# 4.20.34
Created: 2026-08-13 22:41:04 +0000 UTC
Image Digest: `sha256:a6182ea1e41a144d7bcd4bd93596851b907ff1ae7711c1c29b8b26baf3eb03f7`
## Changes from 4.20.26
### Components
* Kubectl 1.33.3
* Kubernetes upgraded from 1.33.12 to 1.33.13
* Kubernetes Tests 1.33.4
* Red Hat Enterprise Linux CoreOS upgraded from 9.6.20260616-0 to 9.6.20260811-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: |
| GatewayAPIWithoutOLM
(5 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed) |
### Rebuilt images without code change
* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [a26df06f](https://github.com/openshift/assisted-installer/commit/a26df06f52f1426defcf42c6cebcec5b7a956df3) `sha256:ebe49721a49bf24cb6055f8e4eb157c8543af9e489a74dc7800c36fb9eb740d3`
* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [637327ec](https://github.com/openshift/assisted-installer-agent/commit/637327ec40cd1f85ac5d7d4f114a2fae89baa8b0) `sha256:7c33d141b80ad36288f80411015268e9ecb5b71b2a493ccff7b13948b8962c4b`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [a26df06f](https://github.com/openshift/assisted-installer/commit/a26df06f52f1426defcf42c6cebcec5b7a956df3) `sha256:d4aca3a5bddfa3fcbcd083f752aea45310daae4c37a0a2c7c0ce636c1239d70b`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [e3e997d9](https://github.com/openshift/agent-installer-utils/commit/e3e997d9f7b84b134a07186de9bddde21598ae32) `sha256:f393f96428674a82e7b43c220678a518cca22eb0f82a2a1922002b5b5a51b2ff`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [11b24a2c](https://github.com/openshift/apiserver-network-proxy/commit/11b24a2c7452ef683a1d989f1016e6e815f5c112) `sha256:69c92e0d255bb79806fe6e4a0c9493443e94e61ad0500b2603f59a32c369a882`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [bb88da16](https://github.com/openshift/cloud-provider-aws/commit/bb88da16b29d63573861351afc5ca8c4547775d6) `sha256:30d079e9909e568ab438960699711c97300c2d1cbe8a75499ebc7472dfe8453d`
* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [300439ea](https://github.com/openshift/cluster-api-provider-aws/commit/300439ea0736444a160c061578b3bd8956d4f7e6) `sha256:f00ccb18315a11be4d84bc7310db62c29913d732bfc0c0b224b3e86d8cc46b2d`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [6c99b973](https://github.com/openshift/aws-ebs-csi-driver/commit/6c99b973a6a5ca0202d56b87119714b9ec4a5365) `sha256:a1ad15935f6063a9f156e70804f9be526b00e3afae87f412d67d4a9c7cf2ca11`
* [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator) git [91042479](https://github.com/openshift/csi-operator/commit/910424793d59d291a9e6addaccbd2facf53e2bff) `sha256:0ea1bab4540ca96bbfab7d9e7b8559dd7f34bbc0c08a6b6c21fdf7fc21765d50`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [b37141b0](https://github.com/openshift/aws-karpenter-provider-aws/commit/b37141b051bdf790eb7e8f45b95f6bd7dc8140f4) `sha256:c222b38ebad3136281aa5be4f4a01efaf1cf59dd0b2fbc0ff03ef61bdb521ec9`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [0000b76a](https://github.com/openshift/aws-encryption-provider/commit/0000b76a838f6b56efcfecfa110bc6795d0f7746) `sha256:f29bf778cb1a617c3609672fddd61e4d91c85526b1f6b8e3f191d5434b3219f8`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [999f4f76](https://github.com/openshift/machine-api-provider-aws/commit/999f4f76124e66c7b42af678cb19aff4b29f72d4) `sha256:079e5474ac60dbb8e5fc9c2d0af19a099f86d57fa878052dcc058b861557bae9`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [8e83772a](https://github.com/openshift/aws-pod-identity-webhook/commit/8e83772ab8d31b32225744d4f0b0023680692daf) `sha256:4bf093e7775f536f8b6b5aae2f2612afc34430387bb6a15fbd6f4087b3392510`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [fbf11126](https://github.com/openshift/cloud-provider-azure/commit/fbf11126955608076cd568c22be0d630c5db0d84) `sha256:739bb0ef8cfae1cae6252d35b81e74637e79dcd3649fcbea2ca095aee75f5411`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [fbf11126](https://github.com/openshift/cloud-provider-azure/commit/fbf11126955608076cd568c22be0d630c5db0d84) `sha256:6cc1f4611079130ae569f800509ab9d23c267b51d6008636f2ec3e9323391f59`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [c29c68dd](https://github.com/openshift/cluster-api-provider-azure/commit/c29c68dd2a576f19771dfd0c349b34f890063cdc) `sha256:7838f183018fab48f146778af701f1b01222b93fb4c515df4e43800eb8ca097f`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [e1ea4e92](https://github.com/openshift/azure-disk-csi-driver/commit/e1ea4e929c51a3fe6823ffb5fd17fb07971ca86d) `sha256:963f838cc56d583e3a783e54ce68922ebb993e8b49a31bccdad728e7a1e986a7`
* [azure-disk-csi-driver-operator](https://github.com/openshift/csi-operator) git [91042479](https://github.com/openshift/csi-operator/commit/910424793d59d291a9e6addaccbd2facf53e2bff) `sha256:6813e57d78e84e537cda37289f37e1c10da319c0156adfa15ce44e187420ffe7`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [c7bce6e9](https://github.com/openshift/azure-file-csi-driver/commit/c7bce6e96df8f14b61ead343b901087a44736513) `sha256:222606de52428aebe1e3fa861fe1c8f443c35870ec4c37566eb102906a5dfa3b`
* [azure-file-csi-driver-operator](https://github.com/openshift/csi-operator) git [91042479](https://github.com/openshift/csi-operator/commit/910424793d59d291a9e6addaccbd2facf53e2bff) `sha256:d8a7d990aa9309b5b39f82146b1a1a7919e6db6e057f713cbad22016ffae0677`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [1d6fb879](https://github.com/openshift/azure-kubernetes-kms/commit/1d6fb8798544b0d0ff60582f82f885e5a6a776ba) `sha256:9648f3b41bc8c92aae4d8c4f67c1fd41b33e94ccf9d65540abac49235497b2d4`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [68db9150](https://github.com/openshift/machine-api-provider-azure/commit/68db91507ea47f767ee0dc838c08cc371d2ff69f) `sha256:5583c356616eb4d56e09a342a89415c58641e988c8dcbcb36d78a87ed748b80b`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [d957de42](https://github.com/openshift/azure-service-operator/commit/d957de42c2e6255b79fcfe7aedac78eb746d92cc) `sha256:3c057c82ca003ed3044a913dc5294f3ad867dfb8204bf606b0ed5f34a19df028`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [f782ba74](https://github.com/openshift/cluster-api-provider-metal3/commit/f782ba747ed353721c84ceb754ca8403f94adb6a) `sha256:92078f1e93a52d234fdfa0ba6b7fb67f1e26bbf43b2f71c5cd5f5abb16574514`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [fb678fec](https://github.com/openshift/cluster-api-provider-baremetal/commit/fb678fec5f7e08348b281341481f33a848204e50) `sha256:883118bbd0478d729f506ed928ad569bd1b41ed6a760685e761326ba5cef49de`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [5e602ba7](https://github.com/openshift/baremetal-runtimecfg/commit/5e602ba702420d0f30cee175f51fff83e00c1b5b) `sha256:5b111fca94875f64670990b5d6ddc96e572fa868f52fb0799e1c57698e2fac24`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [d22915bc](https://github.com/openshift/cloud-network-config-controller/commit/d22915bc82993ce11cb3fb97e6ae00602f30549b) `sha256:c04705215bbf31eb915e82d3a981ae340686eae4436a98cb8ffd0d99552f8767`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [569ae680](https://github.com/openshift/cluster-authentication-operator/commit/569ae680cbdf0f78cc0d77278c5178160679fe83) `sha256:4f274f2607ef46dfa2c00dc7ebfe576156908d5d0c476a2d466a08fa5e091e59`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [6b1d2ef8](https://github.com/openshift/kubernetes-autoscaler/commit/6b1d2ef88e19d32143d389de6999c765c7e30cad) `sha256:cf29a2290183ee5db28c01199fa5e07e8e3d38907f0bb2f6e45aa1f981b78cee`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [147e5a7f](https://github.com/openshift/cluster-autoscaler-operator/commit/147e5a7ff20b46ade7dd932b47e06ca82729f5e8) `sha256:9f48c1053bc2c97a703f0dd8aed411538c22c6a832dacdf62a696fafc1052d9a`
