4.12.100

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.12.100-x86_64

Qualifiers (status api): None

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded (1 retry) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
Informing jobs
- aws-sdn-serial Succeeded (1 retry) periodic-ci-openshift-release-main-nightly-4.12-e2e-aws-sdn-serial
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- azure-ovn-upgrade-4.12-micro Failed (1 retry) periodic-ci-openshift-release-main-ci-4.12-e2e-azure-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Failed
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.12-e2e-aws-driver-toolkit
- fips-scan Succeeded (1 retry) periodic-ci-openshift-release-main-nightly-4.12-fips-payload-scan
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- gcp-sdn-upgrade-4.12-micro Failed (1 retry) periodic-ci-openshift-release-main-ci-4.12-e2e-gcp-sdn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Failed
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.12-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-4.12-e2e-metal-ipi-sdn-ipv4

Upgrades from:

Untested upgrades: 4.11.14, 4.11.15, 4.11.16, 4.11.17, 4.11.18, 4.11.19, 4.11.20, 4.11.21, 4.11.22, 4.11.23, 4.11.24, 4.11.25, 4.11.26, 4.11.27, 4.11.28, 4.11.29, 4.11.30, 4.11.31, 4.11.32, 4.11.33, 4.11.34, 4.11.35, 4.11.36, 4.11.37, 4.11.38, 4.11.39, 4.11.40, 4.11.42, 4.11.44, 4.11.45, 4.11.46, 4.11.47, 4.11.49, 4.11.50, 4.11.51, 4.11.52, 4.11.53, 4.11.54, 4.11.55, 4.11.56, 4.12.10, 4.12.11, 4.12.12, 4.12.13, 4.12.14, 4.12.15, 4.12.16, 4.12.17, 4.12.18, 4.12.19, 4.12.20, 4.12.21, 4.12.22, 4.12.23, 4.12.24, 4.12.25, 4.12.26, 4.12.27, 4.12.28, 4.12.29, 4.12.3, 4.12.30, 4.12.31, 4.12.32, 4.12.33, 4.12.34, 4.12.35, 4.12.36, 4.12.37, 4.12.38, 4.12.39, 4.12.4, 4.12.40, 4.12.41, 4.12.42, 4.12.43, 4.12.44, 4.12.45, 4.12.46, 4.12.47, 4.12.48, 4.12.49, 4.12.5, 4.12.50, 4.12.51, 4.12.52, 4.12.53, 4.12.54, 4.12.55, 4.12.56, 4.12.57, 4.12.58, 4.12.59, 4.12.60, 4.12.61, 4.12.62, 4.12.63, 4.12.64, 4.12.65, 4.12.66, 4.12.67, 4.12.68, 4.12.69, 4.12.7, 4.12.70, 4.12.71, 4.12.72, 4.12.73, 4.12.74, 4.12.75, 4.12.76, 4.12.77, 4.12.78, 4.12.79, 4.12.8, 4.12.80, 4.12.81, 4.12.82, 4.12.84, 4.12.85, 4.12.86, 4.12.87, 4.12.89, 4.12.9, 4.12.90, 4.12.91, 4.12.92, 4.12.93, 4.12.94, 4.12.95, 4.12.96

Upgrades to:

4.13.72 (changes) - Failed
4.13.0-0.ci-2026-10-07-172600 (changes) - S F F

Changes from 4.12.83

Created: 2026-10-07 10:28:44 +0000 UTC

Image Digest: sha256:b1f63f02655ab270f06682eb164dde22691e423df720fcb3b9db0436e801c42b

Components

Kubernetes 1.25.16
Red Hat Enterprise Linux CoreOS upgraded from 412.86.202511191939-0 to 412.86.202609271242-0 (diff)

