# 4.22.15

Created: 2026-09-17 14:57:31 +0000 UTC

Image Digest: `sha256:fed788eac1c99388dd9b78dda4d6a73e39b70abb00ca918d2bb456a97187f0c1`


## Changes from 4.22.6

### Components

* Kubectl 1.35.2
* Kubernetes upgraded from 1.35.5 to 1.35.6
* Kubernetes Tests 1.35.1
* Red Hat Enterprise Linux CoreOS 10.2 upgraded from 10.2.20260715-0 to 10.2.20260915-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | OKD<br/>Hypershift | OKD<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---:  |
| VSphereMixedNodeEnv <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled |
| NoRegistryClusterInstall <br/> (0 tests)| Disabled| Enabled<br/>(Changed)| Disabled| Enabled| Disabled| Enabled<br/>(Changed)| Disabled| Enabled |
| VSphereMultiVCenterDay2 <br/> (0 tests)| Disabled| Disabled| Enabled| Enabled| Disabled| Disabled| Enabled<br/>(Changed)| Enabled<br/>(Changed) |
| GCPSovereignCloudInstall <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)|  |  | Enabled<br/>(New)| Enabled<br/>(New) |


### Rebuilt images without code change

* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [5e33c228](https://github.com/openshift/apiserver-network-proxy/commit/5e33c22867d59ddd9392a2c6b3194d2f3c6bdfc7) `sha256:e9385176372e3487cdde978fdab9969f16982e789ef3adef8e8b03a7d7bca4a1`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [b4bad3f8](https://github.com/openshift/cloud-provider-aws/commit/b4bad3f89f54ea5df70e49d1fbf3ea3cbc8e59a3) `sha256:11dfdb7fdec1468d007e8b60308a28397dbbee5378e0337740dbcbcc25778516`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [51d6bc76](https://github.com/openshift/aws-ebs-csi-driver/commit/51d6bc760234ffccb0348937a5cfd70b326119b9) `sha256:cca548a89d53d29309873513c18350569224cd5cbe571b6def699e3e4235e496`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [1a0ccbcf](https://github.com/openshift/machine-api-provider-aws/commit/1a0ccbcfc0a7dc06f3a494f0e2b78aa0a0256b9c) `sha256:cd835da7ba366542e1854cacaa55f359e576fa2bb188d67f85ea7119ff011bb6`
* [aws-node-termination-handler](https://github.com/openshift/aws-node-termination-handler) git [341ed3a0](https://github.com/openshift/aws-node-termination-handler/commit/341ed3a086925b17671c5349343fedf988a1139e) `sha256:b58dcdb3bb4422cce23631d41c937cacaae9c517fe66cbf6e3d8666d536c84f7`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [82088287](https://github.com/openshift/aws-pod-identity-webhook/commit/8208828799b6c4f91fd9b80128668f7765599e84) `sha256:0d13e43683138eaf45a1b09155b0b9fd70e4a1e8031f25245cceaa834941365b`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [a17a3e3e](https://github.com/openshift/cloud-provider-azure/commit/a17a3e3eb36b14f0348b003018879a32394c7264) `sha256:14628261af932fd43366ddfb18f1a7475b70f842809b905af822e59fd8b1e576`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [a17a3e3e](https://github.com/openshift/cloud-provider-azure/commit/a17a3e3eb36b14f0348b003018879a32394c7264) `sha256:1bb8d7ae53de360a15e0e8f3da8cdfcf63a82dd1e1e5244eb01eeb96633d3393`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [b44d4444](https://github.com/openshift/azure-service-operator/commit/b44d444422f5a7eb21b9ca65f3975a2d13ec9b36) `sha256:511a712493f8be81443112a1b96ecce71a0f1aada975bb6f106c3459f7d7caae`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [a8fb3bf1](https://github.com/openshift/azure-workload-identity/commit/a8fb3bf1a6296d6cbf69142db458aa9b59cb3a45) `sha256:e03e12d4c62cd28db46b5f4fe9f1b016d5ea1f0000a68a50f379964995f38bc1`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [6481b520](https://github.com/openshift/cluster-api-provider-metal3/commit/6481b52008f0991912f80fdf9d74af3e631a7269) `sha256:a4b4e057e7b7e45de1176e9fd71196390035313eabce9dcaf981e97bff794356`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [8d863b95](https://github.com/openshift/cluster-api-provider-baremetal/commit/8d863b9505a5cfc0b01e33f985a3edf9d3c69f4b) `sha256:ef2ba3d43806c2070739a11448c0f59c64a1ed186714a0d9be8396d71dc90a0f`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [f1718df9](https://github.com/openshift/cluster-api/commit/f1718df9c13b0cee5ede1b6354e29acc466607a4) `sha256:d30e0aff18d3d6c5866ed8f9a3e953b0fa9c66f44548a83fa39e4d985cd8c2e9`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [3d214118](https://github.com/openshift/cluster-dns-operator/commit/3d2141182243cde1ec6417bd005c76d29aa88a01) `sha256:c723b145ae6b9b41275c3f420033a225102d2bb5f84d85b871c842742f29ffa8`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [9afe6687](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/9afe66875bff8b5926f2bf6dec4eade1e4a09bab) `sha256:94ed6e8e2ec281b806e33352992e6be18a74c8a1d47f8fceda0e6d086b7d915b`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [fa7bb022](https://github.com/openshift/cluster-machine-approver/commit/fa7bb0222038fdeb51ddeae57b4c193d1b44a0fa) `sha256:5edafde7dfd70be96b3bb21c643d9b7db722f86e975849edc750b9c1a5968caf`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [f66065f7](https://github.com/openshift/cluster-olm-operator/commit/f66065f7ae39fefe3058d72aa100d41d4327a407) `sha256:4610c136d26762cbf450c4c8bb9c4f01b2a3507626e13fa87a34be78ad738cdb`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [2d2699e4](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/2d2699e4f3fabc80e402f4c090c8cf80c4517977) `sha256:191420db6a04b3d713a7c4b0cb38f705416d54193ea5073d9a7040461aa44a4c`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [2e306e14](https://github.com/openshift/cluster-policy-controller/commit/2e306e143051492a84c5e47a7b3126e096fdf76a) `sha256:b61a012c64a3636eaee87ce236ee723533d9b09f3cfc940a4ab26fe1c0faac59`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [191a6aec](https://github.com/openshift/cluster-samples-operator/commit/191a6aec444bfdbe5d70f7a23a20ee2fd25b7080) `sha256:1e0a615d18e0feda1a73111b29b9cbe863bc03c79043c2690bba7ddd1fb0cb50`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [3b5c59cc](https://github.com/openshift/cluster-update-keys/commit/3b5c59cc6461663751bc510b4f9f1954ed8c9b50) `sha256:ed66c48249252ec4b5319db95ca9b02dd44698f41490d8afcd9c8793b8cb352e`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [94e41c4c](https://github.com/openshift/configmap-reload/commit/94e41c4c6a5832dfd19750173d6544784ba235ec) `sha256:3d0c07f8659e979ff2a293a1d234496a4e04ce4846da35af5270cf942f57c393`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [db552ad3](https://github.com/openshift/containernetworking-plugins/commit/db552ad333e84b99ca279a9c01ca2d918ec00c99) `sha256:3ea529f3e6d145f88a5d6f2fe28b092cf05addcd60eba03a4b2211d2c0929fcb`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [db552ad3](https://github.com/openshift/containernetworking-plugins/commit/db552ad333e84b99ca279a9c01ca2d918ec00c99) `sha256:6858e013c676d1685f45bdfa09113028aade611618dcdd80d3e7ba806094b5ac`
* [coredns](https://github.com/openshift/coredns) git [9a71d9a6](https://github.com/openshift/coredns/commit/9a71d9a6b788437e755b5ed3bfad78c63fa7c6f4) `sha256:55b5150e298003e0b47d5f92a198bc5133632fdde94dff4f038880ab03445e22`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [710a2aea](https://github.com/openshift/cloud-provider-openstack/commit/710a2aea744fd04546d11ac781fb874694e33ad8) `sha256:6237beadc5c82f23fac7eb9f65b4dddab07782a70778c17a680def700e1d0aed`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [b6911553](https://github.com/openshift/csi-driver-nfs/commit/b69115537b79a5b3516e2a900f9095f4ebb3cbe5) `sha256:1d5ff45218d623eed4b5dfa0f18f888e5082cebeab065df662cb4574f5a281ad`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [95a19797](https://github.com/openshift/csi-external-attacher/commit/95a1979700f021e20879480b98b953bc382a0eaf) `sha256:f6ee780fca9496865582ab193aa8f75520271bb48c49e926947edade2b1ef704`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [28f6e063](https://github.com/openshift/csi-external-snapshotter/commit/28f6e06357f2840c241b9cfe09d301516e681c87) `sha256:f70f896bfedd5fabc7d124126303e591dbf074642b318705569b42e3ea5a2618`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [4d5e959a](https://github.com/openshift/csi-livenessprobe/commit/4d5e959a182b4db70dc52302bd89eebfec40d5a5) `sha256:079362e80aa515632252fdce287e0f709363c59285bc246ca3980ce02c5f0fb8`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [bb6a6378](https://github.com/openshift/csi-node-driver-registrar/commit/bb6a6378d2af235b3b253cb422d406bd3d7e30b1) `sha256:faa00dd27191c425e373f7c27f5014732e83c5e852c525f53dca65341b7cf970`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [28f6e063](https://github.com/openshift/csi-external-snapshotter/commit/28f6e06357f2840c241b9cfe09d301516e681c87) `sha256:bce26d9414c4297463c2942c7d56c4275406d36571fd3b8517b1c54d89d52c66`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [7aa4007a](https://github.com/openshift/driver-toolkit/commit/7aa4007a8601bf4bb23b696f580c022f58877223) `sha256:bb43418ed4dfcb716838d9758bce3e9e5544ee708dfa30a55fc1ea40bf6856f6`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [e7674ede](https://github.com/openshift/cluster-api-provider-gcp/commit/e7674ede9ce8d021a878a6d5e81942875387e5eb) `sha256:5d7fd478e2f2f0a4392fa7d565637bfc8f243df91495bcbdc3c6f75cc17714f4`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [d7675f31](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/d7675f312ffdc8501032ff8217776cd7172b6bb0) `sha256:71ad2138d62f09d782316e8b6c66602fe4b89ea22e73625cef378b60179a0139`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [24cff9a6](https://github.com/openshift/cloud-provider-ibm/commit/24cff9a691e1ebee94669c834320c6ea974a2010) `sha256:31334059032ad8f2e7a25409f7ef536b259fdb8365a6ccb91b7a6ebae49f1841`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [d362aef2](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/d362aef240c280676249fa34c80fa1b39c684560) `sha256:c034e7024e6c876ee57d28dddebc4daf8dc3138a80a9444017ba46f18bbb32b0`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [3d5956dd](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/3d5956ddd2292c381309106d23fff1765380c55e) `sha256:e221b48f3637897364a27cd69f7acd1340da4418c046c1a4d39be752af0b0027`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [70256457](https://github.com/openshift/insights-runtime-extractor/commit/70256457b507ec09737800ee7ea022143ed6c3c2) `sha256:4396490d0d3f66dcceac0e760ea1a33e959a66f280abbaab2f7873c321f0cde5`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [70256457](https://github.com/openshift/insights-runtime-extractor/commit/70256457b507ec09737800ee7ea022143ed6c3c2) `sha256:1644865f1e4acf0287689c8e757865c832ab549362bf09a4ce0f72596179b184`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [9953d2b7](https://github.com/openshift/ironic-rhcos-downloader/commit/9953d2b77da077c28f9486a5d965a43149ce30c1) `sha256:625ad050b186d305853f59dcb6e8f28e0856df15a5f41406352496d9677e4009`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [a379d09f](https://github.com/openshift/ironic-static-ip-manager/commit/a379d09f228d93f2beab1c73d67764c64b21e3cb) `sha256:30ef2e19472c7d7d5149c6874525b23ff843d240ec548af0e53d57c9a9663570`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [38c16c46](https://github.com/openshift/kubernetes-metrics-server/commit/38c16c4698d131ab0e2da0d4b4b76d5322a89bab) `sha256:e5871972210508c42358770795e7c3d293198296a44fc9d8d1d7186e78541ef4`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [d12e2746](https://github.com/openshift/kube-rbac-proxy/commit/d12e274605248f6c59373240a7eae7a7a357dcb3) `sha256:fac1d1286a039811bdb734aafb484dba1347e8df8f53cf6f3b92223ba20aa48f`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [a43d9c97](https://github.com/openshift/image-customization-controller/commit/a43d9c977f6332577efcd383cf173a2ff5805a4d) `sha256:fc4c6e36d97d5f24682fcdb83a8649e6f1ce60f866132ef511886ca2c707c718`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [e5342c99](https://github.com/openshift/machine-os-images/commit/e5342c9905a94069e6801737dd6aeddfb74bbac4) `sha256:5bb55a893cea3cefdb3b4d3dbf5185f34d4d297cb432287339e2fc7864b92055`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [d4dd42ba](https://github.com/openshift/multus-admission-controller/commit/d4dd42ba9c17b04e0e5003147f4e140ea5e34749) `sha256:5db7f38c131c0be8912f764c931a47246e86a32c0c92f68fb590f043fd9e18fd`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [834a093f](https://github.com/openshift/multus-networkpolicy/commit/834a093f693e521b8dc4ec7168d03cfba2c1cba1) `sha256:fa256fc8c1a27d22d712217526c37758302c2d4ee270ca57362983d679c5b0c5`
* [network-tools](https://github.com/openshift/network-tools) git [5c4b905c](https://github.com/openshift/network-tools/commit/5c4b905c09ccd6edadb2ff359f45b70ed334f948) `sha256:397571dbc5344fb79b9650017bbdbe7881092decb9edeef08575d9573af96809`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [8e75679a](https://github.com/openshift/cloud-provider-nutanix/commit/8e75679a965b80fee0332f8758471a7d3a75a4e8) `sha256:19a236a299fc7ec749bccc5cf9575e92f36e125923322da0243204b28a8c4c6e`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [60559fdd](https://github.com/openshift/machine-api-provider-nutanix/commit/60559fdd7092dd29aa1c72797c49279aa2da39ee) `sha256:55559f1763e849d8b37052f260f8c0e2b600346a987db7c1f7146fec89a8b5ba`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [26d20fea](https://github.com/openshift/openshift-controller-manager/commit/26d20feae8892f648f5b06ed3f5492fe6ffb4532) `sha256:8dd018f047dd79f1a97cf2225902181d1c57ea51da0972a7ffd3d67eabd17a51`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [e71e0996](https://github.com/openshift/openshift-state-metrics/commit/e71e09969f11a47c87b87c43b762ad1d01f6b04f) `sha256:66f789634fdde05942fd09350d2c037eff706ca6c1ba8cb4d9be7237cc010999`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [710a2aea](https://github.com/openshift/cloud-provider-openstack/commit/710a2aea744fd04546d11ac781fb874694e33ad8) `sha256:f81085887765c7eff5071d802e841ea4e1901506babdc5693e56969a7d55d3d3`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [710a2aea](https://github.com/openshift/cloud-provider-openstack/commit/710a2aea744fd04546d11ac781fb874694e33ad8) `sha256:7df33f74f63289c82e48c2bf72c10a80054c065f169551fbaf8b0d92e82e8ec6`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [74bd2dd2](https://github.com/openshift/machine-api-provider-openstack/commit/74bd2dd2e7bc5b93e78b6b204012b6b7d981a4ba) `sha256:6b1ba3ddbee613ad403d595540d14e02927356f5214435974d43a35e70c219a7`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [38da2ef7](https://github.com/operator-framework/operator-marketplace/commit/38da2ef78cc429f67aea7fb4e589df21ac1ed327) `sha256:956379f6bfb7c1e706bb0635e4c244512c4972590f3723fc428276a0ade53ebe`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [766c0952](https://github.com/openshift/cloud-provider-powervs/commit/766c0952fd19f8225fe59b2be8e8c8932b24ebd7) `sha256:10bde39cd30d0806903ceb2e490d54a2a2b25e09c680e686dc3383dd19b736af`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [e88cf81d](https://github.com/openshift/machine-api-provider-powervs/commit/e88cf81dd9ad174f395b86f9cdc40fa30cb06bf4) `sha256:189eb2d63a68de919de9ed39a01c3404c41715ef973c1fe922fdb41d164cb2e1`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [c4c99a30](https://github.com/openshift/prom-label-proxy/commit/c4c99a3071808f466ee6c3d7b7fa87108b457feb) `sha256:65595962329d4b276d6b3d53603facf3998851c98942972018c815c66c727261`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [6c4fc012](https://github.com/openshift/node_exporter/commit/6c4fc0126407c8404b8604faa2f1230f385b9f44) `sha256:e209f4f2e4c422f46fdf2a905951cdc4bdab01063c3efbe9e92ac7d995ff049f`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [55f77ca4](https://github.com/openshift/route-controller-manager/commit/55f77ca4cf0328b7c4fd7736bce79ebe171a9b6b) `sha256:f716e6c037901fc41e493b51e345b95b791e83fe3ec56cd653289dcda52c44f6`
* [telemeter](https://github.com/openshift/telemeter) git [c2ffb0a7](https://github.com/openshift/telemeter/commit/c2ffb0a7035e504a4ddc7292e4d12b7490eab0d4) `sha256:3da4eecc1b00ebb7461f1abf15eb4581e088f77028170939179c5985a3569ba8`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [8e176cec](https://github.com/openshift/volume-data-source-validator/commit/8e176cec394709cac728423cbbb6c3c914be8485) `sha256:24c2b34561e98fb4f2ae94cfc16ac567db57fcfa0498fd73b76c18e10de79459`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [39008107](https://github.com/openshift/cloud-provider-vsphere/commit/39008107b1463e3299b0d60c3ac1f7e71ad3e014) `sha256:bb645deeb02c5f99121b0f5954246e4548ad096c9f82405f446f089e39a4736c`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [ac542b5a](https://github.com/openshift/cluster-api-provider-vsphere/commit/ac542b5afbd9a3897cda34e7ea1852b61c945e36) `sha256:35350d45691c95218a09d5d869f71152fc10a31fd9291fea75b2bb56bb05f427`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/207d87af62838d2a9ff3eaaf19c213499a732613)

