# 5.0.0-ec.3

Created: 2026-06-12 13:09:14 +0000 UTC

Image Digest: `sha256:70e24e167220e830f6830cf7e1272098ad2b4f8cce6f1508dc9ca2a9b74a1577`

Promoted from quay.io/openshift-release-dev/ocp-release-nightly@sha256:1e5edb740f26273eca7abb77991a698fe53276dc8b6ce27a6b233af9e7e67414


## Changes from 5.0.0-ec.2

### Components

* Kubectl 1.35.2
* Kubernetes 1.35.3
* Kubernetes Tests 1.35.1
* Red Hat Enterprise Linux CoreOS 10.2 upgraded from 10.2.20260513-0 to 10.2.20260521-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | OKD<br/>Hypershift | OKD<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---:  |
| RouteExternalCertificate <br/> (0 tests)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| MutableTopology <br/> (0 tests)|  |  |  | Enabled<br/>(New)|  |  |  |   |
| NetworkObservabilityInstall <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)|  |  | Enabled<br/>(New)| Enabled<br/>(New) |
| TLSGroupPreferences <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)|  |  | Enabled<br/>(New)| Enabled<br/>(New) |


### Rebuilt images without code change

* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [77b3287f](https://github.com/openshift/cluster-api-provider-aws/commit/77b3287fd6d469dc4fe8f57ad6db25fa30a4ad45) `sha256:fc5344bcb434f4eb6ce5d6b8514ee4a37252a57c435e1a26ab658ed034b1c282`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [0dc99489](https://github.com/openshift/aws-ebs-csi-driver/commit/0dc99489474b344fd8363d4ff1e2d91b4da1a312) `sha256:06cd9ee2d1ae644500fa918a75a60d8ccc6bc30ae80ec80ea7bd62e76bab75dc`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [f0be9c72](https://github.com/openshift/aws-karpenter-provider-aws/commit/f0be9c72e5bf25caeb2ca45c14e67e4d397a52cb) `sha256:58b4c42c41390a33342b14d4f4442fc11448f55853775c7c979f88ffe5e90980`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [6ca6eea2](https://github.com/openshift/aws-encryption-provider/commit/6ca6eea2f3a9d0b090ff63ba5b8e342d5686c9a8) `sha256:6d59063d39227818b7faf7ac5c5c43555561c1230162012e97b303296a6c43ba`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [2e4196b6](https://github.com/openshift/machine-api-provider-aws/commit/2e4196b65473ae99bc9bbedc0bc7168ed3da3914) `sha256:49cbf3650ccc3defe00fff8d4c529c4ce74ebdc75f54a2cda82fe7a7c594680b`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [82088287](https://github.com/openshift/aws-pod-identity-webhook/commit/8208828799b6c4f91fd9b80128668f7765599e84) `sha256:56588b0c6160c0ab184236ecd8f52df08540e204ebe2c0d68f821abc7482b9cd`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [f10dd9c7](https://github.com/openshift/cloud-provider-azure/commit/f10dd9c791c0204da9a4e7620f7998e1c20de449) `sha256:2f5b3ba2e35268efc3d2a484ca5845b519852d70ff09347de929207aa4e28d30`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [f10dd9c7](https://github.com/openshift/cloud-provider-azure/commit/f10dd9c791c0204da9a4e7620f7998e1c20de449) `sha256:4d2572344e69ca3a0c03a7964b4f664ec83b1ded794d7a9ee47752b47fc90381`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [28bd11f0](https://github.com/openshift/cluster-api-provider-azure/commit/28bd11f05b5bb1164b3a6aec3327b666e73887a9) `sha256:223b118f13e1aedd1cd7b2d162bc5c9ad1cfd4f4a33c8117b986c77f2d772e8d`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [72a8648a](https://github.com/openshift/azure-disk-csi-driver/commit/72a8648ad5afe04b815361335bb4873d2ce40d99) `sha256:7f104b3b937f34e3d43d2aeb13a3881a9af71c0434ef366ed58e1604b01c8cfe`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [b66940c2](https://github.com/openshift/azure-file-csi-driver/commit/b66940c2459bdd503270d758e92057c89b798c6d) `sha256:c0bc3d2892e8385b5f2c63e6292324004191a7ff579bf8bb11a78cb603425e4d`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [0827c1fb](https://github.com/openshift/azure-service-operator/commit/0827c1fb110ea136fc7abb7b3ac8be062335d00d) `sha256:ddbea1c6fc0637881e7696dd12a6ea4f725926c511e2e5b5380aaa681f272f9d`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [7b44f756](https://github.com/openshift/azure-workload-identity/commit/7b44f75681bf053805a9cff468149b0fe7cf1e33) `sha256:3e9ef8fbf6b2a9477397c46ebc4aa39517e8c967812fe7a93c03ef61e8e6e2b8`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [7a005472](https://github.com/openshift/baremetal-operator/commit/7a005472c3461a960aa983a325eddc504f836365) `sha256:1604ec4551c63bc4ef32467efce0eb6d213f3dfd532b39d5e1e25eb3ec11d9a3`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [cf62f8c7](https://github.com/openshift/baremetal-runtimecfg/commit/cf62f8c7ac7494096e99997a53ceb48e997c1273) `sha256:4c4e173bce9c0ba41780bc02d9dc24e5ca8fbb085590296df77958c16ff03829`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [2d69ad95](https://github.com/openshift/cloud-network-config-controller/commit/2d69ad953cfaa419e9b6221da9edb152ded91e0b) `sha256:8724e42c483540e03025fedf2a7dd0ee53152fc3070084a0a6f5c7e6a10dcab7`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [02af1a9f](https://github.com/openshift/kubernetes-autoscaler/commit/02af1a9fd6bcb87745979980fbbf9a2b0671dddb) `sha256:379bbd787253aafe5723b7eef6266ac8fb3fb5ba1a0f532a0a569fb87cf0e3f6`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [85f92f79](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/85f92f79174d6df783f631eb3187f0e11e89cc96) `sha256:823385deb6670e801f093a5f68b6640bf721ea7dda3bd0c8eab89b5460ef4e6d`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [108f37f0](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/108f37f0e378accc322cbeb68136ec500ec35b94) `sha256:427c1f476245c20850d563260b2fbf1da4b4d32e83dd8ea9f366a7aead116177`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [42647cee](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/42647ceeb54e36b5f7c827302f443c10788407ec) `sha256:63aacfea359a7f71240a9de2845f091d5e3b2aa562c4dca0357f962f321fa1c7`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [bb429f5b](https://github.com/openshift/cluster-policy-controller/commit/bb429f5b2a7d77791110b06d8ec5c017183e3ab9) `sha256:5f0edb49532cc7d7f2c2e61baa9daa5a7fac9f3d7149fb6c694ef7f8288b962b`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [0bfb6b3c](https://github.com/openshift/cluster-samples-operator/commit/0bfb6b3c2f558c9098c438082bffb44eb8f07099) `sha256:ccd40d5360c8d96041f82e57e3e81751ff6e2c647c979aea5bf17f675413639e`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [8dfdf2ef](https://github.com/openshift/cluster-storage-operator/commit/8dfdf2ef3310358f3559a5481df43b98b2294791) `sha256:d4ca0dcacc1bf02f16bf64c2569cef948a334b8d2da0271e8a7013e33333c2eb`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [3b5c59cc](https://github.com/openshift/cluster-update-keys/commit/3b5c59cc6461663751bc510b4f9f1954ed8c9b50) `sha256:1b64f2f107e401294cd25d682165dc5bf3c9dc4b89e9db114cb239ac6ac78358`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [94e41c4c](https://github.com/openshift/configmap-reload/commit/94e41c4c6a5832dfd19750173d6544784ba235ec) `sha256:d37517e7c1e920347a558d1ccff2a8341d5a131adf1f66eabdf4b570285535c3`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [98b1f4ac](https://github.com/openshift/csi-external-attacher/commit/98b1f4acf9c004687ef55e9f187703768933bb56) `sha256:abd3e7f45810e1d3642bf53753cd116c2edded6b1c23e82c800fb3fb34a77cb6`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [2ccbf8c3](https://github.com/openshift/csi-external-provisioner/commit/2ccbf8c35aa2e5b851116706c018ff44f0bb7d08) `sha256:2cd3a63fa0fd8b5cb9abe497b4774eff40262c1641bb3834fa06415051811592`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [4e74a4aa](https://github.com/openshift/csi-external-resizer/commit/4e74a4aa52a2046d6b97a47dff7a60ddb73d0bbd) `sha256:5536c64eb18578dba47abfb55a0fa9f1363306755a9091c17d9d8df74bf9fd00`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [76523185](https://github.com/openshift/csi-external-snapshot-metadata/commit/7652318579a38838931a5be492cee3573c7c8ecf) `sha256:a52664706bfdd605848e770bd4e661792ced1a19ed166c69ce5c2574aab94214`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [4d5e959a](https://github.com/openshift/csi-livenessprobe/commit/4d5e959a182b4db70dc52302bd89eebfec40d5a5) `sha256:d87c38febae2988e4463f13d8092ee5425503d1b2c0b0ef79c29b193a51ddfdd`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [cf174b30](https://github.com/openshift/csi-node-driver-registrar/commit/cf174b30fad107d354afb0f0b09030a7c97fd296) `sha256:f2550c1d966dbdf4fefda06472a8b701327d089a9e1b38c2d1536fc0c204e9d1`
* [docker-registry](https://github.com/openshift/image-registry) git [57039cd2](https://github.com/openshift/image-registry/commit/57039cd2d9c87547cdf9a8d1dc7cb94f1ca089f7) `sha256:fa293ab55079420f609fb90f0401600aa6bec06bbe4384113d6b86cb204ec0d9`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [d37f51e0](https://github.com/openshift/egress-router-cni/commit/d37f51e057620bdee564f68dcfde955acf033d3e) `sha256:7c5a60ec69489d5df56bb1f6b6f55136a7f4d9740aa27b2716cc05c08185f8de`
* [etcd](https://github.com/openshift/etcd) git [c543fe15](https://github.com/openshift/etcd/commit/c543fe15324510d13e896c31232ecd5d100d9de5) `sha256:c6badbb5d8bd584df16effede0495143d7479dd11b6c831238205d6d09bcdbb7`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [808c2a2d](https://github.com/openshift/cloud-provider-gcp/commit/808c2a2d59dc0584d31484fe49085ba1de7bed74) `sha256:654ebae4e9fc103631d9fbe15cea47b46402eb347aa4dd96b793c375e0c7e5ab`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [065e2b60](https://github.com/openshift/machine-api-provider-gcp/commit/065e2b608a027ba47fce02aaabb986e6c650e6d6) `sha256:1ac7dd23ec40d5a87f7847fe27d8c39502b45c666d6ca7d722fd5837e6fd4795`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [c58c624f](https://github.com/openshift/gcp-pd-csi-driver/commit/c58c624fef4cbac80e0efa1d40e8c359d257a1cd) `sha256:23ccbd7a9fe200412cc532579821b9ae63d1442f718ff8dd23e0ac2ffc17221c`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [d7675f31](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/d7675f312ffdc8501032ff8217776cd7172b6bb0) `sha256:4df59739a8626049ff653fbac0ac6ca967b7df54abefb6159754927e65215d30`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [e76df035](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/e76df035c5b5e5a9ed06b7ff3dac3dba416b3af2) `sha256:24077614b27c70d2886cce8d77cd0aa136c8df9771cb7da6388b17f5079a96e9`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [a26ad7ec](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/a26ad7ece37d9ae974d4384d6a4676ccb7666cd9) `sha256:db95ef841ea7d02ec79cae479e06ecd6b46d2bd6bb9384be812b292dbe435a0b`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [1f739771](https://github.com/openshift/machine-api-provider-ibmcloud/commit/1f7397711bf06c87bf497e300870871dc345b827) `sha256:29d1816dc00a69d1d6a95b782ae133cfdaa9125be43646ce2e22a1ca76f8630c`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [70256457](https://github.com/openshift/insights-runtime-extractor/commit/70256457b507ec09737800ee7ea022143ed6c3c2) `sha256:4c9a5dc56666fe30213fdaee645dec23338b4787d5fdff75f51d4c9042bed71f`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [70256457](https://github.com/openshift/insights-runtime-extractor/commit/70256457b507ec09737800ee7ea022143ed6c3c2) `sha256:8da4aa150cf106fcaf21a6e09891dc4fb33fc980bb2e42e33f234d6a3edd6702`
* [ironic](https://github.com/openshift/ironic-image) git [323974b0](https://github.com/openshift/ironic-image/commit/323974b0aadc149d0dc29ca352b4be6c53b395d2) `sha256:1a09122e099dc53b82841c14053f8e69dbde1936ddd9400d0fc43cbb077abf41`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [9953d2b7](https://github.com/openshift/ironic-rhcos-downloader/commit/9953d2b77da077c28f9486a5d965a43149ce30c1) `sha256:e7c06b01dc05304251265c36690d84e31dc4f6a80c9afdef20db394fd2e19233`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [a379d09f](https://github.com/openshift/ironic-static-ip-manager/commit/a379d09f228d93f2beab1c73d67764c64b21e3cb) `sha256:f416bf07110664650eab6d3d0275b292eac9b7c2fe872b8592cae0845dcc193d`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [38c16c46](https://github.com/openshift/kubernetes-metrics-server/commit/38c16c4698d131ab0e2da0d4b4b76d5322a89bab) `sha256:dc74dec32e4d2bf09df4fd57ee4b5b0ba54b6adc378200c0432501bea60c6e73`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [d12e2746](https://github.com/openshift/kube-rbac-proxy/commit/d12e274605248f6c59373240a7eae7a7a357dcb3) `sha256:674dbbc39fcb05fa68157fcaf6ea98790b55477ec5ba5d31c14be0d0345175aa`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [72835e43](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/72835e43c7754356645e41031f3a99926b4d42e6) `sha256:c830cc0ff3dea4099dd2c796c5d619fd9219625483cfb894ebc151ee9388068b`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [76dd5a6f](https://github.com/openshift/cloud-provider-kubevirt/commit/76dd5a6fa9e86573bf3dfb79be17edf832e3bae1) `sha256:64802e2df016b64ed4a5fe5a1e6fe37b358a45a3a81e2e556b2d8712fb9a8224`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [771b562d](https://github.com/openshift/kubevirt-csi-driver/commit/771b562d4875296007850a4d3709a7ae1c6ed3e2) `sha256:d52a666ad2dc800560f02c3a22d6ac29e20e8aba3e98184fc22880f766bbaa51`
* [machine-api-operator](https://github.com/openshift/machine-api-operator) git [d7772c62](https://github.com/openshift/machine-api-operator/commit/d7772c62914781cd312b5e6db24532d694a8a140) `sha256:8db6ce24bc146368114c32ad20c048fc0ed400c357e1c78edc2cd7a70236864a`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [12d99f3f](https://github.com/openshift/multus-admission-controller/commit/12d99f3f29fe38f900d0c6400889e3d58c588f45) `sha256:ff7c85ebe941c02476393ef3d44b1709ae9d7079e23cb01b96cdb17d63339e9d`
* [multus-cni](https://github.com/openshift/multus-cni) git [b4ec7d82](https://github.com/openshift/multus-cni/commit/b4ec7d8239ce4bd3ed949bce9816a013377b44c7) `sha256:aa3da2f4891c9fa2380f63138b2928b90cbacaf9cc6717b5e0f11770b6b93e94`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [b4ec7d82](https://github.com/openshift/multus-cni/commit/b4ec7d8239ce4bd3ed949bce9816a013377b44c7) `sha256:5288c4e5d453855d4612c984492a993b9dac6a0075c9b95532d482bcb6488e5e`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [08af4127](https://github.com/openshift/route-override-cni/commit/08af4127c77976510cad1c096d9aca977d8ae5af) `sha256:64bc5a3cbb44a9715a04bb2aa5ac216a587273d632deaf02967ef6ddcd606ef5`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [d691040e](https://github.com/openshift/whereabouts-cni/commit/d691040e509bb20c26b5e8366c0d6f3bb45a5e02) `sha256:397ddb0a0e66093cf674ffba30a5a60bdf89abfdff8826d9a65da55472cd1f3c`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [5b233ea1](https://github.com/openshift/network-metrics-daemon/commit/5b233ea1d80733c1b00c6bad65dec0620dbf783a) `sha256:6f5a9ee6ab4f53bcc1687f786a4e2eabc224fa91675ccb0362371ecdbd1cd76a`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [61ec6046](https://github.com/openshift/cloud-provider-nutanix/commit/61ec60465b92969966bc4b19637cdda75fb3105a) `sha256:b3efb718f42e4c7d81cbc546698c878f95b11e11c5cf5a54b3f3ae94aeade84e`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [246b53bf](https://github.com/openshift/machine-api-provider-nutanix/commit/246b53bfc7bb59f3cf1e708c7858f12934a5ddbd) `sha256:9466c6d14b45dc75377512176291ef2e641e31fe85159eabcc040df37b7572b2`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [e71e0996](https://github.com/openshift/openshift-state-metrics/commit/e71e09969f11a47c87b87c43b762ad1d01f6b04f) `sha256:0ac9c23e5b58ab20e2327d0758ef182c02af2a270fd9cc9a4f2e09bfa9e534f6`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [4bc7bc64](https://github.com/openshift/cluster-api-provider-openstack/commit/4bc7bc64a57f67992ad074c55d4e8e57fe5ec2ea) `sha256:208d487a93646b435218f97b8670c638172729d69802f3179c3d06e4fad6d2b9`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [8a8c354b](https://github.com/openshift/machine-api-provider-openstack/commit/8a8c354b99ce83e3c05a91358aadec09944c2fce) `sha256:c985bcebcb7688b2e18b1a385ecff4b89fd625835d509895dd14dad421b3719f`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [b5bc8bbd](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/b5bc8bbd638c08e4df6ff4e382b4170b202733be) `sha256:b7a805bb8b6e298a7272b48d40fd4db903606c19254b51ef3bf2a7dc9d535e82`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [a56f9e95](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/a56f9e95588f656435e2cc3b256d9782213a7813) `sha256:62ec016a9b51e0e277ee2c052f5bc9f8dac9e7f16688085c53fee5edf20e1fcb`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [855eaaae](https://github.com/openshift/cloud-provider-powervs/commit/855eaaae59c78a00638d8426b4b1763e881d9e6f) `sha256:e27634679ff4823d30c6cef60c0b2bf0857cd747ee20bfce98d559201ebc4138`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [e88cf81d](https://github.com/openshift/machine-api-provider-powervs/commit/e88cf81dd9ad174f395b86f9cdc40fa30cb06bf4) `sha256:e8a3de57051006ae55b3c2fd7d3b864f70e53700848e6969e52fceb92fc519bd`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [ce91b7a5](https://github.com/openshift/prom-label-proxy/commit/ce91b7a51d1aee390a70e3c418e0f5539ad117c5) `sha256:47511243b73367c414f76cd42186bb3b7a8dccadcde72a39f8ab6b5ebe13e23c`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [4b911714](https://github.com/openshift/prometheus-alertmanager/commit/4b911714a57e8a6959b95efaff939af29a2b249c) `sha256:e76b28937c96aab40fe598f8dde59dbb7b7a582a7a84ad051e1f0e42917753d2`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [7546381d](https://github.com/openshift/prometheus-operator/commit/7546381db866dd10a33395d2c28ceeca3c1c1591) `sha256:bdd0e8b2324e77af0d438b323abeaa207a9f0592d7c3f770c50535de343b1c90`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [7546381d](https://github.com/openshift/prometheus-operator/commit/7546381db866dd10a33395d2c28ceeca3c1c1591) `sha256:69cdd10e8be7ec1125e780a0251fc5ae12e7045ca8786c6f692889b1ebc5b690`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [7546381d](https://github.com/openshift/prometheus-operator/commit/7546381db866dd10a33395d2c28ceeca3c1c1591) `sha256:399970425090477e791f5a9c5560dec6a7d911a5f3bdc0c7ba4b11173aedac36`
* [rhel-coreos](https://github.com/openshift/os) git [f41264dc](https://github.com/openshift/os/commit/f41264dc5f1c1f0a389787ecc5aaec573d485b8e) `sha256:deb8bb4292cabaf6983e8cc18ff322400511b4f1e41adf8f541201ee321b8238`
* [rhel-coreos-10](https://github.com/openshift/os) git [f41264dc](https://github.com/openshift/os/commit/f41264dc5f1c1f0a389787ecc5aaec573d485b8e) `sha256:20611d7844bf665c0a6cd0932979df5ed4248589b09b10d0b88ccfce12a683b0`
* [rhel-coreos-10-extensions](https://github.com/openshift/os) git [f41264dc](https://github.com/openshift/os/commit/f41264dc5f1c1f0a389787ecc5aaec573d485b8e) `sha256:9ff175735564dba8948f3a3ba844141e5583cfd0743724bb1cc68d82b8bbd4a2`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [f41264dc](https://github.com/openshift/os/commit/f41264dc5f1c1f0a389787ecc5aaec573d485b8e) `sha256:9e4046162b96d5223cc2318c57d17d557ed6bb7d3c0c80cba10238dda26f326a`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [e7ccfa30](https://github.com/openshift/service-ca-operator/commit/e7ccfa308e69ce4ad1f2afcd1d7c8ff25144374b) `sha256:f34d9816b702b4116b26b9d20db3a30711e73d1ab178ef1e0707f1c4def6d088`
* [telemeter](https://github.com/openshift/telemeter) git [33073dc2](https://github.com/openshift/telemeter/commit/33073dc20ca6c534c134f6a0f58e6bf8e162d4ac) `sha256:7fa5014e43a5c207dc9389d60710f38b8db56e205a2fbb8481b99af531d0db5b`
* [thanos](https://github.com/openshift/thanos) git [5d9d0f38](https://github.com/openshift/thanos/commit/5d9d0f387e5cc651470f27352b28674103bfdd77) `sha256:a23f12173973c7efd9ec0d2ac57d3e1fa8f003e562b072ac0fa9442bc4f6bd05`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [8e176cec](https://github.com/openshift/volume-data-source-validator/commit/8e176cec394709cac728423cbbb6c3c914be8485) `sha256:954800e5bb6863e7a3b178870c204f1dcb3feb6418cb518bf7e1869876e5d61c`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [fb90e2d7](https://github.com/openshift/cloud-provider-vsphere/commit/fb90e2d792e464d9c5ccf782a8101d1f40cf29c0) `sha256:5cd2081ede19690563562c3e7b381b0e8d85947edb56394d6533c565bb46a48a`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [e91f95e2](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/e91f95e27cd47b41ba31399781bba361d6090634) `sha256:dade74aef07b8144e4aa643e9785d754ab859d9125c6134cccfa1cd52d405ca7`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/6676a6d8755afa66a2fb0c8b23bc79417196e469)

