Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.15.48-x86_64

Team Approvals:

• Accepted
  • QE

Tests:

• Blocking jobs
  • upgrade Succeeded periodic-ci-openshift-release-master-stable-4.y-e2e-aws-ovn-upgrade
  • upgrade-minor Succeeded periodic-ci-openshift-release-master-stable-4.y-e2e-aws-ovn-upgrade
• Informing jobs
  • aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-aws-ovn-serial
  • aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.15-e2e-aws-ovn-upgrade
  • aws-sdn-upgrade-4.15-micro Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.15-e2e-aws-sdn-upgrade
  • azure-ovn-upgrade-4.15-micro Succeeded (3 retries) periodic-ci-openshift-release-master-ci-4.15-e2e-azure-ovn-upgrade
  • fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.15-fips-payload-scan
  • gcp-ovn-rt-upgrade-4.15-minor Succeeded periodic-ci-openshift-release-master-ci-4.15-upgrade-from-stable-4.14-e2e-gcp-ovn-rt-upgrade
  • hypershift-ovn-conformance-4.15 Succeeded periodic-ci-openshift-hypershift-release-4.15-periodics-e2e-aws-ovn-conformance
  • metal-ipi-ovn-dualstack Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-ovn-dualstack
  • metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-ovn-ipv6
  • metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.15-e2e-metal-ipi-sdn-bm

Upgrades from:

• 4.15.47 (changes) - S F F F S F S S S
• 4.15.46 (changes) - Failed
• 4.15.45 (changes) - Success
• 4.15.40 (changes) - Success
• 4.15.19 - Success
• 4.15.6 (changes) - Failed
• 4.15.3 (changes) - Success
• 4.15.2 (changes) - Failed
• 4.15.0 (changes) - Failed
• 4.14.49 (changes) - Success Success
• 4.14.48 (changes) - Failed
• 4.14.46 (changes) - Failed
• 4.14.42 (changes) - Failed
• 4.14.41 (changes) - Failed
• 4.14.35 (changes) - Success
• 4.14.18 (changes) - Success
• 4.14.17 (changes) - Failed
• 4.14.16 (changes) - Success
• 4.14.0-0.nightly-2025-03-19-215142 (changes) - Success

Upgrades to:

• 4.16.49 (changes) - Failed
• 4.16.42 (changes) - Failed
• 4.16.40 (changes) - Success
• 4.16.39 (changes) - Success
• 4.16.38 (changes) - Success Success
• 4.15.51 (changes) - Success
• 4.15.50 (changes) - Failed
• 4.15.49 (changes) - S F F S S S S

---

Loading changelog, this may take a while ...

Changes from 4.15.19

Created: 2025-03-20 08:58:40 +0000 UTC

Image Digest: sha256:7492583774d8ae5ef7bcf7edf83630b4593f7c6a52c442cd135e4479c995ecc5

Components

• Kubernetes upgraded from 1.28.10 to 1.28.15
• Red Hat Enterprise Linux CoreOS upgraded from 415.92.202406190406-0 to 415.92.202503190057-0 (diff)

Removed images

• ovirt-machine-controllers

Rebuilt images without code change

• agent-installer-utils git 33b7d855 sha256:b38c75c3665efbb3da5921f77250512979e5e2e290487346b2c0cfb094c93288
• alibaba-cloud-controller-manager git abf4fa96 sha256:0c69de000ea6acef8e146c4a42906675c34945a6199d816509200314b87cc3db
• alibaba-cloud-csi-driver git be4888d3 sha256:b3abb038f2e83c6f7abdc45b303e2990fcf6be4c2e85dfdfe91331ef46795178
• alibaba-disk-csi-driver-operator git 41b367ae sha256:2a9e43726cee5f2cc0fcb97eeddd7b7b27ca130a2106f564e5eaa0a991070ecb
• aws-ebs-csi-driver git 7043c1cc sha256:e6efd8850b85ce19c69cf16d332a71bf0b252785b64076424096ed589b4f6bb3
• aws-ebs-csi-driver-operator git 2a2b9dd1 sha256:b44122130695742e07bd7dab2e986c3151274a5e689924cb01050b48c4d1fd91
• aws-pod-identity-webhook git 13385034 sha256:187202c91c824afad07da9dc120b7da106632a6989d93bb42b0137d86cf6eef9
• azure-cloud-controller-manager git 0d799a26 sha256:376c7b82c4badab911319426635800c36dec84d90df2c501b21c337d1caa5cf5
• azure-cloud-node-manager git 0d799a26 sha256:4cff34a1f6140fbedbc786430a6e671fc15900f3d12d44c0fd48bd7c32fb8ec4
• azure-disk-csi-driver git dcb7e1c7 sha256:646bb81d2b379c090a929f01be0ca4a7450dad7191e9c2ef683cc25d25b97ab0
• azure-disk-csi-driver-operator git 160cf624 sha256:ea3e724ece774620ef7d363792f03161f5092fda108d249a2121c4a2b00a0b70
• azure-file-csi-driver-operator git 367c4e45 sha256:5619a1b0101b31f87b7645a98b54a1208ccc78a5a74d4fb160b0337cb3ef733b
• azure-workload-identity-webhook git 2333b7fa sha256:e84ed8c9278cd1b0ee49af934a17afab0c366d83d1320d228591b9dc9ba7090b
• cloud-network-config-controller git 6864da06 sha256:284caa4758db34490f47b418f550453196c0dc20c2f16cddf515a2b59fbef37a
• cluster-authentication-operator git 7aaa40eb sha256:dad85e7b0d04336619089993e4cccbc23a0a6eb3c312d841aac947b84fd68475
• cluster-bootstrap git 0849c462 sha256:8f8f7c6a2253f2a562a74ed071f0992c43faf8d26e107788fe05cddd18905ec0
• cluster-capi-controllers git 2053e13c sha256:9273fe31a83b8d355723bcb1ed46c1274958d2551f45dd8ee569564dbaa715b3
• cluster-etcd-operator git b72a596d sha256:5401d69cee54bfc4ce7e7a2b8a8183557fdb5ee8cd531f8a243340dd8ed6c276
• cluster-kube-cluster-api-operator git 128d8e08 sha256:9e489de14578bb318f45b2a6b496205c9dde751b4c400af0c77ca65a1ca3dd04
• cluster-kube-controller-manager-operator git ee8cf525 sha256:5c6224bd8aeb193ab02ea80d6e672da0db7360332792b4d2736fca93219282b0
• cluster-kube-scheduler-operator git f054dfaf sha256:24328a30ce0f78500abc01f1d6034a324b38b5976d4aa1b80fe475e278b3d76d
• cluster-olm-operator git a7ba8987 sha256:aae99ebbd554f6016a08f10639f9e66112e2c44dddb227988ede2b57b0fc518e
• cluster-platform-operators-manager git 37a0a919 sha256:860ca9382bc3ba4b50b6389ce9953750c050c18ed8151c8b245df8509edc6931
• cluster-policy-controller git cc48f315 sha256:a6ac4847860c209efd0c82a018cab82b3888fa8dd2e9a9f86f29080642e2cb98
• configmap-reloader git 617398f5 sha256:d6e93583bbd95fced6a7c5d9aa704ebce501a5051b50168dd87ec26f5a99d8b4
• csi-driver-nfs git d032dc10 sha256:07f234fc8d12d2e66c43adfa9b5b3bf06a19a2c29855b46bad80967b0512f7bc
• csi-driver-shared-resource git 260a085a sha256:2b7cb8565bb5cf455f03bbbc73f62a18d2c6be375648d624aa6b638aeee99d37
• csi-driver-shared-resource-operator git 8d017b7f sha256:d0a7be3e0a40a2ebb05d17a5bad293032dd7cc4786177050e4d1c4223695bb17
• csi-driver-shared-resource-webhook git 260a085a sha256:54f64ca00931f801d6419b7904a8487432a7c9b76afd676d058d26cb3d754565
• csi-external-attacher git f806f266 sha256:a6d6b0618d7489ffc586b87896223ae9562fb76e35fa2cbd2bc8751f238bc5d3
• csi-external-provisioner git ce5a1a33 sha256:0c8312d0031dcf15525ab56f3b2fac5154d55f6f7de2740887b97e207e22f40d
• csi-external-resizer git 3b4236d3 sha256:486d987a0a42ab8bf980841893eee5243f2d4553432a00b2e363775d9d949ca2
• csi-external-snapshotter git 4f2955c7 sha256:aeb69114ebb9ae9a5dfd7820eb7f6ce5b898525d4537f6acd92651fd5d52546e
• csi-livenessprobe git 240bb8c0 sha256:9fd2656e15ab845c6f51b7339507f3e0f08c3a6e08de913130328cbc71782fad
• csi-node-driver-registrar git 9005584e sha256:3264f96dadbcf88a4120fdd63fb8123984d87abcd879199f25216262d49f27f4
• csi-snapshot-controller git 4f2955c7 sha256:9a30fe62b645d8db409d78ba86e3b6e60feb4517261259ae69231a0ccc953905
• csi-snapshot-validation-webhook git 4f2955c7 sha256:ccecc58ca7863dfbeac9a747763cb7eec47887ef361135c71fa46559bd43e9f7
• driver-toolkit git 7a448c2e sha256:fe77dfa14edaff90709d11d4cecea7a1c7ea73829c76215fee7adb940f04ef71
• etcd git a7005ef1 sha256:336d9613c4d7c2b3ab95e8709fd057589e8d73887b87af5ea862bda6e5246b94
• gcp-cloud-controller-manager git fc50272a sha256:376be1eed78b2cbf1c13bca8a79c828e036db4b8af8014da1e77e55622302dfe
• gcp-cluster-api-controllers git bad54034 sha256:8efbc728a72b742f8381f65f873d3ed0bf27e41604774bed83c059e1da4b5a38
• gcp-machine-controllers git b15daaf5 sha256:3e60301d6e1d448dbd41fc3a0a4fc058ca90e293ddc8ca748b2e382ff413baa3
• gcp-pd-csi-driver git 856ee3e2 sha256:0f5c627e6ea22ca9affa8f062ffbd77648cf03878b77835b50e2aca92ca94c1c
• gcp-pd-csi-driver-operator git 3b91ee31 sha256:355cba96efd90a1a67086007daeb1e4ff8b52517bb0f8197ed4e21ce91e3299b
• haproxy-router git dc38fbd8 sha256:8657ef948d394b0f9bcff0a4bff890eb5db76618783c23f7220b1634e95930c0
• ironic-machine-os-downloader git bcbcd95b sha256:f17cb12783af23de0c6d015ffe2b7b48343d23e68436403098cb57bfe9f2e5a8
• kube-metrics-server git bcbf241c sha256:a23e975a6805504b3d6d318efad85c12389669aff45445c666773abf2c85f78a
• kube-state-metrics git 037b59c2 sha256:e81974574ca56889710d42aeda8019f3e5d4e79cf0a551f8bfca4b6a08b3ed8d
• kube-storage-version-migrator git e8749689 sha256:0a201b3635700400461325e021ebb4024acc1ff02f60b426637c509b46596539
• kubevirt-cloud-controller-manager git dbaf9ea1 sha256:28fd065ce9bf92fa965326283f541d2a69397af377000c95573bf934aed1a438
• kubevirt-csi-driver git d3bdbce4 sha256:313010f33c4cdae221c66ebd54828fc1e410cda74172a02718e8525ecce6b4a9
• libvirt-machine-controllers git 1e096cdf sha256:e68a55c1c23498c82e40a7460a9d1524f622523ddf77962ee0aeacc78a236ca1
• machine-image-customization-controller git 97d87657 sha256:9b933cfe90573a9003eaef68065e47c51b8922290243d8a9d99ddb16715b1084
• machine-os-content sha256:ed6632aa7754c0bfeb1387f3e172bd6312f3f1339e5e419ec42d6ae91de2dc1e
• machine-os-images git 9e9c920f sha256:c6ea80247e975b48e8276eeca1186dd258198acf3e43feaff727ee8cac663f2f
• multus-cni git 05497ad1 sha256:3c7e8873c691f78fa41a0208b2e2892ed539c36a8231c3fa3959e087bb0807b7
• network-interface-bond-cni git f91decaa sha256:e16a030c2598b82ff0bbdf021edc23f068509ef4ec37e366817ee609f129a962
• network-tools git 17536c8d sha256:c9af103d3efe3a3a5781feb9ee540e2f9537ebdee94ad2c60d8dbf1057f306b9
• oauth-apiserver git 0e158441 sha256:345e1f65db8c6fa6ed688f070c16bd7646f59a7d9e13100f8c1dfb9172b173ae
• oauth-proxy git 241a88c4 sha256:6a66ec837dada1ce7df9154149e1cc4803d50faca2d10d85007759a4a767e63c
• oauth-server git c055dbb9 sha256:edb4912363189b5ef4782ecca0c2ce2d1c8e9401474d9c5fd46ac45fca1f8222
• olm-rukpak git 5b09cd44 sha256:8058c3336d759218c45c39165af459682fe14455ba007e2a87dbe54347c95372
• openshift-state-metrics git 1915f645 sha256:15f930db799caec5e6fec0a3b4f7b509529f11d82d6038def874e202cca8867d
• openstack-cluster-api-controllers git 232472ea sha256:e8e9b3fed2018d0300bf669d0911d39935f2622d7d4d04e6cfb395b9ee9e868a
• ovirt-csi-driver git b8d25ad6 sha256:e13d320ab1ad144b3795e69a14d8b4d2b56826e537b1a886501c106e1425bd21
• ovirt-csi-driver-operator git e9b0fa23 sha256:43366e5d1e71aa589e9f978008b618e9585658a74e61692d4e1db2316fcd47d9
• powervs-block-csi-driver-operator git a3729dcb sha256:cff801d9634f72fb24619104b16909915dc45ce35c448d69307d9dab251032c6
• prom-label-proxy git f3f1f5d1 sha256:34daaf0779b0c97e5899c119f896d9eced7d040e376dfd4b28eba141a02ec12c
• prometheus-alertmanager git 870ade52 sha256:84700e894ffbf546d7ebc34cf9282cb49453c0ddb595742f9cd7ebe760a42e21
• prometheus-node-exporter git aed837c3 sha256:f7284c57addf749c8e542b2738c29b67f81cd4d1578056c2f2325208ae409629
• rhel-coreos sha256:ea2fb4f15d4a1e9a748e9dbff93fd4bae73c32e523e6ae31723460d17cd6e701
• rhel-coreos-extensions sha256:4e56e0af2981870a043bb9c12589bf18e6b5c5288d6975ab7ab85410dad70756
• route-controller-manager git c5cc7a73 sha256:d0fd1e8864285d2f9c5b6a9194607f35eeace86d8bfedfff964bd69dd9c1cb80
• service-ca-operator git 19f312e9 sha256:7acead1a3d0c94681bd796201d3940982b5ce1941d1efd238eab06b7b3789e79
• thanos git 66161ad4 sha256:e2cf3c2560a452627720637cbe255984a8c5d77783bdd177f549036ac0c911ee
• vsphere-cluster-api-controllers git 56111686 sha256:46906c97f7fe23ae8f10c6008d72e71d6211cf01a36d5e9c78e97e4024b125e0
• vsphere-csi-driver git 4b15e93b sha256:605ac17714b3103f16bf6e8b1fd8f0596098efb56f4f3ae8251eda3bc6260eba
• vsphere-csi-driver-operator git e0d46570 sha256:b9caf667d66af30648e5a25727f1ebab177a900d250487d86324933bb694680c
• vsphere-csi-driver-syncer git 4b15e93b sha256:313a0e43b96956b38fdbada08ee2e8980a1ab7ea20063b59a4b9c55c2749b5fe

