# 4.19.12
Created: 2025-09-11 16:34:36 +0000 UTC
Image Digest: `sha256:ab7a56224cc23191e193ccc56737609a78b77aa6c312d00b1490c349ed61e3c2`
Promoted from quay.io/openshift-release-dev/ocp-release-nightly@sha256:91c55f98591bf7aa4c1c9d279ab4f082712a038bd2ffccaff624d65bd2ee8cc3
## Changes from 4.20.0-rc.1
### Components
* Kubectl upgraded from 1.33.3 to 1.32.1
* Kubernetes upgraded from 1.33.3 to 1.32.8
* Kubernetes Tests upgraded from 1.33.3 to 1.32.6
* Red Hat Enterprise Linux CoreOS upgraded from 9.6.20250908-0 to 9.6.20250909-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: |
| AWSClusterHostedDNSInstall
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| AWSDedicatedHosts
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| AWSServiceLBNetworkSecurityGroup
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| AzureClusterHostedDNSInstall
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| AzureDedicatedHosts
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| AzureMultiDisk
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| BootImageSkewEnforcement
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ExternalSnapshotMetadata
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| GCPClusterHostedDNSInstall
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| GCPCustomAPIEndpointsInstall
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ImageModeStatusReporting
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ImageVolume
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| IrreconcilableMachineConfig
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ManagedBootImagesAzure
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ManagedBootImagesvSphere
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| MultiDiskSetup
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| MutatingAdmissionPolicy
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| NewOLMWebhookProviderOpenshiftServiceCA
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| NoRegistryClusterOperations
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| PreconfiguredUDNAddresses
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| StoragePerformantSecurityPolicy
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| VSphereMixedNodeEnv
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| HighlyAvailableArbiter
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| OpenShiftPodSecurityAdmission
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| ProcMountType
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| SigstoreImageVerification
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| UpgradeStatus
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| UserNamespacesPodSecurityStandards
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| UserNamespacesSupport
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| VSphereMultiDisk
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| VSphereMultiNetworks
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| AWSEFSDriverVolumeMetrics
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| BareMetalLoadBalancer
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ChunkSizeMiB
(5 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| CloudDualStackNodeIPs
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| DisableKubeletCloudCredentialProviders
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| GCPLabelsTags
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| HardwareSpeed
(3 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| MultiArchInstallAWS
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| MultiArchInstallGCP
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| NodeDisruptionPolicy
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| OnClusterBuild
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| PersistentIPsForVirtualization
(12 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| PrivateHostedZoneAWS
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| VSphereDriverConfiguration
(5 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| VSphereMultiVCenters
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ValidatingAdmissionPolicy
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ClusterVersionOperatorConfiguration
(0 tests)| Disabled| Disabled| Enabled| Enabled| Disabled
(Changed)| Disabled
(Changed) |
| DualReplica
(0 tests)| Disabled| Disabled| Enabled| Enabled| Disabled
(Changed)| Disabled
(Changed) |
| SELinuxMount
(6 tests)| Disabled| Disabled| Enabled| Enabled| Disabled
(Changed)| Disabled
(Changed) |
| SigstoreImageVerificationPKI
(0 tests)| Disabled| Disabled| Enabled| Enabled| Disabled
(Changed)| Disabled
(Changed) |
| InsightsRuntimeExtractor
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| MachineAPIProviderOpenStack
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| PlatformOperators
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| SELinuxChangePolicy
(0 tests)| | | Enabled
(New)| Enabled
(New)| | |
### Removed images
* csi-external-snapshot-metadata
* volume-data-source-validator
### Rebuilt images without code change
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [088dcaf7](https://github.com/openshift/aws-encryption-provider/commit/088dcaf73f980b977ef4f5d2f99e2a93deb87eef) `sha256:558cbbe7675dc498c780986caae56ab9d612ec432d1f2a18497a80d754fe45ba`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [3ec30377](https://github.com/openshift/cluster-api-operator/commit/3ec30377ffff951dc9c0fc2257d290e4b4958465) `sha256:81175be36b530b1148abad5e3db44f3705874baa5d6b9df19f20ee367c579e43`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:d64f91c422335b3f9f58587152bd8dd3fd8a6145172c506a6a6ff1ed7778d16d`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:b93790ce1802f06126eedac2ea4d041f3f6b06c2c3cc9652973269abcfeb79c6`
* [multus-cni](https://github.com/openshift/multus-cni) git [cf0f68ec](https://github.com/openshift/multus-cni/commit/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe) `sha256:0b4e8f3a7bf51e954ead1bc8748551be76ffe39c5206046e44bba78dd7254c2d`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [cf0f68ec](https://github.com/openshift/multus-cni/commit/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe) `sha256:0e0a4010495f3652476e9bdf8cbca36d49b093969f8cbb6f55e5512706aa41ac`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:871c976159d005f05ef27f68b9af03c816751136c4de974fef4c26a75d03faca`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:0db5f0ffbc09c93128bf5d20839db357c82e456fb33ae9c22bcf4fb0d0f5f0d0`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [76db379d](https://github.com/openshift/ovirt-csi-driver-operator/commit/76db379d075fdae94ca604f3fa83b0612b36ef8d) `sha256:75b812bbb577d59875afe910eb9bdaf0294e6240def94ec890df4e169eaf6380`
### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/be6aa91006d445bdaace0fdf6ed16b105ce930ee)
* [MGMT-21287](https://issues.redhat.com/browse/MGMT-21287): Remove NHO dependency in SNR (#7894) [#7894](https://github.com/openshift/assisted-service/pull/7894)
* NO-ISSUE: Add NHO and FAR back to the virtualization bundle (#7870) [#7870](https://github.com/openshift/assisted-service/pull/7870)
* [MGMT-20893](https://issues.redhat.com/browse/MGMT-20893): Remove Remediation operators from virtualization bundle (#7814) [#7814](https://github.com/openshift/assisted-service/pull/7814)
* [OCPBUGS-57361](https://issues.redhat.com/browse/OCPBUGS-57361): Use hostname to match hosts to BMH ignition (#7794) [#7794](https://github.com/openshift/assisted-service/pull/7794)
* [OCPBUGS-54319](https://issues.redhat.com/browse/OCPBUGS-54319): mirror changes to openshift-installer with oci-eval-user-data (#7670) [#7670](https://github.com/openshift/assisted-service/pull/7670)
* [OCPBUGS-56596](https://issues.redhat.com/browse/OCPBUGS-56596): Include AdditionalTrustBundlePolicy in installConfig (#7747) [#7747](https://github.com/openshift/assisted-service/pull/7747)
* [Full changelog](https://github.com/openshift/assisted-service/compare/67941ae2ae2ea59eb8659b11be1eb14e6da323f1...be6aa91006d445bdaace0fdf6ed16b105ce930ee)
### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/edfddbc100302df013eb3303c41da28f074e8dd4)
* [OCPBUGS-60938](https://issues.redhat.com/browse/OCPBUGS-60938): Update ISOBuilder OCP 4.19 Dev Preview Release notes [#142](https://github.com/openshift/agent-installer-utils/pull/142)
* [OCPBUGS-60107](https://issues.redhat.com/browse/OCPBUGS-60107): Add ISOBuilder Release notes [#137](https://github.com/openshift/agent-installer-utils/pull/137)
* [OCPBUGS-59731](https://issues.redhat.com/browse/OCPBUGS-59731): add back NHR and FAR operators [#131](https://github.com/openshift/agent-installer-utils/pull/131)
* [OCPBUGS-58285](https://issues.redhat.com/browse/OCPBUGS-58285): OVE ISOBuilder works only if and when the script is ex… [#121](https://github.com/openshift/agent-installer-utils/pull/121)
* [OCPBUGS-59254](https://issues.redhat.com/browse/OCPBUGS-59254): invalid default channel configuration for package "mtv… [#126](https://github.com/openshift/agent-installer-utils/pull/126)
* [OCPBUGS-59666](https://issues.redhat.com/browse/OCPBUGS-59666): Enable 'q' and 'c' hotkeys for quit and configure network [#129](https://github.com/openshift/agent-installer-utils/pull/129)
* [OCPBUGS-57922](https://issues.redhat.com/browse/OCPBUGS-57922): Update operators list in ISOBuilder [#118](https://github.com/openshift/agent-installer-utils/pull/118)
* [OCPBUGS-57420](https://issues.redhat.com/browse/OCPBUGS-57420): Bump iso-builder appliance dependency [#115](https://github.com/openshift/agent-installer-utils/pull/115)
* [OCPBUGS-57301](https://issues.redhat.com/browse/OCPBUGS-57301): Update mtv-operator to version used in 4.19 catalog [#112](https://github.com/openshift/agent-installer-utils/pull/112)
* [OCPBUGS-56991](https://issues.redhat.com/browse/OCPBUGS-56991): OVE isobuilder fails on CentOS Stream 9 due to missing… [#104](https://github.com/openshift/agent-installer-utils/pull/104)
* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#106](https://github.com/openshift/agent-installer-utils/pull/106)
* [OCPBUGS-56690](https://issues.redhat.com/browse/OCPBUGS-56690): Fix nmtui redirection after quit [#97](https://github.com/openshift/agent-installer-utils/pull/97)
* [OCPBUGS-56810](https://issues.redhat.com/browse/OCPBUGS-56810): bump appliance to 936210 [#99](https://github.com/openshift/agent-installer-utils/pull/99)
* [OCPBUGS-56759](https://issues.redhat.com/browse/OCPBUGS-56759): ISOBuilder- Remove default password for nodes [#100](https://github.com/openshift/agent-installer-utils/pull/100)
* [OCPBUGS-56490](https://issues.redhat.com/browse/OCPBUGS-56490): Add operator CRs post-install in OVE build script [#95](https://github.com/openshift/agent-installer-utils/pull/95)
* [OCPBUGS-56216](https://issues.redhat.com/browse/OCPBUGS-56216): OVE builder: Remove RHEL9 image from additionalImages [#92](https://github.com/openshift/agent-installer-utils/pull/92)
* [OCPBUGS-56116](https://issues.redhat.com/browse/OCPBUGS-56116): configure the channel for each OLM operators [#90](https://github.com/openshift/agent-installer-utils/pull/90)
* [OCPBUGS-55793](https://issues.redhat.com/browse/OCPBUGS-55793): Use internal image registry [#87](https://github.com/openshift/agent-installer-utils/pull/87)
* [OCPBUGS-55761](https://issues.redhat.com/browse/OCPBUGS-55761): Include RHEL 9 guest image to support VM launches via … [#85](https://github.com/openshift/agent-installer-utils/pull/85)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/b5330d86e38009af7b8a9fd32d84b8800fd2f27f...edfddbc100302df013eb3303c41da28f074e8dd4)
### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/77213cc5eed50f6c0ec0600133e01274020657ef)
* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#79](https://github.com/openshift/apiserver-network-proxy/pull/79)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/11b24a2c7452ef683a1d989f1016e6e815f5c112...77213cc5eed50f6c0ec0600133e01274020657ef)
### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/778bbd27922126b112451f54f57b439f6a28951b)
* [OCPBUGS-59241](https://issues.redhat.com/browse/OCPBUGS-59241), [OCPBUGS-59242](https://issues.redhat.com/browse/OCPBUGS-59242): bump github.com/golang/glog to v1.2.5 [#558](https://github.com/openshift/cluster-api-provider-aws/pull/558)
* [OCPBUGS-55998](https://issues.redhat.com/browse/OCPBUGS-55998): Update manifests to remove reliance on v1beta1 admission registration [#552](https://github.com/openshift/cluster-api-provider-aws/pull/552)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/9467200c8073d4609cfca356bc6fc8126c505886...778bbd27922126b112451f54f57b439f6a28951b)
### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/e6ffce5ffcad6385976f241c9ef57a7fe4be6282)
* [OCPBUGS-60595](https://issues.redhat.com/browse/OCPBUGS-60595): Bump library-go [#420](https://github.com/openshift/csi-operator/pull/420)
* [OCPBUGS-59893](https://issues.redhat.com/browse/OCPBUGS-59893): Remove stale conditions [#411](https://github.com/openshift/csi-operator/pull/411)
* [OCPBUGS-56527](https://issues.redhat.com/browse/OCPBUGS-56527): openstack-cinder: Set --with-topology flag for node driver also [#384](https://github.com/openshift/csi-operator/pull/384)
* [Full changelog](https://github.com/openshift/csi-operator/compare/a92ebd03f1d495e27a76b03e9db002e08fcb8ac8...e6ffce5ffcad6385976f241c9ef57a7fe4be6282)
### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/84fbc02a1b018ffc93ba05622282889a28343db0)
* [OCPBUGS-56633](https://issues.redhat.com/browse/OCPBUGS-56633): fix: make machineset annotation controller respect paused condition [#130](https://github.com/openshift/machine-api-provider-aws/pull/130)
* [OCPBUGS-55706](https://issues.redhat.com/browse/OCPBUGS-55706): Update machine-api-operator pkg with fixes [#128](https://github.com/openshift/machine-api-provider-aws/pull/128)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/d1cc300e80d2c02c234a04b8c72b71e720bc311f...84fbc02a1b018ffc93ba05622282889a28343db0)
### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/2e2909cf1317cb84285de3c73f6acadb9e8a31f2)
* [OCPBUGS-59888](https://issues.redhat.com/browse/OCPBUGS-59888): Add support to disable CAPZ components through a manager flag [#347](https://github.com/openshift/cluster-api-provider-azure/pull/347)
* [OCPBUGS-56100](https://issues.redhat.com/browse/OCPBUGS-56100): fix: reuse global TracerProvider [#340](https://github.com/openshift/cluster-api-provider-azure/pull/340)
* [OCPBUGS-56962](https://issues.redhat.com/browse/OCPBUGS-56962): [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 [#339](https://github.com/openshift/cluster-api-provider-azure/pull/339)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/cb8b5b6a485971a95c5a74508d76ab19b23cbf29...2e2909cf1317cb84285de3c73f6acadb9e8a31f2)
### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/762a2b94b237cf16b56bb5085bcaa1471537cb52)
* [OCPBUGS-55831](https://issues.redhat.com/browse/OCPBUGS-55831): UPSTREAM: 2515: allow deleting cross-subscription snapshots [#93](https://github.com/openshift/azure-file-csi-driver/pull/93)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/45d505bc11fedadece5ae27147c9595877e39f2a...762a2b94b237cf16b56bb5085bcaa1471537cb52)
### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/20a9ba53d5900578d497c84bb09cd46bc5859a29)
* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#18](https://github.com/openshift/azure-kubernetes-kms/pull/18)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/ea0b9944dddcc7043065a1fab5fca72dd17450da...20a9ba53d5900578d497c84bb09cd46bc5859a29)
### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/04987a4f8fbf36196044db0e1863cb0febf4a88e)
* [OCPBUGS-56163](https://issues.redhat.com/browse/OCPBUGS-56163): [release-4.19] Update virtualmachines service to armcompute/v5 SDK [#144](https://github.com/openshift/machine-api-provider-azure/pull/144)
* [OCPBUGS-56653](https://issues.redhat.com/browse/OCPBUGS-56653): Fix failure when attempting to modify immutable availabilitySet [#154](https://github.com/openshift/machine-api-provider-azure/pull/154)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/4927cc2be4f629e367d2a79a310900c7cced3f6c...04987a4f8fbf36196044db0e1863cb0febf4a88e)
### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/e5c6c44c87ebbe57a33650dd6270275e7cca771e)
* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#36](https://github.com/openshift/azure-workload-identity/pull/36)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/88b18175e46fe305486d172ec0b4e8471c55e30b...e5c6c44c87ebbe57a33650dd6270275e7cca771e)
### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/06a66db1ac3c28f6d9a1adf16146ebec219c8534)
* [OCPBUGS-56962](https://issues.redhat.com/browse/OCPBUGS-56962): [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 [#45](https://github.com/openshift/cluster-api-provider-metal3/pull/45)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/f782ba747ed353721c84ceb754ca8403f94adb6a...06a66db1ac3c28f6d9a1adf16146ebec219c8534)
### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/2426fe4c005af47eded8dfbbcbfa7fabd3b0b9ca)
* [OCPBUGS-59573](https://issues.redhat.com/browse/OCPBUGS-59573): Checking for selected PE retrieved data and returning errors for missing values [#9842](https://github.com/openshift/installer/pull/9842)
* [OCPBUGS-60832](https://issues.redhat.com/browse/OCPBUGS-60832): node-joner ignore error if SSH key was not found [#9910](https://github.com/openshift/installer/pull/9910)
* [OCPBUGS-61109](https://issues.redhat.com/browse/OCPBUGS-61109): Misleading error when confidentialCompute: Enabled [#9920](https://github.com/openshift/installer/pull/9920)
* [OCPBUGS-60925](https://issues.redhat.com/browse/OCPBUGS-60925): Update the RHCOS 4.19 bootimage metadata [#9915](https://github.com/openshift/installer/pull/9915)
* [OCPBUGS-60652](https://issues.redhat.com/browse/OCPBUGS-60652): PowerVS: config variables not honored [#9901](https://github.com/openshift/installer/pull/9901)
* [OCPBUGS-60666](https://issues.redhat.com/browse/OCPBUGS-60666): Azure: change LB and pubic IP skus to Standard [#9903](https://github.com/openshift/installer/pull/9903)
* [OCPBUGS-59607](https://issues.redhat.com/browse/OCPBUGS-59607): Refine check for supported SNO platforms [#9843](https://github.com/openshift/installer/pull/9843)
* Revert "Update RHCOS 4.19 bootimage metadata to 9.6.20250811-0" [#9906](https://github.com/openshift/installer/pull/9906)
* [OCPBUGS-60402](https://issues.redhat.com/browse/OCPBUGS-60402): baremetal: always set external v6 URL on dualstack [#9879](https://github.com/openshift/installer/pull/9879)
* [OCPBUGS-58905](https://issues.redhat.com/browse/OCPBUGS-58905): Update RHCOS 4.19 bootimage metadata to 9.6.20250811-0 [#9888](https://github.com/openshift/installer/pull/9888)
* [OCPBUGS-56963](https://issues.redhat.com/browse/OCPBUGS-56963): Make swift containers removal not fatal for UPI. [#9765](https://github.com/openshift/installer/pull/9765)
* [OCPBUGS-58403](https://issues.redhat.com/browse/OCPBUGS-58403): When AWS_PROFILE is invalid ask for credentials [#9829](https://github.com/openshift/installer/pull/9829)
* [OCPBUGS-58073](https://issues.redhat.com/browse/OCPBUGS-58073): Refactor removing loadbalancer in OpenStack. [#9808](https://github.com/openshift/installer/pull/9808)
* [OCPBUGS-58263](https://issues.redhat.com/browse/OCPBUGS-58263): allow to deploy single nodes with UPI [#9812](https://github.com/openshift/installer/pull/9812)
* [OCPBUGS-57901](https://issues.redhat.com/browse/OCPBUGS-57901): vSphere - remove unit tests using nip.io [#9802](https://github.com/openshift/installer/pull/9802)
* [OCPBUGS-58060](https://issues.redhat.com/browse/OCPBUGS-58060): MCO: consider custom AMI for edge compute machine pool [#9807](https://github.com/openshift/installer/pull/9807)
* [OCPBUGS-56020](https://issues.redhat.com/browse/OCPBUGS-56020): AWS Destroy use AWS SDK v2 [#9703](https://github.com/openshift/installer/pull/9703)
* [OCPBUGS-57394](https://issues.redhat.com/browse/OCPBUGS-57394): Prompt User for AWS Creds when none are found [#9782](https://github.com/openshift/installer/pull/9782)
* [OCPBUGS-57137](https://issues.redhat.com/browse/OCPBUGS-57137): Revert "CORS-3883: Remove user-assigned identity from ARM template" [#9771](https://github.com/openshift/installer/pull/9771)
* [OCPBUGS-57039](https://issues.redhat.com/browse/OCPBUGS-57039): ensure ctrplane nodes can access bootstrap MCS [#9768](https://github.com/openshift/installer/pull/9768)
* [OCPBUGS-56826](https://issues.redhat.com/browse/OCPBUGS-56826): update the punctuation [#9755](https://github.com/openshift/installer/pull/9755)
* [OCPBUGS-56372](https://issues.redhat.com/browse/OCPBUGS-56372): Added better logging for vSphere destroy [#9719](https://github.com/openshift/installer/pull/9719)
* [OCPBUGS-56832](https://issues.redhat.com/browse/OCPBUGS-56832): add unit tests for vsphere VIPS/machinenetworks population [#9757](https://github.com/openshift/installer/pull/9757)
* [OCPBUGS-56811](https://issues.redhat.com/browse/OCPBUGS-56811): Update Control Plane replica validation for Single Node OpenShift [#9756](https://github.com/openshift/installer/pull/9756)
* [MGMT-20702](https://issues.redhat.com/browse/MGMT-20702), [OCPBUGS-56762](https://issues.redhat.com/browse/OCPBUGS-56762): Avoid duplicate machine networks [#9745](https://github.com/openshift/installer/pull/9745)
* [OCPBUGS-55995](https://issues.redhat.com/browse/OCPBUGS-55995): [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field [#9701](https://github.com/openshift/installer/pull/9701)
* [OCPBUGS-56712](https://issues.redhat.com/browse/OCPBUGS-56712): add the VM types that the install pass into the tested_instance_types [#9730](https://github.com/openshift/installer/pull/9730)
* [OCPBUGS-56646](https://issues.redhat.com/browse/OCPBUGS-56646): Update RHCOS 4.19 bootimage metadata to 9.6.20250523-0 [#9742](https://github.com/openshift/installer/pull/9742)
* [OCPBUGS-56595](https://issues.redhat.com/browse/OCPBUGS-56595): [release-4.19] OCPBUGS-56567: default Azure to create VM user-assigned identities [#9735](https://github.com/openshift/installer/pull/9735)
* [OCPBUGS-55068](https://issues.redhat.com/browse/OCPBUGS-55068): Update RHCOS 4.19 bootimage metadata to 9.6.20250513-0 [#9721](https://github.com/openshift/installer/pull/9721)
* [OCPBUGS-56006](https://issues.redhat.com/browse/OCPBUGS-56006): [release-4.19] CORS-3634, CORS-3771, CORS-3772: Azure doc: add support for Lsv4, Lasv4, Dxv6, NDs and NV series [#9702](https://github.com/openshift/installer/pull/9702)
* [OKD-251](https://issues.redhat.com/browse/OKD-251): Update SCOS 4.19 bootimage metadata to 9.0.20250510-0 [#9714](https://github.com/openshift/installer/pull/9714)
* [OCPBUGS-56061](https://issues.redhat.com/browse/OCPBUGS-56061): fixes to get shellcheck to pass [#9705](https://github.com/openshift/installer/pull/9705)
* [OCPBUGS-56140](https://issues.redhat.com/browse/OCPBUGS-56140): apply fixes for yaml-lint errors [#9710](https://github.com/openshift/installer/pull/9710)
* [OCPBUGS-56075](https://issues.redhat.com/browse/OCPBUGS-56075): Pre-create password files for agent installer OVE [#9707](https://github.com/openshift/installer/pull/9707)
* [OCPBUGS-55957](https://issues.redhat.com/browse/OCPBUGS-55957): Remove Terraform & Altinfra Build Artifacts [#9698](https://github.com/openshift/installer/pull/9698)
* [OCPBUGS-55909](https://issues.redhat.com/browse/OCPBUGS-55909): Apply defaults then validate confidentialCompute [#9695](https://github.com/openshift/installer/pull/9695)
* [OCPBUGS-55731](https://issues.redhat.com/browse/OCPBUGS-55731): azure stack: switch cloud provider to standard lb [#9690](https://github.com/openshift/installer/pull/9690)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/installer/compare/5f4e6cdd114d77f0a7e6e18cdabba253c3149a65...2426fe4c005af47eded8dfbbcbfa7fabd3b0b9ca)
### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/f4e49d5f3b0a2a3ee7a2cc7716bc8d70f33f3506)
* [OCPBUGS-59133](https://issues.redhat.com/browse/OCPBUGS-59133): Unblock BMH direct deletion when detached annotation is present [#423](https://github.com/openshift/baremetal-operator/pull/423)
* [OCPBUGS-56765](https://issues.redhat.com/browse/OCPBUGS-56765): Make firmware update handle only a subset of `Spec.Updates` [#420](https://github.com/openshift/baremetal-operator/pull/420)
* [OCPBUGS-56026](https://issues.redhat.com/browse/OCPBUGS-56026): Redfish: correctly handle missing system ID [#415](https://github.com/openshift/baremetal-operator/pull/415)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/a7d0035a144d5b51c1401426bbe7ce518f24f154...f4e49d5f3b0a2a3ee7a2cc7716bc8d70f33f3506)
### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/2f969c7a1df33a398298df731505a508ad120db9)
* [OCPBUGS-60110](https://issues.redhat.com/browse/OCPBUGS-60110): Re-add ENABLE_NODEIP_DEBUG env var [#365](https://github.com/openshift/baremetal-runtimecfg/pull/365)
* [OCPBUGS-57781](https://issues.redhat.com/browse/OCPBUGS-57781): iptables: Switch PREROUTING REDIRECT rule to DNAT instead [#352](https://github.com/openshift/baremetal-runtimecfg/pull/352)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/6553765e71c7f8d7db120af94473c9c0cb44d453...2f969c7a1df33a398298df731505a508ad120db9)
### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/298429ba9831d1d72b89edd9beb82a6ee665c3b7)
* [OCPBUGS-58077](https://issues.redhat.com/browse/OCPBUGS-58077): Return error in case of error [#2052](https://github.com/openshift/oc/pull/2052)
* [OCPBUGS-56905](https://issues.redhat.com/browse/OCPBUGS-56905): avoid transfering permissions when copying artifacts from node-joiner pod [#2032](https://github.com/openshift/oc/pull/2032)
* [OCPBUGS-56511](https://issues.redhat.com/browse/OCPBUGS-56511): Replace colon to hypen in the filename while extracting tar on Windows [#2024](https://github.com/openshift/oc/pull/2024)
* [OCPBUGS-56203](https://issues.redhat.com/browse/OCPBUGS-56203): Adding sos.conf file for default sos config into the tools image [#2020](https://github.com/openshift/oc/pull/2020)
* [Full changelog](https://github.com/openshift/oc/compare/a43428189603f12ae190703cb725f66f742fbe52...298429ba9831d1d72b89edd9beb82a6ee665c3b7)
### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/0a5409aaef9203a4551bce93eac5637a32c87f7b)
* [OCPBUGS-60970](https://issues.redhat.com/browse/OCPBUGS-60970): ccoctl: aws to use proper issuer url on subsequent runs [#906](https://github.com/openshift/cloud-credential-operator/pull/906)
* [OCPBUGS-60617](https://issues.redhat.com/browse/OCPBUGS-60617): ccoctl azure dnszone-resource-group-name now optional [#900](https://github.com/openshift/cloud-credential-operator/pull/900)
* [OCPBUGS-59401](https://issues.redhat.com/browse/OCPBUGS-59401): github.com/golang/glog v1.2.5 [#890](https://github.com/openshift/cloud-credential-operator/pull/890)
* [OCPBUGS-58246](https://issues.redhat.com/browse/OCPBUGS-58246): ccoctl: only add owned tag to azure resources on create [#881](https://github.com/openshift/cloud-credential-operator/pull/881)
* [OCPBUGS-55798](https://issues.redhat.com/browse/OCPBUGS-55798): Sync OpenStack CA Bundles from legacy location [#866](https://github.com/openshift/cloud-credential-operator/pull/866)
* [OCPBUGS-56978](https://issues.redhat.com/browse/OCPBUGS-56978): Azure: resolve nil pointer exception when role assignment exists [#870](https://github.com/openshift/cloud-credential-operator/pull/870)
* [OCPBUGS-55903](https://issues.redhat.com/browse/OCPBUGS-55903): Render: configure proxy on bootstrap static pod [#857](https://github.com/openshift/cloud-credential-operator/pull/857)
* [OCPBUGS-56054](https://issues.redhat.com/browse/OCPBUGS-56054): golang.org/x/net v0.38.0 [#858](https://github.com/openshift/cloud-credential-operator/pull/858)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/054d34c70a0663a9d95a288c330da3786659b70c...0a5409aaef9203a4551bce93eac5637a32c87f7b)
### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/c53c7153b62ff36cc725707297a4bbb7ea4f62e5)
* [OCPBUGS-60900](https://issues.redhat.com/browse/OCPBUGS-60900): revert openshift replica fix [#374](https://github.com/openshift/kubernetes-autoscaler/pull/374)
* [OCPBUGS-59638](https://issues.redhat.com/browse/OCPBUGS-59638): fix checkpoint gc of unknown recommenders [#366](https://github.com/openshift/kubernetes-autoscaler/pull/366)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/d883d0e6dbb74f0839631ebc7a584669f0e955a3...c53c7153b62ff36cc725707297a4bbb7ea4f62e5)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/38dbc972321dd339464ffd4a92d2bb6f9b01d761)
* [OCPBUGS-60286](https://issues.redhat.com/browse/OCPBUGS-60286): Remove webhookport (9447) as HostPort [#498](https://github.com/openshift/cluster-baremetal-operator/pull/498)
* [OCPBUGS-57504](https://issues.redhat.com/browse/OCPBUGS-57504): Treat ResourceNotFound as non-fatal [#484](https://github.com/openshift/cluster-baremetal-operator/pull/484)
* [OCPBUGS-56644](https://issues.redhat.com/browse/OCPBUGS-56644): Allow provisioningIP when network disabled [#474](https://github.com/openshift/cluster-baremetal-operator/pull/474)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/19d38730cbeb7e99a3f695aaf4bcb7d24d3c2db8...38dbc972321dd339464ffd4a92d2bb6f9b01d761)
### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/479f0c4edcfc5bc5706600070e8b8c142e59a5d4)
* [OCPBUGS-55998](https://issues.redhat.com/browse/OCPBUGS-55998): Regenerate manifests to drop usage of v1beta1 admissionregistration [#237](https://github.com/openshift/cluster-api/pull/237)
* [Full changelog](https://github.com/openshift/cluster-api/compare/de1db2970e7fede7101e5a8188e74942ab6665e3...479f0c4edcfc5bc5706600070e8b8c142e59a5d4)
### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/cf9e6e9bf7f28ac52ea7b2f0af6b0b80cd7c32b9)
* [OCPBUGS-59228](https://issues.redhat.com/browse/OCPBUGS-59228), [OCPBUGS-59229](https://issues.redhat.com/browse/OCPBUGS-59229): fix: clusteroperator: do not update status.relatedobjects if only order changed [#332](https://github.com/openshift/cluster-capi-operator/pull/332)
* [OCPBUGS-57449](https://issues.redhat.com/browse/OCPBUGS-57449): mapi2capi: Create new machine template when changing MAPI providerSpec [#317](https://github.com/openshift/cluster-capi-operator/pull/317)