Rebuilt images without code change

alibaba-cloud-controller-manager git 191c9e34 sha256:faf18d608aea771b5b7b54024cdbd4d642f05394c564b48130615a5c1f8f509b
alibaba-cloud-csi-driver git 4d3b1125 sha256:b68c2d342589488ecdfb3c689a2e52a76a0ee87f3edb0ec5160e4beca60f2e58
alibaba-disk-csi-driver-operator git 99bcda8d sha256:d58518d14c909c8e847d043de3489b2502c5e8435fb033673c3b05ef3a694ea0
alibaba-machine-controllers git 871dac7e sha256:a20c02596911a989511edd74677164ff5590fda3865aa85c2e6ba839770b015f
apiserver-network-proxy git f56c606a sha256:8cae706dfa300ee96d69fb3b5a56913b93ab24a20909f9ca41dffefa6c070f1d
aws-cloud-controller-manager git f90fb443 sha256:ca1ef18f4af04b6bf939c47b89b17d5080480973db29076c4c79943935c9ce2e
aws-ebs-csi-driver git bbab20f9 sha256:034c5fea0e8cfc1bd233af45320433a78d98e193f19713b9d26ff879145b2ca4
aws-pod-identity-webhook git 31917a5f sha256:8c7d8cfe79a776a7fc93a0d5e9ac973a7f4a5a623d3fdc3d6703189a4ba56ddc
azure-cloud-controller-manager git 2193ccfa sha256:fcbdc7797b6cba3ef05b439fff9bf476d138cf632dc19be45009202bd84b1de8
azure-cloud-node-manager git 2193ccfa sha256:bcf8761a29903e5c2fd67d8fcd14bf0238b2708ada097891a79a5a936cd9380b
azure-disk-csi-driver git eaff7399 sha256:83b5cc82eb100bcf6152bd6b4a95cc8f7d9fea437fa309da145ad44bff12b5df
azure-disk-csi-driver-operator git 988b8cc8 sha256:dbaa71f6626cf2171fa870a1f9d4749042621e7d447c922b76b46fa04a3e1537
baremetal-operator git 6817f4e2 sha256:d36c764a3a650ffb31efc53a4384a68777136a0136c0feb1ff4ee20927e25eb7
baremetal-runtimecfg git 474ed48e sha256:964ea799353422090fb1f243883fd39dcdbdbbda1a6264af7ff5e8687cc42f19
cli git d6912573 sha256:05b9746902b23ef2fe6032df092f91b221176857ea3b4e39ddeb16ea2958c5b8
cli-artifacts git d6912573 sha256:0e04fbf157103dabd0ce8b749e60953e4914fdf03d910052ada7092ec9c3734d
cloud-credential-operator git 5a4483cd sha256:a940932c289a6dfc30e1230c532f83fa43967615192cee8de870a7586e92a67e
cloud-network-config-controller git c086bed7 sha256:8f9932f0262c9d457aa3d4e39c0494fd98dc026970167c0bd11274526e1f0edc
cluster-authentication-operator git 4f7f6b1a sha256:1071556aedd11fda8e7ae9a579555e068701b7e8fc7e393465aa3bc42f8fcf57
cluster-autoscaler git d16352d9 sha256:7850d3efda09c2492600159eab03e20d6195051dd1cd54e88ab56fb785e0eebe
cluster-bootstrap git 138a1cf2 sha256:a46214cd485cb2c49d7ff0efed8eb93b8f2d79ff37ac746b0dc54468ac1d4418
cluster-cloud-controller-manager-operator git 3b1f0843 sha256:bf5ee922a51922378cfc1ec36e8ee7d2480ee5c23b4db82b07b23c154e305946
cluster-config-operator git 92c3b102 sha256:12dbff5811c4a36eac910851ec5287cad07820d70450ebe5a6a278fa31c968fe
cluster-control-plane-machine-set-operator git fb7f08a2 sha256:1c0e0f51871e85b5ed947e45ebac1aacafe5cd8db8558b235a3bc4a1d2452f27
cluster-csi-snapshot-controller-operator git f573eded sha256:0f276092afc2dc3d59f057a0f4fc68384d7ad86e3ace6101fa22e5b10637c684
cluster-dns-operator git 09a1de9f sha256:c149c6d3a0409895c86c41ce0baab7bb2b0be50f6f71e0b6c7547daa2a4cafa4
cluster-kube-cluster-api-operator git d50f7322 sha256:7a2071474219931d00e1b14fccfc0c9d7251dd32c5527548243fca6dc45d6484
cluster-kube-controller-manager-operator git c3c07beb sha256:1bcc499f5899aba4d9e66b4055f94cc9643ad9d6bd7edc0986a20f51b363cbf4
cluster-machine-approver git 7b08a4de sha256:843d52187394531d409c32ca2edec63d84b7277cc4edddc1fe20ea654c6fa1d1
cluster-network-operator git 28db40f1 sha256:080b712b07b43e10dfadcb24abd8c2456ef2b6e1e3300e1c2e53bc856d0ddac4
cluster-node-tuning-operator git 20966da9 sha256:23344f6431eb3bc33cf65671189bc36d6314ad9b2abce32687bc2fb966350d40
