4.16.66

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.16.66-x86_64

Qualifiers (status api): None

Tests:

Blocking jobs
- upgrade Pending (1 retry) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Pending
- upgrade-minor Pending (1 retry) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Pending
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-main-ci-4.16-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.16-micro Pending (1 retry) periodic-ci-openshift-release-main-nightly-4.16-e2e-aws-sdn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Pending
- azure-ovn-upgrade-4.16-micro Pending (1 retry) periodic-ci-openshift-release-main-ci-4.16-e2e-azure-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Pending
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.16-fips-payload-scan
- gcp-ovn-rt-upgrade-4.16-minor Pending (1 retry) periodic-ci-openshift-release-main-ci-4.16-upgrade-from-stable-4.15-e2e-gcp-ovn-rt-upgrade
  - Attempt 1 Failed
  - Attempt 2 Pending
- hypershift-ovn-conformance-4.16 Succeeded periodic-ci-openshift-hypershift-release-4.16-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-metal-ipi-ovn-ipv4
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.15.21, 4.15.22, 4.15.23, 4.15.24, 4.15.25, 4.15.26, 4.15.27, 4.15.28, 4.15.29, 4.15.32, 4.15.33, 4.15.34, 4.15.35, 4.15.36, 4.15.37, 4.15.38, 4.15.39, 4.15.40, 4.15.41, 4.15.42, 4.15.43, 4.15.44, 4.15.45, 4.15.46, 4.15.47, 4.15.48, 4.15.49, 4.15.50, 4.15.51, 4.15.52, 4.15.53, 4.15.55, 4.15.56, 4.15.57, 4.15.58, 4.15.59, 4.15.60, 4.15.61, 4.15.62, 4.15.63, 4.16.10, 4.16.11, 4.16.12, 4.16.13, 4.16.14, 4.16.15, 4.16.16, 4.16.17, 4.16.18, 4.16.19, 4.16.20, 4.16.21, 4.16.23, 4.16.24, 4.16.25, 4.16.26, 4.16.27, 4.16.28, 4.16.29, 4.16.3, 4.16.30, 4.16.32, 4.16.33, 4.16.34, 4.16.35, 4.16.36, 4.16.37, 4.16.38, 4.16.39, 4.16.4, 4.16.40, 4.16.41, 4.16.42, 4.16.43, 4.16.44, 4.16.45, 4.16.46, 4.16.47, 4.16.48, 4.16.49, 4.16.5, 4.16.50, 4.16.52, 4.16.53, 4.16.54, 4.16.55, 4.16.56, 4.16.57, 4.16.59, 4.16.6, 4.16.60, 4.16.61, 4.16.7, 4.16.8, 4.16.9

4.16.65 (changes) - S F P F P S F P
4.16.64 (changes) - Failed
4.16.63 (changes) - Failed
4.16.62 (changes) - Failed
4.16.58 (changes) - Failed
4.16.51 - Failed
4.16.2 (changes) - Success
4.16.1 (changes) - Failed
4.16.0 (changes) - Success
4.15.66 (changes) - F F P
4.15.65 (changes) - Failed
4.15.64 (changes) - Success
4.15.54 (changes) - Failed
4.15.31 (changes) - Failed
4.15.30 (changes) - Failed
4.15.20 (changes) - Failed
4.15.19 (changes) - Failed
4.15.18 (changes) - Failed
4.15.0-0.nightly-2026-07-07-203653 (changes) - Failed Pending

Loading changelog, this may take a while ...

Changes from 4.16.51

Created: 2026-07-08 12:09:25 +0000 UTC

Image Digest: sha256:29a257b84ed0c15e4b45fb75fe5c374a3e2a1cc22baa7d092a81568eed83fd95

