Back to index

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.20.0-0.nightly-2025-07-31-001616

Team Approvals:

• Accepted
  • QE

Tests:

• Blocking jobs
  • aggregated-aws-ovn-single-node-upgrade-4.20-micro Succeeded periodic-ci-openshift-release-master-ci-4.20-e2e-aws-upgrade-ovn-single-node
  • aggregated-aws-ovn-upgrade-4.20-micro-fips Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-aws-ovn-upgrade-fips
  • aggregated-azure-ovn-upgrade-4.20-micro Succeeded periodic-ci-openshift-release-master-ci-4.20-e2e-azure-ovn-upgrade
  • aggregated-gcp-ovn-rt-upgrade-4.20-minor Succeeded periodic-ci-openshift-release-master-ci-4.20-upgrade-from-stable-4.19-e2e-gcp-ovn-rt-upgrade
  • aggregated-hypershift-ovn-conformance-4.20 Succeeded periodic-ci-openshift-hypershift-release-4.20-periodics-e2e-aws-ovn-conformance
  • aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-aws-ovn-serial
  • aws-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.20-e2e-aws-ovn-techpreview
  • aws-ovn-techpreview-serial Succeeded periodic-ci-openshift-release-master-ci-4.20-e2e-aws-ovn-techpreview-serial
  • driver-toolkit Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-aws-driver-toolkit
  • fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.20-fips-payload-scan
  • install-analysis-all Succeeded periodic-ci-openshift-release-master-nightly-4.20-install-analysis-all
  • metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-metal-ipi-ovn-bm
  • metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-metal-ipi-ovn-ipv6
  • microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.20-periodics-e2e-aws-ovn-ocp-conformance
  • microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.20-periodics-e2e-aws-ovn-ocp-conformance-serial
  • overall-analysis-all Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.20-overall-analysis-all
  • rosa-classic-sts-conformance Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-rosa-sts-ovn
• Informing jobs
  • agent-compact-ipv4 Failed periodic-ci-openshift-release-master-nightly-4.20-e2e-agent-compact-fips
  • agent-ha-dualstack Failed periodic-ci-openshift-release-master-nightly-4.20-e2e-agent-ha-dualstack-conformance
  • agent-single-node-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-agent-single-node-ipv6-conformance
  • aws-console Failed periodic-ci-openshift-release-master-nightly-4.20-console-aws
  • aws-control-plane-machine-set-operator Succeeded periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-4.20-periodics-e2e-aws
  • aws-csi Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-aws-csi
  • aws-ovn Succeeded periodic-ci-openshift-release-master-ci-4.20-e2e-aws-ovn
  • aws-ovn-cgroupsv2 Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-aws-ovn-cgroupsv2
  • aws-ovn-fips Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-aws-ovn-fips
  • aws-ovn-single-node Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-aws-ovn-single-node
  • aws-ovn-single-node-csi Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-aws-ovn-single-node-csi
  • aws-ovn-single-node-serial Failed periodic-ci-openshift-release-master-nightly-4.20-e2e-aws-ovn-single-node-serial
  • aws-ovn-single-node-techpreview Failed periodic-ci-openshift-release-master-nightly-4.20-e2e-aws-ovn-single-node-techpreview
  • aws-ovn-single-node-techpreview-serial Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-aws-ovn-single-node-techpreview-serial
  • aws-ovn-single-node-upgrade-minor Succeeded periodic-ci-openshift-release-master-nightly-4.20-upgrade-from-stable-4.19-e2e-aws-upgrade-ovn-single-node
  • aws-ovn-upgrade-out-of-change Succeeded periodic-ci-openshift-release-master-ci-4.20-e2e-aws-ovn-upgrade-out-of-change
  • aws-upi Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-aws-ovn-upi
  • azure-control-plane-machine-set-operator Succeeded periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-4.20-periodics-e2e-azure
  • azure-csi Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-azure-csi
  • azure-ovn Succeeded periodic-ci-openshift-release-master-ci-4.20-e2e-azure-ovn
  • azure-ovn-serial Failed periodic-ci-openshift-release-master-ci-4.20-e2e-azure-ovn-serial
  • azure-ovn-techpreview Failed periodic-ci-openshift-release-master-ci-4.20-e2e-azure-ovn-techpreview
  • azure-ovn-techpreview-serial Failed periodic-ci-openshift-release-master-ci-4.20-e2e-azure-ovn-techpreview-serial
  • azure-ovn-upgrade-out-of-change Succeeded periodic-ci-openshift-release-master-ci-4.20-e2e-azure-ovn-upgrade-out-of-change
  • cnv Succeeded periodic-ci-openshift-release-master-cnv-nightly-4.20-deploy-azure-kubevirt-ovn
  • gcp-control-plane-machine-set-operator Succeeded periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-4.20-periodics-e2e-gcp
  • gcp-ovn Succeeded periodic-ci-openshift-release-master-ci-4.20-e2e-gcp-ovn
  • gcp-ovn-csi Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-gcp-ovn-csi
  • gcp-ovn-rt Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-gcp-ovn-rt
  • gcp-ovn-serial Failed periodic-ci-openshift-release-master-nightly-4.20-e2e-gcp-ovn-serial
  • gcp-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.20-e2e-gcp-ovn-techpreview
  • gcp-ovn-techpreview-serial Succeeded periodic-ci-openshift-release-master-ci-4.20-e2e-gcp-ovn-techpreview-serial
  • gcp-ovn-upgrade-4.20-minor Succeeded periodic-ci-openshift-release-master-ci-4.20-upgrade-from-stable-4.19-e2e-gcp-ovn-upgrade
  • gcp-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.20-e2e-gcp-ovn-upgrade
  • hypershift-kubevirt-ovn-conformance-4.20 Succeeded periodic-ci-openshift-hypershift-release-4.20-periodics-e2e-azure-kubevirt-ovn
  • metal-ipi-ovn-dualstack Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-metal-ipi-ovn-dualstack
  • metal-ipi-ovn-dualstack-techpreview Failed periodic-ci-openshift-release-master-nightly-4.20-e2e-metal-ipi-ovn-dualstack-techpreview
  • metal-ipi-ovn-ipv6-techpreview Failed periodic-ci-openshift-release-master-nightly-4.20-e2e-metal-ipi-ovn-ipv6-techpreview
  • metal-ipi-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-metal-ipi-ovn-serial-ipv4
  • metal-ipi-ovn-serial-virtualmedia-1of2 Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-metal-ipi-ovn-serial-virtualmedia-1of2
  • metal-ipi-ovn-serial-virtualmedia-2of2 Failed periodic-ci-openshift-release-master-nightly-4.20-e2e-metal-ipi-ovn-serial-virtualmedia-2of2
  • metal-ipi-ovn-techpreview Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-metal-ipi-ovn-techpreview
  • metal-ipi-ovn-upgrade Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-metal-ipi-ovn-upgrade
  • metal-ipi-ovn-upgrade-minor Succeeded periodic-ci-openshift-release-master-nightly-4.20-upgrade-from-stable-4.19-e2e-metal-ipi-ovn-upgrade
  • metal-ipi-serial-ipv6 Failed periodic-ci-openshift-release-master-nightly-4.20-e2e-metal-ipi-serial-ovn-ipv6
  • metal-ipi-serial-ovn-dualstack Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-metal-ipi-serial-ovn-dualstack
  • metal-ipi-upgrade-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-metal-ipi-upgrade-ovn-ipv6
  • metal-ipi-upgrade-ovn-ipv6-minor Succeeded periodic-ci-openshift-release-master-nightly-4.20-upgrade-from-stable-4.19-e2e-metal-ipi-upgrade-ovn-ipv6
  • metal-ovn-single-node-recert-cluster-rename Failed periodic-ci-openshift-release-master-nightly-4.20-metal-ovn-single-node-recert-cluster-rename
  • openshift-dedicated-aws Failed periodic-ci-openshift-osde2e-main-nightly-4.20-osd-aws
  • openshift-dedicated-gcp-conformance Failed periodic-ci-openshift-release-master-nightly-4.20-e2e-osd-ccs-gcp
  • openshift-dedicated-gcp-osde2e Failed periodic-ci-openshift-osde2e-main-nightly-4.20-osd-gcp
  • ovn-proxy Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-aws-ovn-proxy
  • ovn-single-node-live-iso Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-metal-ovn-single-node-live-iso
  • qe-perfscale Succeeded periodic-ci-openshift-eng-ocp-qe-perfscale-ci-main-aws-4.20-nightly-x86-payload-control-plane-6nodes
  • rosa-classic-sts-osde2e Failed periodic-ci-openshift-osde2e-main-nightly-4.20-rosa-classic-sts
  • rosa-hypershift-sts-conformance Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-rosa-sts-hypershift-ovn
  • telco5g Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-telco5g
  • telcov10n-metal-single-node-spoke Succeeded periodic-ci-openshift-kni-eco-ci-cd-main-nightly-4.20-telcov10n-metal-single-node-spoke
  • telcov10n-metal-single-node-spoke-kpis Failed periodic-ci-openshift-kni-eco-ci-cd-main-nightly-4.20-telcov10n-metal-single-node-spoke-kpis
  • upgrade-analysis-all Failed (2 retries) periodic-ci-openshift-release-master-nightly-4.20-upgrade-analysis-all
  • upgrade-minor-ovn Failed periodic-ci-openshift-release-master-ci-4.20-upgrade-from-stable-4.19-e2e-aws-ovn-upgrade
  • vsphere-ovn Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-vsphere-ovn
  • vsphere-ovn-csi Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-vsphere-ovn-csi
  • vsphere-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-vsphere-ovn-serial
  • vsphere-ovn-techpreview Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-vsphere-ovn-techpreview
  • vsphere-ovn-techpreview-serial Failed periodic-ci-openshift-release-master-nightly-4.20-e2e-vsphere-ovn-techpreview-serial
  • vsphere-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.20-e2e-vsphere-ovn-upgrade
  • vsphere-ovn-upgrade-minor Succeeded periodic-ci-openshift-release-master-ci-4.20-upgrade-from-stable-4.19-e2e-vsphere-ovn-upgrade
  • vsphere-ovn-upi Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-vsphere-ovn-upi
  • vsphere-ovn-upi-serial Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-vsphere-ovn-upi-serial
  • vsphere-static-ovn Succeeded periodic-ci-openshift-release-master-nightly-4.20-e2e-vsphere-static-ovn

Upgrades from:

• 4.20.0-0.nightly-2025-07-30-185737 (changes) - S S S S S S S S S
• 4.19.0-0.nightly-2025-07-30-171539 - S F S S S S S

Upgrades to:

• 4.20.0-0.nightly-2025-07-31-063120 (changes) - S S S S F S S S S

---

Loading changelog, this may take a while ...

Changes from 4.19.0-0.nightly-2025-07-30-171539

Created: 2025-07-31 00:17:56 +0000 UTC

Image Digest: sha256:6fb3587992563eaf9268b39c1ffc612295806f70b23154e2f19b8fc1adac56a1

Components

• Kubectl upgraded from 1.32.1 to 1.33.3
• Kubernetes upgraded from 1.32.6 to 1.33.2
• Kubernetes Tests upgraded from 1.32.6 to 1.33.2
• Red Hat Enterprise Linux CoreOS 9.6.20250729-1

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
AWSEFSDriverVolumeMetrics (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
BareMetalLoadBalancer (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
CloudDualStackNodeIPs (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
DisableKubeletCloudCredentialProviders (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GCPLabelsTags (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
HardwareSpeed (3 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MachineAPIProviderOpenStack (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MultiArchInstallAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MultiArchInstallGCP (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NodeDisruptionPolicy (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
PersistentIPsForVirtualization (12 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
PlatformOperators (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
PrivateHostedZoneAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
SELinuxChangePolicy (19 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereDriverConfiguration (5 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereMultiVCenters (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ValidatingAdmissionPolicy (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MachineConfigNodes (13 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
OpenShiftPodSecurityAdmission (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
PinnedImages (5 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ProcMountType (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
RouteAdvertisements (11 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
UserNamespacesPodSecurityStandards (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
UserNamespacesSupport (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
VSphereMultiDisk (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
VSphereMultiNetworks (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
SigstoreImageVerification (5 tests)	Disabled	Disabled	Disabled (Changed)	Disabled (Changed)	Disabled (Changed)	Disabled (Changed)
DualReplica (4 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
SigstoreImageVerificationPKI (0 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
AWSClusterHostedDNSInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AWSDedicatedHosts (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AWSServiceLBNetworkSecurityGroup (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureDedicatedHosts (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureMultiDisk (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
BootImageSkewEnforcement (0 tests)			Enabled (New)	Enabled (New)
ExternalSnapshotMetadata (0 tests)			Enabled (New)	Enabled (New)
GCPClusterHostedDNSInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GCPCustomAPIEndpointsInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ImageModeStatusReporting (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ImageVolume (7 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImagesAzure (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImagesvSphere (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MultiDiskSetup (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MutatingAdmissionPolicy (3 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NewOLMWebhookProviderOpenshiftServiceCA (0 tests)				Enabled (New)		Enabled (New)
NoRegistryClusterOperations (0 tests)				Enabled (New)
PreconfiguredUDNAddresses (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StoragePerformantSecurityPolicy (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
VSphereMixedNodeEnv (0 tests)			Enabled (New)	Enabled (New)

Rebuilt images without code change

• aws-kms-encryption-provider git 088dcaf7 sha256:28a1135c79167cde68a8f8f7edbfeb4ec189bcb90e0302f5ddda86feace7b271
• cluster-kube-cluster-api-operator git 3ec30377 sha256:12586146ed63ca7346bba16e0908d167a13f66c34c6c12752aca6ed0df6f5dce
• egress-router-cni git 85353bb9 sha256:a9037ffbf8a5ac7c7f644a037a62b4168a66c920e8aa200cd788a432ecb2f645
• kubevirt-cloud-controller-manager git 3f4542ec sha256:b47c7f83269c5b7b0e348f2ed6cf4ed92ce0661416af54f28605b60cbd2d755c
• libvirt-machine-controllers git a336f0b5 sha256:e88a8cc4723a7443c8a36b765eb9b64d35b23b03e9c4566e11c19d0ac4ff2c46
• multus-cni git cf0f68ec sha256:a4907c9f515db21037280850e8764849848504e92b8f64be469b8a11b524e156
• multus-cni-microshift git cf0f68ec sha256:5a64d2b1a142fc6af09a42314b596edd4134742b92fea7499f1cc0db31143423
• multus-route-override-cni git 391c1b03 sha256:3245caee757e9002a8173cb9daf2652b8726d91ecc8d62a6241d3f6aeed9039d
• network-metrics-daemon git 5ec8c6bd sha256:482d20bdce9ee9e75cfef10a6587ef12b2dc6d843a11f1c2ffa0402fe771813b
• ovirt-csi-driver git 1db726a9 sha256:13340d880cf9a0dc9ebc0f6abec8155a30bcd7d12efa9264aba53c350d69e478
• ovirt-csi-driver-operator git 76db379d sha256:1583a725178a12fee687578b68ac6cd0c70d70fc45b8098f0906a54c1db6ecd3
• service-ca-operator git 4dfa6916 sha256:7d2ea3c3777514a3a38bb68a5d67e648879acb9485af443d1deee92e7a95416a

agent-installer-api-server

• MGMT-20464: Fix NFD detection of NVIDIA GPUs #7696
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• NO-ISSUE: Update Konflux references (#1184) #1184
• NO-ISSUE: Update Konflux references (#1177) #1177
• MGMT-18518: Linter fixes & renovate config for linter and golang (#1147) #1147
• NO-ISSUE: Update Konflux references (#1160) #1160
• NO-ISSUE: Update Konflux references (#1156) #1156
• MGMT-20868: Trust also system certs (#1145) #1145
• NO-ISSUE: CVE-2025-30204 Update openshift-online/ocm-sdk-go to v0.1.467 (#1152) #1152
• NO-ISSUE: Update Konflux references (#1149) #1149
• MGMT-20858: apply-tag migration (#1143) #1143
• NO-ISSUE: Update Konflux references (#1139) #1139
• ACM-21380: Make ACM builds multi-arch (#1136) #1136
• NO-ISSUE: Update Konflux references (#1131) #1131
• NO-ISSUE: Update Konflux references (#1130) #1130
• NO-ISSUE: Add konflux service account migration (#1129) #1129
• NO-ISSUE: Modify Konflux YAMLs to ocm-2.15 (#1126) #1126
• MGMT-11622: assisted-installer controller: operator status should be logged (#1079) #1079
• Use rsync over cp to set up networking files for first boot (#1123) #1123
• Konflux build pipeline service account migration for assisted-installer-controller-acm-ds-main (#1108) #1108
• Konflux build pipeline service account migration for assisted-installer-ds-main (#1110) #1110
• Konflux build pipeline service account migration for assisted-installer-controller-ds-main (#1109) #1109
• Konflux build pipeline service account migration for assisted-installer-acm-ds-main (#1107) #1107
• MGMT-20567: Enable HTTP endpoint for MCO ignition (#1117) #1117
• NO-ISSUE: Update Konflux references (#1114) #1114
• Full changelog

agent-installer-node-agent

• MGMT-20141: collecting and uploading ironic-agent logs (#1028) #1028
• NO-ISSUE: Update Konflux references (#1064) #1064
• NO-ISSUE: Update Konflux references (#1043) #1043
• OCPBUGS-59297: Bump glog to 1.25 (#1061) #1061
• NO-ISSUE: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.24 (#1052) #1052
• NO-ISSUE: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.23 (#1038) #1038
• MGMT-20669 Fix hostname update for inventory get host request (#1007) #1007
• MGMT-20025: Route inventory deleted when route without next hop interface (#999) #999
• NO-ISSUE: Update module github.com/golangci/golangci-lint to v1.64.8 (#1037) #1037
• MGMT-18518: Linter fixes & renovate config for linter and golang (#1031) #1031
• MGMT-20868: Trust also system certs (#1029) #1029
• NO-ISSUE: CVE-2025-30204 Update openshift-online/ocm-sdk-go to v0.1.467 (#1036) #1036
• NO-ISSUE: Update Konflux references (#1033) #1033
• MGMT-20858: apply tags migration (#1027) #1027
• MGMT-18993: When installing a node configured with a bond interface comprising of (#1021) #1021
• Revert “NO ISSUE: Test (#1015)” (#1016) #1015
• NO-ISSUE: Update Konflux references (#1013) #1013
• ACM-21380: Make ACM builds multi-arch (#1017) #1017
• NO ISSUE: Test (#1015) #1015
• NO-ISSUE: Modify Konflux YAMLs to ocm-2.15 (#1009) #1009
• NO-ISSUE: Update Konflux references (#1003) #1003
• NO-ISSUE: Update Konflux references (#1002) #1002
• Konflux build pipeline service account migration for assisted-installer-agent-acm-ds-main (#992) #992
• NO-ISSUE: Update Konflux references (#984) #984
• Full changelog

agent-installer-utils

• NO-ISSUE: Move mtv-operator back to v2.8 for 4.20 #133
• OCPBUGS-59724: add back NHR and FAR operators #130
• OCPBUGS-59187: invalid default channel configuration for package “mtv… #124
• OCPBUGS-58226: OVE ISOBuilder works only if and when the script is ex… #120
• NO-ISSUE: Bump the 4.xx dependencies #119
• OCPBUGS-57679: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.20 #116
• OCPBUGS-57862: Update operators list in ISOBuilder #117
• OCPBUGS-57346: Bump iso-builder appliance dependency #114
• NO-ISSUE: Enable ‘q’ and ‘c’ hotkeys for quit and configure network #107
• OCPBUGS-57297: Update mtv-operator to version used in 4.19 catalog #111
• ART-13079: append .0 to go.mod version #105
• OCPBUGS-56934: Disable ESC key on checks page #102
• OCPBUGS-56977: OVE isobuilder fails on CentOS Stream 9 due to missing… #103
• OCPBUGS-56880: Log error from nmtui and change modal background #101
• OCPBUGS-56546: ISOBuilder- Remove default password for nodes #96
• AGENT-1195: bump appliance to 936210 #98
• OCPBUGS-56223: Fix nmtui redirection after quit #93
• OCPBUGS-56147: Add operator CRs post-install in OVE build script #94
• OCPBUGS-56210: OVE builder: Remove RHEL9 image from additionalImages #91
• OCPBUGS-56112: configure the channel for each OLM operators #89
• OCPBUGS-55769: Use internal image registry #78
• AGENT-1195: bump appliance image to 4042ba #86
• OCPBUGS-55708: Include RHEL 9 guest image to support VM launches via … #84
• Full changelog

apiserver-network-proxy

• ART-13079: append .0 to go.mod version #78
• Full changelog

aws-cloud-controller-manager

• OCPCLOUD-2928: Merge https://github.com/kubernetes/cloud-provider-aws:master (b0e098d) into main #106
• OCPBUGS-57684: Updating ose-aws-cloud-controller-manager-container image to be consistent with ART for 4.20 #110
• Full changelog

aws-cluster-api-controllers

• NO-JIRA: Update OWNERS #561
• OCPBUGS-59243, OCPBUGS-59244: UPSTREAM: 5590: Bump golog v1.2.5 #557
• OCPBUGS-53003: Remove references to master branch #551
• OCPBUGS-55947: Update manifests to remove reliance on v1beta1 admission registration #549
• Full changelog

aws-ebs-csi-driver

• STOR-2402: Rebase to upstream v1.45.0 for OCP 4.20 #289
• OCPBUGS-57707: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.20 #288
• ART-12521: update go mod dependency for konflux #285
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-57395: Remove stale conditions #406
• OCPBUGS-58254: Bump library-go #405
• STOR-2331: Add labels to subscribe SMB CSI driver operator and controller to NPs #400
• STOR-2330: Add labels to subscribe Azure disk and file CSI driver controllers to NPs #396
• OCPBUGS-57768: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.20 #399
• OCPBUGS-57739: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.20 #398
• OCPBUGS-57700: Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.20 #397
• OCPBUGS-57565: Updating csi-driver-manila-operator-container image to be consistent with ART for 4.20 #394
• STOR-2331: Add labels to subscribe AWS-EFS CSI driver operator to NPs #391
• OCPBUGS-57680: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.20 #395
• STOR-2477: create-efs-volume: add single-zone support #390
• OCPBUGS-57545: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.20 #393
• Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.20 #392
• STOR-2330: Add labels to subscribe AWS-EBS CSI driver controller to NPs #387
• NO-JIRA: create-efs-volume: print files to log as a fallback #388
• NO-JIRA: Update openstack approvers #385
• OCPBUGS-54975: Fix Cinder, Manila driver metrics #379
• OCPBUGS-56128: openstack-cinder: Set –with-topology flag for node driver also #383
• STOR-2408: Bump OLM metadata to 4.20 #382
• Full changelog

aws-karpenter-provider-aws

• OCPBUGS-57717: Updating aws-karpenter-provider-aws-container image to be consistent with ART for 4.20 #13
• AUTOSCALE-259: migrate upstream karpenter-core dependency to downstream #12
• Full changelog

