# 5.0.0-ec.2
Created: 2026-05-26 17:03:11 +0000 UTC
Image Digest: `sha256:e8f74fa0423f416cdcd6b35a0769765118c0f8ba9d7e0e25517e41c59483c6af`
## Changes from 4.22.0-rc.3
### Components
* Kubectl 1.35.2
* Kubernetes upgraded from 1.35.4 to 1.35.3
* Kubernetes Tests 1.35.1
* Red Hat Enterprise Linux CoreOS 10.2 upgraded from 10.2.20260423-0 to 10.2.20260513-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | OKD
Hypershift | OKD
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: |
| ConsolePluginContentSecurityPolicy
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| DRAPartitionableDevices
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| KMSEncryptionProvider
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| RouteExternalCertificate
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| UserNamespacesPodSecurityStandards
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| UserNamespacesSupport
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| EVPN
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled |
| MutatingAdmissionPolicy
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled |
| OpenShiftPodSecurityAdmission
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled |
| OLMLifecycleAndCompatibility
(0 tests)| | | | Enabled
(New)| | | | Enabled
(New) |
### Rebuilt images without code change
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [f0be9c72](https://github.com/openshift/aws-karpenter-provider-aws/commit/f0be9c72e5bf25caeb2ca45c14e67e4d397a52cb) `sha256:bc0fbfee866573876470d799d46231a60b1ca608ebe8aafb73f5c68c22971c72`
* [aws-node-termination-handler](https://github.com/openshift/aws-node-termination-handler) git [341ed3a0](https://github.com/openshift/aws-node-termination-handler/commit/341ed3a086925b17671c5349343fedf988a1139e) `sha256:4efb0f31eae953ced06e346ce543370492febfedb946c3e9cb6b11a70ad72c7b`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [82088287](https://github.com/openshift/aws-pod-identity-webhook/commit/8208828799b6c4f91fd9b80128668f7765599e84) `sha256:30ec2125ffe74156eb1ae1f8e08a9c92f51598e01363a1fcbaf4a64712c05b2b`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [8d863b95](https://github.com/openshift/cluster-api-provider-baremetal/commit/8d863b9505a5cfc0b01e33f985a3edf9d3c69f4b) `sha256:f0f6d25b5411f59e2c01cb2778f3d2cce9392a7a35214175a99a4a8d5e28a961`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [2d69ad95](https://github.com/openshift/cloud-network-config-controller/commit/2d69ad953cfaa419e9b6221da9edb152ded91e0b) `sha256:dd5fcce4f6feab1eb9c36eb747f262b3efe22368a52a5abcfeb0d1a1bed9cba7`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [260ea1b5](https://github.com/openshift/cluster-autoscaler-operator/commit/260ea1b5967f47768a0727e8c84d451dc9de5ced) `sha256:767c2a51f7089081fae954ec34715bd7fc60416ec4f7a5224101d86bf2a90b1d`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [108f37f0](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/108f37f0e378accc322cbeb68136ec500ec35b94) `sha256:ea987a35f1863a9fc89d814de9385b64c8df20713f5c5f1c26e3f83f45147dfb`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [3d214118](https://github.com/openshift/cluster-dns-operator/commit/3d2141182243cde1ec6417bd005c76d29aa88a01) `sha256:f5f843c8362514ba3b1cb9ce056d81ea6af62a855400ca527d6c0e3924995309`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [8dfdf2ef](https://github.com/openshift/cluster-storage-operator/commit/8dfdf2ef3310358f3559a5481df43b98b2294791) `sha256:2d2c06add3a09213b600ea6006ba1846dae934ca4fef6f358451d5f5e75fb66a`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [3b5c59cc](https://github.com/openshift/cluster-update-keys/commit/3b5c59cc6461663751bc510b4f9f1954ed8c9b50) `sha256:34930d55c6927d6477ea498e70629fd86e022179b79d2df2aca9b051e0e556c4`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [94e41c4c](https://github.com/openshift/configmap-reload/commit/94e41c4c6a5832dfd19750173d6544784ba235ec) `sha256:c949025501d979f13f0d17171819a126f91c7e876f508e31dc008d84be70d9b6`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:98767e654acec827c5519d5447bb58f53e5a07908f6e0b0acf866533bce68737`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:55a3ecfe7100cbf39caf0416cbc0159304a86a7a181ff1e63cbeba020fb3c196`
* [coredns](https://github.com/openshift/coredns) git [0dded2d2](https://github.com/openshift/coredns/commit/0dded2d232dab43c107b1dab9d0d9fdfd8259622) `sha256:fbf922ca287ffc25dd59cef6cfc7a18721ff1b034879067c5a289b2613d2e1aa`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [98b1f4ac](https://github.com/openshift/csi-external-attacher/commit/98b1f4acf9c004687ef55e9f187703768933bb56) `sha256:73d3b027f9a920309ccd18fac2f7cfa3df06ec956db36e00a7395b6272ad181e`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [4e74a4aa](https://github.com/openshift/csi-external-resizer/commit/4e74a4aa52a2046d6b97a47dff7a60ddb73d0bbd) `sha256:e2d1b7f4355c43e851dfbc64739201f27c82f3660c93f0e699b6c5a04d36cf3a`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [76523185](https://github.com/openshift/csi-external-snapshot-metadata/commit/7652318579a38838931a5be492cee3573c7c8ecf) `sha256:5b8b6d87465aada06b46a31b4076731bd8223df396ee24ff4f93272dcdbf6482`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [4d5e959a](https://github.com/openshift/csi-livenessprobe/commit/4d5e959a182b4db70dc52302bd89eebfec40d5a5) `sha256:fce1590ad50c2e5b98169251c38755316906846c03135cae0ee177126da53088`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [cf174b30](https://github.com/openshift/csi-node-driver-registrar/commit/cf174b30fad107d354afb0f0b09030a7c97fd296) `sha256:5fdd5a67de0fd6c43063370907c58a13197f7627fec45b354a5d8199298f89d9`
* [docker-builder](https://github.com/openshift/builder) git [fcd4ce2d](https://github.com/openshift/builder/commit/fcd4ce2d96613a27bd1ab7f53ff47225976c4ba9) `sha256:bd95f6834431639a8d1734986f22a15a59b3de9dcdcd4830e3348df5962290b9`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [7aa4007a](https://github.com/openshift/driver-toolkit/commit/7aa4007a8601bf4bb23b696f580c022f58877223) `sha256:877d905bb7a102164eec85035385d5c3d9009564c40ed87e0e95456c2abb7728`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [d7675f31](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/d7675f312ffdc8501032ff8217776cd7172b6bb0) `sha256:a3d4b0690ad127028d686cb388b993bdcc69694a693b1f4798312f2c2718202d`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [f859eac9](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/f859eac9612d8fff52013b809840b015cee6742d) `sha256:d0a1797b149b026245ce0c58995ea3b6e2f761d1f9ec1d640307d7e80541073f`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [70256457](https://github.com/openshift/insights-runtime-extractor/commit/70256457b507ec09737800ee7ea022143ed6c3c2) `sha256:668f6cd8cfe5f3b69718152ac42c67421695480c952efbe5757fa36356915cb6`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [70256457](https://github.com/openshift/insights-runtime-extractor/commit/70256457b507ec09737800ee7ea022143ed6c3c2) `sha256:d0677c335f8873a47596d235b0c2c3465bb62f75383cd16c305b1f96f81d8462`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [9953d2b7](https://github.com/openshift/ironic-rhcos-downloader/commit/9953d2b77da077c28f9486a5d965a43149ce30c1) `sha256:fac3b9c9a65f29694985ce3a520259646da84be4d6a5be310cb31f103e18ec74`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [a379d09f](https://github.com/openshift/ironic-static-ip-manager/commit/a379d09f228d93f2beab1c73d67764c64b21e3cb) `sha256:5b1dd01c0ecee71fb9c878d0c60e910d5fcbc5e3754e6392f559435d27504478`
* [keepalived-ipfailover](https://github.com/openshift/images) git [edb8b1e6](https://github.com/openshift/images/commit/edb8b1e6c5e949c0b470b2bdf7a32f17e53d2f71) `sha256:543d2e30b6d5359b29203dc14e64bc978498d96ed0258d1c1048d297b78cb4e0`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [38c16c46](https://github.com/openshift/kubernetes-metrics-server/commit/38c16c4698d131ab0e2da0d4b4b76d5322a89bab) `sha256:cb84656c5b900f21b7984f917ac0473cf7b5e58cd1ec7d782b01fbe99d39bee7`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [d12e2746](https://github.com/openshift/kube-rbac-proxy/commit/d12e274605248f6c59373240a7eae7a7a357dcb3) `sha256:3b2676dd92a952c620e067cc158c2a0942c602471645d8e367104293cb964147`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [6fa06eac](https://github.com/openshift/kube-state-metrics/commit/6fa06eac4c3942ba64bff18ca93b5a019ea5c976) `sha256:f2c7f8cb3995b165ed4acf4c2f546b9993986862b427c4b2ef224521e05d1594`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [72835e43](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/72835e43c7754356645e41031f3a99926b4d42e6) `sha256:4b77235cbf5ecac944cf3b5fb6481b352840e929a3f80cb088a838f80255f9f8`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [76dd5a6f](https://github.com/openshift/cloud-provider-kubevirt/commit/76dd5a6fa9e86573bf3dfb79be17edf832e3bae1) `sha256:bfefc5b78a80fa9c8365874b0c198de14889c5626f983c7f7e5204dc32c68d32`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [771b562d](https://github.com/openshift/kubevirt-csi-driver/commit/771b562d4875296007850a4d3709a7ae1c6ed3e2) `sha256:a64fbc5349b97235f1363bad9c46a9785186c762d2eeb9a2f39679a34633aa05`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [a43d9c97](https://github.com/openshift/image-customization-controller/commit/a43d9c977f6332577efcd383cf173a2ff5805a4d) `sha256:7e862adf46d14141a00ec057c2066104ec0cfacfdc33f3c5a4ad5b5e85b75ea8`
* [multus-cni](https://github.com/openshift/multus-cni) git [b4ec7d82](https://github.com/openshift/multus-cni/commit/b4ec7d8239ce4bd3ed949bce9816a013377b44c7) `sha256:f71e192d0533297ce55d0c25d98f7246a2534e8d8fa599f18cba39f3bee0e10b`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [b4ec7d82](https://github.com/openshift/multus-cni/commit/b4ec7d8239ce4bd3ed949bce9816a013377b44c7) `sha256:c1ac6c374cdbed930e6f2d28af89437564bde731c68190ef6cc0e4bd82dcb43b`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [08af4127](https://github.com/openshift/route-override-cni/commit/08af4127c77976510cad1c096d9aca977d8ae5af) `sha256:6a3ff2bb0d53ce8896df1bcb6ba3bd6092d23e4eb9e014fea177436c7fcc6fa6`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [d691040e](https://github.com/openshift/whereabouts-cni/commit/d691040e509bb20c26b5e8366c0d6f3bb45a5e02) `sha256:6dceea04398e64df88cddb127d99377a81c3ad40e6afed3ec3d9fc78f62edc16`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [297eeb43](https://github.com/openshift/bond-cni/commit/297eeb4320e07b18d559bc373b665479c760e8c7) `sha256:657a18ee4b0d2a805b4d3b6692dfb3b25ee34bde9a586f53de51fdc924da5127`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [5b233ea1](https://github.com/openshift/network-metrics-daemon/commit/5b233ea1d80733c1b00c6bad65dec0620dbf783a) `sha256:91a8b84b56c4dcc130941fd20ae7f8321a27eb85cdb6af828ffa63c2e30201c9`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [714292f5](https://github.com/openshift/oauth-proxy/commit/714292f5478e6c12da6a31710f72bc8fbe6fb925) `sha256:3c79ea528c47ac61428ff5973030b77381b7f60c754282e319ac3f2bcc97777f`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [e71e0996](https://github.com/openshift/openshift-state-metrics/commit/e71e09969f11a47c87b87c43b762ad1d01f6b04f) `sha256:f566560cebaadc5c9485013e4b8c905f995b9140eda3cc85fdc9ed6b5a2a98e2`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [8a8c354b](https://github.com/openshift/machine-api-provider-openstack/commit/8a8c354b99ce83e3c05a91358aadec09944c2fce) `sha256:dee45a9bb712dbe694d7322cab94234d5a181d677a4dc5ea9387cbf2b87f73eb`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [e88cf81d](https://github.com/openshift/machine-api-provider-powervs/commit/e88cf81dd9ad174f395b86f9cdc40fa30cb06bf4) `sha256:8d0ef745d04d69547fac3301c92c406cf0e369b7dee29d8c415fe9797939b9b7`
* [rhel-coreos](https://github.com/openshift/os) git [f41264dc](https://github.com/openshift/os/commit/f41264dc5f1c1f0a389787ecc5aaec573d485b8e) `sha256:53da1dd41ef510817876ea94a48f5970e1774e4656edb3ccd4be648566399b13`
* [rhel-coreos-10](https://github.com/openshift/os) git [f41264dc](https://github.com/openshift/os/commit/f41264dc5f1c1f0a389787ecc5aaec573d485b8e) `sha256:76fda1d82c2989329375ae92d114109d107d6340032668258af362b37eb6519c`
* [rhel-coreos-10-extensions](https://github.com/openshift/os) git [f41264dc](https://github.com/openshift/os/commit/f41264dc5f1c1f0a389787ecc5aaec573d485b8e) `sha256:caf291cf9410f135f4cd9aedab4494060e4bddb62b911ba3cf6fa5d91b261d97`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [f41264dc](https://github.com/openshift/os/commit/f41264dc5f1c1f0a389787ecc5aaec573d485b8e) `sha256:0add269a4df2b5aeeee9a743915b88200a9aaa1b99ff52a1a416f9b0a97fbbb3`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [624742d9](https://github.com/openshift/route-controller-manager/commit/624742d93f3a7885cf7f70985f1e23ff60da580d) `sha256:c25283101c075669bea8b6bf5bda846ae3741fcd90e57cc090f8e1abae24eef0`
* [thanos](https://github.com/openshift/thanos) git [5d9d0f38](https://github.com/openshift/thanos/commit/5d9d0f387e5cc651470f27352b28674103bfdd77) `sha256:b8b87927014f1376e0074b2d68363d645d0aee50e85f7423157e71c1049a0ad8`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [8e176cec](https://github.com/openshift/volume-data-source-validator/commit/8e176cec394709cac728423cbbb6c3c914be8485) `sha256:a5cf4197c7a46155f5133004be5878161117c2b8c71a9285b23b39b649e958cf`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [cf21e121](https://github.com/openshift/vmware-vsphere-csi-driver/commit/cf21e1211225e3cf6baa27bdb12ae86c5c13db39) `sha256:a0f09970f3f518a86c8907a933b4abeac2b449aa8c6d4f03da0fe2088f488077`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [cf21e121](https://github.com/openshift/vmware-vsphere-csi-driver/commit/cf21e1211225e3cf6baa27bdb12ae86c5c13db39) `sha256:973bc23089242aab98449a624738ed8f0a40eed8cd695d2e044b522d228262c4`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [842aed3d](https://github.com/openshift/vsphere-problem-detector/commit/842aed3df97005839ef5deaf560abbe6486b9daf) `sha256:6ba78fa2490153b9838773d0415dce65ce4037e08139b49d15d1ee1b78545dbb`
### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/963e8a7fb9f6941969fab42a72e7197b3b636a3c)
* NO-ISSUE: increase the timout waiting for assisted-image-service [#10327](https://github.com/openshift/assisted-service/pull/10327)
* [MGMT-20634](https://issues.redhat.com/browse/MGMT-20634): Revert mac-identifier and global DNS workarounds as RHEL-91250 and RHEL-72440 resolved [#10318](https://github.com/openshift/assisted-service/pull/10318)
* [ACM-33836](https://issues.redhat.com/browse/ACM-33836): CVE-2026-35469 bump github.com/moby/spdystream [#10314](https://github.com/openshift/assisted-service/pull/10314)
* NO-ISSUE: [master] Bump OCP versions: 4.22, 4.13, 4.16, 4.17 [#10296](https://github.com/openshift/assisted-service/pull/10296)
* NO-ISSUE: [master] Bump OCP versions: 4.21, 4.20, 4.18, 4.19 [#10287](https://github.com/openshift/assisted-service/pull/10287)
* [MGMT-19930](https://issues.redhat.com/browse/MGMT-19930): upgrade PostgreSQL stack to pgx v5 and ocm-sdk-go v0.1.499 [#10230](https://github.com/openshift/assisted-service/pull/10230)
* NO-ISSUE: [master] Bump OCP versions: 4.21 [#10284](https://github.com/openshift/assisted-service/pull/10284)
* [MGMT-24236](https://issues.redhat.com/browse/MGMT-24236): Exclude post-installation hosts from pending-user-action timeout [#10266](https://github.com/openshift/assisted-service/pull/10266)
* [MGMT-24138](https://issues.redhat.com/browse/MGMT-24138): Order network by bootstrap host [#10257](https://github.com/openshift/assisted-service/pull/10257)
* NO-ISSUE: Remove unused RegisterAddHostsOCPCluster functions [#10265](https://github.com/openshift/assisted-service/pull/10265)
* NO-ISSUE: [master] Bump OCP versions: 4.16, 5.0, 4.22 [#10272](https://github.com/openshift/assisted-service/pull/10272)
* [MGMT-24119](https://issues.redhat.com/browse/MGMT-24119): Correct the namespace to install Loki Operator as "openshift-operators-redhat" instead of "openshift-loki" [#10209](https://github.com/openshift/assisted-service/pull/10209)
* [MGMT-23755](https://issues.redhat.com/browse/MGMT-23755): Validate & trim MCS certificates when adding to ignition override [#10262](https://github.com/openshift/assisted-service/pull/10262)
* NO-ISSUE: [master] Bump OCP versions: 4.21, 4.19 [#10263](https://github.com/openshift/assisted-service/pull/10263)
* [MGMT-23680](https://issues.redhat.com/browse/MGMT-23680): CVE-2026-32285 Bump github.com/buger/jsonparser to v1.1.2 [#10240](https://github.com/openshift/assisted-service/pull/10240)
* NO-ISSUE: Update operator bundle channel to backplane-5.0 [#10215](https://github.com/openshift/assisted-service/pull/10215)
* [MGMT-24115](https://issues.redhat.com/browse/MGMT-24115): allow empty image checksum/url in getChecksumAndURL [#10246](https://github.com/openshift/assisted-service/pull/10246)
* [MGMT-23971](https://issues.redhat.com/browse/MGMT-23971): Add a timeout for installing-pending-user-action [#10202](https://github.com/openshift/assisted-service/pull/10202)
* NO-ISSUE: Modify Konflux YAMLs to backplane-5.0 [#10237](https://github.com/openshift/assisted-service/pull/10237)
* [MGMT-23802](https://issues.redhat.com/browse/MGMT-23802): Fix manifest format in log bundles [#10121](https://github.com/openshift/assisted-service/pull/10121)
* [MGMT-23861](https://issues.redhat.com/browse/MGMT-23861): Fix oci detection for day2 clusters [#10231](https://github.com/openshift/assisted-service/pull/10231)
* NO-ISSUE: [master] Bump OCP versions: 4.22 [#10220](https://github.com/openshift/assisted-service/pull/10220)
* [ACM-33186](https://issues.redhat.com/browse/ACM-33186): Revert Renovate configuration for Hive updates [#10203](https://github.com/openshift/assisted-service/pull/10203)
* [MGMT-23553](https://issues.redhat.com/browse/MGMT-23553): Automate events table bloat cleanup [#10140](https://github.com/openshift/assisted-service/pull/10140)
* [MGMT-23665](https://issues.redhat.com/browse/MGMT-23665): fixing CVE-2026-33186 [#10173](https://github.com/openshift/assisted-service/pull/10173)
* NO-ISSUE: Allow restoring soft deleted hosts [#10185](https://github.com/openshift/assisted-service/pull/10185)
* NO-ISSUE: [master] Bump OCP versions: 4.20, 4.21, 4.22, 4.18 [#10201](https://github.com/openshift/assisted-service/pull/10201)
* NO-ISSUE: Bump go modules and linters [#10181](https://github.com/openshift/assisted-service/pull/10181)
* [MGMT-23861](https://issues.redhat.com/browse/MGMT-23861): Revert MGMT-22385 for oci iscsi day2 [#10170](https://github.com/openshift/assisted-service/pull/10170)
* [ACM-32996](https://issues.redhat.com/browse/ACM-32996): Missing nil check in BMACReconciler causes controller panic [#10164](https://github.com/openshift/assisted-service/pull/10164)
* [MGMT-23920](https://issues.redhat.com/browse/MGMT-23920): 4.22 SNO doesn't support 4 cpu cores node [#10153](https://github.com/openshift/assisted-service/pull/10153)
* NO-ISSUE: add shay23bra to owners [#10163](https://github.com/openshift/assisted-service/pull/10163)
* NO-ISSUE: [master] Bump OCP versions: 4.13, 4.19 [#10162](https://github.com/openshift/assisted-service/pull/10162)
* NO-ISSUE: Remove urlAuth from credentials endpoint [#10161](https://github.com/openshift/assisted-service/pull/10161)
* [MCO-2223](https://issues.redhat.com/browse/MCO-2223): Add osImageStream install-config overrides [#10156](https://github.com/openshift/assisted-service/pull/10156)
* NO-ISSUE: [master] Bump OCP versions: 4.21 [#10152](https://github.com/openshift/assisted-service/pull/10152)
* NO-ISSUE: [master] Bump OCP versions: 4.22, 4.18, 4.20 [#10146](https://github.com/openshift/assisted-service/pull/10146)
* [OCPBUGS-79576](https://issues.redhat.com/browse/OCPBUGS-79576): Mark raw FC/iSCSI multipath members as ineligible [#10142](https://github.com/openshift/assisted-service/pull/10142)
* [OCPBUGS-83401](https://issues.redhat.com/browse/OCPBUGS-83401): Fix IRI patcher feature check [#10141](https://github.com/openshift/assisted-service/pull/10141)
* [MGMT-23227](https://issues.redhat.com/browse/MGMT-23227): Skip host operator validation for day2 clusters [#10029](https://github.com/openshift/assisted-service/pull/10029)
* [ACM-32735](https://issues.redhat.com/browse/ACM-32735): Add better API docs to CRDs [#10124](https://github.com/openshift/assisted-service/pull/10124)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-service/compare/aed50cb7f9a7dd63dd865dfae9afb6844a2dd787...963e8a7fb9f6941969fab42a72e7197b3b636a3c)
### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/28bc267a6a5fce13f43126fde48df3427a838e11)
* [MGMT-23784](https://issues.redhat.com/browse/MGMT-23784): CVE-2026-34986 Bump github.com/go-jose/go-jose/v3 to v3.0.5 using replace directive [#2121](https://github.com/openshift/assisted-installer/pull/2121)
* NO-ISSUE: Modify Konflux YAMLs to backplane-5.0 [#2119](https://github.com/openshift/assisted-installer/pull/2119)
* [ACM-33186](https://issues.redhat.com/browse/ACM-33186): Revert Renovate configuration for Hive updates [#2107](https://github.com/openshift/assisted-installer/pull/2107)
* NO-ISSUE: upgrade go.opentelemetry.io/otel/sdk to … [#2097](https://github.com/openshift/assisted-installer/pull/2097)
* [MGMT-23789](https://issues.redhat.com/browse/MGMT-23789): CVE-2026-34986 Bump github.com/go-jose/go-jose/v4 to v4.1.4 through indirect dependency conversion [#2081](https://github.com/openshift/assisted-installer/pull/2081)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/a9bfcccdade3dec5e6d71dbbc6e03fe137a1660b...28bc267a6a5fce13f43126fde48df3427a838e11)
### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/c64bacd536b2d79c8e54bbdf184ec8385f408f29)
* NO-ISSUE: Modify Konflux YAMLs to backplane-5.0 [#1431](https://github.com/openshift/assisted-installer-agent/pull/1431)
* [ACM-31642](https://issues.redhat.com/browse/ACM-31642): fix CVE-2026-33186 [#1417](https://github.com/openshift/assisted-installer-agent/pull/1417)
* [OCPBUGS-63472](https://issues.redhat.com/browse/OCPBUGS-63472): add --copy-network when manual network config is detected [#1374](https://github.com/openshift/assisted-installer-agent/pull/1374)
* [MGMT-23790](https://issues.redhat.com/browse/MGMT-23790): CVE-2026-34986 Bump github.com/go-jose/go-jose/v4 to v4.1.4 through indirect dependency conversion [#1404](https://github.com/openshift/assisted-installer-agent/pull/1404)
* NO-ISSUE: Refactor flag Parsing to avoid multiple calls [#1401](https://github.com/openshift/assisted-installer-agent/pull/1401)
* NO-ISSUE: Refresh RPM lockfiles [#1389](https://github.com/openshift/assisted-installer-agent/pull/1389)
* [MGMT-23300](https://issues.redhat.com/browse/MGMT-23300): Ensure /boot dir has enough space during reclaim [#1316](https://github.com/openshift/assisted-installer-agent/pull/1316)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/f562f3539125da83145eb1012ea8a4f4d62d0807...c64bacd536b2d79c8e54bbdf184ec8385f408f29)
### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/e775971a11c9c678d3877684b856ef77680cbc12)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.9-1778675823 (#3720) [#3720](https://github.com/openshift-assisted/assisted-installer-ui/pull/3720)
* chore(deps): update dependency qs to ^6.15.2 (#3719) [#3719](https://github.com/openshift-assisted/assisted-installer-ui/pull/3719)
* chore(deps): update konflux references (#3718) [#3718](https://github.com/openshift-assisted/assisted-installer-ui/pull/3718)
* chore(deps): update dependency dpdm to v4 (#3555) [#3555](https://github.com/openshift-assisted/assisted-installer-ui/pull/3555)
* Implement useAgents hook for the CIM wizard (#3711) [#3711](https://github.com/openshift-assisted/assisted-installer-ui/pull/3711)
* Ugrade axios to 1.15.2 (#3710) [#3710](https://github.com/openshift-assisted/assisted-installer-ui/pull/3710)
* chore(deps): update dependency qs to ^6.15.1 (#3678) [#3678](https://github.com/openshift-assisted/assisted-installer-ui/pull/3678)