cluster-openshift-controller-manager-operator git ab963d8a sha256:20d477931d518b278712e6bfbd2836262ecf16f8bac25210104b1d76a705f965
cluster-platform-operators-manager git c930dc74 sha256:1683ad237441fbd9f73e627bec2fa5c27ef7526ec66dc76d288793bb8bcca8eb
cluster-policy-controller git cb8862b0 sha256:6c1f1eab1d5a354f6042b42e913512f57f3e63a1515e81806dd87507be01034d
cluster-update-keys git 2796e173 sha256:2974141b19c025303e2e90c1aff03e25f489862d7355949cab3f7a0c1f6f2e74
cluster-version-operator git da2578c6 sha256:64e3b4cd6b5d862e44cdded0efe05d7bd6acdb18835eb6a8ae1df3a3b9678611
configmap-reloader git e4d9170e sha256:b7570b09db5b5793ad963d237840ab8ef721bc3379005c6dcbad7ac48966de4d
container-networking-plugins git cd87d3d3 sha256:276d4b5824d27a3366844d03ddef96ed29365cb431efa601f01546bda64627f3
coredns git 95d00296 sha256:9429ae9422b8309da3c0ed38d0a5b43b0202dbb5e1e2e783a9b9b8e889d032fd
csi-driver-shared-resource-operator git cc297702 sha256:db6cd41c7ae00d42f1656430bd44fe029a6c60897781637baf356b5f00ba75f9
csi-external-attacher git fac7b8fd sha256:d428c5f5fc2c7fa2d80ffc5b69c2fc83c3b7b36331123768d3a911f1c37c1834
csi-external-provisioner git 3aa7c527 sha256:3d5564785bef4f4d51c39ee07ea02db20e45836c47fcbaca2fb6ee1099b4a38b
csi-external-resizer git 5b066ba4 sha256:c8648cc60b144dd61528bd07a58ba23a0e7bca18c883fff9e9ae1db7e432b270
csi-external-snapshotter git 6fdb648f sha256:f8109d18a9cc57ab47ac222efac6386069fb79329cfa0eb727dca25b77faac7f
csi-livenessprobe git e6545e71 sha256:e84a5e095f3036098c0390e57ba7f434eb4959f5044f6cce8bcd802aba9420bf
csi-node-driver-registrar git c316b896 sha256:49165c9ef11014efd8742821d5062e177fd16e8ea0a52fa8199019ae8955f72b
csi-snapshot-controller git 6fdb648f sha256:1dce17f843c617e89de02b7b6cf04ecdd609c314196a41b14db8964122304135
csi-snapshot-validation-webhook git 6fdb648f sha256:9074b5f006b054cc65e5edc5671ad961d75fe596e4c4b8eec778fc9d300fef84
deployer git d6912573 sha256:f02383116e3373f7efeee3ab31cd86ac3aac057098b9435493e3a2d5375911e2
docker-builder git e3554521 sha256:ec53518d46a469e895fb575ff07e4b6df5eb0d0f2d2aca2d02180dfd6a72e253
docker-registry git e96baf4b sha256:442891d28775cd7a673d3d08c4f211097d996cb15f977d6846e1d7b0816b051f
driver-toolkit git 8ab7a753 sha256:de8178ba72c7beda857d170fdf189d18ce977de0650944b71d4546f9f934c771
egress-router-cni git a92e4157 sha256:4b29c6d48e4d1ef8e53cbee103687a07c2a248094e15afe41bedf1c68c1e513f
etcd git bb82e891 sha256:7ac00f40da0ad8de1e719ad596ca388ea3879e066a6eb6c6b59ee824a430f93d
gcp-cloud-controller-manager git 8a84952e sha256:943e9d8a7d69ae959a56f2a82b478d57aacb707c36cb50aa65ced06b4cb8c392
gcp-pd-csi-driver git 5dcfd675 sha256:40083d01075cb07f8348f92520c2265545ac6473b040d08963f55b0ff5998e45
gcp-pd-csi-driver-operator git 30e97ba5 sha256:d9a64618375b4f47cb092aefd35c672488c18a48a2a6a67efd412f499071835b
ibm-cloud-controller-manager git 8bd0ea8f sha256:0cd2223749a5c5043a7e3df3abbc2c3ee1d8b83ec95ffc3303eb219904eb42bf
ibm-vpc-node-label-updater git 3cca5da2 sha256:4f9035227d08a9a9b671c4216af9a4862fe861fe97f6459c39058d2b0c05c1f2
insights-operator git 6b543885 sha256:5cbf9b3722356e1bea4d87a09ff5365f851f3af8321ecb168cc06db569243131
ironic-static-ip-manager git a8ade8fe sha256:07c2f9cc7464d8e4bcc5b9dc6fc6c6a279cac281b82ad9e190aced883c17e30a
k8s-prometheus-adapter git 36c06694 sha256:1444fd5dea7bf78a8120777e13d5e8cfc8b12f9d9ac56e362c671bed1eb78236
keepalived-ipfailover git 7e8a0105 sha256:e33383ab5d949bd1b506559aeabd527d9d369adde054f722b3a246b5a0b7585a