aws-machine-controllers

• OCPCLOUD-2935: Bump k8s dependencies to 1.33; go 1.24 #136
• NO-JIRA: Update OWNERS #135
• OCPBUGS-56849, OCPCLOUD-2985, OCPCLOUD-2986: Bump machine-api-operator to pull in authoritativeAPI fix #134
• OCPBUGS-57724: Updating ose-machine-api-provider-aws-container image to be consistent with ART for 4.20 #133
• OCPBUGS-57581: fix: machineset annotation controller: guard on status authoritativeAPI #132
• OCPCLOUD-2717: bump openshift/api #131
• OCPBUGS-56487: fix: make machineset annotation controller respect paused condition #129
• OCPBUGS-55720: Update machine-api-operator pkg with fixes #127
• Full changelog

aws-pod-identity-webhook

• OCPBUGS-57618: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.20 #204
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPCLOUD-2927: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (bbb513c) into main #143
• OCPBUGS-57834: Updating ose-azure-cloud-controller-manager-container image to be consistent with ART for 4.20 #147
• OCPBUGS-57720: Updating ose-azure-cloud-node-manager-container image to be consistent with ART for 4.20 #145
• Full changelog

azure-cluster-api-controllers

• NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.20.2 (2a4b30d) into master #345
• NO-JIRA: Update OWNERS #344
• OCPCLOUD-2920: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.20.1 (e707afb) into master #341
• NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.19.4 (99a359a) into master #338
• OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #337
• Full changelog

azure-disk-csi-driver

• STOR-2405: Rebase to upstream v1.33.1 for OCP 4.20 #108
• OCPBUGS-57579: Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.20 #107
• NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #103
• Full changelog

azure-file-csi-driver

• STOR-2407: Rebase to upstream v1.33.3 for OCP 4.20 #99
• OCPBUGS-57884: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.20 #98
• OCPBUGS-54897: UPSTREAM: 2515: allow deleting cross-subscription snapshots #92
• Full changelog

azure-kms-encryption-provider

• ART-13079: append .0 to go.mod version #17
• Full changelog

azure-machine-controllers

• OCPCLOUD-2932: Bump 1.33 #160
• NO-JIRA: Update OWNERS #161
• OCPBUGS-56849, OCPCLOUD-2985, OCPCLOUD-2986: Bump machine-api-operator to pull in authoritativeAPI fix #159
• OCPBUGS-57671: Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.20 #158
• OCPBUGS-55372: Fix regression on ASH with armcompute/v5 #155
• OCPBUGS-56380: Fix failure when attempting to modify immutable availabilitySet #148
• OCPBUGS-55372: Update virtualmachines service to armcompute/v5 SDK #141
• Full changelog

azure-service-operator

• NO-JIRA: Update OWNERS #10
• OCPBUGS-57694: Updating ose-azure-service-operator-container image to be consistent with ART for 4.20 #9
• Full changelog

azure-workload-identity-webhook

• OCPBUGS-57692: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.20 #37
• Full changelog

baremetal-cluster-api-controllers

• OCPBUGS-58307: Merge upstream #49
• OCPBUGS-57555: Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.20 #48
• OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #44
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPEDGE-1994: bump(ocp/api): pull in updated DualReplica #9849
• SPLAT-2295: Setup additional disks via machine configs #9706
• OCPBUGS-59630: Update RHCOS 4.20 bootimage metadata to 9.6.20250701-0 #9844
• no-jira: images: bump images to go 1.24 #9850
• CORS-3916, CORS-3920: Use gcp custom endpoints in the installer #9535
• OCPBUGS-59430: Fail install config validation when base domain is invalid #9840
• OCPBUGS-59678: PowerVS Support VPC and TG ids #9818
• OCPBUGS-57732: Catch gcp destroy cases where the operation is nil #9823
• OCPBUGS-57527: Add descriptions back to the aws survey #9816
• MGMT-20992: feat: update determineTopologies function #9815
• OCPBUGS-59220: Refine check for supported SNO platforms to include IBMCloud #9836
• no-jira: Revert “Merge pull request #9736 from barbacbd/CORS-4058” #9837
• OKD-241: Use CentOS Stream 10 bootimages #9817
• CORS-4062: Migrate endpoints in pkg/types/aws/platform.go to sdk v2 #9759
• OCPBUGS-57202: pkg/asset/tls: extend ShortCertRotation certs validity to 2 hours #9820
• CORS-4058: Remove AWS SDK V1 from destroy/aws #9736
• CORS-4053: Migrate AWS SDK to v2 in cluster/aws #9762
• CORS-4054: Migrate from SDK v1 to v2 in installconfig #9760
• OCPBUGS-58352: Increase timeout on gcp wait for operation #9825
• OSASINFRA-3238: Improve API and Ingress VIPs validation #9438
• SPLAT-2294: Azure - add mpool datadisks #9810
• OCPEDGE-1740: feat: add arbiter role support to ABI #9780
• CORS-4060: Migrate AWS sdk to v2 in infrastructure #9764
• OCPBUGS-18658, OCPBUGS-45256: Unify agent install-complete with installer #7678
• OCPBUGS-57923: When AWS_PROFILE is invalid ask for credentials #9803
• OCPBUGS-57812: Updating ose-installer-container image to be consistent with ART for 4.20 #9799
• OCPBUGS-58216: allow to deploy single nodes with UPI #9763
• OCPBUGS-57856: Updating ose-installer-artifacts-container image to be consistent with ART for 4.20 #9801
• OCPBUGS-57822: Updating ose-baremetal-installer-container image to be consistent with ART for 4.20 #9800
• OCPBUGS-41879: vSphere - if regions are the same cannot dup zones #9787
• OCPBUGS-18510: Refactor removing loadbalancer in OpenStack. #9724
• OCPBUGS-57803: MCO: consider custom AMI for edge compute machine pool #9798
• OCPBUGS-57192: Checking for selected PE retrieved data and returning errors for missing values #9785
• CORS-4059: migrate gather code AWS SDK v2 #9737
• no-jira: Update Generated Files #9784
• CORS-3796: Update CVO channel to latest #9790
• CORS-3795: Updating the release image to 4.20 #9789
• CORS-4057: migrate EC2 quota checking code AWS SDK v2 #9740
• OCPBUGS-57535: vSphere - remove unit tests using nip.io #9793
• OCPBUGS-57021: Use less permissive access for /var/lib/etcd for SNO #9769
• CFE-1119: Removes instances of deprecated experimentalPropagateUserTags #8917
• OCPBUGS-56658: Prompt User for AWS Creds when none are found #9751
• CORS-3998: Remove base domain from metadata #9711
• OCPBUGS-56616: pkg/types/validation: Validate all SSH public keys #9770
• OCPBUGS-51299: Set default project and location for KMS key manifest #9767
• AGENT-997: Internal dev docs for authentication-authorization #9224
• OCPBUGS-57000: Revert “CORS-3883: Remove user-assigned identity from ARM template” #9766
• SPLAT-2045: [vsphere] promote multi-nic to default #9493
• no-jira: Bump CAPZ Version #9704
• NO-JIRA: openstack docs: Fix type of clusterOSImageProperties #9754
• OCPBUGS-54885: Validate agent diskEncryption fields #9674
• OCPBUGS-54413: Make swift containers removal not fatal for UPI. #9728
• OCPBUGS-56808: Remove configv1.GCPServiceEndpointNameTagManager references #9749
• no-jira: add unit tests for vsphere VIPS/machinenetworks population #9744
• OCPBUGS-56713: update the punctuation #9746
• OCPBUGS-54487: Power VS: Provide detailed error when entered VPCName cannot be found #9634
• CORS-4066: Remove the function to check if multiarch is enabled/allowed #9750
• OCPBUGS-6508: Update Control Plane replica validation for Single Node OpenShift #9048
• CORS-3682: log falsy conditions when CAPI infra/machine provisioning failed #9722
• MGMT-20702, OCPBUGS-56601: Avoid duplicate machine networks #9743
• OCPBUGS-55671: AWS Mutliarch feature gate is enabled by default #9729
• OCPBUGS-55672: Remove MultiArchInstallGCP featuregate #9725
• OCPBUGS-56645: Update RHCOS 4.20 bootimage metadata to 9.6.20250523-0 #9741
• OCPBUGS-56008: Remove unnecessary validation #9739
• OCPBUGS-56268: pkg/types/azure: remove SystemAssignedID docs #9717
• no-jira: Update team osasinfra #9732
• OCPBUGS-56008: don’t expect identity on ASH #9733
• OCPBUGS-56008: default Azure to create VM user-assigned identities #9718
• NO-JIRA: add the instance types which test PASS #9723
• OCPBUGS-55905: Update RHCOS 4.20 bootimage metadata to 9.6.20250513-0 #9720
• OCPBUGS-56262: Added better logging for vSphere destroy #9716
• OCPBUGS-56079: apply fixes for yaml-lint errors #9708
• OCPBUGS-53107: Set appropriate KillMode for systemd services #9562
• OCPBUGS-55683: Pre-create password files for agent installer OVE #9679
• OCPEDGE-1673: [TNF] Render secret manifests from fencing credentials block. #9635
• OCPBUGS-47719: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9693
• OCPBUGS-55817: add Lsv4 and Lasv4 series as tested #9696
• OCPBUGS-55772: Add support for Azure TDX confidential VM type #9691
• no-jira: add jcpowermac to nutanix review/approve groups #9697
• CORS-3960, OCPBUGS-55952: Remove Terraform Build Artifacts #9667
• no-jira: add PeaceRebel (Bipin) to coreos approvers & reviewers list #9687
• OCPBUGS-54502: ensure ctrplane nodes can access bootstrap MCS #9689
• OCPBUGS-54566: Apply defaults then validate confidentialCompute #9637
• OCPBUGS-55722: azure stack: switch cloud provider to standard lb #9686
• no-jira: fixes to get shellcheck to pass #9669
• OCPBUGS-53116: AWS Destroy use AWS SDK v2 #9644
• OCPEDGE-1707: Add Disable Certificate Verification API #9640
• no-jira: azure: add tested instance types for CORS-3634 and CORS-3771 #9683
• OCPBUGS-45805: Check for nil in case of proxy crash/deleted #9488
• Full changelog

baremetal-machine-controllers

• OCPBUGS-57693: Updating baremetal-machine-controller-container image to be consistent with ART for 4.20 #236
• Full changelog

baremetal-operator

• METAL-1238: Add annotation to install metal3 CRDs in hypershift hosted clusters #426
• OCPBUGS-57472: merge from upstream #424
• OCPBUGS-54634: Merge upstream #419
• OCPBUGS-57817: Updating ose-baremetal-operator-container image to be consistent with ART for 4.20 #422
• OCPBUGS-54629, OCPBUGS-54965: merge upstream #418
• OCPBUGS-55717: Merge upstream #414
• Full changelog

baremetal-runtimecfg

• NO-ISSUE: Update OWNERS #353
• OCPBUGS-57607: Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.20 #350
• MGMT-20739: Add control-plane-topology as an arg to dynkeepalived and temporarily add a dummy backend when installing TNF/TNA with assisted-installer #348
• OCPBUGS-55971: Re-add ENABLE_NODEIP_DEBUG env var #347
• OCPBUGS-57065: iptables: Switch PREROUTING REDIRECT rule to DNAT instead #349
• NO-ISSUE: Add emy as reviewer #346
• Full changelog

cli, cli-artifacts, deployer, tools

• CNTRLPLANE-1054: Update k8s dependencies to 1.33 with bumping the other dependencies #2058
• OCPBUGS-50992: Help with must-gather scheduling through suggesting preferance of nodes #2060
• Revert “WRKLDS-1713: Remove schema1” #2059
• OTA-1575: pkg/cli/admin/upgrade/recommend: “accepted … via ConditionalUpdateRisk” #2040
• CORENET-5412: adm, inspect, ns: Collect UserDefinedNetwork CRs #2011
• OCPNODE-3426: Introduce a dedicated Pod label for the purpose of identifying debug pods #2055
• NO-JIRA: Simplify TarEntryCallback #2047
• OCPBUGS-55048: Return error in case of error #2049
• OCPSTRAT-2147: Upgrade to go 1.24 and OCP 4.20 #2046
• OCPBUGS-57635: Revert “OCPBUGS-56691: Rely on overall available disk space of the mounted volume” #2042
• OCPBUGS-56691: Rely on overall available disk space of the mounted volume #2028
• WRKLDS-1713: Remove schema1 #2037
• WRKLDS-1716: oc image serve: Remove as deprecated #2033
• OTA-1539: pkg/cli/admin/upgrade/recommend: Add a –quiet option #2023
• OTA-1532: pkg/cli/admin/upgrade/recommend: New, feature-gated –accept #2017
• OCPBUGS-49897: avoid transfering permissions when copying artifacts from node-joiner pod #2031
• OCPBUGS-56598: pkg/cli/admin/mustgather: Include ClusterVersion in fallback inspect #2025
• OCPBUGS-55220: Replace colon to hypen in the filename while extracting tar on Windows #2022
• NO-JIRA: OCPBUGS-46604: Clarify behavior of since-time flag in oc adm must-gather command #2019
• WRKLDS-1103: Adding sos.conf file for default sos config into the tools image #2003
• NO-JIRA: make ‘oc status’ compatible with bare kube #1947
• Full changelog

cloud-credential-operator

• OCPBUGS-43783: openstack: Set annotation even when credentials mode is unset #873
• OCPBUGS-59402: github.com/golang/glog v1.2.5 #888
• CCO-682: Update to k8s v0.33.2 #885
• OCPBUGS-59511: add read only filesystem #884
• OCPBUGS-53454: ccoctl: only add owned tag to azure resources on create #876
• CCO-681: Add network policies with default deny #871
• OCPBUGS-57840: Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.20 #877
• CCO-649: make update-go-dependencies to also update indirects #875
• OCPBUGS-57296: Remove duplicate cluster role rules #864
• OCPBUGS-57349: Use constant for first parameter of fmt.Errorf #874
• CCO-645: Add new clock parameter when using library-go:NewKubeRecorder #872
• OCPBUGS-55777: Add missing Role, RoleBinding #860
• OCPBUGS-56607: Azure: resolve nil pointer exception when role assignment exists #861
• OCPBUGS-53429: Render: configure proxy on bootstrap static pod #855
• OCPBUGS-55777: Sync OpenStack CA Bundles from legacy location #850
• OCPBUGS-54829: golang.org/x/net v0.38.0 #851
• Full changelog

cloud-network-config-controller

• CORENET-5958: Rebase k8s to 1.33 #176
• NO-JIRA: Update OWNERS #177
• OCPBUGS-57778: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.20 #175
• Full changelog

cluster-authentication-operator

• AUTH-543, OCPBUGS-57808: (deps): Bump to Go 1.24 and k8s 1.33 #775
• CNTRLPLANE-333: Add generation logic for new uid and extra fields in the Authentication CR #763
• NO-JIRA: add logging when rendering bootstrap manifests #770
• CNTRLPLANE-939: test/e2e-oidc: poll test preconditions for a short time instead of checking once #769
• CNTRLPLANE-939: Create separate make rule for e2e oidc tests #768
• AUTH-544: Extend e2e test to leverage new functionality #737
• Full changelog

cluster-autoscaler

• AUTOSCALE-284: Rename Cluster Autoscaler component in OWNERS file #360
• OCPBUGS-57710: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.20 #357
• Full changelog

cluster-autoscaler-operator

• AUTOSCALE-125: newPodScaleUpDelay field for CA #349
• AUTOSCALE-284: Rename Cluster Autoscaler component in OWNERS file #347
• NO-JIRA: Remove tombstones yamls #348
• OCPBUGS-57621: Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.20 #346
• OCPBUGS-42875: mitigate operator Degraded status flapping #344
• OCPBUGS-57041: update cluster provider type early #343
• NO-JIRA: Add autoscale members to OWNERS file #345
• Full changelog

cluster-baremetal-operator

• METAL-1238: Enable CBO to run on hosted clusters #494
• OCPBUGS-57419: Do not log “new CO status” unnecessarily #481
• Revert “METAL-1404: Add annotation to enable CBO install via CVO in Hosted Clusters” #491
• OCPBUGS-57591: Golang 1.24 and openshift 4.20 #488
• METAL-1404: Add annotation to enable CBO install via CVO in Hosted Clusters #464
• METAL-1437: Add (unsupported) overrides for the ironic agent image #483
• OCPBUGS-56723: Treat ResourceNotFound as non-fatal #482
• NO-ISSUE: Remove inactive OWNERS #480
• OCPBUGS-54244: no default for provisioningIP when provisioningInterface is set #476
• OCPBUGS-54965: Inform BMO when provisioning network is disabled #473
• NO-ISSUE: Makefile: don’t run all linters when running unit tests #475
• NO-ISSUE: Silence a bogus error with newer golangci-lint #477
• OCPBUGS-52483: Allow provisioningIP when network disabled #466
• Full changelog

cluster-bootstrap

• OCPBUGS-57533: Updating ose-cluster-bootstrap-container image to be consistent with ART for 4.20 #117
• Full changelog

cluster-capi-controllers

• NO-JIRA: Update OWNERS #244
• NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api:v1.10.2 (5255664) into master #240
• OCPCLOUD-2917: Merge https://github.com/kubernetes-sigs/cluster-api:v1.10.1 (647a1b7) into master #238
• OCPBUGS-55947: Regenerate manifests to drop v1beta1 admissionregistration usage #236
• Full changelog

cluster-capi-operator

• NO-JIRA: Get openshift/api directory from packages #339
• OCPCLOUD-2979: ingress network policy for metrics #325
• OCPCLOUD-2992: migration e2e for creating machinesets #330
• NO-JIRA: Update OWNERS #335
• OCPBUGS-56805, OCPBUGS-58880: fix: clusteroperator: do not update status.relatedobjects if only order changed #331
• NO-JIRA: migration controllers: add comment for authority propagation logic #327
• OCPCLOUD-2992: add machineset migration e2e utils #323
• NO-JIRA: Remove manifest for validating-webhook-configuration #324
• OCPBUGS-57563: Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.20 #319
• OCPBUGS-56010: Fix compareMAPIMachineSets function #315
• OCPBUGS-54705: mapi2capi: Create new machine template when changing MAPI providerSpec #295
• OCPBUGS-57013: Fix reset sync status in migration controllers #313
• NO-JIRA: Assorted cleanups #312
• OCPBUGS-57040: Fix failure to retry unpause #309
• OCPBUGS-56604: fix: ensure CAPI machineset is created not paused when authoritative #299
• OCPBUGS-56709: fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller #301
• OCPBUGS-56487: fix: watch CAPI resources in the migration controllers #300
• OCPCLOUD-2943: MachineSet deletion logic #286
• OCPCLOUD-2893: Add related objects to must-gather config #267
• OCPBUGS-55985: fix: machine: propagate non-authoritative deletion #290
• OCPBUGS-55947: Should not use v1beta1 of the AdmissionRegistration API group #289
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-53300: Adds service for cloud-controller-manager #399
• OCPCLOUD-2940: Update dependencies for Kubernetes 1.33 #396
• OCPBUGS-53300: Update service selector to match deployment label #398
• NO-JIRA: Update OWNERS #397
• OCPBUGS-57613: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.20 #392
• OCPCLOUD-2978: add deny all network policy #395
• NO-JIRA: Remove old deployment which is deleted #393
• OCPBUGS-56508: Fix config-sync-controller logging #389
• Full changelog

cluster-config-api

• SPLAT-2346: Moving VSphereMultiDisk FeatureGate to GA #2428
• features: add installer replacement feature gates #2423
• Remove “techpreview” filter on verify job #2422
• Update KAL to latest #2420
• OCPNODE-3006: Add clusterimgepolicy/imagepolicy to payload #2384
• AGENT-1262: add NoRegistryClusterOperations feature gate #2417
• OCPBUGS-55661: Remove HardwareSpeed featuregate #2416
• OCPNODE-3121: Make FeatureGateImageVolume TechPreview #2403
• OCPEDGE-1875: feat: promote tnf from devpreview to techpreview #2413
• OCPBUGS-55668: ipam, virt: remove the PersistentIPsForVirt FG #2309
• OCPBUGS-59574: Revert #2398 “Revert \“Revert \“CNTRLPLANE-72: remove RoleBindingRestriction CRD from payload\”\“” #2414
• STOR-2462: Add ExternalSnapshotMetadata FeatureGate #2381
• Revert “Revert “CNTRLPLANE-72: remove RoleBindingRestriction CRD from payload”” #2398
• CONSOLE-4665: Disable serving of old v1alpha1 CRD version #2411
• Fix kubebuilder tools/envtest index for v1.33.2 (add v prefix) #2410
• makefile: bump-publish-kubebuilder-tools to 1.33.2 #2408
• envtest-releases: add 1.33.2 to index #2407
• Monitoring API: Add AlertmanagerMainConfig #2148
• OAPE-232/OCPBUGS-55653: Remove GCPLabelsTags featuregate #2372
• CNTRLPLANE-371: Update to Kubernetes v1.33.2 #2252
• Disable schema checker overlap with KAL #2397
• OCPBUGS-55674: remove AWSEFSDriverVolumeMetrics featuregate #2395
• Register v1 (cluster)imagepolicy #2394
• Update KAL and GolangCI-Lint to v2 #2321
• Enable MutatingAdmissionPolicy in Dev/TechPreview #2385
• SPLAT-2299: FeatureGate - MultiDiskSetup #2388
• Revert “CNTRLPLANE-72: remove RoleBindingRestriction CRD from payload” #2389
• OCPBUGS-55465: Drop on-by-default ValidatingAdmissionPolicy featuregate #2306
• STOR-2370: Add featuregates for storage performant security policies #2382
• CNTRLPLANE-72: remove RoleBindingRestriction CRD from payload #2138
• OCPBUGS-34194: Modify api description for join, transit and masquerade subnets #2320
• OCPBUGS-57828: Updating ose-cluster-config-api-container image to be consistent with ART for 4.20 #2375
• NO-JIRA: Fix typos in the doc about clusterversion.spec.channel #2371
• MCO-1524: Promote PinnedImageSet feature gate to default feature set #2269
• MCO-1064: Promote MachineConfigNode feature gate to default #2288
• Adding feature gate for image mode status reporting #2373
• OCPNODE-3008: Add v1 type ClusterImagePolicy and ImagePolicy #2310
• OCPBUGS-55663: Remove NodeDisruptionPolicy featuregate #2359
• Register MutatingAdmissionPolicy in feature gates #2349
• WRKLDS-1676: OCM config: Remove obsolete fields #2364
• OCPBUGS-55652: Remove PrivateHostedZoneAWS feature gate #2338
• CNTRLPLANE-337: authentication: oidc: make username claim mapping required #2352
• NO-ISSUE: Remove redundant image stream #2358
• Promote RouteAdvertisements feature gate to default feature set #2225
• MCO-1671: Add feature gates for azure boot image updates & skew management #2353
• SPLAT-2137: FG for Service Type LB NLB with Security Group #2354
• OCPBUGS-56725: Add max length validation for apiserver namedCertificates #2342
• Remove DataGather state print column #2350
• OCPBUGS-44462: Remove PlatformOperators from feature list #2333
• CORENET-6004: Add PreconfiguredUDNAddresses featuregate #2348
• OCPCLOUD-2717: Deprecate DeleteOnTermination for EBS volumes #2341
• SPLAT-2175: introduce AzureDedicatedHosts feature gate #2293
• OCPBUGS-52556: Revert v1alpha1 removal #2343
• SPLAT-2044: [vsphere] promote multi-nic to default #2204
• OCPBUGS-55671: Remove MultiArchInstallAWS featuregate #2336
• CNTRLPLANE-371: Remove SELinuxChangePolicy gate #2334
• OCPNODE-3262: promote featuregate SigstoreImageVerificationPKI to techpreview #2328
• OCPBUGS-55672: Remove MultiArchInstallGCP featuregate #2332
• CORS-4041: Remove the TagManager from the GCP Custom Endpoints #2323
• SPLAT-2213: Added vSphere mixed node env feature gate #2326
• OCPBUGS-56382: Fix validation for Resource field in MOSB API #2327
• OPRUN-3860: Add NewOLMWebhookProviderOpenshiftServiceCA feature gate #2324
• OCPBUGS-55664: remove VSphereDriverConfiguration feature gate #2319
• CNTRLPLANE-367: Update Authentication API GoDoc for OIDC-related fields #2314
• OCPNODE-2557, OCPNODE-3225: features: set user namespace features on by default #2305
• OCPBUGS-55662: Drop BareMetalLoadBalancer feature gate #2312
• CCXDEV-14850: align insights DataGather with config #2248
• Remove upstream on-by-default cloud feature gates (CloudDualStackNodeIPs, DisableKubeletCloudCredentialProviders) #2249
• SPLAT-2168: introduce AWSDedicatedHosts feature gate #2291
• OCPBUGS-55666: Remove MachineAPIProviderOpenStack feature gate #2307
• MCO-1657: FeatureGate for Bootimage updates for the vSphere platform #2301
• SPLAT-2072: Removed VSphereMultiVCenters feature gate #2231
• SPLAT-2158: Azure Multi Disk feature gate #2289
• README: Add criteria for featuregate test result windows and flake handling #2302
• Full changelog

