# 4.22.8

Created: 2026-07-31 14:41:52 +0000 UTC

Image Digest: `sha256:7480aa0eac4f9d0b698538c54fa21555f3b6fe91cd23be9879f6264918193364`


## Changes from 4.22.2

### Components

* Kubectl 1.35.2
* Kubernetes upgraded from 1.35.5 to 1.35.6
* Kubernetes Tests 1.35.1
* Red Hat Enterprise Linux CoreOS 10.2 upgraded from 10.2.20260617-0 to 10.2.20260724-0


### Rebuilt images without code change

* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [24e89426](https://github.com/openshift/assisted-installer/commit/24e894263b3231ab8bb27acc9127a835b7b6e997) `sha256:736d139069e1601323875190aa384e4db022b0f5841f7f827570309a32bbdc21`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [24e89426](https://github.com/openshift/assisted-installer/commit/24e894263b3231ab8bb27acc9127a835b7b6e997) `sha256:6690a3f6fb2864713703fb289aad846ba0637c1269204894be6a88576d156583`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [5e33c228](https://github.com/openshift/apiserver-network-proxy/commit/5e33c22867d59ddd9392a2c6b3194d2f3c6bdfc7) `sha256:01eadbc0fdba52e6a66651dde08ba8fa334d1648e0e55f52802e123ccb4dfe57`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [b4bad3f8](https://github.com/openshift/cloud-provider-aws/commit/b4bad3f89f54ea5df70e49d1fbf3ea3cbc8e59a3) `sha256:371cf965c716a27fbe30df355fabd9ccb01c21ed16155905eba5eb57dabf7644`
* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [9172366c](https://github.com/openshift/cluster-api-provider-aws/commit/9172366ccfbde3225e045b59587d38db655edd94) `sha256:9cbf9fe7d42c987ca73085347ebc52f175f43d19096a1943500d2f4eca6d101d`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [51d6bc76](https://github.com/openshift/aws-ebs-csi-driver/commit/51d6bc760234ffccb0348937a5cfd70b326119b9) `sha256:1fb153b92e305e84fcf2359d46b30f9d15d72b7ff18b9eb495b51c2b00ac28c8`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [f0be9c72](https://github.com/openshift/aws-karpenter-provider-aws/commit/f0be9c72e5bf25caeb2ca45c14e67e4d397a52cb) `sha256:5c02403f585a4e9aee97d282047903e2e53ceedeb4e4827d34cd5dcf014b4d03`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [19e7b623](https://github.com/openshift/aws-encryption-provider/commit/19e7b623429799c9c549690a1b5ab499844411f9) `sha256:1719282d1ba523b894ac25ba2590f64b82de992b322b8d6d81dad3b6073b0307`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [1a0ccbcf](https://github.com/openshift/machine-api-provider-aws/commit/1a0ccbcfc0a7dc06f3a494f0e2b78aa0a0256b9c) `sha256:51e3677cb7f74b29cfbde6a0d039572c5c7d6bdc3f2f3b62a1627c4dcb608f26`
* [aws-node-termination-handler](https://github.com/openshift/aws-node-termination-handler) git [341ed3a0](https://github.com/openshift/aws-node-termination-handler/commit/341ed3a086925b17671c5349343fedf988a1139e) `sha256:7df4ce9dd7870923f4db862482d6e128bdadca118de0a7633302a8c95893922e`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [82088287](https://github.com/openshift/aws-pod-identity-webhook/commit/8208828799b6c4f91fd9b80128668f7765599e84) `sha256:f13756ab936a4549a823ed80b1fda6ffdd3611753d847d543ee67b04b7f91250`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [a6ffab6a](https://github.com/openshift/cluster-api-provider-azure/commit/a6ffab6a17878cb9b9eeaa6337c996989d1e7ee3) `sha256:6771fc05142591347ea11932eb52339bda3b3ec9bbc36037eddd2fc544c2db35`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [403f856e](https://github.com/openshift/azure-file-csi-driver/commit/403f856e29605126b2711a1bfe7a4f6c276b344d) `sha256:090e0767500beee67252030f6dc4148ef83c8452329730305df2b99d3b0c78c1`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [99b9a3a3](https://github.com/openshift/azure-kubernetes-kms/commit/99b9a3a33d8edfd0a2d2876aa7ef1382b2c75a39) `sha256:0beaad4107cb0d6fb39a13863717f9ccda958da36e6708898b51812d17b2b8b1`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [b44d4444](https://github.com/openshift/azure-service-operator/commit/b44d444422f5a7eb21b9ca65f3975a2d13ec9b36) `sha256:1e28b9a28f7157a6a752bed299f6490b651ff94fc2b5ebae9857f105cde4a4ef`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [a8fb3bf1](https://github.com/openshift/azure-workload-identity/commit/a8fb3bf1a6296d6cbf69142db458aa9b59cb3a45) `sha256:26de9c868084f1693aabe7f9750a71ce13bbc1f8a59098e8774d4b104131ea2c`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [6481b520](https://github.com/openshift/cluster-api-provider-metal3/commit/6481b52008f0991912f80fdf9d74af3e631a7269) `sha256:e228de50bee19f43d8411c5737a902b01943f3b3b50184615600cea3aabbba1e`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [8d863b95](https://github.com/openshift/cluster-api-provider-baremetal/commit/8d863b9505a5cfc0b01e33f985a3edf9d3c69f4b) `sha256:eefa75a0f73cf65c28531d0e18a7ef65b249ce8bf429ad593f487c5c9f118c07`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [dca8cb1b](https://github.com/openshift/baremetal-runtimecfg/commit/dca8cb1be0cce1ce404dfd407ead1326a3c8bb40) `sha256:fdd1130669472ddfd08eccb7141aec4f94dfc246c311abe164e2edd97dec73ef`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [2d69ad95](https://github.com/openshift/cloud-network-config-controller/commit/2d69ad953cfaa419e9b6221da9edb152ded91e0b) `sha256:96712a7e8097b7561b273131243d04d9d8b72c1ee72f060b701bbf0751644fc2`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [5a44cc2a](https://github.com/openshift/cluster-authentication-operator/commit/5a44cc2a8c36d144f8782e23f47bc31e2e4ead88) `sha256:466ffadb43ab80ddb04d6a42e2ef9ef1f21e356e14385161a5ebec46ee7812a3`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [521e545f](https://github.com/openshift/kubernetes-autoscaler/commit/521e545fb92e7138b2ce2bc05f871f53a6c112fb) `sha256:376422466934d3f8b3536559dc096073512c330987f9c6d24ff9e4edc7f8df3d`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [260ea1b5](https://github.com/openshift/cluster-autoscaler-operator/commit/260ea1b5967f47768a0727e8c84d451dc9de5ced) `sha256:f893af1532d267a1e3d91babcd81930ce58650e9172c0cbd56ddf0e2dd8863c8`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [e6be0fdf](https://github.com/openshift/cluster-bootstrap/commit/e6be0fdfbf43883e2301dbf2d0eb3ab4a4f93383) `sha256:c797ff3b90a51ef216d47f0e02ec905aa2518fc99e26db9c7de369037d19eaff`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [f1718df9](https://github.com/openshift/cluster-api/commit/f1718df9c13b0cee5ede1b6354e29acc466607a4) `sha256:17f48d6841db1a963f5f973e38fd291b5c2d7a08c1e812b09866a318ff51e1e8`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [e0c2428e](https://github.com/openshift/cluster-config-operator/commit/e0c2428e4618493ad9db0681e3b91444746ddf2c) `sha256:ea4952d314b83f87689ddf8e45261886e1deded628022b0c5c9cce1269330478`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [3d214118](https://github.com/openshift/cluster-dns-operator/commit/3d2141182243cde1ec6417bd005c76d29aa88a01) `sha256:af6ee88be50c58a6559f5c928ba08458eb64e94a759d59bc9eb63a39a5cd4d17`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [90e608b3](https://github.com/openshift/cluster-image-registry-operator/commit/90e608b3e66c284a5b41bc57e6d0d3a45aceebdc) `sha256:92fb6175473c3e25d477cd456970f03b3774e1fd2bf211695aa9608c9966d131`
* [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator) git [9c413cd4](https://github.com/openshift/cluster-kube-apiserver-operator/commit/9c413cd4dc8c3876cc40ee85c207bf9b143f106f) `sha256:43fa9c08b77ec2a0b008cfd9c25497fc81fe18b81420de2c041e841d69bee40b`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [95150ed5](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/95150ed5dbf11370b4a06e6959c77efa13768561) `sha256:94679af4468b31d73d701bca6ab4ee24a538f9e7e51e2305547da1591000c32c`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [51ea59ab](https://github.com/openshift/cluster-kube-scheduler-operator/commit/51ea59abd057d0cef56b29b8a74efc28411d5427) `sha256:293eb8efd49d97b0cb938ffafa8b7ff6d40bb10f9b8ef303db906c60db3c49a7`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [9afe6687](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/9afe66875bff8b5926f2bf6dec4eade1e4a09bab) `sha256:73d2b5d42cca9e2806a6bca201effa3e1481697f6b0d3ee926767a79c884feb5`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [fa7bb022](https://github.com/openshift/cluster-machine-approver/commit/fa7bb0222038fdeb51ddeae57b4c193d1b44a0fa) `sha256:0d5bf223db415f6aef41da61f6545924b62693009cb7fde4da744b1afbde68e5`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [1924cf6f](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/1924cf6f12c632d56f1d41341f08ff9ff6eae7d6) `sha256:e4db82eec5d8a3f8e0a0df72073d2eea434252155de9e6e73623f11453437b69`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [2d2699e4](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/2d2699e4f3fabc80e402f4c090c8cf80c4517977) `sha256:f5a4a3e940a4f9f366e3f5c71aadfce9c9e524f061719e1f53cca697b1a3066e`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [8dfdf2ef](https://github.com/openshift/cluster-storage-operator/commit/8dfdf2ef3310358f3559a5481df43b98b2294791) `sha256:eb5986d7e2dcc813883e87905a5709a566f9532d5010d5208516f4266c076343`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [3b5c59cc](https://github.com/openshift/cluster-update-keys/commit/3b5c59cc6461663751bc510b4f9f1954ed8c9b50) `sha256:d64baf233f9836120a0e6ed802c3da612929c48959abddbdc336b4f90d4621be`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [94e41c4c](https://github.com/openshift/configmap-reload/commit/94e41c4c6a5832dfd19750173d6544784ba235ec) `sha256:5f2f133792885eb6455f8b436cbe79f9f9b8d25f0fb2cf09f64775d110992dc9`
* [coredns](https://github.com/openshift/coredns) git [9a71d9a6](https://github.com/openshift/coredns/commit/9a71d9a6b788437e755b5ed3bfad78c63fa7c6f4) `sha256:9e88eb7628d25676e2ca145a573463a7eb7508fdd7fc1324543dbf15d81162e7`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [710a2aea](https://github.com/openshift/cloud-provider-openstack/commit/710a2aea744fd04546d11ac781fb874694e33ad8) `sha256:e15958956de208aa02354e8f54ab11c90d614e44081be7ef066a9c280dc5eb81`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [b6911553](https://github.com/openshift/csi-driver-nfs/commit/b69115537b79a5b3516e2a900f9095f4ebb3cbe5) `sha256:5330b66aa6b9c10ec6d37752549c0de0a482cfd15d77e42cf5e5c24e121e97bf`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [95a19797](https://github.com/openshift/csi-external-attacher/commit/95a1979700f021e20879480b98b953bc382a0eaf) `sha256:51ce48ddfe5b5d9d7547f7bc30fbf71b37e50e60843915f78d270c7eb56ba74d`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [4e74a4aa](https://github.com/openshift/csi-external-resizer/commit/4e74a4aa52a2046d6b97a47dff7a60ddb73d0bbd) `sha256:0e77e4217cc56b9c5194b46cd169c20a364ff2819635ee352ed25dd1d6096b2e`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [76523185](https://github.com/openshift/csi-external-snapshot-metadata/commit/7652318579a38838931a5be492cee3573c7c8ecf) `sha256:f80ca8e72c11b8eed3f5c84a4335b67ea1d8b3514556da1a5c4bc29c16f2a0ee`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [28f6e063](https://github.com/openshift/csi-external-snapshotter/commit/28f6e06357f2840c241b9cfe09d301516e681c87) `sha256:10aab846ed72d86e40ffbafdde81bed557bba5fe03efb8359d20b53dd53942a4`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [4d5e959a](https://github.com/openshift/csi-livenessprobe/commit/4d5e959a182b4db70dc52302bd89eebfec40d5a5) `sha256:a2eb1d32e8401dfb3a21a36b284ef292f77f0ebd79365aaed87a713652916cec`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [bb6a6378](https://github.com/openshift/csi-node-driver-registrar/commit/bb6a6378d2af235b3b253cb422d406bd3d7e30b1) `sha256:7f4934369a787234c85df5af1b94cd9ac8fdad8bbd2dda136afff6e41083ae2d`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [28f6e063](https://github.com/openshift/csi-external-snapshotter/commit/28f6e06357f2840c241b9cfe09d301516e681c87) `sha256:96441a2207e376f7e128836475a319c176c7ba226ab8d9addf8cc439b9e98162`
* [docker-builder](https://github.com/openshift/builder) git [fcd4ce2d](https://github.com/openshift/builder/commit/fcd4ce2d96613a27bd1ab7f53ff47225976c4ba9) `sha256:7a8d6a9f479ef7a23f619b425e3b32885276b63be38c0164440600eee59ac70c`
* [docker-registry](https://github.com/openshift/image-registry) git [9eae44fc](https://github.com/openshift/image-registry/commit/9eae44fcf44142a705031fa16a613c450dbe685a) `sha256:06639299d21fe30b84236a1733d36a4b5248314c4c52eb46c57d6947a9297ab3`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [7aa4007a](https://github.com/openshift/driver-toolkit/commit/7aa4007a8601bf4bb23b696f580c022f58877223) `sha256:0cbcf0d191d5c7876a98a35c1f872048d49d82a5a69eeadd4f6e0a59c1a8968b`
* [etcd](https://github.com/openshift/etcd) git [d8d67b8c](https://github.com/openshift/etcd/commit/d8d67b8ce849f816d6d23c904098336632e2348f) `sha256:555134afafc535234c00721d7adba2e928b065f003ace5235bff9f169bc07317`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [ea31ab85](https://github.com/openshift/cloud-provider-gcp/commit/ea31ab85a7cf25e88532598b73502d535462a5d7) `sha256:c28ec826d6d35a3b84eb01639fdbf3277eb7fb550f0fca060d744323ef1d0738`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [e7674ede](https://github.com/openshift/cluster-api-provider-gcp/commit/e7674ede9ce8d021a878a6d5e81942875387e5eb) `sha256:bd0a4601a2a883e77c0de6f05b28467531f78626927c7c3385c59884f72192f8`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [0073bd11](https://github.com/openshift/machine-api-provider-gcp/commit/0073bd1187c07febc963fc67f0df67cd33c8f218) `sha256:ac69e96f7eeec2930631ef0cdbb41b253e77dddd462411ed7f4b616d8450c259`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [48a7a1aa](https://github.com/openshift/gcp-pd-csi-driver/commit/48a7a1aa3f2200d01cf1b6e63a5a6cfd5004a8b0) `sha256:be532a59bebf98f07a1642dc7d4fc6e8245a93a3f37f6ac5680c98f3c565ec62`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [3da58a8c](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/3da58a8c88a425e8e05d6e907f5492a49a0ee348) `sha256:16bf2380a1c445c660f60bb1c6105e89733497e406bdb1dc39fde8efa5c81248`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [d7675f31](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/d7675f312ffdc8501032ff8217776cd7172b6bb0) `sha256:cfbbe64371860354ae42ba9ede614af8b9ba0f3ab86e1f585b318edce3e5ef0f`
