# 4.21.17
Created: 2026-05-21 19:24:39 +0000 UTC
Image Digest: `sha256:c3fc6bb6ebf88aa4dfeb681925432cb3987344a082508bb9c50d8e44820c6e68`
Promoted from quay.io/openshift-release-dev/ocp-release-nightly@sha256:f93342dc8ccae936cb1c487ffb962139958154522103c295787a8dd8c79de4dc
## Changes from 4.22.0-rc.4
### Components
* Kubectl upgraded from 1.35.2 to 1.34.1
* Kubernetes upgraded from 1.35.4 to 1.34.8
* Kubernetes Tests upgraded from 1.35.1 to 1.34.1
* Red Hat Enterprise Linux CoreOS upgraded from 10.2.20260513-0 to 10.2.20260513-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | OKD
Hypershift | OKD
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: |
| AWSEuropeanSovereignCloudInstall
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| AdditionalStorageConfig
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| CRIOCredentialProviderConfig
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ClusterAPIComputeInstall
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ClusterAPIControlPlaneInstall
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ClusterAPIMachineManagementAWS
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ClusterAPIMachineManagementAzure
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ClusterAPIMachineManagementBareMetal
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ClusterAPIMachineManagementGCP
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ClusterAPIMachineManagementOpenStack
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ClusterAPIMachineManagementPowerVS
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ClusterUpdateAcceptRisks
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ClusterUpdatePreflight
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ConfidentialCluster
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ConfigurablePKI
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| DRAPartitionableDevices
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| EVPN
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ExternalOIDCExternalClaimsSourcing
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ExternalOIDCWithUpstreamParity
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| GatewayAPIWithoutOLM
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| MachineAPIMigrationAWS
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| MachineAPIMigrationOpenStack
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| MachineAPIMigrationVSphere
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| NetworkConnect
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| NewOLMConfigAPI
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| NoOverlayMode
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| TLSAdherence
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| VSphereMultiVCenterDay2
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| AzureClusterHostedDNSInstall
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Not Available
(Changed)| Not Available
(Changed)| Enabled| Enabled |
| BootImageSkewEnforcement
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Not Available
(Changed)| Not Available
(Changed)| Enabled| Enabled |
| DualReplica
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Not Available
(Changed)| Not Available
(Changed)| Enabled| Enabled |
| InsightsConfig
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Not Available
(Changed)| Not Available
(Changed)| Enabled| Enabled |
| InsightsOnDemandDataGather
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Not Available
(Changed)| Not Available
(Changed)| Enabled| Enabled |
| ManagedBootImagesCPMS
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Not Available
(Changed)| Not Available
(Changed)| Enabled| Enabled |
| MutableCSINodeAllocatableCount
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Not Available
(Changed)| Not Available
(Changed)| Enabled| Enabled |
| VSphereHostVMGroupZonal
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Not Available
(Changed)| Not Available
(Changed)| Enabled| Enabled |
| AWSServiceLBNetworkSecurityGroup
(0 tests)| Disabled| Disabled
(Changed)| Enabled| Enabled| Not Available
(Changed)| Not Available
(Changed)| Enabled| Enabled |
| AdditionalRoutingCapabilities
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Not Available
(Changed)| Not Available
(Changed)| Enabled
(New)| Enabled
(New) |
| AdminNetworkPolicy
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Not Available
(Changed)| Not Available
(Changed)| Enabled
(New)| Enabled
(New) |
| AlibabaPlatform
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Not Available
(Changed)| Not Available
(Changed)| Enabled
(New)| Enabled
(New) |
| CPMSMachineNamePrefix
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Not Available
(Changed)| Not Available
(Changed)| Enabled
(New)| Enabled
(New) |
| GCPClusterHostedDNSInstall
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Not Available
(Changed)| Not Available
(Changed)| Enabled
(New)| Enabled
(New) |
| GatewayAPI
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Not Available
(Changed)| Not Available
(Changed)| Enabled
(New)| Enabled
(New) |
| GatewayAPIController
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Not Available
(Changed)| Not Available
(Changed)| Enabled
(New)| Enabled
(New) |
| HighlyAvailableArbiter
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Not Available
(Changed)| Not Available
(Changed)| Enabled
(New)| Enabled
(New) |
| ImageVolume
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Not Available
(Changed)| Not Available
(Changed)| Enabled
(New)| Enabled
(New) |
| MachineConfigNodes
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Not Available
(Changed)| Not Available
(Changed)| Enabled
(New)| Enabled
(New) |
| ManagedBootImages
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Not Available
(Changed)| Not Available
(Changed)| Enabled
(New)| Enabled
(New) |
| ManagedBootImagesAWS
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Not Available
(Changed)| Not Available
(Changed)| Enabled
(New)| Enabled
(New) |
| ManagedBootImagesAzure
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Not Available
(Changed)| Not Available
(Changed)| Enabled
(New)| Enabled
(New) |
| ManagedBootImagesvSphere
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Not Available
(Changed)| Not Available
(Changed)| Enabled
(New)| Enabled
(New) |
| NetworkDiagnosticsConfig
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Not Available
(Changed)| Not Available
(Changed)| Enabled
(New)| Enabled
(New) |
| NetworkLiveMigration
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Not Available
(Changed)| Not Available
(Changed)| Enabled
(New)| Enabled
(New) |
| NetworkSegmentation
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Not Available
(Changed)| Not Available
(Changed)| Enabled
(New)| Enabled
(New) |
| PinnedImages
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Not Available
(Changed)| Not Available
(Changed)| Enabled
(New)| Enabled
(New) |
| PreconfiguredUDNAddresses
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Not Available
(Changed)| Not Available
(Changed)| Enabled
(New)| Enabled
(New) |
| ProcMountType
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Not Available
(Changed)| Not Available
(Changed)| Enabled
(New)| Enabled
(New) |
| RouteAdvertisements
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Not Available
(Changed)| Not Available
(Changed)| Enabled
(New)| Enabled
(New) |
| VolumeAttributesClass
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Not Available
(Changed)| Not Available
(Changed)| Enabled
(New)| Enabled
(New) |
| ClusterAPIMachineManagementVSphere
(0 tests)| Disabled| Disabled| Enabled| Enabled| Not Available
(Changed)| Not Available
(Changed)| Disabled
(Changed)| Disabled
(Changed) |
| NewOLMBoxCutterRuntime
(0 tests)| Disabled| Disabled| Disabled| Disabled
(Changed)| Not Available
(Changed)| Not Available
(Changed)| Disabled| Disabled
(Changed) |
| GCPClusterHostedDNS
(0 tests)| | | Enabled
(New)| Enabled
(New)| Not Available
(Changed)| Not Available
(Changed)| Enabled
(New)| Enabled
(New) |
| TranslateStreamCloseWebsocketRequests
(0 tests)| | | Enabled
(New)| Enabled
(New)| Not Available
(Changed)| Not Available
(Changed)| Enabled
(New)| Enabled
(New) |
### Removed images
* aws-node-termination-handler
### Rebuilt images without code change
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:47682739587c39d18681827c14547e7c814d786b454ca4c0717a1a6fd3bccf78`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:1bbe22bc96de2b5de4b467107eb1c67fecaa0c36324034bc666d02ec729dac87`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [5e0f8d1b](https://github.com/openshift/egress-router-cni/commit/5e0f8d1b545899fda27c5e1cc8707d33cba1b534) `sha256:4d2b55b3243a5c4d1397b9fdce7013788c55134da3f884ef15eb9e664e8b4c88`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [08af4127](https://github.com/openshift/route-override-cni/commit/08af4127c77976510cad1c096d9aca977d8ae5af) `sha256:fd21f608c8293658a367acfaa4940070654834eddd255a8692d5c562d6d0ba17`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [d691040e](https://github.com/openshift/whereabouts-cni/commit/d691040e509bb20c26b5e8366c0d6f3bb45a5e02) `sha256:ef2e2555500d3104db72949178e69b920dfe6c7fa899938fdeca37180b9c547c`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [297eeb43](https://github.com/openshift/bond-cni/commit/297eeb4320e07b18d559bc373b665479c760e8c7) `sha256:6b3a17ee976c9c0b882588aa4b4204fe34caee4c13b6d620e65ddd293dd73ba1`
### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/a88966fd44394937c070dd9007e56ab4b4ace922)
* [OCPBUGS-81843](https://issues.redhat.com/browse/OCPBUGS-81843): Mark raw FC/iSCSI multipath members as ineligible [#10148](https://github.com/openshift/assisted-service/pull/10148)
* [OCPBUGS-81843](https://issues.redhat.com/browse/OCPBUGS-81843): Prefer multipath disk in ABI disk selection [#10112](https://github.com/openshift/assisted-service/pull/10112)
* [OCPBUGS-79580](https://issues.redhat.com/browse/OCPBUGS-79580): Fix multi-document YAML parsing for NMStateConfig [#10058](https://github.com/openshift/assisted-service/pull/10058)
* [AGENT-1431](https://issues.redhat.com/browse/AGENT-1431): Backport feature NoRegistryClusterInstall to 4.21 [#8806](https://github.com/openshift/assisted-service/pull/8806)
* [OCPBUGS-72519](https://issues.redhat.com/browse/OCPBUGS-72519): Fix YAML marshaling for Kubernetes types in disconnected ignition [#8736](https://github.com/openshift/assisted-service/pull/8736)
* [Full changelog](https://github.com/openshift/assisted-service/compare/8a98e5cd5e866b638a155a9d8b8b2d01555e13e7...a88966fd44394937c070dd9007e56ab4b4ace922)
### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/070f654bf5003765d3d00ab1811ef5ad111a5d4a)
* [OCPBUGS-81642](https://issues.redhat.com/browse/OCPBUGS-81642): fix: allow workers to join TNA cluster when 1 master + arbiter are ready [#2066](https://github.com/openshift/assisted-installer/pull/2066)
* [OCPBUGS-77536](https://issues.redhat.com/browse/OCPBUGS-77536): Fix root partition before copying IRI registry data [#2038](https://github.com/openshift/assisted-installer/pull/2038)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/a9bfcccdade3dec5e6d71dbbc6e03fe137a1660b...070f654bf5003765d3d00ab1811ef5ad111a5d4a)
### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/c7ea3d63462c49de12e7ccc5f57e9fa431f8b750)
* [OCPBUGS-85541](https://issues.redhat.com/browse/OCPBUGS-85541): Bump msw pkg version to 2.13.5 (#3729) [#3729](https://github.com/openshift-assisted/assisted-installer-ui/pull/3729)
* fix monted pull secret parsing (#3727) [#3727](https://github.com/openshift-assisted/assisted-installer-ui/pull/3727)
* [OCPBUGS-84235](https://issues.redhat.com/browse/OCPBUGS-84235): add pull secret auto populate logic to ABI local UI (#3509) [#3509](https://github.com/openshift-assisted/assisted-installer-ui/pull/3509)
* Allow to install SNO topology (#3722) [#3722](https://github.com/openshift-assisted/assisted-installer-ui/pull/3722)
* [OCPBUGS-85261](https://issues.redhat.com/browse/OCPBUGS-85261): [release-4.21] OCPBUGS-84147 | [Below the sea UI] Leaky Abstraction: Transient 500 errors exposed during host binding process (#3684) [#3684](https://github.com/openshift-assisted/assisted-installer-ui/pull/3684)
* Remove 2 node arbiter option from the control plane dropdown option (#3680) [#3680](https://github.com/openshift-assisted/assisted-installer-ui/pull/3680)
* [OCPBUGS-84608](https://issues.redhat.com/browse/OCPBUGS-84608), [OCPBUGS-84830](https://issues.redhat.com/browse/OCPBUGS-84830), [OCPBUGS-84993](https://issues.redhat.com/browse/OCPBUGS-84993), [OCPBUGS-85009](https://issues.redhat.com/browse/OCPBUGS-85009), [OCPBUGS-85039](https://issues.redhat.com/browse/OCPBUGS-85039): Bump axios to ^1.15.1 (#3690) [#3690](https://github.com/openshift-assisted/assisted-installer-ui/pull/3690)
* [MGMT-24152](https://issues.redhat.com/browse/MGMT-24152): UI allows editing pull secret in draft cluster (#3674) [#3674](https://github.com/openshift-assisted/assisted-installer-ui/pull/3674)
* Update OWNERS file (#3654) [#3654](https://github.com/openshift-assisted/assisted-installer-ui/pull/3654)
* Bump happy-dom from 20.0.2 to 20.8.9 (#3525) [#3525](https://github.com/openshift-assisted/assisted-installer-ui/pull/3525)
* fix operators list in ABI below the sea (#3599) [#3599](https://github.com/openshift-assisted/assisted-installer-ui/pull/3599)
* [OCPBUGS-81589](https://issues.redhat.com/browse/OCPBUGS-81589): bump react-router-dom-v5-compat to ^6.30.3 to address CVE-2026-22029 (#3581) [#3581](https://github.com/openshift-assisted/assisted-installer-ui/pull/3581)
* [OCPBUGS-83303](https://issues.redhat.com/browse/OCPBUGS-83303): bump axios to ^1.15.0 for fixing CVE-2026-40175 (#3583) [#3583](https://github.com/openshift-assisted/assisted-installer-ui/pull/3583)
* [OCPBUGS-81587](https://issues.redhat.com/browse/OCPBUGS-81587): upgrade lodash and lodash-es to 4.17.23 to address CVE-2025-13465 (#3535) [#3535](https://github.com/openshift-assisted/assisted-installer-ui/pull/3535)
* Add support for release branches in PR workflow (#3528) [#3528](https://github.com/openshift-assisted/assisted-installer-ui/pull/3528)
* populate default values in local ui from infraEnv (#3503) [#3503](https://github.com/openshift-assisted/assisted-installer-ui/pull/3503)
* Assisted Installer OVE UI shows transient blank page with Technology Preview spinner (#3349) [#3349](https://github.com/openshift-assisted/assisted-installer-ui/pull/3349)
* API/Ingress IP fields lack character limit (#3347) [#3347](https://github.com/openshift-assisted/assisted-installer-ui/pull/3347)
* remove external platforms field from below sea level UI (#3317) [#3317](https://github.com/openshift-assisted/assisted-installer-ui/pull/3317)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/2c9007c648cc6395a885c3a563cfeda8dff5c82b...c7ea3d63462c49de12e7ccc5f57e9fa431f8b750)
### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/dc0bd0906fc9868a65cc9488a7dbdd0f35ca4a23)
* [OCPBUGS-84120](https://issues.redhat.com/browse/OCPBUGS-84120): Update OCP version for Konflux [#301](https://github.com/openshift/agent-installer-utils/pull/301)
* [OCPBUGS-85526](https://issues.redhat.com/browse/OCPBUGS-85526): update konflux references [#287](https://github.com/openshift/agent-installer-utils/pull/287)
* [OCPBUGS-83852](https://issues.redhat.com/browse/OCPBUGS-83852): Pass environment through to podman [#292](https://github.com/openshift/agent-installer-utils/pull/292)
* [OCPBUGS-82588](https://issues.redhat.com/browse/OCPBUGS-82588): Update OCP version in Konflux [#285](https://github.com/openshift/agent-installer-utils/pull/285)
* [OCPBUGS-82539](https://issues.redhat.com/browse/OCPBUGS-82539): Update Konflux references [#265](https://github.com/openshift/agent-installer-utils/pull/265)
* [OCPBUGS-81645](https://issues.redhat.com/browse/OCPBUGS-81645): Update operator versions [#282](https://github.com/openshift/agent-installer-utils/pull/282)
* [OCPBUGS-78393](https://issues.redhat.com/browse/OCPBUGS-78393): Update Konflux release version to 4.21.5 [#270](https://github.com/openshift/agent-installer-utils/pull/270)
* [OCPBUGS-78188](https://issues.redhat.com/browse/OCPBUGS-78188): Add a flag to provide a custom appliance image [#273](https://github.com/openshift/agent-installer-utils/pull/273)
* [OCPBUGS-78144](https://issues.redhat.com/browse/OCPBUGS-78144): Update to use the 4.21 Catalog [#271](https://github.com/openshift/agent-installer-utils/pull/271)
* [OCPBUGS-77538](https://issues.redhat.com/browse/OCPBUGS-77538): (Backport) Override prefilled rendezvousIP [#263](https://github.com/openshift/agent-installer-utils/pull/263)
* [OCPBUGS-77302](https://issues.redhat.com/browse/OCPBUGS-77302): Remove multiple redhat-operator-index catalogs [#262](https://github.com/openshift/agent-installer-utils/pull/262)
* [OCPBUGS-77236](https://issues.redhat.com/browse/OCPBUGS-77236): Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 2f3015a [#222](https://github.com/openshift/agent-installer-utils/pull/222)
* [OCPBUGS-77220](https://issues.redhat.com/browse/OCPBUGS-77220): Update Konflux references [#251](https://github.com/openshift/agent-installer-utils/pull/251)
* [OCPBUGS-76590](https://issues.redhat.com/browse/OCPBUGS-76590): Update Konflux files to build 4.21.1 [#254](https://github.com/openshift/agent-installer-utils/pull/254)