* [OCPBUGS-56776](https://issues.redhat.com/browse/OCPBUGS-56776): fix: ensure CAPI machineset is created not paused when authoritative [#304](https://github.com/openshift/cluster-capi-operator/pull/304)
* [OCPBUGS-56714](https://issues.redhat.com/browse/OCPBUGS-56714): fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller [#305](https://github.com/openshift/cluster-capi-operator/pull/305)
* [OCPBUGS-56633](https://issues.redhat.com/browse/OCPBUGS-56633): fix: watch CAPI resources in the migration controllers [#303](https://github.com/openshift/cluster-capi-operator/pull/303)
* [OCPBUGS-56722](https://issues.redhat.com/browse/OCPBUGS-56722): MachineSet deletion logic [#302](https://github.com/openshift/cluster-capi-operator/pull/302)
* [OCPBUGS-56105](https://issues.redhat.com/browse/OCPBUGS-56105), [OCPCLOUD-2893](https://issues.redhat.com/browse/OCPCLOUD-2893): Add related objects to must-gather config [#296](https://github.com/openshift/cluster-capi-operator/pull/296)
* [OCPBUGS-56055](https://issues.redhat.com/browse/OCPBUGS-56055): fix: machine: propagate non-authoritative deletion [#294](https://github.com/openshift/cluster-capi-operator/pull/294)
* [OCPBUGS-55998](https://issues.redhat.com/browse/OCPBUGS-55998): Should not use v1beta1 of the AdmissionRegistration API group [#291](https://github.com/openshift/cluster-capi-operator/pull/291)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/82bcb8005332ff1796a274fb2aecdca64260fe54...cf9e6e9bf7f28ac52ea7b2f0af6b0b80cd7c32b9)
### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/68b46d78d8f181c3707aeb0c738780a89c3c19ae)
* [OCPBUGS-60950](https://issues.redhat.com/browse/OCPBUGS-60950): Default cloud.conf if no configmap is found [#412](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/412)
* [OCPBUGS-59847](https://issues.redhat.com/browse/OCPBUGS-59847): Adds service for cloud-controller-manager [#402](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/402)
* [OCPBUGS-59847](https://issues.redhat.com/browse/OCPBUGS-59847): Update service selector to match deployment label [#401](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/401)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/e355ad389d1d09be1a83f024f54b15e844982d0a...68b46d78d8f181c3707aeb0c738780a89c3c19ae)
### [cluster-config-api](https://github.com/openshift/api/tree/93b8cc2cf247366771a42d967d836f1968418540)
* [OCPBUGS-61096](https://issues.redhat.com/browse/OCPBUGS-61096): Add default value for MachineHealthCheck's maxUnhealthy to the description [#2464](https://github.com/openshift/api/pull/2464)
* [MCO-1766](https://issues.redhat.com/browse/MCO-1766): Promote PinnedImageSets feature gate to default [#2377](https://github.com/openshift/api/pull/2377)
* [MCO-1720](https://issues.redhat.com/browse/MCO-1720): Promote MachineConfigNode feature gate to default [#2376](https://github.com/openshift/api/pull/2376)
* [CORENET-6148](https://issues.redhat.com/browse/CORENET-6148): Promote RouteAdvertisements feature gate to default feature set [#2425](https://github.com/openshift/api/pull/2425)
* [OCPBUGS-60414](https://issues.redhat.com/browse/OCPBUGS-60414): MachineOSConfig name should match MachineConfigPool [#2449](https://github.com/openshift/api/pull/2449)
* Update crd-schema.json to release 1.33 branch [#2447](https://github.com/openshift/api/pull/2447)
* [OCPBUGS-56773](https://issues.redhat.com/browse/OCPBUGS-56773): disable psa for 4.19 [#2346](https://github.com/openshift/api/pull/2346)
* [OCPBUGS-56761](https://issues.redhat.com/browse/OCPBUGS-56761): Revert v1alpha1 removal [#2345](https://github.com/openshift/api/pull/2345)
* [OCPBUGS-56407](https://issues.redhat.com/browse/OCPBUGS-56407): Fix validation for Resource field in MOSB API [#2329](https://github.com/openshift/api/pull/2329)
* [Full changelog](https://github.com/openshift/api/compare/a638ff2e96fb9fb41192e85268fdcb07c0b1ed93...93b8cc2cf247366771a42d967d836f1968418540)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/4d6a1658537e8bb4e2e0cc2370557ab6077850ee)
* [OCPBUGS-60443](https://issues.redhat.com/browse/OCPBUGS-60443): Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace [#1472](https://github.com/openshift/cluster-etcd-operator/pull/1472)
* [OCPBUGS-59802](https://issues.redhat.com/browse/OCPBUGS-59802): add missing informer syncs [#1454](https://github.com/openshift/cluster-etcd-operator/pull/1454)
* [OCPBUGS-59285](https://issues.redhat.com/browse/OCPBUGS-59285): fix ordering on bootstrap IP selection [#1446](https://github.com/openshift/cluster-etcd-operator/pull/1446)
* [OCPBUGS-45731](https://issues.redhat.com/browse/OCPBUGS-45731): Updating cluster-etcd-operator-container image to be consistent with ART for 4.19 [#1376](https://github.com/openshift/cluster-etcd-operator/pull/1376)
* [OCPBUGS-59313](https://issues.redhat.com/browse/OCPBUGS-59313): add missing ports to svc and pod spec [#1447](https://github.com/openshift/cluster-etcd-operator/pull/1447)
* [OCPBUGS-57956](https://issues.redhat.com/browse/OCPBUGS-57956): feat: update logic to list arbiter nodes [#1437](https://github.com/openshift/cluster-etcd-operator/pull/1437)
* [OCPBUGS-57490](https://issues.redhat.com/browse/OCPBUGS-57490): Comply with OCP pod standards for TNF jobs [#1434](https://github.com/openshift/cluster-etcd-operator/pull/1434)
* [OCPBUGS-56806](https://issues.redhat.com/browse/OCPBUGS-56806): increase tnf job timeouts [#1427](https://github.com/openshift/cluster-etcd-operator/pull/1427)
* [OCPBUGS-56109](https://issues.redhat.com/browse/OCPBUGS-56109): adjust alerts according to platform [#1423](https://github.com/openshift/cluster-etcd-operator/pull/1423)
* [OCPBUGS-55691](https://issues.redhat.com/browse/OCPBUGS-55691): Remove 'meta' keyword from pcs resource create command [#1420](https://github.com/openshift/cluster-etcd-operator/pull/1420)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/9091149b9060f8c45a925d8e7add781f49ba827f...4d6a1658537e8bb4e2e0cc2370557ab6077850ee)
### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/3335b120ecbae4a792373a814474aeebde58d6c2)
* [OCPBUGS-60517](https://issues.redhat.com/browse/OCPBUGS-60517): fix(azure): resolve credential caching issues around UAMI support [#1243](https://github.com/openshift/cluster-image-registry-operator/pull/1243)
* [OCPBUGS-53872](https://issues.redhat.com/browse/OCPBUGS-53872): bump github.com/golang-jwt/jwt [#1214](https://github.com/openshift/cluster-image-registry-operator/pull/1214)
* [OCPBUGS-56363](https://issues.redhat.com/browse/OCPBUGS-56363): bump golang.org/x/oauth2 [#1207](https://github.com/openshift/cluster-image-registry-operator/pull/1207)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/b04c7c121851704973a94a50e42af1425045899c...3335b120ecbae4a792373a814474aeebde58d6c2)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/ddd78734833eb45f2cd5fba677fe50e4ae9f063b)
* [NE-2102](https://issues.redhat.com/browse/NE-2102): Bump to OSSM 3.1.0 and Istio 1.26.2 [#1264](https://github.com/openshift/cluster-ingress-operator/pull/1264)
* NO-JIRA: [release-4.19] docs - correct Istio version format in ossm-overrides.md [#1255](https://github.com/openshift/cluster-ingress-operator/pull/1255)
* [OCPBUGS-60204](https://issues.redhat.com/browse/OCPBUGS-60204): Update GatewayAPI test to check if deployment has 1 or more pod [#1260](https://github.com/openshift/cluster-ingress-operator/pull/1260)
* [NE-2109](https://issues.redhat.com/browse/NE-2109): Add OSSM channel and version override annotations [#1252](https://github.com/openshift/cluster-ingress-operator/pull/1252)
* [NE-2105](https://issues.redhat.com/browse/NE-2105): desiredIstio: Enable GIE if InferencePool found [#1251](https://github.com/openshift/cluster-ingress-operator/pull/1251)
* [NE-2103](https://issues.redhat.com/browse/NE-2103): Bump to OSSM 3.0.1 and Istio 1.24.4 [#1244](https://github.com/openshift/cluster-ingress-operator/pull/1244)
* [OCPBUGS-58394](https://issues.redhat.com/browse/OCPBUGS-58394): desiredIstio: Do not enable a default PDB [#1241](https://github.com/openshift/cluster-ingress-operator/pull/1241)
* [OCPBUGS-56213](https://issues.redhat.com/browse/OCPBUGS-56213): Check capabilities before watching OLM resource [#1233](https://github.com/openshift/cluster-ingress-operator/pull/1233)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/2371120eedb27049160c70859ef9972a7599c7e3...ddd78734833eb45f2cd5fba677fe50e4ae9f063b)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/80c1fc3d81e3392ef7b056c8833185c8bdf6f599)
* [OCPBUGS-60121](https://issues.redhat.com/browse/OCPBUGS-60121): [release-4.19] Set goaway chance to 0.001 [#1887](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1887)
* [OCPBUGS-60677](https://issues.redhat.com/browse/OCPBUGS-60677): certrotation: ensure that all rotated secrets/configmaps have RefreshOnlyWhenExpired set [#1901](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1901)
* [OCPBUGS-60495](https://issues.redhat.com/browse/OCPBUGS-60495): certrotationcontroller: extend node-system-admin-signer lifetime [#1897](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1897)
* [OCPBUGS-59957](https://issues.redhat.com/browse/OCPBUGS-59957): Add missing service ports to apiserver service [#1880](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1880)
* Revert "[release-4.19] OCPBUGS-58116: certregenerationcontroller: start configInformers again" [#1867](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1867)
* [OCPBUGS-58116](https://issues.redhat.com/browse/OCPBUGS-58116): certregenerationcontroller: start configInformers again [#1861](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1861)
* [OCPBUGS-56160](https://issues.redhat.com/browse/OCPBUGS-56160): Change validity / refresh for some certs which should not be affected by dev cycle rotation change [#1841](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1841)
* [OCPBUGS-56266](https://issues.redhat.com/browse/OCPBUGS-56266): SCC: add hostmount-anyuid-v2 [#1844](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1844)
* [OCPBUGS-55709](https://issues.redhat.com/browse/OCPBUGS-55709): bump library-go to bring in updated audit policies [#1840](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1840)
* [OCPBUGS-45911](https://issues.redhat.com/browse/OCPBUGS-45911): revert dev cert rotation [#1835](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1835)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/cae310f190fccb3f0fa613de50c484afb039c098...80c1fc3d81e3392ef7b056c8833185c8bdf6f599)
### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/3dfbb67635ce056fd55c360937be9868a3cf8ad5)
* [OCPBUGS-60132](https://issues.redhat.com/browse/OCPBUGS-60132): Missing endpoint slices for open ports the operator uses [#853](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/853)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/90dc670123652d73f3fd8e5f40096bb665a917d5...3dfbb67635ce056fd55c360937be9868a3cf8ad5)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/b9fd02fe0dfee74ae25f93ed67deda8bf4529419)
* [OCPBUGS-59932](https://issues.redhat.com/browse/OCPBUGS-59932): operator: increase wait time till degraded to max 4 times 5m [#2629](https://github.com/openshift/cluster-monitoring-operator/pull/2629)
* [OCPBUGS-57185](https://issues.redhat.com/browse/OCPBUGS-57185): chore(alerts): adjust PrometheusPossibleNarrowSelectors description and add link to to-be-added runbook [#2609](https://github.com/openshift/cluster-monitoring-operator/pull/2609)
* [OCPBUGS-55737](https://issues.redhat.com/browse/OCPBUGS-55737): [release-4.19] MON-4200: disable --auto-gomemlimit for Prometheus on SNO until we can ensure it won't result in excessive CPU usage [#2597](https://github.com/openshift/cluster-monitoring-operator/pull/2597)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/55f09e4a7b188d8fe2b000911ce71d9f70b63571...b9fd02fe0dfee74ae25f93ed67deda8bf4529419)
### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/bb6470c3cfbb1ecdaf78acac340e6a307bcd5231)
* [OCPBUGS-61185](https://issues.redhat.com/browse/OCPBUGS-61185): Consume latest OCP API in 4.19 [#2790](https://github.com/openshift/cluster-network-operator/pull/2790)
* [OCPBUGS-60983](https://issues.redhat.com/browse/OCPBUGS-60983): Update CNO reviewers/approvers [#2765](https://github.com/openshift/cluster-network-operator/pull/2765)
* [OCPBUGS-60761](https://issues.redhat.com/browse/OCPBUGS-60761): Allow overriding OVN-Kubernetes configuration [#2781](https://github.com/openshift/cluster-network-operator/pull/2781)
* [OCPBUGS-60534](https://issues.redhat.com/browse/OCPBUGS-60534): Fix multus webhook match condition for spec changes [#2777](https://github.com/openshift/cluster-network-operator/pull/2777)
* [OCPBUGS-60095](https://issues.redhat.com/browse/OCPBUGS-60095): Add release version annotation to whereabouts-controller/whereabouts-token-watcher [#2762](https://github.com/openshift/cluster-network-operator/pull/2762)
* [OCPBUGS-59645](https://issues.redhat.com/browse/OCPBUGS-59645): [release-4.19] BGP related backports [#2748](https://github.com/openshift/cluster-network-operator/pull/2748)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/7bbd2653092fc383803ba98169f6ffc5be2a64d5...bb6470c3cfbb1ecdaf78acac340e6a307bcd5231)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/f1ff5dac295d07083e6c5decb80e157a9e87bcc9)
* [OCPBUGS-60796](https://issues.redhat.com/browse/OCPBUGS-60796): E2E: llc test fix: Get updated Performance profile before modifying (#1381) [#1381](https://github.com/openshift/cluster-node-tuning-operator/pull/1381)
* [OCPBUGS-59633](https://issues.redhat.com/browse/OCPBUGS-59633): E2E add test to verify guaranteed pod is running after kubelet restart (#1365) [#1365](https://github.com/openshift/cluster-node-tuning-operator/pull/1365)
* [OCPBUGS-60855](https://issues.redhat.com/browse/OCPBUGS-60855): e2e: arm: add validation tests for hugepages with 4k and 64k kernelPageSize (#1383) [#1383](https://github.com/openshift/cluster-node-tuning-operator/pull/1383)
* E2E: skip stalld test case checking sched_fifo (#1385) [#1385](https://github.com/openshift/cluster-node-tuning-operator/pull/1385)
* [OCPBUGS-52853](https://issues.redhat.com/browse/OCPBUGS-52853): Do not add iommu.passthrough to ARM by default (#1358) [#1358](https://github.com/openshift/cluster-node-tuning-operator/pull/1358)
* [OCPBUGS-58144](https://issues.redhat.com/browse/OCPBUGS-58144): E2E: Additional Functional tests for align cpus by UncoreCache Feature (#1348) [#1348](https://github.com/openshift/cluster-node-tuning-operator/pull/1348)
* [OCPBUGS-57148](https://issues.redhat.com/browse/OCPBUGS-57148): E2E: Functional tests for align cpus by UncoreCache Feature (#1336) [#1336](https://github.com/openshift/cluster-node-tuning-operator/pull/1336)
* E2E: use 4 cpus for reserved from available cpus (#1337) [#1337](https://github.com/openshift/cluster-node-tuning-operator/pull/1337)
* e2e: arm: fix ginkgo doesn't recognize kernelPageSize suite (#1334) [#1334](https://github.com/openshift/cluster-node-tuning-operator/pull/1334)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/11ba9ffeb28bc664a30e9e7c253958d41e8df972...f1ff5dac295d07083e6c5decb80e157a9e87bcc9)
### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/efb91390ee10673d8f3f16e604390bd68d361d50)
