure/commit/d469d04ed645358d942af442fe21e2c2b44b9b2c) `sha256:6709f49fda3b2453a7dd5ed94fe4ee559ce9d4b42e38001ed8dc3deaa5e6a69f`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [cb8b5b6a](https://github.com/openshift/cluster-api-provider-azure/commit/cb8b5b6a485971a95c5a74508d76ab19b23cbf29) `sha256:16b2da1c80610c863862444679558742afba7c877b7af5ef25af4f6f40ff252a`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [0b8e4d22](https://github.com/openshift/azure-disk-csi-driver/commit/0b8e4d2202b0d17942fd745a5e1948f46bdd0350) `sha256:2aa31e9a769deab3c4099fcbf734e610467de940948a71e47e327c31b777c99d`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [45d505bc](https://github.com/openshift/azure-file-csi-driver/commit/45d505bc11fedadece5ae27147c9595877e39f2a) `sha256:6f7b6f2005d3722d9828bffc0f5b11653e7022bab54b66e817a99db91269cabf`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [ea0b9944](https://github.com/openshift/azure-kubernetes-kms/commit/ea0b9944dddcc7043065a1fab5fca72dd17450da) `sha256:3e8e11984a45f766ef86b51f14c078437515350e8e0a5bec06119cbf8998d351`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [4927cc2b](https://github.com/openshift/machine-api-provider-azure/commit/4927cc2be4f629e367d2a79a310900c7cced3f6c) `sha256:d21f94b455604767802cdd1ad627d9945d4542a5bbac2fe5681754dead98c398`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [6e2f3626](https://github.com/openshift/azure-service-operator/commit/6e2f362623720f7b6d634fbc424fbc61e4b481ae) `sha256:d74b5cb67b571aea75e94eb74aca347f0267a4e7e7108d18bfdf3e3bd2ef94a1`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [88b18175](https://github.com/openshift/azure-workload-identity/commit/88b18175e46fe305486d172ec0b4e8471c55e30b) `sha256:dd4ca0eb18f80092cd1e686f72d349bdae5f53cfb083662d500ce1770b1451c7`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [f782ba74](https://github.com/openshift/cluster-api-provider-metal3/commit/f782ba747ed353721c84ceb754ca8403f94adb6a) `sha256:04b0423fe412a4b3cdc539b2e2cbe808de0c22f38b6cd0ea0af751de5d6cd7bf`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [fb678fec](https://github.com/openshift/cluster-api-provider-baremetal/commit/fb678fec5f7e08348b281341481f33a848204e50) `sha256:563d49bd8fe17fc4c239fdf7822ea2eccf812829ff2ab18a21670c844e30b422`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [467e50fe](https://github.com/openshift/cloud-network-config-controller/commit/467e50feff5a56afbf9ccefc025781c9ccff8eca) `sha256:845fcad0770d8dcb7e4ff1c33d54be6f15dd8ebb12bfd0ddde67ec6fbe3e9355`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [74abc555](https://github.com/openshift/cluster-bootstrap/commit/74abc555111bac56a67957ef517ef086e4643c50) `sha256:cd2929927b3818d3923a7c878fed46ae0a4aa0f043864b050a971c6258d11f0f`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [de1db297](https://github.com/openshift/cluster-api/commit/de1db2970e7fede7101e5a8188e74942ab6665e3) `sha256:0fb75a5b6502b41b48b46ffca1cd27bfd17dba1e3e38e5229d64807ff2cefbd1`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [3ec30377](https://github.com/openshift/cluster-api-operator/commit/3ec30377ffff951dc9c0fc2257d290e4b4958465) `sha256:7df9a9675f9f9b1c1d75aaf56779b99396b4ba68907a23456be21790a264da57`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [f9b5b319](https://github.com/openshift/cluster-kube-scheduler-operator/commit/f9b5b31943f2be768af6373def4c8946a30d0ed6) `sha256:4e79dbe51b0c0542ac4afe4364bf93757cf579e5800e8f99018e67d41ff30ba7`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [e4917368](https://github.com/openshift/cluster-olm-operator/commit/e4917368b6a547f97a0fb411fea90de246d1417e) `sha256:6d54099720e4d5b882b7ed5dd06eacebebde6cb726781f896d3e31ee5cf13390`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [dfaeb8d5](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/dfaeb8d5fdf1f43df37916ec3d70f57ddebb1028) `sha256:d6493941339d2e58c55181576ec956ff730484be34b79e7fc532544c86525834`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [3e753854](https://github.com/openshift/cluster-policy-controller/commit/3e7538547c8f209c72083097a4ebaada6e9c46c5) `sha256:57c9f38685407832632497d95473dd68a8c2b966addab2e04acd9aae8028b7b1`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [2438d7c8](https://github.com/openshift/configmap-reload/commit/2438d7c8e495201361d87da205649bc38fc4822b) `sha256:d80adfc718194b12d3c146e99654132af3e9dbfacfad4eaa27595e301f77ee1a`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [184a9601](https://github.com/openshift/containernetworking-plugins/commit/184a96011a8cacb72319cdccb904271a99c5928d) `sha256:aff79fd6ecd5413ab8e4c06bee6b7bd204b08a55e7e41b0c2409061c4da9ca3d`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [184a9601](https://github.com/openshift/containernetworking-plugins/commit/184a96011a8cacb72319cdccb904271a99c5928d) `sha256:91d80cd3b78a80b10b0354d277101a6d64fed89433b0811cfaa94160440742bd`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [1abaf844](https://github.com/openshift/csi-driver-nfs/commit/1abaf84447384a486a9f9da7cd7b9e53784c8a55) `sha256:9d2dff053a3bb50f2940558275144d0b15ff8a2a40f354add44fe9da87f86cf3`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [45239149](https://github.com/openshift/csi-external-attacher/commit/45239149cb387bcc51d944b802db0e804dc02688) `sha256:bae0f07396d6ba85033c3f0ab71a664debb30650a55813f1e6f4ce0ac33a7452`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [81fca036](https://github.com/openshift/csi-external-provisioner/commit/81fca03694bca1bae8606d8970472330e1e4fcad) `sha256:be37e3d0242b5a38dbf3c970e0618f751f8515160a46ce1d781d8121662b5d07`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [9cd710b1](https://github.com/openshift/csi-external-resizer/commit/9cd710b1f1f0ce002af0af76709401ace3e48051) `sha256:134bfc419fd857303cb0df28e2908228cea7eb25cd68ae777e4c0f374e3817d0`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [42604822](https://github.com/openshift/csi-external-snapshotter/commit/42604822c25eb2aa0ecb017c24e328221b238eb9) `sha256:923758a5bcfaf954e428831aed03956723829f840ae09669f6dc13110ee16fd7`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [1d6d6b27](https://github.com/openshift/csi-livenessprobe/commit/1d6d6b27460e58f24110c72ec9c96afe2c1d891d) `sha256:754512f29c0b240dd35abc82752dcc928a46558c679f60a1cc3868aedda5651f`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [3a2c732e](https://github.com/openshift/csi-node-driver-registrar/commit/3a2c732e73b19c947945256e9ea0581653988ab0) `sha256:810d17cf1b8bc5daae077a19b3d78d5ff4c758bd341986f0d4d18f758949752d`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [42604822](https://github.com/openshift/csi-external-snapshotter/commit/42604822c25eb2aa0ecb017c24e328221b238eb9) `sha256:2106c18d27a2638dd74d491f0fcfbdd65cf75a1fda337f34e30347f792a2bdb0`
* [docker-builder](https://github.com/openshift/builder) git [ff595e4b](https://github.com/openshift/builder/commit/ff595e4bbf5301039fc62f0cdd7b5610605f633e) `sha256:19f5229c14b4a7461f9bffd3bb73976201e2a35b8ef3314b9f3a8535eac5da2e`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [9d55fd1a](https://github.com/openshift/driver-toolkit/commit/9d55fd1aaba05830f857132bd149ee3cf18cc20f) `sha256:d4eb0dc6459d141f026a3d95a5e3f97a6e8ad9d1e5ad8566936f58dc803beefd`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [65539c71](https://github.com/openshift/cluster-api-provider-gcp/commit/65539c71b4c292fc0f4eeb572dfe490af63063d9) `sha256:90c49c6d2f83d279b67492bd00e4d6b1499f58d5527d8eaf0a7d6335b7520ec2`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [b36788ed](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/b36788edd4c559cffd5f7f1b2e3e51b98c3e92b8) `sha256:77f9f0f07f4f4e9c60ebdef43d5e53bac6973c81a59c1b9be9e0979d59c0fab4`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [36ab30f9](https://github.com/openshift/cloud-provider-ibm/commit/36ab30f90e87de0daa926d20ccda88c41abed191) `sha256:03279b1e6ff66ccf773bd419ff4c9ebd669d55cacc67cc3a2a6765009811deef`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [8b6396a4](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/8b6396a4c78f4791b7f3c5ec404a78b499f8546b) `sha256:e23fa511f3e4b410e9565eee2e98f82d2b297b547b75b8c047f33e2b0f89548b`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [6c92e542](https://github.com/openshift/ironic-rhcos-downloader/commit/6c92e5425b58baa9d4dd951a992b7460e8407247) `sha256:ced6dec0b294f7a726fdb23293a25774febc3517e6b2d427fdfe4931e6699693`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [fa5b8b8b](https://github.com/openshift/ironic-static-ip-manager/commit/fa5b8b8bb73e509f74205a99a0ed1cb07a843885) `sha256:79c216877dd79731236dd7a60863b30172f4f92a0c543a65a3aa5cf62782017b`
* [keepalived-ipfailover](https://github.com/openshift/images) git [bb4535b7](https://github.com/openshift/images/commit/bb4535b7069cab2de0174be29bccccde6d623b4f) `sha256:1919512997c0fde598a3a97adced2d9735d74adb4c57408835b8f9153ecc8e80`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [cfa5ee9f](https://github.com/openshift/kubernetes-metrics-server/commit/cfa5ee9f1c94d7faec36de970033b9e329326f38) `sha256:d0883c0ca9026c769243792f1d46f602e3ccf3c625191a5713373b810cb597b5`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [a8c9a5f0](https://github.com/openshift/kube-state-metrics/commit/a8c9a5f08f675ae9afbaafdc47d7d2acb4a3709d) `sha256:ed4ab62edbbc1d3f0c6f546583be995333dca0e996e87116264b5206edd5afcd`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:e4bc0d1d69b4e8203c515ef7c6ac970f6322f34728ed4d24d00a59d54b8986ed`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [8b8dd30e](https://github.com/openshift/kubevirt-csi-driver/commit/8b8dd30ecd302e2b260c666702dffb19abf7c1aa) `sha256:ca0e5ea8b71e056d9cdb8f22450dda2d20dabb61cb93f8c770f0820fc8c13007`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:3ed8efe6c17803424d7c4694fcfe31e5b78e0d579a8b7351c194792e26742e89`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [fc73c803](https://github.com/openshift/multus-admission-controller/commit/fc73c803caa1140e5a9115ceeb0e38504b001722) `sha256:56108e8bae845d6ef36522358b4d388973c2a2eb28be7772ad8bca62f2591f5c`
* [multus-cni](https://github.com/openshift/multus-cni) git [cf0f68ec](https://github.com/openshift/multus-cni/commit/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe) `sha256:6a9eaf09489069395ad295f06d7f50869327780d84d3a2406e3c20a41bf9a865`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [cf0f68ec](https://github.com/openshift/multus-cni/commit/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe) `sha256:416f7edbc6d4406eff5e049f817d90033864a29d10b6b93f51de64fe139bd037`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [278ec20e](https://github.com/openshift/multus-networkpolicy/commit/278ec20e795c3a590500e789716be7fcc4d7107b) `sha256:600b280927b9eb4cbd85d0a4c4d685562b9e2468f6e3b2c45a76967fd512f4bb`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:6c6670c0a880f55a30fc412ddda5a6037b9b9943864e5f881fc1c9d836c3cb88`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [43c89591](https://github.com/openshift/whereabouts-cni/commit/43c8959152a6ca8afdc73eaed624286628c2c22e) `sha256:38afea05061edc761cb3217be63360021a300e95604aa248d4e3f235213e9c41`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [54ad71ee](https://github.com/openshift/bond-cni/commit/54ad71eeeb2c9e13d3ee5d03685dff5e1b1a02dc) `sha256:9e949fc84f7f63005f17832028a470bc6504c655d61de9f011729bcccea5efc7`
* [oauth-server](https://github.com/openshift/oauth-server) git [81098796](https://github.com/openshift/oauth-server/commit/81098796234cbe75e656ffddd8a015953e0bb1c7) `sha256:08cac8f606405a166691ca4f53ed91181ceab46e6020accb4c41ce5c3fb8cb3c`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [b04e2ef0](https://github.com/openshift/openshift-state-metrics/commit/b04e2ef05498c2a4504bd9396a3290c4f263fc37) `sha256:aaa7583be1701a8e55529eb7dc386a0e77a377691814c135c78d9b2fd3e761dc`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [30944900](https://github.com/openshift/cluster-api-provider-openstack/commit/30944900c974852654db4125082d616f9be4b1a6) `sha256:36c61bad764087c3d71a596b544d87943065cddfef69b83e27e17bd10b26fad1`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [bf0d2c88](https://github.com/openshift/openstack-resource-controller/commit/bf0d2c88d6bf9bd90b24c979ea63dc37606b45fc) `sha256:eac092319fbfa82950fd4349606d5daa175e23c9eb0b77b5bb8d9b193f5bdcfd`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:70594313836ff223ce97288bc24fffef6f53d8d96ec7c50ddcf0eb45bb82b11a`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [76db379d](https://github.com/openshift/ovirt-csi-driver-operator/commit/76db379d075fdae94ca604f3fa83b0612b36ef8d) `sha256:1d5c3049daa898c6fb52eafd65a944ed8251876c8dbe4ca6f55be81b1c7c4a96`
* [prometheus](https://github.com/openshift/prometheus) git [e3c32a9a](https://github.com/openshift/prometheus/commit/e3c32a9a3a4828106c3de1fcb0028625c50b3e1b) `sha256:3ba54b5221f6d15d3645661a1b865cd40e300bf8717ad2d0307b45b877696765`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [419f2843](https://github.com/openshift/prometheus-alertmanager/commit/419f2843332265d44982920d6fb4db220ec26f91) `sha256:52fcc03d224aaf5a5be0d2b79e5bf17883181e10e0b9b908799cd5b23132a726`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [56f6158e](https://github.com/openshift/node_exporter/commit/56f6158e797ab80e5e0da2cb0ba701cb02902ef7) `sha256:372bbae10f0b8eea8c13a3d6d78e24fe1cb595503fdf4d6a09fbb1205a509e48`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [bf2fa662](https://github.com/openshift/route-controller-manager/commit/bf2fa662f57f233d8541f94c4953e0dcd7a5ab20) `sha256:ce44920f2704900a9766667d39e3a7de190dfd1da7cd3a10c632d82485aa3689`
* [telemeter](https://github.com/openshift/telemeter) git [4c6036ee](https://github.com/openshift/telemeter/commit/4c6036eeb851ad6e0e837e214a2d08ffc8f0d1d0) `sha256:1ddb921b5ee4a2c9d4d2b17a773165672dcb026536a4d86cab2db1472d8faa53`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [b93eb64f](https://github.com/openshift/cloud-provider-vsphere/commit/b93eb64ff72e7c005687813c8b478d694a0f517a) `sha256:987f32bc7e0faf7223c5b1325ce4911ae79e9b55afd1106f728f324f06991d84`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [6f933c9c](https://github.com/openshift/cluster-api-provider-vsphere/commit/6f933c9cb541a4b591275e39fd4112c77cbd1563) `sha256:24609d0059af5ba12dcbd051d46ff8cd99dd1c8780eddd007e45e180391592fe`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [61d0d00a](https://github.com/openshift/vmware-vsphere-csi-driver/commit/61d0d00a78ee60ee57fcc99648a8851f0db52e5a) `sha256:9012a2c9b2d5f2c773f47233948ac5f14830c3846534dc7c2e2287b7084f77c0`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [61d0d00a](https://github.com/openshift/vmware-vsphere-csi-driver/commit/61d0d00a78ee60ee57fcc99648a8851f0db52e5a) `sha256:ad38ba540885ac941c216fc3a2886a3686a0f244f8be3873ddbf017978b02f00`
### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/148ea355451b2173202d3e3988558166f27f0668)
* NO-ISSUE: Update Konflux references (#7964) [#7964](https://github.com/openshift/assisted-service/pull/7964)
* [ACM-21902](https://issues.redhat.com/browse/ACM-21902): Merge system ca-bundle into spoke client (#7935) [#7935](https://github.com/openshift/assisted-service/pull/7935)
* [MGMT-19758](https://issues.redhat.com/browse/MGMT-19758): TNF clusters (#7867) [#7867](https://github.com/openshift/assisted-service/pull/7867)
* [MGMT-21395](https://issues.redhat.com/browse/MGMT-21395): Add monitoring label and Prometheus RBAC for supported OLM operators (#7949) [#7949](https://github.com/openshift/assisted-service/pull/7949)
* NO-ISSUE: Update Konflux references (#7810) [#7810](https://github.com/openshift/assisted-service/pull/7810)
* NO-ISSUE: [master] Bump OCP versions: 4.19 (#7948) [#7948](https://github.com/openshift/assisted-service/pull/7948)
* NO-ISSUE: [master] Bump OCP versions: 4.18, 4.16, 4.14 (#7941) [#7941](https://github.com/openshift/assisted-service/pull/7941)
* [MGMT-21274](https://issues.redhat.com/browse/MGMT-21274): Report duration of monitored hosts (#7933) [#7933](https://github.com/openshift/assisted-service/pull/7933)
* NO-ISSUE: Add yoavsc0302 to OWNERS_ALIASES file (#7939) [#7939](https://github.com/openshift/assisted-service/pull/7939)
* NO-ISSUE: [master] Bump OCP versions: 4.12 (#7927) [#7927](https://github.com/openshift/assisted-service/pull/7927)
* [OCPBUGS-59393](https://issues.redhat.com/browse/OCPBUGS-59393): Fix IsMachineCidrEqualsToCalculatedCidr validation to handle unnormalized IPv6 addresses (#7923) [#7923](https://github.com/openshift/assisted-service/pull/7923)
* NO-ISSUE: support setting TNA_CLUSTERS_SUPPORT when deploying with assisted-test-infra (#7922) [#7922](https://github.com/openshift/assisted-service/pull/7922)
* NO-ISSUE: Associate MetalLB operator with the Virtualization bundle (#7920) [#7920](https://github.com/openshift/assisted-service/pull/7920)
* NO-ISSUE: [master] Bump OCP versions: 4.15, 4.17 (#7924) [#7924](https://github.com/openshift/assisted-service/pull/7924)
* NO-ISSUE: [master] Bump OCP versions: 4.19 (#7921) [#7921](https://github.com/openshift/assisted-service/pull/7921)
* [MGMT-21063](https://issues.redhat.com/browse/MGMT-21063): Use mac address to configure dhcp on kargs (#7888) [#7888](https://github.com/openshift/assisted-service/pull/7888)
* Set AIUI_CHAT_API_URL for podman deployment (#7911) [#7911](https://github.com/openshift/assisted-service/pull/7911)
* [MGMT-14822](https://issues.redhat.com/browse/MGMT-14822): Add MetalLB operator (#7824) [#7824](https://github.com/openshift/assisted-service/pull/7824)
* NO-ISSUE: [master] Bump OCP versions: 4.20, 4.14 (#7917) [#7917](https://github.com/openshift/assisted-service/pull/7917)
* [ACM-22740](https://issues.redhat.com/browse/ACM-22740): Approve CSRs for a host before marking as Done (#7903) [#7903](https://github.com/openshift/assisted-service/pull/7903)
* NO-ISSUE: [master] Bump OCP versions: 4.16, 4.18 (#7904) [#7904](https://github.com/openshift/assisted-service/pull/7904)
* [MGMT-20474](https://issues.redhat.com/browse/MGMT-20474): New route to provide a detailed list of features (#7862) [#7862](https://github.com/openshift/assisted-service/pull/7862)
* NO-ISSUE: [master] Bump OCP versions: 4.19 (#7902) [#7902](https://github.com/openshift/assisted-service/pull/7902)
* NO-ISSUE: Remove unused variables from cluster monitor loop (#7887) [#7887](https://github.com/openshift/assisted-service/pull/7887)
* [MGMT-21266](https://issues.redhat.com/browse/MGMT-21266): Report duration of monitored clusters (#7886) [#7886](https://github.com/openshift/assisted-service/pull/7886)
* [MGMT-21312](https://issues.redhat.com/browse/MGMT-21312): Index hosts by cluster id (#7891) [#7891](https://github.com/openshift/assisted-service/pull/7891)
* [MGMT-21287](https://issues.redhat.com/browse/MGMT-21287): Remove NHO dependency in SNR (#7889) [#7889](https://github.com/openshift/assisted-service/pull/7889)
* [Full changelog](https://github.com/openshift/assisted-service/compare/4f485737c2f56987a3ae214f6168d49ff42fba78...148ea355451b2173202d3e3988558166f27f0668)
### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/3accbb7bd0dd865744e0ef0808b65be5914b157e)
* NO-ISSUE: Update Konflux references (#1225) [#1225](https://github.com/openshift/assisted-installer/pull/1225)
* Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.20 (#1144) [#1144](https://github.com/openshift/assisted-installer/pull/1144)
* Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.20 (#1146) [#1146](https://github.com/openshift/assisted-installer/pull/1146)
* [MGMT-21454](https://issues.redhat.com/browse/MGMT-21454): update Go to 1.24 and adapt unit-tests (#1220) [#1220](https://github.com/openshift/assisted-installer/pull/1220)
* NO-ISSUE: Update Konflux references (#1216) [#1216](https://github.com/openshift/assisted-installer/pull/1216)