* [OCPBUGS-69811](https://issues.redhat.com/browse/OCPBUGS-69811): Updating ose-agent-installer-api-server-container image to be consistent with ART for 4.22 [#8601](https://github.com/openshift/assisted-service/pull/8601)
* [OCPBUGS-121355](https://issues.redhat.com/browse/OCPBUGS-121355): Fix NUMAResourcesOperator CR name so it can be applied [#10934](https://github.com/openshift/assisted-service/pull/10934)
* [OCPBUGS-120755](https://issues.redhat.com/browse/OCPBUGS-120755): added missing subscription name for lvms-operator [#10918](https://github.com/openshift/assisted-service/pull/10918)
* [OCPBUGS-105805](https://issues.redhat.com/browse/OCPBUGS-105805): golang.org/x/crypto bump to v0.52.0 [#10796](https://github.com/openshift/assisted-service/pull/10796)
* [OCPBUGS-104521](https://issues.redhat.com/browse/OCPBUGS-104521): manifest_generator add a label to LUKS root [#10755](https://github.com/openshift/assisted-service/pull/10755)
* [AGENT-1559](https://issues.redhat.com/browse/AGENT-1559): Remove LSO and LVMS as CNV operator dependencies [#10666](https://github.com/openshift/assisted-service/pull/10666)
* [Full changelog](https://github.com/openshift/assisted-service/compare/f514f423eebab63bae88928de85b79b1c6f45aa0...207d87af62838d2a9ff3eaaf19c213499a732613)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/5caee2bbe7cdfcfa598f3404c1bdcd151303558a)

* [OCPBUGS-69893](https://issues.redhat.com/browse/OCPBUGS-69893): Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.22 [#1405](https://github.com/openshift/assisted-installer/pull/1405)
* [OCPBUGS-96592](https://issues.redhat.com/browse/OCPBUGS-96592): Bump golang.org/x/net to v0.55.0 [#2250](https://github.com/openshift/assisted-installer/pull/2250)
* [OCPBUGS-104498](https://issues.redhat.com/browse/OCPBUGS-104498): Wait for all nodes to join before exiting for ABI [#2245](https://github.com/openshift/assisted-installer/pull/2245)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/24e894263b3231ab8bb27acc9127a835b7b6e997...5caee2bbe7cdfcfa598f3404c1bdcd151303558a)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/d958406a2cfbe3ed9db4963d004bc4d69226b84e)

* [OCPBUGS-69939](https://issues.redhat.com/browse/OCPBUGS-69939): Updating ose-agent-installer-node-agent-container image to be consistent with ART for 4.22 [#1227](https://github.com/openshift/assisted-installer-agent/pull/1227)
* [OCPBUGS-101855](https://issues.redhat.com/browse/OCPBUGS-101855): Bump golang.org/x/net from v0.47.0 to v0.53.0 [#1595](https://github.com/openshift/assisted-installer-agent/pull/1595)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/753d625f3417752aabb1cf7088f311da4ec43da3...d958406a2cfbe3ed9db4963d004bc4d69226b84e)


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/831649c24d3b17fade4d94f5c58c7883146bc3d3)

* [OCPBUGS-123183](https://issues.redhat.com/browse/OCPBUGS-123183): Do not show IRI custom manifests in the disconnected UI [#4052](https://github.com/openshift-assisted/assisted-installer-ui/pull/4052)
* And 18 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/97b56b89eb1aef5758452e5c358e016e239bc227...831649c24d3b17fade4d94f5c58c7883146bc3d3)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/817b11805be82a177657128eac624df2e969d9b2)

* [OCPBUGS-105451](https://issues.redhat.com/browse/OCPBUGS-105451): Update Konflux references [#337](https://github.com/openshift/agent-installer-utils/pull/337)
* [OCPBUGS-101760](https://issues.redhat.com/browse/OCPBUGS-101760): Update Konflux references [#329](https://github.com/openshift/agent-installer-utils/pull/329)
* [OCPBUGS-100105](https://issues.redhat.com/browse/OCPBUGS-100105): Use Operator catalog in 4.22 for OVE [#325](https://github.com/openshift/agent-installer-utils/pull/325)
* [AGENT-1568](https://issues.redhat.com/browse/AGENT-1568): Add lvms-operator to config [#324](https://github.com/openshift/agent-installer-utils/pull/324)
* [OCPBUGS-99906](https://issues.redhat.com/browse/OCPBUGS-99906): Update Konflux references [#302](https://github.com/openshift/agent-installer-utils/pull/302)
* [OCPBUGS-99556](https://issues.redhat.com/browse/OCPBUGS-99556): Use agent-preinstall-image-builder from quay-proxy [#321](https://github.com/openshift/agent-installer-utils/pull/321)
* [OCPBUGS-98743](https://issues.redhat.com/browse/OCPBUGS-98743): Update cluster-logging and loki operator versions [#316](https://github.com/openshift/agent-installer-utils/pull/316)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/114155274b3e4aef0014739286ff586fd4ac3ea4...817b11805be82a177657128eac624df2e969d9b2)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/f60301561fe801da499b22f58aae57eae16ada5a)

* 🌱 [release-4.22] OCPBUGS-119954: UPSTREAM: &lt;carry&gt;: Remove upstream .github files unused in OpenShift CI [#633](https://github.com/openshift/cluster-api-provider-aws/pull/633)
* 🐛 [release-4.22] OCPBUGS-112305: UPSTREAM: 6132: Persist ProviderID immediately after instance creation [#626](https://github.com/openshift/cluster-api-provider-aws/pull/626)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/9172366ccfbde3225e045b59587d38db655edd94...f60301561fe801da499b22f58aae57eae16ada5a)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/dc8b3b3ca8c6930b4f90ff4eaf262f093a4ef368)

* [OCPBUGS-119697](https://issues.redhat.com/browse/OCPBUGS-119697): Add proxy hook for HyperShift CSI driver controller deployments [#619](https://github.com/openshift/csi-operator/pull/619)
* [OCPBUGS-101882](https://issues.redhat.com/browse/OCPBUGS-101882), [OCPBUGS-101889](https://issues.redhat.com/browse/OCPBUGS-101889), [OCPBUGS-101890](https://issues.redhat.com/browse/OCPBUGS-101890), [OCPBUGS-102000](https://issues.redhat.com/browse/OCPBUGS-102000): Bump golang.org/x/net to v0.53.0 [#602](https://github.com/openshift/csi-operator/pull/602)
* [OCPBUGS-109635](https://issues.redhat.com/browse/OCPBUGS-109635): csi-driver-smb: DeleteVolume call fails to mkdir under /tmp [#597](https://github.com/openshift/csi-operator/pull/597)
* [Full changelog](https://github.com/openshift/csi-operator/compare/2dc8bfba20a785131909895e590966832621ae38...dc8b3b3ca8c6930b4f90ff4eaf262f093a4ef368)


### [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws/tree/f607badaa794779517b2a16a9d978f05a502ce8e)

* [OCPBUGS-118884](https://issues.redhat.com/browse/OCPBUGS-118884): default max-pods to 250 for Custom AMI family [#43](https://github.com/openshift/aws-karpenter-provider-aws/pull/43)
* [OCPBUGS-101842](https://issues.redhat.com/browse/OCPBUGS-101842): Fix CVE-2026-33814 [#35](https://github.com/openshift/aws-karpenter-provider-aws/pull/35)
* [Full changelog](https://github.com/openshift/aws-karpenter-provider-aws/compare/f0be9c72e5bf25caeb2ca45c14e67e4d397a52cb...f607badaa794779517b2a16a9d978f05a502ce8e)


### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/061ffd2a2ccc7d801214034d8737039d7392c3b9)

* [OCPBUGS-70017](https://issues.redhat.com/browse/OCPBUGS-70017): Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.22 [#33](https://github.com/openshift/aws-encryption-provider/pull/33)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/19e7b623429799c9c549690a1b5ab499844411f9...061ffd2a2ccc7d801214034d8737039d7392c3b9)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/dd79471cc2f34c7c0b074ee8abc6f43a069811c2)

* [OCPBUGS-105465](https://issues.redhat.com/browse/OCPBUGS-105465): Address CVE-2026-39829 [#396](https://github.com/openshift/cluster-api-provider-azure/pull/396)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/a6ffab6a17878cb9b9eeaa6337c996989d1e7ee3...dd79471cc2f34c7c0b074ee8abc6f43a069811c2)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/b9046c19b05e2dc75a929328e698ab2cc7e279c9)

* UPSTREAM: 3635: OCPBUGS-96598: Bump golang.org/x/net to  v0.55.0 [#165](https://github.com/openshift/azure-disk-csi-driver/pull/165)
* [OCPBUGS-106152](https://issues.redhat.com/browse/OCPBUGS-106152): UPSTREAM: 3756: fix: optionally skip reading the config from the API server [#163](https://github.com/openshift/azure-disk-csi-driver/pull/163)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/cfed1785cb39a7448347485dba95ef4364095b64...b9046c19b05e2dc75a929328e698ab2cc7e279c9)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/32f7275441afca97750de9f1e415bad7c8fbdee3)

* [OCPBUGS-101874](https://issues.redhat.com/browse/OCPBUGS-101874): Bump golang.org/x/net to v0.53.0 [#154](https://github.com/openshift/azure-file-csi-driver/pull/154)
* [OCPBUGS-95536](https://issues.redhat.com/browse/OCPBUGS-95536): Bump golang.org/x/crypto to v0.48.0-sec.1 [#144](https://github.com/openshift/azure-file-csi-driver/pull/144)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/403f856e29605126b2711a1bfe7a4f6c276b344d...32f7275441afca97750de9f1e415bad7c8fbdee3)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/facac71adec60e553ff81da27f1b1f1c0ff82b25)

