4.18.37

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.37-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Pending periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Pending periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Pending periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Pending periodic-ci-openshift-release-main-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-upgrade-4.18-micro Pending periodic-ci-openshift-release-main-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Pending periodic-ci-openshift-release-main-ci-4.18-e2e-azure-ovn-upgrade
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-driver-toolkit
- fips-scan Succeeded (1 retry) periodic-ci-openshift-release-main-nightly-4.18-fips-payload-scan
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- gcp-ovn-rt-upgrade-4.18-minor Pending (1 retry) periodic-ci-openshift-release-main-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
  - Attempt 1 Failed
  - Attempt 2 Pending
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.15, 4.17.16, 4.17.18, 4.17.19, 4.17.20, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.17.34, 4.17.35, 4.17.36, 4.17.37, 4.17.38, 4.17.39, 4.17.40, 4.17.41, 4.17.42, 4.17.43, 4.17.44, 4.17.45, 4.17.46, 4.17.48, 4.17.49, 4.18.10, 4.18.11, 4.18.12, 4.18.13, 4.18.14, 4.18.15, 4.18.16, 4.18.17, 4.18.19, 4.18.21, 4.18.22, 4.18.23, 4.18.24, 4.18.25, 4.18.26, 4.18.27, 4.18.28, 4.18.29, 4.18.30, 4.18.31, 4.18.32, 4.18.33, 4.18.5, 4.18.6, 4.18.7, 4.18.8, 4.18.9

Loading changelog, this may take a while ...

Changes from 4.18.20

Created: 2026-04-03 14:36:45 +0000 UTC

Image Digest: sha256:9b7068aa6f6087c2f0a7cefa241c5dbb0ede0efaad783607dff0da98cac432d2

Components

Kubectl 1.31.1
Kubernetes upgraded from 1.31.10 to 1.31.14
Kubernetes Tests upgraded from 1.31.9 to 1.31.12
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202507091512-0 to 418.94.202603261158-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
OnClusterBuild (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
StreamingCollectionEncodingToJSON (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

