# 4.20.15

Created: 2026-02-19 11:50:25 +0000 UTC

Image Digest: `sha256:a60fbe523d8ad802ab9bcbb4c505f5fe4467283fc748e4978fe9a3b280145d75`


## Changes from 4.20.4

### Components

* Kubectl 1.33.3
* Kubernetes upgraded from 1.33.5 to 1.33.6
* Kubernetes Tests 1.33.4
* Red Hat Enterprise Linux CoreOS upgraded from 9.6.20251110-1 to 9.6.20260217-1



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| ExternalOIDCWithUIDAndExtraClaimMappings <br/> (5 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| PreconfiguredUDNAddresses <br/> (10 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| ExternalOIDC <br/> (9 tests)| Enabled| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |


### Rebuilt images without code change

* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [3accbb7b](https://github.com/openshift/assisted-installer/commit/3accbb7bd0dd865744e0ef0808b65be5914b157e) `sha256:5874a820993a6413738b8248c99f75e374ccf4db04cda384782bcd5ce1725887`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [3accbb7b](https://github.com/openshift/assisted-installer/commit/3accbb7bd0dd865744e0ef0808b65be5914b157e) `sha256:03db545fa06caf4720c45b03996abf27cf64090abe1a9c3fd0df45bdcd8f216f`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [11b24a2c](https://github.com/openshift/apiserver-network-proxy/commit/11b24a2c7452ef683a1d989f1016e6e815f5c112) `sha256:94eaf56774c859b88f1e099e428bb937cb12944beb9fd74ec6d839d0c560d511`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [bb88da16](https://github.com/openshift/cloud-provider-aws/commit/bb88da16b29d63573861351afc5ca8c4547775d6) `sha256:a122cdaa270e7cacecf39e89662739c9122fd69b4596a006442f876a1bc701df`
* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [300439ea](https://github.com/openshift/cluster-api-provider-aws/commit/300439ea0736444a160c061578b3bd8956d4f7e6) `sha256:cf1c3b6e26121a6c35212c398a13520083613446230622b10f20780ea9c3e5f9`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [a8ef205c](https://github.com/openshift/aws-ebs-csi-driver/commit/a8ef205c28b7b8c80b0caf1c1a9e12f81f4fdbb9) `sha256:88374f32d25e199209f34b6170c64a4eaa030325a6fb94e06cf4a1863e466fb2`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [b37141b0](https://github.com/openshift/aws-karpenter-provider-aws/commit/b37141b051bdf790eb7e8f45b95f6bd7dc8140f4) `sha256:4c435da53a55131a8d7f4359082d5f2e8f11f04f2e389a436107a211429b1e6b`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [088dcaf7](https://github.com/openshift/aws-encryption-provider/commit/088dcaf73f980b977ef4f5d2f99e2a93deb87eef) `sha256:7e2d59723d7560665a2de732168ff9413c9e9cd7188c830e15b0d94365cf76a0`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [d469d04e](https://github.com/openshift/cloud-provider-azure/commit/d469d04ed645358d942af442fe21e2c2b44b9b2c) `sha256:2daed81db16f7f6db91c5cc6afd57570e53b5a770dcf0ef9b6e22b0972d88a1b`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [d469d04e](https://github.com/openshift/cloud-provider-azure/commit/d469d04ed645358d942af442fe21e2c2b44b9b2c) `sha256:58ebd34130088867f89e29b200c2d95587717870361c7163ef468788651371d0`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [cb8b5b6a](https://github.com/openshift/cluster-api-provider-azure/commit/cb8b5b6a485971a95c5a74508d76ab19b23cbf29) `sha256:4c9f775df0fe506794ef1b645803919a1e67ad92d9aa67259700a9591f407041`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [0b8e4d22](https://github.com/openshift/azure-disk-csi-driver/commit/0b8e4d2202b0d17942fd745a5e1948f46bdd0350) `sha256:dedf9576d5c2277576e06820eea70ec030cbc516c56fa6d570009afe19735904`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [45d505bc](https://github.com/openshift/azure-file-csi-driver/commit/45d505bc11fedadece5ae27147c9595877e39f2a) `sha256:62a76f2fb311d675a67d030194db44480bba8c15c7a9d1ee60c18627ac395415`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [ea0b9944](https://github.com/openshift/azure-kubernetes-kms/commit/ea0b9944dddcc7043065a1fab5fca72dd17450da) `sha256:f1ad4d15365f08122d93b2cf98e95283ec09a7696d4b0683a1d9898b6a89290d`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [6e2f3626](https://github.com/openshift/azure-service-operator/commit/6e2f362623720f7b6d634fbc424fbc61e4b481ae) `sha256:ed751afe506f957e544c3a939943129dc4c53e115060a533aac67d0425d1b4a0`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [88b18175](https://github.com/openshift/azure-workload-identity/commit/88b18175e46fe305486d172ec0b4e8471c55e30b) `sha256:d15134f3df8dcb06460579fbbc257f17cfa7d7a7c93823389bebae3cce845105`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [f782ba74](https://github.com/openshift/cluster-api-provider-metal3/commit/f782ba747ed353721c84ceb754ca8403f94adb6a) `sha256:1abc8c8365064a1be67f6e56ee8946993908c088299d2b16e9626d9cd76a5835`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [fb678fec](https://github.com/openshift/cluster-api-provider-baremetal/commit/fb678fec5f7e08348b281341481f33a848204e50) `sha256:c32031f4220f25098d76f87d1f9ea9fe06a6d6bfd51fcb5d1ae9d7d712d95f77`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [6553765e](https://github.com/openshift/baremetal-runtimecfg/commit/6553765e71c7f8d7db120af94473c9c0cb44d453) `sha256:1353f7b68c24e16ebb3fcb92aa36a4474c2a5f51970ceeb424c165d2d0bffdd3`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [147e5a7f](https://github.com/openshift/cluster-autoscaler-operator/commit/147e5a7ff20b46ade7dd932b47e06ca82729f5e8) `sha256:23cea212e79aa61cef2c701766b6c4651e05f09bb356312f6f750cf9f1f101f0`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [74abc555](https://github.com/openshift/cluster-bootstrap/commit/74abc555111bac56a67957ef517ef086e4643c50) `sha256:5aa812d17bdabe3dc18f2e7a05e4d8f351358c4a0fa25f348514aa9ccb56c0f7`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [de1db297](https://github.com/openshift/cluster-api/commit/de1db2970e7fede7101e5a8188e74942ab6665e3) `sha256:16ccfe238808728baa9fc7beeaad601ff2e341664202509a808c9c2440af5bf1`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [acf33144](https://github.com/openshift/cluster-capi-operator/commit/acf331446369b5307b6b435af14daabdca9fafbc) `sha256:499d12634947afd2e739cb062ff6cfb77e475c4184074f114baa96e805f74a60`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [276696cc](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/276696ccf679830b25df341edb7aae9bb3f4e763) `sha256:67aff02b15aa7d0502eefbfd8106ffa4f6c639dfa9e665194ba0e0091d7ddfb5`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [657754e2](https://github.com/openshift/cluster-config-operator/commit/657754e2beaed6295ff28bb0f7813cb1c9ce35b2) `sha256:d7df26d97b2c273137fec92cf8ca6a9c907622d671528c54f0f31f37a92caf75`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [0bbafe24](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/0bbafe24ade564bc62554251f36de90d524abcde) `sha256:41b1a23962a61f2b6fd45fb242736222babb35d2308555955e45cbcb58885fa9`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [019abe0c](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/019abe0c7671962829eb91269e1d76916966320e) `sha256:a492b22dbe9f6e39c822cbe2fa3eb526b7f8239e48eaa1141190408d83f3933f`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [82578923](https://github.com/openshift/cluster-dns-operator/commit/82578923164636746e0d74d594ab32d83a660c0b) `sha256:cde0badb8176530a59728a65491498089f7e3e5a5fbe469aa5dc198f03bea74e`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [b04c7c12](https://github.com/openshift/cluster-image-registry-operator/commit/b04c7c121851704973a94a50e42af1425045899c) `sha256:1da2ff29d8f188b607f72e51355577e2ee00b5be350eac506df2bd100c509c06`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [234e2182](https://github.com/openshift/cluster-api-operator/commit/234e218207ec963df04ec1fedad85a421eb7a1ff) `sha256:b102e68f8bc3716ef037ae4dd18cb6a4a4bab3e666d3d23a728eb1f1b1454ac7`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [438c9dba](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/438c9dba80ddadeabe9efe4a654297a7b550b2b8) `sha256:828114c329506606762900fa60aee91240d87a6bf7adc05f3b6e728bf17ecc77`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [5adc1429](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/5adc14299739bc64c8812cbab0b0ff2d12863602) `sha256:f4ed001b995fb9a4a9296966eceb78f333daf8b8f2f717fe94e190abb20cc8b2`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [b3c82b2e](https://github.com/openshift/cluster-machine-approver/commit/b3c82b2eec66ae3ae510df0603af1212c34be618) `sha256:435cfab374f7b85432b3f5cb6439abdc026217ebf75bd86407d5597fd4bb91ff`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [e4917368](https://github.com/openshift/cluster-olm-operator/commit/e4917368b6a547f97a0fb411fea90de246d1417e) `sha256:53eb98f72d9d06773f1893756c392538d20dc20eeace6d6ea382f40388a0afe2`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [9cfa5679](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/9cfa5679a8ac1e5a68eea32179d9e069da85dfcf) `sha256:0dd7ea0c4b6457094e13fbd74e4bf91989d91c8d4f484ad7808a178b1f614098`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [aa455c04](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/aa455c043152123595c2b4f72e02279aad9dd48a) `sha256:c05ce0ed504008d08e705e08a629288f594909f74d5f98943b867b774454ffbe`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [47c78310](https://github.com/openshift/cluster-policy-controller/commit/47c783103216aa5e1242632127a5d8f98b8b7455) `sha256:fa59d417180ab9a346b568b26ae1eb520d49147a4830a1715e2448d6b70ebd3a`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [b343f70f](https://github.com/openshift/cluster-samples-operator/commit/b343f70f19ffd559e1a81d3a3e65bd106e634c13) `sha256:bdeca4af83972c714dbafaeaae9458e994e878695e634a6e09bc7e116d5fe243`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [c40e7b9b](https://github.com/openshift/cluster-update-keys/commit/c40e7b9b60c62690a25333fc54ae0d3705474afb) `sha256:5828624f690106cd052f245a2051e7a8a4930f8389f7a3432cd57ccbc8137051`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [2438d7c8](https://github.com/openshift/configmap-reload/commit/2438d7c8e495201361d87da205649bc38fc4822b) `sha256:023dd82ecb72b608c621e227088b15ab533429cb41c6bd0414ca293a2f85d86f`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [184a9601](https://github.com/openshift/containernetworking-plugins/commit/184a96011a8cacb72319cdccb904271a99c5928d) `sha256:b995e656ac39b09beb676ed5a47b7ef3065cea4b3fd1aae18d5d36860b2ee375`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [184a9601](https://github.com/openshift/containernetworking-plugins/commit/184a96011a8cacb72319cdccb904271a99c5928d) `sha256:957fae2bf9905dd0dc36f121ff17fad2824b30f24cd40aaf7f256225f1fc4408`
* [coredns](https://github.com/openshift/coredns) git [6f39336e](https://github.com/openshift/coredns/commit/6f39336e6da9dc77b2db140a96773c413d50a665) `sha256:ebd74dddbf5658fdf3f7f2754cce45423781363226a78fc46ade39aedf11b9ed`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [1abaf844](https://github.com/openshift/csi-driver-nfs/commit/1abaf84447384a486a9f9da7cd7b9e53784c8a55) `sha256:d5f4f8d7ab644497a0526dbede987ed98e707114bc7db61a19fc228a640bc964`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [45239149](https://github.com/openshift/csi-external-attacher/commit/45239149cb387bcc51d944b802db0e804dc02688) `sha256:06973db1a0d858f48fe286e6f756c10d71ef975d23280b112852a487bc907814`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [81fca036](https://github.com/openshift/csi-external-provisioner/commit/81fca03694bca1bae8606d8970472330e1e4fcad) `sha256:f6f7943e4c3d2bab4a795fadacef194fe5415a009a727ebd842b62601bb0a3f8`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [c674bea9](https://github.com/openshift/csi-external-resizer/commit/c674bea9bb6a81e463c7fefa974e2109d829daef) `sha256:2ab2acb86e93dc18493099e89312ed0dc1bac86c546d867222ac6083aebafa9a`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [693a8264](https://github.com/openshift/csi-external-snapshot-metadata/commit/693a826455777eaafc677bb2195dc071d184243b) `sha256:d19938bd625c053ff44c5eaed2b68cb6fcf2eb556ab3d5ccf86a7a4553c641bd`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [42604822](https://github.com/openshift/csi-external-snapshotter/commit/42604822c25eb2aa0ecb017c24e328221b238eb9) `sha256:f8836457267063d16047c103f9cda727c203abcb6faec90116599662d9abfdab`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [1d6d6b27](https://github.com/openshift/csi-livenessprobe/commit/1d6d6b27460e58f24110c72ec9c96afe2c1d891d) `sha256:e3fc4fa59d3701a31bef81205ac19ba93dc94e2bbf8db5dc4c9de7bd810e09dd`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [6ce4713c](https://github.com/openshift/csi-node-driver-registrar/commit/6ce4713c87b735e2546a65a871bd2c7cfe383c31) `sha256:8abb81689c3438b09b60dc2e2dc74f27f93e0988be3c6d8a9c4de4a41e2563f4`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [42604822](https://github.com/openshift/csi-external-snapshotter/commit/42604822c25eb2aa0ecb017c24e328221b238eb9) `sha256:01710909f8abcd900eddaed895fd9f242197aad7511581e6245fccc353633faa`