* [OCPBUGS-76411](https://issues.redhat.com/browse/OCPBUGS-76411): Include additional operators in OVE config [#253](https://github.com/openshift/agent-installer-utils/pull/253)
* [AGENT-1431](https://issues.redhat.com/browse/AGENT-1431): Backport feature NoRegistryClusterInstall to 4.21 [#248](https://github.com/openshift/agent-installer-utils/pull/248)
* [OCPBUGS-74935](https://issues.redhat.com/browse/OCPBUGS-74935): Update Konflux references [#220](https://github.com/openshift/agent-installer-utils/pull/220)
* [OCPBUGS-74304](https://issues.redhat.com/browse/OCPBUGS-74304): Increase Konflux build pipeline memory [#243](https://github.com/openshift/agent-installer-utils/pull/243)
* [OCPBUGS-71230](https://issues.redhat.com/browse/OCPBUGS-71230): bump github.com/sirupsen/logrus to v1.9.3 [#234](https://github.com/openshift/agent-installer-utils/pull/234)
* [OCPBUGS-73671](https://issues.redhat.com/browse/OCPBUGS-73671): Increase capabilities passed via buildah [#231](https://github.com/openshift/agent-installer-utils/pull/231)
* [OCPBUGS-69877](https://issues.redhat.com/browse/OCPBUGS-69877): Update Konflux files to build for 4.21 [#217](https://github.com/openshift/agent-installer-utils/pull/217)
* [OCPBUGS-69841](https://issues.redhat.com/browse/OCPBUGS-69841): Red Hat Konflux kflux-prd-rh02 update ove-ui-iso-4-21 [#215](https://github.com/openshift/agent-installer-utils/pull/215)
* [OCPBUGS-69443](https://issues.redhat.com/browse/OCPBUGS-69443): Remove operator manifests; now applied by assisted-installer [#214](https://github.com/openshift/agent-installer-utils/pull/214)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/113794d5b89d0caa153fe763d42627cfe0c2f845...dc0bd0906fc9868a65cc9488a7dbdd0f35ca4a23)
### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/fdc7f3f15c693593cb573b6bef6f0363256b6f52)
* [OCPCLOUD-3341](https://issues.redhat.com/browse/OCPCLOUD-3341): Updates ecr-credential-provider make target [#134](https://github.com/openshift/cloud-provider-aws/pull/134)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/e73d6a3821655afc6fb19d88a66907078e6854f2...fdc7f3f15c693593cb573b6bef6f0363256b6f52)
### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/1d8cec7d0eeedf1497c3ee6c32ee3391ebb13709)
* [OCPBUGS-80734](https://issues.redhat.com/browse/OCPBUGS-80734): Bump google.golang.org/grpc to v1.79.3 [#310](https://github.com/openshift/aws-ebs-csi-driver/pull/310)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/51d6bc760234ffccb0348937a5cfd70b326119b9...1d8cec7d0eeedf1497c3ee6c32ee3391ebb13709)
### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/5f294954dc029e0ed120243c3188af81df89d9e4)
* [OCPBUGS-85234](https://issues.redhat.com/browse/OCPBUGS-85234): Mount writable /tmp in SMB CSI driver [#551](https://github.com/openshift/csi-operator/pull/551)
* [OCPBUGS-80844](https://issues.redhat.com/browse/OCPBUGS-80844): Bump google.golang.org/grpc to v1.79.3 [#539](https://github.com/openshift/csi-operator/pull/539)
* [OCPBUGS-78779](https://issues.redhat.com/browse/OCPBUGS-78779): Fix readonly root fs in Azure init containers [#528](https://github.com/openshift/csi-operator/pull/528)
* [OCPBUGS-78155](https://issues.redhat.com/browse/OCPBUGS-78155): Add only to tags to volume object, if volume is not already tagged [#521](https://github.com/openshift/csi-operator/pull/521)
* [OCPBUGS-74215](https://issues.redhat.com/browse/OCPBUGS-74215): [release-4.21] Add VAC manifest for tests in AWS EBS [#485](https://github.com/openshift/csi-operator/pull/485)
* [OCPBUGS-72509](https://issues.redhat.com/browse/OCPBUGS-72509): deploy prometheus role and binding on hypershift guest [#489](https://github.com/openshift/csi-operator/pull/489)
* [OCPBUGS-72527](https://issues.redhat.com/browse/OCPBUGS-72527): Add SupportedSizeRange for azurefile-nfs [#490](https://github.com/openshift/csi-operator/pull/490)
* [Full changelog](https://github.com/openshift/csi-operator/compare/03efa661bf0a53129259fb4e355584ac5a5d4fb7...5f294954dc029e0ed120243c3188af81df89d9e4)
### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/887615ffa8a595ee3693e92fa56db4dd30f20f73)
* [OCPBUGS-80711](https://issues.redhat.com/browse/OCPBUGS-80711): Bump google.golang.org/grpc to v1.79.3 [#40](https://github.com/openshift/aws-encryption-provider/pull/40)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/19e7b623429799c9c549690a1b5ab499844411f9...887615ffa8a595ee3693e92fa56db4dd30f20f73)
### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/938565c9f796fba385c0978a5ae1cc0a79f0f857)
* [OCPBUGS-72523](https://issues.redhat.com/browse/OCPBUGS-72523): Fix reconciler consistency checks in Update and Exists [#163](https://github.com/openshift/machine-api-provider-aws/pull/163)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/1a0ccbcfc0a7dc06f3a494f0e2b78aa0a0256b9c...938565c9f796fba385c0978a5ae1cc0a79f0f857)
### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/5cd42ed1e5151f45f0134593e9cfebdb6517b385)
* [OCPBUGS-74170](https://issues.redhat.com/browse/OCPBUGS-74170): Fix GOTOOLCHAIN env var [#213](https://github.com/openshift/aws-pod-identity-webhook/pull/213)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/8208828799b6c4f91fd9b80128668f7765599e84...5cd42ed1e5151f45f0134593e9cfebdb6517b385)
### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/83b3f9ec7df408c3d53d5f8e6fe84e0bdd4398e8)
* [OCPBUGS-69804](https://issues.redhat.com/browse/OCPBUGS-69804): Merge https://github.com/kubernetes-sigs/cloud-provider-azure:765f4352a0be4a8f1160e83293fa8668a5f349b1 (765f435) into release-4.21 [#154](https://github.com/openshift/cloud-provider-azure/pull/154)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/4c7a764630c621d5e1700649fc056800d35bb6d1...83b3f9ec7df408c3d53d5f8e6fe84e0bdd4398e8)
### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/ebf58aac3fc6746fe2037f2166f1226b73b424f4)
* [OCPBUGS-80740](https://issues.redhat.com/browse/OCPBUGS-80740): Bump google.golang.org/grpc to v1.79.3 [#383](https://github.com/openshift/cluster-api-provider-azure/pull/383)
* [OCPBUGS-74398](https://issues.redhat.com/browse/OCPBUGS-74398), [OCPCLOUD-3101](https://issues.redhat.com/browse/OCPCLOUD-3101): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.22.0 (4523016) into release-4.21 [#361](https://github.com/openshift/cluster-api-provider-azure/pull/361)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/a6ffab6a17878cb9b9eeaa6337c996989d1e7ee3...ebf58aac3fc6746fe2037f2166f1226b73b424f4)
### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/aed3ad0d7780188dbfb7ae67a5d69118b7d74556)
* [OCPBUGS-85285](https://issues.redhat.com/browse/OCPBUGS-85285): check for node name in waitForDiskManagedByTobeRemoved [#147](https://github.com/openshift/azure-disk-csi-driver/pull/147)
* UPSTREAM: 3569: OCPBUGS-80741: Bump grpc to v1.79.3 [#137](https://github.com/openshift/azure-disk-csi-driver/pull/137)
* [OCPBUGS-78012](https://issues.redhat.com/browse/OCPBUGS-78012): 4.21 rebase v1.34.2 [#126](https://github.com/openshift/azure-disk-csi-driver/pull/126)
* [OCPBUGS-69655](https://issues.redhat.com/browse/OCPBUGS-69655): fix ASH static provision segmentation fault [#118](https://github.com/openshift/azure-disk-csi-driver/pull/118)
* [OCPBUGS-67305](https://issues.redhat.com/browse/OCPBUGS-67305): fix: disk creation failure in AzureStack env [#116](https://github.com/openshift/azure-disk-csi-driver/pull/116)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/799ce30e63a4dd3ac74b391e494dc8b50066644f...aed3ad0d7780188dbfb7ae67a5d69118b7d74556)
### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/45061e97a5e2b20b01cd55fee97e5dac43fd79e4)
* UPSTREAM: 3023: OCPBUGS-80744: Bump grpc to v1.79.3 [#125](https://github.com/openshift/azure-file-csi-driver/pull/125)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/403f856e29605126b2711a1bfe7a4f6c276b344d...45061e97a5e2b20b01cd55fee97e5dac43fd79e4)
### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/21e0a215b7e5b31eaa75027e0df9eee943e48323)
* [OCPBUGS-80712](https://issues.redhat.com/browse/OCPBUGS-80712): Bump google.golang.org/grpc to 1.64.1-sec.1 patch [#34](https://github.com/openshift/azure-kubernetes-kms/pull/34)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/99b9a3a33d8edfd0a2d2876aa7ef1382b2c75a39...21e0a215b7e5b31eaa75027e0df9eee943e48323)
### [azure-service-operator](https://github.com/openshift/azure-service-operator/tree/5e84c83176d7630f70802b35cb10cdf2b60fd6d3)
* [OCPBUGS-80713](https://issues.redhat.com/browse/OCPBUGS-80713): Bump google.golang.org/grpc to v1.79.3 [#28](https://github.com/openshift/azure-service-operator/pull/28)
* [OCPBUGS-83864](https://issues.redhat.com/browse/OCPBUGS-83864): UPSTREAM: <carry>: add openshift/e2e-tests.sh [#24](https://github.com/openshift/azure-service-operator/pull/24)
* [Full changelog](https://github.com/openshift/azure-service-operator/compare/b44d444422f5a7eb21b9ca65f3975a2d13ec9b36...5e84c83176d7630f70802b35cb10cdf2b60fd6d3)
### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/9a415c497e70d5234c473325cf17aeef78c03544)
* [OCPBUGS-84225](https://issues.redhat.com/browse/OCPBUGS-84225): ibmcloud: bump vpc-go-sdk and capibm [#10514](https://github.com/openshift/installer/pull/10514)
* [OCPBUGS-82439](https://issues.redhat.com/browse/OCPBUGS-82439): [release-4.21] Mount pullsecret manifest to UI container [#10489](https://github.com/openshift/installer/pull/10489)
* [OCPBUGS-79074](https://issues.redhat.com/browse/OCPBUGS-79074): [release 4.21] - Allow all instance types in the install config for GCP [#10417](https://github.com/openshift/installer/pull/10417)
* [OCPBUGS-79378](https://issues.redhat.com/browse/OCPBUGS-79378): Use correct Project ID with GCP Shared VPC [#10423](https://github.com/openshift/installer/pull/10423)
* [OCPBUGS-79424](https://issues.redhat.com/browse/OCPBUGS-79424): Do not discard NMStateConfig when agent-config is on disk for unconfigured-ignition [#10428](https://github.com/openshift/installer/pull/10428)
* [OCPBUGS-79421](https://issues.redhat.com/browse/OCPBUGS-79421): Fix race condition: wait for agent-register-infraenv before showing UI URL [#10425](https://github.com/openshift/installer/pull/10425)
* no-jira: fix SC2328 shellcheck errors [#10424](https://github.com/openshift/installer/pull/10424)
* [OCPBUGS-77900](https://issues.redhat.com/browse/OCPBUGS-77900): Add c8g* to tested_instance_types_aarch64 [#10366](https://github.com/openshift/installer/pull/10366)
* [OCPBUGS-79375](https://issues.redhat.com/browse/OCPBUGS-79375): Don't auto-calculate RendezvousIP in unconfigured-ignition [#10410](https://github.com/openshift/installer/pull/10410)
* [OCPBUGS-78696](https://issues.redhat.com/browse/OCPBUGS-78696): [release-4.21] : Disable LoadBalancer in cloud config when Octavia is unavailable [#10399](https://github.com/openshift/installer/pull/10399)
* [OCPBUGS-78241](https://issues.redhat.com/browse/OCPBUGS-78241): Increase timeout for waiting control plane [#10383](https://github.com/openshift/installer/pull/10383)
* [OCPBUGS-77504](https://issues.redhat.com/browse/OCPBUGS-77504): fix wavelength zone name regex [#10343](https://github.com/openshift/installer/pull/10343)
* [OCPBUGS-77551](https://issues.redhat.com/browse/OCPBUGS-77551): Increase size of /var/ostreecontainer mount [#10346](https://github.com/openshift/installer/pull/10346)
* [OCPBUGS-73878](https://issues.redhat.com/browse/OCPBUGS-73878): handle SSH rule deletion for Azure private [#10225](https://github.com/openshift/installer/pull/10225)
* [OCPBUGS-76358](https://issues.redhat.com/browse/OCPBUGS-76358): [release-4.21] Fix destroy bootstrap command for Azure [#10293](https://github.com/openshift/installer/pull/10293)
* [AGENT-1431](https://issues.redhat.com/browse/AGENT-1431): Backport feature NoRegistryClusterInstall to 4.21 [#10250](https://github.com/openshift/installer/pull/10250)
* [OCPBUGS-74672](https://issues.redhat.com/browse/OCPBUGS-74672): [release-4.21] GCP: skip AI zones [#10272](https://github.com/openshift/installer/pull/10272)
* [OSDOCS-17769](https://issues.redhat.com/browse/OSDOCS-17769): [release-4.21] Add AWS m7 instance types [#10266](https://github.com/openshift/installer/pull/10266)
* [OCPBUGS-74493](https://issues.redhat.com/browse/OCPBUGS-74493): add support for NVIDIA H100 and H200 enabled machine series [#10259](https://github.com/openshift/installer/pull/10259)
* [OCPBUGS-74414](https://issues.redhat.com/browse/OCPBUGS-74414): Remove region option for the GCP Private Service Connect Endpoint [#10253](https://github.com/openshift/installer/pull/10253)
* [OCPBUGS-73891](https://issues.redhat.com/browse/OCPBUGS-73891): add newly detected instance types for Azure during 4.21 regression test [#10227](https://github.com/openshift/installer/pull/10227)
* [OCPBUGS-73773](https://issues.redhat.com/browse/OCPBUGS-73773): ensure deterministic zone ordering for control plane machines [#10214](https://github.com/openshift/installer/pull/10214)
* [OCPBUGS-72521](https://issues.redhat.com/browse/OCPBUGS-72521): Fix nil pointer exception in azure mapiImage [#10201](https://github.com/openshift/installer/pull/10201)
* [OCPBUGS-72578](https://issues.redhat.com/browse/OCPBUGS-72578): CORS-4108: bump default channel to stable-4.21 [#10204](https://github.com/openshift/installer/pull/10204)
* [OCPBUGS-69685](https://issues.redhat.com/browse/OCPBUGS-69685), [SPLAT-2584](https://issues.redhat.com/browse/SPLAT-2584): Added ability to install different IPAM version when in TP. [#10174](https://github.com/openshift/installer/pull/10174)
* [OCPBUGS-66355](https://issues.redhat.com/browse/OCPBUGS-66355): Update the RHCOS 4.21 bootimage metadata to 9.6.20251212-1 [#10191](https://github.com/openshift/installer/pull/10191)
* [OCPBUGS-69752](https://issues.redhat.com/browse/OCPBUGS-69752): installing into GCP Shared VPC with minimal permissions [#10173](https://github.com/openshift/installer/pull/10173)
* [OCPBUGS-69927](https://issues.redhat.com/browse/OCPBUGS-69927): PowerVC: fix PostProvision [#10180](https://github.com/openshift/installer/pull/10180)
* [OCPBUGS-69876](https://issues.redhat.com/browse/OCPBUGS-69876): rename "var-ostree\x2dcontainer.mount" to something more computer-friendly [#10178](https://github.com/openshift/installer/pull/10178)
* [OCPBUGS-69722](https://issues.redhat.com/browse/OCPBUGS-69722): use CAPZ to provision ssh rule [#10172](https://github.com/openshift/installer/pull/10172)
* [OCPBUGS-68363](https://issues.redhat.com/browse/OCPBUGS-68363): azure: allow hive to pass empty rhcos image string [#10163](https://github.com/openshift/installer/pull/10163)
* [OCPBUGS-67314](https://issues.redhat.com/browse/OCPBUGS-67314): AGENT-1357 remove AgentWorkflowTypeInstallInteractiveDisconnected workflow [#10161](https://github.com/openshift/installer/pull/10161)
* [OCPBUGS-68372](https://issues.redhat.com/browse/OCPBUGS-68372): Fix ignition warning about agent-extract-tui.service [#10164](https://github.com/openshift/installer/pull/10164)
* [Full changelog](https://github.com/openshift/installer/compare/b8a967b9336275a333e96a658dcccebbc0fb8fea...9a415c497e70d5234c473325cf17aeef78c03544)
### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/0aeba7af56b884fadf7f7209d7557e6214b9f49c)
* [OCPBUGS-82141](https://issues.redhat.com/browse/OCPBUGS-82141): Fix PPI for ACM [#476](https://github.com/openshift/baremetal-operator/pull/476)
* [OCPBUGS-65683](https://issues.redhat.com/browse/OCPBUGS-65683): OCPBUGS-78835: PR2774 and PR2793 backports [release-4.21] [#469](https://github.com/openshift/baremetal-operator/pull/469)
* Bug OCPBUGS-76492: BMO fails to start servicing despite updates to HFC spec [#459](https://github.com/openshift/baremetal-operator/pull/459)
* [OCPBUGS-68369](https://issues.redhat.com/browse/OCPBUGS-68369): Abort inspection/cleaning before powering off during deletion [#449](https://github.com/openshift/baremetal-operator/pull/449)
* [OCPBUGS-74365](https://issues.redhat.com/browse/OCPBUGS-74365): Fix invalidDNSNameinvalidipv6 test for Go 1.24+ [#450](https://github.com/openshift/baremetal-operator/pull/450)
* [OCPBUGS-67294](https://issues.redhat.com/browse/OCPBUGS-67294): Require PreprovisioningImage for deprovisioning when cleaning is enabled [#443](https://github.com/openshift/baremetal-operator/pull/443)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/c5e5048987427f58d3ca76238537e74bd3175e0f...0aeba7af56b884fadf7f7209d7557e6214b9f49c)
### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/d7e3fc12bd9dc911f0fac4c9a46b814c7be62b14)
* [OCPBUGS-77168](https://issues.redhat.com/browse/OCPBUGS-77168): Install dbus-tools, needed in pkg/monitor/dnsmasqmonitor.go [#383](https://github.com/openshift/baremetal-runtimecfg/pull/383)
* [OCPBUGS-72566](https://issues.redhat.com/browse/OCPBUGS-72566): Fix TNA and TNF dummy ip for ipv6 [#378](https://github.com/openshift/baremetal-runtimecfg/pull/378)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/dca8cb1be0cce1ce404dfd407ead1326a3c8bb40...d7e3fc12bd9dc911f0fac4c9a46b814c7be62b14)
### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/9d9df34c46c9deba8c291a2a084de5724c0bd820)
* [MCO-1961](https://issues.redhat.com/browse/MCO-1961): Allow multiple machine-os versions [#2244](https://github.com/openshift/oc/pull/2244)
* [COS-4005](https://issues.redhat.com/browse/COS-4005): Allow periods in display name labels for version validation [#2243](https://github.com/openshift/oc/pull/2243)