cluster-config-operator

• OCPEDGE-1876: bump(o/api,k8s/api,go-version) #445
• OCPBUGS-57187: featuregates: always complete featuregates when feature set is CustomNoUpgrade #440
• Full changelog

cluster-control-plane-machine-set-operator

• OCPCLOUD-2937: Bump k8s dependencies to 1.33; go 1.24 #360
• NO-JIRA: Update OWNERS #361
• Full changelog

cluster-csi-snapshot-controller-operator

• STOR-2394: Bump all deps for 4.20 #240
• STOR-2340: Subscribe to Network Policies for csi-snapshot-controller + operator #238
• OCPBUGS-57655: Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.20 #237
• Full changelog

cluster-dns-operator

• OCPBUGS-57704: Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.20 #438
• Full changelog

cluster-etcd-operator

• ETCD-590: start to refactor the probe injection #1456
• OCPBUGS-57859: Updating cluster-etcd-operator-container image to be consistent with ART for 4.20 #1452
• NO-JIRA: Migrate bindata to go:embed #1445
• OCPBUGS-44570: add missing informer syncs #1449
• NO-JIRA: Update owners file #1451
• OCPBUGS-50488: add missing ports to svc and pod spec #1444
• OCPBUGS-55404: fix ordering on bootstrap IP selection #1443
• OCPBUGS-58294: Use 1 pod manifest only, set fields dynamically, deduplicate job creation #1439
• OCPBUGS-57372: Wait for 2 cp nodes before starting TNF jobs #1431
• CNTRLPLANE-806: Explicitly use podman-etcd from two-node-ha extension #1438
• CNTRLPLANE-805: Add TNF pacemaker fencing setup #1421
• OCPBUGS-57779: feat: update logic to list arbiter nodes #1435
• OCPEDGE-1920: Comply with OCP pod standards for TNF jobs #1430
• NO-JIRA: remove grafana-dashboard-etcd #1429
• OCPBUGS-56199: increase tnf job timeouts #1426
• CNTRLPLANE-340: Issue shorter certs when ShortCertRotation feature gate is set #1315
• OCPBUGS-55757: adjust alerts according to platform #1422
• OCPBUGS-55111: Remove ‘meta’ keyword from pcs resource create command #1417
• Full changelog

cluster-image-registry-operator

• NO-JIRA: Set ownership annotation for image-registry-ca CA bundle #1225
• OCPBUGS-57577: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.20 #1226
• OCPSTRAT-1076: Add readonlyRootFilesystem #1215
• OCPBUGS-56606: bump github.com/golang-jwt/jwt #1212
• OCPBUGS-56361: bump golang.org/x/oauth2 to the latest version #1206
• Full changelog

cluster-ingress-operator

• OCPBUGS-59839: desiredIstio: Delete trustBundleName #1243
• NE-2022: Bump to OSSM 3.0.1 and Istio 1.24.4 #1227
• OCPBUGS-58358: desiredIstio: Do not enable a default PDB #1240
• OCPBUGS-57728: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.20 #1236
• OCPBUGS-55652: Removed PrivateHostedZoneAWS from component #1230
• OCPBUGS-54745: status: Conditionally add CRDs to relatedObjects #1217
• OCPBUGS-55317: Check capabilities before watching OLM resource #1232
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-50489: Add missing service ports to apiserver service #1875
• OCPBUGS-58232: Don’t wait for 2 etcd members when the cluster is TNF installed with assisted-installer #1866
• OCPBUGS-43521: Set goaway chance to 0.001 #1863
• NO-JIRA: Update the deprecated API usage alerts for 1.33. #1871
• Revert “OCPBUGS-56551: certregenerationcontroller: start configInformers again” #1869
• CNTRLPLANE-371: Update to Kubernetes v1.33.2 #1849
• OCPBUGS-57811: Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.20 #1865
• OCPBUGS-58158: Enable watch termination grace period #1862
• NO-JIRA: Enable watch termination grace period #1846
• OCPBUGS-56551: certregenerationcontroller: start configInformers again #1853
• OCPBUGS-55465: Stop serving admissionregistration.k8s.io/v1beta1. #1836
• CNTRLPLANE-79: Disable oauth admission plugins #1810
• NO-JIRA: remove unused yaml #1856
• NO-JIRA: Enable MutatingAdmissionPolicy group version #1854
• NO-JIRA: Use new PSS annotation #1833
• OCPBUGS-55013: SCC: add hostmount-anyuid-v2 #1834
• OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects - reapply #1831
• OCPBUGS-52466: bump library-go to bring in updated audit policies #1837
• OCPBUGS-55274: Change validity / refresh for some certs which should not be affected by dev cycle rotation change #1832
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-53290: Missing endpoint slices for open ports the operator uses #848
• RFE-4154: Fix readonly filesystem error when kcm trying to mkdir on /etc/kubern… #847
• CNTRLPLANE-371: Update Kubernetes to v1.33.2 #840
• Revert “Revert “CNTRLPLANE-343: certrotationcontroller: use minutes instead of days when FeatureShortCertRotation is enabled”” #843
• Revert “CNTRLPLANE-343: certrotationcontroller: use minutes instead of days when FeatureShortCertRotation is enabled” #842
• CNTRLPLANE-343: certrotationcontroller: use minutes instead of days when FeatureShortCertRotation is enabled #817
• WRKLDS-954: pkg/operator: Remove expired conditional resources #839
• Full changelog

cluster-kube-scheduler-operator

• OCPSTRAT-2001: Add readOnlyRootFilesystem to kube-scheduler-operator #568
• OCPSTRAT-2001: Add readonlyRootFilesystem #564
• CNTRLPLANE-371: Update to Kubernetes v1.33.2 #562
• OCPBUGS-57855: Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART for 4.20 #566
• OCPNODE-3192: enable the scheduler plugin if the feature gate DynamicResourceAllocation is enabled #561
• Full changelog

cluster-kube-storage-version-migrator-operator

• OCPBUGS-57807: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.20 #124
• Full changelog

cluster-machine-approver

• NO-JIRA: Fix some lints and nits #273
• OCPCLOUD-2939: Bump k8s 1.33 #272
• NO-JIRA: Update OWNERS #274
• OCPBUGS-57610: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.20 #271
• OCPBUGS-19856: Improve log message when searching for node by InternalDNS #269
• No-Jira: ignore test file csr_check_test.go #270
• Full changelog

cluster-monitoring-operator

• OCPBUGS-58475: Enforce secure TLS settings in CMO #2618
• OCPBUGS-57215: operator: increase wait time till degraded to max 4 times 5m #2624
• MON-4255: Bump prometheus-operator dependencies to v0.84.0 #2619
• MON-4255: Bump prometheus-operator to v0.83 #2614
• OCPBUGS-57561: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.20 #2611
• MON-4288: set up openshift-tests-extension and add a sanity test #2616
• MON-4282: Multi-tenant support for KSM’s CRS #2595
• NO-JIRA: [bot] Synchronize versions of the downstream components #2615
• OCPBUGS-58427: pkg/manifests: don’t reset annotations for metrics client CA #2612
• OCPBUGS-57184: chore(alerts): adjust PrometheusPossibleNarrowSelectors description and add link to to-be-added runbook #2608
• NO-JIRA: [bot] Synchronize versions of the downstream components #2607
• NO-JIRA: [bot] Synchronize versions of the downstream components #2606
• OCPBUGS-18282: provide more context in externalLabels unmarshalling error #2605
• NO-JIRA: metrics-client-ca: set owner annotation #2602
• OCPBUGS-18282: prevent use of reserved labels keys in Prometheus externalLabels #2604
• MON-4242: chore(metrics-server): allow setting log verbosity #2599
• NO-JIRA: [bot] Synchronize versions of the downstream components #2603
• OCPBUGS-33691: mixin: longer rate interval for Alertmanager[Cluster]FailedToSendAlerts #2598
• NO-JIRA: [bot] Synchronize versions of the downstream components #2600
• MON-4200: disable –auto-gomemlimit for Prometheus on SNO until we can ensure it won’t result in excessive CPU usage #2549
• Full changelog

cluster-network-operator

• CORENET-6127: ovn-k: Enable OVN-K feature when PreconfiguredUDNAddresses is enabled #2734
• OCPBUGS-59134, OCPBUGS-59135: Annotate whereabouts-controller #2749
• NO-JIRA: deprecate exportloopref #2750
• CORENET-5881: Reconfigure NBDB for route advertisements in LGW #2735
• OCPBUGS-58448: fg, virt: remove FeatureGatePersistentIPsForVirtualization #2737
• OCPBUGS-58155: CNO must skip watching IngressController if Ingress capability is disabled in HyperShift #2731
• OCPBUGS-57643: Add release version annotation to whereabouts-controller/whereabouts-token-watcher #2727
• OCPBUGS-55763: stop frr from listening for incoming connection in the bgp daemon #2708
• CNF-18237: Align frrk8s manifests to upstream #2730
• CNF-18236: FRRK8s webhook: webhook liveness / readiness from metrics to webhook #2716
• NO-JIRA: remove unused clusterrolebinding default-account-cluster-network-operator #2725
• OCPBUGS-56086: Validate NAD name and spec only in multus admission controller #2718
• CORENET-5704: Consume latest vendoring from ocp api repo #2720
• OCPBUGS-56878: whereabouts-config is a reserved name for user interaction. #2707
• CNTRLPLANE-341: Issue shorter certificates when ShortRotation featuregate is enabled #2556
• OCPBUGS-56051: Configure the terminationMessagePolicy for all containers deployed in HyperShift #2709
• OCPBUGS-51093, OCPBUGS-55157: Pass ‘–gateway-mode’ flag for ovnkube-cluster-manager #2696
• OCPBUGS-55488: Remove environment variables related to ARO HCP MIv2 for CNO #2686
• Full changelog

cluster-node-tuning-operator

• Sync the upstream and downstream Containerfiles (#1368) #1368
• machineconfig: log kernelType (#1366) #1366
• feat: add arbiter role to default pinning gen (#1364) #1364
• OCPBUGS-59354: E2E add test to verify guaranteed pod is running after kubelet restart (#1361) #1361
• Bump to golangci-lint 2.x (#1360) #1360
• NO-JIRA: performance profile: internal cleanup (#1359) #1359
• Add support for running binaries from NVIDIA driver directory (#1353) #1353
• NO-JIRA: Remove dependency on k8s.io/kubernetes (#1356) #1356
• Run update-codegen.sh (#1352) #1352
• e2e: replace Getenv with LookEnv (#1351) #1351
• OCPBUGS-52853: Do not add iommu.passthrough to ARM by default (#1354) #1354
• gather-sysinfo: update debug-tools to v0.2.3 (#1347) #1347
• Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.20 (#1338) #1338
• Bump golangci-lint to 1.64.8 (#1339) #1339
• e2e: llc: initial tests for cpu allocation (#1308) #1308
• Set minimum TLS 1.3 for metrics and webhook servers (#1325) #1325
• Change /master to /control-plane node label (#1327) #1327
• NO-JIRA: E2E: Additional Functional tests for align cpus by UncoreCache Feature (#1324) #1324
• Update performance_profile.md (#1329) #1329
• fix: stop referencing non existing git references in go.mod (#1332) #1332
• e2e: arm: fix ginkgo doesn’t recognize kernelPageSize suite (#1330) #1330
• E2E: use 4 cpus for reserved from available cpus (#1326) #1326
• Add NetworkPolicy k8s resources (#1323) #1323
• OCPBUGS-55989: E2E: Functional tests for align cpus by UncoreCache Feature (#1302) #1302
• NO-JIRA:e2e:daemonset: pod phase and events (#1289) #1289
• Full changelog

cluster-olm-operator

• OPRUN-4034: Handle CustomNoUpgrade better #134
• OCPBUGS-58992: Bump helm to v3.18.4 #132
• OPRUN-4026: Add support for all NoUpgrades #131
• OCPSTRAT-2075: add missing tmp mounting to fix write to read only fil… #129
• OPRUN-3999: Validate feature-gate arguments #128
• OPRUN-3970: Add support for experimental manifests #127
• OCPBUGS-57601: Updating ose-cluster-olm-operator-container image to be consistent with ART for 4.20 #124
• OCPSTRAT-1976: Add readonlyRootFilesystem #120
• OCPBUGS-56903: fix: report correct next version when incompatible operators are installed #123
• OCPBUGS-56813: fix olm.maxOpenShiftVersion float parsing #121
• OPRUN-3904: Add static network policies to govern namespace and controller pod #118
• OPRUN-3861: Webhook support feature flag #119
• OPRUN-3883: Add network-policy support #117
• Full changelog

cluster-openshift-apiserver-operator

• : NO-JIRA: Bump to Go 1.24 and k8s 1.33 #620
• NO-JIRA: operator: annotate image-import-ca configmap with owner #616
• Full changelog

cluster-openshift-controller-manager-operator

• CNTRLPLANE-926: Add readonlyRootFilesystem #392
• CNTRLPLANE-1054: Update k8s deps to 1.33.2 #393
• WRKLDS-844: sync: Use more descriptive variable name #390
• WRKLDS-844: pkg/operator: Split OCM/RCM status conditions #387
• WRKLDS-954: pkg/operator: Remove expired conditional resources #388
• WRKLDS-1676: ocm deployment: Add POD_NAME #386
• WRKLDS-1676: controller manager config: Set leaderElection.name #385
• Full changelog

cluster-policy-controller

• CNTRLPLANE-1054: rebase k8s (1.33.2), openshift (4.20) and other underlying dependencies #164
• Full changelog

cluster-samples-operator

• OCPBUGS-59324: Periodic sync of supported OCP samples #631
• OCPBUGS-57745: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.20 #643
• NO-JIRA: cleanup hello-openshift yaml #642
• Full changelog

cluster-storage-operator

• STOR-2394: Bump all deps for 4.20 #598
• STOR-2330: Add labels to subscribe vSphere CSI driver operator to NPs #597
• STOR-2340: Add Network Policies and subscriptions for CSO and VPD (redux) #596
• OCPBUGS-58368: Revert #589 “STOR-2340: Add Network Policies and subscriptions for CSO and VPD” #595
• OCPBUGS-44128: OCPBUGS-44127: Sync azure permissions #582
• STOR-2340: Add Network Policies and subscriptions for CSO and VPD #589
• STOR-2330: Add labels to subscribe Azure disk and file CSI driver operators to NPs #587
• STOR-2330: Add labels to subscribe GCP PD CSI driver operator to NPs #591
• Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.20 #588
• STOR-2330: Add labels to subscribe AWS-EBS CSI driver operator to NPs #584
• STOR-2330: Network Policies for CSI drivers and operators #579
• OSASINFRA-3675: Add credentialRequest for manila namespace #573
• OCPBUGS-56201: improve message template for PodStartupStorageOperationsFailing alert #583
• NO-JIRA: Update openstack approvers #581
• OCPBUGS-54491: sync Azure File permissions with upstream docs #2 #578
• Full changelog

cluster-update-keys

• NO-ISSUE: OWNERS: Add Mrunal, remove folks who are no longer active in OpenShift-core #77
• OCPNODE-3006: Drop openshift policy to DevPreviewNoUpgrade for ClusterImagePolicy to v1 #76
• OCPBUGS-57820: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.20 #73
• Full changelog

cluster-version-operator

• NO-JIRA: Generate junitfile for unit tests #1217
• OTA-1578: Disable ResourceReconciliationIssues condition #1216
• OTA-1521: Add a default-deny network policy for CVO namespace #1198
• OCPBUGS-57756: Updating cluster-version-operator-container image to be consistent with ART for 4.20 #1204
• OTA-1531: [⁶⁄₆] cvo: use early gate checker to avoid delayed initialization #1196
• NO-JIRA: test: remove unnecessary integration tests layers #1202
• NO-JIRA: tests: fix make integration-test target #1203
• NO-JIRA: Add myself as an approver #1201
• OCPBUGS-56114: Fix ImplicitlyEnabledCapabilities #1191
• OTA-1531: [5/x] cvo: read cluster FeatureGate early #1190
• OTA-1403: Update and Verify Test Metadata Using Makefile #1179
• OTA-1531: [4/x] cvo: extract config informer creation #1189
• OTA-1010: Add a new version of GetImplicitlyEnabledCapabilities #1133
• OTA-1531: [3/x] cvo: read version from release metadata on startup #1188
• OTA-1531: [2/x] cvo: refactor LoadUpdate #1185
• OTA-1531: [1/x] cvo: refactor option processing #1184
• OTA-209: Add sync logic to the CVO configuration controller #1170
• OCPBUGS-53062: add the ports Field into the CVO’s container spec #1180
• NO-JIRA: Makefile: verify -> verify-yaml #1183
• Full changelog

configmap-reloader

• OCPBUGS-57846: Updating configmap-reload-container image to be consistent with ART for 4.20 #72
• MON-4257: Bump configmap-reload to v0.15.0 #71
• ART-13079: append .0 to go.mod version #67
• Full changelog

