4.16.60

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.16.60-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Failed (2 retries) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.16-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- aws-sdn-upgrade-4.16-micro Failed (1 retry) periodic-ci-openshift-release-main-nightly-4.16-e2e-aws-sdn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Failed
- azure-ovn-upgrade-4.16-micro Failed (1 retry) periodic-ci-openshift-release-main-ci-4.16-e2e-azure-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Failed
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.16-fips-payload-scan
- gcp-ovn-rt-upgrade-4.16-minor Succeeded periodic-ci-openshift-release-main-ci-4.16-upgrade-from-stable-4.15-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.16 Succeeded periodic-ci-openshift-hypershift-release-4.16-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.15.21, 4.15.22, 4.15.23, 4.15.24, 4.15.25, 4.15.28, 4.15.29, 4.15.30, 4.15.31, 4.15.32, 4.15.33, 4.15.34, 4.15.35, 4.15.36, 4.15.37, 4.15.38, 4.15.39, 4.15.40, 4.15.41, 4.15.42, 4.15.43, 4.15.44, 4.15.45, 4.15.46, 4.15.47, 4.15.48, 4.15.49, 4.15.50, 4.15.51, 4.15.52, 4.15.53, 4.15.54, 4.15.55, 4.15.56, 4.15.58, 4.15.59, 4.15.60, 4.16.10, 4.16.11, 4.16.12, 4.16.13, 4.16.14, 4.16.15, 4.16.16, 4.16.17, 4.16.18, 4.16.19, 4.16.20, 4.16.21, 4.16.23, 4.16.24, 4.16.25, 4.16.26, 4.16.27, 4.16.29, 4.16.3, 4.16.30, 4.16.32, 4.16.33, 4.16.34, 4.16.35, 4.16.36, 4.16.37, 4.16.38, 4.16.39, 4.16.4, 4.16.40, 4.16.41, 4.16.42, 4.16.43, 4.16.44, 4.16.45, 4.16.46, 4.16.47, 4.16.48, 4.16.5, 4.16.50, 4.16.51, 4.16.52, 4.16.54, 4.16.55, 4.16.56, 4.16.6, 4.16.7, 4.16.8, 4.16.9

4.16.59 (changes) - F S F F F F F F F S
4.16.58 (changes) - Failed
4.16.57 (changes) - Failed
4.16.53 (changes) - Success
4.16.49 (changes) - Failed
4.16.28 (changes) - Success
4.16.2 (changes) - Failed
4.16.1 - Failed
4.16.0 (changes) - Failed
4.15.63 (changes) - Success
4.15.62 (changes) - Success Success
4.15.61 (changes) - Failed
4.15.57 (changes) - Failed
4.15.27 (changes) - Failed
4.15.26 (changes) - Failed
4.15.20 (changes) - Success
4.15.19 (changes) - Failed
4.15.18 (changes) - Failed
4.15.0-0.nightly-2026-04-11-195046 (changes) - Success

Loading changelog, this may take a while ...

Changes from 4.16.1

Created: 2026-04-23 12:20:21 +0000 UTC

Image Digest: sha256:8f474f0cbba5f3f13bcee65257ac42d602fbe9ef9878f1c848d5ccb5e76e869e

Components

Kubectl upgraded from 1.29.1 to 1.29.7
Kubernetes upgraded from 1.29.5 to 1.29.14
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202406251923-0 to 416.94.202604211449-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ExternalRouteCertificate (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
StreamingCollectionEncodingToJSON (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

New images

operator-framework-tools git ba51f79a sha256:b882d200526945a63c79a052190b251f7ba3a86cecae8f4006dabeb495590ed5

Removed images

ovirt-machine-controllers

Rebuilt images without code change

alibaba-cloud-controller-manager git 97e8335e sha256:af23fb7e17814c850ad382b5944904505aca845cf525cdb4a0b85f2a0f24014a
aws-cloud-controller-manager git a53e9def sha256:dabe90e4beb42aaaaded4b5b6766cafbd8f46ee2186143e5ed094d7d862d0587
aws-ebs-csi-driver git 1d29a74a sha256:9c94253b31416733f4a76e526a518748572eec163c906a69f46209fae9f82286
azure-disk-csi-driver git 6b55f6fb sha256:3a181eb27673cd4af21d65eefcf892eb38d58e68b20c4e19eb345609fba91c7d
cluster-bootstrap git 27bfb59f sha256:5e341b8bff42a8893c9761443314bf4a8c3137b6a4370ccfc069e8e4fbb879b3
cluster-capi-controllers git 5830a10a sha256:715a969a24169a9f6ba3a9cff52277d0cd2641b4036dc5b40028efd3f1237eca
cluster-config-operator git 441d29c9 sha256:6b2fa9cac5bbfd4dbe5fa252b50ae119a5b56788a0fdce7a37a38f6178985a45
cluster-csi-snapshot-controller-operator git 439826e1 sha256:93318234277fd99b04e7fdf247267411491b767082613535dc8c49a85319bbb2
cluster-kube-cluster-api-operator git 95ceaa9e sha256:52fb3ef8a2b0e9d388182b62ce644027e05609eb1583e3d7cdf850c2d7ff5782
cluster-olm-operator git 27bf70dd sha256:5d78f104e3261f4abbb1d8b944face9986ad0230cced858656dca0f1b214b94b
cluster-policy-controller git eaea543f sha256:814eab238f0b1edd080dcf6ffb7867917a44c471454db7de3cc7c8d38a24a3cd
configmap-reloader git dc91ddc4 sha256:a154742ab1912e82ed00eb75e31146963edb0758da0488be70ec2a5a3573a86c
csi-driver-nfs git 406cec72 sha256:e6805bfa216a458cde43d6ac472265b8335facc84d72cd624fd975c61ff98410
csi-driver-shared-resource git bc125def sha256:8e7e29bb6adf2fe2319a1efa1feb26209fb2719e1e786f1853fa50ca8219bd95
csi-driver-shared-resource-operator git 1e1194bc sha256:ee0d8880be24112ea81d7f599880eec9ba74f32bbd48fe8ead03c1e8a849c9a8
csi-driver-shared-resource-webhook git bc125def sha256:5dab4ffeda9a12f427d01c57f760f17efa285a51879895d3433b56e629d43ba1
csi-external-attacher git 7da80aab sha256:cd76d1c4002c17bc27eb0a654a258dd58d26becc09cad5e0d0b164d4f64d54ca
csi-external-provisioner git 9e8af011 sha256:3ef70e4958d12eb48e24a3a808ce65842d0089b613e1c58126300985ce53cc44
csi-livenessprobe git f5e3ff55 sha256:8cafd0a0840d5aaed8d3b80f7d00b2c56d4381729fdd45a9e5769a9cfe9cd62a
driver-toolkit git 1d5732f0 sha256:10165db053c61ac5ce3f46039f75704bbef95131180f17b1e9f31cc126fb1f37
gcp-cloud-controller-manager git 26b43dfc sha256:8a03d52f67d2625310ee257ea0a371d3f70046057254f6cc5208dbc380fe91e8
gcp-pd-csi-driver-operator git 799327f7 sha256:3aaf708d990b2ffe3b1dcecb7fde6eeade76ed268a0825016cdc1b57dfab3b02
ibm-cloud-controller-manager git f961f16d sha256:eb8c6faa7b109106c46e768e6dec85c46580e935424def7390c1fcfec256ebb4
ironic-machine-os-downloader git 93b8b5fa sha256:0aa9f5962671a9c0276fa07f3066156f65cde83c5f0b3147763e313cf130c432
k8s-prometheus-adapter git e4f859be sha256:6b9e0a0e538e9681818e0e3ca237f0290efebade48b446a68c5a9c4d388772b4
kubevirt-cloud-controller-manager git 3db76104 sha256:ab7c563f68b9ab5f8aa090c561d0bb280540dd1d23557dcfbe2ef7e58ce379b1
oauth-server git 3739138c sha256:29adc976cecdd4523006fb2d783577f2f476df725af06f3e480c267f2bde3889
olm-catalogd git 79975a51 sha256:2853d2df3459be835aa068732b74d3fb7c07e3ebc4f0bf78da9f4f75eced69ad
olm-operator-controller git 80b8649c sha256:f9fd1a216c031146f4b42031b6ce6827fa3a292637f9e43cee5123d08f835821
olm-rukpak git 282cc84c sha256:c6076ae8b41f39468b1a0fb582b1ff0493120be860240b693c9a210dada8b7da
openshift-state-metrics git 59b8a0ff sha256:fe02214cb9b08e8585484c2639c0fa12b94a81826fbb83e2b91c6c846b49017a
ovirt-csi-driver git 1db726a9 sha256:687f3046fc194c473c6a43267cad2d3a70d4d6895c9e67da77124b1d5d5e8cfa
powervs-block-csi-driver-operator git 9c5dd8d1 sha256:f4b5d7d6690ad95f5aababffbba48481811bde9877eda44a7f5274fc0d846dbb
prom-label-proxy git 5e14722e sha256:891a8d949e70a885f1229edda841abc2b46587b0ae43fa8aea5744dada70068e
prometheus-node-exporter git 29ba26d1 sha256:05f6ea8da767cd4f16b5da151f7c25741f2778c7c7f95f17af7156c37550f8c1
rhel-coreos sha256:ba92f55e7dadc5884f53b27d2dc04b3ccd5c56845a3b9875a51715f76d854322
rhel-coreos-extensions sha256:77e427f554d83c6b8e342d302f73aad607c7070c077cfe89f9a8540eced05a75
service-ca-operator git 538c7b98 sha256:f4a56dbdfb7d1dac97123cee5f8690b19c2ff488223f30b79e5c66e76dd44224
telemeter git c1ecd105 sha256:52313a21fbbc61281ab873b19c3c330ca9c6c93784036dd17af4159abbfb9d39
thanos git 85eee25c sha256:8b44ec30ce60df51e6bdade6f0f4e1d202bb38cd0f950b9e1f9e3a8306fee4db

agent-installer-api-server

OCPBUGS-58631, OCPBUGS-58636: Bump glog to v1.2.5 in release-4.16 (#7901) #7901
OCPBUGS-47627: dnsmasq service on OCP SNO fails to read /etc/resolv.conf file during system startup (#7857) #7857
OCPBUGS-54402: Bump go-jwt to 4.5.2 to fix CVE-30204 (#7486) #7486
OCPBUGS-45244: Bump moby from v26.0.0 to v27.2.1 (#7189) #7189
MGMT-19537: Bump golang.org/x/net to 0.33.0 (#7130) #7130
OCPBUGS-43021: Update go-jose to v2.6.3 to mitigate CVE-2024-28180 (#6893) #6893
OCPBUGS-42570: Libraries bump to mitigate CVE-2024-27289 (#6833) #6833
OCPBUGS-36577: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#6752) #6752
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-53718: Bump jwt to 4.5.2 in release-4.16 (#1091) #1091
abi: let the bootstrap waiting for workers before rebooting (#1047) #1047
OCPBUGS-47494: MGMT-19537: Bump golang.org/x/net to 0.33.0 (#990) #990
OCPBUGS-38466: Allow controller to continue when assisted-service (#914) #914
OCPBUGS-43025: Pick up latest CVE changes by bumping service (#920) #920
OCPBUGS-36577: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#906) #906
OCPBUGS-36779: Reload host inventory on conflict (#881) #881
Full changelog

agent-installer-node-agent

run go mod tidy / vendor #1019
And 7 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-utils

OCPBUGS-68046: bump github.com/sirupsen/logrus to v1.9.3 #239
Full changelog

alibaba-machine-controllers

OCPBUGS-44242: change the VERSION makefile variable to use OS_GIT_VERSION #58
Full changelog

apiserver-network-proxy

OCPBUGS-38062: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #59
Full changelog

aws-cluster-api-controllers

OCPBUGS-78227: [release-4.16] update go mod dependency for konflux #591
OCPBUGS-61942: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #572
OCPBUGS-58666, OCPBUGS-58671: bump github.com/golang/glog to v1.2.5 #560
OCPBUGS-53726: Update golang-jwt to v4.5.2 #547
OCPBUGS-44234: [release-4.16] OSD-25934: Only tag NetworkInterfaces in RunInstances if IAM Allows It #531
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-64831: Use 127.0.0.1 for healtz http-endpoints #467
OCPBUGS-64768: Add RBAC ClusterRole and Binding for driver node #465
OCPBUGS-61253: add ability to control kube rbac proxy container image… #426
OCPBUGS-60598: Bump library-go #423
OCPBUGS-59606: Backport stale conditions fix #407
OCPBUGS-60248: add tag matching to Azure File storage class #414
Full changelog

aws-kms-encryption-provider

OCPBUGS-33693: Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.16 #18
hack: display diff on verify-mod-tidy failure #26
Full changelog

aws-machine-controllers

OCPBUGS-73903: Fix reconciler consistency checks in Update and Exists #168
OCPBUGS-63140: client: re-use a single file for building the session instead of randomly named files #144
OCPBUGS-46508: fix Associate*IpAddress flag on launch EC2 #121
Full changelog

aws-pod-identity-webhook

OCPBUGS-52513: github.com/go-jose/go-jose/v4 v4.0.5 #203
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-47645: Prevent panic when informer receives cache.DeletedFinalStateUnknown #133
Full changelog

azure-cluster-api-controllers

OCPBUGS-78176: [release-4.16] update go mod dependency for konflux #364
OCPBUGS-36025: Update go-retryablehttp to v0.7.7 #310
Full changelog

azure-file-csi-driver

OCPBUGS-39145: bump mount-utils to treat ENODEV error as corrupted mount #76
Full changelog

azure-kms-encryption-provider

OCPBUGS-53494: bump golang-jwt v4 #13
OCPBUGS-33692: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.16 #4
Full changelog

azure-machine-controllers

OCPBUGS-66044: Set updateDomainCount to one when faultDomainCount is one #177
OCPBUGS-52476: Remove unused vnet package #131
OCPBUGS-56169: [release-4.16] Update virtualmachines service to armcompute/v5 SDK #147
OCPBUGS-56656: Fix failure when attempting to modify immutable availabilitySet #151
OCPBUGS-56092: Update eviction policy for Spot VMs from Deallocate to Delete #142
OCPBUGS-54990: Re-reconcile machine on NIC provisioning failure #137
OCPBUGS-50966: dynamically setting the amount of fault domains #129
CFE-1050: Added support of capacity reservation group #111
Full changelog

