4.17.58

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.17.58-x86_64

Qualifiers (status api): None

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.17-e2e-aws-ovn-serial
- aws-ovn-upgrade-4.17-micro Pending (1 retry) periodic-ci-openshift-release-main-ci-4.17-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Pending
- aws-ovn-upgrade-micro Pending (1 retry) periodic-ci-openshift-release-main-ci-4.17-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Pending
- azure-ovn-upgrade-4.17-micro Succeeded periodic-ci-openshift-release-main-ci-4.17-e2e-azure-ovn-upgrade
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.17-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.17-fips-payload-scan
- gcp-ovn-rt-upgrade-4.17-minor Succeeded periodic-ci-openshift-release-main-ci-4.17-upgrade-from-stable-4.16-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.17 Succeeded periodic-ci-openshift-hypershift-release-4.17-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-4.17-e2e-metal-ipi-ovn-ipv4
- metal-ipi-ovn-ipv6 Failed (1 retry) periodic-ci-openshift-release-main-nightly-4.17-e2e-metal-ipi-ovn-ipv6
  - Attempt 1 Failed
  - Attempt 2 Failed

Upgrades from:

Untested upgrades: 4.16.11, 4.16.12, 4.16.13, 4.16.14, 4.16.15, 4.16.16, 4.16.17, 4.16.18, 4.16.19, 4.16.20, 4.16.21, 4.16.22, 4.16.23, 4.16.24, 4.16.25, 4.16.26, 4.16.27, 4.16.28, 4.16.29, 4.16.30, 4.16.31, 4.16.32, 4.16.33, 4.16.34, 4.16.37, 4.16.38, 4.16.39, 4.16.40, 4.16.41, 4.16.42, 4.16.43, 4.16.44, 4.16.45, 4.16.46, 4.16.47, 4.16.48, 4.16.49, 4.16.50, 4.16.51, 4.16.52, 4.16.53, 4.16.54, 4.16.55, 4.16.56, 4.16.57, 4.16.58, 4.16.59, 4.16.60, 4.16.61, 4.16.63, 4.16.64, 4.16.65, 4.16.66, 4.16.67, 4.16.68, 4.17.10, 4.17.11, 4.17.12, 4.17.13, 4.17.14, 4.17.15, 4.17.16, 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.3, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.17.34, 4.17.35, 4.17.36, 4.17.37, 4.17.39, 4.17.4, 4.17.40, 4.17.41, 4.17.42, 4.17.43, 4.17.44, 4.17.45, 4.17.46, 4.17.47, 4.17.48, 4.17.49, 4.17.5, 4.17.50, 4.17.52, 4.17.53, 4.17.54, 4.17.7, 4.17.8, 4.17.9

4.17.57 (changes) - F F P P S S S
4.17.56 (changes) - Failed
4.17.55 (changes) - Failed
4.17.51 (changes) - Success
4.17.38 - Failed
4.17.6 (changes) - Failed
4.17.2 (changes) - Success
4.17.1 (changes) - Success
4.17.0 (changes) - Failed
4.16.71 (changes) - Success Success
4.16.70 (changes) - Failed
4.16.69 (changes) - Success
4.16.62 (changes) - Success
4.16.36 (changes) - Failed
4.16.35 (changes) - Failed
4.16.10 (changes) - Success
4.16.9 (changes) - Failed
4.16.8 (changes) - Success
4.16.0-0.nightly-2026-09-23-035525 (changes) - Success

Upgrades to:

4.18.56 (changes) - Failed

Loading changelog, this may take a while ...

Changes from 4.17.38

Created: 2026-09-24 12:33:40 +0000 UTC

Image Digest: sha256:027c19a0057cf115fdf33dd8a018a9f5195842afcd3a540e8dcd68ec398cbbce

Components

Kubectl 1.30.5
Kubernetes 1.30.14
Kubernetes Tests 1.30.14
Red Hat Enterprise Linux CoreOS upgraded from 417.94.202508141510-0 to 417.94.202609191027-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
StreamingCollectionEncodingToJSON (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Removed images

