5.1.0-ec.2

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:5.1.0-ec.2-x86_64

Qualifiers (status api): None

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-dev-preview-5-e2e-aws-ovn-upgrade
- upgrade-major Failed (2 retries) periodic-ci-openshift-release-main-dev-preview-5-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial-1of2 Succeeded periodic-ci-openshift-release-main-nightly-5.1-e2e-aws-ovn-serial-1of2
- aws-ovn-serial-2of2 Succeeded periodic-ci-openshift-release-main-nightly-5.1-e2e-aws-ovn-serial-2of2
- aws-ovn-techpreview Succeeded (1 retry) periodic-ci-openshift-release-main-ci-5.1-e2e-aws-ovn-techpreview
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- aws-ovn-techpreview-serial-1of3 Succeeded (1 retry) periodic-ci-openshift-release-main-ci-5.1-e2e-aws-ovn-techpreview-serial-1of3
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- aws-ovn-techpreview-serial-2of3 Succeeded periodic-ci-openshift-release-main-ci-5.1-e2e-aws-ovn-techpreview-serial-2of3
- aws-ovn-techpreview-serial-3of3 Succeeded (1 retry) periodic-ci-openshift-release-main-ci-5.1-e2e-aws-ovn-techpreview-serial-3of3
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- metal-ipi-ovn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-5.1-e2e-metal-ipi-ovn-ipv4
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-5.1-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Loading changelog, this may take a while ...

Changes from 5.1.0-ec.1

Created: 2026-11-06 21:19:35 +0000 UTC

Image Digest: sha256:0a8c0243e3a6843fc17183af53a7fb529eae406c4745ff33d645e710d1d56923

Components

Kubectl upgraded from 1.36.2 to 1.37.1
Kubernetes upgraded from 1.36.4 to 1.37.1
Kubernetes Tests 1.36.2
Red Hat Enterprise Linux CoreOS upgraded from 10.2.20260918-0 to 10.2.20261027-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
BootImageSkewEnforcement (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
DualReplica (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
SELinuxMountGAReadiness (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AzureMultiDisk (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
KMSEncryption (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
OpenShiftPodSecurityAdmission (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled
TLSAdherence (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled	Enabled	Enabled
OLMLifecycleAndCompatibility (0 tests)	Disabled	Disabled (Changed)	Disabled	Disabled (Changed)	Disabled	Disabled (Changed)	Disabled	Disabled (Changed)
AuthenticationComponentProxy (0 tests)	Disabled	Enabled (Changed)	Disabled	Enabled	Disabled	Enabled (Changed)	Disabled	Enabled
DRADeviceTaintRules (0 tests)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)
AuthenticationComponentProxyExternalOIDC (0 tests)			Enabled (New)	Enabled (New)
ClusterAPIMachineManagementNutanix (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ClusterAPIOperator (0 tests)				Enabled (New)				Enabled (New)
CompositePodGroup (0 tests)
ControllerManagerConfig (0 tests)				Enabled (New)
DRAWorkloadResourceClaims (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ExternalOIDCAsWebhook (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
GenericWorkload (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
MACSecurity (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
MachineAPIMigrationNutanix (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
MetalEnrollmentAPI (0 tests)			Enabled (New)	Enabled (New)
OpenStackMaxAllowedAddressPairs (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
PodGroupPreemptionPolicy (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
StoragePathAlert (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
TopologyAwareWorkloadScheduling (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
UnifiedClusterManagedDNSAndLB (0 tests)				Enabled (New)

New images

azure-karpenter-provider-azure git bc70c724 sha256:3fcb379ba20499576bc12c05762f3c603e72fd6e966b55090d71ac0518cfbff1
csi-volume-device-exporter git 78eb5c79 sha256:a331dd8572cb012b982a84c4fc0d6caa73b7127afc4e818d038d85330dac921e

Removed images

configmap-reloader
haproxy-router-haproxy28

Rebuilt images without code change

aws-pod-identity-webhook git 0d33a459 sha256:ace859b4bab07c6cfba29e5157fdc0a13c13fb5e6784a121868c12a7b56fc3ac
azure-workload-identity-webhook git 3f118b30 sha256:35330be778bec8832e33a65e551c38f2bd336f687e66cd06886ac9fd93b83050
cluster-autoscaler git a819db45 sha256:889ae468bec94bbbd04ab18d21718aaa1bad6a51c7290c29cf3ba03736d3663b
cluster-update-keys git 9607604d sha256:763dc6f0d9b42a136e384936145bd4a184b31e026d461f69c7b2454a86fc6518
csi-driver-nfs git 69f816f6 sha256:33ee6c2c86a126779c671169cc12d501ffdac13360cbfb12e01ef65c0f4746ee
driver-toolkit git b63b175a sha256:1939567a3c43b5f73e89cbc8531c457a8899ff7ec01da43f66a0441e9fa25849
driver-toolkit-10 git b63b175a sha256:908e1a7434d8e58e892ef129b90d851b7c779a815e3a01ff74339ceaeb27cee8
gcp-workload-identity-federation-webhook git 4501ff2f sha256:61be63a848496e742d98b5c778f06bd29f9070cd95fa840d8d9009daf9e06a9c
ironic-machine-os-downloader git f8e41b2e sha256:c7dbd0797d10c49d1d25082a3e4d159f82c45f591e1d13b113aec5d231f91fcc
ironic-static-ip-manager git 486a0418 sha256:a0be957175cfa81d653a907689accb58cdd20642d18f9b9f79b17a4136da3bda
kube-vip git b272a734 sha256:c593ff881dd9d6e1801f6e9b37bf5e27162a89dabedbadcbfac30f5e2480acae
machine-image-customization-controller git 87f4774b sha256:039f379d53a122bf87c0c0ae46e36833bcdfa0e4e3c631e1141a6ecb5af2d9e1
multus-networkpolicy git 39e9cccf sha256:129bb6739888a44aa489b501e89d22108ab02b9038c742c364f45f051972210f
network-interface-bond-cni git b8723844 sha256:e3f14469594cd990d4b6614f515bcb2053fd2331e4f117dcda193091cb846345
openstack-resource-controller git 64203711 sha256:96dd1ef97dcc6d3910943efba0830b1498489b74cb9d5accf5df9747a6fb7321
powervs-block-csi-driver git cfe345c7 sha256:cf4f4e54361e23a4d2f6ca426aa74b46fac48b846b05e6f6446106a48e8e0938
route-controller-manager git a158fff7 sha256:fb5309382103d3a2dabbde5f7681114af6af1015246c0d8fd8ee538c96116929
service-ca-operator git ed872ba1 sha256:59c9d256fc3f0b9923bfea3616fdf722f2bb89c94d37a812c27e412b4e717e1a

agent-installer-api-server

NO-ISSUE: [master] Bump OCP versions: 4.19, 5.0 #11336
NO-ISSUE: Refresh RPM lockfiles #11331
NO-ISSUE: [master] Bump OCP versions: 4.14, 4.18, 4.20, 4.16, 4.22, 4.19, 4.21, 5.0 #11323
MGMT-25002: Prevent host event leaks across InfraEnvs #11036
MGMT-25583: CVE-2026-116587 Bump github.com/go-jose/go-jose/v4 to v4.1.6 #11321
NO-ISSUE: Refresh RPM lockfiles #11297
NO-ISSUE: [master] Bump OCP versions: 4.19 #11278
MGMT-25480: Sync NTP sources from CRD spec by comparing to DB #11198
NO-ISSUE: [master] Bump OCP versions: 4.21, 4.20, 4.22 #11270
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #11264
OCPEDGE-3082: Skip dnsmasq for UnifiedClusterManagedDNSAndLB FG + SNO + None platform #11228
ACM-48279: Cilium blocks infrastructure-operator access to the Kubernetes API #11245
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #11254
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #11043
ACM-44934: CVE-2026-88031 Bump go.mongodb.org/mongo-driver to v1.17.10 using replace directive #11220
NO-ISSUE: [master] Bump OCP versions: 4.13, 4.16, 4.17, 4.18, 5.0 #11240
NO-ISSUE: [master] Bump OCP versions: 4.22, 4.19 #11229
NO-ISSUE: [master] Bump OCP versions: 4.20, 4.21 #11205
AGENT-1648: Set fips in install-config for the agent-based installer #11114
NO-ISSUE: [master] Bump OCP versions: 5.0 #11204
MGMT-19216: Add node selector and tolerations to our webhook #11049
ACM-44934: CVE-2026-88031 Bump github.com/go-openapi/loads, github.com/go-openapi/analysis, github.com/go-openapi/validate, github.com/go-openapi/strfmt to fix CVE-2026-88031 through introducers update (models module) #11165
MGMT-25133: Accept OpenSSH authorized_keys options in SSH key validation #10830
ACM-44934: CVE-2026-88031 Bump go.mongodb.org/mongo-driver to v1.17.10 through indirect dependency conversion (api module) #11164
ACM-47334: CVE-2026-63209 Bump github.com/klauspost/compress to v1.18.7 through indirect dependency conversion #11149
NO-ISSUE: upgrade Go to 1.26.7 #11119
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 4.19 #11197
ACM-47458: CVE-2026-84304 Bump google.golang.org/grpc to v1.83.1 using replace directive (api module) #11185
ACM-44934: CVE-2026-88031 Bump go.mongodb.org/mongo-driver to v1.17.10 through indirect dependency conversion (client module) #11195
ACM-47334: CVE-2026-63209 Bump github.com/klauspost/compress to v1.18.7 using replace directive (api module) #11155
ACM-47334: CVE-2026-63209 Bump github.com/klauspost/compress to v1.18.7 using replace directive (models module) #11156
ACM-47334: CVE-2026-63209 Bump github.com/klauspost/compress to v1.18.7 using replace directive (client module) #11157
ACM-47458: CVE-2026-84304 Bump google.golang.org/grpc to v1.83.1 through indirect dependency conversion #11139
NO-ISSUE: [master] Bump OCP versions: 4.22, 4.20, 4.21 #11094
MGMT-25505: moving seaweedfs to our own repo #11085
MGMT-25497: Use OCP version for disconnected iso images #11062
ACM-39262: chain PostgreSQL hops for EUS skip-upgrades #10882
MGMT-24807: OpenShift AI validation message is confusing — doesn’t state role and shows a different (lower) CPU/RAM number than the aggregated worker-role requirement #10969
MGMT-23594: Installation should not be stopped if we can’t pull the must gather image #10935
OCPBUGS-104857: Disk validation falsely reports iSCSI host IP conflict when iBFT initiator uses DHCP (flags=7) on dual-homed host #11007
NO-ISSUE: [master] Bump OCP versions: 4.14, 4.20, 5.0, 4.22, 4.16, 4.21, 4.18, 4.19, 4.17 #11084
MGMT-25505: minio was deprecated #11050
NO-ISSUE: [master] Bump OCP versions: 4.22, 4.19, 4.20, 4.21 #11004
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #10957
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #10958
NO-ISSUE: [master] Bump OCP versions: 5.0, 4.18, 4.19, 4.13 #10980
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-132570: Preserve firstboot network config across OS image replacement #2465
NO-ISSUE: Update module github.com/golangci/golangci-lint to v2.15.0 #2477
ACM-44932: CVE-2026-88031 Bump go.mongodb.org/mongo-driver to v1.17.10 through indirect dependency conversion #2443
MGMT-25001: Bump Go to 1.26.7 for stdlib CVEs #2432
NO-ISSUE: Update module github.com/golangci/golangci-lint to v2.14.0 #2389
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #2417
NO-ISSUE: Refresh RPM lockfiles #2418
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #2330
NO-ISSUE: migrate Renovate config #2363
MGMT-25156: Fix CVE-2026-17106 #2328
Full changelog

agent-installer-node-agent

NO-ISSUE: Refresh RPM lockfiles [SECURITY] #1768
NO-ISSUE: Refresh RPM lockfiles #1774
MGMT-25567: fix(apivip_check): honor HTTPS proxy with custom CA #1737
NO-ISSUE: Refresh RPM lockfiles #1757
NO-ISSUE: Refresh RPM lockfiles #1705
OCPBUGS-130428: Bump golang.org/x/crypto to v0.56.0 to fix CVE-2026-56855 #1718
OCPBUGS-130445: CVE-2026-78662 Bump golang.org/x/crypto to v0.56.0 #1719
ACM-44931: CVE-2026-88031 Bump go.mongodb.org/mongo-driver to v1.17.10 through indirect dependency conversion #1716
MGMT-24979: Bump Go to 1.26.7 for stdlib CVEs #1696
MGMT-25508: Exclude ASPEED 1a03:2000 from GPU inventory #1694
MGMT-23804: GPU inventory incorrectly includes non-GPU PCI devices (DPU/SmartNIC devices) #1670
MGMT-25157: CVE-2026-17106 Bump github.com/moby/go-archive to v0.3.0 through indirect dependency conversion #1630
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #1676
NO-ISSUE: Refresh RPM lockfiles #1684
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #1635
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #1653
NO-ISSUE: Refresh RPM lockfiles #1590
Full changelog

agent-installer-ui

Bump undici from 7.30.0 to 7.30.1 (#4149) #4149
Bump happy-dom from 20.9.0 to 21.0.4 (#4148) #4148
MGMT-25561: OVE above-the-sea: UI should update additional_ntp_sources instead of ntp_sources (#4118) #4118
Don’t show Static IP steps in OVE below the sea (#4119) #4119
Hide the network type control in OVE (#4129) #4129
Add to OVE custom manifest workaround filter (#4128) #4128
Update GH actions to @v7 (#4127) #4127
Bump vite from 8.0.16 to 8.1.6 (#4121) #4121
Bump follow-redirects from 1.16.0 to 1.16.1 (#4120) #4120
Temporarily hide static IP controls (#4116) #4116
MGMT-25543: OVE above-the-sea: remove proxy fields (#4113) #4113
Remove Assisted Chatbot (#4091) #4091
Red Hat Konflux purge assisted-ui-chatbot-saas-main (#4111) #4111
MGMT-25125: Implement Offline Openshift Versions Dropdown (#4107) #4107
chore(deps): update dependency ip-address to ^10.7.3 (#4109) #4109
chore(deps): update dependency immutable to ^5.1.9 (#4108) #4108
Bump joi from 17.13.7 to 17.13.8 (#4100) #4100
Upgrade Axios to 1.20.0 (#4105) #4105
Bump compression from 1.8.1 to 1.8.2 (#4104) #4104
Bump postcss-selector-parser from 7.1.5 to 7.1.6 (#4103) #4103
Bump source-map-js from 1.2.1 to 1.2.2 (#4102) #4102
Bump proxy-addr from 2.0.7 to 2.0.8 (#4101) #4101
CVE Upgrade (#4099) #4099
MGMT-25084: Upgrade axios to 1.20.0 (#4098) #4098
chore(deps): update dependency dompurify to ^3.4.16 (#4094) #4094
chore(deps): update dependency @types/node to ^24.19.1 (#4093) #4093
Do not show limited support level warning in disconnected flow (#4087) #4087
Update OpenShift version for OVE (#4084) #4084
Bump ip-address from 10.4.0 to 10.5.1 (#4083) #4083
Bump undici from 7.29.0 to 7.30.0 (#4082) #4082
chore(deps): update konflux references (#4072) #4072
remove disconvering word from StaticIP for Disconnected mode (#4079) #4079
chore(deps): update dependency ajv to ^8.20.0 (#4077) #4077
Bump immutable from 3.8.3 to 3.8.4 (#4078) #4078
chore(deps): update dependency @types/node to ^24.13.6 (#4076) #4076
OCPBUGS-123716: [Above the sea UI] The rendezvous IP must match one of the defined static IPs (#4071) #4071
Add Proxy and NTP configurations (#4068) #4068
Above the sea - hide pull secret field when it’s already been set (#4067) #4067
Full changelog

agent-installer-utils

AGENT-1565: Add OVE 4.22 tekton file to agent-installer-utils #320
AGENT-1629: Add –fips flag to the OVE ISO builder script #356
OCPBUGS-111468: prefix-validate URLs used in commands #349
Full changelog

agentic-skills

NO-ISSUE: Gitops skills updated #66
OBSINTA-1732: investigate-alerts skill - initialize Prometheus access on demand and other improvements #59
GITOPS-11460: Add argo team onboard skill #54
GITOPS-11457, GITOPS-11458: Add argo-operations and argo-repo-audit skills #53
GITOPS-11459: Add argo-cluster-debug Skill Knowledge #55
Full changelog

apiserver-network-proxy

CNTRLPLANE-4019: Merge upstream master (4f8517c1) into main #116
Full changelog

aws-cloud-controller-manager

OCPCLOUD-3684: Merge https://github.com/kubernetes/cloud-provider-aws/tree/master (c87c679) into main #191
Full changelog

aws-cluster-api-controllers

UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws/tree/v2.13.1 (6883178) into main #664
OCPBUGS-128249: UPSTREAM: <carry>: remove redundant GitHub summary verification #658
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #636
NO-JIRA: UPSTREAM: <drop>: update manifests-gen #657
NO-JIRA: fix(make): verify generated summary from pull request revision #656
Full changelog

aws-ebs-csi-driver

STOR-3072: Rebase to upstream v1.65.0 for OCP 5.1 #347
NO-ISSUE: Address CVE-2026-33814 #354
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #331
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, gcp-pd-csi-driver-operator, openstack-cinder-csi-driver-operator

STOR-3210: Enable Online Expansion tests for Azure Disk #650
STOR-3173: Configure TLS groups for OLM-managed operators #654
STOR-3176: Support TLS Groups in operators for kube-rbac-proxy sidecar #651
STOR-3068: Bump all libraries #646
OCPBUGS-120762: restrict azure-file secrets ClusterRole to get and create verbs #639
STOR-3141, STOR-3142: EFS, Samba: Ship Network Policies in the operator bundle #629
OCPBUGS-127462: Unresolved ${TLS_CIPHER_SUITES} for Custom TLS 1.3 profile #638
OCPBUGS-88301: Remove redundant delete role verb #620
OCPBUGS-113538: Enable SELinuxMount tests #605
Full changelog

aws-karpenter-provider-aws

NO-JIRA: Update Karpenter owner aliases #50
Full changelog

aws-kms-encryption-provider

OCPBUGS-124534: Bump grpc-go to v1.83.2 #55
Full changelog

aws-machine-controllers

OCPCLOUD-3661: bump to Kubernetes 1.37 #227
OCPBUGS-126179: Fixed dedicated host tests to check for machineset to exist #217
Full changelog

aws-node-termination-handler

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #15
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPCLOUD-3676: Merge https://github.com/kubernetes-sigs/cloud-provider-azure/tree/release-1.37 (6e6e09b) into main #200
Full changelog

azure-cluster-api-controllers

OCPBUGS-129622: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:release-1.27 (8c829ce) into main #420
OCPCLOUD-3690: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.27.0 (3d9e0c3) into main #412
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #413
Full changelog

azure-disk-csi-driver

TRT-3028: UPSTREAM: <drop>: Revert “STOR-3077: Rebase to v1.36.0 for OCP 5.1” #187
STOR-3077: Rebase to v1.36.0 for OCP 5.1 #182
NO-JIRA: Add coderabbit config #183
Full changelog

azure-file-csi-driver

STOR-3082: Rebase to v1.35.10 for OCP 5.1 #170
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #167
Full changelog

azure-kms-encryption-provider

OCPBUGS-124531: Bump grpc-go to v1.83.2 #65
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #64
Full changelog

azure-machine-controllers

OCPBUGS-127058: Azure DualStack: Update Load Balancer backend pool matching for IPv6 #221
OCPCLOUD-3663: bump Kubernetes dependencies to 1.37 #220
Full changelog

azure-service-operator

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #47
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-135071: fix: preserve standalone remediation CRDs when BareMetal machine management is disabled #117
OCPBUGS-132229: UPSTREAM: 3440: Bump x/net to v0.55.0 #113
OCPBUGS-128431: Go HTTP/2: Denial of Service via malformed PRIORITY_UPDATE frame - CVE-2026-33814 #110
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #107
Full changelog

baremetal-installer, installer, installer-artifacts

MULTIARCH-6330: Installer: Modify IBMPowerVSCluster manifest to switch to PowerVS DHCP subnet #11030
MULTIARCH-6014: PowerVS: Use PowerVS Stock Catalogue Images #10647
MULTIARCH-6455: Update CAPIBM to v0.15.2, CAPV (vsphere) to 1.17.0 and CAPI to v1.14.0 #10902
SPLAT-2981: drop Azure diskSetup gate test ahead of promotion #11035
OCPBUGS-122924: Default IngressController to Modern TLS #10875
OCPBUGS-133483: PowerVC: fix two issues with cherry-pick 10966 #11027
OCPBUGS-132853: [Azure] Fix nil error wrap in getNextAvailableIPForLoadBalancer #11019
OCPBUGS-129425, OCPBUGS-94441: bump upi-installer base image to RHEL 10 #10715
RFE-8788: Update installer to accept Capacity Group Reservation IDs for Azure #10102
OCPBUGS-127058: Azure DualStack: Rename IPv6 Backend pools #10998
SPLAT-3016: multi-disk: disallow system mount paths for user-defined disks #11021
OCPBUGS-130398: PowerVC: Support non admin user #10966
OCPBUGS-126133: CVE-2026-84445: Bump google.golang.org/grpc to v1.83.2 #10936
OPNET-810: deps: bump openshift/api and Kubernetes packages to 1.37 #10985
OCPBUGS-132573: azure: omit empty machine security profiles #10960
OPNET-810: baremetal: align bgpVIPConfig peer fields with the BGPVIPConfig CRD #10931
OCPBUGS-132208: unconfigured-ignition must include nmstateconfig.yaml when present #11010
OCPBUGS-130604, OCPBUGS-132034: azure: set up data disks via the LUN link and other validation gaps #10975
OKD-507: Update SCOS bootimage metadata to 10.0.20261014-0 #10864
OCPBUGS-131836: support InfraEnv AdditionalNTPSources in unconfigured-ignition #10996
no-jira: lint: define constants for aws subnet scope strings #10984
SPLAT-2981: decouple multidisk gates #10939
OCPBUGS-85811: Add omitzero to the AWS vpc field #10977
OCPBUGS-127102: Add internalJoinSubnet to installConfigOverrides #10963
OCPBUGS-127058: Azure DualStack: Allow IPv6 CIDRs to be provided first #10954
OCPBUGS-129534: golangci: avoid var-naming package-name flake #10953
CORS-4689: aws: update CAPA controller to v2.12.1 #10949
SPLAT-2976: multi-disk close install-config validation gaps #10934
TRT-3001: Revert #10152 “OCPBUGS-76925: Update no_proxy list to include AWS DNS resolver for UserProvisionedDNS” #10951
OCPBUGS-127394: Removed PowerVS InstallConfig debug log statement exposing sensitive information #10898
OCPBUGS-128718: validate AssignIpv6AddressOnCreation on BYO subnets for DualStackIPv4Primary #10933
OCPBUGS-76925: Update no_proxy list to include AWS DNS resolver for UserProvisionedDNS #10152
OCPBUGS-105321: pki: switch to ECDSA defaults and thread PKI profile to leaf certs #10743
OCPBUGS-127240: gcp: restrict global KMS location check to defaultMachinePlatform #10907
OCPBUGS-115159: aws: provision dedicated IAM resources for edge compute pool #10836
OKD-194: Add OKD cincinnati as the default update service for OKD #10834
OCPBUGS-126706: azure: allow isolated Ebdsv5/Ebsv5 VM families #10888
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

baremetal-machine-controllers

OCPCLOUD-3709: feat(tls): support remediation webhook curve preferences #283
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #278
Full changelog

baremetal-operator

METAL-1980: Merge upstream #529
OCPBUGS-120721: Test int64 BIOS bounds #528
OCPBUGS-120721: Bump gophercloud to v2.15.0 #527
Full changelog

baremetal-runtimecfg

OCPEDGE-3080: Allow no DNS upstreams #420
OCPEDGE-3080: Introduce –discover-node-ip for SNO CoreDNS #417
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #415
Full changelog

cli, cli-artifacts, deployer, tools

OCPEDGE-2991: Read topology transition evaluations from API #2449
OCPEDGE-2960: Update topology subcommand to read transition status from infra api #2430
NO-JIRA: Rebase to 1.37 and update other dependencies. #2435
NO-JIRA: Add DS_Store to gitignore file #2441
: NO-JIRA: fix(set volumes): mention configmap in invalid volume type error #2437
OCPBUGS-120725: Return error when markers are not all replaced #2429
OCPBUGS-60768: properly indent multiline node messages in upgrade status output #2341
OCPEDGE-2416: Add oc adm transition topology command for SNO to HA transitions #2295
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cloud-credential-operator

