# 4.21.27
Created: 2026-07-30 12:51:09 +0000 UTC
Image Digest: `sha256:aaeee8b27a23a8a8923ca2f37dfeabac3c716b4fbecb249f91d0b377323c87b1`
## Changes from 4.21.19
### Components
* Kubectl 1.34.1
* Kubernetes upgraded from 1.34.8 to 1.34.9
* Kubernetes Tests 1.34.1
* Red Hat Enterprise Linux CoreOS 10.2.20260521-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: |
| GatewayAPIWithoutOLM
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed) |
### Rebuilt images without code change
* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [070f654b](https://github.com/openshift/assisted-installer/commit/070f654bf5003765d3d00ab1811ef5ad111a5d4a) `sha256:8948aaf20921f0a0953ef5965eefd6f33620f46b01d75c93e8ef62aabbb59b09`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [070f654b](https://github.com/openshift/assisted-installer/commit/070f654bf5003765d3d00ab1811ef5ad111a5d4a) `sha256:8872066563d7d6500f3a98d86fb6f57581a21719ea95489a2061fced7cbaca9f`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [35ba137a](https://github.com/openshift/apiserver-network-proxy/commit/35ba137ab96d01f0b8df729ff5ad93ac2fdad800) `sha256:2eee6122122f76102f9507708643e56e857e3cd7cc76a7c1c988af197c4ec33e`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [fdc7f3f1](https://github.com/openshift/cloud-provider-aws/commit/fdc7f3f15c693593cb573b6bef6f0363256b6f52) `sha256:7d3f970b20297b3bc1479c50d23d9cf07b493af6362849f86b932334ff7d8319`
* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [10ceef5e](https://github.com/openshift/cluster-api-provider-aws/commit/10ceef5e6f6d0cb79a3345de4fd8851f6300205c) `sha256:ed49fc1cca83da2fabc05c81d5d3151a77027ee797c13ca5d1fc2eb9c07e0f93`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [1d8cec7d](https://github.com/openshift/aws-ebs-csi-driver/commit/1d8cec7d0eeedf1497c3ee6c32ee3391ebb13709) `sha256:4f4e68ac3586ee0ddbfabbfce03dd7f8c78c77252441975328c7d87d54b162cf`
* [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator) git [20bb13fa](https://github.com/openshift/csi-operator/commit/20bb13fab3865444b7a4ae454dd234391c4d7e49) `sha256:a65ab47ed94ccd7bff7518ebea8fdb642fff9c6067ba1b2abd0af38733286813`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [ff9c8d4e](https://github.com/openshift/aws-karpenter-provider-aws/commit/ff9c8d4e8fdc55d3e60c6add0942c018826ae870) `sha256:9eb58a438e0fdadddaacb99646f00688a28727d497692dd6b99f378ae45946d1`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [887615ff](https://github.com/openshift/aws-encryption-provider/commit/887615ffa8a595ee3693e92fa56db4dd30f20f73) `sha256:498f15c616d1e3abbefaefaa9e5a7b116ef88c0c3a00fe75e25723dba79f53f5`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [938565c9](https://github.com/openshift/machine-api-provider-aws/commit/938565c9f796fba385c0978a5ae1cc0a79f0f857) `sha256:310bf10a88ffa26ea0f98ae53f466746f336513788462e8b15205aca74deff3c`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [5cd42ed1](https://github.com/openshift/aws-pod-identity-webhook/commit/5cd42ed1e5151f45f0134593e9cfebdb6517b385) `sha256:81174578c8878eac590e41731dde1f4f59f4df1f05fc0179a47297486ae2b6d2`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [ebf58aac](https://github.com/openshift/cluster-api-provider-azure/commit/ebf58aac3fc6746fe2037f2166f1226b73b424f4) `sha256:b3dfd984a8792051209b16e8cc3b5d1f813b143390601ce378bedd77bc38aa01`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [aed3ad0d](https://github.com/openshift/azure-disk-csi-driver/commit/aed3ad0d7780188dbfb7ae67a5d69118b7d74556) `sha256:9293e05923830360261fd53c67348411963df2e5646cd109aea65c831da41b2f`
* [azure-disk-csi-driver-operator](https://github.com/openshift/csi-operator) git [20bb13fa](https://github.com/openshift/csi-operator/commit/20bb13fab3865444b7a4ae454dd234391c4d7e49) `sha256:c9b6cab3b5a375c673852feef631f83d7e6ccdd47cc5c804459d934fc6e9b89b`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [45061e97](https://github.com/openshift/azure-file-csi-driver/commit/45061e97a5e2b20b01cd55fee97e5dac43fd79e4) `sha256:0224df20416b3601a5f99dac1a9256906638ed27199168ffea3f84323d7cc133`
* [azure-file-csi-driver-operator](https://github.com/openshift/csi-operator) git [20bb13fa](https://github.com/openshift/csi-operator/commit/20bb13fab3865444b7a4ae454dd234391c4d7e49) `sha256:dd1a2e25d5d0c37c0d598810ca62aacf13623720d16461b0c985b656eb50ba8a`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [21e0a215](https://github.com/openshift/azure-kubernetes-kms/commit/21e0a215b7e5b31eaa75027e0df9eee943e48323) `sha256:7c19fce5621afd340d6184db29faf272c12b49877ff305b9ee266a675405c164`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [5e84c831](https://github.com/openshift/azure-service-operator/commit/5e84c83176d7630f70802b35cb10cdf2b60fd6d3) `sha256:d040c501c0a1ceda1ab60c58f2fbf4eb99b83a9539982f81abfd82d97b0ea2d4`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [659138fe](https://github.com/openshift/cluster-api-provider-metal3/commit/659138fef3abd4c71b0b01fa1279146745699a5a) `sha256:03206192164ad681eca53c8cf45b509d1b9bdbf6b9edc53df72f7028cd9b82d4`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [4e6a729c](https://github.com/openshift/cluster-api-provider-baremetal/commit/4e6a729c5ac8fde8859db5830def262dfdee28ea) `sha256:572ff50f786d5f8cf36b1401387b725921ffd279ef00200f1448165fa70ec7f9`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [d7e3fc12](https://github.com/openshift/baremetal-runtimecfg/commit/d7e3fc12bd9dc911f0fac4c9a46b814c7be62b14) `sha256:389b40a7b79136ceba40848ade722f0b587e8ee9f474669e087bb264f51036f0`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [57db2d05](https://github.com/openshift/cloud-network-config-controller/commit/57db2d05e057dc90bae3dc1b0e806b3259d38fc0) `sha256:0b67449fa1ba56fcf7768c776bccb6647929ddd1646e0a91e2a85aeefc83f376`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [65eb4b21](https://github.com/openshift/cluster-authentication-operator/commit/65eb4b2193d0860c1c1f45b08ea7203694db909f) `sha256:4bba3d30bb5e9f1ddbb197246d517b2f08d0e57624fc128c8e7b23c7f2700458`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [838a5957](https://github.com/openshift/kubernetes-autoscaler/commit/838a5957d0bebc33c7a0a8a7efd4f5dcb4098286) `sha256:6876a39b7ec6bda3bc72d921c0754f40e05fca614048b7bcdd313ba80665e650`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [dec12ba6](https://github.com/openshift/cluster-autoscaler-operator/commit/dec12ba632a4810b4ff43a9172f462a1dd291e44) `sha256:fa72878e2df5b802669860ba785d7cdd8adf33f25376797a02c60802fa03fbc6`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [dc0d4a5c](https://github.com/openshift/cluster-bootstrap/commit/dc0d4a5cdaf8a7477cab584208dc99352f46efe2) `sha256:f5e1ff6d8ba75d343f7c1d56ff25a00c4234ccac9fdc61b0c42bd29826941d78`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [9dd5eba0](https://github.com/openshift/cluster-api/commit/9dd5eba07922bb84bf1ec2b16cbbedd6ad195874) `sha256:eb9e391c93a3fc1cc6496820b3f5c8a218e5f06f7e9007294a1d6a892eb21f0a`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [f9513d32](https://github.com/openshift/cluster-capi-operator/commit/f9513d3255926b63185a5b5203126699925133c3) `sha256:4110f3220a45e859070541b662b16b59d0c18fd526142651afa2d30aba7694f2`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [6148c0cc](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/6148c0cca626bcf0bfebcc6dd0c77a41944cba87) `sha256:6a237f0c85fd0613df0a3db2eef3fe2689b616eb4ccc6a1e635218385a0c1d00`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [1eb450a3](https://github.com/openshift/cluster-config-operator/commit/1eb450a3a2456f6e3fe3d727208b5f7b0dd35aba) `sha256:c5531a417aad906f9e1b8fb743a16b3e08ffd8200812067b0df86da75919bf0d`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [2dde33fb](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/2dde33fb94aae47b460a5f6a672d06c9ee4225d8) `sha256:ba311978ff07a079fcd06a0f208efddc319abe4a91153a879c9098c6de3dbe50`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [8c1ebc60](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/8c1ebc60a2014ab925cbad6ef255e06ea0bd72b4) `sha256:c343c95a3f251db39bddf130fbeefe61e90c73377ce71b84195d954b305c750e`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [41a53fed](https://github.com/openshift/cluster-dns-operator/commit/41a53fed36e6e99c7c9ceb3a699c3547ee5d9bb9) `sha256:ba48102acdc1a271000f9b2deab8b9e5e580e876ec74bdc6dc448b73d772ac80`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [b2dfc3bb](https://github.com/openshift/cluster-image-registry-operator/commit/b2dfc3bba3dfd8dba90918a4a3be74deb3c548dd) `sha256:9b8e3b930dffb12eed5f9db0397b2b039647e7e40d3fff1372b186583a587bfa`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [395de967](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/395de96705749de9c6a5f25747b9d5c3d5f65a8f) `sha256:18e664670b28ed102f4cb89404c8b437de3db63b211507dba1189b290519fc91`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [5ef1df3b](https://github.com/openshift/cluster-kube-scheduler-operator/commit/5ef1df3be41d38ddae9b3d22ce51ba486939e9f1) `sha256:da6aee629d31aef41a5a593223cb3cd27c61d5c95c6ca42ae570e7da45d44c7e`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [8a42beeb](