# 4.22.10

Created: 2026-08-13 23:37:41 +0000 UTC

Image Digest: `sha256:171952b3f8295184cbc98cf89d4aed20e0fbfc06cc95e854d53e8a8a56156490`


## Changes from 4.22.5

### Components

* Kubectl 1.35.2
* Kubernetes upgraded from 1.35.5 to 1.35.6
* Kubernetes Tests 1.35.1
* Red Hat Enterprise Linux CoreOS 10.2 upgraded from 10.2.20260708-0 to 10.2.20260810-0


### Rebuilt images without code change

* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [753d625f](https://github.com/openshift/assisted-installer-agent/commit/753d625f3417752aabb1cf7088f311da4ec43da3) `sha256:9ee6f939b4999dd543be408dae93b1d3e4397a3f975d10e1dff356ea249f45cb`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [5e33c228](https://github.com/openshift/apiserver-network-proxy/commit/5e33c22867d59ddd9392a2c6b3194d2f3c6bdfc7) `sha256:fa7bbed5c71117ff334ffc0b606caa443505f518d8370b81d992810b51de81c8`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [b4bad3f8](https://github.com/openshift/cloud-provider-aws/commit/b4bad3f89f54ea5df70e49d1fbf3ea3cbc8e59a3) `sha256:a1ccfd846cdaee5abeb41f10044fa43c762c3dabd8a8dcb97e698bf0ec0779b4`
* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [9172366c](https://github.com/openshift/cluster-api-provider-aws/commit/9172366ccfbde3225e045b59587d38db655edd94) `sha256:72171cac0fa4b7252af5386be33a3484ac1465ecbc72606709ed1db5345630eb`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [51d6bc76](https://github.com/openshift/aws-ebs-csi-driver/commit/51d6bc760234ffccb0348937a5cfd70b326119b9) `sha256:721e81874c5adde2664d0a3296049fd8080f5dc22b27c96cf502193a4b5a8065`
* [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator) git [2dc8bfba](https://github.com/openshift/csi-operator/commit/2dc8bfba20a785131909895e590966832621ae38) `sha256:7c27f256071b19dcbe03083e20f92267d7e1af100cdace4cdc8ad832ad6512d9`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [f0be9c72](https://github.com/openshift/aws-karpenter-provider-aws/commit/f0be9c72e5bf25caeb2ca45c14e67e4d397a52cb) `sha256:796b1a6c8ae21c0be3f0c4b5b34bc2a549ab9080c07cbfd2ee8eac6ef47765c0`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [19e7b623](https://github.com/openshift/aws-encryption-provider/commit/19e7b623429799c9c549690a1b5ab499844411f9) `sha256:536a2a0219786a1cc18159149fef345e1114f2404e1bdfb903b0ed0555a12bd3`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [1a0ccbcf](https://github.com/openshift/machine-api-provider-aws/commit/1a0ccbcfc0a7dc06f3a494f0e2b78aa0a0256b9c) `sha256:53768e6b6e5ac278173e01a105c97330dc1b5c704937cf0fa552d5009e1b4784`
* [aws-node-termination-handler](https://github.com/openshift/aws-node-termination-handler) git [341ed3a0](https://github.com/openshift/aws-node-termination-handler/commit/341ed3a086925b17671c5349343fedf988a1139e) `sha256:d648d01e2ef0661ba41590d8068ed22daad45fb28ea961b6caa4b7cae47acd5a`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [82088287](https://github.com/openshift/aws-pod-identity-webhook/commit/8208828799b6c4f91fd9b80128668f7765599e84) `sha256:190f3e719e665ad560f26b18816390bb5123ffc5175e05f253e22039117d092b`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [a17a3e3e](https://github.com/openshift/cloud-provider-azure/commit/a17a3e3eb36b14f0348b003018879a32394c7264) `sha256:1783f79afd2cbe0d54a5af242229a21df27ce47f740d9924f5a2a2f70026600c`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [a17a3e3e](https://github.com/openshift/cloud-provider-azure/commit/a17a3e3eb36b14f0348b003018879a32394c7264) `sha256:ac8c7e92791a0b66c74689ea1af550aef5fac5e0f0c26906ebcd07daa915adf0`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [a6ffab6a](https://github.com/openshift/cluster-api-provider-azure/commit/a6ffab6a17878cb9b9eeaa6337c996989d1e7ee3) `sha256:3082b0a4a6f259207843fec2b94584868214d28ca662d57d799a54d5482d8f1c`
* [azure-disk-csi-driver-operator](https://github.com/openshift/csi-operator) git [2dc8bfba](https://github.com/openshift/csi-operator/commit/2dc8bfba20a785131909895e590966832621ae38) `sha256:fe0b303823d416cbc2c9ff33e46842d91535cb89608554ca36210ca34d524ae3`
* [azure-file-csi-driver-operator](https://github.com/openshift/csi-operator) git [2dc8bfba](https://github.com/openshift/csi-operator/commit/2dc8bfba20a785131909895e590966832621ae38) `sha256:7b760013d854e881a17f360454c56370fc22c790a7b8c9376f2f5de5796d591c`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [99b9a3a3](https://github.com/openshift/azure-kubernetes-kms/commit/99b9a3a33d8edfd0a2d2876aa7ef1382b2c75a39) `sha256:1929e4117b2aeacb5e9c637d27317f91508dcb80697de14fdb6c8aa99098a5ad`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [b44d4444](https://github.com/openshift/azure-service-operator/commit/b44d444422f5a7eb21b9ca65f3975a2d13ec9b36) `sha256:9dfe0d66c7bdf7e2d9cd13daaca7403597c07db10b0964516d4789c66a03b24c`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [a8fb3bf1](https://github.com/openshift/azure-workload-identity/commit/a8fb3bf1a6296d6cbf69142db458aa9b59cb3a45) `sha256:23ec539b2638ca667eefb6d9bb467bd3ef053606a8e6ba2295767e5efe8caccf`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [6481b520](https://github.com/openshift/cluster-api-provider-metal3/commit/6481b52008f0991912f80fdf9d74af3e631a7269) `sha256:881d1d63479bc03f5d7323fb158ff434e102fbe3e1d5813e80a470fed7b3511c`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [8d863b95](https://github.com/openshift/cluster-api-provider-baremetal/commit/8d863b9505a5cfc0b01e33f985a3edf9d3c69f4b) `sha256:e0a10601954914ebaa45dbff64d68dc978420d8f555831e49135905e361870c1`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [dca8cb1b](https://github.com/openshift/baremetal-runtimecfg/commit/dca8cb1be0cce1ce404dfd407ead1326a3c8bb40) `sha256:d5064b78b7f2974dda1850207cb8c8df312ab5bd4076d0d0359a5c0ea5363bd0`
* [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [c69fe7e0](https://github.com/openshift/cloud-credential-operator/commit/c69fe7e078ad2e51f8352af04ff45c54a6a11e1d) `sha256:34aec143a7edf0f41ed1c8e5da8dd2c814ebd9a706031aa455a68e1c80112910`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [2d69ad95](https://github.com/openshift/cloud-network-config-controller/commit/2d69ad953cfaa419e9b6221da9edb152ded91e0b) `sha256:1562a8ef8f006c294514dd555851f7c48870dc745a816cf34a32e33e96ee9b17`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [5a44cc2a](https://github.com/openshift/cluster-authentication-operator/commit/5a44cc2a8c36d144f8782e23f47bc31e2e4ead88) `sha256:033a3a2fe22c8e6db9a14d09d70964d6d16509abd6d33802c5b7781b09aab01e`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [260ea1b5](https://github.com/openshift/cluster-autoscaler-operator/commit/260ea1b5967f47768a0727e8c84d451dc9de5ced) `sha256:21bc794360ac56293164ab8667b88004c5d25379df595df2b91238500a2234f2`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [e6be0fdf](https://github.com/openshift/cluster-bootstrap/commit/e6be0fdfbf43883e2301dbf2d0eb3ab4a4f93383) `sha256:f48030e41ffeeaa64be230941e14f873ac72f7c7553f1cd69b1ea17afbe6bec7`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [f1718df9](https://github.com/openshift/cluster-api/commit/f1718df9c13b0cee5ede1b6354e29acc466607a4) `sha256:2ae8c9a4631f8e2c79be31004b405a969b87b655e969fc3bd851cfd15beea704`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [b99c3d88](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/b99c3d88b0e7b125f0340bb5d8e3333fa3940a60) `sha256:4cc450e1aacbb779931236c048bd80c27dcd3ab10a63f0d032a8be79e8f41f3e`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [e0c2428e](https://github.com/openshift/cluster-config-operator/commit/e0c2428e4618493ad9db0681e3b91444746ddf2c) `sha256:7b36a61109994c5c3c5f01790fa7b4b972fc9de1aefbe6c6b0d6a52f37525f50`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [55dea4dc](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/55dea4dc947da2d8a9c1ffba451a41c3b3662718) `sha256:d0d8f89c06ce8703a3f5a3fbcb376ac33aafc16e5dfbe21bea98e6e7118f6f9e`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [4847d2e0](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/4847d2e09adb887610a0e18061bbf508e17f6ee3) `sha256:3816a92c22a1f6b0e85da5e8cf5b1578160edba15885938512faf4835dc32dee`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [3d214118](https://github.com/openshift/cluster-dns-operator/commit/3d2141182243cde1ec6417bd005c76d29aa88a01) `sha256:705f56eff516ea49c9a1a756cd91eeeb2cd618ab5a10235c9fd270a1a34b8224`
* [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator) git [9c413cd4](https://github.com/openshift/cluster-kube-apiserver-operator/commit/9c413cd4dc8c3876cc40ee85c207bf9b143f106f) `sha256:120f418f82be28c193a1932f316c1a8ec732e1e41d41be08906e2ec566a509c4`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [95150ed5](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/95150ed5dbf11370b4a06e6959c77efa13768561) `sha256:1ef1f10a8713a17637a2a706f72dadbfe7b593283b55991410efed03db525ea8`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [51ea59ab](https://github.com/openshift/cluster-kube-scheduler-operator/commit/51ea59abd057d0cef56b29b8a74efc28411d5427) `sha256:d24ffbc35bbb4c0588101ed8653153e6c9186ca66335e17d8f5397a2312998e1`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [9afe6687](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/9afe66875bff8b5926f2bf6dec4eade1e4a09bab) `sha256:7ecfb6ff965d44d984ae1ce4ff7e9dd56ff2ce499ca84cacfafbd590b3016117`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [fa7bb022](https://github.com/openshift/cluster-machine-approver/commit/fa7bb0222038fdeb51ddeae57b4c193d1b44a0fa) `sha256:b6b3fcfde87b2cc32e65c8f0030785d91c15164900873c3a805c982fb1d2b235`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [f66065f7](https://github.com/openshift/cluster-olm-operator/commit/f66065f7ae39fefe3058d72aa100d41d4327a407) `sha256:782d7664f482ed920299340a7d4b004015edec5c167bef478f05b20476d2b761`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [2d2699e4](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/2d2699e4f3fabc80e402f4c090c8cf80c4517977) `sha256:72f4ebb1a15e42974499c57605a4495e33655420443d6afb4e72c9231dfeb9a8`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [191a6aec](https://github.com/openshift/cluster-samples-operator/commit/191a6aec444bfdbe5d70f7a23a20ee2fd25b7080) `sha256:e5c169e5ce0d11b2d7082c2ae6d6bf53f6da34555deb1dabc43b1f2d54a11559`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [3b5c59cc](https://github.com/openshift/cluster-update-keys/commit/3b5c59cc6461663751bc510b4f9f1954ed8c9b50) `sha256:9a161fb9e840818e96e87bfe50f695aaf458e473dc2c49ed55e0670b22d34e22`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [94e41c4c](https://github.com/openshift/configmap-reload/commit/94e41c4c6a5832dfd19750173d6544784ba235ec) `sha256:22b58ae9a49ec75d152755f9a2d8bb618fd1991365de54df8c21dd0b0041861e`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [db552ad3](https://github.com/openshift/containernetworking-plugins/commit/db552ad333e84b99ca279a9c01ca2d918ec00c99) `sha256:4e270b5b246416a9fa200e5d779d7a4b775236aadbea6f341aea3eee875c56ea`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [db552ad3](https://github.com/openshift/containernetworking-plugins/commit/db552ad333e84b99ca279a9c01ca2d918ec00c99) `sha256:fceaaa9b47035ff50bb04fea7ac040ca3d8effb200dc462bb7cadb7c6128b706`
