Back to index

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.22.0-0.nightly-2026-02-22-115409

Team Approvals:

Tests:

• Blocking jobs
  • aggregated-aws-ovn-single-node-upgrade-4.22-micro Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-aws-upgrade-ovn-single-node
  • aggregated-aws-ovn-upgrade-4.22-micro-fips Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-ovn-upgrade-fips
  • aggregated-azure-ovn-upgrade-4.22-micro Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-azure-ovn-upgrade
  • aggregated-gcp-ovn-rt-upgrade-4.22-minor Succeeded periodic-ci-openshift-release-main-ci-4.22-upgrade-from-stable-4.21-e2e-gcp-ovn-rt-upgrade
  • aggregated-hypershift-ovn-conformance-4.22 Succeeded periodic-ci-openshift-hypershift-release-4.22-periodics-e2e-aws-ovn-conformance
  • aws-ovn-serial-1of2 Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-ovn-serial-1of2
  • aws-ovn-serial-2of2 Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-ovn-serial-2of2
  • aws-ovn-techpreview Failed (1 retries) periodic-ci-openshift-release-main-ci-4.22-e2e-aws-ovn-techpreview
  • aws-ovn-techpreview-serial-1of3 Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-aws-ovn-techpreview-serial-1of3
  • aws-ovn-techpreview-serial-2of3 Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-aws-ovn-techpreview-serial-2of3
  • aws-ovn-techpreview-serial-3of3 Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-aws-ovn-techpreview-serial-3of3
  • aws-ovn-upgrade-4.22-micro-fips-no-nat-instance Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-ovn-upgrade-fips-no-nat-instance
  • driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-driver-toolkit
  • fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.22-fips-payload-scan
  • install-analysis-all Succeeded periodic-ci-openshift-release-main-nightly-4.22-install-analysis-all
  • metal-ipi-ovn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-metal-ipi-ovn-ipv4
  • metal-ipi-ovn-ipv6 Failed (1 retries) periodic-ci-openshift-release-main-nightly-4.22-e2e-metal-ipi-ovn-ipv6
  • overall-analysis-all Succeeded (1 retries) periodic-ci-openshift-release-main-nightly-4.22-overall-analysis-all
• Informing jobs
  • agent-compact-ipv4 Failed periodic-ci-openshift-release-main-nightly-4.22-e2e-agent-compact-fips
  • agent-ha-dualstack Failed periodic-ci-openshift-release-main-nightly-4.22-e2e-agent-ha-dualstack-conformance
  • agent-single-node-ipv6 Failed periodic-ci-openshift-release-main-nightly-4.22-e2e-agent-single-node-ipv6-conformance
  • aggregated-hypershift-aks-conformance-4.22 Succeeded periodic-ci-openshift-hypershift-release-4.22-periodics-e2e-azure-aks-ovn-conformance
  • aws-console Failed periodic-ci-openshift-release-main-nightly-4.22-console-aws
  • aws-control-plane-machine-set-operator Succeeded periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-4.22-periodics-e2e-aws
  • aws-csi Failed periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-csi
  • aws-ovn Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-aws-ovn
  • aws-ovn-cgroupsv2 Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-ovn-cgroupsv2
  • aws-ovn-fips Failed periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-ovn-fips
  • aws-ovn-single-node Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-ovn-single-node
  • aws-ovn-single-node-csi Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-ovn-single-node-csi
  • aws-ovn-single-node-serial Failed periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-ovn-single-node-serial
  • aws-ovn-single-node-techpreview Failed periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-ovn-single-node-techpreview
  • aws-ovn-single-node-techpreview-serial Failed periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-ovn-single-node-techpreview-serial
  • aws-ovn-single-node-upgrade-minor Succeeded periodic-ci-openshift-release-main-nightly-4.22-upgrade-from-stable-4.21-e2e-aws-upgrade-ovn-single-node
  • aws-ovn-upgrade-out-of-change Failed periodic-ci-openshift-release-main-ci-4.22-e2e-aws-ovn-upgrade-out-of-change
  • aws-upi Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-ovn-upi
  • azure-control-plane-machine-set-operator Failed periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-4.22-periodics-e2e-azure
  • azure-csi Failed periodic-ci-openshift-release-main-nightly-4.22-e2e-azure-csi
  • azure-ovn Failed periodic-ci-openshift-release-main-ci-4.22-e2e-azure-ovn
  • azure-ovn-serial Failed periodic-ci-openshift-release-main-ci-4.22-e2e-azure-ovn-serial
  • azure-ovn-techpreview Failed periodic-ci-openshift-release-main-ci-4.22-e2e-azure-ovn-techpreview
  • azure-ovn-techpreview-serial Failed periodic-ci-openshift-release-main-ci-4.22-e2e-azure-ovn-techpreview-serial
  • azure-ovn-upgrade-out-of-change Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-azure-ovn-upgrade-out-of-change
  • cnv Failed periodic-ci-openshift-release-main-cnv-nightly-4.22-deploy-azure-kubevirt-ovn
  • gcp-control-plane-machine-set-operator Succeeded periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-4.22-periodics-e2e-gcp
  • gcp-ovn Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-gcp-ovn
  • gcp-ovn-csi Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-gcp-ovn-csi
  • gcp-ovn-rt Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-gcp-ovn-rt
  • gcp-ovn-serial Failed periodic-ci-openshift-release-main-nightly-4.22-e2e-gcp-ovn-serial
  • gcp-ovn-techpreview Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-gcp-ovn-techpreview
  • gcp-ovn-techpreview-serial Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-gcp-ovn-techpreview-serial
  • gcp-ovn-upgrade-4.22-minor Failed periodic-ci-openshift-release-main-ci-4.22-upgrade-from-stable-4.21-e2e-gcp-ovn-upgrade
  • gcp-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-gcp-ovn-upgrade
  • hypershift-kubevirt-ovn-conformance-4.22 Failed periodic-ci-openshift-hypershift-release-4.22-periodics-e2e-azure-kubevirt-ovn
  • metal-ipi-ovn-dualstack Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-metal-ipi-ovn-dualstack
  • metal-ipi-ovn-dualstack-techpreview Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-metal-ipi-ovn-dualstack-techpreview
  • metal-ipi-ovn-ipv6-techpreview Failed periodic-ci-openshift-release-main-nightly-4.22-e2e-metal-ipi-ovn-ipv6-techpreview
  • metal-ipi-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-metal-ipi-ovn-serial-ipv4
  • metal-ipi-ovn-serial-virtualmedia-1of2 Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-metal-ipi-ovn-serial-virtualmedia-1of2
  • metal-ipi-ovn-serial-virtualmedia-2of2 Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-metal-ipi-ovn-serial-virtualmedia-2of2
  • metal-ipi-ovn-techpreview Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-metal-ipi-ovn-techpreview
  • metal-ipi-ovn-upgrade Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-metal-ipi-ovn-upgrade
  • metal-ipi-ovn-upgrade-minor Failed periodic-ci-openshift-release-main-nightly-4.22-upgrade-from-stable-4.21-e2e-metal-ipi-ovn-upgrade
  • metal-ipi-serial-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-metal-ipi-serial-ovn-ipv6
  • metal-ipi-serial-ovn-dualstack Failed periodic-ci-openshift-release-main-nightly-4.22-e2e-metal-ipi-serial-ovn-dualstack
  • metal-ipi-upgrade-ovn-ipv6 Failed periodic-ci-openshift-release-main-nightly-4.22-e2e-metal-ipi-upgrade-ovn-ipv6
  • metal-ipi-upgrade-ovn-ipv6-minor Failed periodic-ci-openshift-release-main-nightly-4.22-upgrade-from-stable-4.21-e2e-metal-ipi-upgrade-ovn-ipv6
  • metal-ovn-single-node-recert-cluster-rename Succeeded periodic-ci-openshift-release-main-nightly-4.22-metal-ovn-single-node-recert-cluster-rename
  • microshift-ovn-conformance-parallel Succeeded (1 retries) periodic-ci-openshift-microshift-release-4.22-periodics-e2e-aws-ovn-ocp-conformance
  • microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.22-periodics-e2e-aws-ovn-ocp-conformance-serial
  • openshift-dedicated-aws Failed periodic-ci-openshift-osde2e-main-nightly-4.22-osd-aws
  • openshift-dedicated-gcp-conformance Failed periodic-ci-openshift-release-main-nightly-4.22-e2e-osd-ccs-gcp
  • openshift-dedicated-gcp-osde2e Failed periodic-ci-openshift-osde2e-main-nightly-4.22-osd-gcp
  • ovn-proxy Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-ovn-proxy
  • ovn-single-node-live-iso Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-metal-ovn-single-node-live-iso
  • qe-perfscale Failed periodic-ci-openshift-eng-ocp-qe-perfscale-ci-main-aws-4.22-nightly-x86-payload-control-plane-6nodes
  • rosa-classic-sts-conformance Failed (1 retries) periodic-ci-openshift-release-main-nightly-4.22-e2e-rosa-sts-ovn
  • rosa-classic-sts-osde2e Failed periodic-ci-openshift-osde2e-main-nightly-4.22-rosa-classic-sts
  • telco5g Failed periodic-ci-openshift-release-main-nightly-4.22-e2e-telco5g
  • telcov10n-metal-single-node-spoke Failed periodic-ci-openshift-kni-eco-ci-cd-main-nightly-4.22-telcov10n-metal-single-node-spoke
  • telcov10n-metal-single-node-spoke-kpis Failed periodic-ci-openshift-kni-eco-ci-cd-main-nightly-4.22-telcov10n-metal-single-node-spoke-kpis
  • upgrade-analysis-all Failed (2 retries) periodic-ci-openshift-release-main-nightly-4.22-upgrade-analysis-all
  • upgrade-minor-ovn Failed periodic-ci-openshift-release-main-ci-4.22-upgrade-from-stable-4.21-e2e-aws-ovn-upgrade
  • vsphere-ovn Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-vsphere-ovn
  • vsphere-ovn-csi Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-vsphere-ovn-csi
  • vsphere-ovn-serial Failed periodic-ci-openshift-release-main-nightly-4.22-e2e-vsphere-ovn-serial
  • vsphere-ovn-techpreview Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-vsphere-ovn-techpreview
  • vsphere-ovn-techpreview-serial Failed periodic-ci-openshift-release-main-nightly-4.22-e2e-vsphere-ovn-techpreview-serial
  • vsphere-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-vsphere-ovn-upgrade
  • vsphere-ovn-upgrade-minor Succeeded periodic-ci-openshift-release-main-ci-4.22-upgrade-from-stable-4.21-e2e-vsphere-ovn-upgrade
  • vsphere-ovn-upi Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-vsphere-ovn-upi
  • vsphere-ovn-upi-serial Failed periodic-ci-openshift-release-main-nightly-4.22-e2e-vsphere-ovn-upi-serial
  • vsphere-static-ovn Failed periodic-ci-openshift-release-main-nightly-4.22-e2e-vsphere-static-ovn

Upgrades from:

• 4.22.0-0.nightly-2026-02-18-151605 (changes) - S S S F S S S S S F
• 4.21.0-0.nightly-2026-02-18-135253 - S F F S S F F

---

Loading changelog, this may take a while ...

Changes from 4.21.0-0.nightly-2026-02-18-135253

Created: 2026-02-22 11:55:54 +0000 UTC

Image Digest: sha256:573406a0074c27bf31de70e7add698eb59c6545a1212ee2fe92c7cefa519dd70

Components

• Kubectl 1.34.1
• Kubernetes 1.34.2
• Kubernetes Tests 1.34.1
• Red Hat Enterprise Linux CoreOS upgraded from 9.6.20260217-1 to 9.8.20260221-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
AdditionalRoutingCapabilities (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AdminNetworkPolicy (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AlibabaPlatform (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
CPMSMachineNamePrefix (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NetworkDiagnosticsConfig (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NetworkLiveMigration (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NetworkSegmentation (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
PreconfiguredUDNAddresses (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ProcMountType (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
RouteAdvertisements (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
TranslateStreamCloseWebsocketRequests (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VolumeAttributesClass (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ManagedBootImagesCPMS (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (New)	Enabled (New)	Enabled	Enabled
MutableCSINodeAllocatableCount (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (New)	Enabled (New)	Enabled	Enabled
OpenShiftPodSecurityAdmission (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (New)	Enabled (New)	Enabled	Enabled
NewOLMOwnSingleNamespace (0 tests)	Disabled	Enabled (Changed)	Disabled	Enabled		Enabled (New)	Disabled	Enabled
IngressControllerDynamicConfigurationManager (0 tests)	Disabled	Disabled	Enabled	Enabled			Enabled (Changed)	Enabled (Changed)
KMSEncryptionProvider (0 tests)	Disabled	Disabled	Enabled	Enabled			Disabled (Changed)	Disabled (Changed)
NewOLMBoxCutterRuntime (0 tests)	Disabled	Disabled	Disabled	Enabled (Changed)			Disabled	Enabled (Changed)
CRIOCredentialProviderConfig (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ClusterAPIComputeInstall (0 tests)			Enabled (New)	Enabled (New)
ClusterAPIControlPlaneInstall (0 tests)			Enabled (New)	Enabled (New)
ClusterUpdateAcceptRisks (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ConfigurablePKI (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
DRAPartitionableDevices (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
EVPN (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ExternalOIDCWithUpstreamParity (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
GatewayAPIWithoutOLM (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
KMSEncryption (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
NetworkConnect (0 tests)			Enabled (New)	Enabled (New)

Rebuilt images without code change

• aws-kms-encryption-provider git 19e7b623 sha256:3c6b6d93a3fa236ab6d00dec4fc31a4b8dd82a15182d59fe5a7cc18d5b259d20
• azure-service-operator git 17e57462 sha256:806558daa4df933e2b5e53efeb03aa3f690ac60797acba94fb7e249c8d846cb6
• cluster-bootstrap git dc0d4a5c sha256:0c22e6e210a34c22be5e035c2efde20f5be5819513dfc675b5f337c2982b2a59
• cluster-policy-controller git 8b775487 sha256:1a1e548d55648d8ff36058d45a2a1eda0b2b5579453acb5666661de8ab6c921d
• container-networking-plugins git 747ad66c sha256:ee08c9c2646270225babdc2614da6574c37ba8d479e240aa70de6a9ccbce6812
• containernetworking-plugins-microshift git 747ad66c sha256:198efa5629b1936d0a91dc88ab614265a9540acc965c9199feff0d9dbbf7517f
• egress-router-cni git 5e0f8d1b sha256:b1dc5f5322f12329621e292b64c657f9394def5e4b8d1e3f9411b823ed3e257c
• gcp-cloud-controller-manager git 8732386c sha256:e02f37fecf32aac393e933adbc4ccbfb78fe204c0271e901b684a012539df2b1
• ibm-cloud-controller-manager git c566572b sha256:ebf4db67883bcfd5e128f0ecd2b57b87a633e73effaa0e45b5b7b91e009fbcd5
• kubevirt-csi-driver git 9e2dbddf sha256:b5bc3549fc4e2c9aafa8d79fd21b335e390d278b575577fed3c45f664de1d317
• libvirt-machine-controllers git 76effeca sha256:935fd6bc61fafc4711249c8cc062f4968155c7127190887598c9b1806db9e280
• multus-cni git 93556f99 sha256:1360904e7fda72af7590e05b8285ab83c54e7304cb9512c4e36f44ef59a193ff
• multus-cni-microshift git 93556f99 sha256:86bb96a9e6fcf4a2e3c393ef82324d1030e0154e509a3becc70f6e3becd6264e
• multus-route-override-cni git 08af4127 sha256:6acb51cf8ee6ccbc4ca8162d25b7d022e544bcacca7457aee1f00aef809a9600
• multus-whereabouts-ipam-cni git d691040e sha256:495b06b7884304b9452e91c960e089dc0fa5e82b98a4e080892cf04cb4e5b5de
• network-interface-bond-cni git 297eeb43 sha256:835667635874faa60bdffb5391f4625b3cf648840fff52b08af6f874e9c66499

agent-installer-api-server

• ACM-29247: (Revert) infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #9865
• NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.19, 4.22, 4.21 #9752
• MGMT-22907: Prepare 4.21 stable and 4.22 candidate versions assisted-service upstream #8831
• NO-ISSUE: Use renovate to update rpms.lock.yaml #9619
• ACM-29247: (FIX) infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #9505
• NO-ISSUE: Update module github.com/go-logr/logr to v1.4.3 #9357
• NO-ISSUE: [master] Bump OCP versions: 4.21, 4.20, 4.18, 4.19, 4.17 #8912
• ACM-29247: infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #8870
• MGMT-22942: Temporarily mirror CAPI image and OCP 4.20 release for disconnected CAPI CI #8819
• MGMT-23047: Ensure cluster is installed when adding an osImageVersion… #8818
• MGMT-22998: Add documentation to add node to an upgraded cluster #8810
• MGMT-23164: Bug: Assisted Installer fails for OCP < 4.16 due to missing libvirt dependency #8869
• MGMT-22406: Include primary_ip_stack in cluster event notifications #8846
• MGMT-22385: Skip ip= kernel args for Day2 iSCSI/multipath with unknown network #8837
• NO-ISSUE: Update setup-envtest version to release-0.22 #8856
• MGMT-22885: Implement third-party CNI backend support #8797
• NO-ISSUE: Modify Konflux YAMLs to ocm-2.17 #8850
• NO-ISSUE: Update operator bundle channel to ocm-2.17 #8847
• MGMT-23115: add FIPS feature usage tracking #8845
• MGMT-23077: Revert “MGMT-21038: Prevent from inventory set host RequestedHostname directly” #8840
• OCPEDGE-2367: Add support for platform none and external on TNA clusters topology #8830
• MGMT-22731: Add To Renovate Tool - Update UBI-minimal Version Automatically #8802
• MGMT-22523: Bump AMD DeviceConfig driver version to 6.4.3 #8823
• MGMT-23000: Fix when a BMH is paused in non-converged flow #8812
• MGMT-22287: Remove OCP 4.12 support from assisted-service #8794
• MGMT-21038: Prevent from inventory set host RequestedHostname directly #7962
• NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 4.21 #8816
• ACM-29153: Upgrade hive to e33d70 #8807
• MGMT-21756: enable FIPS 140-3 crypto module in Go builds #8755
• NO-ISSUE: [master] Bump OCP versions: 4.20 #8801
• MGMT-22583: Implement Swagger Definitions for 3rd Party CNI / No CNI #8717
• NO-ISSUE: [master] Bump OCP versions: 4.17, 4.20, 4.19, 4.13 #8795
• NO-ISSUE: Clarify release images needed for ironic agent image #8778
• NO-ISSUE: upgrade to 1.25 #8769
• NO-ISSUE: [master] Bump OCP versions: 4.12, 4.18, 4.21, 4.16, 4.20 #8767
• NO-ISSUE: Add parameter for pod disruption budget in openshift template #8765
• MGMT-20701: host re-registration improvement #8737
• MGMT-22189: Fix primary_ip_stack migration #8760
• MGMT-22584: Create Enhancement Document for 3rd Party CNI / No CNI Support in Assisted Installer #8594
• MGMT-22131: transitioning red hat operator base image to ubi minimal #8711
• MGMT-22553: Partial cluster updates fail with false validation errors on dual-stack clusters #8704
• MGMT-22297: fallback path for add-ntp-sources.sh #8742
• NO-ISSUE: Update CONTRIBUTING.md #8745
• MGMT-22189: Order dual-stack networks when fetching from DB #8488
• MGMT-22656: Remove serviceMesh & kserve from DataScienceCluster spec #8741
• NO-ISSUE: Add cpe label #8739
• NO-ISSUE: bumping go version on branch master to v1.25 to solve CVE-2025-58183 #8708
• AGENT-1407: add support for InternalReleaseImage related resources #8600
• NO-ISSUE: [master] Bump OCP versions: 4.21 #8733
• MGMT-16090: upgrade assisted-service postgresql from 12 to 13 #8602
• MGMT-20499: Always generate iSCSI NIC reapply manifest for day2 host support #8705
• NO-ISSUE: [master] Bump OCP versions: 4.17 #8725
• MGMT-22278: Skip deleting spoke resources for an uninstalled agent #8608
• MGMT-22186: Add kata runtime class to Assisted installer #8140
• ACM-27859: Allow PreprovisioningImage finalizer to be removed once BMH finishes deprovisioning #8604
• MGMT-20323: Prefer bootable disks for installation #8701
• NO-ISSUE: add to owners_aliases #8703
• MGMT-22545: Fix YAML marshaling for Kubernetes types in disconnected ignition #8619
• OCPBUGS-68355: Fix Day-2 CSR approval race condition #8622
• MGMT-22423: Fix race condition in ensureOwnerRef causing spec.installed to remain false #8621
• ACM-27290: Fix policy.json not generated for InfraEnv mirror registry config #8609
• ACM-27906: Fix container-image-availability check to use mirrored registries in disconnected environments #8611
• NO-ISSUE: [master] Bump OCP versions: 4.21, 4.20 #8612
• MGMT-22458: CVE-2025-65637 Bump github.com/go-openapi/loads, github.com/go-openapi/analysis, github.com/go-openapi/validate to fix CVE-2025-65637 through introducers update (models module) #8596
• NO-ISSUE: Fix golangci-lint branch #8572
• MGMT-22159: Add NFD operator to the list of OSC operator dependencies #8292
• MGMT-22320: Expose GPU data in Agent CR inventory #8495
• NO-ISSUE: Fix list bundle validation to check for feature incompatibilities #8571
• MGMT-22273: reduce log amount #8565
• MGMT-22396: CVE-2024-25621 Bump github.com/containerd/containerd to v1.7.29 through indirect dependency conversion #8555
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• ACM-29247: (Revert) infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #1998
• NO-ISSUE: Update module github.com/jackc/pgtype to v1.14.4 #1664
• NO-ISSUE: Use renovate to update rpms.lock.yaml #1515
• NO-ISSUE: Update github.com/alecthomas/units digest to 0f3dac3 #1524
• ACM-29247: infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #1511
• MGMT-22731: Add To Renovate Tool - Update UBI-minimal Version Automatically #1487
• NO-ISSUE: Modify Konflux YAMLs to ocm-2.17 #1498
• Revert “NO-ISSUE: test for FF ACM 2.17” #1496
• NO-ISSUE: test for FF ACM 2.17 #1495
• ACM-29166: Upgrade hive to e33d70 #1491
• MGMT-22499: CVE-2025-66506 Bump github.com/sigstore/fulcio to v1.8.3 using replace directive #1484
• MGMT-22532: CVE-2025-52881 Bump github.com/opencontainers/selinux to v1.13.0 using replace directive #1483
• MGMT-22393: CVE-2024-25621 Bump github.com/containerd/containerd to v1.7.29 using replace directive #1474
• NO-ISSUE: upgrade go to 1.25 #1466
• MGMT-22653: bump the required minimal go version to 1.24 #1459
• NO-ISSUE: Add cpe label #1457
• MGMT-22131: transitioning red hat operator base image to ubi minimal #1444
• ACM-25812: bumping go version on branch master #1446
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

agent-installer-node-agent

• NO-ISSUE: Use renovate to update rpms.lock.yaml #1343
• MGMT-23123: fix bootkube.logs missing from bootstrap logs on success #1320
• MGMT-22731: Add To Renovate Tool - Update UBI-minimal Version Automatically #1309
• NO-ISSUE: Modify Konflux YAMLs to ocm-2.17 #1318
• ACM-29167: Upgrade hive to e33d70 #1311
• MGMT-22131: transitioning red hat operator base image to ubi minimal #1288
• MGMT-22395: CVE-2024-25621 Bump github.com/containerd/containerd to v1.7.29 through indirect dependency conversion #1302
• NO-ISSUE: Bump mockery to a go 1.25 compatible version #1295
• NO-ISSUE: upgrade go to 1.25 #1289
• NO-ISSUE: Add cpe label #1278
• MGMT-21739: Skip log collection for non-existent services #1230
• NO-ISSUE: add to owners_aliases #1268
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

