4.16.65

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.16.65-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded (1 retry) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Failed (1 retry) periodic-ci-openshift-release-main-ci-4.16-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Failed
- aws-sdn-upgrade-4.16-micro Failed (1 retry) periodic-ci-openshift-release-main-nightly-4.16-e2e-aws-sdn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Failed
- azure-ovn-upgrade-4.16-micro Failed (1 retry) periodic-ci-openshift-release-main-ci-4.16-e2e-azure-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Failed
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.16-fips-payload-scan
- gcp-ovn-rt-upgrade-4.16-minor Succeeded periodic-ci-openshift-release-main-ci-4.16-upgrade-from-stable-4.15-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.16 Succeeded periodic-ci-openshift-hypershift-release-4.16-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-metal-ipi-ovn-ipv4
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.15.21, 4.15.22, 4.15.23, 4.15.24, 4.15.25, 4.15.26, 4.15.27, 4.15.28, 4.15.29, 4.15.30, 4.15.31, 4.15.32, 4.15.33, 4.15.34, 4.15.35, 4.15.37, 4.15.38, 4.15.39, 4.15.40, 4.15.41, 4.15.42, 4.15.43, 4.15.44, 4.15.45, 4.15.46, 4.15.47, 4.15.48, 4.15.49, 4.15.50, 4.15.51, 4.15.53, 4.15.54, 4.15.55, 4.15.56, 4.15.57, 4.15.59, 4.15.60, 4.15.61, 4.15.62, 4.15.63, 4.16.10, 4.16.11, 4.16.12, 4.16.13, 4.16.14, 4.16.15, 4.16.16, 4.16.17, 4.16.18, 4.16.19, 4.16.20, 4.16.21, 4.16.23, 4.16.24, 4.16.25, 4.16.26, 4.16.27, 4.16.28, 4.16.29, 4.16.30, 4.16.32, 4.16.33, 4.16.34, 4.16.35, 4.16.36, 4.16.37, 4.16.38, 4.16.39, 4.16.4, 4.16.40, 4.16.41, 4.16.42, 4.16.43, 4.16.44, 4.16.45, 4.16.46, 4.16.47, 4.16.48, 4.16.49, 4.16.5, 4.16.50, 4.16.51, 4.16.54, 4.16.55, 4.16.56, 4.16.57, 4.16.58, 4.16.59, 4.16.6, 4.16.60, 4.16.61, 4.16.7, 4.16.8, 4.16.9

4.16.64 (changes) - F F F F F F F S
4.16.63 (changes) - Failed
4.16.62 (changes) - Failed
4.16.53 - Success
4.16.52 (changes) - Success
4.16.3 (changes) - Failed
4.16.2 (changes) - Success
4.16.1 (changes) - Failed
4.16.0 (changes) - Success
4.15.66 (changes) - Failed
4.15.65 (changes) - F S F
4.15.64 (changes) - Success
4.15.58 (changes) - Failed
4.15.52 (changes) - Failed
4.15.36 (changes) - Failed
4.15.20 (changes) - Failed
4.15.19 (changes) - Failed
4.15.18 (changes) - Success
4.15.0-0.nightly-2026-06-23-050409 (changes) - Success

Loading changelog, this may take a while ...

Changes from 4.16.53

Created: 2026-06-24 21:00:18 +0000 UTC

Image Digest: sha256:f97848303f52c86e6ccb87612f9a8dab42891a8036ccb2965255630b9253aee7

Components

Kubectl 1.29.7
Kubernetes 1.29.14
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202511191934-0 to 416.94.202606230218-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
StreamingCollectionEncodingToJSON (0 tests)	Enabled	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled

Removed images

ovirt-csi-driver
ovirt-csi-driver-operator

Rebuilt images without code change

agent-installer-api-server git 5c16119a sha256:5e792f91649639de0012a4eec6c95fd925cbd1852e79f0dce5bd26080c34595e
agent-installer-csr-approver git 302f47ff sha256:d3ce62155f937a5a54c08218adc27f554dcf82bda96527ba85a62a2511a08b01
agent-installer-node-agent git 720b5023 sha256:c912ab84d62cbfe342e0287ca2fd2fde8b10913e414bd05e97cd41912c071be2
agent-installer-orchestrator git 302f47ff sha256:db80e2741972aa29baedbd753722c0195caadb6b4b6c28127cae814c5c3266fd
alibaba-cloud-controller-manager git 97e8335e sha256:621e4c14cf3d946102d49cceb766adc49058d551031a6a590b62fb99b8586347
alibaba-machine-controllers git 248372a4 sha256:a4cea277b4485a42c2de87f36c81ca982bfea235cb38f0389dd5e2fadecef580
apiserver-network-proxy git ca81b6a3 sha256:6fffa6ec473ad38425ae4037a04c78ee29ebef6f6934a1ea4655e3c714fc2f74
aws-cloud-controller-manager git a53e9def sha256:7bef4c8354ed55a06d0428dcd5b12838720e45c5f9811600f635d1583ba2bd0c
aws-ebs-csi-driver git 1d29a74a sha256:ef3c71302ebc4e79f3c176c5578b23ecdab6ffc64f9d31722f4e5d8404b3e260
aws-ebs-csi-driver-operator git ea7977e7 sha256:8faaceadc86070a5992d93d19f189782ce0956d3da3f586c1efa965cd3d4c8fc
aws-kms-encryption-provider git c66065de sha256:e53ecb614f56d4ea1637cc11e97153adad62e2bf7bf432d5053b049741782253
aws-pod-identity-webhook git 459c5314 sha256:1abdd60073068123410d0fcc6e423a8812b939c043a07894b984c509dd2cdce9
azure-disk-csi-driver git 6b55f6fb sha256:d562df8292b4e7f7d1628804098ecb0e0894207fffaab032a3b8d54400e78dcc
azure-disk-csi-driver-operator git ea7977e7 sha256:c1993e35c5cd4b6ebf4a4aa2c7c23ff6f5100d1b10d578f29fda4dd297b1371b
azure-file-csi-driver git 7a36778a sha256:cbc2cb8c9ce04a0a5df3a0ff486dd3598e2ac38eee21218f05ed39a07abaa8d2
azure-file-csi-driver-operator git ea7977e7 sha256:85c1903ac5882c73b1ba88e51dcea46fdd3249b9d9dceebff3292408c6831b26
azure-kms-encryption-provider git af633e05 sha256:154f01cdef7a059fd6ae2997faf29863f7382c7f55d20c12d2ac483b162cfbb9
azure-workload-identity-webhook git 5b8d171e sha256:972ca76d69c16249edb141c43843ea4e1ac2fe3ed1d3bc9cb949a8923ff95328
cluster-authentication-operator git 0e39ace5 sha256:765ca3b09b7a477951869f8ae3e0692c66fda469f1fa535a5714c26ed7894450
cluster-autoscaler-operator git 70164fc6 sha256:592ac3c819b2d11f23618b503aaf4207ed32ce6bc77f1e4059276ab8899487d4
cluster-bootstrap git 27bfb59f sha256:ff236cb9046aadd9bb9da193ffd39cbef75098a2d8672643eba75e779dd14782
cluster-capi-controllers git 5830a10a sha256:81346b73404ffb28dc16b0af820684e4e8e6b5877f866ba4def02c6f5e32bbe5
cluster-cloud-controller-manager-operator git d721cd62 sha256:e8c523f00577731e9a907135b32a2f9f6bb4f9e885eabf1870f3877dffcc0878
cluster-config-operator git 441d29c9 sha256:48adcdf6b84e8ca7a0acd1c78110c81d85f0b4795246d179d80ae5ac9801bc65