* [coredns](https://github.com/openshift/coredns) git [9a71d9a6](https://github.com/openshift/coredns/commit/9a71d9a6b788437e755b5ed3bfad78c63fa7c6f4) `sha256:f02816882ad485fd1586f9c3d4573587feb62bf1c30a64689ce6157a13f1aced`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [710a2aea](https://github.com/openshift/cloud-provider-openstack/commit/710a2aea744fd04546d11ac781fb874694e33ad8) `sha256:eda12d08594402e2446f6c92c85f209fc4cd22dd2d95361cf8c60673113d902e`
* [csi-driver-manila-operator](https://github.com/openshift/csi-operator) git [2dc8bfba](https://github.com/openshift/csi-operator/commit/2dc8bfba20a785131909895e590966832621ae38) `sha256:91a20bc60f15527bbbbe473403beb3b3f4048e38e60719318509a63a278d0b97`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [b6911553](https://github.com/openshift/csi-driver-nfs/commit/b69115537b79a5b3516e2a900f9095f4ebb3cbe5) `sha256:ef136fc55f9f5e95570d4dd59c0d280bd584eae66e112f8184104265a30277ad`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [95a19797](https://github.com/openshift/csi-external-attacher/commit/95a1979700f021e20879480b98b953bc382a0eaf) `sha256:030512f515a0f52efb6cbe78552efd59ebc7d7cf26693c4fceb15ba4b730bffc`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [2d611ab4](https://github.com/openshift/csi-external-provisioner/commit/2d611ab4a7c6fa227a72d54c7ac88530d2c8513b) `sha256:7f35f9bab9d773d6006c1c30b746dfc32944d6c40d2b86228856df0d4a05d520`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [4e74a4aa](https://github.com/openshift/csi-external-resizer/commit/4e74a4aa52a2046d6b97a47dff7a60ddb73d0bbd) `sha256:e150f52ec337defaaaec871f330277f430fba68abe0a93ad381c39ade0c378b5`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [76523185](https://github.com/openshift/csi-external-snapshot-metadata/commit/7652318579a38838931a5be492cee3573c7c8ecf) `sha256:e5439bc8b646b10c6de5a5ebc7833455147cf59f66dfe61720065c5d1c82cb42`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [28f6e063](https://github.com/openshift/csi-external-snapshotter/commit/28f6e06357f2840c241b9cfe09d301516e681c87) `sha256:c52b330d4bdc87999b8e63372c0f7c833743926a2dd974867a0442cfe5b9f9a4`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [4d5e959a](https://github.com/openshift/csi-livenessprobe/commit/4d5e959a182b4db70dc52302bd89eebfec40d5a5) `sha256:c39f26de4c3c868913dc17dc6925679ca8e4ebff7ffd707f0f3e0221ec9b0946`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [bb6a6378](https://github.com/openshift/csi-node-driver-registrar/commit/bb6a6378d2af235b3b253cb422d406bd3d7e30b1) `sha256:bafe19f13dfb88557216a9589219cc3ee84f7b9439a5790fc871431899619ba2`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [28f6e063](https://github.com/openshift/csi-external-snapshotter/commit/28f6e06357f2840c241b9cfe09d301516e681c87) `sha256:d9e469bad4a656a49d0cadb18f115c0f625b0f47b134795da5eba4d1a75ca11c`
* [docker-builder](https://github.com/openshift/builder) git [fcd4ce2d](https://github.com/openshift/builder/commit/fcd4ce2d96613a27bd1ab7f53ff47225976c4ba9) `sha256:b7e2dc3981cfe73e56ce7fd43f6657c32e106aecda36a03c6eadbd1ca7feda61`
* [docker-registry](https://github.com/openshift/image-registry) git [9eae44fc](https://github.com/openshift/image-registry/commit/9eae44fcf44142a705031fa16a613c450dbe685a) `sha256:9a98f3d58f167ec4440cfb6063b15a2bf1b46b1987e8aeb51d732fc772844ea2`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [7aa4007a](https://github.com/openshift/driver-toolkit/commit/7aa4007a8601bf4bb23b696f580c022f58877223) `sha256:ffeda4127442cc1c9c1d809629c2793c10365040c4c6f4d70d612ebf423d5ced`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [ea31ab85](https://github.com/openshift/cloud-provider-gcp/commit/ea31ab85a7cf25e88532598b73502d535462a5d7) `sha256:abe8e105b58da036c9a9c22228468e354d4d288c913db9d4de62e0a91191ddb4`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [e7674ede](https://github.com/openshift/cluster-api-provider-gcp/commit/e7674ede9ce8d021a878a6d5e81942875387e5eb) `sha256:9df403d9b615d0512f16ef916243a567897206c71f61099d7d4f0e8615b69e8e`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [0073bd11](https://github.com/openshift/machine-api-provider-gcp/commit/0073bd1187c07febc963fc67f0df67cd33c8f218) `sha256:fb69af34a8d53dbc4d0048cf3265794295ef3ab45e300300bc73fe11456be79d`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [48a7a1aa](https://github.com/openshift/gcp-pd-csi-driver/commit/48a7a1aa3f2200d01cf1b6e63a5a6cfd5004a8b0) `sha256:baa0d3f3a9c03e304a1ea9796965465235d92ad397ab0bb0f52cacff43016c7e`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [3da58a8c](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/3da58a8c88a425e8e05d6e907f5492a49a0ee348) `sha256:b104c38f0115fa8a7401c3b8cd84a1af5676af1e59fb3bdc5698c4a981c9460e`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [d7675f31](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/d7675f312ffdc8501032ff8217776cd7172b6bb0) `sha256:05f4b99f9d315deeaf827d4100928355eae2e089e6036094a075194953760c78`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [24cff9a6](https://github.com/openshift/cloud-provider-ibm/commit/24cff9a691e1ebee94669c834320c6ea974a2010) `sha256:3f6b231118b94f0cb33cccfac031162e94d223e2fd4b4c1c4cf3e1170b62a50b`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [d362aef2](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/d362aef240c280676249fa34c80fa1b39c684560) `sha256:0fae9f13b60597a0d335c18c325817639f8cfe38b5b2456b07c7457709d1eaeb`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [3d5956dd](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/3d5956ddd2292c381309106d23fff1765380c55e) `sha256:7e860dbbd351f8ce0cb3ec042533846eb30ed5a54958c1662fff72d3de782e1d`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [03b143d5](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/03b143d588768a18fd8afa1534ea7d7a04b4d1f3) `sha256:441c5651d8883d656938881c7685d84a40df854275f94748564f68ba765bc287`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [70256457](https://github.com/openshift/insights-runtime-extractor/commit/70256457b507ec09737800ee7ea022143ed6c3c2) `sha256:d95b93f119ce02b1eba8326be8afade8ab43b6855971e5cae42bdd28cd40c2f9`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [70256457](https://github.com/openshift/insights-runtime-extractor/commit/70256457b507ec09737800ee7ea022143ed6c3c2) `sha256:d259d6bca5825ca7e642819e4466087e1580f377efa7dc4973adcaa50b4c0751`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [9953d2b7](https://github.com/openshift/ironic-rhcos-downloader/commit/9953d2b77da077c28f9486a5d965a43149ce30c1) `sha256:2a2f347adcba705e5de0ec02ca07991aabc21d901dc3997d8dd03fc80faa543a`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [a379d09f](https://github.com/openshift/ironic-static-ip-manager/commit/a379d09f228d93f2beab1c73d67764c64b21e3cb) `sha256:9def39a5fca5d25c35a0b68c77a6e413aff3a0bcbc55b1bca537fdd9bab95ac2`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [38c16c46](https://github.com/openshift/kubernetes-metrics-server/commit/38c16c4698d131ab0e2da0d4b4b76d5322a89bab) `sha256:de89b31b39e73460ac2006206936fdde29337bd4a410f8af73c27225ecac0af7`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [d12e2746](https://github.com/openshift/kube-rbac-proxy/commit/d12e274605248f6c59373240a7eae7a7a357dcb3) `sha256:463b54511bf50ee29f2e14f1fd00e7a4a148386d5571268277f7b945cf702451`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [72835e43](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/72835e43c7754356645e41031f3a99926b4d42e6) `sha256:ce6f5ec0da93b9988a35166c7abdb7013d1edea2562524a70554b81a31ae94f6`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [90f14506](https://github.com/openshift/kubevirt-csi-driver/commit/90f14506c2d4fecfba2c355934bde87e6f101a20) `sha256:01cb026b9ac6a5500303807057bb0d45d6b780e55ca2210094c5d41163dfe511`
* [machine-api-operator](https://github.com/openshift/machine-api-operator) git [78c5104d](https://github.com/openshift/machine-api-operator/commit/78c5104d9a69072749f4ddf681926bcc404ef271) `sha256:b7bab80c7ba3d4f19262330dc08a30b3b5327d53e972b50f26e11334c1711026`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [a43d9c97](https://github.com/openshift/image-customization-controller/commit/a43d9c977f6332577efcd383cf173a2ff5805a4d) `sha256:e261a8cf9041e6216df14de3350ecc8e5f88cb64b508ba4fc371c2ceff50979a`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [e5342c99](https://github.com/openshift/machine-os-images/commit/e5342c9905a94069e6801737dd6aeddfb74bbac4) `sha256:2042fc10dd7f0ded557f4dee5419a381bbb3eca249972c244392fdcbd3cd388f`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [d4dd42ba](https://github.com/openshift/multus-admission-controller/commit/d4dd42ba9c17b04e0e5003147f4e140ea5e34749) `sha256:e37c00d823b5b586d31c8f55642dd17e55eb3b26e799e0dfe0cc92e83f55ed8e`