* NO-ISSUE: [master] Bump OCP versions: 4.18, 4.22, 4.20, 4.13 [#10436](https://github.com/openshift/assisted-service/pull/10436)
* [MGMT-22787](https://issues.redhat.com/browse/MGMT-22787): Add enhancement doc to limit inventory size [#10410](https://github.com/openshift/assisted-service/pull/10410)
* NO-ISSUE: [master] Bump OCP versions: 4.22, 4.21 [#10427](https://github.com/openshift/assisted-service/pull/10427)
* [MGMT-24397](https://issues.redhat.com/browse/MGMT-24397): Add OCP test version builder & PoC [#10321](https://github.com/openshift/assisted-service/pull/10321)
* [MGMT-23738](https://issues.redhat.com/browse/MGMT-23738): Flaky test: "Move Agent to another infraenv" fails with Kubernetes conflict error [#10319](https://github.com/openshift/assisted-service/pull/10319)
* NO-ISSUE: [master] Bump OCP versions: 4.16 [#10423](https://github.com/openshift/assisted-service/pull/10423)
* [MGMT-19732](https://issues.redhat.com/browse/MGMT-19732): Add ntp_sources field for exclusive NTP configuration [#10408](https://github.com/openshift/assisted-service/pull/10408)
* [MGMT-22370](https://issues.redhat.com/browse/MGMT-22370): Add exponential backoff to agent image pull [#10337](https://github.com/openshift/assisted-service/pull/10337)
* [MGMT-24243](https://issues.redhat.com/browse/MGMT-24243): Add option for a delay when applying static network config on minimal ISO [#10373](https://github.com/openshift/assisted-service/pull/10373)
* NO-ISSUE: [master] Bump OCP versions: 4.19, 4.22 [#10402](https://github.com/openshift/assisted-service/pull/10402)
* NO-ISSUE: add Assisted-by commit trailer convention to CLAUDE.md [#10400](https://github.com/openshift/assisted-service/pull/10400)
* NO-ISSUE: [master] Bump OCP versions: 4.21, 5.0 [#10392](https://github.com/openshift/assisted-service/pull/10392)
* [MGMT-21836](https://issues.redhat.com/browse/MGMT-21836): Allow external platform with non-standard HA control plane [#10286](https://github.com/openshift/assisted-service/pull/10286)
* [MGMT-23230](https://issues.redhat.com/browse/MGMT-23230): Add MachineConfig for AMD GPU kernel module blacklist [#9920](https://github.com/openshift/assisted-service/pull/9920)
* [MGMT-24457](https://issues.redhat.com/browse/MGMT-24457): Add MI350P PCI device IDs to NFD NodeFeatureRule [#10388](https://github.com/openshift/assisted-service/pull/10388)
* [MGMT-24393](https://issues.redhat.com/browse/MGMT-24393): Assisted Service IPv6 checks fails comparative [#10340](https://github.com/openshift/assisted-service/pull/10340)
* NO-ISSUE: [master] Bump OCP versions: 4.17, 4.20, 4.18 [#10383](https://github.com/openshift/assisted-service/pull/10383)
* NO-ISSUE: [master] Bump OCP versions: 4.21, 4.22 [#10348](https://github.com/openshift/assisted-service/pull/10348)
* NO-ISSUE: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26 [#10354](https://github.com/openshift/assisted-service/pull/10354)
* NO-ISSUE: Fix resource leak and inconsistency in manifest download [#10322](https://github.com/openshift/assisted-service/pull/10322)
* [MGMT-21834](https://issues.redhat.com/browse/MGMT-21834): deprecate supported-platforms endpoint [#10122](https://github.com/openshift/assisted-service/pull/10122)
* NO-ISSUE: [master] Bump OCP versions: 4.14, 4.19, 4.18, 4.21, 4.20, 4.16 [#10342](https://github.com/openshift/assisted-service/pull/10342)
* NO-ISSUE: fix typo: 'occured' -&gt; 'occurred' in main.go error wraps [#10316](https://github.com/openshift/assisted-service/pull/10316)
* [Full changelog](https://github.com/openshift/assisted-service/compare/963e8a7fb9f6941969fab42a72e7197b3b636a3c...6676a6d8755afa66a2fb0c8b23bc79417196e469)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/7c400e88587c5c52a14500ac4c228fa3f99a9d60)

* NO-ISSUE: Refresh RPM lockfiles [#2160](https://github.com/openshift/assisted-installer/pull/2160)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/28bc267a6a5fce13f43126fde48df3427a838e11...7c400e88587c5c52a14500ac4c228fa3f99a9d60)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/b5ecd18f8be9eac3fc6052b24dce306333e6cb8a)

* NO-ISSUE: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26 [#1461](https://github.com/openshift/assisted-installer-agent/pull/1461)
* NO-ISSUE: Upgrade linter [#1453](https://github.com/openshift/assisted-installer-agent/pull/1453)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/c64bacd536b2d79c8e54bbdf184ec8385f408f29...b5ecd18f8be9eac3fc6052b24dce306333e6cb8a)


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/b74ae02bbad3d2f9c71cb49946c0978cebbf0279)

* [OCPBUGS-72598](https://issues.redhat.com/browse/OCPBUGS-72598): Custom manifests are broken in local assisted UI (#3766) [#3766](https://github.com/openshift-assisted/assisted-installer-ui/pull/3766)
* [OCPBUGS-85310](https://issues.redhat.com/browse/OCPBUGS-85310): Static ip prefill for ove below the sea (#3733) [#3733](https://github.com/openshift-assisted/assisted-installer-ui/pull/3733)
* [MGMT-24099](https://issues.redhat.com/browse/MGMT-24099): UI redirects to Custom Manifest page before host discovery when cluster is OCI platform (#3739) [#3739](https://github.com/openshift-assisted/assisted-installer-ui/pull/3739)
* chore(deps): update konflux references (#3762) [#3762](https://github.com/openshift-assisted/assisted-installer-ui/pull/3762)
* [MGMT-24304](https://issues.redhat.com/browse/MGMT-24304): On disconnected environment no Openshift version is set by default on standalone cluster details page and no version is shown in the dropdown till Show all available are shown (#3723) [#3723](https://github.com/openshift-assisted/assisted-installer-ui/pull/3723)
* Bump tmp from 0.2.5 to 0.2.6 (#3760) [#3760](https://github.com/openshift-assisted/assisted-installer-ui/pull/3760)
* chore(deps): update testing packages (#3742) [#3742](https://github.com/openshift-assisted/assisted-installer-ui/pull/3742)
* Revert "OCPBUGS-84038 | [Below the sea UI] Lack of visual feedback (spinner) …" (#3757) [#3757](https://github.com/openshift-assisted/assisted-installer-ui/pull/3757)
* Fix disk encryption parsing for cluster details (#3737) [#3737](https://github.com/openshift-assisted/assisted-installer-ui/pull/3737)
* Reset search field on 'Clear all filters' (#3736) [#3736](https://github.com/openshift-assisted/assisted-installer-ui/pull/3736)
* [MGMT-24444](https://issues.redhat.com/browse/MGMT-24444): Apply sentence case to networking management type labels … (#3747) [#3747](https://github.com/openshift-assisted/assisted-installer-ui/pull/3747)
* Operators section should not be displayed on review and installation progress pages when no operators are selected (#3745) [#3745](https://github.com/openshift-assisted/assisted-installer-ui/pull/3745)
* Remove Arbiter button (#3744) [#3744](https://github.com/openshift-assisted/assisted-installer-ui/pull/3744)
* chore(deps): update typescript (#3743) [#3743](https://github.com/openshift-assisted/assisted-installer-ui/pull/3743)
* chore(deps): update konflux references (#3741) [#3741](https://github.com/openshift-assisted/assisted-installer-ui/pull/3741)
* Update Konflux Quay image address (#3740) [#3740](https://github.com/openshift-assisted/assisted-installer-ui/pull/3740)
* Bump ws from 8.18.3 to 8.20.1 (#3726) [#3726](https://github.com/openshift-assisted/assisted-installer-ui/pull/3726)
* fix monted pull secret parsing (#3692) [#3692](https://github.com/openshift-assisted/assisted-installer-ui/pull/3692)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/e775971a11c9c678d3877684b856ef77680cbc12...b74ae02bbad3d2f9c71cb49946c0978cebbf0279)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/546c1a9f71cff62e7eb85e7e70cd0c66ecd66c13)

* [OCPBUGS-86036](https://issues.redhat.com/browse/OCPBUGS-86036): Filter out link-local IPv6 addresses [#305](https://github.com/openshift/agent-installer-utils/pull/305)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/2ef405f56aec6459310d63b3fa8b035d6fd040f6...546c1a9f71cff62e7eb85e7e70cd0c66ecd66c13)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/c2014a5055dd4a3d32acdac070ee4e6b5207686f)

* [CNTRLPLANE-3380](https://issues.redhat.com/browse/CNTRLPLANE-3380): Merge https://github.com/kubernetes-sigs/apiserver-network-proxy:master (588e629) into main [#109](https://github.com/openshift/apiserver-network-proxy/pull/109)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/5c263ca1bc10b7b8ace1a23b1220dc629a625b23...c2014a5055dd4a3d32acdac070ee4e6b5207686f)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/ce31a2b11578c75a7537ce3c3ef146d7a864b0a0)

* [OCPBUGS-85643](https://issues.redhat.com/browse/OCPBUGS-85643): UPSTREAM: &lt;drop&gt;: bump google.golang.org/grpc to v1.79.3 [#154](https://github.com/openshift/cloud-provider-aws/pull/154)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/43906c280e2abaf3f182ff178ef73d554cbd98cf...ce31a2b11578c75a7537ce3c3ef146d7a864b0a0)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/5021458d94df6f749bfb61b5eab719129a27c836)

* [OCPBUGS-42363](https://issues.redhat.com/browse/OCPBUGS-42363): Re-enable Azure Disk load test [#558](https://github.com/openshift/csi-operator/pull/558)
* [OCPBUGS-86023](https://issues.redhat.com/browse/OCPBUGS-86023): Add memory limits to SMB CSI sidecar containers [#557](https://github.com/openshift/csi-operator/pull/557)
* [Full changelog](https://github.com/openshift/csi-operator/compare/5027bfc7aeb18c7b9c61617172fc5136fe274c14...5021458d94df6f749bfb61b5eab719129a27c836)


### [aws-node-termination-handler](https://github.com/openshift/aws-node-termination-handler/tree/e4ff2aaec292db42de9f3eef4908ba1c421a2a6c)

