5.1.0-0.nightly-2026-09-30-065558

Manual Override Applied

This release was manually Rejected.

Reason: Manually rejected by ART - ART-24230

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp/release-5:5.1.0-0.nightly-2026-09-30-065558

Qualifiers (status api):

dtk fips

Failure Labels:

prevent_ec
prevent_rc

Tests:

Blocking jobs
- aggregated-aws-ovn-single-node-upgrade-5.1-micro Failed periodic-ci-openshift-release-main-ci-5.1-e2e-aws-upgrade-ovn-single-node
- aggregated-aws-ovn-upgrade-5.1-micro-fips Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-aws-ovn-upgrade-fips
- aggregated-azure-ovn-upgrade-5.1-micro Failed periodic-ci-openshift-release-main-ci-5.1-e2e-azure-ovn-upgrade
- aggregated-gcp-ovn-rt-upgrade-5.1-major Failed periodic-ci-openshift-release-main-ci-5.1-upgrade-from-stable-5.0-e2e-gcp-ovn-rt-upgrade
- aggregated-hypershift-aks-conformance-5.1 Failed (1 retry) periodic-ci-openshift-hypershift-release-5.1-periodics-e2e-azure-aks-ovn-conformance
  - Attempt 1 Failed
  - Attempt 2 Failed
- aggregated-hypershift-ovn-conformance-5.1 Failed (2 retries) periodic-ci-openshift-hypershift-release-5.1-periodics-e2e-aws-ovn-conformance
- aws-ovn-serial-1of2 Failed (1 retry) periodic-ci-openshift-release-main-nightly-5.1-e2e-aws-ovn-serial-1of2
  - Attempt 1 Failed
  - Attempt 2 Failed
- aws-ovn-serial-2of2 Failed (1 retry) periodic-ci-openshift-release-main-nightly-5.1-e2e-aws-ovn-serial-2of2
  - Attempt 1 Failed
  - Attempt 2 Failed
- aws-ovn-techpreview Failed (1 retry) periodic-ci-openshift-release-main-ci-5.1-e2e-aws-ovn-techpreview
  - Attempt 1 Failed
  - Attempt 2 Failed
- aws-ovn-techpreview-serial-1of3 Failed (1 retry) periodic-ci-openshift-release-main-ci-5.1-e2e-aws-ovn-techpreview-serial-1of3
  - Attempt 1 Failed
  - Attempt 2 Failed
- aws-ovn-techpreview-serial-2of3 Failed (1 retry) periodic-ci-openshift-release-main-ci-5.1-e2e-aws-ovn-techpreview-serial-2of3
  - Attempt 1 Failed
  - Attempt 2 Failed
- aws-ovn-techpreview-serial-3of3 Failed (1 retry) periodic-ci-openshift-release-main-ci-5.1-e2e-aws-ovn-techpreview-serial-3of3
  - Attempt 1 Failed
  - Attempt 2 Failed
- install-analysis-all Failed periodic-ci-openshift-release-main-nightly-5.1-install-analysis-all
- metal-ipi-ovn-ipv4 Failed (1 retry) periodic-ci-openshift-release-main-nightly-5.1-e2e-metal-ipi-ovn-ipv4
  - Attempt 1 Failed
  - Attempt 2 Failed
- metal-ipi-ovn-ipv6 Failed (1 retry) periodic-ci-openshift-release-main-nightly-5.1-e2e-metal-ipi-ovn-ipv6
  - Attempt 1 Failed
  - Attempt 2 Failed
- overall-analysis-all Failed (2 retries) periodic-ci-openshift-release-main-nightly-5.1-overall-analysis-all
Informing jobs
- aws-console Failed periodic-ci-openshift-release-main-nightly-5.1-console-aws
- aws-control-plane-machine-set-operator Failed periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-5.1-periodics-e2e-aws
- aws-csi Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-aws-csi
- aws-ovn Failed periodic-ci-openshift-release-main-ci-5.1-e2e-aws-ovn
- aws-ovn-cgroupsv2 Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-aws-ovn-cgroupsv2
- aws-ovn-fips Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-aws-ovn-fips
- aws-ovn-single-node Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-aws-ovn-single-node
- aws-ovn-single-node-csi Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-aws-ovn-single-node-csi
- aws-ovn-single-node-serial Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-aws-ovn-single-node-serial
- aws-ovn-single-node-techpreview Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-aws-ovn-single-node-techpreview
- aws-ovn-single-node-techpreview-serial Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-aws-ovn-single-node-techpreview-serial
- aws-ovn-single-node-upgrade-major Failed periodic-ci-openshift-release-main-nightly-5.1-upgrade-from-stable-5.0-e2e-aws-upgrade-ovn-single-node
- aws-ovn-upgrade-5.1-micro-fips-no-nat-instance Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-aws-ovn-upgrade-fips-no-nat-instance
- aws-ovn-upgrade-out-of-change Failed periodic-ci-openshift-release-main-ci-5.1-e2e-aws-ovn-upgrade-out-of-change
- aws-upi Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-aws-ovn-upi
- azure-control-plane-machine-set-operator Failed periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-5.1-periodics-e2e-azure
- azure-csi Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-azure-csi
- azure-ovn Failed periodic-ci-openshift-release-main-ci-5.1-e2e-azure-ovn
- azure-ovn-serial Failed periodic-ci-openshift-release-main-ci-5.1-e2e-azure-ovn-serial
- azure-ovn-techpreview Failed periodic-ci-openshift-release-main-ci-5.1-e2e-azure-ovn-techpreview
- azure-ovn-techpreview-serial-1of2 Failed periodic-ci-openshift-release-main-ci-5.1-e2e-azure-ovn-techpreview-serial-1of2
- azure-ovn-techpreview-serial-2of2 Failed periodic-ci-openshift-release-main-ci-5.1-e2e-azure-ovn-techpreview-serial-2of2
- azure-ovn-upgrade-out-of-change Failed periodic-ci-openshift-release-main-ci-5.1-e2e-azure-ovn-upgrade-out-of-change
- cnv Failed periodic-ci-openshift-release-main-cnv-nightly-5.1-deploy-azure-kubevirt-ovn
- driver-toolkit Failed (1 retry) periodic-ci-openshift-release-main-nightly-5.1-e2e-aws-driver-toolkit driver-toolkit
  - Attempt 1 Failed
  - Attempt 2 Failed
- driver-toolkit-rhel10 Failed (1 retry) periodic-ci-openshift-release-main-nightly-5.1-e2e-aws-driver-toolkit-10 driver-toolkit
  - Attempt 1 Failed
  - Attempt 2 Failed
- fips-scan Failed (1 retry) periodic-ci-openshift-release-main-nightly-5.1-fips-payload-scan fips
  - Attempt 1 Failed
  - Attempt 2 Failed
- gcp-control-plane-machine-set-operator Failed periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-5.1-periodics-e2e-gcp
- gcp-ovn Failed periodic-ci-openshift-release-main-ci-5.1-e2e-gcp-ovn
- gcp-ovn-csi Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-gcp-ovn-csi
- gcp-ovn-rt Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-gcp-ovn-rt
- gcp-ovn-serial Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-gcp-ovn-serial
- gcp-ovn-techpreview Failed periodic-ci-openshift-release-main-ci-5.1-e2e-gcp-ovn-techpreview
- gcp-ovn-techpreview-serial-1of2 Failed periodic-ci-openshift-release-main-ci-5.1-e2e-gcp-ovn-techpreview-serial-1of2
- gcp-ovn-techpreview-serial-2of2 Failed periodic-ci-openshift-release-main-ci-5.1-e2e-gcp-ovn-techpreview-serial-2of2
- gcp-ovn-upgrade-5.1-major Failed periodic-ci-openshift-release-main-ci-5.1-upgrade-from-stable-5.0-e2e-gcp-ovn-upgrade
- gcp-ovn-upgrade-micro Failed periodic-ci-openshift-release-main-ci-5.1-e2e-gcp-ovn-upgrade
- hypershift-kubevirt-ovn-conformance-5.1 Failed periodic-ci-openshift-hypershift-release-5.1-periodics-e2e-azure-kubevirt-ovn
- metal-ipi-ovn-dualstack Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-metal-ipi-ovn-dualstack
- metal-ipi-ovn-dualstack-techpreview Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-metal-ipi-ovn-dualstack-techpreview
- metal-ipi-ovn-ipv6-techpreview Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-metal-ipi-ovn-ipv6-techpreview
- metal-ipi-ovn-serial Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-metal-ipi-ovn-serial-ipv4
- metal-ipi-ovn-serial-virtualmedia-1of2 Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-metal-ipi-ovn-serial-virtualmedia-1of2
- metal-ipi-ovn-serial-virtualmedia-2of2 Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-metal-ipi-ovn-serial-virtualmedia-2of2
- metal-ipi-ovn-techpreview Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-metal-ipi-ovn-techpreview
- metal-ipi-ovn-upgrade Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-metal-ipi-ovn-upgrade
- metal-ipi-ovn-upgrade-major Failed periodic-ci-openshift-release-main-nightly-5.1-upgrade-from-stable-5.0-e2e-metal-ipi-ovn-upgrade
- metal-ipi-serial-ipv6 Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-metal-ipi-serial-ovn-ipv6
- metal-ipi-serial-ovn-dualstack Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-metal-ipi-serial-ovn-dualstack
- metal-ipi-upgrade-ovn-ipv6 Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-metal-ipi-upgrade-ovn-ipv6
- metal-ipi-upgrade-ovn-ipv6-major Failed periodic-ci-openshift-release-main-nightly-5.1-upgrade-from-stable-5.0-e2e-metal-ipi-upgrade-ovn-ipv6
- metal-ovn-single-node-recert-cluster-rename Failed periodic-ci-openshift-release-main-nightly-5.1-metal-ovn-single-node-recert-cluster-rename
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-5.1-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-5.1-periodics-e2e-aws-ovn-ocp-conformance-serial
- ocp-perfscale Failed periodic-ci-openshift-eng-ocp-perfscale-main-aws-5.1-nightly-x86-payload-control-plane-6nodes
- openshift-dedicated-gcp-conformance Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-osd-ccs-gcp
- ovn-proxy Failed (1 retry) periodic-ci-openshift-release-main-nightly-5.1-e2e-aws-ovn-proxy
  - Attempt 1 Failed
  - Attempt 2 Failed
- ovn-single-node-live-iso Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-metal-ovn-single-node-live-iso
- telco5g Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-telco5g
- telcov10n-metal-single-node-spoke Failed periodic-ci-openshift-kni-eco-ci-cd-main-nightly-5.1-telcov10n-metal-single-node-spoke
- telcov10n-metal-single-node-spoke-kpis Failed periodic-ci-openshift-kni-eco-ci-cd-main-nightly-5.1-telcov10n-metal-single-node-spoke-kpis
- tls-scan Failed periodic-ci-openshift-release-main-nightly-5.1-tls-scan
- upgrade-analysis-all Failed periodic-ci-openshift-release-main-nightly-5.1-upgrade-analysis-all
- vsphere-ovn-csi Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-vsphere-ovn-csi
- vsphere-ovn-serial Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-vsphere-ovn-serial
- vsphere-ovn-techpreview Failed periodic-ci-openshift-release-main-nightly-5.1-e2e-vsphere-ovn-techpreview
- vsphere-ovn-upgrade-major Failed periodic-ci-openshift-release-main-ci-5.1-upgrade-from-stable-5.0-e2e-vsphere-ovn-upgrade
- vsphere-ovn-upgrade-micro Failed periodic-ci-openshift-release-main-ci-5.1-e2e-vsphere-ovn-upgrade
Async jobs
- claude-payload-agent Succeeded periodic-ci-openshift-release-main-claude-payload-agent

Upgrades from:

5.1.0-0.nightly-2026-09-28-053718 (changes) - F F F F F F F F F F
5.0.0-0.nightly-2026-09-28-094035 - F F F F F F

Loading changelog, this may take a while ...

Changes from 5.0.0-0.nightly-2026-09-28-094035

Created: 2026-09-30 06:58:58 +0000 UTC

Image Digest: sha256:870ff420f92bb5cc115553fcc162465ced6de82ddce8ed95201db3c7dce0da92

Components

Kubectl 1.36.2
Kubernetes 1.36.4
Kubernetes Tests 1.36.2
Red Hat Enterprise Linux CoreOS upgraded from 10.2.20260924-0 to 10.2.20260928-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
AWSServiceLBNetworkSecurityGroup (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AzureWorkloadIdentity (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
BootImageSkewEnforcement (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
SigstoreImageVerification (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
SigstoreImageVerificationPKI (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereMultiDisk (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereMultiNetworks (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VolumeGroupSnapshot (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
OpenShiftPodSecurityAdmission (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
SELinuxMount (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
TLSAdherence (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
VSphereMultiVCenterDay2 (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
EgressIPNodeSelector (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ExternalOIDCAsWebhook (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
GomaxprocsInjection (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
IngressControllerLBSecurityGroupsAWS (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ManagedBootImagesAWSCAPI (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
OLMLifecycleAndCompatibility (0 tests)	Disabled	Enabled	Disabled	Enabled	Disabled	Enabled	Disabled	Disabled (Changed)
OVNKubernetesUplinkMode (0 tests)			Enabled (New)	Enabled (New)
UnifiedClusterManagedDNSAndLB (0 tests)				Enabled (New)
VSpherePerComponentScopedCreds (0 tests)			Enabled (New)	Enabled (New)

Rebuilt images without code change

apiserver-network-proxy git d6ec9243 sha256:465c8f97cbafbd0b3445912d3d09960e8ce412321ddbf8438ff28b79dea6ee73
aws-pod-identity-webhook git 0d33a459 sha256:2a60a0570e6f80f1126b07db37db5eeef0bee56ed9eb7de92d439b30fed778d0
cluster-openshift-controller-manager-operator git 8da2f1fc sha256:fa7e919c00517e5a2133633e5d5d30e852ae31ca9e5e7ebed4e8f402f2c90568
cluster-update-keys git 9607604d sha256:f53a1ebd9d562681881af017cddcf2431adc5978b4cc56600037f6518fbe897b
csi-external-attacher git 3fd668b3 sha256:7a9d34cc9e4dfa9f47ecd7eceb76641498ed93b8be17460f8ab6978ada738681
csi-external-provisioner git 7ff338c9 sha256:479d431534832a351cb4d953635f7eec9b2856e19b2b02296f60f831d1253cfe
csi-external-resizer git 14aa7028 sha256:239479aba4ac6c8aea78ad33619bdd78dd5ce54810b10484149b560267b8b63f
csi-external-snapshotter git a019d1a9 sha256:94a21644fbeab0c26903582f4aa4f17c03bf8e82fd20289d4606bba5b013217e
csi-node-driver-registrar git 5766960d sha256:d648529c509b90efc6fc2fd26618ddd55687093444562342a547b176587d07a8
csi-snapshot-controller git a019d1a9 sha256:dde914f0d51ffba758146add661a898c3d0b2cab15697808719a90e6fc9f8e1b
driver-toolkit git b63b175a sha256:94634686e890e9204ed9daffb8f2cad13cb93b087ed7ef5bf1176c42d73463c1
driver-toolkit-10 git b63b175a sha256:23ef34d7c5ac1af757136623c73635664103a1b768c1923eb6dfd92dfe858ed1
gcp-cloud-controller-manager git 51c32646 sha256:5d728cfeb94efbf41fc41bc514049e93e0d888b6ada6f88e44312b1a44352741
gcp-workload-identity-federation-webhook git 4501ff2f sha256:d89208797053571ae88902d0fc785d845c29b51349d1ca070ae2d0cb8f9a2818
ibm-cloud-controller-manager git 11bc35dd sha256:253a51effa5fe0096b8b0ceca875be542f88a77637cbb33bfee2f3d53cec3021
ironic-machine-os-downloader git f8e41b2e sha256:ce42034e5775d441c53f7c402108ca6cb2d29ecf82854f5df357946d3556b363
ironic-static-ip-manager git 486a0418 sha256:ee14ae4ccce8e0cc8d16e9d8c9edfa040f564397b7201ed2acd80bb48fdfcd7b
nutanix-machine-controllers git 249b7c8e sha256:38738b2af2ab61af0483d6fb0521ae3c6f9e9d9992cba0b018169ecbac744f25
powervs-block-csi-driver-operator git f90431bf sha256:b752ee1beb2e5310f79a8d8d02e4795b395a9d0ab35ba15c52a035656f6ec828
service-ca-operator git ed872ba1 sha256:8cce6bc612c547ac6669ff424948d8f0e54cace7f249199f17ecd53dbee2d011
vsphere-cloud-controller-manager git eb29de19 sha256:592f8166262e3596ef770802e77ec3691feb4b6bf31b5e2fe9542a0c4d74e4a9
vsphere-problem-detector git 14a2d338 sha256:60898152048a2128ba0fd85f8628884f0bd7fe03ec6304cf5fdcdffe26492f82

agent-installer-api-server

NO-ISSUE: [master] Bump OCP versions: 4.22, 4.19, 4.20, 4.21 #11004
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #10957
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #10958
NO-ISSUE: [master] Bump OCP versions: 5.0, 4.18, 4.19, 4.13 #10980
MGMT-25431: CVE-2026-84445 Bump google.golang.org/grpc to v1.82.2 through indirect dependency conversion #10975
MGMT-24967: Static-IP iSCSI Boot-from-SAN Support in Assisted Installer #10925
OCPBUGS-115550: Allow agent-installer invoker to have a suffix #10968
MGMT-25123: create endpoint for listing OVE images #10933
MGMT-25355: Migrate to harness-agnostic agent configuration layout #10966
ACM-38075: Assisted Service Agent controller does not approve day-2 CSRs for worker nodes provisioned with pre-existing BMHs via ClusterInstance scale-out #10944
NO-ISSUE: [master] Bump OCP versions: 4.21, 5.0, 4.16, 4.14, 4.22, 4.20, 4.19 #10967
MGMT-24854: Cilium CNI is not supported on OCP 4.22 #10819
MGMT-25367: consider imageType when selecting OpenShift version #10917
MGMT-25406: Add OpenShift-compatible CIDR length validation #10948
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #10946
NO-ISSUE: [master] Bump OCP versions: 4.21, 4.22, 4.20 #10942
ACM-41555: Enable PQC in Dockerfiles #10901
MGMT-25131: When getting the release image for a cluster we should always prioritize cluster.OcpReleaseImage if it’s set #10938
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #10941
NO-ISSUE: [master] Bump OCP versions: 5.0 #10937
APPSRE-14688: remove legacy monitoring.coreos.com/v1 ServiceMonitors #10931
NO-ISSUE: [master] Bump OCP versions: 4.17, 5.0 #10924
OCPBUGS-120683: Fix NUMAResourcesOperator CR name so it can be applied #10910
NO-ISSUE: Update operator bundle channel to ocm-5.1 #10867
OCPBUGS-120675: added missing subscription name for lvms-operator #10909
AGENT-1529: Add ovnKubernetesConfig to install-config definition #10430
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #10912
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.19, 4.20, 4.16, 4.21 #10907
NO-ISSUE:Bump go.opentelemetry.io/otel to v1.44.0 in master #10869
MGMT-25130: assisted-service and assisted-image-service NetworkPolicy ingress has no source restriction (any pod in any namespace can reach them directly) #10906
NO-ISSUE: Modify Konflux YAMLs to ocm-5.1 #10874
MGMT-25139: Allow setting os-stream on both clusters and infraenvs #10742
MGMT-20398: Force status on bmh after install #10606
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #10884
MGMT-24877: Improve sensitive credential redaction #10857
OCPBUGS-29975: Allow multiple machine networks for UMN clusters #10817
MGMT-21334: Don’t check ImageSetRef for installed clusters #10854
NO-ISSUE: Add missing Close() #10856
MGMT-24693: fix e2e-ai-operator-disconnected-capi #10806
ACM-42573: Assisted services’ networkpolicy doesn’t work for external image service and local image registry in disconnected environment #10850
MGMT-25066: Add continuous node label reconciliation in InfraEnv controller #10813
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #10829
MGMT-25065: Add InfraEnv to Agent node label propagation #10812
NO-ISSUE: Add same-namespace egress for image-service to assisted-service #10816
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #2330
NO-ISSUE: migrate Renovate config #2363
MGMT-25156: Fix CVE-2026-17106 #2328
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #2339
OCPBUGS-115550: Allow agent-installer invoker to have a suffix #2341
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #2326
ACM-41555: Enable PQC in Dockerfiles #2307
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #2309
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #2304
MGMT-24885: Harden command construction and credential handling #2275
NO-ISSUE: Add approver bluesort #2286
NO-ISSUE: Modify Konflux YAMLs to ocm-5.1 #2281
NO-ISSUE: Update module github.com/golangci/golangci-lint to v2.13.2 #2285
NO-ISSUE: Update module github.com/golangci/golangci-lint to v2.13.1 #2273
NO-ISSUE: Update module github.com/golangci/golangci-lint to v2.13.0 #2271
Full changelog

agent-installer-node-agent

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #1635
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #1653
NO-ISSUE: Refresh RPM lockfiles #1590
OCPBUGS-106189: Assisted installer fails to disambiguate machines #1625
ACM-41555: Enable PQC in Dockerfiles #1622
MGMT-20398: Don’t start main agent until ironic reports it’s ready #1518
NO-ISSUE: Modify Konflux YAMLs to ocm-5.1 #1602
NO-ISSUE: Update module github.com/golangci/golangci-lint to v2.13.1 #1600
NO-ISSUE: Update module github.com/golangci/golangci-lint to v2.13.0 #1597
Full changelog