* [OCPBUGS-56825](https://issues.redhat.com/browse/OCPBUGS-56825): fix olm.maxOpenShiftVersion float parsing [#122](https://github.com/openshift/cluster-olm-operator/pull/122)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/e4917368b6a547f97a0fb411fea90de246d1417e...efb91390ee10673d8f3f16e604390bd68d361d50)
### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/975ad328d5965a4e297b5b5eb0a7098976d50b09)
* [OCPBUGS-60152](https://issues.redhat.com/browse/OCPBUGS-60152): hypershift: add app label to csdriveroperators running in HCP [#604](https://github.com/openshift/cluster-storage-operator/pull/604)
* [OCPBUGS-56253](https://issues.redhat.com/browse/OCPBUGS-56253): sync Azure File permissions with upstream docs #2 [#580](https://github.com/openshift/cluster-storage-operator/pull/580)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/cdc7ef8a7ec6af399c10606037cfb9f631dddc23...975ad328d5965a4e297b5b5eb0a7098976d50b09)
### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/f165654c6db20683b2f609561450917efe3066ff)
* [OCPBUGS-60168](https://issues.redhat.com/browse/OCPBUGS-60168): CVO protects /metrics with authorization [#1222](https://github.com/openshift/cluster-version-operator/pull/1222)
* [OCPBUGS-56771](https://issues.redhat.com/browse/OCPBUGS-56771): Fix ImplicitlyEnabledCapabilities [#1199](https://github.com/openshift/cluster-version-operator/pull/1199)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/9de00ba8fb8330b3a1b440396dc2c5dbe974119b...f165654c6db20683b2f609561450917efe3066ff)
### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/a2a48a3a767fdb70644c65ab863bd4fc125987d2)
* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#68](https://github.com/openshift/configmap-reload/pull/68)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/2438d7c8e495201361d87da205649bc38fc4822b...a2a48a3a767fdb70644c65ab863bd4fc125987d2)
### [console](https://github.com/openshift/console/tree/98aa524f3d164a91250447fb4c7e5dd341687da7)
* NO-JIRA: Update CHANGELOG in relation to 4.18 plugin SDK package publish [#15457](https://github.com/openshift/console/pull/15457)
* [OCPBUGS-60420](https://issues.redhat.com/browse/OCPBUGS-60420): QuickStarts Link buttons to other quickstarts are duplicate [#15391](https://github.com/openshift/console/pull/15391)
* [OCPBUGS-50571](https://issues.redhat.com/browse/OCPBUGS-50571): Make sure CSP violations are only reported to telemetry once per day per browser [#15366](https://github.com/openshift/console/pull/15366)
* [OCPBUGS-60279](https://issues.redhat.com/browse/OCPBUGS-60279): Remove ancient `X-XSS-Protection` header [#15381](https://github.com/openshift/console/pull/15381)
* [OCPBUGS-60038](https://issues.redhat.com/browse/OCPBUGS-60038): Resolving API Version Conflicts in Tekton Pipeline Runs [#15354](https://github.com/openshift/console/pull/15354)
* [OCPBUGS-60294](https://issues.redhat.com/browse/OCPBUGS-60294): OpenShift Console's "Start Job" action overrides configured "backoffLimit" to "6" [#15382](https://github.com/openshift/console/pull/15382)
* NO-JIRA: Update CHANGELOG for latest 4.19 plugin SDK package publish [#15406](https://github.com/openshift/console/pull/15406)
* [OCPBUGS-60039](https://issues.redhat.com/browse/OCPBUGS-60039): Fix i18n string for event stream (again) [#15388](https://github.com/openshift/console/pull/15388)
* [OCPBUGS-60039](https://issues.redhat.com/browse/OCPBUGS-60039): Fix i18n string for event stream [#15355](https://github.com/openshift/console/pull/15355)
* [OCPBUGS-56651](https://issues.redhat.com/browse/OCPBUGS-56651): Recognize Detached BMH status [#15083](https://github.com/openshift/console/pull/15083)
* [OCPBUGS-58214](https://issues.redhat.com/browse/OCPBUGS-58214): Incorrect i18n translations in 4.19 batch [#15218](https://github.com/openshift/console/pull/15218)
* [OCPBUGS-59790](https://issues.redhat.com/browse/OCPBUGS-59790): Move alertmanager settings route [#15331](https://github.com/openshift/console/pull/15331)
* [OCPBUGS-59639](https://issues.redhat.com/browse/OCPBUGS-59639): Fixing no resources found message can not be shown completely [#15320](https://github.com/openshift/console/pull/15320)
* [OCPBUGS-59810](https://issues.redhat.com/browse/OCPBUGS-59810): Default name is comprised of '-' on 'Add to favorites' page when language is Korean/Japanese/Chinese. [#15333](https://github.com/openshift/console/pull/15333)
* [OCPBUGS-56280](https://issues.redhat.com/browse/OCPBUGS-56280): Follow-on fix. Add new "plugins-order" flag to bridge cli args [#15168](https://github.com/openshift/console/pull/15168)
* [OCPBUGS-59199](https://issues.redhat.com/browse/OCPBUGS-59199): Deleted objects remain in favorites and cause 404 errors [#15267](https://github.com/openshift/console/pull/15267)
* [OCPBUGS-59557](https://issues.redhat.com/browse/OCPBUGS-59557): add data-test attrs to console plugins table [#15305](https://github.com/openshift/console/pull/15305)
* [OCPBUGS-59513](https://issues.redhat.com/browse/OCPBUGS-59513): Update model flags when plugins load [#15298](https://github.com/openshift/console/pull/15298)
* [OCPBUGS-58331](https://issues.redhat.com/browse/OCPBUGS-58331): change '/metrics/usage' endpoint to '/api/metrics/usage' [#15273](https://github.com/openshift/console/pull/15273)
* [OCPBUGS-58433](https://issues.redhat.com/browse/OCPBUGS-58433): Add the Origin header to the HeaderBlacklist in the co… [#15246](https://github.com/openshift/console/pull/15246)
* [OCPBUGS-59315](https://issues.redhat.com/browse/OCPBUGS-59315): Not able to launch terminal window from OCP web console due to console plugin conflicts [#15280](https://github.com/openshift/console/pull/15280)
* [OCPBUGS-58217](https://issues.redhat.com/browse/OCPBUGS-58217): fix missing form styles in Create PVC page + Clone PVC… [#15260](https://github.com/openshift/console/pull/15260)
* [OCPBUGS-58183](https://issues.redhat.com/browse/OCPBUGS-58183): ContainerResource metric data for HPAs isn't visible i… [#15213](https://github.com/openshift/console/pull/15213)
* [OCPBUGS-58316](https://issues.redhat.com/browse/OCPBUGS-58316): Implement sessions in openshift authenticator [#15234](https://github.com/openshift/console/pull/15234)
* [OCPBUGS-58375](https://issues.redhat.com/browse/OCPBUGS-58375): fix bug where / in console.tab/horizontalNav href breaks navigation [#15239](https://github.com/openshift/console/pull/15239)
* [OCPBUGS-58377](https://issues.redhat.com/browse/OCPBUGS-58377): fix runtime error when editing HPA using the form [#15240](https://github.com/openshift/console/pull/15240)
* [OCPBUGS-58090](https://issues.redhat.com/browse/OCPBUGS-58090): Cannot read properties of undefined (reading 'node-role.kubernetes.io/master') error while accessing node logs from console [#15204](https://github.com/openshift/console/pull/15204)
* NO-JIRA: Update Console plugin SDK changelogs [#15212](https://github.com/openshift/console/pull/15212)
* [OCPBUGS-57390](https://issues.redhat.com/browse/OCPBUGS-57390): i18n upload/download routine task - Sprint 270 [#15175](https://github.com/openshift/console/pull/15175)
* [OCPBUGS-57755](https://issues.redhat.com/browse/OCPBUGS-57755): Add the ability to launch multiple modals with useModal hook [#15189](https://github.com/openshift/console/pull/15189)
* [OCPBUGS-57113](https://issues.redhat.com/browse/OCPBUGS-57113): Cannot read properties of undefined (reading 'filter') error while accessing nodes from console. [#15180](https://github.com/openshift/console/pull/15180)
* [OCPBUGS-57391](https://issues.redhat.com/browse/OCPBUGS-57391): OpenShift console PVC clone cannot use B as the unit [#15176](https://github.com/openshift/console/pull/15176)
* [OCPBUGS-57384](https://issues.redhat.com/browse/OCPBUGS-57384): Update vSphere configuration form to support CM YAML f… [#15174](https://github.com/openshift/console/pull/15174)
* [OCPBUGS-56950](https://issues.redhat.com/browse/OCPBUGS-56950): UI for search by label is distorted in topology [#15111](https://github.com/openshift/console/pull/15111)
* [OCPBUGS-56841](https://issues.redhat.com/browse/OCPBUGS-56841): Fix TypeError Cannot read properties of null (reading 'metadata') [#15100](https://github.com/openshift/console/pull/15100)
* [OCPBUGS-56779](https://issues.redhat.com/browse/OCPBUGS-56779): Fix and enable web terminal tests [#15097](https://github.com/openshift/console/pull/15097)
* [OCPBUGS-55928](https://issues.redhat.com/browse/OCPBUGS-55928): Improving the DevExp for passing the CSP directives to console per flag [#15076](https://github.com/openshift/console/pull/15076)
* [OCPBUGS-56693](https://issues.redhat.com/browse/OCPBUGS-56693): Expose PodRingSet via Dynamic Plugin SDK [#15086](https://github.com/openshift/console/pull/15086)
* [OCPBUGS-57180](https://issues.redhat.com/browse/OCPBUGS-57180): Fix '/metrics' endpoint token review to handle interna… [#15152](https://github.com/openshift/console/pull/15152)
* [OCPBUGS-57207](https://issues.redhat.com/browse/OCPBUGS-57207): Getting "Oh no something went wrong" error message in web console. [#15159](https://github.com/openshift/console/pull/15159)
* [OCPBUGS-57319](https://issues.redhat.com/browse/OCPBUGS-57319): Add Select project field in import forms [#15171](https://github.com/openshift/console/pull/15171)
* [OCPBUGS-57110](https://issues.redhat.com/browse/OCPBUGS-57110): fix VirtualizedTable runtime error if sortColumn is no… [#15140](https://github.com/openshift/console/pull/15140)
* [OCPBUGS-57105](https://issues.redhat.com/browse/OCPBUGS-57105): Fix runtime error when navigating alert actions [#15138](https://github.com/openshift/console/pull/15138)
* [OCPBUGS-56470](https://issues.redhat.com/browse/OCPBUGS-56470): fix bug where AlertItem is missing info icon [#15071](https://github.com/openshift/console/pull/15071)
* [OCPBUGS-57200](https://issues.redhat.com/browse/OCPBUGS-57200): Opening Edit Secret modal and saving without changes throws error [#15157](https://github.com/openshift/console/pull/15157)
* [OCPBUGS-56764](https://issues.redhat.com/browse/OCPBUGS-56764): Fix regression with drawers and modals [#15094](https://github.com/openshift/console/pull/15094)
* [OCPBUGS-56475](https://issues.redhat.com/browse/OCPBUGS-56475): Enable pipeline tests by installing operator version 1.17 [#15073](https://github.com/openshift/console/pull/15073)
* [OCPBUGS-56882](https://issues.redhat.com/browse/OCPBUGS-56882): Add initialization link annotation support to csv anno… [#15104](https://github.com/openshift/console/pull/15104)
* [OCPBUGS-57183](https://issues.redhat.com/browse/OCPBUGS-57183): clarify verbiage for Lightspeed hide button [#15151](https://github.com/openshift/console/pull/15151)
* [OCPBUGS-57054](https://issues.redhat.com/browse/OCPBUGS-57054): Should show default OpenShift Logo for a theme when there is not custom logo set for the theme. [#15123](https://github.com/openshift/console/pull/15123)
* [OCPBUGS-57128](https://issues.redhat.com/browse/OCPBUGS-57128): HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling [#15145](https://github.com/openshift/console/pull/15145)
* [OCPBUGS-56885](https://issues.redhat.com/browse/OCPBUGS-56885): Helm resource list error in console [#15105](https://github.com/openshift/console/pull/15105)
* [OCPBUGS-56888](https://issues.redhat.com/browse/OCPBUGS-56888): Add flags in console static plugin for all the components of this epic [#15106](https://github.com/openshift/console/pull/15106)
* [OCPBUGS-56837](https://issues.redhat.com/browse/OCPBUGS-56837): Added developer getting started card in Admin project overview page [#15098](https://github.com/openshift/console/pull/15098)
* [OCPBUGS-56987](https://issues.redhat.com/browse/OCPBUGS-56987): fix bug where Roles list was displaying invalid data f… [#15120](https://github.com/openshift/console/pull/15120)
* [OCPBUGS-56775](https://issues.redhat.com/browse/OCPBUGS-56775): Layout of Welcome to the new OpenShift experience! buttons is wonky on mobile [#15096](https://github.com/openshift/console/pull/15096)
* [OCPBUGS-56149](https://issues.redhat.com/browse/OCPBUGS-56149): Refactor Kebab+ActionsMenu to use PF [#15051](https://github.com/openshift/console/pull/15051)
* [OCPBUGS-56413](https://issues.redhat.com/browse/OCPBUGS-56413): [knative] Self-provisioner user can not access or create event sources via ODC [#15067](https://github.com/openshift/console/pull/15067)
* [OCPBUGS-55941](https://issues.redhat.com/browse/OCPBUGS-55941), [OCPBUGS-56107](https://issues.redhat.com/browse/OCPBUGS-56107): get `go mod tidy` to pass, bump Console Helm dependencies to 3.17.3 [#15032](https://github.com/openshift/console/pull/15032)
* [OCPBUGS-56362](https://issues.redhat.com/browse/OCPBUGS-56362): improve description of the custom logos CLI args [#15061](https://github.com/openshift/console/pull/15061)
* [OCPBUGS-55979](https://issues.redhat.com/browse/OCPBUGS-55979): fix alignment of Getting Started item icons [#15040](https://github.com/openshift/console/pull/15040)
* [OCPBUGS-55929](https://issues.redhat.com/browse/OCPBUGS-55929): Sample segment sessions [#15031](https://github.com/openshift/console/pull/15031)
* NO-JIRA: Update plugin SDK docs [#15074](https://github.com/openshift/console/pull/15074)
* [OCPBUGS-55987](https://issues.redhat.com/browse/OCPBUGS-55987): Fix impersonate group action [#15041](https://github.com/openshift/console/pull/15041)
* [OCPBUGS-55976](https://issues.redhat.com/browse/OCPBUGS-55976): Add patternfly/react-topology to shared modules list of dynamic plugin sdk [#15039](https://github.com/openshift/console/pull/15039)
* [OCPBUGS-56077](https://issues.redhat.com/browse/OCPBUGS-56077): remove 60 day alert from cluster update modal [#15047](https://github.com/openshift/console/pull/15047)
* [OCPBUGS-55972](https://issues.redhat.com/browse/OCPBUGS-55972): Wrap ListPageHeader action with a div [#15038](https://github.com/openshift/console/pull/15038)
* [OCPBUGS-55961](https://issues.redhat.com/browse/OCPBUGS-55961): resolve http Context and Client handling [#15036](https://github.com/openshift/console/pull/15036)
* [OCPBUGS-55959](https://issues.redhat.com/browse/OCPBUGS-55959): add data-quickstart-id to quick create button [#15034](https://github.com/openshift/console/pull/15034)
* [OCPBUGS-55702](https://issues.redhat.com/browse/OCPBUGS-55702): fix bug where Critical Alerts section cannot be collapsed [#15018](https://github.com/openshift/console/pull/15018)
* [OCPBUGS-55814](https://issues.redhat.com/browse/OCPBUGS-55814): Add DEVCONSOLE_PROXY flag [#15027](https://github.com/openshift/console/pull/15027)
* [Full changelog](https://github.com/openshift/console/compare/9f35a5e8ea62a650ecae66fd83805a5b185d3f48...98aa524f3d164a91250447fb4c7e5dd341687da7)
### [console-operator](https://github.com/openshift/console-operator/tree/43183002057ff8e97ff210b1af94f5d0b2d24cd9)
* [OCPBUGS-61119](https://issues.redhat.com/browse/OCPBUGS-61119): Consolidate telemetry values oscilation [#1037](https://github.com/openshift/console-operator/pull/1037)
* [OCPBUGS-59488](https://issues.redhat.com/browse/OCPBUGS-59488): Update downloads deployment configuration to use master node selector [#1016](https://github.com/openshift/console-operator/pull/1016)