* [OCPBUGS-74021](https://issues.redhat.com/browse/OCPBUGS-74021): Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.22 [#27](https://github.com/openshift/azure-kubernetes-kms/pull/27)
* [CNTRLPLANE-4024](https://issues.redhat.com/browse/CNTRLPLANE-4024): support sovereign Managed HSM endpoints- #56 [#56](https://github.com/openshift/azure-kubernetes-kms/pull/56)
* [OCPBUGS-101846](https://issues.redhat.com/browse/OCPBUGS-101846): [release-4.22] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#57](https://github.com/openshift/azure-kubernetes-kms/pull/57)
* [CNTRLPLANE-4024](https://issues.redhat.com/browse/CNTRLPLANE-4024): [release-4.22]: Correct Managed HSM endpoints [#53](https://github.com/openshift/azure-kubernetes-kms/pull/53)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/99b9a3a33d8edfd0a2d2876aa7ef1382b2c75a39...facac71adec60e553ff81da27f1b1f1c0ff82b25)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/bad7e9447fa66002e5ec7b0b7952545e7e8a6c9f)

* [OCPBUGS-98074](https://issues.redhat.com/browse/OCPBUGS-98074): Bump golang.org/x/crypto from v0.47.0 to v0.54.0 [#205](https://github.com/openshift/machine-api-provider-azure/pull/205)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/be827be84a2f772e7482889dba45cbc9d9fd32f8...bad7e9447fa66002e5ec7b0b7952545e7e8a6c9f)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/cdaf698d75d93e6ed9bf6203c988c5321a086758)

* [OCPBUGS-122133](https://issues.redhat.com/browse/OCPBUGS-122133): gcp: skip disk type check when the permission is denied [#10862](https://github.com/openshift/installer/pull/10862)
* [OCPBUGS-119240](https://issues.redhat.com/browse/OCPBUGS-119240): gcp: allow GCD load balancer health-check firewall ranges [#10853](https://github.com/openshift/installer/pull/10853)
* [OCPBUGS-100061](https://issues.redhat.com/browse/OCPBUGS-100061): openstack: Reserve addresses for load balancer [#10725](https://github.com/openshift/installer/pull/10725)
* [OCPBUGS-114639](https://issues.redhat.com/browse/OCPBUGS-114639): OCPBUGS-112550, OCPBUGS-112549: Release 4.22 GCD and KMS support [#10783](https://github.com/openshift/installer/pull/10783)
* [AGENT-1583](https://issues.redhat.com/browse/AGENT-1583): post-feature promotion (NoRegistryClusterInstall) openshift/api dependencies bump [#10817](https://github.com/openshift/installer/pull/10817)
* [OCPBUGS-112471](https://issues.redhat.com/browse/OCPBUGS-112471): Update timeout in GetMarketplaceImage to 5 minutes [#10784](https://github.com/openshift/installer/pull/10784)
* [OCPBUGS-111885](https://issues.redhat.com/browse/OCPBUGS-111885): pin argcomplete for yq on Python 3.9 (release-4.22) [#10766](https://github.com/openshift/installer/pull/10766)
* Bug OCPBUGS-99399: baremetal: fix provisioning ISO kernel arguments [#10703](https://github.com/openshift/installer/pull/10703)
* [AGENT-1546](https://issues.redhat.com/browse/AGENT-1546): Backport NoRegistryClusterInstall feature to release-4.22 [#10683](https://github.com/openshift/installer/pull/10683)
* [OCPBUGS-87814](https://issues.redhat.com/browse/OCPBUGS-87814): [release-4.22] Add omitempty to vSphere and Nutanix MachinePool slice fields [#10606](https://github.com/openshift/installer/pull/10606)
* [OCPBUGS-95555](https://issues.redhat.com/browse/OCPBUGS-95555), [OCPBUGS-99017](https://issues.redhat.com/browse/OCPBUGS-99017): bump golang.org/x/crypto to 0.52.0 [#10695](https://github.com/openshift/installer/pull/10695)
* [OCPBUGS-98982](https://issues.redhat.com/browse/OCPBUGS-98982): Update RHCOS-release-4.22 bootimage metadata to 9.8.20260715-1 / 10.2.20260715-0 [#10692](https://github.com/openshift/installer/pull/10692)
* [OCPBUGS-98701](https://issues.redhat.com/browse/OCPBUGS-98701): cluster-api: disable diagnostics endpoint for local CAPI controllers [#10685](https://github.com/openshift/installer/pull/10685)
* [Full changelog](https://github.com/openshift/installer/compare/66eed98d5b9ee6f53aa08d5782a80700bcdf697d...cdaf698d75d93e6ed9bf6203c988c5321a086758)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/7fc3bd6c4f36acec9944d5adcd2083ae21a8df4b)

* [OCPBUGS-90570](https://issues.redhat.com/browse/OCPBUGS-90570): Reject non-empty checksum for OCI images [#501](https://github.com/openshift/baremetal-operator/pull/501)
* [OCPBUGS-99420](https://issues.redhat.com/browse/OCPBUGS-99420): Create ports if they are already inspected and machine is re-registering [#518](https://github.com/openshift/baremetal-operator/pull/518)
* [OCPBUGS-83866](https://issues.redhat.com/browse/OCPBUGS-83866): Include image URL and checksum in provisioning error message [#500](https://github.com/openshift/baremetal-operator/pull/500)
* [OCPBUGS-94109](https://issues.redhat.com/browse/OCPBUGS-94109): cherry-pick reconciler optimizations [#503](https://github.com/openshift/baremetal-operator/pull/503)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/e3a3967d14abac2562792d0b47cd7d8cb15e37f2...7fc3bd6c4f36acec9944d5adcd2083ae21a8df4b)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/1df165545dd61e73101e73ec174e7bd2c930887a)

* [OCPBUGS-112618](https://issues.redhat.com/browse/OCPBUGS-112618): Cloud Platforms: Filter out node's own IP from Upstreams [#401](https://github.com/openshift/baremetal-runtimecfg/pull/401)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/dca8cb1be0cce1ce404dfd407ead1326a3c8bb40...1df165545dd61e73101e73ec174e7bd2c930887a)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/aea5a82b408a8b83dd7d6f8b8ee9a83585dc87fd)

* [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Update build-machinery-go vendor dependency [#2399](https://github.com/openshift/oc/pull/2399)
* [OCPBUGS-114734](https://issues.redhat.com/browse/OCPBUGS-114734): Fix windows builds of oc rpm [#2383](https://github.com/openshift/oc/pull/2383)
* [Full changelog](https://github.com/openshift/oc/compare/7ec2e14b74e700fec86dc0936a61f6c12b79d083...aea5a82b408a8b83dd7d6f8b8ee9a83585dc87fd)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/c3656688274c633cc95fe7044f7c36dadf15e64a)

* [OCPBUGS-114669](https://issues.redhat.com/browse/OCPBUGS-114669): [release-4.22] GCP Alternate Universe Domain Support for WIF [#1092](https://github.com/openshift/cloud-credential-operator/pull/1092)
* [OCPBUGS-114669](https://issues.redhat.com/browse/OCPBUGS-114669): Enable GCP custom universe domain support for CCO [#1083](https://github.com/openshift/cloud-credential-operator/pull/1083)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/c69fe7e078ad2e51f8352af04ff45c54a6a11e1d...c3656688274c633cc95fe7044f7c36dadf15e64a)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/8bc05a827fe54e1421013a198ffefe776efa5b6f)

* : [release-4.22] OCPBUGS-115316: GCP: Set Universe Domain [#264](https://github.com/openshift/cloud-network-config-controller/pull/264)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/2d69ad953cfaa419e9b6221da9edb152ded91e0b...8bc05a827fe54e1421013a198ffefe776efa5b6f)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/8a0eef716961f0562523ee20f0ec8fb96dc8cc15)

* [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Update build-machinery-go vendor dependency [#1000](https://github.com/openshift/cluster-authentication-operator/pull/1000)
* [OCPBUGS-101881](https://issues.redhat.com/browse/OCPBUGS-101881): Bump golang.org/x/net from v0.47.0 to v0.53.0 [#979](https://github.com/openshift/cluster-authentication-operator/pull/979)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/5a44cc2a8c36d144f8782e23f47bc31e2e4ead88...8a0eef716961f0562523ee20f0ec8fb96dc8cc15)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/89f51dcb39919234f4b9b1efb37ffecb68ba7366)

* [OCPBUGS-102038](https://issues.redhat.com/browse/OCPBUGS-102038): [4.22] Fix OCPBUGS-102038 [#434](https://github.com/openshift/kubernetes-autoscaler/pull/434)
* [OCPBUGS-99551](https://issues.redhat.com/browse/OCPBUGS-99551): [release-4.22] UPSTREAM: 10001: chore(clusterapi): add machine phase check for failed machines [#431](https://github.com/openshift/kubernetes-autoscaler/pull/431)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/521e545fb92e7138b2ce2bc05f871f53a6c112fb...89f51dcb39919234f4b9b1efb37ffecb68ba7366)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/effcafeed5e4ab9cee8e312de2aa123331eea9fa)

* [OCPBUGS-101883](https://issues.redhat.com/browse/OCPBUGS-101883): Bump x/net package in release-4.22 [#387](https://github.com/openshift/cluster-autoscaler-operator/pull/387)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/260ea1b5967f47768a0727e8c84d451dc9de5ced...effcafeed5e4ab9cee8e312de2aa123331eea9fa)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/4e98263f296f7886468df2f15f8354fb265b4d91)

* [OCPBUGS-99390](https://issues.redhat.com/browse/OCPBUGS-99390): Make CBO progress in non-baremetal platforms [#646](https://github.com/openshift/cluster-baremetal-operator/pull/646)
* [OCPBUGS-99390](https://issues.redhat.com/browse/OCPBUGS-99390): Cluster Operator baremetal did not report Progressing=True during a cluster update [#634](https://github.com/openshift/cluster-baremetal-operator/pull/634)
* [OCPBUGS-99501](https://issues.redhat.com/browse/OCPBUGS-99501): Apply cluster TLS profile to ironic-proxy container [#635](https://github.com/openshift/cluster-baremetal-operator/pull/635)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/5805e17a895ac569decd193153d45662ede5fc6f...4e98263f296f7886468df2f15f8354fb265b4d91)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/4fc7368dbab7a85969d5c5a0462403b986e1d630)

* [OCPBUGS-123142](https://issues.redhat.com/browse/OCPBUGS-123142): Update build-machinery-go vendor dependency [#148](https://github.com/openshift/cluster-bootstrap/pull/148)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/e6be0fdfbf43883e2301dbf2d0eb3ab4a4f93383...4fc7368dbab7a85969d5c5a0462403b986e1d630)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/5430ff7a34d4c0a946740dcdcd98690c14c63cf9)

* [OCPBUGS-96609](https://issues.redhat.com/browse/OCPBUGS-96609): Bump golang.org/x/net to v0.56.0 to fix CVE-2026-27136 [#624](https://github.com/openshift/cluster-capi-operator/pull/624)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/b84112efbe1a3f34cbabe262335be28595041afc...5430ff7a34d4c0a946740dcdcd98690c14c63cf9)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/e893bf67ceaaf4c0305ea821faf7cb3b98bd3efa)

* [OCPBUGS-114394](https://issues.redhat.com/browse/OCPBUGS-114394): [release-4.22] GCP Alternate Universe Domain Support [#508](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/508)
* [OCPBUGS-112665](https://issues.redhat.com/browse/OCPBUGS-112665): Moved node sync job creation from manifest to operator controller [#507](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/507)
* [OCPBUGS-105883](https://issues.redhat.com/browse/OCPBUGS-105883): Created new job to update vSphere nodes to have vsphere label [#501](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/501)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/b99c3d88b0e7b125f0340bb5d8e3333fa3940a60...e893bf67ceaaf4c0305ea821faf7cb3b98bd3efa)


### [cluster-config-api](https://github.com/openshift/api/tree/1a69e30ec990278cfe41c6a8ef632d32b92cc1db)

* [SPLAT-2865](https://issues.redhat.com/browse/SPLAT-2865): Add vSphere multi vCenter Day 2 [#2969](https://github.com/openshift/api/pull/2969)
* [OCPBUGS-116848](https://issues.redhat.com/browse/OCPBUGS-116848): Add Sovereign cloud feature gate and UniverseDomain field to GCPPlatformStatus [#3022](https://github.com/openshift/api/pull/3022)
* [OCPBUGS-113639](https://issues.redhat.com/browse/OCPBUGS-113639): move empty CRIOCredentialProviderConfig CR to run-level 0000_10 [#3010](https://github.com/openshift/api/pull/3010)
* [SPLAT-2718](https://issues.redhat.com/browse/SPLAT-2718): Promote FeatureGateVSphereMixedNodeEnv to GA [#2949](https://github.com/openshift/api/pull/2949)
* [OCPBUGS-113600](https://issues.redhat.com/browse/OCPBUGS-113600): [release-4.22] OCPBUGS-112479: Handle Sippy date-only format in featuregate-test-analyzer [#3008](https://github.com/openshift/api/pull/3008)
* [OCPBUGS-105168](https://issues.redhat.com/browse/OCPBUGS-105168): Add haproxyVersion in IngressController API [#2971](https://github.com/openshift/api/pull/2971)
* [AGENT-1578](https://issues.redhat.com/browse/AGENT-1578): Promote NoRegistryClusterInstall feature to default [#2979](https://github.com/openshift/api/pull/2979)
* [AGENT-1544](https://issues.redhat.com/browse/AGENT-1544): Backport NoRegistryClusterInstall feature to release-4.22 [#2930](https://github.com/openshift/api/pull/2930)
* [Full changelog](https://github.com/openshift/api/compare/30edb45d20352a7052ecb4c92450c36d73fa354b...1a69e30ec990278cfe41c6a8ef632d32b92cc1db)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/0127940075c2ed73517eceb59bda6c59fd08e867)

