4.15.65

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.15.65

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded (1 retry) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.15-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-main-ci-4.15-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.15-micro Succeeded periodic-ci-openshift-release-main-nightly-4.15-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.15-micro Failed (3 retries) periodic-ci-openshift-release-main-ci-4.15-e2e-azure-ovn-upgrade
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.15-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.15-fips-payload-scan
- gcp-ovn-rt-upgrade-4.15-minor Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.15-upgrade-from-stable-4.14-e2e-gcp-ovn-rt-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- hypershift-ovn-conformance-4.15 Failed (1 retry) periodic-ci-openshift-hypershift-release-4.15-periodics-e2e-aws-ovn-conformance
  - Attempt 1 Failed
  - Attempt 2 Failed
- metal-ipi-ovn-dualstack Succeeded periodic-ci-openshift-release-main-nightly-4.15-e2e-metal-ipi-ovn-dualstack
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.15-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-main-nightly-4.15-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.14.19, 4.14.20, 4.14.21, 4.14.22, 4.14.23, 4.14.24, 4.14.25, 4.14.26, 4.14.27, 4.14.28, 4.14.29, 4.14.30, 4.14.31, 4.14.32, 4.14.33, 4.14.34, 4.14.35, 4.14.36, 4.14.37, 4.14.38, 4.14.39, 4.14.40, 4.14.41, 4.14.42, 4.14.43, 4.14.44, 4.14.46, 4.14.48, 4.14.49, 4.14.52, 4.14.53, 4.14.54, 4.14.55, 4.14.56, 4.14.57, 4.14.58, 4.14.59, 4.14.60, 4.14.61, 4.14.62, 4.15.10, 4.15.11, 4.15.12, 4.15.13, 4.15.14, 4.15.15, 4.15.16, 4.15.17, 4.15.18, 4.15.19, 4.15.20, 4.15.21, 4.15.22, 4.15.24, 4.15.25, 4.15.26, 4.15.27, 4.15.28, 4.15.29, 4.15.30, 4.15.31, 4.15.32, 4.15.33, 4.15.34, 4.15.35, 4.15.36, 4.15.37, 4.15.38, 4.15.39, 4.15.40, 4.15.41, 4.15.42, 4.15.43, 4.15.44, 4.15.45, 4.15.48, 4.15.49, 4.15.5, 4.15.50, 4.15.51, 4.15.52, 4.15.53, 4.15.54, 4.15.55, 4.15.56, 4.15.57, 4.15.58, 4.15.59, 4.15.6, 4.15.60, 4.15.61, 4.15.7, 4.15.8, 4.15.9

4.16.64 - Failed
4.15.64 (changes) - S F F F F S S F S
4.15.63 (changes) - Failed
4.15.62 (changes) - Success
4.15.47 (changes) - Failed
4.15.46 (changes) - Success
4.15.23 (changes) - Failed
4.15.3 (changes) - Failed
4.15.2 (changes) - Failed
4.15.0 (changes) - Success
4.14.66 (changes) - Success Success
4.14.65 (changes) - Success
4.14.63 (changes) - Success
4.14.51 (changes) - Failed
4.14.50 (changes) - Success
4.14.45 (changes) - Failed
4.14.18 (changes) - Failed
4.14.17 (changes) - Failed
4.14.16 (changes) - Failed
4.14.0-0.nightly-2026-06-03-180920 (changes) - Failed Success

Upgrades to:

4.16.64 (changes) - F F F F F F F F P F S S

Loading changelog, this may take a while ...

Changes from 4.16.64

Created: 2026-06-04 13:21:18 +0000 UTC

Image Digest: sha256:5bc12d09997fd6b86a5d7ab2a5bf482474cb95b624c22a4d05607e3397302cac

Components

Kubernetes upgraded from 1.29.14 to 1.28.15
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202606051757-0 to 415.92.202606030318-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
BareMetalLoadBalancer (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ChunkSizeMiB (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIInstallAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIInstallAzure (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIInstallGCP (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIInstallIBMCloud (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIInstallNutanix (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIInstallOpenStack (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIInstallPowerVS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIInstallVSphere (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
DisableKubeletCloudCredentialProviders (0 tests)	Disabled (Changed)	Disabled (Changed)	Not Available (Changed)	Not Available (Changed)	Disabled (Changed)	Disabled (Changed)
EtcdBackendQuota (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
Example (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ExternalOIDC (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
HardwareSpeed (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ImagePolicy (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
InsightsConfig (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
InsightsOnDemandDataGather (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
KMSv1 (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MetricsCollectionProfiles (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NetworkDiagnosticsConfig (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NewOLM (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NodeDisruptionPolicy (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
PinnedImages (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
PlatformOperators (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ServiceAccountTokenNodeBinding (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ServiceAccountTokenNodeBindingValidation (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ServiceAccountTokenPodNodeInfo (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
StreamingCollectionEncodingToJSON (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
StreamingCollectionEncodingToProtobuf (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
TranslateStreamCloseWebsocketRequests (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
UpgradeStatus (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereDriverConfiguration (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereMultiVCenters (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VolumeGroupSnapshot (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AdminNetworkPolicy (0 tests)	Disabled (Changed)	Disabled (Changed)	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
MetricsServer (0 tests)	Disabled (Changed)	Disabled (Changed)	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
VSphereControlPlaneMachineSet (0 tests)	Disabled (Changed)	Disabled (Changed)	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
VSphereStaticIPs (0 tests)	Disabled (Changed)	Disabled (Changed)	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
GatewayAPI (0 tests)	Disabled	Disabled	Not Available (Changed)	Not Available (Changed)	Enabled (Changed)	Enabled (Changed)

New images

alibaba-cloud-csi-driver git 4fb95a28 sha256:32e65b585d92694ac2dccebdbf3c59c3beaa5af11d8f06fa402cc2394898b013
alibaba-disk-csi-driver-operator git 41b367ae sha256:5b6d809b79b77f6f0c6e899a1b3096211814ec48743d3e29dc006da9ed559990
cluster-platform-operators-manager git 37a0a919 sha256:a16bf8f681984defed18e60566d59e308cf0d556915c3a461c8887a0f0169726
ibm-vpc-node-label-updater git 9b13bd4c sha256:90c4a4a559fd93423a6192c6dd271783086108ae04f8ddc1a0ae6bd5faa49483
machine-os-content sha256:6aeffbd6fc962e75ebd894af16aa61c0ab23a8effd68115d6fd7c663ed214638

Removed images

aws-kms-encryption-provider
azure-kms-encryption-provider
containernetworking-plugins-microshift
multus-cni-microshift
operator-framework-tools

Rebuilt images without code change

rhel-coreos sha256:4a842f074a95ccbb643ec16e406b260625c6ddc69f0f6be8cd510690e7c84579
rhel-coreos-extensions sha256:9f23da6dc4291dc0a6e77b3cc575132ec167697261c291e7b202c5712c3e5f33

agent-installer-api-server

OCPBUGS-58633, OCPBUGS-58638: Bump glog to v1.2.5 in release-4.15 (#7905) #7905
OCPBUGS-54402: Bump go-jwt to 4.5.2 to fix CVE-30204 (#7487) #7487
OCPBUGS-46940: OCPBUGS-46185: Bump golang.org/x/net to 0.33.0 (#7199) #7199
OCPBUGS-22539: Bump otelhttp from 0.35.1 to 0.44.0 using replace approach (#6858) #6858
OCPBUGS-43022: Update go-jose to v2.6.3 to mitigate CVE-2024-28180 (#6894) #6894
OCPBUGS-42571: Libraries bump to mitigate CVE-2024-27289 (#6834) #6834
OCPBUGS-36577: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#6753) #6753
OCPBUGS-34641: Invalid Pull-Secret when using password which contains a colon character (#6381) #6381
OCPBUGS-31631: Deploy dual stack with IPv6 on top of bond/vlan fails (#6245) #6245
MGMT-17593: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#6217) #6217
17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6211) #6211
Revert “MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6194)” (#6208) #6194
MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6194) #6194
MGMT-17541: Replace broken golangci reference (#6191) #6191
OCPBUGS-30232: Handle skipping hostPrefix validation for IPv6 For non-OVN/SDN networkTypes, the hostPrefix validation is not required and it is skipped. This fixes a regression introduced in the fix for https://issues.redhat.com/browse/OCPBUGS-23069 in which IPv6 CIDRs were not using the correct default hostPrefix. In addition, all cases where the validation is used are now covered. (#6137) #6137
NO-ISSUE: replace postgres images as current one disappeared from quay (#6135) #6135
MGMT-16517: Add Env Var Deployment Type & Set ABI (#6016) #6016
MGMT-16980: Change the default value of ENABLE_SKIP_MCO_REBOOT to false (#6005) #6005
MGMT-16494: Move ip hint file creation to ignition in order to change it in IBI process (#5926) #5926
OCPBUGS-24428: Redact passwords logged in installConfigOverrides Ensure that any passwords included in installConfigOverrides are redacted in logs. (#5905) #5905
MGMT-16414: When trying to create cluster with s390x architecture, an error occurs that stops cluster creation (#5876) #5876
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-58643: Bump github.com/golang/glog pkg version to 1.2.4 (#1189) #1189
OCPBUGS-53714: Bump jwt to 4.5.2 in release-4.15 (#1092) #1092
Bump golang.org/x/net to 0.33.0 (#1011) #1011
OCPBUGS-43026: Pick up latest CVE changes by bumping service (#921) #921
OCPBUGS-42301: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#907) #907
OCPBUGS-36779: Reload host inventory on conflict (#891) #891
OCPBUGS-35894: Fix race to mark node Joined (#859) #859
MGMT-16843: Use hostnamectl to replace illegal hostname (#851) #851
MGMT-17593: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#833) #833
MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#827) #827
MGMT-17541: Replace broken golangci reference (#824) #824
MGMT-16843: Ensure valid hostname during install (#791) #791
OCPBUGS-25718: Do not remove uninitialized taints if vSphere (#785) #785
Full changelog

agent-installer-node-agent

run go mod tidy / vendor #1020
And 9 elided commits (e.g. from squash or rebase merges)
Full changelog

alibaba-cloud-controller-manager

OCPBUGS-23697: Add Snyk file to exclude vendor directory on scan #48
OCPBUGS-21984: Bump golang.org/x/net to v0.19.0 #41
Full changelog

alibaba-machine-controllers

[[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #57
OCPBUGS-24124: Updating ose-alibaba-machine-controllers-container image to be consistent with ART #47
Full changelog

apiserver-network-proxy

OCPBUGS-38065: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #60
Update golang Docker tag to v1.23.1 #58
OCPBUGS-31953: Bump golang.org/x/net to v0.23.0 #51
OCPBUGS-24165: Updating ose-apiserver-network-proxy-container image to be consistent with ART #44
Full changelog

aws-cloud-controller-manager

OCPBUGS-38577: Ensure that addresses are added in network device index order #92
OCPBUGS-31954: update for CVE-2023-45288 [release-4.15] #81
OCPBUGS-29079: Updates build-rpm.sh to set release to build time #76
OCPBUGS-29079: spec: add Provides: ose-aws-ecr-image-credential-provider #77
OCPBUGS-27486: Adds ecr-credential-plugin .spec #70
OCPBUGS-26060: bump go.opentelemetry.io #64
Full changelog

aws-cluster-api-controllers

OCPBUGS-78228: [release-4.15] hermetic 4.15 #592
OCPBUGS-61943: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #573
OCPBUGS-58668, OCPBUGS-58673: bump github.com/golang/glog to v1.2.5 #562
OCPBUGS-44294: [release-4.15] OSD-25934: Only tag NetworkInterfaces in RunInstances if IAM Allows It #532
OCPBUGS-30117: manifests: Add in CustomNoUpgrade #511
OCPBUGS-32114: UPSTREAM: <carry>: Fix instance PrivateDNSName when domain-name is set in dhcpOpts #508
OCPBUGS-31036: UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called #501
OCPBUGS-30595: fix e2e tests on release branches #504
Full changelog

aws-ebs-csi-driver

OCPBUGS-33043: UPSTREAM: 1919: Add reserved-volume-attachments #263
OCPBUGS-25824: UPSTREAM: 1877: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #253
OCPBUGS-25601: UPSTREAM: 1858: Bump otelhttp to fix CVE-2023-45142 #251
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-67913: Bumped logrus to 1.9.3 #492
OCPBUGS-33043: Explicitly reserve 1 attachment for the root disk #222
OCPBUGS-30621: remove legacy directory and duplicate Dockerfile.*.test files #201
OCPBUGS-30621: move test manifest to top-level directory #195
OCPBUGS-26195: Create RBAC objects first #93
OCPBUGS-25995: Add selinux #91
OCPBUGS-25355: setting TLSSecurityProfile with no minTLSVersion crashes controller #90
OCPBUGS-25161: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #82
OCPBUGS-25234: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #83
Full changelog

aws-machine-controllers

OCPBUGS-63141: client: re-use a single file for building the session instead of randomly named files #153
OCPBUGS-63141: revert: client: re-use a single file for building the session instead of randomly named files #150
OCPBUGS-63141: client: re-use a single file for building the session instead of randomly named files #143
OCPBUGS-47680: fix Associate*IpAddress flag on launch EC2 #122
Full changelog

aws-pod-identity-webhook

OCPBUGS-32886: Upgrade go-jose module to 2.6.3 #188
OCPBUGS-24163: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART #179
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-33127: Improvements to client timeouts to prevent hangs #118
OCPBUGS-33092: Bump otelgrpc #117
OCPBUGS-30970: Update acr-credential-provider.spec #115
OCPBUGS-30970: Adds acr-credential-provider spec file and build script #114
Full changelog

azure-cluster-api-controllers

OCPBUGS-78177: [release-4.15] update go mod dependency for konflux #365
OCPBUGS-36024: Update go-retryablehttp to v0.7.7 #311
OCPBUGS-29502: Bump helm to v3.14.4 #303
Full changelog

azure-disk-csi-driver

OCPBUGS-25768: UPSTREAM: 2132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #72
OCPBUGS-25236: OCPBUGS-23831: UPSTREAM: 2090: Bump OpenTelemetry libraries to fix CVEs #68
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-25355: setting TLSSecurityProfile with no minTLSVersion crashes controller #121
OCPBUGS-25161: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #114
OCPBUGS-25237: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #115
STOR-1402, STOR-1453: update libraries and specify TLS_MIN_VERSION #110
OCPBUGS-22560: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 #107
STOR-1276: Enable support for mounting volumes with SELinux context #93
OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #106
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #100
update readme #99
simplify workload identity feature enablement #92
update readme #94
OCPBUGS-19172: Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #98
OCPBUGS-16654: Revert revert “STOR-1065: Rework sidecar bindings to b… #88
OCPBUGS-16496: Bump library-go to remove dependency on goproxy #90
OCPBUGS-16783: Chore: Update OWNERS #89
Revert “STOR-1065: Rework sidecar bindings to bind common ClusterRoles” #87
STOR-1065: Rework sidecar bindings to bind common ClusterRoles #84
OCPBUGS-14824: Bump azure-disk-csi-driver-operator library-go #85
CCO-324: Unrevert “CCO-324: add support for workload identity” #83
Revert “CCO-324: add support for workload identity” #82
CCO-324: add support for workload identity #78
STOR-1168: Bump common libraries #81
OCPBUGS-12559: Bump golang.org/x/net@v0.9.0 #80
Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #79
OCPBUGS-8683: Add management workloads annotations #74
OCPBUGS-10842: Reorder static resources to create RBAC first #75
Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #73
STOR-873: Implement custom keys in Azure Disk CSI driver operator #68
OCPBUGS-7617: Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars #69
OCPBUGS-6658: Disable managed identity authentication #67
STOR-1019: Bump to k8s 1.26 libs for OCP 4.13 #66
STOR-947: support disabling default StorageClass via ClusterCSIDriver #63
STOR-1078: Add hostPaths necessary for SELinux mounts #64
Bug 2106736: Add multiplePVsSameID capability #65
Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #62
OCPBUGS-4347: set TLS cipher suites in Kube RBAC sidecars #61
OCPBUGS-3659: Don’t expose metrics port to whole network #60
OCPBUGS-1904: Only deploy VolumeSnapshotClass when CRD exists #56
Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #55
STOR-858: Bump github.com/openshift/* and k8s.io/* #53
Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #51
Bug 2095049: Only use credentials that are provided by the azure-inject-credential… #49
Bug 2089973: bump libs to k8s 1.24 for OCP 4.11 #48
Mark CSI StorageClass as the default one #47
Bug 2062152: Increase pod startup timeout in e2e tests #45
Bug 2073373: Sync cmdline arguments with upstream #46
Fix CSIDriver fsGroupPolicy #44
Bug 2043130: azure-disk: Add external-snapshotter permissions to patch snapshots #41
Bug 2038934: Bump(library-go): to get leader election changes #40
Bug 2029570: Add custom CA bundle support #38
Bug 2028484: CSI driver’s livenessprobe does not respect operator’s loglevel #37
Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #36
Add volume cloning tests #21
Use WithSecretHashAnnotationHook from library-go #34
Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #33
Bug 1992875: Use own cloud credentials #30
Bug 1993931: Storage operators use older kubernetes client #32
Bug 1948603: Re-enable expansion e2e tests #18
Bug 1992148: mount azurestackcloud.json to /etc/azure #29
Bug 1990146: some controllers missing livenessProbe #28
Bug 1948090: Deploy multiple replicas of CSI Controller Service #27
Adding support for Azure Stack Hub (ASH) #26
Use embed for static assets #25
Remove generated API #24
Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #23
Bug 1960732: update manifest and readme #19
Updating .ci-operator.yaml build_root_image from openshift/release #22
Bug 1969538: Include VolumeSnapshotClass by default #20
Bug 1947774: fix imagePullPolicy to ifNotPresent #16
Bug 1948603: Disable volume expansion e2e tests #15
Bug 1948603: Fix some failing tests #14
Bug 1948555: Set timeouts according to upstream #13
Bug 1947756: Add maxUnavailable to DaemonSet #12
Bug 1947767: Updates default SC to Premium SKU #11
Azure Disk: Add metrics scraping #9
Add “managed” annotation to CSIDriver #10
Add CSI certification test manifest #8
Include CSIDriver creation in Operator #7
Bumps Dockerfile to OCP 4.8 and go 1.16 #6
Cleanup: Remove serviceName from controller manifest #4
Initial code #1
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

azure-file-csi-driver

ART-13080: Regenerate go.mod to fix build failure #94
OCPBUGS-39444: bump mount-utils to treat ENODEV error as corrupted mount #78
OCPBUGS-33038: Rebase v1.29.5 for OCP 4.15 #65
OCPBUGS-25697: UPSTREAM: 1626: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #50
Full changelog

azure-file-csi-driver-operator

OCPBUGS-67918: Bump github.com/sirupsen/logrus to v1.9.3 #113
OCPBUGS-60544: add tag matching to Azure File storage class #110
OCPBUGS-33038: add token audience for Azure File #103
OCPBUGS-25355: setting TLSSecurityProfile with no minTLSVersion crashes controller #95
OCPBUGS-25161: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #89
OCPBUGS-25238: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #90
STOR-1402, STOR-1453: update libraries and specify TLS_MIN_VERSION #84
OCPBUGS-22562: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 #82
OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #81
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #75
update readme #70
simplify workload identity feature enablement #69
OCPBUGS-19170: Updating azure-file-csi-driver-operator images to be consistent with ART #74
STOR-1434: Restart controller Pods if metrics-serving-cert changed #68
OCPBUGS-16654: Revert revert “STOR-1065: Rework sidecar bindings to b… #64
OCPBUGS-16783: Chore: Update OWNERS #65
OCPBUGS-16498: Bump library-go to remove dependency on goproxy #66
Revert “STOR-1065: Rework sidecar bindings to bind common ClusterRoles” #63
STOR-1065: Rework sidecar bindings to bind common ClusterRoles #60
CCO-325: Unrevert “CCO-325: add support for workload identity” #62
STOR-989: Remove SC and manifest file for NFS backend #58
OCPBUGS-14824: Bump azure-file-csi-driver-operator library-go #61
Revert “CCO-325: add support for workload identity” #59
CCO-325: add support for workload identity #54
CCO-325: Mount serviceaccount token into csi-driver container #53
STOR-1168: Bump common libraries #57
OCPBUGS-12561: Bump golang.org/x/net@v0.9.0 #56
Updating azure-file-csi-driver-operator images to be consistent with ART #55
Updating azure-file-csi-driver-operator images to be consistent with ART #52
Updating azure-file-csi-driver-operator images to be consistent with ART #51
OCPBUGS-10842: Reorder static resources to create RBAC first #50
OCPBUGS-8683: Add management workloads annotations #49
Updating azure-file-csi-driver-operator images to be consistent with ART #48
OCPBUGS-6658: Disable managed identity authentication #47
STOR-1019: Bump to k8s 1.26 libs for OCP 4.13 #46
STOR-947: support disabling default StorageClass via ClusterCSIDriver #42
STOR-1078: Add hostPaths necessary for SELinux mounts #43
Bug 2106736: Add multiplePVsSameID capability #44
Updating azure-file-csi-driver-operator images to be consistent with ART #41
OCPBUGS-4347: set TLS cipher suites in Kube RBAC sidecars #40
STOR-858: Bump github.com/openshift/* and k8s.io/* #37
Updating azure-file-csi-driver-operator images to be consistent with ART #38
Bug 2080449: disable VHD disk feature #33
Updating azure-file-csi-driver-operator images to be consistent with ART #34
Bug 2099968: Only use credentials that are provided by the azure-inject-credentials container #32
Bug 2092502: Don’t ship a StorageClass backed by NFS by default #30
Bug 2089973: bump libs to k8s 1.24 for OCP 4.11 #27
Fix driver definition manifest: fsGroup is supported, snapshots are not #28
Updating azure-file-csi-driver-operator images to be consistent with ART #29
disable snapshots #26
Updating azure-file-csi-driver-operator images to be consistent with ART #25
Bug 2043130: azure-file: Add external-snapshotter permissions to patch snapshots #24
Bug 2042960: Remove UID, GID from StorageClass asset #23
Bug 2038934: Add custom CA bundle support #22
Bug 2036096: Add StorageClass for NFS backed #21
Bug 2036096: Disable snapshot testing for NFS backend #20
Bug 2028484: CSI driver’s livenessprobe does not respect operator’s loglevel #18
Updating azure-file-csi-driver-operator images to be consistent with ART #17
Bug 2019128: Temporarily disable snapshot tests + add manifest for NFS #15
Add test image for e2e jobs #14
Run make update-gofmt #13
Fetch metrics from correct upstream ports #12
Fix node ports in Azure File controller #11
Use different node ports to avoid conflicting with Azure Disk CSI driver #10
Revert “Remove unnecessary RBAC permissions” #9
Remove unnecessary RBAC permissions #8
Updating azure-file-csi-driver-operator images to be consistent with ART #7
Use WithSecretHashAnnotationHook from library-go #6
Update OWNERS #5
Add initial code #2
Add OWNERS #1
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

azure-machine-controllers

OCPBUGS-56657: Fix failure when attempting to modify immutable availabilitySet #150
OCPBUGS-53226: dynamically setting the amount of fault domains #134
CFE-1050: Added support of capacity reservation group #110
OCPBUGS-30215: Remove startupScript vmextension lookup #103
OCPBUGS-25510: bump x/crypto #100
OCPBUGS-29007: Don’t create availability set when using spot instances #95
OCPBUGS-27758: Improving performance of VMs created in Azure #93
Full changelog

