4.12.96

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.12.96-x86_64

Qualifiers (status api): None

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-sdn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.12-e2e-aws-sdn-serial
- azure-ovn-upgrade-4.12-micro Failed periodic-ci-openshift-release-main-ci-4.12-e2e-azure-ovn-upgrade
- driver-toolkit Succeeded (1 retry) periodic-ci-openshift-release-main-nightly-4.12-e2e-aws-driver-toolkit
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- fips-scan Succeeded (2 retries) periodic-ci-openshift-release-main-nightly-4.12-fips-payload-scan
- gcp-sdn-upgrade-4.12-micro Succeeded periodic-ci-openshift-release-main-ci-4.12-e2e-gcp-sdn-upgrade
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.12-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-4.12-e2e-metal-ipi-sdn-ipv4

Upgrades from:

Untested upgrades: 4.11.14, 4.11.15, 4.11.16, 4.11.17, 4.11.18, 4.11.19, 4.11.20, 4.11.21, 4.11.22, 4.11.24, 4.11.25, 4.11.26, 4.11.27, 4.11.28, 4.11.29, 4.11.30, 4.11.31, 4.11.33, 4.11.34, 4.11.35, 4.11.36, 4.11.37, 4.11.38, 4.11.39, 4.11.40, 4.11.42, 4.11.43, 4.11.44, 4.11.45, 4.11.46, 4.11.47, 4.11.48, 4.11.49, 4.11.50, 4.11.51, 4.11.52, 4.11.53, 4.11.54, 4.11.55, 4.11.56, 4.12.10, 4.12.11, 4.12.12, 4.12.13, 4.12.14, 4.12.15, 4.12.16, 4.12.17, 4.12.18, 4.12.20, 4.12.21, 4.12.22, 4.12.23, 4.12.24, 4.12.25, 4.12.26, 4.12.27, 4.12.28, 4.12.29, 4.12.3, 4.12.30, 4.12.31, 4.12.32, 4.12.33, 4.12.34, 4.12.35, 4.12.36, 4.12.37, 4.12.38, 4.12.39, 4.12.4, 4.12.40, 4.12.41, 4.12.42, 4.12.43, 4.12.44, 4.12.45, 4.12.46, 4.12.47, 4.12.48, 4.12.49, 4.12.5, 4.12.50, 4.12.51, 4.12.52, 4.12.53, 4.12.54, 4.12.55, 4.12.56, 4.12.57, 4.12.58, 4.12.59, 4.12.6, 4.12.60, 4.12.61, 4.12.62, 4.12.63, 4.12.64, 4.12.65, 4.12.66, 4.12.67, 4.12.69, 4.12.7, 4.12.70, 4.12.71, 4.12.72, 4.12.73, 4.12.74, 4.12.75, 4.12.76, 4.12.77, 4.12.78, 4.12.79, 4.12.8, 4.12.80, 4.12.81, 4.12.82, 4.12.83, 4.12.84, 4.12.85, 4.12.86, 4.12.87, 4.12.89, 4.12.9, 4.12.90, 4.12.91, 4.12.92

Upgrades to:

4.13.70 (changes) - Failed
4.13.0-0.ci-2026-08-13-083907 (changes) - P F P

Loading changelog, this may take a while ...

Changes from 4.12.68

Created: 2026-08-12 19:36:09 +0000 UTC

Image Digest: sha256:fc0a3dd609a60dd4ad10fe4badef3058d61a1a33436d33ec4b563d5aaf9f26cc

Components

Kubernetes 1.25.16
Red Hat Enterprise Linux CoreOS upgraded from 412.86.202410300039-0 to 412.86.202608080425-0 (diff)