agent-installer-ui

Update OpenShift version for OVE (#4084) #4084
Bump ip-address from 10.4.0 to 10.5.1 (#4083) #4083
Bump undici from 7.29.0 to 7.30.0 (#4082) #4082
chore(deps): update konflux references (#4072) #4072
remove disconvering word from StaticIP for Disconnected mode (#4079) #4079
chore(deps): update dependency ajv to ^8.20.0 (#4077) #4077
Bump immutable from 3.8.3 to 3.8.4 (#4078) #4078
chore(deps): update dependency @types/node to ^24.13.6 (#4076) #4076
OCPBUGS-123716: [Above the sea UI] The rendezvous IP must match one of the defined static IPs (#4071) #4071
Add Proxy and NTP configurations (#4068) #4068
Above the sea - hide pull secret field when it’s already been set (#4067) #4067
chore(deps): update dependency brace-expansion to ^5.0.12 (#4063) #4063
chore(deps): update konflux references (#4061) #4061
chore(deps): update dependency @types/node to ^24.13.5 (#4062) #4062
Add Single-Stack, Increase ImageSize Label and show LVMS Label (#4054) #4054
fix(deps): update typescript type definitions (non-major) (#4022) #4022
OCPBUGS-121378: Do not show IRI custom manifests in the disconnected UI (#4048) #4048
chore(deps): update dependency axios to ^1.20.0 (#4047) #4047
chore(deps): update dependency dompurify to ^3.4.15 (#4046) #4046
Bump js-yaml from 4.3.1 to 4.3.2 (#4034) #4034
Bump react-router from 7.18.1 to 7.18.2 (#4036) #4036
OCPBUGS-115122: Show IPv6 Technology Preview badge in Subnets dropdown for single-cluster only (#4013) #4013
Bump vitest from 3.2.6 to 4.1.11 (#4035) #4035
Bump joi from 17.13.4 to 17.13.7 (#4033) #4033
OCPBUGS-121366: Move IPv6 Technology Preview badge out of the header (#4027) #4027
Remove stale OCM_REFRESH_TOKEN code (#4012) #4012
chore(deps): update dependency postcss to ^8.5.28 (#4021) #4021
chore(deps): update konflux references (#4020) #4020
Change reuse SSH key label in OVE (#4018) #4018
Bump qs from 6.15.3 to 6.16.0 (#4011) #4011
Bump fflate from 0.4.8 to 0.4.9 (#4017) #4017
MGMT-25128: Assisted Installer UI (above-the-sea) adjustment to 4.22 GA (#3996) #3996
Bump fast-uri from 3.1.5 to 3.1.7 (#4010) #4010
Bump browserslist from 4.28.2 to 4.28.8 (#4007) #4007
Bump postcss-selector-parser from 7.1.1 to 7.1.5 (#4006) #4006
Add LVM as an operator for OVE (#4001) #4001
Allow LSO to be selected as a standalone operator (#4000) #4000
chore(deps): update dependency yup to ^1.7.1 (#3999) #3999
chore(deps): update dependency js-cookie to ^3.0.8 (#3998) #3998
Update OWNERS file (#3989) #3989
NO-ISSUE: Add Yarn resolutions for js-cookie and basic-ftp (#3985) #3985
Tweak boot instructions for disconnected (#3968) #3968
MGMT-24639: Choosing 5 masters on hosts page instead of 3 that was configured on cluster details causing the Hosts page stuck with no error/warning (#3942) #3942
Hardcode OVE openshift version from 4.21 to 4.21.27 (#3976) #3976
Resolve console warnings/errors (#3967) #3967
Add rule for creating/editing forms (#3962) #3962
chore(deps): update dependency ws to ^8.21.3 (#3974) #3974
chore(deps): update dependency dompurify to ^3.4.14 (#3973) #3973
Resolve duplicate ‘useFeature’ issue (#3969) #3969
MGMT-24493: Allow HTTPS proxy for Discovery ISO (#3777) #3777
MGMT-24494: Add exclusive NTP sources to the Add hosts discovery ISO … (#3934) #3934
MGMT-24202 | [Staging] [UI] - Air-gapped -Technology Preview badge placement is inconsistent (should appear at end of line) (#3965) #3965
Fix BasicStep Form import (#3966) #3966
NO-ISSUE: Improve the /ocm folder structure (#3817) #3817
chore(deps): update dependency postcss to ^8.5.26 (#3963) #3963
chore(deps): update dependency sanitize-html to ^2.17.7 (#3964) #3964
Full changelog

agent-installer-utils

OCPBUGS-111468: prefix-validate URLs used in commands #349
OCPBUGS-111479: Quote variable expansion in skopeo inspect invocation #348
OCPBUGS-63475: Refresh rendezvous IP selection list #345
OCPBUGS-123720: Fix agent TUI timeout #346
AGENT-1577: Use master branch of appliance as image builder #333
OCPBUGS-114020: Use branch 5.1 for Konflux builds #344
AGENT-1573: Add release-5.1 config for ISOBuilder #327
Full changelog

agentic-skills

GITOPS-10499: Add Argo knowledge skill #38
NO-JIRA: resolve skill-scanner findings for CI eval job #49
NO-ISSUE: fix: add compatibility attribute to the product-lifecycle skill #50
OBSINTA-1609: cluster-troubleshoot skill rename tools to scripts #46
OTA-2024, OTA-2070: Add eval test cases for cluster-update skills #34
Full changelog

aws-cloud-controller-manager

UPSTREAM-SYNC: Merge https://github.com/kubernetes/cloud-provider-aws:master (853eb04) into main #162
Full changelog

aws-cluster-api-controllers

OCPBUGS-128249: UPSTREAM: <carry>: remove redundant GitHub summary verification #658
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #636
NO-JIRA: UPSTREAM: <drop>: update manifests-gen #657
NO-JIRA: fix(make): verify generated summary from pull request revision #656
🌱 NO-JIRA: UPSTREAM: <carry>: Remove upstream .github files unused in OpenShift CI #632
Full changelog

aws-ebs-csi-driver

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #331
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, gcp-pd-csi-driver-operator, openstack-cinder-csi-driver-operator

OCPBUGS-88301: Remove redundant delete role verb #620
OCPBUGS-113538: Enable SELinuxMount tests #605
STOR-3074: Bump OLM metadata to 5.1 #627
OCPBUGS-112272: node ServiceMonitor serverName uses guest namespace on HyperShift #603
OCPBUGS-115269: openstack-manila: Consume CA cert from CCO secret #617
NO-JIRA: Add reference to cluster-storage-operator in AGENTS.md #616
STOR-3090: Enable pod-delete-after-umount CSI suite for driver OCP manifests #596
OCPBUGS-120667: fix(gcp-pd): don’t apply guest-cluster resources against the management cluster on HyperShift #618
OCPBUGS-105410: Remove MutableCSINodeAllocatableCount featuregate #600
GCP-1074: feat(gcp-pd): enable HyperShift support for GCP PD CSI driver operator #601
OCPBUGS-111088: Replace deprecated pod.spec.service account #604
OCPBUGS-105392: Add proxy hook for HyperShift CSI driver controller deployments #594
Full changelog

aws-karpenter-provider-aws

OCPBUGS-85090: Align simulated with actual allocatable resources #46
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #44
AUTOSCALE-904: Add agentic SDLC artifacts to aws-karpenter-provider-aws #41
OCPBUGS-85085: default max-pods to 250 for Custom AMI family #40
Full changelog

aws-kms-encryption-provider

OCPBUGS-124534: Bump grpc-go to v1.83.2 #55
Full changelog

aws-machine-controllers

OCPBUGS-126179: Fixed dedicated host tests to check for machineset to exist #217
Full changelog

aws-node-termination-handler

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #15
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-105320: skip public ip check for azure stack #203
Full changelog

azure-cluster-api-controllers

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #413
Full changelog

azure-disk-csi-driver

OCPBUGS-111076: UPSTREAM: 3754: chore: upgrade Azure cloud provider lib- #180
Full changelog

azure-file-csi-driver

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #167
Full changelog

azure-kms-encryption-provider

OCPBUGS-124531: Bump grpc-go to v1.83.2 #65
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #64
OCPSTRAT-3549: support sovereign Managed HSM endpoints #54
Full changelog

azure-machine-controllers

OCPBUGS-105398: refactor: remove AzureWorkloadIdentity feature gate #207
Full changelog

azure-service-operator

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #47
Full changelog

azure-workload-identity-webhook

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #69
OCPBUGS-123198: Bump golang.org/x/net to v0.53.0 to address CVE-2026-33814 #70
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-128431: Go HTTP/2: Denial of Service via malformed PRIORITY_UPDATE frame - CVE-2026-33814 #110
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #107
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-127240: gcp: restrict global KMS location check to defaultMachinePlatform #10907
OCPBUGS-115159: aws: provision dedicated IAM resources for edge compute pool #10836
OKD-194: Add OKD cincinnati as the default update service for OKD #10834
OCPBUGS-126706: azure: allow isolated Ebdsv5/Ebsv5 VM families #10888
OCPBUGS-115550: use different INSTALL_INVOKER for unconfigured ignition #10848
OCPBUGS-99762: retry Azure bootstrap ignition upload #10835
OCPBUGS-90536: openstack: Guard network resource names on os_net_id being defined #10639
OCPBUGS-123770: Inject the pull-secret as podman secret in the agent-installer-ui container #10882
OCPBUGS-112483: use api-int record for ignition host when using externally managed LB and DNS #10860
no-jira: aws: fetch instance type on demand instead of listing all #10851
OCPBUGS-61892: fix swap disk nil-panic and block swap on control plane #10859
OCPBUGS-59743: azure: reject data disks on Azure Stack Hub #10823
OCPBUGS-86133: dont allow duplicate failure domains and fields #10741
OCPBUGS-91640: Warn about ignored install-config fields in ABI #10646
OCPBUGS-114375: azure: skip AppendVarPartition when DiskSetup provides a user-defined /var mount #10818
OCPBUGS-115187: Gather master only from primary IP on baremetal #10838
OCPBUGS-114882: OCPBUGS-112662: GCD load balancer health-check firewall ranges #10850
SPLAT-2923: vsphere: retry and throttle vCenter lookups during UPI VM creation #10847
OCPBUGS-59521: azure: fixes when setting DiskEncryptionSet on data disks #10776
CORS-4550: bump openshift api for gcd feature gate #10775
OCPBUGS-59520: azure: require storageAccountType when managedDisk is specified #10805
AGENT-626: Allow UserManaged LoadBalancer on baremetal/vsphere platforms #10558
OCPBUGS-59522: azure: reject securityEncryptionType on data disks #10777
OCPBUGS-45804: Update timeout in GetMarketplaceImage to 5 minutes #10767
CORS-4441: Bump Azure Marketplace Images #10764
OCPBUGS-105510: images: add BUILD_VERSION arg #10781
CORS-4308: networking: enforce NetworkObservabilityInstall feature gate #10774
MULTIARCH-6274: agent: Enable platform external s390x #10588
OCPBUGS-54305: Power VS: Get permitted network from user #9607
OSASINFRA-4359: Bump CAPO in openshift/installer #10726
OCPBUGS-60993: Enrich IBI config image proxy NoProxy with cluster networks #10649
CORS-4308: Enable Network Observability during installation #10382
OPNET-781: Add BGP VIP management support #10718
Full changelog

baremetal-machine-controllers

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #278
OCPBUGS-123730: Bump golang.org/x/net to v0.58.0 to address CVE-2026-33814 #279
OCPBUGS-112338: Fix race that can provision multiple hosts #275
Full changelog

baremetal-operator

OCPBUGS-120721: Bump gophercloud to v2.15.0 #527
OCPBUGS-121877: pull in gophercloud fix for fast inspection #525
OCPBUGS-122043, OCPBUGS-91736: Merge upstream #524
NO-ISSUE: Merge upstream 2026-09-03 #523
NO-ISSUE: Restore .golangci.yaml downstream #522
Full changelog

baremetal-runtimecfg

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #415
OCPBUGS-98258: Cloud Platforms: Filter out node’s own IP from Upstreams #399
OCPBUGS-86571: node-ip: wait for both address families on dual-stack clusters #391
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-60768: properly indent multiline node messages in upgrade status output #2341
OCPEDGE-2416: Add oc adm transition topology command for SNO to HA transitions #2295
OCPBUGS-126457: [oc create route edge –help] Typo in WildcardPolicy option description #2409
OCPBUGS-122354: Fix inconsistent terminology in oc set probe help example #2404
OCPBUGS-122036: docs(env): add deployment example for configmap import in oc set env help #2401
NO-JIRA: README: Mention gcc as an oc dependency #2402
OCPBUGS-122005: Add IDMS support to oc image info #2397
OCPBUGS-114015: Added deployment example to oc set env help command #2389
NO-JIRA: Move to openshift/osincli #2386
NO-JIRA: Fix oc builds on Mac OS X Apple Silicon machines #2246
Full changelog

cloud-credential-operator

CCO-772: ccoctl - Add set-upgradeable-to command #1105
CCO-775: ccoctl Create custom roles before identity bindings #1104
CCO-771: Add ccoctl apply secrets command for AWS, Azure and GCP #1095
OCPBUGS-17664: Improve error messages for SCP-denied IAM operations #1084
CCO-849: bump go toolchain to 1.26.5 to resolve snyk complaints #1065
OCPBUGS-112282: In testing skip pod-identity-webhook checks on external platform #1085
Full changelog

cloud-network-config-controller

OCPBUGS-105398: refactor: remove Azure workload identity feature gate #266
OCPBUGS-112564: Fix CVE-2026-41178 - bump go.opentelemetry.io/otel to v1.44.0 #262
Full changelog

cluster-authentication-operator

CNTRLPLANE-4402: implement new External OIDC architecture under ExternalOIDCAsWebhook feature gate #1002
OCPBUGS-122888: Add high contrast support to oauth templates #999
CNTRLPLANE-3237: bump library-go to get the new KMS plugin deployment strategy #1004
OCPBUGS-107949: fix CVE-2026-41178 by updating otel to v1.44.0 #978
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2478 #1006
OPRUN-4768: bump openshift/api #1005
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2463 #997
OCPBUGS-114428: Update build-machinery-go vendor dependency #991
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2439 #987
CNTRLPLANE-3237: pick https://github.com/openshift/library-go/pull/2449- #2287 #985
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2451 #984
CNTRLPLANE-3237: kms: wire EncryptionConfigurationComputer into encryption controllers #983
NO-JIRA: Bump library-go #977
CNTRLPLANE-3237: kms: wire preflight deployer #975
NO-JIRA: Update library-go to get latest changes #976
NO-JIRA: bump library-go changes #974
NO-JIRA: update KMS tests with bump library-go changes #969
Full changelog

cluster-autoscaler

AUTOSCALE-898: Add agentic SDLC files #437
Full changelog

cluster-autoscaler-operator

AUTOSCALE-899: add claude and contributing files #399
OCPBUGS-111092: update version to properly detect errors #395
OCPBUGS-105277: implement startupTaints #383
Full changelog

cluster-baremetal-operator

OCPBUGS-127132: Pass WATCH_NAMESPACE to image-customization #666
OCPBUGS-54957: Remove recreate strategy from BMO deployment #640
Metal-1833: Add attach_non_bootable_iso OTE test #617
OCPBUGS-115207: Make HostPath VolumeMounts ReadOnly for image customization container #658
OCPBUGS-86888: Fix IDMS YAML serialization for oc image extract #645
METAL-1833: Add bmo_validations and ncsi_reject_poweroff OTE test #618
OCPBUGS-115067: Use bcrypt DefaultCost for Ironic passwords #650
OCPBUGS-114433: Increase firmware e2e timeouts and add HPE Mellanox NIC bastion mapping #649
OCPQE-32100: Add batched firmware update tests (bmc+bios+nic) #643
OCPBUGS-105610: drop IRONIC_INSECURE from BMO #642
Full changelog

cluster-bootstrap

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #149
OCPBUGS-114428: Update build-machinery-go vendor dependency #146
CNTRLPLANE-3717: Add Agentic SDLC context files #133
CNF-23048: Migrate away from deprecated ioutil #123
Full changelog

cluster-capi-controllers

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #309
NO-JIRA: UPSTREAM: <carry>: remove redundant GitHub summary verification #313
NO-JIRA: UPSTREAM: <drop>: update manifests-gen #312
OCPCLOUD-1501: allow CAPI manager to patch Nodes #311
OCPCLOUD-1501: add OpenShift CAPI manager local cluster RBAC #310
Full changelog

cluster-capi-operator

NO-JIRA: Update actuator testutils builder paths #683
OCPBUGS-128356: Remove unnecessary ClusterOperator test status update #680
OCPBUGS-127467: Pass original TLSProfileSpec to security profile watcher #677
NO-JIRA: use capi 1.13/capv 1.16 imports #675
NO-JIRA: Bump linter to v2.13.2 #674
OCPCLOUD-1501: use projected tokens for management kubeconfig #669
OCPBUGS-100155: fix flaky MachineSet sync test by atomically verifying InfraTemplate #647
OCPBUGS-114670: fix(capi2mapi): normalize empty SSHKeyName to nil for MAPI AWS conversion #659
OCPBUGS-115197: machinesync: preserve Synchronized condition lastTransitionTime in CAPI-to-MAPI sync #656
NO-JIRA: Skip CAPI IPAM test on MicroShift #661
OCPCLOUD-3557: split capi-controllers and machine-api-migration #622
NO-JIRA: port OTP CAPI tests to OTE framework #627
OCPBUGS-105850: skip Cluster API Machine Management tests on External topology #646
NO-JIRA: embed transformer YAML so go mod vendor copies it #657
OCPCLOUD-3442: Migrate four controllers to per-controller condition reporting #577
NO-JIRA: Fix flaky CI unit tests: reduce parallelism #645
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-111416: Moved node sync job creation from manifest to operator controller #504
OCPBUGS-105385: Bump cloud-provider-aws to fix NLB e2e occasional timeout failures #503
Full changelog

cluster-config-api

OCPBUGS-126808: Enable OLMLifecycleAndCompatibility by default in version 5+ #3045
NE-2913: Remove HAProxy 2.8 #3048
CNTRLPLANE-4402: add ExternalOIDCAsWebhook feature gate #3043
OCPEDGE-3079: UnifiedClusterManagedDNSAndLB FeatureGate #3054
OCPBUGS-115007: Remove BootImageSkewEnforcement feature gate from Default API #3031
OCPBUGS-120757: Fix misleading certificate chain docs in TLSConfig #3047
CNTRLPLANE-3237: replace KMS config with pluginConfig reference #3028
HPCASE-362: Promote TLSAdherence feature gate to GA #2883
NO-JIRA: Fix codegen diagnostic formatting #3049
operator: Add an option to configure OVN-Kubernetes GatewayConfig without an uplink specified. #3009
OCPBUGS-105398: chore: remove AzureWorkloadIdentity feature gate #3018
OPRUN-4768: Add serving TLS curve preferences #3044
Remove feature gate VolumeGroupSnapshot #3027
STOR-3089: Graduate SELinuxMount to GA #3023
OCPBUGS-112638: register DRADeviceTaintRules in TPNU #3004
Fix validation pattern for machine/vsphereprovider #3033
features: enable TLSAdherence feature gate for OKD featureset #3021
CORENET-7538: Add EgressIPNodeSelector feature gate #3032
SPLAT-2890: Add VSphereScopedCredentials feature gate #2988
MCO-2332: MCO-2333: Introduce CAPI resource types to boot image update API #2990
OCPBUGS-99266: move empty CRIOCredentialProviderConfig CR to run-level 0000_10 #3011
OCPBUGS-105399, OCPBUGS-105400: Remove SigstoreImageVerification and SigstoreImageVerificationPKI feature gates #3000
OCPBUGS-112330: Fix ‘supercede’ typos in machineconfiguration types #2996
SPLAT-2864: Promote VSphereMultiVCenterDay2 to GA #2968
CORS-4550: Promote GCD to Default #2991
OCPBUGS-105407: Remove VSphereMultiNetworks feature gate #2975
config/v1: add IBMCloudServiceTransitGateway and IBMCloudServicePowerVS to IBMCloudServiceName #2959
OCPNODE-4526: Block ‘..’ traversal in StorePath #2999
OCPBUGS-74510: Remove VSphereMultiDisk feature gate #2973
Add printer columns to PodNetworkConnectivityCheck CRD #2977
NE-2387: IngressController AWS NLB Security Group Selection #2914
OCPBUGS-112479: Handle Sippy date-only format in featuregate-test-analyzer #2998
CNTRLPLANE-3871: promote OSStreams feature gate to Default for Hypershift #2993
TRT-2908: Revert “CNTRLPLANE-3871: promote OSStreams feature gate to Default for Hypershift” #2989
OCPBUGS-105409: chore: remove AWSServiceLBNetworkSecurityGroup feature gate #2974
CORS-4529: Azure IL6 Secret Cloud support #2919
CNTRLPLANE-3609: graduate etcdBackendQuota to GA #2946
CNTRLPLANE-3871: promote OSStreams feature gate to Default for Hypershift #2950
OCPNODE-4601: Add {system,container}GomaxprocsBehavior field #2934
Full changelog