apiserver-network-proxy git 2f62712d sha256:2eb44b0dae64572bae50a8060d9a3b498cfcfb1529185465a270295bbe3b5c47
aws-cloud-controller-manager git c3951906 sha256:cd0f7ad3c4eb38aab8d267f891f9be657d9296f030dadbf15cb6c7a8c587be16
aws-ebs-csi-driver git b51cd6b8 sha256:f38133448c2d376b9cef7b408b8e0fe5ccdd8d939100ba239ca3db0fd60e8ea7
aws-kms-encryption-provider git 088dcaf7 sha256:d1b1566ee173b588dc65c3eabb9fcac1620e658db075f03b0b33ab0f10dc4202
aws-pod-identity-webhook git f54f9a19 sha256:1799d7712429e8474a842f9f8d7854c455568f99b775a0c57f41dd77813a1b91
azure-cloud-controller-manager git 9c24d768 sha256:131a4fe01970cced1993daafcf3a925fda38f69362f2512ebe456c3ddb3c2f7b
azure-cloud-node-manager git 9c24d768 sha256:2eb3dd656baeab9e256015ba3e8e89da7f0cf7f70cba2e7e1e77b407df791887
azure-disk-csi-driver git 6cced666 sha256:fca982811b044e6f5780aa6a3aca8eac2dd62e21bcf6b4a797362190e13816a9
azure-file-csi-driver git 4b34592e sha256:9f62092309c958bd2ce90dff783e17535c7789f5a8fbd43055213028a3877c5f
azure-kms-encryption-provider git c937080f sha256:579a6c699e97e9796389e54c95424e2cfa71e5b0dd66908e8c5d6df1d51563ad
azure-workload-identity-webhook git f60e4029 sha256:961f83c8c9664cfae93b287ba3b86f8002bb6bdcdbff217740e70fde5dc92753
baremetal-machine-controllers git 1ede6c3f sha256:2ba710b3b7204af9bc39ad9f044aedb0c9aac580fd17526a813fbc801b0da711
cluster-autoscaler-operator git 474ad65c sha256:5ea6492ac51e2916a8b7ac2d378da1feede46a1ef5dc64cc276ed87e1dd99b93
cluster-bootstrap git d1e01954 sha256:93af695c4db2f86502f705a488981e2e3f6f839c2e3192db1139803ef5534953
cluster-capi-controllers git 63df38bc sha256:aefbfdd6416c461887e3c457e0dc032b95009a514ff6ababbe67fdb6fa6e7534
cluster-capi-operator git 2f2737e1 sha256:2815d7d12cc8e477edbc37af1e4acc5e4a4e8466f0bd714b2ea47b1a6ce3c794
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:004418f6a1d2c7d8722843fb07f605992e62e74f63a783ef48820b66f423c13a
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:c777e21833e7751bf765fb1de14f80b362b8178e2da4f61b927118c5e3671059
cluster-dns-operator git 7cafd0c7 sha256:045a750e0a6c831cf6ff9da3bb1a22cff9917df887ab4a35450aa773d5a2b340
cluster-image-registry-operator git 1e3caa4b sha256:d4bc2f3b569da219d15f892785e56870e1e0c62116524e62b08e54a242c07e2c
cluster-kube-cluster-api-operator git 33a1141e sha256:f661e7a77a90b6aafac82731deb8963cc7307948281c7d515d7fecd95d454218
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:dc1436d2524b63b8e11df496970d1e6a9806d90afb495af730d1c6864e00f352
cluster-machine-approver git 01d5fbbe sha256:6fe48df675b9bdd6f1146c1296712ffbf351c3172f8571a269a8e4e2377e70d8
cluster-olm-operator git 88088e4b sha256:b245369b51604ea52ab3eff6427982483606b83dcc5a00ce6e351eef55642051
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:65787331506846e36febfbd38f359306f30e1fe5ad382382eb25050ef1b03b60
cluster-openshift-controller-manager-operator git f1711cf3 sha256:db82345c70febe980e20d9759b3a531a9b7e31e8febea7c94c9eff939ca88b2e
cluster-policy-controller git 5fd85252 sha256:1d0e81c6dcc1b627de56e2faf108b50bcbc3870ff3e4d09748edc493fc1cff9e
cluster-update-keys git 8caab452 sha256:708bc3b0918ce2f414b4032a763a4e765643c8423d889f7bafce0731c2f3a73c
configmap-reloader git e2aaf00a sha256:d415d6964fb9ed13a4d0c7538f51c01f347b50f1e1adba59169534e931704877
csi-driver-nfs git 32e77590 sha256:a5a6ad8b923674738717cb1623b4f0b2b9862e752e06190861e5ee12c4183a7d
csi-external-attacher git 39b37c06 sha256:6836ec3fa394261eb5882c5f4b6551d3f0238df1d58a2c588456cfd37d9bef82
csi-external-provisioner git 376f0ea0 sha256:e5109a0e7cf6fc54efff1ce9638d2a53d8a165a27623c93850c0d8a2a2524d6a
csi-livenessprobe git 3a977844 sha256:c9939d14d04be600248c2cc4158d304822f8253032121f13795140cb1e8e9850
driver-toolkit git 2e139edc sha256:4925b1aecda512c045dfea6136d2c1766025bd2dc99fb50b43a229865c0a2a82
egress-router-cni git 3193a756 sha256:0423c2bc5bc949c627e9044a2666b29b65979a68fa0496aee63fda75edfb5d3d
gcp-cloud-controller-manager git 6ea23561 sha256:23120d584fc09db0acd6fc28d393f763af6fc1c60b9582ce984c3ec00eec561a
gcp-pd-csi-driver-operator git 7cb8b38c sha256:45e22bd77922b1a618459b192b012fe9746c8c660e994b18a9c58efecffb4c51
gcp-workload-identity-federation-webhook git f0a670c7 sha256:63bf712095b12bffb31b0e89ffa1899dd08155335be33fb5dcd6f861f762add5
ibm-cloud-controller-manager git a33026b1 sha256:fd0804ad28f92daf399979f94eef3cb21019a9fe551ed7168db479829fb957ae
ibm-vpc-block-csi-driver-operator git 1c7bc07e sha256:e32e09d25a6b8c104311960598354202007c813bf11f8c1d563d0dd5452fc95c
ironic-machine-os-downloader git 50ca44fd sha256:0c2b5b1a0ef225bcc02d3dbd6944f88d618b33872ffb88a7c114ccefcc299596
ironic-static-ip-manager git cfbae04f sha256:da1bd06075f47d6f489dd114049c86c5ce33917b9fe9de22cbda1ebcee0ff60d
keepalived-ipfailover git 716eb0ef sha256:cfadb921c7bb4d44dfdedef72eb603424a9da187705ca53f95a01dbbf6ca06f7
kube-metrics-server git 962ccca2 sha256:884e3305362f086f088c171ca5338ddb9922ec19f2feb6aab6ec19e316182866
kubevirt-cloud-controller-manager git 3f4542ec sha256:87753e25c002237af6561dac8a89eac6c806e01344fbd710a28004ed29408f6d
machine-os-images git ab432836 sha256:da42cde7df64067b09cd49fa7ffd3b5b4edf9e77cc4a4e9e55c12aadef45d822
multus-route-override-cni git 391c1b03 sha256:b356b6f8d9d1b3e4609052b5fa4a8aa47fe67b1f564d4dbc9f0abd4af10c647c
network-tools git 47b13549 sha256:b1f276d86c939c32c32e65a1e51940396d17bf178cce1a8d2f296292a0e0dfee
nutanix-cloud-controller-manager git d9fe8f38 sha256:a8887e0f9a395ce5ef3797b6884b6f0c6b168ba2131f5b8c3d6aa0b1754ec8f5
nutanix-machine-controllers git afe324bf sha256:7b653454caeb73f2c302148ee23a68b9e15b8eda218ca12dd86857b41207281e
openshift-state-metrics git 3cca6fee sha256:41da034939e9ab382852bbc0f4cf224dea9b767e13f0e2723d6210e4346b7cbb
ovirt-csi-driver git 1db726a9 sha256:45be27b5ad64170c2f80898b6f84c09726cb64aa8d3a2a17d4d2141113fa1701
powervs-block-csi-driver-operator git 01fc505a sha256:d03224707c0b2f4f6405411fa01f46fe0a01a9538f507c558270a081b6b2e26f
powervs-cloud-controller-manager git 17ae6fba sha256:b50597985f4526cb52f1caee60cb6205bfe291e84f0e0fce87e972f4773dadd9
prom-label-proxy git 35c11369 sha256:0ca843e0cb7db0c589ca5cc45190592443b5c645ce6341fc54b8a67006f7c6cb
prometheus-node-exporter git 92e17ff5 sha256:78e540782ffef1a80c9fc1abd7906ee79611beeb27db927c2919f561519b6b9d
rhel-coreos sha256:20e7790eedbb9ea0e0c7404cf6f3be4a8578dc0fe4e4cbea0312cae5a16ec285
rhel-coreos-extensions sha256:10545f119e9fd729a4926afd8d6445e2805a7e9574516b903282e670f64d0d9e
route-controller-manager git ce6ffa24 sha256:28e7b0f4a81e505d71172ecbb6f873e816ab770bbeeddceedc4767a6900c189a
service-ca-operator git 30efb529 sha256:d9a565b2d22d4498e14970c5fce817f8c64ff4652b7502095f698b99d70659b9
telemeter git 490612bd sha256:4e229f873d94c8d0c22ad88fcb8a36e62f171d9378cf7df70c07d87497733e57
thanos git f1599f65 sha256:1ed4178f8df624d299f55703216ec19609a59eeaa3ee6d33dba2995ea97404c8
vsphere-csi-driver-operator git 2b241410 sha256:a9b996336b80a8a6d104023ac86ec42c7b80b2dd34feea243852f26262c6016c

agent-installer-api-server

MGMT-23439: Pin gotestsum to v1.12.2 for Go 1.21 compatibility #10019
OCPBUGS-74898: Retry incomplete cluster registration in ABI #8817
OCPBUGS-74911: Remove root=/dev/disk/by-label/dm-mpath-root from kargs #8820
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-58650: Bump glog pkg to 1.2.4 (#1181) #1181
Full changelog

agent-installer-node-agent

MGMT-21849: Skip arping for remote IPs not in outgoing NIC’s subnet #1332
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-utils