* [haproxy-router](https://github.com/openshift/router) git [5586fa9c](https://github.com/openshift/router/commit/5586fa9c77025679df4dee2a0895e95333ffbc8a) `sha256:edcd645241fe961ec3fb4a9d2a5ce8a1d6536ae153c13ed879e7067a5664913b`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [24cff9a6](https://github.com/openshift/cloud-provider-ibm/commit/24cff9a691e1ebee94669c834320c6ea974a2010) `sha256:bc6bf60767b2052d281c316c5c68db92a22148a65cbfb69cc192b90cda1e837c`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [d362aef2](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/d362aef240c280676249fa34c80fa1b39c684560) `sha256:00b02d2784b9cb29a1a2718696ddf8d7e4625ea3c358785432b3a82b022e6578`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [3d5956dd](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/3d5956ddd2292c381309106d23fff1765380c55e) `sha256:09a07b9ed265ecd49ac0adeb1636f427523b05ef5b35c4d01754d27880c4d038`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [03b143d5](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/03b143d588768a18fd8afa1534ea7d7a04b4d1f3) `sha256:51131263529af1d9250e0490620c504ac0e9cdb395825906cdfd09b60eb31c43`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [46b8c72c](https://github.com/openshift/machine-api-provider-ibmcloud/commit/46b8c72c675770295f5c2c8f85f5f705ca35787c) `sha256:cd3451900f154ab53d571b722c4690057a315160d744a73834348d1959034d96`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [70256457](https://github.com/openshift/insights-runtime-extractor/commit/70256457b507ec09737800ee7ea022143ed6c3c2) `sha256:4df660f4bf858e78ae5e9012a3ef14655cb1eeedae45f22d463ae68ebaf0969f`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [70256457](https://github.com/openshift/insights-runtime-extractor/commit/70256457b507ec09737800ee7ea022143ed6c3c2) `sha256:3e9b75af4eae8e99492dd011983842a8fe9e3ae156b066994db3e88d911c248e`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [9953d2b7](https://github.com/openshift/ironic-rhcos-downloader/commit/9953d2b77da077c28f9486a5d965a43149ce30c1) `sha256:96782be6bbcdf4f0e094829a6514b00a116e0d4af1c7c006ab4b431b8296303e`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [a379d09f](https://github.com/openshift/ironic-static-ip-manager/commit/a379d09f228d93f2beab1c73d67764c64b21e3cb) `sha256:af8ef5091f66db5aab7648bcc9c6df73dd0488429e10c4cde5cd3aec0d5675ba`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [38c16c46](https://github.com/openshift/kubernetes-metrics-server/commit/38c16c4698d131ab0e2da0d4b4b76d5322a89bab) `sha256:0be8efc579a1012109a08d2a78f71c25e85b34b41357f06107466165ae45a0a6`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [d12e2746](https://github.com/openshift/kube-rbac-proxy/commit/d12e274605248f6c59373240a7eae7a7a357dcb3) `sha256:9b1457315dae8e417754609470257e82d95d8428d02be77aa828d843b47eff36`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [72835e43](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/72835e43c7754356645e41031f3a99926b4d42e6) `sha256:68d3468ed6a5dc38fdcd43d38ded4ab4521500302cf2e0dfdaa6befa0f1f0534`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [76dd5a6f](https://github.com/openshift/cloud-provider-kubevirt/commit/76dd5a6fa9e86573bf3dfb79be17edf832e3bae1) `sha256:ddc46e528587c66ea93a2d2e874ae8d31951d79fa10b366d0dc538854ca32a3b`
* [machine-api-operator](https://github.com/openshift/machine-api-operator) git [78c5104d](https://github.com/openshift/machine-api-operator/commit/78c5104d9a69072749f4ddf681926bcc404ef271) `sha256:8dd5aa5851cf726f25a196f417b7566ec235e564de74235a7394682862d24df4`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [a43d9c97](https://github.com/openshift/image-customization-controller/commit/a43d9c977f6332577efcd383cf173a2ff5805a4d) `sha256:51186f82723e47363e6623956fe73001c111da4355e0432bc16b8f30436dac72`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [d4dd42ba](https://github.com/openshift/multus-admission-controller/commit/d4dd42ba9c17b04e0e5003147f4e140ea5e34749) `sha256:ef127ddbbb925ac2bf9bc7ac4002efda39543dfe579ed74c132489123dacf442`
* [multus-cni](https://github.com/openshift/multus-cni) git [b4ec7d82](https://github.com/openshift/multus-cni/commit/b4ec7d8239ce4bd3ed949bce9816a013377b44c7) `sha256:e8a2d86df93e9e3461ceb78cdd9a163bc5e7e5923914a0ab5b48e5081f503799`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [b4ec7d82](https://github.com/openshift/multus-cni/commit/b4ec7d8239ce4bd3ed949bce9816a013377b44c7) `sha256:65cc641a427085aa7a93e10d83c87007e34bdcd7eb287549b2f39cf6a8bea618`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [834a093f](https://github.com/openshift/multus-networkpolicy/commit/834a093f693e521b8dc4ec7168d03cfba2c1cba1) `sha256:ef8f8115f885d01d9827d137b89668d66d83c92f414b6f63f8fe453ae8623ee2`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [08af4127](https://github.com/openshift/route-override-cni/commit/08af4127c77976510cad1c096d9aca977d8ae5af) `sha256:fbf5914c4ec81d9ddb966fd094ce2144dfdb2a6413502c2e9789c30261ae1868`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [d691040e](https://github.com/openshift/whereabouts-cni/commit/d691040e509bb20c26b5e8366c0d6f3bb45a5e02) `sha256:318a4ef2a5f4c4916c80a7e416f3dbf43798e7d76f33e3f1fb4a732a9a92bce3`
* [must-gather](https://github.com/openshift/must-gather) git [8554213f](https://github.com/openshift/must-gather/commit/8554213fa214e8e165e7bedaf8d892bb824d83ef) `sha256:552eeed226ba2572ed471d2b7b216c1d2233c7e5323a8c9d0f3d38869f83abf6`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [5b233ea1](https://github.com/openshift/network-metrics-daemon/commit/5b233ea1d80733c1b00c6bad65dec0620dbf783a) `sha256:e0e30870aaf6a239b3c20e5afbd001e8ad671d15bf1726f8f144d7b7f14c7b4b`
* [network-tools](https://github.com/openshift/network-tools) git [5c4b905c](https://github.com/openshift/network-tools/commit/5c4b905c09ccd6edadb2ff359f45b70ed334f948) `sha256:6685f06c05dca64ae5a5be9834270959f90689abea457ecbf55bd56de6914389`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [8e75679a](https://github.com/openshift/cloud-provider-nutanix/commit/8e75679a965b80fee0332f8758471a7d3a75a4e8) `sha256:b0d6957b1ec3a1c0af1b6d2ceba413241a992f335d34ae1a1fd8ba551320b283`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [60559fdd](https://github.com/openshift/machine-api-provider-nutanix/commit/60559fdd7092dd29aa1c72797c49279aa2da39ee) `sha256:1ab9f7516a47848b4be5d1356b108b913ed991230cdbbfff071c04a24289c226`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [4c002a91](https://github.com/openshift/oauth-apiserver/commit/4c002a9114937ea9c20213f00892761c2013e60b) `sha256:8ab75d67981580ebc845fdafd92a195f046725c1f51cc3bfac9efa454eab0078`
* [oauth-server](https://github.com/openshift/oauth-server) git [42031614](https://github.com/openshift/oauth-server/commit/42031614956a88806d0503cd619b49975ad61682) `sha256:4b5b510c1cc44b062cdde76211798946d5998d60994ef69d27812f1fd420e39c`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [7fa546d4](https://github.com/openshift/openshift-apiserver/commit/7fa546d41a73b519e3af0e6428471c4aaf5c71e5) `sha256:d2e294fc7d7a1fd4ee2688904162bf5d763950baedebed774b20bdd694c8fbf7`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [26d20fea](https://github.com/openshift/openshift-controller-manager/commit/26d20feae8892f648f5b06ed3f5492fe6ffb4532) `sha256:7259a7009a8f29a4c0bc89b53732c3b827c0994bad5e415a4f1927f9a55d121b`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [e71e0996](https://github.com/openshift/openshift-state-metrics/commit/e71e09969f11a47c87b87c43b762ad1d01f6b04f) `sha256:079179c8f4923a18bd96db3ef28699254e38df525a16cdb98d4f8fe0f7660f95`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [710a2aea](https://github.com/openshift/cloud-provider-openstack/commit/710a2aea744fd04546d11ac781fb874694e33ad8) `sha256:833ce86ffa596fc9517bf01bbf8c1dc19a74635fb685b83f997a3a0341840e04`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [710a2aea](https://github.com/openshift/cloud-provider-openstack/commit/710a2aea744fd04546d11ac781fb874694e33ad8) `sha256:659079ac14e69241f8e97504a0554299f8bd310d6f09a135c2833d6068f03b5e`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [06d95461](https://github.com/openshift/cluster-api-provider-openstack/commit/06d95461581f9374ae05959b66fc50e2a17d077c) `sha256:1d509c2aa993f2efd8b0c9cadf720f731481bd673bc6bd92ff1e4be4b3d200f0`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [cbea7a9c](https://github.com/openshift/openstack-resource-controller/commit/cbea7a9cab145c32e2f347be69996b649893cc22) `sha256:b467d2fce6f80c930d7a4c0435ec07c822be7f6175d7c64d1344546aff2032a1`
* [operator-framework-tools](https://github.com/openshift/operator-framework-olm) git [de6260e5](https://github.com/openshift/operator-framework-olm/commit/de6260e53055e10e216ec668d692a35554ab0585) `sha256:70ce0a2b9020650648c3ca0c638baaeeea6ee7f40c852c2ea212d0a59b02c926`
* [operator-lifecycle-manager](https://github.com/openshift/operator-framework-olm) git [de6260e5](https://github.com/openshift/operator-framework-olm/commit/de6260e53055e10e216ec668d692a35554ab0585) `sha256:970764e097d6d94f457824eb62ca47d316cf8d89dcf6ea5f3b1b312b6869e1a6`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [38da2ef7](https://github.com/operator-framework/operator-marketplace/commit/38da2ef78cc429f67aea7fb4e589df21ac1ed327) `sha256:3ffa7621f6621397c1774a7d13fddab7da6779a0b3b7d2d8405109aee90f6b21`
* [operator-registry](https://github.com/openshift/operator-framework-olm) git [de6260e5](https://github.com/openshift/operator-framework-olm/commit/de6260e53055e10e216ec668d692a35554ab0585) `sha256:c76c0af482621503008771e75adc266b74dfa743cf2b766921584fef0ddf4e0a`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [02959a8d](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/02959a8d7096501e240d1d9f65da90b87bac45b9) `sha256:c28620511aa6ad4075741fca9d7fef32a8bd38bc78bfee5449253dc7204d88aa`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [27747821](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/277478211cfc7302e9c09b41a0935fbba678614a) `sha256:f4eb8c00c93c620d435599c3c52d620215ae3537865a317690560fb7e92536a7`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [766c0952](https://github.com/openshift/cloud-provider-powervs/commit/766c0952fd19f8225fe59b2be8e8c8932b24ebd7) `sha256:5861962eb0ebc4cf31bde01f4fa84c8710b89e0c5cb1db57819e2a0d687bfc75`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [e88cf81d](https://github.com/openshift/machine-api-provider-powervs/commit/e88cf81dd9ad174f395b86f9cdc40fa30cb06bf4) `sha256:eb4c577ea14629145bde9b82a66f9e31f23e221d61f14aec348f256a24eb5f4f`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [c4c99a30](https://github.com/openshift/prom-label-proxy/commit/c4c99a3071808f466ee6c3d7b7fa87108b457feb) `sha256:a3e0d0252b15b79549ae301070517323cd789c27bc1accb4cdd17ed2dc8d8e95`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [70e38466](https://github.com/openshift/prometheus-operator/commit/70e38466b9b9143f48283dab8bd0c227f35efe69) `sha256:a3e480f95d6a083be36b411824eeb781a767cb4c9f75e30a9dd7973c6fccf5a7`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [6c4fc012](https://github.com/openshift/node_exporter/commit/6c4fc0126407c8404b8604faa2f1230f385b9f44) `sha256:429452cdb2f68e6f485b5a739b87e3d361d01b82b6c3637d7e546179cc1bd8d7`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [70e38466](https://github.com/openshift/prometheus-operator/commit/70e38466b9b9143f48283dab8bd0c227f35efe69) `sha256:c0770514f4453914a4c3f66856d982add4c329ba9adb1052884a5ecc7943aaaf`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [70e38466](https://github.com/openshift/prometheus-operator/commit/70e38466b9b9143f48283dab8bd0c227f35efe69) `sha256:9643d937edab5d4693cb07d82fea661e708d5a590dd73cd4f3e268e3a4b19a3a`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [55f77ca4](https://github.com/openshift/route-controller-manager/commit/55f77ca4cf0328b7c4fd7736bce79ebe171a9b6b) `sha256:4f604dd93e5b6cf9ae48babbd0ab69b00b0a633c20dcf964d154d2c829415964`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [9fff46a5](https://github.com/openshift/service-ca-operator/commit/9fff46a576033685f66fbb1121eb0a2f134a29be) `sha256:b6c9cb4fd5e352e927acc1fa7c427958a41827c04b91d669ff49aabd41f1d1f9`
* [telemeter](https://github.com/openshift/telemeter) git [c2ffb0a7](https://github.com/openshift/telemeter/commit/c2ffb0a7035e504a4ddc7292e4d12b7490eab0d4) `sha256:98d419bbc01dab29dae755446191f7c90f050583de7054c61870795c91d87aed`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [8e176cec](https://github.com/openshift/volume-data-source-validator/commit/8e176cec394709cac728423cbbb6c3c914be8485) `sha256:a81b335062f2fb3c03c2eb5d96111b6bdb96f9cc6af16d9abbca54caed3c2bfd`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [39008107](https://github.com/openshift/cloud-provider-vsphere/commit/39008107b1463e3299b0d60c3ac1f7e71ad3e014) `sha256:b168749c354daa48279ab0742625de0858a70027a06939fa4a197b2fad3fe9f8`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [ac542b5a](https://github.com/openshift/cluster-api-provider-vsphere/commit/ac542b5afbd9a3897cda34e7ea1852b61c945e36) `sha256:e35e347cb066a0029d058004701a17e47e3666cf04a2851a48c8ad5aa5ee7f4b`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [438d5aad](https://github.com/openshift/vsphere-problem-detector/commit/438d5aad88be4f7d9237d87ed70589e1ebaf18f8) `sha256:1ff0aff5101b877e9ceaa845d0107bb08d2bf7f6cdf3c38df902a77af4ed718a`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/975f8f5389c097d37bbc0481f3276096ecac088a)