Components

Kubectl 1.29.7
Kubernetes 1.29.14
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202510221349-0 to 416.94.202607021016-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
StreamingCollectionEncodingToJSON (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Removed images

ovirt-csi-driver
ovirt-csi-driver-operator

Rebuilt images without code change

agent-installer-api-server git 5c16119a sha256:f62d07cdf2999e7a2957fda9f825d947f8f6b26258df14f52c9e079d5c537100
agent-installer-csr-approver git 302f47ff sha256:a0d717cdf52d3f0dc6e2fc89e948ac1309a0daa06f8086dceb45bc1c4ec4757b
agent-installer-node-agent git 720b5023 sha256:4bedb466a9e064f4de35f0c7710cefcd83c08291cf36c1ad7da1c36e3ea4ea43
agent-installer-orchestrator git 302f47ff sha256:87f2731d081594805124515ac64613f7f86bf0988ba6a10a7ec13d2ccc587fff
alibaba-cloud-controller-manager git 97e8335e sha256:96d2971334396920dc119d480bb28640449519fc71a2053184a8ed285a716e26
alibaba-machine-controllers git 248372a4 sha256:344c3c1ebfbd892e1a477de553abd7703e0f8453273cc79bfa26ff59b537cd7f
apiserver-network-proxy git ca81b6a3 sha256:13f0e3459b11faa020b7855b6efe944ea529c1f33bf11f5f6852c98e1ee545f0
aws-cloud-controller-manager git a53e9def sha256:cc1b616e48dc4db088c39748dae6c39dc0d34ade2c3236b19627aadbff228307
aws-ebs-csi-driver git 1d29a74a sha256:cedce68183772bab791d4250f7de6777d44fb1d8cf25c3bd7d8ee20cb707b7cf
aws-kms-encryption-provider git c66065de sha256:503ce4710d7ceed01f2d997543baf576d75230e0ed331f3b9bd97c9635e93e33
aws-pod-identity-webhook git 459c5314 sha256:a6d37e54910b6c15568d9314f37af60942e1cfbaa6b33b097e6ac1884f39e860
azure-disk-csi-driver git 6b55f6fb sha256:a775e30b613b035fc1c0e60d121e4ff16824631e57cdf1b6e7038e120b91725d
azure-kms-encryption-provider git af633e05 sha256:307ea7f45375885263d721f4c1da979fc5fec54c02fcb01367b52adcbad88d3a
azure-workload-identity-webhook git 5b8d171e sha256:ad9bcbee8208e85a1dfb7ab69577adabc2f9749d3deda6910efb2f6c9d6861c8
cluster-authentication-operator git 0e39ace5 sha256:875d9693218efc69d7a7ecfa95ece4b2b4738786f71f598420d20fe6d738ec45
cluster-autoscaler-operator git 70164fc6 sha256:d8a768aac02abc40ac875de308fcd1fe7ddeed9d302af71233ea15221f6c132d
cluster-bootstrap git 27bfb59f sha256:a662c53f78397d711a4b9521d0ffd1aa7e943c9c1ab814bd6b1aa99c53eefae6
cluster-capi-controllers git 5830a10a sha256:a24ae0d151e83248fc5dd579747b8a7a0da0432efcd3da712c8c35c4d6201a05
cluster-config-operator git 441d29c9 sha256:3b2172add66881dc791c088b65475c4749fb8115cd6507516d339e0d057bda43
cluster-control-plane-machine-set-operator git 14571e8a sha256:49f962425b6452f1d9e1146509c8c8cc590e68bae6e5e12af322226fef8f9aa1
cluster-csi-snapshot-controller-operator git 439826e1 sha256:c2cdd7e097456f23183fcdf2c478b1726b6a7f68a6566335a8c796bd4a14bed7
cluster-dns-operator git a4b1cfb4 sha256:880af7ce80b8f60f5dc43f7b601d89e9ff85adc4896aa5caf3d06c68725b4e26
cluster-kube-cluster-api-operator git 95ceaa9e sha256:f737036d0ee469b624b3810a1cb10adecbaf8fa767e1e09896d9031e8ef6aaf7
cluster-kube-controller-manager-operator git b3faac1f sha256:4402384e789599b5314a9350d26df86e2499c2439b5b6cb30a54ad36d882c137
cluster-machine-approver git 7685374f sha256:e38f4ab6c4eee2d51f1758fea98bdf532f3db1253e915bbd8b1d11721675d9b7
cluster-openshift-controller-manager-operator git 2ed3cf99 sha256:839b8541e8323596bdc940dd34214256b6b98bfe27be906db3b564683ff5a165
cluster-policy-controller git eaea543f sha256:60b8bfe31f04e1f05858085e2cdf39f41388fe5449c0f728137ccb75de2332c6