* chore(deps): update dependency eslint to ^8.57.1 (#3677) [#3677](https://github.com/openshift-assisted/assisted-installer-ui/pull/3677)
* chore(deps): update konflux references (#3707) [#3707](https://github.com/openshift-assisted/assisted-installer-ui/pull/3707)
* chore(deps): update dependency redux to ^4.2.1 (#3708) [#3708](https://github.com/openshift-assisted/assisted-installer-ui/pull/3708)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.9-1778171507 (#3709) [#3709](https://github.com/openshift-assisted/assisted-installer-ui/pull/3709)
* Bump fast-uri from 3.1.0 to 3.1.2 (#3706) [#3706](https://github.com/openshift-assisted/assisted-installer-ui/pull/3706)
* OCPBUGS-84038 | [Below the sea UI] Lack of visual feedback (spinner) on disabled "Next" button during background validation (#3687) [#3687](https://github.com/openshift-assisted/assisted-installer-ui/pull/3687)
* [MGMT-23490](https://issues.redhat.com/browse/MGMT-23490): Refactor Troubleshooting Web Console (#3688) [#3688](https://github.com/openshift-assisted/assisted-installer-ui/pull/3688)
* Bump basic-ftp from 5.3.0 to 5.3.1 (#3698) [#3698](https://github.com/openshift-assisted/assisted-installer-ui/pull/3698)
* Bump ip-address from 7.1.0 to 10.1.1 (#3689) [#3689](https://github.com/openshift-assisted/assisted-installer-ui/pull/3689)
* Read from aipVIPs and ingressVIPs in getClusterProperties function (#3661) [#3661](https://github.com/openshift-assisted/assisted-installer-ui/pull/3661)
* Memoize the wizard footer on CIM Review step (#3686) [#3686](https://github.com/openshift-assisted/assisted-installer-ui/pull/3686)
* [MGMT-19002](https://issues.redhat.com/browse/MGMT-19002): [nmstate] UI form view missing autoconf field for ipv6 (#3681) [#3681](https://github.com/openshift-assisted/assisted-installer-ui/pull/3681)
* Add custom-manifests-requirements-satisfied to soft validations on networking wizard step (#3682) [#3682](https://github.com/openshift-assisted/assisted-installer-ui/pull/3682)
* OCPBUGS-84147 | [Below the sea UI] Leaky Abstraction: Transient 500 errors exposed during host binding process (#3672) [#3672](https://github.com/openshift-assisted/assisted-installer-ui/pull/3672)
* [MGMT-21857](https://issues.redhat.com/browse/MGMT-21857): [UI] - Missing "No Matching Clusters" Message (#3667) [#3667](https://github.com/openshift-assisted/assisted-installer-ui/pull/3667)
* Hide internally generated custom manifests on the Cluster Review page (#3646) [#3646](https://github.com/openshift-assisted/assisted-installer-ui/pull/3646)
* chore(deps): update konflux references (#3675) [#3675](https://github.com/openshift-assisted/assisted-installer-ui/pull/3675)
* [MGMT-23950](https://issues.redhat.com/browse/MGMT-23950): [Staging] [UI] - Cluster name missing in page header for draft clusters (#3669) [#3669](https://github.com/openshift-assisted/assisted-installer-ui/pull/3669)
* chore(deps): update dependency @reduxjs/toolkit to ^1.9.7 (#3647) [#3647](https://github.com/openshift-assisted/assisted-installer-ui/pull/3647)
* chore(deps): update dependency axios to ^1.15.2 (#3648) [#3648](https://github.com/openshift-assisted/assisted-installer-ui/pull/3648)
* [MGMT-24152](https://issues.redhat.com/browse/MGMT-24152): UI allows editing pull secret in draft cluster (#3662) [#3662](https://github.com/openshift-assisted/assisted-installer-ui/pull/3662)
* Remove 2 node arbiter option from the control plane dropdown option (#3644) [#3644](https://github.com/openshift-assisted/assisted-installer-ui/pull/3644)
* Bump postcss from 8.5.6 to 8.5.10 (#3641) [#3641](https://github.com/openshift-assisted/assisted-installer-ui/pull/3641)
* Update OWNERS file (#3643) [#3643](https://github.com/openshift-assisted/assisted-installer-ui/pull/3643)
* chore(deps): update konflux references (#3640) [#3640](https://github.com/openshift-assisted/assisted-installer-ui/pull/3640)
* chore(config): migrate config renovate.json (#3639) [#3639](https://github.com/openshift-assisted/assisted-installer-ui/pull/3639)
* [MGMT-23800](https://issues.redhat.com/browse/MGMT-23800): Upgrade Vite (#3589) [#3589](https://github.com/openshift-assisted/assisted-installer-ui/pull/3589)
* chore(deps): update dependency msw to v2.13.5 (#3587) [#3587](https://github.com/openshift-assisted/assisted-installer-ui/pull/3587)
* chore(deps): update dependency @vitejs/plugin-react-swc to v4 (#3553) [#3553](https://github.com/openshift-assisted/assisted-installer-ui/pull/3553)
* chore(deps): update dependency happy-dom to v20.9.0 (#3591) [#3591](https://github.com/openshift-assisted/assisted-installer-ui/pull/3591)
* Add renovate.json (#3637) [#3637](https://github.com/openshift-assisted/assisted-installer-ui/pull/3637)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1776962329 (#3588) [#3588](https://github.com/openshift-assisted/assisted-installer-ui/pull/3588)
* chore(deps): update dependency @redhat-cloud-services/eslint-config-redhat-cloud-services to v3.1.0 (#3577) [#3577](https://github.com/openshift-assisted/assisted-installer-ui/pull/3577)
* chore(deps): update dependency @types/uuid to v11 (#3544) [#3544](https://github.com/openshift-assisted/assisted-installer-ui/pull/3544)
* chore(deps): update yarn to v3.8.7 (#3495) [#3495](https://github.com/openshift-assisted/assisted-installer-ui/pull/3495)
* Add cursor rules for imports (#3595) [#3595](https://github.com/openshift-assisted/assisted-installer-ui/pull/3595)
* NO-ISSUE: Cursor rules for comments and variables (#3592) [#3592](https://github.com/openshift-assisted/assisted-installer-ui/pull/3592)
* Add CLAUDE.md (#3632) [#3632](https://github.com/openshift-assisted/assisted-installer-ui/pull/3632)
* Bump uuid from 8.3.2 to 14.0.0 (#3629) [#3629](https://github.com/openshift-assisted/assisted-installer-ui/pull/3629)
* Bump follow-redirects from 1.15.11 to 1.16.0 (#3586) [#3586](https://github.com/openshift-assisted/assisted-installer-ui/pull/3586)
* [ACM-30344](https://issues.redhat.com/browse/ACM-30344): ACM Console should support ClusterImageSets with by-digest pullspecs (#3609) [#3609](https://github.com/openshift-assisted/assisted-installer-ui/pull/3609)
* Allow to install SNO topology (#3578) [#3578](https://github.com/openshift-assisted/assisted-installer-ui/pull/3578)
* Support third party CNI in CIM (#3600) [#3600](https://github.com/openshift-assisted/assisted-installer-ui/pull/3600)
* Fix Cisco Intersight editing (#3523) [#3523](https://github.com/openshift-assisted/assisted-installer-ui/pull/3523)
* Pull secret appears editable in draft cluster but changes are not applied (#3597) [#3597](https://github.com/openshift-assisted/assisted-installer-ui/pull/3597)
* fix operators list in ABI below the sea (#3590) [#3590](https://github.com/openshift-assisted/assisted-installer-ui/pull/3590)
* [MGMT-23913](https://issues.redhat.com/browse/MGMT-23913): Missing breadcrumbs in on-prem Assisted Installer (#3598) [#3598](https://github.com/openshift-assisted/assisted-installer-ui/pull/3598)
* Update build-tools (#3593) [#3593](https://github.com/openshift-assisted/assisted-installer-ui/pull/3593)
* Upgrade lodash to 4.18.1 (#3566) [#3566](https://github.com/openshift-assisted/assisted-installer-ui/pull/3566)
* Bump basic-ftp from 5.2.1 to 5.3.0 (#3594) [#3594](https://github.com/openshift-assisted/assisted-installer-ui/pull/3594)
* [OCPBUGS-83428](https://issues.redhat.com/browse/OCPBUGS-83428): bump axios to ^1.15.0 for fixing CVE-2026-40175 (#3585) [#3585](https://github.com/openshift-assisted/assisted-installer-ui/pull/3585)
* chore(deps): update dependency @redhat-cloud-services/frontend-components to v7.3.1 (#3568) [#3568](https://github.com/openshift-assisted/assisted-installer-ui/pull/3568)
* chore(deps): update dependency @redhat-cloud-services/tsc-transform-imports to v1.0.58 (#3570) [#3570](https://github.com/openshift-assisted/assisted-installer-ui/pull/3570)
* chore(deps): update dependency @redhat-cloud-services/frontend-components-config to v6.8.4 (#3569) [#3569](https://github.com/openshift-assisted/assisted-installer-ui/pull/3569)
* [MGMT-23090](https://issues.redhat.com/browse/MGMT-23090): Support single stack IPv6 (#3414) [#3414](https://github.com/openshift-assisted/assisted-installer-ui/pull/3414)
* NO-ISSUE: Remove orphan files (#3460) [#3460](https://github.com/openshift-assisted/assisted-installer-ui/pull/3460)
* [MGMT-23328](https://issues.redhat.com/browse/MGMT-23328): remove breadcrumbs for OCM and use logo as a link (#3510) [#3510](https://github.com/openshift-assisted/assisted-installer-ui/pull/3510)
* NO-ISSUE: Update translation files to match new i18next format (#3567) [#3567](https://github.com/openshift-assisted/assisted-installer-ui/pull/3567)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/677523c254cafc2f08d12c5e5f921dfd71204a25...e775971a11c9c678d3877684b856ef77680cbc12)
### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/2ef405f56aec6459310d63b3fa8b035d6fd040f6)
* [OCPBUGS-85524](https://issues.redhat.com/browse/OCPBUGS-85524): update konflux references [#286](https://github.com/openshift/agent-installer-utils/pull/286)
* [AGENT-1476](https://issues.redhat.com/browse/AGENT-1476): Configure CI integration and add Prow e2e test to Konflux [#245](https://github.com/openshift/agent-installer-utils/pull/245)
* [AGENT-1193](https://issues.redhat.com/browse/AGENT-1193): Add mirror-path and registry-cert support for OVE ISO builder [#218](https://github.com/openshift/agent-installer-utils/pull/218)
* [OCPBUGS-83575](https://issues.redhat.com/browse/OCPBUGS-83575): Remove Konflux cert-preflight test [#290](https://github.com/openshift/agent-installer-utils/pull/290)
* NO-JIRA: Add 4.23 appliance-config [#289](https://github.com/openshift/agent-installer-utils/pull/289)
* NO-JIRA: Add 5.0 appliance-config.yaml for iso_builder [#288](https://github.com/openshift/agent-installer-utils/pull/288)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/113794d5b89d0caa153fe763d42627cfe0c2f845...2ef405f56aec6459310d63b3fa8b035d6fd040f6)
### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/5c263ca1bc10b7b8ace1a23b1220dc629a625b23)
* [CNTRLPLANE-3380](https://issues.redhat.com/browse/CNTRLPLANE-3380): Update OWNERS with HyperShift core team [#107](https://github.com/openshift/apiserver-network-proxy/pull/107)
* [CNTRLPLANE-3359](https://issues.redhat.com/browse/CNTRLPLANE-3359): Rebase to v0.34.0 for OCP 4.23 [#102](https://github.com/openshift/apiserver-network-proxy/pull/102)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/5e33c22867d59ddd9392a2c6b3194d2f3c6bdfc7...5c263ca1bc10b7b8ace1a23b1220dc629a625b23)
### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/43906c280e2abaf3f182ff178ef73d554cbd98cf)
* NO-JIRA: Update OWNERS [#145](https://github.com/openshift/cloud-provider-aws/pull/145)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/e73d6a3821655afc6fb19d88a66907078e6854f2...43906c280e2abaf3f182ff178ef73d554cbd98cf)
### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/77b3287fd6d469dc4fe8f57ad6db25fa30a4ad45)
* [OCPBUGS-85567](https://issues.redhat.com/browse/OCPBUGS-85567): Bump github.com/go-jose/go-jose/v4 to 4.1.4 [#607](https://github.com/openshift/cluster-api-provider-aws/pull/607)
* NO-JIRA: manifests-gen: scope provider webhooks to capi namespace [#605](https://github.com/openshift/cluster-api-provider-aws/pull/605)
* [OCPCLOUD-3359](https://issues.redhat.com/browse/OCPCLOUD-3359): Add TLS substitutions [#598](https://github.com/openshift/cluster-api-provider-aws/pull/598)
* NO-JIRA: Update manifests generator [#604](https://github.com/openshift/cluster-api-provider-aws/pull/604)
* UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.11.1 (eaa4c99) into main [#602](https://github.com/openshift/cluster-api-provider-aws/pull/602)
* UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.11.0 (815a1b0) into main [#600](https://github.com/openshift/cluster-api-provider-aws/pull/600)
* NO-JIRA: Update OWNERS [#599](https://github.com/openshift/cluster-api-provider-aws/pull/599)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/905f4a9f558075b7957e44dabd255410022b55ad...77b3287fd6d469dc4fe8f57ad6db25fa30a4ad45)
### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/0dc99489474b344fd8363d4ff1e2d91b4da1a312)
* NO-ISSUE: UPSTREAM: 2911: CVE-2026-33186: bump google.golang.org/grpc v1.80.0 [#315](https://github.com/openshift/aws-ebs-csi-driver/pull/315)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/0927af1c1397b6f3c7545c715e1a87e0263ae2bf...0dc99489474b344fd8363d4ff1e2d91b4da1a312)
### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/5027bfc7aeb18c7b9c61617172fc5136fe274c14)
* [OCPBUGS-85457](https://issues.redhat.com/browse/OCPBUGS-85457): Add init container for Manila node daemonset [#552](https://github.com/openshift/csi-operator/pull/552)
* [OCPBUGS-84052](https://issues.redhat.com/browse/OCPBUGS-84052): Mount writable /tmp in SMB CSI driver [#545](https://github.com/openshift/csi-operator/pull/545)
* [OSASINFRA-3675](https://issues.redhat.com/browse/OSASINFRA-3675): Rework authentication in Manila CSI Driver Operator [#373](https://github.com/openshift/csi-operator/pull/373)
* [OCPBUGS-80930](https://issues.redhat.com/browse/OCPBUGS-80930): Add VolumeAttributesClass e2e test manifests for Azure disk [#538](https://github.com/openshift/csi-operator/pull/538)
* [Full changelog](https://github.com/openshift/csi-operator/compare/29ce27e3cb149599158f7d56ded23b1426d0048f...5027bfc7aeb18c7b9c61617172fc5136fe274c14)
### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/6ca6eea2f3a9d0b090ff63ba5b8e342d5686c9a8)
* [CNTRLPLANE-3380](https://issues.redhat.com/browse/CNTRLPLANE-3380): Update OWNERS with HyperShift core team [#45](https://github.com/openshift/aws-encryption-provider/pull/45)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/19e7b623429799c9c549690a1b5ab499844411f9...6ca6eea2f3a9d0b090ff63ba5b8e342d5686c9a8)
### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/2e4196b65473ae99bc9bbedc0bc7168ed3da3914)
* [OCPBUGS-83873](https://issues.redhat.com/browse/OCPBUGS-83873): Changed timeout for node ready logic in OTE [#185](https://github.com/openshift/machine-api-provider-aws/pull/185)
* [SPLAT-2715](https://issues.redhat.com/browse/SPLAT-2715): Fixed broken test and simplified some logic [#182](https://github.com/openshift/machine-api-provider-aws/pull/182)
* NO-JIRA: Update OWNERS [#183](https://github.com/openshift/machine-api-provider-aws/pull/183)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/37a067230cbad4997dcf1d2c16685e36b6991c9e...2e4196b65473ae99bc9bbedc0bc7168ed3da3914)
### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/f10dd9c791c0204da9a4e7620f7998e1c20de449)
* [OCPBUGS-85641](https://issues.redhat.com/browse/OCPBUGS-85641), [OCPBUGS-85642](https://issues.redhat.com/browse/OCPBUGS-85642): UPSTREAM: <drop>: bump google.golang.org/grpc to v1.79.3 [#184](https://github.com/openshift/cloud-provider-azure/pull/184)
* NO-JIRA: Update OWNERS [#174](https://github.com/openshift/cloud-provider-azure/pull/174)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/4c7a764630c621d5e1700649fc056800d35bb6d1...f10dd9c791c0204da9a4e7620f7998e1c20de449)
### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/28bd11f05b5bb1164b3a6aec3327b666e73887a9)
* NO-JIRA: manifests-gen: scope provider webhooks to capi namespace [#387](https://github.com/openshift/cluster-api-provider-azure/pull/387)
* [OCPCLOUD-3359](https://issues.redhat.com/browse/OCPCLOUD-3359): Add TLS substitutions [#379](https://github.com/openshift/cluster-api-provider-azure/pull/379)
* NO-JIRA: Update manifests generator [#382](https://github.com/openshift/cluster-api-provider-azure/pull/382)
* [OCPBUGS-84694](https://issues.redhat.com/browse/OCPBUGS-84694): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.23.1 (dbeb413) into main [#380](https://github.com/openshift/cluster-api-provider-azure/pull/380)
* NO-JIRA: Update OWNERS [#376](https://github.com/openshift/cluster-api-provider-azure/pull/376)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/a6ffab6a17878cb9b9eeaa6337c996989d1e7ee3...28bd11f05b5bb1164b3a6aec3327b666e73887a9)
### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/72a8648ad5afe04b815361335bb4873d2ce40d99)
* [OCPBUGS-78197](https://issues.redhat.com/browse/OCPBUGS-78197): check for node name in waitForDiskManagedByTobeRemoved [#144](https://github.com/openshift/azure-disk-csi-driver/pull/144)
* UPSTREAM: 3569: OCPBUGS-83733: Bump grpc to v1.79.3 [#135](https://github.com/openshift/azure-disk-csi-driver/pull/135)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/a995719b8666626dbffe09c03f039611feb48612...72a8648ad5afe04b815361335bb4873d2ce40d99)
### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/b66940c2459bdd503270d758e92057c89b798c6d)
* UPSTREAM: 3023: OCPBUGS-83329: Bump grpc to v1.79.3 [#124](https://github.com/openshift/azure-file-csi-driver/pull/124)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/403f856e29605126b2711a1bfe7a4f6c276b344d...b66940c2459bdd503270d758e92057c89b798c6d)
### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/044aeaaf9e2390b7033d5738758a00dc02f6b9f8)
* [CNTRLPLANE-3380](https://issues.redhat.com/browse/CNTRLPLANE-3380): Update OWNERS with HyperShift core team [#35](https://github.com/openshift/azure-kubernetes-kms/pull/35)
* [CNTRLPLANE-3204](https://issues.redhat.com/browse/CNTRLPLANE-3204): feat: add workload identity support to Azure KMS plugin [#33](https://github.com/openshift/azure-kubernetes-kms/pull/33)
* [CNTRLPLANE-3358](https://issues.redhat.com/browse/CNTRLPLANE-3358): Sync with upstream Azure/kubernetes-kms [#32](https://github.com/openshift/azure-kubernetes-kms/pull/32)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/99b9a3a33d8edfd0a2d2876aa7ef1382b2c75a39...044aeaaf9e2390b7033d5738758a00dc02f6b9f8)
### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/db9b10d2674def615be44d4bf385acb699c47ad2)
* NO-JIRA: Update OWNERS [#190](https://github.com/openshift/machine-api-provider-azure/pull/190)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/69d049094ee36ad9c706d65694a8cd42e9a64800...db9b10d2674def615be44d4bf385acb699c47ad2)
### [azure-service-operator](https://github.com/openshift/azure-service-operator/tree/0827c1fb110ea136fc7abb7b3ac8be062335d00d)
* [OCPBUGS-83613](https://issues.redhat.com/browse/OCPBUGS-83613): Bump grpc package for CVE fix [#21](https://github.com/openshift/azure-service-operator/pull/21)
* [OCPBUGS-69898](https://issues.redhat.com/browse/OCPBUGS-69898): Updating ose-azure-service-operator-container image to be consistent with ART for 4.22 [#16](https://github.com/openshift/azure-service-operator/pull/16)
* NO-JIRA: UPSTREAM: <carry>: add openshift/e2e-tests.sh [#22](https://github.com/openshift/azure-service-operator/pull/22)
* NO-JIRA: Update OWNERS [#20](https://github.com/openshift/azure-service-operator/pull/20)
* [Full changelog](https://github.com/openshift/azure-service-operator/compare/b44d444422f5a7eb21b9ca65f3975a2d13ec9b36...0827c1fb110ea136fc7abb7b3ac8be062335d00d)
### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/7b44f75681bf053805a9cff468149b0fe7cf1e33)
* [OCPBUGS-84709](https://issues.redhat.com/browse/OCPBUGS-84709): github.com/go-jose/go-jose/v4 v4.1.4 [#46](https://github.com/openshift/azure-workload-identity/pull/46)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/a8fb3bf1a6296d6cbf69142db458aa9b59cb3a45...7b44f75681bf053805a9cff468149b0fe7cf1e33)
### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/bc0350fe3a236f498f9be26b1cd61ef555678098)
* NO-JIRA: manifests-gen: scope provider webhooks to capi namespace [#79](https://github.com/openshift/cluster-api-provider-metal3/pull/79)
* [OCPCLOUD-3359](https://issues.redhat.com/browse/OCPCLOUD-3359): Add TLS substitutions [#74](https://github.com/openshift/cluster-api-provider-metal3/pull/74)
* NO-JIRA: Update manifests generator [#75](https://github.com/openshift/cluster-api-provider-metal3/pull/75)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/ad4eb8a5e67dc08c0686f006641847df4370d599...bc0350fe3a236f498f9be26b1cd61ef555678098)
### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/0d798da669ce651af4ae3b8770940c56b4bedc0d)
* [SPLAT-2452](https://issues.redhat.com/browse/SPLAT-2452): Add SetSecurityGroups IAM permission to master nodes for BYO SG support for AWS NLBs [#10512](https://github.com/openshift/installer/pull/10512)
* [MCO-2164](https://issues.redhat.com/browse/MCO-2164): use machine-config-osimagestream to avoid hard-coding image tag names [#10416](https://github.com/openshift/installer/pull/10416)
* no-jira: images: bump UPI image dependencies to 4.22 [#10538](https://github.com/openshift/installer/pull/10538)
* [MCO-2200](https://issues.redhat.com/browse/MCO-2200): refactored node-joiner to use embedded rhcos data [#10537](https://github.com/openshift/installer/pull/10537)
* [OCPBUGS-79536](https://issues.redhat.com/browse/OCPBUGS-79536): Removing AWS security group OVNDB ports as they are no longer used [#10441](https://github.com/openshift/installer/pull/10441)
* [OCPBUGS-85232](https://issues.redhat.com/browse/OCPBUGS-85232): PowerVS: Add port 80 security group rule [#10541](https://github.com/openshift/installer/pull/10541)
* no-jira: tests: verify AWS instance type minimum cpu and mem requirement tests [#10536](https://github.com/openshift/installer/pull/10536)
* NO-JIRA: pkg/types/nutanix: warn about unused context [#10430](https://github.com/openshift/installer/pull/10430)
* [SPLAT-2710](https://issues.redhat.com/browse/SPLAT-2710): Added vSphere day 2 support [#10529](https://github.com/openshift/installer/pull/10529)
* [OCPBUGS-67159](https://issues.redhat.com/browse/OCPBUGS-67159): openstack: Reserve addresses for load balancer [#10375](https://github.com/openshift/installer/pull/10375)
* [OCPBUGS-77760](https://issues.redhat.com/browse/OCPBUGS-77760): verify FIPS mode after installation completes [#10348](https://github.com/openshift/installer/pull/10348)
* [OCPBUGS-84873](https://issues.redhat.com/browse/OCPBUGS-84873): Fix to agent integration test finding agent-tui files [#10530](https://github.com/openshift/installer/pull/10530)
* [OCPBUGS-84335](https://issues.redhat.com/browse/OCPBUGS-84335): vSphere - Missing unit tests to cover polarion workitems [#10516](https://github.com/openshift/installer/pull/10516)
* [OCPBUGS-84548](https://issues.redhat.com/browse/OCPBUGS-84548): add unit tests for Nutanix to replace polarion workitems [#10520](https://github.com/openshift/installer/pull/10520)
* no-jira: update to Google Cloud SDK 563.0.0 [#10460](https://github.com/openshift/installer/pull/10460)
* [MULTIARCH-5824](https://issues.redhat.com/browse/MULTIARCH-5824): PowerVS: Fix supported system types retrieval for PowerVS regions [#10268](https://github.com/openshift/installer/pull/10268)
* [CORS-3933](https://issues.redhat.com/browse/CORS-3933): Add a retry backoff for checking storage in progress [#10463](https://github.com/openshift/installer/pull/10463)
* [SPLAT-2719](https://issues.redhat.com/browse/SPLAT-2719): vsphere - remove HostGroup zonal feature gate checks [#10497](https://github.com/openshift/installer/pull/10497)
* [OCPEDGE-2255](https://issues.redhat.com/browse/OCPEDGE-2255): baremetal: reject SNO installation on baremetal platform [#10420](https://github.com/openshift/installer/pull/10420)
* [OCPBUGS-78932](https://issues.redhat.com/browse/OCPBUGS-78932): Improved DHCP network deletion reliability by proactively cleaning up attached network interfaces before retrying deletion [#10325](https://github.com/openshift/installer/pull/10325)
* [OCPBUGS-83327](https://issues.redhat.com/browse/OCPBUGS-83327): PowerVS: update CAPI to v0.12.2 [#10488](https://github.com/openshift/installer/pull/10488)
* [OCPBUGS-83335](https://issues.redhat.com/browse/OCPBUGS-83335): dont save CAPI secrets [#10498](https://github.com/openshift/installer/pull/10498)