ovirt-csi-driver
ovirt-csi-driver-operator

Rebuilt images without code change

agent-installer-node-agent git df4660b4 sha256:1714b345a7c41bc4029768dbd065c5aa408d8f61a8c8fa26f67502c4cae94b01
apiserver-network-proxy git ea660559 sha256:112632a3f034e11ed77d22b6098e9c5865fabdaf5337afa0e89b00abe1d3b7e1
aws-pod-identity-webhook git 80efc4ea sha256:1a2494ef9f409d8e0033f77ef384839039163d4511edcf7155730cb42f0e17b1
azure-workload-identity-webhook git 6707f899 sha256:b320a4f564ba251e5d37551940dfa4da92ce4f6c0da6c44100fd77cea5cdbd45
baremetal-cluster-api-controllers git 41b34248 sha256:413b8cc7afda031e9bd315e594271d94a1da1da7866a0c2714a8c1af3ed10ec5
cluster-bootstrap git 95dd9129 sha256:2ec988521b6550e9609590ae63f7c30bd62e386c2f9b2af6a6853e987ebae23b
cluster-control-plane-machine-set-operator git f7e01c2f sha256:ae4f6e102c50e41783c0853117cced11e22b45fdc571f116f0cbd4c2f1091e15
cluster-csi-snapshot-controller-operator git ffba005b sha256:4993360373591870d18d3d43fccd6169d98afe681ffccf7a26db5c47371147d6
cluster-dns-operator git 81507f04 sha256:75fdf7e211b1ef4dfd7b4ea1b21fc025297be1ea5ab483b52e612bd641524a41
cluster-machine-approver git acc2380e sha256:a1c358673f0b39a5fd0bbcac48ed8a741ba736ce101f60af5a90379cd622a73a
cluster-openshift-controller-manager-operator git b05a249d sha256:9633091b93b9f995e53160f7a25b48175942c511218a349852378aede3f16c56
cluster-policy-controller git 7209e90d sha256:0630c0319fbd0721a667824982a54cbef895b66237cbd9165c65dbdddcccb9dd
cluster-update-keys git 63022033 sha256:d810d8efd7420335cbd67101197b31f308e153e28907c551384d5b9d0cbbc245
configmap-reloader git 62d56d6a sha256:01b781d7a5d81138552ab43a2fcee9e5a4e6f6cbfa1931ed1ba705c1150c27f0
csi-driver-manila-operator git efc99a2a sha256:bf3075cbf80c1b7c967e1f64344122419535f4737cf60c099359bf0b6ef1bd54
csi-driver-shared-resource git 66aee5b0 sha256:4a653a995d39eb05bcf65b6450382c8152cb1dd683b4f06ead1fd171b619db8d
csi-driver-shared-resource-webhook git 66aee5b0 sha256:7ca533426db18b9b8930143eeae6f5005db23a323258182c0af773c868b24faa
csi-livenessprobe git e7d841dc sha256:9cbad6a40f44981e216da003e25d2a4728b15506c45c19f961b0e09afbd70fe1
driver-toolkit git 859518f6 sha256:ea4681ffb09993a07b0655782c2a6ecbc545788daa2761581bb12a6329bdcbcb
egress-router-cni git 3193a756 sha256:01617e470cc4602a0f988399ca53cfdae2be166a77e027762611fa966070c666
etcd git 0d9e0a90 sha256:ea084d3334cdd0fb9640c8116a61403e50db367122a7937634fc3b2c084e740c
gcp-cloud-controller-manager git 8ce997d7 sha256:914477baf8681bd471e78c783fed2207f393cefc097166b3a628a1ae3f988cab
gcp-workload-identity-federation-webhook git 08579e9f sha256:ed75b820527a3f45a9ff5c0b7071ba768dc691cbc0951e3c105ca5de43bddbd1
ibm-cloud-controller-manager git ad8f7eb0 sha256:6f3b1367866519abff38ffc84728c51eac174885d3f5c49489ec4b0332bbe85a
ibm-vpc-block-csi-driver-operator git ee301303 sha256:022b432b9640106e7802b59dae06675f40283fa91efabd2fb44881bed1093784
ironic-machine-os-downloader git 9e6596c3 sha256:af77ab4e95a31457d67cab379f7efead603fc0628a2b179e19102312dd81891d
ironic-static-ip-manager git bc5b8a2c sha256:8a5f544098953ec25f477f2f6caf9d1d72014aed4da22221369506ce2944e5dd
keepalived-ipfailover git e3879e9e sha256:0c64c2337cdfe6bd0592d562c57af97bfba84d4d95697a01119784376b309809
kube-rbac-proxy git f708b5ec sha256:a60f9f1bfd06c27ed1f1a6495517671adfe20ff9c085a7d31f1275f7d2409a4d
kube-storage-version-migrator git 69b07ae0 sha256:aad08f80dc8f86f08b14b47094b6a9f7986a241bb2f65dedfc76622572c56a2a
multus-admission-controller git 041b743a sha256:e2e11b231011fadec8948cb683d56b076705831676aa17a9241b633d2e0cd21d
multus-networkpolicy git 4d0b1703 sha256:2a2bb313354c77af113366c9d508fec82abe77c1980d6a4c59df7a7134634857
multus-route-override-cni git 391c1b03 sha256:d4d20eae3ebd068f97cc3cff40fc5c76164b366b4b6f5045eb4dbf8201c7c061
network-metrics-daemon git f56bbf7a sha256:f90f92d88c10b6e38c38a64451df835d5eb5b374f3df5ebffb8abc1b42bedc1d
network-tools git e59e7b25 sha256:9d4fbeb207e7c147ba84968a4defad815250a71645ae5d02b8a8b64ca51e81b1
nutanix-cloud-controller-manager git c9f6cd1f sha256:7ca3eaae410e4674351926b7a1519ce83f60c23f778386812dc687777cea8445
nutanix-machine-controllers git a4fadcbc sha256:d4ef18ec13beaa5cd4de49d6962a55417340281aee330f9e8b8b1056057c9cc3
olm-catalogd git c740e056 sha256:895a1d9a6c955e45362fa06dbc0396afee80da62de4d654fb10ce8d9f4541989
openshift-state-metrics git adf64920 sha256:3943be4fe5646ed778046f29b855dd06db3c9280d6f839428c564aeb6ae4d166
openstack-cluster-api-controllers git 5593c5f7 sha256:2b00dca400d132235a7bc49010c48e869bcef083afcaeda997e6e86229301f7a
prom-label-proxy git c84c4898 sha256:3eb770814f37840138902078776e756d057f875b159a577dcfd2f3c323e026dd
prometheus-node-exporter git 8f095361 sha256:7235ed1e15a599e85f899d330e11a849a5b6fd337345323b0c4dc79cf5c2d728
rhel-coreos sha256:490004790ca6d28beca181605cadcc7081f871b39fd699fc0be7686d99a877f3
rhel-coreos-extensions sha256:d7be4f8a623ff4b60cd4e3e8a7b68f5d241e8ff5f77540ef8679459b253fd41d
vsphere-csi-driver-operator git e1de36a2 sha256:a148efa87dd6075ed73c598cfd1e762f8259fda44893c2a653324af8907a000c

agent-installer-api-server

MGMT-23439: Pin gotestsum to v1.12.2 for Go 1.20 compatibility #10016
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-103137: Bump x/net to v0.35.0-sec.4 #2296
Full changelog