* [docker-registry](https://github.com/openshift/image-registry) git [0c09647a](https://github.com/openshift/image-registry/commit/0c09647aa2db93a8584dfe8079ed919145c662fb) `sha256:2cd8684ae6e2214531804b58b57db438d312039d228a4557a097b6928b76da08`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [9d55fd1a](https://github.com/openshift/driver-toolkit/commit/9d55fd1aaba05830f857132bd149ee3cf18cc20f) `sha256:6c28ae5e216ddcf76769d1a547ef28117208afda6db131d0951d0142dfe1f758`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [5e0f8d1b](https://github.com/openshift/egress-router-cni/commit/5e0f8d1b545899fda27c5e1cc8707d33cba1b534) `sha256:585e733bea6a32d0825b3e7a6d3d6b993c55da0a36af3acdc955b05f1b5dcd4f`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [f940e72e](https://github.com/openshift/cloud-provider-gcp/commit/f940e72e7611ce4a96da3e47966ba1befd25c474) `sha256:26b32c1a59ab26a436bce87daad6ad4f0b8bb0b4b3d716d7cd9eab8dc79fb466`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [65539c71](https://github.com/openshift/cluster-api-provider-gcp/commit/65539c71b4c292fc0f4eeb572dfe490af63063d9) `sha256:ed0804fa1624d94874c2b8a78f55b261dccd54b4149c6671aebf7244d449288c`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [01515888](https://github.com/openshift/machine-api-provider-gcp/commit/01515888c83526ec235b7bc3a27df6eba3034b00) `sha256:bf5c7eff9d2850b4a87c8a155106961cfc4be92a52fbbacb8a4a005693b75164`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [500ab5d3](https://github.com/openshift/gcp-pd-csi-driver/commit/500ab5d31ad382805070c8ae329a9a34163ebc99) `sha256:2cbf678c05da076af4ed4b718bade6ef97da19016c344bf555ba8d668843ed95`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [e0ad050a](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/e0ad050a84bab669e0f11e080fc4c388ef417bba) `sha256:3fd7eced7561f41828b6eda66456f9aa3c4876287f1e9f5bdf89556ed3523376`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [b36788ed](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/b36788edd4c559cffd5f7f1b2e3e51b98c3e92b8) `sha256:d2db70adab4606ab5e94ea69133ed7ed9f9fbc4c34cf1620b07d91ecc8179479`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [36ab30f9](https://github.com/openshift/cloud-provider-ibm/commit/36ab30f90e87de0daa926d20ccda88c41abed191) `sha256:d4de05d7ddb240ef1d8c2b5f97c33e96ad8782936cfa5d484bad413ac931aa1b`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [19801353](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/19801353c97d08b1333177be45c848082af0643c) `sha256:877f93eb9ea2e61ef2ad8d505ff544270bfffa8b00dc99355574952378683825`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [21f405cc](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/21f405cce9573eee1c4f1cf95c0eb601ae77ed99) `sha256:002bec8dbf6933a5941d41d4a66853c701d7674e7a9ef55bcbd1af87753f0269`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [8b6396a4](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/8b6396a4c78f4791b7f3c5ec404a78b499f8546b) `sha256:401cf945411285d515ce32720e1e5ecaf60bfe2aa1c064428944f5af082cb181`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [035805df](https://github.com/openshift/machine-api-provider-ibmcloud/commit/035805df5277c9f9c0cd9d4a44f59a08ab3ce031) `sha256:c5ace903ff0c830fc9a590c814f21901d1c90440ef198c3d8f4acfae3506136b`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [3d378369](https://github.com/openshift/insights-runtime-extractor/commit/3d3783698b20f5c27e4f35051b1450e47e789068) `sha256:d5aad12bd54bad4a478f6885d6629b73372b30c445edfb66b9f6184901f00d63`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [3d378369](https://github.com/openshift/insights-runtime-extractor/commit/3d3783698b20f5c27e4f35051b1450e47e789068) `sha256:9d7322477fb8504fc1da160e8fe4eb153fa273510b139322618c8bb3d49d1b79`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [6c92e542](https://github.com/openshift/ironic-rhcos-downloader/commit/6c92e5425b58baa9d4dd951a992b7460e8407247) `sha256:f34e1ada61d201069333aabed6da955197021f5bfbc8ac8b7a8f9be579081019`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [fa5b8b8b](https://github.com/openshift/ironic-static-ip-manager/commit/fa5b8b8bb73e509f74205a99a0ed1cb07a843885) `sha256:f48f3af20cf13fc09ea7981ad42667b5540252353614fcf382fb0f37930919f1`
* [keepalived-ipfailover](https://github.com/openshift/images) git [bb4535b7](https://github.com/openshift/images/commit/bb4535b7069cab2de0174be29bccccde6d623b4f) `sha256:9dd46c88c931597b5824038eb24d849205c8e2c395cd22e70af085e9122e1d5d`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [cfa5ee9f](https://github.com/openshift/kubernetes-metrics-server/commit/cfa5ee9f1c94d7faec36de970033b9e329326f38) `sha256:aa500d61ecba2af2fd958eb6f82dae5c20c3b71747fa50181f569d2ead3adb95`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [b9134351](https://github.com/openshift/kube-rbac-proxy/commit/b9134351be37c43408334047d8eb85d0ac01fe4e) `sha256:77988ac48ae4310b454503a6ad9a68516302560df62b97a7a1a59d182cca72dd`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [0f8a4eb8](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/0f8a4eb84ace9b746cf25d51d80dacf34ca5f953) `sha256:4a70d4e9a67f1c8f9a42188f67115820a6e2cfedb153b09a900e253b8805a6a1`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [8b8dd30e](https://github.com/openshift/kubevirt-csi-driver/commit/8b8dd30ecd302e2b260c666702dffb19abf7c1aa) `sha256:7082a5be34cae8612af1ce15d0f7e992f94c727d1f53541bc980053e6954ffc3`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:170a68539e9b840826bd21d214912ca51a9af8333532181404a292d0f9d59d7d`
* [machine-api-operator](https://github.com/openshift/machine-api-operator) git [4a9b90e3](https://github.com/openshift/machine-api-operator/commit/4a9b90e306a04ddfacfa408609c98b48a1cdea17) `sha256:74cc4803b4ead7134db526cd11d9a0107b972dc086d27dc0f9f2aa3e0835430d`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [20f6d615](https://github.com/openshift/image-customization-controller/commit/20f6d615c03b9c579037cdcdc327bd2bcefde4e6) `sha256:34cf03bdb57a0c4c53a62fbcf2bccb5868406ed4a4b584ceed9abda0ad73768b`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [fc73c803](https://github.com/openshift/multus-admission-controller/commit/fc73c803caa1140e5a9115ceeb0e38504b001722) `sha256:2b076f77dee46d5a3c466babc57d4240b5326c7431945365fcf79ba3e3f82ec5`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [278ec20e](https://github.com/openshift/multus-networkpolicy/commit/278ec20e795c3a590500e789716be7fcc4d7107b) `sha256:544fd5de2b005e7b4678dd94611d8c6d43a21c633600b461f252f6b89b48dee8`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:901daa8a00ae5ee79dae021db550fb597f0b81085e6462683dcd9b71b7b2826c`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [43c89591](https://github.com/openshift/whereabouts-cni/commit/43c8959152a6ca8afdc73eaed624286628c2c22e) `sha256:d659f74e53c57439091ef210f9393f9333bce1778fc0e26b4037f0453715926c`
* [must-gather](https://github.com/openshift/must-gather) git [f0c64742](https://github.com/openshift/must-gather/commit/f0c64742c79afce5e367ca2c7b830ad448abe1df) `sha256:66e0efabe70517a2e0cf01221ae3346786c9f6e631d45621bd3afd186b810f8b`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [dd3c4d0b](https://github.com/openshift/bond-cni/commit/dd3c4d0b886138d974022b963e72f2e90293abfe) `sha256:6b10bf6bbebcd780a75d0b73231824df5f1060986e87e2014814cf22c83629c0`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [b81340a9](https://github.com/openshift/network-metrics-daemon/commit/b81340a9fc6963fa3d64d215a12e8528ca797131) `sha256:51455fd01d7e089ebdb0ce297d1d6f64f083b4f40c7aa100f65a9657507e675b`
* [network-tools](https://github.com/openshift/network-tools) git [26d09174](https://github.com/openshift/network-tools/commit/26d09174cbd92386469e777e3bf49bfa95d035d5) `sha256:b0a60d7118b97d7f16fdca92cc4fa131436b0e3c44357e00e2e7d7cd68ac2bd4`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [b575ef15](https://github.com/openshift/cloud-provider-nutanix/commit/b575ef15f13e1434c793ae50824fd0676480be05) `sha256:0a98d1055024636a0d96dd9b0e0fc82a38c4b823a619900dc373da04ff4e2fb6`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [3200ddef](https://github.com/openshift/machine-api-provider-nutanix/commit/3200ddef48a5a8d47b96539419c51f3619cb1fd5) `sha256:54fda98a6700c75283ccf06261f150235878a96f9ec15dc2814efa9ac3976eec`
* [olm-catalogd](https://github.com/openshift/operator-framework-operator-controller) git [3e2401f2](https://github.com/openshift/operator-framework-operator-controller/commit/3e2401f23ef666e8f33789a397d81a7d352b0a33) `sha256:65853db7c968d247209b8619a15b54ff36b8613cee7ef1bd2f5e071ec5b2f371`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [3e2401f2](https://github.com/openshift/operator-framework-operator-controller/commit/3e2401f23ef666e8f33789a397d81a7d352b0a33) `sha256:5c4a5d80cb4dbca6ad48dc1ec16c89dcfd26ec3acd749bcfedaf3d900804c566`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [d9e543dd](https://github.com/openshift/openshift-controller-manager/commit/d9e543dd31e981f279c447e4f92f0dac3f665f9e) `sha256:9d26f966ceac11bf1c39b9d134fbc092ac4f89ff2cb0fb021e9bb9fd40d192ae`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [b04e2ef0](https://github.com/openshift/openshift-state-metrics/commit/b04e2ef05498c2a4504bd9396a3290c4f263fc37) `sha256:cd4a2cb512397651159f8fcaa51fe75de8074aeb7adbb25975963e92e58c3889`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [bf0d2c88](https://github.com/openshift/openstack-resource-controller/commit/bf0d2c88d6bf9bd90b24c979ea63dc37606b45fc) `sha256:0626fd3bc1af743e0cfee06915f7d27f417f1c29db9c1d458fc037e31b51ece3`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:99bde71abada4ae4a750ffba275cf2070e1b6e1d7c2dbe2756f1047c3b73422b`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [0693fe5d](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/0693fe5dcfab224466fba7a19e614de71f727999) `sha256:e2df431717815c65dbe337dd05735929c8efd8336f3956a5111e178028bad626`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [319efc99](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/319efc99be8cc2603fad1677acee7c4a4a096913) `sha256:55383687270e3fdc17d952712ad7e7a236fabc3a58d7cb40281e05994e2e1f1c`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [2424e8dd](https://github.com/openshift/cloud-provider-powervs/commit/2424e8dd4bf3e19c3e65efebc03bf4942665f7c4) `sha256:68dd9044c1280395a81d909c727abce810409833edb642ed9bce9e6a38ae66ad`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [f011b3c7](https://github.com/openshift/machine-api-provider-powervs/commit/f011b3c727c5377302b2ab0a203457490b930a3d) `sha256:98e9b701031bdfa2320d3339f580118345c58c719469443e56060f4ceebba4b7`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [f2529aee](https://github.com/openshift/prom-label-proxy/commit/f2529aee3dc2e9065de08b035d53151e007136fd) `sha256:98e465dbe5dba57c176b5281307a820319c1ef44bc079712a74965a980b82cdf`
* [prometheus](https://github.com/openshift/prometheus) git [af9b2068](https://github.com/openshift/prometheus/commit/af9b206808f8eaeb4acec7fe74ba6b145bbdc921) `sha256:98dcd3b92105536e3d8f5db3c7ec5227f906165f8c800ab6f550d669b5432d26`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [419f2843](https://github.com/openshift/prometheus-alertmanager/commit/419f2843332265d44982920d6fb4db220ec26f91) `sha256:b7cbe12124cea0971bdfc8f2daadbf88a8342049278e4ed5a5782e6c51dcab82`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [e2bd260c](https://github.com/openshift/prometheus-operator/commit/e2bd260c9d686192a5ed9b85dfd4a9f7a2a03666) `sha256:1f59a24f83ba11e3fd349bc829ef85c825c9bdb67767978a864f0bd25edec7fc`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [fa749d65](https://github.com/openshift/node_exporter/commit/fa749d65d8eca1cc937554baab91385a78ec8ce1) `sha256:d15c59047ad0e62367d7a314677385c1ab85242656e655f6de3021c5a8f4555c`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [e2bd260c](https://github.com/openshift/prometheus-operator/commit/e2bd260c9d686192a5ed9b85dfd4a9f7a2a03666) `sha256:832983f803b6f52bb4e50ba0792321f64867a8a8e1dab7c7ae0ba5f3e042f41f`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [e2bd260c](https://github.com/openshift/prometheus-operator/commit/e2bd260c9d686192a5ed9b85dfd4a9f7a2a03666) `sha256:d365bc59d67abee045b9190cf123e73e2170c2699ee46b30cf57e17096691052`
* [rhel-coreos](https://github.com/openshift/os) git [63e9aa40](https://github.com/openshift/os/commit/63e9aa4008eb65a02a2d70c9c086cbd8e18e149f) `sha256:e62be2ad398692d0ecdf13dac8c8947ce8385a721c2ff063faf333e2a6af5623`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [63e9aa40](https://github.com/openshift/os/commit/63e9aa4008eb65a02a2d70c9c086cbd8e18e149f) `sha256:04622e16d899255ce682524f5d96e4e4de47618e4b79bba78187f17bd02ef75e`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [bf2fa662](https://github.com/openshift/route-controller-manager/commit/bf2fa662f57f233d8541f94c4953e0dcd7a5ab20) `sha256:9f042b39163aee6d9152222e7037f68ad90f472865b03adfe003961842301422`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [37e0c317](https://github.com/openshift/service-ca-operator/commit/37e0c31790b6a954214817974a56c9a699d0cf78) `sha256:33513f3e9943a04439e61f355787b4e57fcea4ae0c642c879d9e70456df4394e`
* [telemeter](https://github.com/openshift/telemeter) git [4c6036ee](https://github.com/openshift/telemeter/commit/4c6036eeb851ad6e0e837e214a2d08ffc8f0d1d0) `sha256:5d6dc1de35b3e05fa5d7bbdcae1b5b7410eaa66e469b569f9220596f669c0080`
* [thanos](https://github.com/openshift/thanos) git [c0951032](https://github.com/openshift/thanos/commit/c0951032b34b832d0f5467e616999490a284101b) `sha256:a8c011c1ab994e963ef779454fed89dadb2fb9292108e9bb69663b1e728fac8f`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [0e61642f](https://github.com/openshift/volume-data-source-validator/commit/0e61642f8d898ee199e42f37319864851dd3627f) `sha256:6e6fe8e546cd3fc406b3807b6d054bc10f50a5b6e0917ef98ef2116549094367`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [b93eb64f](https://github.com/openshift/cloud-provider-vsphere/commit/b93eb64ff72e7c005687813c8b478d694a0f517a) `sha256:dac879039c6d703b6ffaa43cc9e5b427e74500d300ddee2207574193393607dc`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [1ff9e11f](https://github.com/openshift/cluster-api-provider-vsphere/commit/1ff9e11f5a117505d935549b96cd0d129917c015) `sha256:68e466826e57fe256c0580894d30331472c50a85503c3e510260e0e86164ef07`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [61d0d00a](https://github.com/openshift/vmware-vsphere-csi-driver/commit/61d0d00a78ee60ee57fcc99648a8851f0db52e5a) `sha256:90a72f87c7b9f24798b37d71dcae304cc20ca3382d2a8636dacb4bd3beac4d9a`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [5cd04d61](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/5cd04d61c20872edaaa2c3958779ff29ea6e6d82) `sha256:332f9d6e611495082a3e39a6da30003bd800bf27349a3f836efab49af5c87237`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [61d0d00a](https://github.com/openshift/vmware-vsphere-csi-driver/commit/61d0d00a78ee60ee57fcc99648a8851f0db52e5a) `sha256:601bebbac1bf757be2777e1405b863473250b0a5a57748aae81d84c72c72bd54`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/e07e2c76e1431afe13e2c34b3e08e0bb0903201f)

