# 4.22.14

Created: 2026-09-10 14:49:10 +0000 UTC

Image Digest: `sha256:e74e45ada5ab6325586e559ea69b7fd23bfe620af960bef33af19cadea8db7d2`


## Changes from 4.22.11

### Components

* Kubectl 1.35.2
* Kubernetes 1.35.6
* Kubernetes Tests 1.35.1
* Red Hat Enterprise Linux CoreOS 10.2 upgraded from 10.2.20260819-0 to 10.2.20260908-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | OKD<br/>Hypershift | OKD<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---:  |
| VSphereMixedNodeEnv <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled |
| GCPSovereignCloudInstall <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)|  |  | Enabled<br/>(New)| Enabled<br/>(New) |


### Rebuilt images without code change

* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [d5515fa0](https://github.com/openshift/assisted-installer/commit/d5515fa077062f9bfcb763d8131b0302bba6a144) `sha256:5d86caa3086aa8a37b1cbac215648e8ad9e3b3bd35b1a1992d55cf037b6f0b74`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [d5515fa0](https://github.com/openshift/assisted-installer/commit/d5515fa077062f9bfcb763d8131b0302bba6a144) `sha256:1c2a79cb374ea492eeef5f1f7f808e6d8e069421c04bdca25df0270e2beb0674`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [817b1180](https://github.com/openshift/agent-installer-utils/commit/817b11805be82a177657128eac624df2e969d9b2) `sha256:dfe969974c0c9417109b039f3a1c44a5c71cdf8040881c2cbb8b600de65b5a6e`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [5e33c228](https://github.com/openshift/apiserver-network-proxy/commit/5e33c22867d59ddd9392a2c6b3194d2f3c6bdfc7) `sha256:76f36e176598ae41a7620cf1b4f7a06a102d8603db81df7c105330a8f8bf39ad`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [b4bad3f8](https://github.com/openshift/cloud-provider-aws/commit/b4bad3f89f54ea5df70e49d1fbf3ea3cbc8e59a3) `sha256:6246282bc953cfebf421ccaa720bde3c7e14d593639fd6a263ec069d1435e0f1`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [51d6bc76](https://github.com/openshift/aws-ebs-csi-driver/commit/51d6bc760234ffccb0348937a5cfd70b326119b9) `sha256:91d8dca5d100f62bef98c7e076f81be34469caf94cd10d30fbff64bdaa25946b`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [19e7b623](https://github.com/openshift/aws-encryption-provider/commit/19e7b623429799c9c549690a1b5ab499844411f9) `sha256:694aa181d7bcc0edf08fb0f192b44b21bfa3254dab99af726d2e2fc0e3d23c5f`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [1a0ccbcf](https://github.com/openshift/machine-api-provider-aws/commit/1a0ccbcfc0a7dc06f3a494f0e2b78aa0a0256b9c) `sha256:e13749e3eeaef433e935e3bfd8c35c9f473a493546c5419e94b707dfcaa3580e`
* [aws-node-termination-handler](https://github.com/openshift/aws-node-termination-handler) git [341ed3a0](https://github.com/openshift/aws-node-termination-handler/commit/341ed3a086925b17671c5349343fedf988a1139e) `sha256:60ede5d267e61da6a026f0e9116fb2010c22a63e3e3f085c7c4ae54c52a4d6c8`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [82088287](https://github.com/openshift/aws-pod-identity-webhook/commit/8208828799b6c4f91fd9b80128668f7765599e84) `sha256:d1bd2075ffdc447d0fbceff3ce02bfbe357389e30aaaada277762ac4c6922cd9`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [a17a3e3e](https://github.com/openshift/cloud-provider-azure/commit/a17a3e3eb36b14f0348b003018879a32394c7264) `sha256:824a46f595a18fcde0e37413abe0e95ed35872c350b29c135f16a38a9026f8cf`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [a17a3e3e](https://github.com/openshift/cloud-provider-azure/commit/a17a3e3eb36b14f0348b003018879a32394c7264) `sha256:dec71aed3a05cf82d5efd29a60f5ab094826ee4f0a9466e8bfa7b5e83ec4192a`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [dd79471c](https://github.com/openshift/cluster-api-provider-azure/commit/dd79471cc2f34c7c0b074ee8abc6f43a069811c2) `sha256:950247803d984f3d727af4ba163f1902f853c50322b5ddd379898c425b51cf46`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [bad7e944](https://github.com/openshift/machine-api-provider-azure/commit/bad7e9447fa66002e5ec7b0b7952545e7e8a6c9f) `sha256:e6940f95baa055d01f5f8baaaf870eb9bd3df9c48e6ff373cd5eeec9bf144d7f`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [b44d4444](https://github.com/openshift/azure-service-operator/commit/b44d444422f5a7eb21b9ca65f3975a2d13ec9b36) `sha256:b4e2ea23936fcdccf0997eda0801972f2c101099c77f932874b4831492a00d4c`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [a8fb3bf1](https://github.com/openshift/azure-workload-identity/commit/a8fb3bf1a6296d6cbf69142db458aa9b59cb3a45) `sha256:d0efc72391f700b18aea78687835f2932fef479d7c042e2f1dd18ad1dfeb7768`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [6481b520](https://github.com/openshift/cluster-api-provider-metal3/commit/6481b52008f0991912f80fdf9d74af3e631a7269) `sha256:fc1de41378c5a0fbbad4af696c30ab6a8bf777c0f4f448df16b58c436dfbb17e`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [8d863b95](https://github.com/openshift/cluster-api-provider-baremetal/commit/8d863b9505a5cfc0b01e33f985a3edf9d3c69f4b) `sha256:f122e7217e020af48678274398ae91d3f9b3d1a9960131906b9df76c6237b4b1`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [5a44cc2a](https://github.com/openshift/cluster-authentication-operator/commit/5a44cc2a8c36d144f8782e23f47bc31e2e4ead88) `sha256:da71df4088741da539719f4dd8971bad0f21b01619f9de00ec493a8733d8d43b`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [89f51dcb](https://github.com/openshift/kubernetes-autoscaler/commit/89f51dcb39919234f4b9b1efb37ffecb68ba7366) `sha256:282eee0feba931a42da3c10488fb2a848bc681c99c9f3828ee4b6b7a30daf1a3`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [e6be0fdf](https://github.com/openshift/cluster-bootstrap/commit/e6be0fdfbf43883e2301dbf2d0eb3ab4a4f93383) `sha256:bf75e283a170d921c324f6614c28d99679fb970497241ba3c1c343236bbc81f1`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [f1718df9](https://github.com/openshift/cluster-api/commit/f1718df9c13b0cee5ede1b6354e29acc466607a4) `sha256:0bc966312a8554c42cf214c6938ac2e31df4ce77a6422203683f11c7d29becd8`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [5430ff7a](https://github.com/openshift/cluster-capi-operator/commit/5430ff7a34d4c0a946740dcdcd98690c14c63cf9) `sha256:759aa403b115c41867aeaf90be1f79502734950336c015159644c191178d4d56`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [e0c2428e](https://github.com/openshift/cluster-config-operator/commit/e0c2428e4618493ad9db0681e3b91444746ddf2c) `sha256:3f43fb7d8c09ddb176efa8cb0dece756d0c2da9e4998e09c56737bcf9b1c9165`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [55dea4dc](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/55dea4dc947da2d8a9c1ffba451a41c3b3662718) `sha256:18557e0afed3831f103c6de1a144f33fc66d302e78a21e5b20f1eff66eb76eb7`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [3d214118](https://github.com/openshift/cluster-dns-operator/commit/3d2141182243cde1ec6417bd005c76d29aa88a01) `sha256:022871485ceb1a0ae62ed4e6cae6330d4670e2ef388e7c0d6e248afdd64f2621`
* [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator) git [14ecb163](https://github.com/openshift/cluster-etcd-operator/commit/14ecb163d4a69d1e53802c21d799d6f16b2303dc) `sha256:099063cb9334ea0548317d021c2b1d464847085bd4e513d288efbf65376877ba`
* [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator) git [656d475a](https://github.com/openshift/cluster-ingress-operator/commit/656d475a0bc76b31b8e387abd9e19458531cc4a3) `sha256:f0509e2c7f50c770a1169e0dcb469ff0037d6ca6f8e8e7e0fe1ec6f20cb11b76`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [9afe6687](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/9afe66875bff8b5926f2bf6dec4eade1e4a09bab) `sha256:98a2dfc25508831d32f9b6d085cfb19dba2867bd9a55337571ee7655cfac7672`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [fa7bb022](https://github.com/openshift/cluster-machine-approver/commit/fa7bb0222038fdeb51ddeae57b4c193d1b44a0fa) `sha256:137f423ee74a4d84804de343209fbc030469c07642acdf9aa6eca4e7656ce7d1`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [f66065f7](https://github.com/openshift/cluster-olm-operator/commit/f66065f7ae39fefe3058d72aa100d41d4327a407) `sha256:7937e6139f87a102bc23e983677cb664a472a601d348c6a3457898b745aacb31`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [8417fa98](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/8417fa98338c2adab73386c63c6d84af14ef99e4) `sha256:583256ea4919c051d8037f5ddfc198058fdf74105bf4636c73e6c6b1d1065fba`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [2d2699e4](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/2d2699e4f3fabc80e402f4c090c8cf80c4517977) `sha256:d97f5a201dd1f713ca62bd174e1c248856e20159fe37e77658c341ba02c71d10`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [2e306e14](https://github.com/openshift/cluster-policy-controller/commit/2e306e143051492a84c5e47a7b3126e096fdf76a) `sha256:8f876f823e496f3705550b64fff7a27b48ab81e1be3798e8148fa35826d48462`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [191a6aec](https://github.com/openshift/cluster-samples-operator/commit/191a6aec444bfdbe5d70f7a23a20ee2fd25b7080) `sha256:17bcc752f674eb01c8b91486f91855d57b962d5bdfe49d178009f7591cb80a7b`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [3b5c59cc](https://github.com/openshift/cluster-update-keys/commit/3b5c59cc6461663751bc510b4f9f1954ed8c9b50) `sha256:e2819deefb148bee63e74aab72addf32295f701ad187005ab5f02b963fb8fa2b`