console

• OCPBUGS-59725: Refactor RegistryPollIntervalModal #15337
• OCPBUGS-55946: Move ACM perspective back to perspective selector. #15310
• CONSOLE-4704: Update ThemeContext type #15339
• OCPBUGS-57481: fix: Fix negative CPU util graphs #15332
• OCPBUGS-58469: Fix hot reload in GlobalConfigPage component #15287
• OCPBUGS-59196: fix runtime exception in CreateYAMLInner #15341
• CONSOLE-4699: Update dynamic demo plugin e2e tests #15319
• CONSOLE-4608: Drop createModalLauncher from helm-plugin and use useOverlay hook instead #15303
• ODC-7802: Remove custom Drawer and Tabs from web-terminal #15077
• ODC-7620: Use PF isLoading in CreateProjectModal #15318
• OCPBUGS-57466: Default name is comprised of ‘-’ on ‘Add to favorites’ page when language is Korean/Japanese/Chinese. #15314
• OCPBUGS-56248: Improve Console plugin API doc gen script #15167
• OCPBUGS-56466: The warning msg ‘CPU and memory resource requests must be set’ still shows up after deployment has resource requests set. #15117
• CONSOLE-4669: Refactor Alertmanager forms to only use PatternFly comp… #15275
• OCPBUGS-59771: Move alertmanager settings route #15325
• NO-JIRA: Update README.md by adding removing co-disabled styling #15323
• CONSOLE-4700: Address tech debt in TogglePlay and ButtonBar #15308
• OCPBUGS-57654: Updating openshift-enterprise-console-container image to be consistent with ART for 4.20 #15186
• ODC-7803: Add custom icons in import flow #15242
• OCPBUGS-59231: PipelinesList: increase width of ns column #15311
• OCPBUGS-59550: add data-test attrs to console plugins table #15302
• OCPBUGS-58858: Update model flags when plugins load #15296
• CONSOLE-4633, CONSOLE-4672, CONSOLE-4682: Refactor JobActionFactory, ReplicationControllerFactory and remove global menuActions for job.tsx #15279
• CONSOLE-4491: Deanonymize Developer Sandbox users #15201
• CONSOLE-4499, CONSOLE-4654, CONSOLE-4656, CONSOLE-4657: Implement some CodeEditor RFEs #15254
• CONSOLE-4623: Add support for optional Console plugin dependencies #15183
• CONSOLE-4634: Refactor DeploymentActionFactory to hook form. #15209
• OCPBUGS-59195: Clicking on container dropdown button has no response when pod log is in fullscreen. #15278
• CONSOLE-4663: Replace Bootstrap .has-feedback with custom rule #15264
• CONSOLE-4659: Replace Bootstrap Responsive utilities with PatternFly … #15261
• ODC-7807: Migrate enzyme test to react testing library for helm-plugin #15244
• OCPBUGS-59277: update guided tour selector for Software catalog #15277
• CONSOLE-4655: Replace Bootstrap List group with PatternFly List #15259
• CONSOLE-4653: Allow custom icons in template annotation #15248
• ODC-6775: Jest 21 -> 22 #14939
• OCPBUGS-32157: Always show edit-yaml header if defined #15274
• OCPBUGS-55340: Not able to launch terminal window from OCP web console due to console plugin conflicts #15255
• CONSOLE-4578: OpenShift ConsoleCONSOLE-4578 Move “Installed Operators” from “Operators” to “Ecosystem” nav section #15187
• OCPBUGS-57715: Fix Made - Clicking Cancel on YAML Creation now redirects to Secrets Page #15253
• OCPBUGS-59163: Show possible enum values in ExploreTypeSidebar #15265
• CONSOLE-4662: remove screenfull #15262
• CONSOLE-4658: Replace Bootstrap Small text with PatternFly Extra Smal… #15256
• CONSOLE-4619: Fix ExternalLinkWithCopy visual regression #15266
• ODC-7794: Add event-source, channel, and broker form page automation in CI #15226
• ODC-7779: Tests to enable the developer perspective through UI #15179
• CONSOLE-4619: _blank removal followup #15251
• OCPBUGS-43792: Make assumption about allowedDynamicPluginNames array order explicit #15249
• OCPBUGS-52835: change ‘/metrics/usage’ endpoint to ‘/api/metrics/usage’ #15252
• CONSOLE-4642: replace Bootstrap radio with PatternFly equivalent #15217
• OCPBUGS-56803: Deleted objects remain in favorites and cause 404 errors #15193
• OCPBUGS-58334: hide Namespace column in MachineSets list when project… #15247
• OCPBUGS-54237: click resource dropdown button on Operand form page will always put use to page top when scrolling #14941
• OCPBUGS-58273: Add the Origin header to the HeaderBlacklist in the co… #15233
• OCPBUGS-58258: fix bug where / in console.tab/horizontalNav href breaks navigation #15231
• OCPBUGS-58208: fix runtime error when editing HPA using the form #15225
• CONSOLE-4640: replace Bootstrap checkbox with PatternFly equivalent #15207
• OCPBUGS-57088: Update dynamic-plugin-demo/oc-manifest.yaml to use fresh image #15128
• CONSOLE-4502, OCPBUGS-52835, OCPBUGS-55514: Implement sessions in openshift authenticator #15037
• OCPBUGS-58311: test fix for web-terminal by changing start terminal implemntation #15232
• OCPBUGS-55815: Breadcrumb Link fixed in Explore-type-sidebar.tsx #15219
• OCPBUGS-57954: Remove deprecated link for Red Hat Marketplace webpage #15199
• CONSOLE-4596: Migrate enzyme tests/components/cluster-settings unit tests to RTL #15143
• NO-JIRA: Remove locale files and service-binding-plugin #15208
• OCPBUGS-58166: only show the correlation masthead in admin #15210
• OCPBUGS-58050: fix missing form styles in Create PVC page + Clone PVC… #15205
• OCPBUGS-57898: Incorrect i18n translations in 4.19 batch #15194
• OCPBUGS-56699: ContainerResource metric data for HPAs isn’t visible i… #15198
• NO-JIRA: Update Console plugin SDK changelogs #15211
• WTO-324: Fix for WTO regular user tests #15048
• CONSOLE-4595: Remove network-policies component in console-app #15125
• OCPBUGS-56629: Update QuickStartEmptyState link #15190
• OCPBUGS-57746: customize actions in default resource page #15185
• OCPBUGS-49709: Add the ability to launch multiple modals with useModal hook #15139
• CONSOLE-4577: Move “Software Catalog” nav item from “Home” to “Ecosystem” nav section #15169
• OCPBUGS-57503: Default to unordered plugins list #15182
• CONSOLE-4619: Create ExternalLinkButton component and use it #15177
• CONSOLE-4550: Remove Bootstrap Grid from console #15155
• OCPBUGS-55828: Edit paralelism modal has unresponsive decrease button in the number spinner #15126
• OCPBUGS-49709: Fix webpack build warnings for dynamic-core-api exports #15149
• OCPBUGS-56629: use EmptyState for quick starts empty state #15081
• OCPBUGS-56050: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console. #15170
• OCPBUGS-57174: Percent sign on creating HPA page doesn’t align in the center of outer box. #15162
• OCPBUGS-56174: ConfigMap form stuck after making input errors. #15166
• OCPBUGS-56845: OpenShift console PVC clone cannot use B as the unit #15163
• OCPBUGS-57205: i18n upload/download routine task - Sprint 270 #15158
• OCPBUGS-56186: Add Select project field in import forms #15150
• OCPBUGS-57074: Incorrect property name requests in ContainerSpec.resources type #15148
• OCPBUGS-57087: Update Dockerfile.dev to use latest build images #15129
• OCPBUGS-43792: Follow-on fix. Add new “plugins-order” flag to bridge cli args #14981
• OCPBUGS-56985: Getting “Oh no something went wrong” error message in web console. #15147
• CONSOLE-4550: Remove usage of Bootstrap grid in Console #15119
• OCPBUGS-56999: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15122
• OCPBUGS-57147: Disable tests A-02-TC02 and A-02-TC05 #15146
• OCPBUGS-56804: clarify verbiage for Lightspeed hide button #15144
• OCPBUGS-56050: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console #15121
• OCPBUGS-56044: fix VirtualizedTable runtime error if sortColumn is no… #15112
• OCPBUGS-56986: Fix runtime error when navigating alert actions #15118
• OCPBUGS-49709: Add useOverlay hook to dynamic plugin SDK and deprecate useModal hook #14707
• OCPBUGS-56179: Add isAllNamespacesKey function to dynamic plugin API #15066
• OCPBUGS-56707: fix bug where Roles list was displaying invalid data f… #15115
• OCPBUGS-56917, OCPBUGS-56922: Remove ExternalLink and Timestamp reexport #15110
• OCPBUGS-56889: Add flags in console static plugin for all the components of this epic #15101
• OCPBUGS-56700: UI for search by label is distorted in topology #15090
• OCPBUGS-55431: Add initialization link annotation support to csv anno… #15020
• OCPBUGS-54185: Helm resource list error in console #15084
• OCPBUGS-56439: Remove duplicate sinkUri code #15085
• OCPBUGS-56137: Added developer getting started card in Admin project overview page #15079
• OCPBUGS-52842: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15092
• OCPBUGS-56628: Fix regression with drawers and modals #15080
• OCPBUGS-56087: Opening Edit Secret modal and saving without changes throws error #15058
• ODC-7722: Remove service binding plugin #15035
• OCPBUGS-55456: Fix and enable web terminal tests #15082
• OCPBUGS-54726: Layout of Welcome to the new OpenShift experience! buttons is wonky on mobile #14951
• OCPBUGS-56353: Initialize log package #15069
• ODC-7797: Expose PodRingSet via Dynamic Plugin SDK #15068
• OCPBUGS-55806: fix bug where AlertItem is missing info icon #15052
• ODC-7782: Test adjustments to perspective merge #14970
• OCPBUGS-54434: Update vSphere configuration form to support CM YAML f… #15065
• OCPBUGS-49291: Set proper type for the CSP field for the serverconfig #15064
• OCPBUGS-56410: Recognize Detached BMH status #15056
• ODC-7786: Add flags in console static plugin for all the components of this epic #14992
• OCPBUGS-54195: Enable pipeline tests by installing operator version 1.17 #14903
• CONSOLE-3644: app.jsx -> app.tsx #14997
• OCPBUGS-55368: [knative] Self-provisioner user can not access or create event sources via ODC #15017
• OCPBUGS-55208: Should show default OpenShift Logo for a theme when there is not custom logo set for the theme. #14999
• OCPBUGS-56245: Remove dead code for deployment and deployment config #15054
• OCPBUGS-37977: Refresh console TLS certs at runtime #14971
• OCPBUGS-55419: improve description of the custom logos CLI args #15003
• CONSOLE-4572: classnames -> react-styles #15050
• OCPBUGS-55808: fix cy.createProject command #15026
• OCPBUGS-55896: Refactor Kebab+ActionsMenu to use PF #15028
• OCPBUGS-56039: Update supported languages in Internationalization docs #15046
• OCPBUGS-55919: remove 60 day alert from cluster update modal #15045
• CONSOLE-4550: col-sm-6 => GridItem sm={6} #15014
• OCPBUGS-54234: Fix impersonate group action #14915
• OCPBUGS-46385: fix alignment of Getting Started item icons #15025
• CONSOLE-4393: Update to Node.js® v22 #14841
• OCPBUGS-55412: Wrap ListPageHeader action with a div #15008
• OCPBUGS-55323: Add patternfly/react-topology to shared modules list of dynamic plugin sdk #14993
• OCPBUGS-55430: resolve http Context and Client handling #15009
• OCPBUGS-55629: get go mod tidy to pass #15024
• OCPBUGS-53428: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15001
• OCPBUGS-55375: add data-quickstart-id to quick create button #14998
• OCPBUGS-54157: Sample segment sessions #14990
• OCPBUGS-49291: Improving the DevExp for passing the CSP directives to console per flag + Make use of connect-src and object-src directives #14701
• OCPBUGS-53320: Add DEVCONSOLE_PROXY flag #15006
• OCPBUGS-55633: fix bug where Critical Alerts section cannot be collapsed #15015
• Full changelog

console-operator

• OCPBUGS-45300: Wire synced OIDC Auth CM to Console #1024
• OCPBUGS-45300: Fetch synced CM for the CertificateAuthority issuer #1017
• OCPBUGS-59099: Bump docs version #1015
• OCPBUGS-58434: Console-operator should report plugin services as relatedObjects #1012
• NO-JIRA: Remove ocs-install-tour #1003
• OCPBUGS-58320: Fix deprecated API Version in RHDH Operator Quickstart #1009
• OCPBUGS-57630: Update downloads deployment configuration to use master node selector #1005
• OCPBUGS-57129: Revert adding Console capability into SVM #1004
• OCPBUGS-57519: Revert #981 “CONSOLE-4523, OCPBUGS-57468: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads” #994
• OCPBUGS-57129: Add missing Console capability annotation #992
• CONSOLE-4523, OCPBUGS-57468: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads #981
• ODC-7790: Remove ODO download link #987
• OCPBUGS-52556: Revert v1alpha1 removal #990
• OCPBUGS-43792: Add plugins order to console config #980
• OCPBUGS-55698: Lift FeatureGate by bumping openshift/api #984
• Full changelog

container-networking-plugins, containernetworking-plugins-microshift

• OCPBUGS-59568: stop installing rpms that are already in the base image #206
• Full changelog

coredns

• ART-13079: append .0 to go.mod version #132
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-59650: Rebase main onto release-1.33 #334
• OCPBUGS-58497: CARRY: don’t ignore json files #337
• OCPBUGS-57798: Rebase main onto release-1.33 #329
• NO-JIRA: OWNERS: Update team osasinfra #326
• OCPBUGS-56028: [cinder-csi-plugin] Don’t report topology capability when –with-topology=False #325
• Full changelog

csi-driver-nfs

• NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main #154
• OCPBUGS-57851: Updating csi-driver-nfs-container image to be consistent with ART for 4.20 #157
• NO-JIRA: OWNERS: Update team osasinfra #155
• Full changelog

csi-external-attacher

• STOR-2392: Rebase to upstream v4.9.0 for OCP 4.20 #86
• OCPBUGS-57569: Updating csi-attacher-container image to be consistent with ART for 4.20 #85
• Full changelog

csi-external-provisioner

• STOR-2392: Rebase to upstream v5.3.0 for OCP 4.20 #115
• OCPBUGS-57915: Updating csi-provisioner-container image to be consistent with ART for 4.20 #114
• Full changelog

csi-external-resizer

• STOR-2392: Rebase to upstream v1.14.0 for OCP 4.20 #171
• OCPBUGS-57847: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.20 #170
• Full changelog

csi-external-snapshotter, csi-snapshot-controller

• STOR-2392: Rebase to upstream v8.3.0 for OCP 4.20 #181
• OCPBUGS-55689: UPSTREAM: 1303: Fix requeueing snapshot content after deletion error #180
• Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.20 #179
• OCPBUGS-57552: Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.20 #178
• Full changelog

csi-livenessprobe

• STOR-2392: Rebase to upstream v2.16.0 for OCP 4.20 #75
• OCPBUGS-57738: Updating csi-livenessprobe-container image to be consistent with ART for 4.20 #74
• Full changelog

csi-node-driver-registrar

• STOR-2392: Rebase to upstream v2.14.0 for OCP 4.20 #82
• OCPBUGS-57849: Updating csi-node-driver-registrar-container image to be consistent with ART for 4.20 #81
• Full changelog

docker-builder

• OCPBUGS-57676: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.20 #472
• OCPBUGS-56106: S2I build cpu limits observed by assemble are limited to 1 cpu #470
• Full changelog

docker-registry

• OCPBUGS-57583: Updating openshift-enterprise-registry-container image to be consistent with ART for 4.20 #435
• OCPBUGS-56483: bump jwt and oauth dependencies #427
• Full changelog

driver-toolkit

• Updating driver-toolkit-container image to be consistent with ART for 4.20 (#170) #170
• fix: Use VERSION_ID for RHEL minor version (#168) #168
• Full changelog

etcd

• OCPBUGS-57675: Updating ose-etcd-container image to be consistent with ART for 4.20 #334
• Full changelog

gcp-cloud-controller-manager

• NO-JIRA: Update OWNERS #83
• OCPBUGS-57575: Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART for 4.20 #81
• Full changelog

gcp-cluster-api-controllers

• NO-JIRA: Update OWNERS #246
• OCPCLOUD-2918: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.10.0 (6518ef9) into master #245
• OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #242
• Full changelog

gcp-machine-controllers

• OCPCLOUD-2931: Update Kubernetes deps to v1.33 #123
• NO-JIRA: Update OWNERS #127
• OCPBUGS-59376: Add max-concurrent-reconciles flag to machine actuator #124
• OCPBUGS-56849, OCPCLOUD-2985, OCPCLOUD-2986: Bump machine-api-operator to pull in authoritativeAPI fix #122
• OCPBUGS-57867: Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 4.20 #121
• OCPBUGS-46387: allow instances with unknown quotas to be created #114
• Full changelog

gcp-pd-csi-driver

• STOR-2396: Rebase to upstream v1.20.0 for OCP 4.20 #79
• OCPBUGS-57712: Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.20 #78
• Full changelog

gcp-pd-csi-driver-operator

• STOR-2394: Bump all deps for 4.20 #147
• OCPBUGS-57568: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.20 #146
• Full changelog

gcp-workload-identity-federation-webhook

• OCPBUGS-57909: Updating gcp-workload-identity-federation-webhook-container image to be consistent with ART for 4.20 #8
• Full changelog

haproxy-router

• OCPBUGS-55506: Prevent startup failures due to name resolution #656
• Full changelog

hyperkube, kube-proxy, pod

• TRT-2068: Reintroduce non-suite annotation removal #2331
• CNTRLPLANE-371: Update to Kubernetes v1.33.2 #2314
• OCPBUGS-57861: Bump 4.20 1.32.6 #2339
• OCPBUGS-55678: Fix flake caused by invalid detection of active policies in VAP integration tests #2346
• NO-JIRA: UPSTREAM: <carry>: Update rebase.sh to handle go versions major.minor.patch #2319
• TRT-2097: UPSTREAM: <carry>: Fix up kube test suite definitions for OTE #2330
• Revert “TRT-2068: Reintroduce removal of non-suite annotation rules, and fix topology selector” #2329
• TRT-2068: Reintroduce removal of non-suite annotation rules, and fix topology selector #2322
• OCPNODE-3010: openshift-hack: enable userns e2e tests #2239
• TRT-2141: Revert #2299 “TRT-1854: remove annotation rules that don’t relate to suites” #2318
• TRT-1854: remove annotation rules that don’t relate to suites #2299
• OCPBUGS-56436: Bump 4.20 1.32.5 #2308
• CNTRLPLANE-179: apiserver library go bump #2285
• OCPBUGS-55944: UPSTREAM: <carry>: unrevert: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2295
• OCPBUGS-55631: UPSTREAM: 131495: Handle unsupported node expansion for RWX volumes #2288
• NO-JIRA: Fix generation of test names #2296
• OCPBUGS-54208: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2277
• OCPBUGS-54318: UPSTREAM: 131236: RWX tests should create RWX volumes #2279
• OCPBUGS-55945: Bump main 1.32.4 #2292
• TRT-2103: Revert “NO-JIRA: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated.” #2291
• NO-JIRA: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2287
• OCPBUGS-55632: Fix node expansion on older kubelets #2282
• TRT-2066: Use OTE generated labels for skips in test-kubernetes-e2e.sh #2255
• Full changelog

hypershift

• NO-JIRA: add CLAUDE.md with comprehensive development guidance #6549
• CNTRLPLANE-1191: add sa-token-issuer-private-key-path flag to create cluster aws #6526
• CNTRLPLANE-1184: update registry.access.redhat.com/ubi10/ubi docker tag to v10.0-1752573517 #6343
• OCPBUGS-59927: Fix MCE 2.10 konflux EC violations #6531
• MGMT-20948: Enable Multus Disabling for NetworkType=Other #6358
• NO-JIRA: fix(cmd): match infraID exactly on OIDC provider delete #6538
• NO-JIRA: fix(test/e2e): add KCM leader elect failure msg to isLeaderElectionFailure #6537
• CNTRLPLANE-777: Create an Arm64 NodePool e2e Test for ARO HCP #6509
• CNTRLPLANE-996: feat(cli): Add support for using ROSA managed policies #6467
• CNTRLPLANE-204: feat(shared-ingress): Add reloader sidecar to avoid restarts on config changes #6447
• MGMT-20826: Add CLI validation to ensure Console is disabled when Ingress is disabled #6479
• NO-JIRA: feat(cmd/dump): add CronJobs to dump #6494
• OCPBUGS-53265: Use the image reference for the cache in the image metadata provider #6155
• OCPBUGS-59835: MCE 2.10 konflux #6524
• OCPBUGS-57336: Delete unused AdditionalTrustBundle from CP namespace #6504
• Fix OCPBUGS-54720: HCP payload doesn’t respect multiple #6486
• OCPSTRAT-2173: feat(hcco): add support for hosted OIDC client secrets #6375
• OCPBUGS-43824: Help fix flaky NTO tests #6480
• feat(shared-ingress): Fix Konflux hermetic build config #6503
• CNTRLPLANE-1116: add gitlint support for conventional commit enforcement #6462
• NO-JIRA: feat(contrib): add kubelet config daemonset #6495
• NO-JIRA: Fix a typo in the documentation #6501
• NO-JIRA: increase the pod limit per node in AKS cluster #6487
• NO-JIRA: Add new doc from HCP OADP Plugin #6299
• OCPBUGS-59759: fix(konflux): Add missing backslash for dot escaping #6491
• NO-JIRA: test: replace context.Background/TODO with t.Context in unit tests #6475
• NO-JIRA: Dummy change to shared-ingress Containerfile to trigger a build #6478
• NO-JIRA: test: remove CPOv2 annotation from upgrade test #6485
• OCPBUGS-57316: hypershift version in CLI returns panics for Server Version when HyperShift operator is deployed #6473
• CNTRLPLANE-980: chore(contrib): add ansible playbook for setting up external OIDC #6294
• NO-JIRA: test/e2e: skip kubevirt pods when checking labels, tolerations, and term msg policy #6476
• NO-JIRA: test/e2e: add TerminationMessagePolicyFallbackToLogsOnError check to 4.19 #6291
• CNTRLPLANE-735: Document steps to configure Microsoft backup extension in AKS #6456
• NO-JIRA: chore(deps): update konflux references #6267
• OCPBUGS-59232: fix(test): resolve Azure DNS race condition in EnsureCustomAdminKubeconfigReachesTheKAS #6461
• MGMT-20826: Enable disabling of Ingress capability #6319
• NO-JIRA: unique clusterrole per hosted cluster for kubevirt CSI #6321
• CNTRLPLANE-952: New API to support specifying cluster-autoscaler flags #6236
• CNTRLPLANE-993: Skip azure 4.19 cp upgrade for now to let the 4.20 suite be covered. #6416
• CNTRLPLANE-204: feat(shared-ingress): Add socat tool to container image #6458
• OCPBUGS-43824: fix(test): reduce API call frequency to prevent rate limiting in NTO machineconfig test #6453
• OCPBUGS-58299: remove annotation is not working #6420
• MGMT-20793: Enable Disabling NodeTuning Capability #6356
• CNTRLPLANE-800: Remove code associated with Managed Identity v2 for ARO HCP #6105
• NO-JIRA: Update Created Azure Hosted Cluster on AKS doc #6451
• OCPBUGS-57742: Updating ose-hypershift-container image to be consistent with ART for 4.20 #6307
• CNTRLPLANE-1113: Add renovate configuration #6452
• CNTRLPLANE-201: migrate to konflux-built image for shared ingress #6381
• Revert “OCPBUGS-56701: Update the LookupDefaultOCPVersion function to use the multi-arch release API” #6445
• OCPBUGS-56701: Update the LookupDefaultOCPVersion function to use the multi-arch release API #6353
• OCPBUGS-58837: Override CPO image to apply KAS certificate hotfix #6402
• NO-JIRA: konflux: manually update task bundles #6418
• CNTRLPLANE-995: Support day2 tags changes for AWS default Security Group #6320
• NO-JIRA: Exit miv3 script early if cp file exists #6417
• NO-JIRA: Fix up contrib scripts for aro like env #6395
• MGMT-20771: Enable disabling of Console capability #6183
• OCPBUGS-57790: add custom kube-apiserver DNS name to shared ingress #6338
• OCPBUGS-58387: Add karpenter to skip api-server deps #6379
• OCPBUGS-58149: fix(hcco): Don’t fail for public OIDC clients with no client secret #6367
• NO-JIRA: Ensure that capi-provider deployment does not have outdated labels #6335
• OCPBUGS-57957: Increase MaxItems for Mirrors and ImageContentSources #6325
• CNTRLPLANE-1042: Disable createClusterNone for azure and scope down verifyResourceGroupLocationsMatch check #6376
• CNTRLPLANE-1042: Add nodepool rollout test for azure #6364
• NO-JIRA: Enable MutatingAdmissionPolicy runtime config #6362
• OCPBUGS-58299: webhook, replace “delete” by “remove” for jpatch #6363
• OCPSTRAT-2173: Revert “Merge pull request #6227 from sjenning/hcco-empty-client-secret” #6365
• CNTRLPLANE-1046: Fix hack/tools go module name and bump golangci-lint to last v1 minor #6361
• Update github.com/openshift/cluster-api-provider-agent/api digest to 899af65 #5803
• ACM-21713: fix(konflux): go-toolset runs as default(1001) #6360
• NO-JIRA: Run validate conditions after ho upgrade test #6351
• NO-JIRA: Update ROSA envs #6326
• OCPBUGS-58200: Drop version history length #6329
• OCPBUGS-58031: AKS: HCP operator should set Shared ClusterServiceLoadBalancerHealthProbeMode #6314
• ACM-21713: adding .git in .dockerignore to fix version info #6317
• OCPBUGS-56701: Fix LookupDefaultOCPVersion to use the supported-versions ConfigMap to find a default release image #6297
• CNTRLPLANE-777: Update manifest.go to use latest oc committed code #6316
• OCPBUGS-56430: Fix restarting prometheus Sts after HCP restoration #6322
• HOSTEDCP-2253: doc/aws-autoNode: initial deployment guide #5443
• OCPBUGS-49812: Sanitize PowerVS image name to comply with updated naming standards #6249
• CNTRLPLANE-902: New metrics for HCP Azure #6180
• NO-JIRA: Add Azure DNS Zone Clean-up Instructions #6312
• CORENET-6094: CNO: add FRR-k8s image #6290
• METAL-1404: Allow enabling capabilities and make baremetal capability opt-in by default on hosted clusters #6158
• OCPBUGS-57497: Revert “Add proxy trustedCA to ignition config” #6288
• OCPBUGS-57115: Update PSA from v1beta1 to v1 #6287
• MGMT-20801: Enable disabling of Insights capability #6246
• CNTRLPLANE-983: Enable codespell in verify and fix all spelling mistakes #6262
• NO-JIRA: Add misspell to golangci-lint #6253
• CNV-61396: set kubevirt cis rbac valid only for kubevirt platform #6254
• CNTRLPLANE-942: update KAS bootstrapping to get RBR from CAO #6137
• AUTOSCALE-119: Add pod monitors to karpenter components #6206
• OCPBUGS-45265: Don’t use /version for haproxy health checks #6202
• CNTRLPLANE-374: hcco: handle post-install creation of OIDC client secrets #6227
• OCPBUGS-56861: Remove CapacityReservation validation that requires aws access #6248
• CNTRLPLANE-977: Update Konflux references #6217
• OCPBUGS-55892: make image registry managed identity optional #6127
• CNV-61396: Sync RBAC for expansion support in kubevirt CSI driver #6226
• OCPBUGS-57125: Support deserializing monitoring manifests when RHOBS enabled #6238
• OCPBUGS-56966: Fix ignition server route getting constantly recreated #6225
• OCPBUGS-57125: Support RHOBS when loading cpov2 monitoring manifests by replacing the API group #6228
• OCPBUGS-53259: Reuse hosted cluster release and metadata providers #6095
• OCPBUGS-54720: HCP payload doesn’t respect multiple mirrors #6222
• ARO-15626: Disallow users from setting .spec.managementState to Removed in the image registry operator config on Azure #6013
• NO-JIRA: cpo/oidc: remove validation functions that use default CEL compiler #6221
• NO-JIRA: Create test fixtures for all resources in TestControlPlaneComponents #6216
• OCPBUGS-42938: Support proxy authentication when user/pass is included in URL #6207
• OCPBUGS-30260: Allow setting target node selector for control plane router #3946
• OCPBUGS-56930: test/e2e: fix version gate checks on minor upgrade #6219
• NO-JIRA: Follow up PR from #6192 #6204
• MGMT-20682: Enable disabling of openshift-samples capability #6197
• OCPBUGS-56430: Add DR operations after HC restoration #6195
• CNTRLPLANE-936: fix(tekton): drop multiarch builds on PR #6223
• CNTRLPLANE-844: Delete legacy unused DeploymentConfig code #6210
• CNTRLPLANE-206: Add NetworkPolicy to shared-ingress #6173
• WRKLDS-1676: ocm: Make config compatible with library-go #6203
• NO-JIRA: Fix documentation field name for KubeAPIServerDNSName #6220
• OCPBUGS-56814: PodSecurityConfiguration Kas config render from gate #6213
• OCPBUGS-56777: Move EnsurePSANotPrivileged to AtLeast(t, Version420) #6211
• AUTOSCALE-266: Refactor karpenter-operator and karpenter into v2 components #6187
• CNTRLPLANE-201: feat(shared-ingress): Bump ubi10 out of beta #6200
• OCPBUGS-56492: Fix CatalogSource image check when unauthorized #6192
• CNTRLPLANE-931: update konflux references #6188
• NO-JIRA: Add unit test for reconciling components with a WithManifestAdapter for SA #6191
• NO-JIRA: Fix serviceaccounts with custom adapter not getting pull-secret #6185
• OCPBUGS-56457: Do not validate OCP API Server SANS if PKI reconciliation is disabled #6171
• CNTRLPLANE-905: feat(shared-ingress): add arm64 builds #6175
• CNTRLPLANE-810: Increase imageContentSources slice length validation #6166
• CNTRLPLANE-914: chore(deps): update konflux references #6165
• CNTRLPLANE-905: Red Hat Konflux update hypershift-shared-ingress-main #6174
• CNTRLPLANE-201: feat(shared-ingress): Add el10 Containerfile #6168
• NO-JIRA: Remove ControlPlaneV2 API featuregate #6169
• NO-JIRA: Move ControlPlaneComponent CRD installation to the CLI #6167
• WRKLDS-1676: ocm config: Update leaderElection.name #6156
• CNTRLPLANE-844: Refactor CAPI provider/manager into v2 #6159
• CNTRLPLANE-844: Refactor ControlPlaneOperator into v2 component #6148
• CNTRLPLANE-844: Remove DeploymentConfig usage #6157
• NO-JIRA: Fix TestHostedClusterWatchesEverythingItCreates not working locally #6149
• NO-JIRA: Keep checking for rollouts during upgrade HO test for five minutes #6097
• OCPBUGS-56205: Switch back to rh catalog #6154
• OCPBUGS-56164: Fix HyperShift Operator Enterprise contract konflux pipeline #6138
• OCPBUGS-56011: Configure ClusterServiceLoadBalancerHealthProbeMode a… #6099
• CNTRLPLANE-565: Remove NodePool CapacityReservation API featuregate #6132
• CNTRLPLANE-645: Rename NodeCount flag to Replicas #6094
• CNTRLPLANE-844: Remove unused DeploymentConfig references #6146
• NO-JIRA: test/setup: use case-sensitive prometheusK8s in monitoring config #6150
• NO-JIRA: Increase the content width in the upstream docs #6147
• NO-JIRA: cpov2: fix structured authentication configuration serialization #6135
• CNTRLPLANE-269: Remove legacy machine approver and ign server reconciliation code #6133
• OCPBUGS-55913: Fix Job status returning empty reason and message #6134
• CNTRLPLANE-269: Remove DeploymentConfig usage from cpov2 #5724
• OCPBUGS-37323: MarkPersistentFlagRequired does not work since CLI refactoring #5649
• NO-JIRA: Fix minor issues with Azure HC creation doc #6128
• OCPBUGS-55504: Add postStart hook to kube-apiserver container #6074
• CNTRLPLANE-709: Add ability to limit platform specific resources managed by HostedCluster #6039
• CNTRLPLANE-261: Enable pprof in hosted control plane etcd #6003
• CNTRLPLANE-334: Update KASv2 structured authentication configuration #6119
• CNTRLPLANE-334: Update KAS structured authentication configuration generation logic to use new uid and extra field #6073
• OCPBUGS-54483: Add support for registry root entry only in the IDMS/ICSP #6100
• OCPBUGS-55357: Only build main branch components #6078
• CNTRLPLANE-265: Enable staticcheck linter in golangci-lint #5836
• CNTRLPLANE-740: Add DR for HCP using OADP and Hypershift plugin #6077
• NO-JIRA: bump HO supported version to 4.20 #6006
• CNTRLPLANE-798: ho: changes to ref’ed resources triggers HC reconciliation #6103
• Full changelog