NO-JIRA: Fix staticcheck warnings across multiple packages #1109
CCO-772: ccoctl - Add set-upgradeable-to command #1105
CCO-775: ccoctl Create custom roles before identity bindings #1104
Full changelog

cloud-network-config-controller

CORENET-7645: Add minimal AGENTS.md #278
CORENET-7581: Bump Kubernetes dependencies to 1.37.1 #273
OCPBUGS-124549: deps: bump google.golang.org/api and google.golang.org/grpc to v1.84.0 #275
OSASINFRA-4400: make openstack allowed address pairs configurable #230
Full changelog

cluster-authentication-operator

NO-JIRA: bump(openshift/library-go): to get retry in preflight check status report #1045
NO-JIRA: Update library-go to run conditional step in KMS #1043
CNTRLPLANE-4787: Make External OIDC proxy handling more robust #1036
NO-JIRA: Fix staticcheck warnings across multiple packages #1025
NO-JIRA: bump(openshift/library-go): to get KMS GA #1041
CNTRLPLANE-4787: Reapply: Add support for External OIDC proxy #1039
NO-JIRA: Update library-go to get KMS changes #1040
TRT-3040: Revert #1001 “CNTRLPLANE-4787: Add support for External OIDC proxy” #1038
CNTRLPLANE-4787: Add support for External OIDC proxy #1001
CNTRLPLANE-4519: External OIDC lib go generator #1018
NO-JIRA: Update library-go #1032
CNTRLPLANE-4731: Add KMSPreflightCycle e2e #1031
NO-JIRA: Update library-go #1028
NO-JIRA: bugfix: external-oidc: omit client-credential TLS generated config when empty #971
NO-JIRA: Update library-go #1027
CNTRLPLANE-4719: deps: Rebase to 1.37 and update other deps #1024
NO-JIRA: bump openshift/api https://github.com/openshift/api/pull/3083 #1022
NO-JIRA: bump library-go https://github.com/openshift/library-go/pull/2518 #1020
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2512 #1016
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2474 #1014
CNTRLPLANE-3237: encryption/assertion: bring back the preflight assertion for CAO and OAS-O #1011
CNTRLPLANE-4402: implement new External OIDC architecture under ExternalOIDCAsWebhook feature gate #1002
OCPBUGS-122888: Add high contrast support to oauth templates #999
CNTRLPLANE-3237: bump library-go to get the new KMS plugin deployment strategy #1004
OCPBUGS-107949: fix CVE-2026-41178 by updating otel to v1.44.0 #978
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2478 #1006
OPRUN-4768: bump openshift/api #1005
Full changelog

cluster-autoscaler-operator

OCPBUGS-130317: add machinepools to CAPI ClusterRole for autoscaler #406
AUTOSCALE-949: Release chore CAO bump to k8s 1.37 and OCP 5.1 #404
AUTOSCALE-709: implement conditions and authoritative API #402
Full changelog

cluster-baremetal-operator

CNF-22903: Add support for Ironic Networking service #630
METAL-1934: Add support for feature gates #663
OCPBUGS-115068: Validate Provisioning fields passed to containers #653
NO-ISSUE: Add deployment diagrams to README #680
OCPBUGS-127132: Pass WATCH_NAMESPACE to image-customization #666
OCPBUGS-54957: Remove recreate strategy from BMO deployment #640
Full changelog

cluster-bootstrap

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #149
Full changelog

cluster-capi-controllers

TRT-3024: UPSTREAM: <drop>: Revert “Rebase OpenShift Cluster API onto upstream v1.14.3” #318
OCPCLOUD-3686: Rebase OpenShift Cluster API onto upstream v1.14.3 #308
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #309
NO-JIRA: UPSTREAM: <carry>: remove redundant GitHub summary verification #313
NO-JIRA: UPSTREAM: <drop>: update manifests-gen #312
OCPCLOUD-1501: allow CAPI manager to patch Nodes #311
OCPCLOUD-1501: add OpenShift CAPI manager local cluster RBAC #310
Full changelog

cluster-capi-operator

OCPBUGS-135094: Increase installer unit-test cleanup timeout #705
OCPCLOUD-3725: refactor: gate legacy tombstones on ClusterAPIOperator #704
OCPCLOUD-3726: Add scaffolding for Upgradeable controller #703
OCPBUGS-135028: fix: grant installer watch access to cluster configuration #702
OCPCLOUD-3725: refactor: operator manifests to follow the ClusterAPIOperator feature gate #701
OCPBUGS-133479: Run unmanaged CRD handoff as one extension test #700
OCPCLOUD-3545: Consume CompatibilityRequirement v1 #694
OCPBUGS-133479: fix(e2e): remove CRD compatibility gate from handoff test #699
OCPCLOUD-3725: test: separate Cluster API operator health checks from machine management #698
OCPBUGS-133416: fix(openstack): tolerate multiple external networks when no router exists #697
OCPCLOUD-3725: Support operator no-components mode #696
OCPCLOUD-3704: Enable CRD Compatibility Checker e2e tests on External topology #688
OCPCLOUD-3724: Enable proxy injection for capi-controllers #692
OCPCLOUD-3655: bump Kubernetes dependencies to 1.37 #686
OCPCLOUD-3704: Enable CRD Compatibility Checker support on Hosted OpenShift independently of Cluster API #685
OCPCLOUD-3465: feat: implement cluster-wide proxy support #586
OCPCLOUD-3318: Integrate CompatibilityRequirements into the CCAPIO Installer #648
OCPBUGS-98492: Fix orphaned MachineSet sync finalizer cleanup #689
OCPCLOUD-3541: Use feature gates consistently #603
OCPBUGS-127650: openstack: allow to specify UserManaged load balancer #678
OCPBUGS-128384: Extend InfraTemplate reconciliation wait #681
OCPBUGS-123094: Update MongoDB Go driver to v1.17.10 #676
OCPBUGS-128576: add ec2:ModifyInstanceMetadataOptions to AWS CredentialsRequest #682
NO-JIRA: Update actuator testutils builder paths #683
OCPBUGS-128356: Remove unnecessary ClusterOperator test status update #680
OCPBUGS-127467: Pass original TLSProfileSpec to security profile watcher #677
NO-JIRA: use capi 1.13/capv 1.16 imports #675
NO-JIRA: Bump linter to v2.13.2 #674
OCPCLOUD-1501: use projected tokens for management kubeconfig #669
Full changelog

cluster-cloud-controller-manager-operator

SPLAT-2994: resolve AWS region from Infrastructure before environment #529
OCPCLOUD-3673: bump Kubernetes dependencies to 1.37 #523
Full changelog

cluster-config-api

SPLAT-2981: promote AzureMultiDisk to GA #3091
MON-4645: allow __ prefixed labels in sourceLabels #3050
OCPSTRAT-3523: Add OpenStack.maxAllowedAddressPairs to Infrastructure API #3098
OCPBUGS-104847: Remove SELinuxMountGAReadiness feature gate #3122
NO-JIRA: Add example of validating an OpenShift release version #3137
feat: register FeatureGateClusterAPIMachineManagementNutanix #3140
MON-4654: allow query parameters in remote write URLs #3124
OCPBUGS-105408: Remove DualReplica feature gate #3123
OCPCLOUD-3725: feat: gate Cluster API configuration on operator availability #3131
Nutanix: featuregate for MachineAPIMigrationNutanix #3125
OPNET-809: ship the BGPVIPConfig CRD in the payload #3127
METAL-1977: add MetalEnrollmentAPI feature gate #3090
OCPCLOUD-3544: Graduate CompatibilityRequirement API to v1 #2905
CNTRLPLANE-4390: Remove OpenShiftPodSecurityAdmission feature gate from Default feature set. #3035
CNTRLPLANE-4771: Graduate KMSEncryption to GA #3100
STOR-3180: Add Feature Gate StoragePathAlert #3105
OCPNODE-4827: Drop v1apha1 CRIOCredentialProviderConfig entirely #3113
OCPCLOUD-3330: Add ClusterAPIOperator feature gate #3109
OCPKUEUE-887: Enable workload scheduling feature gates for DP/TP (except CompositePodGroup) #3112
TRT-3027: Revert #3102 “OCPKUEUE-887: Enable workload scheduling feature gates for DP/TP” #3107
OCPEDGE-2989: OCPEDGE-2958: Add topologyTransitionStatus to Infrastructure status #3029
CNTRLPLANE-4394: Add foundations for AuthenticationComponentProxyExternalOIDC #3037
OCPKUEUE-887: Enable workload scheduling feature gates for DP/TP #3102
OCPBUGS-130730: Remove topology transition immutability validation #3096
NE-2912: Add HAProxy 3.4 as a selectable non-default version #3067
OPNET-809: machineconfiguration/v1alpha1: add BGPVIPConfig CRD #2972
OCPNODE-4730: Add workload scheduling feature gates #3092
NE-2922: Promote Ingress operator API to v1 #3079
OCPBUGS-123649: enable DRADeviceTaintRules feature gate in TPNU #3072
OCPEDGE-3075: feat: add spec.infrastructureTopology to Infrastructure API #3056
Fix CustomNoUpgrade rendering with omitted overrides #3080
NO-JIRA: change KMS preflight result validation #3083
OCPBUGS-129172: Loosen CAPI skew validations #3077
Support Quay CI payloads and add Kubernetes v1.37.1 envtest tools #3082
CNTRLPLANE-4604: promoting AuthenticationComponentProxy feature gate to Default feature set #3075
STOR-2859: Add APIs for disabling force detach in KCM operator #2668
Rename Console ingress helper type to ConsoleIngress #3070
CORENET-7617: features: Add ovn-kuberntes MACSecurity feature gate #3062
CNTRLPLANE-4518: authentication: add v1alpha1 external OIDC configuration API #3061
MCO-2535: add skew enforcement validations for CAPI MachineManagers #3058
OCPSTRAT-3618: Rebase 1.37 #2945
OCPBUGS-126808: Enable OLMLifecycleAndCompatibility by default in version 5+ #3045
NE-2913: Remove HAProxy 2.8 #3048
CNTRLPLANE-4402: add ExternalOIDCAsWebhook feature gate #3043
OCPEDGE-3079: UnifiedClusterManagedDNSAndLB FeatureGate #3054
OCPBUGS-115007: Remove BootImageSkewEnforcement feature gate from Default API #3031
OCPBUGS-120757: Fix misleading certificate chain docs in TLSConfig #3047
CNTRLPLANE-3237: replace KMS config with pluginConfig reference #3028
HPCASE-362: Promote TLSAdherence feature gate to GA #2883
Full changelog

cluster-config-operator

OCPEDGE-2990: Report supported topology evaluations #522
NO-JIRA: Update Go to 1.26 and OpenShift API dependencies #528
OCPBUGS-130339: Read OpenShift API server replicas from deployment #524
NO-JIRA: chore: Adding some edge folks as OWNERS in the topology controller #508
Full changelog

cluster-control-plane-machine-set-operator

OCPCLOUD-3658: bump Kubernetes dependencies to 1.37 #423
OCPCLOUD-3707: feat(tls): add support for TLS groups/curve preferences #424
OCPBUGS-65497: Add debug-useful ClusterOperator relatedObjects #404
Full changelog

cluster-csi-snapshot-controller-operator

STOR-3068: Bump all libraries #302
OCPBUGS-127462: Unresolved ${TLS_CIPHER_SUITES} for Custom TLS 1.3 profile #298
Full changelog

cluster-dns-operator

NE-2126: Ship tests-ext binary as raw gzip instead of tar.gz #503
NO-JIRA: Add pedjak to OWNERS #490
OCPBUGS-87970: Stop using legacy topology-aware hints for DNS #501
NE-2126: Migrating DNS test cases from QE repo #491
OCPBUGS-53192: Update code reference to use the default branch name ‘main’ #488
Full changelog

cluster-etcd-operator

NO-JIRA: bump k8s 1.37 #1733
NO-JIRA: move TNF scripts to bindata/etcd/tnf with TNF OWNERS #1728
NO-JIRA: Update the tests to skip if OCPFeatureGate:AutomatedEtcdBackup is not enabled #1731
OCPBUGS-100304: write force_new_cluster as a claim timestamp #1721
OCPBUGS-112390: [TNF] lifecycle part 2 - update setup deadlock fix & conditions cleanup #1668
NO-JIRA: Add TNF ownership for docs/tnf #1725
OCPBUGS-123169: add static linter for workload partitioning annotations #1707
OCPBUGS-105240: TNF: wait for etcd-bootstrap member removal before setup #1672
OCPBUGS-84650: force installer revision when external-etcd-pod ConfigMap is created #1705
OCPBUGS-126911: fix(tnf): set read-only root filesystems #1715
Full changelog

cluster-image-registry-operator

CNTRLPLANE-4447: observe tls groups preferences #1379
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #1368
Full changelog

cluster-ingress-operator

OCPBUGS-122924: Default IngressController to Modern TLS #1593
NE-2922: Use the featuregate to add Ingress resource #1651
NE-2922: Migrate operator Ingress consumers to v1 #1618
OCPBUGS-121851: Complete zero-worker HyperShift startup without premature router readiness #1631
NE-2938: Bump Kubernetes to 1.37 #1643
NE-2779: Move Gateway API CRD VAP management from CVO to CIO #1627
NE-2913: Remove HAProxy 2.8 reference #1599
TRT-3032: Revert #1607 “OCPBUGS-121851: Report ingress Available=True on zero-worker HyperShift startup” #1630
NE-2901: Document commit conventions in AGENTS.md #1582
OCPBUGS-128105: Allow disabling endpoint address validation #1608
OCPBUGS-118434: Remove obsolete workaround that hardcodes spec.replicas #1581
OCPBUGS-121851: Report ingress Available=True on zero-worker HyperShift startup #1607
TRT-3022: Revert #1556 “NE-2126: Migrating Ingress operator test cases from QE repo” #1623
OCPBUGS-129612: Rebuild fake DNS provider when DNS zones are added #1614
NE-2126: Migrating Ingress operator test cases from QE repo #1556
OCPBUGS-129664: Bump to ossm 3.4.3 and Istio 1.30.5 #1606
OCPBUGS-126999: Support ambient AWS credentials in tests #1602
NE-2922: Remove duplicate operator Ingress CRD from CIO payload #1613
NE-2879: Update GitHub issue template URLs #1578
OCPBUGS-105442: improve Sail RBAC verification diagnostics #1601
NE-2834: Replace deprecated math/rand.Read in e2e test #1533
OCPBUGS-115108: derive ingress Degraded grace #1583
OCPBUGS-125752: discover AWS subnets from CAPI with MAPI fallback #1592
OCPBUGS-128253: Wait for AWS NLB SG baseline #1604
OCPBUGS-53193: Update code references to use the default branch name ‘main’ #1591
NE-2570: Simplify TLS profile validation #1594
Full changelog

cluster-kube-apiserver-operator

NO-JIRA: bump(openshift/library-go): to get retry in preflight check status report #2368
CNTRLPLANE-4845: Migrate sno disruptive and encryption rotation e2e to ote #2365
OCPBUGS-133759: Raise kube-apiserver operator memory request #2366
NO-JIRA: Update library-go to run conditional step in KMS #2367
NO-JIRA: bump(openshift/library-go): to get KMS GA #2364
NO-JIRA: Update library-go #2362
OCPBUGS-60496: Use BoundServceAccountTokenVolume dy default #1896
NO-JIRA: Update library-go #2354
CNTRLPLANE-4731: Add KMSPreflightCycle e2e #2348
OCPKUEUE-887: Enable workload API versions for feature gates #2332
NO-JIRA: Update library-go #2349
NO-JIRA: Update library-go #2347
TRT-3013: Revert “Use 300s shutdown delay on AWS” #2346
NO-JIRA: bump openshift/api https://github.com/openshift/api/pull/3083 #2339
OCPBUGS-86789: Extend AWS shutdown delay to 300s #2267
CNTRLPLANE-4408: Support the ExternalOIDCAsWebhook feature gate #2325
NO-JIRA: bump library-go https://github.com/openshift/library-go/pull/2518 #2337
CNTRLPLANE-3237: update deprecated API usage alerts for kube 1.37 #2334
OCPSTRAT-3618: Bump to golang-1.26-openshift-5.1 image #2268
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2474 #2327
CNTRLPLANE-3237: encryption/assertion: bring back the preflight assertion for CAO and OAS-O #2320
CNTRLPLANE-4303: Remove old go standard e2e encryption cases #2322
CNTRLPLANE-4303: Migrate e2e-encryption to ote #2290
CNTRLPLANE-3237: bump library-go to get the new KMS plugin deployment strategy #2315
OCPBUGS-112638: apienablement: enable resource.k8s.io/v1beta2 when DeviceTaintRule is enabled #2275
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2478 #2313
Full changelog

cluster-kube-controller-manager-operator

CNTRLPLANE-4441: feat: inject tls groups #974
STOR-2875: wire volumeForceDetach config observer for KCM #975
OCPSTRAT-3618: Rebase 1.37 #953
Full changelog

cluster-kube-scheduler-operator

OCPSTRAT-3618: Rebase 1.37 #660
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #183
Full changelog

cluster-machine-approver

OCPBUGS-57437: Always permit asking node name in CSR SANs #344
OCPCLOUD-3659: bump Kubernetes dependencies to 1.37 #340
NO-JIRA: Add OTE #341
NO-JIRA: feat(tls): add support for TLS groups/curve preferences #308
OCPBUGS-99489: Add NetworkPolicy manifests to openshift-cluster-machine-approver namespace #313
OCPBUGS-121194: fix: retry serving CSRs while Machine addresses populate #321
Full changelog

cluster-monitoring-operator

MON-4699: allow-list Trainer usage metrics #3170
MON-4653: verify empty remote write source labels serialization and merge #3165
MON-4658: verify integer batch send deadline conversion #3163
MON-4654: verify remote write URL query parameters survive conversion #3166
MON-4659: verify integer remote write backoff conversion #3164
MON-4657: verify integer remote write timeout conversion #3162
MON-4660: verify integer metadata send interval conversion #3152
OU-1306: add monitoring-plugin backend proxy for all non-GET requests #3159
OCPBUGS-132863: remove Prometheus config reloader rules #3169
NO-JIRA: [bot] Synchronize versions of the downstream components #3167
NO-JIRA: [bot] Update jsonnet dependencies #3168
MON-4655: append byte unit to enforced body size limit #3145
NO-JIRA: chore: restrict NetworkPolicy ingress rules for thanos ruler and thanos sidecars on prometheus pods #2926
NO-JIRA: [bot] Synchronize versions of the downstream components #3153
OCPBUGS-35391: separate infra memory capacity from workers #3132
OCPBUGS-99988: amcfg: remove client-side TLS enforcement for additional alertmanager configs #3012
NO-JIRA: configure custom features for monitoring-plugin #3149
OCPBUGS-128640: filter ciphers not supported by Thanos #3134
OCPBUGS-11267, OCPBUGS-123539: tidy up RBAC permissions on secrets and configmaps for Prometheus operators #3053
ART-22049: remove references to configmap-reloader image #3051
NO-JIRA: [bot] Synchronize versions of the downstream components #3118
NO-ISSUE: [bot] Update jsonnet dependencies #3117
OCPBUGS-125779: don’t delete admin-owned Alertmanager secrets on destroy #3133
NO-JIRA: [bot] Synchronize versions of the downstream components #3105
MON-4696: Bump prometheus-operator dependencies to v0.94.1 #3102
OCPBUGS-126689: fix(e2e): use Job with backoffLimit for TestDocExamples #3094
OCPBUGS-123794: Fix flaky TestTelemetryReport/rate_issues #3093
NO-JIRA: [bot] Synchronize versions of the downstream components #3097
Full changelog