* [cluster-version-operator](https://github.com/openshift/cluster-version-operator) git [6ac86dc9](https://github.com/openshift/cluster-version-operator/commit/6ac86dc99c02366314381b720ab1d4a38d38f1c2) `sha256:251c503701f17381574048df1fc2cbeae0466c3feb377e67846a2b75ecbf8a9f`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [94e41c4c](https://github.com/openshift/configmap-reload/commit/94e41c4c6a5832dfd19750173d6544784ba235ec) `sha256:4c6465d5eecd716fe6fcb0a9e53af7c87ca93a06b291dabe2fb41e8e3ea0da35`
* [console-operator](https://github.com/openshift/console-operator) git [35170581](https://github.com/openshift/console-operator/commit/35170581874b91514a9459766758fa0aa5da22f6) `sha256:1391506c540036fcd0519d3790c60429a2c7b0efe5231e3a9ca725184756459a`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [db552ad3](https://github.com/openshift/containernetworking-plugins/commit/db552ad333e84b99ca279a9c01ca2d918ec00c99) `sha256:3783f0201312d838cfce645e6be33378a97f7663b78f49711de76a90a20976cd`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [db552ad3](https://github.com/openshift/containernetworking-plugins/commit/db552ad333e84b99ca279a9c01ca2d918ec00c99) `sha256:e933bc71f9d436949d4b98149436f4fa409ceb815f071e3562df608e26ff0107`
* [coredns](https://github.com/openshift/coredns) git [9a71d9a6](https://github.com/openshift/coredns/commit/9a71d9a6b788437e755b5ed3bfad78c63fa7c6f4) `sha256:88833d6ff1454469553dfaac8f0668ac0ed054d0c8057f0f1e5b3920d1191fd6`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [710a2aea](https://github.com/openshift/cloud-provider-openstack/commit/710a2aea744fd04546d11ac781fb874694e33ad8) `sha256:ab9a66dfdbbd87a7b205ebb4edcd5ff56160a3a1f9ed36460722a8631a9d606e`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [b6911553](https://github.com/openshift/csi-driver-nfs/commit/b69115537b79a5b3516e2a900f9095f4ebb3cbe5) `sha256:02def81588fa2457123ebe1be1384f23a90b08c2e76508645cb9e2f55ac43334`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [95a19797](https://github.com/openshift/csi-external-attacher/commit/95a1979700f021e20879480b98b953bc382a0eaf) `sha256:66b37a4a485f7bfb785e99962f5d040b8ce4143ac3bd9ea7287fab40a3844a04`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [b48f0478](https://github.com/openshift/csi-external-snapshot-metadata/commit/b48f04782c567b8759292085b7ad554dce013d8a) `sha256:9783e692418d67d839c53a6762bd18986bf32f1b0271823bb325cd242249dcd1`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [28f6e063](https://github.com/openshift/csi-external-snapshotter/commit/28f6e06357f2840c241b9cfe09d301516e681c87) `sha256:519f229f10146e0942a950c7bbebab6a14962b02e9d2622f22ae3df56e30194f`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [4d5e959a](https://github.com/openshift/csi-livenessprobe/commit/4d5e959a182b4db70dc52302bd89eebfec40d5a5) `sha256:a5511154e5b69aee77c10c401f5fb946f4827a014b6d28ba99535e27c14ce272`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [bb6a6378](https://github.com/openshift/csi-node-driver-registrar/commit/bb6a6378d2af235b3b253cb422d406bd3d7e30b1) `sha256:250cf79e23a9a69d24355a473f92d17f631e16bad6ea34ca82aa96d2db2b1068`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [28f6e063](https://github.com/openshift/csi-external-snapshotter/commit/28f6e06357f2840c241b9cfe09d301516e681c87) `sha256:b5885a9992c3ac901b55565cf44693ea6a9798fee2dac68d7adf1ffae0ae2a5d`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [7aa4007a](https://github.com/openshift/driver-toolkit/commit/7aa4007a8601bf4bb23b696f580c022f58877223) `sha256:203144497820a3d1da98aaa0ef701244948bda9797390363fa6fc4669f23c018`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [af8f3013](https://github.com/openshift/egress-router-cni/commit/af8f30136791fa3f3dc9e5638bdb062db133bbbd) `sha256:84af79e0d52ae2eeff0d50beefffdf59ead4bc941fb54ee54792079c660fd3de`
* [etcd](https://github.com/openshift/etcd) git [6bd01267](https://github.com/openshift/etcd/commit/6bd01267dc858aca6ff21632f95e98dc62ba33e7) `sha256:9be0f474846065b3a0065f852e72aa951ead7e0b31bb27cb0da16f6e2d69a317`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [e7674ede](https://github.com/openshift/cluster-api-provider-gcp/commit/e7674ede9ce8d021a878a6d5e81942875387e5eb) `sha256:9384f7376c06090766fb56545119bc278c5be5761714caa9e377909e2a15c732`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [d7675f31](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/d7675f312ffdc8501032ff8217776cd7172b6bb0) `sha256:36256a23d89ace7533642923e06f88a696c84e7644c5a2a168b05f5ec78453e8`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [24cff9a6](https://github.com/openshift/cloud-provider-ibm/commit/24cff9a691e1ebee94669c834320c6ea974a2010) `sha256:ca7d25906a6b34b6fd94dd5bed411e1d4d44bf893400443865387bb32a525e20`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [d362aef2](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/d362aef240c280676249fa34c80fa1b39c684560) `sha256:a1a31c883db78a94afb844c8a62944a2ad6f5fbeaf527444957e4ad77aacee4a`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [3d5956dd](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/3d5956ddd2292c381309106d23fff1765380c55e) `sha256:b5837d21fdb3558f3b5e50e2bd2a90b2ccfd639d1c9a2ce9744950f3a35dbe38`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [9e5537cd](https://github.com/openshift/machine-api-provider-ibmcloud/commit/9e5537cd7d239a31d6b2eb56cd44af3ec7b47dd5) `sha256:2cb8f3358932bf3e5e2cbe6640e3e757e1a6b0339c7de9491521bca6650520df`
* [insights-operator](https://github.com/openshift/insights-operator) git [a4609447](https://github.com/openshift/insights-operator/commit/a46094471cfb564f3224975a2b1ea6c12d9d057b) `sha256:e976150105de145ab1bc6883338cf0c3f332bf92c29cc49d60a8c9a9052e9c01`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [70256457](https://github.com/openshift/insights-runtime-extractor/commit/70256457b507ec09737800ee7ea022143ed6c3c2) `sha256:c26bd9c9c58bc9a3946039afa2d8d9ca36f68f05864158f848310ab832ea598a`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [70256457](https://github.com/openshift/insights-runtime-extractor/commit/70256457b507ec09737800ee7ea022143ed6c3c2) `sha256:b20901f7457eee911d58fbd7a91872f1248aa44df904a5938747a0901ebc73bb`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [be386561](https://github.com/openshift/ironic-agent-image/commit/be386561e40cc3bb56ddd05fbf73a7c9ead5198c) `sha256:09de7e0e2ee5825b55029316b0be0bfd9213763202a2682ede601aa90e75f0e4`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [9953d2b7](https://github.com/openshift/ironic-rhcos-downloader/commit/9953d2b77da077c28f9486a5d965a43149ce30c1) `sha256:5c6986e51bce83dd15766c72198a7639b90e281fd1d1930fe4ca2e829fcfe132`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [a379d09f](https://github.com/openshift/ironic-static-ip-manager/commit/a379d09f228d93f2beab1c73d67764c64b21e3cb) `sha256:fc1faaeb39ffb632a9376376abf470a70be76b237a966a5e0f6ec4b7f8654a7d`
* [keepalived-ipfailover](https://github.com/openshift/images) git [6035d101](https://github.com/openshift/images/commit/6035d101dbc9a7fdd8861d864aeb6f66bacd964b) `sha256:177fa8843feca5075b8c43079fbcec6a4ed4ff2a4db811ae9b0dae3e594f63fe`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [38c16c46](https://github.com/openshift/kubernetes-metrics-server/commit/38c16c4698d131ab0e2da0d4b4b76d5322a89bab) `sha256:1ac1f202e914a8196de852f4d9b2c7e76ab8a3abd30505e01b99cde15afc0774`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [d12e2746](https://github.com/openshift/kube-rbac-proxy/commit/d12e274605248f6c59373240a7eae7a7a357dcb3) `sha256:686c34c021325fd33e7964916c3c6703c625bf83936ab411f30de7fb7ec62064`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [0a5ea07c](https://github.com/openshift/kube-state-metrics/commit/0a5ea07ca01263c4273a1a929854969e11a69bea) `sha256:ec44b3bfb236aac5e77970bb58be247765a1581ad0aaf3169156dc231bfe5b4f`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [72835e43](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/72835e43c7754356645e41031f3a99926b4d42e6) `sha256:4026d121238484154aa4d147d551b8ce24189247d4244e0ca148c97944aac631`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [09a0a5be](https://github.com/openshift/cloud-provider-kubevirt/commit/09a0a5beaa65fb589d7b571dc47f9748d2463b1c) `sha256:b4495d33cac4b58ba3735da676a7e0933469c5c89f81af09c69d35cb18ed26f2`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [90f14506](https://github.com/openshift/kubevirt-csi-driver/commit/90f14506c2d4fecfba2c355934bde87e6f101a20) `sha256:aef9b606e10ed74c419085aea7f78c816b89e7bebe3f53b6a86469a27fa5ddbd`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [a43d9c97](https://github.com/openshift/image-customization-controller/commit/a43d9c977f6332577efcd383cf173a2ff5805a4d) `sha256:a6e47dd2f9f6808caa69fb24d53d716ecdca3ff7ec41314f374225e0866bb031`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [e5342c99](https://github.com/openshift/machine-os-images/commit/e5342c9905a94069e6801737dd6aeddfb74bbac4) `sha256:ac9c9c0f286688c748a3adac8765ccdd727d115a1fd68d659b4d893e245e3480`
