4.18.50

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.50-x86_64

Qualifiers (status api): None

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-main-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-main-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.18-e2e-azure-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Failed periodic-ci-openshift-release-main-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-ipv4
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.15, 4.17.16, 4.17.17, 4.17.18, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.33, 4.17.35, 4.17.36, 4.17.37, 4.17.38, 4.17.39, 4.17.40, 4.17.41, 4.17.42, 4.17.43, 4.17.44, 4.17.45, 4.17.46, 4.17.47, 4.17.48, 4.17.49, 4.17.50, 4.17.51, 4.17.52, 4.18.10, 4.18.11, 4.18.12, 4.18.13, 4.18.14, 4.18.15, 4.18.16, 4.18.17, 4.18.18, 4.18.19, 4.18.20, 4.18.21, 4.18.22, 4.18.23, 4.18.24, 4.18.25, 4.18.27, 4.18.28, 4.18.30, 4.18.31, 4.18.32, 4.18.33, 4.18.34, 4.18.35, 4.18.36, 4.18.37, 4.18.38, 4.18.4, 4.18.40, 4.18.41, 4.18.42, 4.18.43, 4.18.44, 4.18.45, 4.18.46, 4.18.5, 4.18.6, 4.18.7, 4.18.8, 4.18.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.18.39

Created: 2026-07-23 13:13:29 +0000 UTC

Image Digest: sha256:06c81645f1c2c36c637297d2b2bfc9f0441ae4b78e88e8f2e9f67879a4ceddeb

Components

Kubectl 1.31.1
Kubernetes 1.31.14
Kubernetes Tests 1.31.12
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202604240015-0 to 418.94.202607211754-0 (diff)