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/8a42beebd580bd2e241aa6d93860c09e907f2407) `sha256:b97694b32923168492e733d614ff286e6729b1716b066e2070836da9f9efde4b`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [d864813c](https://github.com/openshift/cluster-machine-approver/commit/d864813cd3ab01c0f975b2bf41e9046948f0afa1) `sha256:cc22636ec004aebd90b0e5656e6e260ff28253e0076409171737fac27f8613a4`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [03bedb91](https://github.com/openshift/cluster-olm-operator/commit/03bedb913bce9c7deabf7868e5cbefc57cf3490b) `sha256:260cf2e0238cff6d54cab2c2b2e3cbb377b067423ffd58803761ccb000a9cbe3`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [52fd1773](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/52fd1773757b2c3ff497e7db084c3d71cde5478f) `sha256:13e761df138f50d93fcf0140c9b3561cb9be615826f764629ff3b5402849de79`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [2617a201](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/2617a201bb3607192a9f82faa18384676f611e3c) `sha256:6849eeb369f88ecf27ae5e46d35bb935aab6e7e88e7cf8c64de0ab2374f41575`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [11ed1942](https://github.com/openshift/cluster-samples-operator/commit/11ed1942dbbf7a8334862b3d598a967e9b92aa77) `sha256:ef294b474349b3f9915b55f320ef34ea47b136ec98e793bbf4bfacac0d0df545`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [e4034751](https://github.com/openshift/cluster-storage-operator/commit/e403475164a4de23d358a93106a35353ec29f3d7) `sha256:593628076e90e0eb85a2e10011a0eca6d8e88447cefb88cdceae5af76beba7fe`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [b3cae8f2](https://github.com/openshift/cluster-update-keys/commit/b3cae8f22b51d9062d0ceb6ac9cf2f7651b4ce8f) `sha256:0684567b04b92054062b0c85042affc66fa89b60abccb79ac2b1582f1afd8380`
* [cluster-version-operator](https://github.com/openshift/cluster-version-operator) git [d37e5a05](https://github.com/openshift/cluster-version-operator/commit/d37e5a056d5a9c74c2ac2d5551ef39f573c9824a) `sha256:bc79a04f7771f15d92517c0560cd634330c8013171777a24c2ce5130c2569724`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [16114b8d](https://github.com/openshift/configmap-reload/commit/16114b8de20278b8f4b7a425ece6d35d53214773) `sha256:c4964b4f320a8dee048feefb6547589e92803098f8a5aaba11985e6440e22e3e`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:57a6e6b1ad959b398e3b812758ce86323a5e3d3287cb97634eb850017e0b3eb4`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:36343f8d12f235af463e58785c4087d13385eb3b7969c4ec76d2c170ef5da44a`
* [coredns](https://github.com/openshift/coredns) git [7486e9e4](https://github.com/openshift/coredns/commit/7486e9e4330c1e41d9a91e4673b7f2782efc112c) `sha256:c559a8b6ed1d68d37c052ffd4021cd9662fb126c574aa8bd136411f45fa5cfd2`
* [csi-driver-manila-operator](https://github.com/openshift/csi-operator) git [20bb13fa](https://github.com/openshift/csi-operator/commit/20bb13fab3865444b7a4ae454dd234391c4d7e49) `sha256:9120e631239ea51fb4ce16699448b0163e8cad53505e9a1e96e85b782bf07d0d`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [ebfd16d2](https://github.com/openshift/csi-driver-nfs/commit/ebfd16d227b3af490f4327a8a040f6c9657a3b01) `sha256:37396c8db8ba48a69ed0dc4b48216d037830855770e0cf72abe026242c329451`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [6a3be10e](https://github.com/openshift/csi-external-attacher/commit/6a3be10e6795c8149c4bd3c9856f7e2d312108e2) `sha256:00aa5c32b8e2f8c1e5566e3ebf7e6de4fd48e4a62a8afeb698da12498146343e`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [d880a1ec](https://github.com/openshift/csi-external-resizer/commit/d880a1ec6da02dbf61600ec7999266185ca9f784) `sha256:0e4da75970a7ab7473198ee4138aa63cbeb9ecf63fc7a81f324cbb9b999dee7a`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [af250fdb](https://github.com/openshift/csi-external-snapshot-metadata/commit/af250fdbac8af84d9808a2892bfc911c04162115) `sha256:855faf0b657d0ab9652d5cc18c184727448673c5bccf4b075ea641d0062b4b3d`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [78dacb7c](https://github.com/openshift/csi-livenessprobe/commit/78dacb7c661a62c78036c2737401afd3eb6fd04d) `sha256:b258def5813b689789292d11f671af9bf3b33fefe5e98dffa38fd6dacf9d2a6d`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [d29f3f7a](https://github.com/openshift/csi-node-driver-registrar/commit/d29f3f7a4aed4465e7e40e323bd3c0e0d9871e4c) `sha256:5f84661b880e4ea369b171c5784587000c75acff2b957d52bc75a5b15f88eee1`
* [docker-builder](https://github.com/openshift/builder) git [48fce231](https://github.com/openshift/builder/commit/48fce231bac118a63992f466acc8b29a29e1ddde) `sha256:75faed45ddd6aa7d8445849d5af6dfb83beb45aa9b71c88b307f711349ac7382`
* [docker-registry](https://github.com/openshift/image-registry) git [602f51c7](https://github.com/openshift/image-registry/commit/602f51c795dcdcd71c75f6abfe79dc0424a0476a) `sha256:c5e32b73298f5cdca055c2be00608ddbe1cf4a5eb5a3c61edbee79fbff32b12b`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [f0ae9d12](https://github.com/openshift/driver-toolkit/commit/f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad) `sha256:253a91b2de8c22c926c5431e89c04f033b00cff10771a41c895ca55045bcabb0`
* [etcd](https://github.com/openshift/etcd) git [806f690e](https://github.com/openshift/etcd/commit/806f690e1f140e0aea2eb05ef5f288b756b62895) `sha256:1bb4ce1de350c04449f72e5c08f5bb544b03c6cc41fb7c65c884c6d06b5f7c0a`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [e27accef](https://github.com/openshift/cloud-provider-gcp/commit/e27accef1fa99089410e4b0894db21a392d9bf99) `sha256:5e1f06a1d850c4f7df8a8babb0c30684c42cac40eb63c2cb68be5839206a7f13`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [fe230b8a](https://github.com/openshift/cluster-api-provider-gcp/commit/fe230b8a6407a06e1be9d6994a92ac8c5a43237d) `sha256:6f66f26559551e1893fffd9f52f39ceef2c7cd6a250206f0b44a4a1191782e45`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [49b8eb1b](https://github.com/openshift/machine-api-provider-gcp/commit/49b8eb1bbdd364b8144dee270a88cace41271e4d) `sha256:88c3070c909543070c3246481df49e9dc23b13e056d5c85136e44ddc97defa26`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [1da557fe](https://github.com/openshift/gcp-pd-csi-driver/commit/1da557fe54562347dbf18bee04fe6564a2697707) `sha256:4229c2645259afd429586c9b1072713650e63541b53026f0b8fb4380c8084936`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [d481e5cb](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/d481e5cb9323b01964bf143b58403b62fa31e5e7) `sha256:1137d09793ac6f3416e3556c2de9588630383483f0ac062954632c56e3a7bcb0`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [c566572b](https://github.com/openshift/cloud-provider-ibm/commit/c566572b2cf0120499e81181f1efb1e729e9c418) `sha256:a29791c24cccdb821a9f77337703ed73eba056f9256cf339e61b6880150b2d5a`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [f0baa47e](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/f0baa47e75ab0bef0ec56ab48d9a725e00f6b40f) `sha256:9c1400589464cf2fc60cd25003c2e49681706b5db67d28658a4641a97c8cdc40`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [00bc7407](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/00bc740728d9f8ec86fe04199884108c2a091b58) `sha256:34d42d582e044982ab7d270b263e139ed776f4e27380457a582c037e2c4e94c2`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [f7e3ec30](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/f7e3ec30f746add35458fad54dd6bccb97e307bf) `sha256:3f9c3a3f3b3672410d7d972f2853a9c5583afdb699dcb433307bacc193fcf95b`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [f80ea321](https://github.com/openshift/machine-api-provider-ibmcloud/commit/f80ea3216387639dde6550a70a6e08599fd67f5f) `sha256:f5cc2f0c1370dc951ecc6d59b8e681b8b7f4ead36d3030cec752994cfab51d1d`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [8c41cb86](https://github.com/openshift/insights-runtime-extractor/commit/8c41cb8680f29a915d33e4954fc5ff7f5352411b) `sha256:dfda017b1231005c7c8f28db49e2b91e43351deaa315a507d9149f79dd29aa5b`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [8c41cb86](https://github.com/openshift/insights-runtime-extractor/commit/8c41cb8680f29a915d33e4954fc5ff7f5352411b) `sha256:c5ea19f6c099b41a04111213808cc0e9dd974166a5a55ddc235364ab12533093`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [707c2262](https://github.com/openshift/ironic-rhcos-downloader/commit/707c226243ac401f2994952fe0e55823511111b0) `sha256:8ff8d3dd33f1646db2db4c2ff6a56b43ec0af3b9535b50aa91a2af232a1a2c0a`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [b95b05fe](https://github.com/openshift/ironic-static-ip-manager/commit/b95b05fe0ba17255ef61e92d4167ca4c9de789b8) `sha256:615f974597a335d9951a66300a2314a26eb1171d097c7230f0c2ec830c9f537b`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [ff4f3e2a](https://github.com/openshift/kubernetes-metrics-server/commit/ff4f3e2a6d2b0e8a860831b98733cff152cfddd3) `sha256:107d7aabae9179f8190d7cb12efd7a2345d38a14f02d6bcabd67f3feae352f2d`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [cd636680](https://github.com/openshift/kube-rbac-proxy/commit/cd636680e06a55395c26570dff0cb37277014388) `sha256:e95530b29d67116f085ed2a9124cb098950ee1373760eef4ae9ea1d124739789`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [ce5ff17e](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/ce5ff17e9a81ce754567e6dd5053d13409c251e9) `sha256:daee8966fd829389c6d8aff5d82992fc914c0a6350300667d28a0f461742aab7`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [1e6fdd66](https://github.com/openshift/cloud-provider-kubevirt/commit/1e6fdd6615a55fc449b3e7ad2d6e92a27d30a934) `sha256:b4acbc095424db65cd69b481c89176a93ce6862b59f43e85ede50957aa5474e3`