* [OCPBUGS-77486](https://issues.redhat.com/browse/OCPBUGS-77486): Makefile: Strip debugging symbols by default [#2211](https://github.com/openshift/oc/pull/2211)
* [OCPBUGS-77168](https://issues.redhat.com/browse/OCPBUGS-77168): Install subscription-manager in required images [#2208](https://github.com/openshift/oc/pull/2208)
* [OCPBUGS-73911](https://issues.redhat.com/browse/OCPBUGS-73911): Fix unit test failure by updating ruby version to 3.3 [#2186](https://github.com/openshift/oc/pull/2186)
* [Full changelog](https://github.com/openshift/oc/compare/66dee73f66c4f048c333c6a77d76871872027896...9d9df34c46c9deba8c291a2a084de5724c0bd820)
### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/693d9f3485b21cf128fa379eabd6787737fa56ad)
* [OCPBUGS-79367](https://issues.redhat.com/browse/OCPBUGS-79367): google.golang.org/grpc v1.79.3 [#993](https://github.com/openshift/cloud-credential-operator/pull/993)
* [OCPBUGS-78199](https://issues.redhat.com/browse/OCPBUGS-78199): Fix infrastructure resource name filtering in watch predicate [#988](https://github.com/openshift/cloud-credential-operator/pull/988)
* [OCPBUGS-71222](https://issues.redhat.com/browse/OCPBUGS-71222): test-ext: remove kubernetes module dependency [#958](https://github.com/openshift/cloud-credential-operator/pull/958)
* [OCPBUGS-74545](https://issues.redhat.com/browse/OCPBUGS-74545): Resolve nil pointer exception in hasResourceTags [#969](https://github.com/openshift/cloud-credential-operator/pull/969)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/c23bddf58e561b725ab5eb012252091e7a472084...693d9f3485b21cf128fa379eabd6787737fa56ad)
### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/57db2d05e057dc90bae3dc1b0e806b3259d38fc0)
* [OCPBUGS-77154](https://issues.redhat.com/browse/OCPBUGS-77154): Refrain from adding Egress IP to public LB backend pool [#205](https://github.com/openshift/cloud-network-config-controller/pull/205)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/2d69ad953cfaa419e9b6221da9edb152ded91e0b...57db2d05e057dc90bae3dc1b0e806b3259d38fc0)
### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/65eb4b2193d0860c1c1f45b08ea7203694db909f)
* [OCPBUGS-81677](https://issues.redhat.com/browse/OCPBUGS-81677): Do not return error when an IdP returns 500 during a grant check [#868](https://github.com/openshift/cluster-authentication-operator/pull/868)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Bump library-go to get KMS [#847](https://github.com/openshift/cluster-authentication-operator/pull/847)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): carry test assertion [#848](https://github.com/openshift/cluster-authentication-operator/pull/848)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Conditionally add the KMS plugin volume mount to the oauth-apiserver container [#846](https://github.com/openshift/cluster-authentication-operator/pull/846)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Add KMS test scenarios [#844](https://github.com/openshift/cluster-authentication-operator/pull/844)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/5a44cc2a8c36d144f8782e23f47bc31e2e4ead88...65eb4b2193d0860c1c1f45b08ea7203694db909f)
### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/838a5957d0bebc33c7a0a8a7efd4f5dcb4098286)
* [OCPBUGS-78684](https://issues.redhat.com/browse/OCPBUGS-78684): allow clusterapi provider to skip paused resources [#410](https://github.com/openshift/kubernetes-autoscaler/pull/410)
* [OCPBUGS-76296](https://issues.redhat.com/browse/OCPBUGS-76296): Pick upstream commits to Fix VPA recommender concurrent access panic [#404](https://github.com/openshift/kubernetes-autoscaler/pull/404)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/521e545fb92e7138b2ce2bc05f871f53a6c112fb...838a5957d0bebc33c7a0a8a7efd4f5dcb4098286)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/18e163a4c14db692938da08b7bec821d483945f9)
* [OCPBUGS-78580](https://issues.redhat.com/browse/OCPBUGS-78580): Allow ProvisioningCIDR for unmanaged network [#576](https://github.com/openshift/cluster-baremetal-operator/pull/576)
* [OCPBUGS-77418](https://issues.redhat.com/browse/OCPBUGS-77418): Fix ironic-proxy service routing for port 6385 [#560](https://github.com/openshift/cluster-baremetal-operator/pull/560)
* [OCPBUGS-77035](https://issues.redhat.com/browse/OCPBUGS-77035): Update kubebuilder tools to more latest version [#558](https://github.com/openshift/cluster-baremetal-operator/pull/558)
* [OCPBUGS-74204](https://issues.redhat.com/browse/OCPBUGS-74204): Fix libguestfs /tmp access in machine-os-downloader init container [#551](https://github.com/openshift/cluster-baremetal-operator/pull/551)
* [OCPBUGS-70163](https://issues.redhat.com/browse/OCPBUGS-70163): Remove the writable ironic CA cert volume mount at /certs/ca/ironic path, ironic will use the writable /conf mount if needed [#541](https://github.com/openshift/cluster-baremetal-operator/pull/541)
* [OCPBUGS-70218](https://issues.redhat.com/browse/OCPBUGS-70218): Add sharedVolumeMount to machine-os-downloader init container [#542](https://github.com/openshift/cluster-baremetal-operator/pull/542)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/8283556016a8018642899fd1846bab127c29f4ef...18e163a4c14db692938da08b7bec821d483945f9)
### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/9dd5eba07922bb84bf1ec2b16cbbedd6ad195874)
* [OCPBUGS-80749](https://issues.redhat.com/browse/OCPBUGS-80749): Bump google.golang.org/grpc to v1.79.3 [#293](https://github.com/openshift/cluster-api/pull/293)
* [OCPBUGS-69685](https://issues.redhat.com/browse/OCPBUGS-69685): openshift: CAPI IPAM TechPreviewNoUpgrade: set webhooks failurepolicy: Ignore [#257](https://github.com/openshift/cluster-api/pull/257)
* [Full changelog](https://github.com/openshift/cluster-api/compare/f1718df9c13b0cee5ede1b6354e29acc466607a4...9dd5eba07922bb84bf1ec2b16cbbedd6ad195874)
### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/f9513d3255926b63185a5b5203126699925133c3)
* NO-JIRA: Allow sustaining engineering to self serve dependency updates [#554](https://github.com/openshift/cluster-capi-operator/pull/554)
* [OCPBUGS-80753](https://issues.redhat.com/browse/OCPBUGS-80753): Bump google.golang.org/grpc to v1.79.3 [#550](https://github.com/openshift/cluster-capi-operator/pull/550)
* [OCPBUGS-74650](https://issues.redhat.com/browse/OCPBUGS-74650): fix: e2e: workaround for flakes caused by OCPBUGS-74571, until it is fixed [#450](https://github.com/openshift/cluster-capi-operator/pull/450)
* [OCPBUGS-73908](https://issues.redhat.com/browse/OCPBUGS-73908): Remove references to cluster-api-operator image [#445](https://github.com/openshift/cluster-capi-operator/pull/445)
* [OCPBUGS-69772](https://issues.redhat.com/browse/OCPBUGS-69772), [OCPCLOUD-3105](https://issues.redhat.com/browse/OCPCLOUD-3105): make use of sigs.k8s.io/cluster-api's v1beta2 [#435](https://github.com/openshift/cluster-capi-operator/pull/435)
* [OCPBUGS-69417](https://issues.redhat.com/browse/OCPBUGS-69417): fix: e2e: CAPI creation issue/scale-down wait issue/machine nodeRef comparison issue [#433](https://github.com/openshift/cluster-capi-operator/pull/433)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/6c7ba9cea681f90fbab82d9e2e222e5afbacd885...f9513d3255926b63185a5b5203126699925133c3)
### [cluster-config-api](https://github.com/openshift/api/tree/d6cd612317218735862945e2bafc4a4054be2798)
* [OCPBUGS-83756](https://issues.redhat.com/browse/OCPBUGS-83756): fix(config/v1): define constants for authentication types as typed constants [#2815](https://github.com/openshift/api/pull/2815)
* [CNTRLPLANE-2796](https://issues.redhat.com/browse/CNTRLPLANE-2796): promote the event-ttl feature [#2809](https://github.com/openshift/api/pull/2809)
* [OCPBUGS-82578](https://issues.redhat.com/browse/OCPBUGS-82578): [release-4.21] postpone the removal of the DeploymentConfig API [#2801](https://github.com/openshift/api/pull/2801)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Introduce KMSEncryption feature gate [#2670](https://github.com/openshift/api/pull/2670)
* [OCPBUGS-76408](https://issues.redhat.com/browse/OCPBUGS-76408): Move DynamicConfigurationManager back to TPNU [#2703](https://github.com/openshift/api/pull/2703)
* [OCPBUGS-61678](https://issues.redhat.com/browse/OCPBUGS-61678): Disable PSA for 4.21 [#2623](https://github.com/openshift/api/pull/2623)
* [Full changelog](https://github.com/openshift/api/compare/694421e64aeeae4374e7e7394014ad40ab5a1f30...d6cd612317218735862945e2bafc4a4054be2798)
### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/2dde33fb94aae47b460a5f6a672d06c9ee4225d8)
* [OCPBUGS-74588](https://issues.redhat.com/browse/OCPBUGS-74588): Bump openshift/api to get latest AWSMachineProviderConfig type [#386](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/386)
* [OCPBUGS-69921](https://issues.redhat.com/browse/OCPBUGS-69921): Fix Makefile to use vendor mode [#380](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/380)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/b2e26b937e7f6dab36b63ace9c8453ba9654011c...2dde33fb94aae47b460a5f6a672d06c9ee4225d8)
### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/8c1ebc60a2014ab925cbad6ef255e06ea0bd72b4)
* [OCPBUGS-82971](https://issues.redhat.com/browse/OCPBUGS-82971): Fix PDB unhealthyPodEvictionPolicy field name [#272](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/272)
* [OCPBUGS-74301](https://issues.redhat.com/browse/OCPBUGS-74301): Re-add serving cert volume mount to hypershift guest cluster manifest [#267](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/267)
* [OCPBUGS-72391](https://issues.redhat.com/browse/OCPBUGS-72391): Set client throttling parameters [#263](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/263)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/108f37f0e378accc322cbeb68136ec500ec35b94...8c1ebc60a2014ab925cbad6ef255e06ea0bd72b4)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/10012737e9b23528357c130184ef4d890ae8ea33)
* [OCPBUGS-84336](https://issues.redhat.com/browse/OCPBUGS-84336): fix(tnf): align Pacemaker kubelet and etcd retry pacing [#1604](https://github.com/openshift/cluster-etcd-operator/pull/1604)
* [OCPBUGS-77921](https://issues.redhat.com/browse/OCPBUGS-77921): Prefer to remove members where they have another healthy machine in the same failure domain index [#1563](https://github.com/openshift/cluster-etcd-operator/pull/1563)
* [OCPBUGS-77097](https://issues.redhat.com/browse/OCPBUGS-77097): Wait for revision stability before removing etcd members [#1555](https://github.com/openshift/cluster-etcd-operator/pull/1555)
* [OCPBUGS-74489](https://issues.redhat.com/browse/OCPBUGS-74489): configure inertia for all controllers, bump to 10m [#1535](https://github.com/openshift/cluster-etcd-operator/pull/1535)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/3698b93d071f8b279b1721f90ced478f0b90b426...10012737e9b23528357c130184ef4d890ae8ea33)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/6c70966cd2011f861843e85efb8bf08c3a938fe1)
* [OCPBUGS-82544](https://issues.redhat.com/browse/OCPBUGS-82544): set trustBundleName in Istio global values [#1418](https://github.com/openshift/cluster-ingress-operator/pull/1418)
* [OCPBUGS-77432](https://issues.redhat.com/browse/OCPBUGS-77432), [OCPBUGS-77433](https://issues.redhat.com/browse/OCPBUGS-77433): Ensure canary cert matches the default ingress controller's cert [#1367](https://github.com/openshift/cluster-ingress-operator/pull/1367)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/52c2b0465ecf1dcdcd57c010b9b15ac28f62a2ba...6c70966cd2011f861843e85efb8bf08c3a938fe1)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/424f27c9c415373b7f60756b5a1c24f48f248512)
* [OCPBUGS-85563](https://issues.redhat.com/browse/OCPBUGS-85563): [4.21] operator should not override authentication config serviceAccountIssuer with the default one during the operator initialization [#2151](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2151)
* [OCPBUGS-85270](https://issues.redhat.com/browse/OCPBUGS-85270): fsync static pod cert and manifest writes for crash durability [#2144](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2144)
* [OCPBUGS-83855](https://issues.redhat.com/browse/OCPBUGS-83855): Allow setting the oauthMetadata when auth type is None [#2116](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2116)
* [OCPBUGS-78548](https://issues.redhat.com/browse/OCPBUGS-78548): [release-4.21] : Always set service-account-jwks-uri to LB URL even with custom issuer [#2071](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2071)
* [OCPBUGS-78784](https://issues.redhat.com/browse/OCPBUGS-78784): [4.21] move event-ttl test to its own suite [#2073](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2073)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Bump library-go to get KMS [#2063](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2063)
* [OCPBUGS-77969](https://issues.redhat.com/browse/OCPBUGS-77969): Add support for event-ttl cases and go test cases in Kube API Server Operator [#2066](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2066)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Carry test assertion [#2064](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2064)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Conditionally add the KMS plugin volume mount to the kube-apiserver container [#2061](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2061)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Add KMS test scenarios [#2054](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2054)
* [OCPBUGS-74181](https://issues.redhat.com/browse/OCPBUGS-74181): SCC: allow image volume type for all SCCs [#2007](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2007)
* [OCPBUGS-73561](https://issues.redhat.com/browse/OCPBUGS-73561): Update openshift/library-go to get new default TLS configuration [#1999](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1999)
* [OCPBUGS-61297](https://issues.redhat.com/browse/OCPBUGS-61297): revert dev cert rotation [#1984](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1984)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/1741228b58952244aceb8e74d35f918431717191...424f27c9c415373b7f60756b5a1c24f48f248512)
### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/5ef1df3be41d38ddae9b3d22ce51ba486939e9f1)
* [OCPBUGS-83737](https://issues.redhat.com/browse/OCPBUGS-83737): add /var/run/kubernetes as emptyDir [#641](https://github.com/openshift/cluster-kube-scheduler-operator/pull/641)
* [CNTRLPLANE-2843](https://issues.redhat.com/browse/CNTRLPLANE-2843): chore: update OWNERS [#619](https://github.com/openshift/cluster-kube-scheduler-operator/pull/619)
* [OCPBUGS-74592](https://issues.redhat.com/browse/OCPBUGS-74592): [release-4.21] NO-JIRA: pkg/operator: Fix wrong ClusterOperator name [#605](https://github.com/openshift/cluster-kube-scheduler-operator/pull/605)
* [release 4.21] OCPBUGS-74265: Add OPERATOR_IMAGE_VERSION to recovery container [#603](https://github.com/openshift/cluster-kube-scheduler-operator/pull/603)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/51ea59abd057d0cef56b29b8a74efc28411d5427...5ef1df3be41d38ddae9b3d22ce51ba486939e9f1)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/c5ffc7afc457f7fc29c2818bb0ca6c9015ed0c39)
* [OCPBUGS-80765](https://issues.redhat.com/browse/OCPBUGS-80765): bump 4.21 grpc to v1.79.3 [#2875](https://github.com/openshift/cluster-monitoring-operator/pull/2875)
* [OCPBUGS-74425](https://issues.redhat.com/browse/OCPBUGS-74425): Include `kube_pod_labels` in minimal profile [#2797](https://github.com/openshift/cluster-monitoring-operator/pull/2797)
* [OCPBUGS-77908](https://issues.redhat.com/browse/OCPBUGS-77908): [release-4.21] add app.kubernetes.io/part-of=openshift-monitoring label to thanos-ruler pod [#2840](https://github.com/openshift/cluster-monitoring-operator/pull/2840)
* [OCPBUGS-76541](https://issues.redhat.com/browse/OCPBUGS-76541): Fix NodeRAIDDegraded & NodeRAIDDiskFailure alerts [#2815](https://github.com/openshift/cluster-monitoring-operator/pull/2815)
* [OCPBUGS-77271](https://issues.redhat.com/browse/OCPBUGS-77271): AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change [#2829](https://github.com/openshift/cluster-monitoring-operator/pull/2829)
* [OCPBUGS-74622](https://issues.redhat.com/browse/OCPBUGS-74622): update expr for AlertmanagerClusterFailedToSendAlerts to exclude value 0 [#2804](https://github.com/openshift/cluster-monitoring-operator/pull/2804)
* [OCPBUGS-74202](https://issues.redhat.com/browse/OCPBUGS-74202): move endpointslice RBAC to Role [#2795](https://github.com/openshift/cluster-monitoring-operator/pull/2795)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/f6a7969c5c070e4deb6136c3561af60ab44780e1...c5ffc7afc457f7fc29c2818bb0ca6c9015ed0c39)
### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/b5955e9ede2128e8558c41ce87c1e8a11e09a515)
* [OCPBUGS-84169](https://issues.redhat.com/browse/OCPBUGS-84169): Handle zero-worker HyperShift clusters in daemonset rollout [4.21 backport] [#2972](https://github.com/openshift/cluster-network-operator/pull/2972)
* [OCPBUGS-83422](https://issues.redhat.com/browse/OCPBUGS-83422): wait for patch port to apply drop garp flows [#2946](https://github.com/openshift/cluster-network-operator/pull/2946)