Removed images

ovirt-csi-driver
ovirt-csi-driver-operator

Rebuilt images without code change

agent-installer-api-server git 73206081 sha256:b6d36e428642109702ce6c1c167164dfd0bfbe8f9efdc714ada353d03769853d
agent-installer-csr-approver git 81d6bc27 sha256:d5c81c528372a0af60bad52014aceb73b25c5ab8028064d61bff393757243498
agent-installer-node-agent git 81c09fb7 sha256:dee7ba9331b4f1f7ac4f8c5ffea8280247ea49d742d2dc7e900f0e33f961589d
agent-installer-orchestrator git 81d6bc27 sha256:a477bb1a3690ae1c85df7fac9a701508bf48b722c83125e105be374e75e31fe0
agent-installer-utils git 63b87f06 sha256:3c947b30bea14573f51b38908cc3bcb11ea3d6fb7d363a2fe4a6fbc0bd717974
apiserver-network-proxy git 2f62712d sha256:c7efabadbaa9c5f7189f95600b98b0d93a02aa5804e8dc4aa0ca7e1b56d42c7b
aws-cloud-controller-manager git c3951906 sha256:c9e51bafc946796bc53d55a7ad39ee96854f55c0c4d403842208ba3fc2efa6ef
aws-cluster-api-controllers git ed55fc2d sha256:8dccc0930dad9802283be37c253d6c9642e481a71506efc46b982ed860c2aacc
aws-machine-controllers git 7b6bfc74 sha256:35d79486892fe15b290cfd5e01b8453b5d5bf10407a860706d260fd03ddc07d8
aws-pod-identity-webhook git f54f9a19 sha256:c062f84b43beaffbc081edf411bff58387863a56d5aa0b90ce2acbb9359a184c
azure-machine-controllers git 2fdaa544 sha256:4583e3136f7771ae1c8b5732d0cd1fe7f71f0c07f513e8e93411f25737a13cea
azure-workload-identity-webhook git f60e4029 sha256:6ad8ef0e71849fee5845f6b77a05ad7ac3171578b969eafe92dcde292918cc91
baremetal-cluster-api-controllers git 80c3a063 sha256:016e6d106081d575c4cfee64ee6e01309745f5b74517dea6566ca3c275756051
baremetal-machine-controllers git 1ede6c3f sha256:885101028342b1319eb4c2c263591dc829c4c07a938f48d7a2749d8db3cacb0c
baremetal-runtimecfg git 35341068 sha256:7f0b0cc5cb94773a90588cc3f0f18eddd9d3f6794194effbd94175327a06e17b
cli git 6febe619 sha256:d68f7b39ba0745c37cf6d4a68418c646407799e7ab0168f75e5a6481322af55b
cli-artifacts git 6febe619 sha256:2ebd21e53ef6081756ebfecde6be4e3d9fcf603c3378396ce1c35c009ac4cc8d
cloud-credential-operator git 363e98bd sha256:c2b49a03ccc7b1d2613f0e49c086ed5fd2ef30995ff5627b85fa9f6736b51cce
cloud-network-config-controller git f892b915 sha256:6f0d7625c9e2ed75b927418137368c9d4933e3cc87d7640d462dc9ace887fb0f
cluster-autoscaler git 34730793 sha256:2dabc947a159004e9c582dde5b02eecd31ad80f8bb2461ca1195d360b0cbe045
cluster-autoscaler-operator git 474ad65c sha256:4fe84bfcfe84ced15f38f8936e3d6eed1d5e230e869b6f107e4a4f9c1a206cff
cluster-baremetal-operator git 3e6d1ab1 sha256:df53836a50557f40ef9e3c2809064cc77be66c5c352147641a6a7f1d09c19b27
cluster-bootstrap git d1e01954 sha256:39dfc674c39d95b04ee9f937838bd06923aedd732667afb115253f7438c32ab3
cluster-cloud-controller-manager-operator git 8abb0673 sha256:4a1778a4340b4e55cb88c22c718a9b47b877ba220a1844b471e0bac066efa649
cluster-config-operator git fe5e9286 sha256:5e54521047a6e97cd229f482ce4cf774880a105de890163bcef8ea76597ae2ab
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:4ebae4768c1086150a4ba384763d0ae6c4d7e191fb6b1959382ed9aed0875633
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:325bc38fa2657ceb3eb5b274766a01d8a9ea308e27929094e33d81ba292e6a5c
cluster-dns-operator git 7cafd0c7 sha256:339dface3a610f4932b54a0fff7fe576c57080754ca23d22e76bdbb6984df7f4
cluster-etcd-operator git 3af8b9d6 sha256:22afe70b5c27ac75bac048f391fc3a5f9dadc77f4b456c94c20c36701c2c82bf
cluster-image-registry-operator git 1e3caa4b sha256:53eca2f9021c69c82efbf5cc5596a6f5db2116720f53a95d3677549c52228abb
cluster-kube-apiserver-operator git e9bc9090 sha256:26d26a871430b9adb14432bc0c65b5da5ce35d5de4b045ecfb793b6957472be5
cluster-kube-controller-manager-operator git 6347fc81 sha256:af556d547e03d1e65be4ed2a4e6a72eec7acbac802745003e34e58e7a51ae838
cluster-kube-scheduler-operator git 4e99db62 sha256:7490069a2abe144a4651943a28cfd552f86a0a2d226d6d452c1fe4f0e2aae697
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:229bddd3fdef1e4902cdc9f1f5659baf521581ea29418071aab052297ab1bcf2
