# 4.20.27

Created: 2026-06-25 11:06:23 +0000 UTC

Image Digest: `sha256:05f959160351e81679dfab48bab274579fcc320244cabe974410718b132445b1`


## Changes from 4.20.16

### Components

* Kubectl 1.33.3
* Kubernetes upgraded from 1.33.8 to 1.33.12
* Kubernetes Tests 1.33.4
* Red Hat Enterprise Linux CoreOS upgraded from 9.6.20260303-1 to 9.6.20260623-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| GatewayAPIWithoutOLM <br/> (5 tests)|  |  |  |  |  |   |


### Removed images

* libvirt-machine-controllers
* ovirt-csi-driver
* ovirt-csi-driver-operator


### Rebuilt images without code change

* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [637327ec](https://github.com/openshift/assisted-installer-agent/commit/637327ec40cd1f85ac5d7d4f114a2fae89baa8b0) `sha256:abe8d278e2f88567559cbe4c1d8962fd54815d822f307dee4a380330f2f43a48`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [e3e997d9](https://github.com/openshift/agent-installer-utils/commit/e3e997d9f7b84b134a07186de9bddde21598ae32) `sha256:b58e2a28188e95c44cf5dd5826528e4f6c85e4feddc5742b4e5a59695a1fad2f`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [11b24a2c](https://github.com/openshift/apiserver-network-proxy/commit/11b24a2c7452ef683a1d989f1016e6e815f5c112) `sha256:c95d8c832c45eb1ddabaae7d45d1b1f19df98883448bca02c9260fa816f9b8be`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [bb88da16](https://github.com/openshift/cloud-provider-aws/commit/bb88da16b29d63573861351afc5ca8c4547775d6) `sha256:6758120da1e21e78074e064680b6a21ec421360fab74810a06fa0a729a98222f`
* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [300439ea](https://github.com/openshift/cluster-api-provider-aws/commit/300439ea0736444a160c061578b3bd8956d4f7e6) `sha256:760f921cfd624722a3dcf837ecb46f7bef5de106951062f38c2c1db85ac0846a`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [b37141b0](https://github.com/openshift/aws-karpenter-provider-aws/commit/b37141b051bdf790eb7e8f45b95f6bd7dc8140f4) `sha256:c71402297fe896b153ab6fbb6b7c09308c481c26e491005b6e64a3293e530f08`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [999f4f76](https://github.com/openshift/machine-api-provider-aws/commit/999f4f76124e66c7b42af678cb19aff4b29f72d4) `sha256:06d02c1412fde55489cfcb51f37bfcaeb49ca2cfd15e7ba1d119cbaeb20a6355`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [8e83772a](https://github.com/openshift/aws-pod-identity-webhook/commit/8e83772ab8d31b32225744d4f0b0023680692daf) `sha256:b62c881739ba1b92f7509d8a069b8668b1d5f0a99a07cff68690aa013d3c188c`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [68db9150](https://github.com/openshift/machine-api-provider-azure/commit/68db91507ea47f767ee0dc838c08cc371d2ff69f) `sha256:9ceb3107006651251290b2e9bd8814fa5fd651e8925af967be190a691c013535`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [88b18175](https://github.com/openshift/azure-workload-identity/commit/88b18175e46fe305486d172ec0b4e8471c55e30b) `sha256:6f07d1842f10021935e3ce2324564960e55e6f589295f9b34f566e6278e7e3ae`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [f782ba74](https://github.com/openshift/cluster-api-provider-metal3/commit/f782ba747ed353721c84ceb754ca8403f94adb6a) `sha256:b1b4c39f15cd8c6cb169475b71d7b93ba2cb1800073ff82e49bef28dde318b96`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [fb678fec](https://github.com/openshift/cluster-api-provider-baremetal/commit/fb678fec5f7e08348b281341481f33a848204e50) `sha256:866aaf6b594d6d9fef8714b46844693e02c85c43f1f05cc66d1435f9abfc1fd8`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [d22915bc](https://github.com/openshift/cloud-network-config-controller/commit/d22915bc82993ce11cb3fb97e6ae00602f30549b) `sha256:5e8e372fb0b25ed4866f3edc1c0af37ad330604b866cce90d0db02ca6a53a9c4`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [147e5a7f](https://github.com/openshift/cluster-autoscaler-operator/commit/147e5a7ff20b46ade7dd932b47e06ca82729f5e8) `sha256:e9c5b883ae408d9576f21929ac0ac6ef627efb42b242928de875d24314c53ec3`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [74abc555](https://github.com/openshift/cluster-bootstrap/commit/74abc555111bac56a67957ef517ef086e4643c50) `sha256:59a1c144a1c115ed4ffc45778382fe12d09b4f42f8a9955aced292e83facedaa`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [276696cc](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/276696ccf679830b25df341edb7aae9bb3f4e763) `sha256:c0c86e1886373a753189713d5faabe2924c6cdea8a01b53f750b43bcc30333b3`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [657754e2](https://github.com/openshift/cluster-config-operator/commit/657754e2beaed6295ff28bb0f7813cb1c9ce35b2) `sha256:66cfcf0c62c917d2eaf5125e003621b593fd31173b99d50c98cccdda476cb58a`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [0bbafe24](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/0bbafe24ade564bc62554251f36de90d524abcde) `sha256:7abfa459b3c9dfae46fc959bc077d4832ce077d9a08f7c8b804488e34750fe53`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [82578923](https://github.com/openshift/cluster-dns-operator/commit/82578923164636746e0d74d594ab32d83a660c0b) `sha256:513c9aaafbc848ba1a2417bd6994832740f16c27f88c3703ef217330a279e9a8`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [b04c7c12](https://github.com/openshift/cluster-image-registry-operator/commit/b04c7c121851704973a94a50e42af1425045899c) `sha256:c098a5c009e600c45c2acac03a2ec35ed140d1d60ef9430100907f9fe1e4a232`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [438c9dba](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/438c9dba80ddadeabe9efe4a654297a7b550b2b8) `sha256:8ea409f4141bf9ce9af017ee725479614c1bf2e775ffc497a0fa5f8b599a6d3c`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [5adc1429](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/5adc14299739bc64c8812cbab0b0ff2d12863602) `sha256:b64f1072ca349f8e59e64eaed40f1fb8a8ea31e4bd449856043e644775844a75`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [b3c82b2e](https://github.com/openshift/cluster-machine-approver/commit/b3c82b2eec66ae3ae510df0603af1212c34be618) `sha256:3cf80f31e6c8a1d2836ceaa79dacd5037d4d272d0da333076d9a39e60b74ae9f`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [9cfa5679](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/9cfa5679a8ac1e5a68eea32179d9e069da85dfcf) `sha256:62c782189f36a3f16f1568e18b9d6c980bfe0ae33b3c9b2f43b2f69e32e9d672`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [aa455c04](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/aa455c043152123595c2b4f72e02279aad9dd48a) `sha256:a2ad4194b661db9388e6693e2017b020c58c385bd994f13c11190e2caab0cab7`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [47c78310](https://github.com/openshift/cluster-policy-controller/commit/47c783103216aa5e1242632127a5d8f98b8b7455) `sha256:1ee401386d673ce6ab3566446ea819243b704fd400f9415eb5b404c3ee81bcf0`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [b343f70f](https://github.com/openshift/cluster-samples-operator/commit/b343f70f19ffd559e1a81d3a3e65bd106e634c13) `sha256:9fd69e937f2b1ba56551d44e11e66a8c0ace861210676d9e90c7e2fb42d5f275`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [c40e7b9b](https://github.com/openshift/cluster-update-keys/commit/c40e7b9b60c62690a25333fc54ae0d3705474afb) `sha256:9e463dc1d85e12654e2a1be7d818355acf82427e23f0fc9b3dd8b5d5e88cff7c`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [2438d7c8](https://github.com/openshift/configmap-reload/commit/2438d7c8e495201361d87da205649bc38fc4822b) `sha256:90285fe1efd66601fd3245c27da507efc1a9515f1bff4c8ba8d1257bc8690f79`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [184a9601](https://github.com/openshift/containernetworking-plugins/commit/184a96011a8cacb72319cdccb904271a99c5928d) `sha256:d502efe08e24a3a6c1e1278f99bf2487799fe22b8934d147a219403b4b0f8e78`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [184a9601](https://github.com/openshift/containernetworking-plugins/commit/184a96011a8cacb72319cdccb904271a99c5928d) `sha256:46d5e919ee16164e808b8c9e7b917e3bc20b443cda184772ad44a49a36bc7b5a`
* [coredns](https://github.com/openshift/coredns) git [6f39336e](https://github.com/openshift/coredns/commit/6f39336e6da9dc77b2db140a96773c413d50a665) `sha256:05c9efc6807f82f37f685eac51a4bb3966ef7181bbfc053d0f234e03aa963695`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [c674bea9](https://github.com/openshift/csi-external-resizer/commit/c674bea9bb6a81e463c7fefa974e2109d829daef) `sha256:2af2973cee25091d68e1a49286817814c1b2b6c43fed3d1a7800697fe130cfa5`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [693a8264](https://github.com/openshift/csi-external-snapshot-metadata/commit/693a826455777eaafc677bb2195dc071d184243b) `sha256:518ff334c9561512bd7920b65c2dd66348567cf3d1141a4204a624de4ca41923`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [1d6d6b27](https://github.com/openshift/csi-livenessprobe/commit/1d6d6b27460e58f24110c72ec9c96afe2c1d891d) `sha256:b9e79e97358553502dfa5e8bdab6884ef68ed9e2d6fe50e2c6f54656ebccc40b`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [6ce4713c](https://github.com/openshift/csi-node-driver-registrar/commit/6ce4713c87b735e2546a65a871bd2c7cfe383c31) `sha256:6ae9b2f5f9e7c0bc921a63d2201d0ee086665ebc16705e25e57b48b6616594a0`
* [docker-builder](https://github.com/openshift/builder) git [35afa308](https://github.com/openshift/builder/commit/35afa308e2473046721057112d804334fc4b8217) `sha256:5051e6d0ac81b16604560d2f76d7e01f8aad14460df96bdc0b31d4ac5de1f75a`
* [docker-registry](https://github.com/openshift/image-registry) git [0e96a084](https://github.com/openshift/image-registry/commit/0e96a08424d601be55341bc3f4412fde977602c8) `sha256:c91d3e14311518857ad4ba3235f1d92b896f8493cd89436250946c0d41eb1c3b`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [5e0f8d1b](https://github.com/openshift/egress-router-cni/commit/5e0f8d1b545899fda27c5e1cc8707d33cba1b534) `sha256:277ea975ec5d9e3b0f24463e9c973c1026c4ff8bea29b78c997999b15d88d766`
* [etcd](https://github.com/openshift/etcd) git [05bca977](https://github.com/openshift/etcd/commit/05bca97760b1cfa1bcef11c0b1f1a5c4dab19709) `sha256:07306683c37f883554a1fd23c82067327ae33db51e4c3d27107d2b2d9a92e1fb`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [b36788ed](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/b36788edd4c559cffd5f7f1b2e3e51b98c3e92b8) `sha256:7e79f5938bc45ab1bea2585c9c1ce747ea6d6a40daac8bd57498113c4c123fb2`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [36ab30f9](https://github.com/openshift/cloud-provider-ibm/commit/36ab30f90e87de0daa926d20ccda88c41abed191) `sha256:869be9e2689260a78f5c43f4d5aad144382fd7a5499038edf07663e1b93d61ea`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [21f405cc](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/21f405cce9573eee1c4f1cf95c0eb601ae77ed99) `sha256:8a82a8c11be8434bcc4c19d6364e9d14a287c25747f0f6a4fc704d25fe457425`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [8b6396a4](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/8b6396a4c78f4791b7f3c5ec404a78b499f8546b) `sha256:5d2ea38c535723b02204cc220fa11546905f072ff5c7682af4d58fa2ac837453`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [39e71471](https://github.com/openshift/insights-runtime-extractor/commit/39e71471d109ed16c336a8e08c2562d837f90029) `sha256:787ab7571e7b8a5799b703cbf44f0917617e2b156e123e091fad62a40b68f29c`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [39e71471](https://github.com/openshift/insights-runtime-extractor/commit/39e71471d109ed16c336a8e08c2562d837f90029) `sha256:8e804be72359976ad895eb9017bb32a3de15c63b5a526dbfe0f6dddc9acc83d7`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [652b8b4d](https://github.com/openshift/ironic-agent-image/commit/652b8b4dcffda86f61e181b43cda184292372a14) `sha256:99fc0f7697988bed4d1adfeb3082c3fb5b3556b9dfda7903ffb5d9d57fa83207`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [6c92e542](https://github.com/openshift/ironic-rhcos-downloader/commit/6c92e5425b58baa9d4dd951a992b7460e8407247) `sha256:2d100d0203da27ccfa4a40da08b8843d32a7e073fcf8d42d1a0a3daef46557f2`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [fa5b8b8b](https://github.com/openshift/ironic-static-ip-manager/commit/fa5b8b8bb73e509f74205a99a0ed1cb07a843885) `sha256:419c645747f4fcc072f39b67d7384e4c55a113e87fb5bca47eaafadf02c08cd2`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [b9134351](https://github.com/openshift/kube-rbac-proxy/commit/b9134351be37c43408334047d8eb85d0ac01fe4e) `sha256:3e8023c143295632c53e2e40009452e042cbc56fa0126db7cc27a9092d84bbb3`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [0f8a4eb8](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/0f8a4eb84ace9b746cf25d51d80dacf34ca5f953) `sha256:f3fe1281dae434f77d98f54f3b9aa852b0d5ffffec862b85b71a8506e0a82731`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [a2d607b2](https://github.com/openshift/cloud-provider-kubevirt/commit/a2d607b2f1196ac371074d5fd14df80462de5b8f) `sha256:2ed631ec03ecc5550a46a7f919b208d12daa1fddcf1f3980890493b4b6f76cc4`
* [metallb-frr](https://github.com/openshift/frr) git [3ca45c51](https://github.com/openshift/frr/commit/3ca45c517eafe07aac0866e5cbd32a5c08081f22) `sha256:b569175e391f6d92a6440c4450a3fb4e249f2f1c9b4720a445acb979bf4a4881`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [fc73c803](https://github.com/openshift/multus-admission-controller/commit/fc73c803caa1140e5a9115ceeb0e38504b001722) `sha256:692090cc55bc66ada38f6744b9590295323933a8d4fb7c4a7c6b1e01b1c9b2dd`
* [multus-cni](https://github.com/openshift/multus-cni) git [b2a2f457](https://github.com/openshift/multus-cni/commit/b2a2f457824490d93da101d983b25af966f2be1b) `sha256:7aba375a3caffa54e7a84732a4c774ede6ca5a6ddf155d25d486963c0f3d3fba`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [b2a2f457](https://github.com/openshift/multus-cni/commit/b2a2f457824490d93da101d983b25af966f2be1b) `sha256:744f937c043b748d7c8f21f0382482f76076615f5b37c5a86fe17828ef3086cd`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [afbdf825](https://github.com/openshift/multus-networkpolicy/commit/afbdf82505c0d8f212d63e1eee6debced74ef653) `sha256:9a1a235829c9551aa7a3357f797261a292003bf90ff78b2833c9a9c059ca410b`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:65acbde12d4989d24cef0d795fe187a9276b2eadac2d3a606478045234d14c5e`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [43c89591](https://github.com/openshift/whereabouts-cni/commit/43c8959152a6ca8afdc73eaed624286628c2c22e) `sha256:21802a7e0da67eb12cb93e13fdd2ac3843706c7496b345dc6bc194602c81a939`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [dd3c4d0b](https://github.com/openshift/bond-cni/commit/dd3c4d0b886138d974022b963e72f2e90293abfe) `sha256:017f79a2a2c16fe7ad743c24d8de8c560e69dc89e5fe78d7e9d39b1cfb3d56ee`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [b81340a9](https://github.com/openshift/network-metrics-daemon/commit/b81340a9fc6963fa3d64d215a12e8528ca797131) `sha256:97bcaa9c0d414084695e2dc4eb887007ef3679c6d4d847c1c3213ce6a2195f98`
* [network-tools](https://github.com/openshift/network-tools) git [26d09174](https://github.com/openshift/network-tools/commit/26d09174cbd92386469e777e3bf49bfa95d035d5) `sha256:5c42548fb723337e2dc3d3f36fee28afa0e46584f8191162c0d6b5270ba4f8b0`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [b575ef15](https://github.com/openshift/cloud-provider-nutanix/commit/b575ef15f13e1434c793ae50824fd0676480be05) `sha256:00edc3392df781e8d2f5b8fc1f0be508506e4f8582917b953eea95b18f94ffd7`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [3200ddef](https://github.com/openshift/machine-api-provider-nutanix/commit/3200ddef48a5a8d47b96539419c51f3619cb1fd5) `sha256:bb9e5b3fdcd697f64ee79cb5bd416193619b45e601263f31deefa4505e837eee`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [99f27d25](https://github.com/openshift/oauth-apiserver/commit/99f27d25cc2853fe44ce6c7f7611637ef1492e42) `sha256:f60c5bded83ec83635e25c52be9bcb860639b9d10f21d6ce5d00ad9edbf7065d`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [baba7b55](https://github.com/openshift/oauth-proxy/commit/baba7b55859172b58bd89eea8124eff3c0d64f3a) `sha256:11f5a268aaa8797a4480be4c52912d54830501bd9e6439576eb41f72b840efea`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [d9e543dd](https://github.com/openshift/openshift-controller-manager/commit/d9e543dd31e981f279c447e4f92f0dac3f665f9e) `sha256:144bc7c9adcde237afa831a6738ca39a4d1e41f09b7b9fba40f5c29458e3adcb`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [b04e2ef0](https://github.com/openshift/openshift-state-metrics/commit/b04e2ef05498c2a4504bd9396a3290c4f263fc37) `sha256:7992aa2b5c48944ee06032227412077468ef6d9350da51f3ae3b52401bdf3498`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [7f8ae500](https://github.com/openshift/machine-api-provider-openstack/commit/7f8ae5007e4299769e25172a821342dc2874567c) `sha256:bd9d03029d1720080dc0b1aff3d0bff92a4cc9fb83ac02b69c8a6eca60bf91e8`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [bf0d2c88](https://github.com/openshift/openstack-resource-controller/commit/bf0d2c88d6bf9bd90b24c979ea63dc37606b45fc) `sha256:9931eacdf8eef77e4144745bbf2553730faffbbf740fda2c39a6a9fa8df07e98`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [f011b3c7](https://github.com/openshift/machine-api-provider-powervs/commit/f011b3c727c5377302b2ab0a203457490b930a3d) `sha256:f50302b3ae009178317336b00305fdc71c1321328ebcf83ab84093b5df89a221`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [419f2843](https://github.com/openshift/prometheus-alertmanager/commit/419f2843332265d44982920d6fb4db220ec26f91) `sha256:b85bf08ee259d3fcd6e04a52dcf868d0a6a01656544a936c64961fe051852ece`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [425294dd](https://github.com/openshift/prometheus-operator/commit/425294dded74054100db465d296b2aa76e7a691e) `sha256:3c62d798c62b70e3b69a0d2d63ad822f5220c0a2588cdfae11fe511f47946296`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [fa749d65](https://github.com/openshift/node_exporter/commit/fa749d65d8eca1cc937554baab91385a78ec8ce1) `sha256:ff654b9e444792017205454b63fddb49473846917517dbc8f70db50379514fc8`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [425294dd](https://github.com/openshift/prometheus-operator/commit/425294dded74054100db465d296b2aa76e7a691e) `sha256:fa50ca949930b581d9552c1e021b468442e577d59055dc968a67540946651192`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [425294dd](https://github.com/openshift/prometheus-operator/commit/425294dded74054100db465d296b2aa76e7a691e) `sha256:413c66bd26121b7658168ef6b2e044a225c38b843c3b428e0f811bf6505ee969`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [37e0c317](https://github.com/openshift/service-ca-operator/commit/37e0c31790b6a954214817974a56c9a699d0cf78) `sha256:be9995054ba78302535b0cc7e2f01dd0f25e1ec484cf9c54a02a569cc19cff1e`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [0e61642f](https://github.com/openshift/volume-data-source-validator/commit/0e61642f8d898ee199e42f37319864851dd3627f) `sha256:f129a56b145d6c5d85e215c3280f5652b227e452752c7f2e20b18ca1bf02dfa7`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [b93eb64f](https://github.com/openshift/cloud-provider-vsphere/commit/b93eb64ff72e7c005687813c8b478d694a0f517a) `sha256:4a09721fc1b8889a5e7441b51ca435413a07758c134d6eaf2b92564aa14a0f51`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [65d066ab](https://github.com/openshift/vsphere-problem-detector/commit/65d066ab0940dc69aa3f7ec6b02e698a6e4f5795) `sha256:c20de8f72f2b704d92c3bb565558d9d67b1bf24862b30780dcad192aa3b89bdf`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/b271286656c2186ea8940ea6463da523f00094f0)