agent-installer-api-server

• OCPBUGS-46940: OCPBUGS-46185: Bump golang.org/x/net to 0.33.0 (#7199) #7199
• OCPBUGS-22539: Bump otelhttp from 0.35.1 to 0.44.0 using replace approach (#6858) #6858
• OCPBUGS-43022: Update go-jose to v2.6.3 to mitigate CVE-2024-28180 (#6894) #6894
• OCPBUGS-42571: Libraries bump to mitigate CVE-2024-27289 (#6834) #6834
• OCPBUGS-36577: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#6753) #6753
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• Bump golang.org/x/net to 0.33.0 (#1011) #1011
• OCPBUGS-43026: Pick up latest CVE changes by bumping service (#921) #921
• OCPBUGS-42301: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#907) #907
• OCPBUGS-36779: Reload host inventory on conflict (#891) #891
• OCPBUGS-35894: Fix race to mark node Joined (#859) #859
• Full changelog

agent-installer-node-agent

• OCPBUGS-46954: Bump golang.org/x/net to 0.33.0 (#884) #884
• OCPBUGS-43032: Pick up latest CVE changes by bumping service (#803) #803
• OCPBUGS-42304: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#786) #786
• Full changelog

alibaba-machine-controllers

• [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #57
• Full changelog

apiserver-network-proxy

• OCPBUGS-38065: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #60
• Update golang Docker tag to v1.23.1 #58
• Full changelog

aws-cloud-controller-manager

• OCPBUGS-38577: Ensure that addresses are added in network device index order #92
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-44294: [release-4.15] OSD-25934: Only tag NetworkInterfaces in RunInstances if IAM Allows It #532
• Full changelog

aws-machine-controllers

• OCPBUGS-47680: fix Associate*IpAddress flag on launch EC2 #122
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-36024: Update go-retryablehttp to v0.7.7 #311
• Full changelog

azure-file-csi-driver

• OCPBUGS-39444: bump mount-utils to treat ENODEV error as corrupted mount #78
• Full changelog

azure-machine-controllers

• OCPBUGS-53226: dynamically setting the amount of fault domains #134
• CFE-1050: Added support of capacity reservation group #110
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

• OCPBUGS-50994: Bump terraform-provider-google version to v5.37.0 to fix consistent issues during cluster creation #9509
• OCPBUGS-41815: Validate MTU for custom network #9294
• OCPBUGS-28706: [azure] update tested x86 instance type on 4.15 #7966
• OCPBUGS-47716: [release-4.15] Power VS: Create region-zone-sysType hierarchy #9340
• OCPBUGS-44259: IBMCloud: Ignore failed VPC regions #9183
• ARO-12457: Include bootstrap docker config file in go module #9260
• OCPBUGS-45207: add chrony.conf file when additional NTP sources are configured #9251
• CORS-3753: Allow mocking of the Azure client everywhere #9221
• OCPBUGS-44035: IBMCloud: Handle pagination for subnets #9160
• OCPBUGS-43760: azure: use filter when listing SKUs #9135
• OCPBUGS-42139: add tested instance type for IBMCloud #9032
• OCPBUGS-42335: Bump extract-machine-os timout to 20m #9051
• OCPBUGS-42180: Add AWS r8g to arm tested instance types #9040
• OCPBUGS-39288, OCPBUGS-42011: Openstack UPI - Reintroduce unique resource names #9047
• OCPBUGS-38198: Remove timed context for gcp client #8824
• OCPBUGS-29591: vsphere-fix convert if only provided name #8034
• OCPBUGS-32179: Fix task for attaching IPv6 subnet to router. #8262
• OCPBUGS-34721: fix usage of host and user CA bundle in the agent ignition #8512
• OCPBUGS-36090: [release-4.15]: bump go-retryablehttp for CVE fix #8655
• OCPBUGS-37064: Changed vsphere CPMS to not include fields controlled by failure domains. #8735
• OCPBUGS-37182: ic: fix typo in warning message #8770
• OCPBUGS-37067: update RHCOS 4.15 bootimage metadata to 415.92.202407091355-0 #8746
• OCPBUGS-33354, OCPBUGS-33402: Use assisted-image-service for ignition editing #8635
• : OCPBUGS-36400: PowerVS: add ibmcloud plugins #8687
• OCPBUGS-36225: Make vSphere default ResourcePool formatting not contain double slash. #8664
• OCPBUGS-35131, OCPBUGS-35141, OCPBUGS-35144: [CVE-2023-48795] Bump golang.org/x/crypto to v0.21.0 #8646
• OCPBUGS-35359: GCP: Prevent cluster installation with mismatched worker assets and worker replicas #8581
• OCPBUGS-35502: [release-4.15] azure: bump profile used for network #8607
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