cluster-config-operator

NO-JIRA: chore: Adding some edge folks as OWNERS in the topology controller #508
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #504
OCPBUGS-114428: Update build-machinery-go vendor dependency #500
OCPEDGE-2747: feat: add topology transition controller for day-2 SNO to HA transitions #495
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-65497: Add debug-useful ClusterOperator relatedObjects #404
OCPBUGS-86988: Guard against empty workspace field on vsphere #407
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-104846: Remove VolumeGroupSnapshot feature gate #297
Full changelog

cluster-dns-operator

ART-23537: Fix hermetic build failure by removing update-bindata from build target #489
NE-2880: Update GitHub issue template URLs #487
NE-2126: Migrating DNS operator test cases from QE repo #485
Full changelog

cluster-etcd-operator

OCPBUGS-105240: TNF: wait for etcd-bootstrap member removal before setup #1672
OCPBUGS-84650: force installer revision when external-etcd-pod ConfigMap is created #1705
OCPBUGS-126911: fix(tnf): set read-only root filesystems #1715
CNTRLPLANE-4414: allow TLS 1.3 profiles without ciphers #1710
NO-JIRA: refactor: remove unused cert-watcher daemonset manifest #1711
OCPBUGS-123168: fix: add missing workload paritioning annotation on cert-watcher daemonset #1706
OCPBUGS-104851: feat: add cert-watcher DaemonSet to restart etcd on CA bundle rotation #1675
OCPBUGS-94106: fall back to intermediate ciphers during etcd bootstrap #1689
OCPBUGS-80957: Reset node status when UID changes #1687
OCPBUGS-105322: fix etcdSignerCAExpiration* alert description wording #1686
CNTRLPLANE-4131: update to latest api to pull in etcd db ga #1680
OCPBUGS-109740: Fix tnf_cluster_in_service during per-node maintenance #1678
OCPBUGS-109743: Derive console notification docs URL from cluster version #1676
Full changelog

cluster-image-registry-operator

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #1368
OCPBUGS-114531: Add 2m degraded inertia to ImagePrunerController #1365
OCPBUGS-112551: imageconfig: Preserve ImageStreamImportMode during upgrade race #1363
OCPBUGS-86308: do not report progressing during cluster scale up #1361
OCPBUGS-113705: CNTRLPLANE-3779: Migrated go standard cases to ote #1343
Full changelog

cluster-ingress-operator

OCPBUGS-122346: Fix GatewayClass index registration retries during bootstrap #1588
OCPBUGS-105442: Remove escalate/bind from Sail Library ClusterRole #1548
NE-2909: Address Gateway API management-mode follow-ups #1595
OCPBUGS-105317: Bump to OSSM 3.4.2 and istio 1.30.4 #1576
OCPBUGS-105398: docs: clarify Azure workload identity token file #1586
NO-JIRA: Add pedjak to OWNERS #1596
NE-2388: aws nlb security groups #1500
NE-2779: Implement Gateway API management mode #1547
OCPBUGS-86050: Update ROUTER_CURVES environment variable for go 1.26 #1542
OCPBUGS-6718: minimize wildcard RBAC permissions #1579
OCPBUGS-105398: refactor: remove Azure workload identity feature gate #1575
NE-2491: Delete the CRL controller #1536
WAF-3: Implement extension provider capability for WAF #1555
OCPBUGS-62627: Suppress Progressing during infrastructure-driven ingress unavailability #1496
OCPBUGS-92835: add grace period to Available condition for deployment… #1544
OCPBUGS-109582: Normalize malformed CIDRs to avoid upgrade disruptions #1549
OCPBUGS-91026: Add missing KAS-defaulted fields to ValidatingAdmissionPolicy manifest #1560
OCPBUGS-112280: Preserve server-defaulted fields on init containers and volumes #1557
NE-2856: Fix staticcheck warnings across multiple packages #1553
NE-2032: e2e: Signal service deprovisioning issues during Gateway DNS test #1220
OCPBUGS-101783: reconcile canary certificate on dependency creation #1538
OCPBUGS-100074: Use /healthz for router startup probe #1528
OCPBUGS-86841: Add BackendTLSPolicy and ReferenceGrant e2e test coverage helpers #1467
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-kube-apiserver-operator

CNTRLPLANE-4303: Remove old go standard e2e encryption cases #2322
CNTRLPLANE-4303: Migrate e2e-encryption to ote #2290
CNTRLPLANE-3237: bump library-go to get the new KMS plugin deployment strategy #2315
OCPBUGS-112638: apienablement: enable resource.k8s.io/v1beta2 when DeviceTaintRule is enabled #2275
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2478 #2313
OPRUN-4768: bump openshift/api #2316
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2463 #2309
OCPBUGS-114428: Update build-machinery-go vendor dependency #2307
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2439 #2282
CNTRLPLANE-3237: pick https://github.com/openshift/library-go/pull/2449 #2287
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2451 #2289
CNTRLPLANE-3237: kms: wire EncryptionConfigurationComputer into encryption controllers #2292
NO-JIRA: Bump library-go #2286
CNTRLPLANE-3237: kms: wire preflight deployer #2276
NO-JIRA: Update library-go to get latest changes #2280
OCPBUGS-80958: Kube apiserver node replace #2199
NO-JIRA: bump library-go changes #2270
OCPBUGS-38661: Use 10min inertia for GuardControllerDegraded #2273
OCPBUGS-85183: Add kind-aware staleness detection for runtime-config entries #2179
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2430 #2271
NO-JIRA:Remove old perf tests and update Makefile #2269
CNTRLPLANE-4110: Migrate e2e encryption perf cases to ote #2256
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-114428: Update build-machinery-go vendor dependency #967
OCPBUGS-107974: fix CVE-2026-41178 #955
OCPBUGS-38662: Use 10min inertia for GuardControllerDegraded #956
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-114428: Update build-machinery-go vendor dependency #676
OCPBUGS-107969: bump otel to v1.44.0 to fix CVE-2026-41178 #662
OCPBUGS-38663: Use 10min inertia for GuardControllerDegraded #661
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #183
Full changelog

cluster-machine-approver

NO-JIRA: feat(tls): add support for TLS groups/curve preferences #308
OCPBUGS-99489: Add NetworkPolicy manifests to openshift-cluster-machine-approver namespace #313
OCPBUGS-121194: fix: retry serving CSRs while Machine addresses populate #321
OCPBUGS-57437: Always validate EgressIPs #309
Full changelog

cluster-monitoring-operator

NO-JIRA: [bot] Synchronize versions of the downstream components #3105
MON-4696: Bump prometheus-operator dependencies to v0.94.1 #3102
OCPBUGS-126689: fix(e2e): use Job with backoffLimit for TestDocExamples #3094
OCPBUGS-123794: Fix flaky TestTelemetryReport/rate_issues #3093
NO-JIRA: [bot] Synchronize versions of the downstream components #3097
MON-4689, OCPBUGS-123539: Bump prometheus-operator jsonnet and libs to v0.94.0 #3083
OCPBUGS-123792: restore node-exporter textfile metrics with read-only rootfs #3088
NO-JIRA: [bot] Synchronize versions of the downstream components #3089
NO-JIRA: Skip flaky TestTelemetryReport/rate_issues subtest #3087
OCPBUGS-83375: Create alerting rule for metrics-server failing to scrape kubelet #2933
MON-4638: align ThanosQueryOverload description with for=1h #3062
MON-4665: wire zoneinfo node-exporter collector from ClusterMonitorin… #3063
NO-JIRA: Makefile: ensure JUnit test name prefix is applied even on test failure #3079
NO-ISSUE: update jsonnet dependencies #3077
NO-JIRA: [bot] Synchronize versions of the downstream components #3076
MON-4560: implement merge logic in CMO for the new field in the ClusterMonitoring CRD #3056
MON-4632, MON-4633: Send metrics ramen:dr_policy_type:max and ramen:dr_protected_apps:max via Telemetry #3074
MON-4617: Update kube-prometheus and add resourceMetricsAPI field #3069
NO-JIRA: [bot] Synchronize versions of the downstream components #3068
NO-JIRA: Fix staticcheck warnings across multiple packages #3059
NO-JIRA: test: produce JUnit XML from e2e runs in CI #3054
NO-JIRA: Makefile: version-stamp golangci-lint binary to prevent stale linter - #3057#3057 #3057
OCPBUGS-99769: wrap library-go resourceCache with mutex for thread safety #3040
NO-JIRA: hack/tools: remove unused vendor directory #3055
Full changelog

cluster-network-operator

OCPBUGS-127174: Fix issues when NetObserv fails to install #3171
NO-JIRA: fix(ovn-kubernetes): disable local DB probes #3163
CORENET-7275: Add AGENTS.md, point CodeRabbit knowledge base at it #3146
CORENET-7479: Add status.vrfName and shortNames to UDN/CUDN CRDs #3145
OCPBUGS-113591: golangci-lint: enable ContextTodo/ContextBackground in usetesting #3138
OCPBUGS-92080: Adds rendering of enable-multi-network-policy in ovnkube-node #3084
OCPBUGS-112562: CVE-2026-41178 - bump go.opentelemetry.io/otel to v1.44.0 #3132
OCPBUGS-112278: Add ConfigMap hash annotation to networking console plugin deployment #3131
CORENET-6714: Install NOO using OLMv0 instead of OLMv1 #3115
OCPBUGS-64582: Drop strategy.rollingUpdate and switch strategy.type to Recreate via pre-patch in frr-k8s-statuscleaner deployments on SNO #3121
OCPBUGS-105887: Filter unsupported cipher suites to prevent ovnkube-identity crash #3119
NO-ISSUE: modernise the codebase using go fix #3113
CORENET-7330: Allow per-node OVN encap IP override via env-overrides #2998
Full changelog

cluster-node-tuning-operator

NO-JIRA: Address govulncheck complaints #1637
OCPBUGS-127362: E2E: ovsDpdk remaining cases and consolidate suite #1628
OCPBUGS-116703: E2E: add missing matcher to offlined CPU Expect() calls #1629
OCPBUGS-112336: apis: add missing fields to apis v1 #1597
NO-JIRA: Fix CentOS Stream image build failing in dnf history undo #1633
CNF-23698: e2e: make OVS dynamic pinning tests compatible with ovsDpdk CPUs #1598
CNF-25173: e2e: resolve primary MCP from profile in test 32364 #1624
OCPBUGS-113651: Disable timer.migration on RHCOS 10 #1614
CNF-26060: add optional –ovs-dpdk-cpu-count flag (default 0) #1590
NO-JIRA: Bump Kubernetes, OpenShift and other dependencies #1615
OCPBUGS-113647: E2E: Minor fixes to Memory Manager and hugepages split tests #1578
OCPBUGS-112537: E2E: Fix ovs dynamic pinning, kubelet and mustgather tests #1565
CNF-26497: unconditionally disable fwupd-refresh.timer #1591
OCPBUGS-112025: Bump golang.org/x/net #1593
OCPBUGS-105476: Update PPC help description #1582
OCPBUGS-105458: Use Add() instead of AddRateLimited() for routine Profile enqueues #1584
NO-JIRA: ci: disable smt alignment for ovsDpdk tests #1589
Full changelog

cluster-olm-operator

OPRUN-4768: Apply TLS curve preferences to metrics server #248
OCPBUGS-105876: Wire availableInertia into the olm StatusSyncer #233
OPRUN-4645: observe and apply TLS curve preferences to operand deployments #226
NO-ISSUE: Bump helm.sh/helm/v3 from 3.21.3 to 3.21.4 #235
NO-ISSUE: Bump the k8s-dependencies group across 1 directory with 5 updates #237
NO-ISSUE: Bump golang.org/x/text from 0.40.0 to 0.41.0 #234
NO-ISSUE: Bump github.com/stretchr/testify from 1.11.1 to 1.12.1 #236
NO-ISSUE: Bump the k8s-dependencies group across 1 directory with 5 updates #227
NO-ISSUE: Bump github.com/operator-framework/operator-controller from 1.5.1 to 1.11.0 #228
NO-ISSUE: Update dependabot config with NO-ISSUE prefix #232
NO-ISSUE: Bump github.com/go-logr/logr from 1.4.3 to 1.4.4 #231
Full changelog

cluster-openshift-apiserver-operator

CNTRLPLANE-3237: encryption/assertion: bring back the preflight assertion for CAO and OAS-O #787
CNTRLPLANE-3237: bump library-go to get the new KMS plugin deployment strategy #781
OCPBUGS-109468: fix CVE-2026-41178 by updating otel to v1.44.0 #761
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2478 #783
OPRUN-4768: bump openshift/api #782
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2463- #2309 #770
OCPBUGS-114428: Update build-machinery-go vendor dependency #768
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2439 #767
CNTRLPLANE-3237: pick https://github.com/openshift/library-go/pull/2449- #2287 #764
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2451 #763
CNTRLPLANE-3237: kms: wire EncryptionConfigurationComputer into encryption controllers #762
NO-JIRA: Bump library-go #760
CNTRLPLANE-3237: kms: wire preflight deployer #758
NO-JIRA: Update library-go to get latest changes #759
NO-JIRA: Update KMS cases and bump library-go #756
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2430 #754
OCPBUGS-105786: Revert “Revert “NO-JIRA: Disable WatchList feature gate due to the missing support of Project watch”” #751
Full changelog

cluster-policy-controller

CNTRLPLANE-3731: Add Agentic SDLC context files to cluster-policy-controller #191
Full changelog

cluster-samples-operator

OKD-425: Revert openliberty back to 26.0.0.6 #709
TRT-2905: Fix python:latest and nodejs template references after UBI 8 tag removal #706
Full changelog

cluster-storage-operator

OCPBUGS-127453: Fix the un-upgradeable message #746
OCPBUGS-127453: Use KCS link in the un-upgradeable message #744
GCP-958: re-enable GCP PD CSI driver in HyperShift path #742
GCP-958: temporarily disable GCP PD CSI driver in HyperShift path #739
GCP-1075: feat(gcp-pd): enable HyperShift support for GCP PD CSI driver operator #728
OCPBUGS-112710: clusterrole/openshift-csi-main-snapshotter-role needs volume group snapshot rules #727
OCPBUGS-91027: Add KAS-defaulted fields to storage-operator ValidatingAdmissionPolicy manifests #726
OCPBUGS-105391: Pass management cluster proxy env vars to CSI driver operator deployments #723
Full changelog

cluster-version-operator

NO-ISSUE: test/cvo: set needRecover before mutating cluster resources #1477
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #1471
OKD-194: Add OKD cincinnati as the default update service for OKD #1466
OTA-2109: harden console plugin nginx TLS configuration #1453
OTA-2110: remove cluster_id from LLM-bound readiness payload #1451
OTA-2111: set readOnlyRootFilesystem on console plugin container #1452
OTA-2108: restrict console plugin NetworkPolicy to openshift-console namespace #1450
OTA-2106: drop NetworkCheck (SDN gone, proxy data unused) #1442
NO-ISSUE: pkg/readiness/cluster_conditions: Conditionally include Upgradeable #1463
OCPBUGS-54864: reduce verbosity of skipping metrics log messages #1439
NO-ISSUE: OWNERS: Pratik is no longer at Red Hat :( #1449
OCPBUGS-80925: Remove the CRB for the default openshift-cluster-version SA #1366
OCPBUGS-110322: pkg/agenticrun/controller: Pivot to cluster-update-advisor directory #1446
“OTA-2107: Harden AgenticRun against indirect prompt injection” #1443
Full changelog

configmap-reloader

NO-JIRA: synchronize OWNERS from cluster-monitoring-operator #85
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #84
Full changelog

console

HELM-859: Guard against null/missing urls in Helm charts #17280
OCPBUGS-127046: provide PatternFly dynamic modules without Console consuming them #17318
NO-JIRA: Document the console.page/resource/list contract #17312
OCPBUGS-71193: Group details page renders a kebab button instead of Actions button #17197
NO-JIRA: small improvements and dep bumps #17219
CONSOLE-5113: Add default namespace warnings #17177
OCPBUGS-126807: Post qa-verify evidence via gh’s native –attach instead of base64 #17193
OCPBUGS-125223: restore some old test-prow-e2e scenarios #17187
OCPBUGS-126219: i18n upload/download routine task - version 4.²³⁄₅.0 (Additional) #17190
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #17176
OCPBUGS-90834: Fix empty vSphere connection details after upgrade #17020
OCPBUGS-123141: i18n upload/download routine task - version 4.²³⁄₅.0 #17165
CONSOLE-4998: Add types for serverless resources #17152
OCPBUGS-121263: bump go-git to 5.19.2 #17148
OCPBUGS-115458: CVE-2026-84375 bump js-yaml to 3.15.²⁄₄.3.2 #17133
OCPBUGS-115318: fix Helm test flake by replacing pkill with PID-file cleanup #17128
OCPBUGS-120684: Update stale comment #17141
NO-JIRA: add prettier to playwright folder #17137
OCPBUGS-115300: Stabilize topology, node-groups, and debug-pod e2e #17134
OCPBUGS-115300: Fix Playwright login helper idempotency and session recovery #17126
HELM-480: Change handler return code #17042
OCPBUGS-115298: Rename e2e scripts so playwright is the main one #17127
CONSOLE-5002: UserPreferenceContextand linting follow up #17124
OCPBUGS-109632: Fix webhook creation in Git for PAC #17078
NO-JIRA: fix session-persistence tests failing due to pre-loaded storageState #17121
CONSOLE-5002: re-render user preferences only when a listened key changes #17104
OCPBUGS-114052: move yarn install to prow scripts #17119
OCPBUGS-115128: Upgrade grpc to v1.83.2 and x/net to v0.58.0 #17120
RFE-9146: Docs followup for service account impersonation #17093
CONSOLE-5000: Remove Redux activeNamespace in favor of NamespaceContext #17102
NO-JIRA: Improve readability of test-frontend output #17080
OCPBUGS-112809: Restore panic on Helm test infrastructure failure #17077
OCPBUGS-85646: display operators in catalog when Tech Preview enabled #16976
OCPBUGS-95590: Hide Builds nav section when Build capability is disabled #16891
CONSOLE-5001: Remove ImmutableJS #17024
OCPBUGS-105603: Strip version tag from OCI chart URL to prevent doubl… #16999
OCPBUGS-99884: Fix “Set as default” StorageClass action #17066
OCPBUGS-112462: Remove empty integration-tests package from CI #17064
OCPBUGS-52186: Show CPU/Memory metrics for non-admin users on Projects page #17001
OCPBUGS-111698: Migrate app/ Cypress e2e tests to Playwright #17015
OCPBUGS-112046: fix Helm test flake by detecting dead processes early #17039
CONSOLE-5463: Turn on react compiler linting rules #17032
OCPBUGS-75963: Fix Edit Machine count action on MachineSet details page #17038
OCPBUGS-95597: Fix UI validation for private Bitbucket repositories #17028
OCPBUGS-111634: Keep OLS cluster-update prompts within OpenAI 32k limit #17018
OCPBUGS-111699: Migrate secrets e2e tests from Cypress to Playwright #17006
CONSOLE-5159, OCPBUGS-95606: Replace deprecated Node10 moduleResolution with Bundler for TS6 compatibility #16259
OCPBUGS-111929: Fix plugin entrypoint failing to load #17027
HELM-827: Add RTL unit tests for 9 critical Helm plugin components #16909
NO-JIRA: add myself to owners and add frontend owners to .claude #17025
OCPBUGS-86298: Fix missing Impersonate action on RoleBinding detail page #16783
OCPBUGS-86294: Fix MachineAutoscaler modal crash when opened from detail page #16781
OCPBUGS-86511: Fix flaky TestAsyncCache backend test #17009
OCPBUGS-111644: Shared Playwright e2e context and test generation skill #16986
CONSOLE-5003: reimplement and enable jest linting #17019
OCPBUGS-95594: make cloud provider fields optional during operator install #16927
OCPBUGS-14473: Guard against undefined data in dashboard charts #16952
And 29 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #1230
CONSOLE-5405: Update console-operator to Kubernetes 1.36 #1211
OCPBUGS-104500: Use content hash for ConfigMap deployment annotations #1217
OCPBUGS-71237: Generate session-secret for all auth types #1204
OCPBUGS-58422: Handle disabled Ingress capability in HyperShift #1182
OCPBUGS-92204: Clear stale OIDC degraded condition on auth type change #1212
CNF-23047: Migrate away from deprecated ioutil #1072
OCPBUGS-104854: Fix excessive DeploymentUpdated events via content hash #1210
OCPBUGS-109670: Derive documentationBaseURL dynamically from OPERATOR_IMAGE_VERSION #1209
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #248
OCPBUGS-83863: Remove rhel8 build stage #228
Full changelog

coredns

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #215
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-98116: Bump golang.org/x/crypto to v0.52.0 #410
Full changelog

csi-driver-nfs

UPSTREAM-SYNC: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master (f12e133) into main #199
Full changelog

csi-external-snapshot-metadata

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #27
NO-ISSUE: Bump golang.org/x/net to v0.53.0 and Go to 1.25.10 #22
Full changelog

csi-livenessprobe

OCPBUGS-122222: Bump go.opentelemetry.io/otel to v1.44.0 to address CVE-2026-41178 #96
Full changelog

docker-builder

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #558
NO-JIRA: Bump golang.org/x/crypto, update CI builder images and go directive to go1.26 #555
Full changelog