cluster-network-operator

CORENET-7707: Update AdminPolicyBasedExternalRoute CRD to be consistent with upstream #3210
CORENET-6512: [CNO] Setup OTE framework and migrate test cases from tests-private #3015
CNV-97772: ovn-kubernetes, Gate MAC security schemas for Tech Preview #3179
OCPBUGS-123662: Provide clarity on status of NOO installation #3166
OPNET-819: frr-k8s: master-monitor follows platform pod conventions #3202
CORENET-7580: Bump Kubernetes to 1.37.1 #3183
CORENET-6320: fix(workloads): enforce read-only root filesystems #3170
OPNET-783: statusmanager: Treat zero-node DaemonSets as rolled out #3046
NO-ISSUE: Align frr-k8s 5.1 CRDs #3195
OPNET-783: network: Add BGP VIP management support #3047
OCPBUGS-130570: Added global overrides for OVN-Kubernetes #2851
OCPBUGS-123509: multus: Refresh ignored namespaces on namespace changes #3167
CORENET-7399: Expand golangci-lint configuration with comprehensive linter set #3164
OCPBUGS-127174: Fix issues when NetObserv fails to install #3171
Full changelog

cluster-node-tuning-operator

CNF-28347: Makefile: fix ARM e2e target and Hypershift ginkgo args #1675
NO-JIRA: fix isolatedCpuFreq doc comment to say maximum frequency #1669
NO-JIRA: Restrict metrics and webhook ingress #1670
NO-JIRA: tuned: restrict profile names #1661
OSDOCS-22738: Fix hexadecimal typos in PerformanceProfile device comments #1640
OCPBUGS-129451: E2E: remove always-skipped IRQ load balance test #1653
OCPBUGS-129613: E2E: Add labels to ovsdpdk tests #1657
NO-JIRA: Update OWNERS file #1655
OCPBUGS-129449: E2E: Fix flaky test_id:64099 reboot assertion #1652
OCPBUGS-115749: Tighten operator RBAC to least privilege #1639
OCPBUGS-66217: PerformanceProfile and Tuned CRDs during bootstrap #1596
OCPBUGS-127113: E2E: Fix no-op Get() assertions in mixedcpus #1571
OCPBUGS-129448: E2E: check against available cpus instead of online cpuset #1645
OCPBUGS-129450: E2E: LLC: Fix assertions of odd cpus allocations #1644
OCPBUGS-129165: Makefile: Modify pao-functests-update-only to run tier-0 and tier-1 tests #1651
OCPBUGS-105474: Prevent offlined CPUs from being re-onlined after reboot by udev hotplug rule #1618
OCPBUGS-126458: E2E: PPC: replace no-op log-on-match with actual assertions (4 sites) #1638
NO-JIRA: Address govulncheck complaints #1637
OCPBUGS-127362: E2E: ovsDpdk remaining cases and consolidate suite #1628
OCPBUGS-116703: E2E: add missing matcher to offlined CPU Expect() calls #1629
Full changelog

cluster-olm-operator

OCPBUGS-132357: Prevent TLS curve restart loop on FIPS clusters #257
OPRUN-4799: Update OpenShift and Kubernetes libraries #260
NO-ISSUE: Remove SingleOwnNamespaceInstallSupport integration #256
NO-ISSUE: Bump github.com/operator-framework/operator-controller from 1.11.0 to 1.12.0 #253
NO-ISSUE: Support object-controller (ClusterObjectSet) component #255
OPRUN-4768: Apply TLS curve preferences to metrics server #248
Full changelog

cluster-openshift-apiserver-operator

NO-JIRA: bump(openshift/library-go): to get retry in preflight check status report #812
CNTRLPLANE-4439: feat: inject tls groups #793
NO-JIRA: Update library-go to run conditional step in KMS #811
NO-JIRA: bump(openshift/library-go): to get KMS GA #810
NO-JIRA: Update library-go #809
NO-JIRA: Update library-go #807
CNTRLPLANE-4731: Adding KMS e2e preflight and e2e rotation #806
NO-JIRA: Update library-go #803
NO-JIRA: Update library-go #802
NO-JIRA: bump openshift/api https://github.com/openshift/api/pull/3083 #798
NO-JIRA: Open bump library-go https://github.com/openshift/library-go/pull/2518 #797
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2512 #794
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2474 #792
CNTRLPLANE-3237: encryption/assertion: bring back the preflight assertion for CAO and OAS-O #787
CNTRLPLANE-3237: bump library-go to get the new KMS plugin deployment strategy #781
OCPBUGS-109468: fix CVE-2026-41178 by updating otel to v1.44.0 #761
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2478 #783
Full changelog

cluster-policy-controller

OCPSTRAT-3618: bump k8s 1.37 #211
Full changelog

cluster-samples-operator

NO-ISSUE: Restrict samples operator access to the global pull-secret #726
CNTRLPLANE-4448: Support for TLS Group Preferences #725
Full changelog

cluster-storage-operator

STOR-3187: Add csi-volume-device-exporter to CSO manifests #762
OCPBUGS-104847: Remove SELinuxMountGAReadiness patches #759
STOR-3172: Add TLS group support to CSO #758
STOR-3176: Add featuregates and clusterversions permissions to ClusterRoles #756
STOR-3068: Bump all libraries #755
OCPBUGS-120762: restrict azure-file secrets ClusterRole to get/list/watch/create #750
OCPBUGS-127462: Unresolved ${TLS_CIPHER_SUITES} for Custom TLS 1.3 profile #748
OCPBUGS-127453: Fix the un-upgradeable message #746
OCPBUGS-127453: Use KCS link in the un-upgradeable message #744
Full changelog

cluster-update-console-plugin

OCPBUGS-128821: Fix analysis timeout stuck in Analyzing state #25
OTA-2140: Add ApprovalPolicy warning banner for non-manual stages #28
OCPBUGS-128825: Re-analyse deletes AgenticRun for fresh cluster data #26
NO-JIRA: Update OWNERS file #27
Full changelog

cluster-version-operator

OTA-2144: Add a curve preference override for metrics #1500
OCPCLOUD-3725: refactor(capability): use ClusterAPIOperator instead of ClusterAPIMachineManagement #1499
NO-JIRA: test/util: wait for the update service to serve before returning #1498
OTA-2144: TLSGroups support on the /metrics endpoint #1495
CNTRLPLANE-4455: Inject observed TLS Groups into annotated ConfigMaps #1484
NO-JIRA: test/cvo: serve accept-risks graph from in-cluster update service #1476
OTA-2130: add execution step, planner skill, and risk data #1475
OCPBUGS-65558: Cancel payload retrieval pod on upgrade clear #1470
OCPBUGS-8252: pkg/cvo: report unresolvable desired releases #1467
OCPBUGS-129378: skip console plugin deployment on OCP < 5.0 #1482
NO-ISSUE: docs/user/tasks-*by-number-and-component.svg: Update to 5.0 #1485
NO-JIRA: pkg/cvo: add architecture label to cluster_version_payload #1480
NO-ISSUE: test/cvo: set needRecover before mutating cluster resources #1477
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #1471
Full changelog

console

CONSOLE-3958: Replace getting started components with MultiContentCard #17444
CONSOLE-5568: update demo plugin tooling config #17453
CONSOLE-5568: clean up eslint config in vscode #17442
OCPBUGS-132777: Remove the redundant detailsPage wrapper #17413
CONSOLE-5527: Split operator catalog into Classic and Next-Gen types #17355
CONSOLE-5570: Allow blob image sources in the default CSP #17437
OCPBUGS-128928: Preserve ~new route when switching projects #17349
OCPBUGS-132338: Preserve revealed Secret values across page rerenders #17412
CONSOLE-5568: migrate to oxlint #17425
CONSOLE-5479: UI and backend for OLMv0-to-OLMv1 migration #17377
OCPBUGS-132933: Isolate polling test plugin mocks #17421
NO-JIRA: migrate to ESM only + migrate to oxfmt #17408
OCPBUGS-132163: Use “Technology Preview” in preview badge labels #17396
CONSOLE-5477: Support TLS group preferences #17371
CONSOLE-5567: Increase size of annotation, label and taint edit modals #17398
OCPBUGS-114708: Remove early “analytics.page()” on Segment init #17178
OCPBUGS-132032: Restore ConfigMap and BuildConfig form view edit actions #17397
CONSOLE-4824: migrate remaining jsx/js to tsx/ts #17391
CONSOLE-5552: Add Bridge CSP mode flag #17369
NO-JIRA: Console plugin SDK package CHANGELOG update #17392
CONSOLE-5065: Migrate off of deprecated TS types #17140
CONSOLE-5065: Hold back on dynamicModulePatternFlyPackages update #17390
OCPBUGS-125794: Show Software Catalog operators for namespace-scoped users #17327
CONSOLE-5564: ConsoleDataView API improvements #17385
OCPBUGS-130732: Add security response headers #17376
CONSOLE-5065: Update dynamicModulePatternFlyPackages and related imports #17379
HELM-863: Show Helm nav tab regardless of HelmChartRepository/ProjectHelmChartRepository instance existence #17338
CONSOLE-5564: Add rearrangable columns to ConsoleDataView #17370
CONSOLE-5549: Add performance profiling for the dashboards page #17346
CONSOLE-5560: table column extension follow ups #17363
CONSOLE-5560: Add ConsoleDataView table column extensions #17351
OCPBUGS-84497: Cap rendered alerts in notification drawer and dashboards #17324
CONSOLE-5544: Migrate OLM tables to ConsoleDataView #17342
CONSOLE-5540: Migrate metal3, container-security, and shipwright tables to ConsoleDataView #17340
CONSOLE-5099: Add kubeconfig download for ServiceAccounts and current user #17199
OCPBUGS-128719: fix incorrect breakpoint in code editor sidebar #17336
CONSOLE-5539: Migrate knative tables to ConsoleDataView #17326
OCPBUGS-128465: Fix flaky namespace selection and eliminate cross-file contention in OLM Data Grid e2e specs #17329
HELM-859: Guard against null/missing urls in Helm charts #17280
OCPBUGS-127046: provide PatternFly dynamic modules without Console consuming them #17318
NO-JIRA: Document the console.page/resource/list contract #17312
OCPBUGS-71193: Group details page renders a kebab button instead of Actions button #17197
NO-JIRA: small improvements and dep bumps #17219
CONSOLE-5113: Add default namespace warnings #17177
And 17 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

TRT-3060: Revert #1158 “CONSOLE-5293: Use console-downloads image instead of cli-artifacts” #1251
CONSOLE-5293: Use console-downloads image instead of cli-artifacts #1158
OCPBUGS-132701: Gate tlsGroups observation on TLSGroupPreferences #1248
CONSOLE-5477: Support TLS group preferences #1240
HELM-850: Address review feedback on Helm CLI download descriptions #1235
RFE-4149: Read only filesystem - temp directory mount #1014
TRT-3005: Revert #1227 “OCPSTRAT-3567: Replace console allow-all NetworkPolicy with scoped policies” #1241
NO-JIRA: Update API and client-go dependencies for Console ingress helper rename #1236
OCPSTRAT-3567: Replace console allow-all NetworkPolicy with scoped policies #1227
OCPBUGS-86719: Use zero-downtime rollout strategy for console pods #1168
CNTRLPLANE-4564: Update to the latest openshift/api and rebase to 1.37 #1237
OCPBUGS-109666: fix the name of the Helm release in EAP 8.1 quickstart #1208
OCPBUGS-121388: Make console status flush cancellation-aware #1228
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #1230
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

CORENET-7231: Update OWNERS file #241
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #248
Full changelog

coredns

NE-2790: Update CoreDNS to v1.14.7 #197
OCPBUGS-125770: validate DNS requests before unpacking #217
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #215
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OSASINFRA-4483: UPSTREAM: <carry>: Initial Dockerfile for osbrick-sidecar #447
UPSTREAM-SYNC: Sync main with latest upstream (release-1.37) #446
Full changelog

csi-external-attacher

STOR-3085: Rebase to upstream v4.13.0 for OCP 5.1 #123
Full changelog

csi-external-provisioner

STOR-3085: Rebase to upstream v6.4.0 for OCP 5.1 #165
Full changelog

csi-external-resizer

STOR-3085: Rebase to upstream v2.3.0 for OCP 5.1 #217
Full changelog

csi-external-snapshot-metadata

STOR-3085: Rebase to upstream v1.1.0 for OCP 5.1 #35
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #27
Full changelog

csi-external-snapshotter, csi-snapshot-controller

STOR-3085: Rebase to upstream v8.7.0 for OCP 5.1 #260
Full changelog

csi-livenessprobe

STOR-3085: Rebase to upstream v2.20.0 for OCP 5.1 #105
Full changelog

csi-node-driver-registrar

STOR-3085: Rebase to upstream v2.18.0 for OCP 5.1 #110
Full changelog

docker-builder

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #558
Full changelog

docker-registry

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #487
CNTRLPLANE-4447: add support for configuring TLS groups #488
Full changelog

egress-router-cni

OCPBUGS-55356: Fix invalid IPv6 sysctl key for enabling IP forwarding #112
Full changelog

etcd

CNTRLPLANE-4423: Add –curve-preferences to configure TLS curves #420
NO-JIRA: allow 60s for snapshot member readiness #424
NO-JIRA: allow 180s for retained client reconnect #423
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #415
Full changelog

gcp-cloud-controller-manager

Revert “OCPCLOUD-3677: Merge https://github.com/kubernetes/cloud-provider-gcp/tree/master (05550ad) into main” #175
OCPBUGS-122200, OCPCLOUD-3677: Merge https://github.com/kubernetes/cloud-provider-gcp/tree/master (05550ad) into main #133
Full changelog

gcp-cluster-api-controllers

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #314
Full changelog

gcp-machine-controllers

OCPCLOUD-3662: bump Kubernetes dependencies to 1.37 #197
OCPBUGS-90560: resolve boot disk image at reconcile time #181
Full changelog

gcp-pd-csi-driver

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #131
Full changelog

haproxy-router, haproxy-router-haproxy32

NO-JIRA: Add pedjak to OWNERS #847
OCPBUGS-84250: Add debug logging when dynamic update fails #836
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-104847: Revert “UPSTREAM: <carry>: Store SELinuxWarningController upgrade check as a ConfigMap #2827
OCPBUGS-129682: Repair SingleReplica test exclusions #2815
UPSTREAM: <carry>: OCPBUGS-128829: Handle k8s-tests-ext IP family probe failures #2806
OCPBUGS-130922: UPSTREAM: <carry>: Fix vSphere topology test exclusions #2816
STOR-3083: Fix disabled tests for newer test names #2822
OCPBUGS-112749: Deflake pod resize deferred tests #2765
OCPBUGS-129642: UPSTREAM: <carry>: bump cadvisor for statseq fix #2819
OCPSTRAT-3618: Daemonset test has changed names -> needs corrected env selector #2813
: OCPBUGS-123651: UPSTREAM: <carry>: Add needed labels to RHEL pause image #2809
OCPSTRAT-3618: Rebase 1.37 #2738
OCPBUGS-127540: UPSTREAM: 142168: Refuse UNC symlink targets in Windows subPath resolution #2793
NOJIRA: add explicit merge commit message #2788
OCPBUGS-123651: UPSTREAM: <carry>: Use FROM scratch for RHEL pause image #2774
Full changelog