* [OCPBUGS-81880](https://issues.redhat.com/browse/OCPBUGS-81880): Mark raw FC/iSCSI multipath members as ineligible [#10149](https://github.com/openshift/assisted-service/pull/10149)
* [OCPBUGS-81880](https://issues.redhat.com/browse/OCPBUGS-81880): Prefer multipath disk in ABI disk selection [#10111](https://github.com/openshift/assisted-service/pull/10111)
* [Full changelog](https://github.com/openshift/assisted-service/compare/e07e2c76e1431afe13e2c34b3e08e0bb0903201f...b271286656c2186ea8940ea6463da523f00094f0)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/a26df06f52f1426defcf42c6cebcec5b7a956df3)

* [OCPBUGS-81641](https://issues.redhat.com/browse/OCPBUGS-81641): fix: allow workers to join TNA cluster when 1 master + arbiter are ready [#2070](https://github.com/openshift/assisted-installer/pull/2070)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/3accbb7bd0dd865744e0ef0808b65be5914b157e...a26df06f52f1426defcf42c6cebcec5b7a956df3)


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/1f0fec5ed74412d0f96e6a7239e9689b24563ebe)

* [OCPBUGS-85542](https://issues.redhat.com/browse/OCPBUGS-85542): Bump msw pkg version to 2.13.5 (#3730) [#3730](https://github.com/openshift-assisted/assisted-installer-ui/pull/3730)
* [OCPBUGS-84606](https://issues.redhat.com/browse/OCPBUGS-84606), [OCPBUGS-84829](https://issues.redhat.com/browse/OCPBUGS-84829), [OCPBUGS-84992](https://issues.redhat.com/browse/OCPBUGS-84992), [OCPBUGS-85008](https://issues.redhat.com/browse/OCPBUGS-85008), [OCPBUGS-85010](https://issues.redhat.com/browse/OCPBUGS-85010), [OCPBUGS-85038](https://issues.redhat.com/browse/OCPBUGS-85038): Bump axios to ^1.15.1 (#3691) [#3691](https://github.com/openshift-assisted/assisted-installer-ui/pull/3691)
* Update OWNERS file (#3657) [#3657](https://github.com/openshift-assisted/assisted-installer-ui/pull/3657)
* Bump happy-dom from 20.0.2 to 20.8.9 (#3526) [#3526](https://github.com/openshift-assisted/assisted-installer-ui/pull/3526)
* [OCPBUGS-77793](https://issues.redhat.com/browse/OCPBUGS-77793): bump react-router-dom-v5-compat to ^6.30.3 to address CVE-2026-22029 (#3582) [#3582](https://github.com/openshift-assisted/assisted-installer-ui/pull/3582)
* [OCPBUGS-77794](https://issues.redhat.com/browse/OCPBUGS-77794): upgrade lodash and lodash-es to 4.17.23 to address CVE-2025-13465 (#3546) [#3546](https://github.com/openshift-assisted/assisted-installer-ui/pull/3546)
* [OCPBUGS-83301](https://issues.redhat.com/browse/OCPBUGS-83301): bump axios to ^1.15.0 for fixing CVE-2026-40175 (#3584) [#3584](https://github.com/openshift-assisted/assisted-installer-ui/pull/3584)
* Updating assisted-installer-ui-container image to be consistent with ART for 4.20 (#3458) [#3458](https://github.com/openshift-assisted/assisted-installer-ui/pull/3458)
* Add support for release branches in PR workflow (#3529) [#3529](https://github.com/openshift-assisted/assisted-installer-ui/pull/3529)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/c0370c199bd9d314d14cdf668f4dddff6d475514...1f0fec5ed74412d0f96e6a7239e9689b24563ebe)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/6c99b973a6a5ca0202d56b87119714b9ec4a5365)

* [OCPBUGS-80562](https://issues.redhat.com/browse/OCPBUGS-80562): Bump google.golang.org/grpc to v1.79.3 [#311](https://github.com/openshift/aws-ebs-csi-driver/pull/311)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/a8ef205c28b7b8c80b0caf1c1a9e12f81f4fdbb9...6c99b973a6a5ca0202d56b87119714b9ec4a5365)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/910424793d59d291a9e6addaccbd2facf53e2bff)

* [OCPBUGS-85573](https://issues.redhat.com/browse/OCPBUGS-85573): Add init container for Manila node daemonset [#553](https://github.com/openshift/csi-operator/pull/553)
* [OCPBUGS-80667](https://issues.redhat.com/browse/OCPBUGS-80667): Bump google.golang.org/grpc to v1.79.3 [#540](https://github.com/openshift/csi-operator/pull/540)
* [OCPBUGS-74918](https://issues.redhat.com/browse/OCPBUGS-74918): adds the csi-external-resizer to the image-references [#529](https://github.com/openshift/csi-operator/pull/529)
* [Full changelog](https://github.com/openshift/csi-operator/compare/158b88f6d146e74cca1fc9b79379463fde546552...910424793d59d291a9e6addaccbd2facf53e2bff)


### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/0000b76a838f6b56efcfecfa110bc6795d0f7746)