* [AGENT-1417](https://issues.redhat.com/browse/AGENT-1417): Add kind verification in InternalReleaseImage check [#10332](https://github.com/openshift/installer/pull/10332)
* [Full changelog](https://github.com/openshift/installer/compare/b8a967b9336275a333e96a658dcccebbc0fb8fea...0d798da669ce651af4ae3b8770940c56b4bedc0d)
### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/7a005472c3461a960aa983a325eddc504f836365)
* NO-ISSUE: Merge upstream [#483](https://github.com/openshift/baremetal-operator/pull/483)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/c5e5048987427f58d3ca76238537e74bd3175e0f...7a005472c3461a960aa983a325eddc504f836365)
### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/cf62f8c7ac7494096e99997a53ceb48e997c1273)
* NO-ISSUE: Bump go to fix security vulnerabilities [#389](https://github.com/openshift/baremetal-runtimecfg/pull/389)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/dca8cb1be0cce1ce404dfd407ead1326a3c8bb40...cf62f8c7ac7494096e99997a53ceb48e997c1273)
### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/a052bd4018333201e48f7370b2263db2dc6a5c99)
* NO-JIRA: Bump go-jose dependency [#2269](https://github.com/openshift/oc/pull/2269)
* NO-JIRA: Making oc cli case blocking [#2260](https://github.com/openshift/oc/pull/2260)
* [OCPBUGS-62799](https://issues.redhat.com/browse/OCPBUGS-62799): Add required-scc annotation to node-joiner pod [#2230](https://github.com/openshift/oc/pull/2230)
* [OTA-1817](https://issues.redhat.com/browse/OTA-1817): Adding unit tests for the extend recommended alerts [#2262](https://github.com/openshift/oc/pull/2262)
* [OCPBUGS-78768](https://issues.redhat.com/browse/OCPBUGS-78768): Skip filter validation for RFC2307 group query when groupUIDAttribute is "dn" [#2259](https://github.com/openshift/oc/pull/2259)
* [RFE-3594](https://issues.redhat.com/browse/RFE-3594): Add group membership info [#2255](https://github.com/openshift/oc/pull/2255)
* NO-JIRA: claude: Change learn-* agents into skills [#2257](https://github.com/openshift/oc/pull/2257)
* NO-JIRA: claude: Improve AGENTS.md and add agents for storing project knowledge [#2251](https://github.com/openshift/oc/pull/2251)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/oc/compare/66dee73f66c4f048c333c6a77d76871872027896...a052bd4018333201e48f7370b2263db2dc6a5c99)
### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/5d4f9597196a985faaea1bd9bc92bfa79acc2f7d)
* [CCO-683](https://issues.redhat.com/browse/CCO-683): Remove go-autorest dependency for Azure Stack Cloud configuration [#1024](https://github.com/openshift/cloud-credential-operator/pull/1024)
* [CCO-845](https://issues.redhat.com/browse/CCO-845): use AlwaysAllow UnhealthyPodEvictionPolicy option in PDBs [#1019](https://github.com/openshift/cloud-credential-operator/pull/1019)
* [CCO-770](https://issues.redhat.com/browse/CCO-770): Docs: consolidate and simplify short-term token workflows [#986](https://github.com/openshift/cloud-credential-operator/pull/986)
* [CCO-711](https://issues.redhat.com/browse/CCO-711): docs: improve the filter when getting the capi pod [#1016](https://github.com/openshift/cloud-credential-operator/pull/1016)
* [OCPBUGS-84712](https://issues.redhat.com/browse/OCPBUGS-84712): github.com/aws/aws-sdk-go-v2/service/s3 v1.97.3 [#1021](https://github.com/openshift/cloud-credential-operator/pull/1021)
* [OCPBUGS-84043](https://issues.redhat.com/browse/OCPBUGS-84043): go.opentelemetry.io/otel v1.43.0 [#1011](https://github.com/openshift/cloud-credential-operator/pull/1011)
* [OCPBUGS-84044](https://issues.redhat.com/browse/OCPBUGS-84044): github.com/go-jose/go-jose/v4 v4.1.4 [#1012](https://github.com/openshift/cloud-credential-operator/pull/1012)
* [OCPBUGS-83449](https://issues.redhat.com/browse/OCPBUGS-83449): test-ext: hypershift skip CCO metrics endpoint validation [#1010](https://github.com/openshift/cloud-credential-operator/pull/1010)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/c23bddf58e561b725ab5eb012252091e7a472084...5d4f9597196a985faaea1bd9bc92bfa79acc2f7d)
### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/35eb6f519025b05208b335d94d720e03fc3eed19)
* [CNTRLPLANE-3237](https://issues.redhat.com/browse/CNTRLPLANE-3237): Bump library-go and sync plugin changes [#896](https://github.com/openshift/cluster-authentication-operator/pull/896)
* [CNTRLPLANE-3237](https://issues.redhat.com/browse/CNTRLPLANE-3237): Bump library-go and sync encryption tests with APIServerEncryption struct change [#894](https://github.com/openshift/cluster-authentication-operator/pull/894)
* [CNTRLPLANE-3431](https://issues.redhat.com/browse/CNTRLPLANE-3431): enable tls config injection [#892](https://github.com/openshift/cluster-authentication-operator/pull/892)
* NO-JIRA: Bump latest library-go changes [#890](https://github.com/openshift/cluster-authentication-operator/pull/890)
* [OCPBUGS-69977](https://issues.redhat.com/browse/OCPBUGS-69977): Fix OAuth page showing OKD branding instead of OpenShift [#887](https://github.com/openshift/cluster-authentication-operator/pull/887)
* [OCPBUGS-84951](https://issues.redhat.com/browse/OCPBUGS-84951): Fix terminationMessagePolicy on network policy e2e test pods [#882](https://github.com/openshift/cluster-authentication-operator/pull/882)
* NO-JIRA: Update library-go for latest changes [#873](https://github.com/openshift/cluster-authentication-operator/pull/873)
* [CNTRLPLANE-2523](https://issues.redhat.com/browse/CNTRLPLANE-2523): deploy oauth-apiserver in new OIDC mode when authentication type is OIDC [#858](https://github.com/openshift/cluster-authentication-operator/pull/858)
* NO-JIRA: Add control-plane-approvers to OWNERS [#871](https://github.com/openshift/cluster-authentication-operator/pull/871)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/51ea6cdc877f997cc9b376aa26820e8e83d8c1c7...35eb6f519025b05208b335d94d720e03fc3eed19)
### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/02af1a9fd6bcb87745979980fbbf9a2b0671dddb)
* [OCPBUGS-84130](https://issues.redhat.com/browse/OCPBUGS-84130): UPSTREAM: 9458: fix(clusterapi): use kind-aware version discovery for infra references [#418](https://github.com/openshift/kubernetes-autoscaler/pull/418)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/521e545fb92e7138b2ce2bc05f871f53a6c112fb...02af1a9fd6bcb87745979980fbbf9a2b0671dddb)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/c81a51f40f7bd2045a187a3cc4978afc52a79408)
* [OCPBUGS-85496](https://issues.redhat.com/browse/OCPBUGS-85496): Fix webhook to validate the actual admission request object [#601](https://github.com/openshift/cluster-baremetal-operator/pull/601)
* [OCPBUGS-82526](https://issues.redhat.com/browse/OCPBUGS-82526): Fix webhook server not starting due to missing WithValidator [#587](https://github.com/openshift/cluster-baremetal-operator/pull/587)
* [OCPBUGS-82531](https://issues.redhat.com/browse/OCPBUGS-82531): Bind the plain HTTP 8080 metrics port to localhost [#586](https://github.com/openshift/cluster-baremetal-operator/pull/586)
* [OCPBUGS-83612](https://issues.redhat.com/browse/OCPBUGS-83612): Fix image-cache to use HTTPS for metal3-state downloads [#592](https://github.com/openshift/cluster-baremetal-operator/pull/592)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/69a9d699a9dd3ffc151c1a73e135d4823b75ef6c...c81a51f40f7bd2045a187a3cc4978afc52a79408)
### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/96db8575e287c71b5099ee52be1193c15bb91957)
* NO-JIRA: Add control-plane-approvers to OWNERS [#127](https://github.com/openshift/cluster-bootstrap/pull/127)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/e6be0fdfbf43883e2301dbf2d0eb3ab4a4f93383...96db8575e287c71b5099ee52be1193c15bb91957)
### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/1e1b540925a8f1c8aecbf7ac876d2465299b5a98)
* NO-JIRA: manifests-gen: scope provider webhooks to capi namespace [#292](https://github.com/openshift/cluster-api/pull/292)
* [OCPCLOUD-3359](https://issues.redhat.com/browse/OCPCLOUD-3359): Add TLS substitutions [#290](https://github.com/openshift/cluster-api/pull/290)
* NO-JIRA: Update manifests generator [#287](https://github.com/openshift/cluster-api/pull/287)
* UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api:v1.12.7 (b5fa593) into master [#286](https://github.com/openshift/cluster-api/pull/286)
* [OCPCLOUD-3419](https://issues.redhat.com/browse/OCPCLOUD-3419): Adopt IPAM CRDs on upgrade [#274](https://github.com/openshift/cluster-api/pull/274)
* [OCPBUGS-83513](https://issues.redhat.com/browse/OCPBUGS-83513): Merge https://github.com/kubernetes-sigs/cluster-api:v1.12.5 (efc7142) into master [#275](https://github.com/openshift/cluster-api/pull/275)
* NO-JIRA: Update OWNERS [#278](https://github.com/openshift/cluster-api/pull/278)
* [Full changelog](https://github.com/openshift/cluster-api/compare/f1718df9c13b0cee5ede1b6354e29acc466607a4...1e1b540925a8f1c8aecbf7ac876d2465299b5a98)
### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/c585235ee71f6f5ada2edebec2961c2093905659)
* NO-JIRA: Allow sustaining engineering to self serve dependency updates [#553](https://github.com/openshift/cluster-capi-operator/pull/553)
* [OCPBUGS-84815](https://issues.redhat.com/browse/OCPBUGS-84815): fix: scope webhook to capi namespace, remove unused webhook endpoints [#543](https://github.com/openshift/cluster-capi-operator/pull/543)
* [OCPCLOUD-2664](https://issues.redhat.com/browse/OCPCLOUD-2664): Update operatorstatus to write correct sub-Conditions [#552](https://github.com/openshift/cluster-capi-operator/pull/552)
* [OCPCLOUD-3429](https://issues.redhat.com/browse/OCPCLOUD-3429): Mount provider images with image volumes [#527](https://github.com/openshift/cluster-capi-operator/pull/527)
* NO-JIRA: manifests-gen: scope provider webhooks to capi namespace [#544](https://github.com/openshift/cluster-capi-operator/pull/544)
* [OCPBUGS-84673](https://issues.redhat.com/browse/OCPBUGS-84673): fix: remove retired Microsoft.ClassicStorage permission [#547](https://github.com/openshift/cluster-capi-operator/pull/547)
* NO-JIRA: bump controller-runtime-common to latest main [#540](https://github.com/openshift/cluster-capi-operator/pull/540)
* NO-JIRA: Updates gemini powered skills / agents [#542](https://github.com/openshift/cluster-capi-operator/pull/542)
* NO-JIRA: manifests-gen: set scc annotation in providers Deployments spec [#524](https://github.com/openshift/cluster-capi-operator/pull/524)
* NO-JIRA: Adds deep review skill [#541](https://github.com/openshift/cluster-capi-operator/pull/541)
* NO-JIRA: fix: re-enable setting/diffing httpProtocolIpv6, CAPA now supports it [#537](https://github.com/openshift/cluster-capi-operator/pull/537)
* NO-JIRA: fix: conversion: handle HTTPProtocolIPv6, temporarily disable its diffing [#531](https://github.com/openshift/cluster-capi-operator/pull/531)
* [OCPBUGS-84378](https://issues.redhat.com/browse/OCPBUGS-84378): Refactor e2e newAWSMachineTemplate to use mapi2capi [#532](https://github.com/openshift/cluster-capi-operator/pull/532)
* [OCPBUGS-84340](https://issues.redhat.com/browse/OCPBUGS-84340): Fix e2e flake when workers are in us-west-2b [#529](https://github.com/openshift/cluster-capi-operator/pull/529)
* NO-JIRA: fix: tolerate not-found upon infra machine deletion [#528](https://github.com/openshift/cluster-capi-operator/pull/528)
* NO-JIRA: Update e2e diagnostics [#488](https://github.com/openshift/cluster-capi-operator/pull/488)
* [OCPCLOUD-3345](https://issues.redhat.com/browse/OCPCLOUD-3345), [OCPCLOUD-3359](https://issues.redhat.com/browse/OCPCLOUD-3359): Add support for TLS envsubst substitution [#519](https://github.com/openshift/cluster-capi-operator/pull/519)
* [OCPBUGS-83601](https://issues.redhat.com/browse/OCPBUGS-83601): Bump grpc package for CVE fix [#523](https://github.com/openshift/cluster-capi-operator/pull/523)
* NO-JIRA: Fix crdcompatibility flakes after webhook creation [#525](https://github.com/openshift/cluster-capi-operator/pull/525)
* NO-JIRA: Update OWNERS [#522](https://github.com/openshift/cluster-capi-operator/pull/522)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/5365f61ab5553d3f80a604364663a875becfb00f...c585235ee71f6f5ada2edebec2961c2093905659)
### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/8b9dc8c3937a200042444a1acded57cf006504db)
* [OCPCLOUD-3436](https://issues.redhat.com/browse/OCPCLOUD-3436): use AlwaysAllow UnhealthyPodEvictionPolicy option in PDBs [#457](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/457)
* [SPLAT-2651](https://issues.redhat.com/browse/SPLAT-2651): Added support to manage kube-cloud-config for vSphere in openshift-config-managed [#442](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/442)
* NO-JIRA: fix: add pod annotation: openshift.io/required-scc: hostaccess [#450](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/450)
* NO-JIRA: bump controller-runtime-common to latest main [#456](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/456)
* [SPLAT-2562](https://issues.redhat.com/browse/SPLAT-2562): Refactored OTE and added new 3CMO OTE binary [#446](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/446)
* [OCPBUGS-83399](https://issues.redhat.com/browse/OCPBUGS-83399): e2e/ote/ccm-aws fix hairpin traffic on NLB and CLB in EUSC [#449](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/449)
* NO-JIRA: Update OWNERS [#448](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/448)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/1eccfe33d83686e74769ea196660b8d09d249b04...8b9dc8c3937a200042444a1acded57cf006504db)
### [cluster-config-api](https://github.com/openshift/api/tree/73d7ca93df6d0a1b02f5533ce20f68d27869a1fe)
* [OCPBUGS-74511](https://issues.redhat.com/browse/OCPBUGS-74511): remove RouteExternalCertificate feature gate [#2693](https://github.com/openshift/api/pull/2693)
* [CNTRLPLANE-3361](https://issues.redhat.com/browse/CNTRLPLANE-3361): update vault kms plugin validation [#2836](https://github.com/openshift/api/pull/2836)
* [OCPSTRAT-3036](https://issues.redhat.com/browse/OCPSTRAT-3036): Promote MutatingAdmissionPolicy feature to Default [#2832](https://github.com/openshift/api/pull/2832)
* [OPRUN-4590](https://issues.redhat.com/browse/OPRUN-4590): Add OLMLifecycleAndCompatibility feature gate [#2824](https://github.com/openshift/api/pull/2824)
* [CNTRLPLANE-3237](https://issues.redhat.com/browse/CNTRLPLANE-3237): Rename KMSConfig Struct to KMSPluginConfig [#2833](https://github.com/openshift/api/pull/2833)
* [SRVKP-11558](https://issues.redhat.com/browse/SRVKP-11558): remove deprecated k8s.io/api packages removed in v0.36.0 [#2834](https://github.com/openshift/api/pull/2834)
* [CORENET-6861](https://issues.redhat.com/browse/CORENET-6861): Promote EVPN Feature Gate [#2799](https://github.com/openshift/api/pull/2799)
* Revert "OCPBUGS-83492: Allow :ref suffix in additionalLayerStores path for stargz-store to support lazy image pulling" [#2823](https://github.com/openshift/api/pull/2823)
* [MON-4561](https://issues.redhat.com/browse/MON-4561): API: Add softirqs node-exporter collector to ClusterMonitoring CRD [#2825](https://github.com/openshift/api/pull/2825)
* Clarify cluster operator Progressing condition [#2829](https://github.com/openshift/api/pull/2829)
* [OCPNODE-4498](https://issues.redhat.com/browse/OCPNODE-4498): features: drop DRAPartitionableDevices awareness [#2828](https://github.com/openshift/api/pull/2828)
* [OCPBUGS-43353](https://issues.redhat.com/browse/OCPBUGS-43353): Add pattern validation for registry entries in image config [#2787](https://github.com/openshift/api/pull/2787)
* [SPLAT-2649](https://issues.redhat.com/browse/SPLAT-2649): Added vSphere Day 2 logic to CRDs [#2784](https://github.com/openshift/api/pull/2784)
* [OCPBUGS-74506](https://issues.redhat.com/browse/OCPBUGS-74506): Remove ConsolePluginSecurityPolicy featuregate [#2683](https://github.com/openshift/api/pull/2683)
* [CNTRLPLANE-2711](https://issues.redhat.com/browse/CNTRLPLANE-2711): add vault kms plug configuration api [#2805](https://github.com/openshift/api/pull/2805)
* [OCPBUGS-74525](https://issues.redhat.com/browse/OCPBUGS-74525): OCPBUGS-74526: Remove UserNamespacesPodSecurityStandards and UserNamespacesSupport [#2762](https://github.com/openshift/api/pull/2762)
* [OCPBUGS-82584](https://issues.redhat.com/browse/OCPBUGS-82584): Add labelSelector to MachineSet status for scale subresource [#2807](https://github.com/openshift/api/pull/2807)
* [OCPBUGS-83754](https://issues.redhat.com/browse/OCPBUGS-83754): fix(config/v1): define constants for authentication types as typed constants [#2814](https://github.com/openshift/api/pull/2814)
* [OCPBUGS-83492](https://issues.redhat.com/browse/OCPBUGS-83492): Allow :ref suffix in additionalLayerStores path for stargz-store to support lazy image pulling [#2806](https://github.com/openshift/api/pull/2806)
* [MON-4037](https://issues.redhat.com/browse/MON-4037): Add MonitoringPluginConfig to ClusterMonitoring API [#2768](https://github.com/openshift/api/pull/2768)
* fix: small typos in comments in types.go [#2804](https://github.com/openshift/api/pull/2804)
* [OCPBUGS-82292](https://issues.redhat.com/browse/OCPBUGS-82292): extend supported values for MCN IRI image status field [#2800](https://github.com/openshift/api/pull/2800)
* [MON-4036](https://issues.redhat.com/browse/MON-4036): Add NodeExporterConfig to ClusterMonitoring API [#2744](https://github.com/openshift/api/pull/2744)
* [OCPCLOUD-3359](https://issues.redhat.com/browse/OCPCLOUD-3359): Add component names, manifestSubstitutions, and observedGeneration to CAPI revisions [#2786](https://github.com/openshift/api/pull/2786)
* [Full changelog](https://github.com/openshift/api/compare/e9fad7d4cba1537b8af99b972370e76370de72e9...73d7ca93df6d0a1b02f5533ce20f68d27869a1fe)
### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/15a09d1fa8e370ef0b840ba9cc58647e4eea3a29)
* [SPLAT-2717](https://issues.redhat.com/browse/SPLAT-2717): Migrate vSphere sync of kube-cloud-config to 3CMO [#481](https://github.com/openshift/cluster-config-operator/pull/481)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): manifests: Use restricted-v3 scc for deployment [#451](https://github.com/openshift/cluster-config-operator/pull/451)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/e0c2428e4618493ad9db0681e3b91444746ddf2c...15a09d1fa8e370ef0b840ba9cc58647e4eea3a29)
### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/85f92f79174d6df783f631eb3187f0e11e89cc96)
* NO-JIRA: bump controller-runtime-common to latest main [#403](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/403)
* NO-JIRA: Update OWNERS [#399](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/399)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/b2e26b937e7f6dab36b63ace9c8453ba9654011c...85f92f79174d6df783f631eb3187f0e11e89cc96)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/25efce1c7e783ac8cbcb3748b08bdcffb67f7263)
* [OCPEDGE-2604](https://issues.redhat.com/browse/OCPEDGE-2604), [OCPEDGE-2605](https://issues.redhat.com/browse/OCPEDGE-2605): feat: add update-fencing-credentials.sh script for TNF fencing credentials rotation [#1611](https://github.com/openshift/cluster-etcd-operator/pull/1611)
* [CNTRLPLANE-3392](https://issues.redhat.com/browse/CNTRLPLANE-3392): Migrating etcd otp cases to ote [#1612](https://github.com/openshift/cluster-etcd-operator/pull/1612)
* NO-JIRA: Replace bash env var validator with go implementation [#1606](https://github.com/openshift/cluster-etcd-operator/pull/1606)
* NO-JIRA: separate grpc from http server [#1598](https://github.com/openshift/cluster-etcd-operator/pull/1598)
* NO-JIRA: fix CI failure [#1599](https://github.com/openshift/cluster-etcd-operator/pull/1599)
* NO-JIRA: Refactor render test validation [#1597](https://github.com/openshift/cluster-etcd-operator/pull/1597)
* NO-JIRA: Add control-plane-approvers to OWNERS [#1594](https://github.com/openshift/cluster-etcd-operator/pull/1594)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/3698b93d071f8b279b1721f90ced478f0b90b426...25efce1c7e783ac8cbcb3748b08bdcffb67f7263)
### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/d9cb7cc7f0863b12f0686f288b6317ac6a0178c2)
* NO-JIRA: fix flaky TestGlobalTLSCopy unit test [#1341](https://github.com/openshift/cluster-image-registry-operator/pull/1341)
* [OCPBUGS-84725](https://issues.redhat.com/browse/OCPBUGS-84725): Fix stale config cache causing incorrect deployment [#1329](https://github.com/openshift/cluster-image-registry-operator/pull/1329)
* [OCPBUGS-63691](https://issues.redhat.com/browse/OCPBUGS-63691): replace node-ca shell script with go implementation [#1325](https://github.com/openshift/cluster-image-registry-operator/pull/1325)
* [IR-486](https://issues.redhat.com/browse/IR-486): use AlwaysAllow UnhealthyPodEvictionPolicy option in PDBs [#1326](https://github.com/openshift/cluster-image-registry-operator/pull/1326)
* NO-JIRA: Add control-plane-approvers to OWNERS [#1324](https://github.com/openshift/cluster-image-registry-operator/pull/1324)
* [OCPBUGS-83282](https://issues.redhat.com/browse/OCPBUGS-83282): Allow longer window before going Degraded [#1318](https://github.com/openshift/cluster-image-registry-operator/pull/1318)
* [CNTRLPLANE-2660](https://issues.redhat.com/browse/CNTRLPLANE-2660): e2e testing automation: Image Registry network policy [#1320](https://github.com/openshift/cluster-image-registry-operator/pull/1320)
* [OCPBUGS-66225](https://issues.redhat.com/browse/OCPBUGS-66225): ImageConfigController: add inertia before ImageConfigC… [#1319](https://github.com/openshift/cluster-image-registry-operator/pull/1319)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/ad611da1488fdf6604a66d0ac9da5ccf39d79d65...d9cb7cc7f0863b12f0686f288b6317ac6a0178c2)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/10bbe5fa42c1203acd516e8f090df4954121c224)
* [NE-2662](https://issues.redhat.com/browse/NE-2662): use AlwaysAllow UnhealthyPodEvictionPolicy option in PDBs [#1431](https://github.com/openshift/cluster-ingress-operator/pull/1431)
* [OCPBUGS-80966](https://issues.redhat.com/browse/OCPBUGS-80966): Fix malformed PEM bundle when tls.crt lacks trailing newline [#1405](https://github.com/openshift/cluster-ingress-operator/pull/1405)
* [OCPBUGS-84773](https://issues.redhat.com/browse/OCPBUGS-84773): Allow host network connections to the ingress canary [#1430](https://github.com/openshift/cluster-ingress-operator/pull/1430)
* [OCPBUGS-81442](https://issues.redhat.com/browse/OCPBUGS-81442): TestUnsupportedConfigOverride: Ignore featuregate and defaults [#1408](https://github.com/openshift/cluster-ingress-operator/pull/1408)
* [OCPBUGS-84551](https://issues.redhat.com/browse/OCPBUGS-84551): isFIPSEnabled: Check FIPS_ENABLED env. var. first [#1427](https://github.com/openshift/cluster-ingress-operator/pull/1427)
* [OCPBUGS-54702](https://issues.redhat.com/browse/OCPBUGS-54702): change default timeout tunnel if using AWS NLB [#1349](https://github.com/openshift/cluster-ingress-operator/pull/1349)
* [OCPBUGS-81192](https://issues.redhat.com/browse/OCPBUGS-81192): Fix race condition in internal-to-external LB migration test [#1407](https://github.com/openshift/cluster-ingress-operator/pull/1407)
* [NE-2390](https://issues.redhat.com/browse/NE-2390): Adding AGENTS.md file [#1341](https://github.com/openshift/cluster-ingress-operator/pull/1341)
* [OCPBUGS-25739](https://issues.redhat.com/browse/OCPBUGS-25739): Fix PDB MaxUnavailable for 2-replica ingress controllers [#1380](https://github.com/openshift/cluster-ingress-operator/pull/1380)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/6cf59c532a28e46ced7e18c5aa4b04283fea8f61...10bbe5fa42c1203acd516e8f090df4954121c224)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/167ca3228ab415157eeca5de6cef451c0bfe4db2)
* [CNTRLPLANE-3237](https://issues.redhat.com/browse/CNTRLPLANE-3237): Bump library-go and sync plugin changes [#2155](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2155)