agent-installer-ui

• change axios version (#3403) #3403
• UI freezes when clicking Select button without version (#3401) #3401
• OCPBUGS-75072 | OVE UI: Above-the-sea UI QE test (#3383) #3383
• Hypershift – allow infra envs with no hosts in namespace dropdown (#3373) #3373
• MGMT-22544: update latest doc version to 4.20 (#3392) #3392
• Bump axios from 1.12.2 to 1.13.5 (#3389) #3389
• Make lint:all serial instead of parallel (#3400) #3400
• fix: prevent form submission on cluster details step for existing clusters (#3372) #3372
• fix major.minor version extraction (#3377) #3377
• NO-ISSUE: Localise validation messages (#3379) #3379
• Fix Infinite Loader while Getting Empty Versions List (#3378) #3378
• Bump preact from 10.26.9 to 10.28.2 (#3356) #3356
• Bump lodash-es from 4.17.21 to 4.17.23 (#3364) #3364
• Bump lodash from 4.17.21 to 4.17.23 (#3365) #3365
• OCPBUGS-74421 | OVE UI: Fix rendezvousIP field name in error message (#3376) #3376
• MGMT-22941: ABI: add version dropdown (#3370) #3370
• Do not delete disconnected cluster/infraenv. (#3368) #3368
• MGMT-21058: Expose BareMetalHost (BMH) Status and Events in the Assisted Installer / CIM Console (#3363) #3363
• Clean up git conflict artefacts (#3325) #3325
• MGMT-21991: Add Primary IPv6 Support-cim (#3346) #3346
• Stop using deprecate Modal component in CIM (#3343) #3343
• Add additional new fields to the above the sea UI (#3337) #3337
• MGMT-20673: Improve OpenShift AI bundle requirements tooltip (#3352) #3352
• Fix React 18 types (#3361) #3361
• MGMT-22746: Add chatbot app (#3350) #3350
• Refactor LabelsField component (#3354) #3354
• Use PF Dropdown component for namespace select (#3345) #3345
• Make Cisco Intersight URL editable in CIM config modal (#3357) #3357
• Fix mass hostname change content alignment (#3344) #3344
• Adapt PrismCode for dark mode (#3348) #3348
• Fix FileUpload component (#3355) #3355
• Assisted Installer OVE UI shows transient blank page with Technology Preview spinner (#3341) #3341
• API/Ingress IP fields lack character limit (#3342) #3342
• Use conversationId from props for feedback. (#3336) #3336
• use old release process (#3333) #3333
• MGMT-20727: Cisco Intersight URL should be configurable (#3332) #3332
• MGMT-22465: Merge the contents of releases/v2.17-cim into master (#3319) #3319
• change ABI above sea level iso size (#3322) #3322
• Openshift AI Bundle on SNO enables ODF and LVM which are uncompatible (#3320) #3320
• remove external platforms field from below sea level UI (#3316) #3316
• Fix Cluster summary styling (#3216) #3216
• Bump js-yaml from 4.1.0 to 4.1.1 (#3310) #3310
• provides parameters for the GET /v2/operators/bundles route (#3306) #3306
• Bump mdast-util-to-hast from 13.2.0 to 13.2.1 (#3287) #3287
• Bump zx from 7.2.3 to 8.8.5 (#3273) #3273
• Bump js-yaml from 4.1.0 to 4.1.1 (#3264) #3264
• Full changelog

agent-installer-utils

• OCPBUGS-76367: Include additional operators in OVE config #252
• OCPBUGS-76343: Add lso operator to appliance config #249
• OCPBUGS-74933: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 2f3015a #221
• OCPBUGS-74932: Update Konflux references #219
• OCPBUGS-74242: Increase Konflux build pipeline memory #242
• AGENT-1313: enable MCO IRI registry #232
• OCPBUGS-71231: bump github.com/sirupsen/logrus to v1.9.3 #233
• OCPBUGS-72420: Increase capabilities passed via buildah #229
• NO-ISSUE: Add 4.22 isobuilder configs #213
• AGENT-1334: Examples of golden snapshot and release for OVE ISO image #202
• NO-ISSUE:Updating ose-agent-installer-utils-container image to be consistent with ART for 4.22 #216
• OCPBUGS-69438: Remove operator manifests; now applied by assisted-installer #211
• OCPBUGS-69406: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 20eb21c #210
• OCPBUGS-69405: Update Konflux references #209
• Full changelog

apiserver-network-proxy

• OCPBUGS-69889: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.22 #88
• Full changelog

aws-cloud-controller-manager

• SPLAT-2220: tests/ote: introduce openshift-only e2e to validate feature by feature gate #126
• TRT-2536: UPSTREAM: <carry>: Fix OTE list tests when SingleReplica #125
• Full changelog

aws-cluster-api-controllers

• NO-JIRA: UPSTREAM: <carry>: Add manifests verify target #586
• OCPBUGS-70053: Updating ose-aws-cluster-api-controllers-container image to be consistent with ART for 4.22 #585
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-74521: UPSTREAM: 2806, 2816: Remove VolumeAttributesClass FeatureGate #300
• OCPBUGS-69918: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.22 #296
• OCPBUGS-69918: UPSTREAM: <carry>: do not require license in OCP files (follow-up) #298
• OCPBUGS-69918: UPSTREAM: <carry>: do not require license in OCP files #297
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-76298: missing readOnlyRootFilesystem in AWS init containers #506
• OCPBUGS-74971: Fix azure-disk secret namespace/name args #502
• OCPBUGS-74521: Remove VolumeAttributesClass FeatureGate #503
• STOR-2523: hypershift: Add desired-version annotation to controller Deployments and use DeploymentVersionController in csi driver operators #457
• OCPBUGS-70304: Fix azure-file secret namespace/name #500
• OCPBUGS-66113: Some containers do not have readOnlyRootFilesystem #476
• OCPBUGS-70085: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.22 #483
• OCPBUGS-70339: deploy prometheus role and binding on hypershift guest #488
• OCPBUGS-63698: fix(azure): add token-minter for self-managed hosted clusters #461
• OCPBUGS-69739: Updating csi-driver-manila-operator-container image to be consistent with ART for 4.22 #480
• OCPBUGS-69907: Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.22 #482
• OCPBUGS-69710: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.22 #479
• NO-JIRA: Add /sniff-test claude command #486
• OCPBUGS-69883: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.22 #481
• OCPBUGS-69982: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.22 #484
• OCPBUGS-69695: Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.22 #478
• STOR-2543: add VAC manifest for tests in AWS EBS #475
• STOR-1945: STOR-2056: Add SupportedSizeRange for azurefile-nfs #477
• Full changelog

aws-karpenter-provider-aws

• AUTOSCALE-485: rebase to 1.8.6 #25
• AUTOSCALE-293: partially ignore drift on ec2nodeclass userdata field #21
• Full changelog

aws-machine-controllers

• SPLAT-2558: Add AWS Dedicated Host support #160
• OCPBUGS-72390: Fix reconciler consistency checks in Update and Exists #162
• OCPBUGS-69950: Updating ose-machine-api-provider-aws-container image to be consistent with ART for 4.22 #161
• Full changelog

aws-pod-identity-webhook

• OCPBUGS-74165: Fix GOTOOLCHAIN env var #211
• CCO-728: merge upstream changes v0.6.11 #209
• OCPBUGS-69825: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.22 #208
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-65654: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (765f435) into main #152
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-53004: Remove references to master branch #336
• OCPCLOUD-3101: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.22.0 (4523016) into master #350
• NO-JIRA: UPSTREAM: <carry>: Add manifests verify target #358
• OCPBUGS-69934: Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.22 #356
• Full changelog

azure-disk-csi-driver

• OCPBUGS-69754: Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.22 #119
• OCPBUGS-69390: fix ASH static provision segmentation fault #117
• OCPBUGS-67186: fix: disk creation failure in AzureStack env #114
• Full changelog

azure-file-csi-driver

• OCPBUGS-70304: UPSTREAM: 2940: fix: optionally skip reading the config from the API #114
• OCPBUGS-70060: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.22 #111
• OCPBUGS-70060: fix failing unit tests in azure-file-csi-driver #112
• Full changelog

azure-kms-encryption-provider

• OCPBUGS-69961: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.22 #26
• Full changelog

azure-machine-controllers

• OCPCLOUD-3252: Add AGENTS configuration #181
• OCPBUGS-69864: Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.22 #179
• Full changelog

azure-workload-identity-webhook

• CCO-729: merge upstream changes #42
• OCPBUGS-69895: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.22 #41
• Full changelog

baremetal-cluster-api-controllers

• Revert “NO-JIRA: Add manifests verify target” #60
• NO-JIRA: UPSTREAM: <carry>: Do not ignore files in vendor #59
• NO-JIRA: Add manifests verify target #57
• OCPBUGS-69724: Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.22 #56
• METAL-1703: Add AGENTS and “merge-upstream” slash command #55
• Full changelog

baremetal-installer, installer, installer-artifacts

• OKD-259: Add Validatation for the OKD Featureset to Prevent it From Being Enabled on OCP Clusters #10260
• OCPBUGS-54298: Installer should validate mirror registry pull secret #10239
• OCPBUGS-56846: validate azure user-assigned identity existence #10220
• CORS-4055: migrate CCO permission check to AWS SDK v2 #10262
• OCPBUGS-63065: Expand Azure userTags to support Azure Government Cloud #10015
• OCPBUGS-55407: set DNS zone for Azure Stack Hub private clusters #10233
• CORS-4302: Add N4A instance types to accepted in Installer #10292
• CORS-4142: ensure lbType is NLB when dual-stack is configured #10256
• MCO-2031: OS Image Stream to install-config schema #10192
• CORS-4055: migrate EC2 API calls to AWS SDK v2 #10244
• OCPBUGS-60162: reject byo vpc/subnets with CAPI owned cluster tag #9913
• OCPBUGS-41570: Ensure correct mask for bootstrap external IP #8987
• OCPEDGE-2276: Add support for platform None and External in TNA clusters #10286
• OCPEDGE-2276: Add support for platform None in TNA (Two-Node Arbiter) clusters #10236
• CORS-4055: migrate credential provider check to AWS SDK v2 #10261
• CORS-4328: configure AWS CCM NodeIPFamilies for dual-stack support #10257
• CORS-4055, CORS-4078: migrate ELB/ELBv2 API calls to AWS SDK v2 #10258
• OCPBUGS-74631: Add validation to reject userProvisionedDNS on Azure Stack Hub #10279
• CORS-4055: migrate default region check to AWS SDK v2 #10267
• OCPBUGS-74625: gcp: skip AI zones #10269
• CORS-4055: migrate IAM API calls to AWS SDK v2 #10245
• CORS-4055: migrate S3 API calls to AWS SDK v2 #10242
• OCPBUGS-63305: Make SimulatePrincipalPolicy optional #10081
• OCPBUGS-67816: Revert storage account API version for client #10224
• OCPBUGS-74078: add support for NVIDIA H100 and H200 enabled machine series #10234
• CORS-4299, CORS-4300: Allow N4A Instance Types in the installer #10211
• no-jira: add trace-config Claude command for installconfig field usage analysis #10190
• AGENT-1309: Increase disk size requirements for master and SNO #10254
• OSDOCS-17769: Add AWS m7 instance types #10246
• CORS-4073: validate instance type support IPv6 in dual-stack #10238
• OCPBUGS-74363: Remove region option for the GCP Private Service Connect Endpoint #10249
• NO-JIRA: use v2 config for go-lint #10240
• AGENT-1425: Fix stale dependency in agent-register-infraenv #10237
• AGENT-1309: Modify NoRegistryClusterInstall storage requirements #10176
• OCPBUGS-56770: Honor user-specified bootDiagnostics on Azure Stack Hub #10223
• OCPBUGS-63028: filtering only PEs from cluster list #10193
• CORS-4075, CORS-4113: Install-config and Infra manifest updates for DualStack for AWS and Azure #10207
• OCPBUGS-72525: add newly detected instance types for Azure during 4.21 regression test #10202
• OCPBUGS-69735: handle SSH rule deletion for Azure private #10213
• OCPBUGS-69734: Fix destroy bootstrap command for Azure #10212
• NO-JIRA: add user Rolv-Apneseth to coreos-maintainers and coreos-reviewers #10206
• OCPBUGS-69923: ensure deterministic zone ordering for control plane machines #10188
• NO-JIRA: Add angelcerveraroldan to coreos approvers and reviewers #10209
• OCPBUGS-72577: bump default channel to stable-4.22 for main(4.22) branch #10205
• OCPBUGS-71232: Fix nil pointer exception in azure mapiImage #10200
• OCPBUGS-70013: Updating ose-installer-container image to be consistent with ART for 4.22 #10182
• no-jira: Platform Experts Claude Command #10186
• no-jira: Add barbacbd for gcp owners #10189
• OCPBUGS-70021: Updating ose-baremetal-installer-container image to be consistent with ART for 4.22 #10183
• OCPBUGS-70047: Updating ose-installer-artifacts-container image to be consistent with ART for 4.22 #10184
• no-jira: Fix linting issues for golangci-lint v2 #10138
• NO-JIRA: remove pod-infra-container-image flag from kubelet #10145
• OCPBUGS-69870: rename “var-ostree\x2dcontainer.mount” to something more computer-friendly #10171
• OCPBUGS-69840: PowerVC: fix PostProvision #10175
• OCPBUGS-69434, SPLAT-2584: Added ability to install different IPAM version when in TP. #10169
• OCPBUGS-65859: Fix set-hostname dependency for interactive console services #10118
• OCPBUGS-17667: Validate vCenter datacenters in failure domain topology #10086
• OCPBUGS-61344: skip deleting snapshots managed by AWS Backup service #9964
• OCPBUGS-62870: installing into GCP Shared VPC with minimal permissions #10157
• OCPBUGS-64775: use CAPZ to provision ssh rule #10162
• OCPBUGS-66295: Fix ignition warning about agent-extract-tui.service #10146
• AGENT-1357: remove AgentWorkflowTypeInstallInteractiveDisconnected workflow #10020
• And 4 elided commits (e.g. from squash or rebase merges)
• Full changelog

baremetal-machine-controllers

• NO-ISSUE: Synchronize OWNERS with CAPM3 #241
• OCPBUGS-69896: Updating baremetal-machine-controller-container image to be consistent with ART for 4.22 #240
• Full changelog

baremetal-operator

• NO-ISSUE: Merge upstream #455
• Bug OCPBUGS-75006: BMO fails to start servicing despite updates to HFC spec #457
• OCPBUGS-65571: Fix deletion hang when aborting inspection during power-off #447
• NO-ISSUE: Fix invalidDNSNameinvalidipv6 test for Go 1.24+ #448
• OCPBUGS-70265: Fix errors.As usage for NoDataInSecretError #444
• NO-ISSUE: Merge upstream #442
• OCPBUGS-70018: Updating ose-baremetal-operator-container image to be consistent with ART for 4.22 #441
• METAL-1693: Add “merge-upstream” slash command #437
• OCPBUGS-65571: Abort inspection/cleaning before powering off during deletion #438
• Full changelog

baremetal-runtimecfg

• OCPBUGS-76394: Install dbus-tools, needed in pkg/monitor/dnsmasqmonitor.go #380
• OCPBUGS-42805: Add node caching with Kubernetes watch API to reduce API load #374
• NO-ISSUE: Add agents.md and slash command for reviewing #375
• MGMT-22546: Fix TNA and TNF dummy ip for ipv6 #369
• NO-ISSUE: Migrate away from deprecated ioutil #373
• OCPBUGS-69812: Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.22 #376
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-76394: Ignore group ownership on rpm -V #2206
• OCPBUGS-76394: Install subscription-manager in cli image #2200
• Revert “CNTRLPLANE-2656: Fixing oc client cases for microshift and metal ipv6 profiles” #2198
• CNTRLPLANE-2656: Fixing oc client cases for microshift and metal ipv6 profiles #2192
• OCPBUGS-74543: expose: Fix labels not being added to route #2189
• Revert “CNTRLPLANE-2656:Migrating oc cli tests to ote” #2191
• CNTRLPLANE-2656: Migrating oc cli tests to ote #2181
• OSDOCS-18071: Updating CLI docs templates to include a required abstract/short description #2190
• OCPBUGS-73893: Fix unit test failure by updating ruby version to 3.3 #2184
• NO-ISSUE: add SecurityContext to node image creation and monitor containers #2139
• CNTRLPLANE-2167: Adding oc ote sanity test #2180
• CNTRLPLANE-2167: Integrate OpenShift Test Extension (OTE) into oc #2177
• CNTRLPLANE-2167: Integrate OpenShift Test Extension (OTE) into oc #2176
• OCPBUGS-64619: oc login: Respect insecure flag from kubeconfig #2134
• NO-JIRA: Bump library-go to update selinux and x/crypto #2169
• OCPBUGS-70063: Updating ose-cli-artifacts-container image to be consistent with ART for 4.22 #2168
• OCPBUGS-70061: Updating openshift-enterprise-deployer-container image to be consistent with ART for 4.22 #2167
• OCPBUGS-69894: Updating ose-tools-container image to be consistent with ART for 4.22 #2166
• OCPBUGS-69835: Updating openshift-enterprise-cli-container image to be consistent with ART for 4.22 #2164
• NO-JIRA: Bump docker/docker to 28.5.2 to drop containerd/containerd dependency #2162
• Full changelog

cloud-credential-operator

• CCO-767: test-ext: Migrate openshift-tests-private E2E cases #961
• CCO-813: Update kubernetes v1.35 and golang v1.25 #967
• OCPBUGS-74384: Resolve nil pointer exception in hasResourceTags #966
• CCO-805: Ability to use featureGates #962
• OCPBUGS-71221: test-ext: remove kubernetes module dependency #957
• OCPBUGS-70033: Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.22 #956
• CCO-789: Add Agentic AI helper files #953
• Full changelog

cloud-network-config-controller

• CORENET-6500: fix lint job and linting failures #201
• OCPBUGS-69998: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.22 #196
• OCPBUGS-45056, OCPBUGS-57447: Refrain from adding Egress IP to public LB backend pool #180
• Full changelog

cluster-authentication-operator

• CNTRLPLANE-2247: Add Test encryption provider migration #838
• CNTRLPLANE-2247: Adding KMS TestKMSEncryptionOnOff test for AUTH #834
• CNTRLPLANE-2241: Conditionally add the KMS plugin volume mount to the oauth-apiserver container #827
• CNTRLPLANE-2589: Migrate serial e2e tests to Ginkgo framework #828
• CNTRLPLANE-2247: Add KMS encryption test target #829
• CNTRLPLANE-2589: Migrate RouterCerts e2e test to Ginkgo framework #826
• CNTRLPLANE-2589: OTE infrastructure #822
• API-1835: test/oauth-server-payloadConfigController: adds a test to show which input resources are required to run the operator and the payloadConfigController #786
• OCPBUGS-70005: Updating ose-cluster-authentication-operator-container image to be consistent with ART for 4.22 #819
• API-1835: adds an integration test for the oauth-server deployment controller #784
• CNTRLPLANE-2196: set up openshift-tests-extension for cluster-authentication-operator #816
• NO-JIRA: Add agents.md file #818
• Full changelog

cluster-autoscaler

• OCPBUGS-66405: Pick upstream commits to Fix VPA recommender concurrent access panic #403
• AUTOSCALE-482, AUTOSCALE-483: 1.35.0 Upstream rebase #401
• OCPBUGS-74005: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.22 #399
• OCPBUGS-70023: Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.22 #397
• OCPBUGS-69928: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.22 #396
• Full changelog

cluster-autoscaler-operator

• AUTOSCALE-483: Prepare for 4.22 #361
• OCPBUGS-69828: Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.22 #358
• Full changelog

cluster-baremetal-operator

• OCPBUGS-77027: Update kubebuilder tools to more latest version #556
• OCPBUGS-72548: Fix ironic-proxy service routing for port 6385 #546
• OCPBUGS-71233: Fix libguestfs /tmp access in machine-os-downloader init container #549
• OCPBUGS-70157: Add sharedVolumeMount to machine-os-downloader init container #540
• OCPBUGS-67216: Remove the writable ironic CA cert volume mount at /certs/ca/ironic path, ironic will use the writable /conf mount if needed #535
• NO-ISSUE: Add AGENTS.md #538
• OCPBUGS-69769: Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 4.22 #537
• Full changelog

cluster-capi-controllers

• OCPCLOUD-3320: Use new manifests-gen #259
• OCPBUGS-74426: CAPI IPAM CRDs override storage version to v1beta1 #263
• NO-JIRA: UPSTREAM: <carry>: Add manifests verify target #261
• OCPBUGS-69810: Updating ose-cluster-api-container image to be consistent with ART for 4.22 #258
• OCPBUGS-69434: openshift: CAPI IPAM TechPreviewNoUpgrade: set webhooks failurepolicy: Ignore #256
• Full changelog

cluster-capi-operator

• OCPCLOUD-3005: Add MWC/VWC to compatibility requirements RBAC #466
• NO-JIRA: Adds test-standards skill for claude #468
• OCPCLOUD-3005: Initial implementation of CompatibilityRequirement reconciler and webhook #458
• OCPBUGS-77036, OCPCLOUD-3342: provider images disconnected support #463
• OCPCLOUD-3005: Bootstrap compatibility requirements deployment #457
• OCPCLOUD-3327: Rewrite manifests-gen to support upgrade safety #434
• NO-JIRA: Fix NetworkPolicy for openshift-capi-operator namespace #453
• OCPCLOUD-3327: Fix up related objects #452
• OCPBUGS-74295: Move installer controller to independent manager #447
• NO-JIRA: fix: e2e: workaround for flakes caused by OCPBUGS-74571, until it is fixed #449
• OCPBUGS-61949: Remove references to cluster-api-operator image #384
• OCPCLOUD-3315: Add AWS CPUOptions to conversion #438
• OCPCLOUD-3017: add SHARD_ARGS #442
• OCPCLOUD-2566: tests with VAP msgs #386
• NO-JIRA: Fix AWS fuzz tests by constraining Volume throughput to int32 range #441
• OCPCLOUD-3263: CAPI MachineSet creation validation #437
• OCPBUGS-69737: Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.22 #436
• NO-JIRA: Update openshift/api #439
• OCPCLOUD-3172: machinesetsync: refactor to a generalized differ which can work independent of types #382
• OCPCLOUD-2640: CAPI Machine creation validation #412
• NO-JIRA: Write provider version to openshift/provider-version.mk #424
• OCPCLOUD-3105: make use of sigs.k8s.io/cluster-api’s v1beta2 #428
• OCPBUGS-63524: fix: e2e: CAPI creation issue/scale-down wait issue/machine nodeRef comparison issue #429
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-16728: Add admission policy to deny changing an AWS LB type on an existing service #362
• OCPBUGS-69820: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.22 #430
• Full changelog

cluster-config-api

• MCO-2126: Add defaultStream field to OSImageStream spec #2709
• Prefer feature-gate manifest inclusion for merged CRDs #2712
• CORS-4096: Add DNS Record Type for IPv6 Domain mapping #2361
• OCPBUGS-74512: Remove CPMSMachineNamePrefix featuregate #2677
• OCPCLOUD-3214: Add ClusterAPI config #2564
• SPLAT-2615: Added support for dynamic AWS dedicated hosts #2650
• config/v1: TLSSecurityProfile: align with Mozilla v5.7 guidelines for Go by removing unsupported go ciphers #2697
• NE-2480: Add featuregate for Gateway API without OLM #2691
• Feature gate CVO application of CompatibilityRequirement CRD #2701
• Update integration test timeout and make parallel where possible #2702
• STOR-2878: Graduate MutableCSINodeAllocatableCount to GA #2673
• OCPBUGS-67232: Move DynamicConfigurationManager back to TPNU #2621
• OCPNODE-4078: Add DRAPartitionableDevices to TechPreviewNoUpgrade #2694
• OCPBUGS-74521: Remove VolumeAttributesClass FeatureGate #2675
• MON-4031: Add prometheusOperatorConfig API #2481
• Remove graduated SDN feature gates #2672
• OCPNODE-3863: Add CRIOCredentialProviderConfig API #2557
• add Insights capability to Insights CRDs #2682
• CodeRabbit should not be looking at openapi generated content #2688
• MCO-1931: Promote ManagedBootImagesCPMS feature gate to the Default featureset #2679
• OCPBUGS-74527: Remove ProcMountType #2676
• OCPBUGS-55654: Remove AlibabaPlatform FeatureGate #2671
• Re-enable NewOLMBoxcutterRuntime featuregate in TPNU #2659
• OCPBUGS-68343: Introduce KMSEncryption feature gate #2669
• Fix payload CRD/FetaureGate ordering #2667
• OCPEDGE-2084: Add PacemakerStatus CRD for two-node fencing #2544
• OCPBUGS-56851: make multiline comments for oidc one line for better crd gen and better oc explain description format #2655
• no-jira: Validate AWS resource tag keys with aws: prefix #2183
• NO-JIRA: Fix Infrastructure PlatformType comment #2660
• OCPEDGE-2084: chore(tools): bump controller-tools with XValidation ordering fix #2658
• Update KAL to latest and configure new linters #2662
• OCPCLOUD-2998: Add synchronizedAPI to Machine and MachineSet status #2642
• CORENET-6609: Add EVPN featuregate #2649
• OCPBUGS-73855: Permit other machine managers when skew enforcement is in Automatic mode #2648
• CONSOLE-4986: Add Guided Tour capability flag to Console API and vendor it into console-operator #2644
• OCPCLOUD-3166: machine-api: disallow unsetting authoritativeAPI #2091
• Add insights v1 to payload #2632
• CNTRLPLANE-1750: Add FeatureGate: ConfigurablePKI #2545
• NO-JIRA: update TLS security profile documentation for clarity and consistency #2595
• OPRUN-4226: [OLMv1]: Promote NewOLMOwnSingleNamespace to GA #2527 #2527
• SPLAT-2603: Added support for legacy AWS dedicated hosts #2643
• Extend ClusterVersion for accepted risks #2360
• CNTRLPLANE-311: adding auth config missing fields to API #2487
• NO-JIRA: Rename ImagePolicy nested types to prevent PKI collision #2626
• Reapply “Merge pull request #2448 from opokornyy/CCXDEV-15259-io-v1” #2631
• OCPBUGS-70025: Updating ose-cluster-config-api-container image to be consistent with ART for 4.22 #2634
• Add configuration for coderabbit #2635
• DevPreview: NetworkConnect feature gate #2629
• OCPCLOUD-3164: Add CompatibilityRequirement #2479
• Disable the statusoptional linter #2633
• Migrate away from deprecated ioutil #2603
• OKD-259: Support an “OKD” featureset to be enabled by default on OKD clusters #2451
• NO-JIRA: remove beta enabled TranslateStreamCloseWebsocketRequests feature from gates #2613
• And 2 elided commits (e.g. from squash or rebase merges)
• Full changelog

