# 4.21.37

Created: 2026-10-08 17:36:54 +0000 UTC

Image Digest: `sha256:e376df16156e36ea97c076e0ca69a173642f974976bcf2e2779f7476dd3b8135`


## Changes from 4.21.33

### Components

* Kubectl 1.34.1
* Kubernetes 1.34.9
* Kubernetes Tests 1.34.1
* Red Hat Enterprise Linux CoreOS 10.2.20260521-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| VSphereMultiVCenterDay2 <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [bddba729](https://github.com/openshift/assisted-service/commit/bddba7290d9b08f7c0ce350e8082364819579525) `sha256:b9aa6b13023e2d3ebf5fd4cc320d9bf451a54077e6338fba54fe68b0628dbd57`
* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [c4e448f8](https://github.com/openshift/assisted-installer/commit/c4e448f8e3c3f91d2dac98d846eb3fe400f15232) `sha256:8a1e01dc77795e8179b17aefe2884b7d7d7381362efec2009871e9870844b95b`
* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [5bf169cc](https://github.com/openshift/assisted-installer-agent/commit/5bf169cca60bec1ddc1bc5cf6b79b74bcfc16b2e) `sha256:9550b7e367795c085aa5502a8e183e899c7a23918c3dce7c7d595535659b2c2b`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [c4e448f8](https://github.com/openshift/assisted-installer/commit/c4e448f8e3c3f91d2dac98d846eb3fe400f15232) `sha256:534911595e193e7291158b8af56ec618d095c25ad5a10c07030ccebf57f97981`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [cc8ca89b](https://github.com/openshift/agent-installer-utils/commit/cc8ca89bc5a0ce79227e8ab0860693950608ca04) `sha256:7419e31937b4a0a748c7a1f271718678b595794ee8005a978d0b55b172b2b547`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [35ba137a](https://github.com/openshift/apiserver-network-proxy/commit/35ba137ab96d01f0b8df729ff5ad93ac2fdad800) `sha256:f8dc516867b0d460d622150fb98438f4b7a6cca9fcd9fd3500b9db1dfbf3c5d8`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [fdc7f3f1](https://github.com/openshift/cloud-provider-aws/commit/fdc7f3f15c693593cb573b6bef6f0363256b6f52) `sha256:650e32a2649e17400c52e463a354bb1a153587cbdf763b9d187373f20d925bfd`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [1d8cec7d](https://github.com/openshift/aws-ebs-csi-driver/commit/1d8cec7d0eeedf1497c3ee6c32ee3391ebb13709) `sha256:e455750cff566035c575c9749cdfed65c0d1988420b8f666cdb47a4c834e4c63`
* [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator) git [a52a578c](https://github.com/openshift/csi-operator/commit/a52a578c6aea1ac5da131f60b8e359969151d7e1) `sha256:e40ac1697db774bbebf660e62de79396e0964b73925170adbacc3e8740e2223b`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [f4af9b89](https://github.com/openshift/aws-karpenter-provider-aws/commit/f4af9b89aed3a47b2168d7bd5a7dd8b6453f1945) `sha256:882fc5aa9ce6c55c2b32bc72a6a27cc7ae71fe8a9fa74271c666999e32d2e35e`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [887615ff](https://github.com/openshift/aws-encryption-provider/commit/887615ffa8a595ee3693e92fa56db4dd30f20f73) `sha256:0eb0998bf3876aefda9c473ecae5f6e5243cd779d011b553192045e570fe87bc`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [5cd42ed1](https://github.com/openshift/aws-pod-identity-webhook/commit/5cd42ed1e5151f45f0134593e9cfebdb6517b385) `sha256:9025434c70796e62b56d4cb5d9017f8dcedad3d3ee47219f5ee4763719ea7dac`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [8318a548](https://github.com/openshift/azure-disk-csi-driver/commit/8318a54892a51c76e3233e2fd60fb5d499afb6dc) `sha256:25a666b9922bc4ca0ebb55982dc02f8326529aa59af44cd856690be0b7ee040f`
* [azure-disk-csi-driver-operator](https://github.com/openshift/csi-operator) git [a52a578c](https://github.com/openshift/csi-operator/commit/a52a578c6aea1ac5da131f60b8e359969151d7e1) `sha256:5ab73a9d6a60c2cfd3e0bf53653e73b3cae0ebf2d5383424dc916635a70e7c28`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [c0415d38](https://github.com/openshift/azure-file-csi-driver/commit/c0415d38bb792e507e0d2346b44d057ab7b2e024) `sha256:4c6362cfc8e4951cd9d1d9e765be474febc0a1e114118f715cd6bd711c37b0e0`
* [azure-file-csi-driver-operator](https://github.com/openshift/csi-operator) git [a52a578c](https://github.com/openshift/csi-operator/commit/a52a578c6aea1ac5da131f60b8e359969151d7e1) `sha256:b2a1f133384751e3f0134f4a0f09dd7daa655bcacd9463d0972494526a210e61`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [97a682d9](https://github.com/openshift/azure-kubernetes-kms/commit/97a682d9baff04f7c873ae378dee4afb6b697252) `sha256:afe9d81cf17c64183090786c1c07be92b9c6ed03e1750706c594c176249972f6`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [5e84c831](https://github.com/openshift/azure-service-operator/commit/5e84c83176d7630f70802b35cb10cdf2b60fd6d3) `sha256:1dc6816ee7d2509423179b37dfe03ea7ac950778a4a3185dc19b9ca8750c1723`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [ae8ffaf0](https://github.com/openshift/azure-workload-identity/commit/ae8ffaf0b4a893e9b38fb4007de3cef8492b71f3) `sha256:83c7957e3a33a6be1811f1c6aa8d857f03daac98b1c088d936da4053d75dd887`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [659138fe](https://github.com/openshift/cluster-api-provider-metal3/commit/659138fef3abd4c71b0b01fa1279146745699a5a) `sha256:a922552e204d2feefaf0d985457c3b3a99bfb55f1569b79077d9f24dcd2965e9`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [4e6a729c](https://github.com/openshift/cluster-api-provider-baremetal/commit/4e6a729c5ac8fde8859db5830def262dfdee28ea) `sha256:51ced1a1578e7a2c61bc90f7116f0734b40c0e984d979fb5b967b62cff9f4064`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [d5c58b32](https://github.com/openshift/baremetal-operator/commit/d5c58b32e71e0e979e190b40a3804d012509d93b) `sha256:5dfb9a84b6aae86ba1310b2787339a69388ed8bca12de1c6625cffcba16ad5a7`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [d7e3fc12](https://github.com/openshift/baremetal-runtimecfg/commit/d7e3fc12bd9dc911f0fac4c9a46b814c7be62b14) `sha256:856d19972f450fe4d887987bf5626369cfeb33a7501f30f1ac2f01113d54fe7f`
* [cli](https://github.com/openshift/oc) git [d0bf7cc5](https://github.com/openshift/oc/commit/d0bf7cc5959bf8408912e5276f2ea9e269ede24d) `sha256:a51c03a461438fa7434872b49d453a4e052daaeb74a75a11c7c3bf1d524cbb36`
* [cli-artifacts](https://github.com/openshift/oc) git [d0bf7cc5](https://github.com/openshift/oc/commit/d0bf7cc5959bf8408912e5276f2ea9e269ede24d) `sha256:5e232685116eace17ec0f6c43ccb04aab197dad2183a16995849b97c5f1cf17b`
* [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [bd0a5785](https://github.com/openshift/cloud-credential-operator/commit/bd0a5785a37eeccedb3ba357eb4254860acd6ef4) `sha256:33213a332edf97c642d68b3ea4823c6003047280415d62c4159b2b4a4849981d`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [57db2d05](https://github.com/openshift/cloud-network-config-controller/commit/57db2d05e057dc90bae3dc1b0e806b3259d38fc0) `sha256:fe186812de35afaccbc409b7997f0ed60849b1b73f57c18890d8a7f3e8efbe82`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [b2423439](https://github.com/openshift/cluster-autoscaler-operator/commit/b2423439fe1004bae5e84500cf449d033c1f0378) `sha256:e4ba21451189107efaf6a17dbb4818dc3dc551379e67e1124ec20732482557ae`
* [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator) git [13af370f](https://github.com/openshift/cluster-baremetal-operator/commit/13af370f526ab7541a8a73aa0d94952496ccca58) `sha256:8c9879eab85fd46227614bfa5b3b71a533a643f211e65b18e296d58bbc55c22a`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [dc0d4a5c](https://github.com/openshift/cluster-bootstrap/commit/dc0d4a5cdaf8a7477cab584208dc99352f46efe2) `sha256:100c85d7ee9c981d0262b7e419bb193db74bff9b458fb85af17909808c6eec19`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [9dd5eba0](https://github.com/openshift/cluster-api/commit/9dd5eba07922bb84bf1ec2b16cbbedd6ad195874) `sha256:cfe91bfa68f0ef36e51b97d3991b3f92c05d047f8c9f435cb0b4459fc8457507`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [87a6893e](https://github.com/openshift/cluster-capi-operator/commit/87a6893e678af405043625bc3a209b30836f299f) `sha256:edd623a784146edd76630ba2bbc63a59e655606935c33a5a455e319e669a6f9b`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [1eb450a3](https://github.com/openshift/cluster-config-operator/commit/1eb450a3a2456f6e3fe3d727208b5f7b0dd35aba) `sha256:ce4c9eba87da6880513e31d0421ade7fd4d9a85da92853e77827d6a05d681d09`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [c4fdb41e](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/c4fdb41e357280bfa7e8ebbc934007a657168310) `sha256:d3fc5cceb92e673f11e2789bbc2f3ffde77afca20dc8c23e4f384afd0765c54d`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [eb43a7a8](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/eb43a7a80d1b314eb8bbe63b6b73de91ba8cc7aa) `sha256:3c6da51a6324afd1562d659f31aef887a8d36e32f8978a714a25eed82e85466e`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [41a53fed](https://github.com/openshift/cluster-dns-operator/commit/41a53fed36e6e99c7c9ceb3a699c3547ee5d9bb9) `sha256:3094a90d9a82c8643c2cd8ea710154af892115f3b306617ca9f14175100482f2`