* [CNTRLPLANE-3237](https://issues.redhat.com/browse/CNTRLPLANE-3237): pull https://github.com/openshift/library-go/pull/2220 [#2150](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2150)
* [OCPSTRAT-3036](https://issues.redhat.com/browse/OCPSTRAT-3036): Temporarily extend MutatingAdmissionPolicy runtime-config range to <1.37.0 [#2148](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2148)
* [CNTRLPLANE-3347](https://issues.redhat.com/browse/CNTRLPLANE-3347): Migrate testKMSEncryptionOnOff to ote [#2127](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2127)
* [OCPBUGS-78016](https://issues.redhat.com/browse/OCPBUGS-78016): Use SkipInClusterAuthenticationLookup in check-endpoints [#2113](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2113)
* NO-JIRA: Removal of unuse suites [#2132](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2132)
* [OCPBUGS-76588](https://issues.redhat.com/browse/OCPBUGS-76588): operator should not override authentication config serviceAccountIssuer with the default one during the operator initialization [#2062](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2062)
* [CNTRLPLANE-3327](https://issues.redhat.com/browse/CNTRLPLANE-3327): Migrate TestEncryptionTypeAESCBC to OTE [#2122](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2122)
* NO-JIRA: Add control-plane-approvers to OWNERS [#2110](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2110)
* [CNTRLPLANE-3326](https://issues.redhat.com/browse/CNTRLPLANE-3326): Remove unstable TestBoundTokenOperatorSecretDeletion [#2123](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2123)
* NO-JIRA: Update library-go changes [#2107](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2107)
* [OCPBUGS-79663](https://issues.redhat.com/browse/OCPBUGS-79663): Allow setting the oauthMetadata when auth type is None [#2105](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2105)
* [CNTRLPLANE-3228](https://issues.redhat.com/browse/CNTRLPLANE-3228): Implement 5.0 EUS schedule in KAS-O [#2101](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2101)
* [CNTRLPLANE-2991](https://issues.redhat.com/browse/CNTRLPLANE-2991): Do not configure KAS with Structured Authentication when authentication type is OIDC [#2075](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2075)
* [CNTRLPLANE-2935](https://issues.redhat.com/browse/CNTRLPLANE-2935): Enable configurable PKI for managed certificate rotation [#2051](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2051)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/d03062f8d205f1923362c008c86f9bcdd35f931c...167ca3228ab415157eeca5de6cef451c0bfe4db2)
### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/ca150c42a7982509b8bba34080308cff00c09310)
* [CNTRLPLANE-3107](https://issues.redhat.com/browse/CNTRLPLANE-3107): e2e testing automation Create network network policy test cases [#924](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/924)
* NO-JIRA: Add control-plane-approvers to OWNERS [#926](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/926)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/95150ed5dbf11370b4a06e6959c77efa13768561...ca150c42a7982509b8bba34080308cff00c09310)
### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/a0495853f80d38e19d07b98a225e1aa0e7972ac9)
* NO-JIRA: Add control-plane-approvers to OWNERS [#639](https://github.com/openshift/cluster-kube-scheduler-operator/pull/639)
* [OCPBUGS-82503](https://issues.redhat.com/browse/OCPBUGS-82503): add /var/run/kubernetes as emptyDir [#638](https://github.com/openshift/cluster-kube-scheduler-operator/pull/638)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/51ea59abd057d0cef56b29b8a74efc28411d5427...a0495853f80d38e19d07b98a225e1aa0e7972ac9)
### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/42647ceeb54e36b5f7c827302f443c10788407ec)
* [OCPBUGS-65984](https://issues.redhat.com/browse/OCPBUGS-65984): add PodDisruptionBudget for migrator deployment [#172](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/172)
* [OCPBUGS-62629](https://issues.redhat.com/browse/OCPBUGS-62629): update library-go for deployment controller updates [#159](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/159)
* NO-JIRA: Add control-plane-approvers to OWNERS [#158](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/158)
* [OCPBUGS-51091](https://issues.redhat.com/browse/OCPBUGS-51091): schedule migrator pods on control-plane nodes [#157](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/157)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/32ad4fc38c2361033fde8e95039c4fe3a350ca38...42647ceeb54e36b5f7c827302f443c10788407ec)
### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/077692a84f2b84185be4bf60263cfa45577b7751)
* NO-JIRA: fix: add pod annotation: openshift.io/required-scc: restricted-v2 [#297](https://github.com/openshift/cluster-machine-approver/pull/297)
* NO-JIRA: bump controller-runtime-common to latest main [#302](https://github.com/openshift/cluster-machine-approver/pull/302)
* NO-JIRA: Deploy cluster-machine-approver without host networking [#301](https://github.com/openshift/cluster-machine-approver/pull/301)
* NO-JIRA: Migrate away from deprecated ioutil [#284](https://github.com/openshift/cluster-machine-approver/pull/284)
* [OCPCLOUD-3347](https://issues.redhat.com/browse/OCPCLOUD-3347): tls: use centralized TLS profile (unrevert) [#292](https://github.com/openshift/cluster-machine-approver/pull/292)
* NO-JIRA: Update OWNERS [#296](https://github.com/openshift/cluster-machine-approver/pull/296)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/a9edd695aca56fb58e739b774670a01428360dd8...077692a84f2b84185be4bf60263cfa45577b7751)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/c9f25136c1cc6f9f7facbf1d4f128849fbb8e0f1)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2921](https://github.com/openshift/cluster-monitoring-operator/pull/2921)
* [OCPBUGS-83284](https://issues.redhat.com/browse/OCPBUGS-83284): validate more CMO configmap fields [#2877](https://github.com/openshift/cluster-monitoring-operator/pull/2877)
* [MON-4524](https://issues.redhat.com/browse/MON-4524): MetricsServerConfig resources merge [#2907](https://github.com/openshift/cluster-monitoring-operator/pull/2907)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2918](https://github.com/openshift/cluster-monitoring-operator/pull/2918)
* [MON-4528](https://issues.redhat.com/browse/MON-4528): merge monitoringPluginConfig [#2908](https://github.com/openshift/cluster-monitoring-operator/pull/2908)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2893](https://github.com/openshift/cluster-monitoring-operator/pull/2893)
* [MON-4520](https://issues.redhat.com/browse/MON-4520): follow up AlertManagerConfig and PrometheusOp PR changes [#2900](https://github.com/openshift/cluster-monitoring-operator/pull/2900)
* [TRT-2649](https://issues.redhat.com/browse/TRT-2649): Revert "MON-4558: enable zoneinfo node-exporter collector via config" [#2910](https://github.com/openshift/cluster-monitoring-operator/pull/2910)
* NO-ISSUE: chore(e2e): verify Prometheus Mantine UI is served on port 9090 and refactor ForwardPort helpers [#2905](https://github.com/openshift/cluster-monitoring-operator/pull/2905)
* NO-ISSUE: Update AGENTS.md [#2899](https://github.com/openshift/cluster-monitoring-operator/pull/2899)
* [MON-4563](https://issues.redhat.com/browse/MON-4563): use AlwaysAllow UnhealthyPodEvictionPolicy option in PDBs [#2892](https://github.com/openshift/cluster-monitoring-operator/pull/2892)
* [MON-4558](https://issues.redhat.com/browse/MON-4558): enable zoneinfo node-exporter collector via config [#2886](https://github.com/openshift/cluster-monitoring-operator/pull/2886)
* [TRT-2644](https://issues.redhat.com/browse/TRT-2644): Revert "MON-4517: Minimal and telemetry CP monitors" [#2901](https://github.com/openshift/cluster-monitoring-operator/pull/2901)
* NO-ISSUE: [bot] Update jsonnet dependencies [#2894](https://github.com/openshift/cluster-monitoring-operator/pull/2894)
* [MON-4492](https://issues.redhat.com/browse/MON-4492): ClusterMonitoring alertmanagerConfig logic [#2889](https://github.com/openshift/cluster-monitoring-operator/pull/2889)
* [MON-4517](https://issues.redhat.com/browse/MON-4517): Minimal and telemetry CP monitors [#2814](https://github.com/openshift/cluster-monitoring-operator/pull/2814)
* [MON-4560](https://issues.redhat.com/browse/MON-4560): enable softirqs node-exporter collector via config [#2887](https://github.com/openshift/cluster-monitoring-operator/pull/2887)
* NO-JIRA: refactor config merging [#2890](https://github.com/openshift/cluster-monitoring-operator/pull/2890)
* [OCPBUGS-54806](https://issues.redhat.com/browse/OCPBUGS-54806): Add telemetry for user-defined networks [#2596](https://github.com/openshift/cluster-monitoring-operator/pull/2596)
* [CNTRLPLANE-3217](https://issues.redhat.com/browse/CNTRLPLANE-3217): Enable configurable PKI for GRPC TLS certificates [#2882](https://github.com/openshift/cluster-monitoring-operator/pull/2882)
* NO-ISSUE: [bot] Update jsonnet dependencies [#2878](https://github.com/openshift/cluster-monitoring-operator/pull/2878)
* [MON-4115](https://issues.redhat.com/browse/MON-4115): expose label metrics for jobs and cronjobs [#2553](https://github.com/openshift/cluster-monitoring-operator/pull/2553)
* [MON-4480](https://issues.redhat.com/browse/MON-4480): set minimum TLS version for Thanos ruler [#2862](https://github.com/openshift/cluster-monitoring-operator/pull/2862)
* [MON-4442](https://issues.redhat.com/browse/MON-4442): Add AGENTS.md to CMO [#2761](https://github.com/openshift/cluster-monitoring-operator/pull/2761)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2884](https://github.com/openshift/cluster-monitoring-operator/pull/2884)
* [MON-4493](https://issues.redhat.com/browse/MON-4493): add MetricsServerConfig support to ClusterMonitoring CRD [#2809](https://github.com/openshift/cluster-monitoring-operator/pull/2809)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/f6a7969c5c070e4deb6136c3561af60ab44780e1...c9f25136c1cc6f9f7facbf1d4f128849fbb8e0f1)
### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/6f47993888c3e88153028f22023ad5b36f710b9b)
* [NVIDIA-596](https://issues.redhat.com/browse/NVIDIA-596): Enable dpu healthcheck [#2941](https://github.com/openshift/cluster-network-operator/pull/2941)
* [TRT-2657](https://issues.redhat.com/browse/TRT-2657): Revert "add remaining CNO NetworkPolicies" (#2959) [#2999](https://github.com/openshift/cluster-network-operator/pull/2999)
* [OCPBUGS-83800](https://issues.redhat.com/browse/OCPBUGS-83800): add remaining CNO NetworkPolicies [#2959](https://github.com/openshift/cluster-network-operator/pull/2959)
* [NVIDIA-554](https://issues.redhat.com/browse/NVIDIA-554): DPU-host mode: use ConfigMap for OVN feature enablement instead of per-node script gating [#2944](https://github.com/openshift/cluster-network-operator/pull/2944)
* [OCPBUGS-83406](https://issues.redhat.com/browse/OCPBUGS-83406), [OCPBUGS-83407](https://issues.redhat.com/browse/OCPBUGS-83407): fix issue for managed mode of no-overlay [#2960](https://github.com/openshift/cluster-network-operator/pull/2960)
* [OCPBUGS-53187](https://issues.redhat.com/browse/OCPBUGS-53187): Update self-referencing URLs from master to main [#2984](https://github.com/openshift/cluster-network-operator/pull/2984)
* [GCP-430](https://issues.redhat.com/browse/GCP-430): Wire GCP WIF credentials for CNCC in HyperShift HCP mode [#2915](https://github.com/openshift/cluster-network-operator/pull/2915)
* [OCPBUGS-65631](https://issues.redhat.com/browse/OCPBUGS-65631): Use dedicated service accounts for multus pods [#2961](https://github.com/openshift/cluster-network-operator/pull/2961)
* NO-JIRA: cleanup unused code and refactor for allowlist controller [#2846](https://github.com/openshift/cluster-network-operator/pull/2846)
* [CORS-4332](https://issues.redhat.com/browse/CORS-4332): Add GCP to the allowed platforms for dual stack [#2894](https://github.com/openshift/cluster-network-operator/pull/2894)
* [OCPBUGS-82973](https://issues.redhat.com/browse/OCPBUGS-82973): Frrk8s tls manifests [#2963](https://github.com/openshift/cluster-network-operator/pull/2963)
* [KONFLUX-11591](https://issues.redhat.com/browse/KONFLUX-11591): Fix ovn-acl-logging CrashLoopBackOff due to startup race condition [#2923](https://github.com/openshift/cluster-network-operator/pull/2923)
* [CORENET-6572](https://issues.redhat.com/browse/CORENET-6572): only report Progressing for active network rollouts [#2937](https://github.com/openshift/cluster-network-operator/pull/2937)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/e20b9cb9a0b3bc293e622ef1caf70a813710ffa8...6f47993888c3e88153028f22023ad5b36f710b9b)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/ce1afe57245e0701cabf776b3d05fac8dde30cbe)
* [OCPBUGS-62277](https://issues.redhat.com/browse/OCPBUGS-62277): Requeue PerformanceStatus update when status write fails [#1495](https://github.com/openshift/cluster-node-tuning-operator/pull/1495)
* NO-JIRA: ote: embed extended testdata in cluster-node-tuning-operator-test-ext binary [#1512](https://github.com/openshift/cluster-node-tuning-operator/pull/1512)
* [TRT-2659](https://issues.redhat.com/browse/TRT-2659): Revert #1499 "NO-JIRA: ote: embed extended testdata in cluster-node-tuning-operator-test-ext binary" [#1511](https://github.com/openshift/cluster-node-tuning-operator/pull/1511)
* NO-JIRA: e2e: fix tuned deferred tests on Hypershift [#1494](https://github.com/openshift/cluster-node-tuning-operator/pull/1494)
* NO-JIRA: test/extended: scope oc process to NTO namespace [#1508](https://github.com/openshift/cluster-node-tuning-operator/pull/1508)
* NO-JIRA: ote: embed extended testdata in cluster-node-tuning-operator-test-ext binary [#1499](https://github.com/openshift/cluster-node-tuning-operator/pull/1499)
* [OCPBUGS-84938](https://issues.redhat.com/browse/OCPBUGS-84938): e2e: Add irqbalance StartLimitBurst >= 100 config test [#1493](https://github.com/openshift/cluster-node-tuning-operator/pull/1493)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/3d98f7ee7fe0651d182b8a780956512eb407a963...ce1afe57245e0701cabf776b3d05fac8dde30cbe)
### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/f563a1d98a25f5f77af89cafee889604c211a724)
* [OPRUN-4599](https://issues.redhat.com/browse/OPRUN-4599): dynamically resolve catalog image tag from OCP release version [#203](https://github.com/openshift/cluster-olm-operator/pull/203)
* [OCPBUGS-62517](https://issues.redhat.com/browse/OCPBUGS-62517): Scale to replicas=2 and enable PDB on HighlyAvailable topology [#202](https://github.com/openshift/cluster-olm-operator/pull/202)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/d131450b2645623089b26353a309015c95c8871c...f563a1d98a25f5f77af89cafee889604c211a724)
### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/c7332945d1bc4887a2afce2cfbc27c00d55a66bb)
* [CNTRLPLANE-3237](https://issues.redhat.com/browse/CNTRLPLANE-3237): Bump library-go and sync encryption tests with APIServerEncryption struct change [#689](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/689)
* NO-JIRA: Bump latest library-go changes [#688](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/688)
* [API-1768](https://issues.redhat.com/browse/API-1768): e2e network policy tests [#675](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/675)
* NO-JIRA: Add control-plane-approvers to OWNERS [#677](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/677)
* NO-JIRA: Update library-go for latest changes [#678](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/678)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/e6a55cd55c867bf9e26e7ec0ba5accc959b0c27c...c7332945d1bc4887a2afce2cfbc27c00d55a66bb)
### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/c941a99dd2b9200c0de23606c4372d33d656a756)
* NO-JIRA: Add control-plane-approvers to OWNERS [#427](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/427)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/e1c3674198c6c1274fd3fd3c3108eb4cade4eb0a...c941a99dd2b9200c0de23606c4372d33d656a756)
### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/bb429f5b2a7d77791110b06d8ec5c017183e3ab9)
* NO-JIRA: Add control-plane-approvers to OWNERS [#179](https://github.com/openshift/cluster-policy-controller/pull/179)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/44985a1306411101c84dd5081598fc928b432321...bb429f5b2a7d77791110b06d8ec5c017183e3ab9)
### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/0bfb6b3c2f558c9098c438082bffb44eb8f07099)
* [CNF-23044](https://issues.redhat.com/browse/CNF-23044): Migrate away from deprecated ioutil [#668](https://github.com/openshift/cluster-samples-operator/pull/668)
* [CNTRLPLANE-3176](https://issues.redhat.com/browse/CNTRLPLANE-3176): implements operator tls config compliance [#684](https://github.com/openshift/cluster-samples-operator/pull/684)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/317b21a930d074951c27c45c77c02ea211c43f14...0bfb6b3c2f558c9098c438082bffb44eb8f07099)
### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/e75b70ae091198eff7ea2307c0af94ca83ce0e5c)
* [OTA-1967](https://issues.redhat.com/browse/OTA-1967): Take official CRDs from the OpenShift Lightspeed operator [#1387](https://github.com/openshift/cluster-version-operator/pull/1387)
* [MON-4477](https://issues.redhat.com/browse/MON-4477): chore: add permissions on endpointslice to Prometheus Role and use serviceDiscoveryRole: EndpointSlice in ServiceMonitors [#1305](https://github.com/openshift/cluster-version-operator/pull/1305)
* [OTA-1966](https://issues.redhat.com/browse/OTA-1966): Init the Proprosal Lifecycle Controller [#1381](https://github.com/openshift/cluster-version-operator/pull/1381)
* NO-JIRA: OpenShiftUpdateRiskMightApply: bump pending to 15m from 10m [#1372](https://github.com/openshift/cluster-version-operator/pull/1372)
* [OTA-1836](https://issues.redhat.com/browse/OTA-1836): chore(deps): Bump general OpenShift dependencies [#1377](https://github.com/openshift/cluster-version-operator/pull/1377)
* [OTA-1979](https://issues.redhat.com/browse/OTA-1979): Revert "lightspeed: Add a new image holding Lightspeed skills" [#1378](https://github.com/openshift/cluster-version-operator/pull/1378)
* NO-JIRA: how-to: troubleshoot bootstrap CVO [#1369](https://github.com/openshift/cluster-version-operator/pull/1369)
* [OTA-1965](https://issues.redhat.com/browse/OTA-1965): Add Lightspeed CustomResourceDefinitions [#1380](https://github.com/openshift/cluster-version-operator/pull/1380)
* NO-ISSUE: Fix TestOperator_upgradeableSync [#1373](https://github.com/openshift/cluster-version-operator/pull/1373)
* [OTA-1962](https://issues.redhat.com/browse/OTA-1962): lightspeed: Add a new image holding Lightspeed skills [#1376](https://github.com/openshift/cluster-version-operator/pull/1376)
* [OTA-1813](https://issues.redhat.com/browse/OTA-1813): Extend alert risk e2e [#1371](https://github.com/openshift/cluster-version-operator/pull/1371)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/e9c1c39e21ec353ff5993d386c42bc1b15063dbf...e75b70ae091198eff7ea2307c0af94ca83ce0e5c)
### [console](https://github.com/openshift/console/tree/9af8cbd256ab90ceb5d746b20e63a9744cbe9cb6)
* [OCPBUGS-82513](https://issues.redhat.com/browse/OCPBUGS-82513): Enable Topology e2e tests [#16273](https://github.com/openshift/console/pull/16273)
* [CONSOLE-5200](https://issues.redhat.com/browse/CONSOLE-5200): add qa-verify skill for automated PR visual verification [#16429](https://github.com/openshift/console/pull/16429)
* [OCPBUGS-84669](https://issues.redhat.com/browse/OCPBUGS-84669): Fix ProjectLink to update active namespace in Redux [#16430](https://github.com/openshift/console/pull/16430)
* [CONSOLE-5212](https://issues.redhat.com/browse/CONSOLE-5212): Fix ESM compatibility for Playwright e2e tests [#16445](https://github.com/openshift/console/pull/16445)
* [OCPBUGS-79521](https://issues.redhat.com/browse/OCPBUGS-79521): Restore list page text and row filter functionality [#16440](https://github.com/openshift/console/pull/16440)
* [OCPBUGS-59404](https://issues.redhat.com/browse/OCPBUGS-59404): Allow VolumeSnapshot restore when parent PVC is deleted [#16447](https://github.com/openshift/console/pull/16447)
* [OCPBUGS-83569](https://issues.redhat.com/browse/OCPBUGS-83569): [main] CVE-2026-26996 Bump minimatch library [#16301](https://github.com/openshift/console/pull/16301)
* [CONSOLE-5211](https://issues.redhat.com/browse/CONSOLE-5211): Add Cypress-to-Playwright migration skills and context [#16315](https://github.com/openshift/console/pull/16315)
* [CONSOLE-5229](https://issues.redhat.com/browse/CONSOLE-5229): Enable RTL ESLint rules in Knative tests by removing file-level no-container / no-node-access suppressions [#16405](https://github.com/openshift/console/pull/16405)
* [CONSOLE-5197](https://issues.redhat.com/browse/CONSOLE-5197): Add Playwright E2E test infrastructure for Prow/CI [#16374](https://github.com/openshift/console/pull/16374)
* [CONSOLE-5034](https://issues.redhat.com/browse/CONSOLE-5034): Migrate tile-view-page and value-from-pair to TypeScript [#16412](https://github.com/openshift/console/pull/16412)
* [OCPBUGS-85242](https://issues.redhat.com/browse/OCPBUGS-85242): Add Suspense boundary to LazyRoutePage for plugin routes [#16409](https://github.com/openshift/console/pull/16409)
* [OCPBUGS-77952](https://issues.redhat.com/browse/OCPBUGS-77952): Fix devfile sample import by adding fallback for parent resolution failures [#16149](https://github.com/openshift/console/pull/16149)
* [OCPBUGS-70273](https://issues.redhat.com/browse/OCPBUGS-70273): Prevent binary secret data corruption when editing [#16053](https://github.com/openshift/console/pull/16053)
* [OCPBUGS-65950](https://issues.redhat.com/browse/OCPBUGS-65950): Update template whenever settings are updated [#16143](https://github.com/openshift/console/pull/16143)
* [CONSOLE-5212](https://issues.redhat.com/browse/CONSOLE-5212): Migrate Playwright setup to project dependencies [#16408](https://github.com/openshift/console/pull/16408)
* [CONSOLE-5285](https://issues.redhat.com/browse/CONSOLE-5285): remove corepack dep for build-(frontend/demos), bump yarn [#16426](https://github.com/openshift/console/pull/16426)
* [OCPBUGS-81518](https://issues.redhat.com/browse/OCPBUGS-81518): Increase Resource Dropdown visible items cap to 250. [#16398](https://github.com/openshift/console/pull/16398)
* [CONSOLE-5273](https://issues.redhat.com/browse/CONSOLE-5273): Expose `useToast` in the SDK [#16400](https://github.com/openshift/console/pull/16400)
* [OCPBUGS-59353](https://issues.redhat.com/browse/OCPBUGS-59353): Fix authentication redirect loop on repeated 401 responses [#15814](https://github.com/openshift/console/pull/15814)
* [CONSOLE-5015](https://issues.redhat.com/browse/CONSOLE-5015): Migrate NameValueEditor to TypeScript and PatternFly drag-drop [#16406](https://github.com/openshift/console/pull/16406)
* NO-JIRA: Add approvers and reviewers to helm-plugin OWNERS [#16361](https://github.com/openshift/console/pull/16361)
* [OCPBUGS-85043](https://issues.redhat.com/browse/OCPBUGS-85043): Remove `@console` imports from SDK dist [#16399](https://github.com/openshift/console/pull/16399)
* [OCPBUGS-77931](https://issues.redhat.com/browse/OCPBUGS-77931): Loosen default `img-src` CSP [#16388](https://github.com/openshift/console/pull/16388)
* [OCPBUGS-84324](https://issues.redhat.com/browse/OCPBUGS-84324): Update outdated documentation links and references [#16362](https://github.com/openshift/console/pull/16362)
* [CONSOLE-5212](https://issues.redhat.com/browse/CONSOLE-5212): Set up Playwright e2e test infrastructure [#16320](https://github.com/openshift/console/pull/16320)
* [OCPBUGS-84844](https://issues.redhat.com/browse/OCPBUGS-84844): VSphere plugin changes broke i18n translations - missing strings in locales/en/ [#16384](https://github.com/openshift/console/pull/16384)
* [OCPBUGS-80940](https://issues.redhat.com/browse/OCPBUGS-80940): Fix SDK publish workflow for Yarn Berry [#16392](https://github.com/openshift/console/pull/16392)