* [OCPBUGS-70300](https://issues.redhat.com/browse/OCPBUGS-70300): Prevent race in agent-installer kubeconfig generation [#8707](https://github.com/openshift/assisted-service/pull/8707)
* [OCPBUGS-65901](https://issues.redhat.com/browse/OCPBUGS-65901): Retry incomplete cluster registration in ABI [#8429](https://github.com/openshift/assisted-service/pull/8429)
* [OCPBUGS-57606](https://issues.redhat.com/browse/OCPBUGS-57606): Updating ose-agent-installer-api-server-container image to be consist… [#8399](https://github.com/openshift/assisted-service/pull/8399)
* [Full changelog](https://github.com/openshift/assisted-service/compare/4b116f46ca39a4933cab5647e5db44432c752b80...e07e2c76e1431afe13e2c34b3e08e0bb0903201f)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/637327ec40cd1f85ac5d7d4f114a2fae89baa8b0)

* [OCPBUGS-57718](https://issues.redhat.com/browse/OCPBUGS-57718): Update golang images to 1.24 for OpenShift 4.20 [#1194](https://github.com/openshift/assisted-installer-agent/pull/1194)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/62dc63f18f2c4a6a0cf1043710d055fe57f8fa28...637327ec40cd1f85ac5d7d4f114a2fae89baa8b0)


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/c0370c199bd9d314d14cdf668f4dddff6d475514)

* remove external platforms field from below sea level UI (#3318) [#3318](https://github.com/openshift-assisted/assisted-installer-ui/pull/3318)
* Adding TechPreview Budge for Assisted installer and agent (#3296) [#3296](https://github.com/openshift-assisted/assisted-installer-ui/pull/3296)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/0aa952bf99708806caee52cfd7973c076c577def...c0370c199bd9d314d14cdf668f4dddff6d475514)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/688c906c9f08b0b75e330e6e7dc81e31df765db7)

* [OCPBUGS-75868](https://issues.redhat.com/browse/OCPBUGS-75868): Increase Konflux build pipeline memory [#247](https://github.com/openshift/agent-installer-utils/pull/247)
* [OCPBUGS-68324](https://issues.redhat.com/browse/OCPBUGS-68324): bump github.com/sirupsen/logrus to v1.9.3 [#235](https://github.com/openshift/agent-installer-utils/pull/235)
* [OCPBUGS-69834](https://issues.redhat.com/browse/OCPBUGS-69834): Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 20eb21c [#208](https://github.com/openshift/agent-installer-utils/pull/208)
* [OCPBUGS-69830](https://issues.redhat.com/browse/OCPBUGS-69830): Update Konflux references [#207](https://github.com/openshift/agent-installer-utils/pull/207)
* [OCPBUGS-67306](https://issues.redhat.com/browse/OCPBUGS-67306): Update Konflux release version to 4.20.8 [#212](https://github.com/openshift/agent-installer-utils/pull/212)
* [OCPBUGS-66431](https://issues.redhat.com/browse/OCPBUGS-66431): Add Konflux PipelineRun params required by release pipeline [#206](https://github.com/openshift/agent-installer-utils/pull/206)
* [OCPBUGS-66425](https://issues.redhat.com/browse/OCPBUGS-66425): Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 13cf619 [#186](https://github.com/openshift/agent-installer-utils/pull/186)
* [OCPBUGS-66422](https://issues.redhat.com/browse/OCPBUGS-66422): Update Konflux references [#185](https://github.com/openshift/agent-installer-utils/pull/185)
* [OCPBUGS-66406](https://issues.redhat.com/browse/OCPBUGS-66406): Update Konflux release version to 4.20.6 [#204](https://github.com/openshift/agent-installer-utils/pull/204)
* [OCPBUGS-65715](https://issues.redhat.com/browse/OCPBUGS-65715): Update 4.20 version to 4.20.4 [#196](https://github.com/openshift/agent-installer-utils/pull/196)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/f567fb90bcd80834d18cee39ff1d135f6d6dbc50...688c906c9f08b0b75e330e6e7dc81e31df765db7)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/158b88f6d146e74cca1fc9b79379463fde546552)

* [OCPBUGS-72563](https://issues.redhat.com/browse/OCPBUGS-72563): deploy prometheus role and binding on hypershift guest [#491](https://github.com/openshift/csi-operator/pull/491)
* [OCPBUGS-65895](https://issues.redhat.com/browse/OCPBUGS-65895): allow all-egress for efs operator [#473](https://github.com/openshift/csi-operator/pull/473)
* [OCPBUGS-65686](https://issues.redhat.com/browse/OCPBUGS-65686): Bump gophercloud [#470](https://github.com/openshift/csi-operator/pull/470)
* [Full changelog](https://github.com/openshift/csi-operator/compare/dc35256d52e1ff30cd49f3c6649b5eca370ce03c...158b88f6d146e74cca1fc9b79379463fde546552)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/999f4f76124e66c7b42af678cb19aff4b29f72d4)

* [OCPBUGS-72570](https://issues.redhat.com/browse/OCPBUGS-72570): Fix reconciler consistency checks in Update and Exists [#164](https://github.com/openshift/machine-api-provider-aws/pull/164)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/f5c125807016b8e0187654e53762532d8c2fe923...999f4f76124e66c7b42af678cb19aff4b29f72d4)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/8e83772ab8d31b32225744d4f0b0023680692daf)

* [OCPBUGS-74169](https://issues.redhat.com/browse/OCPBUGS-74169): Fix GOTOOLCHAIN env var [#212](https://github.com/openshift/aws-pod-identity-webhook/pull/212)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/a2ecb1502280feb8e82c9cf6f3f77d62797e4445...8e83772ab8d31b32225744d4f0b0023680692daf)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/68db91507ea47f767ee0dc838c08cc371d2ff69f)

* [OCPBUGS-65708](https://issues.redhat.com/browse/OCPBUGS-65708): Set updateDomainCount to one when faultDomainCount is one [#173](https://github.com/openshift/machine-api-provider-azure/pull/173)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/b1cb6432a0ae47248e126d32fb6012eb1408e833...68db91507ea47f767ee0dc838c08cc371d2ff69f)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/1f026bc5be128afc4f4095c715264f089f18f28b)