* [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator) git [17181f99](https://github.com/openshift/cluster-baremetal-operator/commit/17181f99343a5b1fb08af8a7994ad3e9eecc6c1e) `sha256:aa648b541abb1e1e7dee5e4c57b3b76d51c0729271e4140318d03df60494ed1f`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [74abc555](https://github.com/openshift/cluster-bootstrap/commit/74abc555111bac56a67957ef517ef086e4643c50) `sha256:ac4f7524031a40f10411474fb7989db749c2fbdaef1176975ac5ab64d632c8d8`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [dfeecf96](https://github.com/openshift/cluster-api/commit/dfeecf9616e049ac552f91a71b2a50cb0e96042c) `sha256:a8da2b6d562158f87cf675e8932972a6710b1b7613cc96b314b9fa60b38d527b`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [4bd6d82d](https://github.com/openshift/cluster-capi-operator/commit/4bd6d82d21a2d201d9857ca1e26b21c70a648bf5) `sha256:1e10692c8003c6624e33fbde91fa54ce540310e65ad342b30bf70d760505a6f2`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [276696cc](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/276696ccf679830b25df341edb7aae9bb3f4e763) `sha256:cfcbf1d72d379474e243a6f133d07d50fcf8438fe657927a1bedef8dab2b8eed`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [657754e2](https://github.com/openshift/cluster-config-operator/commit/657754e2beaed6295ff28bb0f7813cb1c9ce35b2) `sha256:283bdafb4a0c031d625da87cdb829a53d98fff4b314723cca54a7e40abb85bc5`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [0bbafe24](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/0bbafe24ade564bc62554251f36de90d524abcde) `sha256:cc87db898b8611316b59412d00fdc4f259f309917d2521678a7176cd3b806596`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [a99bd8ff](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/a99bd8ffb9aa596fa8d6932d5d93e0613c5d367f) `sha256:f8e08a6c36770e9b70c2eb3583369021cb3b58f0540834f377e1ed6b0fe512b6`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [82578923](https://github.com/openshift/cluster-dns-operator/commit/82578923164636746e0d74d594ab32d83a660c0b) `sha256:536d126733cbaf0e0c2aac72360f92767501e28ca2d07e8bd6636c1fb28ffb0c`
* [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator) git [9acf049b](https://github.com/openshift/cluster-etcd-operator/commit/9acf049b2985339275796f69a2a8acad47726a29) `sha256:d9b5a3fb845e9386c795cb6d1a6046af686c12f7400032881f3c3848b1cb5ca3`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [b04c7c12](https://github.com/openshift/cluster-image-registry-operator/commit/b04c7c121851704973a94a50e42af1425045899c) `sha256:62213bf096fcffddaa982d081e481a98472bc544e15bb6630d6ec51a75fcb508`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [adaae0d4](https://github.com/openshift/cluster-api-operator/commit/adaae0d4e6d7a0e466e7e86af399de0b828c8b81) `sha256:176163f19ca5cda2af7ed504da4e09ac93cd071d5f349bf80629f28817d73d7d`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [438c9dba](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/438c9dba80ddadeabe9efe4a654297a7b550b2b8) `sha256:8ed64722758712891ce194d9aee9f620ce992ee35d5f7b6a1c42a6636ad9e4dc`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [84eb8c5a](https://github.com/openshift/cluster-kube-scheduler-operator/commit/84eb8c5a73a730d6d08794e51da9c20013ca4304) `sha256:3659d80f96995dd6f8d2ad98cc276ba6b0dd1bd9439121545e966018f4850889`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [5adc1429](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/5adc14299739bc64c8812cbab0b0ff2d12863602) `sha256:9a96ec0242ad454c38256d638716dccd81132658d750f7950e168eb0389ce5af`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [b3c82b2e](https://github.com/openshift/cluster-machine-approver/commit/b3c82b2eec66ae3ae510df0603af1212c34be618) `sha256:b6575d8557ec23c87b090438030e0b05225d12fb54f63233dc70750417e7948f`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [d01cc083](https://github.com/openshift/cluster-olm-operator/commit/d01cc083748864e3c8dcc72fb75516492dec3555) `sha256:d1db5e2757ad0d0755d7451aaf9044693eb2c3635c3b25ff13a97254ebf40e0d`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [9cfa5679](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/9cfa5679a8ac1e5a68eea32179d9e069da85dfcf) `sha256:3ce5fdb53255b5ef639e3e6d1eb676d55fb62e5ae1511f02be19cfd94e4424f6`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [aa455c04](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/aa455c043152123595c2b4f72e02279aad9dd48a) `sha256:87cac9be34c9c6da80207bc6c4f681dd0ce194faa748e2a5a5f271a3a87dee5d`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [b343f70f](https://github.com/openshift/cluster-samples-operator/commit/b343f70f19ffd559e1a81d3a3e65bd106e634c13) `sha256:a7e06b1a8602b399b598f934fa0d24166a6b61ced31eba881ea6072ba740fa70`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [e8e9de43](https://github.com/openshift/cluster-storage-operator/commit/e8e9de4345ce79aafbdcf31eb4d4ce3682cfd6b7) `sha256:7b6b14b3bd503708c758159c88d4c229473ef35d1ce8b11a91a86fabba6e2910`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [c40e7b9b](https://github.com/openshift/cluster-update-keys/commit/c40e7b9b60c62690a25333fc54ae0d3705474afb) `sha256:dd1cbdf8ab7c6e58463049b285c7716f248aabaa8c44cfcc024effeb32bc390e`
* [cluster-version-operator](https://github.com/openshift/cluster-version-operator) git [ea3fa769](https://github.com/openshift/cluster-version-operator/commit/ea3fa7695054fc9260936902b33b738bb4c405bc) `sha256:bbc784a27e575c0ad5ae227a8245d3efd0c2dc5e39c63bdc8c51035f853b2dd7`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [2438d7c8](https://github.com/openshift/configmap-reload/commit/2438d7c8e495201361d87da205649bc38fc4822b) `sha256:8b576bf7f09c6cd78c911ce9ce3f142816bf703c7d9f9ec667a20526ca8087e2`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [184a9601](https://github.com/openshift/containernetworking-plugins/commit/184a96011a8cacb72319cdccb904271a99c5928d) `sha256:4dabbcbc44262827cd24075ec8dd394d969b593c5bd9fd456ff2f1d8b2a8ebad`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [184a9601](https://github.com/openshift/containernetworking-plugins/commit/184a96011a8cacb72319cdccb904271a99c5928d) `sha256:e830015ae8058e757c859e81aaab6b72dffb8f6c78117d96143af479bd8a61e2`
* [coredns](https://github.com/openshift/coredns) git [6f39336e](https://github.com/openshift/coredns/commit/6f39336e6da9dc77b2db140a96773c413d50a665) `sha256:2532df791ef1b51eb1eff5ab172dabddac28a85f120fbe2c5cbdd8a754450e4b`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [649398c2](https://github.com/openshift/cloud-provider-openstack/commit/649398c2a16731984e65719f6b8b323df79f3ff1) `sha256:30d2cda38c7d4156ed4cf03d64bb5a5647ce0b63238701b4f57f1dd50b020464`
* [csi-driver-manila-operator](https://github.com/openshift/csi-operator) git [91042479](https://github.com/openshift/csi-operator/commit/910424793d59d291a9e6addaccbd2facf53e2bff) `sha256:fbd967f22bc207545dd2bea27fb0204910c82311fe8ee8307d310433211c5588`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [935f1e1f](https://github.com/openshift/csi-external-attacher/commit/935f1e1f7f9f07c03116e37e760a66e2a58c63c0) `sha256:3d258493a497cd3529f1bc93a27bb8955354a84dfaf2bb4780af8896ef0f5b26`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [c674bea9](https://github.com/openshift/csi-external-resizer/commit/c674bea9bb6a81e463c7fefa974e2109d829daef) `sha256:7998fc6866468cc14c813bed7f480fc414fb57ff965917fb7c7062707e93c18d`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [693a8264](https://github.com/openshift/csi-external-snapshot-metadata/commit/693a826455777eaafc677bb2195dc071d184243b) `sha256:0b85ff26d1d3a0c81c4253b987c7a6acecefbe5d16592b7388c038640a2e9446`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [433cf89b](https://github.com/openshift/csi-external-snapshotter/commit/433cf89b4e4d1b437a8a446ece28b217ccf9bd06) `sha256:526c1ff93dba224111a87e8b9a7fa222cce38152c77b0896e862cb673c22a7c7`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [1d6d6b27](https://github.com/openshift/csi-livenessprobe/commit/1d6d6b27460e58f24110c72ec9c96afe2c1d891d) `sha256:8c030072d958ec31af94d4073eff654372855bb65e25e3867e959dbdf726acc2`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [6ce4713c](https://github.com/openshift/csi-node-driver-registrar/commit/6ce4713c87b735e2546a65a871bd2c7cfe383c31) `sha256:e4598693352d0fd4730b2bb583d17ebf88241b8353af9745d8502c779d117dfe`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [433cf89b](https://github.com/openshift/csi-external-snapshotter/commit/433cf89b4e4d1b437a8a446ece28b217ccf9bd06) `sha256:eb139c6350cbb56cf1b440807ba946d48629fe52bfc4b54baf9e28ba47451d2e`
* [docker-builder](https://github.com/openshift/builder) git [35afa308](https://github.com/openshift/builder/commit/35afa308e2473046721057112d804334fc4b8217) `sha256:5610bfa77cb54117d734b8cc72b843f928d184348aaa02061fac286992469e2e`
* [docker-registry](https://github.com/openshift/image-registry) git [0e96a084](https://github.com/openshift/image-registry/commit/0e96a08424d601be55341bc3f4412fde977602c8) `sha256:8a5443474fe2b04b9b049ca811b5f3e6c78d55fd0bf21980e50d9874d56eeaae`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [62e1f604](https://github.com/openshift/driver-toolkit/commit/62e1f6040cd297149f5f14e0d20814759ec61354) `sha256:6f61df198f4dab74235569c6a62fb17a4478833b40a1c81fb56dc47e8033f1bd`