docker-registry

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #487
CNTRLPLANE-4447: add support for configuring TLS groups #488
OCPBUGS-99398: Fix resolveUpstreamRef to properly propagate not-found errors #475
Full changelog

egress-router-cni

OCPBUGS-105251: Update Dockerfiles #111
Full changelog

etcd

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #415
CNTRLPLANE-3724: add agentic context docs for the openshift/etcd fork #411
Full changelog

gcp-cluster-api-controllers

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #314
UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.13.1 (8198b8b) into main #302
Full changelog

gcp-machine-controllers

OCPBUGS-82191: Wait for RUNNING before providerID; retry stockout #160
Full changelog

gcp-pd-csi-driver

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #131
Full changelog

haproxy-router, haproxy-router-haproxy28, haproxy-router-haproxy32

OCPBUGS-77056: Lock DeleteFunc to stop SARCompleted overwriting rejection #840
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-127540: UPSTREAM: 142168: Refuse UNC symlink targets in Windows subPath resolution #2793
NOJIRA: add explicit merge commit message #2788
OCPBUGS-123651: UPSTREAM: <carry>: Use FROM scratch for RHEL pause image #2774
NO-JIRA: Rebase master to Kubernetes v1.36.4 #2777
NO-JIRA: Skip SELinuxMountReadWriteOncePodOnly tests now that SELinuxMount is GA #2782
OCPBUGS-104846: UPSTREAM: 141358: Enable group snapshot tests in all configurations #2747
NO-JIRA: Make graceful-termination-duration flag required for the watch-termination command #2761
Full changelog

hypershift

CNTRLPLANE-1053: Validate KAS reachability via SVC URL in KubeAPIDNSName e2e test #9355
NO-JIRA: build(deps): bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0 #9776
CNTRLPLANE-3344: Extract support/reconcilerpolicy package from support/util #9734
OCPBUGS-98099: test(e2e): isolate legacy Karpenter upgrade workload #9806
CNTRLPLANE-4497: add azure-orphaned-role-assignments tool #9745
OCPBUGS-128500: Gate custom ingress strategy E2E coverage to 4.21+ #9814
OCPSTRAT-3686: import nightly release tags #9809
OCPBUGS-114937: Add readiness probe to kube-scheduler control plane deployment #9789
OCPBUGS-128466: reconcile aggregated docs #9808
NO-JIRA: chore(owners): refresh owner aliases #9805
ROSAENG-65607: Adjust regex validation to allow sqs-fips url format (for FEDRAMP support) #9737
NO-JIRA: add serena/headroom files/folders to gitignore #9802
OCPBUGS-126613: fix(api): add missing + prefix to kubebuilder annotation on networkType #9646
CNTRLPLANE-3632: Revert #8698: NodePool rollout control #9797
OCPBUGS-127049: fix(globalps): schedule global-pull-secret-syncer on karpenter nodes #9719
CNTRLPLANE-4508: fix(e2e): detect installer flags supported by target image #9792
NO-JIRA: build(deps): bump compatible sigs-k8s dependencies #9778
OCPBUGS-114936: add PodDisruptionBudget for the HyperShift Operator #9526
OCPBUGS-115085: fix: mount combined-pull-secret in OpenShift API Server #9617
OCPBUGS-109640: fix(cmd/dump): filter resources by cluster platform #9639
NO-JIRA: fix(nodepool) data race in TestReconcileSelectorDropsStaleLabels #9772
OCPBUGS-88757: Align HCCO CatalogSource registryPoll interval with OCP defaults #8745
CNTRLPLANE-4460: refactor(test): chain BeforeApply handlers instead of overwriting #9709
NO-JIRA: ci(deps): bump codecov/codecov-action from 7.0.0 to 7.1.0 #9681
NO-JIRA: ci(deps): bump actions/cache from 4.2.3 to 6.1.0 #9338
OCPSTRAT-3686: Update default ociStorage repository #9770
OCPBUGS-127110: Install HO via Job from operator image in e2e upgrade tests #9736
OCPBUGS-127070: Align .ci-operator.yaml build root tag with Dockerfiles #9723
CNTRLPLANE-4374: bug - gate platform CAPI types behind CRD discovery to fix bulk inspect on limited-CRD clusters #9552
OCPBUGS-98066: fix(nodepool): rebuild CAPI selectors deterministically on reconcile #9698
CNTRLPLANE-3632: Predictable NodePool rollout control #8698
CNTRLPLANE-4090: Move HostedControlPlaneNamespace to shared package #9551
SPLAT-2742: remove inlined SetSecurityGroups IAM permission #9717
CNTRLPLANE-4213: decouple konflux pr pipelines #9413
NO-JIRA: test(e2e): check OS streams for OpenShift 5.0 nightlies #9712
CNTRLPLANE-3755: fix(e2e): gate release-specific fields for version compatibility #9564
CNTRLPLANE-2775: Expose KAS availability and latency metrics from CPO #9244
CNTRLPLANE-4092: Move dump.go to its own package to break transitive dependency on sharedingress #9727
OCPBUGS-125907: fix(aws): use unique Route 53 caller references #9647
OCPBUGS-114723: Decouple user CA bundle reconciliation from resources controller #9458
NO-JIRA: chore(owners): add daniel-rejniak to gcp-reviewers #9700
CNTRLPLANE-4304: fix(ci): validate pending commit messages with gitlint #9710
CNTRLPLANE-4395: Make git commit format skill model and harness agnostic #9625
OCPBUGS-123791: CAPI storage version migration exclude IPAM #9642
CNTRLPLANE-4365: Publish hosted control plane sizing guidance #9532
AUTOSCALE-873: Add sidecar to standalone karpenter-operator #9565
CNTRLPLANE-4090: Move CPO, HCCO and etcd recovery manifest constructors to shared packages #9592
OCPBUGS-113995: classify WebIdentityErr by cause to prevent false invalid creds #9406
OCPBUGS-115468: fix NodePool: truncate oversized machine messages instead of dropping them #9567
feat(kubevirt): OCPBUGS-55974: add CPU model configuration for NodePool VMs #7431
CNTRLPLANE-4209: Consolidate Azure lifecycle test lanes #9572
GCP-510: Implement GCP NodePool CLI Commands #9466
OCPBUGS-84562: Configure AWS CCM region directly #9602
NO-JIRA: ci(deps): bump astral-sh/setup-uv from 6.1.0 to 10.1.0 #9682
NO-JIRA: chore(owners): add core approvers #9651
CNTRLPLANE-4090: Move metric name constants to shared packages #9540
OCPBUGS-125803: skip TLS flag propagation tests for older operator versions #9641
CNTRLPLANE-4453: clarify private Key Vault validation comments #9645
CNTRLPLANE-4209: Update Azure lifecycle test-flow documentation #9573
CNTRLPLANE-4456: Run envtests for release-5.0 #9649
AUTOSCALE-974, AUTOSCALE-980: allow Karpenter to be deployed on Azure #9545
OCPBUGS-123512: fix(e2e): derive node runtimes from upgraded NodePool state #9611
OCPBUGS-122236: stabilize JUnit test identities #9580
chore(renovate): enable supported release branches #9631
CNTRLPLANE-4209: Reject shared variants in concurrent e2e lanes #9571
OCPBUGS-109672: fix(cpo) wait for etcd health, not just DNS #9460
OCPBUGS-123645: add missing Azure v2 matrix coverage #9616
NO-JIRA: fix(e2e): restore Eventually retry for post-upgrade health condition check #9632
OCPBUGS-89689: karpenter control plane upgrade premature drift fix #9234
CNTRLPLANE-3880: Add E2E test for etcd snapshot restore to prevent split brain regression #9356
NO-JIRA: Bump envtest workflow timeout to 20 minutes #9630
CNTRLPLANE-4090: Move labels, taints, scheduler, VAP and misc constants to shared packages #9544
NO-JIRA: Fix CONTRIBUTING.md link path and remove trailing blank lines #9621
OCPBUGS-122011: fix(e2e): Make InstallHyperShiftOperator platform aware #9555
CNTRLPLANE-3532: Enable HC and HCP status-write linting #9563
CNTRLPLANE-3608: Add nested virtualization support for AWS EC2 NodePools #8681
GCP-1122: chore: add pvasant to gcp-reviewers alias #9465
CNTRLPLANE-4393: document CAPI provider image override mechanisms #9482
CNTRLPLANE-3277: Add Azure OAuth LoadBalancer private topology e2e test #8584
OCPBUGS-122232: Gate CAPI API version by management release #9587
CNTRLPLANE-4093: Move shared label constants to api/hypershift/v1beta1 #9415
CNTRLPLANE-4207: document Azure lifecycle test sharding #9504
GCP-958: test(e2e/v2): register gcp-pd-csi-driver control plane workloads #9589
OCPBUGS-97942: fix(cli): add –service-publishing-strategy flag to hcp create cluster agent #8985
NO-JIRA: build(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 #9546
CNTRLPLANE-4094: Move ExternalDNSLBPort and KASRouteHostname to support/netutil #9414
NO-JIRA: fix(ci): use –target for pip install on ARC runner #9531
CNTRLPLANE-4150: feat: Maintain ingress serving cert for HostedCluster ingress #9132
CNTRLPLANE-4207: update v2 test flow documentation #9569
CNTRLPLANE-4369: add prow job id tag to e2e v2 aws resources #9542
NO-JIRA: fix(managed-azure): continue resource group cleanup when HC destroy fails #9404
ACM-41684: Switch hypershift-operator runtime to PQC base image #9453
NO-JIRA: fix(install): increase WaitUntilAvailable timeout from 5m to 10m #9306
OCPBUGS-87991: validate additionalNetworks name format in KubeVirt NodePools #8710
NO-JIRA: feat(azure): Add scripts to setup credentials and check resources #9446
CNTRLPLANE-4005: Skip CDI importer pods from custom labels and tolerations checks #9240
OCPBUGS-109724: fix KubeVirt custom baseDomain ingress documentation #9318
NO-JIRA: spread AKS nodes across availability zones #9449
CNTRLPLANE-4370: Revert “Merge pull request #9543 from ironcladlou/e2e-promotion” #9574
OCPBUGS-114415: Increase relay timeouts to prevent intermittent test failures #9459
NO-JIRA: Gate GCP credential validation by control plane version #9562
OCPBUGS-120840: remove TechPreviewNoUpgrade from AWS cluster creation args #9535
OCPBUGS-121208: filter AWS-reserved tag keys before calling DeleteTags #9538
GCP-883: Optimize GCP PSC NAT allocation #9472
CNTRLPLANE-3603: Migrate clients from CAPI v1beta1 to v1beta2 #8717
NO-JIRA: remove duplicate e2e v2 test flow doc #9553
CNTRLPLANE-4370: enforce explicit blocking/informing labels on all v2 e2e tests #9543
NO-JIRA: ci(deps): bump actions/actions-runner from 2.336.0 to 2.337.0- #9513 #9513
CNTRLPLANE-3998: warn when deprecated kube-apiserver verbosity annotation is set #9461
CNTRLPLANE-3532: migrate HCCO/route status patches to statuspatching #9385
OCPBUGS-99534: etcd initialization bugs after etcdctl snapshot restore #9048
CNTRLPLANE-3646: increase e2e v2 control plane upgrade coverage for v1 parity #9491
OCPBUGS-120685: fix(e2e): select a live NodePool for osImageStream node OS verification #9506
ROSAENG-63186: fix(hcco): Add VAP to protect kas-bootstrap RBAC bindings from deletion #9203
NO-JIRA: remove unsafe v1 framework usage from karpenter upgrade test #9522
CNTRLPLANE-2007: KubeVirt default ingress passthrough with HostNetwork endpoint publishing strategy #9514
CNTRLPLANE-4207: Balance Azure v2 lifecycle test shards #9419
CNTRLPLANE-3532: add hcpstatuspatch linter and status-patching AGENTS.md guidance #9388
OCPBUGS-114459: recognize domain-specific test fields #9454
GCP-503: feat(gcp): Implement OrphanDeleter #8884
OCPBUGS-115269: openstack: Start populating cacert in clouds.yaml #9467
CNTRLPLANE-3951: fix(e2e): accept node deletion as success in TestSpotTerminationHandler #9428
OCPBUGS-74960: fix orphaned security group during VPC endpoint deletion #9517
NO-JIRA: test(backuprestore): enable SnapshotMoveData in backup configurations #9429
GCP-958: feat(gcp): complete GCP PD CSI driver wiring in HyperShift #9450
RHOBS-1707: Add OpenTelemetry SDK tracing to hypershift-operator #9390
OCPBUGS-105464: fix(nodepool): inject default worker SG by status ID, not fail-open capability flag #9456
OCPBUGS-84368: add safe-to-evict annotation and remove tolerations to fix autoscaler scale-down and drain loop #8338
AUTOSCALE-998: inject token-minter image to standalone karpenter-operator #9492
OCPBUGS-120685: fix(e2e): label flaking nodepool osImageStream test informing #9505
NO-JIRA: feat(chaibot): add per-platform Slack handle pings to CI health report #9478
build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1 in /hack/tools #9479
build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1 #9480
OCPBUGS-114408: fix(api): allow spaces in AWS resource tag keys and values #9425
GCP-1113: retry transient network errors in hypershift create iam gcp #9436
OCPBUGS-115542: fix(e2e): poll for etcd-init completion before reading restore logs #9481
OCPBUGS-114368: Retry Microsoft Graph transport failures #9421
OCPBUGS-86690: fix Azure cluster deletion hanging when resource groups are already deleted #8682
CNTRLPLANE-4041: add new release branches to renovate config #9470
OCPBUGS-77781: fix(certs): normalize IP SANs to stop dual-stack KAS cert churn #9286
CNTRLPLANE-4205: document OSImageStream behaviour deviations #9486
CNTRLPLANE-3755: fix(e2e): add version gating to EnsureCAPIFinalizers tests #9443
CNTRLPLANE-3646: enable e2e v2 aws control plane upgrade tests #9474
OCPBUGS-115403: ensure informing junit files are unique across test groups #9473
ACM-41685: Enable PQC crypto policy in hypershift-cli image #9463
OCPBUGS-113712: preserve immutable AWS load balancer annotations #9469
NO-JIRA: chore(konflux): update Tekton task bundles to latest versions #9483
CNTRLPLANE-4204: reorganize OSImageStream e2e tests after graduation #9418
CNTRLPLANE-3201: feat(e2e): enable etcd snapshot backup test on Azure #9226
CNTRLPLANE-2029: docs(backuprestore): add Agent and KubeVirt platform prerequisites #9072
CNTRLPLANE-3950: fix flaky TestKMSRootVolumeEncryption race condition. #9304
CNTRLPLANE-4208: Right-size Azure v2 e2e worker counts #9426
CNTRLPLANE-3646: port karpenter upgrade test to v2 #9397
NO-JIRA: fix(azure): orphan AzureMachines when capi-provider cannot run #9403
OCPBUGS-99021: Use separate certificate signers for konnectivity #9098
OCPBUGS-99329: avoid cache miss false-negative on credential Secret lookup #9074
NO-JIRA: group ChaiBot health report by OCP version #9447
NO-JIRA: Migrate hypershift-ci-python and contrib/oidc to uv for managing python deps #9442
GCP-421: feat(install): bump external-dns to 1.3.5 and bundle DNSEndpoint CRD #9433
NO-JIRA: test(e2e/v2): add upsert desired-state-hash E2E tests #9257
RFE-9138: feat: label some hosted control plane services #8298
OCPBUGS-109595: use RetryWatcher and TCP keepalive for create-guests watch resilience #9435
OCPBUGS-95614: fix(cpo): include unavailable components in KASLoadBalancerNotReachable message #9232
OCPBUGS-114014: add Agent CAPI pause step to cross-cluster migration #9416
CNTRLPLANE-4216: Migrate Azure VM instance families to Dsv5 #9423
CNTRLPLANE-4006: fix(e2e) disable client-side rate limiting and increase NodePool config timeout #9331
CNTRLPLANE-4004: test(envtest): add CEL validation tests for AWS resource tag types #9375
OCPBUGS-86669: fix(cli): make deleteCLISecrets non-fatal during cluster destroy #8787
CNTRLPLANE-3999: add declarative TestPlan for composing v2 cluster variants and test matrices #9420
NO-JIRA: test(e2e): allow more time for control plane pod restarts #9422
OCPBUGS-113580: Bound NodePool metrics cache reads #9389
NO-JIRA: Makefile: fix PULL_BASE_SHA leading space breaking local verify #9395
OCPBUGS-97811: fix Tenant API downtime during a management worker node #9279
NO-JIRA: Run lint and vet against all build tags #9427
OCPBUGS-114265: Use managemet cluster kubeconfig for CAPI migration test #9412
OCPBUGS-100142: fix(konnectivity): fallback to alternative DNS-resolved IPs on connection failure #9181
CNTRLPLANE-3532: migrate CPO status patches to statuspatching helpers #8966
OCPSTRAT-3686: Add pipeline for nightly release tag process #9371
OCPBUGS-111601: Fix v2 control plane upgrade rollout race #9384
CNTRLPLANE-2883: Migrate ARM64 NodePool creation test to v2 #8926
CNTRLPLANE-4115: fix(ci): report actionable cause when /rebase push hits workflow files #9358
OCPBUGS-113991: Scope forced NodePool cleanup to the target cluster #9398
CNTRLPLANE-1831: address review feedback on DR documentation #9407
OCPBUGS-98467: fix(konnectivity): enable –sync-forever to restore lost agent-server tunnels #9260
CNTRLPLANE-3616: e2e tests for TLS profile change of konnectivity-server #8886
CNTRLPLANE-3626: feat(ignition-server, ignition-server-proxy): inject centralized TLS configuration #8910
OCPBUGS-112450: introduce e2e v2 linting rules and enforcement #9357
CNTRLPLANE-1831: restructure backup/restore disaster recovery documentation #9382
ACM-42704: Add Konflux MCE 5.1 pipelines for hypershift CLI and operator #9396
OCPBUGS-111601: Prevent conversion webhook startup deadlock #9387
ROSAENG-14082: –dump-guest-cluster option can now optionally be supplied with policies #8882
CNTRLPLANE-3646: port core karpenter autonode e2e tests to v2 framework #9292
GCP-916: allow goog-partner-solution label key in GCP resourceLabels #9267
CNTRLPLANE-3871: promote OSStreams feature gate to Default #9328
CNTRLPLANE-3903: Add unit test for hcp version command #9218
OCPBUGS-111985, OCPBUGS-111986: bump haproxy to 3.0.5-6.el10_2.2 to fix CVE-2026-55203 and CVE-2026-55204 #9333
OCPBUGS-112328: Clear SSHKey from HCP and delete synced secret when HC SSHKey is removed #9374
CNTRLPLANE-4169: Add GHA envtest jobs for Kubernetes 1.36 #9353
CNTRLPLANE-3604: Capi v1beta2 storage migration #8938
CNTRLPLANE-3532: migrate HO karpenter status patch to statuspatching helper #8968
no-jira: add karpenter-operator dev image override annotation #9295
CNTRLPLANE-4025: feat(azure): support managed HSM for KMS encryption #9199
OCPBUGS-44164: Fix TestNodePoolReplaceUpgrade flaky timeout on OpenStack #8749
revert: OCPBUGS-112478: fix(cpo): handle service-ca generation errors in CSI serving cert reconciliation #9365
CNTRLPLANE-3954: add kube-scheduler metrics endpoint e2e coverage #9159
NO-JIRA: align aws_test.go test case names with testcasename linter #9367
CNTRLPLANE-4003: Add per-tag override field for AWS resource tag precedence #9152
OCPBUGS-97705: fix(azure): skip KMS validation for private Key Vaults on ARO HCP #8965
chore: add .pi symlink for Claude Code skill discovery #9361
OCPBUGS-85182: Remove MutatingAdmissionPolicy runtime-config from KAS #9350
OCPBUGS-86771: docs(api): document issuerURL immutability and serviceAccountIssuer override #8916
NO-JIRA: chore(owners): add members to core-reviewers #9352
OCPBUGS-85065: Fix repeated CPO Deployment churn due to OPENSHIFT_IMG_OVERRIDES reordering #8656
NO-JIRA: align GCP creds metric test case names with testcasename linter #9351
GCP-959: Add GCP PSC conditions to metrics and add platform-specific gauges #9258
CNTRLPLANE-3899: Add shared cmd/ unit tests for create nodepool agent #9162
CNTRLPLANE-4008: enable hypershiftlinter and fix test naming #9271
OCPBUGS-86670: fix(cpo): handle service-ca generation errors in CSI serving cert reconciliation #8622
OCPBUGS-105194: Add retry with exponential back-off for transient dump errors #9303
CNTRLPLANE-4041: fix(build): bump missed second-stage base image in Dockerfile.e2e to 5.1 #9345
CNTRLPLANE-4026: fix(ci): Enable Dependabot to track and automate GHA runner image updates #9330
CNTRLPLANE-4041: bump base images in dockerfiles to 5.1 #9325
NO-JIRA: fix(ci): update restructure-commits workflow path after skills migration #9335
CNTRLPLANE-4115: Revert invalid workflows permission from rebase.yaml #9329
OCPBUGS-99550: Managed Azure setup_aks_cluster.sh fails to run with “–kubernetes-version 1.33.0” flag #9080
OCPBUGS-105282: Add proxy env vars to cluster-storage-operator deployment #9256
CNTRLPLANE-4115: Fix /rebase workflow: add missing workflows permission #9323
NO-JIRA: Convert Claude commands to agentskills.io skill format for harness portability #9062
CNTRLPLANE-3871: add [FeatureGate:OSStreams] tag for FG promotion tracking #9297
OCPBUGS-83564: Apply registry overrides to release image pullspec before fetching #9108
CNTRLPLANE-4008: feat: add hypershiftlinter golangci-lint plugin #9237
OCPBUGS-105875: fix(hcco): run kas-connection-checker as non-root #9296
ARO-26896: feat: hardcode ETCD_METRICS=extensive in etcd StatefulSet template #9192
OCPBUGS-105802: Use the correct v1 mcfg api for OSImageStream during ignition #9283
CNTRLPLANE-4043: ci(e2e): add CI workflow to verify e2e compilation on PRs #9305
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #161
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-113538: Enable SELinuxMount tests #180
Full changelog