* [OCPBUGS-80537](https://issues.redhat.com/browse/OCPBUGS-80537): Bump google.golang.org/grpc to v1.79.3 [#41](https://github.com/openshift/aws-encryption-provider/pull/41)
* [OCPBUGS-78426](https://issues.redhat.com/browse/OCPBUGS-78426): Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.20 [#34](https://github.com/openshift/aws-encryption-provider/pull/34)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/088dcaf73f980b977ef4f5d2f99e2a93deb87eef...0000b76a838f6b56efcfecfa110bc6795d0f7746)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/fbf11126955608076cd568c22be0d630c5db0d84)

* [OCPBUGS-80566](https://issues.redhat.com/browse/OCPBUGS-80566), [OCPBUGS-80567](https://issues.redhat.com/browse/OCPBUGS-80567): Bump google.golang.org/grpc to v1.79.3 [#179](https://github.com/openshift/cloud-provider-azure/pull/179)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/d469d04ed645358d942af442fe21e2c2b44b9b2c...fbf11126955608076cd568c22be0d630c5db0d84)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/c29c68dd2a576f19771dfd0c349b34f890063cdc)

* [OCPBUGS-80568](https://issues.redhat.com/browse/OCPBUGS-80568): Bump google.golang.org/grpc to v1.79.3 [#384](https://github.com/openshift/cluster-api-provider-azure/pull/384)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/cb8b5b6a485971a95c5a74508d76ab19b23cbf29...c29c68dd2a576f19771dfd0c349b34f890063cdc)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/e1ea4e929c51a3fe6823ffb5fd17fb07971ca86d)

* [OCPBUGS-80569](https://issues.redhat.com/browse/OCPBUGS-80569): Bump google.golang.org/grpc to v1.79.3 [#140](https://github.com/openshift/azure-disk-csi-driver/pull/140)
* [OCPBUGS-85054](https://issues.redhat.com/browse/OCPBUGS-85054): Fix dangling detaches 420 [#145](https://github.com/openshift/azure-disk-csi-driver/pull/145)
* [OCPBUGS-78034](https://issues.redhat.com/browse/OCPBUGS-78034): add instantAccessDurationMinutes parameter to enable IA snapshots for PremiumV2/UltraSSD disks [#128](https://github.com/openshift/azure-disk-csi-driver/pull/128)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/0b8e4d2202b0d17942fd745a5e1948f46bdd0350...e1ea4e929c51a3fe6823ffb5fd17fb07971ca86d)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/c7bce6e96df8f14b61ead343b901087a44736513)

* [OCPBUGS-80572](https://issues.redhat.com/browse/OCPBUGS-80572): Bump google.golang.org/grpc to v1.79.3 [#128](https://github.com/openshift/azure-file-csi-driver/pull/128)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/45d505bc11fedadece5ae27147c9595877e39f2a...c7bce6e96df8f14b61ead343b901087a44736513)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/1d6fb8798544b0d0ff60582f82f885e5a6a776ba)

* [OCPBUGS-80538](https://issues.redhat.com/browse/OCPBUGS-80538): Bump google.golang.org/grpc to 1.64.1-sec.1 patch [#44](https://github.com/openshift/azure-kubernetes-kms/pull/44)
* [OCPBUGS-78423](https://issues.redhat.com/browse/OCPBUGS-78423): Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.20 [#28](https://github.com/openshift/azure-kubernetes-kms/pull/28)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/ea0b9944dddcc7043065a1fab5fca72dd17450da...1d6fb8798544b0d0ff60582f82f885e5a6a776ba)


### [azure-service-operator](https://github.com/openshift/azure-service-operator/tree/d957de42c2e6255b79fcfe7aedac78eb746d92cc)

* [OCPBUGS-80539](https://issues.redhat.com/browse/OCPBUGS-80539): Bump google.golang.org/grpc to v1.79.3 [#29](https://github.com/openshift/azure-service-operator/pull/29)
* [Full changelog](https://github.com/openshift/azure-service-operator/compare/6e2f362623720f7b6d634fbc424fbc61e4b481ae...d957de42c2e6255b79fcfe7aedac78eb746d92cc)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/084c063282769c73bfaf82cead4a65edce7432ac)

* [OCPBUGS-86552](https://issues.redhat.com/browse/OCPBUGS-86552): azure: Add field in installconfig to disallow shared access key [#10575](https://github.com/openshift/installer/pull/10575)
* [OCPBUGS-77834](https://issues.redhat.com/browse/OCPBUGS-77834): Update RHCOS-release-4.20 bootimage metadata to 9.6.20260512-0 [#10580](https://github.com/openshift/installer/pull/10580)
* [OCPBUGS-79001](https://issues.redhat.com/browse/OCPBUGS-79001): [release 4.20] - Allow all instance types in the install config for GCP [#10503](https://github.com/openshift/installer/pull/10503)
* [OCPBUGS-78694](https://issues.redhat.com/browse/OCPBUGS-78694): [release-4.20]: openstack: Disable LoadBalancer in cloud config when Octavia is unavailable [#10401](https://github.com/openshift/installer/pull/10401)
* [OCPBUGS-79665](https://issues.redhat.com/browse/OCPBUGS-79665): Use correct Project ID with GCP Shared VPC [#10436](https://github.com/openshift/installer/pull/10436)
* [OCPBUGS-80884](https://issues.redhat.com/browse/OCPBUGS-80884): [release-4.20] Add c8g* to tested_instance_types_aarch64 [#10437](https://github.com/openshift/installer/pull/10437)
* [OCPBUGS-77896](https://issues.redhat.com/browse/OCPBUGS-77896): Increase size of /var/ostreecontainer mount [#10365](https://github.com/openshift/installer/pull/10365)
* [OCPBUGS-78091](https://issues.redhat.com/browse/OCPBUGS-78091): fix wavelength zone name regex [#10373](https://github.com/openshift/installer/pull/10373)
* [Full changelog](https://github.com/openshift/installer/compare/a8ad8d3b8de7ada885b910851314cb2ea05b602d...084c063282769c73bfaf82cead4a65edce7432ac)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/02876638d69c82a71c1c3a9fa1deb755b1afef53)

* [OCPBUGS-82008](https://issues.redhat.com/browse/OCPBUGS-82008): Fix PPI for ACM [#486](https://github.com/openshift/baremetal-operator/pull/486)
* [OCPBUGS-78745](https://issues.redhat.com/browse/OCPBUGS-78745): OCPBUGS-78836: PR2774 and PR2793 backports [release-4.20] [#470](https://github.com/openshift/baremetal-operator/pull/470)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/62e7a3f52debe490a8616f2ab05ff56e4f435a85...02876638d69c82a71c1c3a9fa1deb755b1afef53)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/5e602ba702420d0f30cee175f51fff83e00c1b5b)

* [OCPBUGS-72567](https://issues.redhat.com/browse/OCPBUGS-72567): Fix TNA and TNF dummy ip for ipv6 [#379](https://github.com/openshift/baremetal-runtimecfg/pull/379)
* [OCPBUGS-77170](https://issues.redhat.com/browse/OCPBUGS-77170): Install dbus-tools, needed in pkg/monitor/dnsmasqmonitor.go [#384](https://github.com/openshift/baremetal-runtimecfg/pull/384)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/6553765e71c7f8d7db120af94473c9c0cb44d453...5e602ba702420d0f30cee175f51fff83e00c1b5b)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/02b0b2d9994a35535b710dd51ac604ed47b29bc9)

* [OCPBUGS-81946](https://issues.redhat.com/browse/OCPBUGS-81946): Bump go-jose/go-jose/v4 to v4.1.4 [#2274](https://github.com/openshift/oc/pull/2274)
* [OCPBUGS-77170](https://issues.redhat.com/browse/OCPBUGS-77170): Install subscription-manager in required images [#2209](https://github.com/openshift/oc/pull/2209)
* [Full changelog](https://github.com/openshift/oc/compare/64e778a55fbcdf295b671a7d4e701e7c8cc3a499...02b0b2d9994a35535b710dd51ac604ed47b29bc9)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/080ef1ef21966e775f9853e75b4d0abed6170e58)

* [OCPBUGS-81947](https://issues.redhat.com/browse/OCPBUGS-81947): Bump go-jose/go-jose/v4@v4.1.4 [#1029](https://github.com/openshift/cloud-credential-operator/pull/1029)
* [OCPBUGS-79368](https://issues.redhat.com/browse/OCPBUGS-79368): google.golang.org/grpc v1.79.3 [#994](https://github.com/openshift/cloud-credential-operator/pull/994)
* [OCPBUGS-78200](https://issues.redhat.com/browse/OCPBUGS-78200): Fix infrastructure resource name filtering in watch predicate [#989](https://github.com/openshift/cloud-credential-operator/pull/989)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/073fed50e70777402dfe0b411aa000dbeb00108c...080ef1ef21966e775f9853e75b4d0abed6170e58)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/569ae680cbdf0f78cc0d77278c5178160679fe83)

* [OCPBUGS-81502](https://issues.redhat.com/browse/OCPBUGS-81502): Do not return error when an IdP returns 500 during a grant check [#866](https://github.com/openshift/cluster-authentication-operator/pull/866)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/fb1a9ab21d72903f79a45f916c6443c0709b9b0c...569ae680cbdf0f78cc0d77278c5178160679fe83)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/6b1d2ef88e19d32143d389de6999c765c7e30cad)

* [OCPBUGS-78690](https://issues.redhat.com/browse/OCPBUGS-78690): allow clusterapi provider to skip paused resources [#411](https://github.com/openshift/kubernetes-autoscaler/pull/411)
* [OCPBUGS-77506](https://issues.redhat.com/browse/OCPBUGS-77506): Pick upstream commits to Fix VPA recommender concurrent access panic [#407](https://github.com/openshift/kubernetes-autoscaler/pull/407)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/aaf5a61941b70a3b5792c0541e97356565c9977f...6b1d2ef88e19d32143d389de6999c765c7e30cad)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/17181f99343a5b1fb08af8a7994ad3e9eecc6c1e)

* [OCPBUGS-86555](https://issues.redhat.com/browse/OCPBUGS-86555): Remove trailing dot from BMO Ironic endpoint [#608](https://github.com/openshift/cluster-baremetal-operator/pull/608)
* [OCPBUGS-84376](https://issues.redhat.com/browse/OCPBUGS-84376): Fix ironic-proxy service routing for port 6385 [#593](https://github.com/openshift/cluster-baremetal-operator/pull/593)
* [OCPBUGS-81643](https://issues.redhat.com/browse/OCPBUGS-81643): Allow ProvisioningCIDR for unmanaged network [#585](https://github.com/openshift/cluster-baremetal-operator/pull/585)
* [OCPBUGS-76340](https://issues.redhat.com/browse/OCPBUGS-76340): Explicitly set the ReadOnlyRootFilesystem flag to false [#555](https://github.com/openshift/cluster-baremetal-operator/pull/555)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/02e8806855f48956731548fa90e5c644f4e269f1...17181f99343a5b1fb08af8a7994ad3e9eecc6c1e)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/dfeecf9616e049ac552f91a71b2a50cb0e96042c)

* [OCPBUGS-80577](https://issues.redhat.com/browse/OCPBUGS-80577): Bump google.golang.org/grpc to v1.79.3 [#289](https://github.com/openshift/cluster-api/pull/289)
* [OCPBUGS-78375](https://issues.redhat.com/browse/OCPBUGS-78375): Updating ose-cluster-api-container image to be consistent with ART for 4.20 [#268](https://github.com/openshift/cluster-api/pull/268)
* [Full changelog](https://github.com/openshift/cluster-api/compare/de1db2970e7fede7101e5a8188e74942ab6665e3...dfeecf9616e049ac552f91a71b2a50cb0e96042c)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/4bd6d82d21a2d201d9857ca1e26b21c70a648bf5)

* NO-JIRA: Allow sustaining engineering to self serve dependency updates [#556](https://github.com/openshift/cluster-capi-operator/pull/556)
* [OCPBUGS-80581](https://issues.redhat.com/browse/OCPBUGS-80581): Bump google.golang.org/grpc to v1.79.3 [#545](https://github.com/openshift/cluster-capi-operator/pull/545)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/acf331446369b5307b6b435af14daabdca9fafbc...4bd6d82d21a2d201d9857ca1e26b21c70a648bf5)


### [cluster-config-api](https://github.com/openshift/api/tree/6755619009c291e10c1903d20c579eae4bac9854)

* [OCPBUGS-85155](https://issues.redhat.com/browse/OCPBUGS-85155): Backport GatewayAPIWithoutOLM feature gate as disabled [#2871](https://github.com/openshift/api/pull/2871)
* [OCPBUGS-86849](https://issues.redhat.com/browse/OCPBUGS-86849): Add labelSelector to MachineSet status for scale subresource [#2867](https://github.com/openshift/api/pull/2867)
* [Full changelog](https://github.com/openshift/api/compare/50517c6f4bfdbf9fc2cb291fd97cce150a3237ca...6755619009c291e10c1903d20c579eae4bac9854)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/a99bd8ffb9aa596fa8d6932d5d93e0613c5d367f)

* [OCPBUGS-83507](https://issues.redhat.com/browse/OCPBUGS-83507): Fix PDB unhealthyPodEvictionPolicy field name [#273](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/273)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/019abe0c7671962829eb91269e1d76916966320e...a99bd8ffb9aa596fa8d6932d5d93e0613c5d367f)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/9acf049b2985339275796f69a2a8acad47726a29)