* [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Update build-machinery-go vendor dependency [#503](https://github.com/openshift/cluster-config-operator/pull/503)
* [OCPBUGS-77604](https://issues.redhat.com/browse/OCPBUGS-77604): Updating ose-cluster-config-operator-container image to be consistent with ART for 4.22 [#473](https://github.com/openshift/cluster-config-operator/pull/473)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/e0c2428e4618493ad9db0681e3b91444746ddf2c...0127940075c2ed73517eceb59bda6c59fd08e867)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/1a0670568fedf4f75225de2a3bcd33613b9b5bfe)

* [OCPBUGS-121958](https://issues.redhat.com/browse/OCPBUGS-121958): Guard against empty workspace field on vsphere [#420](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/420)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/55dea4dc947da2d8a9c1ffba451a41c3b3662718...1a0670568fedf4f75225de2a3bcd33613b9b5bfe)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/e9b3b21fbc322cb410a58b5f147ac76893d851ea)

* [OCPBUGS-101892](https://issues.redhat.com/browse/OCPBUGS-101892): Bump golang.org/x/net from v0.52.0 to v0.53.0 [#286](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/286)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/4847d2e09adb887610a0e18061bbf508e17f6ee3...e9b3b21fbc322cb410a58b5f147ac76893d851ea)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/0717f683acac640764b888ab7af312ad3f2c8842)

* [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Update build-machinery-go vendor dependency [#1704](https://github.com/openshift/cluster-etcd-operator/pull/1704)
* [OCPBUGS-100120](https://issues.redhat.com/browse/OCPBUGS-100120): Revert 'OCPBUGS-88490: fix etcd operator deadlock when etcd-endpoints configmap is stale' [#1661](https://github.com/openshift/cluster-etcd-operator/pull/1661)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/a31932d8824103b051a37a0197397d53769f2ee6...0717f683acac640764b888ab7af312ad3f2c8842)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/c331da28c42721724ed5229c972c956cd1d9502c)

* [OCPBUGS-88489](https://issues.redhat.com/browse/OCPBUGS-88489): Fix image registry deployment failure on aws-ovn-edge-zones [#1366](https://github.com/openshift/cluster-image-registry-operator/pull/1366)
* [release 4.22] OCPBUGS-114413: GCP Universe Domain Support [#1364](https://github.com/openshift/cluster-image-registry-operator/pull/1364)
* [OCPBUGS-112349](https://issues.redhat.com/browse/OCPBUGS-112349): Improve GCS KMS encryption error handling and documentation [#1362](https://github.com/openshift/cluster-image-registry-operator/pull/1362)
* [OCPBUGS-96612](https://issues.redhat.com/browse/OCPBUGS-96612): Bump golang.org/x/net from v0.47.0 to v0.55.0 [#1355](https://github.com/openshift/cluster-image-registry-operator/pull/1355)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/90e608b3e66c284a5b41bc57e6d0d3a45aceebdc...c331da28c42721724ed5229c972c956cd1d9502c)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/ab5f68632a64486c295c84301600f630c6693976)

* [OCPBUGS-112634](https://issues.redhat.com/browse/OCPBUGS-112634): Support Alternate Universe Domain [#1564](https://github.com/openshift/cluster-ingress-operator/pull/1564)
* [OCPBUGS-105168](https://issues.redhat.com/browse/OCPBUGS-105168): Bump openshift/api which adds HAProxy version API [#1545](https://github.com/openshift/cluster-ingress-operator/pull/1545)
* [OCPBUGS-98728](https://issues.redhat.com/browse/OCPBUGS-98728): Add missing include annotations to IBM Cloud and PowerVS ingress CredentialsRequests [#1506](https://github.com/openshift/cluster-ingress-operator/pull/1506)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/e26c93f0ffdee3272b8fc74e7f1486be25f5d59c...ab5f68632a64486c295c84301600f630c6693976)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/49ef376780eb24d026bdcd882f305af4ab46e4e9)

* [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Update build-machinery-go vendor dependency [#2312](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2312)
* [OCPBUGS-86944](https://issues.redhat.com/browse/OCPBUGS-86944): Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.22 [#2072](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2072)
* [OCPBUGS-120318](https://issues.redhat.com/browse/OCPBUGS-120318): [release-4.22] Backport 10-minute degraded inertia [#2294](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2294)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/9c413cd4dc8c3876cc40ee85c207bf9b143f106f...49ef376780eb24d026bdcd882f305af4ab46e4e9)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/b0509dae420643b9432921a158b3d219da3abd03)

* [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Update build-machinery-go vendor dependency [#969](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/969)
* [OCPBUGS-77677](https://issues.redhat.com/browse/OCPBUGS-77677): Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.22 [#916](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/916)
* [OCPBUGS-116225](https://issues.redhat.com/browse/OCPBUGS-116225): [release-4.22] Add 10-minute degraded inertia [#966](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/966)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/95150ed5dbf11370b4a06e6959c77efa13768561...b0509dae420643b9432921a158b3d219da3abd03)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/497c7928d45d88396c5c1e204592811427cc256b)

* [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Update build-machinery-go vendor dependency [#678](https://github.com/openshift/cluster-kube-scheduler-operator/pull/678)
* [OCPBUGS-120133](https://issues.redhat.com/browse/OCPBUGS-120133): [release-4.22] Backport 10-minute degraded inertia [#664](https://github.com/openshift/cluster-kube-scheduler-operator/pull/664)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/51ea59abd057d0cef56b29b8a74efc28411d5427...497c7928d45d88396c5c1e204592811427cc256b)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/0354fe76edacf5fbb2a01c9e56d1e467d8621c79)

* [OCPBUGS-105469](https://issues.redhat.com/browse/OCPBUGS-105469): enable read-only rootfs for all containers [#3047](https://github.com/openshift/cluster-monitoring-operator/pull/3047)
* [OCPBUGS-112572](https://issues.redhat.com/browse/OCPBUGS-112572): [release-4.22] Makefile: version-stamp golangci-lint binary to prevent stale linter [#3064](https://github.com/openshift/cluster-monitoring-operator/pull/3064)
* [OCPBUGS-105304](https://issues.redhat.com/browse/OCPBUGS-105304): [release-4.22] wrap library-go resourceCache with mutex for thread safety [#3045](https://github.com/openshift/cluster-monitoring-operator/pull/3045)
* [OCPBUGS-104852](https://issues.redhat.com/browse/OCPBUGS-104852): [release-4.22] e2e: scale down CVO and MCO to prevent node reboots during proxy config watch test [#3052](https://github.com/openshift/cluster-monitoring-operator/pull/3052)
* [OCPBUGS-104536](https://issues.redhat.com/browse/OCPBUGS-104536): Backport e2e stabilization 4.22 [#3026](https://github.com/openshift/cluster-monitoring-operator/pull/3026)
* [OCPBUGS-100367](https://issues.redhat.com/browse/OCPBUGS-100367): [release-4.22] fix: watch cluster wide proxy changes and apply changes accordingly [#3020](https://github.com/openshift/cluster-monitoring-operator/pull/3020)
* [OCPBUGS-99748](https://issues.redhat.com/browse/OCPBUGS-99748): fall back to kube-system/global-pull-secret for telemeter-client token [#3001](https://github.com/openshift/cluster-monitoring-operator/pull/3001)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/de5b2bd406ec6b9c67bf4ffa4847f3609ff46615...0354fe76edacf5fbb2a01c9e56d1e467d8621c79)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/6d4ef087a25c346e76149f5bef614387e86857cb)

* [OCPBUGS-99048](https://issues.redhat.com/browse/OCPBUGS-99048): Restart pods when rendering egressIP settings [#3061](https://github.com/openshift/cluster-network-operator/pull/3061)
* [OCPBUGS-105556](https://issues.redhat.com/browse/OCPBUGS-105556): [4.22] frr-k8s: use Recreate strategy for statuscleaner deployment [#3130](https://github.com/openshift/cluster-network-operator/pull/3130)
* [OCPBUGS-105512](https://issues.redhat.com/browse/OCPBUGS-105512): Remove version-specific CNI binary copy logic [#3114](https://github.com/openshift/cluster-network-operator/pull/3114)
* [OCPBUGS-99744](https://issues.redhat.com/browse/OCPBUGS-99744): Bump frr-k8s MAX_FDS from 1024 to 65536 [#3090](https://github.com/openshift/cluster-network-operator/pull/3090)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/c1ea3224b639ac2ee98b4f4590a40474976aac5e...6d4ef087a25c346e76149f5bef614387e86857cb)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/ec4783d7ba0a08b9d933a20636a6e2488097ec92)

* [OCPBUGS-101927](https://issues.redhat.com/browse/OCPBUGS-101927): Bump golang.org/x/net from v0.49.0 to v0.58.0 [#1634](https://github.com/openshift/cluster-node-tuning-operator/pull/1634)
* [OCPBUGS-113579](https://issues.redhat.com/browse/OCPBUGS-113579): Update PPC help description [#1613](https://github.com/openshift/cluster-node-tuning-operator/pull/1613)
* [OCPBUGS-112554](https://issues.redhat.com/browse/OCPBUGS-112554): Use Add() instead of AddRateLimited() for routine Profile enqueues [#1601](https://github.com/openshift/cluster-node-tuning-operator/pull/1601)
* [OCPBUGS-104615](https://issues.redhat.com/browse/OCPBUGS-104615): E2E: LLC: Restore uncore cache annotation to true [#1577](https://github.com/openshift/cluster-node-tuning-operator/pull/1577)
* [OCPBUGS-105873](https://issues.redhat.com/browse/OCPBUGS-105873): BUG-FIX Latency Test [#1583](https://github.com/openshift/cluster-node-tuning-operator/pull/1583)
* [OCPBUGS-105535](https://issues.redhat.com/browse/OCPBUGS-105535): Add missing annotations to NetworkPolicy manifests [#1580](https://github.com/openshift/cluster-node-tuning-operator/pull/1580)
* [OCPBUGS-99265](https://issues.redhat.com/browse/OCPBUGS-99265): E2E: LLC: Pass fresh ctx variable to DeferCleanup functions [#1567](https://github.com/openshift/cluster-node-tuning-operator/pull/1567)
* [OCPBUGS-92011](https://issues.redhat.com/browse/OCPBUGS-92011): e2e: fix: clear hugepages before switching kernelPageSize to 4k [#1554](https://github.com/openshift/cluster-node-tuning-operator/pull/1554)
* [OCPBUGS-99290](https://issues.redhat.com/browse/OCPBUGS-99290): e2e: fix broken checks and rework netqueue tests to avoid ARM ethtool blackout flakes [#1568](https://github.com/openshift/cluster-node-tuning-operator/pull/1568)
* [OCPBUGS-98400](https://issues.redhat.com/browse/OCPBUGS-98400): E2E: Add functional test cases checking GOMAXPROCS [#1561](https://github.com/openshift/cluster-node-tuning-operator/pull/1561)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/7ee68aef32163efa1cf1b52760b9fd52c764d13d...ec4783d7ba0a08b9d933a20636a6e2488097ec92)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/f6648e03639d2eb2c9f88bf340ac0871f1c0b26e)

* [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Update build-machinery-go vendor dependency [#772](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/772)
* [OCPBUGS-100168](https://issues.redhat.com/browse/OCPBUGS-100168): Allow Prometheus to scrape check-endpoints metrics on port 17698 [#743](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/743)
* [OCPBUGS-105443](https://issues.redhat.com/browse/OCPBUGS-105443): Add HostToContainer mountPropagation to node-pullsecrets volume mount [#748](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/748)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/1924cf6f12c632d56f1d41341f08ff9ff6eae7d6...f6648e03639d2eb2c9f88bf340ac0871f1c0b26e)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/8f4ce04189e9c5496548ed53e33943aba8756279)

* [OCPBUGS-112334](https://issues.redhat.com/browse/OCPBUGS-112334): Pass management cluster proxy env vars to CSI driver operator deployments [#740](https://github.com/openshift/cluster-storage-operator/pull/740)
* [OCPBUGS-96622](https://issues.redhat.com/browse/OCPBUGS-96622): Bump golang.org/x/net to v0.55.0 [#722](https://github.com/openshift/cluster-storage-operator/pull/722)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/8dfdf2ef3310358f3559a5481df43b98b2294791...8f4ce04189e9c5496548ed53e33943aba8756279)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/6ac86dc99c02366314381b720ab1d4a38d38f1c2)

* [OCPBUGS-104545](https://issues.redhat.com/browse/OCPBUGS-104545): pkg/cvo/egress: Disable Proxy respect on HyperShift [#1438](https://github.com/openshift/cluster-version-operator/pull/1438)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/9b55234a27cfd62921270073f2464ec294132b2d...6ac86dc99c02366314381b720ab1d4a38d38f1c2)