* NO-ISSUE: Add yoavsc0302 to OWNERS_ALIASES file (#1213) [#1213](https://github.com/openshift/assisted-installer/pull/1213)
* NO-ISSUE: Update Konflux references (#1212) [#1212](https://github.com/openshift/assisted-installer/pull/1212)
* [MGMT-20756](https://issues.redhat.com/browse/MGMT-20756): assisted installer naive string concatenation for partition finding (#1198) [#1198](https://github.com/openshift/assisted-installer/pull/1198)
* NO-ISSUE: Update Konflux references (#1202) [#1202](https://github.com/openshift/assisted-installer/pull/1202)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/27441c81911a57f8165ab5b1617613c1de09fe4d...3accbb7bd0dd865744e0ef0808b65be5914b157e)
### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/62dc63f18f2c4a6a0cf1043710d055fe57f8fa28)
* Update ghw package to v0.19.0 to resolve LVMs issue (#1093) [#1093](https://github.com/openshift/assisted-installer-agent/pull/1093)
* NO-ISSUE: Add yoavsc0302 to OWNERS_ALIASES file (#1089) [#1089](https://github.com/openshift/assisted-installer-agent/pull/1089)
* NO-ISSUE: Update Konflux references (#1078) [#1078](https://github.com/openshift/assisted-installer-agent/pull/1078)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/432a19b1aea23b768b43bb6a65b8dcfacbff6e9b...62dc63f18f2c4a6a0cf1043710d055fe57f8fa28)
### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/b5330d86e38009af7b8a9fd32d84b8800fd2f27f)
* [OCPBUGS-60920](https://issues.redhat.com/browse/OCPBUGS-60920): Update ISOBuilder OCP 4.19 Dev Preview Release notes [#141](https://github.com/openshift/agent-installer-utils/pull/141)
* [AGENT-1252](https://issues.redhat.com/browse/AGENT-1252): Add Dockerfile for OVE UI ISO [#138](https://github.com/openshift/agent-installer-utils/pull/138)
* [AGENT-1256](https://issues.redhat.com/browse/AGENT-1256): Fix hyperconverged and kube descheduler contents [#140](https://github.com/openshift/agent-installer-utils/pull/140)
* [AGENT-1256](https://issues.redhat.com/browse/AGENT-1256): Version the ISO builder configuration and script [#128](https://github.com/openshift/agent-installer-utils/pull/128)
* [AGENT-1254](https://issues.redhat.com/browse/AGENT-1254): Switch to agent-installer-ui image [#132](https://github.com/openshift/agent-installer-utils/pull/132)
* [AGENT-1205](https://issues.redhat.com/browse/AGENT-1205): Do not include agent-tui and related services [#123](https://github.com/openshift/agent-installer-utils/pull/123)
* [OCPBUGS-60019](https://issues.redhat.com/browse/OCPBUGS-60019): Add ISOBuilder Release notes [#135](https://github.com/openshift/agent-installer-utils/pull/135)
* [AGENT-1270](https://issues.redhat.com/browse/AGENT-1270): use agent-preinstall-image-builder image for building the ISO [#134](https://github.com/openshift/agent-installer-utils/pull/134)
* NO-ISSUE: Move mtv-operator back to v2.8 for 4.20 [#133](https://github.com/openshift/agent-installer-utils/pull/133)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/81c4340709cd28d141ae21c223a0b3d1f8d7c2c9...b5330d86e38009af7b8a9fd32d84b8800fd2f27f)
### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/11b24a2c7452ef683a1d989f1016e6e815f5c112)
* [OCPBUGS-57685](https://issues.redhat.com/browse/OCPBUGS-57685): Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.20 [#84](https://github.com/openshift/apiserver-network-proxy/pull/84)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/26a4e67d80752e9ec961c518f57283adb70616e8...11b24a2c7452ef683a1d989f1016e6e815f5c112)
### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/bb88da16b29d63573861351afc5ca8c4547775d6)
* [OCPCLOUD-2928](https://issues.redhat.com/browse/OCPCLOUD-2928): Merge https://github.com/kubernetes/cloud-provider-aws:master (b0e098d) into main [#106](https://github.com/openshift/cloud-provider-aws/pull/106)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/3408f0cdb3c0cec49433a2ab3cff6e1d44e4a58e...bb88da16b29d63573861351afc5ca8c4547775d6)
### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/9467200c8073d4609cfca356bc6fc8126c505886)
* [OCPBUGS-60943](https://issues.redhat.com/browse/OCPBUGS-60943), [OCPBUGS-61040](https://issues.redhat.com/browse/OCPBUGS-61040), [OCPBUGS-61044](https://issues.redhat.com/browse/OCPBUGS-61044): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.0 (dcfaef0) into main [#553](https://github.com/openshift/cluster-api-provider-aws/pull/553)
* [OCPCLOUD-2919](https://issues.redhat.com/browse/OCPCLOUD-2919): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:main (645f38e) into main [#565](https://github.com/openshift/cluster-api-provider-aws/pull/565)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/d35191344745f7b00167f932b42e1d51d14865fc...9467200c8073d4609cfca356bc6fc8126c505886)
### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/a92ebd03f1d495e27a76b03e9db002e08fcb8ac8)
* [STOR-2477](https://issues.redhat.com/browse/STOR-2477): Correct efs single-zone storageclass [#404](https://github.com/openshift/csi-operator/pull/404)
* [OCPBUGS-60655](https://issues.redhat.com/browse/OCPBUGS-60655): Disable LUN stress test for azure-file [#418](https://github.com/openshift/csi-operator/pull/418)
* [OCPBUGS-60464](https://issues.redhat.com/browse/OCPBUGS-60464): Bump library-go to fix panic [#417](https://github.com/openshift/csi-operator/pull/417)
* [STOR-2394](https://issues.redhat.com/browse/STOR-2394): Bump all deps for 4.20 [#408](https://github.com/openshift/csi-operator/pull/408)
* [STOR-2479](https://issues.redhat.com/browse/STOR-2479): Add CredentialsRequest for the EFS node DaemonSet [#389](https://github.com/openshift/csi-operator/pull/389)
* [STOR-2330](https://issues.redhat.com/browse/STOR-2330): Add labels to subscribe openstack cinder and manila CSI driver controllers to NPs [#409](https://github.com/openshift/csi-operator/pull/409)
* [OCPBUGS-57395](https://issues.redhat.com/browse/OCPBUGS-57395): Remove stale conditions [#406](https://github.com/openshift/csi-operator/pull/406)
* [Full changelog](https://github.com/openshift/csi-operator/compare/a7f0c3ab58181f06a2bb21f0421ebb003f4eecac...a92ebd03f1d495e27a76b03e9db002e08fcb8ac8)
### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/5f4e6cdd114d77f0a7e6e18cdabba253c3149a65)
* [CORS-4044](https://issues.redhat.com/browse/CORS-4044), [CORS-4045](https://issues.redhat.com/browse/CORS-4045), [CORS-4046](https://issues.redhat.com/browse/CORS-4046), [CORS-4047](https://issues.redhat.com/browse/CORS-4047), [CORS-4048](https://issues.redhat.com/browse/CORS-4048), [CORS-4049](https://issues.redhat.com/browse/CORS-4049), [CORS-4050](https://issues.redhat.com/browse/CORS-4050), [CORS-4051](https://issues.redhat.com/browse/CORS-4051): Add private dns zone section to GCP install config [#9792](https://github.com/openshift/installer/pull/9792)
* [OCPBUGS-60949](https://issues.redhat.com/browse/OCPBUGS-60949): Update the RHCOS 4.20 bootimage metadata [#9916](https://github.com/openshift/installer/pull/9916)
* [OCPBUGS-60687](https://issues.redhat.com/browse/OCPBUGS-60687): PowerVS: Add lon04 support [#9905](https://github.com/openshift/installer/pull/9905)
* [SPLAT-2463](https://issues.redhat.com/browse/SPLAT-2463): Added ability to configure CoresPerSocket [#9912](https://github.com/openshift/installer/pull/9912)
* [CORS-3652](https://issues.redhat.com/browse/CORS-3652): RHCOS Stream Marketplace Images [#9329](https://github.com/openshift/installer/pull/9329)
* [OCPBUGS-60634](https://issues.redhat.com/browse/OCPBUGS-60634): Added logic to clean up potential leftover spbm entity configs [#9894](https://github.com/openshift/installer/pull/9894)
* [OCPBUGS-60600](https://issues.redhat.com/browse/OCPBUGS-60600): node-joner ignore error if SSH key was not found [#9908](https://github.com/openshift/installer/pull/9908)
* [CORS-4061](https://issues.redhat.com/browse/CORS-4061): migrate AWS SDK to v2 in quota/aws [#9890](https://github.com/openshift/installer/pull/9890)
* [CORS-4056](https://issues.redhat.com/browse/CORS-4056): migrate AWS SDK to v2 in asset/machines/aws [#9889](https://github.com/openshift/installer/pull/9889)
* [OCPBUGS-57364](https://issues.redhat.com/browse/OCPBUGS-57364): custom-dns: Set PrivateZone and PublicZone to nil in the DNS manifest [#9886](https://github.com/openshift/installer/pull/9886)
* [OCPBUGS-55499](https://issues.redhat.com/browse/OCPBUGS-55499): Misleading error when confidentialCompute: Enabled [#9848](https://github.com/openshift/installer/pull/9848)
* [OCPBUGS-60162](https://issues.redhat.com/browse/OCPBUGS-60162): reject installation into byo vpc/subnets owned by another cluster [#9883](https://github.com/openshift/installer/pull/9883)
* [OCPBUGS-60545](https://issues.redhat.com/browse/OCPBUGS-60545): Azure: change LB and pubic IP skus to Standard [#9898](https://github.com/openshift/installer/pull/9898)
* [AGENT-1205](https://issues.redhat.com/browse/AGENT-1205): Update agent-installer-ui tar path [#9896](https://github.com/openshift/installer/pull/9896)
* [OCPBUGS-59104](https://issues.redhat.com/browse/OCPBUGS-59104): Set kernel dual-stack arg for all platforms [#9865](https://github.com/openshift/installer/pull/9865)
* [OCPBUGS-51299](https://issues.redhat.com/browse/OCPBUGS-51299): Add default values for validation to kms keys [#9781](https://github.com/openshift/installer/pull/9781)
* [OCPBUGS-53473](https://issues.redhat.com/browse/OCPBUGS-53473): Validate clusterNetwork hostPrefix [#9594](https://github.com/openshift/installer/pull/9594)
* no-jira: dev docs - add rr capi debugging [#9887](https://github.com/openshift/installer/pull/9887)
* [OCPBUGS-60197](https://issues.redhat.com/browse/OCPBUGS-60197): PowerVS: config variables not honored [#9877](https://github.com/openshift/installer/pull/9877)
* [CORS-4078](https://issues.redhat.com/browse/CORS-4078): centralize v2 aws client constructions [#9882](https://github.com/openshift/installer/pull/9882)
* [OCPBUGS-50517](https://issues.redhat.com/browse/OCPBUGS-50517): [Nuanix] installer should add the shared category to the preloaded rhcos image PC object [#9450](https://github.com/openshift/installer/pull/9450)
* [MGMT-21212](https://issues.redhat.com/browse/MGMT-21212): Enable dual-stack clusters with image-based installations [#9847](https://github.com/openshift/installer/pull/9847)
* [OCPBUGS-60284](https://issues.redhat.com/browse/OCPBUGS-60284): Upgrading Cluster-API-Provider-Nutanix version from 1.5.4 to 1.7.0 [#9869](https://github.com/openshift/installer/pull/9869)
* [OCPBUGS-60240](https://issues.redhat.com/browse/OCPBUGS-60240): baremetal: always set external v6 URL on dualstack [#9874](https://github.com/openshift/installer/pull/9874)
* [CORS-4177](https://issues.redhat.com/browse/CORS-4177): clusterapi: use default envtest timeouts [#9871](https://github.com/openshift/installer/pull/9871)
* [CORS-4067](https://issues.redhat.com/browse/CORS-4067): Add support for single zone NAT gateway [#9753](https://github.com/openshift/installer/pull/9753)
* [CORS-4178](https://issues.redhat.com/browse/CORS-4178): handle deleting AWS egress-only internet gateway [#9873](https://github.com/openshift/installer/pull/9873)
* [OCPEDGE-1997](https://issues.redhat.com/browse/OCPEDGE-1997): bump(ocp/api): pull in HighlyAvailableArbiter promotion [#9870](https://github.com/openshift/installer/pull/9870)
* [AGENT-1205](https://issues.redhat.com/browse/AGENT-1205): Extract agent-tui during boot for interactive workflow [#9828](https://github.com/openshift/installer/pull/9828)
* [SPLAT-2355](https://issues.redhat.com/browse/SPLAT-2355): Added vSphere support for disk setup [#9863](https://github.com/openshift/installer/pull/9863)
* [CORS-4083](https://issues.redhat.com/browse/CORS-4083), [CORS-4084](https://issues.redhat.com/browse/CORS-4084), [CORS-4085](https://issues.redhat.com/browse/CORS-4085): Add Azure custom-dns support in Tech Preview [#9861](https://github.com/openshift/installer/pull/9861)
* [OCPBUGS-59542](https://issues.redhat.com/browse/OCPBUGS-59542): Generated Nutanix MachineSets for Autoscaling with Failure Domains [#9864](https://github.com/openshift/installer/pull/9864)
* no-jira: OWNERS: add splat team as approvers [#9862](https://github.com/openshift/installer/pull/9862)
* [CORS-3992](https://issues.redhat.com/browse/CORS-3992): skip dns zone validation with custom DNS [#9859](https://github.com/openshift/installer/pull/9859)
* no-jira: Bump openshift/api to get renamed Featuregates [#9854](https://github.com/openshift/installer/pull/9854)
* [OCPEDGE-1994](https://issues.redhat.com/browse/OCPEDGE-1994): bump(ocp/api): pull in updated DualReplica [#9849](https://github.com/openshift/installer/pull/9849)
* [SPLAT-2295](https://issues.redhat.com/browse/SPLAT-2295): Setup additional disks via machine configs [#9706](https://github.com/openshift/installer/pull/9706)
* [OCPBUGS-59630](https://issues.redhat.com/browse/OCPBUGS-59630): Update RHCOS 4.20 bootimage metadata to 9.6.20250701-0 [#9844](https://github.com/openshift/installer/pull/9844)
* no-jira: images: bump images to go 1.24 [#9850](https://github.com/openshift/installer/pull/9850)
* [Full changelog](https://github.com/openshift/installer/compare/d9d80ceff69d9b2a00478cee678488f7c79c0a8c...5f4e6cdd114d77f0a7e6e18cdabba253c3149a65)
### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/a7d0035a144d5b51c1401426bbe7ce518f24f154)
* [METAL-1380](https://issues.redhat.com/browse/METAL-1380): Sync july 24 [#427](https://github.com/openshift/baremetal-operator/pull/427)
* [METAL-1238](https://issues.redhat.com/browse/METAL-1238): Add annotation to install metal3 CRDs in hypershift hosted clusters [#426](https://github.com/openshift/baremetal-operator/pull/426)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/1563591d664d4e1d777ee735fc16442143ead42f...a7d0035a144d5b51c1401426bbe7ce518f24f154)
### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/6553765e71c7f8d7db120af94473c9c0cb44d453)
* [CORS-4175](https://issues.redhat.com/browse/CORS-4175): Extend in-cluster DNS support to Azure [#366](https://github.com/openshift/baremetal-runtimecfg/pull/366)
* no-jira: Bump openshift/api version to bring updates to AzurePlatformStatus [#367](https://github.com/openshift/baremetal-runtimecfg/pull/367)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/e898adc576b343a214aff860e349f9bba3a125d4...6553765e71c7f8d7db120af94473c9c0cb44d453)
### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/31597edbaedc6d8d206deda350cfc93e89fa24bf)
* [OCPBUGS-60989](https://issues.redhat.com/browse/OCPBUGS-60989): pkg/cli/admin/release/info: Mention elided first-parent, non-merge commits [#2086](https://github.com/openshift/oc/pull/2086)
* [OCPBUGS-60877](https://issues.redhat.com/browse/OCPBUGS-60877): pkg/cli/admin/inspectalerts: Pass through --certificate-authority, etc. [#2083](https://github.com/openshift/oc/pull/2083)
* NO-JIRA: Remove mentioning about IRC channel in README [#2082](https://github.com/openshift/oc/pull/2082)
* [OTA-1601](https://issues.redhat.com/browse/OTA-1601): Better the Updating Cluster Operators table [#2077](https://github.com/openshift/oc/pull/2077)
* [OCPBUGS-58393](https://issues.redhat.com/browse/OCPBUGS-58393): oc login: Preserve ExecProvider on oc login -u [#2075](https://github.com/openshift/oc/pull/2075)
* [OCPBUGS-60281](https://issues.redhat.com/browse/OCPBUGS-60281): Fix panic in oc describe templateinstance when Secret is nil [#2073](https://github.com/openshift/oc/pull/2073)
* [OTA-1560](https://issues.redhat.com/browse/OTA-1560): pkg/cli/admin/upgrade: Promote 'recommend' to general availability [#2076](https://github.com/openshift/oc/pull/2076)
* NO-JIRA: Update containers/image and docker versions [#2067](https://github.com/openshift/oc/pull/2067)
* [OTA-1600](https://issues.redhat.com/browse/OTA-1600): pkg/cli/admin/upgrade/recommend: Don't error on unaccepted issues when the feature gate is off [#2069](https://github.com/openshift/oc/pull/2069)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/oc/compare/ea45cd5d407a1fc9805d051f3946e8a8fc1ca4da...31597edbaedc6d8d206deda350cfc93e89fa24bf)
### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/a83df44961ba2ca35d8e0cbda4b0cfad8db85988)
* NO-JIRA: docs: update sts migration to cause less service interruption [#903](https://github.com/openshift/cloud-credential-operator/pull/903)
* NO-JIRA: Add a badge in the repo's README file to auto-refresh the wiki weekly. [#898](https://github.com/openshift/cloud-credential-operator/pull/898)
* [OCPBUGS-34993](https://issues.redhat.com/browse/OCPBUGS-34993): ccoctl azure dnszone-resource-group-name now optional [#897](https://github.com/openshift/cloud-credential-operator/pull/897)
* [OCPBUGS-59889](https://issues.redhat.com/browse/OCPBUGS-59889): Add retry logic for Azure federated identity credential creation [#878](https://github.com/openshift/cloud-credential-operator/pull/878)
* [CCO-641](https://issues.redhat.com/browse/CCO-641): update dependencies [#887](https://github.com/openshift/cloud-credential-operator/pull/887)
* NO-JIRA: Drop lleshchi from OWNERS [#889](https://github.com/openshift/cloud-credential-operator/pull/889)
* [OCPBUGS-43783](https://issues.redhat.com/browse/OCPBUGS-43783): openstack: Set annotation even when credentials mode is unset [#873](https://github.com/openshift/cloud-credential-operator/pull/873)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d8b632d1e849eed62b8420b5a91e773897e78635...a83df44961ba2ca35d8e0cbda4b0cfad8db85988)
### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/11e57aa35590d3481288e09003c9109e0bfc62ce)
* NO-JIRA: Bump library go rm co dep [#782](https://github.com/openshift/cluster-authentication-operator/pull/782)
* [OCPBUGS-59909](https://issues.redhat.com/browse/OCPBUGS-59909): Don't cache server errors when checking for password grant support [#781](https://github.com/openshift/cluster-authentication-operator/pull/781)
* [CNTRLPLANE-5](https://issues.redhat.com/browse/CNTRLPLANE-5): Wire a feature-gates config observer for oauth-apiserver. [#773](https://github.com/openshift/cluster-authentication-operator/pull/773)
* [AUTH-543](https://issues.redhat.com/browse/AUTH-543): OIDC/OAuth resource configuration [#740](https://github.com/openshift/cluster-authentication-operator/pull/740)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/fcfc8c7403f55bfaff0b9b763ef10cce4504e0b8...11e57aa35590d3481288e09003c9109e0bfc62ce)
### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/d883d0e6dbb74f0839631ebc7a584669f0e955a3)
* [AUTOSCALE-242](https://issues.redhat.com/browse/AUTOSCALE-242), [AUTOSCALE-244](https://issues.redhat.com/browse/AUTOSCALE-244): 1.33.0 upstream rebase [#365](https://github.com/openshift/kubernetes-autoscaler/pull/365)
* [OCPBUGS-54231](https://issues.redhat.com/browse/OCPBUGS-54231): revert openshift replica fix [#369](https://github.com/openshift/kubernetes-autoscaler/pull/369)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/74faa33ea9c8ef8871b13d13574098f37b071fe9...d883d0e6dbb74f0839631ebc7a584669f0e955a3)
### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/147e5a7ff20b46ade7dd932b47e06ca82729f5e8)
* [AUTOSCALE-244](https://issues.redhat.com/browse/AUTOSCALE-244): Allow cluster-operator service account to patch machinesets/scale subresource [#352](https://github.com/openshift/cluster-autoscaler-operator/pull/352)
* [AUTOSCALE-244](https://issues.redhat.com/browse/AUTOSCALE-244): Prepare for 4.20 and fix missing volumeattachments rbac [#351](https://github.com/openshift/cluster-autoscaler-operator/pull/351)
* [AUTOSCALE-125](https://issues.redhat.com/browse/AUTOSCALE-125): newPodScaleUpDelay field for CA [#349](https://github.com/openshift/cluster-autoscaler-operator/pull/349)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/4eb64d55394024674a71c0241e0c45946e2721b1...147e5a7ff20b46ade7dd932b47e06ca82729f5e8)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/19d38730cbeb7e99a3f695aaf4bcb7d24d3c2db8)