* [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator) git [1cad682c](https://github.com/openshift/cluster-etcd-operator/commit/1cad682c3cdb0db2bd19c4cba27098703477734f) `sha256:46928eaa43bcff0465669752b79d63c90e626639d62423fdc9f6b7a8f5682821`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [044fc0bc](https://github.com/openshift/cluster-image-registry-operator/commit/044fc0bce30bed270732f61213e2895d667ebf87) `sha256:36617d6f2c4628aff831b0e728efbd46f2ea8946b114205b9bec46d07f52a702`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [395de967](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/395de96705749de9c6a5f25747b9d5c3d5f65a8f) `sha256:70cc2d589ee0d20ec48544056b2430956af5bcaf5b2a4f28becc03f1ccf35b33`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [5ef1df3b](https://github.com/openshift/cluster-kube-scheduler-operator/commit/5ef1df3be41d38ddae9b3d22ce51ba486939e9f1) `sha256:4dd74e46252785fba64252a201a89f0cebecb6a8875401c008a1a1a664cafd8e`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [8a42beeb](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/8a42beebd580bd2e241aa6d93860c09e907f2407) `sha256:4c67221d953ee5b8b6a20d794310488ea934f4b605994bee07b9897363eca385`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [d864813c](https://github.com/openshift/cluster-machine-approver/commit/d864813cd3ab01c0f975b2bf41e9046948f0afa1) `sha256:e7d0f5aa397e3b1f85b599b224a6add488b461d1599208eb1f1b0e74cdb23d55`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [6075cffc](https://github.com/openshift/cluster-node-tuning-operator/commit/6075cffc70be79fa499558474f135ea244c93fc0) `sha256:d9fe32416b89b1b3a3d30b511fa0d286981b26e01039c9f27d010e94d1a08644`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [03bedb91](https://github.com/openshift/cluster-olm-operator/commit/03bedb913bce9c7deabf7868e5cbefc57cf3490b) `sha256:2cf737c9e751fe2f8887dc3a730f0867531ad152879597bb0ed30181841748d1`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [810221c4](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/810221c4d6f91efae7277224e3022ec5c4778e14) `sha256:b20951f889035a5fd870ea1c26d3a12b599582b4a5633f777d8b1c4b420e2b7d`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [2617a201](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/2617a201bb3607192a9f82faa18384676f611e3c) `sha256:94d27a24354955fda53f9ed2de182b4e9ff1e71a5be185641177f6d205858184`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [e510507e](https://github.com/openshift/cluster-policy-controller/commit/e510507e20f6eb09694c880ecd79fa512a2b3470) `sha256:840f74ffd52d2d3fc96cdbf1d2bbdd6640e1672bbb9679f398f3c30f5e11cc72`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [11ed1942](https://github.com/openshift/cluster-samples-operator/commit/11ed1942dbbf7a8334862b3d598a967e9b92aa77) `sha256:0bdb593079c091c1e3d83d01d77e44c9f63118e78bf1338aaf7564d41a81ddff`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [e4034751](https://github.com/openshift/cluster-storage-operator/commit/e403475164a4de23d358a93106a35353ec29f3d7) `sha256:df47d3e75dcb26afc84024708eb966ada523fad9191c65d14cadd4bdcfbbbf44`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [b3cae8f2](https://github.com/openshift/cluster-update-keys/commit/b3cae8f22b51d9062d0ceb6ac9cf2f7651b4ce8f) `sha256:a14b911ad07030f7875b1ecfccdf2b1015000f47c27e2e34aca9ed6d164ffc9f`
* [cluster-version-operator](https://github.com/openshift/cluster-version-operator) git [d37e5a05](https://github.com/openshift/cluster-version-operator/commit/d37e5a056d5a9c74c2ac2d5551ef39f573c9824a) `sha256:01005e229a185adad24961de89348b721af2be8154afafa0b135d7a71be2d568`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [16114b8d](https://github.com/openshift/configmap-reload/commit/16114b8de20278b8f4b7a425ece6d35d53214773) `sha256:63672503cc614fd0039d266d02ad1534826693b11a013f2306104555bc04876f`
* [console-operator](https://github.com/openshift/console-operator) git [f730484c](https://github.com/openshift/console-operator/commit/f730484ce5f2606e7f665d561227c374183fff14) `sha256:61d0a914ba3aa50a7d9e4c4b34b5a33e37792badff898aafc0c8fa194674d71b`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:d654a0455364497b50848d2dd19646ae7c272d368b00195f267866de741fe5b9`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:e78ac9739e33cbdda98ab4210871af7bfe7a95545c915b8efd7c99549175bd1b`
* [coredns](https://github.com/openshift/coredns) git [7486e9e4](https://github.com/openshift/coredns/commit/7486e9e4330c1e41d9a91e4673b7f2782efc112c) `sha256:bf82eaafbb2f0f219d6acb0cad9bb903d04ccc4d4ca086d4d0e019d551ed55cc`
* [csi-driver-manila-operator](https://github.com/openshift/csi-operator) git [a52a578c](https://github.com/openshift/csi-operator/commit/a52a578c6aea1ac5da131f60b8e359969151d7e1) `sha256:77757e776b1a1782236454b5e95a5fad7bdfa1643024283915b128c9af2cff5c`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [b5e4888c](https://github.com/openshift/csi-driver-nfs/commit/b5e4888ca8e420ba9245805a1a8c976074a8b793) `sha256:530617000d86a1b7e340fe3c2a8905b0c29d9d292069eb412a3cdb99b418e07c`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [8d29fc4b](https://github.com/openshift/csi-external-provisioner/commit/8d29fc4b7cb1f910c4c03e0a63fdd375d6294125) `sha256:0f6fe37f3fa5596c022da485f96cd4407ba70faf08b1d7c6d9f3a708cfe57cd1`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [d5c2c2b4](https://github.com/openshift/csi-external-resizer/commit/d5c2c2b47fbd76677d6060956f309bc675957c31) `sha256:7c46123f0265809743c8df216e43d0bc235206f7dcca6451ce72fb9b9f416d5f`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [78dacb7c](https://github.com/openshift/csi-livenessprobe/commit/78dacb7c661a62c78036c2737401afd3eb6fd04d) `sha256:da8ed44a43166598c9d0a37cea549cfae103dbc0dd25b366ded490b6aecdb343`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [d29f3f7a](https://github.com/openshift/csi-node-driver-registrar/commit/d29f3f7a4aed4465e7e40e323bd3c0e0d9871e4c) `sha256:7ffb832ba8a7fb9b8ac07b6f461ce7814c1e731574eb1c9b8068e7ff447ee3b8`
* [deployer](https://github.com/openshift/oc) git [d0bf7cc5](https://github.com/openshift/oc/commit/d0bf7cc5959bf8408912e5276f2ea9e269ede24d) `sha256:10a1557c3ab6c1a4c8737911b99c3006323bcd7d411fb3d9da079ba95ac81a14`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [f0ae9d12](https://github.com/openshift/driver-toolkit/commit/f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad) `sha256:0ed634f70887efcb5a46584e554e9a7fcf179940f4420ef538bde1e763ae7fbd`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [0ec77dd1](https://github.com/openshift/egress-router-cni/commit/0ec77dd178e3b0433f01fce5bcce96abcc126deb) `sha256:7629b3815d2eba8f0cb15ec8fa9acd0a6b02d0046a19193b6f38649fe9ed8ef5`
* [etcd](https://github.com/openshift/etcd) git [b6dda541](https://github.com/openshift/etcd/commit/b6dda5413ec33fc88fc9751d98d3b4bd96ea877d) `sha256:a66c25aa5d45c98e0e048db40b7e00442e970e3555065f228bf8088aef79bb66`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [fe230b8a](https://github.com/openshift/cluster-api-provider-gcp/commit/fe230b8a6407a06e1be9d6994a92ac8c5a43237d) `sha256:13cca6cf527e8a14e2928815e073b7db96d0cb9cd54837b97db4f71a1b5a99f5`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [1da557fe](https://github.com/openshift/gcp-pd-csi-driver/commit/1da557fe54562347dbf18bee04fe6564a2697707) `sha256:e8cb64ae4fc58d59455fcdaf1b6eb0a07d38465ca4153af5ac7d962d15d3b2ed`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [d481e5cb](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/d481e5cb9323b01964bf143b58403b62fa31e5e7) `sha256:1998198df26c742d001e9dacc7b63e2c5049383675071aa5147c872d8e78accf`
* [haproxy-router](https://github.com/openshift/router) git [22531cf0](https://github.com/openshift/router/commit/22531cf0bb2435e73437be73c244913de4844812) `sha256:1d5e1de09f1ad02bee7961c1ff809e594d9db2f401a3ae9c70a1a8b5ca3caf50`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [f0baa47e](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/f0baa47e75ab0bef0ec56ab48d9a725e00f6b40f) `sha256:bd5ddca3ea5e7de56f86e9085c81feb652361419f85a53e5325e7d1c7b9f4635`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [d2dc1470](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/d2dc1470a6b71312fcfefdf4d334288302b6cfec) `sha256:bcb37612b9297713222559c6850dac144d38b762acb9c9fb5335574555b98f75`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [22e131a0](https://github.com/openshift/machine-api-provider-ibmcloud/commit/22e131a00d874c240531c40141a8a780fbb48bd5) `sha256:3eb28c9ac1495053b8e2d525c923140e04b828069a4564382df4a0b5acf8162f`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [8c41cb86](https://github.com/openshift/insights-runtime-extractor/commit/8c41cb8680f29a915d33e4954fc5ff7f5352411b) `sha256:95052cce3d6dd081b6a7e9db458a8f38ff1b6e75c5ecf0c3230145bae8e09d30`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [8c41cb86](https://github.com/openshift/insights-runtime-extractor/commit/8c41cb8680f29a915d33e4954fc5ff7f5352411b) `sha256:2c4cdb81441bb5c0369d28d24eaa3099775acbafc9a1a3bd90058d958ef43169`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [156ef6b4](https://github.com/openshift/ironic-agent-image/commit/156ef6b4730f01279216d3296349ca0cae29466c) `sha256:aa093e0d8136a1873c19dac43780ee02f29aebbd3b2f3aa483cb69bdfeecf485`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [707c2262](https://github.com/openshift/ironic-rhcos-downloader/commit/707c226243ac401f2994952fe0e55823511111b0) `sha256:82ca2dd81e93dd0723d24d758b4f04e979fdd4d7559a22b5fd5652a444551440`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [b95b05fe](https://github.com/openshift/ironic-static-ip-manager/commit/b95b05fe0ba17255ef61e92d4167ca4c9de789b8) `sha256:081b23349c95c759d3b8528638a20a3e6f5442c2e4fb128a86f4d98d0e6965e9`