* [AGENT-1559](https://issues.redhat.com/browse/AGENT-1559): Remove LSO and LVMS as CNV operator dependencies [#10666](https://github.com/openshift/assisted-service/pull/10666)
* [OCPBUGS-98693](https://issues.redhat.com/browse/OCPBUGS-98693): PATCH /v2/clusters/{id} does not return updated operator_bundles [#10608](https://github.com/openshift/assisted-service/pull/10608)
* [OCPBUGS-93786](https://issues.redhat.com/browse/OCPBUGS-93786): Simplify IRI api dependency [#10539](https://github.com/openshift/assisted-service/pull/10539)
* [OCPBUGS-92056](https://issues.redhat.com/browse/OCPBUGS-92056): Stop setting DevPreviewNoUpgrade for TNF clusters [#10516](https://github.com/openshift/assisted-service/pull/10516)
* [OCPBUGS-90638](https://issues.redhat.com/browse/OCPBUGS-90638): Add sourcedir /run/chrony-dhcp to generated chrony.conf [#10488](https://github.com/openshift/assisted-service/pull/10488)
* [Full changelog](https://github.com/openshift/assisted-service/compare/8a98e5cd5e866b638a155a9d8b8b2d01555e13e7...975f8f5389c097d37bbc0481f3276096ecac088a)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/753d625f3417752aabb1cf7088f311da4ec43da3)