cluster-update-keys git e8478585 sha256:d7979332f0c43c4772cbf4ba9437714f0b558eba41b619ad973abf353cb8dd73
cluster-version-operator git be820285 sha256:c28ae940843dd69ccd06e276d9cd0a27fbb3a70c2e6e3bc97d38a2378d9ac777
configmap-reloader git dc91ddc4 sha256:504de9b684baa2ba2fcb4954974c3c8e39524d26605c065d47307ad85bde6da7
csi-driver-manila-operator git c25d1ff2 sha256:bc7527343525dc203b85c236bc5eabfcfddf7b0c5f56e9b240c9c339bb613a0d
csi-driver-shared-resource git bc125def sha256:4d64d5bb9004843831b2809ba62e180931e534fd1eb3f053b2f0624f432e143f
csi-driver-shared-resource-operator git 1e1194bc sha256:43155813cec2dfa462e95fc7acc78d274f85ab3c0bb33caf3ac35f44d72e25f4
csi-driver-shared-resource-webhook git bc125def sha256:7f5f7c484654733663458a9da22cc20714c3b709be3f7f5963a0c6fc0d663061
csi-external-attacher git 7da80aab sha256:f88840a0d63c3ab7bc9bd8731734655fb5ed4b0401c11c2469442b35c2177bd7
csi-external-provisioner git 9e8af011 sha256:01e118fff1355bef5872a623a62eef30e573ce6f386a07df83f3acd46592faa6
csi-external-resizer git 06e08fd2 sha256:70dd96d8b8db919cd6fd80a354d976f71a53a05d223ebe885e52190ee8becfee
csi-external-snapshotter git ee32ba01 sha256:0c1c44f9326092fd5363c5e434d1cc6dfc02b43204167b38b1080fc2d437862b
csi-livenessprobe git f5e3ff55 sha256:0cf703c7ecaf73de14bc1a1d638c6878b418a1f03c7758a5f231450d26beb1a2
csi-snapshot-controller git ee32ba01 sha256:efe95e88dbf02e056d7715800ec25d959b5f7a87ddd06c0130db0ca31ef5c7d5
csi-snapshot-validation-webhook git ee32ba01 sha256:bfea13f531e62ac8b3e35344fa1b0078db4b618288ad8ec971f640e855824675
docker-registry git 072c544c sha256:664be8985ec54a0039128597b36a45622204b744c80d28e6bf45a9840582722e
driver-toolkit git 1d5732f0 sha256:fe958a4bb4571efbc575e3b8d3bb9a217b7da360aaede62c7ddbf1ad5c497396
egress-router-cni git 7089efe6 sha256:8755c30b78101d311fc9ca38c47d2634a0372f75bed11a69753e856d7e71bb32
etcd git e7911c0d sha256:cd3c86acf261706b890a5678e7268cd002efb9b4e4cfc14b06da32cb5e3bec9d
gcp-cloud-controller-manager git 26b43dfc sha256:b9541c1252ecb722803e77d338afa72a1f504e6a99c2a1a00117dd32a89ddeb6
gcp-pd-csi-driver-operator git 799327f7 sha256:ed2380e36384f1ebdc0867d010b5821e1e2a447bf279786ddec4ace534d1c016
ibm-cloud-controller-manager git f961f16d sha256:34a76c634a3501d0618078eeb8443df5756a73c68c4651e2c420dc02357b086d
ibm-vpc-block-csi-driver-operator git 9ca53768 sha256:662ef5385b2af853d5b98af3031f8e10984a8f324fdd856fe88919ed7408b4c9
ibmcloud-machine-controllers git d29506e7 sha256:585c0baa6d7fc2589b951aab510e4c5d9541740c1622be50c22a6a710611e43a
ironic-machine-os-downloader git 93b8b5fa sha256:d1ee741f9f401afcc180fb69747ebdece6a2c5b9d0e526937b964a4ddf2cc4cc
ironic-static-ip-manager git f44e8a08 sha256:bb753bbdf94f257e7b29512983138ef9cb023b672f13b3ebecef0131f1536628
k8s-prometheus-adapter git e4f859be sha256:a4c4fff091325ac632849c62ddb7d310c30c0fc448ed6c0b254aa456e8b0ec61
keepalived-ipfailover git b58673a3 sha256:67bc1e45b3046f201f1b05f60a1721cccb31852880519d89c29a9210fd2684ef
kube-proxy git 53fea06b sha256:3d9000c08424205cb6a4c37c5468147796615d119e4d0bed071d3256f2a58fab
kube-rbac-proxy git c38f4734 sha256:27fe78aec6de8f2bb23524d0488d3b29f1a37fb166da2d1573df5df380dd02f1
kube-storage-version-migrator git 6f213320 sha256:91f0385acc8066cba4718a935b01107d22bbd155b40dc4a9b8ade301d00cd4e9
kubevirt-csi-driver git d474c42e sha256:f55891ca7c3c1f5d737e740e43add0ff8c970a1daf61a3019cad2cb6b46824cb
multus-admission-controller git a15bf454 sha256:b470f916490df9bffe1651b1631623c23c963239481f4ac1ccd713158ab752ec