* [METAL-1546](https://issues.redhat.com/browse/METAL-1546): Set privileged to true for ironic-proxy container so it works with ironic-image custom directories [#502](https://github.com/openshift/cluster-baremetal-operator/pull/502)
* [METAL-1508](https://issues.redhat.com/browse/METAL-1508): Change deprecated pointer to ptr [#495](https://github.com/openshift/cluster-baremetal-operator/pull/495)
* [OCPBUGS-53392](https://issues.redhat.com/browse/OCPBUGS-53392): Remove webhookport (9447) as HostPort [#496](https://github.com/openshift/cluster-baremetal-operator/pull/496)
* [METAL-1238](https://issues.redhat.com/browse/METAL-1238): Enable CBO to run on hosted clusters [#494](https://github.com/openshift/cluster-baremetal-operator/pull/494)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/c6838e2773d0ad22539da7c177470f7e02ac1466...19d38730cbeb7e99a3f695aaf4bcb7d24d3c2db8)
### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/fdbaa2d6abd118bcd1711619be2413ba9d448041)
* [OCPCLOUD-2871](https://issues.redhat.com/browse/OCPCLOUD-2871): Machine conversion for the delete-machine annotation and unit tests [#347](https://github.com/openshift/cluster-capi-operator/pull/347)
* [OCPCLOUD-2711](https://issues.redhat.com/browse/OCPCLOUD-2711): Implement VAP to prevent usage of unsupported AWSMachineSpec fields [#333](https://github.com/openshift/cluster-capi-operator/pull/333)
* NO-JIRA: lint: Replace tenv with usetesting [#346](https://github.com/openshift/cluster-capi-operator/pull/346)
* [OSASINFRA-3690](https://issues.redhat.com/browse/OSASINFRA-3690), [OSASINFRA-3691](https://issues.redhat.com/browse/OSASINFRA-3691): Add OpenStack CAPI-MAPI translation layer [#188](https://github.com/openshift/cluster-capi-operator/pull/188)
* NO-JIRA: Improve ergonomics of running tests [#342](https://github.com/openshift/cluster-capi-operator/pull/342)
* [OCPBUGS-57195](https://issues.redhat.com/browse/OCPBUGS-57195): Fix infra machine template deletion [#326](https://github.com/openshift/cluster-capi-operator/pull/326)
* [OCPCLOUD-2992](https://issues.redhat.com/browse/OCPCLOUD-2992): migration e2e for creating machine with authoritativeAPI ClusterAPI [#320](https://github.com/openshift/cluster-capi-operator/pull/320)
* [OCPCLOUD-2566](https://issues.redhat.com/browse/OCPCLOUD-2566): Adds MAPI Machine VAP and test suites [#321](https://github.com/openshift/cluster-capi-operator/pull/321)
* [OCPCLOUD-2916](https://issues.redhat.com/browse/OCPCLOUD-2916): Bump to CAPI v1.10, k8s v1.33, go 1.24 [#341](https://github.com/openshift/cluster-capi-operator/pull/341)
* NO-JIRA: Get openshift/api directory from packages [#339](https://github.com/openshift/cluster-capi-operator/pull/339)
* [OCPCLOUD-2979](https://issues.redhat.com/browse/OCPCLOUD-2979): ingress network policy for metrics [#325](https://github.com/openshift/cluster-capi-operator/pull/325)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/4d38875915e7cbf1faba452ea5cfcc9bba43c9fb...fdbaa2d6abd118bcd1711619be2413ba9d448041)
### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/e355ad389d1d09be1a83f024f54b15e844982d0a)
* [OCPBUGS-59251](https://issues.redhat.com/browse/OCPBUGS-59251): Default cloud.conf if no configmap is found [#404](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/404)
* [OCPBUGS-53300](https://issues.redhat.com/browse/OCPBUGS-53300): Adds service for cloud-controller-manager [#399](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/399)
* [OCPCLOUD-2940](https://issues.redhat.com/browse/OCPCLOUD-2940): Update dependencies for Kubernetes 1.33 [#396](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/396)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/403967c7715caf5300ca98042c2d0405afd3cc4a...e355ad389d1d09be1a83f024f54b15e844982d0a)
### [cluster-config-api](https://github.com/openshift/api/tree/4a165b214722ff53fbdac1d250f62d4b0bb2bd3d)
* [AGENT-1262](https://issues.redhat.com/browse/AGENT-1262): set NoRegistryClusterOperations as techPreviewNoUpgrade [#2432](https://github.com/openshift/api/pull/2432)
* machineconfiguration/OWNERS: Drop me [#2446](https://github.com/openshift/api/pull/2446)
* [OTA-923](https://issues.redhat.com/browse/OTA-923): Promote `ClusterVersionOperatorConfiguration` to TechPreview [#2457](https://github.com/openshift/api/pull/2457)
* [OCPNODE-3121](https://issues.redhat.com/browse/OCPNODE-3121): Graduate ImageVolume to GA [#2453](https://github.com/openshift/api/pull/2453)
* [STOR-2549](https://issues.redhat.com/browse/STOR-2549): Move StoragePerformantSecurityPolicy GA [#2456](https://github.com/openshift/api/pull/2456)
* [OTA-1580](https://issues.redhat.com/browse/OTA-1580): Promote `UpgradeStatus` to Default [#2418](https://github.com/openshift/api/pull/2418)
* [CORS-4184](https://issues.redhat.com/browse/CORS-4184): Add STS IAMCredentials and OAuth Service for GCP Endpoint Overrides [#2444](https://github.com/openshift/api/pull/2444)
* OWNERS: update approvers/reviewers [#2455](https://github.com/openshift/api/pull/2455)
* OCPBUGS-58212 Remove InsightsRuntimeExtractor Feature gate [#2419](https://github.com/openshift/api/pull/2419)
* [OCPNODE-3187](https://issues.redhat.com/browse/OCPNODE-3187): Promote SigstoreVerificatoin to Default [#2340](https://github.com/openshift/api/pull/2340)
* [OCPBUGS-55665](https://issues.redhat.com/browse/OCPBUGS-55665): Remove featuregate ChunkSizeMib [#2438](https://github.com/openshift/api/pull/2438)
* Fix feature promotion check single node variant name [#2445](https://github.com/openshift/api/pull/2445)
* [OCPBUGS-54287](https://issues.redhat.com/browse/OCPBUGS-54287): MachineOSConfig name should match MachineConfigPool [#2399](https://github.com/openshift/api/pull/2399)
* [MCO-1744](https://issues.redhat.com/browse/MCO-1744): Add knobs to allow irreconcilable changes [#2433](https://github.com/openshift/api/pull/2433)
* Update KAL to support new guidance on required and optional fields [#2440](https://github.com/openshift/api/pull/2440)
* Remove OnClusterBuild fg [#2437](https://github.com/openshift/api/pull/2437)
* [CNTRLPLANE-368](https://issues.redhat.com/browse/CNTRLPLANE-368): improve OIDC field validations for Authentication resources [#2409](https://github.com/openshift/api/pull/2409)
* [STOR-2481](https://issues.redhat.com/browse/STOR-2481): Promote SELinuxMount feature gate [#2426](https://github.com/openshift/api/pull/2426)
* Add new ImageBuildDegraded status option for MCO [#2439](https://github.com/openshift/api/pull/2439)
* [OCPEDGE-1945](https://issues.redhat.com/browse/OCPEDGE-1945): feat: promote HighlyAvailableArbiter feature to default [#2401](https://github.com/openshift/api/pull/2401)
* [OCPNODE-3006](https://issues.redhat.com/browse/OCPNODE-3006): add back SigstoreImageVerification to techPreview [#2406](https://github.com/openshift/api/pull/2406)
* [MCO-1759](https://issues.redhat.com/browse/MCO-1759): Add NonReconcilableMC Feature Gate [#2429](https://github.com/openshift/api/pull/2429)
* Update crd-schema.json to release 1.33 branch [#2436](https://github.com/openshift/api/pull/2436)
* Update KAL to include omitzero functionality on optional fields [#2431](https://github.com/openshift/api/pull/2431)
* [OCPNODE-3372](https://issues.redhat.com/browse/OCPNODE-3372): Update defaultRuntime doc to show options and set default to crun [#2370](https://github.com/openshift/api/pull/2370)
* [CORS-4155](https://issues.redhat.com/browse/CORS-4155): Add Feature gate and update Infrastructure CR for Azure Cluster Hosted DNS [#2404](https://github.com/openshift/api/pull/2404)
* [SPLAT-2346](https://issues.redhat.com/browse/SPLAT-2346): Moving VSphereMultiDisk FeatureGate to GA [#2428](https://github.com/openshift/api/pull/2428)
* features: add installer replacement feature gates [#2423](https://github.com/openshift/api/pull/2423)
* [Full changelog](https://github.com/openshift/api/compare/92b1455121e199fa2f3eb937ce9b68f910cb14e2...4a165b214722ff53fbdac1d250f62d4b0bb2bd3d)
### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/657754e2beaed6295ff28bb0f7813cb1c9ce35b2)
* [CNTRLPLANE-1311](https://issues.redhat.com/browse/CNTRLPLANE-1311): set up openshift-tests-extension of cluster-config-operator and add a sanity test [#448](https://github.com/openshift/cluster-config-operator/pull/448)
* [OCPEDGE-1970](https://issues.redhat.com/browse/OCPEDGE-1970): bump(ocp/api): pull in HighlyAvailableArbiter promotion [#446](https://github.com/openshift/cluster-config-operator/pull/446)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/63165d1871a5b1b8c0e75814a376e3e26d46b15b...657754e2beaed6295ff28bb0f7813cb1c9ce35b2)
### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/0bbafe24ade564bc62554251f36de90d524abcde)
* [OCPBUGS-52448](https://issues.redhat.com/browse/OCPBUGS-52448): Remove gathering of failure domains from machine sets [#356](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/356)
* [OCPBUGS-59919](https://issues.redhat.com/browse/OCPBUGS-59919): Prevent activation of CPMS with deletionTimestamp [#364](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/364)
* [OCPBUGS-59919](https://issues.redhat.com/browse/OCPBUGS-59919): Fix authoritativeAPI recreate loop [#365](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/365)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/5e1d02807e7cdd3cc3a471b7816d159456f71a09...0bbafe24ade564bc62554251f36de90d524abcde)
### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/3880c9659829c9904e58a943050e8dfd4c9a79cb)
* [CNTRLPLANE-385](https://issues.redhat.com/browse/CNTRLPLANE-385): enable readonly root filesystem [#242](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/242)
* [OCPBUGS-60242](https://issues.redhat.com/browse/OCPBUGS-60242): Use protobuf when connecting to kube client [#217](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/217)
* [STOR-2465](https://issues.redhat.com/browse/STOR-2465): Add ExternalSnapshotMetadata CRD [#239](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/239)
* [STOR-2394](https://issues.redhat.com/browse/STOR-2394): Bump all deps for 4.20 [#240](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/240)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/ef2152f52b992addcbe24b402f1ddbf180049d85...3880c9659829c9904e58a943050e8dfd4c9a79cb)
### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/82578923164636746e0d74d594ab32d83a660c0b)
* [OCPBUGS-59781](https://issues.redhat.com/browse/OCPBUGS-59781): Read only root filesystem [#445](https://github.com/openshift/cluster-dns-operator/pull/445)
* [OCPBUGS-59781](https://issues.redhat.com/browse/OCPBUGS-59781): Read only root filesystem [#439](https://github.com/openshift/cluster-dns-operator/pull/439)
* NO-JIRA: Add rikatz to OWNERS [#442](https://github.com/openshift/cluster-dns-operator/pull/442)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/48ebc1269caad1e9ec7f422b24f3bccbe134d0c4...82578923164636746e0d74d594ab32d83a660c0b)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/9091149b9060f8c45a925d8e7add781f49ba827f)
* [OCPBUGS-60941](https://issues.redhat.com/browse/OCPBUGS-60941): add individual context to the health check [#1474](https://github.com/openshift/cluster-etcd-operator/pull/1474)
* [OCPBUGS-60237](https://issues.redhat.com/browse/OCPBUGS-60237): Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace [#1471](https://github.com/openshift/cluster-etcd-operator/pull/1471)
* [OCPBUGS-60522](https://issues.redhat.com/browse/OCPBUGS-60522): Set terminationMessagePolicy to FallbackToLogsOnError on TNF job pods [#1468](https://github.com/openshift/cluster-etcd-operator/pull/1468)
* [OCPBUGS-60547](https://issues.redhat.com/browse/OCPBUGS-60547): Revert "Vendor latest mixin, including additional and modified alerts for `etcdDatabaseQuotaLowSpace`" [#1469](https://github.com/openshift/cluster-etcd-operator/pull/1469)
* NO-JIRA: Add more unit tests for JobController [#1459](https://github.com/openshift/cluster-etcd-operator/pull/1459)
* [OCPEDGE-1998](https://issues.redhat.com/browse/OCPEDGE-1998): TNF: Use `pcmk_delay_base` on 1st fence device to prevent fencing races [#1463](https://github.com/openshift/cluster-etcd-operator/pull/1463)
* [OCPBUGS-60237](https://issues.redhat.com/browse/OCPBUGS-60237): Vendor latest mixin, including additional and modified alerts for `etcdDatabaseQuotaLowSpace` [#1464](https://github.com/openshift/cluster-etcd-operator/pull/1464)
* NO-JIRA: hack/generate.sh provides helpful errors when missing tools [#1465](https://github.com/openshift/cluster-etcd-operator/pull/1465)
* NO-JIRA: create dedicated cluster-wide informer [#1457](https://github.com/openshift/cluster-etcd-operator/pull/1457)
* [ETCD-590](https://issues.redhat.com/browse/ETCD-590): start to refactor the probe injection [#1456](https://github.com/openshift/cluster-etcd-operator/pull/1456)
* [OCPBUGS-57859](https://issues.redhat.com/browse/OCPBUGS-57859): Updating cluster-etcd-operator-container image to be consistent with ART for 4.20 [#1452](https://github.com/openshift/cluster-etcd-operator/pull/1452)
* NO-JIRA: Migrate bindata to go:embed [#1445](https://github.com/openshift/cluster-etcd-operator/pull/1445)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/bc2e679a659feb9882ff156a27cdf980a22fea17...9091149b9060f8c45a925d8e7add781f49ba827f)
### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/b04c7c121851704973a94a50e42af1425045899c)
* [OCPBUGS-59734](https://issues.redhat.com/browse/OCPBUGS-59734): fix(azure): resolve credential caching issues around UAMI support [#1238](https://github.com/openshift/cluster-image-registry-operator/pull/1238)
* [OSASINFRA-3756](https://issues.redhat.com/browse/OSASINFRA-3756): Add support for token-based authentication in clouds.yaml configuration file [#1221](https://github.com/openshift/cluster-image-registry-operator/pull/1221)
* [OCPBUGS-58424](https://issues.redhat.com/browse/OCPBUGS-58424): mount /etc/pki/ca-trust/extracted/pem/ as empty dir [#1239](https://github.com/openshift/cluster-image-registry-operator/pull/1239)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/b06a3d85da414f3dc0f7044c3609a9e95e7257e1...b04c7c121851704973a94a50e42af1425045899c)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/2371120eedb27049160c70859ef9972a7599c7e3)
* [OCPBUGS-53432](https://issues.redhat.com/browse/OCPBUGS-53432): deflake TestIngressControllerCustomEndpoints by proper waiting for CCM to be ready [#1267](https://github.com/openshift/cluster-ingress-operator/pull/1267)
* [OCPBUGS-59139](https://issues.redhat.com/browse/OCPBUGS-59139): Increase assertExpectedDNSRecords timeouts [#1271](https://github.com/openshift/cluster-ingress-operator/pull/1271)
* [NE-2066](https://issues.redhat.com/browse/NE-2066): Set degraded=true when OSSM 3 can't be installed [#1268](https://github.com/openshift/cluster-ingress-operator/pull/1268)
* [OCPBUGS-60620](https://issues.redhat.com/browse/OCPBUGS-60620): e2e: Deflake tests by using ReplicaSet for test workload [#1262](https://github.com/openshift/cluster-ingress-operator/pull/1262)
* [OCPBUGS-54966](https://issues.redhat.com/browse/OCPBUGS-54966): Improve detection of missing DNSRecord for Gateway [#1212](https://github.com/openshift/cluster-ingress-operator/pull/1212)
* [OCPBUGS-60302](https://issues.redhat.com/browse/OCPBUGS-60302): e2e - Reduce flakiness in testGatewayAPIResourcesProtection [#1265](https://github.com/openshift/cluster-ingress-operator/pull/1265)
* [NE-2096](https://issues.redhat.com/browse/NE-2096): Bump to OSSM 3.1.0 and Istio 1.26.2 [#1257](https://github.com/openshift/cluster-ingress-operator/pull/1257)
* NO-JIRA: Add rikatz to OWNERS [#1259](https://github.com/openshift/cluster-ingress-operator/pull/1259)
* [OCPBUGS-59894](https://issues.redhat.com/browse/OCPBUGS-59894): Update GatewayAPI test to check if deployment has 1 or more pod [#1250](https://github.com/openshift/cluster-ingress-operator/pull/1250)
* [NE-2108](https://issues.redhat.com/browse/NE-2108): docs - correct Istio version format in ossm-overrides.md [#1253](https://github.com/openshift/cluster-ingress-operator/pull/1253)
* [NE-2108](https://issues.redhat.com/browse/NE-2108): Add OSSM channel and version override annotations [#1246](https://github.com/openshift/cluster-ingress-operator/pull/1246)
* [NE-2104](https://issues.redhat.com/browse/NE-2104): desiredIstio: Enable GIE if InferencePool found [#1245](https://github.com/openshift/cluster-ingress-operator/pull/1245)
* [OCPBUGS-59839](https://issues.redhat.com/browse/OCPBUGS-59839): desiredIstio: Delete trustBundleName [#1243](https://github.com/openshift/cluster-ingress-operator/pull/1243)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/4f1ed7fc112e57a1f45c9b5948c3d14d017ddabc...2371120eedb27049160c70859ef9972a7599c7e3)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/0bec046c8c10682390e2a20ae4f416a2d8589f40)
* Revert "OCPBUGS-57049: certrotation: move test case name outside of AutoRegenerateAfterOfflineExpiry" [#1907](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1907)
* [OCPBUGS-57049](https://issues.redhat.com/browse/OCPBUGS-57049): certrotation: move test case name outside of AutoRegenerateAfterOfflineExpiry [#1870](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1870)
* [CNTRLPLANE-1248](https://issues.redhat.com/browse/CNTRLPLANE-1248): Add README to test extension [#1904](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1904)
* [OCPBUGS-60628](https://issues.redhat.com/browse/OCPBUGS-60628): certrotation: ensure that all rotated secrets/configmaps have RefreshOnlyWhenExpired set [#1900](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1900)
* [CNTRLPLANE-1248](https://issues.redhat.com/browse/CNTRLPLANE-1248): Standardized scaffolding for tests extension [#1899](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1899)
* [RFE-4153](https://issues.redhat.com/browse/RFE-4153): enabled readonly filesystem [#1864](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1864)
* Revert "Revert "OCPBUGS-56551: certregenerationcontroller: start configInformers again"" [#1891](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1891)
* [CNTRLPLANE-1248](https://issues.redhat.com/browse/CNTRLPLANE-1248): set up openshift-tests-extension and add a sanity test [#1892](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1892)
* [OCPBUGS-55217](https://issues.redhat.com/browse/OCPBUGS-55217): Optimistically update Kube Server and Client CA bundles [#1812](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1812)
* [OCPBUGS-59527](https://issues.redhat.com/browse/OCPBUGS-59527): certrotationcontroller: extend node-system-admin-signer lifetime [#1872](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1872)
* [OCPBUGS-59626](https://issues.redhat.com/browse/OCPBUGS-59626): operator: don't react to events all namespaces [#1874](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1874)
* [OCPNODE-2559](https://issues.redhat.com/browse/OCPNODE-2559): SCC: add nested-podman and restricted-v3 [#1847](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1847)
* NO-JIRA: Add negative tests of GOAWAY-chance [#1882](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1882)
* [OCPBUGS-44842](https://issues.redhat.com/browse/OCPBUGS-44842): Set not-before/not-after annotations [#1873](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1873)
* [OCPBUGS-50489](https://issues.redhat.com/browse/OCPBUGS-50489): Add missing service ports to apiserver service [#1875](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1875)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/2a82fec138d1d868e4bfa6f4ded847032b2bfc24...0bec046c8c10682390e2a20ae4f416a2d8589f40)
### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/7030e7353408e83096a285404700c573273c25c8)