* [etcd](https://github.com/openshift/etcd) git [05bca977](https://github.com/openshift/etcd/commit/05bca97760b1cfa1bcef11c0b1f1a5c4dab19709) `sha256:f529ae2aa78ce382a87ae4db7521462b97ea346e56ba5a347467bb276ad27f60`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [d5a55414](https://github.com/openshift/cloud-provider-gcp/commit/d5a5541436d9269006928079fcdc507d0b6d4033) `sha256:4be26816a0396ee4f730e3a8f1553d3623c49b7cddda05b5fb0bae4ac3d85e7c`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [74e23890](https://github.com/openshift/cluster-api-provider-gcp/commit/74e2389011d640a371c0acb6ff71b1582cab23a1) `sha256:efd461c2525feb64c59615b44abf40d717fc19e4ff6d4f276426dd022cb81dc0`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [b998cf25](https://github.com/openshift/machine-api-provider-gcp/commit/b998cf2532b52ce574c42e93c63965b31b9c6c8b) `sha256:32706fe728f61a891e3bbe680596ec62565808f7544511389b9dceda37cfe448`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [49e54581](https://github.com/openshift/gcp-pd-csi-driver/commit/49e54581328a46f6aee3f7842d401681d34b2104) `sha256:53646753cb9d31cd8212d191534ece7ba6eefece554f5eb05f96acdb2722d525`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [b36788ed](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/b36788edd4c559cffd5f7f1b2e3e51b98c3e92b8) `sha256:a8d6b8e9170fde56871bcbac931ab71b41a6b61bc6c83a46c8f93ae004f9d4c2`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [36ab30f9](https://github.com/openshift/cloud-provider-ibm/commit/36ab30f90e87de0daa926d20ccda88c41abed191) `sha256:4c555e315e97878193dc836b27692f31d5e3ee7c9fbfe285beb6f354da8a3284`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [0d2143b7](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/0d2143b7aaaf2047e9578fb3ae41f89267d4b1bc) `sha256:37f2e94f9dd0a0b1567ef91ec22ad33e090d41333f717a6fd4cbbf11093fe235`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [21f405cc](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/21f405cce9573eee1c4f1cf95c0eb601ae77ed99) `sha256:ffcd0cf0cbe638a94cfb58da0ab70abb1acce9bd6654d1adea744f7bef69eb8a`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [8b6396a4](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/8b6396a4c78f4791b7f3c5ec404a78b499f8546b) `sha256:040b677d22f23d46185530eb6d5f9addbbe43eae34604ec0531521354a43fc6a`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [e63e7a19](https://github.com/openshift/machine-api-provider-ibmcloud/commit/e63e7a191ccc1d391b574d713899e307a88b466c) `sha256:2dabfd7025cef77af1d9f58027dc2b42b2e12348537bfa82825fb37b8765ea46`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [39e71471](https://github.com/openshift/insights-runtime-extractor/commit/39e71471d109ed16c336a8e08c2562d837f90029) `sha256:6e851695f3da1cfcf177e1a79786d6084ab3adc9060bb888e8348c675a902e76`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [39e71471](https://github.com/openshift/insights-runtime-extractor/commit/39e71471d109ed16c336a8e08c2562d837f90029) `sha256:9b101c0e99a26e374a1aec04a75f40881e31b81c218b0dfa8c9145f4859eb30e`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [6c92e542](https://github.com/openshift/ironic-rhcos-downloader/commit/6c92e5425b58baa9d4dd951a992b7460e8407247) `sha256:34158456bbd87861ecaea8c4f45c434ce4b5c590f8bda0534ef3f38e64e51c7a`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [fa5b8b8b](https://github.com/openshift/ironic-static-ip-manager/commit/fa5b8b8bb73e509f74205a99a0ed1cb07a843885) `sha256:0583d34364315bd3face49204d68ec969e9b557f290b3ab0c0cc2de801a366fd`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [e7379b30](https://github.com/openshift/kubernetes-metrics-server/commit/e7379b302a7377c06cf06d54230decd479f92078) `sha256:ada97eaca27482efb950fd9747981793d3b46a8b06f161747c1be62110aeb49c`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [b9134351](https://github.com/openshift/kube-rbac-proxy/commit/b9134351be37c43408334047d8eb85d0ac01fe4e) `sha256:0930105be4f986de94bae433c7fe08d2956d554d05ab011e5e900f3e75e21e7b`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [0f8a4eb8](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/0f8a4eb84ace9b746cf25d51d80dacf34ca5f953) `sha256:a55600b81a194420758eba340d4a8eb5377c5d1521638d9ed96bb439788c3eb9`
* [machine-api-operator](https://github.com/openshift/machine-api-operator) git [de0171b9](https://github.com/openshift/machine-api-operator/commit/de0171b9abf99cde11e789dd0d103cb69e7c6684) `sha256:92befa37a8f6173e5405ba912fbad3a8f935f971ac1d91d7fc6a9819e77f05e6`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [fe4360da](https://github.com/openshift/image-customization-controller/commit/fe4360da1fe44c0d8a69c0133f846e0cbc36740c) `sha256:1564067124a029e1ee1a314a6f848b11d43c26153d20d9ceaaffdeebaaa969ea`
* [metallb-frr](https://github.com/openshift/frr) git [3ca45c51](https://github.com/openshift/frr/commit/3ca45c517eafe07aac0866e5cbd32a5c08081f22) `sha256:75365fa6e35a665afed0e7f67a4ea359b6b1bbbc3abf352be969b1be83c228b6`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [fc73c803](https://github.com/openshift/multus-admission-controller/commit/fc73c803caa1140e5a9115ceeb0e38504b001722) `sha256:d46908c0207ff241648d769d7f30e587e17f3de44550eb4823e54cffdd24e563`
* [multus-cni](https://github.com/openshift/multus-cni) git [b2a2f457](https://github.com/openshift/multus-cni/commit/b2a2f457824490d93da101d983b25af966f2be1b) `sha256:1f039b317550e241ae9d1809e794ff3a87e8e6565b267123754c9079420aae50`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [b2a2f457](https://github.com/openshift/multus-cni/commit/b2a2f457824490d93da101d983b25af966f2be1b) `sha256:e1abf5651cb74f3c818c07d4be6d915078840248d894d836b929e6e943ef7874`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [afbdf825](https://github.com/openshift/multus-networkpolicy/commit/afbdf82505c0d8f212d63e1eee6debced74ef653) `sha256:f524310cf0d99e2c764af661aa6955323e3868b0996d1e8ceb07cf522e6c22fb`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:3fa8a1ac4b8869bef3e585c7b9bf7fe6548869257f7e1a2eb68b5d33266b83d3`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [43c89591](https://github.com/openshift/whereabouts-cni/commit/43c8959152a6ca8afdc73eaed624286628c2c22e) `sha256:a7e5fa8748b88d462da5d9ee5406ee563a6593af772f55db3682281ab9d396a8`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [dd3c4d0b](https://github.com/openshift/bond-cni/commit/dd3c4d0b886138d974022b963e72f2e90293abfe) `sha256:3d6f4ead6abb12429bab4c479946040d6b2499719f1128b35018c9ab58af62ea`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [b81340a9](https://github.com/openshift/network-metrics-daemon/commit/b81340a9fc6963fa3d64d215a12e8528ca797131) `sha256:ec59e6e7be7a35de27084d265a620f653c9d4c78287c52a6fb387f76800be1a9`
* [network-tools](https://github.com/openshift/network-tools) git [26d09174](https://github.com/openshift/network-tools/commit/26d09174cbd92386469e777e3bf49bfa95d035d5) `sha256:4d735b93e456fd842016744d9cb83bf44904d1bff041c2e7bd16ef9984b687ad`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [b575ef15](https://github.com/openshift/cloud-provider-nutanix/commit/b575ef15f13e1434c793ae50824fd0676480be05) `sha256:02c836718901d6240faa2b14b8374943bd00fce733c0a9c819032cd0be654718`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [3200ddef](https://github.com/openshift/machine-api-provider-nutanix/commit/3200ddef48a5a8d47b96539419c51f3619cb1fd5) `sha256:b6240d55cd9d720f609b85c737a88a8d88c502f0fccf1931b21cc3c1fa962911`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [99f27d25](https://github.com/openshift/oauth-apiserver/commit/99f27d25cc2853fe44ce6c7f7611637ef1492e42) `sha256:d5dfe10567e0bf9645873770d83db9cf4306d9b42b602946fd362f11524343be`
* [oauth-server](https://github.com/openshift/oauth-server) git [715ae668](https://github.com/openshift/oauth-server/commit/715ae668b8765b029cb7851a509b9948b8cc57a0) `sha256:0cbd8a3bb87b2786bec2c6c7e7b41230ebb92626c30993e42336323bfff57a50`