cluster-control-plane-machine-set-operator git 14571e8a sha256:dfaad7e807928295000eb90b5113b73b447f3b54f27a7ea079bb6de68e7d13f6
cluster-csi-snapshot-controller-operator git 439826e1 sha256:97cd56394ba70a4b6c532abde636a15713240b0862f5e4f617f4ff417214efc4
cluster-dns-operator git a4b1cfb4 sha256:2317b50767ceb1540be62ec240005c4cb2944311c0322fcc240f10b553b32a63
cluster-kube-cluster-api-operator git 95ceaa9e sha256:cf1013fab4970f226c86b65be37e8a1672556c049d64654da11f1c1fe471cc75
cluster-kube-controller-manager-operator git b3faac1f sha256:f4aabe2c9c923c5b6a6dda83b4ac8dee8ca28e0d3f14ef80d40c3654afa70fbd
cluster-machine-approver git 7685374f sha256:82b3774dad63a8bda4cbefe9a31da3732a61e085cb751558889c789678e9c0ef
cluster-openshift-controller-manager-operator git 2ed3cf99 sha256:8ba1819cd201cfd28028476a2f62d104dd795212f8ecbd4ab8c4b0db0f6ef186
cluster-policy-controller git eaea543f sha256:464fd1f1578fce5873a16aee998ce4354e8ce8bb0edd24b3ee2dbb49b8ceea76
cluster-samples-operator git f9a02d5c sha256:db087982a2756c398f2d2b4776ec84e2a39c2c181ad0c5fa18ceb09d21583554
cluster-update-keys git e8478585 sha256:bc2a96fc39f86ae83751bf3797f617e8e0b228d04d046257b7ef917dd25ae3df
cluster-version-operator git be820285 sha256:94e0006e432d0be21734915ece547a458146257822202f1e50b1097fa71ed5a2
configmap-reloader git dc91ddc4 sha256:2a89ea7eafea867265ce27ddd562501a3afb96e7965a0c96a01c40976ebb9a80
csi-driver-manila-operator git c25d1ff2 sha256:f9d534e769df00058077b8a5ec95cb3128c1c5e74215db5c0c81fb44fe393540
csi-driver-shared-resource git bc125def sha256:dd9851541919c646f83b058fda975ca2cdc97268bef6cf7692ab6dae9b2025dd
csi-driver-shared-resource-operator git 1e1194bc sha256:a8ff7ab6308885ee721a3607404ba2fb10ac6bbfa2e7361b74ac892c708eccb0
csi-driver-shared-resource-webhook git bc125def sha256:1b7d7b0afb8cf8a94b487f205e4b49b5621b5e7eca5f192d232bffae769ef4f8
csi-external-attacher git 7da80aab sha256:4aa9b88179b1c76b88230e9313872a4e7193c3e6da3fd41fe3ba8ec7c13ab643
csi-external-provisioner git 9e8af011 sha256:90a7498996c92ae4992d0f2e7922b1798e307a89f14cf3d724f7eef44413a595
csi-external-resizer git 06e08fd2 sha256:5813c87099ef5bda02685efbed4cf0e16e2ec9ed56061054e5b4d9fa8432f98b
csi-external-snapshotter git ee32ba01 sha256:9d9ed68cf6f46964c4ba705fff17a436352b6a3d2e893c936295079473279c63
csi-livenessprobe git f5e3ff55 sha256:97a707af8612fd309ee4c12337cfeba5b7ba0d5b3e8ff0e858e9f53fc15823df
csi-snapshot-controller git ee32ba01 sha256:b203d95781fcee5027c7723d1cc4fb1c1d3d12217c63ae6ab196fd83fa527ebe
csi-snapshot-validation-webhook git ee32ba01 sha256:6e7a857972e0bfb58580b6bae1d876e5398c4aa67d5812c27d242d7558d3150a
docker-registry git 072c544c sha256:b5f5f666d6a06c3f8017c80a4e2465eb6f2a24dac974e5bd200cf305f6990be6