Rebuilt images without code change

alibaba-cloud-controller-manager git 191c9e34 sha256:1bff82f5ec41cb467689d70a021ee7ef7160fa649d61423e4f6d0a956f074a83
alibaba-cloud-csi-driver git 4d3b1125 sha256:78e0d3678af258828908675270dce623096b81d6a27ed0c299c7dec255e24848
alibaba-disk-csi-driver-operator git 99bcda8d sha256:618dc6282ffe6f8010c2a4a3bbbdd9f00c42f82e1d8f1ca35a8e06cfb7ec2040
apiserver-network-proxy git f56c606a sha256:f716071e34f66b61691a779235389380962eb91c002145ece0c0be28429f1ecd
aws-cloud-controller-manager git f90fb443 sha256:7095657c1ddb7e2f6c60087d10f4d919cc67dd27169df3afb5bccdaaa35da689
aws-ebs-csi-driver git bbab20f9 sha256:ca1c536abb9ec041562d8a739909d99a16b92b37e76d801e2618f33f5fa0d718
aws-pod-identity-webhook git 31917a5f sha256:8e7235c5a19297df5b6d74f7228de613d2cff342e046e98a73ef1d8d9fffd0c9
azure-cloud-controller-manager git 2193ccfa sha256:4f5992befb410ef43c26b7eba37a72b675d70c869b17167f781341aaa2db2b22
azure-cloud-node-manager git 2193ccfa sha256:9bbeb0bd1d6167182bf1351c574d33f430c458f89bf57ccf8b7799edde614ed8
azure-disk-csi-driver-operator git 988b8cc8 sha256:e027fd9b5b2b2cc479871397768a27339b969e3cfda1fe6fb83419d70cd3a862
azure-file-csi-driver git 15aade4d sha256:e6a7dc486823f8b3864c90c81f0b1c24012c3179ebbaa0ceb7faba74eb997432
baremetal-runtimecfg git 474ed48e sha256:3fafceb627bfe6b45f47492543769b7c6f78acc94123a5ace9f1227d5a18ec99
cli git d6912573 sha256:4d0e91235e1ec655d8a4614d255a63f066cd6ca10d3afc919fe674a7836ef59a
cli-artifacts git d6912573 sha256:a6e68d6825ba429a8bec7c9cab04c9776099f2f4a04013b11f0eaad6ed368a45
cloud-network-config-controller git c086bed7 sha256:2c67f7f59a6149a2be4af5a01cbb1377720783e4dfef492c1ee0d8f2e01522af
cluster-authentication-operator git 4f7f6b1a sha256:55d0f3024ff7317c3aff0e4a92c96c78af2414804decd68d7ab2fb88b67f9fce
cluster-autoscaler-operator git 29a6e57c sha256:51c2ccefd5d02ad43771001cccc4a4d31cf2c46737a493ba9a25ad479eae8bdc
cluster-bootstrap git 138a1cf2 sha256:954cb7fc9528ab1d4fead9332341b3f51e3edd0a0e2a75eb3f4fe01ddcb637d1
cluster-cloud-controller-manager-operator git 3b1f0843 sha256:4350d5116bca6e01ad6808d1d8a9f03d22820e55373090c9afe166a48e4869fe
cluster-config-operator git 92c3b102 sha256:b4d072968a774c7216f1a7940a5fb1f3f0ca8bdb34c49aeb8d3e184876c12b62
cluster-csi-snapshot-controller-operator git f573eded sha256:a9b3b5d599cbb08b6e9f473be0a4e1a7f8e0c9f4929632a456fc932a2e345062
cluster-kube-cluster-api-operator git d50f7322 sha256:713b91f6b48c97e560c011a8be570221d26eddd8667c2f16b16358f93358b434
cluster-kube-controller-manager-operator git c3c07beb sha256:ac23194ad07de39c23c6479cf92991ab7409577fb24c1b53217b3cb7b9bb8101
cluster-machine-approver git 7b08a4de sha256:3a759efc4fc5330bf18e5e3a4c1d8be7df602557efb248cb6ab981f0cd314651
cluster-network-operator git 28db40f1 sha256:1db7b9d6889fa38a366a71a547bef3c1642e2e5e043a1a80b531e124ac14a32a
cluster-node-tuning-operator git 20966da9 sha256:0470f33cb5626f0a6a6abcfa618f9c50b2d262dba38887f88bfa392118bc02c4
cluster-openshift-controller-manager-operator git ab963d8a sha256:73a92452399c2efcf31b69a34e43e1ce9b67bd813301a138202356fbecd0d011