* [OCPBUGS-74674](https://issues.redhat.com/browse/OCPBUGS-74674): [release-4.20] GCP: skip AI zones [#10273](https://github.com/openshift/installer/pull/10273)
* [OCPBUGS-74551](https://issues.redhat.com/browse/OCPBUGS-74551): add support for NVIDIA H100 and H200 enabled machine series [#10263](https://github.com/openshift/installer/pull/10263)
* [OCPBUGS-66356](https://issues.redhat.com/browse/OCPBUGS-66356): Update the RHCOS 4.20 bootimage metadata to 9.6.20260112-0 [#10247](https://github.com/openshift/installer/pull/10247)
* [OCPBUGS-73681](https://issues.redhat.com/browse/OCPBUGS-73681): pkg/asset/manifests/azure: save cidr blocks [#10208](https://github.com/openshift/installer/pull/10208)
* [OCPBUGS-73785](https://issues.redhat.com/browse/OCPBUGS-73785): ensure deterministic zone ordering for control plane machines [#10219](https://github.com/openshift/installer/pull/10219)
* [OCPBUGS-71212](https://issues.redhat.com/browse/OCPBUGS-71212): Increase agent-installer pre-network-manager timeout [#10199](https://github.com/openshift/installer/pull/10199)
* [OCPBUGS-65767](https://issues.redhat.com/browse/OCPBUGS-65767): Add StandardFXmdsv2Family to azure tested instance type list [#10104](https://github.com/openshift/installer/pull/10104)
* [OCPBUGS-66231](https://issues.redhat.com/browse/OCPBUGS-66231): Use separate tmpfs for ostree checkout on live ISO [#10140](https://github.com/openshift/installer/pull/10140)
* [OCPBUGS-65763](https://issues.redhat.com/browse/OCPBUGS-65763): continue to update 02_storage.json using new property storageAccountId [#10103](https://github.com/openshift/installer/pull/10103)
* [OCPBUGS-66257](https://issues.redhat.com/browse/OCPBUGS-66257): CORS-4249: bump ARO marketplace images [#10142](https://github.com/openshift/installer/pull/10142)
* [OCPBUGS-66207](https://issues.redhat.com/browse/OCPBUGS-66207), [OCPBUGS-66208](https://issues.redhat.com/browse/OCPBUGS-66208): Fix console info for interactive agent installer [#10136](https://github.com/openshift/installer/pull/10136)
* Revert "OCPBUGS-65586: Update the RHCOS 4.20 bootimage metadata to 9.6.202511…" [#10093](https://github.com/openshift/installer/pull/10093)
* [OCPBUGS-65586](https://issues.redhat.com/browse/OCPBUGS-65586): Update the RHCOS 4.20 bootimage metadata to 9.6.202511… [#10084](https://github.com/openshift/installer/pull/10084)
* [OCPBUGS-64924](https://issues.redhat.com/browse/OCPBUGS-64924): Azure UPI ARM template: use storageAccountId [#10069](https://github.com/openshift/installer/pull/10069)
* [OCPBUGS-64595](https://issues.redhat.com/browse/OCPBUGS-64595): Remove pending items on gcp no-op [#10056](https://github.com/openshift/installer/pull/10056)
* [Full changelog](https://github.com/openshift/installer/compare/200070b922dcf6bfd4819d7063f13e14ea296241...1f026bc5be128afc4f4095c715264f089f18f28b)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/62e7a3f52debe490a8616f2ab05ff56e4f435a85)

* Bug OCPBUGS-76546: BMO fails to start servicing despite updates to HFC spec [#460](https://github.com/openshift/baremetal-operator/pull/460)
* [OCPBUGS-74987](https://issues.redhat.com/browse/OCPBUGS-74987): Abort inspection/cleaning before powering off during deletion [#453](https://github.com/openshift/baremetal-operator/pull/453)
* [OCPBUGS-74084](https://issues.redhat.com/browse/OCPBUGS-74084): Require PreprovisioningImage for deprovisioning when cleaning is enabled [#446](https://github.com/openshift/baremetal-operator/pull/446)
* [OCPBUGS-63538](https://issues.redhat.com/browse/OCPBUGS-63538): Create a PreprovisioningImage for servicing if needed [#435](https://github.com/openshift/baremetal-operator/pull/435)
* [OCPBUGS-69667](https://issues.redhat.com/browse/OCPBUGS-69667): Change architecture default to match controller [#440](https://github.com/openshift/baremetal-operator/pull/440)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/a7d0035a144d5b51c1401426bbe7ce518f24f154...62e7a3f52debe490a8616f2ab05ff56e4f435a85)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/040daf8c96442098f8d6a6acd9faef69693222a3)

* [OCPBUGS-74969](https://issues.redhat.com/browse/OCPBUGS-74969): Fix unit test failure by updating ruby version to 3.3 [#2194](https://github.com/openshift/oc/pull/2194)
* [OCPBUGS-74965](https://issues.redhat.com/browse/OCPBUGS-74965): Clear defaultNodeSelector to run on any node [#2193](https://github.com/openshift/oc/pull/2193)
* [OCPBUGS-66241](https://issues.redhat.com/browse/OCPBUGS-66241): Fall back to simpler behavior, if setsid,ps,pkill are not installed [#2158](https://github.com/openshift/oc/pull/2158)
* [OCPBUGS-65481](https://issues.redhat.com/browse/OCPBUGS-65481): pkg/cli/admin/upgrade: Tighten force warnings [#2140](https://github.com/openshift/oc/pull/2140)
* [OCPBUGS-65523](https://issues.redhat.com/browse/OCPBUGS-65523): fix(must-gather): do not set node affinity if nodename is set [#2142](https://github.com/openshift/oc/pull/2142)
* [Full changelog](https://github.com/openshift/oc/compare/0581d703b56b153b941022bca4ce3c34de576f3c...040daf8c96442098f8d6a6acd9faef69693222a3)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/073fed50e70777402dfe0b411aa000dbeb00108c)

* [OCPBUGS-74546](https://issues.redhat.com/browse/OCPBUGS-74546): Resolve nil pointer exception in hasResourceTags [#970](https://github.com/openshift/cloud-credential-operator/pull/970)
* [OCPBUGS-65798](https://issues.redhat.com/browse/OCPBUGS-65798): ccoctl azure: retry custom role creation on consistency errors [#948](https://github.com/openshift/cloud-credential-operator/pull/948)
* [OCPBUGS-63690](https://issues.redhat.com/browse/OCPBUGS-63690): ccoctl: use pagination when listing resources in aws [#941](https://github.com/openshift/cloud-credential-operator/pull/941)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/17948f42adc4fce592908d48730f45d665bcbbba...073fed50e70777402dfe0b411aa000dbeb00108c)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/d22915bc82993ce11cb3fb97e6ae00602f30549b)

* [OCPBUGS-64742](https://issues.redhat.com/browse/OCPBUGS-64742): Fix capacity calculation [#188](https://github.com/openshift/cloud-network-config-controller/pull/188)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/a365cf9c9f9f4d0d7841dead5145f7cc59dfac18...d22915bc82993ce11cb3fb97e6ae00602f30549b)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/fb1a9ab21d72903f79a45f916c6443c0709b9b0c)

* [OCPBUGS-66315](https://issues.redhat.com/browse/OCPBUGS-66315): externaloidc: return errors when node statuses cannot be used to determine oidc state [#814](https://github.com/openshift/cluster-authentication-operator/pull/814)
* [OCPBUGS-61896](https://issues.redhat.com/browse/OCPBUGS-61896): set appropriate rolling update settings [#792](https://github.com/openshift/cluster-authentication-operator/pull/792)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/c9067c2a4902b0afeb3b288c4ff56fa381a1d1e0...fb1a9ab21d72903f79a45f916c6443c0709b9b0c)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/aaf5a61941b70a3b5792c0541e97356565c9977f)

* [OCPBUGS-63675](https://issues.redhat.com/browse/OCPBUGS-63675): update node info processors to include unschedulable nodes [#391](https://github.com/openshift/kubernetes-autoscaler/pull/391)
* [OCPBUGS-63495](https://issues.redhat.com/browse/OCPBUGS-63495): refactor cloud provider options [#387](https://github.com/openshift/kubernetes-autoscaler/pull/387)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/d883d0e6dbb74f0839631ebc7a584669f0e955a3...aaf5a61941b70a3b5792c0541e97356565c9977f)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/00826faa54eecb67a6ebdf6b386a652246ff11ae)

* [OCPBUGS-75933](https://issues.redhat.com/browse/OCPBUGS-75933): Explicitly set ReadOnlyRootFilesystem to false for machine-os-images so that SCC don't end up enforcing it to true [#552](https://github.com/openshift/cluster-baremetal-operator/pull/552)
* [OCPBUGS-73916](https://issues.redhat.com/browse/OCPBUGS-73916): Fix DNS resolution for metal3 service endpoints by adding trailing dots [#548](https://github.com/openshift/cluster-baremetal-operator/pull/548)
* [OCPBUGS-71203](https://issues.redhat.com/browse/OCPBUGS-71203): Mount /etc/pki/ca-trust to machine-os-images & Enable runtime extraction of aarch64 images [#543](https://github.com/openshift/cluster-baremetal-operator/pull/543)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/2c9f77f2a7fe3c7233a50b2ba0acb3155f9d34bb...00826faa54eecb67a6ebdf6b386a652246ff11ae)


### [cluster-config-api](https://github.com/openshift/api/tree/50517c6f4bfdbf9fc2cb291fd97cce150a3237ca)

* [CORENET-6431](https://issues.redhat.com/browse/CORENET-6431): network, virt: Graduate PreconfiguredUDNAddresses feature gate [#2546](https://github.com/openshift/api/pull/2546)
* [OCPBUGS-66204](https://issues.redhat.com/browse/OCPBUGS-66204): Introduce ClosedClientConnectionPolicy to IngressController API [#2609](https://github.com/openshift/api/pull/2609)
* [OCPBUGS-66135](https://issues.redhat.com/browse/OCPBUGS-66135): Add HTTPKeepAliveTimeout to IngressController API [#2607](https://github.com/openshift/api/pull/2607)
* [OCPBUGS-64843](https://issues.redhat.com/browse/OCPBUGS-64843): payload-command: remove authentication CR from hypershift payload [#2573](https://github.com/openshift/api/pull/2573)
* [OCPBUGS-64940](https://issues.redhat.com/browse/OCPBUGS-64940): Promote BYO OIDC features [#2515](https://github.com/openshift/api/pull/2515)
* [Full changelog](https://github.com/openshift/api/compare/41627d81e9c18fbcc3f7ff6de2ba50e0b98435c4...50517c6f4bfdbf9fc2cb291fd97cce150a3237ca)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/cf5fcdeba6032fcb81d1fd05e61c77ad68a9dd6c)

* [OCPBUGS-74624](https://issues.redhat.com/browse/OCPBUGS-74624): Add priority field to prevent early shutdown [#1508](https://github.com/openshift/cluster-etcd-operator/pull/1508)
* [OCPBUGS-63677](https://issues.redhat.com/browse/OCPBUGS-63677): Backport 1504 1514 release.420 [#1516](https://github.com/openshift/cluster-etcd-operator/pull/1516)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/0d7067cb286ad4efad5cad9bcff17656ef9827a3...cf5fcdeba6032fcb81d1fd05e61c77ad68a9dd6c)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/24ef5ae121b8f658b649bb555be827f114ead438)

* NO-JIRA: Add new NID team members to OWNERS [#1317](https://github.com/openshift/cluster-ingress-operator/pull/1317)
* [OCPBUGS-66135](https://issues.redhat.com/browse/OCPBUGS-66135): Implement HTTPKeepAliveTimeout tuning option [#1312](https://github.com/openshift/cluster-ingress-operator/pull/1312)
* [OCPBUGS-66204](https://issues.redhat.com/browse/OCPBUGS-66204): Implement ClosedClientConnectionPolicy field [#1314](https://github.com/openshift/cluster-ingress-operator/pull/1314)
* [OCPBUGS-65664](https://issues.redhat.com/browse/OCPBUGS-65664): IngressOperator not exposing some metrics for degraded… [#1305](https://github.com/openshift/cluster-ingress-operator/pull/1305)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/2371120eedb27049160c70859ef9972a7599c7e3...24ef5ae121b8f658b649bb555be827f114ead438)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/f6bb470ca76bd37d533a5366321faa9f478c614a)