* [oc-mirror](https://github.com/openshift/oc-mirror) git [9b186403](https://github.com/openshift/oc-mirror/commit/9b186403c88394b54ab491871a158a124df39a02) `sha256:218f798cebc3a0e1553f1cc9722a7648df07c7c5aa686267e036708b6a1d194e`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [eda815e0](https://github.com/openshift/openshift-apiserver/commit/eda815e0515550890354dda41e65f8dd35e15ad5) `sha256:f15105d05bf6e886122cfd8fc9138b8f6e60abb15a002dbe3480f357f6c2d2f8`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [d9e543dd](https://github.com/openshift/openshift-controller-manager/commit/d9e543dd31e981f279c447e4f92f0dac3f665f9e) `sha256:7db2358b5563f4c82a58bdad65a23136320fb4c5e0137c396d6ccdc6167b43b3`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [b04e2ef0](https://github.com/openshift/openshift-state-metrics/commit/b04e2ef05498c2a4504bd9396a3290c4f263fc37) `sha256:85bb2f248082a12d97633c08113f30de0a08902133253a8ffdee1c3b535bd267`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [649398c2](https://github.com/openshift/cloud-provider-openstack/commit/649398c2a16731984e65719f6b8b323df79f3ff1) `sha256:06d6d91d377d41d9bdfd62a552610bbc959b2ee405654f581e000093e8f78d38`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator) git [91042479](https://github.com/openshift/csi-operator/commit/910424793d59d291a9e6addaccbd2facf53e2bff) `sha256:492cb02771bda3220224b62a841f3f70688eb87d83ef08eab86a9eb689523963`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [649398c2](https://github.com/openshift/cloud-provider-openstack/commit/649398c2a16731984e65719f6b8b323df79f3ff1) `sha256:5f2a7c1fd3922eb8834cff0dc9e1652f72d29c8187b19138d323169dc9adc98d`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [c91265ed](https://github.com/openshift/cluster-api-provider-openstack/commit/c91265ed4f82c0b36fbfc50040b8180f04fcf4cc) `sha256:d02b95949e511fbf7261445840ba95c9cd6d79781e518d15ee780464c62fd462`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [bf0d2c88](https://github.com/openshift/openstack-resource-controller/commit/bf0d2c88d6bf9bd90b24c979ea63dc37606b45fc) `sha256:7c0dc90d7d0ce4b6182c2d417e218d5eddc7b53b3c12ecb71a2a6106208b11b6`
* [operator-framework-tools](https://github.com/openshift/operator-framework-olm) git [1628e537](https://github.com/openshift/operator-framework-olm/commit/1628e53777871f6c264d41a870cc4ee7248106f2) `sha256:8ac06cf22f4eeda4f9fb7ead6c8d468e67f167de17af7c2ee262623c0050fb88`
* [operator-lifecycle-manager](https://github.com/openshift/operator-framework-olm) git [1628e537](https://github.com/openshift/operator-framework-olm/commit/1628e53777871f6c264d41a870cc4ee7248106f2) `sha256:0a73e7402e938f2e59d77b2ae742f33e31d8cfb1dadc97b251530247244efce1`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [4ccd56c9](https://github.com/operator-framework/operator-marketplace/commit/4ccd56c96839e2389e12bf3f8390a6c062e9b2cf) `sha256:4e80a89a400dab4ab5d7e2022112bd76c578ff37d06ad09c6eeda589732476cf`
* [operator-registry](https://github.com/openshift/operator-framework-olm) git [1628e537](https://github.com/openshift/operator-framework-olm/commit/1628e53777871f6c264d41a870cc4ee7248106f2) `sha256:feb015b53da70f30524aa3e7d12a82b9b74454624415bd296a7d8ef7e4b5dab0`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [8faa079f](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/8faa079fe4ba90ca37e7112e4be8a77ccf221e77) `sha256:3a5c1640c86db6497df5d50fcc53e9f26397ce683c3abf3322e5cde94e276d80`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [4036cd3b](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/4036cd3b5e45cf4d8c3c34def599657435601661) `sha256:111648d64ac804930bcc5a969ff88183e577ad24f85a869ff107c12b0186baae`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [d634e80b](https://github.com/openshift/cloud-provider-powervs/commit/d634e80b52e7ecb087163eb5927450dc884e24df) `sha256:57d736d6f07560d98d9c735579c41496ceac02bd835d25c0bc83494bf1b32544`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [f011b3c7](https://github.com/openshift/machine-api-provider-powervs/commit/f011b3c727c5377302b2ab0a203457490b930a3d) `sha256:1ac451cabaa8b968fb1958977dd702a68b3fa9533d63ba90bce9fe2e6b84050a`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [3bc94eed](https://github.com/openshift/prom-label-proxy/commit/3bc94eed432cacc37930aa4b0d8ff375e370cbbe) `sha256:883fe174ed25bd90bda950f38ea924b5c9841e3ec01934be428269fdfe1fbfc5`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [425294dd](https://github.com/openshift/prometheus-operator/commit/425294dded74054100db465d296b2aa76e7a691e) `sha256:b6f6607d4647d9367c85877f1334ada25e99ba55a3d8da5c3cdbfc2ad3945b8a`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [fa749d65](https://github.com/openshift/node_exporter/commit/fa749d65d8eca1cc937554baab91385a78ec8ce1) `sha256:ee148da96972dee0b3a2825e0413be9e4e08e0dd108f3b092686ebc4203f1833`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [425294dd](https://github.com/openshift/prometheus-operator/commit/425294dded74054100db465d296b2aa76e7a691e) `sha256:6a544951f91130f9a8409e1c756beb1bb5c10834e084f8bb7cc0643f9f1be174`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [425294dd](https://github.com/openshift/prometheus-operator/commit/425294dded74054100db465d296b2aa76e7a691e) `sha256:e11fbb5a9992f7e4007f2d188e9ab520df4964ae09a5850c5b72a775838a5f1b`
* [rhel-coreos](https://github.com/openshift/os) git [ee943c37](https://github.com/openshift/os/commit/ee943c37e640fcc5812d4a2a20ac66d57984e79c) `sha256:5e725dc1d3a5f110681de23752d96cd1d3ca89cc14b3966b66ba9bee51d38850`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [ee943c37](https://github.com/openshift/os/commit/ee943c37e640fcc5812d4a2a20ac66d57984e79c) `sha256:bffe04a9a60917c77446c4595a8e0052c20b23661a6ab011fc1acdef959be927`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [1a0229e4](https://github.com/openshift/route-controller-manager/commit/1a0229e40e5c569c6c59f6b10c26584bccd084b5) `sha256:dde5405dcccff0d7e938317fa5ad036dab437b40a3961a847c18e7b6ed0c16d7`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [37e0c317](https://github.com/openshift/service-ca-operator/commit/37e0c31790b6a954214817974a56c9a699d0cf78) `sha256:7bc6273ff56abed4ce69fbeb07a9c88af93d74655ae24fd5825d91e57d1fb012`
* [telemeter](https://github.com/openshift/telemeter) git [d07a8330](https://github.com/openshift/telemeter/commit/d07a833015fe91fe2df12589a6877dde15e9a227) `sha256:432cf2e0df1cf18907f2cd0a012d613e7e1b0732fd77a3700ad3fcec707aeb80`
* [thanos](https://github.com/openshift/thanos) git [e09de117](https://github.com/openshift/thanos/commit/e09de117035d272a18dbd94d0bc8c8e29346026e) `sha256:c3a9bea5f85e301f0dd85a07d2bd73f09e4571bab5e044cca3f4afae8131ce0d`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [0e61642f](https://github.com/openshift/volume-data-source-validator/commit/0e61642f8d898ee199e42f37319864851dd3627f) `sha256:849a7543ee82195434c1023b6ac6f12f432f0edb6f099971632353ebad28b9f9`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [b93eb64f](https://github.com/openshift/cloud-provider-vsphere/commit/b93eb64ff72e7c005687813c8b478d694a0f517a) `sha256:b2982d3de9c6823873db4e7a0edd24d45faa8beb408dc8e031e6b88ce0b9a73a`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [769d0fb7](https://github.com/openshift/cluster-api-provider-vsphere/commit/769d0fb781dfb53df5d533b917c363a553185fd6) `sha256:5ccb07744ba19c53a473ff7dd87fa47a8eb4f2c547c8e94ee6a53a0926bd7be4`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [0363addf](https://github.com/openshift/vmware-vsphere-csi-driver/commit/0363addf5f2c19322d24a3f61c7b2684da16ead1) `sha256:45fb2c7c316a6bfefbfc2bf79d1c39c27bbcaeb360892b85ea836c3a68f71351`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [13b68a91](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/13b68a91a148667d46bd06ad8fcb839be984671e) `sha256:d93cece27b0d44ebfb377142cf4b02abb7221f1e7aa66a2e7a373c506cc36eef`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [0363addf](https://github.com/openshift/vmware-vsphere-csi-driver/commit/0363addf5f2c19322d24a3f61c7b2684da16ead1) `sha256:b3f6e144a44d484dff72e08d65855ed4c7f6b7c79aef7b0d851b90c9411cd47d`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [65d066ab](https://github.com/openshift/vsphere-problem-detector/commit/65d066ab0940dc69aa3f7ec6b02e698a6e4f5795) `sha256:e618e0fc47b0d5e873c166186bacac47fceec5af84451e0c2f1d4e2330724fe5`
### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/257fad749a2424b44eae30b0b72360e1e246880e)
* [OCPBUGS-93748](https://issues.redhat.com/browse/OCPBUGS-93748): Add sourcedir /run/chrony-dhcp to generated chrony.conf [#10537](https://github.com/openshift/assisted-service/pull/10537)
* [Full changelog](https://github.com/openshift/assisted-service/compare/b271286656c2186ea8940ea6463da523f00094f0...257fad749a2424b44eae30b0b72360e1e246880e)
### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/52f3224b8e67de6c926e10dc72ac55a79ca7cc66)
* [OCPBUGS-91623](https://issues.redhat.com/browse/OCPBUGS-91623): Bump ws to 8.21.0 for CVE-2026-45736 (#3907) [#3907](https://github.com/openshift-assisted/assisted-installer-ui/pull/3907)
* [OCPBUGS-98265](https://issues.redhat.com/browse/OCPBUGS-98265): Bump tar to 7.5.19 in 4.20 (#3892) [#3892](https://github.com/openshift-assisted/assisted-installer-ui/pull/3892)
* Apply patches (#3876) [#3876](https://github.com/openshift-assisted/assisted-installer-ui/pull/3876)
