# 4.20.18

Created: 2026-04-03 15:28:17 +0000 UTC

Image Digest: `sha256:2dab927fd20984e247301b2483083b71f942a1f550f5d8a1db42897edc042e39`


## Changes from 4.20.14

### Components

* Kubectl 1.33.3
* Kubernetes upgraded from 1.33.6 to 1.33.9
* Kubernetes Tests 1.33.4
* Red Hat Enterprise Linux CoreOS upgraded from 9.6.20260204-0 to 9.6.20260401-0


### Rebuilt images without code change

* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [3accbb7b](https://github.com/openshift/assisted-installer/commit/3accbb7bd0dd865744e0ef0808b65be5914b157e) `sha256:3d3ca64199e4cf7dc815c7e163a4733e0b4fff68894d4e158f91aa263ec1701d`
* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [637327ec](https://github.com/openshift/assisted-installer-agent/commit/637327ec40cd1f85ac5d7d4f114a2fae89baa8b0) `sha256:49613dce65a2a6c1be3c3ecc5553ed701b3be83b33a87ce23ee270190d227aaf`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [3accbb7b](https://github.com/openshift/assisted-installer/commit/3accbb7bd0dd865744e0ef0808b65be5914b157e) `sha256:a58323f7532a77b02ab6bf6cbf6d90df7943bc3cafa0853e2187176f312d03dc`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [11b24a2c](https://github.com/openshift/apiserver-network-proxy/commit/11b24a2c7452ef683a1d989f1016e6e815f5c112) `sha256:59fbca1795a26a2b5f49e01c0c13b67f5bd5dac01be23ebfd19fbbd3a1a230d4`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [bb88da16](https://github.com/openshift/cloud-provider-aws/commit/bb88da16b29d63573861351afc5ca8c4547775d6) `sha256:9f31b8a1b365f6cfeeaba18d61bfa1cc571979f233378fc6b0453ce4c5e769ef`
* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [300439ea](https://github.com/openshift/cluster-api-provider-aws/commit/300439ea0736444a160c061578b3bd8956d4f7e6) `sha256:42e943c10fa40eafa7e7d737e25a62c6c3480061897d63b2226b3d376883fbd5`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [a8ef205c](https://github.com/openshift/aws-ebs-csi-driver/commit/a8ef205c28b7b8c80b0caf1c1a9e12f81f4fdbb9) `sha256:1c17a4036a2192eb8d035f5300a6c87d178533407c2257dfcf226131eac5d98c`
* [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator) git [158b88f6](https://github.com/openshift/csi-operator/commit/158b88f6d146e74cca1fc9b79379463fde546552) `sha256:cb0c14df10b58b69a77658a09dbf1ce95fad53571b3f41da8077590266648a45`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [b37141b0](https://github.com/openshift/aws-karpenter-provider-aws/commit/b37141b051bdf790eb7e8f45b95f6bd7dc8140f4) `sha256:14dcafafa4d942a58f2bd8f9575f8e0f93dd5b54579a666165547bb76199e77e`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [999f4f76](https://github.com/openshift/machine-api-provider-aws/commit/999f4f76124e66c7b42af678cb19aff4b29f72d4) `sha256:fc53b5f2f80ea87cec51df85e90e037fbffd4f11d553d5a992f6efaa05aa4f02`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [8e83772a](https://github.com/openshift/aws-pod-identity-webhook/commit/8e83772ab8d31b32225744d4f0b0023680692daf) `sha256:5476ce6af4aebc91e0ae538baf2b331f84043cdc3a4b7c5d6dcaeb176bd80da5`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [d469d04e](https://github.com/openshift/cloud-provider-azure/commit/d469d04ed645358d942af442fe21e2c2b44b9b2c) `sha256:fa94a9e6da4a4192c0d4ca1475faaaebb8a5be4e134069a8948cbf18dc22b90b`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [d469d04e](https://github.com/openshift/cloud-provider-azure/commit/d469d04ed645358d942af442fe21e2c2b44b9b2c) `sha256:7f6473483e7835389510fe598304d341383bb54c4c7127f6dc4082b85dfc2e72`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [cb8b5b6a](https://github.com/openshift/cluster-api-provider-azure/commit/cb8b5b6a485971a95c5a74508d76ab19b23cbf29) `sha256:f8471f34e611a42ec7e73978b12e1936a0f81aeacb9a5f151d3526eddb72ce96`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [0b8e4d22](https://github.com/openshift/azure-disk-csi-driver/commit/0b8e4d2202b0d17942fd745a5e1948f46bdd0350) `sha256:9c54ce8f2ede2c0ba33053ed7ce9ef0cf64072309e741ddd7060b395e0a590ef`
* [azure-disk-csi-driver-operator](https://github.com/openshift/csi-operator) git [158b88f6](https://github.com/openshift/csi-operator/commit/158b88f6d146e74cca1fc9b79379463fde546552) `sha256:611455f61e34af1115ca36684a83fc495e78f17c7924ba0a085bbe0813ff4a5a`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [45d505bc](https://github.com/openshift/azure-file-csi-driver/commit/45d505bc11fedadece5ae27147c9595877e39f2a) `sha256:a33432979c6e4bd0847bafce7a0022ed1390f20f1d16fdfd8e6e1be301c07d5f`
* [azure-file-csi-driver-operator](https://github.com/openshift/csi-operator) git [158b88f6](https://github.com/openshift/csi-operator/commit/158b88f6d146e74cca1fc9b79379463fde546552) `sha256:f787c74560db595c553c234c1f9f011e2650fd8665487d816f920a78887b59ca`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [ea0b9944](https://github.com/openshift/azure-kubernetes-kms/commit/ea0b9944dddcc7043065a1fab5fca72dd17450da) `sha256:fcd57705fc93f6cf74f58764c9f229071932255eddb398c1d7fe7d0e18b18d60`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [68db9150](https://github.com/openshift/machine-api-provider-azure/commit/68db91507ea47f767ee0dc838c08cc371d2ff69f) `sha256:72db6d3486a0afba9ba1566df18a85595c6f456e7f8f85dbb96514a8a46b5209`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [6e2f3626](https://github.com/openshift/azure-service-operator/commit/6e2f362623720f7b6d634fbc424fbc61e4b481ae) `sha256:04d83b13ba85d5c74695328ae48fc6fff0cabf77adfdac368f6ae3dc3ae9657c`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [88b18175](https://github.com/openshift/azure-workload-identity/commit/88b18175e46fe305486d172ec0b4e8471c55e30b) `sha256:9f68a50cd3bbeb5313350b15dd88bc779a843e31a9d16ac74ea0f2cf64a27a69`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [f782ba74](https://github.com/openshift/cluster-api-provider-metal3/commit/f782ba747ed353721c84ceb754ca8403f94adb6a) `sha256:0128ed5d0f9dd915d2dad01d8e4501bde909343859073fa8fdf4008aa20eba8a`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [fb678fec](https://github.com/openshift/cluster-api-provider-baremetal/commit/fb678fec5f7e08348b281341481f33a848204e50) `sha256:95c05a457261ba04bd5cd3ec177b199da101c88c745ea8f576161227511e26d5`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [d22915bc](https://github.com/openshift/cloud-network-config-controller/commit/d22915bc82993ce11cb3fb97e6ae00602f30549b) `sha256:f10c6ce7698bf185a3f439712a0f4d631aa221e17e535def9716f047db6da732`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [fb1a9ab2](https://github.com/openshift/cluster-authentication-operator/commit/fb1a9ab21d72903f79a45f916c6443c0709b9b0c) `sha256:6f3cd73dc3435b298e4c0352ef1f5f06e05309ba990be951e490e19b970bf586`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [147e5a7f](https://github.com/openshift/cluster-autoscaler-operator/commit/147e5a7ff20b46ade7dd932b47e06ca82729f5e8) `sha256:a0c16c1697845a243934e3ca5e8233aaf6f7f9f2433435d618d90536c922e29e`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [74abc555](https://github.com/openshift/cluster-bootstrap/commit/74abc555111bac56a67957ef517ef086e4643c50) `sha256:fa9ef7fd2d1d246d780c828ab63e1c79e10e0b8036fc7bcb8386866ec6fedd0e`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [de1db297](https://github.com/openshift/cluster-api/commit/de1db2970e7fede7101e5a8188e74942ab6665e3) `sha256:7ce7e8a4e38085b1db526760330319c3f6f95564d7282ab674db2e1a7d1c1657`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [acf33144](https://github.com/openshift/cluster-capi-operator/commit/acf331446369b5307b6b435af14daabdca9fafbc) `sha256:a6e05cce766bd2628b1c4c2c96cd121f1f381ccd4a92a9259156c74b9d48295c`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [276696cc](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/276696ccf679830b25df341edb7aae9bb3f4e763) `sha256:f04440b637d648b2d4632e2df2caa8a86d17bc10e628d2f84b920dcaf61fb730`
* [cluster-config-api](https://github.com/openshift/api) git [50517c6f](https://github.com/openshift/api/commit/50517c6f4bfdbf9fc2cb291fd97cce150a3237ca) `sha256:600e5932d488a99f9e0a284596e1a0246776e29a780f0b00fd82c6c970bd486f`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [657754e2](https://github.com/openshift/cluster-config-operator/commit/657754e2beaed6295ff28bb0f7813cb1c9ce35b2) `sha256:ba447d322846768c77842bbde1a60ec21c83b4c32a8b946186637dd70ab7927c`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [0bbafe24](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/0bbafe24ade564bc62554251f36de90d524abcde) `sha256:949704fc5e43bfe38cb95274095e086dbfe1a975abfc04e76c1832957d8f1dac`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [019abe0c](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/019abe0c7671962829eb91269e1d76916966320e) `sha256:28bfff1322964b562819b18927c365c91f2b4ffd47e725c8e17098da58ccdbdb`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [82578923](https://github.com/openshift/cluster-dns-operator/commit/82578923164636746e0d74d594ab32d83a660c0b) `sha256:ad9838f06b50dd8314a6aff18d7b2cabf28f71f54140a868e37ec452f0a3c2a6`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [b04c7c12](https://github.com/openshift/cluster-image-registry-operator/commit/b04c7c121851704973a94a50e42af1425045899c) `sha256:911bdd94559d28b563a21baff72c74e563b1d3c296d7531be1f39892e52cffbb`