* [OCPBUGS-74229](https://issues.redhat.com/browse/OCPBUGS-74229): SCC: allow image volume type for all SCCs [#2006](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2006)
* [OCPBUGS-65679](https://issues.redhat.com/browse/OCPBUGS-65679): enable resource v1beta2 api if DynamicResourceAllocation is enabled [#1929](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1929)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/a3414ab9e446c5511cc8bc1011a859ecfcf5c610...f6bb470ca76bd37d533a5366321faa9f478c614a)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/73d84b5bb0a5fc555c6c0f5cd0a9958a5139afaa)

* [OCPBUGS-74337](https://issues.redhat.com/browse/OCPBUGS-74337): Add OPERATOR_IMAGE_VERSION to recovery container [#604](https://github.com/openshift/cluster-kube-scheduler-operator/pull/604)
* [OCPBUGS-74624](https://issues.redhat.com/browse/OCPBUGS-74624): Add priority field to prevent early shutdown [#586](https://github.com/openshift/cluster-kube-scheduler-operator/pull/586)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/58cbd296eecc61c0871739588ae65af9c05e87a6...73d84b5bb0a5fc555c6c0f5cd0a9958a5139afaa)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/a309554e9c8c88189f4aa849dfe16b475ff789c7)

* [OCPBUGS-74623](https://issues.redhat.com/browse/OCPBUGS-74623): update expr for AlertmanagerClusterFailedToSendAlerts to exclude value 0 [#2805](https://github.com/openshift/cluster-monitoring-operator/pull/2805)
* [OCPBUGS-67166](https://issues.redhat.com/browse/OCPBUGS-67166): Add the collection of MTV migration metrics [#2772](https://github.com/openshift/cluster-monitoring-operator/pull/2772)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/870b44fc269ae4e790a3487d1795880d93ff72a9...a309554e9c8c88189f4aa849dfe16b475ff789c7)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/63bfcdac6e6d861a4bc54dad13e91bd60e767b18)

* [CORENET-6311](https://issues.redhat.com/browse/CORENET-6311), [OCPBUGS-74139](https://issues.redhat.com/browse/OCPBUGS-74139): Skip running _stackmanager for libreswan 5.3+ [#2872](https://github.com/openshift/cluster-network-operator/pull/2872)
* [OCPBUGS-73365](https://issues.redhat.com/browse/OCPBUGS-73365): fix(hypershift): use net.JoinHostPort for URL construction [#2876](https://github.com/openshift/cluster-network-operator/pull/2876)
* [OCPBUGS-66253](https://issues.redhat.com/browse/OCPBUGS-66253): Add kubevirt platform to dual-stack supported platforms [#2860](https://github.com/openshift/cluster-network-operator/pull/2860)
* [OCPBUGS-66412](https://issues.redhat.com/browse/OCPBUGS-66412): Fix whereabouts-token-watcher DaemonSet improvements [#2850](https://github.com/openshift/cluster-network-operator/pull/2850)
* [OCPBUGS-66164](https://issues.redhat.com/browse/OCPBUGS-66164): [release-4.20] CORENET-6465: Remove unneeded logging config from managed ovn-kubernetes [#2838](https://github.com/openshift/cluster-network-operator/pull/2838)
* [OCPBUGS-66162](https://issues.redhat.com/browse/OCPBUGS-66162): [release-4.20] CORENET-6488: Preserve custom resource requests on ovn-control-plane pods [#2835](https://github.com/openshift/cluster-network-operator/pull/2835)
* [OCPBUGS-46422](https://issues.redhat.com/browse/OCPBUGS-46422): Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes [4.20] [#2827](https://github.com/openshift/cluster-network-operator/pull/2827)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/1666a71c205071b6d44bfa57c0ebd3f0054fa1cd...63bfcdac6e6d861a4bc54dad13e91bd60e767b18)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/601b61fe23b44be64007c238c4299ca1ae594292)

* [OCPBUGS-70349](https://issues.redhat.com/browse/OCPBUGS-70349): Remove CgroupModeV1 reference from the code [#1437](https://github.com/openshift/cluster-node-tuning-operator/pull/1437)
* [OCPBUGS-62721](https://issues.redhat.com/browse/OCPBUGS-62721): E2E: skip SMT disabled test when L3 cache spans entire NUMA node [#1404](https://github.com/openshift/cluster-node-tuning-operator/pull/1404)
* [OCPBUGS-63751](https://issues.redhat.com/browse/OCPBUGS-63751): PPC: ghw: filter out namespaces dir [#1421](https://github.com/openshift/cluster-node-tuning-operator/pull/1421)
* [OCPBUGS-64832](https://issues.redhat.com/browse/OCPBUGS-64832): e2e:hugepages: changing tests to use hugepages-allocator tool [#1427](https://github.com/openshift/cluster-node-tuning-operator/pull/1427)
* [OCPBUGS-64588](https://issues.redhat.com/browse/OCPBUGS-64588): e2e:llc: skip test when no BM worker is found [#1422](https://github.com/openshift/cluster-node-tuning-operator/pull/1422)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/2ed182ba57106a7c8cc727aa003e46be079b7dd9...601b61fe23b44be64007c238c4299ca1ae594292)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/be41e5b433d5feb464595c66746d1d40cf48912d)

* [OCPBUGS-75912](https://issues.redhat.com/browse/OCPBUGS-75912): add vsphere permissions for checking if users is authorized to see metrics [#663](https://github.com/openshift/cluster-storage-operator/pull/663)
* [OCPBUGS-70343](https://issues.redhat.com/browse/OCPBUGS-70343): volume-data-source-validator must use IfNotPresent image pull policy [#653](https://github.com/openshift/cluster-storage-operator/pull/653)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/d6b7775e872264a8e53f4bfe3ba884a3888367b7...be41e5b433d5feb464595c66746d1d40cf48912d)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/3ef3dcb24185cbb9c48aa53c8379397a0e7b61e0)

* [OCPBUGS-64828](https://issues.redhat.com/browse/OCPBUGS-64828): lib/resourcemerge: Add support for hostUsers flag [#1259](https://github.com/openshift/cluster-version-operator/pull/1259)
* [OCPBUGS-70180](https://issues.redhat.com/browse/OCPBUGS-70180): [release-4.20] OCPBUGS-70180: Unify capitalization when comparing architectures for available updates [#1281](https://github.com/openshift/cluster-version-operator/pull/1281)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/77782f1a4b9648f8ade2bc1e75d10779784e341f...3ef3dcb24185cbb9c48aa53c8379397a0e7b61e0)


### [console](https://github.com/openshift/console/tree/7c86c3d5773b7c9c541f73174e046a7630c212ea)

* [OCPBUGS-76543](https://issues.redhat.com/browse/OCPBUGS-76543): Use Actions button instead of kebab menu on Subscription details page [#16018](https://github.com/openshift/console/pull/16018)
* [OCPBUGS-75880](https://issues.redhat.com/browse/OCPBUGS-75880): Fix referenceFor parameter in SubscriptionDetailsPage [#15987](https://github.com/openshift/console/pull/15987)
* [OCPBUGS-74696](https://issues.redhat.com/browse/OCPBUGS-74696): Bump lodash to latest [#15963](https://github.com/openshift/console/pull/15963)
* [OCPBUGS-74158](https://issues.redhat.com/browse/OCPBUGS-74158): Do not resolve disabled catalog type extensions [#15931](https://github.com/openshift/console/pull/15931)
* [OCPBUGS-72417](https://issues.redhat.com/browse/OCPBUGS-72417): make cloudCredentials optional so operators load when … [#15901](https://github.com/openshift/console/pull/15901)
* [OCPBUGS-67225](https://issues.redhat.com/browse/OCPBUGS-67225): Remove unwanted semicolon from Serverless Channel and Broker list [#15834](https://github.com/openshift/console/pull/15834)
* [OCPBUGS-69917](https://issues.redhat.com/browse/OCPBUGS-69917): There should be no role ARN field as token-auth-aws/azure/gcp=false in csv annotations [#15869](https://github.com/openshift/console/pull/15869)
* [OCPBUGS-73775](https://issues.redhat.com/browse/OCPBUGS-73775): make cloudCredentials optional so operators load when … [#15918](https://github.com/openshift/console/pull/15918)
* [OCPBUGS-69732](https://issues.redhat.com/browse/OCPBUGS-69732): Fix Helm chart installation with CA/TLS certificates [#15862](https://github.com/openshift/console/pull/15862)
* [OCPBUGS-70332](https://issues.redhat.com/browse/OCPBUGS-70332): Visiting Group Detail Page &gt; RoleBindings will show error [#15887](https://github.com/openshift/console/pull/15887)
* [OCPBUGS-67136](https://issues.redhat.com/browse/OCPBUGS-67136): Spread operand details across 2 col [#15858](https://github.com/openshift/console/pull/15858)
* [OCPBUGS-66427](https://issues.redhat.com/browse/OCPBUGS-66427): Update client initialization in checkPackageManifestHandler [#15822](https://github.com/openshift/console/pull/15822)
* [OCPBUGS-67221](https://issues.redhat.com/browse/OCPBUGS-67221): Disallowed Pipelines-plugin Pipelines navigation section [#15833](https://github.com/openshift/console/pull/15833)
* [OCPBUGS-66248](https://issues.redhat.com/browse/OCPBUGS-66248): The number of Quick Starts item is wrong [#15797](https://github.com/openshift/console/pull/15797)
* [OCPBUGS-66206](https://issues.redhat.com/browse/OCPBUGS-66206): Sync YAML editor modal settings [#15787](https://github.com/openshift/console/pull/15787)
* [OCPBUGS-65900](https://issues.redhat.com/browse/OCPBUGS-65900): Fix unnecessary rerenders with pod-connect [#15758](https://github.com/openshift/console/pull/15758)
* [OCPBUGS-61785](https://issues.redhat.com/browse/OCPBUGS-61785): Add validation and type guards on healthHandler calls to prevent errors [#15500](https://github.com/openshift/console/pull/15500)
* [OCPBUGS-65793](https://issues.redhat.com/browse/OCPBUGS-65793): OpenShift Console can only show user name instead of full name as the display name [#15743](https://github.com/openshift/console/pull/15743)
* [OCPBUGS-65949](https://issues.redhat.com/browse/OCPBUGS-65949): Add SDK-webpack 4.20 changelogs [#15768](https://github.com/openshift/console/pull/15768)
* NO-JIRA: Add SDK 4.20 changelogs [#15765](https://github.com/openshift/console/pull/15765)
* [OCPBUGS-65761](https://issues.redhat.com/browse/OCPBUGS-65761): Preserve query string in perspective switch + remove dev console folks from `reviewers` [#15740](https://github.com/openshift/console/pull/15740)
* [OCPBUGS-64861](https://issues.redhat.com/browse/OCPBUGS-64861), [OCPBUGS-64863](https://issues.redhat.com/browse/OCPBUGS-64863): Upgrade Helm to 3.18.5 [#15705](https://github.com/openshift/console/pull/15705)
* [OCPBUGS-64702](https://issues.redhat.com/browse/OCPBUGS-64702): Lack Chinese/Japanese/Korean translations for 'On/Off' switch button on editor setting modal of yaml page. [#15683](https://github.com/openshift/console/pull/15683)
* [OCPBUGS-63125](https://issues.redhat.com/browse/OCPBUGS-63125): use tenancy path for project scoped status card [#15608](https://github.com/openshift/console/pull/15608)
* [OCPBUGS-61330](https://issues.redhat.com/browse/OCPBUGS-61330): fix namespace path generation for non-namespaced resources [#15498](https://github.com/openshift/console/pull/15498)
* [OCPBUGS-62953](https://issues.redhat.com/browse/OCPBUGS-62953): Automatically redirect all-namespaces catalog to default namespace [#15640](https://github.com/openshift/console/pull/15640)
* [Full changelog](https://github.com/openshift/console/compare/011bd20f0ea69bef75dcf144ad6a15ba8ed5ff8f...7c86c3d5773b7c9c541f73174e046a7630c212ea)