driver-toolkit git 1d5732f0 sha256:7692a1d89c7083964c51e8b8d8fab0c4a28049323d59f3aeaf05201722a7df37
egress-router-cni git 7089efe6 sha256:edca8d042acc80ea3913e1d90fb1bc971046279a97784ac0961c6c750073b4f2
etcd git e7911c0d sha256:4a39105fc47db425c0ce9f41c47f125dff373be60bc91e8692fc2d66acd11e9d
gcp-cloud-controller-manager git 26b43dfc sha256:4bc3a9b1e47ca78b249c551db662e7a2678a697fd15e00da2fb7701b810a226d
gcp-machine-controllers git 8851888a sha256:67bee09ee29ae3f99e939c80f41e6defdba6a1130ea24c161e49d4ee1fb9a6e3
gcp-pd-csi-driver-operator git 799327f7 sha256:a675af686e55921da26bebdfd98a78797d213dc521f9d95cc34f75066bcc70e7
ibm-cloud-controller-manager git f961f16d sha256:bcfdf3d7a0dc4dd918edf4bc703fa2728b0ef26dde35633383022b751cdb3366
ibm-vpc-block-csi-driver-operator git 9ca53768 sha256:7caa398f89cf3c681636697ca5b11ea2b3cb4d2d7dff72f26cd1968d12dc28f2
ibmcloud-machine-controllers git d29506e7 sha256:db6bf21f27ec36ccc2ee77a9e9f99eb11b6f90438e2eeb8919fe1f9e898a9dbb
ironic-machine-os-downloader git 93b8b5fa sha256:0a4a4c8010c6954553bceef5a5bd3689b76180900279b7ddbbc063365ff207f9
ironic-static-ip-manager git f44e8a08 sha256:a5cc69adbdbd122614d3937c22467d8aa05ca6574a5be4ff3cc40aeaee12df2c
k8s-prometheus-adapter git e4f859be sha256:d9123f63a757eead25c84e06fc800b6e706edfe0adc6a790d2b72f2ab00e8585
keepalived-ipfailover git b58673a3 sha256:0410d104df5d4cf19e393086a5a128ebe8e7840f6ac95b4e3bd7132c15055be5
kube-proxy git 53fea06b sha256:835eee0f3dc853960bba886a837cc4e7ef98842f2ae33bd58fecf275e530d97a
kube-rbac-proxy git c38f4734 sha256:8cc238bed90f1a5407e2d98dfb9392e0ef2e4281af5438f48e98c7b2d243951b
kube-storage-version-migrator git 6f213320 sha256:4ae91216473c76dc8f507fc7a83ed18d60a6b8de5d9e7bf03b6eee1f119a1966
kubevirt-cloud-controller-manager git 3db76104 sha256:aa6a4e7d578371b55494016b9883b0c0f0ca42fc3986522a286b0a8b191aab6a
kubevirt-csi-driver git d474c42e sha256:638813b6ac620f868fc272e8f232082f5ce0228865272f4a1b773578ecccfc7d
multus-admission-controller git a15bf454 sha256:158b45ab47298eeb1a8f63a011b0feaf727918e3aad28f8318c18b9aedbaebdf
multus-networkpolicy git f988f894 sha256:42e5f9ebfd8a36dff940b92c5d8210fd135bc31a9270e553ed9d039f7947b77a
multus-route-override-cni git 73594f77 sha256:11829ffb7b454794b8b337dfda1113cea3ddd3905a6a7c35e0775dbc091f66ce
network-interface-bond-cni git e6880659 sha256:5582175afa357aff7a9f264b4f7078f1d0c6f17656f1139ffffea2927be90349
network-metrics-daemon git 1210db38 sha256:102fde7179e9da73148e4af5d64979c15221aeef9c7960f985b9dcca863ae676
network-tools git 234ed43e sha256:f69cb8fc26063dea223d1967bb7b624c4bff79c25fce9011c8674f48a0ef87ca
nutanix-cloud-controller-manager git 28bf5963 sha256:da054e8375bca4ef1fca5b645d6bdf8d3c10fc1a7d717c03a2e2fbc82a230d12
nutanix-machine-controllers git 2f2e121b sha256:2dc4ea89869fb3c3f3e4708a24099c0d2eedbe8acd49156888913f44c9d5a7f0