cluster-platform-operators-manager git c930dc74 sha256:f867c5e9315efce8c3b352b57611ab754aea2451af50dcdac7f4516f2a903f1e
cluster-policy-controller git cb8862b0 sha256:c5bf5103b055ab5e05027f50b818122d04221c37db9fb812310187f59ef4aea8
cluster-update-keys git 2796e173 sha256:933a010babaf058b66ad4ea3fe030d6b4765c3f8fe5f0250a7933906bbe9dca0
configmap-reloader git e4d9170e sha256:1d613ed9540ab2f487ba1a40440bfea4b2fb762ed255e7c27d28691d7938f266
csi-driver-shared-resource git d054948f sha256:06d793758120400ffee886f7bd32832d849078622832ceb05d77de0d02a437fc
csi-driver-shared-resource-operator git cc297702 sha256:2a4d7bd2eb6767858e2707e2f4419817986a2b1379b4ef600aec0cfc882575c0
csi-driver-shared-resource-webhook git d054948f sha256:465e1ecec355ca3fd599ebf3ccda2d05de812b2f57284077f520ccd1518dd524
csi-external-attacher git fac7b8fd sha256:afc1800628d7b87b78d006849bb0fa2af98c1ca599616267411be0afc051e4de
csi-external-provisioner git 3aa7c527 sha256:8103a061890d9dbb69998dfbe50bdb166db1ea3f6e9b77c08db97e08c2d63aa7
csi-external-resizer git 5b066ba4 sha256:932ad8160cbd543f18a0f2df657fc3daf84a5aa215757b2cc8f314cf21cf7183
csi-external-snapshotter git 6fdb648f sha256:d6a0197da1c5a1dd0f2b2d548f33622687cddfa8e1fede03028a93916afa96b1
csi-livenessprobe git e6545e71 sha256:a2570a8ee09d2c1256a7277b3f873fc91a4c4a0c4f4a259af2a40ee459021ce7
csi-node-driver-registrar git c316b896 sha256:26f8d96083da21d9f3ebf06597758982ba6ae858df9f377a68708a326192c87a
csi-snapshot-controller git 6fdb648f sha256:ab65095bbc0d462d286bcff0ab401c1e0a1dd39a719519544338651ee341da6f
csi-snapshot-validation-webhook git 6fdb648f sha256:21cb5a6195b7a53814ae43db3d9470c281e50971a87d82f98538679c5d38ec1e
deployer git d6912573 sha256:df735b6a0c5470960663e8ce90b7310a3b05f86eb655af973fe76b4f808a9f72
egress-router-cni git a92e4157 sha256:fa9f1d2d69bd8800d431a7ff20605fd240a3c729850f83110d705a49fda87124
etcd git bb82e891 sha256:067188f4fa21429c4e488a97857401f989ecf7545d1bff17adb0bec08b674389
gcp-cloud-controller-manager git 8a84952e sha256:72896465bb9e70c3d48819395e34f145b4e811b5d902cd49f855ee42a37a8b84
gcp-pd-csi-driver git 5dcfd675 sha256:7a34af95926e5b45dfb26bca7852e82090bcc5da453a8d82d0176cd3f67ff8ce
gcp-pd-csi-driver-operator git 30e97ba5 sha256:3b21f592a86771bf17fd832a01fd208f09ff23d462b7edc911a3fddfeab9d358
ibm-cloud-controller-manager git 8bd0ea8f sha256:afba9bd58c9e4b6862a88714e72009a4f5fc2e81757d5db7cb0d067036a28572
insights-operator git 6b543885 sha256:30d84d8f2c28987585c5ea5228bb07045ae64d54b70b1d0afd6547d6267bb0c2
ironic-static-ip-manager git a8ade8fe sha256:38e42504386b9f6006697f9cf47340575314a7082980f5452507bc25591808c6
k8s-prometheus-adapter git 36c06694 sha256:f6e3f9035626d58b33c677ebb93629b62a30b4364e52a1135671c4e5257db44d
keepalived-ipfailover git 7e8a0105 sha256:bee4a7aba8a860d1960e8f473663e05f8b64f2ab2088329e63aea0f711664caa
kube-rbac-proxy git c69fae78 sha256:345d007dc52f1693dac62505a97002d96075675877e34a3483a29800df01e82d
kube-state-metrics git 748f7131 sha256:5ddd103fa2c7d597cd78381b7cd482f61bb17009199ad930ee8d3985c91f7521