* [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator) git [24ef5ae1](https://github.com/openshift/cluster-ingress-operator/commit/24ef5ae121b8f658b649bb555be827f114ead438) `sha256:ad6ce5d08ece1833c400cc6e7e08292c58dc11a46b514f854f12ad6a8a4f7d80`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [234e2182](https://github.com/openshift/cluster-api-operator/commit/234e218207ec963df04ec1fedad85a421eb7a1ff) `sha256:fc7e1f44ab0209ffbc780648fd81fdd095f9946e55ce3f84b0e252d3a0da6756`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [438c9dba](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/438c9dba80ddadeabe9efe4a654297a7b550b2b8) `sha256:f2fec6ba603b9a6e4f8a40b717be37ce2d6f8bbcf64336991ac7ab76e573250b`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [5adc1429](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/5adc14299739bc64c8812cbab0b0ff2d12863602) `sha256:9158d407112e0a5adbaef29cca980d6cab3c19d8b6fd62e9406033b44124ffa9`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [b3c82b2e](https://github.com/openshift/cluster-machine-approver/commit/b3c82b2eec66ae3ae510df0603af1212c34be618) `sha256:f48d64c084989c3b2b1dd8bbaf280c96e9a7e15499c15bd6a9edcee4135d56cf`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [e4917368](https://github.com/openshift/cluster-olm-operator/commit/e4917368b6a547f97a0fb411fea90de246d1417e) `sha256:5ce9b2628b40fd4a81c3b3ae26fabb5c3f9f0fdb414cf7946bd07e39c2692e48`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [9cfa5679](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/9cfa5679a8ac1e5a68eea32179d9e069da85dfcf) `sha256:424b43dd157ed9606687f98405d95739edea2798cededc2db3c35cf232094da9`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [aa455c04](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/aa455c043152123595c2b4f72e02279aad9dd48a) `sha256:d699fcd28df2283e310487aa2519bd90c1bd68559057c36e3555a43f414e8d59`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [47c78310](https://github.com/openshift/cluster-policy-controller/commit/47c783103216aa5e1242632127a5d8f98b8b7455) `sha256:d5db3debfa414912ec0ee30ae8ec72c65f28ecb60fa7e5d699840cd1caab1b6d`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [b343f70f](https://github.com/openshift/cluster-samples-operator/commit/b343f70f19ffd559e1a81d3a3e65bd106e634c13) `sha256:996b174cca4cf1c240c062c8f22541dde7f73843299287b4c0541829e43006df`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [c40e7b9b](https://github.com/openshift/cluster-update-keys/commit/c40e7b9b60c62690a25333fc54ae0d3705474afb) `sha256:dec7af8d782ba13f4aacd502d37c7d0fc6ce38ed4078dc719d414f423b0f3f16`
* [cluster-version-operator](https://github.com/openshift/cluster-version-operator) git [3ef3dcb2](https://github.com/openshift/cluster-version-operator/commit/3ef3dcb24185cbb9c48aa53c8379397a0e7b61e0) `sha256:650276f02f3514188ae597933707a3190b61314ea5b3c2aef15a0dd9878f0ad7`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [2438d7c8](https://github.com/openshift/configmap-reload/commit/2438d7c8e495201361d87da205649bc38fc4822b) `sha256:ee966e2095ca0fc1b636860d487eb4afd6d42200ffb729aa1a0313668d0ec651`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [184a9601](https://github.com/openshift/containernetworking-plugins/commit/184a96011a8cacb72319cdccb904271a99c5928d) `sha256:e7ed1c517895be2df46c23ba8915d245bb3bea849f644d8f3e957a2fa2c4e454`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [184a9601](https://github.com/openshift/containernetworking-plugins/commit/184a96011a8cacb72319cdccb904271a99c5928d) `sha256:d5b1b74ba0ce890a64de82ca000bd47443021f73f18380cb2798f52f199f9506`
* [coredns](https://github.com/openshift/coredns) git [6f39336e](https://github.com/openshift/coredns/commit/6f39336e6da9dc77b2db140a96773c413d50a665) `sha256:a8bb938b9b7f725be3d10bdf52b70675b2079766cd1ea272dc005299f8bdfba4`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [9996d28c](https://github.com/openshift/cloud-provider-openstack/commit/9996d28ce3163cf9a09d77101e81cede914d6c2f) `sha256:f7202bd759ec06a80d5da124be3caf73c021a6cd39191d1c163ba2f8d5588cb6`
* [csi-driver-manila-operator](https://github.com/openshift/csi-operator) git [158b88f6](https://github.com/openshift/csi-operator/commit/158b88f6d146e74cca1fc9b79379463fde546552) `sha256:0c4bfb1b80086869bf3ad41c05a1c4b2e22028919b1e00983aacc6ee33cd9b43`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [1abaf844](https://github.com/openshift/csi-driver-nfs/commit/1abaf84447384a486a9f9da7cd7b9e53784c8a55) `sha256:e0ca9001e5adc3e185b275afd9d8d05f0f59a1cedf02c51b1bd453d7ac46b282`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [45239149](https://github.com/openshift/csi-external-attacher/commit/45239149cb387bcc51d944b802db0e804dc02688) `sha256:4cf4fa4d72a48ba6674b9d35a5e815e92e296fb11b06d51ce4ed85d35050f73f`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [81fca036](https://github.com/openshift/csi-external-provisioner/commit/81fca03694bca1bae8606d8970472330e1e4fcad) `sha256:dcbf048103b0e5f2f56fd8d3f3ce16e0f511b27facb17453dd9bfb3e85038101`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [c674bea9](https://github.com/openshift/csi-external-resizer/commit/c674bea9bb6a81e463c7fefa974e2109d829daef) `sha256:b2d97465dfc905d469df89d46b43d0a1d51baa583564d2f69a516bb5288b4698`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [693a8264](https://github.com/openshift/csi-external-snapshot-metadata/commit/693a826455777eaafc677bb2195dc071d184243b) `sha256:b1c8a9378b12289b4586d4320dc1101224942c4ada77602f9922a1f8dfc85c72`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [42604822](https://github.com/openshift/csi-external-snapshotter/commit/42604822c25eb2aa0ecb017c24e328221b238eb9) `sha256:5d31add862803e5bf70bce1e2c9446e2bf72223c37d4f40220ff760c2502aaa1`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [1d6d6b27](https://github.com/openshift/csi-livenessprobe/commit/1d6d6b27460e58f24110c72ec9c96afe2c1d891d) `sha256:6285ac9eb172e09e87d1eae6dd5d159c5d6f52181c2ad433d2d262373a2cdddb`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [6ce4713c](https://github.com/openshift/csi-node-driver-registrar/commit/6ce4713c87b735e2546a65a871bd2c7cfe383c31) `sha256:3905575d8580aeebdda8d6f6f4d06cd8a18acb62c472f00675577e03d6f16c66`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [42604822](https://github.com/openshift/csi-external-snapshotter/commit/42604822c25eb2aa0ecb017c24e328221b238eb9) `sha256:6f38666deb5c0efb5852d17ff9d04187c8d88aeb7930e026c978aeaa376fd5bd`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [5e0f8d1b](https://github.com/openshift/egress-router-cni/commit/5e0f8d1b545899fda27c5e1cc8707d33cba1b534) `sha256:7ae5539fae6028fff4d116d044a0fcb8cf2780d27093fa5e4cd821a59b7dd291`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [65539c71](https://github.com/openshift/cluster-api-provider-gcp/commit/65539c71b4c292fc0f4eeb572dfe490af63063d9) `sha256:bc770824295c7de4b1afb7a6b1fd7aef625673baafbb899e385ceeafcc52bd88`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [01515888](https://github.com/openshift/machine-api-provider-gcp/commit/01515888c83526ec235b7bc3a27df6eba3034b00) `sha256:d96768f491484a760e9f46c0a081cef64e4a6804f1afeeff3033ca28adc53236`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [500ab5d3](https://github.com/openshift/gcp-pd-csi-driver/commit/500ab5d31ad382805070c8ae329a9a34163ebc99) `sha256:5a428e0b8b0cbbe97fd3aa96baf0ff308650e0ed736e7a82ee79174641a33b95`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [e0ad050a](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/e0ad050a84bab669e0f11e080fc4c388ef417bba) `sha256:56b4581f7a974120e061cbd5baa858921d4a6d55355746cc0aded314a6c3a8ae`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [b36788ed](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/b36788edd4c559cffd5f7f1b2e3e51b98c3e92b8) `sha256:d71aedbe2fc267d59a0a82d57ced282f66a8bb944b6a5bf924f6aaf4b03a5260`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [36ab30f9](https://github.com/openshift/cloud-provider-ibm/commit/36ab30f90e87de0daa926d20ccda88c41abed191) `sha256:949ed1fe4e4e24c2a7e718a0b847a73f6dd82b08e621e985b80e6f0c09bad2f1`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [21f405cc](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/21f405cce9573eee1c4f1cf95c0eb601ae77ed99) `sha256:0c8f488377aefb043639eac53d0b7c62e1ae2b723e2f707b4a528796591c2bee`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [8b6396a4](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/8b6396a4c78f4791b7f3c5ec404a78b499f8546b) `sha256:8eb077126005fe6010cfcb97851eb6849be76af96518b9c98912a9f42a2a115c`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [6c92e542](https://github.com/openshift/ironic-rhcos-downloader/commit/6c92e5425b58baa9d4dd951a992b7460e8407247) `sha256:64fec7ac18f64a485176bb2d906e0c4de7c23f2194e427325db5c700f561bc13`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [fa5b8b8b](https://github.com/openshift/ironic-static-ip-manager/commit/fa5b8b8bb73e509f74205a99a0ed1cb07a843885) `sha256:56d6b3fccc76e63ded4730c1164711e401877e15a65c604cc511c0e5ae121b54`
* [keepalived-ipfailover](https://github.com/openshift/images) git [bb4535b7](https://github.com/openshift/images/commit/bb4535b7069cab2de0174be29bccccde6d623b4f) `sha256:3e8f528d769ab8c13f4eecc1442fb8c58bbc027b4e69c05b7d3148f79832bd51`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [cfa5ee9f](https://github.com/openshift/kubernetes-metrics-server/commit/cfa5ee9f1c94d7faec36de970033b9e329326f38) `sha256:efc6fb32c0c6be2333c359f10d7681dcf7d16bd7d4d6bca188ba3affc0ba3eb5`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [b9134351](https://github.com/openshift/kube-rbac-proxy/commit/b9134351be37c43408334047d8eb85d0ac01fe4e) `sha256:3366d391aaeff028defbc936ce86754c0d454f9fc89e9e126d1e961bbf66facc`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [086a7f21](https://github.com/openshift/kube-state-metrics/commit/086a7f21313d6fbc5ea330d46671ce8934b26c56) `sha256:30cb7130f02fc147c699477ab49450d51958cb5e54358c6088d69221b8dfbafb`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [0f8a4eb8](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/0f8a4eb84ace9b746cf25d51d80dacf34ca5f953) `sha256:d359f6407a7d9b70ce6d20b914385d20bf90c1a2480d02deaed4421a1052e513`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:e0bd4d7a3d05ea86d65e604f8f9e193514fb17fc7a99b4f9ddf8ce550d456793`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [551bb5d7](https://github.com/openshift/machine-os-images/commit/551bb5d75e782e47b83292d883e41bc57df730a4) `sha256:55e35eee7a02c96d086a2f13109fe87a8948101f28d12bfb256ae9286c1644be`