* [metallb-frr](https://github.com/openshift/frr) git [1277b238](https://github.com/openshift/frr/commit/1277b2387272397d3479d74d2d65112112f985b8) `sha256:9f062dd93482b6685672f232cad69ecc701688032f707f54c9fb5b26f5580e87`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [d4dd42ba](https://github.com/openshift/multus-admission-controller/commit/d4dd42ba9c17b04e0e5003147f4e140ea5e34749) `sha256:31ed035aff96291d32e68cec88fd0259cf0e9513e4c2c4541b59e3af6c45c444`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [834a093f](https://github.com/openshift/multus-networkpolicy/commit/834a093f693e521b8dc4ec7168d03cfba2c1cba1) `sha256:f189b740978637da04bf29ccd09f8c32d1666eedba6191f75bdfd8d6a88b5153`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [08af4127](https://github.com/openshift/route-override-cni/commit/08af4127c77976510cad1c096d9aca977d8ae5af) `sha256:b4e986719b5aada036056d547edf97a1c9253f4e4ca3e9fc550d7f7f592587cd`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [d691040e](https://github.com/openshift/whereabouts-cni/commit/d691040e509bb20c26b5e8366c0d6f3bb45a5e02) `sha256:0e5fd60e9eba0d2714a5460bb67a48233386d9e1ee71e2d9c6049ae45f2c4b3c`
* [must-gather](https://github.com/openshift/must-gather) git [8554213f](https://github.com/openshift/must-gather/commit/8554213fa214e8e165e7bedaf8d892bb824d83ef) `sha256:401de81a494f4370985000dc56c0c10ffe18f8c1f6ada5cda54f9a3242004a53`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [5ef2d320](https://github.com/openshift/bond-cni/commit/5ef2d3205f11fba65e3949c0c57897420a83974a) `sha256:a1bb929d3761f13c9731014741f7e0b9f74641964c2d92783eec5eedba3d3abd`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [5b233ea1](https://github.com/openshift/network-metrics-daemon/commit/5b233ea1d80733c1b00c6bad65dec0620dbf783a) `sha256:33c8b2a15414a91588eea34fc2dc40ae118a7a89e02517fbb58564603fb62f7b`
* [network-tools](https://github.com/openshift/network-tools) git [5c4b905c](https://github.com/openshift/network-tools/commit/5c4b905c09ccd6edadb2ff359f45b70ed334f948) `sha256:ad494a1cff8e6a34f4d68150561f5f527750265dc814049994bc86aa5a48d412`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [8e75679a](https://github.com/openshift/cloud-provider-nutanix/commit/8e75679a965b80fee0332f8758471a7d3a75a4e8) `sha256:a0dc366be5a7e6333aaffb7fc6601ec8d55d13e4737fdfe02322c49a80ae84d8`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [60559fdd](https://github.com/openshift/machine-api-provider-nutanix/commit/60559fdd7092dd29aa1c72797c49279aa2da39ee) `sha256:4b7dcbb4b45cc870d434ac9dd9e047d971c19b80734c76e3aff5ca1dd9d6985d`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [4c002a91](https://github.com/openshift/oauth-apiserver/commit/4c002a9114937ea9c20213f00892761c2013e60b) `sha256:90d62e31502e394478a71c5d19560dc872e775061a6000c74e6352363fdbaf88`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [367b7238](https://github.com/openshift/oauth-proxy/commit/367b72380a41025060d2372269d192cffb4167de) `sha256:53bffdb1c91743c06c7076cb5ab22206c8a19fb1d85d67598582b3ab3a61cd27`
* [oauth-server](https://github.com/openshift/oauth-server) git [42031614](https://github.com/openshift/oauth-server/commit/42031614956a88806d0503cd619b49975ad61682) `sha256:4895dcafc948891dfcd455bd86300ccf9da57cd00a2d3cc83a924d39b127bf74`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [7fa546d4](https://github.com/openshift/openshift-apiserver/commit/7fa546d41a73b519e3af0e6428471c4aaf5c71e5) `sha256:dc36bcfc5dc3f548d93bfc12cf1ecd56c185369ba5c944e55839bfd62408d5b1`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [26d20fea](https://github.com/openshift/openshift-controller-manager/commit/26d20feae8892f648f5b06ed3f5492fe6ffb4532) `sha256:37c1781a3925beeedfa77bacf80e401a815ed4460d72bbee7f8e6adf6e4b0547`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [e71e0996](https://github.com/openshift/openshift-state-metrics/commit/e71e09969f11a47c87b87c43b762ad1d01f6b04f) `sha256:9498c489f529047e1b66da1b23a668b7e02ad134986883eb50da61efb027a3af`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [710a2aea](https://github.com/openshift/cloud-provider-openstack/commit/710a2aea744fd04546d11ac781fb874694e33ad8) `sha256:65b44f76b4da8ca432e49d83b9c49b8a571c497e7a617f987520b32acf80c85c`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [710a2aea](https://github.com/openshift/cloud-provider-openstack/commit/710a2aea744fd04546d11ac781fb874694e33ad8) `sha256:85247c7bde5cd83c15c894b7b6870a2b93181ce2016c460c4a0b3836b0735e69`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [06d95461](https://github.com/openshift/cluster-api-provider-openstack/commit/06d95461581f9374ae05959b66fc50e2a17d077c) `sha256:e2c44ebc4aee9f871988460dbc514d5002fbaa06697ef566b712b4a3c130ec1d`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [74bd2dd2](https://github.com/openshift/machine-api-provider-openstack/commit/74bd2dd2e7bc5b93e78b6b204012b6b7d981a4ba) `sha256:7e420597cfe570b34275cc662fcd4c83d0af31bf15e11fe4c33ea85223863b76`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [cbea7a9c](https://github.com/openshift/openstack-resource-controller/commit/cbea7a9cab145c32e2f347be69996b649893cc22) `sha256:3d2a6dd9c6b0cb3a9ab49376de0f99fbab36b66e4fa98439385b3aa46d17dcb2`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [38da2ef7](https://github.com/operator-framework/operator-marketplace/commit/38da2ef78cc429f67aea7fb4e589df21ac1ed327) `sha256:b936d3e0d801533bc18c107c329f4004d71c0029e24595edfa9ac8cbb3845c75`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [766c0952](https://github.com/openshift/cloud-provider-powervs/commit/766c0952fd19f8225fe59b2be8e8c8932b24ebd7) `sha256:3cc460b49aef7580570383f5c4818237355326fde305ac29f2f54fdd7ddf834b`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [e88cf81d](https://github.com/openshift/machine-api-provider-powervs/commit/e88cf81dd9ad174f395b86f9cdc40fa30cb06bf4) `sha256:c27621c14daab3b979a0f1b3186887add0f03c0af524e96874ffba7e62236484`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [c4c99a30](https://github.com/openshift/prom-label-proxy/commit/c4c99a3071808f466ee6c3d7b7fa87108b457feb) `sha256:f5bae200b6453361b169dd7bce86bbd5dce4b0e46e67aa0011a0522eae86b016`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [f090d141](https://github.com/openshift/prometheus-alertmanager/commit/f090d1413836ce12c0a2f70f862de5787dfe59d0) `sha256:c459fab8fac11ba71d1a64f450afbedc38951c3d511281fcc3a833c4319c42c4`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [6c4fc012](https://github.com/openshift/node_exporter/commit/6c4fc0126407c8404b8604faa2f1230f385b9f44) `sha256:2b973c4c37970421a5fa694d72387a24965a570c3534c180160a7de9420d39df`
* [rhel-coreos](https://github.com/openshift/os) git [cf63d7a5](https://github.com/openshift/os/commit/cf63d7a58a420b35b7f5e42ea0e7deffec56cf91) `sha256:36fae7049e0490d64148096a8c9a22c2c5a22c4e59a4be104b247f2ea13fbea2`
* [rhel-coreos-10](https://github.com/openshift/os) git [cf63d7a5](https://github.com/openshift/os/commit/cf63d7a58a420b35b7f5e42ea0e7deffec56cf91) `sha256:ccd25002b70027ad7d32c9371f1a1837fb4b190287aac4203d707fb6c0638bb5`
* [rhel-coreos-10-extensions](https://github.com/openshift/os) git [cf63d7a5](https://github.com/openshift/os/commit/cf63d7a58a420b35b7f5e42ea0e7deffec56cf91) `sha256:b2af1a9aa072b17a5d460528cf0f7c2c33729925e12d32f2975771ec66f5db40`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [cf63d7a5](https://github.com/openshift/os/commit/cf63d7a58a420b35b7f5e42ea0e7deffec56cf91) `sha256:ca3d7fac3d4bd9f076337d93cbb7804a676846fbea4f989e41e4e7f5797041f6`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [55f77ca4](https://github.com/openshift/route-controller-manager/commit/55f77ca4cf0328b7c4fd7736bce79ebe171a9b6b) `sha256:5835824697283cfbce084b86458389e254fcfea25c0d1c828905702ec0372e75`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [9fff46a5](https://github.com/openshift/service-ca-operator/commit/9fff46a576033685f66fbb1121eb0a2f134a29be) `sha256:aaf810731f7766d481a010e281e4151b37d66eb498ec3fd4cc8576957da2821d`
* [telemeter](https://github.com/openshift/telemeter) git [c2ffb0a7](https://github.com/openshift/telemeter/commit/c2ffb0a7035e504a4ddc7292e4d12b7490eab0d4) `sha256:510978bd203079851d7407910ec2e99908cb9997ad26481d706f0437a368e8c4`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [8e176cec](https://github.com/openshift/volume-data-source-validator/commit/8e176cec394709cac728423cbbb6c3c914be8485) `sha256:ccfc64d488ddcb639038b649485ff4fd014dcb25ec7ef677b207187e3e2eb0ca`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [39008107](https://github.com/openshift/cloud-provider-vsphere/commit/39008107b1463e3299b0d60c3ac1f7e71ad3e014) `sha256:a3c961ae61a4bd98fd50b43dd122e26cbefbc3a7742214d0bdc25d954a78bd1f`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [ac542b5a](https://github.com/openshift/cluster-api-provider-vsphere/commit/ac542b5afbd9a3897cda34e7ea1852b61c945e36) `sha256:30d082040f9b32922c5df8a65498c5278aa4f063f966b8cf52ab78f780c2cabf`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [9be96574](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/9be965742961e7a84b0af8ff5ea17a852e015c98) `sha256:11d7b7b9905f0b093855c8115d9d18c75700d10f3a9473b84b1dbfebf255e741`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/d31ed58ac20a5c181f21a42e5adf900bbd69f52a)

