# 4.20.17

Created: 2026-03-20 03:42:56 +0000 UTC

Image Digest: `sha256:a0f42119d3e949a0cc5fb4aab0ef0708eed142c9f6a2200d40c90dc813b60693`

Promoted from quay.io/openshift-release-dev/ocp-release-nightly@sha256:7889b0f38596391d61b91087d384536a902724275c75334a658081bdb444aaf5


## Changes from 4.20.16

### Components

* Kubectl 1.33.3
* Kubernetes upgraded from 1.33.8 to 1.33.9
* Kubernetes Tests 1.33.4
* Red Hat Enterprise Linux CoreOS upgraded from 9.6.20260303-1 to 9.6.20260314-0


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [e07e2c76](https://github.com/openshift/assisted-service/commit/e07e2c76e1431afe13e2c34b3e08e0bb0903201f) `sha256:e47074984b8f28a1d7d259f38f499d01ea58c3eb90c541402c71992a4fae2e3b`
* [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui) git [c0370c19](https://github.com/openshift-assisted/assisted-installer-ui/commit/c0370c199bd9d314d14cdf668f4dddff6d475514) `sha256:928ccbe4a654ef969f2596e8e729cf12cd5cae9c05d6dacba113f1fffacd2eee`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [bb88da16](https://github.com/openshift/cloud-provider-aws/commit/bb88da16b29d63573861351afc5ca8c4547775d6) `sha256:8c868a9368614e73dd06548c3b15a86636fb26bf5b42ff6503cc024e7148bc45`
* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [300439ea](https://github.com/openshift/cluster-api-provider-aws/commit/300439ea0736444a160c061578b3bd8956d4f7e6) `sha256:288615d3a17d9ca612e107b100a67ffa6aeedb94847f0cbd1b1ba4adac9cb07b`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [a8ef205c](https://github.com/openshift/aws-ebs-csi-driver/commit/a8ef205c28b7b8c80b0caf1c1a9e12f81f4fdbb9) `sha256:c8750cfcee297678e3f99d20e657ac2391964f2675cf604276f205dfffe5bcdd`
* [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator) git [158b88f6](https://github.com/openshift/csi-operator/commit/158b88f6d146e74cca1fc9b79379463fde546552) `sha256:8b6b3becac2405e84013800366af74c873f5265dce5311c180c2bf2c26feeab5`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [999f4f76](https://github.com/openshift/machine-api-provider-aws/commit/999f4f76124e66c7b42af678cb19aff4b29f72d4) `sha256:ff1b856221eb92fe9ac60a2aaa2fd46b2d2ab0155c00b615d3eaeafc03f12a67`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [8e83772a](https://github.com/openshift/aws-pod-identity-webhook/commit/8e83772ab8d31b32225744d4f0b0023680692daf) `sha256:eadae71cb6462708bd2317112c7777716e12f9c8b6c1fe4f98851baa2ee2120d`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [d469d04e](https://github.com/openshift/cloud-provider-azure/commit/d469d04ed645358d942af442fe21e2c2b44b9b2c) `sha256:5ec49873bee31826c358d413f1d56618e5aa661c1448e3ed6cccab6a82b615d4`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [d469d04e](https://github.com/openshift/cloud-provider-azure/commit/d469d04ed645358d942af442fe21e2c2b44b9b2c) `sha256:58d88fa641bf3599c0ca03e696b49c1d036087a82816c630b4b17bbded2f7f5a`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [cb8b5b6a](https://github.com/openshift/cluster-api-provider-azure/commit/cb8b5b6a485971a95c5a74508d76ab19b23cbf29) `sha256:fe197cafacaddf30724ed3551d4df311a68087f550cb140f989aa2289b05b23e`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [0b8e4d22](https://github.com/openshift/azure-disk-csi-driver/commit/0b8e4d2202b0d17942fd745a5e1948f46bdd0350) `sha256:8bf2efd81e942167e27bf907ecbfc448b384d1d938f44328932a357f7013bc6c`