oauth-proxy git 565f7ed4 sha256:e1ee72c7b23d707b32dd48f3e70973dccf127635b3240352d4049665c9f79099
oauth-server git 3739138c sha256:1fd7607f5cdffe0a1d908d49658725d83684453498ebcbe15a87e33b49413955
oc-mirror git b137a53a sha256:7520fb7ab3f304bb9ac1c61645882064a59767fb79e161dca81dcc35cfcf6e91
olm-catalogd git 79975a51 sha256:28e5ac427266ec11b40b47d445a2ac1aa980e423992807771308351ea923586c
olm-operator-controller git 80b8649c sha256:34afe1b3f34471a55ab2d181698596cc8e0b6f62cf8ea92915db0df9afcbae1b
olm-rukpak git 282cc84c sha256:da92c9b6533dbf4535289884402afb105c6e018e54a6521de3ee6dd892aa6090
openshift-controller-manager git 90f73f7e sha256:02c9e8135f8456c5d1d59a57d360c8f8d93095252ecbba0afc3c6bda3aac576f
openshift-state-metrics git 59b8a0ff sha256:362f6394c08d8f0422a71ae1a88d8c3e696d65605bb5e6bd3a9dc7aaea821d80
openstack-cinder-csi-driver-operator git 85b52097 sha256:d825873cf861c5bc0c7343616fd70b5a9ba10e50e93769a12778e5c12953d50e
openstack-cluster-api-controllers git 3b972b2b sha256:d2ae13f3ca57130c0f2e05708af7488d5ffda96981004c6366ec1b64adb63a6b
powervs-block-csi-driver git 26162bad sha256:ec7b101f31efef9555025ce279469692b40688e07c981b7211eea069564ef156
powervs-block-csi-driver-operator git 9c5dd8d1 sha256:bdf81a9d69b7aa3843639367cb27f85c2d44986e5a2a1c49cb04dadcd03d4518
powervs-cloud-controller-manager git 20e6dc70 sha256:6322b2a1f8828fcf22f5b37356fbda8481416a993b59365b2e5ace17d82e43f9
powervs-machine-controllers git 2bfcc0f8 sha256:fca2a2f81a59bb0fa47d15b8e8825bb586181d219ab516cb1613f0528b55571a
prom-label-proxy git 5e14722e sha256:95300470f06cdad2e2e318b9ac8a79cb1c17965475222aa37e3171d33efbbccc
prometheus-config-reloader git c7262a43 sha256:b1c0b3b2799413f14f7fbbb99cf8413a5744eb57d347ea92911ccff489768627
prometheus-node-exporter git 29ba26d1 sha256:66134c062f87c20c0ccf27e21daad0d04c4618ce1db3ebee5b3cb8d66e45c161
prometheus-operator git c7262a43 sha256:a34bbd42371aefff5bc5181b5321d08672c5705226833bc3bf27184937cab1bc
prometheus-operator-admission-webhook git c7262a43 sha256:7b96819cd9a3c4295665b72fa086b019da92c64c04567ef63cc7ea08b5751df7
rhel-coreos sha256:63b85d2f93673b2239c767e9832f18875c6b75d9c8703ccc6e0633344ada1e82
rhel-coreos-extensions sha256:98d094bca31f2bc7c7320ea0b3ed854c32159665051b9a0383ced33c618676ca
sdn git 53fea06b sha256:dea065f6291596e71cc55d28c33fbb2a41c5bb6178a02a05f03d87dd892d7460
service-ca-operator git 538c7b98 sha256:c4e9d3cfd6eae2ac6f182b12ecc0d180f6ae5ea2c3e4650d257a53af5df725b9
telemeter git c1ecd105 sha256:68c1267974541df30997edb0accebbab486bba1123275e3ef29c848acbd8ee8a
thanos git 85eee25c sha256:4021eb47a4d8d7042f5a9ab1dbea2dd2cc7a997098659cea2569ac8421a2af69
vsphere-csi-driver-operator git 7940ea16 sha256:b2ee288d7fb037f755da3fe6f234b49bec202ba98bf308495d14cb2b86f6e3ab