* [CNTRLPLANE-1275](https://issues.redhat.com/browse/CNTRLPLANE-1275): Add JUnit reporter configuration and README for OTE [#863](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/863)
* [CNTRLPLANE-1275](https://issues.redhat.com/browse/CNTRLPLANE-1275): set up openshift-tests-extension and add a sanity test [#859](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/859)
* [OCPBUGS-60473](https://issues.redhat.com/browse/OCPBUGS-60473): Optimistically update Kube Server and Client CA bundles [#854](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/854)
* [RFE-4154](https://issues.redhat.com/browse/RFE-4154): Remove readOnlyRootFilesystem from KCM container [#856](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/856)
* NO-JIRA: targetconfigcontroller: set description for csr-controller-ca [#851](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/851)
* [OCPBUGS-53290](https://issues.redhat.com/browse/OCPBUGS-53290): Missing endpoint slices for open ports the operator uses [#848](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/848)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/1fe366437ec22945f63739ec9b914191c6e98ecf...7030e7353408e83096a285404700c573273c25c8)
### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/656c8043ce6176f6c92ebaad4fb265c4f6d2005b)
* [CNTRLPLANE-1306](https://issues.redhat.com/browse/CNTRLPLANE-1306): set up openshift-tests-extension and add a sanity test [#126](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/126)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/436cf8575fc51e15d4aee5191ddff0a34c58b8d4...656c8043ce6176f6c92ebaad4fb265c4f6d2005b)
### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/ce2750589129dd20b3d1b6a5e7bb8c392d658c5c)
* NO-JIRA: Fix some lints and nits [#273](https://github.com/openshift/cluster-machine-approver/pull/273)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/bbb4a5d2b87ecf99962f71521cf9b318f381f3ca...ce2750589129dd20b3d1b6a5e7bb8c392d658c5c)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/a5a091be0db37c5969e0534980f38cc90524dda5)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2654](https://github.com/openshift/cluster-monitoring-operator/pull/2654)
* NO-JIRA: chore: drop check for AlertmanagerV1 [#2650](https://github.com/openshift/cluster-monitoring-operator/pull/2650)
* [OCPBUGS-56158](https://issues.redhat.com/browse/OCPBUGS-56158): Bump prometheus-operator to v0.85.0 [#2652](https://github.com/openshift/cluster-monitoring-operator/pull/2652)
* [OCPBUGS-34568](https://issues.redhat.com/browse/OCPBUGS-34568), [OCPBUGS-35095](https://issues.redhat.com/browse/OCPBUGS-35095), [OCPBUGS-60689](https://issues.redhat.com/browse/OCPBUGS-60689), [OCPBUGS-60691](https://issues.redhat.com/browse/OCPBUGS-60691), [OCPBUGS-60692](https://issues.redhat.com/browse/OCPBUGS-60692): non-HA alert cases [#2630](https://github.com/openshift/cluster-monitoring-operator/pull/2630)
* [OCPBUGS-58475](https://issues.redhat.com/browse/OCPBUGS-58475): Enforce secure TLS settings in CMO server [#2647](https://github.com/openshift/cluster-monitoring-operator/pull/2647)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2642](https://github.com/openshift/cluster-monitoring-operator/pull/2642)
* [MON-4312](https://issues.redhat.com/browse/MON-4312): Adding new accelerator to the accelerator configmap [#2636](https://github.com/openshift/cluster-monitoring-operator/pull/2636)
* [MON-4318](https://issues.redhat.com/browse/MON-4318): Add debug image manifest to CMO [#2623](https://github.com/openshift/cluster-monitoring-operator/pull/2623)
* [OCPBUGS-60221](https://issues.redhat.com/browse/OCPBUGS-60221): remove `managed_cluster` from reserved external labels [#2641](https://github.com/openshift/cluster-monitoring-operator/pull/2641)
* NO-JIRA: Use label matchers for Rules API in prom-label-proxy [#2640](https://github.com/openshift/cluster-monitoring-operator/pull/2640)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2639](https://github.com/openshift/cluster-monitoring-operator/pull/2639)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2620](https://github.com/openshift/cluster-monitoring-operator/pull/2620)
* [MON-4299](https://issues.redhat.com/browse/MON-4299): chore(thanos): replace CLI args that will disappear in future versions [#2626](https://github.com/openshift/cluster-monitoring-operator/pull/2626)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/d59e2663447ec0c042a7454da49d9779ba00cd44...a5a091be0db37c5969e0534980f38cc90524dda5)
### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/746b8fb86171dfc75011a7b8db29de5c2355d848)
* [OCPBUGS-57815](https://issues.redhat.com/browse/OCPBUGS-57815): Updating cluster-network-operator-container image to be consistent with ART for 4.20 [#2728](https://github.com/openshift/cluster-network-operator/pull/2728)
* [CORENET-6092](https://issues.redhat.com/browse/CORENET-6092), [CORENET-6130](https://issues.redhat.com/browse/CORENET-6130), [CORENET-6261](https://issues.redhat.com/browse/CORENET-6261): Implement PreconfiguredUDNAddresses API changes [#2743](https://github.com/openshift/cluster-network-operator/pull/2743)
* [MGMT-21485](https://issues.redhat.com/browse/MGMT-21485): Enable dpu-host mode that matches DPF requirements [#2778](https://github.com/openshift/cluster-network-operator/pull/2778)
* [CORENET-6276](https://issues.redhat.com/browse/CORENET-6276): Use priorityClass from HostedControlPlane for OVN and NNI [#2769](https://github.com/openshift/cluster-network-operator/pull/2769)
* [CORENET-6290](https://issues.redhat.com/browse/CORENET-6290): Restrict access to mounted secrets in ovnkube-control-plane [#2774](https://github.com/openshift/cluster-network-operator/pull/2774)
* [OCPBUGS-55962](https://issues.redhat.com/browse/OCPBUGS-55962): Allow overriding OVN-Kubernetes configuration [#2752](https://github.com/openshift/cluster-network-operator/pull/2752)
* [OCPBUGS-60264](https://issues.redhat.com/browse/OCPBUGS-60264): Fix multus webhook match condition for spec changes [#2772](https://github.com/openshift/cluster-network-operator/pull/2772)
* [MGMT-20706](https://issues.redhat.com/browse/MGMT-20706): fix DPU host mode support for OVN templates [#2740](https://github.com/openshift/cluster-network-operator/pull/2740)
* [CORENET-6279](https://issues.redhat.com/browse/CORENET-6279): ovn-k, virt: update IPAMClaim CRD [#2770](https://github.com/openshift/cluster-network-operator/pull/2770)
* [CORENET-6247](https://issues.redhat.com/browse/CORENET-6247): Set runAsUser for ovnkube-control-plane [#2757](https://github.com/openshift/cluster-network-operator/pull/2757)
* [CORENET-5957](https://issues.redhat.com/browse/CORENET-5957): Rebase k8s to 1.33 [#2723](https://github.com/openshift/cluster-network-operator/pull/2723)
* NO-JIRA: Update CNO reviewers/approvers [#2756](https://github.com/openshift/cluster-network-operator/pull/2756)
* [CORENET-6228](https://issues.redhat.com/browse/CORENET-6228): Allow network-node-identity to be enabled for IBMCloud PlatformType [#2755](https://github.com/openshift/cluster-network-operator/pull/2755)
* NO-JIRA: remove PersistentIPsForVirt FG [#2759](https://github.com/openshift/cluster-network-operator/pull/2759)
* [CORENET-6127](https://issues.redhat.com/browse/CORENET-6127): ovn-k: Enable OVN-K feature when PreconfiguredUDNAddresses is enabled [#2734](https://github.com/openshift/cluster-network-operator/pull/2734)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/bf88d53a057607fb16db6641d49a6f2285b965d4...746b8fb86171dfc75011a7b8db29de5c2355d848)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/3d783ea383b32296c2b75872e587f24c896e9418)
* [OCPBUGS-41219](https://issues.redhat.com/browse/OCPBUGS-41219): Only enable timer.migration on RT kernel (#1384) [#1384](https://github.com/openshift/cluster-node-tuning-operator/pull/1384)
* [OCPBUGS-60838](https://issues.redhat.com/browse/OCPBUGS-60838): e2e: arm: add validation tests for hugepages with 4k and 64k kernelPageSize (#1363) [#1363](https://github.com/openshift/cluster-node-tuning-operator/pull/1363)
* [OCPBUGS-60461](https://issues.redhat.com/browse/OCPBUGS-60461): E2E: llc test fix: Get updated Performance profile before modifying (#1373) [#1373](https://github.com/openshift/cluster-node-tuning-operator/pull/1373)
* Fix hack/update-codegen.sh (#1379) [#1379](https://github.com/openshift/cluster-node-tuning-operator/pull/1379)
* E2E: RPS: avoid multiple profile updates (#1378) [#1378](https://github.com/openshift/cluster-node-tuning-operator/pull/1378)
* Return 401 Unauthorized without client cert (#1377) [#1377](https://github.com/openshift/cluster-node-tuning-operator/pull/1377)
* E2E: skip stalld test case checking sched_fifo (#1374) [#1374](https://github.com/openshift/cluster-node-tuning-operator/pull/1374)
* Bump vendor dependencies (#1367) [#1367](https://github.com/openshift/cluster-node-tuning-operator/pull/1367)
* [CNF-16638](https://issues.redhat.com/browse/CNF-16638): Disable RPS by default (#1370) [#1370](https://github.com/openshift/cluster-node-tuning-operator/pull/1370)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/62f34eb180c5cdc47eb1163a1399d359a03edb3c...3d783ea383b32296c2b75872e587f24c896e9418)
### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/9cfa5679a8ac1e5a68eea32179d9e069da85dfcf)
* [CNTRLPLANE-1257](https://issues.redhat.com/browse/CNTRLPLANE-1257): Add README to test extension [#624](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/624)
* [CNTRLPLANE-1257](https://issues.redhat.com/browse/CNTRLPLANE-1257): set up openshift-tests-extension and add a sanity test [#623](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/623)
* : NO-JIRA: Bump to Go 1.24 and k8s 1.33 [#620](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/620)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/6867bc1cff74ab2305a19a51f6e0bf1cff1a5954...9cfa5679a8ac1e5a68eea32179d9e069da85dfcf)
### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/62b3623c6a2860e7a8cc368dbe76e767508cd261)
* [OCPBUGS-60665](https://issues.redhat.com/browse/OCPBUGS-60665): Periodic sync of supported OCP samples [#646](https://github.com/openshift/cluster-samples-operator/pull/646)
* [OCPBUGS-60606](https://issues.redhat.com/browse/OCPBUGS-60606): Periodic sync of OKD samples - Return to Open Liberty 25.0.0.3 to fix failing tests [#649](https://github.com/openshift/cluster-samples-operator/pull/649)
* [OCPBUGS-59325](https://issues.redhat.com/browse/OCPBUGS-59325): Periodic sync of OKD samples [#630](https://github.com/openshift/cluster-samples-operator/pull/630)
* [OCPBUGS-60179](https://issues.redhat.com/browse/OCPBUGS-60179): Bump Kubernetes Version to v0.33.3 [#644](https://github.com/openshift/cluster-samples-operator/pull/644)
* [OCPBUGS-60179](https://issues.redhat.com/browse/OCPBUGS-60179): Bump Kubernetes Version to v0.33.3 - update Dockerfile.okd [#645](https://github.com/openshift/cluster-samples-operator/pull/645)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/1c345f6a8d58827377937bbfbd7275997982ad87...62b3623c6a2860e7a8cc368dbe76e767508cd261)
### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/cdc7ef8a7ec6af399c10606037cfb9f631dddc23)
* [OCPBUGS-60948](https://issues.redhat.com/browse/OCPBUGS-60948): Rename the SELinuxMount metric to :count [#609](https://github.com/openshift/cluster-storage-operator/pull/609)
* [STOR-1064](https://issues.redhat.com/browse/STOR-1064): add volume-data-source-validator controller [#592](https://github.com/openshift/cluster-storage-operator/pull/592)
* [STOR-2576](https://issues.redhat.com/browse/STOR-2576): Collect overall SELinux warning controller metrics [#608](https://github.com/openshift/cluster-storage-operator/pull/608)
* [STOR-2463](https://issues.redhat.com/browse/STOR-2463): add csi-external-snapshot-metadata to image-references [#606](https://github.com/openshift/cluster-storage-operator/pull/606)
* [STOR-2549](https://issues.redhat.com/browse/STOR-2549): Remove TP label from VAP files [#607](https://github.com/openshift/cluster-storage-operator/pull/607)
* [STOR-2330](https://issues.redhat.com/browse/STOR-2330): Add labels to subscribe ibm-powervs-block CSI driver operator to NPs [#600](https://github.com/openshift/cluster-storage-operator/pull/600)
* [STOR-2370](https://issues.redhat.com/browse/STOR-2370): Add e2e storage performant policy [#593](https://github.com/openshift/cluster-storage-operator/pull/593)
* [STOR-2330](https://issues.redhat.com/browse/STOR-2330): Add labels to subscribe ibm-vpc-block CSI driver operator to NPs [#599](https://github.com/openshift/cluster-storage-operator/pull/599)
* [OCPBUGS-60064](https://issues.redhat.com/browse/OCPBUGS-60064): hypershift: add app label to csdriveroperators running in HCP [#603](https://github.com/openshift/cluster-storage-operator/pull/603)
* [STOR-2330](https://issues.redhat.com/browse/STOR-2330): Add labels to subscribe openstack cinder and manila CSI driver operators to NPs [#601](https://github.com/openshift/cluster-storage-operator/pull/601)
* [STOR-2330](https://issues.redhat.com/browse/STOR-2330): Add RBAC rule to let ibm-vpc-block-csi-driver-operator manage NetworkPolicy [#602](https://github.com/openshift/cluster-storage-operator/pull/602)
* [STOR-2394](https://issues.redhat.com/browse/STOR-2394): Bump all deps for 4.20 [#598](https://github.com/openshift/cluster-storage-operator/pull/598)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/ec7aee5e41122d7e2f3b2b718b900ba2358d6ec1...cdc7ef8a7ec6af399c10606037cfb9f631dddc23)
### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/c40e7b9b60c62690a25333fc54ae0d3705474afb)
* Revert "OCPNODE-3611: manifests.rhel/0000_90_openshift-cluster-image-policy: Drop TechPreviewNoUpgrade limitation" [#83](https://github.com/openshift/cluster-update-keys/pull/83)
* [OCPNODE-3611](https://issues.redhat.com/browse/OCPNODE-3611): manifests.rhel/0000_90_openshift-cluster-image-policy: Drop TechPreviewNoUpgrade limitation [#82](https://github.com/openshift/cluster-update-keys/pull/82)
* [OCPNODE-3006](https://issues.redhat.com/browse/OCPNODE-3006): OCPBUGS-59860: OpenShift verification uses v1 CRD [#74](https://github.com/openshift/cluster-update-keys/pull/74)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/ffb3f0ae6774cfeb2dc50db7c71aaff4f37d75d0...c40e7b9b60c62690a25333fc54ae0d3705474afb)
### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/9de00ba8fb8330b3a1b440396dc2c5dbe974119b)
* [OCPBUGS-57585](https://issues.redhat.com/browse/OCPBUGS-57585): CVO protects /metrics with authorization [#1215](https://github.com/openshift/cluster-version-operator/pull/1215)
* [OTA-1480](https://issues.redhat.com/browse/OTA-1480): Add readonlyRootFilesystem [#1208](https://github.com/openshift/cluster-version-operator/pull/1208)
* NO-JIRA: Generate junitfile for unit tests [#1217](https://github.com/openshift/cluster-version-operator/pull/1217)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/827d841265004e5bf6b0c21cb19870acb91f23ec...9de00ba8fb8330b3a1b440396dc2c5dbe974119b)
### [console](https://github.com/openshift/console/tree/17d2383eac889752a233de290293ee93de2a6da4)
* [OCPBUGS-52165](https://issues.redhat.com/browse/OCPBUGS-52165), [OCPBUGS-60753](https://issues.redhat.com/browse/OCPBUGS-60753): Fix issues with Raw/Download in resource logs page [#15436](https://github.com/openshift/console/pull/15436)
* NO-JIRA: Remove Lucifergene from Code Reviewers List [#15449](https://github.com/openshift/console/pull/15449)
* [CONSOLE-4607](https://issues.redhat.com/browse/CONSOLE-4607): Drop createModalLauncher from knative-plugin and use useOverlay hook instead [#15349](https://github.com/openshift/console/pull/15349)
* [ODC-7803](https://issues.redhat.com/browse/ODC-7803): Adjust `MAX_UPLOAD_SIZE` formula [#15428](https://github.com/openshift/console/pull/15428)
* [OCPBUGS-56091](https://issues.redhat.com/browse/OCPBUGS-56091): fix log line overlap when Wrap lines is enabled [#15426](https://github.com/openshift/console/pull/15426)
* [CONSOLE-4661](https://issues.redhat.com/browse/CONSOLE-4661): Fix double scrollbar [#15427](https://github.com/openshift/console/pull/15427)
* [CONSOLE-4235](https://issues.redhat.com/browse/CONSOLE-4235): Update Xterm.js CSS [#15425](https://github.com/openshift/console/pull/15425)
* [CONSOLE-4647](https://issues.redhat.com/browse/CONSOLE-4647): Refactor removeVolume action to use RemoveVolumeModal hook launcher [#15230](https://github.com/openshift/console/pull/15230)
* [CONSOLE-4661](https://issues.redhat.com/browse/CONSOLE-4661): Align LogViewer toolbar with CodeEditor toolbar [#15414](https://github.com/openshift/console/pull/15414)
* [ODC-7802](https://issues.redhat.com/browse/ODC-7802): Add e2e for custom icon flow [#15416](https://github.com/openshift/console/pull/15416)
* [CONSOLE-4689](https://issues.redhat.com/browse/CONSOLE-4689): Replace deprecated "withHandlePromise" with "usePromiseHandler" in console [#15346](https://github.com/openshift/console/pull/15346)
* [CONSOLE-4235](https://issues.redhat.com/browse/CONSOLE-4235): Bump xterm to 5.5.0 [#15408](https://github.com/openshift/console/pull/15408)
* [CONSOLE-4500](https://issues.redhat.com/browse/CONSOLE-4500): Segment Analytics integration code cleanup [#15288](https://github.com/openshift/console/pull/15288)
* [CONSOLE-4630](https://issues.redhat.com/browse/CONSOLE-4630): React.SFC -> FCC [#15421](https://github.com/openshift/console/pull/15421)
* [CONSOLE-4609](https://issues.redhat.com/browse/CONSOLE-4609): Refactor `toggleCloudShellExpanded` [#15365](https://github.com/openshift/console/pull/15365)
* [ODC-7808](https://issues.redhat.com/browse/ODC-7808): Migrate enzyme "packages/knative-plugin" unit tests to React Testing Library [#15390](https://github.com/openshift/console/pull/15390)
* [CONSOLE-4688](https://issues.redhat.com/browse/CONSOLE-4688): Remove maxMenuHeight from ConsoleSelect [#15415](https://github.com/openshift/console/pull/15415)
* [CONSOLE-4631](https://issues.redhat.com/browse/CONSOLE-4631): Run 'react' namespace import codemod [#15412](https://github.com/openshift/console/pull/15412)
* [CONSOLE-4692](https://issues.redhat.com/browse/CONSOLE-4692): Enable SNC to true in access-modes, admission-webhook-warnings, cluster-configuration [#15401](https://github.com/openshift/console/pull/15401)
* [CONSOLE-4686](https://issues.redhat.com/browse/CONSOLE-4686): Refactor subscription.tsx menuActions to accept actions… [#15395](https://github.com/openshift/console/pull/15395)
* [OCPBUGS-59862](https://issues.redhat.com/browse/OCPBUGS-59862): Only show a link to OperatorHub if the logged in user has access to view OperatorHub [#15340](https://github.com/openshift/console/pull/15340)
* [OCPBUGS-59204](https://issues.redhat.com/browse/OCPBUGS-59204): Alignment of / and : within imagestream tag selection form fields [#15399](https://github.com/openshift/console/pull/15399)
* NO-JIRA: Update CHANGELOG for latest 4.20 prerelease plugin SDK package publish [#15407](https://github.com/openshift/console/pull/15407)
* [OCPBUGS-45297](https://issues.redhat.com/browse/OCPBUGS-45297): Refactor DroppableEditYAML [#15386](https://github.com/openshift/console/pull/15386)
* [CONSOLE-4680](https://issues.redhat.com/browse/CONSOLE-4680): Refactor bindings.jsx menuActions to accept actions fro… [#15372](https://github.com/openshift/console/pull/15372)
* [ODC-7806](https://issues.redhat.com/browse/ODC-7806): Migrate enzyme "packages/dev-console" unit tests to React Testing Library [#15335](https://github.com/openshift/console/pull/15335)
* [CONSOLE-4609](https://issues.redhat.com/browse/CONSOLE-4609): Refactor `testHook` to RTL, add `useWarningModal` [#15389](https://github.com/openshift/console/pull/15389)
* [ODC-7810](https://issues.redhat.com/browse/ODC-7810): Migrate enzyme "packages/topology" unit tests to React Testing Library [#15293](https://github.com/openshift/console/pull/15293)