* [azure-disk-csi-driver-operator](https://github.com/openshift/csi-operator) git [158b88f6](https://github.com/openshift/csi-operator/commit/158b88f6d146e74cca1fc9b79379463fde546552) `sha256:58e06f6bc1435918e37082daa48595d23bdc36a0648adfae92d03f54e4f87ac6`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [45d505bc](https://github.com/openshift/azure-file-csi-driver/commit/45d505bc11fedadece5ae27147c9595877e39f2a) `sha256:c71ac476e60286fe948b8c2d9d28097dd4873d47b6130cb0be264f4790061231`
* [azure-file-csi-driver-operator](https://github.com/openshift/csi-operator) git [158b88f6](https://github.com/openshift/csi-operator/commit/158b88f6d146e74cca1fc9b79379463fde546552) `sha256:8e960f05cc1e5f31b085983fa6fa61ba2142485d911d81d9b8bb4ae9667fd637`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [68db9150](https://github.com/openshift/machine-api-provider-azure/commit/68db91507ea47f767ee0dc838c08cc371d2ff69f) `sha256:9309f057fc1fcf5d1db9b4cc13eb622bad1ff34d174a67909eb9a1d591049931`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [88b18175](https://github.com/openshift/azure-workload-identity/commit/88b18175e46fe305486d172ec0b4e8471c55e30b) `sha256:b8cd58195bdb1603c9fdab84f2d561720e420c8897c086f09a45ef03fbaa304b`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [9996d28c](https://github.com/openshift/cloud-provider-openstack/commit/9996d28ce3163cf9a09d77101e81cede914d6c2f) `sha256:737db67f7f8b73934126546a6e1606141ece091078ea76eff845d37817d2de24`
* [csi-driver-manila-operator](https://github.com/openshift/csi-operator) git [158b88f6](https://github.com/openshift/csi-operator/commit/158b88f6d146e74cca1fc9b79379463fde546552) `sha256:e95f625a08f95ae360ca2b73b078c4c414bf81db164912c533c7235b65c3fdfe`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [1abaf844](https://github.com/openshift/csi-driver-nfs/commit/1abaf84447384a486a9f9da7cd7b9e53784c8a55) `sha256:9ee6c75e04582e37900103f66499ca9e7862eb474339059a2a9ac9c6aa15f6f0`
* [docker-builder](https://github.com/openshift/builder) git [35afa308](https://github.com/openshift/builder/commit/35afa308e2473046721057112d804334fc4b8217) `sha256:3dd542a85f4434c3e6d323776760d522c118859cd8d18b185aad1e031cded809`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [9d55fd1a](https://github.com/openshift/driver-toolkit/commit/9d55fd1aaba05830f857132bd149ee3cf18cc20f) `sha256:d49b57a4b103d1cc2cd209cc721f1b4b8a13cc5fd8ff27b6b0004a3568cbf43f`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [e3014e74](https://github.com/openshift/cloud-provider-gcp/commit/e3014e749042475304daf566119b6330875eeff9) `sha256:6f9c117f0e1c28424060349335600082557e5dcf8c6f722c1544a21a4be4b3f6`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [65539c71](https://github.com/openshift/cluster-api-provider-gcp/commit/65539c71b4c292fc0f4eeb572dfe490af63063d9) `sha256:e186f15bfd054a04d286ce55158db3f1d60286137e826d97293458fd0214a18a`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [01515888](https://github.com/openshift/machine-api-provider-gcp/commit/01515888c83526ec235b7bc3a27df6eba3034b00) `sha256:edf7297ecf90cea2005601902f8aa1db2c9f2ed395995b7faf32785b7b50ff9e`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [500ab5d3](https://github.com/openshift/gcp-pd-csi-driver/commit/500ab5d31ad382805070c8ae329a9a34163ebc99) `sha256:9368ea04d755021dd8fd0955101067eb56880b3074c98cb236617a84cb44478a`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [e0ad050a](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/e0ad050a84bab669e0f11e080fc4c388ef417bba) `sha256:4fd921e1a8002cffd3407ae0976ac9e9989e94ada397ee6f574804f555c3fc7d`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [36ab30f9](https://github.com/openshift/cloud-provider-ibm/commit/36ab30f90e87de0daa926d20ccda88c41abed191) `sha256:2de3cca88bc37839fdfcf2cdbcefdd4894026b42b24d69ff451d6558a9ad91ec`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [390a1fa8](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/390a1fa872a3a43075ad27d79a260ed3ec1e924f) `sha256:0581b68fc6ee33c0c85d4651a1bcd1d1fc40b7fab24c5d91e492e5e3b031a5dd`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [21f405cc](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/21f405cce9573eee1c4f1cf95c0eb601ae77ed99) `sha256:2f3dda195466d61ce74d00518ad5f010cc7a88b6545bf62e534aa0a10f06d644`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [8b6396a4](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/8b6396a4c78f4791b7f3c5ec404a78b499f8546b) `sha256:a1d7f8d86c5484fc21dba24ea3c29013028c4eb5a7f35c72be7d89c3b24c2149`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [035805df](https://github.com/openshift/machine-api-provider-ibmcloud/commit/035805df5277c9f9c0cd9d4a44f59a08ab3ce031) `sha256:4be9ff886fe6c15aa5f8bb219bb68da6380308c602be2b8f5efe4fd763fcd97b`
* [ironic](https://github.com/openshift/ironic-image) git [9d5e435b](https://github.com/openshift/ironic-image/commit/9d5e435bfe1796d6cbabef889cdb0c5cd681f15a) `sha256:d02486ba74f3a07cd398431a35ba3f227b5610dc820a4079835cc08b5492997a`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [652b8b4d](https://github.com/openshift/ironic-agent-image/commit/652b8b4dcffda86f61e181b43cda184292372a14) `sha256:b5ec49e5034919da91d233bd464e7a20e84df4b4e9d44425385d4f3e9ba4c45e`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [6c92e542](https://github.com/openshift/ironic-rhcos-downloader/commit/6c92e5425b58baa9d4dd951a992b7460e8407247) `sha256:bd5c875eb6ef289eee0ff13de31137a609b8982d0dd244e69ec836b9a6a5cae3`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [fa5b8b8b](https://github.com/openshift/ironic-static-ip-manager/commit/fa5b8b8bb73e509f74205a99a0ed1cb07a843885) `sha256:70f2706cf802447f13e13869a62c92e41090528350c7525b9dc96c033cc34534`
* [keepalived-ipfailover](https://github.com/openshift/images) git [bb4535b7](https://github.com/openshift/images/commit/bb4535b7069cab2de0174be29bccccde6d623b4f) `sha256:c5650208a0d0f9fc98e69bdece76b4c34b6a7809ab6a7dbcc77f1ee643a8fe84`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [96662472](https://github.com/openshift/image-customization-controller/commit/96662472598010aa2b063143fa52297556c8723b) `sha256:1ca08c401002c5cf47ce12815457cf06aff281350f26f46d682d63df96836b49`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [551bb5d7](https://github.com/openshift/machine-os-images/commit/551bb5d75e782e47b83292d883e41bc57df730a4) `sha256:6bfe56bc09b9e8b5b987e5e576e9707cd2768d86d53beb234264a395419b2d11`