agent-installer-utils

OCPBUGS-68141: bump github.com/sirupsen/logrus to v1.9.3 #238
Full changelog

aws-cloud-controller-manager

OCPBUGS-88219: replace golang.org/x/net with sustaining fork v0.35.0-sec.4 #181
Full changelog

aws-cluster-api-controllers

🌱 OCPBUGS-123711: UPSTREAM: <carry>: Remove upstream .github files unused in OpenShift CI #644
OCPBUGS-78175: [release-4.17] update go mod dependency for konflux #590
OCPBUGS-61940: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #571
Full changelog

aws-ebs-csi-driver

OCPBUGS-82699: Address CVE-2026-35469 #328
OCPBUGS-86234: UPSTREAM: 2367: cleanup: make verify should ignore copyright year #323
OCPBUGS-80031: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 #314
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-103147, OCPBUGS-103155: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #609
OCPBUGS-80133: Bump google.golang.org/grpc #543
OCPBUGS-64704: Use 127.0.0.1 for healtz http-endpoints #462
OCPBUGS-63557: Add RBAC ClusterRole and Binding for driver node #453
OCPBUGS-62974: Add withCABundleDaemonSetHook() to AWS EFS operator #449
OCPBUGS-60597: Bump library-go to fix assignment to nil map issue #422
Full changelog

aws-kms-encryption-provider

OCPBUGS-80009: Bump google.golang.org/grpc to v1.79.3 #44
Full changelog

aws-machine-controllers

OCPBUGS-73822: Fix reconciler consistency checks in Update and Exists #167
OCPBUGS-63139: client: re-use a single file for building the session instead of randomly named files #145
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-80035, OCPBUGS-80036, OCPBUGS-80174: Bump google.golang.org/grpc to v1.79.3 #181
Full changelog

azure-cluster-api-controllers

OCPBUGS-80037: Bump google.golang.org/grpc to v1.79.3 #386
OCPBUGS-77983: [release-4.17] update go mod dependency for konflux #363
Full changelog

azure-disk-csi-driver

OCPBUGS-80038: Address CVE-2026-33186 #143
Full changelog

azure-file-csi-driver

OCPBUGS-103162: Bump golang.org/x/net to v0.35.0-sec.4 #159
OCPBUGS-92849: Bump golang.org/x/crypto to v0.33.0-sec.3 #149
OCPBUGS-80041: Bump google.golang.org/grpc to v1.79.3 #130
Full changelog

azure-kms-encryption-provider

OCPBUGS-80010: Bump google.golang.org/grpc to 1.64.1-sec.1 patch #47
Full changelog

azure-machine-controllers

OCPBUGS-65954: Set updateDomainCount to one when faultDomainCount is one #176
OCPBUGS-63700: Support datadisks on Stack Hub #168
OCPBUGS-56168: [release-4.17] Update virtualmachines service to armcompute/v5 SDK #146
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-77898: Update RHCOS-release-4.17 bootimage metadata to 417.94.202607240132-0 #10796
OCPBUGS-67204: Update the RHCOS 4.17 bootimage metadata #10285
OCPBUGS-77791: [Release 4.17] pkg/asset/manifests/azure: save cidr blocks #10218
OCPBUGS-74677: [release-4.17] GCP: skip AI zones #10276
OCPBUGS-74555: Azure UPI ARM template: use storageAccountId #10264
OCPBUGS-68142: [4.17] uplift logrus #10167
OCPBUGS-53236: Validation for API and Ingress VIPs when using user-managed load balancer #10047
OCPBUGS-62951: Update the RHCOS 4.17 bootimage metadata #10021
OCPBUGS-62054: Make swift containers removal not fatal for UPI. #9952
Full changelog

baremetal-machine-controllers

OCPBUGS-68143: [4.17] uplift logrus #239
Full changelog

baremetal-operator

OCPBUGS-77185: Unblock BMH direct deletion when detached annotation is present #462
Full changelog

baremetal-runtimecfg

OCPBUGS-71209: Bump logrus version #377
OCPBUGS-60112: Re-add ENABLE_NODEIP_DEBUG env var #363
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-91064, OCPBUGS-94526: Bump golang.org/x/net to openshift-sustaining/net v0.35.0-sec.2 #2345
OCPBUGS-111835: Fix pre-existing unit test failures #2373
OCPBUGS-64615: Help with must-gather scheduling through suggesting preferance of nodes #2150
Full changelog

cloud-credential-operator

OCPBUGS-81861: Bump go-jose/go-jose/v4@v4.1.4 #1039
OCPBUGS-80044: Bump google.golang.org/grpc to v1.79.3 #1025
OCPBUGS-65801: ccoctl azure: retry custom role creation on consistency errors #951
OCPBUGS-65480: ccoctl: use pagination when listing resources in aws #945
OCPBUGS-63549: ccoctl: add public-key-file flag to create-all #939
OCPBUGS-55128: snyk to ignore SNYK-GOLANG-GOLANGORGXNETHTML-9572088 #917
OCPBUGS-60972: ccoctl: aws to use proper issuer url on subsequent runs #908
Full changelog

cloud-network-config-controller

OCPBUGS-66132: [release-4.17] Fix capacity calculation #194
OCPBUGS-65520: Change the capacity struct from int to ptrOfInt #191
Full changelog

cluster-authentication-operator

OCPBUGS-68150: Update library-go to fix CVE-2025-65637 #840
Full changelog

cluster-autoscaler

OCPBUGS-78700: allow clusterapi provider to skip paused resources #414
OCPBUGS-68151: update logrus to version 1.9.3 #398
OCPBUGS-60913: revert openshift replica fix #376
OCPBUGS-60608: fix checkpoint gc of unknown recommenders #371
Full changelog