* [OCPBUGS-60373](https://issues.redhat.com/browse/OCPBUGS-60373): QuickStarts Link buttons to other quickstarts are duplicate [#15387](https://github.com/openshift/console/pull/15387)
* [CONSOLE-4713](https://issues.redhat.com/browse/CONSOLE-4713): Refactor PodConnect and Terminal to TypeScript [#15377](https://github.com/openshift/console/pull/15377)
* [OCPBUGS-60010](https://issues.redhat.com/browse/OCPBUGS-60010): Fix i18n string for event stream (again) [#15384](https://github.com/openshift/console/pull/15384)
* [OCPBUGS-56155](https://issues.redhat.com/browse/OCPBUGS-56155): Click 'View operator details' in Plugin available popover will close the modal [#15316](https://github.com/openshift/console/pull/15316)
* [OCPBUGS-60130](https://issues.redhat.com/browse/OCPBUGS-60130): Remove ancient `X-XSS-Protection` header [#15360](https://github.com/openshift/console/pull/15360)
* [OCPBUGS-59382](https://issues.redhat.com/browse/OCPBUGS-59382): OpenShift Console's "Start Job" action overrides configured "backoffLimit" to "6" [#15357](https://github.com/openshift/console/pull/15357)
* [CONSOLE-4600](https://issues.redhat.com/browse/CONSOLE-4600): Migrate Enzyme "__tests__/components/factory and modals" unit tests to RTL [#15281](https://github.com/openshift/console/pull/15281)
* [OCPBUGS-60151](https://issues.redhat.com/browse/OCPBUGS-60151): Update `Guided tour` -> `Guided Tour` in help menus [#15363](https://github.com/openshift/console/pull/15363)
* [CONSOLE-4617](https://issues.redhat.com/browse/CONSOLE-4617): follow-on fix for DetailsItem popover [#15361](https://github.com/openshift/console/pull/15361)
* [OCPBUGS-59001](https://issues.redhat.com/browse/OCPBUGS-59001): Bump helm version [#15282](https://github.com/openshift/console/pull/15282)
* [CONSOLE-4688](https://issues.redhat.com/browse/CONSOLE-4688): `Dropdown` -> `ConsoleSelect` [#15284](https://github.com/openshift/console/pull/15284)
* [CONSOLE-4616](https://issues.redhat.com/browse/CONSOLE-4616): add additionalPrinterColumns to CustomResource list page [#15350](https://github.com/openshift/console/pull/15350)
* [OCPBUGS-44972](https://issues.redhat.com/browse/OCPBUGS-44972): Make sure CSP violations are only reported to telemetry once per day per browser [#14778](https://github.com/openshift/console/pull/14778)
* [CONSOLE-4703](https://issues.redhat.com/browse/CONSOLE-4703): Remove routes component in console [#15343](https://github.com/openshift/console/pull/15343)
* [OCPBUGS-60056](https://issues.redhat.com/browse/OCPBUGS-60056): update timestamp unit test to be more stable [#15356](https://github.com/openshift/console/pull/15356)
* [ODC-7811](https://issues.redhat.com/browse/ODC-7811): enzyme -> RTL: webterminal-plugin [#15352](https://github.com/openshift/console/pull/15352)
* [CONSOLE-4617](https://issues.redhat.com/browse/CONSOLE-4617): add additionalPrinterColumns to CustomResource details page [#15336](https://github.com/openshift/console/pull/15336)
* [OCPBUGS-60010](https://issues.redhat.com/browse/OCPBUGS-60010): Fix i18n string for event stream [#15351](https://github.com/openshift/console/pull/15351)
* [CONSOLE-4705](https://issues.redhat.com/browse/CONSOLE-4705): Convert some files to TypeScript [#15348](https://github.com/openshift/console/pull/15348)
* [CONSOLE-4688](https://issues.redhat.com/browse/CONSOLE-4688): Use PF instead of `noSelection` `Dropdown` [#15342](https://github.com/openshift/console/pull/15342)
* [OCPBUGS-59563](https://issues.redhat.com/browse/OCPBUGS-59563): Resolving API Version Conflicts in Tekton Pipeline Runs [#15307](https://github.com/openshift/console/pull/15307)
* [OCPBUGS-59215](https://issues.redhat.com/browse/OCPBUGS-59215): switch to dev perspective for `/dev-monitoring` [#15268](https://github.com/openshift/console/pull/15268)
* [OCPBUGS-59725](https://issues.redhat.com/browse/OCPBUGS-59725): Refactor `RegistryPollIntervalModal` [#15337](https://github.com/openshift/console/pull/15337)
* [OCPBUGS-55946](https://issues.redhat.com/browse/OCPBUGS-55946): Move ACM perspective back to perspective selector. [#15310](https://github.com/openshift/console/pull/15310)
* [CONSOLE-4704](https://issues.redhat.com/browse/CONSOLE-4704): Update ThemeContext type [#15339](https://github.com/openshift/console/pull/15339)
* [OCPBUGS-57481](https://issues.redhat.com/browse/OCPBUGS-57481): fix: Fix negative CPU util graphs [#15332](https://github.com/openshift/console/pull/15332)
* [OCPBUGS-58469](https://issues.redhat.com/browse/OCPBUGS-58469): Fix hot reload in GlobalConfigPage component [#15287](https://github.com/openshift/console/pull/15287)
* [OCPBUGS-59196](https://issues.redhat.com/browse/OCPBUGS-59196): fix runtime exception in CreateYAMLInner [#15341](https://github.com/openshift/console/pull/15341)
* [CONSOLE-4699](https://issues.redhat.com/browse/CONSOLE-4699): Update dynamic demo plugin e2e tests [#15319](https://github.com/openshift/console/pull/15319)
* [CONSOLE-4608](https://issues.redhat.com/browse/CONSOLE-4608): Drop createModalLauncher from helm-plugin and use useOverlay hook instead [#15303](https://github.com/openshift/console/pull/15303)
* And 12 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/4744295cad57c2cbbd15bf4e95056a2e556751ff...17d2383eac889752a233de290293ee93de2a6da4)
### [console-operator](https://github.com/openshift/console-operator/tree/9aa65fe9e7f92cb1f8d1918f13dc3630aa3a7f74)
* [OCPBUGS-58094](https://issues.redhat.com/browse/OCPBUGS-58094): Consolidate telemetry values oscilation [#1034](https://github.com/openshift/console-operator/pull/1034)
* [CONSOLE-4665](https://issues.redhat.com/browse/CONSOLE-4665): Vendor ConsolePluginCRD v1alpha1 changes [#1018](https://github.com/openshift/console-operator/pull/1018)
* [OCPBUGS-60219](https://issues.redhat.com/browse/OCPBUGS-60219): make console operator responsible for creating oauth client [#1032](https://github.com/openshift/console-operator/pull/1032)
* [OCPBUGS-57854](https://issues.redhat.com/browse/OCPBUGS-57854): Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.20 [#996](https://github.com/openshift/console-operator/pull/996)
* [OCPBUGS-57736](https://issues.redhat.com/browse/OCPBUGS-57736): bump github.com/openshift/client-go [#1030](https://github.com/openshift/console-operator/pull/1030)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console-operator/compare/22bad28711d7923e8f87f52f4cea0e3a31448448...9aa65fe9e7f92cb1f8d1918f13dc3630aa3a7f74)
### [coredns](https://github.com/openshift/coredns/tree/6f39336e6da9dc77b2db140a96773c413d50a665)
* [OCPBUGS-57652](https://issues.redhat.com/browse/OCPBUGS-57652): Updating coredns-container image to be consistent with ART for 4.20 [#136](https://github.com/openshift/coredns/pull/136)
* NO-JIRA: Add rikatz to OWNERS [#147](https://github.com/openshift/coredns/pull/147)
* [OCPBUGS-60008](https://issues.redhat.com/browse/OCPBUGS-60008): UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy [#146](https://github.com/openshift/coredns/pull/146)
* [Full changelog](https://github.com/openshift/coredns/compare/a69279e3393b269099dcaae967570741d4c5e469...6f39336e6da9dc77b2db140a96773c413d50a665)
### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/c4fe3e8ad29e58f081f3883de0893c2025a097b2)
* [OSPRH-18263](https://issues.redhat.com/browse/OSPRH-18263): UPSTREAM: 2915 [manila-csi-plugin] Support muilple share rules [#349](https://github.com/openshift/cloud-provider-openstack/pull/349)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/5c322e892803723250d4b7b303cf5eea20ff68b2...c4fe3e8ad29e58f081f3883de0893c2025a097b2)
### [docker-registry](https://github.com/openshift/image-registry/tree/887533765ee92e061fd44ad0b032aefd5b9b4e3c)
* [OSASINFRA-3756](https://issues.redhat.com/browse/OSASINFRA-3756): Bump docker-distribution to support v3token authentication for swift [#439](https://github.com/openshift/image-registry/pull/439)
* [Full changelog](https://github.com/openshift/image-registry/compare/aa11fcc86eb5ce436adee7c567562dcd62f53168...887533765ee92e061fd44ad0b032aefd5b9b4e3c)
### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/5e0f8d1b545899fda27c5e1cc8707d33cba1b534)
* [CORENET-6300](https://issues.redhat.com/browse/CORENET-6300): Port egress-router CNI plugin from iptables to nftables [#90](https://github.com/openshift/egress-router-cni/pull/90)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/85353bb936a289b8b817f7b437afacdf7458c667...5e0f8d1b545899fda27c5e1cc8707d33cba1b534)
### [etcd](https://github.com/openshift/etcd/tree/9c065d4d842c8de57806426c13201413b4d595e2)
* [OCPBUGS-60874](https://issues.redhat.com/browse/OCPBUGS-60874): Revert "OCPBUGS-52181: Ensure cluster id changes during force-new-cluster" [#339](https://github.com/openshift/etcd/pull/339)
* [Full changelog](https://github.com/openshift/etcd/compare/b5ad268120ccd50185b9ec00ff1c4e5aca379f84...9c065d4d842c8de57806426c13201413b4d595e2)
### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/f940e72e7611ce4a96da3e47966ba1befd25c474)
* [OCPBUGS-60772](https://issues.redhat.com/browse/OCPBUGS-60772): Reuse instance groups [#86](https://github.com/openshift/cloud-provider-gcp/pull/86)
* NO-JIRA: UPSTREAM: 894: Adding SyncMutex to nodeipam unit tests [#88](https://github.com/openshift/cloud-provider-gcp/pull/88)
* [OCPCLOUD-2926](https://issues.redhat.com/browse/OCPCLOUD-2926): Merge https://github.com/kubernetes/cloud-provider-gcp:master (c0af057) into main [#77](https://github.com/openshift/cloud-provider-gcp/pull/77)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/e217ae233e8a8fc445bbdcf83d3527896ea33768...f940e72e7611ce4a96da3e47966ba1befd25c474)
### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/01515888c83526ec235b7bc3a27df6eba3034b00)
* [OCPCLOUD-2931](https://issues.redhat.com/browse/OCPCLOUD-2931): Update Kubernetes deps to v1.33 [#123](https://github.com/openshift/machine-api-provider-gcp/pull/123)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/023d7bd8666fd9a97bdd0544a36188236dc58dc9...01515888c83526ec235b7bc3a27df6eba3034b00)
### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/500ab5d31ad382805070c8ae329a9a34163ebc99)
* [STOR-2396](https://issues.redhat.com/browse/STOR-2396): Rebase to upstream v1.20.0 for OCP 4.20 [#79](https://github.com/openshift/gcp-pd-csi-driver/pull/79)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/9e7c68ce9b0075d926ff59e23ca8840ad8fda21f...500ab5d31ad382805070c8ae329a9a34163ebc99)
### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/e0ad050a84bab669e0f11e080fc4c388ef417bba)
* [STOR-2394](https://issues.redhat.com/browse/STOR-2394): Bump all deps for 4.20 [#147](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/147)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/6907007f86e4623088bad036eb167f0813e6a20c...e0ad050a84bab669e0f11e080fc4c388ef417bba)
### [haproxy-router](https://github.com/openshift/router/tree/7c50294cfbc9a7c0d3c715de56fb92dadeefb8e6)
* NO-JIRA: Add rikatz to OWNERS [#665](https://github.com/openshift/router/pull/665)
* [OCPBUGS-55506](https://issues.redhat.com/browse/OCPBUGS-55506): Prevent startup failures due to name resolution [#656](https://github.com/openshift/router/pull/656)
* [Full changelog](https://github.com/openshift/router/compare/b41f9d05467fb7b3f6c2dafa6ac4b5e25164c0b6...7c50294cfbc9a7c0d3c715de56fb92dadeefb8e6)
### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/a237dcbeee8bbe1440c94349399cc6eac8870910)
* [OCPBUGS-60851](https://issues.redhat.com/browse/OCPBUGS-60851): UPSTREAM: <carry>: Revert "Bump 1.33.4" [#2425](https://github.com/openshift/kubernetes/pull/2425)
* NO-JIRA: UPSTREAM: <carry>: Filter featuregates by FeatureGate label instead of using OffByDefault label [#2398](https://github.com/openshift/kubernetes/pull/2398)
* [OCPBUGS-60507](https://issues.redhat.com/browse/OCPBUGS-60507): Bump 1.33.4 [#2416](https://github.com/openshift/kubernetes/pull/2416)
* [STOR-2530](https://issues.redhat.com/browse/STOR-2530): Storage performant security policy (update audit labels) [#2409](https://github.com/openshift/kubernetes/pull/2409)
* [STOR-1064](https://issues.redhat.com/browse/STOR-1064): improve CRD handling in VolumePopulator test [#2419](https://github.com/openshift/kubernetes/pull/2419)
* [OCPBUGS-59641](https://issues.redhat.com/browse/OCPBUGS-59641): cleanup: fetch individual PodResourceInfo from allocated resource state [#2410](https://github.com/openshift/kubernetes/pull/2410)
* NO-JIRA: add rphillips as downstream kubelet approver [#2414](https://github.com/openshift/kubernetes/pull/2414)
* UPSTREAM: <drop>: OKD-276: Fix InPlacePodVerticalScaling tests [#2407](https://github.com/openshift/kubernetes/pull/2407)
* [CNTRLPLANE-5](https://issues.redhat.com/browse/CNTRLPLANE-5): UPSTREAM: 132960: Configure JSON content type for generic webhook RESTClient. [#2362](https://github.com/openshift/kubernetes/pull/2362)
* [OCPBUGS-52169](https://issues.redhat.com/browse/OCPBUGS-52169): Workload partitioning of static init containers [#2224](https://github.com/openshift/kubernetes/pull/2224)
* [OCPBUGS-59756](https://issues.redhat.com/browse/OCPBUGS-59756): Fix IntOrString cost estimation when schema has a MaxLength constraint [#2375](https://github.com/openshift/kubernetes/pull/2375)
* [OCPBUGS-46422](https://issues.redhat.com/browse/OCPBUGS-46422): Disable ServiceCIDR tests [#2382](https://github.com/openshift/kubernetes/pull/2382)
* [CNTRLPLANE-940](https://issues.redhat.com/browse/CNTRLPLANE-940): Add CEL expression compile validation for Authentication admission [#2353](https://github.com/openshift/kubernetes/pull/2353)
* [STOR-2370](https://issues.redhat.com/browse/STOR-2370): Storage performant security policy [#2344](https://github.com/openshift/kubernetes/pull/2344)
* [OCPBUGS-59603](https://issues.redhat.com/browse/OCPBUGS-59603): Restore "Bump external snapshotter for vgs tests" [#2392](https://github.com/openshift/kubernetes/pull/2392)
* [OCPBUGS-59533](https://issues.redhat.com/browse/OCPBUGS-59533): Rebase v1.33.3 to master/4.20 [#2369](https://github.com/openshift/kubernetes/pull/2369)
* [OCPBUGS-57666](https://issues.redhat.com/browse/OCPBUGS-57666): Adjust durations for PodLifecycleSleepAction e2e tests [#2363](https://github.com/openshift/kubernetes/pull/2363)
* [STOR-2481](https://issues.redhat.com/browse/STOR-2481): UPSTREAM: <carry>: Skip SELinux test with Feature:SELinuxMountReadWriteteOncePodOnly [#2389](https://github.com/openshift/kubernetes/pull/2389)
* [OCPBUGS-60047](https://issues.redhat.com/browse/OCPBUGS-60047): disable slow and flaky tests rather than labeling them [#2390](https://github.com/openshift/kubernetes/pull/2390)
* [OCPBUGS-56785](https://issues.redhat.com/browse/OCPBUGS-56785): UPSTREAM: 132028: podresources: list: use active pods [#2361](https://github.com/openshift/kubernetes/pull/2361)
* NO-JIRA: UPSTREAM: <drop>: Revert "Bump external snapshotter for vgs tests" [#2387](https://github.com/openshift/kubernetes/pull/2387)
* [OCPBUGS-59603](https://issues.redhat.com/browse/OCPBUGS-59603): Bump the external-snapshotter for vgs tests [#2373](https://github.com/openshift/kubernetes/pull/2373)
* [TRT-2068](https://issues.redhat.com/browse/TRT-2068): Skip specific LoadBalancer test for "none" platform [#2383](https://github.com/openshift/kubernetes/pull/2383)
* [TRT-2068](https://issues.redhat.com/browse/TRT-2068): Reintroduce non-suite annotation removal [#2331](https://github.com/openshift/kubernetes/pull/2331)
* [Full changelog](https://github.com/openshift/kubernetes/compare/b94367cabf3edea99cfd7ecf7e8bafdc908d83ca...a237dcbeee8bbe1440c94349399cc6eac8870910)
### [hypershift](https://github.com/openshift/hypershift/tree/57a05b0fb2de6e843cc05e7ffdaef904a433ccf1)
* [OCPBUGS-60152](https://issues.redhat.com/browse/OCPBUGS-60152): test/e2e: enable EnsureAppLabel check for 4.19 [#6697](https://github.com/openshift/hypershift/pull/6697)
* [CNTRLPLANE-202](https://issues.redhat.com/browse/CNTRLPLANE-202): feat(sharedingress): add infrastructure node scheduling preferences [#6709](https://github.com/openshift/hypershift/pull/6709)
* [CNTRLPLANE-1361](https://issues.redhat.com/browse/CNTRLPLANE-1361): fix(infra/azure): make role assignment creation idempotent and robust [#6722](https://github.com/openshift/hypershift/pull/6722)
* NO-JIRA: docs(rules): expand Jira item creation guidelines and epic details [#6705](https://github.com/openshift/hypershift/pull/6705)
* chore(deps): update konflux references [#6669](https://github.com/openshift/hypershift/pull/6669)
* NO-JIRA: fix(contrib): Make setup_aks_mi.sh executable [#6708](https://github.com/openshift/hypershift/pull/6708)
* [OCPBUGS-60891](https://issues.redhat.com/browse/OCPBUGS-60891): set default goaway-chance to 0.001 [#6696](https://github.com/openshift/hypershift/pull/6696)
* [OCPBUGS-60649](https://issues.redhat.com/browse/OCPBUGS-60649): add availibility-prober to all capi-providers [#6695](https://github.com/openshift/hypershift/pull/6695)
* [STOR-1064](https://issues.redhat.com/browse/STOR-1064): fix(cpo): add missing image to env replacement [#6691](https://github.com/openshift/hypershift/pull/6691)
* [OCPBUGS-60907](https://issues.redhat.com/browse/OCPBUGS-60907): Update Azure overrides to include HC deletion time bug fix [#6698](https://github.com/openshift/hypershift/pull/6698)
* [CNTRLPLANE-935](https://issues.redhat.com/browse/CNTRLPLANE-935): e2e test for new Azure metrics [#6315](https://github.com/openshift/hypershift/pull/6315)
* [OSASINFRA-3675](https://issues.redhat.com/browse/OSASINFRA-3675): Add credentials to openshift-manila-csi-driver namespace for Hypershift [#6683](https://github.com/openshift/hypershift/pull/6683)
* [STOR-1064](https://issues.redhat.com/browse/STOR-1064): add validator image to CSO manifest [#6686](https://github.com/openshift/hypershift/pull/6686)
* [OCPBUGS-59194](https://issues.redhat.com/browse/OCPBUGS-59194): fix(registry): delete ValidatingAdmissionPolicy and binding during HCP deletion for ARO cleanup [#6616](https://github.com/openshift/hypershift/pull/6616)
* [OCPBUGS-60653](https://issues.redhat.com/browse/OCPBUGS-60653): test(e2e): Workaround for external oidc tests to bypass the teardown … [#6684](https://github.com/openshift/hypershift/pull/6684)
* [CNTRLPLANE-1209](https://issues.redhat.com/browse/CNTRLPLANE-1209): exposing IPv4OVNKubernetesConfig for hcp's ClusterNetworking [#6554](https://github.com/openshift/hypershift/pull/6554)
* NO-JIRA: Update-overrides for ARO HCP Fixes [#6685](https://github.com/openshift/hypershift/pull/6685)
* NO-JIRA: docs(cursor): add Jira creation rule for CNTRLPLANE/OCPBUGS with components and story template [#6680](https://github.com/openshift/hypershift/pull/6680)
* NO-JIRA: fix(doc): remove note about mandatory annotation in BM deployment [#6682](https://github.com/openshift/hypershift/pull/6682)
* [OCPBUGS-60651](https://issues.redhat.com/browse/OCPBUGS-60651): fix mce 2.10 Konflux EC violation [#6676](https://github.com/openshift/hypershift/pull/6676)
* [OCPBUGS-60602](https://issues.redhat.com/browse/OCPBUGS-60602): Cache Azure KMS TokenCredential for ARO HCP and clarify CPO credentials cache naming [#6673](https://github.com/openshift/hypershift/pull/6673)
* [OCPBUGS-56914](https://issues.redhat.com/browse/OCPBUGS-56914): fix: Do not admit OAuth route by private router unless it has external DNS [#6218](https://github.com/openshift/hypershift/pull/6218)
* [OCPBUGS-56430](https://issues.redhat.com/browse/OCPBUGS-56430): fix: Add recovery monitoring stack fixes [#6642](https://github.com/openshift/hypershift/pull/6642)
* [CNTRLPLANE-1271](https://issues.redhat.com/browse/CNTRLPLANE-1271): HyperShift Operator CPO override for Azure. versions 4.19.6 - 4.19.9 [#6662](https://github.com/openshift/hypershift/pull/6662)
* [CNTRLPLANE-1270](https://issues.redhat.com/browse/CNTRLPLANE-1270): Fix ProjectDevelopmentStreamTemplates [#6661](https://github.com/openshift/hypershift/pull/6661)