azure-workload-identity-webhook

OCPBUGS-53798: github.com/golang-jwt/jwt/v4 v4.5.2 #33
OCPBUGS-52510: github.com/go-jose/go-jose/v4 v4.0.5 #29
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-74885: Azure UPI ARM template: use storageAccountId #10282
OCPBUGS-76586: terraform/provider/google: Fixing GCP inconsistencies present with the service account creation #10298
OCPBUGS-73879: data/manifests/bootkube/cvo-overrides: Default to eus-4.16 #10226
OCPBUGS-54165: aws: fix NLB creation in secret regions #10031
OCPBUGS-53237: Validation for API and Ingress VIPs when using user-managed load balancer #10048
OCPBUGS-62952: Update the RHCOS 4.16 bootimage metadata #10022
OCPBUGS-62653: Release 4.16 bump terraform provider azurerm #9993
OCPBUGS-59162: vSphere - remove unit tests using nip.io #9835
OCPBUGS-62235: Make swift containers removal not fatal for UPI. #9961
OCPBUGS-58290: sort zone slices extracted from map of byo subnets #9819
OCPBUGS-55807: update resolv.conf every time on bootstrap node #9694
OCPBUGS-57460: vsphere - check if host is powered down or on standby before uploading template #9786
OCPBUGS-36677: Power VS: Enable incoming traffic on port 5000 during installation in a restricted network #8711
OCPBUGS-57498: ensure ctrplane nodes can access bootstrap MCS #9788
OCPBUGS-54240: Update timeout for GCP WaitFor operation #9715
OCPBUGS-35040: Power VS: Add ports needed for private clusters to security group #8546
OCPBUGS-54327: Remove error logging when determining image arch #9610
OCPBUGS-54345: Remove tmp directory used for agent pxe files #9611
OCPBUGS-54263: IBMCloud: Move to IBM TF openshift fork #9604
OCPBUGS-50547: aws/edge/byovpc: tag edge subnets with shared value #9482
OCPBUGS-52191: [release-4.16] capi/aws: bump provider for LB DNS lookup fix #9547
OCPBUGS-51207: Log correct hostname for validation status #9511
OCPBUGS-51111: PowerVS: destroy dhcp hack #9502
OCPBUGS-48762: Update RHCOS-release-4.16 bootimage metadata to 416.94.202501270445-0 #9478
OCPBUGS-43469: pkg/asset/installconfig/azure: send full certifcate chain #9467
OCPBUGS-49416: [Nutanix] Installation failed with timeout when uploading images to PC #9412
OCPBUGS-47663: [release-4.16] Power VS: Create region-zone-sysType hierarchy #9338
OCPBUGS-48442: Ensure rendezvousIP is checked against host IP #9369
OCPBUGS-45999: Always set cross_tenant_replication_enabled parameter to false #9321
OCPBUGS-45669: aws: fix Node Port Service rule removal #9312
OCPBUGS-45669: [release-4.16] capi/aws: remove allow-all Node Port Service #9281
OCPBUGS-39434: dropping this warning as the move from terraform is transparent to the end user #8951
OCPBUGS-45852: Update upi references to api-internal #9290
OCPBUGS-41813: Validate MTU for custom network #9104
ARO-12457: Include bootstrap docker config file in go module #9259
OCPBUGS-45181: add chrony.conf file when additional NTP sources are configured #9247
CORS-3753: Allow mocking of the Azure client everywhere #9220
OCPBUGS-44348: Cherrypick oci ccm fix to 4.16 #9188
OCPBUGS-43967: Revendor assisted service external platform oci #9150
OCPBUGS-38930: import failure when esxi config is not the same in the cluster #8898
OCPBUGS-36290: IBMCloud: Ignore failed VPC regions #8674
OCPBUGS-41885: vSphere - If template is defined skip downloading #8999
OCPBUGS-41490: Update RHCOS 4.16 bootimage metadata to 416.94.202410211619-0 #9158
OCPBUGS-43476: IBMCloud: Handle pagination for subnets #9102
OCPBUGS-41490: Update RHCOS 4.16 bootimage metadata to 416.94.202410172137-0 #9132
OCPBUGS-42014: Update terraform provider for google #9077
OCPBUGS-38732: vsphere, if secureboot is enabled, disable it in the template #8904
OCPBUGS-39415: OpenStack: Install CI dependencies from rpm #8995
OCPBUGS-41334: Fix IPv6 security group rule for schedulable master #8971
OCPBUGS-38687: only allow a single network in failure domain topology #8875
OCPBUGS-42062: OCPBUGS-41865: [release-4.16] vault version updated to 1.13.10 #9036
OCPBUGS-42012: Systemd Fails to Parse Multiline EC Keys #9037
OCPBUGS-41845: Bump extract-machine-os timout to 20m #8997
OCPBUGS-38964: IngressController subnet selection in AWS #8910
OCPBUGS-42138: add tested instance type for IBMCloud #9031
OCPBUGS-39287: Fix var_files syntax to work on older version of ansible #8936
OCPBUGS-41929: Add AWS c7g,m7g,r8g to tested instance types #9009
OCPBUGS-36855: Openstack UPI - Reintroduce unique resource names. #8724
OCPBUGS-39082: incorrect folder gen, workaround govmomi vm folder path bug #8912
OCPBUGS-39496: capi/aws/byo-vpc/multi-cidr: fix group rules #8953
OCPBUGS-36861: Updates GCP terraform worker role #8939
OCPBUGS-38956: failed to install Nutanix OCP 4.16 cluster with DHCP #8905
OCPBUGS-38822: upstream capv bug causes session timeout #8891
OCPBUGS-39468: Enable TLS for virtual media in initial ironic deployment #8955
OCPBUGS-37606: vSphere validation fails if dc is in a folder #8777
OCPBUGS-39206: Update GCP Disk Types 4.16 #8920
OCPBUGS-39087: aws: validate public-only subnets configs #8913
OCPBUGS-38821: [release-4.16] Azure: Disable shared key access when using a managed identity #8855
OCPBUGS-38302: upi/aws: update lambda runtime python version #8897
OCPBUGS-38826: aws: add support for clusters with public-only subnets #8892
OCPBUGS-38517: [release-4.16] capi/aws: bump provider for instance register fix #8848
OCPBUGS-38196: Remove timed context for gcp client #8818
OCPBUGS-38502: PowerVS: Fix mad system pool #8846
OCPBUGS-37838: fix bogus analyze message when gather fails #8794
OCPBUGS-37492: openstack: Fix security group tagging #8767
OCPBUGS-37607: bootstrap gather fails in vsphere, only ipv6 address used #8778
OCPBUGS-37494: aws: do not require create permissions when BYO IAM role #8768
OCPBUGS-37510: [release-4.16] aws: bump CAPA for subnet tagging fix #8772
OCPBUGS-37180: ic: fix typo in warning message #8769
OCPBUGS-36968: [release-4.16]: capi/aws: bump provider for ingress rules fix #8734
OCPBUGS-36965: destroy/gcp: set value for DiscardLocalSsd #8733
OCPBUGS-36720: CORS-3582: capi: remove unused feature gates #8716
OCPBUGS-36890: [release-4.16] capi: start controllers after WaitGroup is created #8726
OCPBUGS-36091: [release-4.16] bump go-retryablehttp for CVE fix #8654
OCPBUGS-36777: Cleanup capi artifacts #8719
OCPBUGS-36607: aws: remove terraform configs #8705
OCPBUGS-36324: update RHCOS 4.16 bootimage metadata to 416.94.202406282145-0 #8692
OCPBUGS-36447: capi/aws: disable EKS controller in CAPA #8694
OCPBUGS-36351: vSphere - If the folder pre-exists do not tag #8683
OCPBUGS-36286: PowerVS: Add ibmcloud plugins #8672
OCPBUGS-35818: baremetal: bootstrap: bind icc to localhost #8632
OCPBUGS-34457: [release-4.16] bump envtest binaries version #8470
OCPBUGS-35718: Fix ethertype for masters service router SG creation #8623
OCPBUGS-36156: Configured logger for controller-runtime #8657
OCPBUGS-36249: capi: shutdown local controlplane as the last step #8670
OCPBUGS-35470: add machine series ‘A3’ and ‘C3D’ to ‘Tested instance types for GCP’ #8614
OCPBUGS-35722: Support CAPI provider custom timeouts #8624
OCPBUGS-35733: [release-4.16] remove terraform libvirt from the installer #8626
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

baremetal-machine-controllers

OCPBUGS-78099: [release-4.16] fix vendor/ for hermetic migration 4.16 #243
OCPBUGS-46645: Bump x/net to 0.33.0 #226
Full changelog

baremetal-operator

OCPBUGS-77278: Unblock BMH direct deletion when detached annotation is present #463
OCPBUGS-53322: BMO can expose any secret via BMCEventSubscription CRD #407
OCPBUGS-49703: Handle HFC for non-redfish HW #396
OCPBUGS-39490: Disallow fetching secrets from namespaces different from the host’s one #378
OCPBUGS-38938: [OCP] Ability to disable agent power off after deployment #372
OCPBUGS-37765: HostFirmwareComponents doesn’t show the new firmware information in Status Components #355
OCPBUGS-37262: fix(redfish): set correct idrac-redfish management interface #366
OCPBUGS-36673: [4.16] Firmware Update causes BMH to get stuck in Preparing #363
Full changelog

baremetal-runtimecfg

OCPBUGS-60113: Re-add ENABLE_NODEIP_DEBUG env var #362
OCPBUGS-35891: Change mechanism of debug flag #323
OCPBUGS-35743: Fix handling of ELB Node IP detection #320
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-64616: Help with must-gather scheduling through suggesting preferance of nodes #2151
OCPBUGS-64561: Update go-jose, x/crypto, x/net #2144
OCPBUGS-59938: Adding sos.conf file for default sos config into the tools image #2064
OCPBUGS-60675: Use fedora image in unit tests instead of centos #2079
OCPBUGS-51043: Add HOST env var in oc debug for sos report collects more #1977
OCPBUGS-42720: Check cast result in adm prune deployments to prevent panic #1891
OCPBUGS-39341: Ignore pruning when deployment points to replicationcontroller #1862
OCPBUGS-37853: Revert “OCPBUGS-35994: pkg/cli/admin/upgrade/rollback: Drop this command” #1839
OCPBUGS-31639: Bump k8s dependencies to 1.29.7 #1824
OCPBUGS-36764: pkg/cli/admin/upgrade/rollback: Drop this command #1820
OCPBUGS-36328: Set required-scc annotation to privileged for node debug pods #1816
OCPBUGS-36379: bump(k8s)=1.29.6 #1810
OCPBUGS-35924: upgrade status: control plane completion estimate #1804
Full changelog

cloud-credential-operator

OCPBUGS-65802: ccoctl azure: retry custom role creation on consistency errors #952
OCPBUGS-63550: ccoctl: add public-key-file flag to create-all #940
OCPBUGS-55129: snyk to ignore SNYK-GOLANG-GOLANGORGXNETHTML-9572088 #918
OCPBUGS-60973: ccoctl: aws to use proper issuer url on subsequent runs #909
OCPBUGS-60861: ccoctl: only add owned tag to azure resources on create #902
OCPBUGS-58676: github.com/golang/glog v1.2.5 #893
OCPBUGS-56981: Azure: resolve nil pointer exception when role assignment exists #867
OCPBUGS-53416: github.com/golang/glog v1.2.4 #843
OCPBUGS-53822: update github.com/golang-jwt/jwt #839
OCPBUGS-51544: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #829
OCPBUGS-52512: github.com/go-jose/go-jose/v4 v4.0.5 #826
OCPBUGS-47070: golang.org/x/net v0.33.0 #805
OCPBUGS-45939: Add AWS region to aws-pod-identity-webhook #800
OCPBUGS-45007: Add retry to ccoctl gcp create functions #794
OCPBUGS-45002: github.com/golang-jwt/jwt/v4 v4.5.1 #788
OCPBUGS-43645: Only attempt timed token credentials on supported platforms. #772
OCPBUGS-43337: Update github.com/sirupsen/logrus v1.9.3 #767
OCPBUGS-41234: List secrets in batches to avoid api timeout #757
OCPBUGS-38376: Update google.golang.org/grpc v1.65.0 #748
OCPBUGS-37418: SNYK ignore go-client misreporting #735
OCPBUGS-36834: GCP passthrough permissions check to ignore problematic permissions. #714
OCPBUGS-36954: Update to azidentity v1.7.0 #727
OCPBUGS-36031: IBM/go-sdk-core update to v5.6.3 #718
OCPBUGS-34117: AWS STS should not error when a credentailsRequest does not have awsSTSIAMRoleARN #704
Full changelog

cloud-network-config-controller

OCPBUGS-66346: [release-4.16] Fix capacity calculation #195
OCPBUGS-65567: [release-4.16] Change the capacity struct from int to ptrOfInt #192
OCPBUGS-56359: Increase API call timeout to 30 second #172
Full changelog

cluster-authentication-operator

OCPBUGS-54655: Avoid duplicate OAuth client creation #766
OCPBUGS-43367: manifests should not use APIs that are removed in upcoming releases #717
OCPBUGS-34790: update OpenShift favicon to new brand standard #676
NO-JIRA: Fixes for Keycloack IDP test and unit tests #683
Full changelog

cluster-autoscaler

OCPBUGS-78702: allow clusterapi provider to skip paused resources #415
OCPBUGS-60915: revert openshift replica fix #377
OCPBUGS-59267: Fix cool down status condition to trigger scale down #363
OCPBUGS-60609: fix checkpoint gc of unknown recommenders #372
OCPBUGS-54326: improve replica counting and decrease target size behavior #353
OCPBUGS-48732: UPSTREAM: <carry>: 🐛(metrics) Initialize metrics for autoscaler errors, scale events, and pod evictions #339
OCPBUGS-45148: [release-4.16] VPA: Update OWNERS file #325
Full changelog

cluster-autoscaler-operator

OCPBUGS-52329: set max soft bulk taint count to zero #341
Full changelog

cluster-baremetal-operator

OCPBUGS-77447: Bump github.com/go-errors/errors to v1.5.1 #562
OCPBUGS-64741: Always have a service for ironic-api port #524
OCPBUGS-63417: Fix ironic inspector container privileges #513
OCPBUGS-61504: Remove webhookport (9447) as HostPort #506
OCPBUGS-54546: Add missing relatedObjects #470
OCPBUGS-43556: SCC-pinning for metal3-baremetal-operator #453
OCPBUGS-31961: bump x/net to 0.23.0 #431
OCPBUGS-36415: set required-scc for openshift workloads #433
OCPBUGS-36285: Move pull secret from env var to VolumeMount in metal3-image-customization container #436
OCPBUGS-36285: Mount htpasswds as volumeMounts in metal3-httpd container #434
OCPBUGS-35381: provisioning: add ownership for tls secret #425
Full changelog

cluster-capi-operator

OCPBUGS-49603: fix: always update clusteroperator status versions when differing #253
OCPBUGS-37441: fix: sort CredentialsRequest manifests after namespace #190
OCPBUGS-37795: fix: align openstack e2e branch #192
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63168: ccm: disable unused secure-serving port and webhook #422
OCPBUGS-60387: Add Service using common resource templating #411
OCPBUGS-60387: Update service selector to match deployment label #410
OCPBUGS-42125: IBMCloud: Modify liveness probe for IBM Cloud CCM to use loopback address #366
OCPBUGS-43473: update goimports targets #372
OCPBUGS-36317: PowerVS: Remove bind address #358
Full changelog

cluster-config-api

CNTRLPLANE-1982: Promote streaming list encoding to Default #2600
OCPBUGS-71202: Add HTTPKeepAliveTimeout to IngressController API #2640
NO-JIRA: Promote streaming list encoding to Default on Hypershift. #2568
CNTRLPLANE-1611: Add feature gates for StreamingCollectionEncoding #2542
OCPBUGS-58392: Add IPsec API for NAT-T UDP encapsulation support #2393
OCPBUGS-56424: Add IdleConnectionTerminationPolicy field to IngressControllerSpec #2330
OCPBUGS-38773: remove duplicate featuregate ‘ExternalRouteCertificate’ #2007
OCPBUGS-37857: [release-4.16] OCPBUGS-37852: a rule to check if the featureSet is one of the known set of features #1985
OCPBUGS-33788: add console and download URLs to console operator config #1915
CFE-1047: Add the field “CapacityReservationGroupID” to “AzureMachineProviderSpec” in openshift/api #1923
OCPBUGS-35742: prevent removing featureSet entirely #1933
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-44179: relax validation on delete and if failureDomains not configured #331
CFE-1087: API Bump for capacity Reservation #314
Full changelog

cluster-dns-operator

OCPBUGS-52498: [release-4.16] Add runbook_url for CoreDNSErrorsHigh #431
OCPBUGS-37078: Bump version of DNSNameResolver controller #419
Full changelog

cluster-etcd-operator

OCPBUGS-68058: Update logrus to 1.9.3 to address CVE-2025-65637 #1546
OCPBUGS-61505: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1482
OCPBUGS-60836: add missing ports to svc and pod spec #1473
OCPBUGS-53510: fix CVE-2025-30204 #1403
OCPBUGS-33673: rename flowschema to avoid log noise in CVO #1348
OCPBUGS-37820: ensure ordering in member health checks #1311
OCPBUGS-36489: parallelize member health checks #1290
Full changelog

cluster-image-registry-operator

OCPBUGS-68059: : Bump github.com/sirupsen/logrus to v1.9.1 #1285
OCPBUGS-53870: bump github.com/golang-jwt/jwt #1219
OCPBUGS-51600: bump golang.org/x/oauth2 #1210
OCPBUGS-51167: ensure that storage names don’t end in dashes #1181
OCPBUGS-43797: fix proxy config and leader election test flakes #1148
OCPBUGS-43555: pkg/storage/azure: also check for auth failure error code on deletion #1143
OCPBUGS-42933: azureclient: stop validating credentials when creating the client #1134
OCPBUGS-42420: Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #1126
Revert “[release-4.16] OCPBUGS-41903: pkg/operator/azurepathfixcontroller: do not sync on non-azure storage” #1119
OCPBUGS-41903: pkg/operator/azurepathfixcontroller: do not sync on non-azure storage #1115
OCPBUGS-39098: Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth #1104
OCPBUGS-38894: pkg/resource/azurepathfixjob: invoke update-ca-trust extract with –output #1102
OCPBUGS-38894: pkg/resource: invoke update-ca-trust extract with –output #1098
OCPBUGS-36037: go.*,vendor: bump go-retryablehttp #1064 #1064
Full changelog

cluster-ingress-operator

OCPBUGS-71202: Implement HTTPKeepAliveTimeout tuning option #1337
OCPBUGS-56424: Add e2e tests for IdleConnectionTerminationPolicy #1235
OCPBUGS-56424: Add support for IdleConnectionTerminationPolicy #1234
OCPBUGS-39324: Refine logging for accurate infra CR status updates #1139
OCPBUGS-39323: Ingress operator status not degraded when canary route fails #1138
OCPBUGS-32887: Delete and recreate canary route to clear spec.host #1099
OCPBUGS-36184: Add e2e test for connect timeout #1094
OCPBUGS-35883: Add Regexp Anchor to TestAll #1093
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-68064: CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-rhel9-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.16.z] #2043
OCPBUGS-60467: Add missing service ports to apiserver service #1895
OCPBUGS-50575: Increase waitForFallbackDegradedConditionTimeout #1805
OCPBUGS-37563: add disabled syncer as reason to CFE for PSA #1714
OCPBUGS-35303: manifests: add ownership annotation for kubelet-bootstrap-kubeconfig #1701
OCPBUGS-35831: add SNO control plane high cpu usage alert #1705
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-60834: Missing endpoint slices for open ports the operator uses #864
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #624
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-68069: Bump github.com/sirupsen/logrus to v1.9.1 #144
OCPBUGS-38269: bump protobuf #115
Full changelog

cluster-machine-approver

OCPBUGS-48258: Fix race condition in CO status controller test #267
OCPBUGS-47704: Filter CSRs by signerName #263
OCPBUGS-45974: Ensure trailing dots on DNS names do not block serving cert auth #257
OCPBUGS-45974: Client internal DNS checks should ignore trailing dot #251
OCPBUGS-44629: Client internal DNS checks should be case insensitive #244
Full changelog