* [OCPBUGS-84392](https://issues.redhat.com/browse/OCPBUGS-84392): Bump go-jose in v4.22 [#1488](https://github.com/openshift/assisted-installer-agent/pull/1488)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/f562f3539125da83145eb1012ea8a4f4d62d0807...753d625f3417752aabb1cf7088f311da4ec43da3)


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/b248dc6cf9bb8a82fe99a2909caeaa74c025acce)

* [OCPBUGS-99025](https://issues.redhat.com/browse/OCPBUGS-99025): Bump dompurify to 3.4.7+ in 4.22 (#3895) [#3895](https://github.com/openshift-assisted/assisted-installer-ui/pull/3895)
* [OCPBUGS-91629](https://issues.redhat.com/browse/OCPBUGS-91629): Bump ws to 8.21.0 for CVE-2026-45736 (#3906) [#3906](https://github.com/openshift-assisted/assisted-installer-ui/pull/3906)
* [OCPBUGS-96710](https://issues.redhat.com/browse/OCPBUGS-96710): Bump basic-ftp to 5.3.1 for CVE-2026-44240 (#3823) [#3823](https://github.com/openshift-assisted/assisted-installer-ui/pull/3823)
* [CVE-2026](https://issues.redhat.com/browse/CVE-2026): 59873 openshift4/ose-agent-installer-ui-rhel9: node-tar: Denial of Service via crafted gzip bomb [openshift-4.22] (#3890) [#3890](https://github.com/openshift-assisted/assisted-installer-ui/pull/3890)
* Update OWNERS file (#3883) [#3883](https://github.com/openshift-assisted/assisted-installer-ui/pull/3883)
* [OCPBUGS-98431](https://issues.redhat.com/browse/OCPBUGS-98431): Bump js-yaml to 4.3.0 in 4.22 (#3865) [#3865](https://github.com/openshift-assisted/assisted-installer-ui/pull/3865)
* Apply patches (#3873) [#3873](https://github.com/openshift-assisted/assisted-installer-ui/pull/3873)
* [MGMT-24444](https://issues.redhat.com/browse/MGMT-24444): Apply sentence case to networking management type labels … (#3747) (#3871) [#3747](https://github.com/openshift-assisted/assisted-installer-ui/pull/3747)
* [MGMT-24152](https://issues.redhat.com/browse/MGMT-24152): UI allows editing pull secret in draft cluster (#3662) (#3870) [#3662](https://github.com/openshift-assisted/assisted-installer-ui/pull/3662)
* [OCPBUGD-89707](https://issues.redhat.com/browse/OCPBUGD-89707): bump form-data from 4.0.5 to 4.0.6 to address CVE-2026-12143 (#3869) [#3869](https://github.com/openshift-assisted/assisted-installer-ui/pull/3869)
* patch CVE-2026-9277 and CVE-2026-42338 via yarn resolutions (#3851) [#3851](https://github.com/openshift-assisted/assisted-installer-ui/pull/3851)
* AGENT-1519 | [Below-the-sea UI] Allow the user to select IPv6 in the Networking Stack Type field (#3806) [#3806](https://github.com/openshift-assisted/assisted-installer-ui/pull/3806)
* [MGMT-23950](https://issues.redhat.com/browse/MGMT-23950): [Staging] [UI] - Cluster name missing in page header for draft clusters (#3669) (#3835) [#3669](https://github.com/openshift-assisted/assisted-installer-ui/pull/3669)
* Fix disk encryption parsing for cluster details (#3737) (#3843) [#3737](https://github.com/openshift-assisted/assisted-installer-ui/pull/3737)
* [MGMT-19002](https://issues.redhat.com/browse/MGMT-19002): [nmstate] UI form view missing autoconf field for ipv6 (#3681) (#3836) [#3681](https://github.com/openshift-assisted/assisted-installer-ui/pull/3681)
* Tweak discovery ISO modal sizing (#3792) (#3846) [#3792](https://github.com/openshift-assisted/assisted-installer-ui/pull/3792)
* [MGMT-23490](https://issues.redhat.com/browse/MGMT-23490): Refactor Troubleshooting Web Console (#3688) (#3839) [#3688](https://github.com/openshift-assisted/assisted-installer-ui/pull/3688)
* [OCPBUGS-88249](https://issues.redhat.com/browse/OCPBUGS-88249), [OCPBUGS-88400](https://issues.redhat.com/browse/OCPBUGS-88400): Ensure axios version is resolved to 1.18.1 (#3857) [#3857](https://github.com/openshift-assisted/assisted-installer-ui/pull/3857)
* Pull secret appears editable in draft cluster but changes are not applied (#3597) (#3831) [#3597](https://github.com/openshift-assisted/assisted-installer-ui/pull/3597)
* [MGMT-24099](https://issues.redhat.com/browse/MGMT-24099): UI redirects to Custom Manifest page before host discovery when cluster is OCI platform (#3739) (#3844) [#3739](https://github.com/openshift-assisted/assisted-installer-ui/pull/3739)
* Fix machine network autoselect to work with IPv6 only clusters (#3813) (#3848) [#3813](https://github.com/openshift-assisted/assisted-installer-ui/pull/3813)
* Fix nested expandable sections (#3798) [#3798](https://github.com/openshift-assisted/assisted-installer-ui/pull/3798)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/043f7fe6a4787dbd4e0e334d468fe3bb4a2a4d38...b248dc6cf9bb8a82fe99a2909caeaa74c025acce)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/672a5f3fcbfb6224bb2619bb465532f86af8ce23)

* [AGENT-1568](https://issues.redhat.com/browse/AGENT-1568): Add lvms-operator to config [#324](https://github.com/openshift/agent-installer-utils/pull/324)
* [OCPBUGS-99906](https://issues.redhat.com/browse/OCPBUGS-99906): Update Konflux references [#302](https://github.com/openshift/agent-installer-utils/pull/302)
* [OCPBUGS-99556](https://issues.redhat.com/browse/OCPBUGS-99556): Use agent-preinstall-image-builder from quay-proxy [#321](https://github.com/openshift/agent-installer-utils/pull/321)
* [OCPBUGS-98743](https://issues.redhat.com/browse/OCPBUGS-98743): Update cluster-logging and loki operator versions [#316](https://github.com/openshift/agent-installer-utils/pull/316)
* [OCPBUGS-89320](https://issues.redhat.com/browse/OCPBUGS-89320): bump mtv-operator to release-v2.12 [#310](https://github.com/openshift/agent-installer-utils/pull/310)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/abf81a7f11af9f3050c151cd167dcfc4f9709368...672a5f3fcbfb6224bb2619bb465532f86af8ce23)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/2dc8bfba20a785131909895e590966832621ae38)

* [OCPBUGS-91947](https://issues.redhat.com/browse/OCPBUGS-91947): maxOpenShiftVersion should be bumped to 5.0 [#572](https://github.com/openshift/csi-operator/pull/572)
* [Full changelog](https://github.com/openshift/csi-operator/compare/08c62f7e711ae56f7b5b219704744dae1830a801...2dc8bfba20a785131909895e590966832621ae38)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/a17a3e3eb36b14f0348b003018879a32394c7264)

* [OCPBUGS-88485](https://issues.redhat.com/browse/OCPBUGS-88485): Bump golang.org/x/net from v0.49.0 to v0.55.0 [#193](https://github.com/openshift/cloud-provider-azure/pull/193)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/0e3fc8da5db48485284bd12123268d8e5040f0d3...a17a3e3eb36b14f0348b003018879a32394c7264)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/cfed1785cb39a7448347485dba95ef4364095b64)

* [OCPBUGS-83633](https://issues.redhat.com/browse/OCPBUGS-83633): Bump spdystream to v0.5.1 [#150](https://github.com/openshift/azure-disk-csi-driver/pull/150)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/799ce30e63a4dd3ac74b391e494dc8b50066644f...cfed1785cb39a7448347485dba95ef4364095b64)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/be827be84a2f772e7482889dba45cbc9d9fd32f8)

* [OCPBUGS-86996](https://issues.redhat.com/browse/OCPBUGS-86996): Don't permanently fail Machines after provisioning [#195](https://github.com/openshift/machine-api-provider-azure/pull/195)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/4123dfb0d75ef84c7f32b85ed2e4e5e95a3b8aa0...be827be84a2f772e7482889dba45cbc9d9fd32f8)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/b89b386a406430674b55f4494e828240e445ebb2)