baremetal-machine-controllers

• OCPBUGS-46641: Bump x/net to 0.33.0 #227
• Full changelog

baremetal-operator

• OCPBUGS-38939: [OCP] Ability to disable agent power off after deployment #373
• Full changelog

baremetal-runtimecfg

• OCPBUGS-37704: Change mechanism of debug flag #325
• OCPBUGS-36278: Fix handling of ELB Node IP detection #322
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-42726: Check cast result in adm prune deployments to prevent panic #1893
• OCPBUGS-39426: Ignore pruning when deployment points to replicationcontroller #1865
• OCPBUGS-36329: Set required-scc annotation to privileged for node debug pods #1818
• Full changelog

cloud-credential-operator

• OCPBUGS-47068: golang.org/x/net v0.33.0 #806
• OCPBUGS-45940: Add AWS region to aws-pod-identity-webhook #802
• OCPBUGS-45008: Add retry to ccoctl gcp create functions #795
• OCPBUGS-45003: github.com/golang-jwt/jwt/v4 v4.5.1 #784
• OCPBUGS-43646: Only attempt timed token credentials on supported platforms. #774
• OCPBUGS-43338: Update github.com/sirupsen/logrus v1.9.3 #768
• OCPBUGS-41235: List secrets in batches to avoid api timeout #754
• OCPBUGS-38377: Update google.golang.org/grpc v1.65.0 #749
• OCPBUGS-37461: Set required-scc for openshift workloads #736
• OCPBUGS-37277: Update to cloud.google.com/go/storage v1.43.0 #729
• OCPBUGS-37288: GCP passthrough permissions check to ignore problematic permissions. #730
• OCPBUGS-37419: SNYK ignore go-client misreporting #738
• OCPBUGS-37061: Update to azidentity v1.7.0 #728
• OCPBUGS-36030: IBM/go-sdk-core update to v5.17.4 #720
• OCPBUGS-36291: AWS STS should not error when a credentailsRequest does not have awsSTSIAMRoleARN #709
• Full changelog

cluster-autoscaler

• OCPBUGS-45149: [release-4.15] VPA: Update OWNERS file #326
• OCPBUGS-40930: update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 #315
• OCPBUGS-33885: fix: scale up broken for providers not implementing NodeGroup.GetOptions() #301
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-41798: set required-scc for openshift workloads #332
• Full changelog

cluster-baremetal-operator

• OCPBUGS-44046: SCC-pinning for metal3-baremetal-operator #454
• [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #443
• OCPBUGS-31948: bump x/net to 0.23.0 #437
• Full changelog

cluster-capi-operator

• OCPBUGS-37849: fix: sort CredentialsRequest manifests after namespace #193
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-36821: Increase GCP Concurrent Service Syncs to 10 #359
• Full changelog

cluster-config-api

• CFE-1047: Added new field for capacityReservationGroupID in AzureMachineProviderSpec #1925
• OCPBUGS-36208: Ingress - add connect timeout to tuning options #1937
• Full changelog

cluster-config-operator

• OCPBUGS-36151: Set required-scc for openshift workloads #420
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-45839: relax validation on delete and if failureDomains not configured #336
• [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #326
• OCPBUGS-24632: Prevent rollout due to irrelevant path artifacts #317
• CFE-1087: API Bump for capacity Reservation #318
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-36377: Set required-scc for openshift workloads #211
• Full changelog

cluster-dns-operator

• OCPBUGS-52499: [release-4.15] Add runbook_url for CoreDNSErrorsHigh #432
• Full changelog

cluster-image-registry-operator

• OCPBUGS-51264: ensure that storage names don’t end in dashes #1183
• OCPBUGS-43918: fix proxy config and leader election test flakes #1150
• OCPBUGS-42930: Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #1136
• OCPBUGS-43656: pkg/storage/azure: also check for auth failure error code on deletion #1146
• OCPBUGS-42934: azureclient: stop validating credentials when creating the client #1135
• OCPBUGS-39099: Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth #1111
• OCPBUGS-38895: pkg/resource: invoke update-ca-trust extract with –output #1105
• OCPBUGS-36325: Set required-scc for openshift workloads #1067
• OCPBUGS-36036: go.*,vendor: bump go-retryablehttp #1068
• Full changelog

cluster-ingress-operator

• OCPBUGS-42480: Limit SHA-1 check to the leaf cert in default cert chain #1154
• OCPBUGS-41635: Refine logging for accurate infra CR status updates #1141
• OCPBUGS-36466: Allow operator to update Route spec.subdomain #1100
• OCPBUGS-36208: Implement connect timeout tuning option #1097
• OCPBUGS-36279: Add Regexp Anchor to TestAll #1096
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-50661: Increase waitForFallbackDegradedConditionTimeout #1806
• OCPBUGS-37566: add disabled syncer as reason to CFE for PSA #1716
• OCPBUGS-35832: add SNO control plane high cpu usage alert #1706
• Full changelog

cluster-kube-storage-version-migrator-operator

• OCPBUGS-36322: Set required-scc for openshift workloads #112
• Full changelog

cluster-machine-approver

• OCPBUGS-46034: Ensure trailing dots on DNS names do not block serving cert auth #258
• OCPBUGS-46034: Client internal DNS checks should ignore trailing dot #252
• OCPBUGS-44705: Client internal DNS checks should be case insensitive #245
• Full changelog

cluster-monitoring-operator

• OCPBUGS-46570: Add new metrics for OpenShift logging telemetry #2541
• OCPBUGS-44006: fix(monitoring-plugin): disable emitting nginx version on error pages #2519
• OCPBUGS-43876: Add runbook url for TelemeterClientFail… #2509
• OCPBUGS-42586: Exclude windows nodes from kubelet servicemonitor #2487
• OCPBUGS-41913: filter alerts sent to Telemeter #2472
• OCPBUGS-39172: Backport #2441 for 4.15 #2448
• OCPBUGS-37608: set required-scc for openshift workloads #2420
• OCPBUGS-36563: add runbook_url annotations #2406
• OCPBUGS-37194: Making sure proxy settings are correctly forwarded in the generated remote write configs #2413
• OCPBUGS-36312: inject trusted CA bundle into UWM Alertmanager #2400
• OCPBUGS-34596: Ipsec state backport #2384
• Full changelog

cluster-network-operator

• [Release 4.15] OCPBUGS-51208: Use applyconfigurations for updating network.oprerator status #2653
• OCPBUGS-47633: Prevent live migration process from flapping between step-2 and step-3 #2609
• OCPBUGS-45890: Pass transit_switch_subnet options in ovnkube-node pod #2587
• OCPBUGS-43716: Skip including default crypto policies to avoid authby issue #2599
• OCPBUGS-46149: Remove ip xfrm state when IPsec is disabled #2596
• OCPBUGS-43605: OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration #2539
• OCPBUGS-44973, SDN-5436: Provide support for user owned IPsec machine configs #2576
• OCPBUGS-42753: Set mount propagation to HostToContainer for /var/lib/kubelet #2520
• OCPBUGS-42865: Add configurable subnets while running hybrid-overlay-node binary #2523
• OCPBUGS-43268: Update network operator status for IPsec #2530
• OCPBUGS-43099: Configure narrowing=yes for IPsec connections #2529
• OCPBUGS-42020: HyperShift: do not use antiaffinity on single replica control planes #2504
• OCPBUGS-41947: Add proxy env vars to onvkube-node #2503
• OCPBUGS-31447: Tighten the permissions on whereabouts.conf #2324
• NP-1064, OCPBUGS-39336: Remove managed cluster checking for live migration #2485
• OCPBUGS-34613, OCPBUGS-34726, OCPBUGS-34727: Live migration backports #2393
• OCPBUGS-37962: Fix IC distributed control plane alerts #2459
• OCPBUGS-35837: Propogate hypershift control plane priority class override to multus and preserve container resource requests #2420
• OCPBUGS-37205: Check every MachineConfigPool for IPsec plugin existence #2439
• OCPBUGS-34809: Ensure that the node-identity webhook address contains colons for IPv6 #2396
• OCPBUGS-36347: Create the configmap mtu if not found #2426
• OCPBUGS-36499: [release-4.15] Bump Openshift API and backport configurable subnet knobs (transit / join / masquerade) #2375
• OCPBUGS-36367: update whereabouts crd #2427
• OCPBUGS-32989: Add conditions for ignored-namespaces #2379
• Full changelog

cluster-node-tuning-operator

• e2e:performance: decode to valid kubeletconfig object (#1275) #1275
• Fix context deadlines in ExecCommandOnPod() (#1265) #1265
• OCPBUGS-44275: Drop sched_migration_cost_ns setting (#1207) #1207
• OCPBUGS-44283: right-hand-side profile_dirs take precedence (#1208) #1208
• OCPBUGS-42284: Add cluster-wide proxy env file (#1171) #1171
• TuneD prior to kubelet in one-shot mode (#1125) #1125
• set required-scc for openshift workloads (#1117) #1117
• OCPBUGS-36870: Remove tuned/rendered object (#1110) #1110
• OCPBUGS-36355: Backport fix for OCPBUGS-30647 (#1095) #1095
• Full changelog