azure-workload-identity-webhook

OCPBUGS-53794: github.com/golang-jwt/jwt/v4 v4.5.2 #34
OCPBUGS-32895: Upgrade go-jose module to 2.6.3 #17
OCPBUGS-22003: Upgrade golang/x/net for CVE-2023-39325 (4.15) #13
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-79036: Azure UPI ARM template: use storageAccountId #10418
OCPBUGS-76929: terraform/provider/google: Fixing GCP inconsistencies present with the service account creation #10316
OCPBUGS-42554: only allow a single network in failure domain topology #9060
OCPBUGS-62849: Release 4.15 bump terraform provider azurerm #10007
OCPBUGS-62410: Make swift containers removal not fatal for UPI. #9978
OCPBUGS-60497: update resolv.conf every time on bootstrap node #9885
OCPBUGS-39416: OpenStack: Install CI dependencies from rpm #9103
OCPBUGS-54353: aws/edge/byovpc: tag edge subnets with shared value #9612
OCPBUGS-54367: IBMCloud: Move to IBM TF openshift fork #9614
OCPBUGS-45961: Update upi references to api-internal #9298
OCPBUGS-50994: Bump terraform-provider-google version to v5.37.0 to fix consistent issues during cluster creation #9509
OCPBUGS-41815: Validate MTU for custom network #9294
OCPBUGS-28706: [azure] update tested x86 instance type on 4.15 #7966
OCPBUGS-47716: [release-4.15] Power VS: Create region-zone-sysType hierarchy #9340
OCPBUGS-44259: IBMCloud: Ignore failed VPC regions #9183
ARO-12457: Include bootstrap docker config file in go module #9260
OCPBUGS-45207: add chrony.conf file when additional NTP sources are configured #9251
CORS-3753: Allow mocking of the Azure client everywhere #9221
OCPBUGS-44035: IBMCloud: Handle pagination for subnets #9160
OCPBUGS-43760: azure: use filter when listing SKUs #9135
OCPBUGS-42139: add tested instance type for IBMCloud #9032
OCPBUGS-42335: Bump extract-machine-os timout to 20m #9051
OCPBUGS-42180: Add AWS r8g to arm tested instance types #9040
OCPBUGS-39288, OCPBUGS-42011: Openstack UPI - Reintroduce unique resource names #9047
OCPBUGS-38198: Remove timed context for gcp client #8824
OCPBUGS-29591: vsphere-fix convert if only provided name #8034
OCPBUGS-32179: Fix task for attaching IPv6 subnet to router. #8262
OCPBUGS-34721: fix usage of host and user CA bundle in the agent ignition #8512
OCPBUGS-36090: [release-4.15]: bump go-retryablehttp for CVE fix #8655
OCPBUGS-37064: Changed vsphere CPMS to not include fields controlled by failure domains. #8735
OCPBUGS-37182: ic: fix typo in warning message #8770
OCPBUGS-37067: update RHCOS 4.15 bootimage metadata to 415.92.202407091355-0 #8746
OCPBUGS-33354, OCPBUGS-33402: Use assisted-image-service for ignition editing #8635
: OCPBUGS-36400: PowerVS: add ibmcloud plugins #8687
OCPBUGS-36225: Make vSphere default ResourcePool formatting not contain double slash. #8664
OCPBUGS-35131, OCPBUGS-35141, OCPBUGS-35144: [CVE-2023-48795] Bump golang.org/x/crypto to v0.21.0 #8646
OCPBUGS-35359: GCP: Prevent cluster installation with mismatched worker assets and worker replicas #8581
OCPBUGS-35502: [release-4.15] azure: bump profile used for network #8607
OCPBUGS-35586: [release-4.15] bump github.com/containers/image for CVE fix #8621
OCPBUGS-31387: If host is offline or disconnected don’t check ver #8208
OCPBUGS-35355: baremetal: Don’t always enable provisioning-interface.service #8580
OCPBUGS-35032: [release-4.15] aws: terraform: add spot instance support for masters #8540
OCPBUGS-35059: images: change libvirt-installer base #8550
OCPBUGS-33672: add quota support to ca-west-1 #8412
OCPBUGS-33454: go.mod: bump aws-sdk-go for ca-west-1 support #8381
OCPBUGS-33205: Gcp bootstraping release 4.15 #8339
OCPBUGS-33542: images: do not force terraform-providers to be statically linked #8392
OCPBUGS-29929: GCP Destroy cleanup correct zones/records #8062
OCPBUGS-32383: sdk/aws: add ssh security group rule for compute #8282
OCPBUGS-32690: AWS: bump CCO for permission fix #8302
OCPBUGS-32264: always save serial logs if they were gathered #8274
OCPBUGS-30944: Don’t run libvirt validations in agent installer #8167
NO-ISSUE: test fix to support slightly different nmstate error messages #8285
OCPBUGS-32259: escape ‘%’ in proxy settings #8272
OCPBUGS-32355: Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8277
OCPBUGS-31335: openstack: Honour worker server group policy #8202
: OCPBUGS-31590: GCP: Skip populating Private/Public Zones within DNS manifest #8220
OCPBUGS-30922: coreos-installer iso kargs show broken on Agent ISO #8163
OCPBUGS-30822: Validate control plane replicas #8143
OCPBUGS-31274: IBMCloud: Restrict CIS and DNS Service lookup #8197
OCPBUGS-30605: upi: aws: fix typo in worker templates #8125
Bug OCPBUGS-31284: OpenStack: enable 30000:32767 nodePort IPv6 traffic #8199
OCPBUGS-31087: Fix vsi image missing #8186
OCPBUGS-30098: feat: add check for SNO bootstrap condition #8089
OCPBUGS-30601: update RHCOS 4.15 bootimage metadata to 415.92.202402201450-0 #8122
OCPBUGS-30854: Power VS: Fix wait_for_workspace #8159
OCPBUGS-29964: fix Azure API SKU calls timing out #8086
OCPBUGS-30792: Enable deploy by Service ID on PowerVS #8138
OCPBUGS-30577: Authn with platform-services-go-sdk for PowerVS #8118
OCPBUGS-30148: fix “OpenShiftSDN deprecated” error message #8094
OCPBUGS-30011: PowerVS: remove IBM-Cloud/bluemix-go/api/account/accountv2 in 4.15 #8076
OCPBUGS-29768: Power VS: Add sleep to allow workspace to configure PER #8052
Bug OCPBUGS-29726: OpenStack: Fix dualstack with external load-balancer #8050
OCPBUGS-29495: gcp: better error msg when service accnt missing #8024
Bug OCPBUGS-29458: OpenStack: fix controlPlanePort validation #8019
OCPBUGS-29236: Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. #7996
OCPBUGS-28841: PowerVS: Add dal12 region #7977
OCPBUGS-29955: PowerVS: Add debugging to ServiceInstanceNameToGUID #8065
OCPBUGS-29585: PowerVS: handle composite_instance #8032
OCPBUGS-29620: Power VS: Fix service instance list #8035
OCPBUGS-29523: Bump terraform-provider-ibm to v1.61.0 #8026
OCPBUGS-29436: PowerVS Fix next start search #8013
OCPBUGS-29442: update RHCOS 4.15 bootimage metadata to 415.92.202402130021-0 #8016
OCPBUGS-29219: GCP: Skip validation of public and private zones for terraform vars #7994
OCPBUGS-29201: Copy GCP manifests within MCO bootstrap to the correct location #7993
OCPBUGS-28822: aws-edge-zones preventing err before discovering #7973
OCPBUGS-29117: IBMCloud: Handle disk delete errors #7984
OCPBUGS-26036: ic: aws: add iam:TagInstanceProfile permission requirement #7866
OCPBUGS-28779: update tested Azure Arm64 instance type on 4.15 #7971
OCPBUGS-28546: [release-4.15] Bump containerd for vulnerability fix #7957
OCPBUGS-27346: Warn that FeatureSet is not supported #7922
OCPBUGS-27417: baremetal: gather all recently refactored services #7928
OCPBUGS-27380: set the –cluster-profile flag for openshift/api rendering #7955
OCPBUGS-27894: duplicate failure domains in CMPS #7951
OCPBUGS-27329: remove retired serial NCv2 from azure tested instance type list on x86 #7921
OCPBUGS-27850: PowerVS: COS region configurable #7948
OCPBUGS-27814: [release-4.15] CORS-2950: Remove openshift-sdn as an install-time option #7935
OCPBUGS-25251: Changed OKD/FCOS workaround to also support Agent-based Installer #7830
OCPBUGS-27299: Power VS: Add eu-de-1, eu-de-2, sao04, and wdc07 as supported zones #7913
OCPBUGS-26515: preserve category name when trying to find tag category #7885
OCPBUGS-27311: Fix depreciated typo #7912
OCPBUGS-26495: Fix typo in CloudCredential validation #7916
CORS-3166: GCP: Add load balancer info to cluster infra #7903
OCPBUGS-27188: Redact platform passwords in agent-gather output #7910
CORS-3168: build: only rebuild terraform providers if needed #7853
OCPBUGS-27148: baremetal: correct external_http_url for v6-only BMCs #7906
CORS-3166: GCP: Update DNSType within GCP PlatformStatus based on UserProvisionedDNS #7882
OCPBUGS-26495: Add cloud credential capability validation #7890
OCPBUGS-26511: Bump default channel to 4.15 #7883
OCPBUGS-26051: aws: validate instance arch #7868
OCPBUGS-25990: Fixes for the OpensStack UPI playbooks. #7863
OCPBUGS-24679: Modify the terraform variables to support Nutanix Failure Domains #7813
OCPBUGS-25463: IBMCloud: Set IBM TF visibility based on URLs #7844
OCPBUGS-25216: ic: azure: fix retrieving marketplace image #7829
OCPBUGS-25192: Revert “Merge pull request #7642 from AnnaZivkovic/azure_duplicate_im… #7827
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

baremetal-machine-controllers

OCPBUGS-78100: [release-4.15] fix vendor/ for hermetic migration #244
OCPBUGS-46641: Bump x/net to 0.33.0 #227
OCPBUGS-30876: Bump golang-protobuf version #214
OCPBUGS-28838: Extend metal3remediation aggregation role #210
Full changelog

baremetal-operator

OCPBUGS-53336: BMO can expose any secret via BMCEventSubscription CRD #408
OCPBUGS-38939: [OCP] Ability to disable agent power off after deployment #373
OCPBUGS-34682: PreprovisioningImage should not be created on poweroff #358
Full changelog

baremetal-runtimecfg

OCPBUGS-37704: Change mechanism of debug flag #325
OCPBUGS-36278: Fix handling of ELB Node IP detection #322
OCPBUGS-35543: Add support for OVN HostCidrs annotation #319
OCPBUGS-32024: Decrease log level when detecting node IP #304
OCPBUGS-29338: Ignore egress IP when selecting Node IP #299
OCPBUGS-24070: Updating ose-baremetal-runtimecfg-container image to be consistent with ART #289
OCPBUGS-26927: Add .snyk file to ignore vendor and test files #293
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-42726: Check cast result in adm prune deployments to prevent panic #1893
OCPBUGS-39426: Ignore pruning when deployment points to replicationcontroller #1865
OCPBUGS-36329: Set required-scc annotation to privileged for node debug pods #1818
OCPBUGS-35201: Bump joelanford/ignore to bump go-git to 5.11.0 #1798
OCPBUGS-32840: Bump go-jose indirect reference to 2.6.3 #1749
OCPBUGS-31879: Add OIDC specific certificate authority bundle flag #1730
OCPBUGS-31726: Remove some of newapp unit tests relying on external deprecated images #1726
OCPBUGS-30286: oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1698
OCPBUGS-30270: Introduce –issuer-url flag in oc login #1696
OCPBUGS-28204: Add RHEL9 and RHEL8 based oc as new targets in command extraction #1672
WRKLDS-1041: oc login: Built-in cred exec plugin implementation and wiring #1658
OCPBUGS-24695: Remove deprecated password defaulting in default config flag #1620
OCPBUGS-25016: Bump api to include the new CloudCredential cap #1623
Full changelog

cloud-credential-operator

OCPBUGS-60974: ccoctl: aws to use proper issuer url on subsequent runs #910
OCPBUGS-58678: github.com/golang/glog v1.2.5 #894
OCPBUGS-53417: github.com/golang/glog v1.2.4 #844
OCPBUGS-53818: update github.com/golang-jwt/jwt #840
OCPBUGS-51540: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #833
OCPBUGS-47068: golang.org/x/net v0.33.0 #806
OCPBUGS-45940: Add AWS region to aws-pod-identity-webhook #802
OCPBUGS-45008: Add retry to ccoctl gcp create functions #795
OCPBUGS-45003: github.com/golang-jwt/jwt/v4 v4.5.1 #784
OCPBUGS-43646: Only attempt timed token credentials on supported platforms. #774
OCPBUGS-43338: Update github.com/sirupsen/logrus v1.9.3 #768
OCPBUGS-41235: List secrets in batches to avoid api timeout #754
OCPBUGS-38377: Update google.golang.org/grpc v1.65.0 #749
OCPBUGS-37461: Set required-scc for openshift workloads #736
OCPBUGS-37277: Update to cloud.google.com/go/storage v1.43.0 #729
OCPBUGS-37288: GCP passthrough permissions check to ignore problematic permissions. #730
OCPBUGS-37419: SNYK ignore go-client misreporting #738
OCPBUGS-37061: Update to azidentity v1.7.0 #728
OCPBUGS-36030: IBM/go-sdk-core update to v5.17.4 #720
OCPBUGS-36291: AWS STS should not error when a credentailsRequest does not have awsSTSIAMRoleARN #709
OCPBUGS-32900: Upgrade go-jose module to 2.6.3 #696
OCPBUGS-31924: aws: remove non-existent permission #691
OCPBUGS-30412: gcp actuator update check to consider custom roles #686
OCPBUGS-29155: Fix the ClusterOperator watch of the status controller #675
OCPBUGS-29113: ccoctl - use proxy when validating CloudFront URL #674
OCPBUGS-27910: Resolve all outstanding snyk vulnerabilities #649
OCPBUGS-27901: Use cached clients to avoid client side throttling #660
OCPBUGS-27919: Report manualpodidentity mode in metrics when using Azure Workload Identity #661
OCPBUGS-27117: Write manifests when AWS IAM roles already exist. #653
OCPBUGS-26510: Use live client for metrics #646
Full changelog

cloud-network-config-controller

OCPBUGS-33780: Avoid panic when looking up attachedOutboundRule.ID in azure #145
OCPBUGS-31754: Avoid nil pointer panic while assigning private IP on Azure #137
Full changelog

cluster-authentication-operator

OCPBUGS-34795: set required-scc for openshift workloads #675
NO-JIRA: _output - remove dir #652
OCPBUGS-27225: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #647
OCPBUGS-24081: Updating ose-cluster-authentication-operator-container image to be consistent with ART #643
Full changelog

cluster-autoscaler

OCPBUGS-45149: [release-4.15] VPA: Update OWNERS file #326
OCPBUGS-40930: update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 #315
OCPBUGS-33885: fix: scale up broken for providers not implementing NodeGroup.GetOptions() #301
OCPBUGS-31464: add check for taint.value == nil #293
OCPBUGS-27750: Fix unstructured taint parsing in Cluster API provider #282
OCPBUGS-23576: Add Snyk file to exclude vendor directory on scan #275
OCPBUGS-24066: Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART #270
Full changelog

cluster-autoscaler-operator

OCPBUGS-41798: set required-scc for openshift workloads #332
OCPBUGS-31947: Update x/net to v0.24.0 #319
OCPBUGS-23706: Add Snyk file to exclude vendor directory on scan #307
Full changelog

cluster-baremetal-operator

OCPBUGS-77448: Bump github.com/go-errors/errors to v1.5.1 #563
OCPBUGS-44046: SCC-pinning for metal3-baremetal-operator #454
[[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #443
OCPBUGS-31948: bump x/net to 0.23.0 #437
OCPBUGS-29787: Update the leader election durations to be tolerant #405
OCPBUGS-29153: manifests/0000_31_cluster-baremetal-operator_06_deployment: Enable leader election #402
Full changelog

cluster-bootstrap

OCPBUGS-24147: Updating ose-cluster-bootstrap-container image to be consistent with ART #101
Full changelog

cluster-capi-controllers

OCPBUGS-30117: manifests: Add in CustomNoUpgrade #206
OCPBUGS-33200: Bump protobuf to v1.33.0 #204
OCPBUGS-30595: fix e2e tests on release branches #201
OCPBUGS-29515: openshift: generate separate manifest for core CAPI CRDs #198
OCPBUGS-24311: Updating ose-cluster-api-container image to be consistent with ART #188
Full changelog

cluster-capi-operator

NO-JIRA: Allow sustaining engineering to self serve dependency updates #561
OCPBUGS-37849: fix: sort CredentialsRequest manifests after namespace #193
OCPBUGS-30117: manifests-gen: also add CustomNoUpgrade annotation value #166
OCPBUGS-30118: create openshift-cluster-api namespace in CustomNoUpgrade #167
OCPBUGS-25505: UPSTREAM: <carry>: bump x/crypto #165
OCPBUGS-29515: manifests-gen: store core capi crds also in their own manifest #160
OCPBUGS-28754: Start operator controllers only on supported platforms, add unsupported controller #158
OCPBUGS-26413, OCPCLOUD-1726: GCP Credential Req. manifest for CAPI to use new API field #155
OCPBUGS-24150: Updating ose-cluster-capi-operator-container image to be consistent with ART #147
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63169: ccm: disable unused secure-serving port and webhook #424
OCPBUGS-36821: Increase GCP Concurrent Service Syncs to 10 #359
OCPBUGS-33547: update azure and ash tolerations on node manager #343
Bug OCPBUGS-32246: Allow to patch events in OpenStack RBAC #339
OCPBUGS-25751: Add Snyk file to exclude vendor directory on scan #314
OCPBUGS-26480, OCPCLOUD-1724: GCP Credentials req. manifest of CCMO to use new API field #320
OCPBUGS-26210: Adds CloudConfigTransformer for Azure #319
Full changelog

cluster-config-api

CFE-1047: Added new field for capacityReservationGroupID in AzureMachineProviderSpec #1925
OCPBUGS-36208: Ingress - add connect timeout to tuning options #1937
OCPBUGS-35214: [Release 4-15] Add transit switch config to 4.15 #1872
OCPBUGS-28928: Add UnservableInFutureVersions route status condition type #1751
OCPBUGS-29370: Update AWSCSIDriverConfigSpec fields validation to accept all current AWS partitions #1767
OCPBUGS-29435: allow multiple audiences to be configured for kube-apiserver #1772
OCPBUGS-29074: Move network.config conditions to GA #1756
NP-905: [release-4.15] Promote Live Migration to GA #1749
OCPBUGS-28902: Allow modified IPv6 address as CPIC name #1750
OCPBUGS-27380: add separate authentication config manifest for hypershift #1743
OCPBUGS-27380: respect the cluster profile in rendering #1735
OCPBUGS-27186: CNO IPsec API #1719
Add generated featuregate files inertly to payloads #1723
OCPBUGS-26441: disable psa #1717
CORS-3029: Add Cloud LB IPs to GCP PlatformStatus of Infrastructure CR #1705
No-Jira: [release-4.15] Add payload manifests dir #1702
OCPBUGS-25075: Generate Tech Preview version of ControllerConfig CRD #1701
Full changelog

cluster-config-operator

OCPBUGS-36151: Set required-scc for openshift workloads #420
OCPBUGS-26542: remove duplicate manifests in image #395
OCPBUGS-28622: Add required PSa labels #402
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-45839: relax validation on delete and if failureDomains not configured #336
[[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #326
OCPBUGS-24632: Prevent rollout due to irrelevant path artifacts #317
CFE-1087: API Bump for capacity Reservation #318
OCPBUGS-34971: Add unreadyNodeGracePeriod for allowing brief node hiccups #299
OCPBUGS-35496: Wait for ControlPlaneMachineSet to be created when waiting for it to be updated #308
OCPBUGS-35255: Improved debugging of API listing errors #301
[Release 4.15] OCPBUGS-32414: Fix ExportFailureDomain to handle empty platform spec #290
[Release 4.15] OCPBUGS-32357: Modified webhook to allow templates by name instead of just by path. #289
OCPBUGS-29419: Never delete a Machine when there’s a single Machine in an index #280
OCPBUGS-29236: Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. #279
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-36377: Set required-scc for openshift workloads #211
OCPBUGS-31599: create suitable role and roleBinding for csi-snapshot-webhook #203
OCPBUGS-25240: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #180
Full changelog

cluster-dns-operator

OCPBUGS-52499: [release-4.15] Add runbook_url for CoreDNSErrorsHigh #432
OCPBUGS-32093: Add RBAC related to featuregates to fix hypershift upgrade #407
OCPBUGS-20024: Enable topology-aware hints iff nodes in >=2 zones #399
OCPBUGS-24082: Updating ose-cluster-dns-operator-container image to be consistent with ART #396
Full changelog

cluster-etcd-operator

OCPBUGS-67931: Update logrus to 1.9.3 to address CVE-2025-65637 #1547
OCPBUGS-53506: fix CVE-2025-30204 #1404
OCPBUGS-33564: return errors in wait-for-ceo #1261
OCPBUGS-32952: remove etcd-health-probe log #1257
OCPBUGS-31942: update golang x net #1253
OCPBUGS-31865: bump(library-go)=release-4.15 #1220
OCPBUGS-30915: CEO aliveness check should only detect deadlocks #1225
OCPBUGS-30042: fix condition name type #1212
OCPBUGS-28628: fix panic in health check timeouts #1191
OCPBUGS-29717: [4.15] Replace nodelister with master nodelister everywhere #1206
OCPBUGS-24087: Updating cluster-etcd-operator-container image to be consistent with ART #1169
Full changelog

cluster-image-registry-operator

OCPBUGS-67932: Bump logrus to 1.9.1 #1289
OCPBUGS-53866: bump github.com/golang-jwt/jwt #1220
OCPBUGS-51596: bump golang.org/x/oauth2 #1211
OCPBUGS-51264: ensure that storage names don’t end in dashes #1183
OCPBUGS-43918: fix proxy config and leader election test flakes #1150
OCPBUGS-42930: Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #1136
OCPBUGS-43656: pkg/storage/azure: also check for auth failure error code on deletion #1146
OCPBUGS-42934: azureclient: stop validating credentials when creating the client #1135
OCPBUGS-39099: Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth #1111
OCPBUGS-38895: pkg/resource: invoke update-ca-trust extract with –output #1105
OCPBUGS-36325: Set required-scc for openshift workloads #1067
OCPBUGS-36036: go.*,vendor: bump go-retryablehttp #1068
OCPBUGS-34571: azure-path-fix: get client secret from k8s secret #1049
OCPBUGS-34539: pkg/storage/s3: use force path style in favour of virtual hosted style config #1048
OCPBUGS-33208: azurepathfix: check if platform status is nil before accessing it #1031
OCPBUGS-32396: azure-path-fix: support auth via account key (without clientID) #1022
OCPBUGS-31641: bump aws-sdk-go from v1.44 to v1.50 #1014
OCPBUGS-29983: cmd/move-blobs: log and exit 1 on error instead of panic #1009
OCPBUGS-29638: azurepathfix: fix stack hub, government and workload identity setup #1004
OCPBUGS-29525: move azure storage blobs from docker back into /docker #1000
OCPBUGS-28830: pkg/storage/s3: enable bucket key on encryption settings #994
OCPBUGS-26936: MULTIARCH-4074: PowerVS: update supported regions #988
OCPBUGS-26063: IBMCloud - Add support for endpoint overrides #984
OCPBUGS-25460: add private endpoint permissions to Azure credentials request #978
OCPBUGS-24684: Revert “Merge pull request #965 from jstuever/TRT-1368” #972
Full changelog

cluster-ingress-operator

OCPBUGS-49392: Block Upgrades in release 4.15 for CA-Signed Certs Using SHA1 #1172
OCPBUGS-42480: Limit SHA-1 check to the leaf cert in default cert chain #1154
OCPBUGS-41635: Refine logging for accurate infra CR status updates #1141
OCPBUGS-36466: Allow operator to update Route spec.subdomain #1100
OCPBUGS-36208: Implement connect timeout tuning option #1097
OCPBUGS-36279: Add Regexp Anchor to TestAll #1096
OCPBUGS-28928: Prevent upgrades for SHA1 default cert and SHA1 route certs #1014
OCPBUGS-35028: internalServiceChanged: Fix target port logic #1081
OCPBUGS-34887: TestHostNetworkPortBinding: Delete t.Parallel() #1075
OCPBUGS-34252: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1058
CORS-3169: Add Ingress LB IPs to Infra CR and set DNS unmanaged when BYO DNS is enabled #1022
OCPBUGS-26544: Replace GCP role with explicit permissions #1015
OCPBUGS-24167: Updating ose-cluster-ingress-operator-container image to be consistent with ART #1002
OCPBUGS-25227: annotate credentials request manifests #1005
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-67937: CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-rhel9-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.15.z] #2044
OCPBUGS-50661: Increase waitForFallbackDegradedConditionTimeout #1806
OCPBUGS-37566: add disabled syncer as reason to CFE for PSA #1716
OCPBUGS-35832: add SNO control plane high cpu usage alert #1706
OCPBUGS-29361: operator: stop removing kube-apiserver-slos asset #1643
OCPBUGS-34492: Create one-shot migrations for the flowcontrol group. #1692
OCPBUGS-33697: add a controller that reconciles SCCs’ volumes #1679
OCPBUGS-33277: Fix incorrect name for hostmount-anyuid SCC ClusterRole #1672
OCPBUGS-31807: Use RotatedSigningCASecret in update only mode #1662
OCPBUGS-30304: cert rotation: Bump library-go to latest master #1653
OCPBUGS-29775: webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1647
OCPBUGS-30180: add provider name to cluster_infrastructure_provider when external platform #1639
OCPBUGS-28882: Add sno section to alert description #1636
OCPBUGS-27491: webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1628
OCPBUGS-24098: Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART #1589
OCPBUGS-18761: revert dev cert rotation in 4.15 #1598
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-23711: Add Snyk file to exclude vendor directory on scan #34
OCPBUGS-24085: Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART #31
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-67987: CVE-2025-65637 openshift4/ose-kube-proxy-rhel9: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.15.z] #910
OCPBUGS-31807: use RotatedSigningCASecret and RotatedSelfSignedCertKeySecret only in update mode #801
OCPBUGS-31865: bump(library-go)=release-4.15 #797
OCPBUGS-27225: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #790
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #625
OCPBUGS-31865: bump(library-go)=release-4.15 #537
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-67942: Bump github.com/sirupsen/logrus to v1.9.1 #145
OCPBUGS-36322: Set required-scc for openshift workloads #112
OCPBUGS-24156: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART #100
Full changelog

cluster-machine-approver

OCPBUGS-46034: Ensure trailing dots on DNS names do not block serving cert auth #258
OCPBUGS-46034: Client internal DNS checks should ignore trailing dot #252
OCPBUGS-44705: Client internal DNS checks should be case insensitive #245
OCPBUGS-27758: Increase concurrent reconciles to 10 #226
Full changelog

cluster-monitoring-operator

OCPBUGS-66047: test: remove image registry e2e tests #2757
OCPBUGS-46570: Add new metrics for OpenShift logging telemetry #2541
OCPBUGS-44006: fix(monitoring-plugin): disable emitting nginx version on error pages #2519
OCPBUGS-43876: Add runbook url for TelemeterClientFail… #2509
OCPBUGS-42586: Exclude windows nodes from kubelet servicemonitor #2487
OCPBUGS-41913: filter alerts sent to Telemeter #2472
OCPBUGS-39172: Backport #2441 for 4.15 #2448
OCPBUGS-37608: set required-scc for openshift workloads #2420
OCPBUGS-36563: add runbook_url annotations #2406
OCPBUGS-37194: Making sure proxy settings are correctly forwarded in the generated remote write configs #2413
OCPBUGS-36312: inject trusted CA bundle into UWM Alertmanager #2400
OCPBUGS-34596: Ipsec state backport #2384
OCPBUGS-33512: fix Thanos ruler alert generator url #2343
OCPBUGS-32055: backport ols metric allowlist to 4.15 #2313
OCPBUGS-28769: fix generation of telemeter token hash #2303
OCPBUGS-28703: rollout metrics-server on cert rotations #2249
OCPBUGS-25322: go.mod: bump prometheus-operator to v0.70.0 #2201
OCPBUGS-25309: additionalArgs: list items must have named fields #2197
OCPBUGS-24149: Updating cluster-monitoring-operator-container image to be consistent with ART #2170
Full changelog