* [metallb-frr](https://github.com/openshift/frr) git [3ca45c51](https://github.com/openshift/frr/commit/3ca45c517eafe07aac0866e5cbd32a5c08081f22) `sha256:2824ec87049b57ce10127c4a7fbf5203fb04fc969c0adc3fd15890b6a54a558c`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [fc73c803](https://github.com/openshift/multus-admission-controller/commit/fc73c803caa1140e5a9115ceeb0e38504b001722) `sha256:6e4b91e712712fdb72f0ddba50496ad86227e709df8c1886cc30fcadeb0b4b0d`
* [multus-cni](https://github.com/openshift/multus-cni) git [b2a2f457](https://github.com/openshift/multus-cni/commit/b2a2f457824490d93da101d983b25af966f2be1b) `sha256:a42120a83db7cd7de76baf52c2336c60be42486a2025e305ab43e50000f3a671`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [b2a2f457](https://github.com/openshift/multus-cni/commit/b2a2f457824490d93da101d983b25af966f2be1b) `sha256:4f260eed53a4130bdcf5d74a9acd4d20771ab852e45dc3c74377ed205f0f18c5`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:27ed497875cf17231c74af201f20f9d0fa994e448c5d50416a43bbb03f0b2578`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [43c89591](https://github.com/openshift/whereabouts-cni/commit/43c8959152a6ca8afdc73eaed624286628c2c22e) `sha256:03b79ad962ab93a071a74331b6e9f164f48407c683ac2fe0508af19c0dd348cf`
* [must-gather](https://github.com/openshift/must-gather) git [f0c64742](https://github.com/openshift/must-gather/commit/f0c64742c79afce5e367ca2c7b830ad448abe1df) `sha256:0d18dcfcb4ae9983fbe33ac8e6cbffd7d23f6a9c495e1398e28190d40e38e719`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [dd3c4d0b](https://github.com/openshift/bond-cni/commit/dd3c4d0b886138d974022b963e72f2e90293abfe) `sha256:cfb8e5119fd8ee21c3cc8ae827d615ba2ecf8c1d588e5810be309878e4906d8a`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [b81340a9](https://github.com/openshift/network-metrics-daemon/commit/b81340a9fc6963fa3d64d215a12e8528ca797131) `sha256:cb59e2bf4eefd02d7988c52633584f62c3f145563ffba8dc2bc0294554db1d46`
* [network-tools](https://github.com/openshift/network-tools) git [26d09174](https://github.com/openshift/network-tools/commit/26d09174cbd92386469e777e3bf49bfa95d035d5) `sha256:e77e415aed13f8a756b029249a0f93ec7c61f5166941c7e96f157e3483f826de`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [b575ef15](https://github.com/openshift/cloud-provider-nutanix/commit/b575ef15f13e1434c793ae50824fd0676480be05) `sha256:b595ecf2a37b46ced7f497ace9e234d782e268dd39a3883c07320c3558c9047c`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [3200ddef](https://github.com/openshift/machine-api-provider-nutanix/commit/3200ddef48a5a8d47b96539419c51f3619cb1fd5) `sha256:5d4c7dbc08d143a2d61bd4441c9c4d1f460f42e13c26f5acf63a4cf80123e8dd`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [99f27d25](https://github.com/openshift/oauth-apiserver/commit/99f27d25cc2853fe44ce6c7f7611637ef1492e42) `sha256:fb0e566a837d644ea91ca3f959a73ff676022f5af0689f5ca5f1f792ab17996d`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [baba7b55](https://github.com/openshift/oauth-proxy/commit/baba7b55859172b58bd89eea8124eff3c0d64f3a) `sha256:495594fe58bf4efb714e02409cf6ac719775bd64477a21de18de6a08c2ebaba6`
* [olm-catalogd](https://github.com/openshift/operator-framework-operator-controller) git [3e2401f2](https://github.com/openshift/operator-framework-operator-controller/commit/3e2401f23ef666e8f33789a397d81a7d352b0a33) `sha256:3b80730be8a09d6a6798e41e5d51afe2db1e147ad54908118d7a0c33552489c2`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [3e2401f2](https://github.com/openshift/operator-framework-operator-controller/commit/3e2401f23ef666e8f33789a397d81a7d352b0a33) `sha256:69f571fa95e2b09e5bbc106b8977fba9ff1e69371d08e8d0e0ddfdaee8918054`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [34cb4762](https://github.com/openshift/openshift-apiserver/commit/34cb4762e1716c1a31a344118b8a3ad00c28d831) `sha256:ae870abf546c50741f57c2c439a44920b096ad97ea329475a3673b5c4bb621c4`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [d9e543dd](https://github.com/openshift/openshift-controller-manager/commit/d9e543dd31e981f279c447e4f92f0dac3f665f9e) `sha256:bd0bbec66ac2d5b2c8fc1fd5e5018436d3a9c2e1b3124d8845b7a99592693f52`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [b04e2ef0](https://github.com/openshift/openshift-state-metrics/commit/b04e2ef05498c2a4504bd9396a3290c4f263fc37) `sha256:13a4d37701c4e80754beed47c7f2db33d5033e50bfe7fc8eba470735654a0dea`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [9996d28c](https://github.com/openshift/cloud-provider-openstack/commit/9996d28ce3163cf9a09d77101e81cede914d6c2f) `sha256:93be16db884b3203c82eff29b34a23cdf25ea6c283c171f3fb200b3caa33ab53`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator) git [158b88f6](https://github.com/openshift/csi-operator/commit/158b88f6d146e74cca1fc9b79379463fde546552) `sha256:f8326778f69a011af60449077d7976405bac63ea7d7006b682aa69f7a59d3f97`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [9996d28c](https://github.com/openshift/cloud-provider-openstack/commit/9996d28ce3163cf9a09d77101e81cede914d6c2f) `sha256:cb37de2fec09abb47f44f979dfa9ab448612899f8fffb8df8cd127cfd422d695`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [d1c8e7ed](https://github.com/openshift/cluster-api-provider-openstack/commit/d1c8e7edf11e78db401bc1672e0f17d551fe09db) `sha256:c4e71753790cf377444cfa92a9085c2a5a96c20b52d5280c65435e402f86714f`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [bf0d2c88](https://github.com/openshift/openstack-resource-controller/commit/bf0d2c88d6bf9bd90b24c979ea63dc37606b45fc) `sha256:8fa981afe57bd26401421598d4c9be2269adb11f31f8fb8af2d863b6a07bbece`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:00f2070db808e218ea9e284c1220136059f00ddbb85671124d048110a608fe25`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [7e1f4a30](https://github.com/openshift/ovirt-csi-driver-operator/commit/7e1f4a300fc4b212f4e79cd9bcc9deb6d137b9b7) `sha256:33446628d195a3f2e2a6ef53fb4b2739569866f57105733dbe3427be27083399`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [2424e8dd](https://github.com/openshift/cloud-provider-powervs/commit/2424e8dd4bf3e19c3e65efebc03bf4942665f7c4) `sha256:3868edfb70763f2c80725bb1cd0dd009ffae6385089ccedab0f286c30749dc6c`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [f011b3c7](https://github.com/openshift/machine-api-provider-powervs/commit/f011b3c727c5377302b2ab0a203457490b930a3d) `sha256:cdbe82ff23b71544a30e61c3493a0726b63ff22f2dd58c9254ea0461494ddce1`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [f2529aee](https://github.com/openshift/prom-label-proxy/commit/f2529aee3dc2e9065de08b035d53151e007136fd) `sha256:5d9e43974e65d721edaf24c497a9dd62e378a98812aa32192f2d5308b5ddf7ae`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [419f2843](https://github.com/openshift/prometheus-alertmanager/commit/419f2843332265d44982920d6fb4db220ec26f91) `sha256:3b9896073601bb6832a38571e9a0c19c04e5891166285cc7e6a7b1bc3dee8626`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [fa749d65](https://github.com/openshift/node_exporter/commit/fa749d65d8eca1cc937554baab91385a78ec8ce1) `sha256:6a39926b0051f2876e6ac90552aacf99277aeb16caa399038f17d0ac6fde5c08`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [37e0c317](https://github.com/openshift/service-ca-operator/commit/37e0c31790b6a954214817974a56c9a699d0cf78) `sha256:e1c5aa3771c4818ff29327295a2680fbbfa94c3cbc3306b5376aca109761a3cd`
* [telemeter](https://github.com/openshift/telemeter) git [4c6036ee](https://github.com/openshift/telemeter/commit/4c6036eeb851ad6e0e837e214a2d08ffc8f0d1d0) `sha256:6fe521f896a734dafaf45605e17e042a6a2ad7881ba7184e7cb8f63c0c70d2e2`
* [thanos](https://github.com/openshift/thanos) git [c0951032](https://github.com/openshift/thanos/commit/c0951032b34b832d0f5467e616999490a284101b) `sha256:ff5e9ab8f1e635b851987f84ff1007de4bedc4248e581d3e599bb5a6affcfc05`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [0e61642f](https://github.com/openshift/volume-data-source-validator/commit/0e61642f8d898ee199e42f37319864851dd3627f) `sha256:d98089c12597bb19e607e102aeab047c2ad136337b9c76dd3865ab104786127c`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [b93eb64f](https://github.com/openshift/cloud-provider-vsphere/commit/b93eb64ff72e7c005687813c8b478d694a0f517a) `sha256:4048b16a2b083967942c4263675b6feacf5a6862772eccc98838aef9fd72b989`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [61d0d00a](https://github.com/openshift/vmware-vsphere-csi-driver/commit/61d0d00a78ee60ee57fcc99648a8851f0db52e5a) `sha256:722ad448094d1f583e85e075fff2fbc17616b0b5531d0a99e647ee26dda0ceeb`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [5cd04d61](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/5cd04d61c20872edaaa2c3958779ff29ea6e6d82) `sha256:286b16712c41603bfa3f63b3c90621ea8aabe9763bd1834563d9e4c3d16fba8b`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [61d0d00a](https://github.com/openshift/vmware-vsphere-csi-driver/commit/61d0d00a78ee60ee57fcc99648a8851f0db52e5a) `sha256:5c85a9762296670e2187b1dca2b657ff7946f570c21bc0795f2480e73f39d939`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/e07e2c76e1431afe13e2c34b3e08e0bb0903201f)