* [CNTRLPLANE-3380](https://issues.redhat.com/browse/CNTRLPLANE-3380): Update OWNERS with HyperShift core team [#7](https://github.com/openshift/aws-node-termination-handler/pull/7)
* [Full changelog](https://github.com/openshift/aws-node-termination-handler/compare/341ed3a086925b17671c5349343fedf988a1139e...e4ff2aaec292db42de9f3eef4908ba1c421a2a6c)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/5367d3988bf7c629254ef77dbbbea058f48fdc47)

* [CNTRLPLANE-3380](https://issues.redhat.com/browse/CNTRLPLANE-3380): Merge https://github.com/Azure/kubernetes-kms:master (126fb87) into main [#42](https://github.com/openshift/azure-kubernetes-kms/pull/42)
* [CNTRLPLANE-3380](https://issues.redhat.com/browse/CNTRLPLANE-3380): Add rebasebot-compatible commit prefixes [#41](https://github.com/openshift/azure-kubernetes-kms/pull/41)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/044aeaaf9e2390b7033d5738758a00dc02f6b9f8...5367d3988bf7c629254ef77dbbbea058f48fdc47)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/1a6c2d105dcab368367faeddd90a0f418dcdb93d)

* [PIXAA-7](https://issues.redhat.com/browse/PIXAA-7): Leverage SpotRebalanceRecommendation for instance termination when available [#196](https://github.com/openshift/machine-api-provider-azure/pull/196)
* [OCPBUGS-85416](https://issues.redhat.com/browse/OCPBUGS-85416): Don't permanently fail Machines after provisioning [#193](https://github.com/openshift/machine-api-provider-azure/pull/193)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/db9b10d2674def615be44d4bf385acb699c47ad2...1a6c2d105dcab368367faeddd90a0f418dcdb93d)


### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/986fd4de877f197710e1a3ac9ea2a9de3824928f)

* [OCPBUGS-86476](https://issues.redhat.com/browse/OCPBUGS-86476): Adopt existing Metal3 Remediation CRDs on upgrade [#82](https://github.com/openshift/cluster-api-provider-metal3/pull/82)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/bc0350fe3a236f498f9be26b1cd61ef555678098...986fd4de877f197710e1a3ac9ea2a9de3824928f)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/b052deaf4378b6efcde486796d88aa8c834059c8)

* fix: OCPBUGS-86012: reset associatedVCenter in failure domain validation loop [#10559](https://github.com/openshift/installer/pull/10559)
* [OCPBUGS-87169](https://issues.redhat.com/browse/OCPBUGS-87169): CVE-2026-34986: Bump go-jose/v4 to 4.1.4 [#10596](https://github.com/openshift/installer/pull/10596)
* [MCO-2296](https://issues.redhat.com/browse/MCO-2296): Remove OSImageStreams v1 replace [#10592](https://github.com/openshift/installer/pull/10592)
* [MCO-2296](https://issues.redhat.com/browse/MCO-2296): OSImageStreams v1 promotion [#10566](https://github.com/openshift/installer/pull/10566)
* no-jira: remove reference to altinfra [#10585](https://github.com/openshift/installer/pull/10585)
* no-jira: improve AI agent readiness with guidelines and AGENTS.md [#10474](https://github.com/openshift/installer/pull/10474)
* [OCPBUGS-85352](https://issues.redhat.com/browse/OCPBUGS-85352): aws: fix Route 53 resource leak during cluster destroy in China regions [#10544](https://github.com/openshift/installer/pull/10544)
* [MCO-2200](https://issues.redhat.com/browse/MCO-2200): Add day-0 dual streams support for ABI install flow [#10481](https://github.com/openshift/installer/pull/10481)
* no-jira: logging: log invoked openshift-install command [#10490](https://github.com/openshift/installer/pull/10490)
* NO-ISSUE: Use types.OSImageStreamValues for validation [#10576](https://github.com/openshift/installer/pull/10576)
* [CORS-4495](https://issues.redhat.com/browse/CORS-4495): Populate RHCOS10 Marketplace Stream [#10556](https://github.com/openshift/installer/pull/10556)
* [MCO-2181](https://issues.redhat.com/browse/MCO-2181): Set OSImageStream default in install-config [#10570](https://github.com/openshift/installer/pull/10570)
* [OCPBUGS-84656](https://issues.redhat.com/browse/OCPBUGS-84656): Update RHCOS-release-4.22 bootimage metadata to 10.2.20260423-0 / 9.8.20260428-0 [#10524](https://github.com/openshift/installer/pull/10524)
* no-jira: PowerVS: Remove unrequired logging [#10552](https://github.com/openshift/installer/pull/10552)
* [CORS-4005](https://issues.redhat.com/browse/CORS-4005): refactor worker manifest serialization [#10407](https://github.com/openshift/installer/pull/10407)
* [OCPEDGE-2115](https://issues.redhat.com/browse/OCPEDGE-2115): types: support MAC address as alternative identifier for fencing credential [#10513](https://github.com/openshift/installer/pull/10513)
* [METAL-1731](https://issues.redhat.com/browse/METAL-1731): baremetal: Add coreos.openshift.io/stream label to BMH and hostSelector [#10502](https://github.com/openshift/installer/pull/10502)
* [OCPBUGS-78126](https://issues.redhat.com/browse/OCPBUGS-78126): baremetal: fix gather bootstrap failing with provisioningNetwork Disabled [#10395](https://github.com/openshift/installer/pull/10395)
* [Full changelog](https://github.com/openshift/installer/compare/0d798da669ce651af4ae3b8770940c56b4bedc0d...b052deaf4378b6efcde486796d88aa8c834059c8)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/f2b0db1919fff1344bc68948894c6775c0bf24a3)

* [OCPBUGS-87380](https://issues.redhat.com/browse/OCPBUGS-87380): Updating baremetal-machine-controller-container image to be consistent with ART for 5.0 [#256](https://github.com/openshift/cluster-api-provider-baremetal/pull/256)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/8d863b9505a5cfc0b01e33f985a3edf9d3c69f4b...f2b0db1919fff1344bc68948894c6775c0bf24a3)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/d1f312bb855e741cadb8b3ac419d2cb3f3fd7ba5)

* [OCPBUGS-87198](https://issues.redhat.com/browse/OCPBUGS-87198): Fix windows builds of oc rpm [#2281](https://github.com/openshift/oc/pull/2281)
* NO-JIRA: Switch container dependencies to Podman monorepo [#2277](https://github.com/openshift/oc/pull/2277)
* [Full changelog](https://github.com/openshift/oc/compare/a052bd4018333201e48f7370b2263db2dc6a5c99...d1f312bb855e741cadb8b3ac419d2cb3f3fd7ba5)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/833d9a3e986b917d22e063444031b3a1bda3195f)

* [OCPBUGS-82165](https://issues.redhat.com/browse/OCPBUGS-82165): Add retry logic for concurrent IAM policy changes in GCP [#1014](https://github.com/openshift/cloud-credential-operator/pull/1014)
* [OCPBUGS-58181](https://issues.redhat.com/browse/OCPBUGS-58181): Fix nil pointer dereference in ensureRolesAssignedToManagedIdentity [#987](https://github.com/openshift/cloud-credential-operator/pull/987)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/5d4f9597196a985faaea1bd9bc92bfa79acc2f7d...833d9a3e986b917d22e063444031b3a1bda3195f)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/abbfbd5314f9803b638abe05946acad1e7eea6fa)

* [CNTRLPLANE-3226](https://issues.redhat.com/browse/CNTRLPLANE-3226): switch to real Vault KMS plugin in CI [#909](https://github.com/openshift/cluster-authentication-operator/pull/909)
* [CNTRLPLANE-3226](https://issues.redhat.com/browse/CNTRLPLANE-3226): bump library-go to get KMS plugin credentials [#903](https://github.com/openshift/cluster-authentication-operator/pull/903)
* NO-JIRA: Automatic agentic rebase: Update library-go to d8750ed [#908](https://github.com/openshift/cluster-authentication-operator/pull/908)
* NO-JIRA: Automatic agentic rebase: Update library-go to 0cf249e [#907](https://github.com/openshift/cluster-authentication-operator/pull/907)
* [CNTRLPLANE-3364](https://issues.redhat.com/browse/CNTRLPLANE-3364): remove the old go lib std tests [#906](https://github.com/openshift/cluster-authentication-operator/pull/906)
* NO-JIRA: bump latest library-go changes [#904](https://github.com/openshift/cluster-authentication-operator/pull/904)
* NO-JIRA: remove old mock plugin deployment [#902](https://github.com/openshift/cluster-authentication-operator/pull/902)
* [CNTRLPLANE-3236](https://issues.redhat.com/browse/CNTRLPLANE-3236): support deploying Vault mock KMS plugin [#899](https://github.com/openshift/cluster-authentication-operator/pull/899)
* [CNTRLPLANE-3431](https://issues.redhat.com/browse/CNTRLPLANE-3431): restart operator upon config change [#897](https://github.com/openshift/cluster-authentication-operator/pull/897)
* NO-JIRA: Bump auth with latest library-go changes [#900](https://github.com/openshift/cluster-authentication-operator/pull/900)
* [CNTRLPLANE-3210](https://issues.redhat.com/browse/CNTRLPLANE-3210): Refactor `externaloidc` controller to support different configuration generation logic [#893](https://github.com/openshift/cluster-authentication-operator/pull/893)
* [CNTRLPLANE-3364](https://issues.redhat.com/browse/CNTRLPLANE-3364): add the kms suite and migrate the kms tests of auth-o to ote [#895](https://github.com/openshift/cluster-authentication-operator/pull/895)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/35eb6f519025b05208b335d94d720e03fc3eed19...abbfbd5314f9803b638abe05946acad1e7eea6fa)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/825c44c051df38bbf98c9fcc885a0288204edfe1)

* [OCPBUGS-52155](https://issues.redhat.com/browse/OCPBUGS-52155): Add machinesets to cluster operator related objects [#369](https://github.com/openshift/cluster-autoscaler-operator/pull/369)
* [AUTOSCALE-660](https://issues.redhat.com/browse/AUTOSCALE-660): add enforce node group min size flag [#374](https://github.com/openshift/cluster-autoscaler-operator/pull/374)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/260ea1b5967f47768a0727e8c84d451dc9de5ced...825c44c051df38bbf98c9fcc885a0288204edfe1)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/ad7efaabc975e8318056ee74986dec3d135914ed)

* [OCPBUGS-84934](https://issues.redhat.com/browse/OCPBUGS-84934): Add watcher for both TLS Adherence policy and profile changes [#597](https://github.com/openshift/cluster-baremetal-operator/pull/597)
* [OCPBUGS-85824](https://issues.redhat.com/browse/OCPBUGS-85824): Fix empty IRONIC_BASE_URL [#603](https://github.com/openshift/cluster-baremetal-operator/pull/603)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/c81a51f40f7bd2045a187a3cc4978afc52a79408...ad7efaabc975e8318056ee74986dec3d135914ed)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/7b1593a47898b6a97dc457efaca464624e9f2afa)

* [OCPBUGS-73886](https://issues.redhat.com/browse/OCPBUGS-73886): Fix typo in logs [#125](https://github.com/openshift/cluster-bootstrap/pull/125)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/96db8575e287c71b5099ee52be1193c15bb91957...7b1593a47898b6a97dc457efaca464624e9f2afa)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/0a73a6858bf14e1b82d2c7477dbb392d882f6a21)

* [OCPBUGS-53005](https://issues.redhat.com/browse/OCPBUGS-53005): Remove references to master branch [#235](https://github.com/openshift/cluster-api/pull/235)
* [Full changelog](https://github.com/openshift/cluster-api/compare/1e1b540925a8f1c8aecbf7ac876d2465299b5a98...0a73a6858bf14e1b82d2c7477dbb392d882f6a21)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/05c113ea5edd0aaf43e34c4a534a673d457449c1)

* NO-JIRA: build: add podman support to container image targets [#580](https://github.com/openshift/cluster-capi-operator/pull/580)
* NO-JIRA: Fix flake in infracluster test [#578](https://github.com/openshift/cluster-capi-operator/pull/578)
* NO-JIRA: fix shell compatibility in Makefile [#572](https://github.com/openshift/cluster-capi-operator/pull/572)
* [OCPBUGS-85530](https://issues.redhat.com/browse/OCPBUGS-85530): Fix failure to start on arm64 [#571](https://github.com/openshift/cluster-capi-operator/pull/571)
* NO-JIRA: Remove stale TODO comment for HostPlacement conversion [#569](https://github.com/openshift/cluster-capi-operator/pull/569)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/c585235ee71f6f5ada2edebec2961c2093905659...05c113ea5edd0aaf43e34c4a534a673d457449c1)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/a9cbda8731035e6abf577e6840d3bd2f4c7a075c)

* [OCPBUGS-86303](https://issues.redhat.com/browse/OCPBUGS-86303): e2e/ote-ccm-aws: enhance tests to run hybrid in hypershift HC [#464](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/464)
* NO-JIRA: update owners for CCM-AWS OTE path for SPLAT teeam [#468](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/468)
* [OCPBUGS-42837](https://issues.redhat.com/browse/OCPBUGS-42837): Do not set Degraded=True on transient errors [#436](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/436)
* [OCPBUGS-86299](https://issues.redhat.com/browse/OCPBUGS-86299): e2e/ccm-aws-ote: support to dual-stack IPv6 primary [#466](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/466)
* [OCPBUGS-85414](https://issues.redhat.com/browse/OCPBUGS-85414): fix ote ccm aws e2e resiliency on HCP [#462](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/462)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/8b9dc8c3937a200042444a1acded57cf006504db...a9cbda8731035e6abf577e6840d3bd2f4c7a075c)


### [cluster-config-api](https://github.com/openshift/api/tree/1194f4c62539275cd6dec231cc2bf7e0a010bd94)

* [OCPEDGE-2410](https://issues.redhat.com/browse/OCPEDGE-2410): feat: add mutable topology featuregate [#2872](https://github.com/openshift/api/pull/2872)
* Add KubeletConfigAccepted const in 'machineconfiguration/v1/types.go' [#2853](https://github.com/openshift/api/pull/2853)
* [MON-4029](https://issues.redhat.com/browse/MON-4029): Add KubeStateMetricsConfig to ClusterMonitoring API [#2778](https://github.com/openshift/api/pull/2778)
* [MCO-2296](https://issues.redhat.com/browse/MCO-2296): Promote OSImageStreams to v1 [#2854](https://github.com/openshift/api/pull/2854)
* [MON-4565](https://issues.redhat.com/browse/MON-4565): Add enableUserAlertmanagerConfig to ClusterMonitoring API [#2855](https://github.com/openshift/api/pull/2855)
* Update getLatestReleases to ignore non OCP releases [#2868](https://github.com/openshift/api/pull/2868)
* [NE-2334](https://issues.redhat.com/browse/NE-2334): Implement enhancement in OpenShift API to support for TLS curves in TLSProfile [#2583](https://github.com/openshift/api/pull/2583)
* Revert "Merge pull request #2693 from jcmoraisjr/OCPBUGS-74511-remove… [#2862](https://github.com/openshift/api/pull/2862)
* [CNTRLPLANE-2521](https://issues.redhat.com/browse/CNTRLPLANE-2521): feat: configv1/authentication: add fields for sourcing claims from external sources [#2827](https://github.com/openshift/api/pull/2827)
* [MON-4578](https://issues.redhat.com/browse/MON-4578): Add new fields to ThanosQuerierConfig [#2835](https://github.com/openshift/api/pull/2835)
* [CNTRLPLANE-3361](https://issues.redhat.com/browse/CNTRLPLANE-3361): make transitMount required [#2847](https://github.com/openshift/api/pull/2847)
* [MON-4579](https://issues.redhat.com/browse/MON-4579): Remove NodeSelector and Tolerations from NodeExporterConfig [#2837](https://github.com/openshift/api/pull/2837)
* [CORENET-6714](https://issues.redhat.com/browse/CORENET-6714): Enable Network Observability on Day 0 [#2752](https://github.com/openshift/api/pull/2752)
* [Full changelog](https://github.com/openshift/api/compare/73d7ca93df6d0a1b02f5533ce20f68d27869a1fe...1194f4c62539275cd6dec231cc2bf7e0a010bd94)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/2697a43188018b6e76a5acbd672d59bc2f77b79e)

* [CNTRLPLANE-3423](https://issues.redhat.com/browse/CNTRLPLANE-3423): feat: have CVO inject the centralized TLS configuration into the operator's config [#491](https://github.com/openshift/cluster-config-operator/pull/491)
* [SPLAT-2747](https://issues.redhat.com/browse/SPLAT-2747): Updated kube cloud config controller to react to feature gate updates [#489](https://github.com/openshift/cluster-config-operator/pull/489)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/15a09d1fa8e370ef0b840ba9cc58647e4eea3a29...2697a43188018b6e76a5acbd672d59bc2f77b79e)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/65d60f9c12297a91ee89359e90f591fd44e661b0)