kubevirt-csi-driver git f407c8a7 sha256:1d0e7a5aa3d4ed2e64615a8c5cd4ad3cbe7bead9d8fd4cfd1a11ba72b0f1cf55
kuryr-cni git 8fd2f8b0 sha256:0d0ea12c38da99d433bb8aaa20f8ec58116b725cf33866c51a3e8a5c780e61b5
kuryr-controller git 8fd2f8b0 sha256:10802a20b9c848fbbe02d811ff34dc9dfb61e4bb9e3e3bdcd7de8c65bfa2b4cf
libvirt-machine-controllers git a2882f7a sha256:d8a8278f0bd690be98b074f738ad3282afeb650c8845a0143e30fd32d1ede183
machine-os-content sha256:92618a5d179c9e61418680d6e6f1d5a7e8bd3b0b1dca9d941ced0368e0315859
multus-cni git 07d8af54 sha256:2cb0998578fb6953c4f1823b5667e8795bb7552c45c113f2affc5e4a1e46d12a
multus-networkpolicy git 644461f2 sha256:26ce77853bae2126fe09e91fc8f02dc5e12fbc59c847746da566b04e942d680a
multus-whereabouts-ipam-cni git 5993d022 sha256:822cb269510101b215c4eb2e5a14d05f8751bae72f5d21d84480f10e73093586
network-interface-bond-cni git 30386d6b sha256:e1da9d2651e419c958cdd0004ef8e1d831347b228cb151017559bdd5cda8dd35
network-tools git c76613c7 sha256:8a996b69c0e5b0d854ca9199572d56859573bfafbfea6dce64f631e900c5b019
oauth-apiserver git 1053f142 sha256:8ee7a0eca505b4a4fc174159b61df6a492bf99c2496887945d63b35223459a1f
oauth-server git 0c434f42 sha256:c3648ed3b2eb5782d3c8ca518271c71a6c454c145e1ee47f2c61861fef691910
olm-rukpak git bb06dd01 sha256:bfd0e9e89e4ae4948678f2251e9519d03f3ca9ff5a41b3d1a74905d59fdf11a4
openshift-state-metrics git 3d5dc18d sha256:cd67db14363f6d6590b92ca1862162615ba56004fcc84892797f5109e88d3dc1
openstack-machine-api-provider git 05657663 sha256:85910a90eed8d6594a0d7c615d5419a507e6369dc063734bf470e72785372cfa
openstack-machine-controllers git f13e381e sha256:a2e93baf87be5f421a7de5b7ef6888cf1861bc1aaf7a8a9675171969355c8564
ovirt-csi-driver git 87ab3789 sha256:f4839a8d301b231b0e743328dbd26cc318080ea0fced2f98b3f01d485bdcc26d
ovirt-machine-controllers git 03e8cb50 sha256:bb69491c2b39d9cd1a3b4b848edfd4def88e57d865186ee1e668c66306a34bca
powervs-block-csi-driver git b78e8e78 sha256:ab31516ecd31db7401195ab4036e57cbe84f05eee4e3051dc9f8323711cdd91f
powervs-cloud-controller-manager git 4fb4334c sha256:0da8fe2c229404302e157ae5597428f0665179056c8d1ef5dcedc22b14bfd7cd
prom-label-proxy git b1907888 sha256:ec20f9310843c0afb330e77fccb142a8bea768713e9e67415ac530dd222614b3
prometheus-config-reloader git d1e399d5 sha256:1c4c862579800a1a7aad9429c86ddb897e3b805cb3e72e4289d01f4137ec8f67
prometheus-node-exporter git 99077a3c sha256:6c09a0248f9289c4a928fe04c59bf0d67d30be46cb13af6d3634f6b3615d27c3
prometheus-operator git d1e399d5 sha256:2359ad818b7ba78400dc354c84294eb46f2aa6552beaa21b4f2ce5e32fdc1418
prometheus-operator-admission-webhook git d1e399d5 sha256:db4ae0e1e9e61b70b4b405d9c5c3d03ef100e4f24d73c692d4ef9e98ef8e78c7
rhel-coreos-8 sha256:626471555006f3d9e003b792b8dd9477a3e473d56b66a53e175cae536caddba1
rhel-coreos-8-extensions sha256:3dee2ced6b21c4339b2ede3416a203391a54a50afdd6182a0f26c0f7b5c5fb02
telemeter git c9592ded sha256:f9e26f180d7b9d73ceee6c9603d87d69c0ed51ca628914d8d25a28803686d785
tools git d6912573 sha256:29e06eda85daf827da0345f1a39add098aaf99da52f2b463053fec60d2e9aa68