* Update OWNERS file (#3881) [#3881](https://github.com/openshift-assisted/assisted-installer-ui/pull/3881)
* [OCPBUGS-98429](https://issues.redhat.com/browse/OCPBUGS-98429): Bump js-yaml to 4.3.0 in 4.20 (#3864) [#3864](https://github.com/openshift-assisted/assisted-installer-ui/pull/3864)
* [OCPBUGS-89699](https://issues.redhat.com/browse/OCPBUGS-89699): bump form-data to 2.5.6 and 4.0.6 via yarn.lock patch and scoped resolution to address CVE-2026-12143 (#3879) [#3879](https://github.com/openshift-assisted/assisted-installer-ui/pull/3879)
* patch CVE-2026-9277 and CVE-2026-42338 via yarn resolutions (#3854) [#3854](https://github.com/openshift-assisted/assisted-installer-ui/pull/3854)
* [OCPBUGS-88394](https://issues.redhat.com/browse/OCPBUGS-88394), [OCPBUGS-88407](https://issues.redhat.com/browse/OCPBUGS-88407): Bump axios to 1.18.1 (#3859) [#3859](https://github.com/openshift-assisted/assisted-installer-ui/pull/3859)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/1f0fec5ed74412d0f96e6a7239e9689b24563ebe...52f3224b8e67de6c926e10dc72ac55a79ca7cc66)
### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/357712a65437ea3329a8d8a62cf64d27a70dda12)
* [OCPBUGS-81944](https://issues.redhat.com/browse/OCPBUGS-81944): Bump go-jose/go-jose/v4@v4.1.4 [#51](https://github.com/openshift/azure-workload-identity/pull/51)
* [OCPBUGS-86846](https://issues.redhat.com/browse/OCPBUGS-86846): [release-4.20] filter out "remove" patches [#49](https://github.com/openshift/azure-workload-identity/pull/49)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/88b18175e46fe305486d172ec0b4e8471c55e30b...357712a65437ea3329a8d8a62cf64d27a70dda12)
### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/349feecf1e7597a0a62cf93c97e0870ac7cff2e3)
* [OCPBUGS-89242](https://issues.redhat.com/browse/OCPBUGS-89242): Update RHCOS-release-4.20 data/data/coreos/rhcos.json to 9.6.20260616-0 [#10650](https://github.com/openshift/installer/pull/10650)
* [OCPBUGS-86552](https://issues.redhat.com/browse/OCPBUGS-86552): azure: Add field in installconfig to disallow shared access key [#10575](https://github.com/openshift/installer/pull/10575)
* [Full changelog](https://github.com/openshift/installer/compare/b7add4f1b86a86fee5f961f5ca259c56dd0560e9...349feecf1e7597a0a62cf93c97e0870ac7cff2e3)
### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/f74f7d4c30cb936e84c79bbc60a9f57660058e98)
* [OCPBUGS-98095](https://issues.redhat.com/browse/OCPBUGS-98095): Add BMH finalizer on PreprovisioningImage [#507](https://github.com/openshift/baremetal-operator/pull/507)
* [OCPBUGS-87965](https://issues.redhat.com/browse/OCPBUGS-87965): Fix preprovisioning network Secret lifecycle during BMH deletion [#493](https://github.com/openshift/baremetal-operator/pull/493)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/02876638d69c82a71c1c3a9fa1deb755b1afef53...f74f7d4c30cb936e84c79bbc60a9f57660058e98)
### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/1367d50cf3740bc3a6a68ba6c74f6ad5e3ef7cb7)
* [OCPBUGS-91324](https://issues.redhat.com/browse/OCPBUGS-91324), [OCPBUGS-94907](https://issues.redhat.com/browse/OCPBUGS-94907): Bump golang.org/x/net to openshift-sustaining/net v0.50.0-sec.2 [#2342](https://github.com/openshift/oc/pull/2342)
* [Full changelog](https://github.com/openshift/oc/compare/02b0b2d9994a35535b710dd51ac604ed47b29bc9...1367d50cf3740bc3a6a68ba6c74f6ad5e3ef7cb7)
### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/c6a7e1a6b84b964531d6c842f362f664dd777746)
* NO-JIRA: Revert "OCPBUGS-87109 Scope minted AWS IAM policies to cluster-owned resources" [#1061](https://github.com/openshift/cloud-credential-operator/pull/1061)
* [OCPBUGS-87109](https://issues.redhat.com/browse/OCPBUGS-87109): Scope minted AWS IAM policies to cluster-owned resources [#1047](https://github.com/openshift/cloud-credential-operator/pull/1047)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/080ef1ef21966e775f9853e75b4d0abed6170e58...c6a7e1a6b84b964531d6c842f362f664dd777746)
### [cluster-config-api](https://github.com/openshift/api/tree/05da40ea98557f8351483a39db3d0e7d9076bc8f)
* [OCPBUGS-82147](https://issues.redhat.com/browse/OCPBUGS-82147), [OCPBUGS-92038](https://issues.redhat.com/browse/OCPBUGS-92038), [OCPBUGS-92039](https://issues.redhat.com/browse/OCPBUGS-92039), [OCPBUGS-92041](https://issues.redhat.com/browse/OCPBUGS-92041), [OCPBUGS-92042](https://issues.redhat.com/browse/OCPBUGS-92042): Promote GatewayAPIWithoutOLM feature gate to Default [#2869](https://github.com/openshift/api/pull/2869)
* [OCPBUGS-98332](https://issues.redhat.com/browse/OCPBUGS-98332): add new serviceAccountToken fs type [#2925](https://github.com/openshift/api/pull/2925)
* [OCPBUGS-82147](https://issues.redhat.com/browse/OCPBUGS-82147), [OCPBUGS-92038](https://issues.redhat.com/browse/OCPBUGS-92038), [OCPBUGS-92039](https://issues.redhat.com/browse/OCPBUGS-92039), [OCPBUGS-92041](https://issues.redhat.com/browse/OCPBUGS-92041), [OCPBUGS-92042](https://issues.redhat.com/browse/OCPBUGS-92042): Promote GatewayAPIWithoutOLM feature gate to TechPreview [#2874](https://github.com/openshift/api/pull/2874)
* [Full changelog](https://github.com/openshift/api/compare/6755619009c291e10c1903d20c579eae4bac9854...05da40ea98557f8351483a39db3d0e7d9076bc8f)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/f86aaea4136dfea16e62290bd50ecdd1a8b22b3f)
* [OCPBUGS-99476](https://issues.redhat.com/browse/OCPBUGS-99476): Respect proxy configuration on gwapi provisioning [#1519](https://github.com/openshift/cluster-ingress-operator/pull/1519)
* [OCPBUGS-99910](https://issues.redhat.com/browse/OCPBUGS-99910): E2E test for internal LoadBalancer Annotations [#1526](https://github.com/openshift/cluster-ingress-operator/pull/1526)
* [OCPBUGS-99484](https://issues.redhat.com/browse/OCPBUGS-99484): Add e2e test for Gateway API infrastructure annotations [#1521](https://github.com/openshift/cluster-ingress-operator/pull/1521)
* [OCPBUGS-98968](https://issues.redhat.com/browse/OCPBUGS-98968): Bump Istio version from v1.26.2 to v1.26.8 [#1510](https://github.com/openshift/cluster-ingress-operator/pull/1510)
* [OCPBUGS-85155](https://issues.redhat.com/browse/OCPBUGS-85155): Fix e2e tests to work on platforms with unmanaged DNS [#1514](https://github.com/openshift/cluster-ingress-operator/pull/1514)
* [OCPBUGS-99225](https://issues.redhat.com/browse/OCPBUGS-99225): Fix logic on gatewayapi test cleanup [#1512](https://github.com/openshift/cluster-ingress-operator/pull/1512)
* [OCPBUGS-88353](https://issues.redhat.com/browse/OCPBUGS-88353), [OCPBUGS-88354](https://issues.redhat.com/browse/OCPBUGS-88354): Ensure canary cert matches the default ingress controller's cert [#1469](https://github.com/openshift/cluster-ingress-operator/pull/1469)
* [OCPBUGS-82147](https://issues.redhat.com/browse/OCPBUGS-82147), [OCPBUGS-92038](https://issues.redhat.com/browse/OCPBUGS-92038), [OCPBUGS-92039](https://issues.redhat.com/browse/OCPBUGS-92039), [OCPBUGS-92041](https://issues.redhat.com/browse/OCPBUGS-92041), [OCPBUGS-92042](https://issues.redhat.com/browse/OCPBUGS-92042): Remove feature-set annotations from Sail Library RBAC Manifests [#1497](https://github.com/openshift/cluster-ingress-operator/pull/1497)
* [OCPBUGS-82147](https://issues.redhat.com/browse/OCPBUGS-82147), [OCPBUGS-92038](https://issues.redhat.com/browse/OCPBUGS-92038), [OCPBUGS-92039](https://issues.redhat.com/browse/OCPBUGS-92039), [OCPBUGS-92041](https://issues.redhat.com/browse/OCPBUGS-92041), [OCPBUGS-92042](https://issues.redhat.com/browse/OCPBUGS-92042): Replace OLM-based Istio install with Sail Library [#1459](https://github.com/openshift/cluster-ingress-operator/pull/1459)
* [OCPBUGS-85523](https://issues.redhat.com/browse/OCPBUGS-85523): Remove restriction of unmanaged x-k8s.io [#1488](https://github.com/openshift/cluster-ingress-operator/pull/1488)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/006a3edb4eec250bc414da316d912fc5231d195b...f86aaea4136dfea16e62290bd50ecdd1a8b22b3f)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/e9accf887ef1182f0a96e3086d54441ba8bcae40)
* [OCPBUGS-98555](https://issues.redhat.com/browse/OCPBUGS-98555): scc: fix uid{Min,Max}Range for nested-container [#2226](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2226)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/00259384502230d2c5b463dcda8a5c05caf2154e...e9accf887ef1182f0a96e3086d54441ba8bcae40)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/81547ca56764b50b6cacc17cadfab43b025d5b68)
* [OCPBUGS-104538](https://issues.redhat.com/browse/OCPBUGS-104538): Backport e2e stabilization 4.20 [#3028](https://github.com/openshift/cluster-monitoring-operator/pull/3028)