* [OCPBUGS-121355](https://issues.redhat.com/browse/OCPBUGS-121355): Fix NUMAResourcesOperator CR name so it can be applied [#10934](https://github.com/openshift/assisted-service/pull/10934)
* [OCPBUGS-120755](https://issues.redhat.com/browse/OCPBUGS-120755): added missing subscription name for lvms-operator [#10918](https://github.com/openshift/assisted-service/pull/10918)
* [OCPBUGS-105805](https://issues.redhat.com/browse/OCPBUGS-105805): golang.org/x/crypto bump to v0.52.0 [#10796](https://github.com/openshift/assisted-service/pull/10796)
* [Full changelog](https://github.com/openshift/assisted-service/compare/f8220b56913e9be3cf49d9b9950768b766c36f2c...d31ed58ac20a5c181f21a42e5adf900bbd69f52a)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/2dd2e384dfc739a26763b4e18e7d63ca0de192e2)

* [OCPBUGS-101855](https://issues.redhat.com/browse/OCPBUGS-101855): Bump golang.org/x/net from v0.47.0 to v0.53.0 [#1595](https://github.com/openshift/assisted-installer-agent/pull/1595)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/753d625f3417752aabb1cf7088f311da4ec43da3...2dd2e384dfc739a26763b4e18e7d63ca0de192e2)


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/9380434565d3f9b0031b353a008ae97050b038a0)

* [OCPBUGS-104555](https://issues.redhat.com/browse/OCPBUGS-104555): Bump tmp to ^0.2.6 to address CVE-2026-44705 (#4014) [#4014](https://github.com/openshift-assisted/assisted-installer-ui/pull/4014)
* [CVE-2026](https://issues.redhat.com/browse/CVE-2026): 44990: bump sanitize-html to v2.17.4 (#4008) [#4008](https://github.com/openshift-assisted/assisted-installer-ui/pull/4008)
* Add LVM as an operator for OVE (#4005) [#4005](https://github.com/openshift-assisted/assisted-installer-ui/pull/4005)
* Allow LSO to be selected as a standalone operator (#4003) [#4003](https://github.com/openshift-assisted/assisted-installer-ui/pull/4003)
* NoRegistryClusterInstall has been promoted to default in the OpenShift API, (#3984) [#3984](https://github.com/openshift-assisted/assisted-installer-ui/pull/3984)
* Update OWNERS file (#3990) [#3990](https://github.com/openshift-assisted/assisted-installer-ui/pull/3990)
* [OCPBUGS-100526](https://issues.redhat.com/browse/OCPBUGS-100526), [OCPBUGS-103014](https://issues.redhat.com/browse/OCPBUGS-103014): Bump ip-address to 10.5.0 to fix CVE-2026-54272 and CVE-2026-69192 (#3987) [#3987](https://github.com/openshift-assisted/assisted-installer-ui/pull/3987)
* [OCPBUGS-109783](https://issues.redhat.com/browse/OCPBUGS-109783): Bump tar pkg to version ^7.5.21 to address CVE-2026-73566 (#3970) [#3970](https://github.com/openshift-assisted/assisted-installer-ui/pull/3970)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/a4947dc7a1cf3bb2506d093e37e28ed89bbe26de...9380434565d3f9b0031b353a008ae97050b038a0)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/f60301561fe801da499b22f58aae57eae16ada5a)

* 🌱 [release-4.22] OCPBUGS-119954: UPSTREAM: &lt;carry&gt;: Remove upstream .github files unused in OpenShift CI [#633](https://github.com/openshift/cluster-api-provider-aws/pull/633)
* 🐛 [release-4.22] OCPBUGS-112305: UPSTREAM: 6132: Persist ProviderID immediately after instance creation [#626](https://github.com/openshift/cluster-api-provider-aws/pull/626)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/9172366ccfbde3225e045b59587d38db655edd94...f60301561fe801da499b22f58aae57eae16ada5a)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/dc8b3b3ca8c6930b4f90ff4eaf262f093a4ef368)