* [machine-api-operator](https://github.com/openshift/machine-api-operator) git [88f39dc9](https://github.com/openshift/machine-api-operator/commit/88f39dc939cceb2c1999f2b0ab99f1118f26358f) `sha256:7340f3c275b2c975d63c82b1d8d68fb321082e92ddbc2a4622c5ddc06d7c259e`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [65aeb360](https://github.com/openshift/image-customization-controller/commit/65aeb3607f05dd71ec27a4457945ce1e054ea9e9) `sha256:f974886edcf87ae4600d90b587b50c56bbeaeb44029eaaa9838c24eb1e1e4521`
* [metallb-frr](https://github.com/openshift/frr) git [c82bfaad](https://github.com/openshift/frr/commit/c82bfaad01b196e12f00622a9a609d87e0a56701) `sha256:3ed04852d125d64549f9e71c5b3019dc616bac8dc8eb442d0ee31b44811895d2`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [d95feb67](https://github.com/openshift/multus-admission-controller/commit/d95feb67adfb97346849c79e36b6a9d404296ae9) `sha256:4206ff109332fac5912354070ca821483ad47ad26a4e64946c1c05c695d45fd8`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [e9f2f3c7](https://github.com/openshift/multus-networkpolicy/commit/e9f2f3c7e81683af3b8cc9a5a3166434c94e0498) `sha256:a851525ffdd1aaf3da821a6e37b9286ec884dd528ecfdf4457f98fdd445f9b6e`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [08af4127](https://github.com/openshift/route-override-cni/commit/08af4127c77976510cad1c096d9aca977d8ae5af) `sha256:1928aae331498fc3438dc2746c5d458921d25fdf542e0b7b16eee60f4fc1122a`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [d691040e](https://github.com/openshift/whereabouts-cni/commit/d691040e509bb20c26b5e8366c0d6f3bb45a5e02) `sha256:db9c3ebf83ec092b2884f2f397d33a84d650f8f78613299e95352561d03d80a6`
* [must-gather](https://github.com/openshift/must-gather) git [eeb267f4](https://github.com/openshift/must-gather/commit/eeb267f4b7f8016f13d12866013cad43c7403482) `sha256:448d5727577ce3373160a6010cdd8583f8e9086bbd1e5567eea3d9310a51a4ee`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [297eeb43](https://github.com/openshift/bond-cni/commit/297eeb4320e07b18d559bc373b665479c760e8c7) `sha256:0657185ecc77ae017b514bb242f3af93f8fcc7d6a420dd4e41604253de113dd6`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [844fa588](https://github.com/openshift/network-metrics-daemon/commit/844fa588c4200b8ff768d1916d63f1d4c1db2daf) `sha256:6304788536f8a1ad0de919f219fd6976b67a348aba783884524962b88a7dcb08`
* [network-tools](https://github.com/openshift/network-tools) git [d6717e45](https://github.com/openshift/network-tools/commit/d6717e453a098d551c9e2d2868e1f5317c41e688) `sha256:8802fe445016e4b0acb313742bccb77529986702365d917b6043f5595bf3f50f`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [33b7bec6](https://github.com/openshift/cloud-provider-nutanix/commit/33b7bec6fe27b8d126982a70b4579112cd67052b) `sha256:cc7687162acf70e8a38f2621c6461fd0fbe419547f9d8731886f86810d8f60a1`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [b15a665c](https://github.com/openshift/machine-api-provider-nutanix/commit/b15a665cd9c12c5a7d2ac81b5330b6f446c3a8be) `sha256:6d52d869d16d9c7f393e388d23fca0dedb304e1a527bb05bd5419814f1e799a2`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [71c41b2d](https://github.com/openshift/oauth-apiserver/commit/71c41b2d8abb0c6ad90dca286baf5d03c1340646) `sha256:a6bea008df5c30d6561b6a793e6053998d722d3dd6b2812d1beccd949873b1b0`
* [oc-mirror](https://github.com/openshift/oc-mirror) git [f9812811](https://github.com/openshift/oc-mirror/commit/f9812811fdc23a9baa72f075afe566caddfe2280) `sha256:7ad0e78b0ba27a169fb0e3eab2a7daaa5961738557e6ceb6aecfb79b2f642ee6`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [438d52e7](https://github.com/openshift/openshift-controller-manager/commit/438d52e79d691e016d66eabfe9a53c84229db40c) `sha256:cbeaade76430defa45d9ac2fa758a03e568366ec2345b150d59c6dc81bf1cac6`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [ab605a4b](https://github.com/openshift/openshift-state-metrics/commit/ab605a4bf1c6cd5a6c58f245fb67ce648caebfa8) `sha256:3e18f1cd2071527fe3b9bb61e5a892805d39204e7698dbc8651efdc60e4aa022`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator) git [20bb13fa](https://github.com/openshift/csi-operator/commit/20bb13fab3865444b7a4ae454dd234391c4d7e49) `sha256:1b9ca15649563bf234d0d2b01ddcfcc6229a4f9b11e6f9834ea0d019591018a3`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [f4f439d4](https://github.com/openshift/cluster-api-provider-openstack/commit/f4f439d4ce40c1175188c81591284dcc9fe6facf) `sha256:8e0e69a5241d09be74256a796e1f718fa2f04c7ad28bc07ca9795900096d3abc`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [70f5ad34](https://github.com/openshift/openstack-resource-controller/commit/70f5ad34915041c82ad0a8ed6ea64bd8859d1e72) `sha256:5472829550078519c38f84eaa82801bbae2406c628a4e245cb645250dea22596`
* [operator-framework-tools](https://github.com/openshift/operator-framework-olm) git [149d553b](https://github.com/openshift/operator-framework-olm/commit/149d553b2057320d761c4d1913098a66787dd09a) `sha256:59471bf6a00d5b5d06964059e2842dc5915e4ddab555f8d32b9a1635ba31a734`
* [operator-lifecycle-manager](https://github.com/openshift/operator-framework-olm) git [149d553b](https://github.com/openshift/operator-framework-olm/commit/149d553b2057320d761c4d1913098a66787dd09a) `sha256:6d796cc166163f3cab406769d7d7915ef866dd21c80564d9c65918810dcda27f`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [efb1a1ea](https://github.com/operator-framework/operator-marketplace/commit/efb1a1ea40bc1ed3a439812cfdaa3013b80e96ce) `sha256:60939c5411f9400147b73baae347735ae6db695f05c4510c6a21639d73f64f38`
* [operator-registry](https://github.com/openshift/operator-framework-olm) git [149d553b](https://github.com/openshift/operator-framework-olm/commit/149d553b2057320d761c4d1913098a66787dd09a) `sha256:f4fc2fa675544b028a876f625650bc7f9ab4fe9c818333db2056362aacf6937a`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [114fe692](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/114fe69249450f3bec773cba2956a8c06e7b0da9) `sha256:c3b3b6742d0fca3fc6b4d594a749a590e63a717a75493b805d11fd3593d86933`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [b714ab87](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/b714ab87d079db5ef3c4097520db40cd289b025e) `sha256:fcc3c1494eca7cf1b4f5505e8a50a23ae7dc2e095f967c2d0f06837738940cf0`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [40d1c0ad](https://github.com/openshift/cloud-provider-powervs/commit/40d1c0adfedeca36498a5d93d69aee96831c756d) `sha256:1ba1f374f4dc7c67f22d6ce0bed8668322c7d22b8cf6f4a279dc57b121ad9a5e`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [551974ef](https://github.com/openshift/machine-api-provider-powervs/commit/551974ef93dedb1b9677a778e1533391448e0c56) `sha256:9e134585bf7b39b65da9a6dab9140cbdceb78a7269cdf38c065bcb7a743f77cb`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [610c11b5](https://github.com/openshift/prom-label-proxy/commit/610c11b59dd17f1d6dc35b62ca1d0602b5c0f494) `sha256:707b590d5c5c8d3d628f12a3d5e8ed88f98058c45caa8447863c6d32cf4c47b9`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [3de9763f](https://github.com/openshift/prometheus-operator/commit/3de9763f36128ffa8b25a63c9447f6d64114c270) `sha256:57d0ef704856fac604aa774f2e0818d7a0b9fb55a33d4b8e22842258e3ed9008`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [39d72873](https://github.com/openshift/node_exporter/commit/39d728735779afef886bc10a8bc7cf72f54d51a0) `sha256:4d3b6b3ac3be892a704d55816607e890a355edb0db332ebb2a5f1fd1c342f40b`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [3de9763f](https://github.com/openshift/prometheus-operator/commit/3de9763f36128ffa8b25a63c9447f6d64114c270) `sha256:f852dd5d5b3cc64bb41a48f4b4dbc9f123e5de3481b35c8c80020f121409d275`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [3de9763f](https://github.com/openshift/prometheus-operator/commit/3de9763f36128ffa8b25a63c9447f6d64114c270) `sha256:30581abf86c832134c63377c985686378b72c003a6d3de49e94a2ae23e18b038`
* [rhel-coreos](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:cdd620c4b31523a0a9c957784bbbf9fc2ed7bd1a8ad44ebdebb49beebbe26803`
* [rhel-coreos-10](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:1221ac96778474fcb25cabf55ef84c997d59d76b2dcd16e8aec5f0cb8e8890de`
* [rhel-coreos-10-extensions](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:b169f85293b1945c4a06895b774891558339d6b6866ec65f068d75012b57d5d5`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:b6edd7e87cc9f4fa698eeeca2f0f84fbf29ff9f1a7fbd10b31dbc3c8b509739e`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [166a3e96](https://github.com/openshift/route-controller-manager/commit/166a3e96f8151d9e789b3951ae75b03cdede5081) `sha256:ae161d4da077b351e2bf71b4789a8bbd7be25a4b4418b296430e040f8fc7a2db`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [e9622ba1](https://github.com/openshift/service-ca-operator/commit/e9622ba18c86bf24aceab0c19fdcb87339c14f44) `sha256:9bf1165c0f9fd9156a8e4c83120bb98ff64512ed737cdb22a99e26d05297b59b`