cluster-config-operator

• OKD-320: Migrate to OKD featureset for OKD clusters #462
• OKD-259: Allow the OKD feature set to upgrade #461
• CNTRLPLANE-2272: Refactor tests-ext initialization to improve error handling #457
• OCPBUGS-69859: Updating ose-cluster-config-operator-container image to be consistent with ART for 4.22 #456
• CNTRLPLANE-1311: Simplified test infrastructure to single-module architecture #452
• Full changelog

cluster-control-plane-machine-set-operator

• TRT-2542: Revert Fix framework initialization #391
• OCPBUGS-74343: Fix framework initialization #384
• OCPBUGS-74512: Remove CPMSMachineNamePrefix feature gate #387
• NO-JIRA: mockgen deprecated: use uber-go/mock instead #374
• OCPBUGS-74478: Bump openshift/api to get latest AWSMachineProviderConfig type #385
• OCPBUGS-67230: Fix Makefile to use vendor mode #377
• Full changelog

cluster-csi-snapshot-controller-operator

• STOR-2523: Add desired-version annotation to controller Deployment and use DeploymentVersionController in csi-snapshot-controller-operator #251
• OCPBUGS-73791: Re-add serving cert volume mount to hypershift guest cluster manifest #264
• OCPBUGS-66390: Set client throttling parameters #261
• OCPBUGS-69854: Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.22 #262
• Full changelog

cluster-dns-operator

• NE-2414: Use trafficDistribution: PreferSameNode for openshift-dns Service #457
• Full changelog

cluster-etcd-operator

• NO-JIRA: fix: add missing priority class from status checker #1552
• OCPEDGE-2097: Add pacemaker health check for ExternalEtcd clusters #1487
• OCPEDGE-2231: [TNF] feat: Allow podman-etcd and kubelet resource-agent to restart on start failure #1513
• NO-JIRA: [TNF] disable etcd member management after etcd handover #1534
• OCPBUGS-66152: split grpc requests slow into read/write alerts #1532
• OCPBUGS-73857: Prefer to remove members where they have another healthy machine in the same failure domain index #1528
• OCPBUGS-68371: fix bootstrap race condition #1524
• OCPBUGS-38659: bump inertia from 5-10 minutes #1531
• OCPBUGS-38659: configure inertia for all controllers #1527
• OCPBUGS-60588: [TNF] support restore for pacemaker-managed etcd #1521
• OCPBUGS-62422: deps: Update library-go to update pruner #1526
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

cluster-image-registry-operator

• IR-350: keeps registry tls config in sync with cluster #1278
• OCPBUGS-62626: only report Progressing=True when progressing towards new configuration #1286
• NO-JIRA: fix TestImageRegistryRemovedWithImages flake #1288
• OCPBUGS-74495: Migrate Azure storage management to new ARM SDK #1281
• IR-350: bump library-go to the latest version #1276
• OCPBUGS-69751: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.22 #1275
• OCPBUGS-66203: clear affinities on an individual API call #1273
• Full changelog

cluster-ingress-operator

• NO-JIRA: Add coderabbit to CIO #1348
• OCPBUGS-58145: reload serving cert on rotation #1285
• NE-2481: bump k8s libraries to v0.35.0 #1356
• NE-2434: E2E test for internal LoadBalancer Annotations #1353
• OCPBUGS-64565, OCPBUGS-9037: Ensure canary cert matches the default ingress controller’s cert #1334
• NE-2395: Fix e2e tests to work on platforms with unmanaged DNS #1342
• NE-2374: Add e2e test for Gateway API infrastructure annotations #1331
• NE-2435: Bump Gateway API CRDs to v1.4.1 #1343
• OCPBUGS-16728: Require Service Deletion for LB Type Updates #1142
• NO-JIRA: add jcmoraisjr to owners #1346
• OKD-259: Bump openshift/api and add support for OKD featureset specific CRDs #1324
• OCPBUGS-65482: Add e2e test for secure redirect port stripping #1316
• NE-1743: Add documentation for pre-release script for OSSM testing #1315
• OCPBUGS-70212: testGatewayAPIDNS: Fix nil gateway in cleanup #1330
• OCPBUGS-70211: Fix logging for unmanaged controllers #1329
• OCPBUGS-69954: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.22 #1328
• OCPBUGS-65939: Update command to get Konflux index image #1325
• OSSM-10865: set trustBundleName in Istio global values #1288
• Full changelog

cluster-kube-apiserver-operator

• NO-JIRA: Test encryption provider migration #2028
• OCPBUGS-70298: remove kube-apiserver user from crb #2012
• CNTRLPLANE-2247: Adding KMS TestKMSEncryptionOnOff test #2027
• CNTRLPLANE-2241: Conditionally add the KMS plugin volume mount to the kube-apiserver container #2015
• CNTRLPLANE-2563: update wording for major upgrades #2010
• CNTRLPLANE-2648: Migrating user_cors_test to OTE #2011
• CNTRLPLANE-2247: Add empty KMS encryption test case for CI job validation #2014
• CNTRLPLANE-2585: Migrating user_client_ca_test to ginkgo #2008
• OCPBUGS-65807: SCC: allow image volume type for all SCCs #1968
• CNTRLPLANE-2492: Migrating user_certs_test to ote #2005
• NO-JIRA:Refactor serviceaccountissuer ginkgo test #2002
• NO-JIRA: clean up the OWNER files #2001
• NO-JIRA: Add API server stabilization wait to serviceaccountissuer tests #1997
• OCPBUGS-62422: deps: Update library-go to update pruner #1994
• NO-JIRA: ote: a small cleanup #1995
• CNTRLPLANE-2286: Migrating serviceaccountissuer test to ote #1992
• CNTRLPLANE-2280: Migrating deprecated_api_test to ote #1990
• CNTRLPLANE-2281: Migrating operator_test to ote #1991
• OCPBUGS-70323: bump library-go #1986
• OCPBUGS-69758: CNTRLPLANE-2222:Migrate go test cert-rotation-tests.go to OTE #1983
• CNTRLPLANE-2158: Migrating TestTokenRequestAndReview to ginkgo #1978
• NO-JIRA: increases termination timeouts for GCP #1982
• Full changelog

cluster-kube-controller-manager-operator

• CORS-4220: pass dualstack cluster cidrs as an comma-separated list argument #889
• OCPBUGS-69964: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.22 #901
• OCPBUGS-62422: dep: Update library-go to update pruner #895
• OCPBUGS-60568: Use BoundServceAccountTokenVolume dy default #858
• Full changelog

cluster-kube-scheduler-operator

• CNTRLPLANE-2649: Add 30-minute timeout to preferred host e2e test #616
• CNTRLPLANE-2649: Migrate to Ginkgo-based e2e serial and parallel test suite #611
• CNTRLPLANE-2649: OTE infrastructure #608
• OCPBUGS-65941: Add OPERATOR_IMAGE_VERSION to recovery container #600
• NO-JIRA: pkg/operator: Remove staleConditions controller #597
• NO-JIRA: pkg/operator: Fix wrong ClusterOperator name #596
• no-jira: test(TargetConfigController): exercise –tls-cipher-suites and –tls-min-version injection #595
• OCPBUGS-62422: deps: Update library-go to update pruner #593
• no-jira: refactor(pkg/operator/targetconfigcontroller): code deduplication and improvements #594
• Full changelog

cluster-kube-storage-version-migrator-operator

• OCPBUGS-65984: Prevent AvailableReplicas from dropping to 0 during deployment rollout #138
• OCPBUGS-70004: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.22 #136
• OCPBUGS-65984: Prevent AvailableReplicas from dropping to 0 during deployment rollout #135
• Full changelog

cluster-machine-approver

• OCPBUGS-69815: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.22 #289
• MON-4476: chore: add permissions on endpointslice to Prometheus Role and use serviceDiscoveryRole: EndpointSlice in ServiceMonitors #288
• NO-JIRA: Fix expired test certificate in csr_check_test.go #287
• Full changelog

cluster-monitoring-operator

• OCPBUGS-73957: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.22 #2790
• NO-ISSUE: test/e2e: add Func suffix to assertion helpers for consistency #2803
• OCPBUGS-74673: Fix NodeRAIDDegraded & NodeRAIDDiskFailure alerts #2799
• OCPBUGS-69397: Move console control plane health queries to their own… #2778
• OCPBUGS-74347: config: add bond device to default node-exporter ignore list #2806
• NO-ISSUE: merge case 67008,68958 to node-exporter e2e test #2788
• NO-ISSUE: test: TestUserWorkloadWithAlertmanager|TestNetworkPolicy: fix a no-op check #2802
• OCPBUGS-67162: update expr for AlertmanagerClusterFailedToSendAlerts to exclude value 0 #2796
• NO-JIRA: Upgrade golangci-lint from v1 to v2 #2789
• OCPBUGS-66069: Include kube_pod_labels in minimal profile #2777
• MON-4470: ship collector:node_scrape_collector_success:avg to Telemetry #2794
• NO-JIRA: [bot] Synchronize versions of the downstream components #2791
• OCPBUGS-66180: create networkpolicy settings for user workload monitoring #2765
• NO-ISSUE: move endpointslice RBAC to Role #2786
• MON-4466: enable ethtool collector #2779
• NO-ISSUE: add app.kubernetes.io/part-of=openshift-monitoring label to thanos-ruler pod #2787
• MON-4343: Reapply “MON-4343: Cleanup deprecate pa config” #2782
• NO-ISSUE: remove test case 74734 #2785
• OCPBUGS-61088: revert PR #2766 #2769
• OCPBUGS-69733: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.22 #2781
• MON-4406: watch ClusterMonitoring config resource #2770
• NO-JIRA: [bot] Synchronize versions of the downstream components #2780
• NO-JIRA: [bot] Synchronize versions of the downstream components #2776
• Full changelog

cluster-network-operator

• CORENET-6610: Add EVPN APIs #2881
• OCPBUGS-60077: Silence ovnkube-lib.sh to avoid mass of logs to collectors #2761
• CNF-20883: Align templates frrk8s #2874
• OCPBUGS-74401: Remove duplicated openssl parameter #2889
• NO-JIRA: Remove references to AdminNetworkPolicy, NetworkSegmentation, RouteAdvertisements and PreconfiguredUDNAddresses featuregates #2891
• CORENET-6561: Update the golangci-lint configuration for v2 compatibility and fix all resulting lint issues. #2893
• CORENET-6605: avoid flapping Degraded on transient failures #2862
• CORENET-6416: drop networkType migration support #2456
• CNF-21001: mnp: Set hostname using downward API #2840
• CORS-4180: Allow AWS and Azure as platforms that support dual-stack on Day-0 #2804
• NO-JIRA: set ovnkube-cluster-manager as default container #2798
• OCPBUGS-72411: fix(hypershift): use net.JoinHostPort for URL construction #2871
• OCPBUGS-66417: Add kubevirt platform to dual-stack supported platforms #2849
• OCPBUGS-49662: Prevent resetting masquerade subnet #2641
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-74027: AA: E2E: LLC: Add tests related to odd cpus #1458
• CNF-20755: e2e: Add housekeeping IRQ load balancing tests #1456
• CNF-18941: perfprof: enable exec-cpu-affinity by default (annotation) #1426
• NO-JIRA: Make changes for migrating to OTE in Dockerfile #1453
• OCPBUGS-62632: Do not report Progressing=True during cluster scaleup or node reboot #1447
• NO-JIRA: Bump upstream containerfile to 4.22 #1452
• OCPBUGS-62496: hypershift:e2e:status: check for duplicated configmap status #1413
• OCPBUGS-69802: Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.22 #1450
• OCPBUGS-69391: E2E: Granular IRQ functional test cases #1441
• Full changelog

cluster-olm-operator

• NO-ISSUE: Bump golangci to v2 #174
• NO-ISSUE: Add pedjak as reviewer and approver #171
• OCPBUGS-65505: add resources to clusterOperator relatedObjects #166
• OPRUN-4408: Update upgrade message to mention both 4.23 and 5.0 upgrade paths #164
• OCPBUGS-69807: Update image locations to be consistent with ART for 4.22 #158
• OPRUN-4360: Remove references to operator-framework/catalogd #155
• OPRUN-4352: Update to golang 1.25/ocp 4.22 #156
• Full changelog

cluster-openshift-apiserver-operator

• NO-JIRA: Create test namespace for KMS migration scenario #650
• CNTRLPLANE-2247: Adding KMS TestKMSEncryptionOnOff test for OAS #649
• CNTRLPLANE-2247: Adding KMS TestKMSEncryptionOnOff test for Routes #644
• CNTRLPLANE-2241: Conditionally add the KMS plugin volume mount to the openshift-apiserver container #641
• CNTRLPLANE-2247: Add KMS encryption test target #642
• NO-JIRA: update to Kubernetes v1.34.1 #640
• OCPBUGS-70035: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.22 #635
• Full changelog

cluster-openshift-controller-manager-operator

• no-jira: refactor: use the configured clock source during startup #411
• CNTRLPLANE-2620: propagate global tls config to operand #407
• OCPBUGS-70032: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.22 #404
• Full changelog

cluster-samples-operator

• OCPBUGS-69966: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.22 #671
• Full changelog

cluster-storage-operator

• TRT-2542: Revert #661 “OCPBUGS-74530: Remove featuregate StoragePerformantSecurityPolicy” #664
• OCPBUGS-74530: Remove featuregate StoragePerformantSecurityPolicy #661
• OCPBUGS-66212: Remove VSS permissions #649
• STOR-2523: hypershift: Add desired-version annotation to operand Deployments and use DeploymentVersionController in CSO #638
• OCPBUGS-60159: add vsphere permissions for checking if users is authorized to see metrics #642
• OCPBUGS-69978: Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.22 #651
• OCPBUGS-63698: feat(azure): add HYPERSHIFT_IMAGE env var for token-minter #643
• OCPBUGS-62634: Fix deployment controller Progressing=true on node drain #648
• OCPBUGS-67012: volume-data-source-validator must use IfNotPresent image pull policy #650
• Full changelog

cluster-update-keys

• revert ‘OCPNODE-3978: Second run at expanding the default ClusterImagePolicy for openshift component images #96
• OCPNODE-3978: Second run at expanding the default ClusterImagePolicy for openshift component images #95
• TRT-2537: Revert “OCPNODE-3978: Extend the default ClusterImagePolicy for openshift component images” #94
• OCPNODE-3978: Extend the default ClusterImagePolicy for openshift component images #75
• OCPBUGS-70020: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.22 #91
• Full changelog

cluster-version-operator

• OTA-1861: cmd/cluster-version-operator/render: Add –cluster-version-manifest-path option #1315
• TRT-2549: Revert “Add a serial e2e for accept-risks” #1319
• OTA-1546: Add a serial e2e for accept-risks #1310
• NO-JIRA: Add docs about places running e2e tests #1312
• OCPBUGS-74028: Updating cluster-version-operator-container image to be consistent with ART for 4.22 #1296
• OCPSTRAT-2485: Introduce feature gate based inclusion/exclusion of manifests #1273
• NO-JIRA: More flexible timeout option for oc-cli #1311
• OTA-1546: Reconcile cv.spec.desiredUpdate.acceptRisks #1284
• NO-JIRA: Add a serial e2e test #1306
• TRT-2511: Reapply “OTA-1604: migrate ocp-46922 from otp to cvo repo” #1301
• NO-JIRA: Fix linter issues on dot-imports #1304
• OTA-1546, OTA-1833: Add OKD feature set filtering logic, Bump openshift/api #1302
• NO-JIRA: Fix some lint issues #1299
• Revert “OTA-1604: migrate ocp-46922 from otp to cvo repo” #1297
• OTA-1787: pkg: Update Upgradeable condition to explicitly mention major version updates #1276
• NO-JIRA: hack/build-image.sh: Update Dockerfile reference #1272
• OCPBUGS-73929: lib/resourcemerge/core: Reconcile ConfigMap binaryData too #1294
• NO-JIRA: Bump to builder:rhel-9-golang-1.25-openshift-4.22 #1293
• OTA-1604: migrate ocp-46922 from otp to cvo repo #1279
• NO-JIRA: Introduce oc-cli for e2e tests #1267
• OTA-1786: pkg/payload/precondition/clusterversion/gianthop: Allow updates to 5.0 #1275
• NO-ISSUE: .claude/commands/update-godocs: New command for Go doc updates #1278
• NO-ISSUE: OTA-1605 Adding descriptions for building the binary and running the tests #1263
• NO-JIRA: Create AGENTS.md file #1268
• OCPBUGS-17007: vendor: Update openshift/library-go to get new default TLS configuration #1270
• Full changelog

configmap-reloader

• OCPBUGS-70038: Updating configmap-reload-container image to be consistent with ART for 4.22 #76
• Full changelog

console

• CONSOLE-5021: Enable consistent-type-imports #16031
• HELM-598: Add new server endpoint for installing OCI charts without Helm repository #15863
• CONSOLE-5011: migrate to yarn berry #15986
• OCPBUGS-76554: Ban CJS imports of PF react-icons #16023
• OCPBUGS-76283: Show modal when downloading pod logs #16014
• NO-JIRA: New microcopy-review skill and context simplification #16009
• CONSOLE-5055: AsyncComponent type improvements #16002
• OCPBUGS-76553: i18n miss in CustomIconModal #16021
• CONSOLE-5012: Create shared error modal launcher using React Context #15946
• CONSOLE-4991, ODC-6264: Jest 30 followup #16010
• CONSOLE-5064: Properly mock PluginStore in unit tests #16017
• CONSOLE-5012: Migrate remaining modals to useOverlay pattern #15990
• CONSOLE-4976: Add ClusterExtension creation form and unit tests #15955
• CONSOLE-3769: Phase 2 of using OpenShift Dynamic Plugin SDK #15904
• CONSOLE-4990: Migrate from history object to React Router v6/v7 hooks #15956
• OCPBUGS-73871: i18n upload/download routine task - 4.21 / 281 (Latest) #15976
• OCPBUGS-74974: Use Actions button instead of kebab menu on Subscription details page #15983
• CONSOLE-5043: Remove defaultProps from operator-hub-item-details #16003
• OCPBUGS-74538: User without access on causes NamespaceBar to reset to All projects when used via dynamic plugin #15996
• CONSOLE-5044: TypeScript port of events.jsx #15944
• CONSOLE-4987: Conditionally render Guided Tour based on capability and disable it for Console E2E tests #15926
• OCPBUGS-74639: Number links for failed pods/nodes on ‘Cluster inventory’ card are not linked to filtered table list #15979
• NO-JIRA: Convert useTechPreviewFlagProvider to static function #15960
• CONSOLE-5015: Refactor file-input to use PF #15952
• OCPBUGS-74137: DataView Pagination page menus : i18n misses #15982
• OCPBUGS-74349: Worklodas - Edit pod count and Edit parallelism : Content is in English #15980
• CONSOLE-5029: Refactor withDashboardResources in with-dashboard-resources.tsx into … #15927
• CONSOLE-5012: Additional modal migrations to overlay pattern #15940
• NO-JIRA: Add guidance for avoiding deprecated components #15969
• OCPBUGS-74647: Fix referenceFor parameter in SubscriptionDetailsPage #15957
• OCPBUGS-65967: Clean up old session cookies to prevent accumulation #15837
• CONSOLE-5012: Migrate modals to overlay pattern #15939
• OCPBUGS-65828: Reduce log noise from transient async cache failures #15821
• OCPBUGS-70329: Auto-linkify URLs in status card alert messages #15880
• CONSOLE-5039: Remove useSafetyFirst #15937
• CONSOLE-4943: Add Machine Set, MachineConfigPool, and VMs columns to Nodes list view #15909
• OCPBUGS-74241: Add null checks to CRB subject #15943
• OCPBUGS-72585: Do not resolve disabled catalog type extensions #15908
• CONSOLE-5012: Migrate delete modals and PVC modals to overlay pattern #15932
• OCPBUGS-74369: Bump lodash to latest #15947
• NO-JIRA: Suppress ResizeObserver-related windowError #15958
• OCPBUGS-72260: ‘0 of pods’ are shown in Status column on DaemonSets list page. #15928
• NO-JIRA: Suppress ResizeObserver-related e2e errors #15950
• CONSOLE-5041: Replace testHook with renderHook from RTL #15936
• NO-JIRA: SDK post-publish tasks #15942
• OCPBUGS-74178: Direct AI agents to AGENTS.md documentation hub #15938
• NO-JIRA: Moving the oc and kubectl delete,apply,create commands from deny to ask permissions #15941
• NO-JIRA: Prepare for 4.22-prerelease.1 release #15933
• CONSOLE-5050: Make shared modules peerDeps in SDK #15934
• CONSOLE-3769: Refactor weird getResourceSidebarSamples #15915
• CONSOLE-5042: Remove React.FCC #15929
• OCPBUGS-70340: Ensure OpenAPI in monaco stays fresh #15890
• CONSOLE-4402, CONSOLE-4510: React 18 upgrade - phase 1 #14869
• NO-JIRA: Add /pre-push review command for comprehensive local code analysis #15800
• OCPBUGS-65891: Follow up on fixing the remaining issues in the multi-group impersonation feature #15916
• CONSOLE-4630: @types/react 18 prep work #15893
• OCPBUGS-73766: Configure coderabbit.yaml for only major reviews and disable multiple summaries #15919
• CONSOLE-5035: cache lazy route components to prevent navigation freeze #15924
• CONSOLE-4865: Remove @openshift-console/plugin-shared #15921
• NO-JIRA: Update dynamic demo plugin OWNERS and lock files #15920
• NO-JIRA: Refactor - consolidate K8s client creation into new function #15897
• OCPBUGS-70011: i18n upload/download routine task - 4.21 / 281 #15905
• OCPBUGS-69377: Update the perspective name in dev-console guided tour #15852
• OCPBUGS-69380: Fixed loaded page no roles error upon render #15878
• OCPBUGS-72571: remove “OperatorHub” from OLM integration tests where … #15911
• OCPBUGS-69387: update operator details when changing channels #15853
• OCPBUGS-70344: change OperatorHub strings to Software Catalog #15891
• CONSOLE-4844: merge secret scenarios #15684
• CONSOLE-4912: update machine config tests #15759
• OCPBUGS-63120: Home -> Overview page returns error during upgrade process #15831
• OCPBUGS-62611: Fix editing secrets with mixed text and binary data #15820
• OCPBUGS-65946: Fix search component to not pass ALL_NAMESPACES_KEY to… #15789
• OCPBUGS-65831: Fix catalog service swapping description and markdownDescription fields #15750
• OCPBUGS-68332: Improve VAC field on PVC details page #15843
• OCPBUGS-70330: remove support for Windows 8 Live Tiles and IE “standards mode” #15886
• OCPBUGS-70324: Revert the console-shared.json to console-shared directory #15885
• CONSOLE-4989: bump to react-redux 8 #15854
• CONSOLE-3769: Update OpenShift Dynamic Plugin SDK + webpack-related deps #15892
• CONSOLE-4969: Configure a coderabbit.yaml file for console repo #15818
• NO-JIRA: Fix incorrect syntax for claude settings #15899
• CONSOLE-4971: Add AGENTS.md and structured AI documentation #15896
• OCPBUGS-66247: make cloudCredentials optional so operators load when … #15803
• CONSOLE-3769: Even more openshift/dynamic-plugin-sdk prep work #15778
• OCPBUGS-63389: Remove asterisk from Routing label field in alertManager receiver form #15825
• CONSOLE-4631, CONSOLE-5005: Manually rewrite remaining namespace/default imports #15884
• CONSOLE-4631: Run react/update-react-imports #15872
• OCPBUGS-68376: fix routing issues on packageserver PackageManifest de… #15844
• CONSOLE-4916: add auto scenario about yaml sidebar #15790
• OCPBUGS-65678, OCPBUGS-65765: apiVersion is empty on YAML creation page - Runtime error occurs when create MachineConfig with default yaml from… #15763
• OCPBUGS-63159: Prevent the display of events from projects other than the currently selected project #15836
• OCPBUGS-63237: There should be no role ARN field as token-auth-aws/azure/gcp=false in csv annotations #15813
• OCPBUGS-60426: Fix edit application via Deploy image internal registry doesn’t select correct image stream #15795
• NO-JIRA: Add /gen-rtl-tests Claude code slash command for generating React Testing Library tests for React components #15668
• CONSOLE-4970: Upgrade Jest from 22 to 30 #15817
• CONSOLE-4979: Speed up check-patternfly-modules + add dedupe step to CI #15835
• OCPBUGS-67002: fix bug where Installed badge is not fully visible #15828
• OCPBUGS-63390: show DASH to routing labels column when receiver doesn’t have routing labels #15824
• CONSOLE-4630: Fix 67 react 18 type errors #15779
• CONSOLE-4106: Add ClusterExtension creation page #15741
• OCPBUGS-62713: Prevent application filter in Topology view from resetting to all applications unexpectedly #15812
• NO-JIRA: disable guided tour when cypress is running #15841
• And 14 elided commits (e.g. from squash or rebase merges)
• Full changelog