cluster-autoscaler-operator

OCPBUGS-103166: Bump x/net package in release-4.17 #389
Full changelog

cluster-baremetal-operator

OCPBUGS-77446: Bump github.com/go-errors/errors to v1.5.1 #561
OCPBUGS-63715: Always have a service for ironic-api port #519
OCPBUGS-63666: Allow provisioningIP when network disabled #518
OCPBUGS-61097: Remove webhookport (9447) as HostPort #505
Full changelog

cluster-capi-controllers

OCPBUGS-80045: Bump google.golang.org/grpc to v1.79.3 #291
Full changelog

cluster-capi-operator

OCPBUGS-80049: Bump google.golang.org/grpc to v1.79.3 #570
NO-JIRA: Allow sustaining engineering to self serve dependency updates #559
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63167: ccm: disable unused secure-serving port and webhook #423
Full changelog

cluster-config-api

CNTRLPLANE-1981: Promote streaming list encoding to Default #2599
OCPBUGS-71184: Add HTTPKeepAliveTimeout to IngressController API #2639
NO-JIRA: Promote streaming list encoding to Default on Hypershift. #2567
CNTRLPLANE-1611: Add feature gates for StreamingCollectionEncoding #2538
Full changelog

cluster-config-operator

OCPBUGS-75998: Update logrus to 1.9.3 to address CVE-2025-65637 #465
Full changelog

cluster-etcd-operator

OCPBUGS-68156: Update logrus to 1.9.3 to address CVE-2025-65637 #1542
OCPBUGS-61337: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1480
Full changelog

cluster-image-registry-operator

OCPBUGS-68157: Bump github.com/sirupsen/logrus to 1.9.3 #1284
Full changelog

cluster-ingress-operator

OCPBUGS-103182: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 #1572
OCPBUGS-86714: Add configuration override for X-SSL strip #1486
OCPBUGS-71184: Implement HTTPKeepAliveTimeout tuning option #1335
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-68162: CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-rhel9-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.17] #2055
OCPBUGS-63614: SCC: add hostmount-anyuid-v2 #1954
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-80056: Bump google.golang.org/grpc to v1.79.3 #78
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-68164: CVE-2025-65637 openshift4/ose-cluster-kube-controller-manager-rhel9-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.17] #908
OCPBUGS-60249: Missing endpoint slices for open ports the operator uses #855
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #623
OCPBUGS-68165: deps: Update library-go and logrus to fix a CVE #613
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-68167: Bump github.com/sirupsen/logrus to 1.9.1 #140
Full changelog

cluster-monitoring-operator

OCPBUGS-103184: [release-4.17] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame- #3075 #3084
OCPBUGS-77275: AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change #2832
OCPBUGS-64580: Fix KSM deny-list typo #2732
OCPBUGS-63489: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.17 #2725
OCPBUGS-63123: test: remove image registry e2e tests #2715
OCPBUGS-61766: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2672
Full changelog

cluster-network-operator

OCPBUGS-85244: whereabouts-token-watcher DaemonSet improvements #3016
OCPBUGS-84181: fix(hypershift): use net.JoinHostPort for URL construction #2983
OCPBUGS-73799: Tweak iptables-alerter to try to avoid crictl bug #2878
: NO-JIRA: Update CNO reviewers/approvers #2767
OCPBUGS-74348: [release-4.17] fix typo in release annotation for whereabouts-token-watcher deamonset #2888
OCPBUGS-45086: Re-disable metrics server #2579
OCPBUGS-63154: Add drop flows for GARPs #2818
[Release 4.17] OCPBUGS-61765: Update CNO reviewers/approvers #2799
OCPBUGS-58066: [release-4.17]: Manual feature backport of cert rotation for whereabouts #2784
Full changelog

cluster-node-tuning-operator

OCPBUGS-82706: Bump github.com/moby/spdystream from v0.2.0 to v0.5.1 #1548
OCPBUGS-78214: PPC: filter out namespaces dir #1481
OCPBUGS-63504: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1418
Full changelog

cluster-olm-operator

OCPBUGS-80063: Bump google.golang.org/grpc to v1.79.3 #201
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-68170: CVE-2025-65637 - Update library-go to bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.17] #653
Full changelog

cluster-samples-operator

OCPBUGS-63515: references to github.com/sclorg/django-ex.git now also refer to the branch #658
Full changelog

cluster-storage-operator

OCPBUGS-87591: remove oVirt code from CSO 4.17 #708
OCPBUGS-41160: Move metrics to vsphere driver #633
Full changelog