hypershift

CNTRLPLANE-4576: Validate serviceAnnotations allowlist and size bounds #10142
CNTRLPLANE-4577: CPO passthrough of serviceAnnotations and loadBalancerClass to KAS Service #10133
OCPBUGS-129115: Validate external KubeVirt infrastructure kubeconfigs #9903
CNTRLPLANE-4817: Bump Azure CAPI provider (CAPZ) to v1.27.0 #10078
OCPBUGS-129436: Fix manual HA etcd snapshot recovery documentation #10150
CNTRLPLANE-4850: Bump core Cluster API to v1.14.3 #10143
NO-JIRA: ci(deps): bump astral-sh/setup-uv from 10.1.0 to 10.3.2 #10163
NO-JIRA: docs: direct contributors to #forum-ocp-hypershift #10153
GCP-1240: Add GCP Resource Manager tag API #9735
CNTRLPLANE-4447: Adds support for preferred TLS Groups #10148
OCPBUGS-109628: treat unstarted etcd member as unhealthy instead of aborting recovery #10035
CNTRLPLANE-4826: Stop gating NodePool rollout completion on upToDateReplicas #10084
CNTRLPLANE-4832: cover managed ingress DNS zone deletion #10100
NO-JIRA: chore(deps): update actions/download-artifact action to v8.0.2 (main) #9968
GCP-1315: test(e2e/v2): add GCP multi-cluster lifecycle platform config #9977
CNTRLPLANE-4513: chore(aws): stop writing and prune deprecated aws-load-balancer-subnets annotation #9807
CNTRLPLANE-4732: route kubelet through HAProxy on all public HCPs #9988
CNTRLPLANE-3928: e2e: verify workload pulls through the image mirror #10075
NO-JIRA: fix: remove CustomNoUpgrade HyperShift CRDs during API generation #10136
NO-JIRA: Fix parallel CAPI verification race #10073
CNTRLPLANE-4486: Enforce unit test function structure in hypershiftlinter #9738
NE-2816: update haproxy image #10065
CNTRLPLANE-4816: Bump AWS CAPI provider to v2.13.1 #10064
OCPBUGS-99759: Publish compatible scale-from-zero capacity annotations #10062
OCPBUGS-29551: Document NodePool upgrade defaults in hcp help #10014
AUTOSCALE-1044: detect multi-arch support for Karpenter ARM64 provisioning #10116
OCPBUGS-129580: wait for 0 nodes before subnet configmap cleanup in TestKarpenter #10117
OCPBUGS-59842: Bound etcd defragment RPCs and stop timed-out cycles #10113
CONSOLE-5449: Preserve component route labels in HostedCluster and HostedControlPlane CRDs #9815
OCPBUGS-127549: gate ARO HCP router on backend service ClusterIPs being assigned #9775
OCPBUGS-133784: ensure verify-ci runs lint #10126
OCPBUGS-133387: Sync OSImageStream e2eutilallowlist scopes #10124
OCPBUGS-131937: Fix TLS downgrade restart waits for unsupported operators #10108
CNTRLPLANE-4557: Make restructure-commits model-neutral and enforce component boundaries #9853
NO-JIRA: chore(deps): update module go.mongodb.org/mongo-driver to v1.17.10 (main) #10055
OCPBUGS-100035: Add periodic resync and reduce backoff ceiling for HCCO resources controller #10013
OCPBUGS-129497: Align shared root and API dependencies #9940
NO-JIRA: Update e2e v2 AGENTS.md #10115
NO-JIRA: Deny use of v1 e2e package code in new v2 e2e code #10112
CNTRLPLANE-4843: Update common Konflux task bundles and artifact wiring #10120
CNTRLPLANE-4447: enable TLSGroupPreferences on TechPreviewNoUpgrade #10094
GCP-1220: Reconcile GCP LoadBalancer Service resource-label annotations in HCCO #9644
CNTRLPLANE-4576: Add loadBalancerClass and serviceAnnotations API fields #9913
CNTRLPLANE-4807: Add KubeletHAProxyRouting FeatureGate #10043
CNTRLPLANE-4601: Add a GitHub Actions deadcode gate #10110
CNTRLPLANE-3927: add e2e v2 test for imageContentSources propagation to IDMS and ignition #10029
OCPBUGS-133387: fix(e2e) wait for NodePool version in cross-major OSImageStream specs #10107
OCPBUGS-131838: pass allocated UID to standalone karpenter-operator #10024
CNTRLPLANE-4600: Add reporting-only deadcode command and reports #9902
CNTRLPLANE-4817: Resolve CAPI packages with go list in the provider sync #10083
OCPBUGS-132920: sync CAPK install CRDs with openshift CAPK release-5.1 #10082
NO-JIRA: fix(e2e): skip managed DNS e2e below 5.1 #10063
NO-JIRA: bump google.golang.org/grpc to 1.83.2 in tools #10095
CNTRLPLANE-3632: Predictable NodePool rollout control #9818
OCPBUGS-84499: Etcd recovery on unreachable nodes #9992
NO-JIRA: chore: fixup karpenter reviewers and approvers in OWNERS #10023
NO-JIRA: Fix kube-storage-version-migrator removal assertion #10097
CNTRLPLANE-2042: test(e2e): add cross-cluster backup restore coverage for AWS #9979
NO-JIRA: ci(deps): bump actions/create-github-app-token from 1.12.0 to 3.3.0 #10087
OCPBUGS-132561: Fix Azure role-assignment cleanup in CI #10061
CNTRLPLANE-4662: docs(aws): add managed DNS how-to #9943
OCPBUGS-132796: Filter nonstandard AZ subnets from AWS endpoints #10080
OCPCLOUD-3704: enable CRD compatibility requirements for preview clusters #9871
OCPBUGS-130965: CVO upgrades stuck in Upgradeable=False (ResourceDeletesInProgress) #10037
NO-JIRA: build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.44.0 to 1.45.0 #9661
GCP-1221: Manage GCP worker firewall rules in CPO #9640
CNTRLPLANE-4193: feat: add initialKMSKeyARN for StorageClass KMS encryption #9147
AUTOSCALE-944: fix(karpenter): defer HCP lifecycle to standalone operator #9930
CNTRLPLANE-3999: Replace e2e v2 Platform.DeleteArgs with declarative ClusterSpec #10033
NO-JIRA: build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.37.0 to 1.45.0 in /hack/tools #9656
OCPBUGS-86668: fix CA rotation race in ReconcileTotalClientCA #8618
GCP-1211: Set PSC and load balancer resource labels #9612
OCPBUGS-85079: Fix global pull-secret label sync on HO upgrade #8650
OCPBUGS-128637: preserve role credentials for shared service accounts #9828
NO-JIRA: chore(deps): update cloudflare/wrangler-action action to v4.1.3 (main) #9907
CNTRLPLANE-3610: Decouple CAPI provider Go module dependencies #8704
CNTRLPLANE-4559: Add OpenShift Kubernetes 1.37.1 envtest coverage #10039
OCPKUEUE-921: feat: enable was in hypershift #10034
CNTRLPLANE-4642: Capture Azure E2E diagnostics #9915
NO-JIRA: chore(deps): update actions/upload-artifact action to v7.0.2 (main) #9969
AUTOSCALE-1068: docs for AutoNode/Karpenter on self-managed azure #10009
CNTRLPLANE-4167: test: port scale-from-zero autoscaling test to v2 framework #9411
ci: sync release branches to community fork #8220
OCPBUGS-74083: encryption condition propagation #10008
OCPBUGS-131937: test(e2e-v2): skip control-plane-pki-operator TLS config tests on older operators #10032
NE-2913: remove HAProxy 2.8 reference #9984
CNTRLPLANE-3999: remove Platform.CreateArgs to make ClusterSpecs more declarative #10005
OCPBUGS-123171: docs(capi-image-overrides): Add new override for versions below 4.19 #9942
CNTRLPLANE-4160, CNTRLPLANE-4161: use newer CPO for azure 4.²⁰⁄₄.21 overrides #9967
NO-JIRA: Document proportionate pre-PR validation #10015
NO-JIRA: clarify NodePool status.osImageStream vs MCO OSImageStream status #10019
CNTRLPLANE-3201: test(backup-restore): wait for manual backup before scheduling #9961
AUTOSCALE-1057: rename standalone karpenter-operator deployment env var #9954
NO-JIRA: Add Dan Mace to core-approvers #9994
OCPBUGS-126895: preserve AWS API error details on AWSEndpointService reconcile #9707
OCPSTRAT-3686: Set creationTimestamp in the operator image-references file #9878
OCPBUGS-129594: Fix IPv6 endpoint authorities in CPO #9982
CNTRLPLANE-4711: feat(azure): add opt-in IP forwarding for NodePools #9966
NO-JIRA: test(e2e): refactor Karpenter v2 test helpers and harden upgrade test #9662
OCPSTRAT-3686: Zero pad the commit distance in derived nightly tags #9980
CNTRLPLANE-4538: correct August report blog attribution #9931
CNTRLPLANE-4102: chore(contrib): remove aws-leaked-resources #9963
OCPBUGS-129581: Preserve supplied Unmanaged etcd credentials #9941
OCPBUGS-114415: intermittent timeouts in TestDialDirectWithProxy #9960
TRT-3008: revert(ingressoperator): restore HAProxy 2.8 wiring #9976
OCPBUGS-129420: Propagate configured NodePool labels and taints with native capacity #9919
OCPBUGS-49661: fix(cpo): report real ValidAWSKMSConfig condition #9953
OCPCLOUD-3708: feat(machine-approver): plumb TLS curve preferences #9743
CNTRLPLANE-3646: enable all platform agnostic and specific e2e v2 tests for AWS #9701
GCP-504: NodePool Platform Conditions #8917
CNTRLPLANE-4575: add DeterministicLBIP feature gate #9898
NE-2913: Remove HAProxy 2.8 reference #9703
OCPBUGS-129006: Converge Azure private DNS network links safely #9896
NO-JIRA: ci(deps): bump actions/actions-runner from 2.337.0 to 2.338.0 #9956
NO-JIRA: Require GCP workload identity mutation on 5.1 and later #9936
NO-JIRA: build(deps): bump the azure-github-dependencies group across 1 directory with 3 updates #9777
OCPBUGS-129491: ensure e2e v1 AWS OIDC providers are tagged with e2e metadata #9933
NO-JIRA: chore(owners): add CI operator config owners #9938
CNTRLPLANE-4480: feat(api): promote HCPUserFacingOperatorLogs feature gate to Default #9724
AUTOSCALE-1008: feat(karpenter-operator): monitor operand rollout status for version tracking #9654
AUTOSCALE-995: implement cpu options #9623
CNTRLPLANE-4600: remove all reported deadcode candidates #9904
CNTRLPLANE-4565: Promote ingress and Azure private OAuth v2 tests to blocking #9918
AUTOSCALE-947: fix(karpenter): defer EC2NodeClass reconcile to standalone operator #9746
OCPBUGS-104597: fix(etcdbackup): correctly classify Azure client-secret credentials from Velero BSL secrets #9321
CNTRLPLANE-4565: Remove duplicated v1 AWS E2E checks #9881
CNTRLPLANE-4337: Extract cluster-foundation ownership with characterization #9905
NO-JIRA: strip DWARF info from linter plugins to fix macOS dyld crash #9909
OCPBUGS-112277: Skip PodDisruptionBudgets for SingleReplica control planes #9394
OCPBUGS-128613: validate Azure HostedCluster subnet ID #9825
OCPBUGS-127429: Enable DeviceTaintRule API for hosted clusters #9518
CNTRLPLANE-550: Refactor HyperShift CLI for cross-platform consistency and testability #9570
GCP-967: Add GCP workload identity webhook support #9549
CNTRLPLANE-4558: Update Dockerfile and Containerfile images for Kubernetes 1.37 #9873
OCPBUGS-126889: preserve wrapped Azure credential reconcile errors #9704
OCPBUGS-129003: Refresh performance-profile conditions at the same generation #9891
MULTIARCH-5567: Added support to create multi-arch (s390x & x86) NodePools with KubeVirt platform on heterogeneous management clusters #9586
OCPBUGS-128975: Count only successful upsert updates #9872
OCPBUGS-109196: fix(nodepool): validate KubeVirt additionalNetworks NAD namespace #9299
NO-JIRA: docs: fix stale N-2 version skew references to N-3 #8999
AUTOSCALE-977: feat(karpenter): defer default NodeClass to standalone operator #9695
CNTRLPLANE-4562: add kubeClientQPS and kubeClientBurst to ClusterAutoscaling #9857
CNTRLPLANE-4548: fix: move combined-pull-secret creation to top-level CPO #9844
CNTRLPLANE-4553: Remove duplicate release trigger and draft mode #9880
CNTRLPLANE-4553: Compact yq JSON output for GITHUB_OUTPUT in tag workflow #9879
CNTRLPLANE-4553: Add workflows permission and manual trigger for tag creation #9877
CNTRLPLANE-4552: request HO v0.1.86 tag #9848
CNTRLPLANE-4553: use runner.temp and detect arch for release workflow tool installs #9851
CNTRLPLANE-4335: Extract RBAC reconciliation into dedicated module #9726
CNTRLPLANE-3890: Add product-cli unit tests for HCP create cluster #9591
CNTRLPLANE-4550: improve HO hotfix documentation and fix template #9845
OCPSTRAT-3686: Emit release-manifests/image-references from the operator build #9854
CNTRLPLANE-4556: Bump Kubernetes dependencies to 1.37 #9568
OCPBUGS-77307: Generate KubeVirt nmstate network config conditionally #9381
CNTRLPLANE-4553: install release workflow binaries to user-writable path #9849
CNTRLPLANE-4465: group MintMaker Go dependency updates by module #9715
CNTRLPLANE-4379: add release automation workflows for PR-based tagging #9566
CNTRLPLANE-3341: Extract support/imageregistry package from support/util #9832
CNTRLPLANE-3901: Add product-cli unit tests for IAM-Infra (Azure) #9180
CCO-848: feat(cloud_credential_operator): inject centralized TLS configuration #9409
OCPBUGS-109641: fix slice bounds out of range panic in getAvailableCandidates #9309
CNTRLPLANE-4090: deduplicate internal constants by migrating consumers to shared packages #9804
ACM-38185: chore(owners): add ACM HyperShift owners for product-cli #9082
CNTRLPLANE-4538: add August 2026 progress report #9839
NO-JIRA: nodepool: log when user-data/token Secrets are deleted #9819
OCPSTRAT-3686: Use git tag for hypershift nightly tag pipeline #9826
NO-JIRA: chore(deps): refresh rpm lockfiles (main) [SECURITY] #9667
OCPBUGS-127651: fix(operator): prevent deadlock when CRD conversion webhook caBundle is missing #9782
NO-JIRA: Remove Claude-powered PR comment workflows #9830
OCPBUGS-99659: reconcile NetworkPolicies for KubeVirt HCP router mode #9619
CNTRLPLANE-3902: Add product-cli unit tests for kubeconfig #9217
GCP-1148: Make zone required for cluster and nodepool creation #9708
CNTRLPLANE-3900: Add shared cmd/ unit tests for destroy cluster #9166
CNTRLPLANE-1053: Validate KAS reachability via SVC URL in KubeAPIDNSName e2e test #9355
NO-JIRA: build(deps): bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0 #9776
CNTRLPLANE-3344: Extract support/reconcilerpolicy package from support/util #9734
OCPBUGS-98099: test(e2e): isolate legacy Karpenter upgrade workload #9806
CNTRLPLANE-4497: add azure-orphaned-role-assignments tool #9745
OCPBUGS-128500: Gate custom ingress strategy E2E coverage to 4.21+ #9814
OCPSTRAT-3686: import nightly release tags #9809
OCPBUGS-114937: Add readiness probe to kube-scheduler control plane deployment #9789
OCPBUGS-128466: reconcile aggregated docs #9808
NO-JIRA: chore(owners): refresh owner aliases #9805
ROSAENG-65607: Adjust regex validation to allow sqs-fips url format (for FEDRAMP support) #9737
NO-JIRA: add serena/headroom files/folders to gitignore #9802
OCPBUGS-126613: fix(api): add missing + prefix to kubebuilder annotation on networkType #9646
CNTRLPLANE-3632: Revert #8698: NodePool rollout control #9797
OCPBUGS-127049: fix(globalps): schedule global-pull-secret-syncer on karpenter nodes #9719
CNTRLPLANE-4508: fix(e2e): detect installer flags supported by target image #9792
NO-JIRA: build(deps): bump compatible sigs-k8s dependencies #9778
OCPBUGS-114936: add PodDisruptionBudget for the HyperShift Operator #9526
OCPBUGS-115085: fix: mount combined-pull-secret in OpenShift API Server #9617
OCPBUGS-109640: fix(cmd/dump): filter resources by cluster platform #9639
NO-JIRA: fix(nodepool) data race in TestReconcileSelectorDropsStaleLabels #9772
OCPBUGS-88757: Align HCCO CatalogSource registryPoll interval with OCP defaults #8745
CNTRLPLANE-4460: refactor(test): chain BeforeApply handlers instead of overwriting #9709
NO-JIRA: ci(deps): bump codecov/codecov-action from 7.0.0 to 7.1.0 #9681
NO-JIRA: ci(deps): bump actions/cache from 4.2.3 to 6.1.0 #9338
OCPSTRAT-3686: Update default ociStorage repository #9770
OCPBUGS-127110: Install HO via Job from operator image in e2e upgrade tests #9736
OCPBUGS-127070: Align .ci-operator.yaml build root tag with Dockerfiles #9723
CNTRLPLANE-4374: bug - gate platform CAPI types behind CRD discovery to fix bulk inspect on limited-CRD clusters #9552
OCPBUGS-98066: fix(nodepool): rebuild CAPI selectors deterministically on reconcile #9698
CNTRLPLANE-3632: Predictable NodePool rollout control #8698
CNTRLPLANE-4090: Move HostedControlPlaneNamespace to shared package #9551
SPLAT-2742: remove inlined SetSecurityGroups IAM permission #9717
CNTRLPLANE-4213: decouple konflux pr pipelines #9413
NO-JIRA: test(e2e): check OS streams for OpenShift 5.0 nightlies #9712
CNTRLPLANE-3755: fix(e2e): gate release-specific fields for version compatibility #9564
CNTRLPLANE-2775: Expose KAS availability and latency metrics from CPO #9244
CNTRLPLANE-4092: Move dump.go to its own package to break transitive dependency on sharedingress #9727
OCPBUGS-125907: fix(aws): use unique Route 53 caller references #9647
OCPBUGS-114723: Decouple user CA bundle reconciliation from resources controller #9458
NO-JIRA: chore(owners): add daniel-rejniak to gcp-reviewers #9700
CNTRLPLANE-4304: fix(ci): validate pending commit messages with gitlint #9710
CNTRLPLANE-4395: Make git commit format skill model and harness agnostic #9625
OCPBUGS-123791: CAPI storage version migration exclude IPAM #9642
CNTRLPLANE-4365: Publish hosted control plane sizing guidance #9532
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

ibm-cloud-controller-manager

OCPCLOUD-3678: Merge https://github.com/IBM-Cloud/cloud-provider-ibm:01595b6d497cc6ec6f807bd7136ac43d147ea042 (01595b6) into main #89
Full changelog

ibm-vpc-block-csi-driver

STOR-3075: Rebase to v5.2.32 for OCP 5.1 #175
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #161
Full changelog

ibm-vpc-block-csi-driver-operator

STOR-3176: Support TLS Groups in operators for kube-rbac-proxy sidecar #203
OCPBUGS-98100: disable snapshot tests for ibm-vpc-block-csi-driver #175
STOR-3068: Bump all libraries #198
OCPBUGS-127462: Unresolved ${TLS_CIPHER_SUITES} for Custom TLS 1.3 profile #194
Full changelog

ibmcloud-cluster-api-controllers

UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.15.0 (5704e48) into main #184
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #187
Full changelog

ibmcloud-machine-controllers

OCPCLOUD-3666: bump Kubernetes dependencies to 1.37 #117
Full changelog

insights-operator

OCPBUGS-132789: Gate ingress secret bindings on Ingress capability #1403
CCXDEV-16668: kserve gather servingRuntimes and clusterServingRuntimes CRs #1385
OCPBUGS-132226: add CVO annotations to secret gatherer RBAC #1397
NO-JIRA: Restructure scope of gather SA to specific namespaces (from 5.0) #1392
NO-JIRA: Revert “WIP: how to add gpu node” #1390
CCXDEV-16671: add GPU node topology gatherer #1364
NO-JIRA: add permissions to fetch MaasModelRefs #1388
CCXDEV-16669: gather externalModels #1379
CCXDEV-16670: add MaaSModelRef gatherer #1377
Full changelog

insights-runtime-exporter, insights-runtime-extractor

OCPBUGS-128853: drop privilege before executing fingerprints. #95
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #92
Full changelog

ironic

NO-ISSUE: Update requirements.cachito with latest openshift forks commits #947
METAL-1741: Install oslo.i18n from source #944
METAL-1913: Enable bootc deploy autodetection #911
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #943
NO-ISSUE: Improve Slack notification for existing requirements update PRs #940
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #939
OCPBUGS-130802, OCPBUGS-130834: Bump urllib3 to 2.8.0 #938
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #933
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #931
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #929
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #924
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #923
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #921
METAL-1958: Merge contiguous Dockerfile RUN layers to reduce image size #916
Full changelog

ironic-agent

NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #330
METAL-1741: Install oslo.i18n from source #331
NO-ISSUE: Improve Slack notification for existing requirements update PRs #329
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #322
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #321
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #320
METAL-1958: Remove OKD build deps in the same layer they are installed #318
Full changelog

karpenter-operator

OCPBUGS-133506: satisfy HCP pod requirements #70
AUTOSCALE-1058: Refactor EC2 and Azure NodeClass controllers #65
AUTOSCALE-1062: fix: remove Azure-specific maxPods bounds #66
OCPBUGS-133401: attach HCP pull credentials to operand service account #68
AUTOSCALE-166: improve core karpenter e2es more #67
AUTOSCALE-166: Scope core regression to performance tests #63
OCPBUGS-131838: support karpenter operand UID without scc #61
AUTOSCALE-166: fixup karpenter core e2e script #64
NO-JIRA: chore: allow karpenter operand images to be overriden #58
AUTOSCALE-944: feat: migrate HostedControlPlane lifecycle controller from HyperShift #52
NO-JIRA: docs: clarify explicit test expectations #60
AUTOSCALE-1046: feat: hold Azure NodeClass releases during control plane upgrades #56
AUTOSCALE-166: skip unsupported static capacity regression tests #59
AUTOSCALE-166: constrain regression e2e nodes to amd64 #57
NO-JIRA: add Deployment manifest golden-file testing #53
AUTOSCALE-969: add defaultNodeClass method for azure #54
NO-JIRA: refactor: align controller conventions #55
OCPBUGS-116223: fix: report ClusterOperator status on unsupported platforms #50
AUTOSCALE-1045: feat: add OpenShiftAzureNodeClass API and controller #44
NO-JIRA: update controller and logging guidance in agents.md #51
AUTOSCALE-1057: Implement karpenter operator metric and add test #48
NO-JIRA: fix: require EBS in block device mappings #47
NO-JIRA: fix: align controller logging with controller-runtime guidelines #49
NO-JIRA: chore: enforce consistent import aliases #46
AUTOSCALE-1043: add pod monitor for karpenter and operator #45
NO-JIRA: chore: version local build tool binaries #37
AUTOSCALE-947: feat: migrate EC2NodeClass controller from HyperShift #43
AUTOSCALE-1008: Add label and annotation for MonitorOperandsRolloutStatus tracking #39
AUTOSCALE-977: feat: reconcile default NodeClass #38
AUTOSCALE-856: Add Azure Karpenter provider image reference #41
Full changelog

keepalived-ipfailover

NE-2126: Make the ipfailover extension safe to register in origin #256
NE-2126: Materialize ipfailover testdata lazily into a temp directory #255
NO-JIRA: Enable CentOS Stream 10 OKD package repositories in base image #254
Full changelog

kube-metrics-server

Bump openshift/kubernetes-metrics-server to v0.9.1 #102
NO-JIRA: synchronize OWNERS from cluster-monitoring-operator #80
NO-ISSUE: [bot] Bump openshift/kubernetes-metrics-server to v0.9.0 #72
Full changelog

kube-rbac-proxy

NO-JIRA: Merge upstream v0.23.0 #162
Full changelog

kube-state-metrics

NO-JIRA: synchronize OWNERS from cluster-monitoring-operator #169
Full changelog

kube-storage-version-migrator

OCPBUGS-126583: Bump golang.org/x/net to v0.55.0 to address CVE-2026-33814 #266
NO-JIRA: Bump Go builder and CI images from 1.24 to 1.26 for openshift-5.1 #265
Full changelog

kubevirt-cloud-controller-manager

NO-ISSUE: Fix CVE-2026-33814 - bump golang.org/x/net to sustaining fork v0.50.0-sec.4 #104
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #87
Full changelog

kubevirt-csi-driver

OCPBUGS-114428: Bump Go builder to 1.26 #123
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #119
Full changelog

machine-api-operator

OCPCLOUD-3709: feat(tls): add TLS groups and curve preferences #1571
CNF-26431: Allow ironic-networking JSON-RPC port in NetworkPolicy #1530
OCPBUGS-90560: remove GCP boot disk image defaulting from admission webhook #1525
OCPBUGS-90560: add RBAC for GCP boot image resolution #1560
OCPCLOUD-3660: bump to Kubernetes 1.37 #1570
OCPBUGS-129369: fix race in VAP MachineSet e2e test cleanup #1572
SPLAT-2983: Use Machine API vSphere credentials in e2e tests #1568
OCPBUGS-122165: Reduce vCenter API load in the vSphere machine controller #1552
Full changelog

machine-config-operator

OCPBUGS-135256: update automated scale tests for the oldest supported… #6700
OPNET-811: on-prem: propagate BGP VIP peer changes; disable-connected-check for FRR neighbors #6685
OCPBUGS-132697: correctly wait for the cluster to settle after scale … #6691
OCPBUGS-115127: Replace wildcard permissions with explicit verbs in MachineOSBuilder ClusterRole #6471
MCO-2522: implement capi machinesets in E2E tests #6644
OCPBUGS-126565: OCPBUGS-127024: OCPBUGS-127025: Enable readOnlyRootFilesystem: true for machine-os-builder and create-digest-configmap containers #6640
OCPBUGS-132309: Fix MCN stale current config edge case #6676
OCPNODE-4602: implement {system,container}GomaxprocsBehavior field #6332
OCPBUGS-132754: Handle restrictive policies for layered OS updates #6670
OCPBUGS-126565: OCPBUGS-127021: Enable readOnlyRootFilesystem: true for machine-config-controller container #6573
OPNET-818: on-prem: BGP VIP static pods follow platform pod conventions #6673
MCO-2622: Update MCO dependencies to Kubernetes 1.37 #6661
OPNET-782: on-prem: give the frr-k8s static pod reloader writable /tmp and /var/log/frr #6643
OCPBUGS-132308: stabilize test 66436 - disable weak SSH cipher suites #6666
OCPBUGS-131830: stabilise TestAPIServerCiphers unit test #6659
MCO-2475: Simplified the Irreconcilable Differences test to only fetch Ignition contents #6646
OCPBUGS-130604: test/extended: accept the data/by-lun Azure disk path #6650
OCPBUGS-129377: MCD fails to rollback from OCL to stock RHCOS when extensions are installed #6631
OCPBUGS-129536: Update cleanup for test PolarionID:84219 to wait for node to be removed #6648
OCPBUGS-128286: only enable signed policy when testing signed payloads #6611
OCPBUGS-99751: Verify MOSC existence via API before serving layered image #6352
OCPBUGS-124571: Bump version of google.golang.org/grpc #6633
SPLAT-2996: use component-scoped vSphere credentials for boot image updates #6641
OCPBUGS-126565: OCPBUGS-127020: Enable readOnlyRootFilesystem: true for machine-config-operator container #6568
MCO-2522: Adapt all extended e2e test cases to use ManagedMachine… #6621
OCPBUGS-129112: Skip GCP reconcile for unknown arch #6625
OCPBUGS-85519: Add IRI credentials to the internal registry pull secret #6067
OCPBUGS-128811: Remove reverse (rhel10 to rhel9) OSStreams upgrade tests #6638
OCPBUGS-128535: Revert “OCPBUGS-91746: Remove sandboxed-containers (kata-containers) from extended-priv tests” #6613
MCO-1989: Fix RHEL9-specific MCD Logic for RHEL10/CentOS10 for adaptability #6515
OCPBUGS-121959: Make NIC persistence unconditional instead of version-specific #6516
OCPBUGS-128716: logout vCenter clients after use #6629
AGENT-1454: Enforce APIServer TLS profile on IRI registry #6592
OCPBUGS-128457: Fix layered OS updates on older nodes #6630
OCPBUGS-128676: Boot image controller skips MachineSets that don’t match any failure domain #6606
OPNET-782: Render BGP VIP static pods instead of keepalived #6326
OCPBUGS-128659: Filter cosign signature tags from the IRI release lookup #6604
MCO-2522: Create ManagedMachineSet interface #6602
NO-ISSUE: Initial version of the create MCO test plan skill #6560
OCPBUGS-128535: Revert “OCPBUGS-91746: temporarily remove sandboxed-containers from extensions test” #6596
NO-ISSUE: Fix typo in controller #6595
NO-ISSUE: Increase timeout for ImagePulledFromRegistry=Unknown in non-SNO suites #6598
SPLAT-2376: test/extended: add Azure machine pool disk setup tests #6559
OCPBUGS-105412: Updated openshift/api vendor #6586
OCPBUGS-127481: change markdown linter approach #6591
OCPBUGS-127707: check CAPI manager modes for default skew status #6589
MCO-2572: Consider nodes “Updated” when they have been manually set to an unready state but no update is happening #6536
OCPBUGS-127481: Add markdown linter #6582
OCPBUGS-127022: Enable readOnlyRootFilesystem: true for machine-config-server container #6569
OCPBUGS-74136: Split wait-for-ipsec-connect into two services to avoid ipsec restart #6440
NO-ISSUE: Increase timeout for ImagePulledFromRegistry=Unknown in non-SNO suites #6574
OCPBUGS-86768: Nodes created with 4.13 base images cannot join the cluster #6435
MCO-2536: Update operator to populate CAPI bootimage status #6469
OCPBUGS-126899: Add MCN/PIS/MOSC/MOSB/OSImageStream to relatedObjects #6563
OCPBUGS-86571: templates: pass –dual-stack to nodeip-configuration #6105
OCPBUGS-57177: Degrade the MachineConfigPool on PinnedImageSet degrade #6443
Full changelog

