4.19.38

PullSpec:

quay.io/openshift-release-dev/ocp-release:4.19.38-multi

Qualifiers (status api): None

Tests:

Informing jobs
- e2e-aws-ovn-multi-x-ax Succeeded (1 retry) periodic-ci-openshift-multiarch-main-nightly-4.19-ocp-e2e-aws-ovn-multi-x-ax
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- e2e-aws-ovn-multi-x-x Succeeded periodic-ci-openshift-multiarch-main-nightly-4.19-ocp-e2e-aws-ovn-multi-x-x
- hypershift-e2e-aks-multi-x-ax Failed (1 retry) periodic-ci-openshift-hypershift-release-4.19-periodics-e2e-aks-multi-x-ax
  - Attempt 1 Failed
  - Attempt 2 Failed

Upgrades from:

Untested upgrades: 4.18.19, 4.18.20, 4.18.21, 4.18.22, 4.18.23, 4.18.24, 4.18.25, 4.18.26, 4.18.27, 4.18.28, 4.18.29, 4.18.30, 4.18.31, 4.18.32, 4.18.33, 4.18.34, 4.18.35, 4.18.36, 4.18.37, 4.18.38, 4.18.39, 4.18.40, 4.18.41, 4.18.42, 4.18.43, 4.18.44, 4.18.45, 4.18.46, 4.18.47, 4.18.48, 4.19.0, 4.19.1, 4.19.10, 4.19.11, 4.19.12, 4.19.13, 4.19.14, 4.19.15, 4.19.16, 4.19.17, 4.19.18, 4.19.19, 4.19.2, 4.19.20, 4.19.21, 4.19.22, 4.19.23, 4.19.24, 4.19.25, 4.19.26, 4.19.27, 4.19.28, 4.19.29, 4.19.3, 4.19.30, 4.19.31, 4.19.32, 4.19.33, 4.19.34, 4.19.35, 4.19.36, 4.19.37, 4.19.4, 4.19.5, 4.19.6, 4.19.7, 4.19.8, 4.19.9

4.22.4 - Failed Failed

Loading changelog, this may take a while ...

Changes from 4.22.4

Created: 2026-07-10 09:03:37 +0000 UTC

Image Digest: sha256:6bb4414e2067eb03a9d0e3a9dbd946a4e76a72a6a903a3df571f0fb18f8b5346

Release 4.19.38 was created from quay.io/openshift-release-dev/ocp-release-nightly@sha256:3de43d8dbba72c827e0f5090d4d39e84346d7e69b1f552b796c6ed0c074bdf81

Components

Kubectl upgraded from 1.35.2 to 1.32.1
Kubernetes upgraded from 1.35.5 to 1.32.13
Kubernetes Tests upgraded from 1.35.1 to 1.32.8
Red Hat Enterprise Linux CoreOS upgraded from 10.2.20260630-0 to 9.6.20260702-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
AWSClusterHostedDNSInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AWSDedicatedHosts (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AWSDualStackInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AWSEuropeanSovereignCloudInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AWSServiceLBNetworkSecurityGroup (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AdditionalStorageConfig (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AzureClusterHostedDNSInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AzureDedicatedHosts (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AzureDualStackInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AzureMultiDisk (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
BootImageSkewEnforcement (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
CBORServingAndStorage (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
CRDCompatibilityRequirementOperator (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
CRIOCredentialProviderConfig (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClientsAllowCBOR (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClientsPreferCBOR (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIComputeInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIControlPlaneInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagement (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementAzure (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementBareMetal (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementGCP (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementOpenStack (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementPowerVS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementVSphere (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterUpdateAcceptRisks (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterUpdatePreflight (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ConfidentialCluster (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ConfigurablePKI (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
DRAPartitionableDevices (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
EVPN (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
EventTTL (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ExternalOIDCExternalClaimsSourcing (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ExternalOIDCWithUpstreamParity (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ExternalSnapshotMetadata (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GCPCustomAPIEndpointsInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GCPDualStackInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GatewayAPIWithoutOLM (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
HyperShiftOnlyDynamicResourceAllocation (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ImageModeStatusReporting (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
IrreconcilableMachineConfig (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
KMSEncryption (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MachineAPIMigrationAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MachineAPIMigrationOpenStack (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MachineAPIMigrationVSphere (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ManagedBootImagesCPMS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MultiDiskSetup (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MutableCSINodeAllocatableCount (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MutatingAdmissionPolicy (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NetworkConnect (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NewOLMBoxCutterRuntime (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NewOLMConfigAPI (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NewOLMWebhookProviderOpenshiftServiceCA (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NoOverlayMode (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NoRegistryClusterInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
OSStreams (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
OnPremDNSRecords (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ProvisioningRequestAvailable (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
StoragePerformantSecurityPolicy (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
TLSAdherence (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereMixedNodeEnv (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereMultiVCenterDay2 (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
DualReplica (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Disabled (Changed)	Disabled (Changed)
SigstoreImageVerificationPKI (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Disabled (Changed)	Disabled (Changed)
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
ImageStreamImportMode (3 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
InsightsConfig (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
InsightsOnDemandDataGather (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
SigstoreImageVerification (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
UpgradeStatus (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
UserNamespacesPodSecurityStandards (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
UserNamespacesSupport (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
VSphereHostVMGroupZonal (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
VSphereMultiDisk (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
VSphereMultiNetworks (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
ExternalOIDC (0 tests)	Enabled	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
AWSEFSDriverVolumeMetrics (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
AdditionalRoutingCapabilities (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
AdminNetworkPolicy (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
AlibabaPlatform (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
BareMetalLoadBalancer (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
CPMSMachineNamePrefix (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
ChunkSizeMiB (5 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
CloudDualStackNodeIPs (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
DisableKubeletCloudCredentialProviders (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
GCPLabelsTags (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
GatewayAPI (6 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
GatewayAPIController (5 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
HardwareSpeed (3 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
IngressControllerLBSubnetsAWS (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
MachineConfigNodes (13 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
ManagedBootImages (5 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
ManagedBootImagesAWS (5 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
MultiArchInstallAWS (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
MultiArchInstallGCP (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
NetworkDiagnosticsConfig (6 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
NetworkLiveMigration (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
NetworkSegmentation (56 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
NodeDisruptionPolicy (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
OnClusterBuild (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
PersistentIPsForVirtualization (12 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
PinnedImages (5 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
PrivateHostedZoneAWS (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
RouteAdvertisements (11 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
SetEIPForNLBIngressController (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToJSON (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
VSphereDriverConfiguration (5 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
VSphereMultiVCenters (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
ValidatingAdmissionPolicy (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
ClusterVersionOperatorConfiguration (0 tests)	Disabled	Disabled	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Disabled (Changed)	Disabled (Changed)
KMSEncryptionProvider (0 tests)	Disabled	Disabled	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled (Changed)	Enabled (Changed)
SELinuxMount (6 tests)	Disabled	Disabled	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Disabled (Changed)	Disabled (Changed)
DynamicResourceAllocation (0 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
GCPClusterHostedDNS (0 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
HighlyAvailableArbiter (0 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
InsightsConfigAPI (0 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
InsightsRuntimeExtractor (0 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
MachineAPIProviderOpenStack (0 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
NodeSwap (0 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
PlatformOperators (0 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
ProcMountType (0 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
SELinuxChangePolicy (0 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)
TranslateStreamCloseWebsocketRequests (0 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
VolumeAttributesClass (30 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)

New images

cluster-kube-cluster-api-operator git 21f85831 sha256:31a746abce5a2b38442d889eec64b3f5397f732d2bdcfcfd1301680f3ccd37b5
libvirt-machine-controllers git be869073 sha256:2a7df96accf76f27bb5c39e060b01975f328199448bbcd6876ea6c743a66ac73

Removed images

agent-installer-ui
aws-node-termination-handler
csi-external-snapshot-metadata
rhel-coreos-10
rhel-coreos-10-extensions
volume-data-source-validator

agent-installer-api-server

OCPBUGS-94046: Add sourcedir /run/chrony-dhcp to generated chrony.conf #10545
MGMT-23439: Pin gotestsum to v1.12.2 for Go 1.21 compatibility #10020
OCPBUGS-74630: Retry incomplete cluster registration in ABI #8809
And 8 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-utils

OCPBUGS-68295: bump github.com/sirupsen/logrus to v1.9.3 #236
OCPBUGS-60938: Update ISOBuilder OCP 4.19 Dev Preview Release notes #142
OCPBUGS-60107: Add ISOBuilder Release notes #137
OCPBUGS-59731: add back NHR and FAR operators #131
OCPBUGS-58285: OVE ISOBuilder works only if and when the script is ex… #121
OCPBUGS-59254: invalid default channel configuration for package “mtv… #126
OCPBUGS-59666: Enable ‘q’ and ‘c’ hotkeys for quit and configure network #129
OCPBUGS-57922: Update operators list in ISOBuilder #118
OCPBUGS-57420: Bump iso-builder appliance dependency #115
OCPBUGS-57301: Update mtv-operator to version used in 4.19 catalog #112
OCPBUGS-56991: OVE isobuilder fails on CentOS Stream 9 due to missing… #104
ART-13081: append .0 to go.mod version #106
OCPBUGS-56690: Fix nmtui redirection after quit #97
OCPBUGS-56810: bump appliance to 936210 #99
OCPBUGS-56759: ISOBuilder- Remove default password for nodes #100
OCPBUGS-56490: Add operator CRs post-install in OVE build script #95
OCPBUGS-56216: OVE builder: Remove RHEL9 image from additionalImages #92
OCPBUGS-56116: configure the channel for each OLM operators #90
OCPBUGS-55793: Use internal image registry #87
OCPBUGS-55761: Include RHEL 9 guest image to support VM launches via … #85
Full changelog

apiserver-network-proxy

ART-13081: append .0 to go.mod version #79
Full changelog

aws-cluster-api-controllers

OCPBUGS-61794: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #568
OCPBUGS-59241, OCPBUGS-59242: bump github.com/golang/glog to v1.2.5 #558
OCPBUGS-55998: Update manifests to remove reliance on v1beta1 admission registration #552
Full changelog

aws-ebs-csi-driver

OCPBUGS-82794: Address CVE-2026-35469 #330
OCPBUGS-80386: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.75.1-sec.1 #312
OCPBUGS-72365: Fix incomplete vendor/ after vendoring #295
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-80489: Bump google.golang.org/grpc #541
OCPBUGS-84242: [release-4.19] adds the csi-external-resizer to the image-references #546
OCPBUGS-56898: Fix Cinder, Manila driver metrics #386
OCPBUGS-63559: Add RBAC ClusterRole and Binding for driver node #455
OCPBUGS-62926: Add withCABundleDaemonSetHook() to AWS EFS operator #444
OCPBUGS-60595: Bump library-go #420
OCPBUGS-59893: Remove stale conditions #411
OCPBUGS-56527: openstack-cinder: Set –with-topology flag for node driver also #384
Full changelog

aws-kms-encryption-provider

OCPBUGS-80360: Bump google.golang.org/grpc to v1.79.3 #42
OCPBUGS-45666: Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.19 #27
Full changelog

aws-machine-controllers

OCPBUGS-73729: Fix reconciler consistency checks in Update and Exists #165
OCPBUGS-63137: client: re-use a single file for building the session instead of randomly named files #152
OCPBUGS-63137: revert: client: re-use a single file for building the session instead of randomly named files #149
OCPBUGS-63137: client: re-use a single file for building the session instead of randomly named files #147
OCPBUGS-56633: fix: make machineset annotation controller respect paused condition #130
OCPBUGS-55706: Update machine-api-operator pkg with fixes #128
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-80390, OCPBUGS-80391, OCPBUGS-80533: Bump google.golang.org/grpc to v1.79.3 #180
Full changelog

azure-cluster-api-controllers

OCPBUGS-80392: Bump google.golang.org/grpc to v1.79.3 #385
OCPBUGS-59888: Add support to disable CAPZ components through a manager flag #347
OCPBUGS-56100: fix: reuse global TracerProvider #340
OCPBUGS-56962: [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 #339
Full changelog

azure-disk-csi-driver

OCPBUGS-80393: Bump google.golang.org/grpc to v1.79.3 #141
OCPBUGS-78035: add instantAccessDurationMinutes parameter to enable IA snapshots for PremiumV2/UltraSSD disks #129
Full changelog

azure-file-csi-driver

OCPBUGS-80396: Bump google.golang.org/grpc to v1.79.3 #129
OCPBUGS-61975: Rebase to upstream v1.32.3 for OCP 4.19 #103
OCPBUGS-55831: UPSTREAM: 2515: allow deleting cross-subscription snapshots #93
Full changelog

azure-kms-encryption-provider

ART-13081: append .0 to go.mod version #18
Full changelog

azure-machine-controllers

OCPBUGS-65782: Set updateDomainCount to one when faultDomainCount is one #174
OCPBUGS-63578: Support DataDisks on Azure Stack Hub #166
OCPBUGS-56163: [release-4.19] Update virtualmachines service to armcompute/v5 SDK #144
OCPBUGS-56653: Fix failure when attempting to modify immutable availabilitySet #154
Full changelog

azure-service-operator

OCPBUGS-80362: Bump google.golang.org/grpc to v1.79.3 #30
Full changelog

azure-workload-identity-webhook

ART-13081: append .0 to go.mod version #36
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-56962: [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 #45
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-91984: azure: Add field in installconfig to disallow shared access key #10653
OCPBUGS-77051: Update RHCOS-release-4.19 data/data/coreos/rhcos.json to 9.6.20260616-0 #10652
OCPBUGS-79503: Increase size of /var/ostreecontainer mount #10433
OCPBUGS-57323: Power VS: Provide detailed error when entered VPCName cannot be found #9779
OCPBUGS-78496: fix wavelength zone name regex #10391
OCPBUGS-73781: pkg/asset/manifests/azure: save cidr blocks #10216
OCPBUGS-74940: Increase agent-installer pre-network-manager timeout #10284
OCPBUGS-74675: [release-4.19] GCP: skip AI zones #10274
OCPBUGS-74629: add support for NVIDIA H100 and H200 enabled machine series #10270
OCPBUGS-66358: Update the RHCOS 4.19 bootimage metadata to 9.6.20260112-0 #10248
OCPBUGS-68296: [4.19] uplift logrus #10165
OCPBUGS-65610: Azure UPI ARM template: use storageAccountId #10151
OCPBUGS-63437: vSphere 7 deprecation #10026
OCPBUGS-66999: Use separate tmpfs for ostree checkout on live ISO #10153
OCPBUGS-65512: Remove pending items on gcp no-op #10074
Revert “OCPBUGS-65587: Update the RHCOS 4.19 bootimage metadata to 9.6.20251113-0” #10094
OCPBUGS-65587: Update the RHCOS 4.19 bootimage metadata to 9.6.20251113-0 #10085
OCPBUGS-63634: Update the RHCOS 4.19 bootimage metadata to 9.6.20251023-0 #10038
OCPBUGS-63702: Prevent duplicate noProxy when adding nodes #10045
OCPBUGS-62981: Catch gcp destroy cases where the operation is nil #10013
OCPBUGS-62159: Update the RHCOS 4.19 bootimage metadata #9996
OCPBUGS-62911: None: Allow IPv6 Primary DualStack installs on platforms None and External #10008
OCPBUGS-61313: Use less permissive access for /var/lib/etcd for SNO #9927
OCPBUGS-59573: Checking for selected PE retrieved data and returning errors for missing values #9842
OCPBUGS-60832: node-joner ignore error if SSH key was not found #9910
OCPBUGS-61109: Misleading error when confidentialCompute: Enabled #9920
OCPBUGS-60925: Update the RHCOS 4.19 bootimage metadata #9915
OCPBUGS-60652: PowerVS: config variables not honored #9901
OCPBUGS-60666: Azure: change LB and pubic IP skus to Standard #9903
OCPBUGS-59607: Refine check for supported SNO platforms #9843
Revert “Update RHCOS 4.19 bootimage metadata to 9.6.20250811-0” #9906
OCPBUGS-60402: baremetal: always set external v6 URL on dualstack #9879
OCPBUGS-58905: Update RHCOS 4.19 bootimage metadata to 9.6.20250811-0 #9888
OCPBUGS-56963: Make swift containers removal not fatal for UPI. #9765
OCPBUGS-58403: When AWS_PROFILE is invalid ask for credentials #9829
OCPBUGS-58073: Refactor removing loadbalancer in OpenStack. #9808
OCPBUGS-58263: allow to deploy single nodes with UPI #9812
OCPBUGS-57901: vSphere - remove unit tests using nip.io #9802
OCPBUGS-58060: MCO: consider custom AMI for edge compute machine pool #9807
OCPBUGS-56020: AWS Destroy use AWS SDK v2 #9703
OCPBUGS-57394: Prompt User for AWS Creds when none are found #9782
OCPBUGS-57137: Revert “CORS-3883: Remove user-assigned identity from ARM template” #9771
OCPBUGS-57039: ensure ctrplane nodes can access bootstrap MCS #9768
OCPBUGS-56826: update the punctuation #9755
OCPBUGS-56372: Added better logging for vSphere destroy #9719
OCPBUGS-56832: add unit tests for vsphere VIPS/machinenetworks population #9757
OCPBUGS-56811: Update Control Plane replica validation for Single Node OpenShift #9756
MGMT-20702, OCPBUGS-56762: Avoid duplicate machine networks #9745
OCPBUGS-55995: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9701
OCPBUGS-56712: add the VM types that the install pass into the tested_instance_types #9730
OCPBUGS-56646: Update RHCOS 4.19 bootimage metadata to 9.6.20250523-0 #9742
OCPBUGS-56595: [release-4.19] OCPBUGS-56567: default Azure to create VM user-assigned identities #9735
OCPBUGS-55068: Update RHCOS 4.19 bootimage metadata to 9.6.20250513-0 #9721
OCPBUGS-56006: [release-4.19] CORS-3634, CORS-3771, CORS-3772: Azure doc: add support for Lsv4, Lasv4, Dxv6, NDs and NV series #9702
OKD-251: Update SCOS 4.19 bootimage metadata to 9.0.20250510-0 #9714
OCPBUGS-56061: fixes to get shellcheck to pass #9705
OCPBUGS-56140: apply fixes for yaml-lint errors #9710
OCPBUGS-56075: Pre-create password files for agent installer OVE #9707
OCPBUGS-55957: Remove Terraform & Altinfra Build Artifacts #9698
OCPBUGS-55909: Apply defaults then validate confidentialCompute #9695
OCPBUGS-55731: azure stack: switch cloud provider to standard lb #9690
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