kube-proxy git 5fe565c4 sha256:2232b8613ccf0bb7d23ef091869aeac2326d959ddfa586e6ea41efe977047f77
kube-rbac-proxy git c69fae78 sha256:3a5e1bfa63a05795b8a7f31a7b330504a805527a5e414c406d879f3612bc1645
kube-storage-version-migrator git 74ce8d51 sha256:e22be9ca60f2a3cdbc6fb78a54d26c05a6f86d4e21e9cb1ee40236bf90fab12e
kuryr-cni git 8fd2f8b0 sha256:747e7bb3e4495d09993afd8b301c5b1ab48c259afe5f0e680f98564c3cf2f930
kuryr-controller git 8fd2f8b0 sha256:4f17b39a28d0786b66740c4a4bd90ce28407366ec861e393870c36c4db619016
libvirt-machine-controllers git a2882f7a sha256:393b27854b9725efff26aa3abed17687e2a6b37afeab113eded4840bf1a5cf4a
machine-os-content sha256:90f19b404dbeb5f34ab7f3c1ab52629964ff910d507bbbcf021c4345ff7d8e19
multus-admission-controller git 0a12d741 sha256:6abf59c638f41ee87558e2967d8b57c2c46361ca65fe349b54015d1235fa687f
multus-cni git 07d8af54 sha256:75157d8596fe588e95965b798b21ba176c0ffc7d3a964496296ae2718c3140bd
multus-networkpolicy git 644461f2 sha256:66c962bc00fb16468fbfc70da278965ddb738bbca040e048b2283c95efc1a890
multus-whereabouts-ipam-cni git 5993d022 sha256:c1221c9780d79e00b93afac3ead4982674132c0c66a425f439aae0e0bbb7782c
must-gather git a4db96b0 sha256:6ee46699385ed8a89de074dec043fb969205950ff479e8fd088b4acf7f83f3ac
network-interface-bond-cni git 30386d6b sha256:e1af4f26213e9d3c671bf899a235de97fac703dadb4f48fbf486044ffb4e8ee9
network-metrics-daemon git 98d9349d sha256:03dcb9026e700ab7947d312fe0b166270c3352a38c7e1d0cba246b7fbc3bc13f
network-tools git c76613c7 sha256:488a7df5f655a08d0891dfea252a85a27391052f912ff93b95d8e171eab2e8d5
oauth-apiserver git 1053f142 sha256:ec38286d0ba6ea151ecd45ad8d48d5bb638c572d057d3e8365004a4b58651990
oauth-server git 0c434f42 sha256:94f035b5c689fb1a54b59b544d5def1f4924b2bc383ee274f143555c8deb758d
olm-rukpak git bb06dd01 sha256:a8de3c45bbad77e7d663ab62503347046083637e257ba780af94a6d86f13a78b
openshift-controller-manager git d32006c1 sha256:a1c91e548cfb0b6ef42f06ea6e2eab6399151aa3b7acc6fae52d1414917fcae1
openstack-machine-api-provider git 05657663 sha256:3843a8a65a40cc1ea1420abe14776187983656987c388f8f34f3295ca52c8f20
openstack-machine-controllers git f13e381e sha256:ca9caebae78a3de73465346ff0f916ffc06514eaadd2e94cec9c50750de9cfac
operator-marketplace git a3aeac97 sha256:cb38a0b6c12902fae17316ae8596b4cff475a15bc7c46a67854d8f7c9a21bcc5
ovirt-csi-driver git 87ab3789 sha256:bdfcb8ac66dd2b784c832ce24e24c5c3592b34fc0251abfdbdf4548c1c79c3b1
ovirt-machine-controllers git 03e8cb50 sha256:71bcb388e37b937a8d587cdf74075a25d01c87e345e09deb1ec1477d76ba2bf0
powervs-block-csi-driver git b78e8e78 sha256:7a74ef9cf88cd6cccbbfebb140ef0907bbcb821ec3553abb457add1cb88471e2
powervs-cloud-controller-manager git 4fb4334c sha256:22273c8ac5f79102f434709c8fab39dafc0b6eae720e8daf2f2cc264c9fc2015
prometheus-config-reloader git d1e399d5 sha256:29f32d7ae58354dd0ea88d7dab0260a276d106095924a99a2bb72c9ce5864b95
prometheus-operator git d1e399d5 sha256:250f62c1b5ceec6206b23635b8762d51b42ff4b24d0734492da14bd977946485
prometheus-operator-admission-webhook git d1e399d5 sha256:6fd0b14ca6abdfec6e66410f12f9284e441e084fed38daef1277708f2560c60d
rhel-coreos-8 sha256:0523bb30271177f6b851433e5f197d9b25f5b299e86864c5ef79540d47b136e7
rhel-coreos-8-extensions sha256:08d25281aa183869ca38cc0e4383ea3a5f53b94487773cbbea09a173fd184cfa
sdn git 5fe565c4 sha256:d9710df52e0316900054d20b6a55d945d85fcb0730ddf3e3e3bad78c9ba989a6
tests git f638948e sha256:0f3727d1572bbb79d35aaca89fba27ec989de23a7f979fa73e3d9f1fadeb21cd
tools git d6912573 sha256:a99af9fab92893d27e70d91f5a465c6d06b02eb6b12a54d8e5e53092c786c517