* [OCPBUGS-70300](https://issues.redhat.com/browse/OCPBUGS-70300): Prevent race in agent-installer kubeconfig generation [#8707](https://github.com/openshift/assisted-service/pull/8707)
* [Full changelog](https://github.com/openshift/assisted-service/compare/201941332974fc940db032484becb75804998b55...e07e2c76e1431afe13e2c34b3e08e0bb0903201f)


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/1de6efa5c41d448bf8767f2787af50fb383b1dee)

* Add support for release branches in PR workflow (#3529) [#3529](https://github.com/openshift-assisted/assisted-installer-ui/pull/3529)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/c0370c199bd9d314d14cdf668f4dddff6d475514...1de6efa5c41d448bf8767f2787af50fb383b1dee)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/e3e997d9f7b84b134a07186de9bddde21598ae32)

* [OCPBUGS-77238](https://issues.redhat.com/browse/OCPBUGS-77238): Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 2f3015a [#224](https://github.com/openshift/agent-installer-utils/pull/224)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/688c906c9f08b0b75e330e6e7dc81e31df765db7...e3e997d9f7b84b134a07186de9bddde21598ae32)


### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/a8968d22240748f40c41bdd6c47debbfa16dcd74)

* [OCPBUGS-78426](https://issues.redhat.com/browse/OCPBUGS-78426): Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.20 [#34](https://github.com/openshift/aws-encryption-provider/pull/34)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/088dcaf73f980b977ef4f5d2f99e2a93deb87eef...a8968d22240748f40c41bdd6c47debbfa16dcd74)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/1d295ac40df6fb30946f725dcc956ebc5a626fc2)

* [OCPBUGS-78694](https://issues.redhat.com/browse/OCPBUGS-78694): [release-4.20]: openstack: Disable LoadBalancer in cloud config when Octavia is unavailable [#10401](https://github.com/openshift/installer/pull/10401)
* [OCPBUGS-79665](https://issues.redhat.com/browse/OCPBUGS-79665): Use correct Project ID with GCP Shared VPC [#10436](https://github.com/openshift/installer/pull/10436)
* [OCPBUGS-80884](https://issues.redhat.com/browse/OCPBUGS-80884): [release-4.20] Add c8g* to tested_instance_types_aarch64 [#10437](https://github.com/openshift/installer/pull/10437)
* [OCPBUGS-77896](https://issues.redhat.com/browse/OCPBUGS-77896): Increase size of /var/ostreecontainer mount [#10365](https://github.com/openshift/installer/pull/10365)
* [OCPBUGS-78091](https://issues.redhat.com/browse/OCPBUGS-78091): fix wavelength zone name regex [#10373](https://github.com/openshift/installer/pull/10373)
* [OCPBUGS-77050](https://issues.redhat.com/browse/OCPBUGS-77050): Update the RHCOS 4.20 bootimage metadata to 9.6.20260217-1 [#10358](https://github.com/openshift/installer/pull/10358)
* [Full changelog](https://github.com/openshift/installer/compare/1f026bc5be128afc4f4095c715264f089f18f28b...1d295ac40df6fb30946f725dcc956ebc5a626fc2)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/4e38a27e94679f43d6534c67c98a9353dac137c6)

* [OCPBUGS-78745](https://issues.redhat.com/browse/OCPBUGS-78745): OCPBUGS-78836: PR2774 and PR2793 backports [release-4.20] [#470](https://github.com/openshift/baremetal-operator/pull/470)
* Bug OCPBUGS-76546: BMO fails to start servicing despite updates to HFC spec [#460](https://github.com/openshift/baremetal-operator/pull/460)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/d816b0a0279a6c26e7b3240302814fb6fe1019f9...4e38a27e94679f43d6534c67c98a9353dac137c6)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/50c63b0d5744a830cb828a669ed09982dd46365b)

* [OCPBUGS-77170](https://issues.redhat.com/browse/OCPBUGS-77170): Install dbus-tools, needed in pkg/monitor/dnsmasqmonitor.go [#384](https://github.com/openshift/baremetal-runtimecfg/pull/384)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/6553765e71c7f8d7db120af94473c9c0cb44d453...50c63b0d5744a830cb828a669ed09982dd46365b)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/64e778a55fbcdf295b671a7d4e701e7c8cc3a499)

* [OCPBUGS-77495](https://issues.redhat.com/browse/OCPBUGS-77495): Makefile: Strip debugging symbols by default [#2212](https://github.com/openshift/oc/pull/2212)
* [OCPBUGS-77145](https://issues.redhat.com/browse/OCPBUGS-77145): oc adm policy: Only initialize UserClient if built-in OAuth is enabled [#2207](https://github.com/openshift/oc/pull/2207)
* [Full changelog](https://github.com/openshift/oc/compare/040daf8c96442098f8d6a6acd9faef69693222a3...64e778a55fbcdf295b671a7d4e701e7c8cc3a499)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/2d79084b613a87eb3d236635933e3ff56e9b7773)

* [OCPBUGS-78200](https://issues.redhat.com/browse/OCPBUGS-78200): Fix infrastructure resource name filtering in watch predicate [#989](https://github.com/openshift/cloud-credential-operator/pull/989)
* [OCPBUGS-74546](https://issues.redhat.com/browse/OCPBUGS-74546): Resolve nil pointer exception in hasResourceTags [#970](https://github.com/openshift/cloud-credential-operator/pull/970)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/0e03b7a0fa39e7da3a4b5a180915adc44c408d08...2d79084b613a87eb3d236635933e3ff56e9b7773)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/6b1d2ef88e19d32143d389de6999c765c7e30cad)

* [OCPBUGS-78690](https://issues.redhat.com/browse/OCPBUGS-78690): allow clusterapi provider to skip paused resources [#411](https://github.com/openshift/kubernetes-autoscaler/pull/411)
* [OCPBUGS-77506](https://issues.redhat.com/browse/OCPBUGS-77506): Pick upstream commits to Fix VPA recommender concurrent access panic [#407](https://github.com/openshift/kubernetes-autoscaler/pull/407)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/aaf5a61941b70a3b5792c0541e97356565c9977f...6b1d2ef88e19d32143d389de6999c765c7e30cad)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/5cc04a88456ead0f8961c6a12e7002ef3e23b0fc)