* [keepalived-ipfailover](https://github.com/openshift/images) git [f0241a3d](https://github.com/openshift/images/commit/f0241a3d2a12a8b2965cc36542babce8a1dffcf8) `sha256:2fbd0402ed9d81e3f1152a2004323af40e582199af5e47f39c9dbceb7a7373fb`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [cd636680](https://github.com/openshift/kube-rbac-proxy/commit/cd636680e06a55395c26570dff0cb37277014388) `sha256:2cae32b84461c42467c162bca20f152a706e196d1dfb45d01f81804ee6c8d54f`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [ce5ff17e](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/ce5ff17e9a81ce754567e6dd5053d13409c251e9) `sha256:52ce1ddcc4fe89c5ca1ccc50f80df8a8b88c6af913e3400bfc27c48c32aca2f4`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [1e6fdd66](https://github.com/openshift/cloud-provider-kubevirt/commit/1e6fdd6615a55fc449b3e7ad2d6e92a27d30a934) `sha256:334282a492fa7012197b4f44fd88e061284ab3f23bbb7a9f102cc751525f7d36`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [8a115121](https://github.com/openshift/kubevirt-csi-driver/commit/8a115121952348de9a4e4a73478755258a401a86) `sha256:ac1c6aa427a4c2f6ae99eac5172a4db04d26f1ec2930f13c83c76913fd6d51a5`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [581c9d9e](https://github.com/openshift/machine-os-images/commit/581c9d9e453c73f67a93c44fb6715057c0cc8bf5) `sha256:8ad46b18d080d782a2cc1cb5e032e99a88fcf532181b65ff6ba01be0ebd8c2bf`
* [metallb-frr](https://github.com/openshift/frr) git [c82bfaad](https://github.com/openshift/frr/commit/c82bfaad01b196e12f00622a9a609d87e0a56701) `sha256:1672970deaa813fb5bb7f3ee7e427ab3dca633e16804e2a64af73015e7da4c4b`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [e9f2f3c7](https://github.com/openshift/multus-networkpolicy/commit/e9f2f3c7e81683af3b8cc9a5a3166434c94e0498) `sha256:e9deecfc0e68dd4e28ecffa7771ad043e1b9160546d2fc877ad40b009d625a6e`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [08af4127](https://github.com/openshift/route-override-cni/commit/08af4127c77976510cad1c096d9aca977d8ae5af) `sha256:caabb8b2c8e205364698fdad1742989b2d75e7d1f6d4560f64dcd642124c675a`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [d691040e](https://github.com/openshift/whereabouts-cni/commit/d691040e509bb20c26b5e8366c0d6f3bb45a5e02) `sha256:f7e4f3242b105b89bb46c1fca9ea6c188b7eebe23bf5b40d5a677d9ce8550e55`
* [must-gather](https://github.com/openshift/must-gather) git [eeb267f4](https://github.com/openshift/must-gather/commit/eeb267f4b7f8016f13d12866013cad43c7403482) `sha256:c783b06f6f6c13c3611e9dcd3ad330630cb1fc741cd69e7a29b7db2b95619ef6`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [297eeb43](https://github.com/openshift/bond-cni/commit/297eeb4320e07b18d559bc373b665479c760e8c7) `sha256:25f64897c880f1770c09a930a8adff14172529b86fa91853519fee18691eb1f4`
* [network-tools](https://github.com/openshift/network-tools) git [d6717e45](https://github.com/openshift/network-tools/commit/d6717e453a098d551c9e2d2868e1f5317c41e688) `sha256:c22866a7b3fd38483c4fcbe1555968d98da2e4391d396c96c097ee2761fda901`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [33b7bec6](https://github.com/openshift/cloud-provider-nutanix/commit/33b7bec6fe27b8d126982a70b4579112cd67052b) `sha256:5ed183195e52282fd7f0ef59ca5800cb33cedda7db1a49824fd7ab7011961172`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [b15a665c](https://github.com/openshift/machine-api-provider-nutanix/commit/b15a665cd9c12c5a7d2ac81b5330b6f446c3a8be) `sha256:7ba08186df79b2f598ac24882467938bbd59400ce576eccfcfb9c46e9c20b883`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [71c41b2d](https://github.com/openshift/oauth-apiserver/commit/71c41b2d8abb0c6ad90dca286baf5d03c1340646) `sha256:144f3cd78256dffc725e44edd12f5f4289e7437391e31547814f47c32c373b99`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [f427de80](https://github.com/openshift/openshift-apiserver/commit/f427de801b98823e486bdd5955468d88e95c2ac4) `sha256:2c642e24adfe5d8eeabf41c03968ce103bdf0390c4d168a59f7a56084ad392ce`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [438d52e7](https://github.com/openshift/openshift-controller-manager/commit/438d52e79d691e016d66eabfe9a53c84229db40c) `sha256:c720ac00b74d1ea85e284a3ae403af7667dad3296ba2fe72d5f9a307b63fe580`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [ab605a4b](https://github.com/openshift/openshift-state-metrics/commit/ab605a4bf1c6cd5a6c58f245fb67ce648caebfa8) `sha256:6a38a0fb7f83907a21d182c6ba3c136b6abaed5f2a1412acc986f78134c6c436`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator) git [a52a578c](https://github.com/openshift/csi-operator/commit/a52a578c6aea1ac5da131f60b8e359969151d7e1) `sha256:a6f691636f33751ca0340a55645576023481867b2d1344f98425d24ae4e1a45a`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [b7456a2a](https://github.com/openshift/machine-api-provider-openstack/commit/b7456a2a12d1e65a5688693a005ad1e18aaee1be) `sha256:3983f42aeb69a2764cc9223ad2fe72a645ac894e0cdf92348f41f5e958efa3b2`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [efb1a1ea](https://github.com/operator-framework/operator-marketplace/commit/efb1a1ea40bc1ed3a439812cfdaa3013b80e96ce) `sha256:3e0cd63a42f08bdab19cabebac770179111258213784c500f612284bc97b0ca4`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [bd7dd701](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/bd7dd70130c531cce7d9a50138fe4286e4208b69) `sha256:7e4246786b4a190a15d794c5fc789b7c8389a9f11f1137266afbfa3d885d8169`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [40d1c0ad](https://github.com/openshift/cloud-provider-powervs/commit/40d1c0adfedeca36498a5d93d69aee96831c756d) `sha256:33f85274e236c8deb74717f76828f9afba7b2d3cc6db9475679916a146836570`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [551974ef](https://github.com/openshift/machine-api-provider-powervs/commit/551974ef93dedb1b9677a778e1533391448e0c56) `sha256:fe1fd6313cc53d3bb6704e57c02c5663227bc5708e4315cb822bf5d3526001a6`
* [rhel-coreos](https://github.com/openshift/os) git [b3f3bce7](https://github.com/openshift/os/commit/b3f3bce740fa6b32bf2c06dd8a6f31bdb831915e) `sha256:79eabaae6340177b2165e0d119a43da362d84294034e28eed361629acdf7b42e`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [b3f3bce7](https://github.com/openshift/os/commit/b3f3bce740fa6b32bf2c06dd8a6f31bdb831915e) `sha256:aa64f2d2fbeb29a611923f1a714eb8a600352cf00c12b326b838b8ac50fcdad1`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [166a3e96](https://github.com/openshift/route-controller-manager/commit/166a3e96f8151d9e789b3951ae75b03cdede5081) `sha256:67c474b8ee15ab62c3e525a2ac56625ffa379937af2e90ce1467e937638569e1`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [e9622ba1](https://github.com/openshift/service-ca-operator/commit/e9622ba18c86bf24aceab0c19fdcb87339c14f44) `sha256:1bc274855f096c56c47c307e0a27f40ecefb88fd8adf1936e527419c0a1ec71a`
* [telemeter](https://github.com/openshift/telemeter) git [b79b872a](https://github.com/openshift/telemeter/commit/b79b872a65edd845891db70f6c9a184458a178da) `sha256:20b40be75d0378426dd9eb545e79812424b25406729f398ceb6312e36ee770f9`
* [thanos](https://github.com/openshift/thanos) git [afeb1c85](https://github.com/openshift/thanos/commit/afeb1c85ba9ee06676a0e657bfa4f4139ccc47b3) `sha256:3222fa84f30d1828dbc1bb249299032049a60ac28a64caf197fabd3f0bd2daa4`
* [tools](https://github.com/openshift/oc) git [d0bf7cc5](https://github.com/openshift/oc/commit/d0bf7cc5959bf8408912e5276f2ea9e269ede24d) `sha256:aad26623a344a140e75795edf533b5a4a5313ee4f146c1fe183b0e1d67d815ad`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [f69584d6](https://github.com/openshift/cloud-provider-vsphere/commit/f69584d6ed7411504b0fff77eb36d0fd64f0fd5e) `sha256:5336413519af2be0931f6e4f791f4c762b0cf12d34334e408eab96b380d22088`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [3adfe2b5](https://github.com/openshift/cluster-api-provider-vsphere/commit/3adfe2b56b259b2d27906d8772354f817e338da5) `sha256:70fdb9f5c207b2b73977be1b7056c9b2c2bb99fe40d681d8a8a026a8dc4b1fb4`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [d163d71c](https://github.com/openshift/vmware-vsphere-csi-driver/commit/d163d71ccf646b3c2b36f4f2fd6ef78f3c254ed5) `sha256:51fa067300300dc89f172d4b5a7f376f9559f18378ebd8a812b4c44b13b0ab81`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [d163d71c](https://github.com/openshift/vmware-vsphere-csi-driver/commit/d163d71ccf646b3c2b36f4f2fd6ef78f3c254ed5) `sha256:bbf75720b354c18ffef6568207da18c899b707d73ad0faa40d19a166da27e3e7`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [a644ba6c](https://github.com/openshift/vsphere-problem-detector/commit/a644ba6cea8f898ef9a856b8ef955e23a1bf4868) `sha256:6ceacc4fe1346bc6ba5a9d76896746279c9eaa9ee4ac53a1074c3c8ff0b1e255`