ibmcloud-cluster-api-controllers

UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.15.0 (5704e48) into main #184
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #187
OCPBUGS-114006: UPSTREAM: 2933: Bump all go.opentelemetry.io/otel modules to v1.44.0 #165
Full changelog

ibmcloud-machine-controllers

CNF-23394: mockgen deprecated: use uber-go/mock instead #73
Full changelog

insights-operator

CCXDEV-16666: gather InferenceService from the KServe operator #1345
OCPBUGS-97968: add insights-runtime-extractor-scc missing fields #1359
CCXDEV-16041: multiclusterhub gatherer #1343
NO-JIRA: improve create-gatherer skill #1348
CCXDEV-16040: Add multicluster gatherer #1337
CCXDEV-16594: add custom proxy field to insights config #1329
Full changelog

insights-runtime-exporter, insights-runtime-extractor

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #92
NO-JIRA: chore: add slashpai to owner list #91
Full changelog

ironic

NO-ISSUE: Update requirements.cachito with latest openshift forks commits #923
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #921
METAL-1958: Merge contiguous Dockerfile RUN layers to reduce image size #916
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #917
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #910
NO-ISSUE: Manually sync Ironic - part 2 #909
NO-ISSUE: Manually sync Ironic and Sushy from the forks #906
METAL-1931: Add cargo for bcrypt rust extensions #895
Full changelog

ironic-agent

NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #320
METAL-1958: Remove OKD build deps in the same layer they are installed #318
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #319
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #317
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #302
METAL-1931: Add cargo for bcrypt rust extensions #303
Full changelog

karpenter-operator

AUTOSCALE-166: Add minimum instance size requirements #36
NO-JIRA: fixup OWNERS_ALIASES #35
NO-JIRA: chore: update build tool versions #34
AUTOSCALE-873: fix: apply OpenShift Karpenter CRD adjustments #33
AUTOSCALE-974: deploy karpenter-provider-azure on HCP #32
AUTOSCALE-946: migrate approver for node CSRs #29
no-jira: remove aggregate cluster role #30
AUTOSCALE-998: deploy karpenter-provider-aws on HCP #26
AUTOSCALE-968: sync AKSNodeClass CRD and add Azure cloud provider #28
AUTOSCALE-906: add agentic SDLC context files #27
AUTOSCALE-976: enable CRD controller for management cluster mode #24
AUTOSCALE-872: Implement OpenshiftEC2NodeClass objects #25
AUTOSCALE-166: Apply NodeOverlay to hostedcluster during karpenter-core e2e for AWS HCP AutoNode #22
Full changelog

keepalived-ipfailover

NE-2126: Migrating Ipfailover test cases to images repo #245
Full changelog

kube-metrics-server

NO-JIRA: synchronize OWNERS from cluster-monitoring-operator #80
NO-ISSUE: [bot] Bump openshift/kubernetes-metrics-server to v0.9.0 #72
Full changelog

kube-rbac-proxy

NO-JIRA: Merge upstream v0.23.0 #162
CNTRLPLANE-3685: docs - add Agentic SDLC context files #144
NO-JIRA: update OWNERS #147
NO-JIRA: Merge upstream v0.22.1 #146
Full changelog

kube-state-metrics

NO-JIRA: synchronize OWNERS from cluster-monitoring-operator #169
NO-ISSUE: [bot] Bump openshift/kube-state-metrics to v2.20.0 #155
Full changelog

kube-storage-version-migrator

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #262
OCPBUGS-114428: Update build-machinery-go vendor dependency #259
Full changelog

kube-vip

NO-JIRA: Merge https://github.com/kube-vip/kube-vip:main (https://github.com/openshift/kube-vip/commit/6cbf5aaeda356be0ee3fc5d8482d483c28bb4103) into main #19
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #87
Full changelog

kubevirt-csi-driver

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #119
Full changelog

machine-api-operator

OCPBUGS-122165: Reduce vCenter API load in the vSphere machine controller #1552
OCPCLOUD-3438: Bump govmomi to 0.53.0 #1498
NO-ISSUE: Add opt-in kube-rbac-proxy sidecar for pprof endpoint (AWS) #1502
OCPBUGS-47508: Set –max-concurrent-reconciles=10 for AWS machine controller #1521
SPLAT-2825: Moved OTE machine tests to openshift/disruptive-longrunning #1539
OCPBUGS-105398: refactor: remove AzureWorkloadIdentity feature gate #1537
SPLAT-2826: Compare against oldObject in vSphere failure-domain VAPs #1536
OCPBUGS-74510: Removed VSphereMultiDisk feature gate #1532
OCPBUGS-105407: Remove VSphereMultiNetworks feature gate from e2e test #1533
Full changelog

machine-config-operator

NO-ISSUE: Increase timeout for ImagePulledFromRegistry=Unknown in non-SNO suites #6598
SPLAT-2376: test/extended: add Azure machine pool disk setup tests #6559
OCPBUGS-105412: Updated openshift/api vendor #6586
OCPBUGS-127481: change markdown linter approach #6591
OCPBUGS-127707: check CAPI manager modes for default skew status #6589
MCO-2572: Consider nodes “Updated” when they have been manually set to an unready state but no update is happening #6536
OCPBUGS-127481: Add markdown linter #6582
OCPBUGS-127022: Enable readOnlyRootFilesystem: true for machine-config-server container #6569
OCPBUGS-74136: Split wait-for-ipsec-connect into two services to avoid ipsec restart #6440
NO-ISSUE: Increase timeout for ImagePulledFromRegistry=Unknown in non-SNO suites #6574
OCPBUGS-86768: Nodes created with 4.13 base images cannot join the cluster #6435
MCO-2536: Update operator to populate CAPI bootimage status #6469
OCPBUGS-126899: Add MCN/PIS/MOSC/MOSB/OSImageStream to relatedObjects #6563
OCPBUGS-86571: templates: pass –dual-stack to nodeip-configuration #6105
OCPBUGS-57177: Degrade the MachineConfigPool on PinnedImageSet degrade #6443
OCPBUGS-63048: Kube object asserts do not handle case where object is replaced #6059
OCPBUGS-100366: Re-queue ContainerRuntimeConfig on status update failure #6415
OCPBUGS-90502: Run nmstatectl format in nmstate-configuration #6209
OCPBUGS-115002: Remove BootImageSkewEnforcement references to gate component from MCO #6522
OCPBUGS-114882: drop GCD health-check ranges in openshift-gcp-routes #6501
OPNET-801: Switch on-prem HAProxy pods to haproxy-router-haproxy32 image #6502
OCPBUGS-122237: [TNF] Add infinite retry on untaint systemd unit #6535
OCPBUGS-116491: Correctly handle MC deletion in image mode when no new build is required #6528
OCPBUGS-121353: Pass missing proxy vars to bootstrap MCC #6526
MCO-2575: Refactor verification functions for calculateStatus test cases #6543
MCO-2570: remove poll methods #6532
OCPBUGS-114737: updateLayeredOS deploy-from-self when skopeo < 1.22.2 #6475
OCPBUGS-122209: Fix IsBootImageUpdateSupported to include vSphere and Azure platforms #6523
OCPBUGS-105283: Mount /etc/container in mosb #6451
OCPBUGS-95238: Dump compact cache to CM for persistence #6379
OCPBUGS-114664: Fix CVE-2026-15792: Upgrade BuildKit to v0.31.2 #6472
OCPBUGS-120711: Fix vsphere network absolute paths #6497
OCPBUGS-112721: Retry on conflict in syncMachineConfigNodes #6496
OCPBUGS-116490: remove nft chains before checking the ignition config #6485
NO-ISSUE: check mosb failed message in test 85980 #6500
OCPBUGS-109657: Assert errors in TestGetPrimaryPoolForNode #6482
OCPBUGS-115123: Replace wildcard permissions with explicit verbs in MachineConfigServer ClusterRole #6470
OCPBUGS-112348: Increase TC-74751 Eventually timeout for vSphere OVA upload #6481
OCPBUGS-115158: Update AMI Whitelist #6474
OCPBUGS-115203: Skip vsphere fd-unmatched machinesets for bootimage updates #6477
MCO-2530: Remove unused functions, constants, parameters, and returns throughout the codebase #6403
MCO-2427: Move OCB and OSStreams tests to longduration suite #6454
OCPBUGS-109659: Check conddegraded nil before dereference in TestCalculateStatus #6462
OCPBUGS-69681: limit ContainerRuntimeConfig status condition to 3 #6434
OCPBUGS-111648: crio: drop restore support #6412
OCPBUGS-112043: Preserve proxy environment vars #6424
OPNET-679: grant NET_ADMIN capability to coredns-monitor #6449
OCPEDGE-2984: fix: adjust fencing validator to match MAC-address based credential secrets #6450
OCPBUGS-112465: Update the MachineOSBuild event and condition functionality to more clearly handle pod failures with retries #6431
OCPBUGS-112784: Revert TNF Graceful node shutdown #6442
OCPBUGS-105399: Remove SigstoreImageVerification feature gate references #6445
OCPBUGS-64623: Use kubernetes scheme in drain controller event recorder #6446
OCPNODE-4526: Add ‘..’ block, max-length, and cross-store uniqueness #6433
OCPBUGS-100065: on-prem: tune API VIP haproxy health checks #6400
OCPBUGS-109746: OCPBUGS-112085: CORS-4441: Bootimage controller should gracefully handle Azure gen1 image removal #6404
NO-ISSUE: Extend timeout for waiting for UpdatePrepared MCN condition for SNO resiliency #6428
OCPBUGS-98258: Fix upstreams for CoreDNS pods on Cloud platforms #6383
NO-JIRA: Skip OVN-K VRFs in ofport-request dispatcher script #6398
OCPBUGS-109739: Increase rpm-ostree rebase retry backoff and preserve error #6413
OCPBUGS-112075: skip proxy for OSImageStream discovery in HyperShift #6420
OCPBUGS-65504: machine-config ClusterOperator relatedObjects missing ClusterRoleBinding #6369
AGENT-1570: Remove all NoRegistryClusterInstall feature gate check #6396
MCO-2411: Add AWS marketplace AMI band check target #6365
Full changelog

machine-image-customization-controller

OCPBUGS-112616: Update xz and ignition/v2 with known vulnerabilities #185
OCPBUGS-112617: Stop accepting IRONIC_AGENT_PULL_SECRET from the envi… #186
Full changelog

machine-os-images

OKD-465: Update Dockerfile installer base to ocp/5.1 #120
OCPBUGS-126621: Select bundled CoreOS version when COREOS_VERSION is unset #116
OCPBUGS-112613: Validate aarch64 ISO checksum after cross-arch extraction #113
TRT-2935: Revert machine-os-images PR #110 — fatal aarch64 ISO check crashes metal3 init-container #112
OKD-429: Fix OKD/SCOS builds to use centos CoreOS streams #109
OCPBUGS-112613: Validate aarch64 ISO checksum after cross-arch extraction #110
Full changelog

metallb-frr

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #138
OKD-453: Dockerfile.openshift: conditionally install frr or frr10 based on OS version #137
Full changelog

monitoring-plugin

OU-1528: Swapping namespaces in Alerts optimized #1305
NO-JIRA: Agent skills consolidated #1298
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #1264
NO-JIRA: sanitize runbook_url #1255
OU-1150: more refactors #1286
NO-JIRA: duplicate dashboard creates perses project #1258
OCPBUGS-123668: patch adm-zip vulnerable version #1274
NO-JIRA: feat: migrate to vitest #1237
OU-1220: Add column to display dashboard id in perses dashboard list page #1257
OU-791: hide Export as CSV link on empty Alerts page #1251
NO-JIRA: fix(metrics): sync query-browser URL into Redux after navigation #1238
OU-1344: Add granular permission checks #1185
NO-JIRA: Pin node 22 and migrate deprecated i18next-parser #1235
NO-JIRA: use existing env var as a dashboard project in the OLS show time… #1236
OU-1147: Perses UI Customization. Allow semantic tokens to map correctly with PatternFly themes and modes #1226
OU-1472: refactor variables #1224
OCPBUGS-119714, OCPBUGS-119717: fix: upgrade fast-uri to 3.1.7 #1234
OCPBUGS-115456: fix: upgrade vulnerable dependencies #1233
OU-1472: lint tags #1221
OU-1472: perses version upgrade fixes #1228
OCPBUGS-114786, OCPBUGS-114789, OCPBUGS-114792: fix: upgrade vulnerable fast-uri dependency #1200
NO-JIRA: Add dchromik to observability-ui aliases #1230
NO-JIRA: upgrade webpack #1213
OCPBUGS-114776, OCPBUGS-114795: fix: upgrade vulnerable dompurify dependency #1199
OU-1423: fix: adjust perses mui theme to patternfly glass mode #1195
NO-JIRA: swap perses to ols specific tag for ols testing run #1194
OU-1409: include the legal disclaimer in the alert actions to agentic runs #1188
OU-1417: Fix Perses tooltips background color in OCP 5 #1178
OLS-3921: disable button shrink #1186
OU-1422: feat: update perses dependecies to allow to tag the OLS contributed panels #1045
OU-1472: rename tags to be the same as backend features #1128
OU-1471: don’t throw when listing globaldatasource for fallback #1153
OU-1514: update useFeatures hook to feature driven backend #1151
NO-JIRA: chore: organize dev dependencies and avoid cypress binary install #1148
NO-JIRA: feat: replace outdated react-linkify dependency #1144
OU-1472: remove incidents feature from backend and tests #1127
OU-1107, OU-1108: ACM alerting UI with alerts and perses #1105
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

multus-admission-controller

CORENET-7375: d/s merge Bump Kubernetes to 1.36.2 and Go to 1.26 #123
OCPBUGS-112557: Bump golang.org/x/net to 0.57.0 to fix CVE-2026-33814 #125
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-114000: DS Merge 08/27/2026 #344
Full changelog

multus-networkpolicy

NO-JIRA: Downstream merge 20260826 #120
Full changelog

multus-route-override-cni

OCPBUGS-83863: Remove rhel8 build stage #66
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #430
OCPBUGS-112555: Fix for CVE-2026-33814 #418
Full changelog

must-gather

WINC-2092: Add windows_exporter log collection #560
OCPBUGS-114428: Update build-machinery-go vendor dependency #563
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

network-interface-bond-cni

OCPBUGS-83863: Remove rhel8 build stage #113
Full changelog

network-metrics-daemon

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #158
CORENET-7238: Update OWNERS file #145
OCPBUGS-112553, OCPBUGS-112568: Fix CVE for ose-network-metrics-daemon #147
Full changelog

network-tools

NO-JIRA: Added iperf3 #189
Full changelog

networking-console-plugin

maintenance: bump the npm group across 1 directory with 17 updates #563
OCPNETUI-140: Align shared modules with Console #546
OCPNETUI-140: Extend dependabot ignore list #545
maintenance: bump the npm group across 1 directory with 201 updates #544
maintenance: bump the npm-security group across 1 directory with 10 updates #521
OCPNETUI-65: Enable dependabot updates on release-5.0 #524
OCPBUGS-86053: Fix MultiNetworkPolicy list crash when spec is missing #523
OCPNETUI-78: Remove unused Dockerfile.art #516
OCPNETUI-63: Drop unused Helm charts #473
OCPNETUI-14: Add Cypress E2E tests for network-to-VM cross-navigation #493
OCPNETUI-65: Add multi-branch dependabot config #487
CNV-67257: Set physicalNetworkName on OVN localnet NADs created from the console #477
OCPBUGS-105358: Fix NAD config generated in form for OVN K8s secondary localnet networks #496
OCPNETUI-81: Retry fetching from npm registry to unblock OKD build #494
OCPNETUI-56: Add CI scripts for hot-cluster E2E infrastructure #489
OCPNETUI-56: Add ci-env-controller Helm chart for test environment lifecycle #491
OCPNETUI-56: Add ci-test-stack Helm chart for E2E test environments #490
OCPNETUI-22: Add Cypress E2E tests for Service create and edit form #480
OCPNETUI-78: Sync Dockerfile and Dockerfile.art #485
OCPNETUI-59: Add Cypress E2E tests for Service and Route endpoint health #481
OCPNETUI-66: Drop unused devcontainer config #474
OCPNETUI-56: Add Cypress test specs and runner scripts #470
OCPBUGS-113967: Fix 404 error on MultiNetworkPolicy page when “All projects” is selected #483
OCPBUGS-91643: Fixed IP sorting in service overview #482
OCPBUGS-112660: Marked strings for i18n in NetworkPolicies list page #478
OCPBUGS-86249: fixed edit pod selector #476
OCPNETUI-56: Add Cypress E2E framework config and support files #468
OCPNETUI-56: Add Cypress page objects and test constants #469
chore(i18n): update Sprint 1 translations and Memsource CLI skill docs #471
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #84
OCPBUGS-123772: Bump golang.org/x/net to v0.58.0 to address CVE-2026-33814 #85
Full changelog

oauth-apiserver

OCPBUGS-114428: Update build-machinery-go vendor dependency #228
OCPBUGS-108041: fix CVE-2026-41178 by bumping otel to v1.44.0 #219
CNTRLPLANE-2260: test migration of tokenreview tests to OTE #212
NO-JIRA: Remove cluster profile directory authentication as it is no longer injected in CI #217
Full changelog

oauth-proxy

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #377
ACM-37203: Add support for configurable TLS profiles #372
OCPBUGS-115305: bugfix: rewrite open redirect strings to ‘/’ #374
NO-JIRA: Add control-plane-approvers to OWNERS #373
Full changelog

oauth-server

OCPBUGS-122888: Add high contrast support to oauth templates #262
OCPBUGS-114428: Update build-machinery-go vendor dependency #260
OCPBUGS-115307: bugfix: default to english when Accept-Language header contains more than 1000 underscores #253
Full changelog

olm-catalogd, olm-operator-controller

ocpbugs-115274: fix webhook finalizer flake #798
OCPBUGS-121303, OCPBUGS-121304: Bump go-git to v5.19.2 #810
OPRUN-4723: Synchronize From Upstream Repositories #811
NO-ISSUE: Synchronize From Upstream Repositories #791
OCPBUGS-83515: UPSTREAM: <carry>: use internal shell image for catalog FBC curl Job #792
NO-ISSUE: Synchronize From Upstream Repositories #790
Full changelog

openshift-apiserver

OCPBUGS-108032: update otel to 1.44.0 to fix CVE-2026-41178 #684
Full changelog

openshift-controller-manager

CNTRLPLANE-3878: bump(k8s.io): 1.36.3 #451
Full changelog

openshift-state-metrics

NO-JIRA: update OWNERS #140
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #139
Full changelog

openstack-cluster-api-controllers

Fix release 0.14 sync: incomplete vendoring in hack/tools #433
Fix rebasebot post-rebase hook helper path lookup #432
Fix rebasebot merge-bot by removing stale API version artifacts #431
Full changelog

openstack-machine-api-provider

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #187
Full changelog

openstack-resource-controller

UPSTREAM-SYNC: Merge https://github.com/k-orc/openstack-resource-controller:release-2.0 into main #40
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-126127: test: bump test extension gRPC to v1.83.2 #1382
NO-ISSUE: add per-scenario PSA compliance audit #1374
NO-ISSUE: Synchronize From Upstream Repositories #1361
OCPBUGS-122255: tests-extension: fix PolarionID:68521 and Polarion:27680 #1376
OCPBUGS-83412: set catalogsource spec.grpcpodconfig.scc: restricted for all non-legacy cases #1359
OCPBUGS-104542: force node arch for opm and catalogsource pod for multiarch tests; fix test failure #1357
OCPBUGS-23954, OCPBUGS-78095: Synchronize From Upstream Repositories #1355
Full changelog

operator-marketplace

NO-ISSUE: Bump github.com/onsi/gomega from 1.43.0 to 1.43.1 #795
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.32.2 to 2.33.0 #796
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.32.1 to 2.32.2 #794
NO-ISSUE: Bump github.com/onsi/gomega from 1.42.1 to 1.43.0 #781
NO-ISSUE: Bump github.com/sirupsen/logrus from 1.10.1 to 1.10.2 #779
NO-ISSUE: Bump github.com/stretchr/testify from 1.12.0 to 1.12.1 #777
NO-ISSUE: Bump the k8s-dependencies group across 1 directory with 3 updates #776
NO-ISSUE: Bump github.com/sirupsen/logrus from 1.10.0 to 1.10.1 #778
NO-ISSUE: Bump github.com/sirupsen/logrus from 1.9.4 to 1.10.0 #774
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.32.0 to 2.32.1 #773
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