cluster-version-operator

OCPBUGS-58451: Failing=Unknown upon long CO updating #1212
Full changelog

console

Fix for OCPBUGS-92069: CVE-2026-44990 #16718
OCPBUGS-78672: Namespace is not persisting when switching to developer view from the topology page of admin page #16160
OCPBUGS-98411: CVE-2026-59869 bump js-yaml #17086
OCPBUGS-100514, OCPBUGS-101790: Fix CVE-2026-69153 and CVE-2026-45623 - Bump postcss #17059
OCPBUGS-100172: Prevent binary secret data corruption when editing #16879
OCPBUGS-105790: Disable shipwright e2e tests to unblock CI #16955
OCPBUGS-87986: [release-4.17] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators #16600
Fix for OCPBUGS-81600: CVE-2026-4800 #16564
OCPBUGS-84283: Bump follow-redirects to 1.16.0 to fix CVE-2026-40895 #16738
OCPBUGS-77124: [release-4.17] CVE-2026-26996 Bump minimatch library #16345
OCPBUGS-79443: Bump immutable #16326
NO-JIRA: enable multi-architecture yarn builds #16419
CONSOLE-5011: migrate to yarn berry #16074
NO-JIRA: Bump builder image to v29 #15994
OCPBUGS-74452: Bump lodash to latest #15966
OCPBUGS-69403: Disallowed Pipelines-plugin Pipelines navigation section #15849
OCPBUGS-65933: Preserve URL in perspective switch + remove dev console folks from reviewers #15762
OCPBUGS-64942: Expose prometheus tenancy label path as a proxy #15710
OCPBUGS-64599: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15665
OCPBUGS-62631: /auth/error?error=missing_state&error_type=auth is showing blank page #15554
OCPBUGS-63212: switch to dev perspective for /dev-monitoring #15614
OCPBUGS-63397: fix bug where Roles list was displaying invalid data f… #15627
OCPBUGS-62282: Fix desync of console and variable namespace #15545
OCPBUGS-44154: bump dompurify to latest #15590
OCPBUGS-61737: Remove ancient X-XSS-Protection header #15494
OCPBUGS-54241: VolumeSnapshots are not displayed in OpenShift Web Console #15465
OCPBUGS-59747: OpenShift console PVC clone cannot use B as the unit #15324
NO-JIRA: Increase the timeout on the cypress test #15420
OCPBUGS-58365: change ‘/metrics/usage’ endpoint to ‘/api/metrics/usage’ #15271
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-77862: update go mod dependency for konflux #1114
OCPBUGS-60298: Update downloads deployment configuration to use master node selector #1033
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-85671: CI Build root image tag sync with ART #235
OCPBUGS-68135: Bump logrus to v1.9.1 #224
Full changelog

coredns

OCPBUGS-62825: UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy #155
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-80134: Bump google.golang.org/grpc #388
OCPBUGS-68209: fix CVE-2025-65637 #357
Full changelog

csi-driver-nfs

OCPBUGS-82708: Bump github.com/moby/spdystream@v0.5.1 #195
OCPBUGS-80077: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 to avoid go version bump and fix CVE-2026-33186 #181
Full changelog

csi-driver-shared-resource-operator

OCPBUGS-103198: Bump golang.org/x/net to v0.35.0-sec.3 #127
OCPBUGS-80080: Bump google.golang.org/grpc to v1.79.3 #125
Full changelog

csi-external-attacher

OCPBUGS-80082: Bump google.golang.org/grpc to v1.79.3 #106
Full changelog

csi-external-provisioner

OCPBUGS-82709: Address CVE-2026-35469 #142
OCPBUGS-80083: Bump google.golang.org/grpc #131
Full changelog

csi-external-resizer

OCPBUGS-103208: Bump golang.org/x/net to v0.35.0-sec.4 #214
OCPBUGS-62466: Requeue PVC over PV creation #175
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-80085, OCPBUGS-80088, OCPBUGS-80089: Bump google.golang.org/grpc to v1.79.3 #214
Full changelog

csi-node-driver-registrar

OCPBUGS-63682: update log level verbosity to not clutter logs #90
Full changelog

docker-builder

OCPBUGS-66988: bump buildah to 1.37.7 to fix CVE-2025-52881 #499
OCPBUGS-65816: BuildConfig inline Dockerfile fails with heredoc syntax #488
Full changelog

docker-registry

OCPBUGS-68182: update logrus to v1.9.1 #465
Full changelog

gcp-cluster-api-controllers

OCPBUGS-80095: Bump google.golang.org/grpc to v1.79.3 #291
OCPBUGS-78279: [release-4.17] update go mod dependency for konflux #266
Full changelog

gcp-machine-controllers

OCPBUGS-103253: Bump golang.org/x/net to v0.35.0-sec.3 #190
OCPBUGS-80118: Bump google.golang.org/grpc to v1.79.3 #166
Full changelog

gcp-pd-csi-driver

OCPBUGS-80099: Replace google.golang.org/grpc with openshift-sustaining fork v1.71.3-sec.1 #113
OCPBUGS-68186: Update logrus to 1.9.3 #90
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-80098: Replace google.golang.org/grpc with fork #188
Full changelog

haproxy-router

OCPBUGS-86725: Prevent SSRF via FQDN-typed EndpointSlices #835
OCPBUGS-86714: Strip X-SSL-* headers for plain HTTP #804
OCPBUGS-80100: Address CVE-2026-33186 #779
Full changelog

hyperkube, pod

OCPBUGS-68132, OCPBUGS-68190: CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 #2573
OCPBUGS-72531: Skip E2e: attach on previously attached volumes should work #2566
OCPBUGS-65695: Fix Concurrentmap Iteration #2520
OCPBUGS-63460: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2456 #2496
CNTRLPLANE-1611: Backport StreamingCollectionEncoding for JSON and protobuf #2486
OCPBUGS-61584: UPSTREAM: <carry>: Don’t retry storage calls with side effects. #2458
OCPBUGS-60552: [4.17] podresources: list: use active pods #2426
4.17: OCPBUGS-60998: scheduler: Improve CSILimits plugin accuracy by using VolumeAttachments #2434
Full changelog