* [multus-cni](https://github.com/openshift/multus-cni) git [b4ec7d82](https://github.com/openshift/multus-cni/commit/b4ec7d8239ce4bd3ed949bce9816a013377b44c7) `sha256:0980bf68aefe4dc697093bcfb5121f5f64310be1c04f397ae14580c1fca38f26`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [b4ec7d82](https://github.com/openshift/multus-cni/commit/b4ec7d8239ce4bd3ed949bce9816a013377b44c7) `sha256:1ff99030a3ac687e1ccfc987e48500de1071c623a9bf1b252462c5cccaf32ed6`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [834a093f](https://github.com/openshift/multus-networkpolicy/commit/834a093f693e521b8dc4ec7168d03cfba2c1cba1) `sha256:d2ecbccef992c83a008cf098c8fc68d0a23bbd2c45f25db9c4da3eee05587b09`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [08af4127](https://github.com/openshift/route-override-cni/commit/08af4127c77976510cad1c096d9aca977d8ae5af) `sha256:314bd5e37b05b221f4035e4469fe96daafd483420272870631ca1cfd54732035`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [d691040e](https://github.com/openshift/whereabouts-cni/commit/d691040e509bb20c26b5e8366c0d6f3bb45a5e02) `sha256:852d76c43e608e06c0be369f3dbc7a768774727464a0f33dd33289cede6da0fe`
* [must-gather](https://github.com/openshift/must-gather) git [8554213f](https://github.com/openshift/must-gather/commit/8554213fa214e8e165e7bedaf8d892bb824d83ef) `sha256:61444b0129231c52fe32e3b0399da2bc151a0a2245a6114483badc2bd11ab540`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [5ef2d320](https://github.com/openshift/bond-cni/commit/5ef2d3205f11fba65e3949c0c57897420a83974a) `sha256:06f18c98f34ab3bb2f71319f9c2c37191cc303bed5bf65a3bc66a74a7740a6f9`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [5b233ea1](https://github.com/openshift/network-metrics-daemon/commit/5b233ea1d80733c1b00c6bad65dec0620dbf783a) `sha256:8d259e2c2327f45fcfe088c9c1d762533520b5863b2debefc59d351ad206805c`
* [network-tools](https://github.com/openshift/network-tools) git [5c4b905c](https://github.com/openshift/network-tools/commit/5c4b905c09ccd6edadb2ff359f45b70ed334f948) `sha256:c3e698e9b30be29c23bf0f8ded8e013e6d8cf3c101f295af1d73c879151712a8`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [8e75679a](https://github.com/openshift/cloud-provider-nutanix/commit/8e75679a965b80fee0332f8758471a7d3a75a4e8) `sha256:109714caeea47765d32eb9613936cb7d900670b484f02d7e0644979067d90b05`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [60559fdd](https://github.com/openshift/machine-api-provider-nutanix/commit/60559fdd7092dd29aa1c72797c49279aa2da39ee) `sha256:4189e666d814d42d0fb10da4f10a02a17c68521e112aa60f817f0fe266e7be89`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [4c002a91](https://github.com/openshift/oauth-apiserver/commit/4c002a9114937ea9c20213f00892761c2013e60b) `sha256:44d48f6d9f8f6449355d8c692290804840dc899d06f59c9af92f5a65b959ebf8`
* [oauth-server](https://github.com/openshift/oauth-server) git [42031614](https://github.com/openshift/oauth-server/commit/42031614956a88806d0503cd619b49975ad61682) `sha256:5a4a40c43f952b09c2c573ae21e0702760942a49929fa4b77d3e01c9027e9707`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [7fa546d4](https://github.com/openshift/openshift-apiserver/commit/7fa546d41a73b519e3af0e6428471c4aaf5c71e5) `sha256:a3d1b2593fbf48cc9ef232154f3c8cb1804b0967da6a4bf157d817876587277d`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [26d20fea](https://github.com/openshift/openshift-controller-manager/commit/26d20feae8892f648f5b06ed3f5492fe6ffb4532) `sha256:e3bb7189e0617f001666fa99e21e9fa951a5acd5242b6915a2b8292a17d74564`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [e71e0996](https://github.com/openshift/openshift-state-metrics/commit/e71e09969f11a47c87b87c43b762ad1d01f6b04f) `sha256:25c012c4cd5ac7f93eae012d61d94b965b3f5ffeefe847dc7e6be873cd8f66f9`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [710a2aea](https://github.com/openshift/cloud-provider-openstack/commit/710a2aea744fd04546d11ac781fb874694e33ad8) `sha256:206486a446a0fea1522736520cc9aad707ca96e0de01ce22feefa032d808663d`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator) git [2dc8bfba](https://github.com/openshift/csi-operator/commit/2dc8bfba20a785131909895e590966832621ae38) `sha256:0ad774593e3d182c0551b36478af0e7cb7e520feddd778c25589dc968bd674fe`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [710a2aea](https://github.com/openshift/cloud-provider-openstack/commit/710a2aea744fd04546d11ac781fb874694e33ad8) `sha256:b5ee8684c145ea80cb1bfab1c0db884b34033515bc514121b28648d492adf032`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [06d95461](https://github.com/openshift/cluster-api-provider-openstack/commit/06d95461581f9374ae05959b66fc50e2a17d077c) `sha256:a07cf05a85b7ed6ead3b25a0a7ed058665f7be4cbfb541bef1854de6d309a706`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [74bd2dd2](https://github.com/openshift/machine-api-provider-openstack/commit/74bd2dd2e7bc5b93e78b6b204012b6b7d981a4ba) `sha256:d2935c228a4bb6cef23292d3755f11a25f911f08834887df2effff83dcc87bb6`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [cbea7a9c](https://github.com/openshift/openstack-resource-controller/commit/cbea7a9cab145c32e2f347be69996b649893cc22) `sha256:1b62a7069221fc9f6e59e03c30bdd9fef8f9dcc9c0281d333cc70758871f1e02`
* [operator-framework-tools](https://github.com/openshift/operator-framework-olm) git [de6260e5](https://github.com/openshift/operator-framework-olm/commit/de6260e53055e10e216ec668d692a35554ab0585) `sha256:9650469e24f1b636f4b3ee64509791676511f4ee62cbea540b1f9d736e960c3d`
* [operator-lifecycle-manager](https://github.com/openshift/operator-framework-olm) git [de6260e5](https://github.com/openshift/operator-framework-olm/commit/de6260e53055e10e216ec668d692a35554ab0585) `sha256:44a108b6588f3ab5733b7514af5bc26ae11b4918cc5c0ddb410c51b83a6f2b51`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [38da2ef7](https://github.com/operator-framework/operator-marketplace/commit/38da2ef78cc429f67aea7fb4e589df21ac1ed327) `sha256:bab8b09cad886578d5c4ff4a77027f2e7117d9b657ac59c1b0e30af1bfe7d83f`
* [operator-registry](https://github.com/openshift/operator-framework-olm) git [de6260e5](https://github.com/openshift/operator-framework-olm/commit/de6260e53055e10e216ec668d692a35554ab0585) `sha256:d46205e1b935824dc18067d1e2345f2e4ed6c44eaf17d14d350481f720847bdc`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [02959a8d](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/02959a8d7096501e240d1d9f65da90b87bac45b9) `sha256:180a14bffad5f430507e1a4897d07ea9e56d3b9c0d64d31b0f49c92913d6c446`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [27747821](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/277478211cfc7302e9c09b41a0935fbba678614a) `sha256:9ab44ac8e4f9a57dd178f5507a48cbb51c513e2a476009891c9479aec727c063`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [766c0952](https://github.com/openshift/cloud-provider-powervs/commit/766c0952fd19f8225fe59b2be8e8c8932b24ebd7) `sha256:bab0982c03da3be97fc1c05ecb3af0bd0302754a4e32819951a99171b33fb033`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [e88cf81d](https://github.com/openshift/machine-api-provider-powervs/commit/e88cf81dd9ad174f395b86f9cdc40fa30cb06bf4) `sha256:5a27819691af93952c691e8052e246bc38774a0377bea919ec56c8972f46c3c7`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [c4c99a30](https://github.com/openshift/prom-label-proxy/commit/c4c99a3071808f466ee6c3d7b7fa87108b457feb) `sha256:940b8e796825603cdd618132049a10c7b6844795d198435182940e005580bf39`
* [prometheus](https://github.com/openshift/prometheus) git [13ce9de4](https://github.com/openshift/prometheus/commit/13ce9de4694ded595ef1455dd836ba4033fed0ea) `sha256:b5ae98428269b8d8aba2056155496ee8e5bc79ac7fd4417845df54695543d17e`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [70e38466](https://github.com/openshift/prometheus-operator/commit/70e38466b9b9143f48283dab8bd0c227f35efe69) `sha256:a706941eb63dddb1e25f759e09faada3982f69ce778d62c7aca79ca73b19b846`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [6c4fc012](https://github.com/openshift/node_exporter/commit/6c4fc0126407c8404b8604faa2f1230f385b9f44) `sha256:9044949a5a4b0dc58828d4d28bf59a4310ff965afd4dee13ee5c845687de22a6`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [70e38466](https://github.com/openshift/prometheus-operator/commit/70e38466b9b9143f48283dab8bd0c227f35efe69) `sha256:dd284eff12b9097939fd23486fb02eb43c53cd479e58f99e6066243860ed45a5`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [70e38466](https://github.com/openshift/prometheus-operator/commit/70e38466b9b9143f48283dab8bd0c227f35efe69) `sha256:cb7c42ea77243c18a19d96ce05db276bb7629a42a9a9cd33c7ee0f94affd45b5`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [55f77ca4](https://github.com/openshift/route-controller-manager/commit/55f77ca4cf0328b7c4fd7736bce79ebe171a9b6b) `sha256:6f73085c49fc7bff145abe6be82d599b215a0a1eec78c37d9dbce7f5f2390edb`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [9fff46a5](https://github.com/openshift/service-ca-operator/commit/9fff46a576033685f66fbb1121eb0a2f134a29be) `sha256:8c07d538896602acb979755f92c8c4c30dc4bb139b8c68a941cb3e291d4b1f99`
* [telemeter](https://github.com/openshift/telemeter) git [c2ffb0a7](https://github.com/openshift/telemeter/commit/c2ffb0a7035e504a4ddc7292e4d12b7490eab0d4) `sha256:558d35b728e6e013f001cd2b133358478d27fa9e2d383329b706778ec2aeb47f`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [8e176cec](https://github.com/openshift/volume-data-source-validator/commit/8e176cec394709cac728423cbbb6c3c914be8485) `sha256:c058ec414281c60bb32bb1060ba67b57a7ce636a2cf580e22013c9ce46e48105`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [39008107](https://github.com/openshift/cloud-provider-vsphere/commit/39008107b1463e3299b0d60c3ac1f7e71ad3e014) `sha256:5909d6e986845079d2b5db08f6037331ac23be61e4c52d3d29c921f812c190ed`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [ac542b5a](https://github.com/openshift/cluster-api-provider-vsphere/commit/ac542b5afbd9a3897cda34e7ea1852b61c945e36) `sha256:780599cce96cd7e6f8d7dbd1485522eaaaf08e1ba8422a50fa59e48206b2dd74`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [9be96574](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/9be965742961e7a84b0af8ff5ea17a852e015c98) `sha256:72807ed45974322b33248c7746905f91741abd00341270eea3f467bc3c62f4e5`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [438d5aad](https://github.com/openshift/vsphere-problem-detector/commit/438d5aad88be4f7d9237d87ed70589e1ebaf18f8) `sha256:33c68bd52af9908b6f22544c61572ff426dcd5743d63946e3c6880277f9190d4`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/f8220b56913e9be3cf49d9b9950768b766c36f2c)