cluster-monitoring-operator

OCPBUGS-77276: AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change #2831
OCPBUGS-64581: Fix KSM deny-list typo #2733
OCPBUGS-64637: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.16 #2735
OCPBUGS-62765: port metric acm_managed_cluster_worker_cores:max to OCP 4.16 #2719
OCPBUGS-63235: test: remove image registry e2e tests #2727
OCPBUGS-61856: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2676
OCPBUGS-46066: Add new metrics for OpenShift logging telemetry #2537
OCPBUGS-44005: fix(monitoring-plugin): disable emitting nginx version on error pages #2521
OCPBUGS-43826: Add runbook url for TelemeterClientFailures #2508
OCPBUGS-41967: disable user-defined monitoring per object #2474
OCPBUGS-42067: Reapply “chore: poll immediately in the e2e tests” #2476
OCPBUGS-41717: Configure graceful shutdown for metrics-server (4.16 backport) #2467
OCPBUGS-41910: filter alerts sent to Telemeter #2471
OCPBUGS-39170: Backport #2441 for 4.16 #2447
OCPBUGS-36907: Add deprecated config runbook #2411
OCPBUGS-36717: Exclude windows nodes from kubelet servicemonitor #2408
OCPBUGS-36482: add runbook_url annotations #2404
OCPBUGS-36206: Add deprecation for prometheus adapter #2396
OCPBUGS-34530: inject trusted CA bundle into UWM Alertmanager #2373
OCPBUGS-35904: opt-out of multi-cluster Prometheus dashboard #2391
OCPBUGS-34383: remove deprecated logtostderr argument #2370
OCPBUGS-35884: attach runbook to the PrometheusDuplicateTimestamps alert #2389
Full changelog

cluster-network-operator

OCPBUGS-75890: Tweak iptables-alerter to try to avoid crictl bug #2898
: NO-JIRA: Update CNO reviewers/approvers #2768
OCPBUGS-63155: Add drop flows for GARPs #2819
OCPBUGS-57354: block upgrade if a CNI migration is in progress #2760
OCPBUGS-62055: Update CNO reviewers/approvers #2803
OCPBUGS-44443: Add controlplane cli image envar for use with hypershift #2791
OCPBUGS-58392: Add IPsec API for NAT-T UDP encapsulation support #2736
OCPBUGS-56992: iptables-alerter streamlining #2717
OCPBUGS-56195: Fix live migration with feature migration configured explicitly #2710
OCPBUGS-53317: Fix feature migration for EgressIP #2673
OCPBUGS-52952: Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods #2663
[Release 4.16] OCPBUGS-50712: Not update status.migration of the network.config CR to empty #2651
OCPBUGS-51074: Update egressfirewall CRD to be consistent with ovn-kubernetes repo #2650
OCPBUGS-43803: Start feature migration when the cluster CNI is changed to the target type #2552
OCPBUGS-43715: Skip including default crypto policies to avoid authby issue #2598
OCPBUGS-44338: Prevent live migration process from flapping between step-2 and step-3 #2565
OCPBUGS-46148: Remove ip xfrm state when IPsec is disabled #2595
OCPBUGS-45593: Pass transit_switch_subnet options in ovnkube-node pod #2584
OCPBUGS-44846, SDN-5436: Provide support for user owned IPsec machine configs #2571
OCPBUGS-42727: Live migration: report network overlap via live_migration_blocked metric #2519
OCPBUGS-43604: OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration #2538
OCPBUGS-36210: Set global IP forwarding sysctl parameters while starting ovnkube-node #2422
OCPBUGS-43544: Use CNIConfDir for mounting directory to ovn-ipsec-host pod #2537
OCPBUGS-43035: Configure narrowing=yes for IPsec connections #2528
OCPBUGS-36594: Set mount propagation to HostToContainer for /var/lib/kubelet #2430
OCPBUGS-41840: Add configurable subnets while running hybrid-overlay-node binary #2502
OCPBUGS-37763: Handle random crictl errors in iptables-alerter #2452
OCPBUGS-41555: HyperShift: do not use antiaffinity on single replica control planes #2494
OCPBUGS-37937: Add proxy env vars to onvkube-node #2457
OCPBUGS-41607: set required-scc for openshift workloads #2496
OCPBUGS-35407: Use applyconfigurations for updating network.oprerator status #2413
OCPBUGS-37362: Fix IC distributed control plane alerts #2445
OCPBUGS-35836: Propogate hypershift control plane priority class override to multus and preserve container resource requests #2417
OCPBUGS-35829: Create the configmap mtu if not found #2416
OCPBUGS-35923: update whereabouts crd #2419
Full changelog

cluster-node-tuning-operator

OCPBUGS-78766: [4.16] PPC: filter out namespaces dir #1466
And 21 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-68072: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.16] #654
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-48657: Add new team members to owners file #378
OCPBUGS-38269: CVE-2024-24786 infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON #363
Full changelog

cluster-samples-operator

OCPBUGS-63516: references to github.com/sclorg/django-ex.git now also refer to the branch #659
OCPBUGS-55457: Adding mutex to func createSamples on handler.go #633
OCPBUGS-54420: add rhdmalone to owners #620
OCPBUGS-48848: add shannon and aroyoredhat as owners #596
OKD-225: remove only the EOL CentOS 7 images #576
OCPBUGS-38159: add owners #555
Full changelog

cluster-storage-operator

OCPBUGS-78769: Add patch permission to provisioner role #685
OCPBUGS-61252: add ability to control kube rbac proxy container image on controlplane #614
OCPBUGS-52353: fix Vsphere cluster Storage operator in Unavailable state #563
OCPBUGS-46077: Fix PodStartupStorageOperationsFailing alert #548
OCPBUGS-43315: assets: shared-resource: hypershift: add pull-secret to operator SA #521
NO-JIRA: release-4.16: Run make update #512
OCPBUGS-36969: STOR-1839: VSphereDriverConfiguration feature Accessible-by-default #491
OCPBUGS-35298: revert vsphere problem detector controller name change #481
Full changelog

cluster-update-keys

OCPBUGS-43467: keys: Update Red Hat keys to use SHA256 signatures #64
Full changelog

cluster-version-operator

OCPBUGS-58452: Failing=Unknown upon long CO updating #1213
OCPBUGS-55156: Fix a panic caused by a data race #1178
OCPBUGS-50590: Set openshift.io/required-scc: privileged annotation in version pods #1153
OCPBUGS-46408: Filter out shallowly UpdateEffectNone errors from a MultipleErrors message in the Failing condition #1128
OCPBUGS-45329: deps: bump golang.org/x/net to 0.31.0 #1118
OCPBUGS-43964: Fix desired before sync_worker’s work is initialized #1097
OCPBUGS-37853: Revert “OCPBUGS-35994: Revert “OCPBUGS-24535: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream”” #1077
OCPBUGS-36898: vendor: Update openshift/api to pick up zz_generated.crd-manifests #1069
OCPBUGS-36764: Revert “OCPBUGS-24535: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream” #1065
Full changelog

console

OCPBUGS-83299: [release-4.16] openshift4/ose-console-rhel9: Axios: Remote Code Execution via Prototype Pollution escalation #16298
OCPBUGS-78673: Namespace is not persisting when switching to developer view from the topology page of admin page #16161
CONSOLE-5011: migrate to yarn berry #16078
OCPBUGS-76578: Bump axios #16032
NO-JIRA: Bump builder image to v29 #15993
OCPBUGS-74447: Bump lodash to latest #15967
OCPBUGS-69678: Disallowed Pipelines-plugin Pipelines navigation section #15857
OCPBUGS-64884: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15707
OCPBUGS-64649: /auth/error?error=missing_state&error_type=auth is showing blank page #15675
OCPBUGS-44157: bump dompurify to latest #15591
OCPBUGS-62123: Remove ancient X-XSS-Protection header #15528
OCPBUGS-61057: OpenShift console PVC clone cannot use B as the unit #15450
OCPBUGS-60175: Tolerate unknown fields in Infrastructur… #15368
OCPBUGS-60641: Secret key with binary file changes when edited via Console #15417
OCPBUGS-59869: Not able to launch terminal window from OCP web console due to console plugin conflicts #15334
OCPBUGS-57677: Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image #15328
OCPBUGS-60115: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15358
OCPBUGS-59358: fix bug where / in console.tab/horizontalNav href brea… #15286
OCPBUGS-37603: Manual backport of several incremental fixes for unauthenticated endpoints #15312
OCPBUGS-59274: Add the ability to launch multiple modals with useModal hook #15276
OCPBUGS-59445: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console. #15291
OCPBUGS-58407: Add flags in console static plugin for all the components of this epic #15243
OCPBUGS-56838: Fetching taskRuns in PLR details page using PLR UID also #15099
OCPBUGS-58188: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15214
OCPBUGS-57326: Remove logoutOpenShift method call #15172
OCPBUGS-57270: Debug pod logs are not accessible when debugging a node via OpenShift Console #15165
OCPBUGS-57096: Add all files to vendor regardless of gitignore #15133
OCPBUGS-57089: Sample segment sessions #15130
OCPBUGS-56858: remove 60 day alert from cluster update modal #15102
OCPBUGS-56715: update the Deployment pod on change in imageStream #15091
OCPBUGS-56472: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15072
OCPBUGS-55378: Do not load CSRs if user does not have permissions #15000
OCPBUGS-55644: fix bug where operator appears twice #15016
OCPBUGS-45142: Add missing pipelines plugin name to known plugins #14550
OCPBUGS-48628: Added token to proxy header #14693
OCPBUGS-54174: Update the monitoring topic used by the console team #14900
OCPBUGS-52450: fix run time error when no completed version exists #14840
OCPBUGS-52851: Show Observe section without PROMETHEUS and MONITORING flags #14849
OCPBUGS-52288: While upgrading the cluster from UI observed Warning alert:Admission Webhook Warning #14821
OCPBUGS-49409: ERROR in search tool: Cannot read properties of undefined (reading ‘state’) #14703
OCPBUGS-52418: While accessing the node terminal from UI observed ‘Warning alert:Admission Webhook Warning` #14837
OCPBUGS-49979: Set default build option as BUILDS for Builder Image sample #14730
OCPBUGS-49800: Fix Function Import: An error occurred Cannot read properties of undefined (reading ‘filter’) #14715
OCPBUGS-49801: use default StorageClass for ServerlessFunction pipelineVolumeClaimTemplate #14716
OCPBUGS-46388: fix alert rule link #14808
OCPBUGS-52252: Fix alert rule link to alert in dev perspective #14817
OCPBUGS-46441: Do not pass CSV name to operand list page when an exen… #14627
OCPBUGS-36963: Manually create an API token for a ServiceAccount #14057
OCPBUGS-35394: sessions: fix sessions pruning #13969
OCPBUGS-46602: ReRun of Resolver based PipelineRuns fails from UI #14641
OCPBUGS-46567: ImagePullSecret getting duplicated when editing DeploymentConfig in Form View #14636
OCPBUGS-48162: OCP web console show pod status as Init:0/1 after using Native sidecars #14668
OCPBUGS-43672: Disable GQL introspection #14638
OCPBUGS-45334: fix table combination #14576
OCPBUGS-41342: fix namespace for networkpolicy #14244
OCPBUGS-46022: Plugins that use very old PF4 dropdown or menu components with grouped items have bullets and padding that needs to be removed. #14612
OCPBUGS-45229: Unable to remove finally tasks in pipeline builder mode #14558
OCPBUGS-45245: use TaskRuns results.tekton.dev/record annotation to get the logs #14563
OCPBUGS-41523: i18n upload/download routine task - Sprint 254 #14258
OCPBUGS-45015: Remove ClusterTask dependency in console from Pipelines 1.17 #14537
OCPBUGS-44792: Collapse/Expand Feature Added, Removal Option Removed in Version 4.16 #14519
OCPBUGS-44875: Start last run do not work in buildConfig details page #14529
OCPBUGS-44874: Telemetry userPreference results in empty nodes output to the DOM #14528
OCPBUGS-45124: Add multiline support to template instantiation #14545
OCPBUGS-44885: include external labels so silenced alerts not displayed in notifications #14530
OCPBUGS-44932: Add IBM Block Storage CSI driver support for RWX #14533
OCPBUGS-43447: Ensure envs are initted upon first load #14405
OCPBUGS-44806: Don’t request user settings configmap if no user has been loaded. #14522
OCPBUGS-44207: Create RoleBinding will trigger Admission Webhook Warning #14465
OCPBUGS-44219: Add flag to hide the pipelines-plugin pipeline builder extensions #14466
OCPBUGS-41673: Update vendor imports to include all PatternFly components #14273
OCPBUGS-43834: Enabling topology e2e tests on CI #14438
OCPBUGS-35204: replace global refresh sync lock in OIDC provider with per-refresh-token one #13950
OCPBUGS-36556: Increase login flow state paramater length/entropy #14354
OCPBUGS-42369: Console crashes when ssh is selected in add secret for starting a pipeline run #14320
OCPBUGS-41904: fix annotation for ovn localnet #14366
OCPBUGS-37615: Include PatternFly-4 chart styles so they are available for dynamic plugins that still use PF4 react-charts #14091
OCPBUGS-37689: Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated #14094
OCPBUGS-42015: Topology screen crashes when completed pod is selected #14298
OCPBUGS-35850: Fix: Quick Start “next” button requires double click to move to next step #13989
OCPBUGS-42382: Allow operators to enable monitoring by default #14317
OCPBUGS-41905: List of default Camel K event sources disappears when adding a custom event source #14290
OCPBUGS-41709: Need to allow blank for Project/namespace when setting SA Subject in ‘Project access tab’ #14278
OCPBUGS-42069: add Create button to Console plugins tab #14302
OCPBUGS-41996: Fix updating the “Until” field on the Silence > Edit page #14296
OCPBUGS-38112: do not directly mutate links in useMemo #14117
OCPBUGS-34518: Restore user toggle when authentification is disabled #13902
OCPBUGS-41619: Use vCenterCluster value from CM as primary resource #14268
OCPBUGS-37046: Fix TypeError: Cannot read properties of null (reading ‘metadata’) in Topology view #14059
OCPBUGS-38911: Values entered into the Instantiate Template form are automatically cleared #14187
OCPBUGS-38914: Unrelated readme opened when opening CodeReady workspaces from Quarkus using s2i quickstart #14188
OCPBUGS-38968: A value submitted in From view is wrapped with single quotation after switching to Yaml view. #14193
OCPBUGS-38424: fix bug where cluster version text appears black in da… #14144
OCPBUGS-38464: correct casing in “Lightspeed” #14148
OCPBUGS-37430: Fix utilization card limits/total display #14082
OCPBUGS-36510: DeploymentConfigs deprecation info alert should not present on the Edit deployment page #14031
OCPBUGS-37954: No access to list pipelines.tekton.dev prevents from using Delete application form #14107
OCPBUGS-36601: Tooltip on Pipeline when expression is not shows #14033
OCPBUGS-38803: CONSOLE-4108 [4.16 backport] Show deprecated operators in OperatorHub #14095
OCPBUGS-37048: Fix “Auto deploy when new image is available” becomes unchecked when editing a deployment from web console #14060
OCPBUGS-35839: Fix placement of icons on WebKit #13988
OCPBUGS-35271: Fix password set to Secret created through Start Pipeline form #13954
OCPBUGS-38093: correct link for Lightspeed operator #14112
OCPBUGS-36484: Revert - terminal: use username if uid is not present #14027
OCPBUGS-37097: Add useQuickStartContext hook and expose it via dynamic plugin API #14070
OCPBUGS-36864: maintain session across tabs #14051
OCPBUGS-36620: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14035
OCPBUGS-36759: RWOP accessMode is not available on OpenShift console UI #14040
OCPBUGS-37063: hide ‘View all steps in documentation’ for ROSA and OSD #14069
OCPBUGS-36411: fix BMH restart annotation #14022
OCPBUGS-36841: ensure correct API version for OperandDetails #14049
OCPBUGS-36186: Add default sorting column for VirtualizedTable component of dynamic plugin sdk #14008
OCPBUGS-36002: fix flaking crd-extension tests #14003
OCPBUGS-35565: remove duplicate OAuth config #13982
OCPBUGS-35571: Update Go prereq in README.md #13981
OCPBUGS-35465: ManagedField in YAML editor is not collapsed by default which is incorrect #13974
OCPBUGS-35408: fix pseudolocalization #13972
OCPBUGS-35280: Ensure requiredVersion is set for Console provided shared modules #13956
OCPBUGS-34011: Use bridge instead of cnv-bridge #13875
OCPBUGS-35946: Fix invalid node filesystem query #13999
Full changelog

console-operator

OCPBUGS-77992: update go mod dependency for konflux #1115
OCPBUGS-60794: Update downloads deployment configuration to use master node selector #1036
OCPBUGS-46481: Dont disable console when authConfig type is set to None #952
OCPBUGS-34783: set required-scc for openshift workloads #908
OCPBUGS-34012: Cache organization ID #916
OCPBUGS-33788: Tolerate the absence of ingress capability on HyperShift clusters #910
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-55648: Check error returned by ipv6 SettleAddresses #188
OCPBUGS-37725: Update owners #166
Full changelog

coredns

OCPBUGS-77463: Modify .gitignore to not exclude vendor build folders #168
OCPBUGS-37078: UPSTREAM: <carry>: openshift: Bump the version of ocp_dnsnameresolver external plugin #127
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-68080: fix CVE-2025-65637 #361
OCPBUGS-58884: CARRY: don’t ignore json files #341
OCPBUGS-43426: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.29 into release-4.16 #303
OCPBUGS-38167: rebase CPO on 4.16 #291
Full changelog

csi-driver-manila-operator

OCPBUGS-38458: Add missing healthchecks #241
OCPBUGS-30438: Bump protobuf dependency #237
OCPBUGS-38013: Set required-scc for openshift workloads #235
Full changelog

csi-external-resizer

OCPBUGS-62465: Requeue PVC over PV creation #174
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-60450: UPSTREAM: 1238: Snapshot Controller startup should not LIST all volumesnapshots #186
Full changelog

csi-node-driver-registrar

OCPBUGS-64632: update log level verbosity to not clutter logs #91
Full changelog

docker-builder

OCPBUGS-65907: BuildConfig inline Dockerfile fails with heredoc syntax #489
OCPBUGS-58074: S2I build cpu limits observed by assemble are limited to 1 cpu #475
OCPBUGS-53076: Upgraded Kubernetes dependency from 1.28.2 to 1.29.0 #468
OCPBUGS-42893, OCPBUGS-42914: buildah dependency bump to fix - Buildah allows arbitrary directory mount and symlink traversal vulnerability in the containers/storage library #450
OCPBUGS-43186: runc library bump to 1.1.12 #420
OCPBUGS-47775: skipping some unit tests to avoid failures as they are duplicate #424
OCPBUGS-48159: Add team members to the OWNERS file #426
OCPBUGS-30455: bump google.golang.org/protobuf to 1.33.0 #402
Full changelog