* [OCPBUGS-119697](https://issues.redhat.com/browse/OCPBUGS-119697): Add proxy hook for HyperShift CSI driver controller deployments [#619](https://github.com/openshift/csi-operator/pull/619)
* [OCPBUGS-101882](https://issues.redhat.com/browse/OCPBUGS-101882), [OCPBUGS-101889](https://issues.redhat.com/browse/OCPBUGS-101889), [OCPBUGS-101890](https://issues.redhat.com/browse/OCPBUGS-101890), [OCPBUGS-102000](https://issues.redhat.com/browse/OCPBUGS-102000): Bump golang.org/x/net to v0.53.0 [#602](https://github.com/openshift/csi-operator/pull/602)
* [Full changelog](https://github.com/openshift/csi-operator/compare/f0f24d930828f164945ea19ee0aa323e490f9323...dc8b3b3ca8c6930b4f90ff4eaf262f093a4ef368)


### [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws/tree/f607badaa794779517b2a16a9d978f05a502ce8e)

* [OCPBUGS-118884](https://issues.redhat.com/browse/OCPBUGS-118884): default max-pods to 250 for Custom AMI family [#43](https://github.com/openshift/aws-karpenter-provider-aws/pull/43)
* [Full changelog](https://github.com/openshift/aws-karpenter-provider-aws/compare/f845ecdbf693d96bf129f746fb9b5328b6f1d549...f607badaa794779517b2a16a9d978f05a502ce8e)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/b9046c19b05e2dc75a929328e698ab2cc7e279c9)

* UPSTREAM: 3635: OCPBUGS-96598: Bump golang.org/x/net to  v0.55.0 [#165](https://github.com/openshift/azure-disk-csi-driver/pull/165)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/015de26e222e97785488918a8fbe6fc4c2038d23...b9046c19b05e2dc75a929328e698ab2cc7e279c9)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/32f7275441afca97750de9f1e415bad7c8fbdee3)

* [OCPBUGS-101874](https://issues.redhat.com/browse/OCPBUGS-101874): Bump golang.org/x/net to v0.53.0 [#154](https://github.com/openshift/azure-file-csi-driver/pull/154)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/91c5760d8435b799bc837f7eb6540025c369d572...32f7275441afca97750de9f1e415bad7c8fbdee3)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/42b1def6c429806b08ca71c0275aba7924f5ced0)

* [CNTRLPLANE-4024](https://issues.redhat.com/browse/CNTRLPLANE-4024): support sovereign Managed HSM endpoints- #56 [#56](https://github.com/openshift/azure-kubernetes-kms/pull/56)
* [OCPBUGS-101846](https://issues.redhat.com/browse/OCPBUGS-101846): [release-4.22] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#57](https://github.com/openshift/azure-kubernetes-kms/pull/57)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/b7bc5e3eacc9d9defa895b73524a6a293119989f...42b1def6c429806b08ca71c0275aba7924f5ced0)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/e9327a5587a02cff8aae7e41a06ef86382334b4c)

* [OCPBUGS-100061](https://issues.redhat.com/browse/OCPBUGS-100061): openstack: Reserve addresses for load balancer [#10725](https://github.com/openshift/installer/pull/10725)
* [OCPBUGS-114639](https://issues.redhat.com/browse/OCPBUGS-114639): OCPBUGS-112550, OCPBUGS-112549: Release 4.22 GCD and KMS support [#10783](https://github.com/openshift/installer/pull/10783)
* [AGENT-1583](https://issues.redhat.com/browse/AGENT-1583): post-feature promotion (NoRegistryClusterInstall) openshift/api dependencies bump [#10817](https://github.com/openshift/installer/pull/10817)
* [OCPBUGS-112471](https://issues.redhat.com/browse/OCPBUGS-112471): Update timeout in GetMarketplaceImage to 5 minutes [#10784](https://github.com/openshift/installer/pull/10784)
* [OCPBUGS-111885](https://issues.redhat.com/browse/OCPBUGS-111885): pin argcomplete for yq on Python 3.9 (release-4.22) [#10766](https://github.com/openshift/installer/pull/10766)
* [Full changelog](https://github.com/openshift/installer/compare/27857bd7921fc12dc3681c4812892cff949a1d34...e9327a5587a02cff8aae7e41a06ef86382334b4c)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/7fc3bd6c4f36acec9944d5adcd2083ae21a8df4b)

* [OCPBUGS-90570](https://issues.redhat.com/browse/OCPBUGS-90570): Reject non-empty checksum for OCI images [#501](https://github.com/openshift/baremetal-operator/pull/501)
* [OCPBUGS-99420](https://issues.redhat.com/browse/OCPBUGS-99420): Create ports if they are already inspected and machine is re-registering [#518](https://github.com/openshift/baremetal-operator/pull/518)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/165f4d069a4a563b5e12ab531ae5b9edc5a49937...7fc3bd6c4f36acec9944d5adcd2083ae21a8df4b)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/1df165545dd61e73101e73ec174e7bd2c930887a)

* [OCPBUGS-112618](https://issues.redhat.com/browse/OCPBUGS-112618): Cloud Platforms: Filter out node's own IP from Upstreams [#401](https://github.com/openshift/baremetal-runtimecfg/pull/401)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/dca8cb1be0cce1ce404dfd407ead1326a3c8bb40...1df165545dd61e73101e73ec174e7bd2c930887a)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/96ed0f43f0b5adf771ce3bd4fbc86809e93139f8)

* [OCPBUGS-114734](https://issues.redhat.com/browse/OCPBUGS-114734): Fix windows builds of oc rpm [#2383](https://github.com/openshift/oc/pull/2383)
* [Full changelog](https://github.com/openshift/oc/compare/7ec2e14b74e700fec86dc0936a61f6c12b79d083...96ed0f43f0b5adf771ce3bd4fbc86809e93139f8)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/26005d211cfdd678a036d06316d783a09eab2446)

* [OCPBUGS-114669](https://issues.redhat.com/browse/OCPBUGS-114669): Enable GCP custom universe domain support for CCO [#1083](https://github.com/openshift/cloud-credential-operator/pull/1083)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/c69fe7e078ad2e51f8352af04ff45c54a6a11e1d...26005d211cfdd678a036d06316d783a09eab2446)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/8bc05a827fe54e1421013a198ffefe776efa5b6f)

* : [release-4.22] OCPBUGS-115316: GCP: Set Universe Domain [#264](https://github.com/openshift/cloud-network-config-controller/pull/264)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/2d69ad953cfaa419e9b6221da9edb152ded91e0b...8bc05a827fe54e1421013a198ffefe776efa5b6f)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/effcafeed5e4ab9cee8e312de2aa123331eea9fa)

* [OCPBUGS-101883](https://issues.redhat.com/browse/OCPBUGS-101883): Bump x/net package in release-4.22 [#387](https://github.com/openshift/cluster-autoscaler-operator/pull/387)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/260ea1b5967f47768a0727e8c84d451dc9de5ced...effcafeed5e4ab9cee8e312de2aa123331eea9fa)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/4e98263f296f7886468df2f15f8354fb265b4d91)

* [OCPBUGS-99390](https://issues.redhat.com/browse/OCPBUGS-99390): Make CBO progress in non-baremetal platforms [#646](https://github.com/openshift/cluster-baremetal-operator/pull/646)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/e65972f997216d9f67cb18112f0cb1a4b57b0fe3...4e98263f296f7886468df2f15f8354fb265b4d91)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/e893bf67ceaaf4c0305ea821faf7cb3b98bd3efa)

* [OCPBUGS-114394](https://issues.redhat.com/browse/OCPBUGS-114394): [release-4.22] GCP Alternate Universe Domain Support [#508](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/508)
* [OCPBUGS-112665](https://issues.redhat.com/browse/OCPBUGS-112665): Moved node sync job creation from manifest to operator controller [#507](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/507)
* [OCPBUGS-105883](https://issues.redhat.com/browse/OCPBUGS-105883): Created new job to update vSphere nodes to have vsphere label [#501](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/501)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/b99c3d88b0e7b125f0340bb5d8e3333fa3940a60...e893bf67ceaaf4c0305ea821faf7cb3b98bd3efa)


### [cluster-config-api](https://github.com/openshift/api/tree/42fb550ea02a47ab1de1ee81d798706cb74035a1)

* [OCPBUGS-116848](https://issues.redhat.com/browse/OCPBUGS-116848): Add Sovereign cloud feature gate and UniverseDomain field to GCPPlatformStatus [#3022](https://github.com/openshift/api/pull/3022)
* [OCPBUGS-113639](https://issues.redhat.com/browse/OCPBUGS-113639): move empty CRIOCredentialProviderConfig CR to run-level 0000_10 [#3010](https://github.com/openshift/api/pull/3010)
* [SPLAT-2718](https://issues.redhat.com/browse/SPLAT-2718): Promote FeatureGateVSphereMixedNodeEnv to GA [#2949](https://github.com/openshift/api/pull/2949)
* [OCPBUGS-113600](https://issues.redhat.com/browse/OCPBUGS-113600): [release-4.22] OCPBUGS-112479: Handle Sippy date-only format in featuregate-test-analyzer [#3008](https://github.com/openshift/api/pull/3008)
* [Full changelog](https://github.com/openshift/api/compare/9fda5179a7f76209e548ccc46d16767ed1e0bddb...42fb550ea02a47ab1de1ee81d798706cb74035a1)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/e9b3b21fbc322cb410a58b5f147ac76893d851ea)