baremetal-operator

OCPBUGS-87966: Fix preprovisioning network Secret lifecycle during BMH deletion #494
OCPBUGS-88039: Fix invalidDNSNameinvalidipv6 test #496
OCPBUGS-59133: Unblock BMH direct deletion when detached annotation is present #423
OCPBUGS-56765: Make firmware update handle only a subset of Spec.Updates #420
OCPBUGS-56026: Redfish: correctly handle missing system ID #415
Full changelog

baremetal-runtimecfg

OCPBUGS-60110: Re-add ENABLE_NODEIP_DEBUG env var #365
OCPBUGS-57781: iptables: Switch PREROUTING REDIRECT rule to DNAT instead #352
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-77802: Makefile: Strip debugging symbols by default #2217
OCPBUGS-65757: pkg/cli/admin/upgrade: Tighten force warnings #2146
OCPBUGS-65594: fix(must-gather): do not set node affinity if nodename is set #2143
OCPBUGS-64585: Help with must-gather scheduling through suggesting preferance of nodes #2124
OCPBUGS-59487: adm, inspect, ns: Collect UserDefinedNetwork CRs #2061
OCPBUGS-58077: Return error in case of error #2052
OCPBUGS-56905: avoid transfering permissions when copying artifacts from node-joiner pod #2032
OCPBUGS-56511: Replace colon to hypen in the filename while extracting tar on Windows #2024
OCPBUGS-56203: Adding sos.conf file for default sos config into the tools image #2020
Full changelog

cloud-credential-operator

OCPBUGS-80400: Bump google.golang.org/grpc to v1.79.3 #1023
OCPBUGS-74547: Resolve nil pointer exception in hasResourceTags #971
OCPBUGS-65799: ccoctl azure: retry custom role creation on consistency errors #949
OCPBUGS-65478: ccoctl: use pagination when listing resources in aws #946
OCPBUGS-63547: ccoctl: add public-key-file flag to create-all #937
OCPBUGS-60970: ccoctl: aws to use proper issuer url on subsequent runs #906
OCPBUGS-60617: ccoctl azure dnszone-resource-group-name now optional #900
OCPBUGS-59401: github.com/golang/glog v1.2.5 #890
OCPBUGS-58246: ccoctl: only add owned tag to azure resources on create #881
OCPBUGS-55798: Sync OpenStack CA Bundles from legacy location #866
OCPBUGS-56978: Azure: resolve nil pointer exception when role assignment exists #870
OCPBUGS-55903: Render: configure proxy on bootstrap static pod #857
OCPBUGS-56054: golang.org/x/net v0.38.0 #858
Full changelog

cloud-network-config-controller

OCPBUGS-65513: Fix capacity calculation #190
OCPBUGS-63753: Change the capacity struct from int to ptrOfInt #186
Full changelog

cluster-authentication-operator

OCPBUGS-65602: set appropriate rolling update settings #809
Full changelog

cluster-autoscaler

OCPBUGS-78697: allow clusterapi provider to skip paused resources #412
OCPBUGS-63676: update node info processors to include unschedulable nodes #392
OCPBUGS-63603: refactor cloud provider options #388
OCPBUGS-63455: Fixes histograms becoming empty after loaded from checkpoints #395
OCPBUGS-60900: revert openshift replica fix #374
OCPBUGS-59638: fix checkpoint gc of unknown recommenders #366
Full changelog

cluster-autoscaler-operator

OCPBUGS-73954: Add rbac for volumeattachments #359
Full changelog

cluster-baremetal-operator

OCPBUGS-78457: Explicitly set the ReadOnlyRootFilesystem flag to false #574
OCPBUGS-78704: Update kubebuilder tools to more latest version #578
OCPBUGS-63134: Always have a service for ironic-api port #512
OCPBUGS-60286: Remove webhookport (9447) as HostPort #498
OCPBUGS-57504: Treat ResourceNotFound as non-fatal #484
OCPBUGS-56644: Allow provisioningIP when network disabled #474
Full changelog

cluster-capi-controllers

OCPBUGS-80401: Bump google.golang.org/grpc to v1.79.3 #295
OCPBUGS-55998: Regenerate manifests to drop usage of v1beta1 admissionregistration #237
Full changelog

cluster-capi-operator

OCPBUGS-80405: Bump google.golang.org/grpc to v1.79.3 #546
NO-JIRA: Allow sustaining engineering to self serve dependency updates #557
OCPBUGS-59228, OCPBUGS-59229: fix: clusteroperator: do not update status.relatedobjects if only order changed #332
OCPBUGS-57449: mapi2capi: Create new machine template when changing MAPI providerSpec #317
OCPBUGS-56776: fix: ensure CAPI machineset is created not paused when authoritative #304
OCPBUGS-56714: fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller #305
OCPBUGS-56633: fix: watch CAPI resources in the migration controllers #303
OCPBUGS-56722: MachineSet deletion logic #302
OCPBUGS-56105, OCPCLOUD-2893: Add related objects to must-gather config #296
OCPBUGS-56055: fix: machine: propagate non-authoritative deletion #294
OCPBUGS-55998: Should not use v1beta1 of the AdmissionRegistration API group #291
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63165: ccm: disable unused secure-serving port and webhook #420
OCPBUGS-56788: Fix config-sync-controller logging #390
OCPBUGS-60950: Default cloud.conf if no configmap is found #412
OCPBUGS-59847: Adds service for cloud-controller-manager #402
OCPBUGS-59847: Update service selector to match deployment label #401
Full changelog

cluster-config-api

OCPBUGS-68378: Add HTTPKeepAliveTimeout to IngressController API #2627
OWNERS: update approvers/reviewers #2624
OCPBUGS-66984: Introduce ClosedClientConnectionPolicy to IngressController API #2616
CNTRLPLANE-1979: Promote streaming list encoding to Default #2597
NO-JIRA: Promote streaming list encoding to Default on Hypershift. #2559
CNTRLPLANE-1609: Add feature gates for StreamingCollectionEncoding #2517
OCPBUGS-62155: Add ‘AGE’ print column to MachineConfigNode object #2500
OCPBUGS-61096: Add default value for MachineHealthCheck’s maxUnhealthy to the description #2464
MCO-1766: Promote PinnedImageSets feature gate to default #2377
MCO-1720: Promote MachineConfigNode feature gate to default #2376
CORENET-6148: Promote RouteAdvertisements feature gate to default feature set #2425
OCPBUGS-60414: MachineOSConfig name should match MachineConfigPool #2449
Update crd-schema.json to release 1.33 branch #2447
OCPBUGS-56773: disable psa for 4.19 #2346
OCPBUGS-56761: Revert v1alpha1 removal #2345
OCPBUGS-56407: Fix validation for Resource field in MOSB API #2329
Full changelog

cluster-etcd-operator

OCPBUGS-85275: Wait for revision stability before removing etcd members #1613
OCPBUGS-78353: Prefer to remove members where they have another healthy machine in the same failure domain index #1565
OCPBUGS-74628: Add priority field to prevent early shutdown #1539
OCPBUGS-63338: Ensure revision.json persists on ungraceful shutdown #1502
OCPBUGS-61019: add individual context to the health check #1475
OCPBUGS-60443: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1472
OCPBUGS-59802: add missing informer syncs #1454
OCPBUGS-59285: fix ordering on bootstrap IP selection #1446
OCPBUGS-45731: Updating cluster-etcd-operator-container image to be consistent with ART for 4.19 #1376
OCPBUGS-59313: add missing ports to svc and pod spec #1447
OCPBUGS-57956: feat: update logic to list arbiter nodes #1437
OCPBUGS-57490: Comply with OCP pod standards for TNF jobs #1434
OCPBUGS-56806: increase tnf job timeouts #1427
OCPBUGS-56109: adjust alerts according to platform #1423
OCPBUGS-55691: Remove ‘meta’ keyword from pcs resource create command #1420
Full changelog

cluster-image-registry-operator

OCPBUGS-60517: fix(azure): resolve credential caching issues around UAMI support #1243
OCPBUGS-53872: bump github.com/golang-jwt/jwt #1214
OCPBUGS-56363: bump golang.org/x/oauth2 #1207
Full changelog

cluster-ingress-operator

OCPBUGS-86716: Add configuration override for X-SSL strip #1476
OCPBUGS-65723: IngressOperator not exposing some metrics for degraded… #1308
OCPBUGS-68378: Implement HTTPKeepAliveTimeout tuning option #1323
NO-JIRA: Add new NID team members to OWNERS [release-4.19] #1318
OCPBUGS-66984: Implement ClosedClientConnectionPolicy field #1320
NE-2102: Bump to OSSM 3.1.0 and Istio 1.26.2 #1264
NO-JIRA: [release-4.19] docs - correct Istio version format in ossm-overrides.md #1255
OCPBUGS-60204: Update GatewayAPI test to check if deployment has 1 or more pod #1260
NE-2109: Add OSSM channel and version override annotations #1252
NE-2105: desiredIstio: Enable GIE if InferencePool found #1251
NE-2103: Bump to OSSM 3.0.1 and Istio 1.24.4 #1244
OCPBUGS-58394: desiredIstio: Do not enable a default PDB #1241
OCPBUGS-56213: Check capabilities before watching OLM resource #1233
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-83857: Allow setting the oauthMetadata when auth type is None #2118
OCPBUGS-74628: Add priority field to prevent early shutdown #1959
OCPBUGS-65525: OpenShift cluster got degraded after rotating the kube-apiserver-service-network-signer cert #1964
Revert “[release-4.19] OCPBUGS-65560: Optimistically update Kube Server and Client CA bundles” #1963
OCPBUGS-63342: [release-4.19] Revert “Revert “OCPBUGS-58116: certregenerationcontroller: start configInformers #1945
OCPBUGS-60682: Optimistically update Kube Server and Client CA bundles #1920
OCPBUGS-60121: [release-4.19] Set goaway chance to 0.001 #1887
OCPBUGS-60677: certrotation: ensure that all rotated secrets/configmaps have RefreshOnlyWhenExpired set #1901
OCPBUGS-60495: certrotationcontroller: extend node-system-admin-signer lifetime #1897
OCPBUGS-59957: Add missing service ports to apiserver service #1880
Revert “[release-4.19] OCPBUGS-58116: certregenerationcontroller: start configInformers again” #1867
OCPBUGS-58116: certregenerationcontroller: start configInformers again #1861
OCPBUGS-56160: Change validity / refresh for some certs which should not be affected by dev cycle rotation change #1841
OCPBUGS-56266: SCC: add hostmount-anyuid-v2 #1844
OCPBUGS-55709: bump library-go to bring in updated audit policies #1840
OCPBUGS-45911: revert dev cert rotation #1835
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-64687: Add priority field to prevent early shutdown #893
OCPBUGS-60682: Throttle resourcesynccontroller on pairs with dual writers. #884
OCPBUGS-60682: certrotationcontroller: set RefreshOnlyWhenExpired for CA bundle #861
OCPBUGS-60132: Missing endpoint slices for open ports the operator uses #853
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #621
OCPBUGS-74628: Add priority field to prevent early shutdown #609
Full changelog

cluster-machine-approver

OCPBUGS-63586: port 9193 need to be internal and port 9194 need to have a service #281
Full changelog

cluster-monitoring-operator

OCPBUGS-86994: increase lookup interval #2948
OCPBUGS-77273: AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change #2834
OCPBUGS-67167: Add the collection of MTV migration metrics #2773
OCPBUGS-67003: make CMO Upgradeable=false if invalid Prometheus externalLabels are used #2775
OCPBUGS-62830: Remove cluster from non-multicluster dashboards #2760
OCPBUGS-63236: Remove AlertManager endpoints when disabled #2716
OCPBUGS-64578: Fix KSM deny-list typo #2730
OCPBUGS-63409: chore(prometheus/remotewrite): [release-4.19] clarify that the in-cluster proxy env vars set in prometheus container can be used in all configs that support proxyConfig.proxyFromEnvironment #2722
OCPBUGS-63197: add flag –watch-referenced-objects-in-all-namespaces to prometheus-operator #2678
OCPBUGS-62965, OCPBUGS-62966, OCPBUGS-62967, OCPBUGS-62968, OCPBUGS-62969: [Backport] non-HA alert cases #2709
OCPBUGS-62752: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.19 #2697
OCPBUGS-62453: test: remove image registry e2e tests #2690
OCPBUGS-61486: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2666
OCPBUGS-59932: operator: increase wait time till degraded to max 4 times 5m #2629
OCPBUGS-57185: chore(alerts): adjust PrometheusPossibleNarrowSelectors description and add link to to-be-added runbook #2609
OCPBUGS-55737: [release-4.19] MON-4200: disable –auto-gomemlimit for Prometheus on SNO until we can ensure it won’t result in excessive CPU usage #2597
Full changelog

cluster-network-operator

OCPBUGS-84177: Handle zero-worker HyperShift clusters in daemonset rollout [4.19 backport] #2974
OCPBUGS-85404: Remove duplicated openssl parameter #3003
OCPBUGS-84201: wait for patch port to apply drop garp flows #2971
OCPBUGS-84143: fix(hypershift): use net.JoinHostPort for URL construction #2969
OCPBUGS-77150: Add config override for openflow-probe #2964
CORENET-6311, OCPBUGS-74205: Skip running _stackmanager for libreswan 5.3+ #2885
OCPBUGS-67208: Fix whereabouts-token-watcher DaemonSet improvements #2857
OCPBUGS-70328: Tweak iptables-alerter to try to avoid crictl bug #2867
OCPBUGS-57134: whereabouts-config is a reserved name for user interaction. #2719
OCPBUGS-63447, OCPBUGS-63448: Annotate whereabouts-controller #2822
OCPBUGS-62670: Add drop flows for GARP #2809
OCPBUGS-61460: Set maxUnavailable 10% on MultiNetworkPolicy DS #2794
OCPBUGS-61185: Consume latest OCP API in 4.19 #2790
OCPBUGS-60983: Update CNO reviewers/approvers #2765
OCPBUGS-60761: Allow overriding OVN-Kubernetes configuration #2781
OCPBUGS-60534: Fix multus webhook match condition for spec changes #2777
OCPBUGS-60095: Add release version annotation to whereabouts-controller/whereabouts-token-watcher #2762
OCPBUGS-59645: [release-4.19] BGP related backports #2748
Full changelog

cluster-node-tuning-operator

OCPBUGS-87932: Requeue PerformanceStatus update when status write fails #1543
OCPBUGS-82802: Bump github.com/moby/spdystream from v0.5.0 to v0.5.1 #1533
OCPBUGS-85438: e2e: Add irqbalance StartLimitBurst >= 100 #1514
OCPBUGS-73797: PPC: ghw: filter out namespaces dir #1455
OCPBUGS-63418: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1416
And 9 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-olm-operator