* [OCPBUGS-60381](https://issues.redhat.com/browse/OCPBUGS-60381): feat(validations): add wildcard support to DNS SAN conflict detection [#6643](https://github.com/openshift/hypershift/pull/6643)
* [CNTRLPLANE-1251](https://issues.redhat.com/browse/CNTRLPLANE-1251), [CNTRLPLANE-1255](https://issues.redhat.com/browse/CNTRLPLANE-1255): Introduce ProjectDevelopmentStreams [#6632](https://github.com/openshift/hypershift/pull/6632)
* [OCPBUGS-57450](https://issues.redhat.com/browse/OCPBUGS-57450): fix: routes are not used in case of IBM Cloud [#6622](https://github.com/openshift/hypershift/pull/6622)
* NO-JIRA: docs(agents): add AGENTS.md and centralize assistant guidance [#6634](https://github.com/openshift/hypershift/pull/6634)
* NO-JIRA: feat(rules): Add cursor rules for PR and Code review [#6633](https://github.com/openshift/hypershift/pull/6633)
* [OCPBUGS-60399](https://issues.redhat.com/browse/OCPBUGS-60399): wrap EnsureKubeAPIDNSNameCustomCert and EnsureGlobalPullSecret in their own test [#6536](https://github.com/openshift/hypershift/pull/6536)
* [OCPBUGS-59880](https://issues.redhat.com/browse/OCPBUGS-59880): add HostedCluster config requirements for DR [#6522](https://github.com/openshift/hypershift/pull/6522)
* NO-JIRA: feat(docs): Add new videos section in the documentation [#6635](https://github.com/openshift/hypershift/pull/6635)
* [CNTRLPLANE-946](https://issues.redhat.com/browse/CNTRLPLANE-946): test(e2e): Add e2e test for ExternalOIDCWithUIDAndExtra feature set [#6631](https://github.com/openshift/hypershift/pull/6631)
* [CNTRLPLANE-996](https://issues.redhat.com/browse/CNTRLPLANE-996): feat(e2e): Use ROSAManagedPolicies by default [#6534](https://github.com/openshift/hypershift/pull/6534)
* [CNTRLPLANE-1234](https://issues.redhat.com/browse/CNTRLPLANE-1234): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.24.4-1754467841 [#6608](https://github.com/openshift/hypershift/pull/6608)
* [OCPBUGS-57336](https://issues.redhat.com/browse/OCPBUGS-57336): fix(hostedcluster): remove additionalTrustBundle from hcp when removed from HostedCluster [#6605](https://github.com/openshift/hypershift/pull/6605)
* [CNTRLPLANE-993](https://issues.redhat.com/browse/CNTRLPLANE-993): feat(CPOv2): Monitor operands rollout status [#6492](https://github.com/openshift/hypershift/pull/6492)
* NO-JIRA: Update ingress-and-dns.md - update Metallb install link [#6619](https://github.com/openshift/hypershift/pull/6619)
* [OCPBUGS-60187](https://issues.redhat.com/browse/OCPBUGS-60187): chore: Split shared proxy acls [#6621](https://github.com/openshift/hypershift/pull/6621)
* NO-JIRA: Fix typo causing 'make verify' to fail [#6620](https://github.com/openshift/hypershift/pull/6620)
* [CNTRLPLANE-995](https://issues.redhat.com/browse/CNTRLPLANE-995): Fix incorrect usage of util.UpdateObject [#6615](https://github.com/openshift/hypershift/pull/6615)
* [CNTRLPLANE-1034](https://issues.redhat.com/browse/CNTRLPLANE-1034): chore: Relax the kas healthcheck for aro when AllowedCIDRBlocks [#6614](https://github.com/openshift/hypershift/pull/6614)
* [OCPBUGS-60190](https://issues.redhat.com/browse/OCPBUGS-60190): chore: Improve security context uid allocation to reuse released uids [#6612](https://github.com/openshift/hypershift/pull/6612)
* NO-JIRA: docs: Document workloadContext [#6589](https://github.com/openshift/hypershift/pull/6589)
* [CNTRLPLANE-204](https://issues.redhat.com/browse/CNTRLPLANE-204): feat: Add Shared Ingress Config Generator [#6555](https://github.com/openshift/hypershift/pull/6555)
* NO-JIRA: chore: Add cursor rule statements for unit tests [#6611](https://github.com/openshift/hypershift/pull/6611)
* NO-JIRA: test(e2e): add new test for external OIDC [#6419](https://github.com/openshift/hypershift/pull/6419)
* [OCPBUGS-57626](https://issues.redhat.com/browse/OCPBUGS-57626): order ICSPs for determinism of OPENSHIFT_IMG_OVERRIDES [#6607](https://github.com/openshift/hypershift/pull/6607)
* NO-JIRA: docs: enhance commit message formatting and gitlint configuration [#6613](https://github.com/openshift/hypershift/pull/6613)
* [CNTRLPLANE-995](https://issues.redhat.com/browse/CNTRLPLANE-995): Fix Default SG day2 tags feature being triggered without changes [#6603](https://github.com/openshift/hypershift/pull/6603)
* [CNTRLPLANE-1190](https://issues.redhat.com/browse/CNTRLPLANE-1190): Support control plane overrides by platform [#6523](https://github.com/openshift/hypershift/pull/6523)
* [OCPBUGS-60064](https://issues.redhat.com/browse/OCPBUGS-60064): fix(OCPBUGS-60064): add missing app label to some components [#6591](https://github.com/openshift/hypershift/pull/6591)
* [CNTRLPLANE-1186](https://issues.redhat.com/browse/CNTRLPLANE-1186): update github.com/golang/groupcache digest to 2c02b82 [#6389](https://github.com/openshift/hypershift/pull/6389)
* [CNTRLPLANE-1228](https://issues.redhat.com/browse/CNTRLPLANE-1228): Update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.24.4-1753853351 [#6541](https://github.com/openshift/hypershift/pull/6541)
* [OCPBUGS-58061](https://issues.redhat.com/browse/OCPBUGS-58061): Always compress and encode payload in token secret for inplace upgrades [#6352](https://github.com/openshift/hypershift/pull/6352)
* [CNTRLPLANE-1225](https://issues.redhat.com/browse/CNTRLPLANE-1225): feat(konflux): Use hermetic builds for CPO [#6595](https://github.com/openshift/hypershift/pull/6595)
* [CNTRLPLANE-1197](https://issues.redhat.com/browse/CNTRLPLANE-1197): Add EnsureGlobalPullSecret to be executed in 4.19 test suite [#6508](https://github.com/openshift/hypershift/pull/6508)
* [OCPBUGS-59194](https://issues.redhat.com/browse/OCPBUGS-59194): fix(OCPBUGS-59194): Allow HCCO to set registry managementState to Removed [#6593](https://github.com/openshift/hypershift/pull/6593)
* NO-JIRA: feat(azure): Add deletion scripts and cleanup documentation for managed Azure clusters [#6560](https://github.com/openshift/hypershift/pull/6560)
* [OCPBUGS-59886](https://issues.redhat.com/browse/OCPBUGS-59886): Add selinux-warning-controller to KCM [#6550](https://github.com/openshift/hypershift/pull/6550)
* [CNTRLPLANE-1116](https://issues.redhat.com/browse/CNTRLPLANE-1116): build(gitlint): add gitlint to verify target [#6559](https://github.com/openshift/hypershift/pull/6559)
* [CORENET-6229](https://issues.redhat.com/browse/CORENET-6229): Use networking.advertiseAddress for CNO apiserver override for IBMCloud PlatformType [#6553](https://github.com/openshift/hypershift/pull/6553)
* [OCPBUGS-59736](https://issues.redhat.com/browse/OCPBUGS-59736): Add support for generating a SC UID per namespace if SCC are not avalable [#6520](https://github.com/openshift/hypershift/pull/6520)
* [CNTRLPLANE-263](https://issues.redhat.com/browse/CNTRLPLANE-263): Remove all AzureManaged* CRDs [#6518](https://github.com/openshift/hypershift/pull/6518)
* [CNTRLPLANE-262](https://issues.redhat.com/browse/CNTRLPLANE-262): Support print operator version in CLI [#5821](https://github.com/openshift/hypershift/pull/5821)
* [CNTRLPLANE-1198](https://issues.redhat.com/browse/CNTRLPLANE-1198), [CNTRLPLANE-1199](https://issues.redhat.com/browse/CNTRLPLANE-1199): Bump AllowedCIDRBlocks limit [#6556](https://github.com/openshift/hypershift/pull/6556)
* NO-JIRA: refactor(azure): extract AKS managed identity setup into separate script [#6488](https://github.com/openshift/hypershift/pull/6488)
* [CNTRLPLANE-1116](https://issues.redhat.com/browse/CNTRLPLANE-1116): Fix CI git commits for run-gitlint [#6519](https://github.com/openshift/hypershift/pull/6519)
* [OCPBUGS-59959](https://issues.redhat.com/browse/OCPBUGS-59959): Set explicit FSGroup and RunAsUser for etcd when there's no SCC [#6548](https://github.com/openshift/hypershift/pull/6548)
* NO-JIRA: add CLAUDE.md with comprehensive development guidance [#6549](https://github.com/openshift/hypershift/pull/6549)
* [CNTRLPLANE-1191](https://issues.redhat.com/browse/CNTRLPLANE-1191): add sa-token-issuer-private-key-path flag to create cluster aws [#6526](https://github.com/openshift/hypershift/pull/6526)
* [CNTRLPLANE-1184](https://issues.redhat.com/browse/CNTRLPLANE-1184): update registry.access.redhat.com/ubi10/ubi docker tag to v10.0-1752573517 [#6343](https://github.com/openshift/hypershift/pull/6343)
* [OCPBUGS-59927](https://issues.redhat.com/browse/OCPBUGS-59927): Fix MCE 2.10 konflux EC violations [#6531](https://github.com/openshift/hypershift/pull/6531)
* [MGMT-20948](https://issues.redhat.com/browse/MGMT-20948): Enable Multus Disabling for NetworkType=Other [#6358](https://github.com/openshift/hypershift/pull/6358)
* NO-JIRA: fix(cmd): match infraID exactly on OIDC provider delete [#6538](https://github.com/openshift/hypershift/pull/6538)
* NO-JIRA: fix(test/e2e): add KCM leader elect failure msg to isLeaderElectionFailure [#6537](https://github.com/openshift/hypershift/pull/6537)
* [CNTRLPLANE-777](https://issues.redhat.com/browse/CNTRLPLANE-777): Create an Arm64 NodePool e2e Test for ARO HCP [#6509](https://github.com/openshift/hypershift/pull/6509)
* [CNTRLPLANE-996](https://issues.redhat.com/browse/CNTRLPLANE-996): feat(cli): Add support for using ROSA managed policies [#6467](https://github.com/openshift/hypershift/pull/6467)
* [CNTRLPLANE-204](https://issues.redhat.com/browse/CNTRLPLANE-204): feat(shared-ingress): Add reloader sidecar to avoid restarts on config changes [#6447](https://github.com/openshift/hypershift/pull/6447)
* [MGMT-20826](https://issues.redhat.com/browse/MGMT-20826): Add CLI validation to ensure Console is disabled when Ingress is disabled [#6479](https://github.com/openshift/hypershift/pull/6479)
* NO-JIRA: feat(cmd/dump): add CronJobs to dump [#6494](https://github.com/openshift/hypershift/pull/6494)
* [OCPBUGS-53265](https://issues.redhat.com/browse/OCPBUGS-53265): Use the image reference for the cache in the image metadata provider [#6155](https://github.com/openshift/hypershift/pull/6155)
* [OCPBUGS-59835](https://issues.redhat.com/browse/OCPBUGS-59835): MCE 2.10 konflux [#6524](https://github.com/openshift/hypershift/pull/6524)
* [OCPBUGS-57336](https://issues.redhat.com/browse/OCPBUGS-57336): Delete unused AdditionalTrustBundle from CP namespace [#6504](https://github.com/openshift/hypershift/pull/6504)
* And 3 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/hypershift/compare/ae1f96b47545aad7794478adfe58f1d7017d6a83...57a05b0fb2de6e843cc05e7ffdaef904a433ccf1)
### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/19801353c97d08b1333177be45c848082af0643c)
* [STOR-2393](https://issues.redhat.com/browse/STOR-2393): Rebase to upstream v5.2.16 for OCP 4.20 [#102](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/102)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/176b6ef1136c45b8e3cb24a48458a251deca99bc...19801353c97d08b1333177be45c848082af0643c)
### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/21f405cce9573eee1c4f1cf95c0eb601ae77ed99)
* [STOR-2330](https://issues.redhat.com/browse/STOR-2330): Add labels to subscribe ibm-vpc-block CSI driver controller and node pods to NPs [#148](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/148)
* [STOR-2394](https://issues.redhat.com/browse/STOR-2394): Bump all deps for 4.20 [#147](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/147)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/79dbb30095540581facfecc77c77b968006e2d08...21f405cce9573eee1c4f1cf95c0eb601ae77ed99)
### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/035805df5277c9f9c0cd9d4a44f59a08ab3ce031)
* [OCPCLOUD-2930](https://issues.redhat.com/browse/OCPCLOUD-2930): Bump k8s 1.33 [#67](https://github.com/openshift/machine-api-provider-ibmcloud/pull/67)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/34d53b0ddd8e1f3e2cf990ccdad9772bc4cdade8...035805df5277c9f9c0cd9d4a44f59a08ab3ce031)
### [insights-operator](https://github.com/openshift/insights-operator/tree/da45333120b0a116dea77d718dbd010d2f655f53)
* [OCPBUGS-60611](https://issues.redhat.com/browse/OCPBUGS-60611): virt launcher logs gatherer (#1110) [#1110](https://github.com/openshift/insights-operator/pull/1110)
* fix: incorrect anonymization of domains (#1111) [#1111](https://github.com/openshift/insights-operator/pull/1111)
* feat: add permissions to gather clusterrole (#1106) [#1106](https://github.com/openshift/insights-operator/pull/1106)
* feat: Allow on-demand gathering during initial periodic run (#1109) [#1109](https://github.com/openshift/insights-operator/pull/1109)
* [Full changelog](https://github.com/openshift/insights-operator/compare/7f8b40d9ccab7d83f183c5942044892c263d9c14...da45333120b0a116dea77d718dbd010d2f655f53)
### [insights-runtime-exporter, insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor/tree/3d3783698b20f5c27e4f35051b1450e47e789068)
* Liborfuka ocp420 new tests [#51](https://github.com/openshift/insights-runtime-extractor/pull/51)
* Sidecar containers test case [#44](https://github.com/openshift/insights-runtime-extractor/pull/44)
* test: Fix JBoss EAP 8.0 version [#50](https://github.com/openshift/insights-runtime-extractor/pull/50)
* [Full changelog](https://github.com/openshift/insights-runtime-extractor/compare/01a901de1766a8c0605617123f7ac3146dffd38b...3d3783698b20f5c27e4f35051b1450e47e789068)
### [ironic](https://github.com/openshift/ironic-image/tree/68d581ecde0738d585aff5fac831cfae3243d521)
* [OCPBUGS-60455](https://issues.redhat.com/browse/OCPBUGS-60455): Change default json-rpc port to avoid conflict with knmstate [#682](https://github.com/openshift/ironic-image/pull/682)
* [METAL-1368](https://issues.redhat.com/browse/METAL-1368): Bring in fixes implementing servicing abort. [#683](https://github.com/openshift/ironic-image/pull/683)
* [METAL-1461](https://issues.redhat.com/browse/METAL-1461): Add IPE and Gunicorn packages [#680](https://github.com/openshift/ironic-image/pull/680)
* [METAL-1503](https://issues.redhat.com/browse/METAL-1503): Upstream sync 20250728 [#673](https://github.com/openshift/ironic-image/pull/673)
* [METAL-1419](https://issues.redhat.com/browse/METAL-1419): Update ironic project hashes [#677](https://github.com/openshift/ironic-image/pull/677)
* [METAL-1461](https://issues.redhat.com/browse/METAL-1461): update config to allow Ironic to work with ironic-prometheus-exporter [#674](https://github.com/openshift/ironic-image/pull/674)
* [Full changelog](https://github.com/openshift/ironic-image/compare/53547eb68b998ed8052a124b31c4a1cc8f2ea5b1...68d581ecde0738d585aff5fac831cfae3243d521)
### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/ce01f3c1ed6022f9eecc164b2ae34aec25b3dee4)
* [OCPBUGS-45385](https://issues.redhat.com/browse/OCPBUGS-45385): Ignore USB network devices [#195](https://github.com/openshift/ironic-agent-image/pull/195)
* [METAL-1419](https://issues.redhat.com/browse/METAL-1419): Update ironic projects hashes [#193](https://github.com/openshift/ironic-agent-image/pull/193)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/db01e6fb97180004fb6800f61aefe72689f2933d...ce01f3c1ed6022f9eecc164b2ae34aec25b3dee4)
### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/b9134351be37c43408334047d8eb85d0ac01fe4e)
* [OCPBUGS-57550](https://issues.redhat.com/browse/OCPBUGS-57550): Updating kube-rbac-proxy-container image to be consistent with ART for 4.20 [#122](https://github.com/openshift/kube-rbac-proxy/pull/122)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/bc1ca29e2b6b50f15ece8db3990277276cacff0c...b9134351be37c43408334047d8eb85d0ac01fe4e)
### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/0f8a4eb84ace9b746cf25d51d80dacf34ca5f953)
* [OCPBUGS-57556](https://issues.redhat.com/browse/OCPBUGS-57556): Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.20 [#222](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/222)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/caf798560ad386b4a254e855ace3e3f2d7db6d8d...0f8a4eb84ace9b746cf25d51d80dacf34ca5f953)
### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/76351b466ce0fe5859b0dbc04b9c8599fbe7eed0)
* [OCPBUGS-60145](https://issues.redhat.com/browse/OCPBUGS-60145): Added [Serial] to serial e2e tests [#1404](https://github.com/openshift/machine-api-operator/pull/1404)
* fix for OCPBUGS-55135: userDataSecret.name should be a Required value on AWS [#1399](https://github.com/openshift/machine-api-operator/pull/1399)
* [SPLAT-2381](https://issues.redhat.com/browse/SPLAT-2381): Fixed e2e test to generate machines with cluster name prefix [#1398](https://github.com/openshift/machine-api-operator/pull/1398)
* [OCPCLOUD-2980](https://issues.redhat.com/browse/OCPCLOUD-2980): add ingress/egress network policy v2 [#1396](https://github.com/openshift/machine-api-operator/pull/1396)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/257c594f2f643cba5b0ca5c4e2215ed09b787397...76351b466ce0fe5859b0dbc04b9c8599fbe7eed0)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/7a56cf0048a05d576e746c3e992ce586e07c97e8)
* [OCPBUGS-61016](https://issues.redhat.com/browse/OCPBUGS-61016): Fix wait failure on MCO pods [#5270](https://github.com/openshift/machine-config-operator/pull/5270)
* [OPNET-683](https://issues.redhat.com/browse/OPNET-683): Automatically copy over configs applied by MCO [#5162](https://github.com/openshift/machine-config-operator/pull/5162)
* [MCO-1743](https://issues.redhat.com/browse/MCO-1743): Irreconcilable validations reporting [#5254](https://github.com/openshift/machine-config-operator/pull/5254)
* [MCO-1536](https://issues.redhat.com/browse/MCO-1536): Add new ImageBuildDegraded status option to MCP [#5251](https://github.com/openshift/machine-config-operator/pull/5251)
* [OCPBUGS-57979](https://issues.redhat.com/browse/OCPBUGS-57979): Update Kubelet Config MachineConfig upon FeatureGate update [#5228](https://github.com/openshift/machine-config-operator/pull/5228)
* [OCPBUGS-60559](https://issues.redhat.com/browse/OCPBUGS-60559): Update the OnClusterBuild payload tests to reflect the validation rule requiring MCP & MOSC names to match [#5249](https://github.com/openshift/machine-config-operator/pull/5249)
* [OCPBUGS-60526](https://issues.redhat.com/browse/OCPBUGS-60526): Remove escape chars when installing extensions in OCL Containerfile [#5247](https://github.com/openshift/machine-config-operator/pull/5247)
* NO-JIRA: clean up node cluster dashboard [#4612](https://github.com/openshift/machine-config-operator/pull/4612)
* [OCPEDGE-1733](https://issues.redhat.com/browse/OCPEDGE-1733): feat: consolidate arbiter template files [#5232](https://github.com/openshift/machine-config-operator/pull/5232)
* [OCPBUGS-59723](https://issues.redhat.com/browse/OCPBUGS-59723): Reintroduce cronjob that deletes MCN v1alpha1 CRD [#5238](https://github.com/openshift/machine-config-operator/pull/5238)
* [OCPBUGS-60287](https://issues.redhat.com/browse/OCPBUGS-60287): Remove OnClusterBuild FG [#5241](https://github.com/openshift/machine-config-operator/pull/5241)
* NO-ISSUE: Revert "OCPBUGS-59723: Add mechanism to delete MCN v1alpha1 CRD in 4.16+ clusters" [#5237](https://github.com/openshift/machine-config-operator/pull/5237)
* [OCPBUGS-59723](https://issues.redhat.com/browse/OCPBUGS-59723): Add mechanism to delete MCN v1alpha1 CRD in 4.16+ clusters [#5215](https://github.com/openshift/machine-config-operator/pull/5215)
* [MCO-1810](https://issues.redhat.com/browse/MCO-1810): Support kernelType in OCL [#5172](https://github.com/openshift/machine-config-operator/pull/5172)
* [OCPBUGS-60119](https://issues.redhat.com/browse/OCPBUGS-60119): Invalid architecture value found in annotation during 4.19 update [#5222](https://github.com/openshift/machine-config-operator/pull/5222)
* [MCO-1777](https://issues.redhat.com/browse/MCO-1777): Run build as an init container for OCL [#5200](https://github.com/openshift/machine-config-operator/pull/5200)