machine-os-images

OKD-465: Update Dockerfile installer base to ocp/5.1 #120
OCPBUGS-126621: Select bundled CoreOS version when COREOS_VERSION is unset #116
Full changelog

metallb-frr

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #138
Full changelog

monitoring-plugin

NO-JIRA: add diagnose-pipeline-failure skill and fix monitoring-dev periodic #1402
CNV-87535: address orphan cleanup review feedback #1398
OU-1428: add persistent column selection and sorting #1396
OU-1429: upgrade openshift sdk version #1395
CNV-87535: k8s: add orphan AlertRelabelConfig GC #1174
NO-JIRA: Fix vulnerable dependencies #1394
NO-JIRA: add playwrite component tests #1392
OU-1593: Upgrade perses #1366
OU-1595: merge logging-view into the monitoring console plugin #1360
OU-1428: add missing alert list page tooltips #1387
OU-1428: alert management list page #1345
OCPBUGS-131104, OCPBUGS-131955, OCPBUGS-131960, OCPBUGS-131970, OCPBUGS-131984, OCPBUGS-132028: Upgrade vulnerable dependencies #1328
OCPBUGS-132207: fix metrics series color squares #1368
OU-1488: sanitize linkified URLs in alert annotations #1374
OU-1428: fix prometheus rules api compatibility by removing omitempty’s #1373
NO-JIRA: watch AlertRelabelConfig resource in openshift-monitoring only #1361
NO-JIRA: Add alerting GET endpoints to OpenAPI #1344
NO-JIRA: fix: provide SA token to console bridge to access remote dashboards from local dev env #1351
NO-JIRA: fix: patch vulnerable dependencies #1318
NO-JIRA: Add alert management API #1339
OU-1392: fix: parse datetime ranges from the specified format rather than browser specific apis #1308
OU-1483: automation - perses rbac stability and group permission for all users #1326
OU-1600: fix: sort agentic runs by created to avoid getting stalled runs related to alerts #1325
OU-1436: refactor to prepare for alert management #1324
OU-1212: Create Observability Services landing page #1289
NO-JIRA: update devspace to sync backend and config changes #1322
NO-JIRA: prevent importing feature files in shared files #1323
OU-1528: Swapping namespaces in Alerts optimized #1305
NO-JIRA: Agent skills consolidated #1298
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #1264
Full changelog

multus-admission-controller

CORENET-6320: fix(deployment): use read-only root filesystems #138
CORENET-7234: Update OWNERS file #118
NO-JIRA: Bump to Ginkgo v2 2.33.0 #142
CORENET-7567: Add TLS curve preferences configuration support #143
Full changelog

multus-cni, multus-cni-microshift

CORENET-7619: DS Merge 10/12/26 #370
Full changelog

multus-route-override-cni

CORENET-7631: Update the minimum Go version #84
CORENET-7631: Bump Kubernetes to 1.37 and Go to 1.26.8 #83
CORENET-7237: Update OWNERS file #70
Full changelog

multus-whereabouts-ipam-cni

CORENET-7230: Update OWNERS file #414
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #430
Full changelog

must-gather

OCPBUGS-122049: gather_ppc: collect per-node ethtool channel data #562
Full changelog

network-metrics-daemon

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #158
Full changelog

network-tools

CORENET-7641, CORENET-7647: Add AGENTS.md and coderabbit config #192
Full changelog

networking-console-plugin

OCPNETUI-138: Add Cypress E2E tests for topology resource details drawer #664
OCPNETUI-18: Add Cypress E2E tests for topology CUDN/UDN nodes #656
OCPNETUI-31: Add Cypress E2E tests for topology NAD nodes #655
OCPNETUI-56: Split hot-cluster-e2e-run.yml into composite actions #581
OCPBUGS-132373: Removed clearing of spec.selector/ports on switch to ExternalName service type #641
OCPNETUI-168: Update Owners file #644
OCPNETUI-115: Topology toolbar view #643
OCPNETUI-114: Add network topology view #561
OCPNETUI-56: Add custom ARC runner image with pre-installed tools #580
OCPNETUI-136: E2E tests for the topology node view #631
maintenance: bump the npm group with 32 updates #635
OCPNETUI-178: migrate to @kubevirt-ui-ext/kubevirt-api #626
OCPNETUI-137: E2E tests for the topology view toolbar #632
OCPNETUI-56: Hot-cluster CI infrastructure and test fixes #522
maintenance: bump the npm group with 33 updates #619
maintenance: bump cypress-io/github-action from 6 to 7 in the github-actions group #608
OCPNETUI-80: Migrate to eslint v9 #488
maintenance: bump the npm group with 20 updates #598
OCPNETUI-140: dependency cleanup #589
OCPNETUI-140: reassign dev and prod dependencies #582
OCPNETUI-56: Add hot-cluster E2E workflows, composite actions, and Dockerfile.ci #497
OCPBUGS-105361: Create UDN modal now supports secondary UDN creation #579
maintenance: bump the npm group with 26 updates #575
OCPBUGS-98590: Added validation to NAD creation pages #553
maintenance: bump the npm group across 1 directory with 17 updates #563
OCPNETUI-140: Align shared modules with Console #546
OCPNETUI-140: Extend dependabot ignore list #545
maintenance: bump the npm group across 1 directory with 201 updates #544
maintenance: bump the npm-security group across 1 directory with 10 updates #521
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #84
OCPBUGS-123772: Bump golang.org/x/net to v0.58.0 to address CVE-2026-33814 #85
Full changelog

nutanix-machine-controllers

OCPCLOUD-3664: bump Kubernetes dependencies to 1.37 #142
Full changelog

oauth-apiserver

CNTRLPLANE-4583: K8s 1.37 rebase #239
Full changelog

oauth-proxy

NO-JIRA: watcher: fix undying goroutine #378
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #377
Full changelog

oauth-server

CNTRLPLANE-4583: K8s 1.37 rebase #290
OCPBUGS-130780: Remove ancient deprecated header #196
OCPBUGS-122888: Add high contrast support to oauth templates #262
Full changelog

olm-catalogd, olm-operator-controller

OPRUN-4826: Update OLMv1 test extension to Kubernetes 1.37 #841
OPRUN-4825: Update default-catalog-consistency to Kubernetes 1.37 #840
OPRUN-4791: Synchronize From Upstream Repositories #838
NO-ISSUE: Synchronize From Upstream Repositories #832
NO-ISSUE: Remove NewOLMOwnSingleNamespace OTE tests #833
OPRUN-4802: Synchronize From Upstream Repositories #836
NO-ISSUE: Synchronize From Upstream Repositories #831
OPRUN-4786, OPRUN-4793: Synchronize From Upstream Repositories #830
NO-ISSUE: Synchronize From Upstream Repositories #829
NO-ISSUE: Synchronize From Upstream Repositories #828
NO-ISSUE: Synchronize From Upstream Repositories #826
NO-ISSUE: Synchronize From Upstream Repositories #823
NO-ISSUE: Pin controller-runtime to v0.24.1 in tests-extension #821
OCPBUGS-97746, OPRUN-4738, OPRUN-4774, OPRUN-4775: Synchronize From Upstream Repositories #819
ocpbugs-115274: fix webhook finalizer flake #798
OCPBUGS-121303, OCPBUGS-121304: Bump go-git to v5.19.2 #810
OPRUN-4723: Synchronize From Upstream Repositories #811
Full changelog

openshift-apiserver

CNTRLPLANE-4583: K8s 1.37 rebase #692
NO-JIRA: route: Use Network Ingress DNS owner aliases #690
OCPBUGS-108032: update otel to 1.44.0 to fix CVE-2026-41178 #684
Full changelog

openshift-controller-manager

CNTRLPLANE-4583: bump(k8s.io): 1.37.1 #462
Full changelog

openshift-state-metrics

NO-JIRA: update OWNERS #140
Full changelog

openstack-cluster-api-controllers

Bump manifests-gen for proxy injection annotation #452
OCPBUGS-131040: Replace golang.org/x/net with openshift-sustaining/net v0.50.0-sec.4 for CVE-2026-33814 [main] #451
UPSTREAM-SYNC: Re-baseline main onto clean upstream merge to unblock rebasebot #446
Full changelog

openstack-machine-api-provider

OSASINFRA-4544: Bump CAPO to 0.15 and adopt CAPO API v1beta2 #193
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #187
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OPRUN-4828: Update OLMv0 test extension to Kubernetes 1.37 #1397
NO-ISSUE: Synchronize From Upstream Repositories #1398
OPRUN-4798: synchronize OLMv0 TLS curves and update package-server manager #1394
OPRUN-4798: Synchronize From Upstream Repositories #1377
OCPBUGS-126127: test: bump test extension gRPC to v1.83.2 #1382
NO-ISSUE: add per-scenario PSA compliance audit #1374
NO-ISSUE: Synchronize From Upstream Repositories #1361
Full changelog

operator-marketplace

NO-ISSUE: Bump github.com/onsi/gomega from 1.43.1 to 1.44.0 #797
NO-ISSUE: Bump github.com/onsi/gomega from 1.43.0 to 1.43.1 #795
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.32.2 to 2.33.0 #796
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

CORENET-6748: OTE: Enable EgressFirewall tests #3433
NO-JIRA: DownStream Merge [10-28-2026] #3581
OCPBUGS-127208: DownStream Merge [10-22-2026] #3572
NO-JIRA: Add arkadeepsen, martinkennelly and pperiyasamy to OWNERS file #3570
CORENET-6746: Enable EgressIP E2E tests on baremetal, AWS, Azure and GCP for OTE #3227
[NO-JIRA: DownStream Merge [10-19-2026] #3561
OCPBUGS-120087, OCPBUGS-123556, OCPBUGS-128278: DownStream Merge [10-14-2026] #3543
OCPBUGS-128662: DownStream Merge [10-08-2026] #3517
NO-JIRA: DownStream Merge [09-28-2026] #3479
CORENET-7596, OCPBUGS-123678: DownStream Merge [09-23-2026] #3473
CORENET-7572: DownStream Merge [09-21-2026] #3465
Full changelog

powervs-block-csi-driver-operator

STOR-3176: Support TLS Groups in operators for kube-rbac-proxy sidecar #130
STOR-3068: Bump all libraries #127
OCPBUGS-127462: Unresolved ${TLS_CIPHER_SUITES} for Custom TLS 1.3 profile #124
Full changelog

powervs-cloud-controller-manager

OCPCLOUD-3723: Merge https://github.com/IBM-Cloud/cloud-provider-ibm:01595b6d497cc6ec6f807bd7136ac43d147ea042 (01595b6) into main #124
No-Jira: Update packages in go.mod #125
No-Jira: Update packages in go.mod #114
Full changelog

powervs-machine-controllers

NO-JIRA: Update OWNERS_ALIASES to modify approvers and reviewers #145
OCPCLOUD-3665: bump Kubernetes dependencies to 1.37 #152
OCPBUGS-127383: Bump x/net and opentelemetry to address CVEs #150
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #147
OCPBUGS-112023: Update dependencies to k8s 1.36 #146
Full changelog

prom-label-proxy

NO-JIRA: synchronize OWNERS from cluster-monitoring-operator #401
Full changelog

prometheus

NO-ISSUE: [bot] Bump openshift/prometheus to v3.15.1 #405
NO-ISSUE: [bot] Bump openshift/prometheus to v3.15.0 #399
NO-JIRA: update OWNERS #379
Full changelog

prometheus-alertmanager

NO-JIRA: synchronize OWNERS from cluster-monitoring-operator #186
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #175
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

NO-ISSUE: [bot] Bump openshift/prometheus-operator to v0.94.2 #423
NO-JIRA: synchronize OWNERS from cluster-monitoring-operator #405
MON-4696: Bump openshift/prometheus-operator to v0.94.1 #403
Full changelog

prometheus-node-exporter

OCPBUGS-129592: Test mountinfo parsing beyond 1 MiB #217
NO-JIRA: Update OWNERS #199
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #189
Full changelog

rhel-coreos, rhel-coreos-10, rhel-coreos-10-extensions

COS-4569: Add off-layering directory for Nvidia builds #1979
OCPBUGS-123732: Re-enable sandboxed-containers extension for 5.0 #1971
NO-JIRA: Update to track 5.1 #1964
Full changelog

rhel-coreos-extensions

OCPBUGS-123732: Re-enable sandboxed-containers extension for 5.0 #1971
NO-JIRA: Update to track 5.1 #1964
Full changelog

telemeter

NO-JIRA: split rule tests by recording rule #630
NO-JIRA: format Telemeter rule expressions #628
NO-ISSUE: tidy up tools/go.mod #617
OCPBUGS-122075: don’t log authorization header #614
NO-JIRA: synchronize OWNERS from cluster-monitoring-operator #622
OCPBUGS-114428: Remove generated Telemeter tools vendor tree #618
Full changelog

tests

NO-ISSUE: Automated - Update synthetic test data #31828
TRT-3011: Wait for OAuth server rollouts in component proxy tests #31779
OCPBUGS-119673, OCPEDGE-2819: Update TNF credential rotation test #31611
OCPCLOUD-3330: Create test/shared module initially containing reusable fake cincinnati server #31804
CORENET-6512: Add CNO test extension binary #31218
OCPBUGS-133466: allow DaemonSet SuccessfulCreate pathological events #31810
AGENT-1654: Add IRI deletion test #31757
NO-JIRA: singleton-placement-collector: collect on single node and two node clusters #31815
TRT-3049: Align NetObserv timeout test with CNO status contract #31814
NO-JIRA: Add ANP/BANP Ready-In-Zone status cleanup e2e #31593
NE-2922: Migrate operator Ingress management-mode tests to v1 #31807
OCPBUGS-82190: Remove etcd preDrain hook strip workaround from node replacement test #31149
CNTRLPLANE-2157: Migrate test cases of KubeAPI server functionality to OTE #31697
NO-JIRA: Improve etcd-scaling job reliability by removing checks that don’t apply to control plane replacement #31797
OCPBUGS-131892: add memory thrashing and CPU saturation intervals #31766
OCPNODE-4674: Split node long-running tests into openshift/nodes/isolated #31586
OCPSTRAT-3618: Rebase 1.37 #31721
OCPSTRAT-3661: Add additional rbac escalation monitortest exceptions #31802
NO-ISSUE: Automated - Update synthetic test data #31799
OCPBUGS-130621: Isolate LDAP group sync test resources #31730
OCPBUGS-132757: Further optimize oc must gather tests to improve efficiency #31282
NO-JIRA: Fix CPU partitioning test isolation #31777
NO-JIRA: add host-network-connection-integrity monitor test #31785
NO-JIRA: cli: accept both error: invalid/Invalid image name casing in oc run tests #31791
OCPBUGS-123644: Allow etcd probe error due to tls config change #31789
OCPBUGS-130780: stop expecting OAuth X-XSS-Protection header #31788
OCPBUGS-126709: Allow VirtPlatformDependencyMissing alert #31787
OCPBUGS-131892: add singleton-placement-collector monitor test #31768
NO-JIRA: Support reusable devcontainer setup and optional OpenCode #31775
OCPEDGE-3027: add TNF metrics e2e coverage #31663
OCPBUGS-132363: Allow prometheus test pods to access NTO metrics port #31781
TRT-3011: Include noProxy login test in OAuth scaling event exception #31780
OCPBUGS-132202: request only supported IP families in kubevirt VM network data #31770
MCO-2626: Remove MCN’s node create and delete test #31771
CNTRLPLANE-3481: (Testing/Functional) Sourcing claims from multiple sources works as expected #31712
NE-2816: Apply HAProxy sidecar on router e2e tests #31589
OCPBUGS-129429: Soften PHC offline assertions #31717
NETOBSERV-2563: skip network observability e2e tests in disconnected env #31767
TRT-3011: Increase AuthenticationComponentProxy scaling event allowance to 70 #31754
NO-JIRA: omit skipped tests from high_cpu_e2e_tests autodl data #31759
TRT-3020: Report audit request violations as flakes #31756
NO-JIRA: Remove exception OCPBUGS-85677 #31734
OCPQUAL-55: remove static.redhat.com disruption monitor #31685
OCPBUGS-129376: Azure dual-stack load balancers should expose public and internal services over IPv4 and IPv6 #31716
OCPNODE-4776: Add Kerberos authentication test plan for OCP 5.1 #31704
NETOBSERV-2563: Add network observability e2e tests #31342
OCPEDGE-2985: Assert PacemakerFencingEvent after real fencing #31703
NE-2913: Update deprecated HAProxy versions in upgrade test #31701
OCPBUGS-130621: Clean up component proxy login resources #31729
OCPBUGS-86789: Revert “Make early request monitor test informing” #31590
OCPBUGS-86789: Move external ip policy test to disruptive-longrunning #31638
NO-ISSUE: Automated - Update synthetic test data #31698
OCPBUGS-123649: allow v1beta2 DRA API in discovery test #31566
OCPBUGS-129615: Allow Prometheus auth test to reach console metrics #31723
NO-JIRA: Document shrink-only retry allowlist policy #31710
OCPBUGS-129175: Handle offline or removed nodes in TNF replacement test #31708
NO-JIRA: Add cluster-machine-approver OTE suite #31706
OCPBUGS-129012: Parallel SSA ClusterOperator test races with sig-arch operator version check #31699
NO-ISSUE: Revert “Add CustomResourcePublishOpenAPI conformance test to retry allowlist” #31694
OCPQUAL-42: Refresh retry allowlist against 5.0 and 5.1 CI data #31551
CNTRLPLANE-3483: Add e2e test Hot reloading changes of the external OIDC configuration #31678
OCPBUGS-122386: e2e-analysis: add –skip-readiness-checks flag for degraded cluster lanes #31635
NO-ISSUE: Automated - Update synthetic test data #31682
OCPSTRAT-3618: Mirror glibc-dns-testing 2.0.0 for the k8s 1.37 rebase(revert in rebase PR) #31683
INTEROP-9204: Add –extension-local-binaries flag for local extension binary loading #31652
trt-2972: use matcher details #31676
OCPBUGS-128397: Skip router verbosity rollout for degraded TNF tests #31680
OPCT-460: Increase timeout for external IP policy test to accommodate in-cluster rollouts #31636
NO-JIRA: Up threshold for mass dns disruption to fail a test based on real world observations #31674
CNTRLPLANE-3851: Oauth server proxy config e2e #31463
CNTRLPLANE-3474: Add tests for external claims source featuregate #31591
OCPBUGS-127184: Redact OAuth tokens from test cleanup logs #31640
STOR-3090: Add CSI storage test for pod delete after host umount of mounted volume #31488
OCPBUGS-111056: Make operator log scraper and monitor tests topology-aware #31597
CNTRLPLANE-4303: Add threshold for ote encryption cases #31658
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

thanos

NO-JIRA: [bot] Bump openshift/thanos to v0.42.5 #233
OCPBUGS-129064: Bump github.com/klauspost/compress to fix CVE-2026-63209 #227
NO-JIRA: synchronize OWNERS from cluster-monitoring-operator #215
Bump openshift/thanos to v0.42.4 #203
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #206
Full changelog

volume-data-source-validator

STOR-3071: Rebase to v1.8.0 for OCP 5.1 #22
NO-JIRA: Add coderabbit config #23
Full changelog

vsphere-cloud-controller-manager

OCPCLOUD-3680: Merge https://github.com/kubernetes/cloud-provider-vsphere/tree/master (cd8a5b0) into main #130
Full changelog

vsphere-cluster-api-controllers

OCPCLOUD-3691: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.17.0 (2509b8e) into main #116
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #117
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-132044: Fix build without boringcrypto #229
STOR-3083: Rebase v3.7.3 #214
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #200
Full changelog

vsphere-csi-driver-operator

STOR-3176: Support TLS Groups in operators for kube-rbac-proxy sidecar #373
STOR-3068: Bump all libraries #370
OCPBUGS-127462: Unresolved ${TLS_CIPHER_SUITES} for Custom TLS 1.3 profile #367
OCPBUGS-113538: Enable SELinuxMount tests #362
Full changelog

vsphere-problem-detector

OCPBUGS-130729: Skip node checks for non-vSphere nodes #247
STOR-3068: Bump all libraries #249
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Red Hat Enterprise Linux CoreOS 9.8 (`rhel-coreos`)

Package List

cri-o-5.1.0-202610051813.p2.gc31bc86.assembly.stream.el9
kernel-5.14.0-687.61.1.el9_8
openshift-kubelet-5.1.0-202610291141.p2.g096638b.assembly.stream.el9
systemd-252-67.el9_8.6

Full list (571 packages)