* [OCPBUGS-104521](https://issues.redhat.com/browse/OCPBUGS-104521): manifest_generator add a label to LUKS root [#10755](https://github.com/openshift/assisted-service/pull/10755)
* [AGENT-1559](https://issues.redhat.com/browse/AGENT-1559): Remove LSO and LVMS as CNV operator dependencies [#10666](https://github.com/openshift/assisted-service/pull/10666)
* [OCPBUGS-98693](https://issues.redhat.com/browse/OCPBUGS-98693): PATCH /v2/clusters/{id} does not return updated operator_bundles [#10608](https://github.com/openshift/assisted-service/pull/10608)
* [Full changelog](https://github.com/openshift/assisted-service/compare/3f47803587d4cb2c4febbec95e7bdda3a5c9eabe...f8220b56913e9be3cf49d9b9950768b766c36f2c)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/d5515fa077062f9bfcb763d8131b0302bba6a144)

* [OCPBUGS-96592](https://issues.redhat.com/browse/OCPBUGS-96592): Bump golang.org/x/net to v0.55.0 [#2250](https://github.com/openshift/assisted-installer/pull/2250)
* [OCPBUGS-104498](https://issues.redhat.com/browse/OCPBUGS-104498): Wait for all nodes to join before exiting for ABI [#2245](https://github.com/openshift/assisted-installer/pull/2245)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/24e894263b3231ab8bb27acc9127a835b7b6e997...d5515fa077062f9bfcb763d8131b0302bba6a144)


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/59cc3a89551db9be858159da59779c8c4926240c)

* [CVE-2026](https://issues.redhat.com/browse/CVE-2026): 9595: Bumped webpack-dev-server to 5.2.5 (#3924) [#3924](https://github.com/openshift-assisted/assisted-installer-ui/pull/3924)
* [OCPBUGS-99025](https://issues.redhat.com/browse/OCPBUGS-99025): Bump dompurify to 3.4.7+ in 4.22 (#3895) [#3895](https://github.com/openshift-assisted/assisted-installer-ui/pull/3895)
* [OCPBUGS-91629](https://issues.redhat.com/browse/OCPBUGS-91629): Bump ws to 8.21.0 for CVE-2026-45736 (#3906) [#3906](https://github.com/openshift-assisted/assisted-installer-ui/pull/3906)
* [OCPBUGS-96710](https://issues.redhat.com/browse/OCPBUGS-96710): Bump basic-ftp to 5.3.1 for CVE-2026-44240 (#3823) [#3823](https://github.com/openshift-assisted/assisted-installer-ui/pull/3823)
* [CVE-2026](https://issues.redhat.com/browse/CVE-2026): 59873 openshift4/ose-agent-installer-ui-rhel9: node-tar: Denial of Service via crafted gzip bomb [openshift-4.22] (#3890) [#3890](https://github.com/openshift-assisted/assisted-installer-ui/pull/3890)
* Update OWNERS file (#3883) [#3883](https://github.com/openshift-assisted/assisted-installer-ui/pull/3883)
* [OCPBUGS-98431](https://issues.redhat.com/browse/OCPBUGS-98431): Bump js-yaml to 4.3.0 in 4.22 (#3865) [#3865](https://github.com/openshift-assisted/assisted-installer-ui/pull/3865)
* Apply patches (#3873) [#3873](https://github.com/openshift-assisted/assisted-installer-ui/pull/3873)
* [MGMT-24444](https://issues.redhat.com/browse/MGMT-24444): Apply sentence case to networking management type labels … (#3747) (#3871) [#3747](https://github.com/openshift-assisted/assisted-installer-ui/pull/3747)
* [MGMT-24152](https://issues.redhat.com/browse/MGMT-24152): UI allows editing pull secret in draft cluster (#3662) (#3870) [#3662](https://github.com/openshift-assisted/assisted-installer-ui/pull/3662)
* [OCPBUGD-89707](https://issues.redhat.com/browse/OCPBUGD-89707): bump form-data from 4.0.5 to 4.0.6 to address CVE-2026-12143 (#3869) [#3869](https://github.com/openshift-assisted/assisted-installer-ui/pull/3869)
* patch CVE-2026-9277 and CVE-2026-42338 via yarn resolutions (#3851) [#3851](https://github.com/openshift-assisted/assisted-installer-ui/pull/3851)
* AGENT-1519 | [Below-the-sea UI] Allow the user to select IPv6 in the Networking Stack Type field (#3806) [#3806](https://github.com/openshift-assisted/assisted-installer-ui/pull/3806)
* [MGMT-23950](https://issues.redhat.com/browse/MGMT-23950): [Staging] [UI] - Cluster name missing in page header for draft clusters (#3669) (#3835) [#3669](https://github.com/openshift-assisted/assisted-installer-ui/pull/3669)
* Fix disk encryption parsing for cluster details (#3737) (#3843) [#3737](https://github.com/openshift-assisted/assisted-installer-ui/pull/3737)
* [MGMT-19002](https://issues.redhat.com/browse/MGMT-19002): [nmstate] UI form view missing autoconf field for ipv6 (#3681) (#3836) [#3681](https://github.com/openshift-assisted/assisted-installer-ui/pull/3681)
* Tweak discovery ISO modal sizing (#3792) (#3846) [#3792](https://github.com/openshift-assisted/assisted-installer-ui/pull/3792)
* [MGMT-23490](https://issues.redhat.com/browse/MGMT-23490): Refactor Troubleshooting Web Console (#3688) (#3839) [#3688](https://github.com/openshift-assisted/assisted-installer-ui/pull/3688)
* [OCPBUGS-88249](https://issues.redhat.com/browse/OCPBUGS-88249), [OCPBUGS-88400](https://issues.redhat.com/browse/OCPBUGS-88400): Ensure axios version is resolved to 1.18.1 (#3857) [#3857](https://github.com/openshift-assisted/assisted-installer-ui/pull/3857)
* Pull secret appears editable in draft cluster but changes are not applied (#3597) (#3831) [#3597](https://github.com/openshift-assisted/assisted-installer-ui/pull/3597)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/1aa8b72164c53c1085a3fab1859043825eceffcc...59cc3a89551db9be858159da59779c8c4926240c)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/817b11805be82a177657128eac624df2e969d9b2)

* [OCPBUGS-105451](https://issues.redhat.com/browse/OCPBUGS-105451): Update Konflux references [#337](https://github.com/openshift/agent-installer-utils/pull/337)
* [OCPBUGS-101760](https://issues.redhat.com/browse/OCPBUGS-101760): Update Konflux references [#329](https://github.com/openshift/agent-installer-utils/pull/329)
* [OCPBUGS-100105](https://issues.redhat.com/browse/OCPBUGS-100105): Use Operator catalog in 4.22 for OVE [#325](https://github.com/openshift/agent-installer-utils/pull/325)
* [AGENT-1568](https://issues.redhat.com/browse/AGENT-1568): Add lvms-operator to config [#324](https://github.com/openshift/agent-installer-utils/pull/324)
* [OCPBUGS-99906](https://issues.redhat.com/browse/OCPBUGS-99906): Update Konflux references [#302](https://github.com/openshift/agent-installer-utils/pull/302)
* [OCPBUGS-99556](https://issues.redhat.com/browse/OCPBUGS-99556): Use agent-preinstall-image-builder from quay-proxy [#321](https://github.com/openshift/agent-installer-utils/pull/321)
* [OCPBUGS-98743](https://issues.redhat.com/browse/OCPBUGS-98743): Update cluster-logging and loki operator versions [#316](https://github.com/openshift/agent-installer-utils/pull/316)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/114155274b3e4aef0014739286ff586fd4ac3ea4...817b11805be82a177657128eac624df2e969d9b2)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/015de26e222e97785488918a8fbe6fc4c2038d23)

* [OCPBUGS-106152](https://issues.redhat.com/browse/OCPBUGS-106152): UPSTREAM: 3756: fix: optionally skip reading the config from the API server [#163](https://github.com/openshift/azure-disk-csi-driver/pull/163)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/cfed1785cb39a7448347485dba95ef4364095b64...015de26e222e97785488918a8fbe6fc4c2038d23)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/91c5760d8435b799bc837f7eb6540025c369d572)

* [OCPBUGS-95536](https://issues.redhat.com/browse/OCPBUGS-95536): Bump golang.org/x/crypto to v0.48.0-sec.1 [#144](https://github.com/openshift/azure-file-csi-driver/pull/144)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/403f856e29605126b2711a1bfe7a4f6c276b344d...91c5760d8435b799bc837f7eb6540025c369d572)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/bad7e9447fa66002e5ec7b0b7952545e7e8a6c9f)

* [OCPBUGS-98074](https://issues.redhat.com/browse/OCPBUGS-98074): Bump golang.org/x/crypto from v0.47.0 to v0.54.0 [#205](https://github.com/openshift/machine-api-provider-azure/pull/205)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/be827be84a2f772e7482889dba45cbc9d9fd32f8...bad7e9447fa66002e5ec7b0b7952545e7e8a6c9f)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/27857bd7921fc12dc3681c4812892cff949a1d34)