console-operator

• OCPBUGS-65622: add service account to downloads deployment #1087
• OCPBUGS-62307: Remove orphaned console-conversion-webhook deployment and related resource #1053
• OCPBUGS-57468: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads #1102
• OCPBUGS-72387: Update the downloads manifest #1101
• OCPBUGS-72387: Fix PDB blocking node drains during cluster upgrades #1099
• CONSOLE-4986: Vendor API changes for GuidedTourFeature capability #1091
• NETOBSERV-2296: add missing annotations on netobserv quickstart #1080
• OCPBUGS-65496: Add missing relatedObjects + small refactoring #1075
• NO-JIRA: Fix claude syntax #1088
• OCPBUGS-68367: Add missing console annotation to the quickstart #1082
• OCPBUGS-70045: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.22 #1086
• CONSOLE-4871: Add AI context documentation files #1077
• CM-821, ESO-277, SSCSI-235: Add quickstart guides for secrets management operators #1073
• Full changelog

coredns

• OCPBUGS-69852: Updating coredns-container image to be consistent with ART for 4.22 #159
• NO-JIRA: Add team members to the OWNERS file #162
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-69813: Updating csi-driver-manila-container image to be consistent with ART for 4.22 #369
• OCPBUGS-70057: Updating ose-openstack-cloud-controller-manager-container image to be consistent with ART for 4.22 #360
• OCPBUGS-70072: Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.22 #358
• Full changelog

csi-driver-nfs

• NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main #167
• OCPBUGS-70043: Updating csi-driver-nfs-container image to be consistent with ART for 4.22 #168
• Full changelog

csi-external-attacher

• OCPBUGS-69744: Updating csi-attacher-container image to be consistent with ART for 4.22 #91
• Full changelog

csi-external-provisioner

• OCPBUGS-70054: Updating csi-provisioner-container image to be consistent with ART for 4.22 #118
• Full changelog

csi-external-resizer

• OCPBUGS-70039: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.22 #180
• Full changelog

csi-external-snapshot-metadata

• OCPBUGS-69720: Updating csi-external-snapshot-metadata-container image to be consistent with ART for 4.22 #8
• Full changelog

csi-external-snapshotter, csi-snapshot-controller

• OCPBUGS-66967: UPSTREAM: 1354: UPSTREAM: 1359: Fix for cases where the resource is already present on the cluster #193
• OCPBUGS-69979: Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.22 #195
• OCPBUGS-66967: UPSTREAM: <drop>: bump log level of the group snapshot reconciler #192
• OCPBUGS-69721: Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.22 #194
• Full changelog

csi-livenessprobe

• OCPBUGS-69958: Updating csi-livenessprobe-container image to be consistent with ART for 4.22 #78
• Full changelog

csi-node-driver-registrar

• OCPBUGS-70041: Updating csi-node-driver-registrar-container image to be consistent with ART for 4.22 #92
• Full changelog

docker-builder

• OCPBUGS-70150: bump buildah to 1.39.7 to fix CVE-2025-52881 #494
• OCPBUGS-69871: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.22 #493
• Full changelog

docker-registry

• IR-350: bump library-go to the latest version #460
• IR-350: fix cipher suite configuration conflict with docker distribution #459
• OCPBUGS-69762: Updating openshift-enterprise-registry-container image to be consistent with ART for 4.22 #457
• Full changelog

driver-toolkit

• NO-ISSUE: Support ubi minimal base image #179
• OCPBUGS-69699: Updating driver-toolkit-container image to be consistent with ART for 4.22 #178
• Full changelog

etcd

• OCPBUGS-69868: Updating ose-etcd-container image to be consistent with ART for 4.22 #353
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-74913: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.11.0 (1cb204d) into master #261
• NO-JIRA: UPSTREAM: <carry>: Add manifests verify target #259
• Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART for 4.22 #257
• Full changelog

gcp-machine-controllers

• CORS-4296: Add the N4A machine type #138
• OCPBUGS-70052: Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 4.22 #137
• OCPCLOUD-3255: Add AGENTS configuration #136
• Full changelog

gcp-pd-csi-driver

• OCPBUGS-74521: UPSTREAM: 2175: Move VAC storage API to v1 from v1beta1 #97
• OCPBUGS-69930: Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.22 #87
• Full changelog

gcp-pd-csi-driver-operator

• OCPBUGS-74521: Remove VolumeAttributesClass FeatureGate #168
• STOR-2792: STOR-2842: Enable Hyperdisk-balanced High Availability disks #158
• STOR-2793: Add volume snapshot class of type images #165
• STOR-2543: Add VAC manifest to support tests on GCP PD #160
• OCPBUGS-69742: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.22 #159
• OCPBUGS-66113: Some containers do not have readOnlyRootFilesystem #157
• Full changelog

gcp-workload-identity-federation-webhook

• CCO-730: Revendor upstream changes #14
• OCPBUGS-69839: Updating gcp-workload-identity-federation-webhook-container image to be consistent with ART for 4.22 #13
• Full changelog

haproxy-router

• NE-2483: bump k8s libraries to v0.35.0 #729
• OCPBUGS-72591: Lower verbosity for parseIPList empty list logging #709
• NO-JIRA: hack: update image without push #711
• NO-JIRA: add jcmoraisjr to owners #717
• OCPBUGS-70068: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.22 #707
• OCPBUGS-65482: Fix HAProxy redirect: strip port from Host header #696
• Full changelog

hyperkube, kube-proxy, pod

• OCPBUGS-66338: UPSTREAM: 135629: selinux: Fix the controller to ignore finished pods #2538
• OCPBUGS-67200: UPSTREAM: 136202: raise kubelet CSI init backoff to cover ~140s DNS delays #2578
• OKD-259: Validate OKD featureset to prevent it from being enabled on OCP clusters #2420
• OCPBUGS-73913: UPSTREAM: 135340: cbor: bump limits #2564
• OCPBUGS-70170: add label serial for iperf2 testing #2559
• OCPBUGS-63045: enable InPlace resize test #2532
• NO-ISSUE: Extend k8s suite timeouts for parallel testing load #2497
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

hypershift

• OCPBUGS-70152: Correct route labeling logic for HCP router infratructure #7605
• CNTRLPLANE-2216: feat(aws): migrate route53 to AWS SDK v2 #7726
• OCPBUGS-43449: Remove UltraSSD_LRS from DiskStorageAccountType for OS Disks #7727
• CNTRLPLANE-644: Unify Validate/Complete Function Signatures Across Providers #7577
• OCPBUGS-65879: Fix image-overrides annotation removal propagation to HCP #7533
• CNTRLPLANE-2740: Add KAS liveness readiness sidecar to OAS and OAuth API Server #7722
• OCPBUGS-34662: Manage AWS EBS CSI driver metrics serving certificates via CPO #7538
• OCPBUGS-73915: Use openshift golang builder for MCE builds #7735
• NO-JIRA: Remove .claude/settings.json #7751
• OCPBUGS-62177: Fix certificate revocation validation across all KAS pods #7405
• CNTRLPLANE-2696: docs(azure): add managed Azure control plane authentication documentation #7653
• NO-JIRA: test(e2e): add CloudController field to GCP ServiceAccountsEmails structs #7739
• AUTOSCALE-485: bump karpenter-aws dependencies to 1.8.6 #7611
• TRT-2554: Revert #7489 “CNTRLPLANE-2203: add ControlPlaneConnectionAvailable condition” #7734
• GCP-367: Implement GCP Cloud Controller Manager component #7677
• OCPBUGS-72596: Fix node-tuning-operator metrics port configuration #7468
• CNTRLPLANE-2203: add ControlPlaneConnectionAvailable condition #7489
• GCP-386: feat(gcp): enable DNS delegation for hosted cluster ingress via DNSEndpoint #7702
• NO-JIRA: ci: fix bug in leader election detection #7696
• GCP-308: test: verify control plane workloads have resource requests #7623
• OCPBUGS-60707: Fix user-ca-bundle cleanup when additionalTrustBundle is removed #6900
• CNTRLPLANE-2736: Rename review-agent-single-pr to address-review-comments #7709
• CNTRLPLANE-2215: feat(aws): migrate S3 to AWS SDK v2 #7678
• NO-JIRA: test(nodepool): add unit tests for scale-from-zero annotations #7688
• OCPBUGS-55151: Move proxy certificate validation from metrics collector to reconcile loop #7536
• CNTRLPLANE-418: Aro swift private #7613
• CNTRLPLANE-2700: docs: add HCP networking requirements documentation #7654
• CNTRLPLANE-2675: chore(cpo): move infrastructure reconciliation to infra package #7658
• GCP-216: feat(nodepool): add GCP platform support #7631
• GCP-199: add DNS management to Control Plane Operator #7639
• AUTOSCALE-492: karpenter-ignition controller #7582
• OCPBUGS-66966: loop over node-pool conditions updating in order #7325
• SREP-715: New option to dump data plane content through the kube API server service exposed in HCP namespaces #6533
• OCPBUGS-74620: test(e2e): increase default node ready timeout to 45 minutes #7629
• OCPBUGS-74498: Add UserAgent telemetry to CPO Azure SDK clients #7620
• OCPBUGS-74931: fix(hcco): gate image registry workaround to pre-4.20 releases #7634
• NO-JIRA: docs(aws): add AWS PrivateLink architecture documentation #7645
• NO-JIRA: chore(ai): Add skills for dev workflow #7636
• CNTRLPLANE-2709: Update Dependabot to use conventional commits #7672
• CNTRLPLANE-2703: Disable Renovate dependency updates #7657
• OCPBUGS-74988: fix(test): resolve E2E flakes in global-pull-secret-syncer DaemonSet readiness checks #7627
• CNTRLPLANE-2214: Migrate STS to AWS SDK v2 #7386
• NO-JIRA:Docs: update documentation URL from netlify to pages.dev #7622
• GCP-366: add CloudController service account for CCM #7617
• NO-JIRA: ci: Improves the isLeaderElectionFailure function: #7589
• NO-JIRA: Fix teardown flag timing in e2e tests #7586
• CNTRLPLANE-2548: add direct Jira REST API integration to pr-report #7532
• OCPSTRAT-2437: add unit test for custom HAProxy image annotation #7458
• CNTRLPLANE-1708: Enable EnsureGlobalPullSecret AtLeast Version418 #7624
• CNTRLPLANE-418: fix shared ingress AllowedCIDRs to use fc_src for PROXY protocol #7587
• AUTOSCALE-535: default block device mappings #7583
• OCPBUGS-69447: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7399
• GCP-198: add PSC endpoint controller for customer-side management #7603
• CNTRLPLANE-2650: docs(ci): add security requirement for Jira agent issues #7626
• CNTRLPLANE-2650: docs: add AI-assisted CI jobs documentation #7598
• OCPBUGS-62760: Pre-pull images to avoid startup delays and flaky e2e #7382
• OCPBUGS-74247: CAPI image overrides aware of registry config #7575
• CNTRLPLANE-1137: Add support for external CNI provider Cilium #7423
• GCP-176: feat(gcp): add WIF credentials support for control plane op… #7600
• NO-JIRA: test(assets): add unit test for CAPI resources file paths #7601
• CNTRLPLANE-2580: feat(claude): update /update-konflux-tasks to work without log file #7591
• GCP-213: feat(platform): add Google Cloud Platform support with CAPG Deployment #7305
• OCPBUGS-62944: forceful termination of instances during HCP AutoNode deletion #7281
• NO-JIRA: build: bump Go version to 1.25.3 #7592
• CNTRLPLANE-1388: Spot with termination handler #7567
• CNTRLPLANE-1892: chore(e2ev2): fixup GCP API checks #7555
• NO-JIRA: ci: update build root image to Go 1.25 #7584
• CNTRLPLANE-1988: Add Azure support to product CLI for self-managed customers #7407
• AUTOSCALE-373: Proper ROSA instance tagging for AutoNode #6939
• OCPBUGS-63345: AWS credential metric to distinguish unknown from invalid status #7075
• OCPBUGS-74336: feat(cpo): check components have rolled out before setting available #7434
• NO-JIRA: chore(deps): weekly dependabot consolidation #7563
• OCPBUGS-64576: fix(dump): Fix dump command failure when EC2NodeClass resource is not registered #7147
• CNTRLPLANE-2559: feat(contrib): add request serving setup utility #7534
• CNV-76520: ci: allow restart of kubevirt-cloud-controller-manager #7469
• NO-JIRA: fix(test): shorten scale-from-zero test name to avoid IAM role length limit #7558
• OTA-1833: Adopt a new FeatureSet OKD #7557
• OCPBUGS-62761: chore(e2e): remove KAS check from capi pod #7485
• OCPBUGS-73817: fix: add hypershift.openshift.io/nodepool-globalps-enabled label to be ignored in cluster-autoscaler deployment #7480
• OCPBUGS-65885: added 1.34 required ELBv2 perms to CCM role #7339
• API-1835: Scaffold dynamic informers #7477
• CNTRLPLANE-2579: feat(konflux): add script to update pipeline task bundles to latest trusted versions #7553
• OCPBUGS-58397: feat(KubeVirt): configure External evictionStrategy on VMs #6380
• GCP-197: add GCPPrivateServiceConnect controller for managing Service Attachments for Private Service Connect #7302
• NO-JIRA: fix(e2e): TestNodePoolAutoscalingScaleFromZero for 4.20 and later only #7556
• CNTRLPLANE-2291: feat(claude): add fix-hypershift-repo-robot-pr command #7438
• CNTRLPLANE-2568: Update Konflux Tekton tasks to latest versions #7551
• NO-JIRA: test(ingress): add test for clearing LoadBalancerSourceRanges #7544
• NO-JIRA: fix(claude): fix Claude Code subagents frontmatter #7550
• NO-JIRA: chore(deps): bump github.com/opencontainers/selinux from 1.11.0 to 1.13.0 #7462
• OCPBUGS-55399: Add NTO Service and ServiceMonitor #7355
• NO-JIRA: test(autoscaling): make GPU annotation optional in scale-from-zero test #7484
• OCPBUGS-73914: Update Tekton tasks to pass enterprise contract validation #7535
• NO-JIRA: chore(deps): bump github.com/cloudflare/circl from 1.3.7 to 1.6.1 in /hack/tools #7463
• NO-JIRA: Add karpenter approvers and reviewers #7488
• NO-JIRA: chore(ho): update lower bound version checks for OCP 5 #7472
• NO-JIRA: fix(docs): strip markdown links from aggregated documentation #7487
• NO-JIRA: chore(deps): bump github-dependencies group with 17 updates #7455
• OCPBUGS-73847: fix(cli): use /tags endpoint for all release streams to enable RC filtering #7483
• OCPBUGS-67234: fix(hostedcluster): unpause CAPI cluster when deleting paused HostedCluster #7389
• OCPBUGS-72258: use InfraStatus.APIPort for custom DNS kubeconfig #7470
• API-1835: Scaffold OpenShiftManager controller #7445
• CNTRLPLANE-1768: feat(api): add support for graceful service account signing key rotation #7324
• OCPBUGS-66205: [kubevirt] Make L3 migration labeling conditional #7308
• NO-JIRA: chore(deps): bump Azure SDK and misc-dependencies groups #7464
• NO-JIRA: chore(tekton): update Konflux task digests to latest versions #7465
• OCPBUGS-70320: enable scale-up from zero with InPlace upgrade #7427
• NO-JIRA: Add review process docs to CONTRIBUTING.md #7426
• CNTRLPLANE-208: Document needed Azure infrastructure #7361
• NO-JIRA: fix(deps): update k8s.io/utils digest to 914a6e7 #7450
• NO-JIRA: chore(deps): bump misc-dependencies group with 11 updates #7437
• OCPBUGS-72411: fix(cno): use brackets only for IPv6 in server URL #7447
• NO-JIRA: chore(konflux): update Tekton tasks to latest versions #7451
• OCPBUGS-72397: Fix Konflux EC voilation, update deprecated base … #7442
• NO-JIRA: docs(konflux): add IMAGE_RELEASE_PROCESS.md #7432
• NO-JIRA: test(e2e): fix AKS e2e test flakiness #7410
• CNTRLPLANE-1978: add e2e tests for DataPlaneConnectionAvailable condition #7291
• AUTOSCALE-473: Add HostedCluster annotation for karpenter ec2nodeclass instanceProfile #7392
• NO-JIRA: fix(awseps): cache local zone ID in non-shared VPC case #7409
• OCPBUGS-66211: fix(azure): preserve defaulted values in Infrastructure status #7393
• OCPBUGS-69761: fix(ingress): clear LoadBalancerSourceRanges when AllowedCIDRBlocks is removed #7425
• GCP-258: Use PullAlways for :latest image tags in control plane components #7313
• OCPBUGS-63698: fix(azure): remove CSI secret ownership from hypershift-operator #7157
• OCPBUGS-66154: add OAuth certificate configuration doc #7351
• OCPBUGS-67224: fix(Portieris): Fix Portieris by mounting emptyDir to ‘./.trust’ work dir #7368
• CNTRLPLANE-1622: Enable nodepool autoscaling min zero #6975
• CNTRLPLANE-2119: feat(hostedcluster): implement service account signing key rotation #6874
• OCPBUGS-66325: fix: ValidAWSIdentityProvider condition not being correctly copied from HCP #7352
• NO-JIRA: fix(install): skip IPAM CRDs if they already exist #7363
• CNTRLPLANE-1977: Add weekly PR report generation capability #7272
• OCPBUGS-68366: CVE-2025-58183 #7374
• CNTRLPLANE-2123: feat: update builder images from 4.21 to 4.22 #7317
• OCPBUGS-63452: Add finalizer protection to control plane workloads #7258
• CNTRLPLANE-2205: feat(aws): enable shared role in e2e #7400
• NO-JIRA: chore(azure): bump AKS Kubernetes version to 1.33.0 #7371
• CNTRLPLANE-2206: Create tool to aggregate upstream docs into single file for NotebookLM #7367
• OCPBUGS-66211: fix(vendor): bump openshift/api dependency to current master #7345
• OCPBUGS-66146: Add OADP backup recovery tool for HyperShift clusters #7385
• CNTRLPLANE-2221: Add CI infrastructure documentation #7369
• CNTRLPLANE-2123: Fix buildah-remote-oci-ta task enterprise contract violation #7396
• CNTRLPLANE-2049: Update kube-api-linter dependency #7346
• NVIDIA-314: Support Node CIDR Allocation for networkType=Other Using AllocateNodesCIDRs #7278
• CNTRLPLANE-2123: feat: update latest supported version from 4.21 to 4.22 #7315
• CNTRLPLANE-2205: cmd/aws: fix managed role handling and auto-detect on destroy #7373
• CNTRLPLANE-2123: feat: add release-4.21 branch to renovate configuration #7318
• NO-JIRA: test: remove network-dependent unit tests for image metadata #7381
• OCPBUGS-67233: fix(konflux): update outdated Tekton tasks to pass enterprise contract validation #7372
• Full changelog

ibm-vpc-block-csi-driver

• OCPBUGS-69849: Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART for 4.22 #116
• Full changelog

ibm-vpc-block-csi-driver-operator

• STOR-2852: Enable snapshot tests ibm vpc block csi #160
• OCPBUGS-69909: Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.22 #159
• Full changelog

ibmcloud-cluster-api-controllers

• NO-JIRA: UPSTREAM: <carry>: Add manifests verify target #145
• OCPBUGS-70027: Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.22 #143
• Full changelog

ibmcloud-machine-controllers

• OCPBUGS-70030: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.22 #74
• Full changelog

insights-operator

• OCPBUGS-66233: Custom Obfuscation unmarshal #1216
• CCXDEV-15561: Improve test coverage 3 #1213
• NO-JIRA: update on-demand gathering examples #1212
• OCPBUGS-65500: reference ClusterRoles in ClusterOperator #1211
• CCXDEV-15778: add event logging for operator version changes #1202
• CCXDEV-15589: set limit for gathering interval #1171
• OCPBUGS-67001: update dataGather status after job deletion #1201
• OCPBUGS-66386: [bugfix] The ConfigMap value for StoragePath is ignored on basic routine #1203
• CCXDEV-15561: Improve test coverage 2 #1199
• OCPBUGS-65582: set Progressing condition on cluster update #1207
• CCXDEV-15258: DataGather and InsightsDataGather update to v1 #1159
• OCPBUGS-66996: Extends the time for the extractor liveness probe #1198
• OCPBUGS-69764: Updating ose-insights-operator-container image to be consistent with ART for 4.22 #1204
• CCXDEV-15561: Improve test coverage #1191
• Full changelog

insights-runtime-exporter, insights-runtime-extractor

• OCPBUGS-76464: remove dnf cache from the container images #62
• chore: Update JBoss EAP 8.1 runtime samples #61
• eap 8.1 test fix #57
• Full changelog

ironic

• NO-ISSUE: Update requirements.cachito with latest openshift forks commits #793
• NO-ISSUE: Update requirements.cachito with latest openshift forks commits #789
• NO-ISSUE: Update requirements.cachito with latest openshift forks commits #784
• NO-ISSUE: Update requirements.cachito with latest openshift forks commits #783
• NO-ISSUE: Update requirements.cachito with latest openshift forks commits #773
• ART-14497: Fix ART builds with -minimal #779
• NO-ISSUE: Bump openstacksdk version to 4.9.0 #776
• OCPBUGS-74579: fix for minimal builds #772
• OCPBUGS-74427: Bump eventlet version to latest bugfix #770
• NO-ISSUE: Update requirements.cachito with latest openshift forks commits #768
• NO-ISSUE: Update requirements.cachito with latest openshift forks commits #762
• NO-ISSUE: Update requirements.cachito with latest openshift forks commits #758
• NO-ISSUE: Update requirements.cachito with latest openshift forks commits #757
• NO-ISSUE: Update requirements.cachito with latest openshift forks commits #755
• NO-ISSUE: Update requirements.cachito with latest openshift forks commits #754
• NO-ISSUE: Update requirements.cachito with latest openshift forks commits #751
• OCPBUGS-70001: Updating ironic-container image to be consistent with ART for 4.22 #752
• NO-ISSUE: Update requirements.cachito with latest openshift forks commits #748
• OCPBUGS-65969: Set the tls cacert path to writable mount when the IRONIC_CACERT_FILE is unset #728
• Full changelog

ironic-agent

• NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #242
• OCPBUGS-74579: fixes for minimal builds #240
• NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #238
• NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #237
• Updating ironic-agent-container image to be consistent with ART for 4.22 #225
• NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #223
• Full changelog