* [OCPBUGS-76333](https://issues.redhat.com/browse/OCPBUGS-76333): Silence ovnkube-lib.sh to avoid mass of logs to collectors [#2900](https://github.com/openshift/cluster-network-operator/pull/2900)
* [OCPBUGS-77147](https://issues.redhat.com/browse/OCPBUGS-77147): Add config override for openflow-probe [#2917](https://github.com/openshift/cluster-network-operator/pull/2917)
* [OCPBUGS-76285](https://issues.redhat.com/browse/OCPBUGS-76285): Remove duplicated openssl parameter [#2899](https://github.com/openshift/cluster-network-operator/pull/2899)
* [OCPBUGS-69941](https://issues.redhat.com/browse/OCPBUGS-69941): Add kubevirt platform to dual-stack supported platforms [#2861](https://github.com/openshift/cluster-network-operator/pull/2861)
* [OCPBUGS-72556](https://issues.redhat.com/browse/OCPBUGS-72556): fix(hypershift): use net.JoinHostPort for URL construction [#2873](https://github.com/openshift/cluster-network-operator/pull/2873)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/e20b9cb9a0b3bc293e622ef1caf70a813710ffa8...b5955e9ede2128e8558c41ce87c1e8a11e09a515)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/a6f7d8ab2efb5e37d848620d5fc8db37a3cf5d58)
* [OCPBUGS-85016](https://issues.redhat.com/browse/OCPBUGS-85016): e2e: Add irqbalance StartLimitBurst >= 100 config test [#1505](https://github.com/openshift/cluster-node-tuning-operator/pull/1505)
* [OCPBUGS-81122](https://issues.redhat.com/browse/OCPBUGS-81122): CNF-21333: [4.21]:perfprof: enable exec-cpu-affinity by default [#1484](https://github.com/openshift/cluster-node-tuning-operator/pull/1484)
* [OCPBUGS-76375](https://issues.redhat.com/browse/OCPBUGS-76375): AA: E2E: LLC: Add tests related to odd cpus [#1467](https://github.com/openshift/cluster-node-tuning-operator/pull/1467)
* [OCPBUGS-77464](https://issues.redhat.com/browse/OCPBUGS-77464): E2E: Add test case to check Infrastructure pods affinity [#1476](https://github.com/openshift/cluster-node-tuning-operator/pull/1476)
* [OCPBUGS-78173](https://issues.redhat.com/browse/OCPBUGS-78173): workloadhints: use IsVM to skip BM-only tests [#1480](https://github.com/openshift/cluster-node-tuning-operator/pull/1480)
* NO-JIRA: Make changes for migrating to OTE in Dockerfile [#1454](https://github.com/openshift/cluster-node-tuning-operator/pull/1454)
* [OCPBUGS-69757](https://issues.redhat.com/browse/OCPBUGS-69757): E2E: Granular IRQ functional test cases [#1449](https://github.com/openshift/cluster-node-tuning-operator/pull/1449)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/74d2449d12e30f58cdaf46bd87a96f10dd4883d1...a6f7d8ab2efb5e37d848620d5fc8db37a3cf5d58)
### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/03bedb913bce9c7deabf7868e5cbefc57cf3490b)
* [OCPBUGS-80769](https://issues.redhat.com/browse/OCPBUGS-80769): Bump google.golang.org/grpc to v1.79.3 [#197](https://github.com/openshift/cluster-olm-operator/pull/197)
* [OCPBUGS-76269](https://issues.redhat.com/browse/OCPBUGS-76269): add resources to clusterOperator relatedObjects [#170](https://github.com/openshift/cluster-olm-operator/pull/170)
* [OCPBUGS-81311](https://issues.redhat.com/browse/OCPBUGS-81311): Fix golangci-lint timeout in CI [#189](https://github.com/openshift/cluster-olm-operator/pull/189)
* [OCPBUGS-77826](https://issues.redhat.com/browse/OCPBUGS-77826): cluster-olm-operator sets Progressing=True during upgrade [#177](https://github.com/openshift/cluster-olm-operator/pull/177)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/d131450b2645623089b26353a309015c95c8871c...03bedb913bce9c7deabf7868e5cbefc57cf3490b)
### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/52fd1773757b2c3ff497e7db084c3d71cde5478f)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Bump library-go to get KMS [#666](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/666)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Conditionally add the KMS plugin volume mount to the openshift-apiserver container [#664](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/664)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Add KMS test scenarios [#656](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/656)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/1924cf6f12c632d56f1d41341f08ff9ff6eae7d6...52fd1773757b2c3ff497e7db084c3d71cde5478f)
### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/e403475164a4de23d358a93106a35353ec29f3d7)
* [OCPBUGS-79531](https://issues.redhat.com/browse/OCPBUGS-79531): volume-data-source-validator should run on master nodes [#687](https://github.com/openshift/cluster-storage-operator/pull/687)
* [OCPBUGS-74569](https://issues.redhat.com/browse/OCPBUGS-74569): add vsphere permissions for checking if users is authorized to see metrics [#660](https://github.com/openshift/cluster-storage-operator/pull/660)
* [OCPBUGS-70318](https://issues.redhat.com/browse/OCPBUGS-70318): volume-data-source-validator must use IfNotPresent image pull policy [#652](https://github.com/openshift/cluster-storage-operator/pull/652)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/8dfdf2ef3310358f3559a5481df43b98b2294791...e403475164a4de23d358a93106a35353ec29f3d7)
### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/d37e5a056d5a9c74c2ac2d5551ef39f573c9824a)
* [OCPBUGS-77256](https://issues.redhat.com/browse/OCPBUGS-77256): Implement mTLS authentication and authorization for CVO metrics endpoint [#1326](https://github.com/openshift/cluster-version-operator/pull/1326)
* [OCPBUGS-74009](https://issues.redhat.com/browse/OCPBUGS-74009): lib/resourcemerge/core: Reconcile ConfigMap binaryData too [#1295](https://github.com/openshift/cluster-version-operator/pull/1295)
* [OCPBUGS-73601](https://issues.redhat.com/browse/OCPBUGS-73601): vendor: Update openshift/library-go to get new default TLS configuration [#1290](https://github.com/openshift/cluster-version-operator/pull/1290)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/e9c1c39e21ec353ff5993d386c42bc1b15063dbf...d37e5a056d5a9c74c2ac2d5551ef39f573c9824a)
### [console](https://github.com/openshift/console/tree/d365e0ed18e1871400e0a4f6faa18a6776b473fa)
* [OCPBUGS-85520](https://issues.redhat.com/browse/OCPBUGS-85520): Fix create visual connector in Topology [#16439](https://github.com/openshift/console/pull/16439)
* NO-JIRA: enable multi-architecture yarn builds [#16420](https://github.com/openshift/console/pull/16420)
* [OCPBUGS-85040](https://issues.redhat.com/browse/OCPBUGS-85040): Remove PII from events [#16401](https://github.com/openshift/console/pull/16401)
* [OCPBUGS-84967](https://issues.redhat.com/browse/OCPBUGS-84967): Add bottom pagination to ConsoleDataView for mobile responsiveness [#16396](https://github.com/openshift/console/pull/16396)
* [OCPBUGS-84858](https://issues.redhat.com/browse/OCPBUGS-84858): Fix ConsoleDataView filter order: Name and Label shoul… [#16386](https://github.com/openshift/console/pull/16386)
* [OCPBUGS-83494](https://issues.redhat.com/browse/OCPBUGS-83494): remove dev to admin links as dev monitoring views are enabled [#16164](https://github.com/openshift/console/pull/16164)
* [OCPBUGS-83572](https://issues.redhat.com/browse/OCPBUGS-83572): fix Developer Sandbox telemetry [#16286](https://github.com/openshift/console/pull/16286)
* [OCPBUGS-83418](https://issues.redhat.com/browse/OCPBUGS-83418): Fix resource log dropdown TypeError [#16281](https://github.com/openshift/console/pull/16281)
* [OCPBUGS-81517](https://issues.redhat.com/browse/OCPBUGS-81517): Follow up on fixing the remaining issues in the multi-group impersonation feature [#16236](https://github.com/openshift/console/pull/16236)
* [OCPBUGS-81714](https://issues.redhat.com/browse/OCPBUGS-81714): Add missing i18n translations for Pagination component [#16255](https://github.com/openshift/console/pull/16255)
* [OCPBUGS-79351](https://issues.redhat.com/browse/OCPBUGS-79351): Make folder field optional for vsphere [#16189](https://github.com/openshift/console/pull/16189)
* [OCPBUGS-79040](https://issues.redhat.com/browse/OCPBUGS-79040): Fix incorrect OLMv1 documentation URL [#16186](https://github.com/openshift/console/pull/16186)
* [OCPBUGS-81308](https://issues.redhat.com/browse/OCPBUGS-81308): Fix VolumeSnapshot and VolumeSnapshotContent tables sorting [#16216](https://github.com/openshift/console/pull/16216)
* [OCPBUGS-79037](https://issues.redhat.com/browse/OCPBUGS-79037): Fix useOperatorCatalogCategories hook. [#16185](https://github.com/openshift/console/pull/16185)
* [OCPBUGS-81330](https://issues.redhat.com/browse/OCPBUGS-81330): Fix entire app suspending to load perspective switcher icon [#16226](https://github.com/openshift/console/pull/16226)
* [OCPBUGS-81488](https://issues.redhat.com/browse/OCPBUGS-81488): Add robots.txt policy to console [#16227](https://github.com/openshift/console/pull/16227)
* [OCPBUGS-80931](https://issues.redhat.com/browse/OCPBUGS-80931): Hide filter category selector when only one filter exists [#16199](https://github.com/openshift/console/pull/16199)
* [OCPBUGS-77246](https://issues.redhat.com/browse/OCPBUGS-77246): AsyncComponent type improvements [#16058](https://github.com/openshift/console/pull/16058)
* [OCPBUGS-79035](https://issues.redhat.com/browse/OCPBUGS-79035): Fix TypeError in OLS code import to console [#16184](https://github.com/openshift/console/pull/16184)
* [OCPBUGS-78799](https://issues.redhat.com/browse/OCPBUGS-78799): Fix search component to not pass ALL_NAMESPACES_KEY to… [#16170](https://github.com/openshift/console/pull/16170)
* [OCPBUGS-79533](https://issues.redhat.com/browse/OCPBUGS-79533): enable keyboard shortcut for DataViewTextFilter [#16195](https://github.com/openshift/console/pull/16195)
* [OCPBUGS-78927](https://issues.redhat.com/browse/OCPBUGS-78927), [OCPBUGS-78928](https://issues.redhat.com/browse/OCPBUGS-78928): OLM prompts for GCP Workload Identity parameters during Kiali Operato… [#16176](https://github.com/openshift/console/pull/16176)
* [OCPBUGS-78308](https://issues.redhat.com/browse/OCPBUGS-78308): “Import from Git” should not force HTTPS/443 for Git providers (GitHub/GitLab/Bitbucket) [#16050](https://github.com/openshift/console/pull/16050)
* [OCPBUGS-78599](https://issues.redhat.com/browse/OCPBUGS-78599): Migrate InstallPlan components table to PatternFly Table [#16159](https://github.com/openshift/console/pull/16159)
* [OCPBUGS-78599](https://issues.redhat.com/browse/OCPBUGS-78599): Reset pagination page when changing namespace [#16158](https://github.com/openshift/console/pull/16158)
* [OCPBUGS-77029](https://issues.redhat.com/browse/OCPBUGS-77029): Fixed Metrics page React error #306 by exporting QueryBrowser component [#16038](https://github.com/openshift/console/pull/16038)
* [OCPBUGS-77251](https://issues.redhat.com/browse/OCPBUGS-77251): Fix editing secrets with mixed text and binary data [#16060](https://github.com/openshift/console/pull/16060)
* [OCPBUGS-77561](https://issues.redhat.com/browse/OCPBUGS-77561): Fix ConsolePluginStatus icon [#16090](https://github.com/openshift/console/pull/16090)
* [OCPBUGS-75000](https://issues.redhat.com/browse/OCPBUGS-75000): Clean up old session cookies to prevent accumulation [#15985](https://github.com/openshift/console/pull/15985)
* [OCPBUGS-77957](https://issues.redhat.com/browse/OCPBUGS-77957): [CI] Fix the VolumeSnapshot CRUD flaky test failures [#16118](https://github.com/openshift/console/pull/16118)
* [OCPBUGS-77882](https://issues.redhat.com/browse/OCPBUGS-77882): Fix infinite recursion in project access form [#16112](https://github.com/openshift/console/pull/16112)
* [OCPBUGS-65948](https://issues.redhat.com/browse/OCPBUGS-65948): prep for 4.21 GA SDK publish [#16116](https://github.com/openshift/console/pull/16116)
* [OCPBUGS-76385](https://issues.redhat.com/browse/OCPBUGS-76385): Workloads - Edit pod count and Edit parallelism : Content is in English [#16005](https://github.com/openshift/console/pull/16005)
* [OCPBUGS-76387](https://issues.redhat.com/browse/OCPBUGS-76387): DataView Pagination page menus : i18n misses [#16007](https://github.com/openshift/console/pull/16007)
* [OCPBUGS-76386](https://issues.redhat.com/browse/OCPBUGS-76386): i18n upload/download routine task - 4.21 / 281 (Latest) [#16006](https://github.com/openshift/console/pull/16006)
* [OCPBUGS-77430](https://issues.redhat.com/browse/OCPBUGS-77430): run and enforce `yarn dedupe` [#16075](https://github.com/openshift/console/pull/16075)
* [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16059](https://github.com/openshift/console/pull/16059)
* [OCPBUGS-76389](https://issues.redhat.com/browse/OCPBUGS-76389): Use Actions button instead of kebab menu on Subscription details page [#16008](https://github.com/openshift/console/pull/16008)
* [OCPBUGS-74998](https://issues.redhat.com/browse/OCPBUGS-74998): Fix referenceFor parameter in SubscriptionDetailsPage [#15984](https://github.com/openshift/console/pull/15984)
* [OCPBUGS-74887](https://issues.redhat.com/browse/OCPBUGS-74887): Add null checks to CRB subject [#15974](https://github.com/openshift/console/pull/15974)
* [OCPBUGS-74587](https://issues.redhat.com/browse/OCPBUGS-74587): '0 of pods' are shown in Status column on DaemonSets list page. [#15953](https://github.com/openshift/console/pull/15953)
* [OCPBUGS-74695](https://issues.redhat.com/browse/OCPBUGS-74695): Bump lodash to latest [#15962](https://github.com/openshift/console/pull/15962)
* [OCPBUGS-74157](https://issues.redhat.com/browse/OCPBUGS-74157): Do not resolve disabled catalog type extensions [#15930](https://github.com/openshift/console/pull/15930)
* [OCPBUGS-73870](https://issues.redhat.com/browse/OCPBUGS-73870): Update the perspective name in dev-console guided tour [#15922](https://github.com/openshift/console/pull/15922)
* [OCPBUGS-73770](https://issues.redhat.com/browse/OCPBUGS-73770): update operator details when changing channels [#15917](https://github.com/openshift/console/pull/15917)
* [OCPBUGS-73871](https://issues.redhat.com/browse/OCPBUGS-73871): i18n upload/download routine task - 4.21 / 281 [#15923](https://github.com/openshift/console/pull/15923)
* [OCPBUGS-69931](https://issues.redhat.com/browse/OCPBUGS-69931), [OCPBUGS-69932](https://issues.redhat.com/browse/OCPBUGS-69932): apiVersion is empty on YAML creation page - Runtime error occurs when create MachineConfig with default yaml from… [#15871](https://github.com/openshift/console/pull/15871)
* [OCPBUGS-73620](https://issues.redhat.com/browse/OCPBUGS-73620): Improve VAC field on PVC details page [#15907](https://github.com/openshift/console/pull/15907)
* [OCPBUGS-73727](https://issues.redhat.com/browse/OCPBUGS-73727): change OperatorHub strings to Software Catalog [#15913](https://github.com/openshift/console/pull/15913)
* [OCPBUGS-72416](https://issues.redhat.com/browse/OCPBUGS-72416): make cloudCredentials optional so operators load when … [#15900](https://github.com/openshift/console/pull/15900)
* [OCPBUGS-69919](https://issues.redhat.com/browse/OCPBUGS-69919): There should be no role ARN field as token-auth-aws/azure/gcp=false in csv annotations [#15870](https://github.com/openshift/console/pull/15870)
* [OCPBUGS-73097](https://issues.redhat.com/browse/OCPBUGS-73097): Revert the console-shared.json to console-shared directory [#15906](https://github.com/openshift/console/pull/15906)
* [OCPBUGS-70266](https://issues.redhat.com/browse/OCPBUGS-70266): Fix edit application via Deploy image internal registry doesn't select correct image stream [#15879](https://github.com/openshift/console/pull/15879)
* [OCPBUGS-69388](https://issues.redhat.com/browse/OCPBUGS-69388): Prevent application filter in Topology view from resetting to all applications unexpectedly [#15848](https://github.com/openshift/console/pull/15848)
* [OCPBUGS-69886](https://issues.redhat.com/browse/OCPBUGS-69886): Prevent the display of events from projects other than the currently selected project [#15867](https://github.com/openshift/console/pull/15867)
* [OCPBUGS-70132](https://issues.redhat.com/browse/OCPBUGS-70132): show DASH to routing labels column when receiver doesn't have routing labels [#15876](https://github.com/openshift/console/pull/15876)
* [OCPBUGS-71200](https://issues.redhat.com/browse/OCPBUGS-71200): Remove asterisk from Routing label field in alertManager receiver form [#15894](https://github.com/openshift/console/pull/15894)
* [OCPBUGS-69995](https://issues.redhat.com/browse/OCPBUGS-69995): fix routing issues on packageserver PackageManifest de… [#15873](https://github.com/openshift/console/pull/15873)
* [OCPBUGS-69433](https://issues.redhat.com/browse/OCPBUGS-69433): fix bug where Installed badge is not fully visible [#15851](https://github.com/openshift/console/pull/15851)
* [OCPBUGS-69376](https://issues.redhat.com/browse/OCPBUGS-69376): disable guided tour when cypress is running [#15845](https://github.com/openshift/console/pull/15845)
* [Full changelog](https://github.com/openshift/console/compare/052918e85b8385795d26474b545dcadc81969a6b...d365e0ed18e1871400e0a4f6faa18a6776b473fa)
### [console-operator](https://github.com/openshift/console-operator/tree/2b3dcd53e99ef44f442850df9e1543e7be674404)
* [OCPBUGS-82037](https://issues.redhat.com/browse/OCPBUGS-82037): Redeploy console pods upon cert rotation [#1139](https://github.com/openshift/console-operator/pull/1139)
* [OCPBUGS-78929](https://issues.redhat.com/browse/OCPBUGS-78929): Remove orphaned console-conversion-webhook deployment and related resource [#1128](https://github.com/openshift/console-operator/pull/1128)