OCPBUGS-80420: Bump google.golang.org/grpc to v1.79.3 #199
OCPBUGS-56825: fix olm.maxOpenShiftVersion float parsing #122
Full changelog

cluster-samples-operator

OCPBUGS-63510: references to github.com/sclorg/django-ex.git now also refer to the branch #656
Full changelog

cluster-storage-operator

OCPBUGS-87095: remove oVirt code from CSO 4.19 #705
OCPBUGS-77007: add vsphere permissions for checking if users is authorized to see metrics #667
OCPBUGS-62667: Move metrics to vsphere driver #631
OCPBUGS-60152: hypershift: add app label to csdriveroperators running in HCP #604
OCPBUGS-56253: sync Azure File permissions with upstream docs #2 #580
Full changelog

cluster-update-keys

NO-ISSUE: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.19 #80
Full changelog

cluster-version-operator

OCPBUGS-70181: OCPBUGS-70181: Unify capitalization when comparing architectures for available updates #1291
NO-ISSUE: hongkai becomes an approver release-4.19 #1285
OCPBUGS-70296: add the ports Field into the CVO’s container spec #1283
OCPBUGS-62868: temporarily disable metrics auth for hypershift clusters #1245
OCPBUGS-55937: Gate 4.19 -> 4.20 upgrade due to admissionregistration.k8s.io/v1beta1 API removal #1193
OCPBUGS-60168: CVO protects /metrics with authorization #1222
OCPBUGS-56771: Fix ImplicitlyEnabledCapabilities #1199
Full changelog

configmap-reloader

ART-13081: append .0 to go.mod version #68
Full changelog

console

OCPBUGS-86454: [release-4.19] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators #16526
OCPBUGS-97966: Fix false positive scheduler degradation caused by user workloads #16725
OCPBUGS-90623: Allow VolumeSnapshot restore when parent PVC is deleted #16661
OCPBUGS-89712: Prevent binary secret data corruption when editing #16640
OCPBUGS-79451: Bump immutable #16324
OCPBUGS-77126: [release-4.19] CVE-2026-26996 Bump minimatch library #16343
OCPBUGS-85308: [release-4.19] Backport OCPBUGS-78439: vsphere settings #16413
OCPBUGS-84772: Add robots.txt policy to console #16378
NO-JIRA: enable multi-architecture yarn builds #16416
OCPBUGS-84271: Fix VolumeSnapshot and VolumeSnapshotContent table sorting #16335
OCPBUGS-81738: Fix editing secrets with mixed text and binary data #16257
OCPBUGS-81736: Migrate InstallPlan components table to PatternFly Table #16256
OCPBUGS-81574: Clean up old session cookies to prevent accumulation #16242
OCPBUGS-81515: Visiting Group Detail Page > RoleBindings will show error #16234
OCPBUGS-78292: Fix infinite recursion in project access form #16130
CONSOLE-5011: migrate to yarn berry #16071
OCPBUGS-76950: “Import from Git” should not force HTTPS/443 for Git providers (GitHub/GitLab/Bitbucket) #16028
OCPBUGS-74464: Bump lodash to latest #15964
OCPBUGS-74341: Do not resolve disabled catalog type extensions #15945
OCPBUGS-70335: OpenShift Console can only show user name instead of full name as the display name #15888
OCPBUGS-72399: Fix Helm chart installation with CA/TLS certificates #15898
OCPBUGS-70135: Update client initialization in checkPackageManifestHandler #15877
OCPBUGS-69677: Spread operand details across 2 col #15859
OCPBUGS-69860: PVC shows negative Available space in OpenShift Console on RHOCP 4 #15866
OCPBUGS-62725: Fixes namespace-scoped operators that were not showing as installed when viewing OperatorHub in “All Projects” mode #15816
OCPBUGS-67361: Disallowed Pipelines-plugin Pipelines navigation section #15839
OCPBUGS-66245: The number of Quick Starts item is wrong #15793
OCPBUGS-66179: Fix unnecessary rerenders with pod-connect #15784
OCPBUGS-62438: Updation of label from edit label doesn’t work #15547
OCPBUGS-65930: Preserve query string in perspective switch + remove dev console folks from reviewers #15760
OCPBUGS-63703: Fix dynamic form spacing and layout issues #15706
OCPBUGS-64834: Preserve path on perspective switch #15697
OCPBUGS-64849: HPA Form View in RHOCP Web Console Incorrectly Requires Both CPU and … #15698
OCPBUGS-64746: Fix Bare Metal Hosts nav item #15687
OCPBUGS-63588: Expose prometheus tenancy label path as a proxy #15645
OCPBUGS-63607: limit node log length to 1000 lines #15647
OCPBUGS-63530: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15642
OCPBUGS-63156: Initialize log package #15610
OCPBUGS-62999: switch to dev perspective for /dev-monitoring #15598
OCPBUGS-59953: fix: Fix negative CPU util graphs #15345
OCPBUGS-62643: bump dompurify to latest #15588
OCPBUGS-62083: /auth/error?error=missing_state&error_type=auth is showing blank page #15523
OCPBUGS-62087: Help dropdown should be closed automatically after tour model opened #15527
OCPBUGS-61821: Refactor PodConnect and Terminal to TypeScript #15503
OCPBUGS-61781: Fix improper DescriptionList refactor #15497
NO-JIRA: Update CHANGELOG in relation to 4.18 plugin SDK package publish #15457
OCPBUGS-60420: QuickStarts Link buttons to other quickstarts are duplicate #15391
OCPBUGS-50571: Make sure CSP violations are only reported to telemetry once per day per browser #15366
OCPBUGS-60279: Remove ancient X-XSS-Protection header #15381
OCPBUGS-60038: Resolving API Version Conflicts in Tekton Pipeline Runs #15354
OCPBUGS-60294: OpenShift Console’s “Start Job” action overrides configured “backoffLimit” to “6” #15382
NO-JIRA: Update CHANGELOG for latest 4.19 plugin SDK package publish #15406
OCPBUGS-60039: Fix i18n string for event stream (again) #15388
OCPBUGS-60039: Fix i18n string for event stream #15355
OCPBUGS-56651: Recognize Detached BMH status #15083
OCPBUGS-58214: Incorrect i18n translations in 4.19 batch #15218
OCPBUGS-59790: Move alertmanager settings route #15331
OCPBUGS-59639: Fixing no resources found message can not be shown completely #15320
OCPBUGS-59810: Default name is comprised of ‘-’ on ‘Add to favorites’ page when language is Korean/Japanese/Chinese. #15333
OCPBUGS-56280: Follow-on fix. Add new “plugins-order” flag to bridge cli args #15168
OCPBUGS-59199: Deleted objects remain in favorites and cause 404 errors #15267
OCPBUGS-59557: add data-test attrs to console plugins table #15305
OCPBUGS-59513: Update model flags when plugins load #15298
OCPBUGS-58331: change ‘/metrics/usage’ endpoint to ‘/api/metrics/usage’ #15273
OCPBUGS-58433: Add the Origin header to the HeaderBlacklist in the co… #15246
OCPBUGS-59315: Not able to launch terminal window from OCP web console due to console plugin conflicts #15280
OCPBUGS-58217: fix missing form styles in Create PVC page + Clone PVC… #15260
OCPBUGS-58183: ContainerResource metric data for HPAs isn’t visible i… #15213
OCPBUGS-58316: Implement sessions in openshift authenticator #15234
OCPBUGS-58375: fix bug where / in console.tab/horizontalNav href breaks navigation #15239
OCPBUGS-58377: fix runtime error when editing HPA using the form #15240
OCPBUGS-58090: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15204
NO-JIRA: Update Console plugin SDK changelogs #15212
OCPBUGS-57390: i18n upload/download routine task - Sprint 270 #15175
OCPBUGS-57755: Add the ability to launch multiple modals with useModal hook #15189
OCPBUGS-57113: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console. #15180
OCPBUGS-57391: OpenShift console PVC clone cannot use B as the unit #15176
OCPBUGS-57384: Update vSphere configuration form to support CM YAML f… #15174
OCPBUGS-56950: UI for search by label is distorted in topology #15111
OCPBUGS-56841: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15100
OCPBUGS-56779: Fix and enable web terminal tests #15097
OCPBUGS-55928: Improving the DevExp for passing the CSP directives to console per flag #15076
OCPBUGS-56693: Expose PodRingSet via Dynamic Plugin SDK #15086
OCPBUGS-57180: Fix ‘/metrics’ endpoint token review to handle interna… #15152
OCPBUGS-57207: Getting “Oh no something went wrong” error message in web console. #15159
OCPBUGS-57319: Add Select project field in import forms #15171
OCPBUGS-57110: fix VirtualizedTable runtime error if sortColumn is no… #15140
OCPBUGS-57105: Fix runtime error when navigating alert actions #15138
OCPBUGS-56470: fix bug where AlertItem is missing info icon #15071
OCPBUGS-57200: Opening Edit Secret modal and saving without changes throws error #15157
OCPBUGS-56764: Fix regression with drawers and modals #15094
OCPBUGS-56475: Enable pipeline tests by installing operator version 1.17 #15073
OCPBUGS-56882: Add initialization link annotation support to csv anno… #15104
OCPBUGS-57183: clarify verbiage for Lightspeed hide button #15151
OCPBUGS-57054: Should show default OpenShift Logo for a theme when there is not custom logo set for the theme. #15123
OCPBUGS-57128: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15145
OCPBUGS-56885: Helm resource list error in console #15105
OCPBUGS-56888: Add flags in console static plugin for all the components of this epic #15106
OCPBUGS-56837: Added developer getting started card in Admin project overview page #15098
OCPBUGS-56987: fix bug where Roles list was displaying invalid data f… #15120
OCPBUGS-56775: Layout of Welcome to the new OpenShift experience! buttons is wonky on mobile #15096
OCPBUGS-56149: Refactor Kebab+ActionsMenu to use PF #15051
OCPBUGS-56413: [knative] Self-provisioner user can not access or create event sources via ODC #15067
OCPBUGS-55941, OCPBUGS-56107: get go mod tidy to pass, bump Console Helm dependencies to 3.17.3 #15032
OCPBUGS-56362: improve description of the custom logos CLI args #15061
OCPBUGS-55979: fix alignment of Getting Started item icons #15040
OCPBUGS-55929: Sample segment sessions #15031
NO-JIRA: Update plugin SDK docs #15074
OCPBUGS-55987: Fix impersonate group action #15041
OCPBUGS-55976: Add patternfly/react-topology to shared modules list of dynamic plugin sdk #15039
OCPBUGS-56077: remove 60 day alert from cluster update modal #15047
OCPBUGS-55972: Wrap ListPageHeader action with a div #15038
OCPBUGS-55961: resolve http Context and Client handling #15036
OCPBUGS-55959: add data-quickstart-id to quick create button #15034
OCPBUGS-55702: fix bug where Critical Alerts section cannot be collapsed #15018
OCPBUGS-55814: Add DEVCONSOLE_PROXY flag #15027
Full changelog

console-operator

OCPBUGS-61879: pluginOrder field should only contain available plugins #1047
OCPBUGS-61119: Consolidate telemetry values oscilation #1037
OCPBUGS-59488: Update downloads deployment configuration to use master node selector #1016
OCPBUGS-59618: Fetch synced CM for the CertificateAuthority issuer + Wire synced OIDC Auth CM to Console #1028
OCPBUGS-56280: Add plugins order to console config #988
OCPBUGS-56761: Revert v1alpha1 removal #991
OCPBUGS-55716: Fix issue where console operator orphans custom logo configmaps in openshift-console namespace #985
OCPBUGS-55842: Lift FeatureGate by bumping openshift/api #986
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-85715: CI Build root image tag sync with ART #238
Full changelog

coredns

OCPBUGS-60246: UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy #148
ART-13081: append .0 to go.mod version #133
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-80490: Bump google.golang.org/grpc #386
OCPBUGS-64812: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into release-4.19 #335
OCPBUGS-58834: CARRY: don’t ignore json files #338
OCPBUGS-57799: Rebase release-4.19 onto release-1.31 #331
OCPBUGS-56027: [cinder-csi-plugin] Don’t report topology capability when –with-topology=False #323
Full changelog

csi-driver-nfs

OCPBUGS-80434: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.75.1-sec.1 to avoid go version bump and fix CVE-2026-33186 #178
Full changelog

csi-external-attacher

OCPBUGS-80435: Bump google.golang.org/grpc to v1.79.3 #104
Full changelog

csi-external-provisioner

OCPBUGS-82806: Address CVE-2026-35469 #140
OCPBUGS-80436: Bump google.golang.org/grpc #129
Full changelog

csi-external-resizer

OCPBUGS-62468: Requeue PVC over PV creation #177
Full changelog

csi-external-snapshotter, csi-snapshot-controller

OCPBUGS-80438, OCPBUGS-80441: Bump google.golang.org/grpc to v1.79.3 #210
OCPBUGS-58463: UPSTREAM: 1303: Fix requeueing snapshot content after deletion error #182
Full changelog

csi-node-driver-registrar

OCPBUGS-63193: update log level verbosity to not clutter logs #88
Full changelog

docker-builder

NO-JIRA: Bump Go builder image from 1.23 to 1.24 for OpenShift 4.19 #536
OCPBUGS-66993: bump buildah to 1.39.7 to fix CVE-2025-52881 #497
OCPBUGS-65624: BuildConfig inline Dockerfile fails with heredoc syntax #485
OCPBUGS-57173: S2I build cpu limits observed by assemble are limited to 1 cpu #471
Full changelog

docker-registry

OCPBUGS-68302: update logrus to v1.9.1 #463
OCPBUGS-53656: bump jwt and oauth dependencies #429
Full changelog

etcd

OCPBUGS-74602: 4.19 rebase 3.5.26 #360
OCPBUGS-63476: 4.19 rebase 3.5.24 #348
OCPBUGS-61041: Revert “OCPBUGS-52181: Ensure cluster id changes during force-new-cluster” #340
ETCD-726: Rebase etcd 3.5.21 openshift 4.19 #324
OCPBUGS-52181: Ensure cluster id changes during force-new-cluster #313
OCPBUGS-50510: Add configurable option for hardware-related timeout delay #311
OCPBUGS-45488: Updating ose-etcd-container image to be consistent with ART for 4.19 #306
ETCD-717: Rebase etcd 3.5.19 openshift 4.19 #315
DOWNSTREAM: <carry>: OCPBUGS-51838: fix a compaction induce latency issue #309
ETCD-709: Rebase etcd 3.5.18 openshift 4.19 #308
OCPBUGS-44528: Rebase etcd 3.5.17 openshift 4.18 #302
DOWNSTREAM: <carry>: ETCD-697: add tls min/max version to grpc proxy #301
DOWNSTREAM: <carry>: ETCD-696: Add rev bumping to force-new-cluster #300
NO-ISSUE: Add support for cachi2 based deps in Dockerfile.art #296
NO-ISSUE: Add support for cachi2 based deps #294
OCPBUGS-39188: Rebase etcd 3.5.16 openshift 4.18 #290
NO-JIRA: use golang 1.22 image #285
ETCD-656: Automate datadir move after quorum-restore #284
DOWNSTREAM: <carry>: ETCD-653: add jq to the etcd image #282
OCPBUGS-34653: Rebase etcd 3.5.14 openshift 4.17 #273
CORS-3191: DOWNSTREAM <carry>: add native binary to installer images #269
CORS-3249: DOWNSTREAM <carry>: installer: make etcd binaries static #268
CORS-3249: DOWNSTREAM <carry>: add installer Dockerfile for ART builds #267
OCPBUGS-31624: Rebase etcd 3.5.13 openshift 4.16 #259
no-issue: Update Installer dockerfile to use golang-1.20 #251
OCPBUGS-28730: Rebase etcd 3.5.12 openshift 4.16 #242
CORS-3191: Add Dockerfile to build etcd for openshift-installer #249
OCPBUGS-24988: Updating ose-etcd-container image to be consistent with ART #236
OCPBUGS-24931: Rebase etcd 3.5.11 openshift 4.16 #237
OCPBUGS-19279: Updating ose-etcd images to be consistent with ART #215
OCPBUGS-20560: [4.15] Rebase openshift/etcd to 3.5.10 #224
OCPBUGS-18179: UPSTREAM <carry>: update build images to rhel9 #211
OCPBUGS-11850: Rebase etcd-3.5.9 into openshift-4.14 #203
OCPBUGS-11850: Rebase etcd-3.5.8 into openshift-4.14 #201
Update owners #184
Updating ose-etcd images to be consistent with ART #182
Updating ose-etcd images to be consistent with ART #181
OCPBUGS-5458: UPSTREAM:<carry>: etcdserver: process the scenaro of the last WAL rec… #175
OCPBUGS-3098: Rebase openshift/etcd 4.13 onto v3.5.6 #168
Bug OCPBUGS-3098: UPSTREAM: <carry>: server/etcdmain: add configurable cipher list to gRPC proxy listener #162
OCPBUGS-861: Rebase openshift/etcd 4.12 onto v3.5.5 #144
Updating ose-etcd images to be consistent with ART #134
Bug 2085997: increases cluster discovery time from 10s to 135s #131
Revert “UPSTREAM: <carry>: increases cluster discovery time from 10s to 180s” #130
Bug 2085997: increases cluster discovery time from 10s to 180s #129
Add new members to reviewers/approvers #121
Remove MemberList patch #120
3.5.3 with history #116
Contiguous to 3.5.2 #109
OWNERS: bump #104
UPSTREAM: <carry>: add –experimental-max-learner flag #102
OWNERS: clean up #101
Bug 2003775: UPSTREAM: <carry>: server: Fix for v3.5 Ensure that cluster members stored in v2store and backend are in sync #98
UPSTREAM: <carry>: storage/backend: Add a gauge to indicate if defrag is active #97
Updating ose-etcd images to be consistent with ART #95
Bug 1994986: (CARRY) etcdctl/ctlv3/ctl.go: Remove check perf command #94
Bug 1992673: Fix build #93
ETCD-203: Updating ose-etcd images to be consistent with ART #92
ETCD-202: bump etcd v3.5.0 #91
ETCD-200: Bump etcd v3.4.16 to go 1.15 #86
Updating ose-etcd images to be consistent with ART #87
ETCD-199: bump etcd v3.4.16 #83
Updating ose-etcd images to be consistent with ART #84
Bug 1958913: discover-etcd-initial-cluster: retry if member is not part of member list and dataDir exists #81
Bug 1958405: UPSTREAM: <carry>: etcdserver/api/etcdhttp: log successful etcd server side health check in debug level #80
Bug 1958405: UPSTREAM: <carry>: *: log server-side /health checks #79
Bug 1958405: UPSTREAM: <carry>: server: add support for log rotation (#12774) #78
UPSTREAM: <carry>: *: ensure zap logger is set before use #75
ETCD-180: Bug 1927942: UPSTREAM: <carry>: *: add support for socket options #70
ETCD-178: Bug 1931652: openshift-tools: fix on off flow and add unit tests #73
Updating ose-etcd builder & base images to be consistent with ART #68
Bug 1870189: Bump v3.4.14 #65
OWNERS: add component #60
Updating ose-etcd builder & base images to be consistent with ART #59
Bug 1878163: Updating ose-etcd builder & base images to be consistent with ART #57
Bug 1883772: discover-etcd-initial-cluster: improve error handling when we dont scale member #56
Bug 1859196: bump etcd v3.4.9 #52
Bug 1814576: make evaluation of targetMember strict #48
*: bump etcd to v3.4.7 #44
list all peers in initial-cluster #38
Bug 1808544: If we weren’t able to get client or target member go ahead and start … #36
Bug 1808073: fix archive member name, unmask error #34
Bug 1806751: Archive data-dir if target member is unstarted #29
Use var lib etcd as data dir #30
Bug 1805807: create logic for golang ETCD_INITIAL_CLUSTER #28
add stub discovery-etcd-initial-cluster #26
Bug 1801237: *: bump etcd to v3.3.18 #21
: bump etcd to v3.3.17 #20
Dockerfile: bump golang 1.12 #19
BUG 1747124: Dockerfile: use build instead of make build #17
Dockerfile: bump golang to 1.11 #14
Bug 1706103: Dockerfile: set coreos org as canonical for release-3.3 #12
[cherry-pick openshift-4.0] *: Change gRPC proxy to expose etcd server endpoint /metrics #6
Dockerfile: resolve issue where binary was not properly copied #5
clientv3: automated cherry pick of #10153 to release-3.3 #10161
Automated cherry pick of #9997 #10041
etcdctl: cherry pick of #10109 to release-3.3 #10122
etcdserver: remove duplicated imports #10093
etcdserver: cherry-pick #9861 to release-3.3 #10027
Automated cherry pick of #9990 #10004
Automated cherry pick of #9761 #9940
And 206 elided commits (e.g. from squash or rebase merges)
Full changelog