ironic-machine-os-downloader

• OCPBUGS-71233: Export TMPDIR to be available to child processes #111
• OCPBUGS-69891: Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.22 #110
• Full changelog

ironic-static-ip-manager

• OCPBUGS-70044: Updating ironic-static-ip-manager-container image to be consistent with ART for 4.22 #56
• Full changelog

keepalived-ipfailover

• OCPBUGS-76286: openshift-enterprise-base: remove subscription-manager, dbus, systemd #221
• OCPBUGS-67357: Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.22 #218
• Full changelog

kube-metrics-server

• OCPBUGS-69952: Updating ose-kube-metrics-server-container image to be consistent with ART for 4.22 #48
• Full changelog

kube-rbac-proxy

• CNTRLPLANE-882: 0.20.2 downstream #131
• Full changelog

kube-state-metrics

• OCPBUGS-73993: Updating kube-state-metrics-container image to be consistent with ART for 4.22 #129
• OCPBUGS-71224: [bot] Bump openshift/kube-state-metrics to v2.18.0 #130
• Updating kube-state-metrics-container image to be consistent with ART for 4.22 #126
• Full changelog

kube-storage-version-migrator

• OCPBUGS-69726: Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.22 #235
• Full changelog

kubevirt-cloud-controller-manager

• NO-JIRA: Upstream Sync - 2026-01-27 #60
• Full changelog

machine-api-operator

• OCPCLOUD-3166: Bump openshift/api #1453
• OKD-259: Vendor API and add OKD featureset Specific CRDs #1448
• SPLAT-2603: Updated AWS dedicated host id validation pattern #1451
• OCPBUGS-64937: vsphere - Cache REST API sessions to prevent excessive vCenter logouts #1432
• OCPCLOUD-3222: Adds agents.md #1449
• OCPBUGS-69862: Updating ose-machine-api-operator-container image to be consistent with ART for 4.22 #1450
• Full changelog

machine-config-operator

• MCO-2032: Avoid MCPs duplication at install time #5518
• MCO-2131: Break e2e-ocl test suite into 2 #5669
• MCO-2120: Rework OS Image Stream label classification #5650
• OCPBUGS-24003: mcd_config_drift not working properly #5632
• MCO-2035: Add a prometheus alert to indicate scaling risk #5615
• MCO-2036: Enable boot image updates by default for vsphere and Azure #5583
• OCPNODE-3880: bump openshift/client-go #5663
• OCPBUGS-76444: pkg/daemon/update: Remove kernel-rt-kvm #5654
• MCO-2110: Migrate security tests #5621
• OCPNODE-3880: Bump openshift/api #5655
• OCPBUGS-23418: Machine-config controller should not log about non-existent pull-secret changes #5625
• OCPBUGS-76450: reduce MCO image size #5644
• NO-ISSUE: Fix cleanup verification timeouts in e2e-ocl tests #5652
• OCPBUGS-74692: Write all units when forcefile exists to recover from systemd unit config drift #5612
• OCPBUGS-63699: Remove MCD liveness probe #5623
• MCO-1984: Add Component Readiness tests for boot image skew enforcement #5547
• TRT-2543: Revert #5586 “MCO-2065: Move systemctl execs to dbus calls” #5638
• OCPBUGS-75916: crio: disable short_name_mode until we introduce ctrcfg api for it #5628
• NO-ISSUE: Make TestImagePrunerErrors flexible to registry behavior changes #5613
• OCPEDGE-2216: feat: increase reserved memory for tnf masters #5592
• MCO-2065: Move systemctl execs to dbus calls #5586
• NO-ISSUE: Fix-up AMI update script to work from CI image #5626
• NO-ISSUE: Update AMI script and list #5616
• MCO-1877: MCO-1879: MCO-1882: MCO-1884: Implement boot image skew enforcement MVP #5428
• MCO-1924: MCO-500: Migrate direct runGetOut() to use CommandRunner in the MCD #5546
• NO-JIRA: Fix OSImageStream validating admission policies for OKD #5618
• MCO-1953: Refactor functionality to grab machines by state for calculating MCP status #5541
• OCPBUGS-20561: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5601
• MCO-2090: migrate nodedisruptionpolicy tests from the private reposit… #5602
• NO-JIRA: Pass TAGS argument to the machine-config-controller image build #5611
• AGENT-1395: IRI followup changes #5562
• AGENT-1424: Add e2e test for IRI deletion #5608
• MCO-2088: Remove wasm extension #5598
• OCPBUGS-72555: Restrict CPMS boot image configuration to only AWS, GCP and Azure platforms #5540
• NO-ISSUE: Add bootstrap e2e guide #5604
• NO-ISSUE: CPMS test should account for skew API #5599
• OCPBUGS-74368: Stale operator metrics Service and ServiceMonitor resources need to be deleted #5593
• MCO-2059: migrate machineconfignodes from private repo #5589
• OCPBUGS-58023: Prevent unnecessary systemd unit disable #5582
• NO-ISSUE: Fix e2e ocl intermittent failures #5595
• MCO-1182: migrate private test case OCP-87023 #5587
• AGENT-1424: add initial e2e tests for the InternalReleaseImage controller #5588
• AGENT-1412: Prevent deletion of InternalReleaseImage when in use #5545
• OCPBUGS-71238: Consider image mirrors for OSImageStream fetching #5560
• NO-ISSUE: Fix Failure Status condition to True when kubeletconfig or container runtime config validation fails #5542
• OCPBUGS-62295: Shorten HAProxy timeouts #5312
• MCO-2055: migrate bootimages tests #5551
• Revert “OCPBUGS-58023: Prevent unnecessary systemd unit disable” #5576
• OCPBUGS-73802: Fix up bootstrap-e2e #5563
• MCO-2028: Add target OS version detection #5556
• NO-JIRA: bump openshift/client-go #5500
• NO-ISSUE: Fixes the issue in the test TestKubeletConfigMaxPods when AutoNodeSizing is enabled by default #5555
• OCPBUGS-72396: use D-Bus API to list systemd units #5537
• OCPBUGS-56717: enable nodeip-configuration for platform external #5475
• CORS-4208: set default KUBELET_NODE_IPS for dualstack nodes #5384
• OCPBUGS-72553: CPMS boot image config should not override standard MachineSet configuration #5539
• OCPBUGS-67229: Set NodeDegraded MCN condition when node state annotation is set to Degraded #5509
• OCPBUGS-58023: Prevent unnecessary systemd unit disable #5527
• AGENT-1411: fix IRI registry setup file #5543
• OCPBUGS-71189: Configure proxy from ControllerConfig #5538
• MCO-2047: migrate scale tests from private repository to MCO repository #5533
• MCO-650: Implement custom pool booting #5361
• MCO-2049: Validate MCP osImageStream reference #5535
• NO-ISSUE: Add README for MCO Operator disruptive e2e tests #5522
• MCO-2037: Fix timeout during configMap cleanup #5529
• AGENT-1411: Preload the registry image when starting the iri-service #5514
• NO-JIRA: kubelet: drop pod-infra-container-image usage #5460
• OCPBUGS-70259: Enable existing units without content #5520
• MCO-2018: Move operator metrics into the controller #5498
• MCO-2033: Refactor bootstrap dependency handling #5519
• OCPNODE-3973: Default CPU/Memory changes to Workers - AutoSizingReserved #5491
• OCPBUGS-69910: Bump OpenShift builder images to 4.22 #5512
• OCPBUGS-69674: Skip boot image updates if arch annotation is not found #5508
• MCO-1961: Integrate OSImageStream into MCP and sync logic #5476
• MCO-2006: Migrate pinned images sets private test cases #5466
• OCPBUGS-66209: clusteroperator/machine-config blips Degraded=True in CI jobs #5465
• MCO-2015: Use an event based queue in the boot image controller #5479
• MCO-1016: Only update when there is an actual controller change #4742
• MCO-1961: Rework MC’s OSImageURL merge logic #5488
• OCPBUGS-62984: MCP is not correctly degraded when a pivotError happens #5492
• OCPBUGS-62828: MCO degraded when an empty pull-secret is configured #5486
• AGENT-1391: Use TLS cert for the InternalReleaseImage registry #5483
• OCPBUGS-66420: Revert “Default Enablement of Auto Sizing Reserved in OpenShift 4.21” #5489
• Full changelog

machine-image-customization-controller

• OCPBUGS-76461: Clean up dnf cache to reduce container image size #162
• OCPBUGS-22175: Add IPA messages for console and SSH login #158
• NO-ISSUE: Add AGENTS.md and CLAUDE.md #156
• OCPBUGS-70040: Updating ose-image-customization-controller-container image to be consistent with ART for 4.22 #155
• Full changelog

machine-os-images

• METAL-1720: Add aarch64 symlinks for initramfs #79
• NO-ISSUE: Run fetch_image with tracing #68
• OCPBUGS-69857: Updating ose-machine-os-images-container image to be consistent with ART for 4.22 #76
• NO-ISSUE: Add AGENTS.md file #75
• Full changelog

metallb-frr

• CNF-20883: Downstream merge 2025-12-30 #118
• Full changelog

monitoring-plugin

• OU-1195: List OCP namespaces in Create Dashboard ProjectSelector #765
• OU-1231: customizable dashboards automation testing fixes after merge to main #771
• NO-JIRA: Init Coderabbit config #770
• OU-1189: automation for kebab management actions for perses dashboards #757
• COO-1562: update acm alerting UI test case #753
• OBSINTA-1063: Add incidents e2e command #740
• OU-1213: IncidentPage add error state #750
• OU-1062: feat: mark alert menu active for incidents tab #754
• OU-1205: feat: force rounded dates for consecutive intervals #748
• OU-915: create dashboards and rbac #746
• OU-1039: add info alert to the Incident page #741
• NO-JIRA: fix: update vulnerable dependencies #742
• COO-1515: add the cluster-health-analyzer feature #736
• OCPBUGS-72604: remove top level dispatch into useEffect #730
• NO-JIRA: monitoring testing - metrics - ungraphable for periodics #731
• OU-1134: edit perses dashboards automation testing #712
• OU-1122: reuse existing handler to set alerts table data #690
• NO-JIRA: fix: remove unnecessary package.lock #728
• OCPBUGS-70014: Updating monitoring-plugin-container image to be consistent with ART for 4.22 #708
• OBSINTA-1062: custom cluster-health-analyzer builds #720
• NO-JIRA: metrics automation failing only in periodics - fix click and type timespan #725
• NO-JIRA: fix esbuild optional dependencies for cross arch builds #721
• OCPBUGS-70314: fix: update qs vulnerable dependency #715
• NO-JIRA: metrics automation testing for presubmit and periodic #716
• NO-JIRA: feat: use esbuild-loader, add push manifest command to makefile #713
• OU-1064: list perses dashboards automation testing #711
• NO-JIRA: monitoring automation fixing Core platform change #709
• OU-632: Split ALERTS query_range into several requests for Incidents #678
• OU-1082: claude slash commands cypress-setup and cypress-run #673
• OU-1074: feat: add backport claude command #691
• OU-1088: remove random multiplication #696
• OU-1073: chore: add contributing guide #694
• NO-JIRA: automation - dev user scenarios fixes with namespace level changes #692
• OBSINTA-853: Cypress Incidents Remove Flaky Tag #688
• OU-1081: allow claude-code to build-images #686
• OU-1123: alerts chart in Incidents - set the container height same as char… #689
• OBSINTA-858: [Incidents] Commands for AI-Assisted Development of Cypress Tests #621
• OBSINTA-853: Incident tests CI: Incorrect MP namespace + Race Condition in Closing Guide Tour #679
• OCPBUGS-68373: fix: upgrade node-forge vulnerable dependency #681
• NO-ISSUE: expose argument’s default values #665
• NO-JIRA: automation monitoring testing stabilization flaky scenarios #684
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

multus-admission-controller

• OCPBUGS-69968: Updating ose-multus-admission-controller-container image to be consistent with ART for 4.22 #113
• Full changelog

multus-networkpolicy

• OCPBUGS-69727: Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.22 #83
• Full changelog

must-gather

• no-jira: chore: ensure scripts are properly formatted #524
• no-jira: test: add basic UT for collection-scripts #521
• OSSM-11290: Collect Istio ZTunnel resources #511
• OCPBUGS-70064: Updating ose-must-gather-container image to be consistent with ART for 4.22 #519
• Full changelog

network-metrics-daemon

• OCPBUGS-74026: Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.22 #141
• OCPBUGS-69971: Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.22 #140
• Full changelog

network-tools

• NO-JIRA: Comment submariner team members until they’re ready for OVNK bugs #171
• OCPBUGS-70066: Updating ose-network-tools-container image to be consistent with ART for 4.22 #170
• Full changelog

networking-console-plugin

• CNV-76435: CUDN breadcrumb link to page with Project selector #325
• OCPBUGS-73548: remove whitelist for allowlist #321
• CNV-75831: list all NetworkPolicies in “All projects” #313
• CNV-76277: Fix name generator with unprofessional names #315
• OCPBUGS-70000: Updating networking-console-plugin-container image to be consistent with ART for 4.22 #312
• CNV-76211: Remove deprecated badge from localnet #314
• CNV-74685: Fix vm network edit modal #311
• CNV-74687: Fixing the title and redirect when deleting a vm network #307
• CNV-72230: fix networking links #309
• Full changelog

nutanix-cloud-controller-manager

• OCPBUGS-69976: Updating ose-nutanix-cloud-controller-manager-container image to be consistent with ART for 4.22 #53
• Full changelog

nutanix-machine-controllers

• OCPBUGS-69913: Updating ose-nutanix-machine-controllers-container image to be consistent with ART for 4.22 #128
• Full changelog

oauth-apiserver

• CNTRLPLANE-2436: bump(k8s)=1.34.1 #164
• CNTRLPLANE-2260: cmd/oauth-apiserver-tests-ext: Update OTE framework integration #162
• OCPBUGS-69818: Updating ose-oauth-apiserver-container image to be consistent with ART for 4.22 #160
• CNTRLPLANE-1259: Simplified test infrastructure to single-module architecture #154
• Full changelog

oauth-proxy

• OCPBUGS-73848: test/e2e - do not use ambiguous container image short names #343
• Full changelog

oauth-server

• CNTRLPLANE-2437: bump(k8s)=1.34.1 #208
• Full changelog

oc-mirror

• CLID-513: operator catalogs pinned by digest in ISC #1333
• OCPBUGS-75013: Fix reg config detection for explicit false values #1348
• OCPBUGS-73760: fix conversion issue for catalog #1338
• OCPBUGS-69745: fix duplicated channel bug in filtered catalogs #1339
• CLID-476: Fixes for cross-build errors #1303
• OCPBUGS-70024: images: update images to 4.22 #1337
• OCPBUGS-70024: Updating oc-mirror-plugin-container image to be consistent with ART for 4.22 #1331
• NO-JIRA: Add tests/results-integration to .gitignore #1326
• CLID-480: v2: do not invoke v1 make commands #1310
• CLID-512: claude: add slash command for ISC generation #1328
• NO-JIRA: add adolfo-ab as reviewer #1329
• Full changelog

olm-catalogd, olm-operator-controller

• NO-ISSUE: Synchronize From Upstream Repositories #640
• NO-ISSUE: Synchronize From Upstream Repositories #639
• NO-ISSUE: Synchronize From Upstream Repositories #637
• OPRUN-4441: fix(ote): Fix up own-namespace invalid configuration test #634
• NO-ISSUE: Synchronize From Upstream Repositories #633
• NO-ISSUE: Synchronize From Upstream Repositories #632
• NO-ISSUE: Synchronize From Upstream Repositories #630
• OPRUN-4439: Update test-operator startup script to fix pod probe endpoints #629
• NO-ISSUE: add 85889 automation #603
• NO-ISSUE: add 83979 automation #602
• NO-ISSUE: Synchronize From Upstream Repositories #625
• OPRUN-4441: fix(ote): fix SingleOwnNamespace test for Boxcutter runtime compatibility and use as operator-controller dep from root instead of upstream release #628
• OCPQE-31553: adjust watchnamespace qe case based on change #623
• OPRUN-4439: Fix test operator controller pod probes #614
• NO-ISSUE: Synchronize From Upstream Repositories #622
• OPRUN-4446: Update preflight auth checks for Boxcutter feature gate #621
• OPRUN-4112: Synchronize From Upstream Repositories #615
• OPRUN-4403: OPRUN-4403 case for upgrade major version #618
• OCPQE-31521: enhance ocp-79770 #616
• OPRUN-4063: config watchnamespace api cases #612
• NO-ISSUE: Synchronize From Upstream Repositories #610
• OPRUN-4385: Remove marketplace index from tests #598
• NO-ISSUE: Synchronize From Upstream Repositories #608
• TRT-2516: Revert #594 “OCPBUGS-65634: add service account to curl job” #609
• OCPBUGS-65634: add service account to curl job #594
• NO-ISSUE: Synchronize From Upstream Repositories #601
• OCPQE-31296: enhance qe cases to make it more stable #604
• NO-ISSUE: Run upstream e2e tests tagged with @catalogd-update #605
• NO-ISSUE: Synchronize From Upstream Repositories #597
• OPRUN-4350: Update to golang 1.25 and ocp 4.22 #586
• OCPQE-31263: update 83026 to specify the clustercatalog #583
• OCPQE-30674: migrate bandrade’s OLMv1 test cases to OTE #562
• OCPQE-31264: update 80458’s timeout to 180s #579
• NO-ISSUE: Synchronize from upstream #581
• Full changelog

openshift-apiserver

• CNTRLPLANE-2438: chore: bump(k8s)=1.34.1 #592
• Revert “OCPBUGS-72408: block image import from cluster IP addresses” #599
• OCPBUGS-72408: block image import from cluster IP addresses #591
• OCPBUGS-70049: Updating ose-openshift-apiserver-container image to be consistent with ART for 4.22 #590
• Full changelog

openshift-controller-manager

• CNTRLPLANE-2620: bump github.com/openshift/library-go #427
• OCPBUGS-69696: Updating ose-openshift-controller-manager-container image to be consistent with ART for 4.22 #425
• Full changelog

openshift-state-metrics

• OCPBUGS-74036: Updating openshift-state-metrics-container image to be consistent with ART for 4.22 #129
• OCPBUGS-69985: Updating openshift-state-metrics-container image to be consistent with ART for 4.22 #128
• Full changelog

openstack-cluster-api-controllers

• OCPBUGS-69731: Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.22 #396
• NO-JIRA: Sync main with latest upstream (release-0.14) #395
• Full changelog

openstack-machine-api-provider

• OCPBUGS-76788: Fix make test #154
• OCPBUGS-70022: Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.22 #149
• OCPBUGS-67298: Don’t record event for every reconcile #142
• Full changelog

openstack-resource-controller

• OCPBUGS-70015: Updating openstack-resource-controller-container image to be consistent with ART for 4.22 #25
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-77006: Remove the collect-profiles info from the microshift kustomization file #1233
• NO-ISSUE: Synchronize From Upstream Repositories #1228
• NO-ISSUE: UPSTREAM:<carry>: automate OCP-40945 #1209
• NO-ISSUE: Synchronize From Upstream Repositories #1226
• OCPBUGS-76323: OCPQE-31553:remove qe case of testing collect-profiles #1221
• NO-ISSUE: UPSTREAM: : migrate bandrade test cases to OTE #1193
• OCPBUGS-31547: Remove the collect-profiles job #1215
• OCPBUGS-26404: Add retry logic for SNO cluster detection in leader election configuration #1210
• OCPQE-31553: continue to adjust case per collect-profiles change #1218
• OPRUN-4407: automate OCP-87276 #1212
• OCPQE-31558, OCPQE-31559: Update QE test cases to align with the removal of the redhat-marketplace catalog #1217
• OCPQE-31553: change to check collect-profile networkpolicy dynamically #1216
• OCPBUGS-74389: Synchronize From Upstream Repositories #1206
• OPRUN-4414: Integrate APIServer TLS controller into PSM #1205
• OPRUN-4415: Synchronize From Upstream Repositories #1202
• NO-ISSUE: Synchronize From Upstream Repositories #1201
• OPRUN-4416: Remove kube-rbac-proxy from PSM #1190
• NO-ISSUE: automate ocp-85743 and ocp-85745 #1197
• OCPQE-31468: add missed opm db testdata #1196
• OCPQE-31468: recovery missed qe testdata #1194
• OCPBUGS-65867: Synchronize From Upstream Repositories #1195
• NO-ISSUE: Synchronize From Upstream Repositories #1192
• OCPQE-30680: migrate ocp-25674 #1185
• NO-ISSUE: UPSTREAM: <carry>: migrate bandrade test cases to OTE #1169
• OCPQE-31297: enhance ocp and microshift olm case #1173
• NO-ISSUE: Synchronize From Upstream Repositories #1168
• OCPQE-30680: migrate OLMv0 test cases to OTE #1166
• OPRUN-4351: Update Dockerfiles/CI to use golang 1.25/ocp 4.22 #1178
• Updating ose-operator-framework-tools-container image to be consistent with ART for 4.22 #1174
• OCPBUGS-69774: Updating operator-registry-container image to be consistent with ART for 4.22 #1177
• OCPBUGS-69740: Updating operator-lifecycle-manager-container image to be consistent with ART for 4.22 #1175
• Full changelog

operator-marketplace

• OPRUN-4456: chore(deps): upgrade Go module dependencies (edge) #724
• NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.27.5 to 2.28.1 #720
• NO-ISSUE: Bump sigs.k8s.io/controller-runtime from 0.23.0 to 0.23.1 in the k8s-dependencies group #718
• NO-ISSUE: Bump github.com/onsi/gomega from 1.39.0 to 1.39.1 #719
• OCPBUGS-65581: marketplace-operator sets Progressing=True during upgrade #713
• OPRUN-4410: Add Openshift TLS Profiles support to marketplace-operator #715
• NO-ISSUE: Bump github.com/operator-framework/api from 0.37.0 to 0.38.0 #717
• OPRUN-4302: Remove marketplace index #698
• OCPBUGS-74360: Fix image for the build #714
• NO-ISSUE: Bump sigs.k8s.io/controller-runtime from 0.22.4 to 0.23.0 in the k8s-dependencies group #711
• NO-ISSUE: Bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 #712
• OCPBUGS-74006: Updating marketplace-operator-container image to be consistent with ART for 4.22 #709
• NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.27.3 to 2.27.4 #701
• NO-ISSUE: Bump github.com/onsi/gomega from 1.38.3 to 1.39.0 #702
• OCPBUGS-69441: Increase default catalog polling interval to 4h (240m) #695
• NO-ISSUE: Bump the k8s-dependencies group with 2 updates #697
• NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.27.2 to 2.27.3 #691
• OPRUN-4354: Update to build containers to golang-1.25 #696
• NO-ISSUE: update ports on deployment manifests, fix spacing #689
• OCPBUGS-69929: Updating marketplace-operator-container image to be consistent with ART for 4.22 #694
• NO-ISSUE: Bump github.com/onsi/gomega from 1.38.2 to 1.38.3 #692
• NO-ISSUE: Bump github.com/operator-framework/api from 0.36.0 to 0.37.0 #693
• NO-ISSUE: Bump the k8s-dependencies group with 3 updates #686
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• CORENET-6840: Exclude NetSeg tests for SingleReplica topology #2973
• OCPBUGS-61864: DownStream Merge [01-27-2026] #2962
• CORENET-6168: skip new NetSeg Localnet test #2963
• OCPBUGS-69753: Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.22 #2907
• OCPBUGS-61524, OCPBUGS-66994: DownStream Merge [01-03-2026] #2917
• CORENET-6170: Add OCP tests extension #2461
• OCPBUGS-70087: Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.22 #2913
• OCPBUGS-70058: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.22 #2912
• OCPBUGS-66235: DownStream Merge [12-19-2025] #2910
• CORENET-6356: Bump OVN to 25.09 and 25.09 for OKD #2909
• OCPBUGS-66234: DownStream Merge [12-04-2025] #2896
• Full changelog

powervs-block-csi-driver

• MULTIARCH-5838: Rebase ibm-powervs-block-csi-driver with upstream #109
• OCPBUGS-69805: Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.22 #108
• Full changelog

powervs-block-csi-driver-operator

• STOR-2523: Add desired-version annotation to controller Deployment and use DeploymentVersionController in ibm-powervs-block-csi-driver-operator #90
• No-JIRA: Update owners #93
• OCPBUGS-69906: Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.22 #94
• Full changelog