* [OCPBUGS-101892](https://issues.redhat.com/browse/OCPBUGS-101892): Bump golang.org/x/net from v0.52.0 to v0.53.0 [#286](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/286)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/4847d2e09adb887610a0e18061bbf508e17f6ee3...e9b3b21fbc322cb410a58b5f147ac76893d851ea)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/c331da28c42721724ed5229c972c956cd1d9502c)

* [OCPBUGS-88489](https://issues.redhat.com/browse/OCPBUGS-88489): Fix image registry deployment failure on aws-ovn-edge-zones [#1366](https://github.com/openshift/cluster-image-registry-operator/pull/1366)
* [release 4.22] OCPBUGS-114413: GCP Universe Domain Support [#1364](https://github.com/openshift/cluster-image-registry-operator/pull/1364)
* [OCPBUGS-112349](https://issues.redhat.com/browse/OCPBUGS-112349): Improve GCS KMS encryption error handling and documentation [#1362](https://github.com/openshift/cluster-image-registry-operator/pull/1362)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/f041d358ef164e02ae82cc5197f9ccd58f515f8c...c331da28c42721724ed5229c972c956cd1d9502c)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/a2ba9c6a2d1ed76ea98a40885cf9a824eb9b9071)

* [OCPBUGS-120318](https://issues.redhat.com/browse/OCPBUGS-120318): [release-4.22] Backport 10-minute degraded inertia [#2294](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2294)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/9c413cd4dc8c3876cc40ee85c207bf9b143f106f...a2ba9c6a2d1ed76ea98a40885cf9a824eb9b9071)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/c5c678b3e04a64214ae62f5ad6d873c8899ac363)

* [OCPBUGS-116225](https://issues.redhat.com/browse/OCPBUGS-116225): [release-4.22] Add 10-minute degraded inertia [#966](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/966)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/95150ed5dbf11370b4a06e6959c77efa13768561...c5c678b3e04a64214ae62f5ad6d873c8899ac363)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/da4bf66b8f6d057ab1562b6640261d8fe9ded28f)

* [OCPBUGS-120133](https://issues.redhat.com/browse/OCPBUGS-120133): [release-4.22] Backport 10-minute degraded inertia [#664](https://github.com/openshift/cluster-kube-scheduler-operator/pull/664)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/51ea59abd057d0cef56b29b8a74efc28411d5427...da4bf66b8f6d057ab1562b6640261d8fe9ded28f)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/0354fe76edacf5fbb2a01c9e56d1e467d8621c79)

* [OCPBUGS-105469](https://issues.redhat.com/browse/OCPBUGS-105469): enable read-only rootfs for all containers [#3047](https://github.com/openshift/cluster-monitoring-operator/pull/3047)
* [OCPBUGS-112572](https://issues.redhat.com/browse/OCPBUGS-112572): [release-4.22] Makefile: version-stamp golangci-lint binary to prevent stale linter [#3064](https://github.com/openshift/cluster-monitoring-operator/pull/3064)
* [OCPBUGS-105304](https://issues.redhat.com/browse/OCPBUGS-105304): [release-4.22] wrap library-go resourceCache with mutex for thread safety [#3045](https://github.com/openshift/cluster-monitoring-operator/pull/3045)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/5e1f02a520816ad5df396937339da3ec6972d999...0354fe76edacf5fbb2a01c9e56d1e467d8621c79)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/fe422f7670aa55e037c2180f1b7f2dc4e3d34cde)

* [OCPBUGS-105556](https://issues.redhat.com/browse/OCPBUGS-105556): [4.22] frr-k8s: use Recreate strategy for statuscleaner deployment [#3130](https://github.com/openshift/cluster-network-operator/pull/3130)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/6a5fcccf86374942a57dac208d9435eb6b3d7150...fe422f7670aa55e037c2180f1b7f2dc4e3d34cde)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/3cd3ee48a5e99051d4392af47db09e976b180992)

* [OCPBUGS-113579](https://issues.redhat.com/browse/OCPBUGS-113579): Update PPC help description [#1613](https://github.com/openshift/cluster-node-tuning-operator/pull/1613)
* [OCPBUGS-112554](https://issues.redhat.com/browse/OCPBUGS-112554): Use Add() instead of AddRateLimited() for routine Profile enqueues [#1601](https://github.com/openshift/cluster-node-tuning-operator/pull/1601)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/3c46665849c9a75b2ab7fc02d867a7ec4f5e4f18...3cd3ee48a5e99051d4392af47db09e976b180992)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/8f4ce04189e9c5496548ed53e33943aba8756279)

* [OCPBUGS-112334](https://issues.redhat.com/browse/OCPBUGS-112334): Pass management cluster proxy env vars to CSI driver operator deployments [#740](https://github.com/openshift/cluster-storage-operator/pull/740)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/25672c2af69d1fa76dec61f9db09a989dd5ccdf7...8f4ce04189e9c5496548ed53e33943aba8756279)


### [console](https://github.com/openshift/console/tree/82fd3852d347de8f31c78b3f0c9266d1e0c453a2)

* [OCPBUGS-115003](https://issues.redhat.com/browse/OCPBUGS-115003): Validate chart URL in /api/helm/verify to prevent SSRF [#17118](https://github.com/openshift/console/pull/17118)
* [OCPBUGS-114725](https://issues.redhat.com/browse/OCPBUGS-114725): display operators in catalog when Tech Preview enabled [#17114](https://github.com/openshift/console/pull/17114)
* [OCPBUGS-111417](https://issues.redhat.com/browse/OCPBUGS-111417): make cloud provider fields optional during operator install [#17014](https://github.com/openshift/console/pull/17014)
* [OCPBUGS-109521](https://issues.redhat.com/browse/OCPBUGS-109521): Remove unscoped CSV watch from ClusterNotUpgradeableAlert [#17013](https://github.com/openshift/console/pull/17013)
* [OCPBUGS-100519](https://issues.redhat.com/browse/OCPBUGS-100519), [OCPBUGS-101795](https://issues.redhat.com/browse/OCPBUGS-101795): Fix CVE-2026-69153 and CVE-2026-45623 - Bump postcss [#17054](https://github.com/openshift/console/pull/17054)
* [OCPBUGS-112271](https://issues.redhat.com/browse/OCPBUGS-112271): Fix flaky TestAsyncCache backend test [#17045](https://github.com/openshift/console/pull/17045)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/784dccde34ed5df006906c5c06fed1b7c0264981...82fd3852d347de8f31c78b3f0c9266d1e0c453a2)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/253b987d5233b1adb93b5ae2c63102c0d06c01cf)

* [OCPBUGS-96626](https://issues.redhat.com/browse/OCPBUGS-96626): Bump golang.org/x/net to v0.57.0 [#148](https://github.com/openshift/csi-external-provisioner/pull/148)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/2d611ab4a7c6fa227a72d54c7ac88530d2c8513b...253b987d5233b1adb93b5ae2c63102c0d06c01cf)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/20f7fbe41654ebe10d2d4f50ae423c9686ce1c25)

* [OCPBUGS-101944](https://issues.redhat.com/browse/OCPBUGS-101944): Bump golang.org/x/net to v0.53.0 [#209](https://github.com/openshift/csi-external-resizer/pull/209)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/b0e3fef25207098e170f7659322f411b01d54c7a...20f7fbe41654ebe10d2d4f50ae423c9686ce1c25)


### [docker-builder](https://github.com/openshift/builder/tree/3dead2dcc98d83fb97f42d46b05c5253752e7910)

* [OCPBUGS-86910](https://issues.redhat.com/browse/OCPBUGS-86910): Updating openshift-enterprise-builder-container image to be consistent with ART for 4.22 [#538](https://github.com/openshift/builder/pull/538)
* [Full changelog](https://github.com/openshift/builder/compare/fcd4ce2d96613a27bd1ab7f53ff47225976c4ba9...3dead2dcc98d83fb97f42d46b05c5253752e7910)


### [docker-registry](https://github.com/openshift/image-registry/tree/179d7925210490c5de4846540e01c33601cd8cd1)

* [release 4.22] OCPBUGS-114405: GCP: Support Alternate Universe Domain [#476](https://github.com/openshift/image-registry/pull/476)
* [Full changelog](https://github.com/openshift/image-registry/compare/9eae44fcf44142a705031fa16a613c450dbe685a...179d7925210490c5de4846540e01c33601cd8cd1)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/2e28a1aa036a64a1f315170b70b912f1f8ab9f92)