* [OCPBUGS-59618](https://issues.redhat.com/browse/OCPBUGS-59618): Fetch synced CM for the CertificateAuthority issuer + Wire synced OIDC Auth CM to Console [#1028](https://github.com/openshift/console-operator/pull/1028)
* [OCPBUGS-56280](https://issues.redhat.com/browse/OCPBUGS-56280): Add plugins order to console config [#988](https://github.com/openshift/console-operator/pull/988)
* [OCPBUGS-56761](https://issues.redhat.com/browse/OCPBUGS-56761): Revert v1alpha1 removal [#991](https://github.com/openshift/console-operator/pull/991)
* [OCPBUGS-55716](https://issues.redhat.com/browse/OCPBUGS-55716): Fix issue where console operator orphans custom logo configmaps in openshift-console namespace [#985](https://github.com/openshift/console-operator/pull/985)
* [OCPBUGS-55842](https://issues.redhat.com/browse/OCPBUGS-55842): Lift FeatureGate by bumping openshift/api [#986](https://github.com/openshift/console-operator/pull/986)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console-operator/compare/9aa65fe9e7f92cb1f8d1918f13dc3630aa3a7f74...43183002057ff8e97ff210b1af94f5d0b2d24cd9)
### [coredns](https://github.com/openshift/coredns/tree/4f64931403bf747b78bccb40ad877b08da534e23)
* [OCPBUGS-60246](https://issues.redhat.com/browse/OCPBUGS-60246): UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy [#148](https://github.com/openshift/coredns/pull/148)
* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#133](https://github.com/openshift/coredns/pull/133)
* [Full changelog](https://github.com/openshift/coredns/compare/6f39336e6da9dc77b2db140a96773c413d50a665...4f64931403bf747b78bccb40ad877b08da534e23)
### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/d9b2461604dba3821d3c044843e428645f925734)
* [OCPBUGS-58834](https://issues.redhat.com/browse/OCPBUGS-58834): CARRY: don't ignore json files [#338](https://github.com/openshift/cloud-provider-openstack/pull/338)
* [OCPBUGS-57799](https://issues.redhat.com/browse/OCPBUGS-57799): Rebase release-4.19 onto release-1.31 [#331](https://github.com/openshift/cloud-provider-openstack/pull/331)
* [OCPBUGS-56027](https://issues.redhat.com/browse/OCPBUGS-56027): [cinder-csi-plugin] Don't report topology capability when --with-topology=False [#323](https://github.com/openshift/cloud-provider-openstack/pull/323)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/c4fe3e8ad29e58f081f3883de0893c2025a097b2...d9b2461604dba3821d3c044843e428645f925734)
### [docker-builder](https://github.com/openshift/builder/tree/28622dd3fdd350a440576f6c9a867fd8296bde0f)
* [OCPBUGS-57173](https://issues.redhat.com/browse/OCPBUGS-57173): S2I build cpu limits observed by assemble are limited to 1 cpu [#471](https://github.com/openshift/builder/pull/471)
* [Full changelog](https://github.com/openshift/builder/compare/ff595e4bbf5301039fc62f0cdd7b5610605f633e...28622dd3fdd350a440576f6c9a867fd8296bde0f)
### [docker-registry](https://github.com/openshift/image-registry/tree/b1d09765386d98825e92d8759767a53849d82e9a)
* [OCPBUGS-53656](https://issues.redhat.com/browse/OCPBUGS-53656): bump jwt and oauth dependencies [#429](https://github.com/openshift/image-registry/pull/429)
* [Full changelog](https://github.com/openshift/image-registry/compare/887533765ee92e061fd44ad0b032aefd5b9b4e3c...b1d09765386d98825e92d8759767a53849d82e9a)
### [etcd](https://github.com/openshift/etcd/tree/eb0acd5c92a830da18d7d0d789f7a8ecac860620)
* [OCPBUGS-61041](https://issues.redhat.com/browse/OCPBUGS-61041): Revert "OCPBUGS-52181: Ensure cluster id changes during force-new-cluster" [#340](https://github.com/openshift/etcd/pull/340)
* [Full changelog](https://github.com/openshift/etcd/compare/9c065d4d842c8de57806426c13201413b4d595e2...eb0acd5c92a830da18d7d0d789f7a8ecac860620)
### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/c8b865a1c4045a3b62dbf5ffea514f2c62d893f8)
* [OCPBUGS-56962](https://issues.redhat.com/browse/OCPBUGS-56962): [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 [#243](https://github.com/openshift/cluster-api-provider-gcp/pull/243)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/65539c71b4c292fc0f4eeb572dfe490af63063d9...c8b865a1c4045a3b62dbf5ffea514f2c62d893f8)
### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/4fd69cf5c0b71fb477271c69d6ddd4b276b18092)
* [OCPBUGS-59386](https://issues.redhat.com/browse/OCPBUGS-59386): Add max-concurrent-reconciles flag to machine actuator [#125](https://github.com/openshift/machine-api-provider-gcp/pull/125)
* [OCPBUGS-56924](https://issues.redhat.com/browse/OCPBUGS-56924): allow instances with unknown quotas to be created [#119](https://github.com/openshift/machine-api-provider-gcp/pull/119)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/01515888c83526ec235b7bc3a27df6eba3034b00...4fd69cf5c0b71fb477271c69d6ddd4b276b18092)
### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/063b256caae5fbe3b6f2a5b1c35339220c7b4188)
* [OCPBUGS-59749](https://issues.redhat.com/browse/OCPBUGS-59749): 4.19: UPSTREAM: 2116: Remove check on snapshot create support for multi-writer HyperDisk-HA and let such validations occur at the PD control plane layer [#80](https://github.com/openshift/gcp-pd-csi-driver/pull/80)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/500ab5d31ad382805070c8ae329a9a34163ebc99...063b256caae5fbe3b6f2a5b1c35339220c7b4188)
### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/b5229e8311fe15cd8e9a70de2279868726b19f84)
* [OCPBUGS-60510](https://issues.redhat.com/browse/OCPBUGS-60510): Unrevert bump to v1.32.8 [#2439](https://github.com/openshift/kubernetes/pull/2439)
* [OCPBUGS-61021](https://issues.redhat.com/browse/OCPBUGS-61021): UPSTREAM: <carry>: Revert "Rebase v1.32.8 to 4.19" [#2433](https://github.com/openshift/kubernetes/pull/2433)
* [OCPBUGS-60510](https://issues.redhat.com/browse/OCPBUGS-60510): Rebase v1.32.8 to 4.19 [#2412](https://github.com/openshift/kubernetes/pull/2412)
* [OCPBUGS-60074](https://issues.redhat.com/browse/OCPBUGS-60074): UPSTREAM: 132028: podresources: list: use active pods [#2391](https://github.com/openshift/kubernetes/pull/2391)
* [OCPBUGS-59534](https://issues.redhat.com/browse/OCPBUGS-59534): Rebase v1.32.7 to 4.19 [#2367](https://github.com/openshift/kubernetes/pull/2367)
* [OCPBUGS-57886](https://issues.redhat.com/browse/OCPBUGS-57886): Bump 4.19 1.32.6 [#2340](https://github.com/openshift/kubernetes/pull/2340)
* NO-JIRA: UPSTREAM: <carry>: Update rebase.sh to handle go versions major.minor.patch [#2341](https://github.com/openshift/kubernetes/pull/2341)
* [OCPBUGS-58175](https://issues.redhat.com/browse/OCPBUGS-58175): Fix flake caused by invalid detection of active policies in VAP integration tests [#2347](https://github.com/openshift/kubernetes/pull/2347)
* [OCPBUGS-55937](https://issues.redhat.com/browse/OCPBUGS-55937): UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated. [#2290](https://github.com/openshift/kubernetes/pull/2290)
* [OCPBUGS-56082](https://issues.redhat.com/browse/OCPBUGS-56082): UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver [#2297](https://github.com/openshift/kubernetes/pull/2297)
* [OCPBUGS-56437](https://issues.redhat.com/browse/OCPBUGS-56437): Bump 4.19 1.32.5 [#2304](https://github.com/openshift/kubernetes/pull/2304)
* [OCPBUGS-56256](https://issues.redhat.com/browse/OCPBUGS-56256): UPSTREAM: 131495: Handle unsupported node expansion for RWX volumes [#2302](https://github.com/openshift/kubernetes/pull/2302)
* [OCPBUGS-56193](https://issues.redhat.com/browse/OCPBUGS-56193): UPSTREAM: 131236: RWX tests should create RWX volumes [#2301](https://github.com/openshift/kubernetes/pull/2301)
* [OCPBUGS-55895](https://issues.redhat.com/browse/OCPBUGS-55895): Fix node expansion on older kubelets [#2289](https://github.com/openshift/kubernetes/pull/2289)
* [OCPBUGS-55265](https://issues.redhat.com/browse/OCPBUGS-55265): Bump 1.32.4 [#2275](https://github.com/openshift/kubernetes/pull/2275)
* [Full changelog](https://github.com/openshift/kubernetes/compare/a237dcbeee8bbe1440c94349399cc6eac8870910...b5229e8311fe15cd8e9a70de2279868726b19f84)
### [hypershift](https://github.com/openshift/hypershift/tree/edfa49d7396105759a6019f6ce16be00331c6440)
* [OCPBUGS-61031](https://issues.redhat.com/browse/OCPBUGS-61031): [release-4.19]: set default goaway-chance to 0.001 [#6712](https://github.com/openshift/hypershift/pull/6712)
* [OCPBUGS-60483](https://issues.redhat.com/browse/OCPBUGS-60483): feat(validations): add wildcard support to DNS SAN conflict detection [#6648](https://github.com/openshift/hypershift/pull/6648)
* [OCPBUGS-60147](https://issues.redhat.com/browse/OCPBUGS-60147): Always compress and encode payload in token secret for inplace upgrades [#6606](https://github.com/openshift/hypershift/pull/6606)
* [OCPBUGS-60152](https://issues.redhat.com/browse/OCPBUGS-60152): add missing app label to some components [#6636](https://github.com/openshift/hypershift/pull/6636)
* [OCPBUGS-60125](https://issues.redhat.com/browse/OCPBUGS-60125): fix(OCPBUGS-60125): Allow HCCO to set registry managementState to Removed; delete VAP during HC deletion [#6689](https://github.com/openshift/hypershift/pull/6689)
* [OCPBUGS-60648](https://issues.redhat.com/browse/OCPBUGS-60648): Cache Azure KMS TokenCredential for ARO HCP and clarify CPO credentials cache naming [#6677](https://github.com/openshift/hypershift/pull/6677)
* [OCPBUGS-60100](https://issues.redhat.com/browse/OCPBUGS-60100): fix: add dynamic security context uid to 4.19 missing components [#6675](https://github.com/openshift/hypershift/pull/6675)
* [OCPBUGS-57141](https://issues.redhat.com/browse/OCPBUGS-57141): HCP payload doesn't respect multiple mirrors [#6517](https://github.com/openshift/hypershift/pull/6517)
* [CNTRLPLANE-1270](https://issues.redhat.com/browse/CNTRLPLANE-1270): Red Hat Konflux update control-plane-operator-4-19 [#6660](https://github.com/openshift/hypershift/pull/6660)
* Red Hat Konflux purge control-plane-operator-4-19 [#6659](https://github.com/openshift/hypershift/pull/6659)
* [CNTRLPLANE-1267](https://issues.redhat.com/browse/CNTRLPLANE-1267): conditional builds for mce-2.9 [#6657](https://github.com/openshift/hypershift/pull/6657)
* [OCPBUGS-57588](https://issues.redhat.com/browse/OCPBUGS-57588): Update PSA from v1beta1 to v1 [#6302](https://github.com/openshift/hypershift/pull/6302)
* [OCPBUGS-59805](https://issues.redhat.com/browse/OCPBUGS-59805): Router publish strategy related changes for IBM Cloud platform [#6490](https://github.com/openshift/hypershift/pull/6490)
* [OCPBUGS-59933](https://issues.redhat.com/browse/OCPBUGS-59933): Use the image reference for the cache in the image metadata provider [#6535](https://github.com/openshift/hypershift/pull/6535)
* [CNTRLPLANE-1016](https://issues.redhat.com/browse/CNTRLPLANE-1016): Support day2 tags changes for AWS default SecurityGroup [#6455](https://github.com/openshift/hypershift/pull/6455)
* [CNTRLPLANE-1034](https://issues.redhat.com/browse/CNTRLPLANE-1034): chore: Relax the kas healthcheck for aro when AllowedCIDRBlocks [#6617](https://github.com/openshift/hypershift/pull/6617)
* [OCPBUGS-60100](https://issues.redhat.com/browse/OCPBUGS-60100): feat: let ARO honour cp namespace annotation for default SC uids in 4.19 [#6592](https://github.com/openshift/hypershift/pull/6592)
* [CNTRLPLANE-1226](https://issues.redhat.com/browse/CNTRLPLANE-1226): feat(konflux): Make CPO builds hermetic [#6596](https://github.com/openshift/hypershift/pull/6596)
* [CNTRLPLANE-1213](https://issues.redhat.com/browse/CNTRLPLANE-1213): New API to support specifying cluster-autoscaler flags [#6558](https://github.com/openshift/hypershift/pull/6558)
* [OCPBUGS-57331](https://issues.redhat.com/browse/OCPBUGS-57331): Set default security context on everything [#6257](https://github.com/openshift/hypershift/pull/6257)
* [OCPSTRAT-2173](https://issues.redhat.com/browse/OCPSTRAT-2173): feat(hcco): add support for hosted OIDC client secrets [#6525](https://github.com/openshift/hypershift/pull/6525)
* [OCPBUGS-58300](https://issues.redhat.com/browse/OCPBUGS-58300): remove annotation is not working [#6465](https://github.com/openshift/hypershift/pull/6465)
* [CNTRLPLANE-1189](https://issues.redhat.com/browse/CNTRLPLANE-1189): Global PullSecret daemonSet implementation [#6507](https://github.com/openshift/hypershift/pull/6507)
* NO-JIRA: fix: set terminationMessagePolicy to FallbackToLogsOnError for olm-collect-profiles [#6493](https://github.com/openshift/hypershift/pull/6493)
* [CNTRLPLANE-1034](https://issues.redhat.com/browse/CNTRLPLANE-1034): sharedingress: Add support for kube-apiserver whitelist CIDRs [#6502](https://github.com/openshift/hypershift/pull/6502)
* [OCPBUGS-58683](https://issues.redhat.com/browse/OCPBUGS-58683): fix(hcco): Don't use a default OIDC client secret name when no secret name is provided [#6398](https://github.com/openshift/hypershift/pull/6398)
* [OCPBUGS-59674](https://issues.redhat.com/browse/OCPBUGS-59674): Initial Changes to Support Self-managed Azure [#6481](https://github.com/openshift/hypershift/pull/6481)
* [OCPBUGS-59547](https://issues.redhat.com/browse/OCPBUGS-59547): Remove code associated with Managed Identity v2 for ARO HCP for 4.19 [#6459](https://github.com/openshift/hypershift/pull/6459)
* [OCPBUGS-59493](https://issues.redhat.com/browse/OCPBUGS-59493): Remove unused jq and rsync rpms [#6457](https://github.com/openshift/hypershift/pull/6457)
* [OCPBUGS-59101](https://issues.redhat.com/browse/OCPBUGS-59101): Configure ClusterServiceLoadBalancerHea… [#6409](https://github.com/openshift/hypershift/pull/6409)
* NO-JIRA: chore(deps): update konflux references [#6383](https://github.com/openshift/hypershift/pull/6383)
* NO-JIRA: [release-4.19] CNTRLPLANE-1042: Disable createClusterNone for azure and scope down verifyResourceGroupLocationsMatch check [#6392](https://github.com/openshift/hypershift/pull/6392)
* [OCPBUGS-57660](https://issues.redhat.com/browse/OCPBUGS-57660): [release-4.19] CORENET-6094: CNO: add FRR-k8s image [#6374](https://github.com/openshift/hypershift/pull/6374)
* [OCPBUGS-58335](https://issues.redhat.com/browse/OCPBUGS-58335): Support proxy authentication when user/pass is included in URL [#6370](https://github.com/openshift/hypershift/pull/6370)
* [CNTRLPLANE-1044](https://issues.redhat.com/browse/CNTRLPLANE-1044): chore(deps): update konflux references [#6342](https://github.com/openshift/hypershift/pull/6342)
* [ACM-21713](https://issues.redhat.com/browse/ACM-21713): adding .git in .dockerignore to fix version info [#6318](https://github.com/openshift/hypershift/pull/6318)
* [CNV-61396](https://issues.redhat.com/browse/CNV-61396): Sync RBAC for expansion support in kubevirt CSI driver [#6255](https://github.com/openshift/hypershift/pull/6255)
* [CNTRLPLANE-374](https://issues.redhat.com/browse/CNTRLPLANE-374): hcco: handle post-install creation of OIDC client secrets [#6296](https://github.com/openshift/hypershift/pull/6296)
* [OCPBUGS-57485](https://issues.redhat.com/browse/OCPBUGS-57485): Don't use /version for haproxy health checks [#6292](https://github.com/openshift/hypershift/pull/6292)
* chore(deps): update konflux references [#6189](https://github.com/openshift/hypershift/pull/6189)
* ACM-21734 Fixing Konflux EC violations [#6303](https://github.com/openshift/hypershift/pull/6303)