ibm-cloud-controller-manager

• NO-JIRA: Update OWNERS #83
• OCPCLOUD-2925: Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.33 (1ccdaca) into main #80
• OCPBUGS-57678: Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART for 4.20 #81
• Full changelog

ibm-vpc-block-csi-driver

• STOR-2393: Rebase to upstream v5.2.16 for OCP 4.20 #102
• Full changelog

ibm-vpc-block-csi-driver-operator

• STOR-2394: Bump all deps for 4.20 #147
• OCPBUGS-57701: Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.20 #145
• Full changelog

ibmcloud-cluster-api-controllers

• NO-JIRA: Update OWNERS #117
• OCPCLOUD-2922: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.11.0 (9369909) into main #113
• OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #111
• NO-JIRA: Do not gitignore files inside vendor #112
• Full changelog

ibmcloud-machine-controllers

• NO-JIRA: Update OWNERS #68
• OCPBUGS-57837: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.20 #65
• OCPBUGS-56849, OCPCLOUD-2985, OCPCLOUD-2986: Bump machine-api-operator to pull in authoritativeAPI fix #66
• Full changelog

insights-operator

• RFE-4152: Add missing readonlyRootFilesystem (#1104) #1104
• CCXDEV-15041: update on-demand gathering docs (#1097) #1097
• CCXDEV-15045: update code to use v1alpha2 api version (#1093) #1093
• feat: update the manifest crds to be applied during DevPreview and Custom featuresets (#1099) #1099
• Add readonlyRootFilesystem (#1101) #1101
• chore(lint): bump golang-ci version (#1102) #1102
• Updating ose-insights-operator-container image to be consistent with ART for 4.20 (#1095) #1095
• fix(docs): update new SCA endpoint (#1096) #1096
• feat: copy proxy envs from IO pod to gathering pods (#1094) #1094
• NO-JIRA: update github.com/openshift/api and openshift/client-go to latest version (#1092) #1092
• feat: add Progressing condition (#1090) #1090
• OCPBUGS-55805 Enhance insights-runtime-extractor errors (#1085) #1085
• OCPBUGS-55804 Report an error when the insights-runtime-extractor is not running (#1086) #1086
• feat: update DataGather condition reasons (#1084) #1084
• feat: ensure the etc-entitlement-pki secret exists (#1082) #1082
• feat: move HTTP status code from condition.Reason to condition.Message (#1083) #1083
• feat: add gatheringDisabled condition (#1078) #1078
• Full changelog

insights-runtime-exporter, insights-runtime-extractor

• Sidecar containers test case #44
• test: Fix JBoss EAP 8.0 version #50
• OCPBUGS-57682: Updating ose-insights-runtime-exporter-container image to be consistent with ART for 4.20 #47
• OCPBUGS-57773: Updating ose-insights-runtime-extractor-container image to be consistent with ART for 4.20 #48
• test: Fix JBoss EAP 8.0 version #45
• test: Fix JBoss EAP 8.0 version #46
• Full changelog

ironic

• METAL-1461: update config to allow Ironic to work with ironic-prometheus-exporter #674
• METAL-1379: Bump ironic to include NIC Firmware Updates #672
• METAL-1414: Use Python 3.12 to build and run ironic #658
• OCPBUGS-55298: Bump ironic to unresponsive bmc commit #670
• METAL-1496: Force download and install from source #669
• METAL-1496: Revert “OCPBUGS-55298: Bump ironic to latest” #668
• OCPBUGS-55298: Bump ironic to latest #667
• OCPBUGS-56755, OCPBUGS-57454: Bump sushy and ironic commit #666
• OCPBUGS-57806: Updating ironic-container image to be consistent with ART for 4.20 #664
• OCPBUGS-52427: Bump sushy to include Targets fix #663
• METAL-1376: Make sushy support NetworkAdapters #662
• Bug OCPBUGS-55434: Bump sushy to include SuperMicro boot device string workaround #659
• METAL-1344: Do not install sushy-oem-idrac separately #653
• METAL-1345: Install scciclient from source #652
• METAL-1264: Update to latest upstream content #655
• OCPBUGS-55381: Extract files one-by-one in logwatch #654
• Full changelog

ironic-agent

• METAL-1414: Use python3.12 to build and run ironic-agent #191
• METAL-1496: Force download and install from source #192
• OCPBUGS-56029: Erase software RAID when install_coreos is used #187
• OCPBUGS-57663: Updating ironic-agent-container image to be consistent with ART for 4.20 #190
• METAL-1264: Update to latest upstream content #186
• OCPBUGS-55350: collect the entire journal from the host #184
• Full changelog

ironic-machine-os-downloader

• OCPBUGS-57687: Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.20 #105
• ART-13079: append .0 to go.mod version #101
• Full changelog

ironic-static-ip-manager

• OCPBUGS-57853: Updating ironic-static-ip-manager-container image to be consistent with ART for 4.20 #52
• Full changelog

keepalived-ipfailover

• OCPBUGS-57842: Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.20 #211
• OCPBUGS-57831: Updating ose-egress-http-proxy-container image to be consistent with ART for 4.20 #210
• OCPBUGS-57624: Updating openshift-enterprise-egress-router-container image to be consistent with ART for 4.20 #209
• OCPBUGS-57572: Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.20 #208
• OCPBUGS-57510: Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.20 #207
• OCPBUGS-48318: Change default value for OPENSHIFT_HA_VRRP_ID_OFFSET #206
• Full changelog

kube-metrics-server

• OCPBUGS-41851: Bump openshift/kubernetes-metrics-server to v0.8.0 #46
• OCPBUGS-57726: Updating ose-kube-metrics-server-container image to be consistent with ART for 4.20 #44
• Full changelog

kube-rbac-proxy

• NO-JIRA: v0.19.1 #119
• Full changelog

kube-state-metrics

• MON-4277: [bot] Bump openshift/kube-state-metrics to v2.16.0 #122
• OCPBUGS-57686: Updating kube-state-metrics-container image to be consistent with ART for 4.20 #121
• Full changelog

kube-storage-version-migrator

• OCPBUGS-57556: Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.20 #222
• OCPBUGS-38523: Reduce the page size on list requests to the Kube API server #211
• NO-JIRA: Add DOWNSTREAM_OWNERS. #219
• Fix verify job failure with build-machinery bump #214
• ART-13079: append .0 to go.mod version #212
• Full changelog

kubevirt-csi-driver

• CNV-61396: Implement volume expansion #61
• Full changelog

machine-api-operator

• Revert “OCPCLOUD-2980: add ingress/egress network policy” #1395
• OCPCLOUD-2980: add ingress/egress network policy #1387
• OCPCLOUD-2941: Bump k8s dependencies to 1.33; go 1.24 #1393
• OCPBUGS-59376: Enabled 10 concurrent reconciles on GCP #1390
• OCPBUGS-58429: Fixed test logic to wait for machines ready and clean up #1388
• OAPE-232: Remove GCPLabelsTags featuregate checks and references #1385
• OCPBUGS-56849, OCPCLOUD-2985, OCPCLOUD-2986: Fix controllers guard on empty status authoritative api + defaulting #1386
• SPLAT-2082: Create e2e for vSphere vm-host zonal feature #1374
• Revert “OCPCLOUD-2986,OCPBUGS-56849: fix: controllers: guard on empty .status.authoritativeAPI” #1383
• OCPBUGS-56849, OCPCLOUD-2986: fix: controllers: guard on empty .status.authoritativeAPI #1380
• NO-JIRA: Make crds-sync module-configuration agnostic #1382
• SPLAT-2039: Fixed test logic for hybrid env scenario #1379
• OCPBUGS-57018: Fixed test logic for UPI scenario #1375
• OCPBUGS-56923: Revert “SPLAT-2082 - Create e2e for vSphere vm-host zonal feature” #1373
• SPLAT-2082: Create e2e for vSphere vm-host zonal feature #1369
• OCPCLOUD-2717: bump openshift/api #1372
• OCPBUGS-56159: correct aws kms permissions #1370
• OCPBUGS-55461: Changed machineset tests to be serial #1365
• OCPBUGS-55720: fix: use patch for machine/machineset status #1362
• OCPBUGS-55461: Fixes machineset paused condition nil pointer #1361
• OCPBUGS-55461: Revert “Added skip for when config not multi nic” #1363
• Full changelog

machine-config-operator

• OCPBUGS-58443: In OCL for reboot, after applying ssh/file/password based MC the MCP is stuck in updating state #5191
• OCPBUGS-57484, OPNET-681: Support migration to NMState #5064
• OCPNODE-3006: Migrate ClusterImagePolicy/ImagePolicy to v1 #5143
• OCPBUGS-43406: Add workaround fix for static pod race #5185
• MCO-1813: Simplify boot image reconciliation with Go generics #5183
• NO-ISSUE: Split gcp-op into two tests #5197
• MCO-1815: vSphere bootimage update reconciliation should handle bootimage name diverging #5187
• OCPBUGS-58191: fixes image registry secret handling #5171
• OCPBUGS-55971: Enable debug logging for nodeip-configuration #5043
• OCPBUGS-59776: Revert “OCPBUGS-52302: Fix timing of Spec.ConfigVersion.Desired update in MCN” #5190
• OCPBUGS-52302: Fix timing of Spec.ConfigVersion.Desired update in MCN #5121
• OCPBUGS-59672: TestMCNPoolNameCustom should clean up resources properly #5184
• OCPBUGS-58238: Image Mode creates new MOSBs when osbuilder is drained and it results in degraded MCPs #5161
• OCPBUGS-59367: Set our test suite as global #5179
• OCPBUGS-56115: Understand and eliminate noisy logs for MCN #5136
• OCPBUGS-57024: use channel to signal controller shutdown #5104
• NO-ISSUE: Add emy to baremetal-reviewers #5164
• MCO-1739: Tell origin our suite is disruptive and set timeout #5167
• MCO-1307: Add support for VSphere for BootImage Update #4677
• OCPBUGS-44290: Fix when machines are considered Degraded in MCP status based on MCN NodeDegraded condition #5110
• MGMT-20810: pass control plane topology to keepalived-monitor #5113
• NO-ISSUE: Update ImageMode tests Polarion ID #5159
• OCPEDGE-1858: Remove podman-etcd machine config source #5129
• MCO-1741: Fix missing OTE logs #5158
• MCO-1741: Bump OTE framework to add skip reason #5160
• MCO-1661: Feature Gate handling rework #5029
• OCPBUGS-57702: Update images to be consistent with ART #5146
• NO-ISSUE: API & client-go version bumps #5142
• MCO-1624: Make MCN e2e tests blocking #4972
• MCO-1741: Add cloud providers to the kubernetes vendor #5145
• OCPBUGS-58180: Add control-plane label for master nodes on legacy clusters #5147
• MCO-1719: MVP port of the MCO extended QE test suite #5108
• MCO-1282: Remove all code related to the Image Registry workaround Config Map #5093
• OCPBUGS-57426: OCPBUGS-57506: Boot image controller should correctly handle marketplace boot images #5122
• MCO-1591: Ignition recursive converter #4913
• OCPBUGS-57072: configure-ovs: don’t escape : in nmcli output #5106
• OCPBUGS-57458: add MachineConfiguration to CO related objects #5124
• MCO-1580: MCO-1581: Achieving parity with MCO node disruption frequency #4996
• OCPBUGS-56220: Ensure the build controller restarts on upgrade #5100
• OCPBUGS-56555: openvswitch3.5-ipsec package not included with ipsec os extension #5112
• NO-ISSUE: Add Jetbrains IDEs files to .gitignore #5116
• OCPBUGS-55663: Remove NodeDisruptionPolicy featuregate #5092
• OCPBUGS-7747: Do not set cpu system reserve below the default value #5046
• OCPBUGS-45459: Remove trailing period from hostnames #4966
• OCPBUGS-56744: Fix typo in MCN’s MachineConfigNodePinnedImageSetsDegraded message #5099
• OCPBUGS-55830: Only update boot disks during GCP boot image updates #5084
• OCPBUGS-55365: Regardless of Pool configuration wait on other sub-controllers to Render #5022
• OCPBUGS-45621: Fix dynamic-system-reserved-calc.sh when only true parameter is used #4733
• NO-JIRA: OWNERS: Update team osasinfra #5066
• OCPBUGS-36859: Support NODEIP_HINT in IPI deployments too #4973
• OCPBUGS-56446: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5067
• OCPBUGS-55681: Give keepalived container chroot cap #5032
• NO-JIRA: operator: use component annotation for ownership #5056
• OCPBUGS-56211: Boot Image Controller should not degrade when golden configmap is slow to update #5051
• OCPBUGS-53390: Fix interrupt state to account for failure correctly #5054
• OCPBUGS-55967: Add hot loop detection in the boot image controller #5037
• OCPBUGS-55439: scope MCD node listers to current node #5015
• OCPBUGS-55770: Compare the osImageURLs for OS validation check #5041
• MCO-1654: Add new runbook for KubeletHealthState to alert #5042
• OCPBUGS-49728: Adapt MCC to use LayeredNodeState and remove LayeredPoolState #4841
• OCPBUGS-54697: error from generateAndValidateRenderedMachineConfig function can be misleading #5033
• OCPNODE-3173: Disable OCI artifact mount by default. #5016
• OCPBUGS-55597: OWNERS: update owners file with current MCO team members #5024
• OCPBUGS-55450: Only populate Status.PinnedImageSets.CurrentGeneration on valid generation value #5023
• OCPBUGS-55327: Bugfix Ignition compression merge #5006
• OCPBUGS-55262: Use auto=start only for IPsec out connections #5017
• OCPBUGS-55713: Revert “OCPBUGS-44757: decrease leases for kubelet on azure” #5030
• OCPBUGS-52940: AWS Custom-DNS: Update services that run on control plane nodes #4939
• OCPBUGS-41485: Update MCD Log Output to Clarify No Configuration Change #5019
• Full changelog

machine-image-customization-controller

• METAL-1484: Support using a block device as the base ISO #143
• OCPBUGS-57848: Update image to be consistent with ART for 4.20 #139
• NO-ISSUE: Remove inactive OWNERS, add Riccardo #136
• Full changelog

machine-os-images

• OCPBUGS-57659: Updating ose-machine-os-images-container image to be consistent with ART for 4.20 #64
• OCPBUGS-55810: Dummy change to force a rebuild for 4.20 #62
• Full changelog

metallb-frr

• OCPBUGS-57696: Updating ose-frr-container image to be consistent with ART for 4.20 #101
• Align2006 #98
• Full changelog

monitoring-plugin

• OU-863: feat: add disconnected to line chart #477
• OU-388: add units selector to the metrics page #480
• OU-939: Fix virt persepective new silence link #472
• OU-594: [Incidents] UI is not embedded in the Alerting section #465
• OU-503: regression automation testing for monitoring alerting #471
• OU-930: use non-legacy store for accurate hideGraphs value #473
• NO-JIRA: Update README.md with how to development with local perses instance #442
• OU-721: reset showgraph state when unmounting button #459
• OU-744: fix: set correct pf color for gradient background on legacy dashboards legend #452
• OU-880: fix: allow correct selection of dashboard with same name in different projects #451
• OCPBUGS-57813: Updating monitoring-plugin-container image to be consistent with ART for 4.20 #441
• OU-814: fix: prevent variable provider cache when dashboard change #448
• OU-772: remove troubleshooting panel links from non-admin #447
• OU-814: Fix perses dashboard selection #431
• NO-JIRA: fixing Makefile to run build-dev-mcp-image #438
• NO-JIRA: feat: improve loading state and project dropdown re-rendering #432
• NO-JIRA: adjust README.md to refer to build-dev-mcp-image #436
• OU-788: [Auto][BVT] - implementing monitoring plugin and monitoring console plugin BVT #435
• OU-786 and OU-775: Perses Dropdowns #429
• OU-842: fix: override notistack dependency to avoid conflict #422
• NO-JIRA: chore: Update OWNERS #420
• OU-830: fix: add error boundary to variable dropdown #417
• OCPBUGS-56095: “Negative matcher” is checked by default on Create silence page #414
• OU-712: fix: add missing alertname field to silence alert #413
• OU-794: fix: update monitoring and virtualization routes to avoid overriding console routes #410
• OU-774: bound table scroll and column alignment #402
• RHINENG-17675: feat: add group id to url params #403
• RHINENG-10537: fixed broken delete chip group for incidents filters #401
• OU-197: feature: upgrade react router to v5 compat #400
• OU-745: Check for CSRF change on each fetch cycle #404
• Full changelog

multus-admission-controller

• OCPBUGS-57749: Updating ose-multus-admission-controller-container image to be consistent with ART for 4.20 #98
• OCPBUGS-59304: Update the github.com/golang/glog module to v1.2.4 #99
• ART-13079: append .0 to go.mod version #94
• Full changelog

multus-networkpolicy

• Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.20 (#72) #72
• Downstream sync 2025-06-19 (#74) #74
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-58405: Ds merge 7/15/25 #372
• Full changelog

must-gather

• CORENET-5412: network: Gather OVN-Kubernetes CUDN CRs #486
• OCPBUGS-57890: Updating ose-must-gather-container image to be consistent with ART for 4.20 #497
• OCPBUGS-52367: Fix collecting IPsec data for upgrade #482
• CORENET-5882: network: gather routeadvertisements.k8s.ovn.org #485
• Full changelog