* [OCPBUGS-99228](https://issues.redhat.com/browse/OCPBUGS-99228): Fix node.kubernetes.io/exclude-from-external-load-balancers on masters [#130](https://github.com/openshift/cloud-provider-gcp/pull/130)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/ea31ab85a7cf25e88532598b73502d535462a5d7...2e28a1aa036a64a1f315170b70b912f1f8ab9f92)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/03efd8ba0751d4b7cb2be874e32ac9b72e086e4d)

* [OCPBUGS-114401](https://issues.redhat.com/browse/OCPBUGS-114401): gcd support [#193](https://github.com/openshift/machine-api-provider-gcp/pull/193)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/0073bd1187c07febc963fc67f0df67cd33c8f218...03efd8ba0751d4b7cb2be874e32ac9b72e086e4d)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/e3556b4d8912f40ae4013f6bd597edd7c9cdb59d)

* [OCPBUGS-114412](https://issues.redhat.com/browse/OCPBUGS-114412): Add Universe Domain Support [#129](https://github.com/openshift/gcp-pd-csi-driver/pull/129)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/48a7a1aa3f2200d01cf1b6e63a5a6cfd5004a8b0...e3556b4d8912f40ae4013f6bd597edd7c9cdb59d)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/d9cd6ca1661bb11dfbb828815665985830e32622)

* [OCPBUGS-115120](https://issues.redhat.com/browse/OCPBUGS-115120): detect GCP Dedicated and use hyperdisk-balanced StorageClass [#204](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/204)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/3da58a8c88a425e8e05d6e907f5492a49a0ee348...d9cd6ca1661bb11dfbb828815665985830e32622)


### [haproxy-router](https://github.com/openshift/router/tree/b70b28c0380056950793382f42b9b2eaf9330945)

* [OCPBUGS-101956](https://issues.redhat.com/browse/OCPBUGS-101956): Bump golang.org/x/net from v0.48.0 to v0.53.0 [#834](https://github.com/openshift/router/pull/834)
* [Full changelog](https://github.com/openshift/router/compare/b2665a2999cec36350ccf2614b43941753027773...b70b28c0380056950793382f42b9b2eaf9330945)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/19365a06f558a5c5dc7f5654fa99a8318e4a77f4)

* [OCPBUGS-98604](https://issues.redhat.com/browse/OCPBUGS-98604): Add NodeSelectorAdjuster admission plugin for HCP clusters (part 2) [#2767](https://github.com/openshift/kubernetes/pull/2767)
* [Full changelog](https://github.com/openshift/kubernetes/compare/05744abbe07157bc72508fd1872e46e9c38fbfe7...19365a06f558a5c5dc7f5654fa99a8318e4a77f4)


### [hypershift](https://github.com/openshift/hypershift/tree/7273000c23583d67eaa63db019318e5aa7381297)

* [CNTRLPLANE-4321](https://issues.redhat.com/browse/CNTRLPLANE-4321): Cherry-pick kube-scheduler metrics support [#9490](https://github.com/openshift/hypershift/pull/9490)
* [CNTRLPLANE-4024](https://issues.redhat.com/browse/CNTRLPLANE-4024): feat(azure): support managed HSM for KMS encryption [#9437](https://github.com/openshift/hypershift/pull/9437)
* [Full changelog](https://github.com/openshift/hypershift/compare/2f5225b64a5e92f1c98ecea4b191932e3980a0c1...7273000c23583d67eaa63db019318e5aa7381297)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/c378efee05fd02323d241e86244dee3b56e32a45)

* [OCPBUGS-101965](https://issues.redhat.com/browse/OCPBUGS-101965): Replace golang.org/x/net with openshift-sustaining/net [#176](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/176)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/03b143d588768a18fd8afa1534ea7d7a04b4d1f3...c378efee05fd02323d241e86244dee3b56e32a45)


### [ironic](https://github.com/openshift/ironic-image/tree/f949f43243eec3ad861fe984a69e49a4c2468f01)

* [OCPBUGS-112341](https://issues.redhat.com/browse/OCPBUGS-112341): Update ironic hash to include fixes related to power management error… [#901](https://github.com/openshift/ironic-image/pull/901)
* [Full changelog](https://github.com/openshift/ironic-image/compare/5d16ca14c3c757816c95e5830255912e8b8d8b49...f949f43243eec3ad861fe984a69e49a4c2468f01)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/e38046acfe255e67aa5ab9c9a6f4efd882ed7dbb)

* [OCPBUGS-101989](https://issues.redhat.com/browse/OCPBUGS-101989): Bump golang.org/x/net from v0.49.0 to v0.53.0 [#1541](https://github.com/openshift/machine-api-operator/pull/1541)
* [OCPBUGS-115165](https://issues.redhat.com/browse/OCPBUGS-115165): CORS-4521: GCP: Add regional permission [#1538](https://github.com/openshift/machine-api-operator/pull/1538)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/78c5104d9a69072749f4ddf681926bcc404ef271...e38046acfe255e67aa5ab9c9a6f4efd882ed7dbb)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/90b269666abb8df37c46bf49d9b54dcf2604447c)

* [OCPBUGS-121849](https://issues.redhat.com/browse/OCPBUGS-121849): Fix vsphere network absolute paths [#6512](https://github.com/openshift/machine-config-operator/pull/6512)
* [OCPBUGS-120671](https://issues.redhat.com/browse/OCPBUGS-120671): Skip vsphere fd-unmatched machinesets for bootimage updates [#6494](https://github.com/openshift/machine-config-operator/pull/6494)
* [OCPBUGS-119936](https://issues.redhat.com/browse/OCPBUGS-119936): Increase TC-74751 Eventually timeout for vSphere OVA upload [#6492](https://github.com/openshift/machine-config-operator/pull/6492)
* [OCPBUGS-115401](https://issues.redhat.com/browse/OCPBUGS-115401): Update message for MachineOSBuildFailed condition [#6479](https://github.com/openshift/machine-config-operator/pull/6479)
* [OCPBUGS-116943](https://issues.redhat.com/browse/OCPBUGS-116943): Update AMI Whitelist [#6489](https://github.com/openshift/machine-config-operator/pull/6489)
* [OCPBUGS-112785](https://issues.redhat.com/browse/OCPBUGS-112785): Revert TNF Graceful node shutdown [#6461](https://github.com/openshift/machine-config-operator/pull/6461)
* [OCPBUGS-114418](https://issues.redhat.com/browse/OCPBUGS-114418): [release-4.22] OCPBUGS-113615: Azure confidential clusters should be flagged by skew enforcement [#6459](https://github.com/openshift/machine-config-operator/pull/6459)
* [OCPBUGS-114392](https://issues.redhat.com/browse/OCPBUGS-114392): Use kubernetes scheme in drain controller event recorder [#6458](https://github.com/openshift/machine-config-operator/pull/6458)
* [AGENT-1583](https://issues.redhat.com/browse/AGENT-1583): post-feature promotion (NoRegistryClusterInstall) openshift/api dependencies bump [#6418](https://github.com/openshift/machine-config-operator/pull/6418)
* [OCPBUGS-112618](https://issues.redhat.com/browse/OCPBUGS-112618): Fix upstreams for CoreDNS pods on Cloud platforms [#6438](https://github.com/openshift/machine-config-operator/pull/6438)
* [OCPBUGS-112614](https://issues.redhat.com/browse/OCPBUGS-112614): OCPBUGS-109739: Increase rpm-ostree rebase retry backoff and preserve error [#6436](https://github.com/openshift/machine-config-operator/pull/6436)
* [OCPBUGS-105521](https://issues.redhat.com/browse/OCPBUGS-105521): Fix SHA idempotency test in nmstate-configuration.sh [#6392](https://github.com/openshift/machine-config-operator/pull/6392)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/835832994bd362663146d543612f7b72875383b8...90b269666abb8df37c46bf49d9b54dcf2604447c)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/8416b67c1bd96dfca3796e208c27c44ffd375a74)

* [OLS-3921](https://issues.redhat.com/browse/OLS-3921): disable button shrink [#1189](https://github.com/openshift/monitoring-plugin/pull/1189)
* [OCPBUGS-98787](https://issues.redhat.com/browse/OCPBUGS-98787): replace outdated react-linkify dependency [#1150](https://github.com/openshift/monitoring-plugin/pull/1150)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/c75ff99e5dfd588785f0427173ff063983e307ba...8416b67c1bd96dfca3796e208c27c44ffd375a74)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/a87f7a50bdf2fba01fdf234bb878bd5dd16cdaa7)