OCPBUGS-68243: bump github.com/sirupsen/logrus to v1.9.3 #237
Full changelog

aws-cluster-api-controllers

OCPBUGS-77903: [release-4.18] update go mod dependency for konflux #589
OCPBUGS-61841: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #570
OCPBUGS-58670, OCPBUGS-58675: bump github.com/golang/glog to v1.2.5 #556
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-79429: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.18 #531
OCPBUGS-78299: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.17 #524
OCPBUGS-76582: Fix Cinder, Manila driver metrics #501
OCPBUGS-62664: disable e2e snapshot tests #463
OCPBUGS-63558: Add RBAC ClusterRole and Binding for driver node #454
OCPBUGS-63407: Use 127.0.0.1 for healtz http-endpoints #450
OCPBUGS-62973: Add withCABundleDaemonSetHook() to AWS EFS operator #447
OCPBUGS-55053: Correct ASH driver inject env config #381
OCPBUGS-54453: Enable required driver services #375
OCPBUGS-60596: Bump library-go to fix assignment to nil map issue #421
OCPBUGS-60203: Remove stale conditions #413
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

aws-machine-controllers

OCPBUGS-73789: Fix reconciler consistency checks in Update and Exists #166
OCPBUGS-63138: client: re-use a single file for building the session instead of randomly named files #146
Full changelog

azure-cluster-api-controllers

OCPBUGS-77905: [release-4.18] update go mod dependency for konflux #362
OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #348
Full changelog

azure-machine-controllers

OCPBUGS-65882: Set updateDomainCount to one when faultDomainCount is one #175
OCPBUGS-63669: Support datadisks on Stack Hub #167
OCPBUGS-56167: [release-4.18] Update virtualmachines service to armcompute/v5 SDK #145
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #51
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-78550: fix wavelength zone name regex #10409
OCPBUGS-45579: PowerVS: Listen to machineNetwork #9277
OCPBUGS-73784: pkg/asset/manifests/azure: save cidr blocks #10217
OCPBUGS-76598: Increase agent-installer pre-network-manager timeout #10299
OCPBUGS-67203: Update the RHCOS 4.18 bootimage metadata #10294
OCPBUGS-74676: [release-4.18] GCP: skip AI zones #10275
OCPBUGS-69880: Azure UPI ARM template: use storageAccountId #10179
OCPBUGS-68244: [4.18] uplift logrus #10166
OCPBUGS-57590: Mount the user-ca-bundle into ICC #9794
OCPBUGS-63494: Catch gcp destroy cases where the operation is nil #10030
OCPBUGS-52659: [release-4.18] CORS-3825: pkg/infrastructure/azure: support nvme #9545
OCPBUGS-65588: Update the RHCOS 4.18 bootimage metadata #10113
OCPBUGS-58504: Refactor removing loadbalancer in OpenStack #9831
OCPBUGS-53235: Validation for API and Ingress VIPs when using user-managed load balancer #10046
OCPBUGS-62810: Update the RHCOS 4.18 bootimage metadata #10014
OCPBUGS-59490: Make swift containers removal not fatal for UPI. #9839
OCPBUGS-61529: Use less permissive access for /var/lib/etcd for SNO #9937
OCPBUGS-61178: Refine check for supported SNO platforms #9923
OCPBUGS-60592: baremetal: always set external v6 URL on dualstack #9895
OCPBUGS-54598: Update the RHCOS 4.18 bootimage metadata #9900
OCPBUGS-56177, OCPBUGS-59155, OCPBUGS-59158: Migrate AWS SDK to V2 to support MX-Central Region #9709
Full changelog

baremetal-operator

OCPBUGS-76988: Unblock BMH direct deletion when detached annotation is present #461
OCPBUGS-56766: Make firmware update handle only a subset of Spec.Updates #421
Full changelog

baremetal-runtimecfg

OCPBUGS-60111: Re-add ENABLE_NODEIP_DEBUG env var #364
OCPBUGS-59280: Bump logrus version #354
OCPBUGS-57782: iptables: Switch PREROUTING REDIRECT rule to DNAT instead #351
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-65707: fix(must-gather): do not set node affinity if nodename is set #2145
OCPBUGS-64608: Help with must-gather scheduling through suggesting preferance of nodes #2127
Full changelog

cloud-credential-operator

OCPBUGS-74548: Resolve nil pointer exception in hasResourceTags #968
OCPBUGS-65800: ccoctl azure: retry custom role creation on consistency errors #950
OCPBUGS-65479: ccoctl: use pagination when listing resources in aws #947
OCPBUGS-63548: ccoctl: add public-key-file flag to create-all #938
OCPBUGS-55127: snyk to ignore SNYK-GOLANG-GOLANGORGXNETHTML-9572088 #915
OCPBUGS-60971: ccoctl: aws to use proper issuer url on subsequent runs #907
OCPBUGS-60618: ccoctl azure dnszone-resource-group-name now optional #899
OCPBUGS-58680: github.com/golang/glog v1.2.5 #891
Full changelog

cloud-network-config-controller

OCPBUGS-73750: [release-4.18] Fix pointers without ptr.Deref #199
OCPBUGS-65651: [release-4.18] Fix capacity calculation #193
OCPBUGS-64779: [release-4.18] Change the capacity struct from int to ptrOfInt #189
Full changelog

cluster-authentication-operator

OCPBUGS-49749: Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups #754
Full changelog

cluster-autoscaler

OCPBUGS-78699: allow clusterapi provider to skip paused resources #413
OCPBUGS-75925: Fixes histograms becoming empty after loaded from checkpoints #402
OCPBUGS-60908: revert openshift replica fix #375
OCPBUGS-60235: fix checkpoint gc of unknown recommenders #368
OCPBUGS-59260: Fix cool down status condition to trigger scale down #361
Full changelog