* [HELM-613](https://issues.redhat.com/browse/HELM-613): Reject basic auth over non-HTTPS for Helm chart repositories [#16317](https://github.com/openshift/console/pull/16317)
* [OCPBUGS-81519](https://issues.redhat.com/browse/OCPBUGS-81519): Fix Search page state mutation and unnecessary component remounts [#16266](https://github.com/openshift/console/pull/16266)
* [OCPBUGS-84876](https://issues.redhat.com/browse/OCPBUGS-84876): Add bottom pagination to ConsoleDataView for mobile responsiveness [#16391](https://github.com/openshift/console/pull/16391)
* [OCPBUGS-84856](https://issues.redhat.com/browse/OCPBUGS-84856): Fix ESLint Testing Library plugin PR review feedback [#16387](https://github.com/openshift/console/pull/16387)
* [OCPBUGS-82140](https://issues.redhat.com/browse/OCPBUGS-82140): Remove PII from events [#16365](https://github.com/openshift/console/pull/16365)
* NO-JIRA: Align Dockerfile.dev with multi-arch Dockerfile structure [#16390](https://github.com/openshift/console/pull/16390)
* [OCPBUGS-79363](https://issues.redhat.com/browse/OCPBUGS-79363): Move xterm to its own chunk [#16370](https://github.com/openshift/console/pull/16370)
* NO-JIRA: zsh compatibility for microcopy-review [#16389](https://github.com/openshift/console/pull/16389)
* NO-JIRA: Add fsgreco to frontend reviewers [#16381](https://github.com/openshift/console/pull/16381)
* [CONSOLE-5184](https://issues.redhat.com/browse/CONSOLE-5184): Enable ESLint Plugins for React Testing Library [#16270](https://github.com/openshift/console/pull/16270)
* [OCPBUGS-84710](https://issues.redhat.com/browse/OCPBUGS-84710): Fix ConsoleDataView filter order: Name and Label should appear first [#16375](https://github.com/openshift/console/pull/16375)
* [OCPBUGS-84227](https://issues.redhat.com/browse/OCPBUGS-84227): i18n upload/download routine task - version 4.22 [#16318](https://github.com/openshift/console/pull/16318)
* [OCPBUGS-84230](https://issues.redhat.com/browse/OCPBUGS-84230): [release-4.22] - Re-enable cluster-settings/update-modal.cy.ts e2e test disabled for createRoot adoption [#16319](https://github.com/openshift/console/pull/16319)
* [OCPBUGS-81522](https://issues.redhat.com/browse/OCPBUGS-81522): Reduce dashboard re-renders by memoizing cards and stabilizing prop references [#16367](https://github.com/openshift/console/pull/16367)
* [CONSOLE-5203](https://issues.redhat.com/browse/CONSOLE-5203): Remove old QE team from our repos [#16312](https://github.com/openshift/console/pull/16312)
* [OCPBUGS-81518](https://issues.redhat.com/browse/OCPBUGS-81518): Fix ResourceListDropdown performance on large clusters [#16252](https://github.com/openshift/console/pull/16252)
* [OCPBUGS-79067](https://issues.redhat.com/browse/OCPBUGS-79067): Fix crash when switching language to English [#16366](https://github.com/openshift/console/pull/16366)
* NO-JIRA: Remove broken entrypoints and unused packages [#16357](https://github.com/openshift/console/pull/16357)
* [OCPBUGS-82511](https://issues.redhat.com/browse/OCPBUGS-82511): re-enable helm-release.feature [#16274](https://github.com/openshift/console/pull/16274)
* [CONSOLE-5227](https://issues.redhat.com/browse/CONSOLE-5227): Upgrade ESLint from v6 to v8 and @typescript-eslint to v8 [#16353](https://github.com/openshift/console/pull/16353)
* [OCPBUGS-84338](https://issues.redhat.com/browse/OCPBUGS-84338): Update resolveDynamicModuleMaps to skip unavailable packages [#16340](https://github.com/openshift/console/pull/16340)
* [OCPBUGS-84320](https://issues.redhat.com/browse/OCPBUGS-84320): Use popover token in QS modal [#16339](https://github.com/openshift/console/pull/16339)
* [OCPBUGS-84296](https://issues.redhat.com/browse/OCPBUGS-84296): fix Helm list page redirect after upgrade/rollback [#16336](https://github.com/openshift/console/pull/16336)
* NO-JIRA: prepare for 4.22-prerelease.3 sdk publish [#16338](https://github.com/openshift/console/pull/16338)
* [CONSOLE-5144](https://issues.redhat.com/browse/CONSOLE-5144), [OCPBUGS-81319](https://issues.redhat.com/browse/OCPBUGS-81319), [OCPBUGS-83823](https://issues.redhat.com/browse/OCPBUGS-83823): 4.22 SDK fixes [#15655](https://github.com/openshift/console/pull/15655)
* [OCPBUGS-83812](https://issues.redhat.com/browse/OCPBUGS-83812): Fix race conditions in OLM descriptors Cypress test [#16304](https://github.com/openshift/console/pull/16304)
* [OCPBUGS-83816](https://issues.redhat.com/browse/OCPBUGS-83816): Fix race conditions in create-namespace Cypress tests [#16306](https://github.com/openshift/console/pull/16306)
* NO-JIRA: enable multi-architecture yarn builds [#16228](https://github.com/openshift/console/pull/16228)
* [OCPBUGS-83813](https://issues.redhat.com/browse/OCPBUGS-83813): Fix race conditions in debug pod Cypress tests [#16305](https://github.com/openshift/console/pull/16305)
* [OCPBUGS-81668](https://issues.redhat.com/browse/OCPBUGS-81668): Fix User Preferences responsive breakpoints bug [#16279](https://github.com/openshift/console/pull/16279)
* [OCPBUGS-77864](https://issues.redhat.com/browse/OCPBUGS-77864): Add gRPC probe support to container details view [#16245](https://github.com/openshift/console/pull/16245)
* [CONSOLE-5176](https://issues.redhat.com/browse/CONSOLE-5176): Refactor RTL Tests from fireEvent to userEvent [#16294](https://github.com/openshift/console/pull/16294)
* [OCPBUGS-82504](https://issues.redhat.com/browse/OCPBUGS-82504): Re-enable cluster-settings/update-modal.cy.ts e2e test disabled for createRoot adoption [#16283](https://github.com/openshift/console/pull/16283)
* NO-JIRA: Replace deprecated io/ioutil pkg [#15902](https://github.com/openshift/console/pull/15902)
* [OCPBUGS-81630](https://issues.redhat.com/browse/OCPBUGS-81630): Fix unnecessary error on Node Terminal tab [#16263](https://github.com/openshift/console/pull/16263)
* [OCPBUGS-78365](https://issues.redhat.com/browse/OCPBUGS-78365): Fix create visual connector in Topology [#16241](https://github.com/openshift/console/pull/16241)
* [OCPBUGS-83532](https://issues.redhat.com/browse/OCPBUGS-83532): Add empty state visibility check to CRD test [#16303](https://github.com/openshift/console/pull/16303)
* [CONSOLE-5204](https://issues.redhat.com/browse/CONSOLE-5204): Merge PR templates [#16287](https://github.com/openshift/console/pull/16287)
* [OCPBUGS-82510](https://issues.redhat.com/browse/OCPBUGS-82510): Fix web-terminal-adminuser e2e tests broken by createRoot [#16284](https://github.com/openshift/console/pull/16284)
* [OCPBUGS-83446](https://issues.redhat.com/browse/OCPBUGS-83446): Fix Cypress test timeouts by using correct timeout option [#16280](https://github.com/openshift/console/pull/16280)
* [OCPBUGS-83532](https://issues.redhat.com/browse/OCPBUGS-83532): Fix race condition in CRD Cypress test [#16288](https://github.com/openshift/console/pull/16288)
* NO-JIRA: enable Cypress Cloud in CI [#16277](https://github.com/openshift/console/pull/16277)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/f6de0e73b88eeed1f0cbc73d751f5e629d817813...9af8cbd256ab90ceb5d746b20e63a9744cbe9cb6)
### [console-operator](https://github.com/openshift/console-operator/tree/2d71a12328fb08b7e5f80bfdc7a0324048bf0e74)
* [OCPBUGS-85650](https://issues.redhat.com/browse/OCPBUGS-85650): bump gRPC-Go package [#1156](https://github.com/openshift/console-operator/pull/1156)
* [MON-4510](https://issues.redhat.com/browse/MON-4510): Migrate Prometheus targets discovering from Endpoints to EndpointSlices [#1106](https://github.com/openshift/console-operator/pull/1106)
* [OCPBUGS-85060](https://issues.redhat.com/browse/OCPBUGS-85060): feat: use 2 replicas for console on tnf [#1151](https://github.com/openshift/console-operator/pull/1151)
* [CONSOLE-5204](https://issues.redhat.com/browse/CONSOLE-5204): Add PR template [#1141](https://github.com/openshift/console-operator/pull/1141)
* [Full changelog](https://github.com/openshift/console-operator/compare/f0619391890c61e1a4ebdf5c1c0b247b30f81248...2d71a12328fb08b7e5f80bfdc7a0324048bf0e74)
### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/3e411dcd9507ad2ad63362b44f7140b1db6ed243)
* UPSTREAM-SYNC: Sync main with latest upstream (release-1.35) [#370](https://github.com/openshift/cloud-provider-openstack/pull/370)
* [OCPBUGS-77578](https://issues.redhat.com/browse/OCPBUGS-77578): Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.22 [#374](https://github.com/openshift/cloud-provider-openstack/pull/374)
* [OCPBUGS-77755](https://issues.redhat.com/browse/OCPBUGS-77755): Updating ose-openstack-cloud-controller-manager-container image to be consistent with ART for 4.22 [#376](https://github.com/openshift/cloud-provider-openstack/pull/376)
* [OCPBUGS-77592](https://issues.redhat.com/browse/OCPBUGS-77592): Updating csi-driver-manila-container image to be consistent with ART for 4.22 [#375](https://github.com/openshift/cloud-provider-openstack/pull/375)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/fd31b5da11d75a7a80e7c4a6c7a56acf304e2661...3e411dcd9507ad2ad63362b44f7140b1db6ed243)
### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/0a1ab4b82415d1b44972ebce0e55541ad632a8c7)
* UPSTREAM-SYNC: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main [#179](https://github.com/openshift/csi-driver-nfs/pull/179)
* UPSTREAM-SYNC: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main [#175](https://github.com/openshift/csi-driver-nfs/pull/175)
* UPSTREAM-SYNC: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main [#170](https://github.com/openshift/csi-driver-nfs/pull/170)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/e9f249405ad2bced3d1805dd5beda368d7f3d564...0a1ab4b82415d1b44972ebce0e55541ad632a8c7)
### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/2ccbf8c35aa2e5b851116706c018ff44f0bb7d08)
* NO-JIRA: OCPBUGS-82033: Bump google.golang.org/grpc to 1.79.3 [#124](https://github.com/openshift/csi-external-provisioner/pull/124)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/f90c06a3113696cdb757e4b7c9dcfeb0e9dddb81...2ccbf8c35aa2e5b851116706c018ff44f0bb7d08)
### [csi-external-snapshotter, csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter/tree/3219da7dcbb14fa762704746d21fb38131beb1f4)
* [OCPBUGS-77492](https://issues.redhat.com/browse/OCPBUGS-77492): UPSTREAM: 1392: Fix VolumeSnapshotContent deletion [#207](https://github.com/openshift/csi-external-snapshotter/pull/207)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/d1bc3ffaa9759c13a06c2ec61c541342e71bd109...3219da7dcbb14fa762704746d21fb38131beb1f4)
### [docker-registry](https://github.com/openshift/image-registry/tree/57039cd2d9c87547cdf9a8d1dc7cb94f1ca089f7)
* [OCPBUGS-84680](https://issues.redhat.com/browse/OCPBUGS-84680): pin cloud.google.com/go/storage to v1.30.1 to fix blob deletion [#469](https://github.com/openshift/image-registry/pull/469)
* [Full changelog](https://github.com/openshift/image-registry/compare/9eae44fcf44142a705031fa16a613c450dbe685a...57039cd2d9c87547cdf9a8d1dc7cb94f1ca089f7)
### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/d37f51e057620bdee564f68dcfde955acf033d3e)
* [OCPBUGS-83286](https://issues.redhat.com/browse/OCPBUGS-83286): Fix swallowed errors in cmdAdd/cmdDel causing empty CNI result [#95](https://github.com/openshift/egress-router-cni/pull/95)
* NO-JIRA: Update OWNERs file [#96](https://github.com/openshift/egress-router-cni/pull/96)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/5e0f8d1b545899fda27c5e1cc8707d33cba1b534...d37f51e057620bdee564f68dcfde955acf033d3e)
### [etcd](https://github.com/openshift/etcd/tree/c543fe15324510d13e896c31232ecd5d100d9de5)
* [OCPBUGS-85258](https://issues.redhat.com/browse/OCPBUGS-85258): 5.0 rebase 3.6.11 [#375](https://github.com/openshift/etcd/pull/375)
* [OCPBUGS-82495](https://issues.redhat.com/browse/OCPBUGS-82495): 5.0/4.23 rebase 3.6.10 [#368](https://github.com/openshift/etcd/pull/368)
* [Full changelog](https://github.com/openshift/etcd/compare/d8d67b8ce849f816d6d23c904098336632e2348f...c543fe15324510d13e896c31232ecd5d100d9de5)
### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/808c2a2d59dc0584d31484fe49085ba1de7bed74)
* [OCPBUGS-85551](https://issues.redhat.com/browse/OCPBUGS-85551), [OCPBUGS-85552](https://issues.redhat.com/browse/OCPBUGS-85552): Upgrade spdystream and grpc to fix CVEs [#115](https://github.com/openshift/cloud-provider-gcp/pull/115)
* NO-JIRA: Remove custom vendor scripts in favour of standard tooling [#111](https://github.com/openshift/cloud-provider-gcp/pull/111)
* NO-JIRA: Update OWNERS [#105](https://github.com/openshift/cloud-provider-gcp/pull/105)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/4d9707e182c4f8734d83ebf21e3ffcc4c38d04e9...808c2a2d59dc0584d31484fe49085ba1de7bed74)
### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/196e2c06afdb893dbe113ec1259203b8f4654fd4)
* [OCPBUGS-85101](https://issues.redhat.com/browse/OCPBUGS-85101): Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.11.2 (14609a0) into master [#273](https://github.com/openshift/cluster-api-provider-gcp/pull/273)
* NO-JIRA: manifests-gen: scope provider webhooks to capi namespace [#292](https://github.com/openshift/cluster-api-provider-gcp/pull/292)
* [OCPCLOUD-3359](https://issues.redhat.com/browse/OCPCLOUD-3359): Add TLS substitutions [#284](https://github.com/openshift/cluster-api-provider-gcp/pull/284)
* NO-JIRA: Update manifests generator [#285](https://github.com/openshift/cluster-api-provider-gcp/pull/285)
* [OCPBUGS-77684](https://issues.redhat.com/browse/OCPBUGS-77684): Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART for 4.22 [#272](https://github.com/openshift/cluster-api-provider-gcp/pull/272)
* NO-JIRA: Update OWNERS [#280](https://github.com/openshift/cluster-api-provider-gcp/pull/280)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/788dd01e734fbafb788d50a4848460c7ceca90aa...196e2c06afdb893dbe113ec1259203b8f4654fd4)
### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/065e2b608a027ba47fce02aaabb986e6c650e6d6)
* NO-JIRA: Update OWNERS [#157](https://github.com/openshift/machine-api-provider-gcp/pull/157)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/0073bd1187c07febc963fc67f0df67cd33c8f218...065e2b608a027ba47fce02aaabb986e6c650e6d6)
### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/c58c624fef4cbac80e0efa1d40e8c359d257a1cd)
* UPSTREAM: 2297: OCPBUGS-83423: Bump google.golang.org/grpc to v1.79.3 [#121](https://github.com/openshift/gcp-pd-csi-driver/pull/121)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/2ba117405ff1cee765d42491f5863b06a1c9a2da...c58c624fef4cbac80e0efa1d40e8c359d257a1cd)
### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/f2427fae9f2115a920a5d8cf8c645afa3ff827d9)
* [STOR-2798](https://issues.redhat.com/browse/STOR-2798): Update image-snapshot CSI manifest to use operator provided imageVolumeSnapshotClass [#179](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/179)
* [STOR-2798](https://issues.redhat.com/browse/STOR-2798): Add test e2e manifest and VolumeSnapshotClass for image volumeSnapshotClass CSI tests [#178](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/178)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/6b00096f4a84203a69467802b846f215b4e04888...f2427fae9f2115a920a5d8cf8c645afa3ff827d9)
### [haproxy-router](https://github.com/openshift/router/tree/b75bab261392d5eacb115db408f121618a23e41d)
* Reapply "OCPBUGS-55506: Prevent startup failures due to name resolution" [#677](https://github.com/openshift/router/pull/677)
* [OCPBUGS-77263](https://issues.redhat.com/browse/OCPBUGS-77263): create self-signed crt if failing to read default [#740](https://github.com/openshift/router/pull/740)
* [OCPBUGS-62267](https://issues.redhat.com/browse/OCPBUGS-62267): fix forwarded header for IPv6 on IPv4 stack [#713](https://github.com/openshift/router/pull/713)
* [OCPBUGS-49738](https://issues.redhat.com/browse/OCPBUGS-49738): fix handling of host conflict [#736](https://github.com/openshift/router/pull/736)
* [Full changelog](https://github.com/openshift/router/compare/896390778ebe15f57f87e6ca78f11c96e64c2652...b75bab261392d5eacb115db408f121618a23e41d)
### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/f9b62a69d4a05e10b2b7cf8d40afa37f9dcd0938)
* [OCPBUGS-78044](https://issues.redhat.com/browse/OCPBUGS-78044): Improve WatchList test robustness [#2622](https://github.com/openshift/kubernetes/pull/2622)
* [CNTRLPLANE-2553](https://issues.redhat.com/browse/CNTRLPLANE-2553): Update the KAS admission plugin for fields to be compilable at admission time [#2627](https://github.com/openshift/kubernetes/pull/2627)
* [OCPBUGS-83502](https://issues.redhat.com/browse/OCPBUGS-83502): devicemanager: constrain topology hints to device NUMA nodes [#2645](https://github.com/openshift/kubernetes/pull/2645)
* [OCPBUGS-78576](https://issues.redhat.com/browse/OCPBUGS-78576): Update the csi-driver-host-path version to 1.17.1 [#2641](https://github.com/openshift/kubernetes/pull/2641)
* [OCPBUGS-81740](https://issues.redhat.com/browse/OCPBUGS-81740): UPSTREAM: 138259: Filter out unschedulable nodes in kubectl describe test [#2640](https://github.com/openshift/kubernetes/pull/2640)
* [Full changelog](https://github.com/openshift/kubernetes/compare/da4553e9f23c91c792094a1ddbba933784becce4...f9b62a69d4a05e10b2b7cf8d40afa37f9dcd0938)
### [hypershift](https://github.com/openshift/hypershift/tree/f76be88237e1ae0c1c4df2e34d8b0f9eb8ec7953)
* NO-JIRA: ci(deps): bump cloudflare/wrangler-action from 3.15.0 to 4.0.0 [#8524](https://github.com/openshift/hypershift/pull/8524)
* [OCPBUGS-85763](https://issues.redhat.com/browse/OCPBUGS-85763): Fix metrics-proxy deployment failure due to dots in volume names [#8530](https://github.com/openshift/hypershift/pull/8530)
* [GCP-636](https://issues.redhat.com/browse/GCP-636): feat(gcp): support for managing GCP OIDC discovery documents [#8413](https://github.com/openshift/hypershift/pull/8413)
* [OCPBUGS-84307](https://issues.redhat.com/browse/OCPBUGS-84307): Clarify --base-domain flag default behavior [#8381](https://github.com/openshift/hypershift/pull/8381)
* [AUTOSCALE-681](https://issues.redhat.com/browse/AUTOSCALE-681): various karpenter and karpenterupgrade test fixes [#8510](https://github.com/openshift/hypershift/pull/8510)
* [CNTRLPLANE-3329](https://issues.redhat.com/browse/CNTRLPLANE-3329): Replace actions/cache with EFS-backed build cache in unit tests [#8494](https://github.com/openshift/hypershift/pull/8494)
* [OCPBUGS-85577](https://issues.redhat.com/browse/OCPBUGS-85577): Update external-dns image from 1.1.0-3 to 1.2.1 [#8506](https://github.com/openshift/hypershift/pull/8506)
* [OCPBUGS-77827](https://issues.redhat.com/browse/OCPBUGS-77827): fix(api): add missing has() guards to servingCerts CEL validation rule [#8331](https://github.com/openshift/hypershift/pull/8331)
* [CNTRLPLANE-3380](https://issues.redhat.com/browse/CNTRLPLANE-3380): docs: add aws-node-termination-handler to repositories list [#8514](https://github.com/openshift/hypershift/pull/8514)
* [OCPBUGS-85580](https://issues.redhat.com/browse/OCPBUGS-85580): Fix webhook TLS failure after service-ca to self-managed cert migration [#8504](https://github.com/openshift/hypershift/pull/8504)
* build(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 in /hack/tools [#8481](https://github.com/openshift/hypershift/pull/8481)
* [OCPBUGS-85344](https://issues.redhat.com/browse/OCPBUGS-85344): Add version gates for 4.22 backward compatibility in e2e tests [#8466](https://github.com/openshift/hypershift/pull/8466)
* [AUTOSCALE-681](https://issues.redhat.com/browse/AUTOSCALE-681): remove TechPreviewNoUpgrade gate from karpenter upgrade test [#8498](https://github.com/openshift/hypershift/pull/8498)
* [CNTRLPLANE-3329](https://issues.redhat.com/browse/CNTRLPLANE-3329): Mount EFS-backed Go build cache PV on ARC runner pods [#8493](https://github.com/openshift/hypershift/pull/8493)
* NO-JIRA: docs: add repositories page listing team-owned repos [#8505](https://github.com/openshift/hypershift/pull/8505)
* [CNTRLPLANE-3329](https://issues.redhat.com/browse/CNTRLPLANE-3329): Add nightly CronJob to warm EFS-backed Go build cache [#8496](https://github.com/openshift/hypershift/pull/8496)
* [CNTRLPLANE-3324](https://issues.redhat.com/browse/CNTRLPLANE-3324): Restore non-obvious comments after gocyclo refactor [#8487](https://github.com/openshift/hypershift/pull/8487)
* [AUTOSCALE-558](https://issues.redhat.com/browse/AUTOSCALE-558): Expose KubeletConfig on OpenShiftEC2Nodeclass as structured fields + preserveunknown/overflow [#8192](https://github.com/openshift/hypershift/pull/8192)
* NO-JIRA: Fix docs deploy preview by replacing gh CLI with curl [#8488](https://github.com/openshift/hypershift/pull/8488)
* [CNTRLPLANE-2946](https://issues.redhat.com/browse/CNTRLPLANE-2946): Move AWS NLB annotation inside LoadBalancer strategy block [#7993](https://github.com/openshift/hypershift/pull/7993)
* [OCPBUGS-78539](https://issues.redhat.com/browse/OCPBUGS-78539): re-add crash toleration for dns-operator during upgrades [#8483](https://github.com/openshift/hypershift/pull/8483)
* [CNTRLPLANE-3384](https://issues.redhat.com/browse/CNTRLPLANE-3384): Remove unconditional low-quality log messages from controllers [#8428](https://github.com/openshift/hypershift/pull/8428)
* [OCPBUGS-84971](https://issues.redhat.com/browse/OCPBUGS-84971): Gate AWSDefaultSecurityGroupDeleted condition to AWS platform [#8415](https://github.com/openshift/hypershift/pull/8415)
* [CNTRLPLANE-3324](https://issues.redhat.com/browse/CNTRLPLANE-3324): Enable gocyclo linter and reduce cyclomatic complexity [#8309](https://github.com/openshift/hypershift/pull/8309)
* NO-JIRA: fix(karpenter): resolve HCP karpenter finalizer when AutoNode is disabled [#8404](https://github.com/openshift/hypershift/pull/8404)
* [OCPBUGS-62177](https://issues.redhat.com/browse/OCPBUGS-62177): verify cert revocation against all KAS pods [#8263](https://github.com/openshift/hypershift/pull/8263)
* NO-JIRA: Document CEL over webhooks policy for AI agents [#8478](https://github.com/openshift/hypershift/pull/8478)
* NO-JIRA: docs(kubevirt): add how-to for configuring VMs with JSON patches [#8473](https://github.com/openshift/hypershift/pull/8473)
* [CNTRLPLANE-1741](https://issues.redhat.com/browse/CNTRLPLANE-1741): Migrate gomaxprocs-webhook pipelines to use common-operator-build [#7122](https://github.com/openshift/hypershift/pull/7122)
* NO-JIRA: docs: update api-sme agent and api/AGENTS.md conventions [#8477](https://github.com/openshift/hypershift/pull/8477)
* [OCPBUGS-81686](https://issues.redhat.com/browse/OCPBUGS-81686): fix(authentication): use v2 auth validation for CEL and expression support. [#8246](https://github.com/openshift/hypershift/pull/8246)
* [OCPBUGS-85084](https://issues.redhat.com/browse/OCPBUGS-85084): fix(ci): use explicit lease in dependabot commit fix push [#8476](https://github.com/openshift/hypershift/pull/8476)
* [OCPBUGS-75887](https://issues.redhat.com/browse/OCPBUGS-75887): fix(inplaceupgrader): include node name in degraded upgrade error message [#8244](https://github.com/openshift/hypershift/pull/8244)
* NO-JIRA: fix(e2e): prevent agent unbinding and node reboots during backup/restore [#8356](https://github.com/openshift/hypershift/pull/8356)
* NO-JIRA: Update GHA docs for reusable workflow pattern [#8453](https://github.com/openshift/hypershift/pull/8453)
* [GCP-413](https://issues.redhat.com/browse/GCP-413): add image registry v2 e2e tests for hosted clusters [#8412](https://github.com/openshift/hypershift/pull/8412)
* NO-JIRA: docs: make CLAUDE.md a symlink to AGENTS.md across the repo [#8444](https://github.com/openshift/hypershift/pull/8444)
* [CNTRLPLANE-2778](https://issues.redhat.com/browse/CNTRLPLANE-2778): feat(tooling): overhaul pr-report skill and Python script [#7754](https://github.com/openshift/hypershift/pull/7754)
* [ACM-33601](https://issues.redhat.com/browse/ACM-33601): use the latest ubi9 nginx image [#8432](https://github.com/openshift/hypershift/pull/8432)