* [OCPBUGS-76340](https://issues.redhat.com/browse/OCPBUGS-76340): Explicitly set the ReadOnlyRootFilesystem flag to false [#555](https://github.com/openshift/cluster-baremetal-operator/pull/555)
* [OCPBUGS-77488](https://issues.redhat.com/browse/OCPBUGS-77488): Fix NO_PROXY matching for URLs with trailing dots [#567](https://github.com/openshift/cluster-baremetal-operator/pull/567)
* [OCPBUGS-77074](https://issues.redhat.com/browse/OCPBUGS-77074): Update kubebuilder tools to more latest version [#559](https://github.com/openshift/cluster-baremetal-operator/pull/559)
* [OCPBUGS-75933](https://issues.redhat.com/browse/OCPBUGS-75933): Explicitly set ReadOnlyRootFilesystem to false for machine-os-images so that SCC don't end up enforcing it to true [#552](https://github.com/openshift/cluster-baremetal-operator/pull/552)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/b95fe25b79e6e411d5451db09d20239fae1a7175...5cc04a88456ead0f8961c6a12e7002ef3e23b0fc)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/d4171c720f49821e9e578a1bf4c6ce92d569ef13)

* [OCPBUGS-78047](https://issues.redhat.com/browse/OCPBUGS-78047): Prefer to remove members where they have another healthy machine in the same failure domain index [#1564](https://github.com/openshift/cluster-etcd-operator/pull/1564)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/cf5fcdeba6032fcb81d1fd05e61c77ad68a9dd6c...d4171c720f49821e9e578a1bf4c6ce92d569ef13)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/b85497d2202b30ead006502767b96419c3a1c87e)

* [OCPBUGS-79419](https://issues.redhat.com/browse/OCPBUGS-79419): : Always set service-account-jwks-uri to LB URL even with custom issuer [#2078](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2078)
* [OCPBUGS-77005](https://issues.redhat.com/browse/OCPBUGS-77005): scc: restricted-v3: Fix runAsUser range [#1948](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1948)
* [OCPBUGS-74229](https://issues.redhat.com/browse/OCPBUGS-74229): SCC: allow image volume type for all SCCs [#2006](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2006)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/974542ae2ef86a631546b3a48fd0da3c2e3b74dd...b85497d2202b30ead006502767b96419c3a1c87e)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/7cac34952f982895b5fdae60b29376fba838be89)

* [CNTRLPLANE-2843](https://issues.redhat.com/browse/CNTRLPLANE-2843): chore: update OWNERS [#620](https://github.com/openshift/cluster-kube-scheduler-operator/pull/620)
* [OCPBUGS-74337](https://issues.redhat.com/browse/OCPBUGS-74337): Add OPERATOR_IMAGE_VERSION to recovery container [#604](https://github.com/openshift/cluster-kube-scheduler-operator/pull/604)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/ad21ef032211c5455a3ba48c7147b27558204658...7cac34952f982895b5fdae60b29376fba838be89)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/d58e99ade6e2de3436dd0a97e729704731c943bf)

* [OCPBUGS-74490](https://issues.redhat.com/browse/OCPBUGS-74490): Include `kube_pod_labels` in minimal profile [#2844](https://github.com/openshift/cluster-monitoring-operator/pull/2844)
* [OCPBUGS-77272](https://issues.redhat.com/browse/OCPBUGS-77272): AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change [#2835](https://github.com/openshift/cluster-monitoring-operator/pull/2835)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/a309554e9c8c88189f4aa849dfe16b475ff789c7...d58e99ade6e2de3436dd0a97e729704731c943bf)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/d1ec37ecb90d74eccc8d8c3e0bc42a8c0fb5ac6a)

* [OCPBUGS-77148](https://issues.redhat.com/browse/OCPBUGS-77148): Add config override for openflow-probe [#2918](https://github.com/openshift/cluster-network-operator/pull/2918)
* [OCPBUGS-76349](https://issues.redhat.com/browse/OCPBUGS-76349): Remove duplicated openssl parameter [#2901](https://github.com/openshift/cluster-network-operator/pull/2901)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/63bfcdac6e6d861a4bc54dad13e91bd60e767b18...d1ec37ecb90d74eccc8d8c3e0bc42a8c0fb5ac6a)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/b1f1c24b2a97a1691346b3f31e52026c07abc845)

* [OCPBUGS-78247](https://issues.redhat.com/browse/OCPBUGS-78247): workloadhints: use IsVM to skip BM-only tests [#1482](https://github.com/openshift/cluster-node-tuning-operator/pull/1482)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/601b61fe23b44be64007c238c4299ca1ae594292...b1f1c24b2a97a1691346b3f31e52026c07abc845)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/be41e5b433d5feb464595c66746d1d40cf48912d)

* [OCPBUGS-75912](https://issues.redhat.com/browse/OCPBUGS-75912): add vsphere permissions for checking if users is authorized to see metrics [#663](https://github.com/openshift/cluster-storage-operator/pull/663)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/17cfc8afb07abe7bd4410ed8961195b8686c8e3f...be41e5b433d5feb464595c66746d1d40cf48912d)


### [console](https://github.com/openshift/console/tree/19415628c1dee857fa78f8f22f87c568fadb7b58)

* [OCPBUGS-78366](https://issues.redhat.com/browse/OCPBUGS-78366): Clean up old session cookies to prevent accumulation [#16136](https://github.com/openshift/console/pull/16136)
* [OCPBUGS-78839](https://issues.redhat.com/browse/OCPBUGS-78839), [OCPBUGS-79465](https://issues.redhat.com/browse/OCPBUGS-79465), [OCPBUGS-79466](https://issues.redhat.com/browse/OCPBUGS-79466): apiVersion is empty on YAML creation page - Runtime error occurs when create MachineConfig with default yaml from… [#16192](https://github.com/openshift/console/pull/16192)
* [OCPBUGS-76951](https://issues.redhat.com/browse/OCPBUGS-76951): “Import from Git” should not force HTTPS/443 for Git providers (GitHub/GitLab/Bitbucket) [#16029](https://github.com/openshift/console/pull/16029)
* [OCPBUGS-77951](https://issues.redhat.com/browse/OCPBUGS-77951): Fix infinite recursion in project access form [#16117](https://github.com/openshift/console/pull/16117)
* [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16070](https://github.com/openshift/console/pull/16070)
* [OCPBUGS-76543](https://issues.redhat.com/browse/OCPBUGS-76543): Use Actions button instead of kebab menu on Subscription details page [#16018](https://github.com/openshift/console/pull/16018)
* [OCPBUGS-75880](https://issues.redhat.com/browse/OCPBUGS-75880): Fix referenceFor parameter in SubscriptionDetailsPage [#15987](https://github.com/openshift/console/pull/15987)
* [Full changelog](https://github.com/openshift/console/compare/ed2d72211ddaa70388bd6d2946510fb597be32c0...19415628c1dee857fa78f8f22f87c568fadb7b58)


### [console-operator](https://github.com/openshift/console-operator/tree/1bb7f6f4e7851997fd24c5f5aa5be41ea8dd5bd2)

* [OCPBUGS-77771](https://issues.redhat.com/browse/OCPBUGS-77771): Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads [#1122](https://github.com/openshift/console-operator/pull/1122)
* [OCPBUGS-76267](https://issues.redhat.com/browse/OCPBUGS-76267): Fix PDB blocking node drains during cluster upgrades + update donwloads deployment [#1105](https://github.com/openshift/console-operator/pull/1105)
* [Full changelog](https://github.com/openshift/console-operator/compare/ac81d030ea60351838be670de5ddca92a0320d45...1bb7f6f4e7851997fd24c5f5aa5be41ea8dd5bd2)


### [docker-builder](https://github.com/openshift/builder/tree/35afa308e2473046721057112d804334fc4b8217)

* [OCPBUGS-66991](https://issues.redhat.com/browse/OCPBUGS-66991): bump buildah to 1.39.7 to fix CVE-2025-52881 [#496](https://github.com/openshift/builder/pull/496)
* [Full changelog](https://github.com/openshift/builder/compare/8c0a564f464540d0e2ffc0ce4c98d90a730bc2d2...35afa308e2473046721057112d804334fc4b8217)


### [docker-registry](https://github.com/openshift/image-registry/tree/0e96a08424d601be55341bc3f4412fde977602c8)

* [OCPBUGS-68327](https://issues.redhat.com/browse/OCPBUGS-68327): update logrus to v1.9.1 [#462](https://github.com/openshift/image-registry/pull/462)
* [Full changelog](https://github.com/openshift/image-registry/compare/0c09647aa2db93a8584dfe8079ed919145c662fb...0e96a08424d601be55341bc3f4412fde977602c8)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/62e1f6040cd297149f5f14e0d20814759ec61354)

* [OCPBUGS-78783](https://issues.redhat.com/browse/OCPBUGS-78783): Support ubi minimal base image [#187](https://github.com/openshift/driver-toolkit/pull/187)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/9d55fd1aaba05830f857132bd149ee3cf18cc20f...62e1f6040cd297149f5f14e0d20814759ec61354)