* [OCPBUGS-77532](https://issues.redhat.com/browse/OCPBUGS-77532): Fix premature node schedulability marking in taint checking [#470](https://github.com/openshift/cluster-dns-operator/pull/470)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/3d2141182243cde1ec6417bd005c76d29aa88a01...65d60f9c12297a91ee89359e90f591fd44e661b0)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/2abd78c6f6e8315e53b2f40f4f6eca9a889ec3b9)

* [OCPBUGS-77345](https://issues.redhat.com/browse/OCPBUGS-77345): validate snapshot before destructive operations in cluster-restore-tnf.sh [#1626](https://github.com/openshift/cluster-etcd-operator/pull/1626)
* [OCPEDGE-2116](https://issues.redhat.com/browse/OCPEDGE-2116): feat: support MAC-address based fencing credentials lookup [#1600](https://github.com/openshift/cluster-etcd-operator/pull/1600)
* [OCPBUGS-83332](https://issues.redhat.com/browse/OCPBUGS-83332): fix cluster-restore-tnf.sh for FQDN hostnames [#1622](https://github.com/openshift/cluster-etcd-operator/pull/1622)
* NO-JIRA: Fixed spelling in files and file names [#1624](https://github.com/openshift/cluster-etcd-operator/pull/1624)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/25efce1c7e783ac8cbcb3748b08bdcffb67f7263...2abd78c6f6e8315e53b2f40f4f6eca9a889ec3b9)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/aee833aab65ab5a5aa29a04ca9a55bfb0c3e4fe3)

* [OCPBUGS-73768](https://issues.redhat.com/browse/OCPBUGS-73768): bugfix: podtemplatespec: update topology spread constraints [#1347](https://github.com/openshift/cluster-image-registry-operator/pull/1347)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/d9cb7cc7f0863b12f0686f288b6317ac6a0178c2...aee833aab65ab5a5aa29a04ca9a55bfb0c3e4fe3)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/140e0bf13b3d01c369672c766c44b4be0b4ec78c)

* [OCPBUGS-36723](https://issues.redhat.com/browse/OCPBUGS-36723): Add missing include annotations to IBM Cloud and PowerVS ingress CredentialsRequests [#1457](https://github.com/openshift/cluster-ingress-operator/pull/1457)
* [NE-2723](https://issues.redhat.com/browse/NE-2723): Migrate to aws-sdk-go-v2 [#1445](https://github.com/openshift/cluster-ingress-operator/pull/1445)
* [OCPBUGS-85679](https://issues.redhat.com/browse/OCPBUGS-85679): Improve e2e tests reliability [#1434](https://github.com/openshift/cluster-ingress-operator/pull/1434)
* [OCPBUGS-85676](https://issues.redhat.com/browse/OCPBUGS-85676): Harden CRD permission RBAC in operator ClusterRole [#1454](https://github.com/openshift/cluster-ingress-operator/pull/1454)
* [OCPBUGS-74497](https://issues.redhat.com/browse/OCPBUGS-74497): Add UserAgent to Azure SDK client telemetry options [#1400](https://github.com/openshift/cluster-ingress-operator/pull/1400)
* [OCPBUGS-85690](https://issues.redhat.com/browse/OCPBUGS-85690): Add referencegrants and backendtlspolicies to Gateway API RBAC [#1453](https://github.com/openshift/cluster-ingress-operator/pull/1453)
* [OCPBUGS-84491](https://issues.redhat.com/browse/OCPBUGS-84491): Set terminationMessagePolicy on gateway proxy containers [#1428](https://github.com/openshift/cluster-ingress-operator/pull/1428)
* [OCPBUGS-83923](https://issues.redhat.com/browse/OCPBUGS-83923): Update grpc-go and x/net [#1447](https://github.com/openshift/cluster-ingress-operator/pull/1447)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/10bbe5fa42c1203acd516e8f090df4954121c224...140e0bf13b3d01c369672c766c44b4be0b4ec78c)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/24b60d04b3478e04a728fb0ae1385abc6a478d20)

* [CNTRLPLANE-3226](https://issues.redhat.com/browse/CNTRLPLANE-3226): switch to real Vault KMS plugin in CI [#2180](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2180)
* [CNTRLPLANE-3226](https://issues.redhat.com/browse/CNTRLPLANE-3226): bump library-go to get KMS plugin credentials [#2169](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2169)
* NO-JIRA: Automatic agentic rebase: Update library-go to d8750ed [#2177](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2177)
* NO-JIRA: Automatic agentic rebase: Update library-go to 0cf249e [#2176](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2176)
* NO-JIRA: Bump latest libray-go changes [#2173](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2173)
* NO-JIRA: remove old mock plugin deployment [#2168](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2168)
* NO-JIRA: kms: use DefaultFakeVaultEncryptionProvider to ensure AppRole secret setup [#2167](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2167)
* [OCPBUGS-86057](https://issues.redhat.com/browse/OCPBUGS-86057): render: fall back to Authentication CR [#2166](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2166)
* [CNTRLPLANE-3236](https://issues.redhat.com/browse/CNTRLPLANE-3236): support deploying Vault mock KMS plugin [#2146](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2146)
* NO-JIRA: Add KMS dummy case [#2161](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2161)
* NO-JIRA: Bump latest library-go changes [#2160](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2160)
* [CNTRLPLANE-3238](https://issues.redhat.com/browse/CNTRLPLANE-3238): Add New kms suite [#2156](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2156)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/167ca3228ab415157eeca5de6cef451c0bfe4db2...24b60d04b3478e04a728fb0ae1385abc6a478d20)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/9d636ab4992bd501006d2b0c1d3ac512666c6ca7)

* [CNTRLPLANE-3349](https://issues.redhat.com/browse/CNTRLPLANE-3349): Migrate KCM-O cases to ote [#935](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/935)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/ca150c42a7982509b8bba34080308cff00c09310...9d636ab4992bd501006d2b0c1d3ac512666c6ca7)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/d43423b583269eea8236040424609c3f108ac9c4)

* [WRKLDS-1126](https://issues.redhat.com/browse/WRKLDS-1126): e2e network policy tests [#637](https://github.com/openshift/cluster-kube-scheduler-operator/pull/637)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/a0495853f80d38e19d07b98a225e1aa0e7972ac9...d43423b583269eea8236040424609c3f108ac9c4)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/e602d35f4c8778143d51872bd6e58759ad15b01e)

* NO-JIRA: fix: use feature-gate annotation for CAPI manifests [#304](https://github.com/openshift/cluster-machine-approver/pull/304)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/077692a84f2b84185be4bf60263cfa45577b7751...e602d35f4c8778143d51872bd6e58759ad15b01e)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/67978b16bd5fec2c37f66b8a4d4fd270408e824e)

* NO-ISSUE: Update golangci-lint version [#2941](https://github.com/openshift/cluster-monitoring-operator/pull/2941)
* [OCPBUGS-86989](https://issues.redhat.com/browse/OCPBUGS-86989): increase lookup interval [#2943](https://github.com/openshift/cluster-monitoring-operator/pull/2943)
* [MON-4583](https://issues.redhat.com/browse/MON-4583): adding NVIDIA H200 GPU device to accelerators configmap [#2942](https://github.com/openshift/cluster-monitoring-operator/pull/2942)
* [MON-4555](https://issues.redhat.com/browse/MON-4555): migrate federate tests to e2e suite [#2902](https://github.com/openshift/cluster-monitoring-operator/pull/2902)
* NO-ISSUE: improve logging for doc example tests [#2936](https://github.com/openshift/cluster-monitoring-operator/pull/2936)
* [MON-4526](https://issues.redhat.com/browse/MON-4526): manifests: merge ThanosQuerierConfig from ClusterMonitoring CRD [#2924](https://github.com/openshift/cluster-monitoring-operator/pull/2924)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2937](https://github.com/openshift/cluster-monitoring-operator/pull/2937)
* Update jsonnet dependencies [#2927](https://github.com/openshift/cluster-monitoring-operator/pull/2927)
* NO-ISSUE: manifests: remove unused NewConfigMapList method [#2935](https://github.com/openshift/cluster-monitoring-operator/pull/2935)
* [OCPBUGS-86352](https://issues.redhat.com/browse/OCPBUGS-86352): jsonnet: exclude ReplicationController from catch-all … [#2932](https://github.com/openshift/cluster-monitoring-operator/pull/2932)
* NO-ISSUE: chore: remove unused function [#2934](https://github.com/openshift/cluster-monitoring-operator/pull/2934)
* [MON-4525](https://issues.redhat.com/browse/MON-4525): manifests: merge TelemeterClientConfig from ClusterMonitoring CRD [#2928](https://github.com/openshift/cluster-monitoring-operator/pull/2928)
* [MON-4566](https://issues.redhat.com/browse/MON-4566): chore: add telemetry_report tool to help with telemetry change review [#2885](https://github.com/openshift/cluster-monitoring-operator/pull/2885)
* [MON-4529](https://issues.redhat.com/browse/MON-4529): manifests: merge PrometheusOperatorAdmissionWebhookConfig from ClusterMonitoring CRD [#2923](https://github.com/openshift/cluster-monitoring-operator/pull/2923)
* [OCPBUGS-85709](https://issues.redhat.com/browse/OCPBUGS-85709): fix: use numeric ports in NetworkPolicies and add enforcement e2e test [#2925](https://github.com/openshift/cluster-monitoring-operator/pull/2925)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/c9f25136c1cc6f9f7facbf1d4f128849fbb8e0f1...67978b16bd5fec2c37f66b8a4d4fd270408e824e)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/6dc18040e7c214f6a1db25b6f5ef4642c6c6a186)

* [OCPBUGS-66159](https://issues.redhat.com/browse/OCPBUGS-66159): Add `openshift.io/node-selector` annotation to `openshift-network-console` namespace [#2848](https://github.com/openshift/cluster-network-operator/pull/2848)
* [CORENET-7154](https://issues.redhat.com/browse/CORENET-7154): Fix debounce timer for OperatorConfig level being incorrectly cleared [#3011](https://github.com/openshift/cluster-network-operator/pull/3011)
* NO-JIRA: Remove --enable-interconnect flag from OVN-K manifests [#3008](https://github.com/openshift/cluster-network-operator/pull/3008)
* [OCPBUGS-83863](https://issues.redhat.com/browse/OCPBUGS-83863): Remove version-specific CNI binary copy logic [#2967](https://github.com/openshift/cluster-network-operator/pull/2967)
* [OCPBUGS-84519](https://issues.redhat.com/browse/OCPBUGS-84519): Add terminationMessagePolicy to missing ovn-kubernetes containers [#3004](https://github.com/openshift/cluster-network-operator/pull/3004)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/6f47993888c3e88153028f22023ad5b36f710b9b...6dc18040e7c214f6a1db25b6f5ef4642c6c6a186)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/434478751a92e4da294f25761f1e11bd6dd17b12)

* [OCPBUGS-87132](https://issues.redhat.com/browse/OCPBUGS-87132): E2E: Remove ovs-vswitchd from platform services [#1526](https://github.com/openshift/cluster-node-tuning-operator/pull/1526)
* [OCPBUGS-86803](https://issues.redhat.com/browse/OCPBUGS-86803): e2e: Remove unnecessary len(numa) &lt; 2 skip gates [#1528](https://github.com/openshift/cluster-node-tuning-operator/pull/1528)
* NO-JIRA: Bump github.com/moby/spdystream from v0.5.0 to v0.5.1 [#1527](https://github.com/openshift/cluster-node-tuning-operator/pull/1527)
* [OCPBUGS-86480](https://issues.redhat.com/browse/OCPBUGS-86480): E2E:  Refactor OVS affinity tests into shared helpers and add new workload-partitioning and control-plane reboot test cases. [#1509](https://github.com/openshift/cluster-node-tuning-operator/pull/1509)
* [OCPBUGS-83865](https://issues.redhat.com/browse/OCPBUGS-83865): Revert stalld backend to sched_debug [#1515](https://github.com/openshift/cluster-node-tuning-operator/pull/1515)
* NO-JIRA: E2E: remove obsolete ContainerRuntimeConfig runtime-switch test [#1510](https://github.com/openshift/cluster-node-tuning-operator/pull/1510)
* [OCPBUGS-80952](https://issues.redhat.com/browse/OCPBUGS-80952): perf: latency: compute memory resources dynamically [#1517](https://github.com/openshift/cluster-node-tuning-operator/pull/1517)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/ce1afe57245e0701cabf776b3d05fac8dde30cbe...434478751a92e4da294f25761f1e11bd6dd17b12)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/46f78fd08ea2178cf7610eccf8a5d92b250e0219)

* [OPRUN-4640](https://issues.redhat.com/browse/OPRUN-4640): Update to golang 1.26.3 and openshift-4.23 builders [#211](https://github.com/openshift/cluster-olm-operator/pull/211)
* [OPRUN-4627](https://issues.redhat.com/browse/OPRUN-4627): override catalog tag to 4.x when RELEASE_VERSION is 4.x and catalogd.yaml pins v5.0 [#210](https://github.com/openshift/cluster-olm-operator/pull/210)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/f563a1d98a25f5f77af89cafee889604c211a724...46f78fd08ea2178cf7610eccf8a5d92b250e0219)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/ab2058390df89cd475db792622d66d0a85b46015)

* [CNTRLPLANE-3226](https://issues.redhat.com/browse/CNTRLPLANE-3226): switch to real Vault KMS plugin in CI [#704](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/704)
* [CNTRLPLANE-3226](https://issues.redhat.com/browse/CNTRLPLANE-3226): bump library-go to get KMS plugin credentials [#699](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/699)
* [CNTRLPLANE-3364](https://issues.redhat.com/browse/CNTRLPLANE-3364): remove old go std tests [#703](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/703)
* NO-JIRA: Automatic agentic rebase: Update library-go to d8750ed [#702](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/702)
* NO-JIRA: Automatic agentic rebase: Update library-go to 0cf249e [#701](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/701)
* NO-JIRA: bump latest library-go changes [#700](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/700)
* NO-jIRA: Remove old mock plugin deployment [#698](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/698)
* NO-JIRA: kms: use DefaultFakeVaultEncryptionProvider to ensure AppRole secre setup [#697](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/697)
* [CNTRLPLANE-3236](https://issues.redhat.com/browse/CNTRLPLANE-3236): support deploying Vault mock KMS plugin [#693](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/693)
* NO-JIRA: Bump latest library-go changes [#692](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/692)
* [CNTRLPLANE-3364](https://issues.redhat.com/browse/CNTRLPLANE-3364): add the kms suite and migrate the kms tests of oas-o to ote [#690](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/690)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/c7332945d1bc4887a2afce2cfbc27c00d55a66bb...ab2058390df89cd475db792622d66d0a85b46015)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/34f95b07f4afbc47558e54e4fa2710fd692e615e)

* [CNTRLPLANE-2907](https://issues.redhat.com/browse/CNTRLPLANE-2907): e2e network policy tests [#428](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/428)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/c941a99dd2b9200c0de23606c4372d33d656a756...34f95b07f4afbc47558e54e4fa2710fd692e615e)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/7d7dea4f133834852d95d0327bb922c93fa9dbd6)

* NO-JIRA: chore: exclude e2e tests from make test unconditionally [#1321](https://github.com/openshift/cluster-version-operator/pull/1321)
* [OTA-1836](https://issues.redhat.com/browse/OTA-1836): Honor the centralized TLS configuration [#1338](https://github.com/openshift/cluster-version-operator/pull/1338)
* NO-JIRA: refactor: simplify redundant error checking conditions [#1320](https://github.com/openshift/cluster-version-operator/pull/1320)
* [OTA-1966](https://issues.redhat.com/browse/OTA-1966): Install namespace/openshift-lightspeed only when TechPreview is enabled [#1394](https://github.com/openshift/cluster-version-operator/pull/1394)
* [OTA-1966](https://issues.redhat.com/browse/OTA-1966): Manage proposals [#1382](https://github.com/openshift/cluster-version-operator/pull/1382)
* [OTA-1935](https://issues.redhat.com/browse/OTA-1935): pkg: Use risk.Source framework to feed Upgradeable [#1368](https://github.com/openshift/cluster-version-operator/pull/1368)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/e75b70ae091198eff7ea2307c0af94ca83ce0e5c...7d7dea4f133834852d95d0327bb922c93fa9dbd6)