* [telemeter](https://github.com/openshift/telemeter) git [b79b872a](https://github.com/openshift/telemeter/commit/b79b872a65edd845891db70f6c9a184458a178da) `sha256:fe9d8f31be77ccd24e771ee33ad7b9825f18d0bb38f2b0ec100cf98c39e4fb3f`
* [thanos](https://github.com/openshift/thanos) git [afeb1c85](https://github.com/openshift/thanos/commit/afeb1c85ba9ee06676a0e657bfa4f4139ccc47b3) `sha256:b9e31edfac61b06f85b15f569078df230386edf8ab1363ea99805a50b46f3749`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [8b929332](https://github.com/openshift/volume-data-source-validator/commit/8b9293323cf8fdce93824e37168573ca3f73de3a) `sha256:91f9cbc49330e3dd0f39ba1c63d5da57dbebcdeae41ed9918b70533cdb3850e3`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [f69584d6](https://github.com/openshift/cloud-provider-vsphere/commit/f69584d6ed7411504b0fff77eb36d0fd64f0fd5e) `sha256:a106ae710d49b62ecc306cbc6793b05f0992b309f5e20c3b88926cd3ea90a0c9`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [3adfe2b5](https://github.com/openshift/cluster-api-provider-vsphere/commit/3adfe2b56b259b2d27906d8772354f817e338da5) `sha256:9f43928f86882c49e263b26b4f8990f9f56f423298a722c8318eea402cbf382e`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [69e1c6ed](https://github.com/openshift/vmware-vsphere-csi-driver/commit/69e1c6ed3201efc16bcd320cf558aa8fe869ec69) `sha256:f1727a675e4250feb66b831ad1354c10b31b9a8f034620122ca887c579315596`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [d6a19449](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/d6a19449cc5d49541221d48d62c67d7a48142d19) `sha256:41464c0f45fcb4ff1b20f1ab4bf9052d589811d6208ecaabee7e0b95501fae2a`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [69e1c6ed](https://github.com/openshift/vmware-vsphere-csi-driver/commit/69e1c6ed3201efc16bcd320cf558aa8fe869ec69) `sha256:3ace418e88c977b7d6a88dc6c42ea2bd31f46b1c81784412ca391408076c2bde`
### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/c343c325944592570613d582e7d07ae35f5863dd)
* [OCPBUGS-92012](https://issues.redhat.com/browse/OCPBUGS-92012): Add sourcedir /run/chrony-dhcp to generated chrony.conf [#10510](https://github.com/openshift/assisted-service/pull/10510)
* [OCPBUGS-86856](https://issues.redhat.com/browse/OCPBUGS-86856): Fix loki and logging [#10425](https://github.com/openshift/assisted-service/pull/10425)
* [Full changelog](https://github.com/openshift/assisted-service/compare/a88966fd44394937c070dd9007e56ab4b4ace922...c343c325944592570613d582e7d07ae35f5863dd)
### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/1d5163811da9ec9eaeea69c252c9495889f624a9)
* [OCPBUGS-85041](https://issues.redhat.com/browse/OCPBUGS-85041): add --copy-network when manual network config is detected [#1446](https://github.com/openshift/assisted-installer-agent/pull/1446)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/e57138265957c81b33d3ac13078d35f6ca07069d...1d5163811da9ec9eaeea69c252c9495889f624a9)
### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/a5c154ef58ffba5d7b42e48979d593217a5a97c6)
* [OCPBUGS-99307](https://issues.redhat.com/browse/OCPBUGS-99307): 4.21 agent-installer OVE installation fails due to custom-manifests (#3914) [#3914](https://github.com/openshift-assisted/assisted-installer-ui/pull/3914)
* [OCPBUGS-91632](https://issues.redhat.com/browse/OCPBUGS-91632): Bump ws to 8.21.0 for CVE-2026-45736 (#3905) [#3905](https://github.com/openshift-assisted/assisted-installer-ui/pull/3905)
* [OCPBUGS-98269](https://issues.redhat.com/browse/OCPBUGS-98269): Bump tar to 7.5.19 in 4.21 (#3893) [#3893](https://github.com/openshift-assisted/assisted-installer-ui/pull/3893)
* [OCPBUGS-98435](https://issues.redhat.com/browse/OCPBUGS-98435): Bump js-yaml to 4.3.0 in 4.21 (#3877) [#3877](https://github.com/openshift-assisted/assisted-installer-ui/pull/3877)
* [OCPBUGS-89700](https://issues.redhat.com/browse/OCPBUGS-89700): bump form-data to 2.5.6 and 4.0.6 via scoped resolutions to address CVE-2026-12143 (#3878) [#3878](https://github.com/openshift-assisted/assisted-installer-ui/pull/3878)
* Update OWNERS file (#3882) [#3882](https://github.com/openshift-assisted/assisted-installer-ui/pull/3882)
* Apply patches (#3875) [#3875](https://github.com/openshift-assisted/assisted-installer-ui/pull/3875)
* patch CVE-2026-9277 and CVE-2026-42338 via yarn resolutions (#3853) [#3853](https://github.com/openshift-assisted/assisted-installer-ui/pull/3853)
* [OCPBUGS-88390](https://issues.redhat.com/browse/OCPBUGS-88390), [OCPBUGS-88411](https://issues.redhat.com/browse/OCPBUGS-88411): Bump axios to 1.18.1 (#3858) [#3858](https://github.com/openshift-assisted/assisted-installer-ui/pull/3858)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/0b264c7f6c227a2ea4d1392879bce555d087dac0...a5c154ef58ffba5d7b42e48979d593217a5a97c6)
### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/974dca83df8d440dc9435f5a6ba29f3834ea1309)
* [OCPBUGS-99907](https://issues.redhat.com/browse/OCPBUGS-99907): Update Konflux references [#304](https://github.com/openshift/agent-installer-utils/pull/304)
* [OCPBUGS-99647](https://issues.redhat.com/browse/OCPBUGS-99647): Use agent-preinstall-image-builder from quay-proxy [#322](https://github.com/openshift/agent-installer-utils/pull/322)
* [OCPBUGS-98628](https://issues.redhat.com/browse/OCPBUGS-98628): Increase time for Konflux on-push job [#318](https://github.com/openshift/agent-installer-utils/pull/318)
* [OCPBUGS-98628](https://issues.redhat.com/browse/OCPBUGS-98628): Increase resources for syft [#317](https://github.com/openshift/agent-installer-utils/pull/317)
* [OCPBUGS-98628](https://issues.redhat.com/browse/OCPBUGS-98628): Update Konflux version to 4.21.24 [#314](https://github.com/openshift/agent-installer-utils/pull/314)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/dc0bd0906fc9868a65cc9488a7dbdd0f35ca4a23...974dca83df8d440dc9435f5a6ba29f3834ea1309)
### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/c9afac2fda20f18d786271340826c628f5419150)
* [OCPBUGS-80738](https://issues.redhat.com/browse/OCPBUGS-80738), [OCPBUGS-80739](https://issues.redhat.com/browse/OCPBUGS-80739): Bump google.golang.org/grpc to v1.79.3 [#178](https://github.com/openshift/cloud-provider-azure/pull/178)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/83b3f9ec7df408c3d53d5f8e6fe84e0bdd4398e8...c9afac2fda20f18d786271340826c628f5419150)
### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/782f0ab6a2636aef0f699cfe7a49e8fadefb9807)
* [PIXAA-7](https://issues.redhat.com/browse/PIXAA-7): Leverage SpotRebalanceRecommendation for instance termination when available [#199](https://github.com/openshift/machine-api-provider-azure/pull/199)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/b8b8cb1c5af7d2a3ef9a4a99a0739a2166a7932c...782f0ab6a2636aef0f699cfe7a49e8fadefb9807)
### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/ae8ffaf0b4a893e9b38fb4007de3cef8492b71f3)
* [OCPBUGS-81978](https://issues.redhat.com/browse/OCPBUGS-81978): Bump go-jose/go-jose/v4@v4.1.4 [#50](https://github.com/openshift/azure-workload-identity/pull/50)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/3f2a6e0d1ea68af321f9674b0b097939be7d2014...ae8ffaf0b4a893e9b38fb4007de3cef8492b71f3)
### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/129c91fe1aad20fee24160703a27ef387048de88)
* [OCPBUGS-76552](https://issues.redhat.com/browse/OCPBUGS-76552): Revert storage account API version for client [#10296](https://github.com/openshift/installer/pull/10296)
* [OCPBUGS-87815](https://issues.redhat.com/browse/OCPBUGS-87815): [release-4.21] Add omitempty to vSphere and Nutanix MachinePool slice fields [#10607](https://github.com/openshift/installer/pull/10607)
* [OCPBUGS-88740](https://issues.redhat.com/browse/OCPBUGS-88740): Update RHCOS-release-4.21 data/data/coreos/rhcos.json to 9.6.20260616-0 [#10651](https://github.com/openshift/installer/pull/10651)
* [OCPBUGS-81986](https://issues.redhat.com/browse/OCPBUGS-81986): Bump go-jose/v4 to 4.1.4 [#10598](https://github.com/openshift/installer/pull/10598)
* [OCPBUGS-77049](https://issues.redhat.com/browse/OCPBUGS-77049): Update RHCOS-release-4.21 bootimage metadata to 9.6.20260520-0 [#10579](https://github.com/openshift/installer/pull/10579)
* [Full changelog](https://github.com/openshift/installer/compare/3f855c5bbfa977e040bfe98776299a6afa798674...129c91fe1aad20fee24160703a27ef387048de88)
### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/d5c58b32e71e0e979e190b40a3804d012509d93b)
* [OCPBUGS-97982](https://issues.redhat.com/browse/OCPBUGS-97982): Add BMH finalizer on PreprovisioningImage [#506](https://github.com/openshift/baremetal-operator/pull/506)
* [OCPBUGS-87964](https://issues.redhat.com/browse/OCPBUGS-87964): Fix preprovisioning network Secret lifecycle during BMH deletion [#492](https://github.com/openshift/baremetal-operator/pull/492)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/0aeba7af56b884fadf7f7209d7557e6214b9f49c...d5c58b32e71e0e979e190b40a3804d012509d93b)
### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/0276efa6de22b45e3c2915423fd203555382ff1c)
* [OCPBUGS-98550](https://issues.redhat.com/browse/OCPBUGS-98550): bump x/crypto to the latest version [#2310](https://github.com/openshift/oc/pull/2310)
* [Full changelog](https://github.com/openshift/oc/compare/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b...0276efa6de22b45e3c2915423fd203555382ff1c)
### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/bd0a5785a37eeccedb3ba357eb4254860acd6ef4)
* NO-JIRA: Revert "OCPBUGS-87110 Scope minted AWS IAM policies to cluster-owned resources" [#1060](https://github.com/openshift/cloud-credential-operator/pull/1060)
* [OCPBUGS-87110](https://issues.redhat.com/browse/OCPBUGS-87110): Scope minted AWS IAM policies to cluster-owned resources [#1046](https://github.com/openshift/cloud-credential-operator/pull/1046)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/154ae10f442b7d40f14492c5973cd3459791d00f...bd0a5785a37eeccedb3ba357eb4254860acd6ef4)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/13af370f526ab7541a8a73aa0d94952496ccca58)
* [OCPBUGS-88481](https://issues.redhat.com/browse/OCPBUGS-88481): Fix empty IRONIC_BASE_URL [#614](https://github.com/openshift/cluster-baremetal-operator/pull/614)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/18e163a4c14db692938da08b7bec821d483945f9...13af370f526ab7541a8a73aa0d94952496ccca58)
### [cluster-config-api](https://github.com/openshift/api/tree/1cb630ce7109e6c4780332bb8140c8c4f7157426)
* [OCPBUGS-98251](https://issues.redhat.com/browse/OCPBUGS-98251): add new serviceAccountToken fs type [#2924](https://github.com/openshift/api/pull/2924)
* [OCPBUGS-78330](https://issues.redhat.com/browse/OCPBUGS-78330), [OCPBUGS-82146](https://issues.redhat.com/browse/OCPBUGS-82146), [OCPBUGS-85550](https://issues.redhat.com/browse/OCPBUGS-85550), [OCPBUGS-88295](https://issues.redhat.com/browse/OCPBUGS-88295), [OCPBUGS-88297](https://issues.redhat.com/browse/OCPBUGS-88297): NE-2480: Promote GatewayAPIWithoutOLM feature gate to Default [#2865](https://github.com/openshift/api/pull/2865)
* [OCPBUGS-78330](https://issues.redhat.com/browse/OCPBUGS-78330), [OCPBUGS-82146](https://issues.redhat.com/browse/OCPBUGS-82146), [OCPBUGS-85550](https://issues.redhat.com/browse/OCPBUGS-85550), [OCPBUGS-88295](https://issues.redhat.com/browse/OCPBUGS-88295), [OCPBUGS-88297](https://issues.redhat.com/browse/OCPBUGS-88297): Promote GatewayAPIWithoutOLM feature gate to TechPreview [#2873](https://github.com/openshift/api/pull/2873)
* [Full changelog](https://github.com/openshift/api/compare/1d79f30d4668393dc34e9b423ec6904645503c58...1cb630ce7109e6c4780332bb8140c8c4f7157426)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/90faa26eef6b280777d8c4ad6fa61e5625df8cad)
* [OCPBUGS-90543](https://issues.redhat.com/browse/OCPBUGS-90543): fix etcd operator deadlock when etcd-endpoints configmap is stale [#1637](https://github.com/openshift/cluster-etcd-operator/pull/1637)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/898d6bd9f6ab96093b8d74e5a7dbfeff9a5cf257...90faa26eef6b280777d8c4ad6fa61e5625df8cad)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/172349116c92d6b0d9cf56610be99de2115ae726)
* [OCPBUGS-99909](https://issues.redhat.com/browse/OCPBUGS-99909): E2E test for internal LoadBalancer Annotations [#1525](https://github.com/openshift/cluster-ingress-operator/pull/1525)
* [OCPBUGS-99483](https://issues.redhat.com/browse/OCPBUGS-99483): Add e2e test for Gateway API infrastructure annotations [#1520](https://github.com/openshift/cluster-ingress-operator/pull/1520)
* [OCPBUGS-94189](https://issues.redhat.com/browse/OCPBUGS-94189): Add INFO logs alongside event recorder calls [#1489](https://github.com/openshift/cluster-ingress-operator/pull/1489)
* [OCPBUGS-98966](https://issues.redhat.com/browse/OCPBUGS-98966): Bump Istio version from v1.27.3 to v1.27.8 [#1509](https://github.com/openshift/cluster-ingress-operator/pull/1509)
* [OCPBUGS-78330](https://issues.redhat.com/browse/OCPBUGS-78330), [OCPBUGS-82146](https://issues.redhat.com/browse/OCPBUGS-82146), [OCPBUGS-85550](https://issues.redhat.com/browse/OCPBUGS-85550), [OCPBUGS-88295](https://issues.redhat.com/browse/OCPBUGS-88295), [OCPBUGS-88297](https://issues.redhat.com/browse/OCPBUGS-88297): Remove feature-set annotations from Sail Library RBAC Manifests [#1462](https://github.com/openshift/cluster-ingress-operator/pull/1462)
* [OCPBUGS-78330](https://issues.redhat.com/browse/OCPBUGS-78330), [OCPBUGS-82146](https://issues.redhat.com/browse/OCPBUGS-82146), [OCPBUGS-85550](https://issues.redhat.com/browse/OCPBUGS-85550), [OCPBUGS-88295](https://issues.redhat.com/browse/OCPBUGS-88295), [OCPBUGS-88297](https://issues.redhat.com/browse/OCPBUGS-88297): Replace OLM-based Istio install with Sail Library [#1442](https://github.com/openshift/cluster-ingress-operator/pull/1442)
* [OCPBUGS-86718](https://issues.redhat.com/browse/OCPBUGS-86718): Add configuration override for X-SSL strip [#1471](https://github.com/openshift/cluster-ingress-operator/pull/1471)
* [OCPBUGS-85149](https://issues.redhat.com/browse/OCPBUGS-85149): Fix e2e tests to work on platforms with unmanaged DNS [#1437](https://github.com/openshift/cluster-ingress-operator/pull/1437)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/3a861ed50a5755aa9eaf58d4e6c86d02729dd9c0...172349116c92d6b0d9cf56610be99de2115ae726)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/dc1c217c263cd220ddd2ed6fe827a466d47e3ebb)
* [OCPBUGS-81747](https://issues.redhat.com/browse/OCPBUGS-81747): scc: fix uid{Min,Max}Range for nested-container [#2092](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2092)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/424f27c9c415373b7f60756b5a1c24f48f248512...dc1c217c263cd220ddd2ed6fe827a466d47e3ebb)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/07e75e813de3a51a9e129dcf866d919c3194a675)
* [OCPBUGS-99763](https://issues.redhat.com/browse/OCPBUGS-99763): fall back to kube-system/global-pull-secret for telemeter-client token [#3002](https://github.com/openshift/cluster-monitoring-operator/pull/3002)
* [OCPBUGS-92194](https://issues.redhat.com/browse/OCPBUGS-92194): set Prometheus shards value explicitly [#2975](https://github.com/openshift/cluster-monitoring-operator/pull/2975)
* [OCPBUGS-94077](https://issues.redhat.com/browse/OCPBUGS-94077): ship collector:node_scrape_collector_success:avg to Telemetry [#2978](https://github.com/openshift/cluster-monitoring-operator/pull/2978)
* [OCPBUGS-88323](https://issues.redhat.com/browse/OCPBUGS-88323): [release-4.21] fix(TestDocExamples) flake: use internal registry for test pods [#2980](https://github.com/openshift/cluster-monitoring-operator/pull/2980)
* [OCPBUGS-86806](https://issues.redhat.com/browse/OCPBUGS-86806): jsonnet: exclude ReplicationController from catch-all … [#2939](https://github.com/openshift/cluster-monitoring-operator/pull/2939)
* [OCPBUGS-86991](https://issues.redhat.com/browse/OCPBUGS-86991): increase lookup interval [#2946](https://github.com/openshift/cluster-monitoring-operator/pull/2946)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/c5ffc7afc457f7fc29c2818bb0ca6c9015ed0c39...07e75e813de3a51a9e129dcf866d919c3194a675)
### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/83a7d5c233e26c9bb858c93f556dcbe9f653f032)
* [OCPBUGS-99747](https://issues.redhat.com/browse/OCPBUGS-99747): Bump frr-k8s MAX_FDS from 1024 to 65536 [#3092](https://github.com/openshift/cluster-network-operator/pull/3092)
* [OCPBUGS-98747](https://issues.redhat.com/browse/OCPBUGS-98747): Remove --enable-interconnect flag from OVN-K manifests [#3055](https://github.com/openshift/cluster-network-operator/pull/3055)
* [OCPBUGS-98548](https://issues.redhat.com/browse/OCPBUGS-98548): Bump github.com/containernetworking/cni v0.8.0 -> v1.3.0 [#3049](https://github.com/openshift/cluster-network-operator/pull/3049)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/b5955e9ede2128e8558c41ce87c1e8a11e09a515...83a7d5c233e26c9bb858c93f556dcbe9f653f032)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/91c812dcaf932134f521a42554328a12a0eab82d)
* [OCPBUGS-90529](https://issues.redhat.com/browse/OCPBUGS-90529): perf: latency: compute memory resources dynamically [#1521](https://github.com/openshift/cluster-node-tuning-operator/pull/1521)
* [OCPBUGS-82896](https://issues.redhat.com/browse/OCPBUGS-82896): Bump github.com/moby/spdystream from v0.5.0 to v0.5.1 [#1531](https://github.com/openshift/cluster-node-tuning-operator/pull/1531)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/d78172d1fffdcd29cb3ca6626c78ebecc8e2ef78...91c812dcaf932134f521a42554328a12a0eab82d)
### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/e510507e20f6eb09694c880ecd79fa512a2b3470)
* [OCPBUGS-98251](https://issues.redhat.com/browse/OCPBUGS-98251): [4.21] add serviceAccountToken volume type to psalabelsyncer [#193](https://github.com/openshift/cluster-policy-controller/pull/193)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/8b775487512fb543bff470ff1042bd3ac31b29be...e510507e20f6eb09694c880ecd79fa512a2b3470)