* NO-JIRA: cpov1: set TerminationMessagePolicy on oas-trust-anchor-generator [#6295](https://github.com/openshift/hypershift/pull/6295)
* [OCPBUGS-57299](https://issues.redhat.com/browse/OCPBUGS-57299): Reuse hosted cluster release and metadata providers [#6250](https://github.com/openshift/hypershift/pull/6250)
* [OCPBUGS-56930](https://issues.redhat.com/browse/OCPBUGS-56930): cpov1: set terminationMessagePolicy to FallbackToLogsOnError for all HCP containers [#6245](https://github.com/openshift/hypershift/pull/6245)
* [ARO-15626](https://issues.redhat.com/browse/ARO-15626): Disallow users from setting .spec.managementState to Removed in the image registry operator config on Azure [#6233](https://github.com/openshift/hypershift/pull/6233)
* [OCPBUGS-56792](https://issues.redhat.com/browse/OCPBUGS-56792): Fix CatalogSource image check when unauthorized [#6198](https://github.com/openshift/hypershift/pull/6198)
* [OCPBUGS-56910](https://issues.redhat.com/browse/OCPBUGS-56910): util/version: Add Version420 [#6215](https://github.com/openshift/hypershift/pull/6215)
* [OCPBUGS-56910](https://issues.redhat.com/browse/OCPBUGS-56910): Move EnsurePSANotPrivileged to AtLeast(t, Version420) [#6212](https://github.com/openshift/hypershift/pull/6212)
* [CNTRLPLANE-831](https://issues.redhat.com/browse/CNTRLPLANE-831): feat(konflux): add arm64 builds to cpo pipeline [#6182](https://github.com/openshift/hypershift/pull/6182)
* [OCPBUGS-56777](https://issues.redhat.com/browse/OCPBUGS-56777): Disable PSA enforcement in 4.19 hosted cluster [#6201](https://github.com/openshift/hypershift/pull/6201)
* [OCPBUGS-56458](https://issues.redhat.com/browse/OCPBUGS-56458): switch termination message policy to TerminationMessageFallbackToLogsOnError for debugability [#6170](https://github.com/openshift/hypershift/pull/6170)
* [OCPBUGS-56562](https://issues.redhat.com/browse/OCPBUGS-56562): Do not validate OCP API Server SANS if PKI reconciliation is disabled [#6178](https://github.com/openshift/hypershift/pull/6178)
* [CNTRLPLANE-831](https://issues.redhat.com/browse/CNTRLPLANE-831): Red Had Konflux control-plane-operator-4-19 intial pipeline [#6181](https://github.com/openshift/hypershift/pull/6181)
* [CNTRLPLANE-916](https://issues.redhat.com/browse/CNTRLPLANE-916): Konflux build pipeline service account migration [#6089](https://github.com/openshift/hypershift/pull/6089)
* [CNTRLPLANE-915](https://issues.redhat.com/browse/CNTRLPLANE-915): chore(deps): update konflux references [#6139](https://github.com/openshift/hypershift/pull/6139)
* [OCPBUGS-55789](https://issues.redhat.com/browse/OCPBUGS-55789): [release-4.19] Update KAS structured authentication configuration logic to use new uid and extras fields [#6121](https://github.com/openshift/hypershift/pull/6121)
* [OCPBUGS-56036](https://issues.redhat.com/browse/OCPBUGS-56036): add multi-arch build for MCE 2.9 [#6145](https://github.com/openshift/hypershift/pull/6145)
* [OCPBUGS-55693](https://issues.redhat.com/browse/OCPBUGS-55693): Add support for registry root entry only in the IDMS/ICSP [#6131](https://github.com/openshift/hypershift/pull/6131)
* [OCPBUGS-55927](https://issues.redhat.com/browse/OCPBUGS-55927): Fix Konflux enterprise contract violations [#6126](https://github.com/openshift/hypershift/pull/6126)
* [OCPBUGS-55749](https://issues.redhat.com/browse/OCPBUGS-55749): Fix mce-2.9 konflux pipelines [#6117](https://github.com/openshift/hypershift/pull/6117)
* Red Hat Konflux update hypershift-cli-mce-29 [#6104](https://github.com/openshift/hypershift/pull/6104)
* [Full changelog](https://github.com/openshift/hypershift/compare/6bbea9f1f8eb84f33ef3a667a59498991beb064f...edfa49d7396105759a6019f6ce16be00331c6440)
### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/940ac1c27e5548f738219b8c2ea4d1b6924e60e5)
* [OCPBUGS-52542](https://issues.redhat.com/browse/OCPBUGS-52542): CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork [#118](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/118)
* [OCPBUGS-56962](https://issues.redhat.com/browse/OCPBUGS-56962): [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 [#115](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/115)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/8b6396a4c78f4791b7f3c5ec404a78b499f8546b...940ac1c27e5548f738219b8c2ea4d1b6924e60e5)
### [insights-operator](https://github.com/openshift/insights-operator/tree/e4df617aa9b4b586e21afcd4b92270ab52392461)
* [OCPBUGS-61485](https://issues.redhat.com/browse/OCPBUGS-61485): virt launcher logs gatherer (#1132) [#1132](https://github.com/openshift/insights-operator/pull/1132)
* feat: add permissions to gather clusterrole (#1112) [#1112](https://github.com/openshift/insights-operator/pull/1112)
* fix: incorrect anonymization of domains (#1114) [#1114](https://github.com/openshift/insights-operator/pull/1114)
* feat: copy proxy envs from IO pod to gathering pods (#1103) [#1103](https://github.com/openshift/insights-operator/pull/1103)
* [OCPBUGS-56781](https://issues.redhat.com/browse/OCPBUGS-56781): Enhance insights-runtime-extractor errors (#1089) [#1089](https://github.com/openshift/insights-operator/pull/1089)
* [OCPBUGS-56780](https://issues.redhat.com/browse/OCPBUGS-56780): Report an error when the insights-runtime-extractor is not running (#1088) [#1088](https://github.com/openshift/insights-operator/pull/1088)
* feat: ensure the etc-entitlement-pki secret exists (#1087) [#1087](https://github.com/openshift/insights-operator/pull/1087)
* [Full changelog](https://github.com/openshift/insights-operator/compare/9464a4443f2f1b8cdd0a8185b2daf166f6ad7ae0...e4df617aa9b4b586e21afcd4b92270ab52392461)
### [ironic](https://github.com/openshift/ironic-image/tree/fe31e71dbbbd24c77adaecdc3d4d895375a611a5)
* Bug OCPBUGS-56639: Bump sushy to include SuperMicro Cd boot device string workaround [#660](https://github.com/openshift/ironic-image/pull/660)
* [OCPBUGS-55743](https://issues.redhat.com/browse/OCPBUGS-55743): Extract files one-by-one in logwatch [#656](https://github.com/openshift/ironic-image/pull/656)
* [Full changelog](https://github.com/openshift/ironic-image/compare/40909f7d6a194c2fc4da020737a98cb4a4f94762...fe31e71dbbbd24c77adaecdc3d4d895375a611a5)
### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/5b5afbd42650dacfc34d03f599ebd980d55e10e6)
* [OCPBUGS-56042](https://issues.redhat.com/browse/OCPBUGS-56042): collect the entire journal from the host [#188](https://github.com/openshift/ironic-agent-image/pull/188)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/ce01f3c1ed6022f9eecc164b2ae34aec25b3dee4...5b5afbd42650dacfc34d03f599ebd980d55e10e6)
### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/dacba7d7809a048392d18050096dcc20f2878b6f)
* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#102](https://github.com/openshift/ironic-rhcos-downloader/pull/102)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/6c92e5425b58baa9d4dd951a992b7460e8407247...dacba7d7809a048392d18050096dcc20f2878b6f)
### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/fdef30c84b3d45ede364500984221c3f492b1415)
* NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-19). [#223](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/223)
* Fix verify job with build-machinery bump [#215](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/215)
* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#213](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/213)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/0f8a4eb84ace9b746cf25d51d80dacf34ca5f953...fdef30c84b3d45ede364500984221c3f492b1415)
### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/f535e9a1a27ebfeca0fa1ac33f19383f46629141)
* "[release-4.19] OCPBUGS-58239: Implement volume expansion" [#64](https://github.com/openshift/kubevirt-csi-driver/pull/64)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/8b8dd30ecd302e2b260c666702dffb19abf7c1aa...f535e9a1a27ebfeca0fa1ac33f19383f46629141)
### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/7cf9bf8a41b97b6defea060cda71968378dd2fbb)
* fix for OCPBUGS-60427: userDataSecret.name should be a Required value on AWS [#1403](https://github.com/openshift/machine-api-operator/pull/1403)
* [OCPBUGS-59386](https://issues.redhat.com/browse/OCPBUGS-59386): Enabled 10 concurrent reconciles on GCP [#1391](https://github.com/openshift/machine-api-operator/pull/1391)
* [OCPBUGS-56227](https://issues.redhat.com/browse/OCPBUGS-56227): correct aws kms permissions [#1371](https://github.com/openshift/machine-api-operator/pull/1371)
* [OCPBUGS-55715](https://issues.redhat.com/browse/OCPBUGS-55715): Revert "Added skip for when config not multi nic" [#1366](https://github.com/openshift/machine-api-operator/pull/1366)
* [OCPBUGS-55786](https://issues.redhat.com/browse/OCPBUGS-55786): [release-4.19] Fixes machineset paused condition nil pointer [#1368](https://github.com/openshift/machine-api-operator/pull/1368)
* [OCPBUGS-55706](https://issues.redhat.com/browse/OCPBUGS-55706): fix: use patch for machine/machineset status [#1367](https://github.com/openshift/machine-api-operator/pull/1367)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/76351b466ce0fe5859b0dbc04b9c8599fbe7eed0...7cf9bf8a41b97b6defea060cda71968378dd2fbb)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/1a3a559a1c78f664e9812812c14e1b02687a96bc)
* [OCPBUGS-60110](https://issues.redhat.com/browse/OCPBUGS-60110): Enable debug logging for nodeip-configuration [#5221](https://github.com/openshift/machine-config-operator/pull/5221)
* [OCPBUGS-59871](https://issues.redhat.com/browse/OCPBUGS-59871): Understand and eliminate noisy logs for MCN [#5199](https://github.com/openshift/machine-config-operator/pull/5199)
* [OCPBUGS-60767](https://issues.redhat.com/browse/OCPBUGS-60767): Update the OnClusterBuild payload tests to reflect the validation rule requiring MCP & MOSC names to match [#5258](https://github.com/openshift/machine-config-operator/pull/5258)
* [OCPBUGS-60265](https://issues.redhat.com/browse/OCPBUGS-60265): Reintroduce cronjob that deletes MCN v1alpha1 CRD [#5243](https://github.com/openshift/machine-config-operator/pull/5243)
* [OCPBUGS-60224](https://issues.redhat.com/browse/OCPBUGS-60224): Invalid architecture value found in annotation during 4.19 update [#5227](https://github.com/openshift/machine-config-operator/pull/5227)
* [OCPBUGS-60080](https://issues.redhat.com/browse/OCPBUGS-60080): use channel to signal controller shutdown [#5217](https://github.com/openshift/machine-config-operator/pull/5217)
* [OCPBUGS-59928](https://issues.redhat.com/browse/OCPBUGS-59928), [OPNET-681](https://issues.redhat.com/browse/OPNET-681): Support migration to NMState [#5208](https://github.com/openshift/machine-config-operator/pull/5208)
* [OCPBUGS-59899](https://issues.redhat.com/browse/OCPBUGS-59899): Add workaround fix for static pod race [#5204](https://github.com/openshift/machine-config-operator/pull/5204)
* [OCPBUGS-59978](https://issues.redhat.com/browse/OCPBUGS-59978): ARO cert rotate fix [#5210](https://github.com/openshift/machine-config-operator/pull/5210)
* [OCPBUGS-59720](https://issues.redhat.com/browse/OCPBUGS-59720): TestMCNPoolNameCustom should clean up resources properly [#5186](https://github.com/openshift/machine-config-operator/pull/5186)
* [OCPBUGS-56750](https://issues.redhat.com/browse/OCPBUGS-56750): Support NODEIP_HINT in IPI deployments too [#5082](https://github.com/openshift/machine-config-operator/pull/5082)
* [OCPBUGS-58894](https://issues.redhat.com/browse/OCPBUGS-58894): Remove podman-etcd machine config source [#5169](https://github.com/openshift/machine-config-operator/pull/5169)
* [OCPBUGS-59208](https://issues.redhat.com/browse/OCPBUGS-59208): Backport QE ported test for OCL component readiness [#5125](https://github.com/openshift/machine-config-operator/pull/5125)
* [OCPBUGS-58820](https://issues.redhat.com/browse/OCPBUGS-58820): Add control-plane label for master nodes on legacy clusters [#5168](https://github.com/openshift/machine-config-operator/pull/5168)
* [OCPBUGS-57327](https://issues.redhat.com/browse/OCPBUGS-57327): Do not set cpu system reserve below the default value [#5117](https://github.com/openshift/machine-config-operator/pull/5117)
* [OCPBUGS-57689](https://issues.redhat.com/browse/OCPBUGS-57689): Ensure the build controller restarts on upgrade [#5127](https://github.com/openshift/machine-config-operator/pull/5127)
* [OCPBUGS-57930](https://issues.redhat.com/browse/OCPBUGS-57930): OCPBUGS-57506: Boot image controller should correctly handle marketplace boot images [#5135](https://github.com/openshift/machine-config-operator/pull/5135)
* [OCPBUGS-57929](https://issues.redhat.com/browse/OCPBUGS-57929): add MachineConfiguration to CO related objects [#5132](https://github.com/openshift/machine-config-operator/pull/5132)
* [OCPBUGS-56623](https://issues.redhat.com/browse/OCPBUGS-56623): Give keepalived container chroot cap [#5074](https://github.com/openshift/machine-config-operator/pull/5074)
* [OCPBUGS-57064](https://issues.redhat.com/browse/OCPBUGS-57064): Fix typo in MCN's MachineConfigNodePinnedImageSetsDegraded message [#5105](https://github.com/openshift/machine-config-operator/pull/5105)
* [OCPBUGS-56899](https://issues.redhat.com/browse/OCPBUGS-56899): Fix `dynamic-system-reserved-calc.sh` when only `true` parameter is used [#5094](https://github.com/openshift/machine-config-operator/pull/5094)
* [OCPBUGS-56829](https://issues.redhat.com/browse/OCPBUGS-56829): Only update boot disks during GCP boot image updates [#5088](https://github.com/openshift/machine-config-operator/pull/5088)
* [OCPBUGS-56445](https://issues.redhat.com/browse/OCPBUGS-56445): Boot Image Controller should not degrade when golden configmap is slow to update [#5063](https://github.com/openshift/machine-config-operator/pull/5063)
* [OCPBUGS-56632](https://issues.redhat.com/browse/OCPBUGS-56632): daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers [#5076](https://github.com/openshift/machine-config-operator/pull/5076)
* [OCPBUGS-56035](https://issues.redhat.com/browse/OCPBUGS-56035): Only populate `Status.PinnedImageSets.CurrentGeneration` on valid generation value [#5039](https://github.com/openshift/machine-config-operator/pull/5039)
* [OCPBUGS-56261](https://issues.redhat.com/browse/OCPBUGS-56261): Fix interrupt state to account for failure correctly [#5055](https://github.com/openshift/machine-config-operator/pull/5055)
* [OCPBUGS-56180](https://issues.redhat.com/browse/OCPBUGS-56180): Add hot loop detection in the boot image controller [#5050](https://github.com/openshift/machine-config-operator/pull/5050)
* [OCPBUGS-56263](https://issues.redhat.com/browse/OCPBUGS-56263): scope MCD node listers to current node [#5058](https://github.com/openshift/machine-config-operator/pull/5058)
* [OCPBUGS-56121](https://issues.redhat.com/browse/OCPBUGS-56121): Adapt MCC to use LayeredNodeState and remove LayeredPoolState [#5045](https://github.com/openshift/machine-config-operator/pull/5045)
* [OCPBUGS-56136](https://issues.redhat.com/browse/OCPBUGS-56136): Compare the osImageURLs for OS validation check [#5048](https://github.com/openshift/machine-config-operator/pull/5048)
* [OCPBUGS-56119](https://issues.redhat.com/browse/OCPBUGS-56119): error from generateAndValidateRenderedMachineConfig function can be misleading [#5044](https://github.com/openshift/machine-config-operator/pull/5044)