cluster-openshift-apiserver-operator

• OCPBUGS-36150: Set required-scc for openshift workloads #581
• Full changelog

cluster-openshift-controller-manager-operator

• OCPBUGS-48832: Add new team members to the OWNERS file #379
• OCPBUGS-35922: lots of churn during image registry managed/removed transition #358
• OCPBUGS-35869: nil pointer reference in ocm-operator #357
• OCPBUGS-36152: Set required-scc for openshift workloads #361
• Full changelog

cluster-samples-operator

• OCPBUGS-49369: add shannon and aroyoredhat as owners #597
• OCPBUGS-37464: Set required-scc for openshift workloads #548
• OCPBUGS-38157: add mfrancisc and metlos as owners add owners 4.15 #550
• Full changelog

cluster-storage-operator

• OCPBUGS-36374: Set required-scc for openshift workloads #484
• Full changelog

cluster-update-keys

• OCPBUGS-43626: keys: Update Red Hat keys to use SHA256 signatures #65
• Full changelog

cluster-version-operator

• OCPBUGS-45330: deps: bump golang.org/x/net to 0.31.0 #1119
• OCPBUGS-44328: Fix desired before sync_worker’s work is initialized #1104
• OCPBUGS-36817: Set required-scc for openshift workloads #1068
• Full changelog

console

• OCPBUGS-52344: fix alert rule link #14828
• OCPBUGS-51332: Do not pass CSV name to operand list page when an exen… #14800
• OCPBUGS-49849: include external labels so silenced alerts not displayed in notifications #14718
• OCPBUGS-48593: ReRun of Resolver based PipelineRuns fails from UI #14689
• OCPBUGS-48592: ImagePullSecret getting duplicated when editing DeploymentConfig in Form View #14688
• OCPBUGS-48048: Update vendor imports to include all PatternFly components #14662
• OCPBUGS-47646: fix table combination #14649
• OCPBUGS-46430: Plugins that use very old PF4 dropdown or menu components with grouped items have bullets and padding that needs to be removed. #14626
• OCPBUGS-45950: Unable to remove finally tasks in pipeline builder mode #14606
• OCPBUGS-46389: use TaskRuns results.tekton.dev/record annotation to get the logs #14622
• OCPBUGS-45248: Remove ClusterTask dependency in console from Pipelines 1.17 #14564
• OCPBUGS-44979: Don’t request user settings configmap if no user has been loaded. #14534
• OCPBUGS-37397: RWOP accessMode is not available on OpenShift console UI #14078
• OCPBUGS-44998: Add IBM Block Storage CSI driver support for RWX #14536
• OCPBUGS-44738: Add flag to hide the pipelines-plugin pipeline builder extensions #14513
• OCPBUGS-44355: A value submitted in From view is wrapped with single quotation after switching to Yaml view. #14476
• OCPBUGS-42355: Fix TypeError: Cannot read properties of null (reading ‘metadata’) in Topology view #14319
• OCPBUGS-43414: Console crashes when ssh is selected in add secret for starting a pipeline run #14401
• OCPBUGS-36559: Increase login flow state paramater length/entropy #14422
• OCPBUGS-37202: Bump github.com/cloudevents/sdk-go/v2 to 2.15.2 #14073
• OCPBUGS-42470: List of default Camel K event sources disappears when adding a custom event source #14331
• OCPBUGS-42471: Need to allow blank for Project/namespace when setting SA Subject in ‘Project access tab’ #14332
• OCPBUGS-33283: Adjust NAD name to “network-xxx-xxx” when creating #14020
• OCPBUGS-42611: Topology screen crashes when completed pod is selected #14353
• OCPBUGS-42648: Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated #14358
• OCPBUGS-38764: Fix “Auto deploy when new image is available” becomes unchecked when editing a deployment from web console #14177
• OCPBUGS-41991: Values entered into the Instantiate Template form are automatically cleared #14294
• OCPBUGS-42384: Fix updating the “Until” field on the Silence > Edit page #14322
• OCPBUGS-39343: The filepath including leading slash makes error during parsing devfile using Gitlab #14227
• OCPBUGS-42144: Use vCenterCluster value from CM as primary resource #14307
• OCPBUGS-38537: Include PatternFly-4 chart styles so they are available for dynamic plugins that still use PF4 react-charts #14158
• OCPBUGS-38108: Revert - terminal: use username if uid is not present #14114
• OCPBUGS-32793: Fix that telemetry events didn’t incl. an userId anymore #13792
• OCPBUGS-38970: DeploymentConfigs deprecation info alert should not present on the Edit deployment page #14195
• OCPBUGS-38969: Tooltip on Pipeline when expression is not shows #14194
• OCPBUGS-39085: Fix utilization card limits/total display #14209
• OCPBUGS-33938: Add validation for vSphere fields Handle submit errors correctly #14210
• OCPBUGS-39112: Disable Knative e2e tests #14197
• OCPBUGS-33076: Remove deprecated resources from spec of the Pipeline #13801
• OCPBUGS-35495: fix crash if helm chart metadata is nil #13977
• OCPBUGS-37452: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14083
• OCPBUGS-38496: Fix password set to Secret created through Start Pipeline form #14152
• OCPBUGS-37399: Add default sorting column for VirtualizedTable component of dynamic plugin sdk #14079
• OCPBUGS-37099: fix BMH restart annotation #14071
• OCPBUGS-37458: one OAuth.config.openshift.io item on Global Configuration page links to non-existing resource #14085
• OCPBUGS-34477: Import from Git allow users to import an app with Build option Pipeline also when no Pipeline is available #13897
• OCPBUGS-36971: ensure correct API version for OperandDetails #14058
• OCPBUGS-34912: Improve Pipeline list page performance #13929
• OCPBUGS-33642: Patch PF dynamic module parser to exclude ‘next’ modules #13849
• OCPBUGS-32501: Pipeline details page Metrics tab crashed due to no custom data #13781
• OCPBUGS-34478: UI inconsistency in topology when application grouping is collapsed #13898
• Full changelog

console-operator

• OCPBUGS-46482: Dont disable console when authConfig type is set to None #953
• OCPBUGS-37408: set required-scc for openshift workloads #924
• Full changelog

container-networking-plugins

• OCPBUGS-37732: Update owners #167
• Full changelog

coredns

• OCPBUGS-37158: UPSTREAM: 6354: openshift: key cache on Checking Disabled (CD) bit #125
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-43375: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.28 into release-4.15 #297
• OCPBUGS-38170: rebase CPO on 4.15 #274
• Full changelog

csi-driver-manila-operator

• OCPBUGS-38023: Set required-scc for openshift workloads #236
• Full changelog

docker-builder

• OCPBUGS-42917, OCPBUGS-43294: Bump buildah to 1.33.12 #442
• OCPBUGS-43188: runc library bump to 1.1.12 #436
• OCPBUGS-48298: skipping some unit tests to avoid failures as they are duplicate #428
• OCPBUGS-48281: Add team members to the OWNERS file #427
• Full changelog

docker-registry

• OCPBUGS-36287: use SelfSubjectReview to obtain user info #406 #406
• Full changelog

egress-router-cni

• OCPBUGS-35524: update to go 1.20 and k8s.io mods to v0.28.3 #86
• Full changelog

hyperkube, pod

• OCPBUGS-44514: Bump k8s api to 1.28.15 #2132
• OCPBUGS-42169: Bump k8s api to 1.28.14 #2091
• OCPBUGS-39016: Update to Kubernetes v1.28.13 #2063
• OCPBUGS-31467: Return from EnsureHostInPool on all NIC errors #1964
• : OCPBUGS-38861: Upstream: 115702 kubelet: output log even file is rotated #2058
• NO-JIRA: update downstream owners #2050
• OCPBUGS-37622: Bump to Kubernetes v1.28.12 #2037
• OCPBUGS-35552: Bump to Kubernetes v1.28.11 #1994
• Full changelog