cluster-network-operator

OCPBUGS-84183: fix(hypershift): use net.JoinHostPort for URL construction #2995
OCPBUGS-62980: Update CNO reviewers/approvers #2817
OCPBUGS-56649: Fix live migration with feature migration configured explicitly #2715
OCPBUGS-36688, OCPBUGS-43099: Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods #2658
OCPBUGS-53282: Not update status.migration of the network.config CR to empty #2669
[Release 4.15] OCPBUGS-51208: Use applyconfigurations for updating network.oprerator status #2653
OCPBUGS-47633: Prevent live migration process from flapping between step-2 and step-3 #2609
OCPBUGS-45890: Pass transit_switch_subnet options in ovnkube-node pod #2587
OCPBUGS-43716: Skip including default crypto policies to avoid authby issue #2599
OCPBUGS-46149: Remove ip xfrm state when IPsec is disabled #2596
OCPBUGS-43605: OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration #2539
OCPBUGS-44973, SDN-5436: Provide support for user owned IPsec machine configs #2576
OCPBUGS-42753: Set mount propagation to HostToContainer for /var/lib/kubelet #2520
OCPBUGS-42865: Add configurable subnets while running hybrid-overlay-node binary #2523
OCPBUGS-43268: Update network operator status for IPsec #2530
OCPBUGS-43099: Configure narrowing=yes for IPsec connections #2529
OCPBUGS-42020: HyperShift: do not use antiaffinity on single replica control planes #2504
OCPBUGS-41947: Add proxy env vars to onvkube-node #2503
OCPBUGS-31447: Tighten the permissions on whereabouts.conf #2324
NP-1064, OCPBUGS-39336: Remove managed cluster checking for live migration #2485
OCPBUGS-34613, OCPBUGS-34726, OCPBUGS-34727: Live migration backports #2393
OCPBUGS-37962: Fix IC distributed control plane alerts #2459
OCPBUGS-35837: Propogate hypershift control plane priority class override to multus and preserve container resource requests #2420
OCPBUGS-37205: Check every MachineConfigPool for IPsec plugin existence #2439
OCPBUGS-34809: Ensure that the node-identity webhook address contains colons for IPv6 #2396
OCPBUGS-36347: Create the configmap mtu if not found #2426
OCPBUGS-36499: [release-4.15] Bump Openshift API and backport configurable subnet knobs (transit / join / masquerade) #2375
OCPBUGS-36367: update whereabouts crd #2427
OCPBUGS-32989: Add conditions for ignored-namespaces #2379
OCPBUGS-29739: Run dhcp-daemon pods as system-node-critical priority #2283
OCPBUGS-34596: Add ipsec state metric #2389
OCPBUGS-32515: Fix wait logic for IPsec certificate signing request #2348
OCPBUGS-29092: Add probes to node-network-identity #2253
OCPBUGS-29654: Fully disable network-node-identity on ROKS #2314
OCPBUGS-30927: ensure local networking deployments within hypershift use the client side load balancer to be resilient to control plane node failures #2310
OCPBUGS-30615: Fix managed cluster detection on ARO #2304
OCPBUGS-29090: network-node-identity mounts secrets with mode 0640 #2251
OCPBUGS-29390: ipsec: fix openssl typo #2272
OCPBUGS-29522: Not set CNO to degraded if API server returns conflict error #2275
OCPBUGS-29654: [release-4.15] Disable network-node-identity on ROKS #2278
OCPBUGS-29299: Update ingressconfig_controller to use field Manager #2265
OCPBUGS-28902: Fix CloudPrivateIPConfig CRD in common #2263
OCPBUGS-29082, OCPBUGS-29150: Remove libreswan rpm existence checks #2255
OCPBUGS-28778: add env var in whereabouts-reconciler daemonset #2242
OCPBUGS-27421: Only reconcile on Node updates with Label changes #2212
OCPBUGS-27199: Remove egressip write permissions from ovn-kubernetes-node #2203
OCPBUGS-27174: network node identity: tolarate all taints #2202
NP-905, OCPBUGS-28902: Bump openshift API #2247
OCPBUGS-28904: [release-4.15] Restrict live migration to standalone managed clusters #2243
NO-JIRA: add kyrtapz as reviewer and approver for release 4.15 #2227
OCPBUGS-28214: Not update migration conditions when any MCP is updating #2223
OCPBUGS-27777: Deploy CNO IPsec MC even if user already have one #2215
OCPBUGS-25652: fix whereabouts conformance test failures #2168
OCPBUGS-27748: [release-4.15] Add ConfigMap mount to the whereabouts-reconciler #2214
OCPBUGS-27198: [release-4.15] Update ovn-k managed control-plane RBAC #2204
OCPBUGS-27286: Use specific permissions for CNCC in GCP #2190
OCPBUGS-27001: Keep the live migration annotation consistant with the enhancement doc #2194
OCPBUGS-27186: Ns ipsec 4.15 #2200
OCPBUGS-25864: HyperShift, network-node-identity: Check the deployment in the management cluster #2180
OCPBUGS-24036: remove all managed fields used by old manager #2167
OCPBUGS-25312, OCPBUGS-25921: Avoid removal of ipsec-host daemonset when node is NotReady #2181
OCPBUGS-24148: Updating cluster-network-operator-container image to be consistent with ART #2133
OCPBUGS-22710: Set enable-multi-external-gateway flag in ovnkube.conf #2158
Full changelog

cluster-node-tuning-operator

e2e:performance: decode to valid kubeletconfig object (#1275) #1275
Fix context deadlines in ExecCommandOnPod() (#1265) #1265
OCPBUGS-44275: Drop sched_migration_cost_ns setting (#1207) #1207
OCPBUGS-44283: right-hand-side profile_dirs take precedence (#1208) #1208
OCPBUGS-42284: Add cluster-wide proxy env file (#1171) #1171
TuneD prior to kubelet in one-shot mode (#1125) #1125
set required-scc for openshift workloads (#1117) #1117
OCPBUGS-36870: Remove tuned/rendered object (#1110) #1110
OCPBUGS-36355: Backport fix for OCPBUGS-30647 (#1095) #1095
OCPBUGS-33929: Negative net interface name does not reduce queues (#1066) #1066
Add a ‘.snyk’ to silence static code analysis warnings (#1001) #1001
fix extra-reboot on upgrade with paused mcp worker (#1049) #1049
fix rendering extra ctrcfgs (#975) #975
OCPBUGS-31694: E2E: Workload hints test cases fixes (#1012) (#1043) #1012
Reduce number of reboots in offline tests (#1014) #1014
Systemd processes not being moved to cpuset/systemd.slice fix (#1016) #1016
Scheduler plugin: ignore IRQs (#983) #983
e2e: when crun is enabled by default skip checking runc config (#1013) #1013
OCPBUGS-30507: Add performance real time tuned template (#984) #984
Report duplicate priority only for multiple matching profiles (#965) #965
hack: fix backport of render-sync.sh (#996) #996
OCPBUGS-29752: [release-4.15][manual] backport performance profile owner reference ehnancements (#963) #963
Render: Add MCSelector to missing default MCPs (#959) #959
Add support to inject owner-ref argument to render command (#966) #966
OCPBUGS-29376: Mixed CPUs e2e tests (#952) #952
OCPBUGS-27227: irqbalance: set banned cpus list to ‘0’ (#953) #953
OCPBUGS-29396: Labels for e2e testing (#949) #949
OCPBUGS-29376: e2e: cgroups: introduce cgroup package (#942) #942
makefile: add target to trigger mixedcpus e2e test (#941) #941
OCPBUGS-27948: Tuned rendering and MCP detection improvements (#928) #928
OCPBUGS-25982: E2E: Add tests for Dynamic ovs pinning (#904) #904
rps: fail silently when rps application failed (#897) #897
OCPBUGS-25596: Make MC names deterministic (#888) #888
OCPBUGS-25552: rps: fix mask update for SR-IOV devices (#886) #886
OCPBUGS-24638: Do not set default RPS sysctl twice (#869) #869
Full changelog

cluster-olm-operator

OCPBUGS-86345: Update grpc-go to v1.64.1-sec.1 to fix CVE-2026-33186 #208
OCPBUGS-25399: [release-4.15] NO-ISSUE: Bump k8s.io/apiextensions-apiserver #40
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-67946: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.15] #655
OCPBUGS-36150: Set required-scc for openshift workloads #581
OCPBUGS-27225: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #567
OCPBUGS-24145: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART #560
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-48832: Add new team members to the OWNERS file #379
OCPBUGS-35922: lots of churn during image registry managed/removed transition #358
OCPBUGS-35869: nil pointer reference in ocm-operator #357
OCPBUGS-36152: Set required-scc for openshift workloads #361
OCPBUGS-31708: Update opentelemetry dependency 415 #342
OCPBUGS-25985: Disable deployer-controller when deploymentconfig is disabled #322
OCPBUGS-24086: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART #319
OCPBUGS-28946: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #327
Full changelog

cluster-samples-operator

OCPBUGS-63517: references to github.com/sclorg/django-ex.git now also refer to the branch #660
OCPBUGS-55475: Adding mutex to func createSamples on handler.go #634
OCPBUGS-54481: add rhdmalone to owners #623
OCPBUGS-49369: add shannon and aroyoredhat as owners #597
OCPBUGS-37464: Set required-scc for openshift workloads #548
OCPBUGS-38157: add mfrancisc and metlos as owners add owners 4.15 #550
OCPBUGS-22034: bump K8s version to 29.2 #538
OCPBUGS-18857: Updating ose-cluster-samples-operator-container image to be consistent with ART #523
Full changelog

cluster-storage-operator

OCPBUGS-67955: bump github.com/sirupsen/logrus to v1.9.3 #654
OCPBUGS-36374: Set required-scc for openshift workloads #484
OCPBUGS-33466: Fix problem-detector proxy setting #471
OCPBUGS-29370: Update AWSCSIDriverConfigSpec fields validation to accept all curren #461
OCPBUGS-28817: Allow vSphere CSI driver to be disabled #446
OCPBUGS-27017: replace instanceAdmin role with specific compute permissions #439
OCPBUGS-25241: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #433
Full changelog

cluster-update-keys

OCPBUGS-43626: keys: Update Red Hat keys to use SHA256 signatures #65
Full changelog

cluster-version-operator

OCPBUGS-50591: Set openshift.io/required-scc: privileged annotation in version pods #1152
OCPBUGS-45330: deps: bump golang.org/x/net to 0.31.0 #1119
OCPBUGS-44328: Fix desired before sync_worker’s work is initialized #1104
OCPBUGS-36817: Set required-scc for openshift workloads #1068
OCPBUGS-33984: Add admin-gate for OCP 4.16 #1049
OCPBUGS-27359: CO health: only track current in-progress upgrade start #1023
OCPBUGS-26607: clusterOperatorBuilder: Reconcile metadata on COs #1017
OCPBUGS-25949: pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls #1013
OCPBUGS-25664: pkg/cvo/sync_worker: Verification-failure details for unforced updates too #1007
OCPBUGS-25690: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream #1008
Full changelog

console

NO-JIRA: enable multi-architecture yarn builds #16425
OCPBUGS-83298: [release-4.15] openshift4/ose-console: Axios: Remote Code Execution via Prototype Pollution escalation #16302
OCPBUGS-76575: Bump axios #16033
CONSOLE-5011: migrate to yarn berry #16081
NO-JIRA: Bump builder image to v29 #15992
OCPBUGS-74443: Bump lodash to latest #15970
OCPBUGS-69767: Disallowed Pipelines-plugin Pipelines navigation section #15864
OCPBUGS-65822: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15749
OCPBUGS-65601: /auth/error?error=missing_state&error_type=auth is showing blank page #15727
OCPBUGS-44159: bump dompurify to latest #15592
OCPBUGS-60672: Secret key with binary file changes when edited via Console #15422
OCPBUGS-59997: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15359
OCPBUGS-59564: Add flags in console static plugin for all the components of this epic #15306
OCPBUGS-60029: fix bug where / in console.tab/horizontalNav href brea… #15353
OCPBUGS-57521: Debug pod logs are not accessible when debugging a node via OpenShift Console #15181
OCPBUGS-58223: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15221
OCPBUGS-57097: Add all files to vendor regardless of gitignore #15134
OCPBUGS-45257: Enabling topology e2e tests on CI #14721
OCPBUGS-55733: fix bug where operator appears twice #15021
OCPBUGS-55174: Add missing pipelines plugin name to known plugins #14982
OCPBUGS-54673: Added token to proxy header #14943
OCPBUGS-54252: Update the monitoring topic used by the console team #14904
OCPBUGS-53138: fix run time error when no completed version exists #14879
OCPBUGS-53055: Show Observe section without PROMETHEUS and MONITORING flags #14867
OCPBUGS-52344: fix alert rule link #14828
OCPBUGS-51332: Do not pass CSV name to operand list page when an exen… #14800
OCPBUGS-49849: include external labels so silenced alerts not displayed in notifications #14718
OCPBUGS-48593: ReRun of Resolver based PipelineRuns fails from UI #14689
OCPBUGS-48592: ImagePullSecret getting duplicated when editing DeploymentConfig in Form View #14688
OCPBUGS-48048: Update vendor imports to include all PatternFly components #14662
OCPBUGS-47646: fix table combination #14649
OCPBUGS-46430: Plugins that use very old PF4 dropdown or menu components with grouped items have bullets and padding that needs to be removed. #14626
OCPBUGS-45950: Unable to remove finally tasks in pipeline builder mode #14606
OCPBUGS-46389: use TaskRuns results.tekton.dev/record annotation to get the logs #14622
OCPBUGS-45248: Remove ClusterTask dependency in console from Pipelines 1.17 #14564
OCPBUGS-44979: Don’t request user settings configmap if no user has been loaded. #14534
OCPBUGS-37397: RWOP accessMode is not available on OpenShift console UI #14078
OCPBUGS-44998: Add IBM Block Storage CSI driver support for RWX #14536
OCPBUGS-44738: Add flag to hide the pipelines-plugin pipeline builder extensions #14513
OCPBUGS-44355: A value submitted in From view is wrapped with single quotation after switching to Yaml view. #14476
OCPBUGS-42355: Fix TypeError: Cannot read properties of null (reading ‘metadata’) in Topology view #14319
OCPBUGS-43414: Console crashes when ssh is selected in add secret for starting a pipeline run #14401
OCPBUGS-36559: Increase login flow state paramater length/entropy #14422
OCPBUGS-37202: Bump github.com/cloudevents/sdk-go/v2 to 2.15.2 #14073
OCPBUGS-42470: List of default Camel K event sources disappears when adding a custom event source #14331
OCPBUGS-42471: Need to allow blank for Project/namespace when setting SA Subject in ‘Project access tab’ #14332
OCPBUGS-33283: Adjust NAD name to “network-xxx-xxx” when creating #14020
OCPBUGS-42611: Topology screen crashes when completed pod is selected #14353
OCPBUGS-42648: Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated #14358
OCPBUGS-38764: Fix “Auto deploy when new image is available” becomes unchecked when editing a deployment from web console #14177
OCPBUGS-41991: Values entered into the Instantiate Template form are automatically cleared #14294
OCPBUGS-42384: Fix updating the “Until” field on the Silence > Edit page #14322
OCPBUGS-39343: The filepath including leading slash makes error during parsing devfile using Gitlab #14227
OCPBUGS-42144: Use vCenterCluster value from CM as primary resource #14307
OCPBUGS-38537: Include PatternFly-4 chart styles so they are available for dynamic plugins that still use PF4 react-charts #14158
OCPBUGS-38108: Revert - terminal: use username if uid is not present #14114
OCPBUGS-32793: Fix that telemetry events didn’t incl. an userId anymore #13792
OCPBUGS-38970: DeploymentConfigs deprecation info alert should not present on the Edit deployment page #14195
OCPBUGS-38969: Tooltip on Pipeline when expression is not shows #14194
OCPBUGS-39085: Fix utilization card limits/total display #14209
OCPBUGS-33938: Add validation for vSphere fields Handle submit errors correctly #14210
OCPBUGS-39112: Disable Knative e2e tests #14197
OCPBUGS-33076: Remove deprecated resources from spec of the Pipeline #13801
OCPBUGS-35495: fix crash if helm chart metadata is nil #13977
OCPBUGS-37452: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14083
OCPBUGS-38496: Fix password set to Secret created through Start Pipeline form #14152
OCPBUGS-37399: Add default sorting column for VirtualizedTable component of dynamic plugin sdk #14079
OCPBUGS-37099: fix BMH restart annotation #14071
OCPBUGS-37458: one OAuth.config.openshift.io item on Global Configuration page links to non-existing resource #14085
OCPBUGS-34477: Import from Git allow users to import an app with Build option Pipeline also when no Pipeline is available #13897
OCPBUGS-36971: ensure correct API version for OperandDetails #14058
OCPBUGS-34912: Improve Pipeline list page performance #13929
OCPBUGS-33642: Patch PF dynamic module parser to exclude ‘next’ modules #13849
OCPBUGS-32501: Pipeline details page Metrics tab crashed due to no custom data #13781
OCPBUGS-34478: UI inconsistency in topology when application grouping is collapsed #13898
OCPBUGS-34350: Create Serverless form does not create BuildConfig #13891
OCPBUGS-32029: Use UserInfo username field when logging out as kubeadmin #13748
OCPBUGS-30208: Fix asynccache bugs #13807
OCPBUGS-33838: TaskRuns should not be fetched for Failed PLR’s #13863
OCPBUGS-34703: fix bug where textarea is not resizable #13913
Revert “OCPBUGS-34550: Dont render ARN mode role field and warning for HyperShift clusters” #13905
OCPBUGS-33263: Pipeline list page is crashed when navigating from Search page #13819
OCPBUGS-33166: Fix NAD always on default namespace #13865
OCPBUGS-31863: make sure folder is encapsulated with quotas #13737
OCPBUGS-33506: Fix Pipeline details page with when expression using CEL expression #13835
OCPBUGS-32505: Add visual connector between VMs and non VMs workloads #13782
OCPBUGS-33548: restrict Masthead logo to max-height #13839
OCPBUGS-32497: Improve Create serverless function error message #13778
OCPBUGS-33191: Hide dev perspective Pipelines nav option if dynamic plugin nav option is enable #13810
OCPBUGS-33058: fix issues with Edit Route form #13800
OCPBUGS-32187: Add flag to hide Output tab contributed by pipelines-plugin #13756
OCPBUGS-32716: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13788
OCPBUGS-32506: setting correct image trigger annotation #13783
OCPBUGS-32933: change OperatorHub filter FIPS Mode to Designed for FIPS #13796
OCPBUGS-31799: Improve PipelineRun list view performance #13731
OCPBUGS-32796: auth: fix OIDC logging out #13793
OCPBUGS-31445: Upgrade Pipeline trigger resources to v1beta1 #13704
OCPBUGS-31045: fix for execute inline markdown syntax issue #13681
OCPBUGS-32518: Add warning about service binding operator will not be supported from 4.15 #13784
OCPBUGS-32391: Routes created by devfiles do not always use HTTPS #13771
OCPBUGS-32340: Increased max nodes limit to 200 in topology page #13767
OCPBUGS-32399: Update devfile library to v2.2.2 #13762
OCPBUGS-32156: TaskRun status is not displayed near the name #13752
OCPBUGS-31806: Use bearer-token for local dev with auth #13732
OCPBUGS-31839: fix bug where paused MCPs were incorrectly unpausing w… #13735
OCPBUGS-31105: Update to pf5.2 to fix quick starts #13686
OCPBUGS-31476: Requesting for country codes in localization of openshift - webconsole #13707
OCPBUGS-31046: Application creation fail when manually entering input scaling value in local setup #13682
OCPBUGS-30916, OCPBUGS-30917: PipelineRuns in Console show wrong status or load indefinitely #13672
OCPBUGS-30869: TaskRun with same name in different project don’t show 2 entries when listing in all namespace #13668
OCPBUGS-31107: Upload Jar form’s Clear button is not functioning #13688
OCPBUGS-30759: Fix bugs in Console dynamic plugin SDK webpack code #13678
OCPBUGS-30871: fix Configure link in AlertmanagerReceiversNotConfigur… #13669
OCPBUGS-29963: i18n upload/download routine task - chore(i18n): update translations #13670
OCPBUGS-30801: Switch to service to get the PLR and TR logs from the Tekton results summary API #13663
OCPBUGS-30275: adjusting documentation links for 4.15 #13648
OCPBUGS-30870: chore(i18n): update translations: Completed OCP-4.15/Master Branch/Sprint 245 #13641
OCPBUGS-25831: Date&Time values are not showing as per browser default language #13467
OCPBUGS-29080: make getGroupVersionKindForResource null safe #13582
OCPBUGS-29781: Fix operands list endpoint. #13633
OCPBUGS-29812: Changes to prevent yaml editor crash in version 4.15 #13638
OCPBUGS-29842: Switch to service from external result route endpoint #13627
OCPBUGS-28889: VolumeSnapshots data not displayed in PVC > VolumeSnapshots tab #13570
OCPBUGS-27431: Add source maps to production builds #13526
OCPBUGS-26481: Tab VolumeSnapshots crashed on PVC page #13490
OCPBUGS-25984: Fix config ini format #13475
OCPBUGS-29844: Enable catalog source badge to truncate for long names #13629
OCPBUGS-29846: Prevent complete page reload when changing perspective #13631
OCPBUGS-29845: Page fails to return to the Secrets list after clicking ‘Cancel’ on any Secret creation page #13630
OCPBUGS-29843: improve empty state message for Machines and MachineSets page #13628
OCPBUGS-29679: TaskRuns list page is loading constantly for all projects #13618
OCPBUGS-29640: Output image url link leads to 404 for Shipwright Builds #13615
OCPBUGS-28232: do not deduplicate ImageManifestVulns in Overview popover #13545
chore(i18n) OCPBUGS-28623: update translations: : Completed OCP-4.15/Master Branch/Sprint 244 #13594
OCPBUGS-26567: Fixed some problems in topology Chinese translation text #13498
OCPBUGS-29914: [release-4.15] Use selfsubjectreview API from frontend #13636
OCPBUGS-29345: Any namespace after deletion is still visible on UI if it is the default selection in namespace dropdown #13599
OCPBUGS-29096: Add TaskRun tab in PLR details page using plugin #13584
OCPBUGS-29217: Revision tab and routes tab in serving details page showing no resource found #13590
OCPBUGS-26411: Logs for PipelineRuns fetched from the Tekton Results API is not loading #13486
OCPBUGS-28537: remove “openshift-storage” namespace usage from the console #13548
OCPBUGS-29283: Error in displaying BuildRun logs in Console #13595
OCPBUGS-28917: Optimize federation of shared PF5 code for dynamic plugins #13566
OCPBUGS-29022: fix i18n for Remove volume modal #13575
OCPBUGS-28940: AUTH-440: fix usersettings identifier creation #13571
OCPBUGS-27012: update check for the ‘provider’ label on the PackageMa… #13501
AUTH-440: OIDC: refresh sessions with a refresh token if present #13563
OCPBUGS-28591: Fixed bug with user feedback where inform the direction of RedHat was not showing up #13551
CONSOLE-3829, OCPBUGS-27235: backend: use the k8s SelfSubjectReview API to get info about a user #13514
OCPBUGS-27896: Add flags checks to hide Pipeline static plugin List and details pages #13536
AUTH-440: expand options for the OIDC authenticator #13509
OCPBUGS-27909: fix bug where Expand PVC modal assumes pvc.spec.resou… #13542
OCPBUGS-26439: Add support for custom segment domains (to load JS and make API calls) #13489
OCPBUGS-27177: fix bug where Clone PVC modal assumes pvc.spec.resourc… #13508
OCPBUGS-27306: Copy response code from proxied plugin requests #13518
OCPBUGS-26591: add additional check to determine if file is binary #13499
OCPBUGS-24812: Add missing https:// check for an external link #13433
OCPBUGS-26516: bump helm version to 3.13.2 for OCP 4.15 #13465
OCPBUGS-26041: fix bug where Update cluster modal will not open #13479
OCPBUGS-26209: Fix PipelineRun Logs tab navigation #13484
OCPBUGS-25726: Re-enable and fix pipelines e2e tests #13463
OCPBUGS-25706: update the checks for showing Archived to Tekton results icon for PLRs and TRs list and details page #13461
OCPBUGS-25707: fix Observe tab in Topology overview #13462
OCPBUGS-24668: Follow on logic for only showing VPAs associated with a deployment for a specific project #13447
OCPBUGS-24668: Only show VPAs that are associated with the selected namespace #13426
OCPBUGS-25324: fix preferredTab selection on Pipelines page #13443
OCPBUGS-24680: Backport Add support for Azure Workload Identity / Federated Identity #13428
OCPBUGS-25140: fix runtime error on Node details Overview when Machin… #13435
OCPBUGS-24678: Strip ‘Server’ header from proxy response #13427
OCPBUGS-25210, OCPBUGS-25211: Fix pipelineRuns loading on repository details page #13439
Full changelog