* [OCPBUGS-56038](https://issues.redhat.com/browse/OCPBUGS-56038): OWNERS: update owners file with current MCO team members [#5040](https://github.com/openshift/machine-config-operator/pull/5040)
* [OCPBUGS-55809](https://issues.redhat.com/browse/OCPBUGS-55809): Use auto=start only for IPsec out connections [#5035](https://github.com/openshift/machine-config-operator/pull/5035)
* [OCPBUGS-44757](https://issues.redhat.com/browse/OCPBUGS-44757): Revert "OCPBUGS-44757: decrease leases for kubelet on azure" [#5031](https://github.com/openshift/machine-config-operator/pull/5031)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/7a56cf0048a05d576e746c3e992ce586e07c97e8...1a3a559a1c78f664e9812812c14e1b02687a96bc)
### [machine-os-images](https://github.com/openshift/machine-os-images/tree/32b5f16c7f59698b40cc2a23116804d9067824d2)
* [OCPBUGS-55934](https://issues.redhat.com/browse/OCPBUGS-55934): Dummy change to force a rebuild for 4.19 [#63](https://github.com/openshift/machine-os-images/pull/63)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/64bfec79ae03b50b1da5b614a4cca2937ea9927d...32b5f16c7f59698b40cc2a23116804d9067824d2)
### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/345d64d597581eb0cb3cd2c1cf06124446da79a5)
* NO-JIRA: [release-4.19] OCPBUGS-60296: fix legend height to avoid scroll overlap [#498](https://github.com/openshift/monitoring-plugin/pull/498)
* NO-JIRA: improve consistency in tab string [#496](https://github.com/openshift/monitoring-plugin/pull/496)
* : NO-JIRA: update the i18n [#495](https://github.com/openshift/monitoring-plugin/pull/495)
* [OCPBUGS-60129](https://issues.redhat.com/browse/OCPBUGS-60129): feat: add alerting rules tab to dev console [#488](https://github.com/openshift/monitoring-plugin/pull/488)
* [OU-943](https://issues.redhat.com/browse/OU-943): remove broken useEffect [#484](https://github.com/openshift/monitoring-plugin/pull/484)
* [OU-943](https://issues.redhat.com/browse/OU-943): Manual Cherry Pick [#474](https://github.com/openshift/monitoring-plugin/pull/474)
* [OU-594](https://issues.redhat.com/browse/OU-594): Manual cherry pick incidents tab 4 19 [#479](https://github.com/openshift/monitoring-plugin/pull/479)
* [OU-863](https://issues.redhat.com/browse/OU-863): [release-4.19] Manual cherry pick add disconnect option [#482](https://github.com/openshift/monitoring-plugin/pull/482)
* [OU-939](https://issues.redhat.com/browse/OU-939): Fix virt persepective new silence link [#478](https://github.com/openshift/monitoring-plugin/pull/478)
* [OU-928](https://issues.redhat.com/browse/OU-928): reset showgraph state when unmounting button [#462](https://github.com/openshift/monitoring-plugin/pull/462)
* [OU-744](https://issues.redhat.com/browse/OU-744): [release-4.19]: fix: set correct pf color for gradient background on legacy dashboards legend [#457](https://github.com/openshift/monitoring-plugin/pull/457)
* [OU-880](https://issues.redhat.com/browse/OU-880): [release-4.19] Manual cherry pick ou 880 [#458](https://github.com/openshift/monitoring-plugin/pull/458)
* [OU-842](https://issues.redhat.com/browse/OU-842): [release-4.19] fix: override notistack dependency to avoid conflict [#455](https://github.com/openshift/monitoring-plugin/pull/455)
* [OCPBUGS-56422](https://issues.redhat.com/browse/OCPBUGS-56422): "Negative matcher" is checked by default on Create silence page [#415](https://github.com/openshift/monitoring-plugin/pull/415)
* NO-JIRA: fix: update monitoring and virtualization routes to avoid overriding console routes [#411](https://github.com/openshift/monitoring-plugin/pull/411)
* : NO-JIRA: bound table scroll and column alignment #409 [#409](https://github.com/openshift/monitoring-plugin/pull/409)
* NO-JIRA: feature: upgrade react router to v5 compat [#406](https://github.com/openshift/monitoring-plugin/pull/406)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/9a8dd0eef84c579a3d1352860dbc7349f08ee1a2...345d64d597581eb0cb3cd2c1cf06124446da79a5)
### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/381c36baaad8e45ba10cca43aeeaf00dfc907462)
* [OCPBUGS-58849](https://issues.redhat.com/browse/OCPBUGS-58849): Update the github.com/golang/glog module to v1.2.4 [#100](https://github.com/openshift/multus-admission-controller/pull/100)
* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#95](https://github.com/openshift/multus-admission-controller/pull/95)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/fc73c803caa1140e5a9115ceeb0e38504b001722...381c36baaad8e45ba10cca43aeeaf00dfc907462)
### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/0e1112cea12c707a93bd01d408c598dd070c8676)
* [OCPBUGS-59640](https://issues.redhat.com/browse/OCPBUGS-59640): Prevent accidental IP deallocation in statefulsets [#375](https://github.com/openshift/whereabouts-cni/pull/375)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/43c8959152a6ca8afdc73eaed624286628c2c22e...0e1112cea12c707a93bd01d408c598dd070c8676)
### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/9788e753f0f98d9bdef41898701c3aa9ad6b031e)
* NO-JIRA:Add ci-operator yaml file [#75](https://github.com/openshift/bond-cni/pull/75)
* [OCPBUGS-57283](https://issues.redhat.com/browse/OCPBUGS-57283): Bump github.com/containernetworking/plugins from to 1.7.1 [#72](https://github.com/openshift/bond-cni/pull/72)
* [Full changelog](https://github.com/openshift/bond-cni/compare/dd3c4d0b886138d974022b963e72f2e90293abfe...9788e753f0f98d9bdef41898701c3aa9ad6b031e)
### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/89e4882698653fdd80fcee2e9d92e668cb02d2d1)
* [OCPBUGS-58851](https://issues.redhat.com/browse/OCPBUGS-58851): Bump github.com/golang/glog to v1.2.4 (#110) [#110](https://github.com/openshift/network-metrics-daemon/pull/110)
* [OCPBUGS-60172](https://issues.redhat.com/browse/OCPBUGS-60172): Replace e2e test image (#119) [#119](https://github.com/openshift/network-metrics-daemon/pull/119)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/b81340a9fc6963fa3d64d215a12e8528ca797131...89e4882698653fdd80fcee2e9d92e668cb02d2d1)
### [network-tools](https://github.com/openshift/network-tools/tree/81f7aebeb1553998800c32644a8d982121277b4e)
* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#146](https://github.com/openshift/network-tools/pull/146)
* [Full changelog](https://github.com/openshift/network-tools/compare/26d09174cbd92386469e777e3bf49bfa95d035d5...81f7aebeb1553998800c32644a8d982121277b4e)
### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/f37c618af0ac1c9122486c068cc99df4ffd1e70f)
* [OCPBUGS-60137](https://issues.redhat.com/browse/OCPBUGS-60137): Fix ingress details [#261](https://github.com/openshift/networking-console-plugin/pull/261)
* [OCPBUGS-59841](https://issues.redhat.com/browse/OCPBUGS-59841): Fix requiremenets with no value [#255](https://github.com/openshift/networking-console-plugin/pull/255)
* [OCPBUGS-57266](https://issues.redhat.com/browse/OCPBUGS-57266): Add fileupload translation [#248](https://github.com/openshift/networking-console-plugin/pull/248)
* [OCPBUGS-57265](https://issues.redhat.com/browse/OCPBUGS-57265): Fix pod context [#247](https://github.com/openshift/networking-console-plugin/pull/247)
* [CNV-61827](https://issues.redhat.com/browse/CNV-61827): fix styling issues [#250](https://github.com/openshift/networking-console-plugin/pull/250)
* [CNV-61902](https://issues.redhat.com/browse/CNV-61902): fetch description of terms for popovers [#249](https://github.com/openshift/networking-console-plugin/pull/249)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/f09c58b909fd6479e0099f7962ef73b70e280685...f37c618af0ac1c9122486c068cc99df4ffd1e70f)
### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/f74e8e006cd47ae9b7cab525796f53af8fb1da9c)
* [OCPBUGS-58836](https://issues.redhat.com/browse/OCPBUGS-58836): 4.19 kube 1.32 [#318](https://github.com/openshift/oauth-proxy/pull/318)
* [OCPBUGS-58343](https://issues.redhat.com/browse/OCPBUGS-58343): release 4.19 CVE fixes [#326](https://github.com/openshift/oauth-proxy/pull/326)
* [OCPBUGS-58276](https://issues.redhat.com/browse/OCPBUGS-58276): fix e2e tests [#323](https://github.com/openshift/oauth-proxy/pull/323)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/6649cb8a7c4dd7d1c4e03c9b0bc7594089fba991...f74e8e006cd47ae9b7cab525796f53af8fb1da9c)
### [oauth-server](https://github.com/openshift/oauth-server/tree/14780f7c67d5929c3db84504d10625710fcf5fe0)
* [OCPBUGS-57282](https://issues.redhat.com/browse/OCPBUGS-57282): Updating oauth-server-container image to be consistent with ART for 4.19 [#183](https://github.com/openshift/oauth-server/pull/183)
* Use newer build-machinery-go [#178](https://github.com/openshift/oauth-server/pull/178)
* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#176](https://github.com/openshift/oauth-server/pull/176)
* [Full changelog](https://github.com/openshift/oauth-server/compare/81098796234cbe75e656ffddd8a015953e0bb1c7...14780f7c67d5929c3db84504d10625710fcf5fe0)
### [oc-mirror](https://github.com/openshift/oc-mirror/tree/e176bf605757d52e7ea8a33bb9e243bf67ccba97)
* [OCPBUGS-59760](https://issues.redhat.com/browse/OCPBUGS-59760): warn if tmp is `noexec` (#1234) [#1234](https://github.com/openshift/oc-mirror/pull/1234)
* [OCPBUGS-59976](https://issues.redhat.com/browse/OCPBUGS-59976): v2/operator: support manifest lists with one arch (#1230) [#1230](https://github.com/openshift/oc-mirror/pull/1230)
* [OCPBUGS-59949](https://issues.redhat.com/browse/OCPBUGS-59949): fixes the result output showing the wrong total (#1237) [#1237](https://github.com/openshift/oc-mirror/pull/1237)
* [OCPBUGS-57362](https://issues.redhat.com/browse/OCPBUGS-57362): v2/mirror: retry in case of ContextDeadlineExceeded (#1199) [#1199](https://github.com/openshift/oc-mirror/pull/1199)
* [OCPBUGS-54622](https://issues.redhat.com/browse/OCPBUGS-54622): cli/delete: fix workflow mode name output (#1222) [#1222](https://github.com/openshift/oc-mirror/pull/1222)
* [OCPBUGS-59799](https://issues.redhat.com/browse/OCPBUGS-59799): Detect images from a Helm Chart with an aliased chart dependency (#1225) [#1225](https://github.com/openshift/oc-mirror/pull/1225)
* [OCPBUGS-59396](https://issues.redhat.com/browse/OCPBUGS-59396): v2/archive: handle 0b mirror archive files (#1223) [#1223](https://github.com/openshift/oc-mirror/pull/1223)
* [OCPBUGS-58193](https://issues.redhat.com/browse/OCPBUGS-58193): v2/archive: error d2m when no tar files found (#1200) (#1207) [#1200](https://github.com/openshift/oc-mirror/pull/1200)
* [OCPBUGS-58279](https://issues.redhat.com/browse/OCPBUGS-58279): v2/defaults Fix rate limiting issues by enabling exponential backoff retries (#1205) [#1205](https://github.com/openshift/oc-mirror/pull/1205)
* [OCPBUGS-58271](https://issues.redhat.com/browse/OCPBUGS-58271): Fixes the tag when rebuilt catalog by digest only (#1203) [#1203](https://github.com/openshift/oc-mirror/pull/1203)
* [OCPBUGS-57387](https://issues.redhat.com/browse/OCPBUGS-57387): v2/archive: fix sanitization of `.` (#1188) [#1188](https://github.com/openshift/oc-mirror/pull/1188)
* [OCPBUGS-57461](https://issues.redhat.com/browse/OCPBUGS-57461): v2/operator: add rebuilt catalog to tar file (#1187) [#1187](https://github.com/openshift/oc-mirror/pull/1187)
* upgrades distribution to v3.0.0 (#1194) [#1194](https://github.com/openshift/oc-mirror/pull/1194)
* [OCPBUGS-56117](https://issues.redhat.com/browse/OCPBUGS-56117): Make v2 blockedImages use regular expressions (#1163) [#1163](https://github.com/openshift/oc-mirror/pull/1163)
* [OCPBUGS-57451](https://issues.redhat.com/browse/OCPBUGS-57451): deletes cosign tag based signatures (#1180) [#1180](https://github.com/openshift/oc-mirror/pull/1180)
* adds code to handle signature errors in the archive pkg (#1177) [#1177](https://github.com/openshift/oc-mirror/pull/1177)
* [OCPBUGS-56486](https://issues.redhat.com/browse/OCPBUGS-56486): v2/config: allow `delete` and `mirror` words (#1166) [#1166](https://github.com/openshift/oc-mirror/pull/1166)
* [OCPBUGS-56890](https://issues.redhat.com/browse/OCPBUGS-56890): Bug fix for no release signature found (#1168) [#1168](https://github.com/openshift/oc-mirror/pull/1168)
* [OCPBUGS-57007](https://issues.redhat.com/browse/OCPBUGS-57007): skips signature mirroring for rebuilt operator catalogs (#1171) [#1171](https://github.com/openshift/oc-mirror/pull/1171)
* [OCPBUGS-55701](https://issues.redhat.com/browse/OCPBUGS-55701): v2/imgbuilder: use --authfile when set (#1170) [#1170](https://github.com/openshift/oc-mirror/pull/1170)
* [OCPBUGS-56185](https://issues.redhat.com/browse/OCPBUGS-56185): [release-4.19] v2: bump containers/common dep to 0.63.0 (#1148) [#1148](https://github.com/openshift/oc-mirror/pull/1148)
* disables the signature verification on operator catalog collection (#1157) [#1157](https://github.com/openshift/oc-mirror/pull/1157)
* [OCPBUGS-56433](https://issues.redhat.com/browse/OCPBUGS-56433): v2/cli: always remove past archives before m2d (#1152) [#1152](https://github.com/openshift/oc-mirror/pull/1152)
* [OCPBUGS-56563](https://issues.redhat.com/browse/OCPBUGS-56563): v2/archive: print unarchive progress (#1158) [#1158](https://github.com/openshift/oc-mirror/pull/1158)
* changes the signature mirroring default to disabled (#1149) [#1149](https://github.com/openshift/oc-mirror/pull/1149)
* [OCPBUGS-55704](https://issues.redhat.com/browse/OCPBUGS-55704): implements registries.d file as specified in containers/image docs (#1137) [#1137](https://github.com/openshift/oc-mirror/pull/1137)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/d42ff12456f3f227bfd42a769c4d5780dd1c6087...e176bf605757d52e7ea8a33bb9e243bf67ccba97)
### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/abf950347eaa8124a6f6f819dadfb787bc6c5ff5)
* UPSTREAM: <carry>: Safely handle changes to description fields (#2023) [#2023](https://github.com/openshift/operator-framework-operator-controller/pull/2023)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/9319f22a0e4aeaceb0dca569fe5b412b34ba436a...abf950347eaa8124a6f6f819dadfb787bc6c5ff5)
### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/7fe57362c4f64c0d4caf52a0bb26a59b2799b227)
* [OCPBUGS-57206](https://issues.redhat.com/browse/OCPBUGS-57206): Wire dry run option to Image API server operations [#524](https://github.com/openshift/openshift-apiserver/pull/524)
* [OCPBUGS-56494](https://issues.redhat.com/browse/OCPBUGS-56494): Fix image reference in TestImageStreamImportQuayIO [#510](https://github.com/openshift/openshift-apiserver/pull/510)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/7f4da5d7815092618b1fec86aeafe137d50d0c00...7fe57362c4f64c0d4caf52a0bb26a59b2799b227)
### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/5b3063ff149f290bebca0783fc508dfbf07689a5)
* [OCPBUGS-56614](https://issues.redhat.com/browse/OCPBUGS-56614): legacy image pull secret rollback controller [#384](https://github.com/openshift/openshift-controller-manager/pull/384)
* [OCPBUGS-57951](https://issues.redhat.com/browse/OCPBUGS-57951): ignore error failing to find pull/push secrets [#401](https://github.com/openshift/openshift-controller-manager/pull/401)