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/e9c2917ad243c175e5376acd85ec148c71cdada3)

* [OCPBUGS-113553](https://issues.redhat.com/browse/OCPBUGS-113553): Bump nanoid to &gt;=3.3.17 in 4.21 (#4065) [#4065](https://github.com/openshift-assisted/assisted-installer-ui/pull/4065)
* [OCPBUGS-119963](https://issues.redhat.com/browse/OCPBUGS-119963): Bump qs to &gt;=6.16.0 in release-4.21 (#4044) [#4044](https://github.com/openshift-assisted/assisted-installer-ui/pull/4044)
* [OCPBUGS-123207](https://issues.redhat.com/browse/OCPBUGS-123207): Remove stale OCM_REFRESH_TOKEN code (#4026) [#4026](https://github.com/openshift-assisted/assisted-installer-ui/pull/4026)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/5c16a41aa067b77280fcb46f6859edc86010c7d3...e9c2917ad243c175e5376acd85ec148c71cdada3)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/e48a2773a2c884dd4b3a589ee7bf107923414356)

* [OCPBUGS-104023](https://issues.redhat.com/browse/OCPBUGS-104023): replace golang.org/x/net with openshift-sustaining/net v0.50.0-sec.4 for CVE-2026-33814 [#649](https://github.com/openshift/cluster-api-provider-aws/pull/649)
* 🐛 [release-4.21] OCPBUGS-81976: Bump go-jose/go-jose/v4@v4.1.4 [#609](https://github.com/openshift/cluster-api-provider-aws/pull/609)
* 🐛 OCPBUGS-112498: UPSTREAM: 6132: Persist ProviderID immediately after instance creation [#627](https://github.com/openshift/cluster-api-provider-aws/pull/627)
* 🐛 OCPBUGS-121766: UPSTREAM: &lt;carry&gt;: Fix unit tests for OpenShift CI environment [#628](https://github.com/openshift/cluster-api-provider-aws/pull/628)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/f8d6aae691e82bf95f97871ce3443a08aa4ef366...e48a2773a2c884dd4b3a589ee7bf107923414356)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/116192b6d78b0f62f8ca111a9fd4d2eb4324bc5f)