* [network-tools](https://github.com/openshift/network-tools) git [26d09174](https://github.com/openshift/network-tools/commit/26d09174cbd92386469e777e3bf49bfa95d035d5) `sha256:8e7de3b8d77126cd40b9bc93f937c2375c2c32f5b6064696f26e03367c092301`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [b575ef15](https://github.com/openshift/cloud-provider-nutanix/commit/b575ef15f13e1434c793ae50824fd0676480be05) `sha256:e23324d2b7c95cde1841c436e29c2883db3b8567306e900b2584cc52653a39c4`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [3200ddef](https://github.com/openshift/machine-api-provider-nutanix/commit/3200ddef48a5a8d47b96539419c51f3619cb1fd5) `sha256:97db276023085c8a50d09ed4f773e70f2e5236bb2deae3d1e1b2609b93aac2af`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [9996d28c](https://github.com/openshift/cloud-provider-openstack/commit/9996d28ce3163cf9a09d77101e81cede914d6c2f) `sha256:a407889b58adfd54905bbfad6e8c01fe9e132238c1fe62c03e17534b203ae36f`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [0693fe5d](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/0693fe5dcfab224466fba7a19e614de71f727999) `sha256:914921602fef24311b59f61a258e6d02c4c4a8cdad6e4fe143fe17686ca69c9d`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [319efc99](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/319efc99be8cc2603fad1677acee7c4a4a096913) `sha256:c875d9287251665b756a6915edbfb1f600a289de336e261d3570a0d6f3ab8b3f`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [2424e8dd](https://github.com/openshift/cloud-provider-powervs/commit/2424e8dd4bf3e19c3e65efebc03bf4942665f7c4) `sha256:0d00b7dd2d50daed185a4f1813788a11b4370e16cc785961ff8ccba046277820`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [f011b3c7](https://github.com/openshift/machine-api-provider-powervs/commit/f011b3c727c5377302b2ab0a203457490b930a3d) `sha256:6603d4820c06e9e14ef64d39e17fdae2c6ceb83423b2ce5fcae0604459121246`
* [rhel-coreos](https://github.com/openshift/os) git [2762e751](https://github.com/openshift/os/commit/2762e75143b49efbebb3c2ac4a22c1835f01d78c) `sha256:7971c5803fc3fa51c59bd2c0143e0e8d7cca7089996e554e88c5a768e76c0b8a`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [2762e751](https://github.com/openshift/os/commit/2762e75143b49efbebb3c2ac4a22c1835f01d78c) `sha256:2068894ed5c6bcdac0ee52e723e3659e90694b0e32a29afa8fe6b8081b1552b8`
* [tools](https://github.com/openshift/oc) git [64e778a5](https://github.com/openshift/oc/commit/64e778a55fbcdf295b671a7d4e701e7c8cc3a499) `sha256:1a48b06864487adf8e655829d767fc200907f3808d4263d1b206e6abded03774`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [b93eb64f](https://github.com/openshift/cloud-provider-vsphere/commit/b93eb64ff72e7c005687813c8b478d694a0f517a) `sha256:02ef5d914c022f83a9b9a4ef4a178d1322bed315f43a2aee4a89ea692e941a8d`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [61d0d00a](https://github.com/openshift/vmware-vsphere-csi-driver/commit/61d0d00a78ee60ee57fcc99648a8851f0db52e5a) `sha256:4a9f1698244bc801b06f8109954867afebf20e746cb84dbee54ae2a7fe339e29`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [5cd04d61](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/5cd04d61c20872edaaa2c3958779ff29ea6e6d82) `sha256:c9467b4e0a30211afc48321aaac38f672c09c41a1aaf0d2fe32ee55e7b1c1896`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [61d0d00a](https://github.com/openshift/vmware-vsphere-csi-driver/commit/61d0d00a78ee60ee57fcc99648a8851f0db52e5a) `sha256:014ad7d76948577107cca21a79c5be14ad5a78d483e31134492a96a6fee65aa7`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [65d066ab](https://github.com/openshift/vsphere-problem-detector/commit/65d066ab0940dc69aa3f7ec6b02e698a6e4f5795) `sha256:3f237e815b0539ee7a6bcb8f573767f30e221fa076e98e9069c3a9fa0ea986ba`