agent-installer-api-server

OCPBUGS-78114: [release-4.12] NO-JIRA: hermetic 4.12 #9956
OCPBUGS-67386: Bump logrus from 1.9.0 to 19.3 #8768
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-67388: Bump logrus v1.9.0 to v1.9.3 #1465
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-node-agent

OCPBUGS-67390: Bump logrus v1.9.0 to v1.9.3 #1287
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

alibaba-machine-controllers

Updating ose-alibaba-machine-controllers images to be consistent with ART #35
Full changelog

aws-cluster-api-controllers

OCPBUGS-78231: [release-4.12] hermetic 4.12 #595
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-67399: Updated logrus to v1.8.3 #315
Full changelog

aws-machine-controllers

OCPBUGS-78268: hermetic 4.12 #176
Full changelog

azure-cluster-api-controllers

OCPBUGS-78180: [release-4.12] Hermetic 4.12 #368
Full changelog

azure-disk-csi-driver

OCPBUGS-56067: tech debt: rework vendor patches #106
Full changelog

azure-file-csi-driver-operator

OCPBUGS-67404: Bump github.com/sirupsen/logrus to v1.8.3 #116
Full changelog

azure-machine-controllers

OCPBUGS-78266: hermetic 4.12 #188
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-83750: Azure UPI ARM template: use storageAccountId #10511
OCPBUGS-78352: terraform/providers/google: Fixing inconsistencies with the service account creation #10385
OCPBUGS-66250: Replace terraform-provider-google with Openshift fork #10144
OCPBUGS-62820: Release 4.12 bump terraform provider azurerm #10002
OCPBUGS-55035: IBMCloud: Move to IBM TF openshift fork #9670
OTA-1310: data/manifests/bootkube/cvo-overrides: Default to eus-4.12 #9373
Full changelog

baremetal-machine-controllers

OCPBUGS-78103: [release-4.12] fix vendor/ for hermetic migration #247
OCPBUGS-46642: Bump x/net to 0.33.0 #230
Full changelog

baremetal-operator

OCPBUGS-53335: CVE-2025-29781 ose-baremetal-operator-container: Bare Metal Operator (BMO) can expose any secret from other namespaces via BMCEventSubscription CRD [openshift-4.12.z] #412
Full changelog

cloud-credential-operator

OCPBUGS-53420: github.com/golang/glog v1.2.4 #847
OCPBUGS-51538: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #832
Full changelog

cluster-autoscaler

OCPBUGS-45152: [release-4.12] VPA: Update OWNERS file #329
Full changelog

cluster-baremetal-operator

OCPBUGS-77451: Bump github.com/go-errors/errors to v1.5.1 #566
Full changelog

cluster-capi-controllers

OCPBUGS-86891: update CI build root and Dockerfile tags w.r.t ART 4.12 streams #299
OCPBUGS-77976: fix vendor for hermetic #267
Full changelog

cluster-capi-operator

NO-JIRA: Allow sustaining engineering to self serve dependency updates #564
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-48325: Add unreadyNodeGracePeriod for allowing brief node hiccups #344
Full changelog

cluster-dns-operator

OCPBUGS-52502: [release-4.12] Add runbook_url for CoreDNSErrorsHigh #435
Full changelog

cluster-etcd-operator

OCPBUGS-67421: Update logrus to 1.9.3 to address CVE-2025-65637 #1550
OCPBUGS-53508: fix CVE-2025-30204 #1416
Full changelog