### [console](https://github.com/openshift/console/tree/0c6bbc2cc760fa4f8329982488de196b795b5163)
* [OCPBUGS-99544](https://issues.redhat.com/browse/OCPBUGS-99544): '0 B' is shown on details page when create pvc with 'EiB' unit [#16806](https://github.com/openshift/console/pull/16806)
* [OCPBUGS-99546](https://issues.redhat.com/browse/OCPBUGS-99546): Incorrect translations for 'CatalogSources' and 'OperatorGroups' in l… [#16808](https://github.com/openshift/console/pull/16808)
* [OCPBUGS-99311](https://issues.redhat.com/browse/OCPBUGS-99311): Disable Knative e2e Cypress tests in CI [#16794](https://github.com/openshift/console/pull/16794)
* [OCPBUGS-99163](https://issues.redhat.com/browse/OCPBUGS-99163): fixing severity not showing number of issues [#16618](https://github.com/openshift/console/pull/16618)
* [OCPBUGS-84287](https://issues.redhat.com/browse/OCPBUGS-84287): Bump follow-redirects to 1.16.0 to fix CVE-2026-40895 [#16670](https://github.com/openshift/console/pull/16670)
* [OCPBUGS-81618](https://issues.redhat.com/browse/OCPBUGS-81618): CVE-2026-4800 [#16572](https://github.com/openshift/console/pull/16572)
* [OCPBUGS-90498](https://issues.redhat.com/browse/OCPBUGS-90498): Projects cannot be filtered by display name in the console list view [#16653](https://github.com/openshift/console/pull/16653)
* [OCPBUGS-95544](https://issues.redhat.com/browse/OCPBUGS-95544): Fix RoleBindings tab error for non-cluster-admin users [#16695](https://github.com/openshift/console/pull/16695)
* [OCPBUGS-86743](https://issues.redhat.com/browse/OCPBUGS-86743), [OCPBUGS-87090](https://issues.redhat.com/browse/OCPBUGS-87090), [OCPBUGS-88749](https://issues.redhat.com/browse/OCPBUGS-88749): [release-4.21] bump package: webpack-dev-server, protobufjs, fast-uri [#16654](https://github.com/openshift/console/pull/16654)
* [OCPBUGS-90553](https://issues.redhat.com/browse/OCPBUGS-90553): Backport inventory card filter link fix to release-4.21 [#16678](https://github.com/openshift/console/pull/16678)
* [OCPBUGS-86456](https://issues.redhat.com/browse/OCPBUGS-86456): [release-4.21] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators [#16536](https://github.com/openshift/console/pull/16536)
* [OCPBUGS-88358](https://issues.redhat.com/browse/OCPBUGS-88358): Allow VolumeSnapshot restore when parent PVC is deleted [#16602](https://github.com/openshift/console/pull/16602)
* [OCPBUGS-86581](https://issues.redhat.com/browse/OCPBUGS-86581): Fix macOS Option key in pod terminal [#16505](https://github.com/openshift/console/pull/16505)
* [Full changelog](https://github.com/openshift/console/compare/402882702875b34bb4872c051808a35a67880346...0c6bbc2cc760fa4f8329982488de196b795b5163)
### [console-operator](https://github.com/openshift/console-operator/tree/47f72c1d16b5bb5b17bc94e09b04d6e7eb3a8f67)
* [OCPBUGS-98987](https://issues.redhat.com/browse/OCPBUGS-98987): [4.21] Stabilize telemetry config to prevent continuous console pod rollouts [#1192](https://github.com/openshift/console-operator/pull/1192)
* [Full changelog](https://github.com/openshift/console-operator/compare/aee1a79b48a86e0feaef8ac72b5ec3c124429859...47f72c1d16b5bb5b17bc94e09b04d6e7eb3a8f67)
### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/ee321fbd37b2ded41a96004d52a7652b67e28809)
* [OCPBUGS-80845](https://issues.redhat.com/browse/OCPBUGS-80845): bump google.golang.org/grpc@v1.79.3 [#384](https://github.com/openshift/cloud-provider-openstack/pull/384)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/a123414456212431a2843d4e3a4f7250182402e4...ee321fbd37b2ded41a96004d52a7652b67e28809)
### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/06644b9a4a2cc350fd755b50a78621a003fb738f)
* [OCPBUGS-82900](https://issues.redhat.com/browse/OCPBUGS-82900): Address CVE-2026-35469 [#139](https://github.com/openshift/csi-external-provisioner/pull/139)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/ac55db6fcd6f53ef1c26e3d85c511dbb18bc4d73...06644b9a4a2cc350fd755b50a78621a003fb738f)
### [csi-external-snapshotter, csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter/tree/2c14afc50a30de62cb00cc8263b061383cfbd3b5)
* [OCPBUGS-89328](https://issues.redhat.com/browse/OCPBUGS-89328): UPSTREAM: 1392: Fix VolumeSnapshotContent deletion [#223](https://github.com/openshift/csi-external-snapshotter/pull/223)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/7503ea30886b6e5565ffa02935cf8d2ca299f281...2c14afc50a30de62cb00cc8263b061383cfbd3b5)
### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/0ec77dd178e3b0433f01fce5bcce96abcc126deb)
* [OCPBUGS-98548](https://issues.redhat.com/browse/OCPBUGS-98548): Bump containernetworking/cni to v1.3.0 github.com/containernetworking/plugins to 1.4.0 [#106](https://github.com/openshift/egress-router-cni/pull/106)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/5e0f8d1b545899fda27c5e1cc8707d33cba1b534...0ec77dd178e3b0433f01fce5bcce96abcc126deb)
### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/8d9f11a7f2c4e757bfc5e99ba69084d29a28b79b)
* [OCPBUGS-97960](https://issues.redhat.com/browse/OCPBUGS-97960): no-op OWNERS change to trigger postsubmit jobs [#197](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/197)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/30853f6a0d50797ad6b32f5db617adda3eb53233...8d9f11a7f2c4e757bfc5e99ba69084d29a28b79b)
### [haproxy-router](https://github.com/openshift/router/tree/dc4c01d494f572773a05e82bffd19c2cdaf8dce9)
* [OCPBUGS-86718](https://issues.redhat.com/browse/OCPBUGS-86718): Strip X-SSL-* headers for plain HTTP [#795](https://github.com/openshift/router/pull/795)
* [OCPBUGS-87002](https://issues.redhat.com/browse/OCPBUGS-87002): Replace HTTP backend liveness check with admin socket check [#786](https://github.com/openshift/router/pull/786)
* [Full changelog](https://github.com/openshift/router/compare/cffbbab7d26f76620a099ee86d9e5d987de9aa56...dc4c01d494f572773a05e82bffd19c2cdaf8dce9)
### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/ba6535cbb8719c3ba6c3923f2725ba050c87faab)
* [OCPBUGS-94059](https://issues.redhat.com/browse/OCPBUGS-94059): backport kubernetes/conformance umbrella suite [#2708](https://github.com/openshift/kubernetes/pull/2708)
* [OCPBUGS-91759](https://issues.redhat.com/browse/OCPBUGS-91759): Rebase v1.34.9 in release-4.21 [#2702](https://github.com/openshift/kubernetes/pull/2702)
* [OCPBUGS-87017](https://issues.redhat.com/browse/OCPBUGS-87017): fix flake race in VAP e2e case [#2677](https://github.com/openshift/kubernetes/pull/2677)
* [Full changelog](https://github.com/openshift/kubernetes/compare/eab2218b931d0c20740d6259df59f242abf32ef7...ba6535cbb8719c3ba6c3923f2725ba050c87faab)
### [hypershift](https://github.com/openshift/hypershift/tree/c0d1af55398d2b879d51db011c1239ec5fce2847)
* [OCPBUGS-99646](https://issues.redhat.com/browse/OCPBUGS-99646): OCPBUGS-86296: Propagate management cluster proxy env vars to konnectivity sidecar [#9087](https://github.com/openshift/hypershift/pull/9087)
* [OCPBUGS-90087](https://issues.redhat.com/browse/OCPBUGS-90087): [release-4.21] clear stale EtcdRecoveryActive failure condition when etcd is healthy [#8807](https://github.com/openshift/hypershift/pull/8807)
* [OCPBUGS-97922](https://issues.redhat.com/browse/OCPBUGS-97922): fix(nodepool): skip CNI-internal IPs in ClusterNetworkCIDRConflict check [#8949](https://github.com/openshift/hypershift/pull/8949)
* [OCPBUGS-99100](https://issues.redhat.com/browse/OCPBUGS-99100): fix(backport): konnectivity agent auth [#9093](https://github.com/openshift/hypershift/pull/9093)
* [OCPBUGS-91671](https://issues.redhat.com/browse/OCPBUGS-91671): [release-4.21] OCPBUGS-74960: prevent resource leak on deletion and handle DependencyViolation [#8798](https://github.com/openshift/hypershift/pull/8798)
* [OCPBUGS-90084](https://issues.redhat.com/browse/OCPBUGS-90084): Fix NodePool reconciliation failure when updating mirrored immutable ConfigMaps [#8812](https://github.com/openshift/hypershift/pull/8812)
* [OCPBUGS-93927](https://issues.redhat.com/browse/OCPBUGS-93927): fix(cpo): deduplicate VPC endpoint subnets by AZ to prevent DuplicateSubnetsInSameZone [#8862](https://github.com/openshift/hypershift/pull/8862)
* [OCPBUGS-86295](https://issues.redhat.com/browse/OCPBUGS-86295): CAPI image overrides aware of registry config [#8559](https://github.com/openshift/hypershift/pull/8559)
* [OCPBUGS-83833](https://issues.redhat.com/browse/OCPBUGS-83833): fix(deps): update dependencies to address CVE-2025-52881 [#8748](https://github.com/openshift/hypershift/pull/8748)
* [OCPBUGS-92089](https://issues.redhat.com/browse/OCPBUGS-92089): fix(cpo): prevent informer creation for inaccessible resource types [#8833](https://github.com/openshift/hypershift/pull/8833)
* [OCPBUGS-89353](https://issues.redhat.com/browse/OCPBUGS-89353): build(operator): drop hypershift-no-cgo from operator container images [#8757](https://github.com/openshift/hypershift/pull/8757)
* [OCPBUGS-80813](https://issues.redhat.com/browse/OCPBUGS-80813): Bump google.golang.org/grpc to v1.79.3 [#8443](https://github.com/openshift/hypershift/pull/8443)
* [OCPBUGS-86040](https://issues.redhat.com/browse/OCPBUGS-86040): [release-4.21] Verify cert revocation against all KAS pods [#8539](https://github.com/openshift/hypershift/pull/8539)