cluster-machine-approver git 01d5fbbe sha256:fe8d548803c23a6f000ef5fc65f2d92f32d32e55414570926314ccb1b2b44bfc
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:b76e3a398c21c29b4d5953523e1cbd28e3fe7f90d60f1ae921dab6fcfb6d470a
cluster-openshift-controller-manager-operator git f1711cf3 sha256:963c736f33a2ef2d9137ac61c73c1d7f8ee4f3127e583cc8c80735db91b01c4b
cluster-samples-operator git bc725fd4 sha256:20766ffde2907650d39569ac163042143b55a57cfa90d4ef5a240258e4bb8c76
cluster-update-keys git 8caab452 sha256:eaef047b37196c5abcb05f8f49bb49b3097f10df884997fe48626d0f2d03f959
cluster-version-operator git f72d7e2c sha256:035d23aa3d56a923ad6e3216aa5f04e8fd47450cce5849b73b241858ed482d0d
configmap-reloader git e2aaf00a sha256:7c80f5449af7b60ed202292cf2fe60fa74994bc4ff7e3453b8b39b7f0408bf40
console-operator git 3f78ddd5 sha256:9bcb9ce08ec0584888789e2b09c5de3b3b89689343b27c64ec62190682837e8f
coredns git 8ca7f02b sha256:e7ae990e271e968bbe63a6f1fa1e98199e846302cb911e599ea31b72c2bfa4dd
csi-external-resizer git a1423690 sha256:2a04f884d67386068219263c49497f5dd02cd86a4faa476137a6a4a160f679ff
csi-livenessprobe git 3a977844 sha256:d7ce2dc9d417df810508171f368452d5bae29adf2cba830c4ea590ed0a3fdf38
csi-node-driver-registrar git ef93f0be sha256:068bddbc376390102b671da29b8063ddb0dd07781b7393f3d843e6b2e968e6ce
deployer git 6febe619 sha256:0abfa7ab208616bdec842c2d09391c459a7dc9131e9a939af6695d90dd92c43c
docker-builder git 529c9688 sha256:1c16743d59d0b6f430f7a430e4ceeae776f24f405893f4030ed13df26c34870b
docker-registry git 5c367551 sha256:b6cee394325b4a50aec306a0be455b2f54a72fefa956cf206ca95d28aa7e2b9d
driver-toolkit git 2e139edc sha256:a3aa8b1768347cffdfe06eb6cb4c7ef11727fa1a87d3253582865b4ef05364a8
egress-router-cni git 3193a756 sha256:af90de440d330522a6d3bf7480930540857bfa0f8bb34d7e45cef5588f3d2771
etcd git b5a4f8d0 sha256:084d93761840e9a860a1eee4e4b61e2791e971ba034bcd10767e8ecf0a3c26a3
gcp-cloud-controller-manager git 6ea23561 sha256:3545b7c488b55a6ee59c08b98cbb46903b7263bd1c675eb9c7387f98c4ea9221
gcp-workload-identity-federation-webhook git f0a670c7 sha256:042b2b6874a0b5c87a9d28f346502df162c2b4ca5aa60a1dddeb88f91f600381
hyperkube git 91c24081 sha256:421b0a01261f9f9377249294ea80f868297eb662b09b947705aa711b03d7ab5c
ibm-cloud-controller-manager git a33026b1 sha256:670fb97fd79c95d8c4e6b6ff708008dcbf3c2c698fedb7368cebff1acba3c8de
ibm-vpc-block-csi-driver-operator git 1c7bc07e sha256:603ddeb473538c664b2070486698e6e33bf7e265bc06809feed9e366948d9b1a
ibmcloud-cluster-api-controllers git 4a0c35b0 sha256:32db4351d8f4aaa124199236ed23ba54c70530b5e23341d1be27a18f78a2d46e
ibmcloud-machine-controllers git 6cc2b5e0 sha256:ce5fbe3e5fd6d7afbae5e8280447c83f3f1c0ecc37b7b1445061b738b830518f
insights-runtime-exporter git 3d444833 sha256:a10b53b43202fc8650ce529db8fa15790792f5721f953c1ba0a223d42ec09335
insights-runtime-extractor git 3d444833 sha256:a81b7720e359b1aba72a79ce0d3969bacb88ef05f4b17dce1288aa9775333208
ironic-machine-os-downloader git 50ca44fd sha256:252c6da2ff75565ef9cd3503fd698fcbae8be6cd5178bf50a3cd8685affe6bd8
ironic-static-ip-manager git cfbae04f sha256:ed2f49e3c58eea6c1d9d12e1155e276168276a18a4473932d0c586bbdb850bb1
keepalived-ipfailover git 716eb0ef sha256:9097157776640685b367edb3390ff71695d2e2f5b7d7b35b8d90c9eaea000207
kube-proxy git 91c24081 sha256:100f1d17122f710049163b29a27f47de4c95a61382a35b45232533a461e0b1fa
kube-rbac-proxy git 5a14ea9d sha256:b61cd4374f0959670e0e037bcc3197e64ee437dc7e706345c4a6341478939952
kube-state-metrics git 046193a8 sha256:e40f23f0070d5c3411b76019c77a8f671aed92dfa811ce95ffab8d8792ec5d61
kube-storage-version-migrator git 815b43b7 sha256:06a84069d216005270f9bee761359e71f146630b870581cc64a05072d6acd7bd
libvirt-machine-controllers git 875b03bd sha256:1bd7713a749c6c9b8432a74813d0d425946202250281c3359dc75f1600e3c200
machine-api-operator git b3a96a46 sha256:a8e1c8354a4b847214b8e6c19c56e581f8fb70ac59909ce354ff3fcbaefc466e