* [OCPBUGS-127563](https://issues.redhat.com/browse/OCPBUGS-127563): Add opt-in pprof endpoint to machine-controller-manager [#221](https://github.com/openshift/machine-api-provider-aws/pull/221)
* [OCPBUGS-127563](https://issues.redhat.com/browse/OCPBUGS-127563): Cache region validation response and close AWS sessions [#220](https://github.com/openshift/machine-api-provider-aws/pull/220)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/938565c9f796fba385c0978a5ae1cc0a79f0f857...116192b6d78b0f62f8ca111a9fd4d2eb4324bc5f)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/53d73b17f0209026eef63d68e39faf195472adf5)

* [OCPBUGS-104016](https://issues.redhat.com/browse/OCPBUGS-104016), [OCPBUGS-104207](https://issues.redhat.com/browse/OCPBUGS-104207): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.3 to address CVE-2026-33814 [#205](https://github.com/openshift/cloud-provider-azure/pull/205)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/c9afac2fda20f18d786271340826c628f5419150...53d73b17f0209026eef63d68e39faf195472adf5)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/49b9fc9a139c1c7cdcc42ea14b6fcb7f7ffe5610)

* [OCPBUGS-104017](https://issues.redhat.com/browse/OCPBUGS-104017): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.3 to address CVE-2026-33814 [#402](https://github.com/openshift/cluster-api-provider-azure/pull/402)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/3ae65a465e6da7d92ecec285fe8543acd8bb3dd4...49b9fc9a139c1c7cdcc42ea14b6fcb7f7ffe5610)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/65ba1a8d7133b2947eec2fe16e43de0134921e03)

* [OCPBUGS-104120](https://issues.redhat.com/browse/OCPBUGS-104120): replace golang.org/x/net with openshift-sustaining/net@v0.50.0-sec.4 [#210](https://github.com/openshift/machine-api-provider-azure/pull/210)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/782f0ab6a2636aef0f699cfe7a49e8fadefb9807...65ba1a8d7133b2947eec2fe16e43de0134921e03)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/006669f5812a47dbc733b6736584b87ef696e898)

* [OCPBUGS-90031](https://issues.redhat.com/browse/OCPBUGS-90031), [OCPBUGS-92990](https://issues.redhat.com/browse/OCPBUGS-92990): Replace golang.org/x/crypto with github.com/openshift-sustaining/crypto v0.48.0-sec.2 [#10820](https://github.com/openshift/installer/pull/10820)
* [Full changelog](https://github.com/openshift/installer/compare/1d6640d424ff59840b59a731fe99bfd9bb742bb5...006669f5812a47dbc733b6736584b87ef696e898)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/419ef9d44ad0e63927900add4a90fcb9a9fce3d0)

* [OCPBUGS-104035](https://issues.redhat.com/browse/OCPBUGS-104035): Bump golang.org/x/net from v0.43.0 to v0.50.0-sec.4 [#980](https://github.com/openshift/cluster-authentication-operator/pull/980)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/65eb4b2193d0860c1c1f45b08ea7203694db909f...419ef9d44ad0e63927900add4a90fcb9a9fce3d0)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/27b401cd08dc567360928f0743326d41951b21dc)

* [OCPBUGS-104191](https://issues.redhat.com/browse/OCPBUGS-104191): Replace golang.org/x/net with openshift-sustaining/net v0.50.0-sec.4 for CVE-2026-33814 [#439](https://github.com/openshift/kubernetes-autoscaler/pull/439)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/a921db0077641ab179c3048c9b5d21f54bb36e55...27b401cd08dc567360928f0743326d41951b21dc)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/38f90c71530c85e6a7e82ddfcc27937a233e927b)

* [OCPBUGS-104043](https://issues.redhat.com/browse/OCPBUGS-104043): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.4 to address CVE-2026-33814 [#510](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/510)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/c050cf15d939b1456e99caa71a46fb797d7b56c1...38f90c71530c85e6a7e82ddfcc27937a233e927b)


### [cluster-config-api](https://github.com/openshift/api/tree/eb96322bf52288bf7931bb6240fd244cc362a68b)

* [SPLAT-2866](https://issues.redhat.com/browse/SPLAT-2866): Add vSphere multi vCenter Day 2 [#3036](https://github.com/openshift/api/pull/3036)
* [Full changelog](https://github.com/openshift/api/compare/1cb630ce7109e6c4780332bb8140c8c4f7157426...eb96322bf52288bf7931bb6240fd244cc362a68b)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/f30c6160c94034639739df5ce940d60d1d7c028a)

* [OCPBUGS-93736](https://issues.redhat.com/browse/OCPBUGS-93736): Guard OLM subscription lookup with capability check [#1490](https://github.com/openshift/cluster-ingress-operator/pull/1490)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/e45a96d194a3eea3178c1fe046a9b68220254173...f30c6160c94034639739df5ce940d60d1d7c028a)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/1c840109b6f83880e73b5d12bd58f3b902438afe)

* [OCPBUGS-127407](https://issues.redhat.com/browse/OCPBUGS-127407): Bump of library-go [#2326](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2326)
* [OCPBUGS-88326](https://issues.redhat.com/browse/OCPBUGS-88326): Fix kube-apiserver-to-kubelet-signer refresh interval [#2192](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2192)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/dc1c217c263cd220ddd2ed6fe827a466d47e3ebb...1c840109b6f83880e73b5d12bd58f3b902438afe)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/0fa8ad009fe58e668ae9a758cf8288c0302027f5)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.21] [#3114](https://github.com/openshift/cluster-monitoring-operator/pull/3114)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/9b8c136071a82310b47a9ceab869257378a929c3...0fa8ad009fe58e668ae9a758cf8288c0302027f5)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/bd4ada0046efe2f4ec12aac7ce1f555c9e510830)

* [OCPBUGS-127442](https://issues.redhat.com/browse/OCPBUGS-127442): [release-4.21] Allow per-node OVN encap IP override via env-overrides [#3177](https://github.com/openshift/cluster-network-operator/pull/3177)
* [OCPBUGS-126704](https://issues.redhat.com/browse/OCPBUGS-126704): Restart pods when rendering egressIP settings [#3168](https://github.com/openshift/cluster-network-operator/pull/3168)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/d1d5e0e61459c068cd5024746b54275685279f9f...bd4ada0046efe2f4ec12aac7ce1f555c9e510830)


### [console](https://github.com/openshift/console/tree/2f1997abe650fbe9de360a061360c5fc0a67f6d9)

* [OCPBUGS-122212](https://issues.redhat.com/browse/OCPBUGS-122212): Wait for demo plugin deployment readiness [#17160](https://github.com/openshift/console/pull/17160)
* [Full changelog](https://github.com/openshift/console/compare/fc1b9b66cfdde50fb87b55242a57f85053ad994f...2f1997abe650fbe9de360a061360c5fc0a67f6d9)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/063501a59511f2924cd40222ba0d2cca03af8388)

* [OCPBUGS-96550](https://issues.redhat.com/browse/OCPBUGS-96550): Bump golang.org/x/net to v0.50.0-sec.4 [#417](https://github.com/openshift/cloud-provider-openstack/pull/417)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/ee321fbd37b2ded41a96004d52a7652b67e28809...063501a59511f2924cd40222ba0d2cca03af8388)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/c3a5a353da0861670a8452cf7502183aa1c6116f)

* UPSTREAM: 110: OCPBUGS-104081: Bump golang.org/x/net to v0.50.0-sec.4 [#112](https://github.com/openshift/csi-external-attacher/pull/112)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/6a3be10e6795c8149c4bd3c9856f7e2d312108e2...c3a5a353da0861670a8452cf7502183aa1c6116f)


### [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata/tree/47c30abf040beaec6304e0378695d1eee43b0e20)

* [OCPBUGS-80787](https://issues.redhat.com/browse/OCPBUGS-80787): Bump google.golang.org/grpc to v1.79.3 [release-4.21] [#20](https://github.com/openshift/csi-external-snapshot-metadata/pull/20)
* [Full changelog](https://github.com/openshift/csi-external-snapshot-metadata/compare/af250fdbac8af84d9808a2892bfc911c04162115...47c30abf040beaec6304e0378695d1eee43b0e20)