* [OCPBUGS-85412](https://issues.redhat.com/browse/OCPBUGS-85412): fix(tnf): align Pacemaker kubelet and etcd retry pacing [#1616](https://github.com/openshift/cluster-etcd-operator/pull/1616)
* [OCPBUGS-77313](https://issues.redhat.com/browse/OCPBUGS-77313): Wait for revision stability before removing etcd members [#1571](https://github.com/openshift/cluster-etcd-operator/pull/1571)
* [OCPBUGS-78047](https://issues.redhat.com/browse/OCPBUGS-78047): Prefer to remove members where they have another healthy machine in the same failure domain index [#1564](https://github.com/openshift/cluster-etcd-operator/pull/1564)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/cf5fcdeba6032fcb81d1fd05e61c77ad68a9dd6c...9acf049b2985339275796f69a2a8acad47726a29)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/006a3edb4eec250bc414da316d912fc5231d195b)

* [OCPBUGS-86717](https://issues.redhat.com/browse/OCPBUGS-86717): Add configuration override for X-SSL strip [#1472](https://github.com/openshift/cluster-ingress-operator/pull/1472)
* [OCPBUGS-85130](https://issues.redhat.com/browse/OCPBUGS-85130): Add PrometheusRule for Gateway API gathering [#1436](https://github.com/openshift/cluster-ingress-operator/pull/1436)
* [OCPBUGS-84132](https://issues.redhat.com/browse/OCPBUGS-84132): set trustBundleName in Istio global values [#1420](https://github.com/openshift/cluster-ingress-operator/pull/1420)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/24ef5ae121b8f658b649bb555be827f114ead438...006a3edb4eec250bc414da316d912fc5231d195b)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/00259384502230d2c5b463dcda8a5c05caf2154e)

* [OCPBUGS-87902](https://issues.redhat.com/browse/OCPBUGS-87902): scc: Grant authenticated users use of restricted-v3 [#1950](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1950)
* [OCPBUGS-85271](https://issues.redhat.com/browse/OCPBUGS-85271): fsync static pod cert and manifest writes for crash durability [#2145](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2145)
* [OCPBUGS-85564](https://issues.redhat.com/browse/OCPBUGS-85564): [4.20] operator should not override authentication config serviceAccountIssuer with the default one during the operator initialization [#2152](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2152)
* [OCPBUGS-83856](https://issues.redhat.com/browse/OCPBUGS-83856): Allow setting the oauthMetadata when auth type is None [#2117](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2117)
* [OCPBUGS-79419](https://issues.redhat.com/browse/OCPBUGS-79419): : Always set service-account-jwks-uri to LB URL even with custom issuer [#2078](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2078)
* [OCPBUGS-77005](https://issues.redhat.com/browse/OCPBUGS-77005): scc: restricted-v3: Fix runAsUser range [#1948](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1948)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/f6bb470ca76bd37d533a5366321faa9f478c614a...00259384502230d2c5b463dcda8a5c05caf2154e)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/adaae0d4e6d7a0e466e7e86af399de0b828c8b81)

* [OCPBUGS-80588](https://issues.redhat.com/browse/OCPBUGS-80588): Bump google.golang.org/grpc to v1.79.3 [#75](https://github.com/openshift/cluster-api-operator/pull/75)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/234e218207ec963df04ec1fedad85a421eb7a1ff...adaae0d4e6d7a0e466e7e86af399de0b828c8b81)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/84eb8c5a73a730d6d08794e51da9c20013ca4304)

* [OCPBUGS-83738](https://issues.redhat.com/browse/OCPBUGS-83738): add /var/run/kubernetes as emptyDir [#642](https://github.com/openshift/cluster-kube-scheduler-operator/pull/642)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/7cac34952f982895b5fdae60b29376fba838be89...84eb8c5a73a730d6d08794e51da9c20013ca4304)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/61f1d4b358c24d84183b77e6bcce0ad0e66488c2)

* [OCPBUGS-86992](https://issues.redhat.com/browse/OCPBUGS-86992): increase lookup interval [#2947](https://github.com/openshift/cluster-monitoring-operator/pull/2947)
* [OCPBUGS-85130](https://issues.redhat.com/browse/OCPBUGS-85130): Enable Gateway API telemetry metrics [#2920](https://github.com/openshift/cluster-monitoring-operator/pull/2920)
* [OCPBUGS-74490](https://issues.redhat.com/browse/OCPBUGS-74490): Include `kube_pod_labels` in minimal profile [#2844](https://github.com/openshift/cluster-monitoring-operator/pull/2844)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/54af21f673d0f3ef4d5005a52c04ccdd4467e8b5...61f1d4b358c24d84183b77e6bcce0ad0e66488c2)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/56c830ea4487e978a2697d065217b8851ed6cbd9)

* [OCPBUGS-84176](https://issues.redhat.com/browse/OCPBUGS-84176): Handle zero-worker HyperShift clusters in daemonset rollout [4.20 backport] [#2973](https://github.com/openshift/cluster-network-operator/pull/2973)
* [OCPBUGS-83821](https://issues.redhat.com/browse/OCPBUGS-83821): wait for patch port to apply drop garp flows [#2966](https://github.com/openshift/cluster-network-operator/pull/2966)
* [OCPBUGS-77148](https://issues.redhat.com/browse/OCPBUGS-77148): Add config override for openflow-probe [#2918](https://github.com/openshift/cluster-network-operator/pull/2918)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/6d443d079015388a4966370d200fe040f0754160...56c830ea4487e978a2697d065217b8851ed6cbd9)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/94d9ffd3ec8db4587884e13400bbc87d79c21da7)

* [OCPBUGS-86815](https://issues.redhat.com/browse/OCPBUGS-86815): Requeue PerformanceStatus update when status write fails [#1530](https://github.com/openshift/cluster-node-tuning-operator/pull/1530)
* [OCPBUGS-82850](https://issues.redhat.com/browse/OCPBUGS-82850): Bump github.com/moby/spdystream from v0.5.0 to v0.5.1 [#1532](https://github.com/openshift/cluster-node-tuning-operator/pull/1532)
* [OCPBUGS-65773](https://issues.redhat.com/browse/OCPBUGS-65773): Watch MCP changes including spec and labels [#1434](https://github.com/openshift/cluster-node-tuning-operator/pull/1434)
* [OCPBUGS-66364](https://issues.redhat.com/browse/OCPBUGS-66364): Add support for lscpu_check TuneD built-in [#1443](https://github.com/openshift/cluster-node-tuning-operator/pull/1443)
* [OCPBUGS-85372](https://issues.redhat.com/browse/OCPBUGS-85372): e2e: Add irqbalance StartLimitBurst &gt;= 100 [#1513](https://github.com/openshift/cluster-node-tuning-operator/pull/1513)
* [OCPBUGS-78247](https://issues.redhat.com/browse/OCPBUGS-78247): workloadhints: use IsVM to skip BM-only tests [#1482](https://github.com/openshift/cluster-node-tuning-operator/pull/1482)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/601b61fe23b44be64007c238c4299ca1ae594292...94d9ffd3ec8db4587884e13400bbc87d79c21da7)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/d01cc083748864e3c8dcc72fb75516492dec3555)

* [OCPBUGS-80596](https://issues.redhat.com/browse/OCPBUGS-80596): Bump google.golang.org/grpc to v1.79.3 [#198](https://github.com/openshift/cluster-olm-operator/pull/198)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/e4917368b6a547f97a0fb411fea90de246d1417e...d01cc083748864e3c8dcc72fb75516492dec3555)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/e8e9de4345ce79aafbdcf31eb4d4ce3682cfd6b7)

* [OCPBUGS-77519](https://issues.redhat.com/browse/OCPBUGS-77519): remove oVirt code from CSO [#704](https://github.com/openshift/cluster-storage-operator/pull/704)
* [OCPBUGS-86121](https://issues.redhat.com/browse/OCPBUGS-86121): add Azure Disk CSI driver SA name to CredentialsRequest [#702](https://github.com/openshift/cluster-storage-operator/pull/702)
* [OCPBUGS-79532](https://issues.redhat.com/browse/OCPBUGS-79532): volume-data-source-validator should run on master nodes [#688](https://github.com/openshift/cluster-storage-operator/pull/688)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/be41e5b433d5feb464595c66746d1d40cf48912d...e8e9de4345ce79aafbdcf31eb4d4ce3682cfd6b7)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/ea3fa7695054fc9260936902b33b738bb4c405bc)

* [OCPBUGS-79463](https://issues.redhat.com/browse/OCPBUGS-79463): Implement mTLS authentication and authorization for CVO metrics endpoint [#1374](https://github.com/openshift/cluster-version-operator/pull/1374)
* [OCPBUGS-74177](https://issues.redhat.com/browse/OCPBUGS-74177): lib/resourcemerge/core: Reconcile ConfigMap binaryData too [#1303](https://github.com/openshift/cluster-version-operator/pull/1303)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/3ef3dcb24185cbb9c48aa53c8379397a0e7b61e0...ea3fa7695054fc9260936902b33b738bb4c405bc)


### [console](https://github.com/openshift/console/tree/09b060af5f0025cb4069eca3837e2616e10e0260)

* [OCPBUGS-86455](https://issues.redhat.com/browse/OCPBUGS-86455): [release-4.20] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators [#16509](https://github.com/openshift/console/pull/16509)
* [OCPBUGS-89235](https://issues.redhat.com/browse/OCPBUGS-89235): Allow VolumeSnapshot restore when parent PVC is deleted [#16635](https://github.com/openshift/console/pull/16635)
* [OCPBUGS-87835](https://issues.redhat.com/browse/OCPBUGS-87835): Prevent binary secret data corruption when editing [#16571](https://github.com/openshift/console/pull/16571)
* [OCPBUGS-79455](https://issues.redhat.com/browse/OCPBUGS-79455): Bump immutable [#16323](https://github.com/openshift/console/pull/16323)
* [OCPBUGS-86582](https://issues.redhat.com/browse/OCPBUGS-86582): Fix macOS Option key in pod terminal [#16557](https://github.com/openshift/console/pull/16557)
* [OCPBUGS-86872](https://issues.redhat.com/browse/OCPBUGS-86872): Fix Shipwright detail pages crashing with React error #310 [#16527](https://github.com/openshift/console/pull/16527)
* [OCPBUGS-87100](https://issues.redhat.com/browse/OCPBUGS-87100): fix trailing quote in prometheus query [#16552](https://github.com/openshift/console/pull/16552)
* [OCPBUGS-77127](https://issues.redhat.com/browse/OCPBUGS-77127): [release-4.20] CVE-2026-26996 Bump minimatch library [#16272](https://github.com/openshift/console/pull/16272)
* NO-JIRA: enable multi-architecture yarn builds [#16418](https://github.com/openshift/console/pull/16418)
* [OCPBUGS-83819](https://issues.redhat.com/browse/OCPBUGS-83819): Fix false positive scheduler degradation caused by user workloads [#16308](https://github.com/openshift/console/pull/16308)
* [OCPBUGS-85042](https://issues.redhat.com/browse/OCPBUGS-85042): Remove PII from events [#16402](https://github.com/openshift/console/pull/16402)
* [OCPBUGS-81575](https://issues.redhat.com/browse/OCPBUGS-81575): Add robots.txt policy to console [#16243](https://github.com/openshift/console/pull/16243)
* [OCPBUGS-78439](https://issues.redhat.com/browse/OCPBUGS-78439): Backport OCPBUGS-61536: vsphere settings [#16141](https://github.com/openshift/console/pull/16141)
* [OCPBUGS-83495](https://issues.redhat.com/browse/OCPBUGS-83495): remove dev to admin links as dev monitoring views are enabled [#16173](https://github.com/openshift/console/pull/16173)
* [OCPBUGS-82012](https://issues.redhat.com/browse/OCPBUGS-82012): Fix VolumeSnapshot and VolumeSnapshotContent tables sorting [#16261](https://github.com/openshift/console/pull/16261)
* [OCPBUGS-77037](https://issues.redhat.com/browse/OCPBUGS-77037): Fix QueryBrowser import to use SDK path to avoid circular dependency [#16222](https://github.com/openshift/console/pull/16222)
* [OCPBUGS-83573](https://issues.redhat.com/browse/OCPBUGS-83573): Performance improvements + AsyncComponent refactor [#16300](https://github.com/openshift/console/pull/16300)
* [OCPBUGS-83420](https://issues.redhat.com/browse/OCPBUGS-83420): Fix resource log dropdown TypeError [#16282](https://github.com/openshift/console/pull/16282)
* [OCPBUGS-81678](https://issues.redhat.com/browse/OCPBUGS-81678): Fix useOperatorCatalogCategories hook. [#16251](https://github.com/openshift/console/pull/16251)
* [OCPBUGS-81322](https://issues.redhat.com/browse/OCPBUGS-81322): Migrate InstallPlan components table to PatternFly Table [#16217](https://github.com/openshift/console/pull/16217)
* [OCPBUGS-81439](https://issues.redhat.com/browse/OCPBUGS-81439): Fix TypeError in OLS code import to console [#16221](https://github.com/openshift/console/pull/16221)
* [OCPBUGS-81495](https://issues.redhat.com/browse/OCPBUGS-81495), [OCPBUGS-81496](https://issues.redhat.com/browse/OCPBUGS-81496): OLM prompts for GCP Workload Identity parameters during Kiali Operato… [#16231](https://github.com/openshift/console/pull/16231)
* [OCPBUGS-78295](https://issues.redhat.com/browse/OCPBUGS-78295): Fix editing secrets with mixed text and binary data [#16132](https://github.com/openshift/console/pull/16132)
* [OCPBUGS-78366](https://issues.redhat.com/browse/OCPBUGS-78366): Clean up old session cookies to prevent accumulation [#16136](https://github.com/openshift/console/pull/16136)
* [OCPBUGS-78839](https://issues.redhat.com/browse/OCPBUGS-78839), [OCPBUGS-79465](https://issues.redhat.com/browse/OCPBUGS-79465), [OCPBUGS-79466](https://issues.redhat.com/browse/OCPBUGS-79466): apiVersion is empty on YAML creation page - Runtime error occurs when create MachineConfig with default yaml from… [#16192](https://github.com/openshift/console/pull/16192)
* [OCPBUGS-76951](https://issues.redhat.com/browse/OCPBUGS-76951): “Import from Git” should not force HTTPS/443 for Git providers (GitHub/GitLab/Bitbucket) [#16029](https://github.com/openshift/console/pull/16029)
* [OCPBUGS-77951](https://issues.redhat.com/browse/OCPBUGS-77951): Fix infinite recursion in project access form [#16117](https://github.com/openshift/console/pull/16117)
* [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16070](https://github.com/openshift/console/pull/16070)
* [Full changelog](https://github.com/openshift/console/compare/7c86c3d5773b7c9c541f73174e046a7630c212ea...09b060af5f0025cb4069eca3837e2616e10e0260)