agent-installer-api-server

OCPBUGS-78114: [release-4.12] NO-JIRA: hermetic 4.12 #9956
OCPBUGS-67386: Bump logrus from 1.9.0 to 19.3 #8768
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-67388: Bump logrus v1.9.0 to v1.9.3 #1465
Full changelog

agent-installer-node-agent

OCPBUGS-67390: Bump logrus v1.9.0 to v1.9.3 #1287
Full changelog

aws-cluster-api-controllers

OCPBUGS-78231: [release-4.12] hermetic 4.12 #595
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-67399: Updated logrus to v1.8.3 #315
Full changelog

aws-machine-controllers

OCPBUGS-78268: hermetic 4.12 #176
Full changelog

azure-cluster-api-controllers

OCPBUGS-78180: [release-4.12] Hermetic 4.12 #368
Full changelog

azure-file-csi-driver

OCPBUGS-102098: Bump golang.org/x/net to v0.35.0-sec.4 #164
Full changelog

azure-file-csi-driver-operator

OCPBUGS-67404: Bump github.com/sirupsen/logrus to v1.8.3 #116
Full changelog

azure-machine-controllers

OCPBUGS-78266: hermetic 4.12 #188
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-83750: Azure UPI ARM template: use storageAccountId #10511
OCPBUGS-78352: terraform/providers/google: Fixing inconsistencies with the service account creation #10385
OCPBUGS-66250: Replace terraform-provider-google with Openshift fork #10144
Full changelog

baremetal-machine-controllers

OCPBUGS-78103: [release-4.12] fix vendor/ for hermetic migration #247
Full changelog