### [etcd](https://github.com/openshift/etcd/tree/05bca97760b1cfa1bcef11c0b1f1a5c4dab19709)

* [OCPBUGS-70151](https://issues.redhat.com/browse/OCPBUGS-70151): 4.20 rebase 3.5.26 [#358](https://github.com/openshift/etcd/pull/358)
* [Full changelog](https://github.com/openshift/etcd/compare/eac09c01677bb03daed156d407be27785fd61e0d...05bca97760b1cfa1bcef11c0b1f1a5c4dab19709)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/e3014e749042475304daf566119b6330875eeff9)

* [OCPBUGS-77152](https://issues.redhat.com/browse/OCPBUGS-77152): Fix ose gcp cloud controller manager hermetic [#97](https://github.com/openshift/cloud-provider-gcp/pull/97)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/f940e72e7611ce4a96da3e47966ba1befd25c474...e3014e749042475304daf566119b6330875eeff9)


### [haproxy-router](https://github.com/openshift/router/tree/ef5cab6493660c738412ac322486707a40a58c4a)

* [OCPBUGS-78432](https://issues.redhat.com/browse/OCPBUGS-78432): Updating ose-haproxy-router-base-container image to be consistent with ART for 4.20 [#749](https://github.com/openshift/router/pull/749)
* [OCPBUGS-79529](https://issues.redhat.com/browse/OCPBUGS-79529): Lower verbosity for parseIPList empty list logging [#753](https://github.com/openshift/router/pull/753)
* [Full changelog](https://github.com/openshift/router/compare/db8d384266051ef06b67883aaa83674bc6c9f1ae...ef5cab6493660c738412ac322486707a40a58c4a)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/4ef1baeb6786a70898f3842a06e988d9566aa444)

* [OCPBUGS-77476](https://issues.redhat.com/browse/OCPBUGS-77476): Rebase v1.33.9 to release-4.20 [#2614](https://github.com/openshift/kubernetes/pull/2614)
* [OCPBUGS-76517](https://issues.redhat.com/browse/OCPBUGS-76517): Bump 1.33.8 [#2595](https://github.com/openshift/kubernetes/pull/2595)
* [Full changelog](https://github.com/openshift/kubernetes/compare/53f1c84ab86e3e029927fc302d5a1e4e0bf47eed...4ef1baeb6786a70898f3842a06e988d9566aa444)


### [hypershift](https://github.com/openshift/hypershift/tree/4095f73eb503f11c94229557e799c1b5c2da71b4)

* [OCPBUGS-80950](https://issues.redhat.com/browse/OCPBUGS-80950): fix(cpo): Don't remove HCP Ingress from routes when CapabilityRoute is disabled [#8083](https://github.com/openshift/hypershift/pull/8083)
* [OCPBUGS-78979](https://issues.redhat.com/browse/OCPBUGS-78979): fix(hostedcluster): Remove referenced resource annotations regardless of hcp status [#8023](https://github.com/openshift/hypershift/pull/8023)
* [CNTRLPLANE-3008](https://issues.redhat.com/browse/CNTRLPLANE-3008): Azure web identity webhook 4.20 [#7998](https://github.com/openshift/hypershift/pull/7998)
* [OCPBUGS-78741](https://issues.redhat.com/browse/OCPBUGS-78741): fix(sync-global-pullsecret): compare content ignoring trailing newlines [#7976](https://github.com/openshift/hypershift/pull/7976)
* [CNTRLPLANE-2814](https://issues.redhat.com/browse/CNTRLPLANE-2814): feat(aro): Swift support [#7885](https://github.com/openshift/hypershift/pull/7885)
* [OCPBUGS-76992](https://issues.redhat.com/browse/OCPBUGS-76992): fix kubevirt, use 100.66.0.0/16 for join subnet [#7733](https://github.com/openshift/hypershift/pull/7733)
* [OCPBUGS-78305](https://issues.redhat.com/browse/OCPBUGS-78305): Fix context cancel accumulation in getMirrorFromICSPOrIDMS [#7890](https://github.com/openshift/hypershift/pull/7890)
* [OCPBUGS-76324](https://issues.redhat.com/browse/OCPBUGS-76324): feat(updates): enable CVO metrics access with RHOBS monitoring flag [#7660](https://github.com/openshift/hypershift/pull/7660)
* [OCPBUGS-77366](https://issues.redhat.com/browse/OCPBUGS-77366): Fix ignition-server pod restarts [#7842](https://github.com/openshift/hypershift/pull/7842)
* [OCPBUGS-75931](https://issues.redhat.com/browse/OCPBUGS-75931): [release-4.20] fix(cpo): Correct route labeling logic for HCP router infrastructure [#7642](https://github.com/openshift/hypershift/pull/7642)
* [OCPBUGS-74105](https://issues.redhat.com/browse/OCPBUGS-74105): Fix CVE-2025-58183 [#7546](https://github.com/openshift/hypershift/pull/7546)
* [CNTRLPLANE-2680](https://issues.redhat.com/browse/CNTRLPLANE-2680): Add support for setting max expiration duration for KAS service account tokens [#7707](https://github.com/openshift/hypershift/pull/7707)
* [OCPBUGS-74775](https://issues.redhat.com/browse/OCPBUGS-74775): feat(cpo): check components are available before setting HostedCluster available [#7616](https://github.com/openshift/hypershift/pull/7616)
* [Full changelog](https://github.com/openshift/hypershift/compare/d422e678c60ed6250c870365cd48d50355fa472f...4095f73eb503f11c94229557e799c1b5c2da71b4)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/390a1fa872a3a43075ad27d79a260ed3ec1e924f)

* [OCPBUGS-77205](https://issues.redhat.com/browse/OCPBUGS-77205): [release-4.20] standardize build paths [#120](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/120)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/19801353c97d08b1333177be45c848082af0643c...390a1fa872a3a43075ad27d79a260ed3ec1e924f)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/e63e7a191ccc1d391b574d713899e307a88b466c)

* [OCPBUGS-81317](https://issues.redhat.com/browse/OCPBUGS-81317): bump vpc go sdk [#89](https://github.com/openshift/machine-api-provider-ibmcloud/pull/89)
* NO-JIRA: Modernize test infrastructure to align with other MAPI providers [#85](https://github.com/openshift/machine-api-provider-ibmcloud/pull/85)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/035805df5277c9f9c0cd9d4a44f59a08ab3ce031...e63e7a191ccc1d391b574d713899e307a88b466c)


### [insights-operator](https://github.com/openshift/insights-operator/tree/385e38c03c0bc5200dd841418e3302b2e5356899)

* [OCPBUGS-76961](https://issues.redhat.com/browse/OCPBUGS-76961): Extends the time for the extractor liveness probe [#1231](https://github.com/openshift/insights-operator/pull/1231)
* [OCPBUGS-74902](https://issues.redhat.com/browse/OCPBUGS-74902): set Progressing condition on cluster update [#1219](https://github.com/openshift/insights-operator/pull/1219)
* [Full changelog](https://github.com/openshift/insights-operator/compare/550618f5edf18bc1cb8f743e8c6a6f713e7e3e4e...385e38c03c0bc5200dd841418e3302b2e5356899)


### [insights-runtime-exporter, insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor/tree/39e71471d109ed16c336a8e08c2562d837f90029)

* [OCPBUGS-77566](https://issues.redhat.com/browse/OCPBUGS-77566): remove dnf cache from the container images [#66](https://github.com/openshift/insights-runtime-extractor/pull/66)
* [Full changelog](https://github.com/openshift/insights-runtime-extractor/compare/3d3783698b20f5c27e4f35051b1450e47e789068...39e71471d109ed16c336a8e08c2562d837f90029)


### [ironic](https://github.com/openshift/ironic-image/tree/9d5e435bfe1796d6cbabef889cdb0c5cd681f15a)

* [OCPBUGS-74117](https://issues.redhat.com/browse/OCPBUGS-74117): Bump keystonemiddleware version to 10.9.0-0.20260216145500.557d173 for CVE-2026-22797 fix [#792](https://github.com/openshift/ironic-image/pull/792)
* [OCPBUGS-77264](https://issues.redhat.com/browse/OCPBUGS-77264): fix for minimal builds [#800](https://github.com/openshift/ironic-image/pull/800)
* [OCPBUGS-76539](https://issues.redhat.com/browse/OCPBUGS-76539): Update ironic hash for 4.20 with heartbeat inspection fix [#788](https://github.com/openshift/ironic-image/pull/788)
* Bug OCPBUGS-76547: Bump 4.20 ironic-image to include firmware update fixes [#787](https://github.com/openshift/ironic-image/pull/787)
* [Full changelog](https://github.com/openshift/ironic-image/compare/c6c2be3dbdedd8ab7c0b9701307c17df7d2bb591...9d5e435bfe1796d6cbabef889cdb0c5cd681f15a)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/652b8b4dcffda86f61e181b43cda184292372a14)

* [OCPBUGS-77264](https://issues.redhat.com/browse/OCPBUGS-77264): fixes for minimal builds [#244](https://github.com/openshift/ironic-agent-image/pull/244)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/6ae9e9e35571eedf00c240e10f62b56bbac1af07...652b8b4dcffda86f61e181b43cda184292372a14)


### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/a2d607b2f1196ac371074d5fd14df80462de5b8f)

* [OCPBUGS-74100](https://issues.redhat.com/browse/OCPBUGS-74100): [4.20] sync upstream 2026-01-27 [#62](https://github.com/openshift/cloud-provider-kubevirt/pull/62)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b...a2d607b2f1196ac371074d5fd14df80462de5b8f)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/8fb56226aede45e49fb2f362191c6dbcf50897c6)