multus-networkpolicy git f988f894 sha256:db6c3fc823c056a4a68c0ed755319616d2e862fe0a19eea52378b8a8e848ddff
multus-route-override-cni git 73594f77 sha256:a0925dda35643087daab89dd753b59e00463ceadac35d1227955c7c509620cb3
network-interface-bond-cni git e6880659 sha256:9dd177b70692eab56097b4bba30a7d52d07ec8d94f854ecf43f69c3eedacbb68
network-metrics-daemon git 1210db38 sha256:8686fa3ab394f1869176d2bf69570d4dbc29982e03dc7f418e409c902f439bf2
network-tools git 234ed43e sha256:c6f75f5b00ab7bb0d961e730dfb086d34bc9775dc5c952cbd07d31dea5f9717c
nutanix-cloud-controller-manager git 28bf5963 sha256:a09c4b7645848012ff24a8fac3121afb58dfebf6cea8d5f47be3067a0a2013c8
nutanix-machine-controllers git 2f2e121b sha256:ed0c299012317854ced56c3bede1608d626994cc65f13304e402d4803fd8ce9e
oauth-proxy git 565f7ed4 sha256:d3fb7ec108e4c532cdf4dc75786270c377487f78e8134b91a8b43880c0532a02
oauth-server git 3739138c sha256:9f64b385a71fce9141095c197055d71943940942b1c2db866bef10150ac198e8
oc-mirror git b137a53a sha256:e856abcced03c89c87e8ac668b26863a7ea510c2bc735ca86671aeb84accd39f
olm-catalogd git 79975a51 sha256:8a34038f78cbe5674ebe89eacc0be92b5bcfc213d56a46af7d78c30f0444cf61
olm-operator-controller git 80b8649c sha256:c140047b565afe6c200221dac76ffdd4cc9a9f6c78f8b87c097d7c8b73992f8a
olm-rukpak git 282cc84c sha256:58705f509021c96f1ea1d696337feda701c62ac8265135bcf9aae7e8e801a1c9
openshift-controller-manager git 90f73f7e sha256:68c4a89269b605555ab564bd17331bdefff4a7d330ad76f662696d6f99686b88
openshift-state-metrics git 59b8a0ff sha256:5ab3ca4b5e54658615c1e8bb79701e56cb9ff4c75851535f5078b40a1cecac44
openstack-cinder-csi-driver-operator git 85b52097 sha256:b42ad84b6a06f726e23042e531d5c74f7f83317a1a0fa33f358bf44403339007
openstack-cluster-api-controllers git 3b972b2b sha256:23ccdafb0fadbd4a0a25a0f0b4ea0e9fcb2d1348259ebff487ce7d1feb013dc6
powervs-block-csi-driver git 26162bad sha256:8b8b6e4b1665240deac8dde619e7c32416a9718cf0d10a041d32a5b7ff56ca8b
powervs-block-csi-driver-operator git 9c5dd8d1 sha256:3980947c51aaa524e561cba42c3624ff8e8e5b5869f4779b3875b52b92c1d922
powervs-cloud-controller-manager git 20e6dc70 sha256:4acc060a89a8ab2424acb12d776b3e558db3fc0be541e601feea7e00a94bec49
powervs-machine-controllers git 2bfcc0f8 sha256:2894aca3b058ec8ba9c1351363826d06315cb723c8ba7f71a503bd0abe2f59df
prom-label-proxy git 5e14722e sha256:a6ebbb4c84ab589c5884c7b8e0328251c8d19080a6fe359e0488967bf5e2c765
prometheus-config-reloader git c7262a43 sha256:005187eadfc2e6248d1cde64ab72d0941fe035208512329e07a5cd73f69fe088
prometheus-node-exporter git 29ba26d1 sha256:1618a30c11cf774ada139bf5ea168d7176449137154381a5514b10029d01ba2f
prometheus-operator git c7262a43 sha256:bb51f2a624467a7279ec288351324f9475ea2df61c5037238224804abee1fcad
prometheus-operator-admission-webhook git c7262a43 sha256:03618d3f4ea474808b1d742224516e280fe768b3ec3f1659e9d0b6d165d142e9
rhel-coreos sha256:ef660e6a3344b9a024766e22d69897f6c357412852a5bf1fc53ad325c0d2109f
rhel-coreos-extensions sha256:6f5803528f78da238472b4684f4403064dae4edc2db5697ef22535adde6e21ed
sdn git 53fea06b sha256:60446abcab16cf4c2934ca59a47a195d01373259db1680c347c3a05810f7d53a
service-ca-operator git 538c7b98 sha256:efc5b17ab1a4442c9047706f9c2be707f16730c902f450ebc9651c92e5496c8e
telemeter git c1ecd105 sha256:ec3ee7a7db6201651c22ab961d7a1463fc4594cd68184f014cb8ad36f0c2f8d0
thanos git 85eee25c sha256:7e8c7e538e6333170c0355323f5688ca80ed6fb7138646f096369b68ae861580
vsphere-csi-driver-operator git 7940ea16 sha256:804fb3d3072651806501f53f98578409052374bcaa0bf4be52e6d30fe5a609b5