* [MCO-1811](https://issues.redhat.com/browse/MCO-1811): add MachineConfigControllerPoolAlert runbook to alert [#5214](https://github.com/openshift/machine-config-operator/pull/5214)
* [TRT-2232](https://issues.redhat.com/browse/TRT-2232): Revert #5148 "OCPBUGS-58023: Prevent unnecessary systemd unit disable" [#5213](https://github.com/openshift/machine-config-operator/pull/5213)
* [OCPNODE-3522](https://issues.redhat.com/browse/OCPNODE-3522): Generate deterministic order namespacedPolicyJSON [#5196](https://github.com/openshift/machine-config-operator/pull/5196)
* [OCPNODE-3466](https://issues.redhat.com/browse/OCPNODE-3466): Remove containernetworking-plugins directory from crio.conf [#5173](https://github.com/openshift/machine-config-operator/pull/5173)
* NO-ISSUE: Balance runtime of e2e-gcp-op shards [#5203](https://github.com/openshift/machine-config-operator/pull/5203)
* [OCPBUGS-58023](https://issues.redhat.com/browse/OCPBUGS-58023): Prevent unnecessary systemd unit disable [#5148](https://github.com/openshift/machine-config-operator/pull/5148)
* [MCO-1773](https://issues.redhat.com/browse/MCO-1773): Pick up openshift/kubernetes 1.33 rebase updates [#5182](https://github.com/openshift/machine-config-operator/pull/5182)
* [OCPBUGS-59780](https://issues.redhat.com/browse/OCPBUGS-59780): ARO clusters cannot scale on upgrade to 4.19 [#5195](https://github.com/openshift/machine-config-operator/pull/5195)
* [OCPBUGS-58443](https://issues.redhat.com/browse/OCPBUGS-58443): In OCL for reboot, after applying ssh/file/password based MC the MCP is stuck in updating state [#5191](https://github.com/openshift/machine-config-operator/pull/5191)
* [OCPBUGS-57484](https://issues.redhat.com/browse/OCPBUGS-57484), [OPNET-681](https://issues.redhat.com/browse/OPNET-681): Support migration to NMState [#5064](https://github.com/openshift/machine-config-operator/pull/5064)
* [OCPNODE-3006](https://issues.redhat.com/browse/OCPNODE-3006): Migrate ClusterImagePolicy/ImagePolicy to v1 [#5143](https://github.com/openshift/machine-config-operator/pull/5143)
* [OCPBUGS-43406](https://issues.redhat.com/browse/OCPBUGS-43406): Add workaround fix for static pod race [#5185](https://github.com/openshift/machine-config-operator/pull/5185)
* [MCO-1813](https://issues.redhat.com/browse/MCO-1813): Simplify boot image reconciliation with Go generics [#5183](https://github.com/openshift/machine-config-operator/pull/5183)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/859a75c3a7af428966cca82b991d7046f9962cee...7a56cf0048a05d576e746c3e992ce586e07c97e8)
### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/20f6d615c03b9c579037cdcdc327bd2bcefde4e6)
* [METAL-1509](https://issues.redhat.com/browse/METAL-1509): Add support for multi arch image files [#144](https://github.com/openshift/image-customization-controller/pull/144)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/ab1d4061cee7dca253dcc9455e4b8d47ba38f9d3...20f6d615c03b9c579037cdcdc327bd2bcefde4e6)
### [machine-os-images](https://github.com/openshift/machine-os-images/tree/64bfec79ae03b50b1da5b614a4cca2937ea9927d)
* [METAL-1509](https://issues.redhat.com/browse/METAL-1509): Add aarch64 images [#65](https://github.com/openshift/machine-os-images/pull/65)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/3b804341f7dca6d674bad0b96bbd51834788a0fb...64bfec79ae03b50b1da5b614a4cca2937ea9927d)
### [metallb-frr](https://github.com/openshift/frr/tree/fc0fe74f94b415b28d772dbc61f6323171a11b50)
* [OCPBUGS-57696](https://issues.redhat.com/browse/OCPBUGS-57696): Updating ose-frr-container image to be consistent with ART for 4.20 [#101](https://github.com/openshift/frr/pull/101)
* [Full changelog](https://github.com/openshift/frr/compare/b239af953715538c0abf602c030545c72d740c91...fc0fe74f94b415b28d772dbc61f6323171a11b50)
### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/3f9afde1bf5e04ffb1aa370e936bec336d523e79)
* [OBSINTA-776](https://issues.redhat.com/browse/OBSINTA-776): Incident detection tests [#509](https://github.com/openshift/monitoring-plugin/pull/509)
* [OU-781](https://issues.redhat.com/browse/OU-781): fix links in incidents table [#511](https://github.com/openshift/monitoring-plugin/pull/511)
* [OU-769](https://issues.redhat.com/browse/OU-769): implement a custom tooltip for incidents [#513](https://github.com/openshift/monitoring-plugin/pull/513)
* [OU-675](https://issues.redhat.com/browse/OU-675): Update UIPlugins to golang 1.24 [#512](https://github.com/openshift/monitoring-plugin/pull/512)
* [OU-932](https://issues.redhat.com/browse/OU-932): automation - metrics [#503](https://github.com/openshift/monitoring-plugin/pull/503)
* NO-JIRA: README.md update [#507](https://github.com/openshift/monitoring-plugin/pull/507)
* NO-JIRA: test: Fix operator sidebar navigation [#505](https://github.com/openshift/monitoring-plugin/pull/505)
* [OU-692](https://issues.redhat.com/browse/OU-692): Update montioring-plugin to NodeJS v22 [#506](https://github.com/openshift/monitoring-plugin/pull/506)
* [OU-849](https://issues.redhat.com/browse/OU-849): upgrade jsx pre-procesor to "react-jsx" [#502](https://github.com/openshift/monitoring-plugin/pull/502)
* NO-JIRA: update to expect NodeJS v22+ [#504](https://github.com/openshift/monitoring-plugin/pull/504)
* [OU-848](https://issues.redhat.com/browse/OU-848): Dependency update of dynamic plugin sdk and typescript [#499](https://github.com/openshift/monitoring-plugin/pull/499)
* [OU-960](https://issues.redhat.com/browse/OU-960): data-test injection on source code and UI automation refactoring [#500](https://github.com/openshift/monitoring-plugin/pull/500)
* [OCPBUGS-60198](https://issues.redhat.com/browse/OCPBUGS-60198): fix legend height to avoid scroll overlap [#494](https://github.com/openshift/monitoring-plugin/pull/494)
* NO-JIRA: improve consistency in tab string [#497](https://github.com/openshift/monitoring-plugin/pull/497)
* [OU-963](https://issues.redhat.com/browse/OU-963): add translation string test [#492](https://github.com/openshift/monitoring-plugin/pull/492)
* NO-JIRA: update the i18n [#491](https://github.com/openshift/monitoring-plugin/pull/491)
* NO-JIRA: refactor incidents to add typescript [#475](https://github.com/openshift/monitoring-plugin/pull/475)
* [OCPBUGS-55455](https://issues.redhat.com/browse/OCPBUGS-55455): feat: add alerting rules tab to dev console [#487](https://github.com/openshift/monitoring-plugin/pull/487)
* NO-JIRA: automation failed in the periodic job [#486](https://github.com/openshift/monitoring-plugin/pull/486)
* [OU-944](https://issues.redhat.com/browse/OU-944): automation refactoring [#485](https://github.com/openshift/monitoring-plugin/pull/485)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/75ad8fa8a06ed338bbdb7c6465ef19ff5dfbafd2...3f9afde1bf5e04ffb1aa370e936bec336d523e79)
### [must-gather](https://github.com/openshift/must-gather/tree/f0c64742c79afce5e367ca2c7b830ad448abe1df)
* [ETCD-738](https://issues.redhat.com/browse/ETCD-738): Partial Revert of #489 (#498) [#498](https://github.com/openshift/must-gather/pull/498)
* [Full changelog](https://github.com/openshift/must-gather/compare/cf5cd53dbe4d0e1bb3f0ed924c3d93960e1f9a8d...f0c64742c79afce5e367ca2c7b830ad448abe1df)
### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/b81340a9fc6963fa3d64d215a12e8528ca797131)
* Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.20 (#107) [#107](https://github.com/openshift/network-metrics-daemon/pull/107)
* create .snyk file to skip vendor folder (#108) [#108](https://github.com/openshift/network-metrics-daemon/pull/108)
* [OCPBUGS-59612](https://issues.redhat.com/browse/OCPBUGS-59612): Bump github.com/golang/glog to v1.2.4 (#109) [#109](https://github.com/openshift/network-metrics-daemon/pull/109)
* no-jira: Replace e2e test image (#118) [#118](https://github.com/openshift/network-metrics-daemon/pull/118)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/5ec8c6bde236feab19525c2d84f7d55f430f9e2b...b81340a9fc6963fa3d64d215a12e8528ca797131)
### [network-tools](https://github.com/openshift/network-tools/tree/26d09174cbd92386469e777e3bf49bfa95d035d5)
* NO-JIRA: Bug backlog tooling: add arg for listing stale bugs (>4 months) [#158](https://github.com/openshift/network-tools/pull/158)
* NO-JIRA: add tooling to reduce bug backlog toil for viewing bz comment updates [#157](https://github.com/openshift/network-tools/pull/157)
* NO-JIRA:Remove Tim from members list [#153](https://github.com/openshift/network-tools/pull/153)
* [OCPBUGS-57894](https://issues.redhat.com/browse/OCPBUGS-57894): Updating ose-network-tools-container image to be consistent with ART for 4.20 [#150](https://github.com/openshift/network-tools/pull/150)
* NO-JIRA:Update OWNERS file [#152](https://github.com/openshift/network-tools/pull/152)
* [Full changelog](https://github.com/openshift/network-tools/compare/16f4c78d4a5f1e17d8da2f54aeeea26b40aa90c3...26d09174cbd92386469e777e3bf49bfa95d035d5)
### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/f09c58b909fd6479e0099f7962ef73b70e280685)
* [CNV-52160](https://issues.redhat.com/browse/CNV-52160): VLAN fields [#268](https://github.com/openshift/networking-console-plugin/pull/268)
* [CNV-52160](https://issues.redhat.com/browse/CNV-52160): add awareness checkbox [#267](https://github.com/openshift/networking-console-plugin/pull/267)
* [CNV-52160](https://issues.redhat.com/browse/CNV-52160): edit project mapping [#266](https://github.com/openshift/networking-console-plugin/pull/266)
* [CNV-52160](https://issues.redhat.com/browse/CNV-52160): Creation form [#257](https://github.com/openshift/networking-console-plugin/pull/257)
* [CNV-52160](https://issues.redhat.com/browse/CNV-52160): Vmnetwork details page [#263](https://github.com/openshift/networking-console-plugin/pull/263)
* NO-JIRA: fix(i18n): use right namespace [#262](https://github.com/openshift/networking-console-plugin/pull/262)
* [OCPBUGS-60122](https://issues.redhat.com/browse/OCPBUGS-60122): Fix ingress details [#258](https://github.com/openshift/networking-console-plugin/pull/258)
* [CNV-52160](https://issues.redhat.com/browse/CNV-52160): add vm network list [#256](https://github.com/openshift/networking-console-plugin/pull/256)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/95251a68c2f0071e059a47443850a4d9ad3fe8ac...f09c58b909fd6479e0099f7962ef73b70e280685)
### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/b575ef15f13e1434c793ae50824fd0676480be05)
* [OCPBUGS-59794](https://issues.redhat.com/browse/OCPBUGS-59794): Adding nil checks to avoid Panic [#47](https://github.com/openshift/cloud-provider-nutanix/pull/47)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/8d229856471212c92834399c977baa751f4c461e...b575ef15f13e1434c793ae50824fd0676480be05)
### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/3200ddef48a5a8d47b96539419c51f3619cb1fd5)
* [OCPCLOUD-2929](https://issues.redhat.com/browse/OCPCLOUD-2929): Align dependencies with k8s 1.33 and Go 1.24 for 4.20 [#120](https://github.com/openshift/machine-api-provider-nutanix/pull/120)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/27175fdadb03425978e1fd3f5f27d462f54bec5e...3200ddef48a5a8d47b96539419c51f3619cb1fd5)
### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/022c761441a589cd71bf9428700315061c363f0a)
* [CNTRLPLANE-1305](https://issues.redhat.com/browse/CNTRLPLANE-1305): Update openshift/oauth-apiserver to latest Kubernetes 1.33 version [#139](https://github.com/openshift/oauth-apiserver/pull/139)
* [CNTRLPLANE-1259](https://issues.redhat.com/browse/CNTRLPLANE-1259): Add README to test extension [#141](https://github.com/openshift/oauth-apiserver/pull/141)
* [CNTRLPLANE-1259](https://issues.redhat.com/browse/CNTRLPLANE-1259): Update Jira component name to oauth-apiserver [#140](https://github.com/openshift/oauth-apiserver/pull/140)
* [OCPBUGS-57611](https://issues.redhat.com/browse/OCPBUGS-57611): Updating ose-oauth-apiserver-container image to be consistent with ART for 4.20 [#137](https://github.com/openshift/oauth-apiserver/pull/137)
* [CNTRLPLANE-1259](https://issues.redhat.com/browse/CNTRLPLANE-1259): set up openshift-tests-extension and add a sanity test [#138](https://github.com/openshift/oauth-apiserver/pull/138)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/85499f43cb447f179ea9d7e41a951f3db98cdc92...022c761441a589cd71bf9428700315061c363f0a)
### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/6649cb8a7c4dd7d1c4e03c9b0bc7594089fba991)
* [CNTRLPLANE-1313](https://issues.redhat.com/browse/CNTRLPLANE-1313): Update openshift/oauth-proxy to latest Kubernetes 1.33 version [#330](https://github.com/openshift/oauth-proxy/pull/330)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/d9c18ed44dc83a18bd26f7a30ee91a1fe556d6a1...6649cb8a7c4dd7d1c4e03c9b0bc7594089fba991)
### [oc-mirror](https://github.com/openshift/oc-mirror/tree/d42ff12456f3f227bfd42a769c4d5780dd1c6087)
* fixes parser issue in the dependabot yaml (#1251) [#1251](https://github.com/openshift/oc-mirror/pull/1251)
* Bump helm.sh/helm/v3 in /v2 in the oc-mirror-v2 group (#1248) [#1248](https://github.com/openshift/oc-mirror/pull/1248)
* Bump the oc-mirror-v2 group in /v2 with 5 updates (#1245) [#1245](https://github.com/openshift/oc-mirror/pull/1245)
* Bump the oc-mirror-v2 group in /v2 with 2 updates (#1243) [#1243](https://github.com/openshift/oc-mirror/pull/1243)
* [CLID-389](https://issues.redhat.com/browse/CLID-389): v2: validate access to destination registry (#1201) [#1201](https://github.com/openshift/oc-mirror/pull/1201)
* reduces the dependabot config interval (#1242) [#1242](https://github.com/openshift/oc-mirror/pull/1242)
* Bump the oc-mirror-v2 group across 1 directory with 5 updates (#1241) [#1241](https://github.com/openshift/oc-mirror/pull/1241)
* Bump github.com/docker/docker in /v2 in the go_modules group (#1239) [#1239](https://github.com/openshift/oc-mirror/pull/1239)
* clid-415: adds a warn message to v1 (#1238) [#1238](https://github.com/openshift/oc-mirror/pull/1238)
* Bump the oc-mirror-v2 group in /v2 with 17 updates (#1232) [#1232](https://github.com/openshift/oc-mirror/pull/1232)
* [OCPBUGS-59949](https://issues.redhat.com/browse/OCPBUGS-59949): fixes the result output showing the wrong total (#1236) [#1236](https://github.com/openshift/oc-mirror/pull/1236)
* prevents panic when helm chart is nil (#1233) [#1233](https://github.com/openshift/oc-mirror/pull/1233)
* [OCPBUGS-59646](https://issues.redhat.com/browse/OCPBUGS-59646): revert #1220 and print a warning instead (#1228) [#1228](https://github.com/openshift/oc-mirror/pull/1228)
* updates dependabot config (#1231) [#1231](https://github.com/openshift/oc-mirror/pull/1231)
* [OCPBUGS-55114](https://issues.redhat.com/browse/OCPBUGS-55114): v2/operator: support manifest lists with one arch (#1140) [#1140](https://github.com/openshift/oc-mirror/pull/1140)
* NO-JIRA: OKD compatibility - Allow custom value for SignatureURL (#1165) [#1165](https://github.com/openshift/oc-mirror/pull/1165)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/a71b6b0d7b39365bc29463fab21f3c6be2c855c1...d42ff12456f3f227bfd42a769c4d5780dd1c6087)
### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/9319f22a0e4aeaceb0dca569fe5b412b34ba436a)
* NO-ISSUE: Synchronize From Upstream Repositories [#453](https://github.com/openshift/operator-framework-operator-controller/pull/453)
* NO-ISSUE: Synchronize From Upstream Repositories [#449](https://github.com/openshift/operator-framework-operator-controller/pull/449)
* NO-ISSUE: Synchronize From Upstream Repositories [#444](https://github.com/openshift/operator-framework-operator-controller/pull/444)
* NO-ISSUE: Synchronize From Upstream Repositories [#435](https://github.com/openshift/operator-framework-operator-controller/pull/435)
* NO-ISSUE: Synchronize From Upstream Repositories [#431](https://github.com/openshift/operator-framework-operator-controller/pull/431)
* NO-ISSUE: Synchronize From Upstream Repositories [#421](https://github.com/openshift/operator-framework-operator-controller/pull/421)
* And 24 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/982cbe528e998c0ade7837ffdafb606402ff2ab0...9319f22a0e4aeaceb0dca569fe5b412b34ba436a)
### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/7f4da5d7815092618b1fec86aeafe137d50d0c00)
* [CNTRLPLANE-1304](https://issues.redhat.com/browse/CNTRLPLANE-1304): Update openshift/openshift-apiserver to latest Kubernetes 1.33 version [#539](https://github.com/openshift/openshift-apiserver/pull/539)
* [CNTRLPLANE-1258](https://issues.redhat.com/browse/CNTRLPLANE-1258): Add README to test extension [#540](https://github.com/openshift/openshift-apiserver/pull/540)
* [OCPBUGS-47773](https://issues.redhat.com/browse/OCPBUGS-47773): Bump library-go to fix route validation [#535](https://github.com/openshift/openshift-apiserver/pull/535)
* [OCPBUGS-57858](https://issues.redhat.com/browse/OCPBUGS-57858): Updating ose-openshift-apiserver-container image to be consistent with ART for 4.20 [#538](https://github.com/openshift/openshift-apiserver/pull/538)
* [CNTRLPLANE-1258](https://issues.redhat.com/browse/CNTRLPLANE-1258): set up openshift-tests-extension and add a sanity test [#536](https://github.com/openshift/openshift-apiserver/pull/536)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/98a1f03816ef55a7d03f57c3da0d740385c3793b...7f4da5d7815092618b1fec86aeafe137d50d0c00)
### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/49aaf599fb9024f36359f55bac6b3bb1482e24b8)
* [OCPBUGS-55650](https://issues.redhat.com/browse/OCPBUGS-55650): Drop BuildCSIVolumes feature gate logic (Build CSI Volumes in OpenShift Builds is GA since 4.14) [#407](https://github.com/openshift/openshift-controller-manager/pull/407)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/bd60afcd882e5be63825fb201cb55a5a48daceaa...49aaf599fb9024f36359f55bac6b3bb1482e24b8)
### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/5085f184c7d2ed21f36e5e3fe65bf023b38afe67)
* [OSASINFRA-3690](https://issues.redhat.com/browse/OSASINFRA-3690): Bump machine-api-operator [#136](https://github.com/openshift/machine-api-provider-openstack/pull/136)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/888b25c20dd5e7c381b5c615ef4e20417d526d62...5085f184c7d2ed21f36e5e3fe65bf023b38afe67)
### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/e53cf3090214284bf913bd2d7165a0a9422635a0)
* NO-JIRA: Remove deleted yamls [#1032](https://github.com/openshift/operator-framework-olm/pull/1032)
* NO-ISSUE: Update OWNERS to reflect current team makeup [#1057](https://github.com/openshift/operator-framework-olm/pull/1057)
* NO-ISSUE: Synchronize From Upstream Repositories [#1055](https://github.com/openshift/operator-framework-olm/pull/1055)
* NO-ISSUE: Enable readonlyRootFilesystem by default [#1043](https://github.com/openshift/operator-framework-olm/pull/1043)
* NO-ISSUE: Synchronize From Upstream Repositories [#1046](https://github.com/openshift/operator-framework-olm/pull/1046)
* NO-ISSUE: Synchronize From Upstream Repositories [#1045](https://github.com/openshift/operator-framework-olm/pull/1045)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/45b91529be7117e7445c6e411e5f86ac8f8feb29...e53cf3090214284bf913bd2d7165a0a9422635a0)
### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/07c4ea769698d54db5aad7b9bebe6c23dfc4165a)
* [OCPBUGS-59566](https://issues.redhat.com/browse/OCPBUGS-59566), [OCPBUGS-59570](https://issues.redhat.com/browse/OCPBUGS-59570): Move Network Policy manifests [#652](https://github.com/operator-framework/operator-marketplace/pull/652)
* [OCPBUGS-60060](https://issues.redhat.com/browse/OCPBUGS-60060): (fix) Update the operator-ibm-cloud-managed with the same configuration applied to operator manually [#649](https://github.com/operator-framework/operator-marketplace/pull/649)