cluster-image-registry-operator

OCPBUGS-67422: Bump logrus to 1.8.3 #1292
OCPBUGS-53868: Bump github.com/golang-jwt/jwt #1236
OCPBUGS-51594: bump golang.org/x/oauth2 #1223
Full changelog

cluster-ingress-operator

OCPBUGS-86709: Add configuration override for X-SSL strip #1494
Full changelog

cluster-kube-apiserver-operator

NO-JIRA: refactor: Updating go builder in the CI, Dockerfile and go.mod to be consistent with ART 4.12 #2175
OCPBUGS-67424: CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.12.z] #2048
OCPBUGS-50880: Increase waitForFallbackDegradedConditionTimeout #1811
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #628
Full changelog

cluster-kube-storage-version-migrator-operator

NO-JIRA: Reconciling the ART and CI go tool chain versions #173
OCPBUGS-67429: Bump github.com/sirupsen/logrus to v1.8.3 #143
Full changelog

cluster-monitoring-operator

OCPBUGS-76642: test: remove image registry e2e tests #2816
OCPBUGS-77403: test/e2e: improve prometheus remote-write test #2819
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-76594: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.12] #660
Full changelog

cluster-samples-operator

OCPBUGS-63521: references to github.com/sclorg/django-ex.git now also refer to the branch #663
OCPBUGS-54913: add rhdmalone to owners #629
OCPBUGS-49664: add shannon and aroyoredhat as owners #600
OCPBUGS-21179: update k8s.io/apiserver version #590
Full changelog

cluster-storage-operator

OCPBUGS-67444: Bump logrus to v1.8.3 #657
Full changelog

cluster-version-operator

OCPBUGS-45333: deps: bump golang.org/x/net to 0.31.0 #1122
Full changelog

console

OCPBUGS-87112: Fix authenticated SSRF in Dev Console webhooks and Helm chartproxy #14
OCPBUGS-88398, OCPBUGS-88416: Bump Axios to fix CVE-2026-44486. Requires a Patch of axios 0.33.0 types to be compatible with old version of TS #16793
OCPBUGS-79430: CVE-2026-29063 Bump immutable #16331
ART-18753: pin fsevents to latest #16482
NO-JIRA: enable multi-architecture yarn builds #16422
NO-JIRA: Updating openshift-enterprise-console-container image to be consistent with ART for 4.12 #12539
CONSOLE-5011: migrate to yarn berry #16084
NO-JIRA: Bump builder image to v29 #15988
OCPBUGS-74435: Bump lodash to latest #15973
OCPBUGS-44155: bump dompurify to latest #15595
OCPBUGS-57101: Add all files to vendor regardless of gitignore #15137
OCPBUGS-55210: Show Observe section without PROMETHEUS and MONITORING flags #14986
Dockerfile yarn line update #14838
OCPBUGS-45291: Application creation fail when manually entering input scaling value in local setup #14572
OCPBUGS-45235: Edit the secret and add the Chinese in the web-console, garbled characters will be displayed #14561
OCPBUGS-36561: Increase login flow state paramater length/entropy #14539
Full changelog

console-operator

Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.12 #1137
OCPBUGS-77996: [release-4.12] NO-JIRA: update go mod dependency for konflux #1119
Full changelog

container-networking-plugins

ART-13080: Fix Hermeto build issues #198
Full changelog

coredns

OCPBUGS-59711: Bump github.com/golang/glog to v1.2.4 #151
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-79763: Apply code mitigations for CVE-2026-33186 #401
OCPBUGS-67448: CVE-2025-65637 #365
OCPBUGS-58889: CARRY: don’t ignore json files #345
Full changelog

csi-driver-manila-operator

OCPBUGS-67449: Bump logrus #255
Full changelog

csi-driver-nfs

OCPBUGS-84927: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.64.1-sec.1 to avoid go version bump and fix CVE-2026-33186 #186
Full changelog

docker-builder

OCPBUGS-43296: Bump buildah to 1.26.9 #449
OCPBUGS-43187: runc library bump to 1.1.12 #440
OCPBUGS-49345: skipping some unit tests to avoid failures as they are duplicate #437
OCPBUGS-48738: Add new team members to the OWNERS file #433
Full changelog