* NO-JIRA: fix(tekton): remove path filter from control-plane-operator pipelines [#8667](https://github.com/openshift/hypershift/pull/8667)
* [Full changelog](https://github.com/openshift/hypershift/compare/d345a6af0fb9c22d2058ac98994afbcb41e24f6f...c0d1af55398d2b879d51db011c1239ec5fce2847)
### [insights-operator](https://github.com/openshift/insights-operator/tree/a4cc366f068e2e64681242e5339faa6910347672)
* [OCPBUGS-99015](https://issues.redhat.com/browse/OCPBUGS-99015): update HyperShift deployment manifest [#1323](https://github.com/openshift/insights-operator/pull/1323)
* [OCPBUGS-91985](https://issues.redhat.com/browse/OCPBUGS-91985): fall back to kube-system/global-pull-secret for Insights token [#1310](https://github.com/openshift/insights-operator/pull/1310)
* [OCPBUGS-87191](https://issues.redhat.com/browse/OCPBUGS-87191): extractro controller [#1300](https://github.com/openshift/insights-operator/pull/1300)
* [OCPBUGS-86805](https://issues.redhat.com/browse/OCPBUGS-86805): add config option to disable runtime extractor [#1295](https://github.com/openshift/insights-operator/pull/1295)
* [Full changelog](https://github.com/openshift/insights-operator/compare/2bc8825afccf2456f95d8bfea097a528d072bd11...a4cc366f068e2e64681242e5339faa6910347672)
### [ironic](https://github.com/openshift/ironic-image/tree/f2cbd623f92ebd5797744930ea7072ac1bc3cc87)
* [OCPBUGS-90554](https://issues.redhat.com/browse/OCPBUGS-90554): [4.21] Fix parallel power concurrency [#856](https://github.com/openshift/ironic-image/pull/856)
* [OCPBUGS-82294](https://issues.redhat.com/browse/OCPBUGS-82294), [OCPBUGS-84370](https://issues.redhat.com/browse/OCPBUGS-84370): Update sushy and Ironic to resolve Cisco vMedia Insert and BIOS Settings update issues. [#829](https://github.com/openshift/ironic-image/pull/829)
* [Full changelog](https://github.com/openshift/ironic-image/compare/6e93d7a042c96f1db6307549d348da8f6f89b06a...f2cbd623f92ebd5797744930ea7072ac1bc3cc87)
### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/25155e54fcc29ff604aedda802486b0750176802)
* [OCPBUGS-95062](https://issues.redhat.com/browse/OCPBUGS-95062): Replace individual package removal with a single rpm -e loop [#283](https://github.com/openshift/ironic-agent-image/pull/283)
* [OCPBUGS-95062](https://issues.redhat.com/browse/OCPBUGS-95062): Replace dnf remove with rpm -e to prevent dependency removal [#271](https://github.com/openshift/ironic-agent-image/pull/271)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/ff276c00e345b9cb9298ce9dbdd7f19a8b14dbce...25155e54fcc29ff604aedda802486b0750176802)
### [keepalived-ipfailover](https://github.com/openshift/images/tree/f0241a3d2a12a8b2965cc36542babce8a1dffcf8)
* [OCPBUGS-99781](https://issues.redhat.com/browse/OCPBUGS-99781): Reinstall tzdata if /usr/share/zoneinfo is missing [#248](https://github.com/openshift/images/pull/248)
* [Full changelog](https://github.com/openshift/images/compare/e00f5806587e71188805bab43dad9099524b9059...f0241a3d2a12a8b2965cc36542babce8a1dffcf8)
### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/8406e402ad020185813942842d4914ff7730fdc1)
* [OCPBUGS-99400](https://issues.redhat.com/browse/OCPBUGS-99400): fix CronJob timezone panic and embed tzdata in kube-state-metrics [#151](https://github.com/openshift/kube-state-metrics/pull/151)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/0efd2f822814f9965ef6dc14b68f24eebcaca40d...8406e402ad020185813942842d4914ff7730fdc1)
### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/8a115121952348de9a4e4a73478755258a401a86)
* [OCPBUGS-80717](https://issues.redhat.com/browse/OCPBUGS-80717): Bump google.golang.org/grpc to v1.79.3 [#98](https://github.com/openshift/kubevirt-csi-driver/pull/98)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/4bb70e49c9d05690f3a26edc0a6feaf093169cbb...8a115121952348de9a4e4a73478755258a401a86)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/0ba66a27bc734f20b2982d2d874b8bada58b78fd)
* [OCPBUGS-93806](https://issues.redhat.com/browse/OCPBUGS-93806): move cleanUpDuplicatedMC to avoid double reboot on first updated Master node [#6241](https://github.com/openshift/machine-config-operator/pull/6241)
* [OCPBUGS-97905](https://issues.redhat.com/browse/OCPBUGS-97905): Inject proxy into MCC deployment [#6276](https://github.com/openshift/machine-config-operator/pull/6276)
* [OCPBUGS-88510](https://issues.redhat.com/browse/OCPBUGS-88510): fix: update arbiter crio config [#6189](https://github.com/openshift/machine-config-operator/pull/6189)
* [release:4.21] OCPBUGS-89234: In OCB to check when a image is removed the old build is triggered again and the MC should start updating directly and no new MOSB should be triggred [#6196](https://github.com/openshift/machine-config-operator/pull/6196)
* [OCPBUGS-95588](https://issues.redhat.com/browse/OCPBUGS-95588): Remove sensitive ControllerConfig logging [#6257](https://github.com/openshift/machine-config-operator/pull/6257)
* [OCPBUGS-91971](https://issues.redhat.com/browse/OCPBUGS-91971): Make vsphere template updates atomic [#6229](https://github.com/openshift/machine-config-operator/pull/6229)
* [OCPBUGS-94108](https://issues.redhat.com/browse/OCPBUGS-94108): Fix kubelet certificate wait loop in criometricsproxy.yaml [#6248](https://github.com/openshift/machine-config-operator/pull/6248)
* [OCPBUGS-96153](https://issues.redhat.com/browse/OCPBUGS-96153): Update AMI Whitelist [#6261](https://github.com/openshift/machine-config-operator/pull/6261)
* [OCPBUGS-93937](https://issues.redhat.com/browse/OCPBUGS-93937): Bootstrap MCS logging entire ignition [#6244](https://github.com/openshift/machine-config-operator/pull/6244)
* [OCPBUGS-91734](https://issues.redhat.com/browse/OCPBUGS-91734): Replace wildcard permissions with explicit verbs and resources in MCC ClusterRole [#6208](https://github.com/openshift/machine-config-operator/pull/6208)
* [OCPBUGS-89243](https://issues.redhat.com/browse/OCPBUGS-89243): Process rebuild annotation on machine-os-builder restart [#6197](https://github.com/openshift/machine-config-operator/pull/6197)
* [OCPBUGS-88709](https://issues.redhat.com/browse/OCPBUGS-88709): Update custom containerfile OCB test to work in a disconnected environment [#6193](https://github.com/openshift/machine-config-operator/pull/6193)
* [OCPBUGS-88340](https://issues.redhat.com/browse/OCPBUGS-88340): vSphere boot image hot loop detection is non-functional due to stable template names [#6180](https://github.com/openshift/machine-config-operator/pull/6180)
* [OCPBUGS-89340](https://issues.redhat.com/browse/OCPBUGS-89340): Remove skopeo-install script [#6202](https://github.com/openshift/machine-config-operator/pull/6202)
* [OCPBUGS-88334](https://issues.redhat.com/browse/OCPBUGS-88334): Skip chrony-wait on first node join [#6178](https://github.com/openshift/machine-config-operator/pull/6178)
* [OCPBUGS-88335](https://issues.redhat.com/browse/OCPBUGS-88335): daemon: don't pull/extract extensions for all OS updates [#6179](https://github.com/openshift/machine-config-operator/pull/6179)
* [OCPBUGS-86998](https://issues.redhat.com/browse/OCPBUGS-86998): configure-ovs: copy lldp mode to br-ex port [#6134](https://github.com/openshift/machine-config-operator/pull/6134)
* [OCPBUGS-87008](https://issues.redhat.com/browse/OCPBUGS-87008): Stabilize ocl 4.21 [#6138](https://github.com/openshift/machine-config-operator/pull/6138)
* [OCPBUGS-86979](https://issues.redhat.com/browse/OCPBUGS-86979): Update AMI Whitelist [#6129](https://github.com/openshift/machine-config-operator/pull/6129)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/340c3847f293b8914ebef26d1e9b0a8ce2d2abd5...0ba66a27bc734f20b2982d2d874b8bada58b78fd)
### [machine-os-images](https://github.com/openshift/machine-os-images/tree/581c9d9e453c73f67a93c44fb6715057c0cc8bf5)
* [OCPBUGS-87873](https://issues.redhat.com/browse/OCPBUGS-87873): Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs [#97](https://github.com/openshift/machine-os-images/pull/97)
* [OCPBUGS-85478](https://issues.redhat.com/browse/OCPBUGS-85478): Force rebuild for OCP 4.21 [#93](https://github.com/openshift/machine-os-images/pull/93)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/e9019e5f819c44726e9ff5e1ec8fdfad9fb314fd...581c9d9e453c73f67a93c44fb6715057c0cc8bf5)
### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/a9d006185acbb33f045f643a7674f405abc2b553)
* NO-JIRA: [release-4.21] - e2e monitoring stabilization [#919](https://github.com/openshift/monitoring-plugin/pull/919)
* [OCPBUGS-99028](https://issues.redhat.com/browse/OCPBUGS-99028): Fix CVE-2026-49978 - bump DOMPurify to >= 3.4.7 [#1086](https://github.com/openshift/monitoring-plugin/pull/1086)
* [OU-1240](https://issues.redhat.com/browse/OU-1240): Makefile and package.json to enable test-frontend-ci [#1095](https://github.com/openshift/monitoring-plugin/pull/1095)
* [OCPBUGS-99283](https://issues.redhat.com/browse/OCPBUGS-99283): graph redirect query parameter [#1072](https://github.com/openshift/monitoring-plugin/pull/1072)
* [OU-651](https://issues.redhat.com/browse/OU-651): Fix AlertRules page to display user defined loki alerts [#1060](https://github.com/openshift/monitoring-plugin/pull/1060)