hypershift

OCPBUGS-76289: CVE-2025-52881 openshift/hypershift multicluster-engine/hypershift-rhel9-operator: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [mce-2.7] #8292
OCPBUGS-99079: fix(backport): konnectivity agent auth #9104
OCPBUGS-89357: build(operator): drop hypershift-no-cgo from operator container images #8761
OCPBUGS-80103: fix https://github.com/advisories/GHSA-p77j-4mvh-x3m3 by replacing grpc-go #8516
OCPBUGS-84181: fix(cno): use brackets only for IPv6 in server URL #8347
OCPBUGS-76533: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7703
OCPBUGS-74230, OCPBUGS-74294: [release-4.17] Support proxy authentication when user/pass is included in URL #7568
fix: OCPBUGS-72956: Fix Konflux EC voilation, update deprecated base … #7457
OCPBUGS-69865: test: remove unit tests that depend on network communication [release-4.17] #7411
OCPBUGS-57123: Add support for registry root entry only in the IDMS/ICSP #6230
CNTRLPLANE-1903: Migrate 4.17 pipelines to use common pipeline #7215
OCPBUGS-63639: [release-4.17] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7112
OCPBUGS-64604: Update DNS names for ovn-kubernetes cp metrics #7150
OCPBUGS-63370: fix: Make the hypershift CLI binary FIPS-compliant #7094
CNTRLPLANE-1425: feat(konflux): tag MCE HO images with latest #6838
OCPBUGS-57143: [release-4.17] HCP payload doesn’t respect multiple mirrors #6771
OCPBUGS-61290: Update KCM node monitor grace period #6760
OCPBUGS-61208: use common MCE konflux pipeline #6749
OCPBUGS-60149: [release-4.17] Always compress and encode payload in token secret for inplace upgrades #6740
OCPBUGS-61101: Use system trust bundle in CPO IDP https client #6735
OCPBUGS-60921: konflux for hcp-cli #6699
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-80105: Bump google.golang.org/grpc to v1.79.3 #144
OCPBUGS-77209: [release-4.17] standardize build paths #123
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-86974: Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.17 #155
OCPBUGS-103234: Replace golang.org/x/net with openshift-sustaining/net #171
OCPBUGS-115543: Fetch envtest assets from the controller-tools releases #182
OCPBUGS-67287: [release-4.17] Fix incomplete vendor/ #139
Full changelog

ibmcloud-machine-controllers

OCPBUGS-103227: replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 #105
NO-JIRA: vendor golint instead of relying on the CI build root #114
OCPBUGS-81667: bump vpc go sdk #92
NO-JIRA: Modernize test infrastructure to align with other MAPI providers #88
Full changelog

insights-operator

OCPBUGS-80108: Bump google.golang.org/grpc to v1.79.3 #1284
OCPBUGS-68193: OCPBUGS-68194: [vuln] Update logrus library to 1.9.3 #1227
OCPBUGS-67008: Add filtering to add other possible pod status to QEMU gatherer #1196
OCPBUGS-66395: QEMU logs are not gathered if there are pending status virt-launcher pods #1194
OCPBUGS-66394: [bugfix] The archive’s records may include files whose names are out of bounds #1193
OCPBUGS-64629: add permissions to gather clusterrole #1170
OCPBUGS-63500: add missing permissions for replicasets and events #1165
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

ironic

OCPBUGS-88474: Update the commit hash for openstack-ironic that addresses CVE-2026-43003 #905
OCPBUGS-100163: Update openstack-ironic commit hash for CVE-2026-44918 #902
OCPBUGS-76458: Bump pyasn1 to 0.5.1-4 #827
OCPBUGS-74114: Bump keystonemiddleware version to 10.7.1-0.20260216144200.4c001ba for CVE-2026-22797 fix #796
OCPBUGS-69792: Bump eventlet version to 0.33.1-7 #761
Full changelog

ironic-agent

OCPBUGS-88474: Update commit hash for openstack-ironic-python-agent that addresses CVE-2026-43003 #315
OCPBUGS-99886: Bump ironic-python-agent pinned commit for CVE-2026-66138 #309
OCPBUGS-95067: Replace individual package removal with a single rpm -e loop #287
OCPBUGS-95067: Replace dnf remove with rpm -e to prevent dependency removal #275
OCPBUGS-69775: Bump eventlet version to 0.33.1-7 #231
OCPBUGS-62490: netutils: Use ethtool ioctl to get permanent mac address #214
Full changelog

kube-metrics-server

OCPBUGS-80013: Bump google.golang.org/grpc to v1.79.3 #65
Full changelog

kube-proxy

OCPBUGS-68165: deps: Update library-go to fix a CVE #661
Full changelog

kube-state-metrics

OCPBUGS-74874: Deduplicate CRS stores #132
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-95083: OWNERS: Update component to Cloud Compute / KubeVirt Provider #79
OCPBUGS-34447: Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART for 4.17 #44
Full changelog

kubevirt-csi-driver

OCPBUGS-80014: Bump google.golang.org/grpc to v1.79.3 #102
Full changelog

libvirt-machine-controllers

OCPBUGS-77195: Fix incomplete vendor/ #301
Full changelog

machine-api-operator

OCPBUGS-79373: [release-4.17] Use resource group when generating default Azure image #1481
Full changelog

machine-config-operator

OCPBUGS-98583: Remove sensitive ControllerConfig logging #6300
OCPBUGS-97845: Bootstrap MCS logging entire ignition #6274
OCPBUGS-74149: enable nodeip-configuration for platform external #5577
OCPBUGS-77979: hermetic 4.17 #5733
OCPBUGS-77889: reduce MCO image size #5746
OCPBUGS-77812: mcd_config_drift not working properly #5741
OCPBUGS-77422: Remove MCD liveness probe #5709
OCPBUGS-77242: After OCL is enabled few phases in MCN are not updating as expected #5575
OCPBUGS-77186: Machine-config controller should not log about non-existent pull-secret changes #5679
OCPBUGS-77090: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5678
OCPBUGS-61190: MCO report “failed to list *v1alpha1.MachineOSConfig” when enable TechPreview after upgrading from 4.16 to 4.17 with one mcp paused #5584
OCPBUGS-60112: Enable debug logging for nodeip-configuration #5219
OCPBUGS-62170: Fix - NetworkManager restart or crash renders br-ex unusable #5355
OCPBUGS-66037: Remove –mount directives #5443
OCPBUGS-63154: [release-4.17] Networking: reset ovn-remote config and allow ovnkube controller to set it #5358
OCPBUGS-63540: Add control-plane label for master nodes on legacy clusters #5375
OCPBUGS-63364: Invalid architecture value found in annotation during 4.19 update #5368
OCPBUGS-63055: Recheck generatedByControllerVersion annotation prior to deleting a degraded MC #5346
OCPBUGS-62741: Add /etc/docker/certs.d to template #5335
OCPBUGS-62683: Add mcd_local_unsupported_packages recording rule #5327
OCPBUGS-60890: Race in configure-ovs.sh affects bonding interface configuration. #5267
OCPBUGS-61859: Override NMState service definition #5289
OCPBUGS-59930, OPNET-681: Support migration to NMState #5206
OCPBUGS-56752: Support NODEIP_HINT in IPI deployments too #5080
OCPBUGS-60704: operator: switch out VAP v1beta1 to v1 #5256
OCPBUGS-57084: scope MCD node listers to current node #5107
Full changelog