agent-installer-utils

OCPBUGS-68046: bump github.com/sirupsen/logrus to v1.9.3 #239
Full changelog

aws-cluster-api-controllers

OCPBUGS-78227: [release-4.16] update go mod dependency for konflux #591
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-64831: Use 127.0.0.1 for healtz http-endpoints #467
OCPBUGS-64768: Add RBAC ClusterRole and Binding for driver node #465
Full changelog

aws-machine-controllers

OCPBUGS-73903: Fix reconciler consistency checks in Update and Exists #168
OCPBUGS-63140: client: re-use a single file for building the session instead of randomly named files #144
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-79998, OCPBUGS-85635, OCPBUGS-85636: Bump google.golang.org/grpc to v1.79.3 #182
Full changelog

azure-cluster-api-controllers

OCPBUGS-78176: [release-4.16] update go mod dependency for konflux #364
Full changelog

azure-file-csi-driver

OCPBUGS-89335: Address CVE-2026-33186 #139
Full changelog

azure-machine-controllers

OCPBUGS-66044: Set updateDomainCount to one when faultDomainCount is one #177
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-74885: Azure UPI ARM template: use storageAccountId #10282
OCPBUGS-76586: terraform/provider/google: Fixing GCP inconsistencies present with the service account creation #10298
OCPBUGS-73879: data/manifests/bootkube/cvo-overrides: Default to eus-4.16 #10226
OCPBUGS-54165: aws: fix NLB creation in secret regions #10031
OCPBUGS-53237: Validation for API and Ingress VIPs when using user-managed load balancer #10048
Full changelog

baremetal-machine-controllers

OCPBUGS-78099: [release-4.16] fix vendor/ for hermetic migration 4.16 #243
Full changelog

baremetal-operator

OCPBUGS-77278: Unblock BMH direct deletion when detached annotation is present #463
Full changelog

baremetal-runtimecfg

OCPBUGS-60113: Re-add ENABLE_NODEIP_DEBUG env var #362
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-64616: Help with must-gather scheduling through suggesting preferance of nodes #2151
OCPBUGS-64561: Update go-jose, x/crypto, x/net #2144
Full changelog

cloud-credential-operator

OCPBUGS-65802: ccoctl azure: retry custom role creation on consistency errors #952
OCPBUGS-63550: ccoctl: add public-key-file flag to create-all #940
Full changelog

cloud-network-config-controller

OCPBUGS-66346: [release-4.16] Fix capacity calculation #195
OCPBUGS-65567: [release-4.16] Change the capacity struct from int to ptrOfInt #192
Full changelog

cluster-autoscaler

OCPBUGS-78702: allow clusterapi provider to skip paused resources #415
Full changelog

cluster-baremetal-operator

OCPBUGS-77447: Bump github.com/go-errors/errors to v1.5.1 #562
OCPBUGS-64741: Always have a service for ironic-api port #524
OCPBUGS-63417: Fix ironic inspector container privileges #513
Full changelog