network-interface-bond-cni

• OCPBUGS-57944: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.20 #76
• OCPBUGS-57754: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.20 #73
• CNF-17883: Upstream Sync 26052025 #71
• OCPBUGS-54229: Upstream sync 07-05-2025 #67
• NO-JIRA: Add ci-operator file #68
• Full changelog

network-tools

• NO-JIRA:Update OWNERS file #152
• ART-13079: append .0 to go.mod version #145
• NO-JIRA: Add aurko, comment jakob, remove nadia #143
• NO-JIRA: Fix github epic ID and username matching #142
• Full changelog

networking-console-plugin

• OCPBUGS-49652: Fix requiremenets with no value #254
• CNV-63471: Replace Bootstrap Grid CSS with PatternFly Grid and Table #253
• OCPBUGS-57805: Updating networking-console-plugin-container image to be consistent with ART for 4.20 #252
• OCPBUGS-56929: Add fileupload translation #245
• OCPBUGS-49386: Fix pod contenxt #246
• CNV-61902: fetch description of terms for popovers #244
• CNV-61827: fix styling issues #243
• CNV-61536: align Modals with PatternFly default #242
• CNV-60062: fix links to upstream documentation #241
• Full changelog

nutanix-cloud-controller-manager

• OCPCLOUD-2924: Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (109de6e) into main #44
• OCPBUGS-57759: Updating ose-nutanix-cloud-controller-manager-container image to be consistent with ART for 4.20 #45
• Full changelog

nutanix-machine-controllers

• NO-JIRA: Update OWNERS #118
• OCPBUGS-56849, OCPCLOUD-2985, OCPCLOUD-2986: Bump machine-api-operator to pull in authoritativeAPI fix #113
• OCPBUGS-57705: Updating ose-nutanix-machine-controllers-container image to be consistent with ART for 4.20 #103
• NO-JIRA: go.keploy.io/server@v0.8.6: checksum mismatch fix #112
• Full changelog

oauth-apiserver

• CNTRLPLANE-5: Accept client-go feature gates and unrecognized feature gates via –feature-gates. #136
• NO-JIRA: Bump to Kubernetes v1.32 #135
• Full changelog

oauth-proxy

• NO-JIRA: Update README.md #316
• NO-JIRA: 4.20 kube 1.32 #319
• APPSRE-11869: Fixing CVEs not related to k8s bump #324
• OCPBUGS-57487: fix e2e tests #321
• Full changelog

oauth-server

• OCPBUGS-58267: Fix mixup with Spanish and French locale variable names #188
• OCPBUGS-57719: Updating oauth-server-container image to be consistent with ART for 4.20 #190
• Use newer build-machinery-go #177
• ART-13079: append .0 to go.mod version #175
• OSASINFRA-3534: Bump Gophercloud to v2 #170
• Full changelog

oc-mirror

• NO-JIRA: OKD compatibility - Allow custom value for SignatureURL (#1165) #1165
• adds build-machinery-go as a tool dependency (#1226) #1226
• OCPBUGS-59714: Detect images from a Helm Chart with an aliased chart dependency (#1038) #1038
• OCPBUGS-52562: Ensure release collection does not include duplicates (#1218) #1218
• OCPBUGS-59396: v2/archive: handle 0b mirror archive files (#1219) #1219
• OCPBUGS-54622: cli/delete: fix workflow mode name output (#1214) #1214
• OCPBUGS-59646: cmd: unpack v2 to $HOME instead of /tmp (#1220) #1220
• OCPBUGS-58956: bump helm for CVE fix (#1213) #1213
• OCPBUGS-56398: Bug fix not to overwrite log files (#1208) #1208
• OCPBUGS-58467: Add range check for –parallel-images and –parallel-l… (#1211) #1211
• Revert “v2: remove build-machinery-go as a dependency (#1197)” (#1209) #1197
• OCPBUGS-58193: v2/archive: error d2m when no tar files found (#1200) #1200
• v2: remove build-machinery-go as a dependency (#1197) #1197
• OCPBUGS-57370: v2/defaults Fix rate limiting issues by enabling exponential backoff retries (#1202) #1202
• OCPBUGS-52470: Fixes the tag when rebuilt catalog by digest only (#1185) #1185
• adds README.md for v2 and rename v1 readme to README_v1.md (#1191) #1191
• OCPBUGS-57362: v2/mirror: retry in case of ContextDeadlineExceeded (#1181) #1181
• upgrades distribution to v3.0.0 (#1156) #1156
• OCPBUGS-57826: Updating oc-mirror-plugin-container image to be consistent with ART for 4.20 (missing files of pr 1189) (#1190) #1190
• Updating oc-mirror-plugin-container image to be consistent with ART for 4.20 (#1189) #1189
• OCPBUGS-55374: Add console warning if bad umask is detected (#1186) #1186
• OCPBUGS-54473: Bug fix - incomplete error messages for helm charts (#1172) #1172
• OCPBUGS-57461: v2/operator: add rebuilt catalog to tar file (#1184) #1184
• OCPBUGS-57387: v2/archive: fix sanitization of . (#1179) #1179
• OCPBUGS-51157: Bug fix for invalid release image does not cause mirro… (#1150) #1150
• skips invalid helm image from templates (#1178) #1178
• OCPBUGS-55074: deletes cosign tag based signatures (#1169) #1169
• adds code to handle signature errors in the archive pkg (#1162) #1162
• OCPBUGS-55078: skips signature mirroring for rebuilt operator catalogs (#1154) #1154
• OCPBUGS-56009: Bug fix for no release signature found (#1147) #1147
• OCPBUGS-56486: v2/config: allow delete and mirror words (#1164) #1164
• OCPBUGS-56642: update the Dockerfile to work with the 1.23 go.mod (#1159) #1159
• disables the signature verification on operator catalog collection (#1151) #1151
• OCPBUGS-55966: v2/archive: print unarchive progress (#1141) #1141
• OCPBUGS-54443: v2/cli: always remove past archives before m2d (#1144) #1144
• OCPBUGS-56117: Make v2 blockedImages use regular expressions (#1145) #1145
• changes the signature mirroring default to disabled (#1143) #1143
• OCPBUGS-54587: v2: bump containers/common dep to 0.63.0 (#1138) #1138
• CLID-182: Add spinner to release collector mirror to disk or mirror to mirror (#1085) #1085
• no-jira: Disable go workspace and build v2 as a binary (#1078) #1078
• OCPBUGS-55100: implements registries.d file as specified in containers/image docs (#1131) #1131
• OCPBUGS-54220: v2/imgbuilder: use –authfile when set (#1129) #1129
• Full changelog

olm-catalogd, olm-operator-controller

• NO-ISSUE: Synchronize From Upstream Repositories #411
• OPRUN-4017: Synchronize From Upstream Repositories #408
• NO-ISSUE: Synchronize From Upstream Repositories #405
• NO-ISSUE: Synchronize From Upstream Repositories #398
• NO-ISSUE: Synchronize From Upstream Repositories #397
• NO-ISSUE: Synchronize From Upstream Repositories #396
• NO-ISSUE: Synchronize From Upstream Repositories #394
• NO-ISSUE: Synchronize From Upstream Repositories #388
• OCPBUGS-55051: Synchronize From Upstream Repositories #384
• OPRUN-3957: Synchronize From Upstream Repositories #382
• NO-ISSUE: Synchronize From Upstream Repositories #381
• NO-ISSUE: Synchronize From Upstream Repositories #380
• NO-ISSUE: Synchronize From Upstream Repositories #377
• NO-ISSUE: Synchronize From Upstream Repositories #375
• NO-ISSUE: Synchronize From Upstream Repositories #367
• NO-ISSUE: Synchronize From Upstream Repositories #365
• NO-ISSUE: Synchronize From Upstream Repositories #363
• NO-ISSUE: Synchronize From Upstream Repositories #359
• NO-ISSUE: Synchronize From Upstream Repositories #356
• NO-ISSUE: Synchronize From Upstream Repositories #352
• NO-ISSUE: Synchronize From Upstream Repositories #346
• NO-ISSUE: Synchronize From Upstream Repositories #344
• NO-ISSUE: Synchronize From Upstream Repositories #339
• NO-ISSUE: Synchronize From Upstream Repositories #337
• NO-ISSUE: Synchronize From Upstream Repositories #336
• NO-ISSUE: Synchronize From Upstream Repositories #333
• NO-ISSUE: Synchronize from upstream #331
• Full changelog

openshift-apiserver

• OCPBUGS-59262: Revert “Drop support for image manifest schema 1” #533
• WRKLDS-1599: Drop support for image manifest schema 1 #528
• NO-JIRA: Add Apache 2.0 License file #523
• OCPBUGS-45729: Updating ose-openshift-apiserver-container image to be consistent with ART for 4.19 #486
• OCPBUGS-56736: Revert “OCPBUGS-38120: project: run validation function when deleting an object” #519
• OCPBUGS-35944: Allow updates to ImageStreams that violate existing LimitRanges #513
• OCPBUGS-35855: Wire dry run option to Image API server operations #511
• OCPBUGS-38120: project: run validation function when deleting an object #508
• OCPBUGS-54458: Fix image reference in TestImageStreamImportQuayIO #509
• Full changelog

openshift-controller-manager

• CNTRLPLANE-1054: Update k8s dependencies to 1.33.2 #405
• OCPBUGS-57918: ignore error failing to find pull/push secrets #397
• WRKLDS-1676: cmd: Refactor to use NewControllerCommand #378
• OCPBUGS-57198: Make the pull secrets volume mounts in build containers read-only. #387
• WRKLDS-1676: pkg/cmd: Add –kubeconfig and –namespace flag #385
• WRKLDS-1676: Delete unused pkg/serviceaccounts #381
• OCPBUGS-52193: legacy image pull secret rollback controller #380
• OCPBUGS-54695: Empty proxy variables are causing issues during the build #373
• Full changelog

openshift-state-metrics

• OCPBUGS-48747: Dedup *_status metrics for Routes #120
• OCPBUGS-57771: Updating openshift-state-metrics-container image to be consistent with ART for 4.20 #125
• ART-13079: append .0 to go.mod version #121
• Full changelog

openstack-cluster-api-controllers

• Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #369
• OCPBUGS-57559: Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.20 #368
• Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #367
• OWNERS: Update team osasinfra #363
• Full changelog

openstack-machine-api-provider

• OCPBUGS-57823: Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.20 #135
• NO-JIRA: OWNERS: Update team osasinfra #133
• NO-JIRA: Unignore generated files in the vendor directory #134
• Full changelog

openstack-resource-controller

• NO-JIRA: Update OWNERS_ALIASES #21
• OCPBUGS-57814: Updating openstack-resource-controller-container image to be consistent with ART for 4.20 #19
• NO-JIRA: Merge https://github.com/k-orc/openstack-resource-controller:release-1.0 into main #18
• NO-JIRA: Merge from upstream #17
• NO-JIRA: Merge https://github.com/k-orc/openstack-resource-controller:release-1.0 into main #16
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• NO-ISSUE: Synchronize From Upstream Repositories #1044
• NO-ISSUE: Synchronize From Upstream Repositories #1041
• NO-ISSUE: Synchronize From Upstream Repositories #1039
• NO-ISSUE: Synchronize From Upstream Repositories #1038
• NO-ISSUE: Synchronize From Upstream Repositories #1035
• OCPBUGS-58275: Fix networkpolicy filter for microshift manifests #1031
• NO-ISSUE: Synchronize From Upstream Repositories #1029
• OCPBUGS-57554: Updating ose-operator-framework-tools-container image to be consistent with ART for 4.20 #1026
• OCPBUGS-57595: Updating operator-registry-container image to be consistent with ART for 4.20 #1028
• OCPBUGS-57566: Updating operator-lifecycle-manager-container image to be consistent with ART for 4.20 #1027
• NO-ISSUE: Synchronize From Upstream Repositories #1024
• NO-ISSUE: Synchronize From Upstream Repositories #1016
• OCPBUGS-43966, OCPBUGS-57222: Synchronize From Upstream Repositories #1014
• NO-ISSUE: Synchronize From Upstream Repositories #1013
• OCPBUGS-56467: Synchronize From Upstream Repositories #1005
• OPRUN-3903, OPRUN-3906, OPRUN-3923, OPRUN-3926: Add NetworkPolicy support to OLMv0 components #1008
• NO-ISSUE: Synchronize From Upstream Repositories #1003
• NO-ISSUE: Synchronize From Upstream Repositories #1002
• NO-ISSUE: Synchronize From Upstream Repositories #1000
• NO-ISSUE: Synchronize From Upstream Repositories #997
• OCPBUGS-53161, OPRUN-3880: Synchronize From Upstream Repositories #996
• Full changelog

operator-marketplace

• OPRUN-3981: Upgrade Go from 1.23 to 1.24.3 and k8s deps to 1.33 for release 4.20 #647
• OPRUN-3981: Update dockerfile to use go 1.24 and OCP image 4.20 #645
• OPRUN-3902: Add static NetworkPolicy for marketplace-operator #644
• NO-ISSUE: Add readonlyRootFilesystem #634
• OCPBUGS-57711: Updating marketplace-operator-container image to be consistent with ART for 4.20 #641
• NO-ISSUE: (cleanup): Update Owner Alias - remove inactive maintainers #631
• NO-JIRA: OWNERS: Add camilamacedo86 and tmshort as approvers #632
• NO-ISSUE: Bump github.com/operator-framework/api from 0.30.0 to 0.31.0 #627
• NO-ISSUE: (CI) - Add check to avoid we upgrade by mistake the go vers… #625
• NO-ISSUE: Add dependabot k8s and go library groupings #626
• NO-ISSUE: Bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 #620
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-59248: DownStream Merge [07-17-2025] #2676
• OCPBUGS-57578: Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.20 #2640
• Full changelog

powervs-block-csi-driver

• MULTIARCH-5572: Rebase ibm-powervs-block-csi-driver with upstream for go toolchain issue with ose builds #100
• OCPBUGS-57598: Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.20 #98
• MULTIARCH-5572: Rebase ibm-powervs-block-csi-driver with upstream #99
• Full changelog

powervs-block-csi-driver-operator

• STOR-2394: Bump all deps for 4.20 #85
• OCPBUGS-57699: Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.20 #84
• Full changelog

powervs-cloud-controller-manager

• OCPBUGS-57857: Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART for 4.20 #86
• Full changelog

powervs-machine-controllers

• NO-JIRA: Bump machine-api-operator to pull in authoritativeAPI fix #120
• OCPBUGS-57860: Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.20 #119
• NO-ISSUE: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #118
• Full changelog

prom-label-proxy

• OCPBUGS-57850: Updating prom-label-proxy-container image to be consistent with ART for 4.20 #383
• NO-JIRA: [bot] Bump openshift/prom-label-proxy to v0.11.1 #379
• Full changelog

prometheus

• MON-4300: update prometheus to 3.5 #260
• OCPBUGS-39089: Clarify prometheus pod NFS warning message #243
• OCPBUGS-57729: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.20 #259
• MON-4245: chore(image): reduce binary size by excluding unused SD deps #251
• MON-4251: update prometheus to v3.3.1 #252
• Full changelog

prometheus-alertmanager

• OCPBUGS-59400: Include go-verify-deps expected files in gitignore #106
• OCPBUGS-57770: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.20 #103
• OCPBUGS-57770: fix: inconsistency vendored dir due to Konflux migration #105
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• MON-4255: Bump openshift/prometheus-operator to v0.84.0 #333
• OCPBUGS-57881: Updating prometheus-operator-container image to be consistent with ART for 4.20 #334
• OCPBUGS-57809: Updating prometheus-config-reloader-container image to be consistent with ART for 4.20 #332
• OCPBUGS-57629: Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.20 #331
• Full changelog

prometheus-node-exporter

• OCPBUGS-57600: Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.20 #168
• Full changelog

rhel-coreos, rhel-coreos-extensions

• NO-JIRA: Add PeaceRebel (Bipin) to approvers list #1812
• COS-3418: add kola-denylist for skipping kola tests #1836
• NO-JIRA: Add Johan-Liebert1 (Pragyan Poudyal) to owners #1766
• COS-3294: extensions/rhel-10.1: skip crun-wasm dependency due to missing repo #1825
• OCPEDGE-1706: [TNF] OCP Two Node with Fencing symlink begone! #1826
• COS-3294: extensions/rhel-10.1: drop kernel-rt-kvm package from RHEL 10 builds #1824
• Merge #1823
• NO-JIRA: faq: add info about querying rpmdb and extensions #1820
• NO-JIRA: bump verison to 4.20 #1804
• NO-JIRA: c9s/c10s repos: use basearch var for extras repo #1819
• NO-JIRA: README.md: add Mermaid diagram #1816
• NO-JIRA: tree: delete base compose files, rework README #1811
• NO-JIRA: Remove kernel-rt-kvm for cs9 and cs10 #1814
• NO-JIRA: tests: fix RHEL 10.1 handling in kernel replace test #1813
• Full changelog

route-controller-manager

• OCPBUGS-59575: Update all dependencies #63
• OCPBUGS-57616: Updating ose-route-controller-manager-container image to be consistent with ART for 4.20 #62
• Full changelog

telemeter

• OCPBUGS-57537: Updating telemeter-container image to be consistent with ART for 4.20 #563
• ART-13079: append .0 to go.mod version #559
• OCPBUGS-56425: Accept and discard metadata requests over remote write #558
• NO-JIRA: README.md: fix command to create an auth token #557
• Full changelog

tests

• OCPNODE-3004: Accept ErrImagePull for non-existent image volume test. #30027
• OCPNODE-3454: OCPFeatureGate:SigstoreImageVerification update test on v1 (Cluster)ImagePolicy #29973
• CNTRLPLANE-945: Add tests for ExternalOIDC and ExternalOIDCWithUIDAndExtraClaimMappings features #29917
• OCPNODE-3004: Add ImageVolume e2e tests #30015
• OCPBUGS-59750: Move the legacy container failures #30017
• OPRUN-3768: Add OLMv1 Single/OwnNamespace tests #29998
• OCPBUGS-55238: spyglass: hide disruption events for localhost #29710
• API-1802: chart template: show cert rotation events #29279
• NO-ISSUE: Automated - Update synthetic test data #29802
• OTA-1580: Add basic test for oc adm upgrade status CLI #29954
• NO-JIRA: Skip cert collection tests on hypershift #28937
• OCPBUGS-59555: Add ubi10 images to image-ecosystem #30001
• OPRUN-3965: Enable OTE for Operator Controller (OLMv1) #29949
• NO-JIRA: fix: nil pointer reference in pod count #30002
• NO-JIRA: oc idle: Increase timeout of endpointslice status check #29994
• CNTRLPLANE-371: Update to Kubernetes v1.33.2 #29709
• MULTIARCH-5390: Reapply “Merge pull request #29808 from Prashanth684/4552-cvo-test” #29967
• Revert “Revert “Revert “trt-2163: return error”“” #30000
• OCPEDGE-1983: [TNF] Fix test suite filtering to include Disrupted tagged tests #29996
• OCPBUGS-59203: OCPBUGS-57524: Improve MCN test stability #29981
• OCPBUGS-59159: Adjust DNS success rate to 98.0% for SNO upgrade test. #29978
• MON-4288: register CMO tests extension #29974
• OCPBUGS-58354: disruptioninclusterapiserver: bump timeout to 10 mins #29970
• Revert “Revert “trt-2163: return error”” #29964
• OCPBUGS-59372: revert: remove openshift/two-node suite from tna tests #29991
• Revert “CNF-17748: Add a comparing between static entry test” #29993
• NO-JIRA: Improve performance of run-resourcewatch #29955
• NO-JIRA: OWNERS_ALIASES: Update OTA members / team lead #29953
• MON-4287: chore(test/extended/prometheus): bump the series limit of total series sent via telemetry from each cluster #29975
• MCO-1739: Add MCO’s OTE tests to origin #29922
• MCO-1797: Fix transient errors while checking status of PIS #29962
• OCPBUGS-59157: Ensure CSI tests are defined before OTE initialization #29979
• OCPBUGS-58895: bump watch count limits #29972
• OCPBUGS-58449: replace Php 8.1 ubi9 with Php 8.2 ubi9 in origin #29963
• TRT-2097: Fix a few things in suite selection #29971
• TRT-2097, TRT-2098: Migrate origin to use OTE, and implement extension-derived suites #29888
• NO-JIRA: test/extended/operators: skip wildcard certificate #29956
• Revert “trt-2163: return error” #29959
• TRT-2172: Generate autodl artifact to study e2e tests correlated with high CPU #29932
• MCO-1741: Pass output to tests results in skipped OTE cases #29951
• WRKLDS-1716: test/extended/cli: Test oc create token #29895
• trt-2163: return error #29946
• OPRUN-3973: (olmv1) Refractor tests for better readability #29840
• NO-JIRA: upkeep: change to use image shell image #29948
• TRT-2068: additional defaults for MicroShift #29904
• CNF-17748: Add a comparing between static entry test #29782
• OKD-267: Support RFC339 based timestamp layout for reboot tests #29942
• OCPBUGS-58036: Fix MCN test on agent compact FIPS jobs #29938
• OCPBUGS-57632: Revert “Merge pull request #29808 from Prashanth684/4552-cvo-test” #29926
• OCPBUGS-58132: OCPFeatureGate:SigstoreImageVerification use multi arch image for testing #29915
• OPNET-582, OPNET-585: Add monitor test for on-prem keepalived #29387
• CNF-12146: Add communication matrix test under networking #29633
• OCPEDGE-1947: fix: resolve timeout problems during some arbiter tests #29939
• NO-JIRA: OVNK BGP: use a config map to allocate EIPs and UDN subnets #29901
• OCPBUGS-57517: Remove Python 3.8-ubi8 from Origin #29921
• CORENET-5668: Update IPsec e2e test to validate NAT-T encapsulation option #29563
• NO-JIRA: We should always run tests where we have no opinion on their gate #29828
• OCPBUGS-57892: Updating openshift-enterprise-tests-container image to be consistent with ART for 4.20 #29931
• OCPBUGS-57426: Boot image controller should correctly handle marketplace boot images #29919
• OCPBUGS-57397: properties should wrap around property #29914
• NO-JIRA: auditloganalyzer: update test name, remove duplicated test #29930
• TRT-2165: Include select pending alert intervals in spyglass #29925
• OCPBUGS-57294: Fix e2e-aws-ovn-image-ecosystem test - Part 2 - remove old nodejs 18,ruby 3.1 ubi9 #29905
• OCPBUGS-57421: Add sustaining engineers to owners on image ecosystem #29916
• OCPNODE-3330: SigstoreImageVerification uses client-go to create test CRs #29896
• MULTIARCH-5391: Add new featuregate test to check if desired.Architecture is set as intended #29808
• OCPBUGS-57169: Fix failed tests of e2e-aws-ovn-tls-13 #29872
• OCPBUGS-50701: Add test case for checking EgressFirewall DNS names in caps #29898
• MCO-1652: Add MCO disruptive suite #29776
• OCPBUGS-56786: RouteExternalCertificate : Add fix for None platform type #29868
• OCPBUGS-56512: updates ruby to version 3.3 #29832
• OCPBUGS-57049: TLS registry: refactor testcase annotations #29327
• OCPBUGS-49441: Use different certificates for gRPC interoperability test routes #29757
• OCPBUGS-56436: Bump 4.20 1.32.5 #29889
• TRT-1854: set network for MicroShift to OVNKubernetes #29887
• add smg247 as root approver #29860
• OCPBUGS-56037: Stabilize custom MCP cleanup on MCN tests #29874
• Revert “OCPNODE-2849: Add testcase to verify removal of cgroupv1 in OCP 4.19” #29886
• OCPBUGS-56698: Skip tests modifying cluster/network.config when it is not permitted #29859
• OCPBUGS-54412: Do not retry extension-sourced tests #29867
• OCPBUGS-35855: Add dry-run server test for imagestreamtag #29834
• OCPBUGS-56933: fix deployment rollout wait to wait for desired replicas #29876
• SPLAT-2231: Updated tests to work with hybrid environments #29827
• MCO-1722: Handle check for Disconnnected Clusters for PIS Testing using curl #29870
• OCPBUGS-55830: Only update boot disks during GCP boot image updates tests #29869
• Add oceanc80 to olm owners #29864
• NO-JIRA: OVNK BGP: workaround OCPBUGS-56488 #29853
• OCPBUGS-56743: Poll project deletion to fix flaky behavior #29850
• OCPEDGE-1922: feat: rename and move arbiter tests #29846
• CNTRLPLANE-353: Add test which verifes that only short duration tests are present #29629
• NO-JIRA: ovn, virt, skip ipv6 for secondaries #29858
• OCPBUGS-55721, OCPBUGS-55832: Fix RouteExternalCertificate tests for few other on-prem jobs #29764
• ODC-7790: Remove ODODownloadsSyncDegraded #29835
• NO-JIRA: router: Rename MarshalPrivateKeyToDERFormat to MarshalPrivateKeyToPEMString #29855
• NO-JIRA: OVNK: ignore stderr when running commands #29845
• NO-JIRA: OVNK BGP: set VRF-Lite timeout #29844
• MULTIARCH-5390: tagimportmode: Do not skip tests if the import mode is the same as the import mode of the cluster #29801
• OCPBUGS-56381: feat: update test to account for two node fencing #29807
• MCO-1652: Add new MCO disruptive suite #29800
• NE-2031: Enhancing the gateway controller test cases with two more function #29806
• OCPBUGS-55394: Handle Metal CI test cases for PIS #29745
• NO-JIRA: ovn, virt: Support proxy when downloading virtctl #29824
• OCPBUGS-56196: Check to see if SamplesOperator managementState is Removed #29817
• NO-JIRA: TLS registry update #29787
• OCPNODE-3138: Add zstd:chunked image test #29713
• OCPNODE-2849: Add testcase to verify removal of cgroupv1 in OCP 4.19 #29640
• OCPBUGS-56047: OLMv1: Update test bundles [main/release-4.20] #29820
• NO-JIRA: tls/violations: add sjenning to OWNERS #29819
• NO-JIRA: ovnk, virt: Filter out ipv6 LLA #29816
• NO-JIRA: Fix egressIP advertisements tests flake #29803
• MCO-1615: Mco node degraded mcn condition #29684
• NO-JIRA: Report back source for openshift-tests-extension #29733
• TRT-2061: throttle monitor startup refactor #29637
• OCPBUGS-55317: Skip GatewayAPIController tests on clusters without OLM capabilities #29784
• CORS-3989: set proxy for http transport in router and imageregistry cases #29759
• NO-JIRA: Revert: NO-JIRA: support skipping [OCP]FeatureGate… #29796
• OCPBUGS-55211: use regular user to create httproute #29697
• Revert “Revert “TRT-2049: check for any watch requests”” #29723
• CORENET-5854: networking: add VRF-Lite test cases #29669
• OCPEDGE-1678: Fix failed etcd test on arbiter ci run #29694
• NO-JIRA: update networking owners #29786
• NO-JIRA: increase api client timeout to match those allowed by kube-apiserver #29761
• NO-JIRA: support skipping [OCP]FeatureGate tests #29760
• OCPBUGS-55384: OCPBUGS-55968: Fix PIS tests on SNO & Enable applicable MCN & PIS tests on SNO #29785
• OCPNODE-2315: Add nested container test #29781
• OCPBUGS-55994: Do not set the MTU when using NetworkAttachementDefinition #29768
• NO-JIRA: Test load balancer metrics #29675
• NO-JIRA: Fix bearer token exposure in exit condition as well #29575
• NO-ISSUE: Automated - Update synthetic test data #29716
• TRT-2106: Fix race in MCN test cleanup #29775
• OCPBUGS-55785: bump limits #29778
• Revert “OCPNODE-2315: Add nested container test” #29779
• CNTRLPLANE-371: Update etcd test data for k8s 1.33 release (missing data) #29773
• OCPBUGS-55712: (olmv1 tests) Use exponential backoffs for verifyAPIEndpoints #29756
• OCPBUGS-55945: Bump main 1.32.4 #29772
• CORENET-5875, CORENET-5876, OCPBUGS-55910: Add EgressIP and L2 UDN route advertisements tests #29727
• OCPNODE-2315: Add nested container test #29594
• NO-JIRA: faultyloadbalancer test: pass instead of skip #29753
• OCPBUGS-55902: pkg/monitortestlibrary/allowedalerts: Ignore KubeJobFailingSRE for now #29747
• NO-ISSUE: OLMv1: Preflight: Relax checking of error message #29766
• CNTRLPLANE-371: Update etcd test data for k8s 1.33 release #29699
• OCPBUGS-55785: bump limits #29763
• OCPNODE-2999: Add SigstoreImageVerification e2e tests #29652
• OKD-243: Skip GatewayAPIController tests for OKD #29742
• Full changelog