machine-image-customization-controller

OCPBUGS-68192: [4.17] Uplift logrus #152
Full changelog

machine-os-images

OCPBUGS-87877: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #101
Full changelog

metallb-frr

OCPBUGS-76548: Dockerfile: unpin FRR rpm #124
Full changelog

monitoring-plugin

Fix for OCPBUGS-98163: CVE-2026-13676 #1050
Fix for OCPBUGS-90525 OCPBUGS-90526: CVE-2026-12151 CVE-2026-9697 #1008
OCPBUGS-79444: immutable bump #897
OU-1260: [release-4.17] feat: use npm instead of yarn #812
OCPBUGS-76809: fix for CVE-2025-69873 #848
OCPBUGS-70290: Manual cherry pick qs vulnerability 4 17 #747
OCPBUGS-64942: Use tenancy access to metric lables #639
OU-1058: Don’t show TP button in non-administrator #637
OCPBUGS-62282: align dev and admin persective tab names #602
OCPBUGS-62282: add missing translation string #587
OCPBUGS-61891: feat: add alerting rules tab to dev console #538
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-85250: Fix server url in kubeconfig #299
NO-ISSUE: [release-4.17] Bump Go to 1.22 and fix CI build root image #290
OCPBUGS-77854: hermetic 4.17 #277
OCPBUGS-43391: Update net-attach-def client library to 1.7.5 for cri-o functionality [backport 4.17] #257
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-73728: Update tag on ci-operator.yaml file #395
OCPBUGS-70256: Prevent accidental IP deallocation in statefulsets #393
Full changelog

must-gather

OCPBUGS-86069: Collect object size with the object count #548
OCPBUGS-60607: Separate resources with comma to fix malformed inspect #504
Full changelog

network-interface-bond-cni

OCPBUGS-77350: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.17 #110
OCPBUGS-59620: Bump github.com/containernetworking/plugins from to 1.7.1 #83
Full changelog

networking-console-plugin

OCPBUGS-98764: Updating linkify-it to 5.0.2 to fix CVE-2026-48801 #459
OCPBUGS-100158: Updating networking-console-plugin-container image to be consistent with ART for 4.17 #455
OCPBUGS-87998: Retain namespace selection between network policies tabs #428
OCPBUGS-83379: fix CVE-2026-34043 - Update serialize-javascript to 7.0.5 #416
[release-4:17] OCPBUGS-85376: Migration from yarn to npm #414
OCPBUGS-81602: Fix CVE-2026-CVE-2026-4800 in lodash #402
OCPBUGS-79445: Bump immutable #389
CNV-76277: Fix name generator with unprofessional names #320
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

oauth-apiserver

OCPBUGS-66228: UPSTREAM <carry>: bump kubernetes-apiserver to pick up loopback certificate expiration update #157
NO-JIRA: (chore): update OWNERS file #171
OCPBUGS-61584: Bump openshift/kubernetes-apiserver for etcd retry patches. #143
Full changelog

oauth-proxy

OCPBUGS-61445: Update x/crypto to v0.31.0 #334
Full changelog

oauth-server

OCPBUGS-81795: Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 #239
OCPBUGS-61584: Bump openshift/kubernetes-apiserver for etcd retry patches. #198
Full changelog

oc-mirror

Adding r4f4 and Prashanth684 as approvers and removing contributors who are not working with oc-mirror anymore. (#1269) #1269
Full changelog

olm-operator-controller

OCPBUGS-80129: Update grpc-go to v1.71.3-sec.1 to fix CVE-2026-33186 #736
Full changelog

openshift-apiserver

OCPBUGS-82720: Address CVE-2026-35469 #658
OCPBUGS-68208: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.17] #609
OCPBUGS-74143: pkg/image: conditionally parse raw image manifest #596
OCPBUGS-66229: UPSTREAM <carry>: bump kubernetes-apiserver to pick up loopback certificate expiration update #584
OCPBUGS-63392: Wire dry run option to Image API server operations #565
OCPBUGS-61584: Bump openshift/kubernetes-apiserver for etcd retry patches. #554
OCPBUGS-53382: Skip blocked registry check for registries with mirrors #500
OCPBUGS-58821: Fix image reference in TestImageStreamImportQuayIO #515
Full changelog

openshift-controller-manager

OCPBUGS-61199: legacy image pull secret rollback controller #413
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-80133: Bump google.golang.org/grpc to v1.79.3 #194
Full changelog