docker-registry

OCPBUGS-53652: bump jwt and oauth dependencies #442
Full changelog

driver-toolkit

OCPBUGS-63597: Remove realtime kernel from 4.12.z #176
Full changelog

gcp-cluster-api-controllers

OCPBUGS-78284: [release-4.12] hermetic migration 4.12 #278
OCPBUGS-78284: [release-4.12] hermetic migration 4.12 #271
Full changelog

gcp-machine-controllers

OCPBUGS-83657: Address CVE-2026-33186 #174
OCPBUGS-78183: hermetic 4.12 #143
Full changelog

haproxy-router

OCPBUGS-86709: Strip X-SSL-* headers for plain HTTP #809
OCPBUGS-74943: Adding escapeHAProxySingleQuotes for sanitize [release-4.12] #784
OCPBUGS-78110: [release-4.12] hermetic 4.12 #744
Full changelog

hyperkube, pod

OCPBUGS-77661: Skip E2e: attach on previously attached volumes should work #2649
OCPBUGS-77469: hermetic 4.12 #2652
OCPBUGS-67374, OCPBUGS-67472: CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.12] #2596
OCPBUGS-78226: UPSTREAM: 133262: Remove permafailing tests using an expired GCP project #2625
Full changelog

hypershift

OCPBUGS-77768: fix vendor for hermetic 4.12 #7823
Updating ose-hypershift-container image to be consistent with ART for 4.12 #6976
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-77214: [release-4.12] standardize build paths #128
OCPBUGS-58873: bump github.com/golang/glog to v1.2.4 #111
OCPBUGS-56067: tech debt: rework vendor patches #95
OCPBUGS-53908: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #88
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-67476, OCPBUGS-67477: bump github.com/sirupsen/logrus to v1.8.3 #163
OCPBUGS-60058: [IBM VPC] set offlineExpansion to false in e2e test manifest #153
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-56067: tech debt: rework vendor patches #52
OCPBUGS-53540: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #48
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67292: [release-4.12] Fix incomplete vendor/ #134
Full changelog

ibmcloud-machine-controllers

OCPBUGS-78276: hermetic 4.12 #79
Full changelog

ironic

OCPBUGS-69787: Bump eventlet version to 0.30.2-5 #767
OCPBUGS-48145, OCPBUGS-48596: Bump jinja to 3.0.1-6.el9.2 #627
OCPBUGS-43949, OCPBUGS-43957: Bump python-waitress [4.12] #609
Full changelog

ironic-agent

OCPBUGS-96903: Replace individual package removal with a single rpm -e loop #280
OCPBUGS-69778: adding eventlet 0.30.2-5 #236
Full changelog

ironic-machine-os-downloader

OCPBUGS-87168: CI Build root image tag and go version in go.mod sync with ART 4.12 #118
Full changelog

kube-proxy, sdn

OCPBUGS-56130: Handle openshift-host-network namespace as special when it modifies #657
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-11). #231
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-95078: OWNERS: Update component to Cloud Compute / KubeVirt Provider #76
Full changelog

machine-api-operator

OCPBUGS-78271: hermetic 4.12 #1470
Full changelog

machine-config-operator

OCPBUGS-77981: hermetic 4.12 #5734
OCPBUGS-58874: [release-4.12] Bump golang/glog to fix CVE-2024-45339 #5174
OCPBUGS-44325: Panic seen in CI job for MCC pod #4689
Full changelog

machine-image-customization-controller

OCPBUGS-67478: bumped logrus to v1.9.3 #161
Full changelog

machine-os-images

OCPBUGS-87882: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #106
OCPBUGS-54173: Change rhcos release browser url #61
Full changelog

multus-admission-controller

OCPBUGS-60292: Bump github.com/golang/glog to v1.2.4 #107
OCPBUGS-60850: Update owners #109
Full changelog

multus-route-override-cni

OCPBUGS-78160: hermetic 4.12 #64
Full changelog

must-gather

OCPBUGS-48086: Update owners #477
Full changelog

network-metrics-daemon

-sOCPBUGS-59700:Bump github.com/golang/glog to v1.2.4 (#125) #125
Replace e2e test image (#134) #134
swtich golint install method (#133) #133
Correct 4.16 owners file (#131) #131
Full changelog