powervs-cloud-controller-manager

• No-Jira: Bump golang.org/x/crypto to 0.45.0 #90
• Full changelog

powervs-machine-controllers

• OCPBUGS-70051: Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.22 #133
• Full changelog

prom-label-proxy

• OCPBUGS-70042: Updating prom-label-proxy-container image to be consistent with ART for 4.22 #388
• Full changelog

prometheus

• OCPBUGS-74015: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.22 #286
• OCPBUGS-69956: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.22 #284
• Full changelog

prometheus-alertmanager

• OCPBUGS-74035: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.22 #112
• OCPBUGS-69983: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.22 #109
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• OCPBUGS-73982: Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.22 #355
• OCPBUGS-67303: Validate webhookURL secret for MSTeams receiver in AlertmanagerConfig CRD #358
• OCPBUGS-70007: Updating prometheus-config-reloader-container image to be consistent with ART for 4.22 #352
• OCPBUGS-70055: Updating prometheus-operator-container image to be consistent with ART for 4.22 #353
• OCPBUGS-69832: Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.22 #351
• OCPBUGS-67215: [bot] Bump openshift/prometheus-operator to v0.87.1 #349
• Full changelog

prometheus-node-exporter

• OCPBUGS-69806: Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.22 #174
• Full changelog

rhel-coreos, rhel-coreos-extensions

• NO-JIRA: packages-openshift: Fix repo versions #1895
• NO-JIRA: extensions: add a label for extensions image discovery #1894
• COS-3900: Start using rhel-10.2 #1892
• NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches #1891
• No-JIRA: move the OKD SIG repo to 4.22 #1890
• NO-JIRA: OWNERS: add user Rolv-Apneseth #1882
• NO-JIRA: Update to track 4.22 and rhel-9.8 #1881
• NO-JIRA: rhel-10.1: enable rhel-10.1-fast-datapath #1885
• NO-JIRA: packages-openshift: enable rhel-10.1-fast-datapath #1884
• OCPNODE-4010: package: add ose-crio-credential-provider #1879
• OCPBUGS-70162: extensions/rhel-10.1: Re-enable ipsec #1878
• NO-JIRA: drop use of rhel-9.6-appstream-containernetworking repo #1877
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

route-controller-manager

• OCPBUGS-20536: bump library-go version #70
• NE-2484: bump k8s libraries to v0.35.0 and cr to v0.23.1 #72
• OCPBUGS-63449: filter ingress namespace on UnmanagedRoutes metric #71
• NO-JIRA: add jcmoraisjr to owners #69
• Full changelog

service-ca-operator

• CNTRLPLANE-2547: test/e2e: migrate metrics tests for OTE compatibility #305
• CNTRLPLANE-2537: test/e2e: migrate headless-stateful-serving-cert-secret-delete-data test for OTE compatibility #304
• CNTRLPLANE-2508: test/e2e: migrate vulnerable-legacy-ca-bundle-injection-configmap test for OTE compatibility #303
• CNTRLPLANE-2499: test/e2e: migrate ca-bundle-injection-configmap-update test for OTE compatibility #302
• CNTRLPLANE-2498: test/e2e: migrate ca-bundle-injection-configmap test for OTE compatibility #301
• CNTRLPLANE-2494: test/e2e: migrate serving-cert-secret-delete-data test for OTE compatibility #300
• CNTRLPLANE-2491: test/e2e: migrate serving-cert-secret-add-data test for OTE compatibility #299
• CNTRLPLANE-2490: test/e2e: migrate serving-cert-secret-modify-bad-tlsCert test for OTE compatibility #298
• CNTRLPLANE-2161: test/e2e: migrate serving-cert-annotation test for OTE compatibility #297
• OCPBUGS-69911: Updating ose-service-ca-operator-container image to be consistent with ART for 4.22 #296
• CNTRLPLANE-2159: cmd: add OTE infrastructure and clean up legacy test extension #295
• Full changelog

telemeter

• SREP-3493: deduplicate cluster:usage:control_plane:instance_hours output series #579
• SREP-3493: add cluster:usage:control_plane:instance_hours #578
• SREP-3493: ROSA HCP billing for control planes #577
• OCPBUGS-73928: Updating telemeter-container image to be consistent with ART for 4.22 #575
• NO-ISSUE: switch http_request_size_bytes to histogram #574
• NO-ISSUE: support native histograms #573
• NO-ISSUE: update github.com/prometheus/client_golang #572
• OCPBUGS-69697: Updating telemeter-container image to be consistent with ART for 4.22 #571
• Full changelog

tests

• Revert “ OCPNODE-3932: Add automated tests for non-CNV swap configuration” #30804
• TRT-2372: check that each of the required architectures is available for each image in the images command #30799
• OCPBUGS-74151: Add test for CPMS OnDelete strategy with full master replacement #30760
• OCPNODE-3932: Add automated tests for non-CNV swap configuration #30794
• OCPBUGS-76551: Temporarily skip MCO tests creating custom MCPS with RHEL10 machines #30793
• NO-JIRA:fixing CNV’s must-gather image ci failure #30784
• NO-ISSUE: Automated - Update synthetic test data #30781
• NO-JIRA: Remove RouteAdvertisements feature gate check #30787
• OCPNODE-4093: Readme updates for Node tests #30773
• NO-JIRA: Simplify zstd:chunked image test to use prebuilt image. #30739
• OCPBUGS-60853: cert tests: mark TLS registry test as informing #30585
• TRT-2545: Allow pathological Failed/ImagePullBackOff events in must-gather name #30776
• OCPBUGS-76327: Fix flakiness in MutableCSINodeAllocatableCount test #30766
• NO-JIRA: ote: fix duplicated topology label on SingleReplica #30759
• NO-ISSUE: Automated - Update synthetic test data #30694
• NO-JIRA: Ignore state transitions on upgrade failures and SNO #30762
• SPLAT-2337: CCM-AWS OTE binary and skips #30747
• NO-JIRA: Fix discrepancies in use of failure message vs output #30752
• OCPEDGE-2166: test(two-node): stablize tnf recovery suite #30716
• NO-JIRA: Fix OKD featureset test as it should only run if the current featureset is Default #30757
• OCPBUGS-74917, TRT-2504: Claude command to manage watch request limits, split test by operator/component #30750
• TRT-2540: Revert #30657 “OCPNODE-3944: Create e2e automation in origin for case OCP-84149” #30761
• CNTRLPLANE-2196: reg ote bin for cluster auth operator #30735
• NO-JIRA: upkeep: add collection of errors for crio tests #30743
• OCPEDGE-1484: [TNF] kubelet disruption test #30290
• OKD-259: Test OKD Feature set Against OKD and OCP clusters #30693
• OCPNODE-3944: Create e2e automation in origin for case OCP-84149 #30657
• OCPEDGE-2355: feat: skip unsupported commatrix tests for two node #30720
• OCPEDGE-2274: fix: change arbiter topology test to verify pods do not run on arbiter nodes #30737
• OCPQE-31524: Add conditional SCC wait for Kubernetes compatibility #30736
• Revert “SPLAT-2337: Added OTE binary for ccm-aws” #30744
• SPLAT-2337: Added OTE binary for ccm-aws #30525
• NO-JIRA: bump SNO marketplace-operator watch count limit #30738
• OCPBUGS-73778: revert LSO networkpolicy cases #30684
• STOR-2838: fix OTP AsGuestKubeconf #30721
• OCPBUGS-63307: Add/RemoveSigtermProtection event matcher for SigstoreImageVerification tests #30624
• TRT-2522: Update optimized builds test to use rpm -qa instead of dnf #30722
• NO-JIRA: Replace OCPBUGS-20062 with OCPBUGS-65984 #30554
• OCPNODE-3203: Add a test suite for kubeletconfig testing #30648
• OCPBUGS-61855: Revert “Temporarily disable InstallPlanStepAppliedWithWarnings alert for k8s 1.34 rebase” #30559
• NO-ISSUE: Update boot image manifests for skew API #30712
• NE-2376: Remove restriction of unmanaged x-k8s.io #30658
• OCPBUGS-74237: Update MCN tests to better handle condition transitions through the “Unknown” state #30705
• OTA-1681: remove etcd exceptions #30688
• OCPBUGS-74280: Add filter for openshift-copy-to-node ns #30713
• OCPBUGS-62929: Check router RBAC before external cert ops #30395
• OCPCLOUD-3351: monitortest: add crdversionchecker #30603
• OCPBUGS-65674: VsphereConfigurationTestsRollOutTooOften event matcher should use broader regex #30654
• OCPSTRAT-2728: add images required for the 1.35 rebase (temporary) #30687
• NO-JIRA: Remove exceptions for storage operators #30677
• NO-ISSUE: Allow test to tolerate running on minimal images #30695
• TRT-2483: feat(ginkgo): add monitor tests to extension test result output #30678
• NO-JIRA: Update Networking team lead #30301
• OCPEDGE-2303: update test logic for degraded cluster run #30649
• NO-JIRA: CO must go Progressing during a minor-level upgrade #30626
• OCPBUGS-39026: Remove exception for monitoring operator going degraded during upgrade #30012
• NO-JIRA: Fix Pod.Create() to use –local flag for template processing #30686
• OCPEDGE-1788: TNF add etcd cold boot recovery tests from graceful node shutdown #30519
• NO-JIRA: Replace OCPBUGS-38667 with OCPBUGS-66225 #30551
• OCPEDGE-2304: adjust olm test to pass on a degraded run #30664
• OCPBUGS-72547: Isolate and reduce parallelism for OrderedNamespaceDeletion tests. #30672
• OCPNODE-3823: Migrating test case from Openshift-test-private to origin #30512
• NO-JIRA: add the intervals bucket for Netpol tests #30679
• NO-ISSUE: Update synthetic test data #30680
• NO-JIRA: Remove exceptions for co/machine-config on Available=False #30550
• CNTRLPLANE-2167: Add oc-tests-ext to extension binaries #30653
• OCPBUGS-69676: update watch request limits for cluster-autoscaler-operator #30656
• NO-JIRA: Remove the exception for CO/console’s Available=False #30553
• Revert “CNF-18661: add a skip on the commatrix test for the unsupported topology by commatrix” #30670
• NO-ISSUE: Fix the PinnedImage test to set imageMinimumGCAge to 1s #30645
• OCPBUGS-70170: change iperf2 test to serial from parallel #30671
• NO-JIRA: register cluster-node-tuning-operator-test-ext the binary to origin for OTE migration #30598
• NE-2056: auto negative tests of gatewayapicontroller #30599
• NO-JIRA: Add more output for debegging #30583
• NO-JIRA: Skip a ClusterOperator test if a cluster upgrade is blocked #30558
• NO-JIRA: Track the total kubelet metrics outage durations with autodl framework #30593
• NO-JIRA: Add images that shouldn’t be mirrored to the exception list. #30652
• OCPBUGS-66225: Add more exceptions for CO/image-registry’s Degraded=True #30581
• OCPBUGS-66065: remove duplicated events before processing lease intervals #30639
• OCPBUGS-57665: only run Netpol two at a time #30618
• OCPBUGS-70249: Unrevert tls tests with fixes #30536
• OCPBUGS-70065: Updating openshift-enterprise-tests-container image to be consistent with ART for 4.22 #30636
• OCPBUGS-69400: Ignore repeated TopologyAwareHintsDisabled events #30614
• CNF-18661: add a skip on the commatrix test for the unsupported topology by commatrix #30640
• CNTRLPLANE-2167: Migrate must-gather cases to origin #30594
• NO-JIRA: Remove DennisPeriquet from OWNERS #30650
• OCPSTRAT-2728: Update etcd test data for k8s 1.35 release #30605
• OCPBUGS-67313: Fix race condition in external binary extraction #30616
• OCPBUGS-70134: Fix JSONL parsing to handle stray JSON in test output #30634
• TRT-2394: Detect duplicate tests #30498
• CNTRLPLANE-947: E2E test adaptations for OIDC #30292
• TRT-2418: Add CPU metrics autodl #30609
• NO-JIRA: feat: render OTE JSON results in spyglass #30619
• NO-JIRA: Increase tolerance of CO’s not reporting Progressing #30602
• MCO-2006: move node-filecycle monitor to default #30592
• NO-ISSUE: Two more COs report Available=False in a non-upgrade job #30588
• CNTRLPLANE-1437: add monitor test for checking default service account in pods (static test name) #30561
• NO-JIRA: feat(monitor): track test bucket execution intervals #30615
• STOR-2550: add LSO network policy test case #30562
• OCPBUGS-63618: BeforeEach was indirectly called in DetermineReleasePayloadImage #30610
• CNTRLPLANE-1683: added the OTE binary for cluster-image-registry-operator #30612
• OCPBUGS-67211: exculude Flaky tests for openshift/csi test suite #30597
• OCPBUGS-65674: VsphereConfigurationTestsRollOutTooOften event matcher should match also dep and ds events #30547
• NO-JIRA: Allow group snapshot tests to be re-tried #30607
• OCPNODE-3780: Add e2e tests to validate DRA APIs #30462
• And 2 elided commits (e.g. from squash or rebase merges)
• Full changelog

thanos

• OCPBUGS-69738: Updating ose-thanos-container image to be consistent with ART for 4.22 #166
• Full changelog

volume-data-source-validator

• OCPBUGS-69897: Updating volume-data-source-validator-container image to be consistent with ART for 4.22 #8
• Full changelog

vsphere-cloud-controller-manager

• Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART for 4.22 #102
• Full changelog

vsphere-cluster-api-controllers

• NO-JIRA: UPSTREAM: <carry>: Add manifests verify target #80
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-69760: Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.22 #153
• OCPBUGS-69746: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.22 #152
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-74225: Bump library-go #328
• OCPBUGS-74206: fix snapshot config non-deterministic ordering #329
• STOR-2840: Declare RWX capability explicitly #324
• STOR-2852: Enable snapshot tests for vsphere #321
• OCPBUGS-69924: Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.22 #320
• OCPBUGS-66113: Some containers do not have readOnlyRootFilesystem #319
• Full changelog

vsphere-problem-detector

• OCPBUGS-74989: GetVCenterHostnames lacks lock protection causing potential data race #209
• OCPBUGS-70365: fix concurrent map writes #206
• OCPBUGS-69856: Updating ose-vsphere-problem-detector-container image to be consistent with ART for 4.22 #199
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Package List

• cri-o-1.35.0-2.rhaos4.22.git7deb12c.el9
• kernel-5.14.0-686.el9
• openshift-kubelet-4.22.0-202602130027.p2.g047d962.assembly.stream.el9
• systemd-252-64.el9

Full list (570 packages)