gcp-cluster-api-controllers

OCPBUGS-80451: Bump google.golang.org/grpc to v1.79.3 #289
OCPBUGS-56962: [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 #243
Full changelog

gcp-machine-controllers

OCPBUGS-80473: Bump google.golang.org/grpc to v1.79.3 #164
OCPBUGS-59386: Add max-concurrent-reconciles flag to machine actuator #125
OCPBUGS-56924: allow instances with unknown quotas to be created #119
Full changelog

gcp-pd-csi-driver

OCPBUGS-80455: Bump google.golang.org/grpc to v1.79.3 in release-4.19 #110
OCPBUGS-68307: Update logrus to 1.9.3 #88
OCPBUGS-62116: UPSTREAM: 2054: Fix Hyperdisk Resize That Requires Iops/Throughput Adjustment #82
OCPBUGS-59749: 4.19: UPSTREAM: 2116: Remove check on snapshot create support for multi-writer HyperDisk-HA and let such validations occur at the PD control plane layer #80
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-80454: Replace google.golang.org/grpc with fork #186
Full changelog

haproxy-router

OCPBUGS-86716: Strip X-SSL-* headers for plain HTTP #799
OCPBUGS-80456: Bump google.golang.org/grpc to v1.79.3 #767
OCPBUGS-66984: Add option abortonclose to HAProxy configuration template #701
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-82786, OCPBUGS-82814: Address CVE-2026-35469 #2680
OCPBUGS-77478: Rebase v1.32.13 to release-4.19 #2602
OCPBUGS-76518: Rebase v1.32.12 #2592
OCPBUGS-65552: Rebase v1.32.10 #2515
OCPBUGS-59651: Fix Concurrentmap Iteration #2509
CNTRLPLANE-1609: Backport StreamingCollectionEncoding for JSON and protobuf #2478
OCPBUGS-61556: Rebase v1.32.9 #2464
OCPBUGS-61488: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2456
OCPBUGS-60510: Unrevert bump to v1.32.8 #2439
OCPBUGS-61021: UPSTREAM: <carry>: Revert “Rebase v1.32.8 to 4.19” #2433
OCPBUGS-60510: Rebase v1.32.8 to 4.19 #2412
OCPBUGS-60074: UPSTREAM: 132028: podresources: list: use active pods #2391
OCPBUGS-59534: Rebase v1.32.7 to 4.19 #2367
OCPBUGS-57886: Bump 4.19 1.32.6 #2340
NO-JIRA: UPSTREAM: <carry>: Update rebase.sh to handle go versions major.minor.patch #2341
OCPBUGS-58175: Fix flake caused by invalid detection of active policies in VAP integration tests #2347
OCPBUGS-55937: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2290
OCPBUGS-56082: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2297
OCPBUGS-56437: Bump 4.19 1.32.5 #2304
OCPBUGS-56256: UPSTREAM: 131495: Handle unsupported node expansion for RWX volumes #2302
OCPBUGS-56193: UPSTREAM: 131236: RWX tests should create RWX volumes #2301
OCPBUGS-55895: Fix node expansion on older kubelets #2289
OCPBUGS-55265: Bump 1.32.4 #2275
Full changelog

hypershift

OCPBUGS-89355: build(operator): drop hypershift-no-cgo from operator container images #8759
NO-JIRA: fix(tekton): remove path filter from control-plane-operator pipelines #8664
OCPBUGS-85623: fix CVE-2026-33186 by replacing grpc-go #8512
OCPBUGS-84143: fix(cno): use brackets only for IPv6 in server URL #8345
OCPBUGS-81161: [release-4.19] fix(cpo): Don’t remove HCP Ingress from routes when CapabilityRoute is disabled #8093
OCPBUGS-78742: fix(sync-global-pullsecret): compare content ignoring trailing newlines #7992
OCPBUGS-74106: Fix CVE-2025-58183 #7547
OCPBUGS-76531: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7698
OCPBUGS-77367, OCPBUGS-77844: Fix ignition-server pod restarts #7858
OCPBUGS-75932: [release-4.19] fix(cpo): Correct route labeling logic for HCP router infrastructure #7643
OCPBUGS-72393: Fix Konflux EC voilation, nginx image deprecated #7440
CNV-70889: use csi-resizer image from release provider #7102
OCPBUGS-65829: The Containerfile in the repo has hypershift-no-cgo, but the published image quay.io/hypershift/hypershift-operator:latest doesn’t #7256
CNTRLPLANE-1709: feat: Backport Customer Global Pull Secret to OpenShift 4.19.z #7316
OCPBUGS-69415: test: remove unit tests that depend on network communication [release-4.19] #7395
OCPBUGS-65693: specify SCC annotation for pods in data plane #7255
OCPBUGS-62959: fix(cvo): support image overrides annotation for CVO deployment #7065
OCPBUGS-64817: Add CPO hotfix arm64 builds #7195
OCPBUGS-63129: resolve initContainer permission issue after node reboot #7145
OCPBUGS-63636: [release-4.19] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7110
OCPBUGS-63368: Make the hypershift CLI binary FIPS-compliant #7092
OCPBUGS-61407: fix: Do not admit OAuth route by private router unless… #6780
OCPBUGS-62807: Fix driver-config ConfigMap content flapping due to random ordering #6944
CNTRLPLANE-1423: feat(konflux): tag MCE HO images with latest #6833
OCPBUGS-62183: fix(kas-bootstrap): increase wait timeouts to avoid KAS startup races #6886
OCPBUGS-62202: Enable VolumeAttributesClass runtime config #6890
OCPBUGS-60630: order ICSPs for determinism of OPENSHIFT_IMG_OVERRIDES #6674
OCPBUGS-61567: [release-4.19] fix(proxy): ensure URLs have scheme before proxy resolution #6792
OCPBUGS-61677: resolve MIRRORED_RELEASE_IMAGE flapping #6825
OCPBUGS-61206: use common MCE konflux pipeline #6748
OCPBUGS-61031: [release-4.19]: set default goaway-chance to 0.001 #6712
OCPBUGS-60483: feat(validations): add wildcard support to DNS SAN conflict detection #6648
OCPBUGS-60147: Always compress and encode payload in token secret for inplace upgrades #6606
OCPBUGS-60152: add missing app label to some components #6636
OCPBUGS-60125: fix(OCPBUGS-60125): Allow HCCO to set registry managementState to Removed; delete VAP during HC deletion #6689
OCPBUGS-60648: Cache Azure KMS TokenCredential for ARO HCP and clarify CPO credentials cache naming #6677
OCPBUGS-60100: fix: add dynamic security context uid to 4.19 missing components #6675
OCPBUGS-57141: HCP payload doesn’t respect multiple mirrors #6517
CNTRLPLANE-1270: Red Hat Konflux update control-plane-operator-4-19 #6660
Red Hat Konflux purge control-plane-operator-4-19 #6659
CNTRLPLANE-1267: conditional builds for mce-2.9 #6657
OCPBUGS-57588: Update PSA from v1beta1 to v1 #6302
OCPBUGS-59805: Router publish strategy related changes for IBM Cloud platform #6490
OCPBUGS-59933: Use the image reference for the cache in the image metadata provider #6535
CNTRLPLANE-1016: Support day2 tags changes for AWS default SecurityGroup #6455
CNTRLPLANE-1034: chore: Relax the kas healthcheck for aro when AllowedCIDRBlocks #6617
OCPBUGS-60100: feat: let ARO honour cp namespace annotation for default SC uids in 4.19 #6592
CNTRLPLANE-1226: feat(konflux): Make CPO builds hermetic #6596
CNTRLPLANE-1213: New API to support specifying cluster-autoscaler flags #6558
OCPBUGS-57331: Set default security context on everything #6257
OCPSTRAT-2173: feat(hcco): add support for hosted OIDC client secrets #6525
OCPBUGS-58300: remove annotation is not working #6465
CNTRLPLANE-1189: Global PullSecret daemonSet implementation #6507
NO-JIRA: fix: set terminationMessagePolicy to FallbackToLogsOnError for olm-collect-profiles #6493
CNTRLPLANE-1034: sharedingress: Add support for kube-apiserver whitelist CIDRs #6502
OCPBUGS-58683: fix(hcco): Don’t use a default OIDC client secret name when no secret name is provided #6398
OCPBUGS-59674: Initial Changes to Support Self-managed Azure #6481
OCPBUGS-59547: Remove code associated with Managed Identity v2 for ARO HCP for 4.19 #6459
OCPBUGS-59493: Remove unused jq and rsync rpms #6457
OCPBUGS-59101: Configure ClusterServiceLoadBalancerHea… #6409
NO-JIRA: chore(deps): update konflux references #6383
NO-JIRA: [release-4.19] CNTRLPLANE-1042: Disable createClusterNone for azure and scope down verifyResourceGroupLocationsMatch check #6392
OCPBUGS-57660: [release-4.19] CORENET-6094: CNO: add FRR-k8s image #6374
OCPBUGS-58335: Support proxy authentication when user/pass is included in URL #6370
CNTRLPLANE-1044: chore(deps): update konflux references #6342
ACM-21713: adding .git in .dockerignore to fix version info #6318
CNV-61396: Sync RBAC for expansion support in kubevirt CSI driver #6255
CNTRLPLANE-374: hcco: handle post-install creation of OIDC client secrets #6296
OCPBUGS-57485: Don’t use /version for haproxy health checks #6292
chore(deps): update konflux references #6189
ACM-21734 Fixing Konflux EC violations #6303
NO-JIRA: cpov1: set TerminationMessagePolicy on oas-trust-anchor-generator #6295
OCPBUGS-57299: Reuse hosted cluster release and metadata providers #6250
OCPBUGS-56930: cpov1: set terminationMessagePolicy to FallbackToLogsOnError for all HCP containers #6245
ARO-15626: Disallow users from setting .spec.managementState to Removed in the image registry operator config on Azure #6233
OCPBUGS-56792: Fix CatalogSource image check when unauthorized #6198
OCPBUGS-56910: util/version: Add Version420 #6215
OCPBUGS-56910: Move EnsurePSANotPrivileged to AtLeast(t, Version420) #6212
CNTRLPLANE-831: feat(konflux): add arm64 builds to cpo pipeline #6182
OCPBUGS-56777: Disable PSA enforcement in 4.19 hosted cluster #6201
OCPBUGS-56458: switch termination message policy to TerminationMessageFallbackToLogsOnError for debugability #6170
OCPBUGS-56562: Do not validate OCP API Server SANS if PKI reconciliation is disabled #6178
CNTRLPLANE-831: Red Had Konflux control-plane-operator-4-19 intial pipeline #6181
CNTRLPLANE-916: Konflux build pipeline service account migration #6089
CNTRLPLANE-915: chore(deps): update konflux references #6139
OCPBUGS-55789: [release-4.19] Update KAS structured authentication configuration logic to use new uid and extras fields #6121
OCPBUGS-56036: add multi-arch build for MCE 2.9 #6145
OCPBUGS-55693: Add support for registry root entry only in the IDMS/ICSP #6131
OCPBUGS-55927: Fix Konflux enterprise contract violations #6126
OCPBUGS-55749: Fix mce-2.9 konflux pipelines #6117
Red Hat Konflux update hypershift-cli-mce-29 #6104
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-80461: Bump google.golang.org/grpc to v1.79.3 #142
OCPBUGS-77206: [release-4.19] standardize build paths #119
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-52542: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #118
OCPBUGS-56962: [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 #115
Full changelog

ibmcloud-machine-controllers

OCPBUGS-81483: bump vpc go sdk #90
NO-JIRA: Modernize test infrastructure to align with other MAPI providers #86
Full changelog

insights-operator

OCPBUGS-88482: [release-4.19] extractor-controller #1306
OCPBUGS-87808: add config option to disable runtime extractor #1303
OCPBUGS-80464: Bump google.golang.org/grpc to v1.79.3 #1282
OCPBUGS-83563: kubeletconfig gatherer #1272
OCPBUGS-76962: Extends the time for the extractor liveness probe #1230
OCPBUGS-75902: [bugfix] The ConfigMap value for StoragePath is ignored on basic routine #1224
OCPBUGS-66202: Add filtering to add other possible pod status to QEMU gatherer #1190
OCPBUGS-66058: [bugfix] The archive’s records may include files whose names are out of bounds #1183
OCPBUGS-66061: QEMU logs are not gathered if there are pending status virt-launcher pods #1184
OCPBUGS-62489: Update error message for missing SCA certificates #1152
OCPBUGS-61971: add missing permissions for replicasets and events #1145
And 7 elided commits (e.g. from squash or rebase merges)
Full changelog

insights-runtime-exporter, insights-runtime-extractor

OCPBUGS-77779: remove dnf cache from the container images #68
Full changelog

ironic

OCPBUGS-84855: Bump pyasn1 to 0.5.1-4 #825
OCPBUGS-74406: Update sushy to include DGX B200 credentials fix #819
OCPBUGS-74116: Bump keystonemiddleware version to 10.9.0-0.20260216145500.557d173 for CVE-2026-22797 fix #794
OCPBUGS-77028: Update ironic hash for 4.19 with heartbeat inspection fix #797
OCPBUGS-69785: Bump eventlet version to 0.33.1-7 #759
OCPBUGS-65572: Include Handle HTTP 400 and 409 race condition in Redfish power opera… #724
OCPBUGS-62961: Bump sushy to include fix #700
Bug OCPBUGS-56639: Bump sushy to include SuperMicro Cd boot device string workaround #660
OCPBUGS-55743: Extract files one-by-one in logwatch #656
Full changelog