NetworkManager-1:1.54.3-5.el9_8
NetworkManager-cloud-setup-1:1.54.3-5.el9_8
NetworkManager-libnm-1:1.54.3-5.el9_8
NetworkManager-ovs-1:1.54.3-5.el9_8
NetworkManager-team-1:1.54.3-5.el9_8
NetworkManager-tui-1:1.54.3-5.el9_8
WALinuxAgent-udev-2.14.0.1-4.el9
aardvark-dns-2:1.17.1-1.el9_8
acl-2.4.0-1.el9_8
adcli-0.9.3.1-3.el9
adcli-selinux-0.9.3.1-3.el9
afterburn-5.10.0-1.el9
afterburn-dracut-5.10.0-1.el9
alternatives-1.24-2.el9
attr-2.6.0-1.el9_8
audit-3.1.5-8.el9
audit-libs-3.1.5-8.el9
authselect-1.2.6-3.el9
authselect-libs-1.2.6-3.el9
avahi-libs-0.8-23.el9
azure-vm-utils-0.7.0-1.el9
basesystem-11-13.el9
bash-5.1.8-9.el9
bash-completion-1:2.11-5.el9
bind-libs-32:9.16.23-40.el9_8.12
bind-license-32:9.16.23-40.el9_8.12
bind-utils-32:9.16.23-40.el9_8.12
binutils-2.35.2-72.el9
binutils-gold-2.35.2-72.el9
bootc-1.16.4-2.el9_8
bootupd-0.2.35-1.el9_8
bsdtar-3.5.3-11.el9_8
bubblewrap-0.6.3-1.el9_8.1
bzip2-1.0.8-11.el9
bzip2-libs-1.0.8-11.el9
c-ares-1.19.1-2.el9_4
ca-certificates-2026.2.92_v9.0.319-90.3.el9_8
checkpolicy-3.6-1.el9
chrony-4.8-1.el9
cifs-utils-7.7-1.el9_8
clevis-21-209.el9
clevis-dracut-21-209.el9
clevis-luks-21-209.el9
clevis-systemd-21-209.el9
cloud-utils-growpart-0.33-1.el9
composefs-1.0.8-1.el9
composefs-libs-1.0.8-1.el9
conmon-3:2.2.1-2.el9_8
conmon-rs-0.6.6-0.rhaos5.0.el9
console-login-helper-messages-0.21.3-1.el9
console-login-helper-messages-issuegen-0.21.3-1.el9
console-login-helper-messages-profile-0.21.3-1.el9
container-selinux-4:2.247.0-1.el9_8
containernetworking-plugins-1:1.9.0-4.el9_8
containers-common-5:5.8-1.el9
coreos-installer-0.26.0-1.el9_8
coreos-installer-bootinfra-0.26.0-1.el9_8
coreutils-8.32-41.el9_8.1
coreutils-common-8.32-41.el9_8.1
cpio-2.13-16.el9
cracklib-2.9.6-28.el9
cracklib-dicts-2.9.6-28.el9
cri-o-5.1.0-202610051813.p2.gc31bc86.assembly.stream.el9
cri-tools-1.37.0-1.el9
criu-3.19-4.el9_8
criu-libs-3.19-4.el9_8
crun-1.27-1.el9_8
crypto-policies-20260224-1.gitea0f072.el9_8
crypto-policies-scripts-20260224-1.gitea0f072.el9_8
cryptsetup-2.8.1-3.el9
cryptsetup-libs-2.8.1-3.el9
curl-7.76.1-40.el9_8.8
cyrus-sasl-gssapi-2.1.27-22.el9
cyrus-sasl-lib-2.1.27-22.el9
dbus-1:1.12.20-8.el9
dbus-broker-28-9.el9_8
dbus-common-1:1.12.20-8.el9
dbus-libs-1:1.12.20-8.el9
dbus-tools-1:1.12.20-8.el9
device-mapper-9:1.02.207-4.el9_8.1
device-mapper-event-9:1.02.207-4.el9_8.1
device-mapper-event-libs-9:1.02.207-4.el9_8.1
device-mapper-libs-9:1.02.207-4.el9_8.1
device-mapper-multipath-0.8.7-45.el9
device-mapper-multipath-libs-0.8.7-45.el9
device-mapper-persistent-data-1.1.0-1.el9
diffutils-3.7-12.el9
dmidecode-1:3.6-2.el9
dnf-4.14.0-34.el9_8
dnf-data-4.14.0-34.el9_8
dnsmasq-2.85-18.el9_8.2
dosfstools-4.2-3.el9
dracut-057-120.git20260728.el9_8
dracut-network-057-120.git20260728.el9_8
dracut-squash-057-120.git20260728.el9_8
e2fsprogs-1.46.5-8.el9
e2fsprogs-libs-1.46.5-8.el9
efi-filesystem-6-4.el9
efibootmgr-16-12.el9
efivar-libs-38-3.el9
elfutils-debuginfod-client-0.194-1.el9
elfutils-default-yama-scope-0.194-1.el9
elfutils-libelf-0.194-1.el9
elfutils-libs-0.194-1.el9
ethtool-2:6.15-2.el9
expat-2.5.0-6.el9_8.7
fcoe-utils-1.0.34-0.git14ef0d2.el9
file-5.39-17.el9
file-libs-5.39-17.el9
filesystem-3.16-5.el9
findutils-1:4.8.0-7.el9
firewalld-filesystem-1.3.4-20.el9_8
flashrom-1.2-10.el9
fstrm-0.6.1-3.el9
fuse-2.9.9-17.el9
fuse-common-3.10.2-9.el9
fuse-libs-2.9.9-17.el9
fuse-overlayfs-1.16-1.el9_7
fuse3-3.10.2-9.el9
fuse3-libs-3.10.2-9.el9
fwupd-2.0.19-2.el9_8
fwupd-plugin-flashrom-2.0.19-2.el9_8
gawk-5.1.0-6.el9_8.1
gawk-all-langpacks-5.1.0-6.el9_8.1
gdbm-libs-1:1.23-1.el9
gdisk-1.0.7-5.el9
geolite2-city-20191217-6.el9
geolite2-country-20191217-6.el9
gettext-0.21-8.el9
gettext-libs-0.21-8.el9
git-core-2.52.0-1.el9
glib2-2.68.4-19.el9_8.10
glibc-2.34-283.el9_8
glibc-common-2.34-283.el9_8
glibc-gconv-extra-2.34-283.el9_8
glibc-minimal-langpack-2.34-283.el9_8
glusterfs-6.0-57.4.el9
glusterfs-client-xlators-6.0-57.4.el9
glusterfs-fuse-6.0-57.4.el9
glusterfs-libs-6.0-57.4.el9
gmp-1:6.2.0-13.el9
gnupg2-2.3.3-5.el9_7
gnutls-3.8.10-9.el9_8
gobject-introspection-1.68.0-11.el9
gpgme-1.15.1-6.el9
grep-3.6-5.el9
groff-base-1.22.4-10.el9
grub2-common-1:2.06-126.el9_8
grub2-efi-x64-1:2.06-126.el9_8
grub2-pc-1:2.06-126.el9_8
grub2-pc-modules-1:2.06-126.el9_8
grub2-tools-1:2.06-126.el9_8
grub2-tools-minimal-1:2.06-126.el9_8
gssproxy-0.8.4-7.el9
gzip-1.12-2.el9_8
hostname-3.23-6.el9
hwdata-0.348-9.22.el9
ignition-2.26.0-1.el9_8.2
ignition-grub-2.26.0-1.el9_8.2
ima-evm-utils-1.6.2-2.el9
info-6.7-15.el9
inih-49-6.el9
initscripts-service-10.11.8-4.el9
ipcalc-1.0.0-5.el9
iproute-6.17.0-2.el9
iproute-tc-6.17.0-2.el9
iptables-libs-1.8.10-11.el9_5
iptables-nft-1.8.10-11.el9_5
iputils-20210202-15.el9_7
irqbalance-2:1.9.4-5.el9
iscsi-initiator-utils-6.2.1.11-1.git4b3e853.el9_8.2
iscsi-initiator-utils-iscsiuio-6.2.1.11-1.git4b3e853.el9_8.2
isns-utils-libs-0.101-4.el9_8.1
jansson-2.14-1.el9
jose-14-1.el9
jq-1.6-19.el9_8.2
json-c-0.14-11.el9
json-glib-1.6.6-1.el9
kbd-2.4.0-12.el9_8
kbd-legacy-2.4.0-12.el9_8
kbd-misc-2.4.0-12.el9_8
kernel-5.14.0-687.61.1.el9_8
kernel-core-5.14.0-687.61.1.el9_8
kernel-modules-5.14.0-687.61.1.el9_8
kernel-modules-core-5.14.0-687.61.1.el9_8
kernel-modules-extra-5.14.0-687.61.1.el9_8
kexec-tools-2.0.29-17.el9
keyutils-1.6.3-1.el9
keyutils-libs-1.6.3-1.el9
kmod-28-11.el9
kmod-libs-28-11.el9
kpartx-0.8.7-45.el9
krb5-libs-1.21.1-10.el9_8
less-590-6.el9
libacl-2.4.0-1.el9_8
libaio-0.3.111-13.el9
libarchive-3.5.3-11.el9_8
libassuan-2.5.5-3.el9
libattr-2.6.0-1.el9_8
libbasicobjects-0.1.1-53.el9
libblkid-2.37.4-25.el9
libbpf-2:1.5.0-3.el9
libbrotli-1.0.9-10.el9_8
libcap-2.48-10.el9_8.1
libcap-ng-0.8.2-7.el9
libcbor-0.7.0-5.el9
libcollection-0.7.0-53.el9
libcom_err-1.46.5-8.el9
libcomps-0.1.18-1.el9
libconfig-1.7.2-9.el9
libcurl-7.76.1-40.el9_8.8
libdaemon-0.14-23.el9
libdb-5.3.28-57.el9_6
libdhash-0.5.0-53.el9
libdnf-0.69.0-18.el9
libdnf-plugin-subscription-manager-1.29.50-1.el9
libdrm-2.4.128-1.el9
libeconf-0.4.1-7.el9_8
libedit-3.1-39.20210216cvs.el9
libev-4.33-6.el9
libevent-2.1.13-1.el9_8
libfdisk-2.37.4-25.el9
libffi-3.4.2-8.el9
libfido2-1.13.0-2.el9
libgcc-11.5.0-14.el9
libgcrypt-1.10.0-13.el9_8
libgomp-11.5.0-14.el9
libgpg-error-1.42-5.el9
libibverbs-61.0-2.el9
libicu-67.1-10.el9_6
libidn2-2.3.0-7.el9
libini_config-1.3.1-53.el9
libipa_hbac-2.9.8-4.el9_8.1
libjcat-0.1.6-3.el9
libjose-14-1.el9
libkcapi-1.4.0-3.el9_8
libkcapi-hmaccalc-1.4.0-3.el9_8
libksba-1.5.1-7.el9
libldb-4.23.5-12.el9_8
libluksmeta-10-1.el9
libmaxminddb-1.5.2-4.el9
libmicrohttpd-1:0.9.72-5.el9
libmnl-1.0.4-16.el9_4
libmodulemd-2.13.0-2.el9
libmount-2.37.4-25.el9
libmspack-0.10.1-0.7.alpha.el9
libndp-1.9-1.el9
libnet-1.2-7.el9
libnetfilter_conntrack-1.0.9-1.el9
libnfnetlink-1.0.1-23.el9_5
libnfsidmap-1:2.5.4-42.el9_8
libnftnl-1.2.6-4.el9_4
libnghttp2-1.43.0-6.el9_8.2
libnl3-3.11.0-1.el9
libnl3-cli-3.11.0-1.el9
libnvme-1.16.1-3.el9_8
libpath_utils-0.2.1-53.el9
libpcap-14:1.10.0-4.el9_8.1
libpciaccess-0.16-7.el9
libpkgconf-1.7.3-10.el9
libpsl-0.21.1-5.el9
libpwquality-1.4.4-8.el9
libref_array-0.1.5-53.el9
librepo-1.19.0-1.el9
libreport-filesystem-2.15.2-6.el9
librhsm-0.0.3-9.el9
libseccomp-2.5.2-2.el9
libselinux-3.6-3.el9
libselinux-utils-3.6-3.el9
libsemanage-3.6-5.el9_6
libsepol-3.6-3.el9
libsigsegv-2.13-4.el9
libslirp-4.4.0-8.el9
libsmartcols-2.37.4-25.el9
libsmbclient-4.23.5-12.el9_8
libsolv-0.7.24-6.el9_8
libss-1.46.5-8.el9
libssh-0.10.4-19.el9_8
libssh-config-0.10.4-19.el9_8
libsss_certmap-2.9.8-4.el9_8.1
libsss_idmap-2.9.8-4.el9_8.1
libsss_nss_idmap-2.9.8-4.el9_8.1
libsss_sudo-2.9.8-4.el9_8.1
libstdc++-11.5.0-14.el9
libtalloc-2.4.3-1.el9
libtasn1-4.16.0-10.el9_8
libtdb-1.4.14-1.el9
libteam-1.31-16.el9_1
libtevent-0.17.1-1.el9
libtirpc-1.3.3-9.el9
libtool-ltdl-2.4.6-46.el9
libunistring-0.9.10-15.el9
liburing-2.12-1.el9
libusbx-1.0.30-1.el9_8
libuser-0.63-17.el9
libutempter-1.2.1-6.el9
libuuid-2.37.4-25.el9
libuv-1:1.42.0-2.el9_4
libverto-0.3.2-3.el9
libverto-libev-0.3.2-3.el9
libwbclient-4.23.5-12.el9_8
libxcrypt-4.4.18-3.el9
libxcrypt-compat-4.4.18-3.el9
libxml2-2.9.13-14.el9_8.5
libxmlb-0.3.24-1.el9
libxslt-1.1.34-14.el9_8.1
libyaml-0.2.5-7.el9
libzstd-1.5.5-1.el9
linux-firmware-20260827-161.3.el9_8
linux-firmware-whence-20260827-161.3.el9_8
lldpad-1.1.1-4.gitf1dd9eb.el9
lmdb-libs-0.9.29-3.el9
logrotate-3.18.0-12.el9
lsof-4.94.0-3.el9
lua-libs-5.4.4-4.el9
luksmeta-10-1.el9
lvm2-9:2.03.33-4.el9_8.1
lvm2-libs-9:2.03.33-4.el9_8.1
lz4-libs-1.9.3-5.el9
lzo-2.10-7.el9
mdadm-4.4-4.el9_8.2
microcode_ctl-4:20260210-1.20260812.1.el9_8
mokutil-2:0.7.2-4.el9
mpfr-4.1.0-10.el9
nano-5.6.1-7.el9
ncurses-6.2-12.20210508.el9
ncurses-base-6.2-12.20210508.el9
ncurses-libs-6.2-12.20210508.el9
net-tools-2.0-0.64.20160912git.el9
netavark-2:1.17.2-1.el9
nettle-3.10.1-1.el9
newt-0.52.21-11.el9
nfs-utils-1:2.5.4-42.el9_8
nftables-1:1.0.9-9.el9_8
nmap-ncat-3:7.92-5.el9
nmstate-2.2.60-2.el9_8
npth-1.6-8.el9
nss-altfiles-2.18.1-20.el9
numactl-2.0.19-3.el9
numactl-libs-2.0.19-3.el9
numad-0.5-37.20150602git.el9
nvme-cli-2.16-1.el9
oniguruma-6.9.6-1.el9.6
open-vm-tools-13.0.10-1.el9
openldap-2.6.8-4.el9
openshift-clients-5.1.0-202610311436.p2.g14498e9.assembly.stream.el9
openshift-kubelet-5.1.0-202610291141.p2.g096638b.assembly.stream.el9
openssh-9.9p1-13.el9_8
openssh-clients-9.9p1-13.el9_8
openssh-server-9.9p1-13.el9_8
openssl-1:3.5.8-2.el9_8
openssl-fips-provider-3.0.7-11.el9_8
openssl-fips-provider-so-3.0.7-11.el9_8
openssl-libs-1:3.5.8-2.el9_8
openvswitch-selinux-extra-policy-1.0-39.el9fdp
openvswitch3.5-3.5.2-72.el9fdp.3
os-prober-1.77-12.el9_5
ose-aws-ecr-image-credential-provider-5.1.0-202610201708.p2.g6951d70.assembly.stream.el9
ose-azure-acr-image-credential-provider-5.1.0-202610260236.p2.gc66a908.assembly.stream.el9
ose-crio-credential-provider-5.1.0-202610051813.p2.g83d4961.assembly.stream.el9
ose-gcp-gcr-image-credential-provider-5.1.0-202610221628.p2.g05099ac.assembly.stream.el9
ostree-2025.7-1.el9
ostree-grub2-2025.7-1.el9
ostree-libs-2025.7-1.el9
p11-kit-0.26.4-1.el9_8
p11-kit-trust-0.26.4-1.el9_8
pam-1.5.1-28.el9_8.1
passt-0^20251210.gd04c480-7.el9_8
passt-selinux-0^20251210.gd04c480-7.el9_8
passwd-0.80-12.el9
pciutils-3.7.0-7.el9
pciutils-libs-3.7.0-7.el9
pcre-8.44-4.el9
pcre2-10.40-7.el9_8
pcre2-syntax-10.40-7.el9_8
perl-AutoLoader-5.74-484.el9_8
perl-B-1.80-484.el9_8
perl-Carp-1.50-460.el9
perl-Class-Struct-0.66-484.el9_8
perl-Data-Dumper-2.174-462.el9
perl-Digest-1.19-4.el9
perl-Digest-MD5-2.58-4.el9
perl-Encode-4:3.08-462.el9
perl-Errno-1.30-484.el9_8
perl-Exporter-5.74-461.el9
perl-Fcntl-1.13-484.el9_8
perl-File-Basename-2.85-484.el9_8
perl-File-Path-2.18-4.el9
perl-File-Temp-1:0.231.100-4.el9
perl-File-stat-1.09-484.el9_8
perl-FileHandle-2.03-484.el9_8
perl-Getopt-Long-1:2.52-4.el9
perl-Getopt-Std-1.12-484.el9_8
perl-HTTP-Tiny-0.076-462.el9
perl-IO-1.43-484.el9_8
perl-IO-Socket-IP-0.41-5.el9
perl-IO-Socket-SSL-2.073-2.el9
perl-IPC-Open3-1.21-484.el9_8
perl-MIME-Base64-3.16-4.el9
perl-Mozilla-CA-20200520-6.el9
perl-NDBM_File-1.15-484.el9_8
perl-Net-SSLeay-1.94-3.el9
perl-POSIX-1.94-484.el9_8
perl-PathTools-3.78-461.el9
perl-Pod-Escapes-1:1.07-460.el9
perl-Pod-Perldoc-3.28.01-461.el9
perl-Pod-Simple-1:3.42-4.el9
perl-Pod-Usage-4:2.01-4.el9
perl-Scalar-List-Utils-4:1.56-462.el9
perl-SelectSaver-1.02-484.el9_8
perl-Socket-4:2.031-4.el9
perl-Storable-1:3.21-460.el9
perl-Symbol-1.08-484.el9_8
perl-Term-ANSIColor-5.01-461.el9
perl-Term-Cap-1.17-460.el9
perl-Text-ParseWords-3.30-460.el9
perl-Text-Tabs+Wrap-2013.0523-460.el9
perl-Time-Local-2:1.300-7.el9
perl-URI-5.09-3.el9_8.1
perl-Unicode-Normalize-1.27-461.el9
perl-base-2.27-484.el9_8
perl-constant-1.33-461.el9
perl-if-0.60.800-484.el9_8
perl-interpreter-4:5.32.1-484.el9_8
perl-libnet-3.13-4.el9
perl-libs-4:5.32.1-484.el9_8
perl-mro-1.23-484.el9_8
perl-overload-1.31-484.el9_8
perl-overloading-0.02-484.el9_8
perl-parent-1:0.238-460.el9
perl-podlators-1:4.14-460.el9
perl-subs-1.03-484.el9_8
perl-vars-1.05-484.el9_8
pigz-2.8-1.el9
pkgconf-1.7.3-10.el9
pkgconf-m4-1.7.3-10.el9
pkgconf-pkg-config-1.7.3-10.el9
podman-6:5.8.2-7.el9_8
policycoreutils-3.6-5.el9
policycoreutils-python-utils-3.6-5.el9
polkit-0.117-14.el9
polkit-libs-0.117-14.el9
polkit-pkla-compat-0.1-21.el9
popt-1.18-8.el9
procps-ng-3.3.17-14.el9
protobuf-c-1.3.3-13.el9
psmisc-23.4-3.el9
publicsuffix-list-dafsa-20210518-3.el9
python-unversioned-command-3.9.25-7.el9_8.6
python3-3.9.25-7.el9_8.6
python3-audit-3.1.5-8.el9
python3-chardet-4.0.0-5.el9
python3-cloud-what-1.29.50-1.el9
python3-dateutil-1:2.9.0.post0-1.el9_7
python3-dbus-1.2.18-2.el9
python3-decorator-4.4.2-6.el9
python3-distro-1.5.0-7.el9
python3-dnf-4.14.0-34.el9_8
python3-dnf-plugin-versionlock-4.3.0-26.el9
python3-dnf-plugins-core-4.3.0-26.el9
python3-gobject-base-3.40.1-6.el9
python3-gobject-base-noarch-3.40.1-6.el9
python3-gpg-1.15.1-6.el9
python3-hawkey-0.69.0-18.el9
python3-idna-2.10-8.el9_8
python3-iniparse-0.4-45.el9
python3-inotify-0.9.6-25.el9
python3-libcomps-0.1.18-1.el9
python3-libdnf-0.69.0-18.el9
python3-librepo-1.19.0-1.el9
python3-libs-3.9.25-7.el9_8.6
python3-libselinux-3.6-3.el9
python3-libsemanage-3.6-5.el9_6
python3-pip-wheel-21.3.1-2.el9_8
python3-policycoreutils-3.6-5.el9
python3-pysocks-1.7.1-12.el9
python3-pyyaml-5.4.1-6.el9
python3-requests-2.25.1-10.el9_6
python3-rpm-4.16.1.3-40.el9
python3-setools-4.4.4-1.el9
python3-setuptools-53.0.0-15.el9
python3-setuptools-wheel-53.0.0-15.el9
python3-six-1.15.0-9.el9
python3-subscription-manager-rhsm-1.29.50-1.el9
python3-systemd-234-19.el9
python3-urllib3-1.26.5-8.el9_8
qemu-guest-agent-17:10.1.0-17.el9_8.9
quota-1:4.09-4.el9
quota-nls-1:4.09-4.el9
rdma-core-61.0-2.el9
readline-8.1-4.el9
redhat-release-9.8-1.0.el9
redhat-release-eula-9.8-1.0.el9
rpcbind-1.2.6-7.el9_8.1
rpm-4.16.1.3-40.el9
rpm-build-libs-4.16.1.3-40.el9
rpm-libs-4.16.1.3-40.el9
rpm-ostree-2026.1-6.el9_8
rpm-ostree-libs-2026.1-6.el9_8
rpm-plugin-selinux-4.16.1.3-40.el9
rpm-plugin-systemd-inhibit-4.16.1.3-40.el9
rpm-sign-libs-4.16.1.3-40.el9
rsync-3.2.7-1.el9_8
runc-4:1.4.2-3.el9_8
samba-client-libs-4.23.5-12.el9_8
samba-common-4.23.5-12.el9_8
samba-common-libs-4.23.5-12.el9_8
sed-4.8-10.el9
selinux-policy-38.1.75-2.el9_8.1
selinux-policy-targeted-38.1.75-2.el9_8.1
setup-2.13.7-10.el9
sg3_utils-1.47-10.el9_8.1
sg3_utils-libs-1.47-10.el9_8.1
shadow-utils-2:4.9-16.el9
shadow-utils-subid-2:4.9-16.el9
shared-mime-info-2.1-5.el9
shim-x64-16.1-7.el9
skopeo-2:1.22.2-8.el9_8
slang-2.3.2-11.el9
slirp4netns-1.3.3-1.el9
snappy-1.1.8-8.el9
socat-1.7.4.1-8.el9
sqlite-libs-3.34.1-11.el9_8
squashfs-tools-4.4-10.git1.el9
ssh-key-dir-0.1.4-1.el9
sssd-2.9.8-4.el9_8.1
sssd-ad-2.9.8-4.el9_8.1
sssd-client-2.9.8-4.el9_8.1
sssd-common-2.9.8-4.el9_8.1
sssd-common-pac-2.9.8-4.el9_8.1
sssd-ipa-2.9.8-4.el9_8.1
sssd-krb5-2.9.8-4.el9_8.1
sssd-krb5-common-2.9.8-4.el9_8.1
sssd-ldap-2.9.8-4.el9_8.1
sssd-nfs-idmap-2.9.8-4.el9_8.1
sssd-proxy-2.9.8-4.el9_8.1
stalld-1.26.3-1.el9
strace-6.12-1.el9
subscription-manager-1.29.50-1.el9
subscription-manager-rhsm-certificates-20220623-1.el9
sudo-1.9.17p2-3.el9_8.3
systemd-252-67.el9_8.6
systemd-journal-remote-252-67.el9_8.6
systemd-libs-252-67.el9_8.6
systemd-pam-252-67.el9_8.6
systemd-rpm-macros-252-67.el9_8.6
systemd-udev-252-67.el9_8.6
tar-2:1.34-13.el9_8
teamd-1.31-16.el9_1
tmux-3.2a-5.el9
toolbox-0.1.2-1.rhaos4.22.el9
tpm2-tools-5.2-7.el9
tpm2-tss-3.2.3-1.el9
tzdata-2026e-1.el9_8
unbound-libs-1.24.2-3.el9_8.8
usermode-1.114-7.el9
userspace-rcu-0.12.1-6.el9
util-linux-2.37.4-25.el9
util-linux-core-2.37.4-25.el9
vim-minimal-2:8.2.2637-26.el9_8.23
virt-what-1.27-2.el9
which-2.21-30.el9_6
xfsprogs-6.4.0-7.el9
xmlsec1-1.2.29-13.el9
xmlsec1-openssl-1.2.29-13.el9
xz-5.2.5-8.el9_8.1
xz-libs-5.2.5-8.el9_8.1
yajl-2.1.0-25.el9
zlib-1.2.11-40.el9
zram-generator-1.1.2-1.el9
zstd-1.5.5-1.el9