cluster-baremetal-operator

OCPBUGS-78708: Update kubebuilder tools to more latest version #579
OCPBUGS-57590: Mount the user-ca-bundle into ICC #486
OCPBUGS-63439: Always have a service for ironic-api port #514
OCPBUGS-63469: Allow provisioningIP when network disabled #515
OCPBUGS-60586: Remove webhookport (9447) as HostPort #501
OCPBUGS-58315: Bump github.com/go-errors/errors to v1.5.1 #492
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63166: ccm: disable unused secure-serving port and webhook #421
OCPBUGS-60015: Add Service using common resource templating #405
OCPBUGS-60015: Update service selector to match deployment label #403
Full changelog

cluster-config-api

OCPBUGS-70315: Add HTTPKeepAliveTimeout to IngressController API #2638
NO-JIRA: [release-4.18] OWNERS: update approvers/reviewers #2625
OCPBUGS-67214: Introduce ClosedClientConnectionPolicy to IngressController API #2618
CNTRLPLANE-1980: Promote streaming list encoding to Default #2598
NO-JIRA: Promote streaming list encoding to Default on Hypershift. #2562
CNTRLPLANE-1610: Add feature gates for StreamingCollectionEncoding #2528
OCPBUGS-52347: Add CEL validation for RegistrySources in Image API #2218
OCPBUGS-60904: MachineOSConfig name should match MachineConfigPool #2458
Update crd-schema.json to release 1.33 branch #2459
: add OnClusterBuilds to default config #2365
Full changelog

cluster-config-operator

OCPBUGS-68249: Update logrus to 1.9.3 to address CVE-2025-65637 #464
Full changelog

cluster-etcd-operator

OCPBUGS-76284: Add priority field to prevent early shutdown #1545
OCPBUGS-63451: Ensure revision.json persists on ungraceful shutdown #1503
OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #1518
OCPBUGS-61235: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1478
OCPBUGS-59992: fix ordering on bootstrap IP selection #1458
OCPBUGS-59803: add missing ports to svc and pod spec #1455
Full changelog

cluster-ingress-operator

OCPBUGS-70315: Implement HTTPKeepAliveTimeout tuning option #1333
NO-JIRA: Add new NID team members to OWNERS #1319
OCPBUGS-67214: Implement ClosedClientConnectionPolicy field #1322
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-76284: Add priority field to prevent early shutdown #2031
OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #1976
OCPBUGS-63119: SCC: add hostmount-anyuid-v2 #1937
OCPBUGS-61039: Set goaway chance to 0.001 #1912
OCPBUGS-60176: Add missing service ports to apiserver service #1888
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-76284: Add priority field to prevent early shutdown #906
OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #897
OCPBUGS-60131: Missing endpoint slices for open ports the operator uses #852
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #622
OCPBUGS-76284: Add priority field to prevent early shutdown #612
OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #590
Full changelog

cluster-monitoring-operator

OCPBUGS-77274: AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change #2833
OCPBUGS-67168: Add the collection of MTV migration metrics #2774
OCPBUGS-61965: add flag --watch-referenced-objects-in-all-namespaces to prometheus-operator #2723
OCPBUGS-64579: Fix KSM deny-list typo #2731
OCPBUGS-63488: Remove AlertManager endpoints when disabled #2737
OCPBUGS-62852: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.18 #2702
OCPBUGS-63410: [release-4.18] allow using remoteWrite[].oauth2.proxyFromEnvironment for cluster-wide proxy #2724
OCPBUGS-63017: test: remove image registry e2e tests #2711
OCPBUGS-61706: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2669
OCPBUGS-59962: operator: increase wait time till degraded to max 4 times 5m #2633
Full changelog

cluster-network-operator

OCPBUGS-74154: whereabouts-config is a reserved name for user interaction. #2884
OCPBUGS-73767: Tweak iptables-alerter to try to avoid crictl bug #2877
OCPBUGS-65704, OCPBUGS-65705: Annotate whereabouts-controller #2842
OCPBUGS-62671: Add drop flows for GARP #2810
OCPBUGS-60984: Update CNO reviewers/approvers #2766
OCPBUGS-60795: Add release version annotation to whereabouts-controller/whereabouts-token-watcher #2782
OCPBUGS-47651: Re-disable metrics server #2622
Full changelog

cluster-node-tuning-operator

OCPBUGS-75954: PPC: filter out namespaces dir #1465
OCPBUGS-69947: [release-4.18] E2E: skip stalld test checking sched_fifo #1451
OCPBUGS-63450: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1417
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-samples-operator

OCPBUGS-63511: references to github.com/sclorg/django-ex.git now also refer to the branch #657
Full changelog

cluster-storage-operator

OCPBUGS-62666: Move metrics to vsphere driver #632
Full changelog

cluster-version-operator

OCPBUGS-70182: Unify capitalization when comparing architectures for available updates #1327
NO-ISSUE: hongkai becomes an approver release-4.18 #1286
OCPBUGS-62869: disable metrics auth for hypershift clusters #1242
OCPBUGS-58450: Failing=Unknown upon long CO updating #1211
OCPBUGS-60222: CVO protects /metrics with authorization #1223
Full changelog