nutanix-machine-controllers

OCPBUGS-78158: hermetic 4.12 #132
OCPBUGS-51849: Fixing CVE-2025-22868 #121
OCPBUGS-47263: fixing CVE-2024-45338 #114
OCPBUGS-20956: bump golang.org/x/net to v0.17.0 #88
Full changelog

oc-mirror

changes the owners file (#1011) #1011
OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1027) #1027
Full changelog

openshift-apiserver

OCPBUGS-90518: Address CVE-2026-35469 #663
OCPBUGS-76481: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.12] #614
OCPBUGS-79381: Fix image reference in TestImageStreamImportQuayIO #623
OCPBUGS-32447: ose-openshift-apiserver-container: golang: net/http, x… #481
Full changelog

openshift-controller-manager

OCPBUGS-58296: Inconsistencies in dependencies are fixed #410
OCPBUGS-58157: Set node-pullsecrets volume to read-only to protect image pull credentials #403
OCPBUGS-57171: Empty proxy variables are causing issues during the build #389
OCPBUGS-49644: Add new team members to the OWNERS file #364
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-67502: Bump logrus #191
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-86254: Drop github.com/distribution/distribution in go.mod #1312
OCPBUGS-61471: [release-4.12] Add NetworkPolicy as a supported kind #1054
OCPBUGS-61392: [4.12] e2e stability fixes #1087
OCPBUGS-46925, OCPBUGS-46932, OCPBUGS-47312: x/net bump to v0.34.0 [release-4.12] #943
Full changelog

operator-marketplace

OCPBUGS-49426: Upgrade golang.org/x/net [release-4.12] #591
Full changelog

ovirt-csi-driver-operator

OCPBUGS-67542: Bump github.com/sirupsen/logrus to v1.8.3 #148
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

CORENET-6055, OCPBUGS-84636: [release-4.12] Dockerfile: Unpin OVN and consume the latest from FDP #3075
OCPBUGS-59935: Dockerfile: Remove ovs version pinning #2698
NO-JIRA: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.12 #2092
OCPBUGS-55951: Bump ovn and ovs to latest 23.06 and 3.1 respectively #2554
OCPBUGS-50502: EgressIP: Reload certificates for the grpc heatlhcheck server #2457
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-67511: Fix CVE-2025-65637 by bumping logrus to v1.8.3 #102
Full changelog

powervs-machine-controllers

OCPBUGS-78043: hermetic 4.12 #138
OCPBUGS-54012: Fix for CVE-2025-30204 & CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.12 #123
Full changelog

prometheus

OCPBUGS-86876: Bump google.golang.org/grpc #325
OCPBUGS-67512: CVE-2025-65637 Update sirupsen/logrus to 1.9.3 #291
Full changelog

prometheus-alertmanager

OCPBUGS-77906: Include go-verify-deps expected files in gitignore #124
Full changelog

route-controller-manager

OCPBUGS-86881: [release-4.12] bump google.golang.org/grpc to v1.64.1-sec.1 #97
Full changelog

service-ca-operator

NO-JIRA: Updating ose-service-ca-operator-container image to be consistent with ART for 4.12 #360
Full changelog

tests

OCPBUGS-56120: [build] Ensure Git Clone Does Not Run Privileged #29788
OCPBUGS-37799: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token #29621
OCPBUGS-54772: Component Readiness: [Networking / ovn-kubernetes] [EgressFirewall] test regressed #29662
OCPBUGS-54147: Add/remove team members to the OWNERS file for Builds #29622
OCPBUGS-52585: Use payload pullspec for image info test #29593
Full changelog

thanos

OCPBUGS-67525: CVE-2025-65637 Update sirupsen/logrus to 1.9.3 #169
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-78036: hermetic migration 4.12 #111
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-78026: hermetic migration 4.12 #90
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-67529: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 #162
Full changelog

vsphere-csi-driver-operator

OCPBUGS-67528, OCPBUGS-67534: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 #327
Full changelog

vsphere-problem-detector

OCPBUGS-67540: bump github.com/sirupsen/logrus to v1.9.3 #204
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github