machine-image-customization-controller git c8569da6 sha256:ad7070ae549562090a8e8e26ebe881b843f7352d493e76b76f458aa4293caad1
metallb-frr git 760c6639 sha256:1efbffd5d333c80a28651d740fe36316cd5ae01e44ba56418ffa714f1d842403
multus-admission-controller git 0d7ea6c7 sha256:64d692cd3e177d8887cc902b293bc733c0b0495d7d89682cd54c5f0e7c634814
multus-networkpolicy git 3362bbc4 sha256:12f7ad51986cebab0e8b30042a162b210d40b583c17f332c989db393cfb0aacc
multus-route-override-cni git 391c1b03 sha256:4be426aad394aaf5844d4c16c25bfc1f8d64ad2eea6e788c993398ba7c6dcbc1
multus-whereabouts-ipam-cni git 86191ded sha256:90a4b85454f62b41540ab121110c8aef00ce91e6dc5bfb70e0bb6d49fc037469
network-interface-bond-cni git e2de9255 sha256:4b4cf5fffba19ed77f3645dd3df0786326ac904f44254d273a68ee60ac35d86a
network-metrics-daemon git 11e2dec9 sha256:de49484753fd7a0f0b112c581d3374696fea3d3034ed0d45bedf29ce6a4a3039
network-tools git 47b13549 sha256:d6e1b9f85fce112b5b8653476015ec43a919c6eddc2991c9cc937142f751d77a
nutanix-cloud-controller-manager git d9fe8f38 sha256:adc10fc5d406d0b751d635339297ade1be9e71028698fd0ebcf89d25bba1eca2
nutanix-machine-controllers git afe324bf sha256:db199a30324a878740c117dca73797b92e3cc5670a0b4572640d8f575dfd67d2
oauth-apiserver git 1078b191 sha256:ede38e347ddf3513e68658b86e71d754e43dbdf2389acd67c1545c98fb6ee860
oauth-proxy git 9225edb9 sha256:4f1810a656ecae5b60137646ff1b9f4dff8a4f1cb1252de779bb7fe549af0a81
oc-mirror git 22a9fb87 sha256:e003e4d5629742a59d5aa309a9787b10bbdc01db6c81c6f842ec2ad2521cd8e7
olm-catalogd git 180aa92c sha256:ee710f43bca5a7438b7763c28ae95dc71829ddc8e680f19e0f3ed0d73906834e
openshift-controller-manager git 8ee74406 sha256:dc80d798d1aef21c34799b11374f94984bdf19721b02513497b125b67d644e0b
openshift-state-metrics git 3cca6fee sha256:c6b7b3949cf1ea735703b596557d473769d6c897197b4cd2b4f18d13fd66bd0b
openstack-cluster-api-controllers git d5e6ff9f sha256:4aa95b1707bbe724522882b69c6974ce2867622716793f0e16f86ae3ffcb776c
operator-marketplace git 34521c26 sha256:e2cc79caaf863a1f4d3dc71a22cd4e587289f6c9e7ff5e2ac5ee67a36b397cd8
pod git 91c24081 sha256:bc0416c2b6445e6424179a6bcbecec38ad99f2735bb81293617bcec404b97fc5
powervs-block-csi-driver git e8700dfa sha256:8f8cb2bc5f4b5bb0bdad8822b029f1f263717088828e59ee8f328e7657bfcaa5
powervs-block-csi-driver-operator git 9c9131b7 sha256:ae8239f4ecbed8af5ededd1c00aa36014522f7cf38751ebb8fe60f2cc7324d31
powervs-machine-controllers git 74e3ece7 sha256:431f22477fb43e7e0d7e58c48532dc8f6248725912df53e6c2f15e362b52f60d
prom-label-proxy git 35c11369 sha256:65b89f5be4934d619b68044ef33c77ccaf2d9f80c7136e3e237c6799eae9c65f
prometheus-alertmanager git 2e844270 sha256:6cd4a48d7643a961382903a08b853fa9cc88bfa0ff68ddb776520a2dc5b1291d
prometheus-config-reloader git 9bbce0b8 sha256:140aab9e204b22d2c4bd0edbe92561b08502716a17a6cacd864fd5051681c65f
prometheus-node-exporter git 92e17ff5 sha256:2f4a2ac6cf694886502391467d63497f084ca303483791c984113334f93a27d8
prometheus-operator git 9bbce0b8 sha256:57cd476082e1df9938e1a623e3dd203ca5a0eefb2b4b34c881f32f1b70da0457
prometheus-operator-admission-webhook git 9bbce0b8 sha256:45354c41f67376675771e8c4cd948f12547da90ddfe3469dd13313d1f20ac682
rhel-coreos sha256:9af6839685556598fb2c336f318a863836a552d288034679d0be53b43e534964
rhel-coreos-extensions sha256:6712a41411a739f6b869de7545c50c85d95f62a80eba61f0c7f2f682dfc456b0
service-ca-operator git 30efb529 sha256:522e72edcbb4c78c6dddb550d1765af6817a47ceac6bbad2da5b2f5c911771a1
tests git 43c51244 sha256:5837e2c3c265499417976eff8e787cf9658e47aa44ef506c13a44e3c0840324c
tools git 6febe619 sha256:d5d11d4181320b56b75e237a8b37e74da9266b0479f36062b413cd6fc5f8fb41
vsphere-cloud-controller-manager git b4dbf34a sha256:c8f80e1f3db4cea05028f994d60c6da6b25ae7df9a32877ebcc42f92a5814cd9
vsphere-problem-detector git 60e2b91f sha256:c8cda1ae60a6b83d9569a34d1dfe2cb6c802810f4bdf09d6fea26bbdeec38324