### [console](https://github.com/openshift/console/tree/ec1ce9ae7581ffc27725f4f61770ab898b62b111)

* [CONSOLE-5242](https://issues.redhat.com/browse/CONSOLE-5242): Remove shipwright-plugin Cypress integration tests [#16553](https://github.com/openshift/console/pull/16553)
* [CONSOLE-4946](https://issues.redhat.com/browse/CONSOLE-4946): Add Configuration tab to Node view [#16124](https://github.com/openshift/console/pull/16124)
* NO-JIRA: Improve cypress-migration skill [#16550](https://github.com/openshift/console/pull/16550)
* [OCPBUGS-82506](https://issues.redhat.com/browse/OCPBUGS-82506), [OCPBUGS-82507](https://issues.redhat.com/browse/OCPBUGS-82507): Re-enable OLM Cypress tests disabled for createRoot [#16531](https://github.com/openshift/console/pull/16531)
* [OCPBUGS-86564](https://issues.redhat.com/browse/OCPBUGS-86564): Use stable username hash for user-settings ConfigMap names [#16512](https://github.com/openshift/console/pull/16512)
* [OCPBUGS-86875](https://issues.redhat.com/browse/OCPBUGS-86875): Always use RHUI icons [#16528](https://github.com/openshift/console/pull/16528)
* [OCPBUGS-86755](https://issues.redhat.com/browse/OCPBUGS-86755): use a clip path instead of overlapping triangles [#16520](https://github.com/openshift/console/pull/16520)
* [CONSOLE-5037](https://issues.redhat.com/browse/CONSOLE-5037): Add knip-based dead code detection in CI [#16523](https://github.com/openshift/console/pull/16523)
* [CONSOLE-5284](https://issues.redhat.com/browse/CONSOLE-5284): Put new node inventory items behind tech-preview [#16414](https://github.com/openshift/console/pull/16414)
* [CONSOLE-5307](https://issues.redhat.com/browse/CONSOLE-5307): Remove dead code 2: electric boogaloo [#16513](https://github.com/openshift/console/pull/16513)
* NO-JIRA: Update Console 4.23 plugin SDK CHANGELOG [#16516](https://github.com/openshift/console/pull/16516)
* [CONSOLE-5091](https://issues.redhat.com/browse/CONSOLE-5091): Add bulk selection and schedulable actions to Nodes page [#16203](https://github.com/openshift/console/pull/16203)
* [CONSOLE-5296](https://issues.redhat.com/browse/CONSOLE-5296): Add non-scalable image warning when scaling workloads [#16436](https://github.com/openshift/console/pull/16436)
* [OCPBUGS-82508](https://issues.redhat.com/browse/OCPBUGS-82508), [OCPBUGS-82509](https://issues.redhat.com/browse/OCPBUGS-82509): Fix and re-enable operator e2e tests disabled for createRoot [#16517](https://github.com/openshift/console/pull/16517)
* [OCPBUGS-86614](https://issues.redhat.com/browse/OCPBUGS-86614): prep for 4.22 GA SDK publish [#16507](https://github.com/openshift/console/pull/16507)
* [CONSOLE-5308](https://issues.redhat.com/browse/CONSOLE-5308): Centralize ResizeObserver polyfill in Jest setup for unit tests [#16506](https://github.com/openshift/console/pull/16506)
* [CONSOLE-5286](https://issues.redhat.com/browse/CONSOLE-5286): Block snapshot tests via ESLint and migrate existing tests to explicit assertions [#16427](https://github.com/openshift/console/pull/16427)
* [CONSOLE-5307](https://issues.redhat.com/browse/CONSOLE-5307): Remove unused exports and dead code [#16502](https://github.com/openshift/console/pull/16502)
* NO-JIRA: Update plugin SDK core package CHANGELOG [#16496](https://github.com/openshift/console/pull/16496)
* NO-JIRA: Capitalize "Basic" in secret dropdown label [#16490](https://github.com/openshift/console/pull/16490)
* [OCPBUGS-83767](https://issues.redhat.com/browse/OCPBUGS-83767): Helm upgrade — preserve release values when changing chart version [#16364](https://github.com/openshift/console/pull/16364)
* [OCPBUGS-86491](https://issues.redhat.com/browse/OCPBUGS-86491): Fix macOS Option key in pod terminal [#16492](https://github.com/openshift/console/pull/16492)
* [CONSOLE-5293](https://issues.redhat.com/browse/CONSOLE-5293): Update Dockerfile.downloads for 4.22 and add RHEL 8/9 oc binaries [#16455](https://github.com/openshift/console/pull/16455)
* [CONSOLE-5298](https://issues.redhat.com/browse/CONSOLE-5298): enable http2 on the backend [#16471](https://github.com/openshift/console/pull/16471)
* [CONSOLE-5253](https://issues.redhat.com/browse/CONSOLE-5253): Extend Unit Tests: Console-App - Core Navigation & Orchestration [#16452](https://github.com/openshift/console/pull/16452)
* [OCPBUGS-86488](https://issues.redhat.com/browse/OCPBUGS-86488): Bump to PatternFly 6.5.1 [#16491](https://github.com/openshift/console/pull/16491)
* [CONSOLE-5244](https://issues.redhat.com/browse/CONSOLE-5244): Migrate webterminal-plugin Cypress tests to Playwright [#16461](https://github.com/openshift/console/pull/16461)
* [CONSOLE-5110](https://issues.redhat.com/browse/CONSOLE-5110): update to PatternFly 6.5.0 [#16172](https://github.com/openshift/console/pull/16172)
* [OCPBUGS-82512](https://issues.redhat.com/browse/OCPBUGS-82512): Fix knative e2e test failures caused by createRoot timing [#16289](https://github.com/openshift/console/pull/16289)
* [CONSOLE-5300](https://issues.redhat.com/browse/CONSOLE-5300): Parallelize context detection to reduce initial load time [#16477](https://github.com/openshift/console/pull/16477)
* [HELM-703](https://issues.redhat.com/browse/HELM-703): Add authentication for Helm chart URLs [#16360](https://github.com/openshift/console/pull/16360)
* [CONSOLE-5194](https://issues.redhat.com/browse/CONSOLE-5194): Audit and fix Claude Code skills for accuracy [#16316](https://github.com/openshift/console/pull/16316)
* [OCPBUGS-84876](https://issues.redhat.com/browse/OCPBUGS-84876): Remove DataViewToolbar wrapper from bottom pagination [#16479](https://github.com/openshift/console/pull/16479)
* NO-JIRA: Add `eslint-plugin-no-barrel-files` [#16476](https://github.com/openshift/console/pull/16476)
* [OCPBUGS-84214](https://issues.redhat.com/browse/OCPBUGS-84214): Fix Shipwright detail pages crashing with React error #310 [#16474](https://github.com/openshift/console/pull/16474)
* [CONSOLE-5197](https://issues.redhat.com/browse/CONSOLE-5197): Improve Playwright artifact collection and add safety checks [#16463](https://github.com/openshift/console/pull/16463)
* [OCPBUGS-71878](https://issues.redhat.com/browse/OCPBUGS-71878): Show empty state instead of 403 error for users without projects [#16464](https://github.com/openshift/console/pull/16464)
* [OCPBUGS-82505](https://issues.redhat.com/browse/OCPBUGS-82505): Re-enable add-flow-ci.feature e2e tests disabled for createRoot adoption [#16285](https://github.com/openshift/console/pull/16285)
* NO-JIRA: Update Console plugin SDK CHANGELOG files [#16465](https://github.com/openshift/console/pull/16465)
* [CONSOLE-5280](https://issues.redhat.com/browse/CONSOLE-5280): Migrate cluster-settings Cypress tests to Playwright [#16444](https://github.com/openshift/console/pull/16444)
* [OCPBUGS-81521](https://issues.redhat.com/browse/OCPBUGS-81521): Adapt dashboard Prometheus polling interval based on query response time [#16441](https://github.com/openshift/console/pull/16441)
* [CONSOLE-5245](https://issues.redhat.com/browse/CONSOLE-5245): Install and configure eslint-plugin-playwright for e2e directory [#16433](https://github.com/openshift/console/pull/16433)
* [CONSOLE-5197](https://issues.redhat.com/browse/CONSOLE-5197): Collect Playwright test artifacts for Prow CI [#16453](https://github.com/openshift/console/pull/16453)
* [OCPBUGS-85649](https://issues.redhat.com/browse/OCPBUGS-85649): bump gRPC-Go package [#16442](https://github.com/openshift/console/pull/16442)
* And 7 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/9af8cbd256ab90ceb5d746b20e63a9744cbe9cb6...ec1ce9ae7581ffc27725f4f61770ab898b62b111)


### [console-operator](https://github.com/openshift/console-operator/tree/658550c71d5664068572d217a58ae7bcc2eb6847)

* [CONSOLE-5298](https://issues.redhat.com/browse/CONSOLE-5298): Auto-generate throwaway TLS cert for HTTP/2 support [#1170](https://github.com/openshift/console-operator/pull/1170)
* NO-JIRA: feat: have CVO inject the centralized TLS configuration into the operator's config [#1167](https://github.com/openshift/console-operator/pull/1167)
* [OCPBUGS-74872](https://issues.redhat.com/browse/OCPBUGS-74872): Sort plugin list to make them deterministic [#1107](https://github.com/openshift/console-operator/pull/1107)
* [OCPBUGS-86117](https://issues.redhat.com/browse/OCPBUGS-86117): Add unit and e2e test coverage for cert rotation redeployment [#1160](https://github.com/openshift/console-operator/pull/1160)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console-operator/compare/2d71a12328fb08b7e5f80bfdc7a0324048bf0e74...658550c71d5664068572d217a58ae7bcc2eb6847)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/d6f73950658d258e0ddbf2a4ac92e13ac840158b)

* [OCPBUGS-85826](https://issues.redhat.com/browse/OCPBUGS-85826): rebase to pick up dependency updates [#237](https://github.com/openshift/containernetworking-plugins/pull/237)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/747ad66caa1109b2b490aebad01af42bd2d738f1...d6f73950658d258e0ddbf2a4ac92e13ac840158b)


### [coredns](https://github.com/openshift/coredns/tree/3c21b066c9bd86caa06f790dcd1c046667875d46)

* [OCPBUGS-83943](https://issues.redhat.com/browse/OCPBUGS-83943): Bump gRPC to v1.79.3 to resolve CVE-2026-33186 [#183](https://github.com/openshift/coredns/pull/183)
* [Full changelog](https://github.com/openshift/coredns/compare/0dded2d232dab43c107b1dab9d0d9fdfd8259622...3c21b066c9bd86caa06f790dcd1c046667875d46)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/f8bb5994f3cee8ee2bb5cca25e3e9783ad7dd57c)

* UPSTREAM-SYNC: Sync main with latest upstream (release-1.36) [#393](https://github.com/openshift/cloud-provider-openstack/pull/393)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/3e411dcd9507ad2ad63362b44f7140b1db6ed243...f8bb5994f3cee8ee2bb5cca25e3e9783ad7dd57c)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/f733db66fcd02f714fcc6feef9d0c2ed9135c347)

* NO-JIRA: CVE-2026-35469: Bump github.com/moby/spdystream@v0.5.1 [#189](https://github.com/openshift/csi-driver-nfs/pull/189)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/0a1ab4b82415d1b44972ebce0e55541ad632a8c7...f733db66fcd02f714fcc6feef9d0c2ed9135c347)


### [csi-external-snapshotter, csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter/tree/77d02e52a442c1a98457797bf8eb5777489aabae)

* NO-JIRA: Bump google.golang.org/grpc to v1.79.3 [#215](https://github.com/openshift/csi-external-snapshotter/pull/215)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/3219da7dcbb14fa762704746d21fb38131beb1f4...77d02e52a442c1a98457797bf8eb5777489aabae)


### [docker-builder](https://github.com/openshift/builder/tree/2cda03a93696d4620703848471b3b873b0b2fa1e)

* [OCPBUGS-77610](https://issues.redhat.com/browse/OCPBUGS-77610): Updating openshift-enterprise-builder-container image to be consistent with ART for 4.22 [#503](https://github.com/openshift/builder/pull/503)
* [Full changelog](https://github.com/openshift/builder/compare/fcd4ce2d96613a27bd1ab7f53ff47225976c4ba9...2cda03a93696d4620703848471b3b873b0b2fa1e)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/dc6927de4444956b521131f5f142b6922195834b)

* [OCPBUGS-69851](https://issues.redhat.com/browse/OCPBUGS-69851): Adding support for payload multiple-stream. [#180](https://github.com/openshift/driver-toolkit/pull/180)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/7aa4007a8601bf4bb23b696f580c022f58877223...dc6927de4444956b521131f5f142b6922195834b)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/8ae492a86a67ccb75790b2874bb6d6447270e110)

* [OCPBUGS-53005](https://issues.redhat.com/browse/OCPBUGS-53005): Remove references to master branch [#297](https://github.com/openshift/cluster-api-provider-gcp/pull/297)
* UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.12.0 (b9b055d) into master [#295](https://github.com/openshift/cluster-api-provider-gcp/pull/295)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/196e2c06afdb893dbe113ec1259203b8f4654fd4...8ae492a86a67ccb75790b2874bb6d6447270e110)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/684ef36213cdb8b8acbb014a63819c7bb410c746)

* NO-JIRA: Bump google.golang.org/grpc to v1.79.3 to address CVE-2026-33186 [#182](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/182)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/f2427fae9f2115a920a5d8cf8c645afa3ff827d9...684ef36213cdb8b8acbb014a63819c7bb410c746)


### [haproxy-router](https://github.com/openshift/router/tree/a86164c8ebaed55a2a28451fa913a04f10cc9a72)

* [OCPBUGS-87208](https://issues.redhat.com/browse/OCPBUGS-87208): Adding escapeHAProxySingleQuotes for sanitize [#785](https://github.com/openshift/router/pull/785)
* [NE-2572](https://issues.redhat.com/browse/NE-2572): use add/del haproxy api calls [#763](https://github.com/openshift/router/pull/763)
* [OCPBUGS-86168](https://issues.redhat.com/browse/OCPBUGS-86168): Bump google.golang.org/grpc to v1.79.3 [#777](https://github.com/openshift/router/pull/777)
* [Full changelog](https://github.com/openshift/router/compare/b75bab261392d5eacb115db408f121618a23e41d...a86164c8ebaed55a2a28451fa913a04f10cc9a72)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/872bd3722d0954b31459f715fbd4fb7612aaf338)

* [OCPBUGS-85410](https://issues.redhat.com/browse/OCPBUGS-85410): Fix performance related issues when selinux metrics are emitted [#2668](https://github.com/openshift/kubernetes/pull/2668)
* [OCPBUGS-86229](https://issues.redhat.com/browse/OCPBUGS-86229): apiserver: cache etcd storage monitors to avoid recreating clients on each metrics scrape [#2674](https://github.com/openshift/kubernetes/pull/2674)
* [OCPBUGS-74511](https://issues.redhat.com/browse/OCPBUGS-74511): remove RouteExternalCertificate feature gate [#2585](https://github.com/openshift/kubernetes/pull/2585)
* [OCPBUGS-77243](https://issues.redhat.com/browse/OCPBUGS-77243): test: skip private registry test [#2621](https://github.com/openshift/kubernetes/pull/2621)
* [Full changelog](https://github.com/openshift/kubernetes/compare/f9b62a69d4a05e10b2b7cf8d40afa37f9dcd0938...872bd3722d0954b31459f715fbd4fb7612aaf338)