* [OCPBUGS-120682](https://issues.redhat.com/browse/OCPBUGS-120682): [Release 4.22] Cherry-pick fix for the issue of stripping delegate datastore config on CNI DEL, leaking IPAM addresses [#350](https://github.com/openshift/multus-cni/pull/350)
* [OCPBUGS-114732](https://issues.redhat.com/browse/OCPBUGS-114732): [release-4.22] Revert "Sort DeviceIDs in GetPodResourceMap for deterministic ordering" [#346](https://github.com/openshift/multus-cni/pull/346)
* [Full changelog](https://github.com/openshift/multus-cni/compare/b4ec7d8239ce4bd3ed949bce9816a013377b44c7...a87f7a50bdf2fba01fdf234bb878bd5dd16cdaa7)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/a05766f6d5b6f2a4ff5967cf65ed732540465216)

* [OCPBUGS-82108](https://issues.redhat.com/browse/OCPBUGS-82108): Marked strings for i18n in NetworkPolicies list page [#475](https://github.com/openshift/networking-console-plugin/pull/475)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/93a0249eaee2099ea63819d8ca6f35b8f9d507a6...a05766f6d5b6f2a4ff5967cf65ed732540465216)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/739e1384c223aef6cbadab557301741332f96a52)

* [OCPBUGS-92814](https://issues.redhat.com/browse/OCPBUGS-92814): v1/e2e: reduce helm download flakiness [#1455](https://github.com/openshift/oc-mirror/pull/1455)
* [OCPBUGS-90149](https://issues.redhat.com/browse/OCPBUGS-90149): fix(helm): tolerate v-prefix version mismatch in disk-to-mirror [#1448](https://github.com/openshift/oc-mirror/pull/1448)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/88debf38cbc3009b2ad81cd05e932abc3ce308a7...739e1384c223aef6cbadab557301741332f96a52)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/433f3cc944ee4f7995a5d0b444aecb77c3891176)

* [OCPBUGS-102011](https://issues.redhat.com/browse/OCPBUGS-102011): Bump golang.org/x/net to v0.53.0 to address CVE-2026-33814 [#793](https://github.com/openshift/operator-framework-operator-controller/pull/793)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/f80de29f7161d9bca6c92b89396f90fe60bd438f...433f3cc944ee4f7995a5d0b444aecb77c3891176)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/5359e60525288af86885e14d89e3210878f87274)

* [OCPBUGS-101995](https://issues.redhat.com/browse/OCPBUGS-101995): Bump golang.org/x/net to v0.53.0 to address CVE-2026-33814 [#1362](https://github.com/openshift/operator-framework-olm/pull/1362)
* [OCPBUGS-95441](https://issues.redhat.com/browse/OCPBUGS-95441), [OCPBUGS-95458](https://issues.redhat.com/browse/OCPBUGS-95458): bumping containerd to v1.7.33 [#1353](https://github.com/openshift/operator-framework-olm/pull/1353)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/de6260e53055e10e216ec668d692a35554ab0585...5359e60525288af86885e14d89e3210878f87274)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/e2082ef4a1aaad8fa5acc7b24880394b60a4e8ae)

* [OCPBUGS-112496](https://issues.redhat.com/browse/OCPBUGS-112496): NO-JIRA: Branch Sync main to release-4.22 [08-18-2026] [#3406](https://github.com/openshift/ovn-kubernetes/pull/3406)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/89fbc1252d05c39b6da9f0cad421895fcab805b8...e2082ef4a1aaad8fa5acc7b24880394b60a4e8ae)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/1173437f341d58a340d83cb87449af28228a1040)

* [OCPBUGS-101580](https://issues.redhat.com/browse/OCPBUGS-101580), [OCPBUGS-102012](https://issues.redhat.com/browse/OCPBUGS-102012), [OCPBUGS-93554](https://issues.redhat.com/browse/OCPBUGS-93554), [OCPBUGS-95566](https://issues.redhat.com/browse/OCPBUGS-95566), [OCPBUGS-96671](https://issues.redhat.com/browse/OCPBUGS-96671), [OCPBUGS-98019](https://issues.redhat.com/browse/OCPBUGS-98019): Fix CVE-2026-39828, 46597, 39835, 27136, 2502 and 33814 [#142](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/142)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/02959a8d7096501e240d1d9f65da90b87bac45b9...1173437f341d58a340d83cb87449af28228a1040)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/6e859b18170daf013897d09ce3ef4f915ada6757)

* [OCPBUGS-101993](https://issues.redhat.com/browse/OCPBUGS-101993): Mitigate CVE-2026-33814 by bumping golang.org/x/net to v0.57.0 [#121](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/121)
* [OCPBUGS-107713](https://issues.redhat.com/browse/OCPBUGS-107713): Mitigate CVE-2026-41178 by bumping go.opentelemetry.io/otel/sdk to v1.44.0 [#120](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/120)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/277478211cfc7302e9c09b41a0935fbba678614a...6e859b18170daf013897d09ce3ef4f915ada6757)


### [prometheus](https://github.com/openshift/prometheus/tree/868b9ce717fdde35c0769c6f22f35f3787ff1274)

* [OCPBUGS-93732](https://issues.redhat.com/browse/OCPBUGS-93732): fix for CVE-2026-42151 [#355](https://github.com/openshift/prometheus/pull/355)
* [Full changelog](https://github.com/openshift/prometheus/compare/13ce9de4694ded595ef1455dd836ba4033fed0ea...868b9ce717fdde35c0769c6f22f35f3787ff1274)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/fb32abbabfb6b04b4397e889ab7cdaf96eca2f77)

* [OCPBUGS-102017](https://issues.redhat.com/browse/OCPBUGS-102017), [OCPBUGS-102031](https://issues.redhat.com/browse/OCPBUGS-102031): [release-4.22] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#398](https://github.com/openshift/prometheus-operator/pull/398)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/70e38466b9b9143f48283dab8bd0c227f35efe69...fb32abbabfb6b04b4397e889ab7cdaf96eca2f77)


### [tests](https://github.com/openshift/origin/tree/6c62ada4b9b23dfc6a0431afd40db8cec506e2ca)

* [OCPBUGS-115199](https://issues.redhat.com/browse/OCPBUGS-115199): fix: skip MCPs with non-ready nodes during MCN property validation [#31525](https://github.com/openshift/origin/pull/31525)
* [OCPBUGS-114438](https://issues.redhat.com/browse/OCPBUGS-114438): Fix probe termination test to use pod status instead of kubelet event text [#31568](https://github.com/openshift/origin/pull/31568)
* [OCPBUGS-115161](https://issues.redhat.com/browse/OCPBUGS-115161): Raise status polling timeout and write bound [#31582](https://github.com/openshift/origin/pull/31582)
* [OCPBUGS-115191](https://issues.redhat.com/browse/OCPBUGS-115191): fix: adjusting DaemonSet test to dynamically compute expected pod count [#31522](https://github.com/openshift/origin/pull/31522)
* [AGENT-1583](https://issues.redhat.com/browse/AGENT-1583): post-feature promotion (NoRegistryClusterInstall) openshift/api dependencies bump [#31565](https://github.com/openshift/origin/pull/31565)
* [OCPBUGS-111831](https://issues.redhat.com/browse/OCPBUGS-111831): tolerate one NotReady CP node in EnsureNodesReady for degraded TNF [#31527](https://github.com/openshift/origin/pull/31527)
* [Full changelog](https://github.com/openshift/origin/compare/c73ed5ace82622ad60c976e57d9c51e6a9b43ee5...6c62ada4b9b23dfc6a0431afd40db8cec506e2ca)


### [thanos](https://github.com/openshift/thanos/tree/98b433450fed7685ec04af89b4de20afbaf856ae)

* fix for OCPBUGS-107709: CVE-2026-41178 [#202](https://github.com/openshift/thanos/pull/202)
* [Full changelog](https://github.com/openshift/thanos/compare/f66e2964942983bf9ed4eb2c969046ce7ef14b91...98b433450fed7685ec04af89b4de20afbaf856ae)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/19c75111d7d7c5d3ce23ea7154e36e03f49b6c1e)

* UPSTREAM: 187: OCPBUGS-96686: Bump golang.org/x/net to v0.50.0-sec.4 [#195](https://github.com/openshift/vmware-vsphere-csi-driver/pull/195)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/8c37254f86801197707a3f8ef0e8b077f2e8dd5a...19c75111d7d7c5d3ce23ea7154e36e03f49b6c1e)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/885fd8b28b91323570ed6cbaf6aa171845d4c83c)

* [OCPBUGS-102050](https://issues.redhat.com/browse/OCPBUGS-102050): Bump golang.org/x/net to 0.53.0 [#229](https://github.com/openshift/vsphere-problem-detector/pull/229)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/438d5aad88be4f7d9237d87ed70589e1ebaf18f8...885fd8b28b91323570ed6cbaf6aa171845d4c83c)