### [csi-external-snapshotter, csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter/tree/d5255eb9b32130c684957e258bd1b2f40f0a70fa)

* [OCPBUGS-104077](https://issues.redhat.com/browse/OCPBUGS-104077): Replace golang.org/x/net with github.com/openshift-sustaining/net v0.50.0-sec.3 to mitigate CVE-2026-33814 (release-4.21) [#235](https://github.com/openshift/csi-external-snapshotter/pull/235)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/2c14afc50a30de62cb00cc8263b061383cfbd3b5...d5255eb9b32130c684957e258bd1b2f40f0a70fa)


### [docker-builder](https://github.com/openshift/builder/tree/3c27415e6167879dc02bf2fc4388a7d914109b2c)

* [OCPBUGS-90033](https://issues.redhat.com/browse/OCPBUGS-90033), [OCPBUGS-90475](https://issues.redhat.com/browse/OCPBUGS-90475), [OCPBUGS-92525](https://issues.redhat.com/browse/OCPBUGS-92525), [OCPBUGS-92654](https://issues.redhat.com/browse/OCPBUGS-92654), [OCPBUGS-92992](https://issues.redhat.com/browse/OCPBUGS-92992): Bump golang.org/x/crypto to fix CVE-2025-22869,CVE-2025-47913,CVE-2026-46597,CVE-2026-39829,CVE-2026-39832 [#547](https://github.com/openshift/builder/pull/547)
* [Full changelog](https://github.com/openshift/builder/compare/48fce231bac118a63992f466acc8b29a29e1ddde...3c27415e6167879dc02bf2fc4388a7d914109b2c)


### [docker-registry](https://github.com/openshift/image-registry/tree/42b6cb7c6467083b0805c2515817da7c1038a5d3)

* [OCPBUGS-104087](https://issues.redhat.com/browse/OCPBUGS-104087): [release-4.21] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#477](https://github.com/openshift/image-registry/pull/477)
* [Full changelog](https://github.com/openshift/image-registry/compare/602f51c795dcdcd71c75f6abfe79dc0424a0476a...42b6cb7c6467083b0805c2515817da7c1038a5d3)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/0b668ce7bac61039537f573ad6d6f7297dd34b05)

* NO-JIRA: Update OWNERS [#159](https://github.com/openshift/cloud-provider-gcp/pull/159)
* [OCPBUGS-115261](https://issues.redhat.com/browse/OCPBUGS-115261): Fix node.kubernetes.io/exclude-from-external-load-balancers on masters [#142](https://github.com/openshift/cloud-provider-gcp/pull/142)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/e27accef1fa99089410e4b0894db21a392d9bf99...0b668ce7bac61039537f573ad6d6f7297dd34b05)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/53820aadd2cc313cb0ce54788bb1fceec5b95eed)

* [OCPBUGS-104131](https://issues.redhat.com/browse/OCPBUGS-104131): Bump golang.org/x/net to v0.50.0-sec.3 [#186](https://github.com/openshift/machine-api-provider-gcp/pull/186)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/689c32d583d5c0a49de77e0ccc15646a15cae065...53820aadd2cc313cb0ce54788bb1fceec5b95eed)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/6f1c697f3877a7ab51b612c8cf3a69b0351d084b)

* [OCPBUGS-104100](https://issues.redhat.com/browse/OCPBUGS-104100): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#211](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/211)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/8d9f11a7f2c4e757bfc5e99ba69084d29a28b79b...6f1c697f3877a7ab51b612c8cf3a69b0351d084b)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/601ff80b0459adda2d2c5865bfb8d568a1fa68b7)

* UPSTREAM: &lt;carry&gt;: OCPBUGS-99230: Fix ClusterIsIPv6() detection for dual-stack v6-primary clusters [#2722](https://github.com/openshift/kubernetes/pull/2722)
* [Full changelog](https://github.com/openshift/kubernetes/compare/93afd702239e69df4bf4b7e66140455ab8282acd...601ff80b0459adda2d2c5865bfb8d568a1fa68b7)


### [hypershift](https://github.com/openshift/hypershift/tree/cbe8b2e2917d14d41cd7c343724481e56f258198)

* [OCPBUGS-81489](https://issues.redhat.com/browse/OCPBUGS-81489): Add MTU override for OVN-Kubernetes on hosted clusters [#8136](https://github.com/openshift/hypershift/pull/8136)
* [CNTRLPLANE-4570](https://issues.redhat.com/browse/CNTRLPLANE-4570): add kubeClientQPS and kubeClientBurst to ClusterAutoscaling [#9888](https://github.com/openshift/hypershift/pull/9888)
* [OCPBUGS-128933](https://issues.redhat.com/browse/OCPBUGS-128933): [release-4.21] fix: grant cluster-autoscaler watch access [#9855](https://github.com/openshift/hypershift/pull/9855)
* [OCPBUGS-120681](https://issues.redhat.com/browse/OCPBUGS-120681): Apply ingress load balancer scope to default IngressController [#9541](https://github.com/openshift/hypershift/pull/9541)
* [OCPBUGS-112732](https://issues.redhat.com/browse/OCPBUGS-112732): fix(certs): normalize IP SANs to stop dual-stack KAS cert churn [#9497](https://github.com/openshift/hypershift/pull/9497)
* [OCPBUGS-128418](https://issues.redhat.com/browse/OCPBUGS-128418): fix(konnectivity): enable --sync-forever to restore lost agent-server tunnels [#9800](https://github.com/openshift/hypershift/pull/9800)
* [OCPBUGS-98327](https://issues.redhat.com/browse/OCPBUGS-98327): fix(kubevirt): use only first MachineInternalIP per family in EndpointSlice endpoints [#8978](https://github.com/openshift/hypershift/pull/8978)
* [CNTRLPLANE-4158](https://issues.redhat.com/browse/CNTRLPLANE-4158): Maintain ingress serving cert for HostedCluster ingress [#9744](https://github.com/openshift/hypershift/pull/9744)
* [ACM-46124](https://issues.redhat.com/browse/ACM-46124): improve hypershift-rhel9-operator container grade on MCE 2.11 [release-4.21] [#9739](https://github.com/openshift/hypershift/pull/9739)
* [OCPBUGS-120751](https://issues.redhat.com/browse/OCPBUGS-120751): update Containerfile.cli runtime base image to floating tag [release-4.21] [#9557](https://github.com/openshift/hypershift/pull/9557)
* [OCPBUGS-125792](https://issues.redhat.com/browse/OCPBUGS-125792): hardcode ETCD_METRICS=extensive in etcd StatefulSet template [#9696](https://github.com/openshift/hypershift/pull/9696)
* [Full changelog](https://github.com/openshift/hypershift/compare/db86285f89737b67a53668e42a47ffd6c8cd5170...cbe8b2e2917d14d41cd7c343724481e56f258198)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/ca2f7d03f3ff062e7f40e6a07e571b27d1742a77)

* [OCPBUGS-120699](https://issues.redhat.com/browse/OCPBUGS-120699): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.4 to address CVE-2026-33814 [#111](https://github.com/openshift/cloud-provider-ibm/pull/111)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/c566572b2cf0120499e81181f1efb1e729e9c418...ca2f7d03f3ff062e7f40e6a07e571b27d1742a77)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/f6ca28cbbde5485f69cfce97c78f2b660c233d4e)

* [OCPBUGS-104111](https://issues.redhat.com/browse/OCPBUGS-104111): Use patched x/net fork v0.50.0-sec.4 [#191](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/191)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/00bc740728d9f8ec86fe04199884108c2a091b58...f6ca28cbbde5485f69cfce97c78f2b660c233d4e)


### [insights-operator](https://github.com/openshift/insights-operator/tree/1117c195d377924c2843df48e42096b8de3291bc)

* [OCPBUGS-123175](https://issues.redhat.com/browse/OCPBUGS-123175): add custom proxy field to insights config [#1365](https://github.com/openshift/insights-operator/pull/1365)
* [OCPBUGS-104096](https://issues.redhat.com/browse/OCPBUGS-104096): Bump golang.org/x/net to v0.50.0-sec.3 [#1352](https://github.com/openshift/insights-operator/pull/1352)
* [Full changelog](https://github.com/openshift/insights-operator/compare/a6c3cab2c07793952697511b1dc29d13737ac0a1...1117c195d377924c2843df48e42096b8de3291bc)