console

CONSOLE-5011: migrate to yarn berry #16073
NO-JIRA: Bump builder image to v29 #15995
OCPBUGS-65808: Fix PatternFly dark theme colors for charts and form inputs #15951
OCPBUGS-74458: Bump lodash to latest #15965
OCPBUGS-73753: Fix Helm chart installation with CA/TLS certificates #15914
OCPBUGS-73662: Namespace is not persisting when switching to developer view from the topology page of admin page #15910
OCPBUGS-69915: PVC shows negative Available space in OpenShift Console on RHOCP 4 #15868
OCPBUGS-69448: Fixes namespace-scoped operators that were not showing as installed when viewing OperatorHub in “All Projects” mode #15855
OCPBUGS-68361: Disallowed Pipelines-plugin Pipelines navigation section #15842
OCPBUGS-65592: HPA Form View in RHOCP Web Console Incorrectly Requires Both CPU and … #15725
OCPBUGS-65932: Preserve query string in perspective switch + remove dev console folks from reviewers #15761
OCPBUGS-65533: Preserve path on perspective switch #15716
OCPBUGS-64735: Expose prometheus tenancy label path as a proxy #15685
OCPBUGS-64682: limit node log length to 1000 lines #15680
OCPBUGS-63657: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15654
OCPBUGS-63247: fix bug where Roles list was displaying invalid data f… #15619
OCPBUGS-63041: switch to dev perspective for /dev-monitoring #15601
OCPBUGS-44156: bump dompurify to latest #15589
OCPBUGS-62326: /auth/error?error=missing_state&error_type=auth is showing blank page #15544
OCPBUGS-61569: Update CHANGELOG for 4.18 plugin SDK package publish #15516
OCPBUGS-61569: Fix bug with Console provided PatternFly shared modules #15479
OCPBUGS-61697: Remove ancient X-XSS-Protection header #15493
OCPBUGS-60236: Make sure CSP violations are only reported to telemetry once per day per browser #15453
NO-JIRA: Update CHANGELOG for latest 4.18 plugin SDK package publish #15456
OCPBUGS-50983: Store Topology sidebar alert in the localStorage #15431
OCPBUGS-54660: Added patternfly/react-topology to shared module list of dynamic plugin sdk #15371
OCPBUGS-50570: Fix regression where plugins were not tracking CSP violation status a… #14754
OCPBUGS-60140: Recognize Detached BMH status #15362
OCPBUGS-54660: Add BaseNode in topology folder into Dynamic Plugin SDK #15369
: OCPBUGS-60278: Fix i18n string for event stream #15403
OCPBUGS-54660: Expose OdcBaseNode through the dynamic plugin SDK #15370
OCPBUGS-54660: Expose topology components and utils via plugin SDK internal package #14777
OCPBUGS-58364: change ‘/metrics/usage’ endpoint to ‘/api/metrics/usage’ #15272
OCPBUGS-59778: add data-test attrs to console plugins table #15327
OCPBUGS-59786: Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image #15330
OCPBUGS-59501: Add the Origin header to the HeaderBlacklist in the co… #15295
OCPBUGS-59443: Not able to launch terminal window from OCP web console due to console plugin conflicts #15290
OCPBUGS-59446: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15292
OCPBUGS-58457: fix bug where / in console.tab/horizontalNav href brea… #15250
OCPBUGS-58203: OpenShift console PVC clone cannot use B as the unit #15215
Full changelog

console-operator

OCPBUGS-77861: update go mod dependency for konflux #1113
NETOBSERV-2023, OCPBUGS-60304: Implement a quickstart for netobserv operator #997
OCPBUGS-60081: Fetch synced CM for the CertificateAuthority issuer + Wire synced OIDC Auth CM to Console #1031
OCPBUGS-59786: Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image #1027
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-60871: [release-4.18] host-device: Return interface name in result #208
Full changelog

coredns

OCPBUGS-60462: UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy #152
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-57800: Rebase release-4.18 onto release-1.31 #322
Full changelog

csi-external-resizer

OCPBUGS-62467: Requeue PVC over PV creation #176
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-63574: UPSTREAM: 1303: Fix requeueing snapshot content after deletion error #190
Full changelog

csi-node-driver-registrar

OCPBUGS-63324: update log level verbosity to not clutter logs #89
Full changelog

docker-builder

OCPBUGS-66990: bump buildah to 1.37.7 to fix CVE-2025-52881 #498
OCPBUGS-65655: BuildConfig inline Dockerfile fails with heredoc syntax #486
Full changelog

docker-registry

OCPBUGS-68253: update logrus to v1.9.1 #464
IR-526: remove AWS region check #437
Full changelog

etcd

OCPBUGS-57112: Updating ose-etcd-container image to be consistent with ART for 4.18 #333
Full changelog

gcp-cluster-api-controllers

OCPBUGS-78278: [release-4.18] update go mod dependency for konflux #265
OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #247
Full changelog

gcp-machine-controllers

OCPBUGS-59387: Add max-concurrent-reconciles flag to machine actuator #126
Full changelog

gcp-pd-csi-driver

OCPBUGS-68258: UPSTREAM: 2056: bump github.com/sirupsen/logrus to v1.9.3 #89
OCPBUGS-44772: Fix Hyperdisk Resize That Requires Iops/Throughput Adjustment #83
Full changelog

haproxy-router

OCPBUGS-67214: Add option abortonclose to HAProxy configuration template #703
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-54724: Fix implementation of ContainsCIDR to allow non-equal addresses #2267
OCPBUGS-65553: Update to Kubernetes v1.31.14 #2521
OCPBUGS-65494: Fix Concurrentmap Iteration #2512
OCPBUGS-61773: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2456 #2475
CNTRLPLANE-1610: Backport StreamingCollectionEncoding for JSON and protobuf #2483
OCPBUGS-61557: Rebase v1.31.13 #2465
Revert “UPSTREAM: revert<carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated.”” #2448
OCPBUGS-60511: Bump to v1.31.12 #2440
OCPBUGS-60524: podresources: list: use active pods #2413
UPSTREAM: revert<carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated.” #2422
OCPBUGS-57488: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2333
OCPBUGS-57499: UPSTREAM:131579: fix(kubelet): acquire imageRecordsLock when removing image #2399
OCPBUGS-44757: Adjust NodeMonitorGracePeriod to 50s #2385
OCPBUGS-59535: Rebase v1.31.11 to 4.18 #2377
Full changelog