ironic-agent

OCPBUGS-95065: Replace individual package removal with a single rpm -e loop #285
OCPBUGS-95065: Replace dnf remove with rpm -e to prevent dependency removal #273
OCPBUGS-69783: Bump eventlet version to 0.33.1-7 #229
OCPBUGS-67304: Include Test advertised ip reachability before assigning it #224
OCPBUGS-62441: netutils: Use ethtool ioctl to get permanent mac address #198
OCPBUGS-56042: collect the entire journal from the host #188
Full changelog

ironic-machine-os-downloader

ART-13081: append .0 to go.mod version #102
Full changelog

kube-metrics-server

OCPBUGS-80365: Bump google.golang.org/grpc to v1.79.3 #63
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-19). #223
Fix verify job with build-machinery bump #215
ART-13081: append .0 to go.mod version #213
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-95085: OWNERS: Update component to Cloud Compute / KubeVirt Provider #84
Full changelog

kubevirt-csi-driver

OCPBUGS-79322: Add annotation-based fallback for infra VM node ID resolution #85
OCPBUGS-78389: Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.19 #79
”[release-4.19] OCPBUGS-58239: Implement volume expansion” #64
Full changelog

machine-api-operator

OCPBUGS-78715: : [release-4.19] Use resource group when generating default Azure image #1479
OCPBUGS-61096: bump openshift/api #1411
fix for OCPBUGS-60427: userDataSecret.name should be a Required value on AWS #1403
OCPBUGS-59386: Enabled 10 concurrent reconciles on GCP #1391
OCPBUGS-56227: correct aws kms permissions #1371
OCPBUGS-55715: Revert “Added skip for when config not multi nic” #1366
OCPBUGS-55786: [release-4.19] Fixes machineset paused condition nil pointer #1368
OCPBUGS-55706: fix: use patch for machine/machineset status #1367
Full changelog

machine-config-operator

OCPBUGS-95589: Bootstrap MCS logging entire ignition #6258
OCPBUGS-95273: Update custom containerfile OCB test to work in a disconnected environment #6255
OCPBUGS-96167: Update AMI Whitelist #6263
OCPBUGS-88566: Verify extension packages are installed #6182
OCPBUGS-86986: Update AMI Whitelist #6131
OCPBUGS-86650: Apply password only if changes exist #6097
OCPBUGS-86575: use –delete-if-present for karg removal #6088
OCPBUGS-86586: Fix re-cordon detection #6093
OCPBUGS-86233: Fix ssh and password rollbacks #6069
OCPBUGS-66284: Set -fin timeouts in HAProxy config #5461
OCPBUGS-86165: Add terminationMessagePolicy to build pod containers #6064
OCPBUGS-85581: Fix units rollback if update failure #6039
OCPBUGS-85018: Update AMI Whitelist #5997
OCPBUGS-84042: Update AMI Whitelist #5871
[release 4.19] OCPBUGS-81289: Calculate machine counts in MCP status from node properties #5823
OCPBUGS-76920: Degrade MCPs status based on MCN NodeDegraded condition #5662
OCPBUGS-81282: Re-order logger setting to eliminate race condition #5822
OCPBUGS-81144: Update AMI Whitelist #5817
OCPBUGS-79473: set default-timeout-stop to 200s globally #5802
OCPBUGS-77955: Update AMI Whitelist #5749
OCPBUGS-77221: Prevent unnecessary systemd unit disable #5688
OCPBUGS-77828: Update AMI Whitelist #5742
OCPBUGS-77725: reduce MCO image size #5737
OCPBUGS-74147: enable nodeip-configuration for platform external #5579
OCPBUGS-77229: Backport: Add delays to reduce TestOSBuildController failures #5690
OCPBUGS-77420: Remove MCD liveness probe #5711
OCPBUGS-77306: mcd_config_drift not working properly #5700
OCPBUGS-77240: Fix MCN conditions not updating during OCL sync #5693
OCPBUGS-77071: Machine-config controller should not log about non-existent pull-secret changes #5674
OCPBUGS-76831: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5658
OCPBUGS-76362: Update AMI script and list #5640
OCPBUGS-43435: After OCL is enabled few phases in MCN are not updating as expected #5606
OCPBUGS-71210: MCP is not correctly degraded when a pivotError happens #5532
OCPBUGS-70325: Remove log exposing kubeconfig #5526
OCPBUGS-67264: cherry pick to few fixes that needed for missing services and configuration #5490
OCPBUGS-67198: Fix cleanup in TestInstallRPMAndCheckMCDMetrics to decrease risk of test failures due to interference #5496
OCPBUGS-64922: Update timing of MCN desired config spec update to align with node annotation setting #5439
OCPBUGS-65839: Remove –mount directives #5430
OCPBUGS-62168: Fix - NetworkManager restart or crash renders br-ex unusable #5352
OCPBUGS-64844: Create temporal allow policy #5398
OCPBUGS-63126: Ensure the node passed to RunCordonOrUncordon comes from the latest updated state #5348
OCPBUGS-62670: [release-4.19] Networking: reset ovn-remote config and allow ovnkube controller to set it #5324
OCPBUGS-62746: Fix MCP updated machine count for image mode disabling case #5336
OCPBUGS-62788: Skip rpm-ostree local rebase if no PIS #5337
OCPBUGS-61738: Recheck generatedByControllerVersion annotation prior to deleting a degraded MC #5283
OCPBUGS-62706: Cert Controller should live fetch SAN IPs during cert rotation #5330
OCPBUGS-62649: configure-ovs: work around a Cisco switch issue #5323
OCPBUGS-62003: Machine-config controller should actively manage cordon while draining #5300
OCPBUGS-62164: Add mcd_local_unsupported_packages recording rule #5306
OCPBUGS-62114: Improve MCN CRD clean-up script #5299
OCPBUGS-61835: Override NMState service definition #5287
OCPBUGS-61284: Make MCN e2e tests blocking #5275
OCPBUGS-60110: Enable debug logging for nodeip-configuration #5221
OCPBUGS-59871: Understand and eliminate noisy logs for MCN #5199
OCPBUGS-60767: Update the OnClusterBuild payload tests to reflect the validation rule requiring MCP & MOSC names to match #5258
OCPBUGS-60265: Reintroduce cronjob that deletes MCN v1alpha1 CRD #5243
OCPBUGS-60224: Invalid architecture value found in annotation during 4.19 update #5227
OCPBUGS-60080: use channel to signal controller shutdown #5217
OCPBUGS-59928, OPNET-681: Support migration to NMState #5208
OCPBUGS-59899: Add workaround fix for static pod race #5204
OCPBUGS-59978: ARO cert rotate fix #5210
OCPBUGS-59720: TestMCNPoolNameCustom should clean up resources properly #5186
OCPBUGS-56750: Support NODEIP_HINT in IPI deployments too #5082
OCPBUGS-58894: Remove podman-etcd machine config source #5169
OCPBUGS-59208: Backport QE ported test for OCL component readiness #5125
OCPBUGS-58820: Add control-plane label for master nodes on legacy clusters #5168
OCPBUGS-57327: Do not set cpu system reserve below the default value #5117
OCPBUGS-57689: Ensure the build controller restarts on upgrade #5127
OCPBUGS-57930: OCPBUGS-57506: Boot image controller should correctly handle marketplace boot images #5135
OCPBUGS-57929: add MachineConfiguration to CO related objects #5132
OCPBUGS-56623: Give keepalived container chroot cap #5074
OCPBUGS-57064: Fix typo in MCN’s MachineConfigNodePinnedImageSetsDegraded message #5105
OCPBUGS-56899: Fix dynamic-system-reserved-calc.sh when only true parameter is used #5094
OCPBUGS-56829: Only update boot disks during GCP boot image updates #5088
OCPBUGS-56445: Boot Image Controller should not degrade when golden configmap is slow to update #5063
OCPBUGS-56632: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5076
OCPBUGS-56035: Only populate Status.PinnedImageSets.CurrentGeneration on valid generation value #5039
OCPBUGS-56261: Fix interrupt state to account for failure correctly #5055
OCPBUGS-56180: Add hot loop detection in the boot image controller #5050
OCPBUGS-56263: scope MCD node listers to current node #5058
OCPBUGS-56121: Adapt MCC to use LayeredNodeState and remove LayeredPoolState #5045
OCPBUGS-56136: Compare the osImageURLs for OS validation check #5048
OCPBUGS-56119: error from generateAndValidateRenderedMachineConfig function can be misleading #5044
OCPBUGS-56038: OWNERS: update owners file with current MCO team members #5040
OCPBUGS-55809: Use auto=start only for IPsec out connections #5035
OCPBUGS-44757: Revert “OCPBUGS-44757: decrease leases for kubelet on azure” #5031
Full changelog

machine-image-customization-controller

OCPBUGS-81713: Return error when network data Secret lacks nmstate key #173
OCPBUGS-77567: Clean up dnf cache to reduce container image size #166
Full changelog

machine-os-images

OCPBUGS-87875: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #99
OCPBUGS-55934: Dummy change to force a rebuild for 4.19 #63
Full changelog

metallb-frr

OCPBUGS-66055: Dockerfile: unpin FRR rpm #113
Full changelog

monitoring-plugin

Fix for OCPBUGS-94010: CVE-2026-13676 #1031
NO-JIRA: fix incidents unit test #1040
OCPBUGS-87084: [release-4.19] fast-uri: URI authority bypass due to improper delimiter handling #993
OCPBUGS-84288: bump follow-redirects to 1.16.0 #988
OCPBUGS-86923: Updating monitoring-plugin-container image to be consistent with ART for 4.19 #970
OCPBUGS-79452: immutable bump: fix for CVE-2026-29063 [4.19] #952
OU-1372: reset queries when namespace changes in dev perspective #950
OU-1370: prevent namespace and project desync #944
OCPBUGS-83496: [release-4.19] feat: re enable dev console views #858
OCPBUGS-83300: [release-4.19] openshift4/ose-monitoring-plugin-rhel9: Axios: Remote Code Execution via Prototype Pollution escalation #889
OCPBUGS-82520: fix: re encode params when redirecting from graph to query-browser #874
OCPBUGS-77407: koa bump #867
OCPBUGS-76579: [release-4.19]CVE-2026-25639 openshift4/ose-monitoring-plugin-rhel9: Axios affected by Denial of Service via proto Key in mergeConfig #789
OCPBUGS-78360: fix for CVE-2025-69873 #847
OCPBUGS-78397: Updating monitoring-plugin-container image to be consistent with ART for 4.19 #842
NO-JIRA: simplify dockerfile by removing cachito dependencies [release-4.19] #806
OCPBUGS-76937: fix: update vulnerable dependencies #773
OU-1233: monitoring testing on release-4.19 branch - fix #785
OU-1233: automation task - main into 419 and alerting conditional filtering #772
OCPBUGS-74166: fix: update qs vulnerable dependency #737
OU-1157: remove random multiplication #706
OU-1131: Merge main into release-4.19 #693
OCPBUGS-66388: Time range and Refresh interval dropdown button lack of unique identifier #671
OU-863: [release-4.19]: Fix step calculation for metric explorer 4.19 #655
OCPBUGS-63531: [release-4.19] Improve alignment with console SDK #647
OCPBUGS-63588: [release-4.19] allow tenancy access to metrics tags #618
OU-1060: remove troubleshooting panel links from non-admin #629
NO-JIRA: [release-4.19] OCPBUGS-60296: fix legend height to avoid scroll overlap #498
NO-JIRA: improve consistency in tab string #496
: NO-JIRA: update the i18n #495
OCPBUGS-60129: feat: add alerting rules tab to dev console #488
OU-943: remove broken useEffect #484
OU-943: Manual Cherry Pick #474
OU-594: Manual cherry pick incidents tab 4 19 #479
OU-863: [release-4.19] Manual cherry pick add disconnect option #482
OU-939: Fix virt persepective new silence link #478
OU-928: reset showgraph state when unmounting button #462
OU-744: [release-4.19]: fix: set correct pf color for gradient background on legacy dashboards legend #457
OU-880: [release-4.19] Manual cherry pick ou 880 #458
OU-842: [release-4.19] fix: override notistack dependency to avoid conflict #455
OCPBUGS-56422: “Negative matcher” is checked by default on Create silence page #415
NO-JIRA: fix: update monitoring and virtualization routes to avoid overriding console routes #411
: NO-JIRA: bound table scroll and column alignment #409 #409
NO-JIRA: feature: upgrade react router to v5 compat #406
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

multus-admission-controller

OCPBUGS-58849: Update the github.com/golang/glog module to v1.2.4 #100
ART-13081: append .0 to go.mod version #95
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-85248: Fix server url in kubeconfig #288
NO-ISSUE: [release-4.19] fix CI build root image #289
Full changelog

multus-networkpolicy

OCPBUGS-77778: Clean up dnf cache #103
OCPBUGS-77158: Fix modified vendor/ and go.sum after vendoring #82
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-59640: Prevent accidental IP deallocation in statefulsets #375
Full changelog

must-gather

OCPBUGS-85578: Collect object size with the object count #546
OCPBUGS-59487: network: Gather OVN-Kubernetes CUDN CRs #499
Full changelog

network-interface-bond-cni

OCPBUGS-62107: Use netlinksafe instead of netlink to avoid netlink.ErrDumpInterrupted #96
NO-JIRA:Add ci-operator yaml file #75
OCPBUGS-57283: Bump github.com/containernetworking/plugins from to 1.7.1 #72
Full changelog

network-metrics-daemon

OCPBUGS-58851: Bump github.com/golang/glog to v1.2.4 (#110) #110
OCPBUGS-60172: Replace e2e test image (#119) #119
Full changelog

network-tools

NO-JIRA: fix prefetch-dependencies step failure #166
ART-13081: append .0 to go.mod version #146
Full changelog

networking-console-plugin

OCPBUGS-60277: fixed broken link in empty state #441
OCPBUGS-41605: Retain namespace selection between network policies tabs #422
OCPBUGS-83384: Fix CVE-2026-34043 in serialize-javascript #395
[release-4:19] OCPBUGS-84634: Migration from yarn to npm #398
OCPBUGS-66279, OCPBUGS-67251: fix node-forge by upgrading webpack-dev-server: ^4.7.4 → ^5.2.3” #410
OCPBUGS-73654: CVE-2026-22029 fix to @remix-run/router to 1.23.2 #405
OCPBUGS-81610: Fix CVE-2026-CVE-2026-4800 in lodash #400
OCPBUGS-79453: Bump immutable #391
OCPBUGS-41199: Fix NAD creation using default namespace instead of selected one #351
CNV-76277: Fix name generator with unprofessional names #318
OCPBUGS-60137: Fix ingress details #261
OCPBUGS-59841: Fix requiremenets with no value #255
OCPBUGS-57266: Add fileupload translation #248
OCPBUGS-57265: Fix pod context #247
CNV-61827: fix styling issues #250
CNV-61902: fetch description of terms for popovers #249
Full changelog

oauth-apiserver

NO-JIRA: (chore): update OWNERS file #169
OCPBUGS-61760: bump kubernetes-apiserver to pick up loopback certificate expiration update #152
OCPBUGS-63051: (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission #150
Full changelog

oauth-proxy

OCPBUGS-58836: 4.19 kube 1.32 #318
OCPBUGS-58343: release 4.19 CVE fixes #326
OCPBUGS-58276: fix e2e tests #323
Full changelog

oauth-server

OCPBUGS-81808: Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 #237
OCPBUGS-58892: Fix mixup with Spanish and French locale variable names #192
OCPBUGS-57282: Updating oauth-server-container image to be consistent with ART for 4.19 #183
Use newer build-machinery-go #178
ART-13081: append .0 to go.mod version #176
Full changelog

oc-mirror

OCPBUGS-78147: Fix registriesd “unknown userid” failure for arbitrary UIDs #1367
OCPBUGS-77663: Fix reg config detection for explicit false values #1363
OCPBUGS-66410: fix: return only requested version #1323
OCPBUGS-65968: Remove empty status field from generated IDMS/ITMS files #1318
OCPBUGS-64683: removes unintended exec permissions #1307
OCPBUGS-62311: v2/cli: show binary version in output #1277
OCPBUGS-62606: generate the archive only after mirroring #1282
OCPBUGS-62062: [release-4.19] changes the warning message of 4.21 #1271
And 28 elided commits (e.g. from squash or rebase merges)
Full changelog

olm-catalogd, olm-operator-controller

OCPBUGS-87180: [release-4.19] catalogd: clean up orphaned temp dirs in catalog storage #748
OCPBUGS-80484, OCPBUGS-80485: Update grpc to v1.75.1-sec.1 to fix CVE-2026-33186 #731
OCPBUGS-63405, OPRUN-4216: Port CRD upgrade safety carry from 4.20 without bumping deps #543
And 10 elided commits (e.g. from squash or rebase merges)
Full changelog