console-operator

OCPBUGS-77993: [release-4.15] hermetic 4.15 #1130
OCPBUGS-77993: [release-4.15] NO-JIRA: update go mod dependency for konflux #1116
OCPBUGS-46482: Dont disable console when authConfig type is set to None #953
OCPBUGS-37408: set required-scc for openshift workloads #924
OCPBUGS-31520: oidc: synchronize the CM with a CA to trust the issuer, if configured #881
OCPBUGS-33720: Add missing return statement to fix crash in healthcheck controller #903
OCPBUGS-31499: Update RHDH QuickStarts and add CR examples #880
OCPBUGS-31619: use InfrastructureTopology for clusters using external CP as the console deploys on the worker nodes #882
OCPBUGS-29332: Remove Janus IDP and update RHDH quickstarts #863
OCPBUGS-27113: Prevent healthcheck controller from Available=False blipping #835
OCPBUGS-29658: oauthclients: further split oidc and integrated oauth handling #870
always sync oidcClients in authn status if the field is present #859
OCPBUGS-29010: oauthclients: fix oauthclients degraded condition that never gets removed #856
CONSOLE-3912: OAuthClients: only add oidcClients to authentication status if the field exists #854
CONSOLE-3912: OIDC: setup the volume name properly when custom CA is configured #853
OCPBUGS-22681: Bump documentationBaseURL to 4.15 #807
CONSOLE-3912: Add secrets for session encryption/authentication in OIDC #852
pick of OCPBUGS-27221: make it impossible double set conditions in a single loop #851
OCPBUGS-27221: Bump library-go to deal with GET conflict #837
OCPBUGS-24104: Updating openshift-enterprise-console-operator-container image to be consistent with ART #818
Full changelog

container-networking-plugins

OCPBUGS-55948: Check error returned by ipv6 SettleAddresses #190
OCPBUGS-37732: Update owners #167
OCPBUGS-30045: [4.15] cherry-pick containernetworking/plugins#997 #155
Full changelog

coredns

OCPBUGS-77512: Modify .gitignore to not exclude vendor build folders #169
OCPBUGS-37158: UPSTREAM: 6354: openshift: key cache on Checking Disabled (CD) bit #125
OCPBUGS-27904: UPSTREAM: 6277: openshift: Fix OCPBUGS-27904 #110
OCPBUGS-24133: Updating coredns-container image to be consistent with ART #106
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-67958: fix CVE-2025-65637 #362
OCPBUGS-58885: CARRY: don’t ignore json files #342
OCPBUGS-43375: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.28 into release-4.15 #297
OCPBUGS-38170: rebase CPO on 4.15 #274
OCPBUGS-32246: Remove enforcement of IPv6 LB as internal #277
And 25 elided commits (e.g. from squash or rebase merges)
Full changelog

csi-driver-manila-operator

OCPBUGS-67959: Bump logrus #252
OCPBUGS-38023: Set required-scc for openshift workloads #236
OCPBUGS-25355: setting TLSSecurityProfile with no minTLSVersion crashes controller #221
OCPBUGS-25161: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #216
Full changelog

csi-driver-nfs

OCPBUGS-84930: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.64.1-sec.1 to avoid go version bump and fix CVE-2026-33186 #183
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-28944: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #166
OCPBUGS-26758, OCPBUGS-26759: add snyk config file for SAST scan #162
Full changelog

csi-driver-shared-resource-operator

OCPBUGS-28956: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #102
OCPBUGS-27035: add snyk config file for SAST scan #96
Full changelog

csi-external-provisioner

OCPBUGS-25698: UPSTREAM: 1132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #86
OCPBUGS-22528, OCPBUGS-25232: UPSTREAM: 1124: Bump OpenTelemetry to fix CVEs #82
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-31599: add cmdline args to enable group snapshot webhooks #147
OCPBUGS-29336: cherry-pick:release-4.15: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch #143
OCPBUGS-25521: Updating ose-csi-external-snapshotter-container image to be consistent with ART #134
Full changelog

csi-node-driver-registrar

OCPBUGS-25231: UPSTREAM: 354: Bump Bump OpenTelemetry to fix CVEs #60
Full changelog

docker-builder

OCPBUGS-65960: BuildConfig inline Dockerfile fails with heredoc syntax #491
OCPBUGS-58141: S2I build cpu limits observed by assemble are limited to 1 cpu #477
OCPBUGS-42917, OCPBUGS-43294: Bump buildah to 1.33.12 #442
OCPBUGS-43188: runc library bump to 1.1.12 #436
OCPBUGS-48298: skipping some unit tests to avoid failures as they are duplicate #428
OCPBUGS-48281: Add team members to the OWNERS file #427
OCPBUGS-32845: bump go-jose to fix CVE-2024-28180 #396
BUILD-854: Add adambkaplan as approver #381
OCPBUGS-28948: Replace ‘coreydaley’ with ‘sayan-biswas’ #378
Full changelog

docker-registry

OCPBUGS-53650: bump jwt and oauth dependencies #433
OCPBUGS-36287: use SelfSubjectReview to obtain user info #406 #406
OCPBUGS-31641: vendor: bump aws-sdk-go to support ca-west-1 #396
OCPBUGS-29525: bump docker-distribution to fix azure path issue #393
Full changelog

driver-toolkit

Add support for 64k pages with ARM64 (#141) #141
Full changelog

egress-router-cni

OCPBUGS-35524: update to go 1.20 and k8s.io mods to v0.28.3 #86
Full changelog

etcd

OCPBUGS-32768: Revert “OCPBUGS-31644: Rebase etcd 3.5.13 openshift 4.15” #264
OCPBUGS-31644: Rebase etcd 3.5.13 openshift 4.15 #260
OCPBUGS-28731: Rebase etcd 3.5.12 openshift 4.15 #243
OCPBUGS-24933: Rebase etcd 3.5.11 openshift 4.15 #232
Full changelog

gcp-cloud-controller-manager

OCPBUGS-30970: Update gcr-credential-provider.spec #60
OCPBUGS-30970: Adds auth-provider-gcp .spec file and build script #59
OCPBUGS-25947: Fix changing load balancer scope #56
OCPBUGS-25808: Add Snyk file to exclude vendor directory on scan #55
Full changelog

gcp-cluster-api-controllers

OCPBUGS-78281: [release-4.15] update go mod dependency for konflux #268
OCPBUGS-30117: manifests: Add in CustomNoUpgrade #225
OCPBUGS-30595: fix e2e tests on release branches #223
OCPBUGS-23650: Add Snyk file to exclude vendor directory on scan #217
Full changelog

gcp-machine-controllers

OCPBUGS-55410, OCPBUGS-55411: Disable shielded VMs for non-UEFI disks #117
Full changelog

gcp-pd-csi-driver

OCPBUGS-67973: Update logrus to v1.9.3 #93
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-67971: bump github.com/sirupsen/logrus to v1.9.3 #161
OCPBUGS-26993: Increase data source provision timeout #114
OCPBUGS-25355: setting TLSSecurityProfile with no minTLSVersion crashes controller #108
OCPBUGS-25161: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #102
OCPBUGS-25242: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #103
Full changelog

haproxy-router

OCPBUGS-74950: Adding escapeHAProxySingleQuotes for sanitize [release-4.15] #17
OCPBUGS-49392: Block Upgrades for CA-Signed Certs Using SHA1 #641
OCPBUGS-28928: Upgrade Validation plugin for SHA1 certs #585
OCPBUGS-32977: Count active services before setting weight to 1 #586
OCPBUGS-32693: Reject routes with MD5 certs #584
OCPBUGS-32435: Introduce ‘idle-close-on-response’ option for frontends #579
OCPBUGS-31544: Properly handle rewrite-target annotation #569
Full changelog

hyperkube, pod

OCPBUGS-67902, OCPBUGS-67977: CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.15] #2583
OCPBUGS-74300: Skip E2e: attach on previously attached volumes should work #2569
OCPBUGS-59147: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2358
OCPBUGS-59147: UPSTREAM: <carry>: disable some legacy cloud provider Azure tests #2359
OCPBUGS-52183: UPSTREAM: <carry>: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup #2227
OCPBUGS-53139: UPSTREAM: 129180: prevent unnecessary resolving of iscsi/fc devices to dm #2244
OCPBUGS-44514: Bump k8s api to 1.28.15 #2132
OCPBUGS-42169: Bump k8s api to 1.28.14 #2091
OCPBUGS-39016: Update to Kubernetes v1.28.13 #2063
OCPBUGS-31467: Return from EnsureHostInPool on all NIC errors #1964
: OCPBUGS-38861: Upstream: 115702 kubelet: output log even file is rotated #2058
NO-JIRA: update downstream owners #2050
OCPBUGS-37622: Bump to Kubernetes v1.28.12 #2037
OCPBUGS-35552: Bump to Kubernetes v1.28.11 #1994
OCPBUGS-33711: Bump to Kubernetes v1.28.10 #1969
OCPBUGS-33347: Provide SCC access via RBAC #1962
OCPBUGS-29613: UPSTREAM: <carry>: bump structured-merge-diff #1893
OCPBUGS-32299: Bump to k8s 1.28.9 #1946
OCPBUGS-29922: UPSTREAM: <carry>: openshift-kube-apiserver: pod .spec.nodeName should not override project node selector in podNodeEnvironment admission plugin #1897
OCPBUGS-31807: UPSTREAM: <carry>: allow type mutation for specific secrets #1939
UPSTREAM: <carry>: OCPBUGS-31348: fix cpu manager cpuset check #1915
OCPBUGS-31740: 4.15: UPSTREAM: 124048: Use the right feature gate when updating uncertain volumes #1935
OCPBUGS-31503: Bump to 1.28.8 #1926
Address CVE #11
OCPBUGS-30963: Set up CEL IP/CIDR library from 4.14 onwards #1912
OCPBUGS-29661: Bump to 1.28.7 #1891
OCPBUGS-29435: structuredAuthenticationConfig for kube 1.28-ish #1884
OCPBUGS-27343: UPSTREAM: <carry>: Update management webhook pod admission logic #1854
OCPBUGS-28209: UPSTREAM <carry>: use snyk file #1873
AUTH-439: loosen authentication.spec.type validation #1878
OCPBUGS-27368: Update to kubernetes 1.28.6 #1857
OCPBUGS-25812: Fix device uncertain errors on reboot - 4.15 #1832
OCPBUGS-26068: Backport CEL IP and CIDR validations #1843
OCPBUGS-26005: Update to Kubernetes 1.28.5 #1837
Full changelog

hypershift

OCPBUGS-84183: fix(cno): use brackets only for IPv6 in server URL #8308
OCPBUGS-74670, OCPBUGS-74671: Support proxy authentication when user/pass is included in URL #7606
CNTRLPLANE-1266: Drop extinct mce-2.5 pipeline #6655
CNTRLPLANE-1232: Move CPO pipeline to hermetic builds #6601
OCPBUGS-58506: [release-4.15] Add missing service network DNS entries to KAS cert #6394
OCPBUGS-57553: Add proxy variables for the MCD Pod #6293
OCPBUGS-57121: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6231
OCPBUGS-46467: Consistently look up and dial cloud API hostnames #5300
OCPBUGS-52590: Honor proxy vars in the util insecure http client #5791
CNTRLPLANE-920: Konflux build pipeline service account migration #6086
CNTRLPLANE-920: Konflux build pipeline service account migration #6081
OCPBUGS-55266: [release-4.15] Add konnectivity-proxy sidecar to openshift-oauth-apiserver #6070
OCPBUGS-51800: Fix golang crypto dependency go.mod replacement #5995
OCPBUGS-53898: bump golang-jwt v4 and v5 #5908
Red Hat Konflux update control-plane-operator-4-15 #5955
ART-11792: update go mod dependency for konflux #5923
OCPBUGS-51729, OCPBUGS-51800: Bump dependencies to OCP fork in backports #5902
OCPBUGS-50867: Prevent IgnitionServer from flooding the API server with patch requests #5633
OCPBUGS-52992: [release-4.15] OCPBUGS-52506: refactor aws identity health check into new controller #5815
OCPBUGS-52896: Make managed-trust-bundle optional #5813
OCPBUGS-50699: add region to AWS creds passed to operators managed by CPO #5669
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 #5729
OCPBUGS-51253: OCPBUGS-50692: Fix IsIPv4 function identifying also addresses instead of CIDRs #5701
OCPBUGS-52172: [release-4.15] Add HostedCluster additional trustbundles to konnectivity-https-proxy #5722
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.5 #5683
chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1739420147 #5624
NO-JIRA: chore(deps): update dependency mkdocs-material to v9 #5642
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1738816775 #5576
NO-JIRA: chore(deps): update konflux references #5588
NO-JIRA: Red Hat Konflux update control-plane-operator-4-15 #5338
NO-JIRA: chore(deps): update dependency mkdocs-mermaid2-plugin to v0.6.0 #5589
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.3 #5586
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.2 #5577
OCPBUGS-49668: fix overwriting PKI operator HCP conditions #5512
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1737480393 #5486
NO-JIRA: chore(deps): update konflux references (release-4.15) #5480
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.50 (release-4.15) #5434
NO-JIRA: Update dependency mkdocs-material to v8.5.11 (release-4.15) #5429
NO-JIRA: chore(deps): update konflux references (release-4.15) #5425
NO-JIRA: chore(deps): update konflux references (release-4.15) #5386
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1736729788 (release-4.15) - abandoned #5380
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1736404155 (release-4.15) #5379
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.49 (release-4.15) #5385
NO-JIRA: [release-4.15] Bump golang.org/x/crypto and golang.org/x/net #5371
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1734626445 (release-4.15) - abandoned #5344
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1734497536 (release-4.15) #5343
OCPBUGS-46075: Do not send traffic to local audit-webhook through konnectivity #5274
NO-JIRA: Update dependency mkdocs-glightbox to v0.4.0 (release-4.15) #5327
NO-JIRA: Update Konflux references (release-4.15) #5326
OCPBUGS-47545: Separate CPO containerfiles #5334
NO-JIRA: chore(deps): update dependency mkdocs to v1.6.1 (release-4.15) #5292
NO-JIRA: chore(deps): update konflux references (release-4.15) #5291
NO-JIRA: chore(deps): update konflux references (release-4.15) #5251
OCPBUGS-44522: Add network policies for konnectivity server and ignition server proxy #5120
OCPBUGS-43931: Return the right tagReference on Catalogs ImageStream #5187
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.47 (release-4.15) #5210
NO-JIRA: chore(deps): update konflux references (release-4.15) #5208
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.46 (release-4.15) #5190
NO-JIRA: chore(deps): update konflux references to 7779f9e (release-4.15) #5182
OCPBUGS-44278: Configure OAuth https proxy to dial cloud endpoints directly #5068
NO-JIRA: chore(deps): update konflux references (release-4.15) #5159
chore(deps): update konflux references (release-4.15) #5136
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1731604394 (release-4.15) #5129
chore(deps): update konflux references (release-4.15) #5118
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1731518200 (release-4.15) #5106
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9 (release-4.15) #5110
NO-JIRA: Update Konflux references (release-4.15) #5109
NO-JIRA: chore(deps): update konflux references to 11b7f08 (release-4.15) #5101
chore(deps): update konflux references (release-4.15) #5077
NO-JIRA: chore(deps): update konflux references (release-4.15) #5054
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.15) #5060
OCPBUGS-44201: add ValidIDPConfiguration condition to report IDP config issues #5037
NO-JIRA: Update Konflux references to fedcfe0 (release-4.15) #5040
chore(deps): update konflux references (release-4.15) #5025
chore(deps): update konflux references to f53fe54 (release-4.15) #5022
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.43 (release-4.15) #5016
NO-JIRA: Update Konflux references (release-4.15) #5010
NO-JIRA: chore(deps): update konflux references (release-4.15) #4974
OCPBUGS-43635: label routes only when HCP router used #4961
NO-JIRA: chore(deps): update konflux references (release-4.15) #4957
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.42 (release-4.15) #4949
OCPBUGS-43468: Use guest DNS resolution in Konnectivity HTTPS proxy by default #4929
NO-JIRA: chore(deps): update konflux references (release-4.15) #4932
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.15) #4916
NO-JIRA: chore(deps): update konflux references (release-4.15) #4922
NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.15) #4909
OCPBUGS-42881: Let payload generation pick the release for the NodePool #4867
OCPBUGS-42992: Conditionally manage kubeconfig secrets for DNS and Ingress operators #4876
NO-JIRA: chore(deps): update konflux references (release-4.15) #4897
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.15) #4881
NO-JIRA: chore(deps): update konflux references to 37b9187 (release-4.15) #4850
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.15) #4807
NO-JIRA: chore(deps): update konflux references (release-4.15) #4815
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.37 (release-4.15) #4793
NO-JIRA: chore(deps): update konflux references (release-4.15) #4777
chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.4-1227.1726694542 (release-4.15) #4766
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9 (release-4.15) #4770
chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 (release-4.15) #4769
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21 (release-4.15) #4767
NO-JIRA: chore(deps): update konflux references (release-4.15) #4762
OCPBUGS-41373: CPO oauth idp converter: resolve names before dialing #4746
NO-JIRA: Security fixes for openshift-ci-security job #4751
OCPBUGS-42214: Make guest cluster components use the correct KAS port #4749
OCPBUGS-38059: Add HTTP konnectivity proxy to OAuth server #4497
HOSTEDCP-1956: bump CCO and go-jose version #4697
NO-JIRA: chore(deps): update konflux references (release-4.15) #4719
OCPBUGS-41701: cmd: report server version, supported OCP #4702
OCPBUGS-38065: [release-4.15] Use HTTP proxy for ingress controller #4699
OCPBUGS-41809: copy image-registry AdditionalTrustedCA configmap into HC openshift-config #4706
HOSTEDCP-1896: [release-4.15] Allow setting Kube APIServer maximum requests in flight #4552
OCPBUGS-39463: handle version skewed NodePools that do not have rhel9 binaries #4666
OCPBUGS-39077: Set KCM node monitor grace period #4628
OCPBUGS-30465: fix: bump google.golang.org/protobuf #4616
OCPBUGS-39171: fix: bump github.com/IBM/go-sdk-core/v5 #4625
OCPBUGS-35815: Add hypershift-cluster-version-operator image to release providers #4243
NO-JIRA: test: relax mgmt KAS egress check #4631
NO-JIRA: Tolerate restarts for kubevirt external infra #4200
NO-JIRA: Flaky cert validation test #4630
OCPBUGS-38943: copy oapi ca-trust recursively when building trust anchor #4613
OCPBUGS-39041: set proxy envvars on aws and azure CCMs #4624
OCPBUGS-38613: hcco: reconcile apiserver config into hosted cluster #4567
OCPBUGS-38561: Let the CPO oidc check resolve through data plane #4564
OCPBUGS-34904: remove weak ciphers from security profile #4547
OCPBUGS-37171: OCPBUGS-35899: Doubled machineHealthCheck timeout on Agent and None #4489
NO-JIRA: Update Konflux 4.15 and perform migration #4487
NO-JIRA: [release-4.15] Kubevirt on Azure: Change KAS LB Port to 7443 #4469
OCPBUGS-36938: [release-4.15]: Add HTTP(s) konnectivity proxy and use it with OpenShift APIServer #4358
OCPBUGS-37174: Delete IDMS in dataplane once HCP ICS field is removed #4457
NO-JIRA: [release-4.15] kubevirt-csi-driver: Pass infra kubeconfig in case of external infra #4279
HOSTEDCP-1795, HOSTEDCP-1796: Customize the self-generated cert validity and rotation #4444
OCPBUGS-36916: Add newline after TLS certs referenced by image.config #4443
OCPBUGS-37695: Set right endpointSlice port #4441
NO-JIRA: Red Hat Konflux update hypershift-release-mce-25 #4433
NO-JIRA: [release-4.15] test/e2e: remove api budget checks #4413
OCPBUGS-37266: extract rhel9 MCO binaries for rhel8 based MCO images #4385
OCPBUGS-36606: enable audit log for oauth-openshift #4320
HOSTEDCP-1714: Kubernetes API Server Log Verbosity Annotation cherry pick to 4.15 #4178
OCPBUGS-35736: Complete KAS migration to none endpoint reconciler type #4228
OCPBUGS-35935: check mgmt cluster for route capability before DeleteIfNeeded for ovn sbdb route #4265
NO-JIRA: chore(deps): update konflux references (release-4.15) #4259
OCPBUGS-35714: Generate default worker security group rules based on machineCIDR #4266
NO-JIRA: chore(deps): update konflux references (release-4.15) #4252
OCPBUGS-32404: Fix failure to create a second hostedcluster in the same namespace #3907
NO-JIRA: chore(deps): update konflux references to ff44cf3 (release-4.15) #4246
NO-JIRA: feat(olm): Set packageserver replicas to 2 for IBMCloudPlatform #4231
chore(deps): update konflux references to 2be7c9c (release-4.15) #4224
OCPBUGS-34580: Add TrustedBundles to OAS container #4211
NO-JIRA: hack: make the e2e script generic #4199
OCPBUGS-33627: Restrict image registry overrides to control plane components #4131
OCPBUGS-34156: fix router on 4.14 y-stream upgrade #4077
OCPBUGS-35002: [release-4.15] HOSTEDCP-1122: Backport etcd defrag controller #4162
NO-JIRA: Update Konflux references to 1025001 (release-4.15) #4180
NO-JIRA: chore(deps): update konflux references (release-4.15) #4167
OCPBUGS-34997: add AWS STS URL to OIDC provider audiences #4157
OCPBUGS-35074: Fix disconnected metadata inspection for nodepool #4175
HOSTEDCP-1708: remove liveness and readiness probes that use the metrics #4128
OCPBUGS-34423: Fixed audit-logs sigterm failing to terminate gracefully #4089
OCPBUGS-33526: Disable DNS resolving for CNO #4148
OCPBUGS-34904: remove weak cipher #4156
OCPBUGS-34510: Reconcile KAS endpoints and endpoint slice #4097
NO-JIRA: test/e2e: fix prometheus serviceaccount handling against 4.16+ #4151
NO-JIRA: chore(deps): update rhtap references (release-4.15) #4120
NO-JIRA: chore(deps): update rhtap references (release-4.15) #4072
OCPBUGS-33510: Run haproxy to connect to kas from data plane if noproxy settings contain kas #4014
NO-JIRA: chore(deps): update rhtap references to 7cd8020 (release-4.15) #4064
NO-JIRA: Remove CLI inspection of release image #4056
HOSTEDCP-1518: Preserve container resource requests and limits #4032
NO-JIRA: Update RHTAP references (release-4.15) #4041
OCPBUGS-33118: Recycler-pod image now points to the OCP Payload reference #3963
OCPBUGS-32220: Fix disconnected metadata inspection #3881
NO-JIRA: Update RHTAP references to 1f62eaf (release-4.15) #4030
OCPBUGS-33117: Reconcile over ICSP/IDMS #3962
NO-JIRA: Update RHTAP references to 2d39df1 (release-4.15) #4022
HOSTEDCP-1480: Update TLS cert hash creation with sha512 #4017
HOSTEDCP-1513: Support hypershift-operator scoping for hostedclusters #3998
Revert “[release-4.15] OCPBUGS-32013: Set OPERATOR_IMAGE environment variable” #3939
OCPBUGS-33207: Remove kube-scheduler readiness probe #3955
NO-JIRA: chore(deps): update rhtap references to c6fdbf4 (release-4.15) #3989
OCPBUGS-25858: Improve description for agent APIServerAddress CLI flag #3977
OCPBUGS-33224: disable OCM pull secret controller when imageregistry config managementstate is Removed #3976
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3982
OCPBUGS-31747: update desired image even when HCP doesn’t exist yet #3839
NO-JIRA: chore(deps): update rhtap references to e9efe99 (release-4.15) #3974
OCPBUGS-32229: disable autoscaler when no nodepool require it #3884
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3967
HOSTEDCP-1552: Update RHTAP tekton files for 0.3 -> 0.4 migration #3957
OCPBUGS-31826: use dnsPolicy: Default for konnectivity-agent in data plane #3845
NO-JIRA: Update RHTAP references (release-4.15) #3935
OCPBUGS-32715: Fix OLM intilization args #3923
HOSTEDCP-1519: [release-4.15] feat(api): Add ingress-controller-load-balancer-scope annotation #3908
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3921
OCPBUGS-32164: Fix ICSP and IDMS inclusion as registriesOverrides #3870
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3904
OCPBUGS-30280: Switch to use service endpoint for Konnectivity #3692
OCPBUGS-32191: Kas disable audit cherry pick release 4.15 #3875
OCPBUGS-32114: Add new permission required in CAPA #3861
NO-JIRA: Update RHTAP references (release-4.15) #3887
NO-JIRA: [release-4.15] [e2e test framework] Add a flag to add an annotation to HostedCluster #3893
HOSTEDCP-1524: [release-4.15] Support additional node selectors for request serving nodes #3883
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3873
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3868
OCPBUGS-32013: Set OPERATOR_IMAGE environment variable #3853
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3857
NO-JIRA: Update RHTAP references (release-4.15) #3835
OCPBUGS-31766: include hostnetwork SCC CPO role for 4.13 and earlier #3840
HOSTEDCP-1438: [release-4.15] Preserve container resources for more hosted control plane components #3828
OCPBUGS-31324: Add missing PodSecurityViolation alert #3798
NO-JIRA: Increase stability in autoscaled environments #3777
OCPBUGS-31471: Reduce log file size for hypershift apiservers #3816
OCPBUGS-31604: disable http2 for ignition server and proxy #3825
OCPBUGS-31426: copy issuerCertificateAuthority configmap into HC openshift-config #3808
OCPBUGS-31265: inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs #3802
NO-JIRA: Update RHTAP references (release-4.15) #3812
NO-JIRA: Remove unused ref to hostnetwork in cpo role #3796
OCPBUGS-31064: ibmcloud KMS: remove breaking image check and enable KMS v2 support #3774
OCPBUGS-31377: Manually cherry pick #3782 to 4.15 #3803
OCPBUGS-31326: fix(ignition): Fix priority class override #3800
OCPBUGS-30804: honor HC image configuration #3730
”[release-4.15] OCPBUGS-30164: Ensure cloud resources are destroyed for all platforms when –destroy-cloud-resources is used” #3677
OCPBUGS-31116: external OIDC: fix certificateAuthority field in structured auth config #3783
OCPBUGS-30862: Manual cherry pick 3685&3727 to release 4.15 #3740
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3791
NO-JIRA: Update RHTAP references (release-4.15) #3785
OCPBUGS-29881: feat(ho): Add flag for dedicated request serving isolation #3633
OCPBUGS-30742: [4.15] HCP deletion can get stuck if CPO is unable to delete the default worker security group #3726
OCPBUGS-30650: Set KAS config pod security Enforce to privileged #3719
NO-JIRA: Bump CPO API budget to 4000 in EnsureApiBudget #3741
OCPBUGS-30651: Remove EnsurePSANotPrivileged #3744
NO-JIRA: Update RHTAP references (release-4.15) #3754
HOSTEDCP-1488: Use regionalized STS endpoints in AWS #3747
NO-JIRA: Update RHTAP references (release-4.15) #3738
OCPBUGS-30581: [release-4.15] OCPBUGS-30220: Align PSA labels on guest cluster namespaces with standalone OCP #3684
OCPBUGS-30572: [release-4.15] Update OLM Default Catalog Sources to 4.15 #3696
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3705
OCPBUGS-30189: set Konnectivity cipher suites #3673
”[release-4.15] OCPBUGS-27500: Fix default release image lookup” #3549
OCPBUGS-30284: do not set KAS OAuthMetadataFile with Authentication type OIDC #3694
OCPBUGS-30281: [release-4.15] OCPBUGS-30102: Support to disable machine management components #3670
NO-JIRA: chore(deps): update rhtap references (release-4.15) #3675
Update RHTAP references (release-4.15) #3645
HOSTEDCP-1405: Remove files not needed #3669
CNV-36056: Expose NodeSelector for KubeVirt VMs in NodePool #3648
OCPBUGS-30088: rollout kas on auth config change #3653
NO-JIRA: remove PrivateIngressController cleanup #3646
OCPBUGS-29880: feat(config): Default RevisionHistoryLimit to 2 for deployments #3632
OCPBUGS-29025: cpo: honor user provided oauthmetadata configmap passed in Authentication config #3522
OCPBUGS-30029: sync AuthenticationConfiguration type with o/k 1.28 carry #3644
NO-JIRA: Red Hat Konflux update hypershift-release-mce-25 #3643
NO-JIRA: Remove specific pull secret watch in HCCO #3606
OCPBUGS-29850: control-plane-pki-operator: fix CA used for SRE client credentials #3626
NO-JIRA: PDB backports #3628
OCPBUGS-29780: use 2040 for apiserver svc in IBM provider #3595
OCPBUGS-29435: Use structured authentication config #3607
OCPBUGS-28543: Include OperatorHubSpec sync with HC when Config is empty #3480
OCPBUGS-29508: Default NodeUpgradeType on day2 nodepool creation #3582
MULTIARCH-4084: Reduce the policy access scope to specific instance #3529
NO-JIRA: Approvers update #3579
OCPBUGS-27149: Add storage, csisnapshotcontroller and clustercsidrive… #3421
OCPBUGS-29416: hypershift-operator: don’t create PKI rbac when disabled #3565
OCPBUGS-29418: control-plane-pki-operator: add a signer for SRE break-glass #3566
OCPBUGS-29089: Make ControllerAvailabilityPolicy immutable #3533
OCPBUGS-29310: control-plane-pki-operator: validate CN for CSR #3558
OCPBUGS-29303: release-4.15: revocation controller backport #3532
OCPBUGS-29020: reduce external-dns route53 call volume #3521
OCPBUGS-29179: [4.15] reflect NodePool replica count nil in status #3473
NO-JIRA: remove unneeded code to copy Authentication refs #3537
OCPBUGS-29029: Add ValidatingAdmissionPolicy to KAS config #3523
OCPBUGS-28764: node spread anti-affinity for HA HCP #3495
OCPBUGS-28603: Remove webhook validations that introduce resource ordering #3515
OCPBUGS-28594: backport API moves #3482
HOSTEDCP-1272: Added CLI support to create DualStack clusters using default values #3502
OCPBUGS-27818: Add GC knobs for KAS #3457
OCPBUGS-27103: hcco: use manual mode for CCO #3420
NO-JIRA: kubevirt, e2e Add additional network test #3499
CNV-37394: Remove ‘–attach-default-network’ from productized cli #3500
OCPBUGS-27380: indicate cluster profile to render the correct manifests #3465
OCPBUGS-28235: Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. #3467
OCPBUGS-27432: consider HCP upgradeable if CVO has no upgradable condition #3444
HOSTEDCP-1374: external OIDC: copy Authentication OIDC client secrets through to guest #3393
OCPBUGS-27076: availability-prober: wait for infrastructure name to be set #3419
OCPBUGS-27155: Change KAS bootstrap image to cluster-config-api #3423
OCPBUGS-27071: Apply Scheduling Configuration for kCCM #3417
OCPBUGS-26600: set KAS runtime-config in alignment with feature gates #3399
OCPBUGS-26412: Set new condition on SG deletion. #3381
OCPBUGS-26410: Disable UWM Telemetry remote writer when MGMT cluster is disconnected #3380
OCPBUGS-26410: Disable UWM Telemetry writer when telemeter-client cm not exists #3379
OCPBUGS-26223: hostedcontrolplane: don’t start pki operator when disabled #3376
OCPBUGS-25782: Added support for OLM Disable default sources on HC creation #3321
CCO-511: control-plane-operator: reconcile the CCO #3336
NO-JIRA: no-op empty commit publish HO 4.15 to MCE 2.5 #3338
HOSTEDCP-1257: control-plane-pki-operator: add a CSR flow for break-glass creds #3324
ACM-8466: Add Kubernetes SCC V2 options to HO containers #3311
OCPBUGS-19271: Updating ose-hypershift-container image to be consistent with ART #3247
Full changelog