hypershift

• OCPBUGS-52992: [release-4.15] OCPBUGS-52506: refactor aws identity health check into new controller #5815
• OCPBUGS-52896: Make managed-trust-bundle optional #5813
• OCPBUGS-50699: add region to AWS creds passed to operators managed by CPO #5669
• NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 #5729
• OCPBUGS-51253: OCPBUGS-50692: Fix IsIPv4 function identifying also addresses instead of CIDRs #5701
• OCPBUGS-52172: [release-4.15] Add HostedCluster additional trustbundles to konnectivity-https-proxy #5722
• NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.5 #5683
• chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1739420147 #5624
• NO-JIRA: chore(deps): update dependency mkdocs-material to v9 #5642
• NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1738816775 #5576
• NO-JIRA: chore(deps): update konflux references #5588
• NO-JIRA: Red Hat Konflux update control-plane-operator-4-15 #5338
• NO-JIRA: chore(deps): update dependency mkdocs-mermaid2-plugin to v0.6.0 #5589
• NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.3 #5586
• NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.2 #5577
• OCPBUGS-49668: fix overwriting PKI operator HCP conditions #5512
• NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1737480393 #5486
• NO-JIRA: chore(deps): update konflux references (release-4.15) #5480
• NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.50 (release-4.15) #5434
• NO-JIRA: Update dependency mkdocs-material to v8.5.11 (release-4.15) #5429
• NO-JIRA: chore(deps): update konflux references (release-4.15) #5425
• NO-JIRA: chore(deps): update konflux references (release-4.15) #5386
• NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1736729788 (release-4.15) - abandoned #5380
• NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1736404155 (release-4.15) #5379
• NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.49 (release-4.15) #5385
• NO-JIRA: [release-4.15] Bump golang.org/x/crypto and golang.org/x/net #5371
• NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1734626445 (release-4.15) - abandoned #5344
• NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1734497536 (release-4.15) #5343
• OCPBUGS-46075: Do not send traffic to local audit-webhook through konnectivity #5274
• NO-JIRA: Update dependency mkdocs-glightbox to v0.4.0 (release-4.15) #5327
• NO-JIRA: Update Konflux references (release-4.15) #5326
• OCPBUGS-47545: Separate CPO containerfiles #5334
• NO-JIRA: chore(deps): update dependency mkdocs to v1.6.1 (release-4.15) #5292
• NO-JIRA: chore(deps): update konflux references (release-4.15) #5291
• NO-JIRA: chore(deps): update konflux references (release-4.15) #5251
• OCPBUGS-44522: Add network policies for konnectivity server and ignition server proxy #5120
• OCPBUGS-43931: Return the right tagReference on Catalogs ImageStream #5187
• NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.47 (release-4.15) #5210
• NO-JIRA: chore(deps): update konflux references (release-4.15) #5208
• NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.46 (release-4.15) #5190
• NO-JIRA: chore(deps): update konflux references to 7779f9e (release-4.15) #5182
• OCPBUGS-44278: Configure OAuth https proxy to dial cloud endpoints directly #5068
• NO-JIRA: chore(deps): update konflux references (release-4.15) #5159
• chore(deps): update konflux references (release-4.15) #5136
• NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1731604394 (release-4.15) #5129
• chore(deps): update konflux references (release-4.15) #5118
• NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1731518200 (release-4.15) #5106
• chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9 (release-4.15) #5110
• NO-JIRA: Update Konflux references (release-4.15) #5109
• NO-JIRA: chore(deps): update konflux references to 11b7f08 (release-4.15) #5101
• chore(deps): update konflux references (release-4.15) #5077
• NO-JIRA: chore(deps): update konflux references (release-4.15) #5054
• NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.15) #5060
• OCPBUGS-44201: add ValidIDPConfiguration condition to report IDP config issues #5037
• NO-JIRA: Update Konflux references to fedcfe0 (release-4.15) #5040
• chore(deps): update konflux references (release-4.15) #5025
• chore(deps): update konflux references to f53fe54 (release-4.15) #5022
• NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.43 (release-4.15) #5016
• NO-JIRA: Update Konflux references (release-4.15) #5010
• NO-JIRA: chore(deps): update konflux references (release-4.15) #4974
• OCPBUGS-43635: label routes only when HCP router used #4961
• NO-JIRA: chore(deps): update konflux references (release-4.15) #4957
• NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.42 (release-4.15) #4949
• OCPBUGS-43468: Use guest DNS resolution in Konnectivity HTTPS proxy by default #4929
• NO-JIRA: chore(deps): update konflux references (release-4.15) #4932
• NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.15) #4916
• NO-JIRA: chore(deps): update konflux references (release-4.15) #4922
• NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.15) #4909
• OCPBUGS-42881: Let payload generation pick the release for the NodePool #4867
• OCPBUGS-42992: Conditionally manage kubeconfig secrets for DNS and Ingress operators #4876
• NO-JIRA: chore(deps): update konflux references (release-4.15) #4897
• NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.15) #4881
• NO-JIRA: chore(deps): update konflux references to 37b9187 (release-4.15) #4850
• NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.15) #4807
• NO-JIRA: chore(deps): update konflux references (release-4.15) #4815
• NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.37 (release-4.15) #4793
• NO-JIRA: chore(deps): update konflux references (release-4.15) #4777
• chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.4-1227.1726694542 (release-4.15) #4766
• NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9 (release-4.15) #4770
• chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 (release-4.15) #4769
• chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21 (release-4.15) #4767
• NO-JIRA: chore(deps): update konflux references (release-4.15) #4762
• OCPBUGS-41373: CPO oauth idp converter: resolve names before dialing #4746
• NO-JIRA: Security fixes for openshift-ci-security job #4751
• OCPBUGS-42214: Make guest cluster components use the correct KAS port #4749
• OCPBUGS-38059: Add HTTP konnectivity proxy to OAuth server #4497
• HOSTEDCP-1956: bump CCO and go-jose version #4697
• NO-JIRA: chore(deps): update konflux references (release-4.15) #4719
• OCPBUGS-41701: cmd: report server version, supported OCP #4702
• OCPBUGS-38065: [release-4.15] Use HTTP proxy for ingress controller #4699
• OCPBUGS-41809: copy image-registry AdditionalTrustedCA configmap into HC openshift-config #4706
• HOSTEDCP-1896: [release-4.15] Allow setting Kube APIServer maximum requests in flight #4552
• OCPBUGS-39463: handle version skewed NodePools that do not have rhel9 binaries #4666
• OCPBUGS-39077: Set KCM node monitor grace period #4628
• OCPBUGS-30465: fix: bump google.golang.org/protobuf #4616
• OCPBUGS-39171: fix: bump github.com/IBM/go-sdk-core/v5 #4625
• OCPBUGS-35815: Add hypershift-cluster-version-operator image to release providers #4243
• NO-JIRA: test: relax mgmt KAS egress check #4631
• NO-JIRA: Tolerate restarts for kubevirt external infra #4200
• NO-JIRA: Flaky cert validation test #4630
• OCPBUGS-38943: copy oapi ca-trust recursively when building trust anchor #4613
• OCPBUGS-39041: set proxy envvars on aws and azure CCMs #4624
• OCPBUGS-38613: hcco: reconcile apiserver config into hosted cluster #4567
• OCPBUGS-38561: Let the CPO oidc check resolve through data plane #4564
• OCPBUGS-34904: remove weak ciphers from security profile #4547
• OCPBUGS-37171: OCPBUGS-35899: Doubled machineHealthCheck timeout on Agent and None #4489
• NO-JIRA: Update Konflux 4.15 and perform migration #4487
• NO-JIRA: [release-4.15] Kubevirt on Azure: Change KAS LB Port to 7443 #4469
• OCPBUGS-36938: [release-4.15]: Add HTTP(s) konnectivity proxy and use it with OpenShift APIServer #4358
• OCPBUGS-37174: Delete IDMS in dataplane once HCP ICS field is removed #4457
• NO-JIRA: [release-4.15] kubevirt-csi-driver: Pass infra kubeconfig in case of external infra #4279
• HOSTEDCP-1795, HOSTEDCP-1796: Customize the self-generated cert validity and rotation #4444
• OCPBUGS-36916: Add newline after TLS certs referenced by image.config #4443
• OCPBUGS-37695: Set right endpointSlice port #4441
• NO-JIRA: Red Hat Konflux update hypershift-release-mce-25 #4433
• NO-JIRA: [release-4.15] test/e2e: remove api budget checks #4413
• OCPBUGS-37266: extract rhel9 MCO binaries for rhel8 based MCO images #4385
• OCPBUGS-36606: enable audit log for oauth-openshift #4320
• HOSTEDCP-1714: Kubernetes API Server Log Verbosity Annotation cherry pick to 4.15 #4178
• OCPBUGS-35736: Complete KAS migration to none endpoint reconciler type #4228
• OCPBUGS-35935: check mgmt cluster for route capability before DeleteIfNeeded for ovn sbdb route #4265
• NO-JIRA: chore(deps): update konflux references (release-4.15) #4259
• OCPBUGS-35714: Generate default worker security group rules based on machineCIDR #4266
• NO-JIRA: chore(deps): update konflux references (release-4.15) #4252
• Full changelog

ibm-cloud-controller-manager

• : OCPBUGS-37311: Bump otelgrpc to v0.49.0 #74
• Full changelog

ibm-vpc-block-csi-driver

• OCPBUGS-36066: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #72
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-42438: Reorder static resources to create RBAC first #130
• OCPBUGS-36072: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #121
• Full changelog

ibm-vpc-node-label-updater

• OCPBUGS-36012: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #41
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-36078: UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.15 #87
• Full changelog

ibmcloud-machine-controllers

• OCPBUGS-36084: Bump dependency for CVE #54
• OCPBUGS-43675: IBMCloud: Handle pagination for subnets #48
• Full changelog

insights-operator

• Ignore previous status when disabling alerts (#1060) #1060
• OCPBUGS-45204: LokiStack gatherer (#1057) #1057
• OCPBUGS-45044: insightsoperator.operator.openshift.io resource is create-only (#1056) #1056
• gather selected clusterroles (#1024) #1024
• OCPBUGS-39565: Not able to enable repositories during entitled build in OCP Cluster on IBM-Z (#1015) #1015
• OCPBUGS-39395: collect some nmstate customresources (#986) (#989) (#995) (#1002) #986
• Add haproxy metric (#983) #983
• OCPBUGS-37672: Ingress controller related certificates’ validate dates gathering (#972) #972
• fix the configmapobserver notifications (#971) #971
• manifests: set required-scc for openshift workloads (#967) #967
• OCPBUGS-35882: properly encode the URL for the advisor links (#958) #958
• OCPBUGS-35865: Collect aggregated Prometheus Alertmanager instances (#950) #950
• Full changelog

ironic

• OCPBUGS-48148, OCPBUGS-48597: Bump jinja2 to 3.0.1-6.el9.2 #624
• OCPBUGS-43953, OCPBUGS-43961: Bump python-waitress [4.15] #605
• OCPBUGS-39018: Bump ironic-lib to fix utf8 decoding issue #570
• OCPBUGS-38798: redfish-virtualmedia fails on XFusion nodes #565
• OCPBUGS-37761, OCPBUGS-39381: Include fixes for CVE-2024-44082 #583
• OCPBUGS-38512: set min version for python3-webob #554
• OCPBUGS-33332: bump werkzeug #536
• OCPBUGS-37407: bump jinja2 #529
• OCPBUGS-37113: Update eventlet version #523
• Full changelog