### [console-operator](https://github.com/openshift/console-operator/tree/2b72d7e8cc652ae7063fb95eae8d36b847742c58)

* [OCPBUGS-84254](https://issues.redhat.com/browse/OCPBUGS-84254): Redeploy console pods upon cert rotation [#1142](https://github.com/openshift/console-operator/pull/1142)
* [OCPBUGS-77771](https://issues.redhat.com/browse/OCPBUGS-77771): Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads [#1122](https://github.com/openshift/console-operator/pull/1122)
* [Full changelog](https://github.com/openshift/console-operator/compare/4670807cfebc21af0c8ea84cfe029f3286c130df...2b72d7e8cc652ae7063fb95eae8d36b847742c58)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/649398c2a16731984e65719f6b8b323df79f3ff1)

* [OCPBUGS-80668](https://issues.redhat.com/browse/OCPBUGS-80668): bump google.golang.org/grpc@v1.79.3 [#385](https://github.com/openshift/cloud-provider-openstack/pull/385)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/9996d28ce3163cf9a09d77101e81cede914d6c2f...649398c2a16731984e65719f6b8b323df79f3ff1)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/20609066e1bd1dbbd107bfca27af67e0a788760e)

* [OCPBUGS-80610](https://issues.redhat.com/browse/OCPBUGS-80610): CVE-2026-33186: bump google.golang.org/grpc v1.79.3 [#177](https://github.com/openshift/csi-driver-nfs/pull/177)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/1abaf84447384a486a9f9da7cd7b9e53784c8a55...20609066e1bd1dbbd107bfca27af67e0a788760e)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/935f1e1f7f9f07c03116e37e760a66e2a58c63c0)

* [OCPBUGS-80611](https://issues.redhat.com/browse/OCPBUGS-80611): Bump google.golang.org/grpc to v1.79.3 [#103](https://github.com/openshift/csi-external-attacher/pull/103)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/45239149cb387bcc51d944b802db0e804dc02688...935f1e1f7f9f07c03116e37e760a66e2a58c63c0)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/72fefbe70de332cea29428be202244676a9927fc)

* [OCPBUGS-80612](https://issues.redhat.com/browse/OCPBUGS-80612): Bump google.golang.org/grpc to v1.79.3 [#128](https://github.com/openshift/csi-external-provisioner/pull/128)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/81fca03694bca1bae8606d8970472330e1e4fcad...72fefbe70de332cea29428be202244676a9927fc)


### [csi-external-snapshotter, csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter/tree/433cf89b4e4d1b437a8a446ece28b217ccf9bd06)

* [OCPBUGS-80615](https://issues.redhat.com/browse/OCPBUGS-80615), [OCPBUGS-80618](https://issues.redhat.com/browse/OCPBUGS-80618): Bump google.golang.org/grpc to v1.79.3 [#209](https://github.com/openshift/csi-external-snapshotter/pull/209)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/42604822c25eb2aa0ecb017c24e328221b238eb9...433cf89b4e4d1b437a8a446ece28b217ccf9bd06)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/62e1f6040cd297149f5f14e0d20814759ec61354)

* [OCPBUGS-78783](https://issues.redhat.com/browse/OCPBUGS-78783): Support ubi minimal base image [#187](https://github.com/openshift/driver-toolkit/pull/187)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/9d55fd1aaba05830f857132bd149ee3cf18cc20f...62e1f6040cd297149f5f14e0d20814759ec61354)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/d5a5541436d9269006928079fcdc507d0b6d4033)

* [OCPBUGS-83720](https://issues.redhat.com/browse/OCPBUGS-83720): Fix OSD ILB bug [#109](https://github.com/openshift/cloud-provider-gcp/pull/109)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/e3014e749042475304daf566119b6330875eeff9...d5a5541436d9269006928079fcdc507d0b6d4033)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/74e2389011d640a371c0acb6ff71b1582cab23a1)

* [OCPBUGS-80628](https://issues.redhat.com/browse/OCPBUGS-80628): Bump google.golang.org/grpc to v1.79.3 [#288](https://github.com/openshift/cluster-api-provider-gcp/pull/288)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/65539c71b4c292fc0f4eeb572dfe490af63063d9...74e2389011d640a371c0acb6ff71b1582cab23a1)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/b998cf2532b52ce574c42e93c63965b31b9c6c8b)

* [OCPBUGS-80651](https://issues.redhat.com/browse/OCPBUGS-80651): Bump google.golang.org/grpc to v1.79.3 [#163](https://github.com/openshift/machine-api-provider-gcp/pull/163)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/01515888c83526ec235b7bc3a27df6eba3034b00...b998cf2532b52ce574c42e93c63965b31b9c6c8b)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/49e54581328a46f6aee3f7842d401681d34b2104)

* [OCPBUGS-80632](https://issues.redhat.com/browse/OCPBUGS-80632): Bump google.golang.org/grpc to v1.79.3 in release 4.20 [#103](https://github.com/openshift/gcp-pd-csi-driver/pull/103)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/500ab5d31ad382805070c8ae329a9a34163ebc99...49e54581328a46f6aee3f7842d401681d34b2104)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/cb9e68cb5c9498a606a3e71b709a9233f59da1f2)

* [OCPBUGS-80631](https://issues.redhat.com/browse/OCPBUGS-80631): Bump google.golang.org/grpc to v1.79.3 [#185](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/185)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/e0ad050a84bab669e0f11e080fc4c388ef417bba...cb9e68cb5c9498a606a3e71b709a9233f59da1f2)


### [haproxy-router](https://github.com/openshift/router/tree/40c34581a02ca043d454034e376771c12d2e995c)

* [OCPBUGS-86717](https://issues.redhat.com/browse/OCPBUGS-86717): Strip X-SSL-* headers for plain HTTP [#797](https://github.com/openshift/router/pull/797)
* [OCPBUGS-87220](https://issues.redhat.com/browse/OCPBUGS-87220): Replace HTTP backend liveness check with admin socket check [#789](https://github.com/openshift/router/pull/789)
* [OCPBUGS-80633](https://issues.redhat.com/browse/OCPBUGS-80633): Bump google.golang.org/grpc to v1.79.3 [#766](https://github.com/openshift/router/pull/766)
* [OCPBUGS-78435](https://issues.redhat.com/browse/OCPBUGS-78435): Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.20 [#750](https://github.com/openshift/router/pull/750)
* [OCPBUGS-78432](https://issues.redhat.com/browse/OCPBUGS-78432): Updating ose-haproxy-router-base-container image to be consistent with ART for 4.20 [#749](https://github.com/openshift/router/pull/749)
* [OCPBUGS-79529](https://issues.redhat.com/browse/OCPBUGS-79529): Lower verbosity for parseIPList empty list logging [#753](https://github.com/openshift/router/pull/753)
* [Full changelog](https://github.com/openshift/router/compare/db8d384266051ef06b67883aaa83674bc6c9f1ae...40c34581a02ca043d454034e376771c12d2e995c)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/690775342de24ee56631e38e3f17592b14a6b202)

* [OCPBUGS-87173](https://issues.redhat.com/browse/OCPBUGS-87173): fix flake race in VAP e2e case [#2679](https://github.com/openshift/kubernetes/pull/2679)
* [OCPBUGS-85501](https://issues.redhat.com/browse/OCPBUGS-85501): Bump Kubernetes v1.33.12 to release-4.20 [#2666](https://github.com/openshift/kubernetes/pull/2666)
* "OCPBUGS-83609: Bump to k8s v1.33.11" [#2648](https://github.com/openshift/kubernetes/pull/2648)
* [OCPBUGS-78993](https://issues.redhat.com/browse/OCPBUGS-78993): Bump v1.33.10 to release-4.20 [#2643](https://github.com/openshift/kubernetes/pull/2643)
* NO-JIRA: UPSTREAM: &lt;carry&gt;: Add jacobsee and jubittajohn to DOWNSTREAM_OWNERS [#2638](https://github.com/openshift/kubernetes/pull/2638)
* [OCPBUGS-77476](https://issues.redhat.com/browse/OCPBUGS-77476): Rebase v1.33.9 to release-4.20 [#2614](https://github.com/openshift/kubernetes/pull/2614)
* [Full changelog](https://github.com/openshift/kubernetes/compare/b96a4039358613f770d20f5e4ce5125f66369521...690775342de24ee56631e38e3f17592b14a6b202)


### [hypershift](https://github.com/openshift/hypershift/tree/e5758dd231dcbf3ce466d061ef350948d6ac9866)

* [OCPBUGS-86020](https://issues.redhat.com/browse/OCPBUGS-86020): OCPBUGS-62177: [release 4-20] verify cert revocation against all KAS pods [#8536](https://github.com/openshift/hypershift/pull/8536)
* [OCPBUGS-77967](https://issues.redhat.com/browse/OCPBUGS-77967): fix: global-pull-secret-syncer pod ~15-minute delay scheduling on new nodes [#8716](https://github.com/openshift/hypershift/pull/8716)
* [OCPBUGS-86780](https://issues.redhat.com/browse/OCPBUGS-86780): [release-4.20] OCPBUGS-81671: Ignition generalize image download errors [#8573](https://github.com/openshift/hypershift/pull/8573)
* [OCPBUGS-85825](https://issues.redhat.com/browse/OCPBUGS-85825): [release-4.20] Add KAS readiness sidecar to OAS, OAuth API Server, and OLM packageserver [#8529](https://github.com/openshift/hypershift/pull/8529)
* [OCPBUGS-85825](https://issues.redhat.com/browse/OCPBUGS-85825): [release-4.20] Set unhealthyPodEvictionPolicy to AlwaysAllow on all PDBs [#8528](https://github.com/openshift/hypershift/pull/8528)
* NO-JIRA: remove path filter from control-plane-operator pipelines [#8666](https://github.com/openshift/hypershift/pull/8666)
* [OCPBUGS-86573](https://issues.redhat.com/browse/OCPBUGS-86573): [release-4.20] add CP pull-secret watches for in-place propagation [#8596](https://github.com/openshift/hypershift/pull/8596)
* [OCPBUGS-86567](https://issues.redhat.com/browse/OCPBUGS-86567): fix Konflux application label for CPO 4.20 pipelines [#8603](https://github.com/openshift/hypershift/pull/8603)
* [OCPBUGS-86567](https://issues.redhat.com/browse/OCPBUGS-86567): [release-4.20] set limits for aro.openshift.io/swift-nic in request overrides for ARO swift [#8593](https://github.com/openshift/hypershift/pull/8593)
* [OCPBUGS-83711](https://issues.redhat.com/browse/OCPBUGS-83711): fix(kubevirt): filter link-local addresses from EndpointSlice endpoints [#8271](https://github.com/openshift/hypershift/pull/8271)
* [OCPBUGS-85622](https://issues.redhat.com/browse/OCPBUGS-85622): fix CVE-2026-33186 by updating grpc-go [#8517](https://github.com/openshift/hypershift/pull/8517)
* [OCPBUGS-77109](https://issues.redhat.com/browse/OCPBUGS-77109): Add UserAgent telemetry to CPO Azure SDK clients [#8374](https://github.com/openshift/hypershift/pull/8374)
* [OCPBUGS-83663](https://issues.redhat.com/browse/OCPBUGS-83663): fix(cpo): reconcile ClusterIP private router service for ARO HCP [#8140](https://github.com/openshift/hypershift/pull/8140)
* [OCPBUGS-82069](https://issues.redhat.com/browse/OCPBUGS-82069): OCPBUGS-81670: fix(cpo-v2): preserve HCCO modifications to OCM Controllers field [#8177](https://github.com/openshift/hypershift/pull/8177)
* [OCPBUGS-78474](https://issues.redhat.com/browse/OCPBUGS-78474): Fix deadlock when changing release image during initial provisioning [#7953](https://github.com/openshift/hypershift/pull/7953)
* [OCPBUGS-81746](https://issues.redhat.com/browse/OCPBUGS-81746): Honor AWS AMI override in NodePool token generation [#8183](https://github.com/openshift/hypershift/pull/8183)
* [OCPBUGS-80950](https://issues.redhat.com/browse/OCPBUGS-80950): fix(cpo): Don't remove HCP Ingress from routes when CapabilityRoute is disabled [#8083](https://github.com/openshift/hypershift/pull/8083)
* [OCPBUGS-78979](https://issues.redhat.com/browse/OCPBUGS-78979): fix(hostedcluster): Remove referenced resource annotations regardless of hcp status [#8023](https://github.com/openshift/hypershift/pull/8023)
* [CNTRLPLANE-3008](https://issues.redhat.com/browse/CNTRLPLANE-3008): Azure web identity webhook 4.20 [#7998](https://github.com/openshift/hypershift/pull/7998)
* [OCPBUGS-78741](https://issues.redhat.com/browse/OCPBUGS-78741): fix(sync-global-pullsecret): compare content ignoring trailing newlines [#7976](https://github.com/openshift/hypershift/pull/7976)
* [CNTRLPLANE-2814](https://issues.redhat.com/browse/CNTRLPLANE-2814): feat(aro): Swift support [#7885](https://github.com/openshift/hypershift/pull/7885)
* [OCPBUGS-76992](https://issues.redhat.com/browse/OCPBUGS-76992): fix kubevirt, use 100.66.0.0/16 for join subnet [#7733](https://github.com/openshift/hypershift/pull/7733)
* [OCPBUGS-78305](https://issues.redhat.com/browse/OCPBUGS-78305): Fix context cancel accumulation in getMirrorFromICSPOrIDMS [#7890](https://github.com/openshift/hypershift/pull/7890)
* [OCPBUGS-76324](https://issues.redhat.com/browse/OCPBUGS-76324): feat(updates): enable CVO metrics access with RHOBS monitoring flag [#7660](https://github.com/openshift/hypershift/pull/7660)
* [OCPBUGS-77366](https://issues.redhat.com/browse/OCPBUGS-77366): Fix ignition-server pod restarts [#7842](https://github.com/openshift/hypershift/pull/7842)
* [Full changelog](https://github.com/openshift/hypershift/compare/7630337d577b66ad01948819ba4d523410ecb97c...e5758dd231dcbf3ce466d061ef350948d6ac9866)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/0d2143b7aaaf2047e9578fb3ae41f89267d4b1bc)