ibm-cloud-controller-manager

: OCPBUGS-37311: Bump otelgrpc to v0.49.0 #74
OCPBUGS-23610: Add Snyk file to exclude vendor directory on scan #64
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-79893: Bump google.golang.org/grpc to v1.79.3 #148
OCPBUGS-77211: [release-4.15] standardize build paths #125
OCPBUGS-58739: bump github.com/golang/glog to version v1.2.4 #107
OCPBUGS-56064: tech debt: rework vendor patches #92
OCPBUGS-53906: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #85
OCPBUGS-36066: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #72
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-67980, OCPBUGS-67981: bump github.com/sirupsen/logrus to v1.9.3 #165
OCPBUGS-59775: [IBM VPC] set offlineExpansion to false in e2e test manifest #150
OCPBUGS-42438: Reorder static resources to create RBAC first #130
OCPBUGS-36072: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #121
OCPBUGS-33641: [ibm-vpc] Scheduling issue on IBM Cloud Bare Metal nodes #116
OCPBUGS-25604: Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelgrpc to v0.46 #103
OCPBUGS-25161: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #99
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67289: [release-4.15] Fix incomplete vendor/ #137
OCPBUGS-51814: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #122
OCPBUGS-36078: UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.15 #87
OCPBUGS-25507: update golang.org/x/crypto module #78
OCPBUGS-23685: Add Snyk file to exclude vendor directory on scan #72
Full changelog

ibmcloud-machine-controllers

OCPBUGS-36084: Bump dependency for CVE #54
OCPBUGS-43675: IBMCloud: Handle pagination for subnets #48
Full changelog

insights-operator

Ignore previous status when disabling alerts (#1060) #1060
OCPBUGS-45204: LokiStack gatherer (#1057) #1057
OCPBUGS-45044: insightsoperator.operator.openshift.io resource is create-only (#1056) #1056
gather selected clusterroles (#1024) #1024
OCPBUGS-39565: Not able to enable repositories during entitled build in OCP Cluster on IBM-Z (#1015) #1015
OCPBUGS-39395: collect some nmstate customresources (#986) (#989) (#995) (#1002) #986
Add haproxy metric (#983) #983
OCPBUGS-37672: Ingress controller related certificates’ validate dates gathering (#972) #972
fix the configmapobserver notifications (#971) #971
manifests: set required-scc for openshift workloads (#967) #967
OCPBUGS-35882: properly encode the URL for the advisor links (#958) #958
OCPBUGS-35865: Collect aggregated Prometheus Alertmanager instances (#950) #950
OCPBUGS-32702: anonymization - externalIP can be nil (#931) #931
OCPBUGS-31946: bump golang.org/x/net version (#925) #925
Add extra check in ids to bypass validations (#901) #901
gather etcd_server_slow metrics (#900) #900
Updating ose-insights-operator-container image to be consistent with ART (#884) #884
Full changelog

ironic

OCPBUGS-69784: Bump eventlet version to 0.33.1-7 #764
OCPBUGS-48148, OCPBUGS-48597: Bump jinja2 to 3.0.1-6.el9.2 #624
OCPBUGS-43953, OCPBUGS-43961: Bump python-waitress [4.15] #605
OCPBUGS-39018: Bump ironic-lib to fix utf8 decoding issue #570
OCPBUGS-38798: redfish-virtualmedia fails on XFusion nodes #565
OCPBUGS-37761, OCPBUGS-39381: Include fixes for CVE-2024-44082 #583
OCPBUGS-38512: set min version for python3-webob #554
OCPBUGS-33332: bump werkzeug #536
OCPBUGS-37407: bump jinja2 #529
OCPBUGS-37113: Update eventlet version #523
Bug OCPBUGS-33736: Disable installation of .pyc files through pip #511
OCPBUGS-32365: [4.15] Remove unused prometheus exporter #485
OCPBUGS-32351: [4.15] Update to include fixes for ironic servicing feature #479
OCPBUGS-32389: Use unix sockets by default for reverse proxy communication #474
OCPBUGS-31686, OCPBUGS-31802, OCPBUGS-31830: [4.15] install ironic projects from source #470
OCPBUGS-31802: [4.15] Add requirements placeholders for cachito #467
OCPBUGS-27772: Update packages to include most recent bug fixes #450
OCPBUGS-27060: Fix Inspector iPXE config for IPv6 addresses #447
OCPBUGS-24648: Stuck deployment #439
OCPBUGS-25606: Relax packages requirements #442
Full changelog

ironic-agent

OCPBUGS-69782: Bump eventlet version to 0.33.1-7 #233
OCPBUGS-39018: Bump ironic-lib to fix utf8 decoding issue #157
OCPBUGS-39381: Include fixes for CVE-2024-44082 #162
OCPBUGS-38512: set webob and bump werkzeug #150
OCPBUGS-33133: update ironic-lib with latest fixes #131
OCPBUGS-32173: [4.15] Fix name in setup.cfg #123
OCPBUGS-31811: [4.15] Add makefile #126
OCPBUGS-31811: [4.15] Install ironic-python-agent from source #125
OCPBUGS-31811: [4.15] Add requirements placeholders for cachito #121
OCPBUGS-30078: [release-4.15] OCPBUGS-30078: Fix tripleo url with commit hash for openstack repos config #115
OCPBUGS-28756: Always add ignition to set hostname on /etc/hostname #108
OCPBUGS-27781: Update ironic-python-agent with latest bug fixes #105
OCPBUGS-25351: 502 proxy error #99
OCPBUGS-25684: Relax packages requirements #102
Full changelog

ironic-static-ip-manager

OCPBUGS-49836: Fix subnet validation #49
Full changelog

k8s-prometheus-adapter

OCPBUGS-35820: Fix the podmetrics and nodemetrics command #109
OCPBUGS-32214, OCPBUGS-32215: upgrade deps #102
Full changelog

keepalived-ipfailover

OCPBUGS-19254: Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #152
OCPBUGS-30413: update unit tests in egress/dns-proxy #168
Full changelog

kube-proxy, sdn

OCPBUGS-54868: Handle openshift-host-network namespace as special when it modifies #654
OCPBUGS-46576: Get rid of deps.diff so it doesn’t keep causing problems [4.15] #646
OCPBUGS-45955: Stop checking ruleVersion [4.16] #644
OCPBUGS-43605: backport fix for network policy during live migration #642
OCPBUGS-42171: fix redundant router-default iptables rule [4.15] #634
OCPBUGS-28580: Move sdn to RHEL9 base image (attempt #2) #617
OCPBUGS-28580: Revert #613 “OCPBUGS-28580: Move sdn to RHEL9 base image” #616
OCPBUGS-28580: Move sdn to RHEL9 base image #613
OCPBUGS-28549: Add Snyk file to exclude directories on scan #614
OCPBUGS-27459: Metrics: Add metric for multicast enabled netnamespaces #606
OCPBUGS-24172: Updating kube-proxy-container image to be consistent with ART #592
Full changelog

kube-rbac-proxy

OCPBUGS-31941: bump golang.org/x/net [4.15] #109
Full changelog

kube-state-metrics

OCPBUGS-24158: Updating kube-state-metrics-container image to be consistent with ART #105
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-15). #228
OCPBUGS-24142: Updating ose-kube-storage-version-migrator-container image to be consistent with ART #201
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-31801: Bump opentelemetry #39
OCPBUGS-24118: Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART #28
OCPBUGS-22061: Bump golang.org/x/net to v0.18.0 #34
Full changelog

kubevirt-csi-driver

fix for OCPBUGS-58587: CVE-2024-45339 openshift4/kubevirt-csi-driver #69
OCPBUGS-29793: [release-4.15] Address https://github.com/advisories/GHSA-fg9q-5cw2-p6r9: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs #33
Full changelog

libvirt-machine-controllers

OCPBUGS-77197: Fix incomplete vendor #303
OCPBUGS-26506: Updating ose-libvirt-machine-controllers-container image to be consistent with ART for 4.15 #282
OCPBUGS-26045: Replace genisoimage with xorriso in 4.15 to allow rhel9 bump #272
OCPBUGS-25772: Add Snyk file to exclude vendor directory on scan #278
Full changelog

machine-api-operator

OCPBUGS-67989: bumped logrus to v1.9.3 #1460
OCPBUGS-59861: Updates GCP CredentialsRequest #1397
OCPBUGS-55410, OCPBUGS-55411: Updates GCP credentials request #1356
OCPBUGS-53251: add image/read permissions #1349
OCPBUGS-52481: Drop oVirt support #1340
OCPBUGS-48105: Vsphere: Handle cloned instance with lost taskID #1321
OCPBUGS-46080: Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages #1314
[[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #1288
CFE-1051: Adding web-hook validation for capacityReservationGroupID #1261
OCPBUGS-31949: Update x/net to v0.24.0 #1231
OCPBUGS-30215: Azure MAO CredentialsRequest Contains Unnecessary virtualMachines/extensions Permissions #1222
OCPBUGS-28762: Add additional vnet join permission for Azure #1216
OCPBUGS-27758: Set –max-concurrent-reconciles=10 for Azure machine controller #1210
OCPBUGS-27758: Add AddWithActuatorOpts to allow overriding Machine controller options #1209
OCPBUGS-27405: Add useExternalIp gcp permission #1207
OCPBUGS-26406, OCPCLOUD-1725: Add GCP custom roles #1196
OCPBUGS-25734: Add Snyk file to exclude vendor directory on scan #1193
Full changelog

machine-config-operator

OCPBUGS-77636: Machine-config controller should not log about non-existent pull-secret changes #5573
OCPBUGS-60214: [release-4.15] OCPBUGS-53248: Enforce VIPs to be collocated at the same host #4988
OCPBUGS-59737: Remove MachineConfigNode CRD from manifests #5188
OCPBUGS-48284: Do not run resolv-prepender from NM dispatcher #4783
OCPBUGS-57340: Do not enable on-prem-resolv-prepender.path for UPI #5115
OCPBUGS-36688: Add ipsec connect wait service #4937
OCPBUGS-54206: Update format verbs for alert logs #4943
OCPBUGS-54176: Update ObservedGeneration in KubeletConfig #4944
OCPBUGS-43742: Soften haproxy timeout for kubeapi probe #4663
OCPBUGS-50526: Add clarification to invalid maxUnavailable alert #4842
OCPBUGS-48583: trying to wait for sub-contorllers #4796
OCPBUGS-46034: Remove trailing periods from AWS provided hostnames #4745
OCPBUGS-44565: Post upgrading from 4.14 to 4.15.36, the observedGeneration count increased tremendously #4702
OCPBUGS-42137: Removal of additionalTrustBundle CA does not remove certificate from node backport #4687
OCPBUGS-44240: Disable ESP offload for OVS attached interfaces #4684
MCO-1341: Backport Telemetry to 4.15 #4648
OCPBUGS-42110: Do not use ‘restart’ for ‘oneshot’ service #4621
OCPBUGS-43582: Panic seen in CI job for MCC pod #4653
OCPBUGS-43575: MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP #4647
OCPBUGS-37704: Make logging configurable for on-prem components #4501
OCPBUGS-32329: Fix configure-ip-forwarding.sh #4324
OCPBUGS-37551: On-Prem resolv prepender to watch for NM changes #4499
OCPBUGS-38712: SCC-pinning for openshift workloads #4540
OCPBUGS-38370: Revert “MCD-pull: run after network-online.target in Azure” #4525
OCPBUGS-37768: Move StartLimitIntervalSec to Unit section #4506
OCPBUGS-37629: Openshift uncordoned compute-node that was intentionally cordoned #4495
OCPBUGS-36863: Copy RHEL9 binaries used in HCP #4476
OCPBUGS-35220: Check both ready and health ingress endpoints #4398
OCPBUGS-30139: [release-4.15] Use NM’s dns-change event for resolv.conf #4220
OCPBUGS-36769: daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages #4461
OCPBUGS-36550: MCD-pull: run after network-online.target in Azure #4454
OCPBUGS-27436: Fix mirrorSourcePolicy error prompt imagecontentsourcepolicies #4431
OCPBUGS-36258: daemon/update: disable systemd unit before overwriting #4441
OCPBUGS-32092: Decrease logs of haproxy #4313
OCPBUGS-35010: set required-scc for openshift workloads #4393
OCPBUGS-31461: Remove weights from ingress check script #4290
OCPBUGS-33847: If multiple hostnames are returned, use the first one for the Node name #4373
OCPBUGS-20152: Don’t error if the certs.d dir doesn’t exist yet #4358
OCPBUGS-32922: [release-4.15] add cluster fleet evaluation support to mco #4334
OCPBUGS-28926: [4.15] crio: update pids limit to be -1 #4163
OCPBUGS-28545: Delete state files on reboot only #4311
OCPBUGS-31820: Remove the condition for checking the multiple ovs-if-br-ex profiles #4309
OCPBUGS-27029: Log network service output to console #4113
OCPBUGS-31646: fix: resources were in the wrong indentation level #4301
: OCPBUGS-31576: kubelet: restorecon necessary files on kubelet’s prestart #4297
OCPBUGS-30884: Prevent OVS-configuration to run before kdump #4259
OCPBUGS-31383: make verify should use MCO’s kube version #4282
OCPBUGS-30971: add preferredduringscheduling annotation to kube-rbac-proxy-crio #4264
OCPBUGS-29731: Delete image openshift/openshift-proxy-pull-test #4199
OCPBUGS-30093: Mount /run/nodeip-configuration into coredns containers #4229
OCPBUGS-30761: add static pods for rbacproxy #4252
OCPBUGS-30017: CRI-O: Add missing Devices annotation to CRI-O configuration #4227
OCPBUGS-29339: annotate on-prem static pods for workload partitioning #4179
OCPBUGS-29797: set nodeStatusReportFrequency #4211
OCPBUGS-29166: ovs-configure: fix vlan_parent calculation #4171
OCPBUGS-29651: nmstate, configure nmstate to keep service yamls #4192
OCPBUGS-29038: Add existing kubeletconfig/ctrcfg mc-name-suffix annotation #4166
OCPSTRAT-1062: [4.15] crio: enable log linking by default in 4.15 #4174
OCPBUGS-29105: On-prem coredns manifests should not be generated for GCP #4169
OCPBUGS-28909, OCPBUGS-28910: Run resolv-prepender entirely async #4161
CORS-3169: Add support for in-cluster DNS on Cloud Platforms when cloud DNS cannot be used #4155
OCPBUGS-28237: daemon: allow the user to override drains on IR changes #4148
OCPBUGS-27486: Add Image Credential Provider flags for Kubelet on AWS #4134
OCPBUGS-27307: Fix typo in AWS node env unit #4130
OCPBUGS-25424: Add \n in cert_writer for old cert methods and skip cloudCA validation #4077
OCPBUGS-26240: Azure Run ovs-configuration.service before dnsmasq.service #4101
OCPBUGS-25948: kubelet: fix kubelet labels #4090
OCPBUGS-25228: crio: drop automatic image cleanup on upgrades #4072
Full changelog

machine-image-customization-controller

OCPBUGS-67983: [4.15] uplift logrus #154
Full changelog

machine-os-images

OCPBUGS-54170: Change rhcos release browser url #58
Full changelog

monitoring-plugin

OCPBUGS-74446: [release-4.15] fix: upgrade lodash to remove vulnerable code #907
OCPBUGS-78493: fix for CVE-2025-69873 #850
OCPBUGS-44393: Manual cherry pick cross spawn 4.15 #277
OCPBUGS-43242: upgrade dynamic plugin sdk to remove vulnerable dependencies 4.15 #218
OU-417: throw an error when a custom datasource is not found #118
OU-415: Add datasource parameter to handle metrics from custom datasources #116
OCPBUGS-32097: make createdBy mandatory and auto fill with the current user #115
OCPBUGS-31310: upgrade sanitize-html vulnerable dependency #107
OCPBUGS-27202: upgrade follow-redirects parent dependency #94
OU-318: consider all metric keys to display all results on dashboards tables #97
OU-312: Revert “fix default nginx path to look for static files” #93
OCPBUGS-25643: On the alert details page, don’t require all alert labels in URL #89
OCPBUGS-24658: remove regex from console page route path so plugin pages are found #85
Full changelog

multus-admission-controller

OCPBUGS-58769: Update the github.com/golang/glog module to v1.2.4 #104
OCPBUGS-37727: Update owners #88
OCPBUGS-24069: Updating ose-multus-admission-controller-container image to be consistent with ART #77
Full changelog

multus-cni

OCPBUGS-85252: Fix server url in kubeconfig #301
no-issue: [release-4.15] Bump Go to 1.20 and fix CI build root image #294
OCPBUGS-35047: Update owners file #240
OCPBUGS-35258: Thick plugin should not wait for API readiness on CNI DEL #242
OCPBUGS-33477: Fix CNI cache update function to prevent nil access #234
OCPBUGS-30237: Reload bootstrap kubeconfig if cert mgr failed to load valid certs #223
OCPBUGS-28271: Fix SAST scan issues for multus-cni-container [4.15] #219
OCPBUGS-22839: Adds a wait on unix socket readiness [backport 4.15] #210
OCPBUGS-26535: Revert #206 “Adds a wait on unix socket readiness [backport 4.15]” #209
OCPBUGS-22839: Adds a wait on unix socket readiness [backport 4.15] #206
Full changelog

multus-networkpolicy

Update owners (#58) #58
Updating ose-multus-networkpolicy-container image to be consistent with ART (#44) #44
Full changelog

multus-route-override-cni

OCPBUGS-41804: [release-4.15]Update owners #59
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-55619: Fixes leftover podref issue #366
OCPBUGS-37729: Update owners #305
OCPBUGS-37813, OCPBUGS-37816: [release-4.15] align api calls timeout and skip pods marked for deletion #308
OCPBUGS-36367: [release-4.15] Return previous IP allocation for add cmd #295
OCPBUGS-35081: [release-4.15] Use IP to identify orphaned allocation to be deleted #288
OCPBUGS-27748: Enable whereabouts-reconciler configuration 4.15 #239
OCPBUGS-18893: Assignment error fix #228
Full changelog

must-gather

OCPBUGS-36371: Run ppc node collection in parallel #430
OCPBUGS-42970: Collect etcd object count #456
OCPBUGS-48083: Update owners #474
OCPBUGS-46451: Support gathering IPsec data #471
OCPBUGS-43057: [Relase-4.15] Multus is now a Pod and will be captured by normal #450
Full changelog

network-metrics-daemon

OCPBUGS-58779: Bump github.com/golang/glog to v1.2.4 (#114) #114
OCPBUGS-60374: Replace e2e test image (#126) #126
swtich golint install method (#124) #124
Correct 4.16 owners file (#99) #99
Updating ose-network-metrics-daemon-container image to be consistent with ART (#87) #87
Full changelog

network-tools

OCPBUGS-31764: replace wireshark with wireshark-cli #118
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-22078: bump golang.org/x/net to v0.17.0 #40
OCPBUGS-23652: Add Snyk file to exclude vendor directory on scan #27
Full changelog

nutanix-machine-controllers

OCPBUGS-47264: fixing CVE-2024-45338 #117
OCPBUGS-51850: CVE-2025-22868 #109
[[release-4.15] OCPBUGS-41800: set required-scc for openshift workloads #81
OCPBUGS-29548: IPI install fails on Nutanix when using DHCP #69
Full changelog