* Sync Dockerfile.ocp image [#1126](https://github.com/openshift/console-operator/pull/1126)
* [OCPBUGS-72562](https://issues.redhat.com/browse/OCPBUGS-72562): Add missing relatedObjects + small refactoring [#1090](https://github.com/openshift/console-operator/pull/1090)
* [OCPBUGS-74686](https://issues.redhat.com/browse/OCPBUGS-74686): Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads [#1104](https://github.com/openshift/console-operator/pull/1104)
* [OCPBUGS-74152](https://issues.redhat.com/browse/OCPBUGS-74152): Fix PDB blocking node drains during cluster upgrades + update donwloads deployment [#1103](https://github.com/openshift/console-operator/pull/1103)
* [OCPBUGS-72550](https://issues.redhat.com/browse/OCPBUGS-72550): Add missing console annotation to the quickstart [#1089](https://github.com/openshift/console-operator/pull/1089)
* [CM-821](https://issues.redhat.com/browse/CM-821), [ESO-277](https://issues.redhat.com/browse/ESO-277), [OCPBUGS-69766](https://issues.redhat.com/browse/OCPBUGS-69766), [SSCSI-235](https://issues.redhat.com/browse/SSCSI-235): Add quickstart guides for secrets management operators [#1084](https://github.com/openshift/console-operator/pull/1084)
* [Full changelog](https://github.com/openshift/console-operator/compare/f0619391890c61e1a4ebdf5c1c0b247b30f81248...2b3dcd53e99ef44f442850df9e1543e7be674404)
### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/a123414456212431a2843d4e3a4f7250182402e4)
* UPSTREAM-SYNC: Sync release-4.21 with upstream release-1.34 [#371](https://github.com/openshift/cloud-provider-openstack/pull/371)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/f146b90407764c052b7e26ee5a4da338b240eea5...a123414456212431a2843d4e3a4f7250182402e4)
### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/ebfd16d227b3af490f4327a8a040f6c9657a3b01)
* [OCPBUGS-80783](https://issues.redhat.com/browse/OCPBUGS-80783): CVE-2026-33186: bump google.golang.org/grpc v1.79.3 [#176](https://github.com/openshift/csi-driver-nfs/pull/176)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/5a8887df841e38a71c82d78922380c6027a2b486...ebfd16d227b3af490f4327a8a040f6c9657a3b01)
### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/6a3be10e6795c8149c4bd3c9856f7e2d312108e2)
* [OCPBUGS-80784](https://issues.redhat.com/browse/OCPBUGS-80784): Bump google.golang.org/grpc to v1.79.3 [#102](https://github.com/openshift/csi-external-attacher/pull/102)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/95a1979700f021e20879480b98b953bc382a0eaf...6a3be10e6795c8149c4bd3c9856f7e2d312108e2)
### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/ac55db6fcd6f53ef1c26e3d85c511dbb18bc4d73)
* [OCPBUGS-80785](https://issues.redhat.com/browse/OCPBUGS-80785): Bump google.golang.org/grpc to v1.79.3 [#132](https://github.com/openshift/csi-external-provisioner/pull/132)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/3b79aefc35a504ccef3f36f6e43aafbdd3301341...ac55db6fcd6f53ef1c26e3d85c511dbb18bc4d73)
### [docker-builder](https://github.com/openshift/builder/tree/48fce231bac118a63992f466acc8b29a29e1ddde)
* [OCPBUGS-70149](https://issues.redhat.com/browse/OCPBUGS-70149): bump buildah to 1.39.7 to fix CVE-2025-52881 [#495](https://github.com/openshift/builder/pull/495)
* [Full changelog](https://github.com/openshift/builder/compare/fcd4ce2d96613a27bd1ab7f53ff47225976c4ba9...48fce231bac118a63992f466acc8b29a29e1ddde)
### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad)
* [OCPBUGS-78535](https://issues.redhat.com/browse/OCPBUGS-78535): Support ubi minimal base image [#186](https://github.com/openshift/driver-toolkit/pull/186)
* [OCPBUGS-77887](https://issues.redhat.com/browse/OCPBUGS-77887): Clean up cruft in /var/cache/dnf [#183](https://github.com/openshift/driver-toolkit/pull/183)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/7aa4007a8601bf4bb23b696f580c022f58877223...f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad)
### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/e27accef1fa99089410e4b0894db21a392d9bf99)
* [OCPBUGS-83615](https://issues.redhat.com/browse/OCPBUGS-83615): Fix OSD ILB bug [#108](https://github.com/openshift/cloud-provider-gcp/pull/108)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/4d9707e182c4f8734d83ebf21e3ffcc4c38d04e9...e27accef1fa99089410e4b0894db21a392d9bf99)
### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/fe230b8a6407a06e1be9d6994a92ac8c5a43237d)
* [OCPBUGS-80805](https://issues.redhat.com/browse/OCPBUGS-80805): Bump google.golang.org/grpc to v1.79.3 [#287](https://github.com/openshift/cluster-api-provider-gcp/pull/287)
* [OCPBUGS-74915](https://issues.redhat.com/browse/OCPBUGS-74915): Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.11.0 (1cb204d) into release-4.21 [#262](https://github.com/openshift/cluster-api-provider-gcp/pull/262)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/663485baa799d3fc117b937f2ce3c51bd49b6761...fe230b8a6407a06e1be9d6994a92ac8c5a43237d)
### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/49b8eb1bbdd364b8144dee270a88cace41271e4d)
* [OCPBUGS-80828](https://issues.redhat.com/browse/OCPBUGS-80828): Bump gRPC-Go package for CVE fix [#154](https://github.com/openshift/machine-api-provider-gcp/pull/154)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/0073bd1187c07febc963fc67f0df67cd33c8f218...49b8eb1bbdd364b8144dee270a88cace41271e4d)
### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/1da557fe54562347dbf18bee04fe6564a2697707)
* [OCPBUGS-80809](https://issues.redhat.com/browse/OCPBUGS-80809): Bump google.golang.org/grpc to v1.79.3 in release-4.21 [#104](https://github.com/openshift/gcp-pd-csi-driver/pull/104)
* [OCPBUGS-77716](https://issues.redhat.com/browse/OCPBUGS-77716): Support Downward API node name [#101](https://github.com/openshift/gcp-pd-csi-driver/pull/101)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/48a7a1aa3f2200d01cf1b6e63a5a6cfd5004a8b0...1da557fe54562347dbf18bee04fe6564a2697707)
### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/ddfc0f93d244d5d9be6d5ab7631f4b1db8bec043)
* [OCPBUGS-77494](https://issues.redhat.com/browse/OCPBUGS-77494): Pass node name to csi-driver container [#173](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/173)
* [OCPBUGS-77310](https://issues.redhat.com/browse/OCPBUGS-77310): Add RBAC permission for node driver to get Node objects [#171](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/171)
* [OCPBUGS-74222](https://issues.redhat.com/browse/OCPBUGS-74222): [release-4.21] Add VAC manifest to support tests on GCP PD [#167](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/167)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/a8e71880c1c81c42bcb59b1c5b0fb615290f5dd9...ddfc0f93d244d5d9be6d5ab7631f4b1db8bec043)
### [haproxy-router](https://github.com/openshift/router/tree/5949f713517b3cc158cd78b34d71d5a9084d2e1c)
* [OCPBUGS-79374](https://issues.redhat.com/browse/OCPBUGS-79374): Lower verbosity for parseIPList empty list logging [#752](https://github.com/openshift/router/pull/752)
* [Full changelog](https://github.com/openshift/router/compare/896390778ebe15f57f87e6ca78f11c96e64c2652...5949f713517b3cc158cd78b34d71d5a9084d2e1c)
### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/eab2218b931d0c20740d6259df59f242abf32ef7)
* [OCPBUGS-85500](https://issues.redhat.com/browse/OCPBUGS-85500): Bump Kubernetes v1.34.8 to release-4.21 [#2665](https://github.com/openshift/kubernetes/pull/2665)
* "OCPBUGS-83608: Bump to k8s v1.34.7" [#2647](https://github.com/openshift/kubernetes/pull/2647)
* NO-JIRA: UPSTREAM: <carry>: Add jacobsee and jubittajohn to DOWNSTREAM_OWNERS [#2636](https://github.com/openshift/kubernetes/pull/2636)
* [OCPBUGS-78991](https://issues.redhat.com/browse/OCPBUGS-78991): Bump 1.34.6 to release-4.21 [#2634](https://github.com/openshift/kubernetes/pull/2634)
* [OCPBUGS-77475](https://issues.redhat.com/browse/OCPBUGS-77475): Bump v1.34.5 to release-4.21 [#2601](https://github.com/openshift/kubernetes/pull/2601)
* [OCPBUGS-76516](https://issues.redhat.com/browse/OCPBUGS-76516): Bump v1.34.4 [#2590](https://github.com/openshift/kubernetes/pull/2590)
* [OCPBUGS-74975](https://issues.redhat.com/browse/OCPBUGS-74975): UPSTREAM: 136594: raise kubelet CSI init backoff to cover ~140s DNS delays [#2580](https://github.com/openshift/kubernetes/pull/2580)
* [OCPBUGS-73910](https://issues.redhat.com/browse/OCPBUGS-73910): UPSTREAM: 135340: cbor: bump limits [#2565](https://github.com/openshift/kubernetes/pull/2565)
* [OCPBUGS-68375](https://issues.redhat.com/browse/OCPBUGS-68375): enable InPlace resize test [#2539](https://github.com/openshift/kubernetes/pull/2539)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/kubernetes/compare/6b9ddbe6e09aa225e949baecde4145208bf94c8e...eab2218b931d0c20740d6259df59f242abf32ef7)
### [hypershift](https://github.com/openshift/hypershift/tree/6d6591b4008606c96fd5cbd02f506c65132b628f)
* [OCPBUGS-85781](https://issues.redhat.com/browse/OCPBUGS-85781): Add AWS ISO domains to konnectivity IsCloudAPI [#8531](https://github.com/openshift/hypershift/pull/8531)
* [OCPBUGS-85621](https://issues.redhat.com/browse/OCPBUGS-85621): fix CVE-2026-33186 by updating grpc-go [#8518](https://github.com/openshift/hypershift/pull/8518)
* [OCPBUGS-83710](https://issues.redhat.com/browse/OCPBUGS-83710): fix(kubevirt): filter link-local addresses from EndpointSlice endpoints [#8270](https://github.com/openshift/hypershift/pull/8270)
* [OCPBUGS-85538](https://issues.redhat.com/browse/OCPBUGS-85538): [release-4.21] Set unhealthyPodEvictionPolicy to AlwaysAllow on all PDBs [#8214](https://github.com/openshift/hypershift/pull/8214)
* [OCPBUGS-85538](https://issues.redhat.com/browse/OCPBUGS-85538): [release-4.21] CNTRLPLANE-2740: Add KAS liveness readiness sidecar to OAS and OAuth API Server [#8213](https://github.com/openshift/hypershift/pull/8213)
* [OCPBUGS-76447](https://issues.redhat.com/browse/OCPBUGS-76447): Add UserAgent telemetry to CPO Azure SDK clients [#7685](https://github.com/openshift/hypershift/pull/7685)
* [OCPBUGS-81745](https://issues.redhat.com/browse/OCPBUGS-81745): [release-4.21] Honor AWS AMI override in NodePool token generation [#8170](https://github.com/openshift/hypershift/pull/8170)
* [OCPBUGS-81836](https://issues.redhat.com/browse/OCPBUGS-81836): OCPBUGS-81670: fix(cpo-v2): preserve HCCO modifications to OCM Controllers field [#8157](https://github.com/openshift/hypershift/pull/8157)
* [OCPBUGS-81490](https://issues.redhat.com/browse/OCPBUGS-81490): fix(cpo): skip router LB services for ARO HCP [#8135](https://github.com/openshift/hypershift/pull/8135)
* [OCPBUGS-77966](https://issues.redhat.com/browse/OCPBUGS-77966): fix: global-pull-secret-syncer pod ~15-minute delay scheduling on new nodes [#8129](https://github.com/openshift/hypershift/pull/8129)
* [OCPBUGS-81287](https://issues.redhat.com/browse/OCPBUGS-81287): fix(release): allow multiple machine-os component versions [#8103](https://github.com/openshift/hypershift/pull/8103)
* [OCPBUGS-81285](https://issues.redhat.com/browse/OCPBUGS-81285): fix(releaseinfo): allow periods in version display name regex [#8102](https://github.com/openshift/hypershift/pull/8102)
* [OCPBUGS-78933](https://issues.redhat.com/browse/OCPBUGS-78933): fix(cpo): Don't remove HCP Ingress from routes when CapabilityRoute is disabled [#8014](https://github.com/openshift/hypershift/pull/8014)
* [CNTRLPLANE-3006](https://issues.redhat.com/browse/CNTRLPLANE-3006): Azure web identity webhook 4.21 [#7997](https://github.com/openshift/hypershift/pull/7997)
* [OCPBUGS-78957](https://issues.redhat.com/browse/OCPBUGS-78957): fix(hostedcluster): Remove referenced resource annotations regardless of hcp status [#7975](https://github.com/openshift/hypershift/pull/7975)
* [OCPBUGS-78473](https://issues.redhat.com/browse/OCPBUGS-78473): Fix deadlock when changing release image during initial provisioning [#7954](https://github.com/openshift/hypershift/pull/7954)
* [OCPBUGS-78484](https://issues.redhat.com/browse/OCPBUGS-78484): fix(catalogs): update catalog image version cap to 4.21 [#7956](https://github.com/openshift/hypershift/pull/7956)
* [OCPBUGS-77456](https://issues.redhat.com/browse/OCPBUGS-77456): Add dynamic NodePort range validation [#7820](https://github.com/openshift/hypershift/pull/7820)
* [OCPBUGS-77647](https://issues.redhat.com/browse/OCPBUGS-77647): remove resource limits from Agent CAPI provider [#7844](https://github.com/openshift/hypershift/pull/7844)
* [OCPBUGS-78304](https://issues.redhat.com/browse/OCPBUGS-78304): Fix context cancel accumulation in getMirrorFromICSPOrIDMS [#7891](https://github.com/openshift/hypershift/pull/7891)
* [OCPBUGS-78196](https://issues.redhat.com/browse/OCPBUGS-78196): fix(sync-global-pullsecret): compare content ignoring trailing newlines [#7914](https://github.com/openshift/hypershift/pull/7914)
* [CNTRLPLANE-2812](https://issues.redhat.com/browse/CNTRLPLANE-2812): feat(aro): Swift support [#7826](https://github.com/openshift/hypershift/pull/7826)
* [OCPBUGS-77365](https://issues.redhat.com/browse/OCPBUGS-77365): Fix ignition-server pod restarts due to MIRRORED_RELEASE_IMAGE flapping [#7834](https://github.com/openshift/hypershift/pull/7834)
* [OCPBUGS-75930](https://issues.redhat.com/browse/OCPBUGS-75930): [release-4.21] fix(cpo): Correct route labeling logic for HCP router infrastructure [#7641](https://github.com/openshift/hypershift/pull/7641)
* [OCPBUGS-75884](https://issues.redhat.com/browse/OCPBUGS-75884): feat(updates): enable CVO metrics access with RHOBS monitoring flag [#7632](https://github.com/openshift/hypershift/pull/7632)
* fix: OCPBUGS-74104: Fix CVE-2025-58183 [#7545](https://github.com/openshift/hypershift/pull/7545)
* [OCPBUGS-71133](https://issues.redhat.com/browse/OCPBUGS-71133): fix(ingress): clear LoadBalancerSourceRanges when AllowedCIDRBlocks is removed [#7433](https://github.com/openshift/hypershift/pull/7433)
* [OCPBUGS-74893](https://issues.redhat.com/browse/OCPBUGS-74893): fix: add hypershift.openshift.io/nodepool-globalps-enabled label to be ignored in cluster-autoscaler deployment [#7618](https://github.com/openshift/hypershift/pull/7618)
* [OCPBUGS-74648](https://issues.redhat.com/browse/OCPBUGS-74648): feat(cpo): check components have rolled out before setting available [#7604](https://github.com/openshift/hypershift/pull/7604)
* [OCPBUGS-72556](https://issues.redhat.com/browse/OCPBUGS-72556): fix(cno): use brackets only for IPv6 in server URL [#7452](https://github.com/openshift/hypershift/pull/7452)
* [OCPBUGS-72400](https://issues.redhat.com/browse/OCPBUGS-72400): Fix Konflux EC voilation, update deprecated base … [#7443](https://github.com/openshift/hypershift/pull/7443)
* [OCPBUGS-70216](https://issues.redhat.com/browse/OCPBUGS-70216): fix(Portieris): Fix Portieris by mounting emptyDir to './.trust' work dir [#7422](https://github.com/openshift/hypershift/pull/7422)
* [OCPBUGS-69440](https://issues.redhat.com/browse/OCPBUGS-69440): fix(vendor): bump openshift/api dependency to current master [release-4.21] [#7398](https://github.com/openshift/hypershift/pull/7398)
* [OCPBUGS-68937](https://issues.redhat.com/browse/OCPBUGS-68937): test: remove network-dependent unit tests for image metadata [#7390](https://github.com/openshift/hypershift/pull/7390)
* [Full changelog](https://github.com/openshift/hypershift/compare/cf680a59c77c51f3f8a0f7994340db8ee2426645...6d6591b4008606c96fd5cbd02f506c65132b628f)
### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/f0baa47e75ab0bef0ec56ab48d9a725e00f6b40f)
* [OCPBUGS-80815](https://issues.redhat.com/browse/OCPBUGS-80815): Bump google.golang.org/grpc to v1.79.3 [#146](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/146)
* [OCPBUGS-77203](https://issues.redhat.com/browse/OCPBUGS-77203): [release-4.21] standardize build paths [#121](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/121)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/aa40cd7e1a37e2f48f238fc8d293b0546d5d4caf...f0baa47e75ab0bef0ec56ab48d9a725e00f6b40f)
### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/f7e3ec30f746add35458fad54dd6bccb97e307bf)
* [OCPBUGS-66393](https://issues.redhat.com/browse/OCPBUGS-66393): Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.21 [#133](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/133)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/03b143d588768a18fd8afa1534ea7d7a04b4d1f3...f7e3ec30f746add35458fad54dd6bccb97e307bf)
### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/f80ea3216387639dde6550a70a6e08599fd67f5f)
* [OCPBUGS-77445](https://issues.redhat.com/browse/OCPBUGS-77445): [release-4.21] bump vpc go sdk [#81](https://github.com/openshift/machine-api-provider-ibmcloud/pull/81)
* NO-JIRA: Modernize test infrastructure to align with other MAPI providers [#84](https://github.com/openshift/machine-api-provider-ibmcloud/pull/84)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/46b8c72c675770295f5c2c8f85f5f705ca35787c...f80ea3216387639dde6550a70a6e08599fd67f5f)
### [insights-operator](https://github.com/openshift/insights-operator/tree/2bc8825afccf2456f95d8bfea097a528d072bd11)
* [OCPBUGS-80818](https://issues.redhat.com/browse/OCPBUGS-80818): Bump google.golang.org/grpc to v1.79.3 [#1285](https://github.com/openshift/insights-operator/pull/1285)
* [OCPBUGS-81573](https://issues.redhat.com/browse/OCPBUGS-81573): kubeletconfig gatherer [#1266](https://github.com/openshift/insights-operator/pull/1266)