* [OCPBUGS-80638](https://issues.redhat.com/browse/OCPBUGS-80638): Bump google.golang.org/grpc to v1.79.3 [#141](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/141)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/390a1fa872a3a43075ad27d79a260ed3ec1e924f...0d2143b7aaaf2047e9578fb3ae41f89267d4b1bc)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/e63e7a191ccc1d391b574d713899e307a88b466c)

* [OCPBUGS-81317](https://issues.redhat.com/browse/OCPBUGS-81317): bump vpc go sdk [#89](https://github.com/openshift/machine-api-provider-ibmcloud/pull/89)
* NO-JIRA: Modernize test infrastructure to align with other MAPI providers [#85](https://github.com/openshift/machine-api-provider-ibmcloud/pull/85)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/035805df5277c9f9c0cd9d4a44f59a08ab3ce031...e63e7a191ccc1d391b574d713899e307a88b466c)


### [insights-operator](https://github.com/openshift/insights-operator/tree/4186296303bbe4cf3f276dedf794a69a0723f18b)

* [OCPBUGS-87870](https://issues.redhat.com/browse/OCPBUGS-87870): extractor controller [#1304](https://github.com/openshift/insights-operator/pull/1304)
* [OCPBUGS-86948](https://issues.redhat.com/browse/OCPBUGS-86948): add config option to disable runtime extractor [#1298](https://github.com/openshift/insights-operator/pull/1298)
* [OCPBUGS-86235](https://issues.redhat.com/browse/OCPBUGS-86235): [release-4.20] Add OpenTelemetry CR Gatherer [#1293](https://github.com/openshift/insights-operator/pull/1293)
* [OCPBUGS-82970](https://issues.redhat.com/browse/OCPBUGS-82970): kubeletconfig gathere [#1270](https://github.com/openshift/insights-operator/pull/1270)
* [OCPBUGS-80641](https://issues.redhat.com/browse/OCPBUGS-80641): Bump google.golang.org/grpc to v1.79.3 (Revamp #1261) [#1267](https://github.com/openshift/insights-operator/pull/1267)
* [OCPBUGS-76961](https://issues.redhat.com/browse/OCPBUGS-76961): Extends the time for the extractor liveness probe [#1231](https://github.com/openshift/insights-operator/pull/1231)
* [Full changelog](https://github.com/openshift/insights-operator/compare/c0c259186c2ba4633b1c7163195c96b8187b08aa...4186296303bbe4cf3f276dedf794a69a0723f18b)


### [ironic](https://github.com/openshift/ironic-image/tree/8a34de9553deadf506244f840827f63f058eef1d)

* Bugs OCPBUGS-82295 OCPBUGS-84371: Update sushy and Ironic to resolve ARM SuperMicro boot, Cisco vMedia Insert and BIOS Settings update issues. [#830](https://github.com/openshift/ironic-image/pull/830)
* [OCPBUGS-84854](https://issues.redhat.com/browse/OCPBUGS-84854): Bump pyasn to 0.5.1-5 [#824](https://github.com/openshift/ironic-image/pull/824)
* [OCPBUGS-82299](https://issues.redhat.com/browse/OCPBUGS-82299): Bump sushy hash to include Supermicro ARS-111GL-NHR fix [#841](https://github.com/openshift/ironic-image/pull/841)
* [OCPBUGS-74405](https://issues.redhat.com/browse/OCPBUGS-74405): Update sushy to include DGX B200 credentials fix [#820](https://github.com/openshift/ironic-image/pull/820)
* [Full changelog](https://github.com/openshift/ironic-image/compare/9d5e435bfe1796d6cbabef889cdb0c5cd681f15a...8a34de9553deadf506244f840827f63f058eef1d)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/6c1bae0007a21796f1d1235df745c1f5152aa893)

* [OCPBUGS-78076](https://issues.redhat.com/browse/OCPBUGS-78076): openshift-enterprise-base: remove subscription-manager, dbus, systemd [#227](https://github.com/openshift/images/pull/227)
* [Full changelog](https://github.com/openshift/images/compare/bb4535b7069cab2de0174be29bccccde6d623b4f...6c1bae0007a21796f1d1235df745c1f5152aa893)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/e7379b302a7377c06cf06d54230decd479f92078)

* [OCPBUGS-80542](https://issues.redhat.com/browse/OCPBUGS-80542): Bump google.golang.org/grpc to v1.79.3 [#62](https://github.com/openshift/kubernetes-metrics-server/pull/62)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/cfa5ee9f1c94d7faec36de970033b9e329326f38...e7379b302a7377c06cf06d54230decd479f92078)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/8c6ad2ef49bf9e437a3ad42707595139db04cb6e)

* Fix for OCPBUGS-81951:  CVE-2026-34986 bump github.com/go-jose/go-jose/v4 [#144](https://github.com/openshift/kube-state-metrics/pull/144)
* [OCPBUGS-80646](https://issues.redhat.com/browse/OCPBUGS-80646): Bump google.golang.org/grpc to v1.79.3 [#139](https://github.com/openshift/kube-state-metrics/pull/139)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/086a7f21313d6fbc5ea330d46671ce8934b26c56...8c6ad2ef49bf9e437a3ad42707595139db04cb6e)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/8fb56226aede45e49fb2f362191c6dbcf50897c6)

* [OCPBUGS-79064](https://issues.redhat.com/browse/OCPBUGS-79064): Add annotation-based fallback for infra VM node ID resolution [#84](https://github.com/openshift/kubevirt-csi-driver/pull/84)
* [OCPBUGS-78371](https://issues.redhat.com/browse/OCPBUGS-78371): Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.20 [#78](https://github.com/openshift/kubevirt-csi-driver/pull/78)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/8b8dd30ecd302e2b260c666702dffb19abf7c1aa...8fb56226aede45e49fb2f362191c6dbcf50897c6)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/de0171b9abf99cde11e789dd0d103cb69e7c6684)

* [OCPBUGS-86849](https://issues.redhat.com/browse/OCPBUGS-86849): Populate status label selector for scale subresource [#1504](https://github.com/openshift/machine-api-operator/pull/1504)
* [OCPBUGS-83394](https://issues.redhat.com/browse/OCPBUGS-83394): Remove cluster-api-provider-libvirt references [#1487](https://github.com/openshift/machine-api-operator/pull/1487)
* [OCPBUGS-78424](https://issues.redhat.com/browse/OCPBUGS-78424): [release-4.20] Use resource group when generating default Azure image [#1475](https://github.com/openshift/machine-api-operator/pull/1475)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/4a9b90e306a04ddfacfa408609c98b48a1cdea17...de0171b9abf99cde11e789dd0d103cb69e7c6684)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/51f9b31f3f6981021f0da3ad32030ed1028bce0b)

* [OCPBUGS-91635](https://issues.redhat.com/browse/OCPBUGS-91635): daemon: don't pull/extract extensions for all OS updates [#6214](https://github.com/openshift/machine-config-operator/pull/6214)
* [OCPBUGS-88689](https://issues.redhat.com/browse/OCPBUGS-88689): Skip chrony-wait on first node join [#6191](https://github.com/openshift/machine-config-operator/pull/6191)
* [OCPBUGS-90133](https://issues.redhat.com/browse/OCPBUGS-90133): vSphere boot image hot loop detection is non-functional due to stable template names [#6207](https://github.com/openshift/machine-config-operator/pull/6207)
* [OCPBUGS-88360](https://issues.redhat.com/browse/OCPBUGS-88360): configure-ovs: copy lldp mode to br-ex port [#6181](https://github.com/openshift/machine-config-operator/pull/6181)
* [OCPBUGS-86864](https://issues.redhat.com/browse/OCPBUGS-86864): Verify extension packages are installed [#6114](https://github.com/openshift/machine-config-operator/pull/6114)
* [OCPBUGS-86987](https://issues.redhat.com/browse/OCPBUGS-86987): Update AMI Whitelist [#6132](https://github.com/openshift/machine-config-operator/pull/6132)
* [OCPBUGS-83862](https://issues.redhat.com/browse/OCPBUGS-83862): Generate autosizing-disabled machineconfig only for master and worker nodes on OCP 4.20 [#5885](https://github.com/openshift/machine-config-operator/pull/5885)
* [OCPBUGS-81953](https://issues.redhat.com/browse/OCPBUGS-81953): Fix CVE-2026-34986 [#6033](https://github.com/openshift/machine-config-operator/pull/6033)
* [OCPBUGS-86577](https://issues.redhat.com/browse/OCPBUGS-86577): Fix re-cordon detection [#6086](https://github.com/openshift/machine-config-operator/pull/6086)
* [OCPBUGS-86134](https://issues.redhat.com/browse/OCPBUGS-86134): use `--delete-if-present` for karg removal [#6063](https://github.com/openshift/machine-config-operator/pull/6063)
* [OCPBUGS-86313](https://issues.redhat.com/browse/OCPBUGS-86313): Apply password only if changes exist [#6075](https://github.com/openshift/machine-config-operator/pull/6075)
* [OCPBUGS-86032](https://issues.redhat.com/browse/OCPBUGS-86032): Add terminationMessagePolicy to build pod containers [#6057](https://github.com/openshift/machine-config-operator/pull/6057)
* [OCPBUGS-85078](https://issues.redhat.com/browse/OCPBUGS-85078): Fix ssh and password rollbacks [#6002](https://github.com/openshift/machine-config-operator/pull/6002)
* [OCPBUGS-85336](https://issues.redhat.com/browse/OCPBUGS-85336): Fix units rollback if update failure [#6022](https://github.com/openshift/machine-config-operator/pull/6022)
* [OCPBUGS-85069](https://issues.redhat.com/browse/OCPBUGS-85069): Fix encapsulated IGN version [#6001](https://github.com/openshift/machine-config-operator/pull/6001)
* [OCPBUGS-84962](https://issues.redhat.com/browse/OCPBUGS-84962): Update AMI Whitelist [#5991](https://github.com/openshift/machine-config-operator/pull/5991)
* [OCPBUGS-84890](https://issues.redhat.com/browse/OCPBUGS-84890): improve JSON unmarshalling for secret decoding [#5916](https://github.com/openshift/machine-config-operator/pull/5916)
* [OCPBUGS-84151](https://issues.redhat.com/browse/OCPBUGS-84151): Allow enablement of systemd units with existing files [#5873](https://github.com/openshift/machine-config-operator/pull/5873)
* [OCPBUGS-83867](https://issues.redhat.com/browse/OCPBUGS-83867): Update AMI Whitelist [#5866](https://github.com/openshift/machine-config-operator/pull/5866)
* [OCPBUGS-83393](https://issues.redhat.com/browse/OCPBUGS-83393): Use HA leader election defaults for MCO on SNO [#5848](https://github.com/openshift/machine-config-operator/pull/5848)
* [OCPBUGS-80947](https://issues.redhat.com/browse/OCPBUGS-80947): Skip boot image updates until cluster is stable [#5812](https://github.com/openshift/machine-config-operator/pull/5812)
* [OCPBUGS-79370](https://issues.redhat.com/browse/OCPBUGS-79370): Re-order logger setting to eliminate race condition [#5791](https://github.com/openshift/machine-config-operator/pull/5791)
* [release 4.20] OCPBUGS-77252: Calculate machine counts in MCP status from node properties [#5692](https://github.com/openshift/machine-config-operator/pull/5692)
* [OCPBUGS-79577](https://issues.redhat.com/browse/OCPBUGS-79577): Update AMI Whitelist [#5806](https://github.com/openshift/machine-config-operator/pull/5806)
* [OCPBUGS-79371](https://issues.redhat.com/browse/OCPBUGS-79371): set default-timeout-stop to 200s globally [#5792](https://github.com/openshift/machine-config-operator/pull/5792)
* [OCPBUGS-78049](https://issues.redhat.com/browse/OCPBUGS-78049): install/0000_80_machine-config_04_kube_rbac_proxy_config: Consistent terminal newline [#5753](https://github.com/openshift/machine-config-operator/pull/5753)
* [OCPBUGS-77883](https://issues.redhat.com/browse/OCPBUGS-77883): Fix failure domain matching during vsphere boot image updates [#5745](https://github.com/openshift/machine-config-operator/pull/5745)
* [OCPBUGS-77950](https://issues.redhat.com/browse/OCPBUGS-77950): Update AMI Whitelist [#5748](https://github.com/openshift/machine-config-operator/pull/5748)
* [OCPBUGS-77665](https://issues.redhat.com/browse/OCPBUGS-77665): Update AMI Whitelist [#5731](https://github.com/openshift/machine-config-operator/pull/5731)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/47f9080550b29ca0af7c2cfc92633c61ad0ef971...51f9b31f3f6981021f0da3ad32030ed1028bce0b)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/fe4360da1fe44c0d8a69c0133f846e0cbc36740c)