thanos

• OCPBUGS-57564: Updating ose-thanos-container image to be consistent with ART for 4.20 #162
• Full changelog

vsphere-cloud-controller-manager

• NO-JIRA: Update OWNERS #96
• OCPCLOUD-2933: Rebase onto main #95
• OCPBUGS-57574: Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART for 4.20 #92
• OCPBUGS-56720: gitignore doesn’t ignore certain files in vendor/ #91
• Full changelog

vsphere-cluster-api-controllers

• NO-JIRA: Update OWNERS #63
• OCPCLOUD-2921: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.13.0 (7cc3899) into master #58
• NO-JIRA: Do not gitignore files inside vendor #57
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• STOR-2404: Rebase to upstream v3.5.0 for OCP 4.20 #147
• OCPBUGS-57582: Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.20 #146
• OCPBUGS-57570: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.20 #145
• OCPBUGS-55020: UPSTREAM: 3262: Fix panic on DeletedFinalStateUnknown #142
• Full changelog

vsphere-csi-driver-operator

• STOR-2330: Add labels to subscribe vSphere CSI driver controller and webhook to NPs #307
• OCPBUGS-57708: Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.20 #306
• Full changelog

vsphere-problem-detector

• OCPBUGS-57656: Updating ose-vsphere-problem-detector-container image to be consistent with ART for 4.20 #185
• OCPBUGS-53217: replace operator client #182
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Package List

• cri-o-1.33.2-11.rhaos4.20.gitca9816c.el9
• kernel-5.14.0-570.32.1.el9_6
• openshift-kubelet-4.20.0-202507300443.p0.gc42ba29.assembly.stream.el9
• systemd-252-51.el9_6.1

Full list (568 packages)

• NetworkManager-1:1.52.0-4.el9_6
• NetworkManager-cloud-setup-1:1.52.0-4.el9_6
• NetworkManager-libnm-1:1.52.0-4.el9_6
• NetworkManager-ovs-1:1.52.0-4.el9_6
• NetworkManager-team-1:1.52.0-4.el9_6
• NetworkManager-tui-1:1.52.0-4.el9_6
• WALinuxAgent-udev-2.7.0.6-11.el9
• aardvark-dns-2:1.14.0-1.el9
• acl-2.3.1-4.el9
• adcli-0.9.2-1.el9
• afterburn-5.7.0-1.el9
• afterburn-dracut-5.7.0-1.el9
• alternatives-1.24-2.el9
• attr-2.5.1-3.el9
• audit-3.1.5-4.el9
• audit-libs-3.1.5-4.el9
• authselect-1.2.6-3.el9
• authselect-libs-1.2.6-3.el9
• avahi-libs-0.8-22.el9_6.1
• basesystem-11-13.el9
• bash-5.1.8-9.el9
• bash-completion-1:2.11-5.el9
• bind-libs-32:9.16.23-31.el9_6
• bind-license-32:9.16.23-31.el9_6
• bind-utils-32:9.16.23-31.el9_6
• binutils-2.35.2-63.el9
• binutils-gold-2.35.2-63.el9
• bootc-1.1.6-3.el9_6
• bootupd-0.2.27-4.el9_6
• bsdtar-3.5.3-5.el9_6
• bubblewrap-0.4.1-8.el9_5
• bzip2-1.0.8-10.el9_5
• bzip2-libs-1.0.8-10.el9_5
• c-ares-1.19.1-2.el9_4
• ca-certificates-2024.2.69_v8.0.303-91.4.el9_4
• checkpolicy-3.6-1.el9
• chrony-4.6.1-1.el9
• cifs-utils-7.1-2.el9
• clevis-21-208.el9
• clevis-dracut-21-208.el9
• clevis-luks-21-208.el9
• clevis-systemd-21-208.el9
• cloud-utils-growpart-0.33-1.el9
• composefs-1.0.8-1.el9
• composefs-libs-1.0.8-1.el9
• conmon-3:2.1.12-1.el9
• conmon-rs-0.6.6-0.rhaos4.18.el9.1
• conntrack-tools-1.4.7-4.el9_5
• console-login-helper-messages-0.21.3-1.el9
• console-login-helper-messages-issuegen-0.21.3-1.el9
• console-login-helper-messages-profile-0.21.3-1.el9
• container-selinux-4:2.237.0-1.el9_6
• containernetworking-plugins-1:1.6.2-2.el9_6
• containers-common-2:1-117.el9_6
• coreos-installer-0.23.0-1.el9
• coreos-installer-bootinfra-0.23.0-1.el9
• coreutils-8.32-39.el9
• coreutils-common-8.32-39.el9
• cpio-2.13-16.el9
• cracklib-2.9.6-27.el9
• cracklib-dicts-2.9.6-27.el9
• cri-o-1.33.2-11.rhaos4.20.gitca9816c.el9
• cri-tools-1.33.0-1.el9
• criu-3.19-1.el9
• criu-libs-3.19-1.el9
• crun-1.21-1.el9_6
• crypto-policies-20250128-1.git5269e22.el9
• crypto-policies-scripts-20250128-1.git5269e22.el9
• cryptsetup-2.7.2-3.el9_5
• cryptsetup-libs-2.7.2-3.el9_5
• curl-7.76.1-31.el9
• cyrus-sasl-gssapi-2.1.27-21.el9
• cyrus-sasl-lib-2.1.27-21.el9
• dbus-1:1.12.20-8.el9
• dbus-broker-28-7.el9
• dbus-common-1:1.12.20-8.el9
• dbus-libs-1:1.12.20-8.el9
• dbus-tools-1:1.12.20-8.el9
• device-mapper-9:1.02.202-6.el9
• device-mapper-event-9:1.02.202-6.el9
• device-mapper-event-libs-9:1.02.202-6.el9
• device-mapper-libs-9:1.02.202-6.el9
• device-mapper-multipath-0.8.7-35.el9_6.1
• device-mapper-multipath-libs-0.8.7-35.el9_6.1
• device-mapper-persistent-data-1.1.0-1.el9
• diffutils-3.7-12.el9
• dmidecode-1:3.6-1.el9
• dnf-4.14.0-25.el9
• dnf-data-4.14.0-25.el9
• dnsmasq-2.85-16.el9_4
• dosfstools-4.2-3.el9
• dracut-057-88.git20250311.el9_6
• dracut-network-057-88.git20250311.el9_6
• dracut-squash-057-88.git20250311.el9_6
• e2fsprogs-1.46.5-7.el9
• e2fsprogs-libs-1.46.5-7.el9
• efi-filesystem-6-2.el9_0
• efibootmgr-16-12.el9
• efivar-libs-38-3.el9
• elfutils-debuginfod-client-0.192-6.el9_6
• elfutils-default-yama-scope-0.192-6.el9_6
• elfutils-libelf-0.192-6.el9_6
• elfutils-libs-0.192-6.el9_6
• ethtool-2:6.11-1.el9
• expat-2.5.0-5.el9_6
• file-5.39-16.el9
• file-libs-5.39-16.el9
• filesystem-3.16-5.el9
• findutils-1:4.8.0-7.el9
• firewalld-filesystem-1.3.4-9.el9_5
• flashrom-1.2-10.el9
• fstrm-0.6.1-3.el9
• fuse-2.9.9-17.el9
• fuse-common-3.10.2-9.el9
• fuse-libs-2.9.9-17.el9
• fuse-overlayfs-1.14-1.el9
• fuse3-3.10.2-9.el9
• fuse3-libs-3.10.2-9.el9
• fwupd-1.9.26-1.el9
• fwupd-plugin-flashrom-1.9.26-1.el9
• gawk-5.1.0-6.el9
• gawk-all-langpacks-5.1.0-6.el9
• gdbm-libs-1:1.23-1.el9
• gdisk-1.0.7-5.el9
• geolite2-city-20191217-6.el9
• geolite2-country-20191217-6.el9
• gettext-0.21-8.el9
• gettext-libs-0.21-8.el9
• git-core-2.47.3-1.el9_6
• glib2-2.68.4-16.el9_6.2
• glibc-2.34-168.el9_6.20
• glibc-common-2.34-168.el9_6.20
• glibc-gconv-extra-2.34-168.el9_6.20
• glibc-minimal-langpack-2.34-168.el9_6.20
• glusterfs-6.0-57.4.el9
• glusterfs-client-xlators-6.0-57.4.el9
• glusterfs-fuse-6.0-57.4.el9
• glusterfs-libs-6.0-57.4.el9
• gmp-1:6.2.0-13.el9
• gnupg2-2.3.3-4.el9
• gnutls-3.8.3-6.el9
• gobject-introspection-1.68.0-11.el9
• gpgme-1.15.1-6.el9
• grep-3.6-5.el9
• groff-base-1.22.4-10.el9
• grub2-common-1:2.06-104.el9_6
• grub2-efi-x64-1:2.06-104.el9_6
• grub2-pc-1:2.06-104.el9_6
• grub2-pc-modules-1:2.06-104.el9_6
• grub2-tools-1:2.06-104.el9_6
• grub2-tools-minimal-1:2.06-104.el9_6
• gssproxy-0.8.4-7.el9
• gzip-1.12-1.el9
• hostname-3.23-6.el9
• hwdata-0.348-9.18.el9
• ignition-2.21.0-4.rhaos4.19.el9
• ignition-grub-2.21.0-4.rhaos4.19.el9
• ima-evm-utils-1.5-3.el9
• info-6.7-15.el9
• inih-49-6.el9
• initscripts-service-10.11.8-4.el9
• ipcalc-1.0.0-5.el9
• iproute-6.11.0-1.el9
• iproute-tc-6.11.0-1.el9
• iptables-libs-1.8.10-11.el9_5
• iptables-nft-1.8.10-11.el9_5
• iputils-20210202-11.el9_6.1
• irqbalance-2:1.9.4-2.el9
• iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9
• iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9
• isns-utils-libs-0.101-4.el9
• jansson-2.14-1.el9
• jose-14-1.el9
• jq-1.6-17.el9_6.2
• json-c-0.14-11.el9
• json-glib-1.6.6-1.el9
• kbd-2.4.0-11.el9
• kbd-legacy-2.4.0-11.el9
• kbd-misc-2.4.0-11.el9
• kernel-5.14.0-570.32.1.el9_6
• kernel-core-5.14.0-570.32.1.el9_6
• kernel-modules-5.14.0-570.32.1.el9_6
• kernel-modules-core-5.14.0-570.32.1.el9_6
• kernel-modules-extra-5.14.0-570.32.1.el9_6
• kexec-tools-2.0.29-5.el9
• keyutils-1.6.3-1.el9
• keyutils-libs-1.6.3-1.el9
• kmod-28-10.el9
• kmod-libs-28-10.el9
• kpartx-0.8.7-35.el9_6.1
• krb5-libs-1.21.1-8.el9_6
• less-590-5.el9
• libacl-2.3.1-4.el9
• libaio-0.3.111-13.el9
• libarchive-3.5.3-5.el9_6
• libassuan-2.5.5-3.el9
• libattr-2.5.1-3.el9
• libbasicobjects-0.1.1-53.el9
• libblkid-2.37.4-21.el9
• libbpf-2:1.5.0-1.el9
• libbrotli-1.0.9-7.el9_5
• libcap-2.48-9.el9_2
• libcap-ng-0.8.2-7.el9
• libcbor-0.7.0-5.el9
• libcollection-0.7.0-53.el9
• libcom_err-1.46.5-7.el9
• libcomps-0.1.18-1.el9
• libcurl-7.76.1-31.el9
• libdaemon-0.14-23.el9
• libdb-5.3.28-57.el9_6
• libdhash-0.5.0-53.el9
• libdnf-0.69.0-13.el9
• libdnf-plugin-subscription-manager-1.29.45.1-1.el9_6
• libdrm-2.4.123-2.el9
• libeconf-0.4.1-4.el9
• libedit-3.1-38.20210216cvs.el9
• libev-4.33-6.el9
• libevent-2.1.12-8.el9_4
• libfdisk-2.37.4-21.el9
• libffi-3.4.2-8.el9
• libfido2-1.13.0-2.el9
• libgcc-11.5.0-5.el9_5
• libgcrypt-1.10.0-11.el9
• libgomp-11.5.0-5.el9_5
• libgpg-error-1.42-5.el9
• libgudev-237-1.el9
• libgusb-0.3.8-2.el9
• libibverbs-54.0-1.el9
• libicu-67.1-10.el9_6
• libidn2-2.3.0-7.el9
• libini_config-1.3.1-53.el9
• libipa_hbac-2.9.6-4.el9_6.2
• libjcat-0.1.6-3.el9
• libjose-14-1.el9
• libkcapi-1.4.0-2.el9
• libkcapi-hmaccalc-1.4.0-2.el9
• libksba-1.5.1-7.el9
• libldb-4.21.3-7.el9_6
• libluksmeta-9-12.el9
• libmaxminddb-1.5.2-4.el9
• libmicrohttpd-1:0.9.72-5.el9
• libmnl-1.0.4-16.el9_4
• libmodulemd-2.13.0-2.el9
• libmount-2.37.4-21.el9
• libmspack-0.10.1-0.7.alpha.el9
• libndp-1.9-1.el9
• libnet-1.2-7.el9
• libnetfilter_conntrack-1.0.9-1.el9
• libnetfilter_cthelper-1.0.0-22.el9
• libnetfilter_cttimeout-1.0.0-19.el9
• libnetfilter_queue-1.0.5-1.el9
• libnfnetlink-1.0.1-23.el9_5
• libnfsidmap-1:2.5.4-34.el9
• libnftnl-1.2.6-4.el9_4
• libnghttp2-1.43.0-6.el9
• libnl3-3.11.0-1.el9
• libnl3-cli-3.11.0-1.el9
• libnvme-1.11.1-1.el9
• libpath_utils-0.2.1-53.el9
• libpcap-14:1.10.0-4.el9
• libpciaccess-0.16-7.el9
• libpkgconf-1.7.3-10.el9
• libpsl-0.21.1-5.el9
• libpwquality-1.4.4-8.el9
• libref_array-0.1.5-53.el9
• librepo-1.14.5-2.el9
• libreport-filesystem-2.15.2-6.el9
• librhsm-0.0.3-9.el9
• libseccomp-2.5.2-2.el9
• libselinux-3.6-3.el9
• libselinux-utils-3.6-3.el9
• libsemanage-3.6-5.el9_6
• libsepol-3.6-2.el9
• libsigsegv-2.13-4.el9
• libslirp-4.4.0-8.el9
• libsmartcols-2.37.4-21.el9
• libsmbclient-4.21.3-7.el9_6
• libsolv-0.7.24-3.el9
• libss-1.46.5-7.el9
• libssh-0.10.4-13.el9
• libssh-config-0.10.4-13.el9
• libsss_certmap-2.9.6-4.el9_6.2
• libsss_idmap-2.9.6-4.el9_6.2
• libsss_nss_idmap-2.9.6-4.el9_6.2
• libsss_sudo-2.9.6-4.el9_6.2
• libstdc++-11.5.0-5.el9_5
• libtalloc-2.4.2-1.el9
• libtasn1-4.16.0-9.el9
• libtdb-1.4.12-1.el9
• libteam-1.31-16.el9_1
• libtevent-0.16.1-1.el9
• libtirpc-1.3.3-9.el9
• libtool-ltdl-2.4.6-46.el9
• libunistring-0.9.10-15.el9
• liburing-2.5-1.el9
• libusbx-1.0.26-1.el9
• libuser-0.63-16.el9
• libutempter-1.2.1-6.el9
• libuuid-2.37.4-21.el9
• libuv-1:1.42.0-2.el9_4
• libverto-0.3.2-3.el9
• libverto-libev-0.3.2-3.el9
• libwbclient-4.21.3-7.el9_6
• libxcrypt-4.4.18-3.el9
• libxcrypt-compat-4.4.18-3.el9
• libxml2-2.9.13-10.el9_6
• libxmlb-0.3.10-1.el9
• libxslt-1.1.34-13.el9_6
• libyaml-0.2.5-7.el9
• libzstd-1.5.5-1.el9
• linux-firmware-20250604-151.2.el9_6
• linux-firmware-whence-20250604-151.2.el9_6
• lmdb-libs-0.9.29-3.el9
• logrotate-3.18.0-9.el9
• lsof-4.94.0-3.el9
• lua-libs-5.4.4-4.el9
• luksmeta-9-12.el9
• lvm2-9:2.03.28-6.el9
• lvm2-libs-9:2.03.28-6.el9
• lz4-libs-1.9.3-5.el9
• lzo-2.10-7.el9
• mdadm-4.3-4.el9_5
• microcode_ctl-4:20250211-1.20250512.1.el9_6
• mokutil-2:0.6.0-4.el9
• mpfr-4.1.0-7.el9
• nano-5.6.1-7.el9
• ncurses-6.2-10.20210508.el9
• ncurses-base-6.2-10.20210508.el9
• ncurses-libs-6.2-10.20210508.el9
• net-tools-2.0-0.64.20160912git.el9
• netavark-2:1.14.1-1.el9_6
• nettle-3.10.1-1.el9
• newt-0.52.21-11.el9
• nfs-utils-1:2.5.4-34.el9
• nftables-1:1.0.9-3.el9
• nmap-ncat-3:7.92-3.el9
• nmstate-2.2.45-1.el9_6
• npth-1.6-8.el9
• nss-altfiles-2.18.1-20.el9
• numactl-libs-2.0.19-1.el9
• nvme-cli-2.11-5.el9
• oniguruma-6.9.6-1.el9.6
• open-vm-tools-12.5.0-1.el9
• openldap-2.6.8-4.el9
• openshift-clients-4.20.0-202507220613.p0.gea45cd5.assembly.stream.el9
• openshift-kubelet-4.20.0-202507300443.p0.gc42ba29.assembly.stream.el9
• openssh-8.7p1-45.el9
• openssh-clients-8.7p1-45.el9
• openssh-server-8.7p1-45.el9
• openssl-1:3.2.2-6.el9_5.1
• openssl-fips-provider-3.0.7-6.el9_5
• openssl-fips-provider-so-3.0.7-6.el9_5
• openssl-libs-1:3.2.2-6.el9_5.1
• openvswitch-selinux-extra-policy-1.0-39.el9fdp
• openvswitch3.5-3.5.1-33.el9fdp
• os-prober-1.77-12.el9_5
• ose-aws-ecr-image-credential-provider-4.19.0-202506111541.p0.g425c1c5.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.20.0-202507171059.p0.gd469d04.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.20.0-202507221915.p0.ge217ae2.assembly.stream.el9
• ostree-2025.1-1.el9
• ostree-grub2-2025.1-1.el9
• ostree-libs-2025.1-1.el9
• p11-kit-0.25.3-3.el9_5
• p11-kit-trust-0.25.3-3.el9_5
• pam-1.5.1-25.el9_6
• passt-0^20250217.ga1e48a0-9.el9_6
• passt-selinux-0^20250217.ga1e48a0-9.el9_6
• passwd-0.80-12.el9
• pciutils-3.7.0-7.el9
• pciutils-libs-3.7.0-7.el9
• pcre-8.44-4.el9
• pcre2-10.40-6.el9
• pcre2-syntax-10.40-6.el9
• perl-AutoLoader-5.74-481.1.el9_6
• perl-B-1.80-481.1.el9_6
• perl-Carp-1.50-460.el9
• perl-Class-Struct-0.66-481.1.el9_6
• perl-Data-Dumper-2.174-462.el9
• perl-Digest-1.19-4.el9
• perl-Digest-MD5-2.58-4.el9
• perl-Encode-4:3.08-462.el9
• perl-Errno-1.30-481.1.el9_6
• perl-Exporter-5.74-461.el9
• perl-Fcntl-1.13-481.1.el9_6
• perl-File-Basename-2.85-481.1.el9_6
• perl-File-Path-2.18-4.el9
• perl-File-Temp-1:0.231.100-4.el9
• perl-File-stat-1.09-481.1.el9_6
• perl-FileHandle-2.03-481.1.el9_6
• perl-Getopt-Long-1:2.52-4.el9
• perl-Getopt-Std-1.12-481.1.el9_6
• perl-HTTP-Tiny-0.076-462.el9
• perl-IO-1.43-481.1.el9_6
• perl-IO-Socket-IP-0.41-5.el9
• perl-IO-Socket-SSL-2.073-2.el9
• perl-IPC-Open3-1.21-481.1.el9_6
• perl-MIME-Base64-3.16-4.el9
• perl-Mozilla-CA-20200520-6.el9
• perl-NDBM_File-1.15-481.1.el9_6
• perl-Net-SSLeay-1.94-1.el9
• perl-POSIX-1.94-481.1.el9_6
• perl-PathTools-3.78-461.el9
• perl-Pod-Escapes-1:1.07-460.el9
• perl-Pod-Perldoc-3.28.01-461.el9
• perl-Pod-Simple-1:3.42-4.el9
• perl-Pod-Usage-4:2.01-4.el9
• perl-Scalar-List-Utils-4:1.56-462.el9
• perl-SelectSaver-1.02-481.1.el9_6
• perl-Socket-4:2.031-4.el9
• perl-Storable-1:3.21-460.el9
• perl-Symbol-1.08-481.1.el9_6
• perl-Term-ANSIColor-5.01-461.el9
• perl-Term-Cap-1.17-460.el9
• perl-Text-ParseWords-3.30-460.el9
• perl-Text-Tabs+Wrap-2013.0523-460.el9
• perl-Time-Local-2:1.300-7.el9
• perl-URI-5.09-3.el9
• perl-base-2.27-481.1.el9_6
• perl-constant-1.33-461.el9
• perl-if-0.60.800-481.1.el9_6
• perl-interpreter-4:5.32.1-481.1.el9_6
• perl-libnet-3.13-4.el9
• perl-libs-4:5.32.1-481.1.el9_6
• perl-mro-1.23-481.1.el9_6
• perl-overload-1.31-481.1.el9_6
• perl-overloading-0.02-481.1.el9_6
• perl-parent-1:0.238-460.el9
• perl-podlators-1:4.14-460.el9
• perl-subs-1.03-481.1.el9_6
• perl-vars-1.05-481.1.el9_6
• pigz-2.8-1.el9
• pkgconf-1.7.3-10.el9
• pkgconf-m4-1.7.3-10.el9
• pkgconf-pkg-config-1.7.3-10.el9
• podman-5:5.4.0-12.el9_6
• policycoreutils-3.6-2.1.el9
• policycoreutils-python-utils-3.6-2.1.el9
• polkit-0.117-13.el9
• polkit-libs-0.117-13.el9
• polkit-pkla-compat-0.1-21.el9
• popt-1.18-8.el9
• procps-ng-3.3.17-14.el9
• protobuf-c-1.3.3-13.el9
• psmisc-23.4-3.el9
• publicsuffix-list-dafsa-20210518-3.el9
• python-unversioned-command-3.9.21-2.el9_6.1
• python3-3.9.21-2.el9_6.1
• python3-audit-3.1.5-4.el9
• python3-chardet-4.0.0-5.el9
• python3-cloud-what-1.29.45.1-1.el9_6
• python3-dateutil-1:2.8.1-7.el9
• python3-dbus-1.2.18-2.el9
• python3-decorator-4.4.2-6.el9
• python3-distro-1.5.0-7.el9
• python3-dnf-4.14.0-25.el9
• python3-dnf-plugin-versionlock-4.3.0-20.el9
• python3-dnf-plugins-core-4.3.0-20.el9
• python3-gobject-base-3.40.1-6.el9
• python3-gobject-base-noarch-3.40.1-6.el9
• python3-gpg-1.15.1-6.el9
• python3-hawkey-0.69.0-13.el9
• python3-idna-2.10-7.el9_4.1
• python3-iniparse-0.4-45.el9
• python3-inotify-0.9.6-25.el9
• python3-libcomps-0.1.18-1.el9
• python3-libdnf-0.69.0-13.el9
• python3-librepo-1.14.5-2.el9
• python3-libs-3.9.21-2.el9_6.1
• python3-libselinux-3.6-3.el9
• python3-libsemanage-3.6-5.el9_6
• python3-pip-wheel-21.3.1-1.el9
• python3-policycoreutils-3.6-2.1.el9
• python3-pysocks-1.7.1-12.el9
• python3-pyyaml-5.4.1-6.el9
• python3-requests-2.25.1-9.el9
• python3-rpm-4.16.1.3-37.el9
• python3-setools-4.4.4-1.el9
• python3-setuptools-53.0.0-13.el9_6.1
• python3-setuptools-wheel-53.0.0-13.el9_6.1
• python3-six-1.15.0-9.el9
• python3-subscription-manager-rhsm-1.29.45.1-1.el9_6
• python3-systemd-234-19.el9
• python3-urllib3-1.26.5-6.el9
• qemu-guest-agent-17:9.1.0-15.el9_6.4
• quota-1:4.09-4.el9
• quota-nls-1:4.09-4.el9
• rdma-core-54.0-1.el9
• readline-8.1-4.el9
• redhat-release-9.6-0.1.el9
• redhat-release-eula-9.6-0.1.el9
• rpcbind-1.2.6-7.el9
• rpm-4.16.1.3-37.el9
• rpm-build-libs-4.16.1.3-37.el9
• rpm-libs-4.16.1.3-37.el9
• rpm-ostree-2025.6-5.el9_6
• rpm-ostree-libs-2025.6-5.el9_6
• rpm-plugin-selinux-4.16.1.3-37.el9
• rpm-plugin-systemd-inhibit-4.16.1.3-37.el9
• rpm-sign-libs-4.16.1.3-37.el9
• rsync-3.2.5-3.el9
• runc-4:1.2.4-2.el9
• samba-client-libs-4.21.3-7.el9_6
• samba-common-4.21.3-7.el9_6
• samba-common-libs-4.21.3-7.el9_6
• sed-4.8-9.el9
• selinux-policy-38.1.53-5.el9_6
• selinux-policy-targeted-38.1.53-5.el9_6
• setup-2.13.7-10.el9
• sg3_utils-1.47-10.el9
• sg3_utils-libs-1.47-10.el9
• shadow-utils-2:4.9-12.el9
• shadow-utils-subid-2:4.9-12.el9
• shared-mime-info-2.1-5.el9
• shim-x64-15.8-4.el9_3
• skopeo-2:1.18.1-2.el9_6
• slang-2.3.2-11.el9
• slirp4netns-1.3.2-1.el9
• snappy-1.1.8-8.el9
• socat-1.7.4.1-6.el9_6.1
• sqlite-libs-3.34.1-8.el9_6
• squashfs-tools-4.4-10.git1.el9
• ssh-key-dir-0.1.4-1.el9
• sssd-2.9.6-4.el9_6.2
• sssd-ad-2.9.6-4.el9_6.2
• sssd-client-2.9.6-4.el9_6.2
• sssd-common-2.9.6-4.el9_6.2
• sssd-common-pac-2.9.6-4.el9_6.2
• sssd-ipa-2.9.6-4.el9_6.2
• sssd-krb5-2.9.6-4.el9_6.2
• sssd-krb5-common-2.9.6-4.el9_6.2
• sssd-ldap-2.9.6-4.el9_6.2
• sssd-nfs-idmap-2.9.6-4.el9_6.2
• sssd-proxy-2.9.6-4.el9_6.2
• stalld-1.19.6-1.el9
• strace-6.12-1.el9
• subscription-manager-1.29.45.1-1.el9_6
• subscription-manager-rhsm-certificates-20220623-1.el9
• sudo-1.9.5p2-10.el9_6.1
• systemd-252-51.el9_6.1
• systemd-journal-remote-252-51.el9_6.1
• systemd-libs-252-51.el9_6.1
• systemd-pam-252-51.el9_6.1
• systemd-rpm-macros-252-51.el9_6.1
• systemd-udev-252-51.el9_6.1
• tar-2:1.34-7.el9
• teamd-1.31-16.el9_1
• tmux-3.2a-5.el9
• toolbox-0.1.2-1.rhaos4.19.el9
• tpm2-tools-5.2-4.el9
• tpm2-tss-3.2.3-1.el9
• tzdata-2025b-1.el9
• unbound-libs-1.16.2-19.el9_6.1
• usermode-1.114-6.el9
• userspace-rcu-0.12.1-6.el9
• util-linux-2.37.4-21.el9
• util-linux-core-2.37.4-21.el9
• vim-minimal-2:8.2.2637-22.el9_6
• virt-what-1.27-1.el9
• which-2.21-29.el9
• xfsprogs-6.4.0-5.el9
• xmlsec1-1.2.29-13.el9
• xmlsec1-openssl-1.2.29-13.el9
• xz-5.2.5-8.el9_0
• xz-libs-5.2.5-8.el9_0
• yajl-2.1.0-25.el9
• zlib-1.2.11-40.el9
• zram-generator-0.3.2-7.el9
• zstd-1.5.5-1.el9