docker-registry

OCPBUGS-60183: bump openshift/docker-distribution #441
OCPBUGS-53654: bump jwt and oauth dependencies #432
OCPBUGS-49696: bump docker distribution #423
OCPBUGS-39412: pull upstream distribution changes to use a consistent multipart chunk size #410
OCPBUGS-35567: use SelfSubjectReview to obtain user info #405
Full changelog

egress-router-cni

OCPBUGS-35525: update to go 1.21 and k8s.io mods to v0.29.2 #85
Full changelog

etcd

NO-ISSUE: Add support for cachi2 based deps #298
OCPBUGS-34690: Rebase etcd 3.5.14 openshift 4.16 #274
Full changelog

gcp-cluster-api-controllers

OCPBUGS-78280: [release-4.16] update go mod dependency for konflux #267
Full changelog

gcp-machine-controllers

OCPBUGS-55249: Disable shielded VMs for non-UEFI disks #116
OCPBUGS-48484: Refactor exists() to handle gcp API change #106
Full changelog

gcp-pd-csi-driver

OCPBUGS-68087: Update logrus to 1.9.3 #92
Full changelog

haproxy-router

OCPBUGS-56424: Add support for IdleCloseTerminationPolicy #655
OCPBUGS-49391: Reject All CA-Signed Certs Using SHA1 #651
Full changelog

hyperkube, pod

OCPBUGS-68041, OCPBUGS-68091: CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.16] #2582
OCPBUGS-74299: Skip E2e: attach on previously attached volumes should work #2568
OCPBUGS-65694: Fix Concurrentmap Iteration #2519
CNTRLPLANE-1612: Backport StreamingCollectionEncoding for JSON and protobuf #2485
OCPBUGS-61908: UPSTREAM: <carry>: Don’t retry storage calls with side effects. #2470
OCPBUGS-60553: [4.16]: podresources: list: use active pods #2454
4.16: OCPBUGS-60872: UPSTREAM: 127757: scheduler: Improve CSILimits plugin accuracy by using VolumeAttachments #2435
OCPBUGS-60272: Bump nfs server provisioner #2402
OCPBUGS-58054: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2342
OCPBUGS-58054: UPSTREAM: <carry>: disable some legacy cloud provider Azure tests #2352
OCPBUGS-57290: UPSTREAM: <carry>: Bump cadvisor version to fix kubelet #2325
OCPBUGS-49906: Bump k8s api to 1.29.14 #2211
OCPBUGS-45931: UPSTREAM: <carry>: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup #2158 #2200
OCPBUGS-46003: Bump k8s api to 1.29.11 #2161
OCPBUGS-44513: Bump k8s api to 1.29.10 #2133
OCPBUGS-42555: Allow pod to be scheduled if node’s name and hostname mismatch #2099
OCPBUGS-42168: Bump k8s api to 1.29.9 #2090
release-4.16] OCPBUGS-42057: UPSTREAM: <drop>: bump(github.com/openshift/apiserver-library-go) #2096
OCPBUGS-39015: Bump k8s api to 1.29.8 #2066
OCPBUGS-36773: UPSTREAM: <carry>: Disable vSphere tests with pre-provisioned volumes #2021
NO-JIRA: update downstream owners #2049
OCPBUGS-37621: Bump k8s api to 1.29.7 #2039
OCPBUGS-19802: Bump 4.16 runc #2032
OCPBUGS-35551: Bump k8s 1.29.6 #1990
Full changelog

hypershift

OCPBUGS-76534: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7704
OCPBUGS-74375, OCPBUGS-74376: Support proxy authentication when user/pass is included in URL #7578
OCPBUGS-73118: Fix Konflux EC voilation, update deprecated base … #7459
OCPBUGS-63640: [release-4.16] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7113
OCPBUGS-64680: Update DNS names for ovn-kubernetes cp metrics #7158
CNTRLPLANE-1904: Migrate 4.16 pipelines to common pipeline template #7212
CNTRLPLANE-1426: feat(konflux): tag MCE HO images with latest #6839
OCPBUGS-61252: dont use registryOverrides on kube rbac proxy image be… #6756
OCPBUGS-61582: Update KCM node monitor grace period #6797
OCPBUGS-61860: Use the common MCE konflux pipeline #6844
OCPBUGS-60150: Always compress and encode payload in token secret for inplace upgrades #6750
OCPBUGS-60951: MCE 2.6 konflux hcp cli #6701
CNTRLPLANE-1203: HO MCE change to hermetic ta build #6654
CNTRLPLANE-1231: Move CPO pipeline to hermetic builds #6599
OCPBUGS-58505: [release-4.16] Add missing service network DNS entries to KAS cert #6393
OCPBUGS-57494: Add proxy variables for the MCD Pod #6286
OCPBUGS-55697: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6114
CNTRLPLANE-919: Konflux build pipeline service account migration #6087
CNTRLPLANE-919: Konflux build pipeline service account migration #6082
OCPBUGS-51804: Fix golang crypto dependency go.mod replacement #5994
OCPBUGS-54914: Add konnectivity-proxy sidecar to openshift-oauth-apiserver #6026
OCPBUGS-54632: Sync RBAC for attaching volumes on VM level #5998
OCPBUGS-49914: Reconcile proxy CA bundle into hosted cluster #5983
OCPBUGS-53902: bump golang-jwt v4 and v5 #5907
Red Hat Konflux update control-plane-operator-4-16 #5957
ART-11792: update go mod dependency for konflux #5922
OCPBUGS-51733, OCPBUGS-51804: Bump dependencies to OCP fork in backports #5901
OCPBUGS-53308: fix(deps): bump go-jose #5866
OCPBUGS-52506: refactor aws identity health check into new controller #5781
OCPBUGS-52857: Make managed-trust-bundle optional #5809
OCPBUGS-52426: change plaform to platform #5773
OCPBUGS-50993: Honor proxy vars in the util insecure http client #5662
OCPBUGS-46466: Consistently look up and dial cloud API hostnames #5301
OCPBUGS-50698: add region to AWS creds passed to operators managed by CPO #5670
OCPBUGS-51296: 4.17 Add HostedCluster additional trustbundles to konnectivity-https-proxy #5707
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.5 #5686
OCPBUGS-50694: OCPBUGS-50692: Fix IsIPv4 function identifying also addresses instead of CIDRs #5620
NO-JIRA: chore(deps): update dependency mkdocs-material to v9 #5635
OCPBUGS-50557: Prevent IgnitionServer from flooding the API server with patch requests #5599
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1739267472 #5597
NO-JIRA: chore(deps): update dependency mkdocs-material to v8.5.11 #5591
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.3 #5587
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1738746453 #5574
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.2 #5575
NO-JIRA: chore(deps): update dependency mkdocs to v1.6.1 #5531
NO-JIRA: chore(deps): update dependency mkdocs-glightbox to v0.4.0 #5532
OCPBUGS-49640: fix overwriting PKI operator HCP conditions #5506
NO-JIRA: chore(deps): chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1737480393 - abandoned #5484
NO-JIRA: chore(deps): update konflux references (release-4.16) #5477
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.50 (release-4.16) #5437
NO-JIRA: Update Konflux references (release-4.16) #5431
NO-JIRA: chore(deps): update konflux references (release-4.16) #5384
NO-JIRA: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v9 (release-4.16) #5298
NO-JIRA: [release-4.16] Bump golang.org/x/crypto and golang.org/x/net #5370
NO-JIRA: Update Konflux references (release-4.16) #5328
NO-JIRA: Red Hat Konflux update control-plane-operator-4-16 #5337
OCPBUGS-47539: Separate CPO containerfiles #5333
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.22.7-1733160835 (release-4.16) #5295
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.49 (release-4.16) #5297
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.48 (release-4.16) #5294
NO-JIRA: Update Konflux References and Perform Migration for Release-4.16 #5261
OCPBUGS-39372: Fixed NodePool version validation #5219
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.47 (release-4.16) #5209
NO-JIRA: chore(deps): update konflux references (release-4.16) #5207
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.46 (release-4.16) #5189
OCPBUGS-43930: Return the right tagReference on Catalogs ImageStream #5133
NO-JIRA: chore(deps): update konflux references (release-4.16) #5161
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.45 (release-4.16) #5163
chore(deps): update konflux references (release-4.16) #5135
OCPBUGS-44277: Configure OAuth https proxy to dial cloud endpoints directly #5069
chore(deps): update konflux references (release-4.16) #5119
OCPBUGS-43973: Add network policies for konnectivity server and ignition server proxy #4998
NO-JIRA: Update Konflux references (release-4.16) #5112
NO-JIRA: Update Konflux references (release-4.16) #5099
chore(deps): update konflux references (release-4.16) #5078
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.16) #5059
NO-JIRA: chore(deps): update konflux references (release-4.16) #5058
NO-JIRA: Update Konflux references (release-4.16) #5042
chore(deps): update konflux references (release-4.16) #5024
chore(deps): update konflux references (release-4.16) #5019
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.43 (release-4.16) #5017
NO-JIRA: Update Konflux references (release-4.16) #5012
OCPBUGS-43840: add ValidIDPConfiguration condition to report IDP config issues #4985
NO-JIRA: chore(deps): update konflux references (release-4.16) #4971
OCPBUGS-43046: Do not send traffic to local audit-webhook through konnectivity #4883
NO-JIRA: chore(deps): update konflux references (release-4.16) #4954
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.42 (release-4.16) #4947
NO-JIRA: chore(deps): update konflux references (release-4.16) #4933
OCPBUGS-43104: label routes only when HCP router used #4899
OCPBUGS-43308: Use guest DNS resolution in Konnectivity HTTPS proxy by default #4905
NO-JIRA: chore(deps): update konflux references (release-4.16) #4923
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.16) #4919
NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.16) #4908
NO-JIRA: chore(deps): update konflux references (release-4.16) #4896
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.16) #4880
OCPBUGS-42432: Use KubeClientCABundle for HostedClusterConfigOperator cluster-signer-ca #4799
OCPBUGS-42342: Let payload generation pick the release for the NodePool #4787
OCPBUGS-42431: Conditionally manage kubeconfig secrets for DNS and Ingress operators #4798
NO-JIRA: chore(deps): update konflux references (release-4.16) #4853
OCPBUGS-42608: Add Annotation to skip deleting hcp namespace #4830
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.16) #4827
chore(deps): update konflux references (release-4.16) #4816
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.38 (release-4.16) #4806
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.37 (release-4.16) #4796
chore(deps): update konflux references (release-4.16) #4781
NO-JIRA: chore(deps): update konflux references (release-4.16) #4760
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.36 (release-4.16) #4759
NO-JIRA: Security fixes for openshift-ci-security job #4750
OCPBUGS-41372: CPO oauth idp converter: resolve names before dialing #4689
NO-JIRA: chore(deps): update golang docker tag to v1.23 (release-4.16) #4729
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.34 (release-4.16) #4728
NO-JIRA: chore(deps): update konflux references (release-4.16) #4727
OCPBUGS-38058: Add HTTP konnectivity proxy to OAuth server #4496
HOSTEDCP-1955: bump CCO version #4696
OCPBUGS-34803: cmd: report server version, supported OCP #4141
OCPBUGS-39293: copy image-registry AdditionalTrustedCA configmap into HC openshift-config #4647
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-9 (release-4.16) #4685
OCPBUGS-38062: [release-4.16] Use HTTP proxy for ingress controller #4688
NO-JIRA: chore(deps): update konflux references (release-4.16) #4684
OCPBUGS-39447: handle version skewed NodePools that do not have rhel9 binaries #4664
HOSTEDCP-1895: [release-4.16] Allow setting Kube APIServer maximum requests in flight #4551
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-7.1724661022 (release-4.16) #4600
chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.33 (release-4.16) #4602
chore(deps): update konflux references (release-4.16) #4599
OCPBUGS-38942: copy oapi ca-trust recursively when building trust anchor #4615
NO-JIRA: Flaky cert validation test #4622
OCPBUGS-38259: Set KCM node monitor grace period #4520
OCPBUGS-38726: fix: bump github.com/IBM/go-sdk-core/v5 #4611
HOSTEDCP-1764: retrieve registryOverrides when ImageStream is not ava… #4541
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-7 (release-4.16) #4525
OCPBUGS-36781: Set Azure VM identity if user assigned identity set #4341
OCPBUGS-37936: set proxy envvars on aws and azure CCMs #4476
OCPBUGS-38486: hcco: reconcile apiserver config into hosted cluster #4559
NO-JIRA: fix(KONFLUX-3663): format PipelineRun files and upload SAST results #4534
OCPBUGS-38131: Let the CPO oidc check resolve through data plane #4505
NO-JIRA: test: relax mgmt KAS egress check #4561
chore(deps): update quay.io/openshift/origin-base docker tag to v4.16 (release-4.16) #4528
chore(deps): update golang docker tag to v1.22 (release-4.16) #4527
NO-JIRA: Update Konflux references (release-4.16) #4524
OCPBUGS-34801: remove weak ciphers from security profile #4518
OCPBUGS-37060: OCPBUGS-35905: E2E test to verify openshift-apiserver TLS certificates #4366
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9 (release-4.16) #4482
NO-JIRA: chore(deps): update konflux references (release-4.16) #4481
OCPBUGS-37065: OCPBUGS-35899: Doubled machineHealthCheck timeout on Agent and None #4367
OCPBUGS-30282: Multiple MachineConfigs in one CM #4398
OCPBUGS-36937: [release-4.16] Add HTTP(s) konnectivity proxy and use it with OpenShift APIServer #4357
OCPBUGS-36766: Delete IDMS in dataplane once HCP ICS field is removed #4434
NO-JIRA: Konflux migration for release-4.16 #4436
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 (release-4.16) #4430
HOSTEDCP-1569: test: e2e: skip unknown conditions instead of erroring #4440
OCPBUGS-37645: Set right endpointSlice port #4431
OCPBUGS-37214: Separate ibmcloud kms encryption configuration types #4380
OCPBUGS-37302: fix(api): Nodepool CEL validation fix #4395
NO-JIRA: Red Hat Konflux update hypershift-release-mce-26 #4392
OCPBUGS-37241: extract rhel9 MCO binaries for rhel8 based MCO images #4383
NO-JIRA: [release-4.16] test/e2e: remove api budget checks #4368
HOSTEDCP-1795, HOSTEDCP-1796: Customize the self-generated cert validity and rotation #4371
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-2 (release-4.16) - abandoned #4364
NO-JIRA: trivial typo fixes to configuring-storage.md #4353
OCPBUGS-36849: Add newline after TLS certs referenced by image.config #4352
OCPBUGS-36589: Fix Hypershift dump for non-OpenShift Management Clusters #4317
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.10-1.1719562237 (release-4.16) - abandoned #4328
OCPBUGS-36358: enable audit log for oauth-openshift #4302
OCPBUGS-35522: Copy infra-volumesnapshot-class-mapping to core binding #4291
NO-JIRA: chore(deps): update konflux references (release-4.16) #4299
OCPBUGS-36227: kubevirt-csi-driver: Pass infra kubeconfig in case of external infra #4276
OCPBUGS-35341: [release-4.16] Fixed ValidReleaseInfo condition #4204
OCPBUGS-36220: Make guest cluster components use the correct KAS port #4275
OCPBUGS-35934: check mgmt cluster for route capability before DeleteIfNeeded for ovn sbdb route #4264
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-77210: [release-4.16] standardize build paths #124
OCPBUGS-58737: bump github.com/golang/glog to version v1.2.4 #106
OCPBUGS-56063: tech debt: rework vendor patches #91
OCPBUGS-53910: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #84
OCPBUGS-36067: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #71
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-59727: [IBM VPC] set offlineExpansion to false in e2e test manifest #149
OCPBUGS-42286: Reorder static resources to create RBAC first #129
OCPBUGS-36073: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #120
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67288: [release-4.16] Fix incomplete vendor/ #138
OCPBUGS-51818: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #109
OCPBUGS-43686: UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.16 #89
Full changelog

ibmcloud-machine-controllers

OCPBUGS-44870: Bump dependency for CVE #53
OCPBUGS-36698: IBMCloud: Handle pagination for subnets #42
Full changelog

insights-operator

OCPBUGS-68370: Add filtering to add other possible pod status to QEMU gatherer #1200
OCPBUGS-67009: QEMU logs are not gathered if there are pending status virt-launcher pods #1197
And 16 elided commits (e.g. from squash or rebase merges)
Full changelog

ironic

OCPBUGS-69789: Bump eventlet version to 0.33.1-7 #763
METAL-1306: Do not use openstack packages #648
OCPBUGS-49895: Drop quiet option of grep to avoid race condition with pipefail #634
OCPBUGS-48151, OCPBUGS-48598: Bump jinja2 to 3.0.1-6.el9.2 #623
OCPBUGS-44895: Bump Ironic #610
OCPBUGS-43950, OCPBUGS-43958: Bump python-waitress [4.16] #604
OCPBUGS-43438: Include fixes for CVE-2024-5569 #599
OCPBUGS-42511: Include fix for CVE-2024-47211 #594
OCPBUGS-39017: Bump ironic-lib to fix utf8 decoding issue #569
OCPBUGS-38797: redfish-virtualmedia fails on XFusion nodes #564
OCPBUGS-42113: Update ironic-inspector to fix the memory leak #587
OCPBUGS-37758, OCPBUGS-39383: Include fixes for CVE-2024-44082 #579
OCPBUGS-38510: set min version for python3-webob #553
OCPBUGS-33376: bump werkzeug #534
OCPBUGS-36838: Update Jinja2 #521
OCPBUGS-36285: Read ironic and inspector htpasswds from files #517
Full changelog