* [OCPBUGS-79534](https://issues.redhat.com/browse/OCPBUGS-79534): [release-4.21] Add OpenTelemetry CR Gatherer [#1258](https://github.com/openshift/insights-operator/pull/1258)
* [OCPBUGS-76960](https://issues.redhat.com/browse/OCPBUGS-76960): Extends the time for the extractor liveness probe [#1233](https://github.com/openshift/insights-operator/pull/1233)
* [OCPBUGS-74479](https://issues.redhat.com/browse/OCPBUGS-74479): set Progressing condition on cluster update [#1217](https://github.com/openshift/insights-operator/pull/1217)
* [OCPBUGS-74233](https://issues.redhat.com/browse/OCPBUGS-74233): [bugfix] The ConfigMap value for StoragePath is ignored on basic routine [#1214](https://github.com/openshift/insights-operator/pull/1214)
* [Full changelog](https://github.com/openshift/insights-operator/compare/7b7630574e477d50439b40fd839e05ef672bc38a...2bc8825afccf2456f95d8bfea097a528d072bd11)
### [insights-runtime-exporter, insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor/tree/8c41cb8680f29a915d33e4954fc5ff7f5352411b)
* Updating ose-insights-runtime-extractor-container image to be consistent with ART for 4.21 [#78](https://github.com/openshift/insights-runtime-extractor/pull/78)
* Updating ose-insights-runtime-exporter-container image to be consistent with ART for 4.21 [#77](https://github.com/openshift/insights-runtime-extractor/pull/77)
* Updating ose-insights-runtime-exporter-container image to be consistent with ART for 4.21 [#75](https://github.com/openshift/insights-runtime-extractor/pull/75)
* Updating ose-insights-runtime-exporter-container image to be consistent with ART for 4.21 [#71](https://github.com/openshift/insights-runtime-extractor/pull/71)
* Updating ose-insights-runtime-extractor-container image to be consistent with ART for 4.21 [#72](https://github.com/openshift/insights-runtime-extractor/pull/72)
* Revert "Bump Go to 1.25" [#73](https://github.com/openshift/insights-runtime-extractor/pull/73)
* Bump Go to 1.25 [#70](https://github.com/openshift/insights-runtime-extractor/pull/70)
* [OCPBUGS-77491](https://issues.redhat.com/browse/OCPBUGS-77491): remove dnf cache from the container images [#64](https://github.com/openshift/insights-runtime-extractor/pull/64)
* Fix EAP 8.1 e2e test [#65](https://github.com/openshift/insights-runtime-extractor/pull/65)
* [Full changelog](https://github.com/openshift/insights-runtime-extractor/compare/70256457b507ec09737800ee7ea022143ed6c3c2...8c41cb8680f29a915d33e4954fc5ff7f5352411b)
### [ironic](https://github.com/openshift/ironic-image/tree/6e93d7a042c96f1db6307549d348da8f6f89b06a)
* [OCPBUGS-84853](https://issues.redhat.com/browse/OCPBUGS-84853): Bump pyasn to 0.5.1-5 [#823](https://github.com/openshift/ironic-image/pull/823)
* [OCPBUGS-82298](https://issues.redhat.com/browse/OCPBUGS-82298): Bump sushy hash to include Supermicro ARS-111GL-NHR fix [#840](https://github.com/openshift/ironic-image/pull/840)
* [ART-14497](https://issues.redhat.com/browse/ART-14497): Fix ART builds with -minimal [#809](https://github.com/openshift/ironic-image/pull/809)
* [OCPBUGS-76934](https://issues.redhat.com/browse/OCPBUGS-76934): Bump keystonemiddleware version to 10.9.0-0.20260216145500.557d173 for CVE-2026-22797 fix [#791](https://github.com/openshift/ironic-image/pull/791)
* [OCPBUGS-76474](https://issues.redhat.com/browse/OCPBUGS-76474): Update requirements.cachito for 4.21 with heartbeat inspection fix commit [#785](https://github.com/openshift/ironic-image/pull/785)
* [OCPBUGS-76282](https://issues.redhat.com/browse/OCPBUGS-76282): Update ironic hash [#780](https://github.com/openshift/ironic-image/pull/780)
* [OCPBUGS-74603](https://issues.redhat.com/browse/OCPBUGS-74603): fix for minimal builds [#774](https://github.com/openshift/ironic-image/pull/774)
* [OCPBUGS-74428](https://issues.redhat.com/browse/OCPBUGS-74428): Bump eventlet version to latest bugfix [#771](https://github.com/openshift/ironic-image/pull/771)
* [OCPBUGS-70156](https://issues.redhat.com/browse/OCPBUGS-70156): Set the tls cacert path to writable mount when the IRONIC_CACERT_FILE is unset [#753](https://github.com/openshift/ironic-image/pull/753)
* [Full changelog](https://github.com/openshift/ironic-image/compare/f934d2cdf0bebbde4992980a770dd799056ab867...6e93d7a042c96f1db6307549d348da8f6f89b06a)
### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/ff276c00e345b9cb9298ce9dbdd7f19a8b14dbce)
* [OCPBUGS-74603](https://issues.redhat.com/browse/OCPBUGS-74603): fixes for minimal builds [#241](https://github.com/openshift/ironic-agent-image/pull/241)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/0336e6383c98f4f0c6b35c71e00116d3c3160c43...ff276c00e345b9cb9298ce9dbdd7f19a8b14dbce)
### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/707c226243ac401f2994952fe0e55823511111b0)
* [OCPBUGS-74204](https://issues.redhat.com/browse/OCPBUGS-74204): Export TMPDIR to be available to child processes [#112](https://github.com/openshift/ironic-rhcos-downloader/pull/112)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/9953d2b77da077c28f9486a5d965a43149ce30c1...707c226243ac401f2994952fe0e55823511111b0)
### [keepalived-ipfailover](https://github.com/openshift/images/tree/e00f5806587e71188805bab43dad9099524b9059)
* [OCPBUGS-78048](https://issues.redhat.com/browse/OCPBUGS-78048): openshift-enterprise-base: remove subscription-manager, dbus, systemd [#226](https://github.com/openshift/images/pull/226)
* [Full changelog](https://github.com/openshift/images/compare/edb8b1e6c5e949c0b470b2bdf7a32f17e53d2f71...e00f5806587e71188805bab43dad9099524b9059)
### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/ff4f3e2a6d2b0e8a860831b98733cff152cfddd3)
* [OCPBUGS-80716](https://issues.redhat.com/browse/OCPBUGS-80716): Bump google.golang.org/grpc to v1.79.3 [#61](https://github.com/openshift/kubernetes-metrics-server/pull/61)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/38c16c4698d131ab0e2da0d4b4b76d5322a89bab...ff4f3e2a6d2b0e8a860831b98733cff152cfddd3)
### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/ce6f3742ed123b671acd6de4d3605c3a7f644cf8)
* [OCPBUGS-80823](https://issues.redhat.com/browse/OCPBUGS-80823): Bump google.golang.org/grpc to v1.79.3 [#138](https://github.com/openshift/kube-state-metrics/pull/138)
* [OCPBUGS-71205](https://issues.redhat.com/browse/OCPBUGS-71205): fix: only close existing channels [#127](https://github.com/openshift/kube-state-metrics/pull/127)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/6fa06eac4c3942ba64bff18ca93b5a019ea5c976...ce6f3742ed123b671acd6de4d3605c3a7f644cf8)
### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/1e6fdd6615a55fc449b3e7ad2d6e92a27d30a934)
* [OCPBUGS-76994](https://issues.redhat.com/browse/OCPBUGS-76994): [release-4.21] Sync Upstream 2026-01-27 [#61](https://github.com/openshift/cloud-provider-kubevirt/pull/61)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/76dd5a6fa9e86573bf3dfb79be17edf832e3bae1...1e6fdd6615a55fc449b3e7ad2d6e92a27d30a934)
### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/4bb70e49c9d05690f3a26edc0a6feaf093169cbb)
* [OCPBUGS-79038](https://issues.redhat.com/browse/OCPBUGS-79038): Add annotation-based fallback for infra VM node ID resolution [#83](https://github.com/openshift/kubevirt-csi-driver/pull/83)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/771b562d4875296007850a4d3709a7ae1c6ed3e2...4bb70e49c9d05690f3a26edc0a6feaf093169cbb)
### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/76ca249e2efb662565972bbfa4f09bdc8f4bcb32)
* [OCPBUGS-77943](https://issues.redhat.com/browse/OCPBUGS-77943): Remove cluster-api-provider-libvirt references [#1473](https://github.com/openshift/machine-api-operator/pull/1473)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/33cb2da02d57004711bd09dd8f288ed6174f48fc...76ca249e2efb662565972bbfa4f09bdc8f4bcb32)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/0e0d3ab9356fb65cb7e1bfee9528d0253807775b)
* [OCPBUGS-86037](https://issues.redhat.com/browse/OCPBUGS-86037): use `--delete-if-present` for karg removal [#6058](https://github.com/openshift/machine-config-operator/pull/6058)
* [OCPBUGS-85645](https://issues.redhat.com/browse/OCPBUGS-85645): Add terminationMessagePolicy to build pod containers [#6045](https://github.com/openshift/machine-config-operator/pull/6045)
* [OCPBUGS-85386](https://issues.redhat.com/browse/OCPBUGS-85386): Fix CVE-2026-34986 [#6025](https://github.com/openshift/machine-config-operator/pull/6025)
* [OCPBUGS-85286](https://issues.redhat.com/browse/OCPBUGS-85286): Fix Admin Ack message for azure/vsphere clusters upgrading to 4.22 [#6017](https://github.com/openshift/machine-config-operator/pull/6017)
* [OCPBUGS-85126](https://issues.redhat.com/browse/OCPBUGS-85126): Fix units rollback if update failure [#6008](https://github.com/openshift/machine-config-operator/pull/6008)
* [OCPBUGS-84941](https://issues.redhat.com/browse/OCPBUGS-84941): Fix ssh and password rollbacks [#5987](https://github.com/openshift/machine-config-operator/pull/5987)
* [OCPBUGS-84970](https://issues.redhat.com/browse/OCPBUGS-84970): Fix encapsulated IGN version [#5996](https://github.com/openshift/machine-config-operator/pull/5996)
* [OCPBUGS-84878](https://issues.redhat.com/browse/OCPBUGS-84878): Update AMI Whitelist [#5915](https://github.com/openshift/machine-config-operator/pull/5915)
* [OCPBUGS-84253](https://issues.redhat.com/browse/OCPBUGS-84253): improve JSON unmarshalling for secret decoding [#5877](https://github.com/openshift/machine-config-operator/pull/5877)
* [OCPBUGS-83874](https://issues.redhat.com/browse/OCPBUGS-83874): Allow enablement of systemd units with existing files [#5869](https://github.com/openshift/machine-config-operator/pull/5869)
* [OCPBUGS-83708](https://issues.redhat.com/browse/OCPBUGS-83708): Update AMI Whitelist [#5857](https://github.com/openshift/machine-config-operator/pull/5857)
* [OCPBUGS-83390](https://issues.redhat.com/browse/OCPBUGS-83390): Use HA leader election defaults for MCO on SNO [#5838](https://github.com/openshift/machine-config-operator/pull/5838)
* [OCPBUGS-81711](https://issues.redhat.com/browse/OCPBUGS-81711): When adding new nodes, MCD executes commands after setting the nodes' state as Done [#5836](https://github.com/openshift/machine-config-operator/pull/5836)
* [OCPBUGS-79482](https://issues.redhat.com/browse/OCPBUGS-79482): Skip boot image updates until cluster is stable [#5804](https://github.com/openshift/machine-config-operator/pull/5804)
* [OCPBUGS-79426](https://issues.redhat.com/browse/OCPBUGS-79426): Update AMI Whitelist [#5798](https://github.com/openshift/machine-config-operator/pull/5798)
* [OCPBUGS-79372](https://issues.redhat.com/browse/OCPBUGS-79372): set default-timeout-stop to 200s globally [#5793](https://github.com/openshift/machine-config-operator/pull/5793)
* [OCPBUGS-78800](https://issues.redhat.com/browse/OCPBUGS-78800): Re-order logger setting to eliminate race condition [#5779](https://github.com/openshift/machine-config-operator/pull/5779)
* [OCPBUGS-78528](https://issues.redhat.com/browse/OCPBUGS-78528): Fix e2e iri tests [#5759](https://github.com/openshift/machine-config-operator/pull/5759)
* [OCPBUGS-78201](https://issues.redhat.com/browse/OCPBUGS-78201): kubelet: Less aggressive low memory reservation [#5756](https://github.com/openshift/machine-config-operator/pull/5756)
* [OCPBUGS-77833](https://issues.redhat.com/browse/OCPBUGS-77833): Update AMI Whitelist [#5743](https://github.com/openshift/machine-config-operator/pull/5743)
* [OCPBUGS-77689](https://issues.redhat.com/browse/OCPBUGS-77689): Create admin-ack gates for azure/vsphere clusters upgrading to 4.22 [#5735](https://github.com/openshift/machine-config-operator/pull/5735)
* [OCPBUGS-77577](https://issues.redhat.com/browse/OCPBUGS-77577): Fix failure domain matching during vsphere boot image updates [#5727](https://github.com/openshift/machine-config-operator/pull/5727)
* [OCPBUGS-77534](https://issues.redhat.com/browse/OCPBUGS-77534): Update AMI Whitelist [#5722](https://github.com/openshift/machine-config-operator/pull/5722)
* [OCPBUGS-77354](https://issues.redhat.com/browse/OCPBUGS-77354): Clean up vsphere login error logging [#5705](https://github.com/openshift/machine-config-operator/pull/5705)
* [OCPBUGS-76555](https://issues.redhat.com/browse/OCPBUGS-76555): Remove MCD liveness probe [#5651](https://github.com/openshift/machine-config-operator/pull/5651)
* [OCPBUGS-77072](https://issues.redhat.com/browse/OCPBUGS-77072): mcd_config_drift not working properly [#5675](https://github.com/openshift/machine-config-operator/pull/5675)
* [OCPBUGS-76823](https://issues.redhat.com/browse/OCPBUGS-76823): reduce MCO image size [#5657](https://github.com/openshift/machine-config-operator/pull/5657)
* [OCPBUGS-76833](https://issues.redhat.com/browse/OCPBUGS-76833): Machine-config controller should not log about non-existent pull-secret changes [#5659](https://github.com/openshift/machine-config-operator/pull/5659)
* [OCPBUGS-73805](https://issues.redhat.com/browse/OCPBUGS-73805): Prevent unnecessary systemd unit disable [#5648](https://github.com/openshift/machine-config-operator/pull/5648)
* [MCO-2017](https://issues.redhat.com/browse/MCO-2017): Backport OSImageStreams to 4.21 [#5515](https://github.com/openshift/machine-config-operator/pull/5515)
* [OCPBUGS-76356](https://issues.redhat.com/browse/OCPBUGS-76356): crio: disable short_name_mode until we introduce ctrcfg api for it [#5636](https://github.com/openshift/machine-config-operator/pull/5636)
* [OCPBUGS-76359](https://issues.redhat.com/browse/OCPBUGS-76359): Update AMI script and list [#5639](https://github.com/openshift/machine-config-operator/pull/5639)
* [OCPBUGS-76271](https://issues.redhat.com/browse/OCPBUGS-76271): machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] [#5624](https://github.com/openshift/machine-config-operator/pull/5624)
* [AGENT-1431](https://issues.redhat.com/browse/AGENT-1431): Backport InternalReleaseImage support [#5610](https://github.com/openshift/machine-config-operator/pull/5610)
* [OCPBUGS-74145](https://issues.redhat.com/browse/OCPBUGS-74145): enable nodeip-configuration for platform external [#5581](https://github.com/openshift/machine-config-operator/pull/5581)
* [OCPBUGS-74542](https://issues.redhat.com/browse/OCPBUGS-74542): Stale operator metrics Service and ServiceMonitor resources need to be deleted [#5600](https://github.com/openshift/machine-config-operator/pull/5600)
* [OCPBUGS-74431](https://issues.redhat.com/browse/OCPBUGS-74431): CVE-2025-58183 ose-machine-config-operator-container: Unbounded allocation when parsing GNU sparse map [openshift-4.21] [#5596](https://github.com/openshift/machine-config-operator/pull/5596)
* [OCPBUGS-73819](https://issues.redhat.com/browse/OCPBUGS-73819): Set `NodeDegraded` MCN condition when node state annotation is set to `Degraded` [#5554](https://github.com/openshift/machine-config-operator/pull/5554)
* [OCPBUGS-74103](https://issues.redhat.com/browse/OCPBUGS-74103): Fix up bootstrap-e2e [#5568](https://github.com/openshift/machine-config-operator/pull/5568)
* [OCPBUGS-73872](https://issues.redhat.com/browse/OCPBUGS-73872): CPMS boot image config should not override standard MachineSet configuration [#5559](https://github.com/openshift/machine-config-operator/pull/5559)
* [OCPBUGS-74102](https://issues.redhat.com/browse/OCPBUGS-74102): Fixes the issue in the test TestKubeletConfigMaxPods when AutoNodeSizing is enabled by default [#5567](https://github.com/openshift/machine-config-operator/pull/5567)
* [OCPBUGS-71196](https://issues.redhat.com/browse/OCPBUGS-71196): Enable existing units without content [#5561](https://github.com/openshift/machine-config-operator/pull/5561)
* [OCPBUGS-73344](https://issues.redhat.com/browse/OCPBUGS-73344): Fix timeout during configMap cleanup [#5544](https://github.com/openshift/machine-config-operator/pull/5544)
* [OCPBUGS-72398](https://issues.redhat.com/browse/OCPBUGS-72398): Move operator metrics into the controller [#5536](https://github.com/openshift/machine-config-operator/pull/5536)
* [OCPNODE-3973](https://issues.redhat.com/browse/OCPNODE-3973): Default CPU/Memory changes to Workers - AutoSizingReserved [#5530](https://github.com/openshift/machine-config-operator/pull/5530)
* [OCPBUGS-69878](https://issues.redhat.com/browse/OCPBUGS-69878): clusteroperator/machine-config blips Degraded=True in CI jobs [#5510](https://github.com/openshift/machine-config-operator/pull/5510)
* [OCPBUGS-69965](https://issues.redhat.com/browse/OCPBUGS-69965): Skip boot image updates if arch annotation is not found [#5513](https://github.com/openshift/machine-config-operator/pull/5513)
* [OCPBUGS-68377](https://issues.redhat.com/browse/OCPBUGS-68377): MCO degraded when an empty pull-secret is configured [#5499](https://github.com/openshift/machine-config-operator/pull/5499)
* [OCPBUGS-68403](https://issues.redhat.com/browse/OCPBUGS-68403): MCP is not correctly degraded when a pivotError happens [#5502](https://github.com/openshift/machine-config-operator/pull/5502)
* [OCPBUGS-67318](https://issues.redhat.com/browse/OCPBUGS-67318): Revert "Default Enablement of Auto Sizing Reserved in OpenShift 4.21" [#5493](https://github.com/openshift/machine-config-operator/pull/5493)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/864d1bc04264397caddb7ff1ffa43fc5502aa5e7...0e0d3ab9356fb65cb7e1bfee9528d0253807775b)
### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/65aeb3607f05dd71ec27a4457945ce1e054ea9e9)