• NetworkManager-1:1.54.3-2.el9
• NetworkManager-cloud-setup-1:1.54.3-2.el9
• NetworkManager-libnm-1:1.54.3-2.el9
• NetworkManager-ovs-1:1.54.3-2.el9
• NetworkManager-team-1:1.54.3-2.el9
• NetworkManager-tui-1:1.54.3-2.el9
• WALinuxAgent-udev-2.14.0.1-4.el9
• aardvark-dns-2:1.17.0-1.el9
• acl-2.3.1-4.el9
• adcli-0.9.3.1-3.el9
• adcli-selinux-0.9.3.1-3.el9
• afterburn-5.10.0-1.el9
• afterburn-dracut-5.10.0-1.el9
• alternatives-1.24-2.el9
• attr-2.5.1-3.el9
• audit-3.1.5-8.el9
• audit-libs-3.1.5-8.el9
• authselect-1.2.6-3.el9
• authselect-libs-1.2.6-3.el9
• avahi-libs-0.8-23.el9
• azure-vm-utils-0.7.0-1.el9
• basesystem-11-13.el9
• bash-5.1.8-9.el9
• bash-completion-1:2.11-5.el9
• bind-libs-32:9.16.23-40.el9
• bind-license-32:9.16.23-40.el9
• bind-utils-32:9.16.23-40.el9
• binutils-2.35.2-69.el9
• binutils-gold-2.35.2-69.el9
• bootc-1.12.1-1.el9
• bootupd-0.2.31-1.el9
• bsdtar-3.5.3-6.el9_6
• bubblewrap-0.6.3-1.el9
• bzip2-1.0.8-11.el9
• bzip2-libs-1.0.8-11.el9
• c-ares-1.19.1-2.el9_4
• ca-certificates-2025.2.80_v9.0.305-91.el9
• checkpolicy-3.6-1.el9
• chrony-4.8-1.el9
• cifs-utils-7.5-1.el9
• clevis-21-209.el9
• clevis-dracut-21-209.el9
• clevis-luks-21-209.el9
• clevis-systemd-21-209.el9
• cloud-utils-growpart-0.33-1.el9
• composefs-1.0.8-1.el9
• composefs-libs-1.0.8-1.el9
• conmon-3:2.2.1-1.el9
• conmon-rs-0.6.6-0.rhaos4.18.el9.1
• console-login-helper-messages-0.21.3-1.el9
• console-login-helper-messages-issuegen-0.21.3-1.el9
• console-login-helper-messages-profile-0.21.3-1.el9
• container-selinux-4:2.245.0-1.el9
• containernetworking-plugins-1:1.9.0-1.el9
• containers-common-5:5.8-1.el9
• coreos-installer-0.25.0-2.el9
• coreos-installer-bootinfra-0.25.0-2.el9
• coreutils-8.32-40.el9
• coreutils-common-8.32-40.el9
• cpio-2.13-16.el9
• cracklib-2.9.6-28.el9
• cracklib-dicts-2.9.6-28.el9
• cri-o-1.35.0-2.rhaos4.22.git7deb12c.el9
• cri-tools-1.34.0-3.el9
• criu-3.19-3.el9
• criu-libs-3.19-3.el9
• crun-1.26-1.el9
• crypto-policies-20251126-1.gite9c4db2.el9
• crypto-policies-scripts-20251126-1.gite9c4db2.el9
• cryptsetup-2.8.1-3.el9
• cryptsetup-libs-2.8.1-3.el9
• curl-7.76.1-40.el9
• cyrus-sasl-gssapi-2.1.27-22.el9
• cyrus-sasl-lib-2.1.27-22.el9
• dbus-1:1.12.20-8.el9
• dbus-broker-28-7.el9
• dbus-common-1:1.12.20-8.el9
• dbus-libs-1:1.12.20-8.el9
• dbus-tools-1:1.12.20-8.el9
• device-mapper-9:1.02.206-2.el9_7.1
• device-mapper-event-9:1.02.206-2.el9_7.1
• device-mapper-event-libs-9:1.02.206-2.el9_7.1
• device-mapper-libs-9:1.02.206-2.el9_7.1
• device-mapper-multipath-0.8.7-44.el9
• device-mapper-multipath-libs-0.8.7-44.el9
• device-mapper-persistent-data-1.1.0-1.el9
• diffutils-3.7-12.el9
• dmidecode-1:3.6-2.el9
• dnf-4.14.0-33.el9
• dnf-data-4.14.0-33.el9
• dnsmasq-2.85-18.el9
• dosfstools-4.2-3.el9
• dracut-057-110.git20260130.el9
• dracut-network-057-110.git20260130.el9
• dracut-squash-057-110.git20260130.el9
• e2fsprogs-1.46.5-8.el9
• e2fsprogs-libs-1.46.5-8.el9
• efi-filesystem-6-4.el9
• efibootmgr-16-12.el9
• efivar-libs-38-3.el9
• elfutils-debuginfod-client-0.194-1.el9
• elfutils-default-yama-scope-0.194-1.el9
• elfutils-libelf-0.194-1.el9
• elfutils-libs-0.194-1.el9
• ethtool-2:6.15-2.el9
• expat-2.5.0-6.el9
• fcoe-utils-1.0.34-0.git14ef0d2.el9
• file-5.39-16.el9
• file-libs-5.39-16.el9
• filesystem-3.16-5.el9
• findutils-1:4.8.0-7.el9
• firewalld-filesystem-1.3.4-18.el9_7
• flashrom-1.2-10.el9
• fstrm-0.6.1-3.el9
• fuse-2.9.9-17.el9
• fuse-common-3.10.2-9.el9
• fuse-libs-2.9.9-17.el9
• fuse-overlayfs-1.16-1.el9
• fuse3-3.10.2-9.el9
• fuse3-libs-3.10.2-9.el9
• fwupd-1.9.31-1.el9
• fwupd-plugin-flashrom-1.9.31-1.el9
• gawk-5.1.0-6.el9
• gawk-all-langpacks-5.1.0-6.el9
• gdbm-libs-1:1.23-1.el9
• gdisk-1.0.7-5.el9
• geolite2-city-20191217-6.el9
• geolite2-country-20191217-6.el9
• gettext-0.21-8.el9
• gettext-libs-0.21-8.el9
• git-core-2.52.0-1.el9
• glib2-2.68.4-19.el9
• glibc-2.34-256.el9
• glibc-common-2.34-256.el9
• glibc-gconv-extra-2.34-256.el9
• glibc-minimal-langpack-2.34-256.el9
• glusterfs-6.0-57.4.el9
• glusterfs-client-xlators-6.0-57.4.el9
• glusterfs-fuse-6.0-57.4.el9
• glusterfs-libs-6.0-57.4.el9
• gmp-1:6.2.0-13.el9
• gnupg2-2.3.3-5.el9_7
• gnutls-3.8.10-3.el9
• gobject-introspection-1.68.0-11.el9
• gpgme-1.15.1-6.el9
• grep-3.6-5.el9
• groff-base-1.22.4-10.el9
• grub2-common-1:2.06-124.el9
• grub2-efi-x64-1:2.06-124.el9
• grub2-pc-1:2.06-124.el9
• grub2-pc-modules-1:2.06-124.el9
• grub2-tools-1:2.06-124.el9
• grub2-tools-minimal-1:2.06-124.el9
• gssproxy-0.8.4-7.el9
• gzip-1.12-1.el9
• hostname-3.23-6.el9
• hwdata-0.348-9.22.el9
• ignition-2.25.1-1.el9
• ignition-grub-2.25.1-1.el9
• ima-evm-utils-1.6.2-2.el9
• info-6.7-15.el9
• inih-49-6.el9
• initscripts-service-10.11.8-4.el9
• ipcalc-1.0.0-5.el9
• iproute-6.17.0-2.el9
• iproute-tc-6.17.0-2.el9
• iptables-libs-1.8.10-11.el9_5
• iptables-nft-1.8.10-11.el9_5
• iputils-20210202-15.el9_7
• irqbalance-2:1.9.4-5.el9
• iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el9
• iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el9
• isns-utils-libs-0.101-4.el9
• jansson-2.14-1.el9
• jose-14-1.el9
• jq-1.6-19.el9
• json-c-0.14-11.el9
• json-glib-1.6.6-1.el9
• kbd-2.4.0-11.el9
• kbd-legacy-2.4.0-11.el9
• kbd-misc-2.4.0-11.el9
• kernel-5.14.0-686.el9
• kernel-core-5.14.0-686.el9
• kernel-modules-5.14.0-686.el9
• kernel-modules-core-5.14.0-686.el9
• kernel-modules-extra-5.14.0-686.el9
• kexec-tools-2.0.29-17.el9
• keyutils-1.6.3-1.el9
• keyutils-libs-1.6.3-1.el9
• kmod-28-11.el9
• kmod-libs-28-11.el9
• kpartx-0.8.7-44.el9
• krb5-libs-1.21.1-8.el9_6
• less-590-6.el9
• libacl-2.3.1-4.el9
• libaio-0.3.111-13.el9
• libarchive-3.5.3-6.el9_6
• libassuan-2.5.5-3.el9
• libattr-2.5.1-3.el9
• libbasicobjects-0.1.1-53.el9
• libblkid-2.37.4-25.el9
• libbpf-2:1.5.0-3.el9
• libbrotli-1.0.9-9.el9_7
• libcap-2.48-10.el9
• libcap-ng-0.8.2-7.el9
• libcbor-0.7.0-5.el9
• libcollection-0.7.0-53.el9
• libcom_err-1.46.5-8.el9
• libcomps-0.1.18-1.el9
• libconfig-1.7.2-9.el9
• libcurl-7.76.1-40.el9
• libdaemon-0.14-23.el9
• libdb-5.3.28-57.el9_6
• libdhash-0.5.0-53.el9
• libdnf-0.69.0-18.el9
• libdnf-plugin-subscription-manager-1.29.50-1.el9
• libdrm-2.4.128-1.el9
• libeconf-0.4.1-5.el9
• libedit-3.1-39.20210216cvs.el9
• libev-4.33-6.el9
• libevent-2.1.12-8.el9_4
• libfdisk-2.37.4-25.el9
• libffi-3.4.2-8.el9
• libfido2-1.13.0-2.el9
• libgcc-11.5.0-14.el9
• libgcrypt-1.10.0-11.el9
• libgomp-11.5.0-14.el9
• libgpg-error-1.42-5.el9
• libgudev-237-1.el9
• libgusb-0.3.8-2.el9
• libibverbs-61.0-2.el9
• libicu-67.1-10.el9_6
• libidn2-2.3.0-7.el9
• libini_config-1.3.1-53.el9
• libipa_hbac-2.9.8-1.el9
• libjcat-0.1.6-3.el9
• libjose-14-1.el9
• libkcapi-1.4.0-2.el9
• libkcapi-hmaccalc-1.4.0-2.el9
• libksba-1.5.1-7.el9
• libldb-4.23.5-5.el9
• libluksmeta-10-1.el9
• libmaxminddb-1.5.2-4.el9
• libmicrohttpd-1:0.9.72-5.el9
• libmnl-1.0.4-16.el9_4
• libmodulemd-2.13.0-2.el9
• libmount-2.37.4-25.el9
• libmspack-0.10.1-0.7.alpha.el9
• libndp-1.9-1.el9
• libnet-1.2-7.el9
• libnetfilter_conntrack-1.0.9-1.el9
• libnfnetlink-1.0.1-23.el9_5
• libnfsidmap-1:2.5.4-41.el9
• libnftnl-1.2.6-4.el9_4
• libnghttp2-1.43.0-6.el9
• libnl3-3.11.0-1.el9
• libnl3-cli-3.11.0-1.el9
• libnvme-1.16.1-2.el9
• libpath_utils-0.2.1-53.el9
• libpcap-14:1.10.0-4.el9
• libpciaccess-0.16-7.el9
• libpkgconf-1.7.3-10.el9
• libpsl-0.21.1-5.el9
• libpwquality-1.4.4-8.el9
• libref_array-0.1.5-53.el9
• librepo-1.19.0-1.el9
• libreport-filesystem-2.15.2-6.el9
• librhsm-0.0.3-9.el9
• libseccomp-2.5.2-2.el9
• libselinux-3.6-3.el9
• libselinux-utils-3.6-3.el9
• libsemanage-3.6-5.el9_6
• libsepol-3.6-3.el9
• libsigsegv-2.13-4.el9
• libslirp-4.4.0-8.el9
• libsmartcols-2.37.4-25.el9
• libsmbclient-4.23.5-5.el9
• libsolv-0.7.24-4.el9
• libss-1.46.5-8.el9
• libssh-0.10.4-17.el9_7
• libssh-config-0.10.4-17.el9_7
• libsss_certmap-2.9.8-1.el9
• libsss_idmap-2.9.8-1.el9
• libsss_nss_idmap-2.9.8-1.el9
• libsss_sudo-2.9.8-1.el9
• libstdc++-11.5.0-14.el9
• libtalloc-2.4.3-1.el9
• libtasn1-4.16.0-9.el9
• libtdb-1.4.14-1.el9
• libteam-1.31-16.el9_1
• libtevent-0.17.1-1.el9
• libtirpc-1.3.3-9.el9
• libtool-ltdl-2.4.6-46.el9
• libunistring-0.9.10-15.el9
• liburing-2.12-1.el9
• libusbx-1.0.26-1.el9
• libuser-0.63-17.el9
• libutempter-1.2.1-6.el9
• libuuid-2.37.4-25.el9
• libuv-1:1.42.0-2.el9_4
• libverto-0.3.2-3.el9
• libverto-libev-0.3.2-3.el9
• libwbclient-4.23.5-5.el9
• libxcrypt-4.4.18-3.el9
• libxcrypt-compat-4.4.18-3.el9
• libxml2-2.9.13-14.el9_7
• libxmlb-0.3.24-1.el9
• libxslt-1.1.34-13.el9_6
• libyaml-0.2.5-7.el9
• libzstd-1.5.5-1.el9
• linux-firmware-20260130-160.el9
• linux-firmware-whence-20260130-160.el9
• lldpad-1.1.1-4.gitf1dd9eb.el9
• lmdb-libs-0.9.29-3.el9
• logrotate-3.18.0-12.el9
• lsof-4.94.0-3.el9
• lua-libs-5.4.4-4.el9
• luksmeta-10-1.el9
• lvm2-9:2.03.32-2.el9_7.1
• lvm2-libs-9:2.03.32-2.el9_7.1
• lz4-libs-1.9.3-5.el9
• lzo-2.10-7.el9
• mdadm-4.4-3.el9
• microcode_ctl-4:20251111-1.el9
• mokutil-2:0.7.2-4.el9
• mpfr-4.1.0-10.el9
• nano-5.6.1-7.el9
• ncurses-6.2-12.20210508.el9
• ncurses-base-6.2-12.20210508.el9
• ncurses-libs-6.2-12.20210508.el9
• net-tools-2.0-0.64.20160912git.el9
• netavark-2:1.17.2-1.el9
• nettle-3.10.1-1.el9
• newt-0.52.21-11.el9
• nfs-utils-1:2.5.4-41.el9
• nftables-1:1.0.9-6.el9_7
• nmap-ncat-3:7.92-5.el9
• nmstate-2.2.57-1.el9
• npth-1.6-8.el9
• nss-altfiles-2.18.1-20.el9
• numactl-libs-2.0.19-3.el9
• nvme-cli-2.16-1.el9
• oniguruma-6.9.6-1.el9.6
• open-vm-tools-13.0.10-1.el9
• openldap-2.6.8-4.el9
• openshift-clients-4.22.0-202602192221.p2.g3638445.assembly.stream.el9
• openshift-kubelet-4.22.0-202602130027.p2.g047d962.assembly.stream.el9
• openssh-9.9p1-3.el9
• openssh-clients-9.9p1-3.el9
• openssh-server-9.9p1-3.el9
• openssl-1:3.5.5-1.el9
• openssl-fips-provider-3.0.7-8.el9
• openssl-fips-provider-so-3.0.7-8.el9
• openssl-libs-1:3.5.5-1.el9
• openvswitch-selinux-extra-policy-1.0-39.el9fdp
• openvswitch3.5-3.5.2-51.el9fdp
• os-prober-1.77-12.el9_5
• ose-aws-ecr-image-credential-provider-4.22.0-202602190049.p2.g214f667.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.22.0-202601070821.p2.g8584b9a.assembly.stream.el9
• ose-crio-credential-provider-4.22.0-202602110933.p2.g83d4961.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.22.0-202601070821.p2.g8732386.assembly.stream.el9
• ostree-2025.7-1.el9
• ostree-grub2-2025.7-1.el9
• ostree-libs-2025.7-1.el9
• p11-kit-0.26.2-1.el9
• p11-kit-trust-0.26.2-1.el9
• pam-1.5.1-28.el9
• passt-0^20251210.gd04c480-3.el9
• passt-selinux-0^20251210.gd04c480-3.el9
• passwd-0.80-12.el9
• pciutils-3.7.0-7.el9
• pciutils-libs-3.7.0-7.el9
• pcre-8.44-4.el9
• pcre2-10.40-6.el9
• pcre2-syntax-10.40-6.el9
• perl-AutoLoader-5.74-481.1.el9_6
• perl-B-1.80-481.1.el9_6
• perl-Carp-1.50-460.el9
• perl-Class-Struct-0.66-481.1.el9_6
• perl-Data-Dumper-2.174-462.el9
• perl-Digest-1.19-4.el9
• perl-Digest-MD5-2.58-4.el9
• perl-Encode-4:3.08-462.el9
• perl-Errno-1.30-481.1.el9_6
• perl-Exporter-5.74-461.el9
• perl-Fcntl-1.13-481.1.el9_6
• perl-File-Basename-2.85-481.1.el9_6
• perl-File-Path-2.18-4.el9
• perl-File-Temp-1:0.231.100-4.el9
• perl-File-stat-1.09-481.1.el9_6
• perl-FileHandle-2.03-481.1.el9_6
• perl-Getopt-Long-1:2.52-4.el9
• perl-Getopt-Std-1.12-481.1.el9_6
• perl-HTTP-Tiny-0.076-462.el9
• perl-IO-1.43-481.1.el9_6
• perl-IO-Socket-IP-0.41-5.el9
• perl-IO-Socket-SSL-2.073-2.el9
• perl-IPC-Open3-1.21-481.1.el9_6
• perl-MIME-Base64-3.16-4.el9
• perl-Mozilla-CA-20200520-6.el9
• perl-NDBM_File-1.15-481.1.el9_6
• perl-Net-SSLeay-1.94-3.el9
• perl-POSIX-1.94-481.1.el9_6
• perl-PathTools-3.78-461.el9
• perl-Pod-Escapes-1:1.07-460.el9
• perl-Pod-Perldoc-3.28.01-461.el9
• perl-Pod-Simple-1:3.42-4.el9
• perl-Pod-Usage-4:2.01-4.el9
• perl-Scalar-List-Utils-4:1.56-462.el9
• perl-SelectSaver-1.02-481.1.el9_6
• perl-Socket-4:2.031-4.el9
• perl-Storable-1:3.21-460.el9
• perl-Symbol-1.08-481.1.el9_6
• perl-Term-ANSIColor-5.01-461.el9
• perl-Term-Cap-1.17-460.el9
• perl-Text-ParseWords-3.30-460.el9
• perl-Text-Tabs+Wrap-2013.0523-460.el9
• perl-Time-Local-2:1.300-7.el9
• perl-URI-5.09-3.el9
• perl-base-2.27-481.1.el9_6
• perl-constant-1.33-461.el9
• perl-if-0.60.800-481.1.el9_6
• perl-interpreter-4:5.32.1-481.1.el9_6
• perl-libnet-3.13-4.el9
• perl-libs-4:5.32.1-481.1.el9_6
• perl-mro-1.23-481.1.el9_6
• perl-overload-1.31-481.1.el9_6
• perl-overloading-0.02-481.1.el9_6
• perl-parent-1:0.238-460.el9
• perl-podlators-1:4.14-460.el9
• perl-subs-1.03-481.1.el9_6
• perl-vars-1.05-481.1.el9_6
• pigz-2.8-1.el9
• pkgconf-1.7.3-10.el9
• pkgconf-m4-1.7.3-10.el9
• pkgconf-pkg-config-1.7.3-10.el9
• podman-6:5.8.0-1.el9
• policycoreutils-3.6-5.el9
• policycoreutils-python-utils-3.6-5.el9
• polkit-0.117-14.el9
• polkit-libs-0.117-14.el9
• polkit-pkla-compat-0.1-21.el9
• popt-1.18-8.el9
• procps-ng-3.3.17-14.el9
• protobuf-c-1.3.3-13.el9
• psmisc-23.4-3.el9
• publicsuffix-list-dafsa-20210518-3.el9
• python-unversioned-command-3.9.25-3.el9_7
• python3-3.9.25-3.el9_7
• python3-audit-3.1.5-8.el9
• python3-chardet-4.0.0-5.el9
• python3-cloud-what-1.29.50-1.el9
• python3-dateutil-1:2.9.0.post0-1.el9_7
• python3-dbus-1.2.18-2.el9
• python3-decorator-4.4.2-6.el9
• python3-distro-1.5.0-7.el9
• python3-dnf-4.14.0-33.el9
• python3-dnf-plugin-versionlock-4.3.0-26.el9
• python3-dnf-plugins-core-4.3.0-26.el9
• python3-gobject-base-3.40.1-6.el9
• python3-gobject-base-noarch-3.40.1-6.el9
• python3-gpg-1.15.1-6.el9
• python3-hawkey-0.69.0-18.el9
• python3-idna-2.10-7.el9_4.1
• python3-iniparse-0.4-45.el9
• python3-inotify-0.9.6-25.el9
• python3-libcomps-0.1.18-1.el9
• python3-libdnf-0.69.0-18.el9
• python3-librepo-1.19.0-1.el9
• python3-libs-3.9.25-3.el9_7
• python3-libselinux-3.6-3.el9
• python3-libsemanage-3.6-5.el9_6
• python3-pip-wheel-21.3.1-1.el9
• python3-policycoreutils-3.6-5.el9
• python3-pysocks-1.7.1-12.el9
• python3-pyyaml-5.4.1-6.el9
• python3-requests-2.25.1-10.el9_6
• python3-rpm-4.16.1.3-40.el9
• python3-setools-4.4.4-1.el9
• python3-setuptools-53.0.0-15.el9
• python3-setuptools-wheel-53.0.0-15.el9
• python3-six-1.15.0-9.el9
• python3-subscription-manager-rhsm-1.29.50-1.el9
• python3-systemd-234-19.el9
• python3-urllib3-1.26.5-6.el9_7.1
• qemu-guest-agent-17:10.1.0-14.el9
• quota-1:4.09-4.el9
• quota-nls-1:4.09-4.el9
• rdma-core-61.0-2.el9
• readline-8.1-4.el9
• redhat-release-9.8-0.6.el9
• redhat-release-eula-9.8-0.6.el9
• rpcbind-1.2.6-7.el9
• rpm-4.16.1.3-40.el9
• rpm-build-libs-4.16.1.3-40.el9
• rpm-libs-4.16.1.3-40.el9
• rpm-ostree-2026.1-3.el9
• rpm-ostree-libs-2026.1-3.el9
• rpm-plugin-selinux-4.16.1.3-40.el9
• rpm-plugin-systemd-inhibit-4.16.1.3-40.el9
• rpm-sign-libs-4.16.1.3-40.el9
• rsync-3.2.5-4.el9
• runc-4:1.4.0-1.el9
• samba-client-libs-4.23.5-5.el9
• samba-common-4.23.5-5.el9
• samba-common-libs-4.23.5-5.el9
• sed-4.8-9.el9
• selinux-policy-38.1.73-1.el9
• selinux-policy-targeted-38.1.73-1.el9
• setup-2.13.7-10.el9
• sg3_utils-1.47-10.el9
• sg3_utils-libs-1.47-10.el9
• shadow-utils-2:4.9-16.el9
• shadow-utils-subid-2:4.9-16.el9
• shared-mime-info-2.1-5.el9
• shim-x64-16.1-7.el9
• skopeo-2:1.22.0-1.el9
• slang-2.3.2-11.el9
• slirp4netns-1.3.3-1.el9
• snappy-1.1.8-8.el9
• socat-1.7.4.1-8.el9
• sqlite-libs-3.34.1-9.el9_7
• squashfs-tools-4.4-10.git1.el9
• ssh-key-dir-0.1.4-1.el9
• sssd-2.9.8-1.el9
• sssd-ad-2.9.8-1.el9
• sssd-client-2.9.8-1.el9
• sssd-common-2.9.8-1.el9
• sssd-common-pac-2.9.8-1.el9
• sssd-ipa-2.9.8-1.el9
• sssd-krb5-2.9.8-1.el9
• sssd-krb5-common-2.9.8-1.el9
• sssd-ldap-2.9.8-1.el9
• sssd-nfs-idmap-2.9.8-1.el9
• sssd-proxy-2.9.8-1.el9
• stalld-1.26.3-1.el9
• strace-6.12-1.el9
• subscription-manager-1.29.50-1.el9
• subscription-manager-rhsm-certificates-20220623-1.el9
• sudo-1.9.17p2-2.el9
• systemd-252-64.el9
• systemd-journal-remote-252-64.el9
• systemd-libs-252-64.el9
• systemd-pam-252-64.el9
• systemd-rpm-macros-252-64.el9
• systemd-udev-252-64.el9
• tar-2:1.34-10.el9
• teamd-1.31-16.el9_1
• tmux-3.2a-5.el9
• toolbox-0.1.2-1.rhaos4.22.el9
• tpm2-tools-5.2-7.el9
• tpm2-tss-3.2.3-1.el9
• tzdata-2025c-1.el9
• unbound-libs-1.24.2-2.el9
• usermode-1.114-7.el9
• userspace-rcu-0.12.1-6.el9
• util-linux-2.37.4-25.el9
• util-linux-core-2.37.4-25.el9
• vim-minimal-2:8.2.2637-25.el9
• virt-what-1.27-2.el9
• which-2.21-30.el9
• xfsprogs-6.4.0-7.el9
• xmlsec1-1.2.29-13.el9
• xmlsec1-openssl-1.2.29-13.el9
• xz-5.2.5-8.el9_0
• xz-libs-5.2.5-8.el9_0
• yajl-2.1.0-25.el9
• zlib-1.2.11-40.el9
• zram-generator-1.1.2-1.el9
• zstd-1.5.5-1.el9

Changed:

• NetworkManager 1:1.52.0-9.el9_6 → 1:1.54.3-2.el9
• NetworkManager-cloud-setup 1:1.52.0-9.el9_6 → 1:1.54.3-2.el9
• NetworkManager-libnm 1:1.52.0-9.el9_6 → 1:1.54.3-2.el9
• NetworkManager-ovs 1:1.52.0-9.el9_6 → 1:1.54.3-2.el9
• NetworkManager-team 1:1.52.0-9.el9_6 → 1:1.54.3-2.el9
• NetworkManager-tui 1:1.52.0-9.el9_6 → 1:1.54.3-2.el9
• WALinuxAgent-udev 2.13.1.1-1.el9_6 → 2.14.0.1-4.el9
• aardvark-dns 2:1.14.0-1.el9 → 2:1.17.0-1.el9
• adcli 0.9.2-1.el9 → 0.9.3.1-3.el9
• afterburn 5.9.0-1.el9_6 → 5.10.0-1.el9
• afterburn-dracut 5.9.0-1.el9_6 → 5.10.0-1.el9
• audit 3.1.5-4.el9 → 3.1.5-8.el9
• audit-libs 3.1.5-4.el9 → 3.1.5-8.el9
• avahi-libs 0.8-22.el9_6.1 → 0.8-23.el9
• bind-libs 32:9.16.23-31.el9_6.2 → 32:9.16.23-40.el9
• bind-license 32:9.16.23-31.el9_6.2 → 32:9.16.23-40.el9
• bind-utils 32:9.16.23-31.el9_6.2 → 32:9.16.23-40.el9
• binutils 2.35.2-63.el9_6.1 → 2.35.2-69.el9
• binutils-gold 2.35.2-63.el9_6.1 → 2.35.2-69.el9
• bootc 1.1.6-3.el9_6 → 1.12.1-1.el9
• bootupd 0.2.27-5.el9_6 → 0.2.31-1.el9
• bubblewrap 0.4.1-8.el9_5 → 0.6.3-1.el9
• bzip2 1.0.8-10.el9_5 → 1.0.8-11.el9
• bzip2-libs 1.0.8-10.el9_5 → 1.0.8-11.el9
• chrony 4.6.1-1.el9 → 4.8-1.el9
• cifs-utils 7.2-0.el9_6.2 → 7.5-1.el9
• clevis 21-208.el9 → 21-209.el9
• clevis-dracut 21-208.el9 → 21-209.el9
• clevis-luks 21-208.el9 → 21-209.el9
• clevis-systemd 21-208.el9 → 21-209.el9
• conmon 3:2.1.12-1.el9 → 3:2.2.1-1.el9
• container-selinux 4:2.237.0-4.el9_6 → 4:2.245.0-1.el9
• containernetworking-plugins 1:1.6.2-2.el9_6 → 1:1.9.0-1.el9
• containers-common 2:1-117.el9_6 → 5:5.8-1.el9
• coreos-installer 0.24.0-5.el9_6 → 0.25.0-2.el9
• coreos-installer-bootinfra 0.24.0-5.el9_6 → 0.25.0-2.el9
• coreutils 8.32-39.el9 → 8.32-40.el9
• coreutils-common 8.32-39.el9 → 8.32-40.el9
• cracklib 2.9.6-27.el9 → 2.9.6-28.el9
• cracklib-dicts 2.9.6-27.el9 → 2.9.6-28.el9
• cri-o 1.34.5-2.rhaos4.21.gita8af6ea.el9 → 1.35.0-2.rhaos4.22.git7deb12c.el9
• criu 3.19-1.2.el9_6 → 3.19-3.el9
• criu-libs 3.19-1.2.el9_6 → 3.19-3.el9
• crun 1.23.1-2.el9_6 → 1.26-1.el9
• crypto-policies 20250128-1.git5269e22.el9 → 20251126-1.gite9c4db2.el9
• crypto-policies-scripts 20250128-1.git5269e22.el9 → 20251126-1.gite9c4db2.el9
• cryptsetup 2.7.2-3.el9_6.1 → 2.8.1-3.el9
• cryptsetup-libs 2.7.2-3.el9_6.1 → 2.8.1-3.el9
• curl 7.76.1-31.el9_6.3 → 7.76.1-40.el9
• cyrus-sasl-gssapi 2.1.27-21.el9 → 2.1.27-22.el9
• cyrus-sasl-lib 2.1.27-21.el9 → 2.1.27-22.el9
• device-mapper 9:1.02.202-6.el9 → 9:1.02.206-2.el9_7.1
• device-mapper-event 9:1.02.202-6.el9 → 9:1.02.206-2.el9_7.1
• device-mapper-event-libs 9:1.02.202-6.el9 → 9:1.02.206-2.el9_7.1
• device-mapper-libs 9:1.02.202-6.el9 → 9:1.02.206-2.el9_7.1
• device-mapper-multipath 0.8.7-35.el9_6.3 → 0.8.7-44.el9
• device-mapper-multipath-libs 0.8.7-35.el9_6.3 → 0.8.7-44.el9
• dmidecode 1:3.6-1.el9 → 1:3.6-2.el9
• dnf 4.14.0-25.el9 → 4.14.0-33.el9
• dnf-data 4.14.0-25.el9 → 4.14.0-33.el9
• dnsmasq 2.85-17.el9_6 → 2.85-18.el9
• dracut 057-89.git20250311.el9_6 → 057-110.git20260130.el9
• dracut-network 057-89.git20250311.el9_6 → 057-110.git20260130.el9
• dracut-squash 057-89.git20250311.el9_6 → 057-110.git20260130.el9
• e2fsprogs 1.46.5-7.el9 → 1.46.5-8.el9
• e2fsprogs-libs 1.46.5-7.el9 → 1.46.5-8.el9
• efi-filesystem 6-2.el9_0 → 6-4.el9
• elfutils-debuginfod-client 0.192-6.el9_6 → 0.194-1.el9
• elfutils-default-yama-scope 0.192-6.el9_6 → 0.194-1.el9
• elfutils-libelf 0.192-6.el9_6 → 0.194-1.el9
• elfutils-libs 0.192-6.el9_6 → 0.194-1.el9
• ethtool 2:6.11-1.el9 → 2:6.15-2.el9
• expat 2.5.0-5.el9_6.1 → 2.5.0-6.el9
• firewalld-filesystem 1.3.4-15.el9_6 → 1.3.4-18.el9_7
• fuse-overlayfs 1.14-1.el9 → 1.16-1.el9
• fwupd 1.9.26-1.el9 → 1.9.31-1.el9
• fwupd-plugin-flashrom 1.9.26-1.el9 → 1.9.31-1.el9
• git-core 2.47.3-1.el9_6 → 2.52.0-1.el9
• glib2 2.68.4-16.el9_6.4 → 2.68.4-19.el9
• glibc 2.34-168.el9_6.24 → 2.34-256.el9
• glibc-common 2.34-168.el9_6.24 → 2.34-256.el9
• glibc-gconv-extra 2.34-168.el9_6.24 → 2.34-256.el9
• glibc-minimal-langpack 2.34-168.el9_6.24 → 2.34-256.el9
• gnupg2 2.3.3-4.el9_6.1 → 2.3.3-5.el9_7
• gnutls 3.8.3-6.el9_6.2 → 3.8.10-3.el9
• grub2-common 1:2.06-105.el9_6 → 1:2.06-124.el9
• grub2-efi-x64 1:2.06-105.el9_6 → 1:2.06-124.el9
• grub2-pc 1:2.06-105.el9_6 → 1:2.06-124.el9
• grub2-pc-modules 1:2.06-105.el9_6 → 1:2.06-124.el9
• grub2-tools 1:2.06-105.el9_6 → 1:2.06-124.el9
• grub2-tools-minimal 1:2.06-105.el9_6 → 1:2.06-124.el9
• hwdata 0.348-9.18.el9 → 0.348-9.22.el9
• ignition 2.21.0-6.el9_6 → 2.25.1-1.el9
• ignition-grub 2.21.0-6.el9_6 → 2.25.1-1.el9
• ima-evm-utils 1.5-3.el9 → 1.6.2-2.el9
• iproute 6.11.0-1.el9 → 6.17.0-2.el9
• iproute-tc 6.11.0-1.el9 → 6.17.0-2.el9
• iputils 20210202-11.el9_6.3 → 20210202-15.el9_7
• irqbalance 2:1.9.4-2.el9_6.2 → 2:1.9.4-5.el9
• iscsi-initiator-utils 6.2.1.9-1.gita65a472.el9 → 6.2.1.11-0.git4b3e853.el9
• iscsi-initiator-utils-iscsiuio 6.2.1.9-1.gita65a472.el9 → 6.2.1.11-0.git4b3e853.el9
• jq 1.6-17.el9_6.2 → 1.6-19.el9
• kernel 5.14.0-570.92.1.el9_6 → 5.14.0-686.el9
• kernel-core 5.14.0-570.92.1.el9_6 → 5.14.0-686.el9
• kernel-modules 5.14.0-570.92.1.el9_6 → 5.14.0-686.el9
• kernel-modules-core 5.14.0-570.92.1.el9_6 → 5.14.0-686.el9
• kernel-modules-extra 5.14.0-570.92.1.el9_6 → 5.14.0-686.el9
• kexec-tools 2.0.29-5.el9_6.2 → 2.0.29-17.el9
• kmod 28-10.el9 → 28-11.el9
• kmod-libs 28-10.el9 → 28-11.el9
• kpartx 0.8.7-35.el9_6.3 → 0.8.7-44.el9
• less 590-5.el9 → 590-6.el9
• libblkid 2.37.4-21.el9 → 2.37.4-25.el9
• libbpf 2:1.5.0-1.el9 → 2:1.5.0-3.el9
• libbrotli 1.0.9-7.el9_6.1 → 1.0.9-9.el9_7
• libcap 2.48-9.el9_2 → 2.48-10.el9
• libcom_err 1.46.5-7.el9 → 1.46.5-8.el9
• libcurl 7.76.1-31.el9_6.3 → 7.76.1-40.el9
• libdnf 0.69.0-13.el9 → 0.69.0-18.el9
• libdnf-plugin-subscription-manager 1.29.45.1-1.el9_6 → 1.29.50-1.el9
• libdrm 2.4.123-2.el9 → 2.4.128-1.el9
• libeconf 0.4.1-4.el9 → 0.4.1-5.el9
• libedit 3.1-38.20210216cvs.el9 → 3.1-39.20210216cvs.el9
• libfdisk 2.37.4-21.el9 → 2.37.4-25.el9
• libgcc 11.5.0-5.el9_5 → 11.5.0-14.el9
• libgomp 11.5.0-5.el9_5 → 11.5.0-14.el9
• libibverbs 54.0-2.el9_6 → 61.0-2.el9
• libipa_hbac 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• libldb 4.21.3-14.el9_6 → 4.23.5-5.el9
• libluksmeta 9-12.el9 → 10-1.el9
• libmount 2.37.4-21.el9 → 2.37.4-25.el9
• libnfsidmap 1:2.5.4-34.el9 → 1:2.5.4-41.el9
• libnvme 1.11.1-1.el9 → 1.16.1-2.el9
• librepo 1.14.5-2.el9 → 1.19.0-1.el9
• libsepol 3.6-2.el9 → 3.6-3.el9
• libsmartcols 2.37.4-21.el9 → 2.37.4-25.el9
• libsmbclient 4.21.3-14.el9_6 → 4.23.5-5.el9
• libsolv 0.7.24-3.el9 → 0.7.24-4.el9
• libss 1.46.5-7.el9 → 1.46.5-8.el9
• libssh 0.10.4-15.el9_6.1 → 0.10.4-17.el9_7
• libssh-config 0.10.4-15.el9_6.1 → 0.10.4-17.el9_7
• libsss_certmap 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• libsss_idmap 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• libsss_nss_idmap 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• libsss_sudo 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• libstdc++ 11.5.0-5.el9_5 → 11.5.0-14.el9
• libtalloc 2.4.2-1.el9 → 2.4.3-1.el9
• libtdb 1.4.12-1.el9 → 1.4.14-1.el9
• libtevent 0.16.1-1.el9 → 0.17.1-1.el9
• liburing 2.5-1.el9 → 2.12-1.el9
• libuser 0.63-16.el9 → 0.63-17.el9
• libuuid 2.37.4-21.el9 → 2.37.4-25.el9
• libwbclient 4.21.3-14.el9_6 → 4.23.5-5.el9
• libxml2 2.9.13-12.el9_6.1 → 2.9.13-14.el9_7
• libxmlb 0.3.10-1.el9 → 0.3.24-1.el9
• linux-firmware 20251111-151.8.el9_6 → 20260130-160.el9
• linux-firmware-whence 20251111-151.8.el9_6 → 20260130-160.el9
• logrotate 3.18.0-9.el9 → 3.18.0-12.el9
• luksmeta 9-12.el9 → 10-1.el9
• lvm2 9:2.03.28-6.el9 → 9:2.03.32-2.el9_7.1
• lvm2-libs 9:2.03.28-6.el9 → 9:2.03.32-2.el9_7.1
• mdadm 4.3-7.el9_6 → 4.4-3.el9
• microcode_ctl 4:20250211-1.20250812.1.el9_6 → 4:20251111-1.el9
• mokutil 2:0.6.0-4.el9 → 2:0.7.2-4.el9
• mpfr 4.1.0-7.el9 → 4.1.0-10.el9
• ncurses 6.2-10.20210508.el9_6.2 → 6.2-12.20210508.el9
• ncurses-base 6.2-10.20210508.el9_6.2 → 6.2-12.20210508.el9
• ncurses-libs 6.2-10.20210508.el9_6.2 → 6.2-12.20210508.el9
• netavark 2:1.14.1-1.el9_6 → 2:1.17.2-1.el9
• nfs-utils 1:2.5.4-34.el9 → 1:2.5.4-41.el9
• nftables 1:1.0.9-4.el9_6 → 1:1.0.9-6.el9_7
• nmap-ncat 3:7.92-3.el9 → 3:7.92-5.el9
• nmstate 2.2.57-1.el9_6 → 2.2.57-1.el9
• numactl-libs 2.0.19-1.el9 → 2.0.19-3.el9
• nvme-cli 2.11-7.el9_6 → 2.16-1.el9
• open-vm-tools 12.5.0-1.el9_6.2 → 13.0.10-1.el9
• openshift-clients 4.21.0-202601170322.p2.g19a2243.assembly.stream.el9 → 4.22.0-202602192221.p2.g3638445.assembly.stream.el9
• openshift-kubelet 4.21.0-202602041753.p2.g0df3535.assembly.stream.el9 → 4.22.0-202602130027.p2.g047d962.assembly.stream.el9
• openssh 8.7p1-45.el9_6.1 → 9.9p1-3.el9
• openssh-clients 8.7p1-45.el9_6.1 → 9.9p1-3.el9
• openssh-server 8.7p1-45.el9_6.1 → 9.9p1-3.el9
• openssl 1:3.2.2-7.el9_6.2 → 1:3.5.5-1.el9
• openssl-fips-provider 3.0.7-6.el9_5 → 3.0.7-8.el9
• openssl-fips-provider-so 3.0.7-6.el9_5 → 3.0.7-8.el9
• openssl-libs 1:3.2.2-7.el9_6.2 → 1:3.5.5-1.el9
• ose-aws-ecr-image-credential-provider 4.21.0-202601070814.p2.g3365bc9.assembly.stream.el9 → 4.22.0-202602190049.p2.g214f667.assembly.stream.el9
• ose-azure-acr-image-credential-provider 4.21.0-202601070814.p2.g83b3f9e.assembly.stream.el9 → 4.22.0-202601070821.p2.g8584b9a.assembly.stream.el9
• ose-crio-credential-provider 4.21.0-202602101124.p2.g83d4961.assembly.stream.el9 → 4.22.0-202602110933.p2.g83d4961.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider 4.21.0-202601070814.p2.g8732386.assembly.stream.el9 → 4.22.0-202601070821.p2.g8732386.assembly.stream.el9
• ostree 2025.2-2.el9_6 → 2025.7-1.el9
• ostree-grub2 2025.2-2.el9_6 → 2025.7-1.el9
• ostree-libs 2025.2-2.el9_6 → 2025.7-1.el9
• p11-kit 0.25.3-3.el9_5 → 0.26.2-1.el9
• p11-kit-trust 0.25.3-3.el9_5 → 0.26.2-1.el9
• pam 1.5.1-26.el9_6 → 1.5.1-28.el9
• passt 0^20250217.ga1e48a0-13.el9_6 → 0^20251210.gd04c480-3.el9
• passt-selinux 0^20250217.ga1e48a0-13.el9_6 → 0^20251210.gd04c480-3.el9
• perl-Net-SSLeay 1.94-1.el9 → 1.94-3.el9
• podman 5:5.4.0-18.el9_6 → 6:5.8.0-1.el9
• policycoreutils 3.6-2.1.el9 → 3.6-5.el9
• policycoreutils-python-utils 3.6-2.1.el9 → 3.6-5.el9
• polkit 0.117-13.el9 → 0.117-14.el9
• polkit-libs 0.117-13.el9 → 0.117-14.el9
• python-unversioned-command 3.9.21-2.el9_6.3 → 3.9.25-3.el9_7
• python3 3.9.21-2.el9_6.3 → 3.9.25-3.el9_7
• python3-audit 3.1.5-4.el9 → 3.1.5-8.el9
• python3-cloud-what 1.29.45.1-1.el9_6 → 1.29.50-1.el9
• python3-dateutil 1:2.8.1-7.el9 → 1:2.9.0.post0-1.el9_7
• python3-dnf 4.14.0-25.el9 → 4.14.0-33.el9
• python3-dnf-plugin-versionlock 4.3.0-20.el9 → 4.3.0-26.el9
• python3-dnf-plugins-core 4.3.0-20.el9 → 4.3.0-26.el9
• python3-hawkey 0.69.0-13.el9 → 0.69.0-18.el9
• python3-libdnf 0.69.0-13.el9 → 0.69.0-18.el9
• python3-librepo 1.14.5-2.el9 → 1.19.0-1.el9
• python3-libs 3.9.21-2.el9_6.3 → 3.9.25-3.el9_7
• python3-policycoreutils 3.6-2.1.el9 → 3.6-5.el9
• python3-rpm 4.16.1.3-37.el9 → 4.16.1.3-40.el9
• python3-setuptools 53.0.0-13.el9_6.1 → 53.0.0-15.el9
• python3-setuptools-wheel 53.0.0-13.el9_6.1 → 53.0.0-15.el9
• python3-subscription-manager-rhsm 1.29.45.1-1.el9_6 → 1.29.50-1.el9
• python3-urllib3 1.26.5-6.el9_6.1 → 1.26.5-6.el9_7.1
• qemu-guest-agent 17:9.1.0-15.el9_6.18 → 17:10.1.0-14.el9
• rdma-core 54.0-2.el9_6 → 61.0-2.el9
• redhat-release 9.6-0.1.el9 → 9.8-0.6.el9
• redhat-release-eula 9.6-0.1.el9 → 9.8-0.6.el9
• rpm 4.16.1.3-37.el9 → 4.16.1.3-40.el9
• rpm-build-libs 4.16.1.3-37.el9 → 4.16.1.3-40.el9
• rpm-libs 4.16.1.3-37.el9 → 4.16.1.3-40.el9
• rpm-ostree 2025.6-5.el9_6 → 2026.1-3.el9
• rpm-ostree-libs 2025.6-5.el9_6 → 2026.1-3.el9
• rpm-plugin-selinux 4.16.1.3-37.el9 → 4.16.1.3-40.el9
• rpm-plugin-systemd-inhibit 4.16.1.3-37.el9 → 4.16.1.3-40.el9
• rpm-sign-libs 4.16.1.3-37.el9 → 4.16.1.3-40.el9
• rsync 3.2.5-3.el9 → 3.2.5-4.el9
• runc 4:1.2.9-2.el9_6 → 4:1.4.0-1.el9
• samba-client-libs 4.21.3-14.el9_6 → 4.23.5-5.el9
• samba-common 4.21.3-14.el9_6 → 4.23.5-5.el9
• samba-common-libs 4.21.3-14.el9_6 → 4.23.5-5.el9
• selinux-policy 38.1.53-5.el9_6 → 38.1.73-1.el9
• selinux-policy-targeted 38.1.53-5.el9_6 → 38.1.73-1.el9
• shadow-utils 2:4.9-12.el9 → 2:4.9-16.el9
• shadow-utils-subid 2:4.9-12.el9 → 2:4.9-16.el9
• shim-x64 15.8-4.el9_3 → 16.1-7.el9
• skopeo 2:1.18.1-3.el9_6 → 2:1.22.0-1.el9
• slirp4netns 1.3.2-1.el9 → 1.3.3-1.el9
• socat 1.7.4.1-6.el9_6.1 → 1.7.4.1-8.el9
• sqlite-libs 3.34.1-8.el9_6 → 3.34.1-9.el9_7
• sssd 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• sssd-ad 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• sssd-client 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• sssd-common 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• sssd-common-pac 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• sssd-ipa 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• sssd-krb5 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• sssd-krb5-common 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• sssd-ldap 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• sssd-nfs-idmap 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• sssd-proxy 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• stalld 1.20.4-1.el9_6 → 1.26.3-1.el9
• subscription-manager 1.29.45.1-1.el9_6 → 1.29.50-1.el9
• sudo 1.9.5p2-10.el9_6.2 → 1.9.17p2-2.el9
• systemd 252-51.el9_6.4 → 252-64.el9
• systemd-journal-remote 252-51.el9_6.4 → 252-64.el9
• systemd-libs 252-51.el9_6.4 → 252-64.el9
• systemd-pam 252-51.el9_6.4 → 252-64.el9
• systemd-rpm-macros 252-51.el9_6.4 → 252-64.el9
• systemd-udev 252-51.el9_6.4 → 252-64.el9
• tar 2:1.34-7.el9_6.2 → 2:1.34-10.el9
• toolbox 0.1.2-1.rhaos4.19.el9 → 0.1.2-1.rhaos4.22.el9
• tpm2-tools 5.2-4.el9 → 5.2-7.el9
• unbound-libs 1.16.2-19.el9_6.1 → 1.24.2-2.el9
• usermode 1.114-6.el9 → 1.114-7.el9
• util-linux 2.37.4-21.el9 → 2.37.4-25.el9
• util-linux-core 2.37.4-21.el9 → 2.37.4-25.el9
• vim-minimal 2:8.2.2637-22.el9_6.1 → 2:8.2.2637-25.el9
• virt-what 1.27-1.el9 → 1.27-2.el9
• which 2.21-30.el9_6 → 2.21-30.el9
• xfsprogs 6.4.0-5.el9 → 6.4.0-7.el9
• zram-generator 0.3.2-7.el9 → 1.1.2-1.el9

Added:

• adcli-selinux 0.9.3.1-3.el9
• azure-vm-utils 0.7.0-1.el9
• fcoe-utils 1.0.34-0.git14ef0d2.el9
• libconfig 1.7.2-9.el9
• lldpad 1.1.1-4.gitf1dd9eb.el9

Extensions

Full list (153 packages)

• NetworkManager-libreswan-1.2.30-1.el9.x86_64
• bison-3.7.4-5.el9.x86_64
• capstone-4.0.2-10.el9.x86_64
• corosync-3.1.10-1.el9.x86_64
• corosynclib-3.1.10-1.el9.x86_64
• cpp-11.5.0-14.el9.x86_64
• daxctl-libs-82-1.el9.x86_64
• edk2-ovmf-20241117-8.el9.noarch
• elfutils-libelf-devel-0.194-1.el9.x86_64
• fence-agents-all-4.10.0-110.el9.x86_64
• fence-agents-amt-ws-4.10.0-110.el9.noarch
• fence-agents-apc-4.10.0-110.el9.noarch
• fence-agents-apc-snmp-4.10.0-110.el9.noarch
• fence-agents-bladecenter-4.10.0-110.el9.noarch
• fence-agents-brocade-4.10.0-110.el9.noarch
• fence-agents-cisco-mds-4.10.0-110.el9.noarch
• fence-agents-cisco-ucs-4.10.0-110.el9.noarch
• fence-agents-common-4.10.0-110.el9.noarch
• fence-agents-drac5-4.10.0-110.el9.noarch
• fence-agents-eaton-snmp-4.10.0-110.el9.noarch
• fence-agents-emerson-4.10.0-110.el9.noarch
• fence-agents-eps-4.10.0-110.el9.noarch
• fence-agents-heuristics-ping-4.10.0-110.el9.noarch
• fence-agents-hpblade-4.10.0-110.el9.noarch
• fence-agents-ibmblade-4.10.0-110.el9.noarch
• fence-agents-ifmib-4.10.0-110.el9.noarch
• fence-agents-ilo-moonshot-4.10.0-110.el9.noarch
• fence-agents-ilo-mp-4.10.0-110.el9.noarch
• fence-agents-ilo-ssh-4.10.0-110.el9.noarch
• fence-agents-ilo2-4.10.0-110.el9.noarch
• fence-agents-intelmodular-4.10.0-110.el9.noarch
• fence-agents-ipdu-4.10.0-110.el9.noarch
• fence-agents-ipmilan-4.10.0-110.el9.noarch
• fence-agents-kdump-4.10.0-110.el9.x86_64
• fence-agents-mpath-4.10.0-110.el9.noarch
• fence-agents-redfish-4.10.0-110.el9.x86_64
• fence-agents-rhevm-4.10.0-110.el9.noarch
• fence-agents-rsa-4.10.0-110.el9.noarch
• fence-agents-rsb-4.10.0-110.el9.noarch
• fence-agents-sbd-4.10.0-110.el9.noarch
• fence-agents-scsi-4.10.0-110.el9.noarch
• fence-agents-vmware-rest-4.10.0-110.el9.noarch
• fence-agents-vmware-soap-4.10.0-110.el9.noarch
• fence-agents-wti-4.10.0-110.el9.noarch
• fence-virt-4.10.0-110.el9.x86_64
• flex-2.6.4-9.el9.x86_64
• gcc-11.5.0-14.el9.x86_64
• glibc-devel-2.34-256.el9.x86_64
• glibc-headers-2.34-256.el9.x86_64
• gnutls-dane-3.8.10-3.el9.x86_64
• gnutls-utils-3.8.10-3.el9.x86_64
• ipmitool-1.8.18-27.el9.x86_64
• ipxe-roms-qemu-20200823-9.git4bd064de.el9.noarch
• kata-containers-3.21.0-5.rhaos4.20.el9.x86_64
• kernel-5.14.0-686.el9.x86_64
• kernel-core-5.14.0-686.el9.x86_64
• kernel-devel-5.14.0-686.el9.x86_64
• kernel-headers-5.14.0-686.el9.x86_64
• kernel-modules-5.14.0-686.el9.x86_64
• kernel-modules-extra-5.14.0-686.el9.x86_64
• kernel-rt-core-5.14.0-686.el9.x86_64
• kernel-rt-devel-5.14.0-686.el9.x86_64
• kernel-rt-modules-5.14.0-686.el9.x86_64
• kernel-rt-modules-core-5.14.0-686.el9.x86_64
• kernel-rt-modules-extra-5.14.0-686.el9.x86_64
• krb5-pkinit-1.21.1-8.el9_6.x86_64
• krb5-workstation-1.21.1-8.el9_6.x86_64
• ldns-1.7.1-12.el9.x86_64
• libfdt-1.6.0-7.el9.x86_64
• libkadm5-1.21.1-8.el9_6.x86_64
• libknet1-1.28-1.el9.x86_64
• libknet1-compress-bzip2-plugin-1.28-1.el9.x86_64
• libknet1-compress-lz4-plugin-1.28-1.el9.x86_64
• libknet1-compress-lzma-plugin-1.28-1.el9.x86_64
• libknet1-compress-lzo2-plugin-1.28-1.el9.x86_64
• libknet1-compress-plugins-all-1.28-1.el9.x86_64
• libknet1-compress-zlib-plugin-1.28-1.el9.x86_64
• libknet1-compress-zstd-plugin-1.28-1.el9.x86_64
• libknet1-crypto-nss-plugin-1.28-1.el9.x86_64
• libknet1-crypto-openssl-plugin-1.28-1.el9.x86_64
• libknet1-crypto-plugins-all-1.28-1.el9.x86_64
• libknet1-plugins-all-1.28-1.el9.x86_64
• libmpc-1.2.1-4.el9.x86_64
• libnozzle1-1.28-1.el9.x86_64
• libpmem-1.12.1-1.el9.x86_64
• libpng-2:1.6.37-14.el9.x86_64
• libqb-2.0.8-1.el9.x86_64
• librdmacm-61.0-2.el9.x86_64
• libreswan-5.2-1.el9fdp.x86_64
• libwsman1-2.8.1-2.el9.x86_64
• libxcrypt-devel-4.4.18-3.el9.x86_64
• libzstd-devel-1.5.5-1.el9.x86_64
• lm_sensors-libs-3.6.0-10.el9.x86_64
• m4-1.4.19-1.el9.x86_64
• make-1:4.3-8.el9.x86_64
• ndctl-libs-82-1.el9.x86_64
• net-snmp-libs-1:5.9.1-17.el9_7.1.x86_64
• net-snmp-utils-1:5.9.1-17.el9_7.1.x86_64
• nspr-4.36.0-4.el9_4.x86_64
• nss-3.112.0-4.el9_4.x86_64
• nss-softokn-3.112.0-4.el9_4.x86_64
• nss-softokn-freebl-3.112.0-4.el9_4.x86_64
• nss-sysinit-3.112.0-4.el9_4.x86_64
• nss-tools-3.112.0-4.el9_4.x86_64
• nss-util-3.112.0-4.el9_4.x86_64
• openssl-devel-1:3.5.5-1.el9.x86_64
• openvswitch3.5-ipsec-3.5.2-51.el9fdp.x86_64
• openwsman-python3-2.8.1-2.el9.x86_64
• pacemaker-2.1.10-2.el9.x86_64
• pacemaker-cli-2.1.10-2.el9.x86_64
• pacemaker-cluster-libs-2.1.10-2.el9.x86_64
• pacemaker-libs-2.1.10-2.el9.x86_64
• pacemaker-schemas-2.1.10-2.el9.noarch
• pcp-conf-6.3.7-6.el9.x86_64
• pcp-libs-6.3.7-6.el9.x86_64
• pcs-0.11.11-1.el9.x86_64
• perl-TimeDate-1:2.33-6.el9.noarch
• pixman-0.40.0-6.el9.x86_64
• protobuf-3.14.0-17.el9.x86_64
• python3-cffi-1.14.5-5.el9.x86_64
• python3-cryptography-36.0.1-5.el9.x86_64
• python3-lxml-4.6.5-3.el9.x86_64
• python3-openvswitch3.5-3.5.2-51.el9fdp.x86_64
• python3-ply-3.11-14.el9.noarch
• python3-pycparser-2.20-6.el9.noarch
• python3-pycurl-7.43.0.6-8.el9.x86_64
• python3-pyparsing-2.4.7-9.el9.noarch
• python3-tornado-6.4.2-2.el9_6.2.x86_64
• qemu-img-17:10.1.0-14.el9.x86_64
• qemu-kvm-common-17:10.1.0-14.el9.x86_64
• qemu-kvm-core-17:10.1.0-14.el9.x86_64
• redhat-logos-90.6-1.el9.x86_64
• resource-agents-4.10.0-80.el9_7.11.x86_64
• ruby-3.0.7-165.el9_5.x86_64
• ruby-default-gems-3.0.7-165.el9_5.noarch
• ruby-libs-3.0.7-165.el9_5.x86_64
• rubygem-bigdecimal-3.0.0-165.el9_5.x86_64
• rubygem-bundler-2.2.33-165.el9_5.noarch
• rubygem-io-console-0.5.7-165.el9_5.x86_64
• rubygem-json-2.5.1-165.el9_5.x86_64
• rubygem-psych-3.3.2-165.el9_5.x86_64
• rubygem-rdoc-6.3.4.1-165.el9_5.noarch
• rubygem-rexml-3.2.5-165.el9_5.noarch
• rubygems-3.2.33-165.el9_5.noarch
• sbd-1.5.2-1.el9.x86_64
• seabios-bin-1.16.3-5.el9.noarch
• seavgabios-bin-1.16.3-5.el9.noarch
• sysstat-12.5.4-11.el9.x86_64
• telnet-1:0.17-85.el9.x86_64
• usbguard-1.1.4-2.el9.x86_64
• usbguard-selinux-1.1.4-2.el9.noarch
• virtiofsd-1.13.3-1.el9.x86_64
• zlib-devel-1.2.11-40.el9.x86_64

Red Hat Enterprise Linux CoreOS base layer: 9.8.20260221-0