ironic-agent

OCPBUGS-61165: netutils: Use ethtool ioctl to get permanent mac address #215
OCPBUGS-69781: Bump eventlet version to 0.33.1-7 #232
METAL-1306: Do not use openstack packages #180
OCPBUGS-39017: Bump ironic-lib to fix utf8 decoding issue #156
OCPBUGS-39383: Include fixes for CVE-2024-44082 #161
OCPBUGS-38510: set webob and bump werkzeug #149
Full changelog

ironic-static-ip-manager

OCPBUGS-49595: Fix subnet validation #48
Full changelog

keepalived-ipfailover

OKD-219: add util-linux to base image #188
Full changelog

kube-metrics-server

: OCPBUGS-46663: Disable HTTP2 #41
OCPBUGS-41717: Wire server run options to flags. ([release-4.16] backport) #37
Full changelog

kube-proxy, sdn

OCPBUGS-54457: Drop SYNACK as well in MCS side #658
OCPBUGS-44674: Handle openshift-host-network namespace as special when it modifies #648
OCPBUGS-46493: Raise the minSyncPeriod for NetworkPolicies to 10s during migration #649
OCPBUGS-46048: clean up containernetworking/plugins vendoring in sdn #645
OCPBUGS-45806: Stop checking ruleVersion [4.16] #643
OCPBUGS-44301: Use copy() to duplicate a net.IP #641
OCPBUGS-43344: OCPBUGS-42244: Implement namespaceSelectors on ingress with all pods IPs #635
OCPBUGS-42203: fix UDP conntrack cleanup #636
OCPBUGS-42159: fix redundant router-default iptables rule #633
Full changelog

kube-rbac-proxy

OCPBUGS-30447: protobuf bump [4.16] #111
Full changelog

kube-state-metrics

OCPBUGS-74875: Deduplicate CRS stores #133
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-16). #227
Full changelog

kubevirt-csi-driver

OCPBUGS-54632: Ensure volume stays attached through reboots #57
OCPBUGS-44622: During detach don’t return error if VM is not found #49
Full changelog

libvirt-machine-controllers

OCPBUGS-77196: Fix incomplete vendor/ #302
OCPBUGS-26525: Updating ose-libvirt-machine-controllers-container image to be consistent with ART for 4.16 #283
Full changelog

machine-api-operator

OCPBUGS-76849: bumped logrus to v1.9.3 #1463
OCPBUGS-57210: Updates GCP CredentialsRequest #1378
OCPBUGS-55248, OCPBUGS-55249: Updates GCP credentials request #1355
OCPBUGS-53045: add image/read permissions #1348
OCPBUGS-52342: Drop oVirt support #1336
OCPBUGS-45947: vSphere klog initialization preventing verbose log messages #1312
OCPBUGS-45998: Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages #1313
OCPBUGS-39028: Updates message verbs to use %q where appropriate #1282
OCPBUGS-43433: Vsphere: Handle cloned instance with lost taskID #1298
CORS-3648: Add the hyperdisk-balanced disk type #1279
CFE-1051: Adding web-hook validation for capacityReservationGroupID #1263
Full changelog

machine-config-operator

OCPBUGS-77253: Machine-config controller should not log about non-existent pull-secret changes #5694
OCPBUGS-77184: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5685
OCPBUGS-63155: [release-4.16] Networking: reset ovn-remote config and allow ovnkube controller to set it #5359
OCPBUGS-60773: scope MCD node listers to current node #5260
OCPBUGS-63553: Add control-plane label for master nodes on legacy clusters #5376
OCPBUGS-57423: pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition #5119
OCPBUGS-63332: Recheck generatedByControllerVersion annotation prior to deleting a degraded MC #5364
OCPBUGS-56753: Support NODEIP_HINT in IPI deployments too #5079
OCPBUGS-62689: Add mcd_local_unsupported_packages recording rule #5328
OCPBUGS-59931, OPNET-681: Support migration to NMState #5205
OCPBUGS-61869: Override NMState service definition #5290
OCPBUGS-60621: Add workaround fix for static pod race #5252
OCPBUGS-56558: Log CRC MC deletion #5178
OCPBUGS-58270: Do not set cpu system reserve below the default value #5163
add missing vendors #4952
OCPBUGS-48283: Do not run resolv-prepender from NM dispatcher #4784
OCPBUGS-56868: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5090
OCPBUGS-56626: error from generateAndValidateRenderedMachineConfig function can be misleading #5075
OCPBUGS-54831: Make mtu-migration run after wait-for-primary-ip #4990
OCPBUGS-55684: MSBIC should not update windows machinesets #5028
OCPBUGS-35921: userCA and cloudCA certfiicates are not removed from nodes and ignition config #4419
OCPBUGS-53248: Enforce VIPs to be collocated at the same host #4923
OCPBUGS-53043: Enable nmstate-configuration on all platforms #4910
OCPBUGS-52952: Add ipsec connect wait service #4931
OCPBUGS-54163: Fixing typos for MachineConfigNode #4942
OCPBUGS-53434: Update ObservedGeneration in KubeletConfig #4935
OCPBUGS-53313: daemon: ensure ostree-finalize-staged is started before rebooting #4928
OCPBUGS-52421: Update format verbs for alert logs #4901
OCPBUGS-51347: Update the storage.conf configuration file template #4881
OCPBUGS-52593: Update cluster-reader ClusterRole permissions #4905
OCPBUGS-52404: create /run/nodeip-configuration before use #4897
OCPBUGS-52310: configure-ovs workaround for ovs-if-br-ex bug #4892
OCPBUGS-50862: Auto-recover from MC with invalid extension #4853
OCPBUGS-43680: Regenerate the rendered MC in use when deleted #4655
OCPBUGS-49976: Add clarification to invalid maxUnavailable alert #4837
OCPBUGS-39224: Do not enable on-prem-resolv-prepender.path for UPI #4573
OCPBUGS-48290: Pausing Master MCP results in Alerts #4786
OCPBUGS-43765: openstack: fix non-old systemd compatible unit #4660
OCPBUGS-43741: Soften haproxy timeout for kubeapi probe #4662
OCPBUGS-48116: OCPBUGS-47801: trying to wait for sub-controllers #4777
OCPBUGS-45974: Remove trailing periods from AWS provided hostnames #4744
OCPBUGS-44337: Removal of additionalTrustBundle CA does not remove certificate from node backport #4688
MCO-1342: Backport Telemetry to 4.16 #4649
OCPBUGS-44043: Disable ESP offload for OVS attached interfaces #4676
OCPBUGS-42109: Do not use ‘restart’ for ‘oneshot’ service #4616
OCPBUGS-42744: Check for kernel arg diff in updateOnClusterBuild #4628
OCPBUGS-42722: Panic seen in CI job for MCC pod #4626
OCPBUGS-42719: MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP #4625
OCPBUGS-41293: Enable the use of Linux Bridge as the ovs default port connection #4563
OCPBUGS-41256: Set ESP offloads off in bonds if slaves don’t support them #4627
OCPBUGS-41806: When newly built images rolled out, the update progress is not displaying correctly (went 0 –> 3) #4584
OCPBUGS-41518: CVE-2024-3727 ose-machine-config-operator-container: containers/image: digest type does not guarantee valid type #4569
OCPBUGS-38997: Machine-config daemon ListPools panic during tech-preview CI runs #4550
OCPBUGS-38711: SCC-pinning for openshift workloads #4539
OCPBUGS-36850: Port number 22623 exposing weak ciphers to external client from master node IP #4556
OCPBUGS-38373: Revert “MCD-pull: run after network-online.target in Azure” #4528
OCPBUGS-36171, OCPBUGS-36172: fix secret canonicalization #4432
OCPBUGS-37759: Guard MachineOSBuild & MachineOSConfig informers with feature gates #4505
OCPBUGS-37550: On-Prem resolv prepender to watch for NM changes #4498
OCPBUGS-37485: kubelet: boot without PSI for performance concerns #4486
OCPBUGS-37840: [release-4.16] Introduce versioning for Auto Node Sizing feature #4382
OCPBUGS-35891: Make logging configurable for on-prem components #4418
OCPBUGS-37470: Nodes are drained twice when an OCB image is applied #4484
OCPBUGS-37460: Openshift uncordoned compute-node that was intentionally cordoned #4483
OCPBUGS-37428: Machine-config operator should not hot loop generating ValidatingAdmissionPolicyUpdated events #4482
OCPBUGS-36775: templates: run disable-mglru conditionally #4462
OCPBUGS-36330: daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages #4445
OCPBUGS-36536: MCD-pull: run after network-online.target in Azure #4453
OCPBUGS-35929: The MCD can override a restart crio action with a reload crio action #4420
OCPBUGS-36165, OCPBUGS-36166: CurrentImagePullSecret should be consumed by the MCD #4430
OCPBUGS-35753: Fix reference to $host_file #4413
OCPBUGS-36198: daemon/update: disable systemd unit before overwriting #4436
OCPBUGS-35806: Revert “Azure: add Azure specific dnsmasq ordering” #4414
Full changelog

machine-image-customization-controller

OCPBUGS-68093: [4.16] uplift logrus #153
Full changelog

machine-os-images

OCPBUGS-54169: Change rhcos release browser url #57
Full changelog

monitoring-plugin

OU-1260: [release-4.16] feat: use npm instead of yarn #813
OCPBUGS-76807: fix for CVE-2025-69873 #849
OCPBUGS-54316: Fix “Export as CSV” #469
OU-559: fix log based alerts namespace for dev console #320
OCPBUGS-44395: remove unused package and upgrade vulnerable dependency #272
OCPBUGS-43239: upgrade dynamic plugin sdk to remove vulnerable dependencies 4.16 #217
OCPBUGS-42424: fix path-to-regexp dependency #197
Full changelog

multus-admission-controller

OCPBUGS-58767: Update the github.com/golang/glog module to v1.2.4 #103
OCPBUGS-36341: Update owners #87
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-47472: adds getcontext (backport 4.16) #261
Full changelog

multus-networkpolicy

Update owners (#57) #57
Full changelog

multus-route-override-cni

OCPBUGS-37726: Update owners #58
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-70215: Prevent accidental IP deallocation in statefulsets #396
OCPBUGS-55618: Fixes leftover podref issue #365
OCPBUGS-50005: [Release-4.17]Kubeconfig loop #340
OCPBUGS-37707, OCPBUGS-37708: [release-4.16] align api calls timeout and skip pods marked for deletion #304
OCPBUGS-37723: Update owners #294
OCPBUGS-35923: [release-4.16] Return previous IP allocation for add cmd #293
Full changelog

must-gather

OCPBUGS-66106: Separate resources with comma to fix malformed inspect #515
OCPBUGS-42960: Gather OSUS data #455
OCPBUGS-48082: Update owners #473
OCPBUGS-46407: Support gathering IPsec data #469
OCPBUGS-42969: Collect etcd object count #454
OCPBUGS-43056: Open [Release-4.16] Multus is now a Pod and will be captured by normal #449
OCPBUGS-35357: Run ppc node collection in parallel #426
Full changelog

network-interface-bond-cni

OCPBUGS-61348: Bump github.com/containernetworking/plugins from to 1.7.1 #95
NO-JIRA: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.16 #91
NO-JIRA: Add ci-operator.yaml file on release-4.16 #84
Full changelog

network-metrics-daemon

OCPBUGS-58777: Bump github.com/golang/glog to v1.2.4 (#113) #113
OCPBUGS-60186: Replace e2e test image (#122) #122
swtich golint install method (#123) #123
Correct 4.16 owners file (#98) #98
Full changelog

network-tools

add missing go vendors #140
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-30524: bump google.golang.org/protobuf to v1.33.0 #38
Full changelog

nutanix-machine-controllers

OCPBUGS-51854: CVE-2025-22868 #110
OCPBUGS-47266: fixing CVE-2024-45338 #93
Full changelog

oauth-apiserver

OCPBUGS-74112: UPSTREAM: <carry>: bump kubernetes-apiserver to pick up loopback cert expiration update #166
NO-JIRA: (chore): update OWNERS file #172
OCPBUGS-30525: Update dependencies to address CVE-2024-24786 #124
Full changelog

oauth-proxy

OCPBUGS-61446: Update x/crypto to v0.31.0 #335
OCPBUGS-62707: Fix oauth-proxy e2e-component tests #338
Full changelog

oc-mirror

changes the owners file (#1015) #1015
OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1021) #1021
OCPBUGS-38035: Rebuild catalogs – without cache generation (#905) #905
OCPBUGS-36410: fix: creates tags for release images (#901) #901
OCPBUGS-37055: Use proxy for HTTP request release signatures (#893) #893
OCPBUGS-37040: use current working-dir for fetching release content for disk to mirror (#892) #892
OCPBUGS-36498: Fix to ensure invalid catalogs are skipped (#889) #889
OCPBUGS-362214: Fix V2 DiskToMirror should not require internet access (#884) #884
OCPBUGS-35279: Fix spelling error in delete console message (#881) #881
OCPBUGS-35409: Implement fail safe / fail fast in workers (#879) #879
Full changelog

openshift-apiserver

OCPBUGS-68104: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.16] #610
OCPBUGS-74113: UPSTREAM: <carry>: bump kubernetes-apiserver to pick up loopback cert expiration update #595
OCPBUGS-63394: Wire dry run option to Image API server operations #566
OCPBUGS-61474: Skip blocked registry check for registries with mirrors #552
OCPBUGS-56612: Fix image reference in TestImageStreamImportQuayIO #516
OCPBUGS-49656: prevent panic when no image and error are set #494
OCPBUGS-49656: validate image property isn’t nil before using #493
OCPBUGS-49656: move on to the next digest/tag during failures #492
OCPBUGS-45010: Pass expected type to deploymentconfig/scale object validation. #461
OCPBUGS-42724: fail image import when both image and error are nil #455
Full changelog

openshift-controller-manager

OCPBUGS-61707: legacy image pull secret rollback controller #416
OCPBUGS-60233: ignore error failing to find pull/push secrets #409
OCPBUGS-57513: Set node-pullsecrets volume to read-only to protect image pull credentials #394
OCPBUGS-56354: Empty proxy variables are causing issues during the build #382
OCPBUGS-44186: user system:serviceaccount:openshift-infra:serviceaccount-pull-secrets-controller in ns/openshift-infra must not produce too many applies #351
OCPBUGS-48202: Add team members to the OWNERS file #358
NO-JIRA: cleanup root and app OWNERS #347
OCPBUGS-42420: Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #343
OCPBUGS-39191: replaces deprecated square/go-jose wtih go-jose/go-jose #329
OCPBUGS-37526: Race condition when deleting ServiceAccount #324
OCPBUGS-36862: 4.16 “Bad” reconciliation loops can cause unbounded dockercfg secret creation #323
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-77959: Remove the collect-profiles info from the microshift kustomization file #1251
OCPBUGS-77169: Remove the collect-profiles job #1235
OCPBUGS-58881: operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted #1102
OCPBUGS-59647: Reduce Frequency of Update Requests for Copied CSVs (#3597) #1042
OCPBUGS-60847: Add NetworkPolicy as a supported kind #1050
OCPBUGS-61388: [4.16] e2e stability fixes #1083
OCPBUGS-57429: reduce cache expiry frequency [release-4.19] #1022
OCPBUGS-56358: fix(olm): improve error logging for missing olm.managed label (#3558) #1006
OCPBUGS-53395: Ensure that PSA label is latest instead of pinning versions #987
OCPBUGS-48696: Fix excessive catalog source snapshots cause severe performance regression #957
OCPBUGS-48661: Fix concurrent namespace resolution #947
OCPBUGS-46928, OCPBUGS-46935, OCPBUGS-47315: x/net bump to v0.34.0 [release-4.16] #939
OCPBUGS-47738: catalog-operator: Delete Pods that were evicted (#3459) #925
OCPBUGS-46434: CRD upgrade existing CR validation fix #916
OCPBUGS-44802: fix: call TokenRequest API when service account token secret is missing #900
OCPBUGS-41540: [4.16] add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata (#1384) #859
OCPBUGS-41677: [4.17] adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #863
OCPBUGS-41557: Fix e2e flake: upgrade CRD with deprecated version #861
OCPBUGS-41217: (fix) registry pods do not come up again after node failure (#3366) #854
OCPBUGS-38290: release-4.16 Resolver: list CatSrc using client, instead of referring to registry-server cache #838
OCPBUGS-38129: [release-4.16] Update junit report file name to show spec results on Test Grid #833
OCPBUGS-37456: Updating ose-operator-framework-tools-container image to be consistent with ART for 4.16 #826
OCPBUGS-37559: [release-4.16] Update e2e config and backport list of flakes #814
OCPBUGS-37018: Bump github.com/containers/image/v5 #822
OCPBUGS-36450: Can’t install operator on 4.15 after uninstalling it on a prior version #809
OCPBUGS-25019: fix xplat compile for of-tools image; hide utest files from git; use rhel8 art builder image #793
OCPBUGS-36137: fix sorting unpack jobs #799
OCPBUGS-34979: Updates default security context behavior for catalog source pods #788
OCPBUGS-36138: perform operator apiService certificate validity checks directly #798
Full changelog

operator-marketplace

OCPBUGS-68108, OCPBUGS-68109: CVE-2025-65637 fixed in logrus v1.9.3+ #722
OCPBUGS-62220: Remove Expect func so that the test case can use the retry logic #671
OCPBUGS-61920: Update memoryTarget on catalog source pods #664
OCPBUGS-49429: Upgrade golang.org/x/net [release-4.16] #587
Full changelog