* [AGENT-1546](https://issues.redhat.com/browse/AGENT-1546): Backport NoRegistryClusterInstall feature to release-4.22 [#10683](https://github.com/openshift/installer/pull/10683)
* [OCPBUGS-87814](https://issues.redhat.com/browse/OCPBUGS-87814): [release-4.22] Add omitempty to vSphere and Nutanix MachinePool slice fields [#10606](https://github.com/openshift/installer/pull/10606)
* [OCPBUGS-95555](https://issues.redhat.com/browse/OCPBUGS-95555), [OCPBUGS-99017](https://issues.redhat.com/browse/OCPBUGS-99017): bump golang.org/x/crypto to 0.52.0 [#10695](https://github.com/openshift/installer/pull/10695)
* [OCPBUGS-98982](https://issues.redhat.com/browse/OCPBUGS-98982): Update RHCOS-release-4.22 bootimage metadata to 9.8.20260715-1 / 10.2.20260715-0 [#10692](https://github.com/openshift/installer/pull/10692)
* [OCPBUGS-98701](https://issues.redhat.com/browse/OCPBUGS-98701): cluster-api: disable diagnostics endpoint for local CAPI controllers [#10685](https://github.com/openshift/installer/pull/10685)
* [OCPBUGS-87812](https://issues.redhat.com/browse/OCPBUGS-87812): [release-4.22] fix: reset associatedVCenter in failure domain validation loop [#10604](https://github.com/openshift/installer/pull/10604)
* [OCPBUGS-97964](https://issues.redhat.com/browse/OCPBUGS-97964): destroy/aws: delete vpc endpoints earlier [#10674](https://github.com/openshift/installer/pull/10674)
* no-jira: images: bump UPI image dependencies to 4.22 [#10582](https://github.com/openshift/installer/pull/10582)
* [Full changelog](https://github.com/openshift/installer/compare/0e39bcd8a1ab4b7aa951b287b0290c94e606cbeb...b89b386a406430674b55f4494e828240e445ebb2)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/40d590359685e15514694d74ff990825bfc889f7)

* [OCPBUGS-94109](https://issues.redhat.com/browse/OCPBUGS-94109): cherry-pick reconciler optimizations [#503](https://github.com/openshift/baremetal-operator/pull/503)
* [OCPBUGS-97940](https://issues.redhat.com/browse/OCPBUGS-97940): Add BMH finalizer on PreprovisioningImage [#505](https://github.com/openshift/baremetal-operator/pull/505)
* [OCPBUGS-87963](https://issues.redhat.com/browse/OCPBUGS-87963): Fix preprovisioning network Secret lifecycle during BMH deletion [#491](https://github.com/openshift/baremetal-operator/pull/491)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/c5e5048987427f58d3ca76238537e74bd3175e0f...40d590359685e15514694d74ff990825bfc889f7)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/7ec2e14b74e700fec86dc0936a61f6c12b79d083)

* [OCPBUGS-98547](https://issues.redhat.com/browse/OCPBUGS-98547): bump x/crypto to the latest version [#2309](https://github.com/openshift/oc/pull/2309)
* [Full changelog](https://github.com/openshift/oc/compare/062bc5449c4987c92c76da4d315ef4969c22d638...7ec2e14b74e700fec86dc0936a61f6c12b79d083)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/c69fe7e078ad2e51f8352af04ff45c54a6a11e1d)

* NO-JIRA: Revert "OCPBUGS-87828: Scope minted AWS IAM policies to cluster-owned resources" [#1059](https://github.com/openshift/cloud-credential-operator/pull/1059)
* [OCPBUGS-87828](https://issues.redhat.com/browse/OCPBUGS-87828): Scope minted AWS IAM policies to cluster-owned resources [#1045](https://github.com/openshift/cloud-credential-operator/pull/1045)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/c23bddf58e561b725ab5eb012252091e7a472084...c69fe7e078ad2e51f8352af04ff45c54a6a11e1d)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/71ed283b2df9d9f0210c8258fb033f59ff42d09b)

* [OCPBUGS-99501](https://issues.redhat.com/browse/OCPBUGS-99501): Apply cluster TLS profile to ironic-proxy container [#635](https://github.com/openshift/cluster-baremetal-operator/pull/635)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/5805e17a895ac569decd193153d45662ede5fc6f...71ed283b2df9d9f0210c8258fb033f59ff42d09b)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/5430ff7a34d4c0a946740dcdcd98690c14c63cf9)

* [OCPBUGS-96609](https://issues.redhat.com/browse/OCPBUGS-96609): Bump golang.org/x/net to v0.56.0 to fix CVE-2026-27136 [#624](https://github.com/openshift/cluster-capi-operator/pull/624)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/b84112efbe1a3f34cbabe262335be28595041afc...5430ff7a34d4c0a946740dcdcd98690c14c63cf9)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/b99c3d88b0e7b125f0340bb5d8e3333fa3940a60)

* [OCPBUGS-94184](https://issues.redhat.com/browse/OCPBUGS-94184): OCPBUGS-65582: [release-4.22] OCPBUGS-65582: manifests: Shift operator Deployment and ClusterOperator after CredentialsRequests [#484](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/484)
* [SPLAT-2794](https://issues.redhat.com/browse/SPLAT-2794): Create OTE Binary and add vSphere hybrid e2e tests [#471](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/471)
* [OCPBUGS-92656](https://issues.redhat.com/browse/OCPBUGS-92656): e2e/ccm-aws-ote: support to dual-stack IPv6 primary [#480](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/480)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/1eccfe33d83686e74769ea196660b8d09d249b04...b99c3d88b0e7b125f0340bb5d8e3333fa3940a60)


### [cluster-config-api](https://github.com/openshift/api/tree/57eb58a15422da2e90e6da0974350245cc994e69)

* [AGENT-1544](https://issues.redhat.com/browse/AGENT-1544): Backport NoRegistryClusterInstall feature to release-4.22 [#2930](https://github.com/openshift/api/pull/2930)
* [OCPBUGS-98222](https://issues.redhat.com/browse/OCPBUGS-98222): add new serviceAccountToken fs type [#2922](https://github.com/openshift/api/pull/2922)
* [Full changelog](https://github.com/openshift/api/compare/694421e64aeeae4374e7e7394014ad40ab5a1f30...57eb58a15422da2e90e6da0974350245cc994e69)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/55dea4dc947da2d8a9c1ffba451a41c3b3662718)

* [OCPBUGS-87968](https://issues.redhat.com/browse/OCPBUGS-87968): Fixed issue where nameserver is not set when recreating cpms [#409](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/409)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/b2e26b937e7f6dab36b63ace9c8453ba9654011c...55dea4dc947da2d8a9c1ffba451a41c3b3662718)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/4847d2e09adb887610a0e18061bbf508e17f6ee3)

* [OCPBUGS-88472](https://issues.redhat.com/browse/OCPBUGS-88472): Fix group snapshots on HyperShift [#280](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/280)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/108f37f0e378accc322cbeb68136ec500ec35b94...4847d2e09adb887610a0e18061bbf508e17f6ee3)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/a31932d8824103b051a37a0197397d53769f2ee6)

* [OCPBUGS-90542](https://issues.redhat.com/browse/OCPBUGS-90542): fix etcd operator deadlock when etcd-endpoints configmap is stale [#1636](https://github.com/openshift/cluster-etcd-operator/pull/1636)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/2674d1c3f18e9ec17b8f6b76eadbf35d7ea0d8fb...a31932d8824103b051a37a0197397d53769f2ee6)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/e26c93f0ffdee3272b8fc74e7f1486be25f5d59c)

* [OCPBUGS-97563](https://issues.redhat.com/browse/OCPBUGS-97563): Detect orphaned OSSM subscription after noOLM migration [#1495](https://github.com/openshift/cluster-ingress-operator/pull/1495)
* [OCPBUGS-91967](https://issues.redhat.com/browse/OCPBUGS-91967): Guard OLM watches with capability check in gatewayclass controller [#1481](https://github.com/openshift/cluster-ingress-operator/pull/1481)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/84ebd6ef9374b0a05e83545d6334dd79c54a7861...e26c93f0ffdee3272b8fc74e7f1486be25f5d59c)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/e74be78bb4e9224b0920ad505a7e85d3afb4706e)

* [OCPBUGS-99748](https://issues.redhat.com/browse/OCPBUGS-99748): fall back to kube-system/global-pull-secret for telemeter-client token [#3001](https://github.com/openshift/cluster-monitoring-operator/pull/3001)
* [OCPBUGS-93722](https://issues.redhat.com/browse/OCPBUGS-93722): [release-4.22] Prometheus: Information disclosure of Azure OAuth client secret via config API [#2976](https://github.com/openshift/cluster-monitoring-operator/pull/2976)
* [OCPBUGS-92193](https://issues.redhat.com/browse/OCPBUGS-92193): set Prometheus shards value explicitly [#2974](https://github.com/openshift/cluster-monitoring-operator/pull/2974)
* [OCPBUGS-88321](https://issues.redhat.com/browse/OCPBUGS-88321): fix(TestDocExamples) flake: use internal registry for test pods [#2965](https://github.com/openshift/cluster-monitoring-operator/pull/2965)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/d88243d9f9a0e6a6d1ff3855a336576fefa3a4c8...e74be78bb4e9224b0920ad505a7e85d3afb4706e)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/c1ea3224b639ac2ee98b4f4590a40474976aac5e)

* [OCPBUGS-97939](https://issues.redhat.com/browse/OCPBUGS-97939): bump containernetworking/cni v0.8.0 -> v1.3.0 [#3044](https://github.com/openshift/cluster-network-operator/pull/3044)
* [OCPBUGS-86033](https://issues.redhat.com/browse/OCPBUGS-86033): Revert "[release-4.22] OCPBUGS-90721: NVIDIA-596: Enable dpu healthcheck" [#3042](https://github.com/openshift/cluster-network-operator/pull/3042)
* [OCPBUGS-84739](https://issues.redhat.com/browse/OCPBUGS-84739): Use dedicated service accounts for multus pods [#2985](https://github.com/openshift/cluster-network-operator/pull/2985)
* [OCPBUGS-90721](https://issues.redhat.com/browse/OCPBUGS-90721): NVIDIA-596: Enable dpu healthcheck [#3009](https://github.com/openshift/cluster-network-operator/pull/3009)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/0f1151ea0db94220ae0615162bcad1e2e8f838c2...c1ea3224b639ac2ee98b4f4590a40474976aac5e)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/169b483912b6e42841ffa940a008b22f5ce10a1d)

* [OCPBUGS-98400](https://issues.redhat.com/browse/OCPBUGS-98400): E2E: Add functional test cases checking GOMAXPROCS [#1561](https://github.com/openshift/cluster-node-tuning-operator/pull/1561)
* [OCPBUGS-98062](https://issues.redhat.com/browse/OCPBUGS-98062): E2E: Fix tuned active profile check for wrapped performance profiles [#1559](https://github.com/openshift/cluster-node-tuning-operator/pull/1559)
* [OCPBUGS-87153](https://issues.redhat.com/browse/OCPBUGS-87153): E2E:  Refactor OVS affinity tests into shared helpers and add new workload-partitioning and control-plane reboot test cases. [#1537](https://github.com/openshift/cluster-node-tuning-operator/pull/1537)
* [OCPBUGS-93924](https://issues.redhat.com/browse/OCPBUGS-93924): Let cri-o manage the GOMAXPROC for burstable pods [#1555](https://github.com/openshift/cluster-node-tuning-operator/pull/1555)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/9553086d2f3b04f929609f225d61fd60daacae8d...169b483912b6e42841ffa940a008b22f5ce10a1d)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/f66065f7ae39fefe3058d72aa100d41d4327a407)