* Bug OCPBUGS-99399: baremetal: fix provisioning ISO kernel arguments [#10703](https://github.com/openshift/installer/pull/10703)
* [AGENT-1546](https://issues.redhat.com/browse/AGENT-1546): Backport NoRegistryClusterInstall feature to release-4.22 [#10683](https://github.com/openshift/installer/pull/10683)
* [OCPBUGS-87814](https://issues.redhat.com/browse/OCPBUGS-87814): [release-4.22] Add omitempty to vSphere and Nutanix MachinePool slice fields [#10606](https://github.com/openshift/installer/pull/10606)
* [OCPBUGS-95555](https://issues.redhat.com/browse/OCPBUGS-95555), [OCPBUGS-99017](https://issues.redhat.com/browse/OCPBUGS-99017): bump golang.org/x/crypto to 0.52.0 [#10695](https://github.com/openshift/installer/pull/10695)
* [OCPBUGS-98982](https://issues.redhat.com/browse/OCPBUGS-98982): Update RHCOS-release-4.22 bootimage metadata to 9.8.20260715-1 / 10.2.20260715-0 [#10692](https://github.com/openshift/installer/pull/10692)
* [OCPBUGS-98701](https://issues.redhat.com/browse/OCPBUGS-98701): cluster-api: disable diagnostics endpoint for local CAPI controllers [#10685](https://github.com/openshift/installer/pull/10685)
* [OCPBUGS-87812](https://issues.redhat.com/browse/OCPBUGS-87812): [release-4.22] fix: reset associatedVCenter in failure domain validation loop [#10604](https://github.com/openshift/installer/pull/10604)
* [OCPBUGS-97964](https://issues.redhat.com/browse/OCPBUGS-97964): destroy/aws: delete vpc endpoints earlier [#10674](https://github.com/openshift/installer/pull/10674)
* [Full changelog](https://github.com/openshift/installer/compare/2e33096a58847329454b34ba11d74d770a688e29...27857bd7921fc12dc3681c4812892cff949a1d34)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/40d590359685e15514694d74ff990825bfc889f7)

* [OCPBUGS-94109](https://issues.redhat.com/browse/OCPBUGS-94109): cherry-pick reconciler optimizations [#503](https://github.com/openshift/baremetal-operator/pull/503)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/e3a3967d14abac2562792d0b47cd7d8cb15e37f2...40d590359685e15514694d74ff990825bfc889f7)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/7ec2e14b74e700fec86dc0936a61f6c12b79d083)

* [OCPBUGS-98547](https://issues.redhat.com/browse/OCPBUGS-98547): bump x/crypto to the latest version [#2309](https://github.com/openshift/oc/pull/2309)
* [Full changelog](https://github.com/openshift/oc/compare/062bc5449c4987c92c76da4d315ef4969c22d638...7ec2e14b74e700fec86dc0936a61f6c12b79d083)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/7ee0695a75f4441ff339f89ac4b45e0632417c18)

* [OCPBUGS-99551](https://issues.redhat.com/browse/OCPBUGS-99551): [release-4.22] UPSTREAM: 10001: chore(clusterapi): add machine phase check for failed machines [#431](https://github.com/openshift/kubernetes-autoscaler/pull/431)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/521e545fb92e7138b2ce2bc05f871f53a6c112fb...7ee0695a75f4441ff339f89ac4b45e0632417c18)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/e65972f997216d9f67cb18112f0cb1a4b57b0fe3)

* [OCPBUGS-99390](https://issues.redhat.com/browse/OCPBUGS-99390): Cluster Operator baremetal did not report Progressing=True during a cluster update [#634](https://github.com/openshift/cluster-baremetal-operator/pull/634)
* [OCPBUGS-99501](https://issues.redhat.com/browse/OCPBUGS-99501): Apply cluster TLS profile to ironic-proxy container [#635](https://github.com/openshift/cluster-baremetal-operator/pull/635)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/5805e17a895ac569decd193153d45662ede5fc6f...e65972f997216d9f67cb18112f0cb1a4b57b0fe3)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/5430ff7a34d4c0a946740dcdcd98690c14c63cf9)

* [OCPBUGS-96609](https://issues.redhat.com/browse/OCPBUGS-96609): Bump golang.org/x/net to v0.56.0 to fix CVE-2026-27136 [#624](https://github.com/openshift/cluster-capi-operator/pull/624)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/b84112efbe1a3f34cbabe262335be28595041afc...5430ff7a34d4c0a946740dcdcd98690c14c63cf9)


### [cluster-config-api](https://github.com/openshift/api/tree/57eb58a15422da2e90e6da0974350245cc994e69)

* [AGENT-1544](https://issues.redhat.com/browse/AGENT-1544): Backport NoRegistryClusterInstall feature to release-4.22 [#2930](https://github.com/openshift/api/pull/2930)
* [OCPBUGS-98222](https://issues.redhat.com/browse/OCPBUGS-98222): add new serviceAccountToken fs type [#2922](https://github.com/openshift/api/pull/2922)
* [Full changelog](https://github.com/openshift/api/compare/694421e64aeeae4374e7e7394014ad40ab5a1f30...57eb58a15422da2e90e6da0974350245cc994e69)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/14ecb163d4a69d1e53802c21d799d6f16b2303dc)

* [OCPBUGS-100120](https://issues.redhat.com/browse/OCPBUGS-100120): Revert 'OCPBUGS-88490: fix etcd operator deadlock when etcd-endpoints configmap is stale' [#1661](https://github.com/openshift/cluster-etcd-operator/pull/1661)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/bba8f344c513e7a7fd3f3cc2234059d70e376e92...14ecb163d4a69d1e53802c21d799d6f16b2303dc)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/f041d358ef164e02ae82cc5197f9ccd58f515f8c)

* [OCPBUGS-96612](https://issues.redhat.com/browse/OCPBUGS-96612): Bump golang.org/x/net from v0.47.0 to v0.55.0 [#1355](https://github.com/openshift/cluster-image-registry-operator/pull/1355)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/90e608b3e66c284a5b41bc57e6d0d3a45aceebdc...f041d358ef164e02ae82cc5197f9ccd58f515f8c)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/0c0c6484347beac1b187360a23c929819938db38)

* [OCPBUGS-98728](https://issues.redhat.com/browse/OCPBUGS-98728): Add missing include annotations to IBM Cloud and PowerVS ingress CredentialsRequests [#1506](https://github.com/openshift/cluster-ingress-operator/pull/1506)
* [OCPBUGS-97563](https://issues.redhat.com/browse/OCPBUGS-97563): Detect orphaned OSSM subscription after noOLM migration [#1495](https://github.com/openshift/cluster-ingress-operator/pull/1495)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/531cea1bee8c085e81b0394dd47296fc4bd3fdf0...0c0c6484347beac1b187360a23c929819938db38)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/5ea3b57ae26ac222f99d783c566d683e50b9876f)

* [OCPBUGS-104536](https://issues.redhat.com/browse/OCPBUGS-104536): Backport e2e stabilization 4.22 [#3026](https://github.com/openshift/cluster-monitoring-operator/pull/3026)
* [OCPBUGS-100367](https://issues.redhat.com/browse/OCPBUGS-100367): [release-4.22] fix: watch cluster wide proxy changes and apply changes accordingly [#3020](https://github.com/openshift/cluster-monitoring-operator/pull/3020)
* [OCPBUGS-99748](https://issues.redhat.com/browse/OCPBUGS-99748): fall back to kube-system/global-pull-secret for telemeter-client token [#3001](https://github.com/openshift/cluster-monitoring-operator/pull/3001)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/de5b2bd406ec6b9c67bf4ffa4847f3609ff46615...5ea3b57ae26ac222f99d783c566d683e50b9876f)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/6a5fcccf86374942a57dac208d9435eb6b3d7150)

* [OCPBUGS-105512](https://issues.redhat.com/browse/OCPBUGS-105512): Remove version-specific CNI binary copy logic [#3114](https://github.com/openshift/cluster-network-operator/pull/3114)
* [OCPBUGS-99744](https://issues.redhat.com/browse/OCPBUGS-99744): Bump frr-k8s MAX_FDS from 1024 to 65536 [#3090](https://github.com/openshift/cluster-network-operator/pull/3090)
* [OCPBUGS-97939](https://issues.redhat.com/browse/OCPBUGS-97939): bump containernetworking/cni v0.8.0 -> v1.3.0 [#3044](https://github.com/openshift/cluster-network-operator/pull/3044)
* [OCPBUGS-86033](https://issues.redhat.com/browse/OCPBUGS-86033): Revert "[release-4.22] OCPBUGS-90721: NVIDIA-596: Enable dpu healthcheck" [#3042](https://github.com/openshift/cluster-network-operator/pull/3042)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/ad6c2f8350892f7e330105c1ffb10818150eec35...6a5fcccf86374942a57dac208d9435eb6b3d7150)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/5312927f4d6c780bba89a370641957ce0ce0a8d9)

* [OCPBUGS-105535](https://issues.redhat.com/browse/OCPBUGS-105535): Add missing annotations to NetworkPolicy manifests [#1580](https://github.com/openshift/cluster-node-tuning-operator/pull/1580)
* [OCPBUGS-99265](https://issues.redhat.com/browse/OCPBUGS-99265): E2E: LLC: Pass fresh ctx variable to DeferCleanup functions [#1567](https://github.com/openshift/cluster-node-tuning-operator/pull/1567)
* [OCPBUGS-92011](https://issues.redhat.com/browse/OCPBUGS-92011): e2e: fix: clear hugepages before switching kernelPageSize to 4k [#1554](https://github.com/openshift/cluster-node-tuning-operator/pull/1554)
* [OCPBUGS-99290](https://issues.redhat.com/browse/OCPBUGS-99290): e2e: fix broken checks and rework netqueue tests to avoid ARM ethtool blackout flakes [#1568](https://github.com/openshift/cluster-node-tuning-operator/pull/1568)
* [OCPBUGS-98400](https://issues.redhat.com/browse/OCPBUGS-98400): E2E: Add functional test cases checking GOMAXPROCS [#1561](https://github.com/openshift/cluster-node-tuning-operator/pull/1561)
* [OCPBUGS-98062](https://issues.redhat.com/browse/OCPBUGS-98062): E2E: Fix tuned active profile check for wrapped performance profiles [#1559](https://github.com/openshift/cluster-node-tuning-operator/pull/1559)
* [OCPBUGS-87153](https://issues.redhat.com/browse/OCPBUGS-87153): E2E:  Refactor OVS affinity tests into shared helpers and add new workload-partitioning and control-plane reboot test cases. [#1537](https://github.com/openshift/cluster-node-tuning-operator/pull/1537)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/1b0cc30b10e185774c22e1d210d9b03034909303...5312927f4d6c780bba89a370641957ce0ce0a8d9)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/8417fa98338c2adab73386c63c6d84af14ef99e4)