cluster-capi-operator

OCPBUGS-79943: Bump google.golang.org/grpc to v1.79.3 #573
NO-JIRA: Allow sustaining engineering to self serve dependency updates #560
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63168: ccm: disable unused secure-serving port and webhook #422
Full changelog

cluster-config-api

CNTRLPLANE-1982: Promote streaming list encoding to Default #2600
OCPBUGS-71202: Add HTTPKeepAliveTimeout to IngressController API #2640
NO-JIRA: Promote streaming list encoding to Default on Hypershift. #2568
CNTRLPLANE-1611: Add feature gates for StreamingCollectionEncoding #2542
Full changelog

cluster-etcd-operator

OCPBUGS-68058: Update logrus to 1.9.3 to address CVE-2025-65637 #1546
Full changelog

cluster-image-registry-operator

OCPBUGS-68059: : Bump github.com/sirupsen/logrus to v1.9.1 #1285
Full changelog

cluster-ingress-operator

OCPBUGS-71202: Implement HTTPKeepAliveTimeout tuning option #1337
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-68064: CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-rhel9-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.16.z] #2043
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #624
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-68069: Bump github.com/sirupsen/logrus to v1.9.1 #144
Full changelog

cluster-monitoring-operator

OCPBUGS-77276: AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change #2831
OCPBUGS-64581: Fix KSM deny-list typo #2733
OCPBUGS-64637: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.16 #2735
OCPBUGS-62765: port metric acm_managed_cluster_worker_cores:max to OCP 4.16 #2719
OCPBUGS-63235: test: remove image registry e2e tests #2727
Full changelog

cluster-network-operator

OCPBUGS-84182: fix(hypershift): use net.JoinHostPort for URL construction #2981
OCPBUGS-75890: Tweak iptables-alerter to try to avoid crictl bug #2898
: NO-JIRA: Update CNO reviewers/approvers #2768
OCPBUGS-63155: Add drop flows for GARPs #2819
Full changelog

cluster-node-tuning-operator

OCPBUGS-82675: Bump github.com/moby/spdystream from v0.2.0 to v0.5.1 #1551
OCPBUGS-78766: [4.16] PPC: filter out namespaces dir #1466
Full changelog

cluster-olm-operator

OCPBUGS-86243: Update grpc-go to v1.67.3-sec.1 to fix CVE-2026-33186 #206
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-68072: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.16] #654
Full changelog

cluster-samples-operator

OCPBUGS-63516: references to github.com/sclorg/django-ex.git now also refer to the branch #659
Full changelog

cluster-storage-operator

OCPBUGS-87613: remove oVirt code from CSO 4.16 #709
OCPBUGS-78769: Add patch permission to provisioner role #685
Full changelog

console

OCPBUGS-77123: [release-4.16] CVE-2026-26996 Bump minimatch library #16346
OCPBUGS-79439: Bump immutable #16657
OCPBUGS-88027: Fix JSON annotation parsing to prevent OperatorHub crash #16588
OCPBUGS-88377, OCPBUGS-88380, OCPBUGS-88412, OCPBUGS-88419, OCPBUGS-88444: CVE-2026-44495 #16612
OCPBUGS-88554: Stabilize legacy OperatorHub Cypress waits #16608
NO-JIRA: enable multi-architecture yarn builds #16417
OCPBUGS-83299: [release-4.16] openshift4/ose-console-rhel9: Axios: Remote Code Execution via Prototype Pollution escalation #16298
OCPBUGS-78673: Namespace is not persisting when switching to developer view from the topology page of admin page #16161
CONSOLE-5011: migrate to yarn berry #16078
OCPBUGS-76578: Bump axios #16032
NO-JIRA: Bump builder image to v29 #15993
OCPBUGS-74447: Bump lodash to latest #15967
OCPBUGS-69678: Disallowed Pipelines-plugin Pipelines navigation section #15857
OCPBUGS-64884: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15707
OCPBUGS-64649: /auth/error?error=missing_state&error_type=auth is showing blank page #15675
Full changelog

console-operator

OCPBUGS-77992: update go mod dependency for konflux #1115
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-85669: CI Build root image tag sync with ART #234
Full changelog