* [OCPBUGS-81296](https://issues.redhat.com/browse/OCPBUGS-81296): Return error when network data Secret lacks nmstate key [#172](https://github.com/openshift/image-customization-controller/pull/172)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/96662472598010aa2b063143fa52297556c8723b...fe4360da1fe44c0d8a69c0133f846e0cbc36740c)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/5da52107b36e002d56e5e82f4b2cd496b1c4ec7a)

* [OCPBUGS-87874](https://issues.redhat.com/browse/OCPBUGS-87874): Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs [#98](https://github.com/openshift/machine-os-images/pull/98)
* [OCPBUGS-85480](https://issues.redhat.com/browse/OCPBUGS-85480): Force rebuild for OCP 4.20 [#94](https://github.com/openshift/machine-os-images/pull/94)
* [OCPBUGS-85480](https://issues.redhat.com/browse/OCPBUGS-85480): Force rebuild for OCP 4.20 [#86](https://github.com/openshift/machine-os-images/pull/86)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/551bb5d75e782e47b83292d883e41bc57df730a4...5da52107b36e002d56e5e82f4b2cd496b1c4ec7a)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/7a87d245dc33dd13b7c12c75e0d2480e4c7db9b7)

* [OCPBUGS-87091](https://issues.redhat.com/browse/OCPBUGS-87091): [release-4.20] fast-uri: URI authority bypass due to improper delimiter handling [#974](https://github.com/openshift/monitoring-plugin/pull/974)
* [OCPBUGS-88372](https://issues.redhat.com/browse/OCPBUGS-88372), [OCPBUGS-88383](https://issues.redhat.com/browse/OCPBUGS-88383), [OCPBUGS-88392](https://issues.redhat.com/browse/OCPBUGS-88392), [OCPBUGS-88428](https://issues.redhat.com/browse/OCPBUGS-88428), [OCPBUGS-88430](https://issues.redhat.com/browse/OCPBUGS-88430), [OCPBUGS-88446](https://issues.redhat.com/browse/OCPBUGS-88446): CVE-2026-44487 bump axios to 1.16.0 [#1000](https://github.com/openshift/monitoring-plugin/pull/1000)
* [OCPBUGS-84289](https://issues.redhat.com/browse/OCPBUGS-84289): bump follow-redirects to 1.16.0 [#986](https://github.com/openshift/monitoring-plugin/pull/986)
* [OCPBUGS-79456](https://issues.redhat.com/browse/OCPBUGS-79456): immutable bump: fix for CVE-2026-29063 [4.20] [#951](https://github.com/openshift/monitoring-plugin/pull/951)
* [OU-1371](https://issues.redhat.com/browse/OU-1371): reset queries when namespace changes in dev perspective [#945](https://github.com/openshift/monitoring-plugin/pull/945)
* [OU-1369](https://issues.redhat.com/browse/OU-1369): prevent namespace and project desync [#941](https://github.com/openshift/monitoring-plugin/pull/941)
* [OCPBUGS-83495](https://issues.redhat.com/browse/OCPBUGS-83495): [release-4.20] feat: re enable dev console views [#855](https://github.com/openshift/monitoring-plugin/pull/855)
* [OCPBUGS-83302](https://issues.redhat.com/browse/OCPBUGS-83302): [release-4.20] openshift4/ose-monitoring-plugin-rhel9: Axios: Remote Code Execution via Prototype Pollution escalation [#888](https://github.com/openshift/monitoring-plugin/pull/888)
* [OCPBUGS-82440](https://issues.redhat.com/browse/OCPBUGS-82440): fix: re encode params when redirecting from graph to query-browser [#872](https://github.com/openshift/monitoring-plugin/pull/872)
* [OCPBUGS-77406](https://issues.redhat.com/browse/OCPBUGS-77406): bump koa [#866](https://github.com/openshift/monitoring-plugin/pull/866)
* [OCPBUGS-78359](https://issues.redhat.com/browse/OCPBUGS-78359): fix for CVE-2025-69873 [#846](https://github.com/openshift/monitoring-plugin/pull/846)
* [OCPBUGS-78425](https://issues.redhat.com/browse/OCPBUGS-78425): Updating monitoring-plugin-container image to be consistent with ART for 4.20 [#843](https://github.com/openshift/monitoring-plugin/pull/843)
* [OU-1062](https://issues.redhat.com/browse/OU-1062): [release-4.20] feat: mark alert menu active for incidents tab [#826](https://github.com/openshift/monitoring-plugin/pull/826)
* [OCPBUGS-76581](https://issues.redhat.com/browse/OCPBUGS-76581): [release-4.20] CVE-2026-25639 openshift4/ose-monitoring-plugin-rhel9: Axios affected by Denial of Service via __proto__ Key in mergeConfig [#796](https://github.com/openshift/monitoring-plugin/pull/796)
* NO-JIRA: [release-4.20] e2e-monitoring fixing loop on legacy dashboard [#830](https://github.com/openshift/monitoring-plugin/pull/830)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/ca82c98666544880cc4442a22aaf9191f1949950...7a87d245dc33dd13b7c12c75e0d2480e4c7db9b7)


### [must-gather](https://github.com/openshift/must-gather/tree/01b8371fa2f13c993074569d80db6d1ee97b57ee)

* [OCPBUGS-85488](https://issues.redhat.com/browse/OCPBUGS-85488): Collect object size with the object count [#545](https://github.com/openshift/must-gather/pull/545)
* [Full changelog](https://github.com/openshift/must-gather/compare/f0c64742c79afce5e367ca2c7b830ad448abe1df...01b8371fa2f13c993074569d80db6d1ee97b57ee)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/c9c1a9f5ca8287d20a0aafab9507478c6f291614)

* [OCPBUGS-81615](https://issues.redhat.com/browse/OCPBUGS-81615): Fix CVE-2026-CVE-2026-4800 in lodash [#399](https://github.com/openshift/networking-console-plugin/pull/399)
* [OCPBUGS-83386](https://issues.redhat.com/browse/OCPBUGS-83386): Fix CVE-2026-34043 in serialize-javascript [#394](https://github.com/openshift/networking-console-plugin/pull/394)
* [OCPBUGS-84124](https://issues.redhat.com/browse/OCPBUGS-84124): Migrate to npm [#387](https://github.com/openshift/networking-console-plugin/pull/387)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/266a459be33f24fd5267d8c7fce691ae2ddff6dc...c9c1a9f5ca8287d20a0aafab9507478c6f291614)


### [oauth-server](https://github.com/openshift/oauth-server/tree/715ae668b8765b029cb7851a509b9948b8cc57a0)

* [OCPBUGS-81813](https://issues.redhat.com/browse/OCPBUGS-81813): Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 [#236](https://github.com/openshift/oauth-server/pull/236)
* [Full changelog](https://github.com/openshift/oauth-server/compare/21329625a0f5807af9c61e6cd65904c93d65e48c...715ae668b8765b029cb7851a509b9948b8cc57a0)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/9b186403c88394b54ab491871a158a124df39a02)

* Fix for OCPBUGS-81937: CVE-2026-34986 github.com/go-jose/go-jose/v4 [#1427](https://github.com/openshift/oc-mirror/pull/1427)
* [OCPBUGS-84064](https://issues.redhat.com/browse/OCPBUGS-84064): Remove status field from CatalogSource, ClusterCatalog... [#1392](https://github.com/openshift/oc-mirror/pull/1392)
* [OCPBUGS-85204](https://issues.redhat.com/browse/OCPBUGS-85204): update integration test Dockerfile [#1393](https://github.com/openshift/oc-mirror/pull/1393)
* [OCPBUGS-77416](https://issues.redhat.com/browse/OCPBUGS-77416): Fix registriesd "unknown userid" failure for arbitrary UIDs [#1360](https://github.com/openshift/oc-mirror/pull/1360)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/db6f0cf3f7cde5d6817ec113c8634102a58dc67e...9b186403c88394b54ab491871a158a124df39a02)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/66f771320f0c23b0df5c68a5876c367a1809775d)

* [OCPBUGS-86968](https://issues.redhat.com/browse/OCPBUGS-86968): catalogd: clean up orphaned temp dirs in catalog storage [#744](https://github.com/openshift/operator-framework-operator-controller/pull/744)
* [OCPBUGS-80662](https://issues.redhat.com/browse/OCPBUGS-80662), [OCPBUGS-80663](https://issues.redhat.com/browse/OCPBUGS-80663): Bump google.golang.org/grpc to v1.79.3 [#727](https://github.com/openshift/operator-framework-operator-controller/pull/727)
* [OCPBUGS-81956](https://issues.redhat.com/browse/OCPBUGS-81956), [OCPBUGS-81957](https://issues.redhat.com/browse/OCPBUGS-81957): Bump github.com/go-jose/go-jose/v4@4.1.1 to 4.1.4 [#719](https://github.com/openshift/operator-framework-operator-controller/pull/719)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/3e2401f23ef666e8f33789a397d81a7d352b0a33...66f771320f0c23b0df5c68a5876c367a1809775d)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/eda815e0515550890354dda41e65f8dd35e15ad5)

* [OCPBUGS-82867](https://issues.redhat.com/browse/OCPBUGS-82867): Address CVE-2026-35469 [#652](https://github.com/openshift/openshift-apiserver/pull/652)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/34cb4762e1716c1a31a344118b8a3ad00c28d831...eda815e0515550890354dda41e65f8dd35e15ad5)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/c91265ed4f82c0b36fbfc50040b8180f04fcf4cc)

* UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into release-4.20 [#392](https://github.com/openshift/cluster-api-provider-openstack/pull/392)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/d1c8e7edf11e78db401bc1672e0f17d551fe09db...c91265ed4f82c0b36fbfc50040b8180f04fcf4cc)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/1628e53777871f6c264d41a870cc4ee7248106f2)

* [OCPBUGS-80670](https://issues.redhat.com/browse/OCPBUGS-80670), [OCPBUGS-80671](https://issues.redhat.com/browse/OCPBUGS-80671), [OCPBUGS-80672](https://issues.redhat.com/browse/OCPBUGS-80672): Bump google.golang.org/grpc to v1.79.3 for CVE-2026-33186[Release-4.20] [#1293](https://github.com/openshift/operator-framework-olm/pull/1293)
* [OCPBUGS-81958](https://issues.redhat.com/browse/OCPBUGS-81958), [OCPBUGS-81959](https://issues.redhat.com/browse/OCPBUGS-81959), [OCPBUGS-81960](https://issues.redhat.com/browse/OCPBUGS-81960): Bump github.com/go-jose/go-jose/v4 to v4.1.4 [#1295](https://github.com/openshift/operator-framework-olm/pull/1295)
* [OCPBUGS-79681](https://issues.redhat.com/browse/OCPBUGS-79681): Fix nil pointer dereference in sortUnpackJobs when sorting non-failed jobs [#1267](https://github.com/openshift/operator-framework-olm/pull/1267)
* [OCPBUGS-81292](https://issues.redhat.com/browse/OCPBUGS-81292): add jiazha to approvers [#1269](https://github.com/openshift/operator-framework-olm/pull/1269)
* [OCPBUGS-77958](https://issues.redhat.com/browse/OCPBUGS-77958): Update NetworkPolicy egress for HyperShift custom API ports [#1253](https://github.com/openshift/operator-framework-olm/pull/1253)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/9cdde3bd7bf69417ec1a26a4c757f565b0107d0e...1628e53777871f6c264d41a870cc4ee7248106f2)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/4ccd56c96839e2389e12bf3f8390a6c062e9b2cf)