* [OCPBUGS-57193](https://issues.redhat.com/browse/OCPBUGS-57193): Set node-pullsecrets volume to read-only to protect image pull credentials [#390](https://github.com/openshift/openshift-controller-manager/pull/390)
* [OCPBUGS-55642](https://issues.redhat.com/browse/OCPBUGS-55642): Empty proxy variables are causing issues during the build [#376](https://github.com/openshift/openshift-controller-manager/pull/376)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/49aaf599fb9024f36359f55bac6b3bb1482e24b8...5b3063ff149f290bebca0783fc508dfbf07689a5)
### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/c604f81c4953f0feacfcf927cb5de883af027060)
* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#122](https://github.com/openshift/openshift-state-metrics/pull/122)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/b04e2ef05498c2a4504bd9396a3290c4f263fc37...c604f81c4953f0feacfcf927cb5de883af027060)
### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/53190949835e1d94e07bbcfc13804fc959b9028a)
* [OCPBUGS-57891](https://issues.redhat.com/browse/OCPBUGS-57891): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into release-4.19 [#366](https://github.com/openshift/cluster-api-provider-openstack/pull/366)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/30944900c974852654db4125082d616f9be4b1a6...53190949835e1d94e07bbcfc13804fc959b9028a)
### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/e42f5c26092b9dea5856807d314f57e1886d31d7)
* [OCPBUGS-61363](https://issues.redhat.com/browse/OCPBUGS-61363): [4.19] e2e stability fixes [#1079](https://github.com/openshift/operator-framework-olm/pull/1079)
* [OCPBUGS-60525](https://issues.redhat.com/browse/OCPBUGS-60525): Add NetworkPolicy as a supported kind [#1047](https://github.com/openshift/operator-framework-olm/pull/1047)
* [OCPBUGS-59258](https://issues.redhat.com/browse/OCPBUGS-59258): 🐛 add catalog-operator control-plane-specific tolerations to unpack jobs [#1037](https://github.com/openshift/operator-framework-olm/pull/1037)
* [OCPBUGS-58259](https://issues.redhat.com/browse/OCPBUGS-58259): Reduce Frequency of Update Requests for Copied CSVs (#3597) [release-4.19] [#1030](https://github.com/openshift/operator-framework-olm/pull/1030)
* [OCPBUGS-57352](https://issues.redhat.com/browse/OCPBUGS-57352): reduce cache expiry frequency [release-4.19] [#1019](https://github.com/openshift/operator-framework-olm/pull/1019)
* [OCPBUGS-57279](https://issues.redhat.com/browse/OCPBUGS-57279): [release-4.19]: operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted [#1015](https://github.com/openshift/operator-framework-olm/pull/1015)
* [OCPBUGS-56034](https://issues.redhat.com/browse/OCPBUGS-56034): fix(olm): improve error logging for missing olm.managed label (#3558) [#999](https://github.com/openshift/operator-framework-olm/pull/999)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/e53cf3090214284bf913bd2d7165a0a9422635a0...e42f5c26092b9dea5856807d314f57e1886d31d7)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/6ff66743c4fbd0c413cf4bb9933a1eb510aa42e4)
* [OCPBUGS-48709](https://issues.redhat.com/browse/OCPBUGS-48709), [OCPBUGS-60797](https://issues.redhat.com/browse/OCPBUGS-60797), [OCPBUGS-60979](https://issues.redhat.com/browse/OCPBUGS-60979): DownStream Merge Sync from 4.20 [08-22-2025] [#2733](https://github.com/openshift/ovn-kubernetes/pull/2733)
* [OCPBUGS-48709](https://issues.redhat.com/browse/OCPBUGS-48709): DownStream Merge Sync from 4.20 [08-06-2025] [#2704](https://github.com/openshift/ovn-kubernetes/pull/2704)
* [OCPBUGS-48709](https://issues.redhat.com/browse/OCPBUGS-48709): DownStream Merge Sync from 4.20 [07-28-2025] [#2688](https://github.com/openshift/ovn-kubernetes/pull/2688)
* [OCPBUGS-48709](https://issues.redhat.com/browse/OCPBUGS-48709), [OCPBUGS-59530](https://issues.redhat.com/browse/OCPBUGS-59530): DownStream Merge Sync from 4.20 [07-17-2025] [#2675](https://github.com/openshift/ovn-kubernetes/pull/2675)
* [OCPBUGS-48709](https://issues.redhat.com/browse/OCPBUGS-48709): DownStream Merge Sync from 4.20 [07-09-2025] [#2660](https://github.com/openshift/ovn-kubernetes/pull/2660)
* [OCPBUGS-59106](https://issues.redhat.com/browse/OCPBUGS-59106): DownStream Merge Sync from 4.20 [06-18-2025] [#2642](https://github.com/openshift/ovn-kubernetes/pull/2642)
* [OCPBUGS-57061](https://issues.redhat.com/browse/OCPBUGS-57061), [OCPBUGS-57062](https://issues.redhat.com/browse/OCPBUGS-57062): DownStream Merge Sync from 4.20 [05-30-2025] [#2596](https://github.com/openshift/ovn-kubernetes/pull/2596)
* [OCPBUGS-55825](https://issues.redhat.com/browse/OCPBUGS-55825): Release 4.19 blocker bug ovs cpu backport: special cherry-pick [#2551](https://github.com/openshift/ovn-kubernetes/pull/2551)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/9741174157381d7b87e2d21559cbe06b8f2b5ebf...6ff66743c4fbd0c413cf4bb9933a1eb510aa42e4)
### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/ff6e9a8e1ea2eebb552cdc64974f8f6e7e5cbd1a)
* [OCPBUGS-61134](https://issues.redhat.com/browse/OCPBUGS-61134): Use OS_GIT_VERSION in Makefile when found (for Konflux builds) [#124](https://github.com/openshift/machine-api-provider-powervs/pull/124)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/f011b3c727c5377302b2ab0a203457490b930a3d...ff6e9a8e1ea2eebb552cdc64974f8f6e7e5cbd1a)
### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/13666465233bfe72a19d6d3f48576a508fdea145)
* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#382](https://github.com/openshift/prom-label-proxy/pull/382)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/f2529aee3dc2e9065de08b035d53151e007136fd...13666465233bfe72a19d6d3f48576a508fdea145)
### [rhel-coreos, rhel-coreos-extensions](https://github.com/openshift/os/tree/e97898c8af9cad8e5375e4860a7d79c39a1c79fa)
* Merge [#1853](https://github.com/openshift/os/pull/1853)
* Merge [#1851](https://github.com/openshift/os/pull/1851)
* [OCPBUGS-58122](https://issues.redhat.com/browse/OCPBUGS-58122): [TNF] OCP Two Node with Fencing symlink begone! [#1827](https://github.com/openshift/os/pull/1827)
* [OCPBUGS-56278](https://issues.redhat.com/browse/OCPBUGS-56278): extensions: llvm now available in rhel 9.6 and 10 [#1817](https://github.com/openshift/os/pull/1817)
* NO-JIRA: Remove kernel-rt-kvm for cs9 and cs10 [#1815](https://github.com/openshift/os/pull/1815)
* [Full changelog](https://github.com/openshift/os/compare/63e9aa4008eb65a02a2d70c9c086cbd8e18e149f...e97898c8af9cad8e5375e4860a7d79c39a1c79fa)
### [telemeter](https://github.com/openshift/telemeter/tree/d72f157000039dddd96962d08d51c17ef716a7d4)
* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#560](https://github.com/openshift/telemeter/pull/560)
* [Full changelog](https://github.com/openshift/telemeter/compare/4c6036eeb851ad6e0e837e214a2d08ffc8f0d1d0...d72f157000039dddd96962d08d51c17ef716a7d4)
### [tests](https://github.com/openshift/origin/tree/e4547472c759ab77d577fb062922da08d998794b)
* [OCPBUGS-60244](https://issues.redhat.com/browse/OCPBUGS-60244): Wait 30s after the upgrade is complete to validate workloads [#30144](https://github.com/openshift/origin/pull/30144)
* [OCPBUGS-60797](https://issues.redhat.com/browse/OCPBUGS-60797): Don't check for remote node subnet BGP routes [#30156](https://github.com/openshift/origin/pull/30156)
* NO-JIRA: Update extended/networking OWNERS [#30088](https://github.com/openshift/origin/pull/30088)
* [OCPBUGS-60569](https://issues.redhat.com/browse/OCPBUGS-60569): images/tests: Remove rteval [#30124](https://github.com/openshift/origin/pull/30124)
* [OCPBUGS-60429](https://issues.redhat.com/browse/OCPBUGS-60429): Load our MCO's OTE binary [#30043](https://github.com/openshift/origin/pull/30043)
* [OCPBUGS-59757](https://issues.redhat.com/browse/OCPBUGS-59757): OCPBUGS-59758: Improve MCN test stability [#30018](https://github.com/openshift/origin/pull/30018)
* [OCPBUGS-60117](https://issues.redhat.com/browse/OCPBUGS-60117): Enable test for LGW L2 [#30052](https://github.com/openshift/origin/pull/30052)
* [OCPBUGS-60234](https://issues.redhat.com/browse/OCPBUGS-60234): Move the legacy container failures [#30073](https://github.com/openshift/origin/pull/30073)
* [OCPBUGS-60092](https://issues.redhat.com/browse/OCPBUGS-60092): feat(azure): skip metrics collection for ARO HCP hypershift [#30051](https://github.com/openshift/origin/pull/30051)
* [OCPBUGS-59398](https://issues.redhat.com/browse/OCPBUGS-59398): Skip MCN's node degrade test on 4.19 [#29990](https://github.com/openshift/origin/pull/29990)
* [OCPBUGS-59391](https://issues.redhat.com/browse/OCPBUGS-59391): [release-4.19]: OVNK BGP: Sync ovn-kubernetes bgp e2e tests [#29989](https://github.com/openshift/origin/pull/29989)
* [OCPBUGS-59226](https://issues.redhat.com/browse/OCPBUGS-59226): bump watch count limits [#29982](https://github.com/openshift/origin/pull/29982)
* [OCPBUGS-57886](https://issues.redhat.com/browse/OCPBUGS-57886): Bump 4.19 1.32.6 [#29933](https://github.com/openshift/origin/pull/29933)
* [OCPBUGS-58470](https://issues.redhat.com/browse/OCPBUGS-58470): Update IPsec e2e test to validate NAT-T encapsulation option [#29957](https://github.com/openshift/origin/pull/29957)
* [OCPBUGS-57206](https://issues.redhat.com/browse/OCPBUGS-57206): Backport pr 29834 to release-4.19 [#29903](https://github.com/openshift/origin/pull/29903)
* [OCPBUGS-58204](https://issues.redhat.com/browse/OCPBUGS-58204): Fix MCN test on agent compact FIPS jobs [#29943](https://github.com/openshift/origin/pull/29943)
* [OCPBUGS-58053](https://issues.redhat.com/browse/OCPBUGS-58053): [release-4.19] MCO-1768: Enable PIS testing on Metal [#29936](https://github.com/openshift/origin/pull/29936)
* [OCPBUGS-57436](https://issues.redhat.com/browse/OCPBUGS-57436): Add MCO test suite to 4.19 [#29918](https://github.com/openshift/origin/pull/29918)
* [OCPBUGS-57930](https://issues.redhat.com/browse/OCPBUGS-57930): Boot image controller should correctly handle marketplace boot images [#29935](https://github.com/openshift/origin/pull/29935)
* [OCPBUGS-57217](https://issues.redhat.com/browse/OCPBUGS-57217): Stabilize custom MCP cleanup on MCN tests [#29902](https://github.com/openshift/origin/pull/29902)
* [OCPBUGS-57303](https://issues.redhat.com/browse/OCPBUGS-57303): Fix failed tests of e2e-aws-ovn-tls-13 [#29906](https://github.com/openshift/origin/pull/29906)
* [OCPBUGS-57020](https://issues.redhat.com/browse/OCPBUGS-57020): Skip tests modifying cluster/network.config when it is not permitted [#29884](https://github.com/openshift/origin/pull/29884)
* [OCPBUGS-57189](https://issues.redhat.com/browse/OCPBUGS-57189): `RouteExternalCertificate` : Add fix for `None` platform type [#29899](https://github.com/openshift/origin/pull/29899)
* [OCPBUGS-56187](https://issues.redhat.com/browse/OCPBUGS-56187): OCPBUGS-55968: Fix PIS tests on SNO & Enable applicable MCN & PIS tests on SNO [#29789](https://github.com/openshift/origin/pull/29789)
* [OCPBUGS-56969](https://issues.redhat.com/browse/OCPBUGS-56969), [OCPBUGS-56970](https://issues.redhat.com/browse/OCPBUGS-56970): Fix `RouteExternalCertificate` tests for few other on-prem jobs [#29880](https://github.com/openshift/origin/pull/29880)
* [OCPBUGS-56829](https://issues.redhat.com/browse/OCPBUGS-56829): Only update boot disks during GCP boot image updates tests [#29878](https://github.com/openshift/origin/pull/29878)
* [OCPBUGS-56967](https://issues.redhat.com/browse/OCPBUGS-56967): Do not set the MTU when using NetworkAttachementDefinition [#29879](https://github.com/openshift/origin/pull/29879)
* [OCPBUGS-56947](https://issues.redhat.com/browse/OCPBUGS-56947): fix deployment rollout wait to wait for desired replicas [#29877](https://github.com/openshift/origin/pull/29877)
* [OCPBUGS-56886](https://issues.redhat.com/browse/OCPBUGS-56886): Fix bearer token exposure in exit condition as well [#29841](https://github.com/openshift/origin/pull/29841)
* [OCPBUGS-56437](https://issues.redhat.com/browse/OCPBUGS-56437): Update to kubernetes 1.32.5 [#29875](https://github.com/openshift/origin/pull/29875)
* [OCPBUGS-56796](https://issues.redhat.com/browse/OCPBUGS-56796): Skip failing test [release-4.19] [#29865](https://github.com/openshift/origin/pull/29865)
* [OCPBUGS-56045](https://issues.redhat.com/browse/OCPBUGS-56045): OLMv1: Update test bundles [release-4.19] [#29836](https://github.com/openshift/origin/pull/29836)
* [OCPBUGS-56662](https://issues.redhat.com/browse/OCPBUGS-56662): Fix failed etcd test on arbiter ci run [#29826](https://github.com/openshift/origin/pull/29826)
* [OCPBUGS-56399](https://issues.redhat.com/browse/OCPBUGS-56399): fix watch request counts [#29799](https://github.com/openshift/origin/pull/29799)
* [CORENET-5875](https://issues.redhat.com/browse/CORENET-5875), [CORENET-5876](https://issues.redhat.com/browse/CORENET-5876), [OCPBUGS-56000](https://issues.redhat.com/browse/OCPBUGS-56000): Add EgressIP and L2 UDN route advertisements tests [#29777](https://github.com/openshift/origin/pull/29777)
* [OCPBUGS-55897](https://issues.redhat.com/browse/OCPBUGS-55897): bump limits [#29783](https://github.com/openshift/origin/pull/29783)
* [OCPBUGS-55969](https://issues.redhat.com/browse/OCPBUGS-55969): (olmv1 tests) Increase timeout for verifyAPIEndpoints [#29770](https://github.com/openshift/origin/pull/29770)
* [OCPBUGS-55897](https://issues.redhat.com/browse/OCPBUGS-55897): bump limits [#29767](https://github.com/openshift/origin/pull/29767)
* [OCPBUGS-55265](https://issues.redhat.com/browse/OCPBUGS-55265): Bump 1.32.4 [#29707](https://github.com/openshift/origin/pull/29707)
* [OKD-243](https://issues.redhat.com/browse/OKD-243): Skip GatewayAPIController tests for OKD [#29749](https://github.com/openshift/origin/pull/29749)
* [Full changelog](https://github.com/openshift/origin/compare/550fed10803792e0f22fcbe8c8a9532e21675e9e...e4547472c759ab77d577fb062922da08d998794b)
### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/55cce625800f2ef5adc53b9512fd52f8a5054964)
* [OCPBUGS-56962](https://issues.redhat.com/browse/OCPBUGS-56962): Update manifests gen to remove reliance on admission registration v1beta1 [#61](https://github.com/openshift/cluster-api-provider-vsphere/pull/61)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/6f933c9cb541a4b591275e39fd4112c77cbd1563...55cce625800f2ef5adc53b9512fd52f8a5054964)
### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/15134035e9bd1e6dde10547cdba8d390d90f1072)
* [OCPBUGS-55700](https://issues.redhat.com/browse/OCPBUGS-55700): UPSTREAM: 3262: Fix panic on DeletedFinalStateUnknown [#143](https://github.com/openshift/vmware-vsphere-csi-driver/pull/143)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/61d0d00a78ee60ee57fcc99648a8851f0db52e5a...15134035e9bd1e6dde10547cdba8d390d90f1072)
### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/4f3a1da10d7f060f4b6530e70bd03892d9c43277)
* [OCPBUGS-60535](https://issues.redhat.com/browse/OCPBUGS-60535): Check for number of FailureDomain-s in GetVCenter() [#188](https://github.com/openshift/vsphere-problem-detector/pull/188)
* [OCPBUGS-56230](https://issues.redhat.com/browse/OCPBUGS-56230): replace operator client [#183](https://github.com/openshift/vsphere-problem-detector/pull/183)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/9d55c028b27bc63c687342f0b7172ce39e07ec5a...4f3a1da10d7f060f4b6530e70bd03892d9c43277)