openshift-apiserver

OCPBUGS-82820: Address CVE-2026-35469 #647
OCPBUGS-66920: Add ValidatingAdmissionPolicy and check for omissions next time. #588
OCPBUGS-61662: Adding validation directly and calling existing library-go validation #576
OCPBUGS-65962: pkg/image: conditionally parse raw image manifest #582
NO-JIRA: add .0 to go version #583
OCPBUGS-65863: update pkg/image/OWNERS #578
OCPBUGS-61759: bump kubernetes-apiserver to pick up loopback certificate expiration update #569
OCPBUGS-57043: Updating ose-openshift-apiserver-container image to be consistent with ART for 4.19 #564
OCPBUGS-57206: Wire dry run option to Image API server operations #524
OCPBUGS-56494: Fix image reference in TestImageStreamImportQuayIO #510
Full changelog

openshift-controller-manager

OCPBUGS-56614: legacy image pull secret rollback controller #384
OCPBUGS-57951: ignore error failing to find pull/push secrets #401
OCPBUGS-57193: Set node-pullsecrets volume to read-only to protect image pull credentials #390
OCPBUGS-55642: Empty proxy variables are causing issues during the build #376
Full changelog

openshift-state-metrics

ART-13081: append .0 to go.mod version #122
Full changelog

openstack-cluster-api-controllers

UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into release-4.19 #393
OCPBUGS-64815: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into release-4.19 #370
OCPBUGS-57891: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into release-4.19 #366
Full changelog

openstack-machine-api-provider

OCPBUGS-94015: Revendor CAPO #173
OCPBUGS-69646: Don’t record event for every reconcile #144
OCPBUGS-76791: Fix make test #158
OCPBUGS-74586: Revendor CAPO #151
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-80492, OCPBUGS-80493, OCPBUGS-80494: Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.75.1-sec.1 [release-4.19] #1310
OCPBUGS-79700: Fix nil pointer dereference in sortUnpackJobs when sorting non-failed jobs #1270
OCPBUGS-77437: Remove the collect-profiles info from the microshift kustomization file #1240
OCPBUGS-76587: Remove the collect-profiles job #1229
OCPBUGS-64925: Fix TOCTOU race condition in ensureInstallPlan (#3682) #1145
OCPBUGS-61363: [4.19] e2e stability fixes #1079
OCPBUGS-60525: Add NetworkPolicy as a supported kind #1047
OCPBUGS-59258: 🐛 add catalog-operator control-plane-specific tolerations to unpack jobs #1037
OCPBUGS-58259: Reduce Frequency of Update Requests for Copied CSVs (#3597) [release-4.19] #1030
OCPBUGS-57352: reduce cache expiry frequency [release-4.19] #1019
OCPBUGS-57279: [release-4.19]: operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted #1015
OCPBUGS-56034: fix(olm): improve error logging for missing olm.managed label (#3558) #999
Full changelog

operator-marketplace

OCPBUGS-73882: Increase default catalog polling interval to 4h (240m) #706
OCPBUGS-62217: Remove Expect func so that the test case can use the retry logic #668
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-85512: Branch Sync release-4.20 to release-4.19 [05-12-2026] #3186
OCPBUGS-74397, OCPBUGS-85355: Branch Sync release-4.20 to release-4.19 [05-10-2026] #3181
OCPBUGS-81478: node: fix serviceUpdateNotNeeded nil pointer comparison #3100
OCPBUGS-82032: Branch Sync release-4.20 to release-4.19 [04-04-2026] #3116
OCPBUGS-81526: Branch Sync release-4.20 to release-4.19 [03-03-2026] #3034
OCPBUGS-77442: Clear stale conntrack UDP entries for nodePorts #3015
OCPBUGS-77082, OCPBUGS-77096: [release-4.19] combined backport PR for 2 escalations #2986
OCPBUGS-74269: release-4.19 fix(localnet, ipamless): Prevent LSP deletion on sync #2942
OCPBUGS-70345: Branch Sync release-4.20 to release-4.19 [12-31-2025] #2915
OCPBUGS-66139: Branch Sync release-4.20 to release-4.19 [12-03-2025] #2890
CORENET-6055, OCPBUGS-65658, OCPBUGS-65909, OCPBUGS-65956: Branch Sync release-4.20 to release-4.19 [11-26-2025] #2872
OCPBUGS-64854: Fix stale EIP assignments during failover and controller restart #2848
OCPBUGS-64645: kubevirt: fix bad release of IPs of live migratable pods #2842
OCPBUGS-63660: Skip Pending pods in EgressIP status updates #2834
OCPBUGS-63234: [release-4.19] DownStream Merge Sync from 4.20 [10-16-2025] #2810
OCPBUGS-62670: Fix EgressIP stale GARP post reboot + pod restart #2774
OCPBUGS-62800: [release-4.19] DownStream Merge Sync from 4.20 [10-07-2025] #2786
OCPBUGS-61454: [4.19] allow default network -> localnet on the same node for any localnet subnet #2753
OCPBUGS-48709, OCPBUGS-60797, OCPBUGS-60979: DownStream Merge Sync from 4.20 [08-22-2025] #2733
OCPBUGS-48709: DownStream Merge Sync from 4.20 [08-06-2025] #2704
OCPBUGS-48709: DownStream Merge Sync from 4.20 [07-28-2025] #2688
OCPBUGS-48709, OCPBUGS-59530: DownStream Merge Sync from 4.20 [07-17-2025] #2675
OCPBUGS-48709: DownStream Merge Sync from 4.20 [07-09-2025] #2660
OCPBUGS-59106: DownStream Merge Sync from 4.20 [06-18-2025] #2642
OCPBUGS-57061, OCPBUGS-57062: DownStream Merge Sync from 4.20 [05-30-2025] #2596
OCPBUGS-55825: Release 4.19 blocker bug ovs cpu backport: special cherry-pick #2551
Full changelog

powervs-block-csi-driver

OCPBUGS-86907: Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.19 #135
OCPBUGS-80497: Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 #129
OCPBUGS-82826: Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 #123
OCPBUGS-75601: Mitigate CVE-2025-61726 by bumping golang to 1.24.13 #119
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-80498: Fix CVE-2026-33186 by bumping google.golang.org/grpc to v1.79.3 #109
Full changelog

powervs-cloud-controller-manager

OCPBUGS-80499: Replace google.golang.org/grpc with openshift-sustaining fork v1.75.1-sec.1 to v1.79.3 to fix CVE-2026-33186 #100
Full changelog

powervs-machine-controllers

OCPBUGS-61134: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #124
Full changelog

prom-label-proxy

ART-13081: append .0 to go.mod version #382
Full changelog

prometheus

OCPBUGS-80500: Bump google.golang.org/grpc to v1.79.3 #307
OCPBUGS-62429: chore(scrape): default to legacy validation/escaping scheme until utf-8 is fully supported by prometheus-operator #275
OCPBUGS-61486: chore: compute highestTimestamp at queryManager level #265
Full changelog

prometheus-alertmanager

OCPBUGS-73759: Include go-verify-deps expected files in gitignore #111
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-77297: backport upstream fix to reconcile resources with inconsistent status #368
OCPBUGS-77269: Validate webhookURL secret for MSTeams receiver in AlertmanagerConfig CRD #363
OCPBUGS-63197: reconcile workload configurations when a referenced secret/configmap key is updated #339
Full changelog

rhel-coreos, rhel-coreos-extensions

NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches #1921
OCPBUGS-82525: post-process: Remove workaround for openvswitch additional group #1927
Merge #1853
Merge #1851
OCPBUGS-58122: [TNF] OCP Two Node with Fencing symlink begone! #1827
OCPBUGS-56278: extensions: llvm now available in rhel 9.6 and 10 #1817
NO-JIRA: Remove kernel-rt-kvm for cs9 and cs10 #1815
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

route-controller-manager

OCPBUGS-80378: Bump google.golang.org/grpc to v1.79.3 #84
OCPBUGS-77172: filter ingress namespace on UnmanagedRoutes metric #75
Full changelog

telemeter

OCPBUGS-80513: Bump google.golang.org/grpc to v1.79.3 #591
OCPBUGS-81809: [release-1.19] Fix CVE-2026-34986 #595
ART-13081: append .0 to go.mod version #560
Full changelog

tests

OCPBUGS-77878: auditloganalyzer: update test name, remove duplicated test #29992
OCPBUGS-85275: Add test for CPMS OnDelete strategy with full master replacement #31054
OCPBUGS-83656: Fix PinnedImages test to respect node taints #30971
OCPBUGS-78545: Skip oauth test for external control plane topology #30887
: run resource request/limit check early #30898
OCPBUGS-77825: add the missing namespace from managed openshift #30836
OCPBUGS-77790: Update MCN tests to better handle condition transitions through the “Unknown” state #30833
OCPBUGS-74201: Unrevert TLS tests with fixes #30707
OCPBUGS-67146: Fix MachineConfigNode test in two-node fencing clusters #30590
OCPBUGS-67365: Updated the upgrade duration limit to 100 minutes for ppc64le #30606
OCPBUGS-63727: CNTRLPLANE-1767:fix(disruption): Using correct internal LB of apiserver for monitor test on ARO and Baremetal Hypershift #30440
OCPBUGS-63609: Migrate OCP-32383 to upstream #30429
OCPBUGS-63637: Add imagestream update dryrun test #30432
OCPBUGS-62642: Fix endpoint admission test namespace creation for ROSA #30331
OCPBUGS-61172: OCPBUGS-60883: Fix PinnedImageSet test instability & update flow for tests using custom MCPs #30205
OCPBUGS-56213: Skip GatewayAPIController tests on clusters without OLM capabilities #29815
OCPBUGS-61666: chore(test/extended/prometheus): bump the series limit of total series sent via telemetry from each cluster #30249
OCPBUGS-59512: disruptioninclusterapiserver: bump timeout to 10 mins #29999
OCPBUGS-60510: Bump to latest openshift/kubernetes (v1.32.8) #30229
OCPBUGS-60244: Wait 30s after the upgrade is complete to validate workloads #30144
OCPBUGS-60797: Don’t check for remote node subnet BGP routes #30156
NO-JIRA: Update extended/networking OWNERS #30088
OCPBUGS-60569: images/tests: Remove rteval #30124
OCPBUGS-60429: Load our MCO’s OTE binary #30043
OCPBUGS-59757: OCPBUGS-59758: Improve MCN test stability #30018
OCPBUGS-60117: Enable test for LGW L2 #30052
OCPBUGS-60234: Move the legacy container failures #30073
OCPBUGS-60092: feat(azure): skip metrics collection for ARO HCP hypershift #30051
OCPBUGS-59398: Skip MCN’s node degrade test on 4.19 #29990
OCPBUGS-59391: [release-4.19]: OVNK BGP: Sync ovn-kubernetes bgp e2e tests #29989
OCPBUGS-59226: bump watch count limits #29982
OCPBUGS-57886: Bump 4.19 1.32.6 #29933
OCPBUGS-58470: Update IPsec e2e test to validate NAT-T encapsulation option #29957
OCPBUGS-57206: Backport pr 29834 to release-4.19 #29903
OCPBUGS-58204: Fix MCN test on agent compact FIPS jobs #29943
OCPBUGS-58053: [release-4.19] MCO-1768: Enable PIS testing on Metal #29936
OCPBUGS-57436: Add MCO test suite to 4.19 #29918
OCPBUGS-57930: Boot image controller should correctly handle marketplace boot images #29935
OCPBUGS-57217: Stabilize custom MCP cleanup on MCN tests #29902
OCPBUGS-57303: Fix failed tests of e2e-aws-ovn-tls-13 #29906
OCPBUGS-57020: Skip tests modifying cluster/network.config when it is not permitted #29884
OCPBUGS-57189: RouteExternalCertificate : Add fix for None platform type #29899
OCPBUGS-56187: OCPBUGS-55968: Fix PIS tests on SNO & Enable applicable MCN & PIS tests on SNO #29789
OCPBUGS-56969, OCPBUGS-56970: Fix RouteExternalCertificate tests for few other on-prem jobs #29880
OCPBUGS-56829: Only update boot disks during GCP boot image updates tests #29878
OCPBUGS-56967: Do not set the MTU when using NetworkAttachementDefinition #29879
OCPBUGS-56947: fix deployment rollout wait to wait for desired replicas #29877
OCPBUGS-56886: Fix bearer token exposure in exit condition as well #29841
OCPBUGS-56437: Update to kubernetes 1.32.5 #29875
OCPBUGS-56796: Skip failing test [release-4.19] #29865
OCPBUGS-56045: OLMv1: Update test bundles [release-4.19] #29836
OCPBUGS-56662: Fix failed etcd test on arbiter ci run #29826
OCPBUGS-56399: fix watch request counts #29799
CORENET-5875, CORENET-5876, OCPBUGS-56000: Add EgressIP and L2 UDN route advertisements tests #29777
OCPBUGS-55897: bump limits #29783
OCPBUGS-55969: (olmv1 tests) Increase timeout for verifyAPIEndpoints #29770
OCPBUGS-55897: bump limits #29767
OCPBUGS-55265: Bump 1.32.4 #29707
OKD-243: Skip GatewayAPIController tests for OKD #29749
Full changelog

thanos

OCPBUGS-80515: Bump google.golang.org/grpc to v1.79.3 #183
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-77513: hermetic migration 4.19 #104
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-80520: Bump google.golang.org/grpc to v1.79.3 #103
OCPBUGS-61650: Fix unit tests #69
OCPBUGS-56962: Update manifests gen to remove reliance on admission registration v1beta1 #61
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-80523: Bump google.golang.org/grpc to v1.79.3 #175
OCPBUGS-68315: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 #155
OCPBUGS-55700: UPSTREAM: 3262: Fix panic on DeletedFinalStateUnknown #143
Full changelog

vsphere-csi-driver-operator

OCPBUGS-84895: Fix password escaping #341
Full changelog

vsphere-problem-detector

OCPBUGS-76081: fix concurrent map writes #210
OCPBUGS-66198: Fixed logic for vSphere compute cluster permission #198
OCPBUGS-60535: Check for number of FailureDomain-s in GetVCenter() #188
OCPBUGS-56230: replace operator client #183
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Red Hat Enterprise Linux CoreOS (`rhel-coreos`)

Package List

cri-o-1.32.13-8.rhaos4.19.git2100f27.el9
kernel-5.14.0-570.126.1.el9_6
openshift-kubelet-4.19.0-202606301915.p2.g63adf01.assembly.stream.el9
systemd-252-51.el9_6.4

Full list (568 packages)