* [OCPBUGS-77582](https://issues.redhat.com/browse/OCPBUGS-77582): Update NetworkPolicy egress to support HyperShift custom API ports [#730](https://github.com/operator-framework/operator-marketplace/pull/730)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/837defb90f7fa1c811806b10dcac5e0952f2d766...4ccd56c96839e2389e12bf3f8390a6c062e9b2cf)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/e02cc75645fbc8981239e4144da1cd4dd98b1b17)

* [OCPBUGS-85366](https://issues.redhat.com/browse/OCPBUGS-85366): ANP-Skip redundant status updates to reduce API server load [#3183](https://github.com/openshift/ovn-kubernetes/pull/3183)
* [OCPBUGS-76473](https://issues.redhat.com/browse/OCPBUGS-76473): Remove forced V(5) logging during startup [#2919](https://github.com/openshift/ovn-kubernetes/pull/2919)
* [OCPBUGS-72401](https://issues.redhat.com/browse/OCPBUGS-72401), [OCPBUGS-72402](https://issues.redhat.com/browse/OCPBUGS-72402): manual backport bug fixes [#2927](https://github.com/openshift/ovn-kubernetes/pull/2927)
* [OCPBUGS-81484](https://issues.redhat.com/browse/OCPBUGS-81484): CUDN: cleanup NADs in terminating namespaces without pods [#3102](https://github.com/openshift/ovn-kubernetes/pull/3102)
* [OCPBUGS-74395](https://issues.redhat.com/browse/OCPBUGS-74395): kubevirt, Use pod network subnet gateway IP for DHCP router option [#3070](https://github.com/openshift/ovn-kubernetes/pull/3070)
* [OCPBUGS-82115](https://issues.redhat.com/browse/OCPBUGS-82115): egressip: Skip bridge configuration for secondary network IPs [#3120](https://github.com/openshift/ovn-kubernetes/pull/3120)
* [OCPBUGS-84054](https://issues.redhat.com/browse/OCPBUGS-84054): [release 4.20] virt: fix SyncVirtualMachines deleting UDN DHCP options during startup [#3152](https://github.com/openshift/ovn-kubernetes/pull/3152)
* [OCPBUGS-78777](https://issues.redhat.com/browse/OCPBUGS-78777): Fix NAD Controller syncAll for networkID upgrade from node-&gt;NAD [#3093](https://github.com/openshift/ovn-kubernetes/pull/3093)
* [OCPBUGS-81477](https://issues.redhat.com/browse/OCPBUGS-81477): node: fix serviceUpdateNotNeeded nil pointer comparison [#3099](https://github.com/openshift/ovn-kubernetes/pull/3099)
* [OCPBUGS-79537](https://issues.redhat.com/browse/OCPBUGS-79537): EgressFirewall: Use exponential backoff to refresh IP addresses for DNS names [#3088](https://github.com/openshift/ovn-kubernetes/pull/3088)
* [OCPBUGS-77148](https://issues.redhat.com/browse/OCPBUGS-77148): Minimize ACLs by combining ipBlocks into single ACL [#2981](https://github.com/openshift/ovn-kubernetes/pull/2981)
* [OCPBUGS-77357](https://issues.redhat.com/browse/OCPBUGS-77357): Clear stale conntrack UDP entries for nodePorts [#3012](https://github.com/openshift/ovn-kubernetes/pull/3012)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/238410bc9ec6408baa5f9b9c37f1c1066ac90e45...e02cc75645fbc8981239e4144da1cd4dd98b1b17)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/8faa079fe4ba90ca37e7112e4be8a77ccf221e77)

* [OCPBUGS-80675](https://issues.redhat.com/browse/OCPBUGS-80675): Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 [#128](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/128)
* [OCPBUGS-82873](https://issues.redhat.com/browse/OCPBUGS-82873): Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 [#122](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/122)
* [OCPBUGS-75818](https://issues.redhat.com/browse/OCPBUGS-75818): Mitigate CVE-2025-61726 by bumping golang to 1.24.13 [#113](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/113)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/0693fe5dcfab224466fba7a19e614de71f727999...8faa079fe4ba90ca37e7112e4be8a77ccf221e77)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/4036cd3b5e45cf4d8c3c34def599657435601661)

* [OCPBUGS-80676](https://issues.redhat.com/browse/OCPBUGS-80676): Fix CVE-2026-33186 by bumping google.golang.org/grpc to v1.79.3 [#108](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/108)
* [OCPBUGS-75820](https://issues.redhat.com/browse/OCPBUGS-75820): Mitigate CVE-2025-61726 by bumping golang to 1.24.13 [#105](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/105)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/319efc99be8cc2603fad1677acee7c4a4a096913...4036cd3b5e45cf4d8c3c34def599657435601661)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/d634e80b52e7ecb087163eb5927450dc884e24df)

* [OCPBUGS-80677](https://issues.redhat.com/browse/OCPBUGS-80677): bump google.golang.org/grpc to v1.79.3 [#97](https://github.com/openshift/cloud-provider-powervs/pull/97)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/2424e8dd4bf3e19c3e65efebc03bf4942665f7c4...d634e80b52e7ecb087163eb5927450dc884e24df)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/3bc94eed432cacc37930aa4b0d8ff375e370cbbe)

* [OCPBUGS-84068](https://issues.redhat.com/browse/OCPBUGS-84068): update to v0.12.1 [#393](https://github.com/openshift/prom-label-proxy/pull/393)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/f2529aee3dc2e9065de08b035d53151e007136fd...3bc94eed432cacc37930aa4b0d8ff375e370cbbe)


### [prometheus](https://github.com/openshift/prometheus/tree/120aea706a6a3858175d1e421d1b325341f9c4b9)

* [OCPBUGS-80678](https://issues.redhat.com/browse/OCPBUGS-80678): Bump google.golang.org/grpc to v1.79.3 [#319](https://github.com/openshift/prometheus/pull/319)
* [OCPBUGS-86251](https://issues.redhat.com/browse/OCPBUGS-86251): fix: TLS client cert rotation when no CA is configured [#315](https://github.com/openshift/prometheus/pull/315)
* [OCPBUGS-78582](https://issues.redhat.com/browse/OCPBUGS-78582): [release-4.20] chore(kubernetes): deduplicate warning logs from the API [#299](https://github.com/openshift/prometheus/pull/299)
* [Full changelog](https://github.com/openshift/prometheus/compare/af9b206808f8eaeb4acec7fe74ba6b145bbdc921...120aea706a6a3858175d1e421d1b325341f9c4b9)


### [rhel-coreos, rhel-coreos-extensions](https://github.com/openshift/os/tree/ee943c37e640fcc5812d4a2a20ac66d57984e79c)

* NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches [#1920](https://github.com/openshift/os/pull/1920)
* [OCPBUGS-82524](https://issues.redhat.com/browse/OCPBUGS-82524): post-process: Remove workaround for openvswitch additional group [#1928](https://github.com/openshift/os/pull/1928)
* [Full changelog](https://github.com/openshift/os/compare/2762e75143b49efbebb3c2ac4a22c1835f01d78c...ee943c37e640fcc5812d4a2a20ac66d57984e79c)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/1a0229e40e5c569c6c59f6b10c26584bccd084b5)

* [OCPBUGS-80554](https://issues.redhat.com/browse/OCPBUGS-80554): Bump google.golang.org/grpc to v1.79.3 [#83](https://github.com/openshift/route-controller-manager/pull/83)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/ec18e9be0ebcbd7cb262d31f50148f81d0edd48f...1a0229e40e5c569c6c59f6b10c26584bccd084b5)


### [telemeter](https://github.com/openshift/telemeter/tree/d07a833015fe91fe2df12589a6877dde15e9a227)

* [OCPBUGS-80691](https://issues.redhat.com/browse/OCPBUGS-80691): Bump google.golang.org/grpc to v1.79.3 [#590](https://github.com/openshift/telemeter/pull/590)
* [OCPBUGS-81814](https://issues.redhat.com/browse/OCPBUGS-81814): [release-1.20] Fix CVE-2026-34986 [#594](https://github.com/openshift/telemeter/pull/594)
* [Full changelog](https://github.com/openshift/telemeter/compare/4c6036eeb851ad6e0e837e214a2d08ffc8f0d1d0...d07a833015fe91fe2df12589a6877dde15e9a227)


### [tests](https://github.com/openshift/origin/tree/53118e346434dcf090c1c350564c194a59a571b1)

* [OCPBUGS-87902](https://issues.redhat.com/browse/OCPBUGS-87902): tests: authorization/rbac: Align restricted-v3 rule [#31285](https://github.com/openshift/origin/pull/31285)
* [OCPBUGS-85155](https://issues.redhat.com/browse/OCPBUGS-85155), [OCPBUGS-87207](https://issues.redhat.com/browse/OCPBUGS-87207): Enable Gateway API tests on vSphere and baremetal [#31262](https://github.com/openshift/origin/pull/31262)
* [OCPBUGS-87902](https://issues.redhat.com/browse/OCPBUGS-87902): tests: authorization/rbac: Add restricted-v3 scc [#30502](https://github.com/openshift/origin/pull/30502)
* : OCPBUGS-77313: Add test for CPMS OnDelete strategy with full master replacement [#30882](https://github.com/openshift/origin/pull/30882)
* [OCPBUGS-78193](https://issues.redhat.com/browse/OCPBUGS-78193): Exclude disruption during NoExecuteTaintManager serial tests [#30858](https://github.com/openshift/origin/pull/30858)
* [OCPBUGS-83447](https://issues.redhat.com/browse/OCPBUGS-83447): Fix PinnedImages test to respect node taints [#30970](https://github.com/openshift/origin/pull/30970)
* : run resource request/limit check early [#30888](https://github.com/openshift/origin/pull/30888)
* [OCPBUGS-78025](https://issues.redhat.com/browse/OCPBUGS-78025): Skip oauth test for external control plane topology [#30848](https://github.com/openshift/origin/pull/30848)
* [OCPBUGS-78084](https://issues.redhat.com/browse/OCPBUGS-78084): Update optimized builds test to use rpm -qa instead of dnf [#30861](https://github.com/openshift/origin/pull/30861)
* [OCPBUGS-78084](https://issues.redhat.com/browse/OCPBUGS-78084): Allow test to tolerate running on minimal images [#30853](https://github.com/openshift/origin/pull/30853)
* [OCPBUGS-77824](https://issues.redhat.com/browse/OCPBUGS-77824): add the missing namespace from managed openshift [#30837](https://github.com/openshift/origin/pull/30837)
* [Full changelog](https://github.com/openshift/origin/compare/3b4f70ad314bf62dfb05876b7b744b43727fc7d7...53118e346434dcf090c1c350564c194a59a571b1)


### [thanos](https://github.com/openshift/thanos/tree/e09de117035d272a18dbd94d0bc8c8e29346026e)

* [OCPBUGS-80693](https://issues.redhat.com/browse/OCPBUGS-80693): Bump google.golang.org/grpc to v1.79.3 [#182](https://github.com/openshift/thanos/pull/182)
* [Full changelog](https://github.com/openshift/thanos/compare/c0951032b34b832d0f5467e616999490a284101b...e09de117035d272a18dbd94d0bc8c8e29346026e)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/769d0fb781dfb53df5d533b917c363a553185fd6)

* [OCPBUGS-80698](https://issues.redhat.com/browse/OCPBUGS-80698): Bump google.golang.org/grpc to v1.79.3 [#109](https://github.com/openshift/cluster-api-provider-vsphere/pull/109)
* [OCPBUGS-78436](https://issues.redhat.com/browse/OCPBUGS-78436): Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.20 [#92](https://github.com/openshift/cluster-api-provider-vsphere/pull/92)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/1ff9e11f5a117505d935549b96cd0d129917c015...769d0fb781dfb53df5d533b917c363a553185fd6)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/0363addf5f2c19322d24a3f61c7b2684da16ead1)

* [OCPBUGS-80701](https://issues.redhat.com/browse/OCPBUGS-80701): Bump google.golang.org/grpc to v1.79.3 [#174](https://github.com/openshift/vmware-vsphere-csi-driver/pull/174)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/61d0d00a78ee60ee57fcc99648a8851f0db52e5a...0363addf5f2c19322d24a3f61c7b2684da16ead1)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/13b68a91a148667d46bd06ad8fcb839be984671e)

* "[release-4.20] OCPBUGS-84891: Fix escaping password" [#340](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/340)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/5cd04d61c20872edaaa2c3958779ff29ea6e6d82...13b68a91a148667d46bd06ad8fcb839be984671e)