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/07408eb1c797940cc20d659a82b15a2e1ef7595c)

* [OCPBUGS-78091](https://issues.redhat.com/browse/OCPBUGS-78091): fix wavelength zone name regex [#10373](https://github.com/openshift/installer/pull/10373)
* [Full changelog](https://github.com/openshift/installer/compare/a8ad8d3b8de7ada885b910851314cb2ea05b602d...07408eb1c797940cc20d659a82b15a2e1ef7595c)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/50c63b0d5744a830cb828a669ed09982dd46365b)

* [OCPBUGS-77170](https://issues.redhat.com/browse/OCPBUGS-77170): Install dbus-tools, needed in pkg/monitor/dnsmasqmonitor.go [#384](https://github.com/openshift/baremetal-runtimecfg/pull/384)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/6553765e71c7f8d7db120af94473c9c0cb44d453...50c63b0d5744a830cb828a669ed09982dd46365b)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/b4c6c2ffa86f029c0d19abf68344411db0855102)

* [OCPBUGS-77506](https://issues.redhat.com/browse/OCPBUGS-77506): Pick upstream commits to Fix VPA recommender concurrent access panic [#407](https://github.com/openshift/kubernetes-autoscaler/pull/407)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/aaf5a61941b70a3b5792c0541e97356565c9977f...b4c6c2ffa86f029c0d19abf68344411db0855102)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/5cc04a88456ead0f8961c6a12e7002ef3e23b0fc)

* [OCPBUGS-76340](https://issues.redhat.com/browse/OCPBUGS-76340): Explicitly set the ReadOnlyRootFilesystem flag to false [#555](https://github.com/openshift/cluster-baremetal-operator/pull/555)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/02e8806855f48956731548fa90e5c644f4e269f1...5cc04a88456ead0f8961c6a12e7002ef3e23b0fc)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/d4171c720f49821e9e578a1bf4c6ce92d569ef13)

* [OCPBUGS-78047](https://issues.redhat.com/browse/OCPBUGS-78047): Prefer to remove members where they have another healthy machine in the same failure domain index [#1564](https://github.com/openshift/cluster-etcd-operator/pull/1564)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/cf5fcdeba6032fcb81d1fd05e61c77ad68a9dd6c...d4171c720f49821e9e578a1bf4c6ce92d569ef13)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/d0cf9e755d887edf142bcb656c5b6d707a259d9d)

* [OCPBUGS-77005](https://issues.redhat.com/browse/OCPBUGS-77005): scc: restricted-v3: Fix runAsUser range [#1948](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1948)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/f6bb470ca76bd37d533a5366321faa9f478c614a...d0cf9e755d887edf142bcb656c5b6d707a259d9d)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/d58e99ade6e2de3436dd0a97e729704731c943bf)

* [OCPBUGS-74490](https://issues.redhat.com/browse/OCPBUGS-74490): Include `kube_pod_labels` in minimal profile [#2844](https://github.com/openshift/cluster-monitoring-operator/pull/2844)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/54af21f673d0f3ef4d5005a52c04ccdd4467e8b5...d58e99ade6e2de3436dd0a97e729704731c943bf)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/d1ec37ecb90d74eccc8d8c3e0bc42a8c0fb5ac6a)

* [OCPBUGS-77148](https://issues.redhat.com/browse/OCPBUGS-77148): Add config override for openflow-probe [#2918](https://github.com/openshift/cluster-network-operator/pull/2918)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/6d443d079015388a4966370d200fe040f0754160...d1ec37ecb90d74eccc8d8c3e0bc42a8c0fb5ac6a)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/b1f1c24b2a97a1691346b3f31e52026c07abc845)

* [OCPBUGS-78247](https://issues.redhat.com/browse/OCPBUGS-78247): workloadhints: use IsVM to skip BM-only tests [#1482](https://github.com/openshift/cluster-node-tuning-operator/pull/1482)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/601b61fe23b44be64007c238c4299ca1ae594292...b1f1c24b2a97a1691346b3f31e52026c07abc845)


### [console](https://github.com/openshift/console/tree/c5c94d538be79e7569d464aa271fabb9dff781f1)

* [OCPBUGS-77951](https://issues.redhat.com/browse/OCPBUGS-77951): Fix infinite recursion in project access form [#16117](https://github.com/openshift/console/pull/16117)
* [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16070](https://github.com/openshift/console/pull/16070)
* [Full changelog](https://github.com/openshift/console/compare/7c86c3d5773b7c9c541f73174e046a7630c212ea...c5c94d538be79e7569d464aa271fabb9dff781f1)


### [console-operator](https://github.com/openshift/console-operator/tree/1bb7f6f4e7851997fd24c5f5aa5be41ea8dd5bd2)

* [OCPBUGS-77771](https://issues.redhat.com/browse/OCPBUGS-77771): Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads [#1122](https://github.com/openshift/console-operator/pull/1122)
* [Full changelog](https://github.com/openshift/console-operator/compare/4670807cfebc21af0c8ea84cfe029f3286c130df...1bb7f6f4e7851997fd24c5f5aa5be41ea8dd5bd2)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/4ef1baeb6786a70898f3842a06e988d9566aa444)