aws-ebs-csi-driver

OCPBUGS-82745: Address CVE-2026-35469 #327
OCPBUGS-86167: UPSTREAM: 2367: cleanup: make verify should ignore copyright year #321
OCPBUGS-80206: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 #313
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-80308: Bump google.golang.org/grpc #542
Full changelog

aws-kms-encryption-provider

OCPBUGS-80184: Bump google.golang.org/grpc to v1.79.3 #43
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-80210, OCPBUGS-80211, OCPBUGS-80350: Bump google.golang.org/grpc to v1.79.3 #190
Full changelog

azure-cluster-api-controllers

OCPBUGS-80212: Bump google.golang.org/grpc to v1.79.3 #390
Full changelog

azure-disk-csi-driver

OCPBUGS-80213: Address CVE-2026-33186 #142
OCPBUGS-78037: add instantAccessDurationMinutes parameter to enable IA snapshots for PremiumV2/UltraSSD disks #130
Full changelog

azure-file-csi-driver

OCPBUGS-80216: Address CVE-2026-33186 #133
Full changelog

azure-kms-encryption-provider

OCPBUGS-80185: Bump google.golang.org/grpc to 1.64.1-sec.1 patch #46
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-95616: azure: Add field in installconfig to disallow shared access key #10670
Full changelog

baremetal-operator

OCPBUGS-98321: Add BMH finalizer on PreprovisioningImage #509
OCPBUGS-59259: Fix HFC error handling in actionPreparing #502
OCPBUGS-87967: Fix preprovisioning network Secret lifecycle during BMH deletion #495
Full changelog

cluster-authentication-operator

OCPBUGS-75897: set appropriate rolling update settings #835
Full changelog

cluster-capi-controllers

OCPBUGS-80220: Bump google.golang.org/grpc to v1.79.3 #297
Full changelog

cluster-capi-operator

OCPBUGS-80224: Bump google.golang.org/grpc to v1.79.3 #566
NO-JIRA: Allow sustaining engineering to self serve dependency updates #558
Full changelog