CORENET-7596, OCPBUGS-123678: DownStream Merge [09-23-2026] #3473
CORENET-7572: DownStream Merge [09-21-2026] #3465
CORENET-7562, OCPBUGS-98726, OCPBUGS-99645: DownStream Merge [09-11-2026] #3439
OCPBUGS-112563, OCPBUGS-99451: DownStream Merge [08-31-2026] #3434
CORENET-7467: run OTE tests only in ovn-kubernetes conformance suites #3416
OCPBUGS-112470: Register test images using tests extension #3363
NO-JIRA: DownStream Merge [08-17-2026] #3402
Full changelog

powervs-block-csi-driver

MULTIARCH-6346: Rebase with upstream - go modules updates and code changes #138
Full changelog

powervs-cloud-controller-manager

No-Jira: Update packages in go.mod #114
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #109
No-Jira: Update packages in go.mod #108
Full changelog

prom-label-proxy

NO-JIRA: synchronize OWNERS from cluster-monitoring-operator #401
NO-ISSUE: [bot] Bump openshift/prom-label-proxy to v0.15.1 #399
Full changelog

prometheus

NO-JIRA: update OWNERS #379
NO-JIRA: [bot] Bump openshift/prometheus to v3.14.0 #363
NO-ISSUE: [bot] Bump openshift/prometheus to v3.14.0 #361
Full changelog

prometheus-alertmanager

NO-JIRA: synchronize OWNERS from cluster-monitoring-operator #186
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #175
Bump openshift/prometheus-alertmanager to v0.34.1 #177
Bump openshift/prometheus-alertmanager to v0.34.0 #168
NO-ISSUE: Remove unused upstream .github/workflows #167
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

NO-JIRA: synchronize OWNERS from cluster-monitoring-operator #405
MON-4696: Bump openshift/prometheus-operator to v0.94.1 #403
MON-4689: Bump openshift/prometheus-operator to v0.94.0 #400
NO-ISSUE: [bot] Bump openshift/prometheus-operator to v0.93.1 #393
Full changelog

prometheus-node-exporter

NO-JIRA: Update OWNERS #199
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #189
NO-ISSUE: [bot] Bump openshift/node_exporter to v1.12.1 #186
OCPBUGS-100376: cherry-pick 24c6dce279c418bcb911824e8c8be1c81a1e832b - Fix fibrechannel_linux for ppc64le (#3769) #184
Full changelog

rhel-coreos, rhel-coreos-10, rhel-coreos-10-extensions, rhel-coreos-extensions

NO-JIRA: Update to track 5.1 #1964
Full changelog

route-controller-manager

OCPBUGS-104856: clear unmanaged-route metric when the route is removed #102
Full changelog

telemeter

NO-ISSUE: tidy up tools/go.mod #617
OCPBUGS-122075: don’t log authorization header #614
NO-JIRA: synchronize OWNERS from cluster-monitoring-operator #622
OCPBUGS-114428: Remove generated Telemeter tools vendor tree #618
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #615
OCPBUGS-115550: Add ‘agent-installer-postconfig’ install_type #616
BIZ-794: separte managed and self-managed ACM capacity #612
Full changelog

tests

INTEROP-9204: Add –extension-local-binaries flag for local extension binary loading #31652
trt-2972: use matcher details #31676
OCPBUGS-128397: Skip router verbosity rollout for degraded TNF tests #31680
OPCT-460: Increase timeout for external IP policy test to accommodate in-cluster rollouts #31636
NO-JIRA: Up threshold for mass dns disruption to fail a test based on real world observations #31674
CNTRLPLANE-3851: Oauth server proxy config e2e #31463
CNTRLPLANE-3474: Add tests for external claims source featuregate #31591
OCPBUGS-127184: Redact OAuth tokens from test cleanup logs #31640
STOR-3090: Add CSI storage test for pod delete after host umount of mounted volume #31488
OCPBUGS-111056: Make operator log scraper and monitor tests topology-aware #31597
CNTRLPLANE-4303: Add threshold for ote encryption cases #31658
OCPBUGS-112722: make webhook build resolution wait phase-independent #31655
OCPBUGS-121385: Resolve Additional Storage agnhost image through mirror #31618
NE-2750: implement feature test for GatewayAPIManagementMode #31503
OCPEDGE-3076: Fix TNF kubelet disruption test race condition #31650
OCPSTRAT-3661: Always emit passing cases for found issues in RBAC monitor test #31639
NO-ISSUE: Automated - Update synthetic test data #31607
NO-JIRA: Add a new test for mass DNS disruption #31625
OCPBUGS-114022: Avoid polling skipped Prometheus target namespaces #31563
TRT-2830: add REVIEW.md for agentic review responses #31637
OCPSTRAT-3661: Add Sippy discovered exceptions for RBAC monitor test #31616
OCPBUGS-104846: Filter both [FeatureGate:] and [OCPFeatureGate:] #31623
OCPBUGS-121384: Isolate KubeletEnsureSecretPulledImages test setup #31619
OKD-454: Skip OKD job name check for cluster-bot launch jobs #31628
OCPBUGS-92837: test/router: wait for all per-route metrics before asserting #31344
CORENET-6746: Allow EgressIP NoMatchingNodeFound events to repeat pathologically #31614
OCPBUGS-86789: Bump network config timeout to 25 minutes #31599
CNTRLPLANE-3789: Add e2e tests for authentication component proxy #31446
OCPBUGS-84250: Increase router verbosity in DCM tests #31555
NO-JIRA: test: poll final EgressFirewall DNS deny assertion #31473
OCPBUGS-66213: add link to jira card #31609
NE-2839: Add HAProxy version upgrade tests #31602
CORENET-7243: Add TLS Profile Compliance tests for networking components #31500
OCPSTRAT-3618: Fix check in auth test for 1.37 given new NamedAuthorizer behavior #31574
OCPSTRAT-3618: Update etcd test data for k8s 1.37 release #31605
METAL-1833: Register cluster-baremetal-tests-ext in extension registry #31197
OCPSTRAT-3661: Add monitortest to verify possible Cluster Admin escalation paths #31536
OCPBUGS-66213: image registry single replica exceptions #31544
OCPBUGS-111997: Add Degraded=True exception for authentication operator during upgrade #31535
TRT-2939: Revert “Merge pull request #31495 from jcmoraisjr/NE-2839-haproxy-version-upgrade-tests” #31598
OCPBUGS-77283: bump kubevirt fedora containerDisk to multi-arch v1.8.2 + permanent exception #31284
OCPBUGS-112662: Fix the number of requests in repeated exec #31548
OCPBUGS-115153: Make extension test-binary extraction architecture-aware #31579
NO-ISSUE: Automated - Update synthetic test data #31581
NE-2839: Add HAProxy version upgrade tests #31495
OCPBUGS-111643: Fixed Flakiness of Webhook test - ClusterResourceQuota validation #31531
OCPNODE-4470: Add DRA consumable capacity e2e tests #31448
OCPBUGS-112390: Fix node replacement test timestamp filter and allow job retry #31492
TRT-2930: skip regional-PD e2e on GCP families without pd-standard #31572
ROSAENG-391: Add CustomResourcePublishOpenAPI conformance test to retry allowlist #31552
OCPBUGS-114341: Allow KubeDaemonSetRolloutStuck alert on external platform clusters #31564
OCPBUGS-111581: Fix probe termination test to use pod status instead of kubelet event text #31528
OCPBUGS-112283: Allow KubeDaemonSetMisScheduled alert on external platform clusters #31556
OCPBUGS-99536: Raise status polling timeout and write bound #31534
OCPBUGS-86257: Fix pathological events #31543
OCPBUGS-105399, OCPBUGS-105400: Remove TechPreview skips and event matchers from sigstore imagepolicy tests #31521
CNTRLPLANE-3423: e2e TLS test for service-operator-ca #31480
OCPBUGS-112470: fix duplicate destination tags in openshift-tests images output #31542
OCPBUGS-84517: Remove stale openshift-marketplace terminationMessagePolicy exemption #31355
CONSOLE-5188: remove console exceptions #31280
OCPBUGS-100298: pin internal-lb-monitor pollers to worker nodes #31466
OCPBUGS-84513: remove openshift-cluster-version terminationMessagePolicy exemption #31359
OCPBUGS-105461: allow baremetal to progress while MCO does #31511
OCPBUGS-105874: Avoid TLS port-forward to stale endpoints on degraded TNF clusters. #31502
OCPBUGS-111704: router/metrics: enable proxy protocol for client on AWS clusters #31526
OCPBUGS-109671: monitortests: allow image-registry node-ca Progressing on DualReplica #31517
CNTRLPLANE-1739: e2e additional tests for pki config #31491
OCPBUGS-104561: test: exclude NTO debug pods from best-effort QoS invariant #31472
OCPBUGS-105876: tolerate brief olm Available=False during upgrades #31518
NO-JIRA: Remove exception OCPBUGS-66225 #31471
NO-JIRA: Remove exception OCPBUGS-86009 #31470
OCPCLOUD-3420: Remove exceptions OCPBUGS-42837 and OCPBUGS-64852 #31469
MON-4471: test/extended/prometheus: move alert tests to “Test Framework” #30703
OCPBUGS-106190: Make oc rsh test resilient #31515
TRT-2898: Fix leaked ClusterRoleBinding in pull_secrets test #31514
And 4 elided commits (e.g. from squash or rebase merges)
Full changelog

thanos

NO-JIRA: synchronize OWNERS from cluster-monitoring-operator #215
Bump openshift/thanos to v0.42.4 #203
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #206
OCPBUGS-120744: bump go.opentelemetry.io/otel to fix CVE-2026-41178 #204
Full changelog

volume-data-source-validator

OCPBUGS-127004: Bump golang.org/x/net to version 0.57.0 that fixes CVE-2026-33814 #17
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #117
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #200
OCPBUGS-122179: Fix credential exposure in logs (CWE-532) #199
OCPBUGS-114884: UPSTREAM: 4272: Fix crash in syncer when node can’t be found #201
Full changelog

vsphere-csi-driver-operator

OCPBUGS-113538: Enable SELinuxMount tests #362
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Red Hat Enterprise Linux CoreOS 9.8 (`rhel-coreos`)

Package List

cri-o-5.1.0-202609220004.p2.gc31bc86.assembly.stream.el9
kernel-5.14.0-687.53.1.el9_8
openshift-kubelet-5.1.0-202609260533.p2.ga3efef0.assembly.stream.el9
systemd-252-67.el9_8.6

Full list (570 packages)