cluster-autoscaler-operator

OCPBUGS-102115: Bump x/net package in release-4.12 #394
Full changelog

cluster-baremetal-operator

OCPBUGS-77451: Bump github.com/go-errors/errors to v1.5.1 #566
Full changelog

cluster-capi-controllers

OCPBUGS-86891: update CI build root and Dockerfile tags w.r.t ART 4.12 streams #299
OCPBUGS-77976: fix vendor for hermetic #267
Full changelog

cluster-capi-operator

NO-JIRA: Allow sustaining engineering to self serve dependency updates #564
Full changelog

cluster-etcd-operator

OCPBUGS-67421: Update logrus to 1.9.3 to address CVE-2025-65637 #1550
Full changelog

cluster-image-registry-operator

OCPBUGS-67422: Bump logrus to 1.8.3 #1292
Full changelog

cluster-ingress-operator

OCPBUGS-86709: Add configuration override for X-SSL strip #1494
Full changelog

cluster-kube-apiserver-operator

NO-JIRA: refactor: Updating go builder in the CI, Dockerfile and go.mod to be consistent with ART 4.12 #2175
OCPBUGS-67424: CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.12.z] #2048
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #628
Full changelog

cluster-kube-storage-version-migrator-operator

NO-JIRA: Reconciling the ART and CI go tool chain versions #173
OCPBUGS-67429: Bump github.com/sirupsen/logrus to v1.8.3 #143
Full changelog

cluster-monitoring-operator

NO-ISSUE: synchronize OWNERS from main branch [release-4.12] #3108
OCPBUGS-76642: test: remove image registry e2e tests #2816
OCPBUGS-77403: test/e2e: improve prometheus remote-write test #2819
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-76594: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.12] #660
Full changelog

cluster-samples-operator

OCPBUGS-63521: references to github.com/sclorg/django-ex.git now also refer to the branch #663
Full changelog

cluster-storage-operator

OCPBUGS-67444: Bump logrus to v1.8.3 #657
Full changelog

console

OCPBUGS-129171: Sanitize alert runbook URLs #17192
OCPBUGS-77114: [release-4.12] CVE-2026-26996 Bump minimatch library #16489
OCPBUGS-92663: CVE-2026-46597 openshift4/ose-console: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs [openshift-4.12.z] #16983
OCPBUGS-100520: Bump postcss to 8.5.26 to fix CVE-2026-45623 #17110
OCPBUGS-90615: Fix JSON annotation parsing to prevent OperatorHub crash #16660
Fix for OCPBUGS-92077: CVE-2026-44990 #16723
OCPBUGS-98415: CVE-2026-59869 #16756
OCPBUGS-87984: [release-4.12] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators #16594
OCPBUGS-120132: Fix JSON annotation parsing to prevent OperatorHub crash #17135
Fix for OCPBUGS-81593: CVE-2026-4800 #16570
OCPBUGS-88398, OCPBUGS-88416: Bump Axios to fix CVE-2026-44486. Requires a Patch of axios 0.33.0 types to be compatible with old version of TS #16793
OCPBUGS-79430: CVE-2026-29063 Bump immutable #16331
ART-18753: pin fsevents to latest #16482
NO-JIRA: enable multi-architecture yarn builds #16422
NO-JIRA: Updating openshift-enterprise-console-container image to be consistent with ART for 4.12 #12539
CONSOLE-5011: migrate to yarn berry #16084
NO-JIRA: Bump builder image to v29 #15988
OCPBUGS-74435: Bump lodash to latest #15973
Full changelog

console-operator

OCPBUGS-102152: Use patched x/net fork v0.35.0-sec.4 #1231
Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.12 #1137
OCPBUGS-77996: [release-4.12] NO-JIRA: update go mod dependency for konflux #1119
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-79763: Apply code mitigations for CVE-2026-33186 #401
OCPBUGS-67448: CVE-2025-65637 #365
Full changelog

csi-driver-manila-operator

OCPBUGS-67449: Bump logrus #255
Full changelog

csi-driver-nfs

OCPBUGS-84927: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.64.1-sec.1 to avoid go version bump and fix CVE-2026-33186 #186
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-102157: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #529
Full changelog

gcp-cluster-api-controllers

OCPBUGS-78284: [release-4.12] hermetic migration 4.12 #278
OCPBUGS-78284: [release-4.12] hermetic migration 4.12 #271
Full changelog