* [OCPBUGS-94187](https://issues.redhat.com/browse/OCPBUGS-94187): Scale to replicas=2 and enable PDB on HighlyAvailable topology [release-4.22] [#215](https://github.com/openshift/cluster-olm-operator/pull/215)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/d131450b2645623089b26353a309015c95c8871c...f66065f7ae39fefe3058d72aa100d41d4327a407)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/2e306e143051492a84c5e47a7b3126e096fdf76a)

* [OCPBUGS-98222](https://issues.redhat.com/browse/OCPBUGS-98222): add serviceAccountToken volume type to psalabelsyncer [#192](https://github.com/openshift/cluster-policy-controller/pull/192)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/44985a1306411101c84dd5081598fc928b432321...2e306e143051492a84c5e47a7b3126e096fdf76a)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/191a6aec444bfdbe5d70f7a23a20ee2fd25b7080)

* [OKD-379](https://issues.redhat.com/browse/OKD-379): Fix missing namespace in database template image triggers [#701](https://github.com/openshift/cluster-samples-operator/pull/701)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/317b21a930d074951c27c45c77c02ea211c43f14...191a6aec444bfdbe5d70f7a23a20ee2fd25b7080)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/9b55234a27cfd62921270073f2464ec294132b2d)

* [OCPBUGS-98572](https://issues.redhat.com/browse/OCPBUGS-98572): Tolerate unknown template fields during payload loading [#1421](https://github.com/openshift/cluster-version-operator/pull/1421)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/7de363f2a12bb17c6703c77dec5b34760b3292db...9b55234a27cfd62921270073f2464ec294132b2d)


### [console](https://github.com/openshift/console/tree/03f7fa51d36e25ca0b008d206d52b1449d43049b)

* [OCPBUGS-99545](https://issues.redhat.com/browse/OCPBUGS-99545): '0 B' is shown on details page when create pvc with 'EiB' unit [#16807](https://github.com/openshift/console/pull/16807)
* [OCPBUGS-99548](https://issues.redhat.com/browse/OCPBUGS-99548): Incorrect translations for 'CatalogSources' and 'OperatorGroups' in l… [#16809](https://github.com/openshift/console/pull/16809)
* [OCPBUGS-99259](https://issues.redhat.com/browse/OCPBUGS-99259): Disable Knative e2e Cypress tests in CI [#16784](https://github.com/openshift/console/pull/16784)
* [OCPBUGS-98437](https://issues.redhat.com/browse/OCPBUGS-98437): CVE-2026-59869 bump js-yaml [#16768](https://github.com/openshift/console/pull/16768)
* [OCPBUGS-97600](https://issues.redhat.com/browse/OCPBUGS-97600): Fix devfile sample import by adding fallback for parent resolution failures [#16706](https://github.com/openshift/console/pull/16706)
* [OCPBUGS-88028](https://issues.redhat.com/browse/OCPBUGS-88028): Bump follow-redirects from 1.15.3 to 1.16.0 to fix CVE-2026-40895 [#16665](https://github.com/openshift/console/pull/16665)
* [OCPBUGS-95580](https://issues.redhat.com/browse/OCPBUGS-95580): Fix unnecessary error on Node Terminal tab [#16696](https://github.com/openshift/console/pull/16696)
* [OCPBUGS-88748](https://issues.redhat.com/browse/OCPBUGS-88748): [release-4.22] webpack-dev-server: Information disclosure and denial of service via improper proxy configuration [#16656](https://github.com/openshift/console/pull/16656)
* [OCPBUGS-89337](https://issues.redhat.com/browse/OCPBUGS-89337): Use fixed artifacts directory to prevent stale temp dir accumulation [#16638](https://github.com/openshift/console/pull/16638)
* [OCPBUGS-90636](https://issues.redhat.com/browse/OCPBUGS-90636): Fix RoleBindings tab error for non-cluster-admin users [#16662](https://github.com/openshift/console/pull/16662)
* [OCPBUGS-90495](https://issues.redhat.com/browse/OCPBUGS-90495): Projects cannot be filtered by display name [#16652](https://github.com/openshift/console/pull/16652)
* [OCPBUGS-90110](https://issues.redhat.com/browse/OCPBUGS-90110): Fix ColumnManagementModal not showing NamespaceColumnHelpText [#16643](https://github.com/openshift/console/pull/16643)
* Fix for OCPBUGS-84470: CVE-2026-4800 [#16573](https://github.com/openshift/console/pull/16573)
* [Full changelog](https://github.com/openshift/console/compare/232ba651887b4fc6c9e2b84d7a60a338b94c63f7...03f7fa51d36e25ca0b008d206d52b1449d43049b)


### [console-operator](https://github.com/openshift/console-operator/tree/28918e0597663424fdae4626f0c756b8b5c6b987)

* [OCPBUGS-97828](https://issues.redhat.com/browse/OCPBUGS-97828), [OCPBUGS-97829](https://issues.redhat.com/browse/OCPBUGS-97829): Stabilize telemetry config to prevent continuous console pod rollouts [#1183](https://github.com/openshift/console-operator/pull/1183)
* [OCPBUGS-94186](https://issues.redhat.com/browse/OCPBUGS-94186): Add retry for transient API errors to prevent Degraded blips [#1181](https://github.com/openshift/console-operator/pull/1181)
* [OCPBUGS-94188](https://issues.redhat.com/browse/OCPBUGS-94188): use ObservedGeneration to determine Progressing status [#1180](https://github.com/openshift/console-operator/pull/1180)
* [OCPBUGS-92829](https://issues.redhat.com/browse/OCPBUGS-92829): Clean up old temp directories in downloads pod [#1177](https://github.com/openshift/console-operator/pull/1177)
* [Full changelog](https://github.com/openshift/console-operator/compare/cfe5f34a2ddcd7fdd907446fa67afb8bdf897995...28918e0597663424fdae4626f0c756b8b5c6b987)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/db552ad333e84b99ca279a9c01ca2d918ec00c99)

* [OCPBUGS-83942](https://issues.redhat.com/browse/OCPBUGS-83942): Bump grpc to 1.79.3 to address CVE-2026-33186 [#243](https://github.com/openshift/containernetworking-plugins/pull/243)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/659bc0aabf3b5cad58efc0aef1b9cc07abb1610a...db552ad333e84b99ca279a9c01ca2d918ec00c99)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/2d611ab4a7c6fa227a72d54c7ac88530d2c8513b)

* [OCPBUGS-84435](https://issues.redhat.com/browse/OCPBUGS-84435): Bump github.com/moby/spdystream to v0.5.1 in 4.22 [#136](https://github.com/openshift/csi-external-provisioner/pull/136)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/3b79aefc35a504ccef3f36f6e43aafbdd3301341...2d611ab4a7c6fa227a72d54c7ac88530d2c8513b)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/af8f30136791fa3f3dc9e5638bdb062db133bbbd)

* [OCPBUGS-97939](https://issues.redhat.com/browse/OCPBUGS-97939): bump containernetworking/cni to v1.3.0 [#103](https://github.com/openshift/egress-router-cni/pull/103)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/5e0f8d1b545899fda27c5e1cc8707d33cba1b534...af8f30136791fa3f3dc9e5638bdb062db133bbbd)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/a3177b3b89764aeb87469936bf4fe8f708d88eb7)

* [OCPBUGS-90148](https://issues.redhat.com/browse/OCPBUGS-90148): Rebase v1.35.6 in release-4.22 [#2707](https://github.com/openshift/kubernetes/pull/2707)
* [OCPBUGS-93787](https://issues.redhat.com/browse/OCPBUGS-93787): backport kubernetes/conformance umbrella suite [#2705](https://github.com/openshift/kubernetes/pull/2705)
* [Full changelog](https://github.com/openshift/kubernetes/compare/7250fd5b9e6ffa2f127d4ae559e4adf1100d10b9...a3177b3b89764aeb87469936bf4fe8f708d88eb7)