coredns

OCPBUGS-77463: Modify .gitignore to not exclude vendor build folders #168
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-79978: Bump google.golang.org/grpc #389
OCPBUGS-68080: fix CVE-2025-65637 #361
Full changelog

csi-driver-nfs

OCPBUGS-84931: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.67.3-sec.1 to avoid go version bump and fix CVE-2026-33186 #182
Full changelog

csi-node-driver-registrar

OCPBUGS-64632: update log level verbosity to not clutter logs #91
Full changelog

docker-builder

OCPBUGS-65907: BuildConfig inline Dockerfile fails with heredoc syntax #489
Full changelog

gcp-cluster-api-controllers

OCPBUGS-78280: [release-4.16] update go mod dependency for konflux #267
Full changelog

gcp-machine-controllers

OCPBUGS-79970: Bump google.golang.org/grpc to v1.79.3 #167
OCPBUGS-79970: [release-4.16] Fix setup-envtest GCS 401 by downloading binaries directly #176
Full changelog

gcp-pd-csi-driver

OCPBUGS-68087: Update logrus to 1.9.3 #92
Full changelog

haproxy-router

OCPBUGS-79960: Bump google.golang.org/grpc to v1.79.3 #769
Full changelog

hyperkube, pod

OCPBUGS-68041, OCPBUGS-68091: CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.16] #2582
OCPBUGS-74299: Skip E2e: attach on previously attached volumes should work #2568
OCPBUGS-65694: Fix Concurrentmap Iteration #2519
CNTRLPLANE-1612: Backport StreamingCollectionEncoding for JSON and protobuf #2485
Full changelog

hypershift

OCPBUGS-84182: fix(cno): use brackets only for IPv6 in server URL #8348
OCPBUGS-76534: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7704
OCPBUGS-74375, OCPBUGS-74376: Support proxy authentication when user/pass is included in URL #7578
OCPBUGS-73118: Fix Konflux EC voilation, update deprecated base … #7459
OCPBUGS-63640: [release-4.16] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7113
OCPBUGS-64680: Update DNS names for ovn-kubernetes cp metrics #7158
CNTRLPLANE-1904: Migrate 4.16 pipelines to common pipeline template #7212
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-79964: Bump google.golang.org/grpc to v1.79.3 #145
OCPBUGS-77210: [release-4.16] standardize build paths #124
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67288: [release-4.16] Fix incomplete vendor/ #138
Full changelog

insights-operator

OCPBUGS-68370: Add filtering to add other possible pod status to QEMU gatherer #1200
OCPBUGS-67009: QEMU logs are not gathered if there are pending status virt-launcher pods #1197
Full changelog

ironic

OCPBUGS-76457: Bump pyasn1 to 0.5.1-4 #828
OCPBUGS-69789: Bump eventlet version to 0.33.1-7 #763
Full changelog

ironic-agent

OCPBUGS-95070: Replace individual package removal with a single rpm -e loop #288
OCPBUGS-95070: Replace dnf remove with rpm -e to prevent dependency removal #276
OCPBUGS-61165: netutils: Use ethtool ioctl to get permanent mac address #215
OCPBUGS-69781: Bump eventlet version to 0.33.1-7 #232
Full changelog

kube-metrics-server

OCPBUGS-79929: Bump google.golang.org/grpc to v1.79.3 #66
Full changelog

kube-state-metrics

OCPBUGS-74875: Deduplicate CRS stores #133
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-95082: OWNERS: Update component to Cloud Compute / KubeVirt Provider #82
Full changelog

libvirt-machine-controllers

OCPBUGS-77196: Fix incomplete vendor/ #302
Full changelog

machine-api-operator

OCPBUGS-76849: bumped logrus to v1.9.3 #1463
Full changelog

machine-config-operator

OCPBUGS-62171: Fix - NetworkManager restart or crash renders br-ex unusable #5354
OCPBUGS-60113: Enable debug logging for nodeip-configuration #5218
OCPBUGS-77253: Machine-config controller should not log about non-existent pull-secret changes #5694
OCPBUGS-77184: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5685
OCPBUGS-63155: [release-4.16] Networking: reset ovn-remote config and allow ovnkube controller to set it #5359
OCPBUGS-60773: scope MCD node listers to current node #5260
OCPBUGS-63553: Add control-plane label for master nodes on legacy clusters #5376
OCPBUGS-57423: pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition #5119
Full changelog