ironic-agent

• OCPBUGS-39018: Bump ironic-lib to fix utf8 decoding issue #157
• OCPBUGS-39381: Include fixes for CVE-2024-44082 #162
• OCPBUGS-38512: set webob and bump werkzeug #150
• Full changelog

ironic-static-ip-manager

• OCPBUGS-49836: Fix subnet validation #49
• Full changelog

k8s-prometheus-adapter

• OCPBUGS-35820: Fix the podmetrics and nodemetrics command #109
• Full changelog

keepalived-ipfailover

• OCPBUGS-19254: Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #152
• Full changelog

kube-proxy, sdn

• OCPBUGS-46576: Get rid of deps.diff so it doesn’t keep causing problems [4.15] #646
• OCPBUGS-45955: Stop checking ruleVersion [4.16] #644
• OCPBUGS-43605: backport fix for network policy during live migration #642
• OCPBUGS-42171: fix redundant router-default iptables rule [4.15] #634
• Full changelog

kube-rbac-proxy

• OCPBUGS-31941: bump golang.org/x/net [4.15] #109
• Full changelog

machine-api-operator

• OCPBUGS-52481: Drop oVirt support #1340
• OCPBUGS-48105: Vsphere: Handle cloned instance with lost taskID #1321
• OCPBUGS-46080: Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages #1314
• [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #1288
• CFE-1051: Adding web-hook validation for capacityReservationGroupID #1261
• Full changelog

machine-config-operator

• OCPBUGS-43742: Soften haproxy timeout for kubeapi probe #4663
• OCPBUGS-50526: Add clarification to invalid maxUnavailable alert #4842
• OCPBUGS-48583: trying to wait for sub-contorllers #4796
• OCPBUGS-46034: Remove trailing periods from AWS provided hostnames #4745
• OCPBUGS-44565: Post upgrading from 4.14 to 4.15.36, the observedGeneration count increased tremendously #4702
• OCPBUGS-42137: Removal of additionalTrustBundle CA does not remove certificate from node backport #4687
• OCPBUGS-44240: Disable ESP offload for OVS attached interfaces #4684
• MCO-1341: Backport Telemetry to 4.15 #4648
• OCPBUGS-42110: Do not use ‘restart’ for ‘oneshot’ service #4621
• OCPBUGS-43582: Panic seen in CI job for MCC pod #4653
• OCPBUGS-43575: MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP #4647
• OCPBUGS-37704: Make logging configurable for on-prem components #4501
• OCPBUGS-32329: Fix configure-ip-forwarding.sh #4324
• OCPBUGS-37551: On-Prem resolv prepender to watch for NM changes #4499
• OCPBUGS-38712: SCC-pinning for openshift workloads #4540
• OCPBUGS-38370: Revert “MCD-pull: run after network-online.target in Azure” #4525
• OCPBUGS-37768: Move StartLimitIntervalSec to Unit section #4506
• OCPBUGS-37629: Openshift uncordoned compute-node that was intentionally cordoned #4495
• OCPBUGS-36863: Copy RHEL9 binaries used in HCP #4476
• OCPBUGS-35220: Check both ready and health ingress endpoints #4398
• OCPBUGS-30139: [release-4.15] Use NM’s dns-change event for resolv.conf #4220
• OCPBUGS-36769: daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages #4461
• OCPBUGS-36550: MCD-pull: run after network-online.target in Azure #4454
• OCPBUGS-27436: Fix mirrorSourcePolicy error prompt imagecontentsourcepolicies #4431
• OCPBUGS-36258: daemon/update: disable systemd unit before overwriting #4441
• Full changelog

monitoring-plugin

• OCPBUGS-44393: Manual cherry pick cross spawn 4.15 #277
• OCPBUGS-43242: upgrade dynamic plugin sdk to remove vulnerable dependencies 4.15 #218
• Full changelog

multus-admission-controller

• OCPBUGS-37727: Update owners #88
• Full changelog

multus-networkpolicy

• Update owners (#58) #58
• Full changelog

multus-route-override-cni

• OCPBUGS-41804: [release-4.15]Update owners #59
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-37729: Update owners #305
• OCPBUGS-37813, OCPBUGS-37816: [release-4.15] align api calls timeout and skip pods marked for deletion #308
• OCPBUGS-36367: [release-4.15] Return previous IP allocation for add cmd #295
• Full changelog

must-gather

• OCPBUGS-42970: Collect etcd object count #456
• OCPBUGS-48083: Update owners #474
• OCPBUGS-46451: Support gathering IPsec data #471
• OCPBUGS-43057: [Relase-4.15] Multus is now a Pod and will be captured by normal #450
• Full changelog

network-metrics-daemon

• Correct 4.16 owners file (#99) #99
• Full changelog

nutanix-cloud-controller-manager

• OCPBUGS-22078: bump golang.org/x/net to v0.17.0 #40
• Full changelog

nutanix-machine-controllers

• [[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #81
• Full changelog

oc-mirror

• changes the owners file (#1014) #1014
• OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1022) #1022
• Full changelog

openshift-apiserver

• OCPBUGS-47766: Pass expected type to deploymentconfig/scale object validation. #466
• OCPBUGS-32444: Bump golang/x/net to v0.23.0 #428
• Full changelog

openshift-controller-manager

• OCPBUGS-48280: Add team members to the OWNERS file #359
• NO-JIRA: cleanup root and app OWNERS #348
• OCPBUGS-32871: replaces deprecated square/go-jose wtih go-jose/go-jose #333
• OCPBUGS-41949: Add adambkaplan as approver #291
• Full changelog

openstack-cinder-csi-driver-operator

• OCPBUGS-36586: Add config map hooks #175
• Full changelog

openstack-machine-api-provider

• OCPBUGS-34665: Failure to get bootstrap is non-fatal #120
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-48662: Fix concurrent namespace resolution #948
• OCPBUGS-48697: Fix excessive catalog source snapshots cause severe performance regression #958
• OCPBUGS-46926, OCPBUGS-46933, OCPBUGS-47313: x/net bump to v0.34.0 [release-4.15] #940
• OCPBUGS-46479: CRD upgrade existing CR validation fix #917
• OCPBUGS-42114: add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata #874
• OCPBUGS-41981: (fix) registry pods do not come up again after node failure (#3366) #868
• OCPBUGS-41819: [4.17] adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #864
• OCPBUGS-41598: Fix e2e flake: upgrade CRD with deprecated version #862
• OCPBUGS-38383: (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache #840
• OCPBUGS-38323: Update junit report file name to show spec results on Test Grid #839
• OCPBUGS-37677: [release-4.15] Update e2e config and backport list of flakes #829
• OCPBUGS-37554: Set required-scc for openshift workloads #828
• OCPBUGS-37017: Bump github.com/containers/image/v5 #823
• OCPBUGS-36812: fix sorting unpack jobs #817
• OCPBUGS-36451: Can’t install operator on 4.15 after uninstalling it on a prior version #810
• OCPBUGS-36813: [CARRY] perform operator apiService certificate validity checks directly #819
• OCPBUGS-35305: [release-4.15] catalog-operator: delete catalog pods stuck in Terminating state due to unreachable node #779
• Full changelog

operator-marketplace

• OCPBUGS-49428: Upgrade golang.org/x/net [release-4.15] #588
• OCPBUGS-24144: Updating marketplace-operator-container image to be consistent with ART [4.15] #553
• OCPBUGS-37524: Set required-scc for openshift workloads #570
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-43605: Add SDN node subnet gateway IP to host-network address_set #2419
• OCPBUGS-46403: Add static route to the hairpin masquerade IPs to pod #2396
• OCPBUGS-47799: Let OVN-northd bind remote ports #2407
• OCPBUGS-44708: Add hybird overlay pod IPs to the namespace address_set #2399
• OCPBUGS-45097: pin libreswan to 4.6-3.el9_0.3 #2374
• OCPBUGS-44782: Bump ovs to 3.1.0-137 #2359
• OCPBUGS-42943: Fix egress gateway pod cleanup for remote zone pods. #2342
• OCPBUGS-41838: Use more exact name match when deleting static routes to HO nodes. #2298
• OCPBUGS-42780: Add subnet overlap check for transit switch subnet #2313
• OCPBUGS-41340: Delete EgressIP LRP stale nexthops when node is not found #2288
• OCPBUGS-38262: [release-4.15] Bump OVSDBTimeout and make it configurable. #2252
• OCPBUGS-37962: Fix registering northd metrics on appropriate nodes #2246
• OCPBUGS-37196: [release-4.15] ovspinning: Set affinity of each thread #2235
• OCPBUGS-35902: Bump ovn to 23.09.4-16 #2216
• OCPBUGS-36382: Handle IP fragments in SGW mode #2215
• OCPBUGS-33619: EgressIP: Reload certificates for the grpc heatlhcheck server #2167
• Full changelog

powervs-block-csi-driver

• OCPBUGS-36096: Fix CVE-2024-6104 by updating http-retryable to 0.7.7 #89
• Full changelog

powervs-cloud-controller-manager

• OCPBUGS-36106: UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.15 #74
• Full changelog

powervs-machine-controllers

• OCPBUGS-41977: Update go.mod to fix CVE - 4.15 #85
• Full changelog

prometheus

• OCPBUGS-43669: fix(discovery): Handle cache.DeletedFinalStateUnknown in node informers’ DeleteFunc #233
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• OCPBUGS-38400: feat: sync proxy settings in Alertmanager configuration #300
• OCPBUGS-36719: add proxyURL validation for smon,pmon and probe #298
• Full changelog

telemeter

• OCPBUGS-34831: fix issuer check during JWT authentication for 4.15 #538
• Full changelog