agent-installer-utils

OCPBUGS-68046: bump github.com/sirupsen/logrus to v1.9.3 #239
Full changelog

aws-cluster-api-controllers

OCPBUGS-78227: [release-4.16] update go mod dependency for konflux #591
Full changelog

aws-machine-controllers

OCPBUGS-73903: Fix reconciler consistency checks in Update and Exists #168
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-79998, OCPBUGS-85635, OCPBUGS-85636: Bump google.golang.org/grpc to v1.79.3 #182
Full changelog

azure-cluster-api-controllers

OCPBUGS-78176: [release-4.16] update go mod dependency for konflux #364
Full changelog

azure-machine-controllers

OCPBUGS-66044: Set updateDomainCount to one when faultDomainCount is one #177
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-74885: Azure UPI ARM template: use storageAccountId #10282
OCPBUGS-76586: terraform/provider/google: Fixing GCP inconsistencies present with the service account creation #10298
OCPBUGS-73879: data/manifests/bootkube/cvo-overrides: Default to eus-4.16 #10226
Full changelog

baremetal-machine-controllers

OCPBUGS-78099: [release-4.16] fix vendor/ for hermetic migration 4.16 #243
Full changelog

baremetal-operator

OCPBUGS-77278: Unblock BMH direct deletion when detached annotation is present #463
Full changelog

baremetal-runtimecfg

OCPBUGS-60113: Re-add ENABLE_NODEIP_DEBUG env var #362
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-64616: Help with must-gather scheduling through suggesting preferance of nodes #2151
Full changelog

cloud-credential-operator

OCPBUGS-65802: ccoctl azure: retry custom role creation on consistency errors #952
Full changelog

cloud-network-config-controller

OCPBUGS-66346: [release-4.16] Fix capacity calculation #195
Full changelog

cluster-autoscaler

OCPBUGS-78702: allow clusterapi provider to skip paused resources #415
Full changelog

cluster-baremetal-operator

OCPBUGS-77447: Bump github.com/go-errors/errors to v1.5.1 #562
Full changelog

cluster-capi-operator

OCPBUGS-79943: Bump google.golang.org/grpc to v1.79.3 #573
NO-JIRA: Allow sustaining engineering to self serve dependency updates #560
Full changelog

cluster-config-api

CNTRLPLANE-1982: Promote streaming list encoding to Default #2600
OCPBUGS-71202: Add HTTPKeepAliveTimeout to IngressController API #2640
Full changelog

cluster-etcd-operator

OCPBUGS-68058: Update logrus to 1.9.3 to address CVE-2025-65637 #1546
Full changelog

cluster-image-registry-operator

OCPBUGS-68059: : Bump github.com/sirupsen/logrus to v1.9.1 #1285
Full changelog

cluster-ingress-operator

OCPBUGS-71202: Implement HTTPKeepAliveTimeout tuning option #1337
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-68064: CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-rhel9-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.16.z] #2043
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #624
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-68069: Bump github.com/sirupsen/logrus to v1.9.1 #144
Full changelog

cluster-monitoring-operator

OCPBUGS-77276: AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change #2831
Full changelog