machine-image-customization-controller

OCPBUGS-68093: [4.16] uplift logrus #153
Full changelog

machine-os-images

OCPBUGS-87878: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #102
Full changelog

monitoring-plugin

Fix for OCPBUGS-90069 OCPBUGS-90073: CVE-2026-12151 CVE-2026-9697 #1007
OCPBUGS-79441: immutable bump #898
OU-1260: [release-4.16] feat: use npm instead of yarn #813
OCPBUGS-76807: fix for CVE-2025-69873 #849
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-85251: Fix server url in kubeconfig #300
NO-ISSUE: [release-4.16] Bump Go to 1.21 and fix CI build root image #292
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-70215: Prevent accidental IP deallocation in statefulsets #396
Full changelog

must-gather

OCPBUGS-86218: Collect object size with the object count #550
OCPBUGS-66106: Separate resources with comma to fix malformed inspect #515
Full changelog

oauth-apiserver

OCPBUGS-74112: UPSTREAM: <carry>: bump kubernetes-apiserver to pick up loopback cert expiration update #166
NO-JIRA: (chore): update OWNERS file #172
Full changelog

openshift-apiserver

OCPBUGS-82682: Address CVE-2026-35469 #649
OCPBUGS-68104: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.16] #610
OCPBUGS-74113: UPSTREAM: <carry>: bump kubernetes-apiserver to pick up loopback cert expiration update #595
OCPBUGS-63394: Wire dry run option to Image API server operations #566
Full changelog

openstack-machine-api-provider

OCPBUGS-78170: hermetic 4.16 #163
OCPBUGS-76794: Fix make test #155
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-79980, OCPBUGS-79981, OCPBUGS-87898: Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.67.3-sec.1 [release-4.16] #1318
OCPBUGS-82057: Drop github.com/distribution/distribution dep #1302
OCPBUGS-77959: Remove the collect-profiles info from the microshift kustomization file #1251
OCPBUGS-77169: Remove the collect-profiles job #1235
Full changelog

operator-marketplace

OCPBUGS-68108, OCPBUGS-68109: CVE-2025-65637 fixed in logrus v1.9.3+ #722
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-83497: External gateway: Remove routes for external gateway pods in terminating or not ready state #3140
OCPBUGS-78033: Add pperiyasamy to OWNERS for release-4.16 #3047
OCPBUGS-77685: Clear stale conntrack UDP entries for nodePorts #3038
OCPBUGS-77187: Fix conntrack reconciliation to use service port instead of endpoint port #2998
CORENET-6055, OCPBUGS-76277: [release-4.16] Dockerfile: Unpin OVN and consume the latest from FDP #2972
OCPBUGS-71219: [release-4.16] CVE-2025-65637 Bump github.com/sirupsen/logrus to v1.9.1 through indirect dependency conversion (go-controller module) #2906
OCPBUGS-72541: NetPol & MultiNetPol: Process update only when spec fields and/or related annotation are updated #2933
OCPBUGS-68349: Add ricky-rav to OWNERS for release-4.16 #2899
OCPBUGS-66155: Skip Pending pods in EgressIP status updates #2880
OCPBUGS-64944: [release-4.16]: Configure sec nic EIPv6 address with NODAD and maximum lifetime #2853
OCPBUGS-64858: Fix stale EIP assignments during failover and controller restart #2851
OCPBUGS-63155: Fix EgressIP stale GARP post reboot + pod restart #2809
OCPBUGS-63230: Fix dnsnameresolver address set #2812
Full changelog

prometheus

OCPBUGS-79985: Bump google.golang.org/grpc #321
Full changelog

prometheus-alertmanager

OCPBUGS-76536: Include go-verify-deps expected files in gitignore #116
Full changelog

route-controller-manager

OCPBUGS-79934: Bump google.golang.org/grpc to v1.79.3 #87
Full changelog

tests

OCPBUGS-74299: Update to latest openshift/kubernetes #30825
OCPBUGS-63395: Backport pr 29834 to release-4.18 #30409
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-78028: hermetic migration 4.16 #107
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-78020: hermetic migration 4.16 #86
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-86874: Bump google.golang.org/grpc #182
OCPBUGS-68119: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 #158
Full changelog

vsphere-problem-detector

OCPBUGS-86445: fix concurrent map writes #219
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github