oauth-apiserver

OCPBUGS-74925: bump kubernetes-apiserver to pick up loopback cert expiration update #173
NO-JIRA: (chore): update OWNERS #175
OCPBUGS-33210: bump lib-go to fix SAs acting as OAuth2 clients #114
OCPBUGS-31951: bump x/net to 0.24.0 #109
OCPBUGS-21669: bump k8s.io and others (4.15) #99
OCPBUGS-24132: Updating ose-oauth-apiserver-container image to be consistent with ART #93
OCPBUGS-27101: UPSTREAM: <carry>: retry etcd Unavailable errors #96
Full changelog

oauth-proxy

OCPBUGS-61447: Update x/crypto to v0.31.0 #336
OCPBUGS-24067: Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART #269
Full changelog

oauth-server

OCPBUGS-33210: bump lib-go to fix SAs acting as OAuth2 clients #148
Full changelog

oc-mirror

OCPBUGS-77858: fix vendor for hermetic 4.15 #1361
And 17 elided commits (e.g. from squash or rebase merges)
Full changelog

olm-catalogd

OCPBUGS-29796: UPSTREAM: 231: make garbage collection a runnable #44
OCPBUGS-27586, OCPBUGS-27671: [release-4.15] bump github.com/go-git/go-git/v5 to v5.11.0 #39
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

olm-operator-controller

OCPBUGS-27591, OCPBUGS-27676: [release-4.15] bump github.com/go-git/go-git/v5 to v5.11.0 #68
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

olm-rukpak

: OCPBUGS-30264: Bump Helm & K8s dependencies #79
OCPBUGS-27596, OCPBUGS-27681: UPSTREAM: <carry>: Update go-git to v5.11.0 #72
Full changelog

openshift-apiserver

OCPBUGS-67998: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.15] #611
OCPBUGS-74923: bump kubernetes-apiserver to pick up loopback cert expiration update #600
OCPBUGS-58822: Fix image reference in TestImageStreamImportQuayIO #517
OCPBUGS-47766: Pass expected type to deploymentconfig/scale object validation. #466
OCPBUGS-32444: Bump golang/x/net to v0.23.0 #428
OCPBUGS-28928: Bump openshift/api to get updated docs for UnservableInFutureVersions #436
OCPBUGS-31469: vendor upgrade runtime-utils #422
OCPBUGS-27101: UPSTREAM: <carry>: retry etcd Unavailable errors #413
OCPBUGS-24090: Updating ose-openshift-apiserver-container image to be consistent with ART #406
Full changelog

openshift-controller-manager

OCPBUGS-57761: Set node-pullsecrets volume to read-only to protect image pull credentials #396
OCPBUGS-56474: Empty proxy variables are causing issues during the build #383
OCPBUGS-54344: Unable to look up the service account secrets for build #370
OCPBUGS-48280: Add team members to the OWNERS file #359
NO-JIRA: cleanup root and app OWNERS #348
OCPBUGS-32871: replaces deprecated square/go-jose wtih go-jose/go-jose #333
OCPBUGS-41949: Add adambkaplan as approver #291
OCPBUGS-32807, OCPBUGS-33371: Rollback state of managed image pull secrets after downgrade #303
OCPBUGS-31490: Bumps opentelemetry dependencies #294
OCPBUGS-24086: Updating ose-openshift-controller-manager-container image to be consistent with ART #281
OCPBUGS-28947: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #285
Full changelog

openshift-state-metrics

OCPBUGS-24079: Updating openshift-state-metrics-container image to be consistent with ART #111
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-68000: CVE-2025-65637 openshift4/ose-openstack-cinder-csi-driver-rhel8-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.15.z] #192
OCPBUGS-36586: Add config map hooks #175
OCPBUGS-34927: Correct out-of-bounds check #172
OCPBUGS-32744: Relax requirement to enable topology #165
OCPBUGS-25355: setting TLSSecurityProfile with no minTLSVersion crashes controller #154
OCPBUGS-25161: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #148
Full changelog

openstack-cluster-api-controllers

OCPBUGS-25859: CARRY: Add Snyk security scan config #299
OCPBUGS-26208: openshift/manifests: CloudCredential capability for CredentialsRequest #297
🐛 Persist API FloatingIP immediately on creation #1846
:bug: Fix potential panic during instance create #1808
fix –short flag is removed issue for CI #1811
🐛 Only delete all ports when deleting cluster network #1683
🌱Fix various issues with CRD generation #1671
🌱Bump CAPI to v1.5.1 #1667
⚠️ Merge all changes from main since v0.8.0-alpha.0 #1664
And 27 elided commits (e.g. from squash or rebase merges)
Full changelog

openstack-machine-api-provider

OCPBUGS-78171: hermetic 4.15 #164
OCPBUGS-34665: Failure to get bootstrap is non-fatal #120
OCPBUGS-30857: Ensure portSecurity is correctly set in the Port #108
OCPBUGS-28326: Add snyk configuration file #105
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-82056: Drop github.com/distribution/distribution dep #1303
OCPBUGS-61466: [release-4.15] Add NetworkPolicy as a supported kind #1051
OCPBUGS-61389: [4.15] e2e stability fixes #1084
OCPBUGS-57430: reduce cache expiry frequency [release-4.19] #1023
OCPBUGS-56463: fix(olm): improve error logging for missing olm.managed label (#3558) #1010
OCPBUGS-48662: Fix concurrent namespace resolution #948
OCPBUGS-48697: Fix excessive catalog source snapshots cause severe performance regression #958
OCPBUGS-46926, OCPBUGS-46933, OCPBUGS-47313: x/net bump to v0.34.0 [release-4.15] #940
OCPBUGS-46479: CRD upgrade existing CR validation fix #917
OCPBUGS-42114: add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata #874
OCPBUGS-41981: (fix) registry pods do not come up again after node failure (#3366) #868
OCPBUGS-41819: [4.17] adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #864
OCPBUGS-41598: Fix e2e flake: upgrade CRD with deprecated version #862
OCPBUGS-38383: (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache #840
OCPBUGS-38323: Update junit report file name to show spec results on Test Grid #839
OCPBUGS-37677: [release-4.15] Update e2e config and backport list of flakes #829
OCPBUGS-37554: Set required-scc for openshift workloads #828
OCPBUGS-37017: Bump github.com/containers/image/v5 #823
OCPBUGS-36812: fix sorting unpack jobs #817
OCPBUGS-36451: Can’t install operator on 4.15 after uninstalling it on a prior version #810
OCPBUGS-36813: [CARRY] perform operator apiService certificate validity checks directly #819
OCPBUGS-35305: [release-4.15] catalog-operator: delete catalog pods stuck in Terminating state due to unreachable node #779
OCPBUGS-35720: Warn and allow CRD upgrade if validation fails but webhook is specified #789
OCPBUGS-31939, OCPBUGS-31940: UPSTREAM: <carry>: update golang.org/x/net for CVE-2023-45288 #747
OCPBUGS-35229: Unblock CI #768
OCPBUGS-32860: UPSTREAM: <carry>: bump go-jose #740
OCPBUGS-32311: [release-4.15]: Update if AlreadyExists #736
OCPBUGS-31842: copy-content: delete destination dirs before copying (#3197) #728
OCPBUGS-31651: [release-4.15] Correctly detect catalog image ID for extractContent catalog pods #726
OCPBUGS-30219: bump otelgrpc to 0.46.0 #712
OCPBUGS-30193: Synchronize From Upstream Repositories #711
OCPBUGS-30141: ClusterRoleBinding + Service SSA cherry-pick #707
OCPBUGS-30147: Wait for required RBAC before creating packageserver CSV #710
NO-ISSUE: [release-4.15] Backport flaky CRD upgrade block e2e test fix #694
OCPBUGS-24159: Updating operator-lifecycle-manager-container image to be consistent with ART #623
OCPBUGS-29083: * olm,catalog: only validate the resources we label #683
OCPBUGS-29116: [release-4.15]: Clear (existing) error cond from Subscription, once error resolved #684
OCPBUGS-27566, OCPBUGS-27571, OCPBUGS-27651, OCPBUGS-27656: bump go-git/v5 to 5.11.0 (#1175) #668
OCPBUGS-25798: Fix snapshot failure, backport e2es #670
OCPBUGS-27435: OCPBUGS-25989: operators/olm: filter RBAC lists by namespace #664
OCPBUGS-26066: [release-4.15] NO-ISSUE: Synchronize From Upstream Repositories #648
OCPBUGS-25818: NO-ISSUE: Synchronize From Upstream Repositories #644
OCPBUGS-25798, OCPBUGS-25802: [release-4.15] NO-ISSUE: Synchronize From Upstream Repositories #643
NO-ISSUE: Update verified directories for microshift-manifests #642
OCPBUGS-25367: [CARRY] Fix panic issue when annotations map is nil #636
OCPBUGS-24121: Updating operator-registry-container image to be consistent with ART #621
Full changelog

operator-marketplace

OCPBUGS-68005: CVE-2025-65637 fixed in logrus v1.9.3+ #733
OCPBUGS-62221: Remove Expect func so that the test case can use the retry logic #672
OCPBUGS-62119: Update memoryTarget on catalog source pods #666
OCPBUGS-49428: Upgrade golang.org/x/net [release-4.15] #588
OCPBUGS-24144: Updating marketplace-operator-container image to be consistent with ART [4.15] #553
OCPBUGS-37524: Set required-scc for openshift workloads #570
OCPBUGS-32060: update golang.org/x/net for CVE-2023-45288 #564
Full changelog

ovirt-csi-driver-operator

OCPBUGS-68032: Bump github.com/sirupsen/logrus to v1.8.3 #144
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

CORENET-6055, OCPBUGS-76403: [release-4.15] Dockerfile: Unpin OVN and consume the latest from FDP #2974
OCPBUGS-56660, OCPBUGS-58162: Unpin OVS patch versions #2649 #2649
OCPBUGS-56419: Update to FDP25.A.1 24.03.5-40. #2573
OCPBUGS-50583: Bump OVN to 23.09.6-12 to consume fix for FDP-905 #2454
OCPBUGS-53384: [release-4.15] Dockerfile.base: bump OVS version to 3.3 #2492
OCPBUGS-43605: Add SDN node subnet gateway IP to host-network address_set #2419
OCPBUGS-46403: Add static route to the hairpin masquerade IPs to pod #2396
OCPBUGS-47799: Let OVN-northd bind remote ports #2407
OCPBUGS-44708: Add hybird overlay pod IPs to the namespace address_set #2399
OCPBUGS-45097: pin libreswan to 4.6-3.el9_0.3 #2374
OCPBUGS-44782: Bump ovs to 3.1.0-137 #2359
OCPBUGS-42943: Fix egress gateway pod cleanup for remote zone pods. #2342
OCPBUGS-41838: Use more exact name match when deleting static routes to HO nodes. #2298
OCPBUGS-42780: Add subnet overlap check for transit switch subnet #2313
OCPBUGS-41340: Delete EgressIP LRP stale nexthops when node is not found #2288
OCPBUGS-38262: [release-4.15] Bump OVSDBTimeout and make it configurable. #2252
OCPBUGS-37962: Fix registering northd metrics on appropriate nodes #2246
OCPBUGS-37196: [release-4.15] ovspinning: Set affinity of each thread #2235
OCPBUGS-35902: Bump ovn to 23.09.4-16 #2216
OCPBUGS-36382: Handle IP fragments in SGW mode #2215
OCPBUGS-33619: EgressIP: Reload certificates for the grpc heatlhcheck server #2167
OCPBUGS-33623, OCPBUGS-33624: Improve CI signal by removing/suppressing signals #2168
OCPBUGS-31814: ipv6+all protocols conntrack flush #2131
OCPBUGS-34404: [release-4.15] dns: fix deadlock in case of error #2182
OCPBUGS-33294: Reuse node-subnet from cache if exists #2163
OCPBUGS-33960: Egressip garp fix 4.15 #2175
OCPBUGS-30899: use a forked version of j-keck/arping that fixes a threading issue #2105
OCPBUGS-32426: [release-4.15] Improves service iptables efficiency on start up #2156
[Release 4.15] OCPBUGS-32986: Bump OVS #2147
OCPBUGS-27852: [release-4.15] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix #2025
OCPBUGS-29316: [release-4.15] Ignore missing live migratable pod annotation on AddNode #2065
OCPBUGS-32202: [release-4.15] Bump OVN to 23.09.0-139 #2121
OCPBUGS-33020: drop-forwarding: Add ClusterSubnets to allowed forwarding CIDRs #2141
OCPBUGS-32154: Custom v4 and v6 transit switch subnets while creating kind cluster #2094
OCPBUGS-31081: Periodically check the ovnkube-node certificate is not expired #2099
OCPBUGS-31033: Remove OVN topology version reporting/detection #2098
OCPBUGS-31500, OCPBUGS-31501: EIP multi NIC IPv6 support and default route with next hop #2103
OCPBUGS-29599: Update HostNetworkNamespace address_set for remote zone nodes #2074
OCPBUGS-29185: Wait for ovnkube controller to start before checking result error. #2064
OCPBUGS-28725: Update netpol namespace address sets usage to the old ways #2050
OCPBUGS-29230: [release-4.15] separate the handler sync from the informer sync & remove the full service resync during node tracker startup #2060
OCPBUGS-28818: Support Permanent Session Affinity #2045
OCPBUGS-28848: Ignore hybrid-overlay nodes from EgressIP controller #2040
OCPBUGS-29001: kubevirt, Replace routes on migration #2052
OCPBUGS-27947: [release-4.15] Fix LGW ETP=Local on IPv6 #2028
OCPBUGS-27255: Ensure session affinity cleanup on backend removal #2020
OCPBUGS-25938: CARRY: Updates owners and adds Surya #2005
OCPBUGS-25395: [release-4.15] Update namespace-owned port group (that used to be managed by multicast) #1998
OCPBUGS-25486: Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks #1999
OCPBUGS-25700, OCPBUGS-25701: Dockerfile: Bump OVN to ovn-23.09.0-91.el9fdp #1994
OCPBUGS-24610: Updating ose-ovn-kubernetes-container image to be consistent with ART #1963
Full changelog

powervs-block-csi-driver

OCPBUGS-36096: Fix CVE-2024-6104 by updating http-retryable to 0.7.7 #89
OCPBUGS-33622: Fix CVE2023-45288 by bumping x/net to v0.24.0 -4.15 #80
OCPBUGS-25978: Rebase with upstream: Fix snyk code issue: Path Traversal #71
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-68006: Fix CVE-2025-65637 by bumping logrus to v1.9.1 #99
OCPBUGS-25714: snyk: ignore vendor dir #59
OCPBUGS-25161: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #56
Full changelog

powervs-cloud-controller-manager

OCPBUGS-36106: UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.15 #74
Full changelog

powervs-machine-controllers

OCPBUGS-61702: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #128
OCPBUGS-54753: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.15 #115
OCPBUGS-41977: Update go.mod to fix CVE - 4.15 #85
OCPBUGS-26555: PowerVS: Bump powervs-utils to v0.0.0-20240105123432-7588e9595c17 #72
Full changelog

prometheus

OCPBUGS-56740: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #256
OCPBUGS-43669: fix(discovery): Handle cache.DeletedFinalStateUnknown in node informers’ DeleteFunc #233
Full changelog

prometheus-alertmanager

OCPBUGS-77058: Include go-verify-deps expected files in gitignore #117
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-38400: feat: sync proxy settings in Alertmanager configuration #300
OCPBUGS-36719: add proxyURL validation for smon,pmon and probe #298
OCPBUGS-29180: fix: convert continue field between v1beta1 and v1alpha1 #276
OCPBUGS-29509: fix: don’t fail metadata transform on unknown types (#6298) #278
Full changelog

service-ca-operator

OCPBUGS-68019: update logrus to v1.9.1 #321
OCPBUGS-34797: set required-scc for openshift workloads #243
OCPBUGS-24107: Updating ose-service-ca-operator-container image to be consistent with ART #226
Full changelog

telemeter

OCPBUGS-34831: fix issuer check during JWT authentication for 4.15 #538
: OCPBUGS-35076: Release Fix CVE go-jose #542
OCPBUGS-32890: CVE-2024-28180 bump go-jose to v3.0.3 #531
OCPBUGS-24153: Updating telemeter-container image to be consistent with ART #496
OCPBUGS-24153: Force kill jobs after integration v2 test finish #515
Full changelog

tests

OCPBUGS-74300: Skip E2e: attach on previously attached volumes should work #30725
OCPBUGS-66329: Replace RunHostCmd with Exec function to censor bearer token being exposed #30528
OCPBUGS-57335: Fix regex parser for censoring private key #29913
OCPBUGS-61229: images/tests: Remove rteval #30207
OCPBUGS-57136: aws/edge: prevent test using unschedulable nodes #29897
OCPBUGS-55477: support provider type external #29739
NO-JIRA: Sync OWNERS from main branch #29856
OCPBUGS-55695: [build] Ensure Git Clone Does Not Run Privileged #29752
OCPBUGS-54769: Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29664
OCPBUGS-52582: Use payload pullspec for image info test #29590
OCPBUGS-41614: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token #29502
OCPBUGS-49647: Fixing build s2i ruby test data inline with latest ruby version(>=3.0) #29503
OCPBUGS-48749: Add/remove team members to the OWNERS file for Builds #29551
OCPBUGS-44106: Adjust createDNSPod() to support hypershift dual-stack test #29257
OCPBUGS-38086: vertical scaling test should not rely on CPMS replicas #28985
OCPBUGS-39136: Bump timeout for the pod-network-service endpoints check #29053
OCPBUGS-38787: [4.15] egressfirewall: skip ping tests in case of hypershift kubevirt on Azure infra #28994
OCPBUGS-36264: add Proxy config #28912
OCPBUGS-37630: remove unused in-cluster monitoring code #28956
#28746 FIX [release-4.15] OCPBUGS-33023: update egressFWTestE2E image which contains ping binary #28898
OCPBUGS-36724: Removes dependency on samples operator images #28927
OCPBUGS-36319: Only look for thanos connections to platform monitoring stack #28915
OCPBUGS-34949: test/extended: skip etcd leader change check on hypershift #28919
OCPBUGS-28928: Add test for UpgradeValidation contention #28820
OCPBUGS-33368: [release-4.15] monitor test service-type-load-balancer-availability setup fails frequently in 4.14 & 4.15 PowerVS CI jobs #28821
#28776 FIX [release-4.15] OCPBUGS-33368: monitor test fix to wait before connecting to a non-existent dns on PowerVS and IBMCloud platforms #28791
OCPBUGS-26520: Kuryr: Ignore Upgradeable=False on operators tests #28512
OCPBUGS-33347: Provide SCC access via RBAC #28780
OCPBUGS-33541: Adjust the method of get the apiServer (release-4.15) #28762
OCPBUGS-33473: [release-4.15] MULTIARCH-4352: Censor private key from pod dump logs #28666
: OCPBUGS-32554: Also rely on oomkilled exit code 137 in build test #28724
OCPBUGS-31726: Use centos7 tag instead of latest for cmd images tests #28688
OCPBUGS-30892: fix panic on non-standard node-role labels #28656
OCPNODE-2101: add kube-rbac-proxy-crio toleration change #28637
OCPBUGS-30161: Skip tests for image-registry operator with single replica #28633
OCPBUGS-29927: Only extract node role from properly formatted node-role label #28615
TRT-1512: Add debug messages to debug openshift-tests hang #28610
OCPBUGS-27847: Do not assume there is just a single kubelet systemd service #28545
OCPBUGS-29031: Replace ‘coreydaley’ with ‘sayan-biswas’ #28573
OCPBUGS-26487: Increase timeout for pod-network-service #28508
OCPBUGS-27934: fix panic in service-poller #28550
OCPBUGS-26960: updated timeout to 3 seconds to account for network timing issues #28519
OCPBUGS-27373: pathologicalevents: fix regex in LeakyStatefulsetEvents matcher and add test #28549
OCPBUGS-27348: pkg/monitortests/clusterversionoperator: Add an exception for ingress going Available=False on IngressUnavailable #28531
fix jira components to match actual jira components #28455
OCPBUGS-27373: pathologicalevents: Ignore leaky RecreatingTerminatedP… #28533
OCPBUGS-27217: [4.15] Live migration suite e2e #28524
OCPBUGS-26043: Adding test case for when exceed openshift.io/image-tags will ban to … #28492
OCPBUGS-25724: Cherrypick Ruby 3.0 ImageStream Fix #28483
TRT-1408: Disable TopologyAwareHintsDisabled check whenever NoExecuteTaintManag… #28520
OCPBUGS-26239: Properly ignore kube guard probe events #28504
OCPBUGS-26206: Update cluster-monitoring-operator request limits #28506
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-78030: hermetic migration 4.15 #108
OCPBUGS-37659: Bump otelgrpc to v0.49.0 #71
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-78021: hermetic migration 4.15 #87
OCPBUGS-61654: Fix unit tests #73
OCPBUGS-30117: manifests: Add in CustomNoUpgrade #38
OCPBUGS-26476: UPSTREAM: <carry>: bump x/crypto #35
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-68022: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 #159
OCPBUGS-33604: FailedPrecondition volume does not appear staged #118
OCPBUGS-26013: Revert “Merge pull request #97 from jsafrane/rebase-v3.1.1” #110
OCPBUGS-26074, OCPBUGS-26075, OCPBUGS-26076: [release-4.15]: Fix CVE-2023-45142 and CVE-2023-47108 #109
OCPBUGS-25856: UPSTREAM: 2714: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #107
Full changelog

vsphere-csi-driver-operator

OCPBUGS-68020, OCPBUGS-68024: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 #323
OCPBUGS-28817: Mark the operator as Disabled on connection error #219
OCPBUGS-27378: Rerun checks on reconnect #216
OCPBUGS-26409: CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 #207
OCPBUGS-26013: Enable new features to prevent CSI driver from crash looping (revert OCPBUGS-23970) #205
OCPBUGS-25355: setting TLSSecurityProfile with no minTLSVersion crashes controller #204
OCPBUGS-25161: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #200
Full changelog

vsphere-problem-detector

OCPBUGS-68031: bump github.com/sirupsen/logrus to v1.9.3 #201
OCPBUGS-37760: Drop event when CheckDefaultDatastore fails #170
OCPBUGS-35732: Fix missing failure-domains #161
OCPBUGS-25648: Fix VPD crash when vm is not found #149
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Red Hat Enterprise Linux CoreOS (`rhel-coreos`)

Package List

cri-o-1.28.11-13.rhaos4.15.gitf722b2f.el9
kernel-5.14.0-284.173.1.el9_2
openshift-kubelet-
systemd-252-14.el9_2.10

Full list (521 packages)