NetworkManager-1:1.54.3-5.el9_8
NetworkManager-cloud-setup-1:1.54.3-5.el9_8
NetworkManager-libnm-1:1.54.3-5.el9_8
NetworkManager-ovs-1:1.54.3-5.el9_8
NetworkManager-team-1:1.54.3-5.el9_8
NetworkManager-tui-1:1.54.3-5.el9_8
WALinuxAgent-udev-2.14.0.1-4.el9
aardvark-dns-2:1.17.1-1.el9_8
acl-2.4.0-1.el9_8
adcli-0.9.3.1-3.el9
adcli-selinux-0.9.3.1-3.el9
afterburn-5.10.0-1.el9
afterburn-dracut-5.10.0-1.el9
alternatives-1.24-2.el9
attr-2.6.0-1.el9_8
audit-3.1.5-8.el9
audit-libs-3.1.5-8.el9
authselect-1.2.6-3.el9
authselect-libs-1.2.6-3.el9
avahi-libs-0.8-23.el9
azure-vm-utils-0.7.0-1.el9
basesystem-11-13.el9
bash-5.1.8-9.el9
bash-completion-1:2.11-5.el9
bind-libs-32:9.16.23-40.el9_8.9
bind-license-32:9.16.23-40.el9_8.9
bind-utils-32:9.16.23-40.el9_8.9
binutils-2.35.2-72.el9
binutils-gold-2.35.2-72.el9
bootc-1.16.4-1.el9_8
bootupd-0.2.35-1.el9_8
bsdtar-3.5.3-11.el9_8
bubblewrap-0.6.3-1.el9
bzip2-1.0.8-11.el9
bzip2-libs-1.0.8-11.el9
c-ares-1.19.1-2.el9_4
ca-certificates-2025.2.80_v9.0.305-91.el9
checkpolicy-3.6-1.el9
chrony-4.8-1.el9
cifs-utils-7.6-2.el9_8
clevis-21-209.el9
clevis-dracut-21-209.el9
clevis-luks-21-209.el9
clevis-systemd-21-209.el9
cloud-utils-growpart-0.33-1.el9
composefs-1.0.8-1.el9
composefs-libs-1.0.8-1.el9
conmon-3:2.2.1-2.el9_8
conmon-rs-0.6.6-0.rhaos5.0.el9
console-login-helper-messages-0.21.3-1.el9
console-login-helper-messages-issuegen-0.21.3-1.el9
console-login-helper-messages-profile-0.21.3-1.el9
container-selinux-4:2.247.0-1.el9_8
containernetworking-plugins-1:1.9.0-4.el9_8
containers-common-5:5.8-1.el9
coreos-installer-0.26.0-1.el9_8
coreos-installer-bootinfra-0.26.0-1.el9_8
coreutils-8.32-41.el9_8.1
coreutils-common-8.32-41.el9_8.1
cpio-2.13-16.el9
cracklib-2.9.6-28.el9
cracklib-dicts-2.9.6-28.el9
cri-o-5.1.0-202609220004.p2.gc31bc86.assembly.stream.el9
cri-tools-1.36.0-2.el9
criu-3.19-4.el9_8
criu-libs-3.19-4.el9_8
crun-1.27-1.el9_8
crypto-policies-20260224-1.gitea0f072.el9_8
crypto-policies-scripts-20260224-1.gitea0f072.el9_8
cryptsetup-2.8.1-3.el9
cryptsetup-libs-2.8.1-3.el9
curl-7.76.1-40.el9_8.7
cyrus-sasl-gssapi-2.1.27-22.el9
cyrus-sasl-lib-2.1.27-22.el9
dbus-1:1.12.20-8.el9
dbus-broker-28-9.el9_8
dbus-common-1:1.12.20-8.el9
dbus-libs-1:1.12.20-8.el9
dbus-tools-1:1.12.20-8.el9
device-mapper-9:1.02.207-4.el9_8.1
device-mapper-event-9:1.02.207-4.el9_8.1
device-mapper-event-libs-9:1.02.207-4.el9_8.1
device-mapper-libs-9:1.02.207-4.el9_8.1
device-mapper-multipath-0.8.7-45.el9
device-mapper-multipath-libs-0.8.7-45.el9
device-mapper-persistent-data-1.1.0-1.el9
diffutils-3.7-12.el9
dmidecode-1:3.6-2.el9
dnf-4.14.0-34.el9_8
dnf-data-4.14.0-34.el9_8
dnsmasq-2.85-18.el9_8.2
dosfstools-4.2-3.el9
dracut-057-120.git20260728.el9_8
dracut-network-057-120.git20260728.el9_8
dracut-squash-057-120.git20260728.el9_8
e2fsprogs-1.46.5-8.el9
e2fsprogs-libs-1.46.5-8.el9
efi-filesystem-6-4.el9
efibootmgr-16-12.el9
efivar-libs-38-3.el9
elfutils-debuginfod-client-0.194-1.el9
elfutils-default-yama-scope-0.194-1.el9
elfutils-libelf-0.194-1.el9
elfutils-libs-0.194-1.el9
ethtool-2:6.15-2.el9
expat-2.5.0-6.el9_8.3
fcoe-utils-1.0.34-0.git14ef0d2.el9
file-5.39-17.el9
file-libs-5.39-17.el9
filesystem-3.16-5.el9
findutils-1:4.8.0-7.el9
firewalld-filesystem-1.3.4-20.el9_8
flashrom-1.2-10.el9
fstrm-0.6.1-3.el9
fuse-2.9.9-17.el9
fuse-common-3.10.2-9.el9
fuse-libs-2.9.9-17.el9
fuse-overlayfs-1.16-1.el9_7
fuse3-3.10.2-9.el9
fuse3-libs-3.10.2-9.el9
fwupd-2.0.19-2.el9_8
fwupd-plugin-flashrom-2.0.19-2.el9_8
gawk-5.1.0-6.el9
gawk-all-langpacks-5.1.0-6.el9
gdbm-libs-1:1.23-1.el9
gdisk-1.0.7-5.el9
geolite2-city-20191217-6.el9
geolite2-country-20191217-6.el9
gettext-0.21-8.el9
gettext-libs-0.21-8.el9
git-core-2.52.0-1.el9
glib2-2.68.4-19.el9_8.10
glibc-2.34-275.el9_8
glibc-common-2.34-275.el9_8
glibc-gconv-extra-2.34-275.el9_8
glibc-minimal-langpack-2.34-275.el9_8
glusterfs-6.0-57.4.el9
glusterfs-client-xlators-6.0-57.4.el9
glusterfs-fuse-6.0-57.4.el9
glusterfs-libs-6.0-57.4.el9
gmp-1:6.2.0-13.el9
gnupg2-2.3.3-5.el9_7
gnutls-3.8.10-8.el9_8
gobject-introspection-1.68.0-11.el9
gpgme-1.15.1-6.el9
grep-3.6-5.el9
groff-base-1.22.4-10.el9
grub2-common-1:2.06-126.el9_8
grub2-efi-x64-1:2.06-126.el9_8
grub2-pc-1:2.06-126.el9_8
grub2-pc-modules-1:2.06-126.el9_8
grub2-tools-1:2.06-126.el9_8
grub2-tools-minimal-1:2.06-126.el9_8
gssproxy-0.8.4-7.el9
gzip-1.12-2.el9_8
hostname-3.23-6.el9
hwdata-0.348-9.22.el9
ignition-2.26.0-1.el9_8
ignition-grub-2.26.0-1.el9_8
ima-evm-utils-1.6.2-2.el9
info-6.7-15.el9
inih-49-6.el9
initscripts-service-10.11.8-4.el9
ipcalc-1.0.0-5.el9
iproute-6.17.0-2.el9
iproute-tc-6.17.0-2.el9
iptables-libs-1.8.10-11.el9_5
iptables-nft-1.8.10-11.el9_5
iputils-20210202-15.el9_7
irqbalance-2:1.9.4-5.el9
iscsi-initiator-utils-6.2.1.11-1.git4b3e853.el9_8.2
iscsi-initiator-utils-iscsiuio-6.2.1.11-1.git4b3e853.el9_8.2
isns-utils-libs-0.101-4.el9_8.1
jansson-2.14-1.el9
jose-14-1.el9
jq-1.6-19.el9_8.2
json-c-0.14-11.el9
json-glib-1.6.6-1.el9
kbd-2.4.0-12.el9_8
kbd-legacy-2.4.0-12.el9_8
kbd-misc-2.4.0-12.el9_8
kernel-5.14.0-687.53.1.el9_8
kernel-core-5.14.0-687.53.1.el9_8
kernel-modules-5.14.0-687.53.1.el9_8
kernel-modules-core-5.14.0-687.53.1.el9_8
kernel-modules-extra-5.14.0-687.53.1.el9_8
kexec-tools-2.0.29-17.el9
keyutils-1.6.3-1.el9
keyutils-libs-1.6.3-1.el9
kmod-28-11.el9
kmod-libs-28-11.el9
kpartx-0.8.7-45.el9
krb5-libs-1.21.1-10.el9_8
less-590-6.el9
libacl-2.4.0-1.el9_8
libaio-0.3.111-13.el9
libarchive-3.5.3-11.el9_8
libassuan-2.5.5-3.el9
libattr-2.6.0-1.el9_8
libbasicobjects-0.1.1-53.el9
libblkid-2.37.4-25.el9
libbpf-2:1.5.0-3.el9
libbrotli-1.0.9-9.el9_7
libcap-2.48-10.el9_8.1
libcap-ng-0.8.2-7.el9
libcbor-0.7.0-5.el9
libcollection-0.7.0-53.el9
libcom_err-1.46.5-8.el9
libcomps-0.1.18-1.el9
libconfig-1.7.2-9.el9
libcurl-7.76.1-40.el9_8.7
libdaemon-0.14-23.el9
libdb-5.3.28-57.el9_6
libdhash-0.5.0-53.el9
libdnf-0.69.0-18.el9
libdnf-plugin-subscription-manager-1.29.50-1.el9
libdrm-2.4.128-1.el9
libeconf-0.4.1-7.el9_8
libedit-3.1-39.20210216cvs.el9
libev-4.33-6.el9
libevent-2.1.13-1.el9_8
libfdisk-2.37.4-25.el9
libffi-3.4.2-8.el9
libfido2-1.13.0-2.el9
libgcc-11.5.0-14.el9
libgcrypt-1.10.0-13.el9_8
libgomp-11.5.0-14.el9
libgpg-error-1.42-5.el9
libibverbs-61.0-2.el9
libicu-67.1-10.el9_6
libidn2-2.3.0-7.el9
libini_config-1.3.1-53.el9
libipa_hbac-2.9.8-4.el9_8.1
libjcat-0.1.6-3.el9
libjose-14-1.el9
libkcapi-1.4.0-3.el9_8
libkcapi-hmaccalc-1.4.0-3.el9_8
libksba-1.5.1-7.el9
libldb-4.23.5-11.el9_8
libluksmeta-10-1.el9
libmaxminddb-1.5.2-4.el9
libmicrohttpd-1:0.9.72-5.el9
libmnl-1.0.4-16.el9_4
libmodulemd-2.13.0-2.el9
libmount-2.37.4-25.el9
libmspack-0.10.1-0.7.alpha.el9
libndp-1.9-1.el9
libnet-1.2-7.el9
libnetfilter_conntrack-1.0.9-1.el9
libnfnetlink-1.0.1-23.el9_5
libnfsidmap-1:2.5.4-42.el9_8
libnftnl-1.2.6-4.el9_4
libnghttp2-1.43.0-6.el9_8.2
libnl3-3.11.0-1.el9
libnl3-cli-3.11.0-1.el9
libnvme-1.16.1-3.el9_8
libpath_utils-0.2.1-53.el9
libpcap-14:1.10.0-4.el9
libpciaccess-0.16-7.el9
libpkgconf-1.7.3-10.el9
libpsl-0.21.1-5.el9
libpwquality-1.4.4-8.el9
libref_array-0.1.5-53.el9
librepo-1.19.0-1.el9
libreport-filesystem-2.15.2-6.el9
librhsm-0.0.3-9.el9
libseccomp-2.5.2-2.el9
libselinux-3.6-3.el9
libselinux-utils-3.6-3.el9
libsemanage-3.6-5.el9_6
libsepol-3.6-3.el9
libsigsegv-2.13-4.el9
libslirp-4.4.0-8.el9
libsmartcols-2.37.4-25.el9
libsmbclient-4.23.5-11.el9_8
libsolv-0.7.24-6.el9_8
libss-1.46.5-8.el9
libssh-0.10.4-19.el9_8
libssh-config-0.10.4-19.el9_8
libsss_certmap-2.9.8-4.el9_8.1
libsss_idmap-2.9.8-4.el9_8.1
libsss_nss_idmap-2.9.8-4.el9_8.1
libsss_sudo-2.9.8-4.el9_8.1
libstdc++-11.5.0-14.el9
libtalloc-2.4.3-1.el9
libtasn1-4.16.0-10.el9_8
libtdb-1.4.14-1.el9
libteam-1.31-16.el9_1
libtevent-0.17.1-1.el9
libtirpc-1.3.3-9.el9
libtool-ltdl-2.4.6-46.el9
libunistring-0.9.10-15.el9
liburing-2.12-1.el9
libusbx-1.0.30-1.el9_8
libuser-0.63-17.el9
libutempter-1.2.1-6.el9
libuuid-2.37.4-25.el9
libuv-1:1.42.0-2.el9_4
libverto-0.3.2-3.el9
libverto-libev-0.3.2-3.el9
libwbclient-4.23.5-11.el9_8
libxcrypt-4.4.18-3.el9
libxcrypt-compat-4.4.18-3.el9
libxml2-2.9.13-14.el9_8.5
libxmlb-0.3.24-1.el9
libxslt-1.1.34-14.el9_8.1
libyaml-0.2.5-7.el9
libzstd-1.5.5-1.el9
linux-firmware-20260804-161.2.el9_8
linux-firmware-whence-20260804-161.2.el9_8
lldpad-1.1.1-4.gitf1dd9eb.el9
lmdb-libs-0.9.29-3.el9
logrotate-3.18.0-12.el9
lsof-4.94.0-3.el9
lua-libs-5.4.4-4.el9
luksmeta-10-1.el9
lvm2-9:2.03.33-4.el9_8.1
lvm2-libs-9:2.03.33-4.el9_8.1
lz4-libs-1.9.3-5.el9
lzo-2.10-7.el9
mdadm-4.4-4.el9_8.1
microcode_ctl-4:20260210-1.20260812.1.el9_8
mokutil-2:0.7.2-4.el9
mpfr-4.1.0-10.el9
nano-5.6.1-7.el9
ncurses-6.2-12.20210508.el9
ncurses-base-6.2-12.20210508.el9
ncurses-libs-6.2-12.20210508.el9
net-tools-2.0-0.64.20160912git.el9
netavark-2:1.17.2-1.el9
nettle-3.10.1-1.el9
newt-0.52.21-11.el9
nfs-utils-1:2.5.4-42.el9_8
nftables-1:1.0.9-9.el9_8
nmap-ncat-3:7.92-5.el9
nmstate-2.2.60-2.el9_8
npth-1.6-8.el9
nss-altfiles-2.18.1-20.el9
numactl-2.0.19-3.el9
numactl-libs-2.0.19-3.el9
numad-0.5-37.20150602git.el9
nvme-cli-2.16-1.el9
oniguruma-6.9.6-1.el9.6
open-vm-tools-13.0.10-1.el9
openldap-2.6.8-4.el9
openshift-clients-5.1.0-202609222048.p2.g6415937.assembly.stream.el9
openshift-kubelet-5.1.0-202609260533.p2.ga3efef0.assembly.stream.el9
openssh-9.9p1-11.el9_8
openssh-clients-9.9p1-11.el9_8
openssh-server-9.9p1-11.el9_8
openssl-1:3.5.8-1.el9_8
openssl-fips-provider-3.0.7-11.el9_8
openssl-fips-provider-so-3.0.7-11.el9_8
openssl-libs-1:3.5.8-1.el9_8
openvswitch-selinux-extra-policy-1.0-39.el9fdp
openvswitch3.5-3.5.2-72.el9fdp.2
os-prober-1.77-12.el9_5
ose-aws-ecr-image-credential-provider-5.1.0-202609162104.p2.ge44d135.assembly.stream.el9
ose-azure-acr-image-credential-provider-5.1.0-202609091748.p2.g2b2ba3b.assembly.stream.el9
ose-crio-credential-provider-5.1.0-202609252048.p2.g83d4961.assembly.stream.el9
ose-gcp-gcr-image-credential-provider-5.1.0-202609252048.p2.g51c3264.assembly.stream.el9
ostree-2025.7-1.el9
ostree-grub2-2025.7-1.el9
ostree-libs-2025.7-1.el9
p11-kit-0.26.4-1.el9_8
p11-kit-trust-0.26.4-1.el9_8
pam-1.5.1-28.el9_8.1
passt-0^20251210.gd04c480-6.el9_8
passt-selinux-0^20251210.gd04c480-6.el9_8
passwd-0.80-12.el9
pciutils-3.7.0-7.el9
pciutils-libs-3.7.0-7.el9
pcre-8.44-4.el9
pcre2-10.40-6.el9
pcre2-syntax-10.40-6.el9
perl-AutoLoader-5.74-484.el9_8
perl-B-1.80-484.el9_8
perl-Carp-1.50-460.el9
perl-Class-Struct-0.66-484.el9_8
perl-Data-Dumper-2.174-462.el9
perl-Digest-1.19-4.el9
perl-Digest-MD5-2.58-4.el9
perl-Encode-4:3.08-462.el9
perl-Errno-1.30-484.el9_8
perl-Exporter-5.74-461.el9
perl-Fcntl-1.13-484.el9_8
perl-File-Basename-2.85-484.el9_8
perl-File-Path-2.18-4.el9
perl-File-Temp-1:0.231.100-4.el9
perl-File-stat-1.09-484.el9_8
perl-FileHandle-2.03-484.el9_8
perl-Getopt-Long-1:2.52-4.el9
perl-Getopt-Std-1.12-484.el9_8
perl-HTTP-Tiny-0.076-462.el9
perl-IO-1.43-484.el9_8
perl-IO-Socket-IP-0.41-5.el9
perl-IO-Socket-SSL-2.073-2.el9
perl-IPC-Open3-1.21-484.el9_8
perl-MIME-Base64-3.16-4.el9
perl-Mozilla-CA-20200520-6.el9
perl-NDBM_File-1.15-484.el9_8
perl-Net-SSLeay-1.94-3.el9
perl-POSIX-1.94-484.el9_8
perl-PathTools-3.78-461.el9
perl-Pod-Escapes-1:1.07-460.el9
perl-Pod-Perldoc-3.28.01-461.el9
perl-Pod-Simple-1:3.42-4.el9
perl-Pod-Usage-4:2.01-4.el9
perl-Scalar-List-Utils-4:1.56-462.el9
perl-SelectSaver-1.02-484.el9_8
perl-Socket-4:2.031-4.el9
perl-Storable-1:3.21-460.el9
perl-Symbol-1.08-484.el9_8
perl-Term-ANSIColor-5.01-461.el9
perl-Term-Cap-1.17-460.el9
perl-Text-ParseWords-3.30-460.el9
perl-Text-Tabs+Wrap-2013.0523-460.el9
perl-Time-Local-2:1.300-7.el9
perl-URI-5.09-3.el9
perl-base-2.27-484.el9_8
perl-constant-1.33-461.el9
perl-if-0.60.800-484.el9_8
perl-interpreter-4:5.32.1-484.el9_8
perl-libnet-3.13-4.el9
perl-libs-4:5.32.1-484.el9_8
perl-mro-1.23-484.el9_8
perl-overload-1.31-484.el9_8
perl-overloading-0.02-484.el9_8
perl-parent-1:0.238-460.el9
perl-podlators-1:4.14-460.el9
perl-subs-1.03-484.el9_8
perl-vars-1.05-484.el9_8
pigz-2.8-1.el9
pkgconf-1.7.3-10.el9
pkgconf-m4-1.7.3-10.el9
pkgconf-pkg-config-1.7.3-10.el9
podman-6:5.8.2-7.el9_8
policycoreutils-3.6-5.el9
policycoreutils-python-utils-3.6-5.el9
polkit-0.117-14.el9
polkit-libs-0.117-14.el9
polkit-pkla-compat-0.1-21.el9
popt-1.18-8.el9
procps-ng-3.3.17-14.el9
protobuf-c-1.3.3-13.el9
psmisc-23.4-3.el9
publicsuffix-list-dafsa-20210518-3.el9
python-unversioned-command-3.9.25-7.el9_8.3
python3-3.9.25-7.el9_8.3
python3-audit-3.1.5-8.el9
python3-chardet-4.0.0-5.el9
python3-cloud-what-1.29.50-1.el9
python3-dateutil-1:2.9.0.post0-1.el9_7
python3-dbus-1.2.18-2.el9
python3-decorator-4.4.2-6.el9
python3-distro-1.5.0-7.el9
python3-dnf-4.14.0-34.el9_8
python3-dnf-plugin-versionlock-4.3.0-26.el9
python3-dnf-plugins-core-4.3.0-26.el9
python3-gobject-base-3.40.1-6.el9
python3-gobject-base-noarch-3.40.1-6.el9
python3-gpg-1.15.1-6.el9
python3-hawkey-0.69.0-18.el9
python3-idna-2.10-8.el9_8
python3-iniparse-0.4-45.el9
python3-inotify-0.9.6-25.el9
python3-libcomps-0.1.18-1.el9
python3-libdnf-0.69.0-18.el9
python3-librepo-1.19.0-1.el9
python3-libs-3.9.25-7.el9_8.3
python3-libselinux-3.6-3.el9
python3-libsemanage-3.6-5.el9_6
python3-pip-wheel-21.3.1-2.el9_8
python3-policycoreutils-3.6-5.el9
python3-pysocks-1.7.1-12.el9
python3-pyyaml-5.4.1-6.el9
python3-requests-2.25.1-10.el9_6
python3-rpm-4.16.1.3-40.el9
python3-setools-4.4.4-1.el9
python3-setuptools-53.0.0-15.el9
python3-setuptools-wheel-53.0.0-15.el9
python3-six-1.15.0-9.el9
python3-subscription-manager-rhsm-1.29.50-1.el9
python3-systemd-234-19.el9
python3-urllib3-1.26.5-8.el9_8
qemu-guest-agent-17:10.1.0-17.el9_8.5
quota-1:4.09-4.el9
quota-nls-1:4.09-4.el9
rdma-core-61.0-2.el9
readline-8.1-4.el9
redhat-release-9.8-1.0.el9
redhat-release-eula-9.8-1.0.el9
rpcbind-1.2.6-7.el9
rpm-4.16.1.3-40.el9
rpm-build-libs-4.16.1.3-40.el9
rpm-libs-4.16.1.3-40.el9
rpm-ostree-2026.1-6.el9_8
rpm-ostree-libs-2026.1-6.el9_8
rpm-plugin-selinux-4.16.1.3-40.el9
rpm-plugin-systemd-inhibit-4.16.1.3-40.el9
rpm-sign-libs-4.16.1.3-40.el9
rsync-3.2.7-1.el9_8
runc-4:1.4.2-3.el9_8
samba-client-libs-4.23.5-11.el9_8
samba-common-4.23.5-11.el9_8
samba-common-libs-4.23.5-11.el9_8
sed-4.8-10.el9
selinux-policy-38.1.75-2.el9_8
selinux-policy-targeted-38.1.75-2.el9_8
setup-2.13.7-10.el9
sg3_utils-1.47-10.el9_8.1
sg3_utils-libs-1.47-10.el9_8.1
shadow-utils-2:4.9-16.el9
shadow-utils-subid-2:4.9-16.el9
shared-mime-info-2.1-5.el9
shim-x64-16.1-7.el9
skopeo-2:1.22.2-8.el9_8
slang-2.3.2-11.el9
slirp4netns-1.3.3-1.el9
snappy-1.1.8-8.el9
socat-1.7.4.1-8.el9
sqlite-libs-3.34.1-11.el9_8
squashfs-tools-4.4-10.git1.el9
ssh-key-dir-0.1.4-1.el9
sssd-2.9.8-4.el9_8.1
sssd-ad-2.9.8-4.el9_8.1
sssd-client-2.9.8-4.el9_8.1
sssd-common-2.9.8-4.el9_8.1
sssd-common-pac-2.9.8-4.el9_8.1
sssd-ipa-2.9.8-4.el9_8.1
sssd-krb5-2.9.8-4.el9_8.1
sssd-krb5-common-2.9.8-4.el9_8.1
sssd-ldap-2.9.8-4.el9_8.1
sssd-nfs-idmap-2.9.8-4.el9_8.1
sssd-proxy-2.9.8-4.el9_8.1
stalld-1.26.3-1.el9
strace-6.12-1.el9
subscription-manager-1.29.50-1.el9
subscription-manager-rhsm-certificates-20220623-1.el9
sudo-1.9.17p2-3.el9_8.1
systemd-252-67.el9_8.6
systemd-journal-remote-252-67.el9_8.6
systemd-libs-252-67.el9_8.6
systemd-pam-252-67.el9_8.6
systemd-rpm-macros-252-67.el9_8.6
systemd-udev-252-67.el9_8.6
tar-2:1.34-13.el9_8
teamd-1.31-16.el9_1
tmux-3.2a-5.el9
toolbox-0.1.2-1.rhaos4.22.el9
tpm2-tools-5.2-7.el9
tpm2-tss-3.2.3-1.el9
tzdata-2026c-1.el9_8
unbound-libs-1.24.2-3.el9_8.8
usermode-1.114-7.el9
userspace-rcu-0.12.1-6.el9
util-linux-2.37.4-25.el9
util-linux-core-2.37.4-25.el9
vim-minimal-2:8.2.2637-26.el9_8.21
virt-what-1.27-2.el9
which-2.21-30.el9_6
xfsprogs-6.4.0-7.el9
xmlsec1-1.2.29-13.el9
xmlsec1-openssl-1.2.29-13.el9
xz-5.2.5-8.el9_0
xz-libs-5.2.5-8.el9_0
yajl-2.1.0-25.el9
zlib-1.2.11-40.el9
zram-generator-1.1.2-1.el9
zstd-1.5.5-1.el9

Changed:

cri-o 5.0.0-202609212354.p2.gee69985.assembly.stream.el9 → 5.1.0-202609220004.p2.gc31bc86.assembly.stream.el9
cri-tools 1.36.0-3.el9 → 1.36.0-2.el9
kernel 5.14.0-687.52.1.el9_8 → 5.14.0-687.53.1.el9_8
kernel-core 5.14.0-687.52.1.el9_8 → 5.14.0-687.53.1.el9_8
kernel-modules 5.14.0-687.52.1.el9_8 → 5.14.0-687.53.1.el9_8
kernel-modules-core 5.14.0-687.52.1.el9_8 → 5.14.0-687.53.1.el9_8
kernel-modules-extra 5.14.0-687.52.1.el9_8 → 5.14.0-687.53.1.el9_8
openshift-clients 5.0.0-202609211906.p2.g4b0a124.assembly.stream.el9 → 5.1.0-202609222048.p2.g6415937.assembly.stream.el9
openshift-kubelet 5.0.0-202609250517.p2.g2a6104e.assembly.stream.el9 → 5.1.0-202609260533.p2.ga3efef0.assembly.stream.el9
ose-aws-ecr-image-credential-provider 5.0.0-202609211906.p2.g278e8c0.assembly.stream.el9 → 5.1.0-202609162104.p2.ge44d135.assembly.stream.el9
ose-azure-acr-image-credential-provider 5.0.0-202609151726.p2.g95f0a12.assembly.stream.el9 → 5.1.0-202609091748.p2.g2b2ba3b.assembly.stream.el9
ose-crio-credential-provider 5.0.0-202609211906.p2.g83d4961.assembly.stream.el9 → 5.1.0-202609252048.p2.g83d4961.assembly.stream.el9
ose-gcp-gcr-image-credential-provider 5.0.0-202609211906.p2.g51c3264.assembly.stream.el9 → 5.1.0-202609252048.p2.g51c3264.assembly.stream.el9

Extensions

Full list (0 packages)

Red Hat Enterprise Linux CoreOS 10.2 (`rhel-coreos-10`)

Package List

cri-o-5.1.0-202609220004.p2.gc31bc86.assembly.stream.el10
kernel-6.12.0-211.61.1.el10_2
openshift-kubelet-5.1.0-202609260533.p2.ga3efef0.assembly.stream.el10
systemd-257-23.el10_2.2

Full list (489 packages)