* [OCPBUGS-100371](https://issues.redhat.com/browse/OCPBUGS-100371): [release-4.20] fix: watch cluster wide proxy changes and apply changes accordingly [#3022](https://github.com/openshift/cluster-monitoring-operator/pull/3022)
* [OCPBUGS-99764](https://issues.redhat.com/browse/OCPBUGS-99764): fall back to kube-system/global-pull-secret for telemeter-client token [#3003](https://github.com/openshift/cluster-monitoring-operator/pull/3003)
* [OCPBUGS-92195](https://issues.redhat.com/browse/OCPBUGS-92195): set Prometheus shards value explicitly [#2973](https://github.com/openshift/cluster-monitoring-operator/pull/2973)
* [OCPBUGS-94078](https://issues.redhat.com/browse/OCPBUGS-94078): ship collector:node_scrape_collector_success:avg to Telemetry [#2990](https://github.com/openshift/cluster-monitoring-operator/pull/2990)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/61f1d4b358c24d84183b77e6bcce0ad0e66488c2...81547ca56764b50b6cacc17cadfab43b025d5b68)
### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/4fa59bf99729215d7eb5e91ad406898b4f87cf41)
* [OCPBUGS-99749](https://issues.redhat.com/browse/OCPBUGS-99749): Bump frr-k8s MAX_FDS from 1024 to 65536 [#3091](https://github.com/openshift/cluster-network-operator/pull/3091)
* [OCPBUGS-98796](https://issues.redhat.com/browse/OCPBUGS-98796): Bump github.com/containernetworking/cni v0.8.0 -> v1.3.0 [#3071](https://github.com/openshift/cluster-network-operator/pull/3071)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/56c830ea4487e978a2697d065217b8851ed6cbd9...4fa59bf99729215d7eb5e91ad406898b4f87cf41)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/6401d7f3b34ee63da83a1f9917e9f3e35ff35ed6)
* [OCPBUGS-90598](https://issues.redhat.com/browse/OCPBUGS-90598): perf: latency: compute memory resources dynamically [#1553](https://github.com/openshift/cluster-node-tuning-operator/pull/1553)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/94d9ffd3ec8db4587884e13400bbc87d79c21da7...6401d7f3b34ee63da83a1f9917e9f3e35ff35ed6)
### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/67083fab6cea4dde724efd5be5a22bda1f8437d1)
* [OCPBUGS-98332](https://issues.redhat.com/browse/OCPBUGS-98332): [4.20] add serviceAccountToken volume type to psalabelsyncer [#194](https://github.com/openshift/cluster-policy-controller/pull/194)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/47c783103216aa5e1242632127a5d8f98b8b7455...67083fab6cea4dde724efd5be5a22bda1f8437d1)
### [console](https://github.com/openshift/console/tree/b80e7d8b86b568758e8501978ebf47eb630112ad)
* [OCPBUGS-100057](https://issues.redhat.com/browse/OCPBUGS-100057): quickstart page i18n misses (Fix Quick Starts i18n bundle lookup for zh-CN) [#16867](https://github.com/openshift/console/pull/16867)
* [OCPBUGS-99312](https://issues.redhat.com/browse/OCPBUGS-99312): Disable Knative e2e Cypress tests in CI [#16795](https://github.com/openshift/console/pull/16795)
* [OCPBUGS-99167](https://issues.redhat.com/browse/OCPBUGS-99167): fixing severity not showing number of issues [#16620](https://github.com/openshift/console/pull/16620)
* [OCPBUGS-84286](https://issues.redhat.com/browse/OCPBUGS-84286): Bump follow-redirects to 1.16.0 to fix CVE-2026-40895 [#16671](https://github.com/openshift/console/pull/16671)
* Fix for OCPBUGS-81613: CVE-2026-4800 [#16561](https://github.com/openshift/console/pull/16561)
* [OCPBUGS-86746](https://issues.redhat.com/browse/OCPBUGS-86746), [OCPBUGS-87089](https://issues.redhat.com/browse/OCPBUGS-87089), [OCPBUGS-88753](https://issues.redhat.com/browse/OCPBUGS-88753): [release-4.20] bump package: webpack-dev-server, protobufjs, fast-uri [#16674](https://github.com/openshift/console/pull/16674)
* [OCPBUGS-86455](https://issues.redhat.com/browse/OCPBUGS-86455): [release-4.20] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators [#16509](https://github.com/openshift/console/pull/16509)
* [OCPBUGS-89235](https://issues.redhat.com/browse/OCPBUGS-89235): Allow VolumeSnapshot restore when parent PVC is deleted [#16635](https://github.com/openshift/console/pull/16635)
* [OCPBUGS-87835](https://issues.redhat.com/browse/OCPBUGS-87835): Prevent binary secret data corruption when editing [#16571](https://github.com/openshift/console/pull/16571)
* [Full changelog](https://github.com/openshift/console/compare/5542b01c6a4bf138b1f055436bd685846df49340...b80e7d8b86b568758e8501978ebf47eb630112ad)
### [console-operator](https://github.com/openshift/console-operator/tree/75a6c0644907549642dd9d05ac451810f034385c)
* [NETOBSERV-2296](https://issues.redhat.com/browse/NETOBSERV-2296): add missing annotations on netobserv quickstart [#1095](https://github.com/openshift/console-operator/pull/1095)
* [OCPBUGS-100112](https://issues.redhat.com/browse/OCPBUGS-100112): Sort plugin list to make them deterministic [#1202](https://github.com/openshift/console-operator/pull/1202)
* [OCPBUGS-98986](https://issues.redhat.com/browse/OCPBUGS-98986): [4.20] Stabilize telemetry config to prevent continuous console pod rollouts [#1191](https://github.com/openshift/console-operator/pull/1191)
* [Full changelog](https://github.com/openshift/console-operator/compare/2b72d7e8cc652ae7063fb95eae8d36b847742c58...75a6c0644907549642dd9d05ac451810f034385c)
### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/c4cdae44ef7c33e4b7ce06a3b599a8bc0707bff7)
* [OCPBUGS-82853](https://issues.redhat.com/browse/OCPBUGS-82853): Bump github.com/moby/spdystream@v0.5.1 [#192](https://github.com/openshift/csi-driver-nfs/pull/192)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/20609066e1bd1dbbd107bfca27af67e0a788760e...c4cdae44ef7c33e4b7ce06a3b599a8bc0707bff7)
### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/eb1e4ac9c60067568674269961b46e7d9c974fe4)
* [OCPBUGS-82854](https://issues.redhat.com/browse/OCPBUGS-82854): Address CVE-2026-35469 [#141](https://github.com/openshift/csi-external-provisioner/pull/141)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/72fefbe70de332cea29428be202244676a9927fc...eb1e4ac9c60067568674269961b46e7d9c974fe4)
### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/cfcc6c44a9aacf48585dbe6618e5561f6c55666a)
* [OCPBUGS-98796](https://issues.redhat.com/browse/OCPBUGS-98796): Bump containernetworking/cni to v1.3.0 github.com/containernetworking/plugins to 1.4.0 [#107](https://github.com/openshift/egress-router-cni/pull/107)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/5e0f8d1b545899fda27c5e1cc8707d33cba1b534...cfcc6c44a9aacf48585dbe6618e5561f6c55666a)
### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/9fb0e78b4db18f763f7144ca5c13ee380da07460)
* [OCPBUGS-97961](https://issues.redhat.com/browse/OCPBUGS-97961): no-op OWNERS change to trigger postsubmit jobs [#198](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/198)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/cb9e68cb5c9498a606a3e71b709a9233f59da1f2...9fb0e78b4db18f763f7144ca5c13ee380da07460)
### [haproxy-router](https://github.com/openshift/router/tree/0fec034e28f1f44ed75dcc1ab96f7135fd9beb49)
* [OCPBUGS-86728](https://issues.redhat.com/browse/OCPBUGS-86728): Prevent SSRF via FQDN-typed EndpointSlices [#819](https://github.com/openshift/router/pull/819)
* [Full changelog](https://github.com/openshift/router/compare/40c34581a02ca043d454034e376771c12d2e995c...0fec034e28f1f44ed75dcc1ab96f7135fd9beb49)
### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/2df3632e823a813f64218dfc6f5c2e70d28ecdf0)
* [OCPBUGS-93896](https://issues.redhat.com/browse/OCPBUGS-93896): Rebase v1.33.13 in release-4.20 [#2706](https://github.com/openshift/kubernetes/pull/2706)
* [Full changelog](https://github.com/openshift/kubernetes/compare/690775342de24ee56631e38e3f17592b14a6b202...2df3632e823a813f64218dfc6f5c2e70d28ecdf0)
### [hypershift](https://github.com/openshift/hypershift/tree/09b41084c55897949dabc80cfe89c8326e9aa288)
* [OCPBUGS-97923](https://issues.redhat.com/browse/OCPBUGS-97923): fix(nodepool): skip CNI-internal IPs in ClusterNetworkCIDRConflict check [release-4.20] [#8950](https://github.com/openshift/hypershift/pull/8950)
* [OCPBUGS-90085](https://issues.redhat.com/browse/OCPBUGS-90085): Fix NodePool reconciliation failure when updating mirrored immutable ConfigMaps [#8813](https://github.com/openshift/hypershift/pull/8813)
* fix(deps): OCPBUGS-83829: Update runc, selinux, and their transitive deps to fix CVE-2025-52881 [#8750](https://github.com/openshift/hypershift/pull/8750)
* [CNTRLPLANE-3874](https://issues.redhat.com/browse/CNTRLPLANE-3874): Backport controlPlaneVersion status to release-4.20 [#9055](https://github.com/openshift/hypershift/pull/9055)