cluster-config-api

OCPBUGS-98486: add new serviceAccountToken fs type #2927
Full changelog

cluster-ingress-operator

OCPBUGS-86715: Add configuration override for X-SSL strip (#1477) #1477
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-80231: Bump google.golang.org/grpc to v1.79.3 #77
Full changelog

cluster-monitoring-operator

OCPBUGS-94081: ship collector:node_scrape_collector_success:avg to Telemetry #2992
OCPBUGS-86995: increase lookup interval #2944
Full changelog

cluster-network-operator

OCPBUGS-85443: Remove duplicated openssl parameter #3006
OCPBUGS-84869: wait for patch port to apply drop garp flows #2988
Full changelog

cluster-node-tuning-operator

OCPBUGS-90575: Requeue PerformanceStatus update when status write fails #1552
OCPBUGS-82752: Bump github.com/moby/spdystream from v0.4.0 to v0.5.1 #1544
Full changelog

cluster-olm-operator

OCPBUGS-80239: Bump google.golang.org/grpc to v1.79.3 #200
Full changelog

cluster-policy-controller

OCPBUGS-98486: Backport fs type service account token 4.18 #196
Full changelog

cluster-storage-operator

OCPBUGS-87556: remove oVirt code from CSO 4.18 #707
Full changelog

console

OCPBUGS-84284: Bump follow-redirects to 1.16.0 to fix CVE-2026-40895 #16675
OCPBUGS-77125: [release-4.18] CVE-2026-26996 Bump minimatch library #16344
OCPBUGS-79447: Bump immutable #16325
NO-JIRA: enable multi-architecture yarn builds #16421
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-85672: CI Build root image tag sync with ART #236
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-80309: Bump google.golang.org/grpc #387
Full changelog

csi-driver-nfs

OCPBUGS-80254: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 to avoid go version bump and fix CVE-2026-33186 #180
Full changelog

csi-external-attacher

OCPBUGS-80255: Bump google.golang.org/grpc to v1.79.3 #105
Full changelog

csi-external-provisioner

OCPBUGS-82755: Address CVE-2026-35469 #135
OCPBUGS-80256: Bump google.golang.org/grpc #130
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-80258, OCPBUGS-80261, OCPBUGS-80262: Bump google.golang.org/grpc to v1.79.3 #211
Full changelog

gcp-cluster-api-controllers

OCPBUGS-80270: Bump google.golang.org/grpc to v1.79.3 #290
Full changelog

gcp-machine-controllers

OCPBUGS-80293: Bump google.golang.org/grpc to v1.79.3 #165
Full changelog

gcp-pd-csi-driver

OCPBUGS-80274: Bump google.golang.org/grpc to v1.71.3-sec.1 in release-4.18 #112
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-80273: Replace google.golang.org/grpc with fork #187
Full changelog

haproxy-router

OCPBUGS-86715: Strip X-SSL-* headers for plain HTTP #800
OCPBUGS-80275: Bump google.golang.org/grpc to v1.79.3 #768
Full changelog

hypershift

OCPBUGS-62756: Restart HCP on stale serving certs #8245
OCPBUGS-89356: build(operator): drop hypershift-no-cgo from operator container images #8760
NO-JIRA: remove path filter from control-plane-operator pipelines #8665
OCPBUGS-80278: fix CVE-2026-33186 by replacing grpc-go #8515
OCPBUGS-84180: fix(cno): use brackets only for IPv6 in server URL #8346
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-80280: Bump google.golang.org/grpc to v1.79.3 #143
Full changelog

insights-operator

OCPBUGS-80283: Bump google.golang.org/grpc to v1.79.3 #1283
Full changelog

ironic

OCPBUGS-76459: Bump pyasn1 to 0.5.1-4 #826
Full changelog

ironic-agent

OCPBUGS-95066: Replace individual package removal with a single rpm -e loop #286
OCPBUGS-95066: Replace dnf remove with rpm -e to prevent dependency removal #274
Full changelog