hypershift

OCPBUGS-76532: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7699
OCPBUGS-77368: Fix ignition-server pod restarts #7878
CNTRLPLANE-1708: Backport Customer Global Pull Secret to OpenShift 4.18.z #7354
OCPBUGS-72932: Fix Konflux EC voilation, update deprecated base … #7456
OCPBUGS-69847: test: remove unit tests that depend on network communication [release-4.18] #7406
OCPBUGS-65843: specify SCC annotation for pods in data plane #7267
CNTRLPLANE-1902: Migrate 4.18 pipelines to common pipeline template #7211
OCPBUGS-61700: use csi-resizer image from release provider #7103
OCPBUGS-63638: [release-4.18] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7111
OCPBUGS-63034: [release-4.18] Update DNS names for ovn-kubernetes cp metrics #7025
OCPBUGS-63369: Make the hypershift CLI binary FIPS-compliant #7093
OCPBUGS-62808: Fix driver-config ConfigMap content flapping due to random ordering #6944 #6947
CNTRLPLANE-1424: feat(konflux): tag MCE HO images with latest #6837
OCPBUGS-62816: set default goaway-chance to 0.001 #6950
OCPBUGS-61904: resolve MIRRORED_RELEASE_IMAGE flapping #6858
OCPBUGS-61700: Sync RBAC for expansion support in kubevirt CSI driver #6355
OCPBUGS-61568: [release-4.18] fix(proxy): ensure URLs have scheme before proxy resolution #6793
OCPBUGS-61203: ci: konflux multi-arch images #6867
OCPBUGS-61203: Use the common konflux pipeline and update CLI dockerfile #6832
NO-JIRA: chore(deps): update konflux references #6667
OCPBUGS-57142: [release-4.18] HCP payload doesn’t respect multiple mirrors #6672
OCPBUGS-60485: feat(validations): add wildcard support to DNS SAN conflict detection #6649
OCPBUGS-60148: Always compress and encode payload in token secret for inplace upgrades #6721
OCPBUGS-60923: MCE 2.8 konflux for hcp-cli #6700
CNTRLPLANE-1333: New API to support specifying cluster-autoscaler flags #6641
OCPBUGS-60458: Update PSA from v1beta1 to v1 #6644
CNTRLPLANE-1269: chore(deps): update konflux references #6658
CNTRLPLANE-1205: Add missing mce-2.8 pipeline #6656
OCPBUGS-59503: [release-4.18] Support proxy authentication when user/pass is included in URL #6460
CNTRLPLANE-1229: Move CPO pipeline to hermetic builds #6597
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-77207: [release-4.18] standardize build paths #122
OCPBUGS-58741: bump github.com/golang/glog to version v1.2.4 #104
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67286: [release-4.18] Fix incomplete vendor/ #140
OCPBUGS-51825: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #120
OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #119
Full changelog

ibmcloud-machine-controllers

NO-JIRA: Modernize test infrastructure to align with other MAPI providers #87
OCPBUGS-47135: CVE-2024-45338 ose-ibmcloud-machine-controllers-container: Non-linear parsing of case-insensitive content in golang.org/x/net/html [openshift-4.18] #69
Full changelog

insights-operator

OCPBUGS-76537: [release-4.18] [bugfix] The ConfigMap value for StoragePath is ignored on basic routine #1239
OCPBUGS-68263: Update github.com/sirupsen/logrus to v1.9.3 #1205
OCPBUGS-68263: [release-4.18] golanci-lint version update & corresponding fixes (#1045) #1206
OCPBUGS-66396: Add filtering to add other possible pod status to QEMU gatherer #1195
OCPBUGS-66182: QEMU logs are not gathered if there are pending status virt-launcher pods #1189
OCPBUGS-66181: [bugfix] The archive’s records may include files whose names are out of bounds #1188
OCPBUGS-61972: add missing permissions for replicasets and events #1146
And 5 elided commits (e.g. from squash or rebase merges)
Full changelog

insights-runtime-exporter, insights-runtime-extractor

OCPBUGS-77789: remove dnf cache from the container images #69
Full changelog

ironic

OCPBUGS-74115: Bump keystonemiddleware version to 10.7.1-0.20260216144200.4c001ba for CVE-2026-22797 fix #795
OCPBUGS-69790: Bump eventlet version to 0.33.1-7 #760
OCPBUGS-65573: Include Handle HTTP 400 and 409 race condition in Redfish power opera… #727
OCPBUGS-62647: Bump sushy to include etag fix #701
Full changelog

ironic-agent

OCPBUGS-69780: Bump eventlet version to 0.33.1-7 #230
OCPBUGS-68360: Include Test advertised ip reachability before assigning it #226
OCPBUGS-62456: netutils: Use ethtool ioctl to get permanent mac address #206
Full changelog

kube-rbac-proxy

OCPBUGS-60930: fix(go.mod): bump golang.org/x/crypto/ssh to 0.31.0 #125
Full changelog

kube-state-metrics

OCPBUGS-74873: Deduplicate CRS stores #131
Full changelog

kube-storage-version-migrator

OCPBUGS-78273: fix /vendor for hermetic 4.18 #239
NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-18). #225
Full changelog

kubevirt-csi-driver

OCPBUGS-79362: Add annotation-based fallback for infra VM node ID resolution #86
OCPBUGS-63670: Add awels as an approver in 4.18 branch #73
OCPBUGS-61700: Implement volume expansion #71
Full changelog

libvirt-machine-controllers

OCPBUGS-77194: Fix incomplete vendor/ #300
Full changelog

machine-api-operator

OCPBUGS-78795: [release-4.18] : correct aws kms permissions #1478
OCPBUGS-78796: [release-4.18] Use resource group when generating default Azure image #1480
OCPBUGS-59387: Enabled 10 concurrent reconciles on GCP #1392
Full changelog