* [GCP-414](https://issues.redhat.com/browse/GCP-414): add image registry operational guide [#8455](https://github.com/openshift/hypershift/pull/8455)
* [OCPBUGS-84528](https://issues.redhat.com/browse/OCPBUGS-84528): clarify pull secret in-place update behavior and add CP watches [#8327](https://github.com/openshift/hypershift/pull/8327)
* [OCPBUGS-84955](https://issues.redhat.com/browse/OCPBUGS-84955): Add render-sensitive flag to `hypershift install render` [#8436](https://github.com/openshift/hypershift/pull/8436)
* [OCPBUGS-84857](https://issues.redhat.com/browse/OCPBUGS-84857): bump go builder and ubi images [#8437](https://github.com/openshift/hypershift/pull/8437)
* [GCP-410](https://issues.redhat.com/browse/GCP-410): fix(gcp): add registry SA WIF binding for image registry GCS access [#8445](https://github.com/openshift/hypershift/pull/8445)
* [CNTRLPLANE-3381](https://issues.redhat.com/browse/CNTRLPLANE-3381): CPO: Surface cloud resource deletion timeout as a status condition [#8426](https://github.com/openshift/hypershift/pull/8426)
* [OCPBUGS-85084](https://issues.redhat.com/browse/OCPBUGS-85084): fix(ci): rewrite dependabot commit messages to pass gitlint [#8435](https://github.com/openshift/hypershift/pull/8435)
* NO-JIRA: docs: detail release branch e2e config steps in branch-process guide [#8441](https://github.com/openshift/hypershift/pull/8441)
* [CNTRLPLANE-3222](https://issues.redhat.com/browse/CNTRLPLANE-3222): Migrate self-managed Azure e2e tests to v2 Ginkgo framework [#8204](https://github.com/openshift/hypershift/pull/8204)
* [GCP-412](https://issues.redhat.com/browse/GCP-412): add envtest cases for GCP imageRegistry CEL validation [#8411](https://github.com/openshift/hypershift/pull/8411)
* [CNTRLPLANE-2939](https://issues.redhat.com/browse/CNTRLPLANE-2939): Coordinate CRD lifecycle with Cluster CAPI Operator [#7996](https://github.com/openshift/hypershift/pull/7996)
* [OCPBUGS-77040](https://issues.redhat.com/browse/OCPBUGS-77040): Add AWS ISO domains to konnectivity IsCloudAPI [#8251](https://github.com/openshift/hypershift/pull/8251)
* [OCPBUGS-83328](https://issues.redhat.com/browse/OCPBUGS-83328): fix skipProxyForKAS to use standard NO_PROXY matching [#8254](https://github.com/openshift/hypershift/pull/8254)
* [OCPBUGS-84969](https://issues.redhat.com/browse/OCPBUGS-84969): fix(e2e): wait for Karpenter node cleanup in parallel tests to prevent vCPU flake [#8414](https://github.com/openshift/hypershift/pull/8414)
* [CNTRLPLANE-3343](https://issues.redhat.com/browse/CNTRLPLANE-3343): Extract support/k8sutil package from support/util [#8396](https://github.com/openshift/hypershift/pull/8396)
* [TRT-2653](https://issues.redhat.com/browse/TRT-2653): Revert #8357 "OCPBUGS-84572: fix(cpo): generate EBS CSI driver operator serving cert in CPO" [#8417](https://github.com/openshift/hypershift/pull/8417)
* NO-JIRA: chore(deps): weekly dependabot consolidation [#8410](https://github.com/openshift/hypershift/pull/8410)
* NO-JIRA: Skip TestKarpenter for releases < 4.22 [#8409](https://github.com/openshift/hypershift/pull/8409)
* [CNTRLPLANE-3351](https://issues.redhat.com/browse/CNTRLPLANE-3351): e2e: add opt-in CPU resource request overrides for control plane components [#8385](https://github.com/openshift/hypershift/pull/8385)
* [OCPBUGS-84509](https://issues.redhat.com/browse/OCPBUGS-84509): Add AWS LB Controller cross-zone load balancing annotation [#8344](https://github.com/openshift/hypershift/pull/8344)
* [OCPBUGS-84572](https://issues.redhat.com/browse/OCPBUGS-84572): fix(cpo): generate EBS CSI driver operator serving cert in CPO [#8357](https://github.com/openshift/hypershift/pull/8357)
* [OCPBUGS-81631](https://issues.redhat.com/browse/OCPBUGS-81631): fix(metrics): remove noisy vCPU log for non-AWS platforms [#8169](https://github.com/openshift/hypershift/pull/8169)
* NO-JIRA: Extend timeout for CRD removal during integration tests [#8366](https://github.com/openshift/hypershift/pull/8366)
* NO-JIRA: chore(deps): weekly dependabot consolidation [#8395](https://github.com/openshift/hypershift/pull/8395)
* [OCPBUGS-83868](https://issues.redhat.com/browse/OCPBUGS-83868): prevent IAM resource leaks during cluster destroy [#8303](https://github.com/openshift/hypershift/pull/8303)
* [GCP-635](https://issues.redhat.com/browse/GCP-635): feat(gcp): make JWKS file optional when OIDC issuer URL is provided [#8339](https://github.com/openshift/hypershift/pull/8339)
* [OCPBUGS-83757](https://issues.redhat.com/browse/OCPBUGS-83757): Remove network dependencies from unit tests [#8277](https://github.com/openshift/hypershift/pull/8277)
* ci(deps): bump actions/setup-go from 5.6.0 to 6.4.0 [#8393](https://github.com/openshift/hypershift/pull/8393)
* [OCPBUGS-84508](https://issues.redhat.com/browse/OCPBUGS-84508): Fix NLB name parsing for EKS Auto Mode hostnames [#8343](https://github.com/openshift/hypershift/pull/8343)
* [AUTOSCALE-615](https://issues.redhat.com/browse/AUTOSCALE-615): include Karpenter node vCPUs in billing metric [#8265](https://github.com/openshift/hypershift/pull/8265)
* [CNTRLPLANE-3352](https://issues.redhat.com/browse/CNTRLPLANE-3352): Convert GHA callers to use reusable workflows @main [#8387](https://github.com/openshift/hypershift/pull/8387)
* [CNTRLPLANE-3342](https://issues.redhat.com/browse/CNTRLPLANE-3342): Extract support/netutil package from support/util [#8360](https://github.com/openshift/hypershift/pull/8360)
* [CNTRLPLANE-3352](https://issues.redhat.com/browse/CNTRLPLANE-3352): Add reusable GHA workflow definitions [#8386](https://github.com/openshift/hypershift/pull/8386)
* [GCP-410](https://issues.redhat.com/browse/GCP-410): feat(gcp): add HCCO credential propagation for GCP image registry [#7896](https://github.com/openshift/hypershift/pull/7896)
* [OCPBUGS-84551](https://issues.redhat.com/browse/OCPBUGS-84551): fix(ingress): set FIPS_ENABLED env var on ingress operator [#8375](https://github.com/openshift/hypershift/pull/8375)
* [CNTRLPLANE-3307](https://issues.redhat.com/browse/CNTRLPLANE-3307): add unit tests for Azure Private Link Service controllers [#8285](https://github.com/openshift/hypershift/pull/8285)
* [CNTRLPLANE-3160](https://issues.redhat.com/browse/CNTRLPLANE-3160): Drop AutoNodeKarpenter feature gate and promote EC2NodeClass to v1 [#8166](https://github.com/openshift/hypershift/pull/8166)
* NO-JIRA: Improve commit and PR guidance in AGENTS.md [#8373](https://github.com/openshift/hypershift/pull/8373)
* [OCPBUGS-83790](https://issues.redhat.com/browse/OCPBUGS-83790): change Azure workload identity webhook FailurePolicy from Fail to Ignore [#8288](https://github.com/openshift/hypershift/pull/8288)
* NO-JIRA: chore(deps): weekly dependabot consolidation [#8334](https://github.com/openshift/hypershift/pull/8334)
* NO-JIRA: Add API dependency import restriction tool [#8364](https://github.com/openshift/hypershift/pull/8364)
* [SPLAT-2587](https://issues.redhat.com/browse/SPLAT-2587): aws/ccm: introduce configuration to CCM managed Security Groups for NLB [#7460](https://github.com/openshift/hypershift/pull/7460)
* NO-JIRA: add --max-depth flag to nav order verification [#8372](https://github.com/openshift/hypershift/pull/8372)
* NO-JIRA: Do not import external dependencies into API packages [#8355](https://github.com/openshift/hypershift/pull/8355)
* [CNTRLPLANE-3340](https://issues.redhat.com/browse/CNTRLPLANE-3340): Extract support/podspec package from support/util [#8354](https://github.com/openshift/hypershift/pull/8354)
* [OCPBUGS-84251](https://issues.redhat.com/browse/OCPBUGS-84251): fix(azure): detect and replace stale role assignments on cluster re-creation [#8322](https://github.com/openshift/hypershift/pull/8322)
* [OCPBUGS-84236](https://issues.redhat.com/browse/OCPBUGS-84236): Guard Infrastructure CR lookup in AWSEndpointServiceReconciler [#8315](https://github.com/openshift/hypershift/pull/8315)
* fix: OCPBUGS-78575: create virt-launcher NetworkPolicy on external infra cluster [#8056](https://github.com/openshift/hypershift/pull/8056)
* [CNTRLPLANE-3330](https://issues.redhat.com/browse/CNTRLPLANE-3330): ci: improve unit test speed with sharding and parallelism [#8330](https://github.com/openshift/hypershift/pull/8330)
* [CNTRLPLANE-3313](https://issues.redhat.com/browse/CNTRLPLANE-3313): add Etcd Snapshot Backup (Tech Preview) DR documentation [#8299](https://github.com/openshift/hypershift/pull/8299)
* [CNTRLPLANE-2834](https://issues.redhat.com/browse/CNTRLPLANE-2834): add e2e test for etcd snapshot backup method on AWS [#8231](https://github.com/openshift/hypershift/pull/8231)
* docs: NO-JIRA: clarify serialization tag behaviour in api/AGENTS.md [#8328](https://github.com/openshift/hypershift/pull/8328)
* [OCPBUGS-84248](https://issues.redhat.com/browse/OCPBUGS-84248): Remove hardcoded quay.io credentials from EnsureGlobalPullSecret test [#8320](https://github.com/openshift/hypershift/pull/8320)
* NO-JIRA: ci(deps): bump GitHub Actions dependencies [#8333](https://github.com/openshift/hypershift/pull/8333)
* [OCPBUGS-77529](https://issues.redhat.com/browse/OCPBUGS-77529): clean stale mock files before make generate function [#8237](https://github.com/openshift/hypershift/pull/8237)
* [OCPBUGS-79471](https://issues.redhat.com/browse/OCPBUGS-79471): fix(test): reduce e2e autorepair flakes from unhealthy node conditions [#8278](https://github.com/openshift/hypershift/pull/8278)
* NO-JIRA: docs: clarify that control plane downgrades are not supported [#8314](https://github.com/openshift/hypershift/pull/8314)
* [CNTRLPLANE-2204](https://issues.redhat.com/browse/CNTRLPLANE-2204): improve AllNodesHealthy and AllMachinesReady conditions [#8247](https://github.com/openshift/hypershift/pull/8247)
* [GCP-431](https://issues.redhat.com/browse/GCP-431): feat: Add CNCC support for GCP WIF in HyperShift [#7824](https://github.com/openshift/hypershift/pull/7824)
* [OCPBUGS-83410](https://issues.redhat.com/browse/OCPBUGS-83410): fix, cno, skip cloud-network-config-controller check on non-cloud platforms [#8238](https://github.com/openshift/hypershift/pull/8238)
* Revert "OCPBUGS-83730: Add *.apps wildcard to base domain Private DNS zone for Azure private clusters" [#8301](https://github.com/openshift/hypershift/pull/8301)
* NO-JIRA: docs: add jira:ready-to-solve to agentic SDLC workflow [#8304](https://github.com/openshift/hypershift/pull/8304)
* [OCPBUGS-83397](https://issues.redhat.com/browse/OCPBUGS-83397): Fix concurrent CRD reconciliation race [#8266](https://github.com/openshift/hypershift/pull/8266)
* NO-JIRA: MCE 5.0 branch cut [#8290](https://github.com/openshift/hypershift/pull/8290)
* [OCPBUGS-83751](https://issues.redhat.com/browse/OCPBUGS-83751): add missing RBAC for webhook configurations [#8276](https://github.com/openshift/hypershift/pull/8276)
* [OCPBUGS-83730](https://issues.redhat.com/browse/OCPBUGS-83730): Add *.apps wildcard to base domain Private DNS zone for Azure private clusters [#8273](https://github.com/openshift/hypershift/pull/8273)
* NO-JIRA: chore: pass COMMIT_HASH build arg to support git worktrees [#8279](https://github.com/openshift/hypershift/pull/8279)
* [OCPBUGS-78539](https://issues.redhat.com/browse/OCPBUGS-78539): revert temporary crash toleration for dns-operator [#7994](https://github.com/openshift/hypershift/pull/7994)
* [CNTRLPLANE-3296](https://issues.redhat.com/browse/CNTRLPLANE-3296): fix: auto-create python venv in Makefile for verify targets [#8269](https://github.com/openshift/hypershift/pull/8269)
* [OCPSTRAT-2499](https://issues.redhat.com/browse/OCPSTRAT-2499): docs(e2e): add AI agent guidance for v2 test framework [#8207](https://github.com/openshift/hypershift/pull/8207)
* [AUTOSCALE-490](https://issues.redhat.com/browse/AUTOSCALE-490): increase autonode test coverage [#7979](https://github.com/openshift/hypershift/pull/7979)
* [OCPBUGS-83604](https://issues.redhat.com/browse/OCPBUGS-83604): fix(kubevirt): filter link-local addresses from EndpointSlice endpoints [#8264](https://github.com/openshift/hypershift/pull/8264)
* NO-JIRA: fix(test): set 1h time limit on e2e capacity reservations [#8208](https://github.com/openshift/hypershift/pull/8208)
* NO-JIRA: docs(agents): add CRD API machinery fundamentals and envtest docs [#8236](https://github.com/openshift/hypershift/pull/8236)
* [OCPBUGS-83585](https://issues.redhat.com/browse/OCPBUGS-83585): Wait for CRD removal in GenerateCRDInstallTest to fix flaky envtest [#8261](https://github.com/openshift/hypershift/pull/8261)
* NO-JIRA: drop redundant api_ux_validation e2e test [#8210](https://github.com/openshift/hypershift/pull/8210)
* [CNTRLPLANE-3255](https://issues.redhat.com/browse/CNTRLPLANE-3255): enable CodeRabbit reviews on draft PRs [#8250](https://github.com/openshift/hypershift/pull/8250)
* [CNTRLPLANE-635](https://issues.redhat.com/browse/CNTRLPLANE-635): Enable nilness and unparam checks in golangci-lint [#8258](https://github.com/openshift/hypershift/pull/8258)
* [AUTOSCALE-590](https://issues.redhat.com/browse/AUTOSCALE-590): karpenter version logging verification [#8058](https://github.com/openshift/hypershift/pull/8058)
* [CNTRLPLANE-3259](https://issues.redhat.com/browse/CNTRLPLANE-3259): Add sdminonne, clebs, and Nirshal to core-reviewers [#8252](https://github.com/openshift/hypershift/pull/8252)
* ci(claude): add konflux-build command for manual non-expiring builds [#7964](https://github.com/openshift/hypershift/pull/7964)
* NO-JIRA: fix(e2e): handle uint64 underflow in karpenter version computation for 5.x [#8227](https://github.com/openshift/hypershift/pull/8227)
* [CNTRLPLANE-3174](https://issues.redhat.com/browse/CNTRLPLANE-3174): Add unit tests for v2 CPO controller packages [#8215](https://github.com/openshift/hypershift/pull/8215)
* [OCPBUGS-83538](https://issues.redhat.com/browse/OCPBUGS-83538): fix(metrics-proxy): resolve ports from pods instead of deployments [#8221](https://github.com/openshift/hypershift/pull/8221)
* [CNTRLPLANE-3260](https://issues.redhat.com/browse/CNTRLPLANE-3260): fix(ci): split docs-preview into build+deploy to eliminate pwn request [#8256](https://github.com/openshift/hypershift/pull/8256)
* [CNTRLPLANE-3203](https://issues.redhat.com/browse/CNTRLPLANE-3203): Add autoscaling documentation for self-managed Azure [#8239](https://github.com/openshift/hypershift/pull/8239)
* NO-JIRA: add ENVTEST_JOBS knob for parallel envtest execution [#8243](https://github.com/openshift/hypershift/pull/8243)
* [CNTRLPLANE-3260](https://issues.redhat.com/browse/CNTRLPLANE-3260): ci: harden GitHub Actions workflows [#8253](https://github.com/openshift/hypershift/pull/8253)
* [CNTRLPLANE-3214](https://issues.redhat.com/browse/CNTRLPLANE-3214): add envtest suites for HCPEtcdBackup CRD validation [#8199](https://github.com/openshift/hypershift/pull/8199)
* [CNTRLPLANE-3254](https://issues.redhat.com/browse/CNTRLPLANE-3254): Sort how-to guides alphabetically and add CI enforcement [#8248](https://github.com/openshift/hypershift/pull/8248)
* [OCPBUGS-67228](https://issues.redhat.com/browse/OCPBUGS-67228): fix(shared-ingress): bump haproxy to 3.0.5-4.el10_1.1 [#7370](https://github.com/openshift/hypershift/pull/7370)
* [CNTRLPLANE-3065](https://issues.redhat.com/browse/CNTRLPLANE-3065): docs: add Agentic Software Development Life Cycle page [#8235](https://github.com/openshift/hypershift/pull/8235)
* [OCPCLOUD-3347](https://issues.redhat.com/browse/OCPCLOUD-3347): feat(machine-approver): add TLS configuration options to deployment manifests [#8019](https://github.com/openshift/hypershift/pull/8019)
* [OCPBUGS-83389](https://issues.redhat.com/browse/OCPBUGS-83389): fix(supportedversion): normalize OCP 5.x versions for skew and release validation [#8225](https://github.com/openshift/hypershift/pull/8225)
* [SREP-4438](https://issues.redhat.com/browse/SREP-4438): refactor(karpenter): tidy Cincinnati version resolution [#8206](https://github.com/openshift/hypershift/pull/8206)
* NO-JIRA: revert: remove .git/ from .dockerignore [#8201](https://github.com/openshift/hypershift/pull/8201)
* [CNTRLPLANE-3197](https://issues.redhat.com/browse/CNTRLPLANE-3197): add release-4.22 branch to renovate configuration [#8196](https://github.com/openshift/hypershift/pull/8196)
* [CNTRLPLANE-3197](https://issues.redhat.com/browse/CNTRLPLANE-3197): update builder images from 4.22 to 4.23 [#8194](https://github.com/openshift/hypershift/pull/8194)
* [CNTRLPLANE-3216](https://issues.redhat.com/browse/CNTRLPLANE-3216): Add codecov.yml validation to make verify [#8202](https://github.com/openshift/hypershift/pull/8202)
* [GCP-368](https://issues.redhat.com/browse/GCP-368): add GCP CCM v2 e2e tests [#7840](https://github.com/openshift/hypershift/pull/7840)
* [CNTRLPLANE-3233](https://issues.redhat.com/browse/CNTRLPLANE-3233): ci(gha): add release-4.22 branch to GitHub Actions workflows [#8217](https://github.com/openshift/hypershift/pull/8217)
* And 5 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/hypershift/compare/44f4035e9d39423d3167d73a2e2cfc4927d57729...f76be88237e1ae0c1c4df2e34d8b0f9eb8ec7953)
### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/5fbabb9090dbc92f2a4ce9a9ae601403b64c996c)
* NO-JIRA: Update OWNERS [#95](https://github.com/openshift/cloud-provider-ibm/pull/95)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/d9222a1c00c37d635da02b65606fde1e54b2ec03...5fbabb9090dbc92f2a4ce9a9ae601403b64c996c)
### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/e76df035c5b5e5a9ed06b7ff3dac3dba416b3af2)
* NO-JIRA: Bump gRPC library to v1.79.3 and replace golang.org/x/net/context with context [#149](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/149)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/aa40cd7e1a37e2f48f238fc8d293b0546d5d4caf...e76df035c5b5e5a9ed06b7ff3dac3dba416b3af2)
### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/a26ad7ece37d9ae974d4384d6a4676ccb7666cd9)
* NO-JIRA: manifests-gen: scope provider webhooks to capi namespace [#160](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/160)
* [OCPCLOUD-3359](https://issues.redhat.com/browse/OCPCLOUD-3359): Add TLS substitutions [#158](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/158)
* NO-JIRA: Update manifests generator [#159](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/159)
* NO-JIRA: Update OWNERS [#156](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/156)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/03b143d588768a18fd8afa1534ea7d7a04b4d1f3...a26ad7ece37d9ae974d4384d6a4676ccb7666cd9)
### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/1f7397711bf06c87bf497e300870871dc345b827)
* NO-JIRA: Update OWNERS [#93](https://github.com/openshift/machine-api-provider-ibmcloud/pull/93)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/46b8c72c675770295f5c2c8f85f5f705ca35787c...1f7397711bf06c87bf497e300870871dc345b827)
### [insights-operator](https://github.com/openshift/insights-operator/tree/0a21a2a7b8307657dee68faefb0d88db897da131)
* [OCPBUGS-85710](https://issues.redhat.com/browse/OCPBUGS-85710): add trusted-ca-bundle to gatherin job [#1289](https://github.com/openshift/insights-operator/pull/1289)
* [CCXDEV-16348](https://issues.redhat.com/browse/CCXDEV-16348): tls metrics [#1275](https://github.com/openshift/insights-operator/pull/1275)
* [OCPBUGS-77351](https://issues.redhat.com/browse/OCPBUGS-77351): fix: add terminationMessagePolicy to runtime extractor containers [#1286](https://github.com/openshift/insights-operator/pull/1286)
* NO-JIRA: remove BaiyangZhou from OWNERS [#1273](https://github.com/openshift/insights-operator/pull/1273)
* [OCPBUGS-85201](https://issues.redhat.com/browse/OCPBUGS-85201): Bump google.golang.org/grpc to v1.79.3 [#1288](https://github.com/openshift/insights-operator/pull/1288)
* NO-JIRA: Update golang version [#1277](https://github.com/openshift/insights-operator/pull/1277)
* NO-JIRA: add write-test claude skill [#1274](https://github.com/openshift/insights-operator/pull/1274)
* [CCXDEV-15561](https://issues.redhat.com/browse/CCXDEV-15561): Improve test coverage 4 [#1226](https://github.com/openshift/insights-operator/pull/1226)
* [Full changelog](https://github.com/openshift/insights-operator/compare/d7b9c77e6565d4452ff79cd346f3ee6b8535698c...0a21a2a7b8307657dee68faefb0d88db897da131)
### [ironic](https://github.com/openshift/ironic-image/tree/323974b0aadc149d0dc29ca352b4be6c53b395d2)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#821](https://github.com/openshift/ironic-image/pull/821)
* [OCPBUGS-83618](https://issues.redhat.com/browse/OCPBUGS-83618): Bump sushy to latest [#838](https://github.com/openshift/ironic-image/pull/838)
* NO-ISSUE: Fix update requirements workflow [#842](https://github.com/openshift/ironic-image/pull/842)
* NO-ISSUE: Document how to use gerrit change hash for testing [#839](https://github.com/openshift/ironic-image/pull/839)
* [OKD-362](https://issues.redhat.com/browse/OKD-362): Add watchdog to python-requirements.okd [#837](https://github.com/openshift/ironic-image/pull/837)
* [Full changelog](https://github.com/openshift/ironic-image/compare/f934d2cdf0bebbde4992980a770dd799056ab867...323974b0aadc149d0dc29ca352b4be6c53b395d2)
### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/1e607137ca2e6f51a6f91c3402b0cd56f5d9bbe2)
* NO-ISSUE: Update requirements.cachito with latest ironic-python-agent [#254](https://github.com/openshift/ironic-agent-image/pull/254)
* NO-ISSUE: Remove openstack repo workaround [#249](https://github.com/openshift/ironic-agent-image/pull/249)
* NO-ISSUE: Update requirements.cachito with latest ironic-python-agent [#253](https://github.com/openshift/ironic-agent-image/pull/253)
* NO-ISSUE: Update requirements.cachito with latest ironic-python-agent [#248](https://github.com/openshift/ironic-agent-image/pull/248)
* [METAL-1779](https://issues.redhat.com/browse/METAL-1779): Add podman package for bootc deploy [#247](https://github.com/openshift/ironic-agent-image/pull/247)
* NO-ISSUE: Fix update requirements workflow [#252](https://github.com/openshift/ironic-agent-image/pull/252)
* NO-ISSUE: Document how to use gerrit change hash for testing [#250](https://github.com/openshift/ironic-agent-image/pull/250)
* NO-ISSUE: Update requirements.cachito with latest ironic-python-agent [#246](https://github.com/openshift/ironic-agent-image/pull/246)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/0336e6383c98f4f0c6b35c71e00116d3c3160c43...1e607137ca2e6f51a6f91c3402b0cd56f5d9bbe2)
### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/d7772c62914781cd312b5e6db24532d694a8a140)
* [OCPBUGS-85416](https://issues.redhat.com/browse/OCPBUGS-85416): Enable actuators to set terminal failure on Exists and Update [#1499](https://github.com/openshift/machine-api-operator/pull/1499)
* [SPLAT-2745](https://issues.redhat.com/browse/SPLAT-2745): Changed vSphere cloud config to be read from openshift-config-managed [#1495](https://github.com/openshift/machine-api-operator/pull/1495)
* [OCPBUGS-82584](https://issues.redhat.com/browse/OCPBUGS-82584): Populate status label selector for scale subresource. [#1490](https://github.com/openshift/machine-api-operator/pull/1490)
* NO-JIRA: machine-api-termination-handler: add scc annotation, terminationMessage: FallbackToLogsOnError [#1494](https://github.com/openshift/machine-api-operator/pull/1494)
* NO-JIRA: bump controller-runtime-common to latest main [#1493](https://github.com/openshift/machine-api-operator/pull/1493)
* NO-JIRA: fix: importing nutanix test to in the binary [#1491](https://github.com/openshift/machine-api-operator/pull/1491)
* NO-JIRA: Update OWNERS [#1486](https://github.com/openshift/machine-api-operator/pull/1486)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/33cb2da02d57004711bd09dd8f288ed6174f48fc...d7772c62914781cd312b5e6db24532d694a8a140)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/61fdd56c3fa546cee22d4420f330e68956f61fd8)
* [OCPBUGS-79502](https://issues.redhat.com/browse/OCPBUGS-79502): Enable AutoSizingReserved for Hypershift workers [#5847](https://github.com/openshift/machine-config-operator/pull/5847)