* [OCPBUGS-100168](https://issues.redhat.com/browse/OCPBUGS-100168): Allow Prometheus to scrape check-endpoints metrics on port 17698 [#743](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/743)
* [OCPBUGS-105443](https://issues.redhat.com/browse/OCPBUGS-105443): Add HostToContainer mountPropagation to node-pullsecrets volume mount [#748](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/748)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/1924cf6f12c632d56f1d41341f08ff9ff6eae7d6...8417fa98338c2adab73386c63c6d84af14ef99e4)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/2e306e143051492a84c5e47a7b3126e096fdf76a)

* [OCPBUGS-98222](https://issues.redhat.com/browse/OCPBUGS-98222): add serviceAccountToken volume type to psalabelsyncer [#192](https://github.com/openshift/cluster-policy-controller/pull/192)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/44985a1306411101c84dd5081598fc928b432321...2e306e143051492a84c5e47a7b3126e096fdf76a)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/25672c2af69d1fa76dec61f9db09a989dd5ccdf7)

* [OCPBUGS-96622](https://issues.redhat.com/browse/OCPBUGS-96622): Bump golang.org/x/net to v0.55.0 [#722](https://github.com/openshift/cluster-storage-operator/pull/722)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/8dfdf2ef3310358f3559a5481df43b98b2294791...25672c2af69d1fa76dec61f9db09a989dd5ccdf7)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/6ac86dc99c02366314381b720ab1d4a38d38f1c2)

* [OCPBUGS-104545](https://issues.redhat.com/browse/OCPBUGS-104545): pkg/cvo/egress: Disable Proxy respect on HyperShift [#1438](https://github.com/openshift/cluster-version-operator/pull/1438)
* [OCPBUGS-98572](https://issues.redhat.com/browse/OCPBUGS-98572): Tolerate unknown template fields during payload loading [#1421](https://github.com/openshift/cluster-version-operator/pull/1421)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/7de363f2a12bb17c6703c77dec5b34760b3292db...6ac86dc99c02366314381b720ab1d4a38d38f1c2)


### [console](https://github.com/openshift/console/tree/c62b7cd934ccfdc9171a874b3bf15d9683f1cb24)

* [OCPBUGS-105611](https://issues.redhat.com/browse/OCPBUGS-105611): [release-4.22] Fix leading whitespace in Quick Start execute code snippets [#16951](https://github.com/openshift/console/pull/16951)
* [OCPBUGS-89705](https://issues.redhat.com/browse/OCPBUGS-89705): Fix CVE-2026-12143 form-data CRLF injection [#16644](https://github.com/openshift/console/pull/16644)
* [OCPBUGS-100059](https://issues.redhat.com/browse/OCPBUGS-100059): quickstart page i18n misses (Fix Quick Starts i18n bundle lookup for zh-CN) [#16869](https://github.com/openshift/console/pull/16869)
* [OCPBUGS-100317](https://issues.redhat.com/browse/OCPBUGS-100317): Fix pod terminal not rendering until resize [#16892](https://github.com/openshift/console/pull/16892)
* [OCPBUGS-100307](https://issues.redhat.com/browse/OCPBUGS-100307): Re-enable Knative Cypress e2e tests [#16889](https://github.com/openshift/console/pull/16889)
* Fix OCPBUGS-98791: CVE-2026-48801 [#16852](https://github.com/openshift/console/pull/16852)
* [OCPBUGS-99545](https://issues.redhat.com/browse/OCPBUGS-99545): '0 B' is shown on details page when create pvc with 'EiB' unit [#16807](https://github.com/openshift/console/pull/16807)
* [OCPBUGS-99548](https://issues.redhat.com/browse/OCPBUGS-99548): Incorrect translations for 'CatalogSources' and 'OperatorGroups' in l… [#16809](https://github.com/openshift/console/pull/16809)
* [OCPBUGS-99259](https://issues.redhat.com/browse/OCPBUGS-99259): Disable Knative e2e Cypress tests in CI [#16784](https://github.com/openshift/console/pull/16784)
* [OCPBUGS-98437](https://issues.redhat.com/browse/OCPBUGS-98437): CVE-2026-59869 bump js-yaml [#16768](https://github.com/openshift/console/pull/16768)
* [OCPBUGS-97600](https://issues.redhat.com/browse/OCPBUGS-97600): Fix devfile sample import by adding fallback for parent resolution failures [#16706](https://github.com/openshift/console/pull/16706)
* [OCPBUGS-88028](https://issues.redhat.com/browse/OCPBUGS-88028): Bump follow-redirects from 1.15.3 to 1.16.0 to fix CVE-2026-40895 [#16665](https://github.com/openshift/console/pull/16665)
* [Full changelog](https://github.com/openshift/console/compare/f45e09ca1a8cd78b0d461b77e0fd734b1633cea5...c62b7cd934ccfdc9171a874b3bf15d9683f1cb24)


### [console-operator](https://github.com/openshift/console-operator/tree/35170581874b91514a9459766758fa0aa5da22f6)

* [OCPBUGS-81121](https://issues.redhat.com/browse/OCPBUGS-81121): clone bump documentation base url [#1154](https://github.com/openshift/console-operator/pull/1154)
* [OCPBUGS-100387](https://issues.redhat.com/browse/OCPBUGS-100387): Sort plugin list to make them deterministic [#1165](https://github.com/openshift/console-operator/pull/1165)
* [OCPBUGS-97828](https://issues.redhat.com/browse/OCPBUGS-97828), [OCPBUGS-97829](https://issues.redhat.com/browse/OCPBUGS-97829): Stabilize telemetry config to prevent continuous console pod rollouts [#1183](https://github.com/openshift/console-operator/pull/1183)
* [OCPBUGS-94186](https://issues.redhat.com/browse/OCPBUGS-94186): Add retry for transient API errors to prevent Degraded blips [#1181](https://github.com/openshift/console-operator/pull/1181)
* [Full changelog](https://github.com/openshift/console-operator/compare/59eb0873d73f1007d4d019bfcb6882f6467d8b05...35170581874b91514a9459766758fa0aa5da22f6)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/af8f30136791fa3f3dc9e5638bdb062db133bbbd)

* [OCPBUGS-97939](https://issues.redhat.com/browse/OCPBUGS-97939): bump containernetworking/cni to v1.3.0 [#103](https://github.com/openshift/egress-router-cni/pull/103)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/5e0f8d1b545899fda27c5e1cc8707d33cba1b534...af8f30136791fa3f3dc9e5638bdb062db133bbbd)


### [etcd](https://github.com/openshift/etcd/tree/6bd01267dc858aca6ff21632f95e98dc62ba33e7)

* [OCPBUGS-82497](https://issues.redhat.com/browse/OCPBUGS-82497): Rebase v3.6.13 for openshift-4.22 [#393](https://github.com/openshift/etcd/pull/393)
* [Full changelog](https://github.com/openshift/etcd/compare/d8d67b8ce849f816d6d23c904098336632e2348f...6bd01267dc858aca6ff21632f95e98dc62ba33e7)


### [haproxy-router](https://github.com/openshift/router/tree/b2665a2999cec36350ccf2614b43941753027773)

* [OCPBUGS-87166](https://issues.redhat.com/browse/OCPBUGS-87166): Prevent SSRF via FQDN-typed EndpointSlices [#813](https://github.com/openshift/router/pull/813)
* [Full changelog](https://github.com/openshift/router/compare/5586fa9c77025679df4dee2a0895e95333ffbc8a...b2665a2999cec36350ccf2614b43941753027773)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/4a03727d6141fbe09df8550366530b0a6f85d76f)

* NO-JIRA: Update openshift-hack/rebase.sh [#2733](https://github.com/openshift/kubernetes/pull/2733)
* [OCPBUGS-96637](https://issues.redhat.com/browse/OCPBUGS-96637): Bump golang.org/x/net from v0.47.0 to v0.55.0 [#2737](https://github.com/openshift/kubernetes/pull/2737)
* [OCPBUGS-91744](https://issues.redhat.com/browse/OCPBUGS-91744), [OCPBUGS-93526](https://issues.redhat.com/browse/OCPBUGS-93526), [OCPBUGS-93551](https://issues.redhat.com/browse/OCPBUGS-93551), [OCPBUGS-95549](https://issues.redhat.com/browse/OCPBUGS-95549), [OCPBUGS-95556](https://issues.redhat.com/browse/OCPBUGS-95556): Bump golang.org/x/crypto/ssh to v0.52.0 [#2725](https://github.com/openshift/kubernetes/pull/2725)
* [OCPBUGS-99766](https://issues.redhat.com/browse/OCPBUGS-99766): UPSTREAM: <carry>: upkeep cpu partitioning admission webhook [#2724](https://github.com/openshift/kubernetes/pull/2724)
* [OCPBUGS-90148](https://issues.redhat.com/browse/OCPBUGS-90148): Rebase v1.35.6 in release-4.22 [#2707](https://github.com/openshift/kubernetes/pull/2707)
* [Full changelog](https://github.com/openshift/kubernetes/compare/03c5938b61486a1fde89b5d546f57bb4c6ad1acc...4a03727d6141fbe09df8550366530b0a6f85d76f)