machine-config-operator

OCPBUGS-79483: set default-timeout-stop to 200s globally #5805
OCPBUGS-62692: configure-ovs: work around a Cisco switch issue #5329
OCPBUGS-78056: Prevent unnecessary systemd unit disable #5758
OCPBUGS-74148: enable nodeip-configuration for platform external #5578
OCPBUGS-77777: reduce MCO image size #5738
OCPBUGS-77576: mcd_config_drift not working properly #5726
OCPBUGS-77421: Remove MCD liveness probe #5710
OCPBUGS-74644: After OCL is enabled few phases in MCN are not updating as expected #5605
OCPBUGS-77092: Machine-config controller should not log about non-existent pull-secret changes #5680
OCPBUGS-77041: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5671
OCPBUGS-76560: [release-4.18]: cherry pick to few fixes that needed for missing services and configuration #5653
OCPBUGS-71227: MCP is not correctly degraded when a pivotError happens #5534
OCPBUGS-70336: Remove log exposing kubeconfig #5528
OCPBUGS-62169: Fix - NetworkManager restart or crash renders br-ex unusable #5356
OCPBUGS-65850: Remove –mount directives #5433
OCPBUGS-62294: Make static DNS with DHCP IP work #5311
OCPBUGS-63346: Invalid architecture value found in annotation during 4.19 update #5366
OCPBUGS-60111: Enable debug logging for nodeip-configuration #5220
OCPBUGS-62671: [release-4.18] Networking: reset ovn-remote config and allow ovnkube controller to set it #5325
OCPBUGS-62845: Recheck generatedByControllerVersion annotation prior to deleting a degraded MC #5341
OCPBUGS-62499: Add /etc/docker/certs.d to template #5320
OCPBUGS-62637: Machine-config controller should actively manage cordon while draining #5322
OCPBUGS-62350: Add mcd_local_unsupported_packages recording rule #5315
OCPBUGS-62321: Add control-plane label for master nodes on legacy clusters #5314
OCPBUGS-61840: Override NMState service definition #5288
OCPBUGS-57357: Race in configure-ovs.sh affects bonding interface configuration. #5118
OCPBUGS-59929, OPNET-681: Support migration to NMState #5207
OCPBUGS-60034: Add workaround fix for static pod race #5212
OCPBUGS-56751: Support NODEIP_HINT in IPI deployments too #5081
Full changelog

machine-image-customization-controller

OCPBUGS-77888: Clean up dnf cache to reduce container image size #168
OCPBUGS-68262: [4.18] Uplift logrus #151
Full changelog

metallb-frr

OCPBUGS-74485: Dockerfile: unpin FRR rpm #121
Full changelog

monitoring-plugin

NO-JIRA: simplify dockerfile by removing cachito dependencies [release-4.18] #818
OCPBUGS-70291: fix: update qs vulnerable dependency #739
OCPBUGS-65958: Fix metrics gaps 4.18 #656
OCPBUGS-64735: allow tenancy access to metrics tag #638
OU-1059: add perspective to action injector #632
NO-JIRA: update i18n strings #508
OCPBUGS-60199: feat: add alerting rules tab to dev console #493
OCPBUGS-54314: Fix “Export as CSV” #461
Full changelog

multus-admission-controller

OCPBUGS-58771: Update the github.com/golang/glog module to v1.2.4 #101
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-77853: hermetic 4.18 #276
Full changelog

multus-networkpolicy

OCPBUGS-54939: [release-4.18]: Support default ports value #68
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-59697: Prevent accidental IP deallocation in statefulsets #376
OCPBUGS-58360: The node slice controller should only process valid whereabouts confi… #381
OCPBUGS-58360: Add nodeslicecontroller bin to dockerfile #373
Full changelog

must-gather

OCPBUGS-46437: Separate resources with comma to fix malformed inspect #470
Full changelog

network-interface-bond-cni

OCPBUGS-62793: Use netlinksafe instead of netlink to avoid netlink.ErrDumpInterrupted #99
Full changelog

network-metrics-daemon

OCPBUGS-58781: Bump github.com/golang/glog to v1.2.4 (#111) #111
OCPBUGS-60174: Replace e2e test image (#120) #120
Full changelog

networking-console-plugin

CNV-76277: Fix name generator with unprofessional names #319
OCPBUGS-63582: Fixed - Extra semicolon observed before Service IP in OCP Console #306
OCPBUGS-60178: Fix ingress details #264
OCPBUGS-60124: Fix requiremenets with no value #259
Full changelog

oauth-apiserver

NO-JIRA: (chore): update OWNERS file #170
OCPBUGS-65841: UPSTREAM: <carry>: bump kubernetes-apiserver to pick up loopback certificate expiration update #155
OCPBUGS-63050: (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission #149
Full changelog

oauth-proxy

OCPBUGS-61444: Update x/crypto to v0.31.0 #333
OCPBUGS-57172: 4.18 kube 1.31 #317
Full changelog

oauth-server

OCPBUGS-57300: Updating oauth-server-container image to be consistent with ART for 4.18 #186
Full changelog

oc-mirror

OCPBUGS-66051: Remove empty status field from generated IDMS/ITMS files (manual 4.18 backport) #1324
OCPBUGS-65510: removes unintended exec permissions #1312
OCPBUGS-62696: v2/cli: show binary version in output #1286
OCPBUGS-62711: generate the archive only after mirroring #1287
OCPBUGS-62432: changes the warning message of 4.21 #1278
And 6 elided commits (e.g. from squash or rebase merges)
Full changelog

olm-catalogd

OCPBUGS-62872: set the SElinux type #139
Full changelog

olm-operator-controller

OCPBUGS-62872: set the SElinux type #509
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

openshift-apiserver

OCPBUGS-74234: Bump library-go for route path validation fix #603
OCPBUGS-69955: Add ValidatingAdmissionPolicy and check for omissions next time. #589
OCPBUGS-66379: pkg/image: conditionally parse raw image manifest #585
OCPBUGS-65842: UPSTREAM <carry>: bump kubernetes-apiserver to pick up loopback certificate expiration update #581
OCPBUGS-58461: Wire dry run option to Image API server operations #531
Full changelog

openshift-controller-manager

OCPBUGS-61002: legacy image pull secret rollback controller #411
OCPBUGS-57949: ignore error failing to find pull/push secrets #399
Full changelog

openstack-cluster-api-controllers

OCPBUGS-64816: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into release-4.18 #371
Full changelog