NetworkManager-1:1.52.0-11.el9_6
NetworkManager-cloud-setup-1:1.52.0-11.el9_6
NetworkManager-libnm-1:1.52.0-11.el9_6
NetworkManager-ovs-1:1.52.0-11.el9_6
NetworkManager-team-1:1.52.0-11.el9_6
NetworkManager-tui-1:1.52.0-11.el9_6
WALinuxAgent-udev-2.13.1.1-1.el9_6
aardvark-dns-2:1.14.0-1.el9
acl-2.3.1-4.el9
adcli-0.9.2-1.el9
afterburn-5.9.0-1.el9_6
afterburn-dracut-5.9.0-1.el9_6
alternatives-1.24-2.el9
attr-2.5.1-3.el9
audit-3.1.5-4.el9
audit-libs-3.1.5-4.el9
authselect-1.2.6-3.el9
authselect-libs-1.2.6-3.el9
avahi-libs-0.8-22.el9_6.1
basesystem-11-13.el9
bash-5.1.8-9.el9
bash-completion-1:2.11-5.el9
bind-libs-32:9.16.23-31.el9_6.3
bind-license-32:9.16.23-31.el9_6.3
bind-utils-32:9.16.23-31.el9_6.3
binutils-2.35.2-63.el9_6.1
binutils-gold-2.35.2-63.el9_6.1
bootc-1.1.6-4.el9_6
bootupd-0.2.27-5.el9_6
bsdtar-3.5.3-7.el9_6.1
bubblewrap-0.4.1-8.el9_5
bzip2-1.0.8-10.el9_5
bzip2-libs-1.0.8-10.el9_5
c-ares-1.19.1-2.el9_4
ca-certificates-2025.2.80_v9.0.305-91.el9
checkpolicy-3.6-1.el9
chrony-4.6.1-1.el9
cifs-utils-7.2-0.el9_6.2
clevis-21-208.el9
clevis-dracut-21-208.el9
clevis-luks-21-208.el9
clevis-systemd-21-208.el9
cloud-utils-growpart-0.33-1.el9
composefs-1.0.8-1.el9
composefs-libs-1.0.8-1.el9
conmon-3:2.1.12-1.el9
conmon-rs-0.6.6-0.rhaos4.18.el9.1
console-login-helper-messages-0.21.3-1.el9
console-login-helper-messages-issuegen-0.21.3-1.el9
console-login-helper-messages-profile-0.21.3-1.el9
container-selinux-4:2.237.0-5.el9_6
containernetworking-plugins-1:1.6.2-3.el9_6.1
containers-common-2:1-117.el9_6
coreos-installer-0.24.0-6.el9_6
coreos-installer-bootinfra-0.24.0-6.el9_6
coreutils-8.32-39.el9
coreutils-common-8.32-39.el9
cpio-2.13-16.el9
cracklib-2.9.6-27.el9
cracklib-dicts-2.9.6-27.el9
cri-o-1.32.13-8.rhaos4.19.git2100f27.el9
cri-tools-1.32.0-5.el9
criu-3.19-1.2.el9_6
criu-libs-3.19-1.2.el9_6
crun-1.27-1.el9_6
crypto-policies-20250128-1.git5269e22.el9
crypto-policies-scripts-20250128-1.git5269e22.el9
cryptsetup-2.7.2-3.el9_6.1
cryptsetup-libs-2.7.2-3.el9_6.1
curl-7.76.1-31.el9_6.3
cyrus-sasl-gssapi-2.1.27-21.el9
cyrus-sasl-lib-2.1.27-21.el9
dbus-1:1.12.20-8.el9
dbus-broker-28-7.el9
dbus-common-1:1.12.20-8.el9
dbus-libs-1:1.12.20-8.el9
dbus-tools-1:1.12.20-8.el9
device-mapper-9:1.02.202-6.el9
device-mapper-event-9:1.02.202-6.el9
device-mapper-event-libs-9:1.02.202-6.el9
device-mapper-libs-9:1.02.202-6.el9
device-mapper-multipath-0.8.7-35.el9_6.3
device-mapper-multipath-libs-0.8.7-35.el9_6.3
device-mapper-persistent-data-1.1.0-1.el9
diffutils-3.7-12.el9
dmidecode-1:3.6-1.el9
dnf-4.14.0-25.el9
dnf-data-4.14.0-25.el9
dnsmasq-2.85-17.el9_6.1
dosfstools-4.2-3.el9
dracut-057-89.git20250311.el9_6
dracut-network-057-89.git20250311.el9_6
dracut-squash-057-89.git20250311.el9_6
e2fsprogs-1.46.5-7.el9
e2fsprogs-libs-1.46.5-7.el9
efi-filesystem-6-2.el9_0
efibootmgr-16-12.el9
efivar-libs-38-3.el9
elfutils-debuginfod-client-0.192-6.el9_6
elfutils-default-yama-scope-0.192-6.el9_6
elfutils-libelf-0.192-6.el9_6
elfutils-libs-0.192-6.el9_6
ethtool-2:6.11-1.el9
expat-2.5.0-5.el9_6.1
fcoe-utils-1.0.34-0.git14ef0d2.el9
file-5.39-16.el9
file-libs-5.39-16.el9
filesystem-3.16-5.el9
findutils-1:4.8.0-7.el9
firewalld-filesystem-1.3.4-15.el9_6
flashrom-1.2-10.el9
fstrm-0.6.1-3.el9
fuse-2.9.9-17.el9
fuse-common-3.10.2-9.el9
fuse-libs-2.9.9-17.el9
fuse-overlayfs-1.14-1.el9
fuse3-3.10.2-9.el9
fuse3-libs-3.10.2-9.el9
fwupd-1.9.26-1.el9
fwupd-plugin-flashrom-1.9.26-1.el9
gawk-5.1.0-6.el9
gawk-all-langpacks-5.1.0-6.el9
gdbm-libs-1:1.23-1.el9
gdisk-1.0.7-5.el9
geolite2-city-20191217-6.el9
geolite2-country-20191217-6.el9
gettext-0.21-8.el9
gettext-libs-0.21-8.el9
git-core-2.47.3-1.el9_6
glib2-2.68.4-16.el9_6.5
glibc-2.34-168.el9_6.25
glibc-common-2.34-168.el9_6.25
glibc-gconv-extra-2.34-168.el9_6.25
glibc-minimal-langpack-2.34-168.el9_6.25
glusterfs-6.0-57.4.el9
glusterfs-client-xlators-6.0-57.4.el9
glusterfs-fuse-6.0-57.4.el9
glusterfs-libs-6.0-57.4.el9
gmp-1:6.2.0-13.el9
gnupg2-2.3.3-4.el9_6.1
gnutls-3.8.3-6.el9_6.4
gobject-introspection-1.68.0-11.el9
gpgme-1.15.1-6.el9
grep-3.6-5.el9
groff-base-1.22.4-10.el9
grub2-common-1:2.06-105.el9_6.2
grub2-efi-x64-1:2.06-105.el9_6.2
grub2-pc-1:2.06-105.el9_6.2
grub2-pc-modules-1:2.06-105.el9_6.2
grub2-tools-1:2.06-105.el9_6.2
grub2-tools-minimal-1:2.06-105.el9_6.2
gssproxy-0.8.4-7.el9
gzip-1.12-1.el9
hostname-3.23-6.el9
hwdata-0.348-9.18.el9
ignition-2.21.0-6.el9_6
ignition-grub-2.21.0-6.el9_6
ima-evm-utils-1.5-3.el9
info-6.7-15.el9
inih-49-6.el9
initscripts-service-10.11.8-4.el9
ipcalc-1.0.0-5.el9
iproute-6.11.0-1.el9
iproute-tc-6.11.0-1.el9
iptables-libs-1.8.10-11.el9_5
iptables-nft-1.8.10-11.el9_5
iputils-20210202-11.el9_6.3
irqbalance-2:1.9.4-2.el9_6.2
iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9
iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9
isns-utils-libs-0.101-4.el9
jansson-2.14-1.el9
jose-14-1.el9
jq-1.6-17.el9_6.4
json-c-0.14-11.el9
json-glib-1.6.6-1.el9
kbd-2.4.0-11.el9
kbd-legacy-2.4.0-11.el9
kbd-misc-2.4.0-11.el9
kernel-5.14.0-570.126.1.el9_6
kernel-core-5.14.0-570.126.1.el9_6
kernel-modules-5.14.0-570.126.1.el9_6
kernel-modules-core-5.14.0-570.126.1.el9_6
kernel-modules-extra-5.14.0-570.126.1.el9_6
kexec-tools-2.0.29-5.el9_6.2
keyutils-1.6.3-1.el9
keyutils-libs-1.6.3-1.el9
kmod-28-10.el9
kmod-libs-28-10.el9
kpartx-0.8.7-35.el9_6.3
krb5-libs-1.21.1-8.el9_6.2
less-590-5.el9
libacl-2.3.1-4.el9
libaio-0.3.111-13.el9
libarchive-3.5.3-7.el9_6.1
libassuan-2.5.5-3.el9
libattr-2.5.1-3.el9
libbasicobjects-0.1.1-53.el9
libblkid-2.37.4-21.el9
libbpf-2:1.5.0-1.el9
libbrotli-1.0.9-7.el9_6.1
libcap-2.48-9.el9_6.1
libcap-ng-0.8.2-7.el9
libcbor-0.7.0-5.el9
libcollection-0.7.0-53.el9
libcom_err-1.46.5-7.el9
libcomps-0.1.18-1.el9
libconfig-1.7.2-9.el9
libcurl-7.76.1-31.el9_6.3
libdaemon-0.14-23.el9
libdb-5.3.28-57.el9_6
libdhash-0.5.0-53.el9
libdnf-0.69.0-13.el9
libdnf-plugin-subscription-manager-1.29.45.1-1.el9_6
libdrm-2.4.123-2.el9
libeconf-0.4.1-4.el9
libedit-3.1-38.20210216cvs.el9
libev-4.33-6.el9
libevent-2.1.12-8.el9_4
libfdisk-2.37.4-21.el9
libffi-3.4.2-8.el9
libfido2-1.13.0-2.el9
libgcc-11.5.0-5.el9_5
libgcrypt-1.10.0-11.el9
libgomp-11.5.0-5.el9_5
libgpg-error-1.42-5.el9
libgudev-237-1.el9
libgusb-0.3.8-2.el9
libibverbs-54.0-2.el9_6
libicu-67.1-10.el9_6
libidn2-2.3.0-7.el9
libini_config-1.3.1-53.el9
libipa_hbac-2.9.6-4.el9_6.4
libjcat-0.1.6-3.el9
libjose-14-1.el9
libkcapi-1.4.0-2.el9
libkcapi-hmaccalc-1.4.0-2.el9
libksba-1.5.1-7.el9
libldb-4.21.3-14.el9_6.1
libluksmeta-9-12.el9
libmaxminddb-1.5.2-4.el9
libmicrohttpd-1:0.9.72-5.el9
libmnl-1.0.4-16.el9_4
libmodulemd-2.13.0-2.el9
libmount-2.37.4-21.el9
libmspack-0.10.1-0.7.alpha.el9
libndp-1.9-1.el9
libnet-1.2-7.el9
libnetfilter_conntrack-1.0.9-1.el9
libnfnetlink-1.0.1-23.el9_5
libnfsidmap-1:2.5.4-34.el9_6.5
libnftnl-1.2.6-4.el9_4
libnghttp2-1.43.0-6.el9_6.1
libnl3-3.11.0-1.el9
libnl3-cli-3.11.0-1.el9
libnvme-1.11.1-1.el9
libpath_utils-0.2.1-53.el9
libpcap-14:1.10.0-4.el9
libpciaccess-0.16-7.el9
libpkgconf-1.7.3-10.el9
libpsl-0.21.1-5.el9
libpwquality-1.4.4-8.el9
libref_array-0.1.5-53.el9
librepo-1.14.5-2.el9
libreport-filesystem-2.15.2-6.el9
librhsm-0.0.3-9.el9
libseccomp-2.5.2-2.el9
libselinux-3.6-3.el9
libselinux-utils-3.6-3.el9
libsemanage-3.6-5.el9_6
libsepol-3.6-2.el9
libsigsegv-2.13-4.el9
libslirp-4.4.0-8.el9
libsmartcols-2.37.4-21.el9
libsmbclient-4.21.3-14.el9_6.1
libsolv-0.7.24-3.el9
libss-1.46.5-7.el9
libssh-0.10.4-15.el9_6.1
libssh-config-0.10.4-15.el9_6.1
libsss_certmap-2.9.6-4.el9_6.4
libsss_idmap-2.9.6-4.el9_6.4
libsss_nss_idmap-2.9.6-4.el9_6.4
libsss_sudo-2.9.6-4.el9_6.4
libstdc++-11.5.0-5.el9_5
libtalloc-2.4.2-1.el9
libtasn1-4.16.0-9.el9
libtdb-1.4.12-1.el9
libteam-1.31-16.el9_1
libtevent-0.16.1-1.el9
libtirpc-1.3.3-9.el9
libtool-ltdl-2.4.6-46.el9
libunistring-0.9.10-15.el9
liburing-2.5-1.el9
libusbx-1.0.26-1.el9
libuser-0.63-16.el9
libutempter-1.2.1-6.el9
libuuid-2.37.4-21.el9
libuv-1:1.42.0-2.el9_4
libverto-0.3.2-3.el9
libverto-libev-0.3.2-3.el9
libwbclient-4.21.3-14.el9_6.1
libxcrypt-4.4.18-3.el9
libxcrypt-compat-4.4.18-3.el9
libxml2-2.9.13-12.el9_6.2
libxmlb-0.3.10-1.el9
libxslt-1.1.34-13.el9_6.2
libyaml-0.2.5-7.el9
libzstd-1.5.5-1.el9
linux-firmware-20251111-151.8.el9_6
linux-firmware-whence-20251111-151.8.el9_6
lldpad-1.1.1-4.gitf1dd9eb.el9
lmdb-libs-0.9.29-3.el9
logrotate-3.18.0-9.el9
lsof-4.94.0-3.el9
lua-libs-5.4.4-4.el9
luksmeta-9-12.el9
lvm2-9:2.03.28-6.el9
lvm2-libs-9:2.03.28-6.el9
lz4-libs-1.9.3-5.el9
lzo-2.10-7.el9
mdadm-4.3-8.el9_6
microcode_ctl-4:20250211-1.20260227.1.el9_6
mokutil-2:0.6.0-4.el9
mpfr-4.1.0-7.el9
nano-5.6.1-7.el9
ncurses-6.2-10.20210508.el9_6.2
ncurses-base-6.2-10.20210508.el9_6.2
ncurses-libs-6.2-10.20210508.el9_6.2
net-tools-2.0-0.64.20160912git.el9
netavark-2:1.14.1-1.el9_6
nettle-3.10.1-1.el9
newt-0.52.21-11.el9
nfs-utils-1:2.5.4-34.el9_6.5
nftables-1:1.0.9-4.el9_6
nmap-ncat-3:7.92-3.el9
nmstate-2.2.60-1.el9_6
npth-1.6-8.el9
nss-altfiles-2.18.1-20.el9
numactl-libs-2.0.19-1.el9
numad-0.5-37.20150602git.el9
nvme-cli-2.11-7.el9_6
oniguruma-6.9.6-1.el9.6
open-vm-tools-12.5.0-1.el9_6.2
openldap-2.6.8-4.el9
openshift-clients-4.19.0-202605281656.p2.gb2a93a6.assembly.stream.el9
openshift-kubelet-4.19.0-202606301915.p2.g63adf01.assembly.stream.el9
openssh-8.7p1-45.el9_6.3
openssh-clients-8.7p1-45.el9_6.3
openssh-server-8.7p1-45.el9_6.3
openssl-1:3.2.2-7.el9_6.2
openssl-fips-provider-3.0.7-11.el9_0
openssl-fips-provider-so-3.0.7-11.el9_0
openssl-libs-1:3.2.2-7.el9_6.2
openvswitch-selinux-extra-policy-1.0-39.el9fdp
openvswitch3.5-3.5.2-72.el9fdp.2
os-prober-1.77-12.el9_5
ose-aws-ecr-image-credential-provider-4.19.0-202605281656.p2.g425c1c5.assembly.stream.el9
ose-azure-acr-image-credential-provider-4.19.0-202606111920.p2.g6282230.assembly.stream.el9
ose-gcp-gcr-image-credential-provider-4.19.0-202605281656.p2.gd8d3aeb.assembly.stream.el9
ostree-2025.2-4.el9_6
ostree-grub2-2025.2-4.el9_6
ostree-libs-2025.2-4.el9_6
p11-kit-0.25.3-3.el9_5
p11-kit-trust-0.25.3-3.el9_5
pam-1.5.1-26.el9_6
passt-0^20250217.ga1e48a0-14.el9_6
passt-selinux-0^20250217.ga1e48a0-14.el9_6
passwd-0.80-12.el9
pciutils-3.7.0-7.el9
pciutils-libs-3.7.0-7.el9
pcre-8.44-4.el9
pcre2-10.40-6.el9
pcre2-syntax-10.40-6.el9
perl-AutoLoader-5.74-481.1.el9_6
perl-B-1.80-481.1.el9_6
perl-Carp-1.50-460.el9
perl-Class-Struct-0.66-481.1.el9_6
perl-Data-Dumper-2.174-462.el9
perl-Digest-1.19-4.el9
perl-Digest-MD5-2.58-4.el9
perl-Encode-4:3.08-462.el9
perl-Errno-1.30-481.1.el9_6
perl-Exporter-5.74-461.el9
perl-Fcntl-1.13-481.1.el9_6
perl-File-Basename-2.85-481.1.el9_6
perl-File-Path-2.18-4.el9
perl-File-Temp-1:0.231.100-4.el9
perl-File-stat-1.09-481.1.el9_6
perl-FileHandle-2.03-481.1.el9_6
perl-Getopt-Long-1:2.52-4.el9
perl-Getopt-Std-1.12-481.1.el9_6
perl-HTTP-Tiny-0.076-462.el9
perl-IO-1.43-481.1.el9_6
perl-IO-Socket-IP-0.41-5.el9
perl-IO-Socket-SSL-2.073-2.el9
perl-IPC-Open3-1.21-481.1.el9_6
perl-MIME-Base64-3.16-4.el9
perl-Mozilla-CA-20200520-6.el9
perl-NDBM_File-1.15-481.1.el9_6
perl-Net-SSLeay-1.94-1.el9
perl-POSIX-1.94-481.1.el9_6
perl-PathTools-3.78-461.el9
perl-Pod-Escapes-1:1.07-460.el9
perl-Pod-Perldoc-3.28.01-461.el9
perl-Pod-Simple-1:3.42-4.el9
perl-Pod-Usage-4:2.01-4.el9
perl-Scalar-List-Utils-4:1.56-462.el9
perl-SelectSaver-1.02-481.1.el9_6
perl-Socket-4:2.031-4.el9
perl-Storable-1:3.21-460.el9
perl-Symbol-1.08-481.1.el9_6
perl-Term-ANSIColor-5.01-461.el9
perl-Term-Cap-1.17-460.el9
perl-Text-ParseWords-3.30-460.el9
perl-Text-Tabs+Wrap-2013.0523-460.el9
perl-Time-Local-2:1.300-7.el9
perl-URI-5.09-3.el9
perl-base-2.27-481.1.el9_6
perl-constant-1.33-461.el9
perl-if-0.60.800-481.1.el9_6
perl-interpreter-4:5.32.1-481.1.el9_6
perl-libnet-3.13-4.el9
perl-libs-4:5.32.1-481.1.el9_6
perl-mro-1.23-481.1.el9_6
perl-overload-1.31-481.1.el9_6
perl-overloading-0.02-481.1.el9_6
perl-parent-1:0.238-460.el9
perl-podlators-1:4.14-460.el9
perl-subs-1.03-481.1.el9_6
perl-vars-1.05-481.1.el9_6
pigz-2.8-1.el9
pkgconf-1.7.3-10.el9
pkgconf-m4-1.7.3-10.el9
pkgconf-pkg-config-1.7.3-10.el9
podman-5:5.4.0-20.el9_6.3
policycoreutils-3.6-2.1.el9
policycoreutils-python-utils-3.6-2.1.el9
polkit-0.117-13.el9
polkit-libs-0.117-13.el9
polkit-pkla-compat-0.1-21.el9
popt-1.18-8.el9
procps-ng-3.3.17-14.el9
protobuf-c-1.3.3-13.el9
psmisc-23.4-3.el9
publicsuffix-list-dafsa-20210518-3.el9
python-unversioned-command-3.9.21-2.el9_6.6
python3-3.9.21-2.el9_6.6
python3-audit-3.1.5-4.el9
python3-chardet-4.0.0-5.el9
python3-cloud-what-1.29.45.1-1.el9_6
python3-dateutil-1:2.8.1-7.el9
python3-dbus-1.2.18-2.el9
python3-decorator-4.4.2-6.el9
python3-distro-1.5.0-7.el9
python3-dnf-4.14.0-25.el9
python3-dnf-plugin-versionlock-4.3.0-20.el9
python3-dnf-plugins-core-4.3.0-20.el9
python3-gobject-base-3.40.1-6.el9
python3-gobject-base-noarch-3.40.1-6.el9
python3-gpg-1.15.1-6.el9
python3-hawkey-0.69.0-13.el9
python3-idna-2.10-7.el9_4.1
python3-iniparse-0.4-45.el9
python3-inotify-0.9.6-25.el9
python3-libcomps-0.1.18-1.el9
python3-libdnf-0.69.0-13.el9
python3-librepo-1.14.5-2.el9
python3-libs-3.9.21-2.el9_6.6
python3-libselinux-3.6-3.el9
python3-libsemanage-3.6-5.el9_6
python3-pip-wheel-21.3.1-1.el9
python3-policycoreutils-3.6-2.1.el9
python3-pysocks-1.7.1-12.el9
python3-pyyaml-5.4.1-6.el9
python3-requests-2.25.1-10.el9_6
python3-rpm-4.16.1.3-37.el9
python3-setools-4.4.4-1.el9
python3-setuptools-53.0.0-13.el9_6.1
python3-setuptools-wheel-53.0.0-13.el9_6.1
python3-six-1.15.0-9.el9
python3-subscription-manager-rhsm-1.29.45.1-1.el9_6
python3-systemd-234-19.el9
python3-urllib3-1.26.5-6.el9_6.1
qemu-guest-agent-17:9.1.0-15.el9_6.18
quota-1:4.09-4.el9
quota-nls-1:4.09-4.el9
rdma-core-54.0-2.el9_6
readline-8.1-4.el9
redhat-release-9.6-0.1.el9
redhat-release-eula-9.6-0.1.el9
rpcbind-1.2.6-7.el9
rpm-4.16.1.3-37.el9
rpm-build-libs-4.16.1.3-37.el9
rpm-libs-4.16.1.3-37.el9
rpm-ostree-2025.6-6.el9_6
rpm-ostree-libs-2025.6-6.el9_6
rpm-plugin-selinux-4.16.1.3-37.el9
rpm-plugin-systemd-inhibit-4.16.1.3-37.el9
rpm-sign-libs-4.16.1.3-37.el9
rsync-3.2.5-3.el9_6.1
runc-4:1.2.9-3.el9_6
samba-client-libs-4.21.3-14.el9_6.1
samba-common-4.21.3-14.el9_6.1
samba-common-libs-4.21.3-14.el9_6.1
sed-4.8-9.el9
selinux-policy-38.1.53-5.el9_6.2
selinux-policy-targeted-38.1.53-5.el9_6.2
setup-2.13.7-10.el9
sg3_utils-1.47-10.el9
sg3_utils-libs-1.47-10.el9
shadow-utils-2:4.9-12.el9
shadow-utils-subid-2:4.9-12.el9
shared-mime-info-2.1-5.el9
shim-x64-16.1-8.el9_6
skopeo-2:1.18.1-5.el9_6.1
slang-2.3.2-11.el9
slirp4netns-1.3.2-1.el9
snappy-1.1.8-8.el9
socat-1.7.4.1-6.el9_6.1
sqlite-libs-3.34.1-8.el9_6
squashfs-tools-4.4-10.git1.el9
ssh-key-dir-0.1.4-1.el9
sssd-2.9.6-4.el9_6.4
sssd-ad-2.9.6-4.el9_6.4
sssd-client-2.9.6-4.el9_6.4
sssd-common-2.9.6-4.el9_6.4
sssd-common-pac-2.9.6-4.el9_6.4
sssd-ipa-2.9.6-4.el9_6.4
sssd-krb5-2.9.6-4.el9_6.4
sssd-krb5-common-2.9.6-4.el9_6.4
sssd-ldap-2.9.6-4.el9_6.4
sssd-nfs-idmap-2.9.6-4.el9_6.4
sssd-proxy-2.9.6-4.el9_6.4
stalld-1.20.4-1.el9_6
strace-6.12-1.el9
subscription-manager-1.29.45.1-1.el9_6
subscription-manager-rhsm-certificates-20220623-1.el9
sudo-1.9.5p2-10.el9_6.3
systemd-252-51.el9_6.4
systemd-journal-remote-252-51.el9_6.4
systemd-libs-252-51.el9_6.4
systemd-pam-252-51.el9_6.4
systemd-rpm-macros-252-51.el9_6.4
systemd-udev-252-51.el9_6.4
tar-2:1.34-7.el9_6.2
teamd-1.31-16.el9_1
tmux-3.2a-5.el9
toolbox-0.1.2-1.rhaos4.19.el9
tpm2-tools-5.2-4.el9
tpm2-tss-3.2.3-1.el9
tzdata-2026b-1.el9_0
unbound-libs-1.16.2-19.el9_6.1
usermode-1.114-6.el9
userspace-rcu-0.12.1-6.el9
util-linux-2.37.4-21.el9
util-linux-core-2.37.4-21.el9
vim-minimal-2:8.2.2637-22.el9_6.3
virt-what-1.27-1.el9
which-2.21-30.el9_6
xfsprogs-6.4.0-5.el9
xmlsec1-1.2.29-13.el9
xmlsec1-openssl-1.2.29-13.el9
xz-5.2.5-8.el9_0
xz-libs-5.2.5-8.el9_0
yajl-2.1.0-25.el9
zlib-1.2.11-40.el9
zram-generator-0.3.2-7.el9
zstd-1.5.5-1.el9