* [OCPBUGS-77476](https://issues.redhat.com/browse/OCPBUGS-77476): Rebase v1.33.9 to release-4.20 [#2614](https://github.com/openshift/kubernetes/pull/2614)
* [Full changelog](https://github.com/openshift/kubernetes/compare/b96a4039358613f770d20f5e4ce5125f66369521...4ef1baeb6786a70898f3842a06e988d9566aa444)


### [hypershift](https://github.com/openshift/hypershift/tree/2308b45ca94e2cc59c91d672ac75b89addf210c1)

* [CNTRLPLANE-2814](https://issues.redhat.com/browse/CNTRLPLANE-2814): feat(aro): Swift support [#7885](https://github.com/openshift/hypershift/pull/7885)
* [OCPBUGS-76992](https://issues.redhat.com/browse/OCPBUGS-76992): fix kubevirt, use 100.66.0.0/16 for join subnet [#7733](https://github.com/openshift/hypershift/pull/7733)
* [OCPBUGS-78305](https://issues.redhat.com/browse/OCPBUGS-78305): Fix context cancel accumulation in getMirrorFromICSPOrIDMS [#7890](https://github.com/openshift/hypershift/pull/7890)
* [OCPBUGS-76324](https://issues.redhat.com/browse/OCPBUGS-76324): feat(updates): enable CVO metrics access with RHOBS monitoring flag [#7660](https://github.com/openshift/hypershift/pull/7660)
* [OCPBUGS-77366](https://issues.redhat.com/browse/OCPBUGS-77366): Fix ignition-server pod restarts [#7842](https://github.com/openshift/hypershift/pull/7842)
* [Full changelog](https://github.com/openshift/hypershift/compare/7630337d577b66ad01948819ba4d523410ecb97c...2308b45ca94e2cc59c91d672ac75b89addf210c1)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/84ce55daf997e1eb20568bef12cd6a6130afebeb)

* [OCPBUGS-78371](https://issues.redhat.com/browse/OCPBUGS-78371): Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.20 [#78](https://github.com/openshift/kubevirt-csi-driver/pull/78)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/8b8dd30ecd302e2b260c666702dffb19abf7c1aa...84ce55daf997e1eb20568bef12cd6a6130afebeb)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/662f6899c4461bbd296e149a8badd818e45c1252)

* [OCPBUGS-78049](https://issues.redhat.com/browse/OCPBUGS-78049): install/0000_80_machine-config_04_kube_rbac_proxy_config: Consistent terminal newline [#5753](https://github.com/openshift/machine-config-operator/pull/5753)
* [OCPBUGS-77883](https://issues.redhat.com/browse/OCPBUGS-77883): Fix failure domain matching during vsphere boot image updates [#5745](https://github.com/openshift/machine-config-operator/pull/5745)
* [OCPBUGS-77950](https://issues.redhat.com/browse/OCPBUGS-77950): Update AMI Whitelist [#5748](https://github.com/openshift/machine-config-operator/pull/5748)
* [OCPBUGS-77665](https://issues.redhat.com/browse/OCPBUGS-77665): Update AMI Whitelist [#5731](https://github.com/openshift/machine-config-operator/pull/5731)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/47f9080550b29ca0af7c2cfc92633c61ad0ef971...662f6899c4461bbd296e149a8badd818e45c1252)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/8887d0cbccb953e16538e70ec2fa46c10dd415cc)