Changed:

bind-libs 32:9.16.23-40.el9_8.9 → 32:9.16.23-40.el9_8.12
bind-license 32:9.16.23-40.el9_8.9 → 32:9.16.23-40.el9_8.12
bind-utils 32:9.16.23-40.el9_8.9 → 32:9.16.23-40.el9_8.12
bootc 1.16.4-1.el9_8 → 1.16.4-2.el9_8
bubblewrap 0.6.3-1.el9 → 0.6.3-1.el9_8.1
ca-certificates 2025.2.80_v9.0.305-91.el9 → 2026.2.92_v9.0.319-90.3.el9_8
cifs-utils 7.6-2.el9_8 → 7.7-1.el9_8
containernetworking-plugins 1:1.9.0-3.el9_8 → 1:1.9.0-4.el9_8
cri-o 5.0.0-202609150052.p2.gb784f71.assembly.stream.el9 → 5.1.0-202610051813.p2.gc31bc86.assembly.stream.el9
cri-tools 1.36.0-2.el9 → 1.37.0-1.el9
curl 7.76.1-40.el9_8.7 → 7.76.1-40.el9_8.8
expat 2.5.0-6.el9_8.3 → 2.5.0-6.el9_8.7
gawk 5.1.0-6.el9 → 5.1.0-6.el9_8.1
gawk-all-langpacks 5.1.0-6.el9 → 5.1.0-6.el9_8.1
glibc 2.34-275.el9_8 → 2.34-283.el9_8
glibc-common 2.34-275.el9_8 → 2.34-283.el9_8
glibc-gconv-extra 2.34-275.el9_8 → 2.34-283.el9_8
glibc-minimal-langpack 2.34-275.el9_8 → 2.34-283.el9_8
gnutls 3.8.10-8.el9_8 → 3.8.10-9.el9_8
ignition 2.26.0-1.el9_8 → 2.26.0-1.el9_8.2
ignition-grub 2.26.0-1.el9_8 → 2.26.0-1.el9_8.2
kernel 5.14.0-687.49.1.el9_8 → 5.14.0-687.61.1.el9_8
kernel-core 5.14.0-687.49.1.el9_8 → 5.14.0-687.61.1.el9_8
kernel-modules 5.14.0-687.49.1.el9_8 → 5.14.0-687.61.1.el9_8
kernel-modules-core 5.14.0-687.49.1.el9_8 → 5.14.0-687.61.1.el9_8
kernel-modules-extra 5.14.0-687.49.1.el9_8 → 5.14.0-687.61.1.el9_8
libbrotli 1.0.9-9.el9_7 → 1.0.9-10.el9_8
libcurl 7.76.1-40.el9_8.7 → 7.76.1-40.el9_8.8
libldb 4.23.5-11.el9_8 → 4.23.5-12.el9_8
libpcap 14:1.10.0-4.el9 → 14:1.10.0-4.el9_8.1
libsmbclient 4.23.5-11.el9_8 → 4.23.5-12.el9_8
libwbclient 4.23.5-11.el9_8 → 4.23.5-12.el9_8
libxml2 2.9.13-14.el9_8.4 → 2.9.13-14.el9_8.5
linux-firmware 20260804-161.2.el9_8 → 20260827-161.3.el9_8
linux-firmware-whence 20260804-161.2.el9_8 → 20260827-161.3.el9_8
mdadm 4.4-4.el9_8.1 → 4.4-4.el9_8.2
openshift-clients 5.0.0-202608132118.p2.g4b0a124.assembly.stream.el9 → 5.1.0-202610311436.p2.g14498e9.assembly.stream.el9
openshift-kubelet 5.0.0-202609111609.p2.gb376ee7.assembly.stream.el9 → 5.1.0-202610291141.p2.g096638b.assembly.stream.el9
openssh 9.9p1-11.el9_8 → 9.9p1-13.el9_8
openssh-clients 9.9p1-11.el9_8 → 9.9p1-13.el9_8
openssh-server 9.9p1-11.el9_8 → 9.9p1-13.el9_8
openssl 1:3.5.8-1.el9_8 → 1:3.5.8-2.el9_8
openssl-libs 1:3.5.8-1.el9_8 → 1:3.5.8-2.el9_8
openvswitch3.5 3.5.2-72.el9fdp.2 → 3.5.2-72.el9fdp.3
ose-aws-ecr-image-credential-provider 5.0.0-202607281540.p2.g278e8c0.assembly.stream.el9 → 5.1.0-202610201708.p2.g6951d70.assembly.stream.el9
ose-azure-acr-image-credential-provider 5.0.0-202609151726.p2.g95f0a12.assembly.stream.el9 → 5.1.0-202610260236.p2.gc66a908.assembly.stream.el9
ose-crio-credential-provider 5.0.0-202603041733.p2.g83d4961.assembly.stream.el9 → 5.1.0-202610051813.p2.g83d4961.assembly.stream.el9
ose-gcp-gcr-image-credential-provider 5.0.0-202608040132.p2.g51c3264.assembly.stream.el9 → 5.1.0-202610221628.p2.g05099ac.assembly.stream.el9
passt 0^20251210.gd04c480-6.el9_8 → 0^20251210.gd04c480-7.el9_8
passt-selinux 0^20251210.gd04c480-6.el9_8 → 0^20251210.gd04c480-7.el9_8
pcre2 10.40-6.el9 → 10.40-7.el9_8
pcre2-syntax 10.40-6.el9 → 10.40-7.el9_8
perl-URI 5.09-3.el9 → 5.09-3.el9_8.1
podman 6:5.8.2-6.el9_8 → 6:5.8.2-7.el9_8
python-unversioned-command 3.9.25-7.el9_8.3 → 3.9.25-7.el9_8.6
python3 3.9.25-7.el9_8.3 → 3.9.25-7.el9_8.6
python3-libs 3.9.25-7.el9_8.3 → 3.9.25-7.el9_8.6
qemu-guest-agent 17:10.1.0-17.el9_8.5 → 17:10.1.0-17.el9_8.9
rpcbind 1.2.6-7.el9 → 1.2.6-7.el9_8.1
runc 4:1.4.2-2.el9_8 → 4:1.4.2-3.el9_8
samba-client-libs 4.23.5-11.el9_8 → 4.23.5-12.el9_8
samba-common 4.23.5-11.el9_8 → 4.23.5-12.el9_8
samba-common-libs 4.23.5-11.el9_8 → 4.23.5-12.el9_8
selinux-policy 38.1.75-2.el9_8 → 38.1.75-2.el9_8.1
selinux-policy-targeted 38.1.75-2.el9_8 → 38.1.75-2.el9_8.1
skopeo 2:1.22.2-7.el9_8 → 2:1.22.2-8.el9_8
sudo 1.9.17p2-3.el9_8.1 → 1.9.17p2-3.el9_8.3
tzdata 2026c-1.el9_8 → 2026e-1.el9_8
unbound-libs 1.24.2-3.el9_8.6 → 1.24.2-3.el9_8.8
vim-minimal 2:8.2.2637-26.el9_8.21 → 2:8.2.2637-26.el9_8.23
xz 5.2.5-8.el9_0 → 5.2.5-8.el9_8.1
xz-libs 5.2.5-8.el9_0 → 5.2.5-8.el9_8.1

Added:

perl-Unicode-Normalize 1.27-461.el9

Extensions

Full list (0 packages)

Red Hat Enterprise Linux CoreOS 10.2 (`rhel-coreos-10`)

Package List

cri-o-5.1.0-202610051813.p2.gc31bc86.assembly.stream.el10
kernel-6.12.0-211.69.1.el10_2
openshift-kubelet-5.1.0-202610291141.p2.g096638b.assembly.stream.el10
systemd-257-23.el10_2.2

Full list (489 packages)