Changed:

• cri-o 1.32.6-5.rhaos4.19.git03afa42.el9 → 1.33.2-11.rhaos4.20.gitca9816c.el9
• cri-tools 1.32.0-2.el9 → 1.33.0-1.el9
• openshift-clients 4.19.0-202506301438.p0.g298429b.assembly.stream.el9 → 4.20.0-202507220613.p0.gea45cd5.assembly.stream.el9
• openshift-kubelet 4.19.0-202507041538.p0.g38c60a5.assembly.stream.el9 → 4.20.0-202507300443.p0.gc42ba29.assembly.stream.el9
• ose-azure-acr-image-credential-provider 4.19.0-202506111541.p0.g7109d6b.assembly.stream.el9 → 4.20.0-202507171059.p0.gd469d04.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider 4.19.0-202506111541.p0.gd8d3aeb.assembly.stream.el9 → 4.20.0-202507221915.p0.ge217ae2.assembly.stream.el9

Extensions

Full list (162 packages)

• NetworkManager-libreswan-1.2.24-1.el9.x86_64
• bison-3.7.4-5.el9.x86_64
• capstone-4.0.2-10.el9.x86_64
• corosync-3.1.9-2.el9_6.x86_64
• corosynclib-3.1.9-2.el9_6.x86_64
• cpp-11.5.0-5.el9_5.x86_64
• crun-wasm-1.8.5-5.rhaos4.14.el9.x86_64
• daxctl-libs-78-2.el9.x86_64
• edk2-ovmf-20241117-2.el9.noarch
• elfutils-libelf-devel-0.192-6.el9_6.x86_64
• fence-agents-all-4.10.0-86.el9_6.7.x86_64
• fence-agents-amt-ws-4.10.0-86.el9_6.7.noarch
• fence-agents-apc-4.10.0-86.el9_6.7.noarch
• fence-agents-apc-snmp-4.10.0-86.el9_6.7.noarch
• fence-agents-bladecenter-4.10.0-86.el9_6.7.noarch
• fence-agents-brocade-4.10.0-86.el9_6.7.noarch
• fence-agents-cisco-mds-4.10.0-86.el9_6.7.noarch
• fence-agents-cisco-ucs-4.10.0-86.el9_6.7.noarch
• fence-agents-common-4.10.0-86.el9_6.7.noarch
• fence-agents-drac5-4.10.0-86.el9_6.7.noarch
• fence-agents-eaton-snmp-4.10.0-86.el9_6.7.noarch
• fence-agents-emerson-4.10.0-86.el9_6.7.noarch
• fence-agents-eps-4.10.0-86.el9_6.7.noarch
• fence-agents-heuristics-ping-4.10.0-86.el9_6.7.noarch
• fence-agents-hpblade-4.10.0-86.el9_6.7.noarch
• fence-agents-ibmblade-4.10.0-86.el9_6.7.noarch
• fence-agents-ifmib-4.10.0-86.el9_6.7.noarch
• fence-agents-ilo-moonshot-4.10.0-86.el9_6.7.noarch
• fence-agents-ilo-mp-4.10.0-86.el9_6.7.noarch
• fence-agents-ilo-ssh-4.10.0-86.el9_6.7.noarch
• fence-agents-ilo2-4.10.0-86.el9_6.7.noarch
• fence-agents-intelmodular-4.10.0-86.el9_6.7.noarch
• fence-agents-ipdu-4.10.0-86.el9_6.7.noarch
• fence-agents-ipmilan-4.10.0-86.el9_6.7.noarch
• fence-agents-kdump-4.10.0-86.el9_6.7.x86_64
• fence-agents-mpath-4.10.0-86.el9_6.7.noarch
• fence-agents-redfish-4.10.0-86.el9_6.7.x86_64
• fence-agents-rhevm-4.10.0-86.el9_6.7.noarch
• fence-agents-rsa-4.10.0-86.el9_6.7.noarch
• fence-agents-rsb-4.10.0-86.el9_6.7.noarch
• fence-agents-sbd-4.10.0-86.el9_6.7.noarch
• fence-agents-scsi-4.10.0-86.el9_6.7.noarch
• fence-agents-vmware-rest-4.10.0-86.el9_6.7.noarch
• fence-agents-vmware-soap-4.10.0-86.el9_6.7.noarch
• fence-agents-wti-4.10.0-86.el9_6.7.noarch
• fence-virt-4.10.0-86.el9_6.7.x86_64
• flex-2.6.4-9.el9.x86_64
• fmt-9.1.0-1.el9.x86_64
• gcc-11.5.0-5.el9_5.x86_64
• glibc-devel-2.34-168.el9_6.20.x86_64
• glibc-headers-2.34-168.el9_6.20.x86_64
• gnutls-dane-3.8.3-6.el9.x86_64
• gnutls-utils-3.8.3-6.el9.x86_64
• ipmitool-1.8.18-27.el9.x86_64
• ipxe-roms-qemu-20200823-9.git4bd064de.el9_0.noarch
• kata-containers-3.17.0-3.rhaos4.20.el9.x86_64
• kernel-5.14.0-570.32.1.el9_6.x86_64
• kernel-core-5.14.0-570.32.1.el9_6.x86_64
• kernel-devel-5.14.0-570.32.1.el9_6.x86_64
• kernel-headers-5.14.0-570.32.1.el9_6.x86_64
• kernel-modules-5.14.0-570.32.1.el9_6.x86_64
• kernel-modules-extra-5.14.0-570.32.1.el9_6.x86_64
• kernel-rt-core-5.14.0-570.32.1.el9_6.x86_64
• kernel-rt-devel-5.14.0-570.32.1.el9_6.x86_64
• kernel-rt-kvm-5.14.0-570.32.1.el9_6.x86_64
• kernel-rt-modules-5.14.0-570.32.1.el9_6.x86_64
• kernel-rt-modules-core-5.14.0-570.32.1.el9_6.x86_64
• kernel-rt-modules-extra-5.14.0-570.32.1.el9_6.x86_64
• krb5-pkinit-1.21.1-8.el9_6.x86_64
• krb5-workstation-1.21.1-8.el9_6.x86_64
• ldns-1.7.1-12.el9.x86_64
• libfdt-1.6.0-7.el9.x86_64
• libkadm5-1.21.1-8.el9_6.x86_64
• libknet1-1.28-1.el9.x86_64
• libknet1-compress-bzip2-plugin-1.28-1.el9.x86_64
• libknet1-compress-lz4-plugin-1.28-1.el9.x86_64
• libknet1-compress-lzma-plugin-1.28-1.el9.x86_64
• libknet1-compress-lzo2-plugin-1.28-1.el9.x86_64
• libknet1-compress-plugins-all-1.28-1.el9.x86_64
• libknet1-compress-zlib-plugin-1.28-1.el9.x86_64
• libknet1-compress-zstd-plugin-1.28-1.el9.x86_64
• libknet1-crypto-nss-plugin-1.28-1.el9.x86_64
• libknet1-crypto-openssl-plugin-1.28-1.el9.x86_64
• libknet1-crypto-plugins-all-1.28-1.el9.x86_64
• libknet1-plugins-all-1.28-1.el9.x86_64
• libmpc-1.2.1-4.el9.x86_64
• libnozzle1-1.28-1.el9.x86_64
• libpmem-1.12.1-1.el9.x86_64
• libpng-2:1.6.37-12.el9.x86_64
• libqb-2.0.8-1.el9.x86_64
• librdmacm-54.0-1.el9.x86_64
• libreswan-5.2-1.el9fdp.x86_64
• libwsman1-2.6.8-23.el9.x86_64
• libxcrypt-devel-4.4.18-3.el9.x86_64
• libzstd-devel-1.5.5-1.el9.x86_64
• lld-17.0.6-1.el9.x86_64
• lld-libs-17.0.6-1.el9.x86_64
• llvm-17.0.6-5.el9.x86_64
• llvm-libs-17.0.6-5.el9.x86_64
• lm_sensors-libs-3.6.0-10.el9.x86_64
• m4-1.4.19-1.el9.x86_64
• make-1:4.3-8.el9.x86_64
• ndctl-libs-78-2.el9.x86_64
• net-snmp-libs-1:5.9.1-17.el9.x86_64
• net-snmp-utils-1:5.9.1-17.el9.x86_64
• nspr-4.35.0-17.el9_2.x86_64
• nss-3.101.0-10.el9_2.x86_64
• nss-softokn-3.101.0-10.el9_2.x86_64
• nss-softokn-freebl-3.101.0-10.el9_2.x86_64
• nss-sysinit-3.101.0-10.el9_2.x86_64
• nss-tools-3.101.0-10.el9_2.x86_64
• nss-util-3.101.0-10.el9_2.x86_64
• openssl-devel-1:3.2.2-6.el9_5.1.x86_64
• openvswitch3.5-ipsec-3.5.1-33.el9fdp.x86_64
• openwsman-python3-2.6.8-23.el9.x86_64
• pacemaker-2.1.9-1.2.el9_6.x86_64
• pacemaker-cli-2.1.9-1.2.el9_6.x86_64
• pacemaker-cluster-libs-2.1.9-1.2.el9_6.x86_64
• pacemaker-libs-2.1.9-1.2.el9_6.x86_64
• pacemaker-schemas-2.1.9-1.2.el9_6.noarch
• pcp-conf-6.3.7-1.el9_6.x86_64
• pcp-libs-6.3.7-1.el9_6.x86_64
• pcs-0.11.9-2.el9_6.1.x86_64
• perl-TimeDate-1:2.33-6.el9.noarch
• pixman-0.40.0-6.el9_3.x86_64
• protobuf-3.14.0-16.el9.x86_64
• python3-cffi-1.14.5-5.el9.x86_64
• python3-cryptography-36.0.1-4.el9.x86_64
• python3-lxml-4.6.5-3.el9.x86_64
• python3-openvswitch3.5-3.5.1-33.el9fdp.x86_64
• python3-ply-3.11-14.el9.noarch
• python3-pycparser-2.20-6.el9.noarch
• python3-pycurl-7.43.0.6-8.el9.x86_64
• python3-pyparsing-2.4.7-9.el9.noarch
• python3-tornado-6.4.2-2.el9_6.2.x86_64
• qemu-img-17:9.1.0-15.el9_6.4.x86_64
• qemu-kvm-common-17:9.1.0-15.el9_6.4.x86_64
• qemu-kvm-core-17:9.1.0-15.el9_6.4.x86_64
• redhat-logos-90.5-1.el9_6.1.x86_64
• resource-agents-4.10.0-71.el9_6.5.x86_64
• ruby-3.0.7-165.el9_5.x86_64
• ruby-default-gems-3.0.7-165.el9_5.noarch
• ruby-libs-3.0.7-165.el9_5.x86_64
• rubygem-bigdecimal-3.0.0-165.el9_5.x86_64
• rubygem-bundler-2.2.33-165.el9_5.noarch
• rubygem-io-console-0.5.7-165.el9_5.x86_64
• rubygem-json-2.5.1-165.el9_5.x86_64
• rubygem-psych-3.3.2-165.el9_5.x86_64
• rubygem-rdoc-6.3.4.1-165.el9_5.noarch
• rubygem-rexml-3.2.5-165.el9_5.noarch
• rubygems-3.2.33-165.el9_5.noarch
• sbd-1.5.2-1.el9.x86_64
• seabios-bin-1.16.3-4.el9.noarch
• seavgabios-bin-1.16.3-4.el9.noarch
• spdlog-1.13.0-1.rhaos4.14.el9.x86_64
• sysstat-12.5.4-9.el9.x86_64
• telnet-1:0.17-85.el9.x86_64
• usbguard-1.0.0-16.el9.x86_64
• usbguard-selinux-1.0.0-16.el9.noarch
• virtiofsd-1.13.0-1.el9.x86_64
• wasmedge-0.14.0-2.rhaos4.20.el9.x86_64
• zlib-devel-1.2.11-40.el9.x86_64

Red Hat Enterprise Linux CoreOS base layer: 9.6.20250729-1