### [hypershift](https://github.com/openshift/hypershift/tree/f4c055d5912c111c8272ddff17614210637cd9f3)

* [OCPBUGS-90086](https://issues.redhat.com/browse/OCPBUGS-90086): [release-4.22] clear stale EtcdRecoveryActive failure condition when etcd is healthy [#8806](https://github.com/openshift/hypershift/pull/8806)
* [OCPBUGS-99554](https://issues.redhat.com/browse/OCPBUGS-99554): fix(backport): konnectivity agent auth to 4.22 [#9077](https://github.com/openshift/hypershift/pull/9077)
* [OCPBUGS-99299](https://issues.redhat.com/browse/OCPBUGS-99299): [release-4.22] OCPBUGS-86296: Propagate management cluster proxy env vars to konnectivity sidecar [#8592](https://github.com/openshift/hypershift/pull/8592)
* [CNTRLPLANE-3884](https://issues.redhat.com/browse/CNTRLPLANE-3884): Add spec.monitoring API for metrics forwarding [#8872](https://github.com/openshift/hypershift/pull/8872)
* [OCPBUGS-97921](https://issues.redhat.com/browse/OCPBUGS-97921): fix(nodepool): skip CNI-internal IPs in ClusterNetworkCIDRConflict check [#8948](https://github.com/openshift/hypershift/pull/8948)
* [OCPBUGS-98627](https://issues.redhat.com/browse/OCPBUGS-98627): Skip Azure topology LB scope override for ARO HCP IngressController [#8998](https://github.com/openshift/hypershift/pull/8998)
* [OCPBUGS-98220](https://issues.redhat.com/browse/OCPBUGS-98220): fix(cpo,hcco): prevent premature KAS convergence during KMS key rotation [release-4.22] [#8972](https://github.com/openshift/hypershift/pull/8972)
* [OCPBUGS-90083](https://issues.redhat.com/browse/OCPBUGS-90083): Fix NodePool reconciliation failure when updating mirrored immutable ConfigMaps [#8811](https://github.com/openshift/hypershift/pull/8811)
* [OCPBUGS-89236](https://issues.redhat.com/browse/OCPBUGS-89236): Handle CA bundle aggregation delay by requeuing revocation [#8746](https://github.com/openshift/hypershift/pull/8746)
* [CNTRLPLANE-3749](https://issues.redhat.com/browse/CNTRLPLANE-3749): feat(api,cpo): add observedGeneration to ControlPlaneComponentStatus [#8868](https://github.com/openshift/hypershift/pull/8868)
* [OCPBUGS-93921](https://issues.redhat.com/browse/OCPBUGS-93921): bump catalog image version cap from 4.21 to 4.22 [#8861](https://github.com/openshift/hypershift/pull/8861)
* [OCPBUGS-88325](https://issues.redhat.com/browse/OCPBUGS-88325): fix(cpo) delete terminated MCD pods to retry in-place upgrades [#8729](https://github.com/openshift/hypershift/pull/8729)
* [OCPBUGS-87364](https://issues.redhat.com/browse/OCPBUGS-87364): Gate Route watch on management cluster capability [#8692](https://github.com/openshift/hypershift/pull/8692)
* [CNTRLPLANE-3661](https://issues.redhat.com/browse/CNTRLPLANE-3661): add etcd data re-encryption after encryption key rotation (#8219) [#8790](https://github.com/openshift/hypershift/pull/8790)
* [OCPBUGS-88356](https://issues.redhat.com/browse/OCPBUGS-88356): fix(cpo): deduplicate VPC endpoint subnets by AZ [#8724](https://github.com/openshift/hypershift/pull/8724)
* [CNTRLPLANE-3619](https://issues.redhat.com/browse/CNTRLPLANE-3619): backport API-driven Azure topology and private connectivity (Phase 1) [#8721](https://github.com/openshift/hypershift/pull/8721)
* [OCPBUGS-90563](https://issues.redhat.com/browse/OCPBUGS-90563): Fix metrics-proxy unbounded memory growth [#8788](https://github.com/openshift/hypershift/pull/8788)
* [OCPBUGS-89352](https://issues.redhat.com/browse/OCPBUGS-89352): build(operator): drop hypershift-no-cgo from operator container images [#8756](https://github.com/openshift/hypershift/pull/8756)
* [Full changelog](https://github.com/openshift/hypershift/compare/5cb873528a4bf4b181c7258516294f0a8d774345...f4c055d5912c111c8272ddff17614210637cd9f3)


### [insights-operator](https://github.com/openshift/insights-operator/tree/0168cccf812470293494ff72042c153c684af58c)

* [OCPBUGS-88026](https://issues.redhat.com/browse/OCPBUGS-88026): fall back to kube-system/global-pull-secret for Insights token [#1305](https://github.com/openshift/insights-operator/pull/1305)
* [Full changelog](https://github.com/openshift/insights-operator/compare/38043c4fbd619ee1d87b60b31f0ca9d073df328f...0168cccf812470293494ff72042c153c684af58c)


### [ironic](https://github.com/openshift/ironic-image/tree/b202ca3d80fc93a0828a82c8cde8e57d2bb0bb3b)

* [OCPBUGS-98873](https://issues.redhat.com/browse/OCPBUGS-98873): Selectively backport Redfish firmware update fix to 4.22 [#870](https://github.com/openshift/ironic-image/pull/870)
* [Full changelog](https://github.com/openshift/ironic-image/compare/6984e87571f14d42463e10acee6bae32f9294534...b202ca3d80fc93a0828a82c8cde8e57d2bb0bb3b)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/fd9f6409fd02f818101a27812d381941fd6a6bef)

* [OCPBUGS-95061](https://issues.redhat.com/browse/OCPBUGS-95061): Replace individual package removal with a single rpm -e loop [#282](https://github.com/openshift/ironic-agent-image/pull/282)
* [OCPBUGS-95061](https://issues.redhat.com/browse/OCPBUGS-95061): Replace dnf remove with rpm -e to prevent dependency removal [#270](https://github.com/openshift/ironic-agent-image/pull/270)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/0336e6383c98f4f0c6b35c71e00116d3c3160c43...fd9f6409fd02f818101a27812d381941fd6a6bef)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/6035d101dbc9a7fdd8861d864aeb6f66bacd964b)

* [OCPBUGS-99767](https://issues.redhat.com/browse/OCPBUGS-99767): Reinstall tzdata if /usr/share/zoneinfo is missing [#247](https://github.com/openshift/images/pull/247)
* [Full changelog](https://github.com/openshift/images/compare/edb8b1e6c5e949c0b470b2bdf7a32f17e53d2f71...6035d101dbc9a7fdd8861d864aeb6f66bacd964b)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/0a5ea07ca01263c4273a1a929854969e11a69bea)

* [OCPBUGS-87957](https://issues.redhat.com/browse/OCPBUGS-87957): embed timezone data in kube-state-metrics binary [#150](https://github.com/openshift/kube-state-metrics/pull/150)
* [OCPBUGS-87957](https://issues.redhat.com/browse/OCPBUGS-87957): fix: don't panic on CronJobs with unparseable schedules [#147](https://github.com/openshift/kube-state-metrics/pull/147)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/0111656f618a3eade677e214919077826db47192...0a5ea07ca01263c4273a1a929854969e11a69bea)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/90f14506c2d4fecfba2c355934bde87e6f101a20)

* [OCPBUGS-83883](https://issues.redhat.com/browse/OCPBUGS-83883): Bump google.golang.org/grpc to v1.79.3 [#107](https://github.com/openshift/kubevirt-csi-driver/pull/107)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/771b562d4875296007850a4d3709a7ae1c6ed3e2...90f14506c2d4fecfba2c355934bde87e6f101a20)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/0f69adf4303b705ff52c2b4c5fe05a52b27bf302)

* [OCPBUGS-99712](https://issues.redhat.com/browse/OCPBUGS-99712): Add TC 88940- Apply password only if changes exist [#6339](https://github.com/openshift/machine-config-operator/pull/6339)
* [OCPBUGS-98962](https://issues.redhat.com/browse/OCPBUGS-98962): [release4.22] MCO-1997: MCO-2297: MCO-2440 Add osImagestream test-cases [#6301](https://github.com/openshift/machine-config-operator/pull/6301)
* [OCPBUGS-93804](https://issues.redhat.com/browse/OCPBUGS-93804): move cleanUpDuplicatedMC to avoid double reboot on first updated Master node [#6240](https://github.com/openshift/machine-config-operator/pull/6240)
* [OCPBUGS-97904](https://issues.redhat.com/browse/OCPBUGS-97904): Inject proxy into MCC deployment [#6275](https://github.com/openshift/machine-config-operator/pull/6275)
* [OCPBUGS-96145](https://issues.redhat.com/browse/OCPBUGS-96145): Update AMI Whitelist [#6260](https://github.com/openshift/machine-config-operator/pull/6260)
* [OCPBUGS-89329](https://issues.redhat.com/browse/OCPBUGS-89329): Fix kubelet certificate wait loop in criometricsproxy.yaml [#6200](https://github.com/openshift/machine-config-operator/pull/6200)
* [OCPBUGS-93743](https://issues.redhat.com/browse/OCPBUGS-93743): Fix bootupd workaround in old nodes [#6239](https://github.com/openshift/machine-config-operator/pull/6239)
* [OCPBUGS-92026](https://issues.redhat.com/browse/OCPBUGS-92026): OCPEDGE-2474: TNF - Add fencing taint/untaint alert agent scripts [#6230](https://github.com/openshift/machine-config-operator/pull/6230)
* [OCPBUGS-92022](https://issues.redhat.com/browse/OCPBUGS-92022): MCO-2275: Migrate OS layering tests from openshift-tests-private [#6218](https://github.com/openshift/machine-config-operator/pull/6218)
* [release:4.22] OCPBUGS-88330: MCO-2209 MCO-2213 MCO-2207: Migrate security, daemon, and kernel TCs from mco.go [#6171](https://github.com/openshift/machine-config-operator/pull/6171)
* [OCPBUGS-91958](https://issues.redhat.com/browse/OCPBUGS-91958): Boot image skew check silently passes when MachineSets are reconcile-skipped [#6227](https://github.com/openshift/machine-config-operator/pull/6227)
* [OCPBUGS-91954](https://issues.redhat.com/browse/OCPBUGS-91954): Make vsphere template updates atomic [#6226](https://github.com/openshift/machine-config-operator/pull/6226)
* [OCPBUGS-88184](https://issues.redhat.com/browse/OCPBUGS-88184): Replace wildcard permissions with explicit verbs and resources in MCC ClusterRole [#6170](https://github.com/openshift/machine-config-operator/pull/6170)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/67efe85db36678a609e092dcdaae645a42ccf5a5...0f69adf4303b705ff52c2b4c5fe05a52b27bf302)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/e5342c9905a94069e6801737dd6aeddfb74bbac4)

* [OCPBUGS-87872](https://issues.redhat.com/browse/OCPBUGS-87872): Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs [#96](https://github.com/openshift/machine-os-images/pull/96)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/4843e69841263a99f7fbc05187557db408abf265...e5342c9905a94069e6801737dd6aeddfb74bbac4)


### [metallb-frr](https://github.com/openshift/frr/tree/1277b2387272397d3479d74d2d65112112f985b8)

* [OCPBUGS-86568](https://issues.redhat.com/browse/OCPBUGS-86568): Generate fallback BGP router-id on IPv6-only nodes [#133](https://github.com/openshift/frr/pull/133)
* [Full changelog](https://github.com/openshift/frr/compare/843347fdc9460e0fd064d68a003eae5459cac1fa...1277b2387272397d3479d74d2d65112112f985b8)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/cd7672c06e24c6d377df29d01d1b0015cd2aacd8)