### [console](https://github.com/openshift/console/tree/82fd3852d347de8f31c78b3f0c9266d1e0c453a2)

* [OCPBUGS-115003](https://issues.redhat.com/browse/OCPBUGS-115003): Validate chart URL in /api/helm/verify to prevent SSRF [#17118](https://github.com/openshift/console/pull/17118)
* [OCPBUGS-114725](https://issues.redhat.com/browse/OCPBUGS-114725): display operators in catalog when Tech Preview enabled [#17114](https://github.com/openshift/console/pull/17114)
* [OCPBUGS-111417](https://issues.redhat.com/browse/OCPBUGS-111417): make cloud provider fields optional during operator install [#17014](https://github.com/openshift/console/pull/17014)
* [OCPBUGS-109521](https://issues.redhat.com/browse/OCPBUGS-109521): Remove unscoped CSV watch from ClusterNotUpgradeableAlert [#17013](https://github.com/openshift/console/pull/17013)
* [OCPBUGS-100519](https://issues.redhat.com/browse/OCPBUGS-100519), [OCPBUGS-101795](https://issues.redhat.com/browse/OCPBUGS-101795): Fix CVE-2026-69153 and CVE-2026-45623 - Bump postcss [#17054](https://github.com/openshift/console/pull/17054)
* [OCPBUGS-112271](https://issues.redhat.com/browse/OCPBUGS-112271): Fix flaky TestAsyncCache backend test [#17045](https://github.com/openshift/console/pull/17045)
* [OCPBUGS-105478](https://issues.redhat.com/browse/OCPBUGS-105478): [release-4.22] OCPBUGS-83799: Fix Workloads sidebar ordering when DeploymentConfig is unavailable [#16928](https://github.com/openshift/console/pull/16928)
* Fix OCPBUGS-99414: CVE-2026-59877 [#16834](https://github.com/openshift/console/pull/16834)
* [OCPBUGS-95402](https://issues.redhat.com/browse/OCPBUGS-95402): Fix orphaned shell processes in pod terminal on WebSocket disconnect [#16694](https://github.com/openshift/console/pull/16694)
* Fix for OCPBUGS-101812: CVE-2026-69152 [#16930](https://github.com/openshift/console/pull/16930)
* Fix for OCPBUGS-105894: CVE-2026-73086 [#16965](https://github.com/openshift/console/pull/16965)
* [OCPBUGS-87832](https://issues.redhat.com/browse/OCPBUGS-87832): Use stable username hash for user-settings ConfigMap names [#16565](https://github.com/openshift/console/pull/16565)
* [OCPBUGS-105611](https://issues.redhat.com/browse/OCPBUGS-105611): [release-4.22] Fix leading whitespace in Quick Start execute code snippets [#16951](https://github.com/openshift/console/pull/16951)
* [OCPBUGS-89705](https://issues.redhat.com/browse/OCPBUGS-89705): Fix CVE-2026-12143 form-data CRLF injection [#16644](https://github.com/openshift/console/pull/16644)
* [OCPBUGS-100059](https://issues.redhat.com/browse/OCPBUGS-100059): quickstart page i18n misses (Fix Quick Starts i18n bundle lookup for zh-CN) [#16869](https://github.com/openshift/console/pull/16869)
* [OCPBUGS-100317](https://issues.redhat.com/browse/OCPBUGS-100317): Fix pod terminal not rendering until resize [#16892](https://github.com/openshift/console/pull/16892)
* [OCPBUGS-100307](https://issues.redhat.com/browse/OCPBUGS-100307): Re-enable Knative Cypress e2e tests [#16889](https://github.com/openshift/console/pull/16889)
* Fix OCPBUGS-98791: CVE-2026-48801 [#16852](https://github.com/openshift/console/pull/16852)
* [OCPBUGS-99545](https://issues.redhat.com/browse/OCPBUGS-99545): '0 B' is shown on details page when create pvc with 'EiB' unit [#16807](https://github.com/openshift/console/pull/16807)
* [OCPBUGS-99548](https://issues.redhat.com/browse/OCPBUGS-99548): Incorrect translations for 'CatalogSources' and 'OperatorGroups' in l… [#16809](https://github.com/openshift/console/pull/16809)
* [OCPBUGS-99259](https://issues.redhat.com/browse/OCPBUGS-99259): Disable Knative e2e Cypress tests in CI [#16784](https://github.com/openshift/console/pull/16784)
* [OCPBUGS-98437](https://issues.redhat.com/browse/OCPBUGS-98437): CVE-2026-59869 bump js-yaml [#16768](https://github.com/openshift/console/pull/16768)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/1b34f3b20e4fd7dc63f42172fa8321aa691d0729...82fd3852d347de8f31c78b3f0c9266d1e0c453a2)


### [console-operator](https://github.com/openshift/console-operator/tree/35170581874b91514a9459766758fa0aa5da22f6)

* [OCPBUGS-81121](https://issues.redhat.com/browse/OCPBUGS-81121): clone bump documentation base url [#1154](https://github.com/openshift/console-operator/pull/1154)
* [OCPBUGS-100387](https://issues.redhat.com/browse/OCPBUGS-100387): Sort plugin list to make them deterministic [#1165](https://github.com/openshift/console-operator/pull/1165)
* [OCPBUGS-97828](https://issues.redhat.com/browse/OCPBUGS-97828), [OCPBUGS-97829](https://issues.redhat.com/browse/OCPBUGS-97829): Stabilize telemetry config to prevent continuous console pod rollouts [#1183](https://github.com/openshift/console-operator/pull/1183)
* [Full changelog](https://github.com/openshift/console-operator/compare/17197dc60a20fc537857dfb8d484f54fce735f08...35170581874b91514a9459766758fa0aa5da22f6)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/253b987d5233b1adb93b5ae2c63102c0d06c01cf)

* [OCPBUGS-96626](https://issues.redhat.com/browse/OCPBUGS-96626): Bump golang.org/x/net to v0.57.0 [#148](https://github.com/openshift/csi-external-provisioner/pull/148)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/2d611ab4a7c6fa227a72d54c7ac88530d2c8513b...253b987d5233b1adb93b5ae2c63102c0d06c01cf)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/20f7fbe41654ebe10d2d4f50ae423c9686ce1c25)

* [OCPBUGS-101944](https://issues.redhat.com/browse/OCPBUGS-101944): Bump golang.org/x/net to v0.53.0 [#209](https://github.com/openshift/csi-external-resizer/pull/209)
* [OCPBUGS-82031](https://issues.redhat.com/browse/OCPBUGS-82031): Bump google.golang.org/grpc to v1.79.3 [#199](https://github.com/openshift/csi-external-resizer/pull/199)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/4e74a4aa52a2046d6b97a47dff7a60ddb73d0bbd...20f7fbe41654ebe10d2d4f50ae423c9686ce1c25)


### [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata/tree/b48f04782c567b8759292085b7ad554dce013d8a)

* [OCPBUGS-83948](https://issues.redhat.com/browse/OCPBUGS-83948): Bump google.golang.org/grpc to v1.79.3 [#19](https://github.com/openshift/csi-external-snapshot-metadata/pull/19)
* [Full changelog](https://github.com/openshift/csi-external-snapshot-metadata/compare/7652318579a38838931a5be492cee3573c7c8ecf...b48f04782c567b8759292085b7ad554dce013d8a)


### [docker-builder](https://github.com/openshift/builder/tree/3dead2dcc98d83fb97f42d46b05c5253752e7910)

* [OCPBUGS-86910](https://issues.redhat.com/browse/OCPBUGS-86910): Updating openshift-enterprise-builder-container image to be consistent with ART for 4.22 [#538](https://github.com/openshift/builder/pull/538)
* [Full changelog](https://github.com/openshift/builder/compare/fcd4ce2d96613a27bd1ab7f53ff47225976c4ba9...3dead2dcc98d83fb97f42d46b05c5253752e7910)


### [docker-registry](https://github.com/openshift/image-registry/tree/179d7925210490c5de4846540e01c33601cd8cd1)

* [release 4.22] OCPBUGS-114405: GCP: Support Alternate Universe Domain [#476](https://github.com/openshift/image-registry/pull/476)
* [Full changelog](https://github.com/openshift/image-registry/compare/9eae44fcf44142a705031fa16a613c450dbe685a...179d7925210490c5de4846540e01c33601cd8cd1)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/de48cd14b2296d57397c1139076af4d1474c301f)

* [OCPBUGS-120707](https://issues.redhat.com/browse/OCPBUGS-120707): Update Dockerfiles [#114](https://github.com/openshift/egress-router-cni/pull/114)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/af8f30136791fa3f3dc9e5638bdb062db133bbbd...de48cd14b2296d57397c1139076af4d1474c301f)


### [etcd](https://github.com/openshift/etcd/tree/6bd01267dc858aca6ff21632f95e98dc62ba33e7)

* [OCPBUGS-82497](https://issues.redhat.com/browse/OCPBUGS-82497): Rebase v3.6.13 for openshift-4.22 [#393](https://github.com/openshift/etcd/pull/393)
* [Full changelog](https://github.com/openshift/etcd/compare/d8d67b8ce849f816d6d23c904098336632e2348f...6bd01267dc858aca6ff21632f95e98dc62ba33e7)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/13ec7ad1510492854e6a0a2dc0cd57e244e3baea)

* NO-JIRA: Update OWNERS [#160](https://github.com/openshift/cloud-provider-gcp/pull/160)
* [OCPBUGS-112265](https://issues.redhat.com/browse/OCPBUGS-112265): UPSTREAM: 1250: Support Universe Domain client options (#1250) [#141](https://github.com/openshift/cloud-provider-gcp/pull/141)
* [OCPBUGS-99228](https://issues.redhat.com/browse/OCPBUGS-99228): Fix node.kubernetes.io/exclude-from-external-load-balancers on masters [#130](https://github.com/openshift/cloud-provider-gcp/pull/130)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/ea31ab85a7cf25e88532598b73502d535462a5d7...13ec7ad1510492854e6a0a2dc0cd57e244e3baea)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/03efd8ba0751d4b7cb2be874e32ac9b72e086e4d)

* [OCPBUGS-114401](https://issues.redhat.com/browse/OCPBUGS-114401): gcd support [#193](https://github.com/openshift/machine-api-provider-gcp/pull/193)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/0073bd1187c07febc963fc67f0df67cd33c8f218...03efd8ba0751d4b7cb2be874e32ac9b72e086e4d)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/e3556b4d8912f40ae4013f6bd597edd7c9cdb59d)

* [OCPBUGS-114412](https://issues.redhat.com/browse/OCPBUGS-114412): Add Universe Domain Support [#129](https://github.com/openshift/gcp-pd-csi-driver/pull/129)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/48a7a1aa3f2200d01cf1b6e63a5a6cfd5004a8b0...e3556b4d8912f40ae4013f6bd597edd7c9cdb59d)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/d9cd6ca1661bb11dfbb828815665985830e32622)

* [OCPBUGS-115120](https://issues.redhat.com/browse/OCPBUGS-115120): detect GCP Dedicated and use hyperdisk-balanced StorageClass [#204](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/204)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/3da58a8c88a425e8e05d6e907f5492a49a0ee348...d9cd6ca1661bb11dfbb828815665985830e32622)


### [haproxy-router](https://github.com/openshift/router/tree/b70b28c0380056950793382f42b9b2eaf9330945)

* [OCPBUGS-101956](https://issues.redhat.com/browse/OCPBUGS-101956): Bump golang.org/x/net from v0.48.0 to v0.53.0 [#834](https://github.com/openshift/router/pull/834)
* [OCPBUGS-87166](https://issues.redhat.com/browse/OCPBUGS-87166): Prevent SSRF via FQDN-typed EndpointSlices [#813](https://github.com/openshift/router/pull/813)
* [Full changelog](https://github.com/openshift/router/compare/5586fa9c77025679df4dee2a0895e95333ffbc8a...b70b28c0380056950793382f42b9b2eaf9330945)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/160626b4fccad02c2aacc0b30eb4d660bb9d4e66)

* [OCPBUGS-107557](https://issues.redhat.com/browse/OCPBUGS-107557), [OCPBUGS-107672](https://issues.redhat.com/browse/OCPBUGS-107672): bump otel to v1.44.0 to fix CVE-2026-41178 [#2770](https://github.com/openshift/kubernetes/pull/2770)
* [OCPBUGS-98604](https://issues.redhat.com/browse/OCPBUGS-98604): Add NodeSelectorAdjuster admission plugin for HCP clusters (part 2) [#2767](https://github.com/openshift/kubernetes/pull/2767)
* [OCPBUGS-98604](https://issues.redhat.com/browse/OCPBUGS-98604): Add NodeSelectorAdjuster admission plugin for HCP clusters [#2718](https://github.com/openshift/kubernetes/pull/2718)
* NO-JIRA: Update openshift-hack/rebase.sh [#2733](https://github.com/openshift/kubernetes/pull/2733)
* [OCPBUGS-96637](https://issues.redhat.com/browse/OCPBUGS-96637): Bump golang.org/x/net from v0.47.0 to v0.55.0 [#2737](https://github.com/openshift/kubernetes/pull/2737)
* [OCPBUGS-91744](https://issues.redhat.com/browse/OCPBUGS-91744), [OCPBUGS-93526](https://issues.redhat.com/browse/OCPBUGS-93526), [OCPBUGS-93551](https://issues.redhat.com/browse/OCPBUGS-93551), [OCPBUGS-95549](https://issues.redhat.com/browse/OCPBUGS-95549), [OCPBUGS-95556](https://issues.redhat.com/browse/OCPBUGS-95556): Bump golang.org/x/crypto/ssh to v0.52.0 [#2725](https://github.com/openshift/kubernetes/pull/2725)
* [OCPBUGS-99766](https://issues.redhat.com/browse/OCPBUGS-99766): UPSTREAM: &lt;carry&gt;: upkeep cpu partitioning admission webhook [#2724](https://github.com/openshift/kubernetes/pull/2724)
* [OCPBUGS-90148](https://issues.redhat.com/browse/OCPBUGS-90148): Rebase v1.35.6 in release-4.22 [#2707](https://github.com/openshift/kubernetes/pull/2707)
* [Full changelog](https://github.com/openshift/kubernetes/compare/03c5938b61486a1fde89b5d546f57bb4c6ad1acc...160626b4fccad02c2aacc0b30eb4d660bb9d4e66)