gcp-machine-controllers

OCPBUGS-102202: replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 #196
OCPBUGS-83657: Address CVE-2026-33186 #174
OCPBUGS-78183: hermetic 4.12 #143
Full changelog

haproxy-router

OCPBUGS-86709: Strip X-SSL-* headers for plain HTTP #809
OCPBUGS-74943: Adding escapeHAProxySingleQuotes for sanitize [release-4.12] #784
OCPBUGS-78110: [release-4.12] hermetic 4.12 #744
Full changelog

hyperkube, pod

OCPBUGS-77661: Skip E2e: attach on previously attached volumes should work #2649
OCPBUGS-77469: hermetic 4.12 #2652
OCPBUGS-67374, OCPBUGS-67472: CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.12] #2596
OCPBUGS-78226: UPSTREAM: 133262: Remove permafailing tests using an expired GCP project #2625
Full changelog

hypershift

OCPBUGS-77768: fix vendor for hermetic 4.12 #7823
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-79756: Bump google.golang.org/grpc to v1.79.3 #158
OCPBUGS-77214: [release-4.12] standardize build paths #128
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-67476, OCPBUGS-67477: bump github.com/sirupsen/logrus to v1.8.3 #163
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-102194: Replace golang.org/x/net with openshift-sustaining/net #166
OCPBUGS-115549: Fetch envtest assets from the controller-tools releases #177
OCPBUGS-67292: [release-4.12] Fix incomplete vendor/ #134
Full changelog

ibmcloud-machine-controllers

OCPBUGS-102189: replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 #110
OCPBUGS-78276: hermetic 4.12 #79
Full changelog

ironic

OCPBUGS-69787: Bump eventlet version to 0.30.2-5 #767
Full changelog

ironic-agent

OCPBUGS-96903: Replace individual package removal with a single rpm -e loop #280
OCPBUGS-69778: adding eventlet 0.30.2-5 #236
Full changelog

ironic-machine-os-downloader

OCPBUGS-87168: CI Build root image tag and go version in go.mod sync with ART 4.12 #118
Full changelog

kube-state-metrics

NO-ISSUE: synchronize OWNERS from main branch [release-4.12] #179
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-95078: OWNERS: Update component to Cloud Compute / KubeVirt Provider #76
Full changelog

kubevirt-csi-driver

OCPBUGS-83660: Bump google.golang.org/grpc to v1.79.3 #110
Full changelog

machine-os-images

OCPBUGS-87882: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #106
Full changelog

multus-route-override-cni

OCPBUGS-78160: hermetic 4.12 #64
Full changelog

nutanix-machine-controllers

OCPBUGS-78158: hermetic 4.12 #132
Full changelog

openshift-apiserver

OCPBUGS-90518: Address CVE-2026-35469 #663
OCPBUGS-76481: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.12] #614
OCPBUGS-79381: Fix image reference in TestImageStreamImportQuayIO #623
Full changelog

openshift-state-metrics

OCPBUGS-102220: CVE-2026-33814 openshift4/ose-openshift-state-metrics-rhel8: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [openshift-4.12.z] #138
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-67502: Bump logrus #191
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-86254: Drop github.com/distribution/distribution in go.mod #1312
Full changelog

ovirt-csi-driver-operator

OCPBUGS-67542: Bump github.com/sirupsen/logrus to v1.8.3 #148
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

CORENET-6055, OCPBUGS-84636: [release-4.12] Dockerfile: Unpin OVN and consume the latest from FDP #3075
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-67511: Fix CVE-2025-65637 by bumping logrus to v1.8.3 #102
Full changelog

powervs-machine-controllers

OCPBUGS-78043: hermetic 4.12 #138
Full changelog

prom-label-proxy

NO-ISSUE: synchronize OWNERS from main branch [release-4.12] #408
Full changelog

prometheus

NO-ISSUE: synchronize OWNERS from main branch #388
OCPBUGS-88580: remote: validate snappy decoded length before allocation in read endpoint #356
OCPBUGS-86876: Bump google.golang.org/grpc #325
OCPBUGS-67512: CVE-2025-65637 Update sirupsen/logrus to 1.9.3 #291
Full changelog