* [OU-1240](https://issues.redhat.com/browse/OU-1240): Makefile and package.json to enable test-frontend-ci [#1094](https://github.com/openshift/monitoring-plugin/pull/1094)
* [OCPBUGS-99032](https://issues.redhat.com/browse/OCPBUGS-99032): Fix CVE-2026-49978 - bump DOMPurify to >= 3.4.7 [#1085](https://github.com/openshift/monitoring-plugin/pull/1085)
* [OCPBUGS-99234](https://issues.redhat.com/browse/OCPBUGS-99234): graph redirect query parameter [#1070](https://github.com/openshift/monitoring-plugin/pull/1070)
* [OU-651](https://issues.redhat.com/browse/OU-651): Fix AlertRules page to display user defined loki alerts [#1057](https://github.com/openshift/monitoring-plugin/pull/1057)
* Fix for OCPBUGS-89698: CVE-2026-12143 [#1053](https://github.com/openshift/monitoring-plugin/pull/1053)
* Fix for OCPBUGS-91628: CVE-2026-45736 [#1023](https://github.com/openshift/monitoring-plugin/pull/1023)
* NO-JIRA: fix unit test severitySort and incidents [#1036](https://github.com/openshift/monitoring-plugin/pull/1036)
* Fix for OCPBUGS-94005: CVE-2026-13676 [#1028](https://github.com/openshift/monitoring-plugin/pull/1028)
* [OU-1396](https://issues.redhat.com/browse/OU-1396): [release-4.22]  fix: use replace to set variables to avoid navigation trap [#1019](https://github.com/openshift/monitoring-plugin/pull/1019)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/3bd7c2092ee0fe8bbad7fb4006b41ff23755343a...cd7672c06e24c6d377df29d01d1b0015cd2aacd8)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/5ef2d3205f11fba65e3949c0c57897420a83974a)

* [OCPBUGS-97943](https://issues.redhat.com/browse/OCPBUGS-97943): Update OWNERS for release-4.22 [#119](https://github.com/openshift/bond-cni/pull/119)
* [Full changelog](https://github.com/openshift/bond-cni/compare/297eeb4320e07b18d559bc373b665479c760e8c7...5ef2d3205f11fba65e3949c0c57897420a83974a)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/3a16cc03ed13ab5fff25fe375aa54a7d509c275f)

* [OCPBUGS-92205](https://issues.redhat.com/browse/OCPBUGS-92205): Updated doc links based on release [#438](https://github.com/openshift/networking-console-plugin/pull/438)
* [OCPBUGS-92196](https://issues.redhat.com/browse/OCPBUGS-92196): fixed translations of pod column titles [#437](https://github.com/openshift/networking-console-plugin/pull/437)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/ab696d90af299db9098f1d3a9fed0a27e5ba3a8a...3a16cc03ed13ab5fff25fe375aa54a7d509c275f)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/b402a1dcbe2c2ef3bc7d14459a8f223e7a4811b7)

* [OCPBUGS-93565](https://issues.redhat.com/browse/OCPBUGS-93565): update x/crypto to v0.52.0 and x/net to v0.55.0 [#369](https://github.com/openshift/oauth-proxy/pull/369)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/f777d2b5c940422f9e506a8749ac1bcbecc389fe...b402a1dcbe2c2ef3bc7d14459a8f223e7a4811b7)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/bb277edfc4467c51fe540964e6a1f37fa327f957)

* [OCPBUGS-97946](https://issues.redhat.com/browse/OCPBUGS-97946): skip manifest list signatures [#1469](https://github.com/openshift/oc-mirror/pull/1469)
* [OCPBUGS-88484](https://issues.redhat.com/browse/OCPBUGS-88484): Include tag+digest images in both IDMS and ITMS [#1442](https://github.com/openshift/oc-mirror/pull/1442)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/41d68b1c1dbd3d16fab14bc101d9e28826362757...bb277edfc4467c51fe540964e6a1f37fa327f957)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/f4afcda086019efaa28f8b645d2b1646d9110cc9)

* [OCPBUGS-99298](https://issues.redhat.com/browse/OCPBUGS-99298): increase catalog HTTP client timeout from 10s to 5m [#768](https://github.com/openshift/operator-framework-operator-controller/pull/768)
* [OCPBUGS-94187](https://issues.redhat.com/browse/OCPBUGS-94187): enable OLMv1 topology-based deployment scaling e2e test [#761](https://github.com/openshift/operator-framework-operator-controller/pull/761)
* [OCPBUGS-94187](https://issues.redhat.com/browse/OCPBUGS-94187): Backport HA topology deployment scaling to release-4.22 [#758](https://github.com/openshift/operator-framework-operator-controller/pull/758)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/26b848969eabd4e1899439f40a4346552f08ff38...f4afcda086019efaa28f8b645d2b1646d9110cc9)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/74bd2dd2e7bc5b93e78b6b204012b6b7d981a4ba)

* [OCPBUGS-97826](https://issues.redhat.com/browse/OCPBUGS-97826): Revendor CAPO [#175](https://github.com/openshift/machine-api-provider-openstack/pull/175)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/8a8c354b99ce83e3c05a91358aadec09944c2fce...74bd2dd2e7bc5b93e78b6b204012b6b7d981a4ba)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/3fdca20426e61f0ae62daf23fee610e6546d0f01)

* [OCPBUGS-99043](https://issues.redhat.com/browse/OCPBUGS-99043): Branch Sync main to release-4.22 [07-16-2026] [#3304](https://github.com/openshift/ovn-kubernetes/pull/3304)
* [OCPBUGS-88733](https://issues.redhat.com/browse/OCPBUGS-88733), [OCPBUGS-88734](https://issues.redhat.com/browse/OCPBUGS-88734): Branch Sync main to release-4.22 [06-16-2026] [#3252](https://github.com/openshift/ovn-kubernetes/pull/3252)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/8d3b38cdbe7005e2f8443dc02b0e94b65a8f05e9...3fdca20426e61f0ae62daf23fee610e6546d0f01)


### [prometheus](https://github.com/openshift/prometheus/tree/13ce9de4694ded595ef1455dd836ba4033fed0ea)

* [OCPBUGS-93919](https://issues.redhat.com/browse/OCPBUGS-93919): fix(tsdb): temporarily ignore Direct IO enablement errors on unsupported filesystems [#339](https://github.com/openshift/prometheus/pull/339)
* [OCPBUGS-92818](https://issues.redhat.com/browse/OCPBUGS-92818): bump x/crypto, x/net, and otel dependencies to fix CVEs [#337](https://github.com/openshift/prometheus/pull/337)
* [OCPBUGS-88666](https://issues.redhat.com/browse/OCPBUGS-88666): remote: validate snappy decoded length before allocation in read endpoint [#330](https://github.com/openshift/prometheus/pull/330)
* [Full changelog](https://github.com/openshift/prometheus/compare/6e5d1aec83edd83e693019ba1e1767cb69d1c640...13ce9de4694ded595ef1455dd836ba4033fed0ea)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/31f561533ffa5d7d326a66bc06112a20e699f6aa)

* [OCPBUGS-99442](https://issues.redhat.com/browse/OCPBUGS-99442): embed tzdata in the alertmanager binary [#141](https://github.com/openshift/prometheus-alertmanager/pull/141)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/02dc3e9e55cf7fa0279e22762d6ace19bbc65fde...31f561533ffa5d7d326a66bc06112a20e699f6aa)


### [tests](https://github.com/openshift/origin/tree/4151956d13674fc7149514a063e1a5596e51caf0)

* [OCPBUGS-88711](https://issues.redhat.com/browse/OCPBUGS-88711): Backport node_e2e test migrations [#31306](https://github.com/openshift/origin/pull/31306)
* [AGENT-1549](https://issues.redhat.com/browse/AGENT-1549): Backport NoRegistryClusterInstall feature to release-4.22 [#31406](https://github.com/openshift/origin/pull/31406)
* [SPLAT-2802](https://issues.redhat.com/browse/SPLAT-2802): Added VVCDO OTE binary to extensionBinary list [#31321](https://github.com/openshift/origin/pull/31321)
* [SPLAT-2794](https://issues.redhat.com/browse/SPLAT-2794): Added 3CMO OTE binary to extensionBinary list [#31303](https://github.com/openshift/origin/pull/31303)
* [OCPBUGS-90522](https://issues.redhat.com/browse/OCPBUGS-90522): Use AdminPolicyBasedExternalRoute CR for external gateway test [#31317](https://github.com/openshift/origin/pull/31317)
* [OCPBUGS-87838](https://issues.redhat.com/browse/OCPBUGS-87838): support Parents field on origin test suites [#31270](https://github.com/openshift/origin/pull/31270)
* [OCPBUGS-92656](https://issues.redhat.com/browse/OCPBUGS-92656): bump openshift-tests-extension to fix klog stdout parsing on 4.22 [#31349](https://github.com/openshift/origin/pull/31349)
* [OCPBUGS-92048](https://issues.redhat.com/browse/OCPBUGS-92048): fix PDB AlwaysAllow test failure on IPv6-primary dualstack clusters [#31337](https://github.com/openshift/origin/pull/31337)
* [OCPBUGS-92047](https://issues.redhat.com/browse/OCPBUGS-92047): Fix AWS DualStack CI jobs consistently encounter 2 EgressFirewall Test Failures [#31336](https://github.com/openshift/origin/pull/31336)
* [Full changelog](https://github.com/openshift/origin/compare/4926856f1ea8d7174c59c0d289138027f3ea7c32...4151956d13674fc7149514a063e1a5596e51caf0)


### [thanos](https://github.com/openshift/thanos/tree/8938facdb517ad9fb2b0d94eaa3a3f5858f314f1)

* [OCPBUGS-92813](https://issues.redhat.com/browse/OCPBUGS-92813): Fix CVE-2026-39883 [#191](https://github.com/openshift/thanos/pull/191)
* [Full changelog](https://github.com/openshift/thanos/compare/5d9d0f387e5cc651470f27352b28674103bfdd77...8938facdb517ad9fb2b0d94eaa3a3f5858f314f1)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/64bdb1da6278139e148ec427a4d46c9ab4f49a58)

* [OCPBUGS-92190](https://issues.redhat.com/browse/OCPBUGS-92190): Rebase 3.6.2 on 422 [#188](https://github.com/openshift/vmware-vsphere-csi-driver/pull/188)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/ecd20781f41ed71552c05650c76021da57138b7d...64bdb1da6278139e148ec427a4d46c9ab4f49a58)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/9be965742961e7a84b0af8ff5ea17a852e015c98)

* [SPLAT-2802](https://issues.redhat.com/browse/SPLAT-2802): Port vSphere hybrid OTE to release-4.22 [#349](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/349)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/d3668c9a9510f189604343e817cc79ab23367f40...9be965742961e7a84b0af8ff5ea17a852e015c98)