### [console-operator](https://github.com/openshift/console-operator/tree/4670807cfebc21af0c8ea84cfe029f3286c130df)

* [OCPBUGS-76267](https://issues.redhat.com/browse/OCPBUGS-76267): Fix PDB blocking node drains during cluster upgrades + update donwloads deployment [#1105](https://github.com/openshift/console-operator/pull/1105)
* [OCPBUGS-69960](https://issues.redhat.com/browse/OCPBUGS-69960): Reset StorageVersionMigrationDegraded condition [#1085](https://github.com/openshift/console-operator/pull/1085)
* [OCPBUGS-69654](https://issues.redhat.com/browse/OCPBUGS-69654): Update path for browsing catalogs and operators in quickstarts. [#1083](https://github.com/openshift/console-operator/pull/1083)
* [Full changelog](https://github.com/openshift/console-operator/compare/cdbc995ad9906b20a6048630d5d8af285bad7cc5...4670807cfebc21af0c8ea84cfe029f3286c130df)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/9996d28ce3163cf9a09d77101e81cede914d6c2f)

* [OCPBUGS-74890](https://issues.redhat.com/browse/OCPBUGS-74890): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.33 into release-4.20 [#368](https://github.com/openshift/cloud-provider-openstack/pull/368)
* [OCPBUGS-64811](https://issues.redhat.com/browse/OCPBUGS-64811): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.33 into release-4.20 [#355](https://github.com/openshift/cloud-provider-openstack/pull/355)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/c4fe3e8ad29e58f081f3883de0893c2025a097b2...9996d28ce3163cf9a09d77101e81cede914d6c2f)


### [docker-builder](https://github.com/openshift/builder/tree/35afa308e2473046721057112d804334fc4b8217)

* [OCPBUGS-66991](https://issues.redhat.com/browse/OCPBUGS-66991): bump buildah to 1.39.7 to fix CVE-2025-52881 [#496](https://github.com/openshift/builder/pull/496)
* [OCPBUGS-64857](https://issues.redhat.com/browse/OCPBUGS-64857): BuildConfig inline Dockerfile fails with heredoc syntax [#483](https://github.com/openshift/builder/pull/483)
* [Full changelog](https://github.com/openshift/builder/compare/ff595e4bbf5301039fc62f0cdd7b5610605f633e...35afa308e2473046721057112d804334fc4b8217)


### [etcd](https://github.com/openshift/etcd/tree/05bca97760b1cfa1bcef11c0b1f1a5c4dab19709)

* [OCPBUGS-70151](https://issues.redhat.com/browse/OCPBUGS-70151): 4.20 rebase 3.5.26 [#358](https://github.com/openshift/etcd/pull/358)
* [Full changelog](https://github.com/openshift/etcd/compare/eac09c01677bb03daed156d407be27785fd61e0d...05bca97760b1cfa1bcef11c0b1f1a5c4dab19709)


### [haproxy-router](https://github.com/openshift/router/tree/db8d384266051ef06b67883aaa83674bc6c9f1ae)

* [OCPBUGS-66204](https://issues.redhat.com/browse/OCPBUGS-66204): Add option abortonclose to HAProxy configuration template [#695](https://github.com/openshift/router/pull/695)
* [Full changelog](https://github.com/openshift/router/compare/96bfd2164c7885df9019ce9eeb79d506bd7e871b...db8d384266051ef06b67883aaa83674bc6c9f1ae)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/53f1c84ab86e3e029927fc302d5a1e4e0bf47eed)

* [OCPBUGS-74977](https://issues.redhat.com/browse/OCPBUGS-74977): UPSTREAM: 136595: raise kubelet CSI init backoff to cover ~140s DNS delays [#2581](https://github.com/openshift/kubernetes/pull/2581)
* [OCPBUGS-61843](https://issues.redhat.com/browse/OCPBUGS-61843): UPSTREAM: 131850: cpumanager: uncorecache alignment for odd integer cpus [#2498](https://github.com/openshift/kubernetes/pull/2498)
* [OCPBUGS-65551](https://issues.redhat.com/browse/OCPBUGS-65551): Bump 1.33.6 [#2518](https://github.com/openshift/kubernetes/pull/2518)
* [OCPBUGS-46422](https://issues.redhat.com/browse/OCPBUGS-46422): Remove patch/update from ServiceCIDR API conformance test [#2466](https://github.com/openshift/kubernetes/pull/2466)
* [Full changelog](https://github.com/openshift/kubernetes/compare/cf396bff09dcb68a96f718b5e0e80b50e874afb5...53f1c84ab86e3e029927fc302d5a1e4e0bf47eed)


### [hypershift](https://github.com/openshift/hypershift/tree/527f7827b36ffdfd006a8bb6cb89ff2238a2f441)

* [CNTRLPLANE-2680](https://issues.redhat.com/browse/CNTRLPLANE-2680): Add support for setting max expiration duration for KAS service account tokens [#7707](https://github.com/openshift/hypershift/pull/7707)
* [OCPBUGS-74775](https://issues.redhat.com/browse/OCPBUGS-74775): feat(cpo): check components are available before setting HostedCluster available [#7616](https://github.com/openshift/hypershift/pull/7616)
* [OCPBUGS-72409](https://issues.redhat.com/browse/OCPBUGS-72409): fix(Portieris): Fix Portieris by mounting emptyDir to './.trust' work dir [#7421](https://github.com/openshift/hypershift/pull/7421)
* [OCPBUGS-73365](https://issues.redhat.com/browse/OCPBUGS-73365): fix(cno): use brackets only for IPv6 in server URL [#7461](https://github.com/openshift/hypershift/pull/7461)
* [OCPBUGS-72405](https://issues.redhat.com/browse/OCPBUGS-72405): Fix Konflux EC voilation, update deprecated base … [#7444](https://github.com/openshift/hypershift/pull/7444)
* [OCPBUGS-66409](https://issues.redhat.com/browse/OCPBUGS-66409): test: Fix control plane components rollout failure when NetworkType is not OVNKubernetes [#7337](https://github.com/openshift/hypershift/pull/7337)
* [CNTRLPLANE-2205](https://issues.redhat.com/browse/CNTRLPLANE-2205): fix(hcco): allow for ARN reuse across components [#7383](https://github.com/openshift/hypershift/pull/7383)
* [OCPBUGS-69378](https://issues.redhat.com/browse/OCPBUGS-69378): test: remove network-dependent unit tests for image metadata [#7391](https://github.com/openshift/hypershift/pull/7391)
* [OCPBUGS-66397](https://issues.redhat.com/browse/OCPBUGS-66397): fix(kas): apply LoadBalancerSourceRanges only for LoadBalancer service type [#7336](https://github.com/openshift/hypershift/pull/7336)
* NO-JIRA: Update expected digest for busybox:latest in TestGetDigest [#7350](https://github.com/openshift/hypershift/pull/7350)
* [CNTRLPLANE-1710](https://issues.redhat.com/browse/CNTRLPLANE-1710): feat(globalps): security enhancements on GlobalPullSecret feature [#7234](https://github.com/openshift/hypershift/pull/7234)
* [OCPBUGS-65576](https://issues.redhat.com/browse/OCPBUGS-65576): add hypershift-no-cgo to the latest operator conta… [#7229](https://github.com/openshift/hypershift/pull/7229)
* [CORENET-6484](https://issues.redhat.com/browse/CORENET-6484): Restart ovnkube-control-plane pods when restart-date annotation is set [#7190](https://github.com/openshift/hypershift/pull/7190)
* [OCPBUGS-63509](https://issues.redhat.com/browse/OCPBUGS-63509): fix(ingress): add LoadBalancerSourceRanges support for external router service [#7098](https://github.com/openshift/hypershift/pull/7098)
* [OCPBUGS-64848](https://issues.redhat.com/browse/OCPBUGS-64848): feat: Promote ExternalOIDCWithUIDAndExtraClaimMappings feature to GA for Hypershift [#7204](https://github.com/openshift/hypershift/pull/7204)
* [OCPBUGS-61774](https://issues.redhat.com/browse/OCPBUGS-61774): fix(capi-provider): use single replica deployment for aws and azure [#6834](https://github.com/openshift/hypershift/pull/6834)
* [CNTRLPLANE-1908](https://issues.redhat.com/browse/CNTRLPLANE-1908): control-plane-operator-4-20 Konflux pipelines [#7216](https://github.com/openshift/hypershift/pull/7216)
* [Full changelog](https://github.com/openshift/hypershift/compare/8044afad5634f1f0a0e6c4dff0e8cb35cc73aef5...527f7827b36ffdfd006a8bb6cb89ff2238a2f441)


### [insights-operator](https://github.com/openshift/insights-operator/tree/550618f5edf18bc1cb8f743e8c6a6f713e7e3e4e)

* [OCPBUGS-75114](https://issues.redhat.com/browse/OCPBUGS-75114): [bugfix] The ConfigMap value for StoragePath is ignored on basic routine [#1222](https://github.com/openshift/insights-operator/pull/1222)
* [OCPBUGS-64107](https://issues.redhat.com/browse/OCPBUGS-64107): [release-4.20] Patch for GO-2025-4014 [#1215](https://github.com/openshift/insights-operator/pull/1215)
* [OCPBUGS-66062](https://issues.redhat.com/browse/OCPBUGS-66062): Add filtering to add other possible pod status to QEMU gatherer [#1185](https://github.com/openshift/insights-operator/pull/1185)
* [OCPBUGS-64800](https://issues.redhat.com/browse/OCPBUGS-64800): QEMU logs are not gathered if there are pending status virt-launcher pods [#1174](https://github.com/openshift/insights-operator/pull/1174)
* [OCPBUGS-65660](https://issues.redhat.com/browse/OCPBUGS-65660): [bugfix] The archive's records may include files whose names are out of bounds [#1177](https://github.com/openshift/insights-operator/pull/1177)
* [Full changelog](https://github.com/openshift/insights-operator/compare/10a1c1746d728197c42163217764eda00a3cbb4f...550618f5edf18bc1cb8f743e8c6a6f713e7e3e4e)


### [ironic](https://github.com/openshift/ironic-image/tree/14c174865a84b09251cb8d3bdcb712538afbf59e)

* [OCPBUGS-76539](https://issues.redhat.com/browse/OCPBUGS-76539): Update ironic hash for 4.20 with heartbeat inspection fix [#788](https://github.com/openshift/ironic-image/pull/788)
* Bug OCPBUGS-76547: Bump 4.20 ironic-image to include firmware update fixes [#787](https://github.com/openshift/ironic-image/pull/787)
* [OCPBUGS-69786](https://issues.redhat.com/browse/OCPBUGS-69786): Bump eventlet version [#756](https://github.com/openshift/ironic-image/pull/756)
* [METAL-1695](https://issues.redhat.com/browse/METAL-1695): OKD: install Ironic from the OpenShift fork [#740](https://github.com/openshift/ironic-image/pull/740)
* [OKD-304](https://issues.redhat.com/browse/OKD-304): Fix python dependencies for OKD [#731](https://github.com/openshift/ironic-image/pull/731)
* [OCPBUGS-64850](https://issues.redhat.com/browse/OCPBUGS-64850): Handle HTTP 400 and 409 race condition in Redfish power operations [#720](https://github.com/openshift/ironic-image/pull/720)
* [Full changelog](https://github.com/openshift/ironic-image/compare/422f3189a49680ca0574f9e88b1da27a2e227fea...14c174865a84b09251cb8d3bdcb712538afbf59e)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/6ae9e9e35571eedf00c240e10f62b56bbac1af07)