NetworkManager-1:1.42.2-32.el9_2
NetworkManager-cloud-setup-1:1.42.2-32.el9_2
NetworkManager-libnm-1:1.42.2-32.el9_2
NetworkManager-ovs-1:1.42.2-32.el9_2
NetworkManager-team-1:1.42.2-32.el9_2
NetworkManager-tui-1:1.42.2-32.el9_2
WALinuxAgent-udev-2.7.0.6-9.el9_2.1
aardvark-dns-2:1.5.0-2.el9
acl-2.3.1-3.el9
adcli-0.9.2-1.el9
afterburn-5.4.3-2.rhaos4.15.el9
afterburn-dracut-5.4.3-2.rhaos4.15.el9
alternatives-1.20-2.el9
attr-2.5.1-3.el9
audit-3.0.7-103.el9
audit-libs-3.0.7-103.el9
authselect-1.2.6-1.el9
authselect-libs-1.2.6-1.el9
avahi-libs-0.8-12.el9_2.1
basesystem-11-13.el9
bash-5.1.8-6.el9_1
bash-completion-1:2.11-4.el9
bind-libs-32:9.16.23-11.el9_2.9
bind-license-32:9.16.23-11.el9_2.9
bind-utils-32:9.16.23-11.el9_2.9
bootupd-0.2.18-1.el9
bsdtar-3.5.3-5.el9_2.2
bubblewrap-0.4.1-7.el9_2
bzip2-1.0.8-8.el9
bzip2-libs-1.0.8-8.el9
c-ares-1.17.1-5.el9_2.2
ca-certificates-2025.2.80_v9.0.305-91.el9
checkpolicy-3.5-1.el9
chrony-4.3-1.el9
cifs-utils-7.0-1.el9
clevis-18-110.el9
clevis-dracut-18-110.el9
clevis-luks-18-110.el9
clevis-systemd-18-110.el9
cloud-utils-growpart-0.33-1.el9
conmon-3:2.1.7-15.rhaos4.15.el9
conmon-rs-0.6.3-1.rhaos4.15.el9
conntrack-tools-1.4.7-2.el9
console-login-helper-messages-0.21.3-1.el9
console-login-helper-messages-issuegen-0.21.3-1.el9
console-login-helper-messages-profile-0.21.3-1.el9
container-selinux-3:2.229.0-1.el9_2
containernetworking-plugins-1:1.2.0-3.el9_2.2
containers-common-3:1-64.rhaos4.15.el9
coreos-installer-0.17.0-5.rhaos4.15.el9
coreos-installer-bootinfra-0.17.0-5.rhaos4.15.el9
coreutils-8.32-34.el9
coreutils-common-8.32-34.el9
cpio-2.13-16.el9
cracklib-2.9.6-27.el9
cracklib-dicts-2.9.6-27.el9
cri-o-1.28.11-13.rhaos4.15.gitf722b2f.el9
cri-tools-1.28.0-8.el9
criu-3.17-5.el9_2
criu-libs-3.17-5.el9_2
crun-1.17-2.rhaos4.15.el9
crypto-policies-20221215-1.git9a18988.el9_2.2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.2
cryptsetup-2.6.0-2.el9
cryptsetup-libs-2.6.0-2.el9
curl-7.76.1-23.el9_2.8
cyrus-sasl-gssapi-2.1.27-21.el9
cyrus-sasl-lib-2.1.27-21.el9
dbus-1:1.12.20-7.el9_2.1
dbus-broker-28-7.el9
dbus-common-1:1.12.20-7.el9_2.1
dbus-libs-1:1.12.20-7.el9_2.1
device-mapper-9:1.02.187-7.el9_2.2
device-mapper-event-9:1.02.187-7.el9_2.2
device-mapper-event-libs-9:1.02.187-7.el9_2.2
device-mapper-libs-9:1.02.187-7.el9_2.2
device-mapper-multipath-0.8.7-20.el9
device-mapper-multipath-libs-0.8.7-20.el9
device-mapper-persistent-data-0.9.0-13.el9
diffutils-3.7-12.el9
dmidecode-1:3.3-7.el9_2.1
dnsmasq-2.85-6.el9_2.4
dosfstools-4.2-3.el9
dracut-057-25.git20250717.el9_2.1
dracut-network-057-25.git20250717.el9_2.1
dracut-squash-057-25.git20250717.el9_2.1
e2fsprogs-1.46.5-3.el9
e2fsprogs-libs-1.46.5-3.el9
efi-filesystem-6-2.el9_0
efibootmgr-16-12.el9
efivar-libs-38-3.el9
elfutils-default-yama-scope-0.188-3.el9
elfutils-libelf-0.188-3.el9
elfutils-libs-0.188-3.el9
ethtool-2:5.16-3.el9_2
expat-2.5.0-1.el9_2.3
file-5.39-12.1.el9_2
file-libs-5.39-12.1.el9_2
filesystem-3.16-2.el9
findutils-1:4.8.0-5.el9
firewalld-filesystem-1.2.1-1.el9
flashrom-1.2-10.el9
fstrm-0.6.1-3.el9
fuse-2.9.9-15.el9
fuse-common-3.10.2-5.el9
fuse-libs-2.9.9-15.el9
fuse-overlayfs-1.11-1.el9_2
fuse3-3.10.2-5.el9
fuse3-libs-3.10.2-5.el9
fwupd-1.8.10-2.el9
fwupd-plugin-flashrom-1.8.10-2.el9
gawk-5.1.0-6.el9
gawk-all-langpacks-5.1.0-6.el9
gdbm-libs-1:1.19-4.el9
gdisk-1.0.7-5.el9
geolite2-city-20191217-6.el9
geolite2-country-20191217-6.el9
gettext-0.21-7.el9
gettext-libs-0.21-7.el9
git-core-2.39.5-1.el9_2.2
glib2-2.68.4-7.el9_2.5
glibc-2.34-60.el9_2.17
glibc-common-2.34-60.el9_2.17
glibc-gconv-extra-2.34-60.el9_2.17
glibc-minimal-langpack-2.34-60.el9_2.17
glusterfs-6.0-57.4.el9
glusterfs-client-xlators-6.0-57.4.el9
glusterfs-fuse-6.0-57.4.el9
glusterfs-libs-6.0-57.4.el9
gmp-1:6.2.0-10.el9
gnupg2-2.3.3-2.el9_2.1
gnutls-3.7.6-21.el9_2.5
gpgme-1.15.1-6.el9
grep-3.6-5.el9
groff-base-1.22.4-10.el9
grub2-common-1:2.06-61.el9_2.12
grub2-efi-x64-1:2.06-61.el9_2.12
grub2-pc-1:2.06-61.el9_2.12
grub2-pc-modules-1:2.06-61.el9_2.12
grub2-tools-1:2.06-61.el9_2.12
grub2-tools-minimal-1:2.06-61.el9_2.12
gssproxy-0.8.4-5.el9_2
gzip-1.12-1.el9
hostname-3.23-6.el9
hwdata-0.348-9.7.el9
ignition-2.16.2-7.rhaos4.15.el9
info-6.7-15.el9
inih-49-6.el9
initscripts-service-10.11.5-1.el9
ipcalc-1.0.0-5.el9
iproute-6.1.0-1.el9
iproute-tc-6.1.0-1.el9
iptables-libs-1.8.8-6.el9_2.3
iptables-nft-1.8.8-6.el9_2.3
iputils-20210202-8.el9_2.4
irqbalance-2:1.9.0-3.el9_2.1
iscsi-initiator-utils-6.2.1.4-3.git2a8f9d8.el9
iscsi-initiator-utils-iscsiuio-6.2.1.4-3.git2a8f9d8.el9
isns-utils-libs-0.101-4.el9
jansson-2.14-1.el9
jose-11-3.el9
jq-1.6-15.el9_2.3
json-c-0.14-11.el9
json-glib-1.6.6-1.el9
kbd-2.4.0-8.el9
kbd-misc-2.4.0-8.el9
kernel-5.14.0-284.173.1.el9_2
kernel-core-5.14.0-284.173.1.el9_2
kernel-modules-5.14.0-284.173.1.el9_2
kernel-modules-core-5.14.0-284.173.1.el9_2
kernel-modules-extra-5.14.0-284.173.1.el9_2
kexec-tools-2.0.25-13.el9_2.4
keyutils-1.6.3-1.el9
keyutils-libs-1.6.3-1.el9
kmod-28-7.el9
kmod-libs-28-7.el9
kpartx-0.8.7-20.el9
krb5-libs-1.20.1-9.el9_2.4
less-590-3.el9_2
libacl-2.3.1-3.el9
libaio-0.3.111-13.el9
libarchive-3.5.3-5.el9_2.2
libassuan-2.5.5-3.el9
libattr-2.5.1-3.el9
libbasicobjects-0.1.1-53.el9
libblkid-2.37.4-11.el9_2
libbpf-2:1.0.0-2.el9
libbrotli-1.0.9-6.el9_2.1
libcap-2.48-9.el9_2.1
libcap-ng-0.8.2-7.el9
libcbor-0.7.0-5.el9
libcollection-0.7.0-53.el9
libcom_err-1.46.5-3.el9
libcurl-7.76.1-23.el9_2.8
libdaemon-0.14-23.el9
libdb-5.3.28-53.el9
libdhash-0.5.0-53.el9
libdrm-2.4.114-1.el9
libeconf-0.4.1-3.el9_2
libedit-3.1-37.20210216cvs.el9
libev-4.33-5.el9
libevent-2.1.12-6.el9
libfdisk-2.37.4-11.el9_2
libffi-3.4.2-7.el9
libfido2-1.6.0-7.el9
libgcab1-1.4-6.el9
libgcc-11.3.1-4.4.el9_2
libgcrypt-1.10.0-10.el9_2.1
libgomp-11.3.1-4.4.el9_2
libgpg-error-1.42-5.el9
libgudev-237-1.el9
libgusb-0.3.8-1.el9
libibverbs-44.0-2.el9
libicu-67.1-10.el9_2
libidn2-2.3.0-7.el9
libini_config-1.3.1-53.el9
libipa_hbac-2.8.2-5.el9_2.6
libjcat-0.1.6-3.el9
libjose-11-3.el9
libkcapi-1.3.1-3.el9
libkcapi-hmaccalc-1.3.1-3.el9
libksba-1.5.1-6.el9_1
libldb-2.6.1-1.el9
libluksmeta-9-12.el9
libmaxminddb-1.5.2-3.el9
libmicrohttpd-1:0.9.72-4.el9
libmnl-1.0.4-15.el9
libmodulemd-2.13.0-2.el9
libmount-2.37.4-11.el9_2
libmspack-0.10.1-0.7.alpha.el9
libndp-1.8-5.el9_2
libnet-1.2-6.el9
libnetfilter_conntrack-1.0.9-1.el9
libnetfilter_cthelper-1.0.0-22.el9
libnetfilter_cttimeout-1.0.0-19.el9
libnetfilter_queue-1.0.5-1.el9
libnfnetlink-1.0.1-21.el9
libnfsidmap-1:2.5.4-18.el9
libnftnl-1.2.2-1.el9
libnghttp2-1.43.0-5.el9_2.4
libnl3-3.7.0-1.el9
libnl3-cli-3.7.0-1.el9
libnvme-1.2-3.el9_2
libpath_utils-0.2.1-53.el9
libpcap-14:1.10.0-4.el9
libpciaccess-0.16-6.el9
libpkgconf-1.7.3-10.el9
libpsl-0.21.1-5.el9
libpwquality-1.4.4-8.el9
libref_array-0.1.5-53.el9
librepo-1.14.5-1.el9
libreport-filesystem-2.15.2-6.el9
librhsm-0.0.3-7.el9_2.1
libseccomp-2.5.2-2.el9
libselinux-3.5-1.el9
libselinux-utils-3.5-1.el9
libsemanage-3.5-1.el9
libsepol-3.5-1.el9
libsigsegv-2.13-4.el9
libslirp-4.4.0-7.el9
libsmartcols-2.37.4-11.el9_2
libsmbclient-4.17.5-105.el9_2.4
libsmbios-2.4.3-4.el9
libsolv-0.7.22-4.el9
libss-1.46.5-3.el9
libssh-0.10.4-9.el9_2.2
libssh-config-0.10.4-9.el9_2.2
libsss_certmap-2.8.2-5.el9_2.6
libsss_idmap-2.8.2-5.el9_2.6
libsss_nss_idmap-2.8.2-5.el9_2.6
libsss_sudo-2.8.2-5.el9_2.6
libstdc++-11.3.1-4.4.el9_2
libtalloc-2.3.4-1.el9
libtasn1-4.16.0-8.el9_2.1
libtdb-1.4.7-1.el9
libteam-1.31-16.el9_1
libtevent-0.13.0-1.el9
libtirpc-1.3.3-1.el9
libtool-ltdl-2.4.6-45.el9
libunistring-0.9.10-15.el9
libusbx-1.0.26-1.el9
libuser-0.63-12.el9
libutempter-1.2.1-6.el9
libuuid-2.37.4-11.el9_2
libuv-1:1.42.0-1.el9
libverto-0.3.2-3.el9
libverto-libev-0.3.2-3.el9
libwbclient-4.17.5-105.el9_2.4
libxcrypt-4.4.18-3.el9
libxcrypt-compat-4.4.18-3.el9
libxml2-2.9.13-3.el9_2.10
libxmlb-0.3.10-1.el9
libxslt-1.1.34-11.el9_2
libyaml-0.2.5-7.el9
libzstd-1.5.1-2.el9
linux-firmware-20250212-138.7.el9_2
linux-firmware-whence-20250212-138.7.el9_2
lmdb-libs-0.9.29-3.el9
logrotate-3.18.0-8.el9
lsof-4.94.0-3.el9
lua-libs-5.4.4-3.el9
luksmeta-9-12.el9
lvm2-9:2.03.17-7.el9_2.2
lvm2-libs-9:2.03.17-7.el9_2.2
lz4-libs-1.9.3-5.el9
lzo-2.10-7.el9
mdadm-4.2-9.el9_2
microcode_ctl-4:20220809-2.20250512.1.el9_2
mokutil-2:0.6.0-4.el9
mpfr-4.1.0-7.el9
nano-5.6.1-5.el9
ncurses-6.2-8.20210508.el9_2.2
ncurses-base-6.2-8.20210508.el9_2.2
ncurses-libs-6.2-8.20210508.el9_2.2
net-tools-2.0-0.62.20160912git.el9
netavark-2:1.5.1-3.el9_2
nettle-3.8-3.el9_0
newt-0.52.21-11.el9
nfs-utils-1:2.5.4-18.el9
nftables-1:1.0.4-11.el9_2.2
nmap-ncat-3:7.91-12.el9
nmstate-2.2.39-3.el9_2
npth-1.6-8.el9
nss-altfiles-2.18.1-20.el9
numactl-libs-2.0.14-9.el9
nvme-cli-2.2.1-5.el9_2
oniguruma-6.9.6-1.el9.5
open-vm-tools-12.1.5-1.el9_2.5
openldap-2.6.2-3.el9_2.1
openshift-clients-4.15.0-202507041136.p0.g8231637.assembly.stream.el9
openshift-hyperkube-4.15.0-202602130120.p2.g5cb2ef4.assembly.stream.el9
openssh-8.7p1-30.el9_2.11
openssh-clients-8.7p1-30.el9_2.11
openssh-server-8.7p1-30.el9_2.11
openssl-1:3.0.7-18.el9_2.3
openssl-fips-provider-3.0.7-1.el9_2.1
openssl-fips-provider-so-3.0.7-1.el9_2.1
openssl-libs-1:3.0.7-18.el9_2.3
openvswitch-selinux-extra-policy-1.0-39.el9fdp
openvswitch3.3-3.3.7-11.el9fdp
os-prober-1.77-10.el9
ose-aws-ecr-image-credential-provider-4.15.0-202507041136.p0.gfd77d92.assembly.stream.el9
ose-azure-acr-image-credential-provider-4.15.0-202507041136.p0.g0d799a2.assembly.stream.el9
ose-gcp-gcr-image-credential-provider-4.15.0-202507041136.p0.gfc50272.assembly.stream.el9
ostree-2023.8-4.el9
ostree-grub2-2023.8-4.el9
ostree-libs-2023.8-4.el9
p11-kit-0.24.1-2.el9
p11-kit-trust-0.24.1-2.el9
pam-1.5.1-15.el9_2.2
passt-0^20230222.g4ddbcb9-4.el9_2
passt-selinux-0^20230222.g4ddbcb9-4.el9_2
passwd-0.80-12.el9
pciutils-3.7.0-5.el9
pciutils-libs-3.7.0-5.el9
pcre-8.44-3.el9.3
pcre2-10.40-2.el9
pcre2-syntax-10.40-2.el9
perl-AutoLoader-5.74-480.el9
perl-B-1.80-480.el9
perl-Carp-1.50-460.el9
perl-Class-Struct-0.66-480.el9
perl-Data-Dumper-2.174-462.el9
perl-Digest-1.19-4.el9
perl-Digest-MD5-2.58-4.el9
perl-Encode-4:3.08-462.el9
perl-Errno-1.30-480.el9
perl-Exporter-5.74-461.el9
perl-Fcntl-1.13-480.el9
perl-File-Basename-2.85-480.el9
perl-File-Path-2.18-4.el9
perl-File-Temp-1:0.231.100-4.el9
perl-File-stat-1.09-480.el9
perl-FileHandle-2.03-480.el9
perl-Getopt-Long-1:2.52-4.el9
perl-Getopt-Std-1.12-480.el9
perl-HTTP-Tiny-0.076-461.el9_2
perl-IO-1.43-480.el9
perl-IO-Socket-IP-0.41-5.el9
perl-IO-Socket-SSL-2.073-1.el9
perl-IPC-Open3-1.21-480.el9
perl-MIME-Base64-3.16-4.el9
perl-Mozilla-CA-20200520-6.el9
perl-NDBM_File-1.15-480.el9
perl-Net-SSLeay-1.92-2.el9
perl-POSIX-1.94-480.el9
perl-PathTools-3.78-461.el9
perl-Pod-Escapes-1:1.07-460.el9
perl-Pod-Perldoc-3.28.01-461.el9
perl-Pod-Simple-1:3.42-4.el9
perl-Pod-Usage-4:2.01-4.el9
perl-Scalar-List-Utils-4:1.56-461.el9
perl-SelectSaver-1.02-480.el9
perl-Socket-4:2.031-4.el9
perl-Storable-1:3.21-460.el9
perl-Symbol-1.08-480.el9
perl-Term-ANSIColor-5.01-461.el9
perl-Term-Cap-1.17-460.el9
perl-Text-ParseWords-3.30-460.el9
perl-Text-Tabs+Wrap-2013.0523-460.el9
perl-Time-Local-2:1.300-7.el9
perl-URI-5.09-3.el9
perl-base-2.27-480.el9
perl-constant-1.33-461.el9
perl-if-0.60.800-480.el9
perl-interpreter-4:5.32.1-480.el9
perl-libnet-3.13-4.el9
perl-libs-4:5.32.1-480.el9
perl-mro-1.23-480.el9
perl-overload-1.31-480.el9
perl-overloading-0.02-480.el9
perl-parent-1:0.238-460.el9
perl-podlators-1:4.14-460.el9
perl-subs-1.03-480.el9
perl-vars-1.05-480.el9
pigz-2.5-4.el9
pkgconf-1.7.3-10.el9
pkgconf-m4-1.7.3-10.el9
pkgconf-pkg-config-1.7.3-10.el9
podman-3:4.4.1-36.rhaos4.15.el9
policycoreutils-3.5-1.el9
policycoreutils-python-utils-3.5-1.el9
polkit-0.117-11.el9_2.1
polkit-libs-0.117-11.el9_2.1
polkit-pkla-compat-0.1-21.el9
popt-1.18-8.el9
procps-ng-3.3.17-11.el9
protobuf-c-1.3.3-12.el9
psmisc-23.4-3.el9
publicsuffix-list-dafsa-20210518-3.el9
python-unversioned-command-3.9.16-1.el9_2.14
python3-3.9.16-1.el9_2.14
python3-audit-3.0.7-103.el9
python3-distro-1.5.0-7.el9
python3-libs-3.9.16-1.el9_2.14
python3-libselinux-3.5-1.el9
python3-libsemanage-3.5-1.el9
python3-pip-wheel-21.2.3-6.el9
python3-policycoreutils-3.5-1.el9
python3-pyyaml-5.4.1-6.el9
python3-setools-4.4.1-1.el9
python3-setuptools-53.0.0-12.el9_2.3
python3-setuptools-wheel-53.0.0-12.el9_2.3
qemu-guest-agent-17:7.2.0-14.el9_2.26
quota-1:4.06-6.el9
quota-nls-1:4.06-6.el9
rdma-core-44.0-2.el9
readline-8.1-4.el9
redhat-release-9.2-0.15.el9
redhat-release-eula-9.2-0.15.el9
rpcbind-1.2.6-5.el9
rpm-4.16.1.3-24.el9_2
rpm-libs-4.16.1.3-24.el9_2
rpm-ostree-2024.3-3.el9_4
rpm-ostree-libs-2024.3-3.el9_4
rpm-plugin-selinux-4.16.1.3-24.el9_2
rsync-3.2.3-19.el9_2.3
runc-4:1.2.9-1.rhaos4.16.el9
samba-client-libs-4.17.5-105.el9_2.4
samba-common-4.17.5-105.el9_2.4
samba-common-libs-4.17.5-105.el9_2.4
sed-4.8-9.el9
selinux-policy-38.1.11-2.el9_2.10
selinux-policy-targeted-38.1.11-2.el9_2.10
setup-2.13.7-9.el9
sg3_utils-1.47-9.el9
sg3_utils-libs-1.47-9.el9
shadow-utils-2:4.9-6.el9
shadow-utils-subid-2:4.9-6.el9
shared-mime-info-2.1-5.el9
shim-x64-16.1-8.el9_2
skopeo-2:1.11.4-0.1.el9_2.5
slang-2.3.2-11.el9
slirp4netns-1.2.0-3.el9
snappy-1.1.8-8.el9
socat-1.7.4.1-5.el9_2.2
sqlite-libs-3.34.1-6.el9_2.2
squashfs-tools-4.4-8.git1.el9
ssh-key-dir-0.1.4-1.el9
sssd-2.8.2-5.el9_2.6
sssd-ad-2.8.2-5.el9_2.6
sssd-client-2.8.2-5.el9_2.6
sssd-common-2.8.2-5.el9_2.6
sssd-common-pac-2.8.2-5.el9_2.6
sssd-ipa-2.8.2-5.el9_2.6
sssd-krb5-2.8.2-5.el9_2.6
sssd-krb5-common-2.8.2-5.el9_2.6
sssd-ldap-2.8.2-5.el9_2.6
sssd-nfs-idmap-2.8.2-5.el9_2.6
sssd-proxy-2.8.2-5.el9_2.6
stalld-1.17.1-1.el9_1
strace-5.18-2.el9
subscription-manager-rhsm-certificates-20220623-1.el9
sudo-1.9.5p2-9.el9_2.4
systemd-252-14.el9_2.10
systemd-journal-remote-252-14.el9_2.10
systemd-libs-252-14.el9_2.10
systemd-pam-252-14.el9_2.10
systemd-rpm-macros-252-14.el9_2.10
systemd-udev-252-14.el9_2.10
tar-2:1.34-6.el9_2.1
teamd-1.31-16.el9_1
tmux-3.2a-4.el9
toolbox-0.1.2-1.rhaos4.15.el9
tpm2-tools-5.2-2.el9_1
tpm2-tss-3.0.3-8.el9
tzdata-2026b-1.el9_0
unbound-libs-1.16.2-3.el9_2.5
userspace-rcu-0.12.1-6.el9
util-linux-2.37.4-11.el9_2
util-linux-core-2.37.4-11.el9_2
vim-minimal-2:8.2.2637-20.el9_2.1
which-2.21-28.el9
xfsprogs-5.14.2-2.el9_2
xmlsec1-1.2.29-9.el9
xmlsec1-openssl-1.2.29-9.el9
xz-5.2.5-8.el9_0
xz-libs-5.2.5-8.el9_0
yajl-2.1.0-21.el9_0
zlib-1.2.11-39.el9
zstd-1.5.1-2.el9

Changed:

NetworkManager 1:1.46.0-38.el9_4 → 1:1.42.2-32.el9_2
NetworkManager-cloud-setup 1:1.46.0-38.el9_4 → 1:1.42.2-32.el9_2
NetworkManager-libnm 1:1.46.0-38.el9_4 → 1:1.42.2-32.el9_2
NetworkManager-ovs 1:1.46.0-38.el9_4 → 1:1.42.2-32.el9_2
NetworkManager-team 1:1.46.0-38.el9_4 → 1:1.42.2-32.el9_2
NetworkManager-tui 1:1.46.0-38.el9_4 → 1:1.42.2-32.el9_2
WALinuxAgent-udev 2.13.1.1-1.el9_4 → 2.7.0.6-9.el9_2.1
aardvark-dns 2:1.10.0-3.el9_4 → 2:1.5.0-2.el9
acl 2.3.1-4.el9 → 2.3.1-3.el9
afterburn 5.5.1-2.el9 → 5.4.3-2.rhaos4.15.el9
afterburn-dracut 5.5.1-2.el9 → 5.4.3-2.rhaos4.15.el9
alternatives 1.24-1.el9_4.1 → 1.20-2.el9
audit 3.1.2-2.el9 → 3.0.7-103.el9
audit-libs 3.1.2-2.el9 → 3.0.7-103.el9
authselect 1.2.6-2.el9 → 1.2.6-1.el9
authselect-libs 1.2.6-2.el9 → 1.2.6-1.el9
avahi-libs 0.8-20.el9 → 0.8-12.el9_2.1
bash 5.1.8-9.el9 → 5.1.8-6.el9_1
bash-completion 1:2.11-5.el9 → 1:2.11-4.el9
bind-libs 32:9.16.23-18.el9_4.10 → 32:9.16.23-11.el9_2.9
bind-license 32:9.16.23-18.el9_4.10 → 32:9.16.23-11.el9_2.9
bind-utils 32:9.16.23-18.el9_4.10 → 32:9.16.23-11.el9_2.9
bsdtar 3.5.3-5.el9_4 → 3.5.3-5.el9_2.2
bubblewrap 0.4.1-7.el9_4 → 0.4.1-7.el9_2
bzip2 1.0.8-8.el9_4.1 → 1.0.8-8.el9
bzip2-libs 1.0.8-8.el9_4.1 → 1.0.8-8.el9
c-ares 1.19.1-2.el9_4 → 1.17.1-5.el9_2.2
checkpolicy 3.6-1.el9 → 3.5-1.el9
chrony 4.5-1.el9 → 4.3-1.el9
clevis 18-112.el9 → 18-110.el9
clevis-dracut 18-112.el9 → 18-110.el9
clevis-luks 18-112.el9 → 18-110.el9
clevis-systemd 18-112.el9 → 18-110.el9
conmon 3:2.1.10-6.rhaos4.16.el9 → 3:2.1.7-15.rhaos4.15.el9
conmon-rs 0.6.3-1.rhaos4.16.el9 → 0.6.3-1.rhaos4.15.el9
conntrack-tools 1.4.7-3.el9_4 → 1.4.7-2.el9
container-selinux 4:2.237.0-2.rhaos4.16.el9 → 3:2.229.0-1.el9_2
containernetworking-plugins 1:1.4.0-6.el9_4.3 → 1:1.2.0-3.el9_2.2
containers-common 3:1-78.rhaos4.16.el9 → 3:1-64.rhaos4.15.el9
coreos-installer 0.21.0-5.el9_4 → 0.17.0-5.rhaos4.15.el9
coreos-installer-bootinfra 0.21.0-5.el9_4 → 0.17.0-5.rhaos4.15.el9
coreutils 8.32-35.el9 → 8.32-34.el9
coreutils-common 8.32-35.el9 → 8.32-34.el9
cri-o 1.29.13-11.rhaos4.16.git979a5e6.el9 → 1.28.11-13.rhaos4.15.gitf722b2f.el9
cri-tools 1.29.0-7.el9 → 1.28.0-8.el9
criu 3.19-1.2.el9_4 → 3.17-5.el9_2
criu-libs 3.19-1.2.el9_4 → 3.17-5.el9_2
crun 1.17-2.rhaos4.16.el9 → 1.17-2.rhaos4.15.el9
crypto-policies 20240202-1.git283706d.el9 → 20221215-1.git9a18988.el9_2.2
crypto-policies-scripts 20240202-1.git283706d.el9 → 20221215-1.git9a18988.el9_2.2
cryptsetup 2.6.0-3.el9 → 2.6.0-2.el9
cryptsetup-libs 2.6.0-3.el9 → 2.6.0-2.el9
curl 7.76.1-29.el9_4.3 → 7.76.1-23.el9_2.8
dbus 1:1.12.20-8.el9 → 1:1.12.20-7.el9_2.1
dbus-common 1:1.12.20-8.el9 → 1:1.12.20-7.el9_2.1
dbus-libs 1:1.12.20-8.el9 → 1:1.12.20-7.el9_2.1
device-mapper 9:1.02.197-2.el9 → 9:1.02.187-7.el9_2.2
device-mapper-event 9:1.02.197-2.el9 → 9:1.02.187-7.el9_2.2
device-mapper-event-libs 9:1.02.197-2.el9 → 9:1.02.187-7.el9_2.2
device-mapper-libs 9:1.02.197-2.el9 → 9:1.02.187-7.el9_2.2
device-mapper-multipath 0.8.7-27.el9_4.4 → 0.8.7-20.el9
device-mapper-multipath-libs 0.8.7-27.el9_4.4 → 0.8.7-20.el9
device-mapper-persistent-data 1.0.9-3.el9_4.1 → 0.9.0-13.el9
dmidecode 1:3.5-3.el9 → 1:3.3-7.el9_2.1
dnsmasq 2.85-16.el9_4 → 2.85-6.el9_2.4
dracut 057-54.git20250423.el9_4.2 → 057-25.git20250717.el9_2.1
dracut-network 057-54.git20250423.el9_4.2 → 057-25.git20250717.el9_2.1
dracut-squash 057-54.git20250423.el9_4.2 → 057-25.git20250717.el9_2.1
e2fsprogs 1.46.5-5.el9 → 1.46.5-3.el9
e2fsprogs-libs 1.46.5-5.el9 → 1.46.5-3.el9
elfutils-default-yama-scope 0.190-2.el9 → 0.188-3.el9
elfutils-libelf 0.190-2.el9 → 0.188-3.el9
elfutils-libs 0.190-2.el9 → 0.188-3.el9
ethtool 2:6.2-1.el9 → 2:5.16-3.el9_2
expat 2.5.0-2.el9_4.3 → 2.5.0-1.el9_2.3
file 5.39-16.el9 → 5.39-12.1.el9_2
file-libs 5.39-16.el9 → 5.39-12.1.el9_2
findutils 1:4.8.0-6.el9 → 1:4.8.0-5.el9
firewalld-filesystem 1.3.4-1.el9 → 1.2.1-1.el9
fuse-common 3.10.2-8.el9 → 3.10.2-5.el9
fuse-overlayfs 1.13-1.el9 → 1.11-1.el9_2
fuse3 3.10.2-8.el9 → 3.10.2-5.el9
fuse3-libs 3.10.2-8.el9 → 3.10.2-5.el9
fwupd 1.9.13-2.el9 → 1.8.10-2.el9
fwupd-plugin-flashrom 1.9.13-2.el9 → 1.8.10-2.el9
gettext 0.21-8.el9 → 0.21-7.el9
gettext-libs 0.21-8.el9 → 0.21-7.el9
git-core 2.43.5-1.el9_4.3 → 2.39.5-1.el9_2.2
glib2 2.68.4-14.el9_4.6 → 2.68.4-7.el9_2.5
glibc 2.34-100.el9_4.12 → 2.34-60.el9_2.17
glibc-common 2.34-100.el9_4.12 → 2.34-60.el9_2.17
glibc-gconv-extra 2.34-100.el9_4.12 → 2.34-60.el9_2.17
glibc-minimal-langpack 2.34-100.el9_4.12 → 2.34-60.el9_2.17
gmp 1:6.2.0-13.el9 → 1:6.2.0-10.el9
gnupg2 2.3.3-4.el9_4.1 → 2.3.3-2.el9_2.1
gnutls 3.8.3-4.el9_4.5 → 3.7.6-21.el9_2.5
grub2-common 1:2.06-86.el9_4.5 → 1:2.06-61.el9_2.12
grub2-efi-x64 1:2.06-86.el9_4.5 → 1:2.06-61.el9_2.12
grub2-pc 1:2.06-86.el9_4.5 → 1:2.06-61.el9_2.12
grub2-pc-modules 1:2.06-86.el9_4.5 → 1:2.06-61.el9_2.12
grub2-tools 1:2.06-86.el9_4.5 → 1:2.06-61.el9_2.12
grub2-tools-minimal 1:2.06-86.el9_4.5 → 1:2.06-61.el9_2.12
gssproxy 0.8.4-6.el9 → 0.8.4-5.el9_2
hwdata 0.348-9.13.el9 → 0.348-9.7.el9
ignition 2.18.0-7.rhaos4.16.el9 → 2.16.2-7.rhaos4.15.el9
initscripts-service 10.11.6-1.el9 → 10.11.5-1.el9
iproute 6.2.0-6.el9_4 → 6.1.0-1.el9
iproute-tc 6.2.0-6.el9_4 → 6.1.0-1.el9
iptables-libs 1.8.10-5.el9_4 → 1.8.8-6.el9_2.3
iptables-nft 1.8.10-5.el9_4 → 1.8.8-6.el9_2.3
iputils 20210202-9.el9_4.5 → 20210202-8.el9_2.4
irqbalance 2:1.9.2-3.el9_4.3 → 2:1.9.0-3.el9_2.1
iscsi-initiator-utils 6.2.1.9-1.gita65a472.el9 → 6.2.1.4-3.git2a8f9d8.el9
iscsi-initiator-utils-iscsiuio 6.2.1.9-1.gita65a472.el9 → 6.2.1.4-3.git2a8f9d8.el9
jq 1.6-16.el9_4.2 → 1.6-15.el9_2.3
kbd 2.4.0-9.el9 → 2.4.0-8.el9
kbd-misc 2.4.0-9.el9 → 2.4.0-8.el9
kernel 5.14.0-427.130.1.el9_4 → 5.14.0-284.173.1.el9_2
kernel-core 5.14.0-427.130.1.el9_4 → 5.14.0-284.173.1.el9_2
kernel-modules 5.14.0-427.130.1.el9_4 → 5.14.0-284.173.1.el9_2
kernel-modules-core 5.14.0-427.130.1.el9_4 → 5.14.0-284.173.1.el9_2
kernel-modules-extra 5.14.0-427.130.1.el9_4 → 5.14.0-284.173.1.el9_2
kexec-tools 2.0.27-8.el9_4.5 → 2.0.25-13.el9_2.4
kmod 28-9.el9 → 28-7.el9
kmod-libs 28-9.el9 → 28-7.el9
kpartx 0.8.7-27.el9_4.4 → 0.8.7-20.el9
krb5-libs 1.21.1-2.el9_4.3 → 1.20.1-9.el9_2.4
less 590-4.el9_4 → 590-3.el9_2
libacl 2.3.1-4.el9 → 2.3.1-3.el9
libarchive 3.5.3-5.el9_4 → 3.5.3-5.el9_2.2
libblkid 2.37.4-18.el9 → 2.37.4-11.el9_2
libbpf 2:1.3.0-2.el9 → 2:1.0.0-2.el9
libbrotli 1.0.9-6.el9_4.1 → 1.0.9-6.el9_2.1
libcap 2.48-9.el9_4.1 → 2.48-9.el9_2.1
libcom_err 1.46.5-5.el9 → 1.46.5-3.el9
libcurl 7.76.1-29.el9_4.3 → 7.76.1-23.el9_2.8
libdrm 2.4.117-1.el9 → 2.4.114-1.el9
libedit 3.1-38.20210216cvs.el9 → 3.1-37.20210216cvs.el9
libevent 2.1.12-8.el9_4 → 2.1.12-6.el9
libfdisk 2.37.4-18.el9 → 2.37.4-11.el9_2
libffi 3.4.2-8.el9 → 3.4.2-7.el9
libfido2 1.13.0-2.el9 → 1.6.0-7.el9
libgcc 11.4.1-4.el9_4 → 11.3.1-4.4.el9_2
libgcrypt 1.10.0-10.el9_4.1 → 1.10.0-10.el9_2.1
libgomp 11.4.1-4.el9_4 → 11.3.1-4.4.el9_2
libgusb 0.3.8-2.el9 → 0.3.8-1.el9
libibverbs 48.0-2.el9_4 → 44.0-2.el9
libicu 67.1-10.el9_4 → 67.1-10.el9_2
libipa_hbac 2.9.4-6.el9_4.4 → 2.8.2-5.el9_2.6
libkcapi 1.4.0-2.el9 → 1.3.1-3.el9
libkcapi-hmaccalc 1.4.0-2.el9 → 1.3.1-3.el9
libldb 2.8.0-2.el9_4 → 2.6.1-1.el9
libmicrohttpd 1:0.9.72-5.el9 → 1:0.9.72-4.el9
libmnl 1.0.4-16.el9_4 → 1.0.4-15.el9
libmount 2.37.4-18.el9 → 2.37.4-11.el9_2
libndp 1.8-6.el9_4 → 1.8-5.el9_2
libnfsidmap 1:2.5.4-26.el9_4.3 → 1:2.5.4-18.el9
libnftnl 1.2.6-4.el9_4 → 1.2.2-1.el9
libnghttp2 1.43.0-5.el9_4.4 → 1.43.0-5.el9_2.4
libnl3 3.9.0-1.el9 → 3.7.0-1.el9
libnl3-cli 3.9.0-1.el9 → 3.7.0-1.el9
libnvme 1.6-1.el9 → 1.2-3.el9_2
librepo 1.14.5-2.el9 → 1.14.5-1.el9
librhsm 0.0.3-7.el9_3.1 → 0.0.3-7.el9_2.1
libselinux 3.6-1.el9 → 3.5-1.el9
libselinux-utils 3.6-1.el9 → 3.5-1.el9
libsemanage 3.6-2.1.el9_4 → 3.5-1.el9
libsepol 3.6-1.el9 → 3.5-1.el9
libsmartcols 2.37.4-18.el9 → 2.37.4-11.el9_2
libsmbclient 4.19.4-105.el9_4.3 → 4.17.5-105.el9_2.4
libsolv 0.7.24-2.el9 → 0.7.22-4.el9
libss 1.46.5-5.el9 → 1.46.5-3.el9
libssh 0.10.4-13.el9_4.2 → 0.10.4-9.el9_2.2
libssh-config 0.10.4-13.el9_4.2 → 0.10.4-9.el9_2.2
libsss_certmap 2.9.4-6.el9_4.4 → 2.8.2-5.el9_2.6
libsss_idmap 2.9.4-6.el9_4.4 → 2.8.2-5.el9_2.6
libsss_nss_idmap 2.9.4-6.el9_4.4 → 2.8.2-5.el9_2.6
libsss_sudo 2.9.4-6.el9_4.4 → 2.8.2-5.el9_2.6
libstdc++ 11.4.1-4.el9_4 → 11.3.1-4.4.el9_2
libtalloc 2.4.1-1.el9 → 2.3.4-1.el9
libtasn1 4.16.0-8.el9_4.1 → 4.16.0-8.el9_2.1
libtdb 1.4.9-1.el9 → 1.4.7-1.el9
libtevent 0.16.0-1.el9 → 0.13.0-1.el9
libtirpc 1.3.3-8.el9_4 → 1.3.3-1.el9
libuser 0.63-13.el9 → 0.63-12.el9
libuuid 2.37.4-18.el9 → 2.37.4-11.el9_2
libuv 1:1.42.0-2.el9_4 → 1:1.42.0-1.el9
libwbclient 4.19.4-105.el9_4.3 → 4.17.5-105.el9_2.4
libxml2 2.9.13-13.el9_4 → 2.9.13-3.el9_2.10
libxslt 1.1.34-14.el9_4 → 1.1.34-11.el9_2
linux-firmware 20250212-143.9.el9_4 → 20250212-138.7.el9_2
linux-firmware-whence 20250212-143.9.el9_4 → 20250212-138.7.el9_2
lua-libs 5.4.4-4.el9 → 5.4.4-3.el9
lvm2 9:2.03.23-2.el9 → 9:2.03.17-7.el9_2.2
lvm2-libs 9:2.03.23-2.el9 → 9:2.03.17-7.el9_2.2
mdadm 4.2-14.el9_4 → 4.2-9.el9_2
microcode_ctl 4:20230808-2.20260227.1.el9_4 → 4:20220809-2.20250512.1.el9_2
ncurses 6.2-10.20210508.el9_4.1 → 6.2-8.20210508.el9_2.2
ncurses-base 6.2-10.20210508.el9_4.1 → 6.2-8.20210508.el9_2.2
ncurses-libs 6.2-10.20210508.el9_4.1 → 6.2-8.20210508.el9_2.2
netavark 2:1.10.3-1.el9 → 2:1.5.1-3.el9_2
nettle 3.9.1-1.el9 → 3.8-3.el9_0
nfs-utils 1:2.5.4-26.el9_4.3 → 1:2.5.4-18.el9
nftables 1:1.0.9-1.el9_4.1 → 1:1.0.4-11.el9_2.2
nmap-ncat 3:7.92-1.el9 → 3:7.91-12.el9
nmstate 2.2.59-1.el9_4 → 2.2.39-3.el9_2
numactl-libs 2.0.16-3.el9 → 2.0.14-9.el9
nvme-cli 2.6-6.el9_4 → 2.2.1-5.el9_2
open-vm-tools 12.3.5-2.el9_4.1 → 12.1.5-1.el9_2.5
openldap 2.6.6-3.el9 → 2.6.2-3.el9_2.1
openshift-clients 4.16.0-202511271316.p2.g6f88b58.assembly.stream.el9 → 4.15.0-202507041136.p0.g8231637.assembly.stream.el9
openssh 8.7p1-38.el9_4.8 → 8.7p1-30.el9_2.11
openssh-clients 8.7p1-38.el9_4.8 → 8.7p1-30.el9_2.11
openssh-server 8.7p1-38.el9_4.8 → 8.7p1-30.el9_2.11
openssl 1:3.0.7-29.el9_4.2 → 1:3.0.7-18.el9_2.3
openssl-fips-provider 3.0.7-2.el9 → 3.0.7-1.el9_2.1
openssl-libs 1:3.0.7-29.el9_4.2 → 1:3.0.7-18.el9_2.3
os-prober 1.77-12.el9_4 → 1.77-10.el9
ose-aws-ecr-image-credential-provider 4.16.0-202606031028.p2.ga53e9de.assembly.stream.el9 → 4.15.0-202507041136.p0.gfd77d92.assembly.stream.el9
ose-azure-acr-image-credential-provider 4.16.0-202606031028.p2.ge5bac33.assembly.stream.el9 → 4.15.0-202507041136.p0.g0d799a2.assembly.stream.el9
ose-gcp-gcr-image-credential-provider 4.16.0-202606031028.p2.g26b43df.assembly.stream.el9 → 4.15.0-202507041136.p0.gfc50272.assembly.stream.el9
ostree 2024.6-6.el9_4 → 2023.8-4.el9
ostree-grub2 2024.6-6.el9_4 → 2023.8-4.el9
ostree-libs 2024.6-6.el9_4 → 2023.8-4.el9
p11-kit 0.25.3-2.el9 → 0.24.1-2.el9
p11-kit-trust 0.25.3-2.el9 → 0.24.1-2.el9
pam 1.5.1-24.el9_4.1 → 1.5.1-15.el9_2.2
passt 0^20231204.gb86afe3-3.el9_4 → 0^20230222.g4ddbcb9-4.el9_2
passt-selinux 0^20231204.gb86afe3-3.el9_4 → 0^20230222.g4ddbcb9-4.el9_2
pcre2 10.40-5.el9 → 10.40-2.el9
pcre2-syntax 10.40-5.el9 → 10.40-2.el9
perl-AutoLoader 5.74-481.el9_4.1 → 5.74-480.el9
perl-B 1.80-481.el9_4.1 → 1.80-480.el9
perl-Class-Struct 0.66-481.el9_4.1 → 0.66-480.el9
perl-Errno 1.30-481.el9_4.1 → 1.30-480.el9
perl-Fcntl 1.13-481.el9_4.1 → 1.13-480.el9
perl-File-Basename 2.85-481.el9_4.1 → 2.85-480.el9
perl-File-stat 1.09-481.el9_4.1 → 1.09-480.el9
perl-FileHandle 2.03-481.el9_4.1 → 2.03-480.el9
perl-Getopt-Std 1.12-481.el9_4.1 → 1.12-480.el9
perl-HTTP-Tiny 0.076-462.el9 → 0.076-461.el9_2
perl-IO 1.43-481.el9_4.1 → 1.43-480.el9
perl-IPC-Open3 1.21-481.el9_4.1 → 1.21-480.el9
perl-NDBM_File 1.15-481.el9_4.1 → 1.15-480.el9
perl-POSIX 1.94-481.el9_4.1 → 1.94-480.el9
perl-SelectSaver 1.02-481.el9_4.1 → 1.02-480.el9
perl-Symbol 1.08-481.el9_4.1 → 1.08-480.el9
perl-base 2.27-481.el9_4.1 → 2.27-480.el9
perl-if 0.60.800-481.el9_4.1 → 0.60.800-480.el9
perl-interpreter 4:5.32.1-481.el9_4.1 → 4:5.32.1-480.el9
perl-libs 4:5.32.1-481.el9_4.1 → 4:5.32.1-480.el9
perl-mro 1.23-481.el9_4.1 → 1.23-480.el9
perl-overload 1.31-481.el9_4.1 → 1.31-480.el9
perl-overloading 0.02-481.el9_4.1 → 0.02-480.el9
perl-subs 1.03-481.el9_4.1 → 1.03-480.el9
perl-vars 1.05-481.el9_4.1 → 1.05-480.el9
podman 4:4.9.4-20.rhaos4.16.el9 → 3:4.4.1-36.rhaos4.15.el9
policycoreutils 3.6-2.1.el9 → 3.5-1.el9
policycoreutils-python-utils 3.6-2.1.el9 → 3.5-1.el9
polkit 0.117-11.el9_4.1 → 0.117-11.el9_2.1
polkit-libs 0.117-11.el9_4.1 → 0.117-11.el9_2.1
procps-ng 3.3.17-14.el9 → 3.3.17-11.el9
protobuf-c 1.3.3-13.el9 → 1.3.3-12.el9
python-unversioned-command 3.9.18-3.el9_4.13 → 3.9.16-1.el9_2.14
python3 3.9.18-3.el9_4.13 → 3.9.16-1.el9_2.14
python3-audit 3.1.2-2.el9 → 3.0.7-103.el9
python3-libs 3.9.18-3.el9_4.13 → 3.9.16-1.el9_2.14
python3-libselinux 3.6-1.el9 → 3.5-1.el9
python3-libsemanage 3.6-2.1.el9_4 → 3.5-1.el9
python3-pip-wheel 21.2.3-8.el9 → 21.2.3-6.el9
python3-policycoreutils 3.6-2.1.el9 → 3.5-1.el9
python3-setools 4.4.4-1.el9 → 4.4.1-1.el9
python3-setuptools 53.0.0-12.el9_4.2 → 53.0.0-12.el9_2.3
python3-setuptools-wheel 53.0.0-12.el9_4.2 → 53.0.0-12.el9_2.3
qemu-guest-agent 17:8.2.0-11.el9_4.21 → 17:7.2.0-14.el9_2.26
rdma-core 48.0-2.el9_4 → 44.0-2.el9
redhat-release 9.4-0.5.el9 → 9.2-0.15.el9
redhat-release-eula 9.4-0.5.el9 → 9.2-0.15.el9
rpcbind 1.2.6-7.el9 → 1.2.6-5.el9
rpm 4.16.1.3-29.el9 → 4.16.1.3-24.el9_2
rpm-libs 4.16.1.3-29.el9 → 4.16.1.3-24.el9_2
rpm-ostree 2024.3-6.el9_4 → 2024.3-3.el9_4
rpm-ostree-libs 2024.3-6.el9_4 → 2024.3-3.el9_4
rpm-plugin-selinux 4.16.1.3-29.el9 → 4.16.1.3-24.el9_2
rsync 3.2.3-19.el9_4.3 → 3.2.3-19.el9_2.3
runc 4:1.2.9-4.rhaos4.16.el9 → 4:1.2.9-1.rhaos4.16.el9
samba-client-libs 4.19.4-105.el9_4.3 → 4.17.5-105.el9_2.4
samba-common 4.19.4-105.el9_4.3 → 4.17.5-105.el9_2.4
samba-common-libs 4.19.4-105.el9_4.3 → 4.17.5-105.el9_2.4
selinux-policy 38.1.35-2.el9_4.8 → 38.1.11-2.el9_2.10
selinux-policy-targeted 38.1.35-2.el9_4.8 → 38.1.11-2.el9_2.10
setup 2.13.7-10.el9 → 2.13.7-9.el9
shadow-utils 2:4.9-8.el9_4.1 → 2:4.9-6.el9
shadow-utils-subid 2:4.9-8.el9_4.1 → 2:4.9-6.el9
shim-x64 16.1-8.el9_4 → 16.1-8.el9_2
skopeo 2:1.14.5-7.rhaos4.16.el9 → 2:1.11.4-0.1.el9_2.5
slirp4netns 1.2.3-1.el9 → 1.2.0-3.el9
socat 1.7.4.1-5.el9_4.3 → 1.7.4.1-5.el9_2.2
sqlite-libs 3.34.1-7.el9_4.1 → 3.34.1-6.el9_2.2
squashfs-tools 4.4-10.git1.el9 → 4.4-8.git1.el9
sssd 2.9.4-6.el9_4.4 → 2.8.2-5.el9_2.6
sssd-ad 2.9.4-6.el9_4.4 → 2.8.2-5.el9_2.6
sssd-client 2.9.4-6.el9_4.4 → 2.8.2-5.el9_2.6
sssd-common 2.9.4-6.el9_4.4 → 2.8.2-5.el9_2.6
sssd-common-pac 2.9.4-6.el9_4.4 → 2.8.2-5.el9_2.6
sssd-ipa 2.9.4-6.el9_4.4 → 2.8.2-5.el9_2.6
sssd-krb5 2.9.4-6.el9_4.4 → 2.8.2-5.el9_2.6
sssd-krb5-common 2.9.4-6.el9_4.4 → 2.8.2-5.el9_2.6
sssd-ldap 2.9.4-6.el9_4.4 → 2.8.2-5.el9_2.6
sssd-nfs-idmap 2.9.4-6.el9_4.4 → 2.8.2-5.el9_2.6
sssd-proxy 2.9.4-6.el9_4.4 → 2.8.2-5.el9_2.6
stalld 1.20.4-1.el9_4 → 1.17.1-1.el9_1
sudo 1.9.5p2-10.el9_4.3 → 1.9.5p2-9.el9_2.4
systemd 252-32.el9_4.10 → 252-14.el9_2.10
systemd-journal-remote 252-32.el9_4.10 → 252-14.el9_2.10
systemd-libs 252-32.el9_4.10 → 252-14.el9_2.10
systemd-pam 252-32.el9_4.10 → 252-14.el9_2.10
systemd-rpm-macros 252-32.el9_4.10 → 252-14.el9_2.10
systemd-udev 252-32.el9_4.10 → 252-14.el9_2.10
tar 2:1.34-6.el9_4.3 → 2:1.34-6.el9_2.1
tmux 3.2a-5.el9 → 3.2a-4.el9
toolbox 0.1.2-1.rhaos4.16.el9 → 0.1.2-1.rhaos4.15.el9
tpm2-tools 5.2-3.el9 → 5.2-2.el9_1
tpm2-tss 3.2.2-2.el9 → 3.0.3-8.el9
unbound-libs 1.16.2-8.el9_4.2 → 1.16.2-3.el9_2.5
util-linux 2.37.4-18.el9 → 2.37.4-11.el9_2
util-linux-core 2.37.4-18.el9 → 2.37.4-11.el9_2
vim-minimal 2:8.2.2637-20.el9_4.2 → 2:8.2.2637-20.el9_2.1
which 2.21-29.el9 → 2.21-28.el9
xfsprogs 6.3.0-1.el9 → 5.14.2-2.el9_2
yajl 2.1.0-22.el9 → 2.1.0-21.el9_0
zlib 1.2.11-40.el9 → 1.2.11-39.el9

Removed:

binutils 2.35.2-43.el9_4.2
binutils-gold 2.35.2-43.el9_4.2
bootc 0.1.14-1.el9_4
composefs 1.0.3-2.el9
composefs-libs 1.0.3-2.el9
dnf 4.14.0-9.el9
dnf-data 4.14.0-9.el9
elfutils-debuginfod-client 0.190-2.el9
ima-evm-utils 1.4-4.el9
kbd-legacy 2.4.0-9.el9
libcomps 0.1.18-1.el9
libdnf 0.69.0-8.el9_4.1
liburing 2.5-1.el9
openshift-kubelet 4.16.0-202602100409.p2.g41c4e9b.assembly.stream.el9
python3-dbus 1.2.18-2.el9
python3-dnf 4.14.0-9.el9
python3-gpg 1.15.1-6.el9
python3-hawkey 0.69.0-8.el9_4.1
python3-libcomps 0.1.18-1.el9
python3-libdnf 0.69.0-8.el9_4.1
python3-rpm 4.16.1.3-29.el9
rpm-build-libs 4.16.1.3-29.el9
rpm-plugin-systemd-inhibit 4.16.1.3-29.el9
rpm-sign-libs 4.16.1.3-29.el9
zram-generator 0.3.2-7.el9

Added:

libgcab1 1.4-6.el9
libsmbios 2.4.3-4.el9
openshift-hyperkube 4.15.0-202602130120.p2.g5cb2ef4.assembly.stream.el9
openssl-fips-provider-so 3.0.7-1.el9_2.1

Extensions

Full list (0 packages)

Red Hat Enterprise Linux CoreOS base layer: 415.92.202606030318-0 (diff)

View changelog in Markdown or change previous release:

Source code for this page located on github