### [hypershift](https://github.com/openshift/hypershift/tree/e945b30f303400f6acec66738c482af93dc68a70)

* [OCPBUGS-105591](https://issues.redhat.com/browse/OCPBUGS-105591): [release-4.22] use in-cluster service for oauth-server [#9127](https://github.com/openshift/hypershift/pull/9127)
* [OCPBUGS-96711](https://issues.redhat.com/browse/OCPBUGS-96711): Apply MetricsSet relabel configs to KAS ServiceMonitor [#8901](https://github.com/openshift/hypershift/pull/8901)
* [OCPBUGS-105421](https://issues.redhat.com/browse/OCPBUGS-105421): fix(upsert): add desired-state hash to detect spec field removals [#9259](https://github.com/openshift/hypershift/pull/9259)
* [OCPBUGS-101964](https://issues.redhat.com/browse/OCPBUGS-101964): [release-4.22] OCPBUGS-98213: fix router component ordering to prevent missing HAProxy backends [#9212](https://github.com/openshift/hypershift/pull/9212)
* [OCPBUGS-100332](https://issues.redhat.com/browse/OCPBUGS-100332): fix(konnectivity): conditionally prefer IPv4 based on HCP network config [release-4.22] [#9191](https://github.com/openshift/hypershift/pull/9191)
* [OCPBUGS-100141](https://issues.redhat.com/browse/OCPBUGS-100141): Add proxy env vars to AWS cloud-controller-manager deployment [#9156](https://github.com/openshift/hypershift/pull/9156)
* [OCPBUGS-94518](https://issues.redhat.com/browse/OCPBUGS-94518): add ACR pull identity to worker cloud.conf and VMSS [#8865](https://github.com/openshift/hypershift/pull/8865)
* [OCPBUGS-100299](https://issues.redhat.com/browse/OCPBUGS-100299): Avoid printing errors twice [#9183](https://github.com/openshift/hypershift/pull/9183)
* [OCPBUGS-94170](https://issues.redhat.com/browse/OCPBUGS-94170): fix registry override matching and propagation to init containers [#8877](https://github.com/openshift/hypershift/pull/8877)
* [OCPBUGS-100176](https://issues.redhat.com/browse/OCPBUGS-100176): Remove hardcoded quay.io credentials from EnsureGlobalPullSecret test [#9169](https://github.com/openshift/hypershift/pull/9169)
* [OCPBUGS-90086](https://issues.redhat.com/browse/OCPBUGS-90086): [release-4.22] clear stale EtcdRecoveryActive failure condition when etcd is healthy [#8806](https://github.com/openshift/hypershift/pull/8806)
* [OCPBUGS-99554](https://issues.redhat.com/browse/OCPBUGS-99554): fix(backport): konnectivity agent auth to 4.22 [#9077](https://github.com/openshift/hypershift/pull/9077)
* [OCPBUGS-99299](https://issues.redhat.com/browse/OCPBUGS-99299): [release-4.22] OCPBUGS-86296: Propagate management cluster proxy env vars to konnectivity sidecar [#8592](https://github.com/openshift/hypershift/pull/8592)
* [CNTRLPLANE-3884](https://issues.redhat.com/browse/CNTRLPLANE-3884): Add spec.monitoring API for metrics forwarding [#8872](https://github.com/openshift/hypershift/pull/8872)
* [OCPBUGS-97921](https://issues.redhat.com/browse/OCPBUGS-97921): fix(nodepool): skip CNI-internal IPs in ClusterNetworkCIDRConflict check [#8948](https://github.com/openshift/hypershift/pull/8948)
* [OCPBUGS-98627](https://issues.redhat.com/browse/OCPBUGS-98627): Skip Azure topology LB scope override for ARO HCP IngressController [#8998](https://github.com/openshift/hypershift/pull/8998)
* [OCPBUGS-98220](https://issues.redhat.com/browse/OCPBUGS-98220): fix(cpo,hcco): prevent premature KAS convergence during KMS key rotation [release-4.22] [#8972](https://github.com/openshift/hypershift/pull/8972)
* [OCPBUGS-90083](https://issues.redhat.com/browse/OCPBUGS-90083): Fix NodePool reconciliation failure when updating mirrored immutable ConfigMaps [#8811](https://github.com/openshift/hypershift/pull/8811)
* [OCPBUGS-89236](https://issues.redhat.com/browse/OCPBUGS-89236): Handle CA bundle aggregation delay by requeuing revocation [#8746](https://github.com/openshift/hypershift/pull/8746)
* [Full changelog](https://github.com/openshift/hypershift/compare/aa2d83b008ba32754aa3dedef335c43c4cb5cbd7...e945b30f303400f6acec66738c482af93dc68a70)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/9e5537cd7d239a31d6b2eb56cd44af3ec7b47dd5)

* [OCPBUGS-96641](https://issues.redhat.com/browse/OCPBUGS-96641): bump golang.org/x/net to v0.57.0 [#99](https://github.com/openshift/machine-api-provider-ibmcloud/pull/99)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/46b8c72c675770295f5c2c8f85f5f705ca35787c...9e5537cd7d239a31d6b2eb56cd44af3ec7b47dd5)


### [insights-operator](https://github.com/openshift/insights-operator/tree/a46094471cfb564f3224975a2b1ea6c12d9d057b)

* [OCPBUGS-105227](https://issues.redhat.com/browse/OCPBUGS-105227): secrets and configmap revisions count gathering [#1339](https://github.com/openshift/insights-operator/pull/1339)
* [OCPBUGS-100173](https://issues.redhat.com/browse/OCPBUGS-100173): Update installer dependency to use tagged version [#1332](https://github.com/openshift/insights-operator/pull/1332)
* [OCPBUGS-100154](https://issues.redhat.com/browse/OCPBUGS-100154): [release-4.22] Fix indentation bug on livenessProbe [#1330](https://github.com/openshift/insights-operator/pull/1330)
* [OCPBUGS-96642](https://issues.redhat.com/browse/OCPBUGS-96642): [release-4.22] Upgrade Golang and net library [#1327](https://github.com/openshift/insights-operator/pull/1327)
* [OCPBUGS-98383](https://issues.redhat.com/browse/OCPBUGS-98383): controlplanemachinesets gatherer [#1318](https://github.com/openshift/insights-operator/pull/1318)
* [OCPBUGS-98153](https://issues.redhat.com/browse/OCPBUGS-98153): update HyperShift deployment manifest [#1315](https://github.com/openshift/insights-operator/pull/1315)
* [OCPBUGS-98381](https://issues.redhat.com/browse/OCPBUGS-98381): Optimize the CPU usage of insights-runtime-extractor [#1317](https://github.com/openshift/insights-operator/pull/1317)
* [Full changelog](https://github.com/openshift/insights-operator/compare/0168cccf812470293494ff72042c153c684af58c...a46094471cfb564f3224975a2b1ea6c12d9d057b)


### [ironic](https://github.com/openshift/ironic-image/tree/70bad6d9dc4298c6014c8fc1b00894e5f6c15ffc)

* [OCPBUGS-100167](https://issues.redhat.com/browse/OCPBUGS-100167): Update openstack-ironic commit hash for CVE-2026-44918 [#874](https://github.com/openshift/ironic-image/pull/874)
* [OCPBUGS-88478](https://issues.redhat.com/browse/OCPBUGS-88478): Update openstack-ironic commit hash in requirements.cachito that addresses CVE-2026-43003 [#860](https://github.com/openshift/ironic-image/pull/860)
* [OCPBUGS-98873](https://issues.redhat.com/browse/OCPBUGS-98873): Selectively backport Redfish firmware update fix to 4.22 [#870](https://github.com/openshift/ironic-image/pull/870)
* [Full changelog](https://github.com/openshift/ironic-image/compare/6984e87571f14d42463e10acee6bae32f9294534...70bad6d9dc4298c6014c8fc1b00894e5f6c15ffc)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/4a33a88f4b13d9eef9831427f523a6b5d88e4401)

* [OCPBUGS-88478](https://issues.redhat.com/browse/OCPBUGS-88478): Update commit SHA in requirements.cachito to address CVE-2026-43003 [#266](https://github.com/openshift/ironic-agent-image/pull/266)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/fd9f6409fd02f818101a27812d381941fd6a6bef...4a33a88f4b13d9eef9831427f523a6b5d88e4401)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/6035d101dbc9a7fdd8861d864aeb6f66bacd964b)

* [OCPBUGS-99767](https://issues.redhat.com/browse/OCPBUGS-99767): Reinstall tzdata if /usr/share/zoneinfo is missing [#247](https://github.com/openshift/images/pull/247)
* [Full changelog](https://github.com/openshift/images/compare/edb8b1e6c5e949c0b470b2bdf7a32f17e53d2f71...6035d101dbc9a7fdd8861d864aeb6f66bacd964b)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/0a5ea07ca01263c4273a1a929854969e11a69bea)

* [OCPBUGS-87957](https://issues.redhat.com/browse/OCPBUGS-87957): embed timezone data in kube-state-metrics binary [#150](https://github.com/openshift/kube-state-metrics/pull/150)
* [OCPBUGS-87957](https://issues.redhat.com/browse/OCPBUGS-87957): fix: don't panic on CronJobs with unparseable schedules [#147](https://github.com/openshift/kube-state-metrics/pull/147)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/0111656f618a3eade677e214919077826db47192...0a5ea07ca01263c4273a1a929854969e11a69bea)


### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/09a0a5beaa65fb589d7b571dc47f9748d2463b1c)

* [OCPBUGS-69842](https://issues.redhat.com/browse/OCPBUGS-69842): Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART for 4.22 [#59](https://github.com/openshift/cloud-provider-kubevirt/pull/59)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/76dd5a6fa9e86573bf3dfb79be17edf832e3bae1...09a0a5beaa65fb589d7b571dc47f9748d2463b1c)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/6901793947571b65438b23074506c0ad85f33031)

* Fixes OCPBUGS-105190: increase LRU cache and prefetch timeout for PinnedImageSet [#6372](https://github.com/openshift/machine-config-operator/pull/6372)
* [OCPBUGS-105447](https://issues.redhat.com/browse/OCPBUGS-105447): fix nil pointer panic in IRI controller informer race [#6390](https://github.com/openshift/machine-config-operator/pull/6390)
* [OCPBUGS-105212](https://issues.redhat.com/browse/OCPBUGS-105212): [release-4.22] Part2 Migrate OCB test-case [#6374](https://github.com/openshift/machine-config-operator/pull/6374)
* [OCPBUGS-105213](https://issues.redhat.com/browse/OCPBUGS-105213): Update AMI Whitelist [#6375](https://github.com/openshift/machine-config-operator/pull/6375)
* [OCPBUGS-104563](https://issues.redhat.com/browse/OCPBUGS-104563): Use providerSpec.Template in vSphere machineset reconciliation [#6370](https://github.com/openshift/machine-config-operator/pull/6370)
* [OCPBUGS-100583](https://issues.redhat.com/browse/OCPBUGS-100583): [release-4.22] Part 1 Migrate OCB test cases from openshift-tests-private [#6361](https://github.com/openshift/machine-config-operator/pull/6361)
* [OCPBUGS-104576](https://issues.redhat.com/browse/OCPBUGS-104576): [release-4.22] Add extension verification failure test cases OCP-89090 and OCP-89095 [#6367](https://github.com/openshift/machine-config-operator/pull/6367)
* [OCPBUGS-104451](https://issues.redhat.com/browse/OCPBUGS-104451): [release-4.22] fix fencing_validator ocdebug fence dispatch race condition [#6360](https://github.com/openshift/machine-config-operator/pull/6360)
* [OCPBUGS-100293](https://issues.redhat.com/browse/OCPBUGS-100293): Fix TC 43278 failing when release payload has no MCO commit info [#6351](https://github.com/openshift/machine-config-operator/pull/6351)
* [AGENT-1548](https://issues.redhat.com/browse/AGENT-1548): Backport NoRegistryClusterInstall feature to release-4.22 [#6323](https://github.com/openshift/machine-config-operator/pull/6323)
* [OCPBUGS-99712](https://issues.redhat.com/browse/OCPBUGS-99712): Add TC 88940- Apply password only if changes exist [#6339](https://github.com/openshift/machine-config-operator/pull/6339)
* [OCPBUGS-98962](https://issues.redhat.com/browse/OCPBUGS-98962): [release4.22] MCO-1997: MCO-2297: MCO-2440 Add osImagestream test-cases [#6301](https://github.com/openshift/machine-config-operator/pull/6301)
* [OCPBUGS-93804](https://issues.redhat.com/browse/OCPBUGS-93804): move cleanUpDuplicatedMC to avoid double reboot on first updated Master node [#6240](https://github.com/openshift/machine-config-operator/pull/6240)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/464f0b06a376d8b21e93eb1a3d3064fb69a65c42...6901793947571b65438b23074506c0ad85f33031)