* [OCPBUGS-69777](https://issues.redhat.com/browse/OCPBUGS-69777): Bump eventlet version [#228](https://github.com/openshift/ironic-agent-image/pull/228)
* [OCPBUGS-66934](https://issues.redhat.com/browse/OCPBUGS-66934): Filter out more USB network devices [#221](https://github.com/openshift/ironic-agent-image/pull/221)
* [OCPBUGS-66084](https://issues.redhat.com/browse/OCPBUGS-66084), [OKD-295](https://issues.redhat.com/browse/OKD-295): Fix broken OKD ironic-agent-image [#216](https://github.com/openshift/ironic-agent-image/pull/216)
* [OCPBUGS-65519](https://issues.redhat.com/browse/OCPBUGS-65519): Include Test advertised ip reachability before assigning it [#212](https://github.com/openshift/ironic-agent-image/pull/212)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/ce01f3c1ed6022f9eecc164b2ae34aec25b3dee4...6ae9e9e35571eedf00c240e10f62b56bbac1af07)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/086a7f21313d6fbc5ea330d46671ce8934b26c56)

* [OCPBUGS-72589](https://issues.redhat.com/browse/OCPBUGS-72589): fix: only close existing channels [#128](https://github.com/openshift/kube-state-metrics/pull/128)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/a8c9a5f08f675ae9afbaafdc47d7d2acb4a3709d...086a7f21313d6fbc5ea330d46671ce8934b26c56)


### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/a2d607b2f1196ac371074d5fd14df80462de5b8f)

* [OCPBUGS-74100](https://issues.redhat.com/browse/OCPBUGS-74100): [4.20] sync upstream 2026-01-27 [#62](https://github.com/openshift/cloud-provider-kubevirt/pull/62)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b...a2d607b2f1196ac371074d5fd14df80462de5b8f)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/ae06ef93b113d11e3c12a3b0717b3a447942dd2b)

* [OCPBUGS-74433](https://issues.redhat.com/browse/OCPBUGS-74433): Set `NodeDegraded` MCN condition when node state annotation is set to `Degraded` [#5649](https://github.com/openshift/machine-config-operator/pull/5649)
* [OCPBUGS-76339](https://issues.redhat.com/browse/OCPBUGS-76339): machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] [#5631](https://github.com/openshift/machine-config-operator/pull/5631)
* [OCPBUGS-76361](https://issues.redhat.com/browse/OCPBUGS-76361): Update AMI script and list [#5641](https://github.com/openshift/machine-config-operator/pull/5641)
* [OCPBUGS-74146](https://issues.redhat.com/browse/OCPBUGS-74146): enable nodeip-configuration for platform external [#5580](https://github.com/openshift/machine-config-operator/pull/5580)
* [OCPBUGS-74298](https://issues.redhat.com/browse/OCPBUGS-74298): Fix up bootstrap-e2e [#5590](https://github.com/openshift/machine-config-operator/pull/5590)
* [OCPBUGS-73884](https://issues.redhat.com/browse/OCPBUGS-73884): pkg/controller/container-runtime-config: admin_ack handling for 4.20-to-4.21 OCI mirror requirement [#5558](https://github.com/openshift/machine-config-operator/pull/5558)
* [OCPBUGS-73776](https://issues.redhat.com/browse/OCPBUGS-73776): Fix timeout during configMap cleanup [#5557](https://github.com/openshift/machine-config-operator/pull/5557)
* [OCPBUGS-74081](https://issues.redhat.com/browse/OCPBUGS-74081): Enable existing units without content [#5565](https://github.com/openshift/machine-config-operator/pull/5565)
* [OCPBUGS-66260](https://issues.redhat.com/browse/OCPBUGS-66260): Set -fin timeouts in HAProxy config [#5459](https://github.com/openshift/machine-config-operator/pull/5459)
* [OCPBUGS-70201](https://issues.redhat.com/browse/OCPBUGS-70201): ctrcfg: set increase ulimits when upgrading from 4.20 to 4.21 [#5516](https://github.com/openshift/machine-config-operator/pull/5516)
* [OCPBUGS-69706](https://issues.redhat.com/browse/OCPBUGS-69706): Fix keepalived SIGTERM handling [#5507](https://github.com/openshift/machine-config-operator/pull/5507)
* [OCPBUGS-70322](https://issues.redhat.com/browse/OCPBUGS-70322): Skip boot image updates if arch annotation is not found [#5525](https://github.com/openshift/machine-config-operator/pull/5525)
* [OCPBUGS-70349](https://issues.redhat.com/browse/OCPBUGS-70349): Remove the dead code of setting the operator status for cgroupv1 based clusters [#5446](https://github.com/openshift/machine-config-operator/pull/5446)
* [OCPBUGS-69666](https://issues.redhat.com/browse/OCPBUGS-69666): Remove log exposing kubeconfig [#5505](https://github.com/openshift/machine-config-operator/pull/5505)
* [OCPBUGS-69444](https://issues.redhat.com/browse/OCPBUGS-69444): MCP is not correctly degraded when a pivotError happens [#5503](https://github.com/openshift/machine-config-operator/pull/5503)
* [OCPBUGS-65545](https://issues.redhat.com/browse/OCPBUGS-65545), [OCPBUGS-67007](https://issues.redhat.com/browse/OCPBUGS-67007): cherry pick to few fixes that needed for missing services and configuration [#5480](https://github.com/openshift/machine-config-operator/pull/5480)
* [OCPBUGS-67137](https://issues.redhat.com/browse/OCPBUGS-67137): Fix cleanup in `TestInstallRPMAndCheckMCDMetrics` to decrease risk of test failures due to interference [#5478](https://github.com/openshift/machine-config-operator/pull/5478)
* [OKD-294](https://issues.redhat.com/browse/OKD-294): Migrate runtime from runc to crun on an upgrade for OKD [#5467](https://github.com/openshift/machine-config-operator/pull/5467)
* [OCPBUGS-65898](https://issues.redhat.com/browse/OCPBUGS-65898): fixes systemd unit creation for empty units [#5437](https://github.com/openshift/machine-config-operator/pull/5437)
* [OCPBUGS-64822](https://issues.redhat.com/browse/OCPBUGS-64822): block upgrades for conflict  non-default ClusterImagePolicy resources [#5414](https://github.com/openshift/machine-config-operator/pull/5414)
* [OCPBUGS-65777](https://issues.redhat.com/browse/OCPBUGS-65777): Enforce OCP 4.20 and earlier cluster to have AutoSizingReserved disabled by default [#5387](https://github.com/openshift/machine-config-operator/pull/5387)
* [OCPBUGS-65781](https://issues.redhat.com/browse/OCPBUGS-65781): Remove --mount directives [#5425](https://github.com/openshift/machine-config-operator/pull/5425)
* [OCPBUGS-65556](https://issues.redhat.com/browse/OCPBUGS-65556): [release-4.20] Backport: Add delays to reduce TestOSBuildController failures [#5396](https://github.com/openshift/machine-config-operator/pull/5396)
* [OCPBUGS-64822](https://issues.redhat.com/browse/OCPBUGS-64822): remove check for conflicting ClusterImagePolicy in syncUpgradeableStatus [#5413](https://github.com/openshift/machine-config-operator/pull/5413)
* [OCPBUGS-65509](https://issues.redhat.com/browse/OCPBUGS-65509): e2e gcp ocl PR backport [#5407](https://github.com/openshift/machine-config-operator/pull/5407)
* [OCPBUGS-64822](https://issues.redhat.com/browse/OCPBUGS-64822): Implement upgrade blocking for conflicting ClusterImagePolicy named "openshift" [#5397](https://github.com/openshift/machine-config-operator/pull/5397)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/0c58628362f7471071da6d0263fa65766691f28c...ae06ef93b113d11e3c12a3b0717b3a447942dd2b)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/551bb5d75e782e47b83292d883e41bc57df730a4)

* [OCPBUGS-71203](https://issues.redhat.com/browse/OCPBUGS-71203): Backport multi arch fixes [#77](https://github.com/openshift/machine-os-images/pull/77)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/64bfec79ae03b50b1da5b614a4cca2937ea9927d...551bb5d75e782e47b83292d883e41bc57df730a4)


### [metallb-frr](https://github.com/openshift/frr/tree/3ca45c517eafe07aac0866e5cbd32a5c08081f22)

* [OCPBUGS-65516](https://issues.redhat.com/browse/OCPBUGS-65516): [release-4.20] Dockerfile: unpin FRR rpm [#111](https://github.com/openshift/frr/pull/111)
* [Full changelog](https://github.com/openshift/frr/compare/fc0fe74f94b415b28d772dbc61f6323171a11b50...3ca45c517eafe07aac0866e5cbd32a5c08081f22)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/7bb2c16d5363cbe97f6a6e02c0cc22e30f180c8e)

* [OCPBUGS-76613](https://issues.redhat.com/browse/OCPBUGS-76613): [release-4.20] fix: update vulnerable dependencies [#766](https://github.com/openshift/monitoring-plugin/pull/766)
* [OCPBUGS-73842](https://issues.redhat.com/browse/OCPBUGS-73842): fix: update qs vulnerable dependency [#733](https://github.com/openshift/monitoring-plugin/pull/733)
* NO-JIRA: [release-4.20] fix: remove unnecessary package.lock [#732](https://github.com/openshift/monitoring-plugin/pull/732)
* [OU-1146](https://issues.redhat.com/browse/OU-1146): remove random multiplication [#704](https://github.com/openshift/monitoring-plugin/pull/704)
* [OU-1135](https://issues.redhat.com/browse/OU-1135): [release-4.20] monitoring testing backport [#700](https://github.com/openshift/monitoring-plugin/pull/700)
* [OCPBUGS-69725](https://issues.redhat.com/browse/OCPBUGS-69725): [release-4.20] fix: upgrade node-forge vulnerable dependency [#701](https://github.com/openshift/monitoring-plugin/pull/701)
* [OU-1130](https://issues.redhat.com/browse/OU-1130): Merge main to release 4.20 [#683](https://github.com/openshift/monitoring-plugin/pull/683)
* [OCPBUGS-66389](https://issues.redhat.com/browse/OCPBUGS-66389): Time range and Refresh interval dropdown button lack of unique identifier [#668](https://github.com/openshift/monitoring-plugin/pull/668)
* [OCPBUGS-66240](https://issues.redhat.com/browse/OCPBUGS-66240): configure max TLS version only when specified [#664](https://github.com/openshift/monitoring-plugin/pull/664)
* [OCPBUGS-65947](https://issues.redhat.com/browse/OCPBUGS-65947): add missing conversion units [#654](https://github.com/openshift/monitoring-plugin/pull/654)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/c6a042a64369147cf997e5e794b89e577a3c3532...7bb2c16d5363cbe97f6a6e02c0cc22e30f180c8e)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/b2a2f457824490d93da101d983b25af966f2be1b)

* [OCPBUGS-73737](https://issues.redhat.com/browse/OCPBUGS-73737): Fix server url in kubeconfig [#273](https://github.com/openshift/multus-cni/pull/273)
* [OCPBUGS-73888](https://issues.redhat.com/browse/OCPBUGS-73888): update ci-operator.yaml [#274](https://github.com/openshift/multus-cni/pull/274)
* [Full changelog](https://github.com/openshift/multus-cni/compare/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe...b2a2f457824490d93da101d983b25af966f2be1b)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/8ce0b0d03a14727f0aed7d5bbc8a6529bb583cf2)

* [CNV-77540](https://issues.redhat.com/browse/CNV-77540): fix Enable MultiNetworkPolicies lead to invalid URL [#342](https://github.com/openshift/networking-console-plugin/pull/342)
* [CNV-76277](https://issues.redhat.com/browse/CNV-76277): Fix name generator with unprofessional names [#317](https://github.com/openshift/networking-console-plugin/pull/317)
* [CNV-72230](https://issues.redhat.com/browse/CNV-72230): fix networking links [#308](https://github.com/openshift/networking-console-plugin/pull/308)
* [OCPBUGS-66335](https://issues.redhat.com/browse/OCPBUGS-66335): fix flickerying in synced editor [#304](https://github.com/openshift/networking-console-plugin/pull/304)
* [CNV-72771](https://issues.redhat.com/browse/CNV-72771): fix null error [#300](https://github.com/openshift/networking-console-plugin/pull/300)
* [CNV-71965](https://issues.redhat.com/browse/CNV-71965): replacing the broken link to VirtualMachine network docs [#298](https://github.com/openshift/networking-console-plugin/pull/298)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/9de315953ad1b357c35003937a1a2f27aa9068e0...8ce0b0d03a14727f0aed7d5bbc8a6529bb583cf2)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/99f27d25cc2853fe44ce6c7f7611637ef1492e42)