* NO-JIRA: daemon: expand os image presence check [#6005](https://github.com/openshift/machine-config-operator/pull/6005)
* [MCO-2212](https://issues.redhat.com/browse/MCO-2212): MCO-2213: Migrate mco_observability and mco_daemon test-suite [#5875](https://github.com/openshift/machine-config-operator/pull/5875)
* [OCPBUGS-63650](https://issues.redhat.com/browse/OCPBUGS-63650): configure-ovs: copy lldp mode to br-ex port [#5698](https://github.com/openshift/machine-config-operator/pull/5698)
* [OCPBUGS-85498](https://issues.redhat.com/browse/OCPBUGS-85498): BareMetal skew e2e fails patching provisioning CR after CBO webhook fix [#6031](https://github.com/openshift/machine-config-operator/pull/6031)
* [OCPBUGS-85497](https://issues.redhat.com/browse/OCPBUGS-85497): only check password hash in /etc/shadow [#6030](https://github.com/openshift/machine-config-operator/pull/6030)
* NO-JIRA: Add fix for ossImagestream status [#6018](https://github.com/openshift/machine-config-operator/pull/6018)
* [MCO-2025](https://issues.redhat.com/browse/MCO-2025): OCP-88366 and add OCP-88814 for osImageStream with osImageURL [#6014](https://github.com/openshift/machine-config-operator/pull/6014)
* [OCPBUGS-83830](https://issues.redhat.com/browse/OCPBUGS-83830): Apply password only if changes exist [#5889](https://github.com/openshift/machine-config-operator/pull/5889)
* [AGENT-1514](https://issues.redhat.com/browse/AGENT-1514): Add ML-KEM verification test for IRI registry [#6003](https://github.com/openshift/machine-config-operator/pull/6003)
* [OCPBUGS-84516](https://issues.redhat.com/browse/OCPBUGS-84516): Add `terminationMessagePolicy` to build pod containers [#5993](https://github.com/openshift/machine-config-operator/pull/5993)
* [OCPBUGS-85117](https://issues.redhat.com/browse/OCPBUGS-85117): Fix 2 flakes happening in the ocl test suite [#6004](https://github.com/openshift/machine-config-operator/pull/6004)
* [OCPBUGS-84842](https://issues.redhat.com/browse/OCPBUGS-84842): Bootloader update attempt should be conditional [#5907](https://github.com/openshift/machine-config-operator/pull/5907)
* [OCPBUGS-75894](https://issues.redhat.com/browse/OCPBUGS-75894): use `--delete-if-present` for karg removal [#5914](https://github.com/openshift/machine-config-operator/pull/5914)
* [OCPBUGS-84661](https://issues.redhat.com/browse/OCPBUGS-84661): Fix wrong early exit during kubelet MCs regeneration [#5898](https://github.com/openshift/machine-config-operator/pull/5898)
* [AGENT-1443](https://issues.redhat.com/browse/AGENT-1443): IRI Add certificate regeneration to MCS cert rotation controller [#5721](https://github.com/openshift/machine-config-operator/pull/5721)
* [OCPBUGS-84691](https://issues.redhat.com/browse/OCPBUGS-84691): prom rules: add alert for nodes using runc [#5874](https://github.com/openshift/machine-config-operator/pull/5874)
* [MCO-1908](https://issues.redhat.com/browse/MCO-1908), [MCO-2213](https://issues.redhat.com/browse/MCO-2213): Migrate MCD related MCO test-cases [#5843](https://github.com/openshift/machine-config-operator/pull/5843)
* [OCPBUGS-84867](https://issues.redhat.com/browse/OCPBUGS-84867): Fix OCL test to handle temporarily empty current-machine-os-build annotation [#5913](https://github.com/openshift/machine-config-operator/pull/5913)
* [OCPBUGS-84832](https://issues.redhat.com/browse/OCPBUGS-84832): daemon: don't pull/extract extensions for all OS updates [#5905](https://github.com/openshift/machine-config-operator/pull/5905)
* [OCPBUGS-84852](https://issues.redhat.com/browse/OCPBUGS-84852): Update AMI Whitelist [#5910](https://github.com/openshift/machine-config-operator/pull/5910)
* [OCPBUGS-84150](https://issues.redhat.com/browse/OCPBUGS-84150): MachineOSConfig "build was not found" error [#5878](https://github.com/openshift/machine-config-operator/pull/5878)
* [OCPBUGS-84699](https://issues.redhat.com/browse/OCPBUGS-84699): Custom pool booting must handle matchExpressions in nodeSelector [#5899](https://github.com/openshift/machine-config-operator/pull/5899)
* [OCPBUGS-84565](https://issues.redhat.com/browse/OCPBUGS-84565): Fix CVE-2026-34986 [#5890](https://github.com/openshift/machine-config-operator/pull/5890)
* [OCPBUGS-83871](https://issues.redhat.com/browse/OCPBUGS-83871): Support bootloader update [#5868](https://github.com/openshift/machine-config-operator/pull/5868)
* [OCPBUGS-84332](https://issues.redhat.com/browse/OCPBUGS-84332): Fix ssh and password rollbacks [#5884](https://github.com/openshift/machine-config-operator/pull/5884)
* [MCO-2222](https://issues.redhat.com/browse/MCO-2222): /automate-test skill for generating e2e tests from specifications [#5864](https://github.com/openshift/machine-config-operator/pull/5864)
* [OCPBUGS-84652](https://issues.redhat.com/browse/OCPBUGS-84652): Include RootCA in the temporal CC [#5896](https://github.com/openshift/machine-config-operator/pull/5896)
* [OCPBUGS-83492](https://issues.redhat.com/browse/OCPBUGS-83492): Auto-append :ref suffix to additionalLayerStores in storage.conf [#5888](https://github.com/openshift/machine-config-operator/pull/5888)
* [OCPBUGS-83826](https://issues.redhat.com/browse/OCPBUGS-83826): deploy-from-self when skopeo < 1.22.2 [#5867](https://github.com/openshift/machine-config-operator/pull/5867)
* [OCPBUGS-84490](https://issues.redhat.com/browse/OCPBUGS-84490): Bump image build timeout for status reporting test [#5886](https://github.com/openshift/machine-config-operator/pull/5886)
* [MCO-2201](https://issues.redhat.com/browse/MCO-2201): Improve /migrate-tests skill: default labels and ordering verification [#5879](https://github.com/openshift/machine-config-operator/pull/5879)
* [OCPBUGS-83859](https://issues.redhat.com/browse/OCPBUGS-83859): Fix encapsulated IGN version [#5872](https://github.com/openshift/machine-config-operator/pull/5872)
* [MCO-1494](https://issues.redhat.com/browse/MCO-1494): Remove monolithic e2e-ocl test suite [#5880](https://github.com/openshift/machine-config-operator/pull/5880)
* [AGENT-1449](https://issues.redhat.com/browse/AGENT-1449): Add IRI registry authentication support to MCO [#5765](https://github.com/openshift/machine-config-operator/pull/5765)
* [OCPBUGS-84218](https://issues.redhat.com/browse/OCPBUGS-84218): Fix units rollback if update failure [#5876](https://github.com/openshift/machine-config-operator/pull/5876)
* [OCPBUGS-79425](https://issues.redhat.com/browse/OCPBUGS-79425): improve JSON unmarshalling for secret decoding [#5813](https://github.com/openshift/machine-config-operator/pull/5813)
* [OCPBUGS-83401](https://issues.redhat.com/browse/OCPBUGS-83401): add RootCA cert to the sysContextBuilder certs [#5861](https://github.com/openshift/machine-config-operator/pull/5861)
* [OCPBUGS-82500](https://issues.redhat.com/browse/OCPBUGS-82500): ClusterHostedDNS on AWS/Azure/GCP: Modify Corefile template to better handle empty record types [#5844](https://github.com/openshift/machine-config-operator/pull/5844)
* [MCO-2201](https://issues.redhat.com/browse/MCO-2201): Add Claude /migrate-tests command for MCO test migration [#5837](https://github.com/openshift/machine-config-operator/pull/5837)
* [MCO-1908](https://issues.redhat.com/browse/MCO-1908): Migrate Kernel related MCO test-cases [#5827](https://github.com/openshift/machine-config-operator/pull/5827)
* [OCPBUGS-83539](https://issues.redhat.com/browse/OCPBUGS-83539): Update AMI Whitelist [#5851](https://github.com/openshift/machine-config-operator/pull/5851)
* [OCPBUGS-78524](https://issues.redhat.com/browse/OCPBUGS-78524): Allow enablement of systemd units with existing files [#5846](https://github.com/openshift/machine-config-operator/pull/5846)
* [OCPBUGS-82974](https://issues.redhat.com/browse/OCPBUGS-82974): Make IRI registry read-only via environment variable [#5845](https://github.com/openshift/machine-config-operator/pull/5845)
* [OCPBUGS-81572](https://issues.redhat.com/browse/OCPBUGS-81572): order corosync after OVS configuration on TNF clusters [#5834](https://github.com/openshift/machine-config-operator/pull/5834)
* [OCPBUGS-83517](https://issues.redhat.com/browse/OCPBUGS-83517): Revert ovs increase CPU priority for Open vSwitch Forwarding Unit [#5849](https://github.com/openshift/machine-config-operator/pull/5849)
* [OCPBUGS-63152](https://issues.redhat.com/browse/OCPBUGS-63152): Fail wait-for-node-ip if primary IP(s) disappear [#5350](https://github.com/openshift/machine-config-operator/pull/5350)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/487334b7ed9bdd7c55e9eeb3a90027e5e1f927a2...61fdd56c3fa546cee22d4420f330e68956f61fd8)
### [machine-os-images](https://github.com/openshift/machine-os-images/tree/ef8f5dd772cf24201b6e308eee0fa3e7b1860c32)
* [OCPBUGS-85476](https://issues.redhat.com/browse/OCPBUGS-85476): Force rebuild for OCP 5.0 [#87](https://github.com/openshift/machine-os-images/pull/87)
* [METAL-1786](https://issues.redhat.com/browse/METAL-1786): Include RHEL10 in image [#82](https://github.com/openshift/machine-os-images/pull/82)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/df9a652cb1572172e404655bb021525be2e3d8ab...ef8f5dd772cf24201b6e308eee0fa3e7b1860c32)
### [metallb-frr](https://github.com/openshift/frr/tree/3aee1774c5a84410362b5f79039a7ca2b0281ab4)
* Bump to frr 10 [#127](https://github.com/openshift/frr/pull/127)
* [OCPBUGS-82973](https://issues.redhat.com/browse/OCPBUGS-82973): Sync 25-3-2026 [#128](https://github.com/openshift/frr/pull/128)
* [Full changelog](https://github.com/openshift/frr/compare/5ccdd521dd93522575c172dac86d0b6f301fb3ef...3aee1774c5a84410362b5f79039a7ca2b0281ab4)
### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/095e06580abfc4487ef9f2969fd1d7693c7e6b40)
* [OU-1269](https://issues.redhat.com/browse/OU-1269): Update monitoring-console-plugin for 4.22 [#923](https://github.com/openshift/monitoring-plugin/pull/923)
* [OU-1281](https://issues.redhat.com/browse/OU-1281): show disabled project bar while loading [#936](https://github.com/openshift/monitoring-plugin/pull/936)
* [OU-1351](https://issues.redhat.com/browse/OU-1351): prevent namespace and project desync [#933](https://github.com/openshift/monitoring-plugin/pull/933)
* [OU-1315](https://issues.redhat.com/browse/OU-1315): reset queries when namespace changes in dev perspective [#932](https://github.com/openshift/monitoring-plugin/pull/932)
* [OU-1348](https://issues.redhat.com/browse/OU-1348): fix: panel actions index so they are visible on click [#928](https://github.com/openshift/monitoring-plugin/pull/928)
* [OU-1347](https://issues.redhat.com/browse/OU-1347): fix: avoid throwing error to fallback to global datasource [#920](https://github.com/openshift/monitoring-plugin/pull/920)
* [OU-1203](https://issues.redhat.com/browse/OU-1203): upgrade perses dependencies [#914](https://github.com/openshift/monitoring-plugin/pull/914)
* NO-JIRA: Revert "NO-JIRA: Bump to 4.22.0-prerelease.3 SDK" [#915](https://github.com/openshift/monitoring-plugin/pull/915)
* NO-JIRA: Bump to 4.22.0-prerelease.3 SDK [#903](https://github.com/openshift/monitoring-plugin/pull/903)
* [OU-1323](https://issues.redhat.com/browse/OU-1323): Refactor dashboards state to prevent desync [#912](https://github.com/openshift/monitoring-plugin/pull/912)
* [OU-1341](https://issues.redhat.com/browse/OU-1341): pass label values to the filter [#913](https://github.com/openshift/monitoring-plugin/pull/913)
* [OU-1091](https://issues.redhat.com/browse/OU-1091): swap monitoring-plugin to use DataView [#911](https://github.com/openshift/monitoring-plugin/pull/911)
* NO-JIRA: update perses and fix vulnerable dependencies [#900](https://github.com/openshift/monitoring-plugin/pull/900)
* [TRACING-6030](https://issues.redhat.com/browse/TRACING-6030): add RouterProvider to support links in Panels [#891](https://github.com/openshift/monitoring-plugin/pull/891)
* [OU-1217](https://issues.redhat.com/browse/OU-1217): perses customizable dashboards with perses global datasources for tempo and loki [#877](https://github.com/openshift/monitoring-plugin/pull/877)
* [OU-1307](https://issues.redhat.com/browse/OU-1307): don't fight console to setActiveNamespace [#880](https://github.com/openshift/monitoring-plugin/pull/880)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/c43889fdf60b85fe43dc45417be3f644586e7cc4...095e06580abfc4487ef9f2969fd1d7693c7e6b40)
### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/12d99f3f29fe38f900d0c6400889e3d58c588f45)
* [OCPBUGS-85053](https://issues.redhat.com/browse/OCPBUGS-85053): Bump Go version to 1.25.0 for ML-KEM/PQC support [#115](https://github.com/openshift/multus-admission-controller/pull/115)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/16ba7ef8026f5b6d0d08b19c707648d82b1ac592...12d99f3f29fe38f900d0c6400889e3d58c588f45)
### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/43b16450b76093cd33da339fd9b9c246a619d340)
* [CNF-21001](https://issues.redhat.com/browse/CNF-21001): Remove iptables compatibility commits [#108](https://github.com/openshift/multus-networkpolicy/pull/108)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/834a093f693e521b8dc4ec7168d03cfba2c1cba1...43b16450b76093cd33da339fd9b9c246a619d340)
### [must-gather](https://github.com/openshift/must-gather/tree/56f0500399d17002c0d00d5d785b153cb876a8af)
* no-jira: chore: address the linting issues in the scripts [#525](https://github.com/openshift/must-gather/pull/525)
* [MG-246](https://issues.redhat.com/browse/MG-246): remove redundant oc inspect command and unused resources [#537](https://github.com/openshift/must-gather/pull/537)
* [Full changelog](https://github.com/openshift/must-gather/compare/8554213fa214e8e165e7bedaf8d892bb824d83ef...56f0500399d17002c0d00d5d785b153cb876a8af)
### [network-tools](https://github.com/openshift/network-tools/tree/4ce8439203bef4c64c11151f57818e8df370c103)
* NO-JIRA: Add mattedallo, marty-power, taanyas as reviewers [#172](https://github.com/openshift/network-tools/pull/172)
* NO-JIRA: Refresh list of team members [#176](https://github.com/openshift/network-tools/pull/176)
* NO-JIRA: Updates to handle changes after migrating to Atlasian cloud [#174](https://github.com/openshift/network-tools/pull/174)
* [Full changelog](https://github.com/openshift/network-tools/compare/5c4b905c09ccd6edadb2ff359f45b70ed334f948...4ce8439203bef4c64c11151f57818e8df370c103)
### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/068135467727be49b9fc1e8be569e0017bcb131c)
* [CONSOLE-5218](https://issues.redhat.com/browse/CONSOLE-5218): Add project documentation and rewrite README [#417](https://github.com/openshift/networking-console-plugin/pull/417)
* [CNV-74110](https://issues.redhat.com/browse/CNV-74110): new translations [#404](https://github.com/openshift/networking-console-plugin/pull/404)
* Update dependencies for upcoming Console 4.22 release [#371](https://github.com/openshift/networking-console-plugin/pull/371)
* [OCPBUGS-83638](https://issues.redhat.com/browse/OCPBUGS-83638): CVE dependency remediation [#379](https://github.com/openshift/networking-console-plugin/pull/379)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/165ab9dd356d4e351fa26fa846463fb9269d79ff...068135467727be49b9fc1e8be569e0017bcb131c)
### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/61ec60465b92969966bc4b19637cdda75fb3105a)
* NO-JIRA: Update OWNERS [#61](https://github.com/openshift/cloud-provider-nutanix/pull/61)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/8e75679a965b80fee0332f8758471a7d3a75a4e8...61ec60465b92969966bc4b19637cdda75fb3105a)
### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/246b53bfc7bb59f3cf1e708c7858f12934a5ddbd)
* NO-JIRA: Update OWNERS [#136](https://github.com/openshift/machine-api-provider-nutanix/pull/136)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/60559fdd7092dd29aa1c72797c49279aa2da39ee...246b53bfc7bb59f3cf1e708c7858f12934a5ddbd)
### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/28a74a705787bb1e1ba6445397a8805ae878f326)
* [CNTRLPLANE-2516](https://issues.redhat.com/browse/CNTRLPLANE-2516): feat: externaloidc: add support for externally sourcing claims [#195](https://github.com/openshift/oauth-apiserver/pull/195)
* [CNTRLPLANE-2516](https://issues.redhat.com/browse/CNTRLPLANE-2516): Add local configuration API for external oidc mode [#194](https://github.com/openshift/oauth-apiserver/pull/194)
* NO-JIRA: Add control-plane-approvers to OWNERS [#192](https://github.com/openshift/oauth-apiserver/pull/192)
* [CNTRLPLANE-3226](https://issues.redhat.com/browse/CNTRLPLANE-3226): chore: sync with openshift repositories [#189](https://github.com/openshift/oauth-apiserver/pull/189)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/4c002a9114937ea9c20213f00892761c2013e60b...28a74a705787bb1e1ba6445397a8805ae878f326)
### [oauth-server](https://github.com/openshift/oauth-server/tree/3aa95c0715e812e17378bd78b223287ea6fb41f0)
* [CNTRLPLANE-3226](https://issues.redhat.com/browse/CNTRLPLANE-3226): chore: sync with openshift repositories [#221](https://github.com/openshift/oauth-server/pull/221)
* [Full changelog](https://github.com/openshift/oauth-server/compare/6c6e96279eb140ef7b4e2028ac874d79fd5bdbc9...3aa95c0715e812e17378bd78b223287ea6fb41f0)
### [oc-mirror](https://github.com/openshift/oc-mirror/tree/2412d1aa75f5115ca2c013502209a8a427998b29)
* [CLID-623](https://issues.redhat.com/browse/CLID-623): Encapsulate unit test data into tests/unit [#1407](https://github.com/openshift/oc-mirror/pull/1407)
* [CLID-479](https://issues.redhat.com/browse/CLID-479): OTE migration [#1375](https://github.com/openshift/oc-mirror/pull/1375)
* NO-JIRA: Update README.md for Enclave Support link [#1404](https://github.com/openshift/oc-mirror/pull/1404)
* [CLID-612](https://issues.redhat.com/browse/CLID-612): Move integration tests within oc-mirror [#1400](https://github.com/openshift/oc-mirror/pull/1400)
* [CLID-592](https://issues.redhat.com/browse/CLID-592): pkg/cli: add unit tests for environment setup [#1391](https://github.com/openshift/oc-mirror/pull/1391)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/ca5eebdcecf9650248f15fe6009b22788ba0c434...2412d1aa75f5115ca2c013502209a8a427998b29)
### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/1675d191d56bb4bca0f7b1112aa4199df1c3c67e)
* [OCPBUGS-85508](https://issues.redhat.com/browse/OCPBUGS-85508): Synchronize From Upstream Repositories [#725](https://github.com/openshift/operator-framework-operator-controller/pull/725)
* NO-ISSUE: Synchronize From Upstream Repositories [#724](https://github.com/openshift/operator-framework-operator-controller/pull/724)
* NO-ISSUE: Synchronize From Upstream Repositories [#722](https://github.com/openshift/operator-framework-operator-controller/pull/722)
* [OCPBUGS-62517](https://issues.redhat.com/browse/OCPBUGS-62517): Set replicas=1, PDB, and pod anti-affinity for HA topology [#709](https://github.com/openshift/operator-framework-operator-controller/pull/709)
* [OCPBUGS-84943](https://issues.redhat.com/browse/OCPBUGS-84943): fix(test): drop blocking namespace-deletion wait between both-watch-modes scenarios [#712](https://github.com/openshift/operator-framework-operator-controller/pull/712)
* [OCPBUGS-62517](https://issues.redhat.com/browse/OCPBUGS-62517): Synchronize from Upstream Repositories [#710](https://github.com/openshift/operator-framework-operator-controller/pull/710)
* NO-ISSUE: UPSTREAM: <carry>: remove dead e2e registry push job and related variables [#711](https://github.com/openshift/operator-framework-operator-controller/pull/711)
* [OPRUN-4587](https://issues.redhat.com/browse/OPRUN-4587): Make OTE local output easier to read [#704](https://github.com/openshift/operator-framework-operator-controller/pull/704)
* NO-ISSUE: Synchronize From Upstream Repositories [#707](https://github.com/openshift/operator-framework-operator-controller/pull/707)
* NO-ISSUE: Synchronize From Upstream Repositories [#706](https://github.com/openshift/operator-framework-operator-controller/pull/706)
* NO-ISSUE: Synchronize From Upstream Repositories [#701](https://github.com/openshift/operator-framework-operator-controller/pull/701)
* [OPRUN-4574](https://issues.redhat.com/browse/OPRUN-4574): UPSTREAM: <carry>: Disable upstream TLSProfile tests [#702](https://github.com/openshift/operator-framework-operator-controller/pull/702)
* [OPRUN-4577](https://issues.redhat.com/browse/OPRUN-4577): OTE: Simplify by remove option to configure tests to run outside of OCP [#703](https://github.com/openshift/operator-framework-operator-controller/pull/703)
* [OPRUN-4572](https://issues.redhat.com/browse/OPRUN-4572): Expand OTE docs with more comprehensive details [#697](https://github.com/openshift/operator-framework-operator-controller/pull/697)
* [OCPBUGS-77972](https://issues.redhat.com/browse/OCPBUGS-77972), [OCPBUGS-81452](https://issues.redhat.com/browse/OCPBUGS-81452): Synchronize From Upstream Repositories [#696](https://github.com/openshift/operator-framework-operator-controller/pull/696)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/a3e5b4ff3745e6e6f0371fc14c124089a7289e7c...1675d191d56bb4bca0f7b1112aa4199df1c3c67e)
### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/999dd5aefb3efef7ff26105b3208f7fc04ff5b06)
* [OCPBUGS-38120](https://issues.redhat.com/browse/OCPBUGS-38120): Ensure Project delete requests are passed through admission [#632](https://github.com/openshift/openshift-apiserver/pull/632)
* NO-JIRA: Add control-plane-approvers to OWNERS [#630](https://github.com/openshift/openshift-apiserver/pull/630)
* [OCPBUGS-74511](https://issues.redhat.com/browse/OCPBUGS-74511): remove RouteExternalCertificate feature gate [#604](https://github.com/openshift/openshift-apiserver/pull/604)
* [CNTRLPLANE-3226](https://issues.redhat.com/browse/CNTRLPLANE-3226): Sync with openshift apiserver 4.22 kubernetes 1.34.1 [#629](https://github.com/openshift/openshift-apiserver/pull/629)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/fbea5220c4fe13c20107d6c4631f4e53007ca761...999dd5aefb3efef7ff26105b3208f7fc04ff5b06)
### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/731d7429a788e0d70e3556e40f82c1ba9d55abe7)
* NO-JIRA: Add control-plane-approvers to OWNERS [#438](https://github.com/openshift/openshift-controller-manager/pull/438)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/26d20feae8892f648f5b06ed3f5492fe6ffb4532...731d7429a788e0d70e3556e40f82c1ba9d55abe7)
### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/4bc7bc64a57f67992ad074c55d4e8e57fe5ec2ea)
* NO-JIRA: manifests-gen: scope provider webhooks to capi namespace [#416](https://github.com/openshift/cluster-api-provider-openstack/pull/416)
* [OCPCLOUD-3359](https://issues.redhat.com/browse/OCPCLOUD-3359): Add TLS substitutions [#408](https://github.com/openshift/cluster-api-provider-openstack/pull/408)
* UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.14 into main [#390](https://github.com/openshift/cluster-api-provider-openstack/pull/390)
* NO-JIRA: Update manifests generator [#411](https://github.com/openshift/cluster-api-provider-openstack/pull/411)
* [OCPBUGS-77542](https://issues.redhat.com/browse/OCPBUGS-77542): Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.22 [#399](https://github.com/openshift/cluster-api-provider-openstack/pull/399)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/74cb5b085a21fdec9f0f8c5c1dfa3933075fb1dc...4bc7bc64a57f67992ad074c55d4e8e57fe5ec2ea)
### [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller/tree/e49b431fe3ab045c9a37f3f0f9ecb625ab699dd2)
* UPSTREAM-SYNC:Merge https://github.com/k-orc/openstack-resource-controller:release-1.0 into main [#20](https://github.com/openshift/openstack-resource-controller/pull/20)
* [Full changelog](https://github.com/openshift/openstack-resource-controller/compare/cbea7a9cab145c32e2f347be69996b649893cc22...e49b431fe3ab045c9a37f3f0f9ecb625ab699dd2)
### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/754d45a5855c46aad0842bedbca0780bb5184f68)