### [hypershift](https://github.com/openshift/hypershift/tree/7273000c23583d67eaa63db019318e5aa7381297)

* [CNTRLPLANE-4321](https://issues.redhat.com/browse/CNTRLPLANE-4321): Cherry-pick kube-scheduler metrics support [#9490](https://github.com/openshift/hypershift/pull/9490)
* [CNTRLPLANE-4024](https://issues.redhat.com/browse/CNTRLPLANE-4024): feat(azure): support managed HSM for KMS encryption [#9437](https://github.com/openshift/hypershift/pull/9437)
* [OCPBUGS-98328](https://issues.redhat.com/browse/OCPBUGS-98328): fix(kubevirt): use only first MachineInternalIP per family in EndpointSlice endpoints [#8979](https://github.com/openshift/hypershift/pull/8979)
* [CNTRLPLANE-3774](https://issues.redhat.com/browse/CNTRLPLANE-3774): [release-4.22] fix: control-plane-operator: improve opaque conditions [#9058](https://github.com/openshift/hypershift/pull/9058)
* [OCPBUGS-111083](https://issues.redhat.com/browse/OCPBUGS-111083): fix(hcco): run kas-connection-checker as non-root [#9320](https://github.com/openshift/hypershift/pull/9320)
* [OCPBUGS-105866](https://issues.redhat.com/browse/OCPBUGS-105866): remove redhat-marketplace catalog from HyperShift [#9289](https://github.com/openshift/hypershift/pull/9289)
* [OCPBUGS-105591](https://issues.redhat.com/browse/OCPBUGS-105591): [release-4.22] use in-cluster service for oauth-server [#9127](https://github.com/openshift/hypershift/pull/9127)
* [OCPBUGS-96711](https://issues.redhat.com/browse/OCPBUGS-96711): Apply MetricsSet relabel configs to KAS ServiceMonitor [#8901](https://github.com/openshift/hypershift/pull/8901)
* [OCPBUGS-105421](https://issues.redhat.com/browse/OCPBUGS-105421): fix(upsert): add desired-state hash to detect spec field removals [#9259](https://github.com/openshift/hypershift/pull/9259)
* [OCPBUGS-101964](https://issues.redhat.com/browse/OCPBUGS-101964): [release-4.22] OCPBUGS-98213: fix router component ordering to prevent missing HAProxy backends [#9212](https://github.com/openshift/hypershift/pull/9212)
* [OCPBUGS-100332](https://issues.redhat.com/browse/OCPBUGS-100332): fix(konnectivity): conditionally prefer IPv4 based on HCP network config [release-4.22] [#9191](https://github.com/openshift/hypershift/pull/9191)
* [OCPBUGS-100141](https://issues.redhat.com/browse/OCPBUGS-100141): Add proxy env vars to AWS cloud-controller-manager deployment [#9156](https://github.com/openshift/hypershift/pull/9156)
* [OCPBUGS-94518](https://issues.redhat.com/browse/OCPBUGS-94518): add ACR pull identity to worker cloud.conf and VMSS [#8865](https://github.com/openshift/hypershift/pull/8865)
* [OCPBUGS-100299](https://issues.redhat.com/browse/OCPBUGS-100299): Avoid printing errors twice [#9183](https://github.com/openshift/hypershift/pull/9183)
* [OCPBUGS-94170](https://issues.redhat.com/browse/OCPBUGS-94170): fix registry override matching and propagation to init containers [#8877](https://github.com/openshift/hypershift/pull/8877)
* [OCPBUGS-100176](https://issues.redhat.com/browse/OCPBUGS-100176): Remove hardcoded quay.io credentials from EnsureGlobalPullSecret test [#9169](https://github.com/openshift/hypershift/pull/9169)
* [OCPBUGS-90086](https://issues.redhat.com/browse/OCPBUGS-90086): [release-4.22] clear stale EtcdRecoveryActive failure condition when etcd is healthy [#8806](https://github.com/openshift/hypershift/pull/8806)
* [OCPBUGS-99554](https://issues.redhat.com/browse/OCPBUGS-99554): fix(backport): konnectivity agent auth to 4.22 [#9077](https://github.com/openshift/hypershift/pull/9077)
* [OCPBUGS-99299](https://issues.redhat.com/browse/OCPBUGS-99299): [release-4.22] OCPBUGS-86296: Propagate management cluster proxy env vars to konnectivity sidecar [#8592](https://github.com/openshift/hypershift/pull/8592)
* [CNTRLPLANE-3884](https://issues.redhat.com/browse/CNTRLPLANE-3884): Add spec.monitoring API for metrics forwarding [#8872](https://github.com/openshift/hypershift/pull/8872)
* [OCPBUGS-97921](https://issues.redhat.com/browse/OCPBUGS-97921): fix(nodepool): skip CNI-internal IPs in ClusterNetworkCIDRConflict check [#8948](https://github.com/openshift/hypershift/pull/8948)
* [Full changelog](https://github.com/openshift/hypershift/compare/fb3b1a35547630a2c5ff669e5cd15db788e56f22...7273000c23583d67eaa63db019318e5aa7381297)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/c378efee05fd02323d241e86244dee3b56e32a45)

* [OCPBUGS-101965](https://issues.redhat.com/browse/OCPBUGS-101965): Replace golang.org/x/net with openshift-sustaining/net [#176](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/176)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/03b143d588768a18fd8afa1534ea7d7a04b4d1f3...c378efee05fd02323d241e86244dee3b56e32a45)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/9e5537cd7d239a31d6b2eb56cd44af3ec7b47dd5)

* [OCPBUGS-96641](https://issues.redhat.com/browse/OCPBUGS-96641): bump golang.org/x/net to v0.57.0 [#99](https://github.com/openshift/machine-api-provider-ibmcloud/pull/99)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/46b8c72c675770295f5c2c8f85f5f705ca35787c...9e5537cd7d239a31d6b2eb56cd44af3ec7b47dd5)


### [insights-operator](https://github.com/openshift/insights-operator/tree/3846c60a0e66659d0d4b1690a637ebf9c1a61927)

* [OCPBUGS-122009](https://issues.redhat.com/browse/OCPBUGS-122009): add custom proxy field to insights config [#1362](https://github.com/openshift/insights-operator/pull/1362)
* [OCPBUGS-105227](https://issues.redhat.com/browse/OCPBUGS-105227): secrets and configmap revisions count gathering [#1339](https://github.com/openshift/insights-operator/pull/1339)
* [OCPBUGS-100173](https://issues.redhat.com/browse/OCPBUGS-100173): Update installer dependency to use tagged version [#1332](https://github.com/openshift/insights-operator/pull/1332)
* [OCPBUGS-100154](https://issues.redhat.com/browse/OCPBUGS-100154): [release-4.22] Fix indentation bug on livenessProbe [#1330](https://github.com/openshift/insights-operator/pull/1330)
* [OCPBUGS-96642](https://issues.redhat.com/browse/OCPBUGS-96642): [release-4.22] Upgrade Golang and net library [#1327](https://github.com/openshift/insights-operator/pull/1327)
* [OCPBUGS-98383](https://issues.redhat.com/browse/OCPBUGS-98383): controlplanemachinesets gatherer [#1318](https://github.com/openshift/insights-operator/pull/1318)
* [OCPBUGS-98153](https://issues.redhat.com/browse/OCPBUGS-98153): update HyperShift deployment manifest [#1315](https://github.com/openshift/insights-operator/pull/1315)
* [OCPBUGS-98381](https://issues.redhat.com/browse/OCPBUGS-98381): Optimize the CPU usage of insights-runtime-extractor [#1317](https://github.com/openshift/insights-operator/pull/1317)
* [Full changelog](https://github.com/openshift/insights-operator/compare/0168cccf812470293494ff72042c153c684af58c...3846c60a0e66659d0d4b1690a637ebf9c1a61927)


### [ironic](https://github.com/openshift/ironic-image/tree/c06e78b399c5b379bf083571c55ad5c9a28ce519)

* [OCPBUGS-115160](https://issues.redhat.com/browse/OCPBUGS-115160): bump ironic to include fix [#907](https://github.com/openshift/ironic-image/pull/907)
* [OCPBUGS-112341](https://issues.redhat.com/browse/OCPBUGS-112341): Update ironic hash to include fixes related to power management error… [#901](https://github.com/openshift/ironic-image/pull/901)
* [OCPBUGS-105863](https://issues.redhat.com/browse/OCPBUGS-105863): update ironic pin to include CVE-2026-54423 fix (release-4.22) [#889](https://github.com/openshift/ironic-image/pull/889)
* [OCPBUGS-100167](https://issues.redhat.com/browse/OCPBUGS-100167): Update openstack-ironic commit hash for CVE-2026-44918 [#874](https://github.com/openshift/ironic-image/pull/874)
* [OCPBUGS-88478](https://issues.redhat.com/browse/OCPBUGS-88478): Update openstack-ironic commit hash in requirements.cachito that addresses CVE-2026-43003 [#860](https://github.com/openshift/ironic-image/pull/860)
* [OCPBUGS-98873](https://issues.redhat.com/browse/OCPBUGS-98873): Selectively backport Redfish firmware update fix to 4.22 [#870](https://github.com/openshift/ironic-image/pull/870)
* [Full changelog](https://github.com/openshift/ironic-image/compare/6984e87571f14d42463e10acee6bae32f9294534...c06e78b399c5b379bf083571c55ad5c9a28ce519)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/be386561e40cc3bb56ddd05fbf73a7c9ead5198c)

* [OCPBUGS-99897](https://issues.redhat.com/browse/OCPBUGS-99897): Bump ironic-python-agent pinned commit for CVE-2026-66138 [#294](https://github.com/openshift/ironic-agent-image/pull/294)
* [OCPBUGS-88478](https://issues.redhat.com/browse/OCPBUGS-88478): Update commit SHA in requirements.cachito to address CVE-2026-43003 [#266](https://github.com/openshift/ironic-agent-image/pull/266)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/fd9f6409fd02f818101a27812d381941fd6a6bef...be386561e40cc3bb56ddd05fbf73a7c9ead5198c)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/d6a9ffc8bd60573ca6e343dce14a964ba67f6c24)

* [OCPBUGS-70034](https://issues.redhat.com/browse/OCPBUGS-70034): Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.22 [#219](https://github.com/openshift/images/pull/219)
* [OCPBUGS-99767](https://issues.redhat.com/browse/OCPBUGS-99767): Reinstall tzdata if /usr/share/zoneinfo is missing [#247](https://github.com/openshift/images/pull/247)
* [Full changelog](https://github.com/openshift/images/compare/edb8b1e6c5e949c0b470b2bdf7a32f17e53d2f71...d6a9ffc8bd60573ca6e343dce14a964ba67f6c24)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/0a5ea07ca01263c4273a1a929854969e11a69bea)

* [OCPBUGS-87957](https://issues.redhat.com/browse/OCPBUGS-87957): embed timezone data in kube-state-metrics binary [#150](https://github.com/openshift/kube-state-metrics/pull/150)
* [OCPBUGS-87957](https://issues.redhat.com/browse/OCPBUGS-87957): fix: don't panic on CronJobs with unparseable schedules [#147](https://github.com/openshift/kube-state-metrics/pull/147)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/0111656f618a3eade677e214919077826db47192...0a5ea07ca01263c4273a1a929854969e11a69bea)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/5f86c7d2bace76cacd57770e2de0e1525cd4be15)

* [OCPBUGS-77815](https://issues.redhat.com/browse/OCPBUGS-77815): Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.22 [#240](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/240)
* [OCPBUGS-123142](https://issues.redhat.com/browse/OCPBUGS-123142): Update build-machinery-go vendor dependency [#261](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/261)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/72835e43c7754356645e41031f3a99926b4d42e6...5f86c7d2bace76cacd57770e2de0e1525cd4be15)


### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/09a0a5beaa65fb589d7b571dc47f9748d2463b1c)

* [OCPBUGS-69842](https://issues.redhat.com/browse/OCPBUGS-69842): Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART for 4.22 [#59](https://github.com/openshift/cloud-provider-kubevirt/pull/59)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/76dd5a6fa9e86573bf3dfb79be17edf832e3bae1...09a0a5beaa65fb589d7b571dc47f9748d2463b1c)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/9b959f8e94e210769cbf445751ea5a70b8827b5c)

* [OCPBUGS-69717](https://issues.redhat.com/browse/OCPBUGS-69717): Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.22 [#77](https://github.com/openshift/kubevirt-csi-driver/pull/77)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/90f14506c2d4fecfba2c355934bde87e6f101a20...9b959f8e94e210769cbf445751ea5a70b8827b5c)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/3fdcb56b39e9bbaf7782b93ddb2ac724fd406e13)

* [SPLAT-2865](https://issues.redhat.com/browse/SPLAT-2865): Added multi vCenter Day 2 Support [#1531](https://github.com/openshift/machine-api-operator/pull/1531)
* [OCPBUGS-101989](https://issues.redhat.com/browse/OCPBUGS-101989): Bump golang.org/x/net from v0.49.0 to v0.53.0 [#1541](https://github.com/openshift/machine-api-operator/pull/1541)
* [OCPBUGS-115165](https://issues.redhat.com/browse/OCPBUGS-115165): CORS-4521: GCP: Add regional permission [#1538](https://github.com/openshift/machine-api-operator/pull/1538)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/78c5104d9a69072749f4ddf681926bcc404ef271...3fdcb56b39e9bbaf7782b93ddb2ac724fd406e13)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/3750b27e33d4297c820c9d14fe068975db64be48)