cluster-network-operator

OCPBUGS-84182: fix(hypershift): use net.JoinHostPort for URL construction #2981
OCPBUGS-75890: Tweak iptables-alerter to try to avoid crictl bug #2898
: NO-JIRA: Update CNO reviewers/approvers #2768
Full changelog

cluster-node-tuning-operator

OCPBUGS-78766: [4.16] PPC: filter out namespaces dir #1466
Full changelog

cluster-olm-operator

OCPBUGS-86243: Update grpc-go to v1.67.3-sec.1 to fix CVE-2026-33186 #206
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-68072: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.16] #654
Full changelog

cluster-storage-operator

OCPBUGS-87613: remove oVirt code from CSO 4.16 #709
OCPBUGS-78769: Add patch permission to provisioner role #685
Full changelog

console

OCPBUGS-88027: Fix JSON annotation parsing to prevent OperatorHub crash #16588
OCPBUGS-88377, OCPBUGS-88380, OCPBUGS-88412, OCPBUGS-88419, OCPBUGS-88444: CVE-2026-44495 #16612
OCPBUGS-88554: Stabilize legacy OperatorHub Cypress waits #16608
NO-JIRA: enable multi-architecture yarn builds #16417
OCPBUGS-83299: [release-4.16] openshift4/ose-console-rhel9: Axios: Remote Code Execution via Prototype Pollution escalation #16298
OCPBUGS-78673: Namespace is not persisting when switching to developer view from the topology page of admin page #16161
CONSOLE-5011: migrate to yarn berry #16078
OCPBUGS-76578: Bump axios #16032
NO-JIRA: Bump builder image to v29 #15993
OCPBUGS-74447: Bump lodash to latest #15967
OCPBUGS-69678: Disallowed Pipelines-plugin Pipelines navigation section #15857
OCPBUGS-64884: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15707
Full changelog

console-operator

OCPBUGS-77992: update go mod dependency for konflux #1115
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-85669: CI Build root image tag sync with ART #234
Full changelog

coredns

OCPBUGS-77463: Modify .gitignore to not exclude vendor build folders #168
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-79978: Bump google.golang.org/grpc #389
OCPBUGS-68080: fix CVE-2025-65637 #361
Full changelog

csi-driver-nfs

OCPBUGS-84931: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.67.3-sec.1 to avoid go version bump and fix CVE-2026-33186 #182
Full changelog

csi-node-driver-registrar

OCPBUGS-64632: update log level verbosity to not clutter logs #91
Full changelog

docker-builder

OCPBUGS-65907: BuildConfig inline Dockerfile fails with heredoc syntax #489
Full changelog

gcp-cluster-api-controllers

OCPBUGS-78280: [release-4.16] update go mod dependency for konflux #267
Full changelog

gcp-pd-csi-driver

OCPBUGS-68087: Update logrus to 1.9.3 #92
Full changelog

haproxy-router

OCPBUGS-79960: Bump google.golang.org/grpc to v1.79.3 #769
Full changelog

hyperkube, pod

OCPBUGS-68041, OCPBUGS-68091: CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.16] #2582
OCPBUGS-74299: Skip E2e: attach on previously attached volumes should work #2568
OCPBUGS-65694: Fix Concurrentmap Iteration #2519
Full changelog

hypershift

OCPBUGS-84182: fix(cno): use brackets only for IPv6 in server URL #8348
OCPBUGS-76534: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7704
OCPBUGS-74375, OCPBUGS-74376: Support proxy authentication when user/pass is included in URL #7578
OCPBUGS-73118: Fix Konflux EC voilation, update deprecated base … #7459
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-79964: Bump google.golang.org/grpc to v1.79.3 #145
OCPBUGS-77210: [release-4.16] standardize build paths #124
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67288: [release-4.16] Fix incomplete vendor/ #138
Full changelog