### [metallb-frr](https://github.com/openshift/frr/tree/1277b2387272397d3479d74d2d65112112f985b8)

* [OCPBUGS-86568](https://issues.redhat.com/browse/OCPBUGS-86568): Generate fallback BGP router-id on IPv6-only nodes [#133](https://github.com/openshift/frr/pull/133)
* [Full changelog](https://github.com/openshift/frr/compare/843347fdc9460e0fd064d68a003eae5459cac1fa...1277b2387272397d3479d74d2d65112112f985b8)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/cd7672c06e24c6d377df29d01d1b0015cd2aacd8)

* [OU-1240](https://issues.redhat.com/browse/OU-1240): Makefile and package.json to enable test-frontend-ci [#1094](https://github.com/openshift/monitoring-plugin/pull/1094)
* [OCPBUGS-99032](https://issues.redhat.com/browse/OCPBUGS-99032): Fix CVE-2026-49978 - bump DOMPurify to >= 3.4.7 [#1085](https://github.com/openshift/monitoring-plugin/pull/1085)
* [OCPBUGS-99234](https://issues.redhat.com/browse/OCPBUGS-99234): graph redirect query parameter [#1070](https://github.com/openshift/monitoring-plugin/pull/1070)
* [OU-651](https://issues.redhat.com/browse/OU-651): Fix AlertRules page to display user defined loki alerts [#1057](https://github.com/openshift/monitoring-plugin/pull/1057)
* Fix for OCPBUGS-89698: CVE-2026-12143 [#1053](https://github.com/openshift/monitoring-plugin/pull/1053)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/f70a2826fd34361285056b2417d3623d9a1c3e59...cd7672c06e24c6d377df29d01d1b0015cd2aacd8)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/93a0249eaee2099ea63819d8ca6f35b8f9d507a6)

* [OCPBUGS-98788](https://issues.redhat.com/browse/OCPBUGS-98788): Updating linkify-it to 5.0.2 to fix CVE-2026-48801 [#464](https://github.com/openshift/networking-console-plugin/pull/464)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/25392430212ebb716e63aaafd7eb3bb77dded5f7...93a0249eaee2099ea63819d8ca6f35b8f9d507a6)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/e46079438eb2edd26a6ee6c7c53bedecc557ba6c)

* [OCPBUGS-98716](https://issues.redhat.com/browse/OCPBUGS-98716): Include index image sub-digests in dry run mapping.txt [#1474](https://github.com/openshift/oc-mirror/pull/1474)
* [OCPBUGS-93773](https://issues.redhat.com/browse/OCPBUGS-93773): Make dry-run also generate cluster-resources [#1457](https://github.com/openshift/oc-mirror/pull/1457)
* [OCPBUGS-97946](https://issues.redhat.com/browse/OCPBUGS-97946): skip manifest list signatures [#1469](https://github.com/openshift/oc-mirror/pull/1469)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/3033291cb2611da35306d077b0de11bb35f0b3ef...e46079438eb2edd26a6ee6c7c53bedecc557ba6c)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/f80de29f7161d9bca6c92b89396f90fe60bd438f)

* [OCPBUGS-100305](https://issues.redhat.com/browse/OCPBUGS-100305): Fix cache path to avoid /var/cache/dnf conflict [#783](https://github.com/openshift/operator-framework-operator-controller/pull/783)
* [OCPBUGS-99298](https://issues.redhat.com/browse/OCPBUGS-99298): increase catalog HTTP client timeout from 10s to 5m [#768](https://github.com/openshift/operator-framework-operator-controller/pull/768)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/b3ab2a7ccf696f6d12eb8cd70ba80bbc827928eb...f80de29f7161d9bca6c92b89396f90fe60bd438f)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/64072f688209e887423e716951d621ae33580860)

* [OCPBUGS-105515](https://issues.redhat.com/browse/OCPBUGS-105515), [OCPBUGS-105604](https://issues.redhat.com/browse/OCPBUGS-105604): Branch Sync main to release-4.22 [08-10-2026] [#3373](https://github.com/openshift/ovn-kubernetes/pull/3373)
* [OCPBUGS-95560](https://issues.redhat.com/browse/OCPBUGS-95560): Branch Sync main to release-4.22 [08-04-2026] [#3358](https://github.com/openshift/ovn-kubernetes/pull/3358)
* [OCPBUGS-100119](https://issues.redhat.com/browse/OCPBUGS-100119), [OCPBUGS-95064](https://issues.redhat.com/browse/OCPBUGS-95064): Branch Sync main to release-4.22 [07-28-2026] [#3333](https://github.com/openshift/ovn-kubernetes/pull/3333)
* [OCPBUGS-99043](https://issues.redhat.com/browse/OCPBUGS-99043): Branch Sync main to release-4.22 [07-16-2026] [#3304](https://github.com/openshift/ovn-kubernetes/pull/3304)
* [OCPBUGS-88733](https://issues.redhat.com/browse/OCPBUGS-88733), [OCPBUGS-88734](https://issues.redhat.com/browse/OCPBUGS-88734): Branch Sync main to release-4.22 [06-16-2026] [#3252](https://github.com/openshift/ovn-kubernetes/pull/3252)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/8d3b38cdbe7005e2f8443dc02b0e94b65a8f05e9...64072f688209e887423e716951d621ae33580860)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/f090d1413836ce12c0a2f70f862de5787dfe59d0)

* [OCPBUGS-98185](https://issues.redhat.com/browse/OCPBUGS-98185): build(deps): bump github.com/hashicorp/memberlist from 0.5.4 to 0.6.0 [#157](https://github.com/openshift/prometheus-alertmanager/pull/157)
* [OCPBUGS-99442](https://issues.redhat.com/browse/OCPBUGS-99442): embed tzdata in the alertmanager binary [#141](https://github.com/openshift/prometheus-alertmanager/pull/141)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/02dc3e9e55cf7fa0279e22762d6ace19bbc65fde...f090d1413836ce12c0a2f70f862de5787dfe59d0)


### [rhel-coreos, rhel-coreos-10, rhel-coreos-10-extensions, rhel-coreos-extensions](https://github.com/openshift/os/tree/cf63d7a58a420b35b7f5e42ea0e7deffec56cf91)

* [OCPBUGS-105444](https://issues.redhat.com/browse/OCPBUGS-105444): NetworkManager-ovs has moved to RHCOS [#1956](https://github.com/openshift/os/pull/1956)
* NO-JIRA: Containerfile: restore meta.json as last layer in image [#1950](https://github.com/openshift/os/pull/1950)
* And 7 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/os/compare/f41264dc5f1c1f0a389787ecc5aaec573d485b8e...cf63d7a58a420b35b7f5e42ea0e7deffec56cf91)


### [tests](https://github.com/openshift/origin/tree/4151956d13674fc7149514a063e1a5596e51caf0)

* [OCPBUGS-88711](https://issues.redhat.com/browse/OCPBUGS-88711): Backport node_e2e test migrations [#31306](https://github.com/openshift/origin/pull/31306)
* [AGENT-1549](https://issues.redhat.com/browse/AGENT-1549): Backport NoRegistryClusterInstall feature to release-4.22 [#31406](https://github.com/openshift/origin/pull/31406)
* [SPLAT-2802](https://issues.redhat.com/browse/SPLAT-2802): Added VVCDO OTE binary to extensionBinary list [#31321](https://github.com/openshift/origin/pull/31321)
* [SPLAT-2794](https://issues.redhat.com/browse/SPLAT-2794): Added 3CMO OTE binary to extensionBinary list [#31303](https://github.com/openshift/origin/pull/31303)
* [OCPBUGS-90522](https://issues.redhat.com/browse/OCPBUGS-90522): Use AdminPolicyBasedExternalRoute CR for external gateway test [#31317](https://github.com/openshift/origin/pull/31317)
* [Full changelog](https://github.com/openshift/origin/compare/c3ca9662f45445c8546f2a39aabaa4a88578c9d4...4151956d13674fc7149514a063e1a5596e51caf0)


### [thanos](https://github.com/openshift/thanos/tree/f66e2964942983bf9ed4eb2c969046ce7ef14b91)

* [OCPBUGS-105471](https://issues.redhat.com/browse/OCPBUGS-105471): UPSTREAM: <carry>: bump google.golang.org/grpc to v1.82.1 (GHSA-hrxh-6v49-42gf) [#199](https://github.com/openshift/thanos/pull/199)
* [COO-2034](https://issues.redhat.com/browse/COO-2034), [OCPBUGS-105219](https://issues.redhat.com/browse/OCPBUGS-105219), [OCPBUGS-105223](https://issues.redhat.com/browse/OCPBUGS-105223), [OCPBUGS-105224](https://issues.redhat.com/browse/OCPBUGS-105224): [release-4.22] vendor: bump vulnerable Go dependencies for GovCloud CVE remediation [#197](https://github.com/openshift/thanos/pull/197)
* [OCPBUGS-96898](https://issues.redhat.com/browse/OCPBUGS-96898): Address CVE-2026-39882 [#192](https://github.com/openshift/thanos/pull/192)
* [Full changelog](https://github.com/openshift/thanos/compare/8938facdb517ad9fb2b0d94eaa3a3f5858f314f1...f66e2964942983bf9ed4eb2c969046ce7ef14b91)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/8c37254f86801197707a3f8ef0e8b077f2e8dd5a)

* [OCPBUGS-95573](https://issues.redhat.com/browse/OCPBUGS-95573): Bump golang.org/x/crypto/ssh to v0.48.0-sec.1 [#189](https://github.com/openshift/vmware-vsphere-csi-driver/pull/189)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/64bdb1da6278139e148ec427a4d46c9ab4f49a58...8c37254f86801197707a3f8ef0e8b077f2e8dd5a)