openstack-machine-api-provider

OCPBUGS-69648: Don’t record event for every reconcile #143
OCPBUGS-76792: Fix make test #159
OCPBUGS-74986: Revendor CAPO #152
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-81473: Fix nil pointer dereference in sortUnpackJobs when sorting non-failed jobs #1273
OCPBUGS-77714: Remove the collect-profiles info from the microshift kustomization file #1245
OCPBUGS-76924: Remove the collect-profiles job #1231
OCPBUGS-65700: Fix TOCTOU race condition in ensureInstallPlan (#3682) #1156
OCPBUGS-61364: [4.18] e2e stability fixes #1080
OCPBUGS-60644: Add NetworkPolicy as a supported kind #1048
OCPBUGS-59421: 🐛 add catalog-operator control-plane-specific tolerations to unpack jobs #1040
OCPBUGS-58882: Reduce Frequency of Update Requests for Copied CSVs (#3597) #1034
Full changelog

operator-marketplace

OCPBUGS-73883: Increase default catalog polling interval to 4h (240m) #707
OCPBUGS-68272, OCPBUGS-68273: CVE-2025-65637 fixed in logrus v1.9.3+ #703
OCPBUGS-62218: Remove Expect func so that the test case can use the retry logic #669
Full changelog

ovirt-csi-driver-operator

OCPBUGS-68284: Bump github.com/sirupsen/logrus to v1.8.3 #150
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-78015: Add pperiyasamy to OWNERS for release-4.18 #3045
OCPBUGS-77516: Clear stale conntrack UDP entries for nodePorts #3016
OCPBUGS-77083, OCPBUGS-77106: [release-4.18] combined backport PR for 2 escalations #2987
OCPBUGS-48710: Branch Sync release-4.19 to release-4.18 [02-04-2026] #2970
OCPBUGS-74270: release-4.18 fix(localnet, ipamless): Prevent LSP deletion on sync #2943
OCPBUGS-70346: Branch Sync release-4.19 to release-4.18 [01-07-2026] #2922
OCPBUGS-66140: Branch Sync release-4.19 to release-4.18 [12-31-2025] #2916
CORENET-6055, OCPBUGS-48710, OCPBUGS-66360, OCPBUGS-66381, OCPBUGS-66428: Branch Sync release-4.19 to release-4.18 [12-03-2025] #2895
OCPBUGS-68347: Add ricky-rav to OWNERS for release-4.18 #2897
OCPBUGS-64855: Fix stale EIP assignments during failover and controller restart #2849
OCPBUGS-64780: kubevirt: fix bad release of IPs of live migratable pods #2847
OCPBUGS-63459: Branch Sync release-4.19 to release-4.18 [10-22-2025] #2825
OCPBUGS-63716: Skip Pending pods in EgressIP status updates #2836
OCPBUGS-48710: [release-4.18] DownStream Merge Sync from 4.19 [10-16-2025] #2811
OCPBUGS-62671: Fix EgressIP stale GARP post reboot + pod restart #2775
OCPBUGS-59744, OCPBUGS-61455: [4.18] allow default network -> localnet on the same node for any localnet subnet #2785
OCPBUGS-61748: [release-4.18] DownStream Merge Sync from 4.19 [10-02-2025] #2777
OCPBUGS-59680: [release-4.18] DownStream Merge Sync from 4.19 [09-29-2025] #2768
OCPBUGS-48710: Update OWNERS file: Add Patryk/Martin as approvers #2700
OCPBUGS-59371: EIP OVN controller: stop pod config flap #2703
OCPBUGS-59531: EgressIP: fix startup syncer #2690
OCPBUGS-59623: Revert “unpin libreswan version” #2678
Full changelog

powervs-block-csi-driver

OCPBUGS-51896: Mitigate CVE-2025-22868 by updating golang.org/x/oauth2 #102
OCPBUGS-70002: Update builder image’s golang version to 1.23 #103
Full changelog

powervs-machine-controllers

OCPBUGS-61163: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #125
Full changelog

prometheus

OCPBUGS-61706: chore: compute highestTimestamp at queryManager level #267
Full changelog

prometheus-alertmanager

OCPBUGS-74976: Include go-verify-deps expected files in gitignore #114
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-77298: backport upstream fix to reconcile resources with inconsistent status #370
OCPBUGS-77398: Validate webhookURL secret for MSTeams receiver in AlertmanagerConfig CRD #366
OCPBUGS-61965: reconcile workload configurations when a referenced secret/configmap key is updated #347
OCPBUGS-58194: Fix: One Alertmanager Config failing blocks all others #335
Full changelog

tests

OCPBUGS-77876: Backport: Remove duplicated graceful termination test from release-4.18 #30702
OCPBUGS-74207: Unrevert TLS tests with fixes #30708
OCPBUGS-69900: Updated the upgrade duration limit to 100 minutes for ppc64le #30628
OCPBUGS-63668: Add imagestream update dryrun test #30436
OCPBUGS-63712: Migrate OCP-32383 to upstream #30443
OCPBUGS-61698: chore(test/extended/prometheus): bump the series limit of total series sent via telemetry from each cluster #30253
OCPBUGS-60511: Bump to latest openshift/kubernetes (v1.31.12) #30230
OCPBUGS-60662: images/tests: Remove rteval #30135
OCPBUGS-60881: Exclude RHEL nodes in verifying that nodes have no unexpected reboots test #30170
OCPBUGS-60881: extended/machines: add –no-pager to journalctl cmds #30180
OCPBUGS-60927: Wait 30s after the upgrade is complete to validate workloads #30179
NO-JIRA: Update extended/networking OWNERS #30089
OCPBUGS-58461: Backport pr 29834 to release-4.18 #29968
OCPBUGS-60066, OCPBUGS-60067: Don’t check for isNoUpgrade #30053
OCPBUGS-60066, OCPBUGS-60067: Tolerate various expected Upgradeable=False conditions #30048
OCPBUGS-57887: Update to Kubernetes v1.31.10 #29941
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-77668: hermetic migration 4.18 #105
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-78018: hermetic migration 4.18 #84
OCPBUGS-61651: Fix unit tests #70
OCPBUGS-58861: [release-4.18] Update manifests to remove reliance on admissionregistration v1beta1 #62
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-68278: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 #156
Full changelog

vsphere-problem-detector

OCPBUGS-70359: Fixed logic for vSphere compute cluster permission #200
OCPBUGS-60784: Check for number of FailureDomain-s in GetVCenter() #189
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github