NetworkManager-1:1.56.0-3.el10_2
NetworkManager-cloud-setup-1:1.56.0-3.el10_2
NetworkManager-libnm-1:1.56.0-3.el10_2
NetworkManager-ovs-1:1.56.0-3.el10_2
NetworkManager-tui-1:1.56.0-3.el10_2
WALinuxAgent-udev-2.14.0.1-3.el10
aardvark-dns-2:1.17.1-1.el10_2
acl-2.4.0-1.el10_2
afterburn-5.10.0-1.el10
afterburn-dracut-5.10.0-1.el10
alternatives-1.30-2.el10
amd-gpu-firmware-20260929-23.4.el10_2
amd-ucode-firmware-20260929-23.4.el10_2
attr-2.6.0-1.el10_2
audit-4.0.3-5.el10
audit-libs-4.0.3-5.el10
audit-rules-4.0.3-5.el10
authselect-1.5.2-1.el10
authselect-libs-1.5.2-1.el10
avahi-libs-0.9~rc2-2.el10
azure-vm-utils-0.7.0-1.el10
basesystem-11-22.el10
bash-5.2.26-6.el10
bash-completion-1:2.11-16.el10
bind-libs-32:9.18.33-15.el10_2.13
bind-license-32:9.18.33-15.el10_2.13
bind-utils-32:9.18.33-15.el10_2.13
bootc-1.16.4-2.el10_2
bootupd-0.2.35-1.el10_2
bsdtar-3.7.7-11.el10_2
bubblewrap-0.10.0-5.el10_2
bzip2-1.0.8-25.el10
bzip2-libs-1.0.8-25.el10
c-ares-1.34.6-2.el10_2
ca-certificates-2026.2.92_v9.0.319-100.3.el10_2
catatonit-5:0.2.1-1.el10
checkpolicy-3.10-1.el10
chrony-4.8-2.el10
cifs-utils-7.7-1.el10_2
clevis-21-9.el10
clevis-dracut-21-9.el10
clevis-luks-21-9.el10
clevis-pin-tpm2-0.5.3-9.el10
clevis-systemd-21-9.el10
cloud-utils-growpart-0.33-11.el10
composefs-1.0.8-1.el10
composefs-libs-1.0.8-1.el10
conmon-3:2.2.1-2.el10
conmon-rs-0.6.6-0.rhaos5.0.el10
console-login-helper-messages-0.21.3-10.el10
console-login-helper-messages-issuegen-0.21.3-10.el10
console-login-helper-messages-profile-0.21.3-10.el10
container-selinux-4:2.248.0-1.el10_2
containers-common-6:5.8-2.el10
containers-common-extra-6:5.8-2.el10
coreos-installer-0.27.0-1.el10_2
coreos-installer-bootinfra-0.27.0-1.el10_2
coreutils-9.5-8.el10_2.1
coreutils-common-9.5-8.el10_2.1
cpio-2.15-3.el10
cracklib-2.9.11-8.el10
cracklib-dicts-2.9.11-8.el10
cri-o-5.1.0-202610051813.p2.gc31bc86.assembly.stream.el10
cri-tools-1.37.0-1.el10
criu-4.2-2.el10_2
criu-libs-4.2-2.el10_2
crun-1.30.1-2.el10_2
crypto-policies-20260216-1.git0e54016.el10_2.2
crypto-policies-scripts-20260216-1.git0e54016.el10_2.2
cryptsetup-2.8.1-2.el10
cryptsetup-libs-2.8.1-2.el10
curl-8.12.1-4.el10_2.7
cyrus-sasl-gssapi-2.1.28-30.el10_2
cyrus-sasl-lib-2.1.28-30.el10_2
dbus-1:1.14.10-5.el10
dbus-broker-36-5.el10_2
dbus-common-1:1.14.10-5.el10
dbus-libs-1:1.14.10-5.el10
dbus-tools-1:1.14.10-5.el10
device-mapper-10:1.02.210-2.el10
device-mapper-event-10:1.02.210-2.el10
device-mapper-event-libs-10:1.02.210-2.el10
device-mapper-libs-10:1.02.210-2.el10
device-mapper-multipath-0.9.9-18.el10
device-mapper-multipath-libs-0.9.9-18.el10
device-mapper-persistent-data-1.3.0-1.el10
diffutils-3.10-8.el10
dmidecode-1:3.6-5.el10
dnf-4.20.0-22.el10_2
dnf-data-4.20.0-22.el10_2
dnsmasq-2.90-7.el10_2.1
dosfstools-4.2-12.el10
dracut-107-9.el10_2
dracut-network-107-9.el10_2
dracut-squash-107-9.el10_2
duktape-2.7.0-10.el10
e2fsprogs-1.47.1-5.el10
e2fsprogs-libs-1.47.1-5.el10
efi-filesystem-6-6.el10
efibootmgr-18-8.el10
efivar-libs-39-3.el10
elfutils-default-yama-scope-0.194-2.el10_2
elfutils-libelf-0.194-2.el10_2
elfutils-libs-0.194-2.el10_2
erofs-utils-1.8.10-1.el10
ethtool-2:6.15-2.el10
expat-2.7.3-1.el10_2.7
fcoe-utils-1.0.34-11.gitb233050.el10
file-5.45-9.el10
file-libs-5.45-9.el10
filesystem-3.18-17.el10
findutils-1:4.10.0-5.el10
firewalld-filesystem-2.4.3-4.el10_2
flatpak-session-helper-1.16.0-9.el10_2.6
fstrm-0.6.1-12.el10
fuse-common-3.16.2-5.el10
fuse-libs-2.9.9-25.el10
fuse3-3.16.2-5.el10
fuse3-libs-3.16.2-5.el10
fwupd-2.0.19-4.1.el10_2
gawk-5.3.0-6.el10_2.1
gdbm-1:1.23-12.el10_0
gdbm-libs-1:1.23-12.el10_0
gettext-envsubst-0.22.5-6.el10
gettext-libs-0.22.5-6.el10
gettext-runtime-0.22.5-6.el10
git-core-2.52.0-1.el10
glib2-2.80.4-12.el10_2.22
glibc-2.39-145.el10_2
glibc-common-2.39-145.el10_2
glibc-gconv-extra-2.39-145.el10_2
glibc-minimal-langpack-2.39-145.el10_2
gmp-1:6.2.1-12.el10
gnupg2-2.4.5-4.el10_1
gnutls-3.8.10-5.el10_2
gobject-introspection-1.79.1-6.el10
gpgme-1.23.2-6.el10
grep-3.11-10.el10
grub2-common-1:2.12-46.el10_2
grub2-efi-x64-1:2.12-46.el10_2
grub2-pc-1:2.12-46.el10_2
grub2-pc-modules-1:2.12-46.el10_2
grub2-tools-1:2.12-46.el10_2
grub2-tools-minimal-1:2.12-46.el10_2
gssproxy-0.9.2-10.el10
gzip-1.13-4.el10_2
hostname-3.23-14.el10
hwdata-0.379-10.8.el10
ignition-2.26.0-3.el10_2.4
ignition-grub-2.26.0-3.el10_2.4
ima-evm-utils-1.6.2-4.el10
info-7.1-6.el10
inih-58-3.el10
intel-gpu-firmware-20260929-23.4.el10_2
ipcalc-1.0.3-12.el10
iproute-6.17.0-2.el10
iproute-tc-6.17.0-2.el10
iptables-libs-1.8.11-16.el10_2
iptables-nft-1.8.11-16.el10_2
iputils-20240905-5.el10
irqbalance-2:1.9.4-6.el10
iscsi-initiator-utils-6.2.1.11-1.git4b3e853.el10_2.2
iscsi-initiator-utils-iscsiuio-6.2.1.11-1.git4b3e853.el10_2.2
isns-utils-libs-0.103-1.el10_2.1
jansson-2.14-3.el10
jose-14-102.el10
jq-1.7.1-11.el10_2.2
json-c-0.18-3.el10
json-glib-1.8.0-5.el10
kbd-2.6.4-8.el10_2
kbd-legacy-2.6.4-8.el10_2
kbd-misc-2.6.4-8.el10_2
kdump-utils-1.0.58-15.el10
kernel-6.12.0-211.69.1.el10_2
kernel-core-6.12.0-211.69.1.el10_2
kernel-modules-6.12.0-211.69.1.el10_2
kernel-modules-core-6.12.0-211.69.1.el10_2
kernel-modules-extra-6.12.0-211.69.1.el10_2
kexec-tools-2.0.32-3.el10
keyutils-1.6.3-5.el10
keyutils-libs-1.6.3-5.el10
kmod-31-13.el10
kmod-libs-31-13.el10
kpartx-0.9.9-18.el10
krb5-libs-1.21.3-10.el10_2
less-661-3.el10
libacl-2.4.0-1.el10_2
libaio-0.3.111-22.el10
libarchive-3.7.7-11.el10_2
libassuan-2.5.6-6.el10
libattr-2.6.0-1.el10_2
libbasicobjects-0.1.1-58.el10
libblkid-2.40.2-18.el10
libbpf-2:1.7.0-1.el10
libcap-2.69-7.el10_2.1
libcap-ng-0.8.4-6.el10
libcbor-0.11.0-3.el10
libcollection-0.7.0-58.el10
libcom_err-1.47.1-5.el10
libcomps-0.1.21-3.el10
libconfig-1.7.3-10.el10
libcurl-minimal-8.12.1-4.el10_2.7
libdhash-0.5.0-58.el10
libdnf-0.73.1-15.el10_2
libdnf-plugin-subscription-manager-1.30.12-1.el10
libdrm-2.4.128-1.el10
libeconf-0.6.2-4.el10
libedit-3.1-52.20230828cvs.el10
libev-4.33-15.el10
libevent-2.1.13-1.el10_2
libfdisk-2.40.2-18.el10
libffi-3.4.4-10.el10
libfido2-1.14.0-7.el10
libgcc-14.3.1-4.4.el10
libgcrypt-1.11.0-7.el10_2
libgomp-14.3.1-4.4.el10
libgpg-error-1.50-2.el10
libibverbs-1:61.0-2.el10_2
libicu-74.2-5.el10_0
libidn2-2.3.7-3.el10
libini_config-1.3.1-58.el10
libipa_hbac-2.12.0-3.el10_2.2
libjcat-0.2.2-2.el10
libjose-14-102.el10
libkcapi-1.5.1-1.el10_2
libkcapi-hasher-1.5.1-1.el10_2
libkcapi-hmaccalc-1.5.1-1.el10_2
libksba-1.6.7-2.el10
libldb-4.23.5-111.el10_2
libluksmeta-10-1.el10
libmaxminddb-1.9.1-4.el10
libmicrohttpd-1:1.0.0-3.el10
libmnl-1.0.5-7.el10
libmodulemd-2.15.0-12.el10
libmount-2.40.2-18.el10
libmspack-0.10.1-0.14.alpha.el10
libndp-1.9-2.el10
libnet-1.3-7.el10
libnetfilter_conntrack-1.0.9-12.el10
libnfnetlink-1.0.2-3.el10
libnfsidmap-1:2.8.3-5.el10_2
libnftnl-1.3.0-3.el10
libnghttp2-1.68.0-3.el10_2.2
libnl3-3.11.0-1.el10
libnvme-1.16.1-3.el10_2
libpath_utils-0.2.1-58.el10
libpcap-14:1.10.4-7.el10_2.1
libpciaccess-0.16-16.el10
libpkgconf-2.1.0-3.el10
libpwquality-1.4.5-12.el10
libref_array-0.1.5-58.el10
librepo-1.19.0-1.el10
librhsm-0.0.3-16.el10
libseccomp-2.5.6-1.el10
libselinux-3.10-1.el10
libselinux-utils-3.10-1.el10
libsemanage-3.10-1.el10
libsepol-3.10-1.el10
libsmartcols-2.40.2-18.el10
libsmbclient-4.23.5-111.el10_2
libsolv-0.7.33-5.el10_2
libss-1.47.1-5.el10
libsss_certmap-2.12.0-3.el10_2.2
libsss_idmap-2.12.0-3.el10_2.2
libsss_nss_idmap-2.12.0-3.el10_2.2
libsss_sudo-2.12.0-3.el10_2.2
libstdc++-14.3.1-4.4.el10
libtalloc-2.4.3-100.el10
libtasn1-4.20.0-5.el10_2
libtdb-1.4.14-100.el10
libtevent-0.17.1-100.el10
libtirpc-1.3.5-1.el10
libtool-ltdl-2.4.7-13.el10
libunistring-1.1-10.el10
liburing-2.12-1.el10
libusb1-1.0.30-1.el10_2
libutempter-1.2.1-15.el10
libuuid-2.40.2-18.el10
libuv-1:1.52.1-1.el10_2
libverto-0.3.2-10.el10
libverto-libev-0.3.2-10.el10
libwbclient-4.23.5-111.el10_2
libxcrypt-4.4.36-10.el10
libxml2-2.12.5-10.el10_2.4
libxmlb-0.3.24-1.el10
libxslt-1.1.39-8.el10_2.1
libyaml-0.2.5-16.el10
libzstd-1.5.5-9.el10
linux-firmware-20260929-23.4.el10_2
linux-firmware-whence-20260929-23.4.el10_2
lldpad-1.1.1-4.gitf1dd9eb.el10
lmdb-libs-0.9.32-4.el10
logrotate-3.22.0-5.el10
lsof-4.98.0-7.el10
lua-libs-5.4.6-7.el10
luksmeta-10-1.el10
lvm2-10:2.03.36-2.el10
lvm2-libs-10:2.03.36-2.el10
lz4-libs-1.9.4-8.el10
lzo-2.10-14.el10
makedumpfile-1.7.8-1.el10
mdadm-4.4-3.el10_2.2
microcode_ctl-4:20260812-0.el10_2
mokutil-2:0.7.2-4.el10
mpdecimal-2.5.1-12.el10
mpfr-4.2.1-8.el10
nano-8.1-3.el10
ncurses-base-6.4-15.20240127.el10_1
ncurses-libs-6.4-15.20240127.el10_1
net-tools-2.0-0.73.20160912git.el10
netavark-2:1.17.2-1.el10
nettle-3.10.1-1.el10
newt-0.52.24-5.el10
nfs-utils-1:2.8.3-5.el10_2
nftables-1:1.1.5-6.el10_2
nmap-ncat-4:7.92-5.el10
nmstate-2.2.60-3.el10_2
npth-1.6-21.el10
nss-altfiles-2.23.0-6.el10
numactl-2.0.19-3.el10
numactl-libs-2.0.19-3.el10
numad-0.5-50.20251104git.el10
nvidia-gpu-firmware-20260929-23.4.el10_2
nvme-cli-2.16-2.el10
oniguruma-6.9.9-7.el10
open-vm-tools-13.0.10-1.el10
openldap-2.6.10-1.el10
openshift-clients-5.1.0-202610311436.p2.g14498e9.assembly.stream.el10
openshift-kubelet-5.1.0-202610291141.p2.g096638b.assembly.stream.el10
openssh-9.9p1-29.el10_2
openssh-clients-9.9p1-29.el10_2
openssh-server-9.9p1-29.el10_2
openssl-1:3.5.8-2.el10_2
openssl-fips-provider-3.0.7-11.el10_2
openssl-fips-provider-so-3.0.7-11.el10_2
openssl-libs-1:3.5.8-2.el10_2
openvswitch-selinux-extra-policy-1.0-40.el10fdp
openvswitch3.5-3.5.2-63.el10fdp
os-prober-1.81-9.el10
ose-aws-ecr-image-credential-provider-5.1.0-202610201708.p2.g6951d70.assembly.stream.el10
ose-azure-acr-image-credential-provider-5.1.0-202610260236.p2.gc66a908.assembly.stream.el10
ose-crio-credential-provider-5.1.0-202610051813.p2.g83d4961.assembly.stream.el10
ose-gcp-gcr-image-credential-provider-5.1.0-202610221628.p2.g05099ac.assembly.stream.el10
ostree-2025.7-1.el10
ostree-grub2-2025.7-1.el10
ostree-libs-2025.7-1.el10
p11-kit-0.26.4-1.el10_2
p11-kit-trust-0.26.4-1.el10_2
pam-1.6.1-9.el10_2.1
pam-libs-1.6.1-9.el10_2.1
passt-0^20251210.gd04c480-7.el10_2
passt-selinux-0^20251210.gd04c480-7.el10_2
pciutils-3.13.0-6.el10
pciutils-libs-3.13.0-6.el10
pcre2-10.44-1.5.el10_2
pcre2-syntax-10.44-1.5.el10_2
pkgconf-2.1.0-3.el10
pkgconf-m4-2.1.0-3.el10
pkgconf-pkg-config-2.1.0-3.el10
podman-7:5.8.2-11.el10_2
podman-sequoia-0.4.0~pqc.3-1.el10_2
policycoreutils-3.10-2.el10_2
policycoreutils-python-utils-3.10-2.el10_2
polkit-125-4.el10_2.1
polkit-libs-125-4.el10_2.1
popt-1.19-8.el10
procps-ng-4.0.4-11.el10
protobuf-c-1.5.0-6.el10
psmisc-23.6-8.el10
python3-3.12.15-1.el10_2
python3-audit-4.0.3-5.el10
python3-charset-normalizer-3.4.2-1.el10
python3-cloud-what-1.30.12-1.el10
python3-dateutil-1:2.9.0.post0-1.el10_0
python3-dbus-1.3.2-8.el10
python3-decorator-5.1.1-12.el10
python3-distro-1.9.0-5.el10
python3-dnf-4.20.0-22.el10_2
python3-dnf-plugin-versionlock-4.7.0-10.el10
python3-dnf-plugins-core-4.7.0-10.el10
python3-file-magic-5.45-9.el10
python3-gobject-base-3.46.0-7.el10
python3-gobject-base-noarch-3.46.0-7.el10
python3-hawkey-0.73.1-15.el10_2
python3-idna-3.7-6.el10_2
python3-iniparse-0.5-10.el10
python3-inotify-0.9.6-36.el10
python3-libcomps-0.1.21-3.el10
python3-libdnf-0.73.1-15.el10_2
python3-librepo-1.19.0-1.el10
python3-libs-3.12.15-1.el10_2
python3-libselinux-3.10-1.el10
python3-libsemanage-3.10-1.el10
python3-packaging-24.2-2.el10
python3-pexpect-4.9.0-6.el10
python3-pip-wheel-23.3.2-11.el10_2
python3-policycoreutils-3.10-2.el10_2
python3-ptyprocess-0.7.0-9.el10
python3-pyyaml-6.0.1-19.el10
python3-requests-2.32.4-1.el10_0
python3-rpm-4.19.1.1-23.el10
python3-setools-4.6.0-3.el10
python3-setuptools-69.0.3-12.el10_0
python3-six-1.16.0-16.el10
python3-subscription-manager-rhsm-1.30.12-1.el10
python3-systemd-235-11.el10
python3-urllib3-1.26.19-4.el10_2.2
qemu-guest-agent-18:10.1.0-16.el10_2.5
quota-1:4.09-10.el10
quota-nls-1:4.09-10.el10
rdma-core-1:61.0-2.el10_2
readline-8.2-11.el10
redhat-release-10.2-21.el10
redhat-release-eula-10.2-21.el10
rpcbind-1.2.7-3.el10_2.1
rpm-4.19.1.1-23.el10
rpm-build-libs-4.19.1.1-23.el10
rpm-libs-4.19.1.1-23.el10
rpm-ostree-2026.3-2.el10_2
rpm-ostree-libs-2026.3-2.el10_2
rpm-plugin-selinux-4.19.1.1-23.el10
rpm-sequoia-1.10.2.1-1.el10_2
rpm-sign-libs-4.19.1.1-23.el10
rsync-3.5.0-3.el10_2
samba-client-libs-4.23.5-111.el10_2
samba-common-4.23.5-111.el10_2
samba-common-libs-4.23.5-111.el10_2
sed-4.9-5.el10
selinux-policy-42.1.18-4.el10_2.4
selinux-policy-targeted-42.1.18-4.el10_2.4
setup-2.14.5-7.el10
sg3_utils-1.48-7.el10_2.2
sg3_utils-libs-1.48-7.el10_2.2
shadow-utils-2:4.15.0-11.el10
shadow-utils-subid-2:4.15.0-11.el10
shared-mime-info-2.3-8.el10
shim-x64-16.1-4.el10
skopeo-2:1.22.2-6.el10_2
slang-2.3.3-8.el10
snappy-1.1.10-7.el10
socat-1.7.4.4-8.el10
sos-4.11.2-4.el10_2
sqlite-libs-3.46.1-6.el10_2
ssh-key-dir-0.1.4-9.el10
sssd-2.12.0-3.el10_2.2
sssd-ad-2.12.0-3.el10_2.2
sssd-client-2.12.0-3.el10_2.2
sssd-common-2.12.0-3.el10_2.2
sssd-common-pac-2.12.0-3.el10_2.2
sssd-ipa-2.12.0-3.el10_2.2
sssd-krb5-2.12.0-3.el10_2.2
sssd-krb5-common-2.12.0-3.el10_2.2
sssd-ldap-2.12.0-3.el10_2.2
sssd-nfs-idmap-2.12.0-3.el10_2.2
sssd-proxy-2.12.0-3.el10_2.2
stalld-1.26.3-1.el10
strace-6.12-3.el10
subscription-manager-1.30.12-1.el10
subscription-manager-rhsm-certificates-20220623-6.el10
sudo-1.9.17-10.p2.el10_2.7
systemd-257-23.el10_2.2
systemd-journal-remote-257-23.el10_2.2
systemd-libs-257-23.el10_2.2
systemd-pam-257-23.el10_2.2
systemd-udev-257-23.el10_2.2
tar-2:1.35-13.el10_2
tmux-3.3a-13.20230918gitb202a2f.el10
toolbox-0.3-2.el10_2
tpm2-tools-5.7-5.el10
tpm2-tss-4.1.3-6.el10
tpm2-tss-fapi-4.1.3-6.el10
tzdata-2026e-1.el10_2
unbound-anchor-1.24.2-7.el10_2.6
unbound-libs-1.24.2-7.el10_2.6
userspace-rcu-0.14.0-7.el10
util-linux-2.40.2-18.el10
util-linux-core-2.40.2-18.el10
vim-data-2:9.1.083-9.el10_2.22
vim-minimal-2:9.1.083-9.el10_2.22
virt-what-1.27-3.el10
which-2.21-44.el10_0
xfsprogs-6.16.0-1.el10
xmlsec1-1:1.2.39-3.el10
xmlsec1-openssl-1:1.2.39-3.el10
xz-1:5.6.2-4.el10_2.1
xz-libs-1:5.6.2-4.el10_2.1
zlib-ng-compat-2.2.3-3.el10_1
zram-generator-1.1.2-14.el10
zstd-1.5.5-9.el10

Changed:

NetworkManager 1:1.56.0-2.el10_2 → 1:1.56.0-3.el10_2
NetworkManager-cloud-setup 1:1.56.0-2.el10_2 → 1:1.56.0-3.el10_2
NetworkManager-libnm 1:1.56.0-2.el10_2 → 1:1.56.0-3.el10_2
NetworkManager-ovs 1:1.56.0-2.el10_2 → 1:1.56.0-3.el10_2
NetworkManager-tui 1:1.56.0-2.el10_2 → 1:1.56.0-3.el10_2
amd-gpu-firmware 20260804-23.2.el10_2 → 20260929-23.4.el10_2
amd-ucode-firmware 20260804-23.2.el10_2 → 20260929-23.4.el10_2
bind-libs 32:9.18.33-15.el10_2.10 → 32:9.18.33-15.el10_2.13
bind-license 32:9.18.33-15.el10_2.10 → 32:9.18.33-15.el10_2.13
bind-utils 32:9.18.33-15.el10_2.10 → 32:9.18.33-15.el10_2.13
bootc 1.16.4-1.el10_2 → 1.16.4-2.el10_2
bsdtar 3.7.7-10.el10_2 → 3.7.7-11.el10_2
bubblewrap 0.10.0-3.el10 → 0.10.0-5.el10_2
ca-certificates 2025.2.80_v9.0.305-102.el10_1 → 2026.2.92_v9.0.319-100.3.el10_2
coreos-installer 0.26.0-1.el10_2 → 0.27.0-1.el10_2
coreos-installer-bootinfra 0.26.0-1.el10_2 → 0.27.0-1.el10_2
cri-o 5.0.0-202609150052.p2.gb784f71.assembly.stream.el10 → 5.1.0-202610051813.p2.gc31bc86.assembly.stream.el10
cri-tools 1.36.0-3.el10 → 1.37.0-1.el10
crun 1.27-2.el10_2 → 1.30.1-2.el10_2
curl 8.12.1-4.el10_2.4 → 8.12.1-4.el10_2.7
dnsmasq 2.90-7.el10_2 → 2.90-7.el10_2.1
expat 2.7.3-1.el10_2.3 → 2.7.3-1.el10_2.7
flatpak-session-helper 1.16.0-9.el10_2.1 → 1.16.0-9.el10_2.6
gawk 5.3.0-6.el10 → 5.3.0-6.el10_2.1
glibc 2.39-128.el10_2 → 2.39-145.el10_2
glibc-common 2.39-128.el10_2 → 2.39-145.el10_2
glibc-gconv-extra 2.39-128.el10_2 → 2.39-145.el10_2
glibc-minimal-langpack 2.39-128.el10_2 → 2.39-145.el10_2
gnutls 3.8.10-4.el10_2 → 3.8.10-5.el10_2
ignition 2.26.0-2.el10_2 → 2.26.0-3.el10_2.4
ignition-grub 2.26.0-2.el10_2 → 2.26.0-3.el10_2.4
intel-gpu-firmware 20260804-23.2.el10_2 → 20260929-23.4.el10_2
kernel 6.12.0-211.56.1.el10_2 → 6.12.0-211.69.1.el10_2
kernel-core 6.12.0-211.56.1.el10_2 → 6.12.0-211.69.1.el10_2
kernel-modules 6.12.0-211.56.1.el10_2 → 6.12.0-211.69.1.el10_2
kernel-modules-core 6.12.0-211.56.1.el10_2 → 6.12.0-211.69.1.el10_2
kernel-modules-extra 6.12.0-211.56.1.el10_2 → 6.12.0-211.69.1.el10_2
libarchive 3.7.7-10.el10_2 → 3.7.7-11.el10_2
libcurl-minimal 8.12.1-4.el10_2.4 → 8.12.1-4.el10_2.7
libibverbs 61.0-1.el10 → 1:61.0-2.el10_2
libipa_hbac 2.12.0-3.el10_2.1 → 2.12.0-3.el10_2.2
libldb 4.23.5-110.el10_2 → 4.23.5-111.el10_2
libpcap 14:1.10.4-7.el10 → 14:1.10.4-7.el10_2.1
libsmbclient 4.23.5-110.el10_2 → 4.23.5-111.el10_2
libsss_certmap 2.12.0-3.el10_2.1 → 2.12.0-3.el10_2.2
libsss_idmap 2.12.0-3.el10_2.1 → 2.12.0-3.el10_2.2
libsss_nss_idmap 2.12.0-3.el10_2.1 → 2.12.0-3.el10_2.2
libsss_sudo 2.12.0-3.el10_2.1 → 2.12.0-3.el10_2.2
libwbclient 4.23.5-110.el10_2 → 4.23.5-111.el10_2
libxml2 2.12.5-10.el10_2.3 → 2.12.5-10.el10_2.4
linux-firmware 20260804-23.2.el10_2 → 20260929-23.4.el10_2
linux-firmware-whence 20260804-23.2.el10_2 → 20260929-23.4.el10_2
mdadm 4.4-3.el10_2.1 → 4.4-3.el10_2.2
nvidia-gpu-firmware 20260804-23.2.el10_2 → 20260929-23.4.el10_2
openshift-clients 5.0.0-202608132118.p2.g4b0a124.assembly.stream.el10 → 5.1.0-202610311436.p2.g14498e9.assembly.stream.el10
openshift-kubelet 5.0.0-202609111609.p2.gb376ee7.assembly.stream.el10 → 5.1.0-202610291141.p2.g096638b.assembly.stream.el10
openssh 9.9p1-25.el10_2 → 9.9p1-29.el10_2
openssh-clients 9.9p1-25.el10_2 → 9.9p1-29.el10_2
openssh-server 9.9p1-25.el10_2 → 9.9p1-29.el10_2
openssl 1:3.5.8-1.el10_2 → 1:3.5.8-2.el10_2
openssl-libs 1:3.5.8-1.el10_2 → 1:3.5.8-2.el10_2
ose-aws-ecr-image-credential-provider 5.0.0-202607281540.p2.g278e8c0.assembly.stream.el10 → 5.1.0-202610201708.p2.g6951d70.assembly.stream.el10
ose-azure-acr-image-credential-provider 5.0.0-202609151726.p2.g95f0a12.assembly.stream.el10 → 5.1.0-202610260236.p2.gc66a908.assembly.stream.el10
ose-crio-credential-provider 5.0.0-202603041733.p2.g83d4961.assembly.stream.el10 → 5.1.0-202610051813.p2.g83d4961.assembly.stream.el10
ose-gcp-gcr-image-credential-provider 5.0.0-202608040132.p2.g51c3264.assembly.stream.el10 → 5.1.0-202610221628.p2.g05099ac.assembly.stream.el10
passt 0^20251210.gd04c480-6.el10_2 → 0^20251210.gd04c480-7.el10_2
passt-selinux 0^20251210.gd04c480-6.el10_2 → 0^20251210.gd04c480-7.el10_2
pcre2 10.44-1.el10.3 → 10.44-1.5.el10_2
pcre2-syntax 10.44-1.el10.3 → 10.44-1.5.el10_2
podman 7:5.8.2-5.el10_2 → 7:5.8.2-11.el10_2
python3 3.12.14-1.el10_2 → 3.12.15-1.el10_2
python3-libs 3.12.14-1.el10_2 → 3.12.15-1.el10_2
python3-urllib3 1.26.19-4.el10_2 → 1.26.19-4.el10_2.2
rdma-core 61.0-1.el10 → 1:61.0-2.el10_2
rpcbind 1.2.7-3.el10 → 1.2.7-3.el10_2.1
rpm-ostree 2026.2-2.el10_2 → 2026.3-2.el10_2
rpm-ostree-libs 2026.2-2.el10_2 → 2026.3-2.el10_2
rpm-sequoia 1.10.1.1-2.el10 → 1.10.2.1-1.el10_2
samba-client-libs 4.23.5-110.el10_2 → 4.23.5-111.el10_2
samba-common 4.23.5-110.el10_2 → 4.23.5-111.el10_2
samba-common-libs 4.23.5-110.el10_2 → 4.23.5-111.el10_2
selinux-policy 42.1.18-4.el10_2.3 → 42.1.18-4.el10_2.4
selinux-policy-targeted 42.1.18-4.el10_2.3 → 42.1.18-4.el10_2.4
sg3_utils 1.48-7.el10_2.1 → 1.48-7.el10_2.2
sg3_utils-libs 1.48-7.el10_2.1 → 1.48-7.el10_2.2
skopeo 2:1.22.2-5.el10_2 → 2:1.22.2-6.el10_2
sssd 2.12.0-3.el10_2.1 → 2.12.0-3.el10_2.2
sssd-ad 2.12.0-3.el10_2.1 → 2.12.0-3.el10_2.2
sssd-client 2.12.0-3.el10_2.1 → 2.12.0-3.el10_2.2
sssd-common 2.12.0-3.el10_2.1 → 2.12.0-3.el10_2.2
sssd-common-pac 2.12.0-3.el10_2.1 → 2.12.0-3.el10_2.2
sssd-ipa 2.12.0-3.el10_2.1 → 2.12.0-3.el10_2.2
sssd-krb5 2.12.0-3.el10_2.1 → 2.12.0-3.el10_2.2
sssd-krb5-common 2.12.0-3.el10_2.1 → 2.12.0-3.el10_2.2
sssd-ldap 2.12.0-3.el10_2.1 → 2.12.0-3.el10_2.2
sssd-nfs-idmap 2.12.0-3.el10_2.1 → 2.12.0-3.el10_2.2
sssd-proxy 2.12.0-3.el10_2.1 → 2.12.0-3.el10_2.2
sudo 1.9.17-10.p2.el10_2.6 → 1.9.17-10.p2.el10_2.7
tzdata 2026c-1.el10_2 → 2026e-1.el10_2
unbound-anchor 1.24.2-7.el10_2.5 → 1.24.2-7.el10_2.6
unbound-libs 1.24.2-7.el10_2.5 → 1.24.2-7.el10_2.6
vim-data 2:9.1.083-9.el10_2.20 → 2:9.1.083-9.el10_2.22
vim-minimal 2:9.1.083-9.el10_2.20 → 2:9.1.083-9.el10_2.22

Extensions

Full list (0 packages)

Red Hat Enterprise Linux CoreOS base layer: 10.2.20261027-0

OCPBUGS-126621: Select bundled CoreOS base layer: version when COREOS_VERSION is unset #116

View changelog in Markdown or change previous release:

Source code for this page located on github