* [OCPBUGS-78425](https://issues.redhat.com/browse/OCPBUGS-78425): Updating monitoring-plugin-container image to be consistent with ART for 4.20 [#843](https://github.com/openshift/monitoring-plugin/pull/843)
* [OU-1062](https://issues.redhat.com/browse/OU-1062): [release-4.20] feat: mark alert menu active for incidents tab [#826](https://github.com/openshift/monitoring-plugin/pull/826)
* [OCPBUGS-76581](https://issues.redhat.com/browse/OCPBUGS-76581): [release-4.20] CVE-2026-25639 openshift4/ose-monitoring-plugin-rhel9: Axios affected by Denial of Service via __proto__ Key in mergeConfig [#796](https://github.com/openshift/monitoring-plugin/pull/796)
* NO-JIRA: [release-4.20] e2e-monitoring fixing loop on legacy dashboard [#830](https://github.com/openshift/monitoring-plugin/pull/830)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/ca82c98666544880cc4442a22aaf9191f1949950...8887d0cbccb953e16538e70ec2fa46c10dd415cc)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/df9fe9c75eaf35c201e9ef89fb1e76163acbc9d5)

* [OCPBUGS-77416](https://issues.redhat.com/browse/OCPBUGS-77416): Fix registriesd "unknown userid" failure for arbitrary UIDs [#1360](https://github.com/openshift/oc-mirror/pull/1360)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/db6f0cf3f7cde5d6817ec113c8634102a58dc67e...df9fe9c75eaf35c201e9ef89fb1e76163acbc9d5)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/12a261a3702726aaaa339c5d2fceb8b6078ceec8)

* [OCPBUGS-77958](https://issues.redhat.com/browse/OCPBUGS-77958): Update NetworkPolicy egress for HyperShift custom API ports [#1253](https://github.com/openshift/operator-framework-olm/pull/1253)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/9cdde3bd7bf69417ec1a26a4c757f565b0107d0e...12a261a3702726aaaa339c5d2fceb8b6078ceec8)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/4ccd56c96839e2389e12bf3f8390a6c062e9b2cf)

* [OCPBUGS-77582](https://issues.redhat.com/browse/OCPBUGS-77582): Update NetworkPolicy egress to support HyperShift custom API ports [#730](https://github.com/operator-framework/operator-marketplace/pull/730)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/837defb90f7fa1c811806b10dcac5e0952f2d766...4ccd56c96839e2389e12bf3f8390a6c062e9b2cf)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/304bd93419279813366b6a04d7d6f3d1ff464cb1)

* [OCPBUGS-77148](https://issues.redhat.com/browse/OCPBUGS-77148): Minimize ACLs by combining ipBlocks into single ACL [#2981](https://github.com/openshift/ovn-kubernetes/pull/2981)
* [OCPBUGS-77357](https://issues.redhat.com/browse/OCPBUGS-77357): Clear stale conntrack UDP entries for nodePorts [#3012](https://github.com/openshift/ovn-kubernetes/pull/3012)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/238410bc9ec6408baa5f9b9c37f1c1066ac90e45...304bd93419279813366b6a04d7d6f3d1ff464cb1)


### [tests](https://github.com/openshift/origin/tree/4ab35741692eeb470ef2af694942300bd4148a57)

* [OCPBUGS-78025](https://issues.redhat.com/browse/OCPBUGS-78025): Skip oauth test for external control plane topology [#30848](https://github.com/openshift/origin/pull/30848)
* [OCPBUGS-78084](https://issues.redhat.com/browse/OCPBUGS-78084): Update optimized builds test to use rpm -qa instead of dnf [#30861](https://github.com/openshift/origin/pull/30861)
* [OCPBUGS-78084](https://issues.redhat.com/browse/OCPBUGS-78084): Allow test to tolerate running on minimal images [#30853](https://github.com/openshift/origin/pull/30853)
* [OCPBUGS-77824](https://issues.redhat.com/browse/OCPBUGS-77824): add the missing namespace from managed openshift [#30837](https://github.com/openshift/origin/pull/30837)
* [Full changelog](https://github.com/openshift/origin/compare/3b4f70ad314bf62dfb05876b7b744b43727fc7d7...4ab35741692eeb470ef2af694942300bd4148a57)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/6d0cfe391f8f76211f14f34a23612722603fe56b)

* [OCPBUGS-78436](https://issues.redhat.com/browse/OCPBUGS-78436): Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.20 [#92](https://github.com/openshift/cluster-api-provider-vsphere/pull/92)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/1ff9e11f5a117505d935549b96cd0d129917c015...6d0cfe391f8f76211f14f34a23612722603fe56b)