* [OCPBUGS-122961](https://issues.redhat.com/browse/OCPBUGS-122961): updateLayeredOS deploy-from-self when skopeo &lt; 1.22.2 [#6538](https://github.com/openshift/machine-config-operator/pull/6538)
* [OCPBUGS-122279](https://issues.redhat.com/browse/OCPBUGS-122279): limit ContainerRuntimeConfig status condition to 3 [#6531](https://github.com/openshift/machine-config-operator/pull/6531)
* [OCPBUGS-121849](https://issues.redhat.com/browse/OCPBUGS-121849): Fix vsphere network absolute paths [#6512](https://github.com/openshift/machine-config-operator/pull/6512)
* [OCPBUGS-120671](https://issues.redhat.com/browse/OCPBUGS-120671): Skip vsphere fd-unmatched machinesets for bootimage updates [#6494](https://github.com/openshift/machine-config-operator/pull/6494)
* [OCPBUGS-119936](https://issues.redhat.com/browse/OCPBUGS-119936): Increase TC-74751 Eventually timeout for vSphere OVA upload [#6492](https://github.com/openshift/machine-config-operator/pull/6492)
* [OCPBUGS-115401](https://issues.redhat.com/browse/OCPBUGS-115401): Update message for MachineOSBuildFailed condition [#6479](https://github.com/openshift/machine-config-operator/pull/6479)
* [OCPBUGS-116943](https://issues.redhat.com/browse/OCPBUGS-116943): Update AMI Whitelist [#6489](https://github.com/openshift/machine-config-operator/pull/6489)
* [OCPBUGS-112785](https://issues.redhat.com/browse/OCPBUGS-112785): Revert TNF Graceful node shutdown [#6461](https://github.com/openshift/machine-config-operator/pull/6461)
* [OCPBUGS-114418](https://issues.redhat.com/browse/OCPBUGS-114418): [release-4.22] OCPBUGS-113615: Azure confidential clusters should be flagged by skew enforcement [#6459](https://github.com/openshift/machine-config-operator/pull/6459)
* [OCPBUGS-114392](https://issues.redhat.com/browse/OCPBUGS-114392): Use kubernetes scheme in drain controller event recorder [#6458](https://github.com/openshift/machine-config-operator/pull/6458)
* [AGENT-1583](https://issues.redhat.com/browse/AGENT-1583): post-feature promotion (NoRegistryClusterInstall) openshift/api dependencies bump [#6418](https://github.com/openshift/machine-config-operator/pull/6418)
* [OCPBUGS-112618](https://issues.redhat.com/browse/OCPBUGS-112618): Fix upstreams for CoreDNS pods on Cloud platforms [#6438](https://github.com/openshift/machine-config-operator/pull/6438)
* [OCPBUGS-112614](https://issues.redhat.com/browse/OCPBUGS-112614): OCPBUGS-109739: Increase rpm-ostree rebase retry backoff and preserve error [#6436](https://github.com/openshift/machine-config-operator/pull/6436)
* [OCPBUGS-105521](https://issues.redhat.com/browse/OCPBUGS-105521): Fix SHA idempotency test in nmstate-configuration.sh [#6392](https://github.com/openshift/machine-config-operator/pull/6392)
* [OCPBUGS-105929](https://issues.redhat.com/browse/OCPBUGS-105929): Fix duplicate template error and e2es [#6397](https://github.com/openshift/machine-config-operator/pull/6397)
* Fixes OCPBUGS-105190: increase LRU cache and prefetch timeout for PinnedImageSet [#6372](https://github.com/openshift/machine-config-operator/pull/6372)
* [OCPBUGS-105447](https://issues.redhat.com/browse/OCPBUGS-105447): fix nil pointer panic in IRI controller informer race [#6390](https://github.com/openshift/machine-config-operator/pull/6390)
* [OCPBUGS-105212](https://issues.redhat.com/browse/OCPBUGS-105212): [release-4.22] Part2 Migrate OCB test-case [#6374](https://github.com/openshift/machine-config-operator/pull/6374)
* [OCPBUGS-105213](https://issues.redhat.com/browse/OCPBUGS-105213): Update AMI Whitelist [#6375](https://github.com/openshift/machine-config-operator/pull/6375)
* [OCPBUGS-104563](https://issues.redhat.com/browse/OCPBUGS-104563): Use providerSpec.Template in vSphere machineset reconciliation [#6370](https://github.com/openshift/machine-config-operator/pull/6370)
* [OCPBUGS-100583](https://issues.redhat.com/browse/OCPBUGS-100583): [release-4.22] Part 1 Migrate OCB test cases from openshift-tests-private [#6361](https://github.com/openshift/machine-config-operator/pull/6361)
* [OCPBUGS-104576](https://issues.redhat.com/browse/OCPBUGS-104576): [release-4.22] Add extension verification failure test cases OCP-89090 and OCP-89095 [#6367](https://github.com/openshift/machine-config-operator/pull/6367)
* [OCPBUGS-104451](https://issues.redhat.com/browse/OCPBUGS-104451): [release-4.22] fix fencing_validator ocdebug fence dispatch race condition [#6360](https://github.com/openshift/machine-config-operator/pull/6360)
* [OCPBUGS-100293](https://issues.redhat.com/browse/OCPBUGS-100293): Fix TC 43278 failing when release payload has no MCO commit info [#6351](https://github.com/openshift/machine-config-operator/pull/6351)
* [AGENT-1548](https://issues.redhat.com/browse/AGENT-1548): Backport NoRegistryClusterInstall feature to release-4.22 [#6323](https://github.com/openshift/machine-config-operator/pull/6323)
* [OCPBUGS-99712](https://issues.redhat.com/browse/OCPBUGS-99712): Add TC 88940- Apply password only if changes exist [#6339](https://github.com/openshift/machine-config-operator/pull/6339)
* [OCPBUGS-98962](https://issues.redhat.com/browse/OCPBUGS-98962): [release4.22] MCO-1997: MCO-2297: MCO-2440 Add osImagestream test-cases [#6301](https://github.com/openshift/machine-config-operator/pull/6301)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/54660b79001ce4964165886dde1dc0819bde5601...3750b27e33d4297c820c9d14fe068975db64be48)


### [metallb-frr](https://github.com/openshift/frr/tree/1277b2387272397d3479d74d2d65112112f985b8)

* [OCPBUGS-86568](https://issues.redhat.com/browse/OCPBUGS-86568): Generate fallback BGP router-id on IPv6-only nodes [#133](https://github.com/openshift/frr/pull/133)
* [Full changelog](https://github.com/openshift/frr/compare/843347fdc9460e0fd064d68a003eae5459cac1fa...1277b2387272397d3479d74d2d65112112f985b8)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/676717b2dbb64ccf5e63e742143b5bd533c252d5)

* [OCPBUGS-101991](https://issues.redhat.com/browse/OCPBUGS-101991): CVE-2026-33814 openshift4/ose-monitoring-plugin-rhel9: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [openshift-4.22] [#1202](https://github.com/openshift/monitoring-plugin/pull/1202)
* [OLS-3921](https://issues.redhat.com/browse/OLS-3921): disable button shrink [#1189](https://github.com/openshift/monitoring-plugin/pull/1189)
* [OCPBUGS-98787](https://issues.redhat.com/browse/OCPBUGS-98787): replace outdated react-linkify dependency [#1150](https://github.com/openshift/monitoring-plugin/pull/1150)
* [OCPBUGS-98787](https://issues.redhat.com/browse/OCPBUGS-98787): replace outdated react-linkify dependency [#1145](https://github.com/openshift/monitoring-plugin/pull/1145)
* [OCPBUGS-98432](https://issues.redhat.com/browse/OCPBUGS-98432): fix for CVE-2026-59869 [#1114](https://github.com/openshift/monitoring-plugin/pull/1114)
* [OU-1240](https://issues.redhat.com/browse/OU-1240): Makefile and package.json to enable test-frontend-ci [#1094](https://github.com/openshift/monitoring-plugin/pull/1094)
* [OCPBUGS-99032](https://issues.redhat.com/browse/OCPBUGS-99032): Fix CVE-2026-49978 - bump DOMPurify to &gt;= 3.4.7 [#1085](https://github.com/openshift/monitoring-plugin/pull/1085)
* [OCPBUGS-99234](https://issues.redhat.com/browse/OCPBUGS-99234): graph redirect query parameter [#1070](https://github.com/openshift/monitoring-plugin/pull/1070)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/b63d5f94810cce106ea61764a575c79b8a8b9293...676717b2dbb64ccf5e63e742143b5bd533c252d5)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/42f55da4d9cb1bae11f79bfaf196f1982252a204)

* [OCPBUGS-120707](https://issues.redhat.com/browse/OCPBUGS-120707): Remove rhel8 build stage [#360](https://github.com/openshift/multus-cni/pull/360)
* [OCPBUGS-120682](https://issues.redhat.com/browse/OCPBUGS-120682): [Release 4.22] Cherry-pick fix for the issue of stripping delegate datastore config on CNI DEL, leaking IPAM addresses [#350](https://github.com/openshift/multus-cni/pull/350)
* [OCPBUGS-114732](https://issues.redhat.com/browse/OCPBUGS-114732): [release-4.22] Revert "Sort DeviceIDs in GetPodResourceMap for deterministic ordering" [#346](https://github.com/openshift/multus-cni/pull/346)
* [Full changelog](https://github.com/openshift/multus-cni/compare/b4ec7d8239ce4bd3ed949bce9816a013377b44c7...42f55da4d9cb1bae11f79bfaf196f1982252a204)


### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/92556e11a280668cfb87cd8f28197f18a4d91f43)

* [OCPBUGS-120707](https://issues.redhat.com/browse/OCPBUGS-120707): Remove rhel8 build stage [#79](https://github.com/openshift/route-override-cni/pull/79)
* [OCPBUGS-120707](https://issues.redhat.com/browse/OCPBUGS-120707): Remove rhel8 build stage [#80](https://github.com/openshift/route-override-cni/pull/80)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/08af4127c77976510cad1c096d9aca977d8ae5af...92556e11a280668cfb87cd8f28197f18a4d91f43)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/bdbe534288c6bf78de2429acbf10bb41c5f0a664)

* [OCPBUGS-120707](https://issues.redhat.com/browse/OCPBUGS-120707): Remove rhel8 build stage [#429](https://github.com/openshift/whereabouts-cni/pull/429)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/d691040e509bb20c26b5e8366c0d6f3bb45a5e02...bdbe534288c6bf78de2429acbf10bb41c5f0a664)


### [must-gather](https://github.com/openshift/must-gather/tree/0e52d3009279e9517f5c9df0178d2cc15d9ad31a)

* [OCPBUGS-123142](https://issues.redhat.com/browse/OCPBUGS-123142): Update build-machinery-go vendor dependency [#565](https://github.com/openshift/must-gather/pull/565)
* [Full changelog](https://github.com/openshift/must-gather/compare/8554213fa214e8e165e7bedaf8d892bb824d83ef...0e52d3009279e9517f5c9df0178d2cc15d9ad31a)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/06d7a6add78f1360ae5b8d09b49873763a43b7bf)

* [OCPBUGS-120707](https://issues.redhat.com/browse/OCPBUGS-120707): Remove rhel8 build stage [#124](https://github.com/openshift/bond-cni/pull/124)
* [OCPBUGS-69972](https://issues.redhat.com/browse/OCPBUGS-69972): Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.22 [#109](https://github.com/openshift/bond-cni/pull/109)
* [Full changelog](https://github.com/openshift/bond-cni/compare/5ef2d3205f11fba65e3949c0c57897420a83974a...06d7a6add78f1360ae5b8d09b49873763a43b7bf)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/a4519a29cde04c7606fb36ec6fd71584e1024023)

* [OCPBUGS-77680](https://issues.redhat.com/browse/OCPBUGS-77680): Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.22 [#142](https://github.com/openshift/network-metrics-daemon/pull/142)
* [OCPBUGS-101990](https://issues.redhat.com/browse/OCPBUGS-101990): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.3 [#149](https://github.com/openshift/network-metrics-daemon/pull/149)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/5b233ea1d80733c1b00c6bad65dec0620dbf783a...a4519a29cde04c7606fb36ec6fd71584e1024023)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/a05766f6d5b6f2a4ff5967cf65ed732540465216)

* [OCPBUGS-82108](https://issues.redhat.com/browse/OCPBUGS-82108): Marked strings for i18n in NetworkPolicies list page [#475](https://github.com/openshift/networking-console-plugin/pull/475)
* [OCPBUGS-98788](https://issues.redhat.com/browse/OCPBUGS-98788): Updating linkify-it to 5.0.2 to fix CVE-2026-48801 [#464](https://github.com/openshift/networking-console-plugin/pull/464)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/3a16cc03ed13ab5fff25fe375aa54a7d509c275f...a05766f6d5b6f2a4ff5967cf65ed732540465216)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/52fd93c590624badba3fb667c273fa7a011793f6)

* [OCPBUGS-109741](https://issues.redhat.com/browse/OCPBUGS-109741): Updating ose-oauth-apiserver-container image to be consistent with ART for 4.22 [#218](https://github.com/openshift/oauth-apiserver/pull/218)
* [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Update build-machinery-go vendor dependency [#230](https://github.com/openshift/oauth-apiserver/pull/230)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/4c002a9114937ea9c20213f00892761c2013e60b...52fd93c590624badba3fb667c273fa7a011793f6)


### [oauth-server](https://github.com/openshift/oauth-server/tree/a2fd8b24155c4bb0e2d6e6a02e70c5818436b50c)

* [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Update build-machinery-go vendor dependency [#263](https://github.com/openshift/oauth-server/pull/263)
* [OCPBUGS-100337](https://issues.redhat.com/browse/OCPBUGS-100337): Updating oauth-server-container image to be consistent with ART for 4.22 [#256](https://github.com/openshift/oauth-server/pull/256)
* [Full changelog](https://github.com/openshift/oauth-server/compare/42031614956a88806d0503cd619b49975ad61682...a2fd8b24155c4bb0e2d6e6a02e70c5818436b50c)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/739e1384c223aef6cbadab557301741332f96a52)

* [OCPBUGS-92814](https://issues.redhat.com/browse/OCPBUGS-92814): v1/e2e: reduce helm download flakiness [#1455](https://github.com/openshift/oc-mirror/pull/1455)
* [OCPBUGS-90149](https://issues.redhat.com/browse/OCPBUGS-90149): fix(helm): tolerate v-prefix version mismatch in disk-to-mirror [#1448](https://github.com/openshift/oc-mirror/pull/1448)
* [OCPBUGS-105777](https://issues.redhat.com/browse/OCPBUGS-105777): fix for CVE-2026-39829 [#1501](https://github.com/openshift/oc-mirror/pull/1501)
* [OCPBUGS-98716](https://issues.redhat.com/browse/OCPBUGS-98716): Include index image sub-digests in dry run mapping.txt [#1474](https://github.com/openshift/oc-mirror/pull/1474)
* [OCPBUGS-93773](https://issues.redhat.com/browse/OCPBUGS-93773): Make dry-run also generate cluster-resources [#1457](https://github.com/openshift/oc-mirror/pull/1457)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/bb277edfc4467c51fe540964e6a1f37fa327f957...739e1384c223aef6cbadab557301741332f96a52)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/53c4f9ea3e6d716a14121e957a811514828d24aa)