### [hypershift](https://github.com/openshift/hypershift/tree/a101e6697af02eba43e6cfd04fc4c00277b72a64)

* [OCPBUGS-87217](https://issues.redhat.com/browse/OCPBUGS-87217): fix: add CPU partitioning workload annotation to control-plane-metrics-forwarder [#8686](https://github.com/openshift/hypershift/pull/8686)
* [CNTRLPLANE-3599](https://issues.redhat.com/browse/CNTRLPLANE-3599): Remove controller-runtime v0.19.7 pin for k8s 1.36 bump [#8683](https://github.com/openshift/hypershift/pull/8683)
* [CNTRLPLANE-3550](https://issues.redhat.com/browse/CNTRLPLANE-3550): Add missing v2 test suites to Azure self-managed test matrix [#8658](https://github.com/openshift/hypershift/pull/8658)
* NO-JIRA: chore(deps): weekly dependabot consolidation [#8634](https://github.com/openshift/hypershift/pull/8634)
* NO-JIRA: test(e2e/v2): sweep AGENTS.md conformance violations [#8659](https://github.com/openshift/hypershift/pull/8659)
* [OCPBUGS-87018](https://issues.redhat.com/browse/OCPBUGS-87018): Revert conditional deletion of openshift-ingress NetworkPolicy [#8662](https://github.com/openshift/hypershift/pull/8662)
* NO-JIRA: move CONTRIBUTING.md to repo root and update CI guidance [#8329](https://github.com/openshift/hypershift/pull/8329)
* [CNTRLPLANE-3548](https://issues.redhat.com/browse/CNTRLPLANE-3548): Add v2 e2e test framework documentation [#8641](https://github.com/openshift/hypershift/pull/8641)
* [OCPBUGS-86008](https://issues.redhat.com/browse/OCPBUGS-86008): Gate Route watch on management cluster capability [#8484](https://github.com/openshift/hypershift/pull/8484)
* Revert "OCPBUGS-86774: Pin azure-cli to 2.72.0 in e2e Dockerfile" [#8652](https://github.com/openshift/hypershift/pull/8652)
* [OCPBUGS-77268](https://issues.redhat.com/browse/OCPBUGS-77268): reconcile HCP when pull secret is unavailable [#8352](https://github.com/openshift/hypershift/pull/8352)
* [GCP-298](https://issues.redhat.com/browse/GCP-298): Add GCP e2e v2 test artifacts directory structure documentation [#8446](https://github.com/openshift/hypershift/pull/8446)
* [CNTRLPLANE-2207](https://issues.redhat.com/browse/CNTRLPLANE-2207): Upgrade to CAPI 1.11 [#8594](https://github.com/openshift/hypershift/pull/8594)
* NO-JIRA: chore(ci): enforce v2 e2e AGENTS.md standards via CodeRabbit [#8660](https://github.com/openshift/hypershift/pull/8660)
* [CNTRLPLANE-1357](https://issues.redhat.com/browse/CNTRLPLANE-1357): add KMSv2 secret encryption e2e v2 test for Self Managed Azure [#8653](https://github.com/openshift/hypershift/pull/8653)
* [CNTRLPLANE-3167](https://issues.redhat.com/browse/CNTRLPLANE-3167): Auto-detect credential type for HCPEtcdBackup [#8368](https://github.com/openshift/hypershift/pull/8368)
* NO-JIRA: Fix Azure private/topology CEL validation rules [#8490](https://github.com/openshift/hypershift/pull/8490)
* [GCP-688](https://issues.redhat.com/browse/GCP-688): Port remaining v1 TestCreateCluster gaps to v2 e2e [#8590](https://github.com/openshift/hypershift/pull/8590)
* NO-JIRA: feat(skills): add validate-pr-override-images skill [#8616](https://github.com/openshift/hypershift/pull/8616)
* [OCPSTRAT-1677](https://issues.redhat.com/browse/OCPSTRAT-1677): Add Spot instances documentation [#8485](https://github.com/openshift/hypershift/pull/8485)
* [OCPBUGS-43444](https://issues.redhat.com/browse/OCPBUGS-43444): Allow kubevirt-csi storageclass default to be changed by user [#8597](https://github.com/openshift/hypershift/pull/8597)
* [CNTRLPLANE-3510](https://issues.redhat.com/browse/CNTRLPLANE-3510): Enable additional golangci-lint linters [#8567](https://github.com/openshift/hypershift/pull/8567)
* [OCPBUGS-86306](https://issues.redhat.com/browse/OCPBUGS-86306): Stop controllers fighting over HCP status [#8562](https://github.com/openshift/hypershift/pull/8562)
* [CNTRLPLANE-3535](https://issues.redhat.com/browse/CNTRLPLANE-3535): Add codecov carryforward flags to stabilize project coverage checks [#8642](https://github.com/openshift/hypershift/pull/8642)
* [OCPSTRAT-1677](https://issues.redhat.com/browse/OCPSTRAT-1677): fix(cpo): increase NTH default workers from 10 to 20 [#8500](https://github.com/openshift/hypershift/pull/8500)
* NO-JIRA: feat(ci): add skopeo and gh CLI to ARC runner image [#8627](https://github.com/openshift/hypershift/pull/8627)
* [OCPBUGS-85584](https://issues.redhat.com/browse/OCPBUGS-85584): Fix stale api.openshift.com labels on HostedControlPlane [#8507](https://github.com/openshift/hypershift/pull/8507)
* NO-JIRA: ci(runner): update base image to actions-runner v2.334.0 [#8643](https://github.com/openshift/hypershift/pull/8643)
* [CNTRLPLANE-3533](https://issues.redhat.com/browse/CNTRLPLANE-3533): Add Dockerfiles to codecov ignore list [#8640](https://github.com/openshift/hypershift/pull/8640)
* [OCPBUGS-86774](https://issues.redhat.com/browse/OCPBUGS-86774): Pin azure-cli to 2.72.0 in e2e Dockerfile [#8638](https://github.com/openshift/hypershift/pull/8638)
* NO-JIRA: ci(deps): bump google-github-actions/auth from 2.1.13 to 3.0.0 [#8630](https://github.com/openshift/hypershift/pull/8630)
* NO-JIRA: ci(deps): bump actions/checkout from 4.3.1 to 6.0.2 [#8631](https://github.com/openshift/hypershift/pull/8631)
* NO-JIRA: Fix HCCO deployment location in AGENTS.md [#8635](https://github.com/openshift/hypershift/pull/8635)
* [CNTRLPLANE-3534](https://issues.redhat.com/browse/CNTRLPLANE-3534): ci: add --allowedTools to address-review-comments workflow [#8639](https://github.com/openshift/hypershift/pull/8639)
* [OCPBUGS-86238](https://issues.redhat.com/browse/OCPBUGS-86238): add CPO overrides for ARO swift-nic resource limits [#8610](https://github.com/openshift/hypershift/pull/8610)
* [OCPBUGS-81544](https://issues.redhat.com/browse/OCPBUGS-81544): requeue when AutoNodeEnabled is progressing [#8497](https://github.com/openshift/hypershift/pull/8497)
* NO-JIRA: add address-review-comments workflow [#8621](https://github.com/openshift/hypershift/pull/8621)
* NO-JIRA: De-duplicate Azure self-managed documentation [#8566](https://github.com/openshift/hypershift/pull/8566)
* [CNTRLPLANE-3531](https://issues.redhat.com/browse/CNTRLPLANE-3531): Remove EFS-backed Go build cache from CI runners [#8637](https://github.com/openshift/hypershift/pull/8637)
* [CNTRLPLANE-3329](https://issues.redhat.com/browse/CNTRLPLANE-3329): Rebuild runner image on gocacheprog and pipeline changes [#8633](https://github.com/openshift/hypershift/pull/8633)
* [CNTRLPLANE-3329](https://issues.redhat.com/browse/CNTRLPLANE-3329): Fix gocacheprog cache corruption with atomic writes [#8624](https://github.com/openshift/hypershift/pull/8624)
* NO-JIRA: fix(karpenter): start node cleanup when CAPI Cluster is deleted [#8589](https://github.com/openshift/hypershift/pull/8589)
* [OCPBUGS-85151](https://issues.redhat.com/browse/OCPBUGS-85151): Re-enable serviceaccount-pull-secrets controller when registry managementState changes from Removed [#8522](https://github.com/openshift/hypershift/pull/8522)
* [OCPBUGS-85243](https://issues.redhat.com/browse/OCPBUGS-85243): Set aws-load-balancer-scheme on public HCP router service [#8458](https://github.com/openshift/hypershift/pull/8458)
* [OCPBUGS-38898](https://issues.redhat.com/browse/OCPBUGS-38898): fix kubeadmin password hash reconciliation to compare password against stored hash [#8358](https://github.com/openshift/hypershift/pull/8358)
* [OCPBUGS-84303](https://issues.redhat.com/browse/OCPBUGS-84303): fix(api): add IPv6 OVN join subnet config to prevent dual-stack routing collision [#8421](https://github.com/openshift/hypershift/pull/8421)
* NO-JIRA: clone ai-helpers into workspace for plugin file access [#8620](https://github.com/openshift/hypershift/pull/8620)
* NO-JIRA: bump claude max-turns to 50 in WIF test [#8619](https://github.com/openshift/hypershift/pull/8619)
* NO-JIRA: test ai-sbom plugin and verify plugin loading [#8614](https://github.com/openshift/hypershift/pull/8614)
* [CNTRLPLANE-3329](https://issues.redhat.com/browse/CNTRLPLANE-3329): Use GOCACHEPROG for zero-copy EFS build cache [#8576](https://github.com/openshift/hypershift/pull/8576)
* NO-JIRA: replace container image with workflow-step plugin setup [#8611](https://github.com/openshift/hypershift/pull/8611)
* NO-JIRA: use ai-helpers container image for Claude WIF test [#8609](https://github.com/openshift/hypershift/pull/8609)
* NO-JIRA: fix Claude WIF test workflow HOME for ARC runners [#8600](https://github.com/openshift/hypershift/pull/8600)
* NO-JIRA: fix Claude WIF test workflow for ARC runners [#8598](https://github.com/openshift/hypershift/pull/8598)
* NO-JIRA: test Claude Code WIF auth in GitHub Actions [#8588](https://github.com/openshift/hypershift/pull/8588)
* [OCPBUGS-86296](https://issues.redhat.com/browse/OCPBUGS-86296): Propagate management cluster proxy env vars to konnectivity sidecar [#8569](https://github.com/openshift/hypershift/pull/8569)
* [OCPBUGS-65730](https://issues.redhat.com/browse/OCPBUGS-65730): add --tls-cipher-suites to oauth-apiserver deployment [#8554](https://github.com/openshift/hypershift/pull/8554)
* [OCPBUGS-85351](https://issues.redhat.com/browse/OCPBUGS-85351): Revert "fix(azure): prevent externalDNSDomain from shadowing cluster apps domain" [#8585](https://github.com/openshift/hypershift/pull/8585)
* [OCPBUGS-84955](https://issues.redhat.com/browse/OCPBUGS-84955): bootstrap serving certs at hypershift operator startup [#8545](https://github.com/openshift/hypershift/pull/8545)
* ci(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 [#8574](https://github.com/openshift/hypershift/pull/8574)
* [CNTRLPLANE-3040](https://issues.redhat.com/browse/CNTRLPLANE-3040): add regression tests for CAS pause/unpause replica clamping [#8262](https://github.com/openshift/hypershift/pull/8262)
* NO-JIRA: chore(deps): weekly dependabot consolidation [#8578](https://github.com/openshift/hypershift/pull/8578)
* [GCP-688](https://issues.redhat.com/browse/GCP-688): Port v1 E2E validations to envtest, unit tests, and v2 Ginkgo specs [#8511](https://github.com/openshift/hypershift/pull/8511)
* NO-JIRA: fix(e2e): lower pull secret in-place propagation test gate to 4.22 [#8553](https://github.com/openshift/hypershift/pull/8553)
* [OCPBUGS-86075](https://issues.redhat.com/browse/OCPBUGS-86075): docs(nodepool): fixing incomplete stuck node drain documentation in section Scaling To Zero [#8544](https://github.com/openshift/hypershift/pull/8544)
* [CNTRLPLANE-3222](https://issues.redhat.com/browse/CNTRLPLANE-3222): Port v1 lifecycle tests to v2 Ginkgo framework [#8527](https://github.com/openshift/hypershift/pull/8527)
* [AUTOSCALE-692](https://issues.redhat.com/browse/AUTOSCALE-692): remove default debug log level from karpenter container [#8561](https://github.com/openshift/hypershift/pull/8561)
* [OCPBUGS-86310](https://issues.redhat.com/browse/OCPBUGS-86310): Handle CA bundle aggregation delay by requeuing revocation [#8563](https://github.com/openshift/hypershift/pull/8563)
* [CNTRLPLANE-3329](https://issues.redhat.com/browse/CNTRLPLANE-3329): Use fuse-overlayfs for build cache instead of full copy [#8568](https://github.com/openshift/hypershift/pull/8568)
* NO-JIRA: fix(e2e): use public multi-arch image for ARM64 karpenter test [#8532](https://github.com/openshift/hypershift/pull/8532)
* [OCPBUGS-86238](https://issues.redhat.com/browse/OCPBUGS-86238): set limits for aro.openshift.io/swift-nic in request overrides for ARO swift [#8552](https://github.com/openshift/hypershift/pull/8552)
* [OCPBUGS-85351](https://issues.redhat.com/browse/OCPBUGS-85351): fix(azure): prevent externalDNSDomain from shadowing cluster apps domain [#8480](https://github.com/openshift/hypershift/pull/8480)
* [CNTRLPLANE-3371](https://issues.redhat.com/browse/CNTRLPLANE-3371): Fix AllowedCIDRs e2e test for Route-based KAS [#8469](https://github.com/openshift/hypershift/pull/8469)
* NO-JIRA: build(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 in /hack/tools [#8547](https://github.com/openshift/hypershift/pull/8547)
* NO-JIRA: Update Konflux Tekton task bundles [#8557](https://github.com/openshift/hypershift/pull/8557)
* NO-JIRA: chore(deps): weekly dependabot consolidation [#8464](https://github.com/openshift/hypershift/pull/8464)
* [CNTRLPLANE-3070](https://issues.redhat.com/browse/CNTRLPLANE-3070): Support KMS on self-managed Azure without affecting ARO HCP [#8088](https://github.com/openshift/hypershift/pull/8088)
* [OCPBUGS-59142](https://issues.redhat.com/browse/OCPBUGS-59142): fix ValidReleaseImage condition message to show minor version [#8519](https://github.com/openshift/hypershift/pull/8519)
* NO-JIRA: Add onboarding guide for new HCP team members [#8132](https://github.com/openshift/hypershift/pull/8132)
* [OCPBUGS-85011](https://issues.redhat.com/browse/OCPBUGS-85011): fix(cpo): use check-first pattern for EBS CSI operator serving cert [#8418](https://github.com/openshift/hypershift/pull/8418)
* [CNTRLPLANE-3329](https://issues.redhat.com/browse/CNTRLPLANE-3329): Extend EFS-backed build cache to lint, verify, and envtest workflows [#8495](https://github.com/openshift/hypershift/pull/8495)
* [Full changelog](https://github.com/openshift/hypershift/compare/f76be88237e1ae0c1c4df2e34d8b0f9eb8ec7953...a101e6697af02eba43e6cfd04fc4c00277b72a64)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/9024b8c9616eb2e938d780bb4ffa42f235adecf9)

* [OCPBUGS-83587](https://issues.redhat.com/browse/OCPBUGS-83587): bump google.golang.org grpc v1.79.3 [#106](https://github.com/openshift/cloud-provider-ibm/pull/106)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/5fbabb9090dbc92f2a4ce9a9ae601403b64c996c...9024b8c9616eb2e938d780bb4ffa42f235adecf9)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/badf3773d38456d810da7e1dc6d49c3e730e489c)

* NO-ISSUE: Bump google.golang.org/grpc to v1.79.3 [#172](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/172)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/f859eac9612d8fff52013b809840b015cee6742d...badf3773d38456d810da7e1dc6d49c3e730e489c)


### [insights-operator](https://github.com/openshift/insights-operator/tree/7c39d495feefbbeb977bd164eb0dc7a5fa4c7ac7)

* [CCXDEV-15790](https://issues.redhat.com/browse/CCXDEV-15790): extractor controller [#1280](https://github.com/openshift/insights-operator/pull/1280)
* [Full changelog](https://github.com/openshift/insights-operator/compare/0a21a2a7b8307657dee68faefb0d88db897da131...7c39d495feefbbeb977bd164eb0dc7a5fa4c7ac7)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/0f83b3ffba520606e514846d2529f862226fc442)

* NO-ISSUE: Update requirements.cachito with latest ironic-python-agent [#255](https://github.com/openshift/ironic-agent-image/pull/255)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/1e607137ca2e6f51a6f91c3402b0cd56f5d9bbe2...0f83b3ffba520606e514846d2529f862226fc442)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/f5dba030c456e9d8b5804929e3f3b98072cdc08b)

* [OCPBUGS-86911](https://issues.redhat.com/browse/OCPBUGS-86911): Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 5.0 [#236](https://github.com/openshift/images/pull/236)
* [OCPSTRAT-3113](https://issues.redhat.com/browse/OCPSTRAT-3113): Set DEFAULT:PQ crypto-policies to RHEL9 base image [#230](https://github.com/openshift/images/pull/230)
* Revert "OCPBUGS-84344: yum.conf: omit docs, weak deps" [#234](https://github.com/openshift/images/pull/234)
* [OCPBUGS-84344](https://issues.redhat.com/browse/OCPBUGS-84344): yum.conf: omit docs, weak deps [#231](https://github.com/openshift/images/pull/231)
* [Full changelog](https://github.com/openshift/images/compare/edb8b1e6c5e949c0b470b2bdf7a32f17e53d2f71...f5dba030c456e9d8b5804929e3f3b98072cdc08b)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/3b41710783bab83b33e6d8f2033be3a9fbce6a9d)

* [OCPBUGS-85098](https://issues.redhat.com/browse/OCPBUGS-85098): [bot] Bump openshift/kube-state-metrics to v2.19.0 [#141](https://github.com/openshift/kube-state-metrics/pull/141)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/6fa06eac4c3942ba64bff18ca93b5a019ea5c976...3b41710783bab83b33e6d8f2033be3a9fbce6a9d)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/62b06d28399b348cb7238d32ad74b9a978c4292f)