### [ironic](https://github.com/openshift/ironic-image/tree/d9db7430c1e402239d980e0c10428341f49937de)

* [OCPBUGS-115166](https://issues.redhat.com/browse/OCPBUGS-115166): ZTP deployment failed on an iDRAC10 cluster [#919](https://github.com/openshift/ironic-image/pull/919)
* [Full changelog](https://github.com/openshift/ironic-image/compare/843f55a9276bf03d3cb659de5cb38f189e6e8fcf...d9db7430c1e402239d980e0c10428341f49937de)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/a577f425844d4c95b91dc4eec2a4068e1f6cf443)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.21] [#82](https://github.com/openshift/kubernetes-metrics-server/pull/82)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/ff4f3e2a6d2b0e8a860831b98733cff152cfddd3...a577f425844d4c95b91dc4eec2a4068e1f6cf443)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/046d6971fc4afa9e69f692dbaba50e29567f9cee)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.21] [#188](https://github.com/openshift/kube-state-metrics/pull/188)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/8406e402ad020185813942842d4914ff7730fdc1...046d6971fc4afa9e69f692dbaba50e29567f9cee)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/eded17488ec6ecf0d33c5109ceed536a50f05c2a)

* [OCPBUGS-128567](https://issues.redhat.com/browse/OCPBUGS-128567): vsphere - Cache REST API sessions to prevent excessive vCenter logouts [#1567](https://github.com/openshift/machine-api-operator/pull/1567)
* [SPLAT-2866](https://issues.redhat.com/browse/SPLAT-2866): Added multi vCenter Day 2 Support [#1554](https://github.com/openshift/machine-api-operator/pull/1554)
* [OCPBUGS-127563](https://issues.redhat.com/browse/OCPBUGS-127563): Add opt-in kube-rbac-proxy sidecar for pprof endpoint (AWS) [#1561](https://github.com/openshift/machine-api-operator/pull/1561)
* [OCPBUGS-104125](https://issues.redhat.com/browse/OCPBUGS-104125): replace golang.org/x/net with openshift-sustaining/net@v0.50.0-sec.4 [#1542](https://github.com/openshift/machine-api-operator/pull/1542)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/88f39dc939cceb2c1999f2b0ab99f1118f26358f...eded17488ec6ecf0d33c5109ceed536a50f05c2a)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/b13ad2aab188dc77776734da29afbf904f8b5006)

* [OCPBUGS-128598](https://issues.redhat.com/browse/OCPBUGS-128598): wrong early exit during kubelet MCs regeneration [#6599](https://github.com/openshift/machine-config-operator/pull/6599)
* [OCPBUGS-127254](https://issues.redhat.com/browse/OCPBUGS-127254): Correctly handle MC deletion in image mode when no new build is required [#6575](https://github.com/openshift/machine-config-operator/pull/6575)
* [OCPBUGS-104144](https://issues.redhat.com/browse/OCPBUGS-104144): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#6504](https://github.com/openshift/machine-config-operator/pull/6504)
* [OCPBUGS-123140](https://issues.redhat.com/browse/OCPBUGS-123140): limit ContainerRuntimeConfig status condition to 3 [#6539](https://github.com/openshift/machine-config-operator/pull/6539)
* [OCPBUGS-120453](https://issues.redhat.com/browse/OCPBUGS-120453): Update message for MachineOSBuildFailed condition [#6493](https://github.com/openshift/machine-config-operator/pull/6493)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/f08b4678edfbce0d57e8d7dc779bf6aae131f0e8...b13ad2aab188dc77776734da29afbf904f8b5006)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/069c86cef9402077f674302f02061ec16aa5cfa2)

* [OCPBUGS-104119](https://issues.redhat.com/browse/OCPBUGS-104119): Replace golang.org/x/net with openshift-sustaining/net v0.50.0-sec.4 for CVE-2026-33814 [#195](https://github.com/openshift/image-customization-controller/pull/195)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/65aeb3607f05dd71ec27a4457945ce1e054ea9e9...069c86cef9402077f674302f02061ec16aa5cfa2)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/9afa9dc4f1804e439c3aebdca71226fb680b0c72)

* [OU-1528](https://issues.redhat.com/browse/OU-1528): [release-4.21] Optimize namespace changes in Alerts [#1311](https://github.com/openshift/monitoring-plugin/pull/1311)
* NO-JIRA: [release-4.21] Sanitize alert runbook URLs [#1296](https://github.com/openshift/monitoring-plugin/pull/1296)
* Fix OCPBUGS-104124: CVE-2026-33814 Replace golang.org/x/net with the patched github.com/openshift-sustaining/net@v0.50.0-sec.4 fork to remediate CVE-2026-33814 [#1201](https://github.com/openshift/monitoring-plugin/pull/1201)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/563488150549466015299a876981a19e54c22b8b...9afa9dc4f1804e439c3aebdca71226fb680b0c72)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/9c8756318c94e2748740b0d75d3a911cdd624bd0)

* [OCPBUGS-104135](https://issues.redhat.com/browse/OCPBUGS-104135): bump golang.org/x/net to v0.50.0-sec.3 to fix CVE-2026-33814 [#131](https://github.com/openshift/multus-admission-controller/pull/131)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/d95feb67adfb97346849c79e36b6a9d404296ae9...9c8756318c94e2748740b0d75d3a911cdd624bd0)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/215643f7207e73eaf4db30d59f8dbf4ff1ef3faf)

* [OCPBUGS-104143](https://issues.redhat.com/browse/OCPBUGS-104143): [release-4.21] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#354](https://github.com/openshift/multus-cni/pull/354)
* [OCPBUGS-120763](https://issues.redhat.com/browse/OCPBUGS-120763): [Release 4.21] Cherry-pick fix for the issue of stripping delegate datastore config on CNI DEL, leaking IPAM addresses [#351](https://github.com/openshift/multus-cni/pull/351)
* [Full changelog](https://github.com/openshift/multus-cni/compare/8f5dd8b1e9f0c2b2404e3c8ddcffb1fd9441003d...215643f7207e73eaf4db30d59f8dbf4ff1ef3faf)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/9af0359dc73e8489059057a625d53c5293923993)

* [OCPBUGS-104121](https://issues.redhat.com/browse/OCPBUGS-104121): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.3 to address CVE-2026-33814 [#150](https://github.com/openshift/network-metrics-daemon/pull/150)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/844fa588c4200b8ff768d1916d63f1d4c1db2daf...9af0359dc73e8489059057a625d53c5293923993)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/c5175f7af1302a5788d33ee2f61c8723d0f5c358)

* maintenance: Bump the npm group with 23 updates [#576](https://github.com/openshift/networking-console-plugin/pull/576)
* maintenance: Bump the npm group across 1 directory with 24 updates [#571](https://github.com/openshift/networking-console-plugin/pull/571)
* [OCPNETUI-156](https://issues.redhat.com/browse/OCPNETUI-156): Align shared modules with Console [#565](https://github.com/openshift/networking-console-plugin/pull/565)
* maintenance: Bump the npm group with 15 updates [#548](https://github.com/openshift/networking-console-plugin/pull/548)
* maintenance: Bump the npm group across 1 directory with 20 updates [#536](https://github.com/openshift/networking-console-plugin/pull/536)
* maintenance: Bump the npm group with 232 updates [#498](https://github.com/openshift/networking-console-plugin/pull/498)
* [OCPNETUI-82](https://issues.redhat.com/browse/OCPNETUI-82): Lower Dockerfile base image versions [#518](https://github.com/openshift/networking-console-plugin/pull/518)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/bb43b26444230a391f36feec1811d1fa9523f703...c5175f7af1302a5788d33ee2f61c8723d0f5c358)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/8b500504e841a146871e361f20ebb6c54c83d2a1)

* [OCPBUGS-112097](https://issues.redhat.com/browse/OCPBUGS-112097): bugfix: rewrite open redirect strings to '/' [#381](https://github.com/openshift/oauth-proxy/pull/381)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/d4c7cc97754f353d9270de238990c988c85d1c97...8b500504e841a146871e361f20ebb6c54c83d2a1)