* [OCPBUGS-90088](https://issues.redhat.com/browse/OCPBUGS-90088): [release-4.20] clear stale EtcdRecoveryActive failure condition when etcd is healthy [#8808](https://github.com/openshift/hypershift/pull/8808)
* [OCPBUGS-99143](https://issues.redhat.com/browse/OCPBUGS-99143): fix(backport): konnectivity agent auth [#9092](https://github.com/openshift/hypershift/pull/9092)
* [OCPBUGS-98574](https://issues.redhat.com/browse/OCPBUGS-98574): [release-4.20] fix(cpo): deduplicate VPC endpoint subnets by AZ to prevent DuplicateSubnetsInSameZone [#8994](https://github.com/openshift/hypershift/pull/8994)
* [OCPBUGS-78400](https://issues.redhat.com/browse/OCPBUGS-78400): remove resource limits from Agent CAPI provider [#7947](https://github.com/openshift/hypershift/pull/7947)
* [OCPBUGS-94175](https://issues.redhat.com/browse/OCPBUGS-94175): fix(cpo): prevent informer creation for inaccessible resource types [#8876](https://github.com/openshift/hypershift/pull/8876)
* [OCPBUGS-89354](https://issues.redhat.com/browse/OCPBUGS-89354): build(operator): drop hypershift-no-cgo from operator container images [#8758](https://github.com/openshift/hypershift/pull/8758)
* [OCPBUGS-86020](https://issues.redhat.com/browse/OCPBUGS-86020): OCPBUGS-62177: [release 4-20] verify cert revocation against all KAS pods [#8536](https://github.com/openshift/hypershift/pull/8536)
* [Full changelog](https://github.com/openshift/hypershift/compare/f8eff30f6d6a353da6ea9d1e581afb82d5ce57b6...09b41084c55897949dabc80cfe89c8326e9aa288)
### [insights-operator](https://github.com/openshift/insights-operator/tree/1b99e6213f4cf8925a4728a58e45f07a262444b2)
* [OCPBUGS-104608](https://issues.redhat.com/browse/OCPBUGS-104608): Fix indentation bug on livenessProbe [#1338](https://github.com/openshift/insights-operator/pull/1338)
* [OCPBUGS-92001](https://issues.redhat.com/browse/OCPBUGS-92001): fall back to kube-system/global-pull-secret for Insights token [#1311](https://github.com/openshift/insights-operator/pull/1311)
* [OCPBUGS-99788](https://issues.redhat.com/browse/OCPBUGS-99788): update HyperShift deployment manifest [#1326](https://github.com/openshift/insights-operator/pull/1326)
* [Full changelog](https://github.com/openshift/insights-operator/compare/4186296303bbe4cf3f276dedf794a69a0723f18b...1b99e6213f4cf8925a4728a58e45f07a262444b2)
### [ironic](https://github.com/openshift/ironic-image/tree/77de3c1948adc2c8c94301fce6ce9b43f5940c2b)
* [OCPBUGS-100166](https://issues.redhat.com/browse/OCPBUGS-100166): Update openstack-ironic commit hash for CVE-2026-44918 [#881](https://github.com/openshift/ironic-image/pull/881)
* [OCPBUGS-90559](https://issues.redhat.com/browse/OCPBUGS-90559): [4.20] Fix parallel power concurrency [#857](https://github.com/openshift/ironic-image/pull/857)
* [Full changelog](https://github.com/openshift/ironic-image/compare/8a34de9553deadf506244f840827f63f058eef1d...77de3c1948adc2c8c94301fce6ce9b43f5940c2b)
### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/c179298deb0b3b7817a3e049405b7617c9d5a4f5)
* [OCPBUGS-95063](https://issues.redhat.com/browse/OCPBUGS-95063): Replace individual package removal with a single rpm -e loop [#284](https://github.com/openshift/ironic-agent-image/pull/284)
* [OCPBUGS-95063](https://issues.redhat.com/browse/OCPBUGS-95063): Replace dnf remove with rpm -e to prevent dependency removal [#272](https://github.com/openshift/ironic-agent-image/pull/272)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/652b8b4dcffda86f61e181b43cda184292372a14...c179298deb0b3b7817a3e049405b7617c9d5a4f5)
### [keepalived-ipfailover](https://github.com/openshift/images/tree/4111471533cb072b6aab4a1ac4d523915f8abef1)
* [OCPBUGS-99902](https://issues.redhat.com/browse/OCPBUGS-99902): Reinstall tzdata if /usr/share/zoneinfo is missing [#249](https://github.com/openshift/images/pull/249)
* [Full changelog](https://github.com/openshift/images/compare/6c1bae0007a21796f1d1235df745c1f5152aa893...4111471533cb072b6aab4a1ac4d523915f8abef1)
### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/358d786274fe81017f7d17cc7310117dca127146)
* [OCPBUGS-99402](https://issues.redhat.com/browse/OCPBUGS-99402): fix CronJob timezone panic and embed tzdata in kube-state-metrics [#152](https://github.com/openshift/kube-state-metrics/pull/152)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/8c6ad2ef49bf9e437a3ad42707595139db04cb6e...358d786274fe81017f7d17cc7310117dca127146)
### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/d9a04bd9046ab1418d83c7bfb7891f49d8429d20)
* [OCPBUGS-95086](https://issues.redhat.com/browse/OCPBUGS-95086): OWNERS: Update component to Cloud Compute / KubeVirt Provider [#80](https://github.com/openshift/cloud-provider-kubevirt/pull/80)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/a2d607b2f1196ac371074d5fd14df80462de5b8f...d9a04bd9046ab1418d83c7bfb7891f49d8429d20)
### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/6c353bb1eb5a021c9e845eac839ce85e95a9fede)
* [OCPBUGS-80543](https://issues.redhat.com/browse/OCPBUGS-80543): Bump google.golang.org/grpc to v1.79.3 [#99](https://github.com/openshift/kubevirt-csi-driver/pull/99)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/8fb56226aede45e49fb2f362191c6dbcf50897c6...6c353bb1eb5a021c9e845eac839ce85e95a9fede)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/acca836821a48b58f669c64c8f8a29ca734d5ba3)
* [OCPBUGS-105436](https://issues.redhat.com/browse/OCPBUGS-105436): Use providerSpec.Template in vSphere machineset reconciliation [#6386](https://github.com/openshift/machine-config-operator/pull/6386)
* [OCPBUGS-95577](https://issues.redhat.com/browse/OCPBUGS-95577): Replace wildcard permissions with explicit verbs and resources in MCC ClusterRole [#6256](https://github.com/openshift/machine-config-operator/pull/6256)
* [OCPBUGS-105215](https://issues.redhat.com/browse/OCPBUGS-105215): Update AMI Whitelist [#6377](https://github.com/openshift/machine-config-operator/pull/6377)
* [OCPBUGS-99650](https://issues.redhat.com/browse/OCPBUGS-99650): Delete stale auto-sizing MachineConfigs for non-default (custom) pools 4.20 [#6335](https://github.com/openshift/machine-config-operator/pull/6335)
* [release:4.20] OCPBUGS-98096: In OCB to check when a image is removed the old build is triggered again and the MC should start updating directly and no new MOSB should be triggred [#6285](https://github.com/openshift/machine-config-operator/pull/6285)
* [OCPBUGS-92029](https://issues.redhat.com/browse/OCPBUGS-92029), [OCPBUGS-98746](https://issues.redhat.com/browse/OCPBUGS-98746): [release-4.20] Backport ocl test fixes and shard the test suite [#6305](https://github.com/openshift/machine-config-operator/pull/6305)
* [OCPBUGS-93807](https://issues.redhat.com/browse/OCPBUGS-93807): move cleanUpDuplicatedMC to avoid double reboot on first updated Master node [#6242](https://github.com/openshift/machine-config-operator/pull/6242)
* [OCPBUGS-97906](https://issues.redhat.com/browse/OCPBUGS-97906): Inject proxy into MCC deployment [#6277](https://github.com/openshift/machine-config-operator/pull/6277)
* [OCPBUGS-98214](https://issues.redhat.com/browse/OCPBUGS-98214): fix: update arbiter crio config [#6288](https://github.com/openshift/machine-config-operator/pull/6288)
* [OCPBUGS-97824](https://issues.redhat.com/browse/OCPBUGS-97824): Make vsphere template updates atomic [#6272](https://github.com/openshift/machine-config-operator/pull/6272)
* [OCPBUGS-97844](https://issues.redhat.com/browse/OCPBUGS-97844): Remove sensitive ControllerConfig logging [#6273](https://github.com/openshift/machine-config-operator/pull/6273)
* [OCPBUGS-97586](https://issues.redhat.com/browse/OCPBUGS-97586): Fix kubelet certificate wait loop in criometricsproxy.yaml [#6267](https://github.com/openshift/machine-config-operator/pull/6267)
* [OCPBUGS-96160](https://issues.redhat.com/browse/OCPBUGS-96160): Update AMI Whitelist [#6262](https://github.com/openshift/machine-config-operator/pull/6262)
* [OCPBUGS-94227](https://issues.redhat.com/browse/OCPBUGS-94227): Bootstrap MCS logging entire ignition [#6251](https://github.com/openshift/machine-config-operator/pull/6251)
* [OCPBUGS-91732](https://issues.redhat.com/browse/OCPBUGS-91732): Update custom containerfile OCB test to work in a disconnected environment [#6222](https://github.com/openshift/machine-config-operator/pull/6222)
* [OCPBUGS-90969](https://issues.redhat.com/browse/OCPBUGS-90969): Process rebuild annotation on machine-os-builder restart [#6215](https://github.com/openshift/machine-config-operator/pull/6215)