ovirt-csi-driver-operator

OCPBUGS-68125: Bump github.com/sirupsen/logrus to v1.8.3 #152
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-83497: External gateway: Remove routes for external gateway pods in terminating or not ready state #3140
OCPBUGS-78033: Add pperiyasamy to OWNERS for release-4.16 #3047
OCPBUGS-77685: Clear stale conntrack UDP entries for nodePorts #3038
OCPBUGS-77187: Fix conntrack reconciliation to use service port instead of endpoint port #2998
CORENET-6055, OCPBUGS-76277: [release-4.16] Dockerfile: Unpin OVN and consume the latest from FDP #2972
OCPBUGS-71219: [release-4.16] CVE-2025-65637 Bump github.com/sirupsen/logrus to v1.9.1 through indirect dependency conversion (go-controller module) #2906
OCPBUGS-72541: NetPol & MultiNetPol: Process update only when spec fields and/or related annotation are updated #2933
OCPBUGS-68349: Add ricky-rav to OWNERS for release-4.16 #2899
OCPBUGS-66155: Skip Pending pods in EgressIP status updates #2880
OCPBUGS-64944: [release-4.16]: Configure sec nic EIPv6 address with NODAD and maximum lifetime #2853
OCPBUGS-64858: Fix stale EIP assignments during failover and controller restart #2851
OCPBUGS-63155: Fix EgressIP stale GARP post reboot + pod restart #2809
OCPBUGS-63230: Fix dnsnameresolver address set #2812
OCPBUGS-60079: Always enable global IPv6 forwarding #2743
OCPBUGS-60494: Update OWNERS file: Add Patryk/Martin as approvers #2718
OCPBUGS-58161: Unpin OVS patch versions #2648
OCPBUGS-57396: Fix predicate for cluster subnet route to gateway router #2645
OCPBUGS-55282: Fix hybrid overlay node subnets collision with cluster subnets #2621
OCPBUGS-48121: Increase InformerSyncTimeout to 60s #2624
OCPBUGS-56242: Handles unspecified protocol in network policy port #2571
OCPBUGS-56812: egressfirewall: avoid nil dereference on node delete #2591
OCPBUGS-52503: Fixes unexpected mp0 route removal during start up #2479
OCPBUGS-54204: Update OVN to FDP25.A.1 24.03.5-40. #2497
OCPBUGS-50595: kubevirt, localnet: Reduce live migration downtime #2469
OCPBUGS-50594: fixes overzealous deletion of SNAT in egressIP #2456
OCPBUGS-47634: Let OVN-northd bind remote ports #2406
OCPBUGS-45958: bump OVS to 3.3.0-62.el9fdp for OCP 4.16 #2388
OCPBUGS-44457: Add static route to the hairpin masquerade IPs to pod #2346
OCPBUGS-45942: pin libreswan to 4.6-3.el9_0.3 #2386
OCPBUGS-45343: Dockerfile: Update OVN to the 24.03.2-32.el9fdp minor release. #2377
OCPBUGS-42244: Add hybird overlay pod IPs to the namespace address_set #2352
OCPBUGS-43344: Add SDN node subnet gateway IP to host-network address_set #2328
OCPBUGS-42942: Fix egress gateway pod cleanup for remote zone pods. #2341
OCPBUGS-36210: Implementation required to enable Forwarding if it is already disabled #2212
OCPBUGS-41551: Add subnet overlap check for transit switch subnet #2306
OCPBUGS-38697: Use more exact name match when deleting static routes to HO nodes. #2282
OCPBUGS-24386: [release-4.16] EgressService: Fix ETP=Local ingress reply for LGW #2278
OCPBUGS-38705: Delete EgressIP LRP stale nexthops when node is not found #2271
OCPBUGS-38054: Fix per-pod MCS/metadata blocking #2248
OCPBUGS-38699, OCPBUGS-38704: EgressIP VRF support & ignore localnet patch ports when bootstrapping #2267
OCPBUGS-37939: [release-4.16] Bump OVSDBTimeout and make it configurable. #2244
OCPBUGS-37362: Fix registering northd metrics on appropriate nodes #2232
OCPBUGS-36608: [release-4.16] ovspinning: Set affinity of each thread #2220
OCPBUGS-36486: Fix race condition when creating/deleting namespace address set #2218
OCPBUGS-35061: Allow ANPs at same priority #2205
Full changelog

powervs-block-csi-driver

OCPBUGS-36097: Fix CVE-2024-6104 by updating http-retryable to 0.7.7 #88
Full changelog

powervs-cloud-controller-manager

OCPBUGS-36107: UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.16 #73
Full changelog

powervs-machine-controllers

OCPBUGS-61511: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #127
OCPBUGS-54752: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.16 #114
OCPBUGS-41976: Update go.mod to fix CVE - 4.16 #84
Full changelog

prometheus

OCPBUGS-61856: chore: compute highestTimestamp at queryManager level #270
OCPBUGS-56739: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #255
OCPBUGS-54942: Scraping: Bump cache iteration after error to avoid false duplicate detection. #250
OCPBUGS-43668: fix(discovery): Handle cache.DeletedFinalStateUnknown in node informers’ DeleteFunc #231
OCPBUGS-39179: Restore Prometheus functionality to accept samples with different timestamps from the same series in a single scrape. #224
OCPBUGS-36918: cherry-pick upstream fix to make PrometheusRemoteWriteBehind fire when remote endpoint is never reached. #214
OCPBUGS-37446: backport of upstream fix #217
OCPBUGS-36854: cherry-pick upstream remote-write fix #212
Full changelog

prometheus-alertmanager

OCPBUGS-76536: Include go-verify-deps expected files in gitignore #116
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-38399: feat: sync proxy settings in Alertmanager configuration #299
Full changelog

route-controller-manager

OCPBUGS-56152: Added error event for failed ingress to route conversion #61
OCPBUGS-55201: ingress: Reset metrics when ingress is deleted #58
Full changelog

tests

OCPBUGS-74299: Update to latest openshift/kubernetes #30825
OCPBUGS-63395: Backport pr 29834 to release-4.18 #30409
OCPBUGS-62934: Fix bearer token exposure in exit condition as well #30365
OCPBUGS-61170: images/tests: Remove rteval #30203
NO-JIRA: Update extended/networking OWNERS #30091
OCPBUGS-60272: Bump kubernetes version to fix NFS ganesha version #30086
OCPBUGS-57311: Replace RunHostCmd with Exec function to censor bearer token being exposed #29908
OCPBUGS-57203: fix: remove un-needed test #29849
OCPBUGS-34163: Fix regex parser for censoring private key #29805
OCPBUGS-56704: aws/edge: prevent test using unschedulable nodes #29847
OCPBUGS-55476: support provider type external #29738
OCPBUGS-55636: [build] Ensure Git Clone Does Not Run Privileged #29746
OCPBUGS-54768: Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29663
OCPBUGS-52581: Use payload pullspec for image info test #29589
OCPBUGS-52343: Try also user CA for getting openshift-tests image #29578
OCPBUGS-44119: Ignore infra nodes on tap cni tests #29261
OCPBUGS-48448: Add team members to the OWNERS file for PR approvals #29443
OCPBUGS-48348: Fixing build s2i ruby test data inline with latest ruby version(>=3.0) #29431
OCPBUGS-44105: Adjust createDNSPod() to support hypershift dual-stack test #29258
OCPBUGS-39135: Bump timeout for the pod-network-service endpoints check #29052
OCPBUGS-41611: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token [apigroup:build.openshift.io] #29079
OCPBUGS-38707: run vsphere driver config test on non techpreview clusters #28992
OCPBUGS-38788: [4.16] egressfirewall: skip ping tests in case of hypershift kubevirt on Azure infra #28938
OCPBUGS-38015: vertical scaling test should not rely on CPMS replicas #28981
OCPBUGS-37771: fix pod not returning success on ‘Managed cluster should verify that nodes have no unexpected reboots #28959
OCPBUGS-36744: Expand allowance for kubelet metrics api endpoint outages during node upgrades #28928
OCPBUGS-36182: Removes dependency on samples operator images #28904
OCPBUGS-36241: remove unused in-cluster monitoring code #28909
OCPBUGS-35842: add Proxy config #28894
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-78028: hermetic migration 4.16 #107
OCPBUGS-46341: update check-fmt goimports command #83
OCPBUGS-37660: Bump otelgrpc to v0.53.0 #72
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-78020: hermetic migration 4.16 #86
OCPBUGS-61653: Fix unit tests #72
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-68119: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 #158
OCPBUGS-43881: redact sensitive information when logging VCenter config #134
OCPBUGS-42878: Add compute resource entity to consider a standalone cluster for volu… #131
Full changelog

vsphere-csi-driver-operator

OCPBUGS-51206: Set reconcile-sync to 10 minute for ListVolume #294
OCPBUGS-49862: List only linux nodes #289
Full changelog

vsphere-problem-detector

OCPBUGS-37735: Drop event when CheckDefaultDatastore fails #168
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Red Hat Enterprise Linux CoreOS (`rhel-coreos`)

Package List

cri-o-1.29.13-11.rhaos4.16.git979a5e6.el9
kernel-5.14.0-427.121.1.el9_4
openshift-kubelet-4.16.0-202602100409.p2.g41c4e9b.assembly.stream.el9
systemd-252-32.el9_4.10

Full list (542 packages)