* Fix for OCPBUGS-91631: CVE-2026-45736 [#1024](https://github.com/openshift/monitoring-plugin/pull/1024)
* [OU-1396](https://issues.redhat.com/browse/OU-1396): [release-4.21] fix: use replace to set variables to avoid navigation trap [#1033](https://github.com/openshift/monitoring-plugin/pull/1033)
* NO-JIRA: fix incidents unit test [#1037](https://github.com/openshift/monitoring-plugin/pull/1037)
* Fix for OCPBUGS-94011: CVE-2026-13676 [#1029](https://github.com/openshift/monitoring-plugin/pull/1029)
* [OCPBUGS-87088](https://issues.redhat.com/browse/OCPBUGS-87088): [release-4.21] fast-uri: URI authority bypass due to improper delimiter handling [#973](https://github.com/openshift/monitoring-plugin/pull/973)
* [OCPBUGS-88396](https://issues.redhat.com/browse/OCPBUGS-88396): CVE-2026-44487 bump axios to 1.16.0 [#999](https://github.com/openshift/monitoring-plugin/pull/999)
* [OCPBUGS-84290](https://issues.redhat.com/browse/OCPBUGS-84290): bump follow-redirects to 1.16.0 [#987](https://github.com/openshift/monitoring-plugin/pull/987)
* [OCPBUGS-84828](https://issues.redhat.com/browse/OCPBUGS-84828), [OCPBUGS-84991](https://issues.redhat.com/browse/OCPBUGS-84991), [OCPBUGS-85007](https://issues.redhat.com/browse/OCPBUGS-85007), [OCPBUGS-85037](https://issues.redhat.com/browse/OCPBUGS-85037): Update Axios to v1.15.2 [#982](https://github.com/openshift/monitoring-plugin/pull/982)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/462c78890ffb636e05d91d41ca718bb3c81da4cf...a9d006185acbb33f045f643a7674f405abc2b553)
### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/8f5dd8b1e9f0c2b2404e3c8ddcffb1fd9441003d)
* [OCPBUGS-80831](https://issues.redhat.com/browse/OCPBUGS-80831): bump grpc to 1.79.3 to address CVE-2026-33186 [#310](https://github.com/openshift/multus-cni/pull/310)
* [Full changelog](https://github.com/openshift/multus-cni/compare/4f696e721ac0897a782c2fde3c24d961938feff3...8f5dd8b1e9f0c2b2404e3c8ddcffb1fd9441003d)
### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/35868a96e0f9df8aedda5357279d32fa61e4096e)
* [OCPBUGS-92375](https://issues.redhat.com/browse/OCPBUGS-92375): Updated doc links based on release [#439](https://github.com/openshift/networking-console-plugin/pull/439)
* [OCPBUGS-88313](https://issues.redhat.com/browse/OCPBUGS-88313): Trim subnet input in UDN creation form [#430](https://github.com/openshift/networking-console-plugin/pull/430)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/268037d76fd97d29f39eae2f25f0a2b2910cb30e...35868a96e0f9df8aedda5357279d32fa61e4096e)
### [oauth-server](https://github.com/openshift/oauth-server/tree/85a8ae3529821203c39559c4df6231ef3607e64e)
* [OCPBUGS-81816](https://issues.redhat.com/browse/OCPBUGS-81816): Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 [#234](https://github.com/openshift/oauth-server/pull/234)
* [Full changelog](https://github.com/openshift/oauth-server/compare/2b8183592190365c269ca0c92b1955bbad9a0236...85a8ae3529821203c39559c4df6231ef3607e64e)
### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/9a537cc07f453743ce02b568b5df02df18df01bb)
* [OCPBUGS-98090](https://issues.redhat.com/browse/OCPBUGS-98090): fix(test): use in-cluster catalog for preflight permission checks [release-4.21] [#778](https://github.com/openshift/operator-framework-operator-controller/pull/778)
* [OCPBUGS-99756](https://issues.redhat.com/browse/OCPBUGS-99756): increase catalog HTTP client timeout from 10s to 5m [#774](https://github.com/openshift/operator-framework-operator-controller/pull/774)
* [OCPBUGS-86842](https://issues.redhat.com/browse/OCPBUGS-86842): [release-4.21] catalogd: clean up orphaned temp dirs in catalog storage [#742](https://github.com/openshift/operator-framework-operator-controller/pull/742)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/9bf1d982a091f54597e582c407d61f8ecfbc4f95...9a537cc07f453743ce02b568b5df02df18df01bb)
### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/f427de801b98823e486bdd5955468d88e95c2ac4)
* [OCPBUGS-82918](https://issues.redhat.com/browse/OCPBUGS-82918): Address CVE-2026-35469 [#646](https://github.com/openshift/openshift-apiserver/pull/646)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/64dea074d6b457e1fae3598cea0bb72493d2cab8...f427de801b98823e486bdd5955468d88e95c2ac4)
### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/b7456a2a12d1e65a5688693a005ad1e18aaee1be)
* [OCPBUGS-97825](https://issues.redhat.com/browse/OCPBUGS-97825): Revendor CAPO [#176](https://github.com/openshift/machine-api-provider-openstack/pull/176)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/b1fdb10f47f3bdb5c2902fac1d53bfa98c3a88ab...b7456a2a12d1e65a5688693a005ad1e18aaee1be)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/9f20d9cb39b32feb1dc2d4b1b33e686c9a3d8d9b)
* [OCPBUGS-99276](https://issues.redhat.com/browse/OCPBUGS-99276), [OCPBUGS-99277](https://issues.redhat.com/browse/OCPBUGS-99277): Branch Sync release-4.22 to release-4.21 [07-20-2026] [#3306](https://github.com/openshift/ovn-kubernetes/pull/3306)
* [OCPBUGS-99165](https://issues.redhat.com/browse/OCPBUGS-99165): Branch Sync release-4.22 to release-4.21 [07-15-2026] [#3300](https://github.com/openshift/ovn-kubernetes/pull/3300)
* [OCPBUGS-98398](https://issues.redhat.com/browse/OCPBUGS-98398): Branch Sync release-4.22 to release-4.21 [06-10-2026] [#3243](https://github.com/openshift/ovn-kubernetes/pull/3243)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/d586f851c25d8f7cd04840cda79a0a6a98ea8485...9f20d9cb39b32feb1dc2d4b1b33e686c9a3d8d9b)
### [prometheus](https://github.com/openshift/prometheus/tree/669596b0ae312b441ae687b77557d07e8be92351)
* [OCPBUGS-88670](https://issues.redhat.com/browse/OCPBUGS-88670): remote: validate snappy decoded length before allocation in read endpoint [#331](https://github.com/openshift/prometheus/pull/331)
* [OCPBUGS-93920](https://issues.redhat.com/browse/OCPBUGS-93920): fix(tsdb): temporarily ignore Direct IO enablement errors on unsupported filesystems [#340](https://github.com/openshift/prometheus/pull/340)
* [Full changelog](https://github.com/openshift/prometheus/compare/77d32a196096e708170b45eecaa37865f620d4ce...669596b0ae312b441ae687b77557d07e8be92351)
### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/377c84b84a9f85b900736cde6bfc7c5285aa8c7a)
* [OCPBUGS-99446](https://issues.redhat.com/browse/OCPBUGS-99446): embed tzdata in the alertmanager binary [#142](https://github.com/openshift/prometheus-alertmanager/pull/142)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/3dbe0b64ae3b9439b888be65a32431c7bf0d6806...377c84b84a9f85b900736cde6bfc7c5285aa8c7a)
### [tests](https://github.com/openshift/origin/tree/36a247f24e17d72c4f00404b03a3be623ec3e73c)
* [OCPBUGS-99300](https://issues.redhat.com/browse/OCPBUGS-99300): admit and extract non-payload 4.21 [#31386](https://github.com/openshift/origin/pull/31386)
* [OCPBUGS-90523](https://issues.redhat.com/browse/OCPBUGS-90523): Use AdminPolicyBasedExternalRoute CR for external gateway test [#31316](https://github.com/openshift/origin/pull/31316)
* [OCPBUGS-94114](https://issues.redhat.com/browse/OCPBUGS-94114): support Parents field on origin test suites [#31353](https://github.com/openshift/origin/pull/31353)
* [OCPBUGS-88564](https://issues.redhat.com/browse/OCPBUGS-88564): fix CUDN status condition tests for NetworkAllocationSucceeded condition [#31300](https://github.com/openshift/origin/pull/31300)
* [OCPBUGS-84252](https://issues.redhat.com/browse/OCPBUGS-84252): Move imagepolicy test to disruptive long-running suite [#31061](https://github.com/openshift/origin/pull/31061)
* [OCPBUGS-78330](https://issues.redhat.com/browse/OCPBUGS-78330), [OCPBUGS-82146](https://issues.redhat.com/browse/OCPBUGS-82146), [OCPBUGS-85550](https://issues.redhat.com/browse/OCPBUGS-85550), [OCPBUGS-88295](https://issues.redhat.com/browse/OCPBUGS-88295), [OCPBUGS-88297](https://issues.redhat.com/browse/OCPBUGS-88297), [OCPBUGS-88320](https://issues.redhat.com/browse/OCPBUGS-88320), [OCPBUGS-88322](https://issues.redhat.com/browse/OCPBUGS-88322), [OCPBUGS-88324](https://issues.redhat.com/browse/OCPBUGS-88324): Backport noOLM Gateway API test coverage and upgrade tests [#31232](https://github.com/openshift/origin/pull/31232)
* [OCPBUGS-88328](https://issues.redhat.com/browse/OCPBUGS-88328): Fix Pod.Create() to use --local flag for template proc… [#31269](https://github.com/openshift/origin/pull/31269)
* [OCPBUGS-85149](https://issues.redhat.com/browse/OCPBUGS-85149): Enable Gateway API tests on vSphere and baremetal [#31139](https://github.com/openshift/origin/pull/31139)
* [Full changelog](https://github.com/openshift/origin/compare/c2da98a5a8f0e23886ac536fbeb81140e798fb71...36a247f24e17d72c4f00404b03a3be623ec3e73c)
### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/e4130b0a049c0ced1600ff7c296bf505e5446ddb)
* [OCPBUGS-87097](https://issues.redhat.com/browse/OCPBUGS-87097): Fixed compute cluster permission logic for single fd with read-only custom resourcepool [#222](https://github.com/openshift/vsphere-problem-detector/pull/222)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/a35d685a88aca94ed1d805c1079ebf14dfb81c9d...e4130b0a049c0ced1600ff7c296bf505e5446ddb)