* [OCPBUGS-79064](https://issues.redhat.com/browse/OCPBUGS-79064): Add annotation-based fallback for infra VM node ID resolution [#84](https://github.com/openshift/kubevirt-csi-driver/pull/84)
* [OCPBUGS-78371](https://issues.redhat.com/browse/OCPBUGS-78371): Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.20 [#78](https://github.com/openshift/kubevirt-csi-driver/pull/78)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/8b8dd30ecd302e2b260c666702dffb19abf7c1aa...8fb56226aede45e49fb2f362191c6dbcf50897c6)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/fb2a889cacce750be81def7584964bac2fb22cb2)

* [OCPBUGS-78424](https://issues.redhat.com/browse/OCPBUGS-78424): [release-4.20] Use resource group when generating default Azure image [#1475](https://github.com/openshift/machine-api-operator/pull/1475)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/4a9b90e306a04ddfacfa408609c98b48a1cdea17...fb2a889cacce750be81def7584964bac2fb22cb2)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/30c659cb9c2a39931bde3b48c6fc35f1c6ea1945)

* [OCPBUGS-80947](https://issues.redhat.com/browse/OCPBUGS-80947): Skip boot image updates until cluster is stable [#5812](https://github.com/openshift/machine-config-operator/pull/5812)
* [OCPBUGS-79370](https://issues.redhat.com/browse/OCPBUGS-79370): Re-order logger setting to eliminate race condition [#5791](https://github.com/openshift/machine-config-operator/pull/5791)
* [release 4.20] OCPBUGS-77252: Calculate machine counts in MCP status from node properties [#5692](https://github.com/openshift/machine-config-operator/pull/5692)
* [OCPBUGS-79577](https://issues.redhat.com/browse/OCPBUGS-79577): Update AMI Whitelist [#5806](https://github.com/openshift/machine-config-operator/pull/5806)
* [OCPBUGS-79371](https://issues.redhat.com/browse/OCPBUGS-79371): set default-timeout-stop to 200s globally [#5792](https://github.com/openshift/machine-config-operator/pull/5792)
* [OCPBUGS-78049](https://issues.redhat.com/browse/OCPBUGS-78049): install/0000_80_machine-config_04_kube_rbac_proxy_config: Consistent terminal newline [#5753](https://github.com/openshift/machine-config-operator/pull/5753)
* [OCPBUGS-77883](https://issues.redhat.com/browse/OCPBUGS-77883): Fix failure domain matching during vsphere boot image updates [#5745](https://github.com/openshift/machine-config-operator/pull/5745)
* [OCPBUGS-77950](https://issues.redhat.com/browse/OCPBUGS-77950): Update AMI Whitelist [#5748](https://github.com/openshift/machine-config-operator/pull/5748)
* [OCPBUGS-77665](https://issues.redhat.com/browse/OCPBUGS-77665): Update AMI Whitelist [#5731](https://github.com/openshift/machine-config-operator/pull/5731)
* [OCPBUGS-77064](https://issues.redhat.com/browse/OCPBUGS-77064): reduce MCO image size [#5673](https://github.com/openshift/machine-config-operator/pull/5673)
* [OCPBUGS-77472](https://issues.redhat.com/browse/OCPBUGS-77472): Clean up vsphere login error logging [#5715](https://github.com/openshift/machine-config-operator/pull/5715)
* [OCPBUGS-77369](https://issues.redhat.com/browse/OCPBUGS-77369): Remove MCD liveness probe [#5707](https://github.com/openshift/machine-config-operator/pull/5707)
* [OCPBUGS-77181](https://issues.redhat.com/browse/OCPBUGS-77181): mcd_config_drift not working properly [#5684](https://github.com/openshift/machine-config-operator/pull/5684)
* [OCPBUGS-76921](https://issues.redhat.com/browse/OCPBUGS-76921): Prevent unnecessary systemd unit disable [#5664](https://github.com/openshift/machine-config-operator/pull/5664)
* [OCPBUGS-77008](https://issues.redhat.com/browse/OCPBUGS-77008): Machine-config controller should not log about non-existent pull-secret changes [#5668](https://github.com/openshift/machine-config-operator/pull/5668)
* [OCPBUGS-74433](https://issues.redhat.com/browse/OCPBUGS-74433): Set `NodeDegraded` MCN condition when node state annotation is set to `Degraded` [#5649](https://github.com/openshift/machine-config-operator/pull/5649)
* [OCPBUGS-76339](https://issues.redhat.com/browse/OCPBUGS-76339): machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] [#5631](https://github.com/openshift/machine-config-operator/pull/5631)
* [OCPBUGS-76361](https://issues.redhat.com/browse/OCPBUGS-76361): Update AMI script and list [#5641](https://github.com/openshift/machine-config-operator/pull/5641)
* [OCPBUGS-74146](https://issues.redhat.com/browse/OCPBUGS-74146): enable nodeip-configuration for platform external [#5580](https://github.com/openshift/machine-config-operator/pull/5580)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/035a7f3c16e820ed0461b25ba82c263131ff6c3d...30c659cb9c2a39931bde3b48c6fc35f1c6ea1945)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/fe4360da1fe44c0d8a69c0133f846e0cbc36740c)

* [OCPBUGS-81296](https://issues.redhat.com/browse/OCPBUGS-81296): Return error when network data Secret lacks nmstate key [#172](https://github.com/openshift/image-customization-controller/pull/172)
* [OCPBUGS-77496](https://issues.redhat.com/browse/OCPBUGS-77496): Clean up dnf cache to reduce container image size [#165](https://github.com/openshift/image-customization-controller/pull/165)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/20f6d615c03b9c579037cdcdc327bd2bcefde4e6...fe4360da1fe44c0d8a69c0133f846e0cbc36740c)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/40d1566ceba42d18b3f59bbf816b7d771fff4da2)

* [OCPBUGS-78359](https://issues.redhat.com/browse/OCPBUGS-78359): fix for CVE-2025-69873 [#846](https://github.com/openshift/monitoring-plugin/pull/846)
* [OCPBUGS-78425](https://issues.redhat.com/browse/OCPBUGS-78425): Updating monitoring-plugin-container image to be consistent with ART for 4.20 [#843](https://github.com/openshift/monitoring-plugin/pull/843)
* [OU-1062](https://issues.redhat.com/browse/OU-1062): [release-4.20] feat: mark alert menu active for incidents tab [#826](https://github.com/openshift/monitoring-plugin/pull/826)
* [OCPBUGS-76581](https://issues.redhat.com/browse/OCPBUGS-76581): [release-4.20] CVE-2026-25639 openshift4/ose-monitoring-plugin-rhel9: Axios affected by Denial of Service via __proto__ Key in mergeConfig [#796](https://github.com/openshift/monitoring-plugin/pull/796)
* NO-JIRA: [release-4.20] e2e-monitoring fixing loop on legacy dashboard [#830](https://github.com/openshift/monitoring-plugin/pull/830)
* NO-JIRA: [release-4.20] simplify dockerfile by removing cachito dependencies [#807](https://github.com/openshift/monitoring-plugin/pull/807)
* revert #780 [#792](https://github.com/openshift/monitoring-plugin/pull/792)
* [OCPBUGS-76581](https://issues.redhat.com/browse/OCPBUGS-76581): [release-4.20] CVE-2026-25639 openshift4/ose-monitoring-plugin-rhel9:Axios affected by Denial of Service via __proto__ Key in mergeConfig [openshift-4.20] [#780](https://github.com/openshift/monitoring-plugin/pull/780)
* [OCPBUGS-76613](https://issues.redhat.com/browse/OCPBUGS-76613): [release-4.20] fix: update vulnerable dependencies [#766](https://github.com/openshift/monitoring-plugin/pull/766)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/5a0742a9e3fd7a30de2ca4245681dc15dbdeb1c5...40d1566ceba42d18b3f59bbf816b7d771fff4da2)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/afbdf82505c0d8f212d63e1eee6debced74ef653)

* [OCPBUGS-77548](https://issues.redhat.com/browse/OCPBUGS-77548): Clean up dnf cache [#102](https://github.com/openshift/multus-networkpolicy/pull/102)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/278ec20e795c3a590500e789716be7fcc4d7107b...afbdf82505c0d8f212d63e1eee6debced74ef653)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/266a459be33f24fd5267d8c7fce691ae2ddff6dc)

* [OCPBUGS-77226](https://issues.redhat.com/browse/OCPBUGS-77226): Fix NAD creation using default namespace instead of selected one [#350](https://github.com/openshift/networking-console-plugin/pull/350)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/8ce0b0d03a14727f0aed7d5bbc8a6529bb583cf2...266a459be33f24fd5267d8c7fce691ae2ddff6dc)


### [oauth-server](https://github.com/openshift/oauth-server/tree/21329625a0f5807af9c61e6cd65904c93d65e48c)

* [OCPBUGS-77500](https://issues.redhat.com/browse/OCPBUGS-77500): groupmapper: avoid mutating original group users slice when removing user [#214](https://github.com/openshift/oauth-server/pull/214)
* [OCPBUGS-68330](https://issues.redhat.com/browse/OCPBUGS-68330): go.mod: bump logrus from v1.9.0 to v1.9.3 to fix CVE-2025-65637 [#209](https://github.com/openshift/oauth-server/pull/209)
* [Full changelog](https://github.com/openshift/oauth-server/compare/81098796234cbe75e656ffddd8a015953e0bb1c7...21329625a0f5807af9c61e6cd65904c93d65e48c)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/df9fe9c75eaf35c201e9ef89fb1e76163acbc9d5)