kube-metrics-server

OCPBUGS-80190: Bump google.golang.org/grpc to v1.79.3 #64
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-95084: OWNERS: Update component to Cloud Compute / KubeVirt Provider #77
Full changelog

kubevirt-csi-driver

OCPBUGS-80191: Bump google.golang.org/grpc to v1.79.3 #101
Full changelog

machine-config-operator

OCPBUGS-91747: Verify extension packages are installed #6216
OCPBUGS-98445: Remove sensitive ControllerConfig logging #6294
OCPBUGS-97588: Bootstrap MCS logging entire ignition #6268
OCPBUGS-86845: Apply password only if changes exist #6113
OCPBUGS-86695: use –delete-if-present for karg removal #6102
OCPBUGS-86844: Fix ssh and password rollbacks #6096
OCPBUGS-86692: Fix re-cordon detection #6101
OCPBUGS-86300: Add terminationMessagePolicy to build pod containers #6074
OCPBUGS-86021: Fix units rollback if update failure #6052
Full changelog

machine-os-images

OCPBUGS-87876: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #100
Full changelog

monitoring-plugin

OCPBUGS-79448: immutable bump: fix for CVE-2026-29063 #922
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-85249: Fix server url in kubeconfig #298
NO-ISSUE: [release-4.18] Bump Go to 1.22 and fix CI build root image #291
Full changelog

must-gather

OCPBUGS-86019: Collect object size with the object count #547
Full changelog

networking-console-plugin

OCPBUGS-41880: Fix namespace retention between NetworkPolicies tabs when MultiNetworkPolicies are disabled #433
OCPBUGS-41880: Retain namespace selection between network policies tabs #424
OCPBUGS-87000: Update Dockerfile.art to 4.22 build image #426
OCPBUGS-83382: Fix CVE 2026 34043 serialize javascript 4.18 #413
[release-4:18] OCPBUGS-85067: Migration from yarn to npm #412
OCPBUGS-81606: Fix CVE-2026-CVE-2026-4800 in lodash #401
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

oauth-server

OCPBUGS-81803: Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 #238
Full changelog

olm-operator-controller

OCPBUGS-87830: [release-4.18] operator-controller: clean up orphaned temp dirs in catalog cache #751
OCPBUGS-80304: Update grpc-go to v1.71.3-sec.1 to fix CVE-2026-33186 #735
Full changelog

openshift-apiserver

OCPBUGS-82769: Address CVE-2026-35469 #657
Full changelog

openstack-machine-api-provider

OCPBUGS-93867: Revendor CAPO #174
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-80311, OCPBUGS-80312, OCPBUGS-80313: Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.71.3-sec.1 [release-4.18] #1314
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-98957: Branch Sync release-4.19 to release-4.18 [07-09-2026] #3290
OCPBUGS-86230: Branch Sync release-4.19 to release-4.18 [05-19-2026] #3197
OCPBUGS-74399, OCPBUGS-85434: Branch Sync release-4.19 to release-4.18 [05-12-2026] #3184
Full changelog

powervs-cloud-controller-manager

OCPBUGS-80319: Replace google.golang.org/grpc with openshift-sustaining fork v1.71.3-sec.1 to v1.79.3 to fix CVE-2026-33186 #99
Full changelog

prometheus

OCPBUGS-80320: Bump google.golang.org/grpc to v1.79.3 #308
Full changelog

route-controller-manager

OCPBUGS-80199: Bump google.golang.org/grpc to v1.79.3 #85
Full changelog

telemeter

OCPBUGS-80333: Bump google.golang.org/grpc to v1.79.3 #599
OCPBUGS-81804: [release-4.18] Fix CVE-2026-34986 #596
Full changelog

thanos

OCPBUGS-80335: Bump google.golang.org/grpc to v1.79.3 #184
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-80340: Bump google.golang.org/grpc to v1.79.3 #104
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-80343: Bump google.golang.org/grpc to v1.79.3 #176
Full changelog

vsphere-csi-driver-operator

OCPBUGS-81673: Fix password escaping #342
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github