tests

• OCPBUGS-52582: Use payload pullspec for image info test #29590
• OCPBUGS-41614: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token #29502
• OCPBUGS-49647: Fixing build s2i ruby test data inline with latest ruby version(>=3.0) #29503
• OCPBUGS-48749: Add/remove team members to the OWNERS file for Builds #29551
• OCPBUGS-44106: Adjust createDNSPod() to support hypershift dual-stack test #29257
• OCPBUGS-38086: vertical scaling test should not rely on CPMS replicas #28985
• OCPBUGS-39136: Bump timeout for the pod-network-service endpoints check #29053
• OCPBUGS-38787: [4.15] egressfirewall: skip ping tests in case of hypershift kubevirt on Azure infra #28994
• OCPBUGS-36264: add Proxy config #28912
• OCPBUGS-37630: remove unused in-cluster monitoring code #28956
• #28746 FIX [release-4.15] OCPBUGS-33023: update egressFWTestE2E image which contains ping binary #28898
• OCPBUGS-36724: Removes dependency on samples operator images #28927
• OCPBUGS-36319: Only look for thanos connections to platform monitoring stack #28915
• OCPBUGS-34949: test/extended: skip etcd leader change check on hypershift #28919
• Full changelog

vsphere-cloud-controller-manager

• OCPBUGS-37659: Bump otelgrpc to v0.49.0 #71
• Full changelog

vsphere-problem-detector

• OCPBUGS-37760: Drop event when CheckDefaultDatastore fails #170
• OCPBUGS-35732: Fix missing failure-domains #161
• Full changelog