* [OCPBUGS-91635](https://issues.redhat.com/browse/OCPBUGS-91635): daemon: don't pull/extract extensions for all OS updates [#6214](https://github.com/openshift/machine-config-operator/pull/6214)
* [OCPBUGS-88689](https://issues.redhat.com/browse/OCPBUGS-88689): Skip chrony-wait on first node join [#6191](https://github.com/openshift/machine-config-operator/pull/6191)
* [OCPBUGS-90133](https://issues.redhat.com/browse/OCPBUGS-90133): vSphere boot image hot loop detection is non-functional due to stable template names [#6207](https://github.com/openshift/machine-config-operator/pull/6207)
* [OCPBUGS-88360](https://issues.redhat.com/browse/OCPBUGS-88360): configure-ovs: copy lldp mode to br-ex port [#6181](https://github.com/openshift/machine-config-operator/pull/6181)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/d0d6ce62b4b7ba63529b9e400cf8ec72fa4589a6...acca836821a48b58f669c64c8f8a29ca734d5ba3)
### [machine-os-images](https://github.com/openshift/machine-os-images/tree/5da52107b36e002d56e5e82f4b2cd496b1c4ec7a)
* [OCPBUGS-87874](https://issues.redhat.com/browse/OCPBUGS-87874): Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs [#98](https://github.com/openshift/machine-os-images/pull/98)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/80179d6880b8ae41fc53f7684496526031cc496e...5da52107b36e002d56e5e82f4b2cd496b1c4ec7a)
### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/95dcfc2c40ff850a5ce766bf8842a132d834be03)
* [OCPBUGS-99027](https://issues.redhat.com/browse/OCPBUGS-99027): Fix CVE-2026-49978 - bump DOMPurify to >= 3.4.7 [#1087](https://github.com/openshift/monitoring-plugin/pull/1087)
* [OU-1240](https://issues.redhat.com/browse/OU-1240): Makefile and package.json to enable test-frontend-ci [#1096](https://github.com/openshift/monitoring-plugin/pull/1096)
* [OU-1240](https://issues.redhat.com/browse/OU-1240): Dockerfile.test permission [#1079](https://github.com/openshift/monitoring-plugin/pull/1079)
* [OCPBUGS-99297](https://issues.redhat.com/browse/OCPBUGS-99297): graph redirect query parameter [#1074](https://github.com/openshift/monitoring-plugin/pull/1074)
* [OU-651](https://issues.redhat.com/browse/OU-651): Fix AlertRules page to display user defined loki alerts [#1058](https://github.com/openshift/monitoring-plugin/pull/1058)
* Fix for OCPBUGS-91621: CVE-2026-45736 [#1025](https://github.com/openshift/monitoring-plugin/pull/1025)
* NO-JIRA: fix incidents unit test [#1039](https://github.com/openshift/monitoring-plugin/pull/1039)
* Fix for OCPBUGS-94012: CVE-2026-13676 [#1030](https://github.com/openshift/monitoring-plugin/pull/1030)
* [OCPBUGS-87091](https://issues.redhat.com/browse/OCPBUGS-87091): [release-4.20] fast-uri: URI authority bypass due to improper delimiter handling [#974](https://github.com/openshift/monitoring-plugin/pull/974)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/5099b7a44ecd77b95c1cea215797c48b7a3e913d...95dcfc2c40ff850a5ce766bf8842a132d834be03)
### [must-gather](https://github.com/openshift/must-gather/tree/6b2eea0d83ca1f05f9032d66be1c2ee80cfa1459)
* [OCPBUGS-87215](https://issues.redhat.com/browse/OCPBUGS-87215): Add Istio/Gateway API gather scripts to OCP 4.20.z [#555](https://github.com/openshift/must-gather/pull/555)
* [Full changelog](https://github.com/openshift/must-gather/compare/01b8371fa2f13c993074569d80db6d1ee97b57ee...6b2eea0d83ca1f05f9032d66be1c2ee80cfa1459)
### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/da01518cc01abf023337e6cc26e3b6503797a7f8)
* [OCPBUGS-92706](https://issues.redhat.com/browse/OCPBUGS-92706): Updated doc links based on release [#440](https://github.com/openshift/networking-console-plugin/pull/440)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/c9c1a9f5ca8287d20a0aafab9507478c6f291614...da01518cc01abf023337e6cc26e3b6503797a7f8)
### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/39c3a80d919cafc207f5f208a5f88b23e468cd8d)
* [OCPBUGS-100431](https://issues.redhat.com/browse/OCPBUGS-100431): Fix cache path to avoid /var/cache/dnf conflict [#786](https://github.com/openshift/operator-framework-operator-controller/pull/786)
* [OCPBUGS-100075](https://issues.redhat.com/browse/OCPBUGS-100075): increase catalog HTTP client timeout from 10s to 5m [#777](https://github.com/openshift/operator-framework-operator-controller/pull/777)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/66f771320f0c23b0df5c68a5876c367a1809775d...39c3a80d919cafc207f5f208a5f88b23e468cd8d)
### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/02e56026c3a2628c8a5115f4f5bc2bb3514ef6c3)
* [OCPBUGS-94016](https://issues.redhat.com/browse/OCPBUGS-94016): Revendor CAPO [#172](https://github.com/openshift/machine-api-provider-openstack/pull/172)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/7f8ae5007e4299769e25172a821342dc2874567c...02e56026c3a2628c8a5115f4f5bc2bb3514ef6c3)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/8ed3b22d6ffda40908d82183f5b7301a747b1ca3)
* [OCPBUGS-99643](https://issues.redhat.com/browse/OCPBUGS-99643): Migrate ovs external_ids bash ovs-vsctl calls to libovsdb [#3326](https://github.com/openshift/ovn-kubernetes/pull/3326)
* [OCPBUGS-95076](https://issues.redhat.com/browse/OCPBUGS-95076): prevent duplicate logical_router_static_route [#3275](https://github.com/openshift/ovn-kubernetes/pull/3275)
* [OCPBUGS-99542](https://issues.redhat.com/browse/OCPBUGS-99542): kubevirt: skip source LSP re-enable when source pod is not local [#3318](https://github.com/openshift/ovn-kubernetes/pull/3318)
* [OCPBUGS-99543](https://issues.redhat.com/browse/OCPBUGS-99543): kubevirt: Support handling vm hostname field [#3319](https://github.com/openshift/ovn-kubernetes/pull/3319)
* [OCPBUGS-82872](https://issues.redhat.com/browse/OCPBUGS-82872): Bump github.com/moby/spdystream to v0.5.1 [#3316](https://github.com/openshift/ovn-kubernetes/pull/3316)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/e02cc75645fbc8981239e4144da1cd4dd98b1b17...8ed3b22d6ffda40908d82183f5b7301a747b1ca3)
### [prometheus](https://github.com/openshift/prometheus/tree/f226aee2d4de01bd0f3a85b16308f9e22514111c)
* [OCPBUGS-88682](https://issues.redhat.com/browse/OCPBUGS-88682): remote: validate snappy decoded length before allocation in read endpoint [#342](https://github.com/openshift/prometheus/pull/342)
* [Full changelog](https://github.com/openshift/prometheus/compare/120aea706a6a3858175d1e421d1b325341f9c4b9...f226aee2d4de01bd0f3a85b16308f9e22514111c)
### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/09e48f08f017bf247c37480531e264d266375694)
* [OCPBUGS-100353](https://issues.redhat.com/browse/OCPBUGS-100353): Set testdata CA expiry to 20 years from issue date (#4112) [#149](https://github.com/openshift/prometheus-alertmanager/pull/149)
* [OCPBUGS-99449](https://issues.redhat.com/browse/OCPBUGS-99449): embed tzdata in the alertmanager binary [#143](https://github.com/openshift/prometheus-alertmanager/pull/143)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/419f2843332265d44982920d6fb4db220ec26f91...09e48f08f017bf247c37480531e264d266375694)
### [tests](https://github.com/openshift/origin/tree/de6e1933b7c69ffa2f7833a7a238089165e8ee8b)
* [OCPBUGS-99782](https://issues.redhat.com/browse/OCPBUGS-99782): Backport node_e2e test migrations [#31430](https://github.com/openshift/origin/pull/31430)
* [OCPBUGS-99301](https://issues.redhat.com/browse/OCPBUGS-99301): admit and extract non-payload 4.20 [#31387](https://github.com/openshift/origin/pull/31387)
* [OCPBUGS-85523](https://issues.redhat.com/browse/OCPBUGS-85523): Remove restriction of unmanaged x-k8s.io [#31351](https://github.com/openshift/origin/pull/31351)
* [OCPBUGS-91996](https://issues.redhat.com/browse/OCPBUGS-91996): Add openshift/disruptive-longrunning testsuite in release-4.20 branch [#31334](https://github.com/openshift/origin/pull/31334)
* [OCPBUGS-82147](https://issues.redhat.com/browse/OCPBUGS-82147), [OCPBUGS-92038](https://issues.redhat.com/browse/OCPBUGS-92038), [OCPBUGS-92039](https://issues.redhat.com/browse/OCPBUGS-92039), [OCPBUGS-92041](https://issues.redhat.com/browse/OCPBUGS-92041), [OCPBUGS-92042](https://issues.redhat.com/browse/OCPBUGS-92042), [OCPBUGS-92043](https://issues.redhat.com/browse/OCPBUGS-92043), [OCPBUGS-92044](https://issues.redhat.com/browse/OCPBUGS-92044), [OCPBUGS-92045](https://issues.redhat.com/browse/OCPBUGS-92045): Backport noOLM Gateway API test coverage and upgrade tests [#31322](https://github.com/openshift/origin/pull/31322)
* [Full changelog](https://github.com/openshift/origin/compare/53118e346434dcf090c1c350564c194a59a571b1...de6e1933b7c69ffa2f7833a7a238089165e8ee8b)