* [OPRUN-3888](https://issues.redhat.com/browse/OPRUN-3888), [OPRUN-3889](https://issues.redhat.com/browse/OPRUN-3889): Upgrade catalog images from 4.19 to 4.20 [#650](https://github.com/operator-framework/operator-marketplace/pull/650)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/6d5a200c0b2055992c87f9ee1a5e014f3ad5be1e...07c4ea769698d54db5aad7b9bebe6c23dfc4165a)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/9741174157381d7b87e2d21559cbe06b8f2b5ebf)
* [OCPBUGS-60844](https://issues.redhat.com/browse/OCPBUGS-60844): DownStream Merge [08-25-2025] [#2734](https://github.com/openshift/ovn-kubernetes/pull/2734)
* NO-JIRA: DownStream Merge [08-21-2025] [#2730](https://github.com/openshift/ovn-kubernetes/pull/2730)
* [OCPBUGS-55962](https://issues.redhat.com/browse/OCPBUGS-55962): DownStream Merge [08-20-2025] [#2729](https://github.com/openshift/ovn-kubernetes/pull/2729)
* [OCPBUGS-38735](https://issues.redhat.com/browse/OCPBUGS-38735), [OCPBUGS-53028](https://issues.redhat.com/browse/OCPBUGS-53028), [OCPBUGS-56506](https://issues.redhat.com/browse/OCPBUGS-56506): DownStream Merge [08-16-2025] [#2724](https://github.com/openshift/ovn-kubernetes/pull/2724)
* [OCPBUGS-57883](https://issues.redhat.com/browse/OCPBUGS-57883): Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.20 [#2644](https://github.com/openshift/ovn-kubernetes/pull/2644)
* Revert "TRT-2243: Revert "OCPBUGS-56202: DownStream Merge [07-25-2025]"" [#2715](https://github.com/openshift/ovn-kubernetes/pull/2715)
* [OCPBUGS-57882](https://issues.redhat.com/browse/OCPBUGS-57882): Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.20 [#2643](https://github.com/openshift/ovn-kubernetes/pull/2643)
* [TRT-2243](https://issues.redhat.com/browse/TRT-2243): Revert "OCPBUGS-56202: DownStream Merge [07-25-2025]" [#2706](https://github.com/openshift/ovn-kubernetes/pull/2706)
* NO-JIRA: Bump OVN to 25.03 [#2701](https://github.com/openshift/ovn-kubernetes/pull/2701)
* [OCPBUGS-56202](https://issues.redhat.com/browse/OCPBUGS-56202): DownStream Merge [07-25-2025] [#2693](https://github.com/openshift/ovn-kubernetes/pull/2693)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/1fde61ad03a950ba2236c29e9d00cb6166c9fe9b...9741174157381d7b87e2d21559cbe06b8f2b5ebf)
### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/0693fe5dcfab224466fba7a19e614de71f727999)
* [MULTIARCH-5572](https://issues.redhat.com/browse/MULTIARCH-5572): Rebase ibm-powervs-block-csi-driver with upstream [#106](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/106)
* [MULTIARCH-5572](https://issues.redhat.com/browse/MULTIARCH-5572): Rebase ibm-powervs-block-csi-driver with upstream [#105](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/105)
* no-jira: Add Kishen V as a reviewer [#101](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/101)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/381e23ec25a8fee1a5a085b7ffbf93d1ed6e605c...0693fe5dcfab224466fba7a19e614de71f727999)
### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/319efc99be8cc2603fad1677acee7c4a4a096913)
* [CNTRLPLANE-1290](https://issues.redhat.com/browse/CNTRLPLANE-1290): enable readOnlyRootFilesystem [#87](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/87)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/bf47a45c36a57326fefe5a5be7db47ea3df19a9d...319efc99be8cc2603fad1677acee7c4a4a096913)
### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/2424e8dd4bf3e19c3e65efebc03bf4942665f7c4)
* No-Jira: Bump golang and Update oauth2 package in go.mod [#87](https://github.com/openshift/cloud-provider-powervs/pull/87)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/f2ac02fd9e6ce84ced1c77b75936e365a53dd1f5...2424e8dd4bf3e19c3e65efebc03bf4942665f7c4)
### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/f011b3c727c5377302b2ab0a203457490b930a3d)
* [OCPCLOUD-3027](https://issues.redhat.com/browse/OCPCLOUD-3027): Bump k8s 1.33 [#121](https://github.com/openshift/machine-api-provider-powervs/pull/121)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/f54657d5b18e695c6714e9785880cbcabbc5d88e...f011b3c727c5377302b2ab0a203457490b930a3d)
### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/f2529aee3dc2e9065de08b035d53151e007136fd)
* NO-JIRA: [bot] Bump openshift/prom-label-proxy to v0.12.0 [#384](https://github.com/openshift/prom-label-proxy/pull/384)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/3162eb7f9665f2867b9a657f8444e082349603c7...f2529aee3dc2e9065de08b035d53151e007136fd)
### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/e2bd260c9d686192a5ed9b85dfd4a9f7a2a03666)
* [OCPBUGS-56158](https://issues.redhat.com/browse/OCPBUGS-56158): Bump openshift/prometheus-operator to v0.85.0 [#338](https://github.com/openshift/prometheus-operator/pull/338)
* NO-JIRA: [bot] Bump openshift/prometheus-operator to v0.84.1 [#337](https://github.com/openshift/prometheus-operator/pull/337)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/8c0c09d95e04d885c79dfd316784c90f1b743957...e2bd260c9d686192a5ed9b85dfd4a9f7a2a03666)
### [rhel-coreos, rhel-coreos-extensions](https://github.com/openshift/os/tree/63e9aa4008eb65a02a2d70c9c086cbd8e18e149f)
* Merge [#1854](https://github.com/openshift/os/pull/1854)
* [Full changelog](https://github.com/openshift/os/compare/d7d0af78302e2ca4fc6cdc3c2fb2ba53946c7af6...63e9aa4008eb65a02a2d70c9c086cbd8e18e149f)
### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/b0fe556a981964728306f803864af9d2881db967)
* [CNTRLPLANE-1260](https://issues.redhat.com/browse/CNTRLPLANE-1260): Add README to test extension [#272](https://github.com/openshift/service-ca-operator/pull/272)
* [CNTRLPLANE-1260](https://issues.redhat.com/browse/CNTRLPLANE-1260): set up openshift-tests-extension and add a sanity test [#270](https://github.com/openshift/service-ca-operator/pull/270)
* NO-JIRA: Update Owners [#269](https://github.com/openshift/service-ca-operator/pull/269)
* [OCPBUGS-57703](https://issues.redhat.com/browse/OCPBUGS-57703): Updating ose-service-ca-operator-container image to be consistent with ART for 4.20 [#268](https://github.com/openshift/service-ca-operator/pull/268)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/4dfa6916f984d0fd7188380edc88b250738f07f7...b0fe556a981964728306f803864af9d2881db967)
### [tests](https://github.com/openshift/origin/tree/87d58ca8c53ff3ce23c8b052623a72a5d82070bb)
* [CNTRLPLANE-1257](https://issues.redhat.com/browse/CNTRLPLANE-1257): Enable OTE for apiserver Operators and servers [#30120](https://github.com/openshift/origin/pull/30120)
* [OCPBUGS-57496](https://issues.redhat.com/browse/OCPBUGS-57496): Account for system:hosted-cluster-config service account in HyperShift [#30075](https://github.com/openshift/origin/pull/30075)
* [TRT-2260](https://issues.redhat.com/browse/TRT-2260): Create High CPU intervals for nodes [#30152](https://github.com/openshift/origin/pull/30152)
* trt-2257: annotate zstd as sig-builds [#30190](https://github.com/openshift/origin/pull/30190)
* [CORENET-6232](https://issues.redhat.com/browse/CORENET-6232): add PreconfiguredUDNAddresses FG tests [#30010](https://github.com/openshift/origin/pull/30010)
* [TRT-2268](https://issues.redhat.com/browse/TRT-2268): Add support for OTE test lifecycles [#30166](https://github.com/openshift/origin/pull/30166)
* [OCPBUGS-60842](https://issues.redhat.com/browse/OCPBUGS-60842): fix: add exception for csi snapshot controller on two node [#30153](https://github.com/openshift/origin/pull/30153)
* [OCPBUGS-56691](https://issues.redhat.com/browse/OCPBUGS-56691): Pass volume-percentage to 100 in must-gather executions [#30182](https://github.com/openshift/origin/pull/30182)
* [OPRUN-4089](https://issues.redhat.com/browse/OPRUN-4089): Remove OLMv1 Tests remaning since all is migrated to OTE/operator-controller repo [#30173](https://github.com/openshift/origin/pull/30173)
* trt-2257: separate builds tests [#30171](https://github.com/openshift/origin/pull/30171)
* NO-JIRA: test/extended: update auth-related test OWNERS [#30149](https://github.com/openshift/origin/pull/30149)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): oidc/keycloak: make keycloak client use environment proxy for HTTP requests [#30148](https://github.com/openshift/origin/pull/30148)
* NO-JIRA: Stop setting feature gate conditional [#30146](https://github.com/openshift/origin/pull/30146)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): monitor: auditloganalyzer: skip watch channels processing when cluster stability is explicitly marked as `Disruptive` [#30174](https://github.com/openshift/origin/pull/30174)
* [OPRUN-4056](https://issues.redhat.com/browse/OPRUN-4056): [OLMv1] Remove Preflight checks since those were migrated to OTE [#30074](https://github.com/openshift/origin/pull/30074)
* [SREP-1622](https://issues.redhat.com/browse/SREP-1622): Fix endpoint admission test namespace creation for ROSA [#30134](https://github.com/openshift/origin/pull/30134)
* [OCPNODE-3004](https://issues.redhat.com/browse/OCPNODE-3004): Run ImageVolume tests in all clusters. [#30122](https://github.com/openshift/origin/pull/30122)
* [OCPBUGS-52968](https://issues.redhat.com/browse/OCPBUGS-52968): Drop the etcd should not log excessive took too long messages test [#30143](https://github.com/openshift/origin/pull/30143)
* [OCPBUGS-57477](https://issues.redhat.com/browse/OCPBUGS-57477): Allow three long term flaky k8s tests to retry [#30140](https://github.com/openshift/origin/pull/30140)
* [OCPBUGS-60550](https://issues.redhat.com/browse/OCPBUGS-60550): Increase curl timeout from 3s to 5s for egress firewall DNS rule test [#30133](https://github.com/openshift/origin/pull/30133)
* [OCPBUGS-60454](https://issues.redhat.com/browse/OCPBUGS-60454): Update the Control Plane Machine name pattern to support the master's names used on OpenStack [#30125](https://github.com/openshift/origin/pull/30125)
* NO-JIRA: Stop ignoring the targets from openshift-cluster-version [#30111](https://github.com/openshift/origin/pull/30111)
* [OTA-1581](https://issues.redhat.com/browse/OTA-1581): Skip `UpgradeStatus` test on HyperShift [#30132](https://github.com/openshift/origin/pull/30132)
* [STOR-1064](https://issues.redhat.com/browse/STOR-1064): OCPBUGS-59256: bump kubernetes version to fix provisioning e2e test [#30126](https://github.com/openshift/origin/pull/30126)
* [OCPBUGS-52968](https://issues.redhat.com/browse/OCPBUGS-52968): Expand and rate limit tests watching for etcd logging anomalies [#30013](https://github.com/openshift/origin/pull/30013)
* Revert "TRT-2197: use fixed seed for test ordering" [#30127](https://github.com/openshift/origin/pull/30127)
* NO-JIRA: fix: update arbiter test [#30112](https://github.com/openshift/origin/pull/30112)
* [OCPBUGS-59526](https://issues.redhat.com/browse/OCPBUGS-59526): TLS registry update [#30116](https://github.com/openshift/origin/pull/30116)
* [OCPBUGS-57032](https://issues.redhat.com/browse/OCPBUGS-57032): upgrade.go: wait some time after node upgrade [#29960](https://github.com/openshift/origin/pull/29960)
* [OCPBUGS-60530](https://issues.redhat.com/browse/OCPBUGS-60530): Fix panics in inclusterapi disruption during ROSA jobs [#30129](https://github.com/openshift/origin/pull/30129)
* [MCO-1656](https://issues.redhat.com/browse/MCO-1656): Component Readiness for vSphere Bootimage Update [#29741](https://github.com/openshift/origin/pull/29741)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): suites/external-oidc: explicitly mark cluster stability as disruptive [#30128](https://github.com/openshift/origin/pull/30128)
* [OCPBUGS-60375](https://issues.redhat.com/browse/OCPBUGS-60375): Use ubi9 as latest imagestream for perl [#30117](https://github.com/openshift/origin/pull/30117)
* [OCPBUGS-60530](https://issues.redhat.com/browse/OCPBUGS-60530): Log full stack traces for panics in monitortest cleanup [#30118](https://github.com/openshift/origin/pull/30118)
* [OCPBUGS-60562](https://issues.redhat.com/browse/OCPBUGS-60562): SigstoreImageVerification:update waitForMCP different config name [#30115](https://github.com/openshift/origin/pull/30115)
* [OCPEDGE-1755](https://issues.redhat.com/browse/OCPEDGE-1755): Add TNF E2E tests for ungraceful node shutdown [#29986](https://github.com/openshift/origin/pull/29986)
* [OCPBUGS-60238](https://issues.redhat.com/browse/OCPBUGS-60238): images/tests: Remove rteval [#30077](https://github.com/openshift/origin/pull/30077)
* NO-JIRA: Ensure Platform Prometheus targets are protected [#30014](https://github.com/openshift/origin/pull/30014)
* [OCPBUGS-60375](https://issues.redhat.com/browse/OCPBUGS-60375): Fix perl hotdeploy test [#30114](https://github.com/openshift/origin/pull/30114)
* [OTA-1580](https://issues.redhat.com/browse/OTA-1580): Further tests for `oc adm upgrade status` [#30109](https://github.com/openshift/origin/pull/30109)
* NO-JIRA: Add compat_otp package with openshift-tests-private (OTP) util implementation [#30081](https://github.com/openshift/origin/pull/30081)
* [OCPBUGS-60375](https://issues.redhat.com/browse/OCPBUGS-60375): Remove Perl 5.32 on UBI8 [#30092](https://github.com/openshift/origin/pull/30092)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): oidc: configure an oidc client secret for the console to consume [#30094](https://github.com/openshift/origin/pull/30094)
* NO-JIRA: [TNF] add Two Node Fencing exception to accept less than two etcd endpoints [#30058](https://github.com/openshift/origin/pull/30058)
* [OCPBUGS-58037](https://issues.redhat.com/browse/OCPBUGS-58037): increase timeout of image extract test [#30068](https://github.com/openshift/origin/pull/30068)
* [OCPNODE-3520](https://issues.redhat.com/browse/OCPNODE-3520): UserNamespaces: Increase build timeout duration [#30071](https://github.com/openshift/origin/pull/30071)
* [OPRUN-4055](https://issues.redhat.com/browse/OPRUN-4055): [OLMv1] Remove olmv1.go tests since those has been executed by OTE [#30072](https://github.com/openshift/origin/pull/30072)
* [TRT-2226](https://issues.redhat.com/browse/TRT-2226): Exclude ephemeral cni-sysctl-allowlist-ds from maxUnavailable/maxSurge check [#30095](https://github.com/openshift/origin/pull/30095)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): OIDC/enable skipped tests [#30087](https://github.com/openshift/origin/pull/30087)
* [CNTRLPLANE-1248](https://issues.redhat.com/browse/CNTRLPLANE-1248): Enable OTE for cluster-kube-apiserver Operator [#30078](https://github.com/openshift/origin/pull/30078)
* [STOR-2370](https://issues.redhat.com/browse/STOR-2370): Add openshift-test tags for CSO [#30042](https://github.com/openshift/origin/pull/30042)
* [OCPEDGE-1969](https://issues.redhat.com/browse/OCPEDGE-1969): add recovery tests for TNA [#30022](https://github.com/openshift/origin/pull/30022)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): oidc: fix test issues [#30040](https://github.com/openshift/origin/pull/30040)
* [OTA-1580](https://issues.redhat.com/browse/OTA-1580): Monitortest framework test for oc adm upgrade status [#30031](https://github.com/openshift/origin/pull/30031)
* [OCPBUGS-59603](https://issues.redhat.com/browse/OCPBUGS-59603): Fix vgs tests [#30008](https://github.com/openshift/origin/pull/30008)
* [OCPBUGS-57032](https://issues.redhat.com/browse/OCPBUGS-57032): Add wait.Poll retry logic to checkUpgradeability with 30s timeout [#30062](https://github.com/openshift/origin/pull/30062)
* [OCPNODE-3004](https://issues.redhat.com/browse/OCPNODE-3004): ImageVolume: Increase timeout duration [#30070](https://github.com/openshift/origin/pull/30070)
* [OTA-1559](https://issues.redhat.com/browse/OTA-1559): test/extended/cli/admin: Add 'oc adm upgrade recommend' smoke test [#29831](https://github.com/openshift/origin/pull/29831)
* NO-JIRA: Export GetIPFamilyForCluster [#30065](https://github.com/openshift/origin/pull/30065)
* NO-JIRA: Allow only including / excluding specific extension images [#29980](https://github.com/openshift/origin/pull/29980)
* NO-JIRA: Update extended/networking OWNERS [#30026](https://github.com/openshift/origin/pull/30026)
* NO-JIRA: Update image mirroring instructions to avoid using external binary [#30060](https://github.com/openshift/origin/pull/30060)
* [TRT-2197](https://issues.redhat.com/browse/TRT-2197): use fixed seed for test ordering [#29997](https://github.com/openshift/origin/pull/29997)
* NO-JIRA: Get enabled featuregates from metrics endpoint [#29952](https://github.com/openshift/origin/pull/29952)
* [CORENET-6203](https://issues.redhat.com/browse/CORENET-6203): Enable test for LGW L2 [#30009](https://github.com/openshift/origin/pull/30009)
* [OPRUN-3964](https://issues.redhat.com/browse/OPRUN-3964): [olmv1] - Remove test [sig-olmv1][OCPFeatureGate:NewOLM] OLMv1 CRDs should be installed migrated to operator-controller repository/OTE [#30036](https://github.com/openshift/origin/pull/30036)
* [OCPBUGS-56506](https://issues.redhat.com/browse/OCPBUGS-56506): Don't check for remote node subnet BGP routes [#30029](https://github.com/openshift/origin/pull/30029)
* [OCPNODE-3004](https://issues.redhat.com/browse/OCPNODE-3004): Increase the time to wait until the pod becomes ImagePullBackOff [#30030](https://github.com/openshift/origin/pull/30030)
* [OCPBUGS-59218](https://issues.redhat.com/browse/OCPBUGS-59218): feat(azure): skip metrics collection for ARO HCP hypershift [#30006](https://github.com/openshift/origin/pull/30006)
* NO-JIRA: Revert "OCPBUGS-55238: spyglass: hide disruption events for localhost" [#30034](https://github.com/openshift/origin/pull/30034)
* [TRT-2224](https://issues.redhat.com/browse/TRT-2224): Fix edge case where failures are not counted [#30039](https://github.com/openshift/origin/pull/30039)
* [TRT-2163](https://issues.redhat.com/browse/TRT-2163): incluster disruption images [#30007](https://github.com/openshift/origin/pull/30007)
* [OCPNODE-3004](https://issues.redhat.com/browse/OCPNODE-3004): Accept ErrImagePull for non-existent image volume test. [#30027](https://github.com/openshift/origin/pull/30027)
* [OCPNODE-3454](https://issues.redhat.com/browse/OCPNODE-3454): OCPFeatureGate:SigstoreImageVerification update test on v1 (Cluster)ImagePolicy [#29973](https://github.com/openshift/origin/pull/29973)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): Add tests for ExternalOIDC and ExternalOIDCWithUIDAndExtraClaimMappings features [#29917](https://github.com/openshift/origin/pull/29917)
* [OCPNODE-3004](https://issues.redhat.com/browse/OCPNODE-3004): Add ImageVolume e2e tests [#30015](https://github.com/openshift/origin/pull/30015)
* [Full changelog](https://github.com/openshift/origin/compare/48d56f2e5bb8bcf6c4560fb077c7b809e18a5c19...87d58ca8c53ff3ce23c8b052623a72a5d82070bb)
### [thanos](https://github.com/openshift/thanos/tree/c0951032b34b832d0f5467e616999490a284101b)
* [MON-4299](https://issues.redhat.com/browse/MON-4299): update to 0.39.2 [#163](https://github.com/openshift/thanos/pull/163)
* [Full changelog](https://github.com/openshift/thanos/compare/798d8365d9d5a9d79cded759266f46bbd4bee73b...c0951032b34b832d0f5467e616999490a284101b)
### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/5cd04d61c20872edaaa2c3958779ff29ea6e6d82)
* [STOR-2394](https://issues.redhat.com/browse/STOR-2394): Bump all deps for 4.20 [#308](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/308)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/cb68cc81b180e562e74164e6b97b22734756cd7b...5cd04d61c20872edaaa2c3958779ff29ea6e6d82)
### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/9d55c028b27bc63c687342f0b7172ce39e07ec5a)
* [STOR-2394](https://issues.redhat.com/browse/STOR-2394): Bump all deps for 4.20 [#187](https://github.com/openshift/vsphere-problem-detector/pull/187)
* [OCPBUGS-59319](https://issues.redhat.com/browse/OCPBUGS-59319): Check for number of FailureDomain-s in GetVCenter() [#186](https://github.com/openshift/vsphere-problem-detector/pull/186)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/e7563ab3ee2258987dbe8f037817e8f326f397a5...9d55c028b27bc63c687342f0b7172ce39e07ec5a)