insights-operator

OCPBUGS-68370: Add filtering to add other possible pod status to QEMU gatherer #1200
OCPBUGS-67009: QEMU logs are not gathered if there are pending status virt-launcher pods #1197
Full changelog

ironic

OCPBUGS-76457: Bump pyasn1 to 0.5.1-4 #828
OCPBUGS-69789: Bump eventlet version to 0.33.1-7 #763
Full changelog

ironic-agent

OCPBUGS-61165: netutils: Use ethtool ioctl to get permanent mac address #215
OCPBUGS-69781: Bump eventlet version to 0.33.1-7 #232
Full changelog

kube-metrics-server

OCPBUGS-79929: Bump google.golang.org/grpc to v1.79.3 #66
Full changelog

machine-config-operator

OCPBUGS-62171: Fix - NetworkManager restart or crash renders br-ex unusable #5354
OCPBUGS-60113: Enable debug logging for nodeip-configuration #5218
OCPBUGS-77253: Machine-config controller should not log about non-existent pull-secret changes #5694
OCPBUGS-77184: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5685
Full changelog

machine-image-customization-controller

OCPBUGS-68093: [4.16] uplift logrus #153
Full changelog

machine-os-images

OCPBUGS-87878: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #102
Full changelog

monitoring-plugin

OCPBUGS-79441: immutable bump #898
OU-1260: [release-4.16] feat: use npm instead of yarn #813
OCPBUGS-76807: fix for CVE-2025-69873 #849
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-85251: Fix server url in kubeconfig #300
NO-ISSUE: [release-4.16] Bump Go to 1.21 and fix CI build root image #292
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-70215: Prevent accidental IP deallocation in statefulsets #396
Full changelog

must-gather

OCPBUGS-86218: Collect object size with the object count #550
OCPBUGS-66106: Separate resources with comma to fix malformed inspect #515
Full changelog

oauth-apiserver

OCPBUGS-74112: UPSTREAM: <carry>: bump kubernetes-apiserver to pick up loopback cert expiration update #166
NO-JIRA: (chore): update OWNERS file #172
Full changelog

openshift-apiserver

OCPBUGS-68104: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.16] #610
OCPBUGS-74113: UPSTREAM: <carry>: bump kubernetes-apiserver to pick up loopback cert expiration update #595
Full changelog

openstack-machine-api-provider

OCPBUGS-78170: hermetic 4.16 #163
OCPBUGS-76794: Fix make test #155
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-79980, OCPBUGS-79981, OCPBUGS-87898: Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.67.3-sec.1 [release-4.16] #1318
OCPBUGS-82057: Drop github.com/distribution/distribution dep #1302
OCPBUGS-77959: Remove the collect-profiles info from the microshift kustomization file #1251
OCPBUGS-77169: Remove the collect-profiles job #1235
Full changelog

operator-marketplace

OCPBUGS-68108, OCPBUGS-68109: CVE-2025-65637 fixed in logrus v1.9.3+ #722
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-83497: External gateway: Remove routes for external gateway pods in terminating or not ready state #3140
OCPBUGS-78033: Add pperiyasamy to OWNERS for release-4.16 #3047
OCPBUGS-77685: Clear stale conntrack UDP entries for nodePorts #3038
OCPBUGS-77187: Fix conntrack reconciliation to use service port instead of endpoint port #2998
CORENET-6055, OCPBUGS-76277: [release-4.16] Dockerfile: Unpin OVN and consume the latest from FDP #2972
OCPBUGS-71219: [release-4.16] CVE-2025-65637 Bump github.com/sirupsen/logrus to v1.9.1 through indirect dependency conversion (go-controller module) #2906
OCPBUGS-72541: NetPol & MultiNetPol: Process update only when spec fields and/or related annotation are updated #2933
OCPBUGS-68349: Add ricky-rav to OWNERS for release-4.16 #2899
OCPBUGS-66155: Skip Pending pods in EgressIP status updates #2880
Full changelog