---

View changelog in Markdown or change previous release: 4.15.474.15.464.15.454.15.444.15.434.15.424.15.414.15.404.15.394.15.384.15.374.15.364.15.354.15.344.15.334.15.324.15.314.15.304.15.294.15.284.15.274.15.264.15.254.15.244.15.234.15.224.15.214.15.204.15.194.15.184.15.174.15.164.15.154.15.144.15.134.15.124.15.114.15.104.15.94.15.84.15.74.15.64.15.54.15.44.15.34.15.24.15.14.15.04.15.0-rc.84.15.0-rc.74.15.0-rc.54.15.0-rc.44.15.0-rc.34.15.0-rc.24.15.0-rc.14.15.0-rc.04.14.604.14.594.14.584.14.574.14.564.14.554.14.544.14.534.14.524.14.514.14.504.14.494.14.484.14.474.14.464.14.454.14.444.14.434.14.424.14.414.14.404.14.394.14.384.14.374.14.364.14.354.14.344.14.334.14.324.14.314.14.304.14.294.14.284.14.274.14.264.14.254.14.244.14.234.14.224.14.214.14.204.14.194.14.184.14.174.14.164.14.154.14.144.14.134.14.124.14.114.14.104.14.94.14.84.14.74.14.64.14.54.14.44.14.34.14.24.14.14.14.04.14.0-rc.74.14.0-rc.64.14.0-rc.54.14.0-rc.44.14.0-rc.34.14.0-rc.24.14.0-rc.14.14.0-rc.04.13.634.13.624.13.614.13.604.13.594.13.584.13.574.13.564.13.554.13.544.13.534.13.524.13.514.13.504.13.494.13.484.13.474.13.464.13.454.13.444.13.434.13.424.13.414.13.404.13.394.13.384.13.374.13.364.13.354.13.344.13.334.13.324.13.314.13.304.13.294.13.284.13.274.13.264.13.254.13.244.13.234.13.224.13.214.13.194.13.184.13.174.13.164.13.154.13.144.13.134.13.124.13.114.13.104.13.94.13.84.13.74.13.64.13.54.13.44.13.34.13.24.13.14.13.04.13.0-rc.84.13.0-rc.74.13.0-rc.64.13.0-rc.54.13.0-rc.44.13.0-rc.34.13.0-rc.24.13.0-rc.04.12.844.12.834.12.824.12.814.12.804.12.794.12.784.12.774.12.764.12.754.12.744.12.734.12.724.12.714.12.704.12.694.12.684.12.674.12.664.12.654.12.644.12.634.12.624.12.614.12.604.12.594.12.584.12.574.12.564.12.554.12.544.12.534.12.524.12.514.12.504.12.494.12.484.12.474.12.464.12.454.12.444.12.434.12.424.12.414.12.404.12.394.12.384.12.374.12.364.12.354.12.344.12.334.12.324.12.314.12.304.12.294.12.284.12.274.12.264.12.254.12.244.12.234.12.224.12.214.12.204.12.194.12.184.12.174.12.164.12.154.12.144.12.134.12.124.12.114.12.104.12.94.12.84.12.74.12.64.12.54.12.44.12.34.12.24.12.14.12.04.12.0-rc.84.12.0-rc.74.12.0-rc.64.12.0-rc.54.12.0-rc.44.12.0-rc.34.12.0-rc.24.12.0-rc.14.12.0-rc.04.11.594.11.584.11.574.11.564.11.554.11.544.11.534.11.524.11.514.11.504.11.494.11.484.11.474.11.464.11.454.11.444.11.434.11.424.11.414.11.404.11.394.11.384.11.374.11.364.11.354.11.344.11.334.11.324.11.314.11.304.11.294.11.284.11.274.11.264.11.254.11.244.11.234.11.224.11.214.11.204.11.194.11.184.11.174.11.164.11.154.11.144.11.134.11.124.11.114.11.104.11.94.11.84.11.74.11.64.11.54.11.44.11.34.11.24.11.14.11.04.11.0-rc.74.11.0-rc.64.11.0-rc.54.11.0-rc.44.11.0-rc.34.11.0-rc.24.11.0-rc.14.11.0-rc.04.11.0-fc.34.11.0-fc.24.11.0-fc.0───5.0.0-0.nightly-2026-01-21-185245───5.0.0-0.ci-2026-01-21-185246───4.23.0-0.nightly-2026-01-22-1534144.23.0-0.nightly-2026-01-22-1134144.23.0-0.nightly-2026-01-22-0734144.23.0-0.nightly-2026-01-22-0334144.23.0-0.nightly-2026-01-21-2334144.23.0-0.nightly-2026-01-21-1934144.23.0-0.nightly-2026-01-21-1534144.23.0-0.nightly-2026-01-21-1134144.23.0-0.nightly-2026-01-21-073414───4.23.0-0.ci-2026-01-22-1534344.23.0-0.ci-2026-01-22-0934334.23.0-0.ci-2026-01-22-0334324.23.0-0.ci-2026-01-21-2134314.23.0-0.ci-2026-01-21-1534314.23.0-0.ci-2026-01-21-0934314.23.0-0.ci-2026-01-21-0334314.23.0-0.ci-2026-01-20-2134314.23.0-0.ci-2026-01-20-1534314.23.0-0.ci-2026-01-20-0934314.23.0-0.ci-2026-01-20-0334314.23.0-0.ci-2026-01-19-213420───4.22.0-0.nightly-2026-01-22-1221344.22.0-0.nightly-2026-01-22-0259084.22.0-0.nightly-2026-01-21-2037534.22.0-0.nightly-2026-01-21-1455204.22.0-0.nightly-2026-01-21-0550024.22.0-0.nightly-2026-01-20-2133224.22.0-0.nightly-2026-01-20-1527144.22.0-0.nightly-2026-01-20-0723324.22.0-0.nightly-2026-01-19-0857294.22.0-0.nightly-2026-01-14-0316574.22.0-0.nightly-2026-01-06-164201───4.22.0-0.ci-2026-01-22-1404224.22.0-0.ci-2026-01-22-0804204.22.0-0.ci-2026-01-22-0204204.22.0-0.ci-2026-01-21-2004194.22.0-0.ci-2026-01-21-1404194.22.0-0.ci-2026-01-21-0804184.22.0-0.ci-2026-01-21-0204184.22.0-0.ci-2026-01-20-2004164.22.0-0.ci-2026-01-20-1404164.22.0-0.ci-2026-01-20-0804164.22.0-0.ci-2026-01-20-020414───4.21.0-0.nightly-2026-01-22-1332344.21.0-0.nightly-2026-01-22-0433154.21.0-0.nightly-2026-01-21-2103384.21.0-0.nightly-2026-01-21-1017324.21.0-0.nightly-2026-01-21-0200224.21.0-0.nightly-2026-01-20-0728014.21.0-0.nightly-2026-01-19-2122054.21.0-0.nightly-2026-01-19-1323004.21.0-0.nightly-2026-01-19-0444284.21.0-0.nightly-2026-01-18-2315304.21.0-0.nightly-2026-01-18-1723034.21.0-0.nightly-2026-01-18-0838374.21.0-0.nightly-2026-01-18-0016544.21.0-0.nightly-2026-01-17-1808164.21.0-0.nightly-2026-01-17-0301114.21.0-0.nightly-2026-01-13-111112───4.21.0-0.ci-2026-01-22-1604394.21.0-0.ci-2026-01-22-1004394.21.0-0.ci-2026-01-22-0404394.21.0-0.ci-2026-01-21-2149334.21.0-0.ci-2026-01-21-1549334.21.0-0.ci-2026-01-21-0949334.21.0-0.ci-2026-01-21-0216544.21.0-0.ci-2026-01-20-2016544.21.0-0.ci-2026-01-20-1416544.21.0-0.ci-2026-01-20-0816544.21.0-0.ci-2026-01-20-0216544.21.0-0.ci-2026-01-19-201654───4.20.0-0.nightly-2026-01-22-1332424.20.0-0.nightly-2026-01-22-0430464.20.0-0.nightly-2026-01-21-2044164.20.0-0.nightly-2026-01-21-0037114.20.0-0.nightly-2026-01-20-1833524.20.0-0.nightly-2026-01-20-0904254.20.0-0.nightly-2026-01-19-2123584.20.0-0.nightly-2026-01-19-1437104.20.0-0.nightly-2026-01-19-0929324.20.0-0.nightly-2026-01-19-0117434.20.0-0.nightly-2026-01-18-1956554.20.0-0.nightly-2026-01-18-1050024.20.0-0.nightly-2026-01-18-0301254.20.0-0.nightly-2026-01-17-2032044.20.0-0.nightly-2026-01-17-0340544.20.0-0.nightly-2026-01-16-1819484.20.0-0.nightly-2026-01-16-0722544.20.0-0.nightly-2026-01-15-2124584.20.0-0.nightly-2026-01-15-1152594.20.0-0.nightly-2026-01-13-2253204.20.0-0.nightly-2025-05-26-181128───4.20.0-0.ci-2026-01-22-1153164.20.0-0.ci-2026-01-22-0235524.20.0-0.ci-2026-01-21-2035524.20.0-0.ci-2026-01-21-1435524.20.0-0.ci-2026-01-21-0544074.20.0-0.ci-2026-01-20-2119304.20.0-0.ci-2026-01-20-1220074.20.0-0.ci-2026-01-20-0337354.20.0-0.ci-2026-01-19-184500───4.19.0-0.nightly-2026-01-22-1205594.19.0-0.nightly-2026-01-22-0321074.19.0-0.nightly-2026-01-21-2052304.19.0-0.nightly-2026-01-21-1313464.19.0-0.nightly-2026-01-21-0739364.19.0-0.nightly-2026-01-20-2312524.19.0-0.nightly-2026-01-20-1646034.19.0-0.nightly-2026-01-20-0530284.19.0-0.nightly-2026-01-19-2016364.19.0-0.nightly-2026-01-19-1130384.19.0-0.nightly-2026-01-13-110816───4.19.0-0.ci-2026-01-22-1616434.19.0-0.ci-2026-01-22-0753224.19.0-0.ci-2026-01-21-2306354.19.0-0.ci-2026-01-21-1706354.19.0-0.ci-2026-01-21-1106354.19.0-0.ci-2026-01-21-023508───4.18.0-0.nightly-2026-01-22-1514444.18.0-0.nightly-2026-01-22-1037254.18.0-0.nightly-2026-01-22-0319334.18.0-0.nightly-2026-01-21-2312414.18.0-0.nightly-2026-01-21-1756474.18.0-0.nightly-2026-01-21-1107484.18.0-0.nightly-2026-01-21-0707484.18.0-0.nightly-2026-01-21-0259334.18.0-0.nightly-2026-01-20-1919434.18.0-0.nightly-2026-01-20-1319114.18.0-0.nightly-2026-01-20-0551384.18.0-0.nightly-2026-01-19-214631───4.18.0-0.ci-2026-01-22-1509334.18.0-0.ci-2026-01-22-0627374.18.0-0.ci-2026-01-21-2348364.18.0-0.ci-2026-01-21-1334254.18.0-0.ci-2026-01-21-0734254.18.0-0.ci-2026-01-21-0134254.18.0-0.ci-2026-01-20-1736344.18.0-0.ci-2026-01-20-1136344.18.0-0.ci-2026-01-19-2223014.18.0-0.ci-2026-01-19-1623014.18.0-0.ci-2026-01-19-071424───4.17.0-0.nightly-2026-01-22-0718084.17.0-0.nightly-2026-01-22-0058134.17.0-0.nightly-2026-01-21-2058134.17.0-0.nightly-2026-01-21-1342504.17.0-0.nightly-2026-01-21-0740524.17.0-0.nightly-2026-01-21-0224064.17.0-0.nightly-2026-01-20-2224064.17.0-0.nightly-2026-01-20-1718144.17.0-0.nightly-2026-01-20-1318144.17.0-0.nightly-2026-01-20-0551064.17.0-0.nightly-2026-01-20-0151064.17.0-0.nightly-2026-01-19-1724344.17.0-0.nightly-2026-01-19-1006304.17.0-0.nightly-2026-01-15-033356───4.17.0-0.ci-2026-01-22-1133104.17.0-0.ci-2026-01-22-0533104.17.0-0.ci-2026-01-21-2123364.17.0-0.ci-2026-01-21-1316004.17.0-0.ci-2026-01-21-0716004.17.0-0.ci-2026-01-21-0116004.17.0-0.ci-2026-01-20-1734594.17.0-0.ci-2026-01-20-1134594.17.0-0.ci-2026-01-19-1306544.17.0-0.ci-2026-01-18-142805───4.16.0-0.nightly-2026-01-22-0309434.16.0-0.nightly-2026-01-21-1939354.16.0-0.nightly-2026-01-21-0320474.16.0-0.nightly-2026-01-20-1903154.16.0-0.nightly-2026-01-20-0326114.16.0-0.nightly-2026-01-19-1450464.16.0-0.nightly-2026-01-19-0258184.16.0-0.nightly-2026-01-18-1454344.16.0-0.nightly-2026-01-18-0256094.16.0-0.nightly-2026-01-08-182247───4.16.0-0.ci-2026-01-22-1035134.16.0-0.ci-2026-01-21-1617184.16.0-0.ci-2026-01-21-1017184.16.0-0.ci-2026-01-20-2226264.16.0-0.ci-2026-01-20-1530384.16.0-0.ci-2026-01-19-1451294.16.0-0.ci-2026-01-19-0757224.16.0-0.ci-2026-01-17-2300054.16.0-0.ci-2026-01-17-155615───4.15.0-0.nightly-2026-01-22-0212574.15.0-0.nightly-2026-01-21-2000344.15.0-0.nightly-2026-01-21-0946194.15.0-0.nightly-2026-01-20-1235184.15.0-0.nightly-2026-01-20-0835184.15.0-0.nightly-2026-01-20-015134───4.15.0-0.ci-2026-01-22-1100364.15.0-0.ci-2026-01-21-2352004.15.0-0.ci-2026-01-21-1149174.15.0-0.ci-2026-01-21-0440424.15.0-0.ci-2026-01-20-1202174.15.0-0.ci-2026-01-20-0151414.15.0-0.ci-2026-01-19-1028084.15.0-0.ci-2026-01-18-195116───4.14.0-0.nightly-2026-01-22-0457444.14.0-0.nightly-2026-01-21-2120084.14.0-0.nightly-2026-01-21-0821074.14.0-0.nightly-2026-01-20-1931464.14.0-0.nightly-2026-01-20-1158494.14.0-0.nightly-2026-01-20-0155284.14.0-0.nightly-2026-01-19-172904───4.14.0-0.ci-2026-01-22-1205244.14.0-0.ci-2026-01-21-1719334.14.0-0.ci-2026-01-21-0254184.14.0-0.ci-2026-01-20-0155344.14.0-0.ci-2026-01-18-2125244.14.0-0.ci-2026-01-18-1045124.14.0-0.ci-2026-01-17-2019394.14.0-0.ci-2026-01-17-1419394.14.0-0.ci-2026-01-17-0339234.14.0-0.ci-2026-01-16-1154034.14.0-0.ci-2026-01-15-210945───4.13.0-0.nightly-2026-01-22-1507434.13.0-0.nightly-2026-01-21-0417504.13.0-0.nightly-2026-01-20-1431064.13.0-0.nightly-2026-01-20-0726414.13.0-0.nightly-2026-01-20-0126414.13.0-0.nightly-2026-01-19-1408154.13.0-0.nightly-2026-01-15-0143224.13.0-0.nightly-2025-12-19-0124024.13.0-0.nightly-2025-11-26-2001524.13.0-0.nightly-2025-11-25-2025164.13.0-0.nightly-2025-11-06-040447───4.13.0-0.ci-2026-01-22-1456034.13.0-0.ci-2026-01-22-0543394.13.0-0.ci-2026-01-21-1957434.13.0-0.ci-2026-01-21-1007284.13.0-0.ci-2026-01-21-0407284.13.0-0.ci-2026-01-20-012643───4.12.0-0.nightly-2026-01-22-1532434.12.0-0.nightly-2026-01-22-0145194.12.0-0.nightly-2026-01-21-1357094.12.0-0.nightly-2026-01-21-0535144.12.0-0.nightly-2026-01-20-1415224.12.0-0.nightly-2026-01-20-0201034.12.0-0.nightly-2026-01-19-1353334.12.0-0.nightly-2026-01-19-0240284.12.0-0.nightly-2026-01-18-1353574.12.0-0.nightly-2026-01-18-013953───4.12.0-0.ci-2026-01-22-1519184.12.0-0.ci-2026-01-21-1609334.12.0-0.ci-2026-01-21-0535104.12.0-0.ci-2026-01-18-1956414.12.0-0.ci-2026-01-18-1356414.12.0-0.ci-2026-01-18-0238054.12.0-0.ci-2026-01-17-1642274.12.0-0.ci-2026-01-16-1652054.12.0-0.ci-2026-01-16-103056───4.11.0-0.nightly-2025-08-30-0110584.11.0-0.nightly-2025-08-27-2007484.11.0-0.nightly-2025-08-26-2039164.11.0-0.nightly-2025-08-21-0105404.11.0-0.nightly-2025-08-14-204255───4.11.0-0.ci-2026-01-21-1613304.11.0-0.ci-2026-01-21-1013304.11.0-0.ci-2026-01-06-0501574.11.0-0.ci-2026-01-05-2301574.11.0-0.ci-2025-12-05-0742274.11.0-0.ci-2025-11-26-0737454.11.0-0.ci-2025-09-22-2122234.11.0-0.ci-2025-09-22-1522234.11.0-0.ci-2025-09-12-1707384.11.0-0.ci-2025-09-05-032851───4.22.0-ec.14.22.0-ec.0

Source code for this page located on github