NetworkManager-1:1.56.0-2.el10_2
NetworkManager-cloud-setup-1:1.56.0-2.el10_2
NetworkManager-libnm-1:1.56.0-2.el10_2
NetworkManager-ovs-1:1.56.0-2.el10_2
NetworkManager-tui-1:1.56.0-2.el10_2
WALinuxAgent-udev-2.14.0.1-3.el10
aardvark-dns-2:1.17.1-1.el10_2
acl-2.4.0-1.el10_2
afterburn-5.10.0-1.el10
afterburn-dracut-5.10.0-1.el10
alternatives-1.30-2.el10
amd-gpu-firmware-20260804-23.2.el10_2
amd-ucode-firmware-20260804-23.2.el10_2
attr-2.6.0-1.el10_2
audit-4.0.3-5.el10
audit-libs-4.0.3-5.el10
audit-rules-4.0.3-5.el10
authselect-1.5.2-1.el10
authselect-libs-1.5.2-1.el10
avahi-libs-0.9~rc2-2.el10
azure-vm-utils-0.7.0-1.el10
basesystem-11-22.el10
bash-5.2.26-6.el10
bash-completion-1:2.11-16.el10
bind-libs-32:9.18.33-15.el10_2.11
bind-license-32:9.18.33-15.el10_2.11
bind-utils-32:9.18.33-15.el10_2.11
bootc-1.16.4-1.el10_2
bootupd-0.2.35-1.el10_2
bsdtar-3.7.7-11.el10_2
bubblewrap-0.10.0-3.el10
bzip2-1.0.8-25.el10
bzip2-libs-1.0.8-25.el10
c-ares-1.34.6-2.el10_2
ca-certificates-2025.2.80_v9.0.305-102.el10_1
catatonit-5:0.2.1-1.el10
checkpolicy-3.10-1.el10
chrony-4.8-2.el10
cifs-utils-7.7-1.el10_2
clevis-21-9.el10
clevis-dracut-21-9.el10
clevis-luks-21-9.el10
clevis-pin-tpm2-0.5.3-9.el10
clevis-systemd-21-9.el10
cloud-utils-growpart-0.33-11.el10
composefs-1.0.8-1.el10
composefs-libs-1.0.8-1.el10
conmon-3:2.2.1-2.el10
conmon-rs-0.6.6-0.rhaos5.0.el10
console-login-helper-messages-0.21.3-10.el10
console-login-helper-messages-issuegen-0.21.3-10.el10
console-login-helper-messages-profile-0.21.3-10.el10
container-selinux-4:2.248.0-1.el10_2
containers-common-6:5.8-2.el10
containers-common-extra-6:5.8-2.el10
coreos-installer-0.26.0-1.el10_2
coreos-installer-bootinfra-0.26.0-1.el10_2
coreutils-9.5-8.el10_2.1
coreutils-common-9.5-8.el10_2.1
cpio-2.15-3.el10
cracklib-2.9.11-8.el10
cracklib-dicts-2.9.11-8.el10
cri-o-5.1.0-202609220004.p2.gc31bc86.assembly.stream.el10
cri-tools-1.36.0-3.el10
criu-4.2-2.el10_2
criu-libs-4.2-2.el10_2
crun-1.27-2.el10_2
crypto-policies-20260216-1.git0e54016.el10_2.2
crypto-policies-scripts-20260216-1.git0e54016.el10_2.2
cryptsetup-2.8.1-2.el10
cryptsetup-libs-2.8.1-2.el10
curl-8.12.1-4.el10_2.6
cyrus-sasl-gssapi-2.1.28-30.el10_2
cyrus-sasl-lib-2.1.28-30.el10_2
dbus-1:1.14.10-5.el10
dbus-broker-36-5.el10_2
dbus-common-1:1.14.10-5.el10
dbus-libs-1:1.14.10-5.el10
dbus-tools-1:1.14.10-5.el10
device-mapper-10:1.02.210-2.el10
device-mapper-event-10:1.02.210-2.el10
device-mapper-event-libs-10:1.02.210-2.el10
device-mapper-libs-10:1.02.210-2.el10
device-mapper-multipath-0.9.9-18.el10
device-mapper-multipath-libs-0.9.9-18.el10
device-mapper-persistent-data-1.3.0-1.el10
diffutils-3.10-8.el10
dmidecode-1:3.6-5.el10
dnf-4.20.0-22.el10_2
dnf-data-4.20.0-22.el10_2
dnsmasq-2.90-7.el10_2.1
dosfstools-4.2-12.el10
dracut-107-9.el10_2
dracut-network-107-9.el10_2
dracut-squash-107-9.el10_2
duktape-2.7.0-10.el10
e2fsprogs-1.47.1-5.el10
e2fsprogs-libs-1.47.1-5.el10
efi-filesystem-6-6.el10
efibootmgr-18-8.el10
efivar-libs-39-3.el10
elfutils-default-yama-scope-0.194-2.el10_2
elfutils-libelf-0.194-2.el10_2
elfutils-libs-0.194-2.el10_2
erofs-utils-1.8.10-1.el10
ethtool-2:6.15-2.el10
expat-2.7.3-1.el10_2.3
fcoe-utils-1.0.34-11.gitb233050.el10
file-5.45-9.el10
file-libs-5.45-9.el10
filesystem-3.18-17.el10
findutils-1:4.10.0-5.el10
firewalld-filesystem-2.4.3-4.el10_2
flatpak-session-helper-1.16.0-9.el10_2.1
fstrm-0.6.1-12.el10
fuse-common-3.16.2-5.el10
fuse-libs-2.9.9-25.el10
fuse3-3.16.2-5.el10
fuse3-libs-3.16.2-5.el10
fwupd-2.0.19-4.1.el10_2
gawk-5.3.0-6.el10
gdbm-1:1.23-12.el10_0
gdbm-libs-1:1.23-12.el10_0
gettext-envsubst-0.22.5-6.el10
gettext-libs-0.22.5-6.el10
gettext-runtime-0.22.5-6.el10
git-core-2.52.0-1.el10
glib2-2.80.4-12.el10_2.22
glibc-2.39-128.el10_2
glibc-common-2.39-128.el10_2
glibc-gconv-extra-2.39-128.el10_2
glibc-minimal-langpack-2.39-128.el10_2
gmp-1:6.2.1-12.el10
gnupg2-2.4.5-4.el10_1
gnutls-3.8.10-4.el10_2
gobject-introspection-1.79.1-6.el10
gpgme-1.23.2-6.el10
grep-3.11-10.el10
grub2-common-1:2.12-46.el10_2
grub2-efi-x64-1:2.12-46.el10_2
grub2-pc-1:2.12-46.el10_2
grub2-pc-modules-1:2.12-46.el10_2
grub2-tools-1:2.12-46.el10_2
grub2-tools-minimal-1:2.12-46.el10_2
gssproxy-0.9.2-10.el10
gzip-1.13-4.el10_2
hostname-3.23-14.el10
hwdata-0.379-10.8.el10
ignition-2.26.0-2.el10_2
ignition-grub-2.26.0-2.el10_2
ima-evm-utils-1.6.2-4.el10
info-7.1-6.el10
inih-58-3.el10
intel-gpu-firmware-20260804-23.2.el10_2
ipcalc-1.0.3-12.el10
iproute-6.17.0-2.el10
iproute-tc-6.17.0-2.el10
iptables-libs-1.8.11-16.el10_2
iptables-nft-1.8.11-16.el10_2
iputils-20240905-5.el10
irqbalance-2:1.9.4-6.el10
iscsi-initiator-utils-6.2.1.11-1.git4b3e853.el10_2.2
iscsi-initiator-utils-iscsiuio-6.2.1.11-1.git4b3e853.el10_2.2
isns-utils-libs-0.103-1.el10_2.1
jansson-2.14-3.el10
jose-14-102.el10
jq-1.7.1-11.el10_2.2
json-c-0.18-3.el10
json-glib-1.8.0-5.el10
kbd-2.6.4-8.el10_2
kbd-legacy-2.6.4-8.el10_2
kbd-misc-2.6.4-8.el10_2
kdump-utils-1.0.58-15.el10
kernel-6.12.0-211.61.1.el10_2
kernel-core-6.12.0-211.61.1.el10_2
kernel-modules-6.12.0-211.61.1.el10_2
kernel-modules-core-6.12.0-211.61.1.el10_2
kernel-modules-extra-6.12.0-211.61.1.el10_2
kexec-tools-2.0.32-3.el10
keyutils-1.6.3-5.el10
keyutils-libs-1.6.3-5.el10
kmod-31-13.el10
kmod-libs-31-13.el10
kpartx-0.9.9-18.el10
krb5-libs-1.21.3-10.el10_2
less-661-3.el10
libacl-2.4.0-1.el10_2
libaio-0.3.111-22.el10
libarchive-3.7.7-11.el10_2
libassuan-2.5.6-6.el10
libattr-2.6.0-1.el10_2
libbasicobjects-0.1.1-58.el10
libblkid-2.40.2-18.el10
libbpf-2:1.7.0-1.el10
libcap-2.69-7.el10_2.1
libcap-ng-0.8.4-6.el10
libcbor-0.11.0-3.el10
libcollection-0.7.0-58.el10
libcom_err-1.47.1-5.el10
libcomps-0.1.21-3.el10
libconfig-1.7.3-10.el10
libcurl-minimal-8.12.1-4.el10_2.6
libdhash-0.5.0-58.el10
libdnf-0.73.1-15.el10_2
libdnf-plugin-subscription-manager-1.30.12-1.el10
libdrm-2.4.128-1.el10
libeconf-0.6.2-4.el10
libedit-3.1-52.20230828cvs.el10
libev-4.33-15.el10
libevent-2.1.13-1.el10_2
libfdisk-2.40.2-18.el10
libffi-3.4.4-10.el10
libfido2-1.14.0-7.el10
libgcc-14.3.1-4.4.el10
libgcrypt-1.11.0-7.el10_2
libgomp-14.3.1-4.4.el10
libgpg-error-1.50-2.el10
libibverbs-61.0-1.el10
libicu-74.2-5.el10_0
libidn2-2.3.7-3.el10
libini_config-1.3.1-58.el10
libipa_hbac-2.12.0-3.el10_2.1
libjcat-0.2.2-2.el10
libjose-14-102.el10
libkcapi-1.5.1-1.el10_2
libkcapi-hasher-1.5.1-1.el10_2
libkcapi-hmaccalc-1.5.1-1.el10_2
libksba-1.6.7-2.el10
libldb-4.23.5-110.el10_2
libluksmeta-10-1.el10
libmaxminddb-1.9.1-4.el10
libmicrohttpd-1:1.0.0-3.el10
libmnl-1.0.5-7.el10
libmodulemd-2.15.0-12.el10
libmount-2.40.2-18.el10
libmspack-0.10.1-0.14.alpha.el10
libndp-1.9-2.el10
libnet-1.3-7.el10
libnetfilter_conntrack-1.0.9-12.el10
libnfnetlink-1.0.2-3.el10
libnfsidmap-1:2.8.3-5.el10_2
libnftnl-1.3.0-3.el10
libnghttp2-1.68.0-3.el10_2.2
libnl3-3.11.0-1.el10
libnvme-1.16.1-3.el10_2
libpath_utils-0.2.1-58.el10
libpcap-14:1.10.4-7.el10
libpciaccess-0.16-16.el10
libpkgconf-2.1.0-3.el10
libpwquality-1.4.5-12.el10
libref_array-0.1.5-58.el10
librepo-1.19.0-1.el10
librhsm-0.0.3-16.el10
libseccomp-2.5.6-1.el10
libselinux-3.10-1.el10
libselinux-utils-3.10-1.el10
libsemanage-3.10-1.el10
libsepol-3.10-1.el10
libsmartcols-2.40.2-18.el10
libsmbclient-4.23.5-110.el10_2
libsolv-0.7.33-5.el10_2
libss-1.47.1-5.el10
libsss_certmap-2.12.0-3.el10_2.1
libsss_idmap-2.12.0-3.el10_2.1
libsss_nss_idmap-2.12.0-3.el10_2.1
libsss_sudo-2.12.0-3.el10_2.1
libstdc++-14.3.1-4.4.el10
libtalloc-2.4.3-100.el10
libtasn1-4.20.0-5.el10_2
libtdb-1.4.14-100.el10
libtevent-0.17.1-100.el10
libtirpc-1.3.5-1.el10
libtool-ltdl-2.4.7-13.el10
libunistring-1.1-10.el10
liburing-2.12-1.el10
libusb1-1.0.30-1.el10_2
libutempter-1.2.1-15.el10
libuuid-2.40.2-18.el10
libuv-1:1.52.1-1.el10_2
libverto-0.3.2-10.el10
libverto-libev-0.3.2-10.el10
libwbclient-4.23.5-110.el10_2
libxcrypt-4.4.36-10.el10
libxml2-2.12.5-10.el10_2.4
libxmlb-0.3.24-1.el10
libxslt-1.1.39-8.el10_2.1
libyaml-0.2.5-16.el10
libzstd-1.5.5-9.el10
linux-firmware-20260804-23.2.el10_2
linux-firmware-whence-20260804-23.2.el10_2
lldpad-1.1.1-4.gitf1dd9eb.el10
lmdb-libs-0.9.32-4.el10
logrotate-3.22.0-5.el10
lsof-4.98.0-7.el10
lua-libs-5.4.6-7.el10
luksmeta-10-1.el10
lvm2-10:2.03.36-2.el10
lvm2-libs-10:2.03.36-2.el10
lz4-libs-1.9.4-8.el10
lzo-2.10-14.el10
makedumpfile-1.7.8-1.el10
mdadm-4.4-3.el10_2.1
microcode_ctl-4:20260812-0.el10_2
mokutil-2:0.7.2-4.el10
mpdecimal-2.5.1-12.el10
mpfr-4.2.1-8.el10
nano-8.1-3.el10
ncurses-base-6.4-15.20240127.el10_1
ncurses-libs-6.4-15.20240127.el10_1
net-tools-2.0-0.73.20160912git.el10
netavark-2:1.17.2-1.el10
nettle-3.10.1-1.el10
newt-0.52.24-5.el10
nfs-utils-1:2.8.3-5.el10_2
nftables-1:1.1.5-6.el10_2
nmap-ncat-4:7.92-5.el10
nmstate-2.2.60-3.el10_2
npth-1.6-21.el10
nss-altfiles-2.23.0-6.el10
numactl-2.0.19-3.el10
numactl-libs-2.0.19-3.el10
numad-0.5-50.20251104git.el10
nvidia-gpu-firmware-20260804-23.2.el10_2
nvme-cli-2.16-2.el10
oniguruma-6.9.9-7.el10
open-vm-tools-13.0.10-1.el10
openldap-2.6.10-1.el10
openshift-clients-5.1.0-202609291809.p2.gfeed560.assembly.stream.el10
openshift-kubelet-5.1.0-202609260533.p2.ga3efef0.assembly.stream.el10
openssh-9.9p1-27.el10_2
openssh-clients-9.9p1-27.el10_2
openssh-server-9.9p1-27.el10_2
openssl-1:3.5.8-1.el10_2
openssl-fips-provider-3.0.7-11.el10_2
openssl-fips-provider-so-3.0.7-11.el10_2
openssl-libs-1:3.5.8-1.el10_2
openvswitch-selinux-extra-policy-1.0-40.el10fdp
openvswitch3.5-3.5.2-63.el10fdp
os-prober-1.81-9.el10
ose-aws-ecr-image-credential-provider-5.1.0-202609162104.p2.ge44d135.assembly.stream.el10
ose-azure-acr-image-credential-provider-5.1.0-202609091748.p2.g2b2ba3b.assembly.stream.el10
ose-crio-credential-provider-5.1.0-202609252048.p2.g83d4961.assembly.stream.el10
ose-gcp-gcr-image-credential-provider-5.1.0-202609252048.p2.g51c3264.assembly.stream.el10
ostree-2025.7-1.el10
ostree-grub2-2025.7-1.el10
ostree-libs-2025.7-1.el10
p11-kit-0.26.4-1.el10_2
p11-kit-trust-0.26.4-1.el10_2
pam-1.6.1-9.el10_2.1
pam-libs-1.6.1-9.el10_2.1
passt-0^20251210.gd04c480-6.el10_2
passt-selinux-0^20251210.gd04c480-6.el10_2
pciutils-3.13.0-6.el10
pciutils-libs-3.13.0-6.el10
pcre2-10.44-1.el10.3
pcre2-syntax-10.44-1.el10.3
pkgconf-2.1.0-3.el10
pkgconf-m4-2.1.0-3.el10
pkgconf-pkg-config-2.1.0-3.el10
podman-7:5.8.2-9.el10_2
podman-sequoia-0.4.0~pqc.3-1.el10_2
policycoreutils-3.10-2.el10_2
policycoreutils-python-utils-3.10-2.el10_2
polkit-125-4.el10_2.1
polkit-libs-125-4.el10_2.1
popt-1.19-8.el10
procps-ng-4.0.4-11.el10
protobuf-c-1.5.0-6.el10
psmisc-23.6-8.el10
python3-3.12.14-1.el10_2
python3-audit-4.0.3-5.el10
python3-charset-normalizer-3.4.2-1.el10
python3-cloud-what-1.30.12-1.el10
python3-dateutil-1:2.9.0.post0-1.el10_0
python3-dbus-1.3.2-8.el10
python3-decorator-5.1.1-12.el10
python3-distro-1.9.0-5.el10
python3-dnf-4.20.0-22.el10_2
python3-dnf-plugin-versionlock-4.7.0-10.el10
python3-dnf-plugins-core-4.7.0-10.el10
python3-file-magic-5.45-9.el10
python3-gobject-base-3.46.0-7.el10
python3-gobject-base-noarch-3.46.0-7.el10
python3-hawkey-0.73.1-15.el10_2
python3-idna-3.7-6.el10_2
python3-iniparse-0.5-10.el10
python3-inotify-0.9.6-36.el10
python3-libcomps-0.1.21-3.el10
python3-libdnf-0.73.1-15.el10_2
python3-librepo-1.19.0-1.el10
python3-libs-3.12.14-1.el10_2
python3-libselinux-3.10-1.el10
python3-libsemanage-3.10-1.el10
python3-packaging-24.2-2.el10
python3-pexpect-4.9.0-6.el10
python3-pip-wheel-23.3.2-11.el10_2
python3-policycoreutils-3.10-2.el10_2
python3-ptyprocess-0.7.0-9.el10
python3-pyyaml-6.0.1-19.el10
python3-requests-2.32.4-1.el10_0
python3-rpm-4.19.1.1-23.el10
python3-setools-4.6.0-3.el10
python3-setuptools-69.0.3-12.el10_0
python3-six-1.16.0-16.el10
python3-subscription-manager-rhsm-1.30.12-1.el10
python3-systemd-235-11.el10
python3-urllib3-1.26.19-4.el10_2
qemu-guest-agent-18:10.1.0-16.el10_2.5
quota-1:4.09-10.el10
quota-nls-1:4.09-10.el10
rdma-core-61.0-1.el10
readline-8.2-11.el10
redhat-release-10.2-21.el10
redhat-release-eula-10.2-21.el10
rpcbind-1.2.7-3.el10
rpm-4.19.1.1-23.el10
rpm-build-libs-4.19.1.1-23.el10
rpm-libs-4.19.1.1-23.el10
rpm-ostree-2026.2-2.el10_2
rpm-ostree-libs-2026.2-2.el10_2
rpm-plugin-selinux-4.19.1.1-23.el10
rpm-sequoia-1.10.1.1-2.el10
rpm-sign-libs-4.19.1.1-23.el10
rsync-3.5.0-3.el10_2
samba-client-libs-4.23.5-110.el10_2
samba-common-4.23.5-110.el10_2
samba-common-libs-4.23.5-110.el10_2
sed-4.9-5.el10
selinux-policy-42.1.18-4.el10_2.3
selinux-policy-targeted-42.1.18-4.el10_2.3
setup-2.14.5-7.el10
sg3_utils-1.48-7.el10_2.1
sg3_utils-libs-1.48-7.el10_2.1
shadow-utils-2:4.15.0-11.el10
shadow-utils-subid-2:4.15.0-11.el10
shared-mime-info-2.3-8.el10
shim-x64-16.1-4.el10
skopeo-2:1.22.2-5.el10_2
slang-2.3.3-8.el10
snappy-1.1.10-7.el10
socat-1.7.4.4-8.el10
sos-4.11.2-4.el10_2
sqlite-libs-3.46.1-6.el10_2
ssh-key-dir-0.1.4-9.el10
sssd-2.12.0-3.el10_2.1
sssd-ad-2.12.0-3.el10_2.1
sssd-client-2.12.0-3.el10_2.1
sssd-common-2.12.0-3.el10_2.1
sssd-common-pac-2.12.0-3.el10_2.1
sssd-ipa-2.12.0-3.el10_2.1
sssd-krb5-2.12.0-3.el10_2.1
sssd-krb5-common-2.12.0-3.el10_2.1
sssd-ldap-2.12.0-3.el10_2.1
sssd-nfs-idmap-2.12.0-3.el10_2.1
sssd-proxy-2.12.0-3.el10_2.1
stalld-1.26.3-1.el10
strace-6.12-3.el10
subscription-manager-1.30.12-1.el10
subscription-manager-rhsm-certificates-20220623-6.el10
sudo-1.9.17-10.p2.el10_2.6
systemd-257-23.el10_2.2
systemd-journal-remote-257-23.el10_2.2
systemd-libs-257-23.el10_2.2
systemd-pam-257-23.el10_2.2
systemd-udev-257-23.el10_2.2
tar-2:1.35-13.el10_2
tmux-3.3a-13.20230918gitb202a2f.el10
toolbox-0.3-2.el10_2
tpm2-tools-5.7-5.el10
tpm2-tss-4.1.3-6.el10
tpm2-tss-fapi-4.1.3-6.el10
tzdata-2026c-1.el10_2
unbound-anchor-1.24.2-7.el10_2.6
unbound-libs-1.24.2-7.el10_2.6
userspace-rcu-0.14.0-7.el10
util-linux-2.40.2-18.el10
util-linux-core-2.40.2-18.el10
vim-data-2:9.1.083-9.el10_2.20
vim-minimal-2:9.1.083-9.el10_2.20
virt-what-1.27-3.el10
which-2.21-44.el10_0
xfsprogs-6.16.0-1.el10
xmlsec1-1:1.2.39-3.el10
xmlsec1-openssl-1:1.2.39-3.el10
xz-1:5.6.2-4.el10_2.1
xz-libs-1:5.6.2-4.el10_2.1
zlib-ng-compat-2.2.3-3.el10_1
zram-generator-1.1.2-14.el10
zstd-1.5.5-9.el10

Changed:

cri-o 5.0.0-202609212354.p2.gee69985.assembly.stream.el10 → 5.1.0-202609220004.p2.gc31bc86.assembly.stream.el10
kernel 6.12.0-211.60.1.el10_2 → 6.12.0-211.61.1.el10_2
kernel-core 6.12.0-211.60.1.el10_2 → 6.12.0-211.61.1.el10_2
kernel-modules 6.12.0-211.60.1.el10_2 → 6.12.0-211.61.1.el10_2
kernel-modules-core 6.12.0-211.60.1.el10_2 → 6.12.0-211.61.1.el10_2
kernel-modules-extra 6.12.0-211.60.1.el10_2 → 6.12.0-211.61.1.el10_2
openshift-clients 5.0.0-202609211906.p2.g4b0a124.assembly.stream.el10 → 5.1.0-202609291809.p2.gfeed560.assembly.stream.el10
openshift-kubelet 5.0.0-202609250517.p2.g2a6104e.assembly.stream.el10 → 5.1.0-202609260533.p2.ga3efef0.assembly.stream.el10
ose-aws-ecr-image-credential-provider 5.0.0-202609211906.p2.g278e8c0.assembly.stream.el10 → 5.1.0-202609162104.p2.ge44d135.assembly.stream.el10
ose-azure-acr-image-credential-provider 5.0.0-202609151726.p2.g95f0a12.assembly.stream.el10 → 5.1.0-202609091748.p2.g2b2ba3b.assembly.stream.el10
ose-crio-credential-provider 5.0.0-202609211906.p2.g83d4961.assembly.stream.el10 → 5.1.0-202609252048.p2.g83d4961.assembly.stream.el10
ose-gcp-gcr-image-credential-provider 5.0.0-202609211906.p2.g51c3264.assembly.stream.el10 → 5.1.0-202609252048.p2.g51c3264.assembly.stream.el10

Extensions

Full list (0 packages)

Red Hat Enterprise Linux CoreOS base layer: 10.2.20260928-0

OCPBUGS-126621: Select bundled CoreOS base layer: version when COREOS_VERSION is unset #116

OKD-429: Fix OKD/SCOS builds to use centos CoreOS base layer: streams #109

View changelog in Markdown or change previous release:

Source code for this page located on github