NetworkManager-1:1.46.0-38.el9_4
NetworkManager-cloud-setup-1:1.46.0-38.el9_4
NetworkManager-libnm-1:1.46.0-38.el9_4
NetworkManager-ovs-1:1.46.0-38.el9_4
NetworkManager-team-1:1.46.0-38.el9_4
NetworkManager-tui-1:1.46.0-38.el9_4
WALinuxAgent-udev-2.13.1.1-1.el9_4
aardvark-dns-2:1.10.0-3.el9_4
acl-2.3.1-4.el9
adcli-0.9.2-1.el9
afterburn-5.5.1-2.el9
afterburn-dracut-5.5.1-2.el9
alternatives-1.24-1.el9_4.1
attr-2.5.1-3.el9
audit-3.1.2-2.el9
audit-libs-3.1.2-2.el9
authselect-1.2.6-2.el9
authselect-libs-1.2.6-2.el9
avahi-libs-0.8-20.el9
basesystem-11-13.el9
bash-5.1.8-9.el9
bash-completion-1:2.11-5.el9
bind-libs-32:9.16.23-18.el9_4.10
bind-license-32:9.16.23-18.el9_4.10
bind-utils-32:9.16.23-18.el9_4.10
binutils-2.35.2-43.el9_4.2
binutils-gold-2.35.2-43.el9_4.2
bootc-0.1.14-1.el9_4
bootupd-0.2.18-1.el9
bsdtar-3.5.3-5.el9_4
bubblewrap-0.4.1-7.el9_4
bzip2-1.0.8-8.el9_4.1
bzip2-libs-1.0.8-8.el9_4.1
c-ares-1.19.1-2.el9_4
ca-certificates-2025.2.80_v9.0.305-91.el9
checkpolicy-3.6-1.el9
chrony-4.5-1.el9
cifs-utils-7.0-1.el9
clevis-18-112.el9
clevis-dracut-18-112.el9
clevis-luks-18-112.el9
clevis-systemd-18-112.el9
cloud-utils-growpart-0.33-1.el9
composefs-1.0.3-2.el9
composefs-libs-1.0.3-2.el9
conmon-3:2.1.10-6.rhaos4.16.el9
conmon-rs-0.6.3-1.rhaos4.16.el9
conntrack-tools-1.4.7-3.el9_4
console-login-helper-messages-0.21.3-1.el9
console-login-helper-messages-issuegen-0.21.3-1.el9
console-login-helper-messages-profile-0.21.3-1.el9
container-selinux-4:2.237.0-2.rhaos4.16.el9
containernetworking-plugins-1:1.4.0-6.el9_4.1
containers-common-3:1-78.rhaos4.16.el9
coreos-installer-0.21.0-5.el9_4
coreos-installer-bootinfra-0.21.0-5.el9_4
coreutils-8.32-35.el9
coreutils-common-8.32-35.el9
cpio-2.13-16.el9
cracklib-2.9.6-27.el9
cracklib-dicts-2.9.6-27.el9
cri-o-1.29.13-11.rhaos4.16.git979a5e6.el9
cri-tools-1.29.0-7.el9
criu-3.19-1.2.el9_4
criu-libs-3.19-1.2.el9_4
crun-1.17-2.rhaos4.16.el9
crypto-policies-20240202-1.git283706d.el9
crypto-policies-scripts-20240202-1.git283706d.el9
cryptsetup-2.6.0-3.el9
cryptsetup-libs-2.6.0-3.el9
curl-7.76.1-29.el9_4.3
cyrus-sasl-gssapi-2.1.27-21.el9
cyrus-sasl-lib-2.1.27-21.el9
dbus-1:1.12.20-8.el9
dbus-broker-28-7.el9
dbus-common-1:1.12.20-8.el9
dbus-libs-1:1.12.20-8.el9
device-mapper-9:1.02.197-2.el9
device-mapper-event-9:1.02.197-2.el9
device-mapper-event-libs-9:1.02.197-2.el9
device-mapper-libs-9:1.02.197-2.el9
device-mapper-multipath-0.8.7-27.el9_4.4
device-mapper-multipath-libs-0.8.7-27.el9_4.4
device-mapper-persistent-data-1.0.9-3.el9_4.1
diffutils-3.7-12.el9
dmidecode-1:3.5-3.el9
dnf-4.14.0-9.el9
dnf-data-4.14.0-9.el9
dnsmasq-2.85-16.el9_4
dosfstools-4.2-3.el9
dracut-057-54.git20250423.el9_4.2
dracut-network-057-54.git20250423.el9_4.2
dracut-squash-057-54.git20250423.el9_4.2
e2fsprogs-1.46.5-5.el9
e2fsprogs-libs-1.46.5-5.el9
efi-filesystem-6-2.el9_0
efibootmgr-16-12.el9
efivar-libs-38-3.el9
elfutils-debuginfod-client-0.190-2.el9
elfutils-default-yama-scope-0.190-2.el9
elfutils-libelf-0.190-2.el9
elfutils-libs-0.190-2.el9
ethtool-2:6.2-1.el9
expat-2.5.0-2.el9_4.3
file-5.39-16.el9
file-libs-5.39-16.el9
filesystem-3.16-2.el9
findutils-1:4.8.0-6.el9
firewalld-filesystem-1.3.4-1.el9
flashrom-1.2-10.el9
fstrm-0.6.1-3.el9
fuse-2.9.9-15.el9
fuse-common-3.10.2-8.el9
fuse-libs-2.9.9-15.el9
fuse-overlayfs-1.13-1.el9
fuse3-3.10.2-8.el9
fuse3-libs-3.10.2-8.el9
fwupd-1.9.13-2.el9
fwupd-plugin-flashrom-1.9.13-2.el9
gawk-5.1.0-6.el9
gawk-all-langpacks-5.1.0-6.el9
gdbm-libs-1:1.19-4.el9
gdisk-1.0.7-5.el9
geolite2-city-20191217-6.el9
geolite2-country-20191217-6.el9
gettext-0.21-8.el9
gettext-libs-0.21-8.el9
git-core-2.43.5-1.el9_4.3
glib2-2.68.4-14.el9_4.5
glibc-2.34-100.el9_4.12
glibc-common-2.34-100.el9_4.12
glibc-gconv-extra-2.34-100.el9_4.12
glibc-minimal-langpack-2.34-100.el9_4.12
glusterfs-6.0-57.4.el9
glusterfs-client-xlators-6.0-57.4.el9
glusterfs-fuse-6.0-57.4.el9
glusterfs-libs-6.0-57.4.el9
gmp-1:6.2.0-13.el9
gnupg2-2.3.3-4.el9_4.1
gnutls-3.8.3-4.el9_4.5
gpgme-1.15.1-6.el9
grep-3.6-5.el9
groff-base-1.22.4-10.el9
grub2-common-1:2.06-86.el9_4.4
grub2-efi-x64-1:2.06-86.el9_4.4
grub2-pc-1:2.06-86.el9_4.4
grub2-pc-modules-1:2.06-86.el9_4.4
grub2-tools-1:2.06-86.el9_4.4
grub2-tools-minimal-1:2.06-86.el9_4.4
gssproxy-0.8.4-6.el9
gzip-1.12-1.el9
hostname-3.23-6.el9
hwdata-0.348-9.13.el9
ignition-2.18.0-7.rhaos4.16.el9
ima-evm-utils-1.4-4.el9
info-6.7-15.el9
inih-49-6.el9
initscripts-service-10.11.6-1.el9
ipcalc-1.0.0-5.el9
iproute-6.2.0-6.el9_4
iproute-tc-6.2.0-6.el9_4
iptables-libs-1.8.10-5.el9_4
iptables-nft-1.8.10-5.el9_4
iputils-20210202-9.el9_4.5
irqbalance-2:1.9.2-3.el9_4.3
iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9
iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9
isns-utils-libs-0.101-4.el9
jansson-2.14-1.el9
jose-11-3.el9
jq-1.6-16.el9_4.1
json-c-0.14-11.el9
json-glib-1.6.6-1.el9
kbd-2.4.0-9.el9
kbd-legacy-2.4.0-9.el9
kbd-misc-2.4.0-9.el9
kernel-5.14.0-427.121.1.el9_4
kernel-core-5.14.0-427.121.1.el9_4
kernel-modules-5.14.0-427.121.1.el9_4
kernel-modules-core-5.14.0-427.121.1.el9_4
kernel-modules-extra-5.14.0-427.121.1.el9_4
kexec-tools-2.0.27-8.el9_4.5
keyutils-1.6.3-1.el9
keyutils-libs-1.6.3-1.el9
kmod-28-9.el9
kmod-libs-28-9.el9
kpartx-0.8.7-27.el9_4.4
krb5-libs-1.21.1-2.el9_4.3
less-590-4.el9_4
libacl-2.3.1-4.el9
libaio-0.3.111-13.el9
libarchive-3.5.3-5.el9_4
libassuan-2.5.5-3.el9
libattr-2.5.1-3.el9
libbasicobjects-0.1.1-53.el9
libblkid-2.37.4-18.el9
libbpf-2:1.3.0-2.el9
libbrotli-1.0.9-6.el9_4.1
libcap-2.48-9.el9_2
libcap-ng-0.8.2-7.el9
libcbor-0.7.0-5.el9
libcollection-0.7.0-53.el9
libcom_err-1.46.5-5.el9
libcomps-0.1.18-1.el9
libcurl-7.76.1-29.el9_4.3
libdaemon-0.14-23.el9
libdb-5.3.28-53.el9
libdhash-0.5.0-53.el9
libdnf-0.69.0-8.el9_4.1
libdrm-2.4.117-1.el9
libeconf-0.4.1-3.el9_2
libedit-3.1-38.20210216cvs.el9
libev-4.33-5.el9
libevent-2.1.12-8.el9_4
libfdisk-2.37.4-18.el9
libffi-3.4.2-8.el9
libfido2-1.13.0-2.el9
libgcc-11.4.1-4.el9_4
libgcrypt-1.10.0-10.el9_4.1
libgomp-11.4.1-4.el9_4
libgpg-error-1.42-5.el9
libgudev-237-1.el9
libgusb-0.3.8-2.el9
libibverbs-48.0-2.el9_4
libicu-67.1-10.el9_4
libidn2-2.3.0-7.el9
libini_config-1.3.1-53.el9
libipa_hbac-2.9.4-6.el9_4.4
libjcat-0.1.6-3.el9
libjose-11-3.el9
libkcapi-1.4.0-2.el9
libkcapi-hmaccalc-1.4.0-2.el9
libksba-1.5.1-6.el9_1
libldb-2.8.0-2.el9_4
libluksmeta-9-12.el9
libmaxminddb-1.5.2-3.el9
libmicrohttpd-1:0.9.72-5.el9
libmnl-1.0.4-16.el9_4
libmodulemd-2.13.0-2.el9
libmount-2.37.4-18.el9
libmspack-0.10.1-0.7.alpha.el9
libndp-1.8-6.el9_4
libnet-1.2-6.el9
libnetfilter_conntrack-1.0.9-1.el9
libnetfilter_cthelper-1.0.0-22.el9
libnetfilter_cttimeout-1.0.0-19.el9
libnetfilter_queue-1.0.5-1.el9
libnfnetlink-1.0.1-21.el9
libnfsidmap-1:2.5.4-26.el9_4.3
libnftnl-1.2.6-4.el9_4
libnghttp2-1.43.0-5.el9_4.4
libnl3-3.9.0-1.el9
libnl3-cli-3.9.0-1.el9
libnvme-1.6-1.el9
libpath_utils-0.2.1-53.el9
libpcap-14:1.10.0-4.el9
libpciaccess-0.16-6.el9
libpkgconf-1.7.3-10.el9
libpsl-0.21.1-5.el9
libpwquality-1.4.4-8.el9
libref_array-0.1.5-53.el9
librepo-1.14.5-2.el9
libreport-filesystem-2.15.2-6.el9
librhsm-0.0.3-7.el9_3.1
libseccomp-2.5.2-2.el9
libselinux-3.6-1.el9
libselinux-utils-3.6-1.el9
libsemanage-3.6-2.1.el9_4
libsepol-3.6-1.el9
libsigsegv-2.13-4.el9
libslirp-4.4.0-7.el9
libsmartcols-2.37.4-18.el9
libsmbclient-4.19.4-105.el9_4.3
libsolv-0.7.24-2.el9
libss-1.46.5-5.el9
libssh-0.10.4-13.el9_4.2
libssh-config-0.10.4-13.el9_4.2
libsss_certmap-2.9.4-6.el9_4.4
libsss_idmap-2.9.4-6.el9_4.4
libsss_nss_idmap-2.9.4-6.el9_4.4
libsss_sudo-2.9.4-6.el9_4.4
libstdc++-11.4.1-4.el9_4
libtalloc-2.4.1-1.el9
libtasn1-4.16.0-8.el9_4.1
libtdb-1.4.9-1.el9
libteam-1.31-16.el9_1
libtevent-0.16.0-1.el9
libtirpc-1.3.3-8.el9_4
libtool-ltdl-2.4.6-45.el9
libunistring-0.9.10-15.el9
liburing-2.5-1.el9
libusbx-1.0.26-1.el9
libuser-0.63-13.el9
libutempter-1.2.1-6.el9
libuuid-2.37.4-18.el9
libuv-1:1.42.0-2.el9_4
libverto-0.3.2-3.el9
libverto-libev-0.3.2-3.el9
libwbclient-4.19.4-105.el9_4.3
libxcrypt-4.4.18-3.el9
libxcrypt-compat-4.4.18-3.el9
libxml2-2.9.13-13.el9_4
libxmlb-0.3.10-1.el9
libxslt-1.1.34-14.el9_4
libyaml-0.2.5-7.el9
libzstd-1.5.1-2.el9
linux-firmware-20250212-143.9.el9_4
linux-firmware-whence-20250212-143.9.el9_4
lmdb-libs-0.9.29-3.el9
logrotate-3.18.0-8.el9
lsof-4.94.0-3.el9
lua-libs-5.4.4-4.el9
luksmeta-9-12.el9
lvm2-9:2.03.23-2.el9
lvm2-libs-9:2.03.23-2.el9
lz4-libs-1.9.3-5.el9
lzo-2.10-7.el9
mdadm-4.2-14.el9_4
microcode_ctl-4:20230808-2.20260227.1.el9_4
mokutil-2:0.6.0-4.el9
mpfr-4.1.0-7.el9
nano-5.6.1-5.el9
ncurses-6.2-10.20210508.el9_4.1
ncurses-base-6.2-10.20210508.el9_4.1
ncurses-libs-6.2-10.20210508.el9_4.1
net-tools-2.0-0.62.20160912git.el9
netavark-2:1.10.3-1.el9
nettle-3.9.1-1.el9
newt-0.52.21-11.el9
nfs-utils-1:2.5.4-26.el9_4.3
nftables-1:1.0.9-1.el9_4.1
nmap-ncat-3:7.92-1.el9
nmstate-2.2.59-1.el9_4
npth-1.6-8.el9
nss-altfiles-2.18.1-20.el9
numactl-libs-2.0.16-3.el9
nvme-cli-2.6-6.el9_4
oniguruma-6.9.6-1.el9.5
open-vm-tools-12.3.5-2.el9_4.1
openldap-2.6.6-3.el9
openshift-clients-4.16.0-202511271316.p2.g6f88b58.assembly.stream.el9
openshift-kubelet-4.16.0-202602100409.p2.g41c4e9b.assembly.stream.el9
openssh-8.7p1-38.el9_4.6
openssh-clients-8.7p1-38.el9_4.6
openssh-server-8.7p1-38.el9_4.6
openssl-1:3.0.7-29.el9_4.2
openssl-fips-provider-3.0.7-2.el9
openssl-libs-1:3.0.7-29.el9_4.2
openvswitch-selinux-extra-policy-1.0-39.el9fdp
openvswitch3.3-3.3.7-11.el9fdp
os-prober-1.77-12.el9_4
ose-aws-ecr-image-credential-provider-4.16.0-202507050035.p0.ga53e9de.assembly.stream.el9
ose-azure-acr-image-credential-provider-4.16.0-202507050035.p0.ge5bac33.assembly.stream.el9
ose-gcp-gcr-image-credential-provider-4.16.0-202507050035.p0.g26b43df.assembly.stream.el9
ostree-2024.6-6.el9_4
ostree-grub2-2024.6-6.el9_4
ostree-libs-2024.6-6.el9_4
p11-kit-0.25.3-2.el9
p11-kit-trust-0.25.3-2.el9
pam-1.5.1-24.el9_4.1
passt-0^20231204.gb86afe3-3.el9_4
passt-selinux-0^20231204.gb86afe3-3.el9_4
passwd-0.80-12.el9
pciutils-3.7.0-5.el9
pciutils-libs-3.7.0-5.el9
pcre-8.44-3.el9.3
pcre2-10.40-5.el9
pcre2-syntax-10.40-5.el9
perl-AutoLoader-5.74-481.el9_4.1
perl-B-1.80-481.el9_4.1
perl-Carp-1.50-460.el9
perl-Class-Struct-0.66-481.el9_4.1
perl-Data-Dumper-2.174-462.el9
perl-Digest-1.19-4.el9
perl-Digest-MD5-2.58-4.el9
perl-Encode-4:3.08-462.el9
perl-Errno-1.30-481.el9_4.1
perl-Exporter-5.74-461.el9
perl-Fcntl-1.13-481.el9_4.1
perl-File-Basename-2.85-481.el9_4.1
perl-File-Path-2.18-4.el9
perl-File-Temp-1:0.231.100-4.el9
perl-File-stat-1.09-481.el9_4.1
perl-FileHandle-2.03-481.el9_4.1
perl-Getopt-Long-1:2.52-4.el9
perl-Getopt-Std-1.12-481.el9_4.1
perl-HTTP-Tiny-0.076-462.el9
perl-IO-1.43-481.el9_4.1
perl-IO-Socket-IP-0.41-5.el9
perl-IO-Socket-SSL-2.073-1.el9
perl-IPC-Open3-1.21-481.el9_4.1
perl-MIME-Base64-3.16-4.el9
perl-Mozilla-CA-20200520-6.el9
perl-NDBM_File-1.15-481.el9_4.1
perl-Net-SSLeay-1.92-2.el9
perl-POSIX-1.94-481.el9_4.1
perl-PathTools-3.78-461.el9
perl-Pod-Escapes-1:1.07-460.el9
perl-Pod-Perldoc-3.28.01-461.el9
perl-Pod-Simple-1:3.42-4.el9
perl-Pod-Usage-4:2.01-4.el9
perl-Scalar-List-Utils-4:1.56-461.el9
perl-SelectSaver-1.02-481.el9_4.1
perl-Socket-4:2.031-4.el9
perl-Storable-1:3.21-460.el9
perl-Symbol-1.08-481.el9_4.1
perl-Term-ANSIColor-5.01-461.el9
perl-Term-Cap-1.17-460.el9
perl-Text-ParseWords-3.30-460.el9
perl-Text-Tabs+Wrap-2013.0523-460.el9
perl-Time-Local-2:1.300-7.el9
perl-URI-5.09-3.el9
perl-base-2.27-481.el9_4.1
perl-constant-1.33-461.el9
perl-if-0.60.800-481.el9_4.1
perl-interpreter-4:5.32.1-481.el9_4.1
perl-libnet-3.13-4.el9
perl-libs-4:5.32.1-481.el9_4.1
perl-mro-1.23-481.el9_4.1
perl-overload-1.31-481.el9_4.1
perl-overloading-0.02-481.el9_4.1
perl-parent-1:0.238-460.el9
perl-podlators-1:4.14-460.el9
perl-subs-1.03-481.el9_4.1
perl-vars-1.05-481.el9_4.1
pigz-2.5-4.el9
pkgconf-1.7.3-10.el9
pkgconf-m4-1.7.3-10.el9
pkgconf-pkg-config-1.7.3-10.el9
podman-4:4.9.4-20.rhaos4.16.el9
policycoreutils-3.6-2.1.el9
policycoreutils-python-utils-3.6-2.1.el9
polkit-0.117-11.el9_4.1
polkit-libs-0.117-11.el9_4.1
polkit-pkla-compat-0.1-21.el9
popt-1.18-8.el9
procps-ng-3.3.17-14.el9
protobuf-c-1.3.3-13.el9
psmisc-23.4-3.el9
publicsuffix-list-dafsa-20210518-3.el9
python-unversioned-command-3.9.18-3.el9_4.11
python3-3.9.18-3.el9_4.11
python3-audit-3.1.2-2.el9
python3-dbus-1.2.18-2.el9
python3-distro-1.5.0-7.el9
python3-dnf-4.14.0-9.el9
python3-gpg-1.15.1-6.el9
python3-hawkey-0.69.0-8.el9_4.1
python3-libcomps-0.1.18-1.el9
python3-libdnf-0.69.0-8.el9_4.1
python3-libs-3.9.18-3.el9_4.11
python3-libselinux-3.6-1.el9
python3-libsemanage-3.6-2.1.el9_4
python3-pip-wheel-21.2.3-8.el9
python3-policycoreutils-3.6-2.1.el9
python3-pyyaml-5.4.1-6.el9
python3-rpm-4.16.1.3-29.el9
python3-setools-4.4.4-1.el9
python3-setuptools-53.0.0-12.el9_4.2
python3-setuptools-wheel-53.0.0-12.el9_4.2
qemu-guest-agent-17:8.2.0-11.el9_4.21
quota-1:4.06-6.el9
quota-nls-1:4.06-6.el9
rdma-core-48.0-2.el9_4
readline-8.1-4.el9
redhat-release-9.4-0.5.el9
redhat-release-eula-9.4-0.5.el9
rpcbind-1.2.6-7.el9
rpm-4.16.1.3-29.el9
rpm-build-libs-4.16.1.3-29.el9
rpm-libs-4.16.1.3-29.el9
rpm-ostree-2024.3-6.el9_4
rpm-ostree-libs-2024.3-6.el9_4
rpm-plugin-selinux-4.16.1.3-29.el9
rpm-plugin-systemd-inhibit-4.16.1.3-29.el9
rpm-sign-libs-4.16.1.3-29.el9
rsync-3.2.3-19.el9_4.2
runc-4:1.2.9-3.rhaos4.16.el9
samba-client-libs-4.19.4-105.el9_4.3
samba-common-4.19.4-105.el9_4.3
samba-common-libs-4.19.4-105.el9_4.3
sed-4.8-9.el9
selinux-policy-38.1.35-2.el9_4.8
selinux-policy-targeted-38.1.35-2.el9_4.8
setup-2.13.7-10.el9
sg3_utils-1.47-9.el9
sg3_utils-libs-1.47-9.el9
shadow-utils-2:4.9-8.el9_4.1
shadow-utils-subid-2:4.9-8.el9_4.1
shared-mime-info-2.1-5.el9
shim-x64-15.8-4.el9_3
skopeo-2:1.14.5-6.rhaos4.16.el9
slang-2.3.2-11.el9
slirp4netns-1.2.3-1.el9
snappy-1.1.8-8.el9
socat-1.7.4.1-5.el9_4.3
sqlite-libs-3.34.1-7.el9_4.1
squashfs-tools-4.4-10.git1.el9
ssh-key-dir-0.1.4-1.el9
sssd-2.9.4-6.el9_4.4
sssd-ad-2.9.4-6.el9_4.4
sssd-client-2.9.4-6.el9_4.4
sssd-common-2.9.4-6.el9_4.4
sssd-common-pac-2.9.4-6.el9_4.4
sssd-ipa-2.9.4-6.el9_4.4
sssd-krb5-2.9.4-6.el9_4.4
sssd-krb5-common-2.9.4-6.el9_4.4
sssd-ldap-2.9.4-6.el9_4.4
sssd-nfs-idmap-2.9.4-6.el9_4.4
sssd-proxy-2.9.4-6.el9_4.4
stalld-1.20.4-1.el9_4
strace-5.18-2.el9
subscription-manager-rhsm-certificates-20220623-1.el9
sudo-1.9.5p2-10.el9_4.2
systemd-252-32.el9_4.10
systemd-journal-remote-252-32.el9_4.10
systemd-libs-252-32.el9_4.10
systemd-pam-252-32.el9_4.10
systemd-rpm-macros-252-32.el9_4.10
systemd-udev-252-32.el9_4.10
tar-2:1.34-6.el9_4.3
teamd-1.31-16.el9_1
tmux-3.2a-5.el9
toolbox-0.1.2-1.rhaos4.16.el9
tpm2-tools-5.2-3.el9
tpm2-tss-3.2.2-2.el9
tzdata-2026a-1.el9_0
unbound-libs-1.16.2-8.el9_4.2
userspace-rcu-0.12.1-6.el9
util-linux-2.37.4-18.el9
util-linux-core-2.37.4-18.el9
vim-minimal-2:8.2.2637-20.el9_4.2
which-2.21-29.el9
xfsprogs-6.3.0-1.el9
xmlsec1-1.2.29-9.el9
xmlsec1-openssl-1.2.29-9.el9
xz-5.2.5-8.el9_0
xz-libs-5.2.5-8.el9_0
yajl-2.1.0-22.el9
zlib-1.2.11-40.el9
zram-generator-0.3.2-7.el9
zstd-1.5.1-2.el9

Changed:

NetworkManager 1:1.46.0-8.el9_4 → 1:1.46.0-38.el9_4
NetworkManager-cloud-setup 1:1.46.0-8.el9_4 → 1:1.46.0-38.el9_4
NetworkManager-libnm 1:1.46.0-8.el9_4 → 1:1.46.0-38.el9_4
NetworkManager-ovs 1:1.46.0-8.el9_4 → 1:1.46.0-38.el9_4
NetworkManager-team 1:1.46.0-8.el9_4 → 1:1.46.0-38.el9_4
NetworkManager-tui 1:1.46.0-8.el9_4 → 1:1.46.0-38.el9_4
WALinuxAgent-udev 2.7.0.6-9.el9_2.1 → 2.13.1.1-1.el9_4
alternatives 1.24-1.el9 → 1.24-1.el9_4.1
bind-libs 32:9.16.23-18.el9_4.1 → 32:9.16.23-18.el9_4.10
bind-license 32:9.16.23-18.el9_4.1 → 32:9.16.23-18.el9_4.10
bind-utils 32:9.16.23-18.el9_4.1 → 32:9.16.23-18.el9_4.10
binutils 2.35.2-43.el9 → 2.35.2-43.el9_4.2
binutils-gold 2.35.2-43.el9 → 2.35.2-43.el9_4.2
bootc 0.1.9-3.el9_4 → 0.1.14-1.el9_4
bsdtar 3.5.3-4.el9 → 3.5.3-5.el9_4
bubblewrap 0.4.1-6.el9 → 0.4.1-7.el9_4
bzip2 1.0.8-8.el9 → 1.0.8-8.el9_4.1
bzip2-libs 1.0.8-8.el9 → 1.0.8-8.el9_4.1
ca-certificates 2023.2.60_v7.0.306-90.1.el9_2 → 2025.2.80_v9.0.305-91.el9
conmon 3:2.1.10-2.1.rhaos4.16.el9 → 3:2.1.10-6.rhaos4.16.el9
conntrack-tools 1.4.7-2.el9 → 1.4.7-3.el9_4
container-selinux 3:2.231.0-1.rhaos4.16.el9 → 4:2.237.0-2.rhaos4.16.el9
containernetworking-plugins 1:1.4.0-3.el9_4 → 1:1.4.0-6.el9_4.1
containers-common 3:1-77.rhaos4.16.el9 → 3:1-78.rhaos4.16.el9
coreos-installer 0.21.0-1.el9 → 0.21.0-5.el9_4
coreos-installer-bootinfra 0.21.0-1.el9 → 0.21.0-5.el9_4
cri-o 1.29.5-7.rhaos4.16.git7db4ada.el9 → 1.29.13-11.rhaos4.16.git979a5e6.el9
cri-tools 1.29.0-3.1.el9 → 1.29.0-7.el9
criu 3.19-1.el9 → 3.19-1.2.el9_4
criu-libs 3.19-1.el9 → 3.19-1.2.el9_4
crun 1.14.3-1.rhaos4.16.el9 → 1.17-2.rhaos4.16.el9
curl 7.76.1-29.el9_4 → 7.76.1-29.el9_4.3
device-mapper-multipath 0.8.7-27.el9 → 0.8.7-27.el9_4.4
device-mapper-multipath-libs 0.8.7-27.el9 → 0.8.7-27.el9_4.4
device-mapper-persistent-data 1.0.9-3.el9_4 → 1.0.9-3.el9_4.1
dracut 057-53.git20240104.el9 → 057-54.git20250423.el9_4.2
dracut-network 057-53.git20240104.el9 → 057-54.git20250423.el9_4.2
dracut-squash 057-53.git20240104.el9 → 057-54.git20250423.el9_4.2
expat 2.5.0-2.el9_4 → 2.5.0-2.el9_4.3
git-core 2.43.5-1.el9_4 → 2.43.5-1.el9_4.3
glib2 2.68.4-14.el9 → 2.68.4-14.el9_4.5
glibc 2.34-100.el9_4.2 → 2.34-100.el9_4.12
glibc-common 2.34-100.el9_4.2 → 2.34-100.el9_4.12
glibc-gconv-extra 2.34-100.el9_4.2 → 2.34-100.el9_4.12
glibc-minimal-langpack 2.34-100.el9_4.2 → 2.34-100.el9_4.12
gnupg2 2.3.3-4.el9 → 2.3.3-4.el9_4.1
gnutls 3.8.3-4.el9_4 → 3.8.3-4.el9_4.5
grub2-common 1:2.06-80.el9_4 → 1:2.06-86.el9_4.4
grub2-efi-x64 1:2.06-80.el9_4 → 1:2.06-86.el9_4.4
grub2-pc 1:2.06-80.el9_4 → 1:2.06-86.el9_4.4
grub2-pc-modules 1:2.06-80.el9_4 → 1:2.06-86.el9_4.4
grub2-tools 1:2.06-80.el9_4 → 1:2.06-86.el9_4.4
grub2-tools-minimal 1:2.06-80.el9_4 → 1:2.06-86.el9_4.4
ignition 2.18.0-2.1.rhaos4.16.el9 → 2.18.0-7.rhaos4.16.el9
iptables-libs 1.8.10-2.el9 → 1.8.10-5.el9_4
iptables-nft 1.8.10-2.el9 → 1.8.10-5.el9_4
iputils 20210202-9.el9 → 20210202-9.el9_4.5
irqbalance 2:1.9.2-3.el9 → 2:1.9.2-3.el9_4.3
jq 1.6-16.el9 → 1.6-16.el9_4.1
kernel 5.14.0-427.24.1.el9_4 → 5.14.0-427.121.1.el9_4
kernel-core 5.14.0-427.24.1.el9_4 → 5.14.0-427.121.1.el9_4
kernel-modules 5.14.0-427.24.1.el9_4 → 5.14.0-427.121.1.el9_4
kernel-modules-core 5.14.0-427.24.1.el9_4 → 5.14.0-427.121.1.el9_4
kernel-modules-extra 5.14.0-427.24.1.el9_4 → 5.14.0-427.121.1.el9_4
kexec-tools 2.0.27-8.el9 → 2.0.27-8.el9_4.5
kpartx 0.8.7-27.el9 → 0.8.7-27.el9_4.4
krb5-libs 1.21.1-1.el9 → 1.21.1-2.el9_4.3
libarchive 3.5.3-4.el9 → 3.5.3-5.el9_4
libbrotli 1.0.9-6.el9 → 1.0.9-6.el9_4.1
libcurl 7.76.1-29.el9_4 → 7.76.1-29.el9_4.3
libdnf 0.69.0-8.el9 → 0.69.0-8.el9_4.1
libevent 2.1.12-6.el9 → 2.1.12-8.el9_4
libgcc 11.4.1-3.el9 → 11.4.1-4.el9_4
libgcrypt 1.10.0-10.el9_2 → 1.10.0-10.el9_4.1
libgomp 11.4.1-3.el9 → 11.4.1-4.el9_4
libibverbs 48.0-1.el9 → 48.0-2.el9_4
libicu 67.1-9.el9 → 67.1-10.el9_4
libipa_hbac 2.9.4-6.el9_4 → 2.9.4-6.el9_4.4
libldb 2.8.0-1.el9 → 2.8.0-2.el9_4
libmnl 1.0.4-15.el9 → 1.0.4-16.el9_4
libndp 1.8-4.el9 → 1.8-6.el9_4
libnfsidmap 1:2.5.4-25.el9 → 1:2.5.4-26.el9_4.3
libnftnl 1.2.6-2.el9 → 1.2.6-4.el9_4
libnghttp2 1.43.0-5.el9_4.3 → 1.43.0-5.el9_4.4
libsemanage 3.6-1.el9 → 3.6-2.1.el9_4
libsmbclient 4.19.4-105.el9_4 → 4.19.4-105.el9_4.3
libssh 0.10.4-13.el9 → 0.10.4-13.el9_4.2
libssh-config 0.10.4-13.el9 → 0.10.4-13.el9_4.2
libsss_certmap 2.9.4-6.el9_4 → 2.9.4-6.el9_4.4
libsss_idmap 2.9.4-6.el9_4 → 2.9.4-6.el9_4.4
libsss_nss_idmap 2.9.4-6.el9_4 → 2.9.4-6.el9_4.4
libsss_sudo 2.9.4-6.el9_4 → 2.9.4-6.el9_4.4
libstdc++ 11.4.1-3.el9 → 11.4.1-4.el9_4
libtasn1 4.16.0-8.el9_1 → 4.16.0-8.el9_4.1
libuv 1:1.42.0-1.el9 → 1:1.42.0-2.el9_4
libwbclient 4.19.4-105.el9_4 → 4.19.4-105.el9_4.3
libxml2 2.9.13-6.el9_4 → 2.9.13-13.el9_4
libxslt 1.1.34-9.el9 → 1.1.34-14.el9_4
linux-firmware 20240219-143.el9 → 20250212-143.9.el9_4
linux-firmware-whence 20240219-143.el9 → 20250212-143.9.el9_4
mdadm 4.2-12.el9_4 → 4.2-14.el9_4
microcode_ctl 4:20230808-2.20231009.1.el9_3 → 4:20230808-2.20260227.1.el9_4
ncurses 6.2-10.20210508.el9 → 6.2-10.20210508.el9_4.1
ncurses-base 6.2-10.20210508.el9 → 6.2-10.20210508.el9_4.1
ncurses-libs 6.2-10.20210508.el9 → 6.2-10.20210508.el9_4.1
nfs-utils 1:2.5.4-25.el9 → 1:2.5.4-26.el9_4.3
nftables 1:1.0.9-1.el9 → 1:1.0.9-1.el9_4.1
nmstate 2.2.27-2.el9_4 → 2.2.59-1.el9_4
nvme-cli 2.6-5.el9 → 2.6-6.el9_4
open-vm-tools 12.3.5-2.el9 → 12.3.5-2.el9_4.1
openshift-clients 4.16.0-202406052127.p0.ga245041.assembly.stream.el9 → 4.16.0-202511271316.p2.g6f88b58.assembly.stream.el9
openshift-kubelet 4.16.0-202406191607.p0.g58452d8.assembly.stream.el9 → 4.16.0-202602100409.p2.g41c4e9b.assembly.stream.el9
openssh 8.7p1-38.el9 → 8.7p1-38.el9_4.6
openssh-clients 8.7p1-38.el9 → 8.7p1-38.el9_4.6
openssh-server 8.7p1-38.el9 → 8.7p1-38.el9_4.6
openssl 1:3.0.7-27.el9 → 1:3.0.7-29.el9_4.2
openssl-libs 1:3.0.7-27.el9 → 1:3.0.7-29.el9_4.2
openvswitch-selinux-extra-policy 1.0-34.el9fdp → 1.0-39.el9fdp
openvswitch3.3 3.3.0-13.el9fdp → 3.3.7-11.el9fdp
os-prober 1.77-10.el9 → 1.77-12.el9_4
ose-aws-ecr-image-credential-provider 4.16.0-202405311136.p0.ga53e9de.assembly.stream.el9 → 4.16.0-202507050035.p0.ga53e9de.assembly.stream.el9
ose-azure-acr-image-credential-provider 4.16.0-202404301345.p0.g0e95532.assembly.stream.el9 → 4.16.0-202507050035.p0.ge5bac33.assembly.stream.el9
ose-gcp-gcr-image-credential-provider 4.16.0-202404181812.p0.g26b43df.assembly.stream.el9 → 4.16.0-202507050035.p0.g26b43df.assembly.stream.el9
ostree 2024.6-1.el9_4 → 2024.6-6.el9_4
ostree-grub2 2024.6-1.el9_4 → 2024.6-6.el9_4
ostree-libs 2024.6-1.el9_4 → 2024.6-6.el9_4
pam 1.5.1-19.el9 → 1.5.1-24.el9_4.1
passt 0^20231204.gb86afe3-1.el9 → 0^20231204.gb86afe3-3.el9_4
passt-selinux 0^20231204.gb86afe3-1.el9 → 0^20231204.gb86afe3-3.el9_4
perl-AutoLoader 5.74-481.el9 → 5.74-481.el9_4.1
perl-B 1.80-481.el9 → 1.80-481.el9_4.1
perl-Class-Struct 0.66-481.el9 → 0.66-481.el9_4.1
perl-Errno 1.30-481.el9 → 1.30-481.el9_4.1
perl-Fcntl 1.13-481.el9 → 1.13-481.el9_4.1
perl-File-Basename 2.85-481.el9 → 2.85-481.el9_4.1
perl-File-stat 1.09-481.el9 → 1.09-481.el9_4.1
perl-FileHandle 2.03-481.el9 → 2.03-481.el9_4.1
perl-Getopt-Std 1.12-481.el9 → 1.12-481.el9_4.1
perl-IO 1.43-481.el9 → 1.43-481.el9_4.1
perl-IPC-Open3 1.21-481.el9 → 1.21-481.el9_4.1
perl-NDBM_File 1.15-481.el9 → 1.15-481.el9_4.1
perl-POSIX 1.94-481.el9 → 1.94-481.el9_4.1
perl-SelectSaver 1.02-481.el9 → 1.02-481.el9_4.1
perl-Symbol 1.08-481.el9 → 1.08-481.el9_4.1
perl-base 2.27-481.el9 → 2.27-481.el9_4.1
perl-if 0.60.800-481.el9 → 0.60.800-481.el9_4.1
perl-interpreter 4:5.32.1-481.el9 → 4:5.32.1-481.el9_4.1
perl-libs 4:5.32.1-481.el9 → 4:5.32.1-481.el9_4.1
perl-mro 1.23-481.el9 → 1.23-481.el9_4.1
perl-overload 1.31-481.el9 → 1.31-481.el9_4.1
perl-overloading 0.02-481.el9 → 0.02-481.el9_4.1
perl-subs 1.03-481.el9 → 1.03-481.el9_4.1
perl-vars 1.05-481.el9 → 1.05-481.el9_4.1
podman 4:4.9.4-5.1.rhaos4.16.el9 → 4:4.9.4-20.rhaos4.16.el9
polkit 0.117-11.el9 → 0.117-11.el9_4.1
polkit-libs 0.117-11.el9 → 0.117-11.el9_4.1
python-unversioned-command 3.9.18-3.el9_4.1 → 3.9.18-3.el9_4.11
python3 3.9.18-3.el9_4.1 → 3.9.18-3.el9_4.11
python3-hawkey 0.69.0-8.el9 → 0.69.0-8.el9_4.1
python3-libdnf 0.69.0-8.el9 → 0.69.0-8.el9_4.1
python3-libs 3.9.18-3.el9_4.1 → 3.9.18-3.el9_4.11
python3-libsemanage 3.6-1.el9 → 3.6-2.1.el9_4
python3-setuptools 53.0.0-12.el9 → 53.0.0-12.el9_4.2
python3-setuptools-wheel 53.0.0-12.el9 → 53.0.0-12.el9_4.2
qemu-guest-agent 17:8.2.0-11.el9_4.3 → 17:8.2.0-11.el9_4.21
rdma-core 48.0-1.el9 → 48.0-2.el9_4
redhat-release 9.4-0.4.el9 → 9.4-0.5.el9
redhat-release-eula 9.4-0.4.el9 → 9.4-0.5.el9
rpm-ostree 2024.3-4.el9_4 → 2024.3-6.el9_4
rpm-ostree-libs 2024.3-4.el9_4 → 2024.3-6.el9_4
rsync 3.2.3-19.el9 → 3.2.3-19.el9_4.2
runc 4:1.1.12-3.1.rhaos4.16.el9 → 4:1.2.9-3.rhaos4.16.el9
samba-client-libs 4.19.4-105.el9_4 → 4.19.4-105.el9_4.3
samba-common 4.19.4-105.el9_4 → 4.19.4-105.el9_4.3
samba-common-libs 4.19.4-105.el9_4 → 4.19.4-105.el9_4.3
selinux-policy 38.1.35-2.el9_4.2 → 38.1.35-2.el9_4.8
selinux-policy-targeted 38.1.35-2.el9_4.2 → 38.1.35-2.el9_4.8
shadow-utils 2:4.9-8.el9 → 2:4.9-8.el9_4.1
shadow-utils-subid 2:4.9-8.el9 → 2:4.9-8.el9_4.1
skopeo 2:1.14.4-1.rhaos4.16.el9 → 2:1.14.5-6.rhaos4.16.el9
socat 1.7.4.1-5.el9_4.2 → 1.7.4.1-5.el9_4.3
sqlite-libs 3.34.1-7.el9_3 → 3.34.1-7.el9_4.1
sssd 2.9.4-6.el9_4 → 2.9.4-6.el9_4.4
sssd-ad 2.9.4-6.el9_4 → 2.9.4-6.el9_4.4
sssd-client 2.9.4-6.el9_4 → 2.9.4-6.el9_4.4
sssd-common 2.9.4-6.el9_4 → 2.9.4-6.el9_4.4
sssd-common-pac 2.9.4-6.el9_4 → 2.9.4-6.el9_4.4
sssd-ipa 2.9.4-6.el9_4 → 2.9.4-6.el9_4.4
sssd-krb5 2.9.4-6.el9_4 → 2.9.4-6.el9_4.4
sssd-krb5-common 2.9.4-6.el9_4 → 2.9.4-6.el9_4.4
sssd-ldap 2.9.4-6.el9_4 → 2.9.4-6.el9_4.4
sssd-nfs-idmap 2.9.4-6.el9_4 → 2.9.4-6.el9_4.4
sssd-proxy 2.9.4-6.el9_4 → 2.9.4-6.el9_4.4
stalld 1.19.1-2.el9 → 1.20.4-1.el9_4
sudo 1.9.5p2-10.el9_3 → 1.9.5p2-10.el9_4.2
systemd 252-32.el9_4 → 252-32.el9_4.10
systemd-journal-remote 252-32.el9_4 → 252-32.el9_4.10
systemd-libs 252-32.el9_4 → 252-32.el9_4.10
systemd-pam 252-32.el9_4 → 252-32.el9_4.10
systemd-rpm-macros 252-32.el9_4 → 252-32.el9_4.10
systemd-udev 252-32.el9_4 → 252-32.el9_4.10
tar 2:1.34-6.el9_1 → 2:1.34-6.el9_4.3
tzdata 2024a-1.el9 → 2026a-1.el9_0
unbound-libs 1.16.2-3.el9_3.5 → 1.16.2-8.el9_4.2
vim-minimal 2:8.2.2637-20.el9_1 → 2:8.2.2637-20.el9_4.2

Extensions

Full list (0 packages)

Red Hat Enterprise Linux CoreOS base layer: 416.94.202604211449-0 (diff)

View changelog in Markdown or change previous release:

Source code for this page located on github