* [OCPBUGS-77416](https://issues.redhat.com/browse/OCPBUGS-77416): Fix registriesd "unknown userid" failure for arbitrary UIDs [#1360](https://github.com/openshift/oc-mirror/pull/1360)
* [OCPBUGS-76630](https://issues.redhat.com/browse/OCPBUGS-76630): Fix reg config detection for explicit false values [#1350](https://github.com/openshift/oc-mirror/pull/1350)
* [OCPBUGS-76949](https://issues.redhat.com/browse/OCPBUGS-76949): fix conversion issue for catalog [#1353](https://github.com/openshift/oc-mirror/pull/1353)
* [OCPBUGS-75007](https://issues.redhat.com/browse/OCPBUGS-75007): [release-4.20] fix duplicated channel bug in filtered catalogs [#1347](https://github.com/openshift/oc-mirror/pull/1347)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/f4775a263f2ddbc9f94c9349231883614dce0193...df9fe9c75eaf35c201e9ef89fb1e76163acbc9d5)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/7f8ae5007e4299769e25172a821342dc2874567c)

* [OCPBUGS-69645](https://issues.redhat.com/browse/OCPBUGS-69645): Don't record event for every reconcile [#145](https://github.com/openshift/machine-api-provider-openstack/pull/145)
* [OCPBUGS-76790](https://issues.redhat.com/browse/OCPBUGS-76790): Fix make test [#157](https://github.com/openshift/machine-api-provider-openstack/pull/157)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/17553a99107499d7610669db86ed91ae391a35d9...7f8ae5007e4299769e25172a821342dc2874567c)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/72a01f66530d38330e9442d2238ab30aa90dcb39)

* [OCPBUGS-79681](https://issues.redhat.com/browse/OCPBUGS-79681): Fix nil pointer dereference in sortUnpackJobs when sorting non-failed jobs [#1267](https://github.com/openshift/operator-framework-olm/pull/1267)
* [OCPBUGS-81292](https://issues.redhat.com/browse/OCPBUGS-81292): add jiazha to approvers [#1269](https://github.com/openshift/operator-framework-olm/pull/1269)
* [OCPBUGS-77958](https://issues.redhat.com/browse/OCPBUGS-77958): Update NetworkPolicy egress for HyperShift custom API ports [#1253](https://github.com/openshift/operator-framework-olm/pull/1253)
* [OCPBUGS-77230](https://issues.redhat.com/browse/OCPBUGS-77230): Remove the collect-profiles info from the microshift kustomization file [#1236](https://github.com/openshift/operator-framework-olm/pull/1236)
* [OCPBUGS-76335](https://issues.redhat.com/browse/OCPBUGS-76335): Remove the collect-profiles job [#1223](https://github.com/openshift/operator-framework-olm/pull/1223)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/0d95a7ef5d73153f5593e67bc41c0c7a53567ee6...72a01f66530d38330e9442d2238ab30aa90dcb39)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/4ccd56c96839e2389e12bf3f8390a6c062e9b2cf)

* [OCPBUGS-77582](https://issues.redhat.com/browse/OCPBUGS-77582): Update NetworkPolicy egress to support HyperShift custom API ports [#730](https://github.com/operator-framework/operator-marketplace/pull/730)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/837defb90f7fa1c811806b10dcac5e0952f2d766...4ccd56c96839e2389e12bf3f8390a6c062e9b2cf)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/2aec60c6a5b5238c7c75173a1518322ea595a58e)

* [OCPBUGS-79537](https://issues.redhat.com/browse/OCPBUGS-79537): EgressFirewall: Use exponential backoff to refresh IP addresses for DNS names [#3088](https://github.com/openshift/ovn-kubernetes/pull/3088)
* [OCPBUGS-77148](https://issues.redhat.com/browse/OCPBUGS-77148): Minimize ACLs by combining ipBlocks into single ACL [#2981](https://github.com/openshift/ovn-kubernetes/pull/2981)
* [OCPBUGS-77357](https://issues.redhat.com/browse/OCPBUGS-77357): Clear stale conntrack UDP entries for nodePorts [#3012](https://github.com/openshift/ovn-kubernetes/pull/3012)
* [OCPBUGS-77081](https://issues.redhat.com/browse/OCPBUGS-77081), [OCPBUGS-77094](https://issues.redhat.com/browse/OCPBUGS-77094): [release-4.20] combined backport PR for 2 escalations [#2985](https://github.com/openshift/ovn-kubernetes/pull/2985)
* [OCPBUGS-73788](https://issues.redhat.com/browse/OCPBUGS-73788): Fix service flows for BGP on IPV6 [#2934](https://github.com/openshift/ovn-kubernetes/pull/2934)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/3f6615b1bb18ff1841fe4596bd32cb91bc2854e6...2aec60c6a5b5238c7c75173a1518322ea595a58e)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/c01c305459d241c9623b9af2538fb4404715302b)

* [OCPBUGS-75818](https://issues.redhat.com/browse/OCPBUGS-75818): Mitigate CVE-2025-61726 by bumping golang to 1.24.13 [#113](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/113)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/0693fe5dcfab224466fba7a19e614de71f727999...c01c305459d241c9623b9af2538fb4404715302b)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/4036cd3b5e45cf4d8c3c34def599657435601661)

* [OCPBUGS-80676](https://issues.redhat.com/browse/OCPBUGS-80676): Fix CVE-2026-33186 by bumping google.golang.org/grpc to v1.79.3 [#108](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/108)
* [OCPBUGS-75820](https://issues.redhat.com/browse/OCPBUGS-75820): Mitigate CVE-2025-61726 by bumping golang to 1.24.13 [#105](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/105)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/319efc99be8cc2603fad1677acee7c4a4a096913...4036cd3b5e45cf4d8c3c34def599657435601661)


### [prometheus](https://github.com/openshift/prometheus/tree/72dbf103acd3a59ba6bb6979e255a0c82864956c)

* [OCPBUGS-78582](https://issues.redhat.com/browse/OCPBUGS-78582): [release-4.20] chore(kubernetes): deduplicate warning logs from the API [#299](https://github.com/openshift/prometheus/pull/299)
* [Full changelog](https://github.com/openshift/prometheus/compare/af9b206808f8eaeb4acec7fe74ba6b145bbdc921...72dbf103acd3a59ba6bb6979e255a0c82864956c)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/425294dded74054100db465d296b2aa76e7a691e)

* [OCPBUGS-77296](https://issues.redhat.com/browse/OCPBUGS-77296): backport upstream fix to reconcile resources with inconsistent status [#367](https://github.com/openshift/prometheus-operator/pull/367)
* [OCPBUGS-77190](https://issues.redhat.com/browse/OCPBUGS-77190): Validate `webhookURL` secret for `MSTeams` receiver in `AlertmanagerConfig` CRD [#362](https://github.com/openshift/prometheus-operator/pull/362)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/e2bd260c9d686192a5ed9b85dfd4a9f7a2a03666...425294dded74054100db465d296b2aa76e7a691e)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/ec18e9be0ebcbd7cb262d31f50148f81d0edd48f)

* [OCPBUGS-76957](https://issues.redhat.com/browse/OCPBUGS-76957): filter ingress namespace on UnmanagedRoutes metric [#74](https://github.com/openshift/route-controller-manager/pull/74)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/bf2fa662f57f233d8541f94c4953e0dcd7a5ab20...ec18e9be0ebcbd7cb262d31f50148f81d0edd48f)


### [tests](https://github.com/openshift/origin/tree/43070aa59d358721b29a0cf828b2b4475c0ac63e)

* : run resource request/limit check early [#30888](https://github.com/openshift/origin/pull/30888)
* [OCPBUGS-78025](https://issues.redhat.com/browse/OCPBUGS-78025): Skip oauth test for external control plane topology [#30848](https://github.com/openshift/origin/pull/30848)
* [OCPBUGS-78084](https://issues.redhat.com/browse/OCPBUGS-78084): Update optimized builds test to use rpm -qa instead of dnf [#30861](https://github.com/openshift/origin/pull/30861)
* [OCPBUGS-78084](https://issues.redhat.com/browse/OCPBUGS-78084): Allow test to tolerate running on minimal images [#30853](https://github.com/openshift/origin/pull/30853)
* [OCPBUGS-77824](https://issues.redhat.com/browse/OCPBUGS-77824): add the missing namespace from managed openshift [#30837](https://github.com/openshift/origin/pull/30837)
* [OCPBUGS-77776](https://issues.redhat.com/browse/OCPBUGS-77776): Update MCN tests to better handle condition transitions through the "Unknown" state [#30829](https://github.com/openshift/origin/pull/30829)
* [Full changelog](https://github.com/openshift/origin/compare/e2a089fdea4ee23487994478c08ae0901ae5f1ee...43070aa59d358721b29a0cf828b2b4475c0ac63e)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/6d0cfe391f8f76211f14f34a23612722603fe56b)

* [OCPBUGS-78436](https://issues.redhat.com/browse/OCPBUGS-78436): Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.20 [#92](https://github.com/openshift/cluster-api-provider-vsphere/pull/92)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/1ff9e11f5a117505d935549b96cd0d129917c015...6d0cfe391f8f76211f14f34a23612722603fe56b)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/65d066ab0940dc69aa3f7ec6b02e698a6e4f5795)

* [OCPBUGS-74901](https://issues.redhat.com/browse/OCPBUGS-74901): fix concurrent map writes [#208](https://github.com/openshift/vsphere-problem-detector/pull/208)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/a417b217d7f39b02ba0bc1b75aa3bf52602df189...65d066ab0940dc69aa3f7ec6b02e698a6e4f5795)