* [OCPBUGS-102003](https://issues.redhat.com/browse/OCPBUGS-102003): [release-4.22] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#800](https://github.com/openshift/operator-framework-operator-controller/pull/800)
* [OCPBUGS-102011](https://issues.redhat.com/browse/OCPBUGS-102011): Bump golang.org/x/net to v0.53.0 to address CVE-2026-33814 [#793](https://github.com/openshift/operator-framework-operator-controller/pull/793)
* [OCPBUGS-100305](https://issues.redhat.com/browse/OCPBUGS-100305): Fix cache path to avoid /var/cache/dnf conflict [#783](https://github.com/openshift/operator-framework-operator-controller/pull/783)
* [OCPBUGS-99298](https://issues.redhat.com/browse/OCPBUGS-99298): increase catalog HTTP client timeout from 10s to 5m [#768](https://github.com/openshift/operator-framework-operator-controller/pull/768)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/b3ab2a7ccf696f6d12eb8cd70ba80bbc827928eb...53c4f9ea3e6d716a14121e957a811514828d24aa)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/77f4eab69952824801ecc4113666a5e87684c899)

* [OCPBUGS-109742](https://issues.redhat.com/browse/OCPBUGS-109742): Updating ose-openshift-apiserver-container image to be consistent with ART for 4.22 [#675](https://github.com/openshift/openshift-apiserver/pull/675)
* [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Update build-machinery-go vendor dependency [#685](https://github.com/openshift/openshift-apiserver/pull/685)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/7fa546d41a73b519e3af0e6428471c4aaf5c71e5...77f4eab69952824801ecc4113666a5e87684c899)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/6d7ee2d70f44d25bb15a184103574b9c7b967253)

* UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.14 into release-4.22 [#419](https://github.com/openshift/cluster-api-provider-openstack/pull/419)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/06d95461581f9374ae05959b66fc50e2a17d077c...6d7ee2d70f44d25bb15a184103574b9c7b967253)


### [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller/tree/b9a621ee75f4a474d3adcbb8330cd06a2731f370)

* [OCPBUGS-101857](https://issues.redhat.com/browse/OCPBUGS-101857): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.3 to address CVE-2026-33814 [#43](https://github.com/openshift/openstack-resource-controller/pull/43)
* [Full changelog](https://github.com/openshift/openstack-resource-controller/compare/cbea7a9cab145c32e2f347be69996b649893cc22...b9a621ee75f4a474d3adcbb8330cd06a2731f370)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/5359e60525288af86885e14d89e3210878f87274)

* [OCPBUGS-101995](https://issues.redhat.com/browse/OCPBUGS-101995): Bump golang.org/x/net to v0.53.0 to address CVE-2026-33814 [#1362](https://github.com/openshift/operator-framework-olm/pull/1362)
* [OCPBUGS-95441](https://issues.redhat.com/browse/OCPBUGS-95441), [OCPBUGS-95458](https://issues.redhat.com/browse/OCPBUGS-95458): bumping containerd to v1.7.33 [#1353](https://github.com/openshift/operator-framework-olm/pull/1353)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/de6260e53055e10e216ec668d692a35554ab0585...5359e60525288af86885e14d89e3210878f87274)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/e2082ef4a1aaad8fa5acc7b24880394b60a4e8ae)

* [OCPBUGS-112496](https://issues.redhat.com/browse/OCPBUGS-112496): NO-JIRA: Branch Sync main to release-4.22 [08-18-2026] [#3406](https://github.com/openshift/ovn-kubernetes/pull/3406)
* [OCPBUGS-99043](https://issues.redhat.com/browse/OCPBUGS-99043): Branch Sync main to release-4.22 [08-13-2026] [#3394](https://github.com/openshift/ovn-kubernetes/pull/3394)
* [OCPBUGS-105515](https://issues.redhat.com/browse/OCPBUGS-105515), [OCPBUGS-105604](https://issues.redhat.com/browse/OCPBUGS-105604): Branch Sync main to release-4.22 [08-10-2026] [#3373](https://github.com/openshift/ovn-kubernetes/pull/3373)
* [OCPBUGS-95560](https://issues.redhat.com/browse/OCPBUGS-95560): Branch Sync main to release-4.22 [08-04-2026] [#3358](https://github.com/openshift/ovn-kubernetes/pull/3358)
* [OCPBUGS-100119](https://issues.redhat.com/browse/OCPBUGS-100119), [OCPBUGS-95064](https://issues.redhat.com/browse/OCPBUGS-95064): Branch Sync main to release-4.22 [07-28-2026] [#3333](https://github.com/openshift/ovn-kubernetes/pull/3333)
* [OCPBUGS-99043](https://issues.redhat.com/browse/OCPBUGS-99043): Branch Sync main to release-4.22 [07-16-2026] [#3304](https://github.com/openshift/ovn-kubernetes/pull/3304)
* [OCPBUGS-88733](https://issues.redhat.com/browse/OCPBUGS-88733), [OCPBUGS-88734](https://issues.redhat.com/browse/OCPBUGS-88734): Branch Sync main to release-4.22 [06-16-2026] [#3252](https://github.com/openshift/ovn-kubernetes/pull/3252)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/8d3b38cdbe7005e2f8443dc02b0e94b65a8f05e9...e2082ef4a1aaad8fa5acc7b24880394b60a4e8ae)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/1173437f341d58a340d83cb87449af28228a1040)

* [OCPBUGS-101580](https://issues.redhat.com/browse/OCPBUGS-101580), [OCPBUGS-102012](https://issues.redhat.com/browse/OCPBUGS-102012), [OCPBUGS-93554](https://issues.redhat.com/browse/OCPBUGS-93554), [OCPBUGS-95566](https://issues.redhat.com/browse/OCPBUGS-95566), [OCPBUGS-96671](https://issues.redhat.com/browse/OCPBUGS-96671), [OCPBUGS-98019](https://issues.redhat.com/browse/OCPBUGS-98019): Fix CVE-2026-39828, 46597, 39835, 27136, 2502 and 33814 [#142](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/142)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/02959a8d7096501e240d1d9f65da90b87bac45b9...1173437f341d58a340d83cb87449af28228a1040)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/6e859b18170daf013897d09ce3ef4f915ada6757)

* [OCPBUGS-101993](https://issues.redhat.com/browse/OCPBUGS-101993): Mitigate CVE-2026-33814 by bumping golang.org/x/net to v0.57.0 [#121](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/121)
* [OCPBUGS-107713](https://issues.redhat.com/browse/OCPBUGS-107713): Mitigate CVE-2026-41178 by bumping go.opentelemetry.io/otel/sdk to v1.44.0 [#120](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/120)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/277478211cfc7302e9c09b41a0935fbba678614a...6e859b18170daf013897d09ce3ef4f915ada6757)


### [prometheus](https://github.com/openshift/prometheus/tree/868b9ce717fdde35c0769c6f22f35f3787ff1274)

* [OCPBUGS-93732](https://issues.redhat.com/browse/OCPBUGS-93732): fix for CVE-2026-42151 [#355](https://github.com/openshift/prometheus/pull/355)
* [Full changelog](https://github.com/openshift/prometheus/compare/13ce9de4694ded595ef1455dd836ba4033fed0ea...868b9ce717fdde35c0769c6f22f35f3787ff1274)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/f090d1413836ce12c0a2f70f862de5787dfe59d0)

* [OCPBUGS-98185](https://issues.redhat.com/browse/OCPBUGS-98185): build(deps): bump github.com/hashicorp/memberlist from 0.5.4 to 0.6.0 [#157](https://github.com/openshift/prometheus-alertmanager/pull/157)
* [OCPBUGS-99442](https://issues.redhat.com/browse/OCPBUGS-99442): embed tzdata in the alertmanager binary [#141](https://github.com/openshift/prometheus-alertmanager/pull/141)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/02dc3e9e55cf7fa0279e22762d6ace19bbc65fde...f090d1413836ce12c0a2f70f862de5787dfe59d0)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/fb32abbabfb6b04b4397e889ab7cdaf96eca2f77)

* [OCPBUGS-102017](https://issues.redhat.com/browse/OCPBUGS-102017), [OCPBUGS-102031](https://issues.redhat.com/browse/OCPBUGS-102031): [release-4.22] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#398](https://github.com/openshift/prometheus-operator/pull/398)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/70e38466b9b9143f48283dab8bd0c227f35efe69...fb32abbabfb6b04b4397e889ab7cdaf96eca2f77)


### [rhel-coreos, rhel-coreos-10, rhel-coreos-10-extensions, rhel-coreos-extensions](https://github.com/openshift/os/tree/cf63d7a58a420b35b7f5e42ea0e7deffec56cf91)

* [OCPBUGS-105444](https://issues.redhat.com/browse/OCPBUGS-105444): NetworkManager-ovs has moved to RHCOS [#1956](https://github.com/openshift/os/pull/1956)
* NO-JIRA: Containerfile: restore meta.json as last layer in image [#1950](https://github.com/openshift/os/pull/1950)
* And 7 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/os/compare/f41264dc5f1c1f0a389787ecc5aaec573d485b8e...cf63d7a58a420b35b7f5e42ea0e7deffec56cf91)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/de05110fb2993491ff7f40455deb2f70cb95423b)

* [OCPBUGS-114426](https://issues.redhat.com/browse/OCPBUGS-114426): Update build-machinery-go vendor dependency [#377](https://github.com/openshift/service-ca-operator/pull/377)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/9fff46a576033685f66fbb1121eb0a2f134a29be...de05110fb2993491ff7f40455deb2f70cb95423b)


### [tests](https://github.com/openshift/origin/tree/6c62ada4b9b23dfc6a0431afd40db8cec506e2ca)

* [OCPBUGS-115199](https://issues.redhat.com/browse/OCPBUGS-115199): fix: skip MCPs with non-ready nodes during MCN property validation [#31525](https://github.com/openshift/origin/pull/31525)
* [OCPBUGS-114438](https://issues.redhat.com/browse/OCPBUGS-114438): Fix probe termination test to use pod status instead of kubelet event text [#31568](https://github.com/openshift/origin/pull/31568)
* [OCPBUGS-115161](https://issues.redhat.com/browse/OCPBUGS-115161): Raise status polling timeout and write bound [#31582](https://github.com/openshift/origin/pull/31582)
* [OCPBUGS-115191](https://issues.redhat.com/browse/OCPBUGS-115191): fix: adjusting DaemonSet test to dynamically compute expected pod count [#31522](https://github.com/openshift/origin/pull/31522)
* [AGENT-1583](https://issues.redhat.com/browse/AGENT-1583): post-feature promotion (NoRegistryClusterInstall) openshift/api dependencies bump [#31565](https://github.com/openshift/origin/pull/31565)
* [OCPBUGS-111831](https://issues.redhat.com/browse/OCPBUGS-111831): tolerate one NotReady CP node in EnsureNodesReady for degraded TNF [#31527](https://github.com/openshift/origin/pull/31527)
* [OCPBUGS-100438](https://issues.redhat.com/browse/OCPBUGS-100438): retry GetVotingMemberNames on transient etcd client fails [#31506](https://github.com/openshift/origin/pull/31506)
* [OCPBUGS-88711](https://issues.redhat.com/browse/OCPBUGS-88711): Backport node_e2e test migrations [#31306](https://github.com/openshift/origin/pull/31306)
* [AGENT-1549](https://issues.redhat.com/browse/AGENT-1549): Backport NoRegistryClusterInstall feature to release-4.22 [#31406](https://github.com/openshift/origin/pull/31406)
* [Full changelog](https://github.com/openshift/origin/compare/747bafbd4f302775dedeaaf568b01dbff1ffaa02...6c62ada4b9b23dfc6a0431afd40db8cec506e2ca)


### [thanos](https://github.com/openshift/thanos/tree/98b433450fed7685ec04af89b4de20afbaf856ae)

* fix for OCPBUGS-107709: CVE-2026-41178 [#202](https://github.com/openshift/thanos/pull/202)
* [OCPBUGS-105471](https://issues.redhat.com/browse/OCPBUGS-105471): UPSTREAM: &lt;carry&gt;: bump google.golang.org/grpc to v1.82.1 (GHSA-hrxh-6v49-42gf) [#199](https://github.com/openshift/thanos/pull/199)
* [COO-2034](https://issues.redhat.com/browse/COO-2034), [OCPBUGS-105219](https://issues.redhat.com/browse/OCPBUGS-105219), [OCPBUGS-105223](https://issues.redhat.com/browse/OCPBUGS-105223), [OCPBUGS-105224](https://issues.redhat.com/browse/OCPBUGS-105224): [release-4.22] vendor: bump vulnerable Go dependencies for GovCloud CVE remediation [#197](https://github.com/openshift/thanos/pull/197)
* [OCPBUGS-96898](https://issues.redhat.com/browse/OCPBUGS-96898): Address CVE-2026-39882 [#192](https://github.com/openshift/thanos/pull/192)
* [Full changelog](https://github.com/openshift/thanos/compare/8938facdb517ad9fb2b0d94eaa3a3f5858f314f1...98b433450fed7685ec04af89b4de20afbaf856ae)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/19c75111d7d7c5d3ce23ea7154e36e03f49b6c1e)

* UPSTREAM: 187: OCPBUGS-96686: Bump golang.org/x/net to v0.50.0-sec.4 [#195](https://github.com/openshift/vmware-vsphere-csi-driver/pull/195)
* [OCPBUGS-95573](https://issues.redhat.com/browse/OCPBUGS-95573): Bump golang.org/x/crypto/ssh to v0.48.0-sec.1 [#189](https://github.com/openshift/vmware-vsphere-csi-driver/pull/189)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/64bdb1da6278139e148ec427a4d46c9ab4f49a58...19c75111d7d7c5d3ce23ea7154e36e03f49b6c1e)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/19a2d3127957c50fac05c5338e4b779649783d37)

* [OCPBUGS-102036](https://issues.redhat.com/browse/OCPBUGS-102036): Bump golang.org/x/net to v0.53.0 [#352](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/352)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/9be965742961e7a84b0af8ff5ea17a852e015c98...19a2d3127957c50fac05c5338e4b779649783d37)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/885fd8b28b91323570ed6cbaf6aa171845d4c83c)

* [OCPBUGS-102050](https://issues.redhat.com/browse/OCPBUGS-102050): Bump golang.org/x/net to 0.53.0 [#229](https://github.com/openshift/vsphere-problem-detector/pull/229)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/438d5aad88be4f7d9237d87ed70589e1ebaf18f8...885fd8b28b91323570ed6cbaf6aa171845d4c83c)