### [oauth-server](https://github.com/openshift/oauth-server/tree/ae06da6b5bdbeb2bac03126af40bec22833b2104)

* [OCPBUGS-87078](https://issues.redhat.com/browse/OCPBUGS-87078): bugfix: default to english when Accept-Language header contains more than 1000 underscores [#269](https://github.com/openshift/oauth-server/pull/269)
* [Full changelog](https://github.com/openshift/oauth-server/compare/85a8ae3529821203c39559c4df6231ef3607e64e...ae06da6b5bdbeb2bac03126af40bec22833b2104)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/446055688cb197a72ae1ca850e568931fcf54fe3)

* [OCPBUGS-104022](https://issues.redhat.com/browse/OCPBUGS-104022): Use patched x/net fork v0.50.0-sec.4 [#1555](https://github.com/openshift/oc-mirror/pull/1555)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/9c41c399a30d4e3a6e2f60aae8b4fbee1013c9c2...446055688cb197a72ae1ca850e568931fcf54fe3)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/1bd385d08adeae4bd98a902d29f984c00471ec1e)

* [OCPBUGS-128986](https://issues.redhat.com/browse/OCPBUGS-128986): [release-4.21] clean up orphaned catalog cache temp dirs [#815](https://github.com/openshift/operator-framework-operator-controller/pull/815)
* [OCPBUGS-104166](https://issues.redhat.com/browse/OCPBUGS-104166): [release-4.21] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#801](https://github.com/openshift/operator-framework-operator-controller/pull/801)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/92ef079dccfdf08c11d653113d5758827e67616c...1bd385d08adeae4bd98a902d29f984c00471ec1e)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/d02231d0a92491926666f4f1f5e45a7e2c733cb7)

* UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.13 into release-4.21 [#417](https://github.com/openshift/cluster-api-provider-openstack/pull/417)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/f4f439d4ce40c1175188c81591284dcc9fe6facf...d02231d0a92491926666f4f1f5e45a7e2c733cb7)


### [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller/tree/1ff3909142325a184993917fd9447c24cd6ce63f)

* [OCPBUGS-104030](https://issues.redhat.com/browse/OCPBUGS-104030): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.43.0-sec.3 to address CVE-2026-33814 [#44](https://github.com/openshift/openstack-resource-controller/pull/44)
* UPSTREAM-SYNC: Bump envtest version [#47](https://github.com/openshift/openstack-resource-controller/pull/47)
* [Full changelog](https://github.com/openshift/openstack-resource-controller/compare/70f5ad34915041c82ad0a8ed6ea64bd8859d1e72...1ff3909142325a184993917fd9447c24cd6ce63f)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/e0c18696b033d125090f0af6205ec5cd39eaf9de)

* [OCPBUGS-104147](https://issues.redhat.com/browse/OCPBUGS-104147), [OCPBUGS-104152](https://issues.redhat.com/browse/OCPBUGS-104152): CVE-2026-33814: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.3 [#1363](https://github.com/openshift/operator-framework-olm/pull/1363)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/dea74354157f010d1c2705f87c88b3724843e90d...e0c18696b033d125090f0af6205ec5cd39eaf9de)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/dda741fdb17fa76235b6550e42b0de467026421b)

* [OCPBUGS-128910](https://issues.redhat.com/browse/OCPBUGS-128910): NO-JIRA: Branch Sync release-5.0 to release-4.21 [10-01-2026] [#3504](https://github.com/openshift/ovn-kubernetes/pull/3504)
* NO-JIRA: Branch Sync release-5.0 to release-4.21 [09-28-2026] [#3477](https://github.com/openshift/ovn-kubernetes/pull/3477)
* [OCPBUGS-128245](https://issues.redhat.com/browse/OCPBUGS-128245): Branch Sync release-5.0 to release-4.21 [09-18-2026] [#3462](https://github.com/openshift/ovn-kubernetes/pull/3462)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/e2e61dbe576da162f711394c89068b8067f72343...dda741fdb17fa76235b6550e42b0de467026421b)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/ac080eb0fe6c3849d2ff8cd8233a6d911f508043)

* [OCPBUGS-104163](https://issues.redhat.com/browse/OCPBUGS-104163): Mitigate CVE-2026-33814 by bumping golang.org/x/net to v0.57.0 [#122](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/122)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/b714ab87d079db5ef3c4097520db40cd289b025e...ac080eb0fe6c3849d2ff8cd8233a6d911f508043)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/b909768250b0d975fb19239281d4fed7ab246a3e)

* NO-ISSUE: synchronize OWNERS from main branch [release-4.21] [#406](https://github.com/openshift/prom-label-proxy/pull/406)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/610c11b59dd17f1d6dc35b62ca1d0602b5c0f494...b909768250b0d975fb19239281d4fed7ab246a3e)


### [prometheus](https://github.com/openshift/prometheus/tree/9234216efb7d1fe93a837b4c3a23f349e2a0cfd9)

* NO-ISSUE: synchronize OWNERS from main branch [#389](https://github.com/openshift/prometheus/pull/389)
* [Full changelog](https://github.com/openshift/prometheus/compare/6e65a831d39940685cf4cfaf6343278c163edede...9234216efb7d1fe93a837b4c3a23f349e2a0cfd9)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/86256406b5750999143f610430a80d1ce8381a6e)

* NO-JIRA: synchronize OWNERS with main [#193](https://github.com/openshift/prometheus-alertmanager/pull/193)
* [OCPBUGS-104155](https://issues.redhat.com/browse/OCPBUGS-104155): Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 [#169](https://github.com/openshift/prometheus-alertmanager/pull/169)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/9b60183df3d2e4aa0e90a7ecf09855e2ee91d39b...86256406b5750999143f610430a80d1ce8381a6e)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/d392d80ac2194cf33969ec56aed5d624da8053e0)

* [OCPBUGS-104160](https://issues.redhat.com/browse/OCPBUGS-104160), [OCPBUGS-104188](https://issues.redhat.com/browse/OCPBUGS-104188): [release-4.21] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#394](https://github.com/openshift/prometheus-operator/pull/394)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/3de9763f36128ffa8b25a63c9447f6d64114c270...d392d80ac2194cf33969ec56aed5d624da8053e0)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/45ddb8d5124555a955a239ae02709ca06718e311)

* [OCPBUGS-104190](https://issues.redhat.com/browse/OCPBUGS-104190): Use patched x/net fork v0.50.0-sec.4 [#197](https://github.com/openshift/node_exporter/pull/197)
* NO-ISSUE: synchronize OWNERS from main branch [release-4.21] [#209](https://github.com/openshift/node_exporter/pull/209)
* [Full changelog](https://github.com/openshift/node_exporter/compare/39d728735779afef886bc10a8bc7cf72f54d51a0...45ddb8d5124555a955a239ae02709ca06718e311)


### [tests](https://github.com/openshift/origin/tree/c941d145e570817f0408dc531c4261eecc21c4e7)

* [OCPBUGS-69943](https://issues.redhat.com/browse/OCPBUGS-69943): feat: render OTE JSON results in spyglass [#30633](https://github.com/openshift/origin/pull/30633)
* [Full changelog](https://github.com/openshift/origin/compare/d5786c8462fcb79a385f4986109a5fed57b1da52...c941d145e570817f0408dc531c4261eecc21c4e7)


### [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator/tree/f276506ffe92efa62da6a615921f3577c8bc38af)

* [OCPBUGS-104198](https://issues.redhat.com/browse/OCPBUGS-104198): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.3 [#21](https://github.com/openshift/volume-data-source-validator/pull/21)
* [Full changelog](https://github.com/openshift/volume-data-source-validator/compare/8b9293323cf8fdce93824e37168573ca3f73de3a...f276506ffe92efa62da6a615921f3577c8bc38af)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/c597eb81e44a80957f84c9f7f4947e3371f6df6d)

* [OCPBUGS-104208](https://issues.redhat.com/browse/OCPBUGS-104208): Bump golang.org/x/net to v0.50.0-sec.3 [#353](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/353)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/d6a19449cc5d49541221d48d62c67d7a48142d19...c597eb81e44a80957f84c9f7f4947e3371f6df6d)