openstack-machine-api-provider

OCPBUGS-78169: hermetic 4.17 #162
OCPBUGS-76793: Fix make test #160
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-103275, OCPBUGS-103278, OCPBUGS-103286: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 #1368
OCPBUGS-80136, OCPBUGS-80137, OCPBUGS-80138: Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.71.3-sec.1 [release-4.17] #1315
OCPBUGS-77838: Remove the collect-profiles info from the microshift kustomization file #1250
OCPBUGS-76953: Remove the collect-profiles job #1232
OCPBUGS-67301: Fix TOCTOU race condition in ensureInstallPlan (#3682) #1172
OCPBUGS-57092: [release-4.17] e2e stability fixes #1081
OCPBUGS-60791: Add NetworkPolicy as a supported kind #1058
Full changelog

operator-marketplace

OCPBUGS-68212, OCPBUGS-68213: [release-4.17] CVE-2025-65637 fixed in logrus v1.9.3+ #710
OCPBUGS-62219: Remove Expect func so that the test case can use the retry logic #670
OCPBUGS-61036: Update memoryTarget on catalog source pods #663
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-82724: Bump github.com/moby/spdystream to v0.5.1 #3322
OCPBUGS-81639: External gateway: Remove routes for external gateway pods in terminating or not ready state #3107
OCPBUGS-78029: Add pperiyasamy to OWNERS for release-4.17 #3046
OCPBUGS-77568: Clear stale conntrack UDP entries for nodePorts #3035
CORENET-6055, OCPBUGS-74492: [release-4.17] Dockerfile: Unpin OVN and consume the latest from FDP #2959
[release:4.17] OCPBUGS-71985: Fix conntrack reconciliation to use service port instead of endpoint port #2936
OCPBUGS-71218: [release-4.17] CVE-2025-65637 Bump github.com/sirupsen/logrus to v1.9.1 through indirect dependency conversion (go-controller module) #2905
OCPBUGS-71198: NetPol & MultiNetPol: Process update only when spec fields and/or related annotation are updated #2923
OCPBUGS-68348: Add ricky-rav to OWNERS for release-4.17 #2898
OCPBUGS-65928: Skip Pending pods in EgressIP status #2871
OCPBUGS-65569: [release-4.17]: kubevirt: fix bad release of IPs of live migratable pods #2857
OCPBUGS-64856: Fix stale EIP assignments during failover and controller restart #2850
OCPBUGS-64674: [release-4.17]: Configure sec nic EIPv6 address with NODAD and maximum lifetime #2843
OCPBUGS-63154: Fix EgressIP stale GARP post reboot + pod restart #2807
OCPBUGS-61749: [release-4.17] Fix dnsnameresolver address set #2796
Full changelog

powervs-block-csi-driver

OCPBUGS-80142: Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 #131
OCPBUGS-82725: Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 #125
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-80144: Fix CVE-2026-33186 by bumping google.golang.org/grpc to v1.79.3 #112
Full changelog

powervs-cloud-controller-manager

OCPBUGS-80145: Replace google.golang.org/grpc with openshift-sustaining fork v1.71.3-sec.1 to v1.79.3 to fix CVE-2026-33186 #103
Full changelog

powervs-machine-controllers

OCPBUGS-61204: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #126
Full changelog

prometheus

OCPBUGS-88631: remote: validate snappy decoded length before allocation in read endpoint #348
OCPBUGS-80146: Bump google.golang.org/grpc #320
OCPBUGS-61766: chore: compute highestTimestamp at queryManager level #268
Full changelog

prometheus-alertmanager

OCPBUGS-98167: bump github.com/hashicorp/memberlist to a forked version #166
OCPBUGS-100356: Set testdata CA expiry to 20 years from issue date (#4112) #151
OCPBUGS-75885: Include go-verify-deps expected files in gitignore #115
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-103296, OCPBUGS-103297: [release-4.17] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #399
OCPBUGS-77452: Validate webhookURL secret for MSTeams receiver in AlertmanagerConfig CRD #369
OCPBUGS-58408: Fix: One Alertmanager Config failing blocks all others. (#6585) #336
Full changelog

route-controller-manager

OCPBUGS-80022: Bump google.golang.org/grpc to v1.79.3 #86
Full changelog

service-ca-operator

OCPBUGS-68220: Update logrus to 1.9.3 to address CVE-2025-65637 #316
Fix for OCPBUGS-68221: CVE-2025-65637 bump github.com/sirupsen/logrus to v1.9.3 #309
Full changelog

telemeter

OCPBUGS-81796: [release-4.17] Fix CVE-2026-34986 #597
OCPBUGS-80159: Bump google.golang.org/grpc to v1.79.3 #600
Full changelog

tests

OCPBUGS-65492: Add imagestream update dryrun test #30479
OCPBUGS-64927: update telemtery limit for 4.17 e2e case #30472
OCPBUGS-64641: Migrate OCP-32383 to upstream #30455
OCPBUGS-63392: Backport pr 29834 to release-4.18 #30408
OCPBUGS-61162: images/tests: Remove rteval #30202
NO-JIRA: Update extended/networking OWNERS #30090
Full changelog

thanos

OCPBUGS-80161: Bump google.golang.org/grpc to v1.79.3 #185
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-78027: hermetic migration 4.17 #106
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-80165: Bump google.golang.org/grpc to v1.79.3 #105
OCPBUGS-78019: hermetic migration 4.17 #85
OCPBUGS-61652: Fix unit tests #71
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-92852: Bump golang.org/x/crypto/ssh to v0.33.0-sec.3 #194
OCPBUGS-80168: Bump google.golang.org/grpc #177
OCPBUGS-68224: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 #157
Full changelog

vsphere-problem-detector

OCPBUGS-103317: Bump golang.org/x/net to v0.35.0-sec.4 #234
OCPBUGS-84085: fix concurrent map writes #216
OCPBUGS-61755: Check for number of FailureDomain-s in GetVCenter() #190
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github