* [AGENT-1531](https://issues.redhat.com/browse/AGENT-1531): Remove localhost.localdomain workaround for MCN IRI image field [#6146](https://github.com/openshift/machine-config-operator/pull/6146)
* Fixes OCPBUGS-77140: increase LRU cache and prefetch timeout for PinnedImageSet [#6046](https://github.com/openshift/machine-config-operator/pull/6046)
* [OCPBUGS-87014](https://issues.redhat.com/browse/OCPBUGS-87014): Remove skopeo-install script [#6141](https://github.com/openshift/machine-config-operator/pull/6141)
* [OCPBUGS-86965](https://issues.redhat.com/browse/OCPBUGS-86965): make test 69755 more stable [#6127](https://github.com/openshift/machine-config-operator/pull/6127)
* [OCPBUGS-86554](https://issues.redhat.com/browse/OCPBUGS-86554): Wait for operators after removing master machine [#6091](https://github.com/openshift/machine-config-operator/pull/6091)
* [OCPBUGS-85427](https://issues.redhat.com/browse/OCPBUGS-85427): Remove trailing newline (\n) characters in klog message strings [#6112](https://github.com/openshift/machine-config-operator/pull/6112)
* [MCO-2211](https://issues.redhat.com/browse/MCO-2211): MCO-2210: MCO-2234 MCO-Migrate MCO tests from openshift-tests-private [#5902](https://github.com/openshift/machine-config-operator/pull/5902)
* [OCPBUGS-86890](https://issues.redhat.com/browse/OCPBUGS-86890): fix: update arbiter crio config [#6120](https://github.com/openshift/machine-config-operator/pull/6120)
* [MCO-2296](https://issues.redhat.com/browse/MCO-2296): Remove OSImageStreams v1 replace [#6133](https://github.com/openshift/machine-config-operator/pull/6133)
* [MCO-2296](https://issues.redhat.com/browse/MCO-2296): OSImageStreams v1 promotion [#6076](https://github.com/openshift/machine-config-operator/pull/6076)
* [AGENT-1526](https://issues.redhat.com/browse/AGENT-1526): disable htpasswd auth on IRI registry, keep read-only [#6109](https://github.com/openshift/machine-config-operator/pull/6109)
* NO-ISSUE: Add -L flag to curl to follow redirects automatically [#6121](https://github.com/openshift/machine-config-operator/pull/6121)
* [OCPBUGS-86041](https://issues.redhat.com/browse/OCPBUGS-86041): update IsSNO helper function to correctly access the cluster's topology [#6110](https://github.com/openshift/machine-config-operator/pull/6110)
* [OCPBUGS-83619](https://issues.redhat.com/browse/OCPBUGS-83619): Add version guard for OSStream rendering [#6111](https://github.com/openshift/machine-config-operator/pull/6111)
* NO-ISSUE: Lower IRI deletion log verbosity [#6119](https://github.com/openshift/machine-config-operator/pull/6119)
* [OCPBUGS-86179](https://issues.redhat.com/browse/OCPBUGS-86179): Update ImageModeStatusReporting MCP machine count tests to be resilient on SNO topology [#6089](https://github.com/openshift/machine-config-operator/pull/6089)
* [OCPBUGS-86800](https://issues.redhat.com/browse/OCPBUGS-86800): Update AMI Whitelist [#6108](https://github.com/openshift/machine-config-operator/pull/6108)
* [OCPBUGS-86671](https://issues.redhat.com/browse/OCPBUGS-86671): Fix InternalReleaseImage URL transform [#6100](https://github.com/openshift/machine-config-operator/pull/6100)
* [AGENT-1488](https://issues.redhat.com/browse/AGENT-1488): Aggregate IRI status from MachineConfigNodes [#5841](https://github.com/openshift/machine-config-operator/pull/5841)
* [OCPBUGS-63750](https://issues.redhat.com/browse/OCPBUGS-63750): fix Go build tag behavior [#5494](https://github.com/openshift/machine-config-operator/pull/5494)
* [OCPBUGS-86474](https://issues.redhat.com/browse/OCPBUGS-86474): Tests using realtime kernel should not be limited to a… [#6084](https://github.com/openshift/machine-config-operator/pull/6084)
* [OCPBUGS-86332](https://issues.redhat.com/browse/OCPBUGS-86332): remove tests using base images older than 4.13 [#6077](https://github.com/openshift/machine-config-operator/pull/6077)
* NO-ISSUE: Update TC-88366 to check osImageStream status after update completes [#6078](https://github.com/openshift/machine-config-operator/pull/6078)
* [AGENT-1491](https://issues.redhat.com/browse/AGENT-1491): reclaim disk space from the node when IRI resource is deleted [#5988](https://github.com/openshift/machine-config-operator/pull/5988)
* [OCPBUGS-86035](https://issues.redhat.com/browse/OCPBUGS-86035): Adapt test '54922 - daemon: add check before updating kerne… [#6056](https://github.com/openshift/machine-config-operator/pull/6056)
* [AGENT-1517](https://issues.redhat.com/browse/AGENT-1517): fix iri deletion test [#6070](https://github.com/openshift/machine-config-operator/pull/6070)
* [OCPBUGS-83987](https://issues.redhat.com/browse/OCPBUGS-83987): Fix CVE-2026-33186 [#6065](https://github.com/openshift/machine-config-operator/pull/6065)
* [OCPBUGS-84814](https://issues.redhat.com/browse/OCPBUGS-84814): Skip chrony-wait on first node join [#5990](https://github.com/openshift/machine-config-operator/pull/5990)
* [MCO-2273](https://issues.redhat.com/browse/MCO-2273): MCO-2215: MCO-2183: Migrate remaining TCs from mco.go to MCO, units, kublet suite [#6024](https://github.com/openshift/machine-config-operator/pull/6024)
* [AGENT-1517](https://issues.redhat.com/browse/AGENT-1517): disable iri-registry service on IRI delete [#6041](https://github.com/openshift/machine-config-operator/pull/6041)
* [OCPBUGS-85237](https://issues.redhat.com/browse/OCPBUGS-85237): Manually uncordoned nodes are not automatically re-cordoned [#6028](https://github.com/openshift/machine-config-operator/pull/6028)
* [OCPBUGS-15157](https://issues.redhat.com/browse/OCPBUGS-15157): Replace wildcard permissions with explicit verbs and resources in MCC ClusterRole [#6000](https://github.com/openshift/machine-config-operator/pull/6000)
* [OCPBUGS-65645](https://issues.redhat.com/browse/OCPBUGS-65645): Verify extension packages are installed [#6010](https://github.com/openshift/machine-config-operator/pull/6010)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/61fdd56c3fa546cee22d4420f330e68956f61fd8...62b06d28399b348cb7238d32ad74b9a978c4292f)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/37733b7432b49de8c477367ba087c938913895e4)

* [METAL-1730](https://issues.redhat.com/browse/METAL-1730): Add stream selection for multi-version support [#175](https://github.com/openshift/image-customization-controller/pull/175)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/a43d9c977f6332577efcd383cf173a2ff5805a4d...37733b7432b49de8c477367ba087c938913895e4)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/a8b4286c6b557f5278d62838917872bafbec10d9)

* [METAL-1730](https://issues.redhat.com/browse/METAL-1730): Add stream symlinks for multi-stream support [#83](https://github.com/openshift/machine-os-images/pull/83)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/ef8f5dd772cf24201b6e308eee0fa3e7b1860c32...a8b4286c6b557f5278d62838917872bafbec10d9)


### [metallb-frr](https://github.com/openshift/frr/tree/99c313cdedbad293f51a5665587dc4dab450cc28)

* [OCPBUGS-85711](https://issues.redhat.com/browse/OCPBUGS-85711): Sync 2026-05-27 [#132](https://github.com/openshift/frr/pull/132)
* [Full changelog](https://github.com/openshift/frr/compare/3aee1774c5a84410362b5f79039a7ca2b0281ab4...99c313cdedbad293f51a5665587dc4dab450cc28)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/78b916b2c4f26304ae09842b51f339d0e756a5e7)

* [OBSINTA-1358](https://issues.redhat.com/browse/OBSINTA-1358): add operator-sdk to Cypress test runner image [#966](https://github.com/openshift/monitoring-plugin/pull/966)
* [OU-1399](https://issues.redhat.com/browse/OU-1399): pass ISO string to Timestamp component for valid date rendering [#968](https://github.com/openshift/monitoring-plugin/pull/968)
* [OU-1275](https://issues.redhat.com/browse/OU-1275): remove byte order mark from dashboard text [#960](https://github.com/openshift/monitoring-plugin/pull/960)
* [COO-1776](https://issues.redhat.com/browse/COO-1776): fix: throw error for unsupported dashboard level datasources [#948](https://github.com/openshift/monitoring-plugin/pull/948)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/095e06580abfc4487ef9f2969fd1d7693c7e6b40...78b916b2c4f26304ae09842b51f339d0e756a5e7)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/932bdaa4250d0a1db41a1a1fcac8192f2757211c)

* [OCPBUGS-87264](https://issues.redhat.com/browse/OCPBUGS-87264): Updating ose-multus-networkpolicy-container image to be consistent with ART for 5.0 [#117](https://github.com/openshift/multus-networkpolicy/pull/117)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/43b16450b76093cd33da339fd9b9c246a619d340...932bdaa4250d0a1db41a1a1fcac8192f2757211c)


### [must-gather](https://github.com/openshift/must-gather/tree/37e5da519790dfb004d014ee00a26252b2294e41)

* no-jira: collect OS Image Stream resource [#533](https://github.com/openshift/must-gather/pull/533)
* [CNV-41714](https://issues.redhat.com/browse/CNV-41714): Add a collector for basic virt related data [#539](https://github.com/openshift/must-gather/pull/539)
* [Full changelog](https://github.com/openshift/must-gather/compare/56f0500399d17002c0d00d5d785b153cb876a8af...37e5da519790dfb004d014ee00a26252b2294e41)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/2e9f050e81a02305f56698b19c249d4d03330dfd)

* NO-JIRA: Sync upstream k8snetworkplumbingwg/master (2026-05-19) [#117](https://github.com/openshift/bond-cni/pull/117)
* NO-JIRA: Openshift Only - update owners file [#111](https://github.com/openshift/bond-cni/pull/111)
* NO-JIRA: Fix diverged git histories via upstream merge [#108](https://github.com/openshift/bond-cni/pull/108)
* [Full changelog](https://github.com/openshift/bond-cni/compare/297eeb4320e07b18d559bc373b665479c760e8c7...2e9f050e81a02305f56698b19c249d4d03330dfd)


### [network-tools](https://github.com/openshift/network-tools/tree/b05fd6281beaad05e7de1f95b506679ca53d2b49)

* NO-JIRA:  Add new member [#179](https://github.com/openshift/network-tools/pull/179)
* NO-ISSUE: Add myself back to the bug script [#177](https://github.com/openshift/network-tools/pull/177)
* [Full changelog](https://github.com/openshift/network-tools/compare/4ce8439203bef4c64c11151f57818e8df370c103...b05fd6281beaad05e7de1f95b506679ca53d2b49)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/f5d4e5c5a572e1fa9f289f94b8798c3fe9de65b4)

* [OCPBUGS-81271](https://issues.redhat.com/browse/OCPBUGS-81271): Trim subnet input in UDN creation form [#425](https://github.com/openshift/networking-console-plugin/pull/425)
* [OCPBUGS-54248](https://issues.redhat.com/browse/OCPBUGS-54248): Fix empty state Create button links [#423](https://github.com/openshift/networking-console-plugin/pull/423)
* [CNV-61064](https://issues.redhat.com/browse/CNV-61064): [UDN] Add condition column to the list page [#421](https://github.com/openshift/networking-console-plugin/pull/421)
* Align PatternFly dependencies with resolutions in Console main branch [#420](https://github.com/openshift/networking-console-plugin/pull/420)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/068135467727be49b9fc1e8be569e0017bcb131c...f5d4e5c5a572e1fa9f289f94b8798c3fe9de65b4)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/97a820bd5412c2d3bb22f083152107ef41631c8c)

* [CNTRLPLANE-2518](https://issues.redhat.com/browse/CNTRLPLANE-2518): Add support for sourcing external claims from a source that requires client credential authentication [#197](https://github.com/openshift/oauth-apiserver/pull/197)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/28a74a705787bb1e1ba6445397a8805ae878f326...97a820bd5412c2d3bb22f083152107ef41631c8c)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/fa27a041c546f80152f1bb0deec777e406f38f87)

* [OCPBUGS-69836](https://issues.redhat.com/browse/OCPBUGS-69836): Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART for 4.22 [#341](https://github.com/openshift/oauth-proxy/pull/341)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/714292f5478e6c12da6a31710f72bc8fbe6fb925...fa27a041c546f80152f1bb0deec777e406f38f87)


### [oauth-server](https://github.com/openshift/oauth-server/tree/f892602b822782e0080abc70c6cd1d178f11e684)

* NO-JIRA: Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 [#232](https://github.com/openshift/oauth-server/pull/232)
* [Full changelog](https://github.com/openshift/oauth-server/compare/3aa95c0715e812e17378bd78b223287ea6fb41f0...f892602b822782e0080abc70c6cd1d178f11e684)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/cd8e7ece819a933b2735d7d10fbbe3729daa17d8)

* [CLID-621](https://issues.redhat.com/browse/CLID-621): simplify test catalog building [#1420](https://github.com/openshift/oc-mirror/pull/1420)
* [CLID-655](https://issues.redhat.com/browse/CLID-655): Add test for incremental mirroring using archives by date [#1416](https://github.com/openshift/oc-mirror/pull/1416)
* [CLID-625](https://issues.redhat.com/browse/CLID-625), [CLID-626](https://issues.redhat.com/browse/CLID-626): Tests for --parallel-images and --parallel-layers flags [#1415](https://github.com/openshift/oc-mirror/pull/1415)
* [CLID-647](https://issues.redhat.com/browse/CLID-647): Add testing docs and skills [#1422](https://github.com/openshift/oc-mirror/pull/1422)
* [OCPBUGS-86264](https://issues.redhat.com/browse/OCPBUGS-86264): Upgrade go-jose to v4.1.4 to fix CVE-2026-34986 [#1414](https://github.com/openshift/oc-mirror/pull/1414)
* [CLID-579](https://issues.redhat.com/browse/CLID-579): Validate BlockedImage regex [#1401](https://github.com/openshift/oc-mirror/pull/1401)
* [OCPBUGS-64640](https://issues.redhat.com/browse/OCPBUGS-64640): remove environment setup output [#1384](https://github.com/openshift/oc-mirror/pull/1384)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/2412d1aa75f5115ca2c013502209a8a427998b29...cd8e7ece819a933b2735d7d10fbbe3729daa17d8)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/9fe71d5548bb4a1b1a8ce0c02b3c2a74dded0c59)

* [OPRUN-4637](https://issues.redhat.com/browse/OPRUN-4637): Update dockerfiles to use golang-1.26-release-4.23 builders [#746](https://github.com/openshift/operator-framework-operator-controller/pull/746)
* NO-ISSUE: Synchronize From Upstream Repositories [#741](https://github.com/openshift/operator-framework-operator-controller/pull/741)
* [OPRUN-4571](https://issues.redhat.com/browse/OPRUN-4571): add OLMv1 topology-based deployment scaling e2e test [#737](https://github.com/openshift/operator-framework-operator-controller/pull/737)
* [OPRUN-4625](https://issues.redhat.com/browse/OPRUN-4625): Synchronize from Upstream Repositories [#738](https://github.com/openshift/operator-framework-operator-controller/pull/738)
* [OPRUN-4617](https://issues.redhat.com/browse/OPRUN-4617): Update readme Default Catalog Tests [#739](https://github.com/openshift/operator-framework-operator-controller/pull/739)
* [OPRUN-4607](https://issues.redhat.com/browse/OPRUN-4607): Remove test-experimenal-e2e [#732](https://github.com/openshift/operator-framework-operator-controller/pull/732)
* NO-ISSUE: Synchronize From Upstream Repositories [#733](https://github.com/openshift/operator-framework-operator-controller/pull/733)
* NO-ISSUE: Synchronize From Upstream Repositories [#730](https://github.com/openshift/operator-framework-operator-controller/pull/730)
* [OPRUN-4608](https://issues.redhat.com/browse/OPRUN-4608): UPSTREAM: &lt;carry&gt;: Delete openshift/registry.Dockerfile [#729](https://github.com/openshift/operator-framework-operator-controller/pull/729)
* NO-ISSUE: Synchronize From Upstream Repositories [#726](https://github.com/openshift/operator-framework-operator-controller/pull/726)
* [OPRUN-4607](https://issues.redhat.com/browse/OPRUN-4607): Fix flags passed to test-experimental-e2e [#723](https://github.com/openshift/operator-framework-operator-controller/pull/723)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/1675d191d56bb4bca0f7b1112aa4199df1c3c67e...9fe71d5548bb4a1b1a8ce0c02b3c2a74dded0c59)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/22f07f6e7825c572abf8214e6a376078d9048296)