* NO-JIRA: (chore): update OWNERS file [#168](https://github.com/openshift/oauth-apiserver/pull/168)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/e5ad4f6fdc093595f6d939eb43868ae36ae3fdaa...99f27d25cc2853fe44ce6c7f7611637ef1492e42)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/baba7b55859172b58bd89eea8124eff3c0d64f3a)

* [OCPBUGS-74132](https://issues.redhat.com/browse/OCPBUGS-74132): test/e2e - do not use ambiguous container image short names [#345](https://github.com/openshift/oauth-proxy/pull/345)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/6649cb8a7c4dd7d1c4e03c9b0bc7594089fba991...baba7b55859172b58bd89eea8124eff3c0d64f3a)


### [oauth-server](https://github.com/openshift/oauth-server/tree/51d4432ac79b00c55bf0ac652320212d0f4b39b2)

* [OCPBUGS-68330](https://issues.redhat.com/browse/OCPBUGS-68330): go.mod: bump logrus from v1.9.0 to v1.9.3 to fix CVE-2025-65637 [#209](https://github.com/openshift/oauth-server/pull/209)
* [Full changelog](https://github.com/openshift/oauth-server/compare/81098796234cbe75e656ffddd8a015953e0bb1c7...51d4432ac79b00c55bf0ac652320212d0f4b39b2)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/a8c29a3381a1e1eef93c41b1e8fd77a819cf4baa)

* [OCPBUGS-75007](https://issues.redhat.com/browse/OCPBUGS-75007): [release-4.20] fix duplicated channel bug in filtered catalogs [#1347](https://github.com/openshift/oc-mirror/pull/1347)
* [OCPBUGS-64647](https://issues.redhat.com/browse/OCPBUGS-64647): fix: return only requested version [#1306](https://github.com/openshift/oc-mirror/pull/1306)
* [OCPBUGS-65787](https://issues.redhat.com/browse/OCPBUGS-65787): Remove empty status field from generated IDMS/ITMS files [#1313](https://github.com/openshift/oc-mirror/pull/1313)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/b598121bb70555120dde8d60fa9fbcde4f7b3d65...a8c29a3381a1e1eef93c41b1e8fd77a819cf4baa)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/34cb4762e1716c1a31a344118b8a3ad00c28d831)

* [OCPBUGS-65848](https://issues.redhat.com/browse/OCPBUGS-65848): Add ValidatingAdmissionPolicy and check for omissions next time. [#577](https://github.com/openshift/openshift-apiserver/pull/577)
* [OCPBUGS-61982](https://issues.redhat.com/browse/OCPBUGS-61982): pkg/image: conditionally parse raw image manifest [#559](https://github.com/openshift/openshift-apiserver/pull/559)
* [OCPBUGS-65814](https://issues.redhat.com/browse/OCPBUGS-65814): update pkg/image/OWNERS [#575](https://github.com/openshift/openshift-apiserver/pull/575)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/a1535bf4ed12bd3210135bbe459f9324875f24ce...34cb4762e1716c1a31a344118b8a3ad00c28d831)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/d1c8e7edf11e78db401bc1672e0f17d551fe09db)

* [OCPBUGS-64814](https://issues.redhat.com/browse/OCPBUGS-64814): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into release-4.20 [#381](https://github.com/openshift/cluster-api-provider-openstack/pull/381)
* [OCPBUGS-64814](https://issues.redhat.com/browse/OCPBUGS-64814): Fix verify step [#389](https://github.com/openshift/cluster-api-provider-openstack/pull/389)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/30944900c974852654db4125082d616f9be4b1a6...d1c8e7edf11e78db401bc1672e0f17d551fe09db)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/7f8ae5007e4299769e25172a821342dc2874567c)

* [OCPBUGS-69645](https://issues.redhat.com/browse/OCPBUGS-69645): Don't record event for every reconcile [#145](https://github.com/openshift/machine-api-provider-openstack/pull/145)
* [OCPBUGS-76790](https://issues.redhat.com/browse/OCPBUGS-76790): Fix make test [#157](https://github.com/openshift/machine-api-provider-openstack/pull/157)
* [OCPBUGS-74226](https://issues.redhat.com/browse/OCPBUGS-74226): Revendor CAPO [#148](https://github.com/openshift/machine-api-provider-openstack/pull/148)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/5085f184c7d2ed21f36e5e3fe65bf023b38afe67...7f8ae5007e4299769e25172a821342dc2874567c)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/a685cb336b2cba228cd7466b2f96a0888e58103e)

* [OCPBUGS-76335](https://issues.redhat.com/browse/OCPBUGS-76335): Remove the collect-profiles job [#1223](https://github.com/openshift/operator-framework-olm/pull/1223)
* [OCPBUGS-62014](https://issues.redhat.com/browse/OCPBUGS-62014): rorfs for cacheless lacks write access to /tmp/ to generate cache [#1170](https://github.com/openshift/operator-framework-olm/pull/1170)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/dd6d22bd02554c039e7bbec4bf39c6e97ebf0b9b...a685cb336b2cba228cd7466b2f96a0888e58103e)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/837defb90f7fa1c811806b10dcac5e0952f2d766)

* [OCPBUGS-73876](https://issues.redhat.com/browse/OCPBUGS-73876): Update default catalog polling interval to 4h (240m) [#708](https://github.com/operator-framework/operator-marketplace/pull/708)
* [OCPBUGS-65680](https://issues.redhat.com/browse/OCPBUGS-65680): enforce client side auth requirement for metrics endpoint [#688](https://github.com/operator-framework/operator-marketplace/pull/688)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/c6abd3acc6af77a7f117bd89cececfae8c4830b1...837defb90f7fa1c811806b10dcac5e0952f2d766)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/7e1f4a300fc4b212f4e79cd9bcc9deb6d137b9b7)

* [OCPBUGS-68331](https://issues.redhat.com/browse/OCPBUGS-68331): Bump github.com/sirupsen/logrus to v1.9.3 [#145](https://github.com/openshift/ovirt-csi-driver-operator/pull/145)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/76db379d075fdae94ca604f3fa83b0612b36ef8d...7e1f4a300fc4b212f4e79cd9bcc9deb6d137b9b7)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/3f6615b1bb18ff1841fe4596bd32cb91bc2854e6)

* [OCPBUGS-74268](https://issues.redhat.com/browse/OCPBUGS-74268): release-4.20 fix(localnet, ipamless): Prevent LSP deletion on sync [#2941](https://github.com/openshift/ovn-kubernetes/pull/2941)
* [OCPBUGS-66049](https://issues.redhat.com/browse/OCPBUGS-66049): Fix conntrack reconciliation to use service port instead of endpoint port [#2874](https://github.com/openshift/ovn-kubernetes/pull/2874)
* [OCPBUGS-64836](https://issues.redhat.com/browse/OCPBUGS-64836): back-port IP & MAC conflict detection [#2827](https://github.com/openshift/ovn-kubernetes/pull/2827)
* [OCPBUGS-65514](https://issues.redhat.com/browse/OCPBUGS-65514): [4.20] status manager: remove managedFields for deleted zone upon zone deletion [#2855](https://github.com/openshift/ovn-kubernetes/pull/2855)
* [OCPBUGS-65951](https://issues.redhat.com/browse/OCPBUGS-65951): [release-4.20]: Fix linter issues, add missing cheryy-pick bits of #2844 [#2866](https://github.com/openshift/ovn-kubernetes/pull/2866)
* [OCPBUGS-65618](https://issues.redhat.com/browse/OCPBUGS-65618): [release-4.20] OCP4: 4.18.22 EgressIP Failover does not succeed - extended downtime and no reassignment between egress-capable peers [#2865](https://github.com/openshift/ovn-kubernetes/pull/2865)
* [OCPBUGS-65605](https://issues.redhat.com/browse/OCPBUGS-65605): add lint target to run golanci natively [#2856](https://github.com/openshift/ovn-kubernetes/pull/2856)
* [OCPBUGS-64697](https://issues.redhat.com/browse/OCPBUGS-64697): [release-4.20] Referencing pod named ports within a service results in bad DNAT rules containing tcp/0 target port [#2844](https://github.com/openshift/ovn-kubernetes/pull/2844)
* [OCPBUGS-63686](https://issues.redhat.com/browse/OCPBUGS-63686): Fix stale EIP assignments during failover and controller restart [#2835](https://github.com/openshift/ovn-kubernetes/pull/2835)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/c7e12ae3e00d8fdc6744815370e450bcc68c0dac...3f6615b1bb18ff1841fe4596bd32cb91bc2854e6)


### [tests](https://github.com/openshift/origin/tree/e2a089fdea4ee23487994478c08ae0901ae5f1ee)

* [OCPBUGS-72395](https://issues.redhat.com/browse/OCPBUGS-72395): Unrevert TLS tests with fixes [#30668](https://github.com/openshift/origin/pull/30668)
* [OCPBUGS-72412](https://issues.redhat.com/browse/OCPBUGS-72412), [OCPBUGS-72413](https://issues.redhat.com/browse/OCPBUGS-72413): only run Netpol two at a time [#30666](https://github.com/openshift/origin/pull/30666)
* [OCPBUGS-69686](https://issues.redhat.com/browse/OCPBUGS-69686): BeforeEach was indirectly called in DetermineReleasePayloadImage [#30620](https://github.com/openshift/origin/pull/30620)
* [OCPBUGS-66072](https://issues.redhat.com/browse/OCPBUGS-66072): [release-4.20] net(virt) remove virtctl if not correctly retrieved [#30538](https://github.com/openshift/origin/pull/30538)
* [OCPBUGS-64836](https://issues.redhat.com/browse/OCPBUGS-64836): back-port IP & MAC conflict detection e2e tests [#30414](https://github.com/openshift/origin/pull/30414)
* [OCPBUGS-66963](https://issues.redhat.com/browse/OCPBUGS-66963): Fix MachineConfigNode test in two-node fencing clusters [#30540](https://github.com/openshift/origin/pull/30540)
* [OCPBUGS-66365](https://issues.redhat.com/browse/OCPBUGS-66365): update watch request limits for marketplace-operator [#30569](https://github.com/openshift/origin/pull/30569)
* [OCPBUGS-66979](https://issues.redhat.com/browse/OCPBUGS-66979): Revert "OCPNODE-3912: Add a test for NodeSizing default change to OCP 4.20" [#30582](https://github.com/openshift/origin/pull/30582)
* [OCPNODE-3912](https://issues.redhat.com/browse/OCPNODE-3912): Add a test for NodeSizing default change to OCP 4.20 [#30467](https://github.com/openshift/origin/pull/30467)
* [OCPBUGS-64777](https://issues.redhat.com/browse/OCPBUGS-64777): [release-4.20] Add e2e tests for storage network policy [#30468](https://github.com/openshift/origin/pull/30468)
* [OCPBUGS-46422](https://issues.redhat.com/browse/OCPBUGS-46422): Add test that the ServiceCIDR API is blocked [4.20] [#30434](https://github.com/openshift/origin/pull/30434)
* [Full changelog](https://github.com/openshift/origin/compare/1d3ad0d8f1696239bd98909e6f2864400607695b...e2a089fdea4ee23487994478c08ae0901ae5f1ee)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/65d066ab0940dc69aa3f7ec6b02e698a6e4f5795)

* [OCPBUGS-74901](https://issues.redhat.com/browse/OCPBUGS-74901): fix concurrent map writes [#208](https://github.com/openshift/vsphere-problem-detector/pull/208)
* [OCPBUGS-65795](https://issues.redhat.com/browse/OCPBUGS-65795): Fixed logic for vSphere compute cluster permission [#197](https://github.com/openshift/vsphere-problem-detector/pull/197)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/9d55c028b27bc63c687342f0b7172ce39e07ec5a...65d066ab0940dc69aa3f7ec6b02e698a6e4f5795)