* NO-ISSUE: Synchronize From Upstream Repositories [#1298](https://github.com/openshift/operator-framework-olm/pull/1298)
* [OPRUN-4601](https://issues.redhat.com/browse/OPRUN-4601): use resource-based RBAC for lifecycle-server auth [#1290](https://github.com/openshift/operator-framework-olm/pull/1290)
* [OCPBUGS-84642](https://issues.redhat.com/browse/OCPBUGS-84642): Synchronize From Upstream Repositories [#1291](https://github.com/openshift/operator-framework-olm/pull/1291)
* [OPRUN-4597](https://issues.redhat.com/browse/OPRUN-4597): Fix lifecycle-server readiness probe to allow empty index [#1288](https://github.com/openshift/operator-framework-olm/pull/1288)
* [OPRUN-4541](https://issues.redhat.com/browse/OPRUN-4541), [OPRUN-4544](https://issues.redhat.com/browse/OPRUN-4544): add lifecycle-server for serving FBC catalog lifecycle metadata [#1284](https://github.com/openshift/operator-framework-olm/pull/1284)
* NO-ISSUE: Synchronize From Upstream Repositories [#1286](https://github.com/openshift/operator-framework-olm/pull/1286)
* NO-ISSUE: Synchronize From Upstream Repositories [#1282](https://github.com/openshift/operator-framework-olm/pull/1282)
* NO-ISSUE: Synchronize From Upstream Repositories [#1279](https://github.com/openshift/operator-framework-olm/pull/1279)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/e627823c743797da91b4ae8a318d2420a511b752...754d45a5855c46aad0842bedbca0780bb5184f68)
### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/4ff8a12f5885e93ffdbd8039f78c7725492f6ffa)
* NO-ISSUE: Bump github.com/fsnotify/fsnotify from 1.9.0 to 1.10.1 [#747](https://github.com/operator-framework/operator-marketplace/pull/747)
* NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.28.3 [#746](https://github.com/operator-framework/operator-marketplace/pull/746)
* NO-ISSUE: Bump the k8s-dependencies group across 1 directory with 3 updates [#741](https://github.com/operator-framework/operator-marketplace/pull/741)
* NO-ISSUE: Bump github.com/operator-framework/operator-lifecycle-manager from 0.41.0 to 0.42.0 [#740](https://github.com/operator-framework/operator-marketplace/pull/740)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/38da2ef78cc429f67aea7fb4e589df21ac1ed327...4ff8a12f5885e93ffdbd8039f78c7725492f6ffa)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/a9a7b4e7538cc49df30ee49ec2c4e2c3b98dffab)
* [TRT-2652](https://issues.redhat.com/browse/TRT-2652): Allow OTE info and list tests commands to work without KUBECONFIG [#3170](https://github.com/openshift/ovn-kubernetes/pull/3170)
* NO-JIRA: DownStream Merge [04-30-2026] [#3169](https://github.com/openshift/ovn-kubernetes/pull/3169)
* NO-JIRA: DownStream Merge [04-27-2026] [#3159](https://github.com/openshift/ovn-kubernetes/pull/3159)
* NO-JIRA: OTE: run EVPN external traffic tests which use random subnet for VTEP [#3148](https://github.com/openshift/ovn-kubernetes/pull/3148)
* [OCPBUGS-84037](https://issues.redhat.com/browse/OCPBUGS-84037): OTE: tolerate missing OpenShift CRDs on MicroShift [#3150](https://github.com/openshift/ovn-kubernetes/pull/3150)
* [CORENET-6537](https://issues.redhat.com/browse/CORENET-6537): OTE: Add external container support to infra provider [#2975](https://github.com/openshift/ovn-kubernetes/pull/2975)
* NO-JIRA: openshift tests: demote to informing [#3131](https://github.com/openshift/ovn-kubernetes/pull/3131)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/72db5e8d8ec23d4108183a8c67b45cdfdb8057ba...a9a7b4e7538cc49df30ee49ec2c4e2c3b98dffab)
### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/b5bc8bbd638c08e4df6ff4e382b4170b202733be)
* [MULTIARCH-6066](https://issues.redhat.com/browse/MULTIARCH-6066): Rebase branch with upstream [#126](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/126)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/02959a8d7096501e240d1d9f65da90b87bac45b9...b5bc8bbd638c08e4df6ff4e382b4170b202733be)
### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/855eaaae59c78a00638d8426b4b1763e881d9e6f)
* [OCPBUGS-83391](https://issues.redhat.com/browse/OCPBUGS-83391): Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.35 (e48649f) into main [#83](https://github.com/openshift/cloud-provider-powervs/pull/83)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/766c0952fd19f8225fe59b2be8e8c8932b24ebd7...855eaaae59c78a00638d8426b4b1763e881d9e6f)
### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/ce91b7a51d1aee390a70e3c418e0f5539ad117c5)
* NO-ISSUE: [bot] Bump openshift/prom-label-proxy to v0.13.0 [#394](https://github.com/openshift/prom-label-proxy/pull/394)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/c4c99a3071808f466ee6c3d7b7fa87108b457feb...ce91b7a51d1aee390a70e3c418e0f5539ad117c5)
### [prometheus](https://github.com/openshift/prometheus/tree/d9a07e053e734f6da2520be60bcd043693c47c54)
* NO-JIRA: Upgrade Prometheus to 3.11.2 [#305](https://github.com/openshift/prometheus/pull/305)
* [Full changelog](https://github.com/openshift/prometheus/compare/e1e355916c789607fe98c8832920e2218de4bad5...d9a07e053e734f6da2520be60bcd043693c47c54)
### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/4b911714a57e8a6959b95efaff939af29a2b249c)
* NO-ISSUE: remove ui/app/dist/.build_stamp [#133](https://github.com/openshift/prometheus-alertmanager/pull/133)
* NO-ISSUE: [bot] Bump openshift/prometheus-alertmanager to v0.32.1 [#132](https://github.com/openshift/prometheus-alertmanager/pull/132)
* NO-ISSUE: Bump openshift/prometheus-alertmanager to v0.32.0 [#129](https://github.com/openshift/prometheus-alertmanager/pull/129)
* NO-ISSUE: update OWNERS [#130](https://github.com/openshift/prometheus-alertmanager/pull/130)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/02dc3e9e55cf7fa0279e22762d6ace19bbc65fde...4b911714a57e8a6959b95efaff939af29a2b249c)
### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/7546381db866dd10a33395d2c28ceeca3c1c1591)
* NO-ISSUE: [bot] Bump openshift/prometheus-operator to v0.91.0 [#380](https://github.com/openshift/prometheus-operator/pull/380)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/70e38466b9b9143f48283dab8bd0c227f35efe69...7546381db866dd10a33395d2c28ceeca3c1c1591)
### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/b1b5423ff3cea86d7f7be9e5f739aaf61df75cdc)
* NO-JIRA: [bot] Bump openshift/node_exporter to v1.11.1 [#177](https://github.com/openshift/node_exporter/pull/177)
* [Full changelog](https://github.com/openshift/node_exporter/compare/6c4fc0126407c8404b8604faa2f1230f385b9f44...b1b5423ff3cea86d7f7be9e5f739aaf61df75cdc)
### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/e7ccfa308e69ce4ad1f2afcd1d7c8ff25144374b)
* [CNTRLPLANE-2894](https://issues.redhat.com/browse/CNTRLPLANE-2894): e2e network policy test cases [#338](https://github.com/openshift/service-ca-operator/pull/338)
* NO-JIRA: Add control-plane-approvers to OWNERS [#345](https://github.com/openshift/service-ca-operator/pull/345)
* NO-JIRA: controller/servingcerts: Align log verbosity [#323](https://github.com/openshift/service-ca-operator/pull/323)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/7b3033bba87d7b40684b66f8f44a3525433d1ac7...e7ccfa308e69ce4ad1f2afcd1d7c8ff25144374b)
### [telemeter](https://github.com/openshift/telemeter/tree/33073dc20ca6c534c134f6a0f58e6bf8e162d4ac)
* [OCPBUGS-85082](https://issues.redhat.com/browse/OCPBUGS-85082): update google.golang.org/grpc [#601](https://github.com/openshift/telemeter/pull/601)
* NO-ISSUE: add .coderabbit.yaml [#603](https://github.com/openshift/telemeter/pull/603)
* NO-ISSUE: bump golangci-lint to v2.11.3 [#602](https://github.com/openshift/telemeter/pull/602)
* NO-ISSUE: update OWNERS [#604](https://github.com/openshift/telemeter/pull/604)
* [OCPBUGS-84383](https://issues.redhat.com/browse/OCPBUGS-84383): fix(deps): bump go-jose/v3 to v3.0.5 for JWE unwrap DoS [#588](https://github.com/openshift/telemeter/pull/588)
* [Full changelog](https://github.com/openshift/telemeter/compare/131e6761cbd50054e2588bee58ebf1997f3cc039...33073dc20ca6c534c134f6a0f58e6bf8e162d4ac)
### [tests](https://github.com/openshift/origin/tree/38c4fba02e693db87295168e77400fab917555a3)
* [OCPBUGS-85370](https://issues.redhat.com/browse/OCPBUGS-85370): Raise OpenStack operator watch limits [#31154](https://github.com/openshift/origin/pull/31154)
* [OCPBUGS-85363](https://issues.redhat.com/browse/OCPBUGS-85363): Fixed flakiness of oc set image E2E tests [#31152](https://github.com/openshift/origin/pull/31152)
* [OCPBUGS-85058](https://issues.redhat.com/browse/OCPBUGS-85058): monitortests: allow etcd CO blips during TNF jobs on two-node upgrades [#31138](https://github.com/openshift/origin/pull/31138)
* [OCPBUGS-85486](https://issues.redhat.com/browse/OCPBUGS-85486): stage the creation of test pods to minimize etcd impact [#31164](https://github.com/openshift/origin/pull/31164)
* [OCPNODE-4505](https://issues.redhat.com/browse/OCPNODE-4505): Automation creation of OCP-57401 [#31142](https://github.com/openshift/origin/pull/31142)
* [OCPBUGS-83623](https://issues.redhat.com/browse/OCPBUGS-83623): fix: add distruption tolerance for DualReplica (two-node) topology [#31127](https://github.com/openshift/origin/pull/31127)
* [OCPBUGS-85531](https://issues.redhat.com/browse/OCPBUGS-85531): Fixed flakiness in OCP E2E tests - oc debug image stream [#31168](https://github.com/openshift/origin/pull/31168)
* Revert "OPRUN-4569: test: remove OTE exceptions for OLM" [#31171](https://github.com/openshift/origin/pull/31171)
* [OCPNODE-4108](https://issues.redhat.com/browse/OCPNODE-4108): add E2E tests for upstream dra-example-driver [#31064](https://github.com/openshift/origin/pull/31064)
* [OPRUN-4569](https://issues.redhat.com/browse/OPRUN-4569): test: remove OTE exceptions for OLM [#31150](https://github.com/openshift/origin/pull/31150)
* [OCPEDGE-2386](https://issues.redhat.com/browse/OCPEDGE-2386): Add tnf_etcd_disruption test with 5 new etcd resilience tests. [#30880](https://github.com/openshift/origin/pull/30880)
* NO-JIRA: Improve graceful shutdown LB test output with more details of late requests [#31158](https://github.com/openshift/origin/pull/31158)
* [OCPNODE-4047](https://issues.redhat.com/browse/OCPNODE-4047): Implement kubelet TLS 1.3 via KubeletConfig on workers [#31016](https://github.com/openshift/origin/pull/31016)
* NO-ISSUE: Automated - Update synthetic test data [#31146](https://github.com/openshift/origin/pull/31146)
* [CNTRLPLANE-3374](https://issues.redhat.com/browse/CNTRLPLANE-3374): remove multus exception from monitor test [#31130](https://github.com/openshift/origin/pull/31130)
* [CNTRLPLANE-3428](https://issues.redhat.com/browse/CNTRLPLANE-3428): tls: extract annotation and ConfigMap update helpers [#31156](https://github.com/openshift/origin/pull/31156)
* [OCPBUGS-83580](https://issues.redhat.com/browse/OCPBUGS-83580): Skip dev fuse test on runc runtime [#31140](https://github.com/openshift/origin/pull/31140)
* [OCPBUGS-84516](https://issues.redhat.com/browse/OCPBUGS-84516): remove openshift-machine-config-operator exemption from terminationMessagePolicy monitor [#31120](https://github.com/openshift/origin/pull/31120)
* [CNTRLPLANE-3387](https://issues.redhat.com/browse/CNTRLPLANE-3387): Update list of pending namespaces in the required-scc monitor test [#31135](https://github.com/openshift/origin/pull/31135)
* NO-ISSUE: improve error reporting in cpumetriccollector [#31132](https://github.com/openshift/origin/pull/31132)
* no-jira: tls: deduplicate ConfigMap helpers into standalone functions [#31136](https://github.com/openshift/origin/pull/31136)
* [OCPBUGS-84500](https://issues.redhat.com/browse/OCPBUGS-84500): Verify dynamic revision bump for etcd during kernel crash [#30915](https://github.com/openshift/origin/pull/30915)
* [OCPNODE-3983](https://issues.redhat.com/browse/OCPNODE-3983): Add e2e tests for KubeletEnsureSecretPulledImages feature gate [#31102](https://github.com/openshift/origin/pull/31102)
* [OCPNODE-4381](https://issues.redhat.com/browse/OCPNODE-4381): Migrate OCP-38271 from openshift-tests-private [#30960](https://github.com/openshift/origin/pull/30960)
* [OCPBUGS-85087](https://issues.redhat.com/browse/OCPBUGS-85087): Allow OVN-Kubernetes CIDROverlap pathological events [#31131](https://github.com/openshift/origin/pull/31131)
* NO-JIRA: Increase pathological event thresholds for API server rollout scenarios [#31122](https://github.com/openshift/origin/pull/31122)
* [CNTRLPLANE-2554](https://issues.redhat.com/browse/CNTRLPLANE-2554): Add ExternalOIDCWithUpstreamParity e2e tests [#31028](https://github.com/openshift/origin/pull/31028)
* : no-jira: tls: extract injectTLSAnnotation constant [#31125](https://github.com/openshift/origin/pull/31125)
* [OCPSTRAT-3036](https://issues.redhat.com/browse/OCPSTRAT-3036): Update etcd test data for k8s 1.36 release [#31113](https://github.com/openshift/origin/pull/31113)
* [OCPNODE-4043](https://issues.redhat.com/browse/OCPNODE-4043): Fix NVIDIA DRA driver helm repo configuration [#31104](https://github.com/openshift/origin/pull/31104)
* [TRT-2644](https://issues.redhat.com/browse/TRT-2644): Run CP tests everywhere [#31094](https://github.com/openshift/origin/pull/31094)
* NO-JIRA: Remove fixed bugs on CO conditions [#31081](https://github.com/openshift/origin/pull/31081)
* [OCPBUGS-84831](https://issues.redhat.com/browse/OCPBUGS-84831): Optimize NetworkPolicy reconciliation test to reduce timeout [#31114](https://github.com/openshift/origin/pull/31114)
* NO-ISSUE: Automated - Update synthetic test data [#31109](https://github.com/openshift/origin/pull/31109)
* [OCPBUGS-84809](https://issues.redhat.com/browse/OCPBUGS-84809): Disable particular CSI tests if CSI driver is removed [#31107](https://github.com/openshift/origin/pull/31107)
* NO-JIRA: check jobname for upgrade [#31106](https://github.com/openshift/origin/pull/31106)
* [OCPBUGS-84520](https://issues.redhat.com/browse/OCPBUGS-84520): remove openshift-catalogd exemption from terminationMessagePolicy monitor [#31100](https://github.com/openshift/origin/pull/31100)
* [OCPNODE-2994](https://issues.redhat.com/browse/OCPNODE-2994): Add ArtifactVolume tests and register artifact image [#31017](https://github.com/openshift/origin/pull/31017)
* NO-ISSUE: add QSEs as approvers [#31087](https://github.com/openshift/origin/pull/31087)
* [SPLAT-2562](https://issues.redhat.com/browse/SPLAT-2562): Added 3CMO OTE binary to extensionBinary list [#31004](https://github.com/openshift/origin/pull/31004)
* [OCPCLOUD-3429](https://issues.redhat.com/browse/OCPCLOUD-3429): Ignore excessive image volume events from CAPI operator [#31093](https://github.com/openshift/origin/pull/31093)
* [TRT-2622](https://issues.redhat.com/browse/TRT-2622): copy OTE attrs to junit properties [#31052](https://github.com/openshift/origin/pull/31052)
* [OCPBUGS-83580](https://issues.redhat.com/browse/OCPBUGS-83580): Skip dev fuse test on runc runtime [#31044](https://github.com/openshift/origin/pull/31044)
* [SREP-4676](https://issues.redhat.com/browse/SREP-4676): add exception for managed cluster namespaces [#31082](https://github.com/openshift/origin/pull/31082)
* [OCPBUGS-84257](https://issues.redhat.com/browse/OCPBUGS-84257): fix openshift/network/third-party suite selecting zero tests [#31084](https://github.com/openshift/origin/pull/31084)
* [TRT-2084](https://issues.redhat.com/browse/TRT-2084): comment bugs filed for terminationMessage exemptions [#31079](https://github.com/openshift/origin/pull/31079)
* [OCPBUGS-84504](https://issues.redhat.com/browse/OCPBUGS-84504): retry transient kubeconfig read failures in GetClientConfig [#31080](https://github.com/openshift/origin/pull/31080)
* [TRT-2565](https://issues.redhat.com/browse/TRT-2565): Add simple benchmark for risk analysis HTTP requests [#30965](https://github.com/openshift/origin/pull/30965)
* NO-JIRA: Fix ListImages JSON parsing when extension binaries emit log lines [#31009](https://github.com/openshift/origin/pull/31009)
* [OCPBUGS-84255](https://issues.redhat.com/browse/OCPBUGS-84255): Fix project name error during wait [#31062](https://github.com/openshift/origin/pull/31062)
* NO-JIRA: Skip network policy cases on microshift and hypershift [#31075](https://github.com/openshift/origin/pull/31075)
* [OCPBUGS-79544](https://issues.redhat.com/browse/OCPBUGS-79544): test: add monitortest to detect pods stuck in Pending state [#31045](https://github.com/openshift/origin/pull/31045)
* [OCPBUGS-79544](https://issues.redhat.com/browse/OCPBUGS-79544): Add [Late] test to collect CRI-O goroutine dumps via SIGUSR1 [#31013](https://github.com/openshift/origin/pull/31013)
* NO-ISSUE: Automated - Update synthetic test data [#31063](https://github.com/openshift/origin/pull/31063)
* [OCPBUGS-82072](https://issues.redhat.com/browse/OCPBUGS-82072), [OCPBUGS-82077](https://issues.redhat.com/browse/OCPBUGS-82077): fix: skip unused tests for two node [#30998](https://github.com/openshift/origin/pull/30998)
* [OCPBUGS-82144](https://issues.redhat.com/browse/OCPBUGS-82144): Remove EnsureMemberRemoved from graceful shutdown test [#30981](https://github.com/openshift/origin/pull/30981)
* [OCPEDGE-2381](https://issues.redhat.com/browse/OCPEDGE-2381): Validate no WAL corruption when both nodes shutdown gracefully [#30925](https://github.com/openshift/origin/pull/30925)
* [SPLAT-2562](https://issues.redhat.com/browse/SPLAT-2562): Added VVCDO OTE binary to extensionBinary list [#31014](https://github.com/openshift/origin/pull/31014)
* NO-JIRA: harden watch loop to prevent thread exhaustion [#30956](https://github.com/openshift/origin/pull/30956)
* [OCPBUGS-84244](https://issues.redhat.com/browse/OCPBUGS-84244): cache kube client instance [#30997](https://github.com/openshift/origin/pull/30997)
* [OCPBUGS-83281](https://issues.redhat.com/browse/OCPBUGS-83281): Fix Gateway cleanup in parallel e2e test workers [#31023](https://github.com/openshift/origin/pull/31023)
* [OCPBUGS-84237](https://issues.redhat.com/browse/OCPBUGS-84237): skip on BM which has insufficient host [#31002](https://github.com/openshift/origin/pull/31002)
* [OCPBUGS-83405](https://issues.redhat.com/browse/OCPBUGS-83405): remove unnecessary exceptions from monitoring test [#30924](https://github.com/openshift/origin/pull/30924)
* NO-ISSUE: baremetal: update OWNERS [#31055](https://github.com/openshift/origin/pull/31055)
* [OTA-1977](https://issues.redhat.com/browse/OTA-1977): Skip test case updateLifecycle if the worker pool is paused [#31040](https://github.com/openshift/origin/pull/31040)
* [OCPBUGS-82160](https://issues.redhat.com/browse/OCPBUGS-82160): Skip image-registry operator tests for Libvirt platform in upgrade jobs. [#31001](https://github.com/openshift/origin/pull/31001)
* [OCPEDGE-2284](https://issues.redhat.com/browse/OCPEDGE-2284): Rename two_node directory to edge_topologies [#30623](https://github.com/openshift/origin/pull/30623)
* [OCPBUGS-83402](https://issues.redhat.com/browse/OCPBUGS-83402): Bump oc request-timeout to deflake tests [#31008](https://github.com/openshift/origin/pull/31008)
* [OCPBUGS-82304](https://issues.redhat.com/browse/OCPBUGS-82304): Add sleep to give cvo time to reconcile [#30988](https://github.com/openshift/origin/pull/30988)
* [OCPBUGS-63307](https://issues.redhat.com/browse/OCPBUGS-63307): Move imagepolicy test to disruptive long-running suite [#31043](https://github.com/openshift/origin/pull/31043)
* NO-JIRA: OVNK BGP: allow max unavailability for NNCPs on VRF-Lite test case [#31037](https://github.com/openshift/origin/pull/31037)
* [OCPBUGS-83801](https://issues.redhat.com/browse/OCPBUGS-83801): skip serial and disruptive cases from suite [#31042](https://github.com/openshift/origin/pull/31042)
* [TRT-2635](https://issues.redhat.com/browse/TRT-2635): coderabbit: enable request changes workflow [#31047](https://github.com/openshift/origin/pull/31047)
* [TRT-2084](https://issues.redhat.com/browse/TRT-2084): terminationmessagepolicy: correctly fail on violations [#30993](https://github.com/openshift/origin/pull/30993)
* [OCPBUGS-84036](https://issues.redhat.com/browse/OCPBUGS-84036): CNTRLPLANE-2751:Adding e2e network policy cases for config-operator [#30995](https://github.com/openshift/origin/pull/30995)
* [OCPEDGE-2510](https://issues.redhat.com/browse/OCPEDGE-2510): fix(two-node): bump node replacement timeouts for new node installer pods [#31005](https://github.com/openshift/origin/pull/31005)
* [OCPBUGS-81476](https://issues.redhat.com/browse/OCPBUGS-81476): Fix timeout in PinnedImages GC test [#30962](https://github.com/openshift/origin/pull/30962)
* [OCPBUGS-63307](https://issues.redhat.com/browse/OCPBUGS-63307): honor firstTimestamp annotation value [#31021](https://github.com/openshift/origin/pull/31021)
* no-jira: test/monitoring: increase load balancer readiness and curl connection timeout [#30994](https://github.com/openshift/origin/pull/30994)
* NO-JIRA: Fix UpgradeTargetPayloadImagePullSpec [#31025](https://github.com/openshift/origin/pull/31025)
* [OCPSTRAT-3082](https://issues.redhat.com/browse/OCPSTRAT-3082): TLS propagation test [#30801](https://github.com/openshift/origin/pull/30801)
* NO-JIRA: OVNK BGP: improve debug and increase NNCP timeout for VRF-Lite test case [#31022](https://github.com/openshift/origin/pull/31022)
* [OCPBUGS-83286](https://issues.redhat.com/browse/OCPBUGS-83286): Fix case-sensitive error matching in Whereabouts IP allocation test [#31012](https://github.com/openshift/origin/pull/31012)
* [OCPBUGS-83267](https://issues.redhat.com/browse/OCPBUGS-83267): Use upgrades.Skippable for Gateway API upgrade test skip logic [#31000](https://github.com/openshift/origin/pull/31000)
* [OCPEDGE-2381](https://issues.redhat.com/browse/OCPEDGE-2381): Add test to verify for backup container exists when etcd crashes [#30922](https://github.com/openshift/origin/pull/30922)
* [STOR-2807](https://issues.redhat.com/browse/STOR-2807): Add e2e test to verify CSI driver operators use service CA signed certificates [#30980](https://github.com/openshift/origin/pull/30980)
* [OCPEDGE-2381](https://issues.redhat.com/browse/OCPEDGE-2381): Verify etc pod should start with oom_score_adj as system-node-critical [#30982](https://github.com/openshift/origin/pull/30982)
* [Full changelog](https://github.com/openshift/origin/compare/dbcc5a0fcb4197d64604db2675ca8c019f429d97...38c4fba02e693db87295168e77400fab917555a3)
### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/fb90e2d792e464d9c5ccf782a8101d1f40cf29c0)
* NO-JIRA: Update OWNERS [#119](https://github.com/openshift/cloud-provider-vsphere/pull/119)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/39008107b1463e3299b0d60c3ac1f7e71ad3e014...fb90e2d792e464d9c5ccf782a8101d1f40cf29c0)
### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/536d5e4df16719b1ce87093cddf93dd5c5f5c485)
* [OCPBUGS-83600](https://issues.redhat.com/browse/OCPBUGS-83600): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.15.3 (e917f8e) into master [#107](https://github.com/openshift/cluster-api-provider-vsphere/pull/107)
* NO-JIRA: manifests-gen: scope provider webhooks to capi namespace [#106](https://github.com/openshift/cluster-api-provider-vsphere/pull/106)
* [OCPCLOUD-3359](https://issues.redhat.com/browse/OCPCLOUD-3359): Add TLS substitutions [#99](https://github.com/openshift/cluster-api-provider-vsphere/pull/99)
* NO-JIRA: Update manifests generator [#100](https://github.com/openshift/cluster-api-provider-vsphere/pull/100)
* NO-JIRA: Update OWNERS [#96](https://github.com/openshift/cluster-api-provider-vsphere/pull/96)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/f12e50512efa829a2df97c897862c3f45c201300...536d5e4df16719b1ce87093cddf93dd5c5f5c485)
### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/e91f95e27cd47b41ba31399781bba361d6090634)
* [SPLAT-2562](https://issues.redhat.com/browse/SPLAT-2562): Created OTE extension with tests for hybrid env [#335](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/335)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/d3668c9a9510f189604343e817cc79ab23367f40...e91f95e27cd47b41ba31399781bba361d6090634)