* [OCPBUGS-78536](https://issues.redhat.com/browse/OCPBUGS-78536): Return error when network data Secret lacks nmstate key [#171](https://github.com/openshift/image-customization-controller/pull/171)
* [OCPBUGS-77031](https://issues.redhat.com/browse/OCPBUGS-77031): Add IPA messages for console and SSH login [#163](https://github.com/openshift/image-customization-controller/pull/163)
* [OCPBUGS-77490](https://issues.redhat.com/browse/OCPBUGS-77490): Clean up dnf cache to reduce container image size [#164](https://github.com/openshift/image-customization-controller/pull/164)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/a43d9c977f6332577efcd383cf173a2ff5805a4d...65aeb3607f05dd71ec27a4457945ce1e054ea9e9)
### [machine-os-images](https://github.com/openshift/machine-os-images/tree/e9019e5f819c44726e9ff5e1ec8fdfad9fb314fd)
* [OCPBUGS-85478](https://issues.redhat.com/browse/OCPBUGS-85478): Force rebuild for OCP 4.21 [#89](https://github.com/openshift/machine-os-images/pull/89)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/df9a652cb1572172e404655bb021525be2e3d8ab...e9019e5f819c44726e9ff5e1ec8fdfad9fb314fd)
### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/462c78890ffb636e05d91d41ca718bb3c81da4cf)
* [OCPBUGS-79460](https://issues.redhat.com/browse/OCPBUGS-79460): immutable bump: fix for CVE-2026-29063 [4.21] [#947](https://github.com/openshift/monitoring-plugin/pull/947)
* [OU-1368](https://issues.redhat.com/browse/OU-1368): reset queries when namespace changes in dev perspective [#940](https://github.com/openshift/monitoring-plugin/pull/940)
* [OU-1367](https://issues.redhat.com/browse/OU-1367): prevent namespace and project desync [#937](https://github.com/openshift/monitoring-plugin/pull/937)
* NO-JIRA: release-4.21 e2e-monitoring and e2e-coo working [#904](https://github.com/openshift/monitoring-plugin/pull/904)
* [OCPBUGS-83494](https://issues.redhat.com/browse/OCPBUGS-83494): [release-4.21] feat: re enable dev console views [#856](https://github.com/openshift/monitoring-plugin/pull/856)
* [OCPBUGS-83304](https://issues.redhat.com/browse/OCPBUGS-83304): [release-4.21] openshift4/ose-monitoring-plugin-rhel9: Axios: Remote Code Execution via Prototype Pollution escalation [#890](https://github.com/openshift/monitoring-plugin/pull/890)
* [OCPBUGS-82302](https://issues.redhat.com/browse/OCPBUGS-82302): [release-4.21] fix: re encode params when redirecting from graph to query-browser [#871](https://github.com/openshift/monitoring-plugin/pull/871)
* [OCPBUGS-78358](https://issues.redhat.com/browse/OCPBUGS-78358): fix for CVE-2025-69873 [#845](https://github.com/openshift/monitoring-plugin/pull/845)
* NO-JIRA: [release-4.21] e2e-monitoring fixing loop on legacy dashboard [#828](https://github.com/openshift/monitoring-plugin/pull/828)
* [OCPBUGS-77227](https://issues.redhat.com/browse/OCPBUGS-77227): [openshift-4.21] CVE-2026-25639 openshift4/ose-monitoring-plugin-rhel9:Axios affected by Denial of Service via __proto__ Key in mergeConfig [#795](https://github.com/openshift/monitoring-plugin/pull/795)
* [OU-1062](https://issues.redhat.com/browse/OU-1062): [release-4.21] feat: mark alert menu active for incidents tab [#761](https://github.com/openshift/monitoring-plugin/pull/761)
* NO-JIRA: [release-4.21] simplify frontend build in Dockerfile.art [#808](https://github.com/openshift/monitoring-plugin/pull/808)
* [OCPBUGS-74909](https://issues.redhat.com/browse/OCPBUGS-74909): fix: update vulnerable dependencies [#751](https://github.com/openshift/monitoring-plugin/pull/751)
* NO-JIRA: [release-4.21] fix: remove unnecessary package.lock [#729](https://github.com/openshift/monitoring-plugin/pull/729)
* [OCPBUGS-71223](https://issues.redhat.com/browse/OCPBUGS-71223): fix: update qs vulnerable dependency [#718](https://github.com/openshift/monitoring-plugin/pull/718)
* [OU-1145](https://issues.redhat.com/browse/OU-1145): remove random multiplication [#703](https://github.com/openshift/monitoring-plugin/pull/703)
* NO-JIRA: [release-4.21] automation - dev user scenarios fixes with namespace level changes [#698](https://github.com/openshift/monitoring-plugin/pull/698)
* [OCPBUGS-67297](https://issues.redhat.com/browse/OCPBUGS-67297): [release-4.21] fix: upgrade node-forge vulnerable dependency [#685](https://github.com/openshift/monitoring-plugin/pull/685)
* NO-JIRA: [release-4.21] - automation - monitoring stabilization presubmit [#687](https://github.com/openshift/monitoring-plugin/pull/687)
* [OU-1130](https://issues.redhat.com/browse/OU-1130): Add missing commits to 4.21 [#682](https://github.com/openshift/monitoring-plugin/pull/682)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/f3f3c199a35f28b5a3cb7e5e123d3f34c25dcdfd...462c78890ffb636e05d91d41ca718bb3c81da4cf)
### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/4f696e721ac0897a782c2fde3c24d961938feff3)
* [OCPBUGS-82064](https://issues.redhat.com/browse/OCPBUGS-82064): Bump CNI version to 1.1.0 [#284](https://github.com/openshift/multus-cni/pull/284)
* [Full changelog](https://github.com/openshift/multus-cni/compare/b4ec7d8239ce4bd3ed949bce9816a013377b44c7...4f696e721ac0897a782c2fde3c24d961938feff3)
### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/e9f2f3c7e81683af3b8cc9a5a3166434c94e0498)
* [OCPBUGS-77489](https://issues.redhat.com/browse/OCPBUGS-77489): Clean up dnf cache [#100](https://github.com/openshift/multus-networkpolicy/pull/100)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/834a093f693e521b8dc4ec7168d03cfba2c1cba1...e9f2f3c7e81683af3b8cc9a5a3166434c94e0498)
### [must-gather](https://github.com/openshift/must-gather/tree/eeb267f4b7f8016f13d12866013cad43c7403482)
* [OCPBUGS-85050](https://issues.redhat.com/browse/OCPBUGS-85050): Collect object size with the object count [#542](https://github.com/openshift/must-gather/pull/542)
* [Full changelog](https://github.com/openshift/must-gather/compare/8554213fa214e8e165e7bedaf8d892bb824d83ef...eeb267f4b7f8016f13d12866013cad43c7403482)
### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/268037d76fd97d29f39eae2f25f0a2b2910cb30e)
* [OCPBUGS-81620](https://issues.redhat.com/browse/OCPBUGS-81620): Update lodash to 4.18.1 for CVE-2026-4800 [#372](https://github.com/openshift/networking-console-plugin/pull/372)
* [OCPBUGS-83388](https://issues.redhat.com/browse/OCPBUGS-83388): Fix CVE-2026-34043 in serialize-javascript [#369](https://github.com/openshift/networking-console-plugin/pull/369)
* [OCPBUGS-82161](https://issues.redhat.com/browse/OCPBUGS-82161): Migrate to npm [#359](https://github.com/openshift/networking-console-plugin/pull/359)
* [OCPBUGS-66283](https://issues.redhat.com/browse/OCPBUGS-66283), [OCPBUGS-67252](https://issues.redhat.com/browse/OCPBUGS-67252), [OCPBUGS-70285](https://issues.redhat.com/browse/OCPBUGS-70285), [OCPBUGS-74473](https://issues.redhat.com/browse/OCPBUGS-74473): Fix CVEs via upgrading yarn.lock [#346](https://github.com/openshift/networking-console-plugin/pull/346)
* [CNV-59877](https://issues.redhat.com/browse/CNV-59877): Fix permissions request for NADs [#353](https://github.com/openshift/networking-console-plugin/pull/353)
* [OCPBUGS-77887](https://issues.redhat.com/browse/OCPBUGS-77887): Clean up cruft in /var/cache/dnf [#361](https://github.com/openshift/networking-console-plugin/pull/361)
* [OCPBUGS-77225](https://issues.redhat.com/browse/OCPBUGS-77225): Fix NAD creation using default namespace instead of selected one [#349](https://github.com/openshift/networking-console-plugin/pull/349)
* [CNV-77540](https://issues.redhat.com/browse/CNV-77540): fix Enable MultiNetworkPolicies lead to invalid URL [#341](https://github.com/openshift/networking-console-plugin/pull/341)
* [CNV-74687](https://issues.redhat.com/browse/CNV-74687): Fixing the title and redirect when deleting a vm network [#340](https://github.com/openshift/networking-console-plugin/pull/340)
* [CNV-76879](https://issues.redhat.com/browse/CNV-76879): Allow passing the physical network name via URL parameter in the VM network wizard [#332](https://github.com/openshift/networking-console-plugin/pull/332)
* [CNV-75831](https://issues.redhat.com/browse/CNV-75831): list all NetworkPolicies in "All projects" [#324](https://github.com/openshift/networking-console-plugin/pull/324)
* [OCPBUGS-73790](https://issues.redhat.com/browse/OCPBUGS-73790): remove whitelist for allowlist [#323](https://github.com/openshift/networking-console-plugin/pull/323)
* [CNV-76211](https://issues.redhat.com/browse/CNV-76211): Remove deprecated badge from localnet [#322](https://github.com/openshift/networking-console-plugin/pull/322)
* [CNV-76277](https://issues.redhat.com/browse/CNV-76277): Fix name generator with unprofessional names [#316](https://github.com/openshift/networking-console-plugin/pull/316)
* [CNV-72230](https://issues.redhat.com/browse/CNV-72230): fix networking links [#310](https://github.com/openshift/networking-console-plugin/pull/310)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/d73167a4d7fca871d64d3591aac388cfd2d37bbe...268037d76fd97d29f39eae2f25f0a2b2910cb30e)
### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/71c41b2d8abb0c6ad90dca286baf5d03c1340646)
* NO-JIRA: (chore): update OWNERS file [#167](https://github.com/openshift/oauth-apiserver/pull/167)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/4c002a9114937ea9c20213f00892761c2013e60b...71c41b2d8abb0c6ad90dca286baf5d03c1340646)
### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/7f518c02931f8c5c1c3aa5d2192a905f973b2b34)
* [OCPBUGS-74131](https://issues.redhat.com/browse/OCPBUGS-74131): test/e2e - do not use ambiguous container image short names [#344](https://github.com/openshift/oauth-proxy/pull/344)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/714292f5478e6c12da6a31710f72bc8fbe6fb925...7f518c02931f8c5c1c3aa5d2192a905f973b2b34)
### [oauth-server](https://github.com/openshift/oauth-server/tree/2b8183592190365c269ca0c92b1955bbad9a0236)
* [OCPBUGS-77454](https://issues.redhat.com/browse/OCPBUGS-77454): groupmapper: avoid mutating original group users slice when removing user [#213](https://github.com/openshift/oauth-server/pull/213)
* [Full changelog](https://github.com/openshift/oauth-server/compare/6c6e96279eb140ef7b4e2028ac874d79fd5bdbc9...2b8183592190365c269ca0c92b1955bbad9a0236)
### [oc-mirror](https://github.com/openshift/oc-mirror/tree/994deebef2836ca75003dd15372f7110d2448fa6)
* [OCPBUGS-82546](https://issues.redhat.com/browse/OCPBUGS-82546): Only print catalog rebuild message if there are catalogs to rebuild [#1388](https://github.com/openshift/oc-mirror/pull/1388)
* [OCPBUGS-82543](https://issues.redhat.com/browse/OCPBUGS-82543): Fix printing collection messages with 0 collection items [#1387](https://github.com/openshift/oc-mirror/pull/1387)
* [OCPBUGS-81743](https://issues.redhat.com/browse/OCPBUGS-81743): Remove status field from CatalogSource, ClusterCatalog... [#1383](https://github.com/openshift/oc-mirror/pull/1383)
* [CLID-549](https://issues.redhat.com/browse/CLID-549), [OCPBUGS-78458](https://issues.redhat.com/browse/OCPBUGS-78458): Update Dockerfile.tests to run Go integration tests [#1371](https://github.com/openshift/oc-mirror/pull/1371)
* [OCPBUGS-77222](https://issues.redhat.com/browse/OCPBUGS-77222): Fix registriesd "unknown userid" failure for arbitrary UIDs [#1358](https://github.com/openshift/oc-mirror/pull/1358)
* [OCPBUGS-76126](https://issues.redhat.com/browse/OCPBUGS-76126): Fix reg config detection for explicit false values [#1349](https://github.com/openshift/oc-mirror/pull/1349)
* [OCPBUGS-74981](https://issues.redhat.com/browse/OCPBUGS-74981): fix conversion issue for catalog [#1346](https://github.com/openshift/oc-mirror/pull/1346)
* [OCPBUGS-74577](https://issues.redhat.com/browse/OCPBUGS-74577): fix duplicated channel bug in filtered catalogs [#1345](https://github.com/openshift/oc-mirror/pull/1345)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/ca5eebdcecf9650248f15fe6009b22788ba0c434...994deebef2836ca75003dd15372f7110d2448fa6)
### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/9bf1d982a091f54597e582c407d61f8ecfbc4f95)
* [OCPBUGS-81993](https://issues.redhat.com/browse/OCPBUGS-81993), [OCPBUGS-81994](https://issues.redhat.com/browse/OCPBUGS-81994): Bump github.com/go-jose/go-jose/v4 to 4.1.4 [#718](https://github.com/openshift/operator-framework-operator-controller/pull/718)
* [OCPBUGS-80839](https://issues.redhat.com/browse/OCPBUGS-80839), [OCPBUGS-80840](https://issues.redhat.com/browse/OCPBUGS-80840): Bump google.golang.org/grpc to v1.79.3 [#721](https://github.com/openshift/operator-framework-operator-controller/pull/721)
* [OCPBUGS-79059](https://issues.redhat.com/browse/OCPBUGS-79059): update OCP-75441 to support multi-arch[release-4.21] [#671](https://github.com/openshift/operator-framework-operator-controller/pull/671)
* [OCPBUGS-74967](https://issues.redhat.com/browse/OCPBUGS-74967): [release-4.21] enhance qe cases to make it more stable [#626](https://github.com/openshift/operator-framework-operator-controller/pull/626)
* [OCPBUGS-74633](https://issues.redhat.com/browse/OCPBUGS-74633): config watchnamespace api cases [#620](https://github.com/openshift/operator-framework-operator-controller/pull/620)
* [OCPBUGS-74562](https://issues.redhat.com/browse/OCPBUGS-74562): enhance ocp-79770 [#617](https://github.com/openshift/operator-framework-operator-controller/pull/617)
* [OCPBUGS-72576](https://issues.redhat.com/browse/OCPBUGS-72576): update 83026 to specify the clustercatalog [#591](https://github.com/openshift/operator-framework-operator-controller/pull/591)
* : OCPBUGS-72574: [release-4.21]: update 80458's timeout to 180s [#585](https://github.com/openshift/operator-framework-operator-controller/pull/585)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/26b848969eabd4e1899439f40a4346552f08ff38...9bf1d982a091f54597e582c407d61f8ecfbc4f95)
### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/f4f439d4ce40c1175188c81591284dcc9fe6facf)
* UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.13 into release-4.21 [#394](https://github.com/openshift/cluster-api-provider-openstack/pull/394)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/06d95461581f9374ae05959b66fc50e2a17d077c...f4f439d4ce40c1175188c81591284dcc9fe6facf)
### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/b1fdb10f47f3bdb5c2902fac1d53bfa98c3a88ab)
* [OCPBUGS-76789](https://issues.redhat.com/browse/OCPBUGS-76789): Fix make test [#156](https://github.com/openshift/machine-api-provider-openstack/pull/156)
* [OCPBUGS-69644](https://issues.redhat.com/browse/OCPBUGS-69644): Don't record event for every reconcile [#146](https://github.com/openshift/machine-api-provider-openstack/pull/146)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/8a8c354b99ce83e3c05a91358aadec09944c2fce...b1fdb10f47f3bdb5c2902fac1d53bfa98c3a88ab)
### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/149d553b2057320d761c4d1913098a66787dd09a)
* [OCPBUGS-81995](https://issues.redhat.com/browse/OCPBUGS-81995), [OCPBUGS-81996](https://issues.redhat.com/browse/OCPBUGS-81996), [OCPBUGS-81997](https://issues.redhat.com/browse/OCPBUGS-81997): Bump github.com/go-jose/go-jose/v4 to v4.1.4 [#1294](https://github.com/openshift/operator-framework-olm/pull/1294)
* [OCPBUGS-80847](https://issues.redhat.com/browse/OCPBUGS-80847), [OCPBUGS-80848](https://issues.redhat.com/browse/OCPBUGS-80848), [OCPBUGS-80849](https://issues.redhat.com/browse/OCPBUGS-80849): Bump google.golang.org/grpc to v1.79.3 for CVE-2026-33186[Release-4.21] [#1289](https://github.com/openshift/operator-framework-olm/pull/1289)
* [OCPBUGS-79398](https://issues.redhat.com/browse/OCPBUGS-79398): Fix SA restore resourceVersion conflict error [#1266](https://github.com/openshift/operator-framework-olm/pull/1266)
* [OCPBUGS-79400](https://issues.redhat.com/browse/OCPBUGS-79400): Fix nil pointer dereference in sortUnpackJobs when sorting non-failed jobs [#1265](https://github.com/openshift/operator-framework-olm/pull/1265)
* [OCPBUGS-79380](https://issues.redhat.com/browse/OCPBUGS-79380): enhance case to make it pass per test bundle change [#1263](https://github.com/openshift/operator-framework-olm/pull/1263)
* [OCPBUGS-78558](https://issues.redhat.com/browse/OCPBUGS-78558): Re-Apply Fix admin context race condition in parallel tests [#1261](https://github.com/openshift/operator-framework-olm/pull/1261)
* [OCPBUGS-77712](https://issues.redhat.com/browse/OCPBUGS-77712): Update NetworkPolicy egress to support HyperShift custom API ports [#1246](https://github.com/openshift/operator-framework-olm/pull/1246)
* [OCPBUGS-77067](https://issues.redhat.com/browse/OCPBUGS-77067): Remove the collect-profiles info from the microshift kustomization file [#1234](https://github.com/openshift/operator-framework-olm/pull/1234)
* [OCPBUGS-76325](https://issues.redhat.com/browse/OCPBUGS-76325): [release-4.21]remove qe case of testing collect-profiles [#1222](https://github.com/openshift/operator-framework-olm/pull/1222)
* [OCPBUGS-76266](https://issues.redhat.com/browse/OCPBUGS-76266): Remove the collect-profiles job [#1220](https://github.com/openshift/operator-framework-olm/pull/1220)
* [OCPBUGS-72580](https://issues.redhat.com/browse/OCPBUGS-72580): [release-4.21] OCPQE-31297: enhance ocp and microshift olm case [#1189](https://github.com/openshift/operator-framework-olm/pull/1189)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/de6260e53055e10e216ec668d692a35554ab0585...149d553b2057320d761c4d1913098a66787dd09a)
### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/efb1a1ea40bc1ed3a439812cfdaa3013b80e96ce)
* [OCPBUGS-77580](https://issues.redhat.com/browse/OCPBUGS-77580): Update NetworkPolicy egress to support HyperShift custom API ports [#729](https://github.com/operator-framework/operator-marketplace/pull/729)
* [OCPBUGS-73881](https://issues.redhat.com/browse/OCPBUGS-73881): Increase default catalog polling interval to 4h (240m) [#705](https://github.com/operator-framework/operator-marketplace/pull/705)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/38da2ef78cc429f67aea7fb4e589df21ac1ed327...efb1a1ea40bc1ed3a439812cfdaa3013b80e96ce)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/d586f851c25d8f7cd04840cda79a0a6a98ea8485)
* [OCPBUGS-84923](https://issues.redhat.com/browse/OCPBUGS-84923): Branch Sync release-4.22 to release-4.21 [04-27-2026] [#3160](https://github.com/openshift/ovn-kubernetes/pull/3160)
* [OCPBUGS-81634](https://issues.redhat.com/browse/OCPBUGS-81634), [OCPBUGS-83814](https://issues.redhat.com/browse/OCPBUGS-83814): Branch Sync release-4.22 to release-4.21 [04-16-2026] [#3145](https://github.com/openshift/ovn-kubernetes/pull/3145)
* [OCPBUGS-83566](https://issues.redhat.com/browse/OCPBUGS-83566): Branch Sync release-4.22 to release-4.21 [03-25-2026] [#3087](https://github.com/openshift/ovn-kubernetes/pull/3087)
* [OCPBUGS-81475](https://issues.redhat.com/browse/OCPBUGS-81475): node: fix serviceUpdateNotNeeded nil pointer comparison [#3098](https://github.com/openshift/ovn-kubernetes/pull/3098)
* [OCPBUGS-77257](https://issues.redhat.com/browse/OCPBUGS-77257), [OCPBUGS-78094](https://issues.redhat.com/browse/OCPBUGS-78094): Branch Sync release-4.22 to release-4.21 [03-23-2026] [#3080](https://github.com/openshift/ovn-kubernetes/pull/3080)
* [OCPBUGS-78771](https://issues.redhat.com/browse/OCPBUGS-78771): Branch Sync release-4.22 to release-4.21 [03-11-2026] [#3050](https://github.com/openshift/ovn-kubernetes/pull/3050)
* [OCPBUGS-76472](https://issues.redhat.com/browse/OCPBUGS-76472): OCPBUGS-72532: Branch Sync release-4.22 to release-4.21 [12-19-2025] [#3022](https://github.com/openshift/ovn-kubernetes/pull/3022)
* [OCPBUGS-77147](https://issues.redhat.com/browse/OCPBUGS-77147): Minimize ACLs by combining ipBlocks into single ACL [#2995](https://github.com/openshift/ovn-kubernetes/pull/2995)
* [OCPBUGS-77309](https://issues.redhat.com/browse/OCPBUGS-77309): Clear stale conntrack UDP entries for nodePorts [#3002](https://github.com/openshift/ovn-kubernetes/pull/3002)
* [OCPBUGS-77046](https://issues.redhat.com/browse/OCPBUGS-77046), [OCPBUGS-77086](https://issues.redhat.com/browse/OCPBUGS-77086): [release-4.21] combined backport PR for 2 escalations [#2984](https://github.com/openshift/ovn-kubernetes/pull/2984)
* [OCPBUGS-74267](https://issues.redhat.com/browse/OCPBUGS-74267): release-4.21 fix(localnet, ipamless): Prevent LSP deletion on sync [#2940](https://github.com/openshift/ovn-kubernetes/pull/2940)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/72db5e8d8ec23d4108183a8c67b45cdfdb8057ba...d586f851c25d8f7cd04840cda79a0a6a98ea8485)
### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/114fe69249450f3bec773cba2956a8c06e7b0da9)
* [OCPBUGS-80852](https://issues.redhat.com/browse/OCPBUGS-80852): Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 [#127](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/127)
* [OCPBUGS-82924](https://issues.redhat.com/browse/OCPBUGS-82924): Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 [#121](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/121)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/02959a8d7096501e240d1d9f65da90b87bac45b9...114fe69249450f3bec773cba2956a8c06e7b0da9)
### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/b714ab87d079db5ef3c4097520db40cd289b025e)
* Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.21 [#107](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/107)
* [OCPBUGS-80853](https://issues.redhat.com/browse/OCPBUGS-80853): Fix CVE-2026-33186 by bumping google.golang.org/grpc to v1.79.3 [#106](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/106)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/277478211cfc7302e9c09b41a0935fbba678614a...b714ab87d079db5ef3c4097520db40cd289b025e)
### [prometheus](https://github.com/openshift/prometheus/tree/78974c3bbd559d91e2c9cdd627c9ffdeca4f94f3)
* [OCPBUGS-80855](https://issues.redhat.com/browse/OCPBUGS-80855): Bump google.golang.org/grpc to v1.79.3 [#309](https://github.com/openshift/prometheus/pull/309)
* [OCPBUGS-78581](https://issues.redhat.com/browse/OCPBUGS-78581): [release-4.21] chore(kubernetes): deduplicate warning logs from the API [#298](https://github.com/openshift/prometheus/pull/298)
* [Full changelog](https://github.com/openshift/prometheus/compare/85b4bbcbdf5d275f982408732542e3e06db1dc74...78974c3bbd559d91e2c9cdd627c9ffdeca4f94f3)
### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/3de9763f36128ffa8b25a63c9447f6d64114c270)
* [OCPBUGS-77295](https://issues.redhat.com/browse/OCPBUGS-77295): backport upstream fix to reconcile resources with inconsistent status [#365](https://github.com/openshift/prometheus-operator/pull/365)
* [OCPBUGS-74477](https://issues.redhat.com/browse/OCPBUGS-74477): Validate `webhookURL` secret for `MSTeams` receiver in `AlertmanagerConfig` CRD [#359](https://github.com/openshift/prometheus-operator/pull/359)
* [OCPBUGS-67943](https://issues.redhat.com/browse/OCPBUGS-67943): [bot] Bump openshift/prometheus-operator to v0.87.1 [#350](https://github.com/openshift/prometheus-operator/pull/350)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/70e38466b9b9143f48283dab8bd0c227f35efe69...3de9763f36128ffa8b25a63c9447f6d64114c270)
### [rhel-coreos, rhel-coreos-10, rhel-coreos-10-extensions, rhel-coreos-extensions](https://github.com/openshift/os/tree/10f1a2e738aa55fff22dbe0346609e83a5f6eb90)
* [OCPBUGS-82523](https://issues.redhat.com/browse/OCPBUGS-82523): post-process: Remove workaround for openvswitch additional group [#1926](https://github.com/openshift/os/pull/1926)
* - [release-4.21] extensions: Add rhel-9.6-server-ose-4.21 [#1914](https://github.com/openshift/os/pull/1914)
* NO-JIRA: [release-4.21] extensions: Fix repo name to match 4.21 [#1913](https://github.com/openshift/os/pull/1913)
* [COS-3946](https://issues.redhat.com/browse/COS-3946): Backport rhel-10.2 support to release-4.21 branch [#1898](https://github.com/openshift/os/pull/1898)
* NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches [#1889](https://github.com/openshift/os/pull/1889)
* NO-JIRA: Remove (commented) WASM mentions [#1888](https://github.com/openshift/os/pull/1888)
* [OCPBUGS-72560](https://issues.redhat.com/browse/OCPBUGS-72560): package: add ose-crio-credential-provider [#1880](https://github.com/openshift/os/pull/1880)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/os/compare/f41264dc5f1c1f0a389787ecc5aaec573d485b8e...10f1a2e738aa55fff22dbe0346609e83a5f6eb90)
### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/559b7122d1a0cad4ff475b496c2896b39eed8c08)
* [OCPBUGS-76641](https://issues.redhat.com/browse/OCPBUGS-76641): filter ingress namespace on UnmanagedRoutes metric [#73](https://github.com/openshift/route-controller-manager/pull/73)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/624742d93f3a7885cf7f70985f1e23ff60da580d...559b7122d1a0cad4ff475b496c2896b39eed8c08)
### [telemeter](https://github.com/openshift/telemeter/tree/b79b872a65edd845891db70f6c9a184458a178da)
* [OCPBUGS-80868](https://issues.redhat.com/browse/OCPBUGS-80868): Bump google.golang.org/grpc to v1.79.3 [#589](https://github.com/openshift/telemeter/pull/589)
* [OCPBUGS-81817](https://issues.redhat.com/browse/OCPBUGS-81817): [release-1.21] Fix CVE-2026-34986 [#593](https://github.com/openshift/telemeter/pull/593)
* [Full changelog](https://github.com/openshift/telemeter/compare/c2ffb0a7035e504a4ddc7292e4d12b7490eab0d4...b79b872a65edd845891db70f6c9a184458a178da)
### [tests](https://github.com/openshift/origin/tree/c2da98a5a8f0e23886ac536fbeb81140e798fb71)
* [OCPQE-32041](https://issues.redhat.com/browse/OCPQE-32041): bump(k8s): move docker types into container package [#31169](https://github.com/openshift/origin/pull/31169)
* [OCPBUGS-74373](https://issues.redhat.com/browse/OCPBUGS-74373): Remove restriction of unmanaged x-k8s.io [#30718](https://github.com/openshift/origin/pull/30718)
* [OCPBUGS-84655](https://issues.redhat.com/browse/OCPBUGS-84655): fix openshift/network/third-party suite selecting zero tests [#31091](https://github.com/openshift/origin/pull/31091)
* [OCPBUGS-84978](https://issues.redhat.com/browse/OCPBUGS-84978): Skip image-registry operator tests for Libvirt platform in upgrade jobs. [#31123](https://github.com/openshift/origin/pull/31123)
* [OCPBUGS-84947](https://issues.redhat.com/browse/OCPBUGS-84947): test: add monitortest to detect pods stuck in Pending state [#31117](https://github.com/openshift/origin/pull/31117)
* [OCPBUGS-84947](https://issues.redhat.com/browse/OCPBUGS-84947): Add [Late] test to collect CRI-O goroutine dumps via SIGUSR1 [#31118](https://github.com/openshift/origin/pull/31118)
* [OCPBUGS-81638](https://issues.redhat.com/browse/OCPBUGS-81638): Manual cherry-pick node swap feature testcases to 4.21 [#30973](https://github.com/openshift/origin/pull/30973)
* [OCPBUGS-82064](https://issues.redhat.com/browse/OCPBUGS-82064): Assert CNI version greater than equal to 1.0.0 [#30977](https://github.com/openshift/origin/pull/30977)
* [OCPBUGS-81638](https://issues.redhat.com/browse/OCPBUGS-81638): Add openshift/disruptive-longrunning testsuite in release-4.21 branch [#30976](https://github.com/openshift/origin/pull/30976)
* [OCPBUGS-78780](https://issues.redhat.com/browse/OCPBUGS-78780): changed http to https for three places to reduce test false positives and false negatives [#30902](https://github.com/openshift/origin/pull/30902)
* [OCPBUGS-79365](https://issues.redhat.com/browse/OCPBUGS-79365): Verify etc pod should start with oom_score_adj as system-node-critical [#30916](https://github.com/openshift/origin/pull/30916)
* [OCPBUGS-78485](https://issues.redhat.com/browse/OCPBUGS-78485): run resource request/limit check early [#30879](https://github.com/openshift/origin/pull/30879)
* [OCPBUGS-78192](https://issues.redhat.com/browse/OCPBUGS-78192): Exclude disruption during NoExecuteTaintManager serial tests [#30857](https://github.com/openshift/origin/pull/30857)
* [OCPBUGS-78064](https://issues.redhat.com/browse/OCPBUGS-78064): Update optimized builds test to use rpm -qa instead of dnf [#30856](https://github.com/openshift/origin/pull/30856)
* [OCPBUGS-78064](https://issues.redhat.com/browse/OCPBUGS-78064): Allow test to tolerate running on minimal images [#30852](https://github.com/openshift/origin/pull/30852)
* [OCPBUGS-77823](https://issues.redhat.com/browse/OCPBUGS-77823): add the missing namespace from managed openshift [#30838](https://github.com/openshift/origin/pull/30838)
* [OCPBUGS-77826](https://issues.redhat.com/browse/OCPBUGS-77826): Remove exception for monitoring OLM Progression condition [#30839](https://github.com/openshift/origin/pull/30839)
* [OCPBUGS-77097](https://issues.redhat.com/browse/OCPBUGS-77097): Add test for CPMS OnDelete strategy with full master replacement [#30802](https://github.com/openshift/origin/pull/30802)
* : OCPBUGS-76856:cert tests: mark TLS registry test as informing [#30779](https://github.com/openshift/origin/pull/30779)
* [OCPBUGS-76529](https://issues.redhat.com/browse/OCPBUGS-76529): Fix flakiness in MutableCSINodeAllocatableCount test [#30772](https://github.com/openshift/origin/pull/30772)
* [OCPBUGS-76955](https://issues.redhat.com/browse/OCPBUGS-76955): co/kube-storage-version-migrator reports Available=False in a non-upgrade job [#30740](https://github.com/openshift/origin/pull/30740)
* [OCPBUGS-75513](https://issues.redhat.com/browse/OCPBUGS-75513): adjust olm test to pass on a degraded run [#30749](https://github.com/openshift/origin/pull/30749)
* [OCPBUGS-75513](https://issues.redhat.com/browse/OCPBUGS-75513): update test logic for degraded cluster run [#30748](https://github.com/openshift/origin/pull/30748)
* [OCPBUGS-74499](https://issues.redhat.com/browse/OCPBUGS-74499): Update MCN tests to better handle condition transitions through the "Unknown" state [#30729](https://github.com/openshift/origin/pull/30729)
* [OCPBUGS-74503](https://issues.redhat.com/browse/OCPBUGS-74503): VsphereConfigurationTestsRollOutTooOften event matcher should use broader regex [#30730](https://github.com/openshift/origin/pull/30730)
* [OCPBUGS-74372](https://issues.redhat.com/browse/OCPBUGS-74372): Add/RemoveSigtermProtection event matcher for SigstoreImageVerification test [#30723](https://github.com/openshift/origin/pull/30723)
* [OCPBUGS-74303](https://issues.redhat.com/browse/OCPBUGS-74303): Add filter for openshift-copy-to-node ns [#30715](https://github.com/openshift/origin/pull/30715)
* [OCPBUGS-74094](https://issues.redhat.com/browse/OCPBUGS-74094): Ignore repeated TopologyAwareHintsDisabled events [#30699](https://github.com/openshift/origin/pull/30699)
* [OCPBUGS-73808](https://issues.redhat.com/browse/OCPBUGS-73808): update watch request limits for cluster-autoscaler-operator [#30691](https://github.com/openshift/origin/pull/30691)
* [OCPBUGS-67016](https://issues.redhat.com/browse/OCPBUGS-67016): Isolate and reduce parallelism for OrderedNamespaceDeletion tests. [#30661](https://github.com/openshift/origin/pull/30661)
* [OCPBUGS-70143](https://issues.redhat.com/browse/OCPBUGS-70143): Fix race condition in external binary extraction [#30641](https://github.com/openshift/origin/pull/30641)
* [OCPBUGS-72414](https://issues.redhat.com/browse/OCPBUGS-72414): change iperf2 test to serial from parallel [#30673](https://github.com/openshift/origin/pull/30673)
* [OCPBUGS-72414](https://issues.redhat.com/browse/OCPBUGS-72414), [OCPBUGS-72415](https://issues.redhat.com/browse/OCPBUGS-72415): only run Netpol two at a time [#30667](https://github.com/openshift/origin/pull/30667)
* [OCPBUGS-72386](https://issues.redhat.com/browse/OCPBUGS-72386): Add more exceptions for CO/image-registry's Degraded=True [#30663](https://github.com/openshift/origin/pull/30663)
* [OCPBUGS-71229](https://issues.redhat.com/browse/OCPBUGS-71229): Unrevert tls tests with fixes [#30660](https://github.com/openshift/origin/pull/30660)
* [OCPBUGS-69816](https://issues.redhat.com/browse/OCPBUGS-69816): BeforeEach was indirectly called in DetermineReleasePayloadImage [#30622](https://github.com/openshift/origin/pull/30622)
* [OCPBUGS-69903](https://issues.redhat.com/browse/OCPBUGS-69903): add test for MutableCSINodeAllocatableCount feature [#30630](https://github.com/openshift/origin/pull/30630)
* [OCPBUGS-69389](https://issues.redhat.com/browse/OCPBUGS-69389): exculude Flaky tests for openshift/csi test suite [#30613](https://github.com/openshift/origin/pull/30613)
* [Full changelog](https://github.com/openshift/origin/compare/01fdf25d4c2dbbdab8a6305184dc3eac840cd289...c2da98a5a8f0e23886ac536fbeb81140e798fb71)
### [thanos](https://github.com/openshift/thanos/tree/afeb1c85ba9ee06676a0e657bfa4f4139ccc47b3)
* [OCPBUGS-84492](https://issues.redhat.com/browse/OCPBUGS-84492): Revert "OCPBUGS-80870: CVE-2026-33186 openshift4/ose-thanos-rhel9: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation [openshift-4.21]" [#180](https://github.com/openshift/thanos/pull/180)
* [OCPBUGS-80870](https://issues.redhat.com/browse/OCPBUGS-80870): CVE-2026-33186 openshift4/ose-thanos-rhel9: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation [openshift-4.21] [#174](https://github.com/openshift/thanos/pull/174)
* [Full changelog](https://github.com/openshift/thanos/compare/5d9d0f387e5cc651470f27352b28674103bfdd77...afeb1c85ba9ee06676a0e657bfa4f4139ccc47b3)
### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/3adfe2b56b259b2d27906d8772354f817e338da5)
* [OCPBUGS-80875](https://issues.redhat.com/browse/OCPBUGS-80875): Bump google.golang.org/grpc to v1.79.3 [#102](https://github.com/openshift/cluster-api-provider-vsphere/pull/102)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/ac542b5afbd9a3897cda34e7ea1852b61c945e36...3adfe2b56b259b2d27906d8772354f817e338da5)
### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/69e1c6ed3201efc16bcd320cf558aa8fe869ec69)
* [OCPBUGS-80878](https://issues.redhat.com/browse/OCPBUGS-80878): Bump google.golang.org/grpc to 1.79.3 [#171](https://github.com/openshift/vmware-vsphere-csi-driver/pull/171)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/cf21e1211225e3cf6baa27bdb12ae86c5c13db39...69e1c6ed3201efc16bcd320cf558aa8fe869ec69)
### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/d6a19449cc5d49541221d48d62c67d7a48142d19)
* [OCPBUGS-74701](https://issues.redhat.com/browse/OCPBUGS-74701): Fix update of stable-generation annotation [#330](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/330)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/d3668c9a9510f189604343e817cc79ab23367f40...d6a19449cc5d49541221d48d62c67d7a48142d19)
### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/a35d685a88aca94ed1d805c1079ebf14dfb81c9d)
* [OCPBUGS-74706](https://issues.redhat.com/browse/OCPBUGS-74706): fix concurrent map writes [#207](https://github.com/openshift/vsphere-problem-detector/pull/207)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/842aed3df97005839ef5deaf560abbe6486b9daf...a35d685a88aca94ed1d805c1079ebf14dfb81c9d)