* [OCPBUGS-84534](https://issues.redhat.com/browse/OCPBUGS-84534): fix concurrent map race in project authorization cache [#642](https://github.com/openshift/openshift-apiserver/pull/642)
* NO-ISSUE: bump github.com/moby/spdystream v0.5.0 to v0.5.1 to fix CVE-2026-35469 [#650](https://github.com/openshift/openshift-apiserver/pull/650)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/999dd5aefb3efef7ff26105b3208f7fc04ff5b06...22f07f6e7825c572abf8214e6a376078d9048296)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/5631cf493b006cbc72a8600a7435813272d71940)

* [CNF-23051](https://issues.redhat.com/browse/CNF-23051): Migrate away from deprecated ioutil [#422](https://github.com/openshift/openshift-controller-manager/pull/422)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/731d7429a788e0d70e3556e40f82c1ba9d55abe7...5631cf493b006cbc72a8600a7435813272d71940)


### [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller/tree/af431c7d76e7474d9f83c4803aa402c24f075534)

* UPSTREAM-SYNC: Sync main with latest upstream (release-2.0) [#36](https://github.com/openshift/openstack-resource-controller/pull/36)
* [Full changelog](https://github.com/openshift/openstack-resource-controller/compare/e49b431fe3ab045c9a37f3f0f9ecb625ab699dd2...af431c7d76e7474d9f83c4803aa402c24f075534)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/a1de734673fb56da500b6ea212a70d50bd5740ab)

* NO-ISSUE: Synchronize From Upstream Repositories [#1313](https://github.com/openshift/operator-framework-olm/pull/1313)
* NO-ISSUE: Synchronize From Upstream Repositories [#1311](https://github.com/openshift/operator-framework-olm/pull/1311)
* NO-ISSUE: Synchronize From Upstream Repositories [#1308](https://github.com/openshift/operator-framework-olm/pull/1308)
* NO-ISSUE: Synchronize From Upstream Repositories [#1307](https://github.com/openshift/operator-framework-olm/pull/1307)
* NO-ISSUE: Synchronize From Upstream Repositories [#1306](https://github.com/openshift/operator-framework-olm/pull/1306)
* NO-ISSUE: Synchronize From Upstream Repositories [#1299](https://github.com/openshift/operator-framework-olm/pull/1299)
* [OPRUN-4610](https://issues.redhat.com/browse/OPRUN-4610): Revert lifecycle server changes [#1300](https://github.com/openshift/operator-framework-olm/pull/1300)
* [OCPBUGS-54790](https://issues.redhat.com/browse/OCPBUGS-54790): Fix packageserver PDB annotation for HyperShift [#1297](https://github.com/openshift/operator-framework-olm/pull/1297)
* [OPRUN-4588](https://issues.redhat.com/browse/OPRUN-4588): use AlwaysAllow UnhealthyPodEvictionPolicy option in PDBs [#1280](https://github.com/openshift/operator-framework-olm/pull/1280)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/754d45a5855c46aad0842bedbca0780bb5184f68...a1de734673fb56da500b6ea212a70d50bd5740ab)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/03428ca0b0885e297f29fced8be1790444c4d4de)

* [OPRUN-4642](https://issues.redhat.com/browse/OPRUN-4642): Update to golang-1.26-release-4.23 [#757](https://github.com/operator-framework/operator-marketplace/pull/757)
* [OPRUN-4628](https://issues.redhat.com/browse/OPRUN-4628): restrict dynamic version selection for default catalogsources to only apply to v5.0-&gt;v4.y [#754](https://github.com/operator-framework/operator-marketplace/pull/754)
* [OPRUN-4598](https://issues.redhat.com/browse/OPRUN-4598): dynamically resolve catalog image tag from OCP release version [#750](https://github.com/operator-framework/operator-marketplace/pull/750)
* NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.28.3 to 2.29.0 [#751](https://github.com/operator-framework/operator-marketplace/pull/751)
* NO-ISSUE: Bump github.com/onsi/gomega from 1.40.0 to 1.41.0 [#752](https://github.com/operator-framework/operator-marketplace/pull/752)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/4ff8a12f5885e93ffdbd8039f78c7725492f6ffa...03428ca0b0885e297f29fced8be1790444c4d4de)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/e9295c0d0d7caa1eda7cc9f2f3900c64096c943c)

* NO-JIRA: Sync informing EVPN E2Es with upstream naming [#3220](https://github.com/openshift/ovn-kubernetes/pull/3220)
* [OCPBUGS-81326](https://issues.redhat.com/browse/OCPBUGS-81326), [OCPBUGS-84917](https://issues.redhat.com/browse/OCPBUGS-84917): DownStream Merge [05-19-2026] [#3195](https://github.com/openshift/ovn-kubernetes/pull/3195)
* NO-JIRA: Revert "OCPBUGS-61065: Adding ovndb-raft-functions.sh to ovnk image" [#3192](https://github.com/openshift/ovn-kubernetes/pull/3192)
* NO-JIRA: DownStream Merge [05-07-2026] [#3177](https://github.com/openshift/ovn-kubernetes/pull/3177)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/a9a7b4e7538cc49df30ee49ec2c4e2c3b98dffab...e9295c0d0d7caa1eda7cc9f2f3900c64096c943c)


### [prometheus](https://github.com/openshift/prometheus/tree/1f1bc8a1d7d2af0828371c9c876c95365df0c3d7)

* NO-ISSUE: [bot] Bump openshift/prometheus to v3.11.3 [#318](https://github.com/openshift/prometheus/pull/318)
* NO-ISSUE: [bot] Bump openshift/prometheus to v3.11.3 [#317](https://github.com/openshift/prometheus/pull/317)
* [OCPBUGS-62118](https://issues.redhat.com/browse/OCPBUGS-62118): fix TLS client cert rotation when no CA is configured [#312](https://github.com/openshift/prometheus/pull/312)
* [Full changelog](https://github.com/openshift/prometheus/compare/d9a07e053e734f6da2520be60bcd043693c47c54...1f1bc8a1d7d2af0828371c9c876c95365df0c3d7)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/278f5e5ea25af9d05a7c04ea033a880354d471f6)

* [OCPBUGS-83863](https://issues.redhat.com/browse/OCPBUGS-83863): Strip debug symbols from Go binaries [#180](https://github.com/openshift/node_exporter/pull/180)
* [Full changelog](https://github.com/openshift/node_exporter/compare/b1b5423ff3cea86d7f7be9e5f739aaf61df75cdc...278f5e5ea25af9d05a7c04ea033a880354d471f6)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/1916ceb059f500f06e8552f88bf38cd09f9522fd)

* [OCPBUGS-39598](https://issues.redhat.com/browse/OCPBUGS-39598): Remove all duplicate ingress IP addresses in clearPersistedAllocation [#91](https://github.com/openshift/route-controller-manager/pull/91)
* [OCPBUGS-83892](https://issues.redhat.com/browse/OCPBUGS-83892): Update grpc-go and x/net [#88](https://github.com/openshift/route-controller-manager/pull/88)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/624742d93f3a7885cf7f70985f1e23ff60da580d...1916ceb059f500f06e8552f88bf38cd09f9522fd)


### [tests](https://github.com/openshift/origin/tree/b1497b7eb0e558f8933943c55c473d2d9326ad4f)

* [OCPBUGS-85486](https://issues.redhat.com/browse/OCPBUGS-85486): Add client retry to critical monitor test setup to avoid transient et… [#31249](https://github.com/openshift/origin/pull/31249)
* NO-JIRA: upkeep: add exception for expected disruption during tnf upgrade [#31206](https://github.com/openshift/origin/pull/31206)
* [OCPEDGE-2436](https://issues.redhat.com/browse/OCPEDGE-2436): Add is_standalone learner check test for two-node etcd disruption suite [#30950](https://github.com/openshift/origin/pull/30950)
* [OCPBUGS-86044](https://issues.redhat.com/browse/OCPBUGS-86044): Use generated names in oc adm policy SCC test [#31221](https://github.com/openshift/origin/pull/31221)
* NO-ISSUE: Automated - Update synthetic test data [#31233](https://github.com/openshift/origin/pull/31233)
* [OCPBUGS-86473](https://issues.redhat.com/browse/OCPBUGS-86473): Consolidate audit log must-gather tests to reduce parallel downloads and master node CPU pressure [#31200](https://github.com/openshift/origin/pull/31200)
* [MCO-2296](https://issues.redhat.com/browse/MCO-2296): Remove OSImageStreams v1 replace [#31256](https://github.com/openshift/origin/pull/31256)
* [TRT-2617](https://issues.redhat.com/browse/TRT-2617): Fix CPU metrics monitor node role lookup [#31252](https://github.com/openshift/origin/pull/31252)
* [MCO-2296](https://issues.redhat.com/browse/MCO-2296): OSImageStreams v1 promotion [#31211](https://github.com/openshift/origin/pull/31211)
* NO-JIRA: Clarify why Envoy pods have no CPU or memory limit [#31145](https://github.com/openshift/origin/pull/31145)
* [TRT-2673](https://issues.redhat.com/browse/TRT-2673): Filter NoExecuteTaintManager disruption from backend-disruption.json [#31248](https://github.com/openshift/origin/pull/31248)
* [OCPBUGS-86221](https://issues.redhat.com/browse/OCPBUGS-86221): update authentication operator conditions to no longer expect WellKnownReadyProgressing [#31236](https://github.com/openshift/origin/pull/31236)
* NO-JIRA: Remove fixed bugs on CO conditions (2) - 2nd try [#31207](https://github.com/openshift/origin/pull/31207)
* [AGENT-1527](https://issues.redhat.com/browse/AGENT-1527): Fix comparison of InternalReleaseImage to mirror [#31250](https://github.com/openshift/origin/pull/31250)
* Revert "CLID-589: add oc-mirror to extensionBinaries" [#31238](https://github.com/openshift/origin/pull/31238)
* [OCPBUGS-86017](https://issues.redhat.com/browse/OCPBUGS-86017): Extend image-registry single replica exception to s390x architecture [#31190](https://github.com/openshift/origin/pull/31190)
* [OCPBUGS-82501](https://issues.redhat.com/browse/OCPBUGS-82501): Fix AWS DualStack CI jobs consistently encounter 2 EgressFirewall Test Failures [#31147](https://github.com/openshift/origin/pull/31147)
* [OCPBUGS-84519](https://issues.redhat.com/browse/OCPBUGS-84519): Remove openshift-ovn-kubernetes terminationMessagePolicy exemption [#31159](https://github.com/openshift/origin/pull/31159)
* NO-ISSUE: Restrict test retries to an allowlist of test names [#31222](https://github.com/openshift/origin/pull/31222)
* [OCPBUGS-86611](https://issues.redhat.com/browse/OCPBUGS-86611): Wait for namespace initialization before creating pod [#31225](https://github.com/openshift/origin/pull/31225)
* [CNTRLPLANE-3238](https://issues.redhat.com/browse/CNTRLPLANE-3238): pathological events: bump KMS ScalingReplicaSet threshold to 120 [#31209](https://github.com/openshift/origin/pull/31209)
* NO-JIRA: Skip CO condition tests on SNO [#30775](https://github.com/openshift/origin/pull/30775)
* [CLID-589](https://issues.redhat.com/browse/CLID-589): add oc-mirror to extensionBinaries [#31006](https://github.com/openshift/origin/pull/31006)
* [OCPBUGS-59500](https://issues.redhat.com/browse/OCPBUGS-59500): pathologicalevents: fix HPA FailedGetResourceMetric allowlist [#31213](https://github.com/openshift/origin/pull/31213)
* [OCPBUGS-86225](https://issues.redhat.com/browse/OCPBUGS-86225): fix PDB AlwaysAllow test failure on IPv6-primary dualstack clusters [#31196](https://github.com/openshift/origin/pull/31196)
* [CNTRLPLANE-3428](https://issues.redhat.com/browse/CNTRLPLANE-3428): tls: add cluster-authentication-operator and operands to tested compo… [#31208](https://github.com/openshift/origin/pull/31208)
* NO-ISSUE: Automated - Update synthetic test data [#31192](https://github.com/openshift/origin/pull/31192)
* [OCPBUGS-86328](https://issues.redhat.com/browse/OCPBUGS-86328): if rhcos9-10 in the job name,update jobname test [#31198](https://github.com/openshift/origin/pull/31198)
* [OCPNODE-4535](https://issues.redhat.com/browse/OCPNODE-4535): Automate OCP-44820 change container registry config [#31182](https://github.com/openshift/origin/pull/31182)
* [OCPBUGS-85363](https://issues.redhat.com/browse/OCPBUGS-85363): Fixed flakiness of oc set image E2E tests [#31191](https://github.com/openshift/origin/pull/31191)
* [OCPNODE-4125](https://issues.redhat.com/browse/OCPNODE-4125): fix imagepolicy image config testcase [#31185](https://github.com/openshift/origin/pull/31185)
* [CNTRLPLANE-3428](https://issues.redhat.com/browse/CNTRLPLANE-3428): tls fix HyperShift guest-side CO wait and Custom profile handling [#31194](https://github.com/openshift/origin/pull/31194)
* [TRT-2669](https://issues.redhat.com/browse/TRT-2669): Revert #31112 "NO-JIRA: Remove fixed bugs on CO conditions (2)" [#31201](https://github.com/openshift/origin/pull/31201)
* [AGENT-1517](https://issues.redhat.com/browse/AGENT-1517): refactored the logic to filter IRI related MachineConfigs [#31179](https://github.com/openshift/origin/pull/31179)
* [OPRUN-4569](https://issues.redhat.com/browse/OPRUN-4569): test: remove OLMv1 OTE exceptions; scope OLMv0 exceptions to SNO [#31172](https://github.com/openshift/origin/pull/31172)
* NO-JIRA: Remove fixed bugs on CO conditions (2) [#31112](https://github.com/openshift/origin/pull/31112)
* [OCPBUGS-85378](https://issues.redhat.com/browse/OCPBUGS-85378): Fix OCP E2E test - Object count when exceed openshift.io/image-tags will ban to create new image references in the project [#31155](https://github.com/openshift/origin/pull/31155)
* NO-ISSUE: Automated - Update synthetic test data [#31181](https://github.com/openshift/origin/pull/31181)
* NO-JIRA: Fix flaky storage-admin e2e test [#31180](https://github.com/openshift/origin/pull/31180)
* [CNTRLPLANE-3428](https://issues.redhat.com/browse/CNTRLPLANE-3428): tls: introduce narrow target types and migrate test functions [#31160](https://github.com/openshift/origin/pull/31160)
* Revert "OCPBUGS-85363: Fixed flakiness of oc set image E2E tests" [#31188](https://github.com/openshift/origin/pull/31188)
* [Full changelog](https://github.com/openshift/origin/compare/38c4fba02e693db87295168e77400fab917555a3...b1497b7eb0e558f8933943c55c473d2d9326ad4f)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/c58b89ae0514f5f416f9595d876d598757181524)

* [OCPBUGS-53005](https://issues.redhat.com/browse/OCPBUGS-53005): Remove references to master branch [#111](https://github.com/openshift/cluster-api-provider-vsphere/pull/111)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/536d5e4df16719b1ce87093cddf93dd5c5f5c485...c58b89ae0514f5f416f9595d876d598757181524)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/a47406147d6d009b0f75b69363172e928ac2abb4)

* NO-ISSUE: Bump spdystream to v0.5.1 [#181](https://github.com/openshift/vmware-vsphere-csi-driver/pull/181)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/cf21e1211225e3cf6baa27bdb12ae86c5c13db39...a47406147d6d009b0f75b69363172e928ac2abb4)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/d5e2893e95d6aef8467730a370cca199638327b1)

* [OCPBUGS-79057](https://issues.redhat.com/browse/OCPBUGS-79057): Fixed compute cluster permission logic for single fd with read-only custom resourcepool [#220](https://github.com/openshift/vsphere-problem-detector/pull/220)
* [OCPBUGS-56274](https://issues.redhat.com/browse/OCPBUGS-56274): add datacenter consistency check [#212](https://github.com/openshift/vsphere-problem-detector/pull/212)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/842aed3df97005839ef5deaf560abbe6486b9daf...d5e2893e95d6aef8467730a370cca199638327b1)