Changed:

NetworkManager 1:1.54.3-3.el9_8 → 1:1.52.0-11.el9_6
NetworkManager-cloud-setup 1:1.54.3-3.el9_8 → 1:1.52.0-11.el9_6
NetworkManager-libnm 1:1.54.3-3.el9_8 → 1:1.52.0-11.el9_6
NetworkManager-ovs 1:1.54.3-3.el9_8 → 1:1.52.0-11.el9_6
NetworkManager-team 1:1.54.3-3.el9_8 → 1:1.52.0-11.el9_6
NetworkManager-tui 1:1.54.3-3.el9_8 → 1:1.52.0-11.el9_6
WALinuxAgent-udev 2.14.0.1-4.el9 → 2.13.1.1-1.el9_6
aardvark-dns 2:1.17.0-1.el9 → 2:1.14.0-1.el9
adcli 0.9.3.1-3.el9 → 0.9.2-1.el9
afterburn 5.10.0-1.el9 → 5.9.0-1.el9_6
afterburn-dracut 5.10.0-1.el9 → 5.9.0-1.el9_6
audit 3.1.5-8.el9 → 3.1.5-4.el9
audit-libs 3.1.5-8.el9 → 3.1.5-4.el9
avahi-libs 0.8-23.el9 → 0.8-22.el9_6.1
bind-libs 32:9.16.23-40.el9_8.2 → 32:9.16.23-31.el9_6.3
bind-license 32:9.16.23-40.el9_8.2 → 32:9.16.23-31.el9_6.3
bind-utils 32:9.16.23-40.el9_8.2 → 32:9.16.23-31.el9_6.3
binutils 2.35.2-72.el9 → 2.35.2-63.el9_6.1
binutils-gold 2.35.2-72.el9 → 2.35.2-63.el9_6.1
bootc 1.13.0-1.el9 → 1.1.6-4.el9_6
bootupd 0.2.31-1.el9 → 0.2.27-5.el9_6
bsdtar 3.5.3-9.el9_7 → 3.5.3-7.el9_6.1
bubblewrap 0.6.3-1.el9 → 0.4.1-8.el9_5
bzip2 1.0.8-11.el9 → 1.0.8-10.el9_5
bzip2-libs 1.0.8-11.el9 → 1.0.8-10.el9_5
chrony 4.8-1.el9 → 4.6.1-1.el9
cifs-utils 7.5-1.el9_7 → 7.2-0.el9_6.2
clevis 21-209.el9 → 21-208.el9
clevis-dracut 21-209.el9 → 21-208.el9
clevis-luks 21-209.el9 → 21-208.el9
clevis-systemd 21-209.el9 → 21-208.el9
conmon 3:2.2.1-1.el9 → 3:2.1.12-1.el9
container-selinux 4:2.245.0-1.el9 → 4:2.237.0-5.el9_6
containernetworking-plugins 1:1.9.0-3.el9_8 → 1:1.6.2-3.el9_6.1
containers-common 5:5.8-1.el9 → 2:1-117.el9_6
coreos-installer 0.26.0-1.el9_8 → 0.24.0-6.el9_6
coreos-installer-bootinfra 0.26.0-1.el9_8 → 0.24.0-6.el9_6
coreutils 8.32-41.el9_8 → 8.32-39.el9
coreutils-common 8.32-41.el9_8 → 8.32-39.el9
cracklib 2.9.6-28.el9 → 2.9.6-27.el9
cracklib-dicts 2.9.6-28.el9 → 2.9.6-27.el9
cri-o 1.35.4-2.rhaos4.22.git6479b5e.el9 → 1.32.13-8.rhaos4.19.git2100f27.el9
cri-tools 1.35.0-2.el9 → 1.32.0-5.el9
criu 3.19-3.el9 → 3.19-1.2.el9_6
criu-libs 3.19-3.el9 → 3.19-1.2.el9_6
crun 1.27-1.el9_8 → 1.27-1.el9_6
crypto-policies 20260224-1.gitea0f072.el9_8 → 20250128-1.git5269e22.el9
crypto-policies-scripts 20260224-1.gitea0f072.el9_8 → 20250128-1.git5269e22.el9
cryptsetup 2.8.1-3.el9 → 2.7.2-3.el9_6.1
cryptsetup-libs 2.8.1-3.el9 → 2.7.2-3.el9_6.1
curl 7.76.1-40.el9 → 7.76.1-31.el9_6.3
cyrus-sasl-gssapi 2.1.27-22.el9 → 2.1.27-21.el9
cyrus-sasl-lib 2.1.27-22.el9 → 2.1.27-21.el9
device-mapper 9:1.02.207-4.el9_8.1 → 9:1.02.202-6.el9
device-mapper-event 9:1.02.207-4.el9_8.1 → 9:1.02.202-6.el9
device-mapper-event-libs 9:1.02.207-4.el9_8.1 → 9:1.02.202-6.el9
device-mapper-libs 9:1.02.207-4.el9_8.1 → 9:1.02.202-6.el9
device-mapper-multipath 0.8.7-45.el9 → 0.8.7-35.el9_6.3
device-mapper-multipath-libs 0.8.7-45.el9 → 0.8.7-35.el9_6.3
dmidecode 1:3.6-2.el9 → 1:3.6-1.el9
dnf 4.14.0-34.el9_8 → 4.14.0-25.el9
dnf-data 4.14.0-34.el9_8 → 4.14.0-25.el9
dnsmasq 2.85-18.el9_8.1 → 2.85-17.el9_6.1
dracut 057-117.git20260625.el9_8 → 057-89.git20250311.el9_6
dracut-network 057-117.git20260625.el9_8 → 057-89.git20250311.el9_6
dracut-squash 057-117.git20260625.el9_8 → 057-89.git20250311.el9_6
e2fsprogs 1.46.5-8.el9 → 1.46.5-7.el9
e2fsprogs-libs 1.46.5-8.el9 → 1.46.5-7.el9
efi-filesystem 6-4.el9 → 6-2.el9_0
elfutils-debuginfod-client 0.194-1.el9 → 0.192-6.el9_6
elfutils-default-yama-scope 0.194-1.el9 → 0.192-6.el9_6
elfutils-libelf 0.194-1.el9 → 0.192-6.el9_6
elfutils-libs 0.194-1.el9 → 0.192-6.el9_6
ethtool 2:6.15-2.el9 → 2:6.11-1.el9
expat 2.5.0-6.el9_8.1 → 2.5.0-5.el9_6.1
file 5.39-17.el9 → 5.39-16.el9
file-libs 5.39-17.el9 → 5.39-16.el9
firewalld-filesystem 1.3.4-18.el9_7 → 1.3.4-15.el9_6
fuse-overlayfs 1.16-1.el9_7 → 1.14-1.el9
fwupd 2.0.19-2.el9_8 → 1.9.26-1.el9
fwupd-plugin-flashrom 2.0.19-2.el9_8 → 1.9.26-1.el9
git-core 2.52.0-1.el9 → 2.47.3-1.el9_6
glib2 2.68.4-19.el9_8.1 → 2.68.4-16.el9_6.5
glibc 2.34-272.el9_8 → 2.34-168.el9_6.25
glibc-common 2.34-272.el9_8 → 2.34-168.el9_6.25
glibc-gconv-extra 2.34-272.el9_8 → 2.34-168.el9_6.25
glibc-minimal-langpack 2.34-272.el9_8 → 2.34-168.el9_6.25
gnupg2 2.3.3-5.el9_7 → 2.3.3-4.el9_6.1
gnutls 3.8.10-4.el9_8 → 3.8.3-6.el9_6.4
grub2-common 1:2.06-126.el9_8 → 1:2.06-105.el9_6.2
grub2-efi-x64 1:2.06-126.el9_8 → 1:2.06-105.el9_6.2
grub2-pc 1:2.06-126.el9_8 → 1:2.06-105.el9_6.2
grub2-pc-modules 1:2.06-126.el9_8 → 1:2.06-105.el9_6.2
grub2-tools 1:2.06-126.el9_8 → 1:2.06-105.el9_6.2
grub2-tools-minimal 1:2.06-126.el9_8 → 1:2.06-105.el9_6.2
hwdata 0.348-9.22.el9 → 0.348-9.18.el9
ignition 2.26.0-1.el9_8 → 2.21.0-6.el9_6
ignition-grub 2.26.0-1.el9_8 → 2.21.0-6.el9_6
ima-evm-utils 1.6.2-2.el9 → 1.5-3.el9
iproute 6.17.0-2.el9 → 6.11.0-1.el9
iproute-tc 6.17.0-2.el9 → 6.11.0-1.el9
iputils 20210202-15.el9_7 → 20210202-11.el9_6.3
irqbalance 2:1.9.4-5.el9 → 2:1.9.4-2.el9_6.2
iscsi-initiator-utils 6.2.1.11-0.git4b3e853.el9 → 6.2.1.9-1.gita65a472.el9
iscsi-initiator-utils-iscsiuio 6.2.1.11-0.git4b3e853.el9 → 6.2.1.9-1.gita65a472.el9
jq 1.6-19.el9_8.2 → 1.6-17.el9_6.4
kernel 5.14.0-687.20.1.el9_8 → 5.14.0-570.126.1.el9_6
kernel-core 5.14.0-687.20.1.el9_8 → 5.14.0-570.126.1.el9_6
kernel-modules 5.14.0-687.20.1.el9_8 → 5.14.0-570.126.1.el9_6
kernel-modules-core 5.14.0-687.20.1.el9_8 → 5.14.0-570.126.1.el9_6
kernel-modules-extra 5.14.0-687.20.1.el9_8 → 5.14.0-570.126.1.el9_6
kexec-tools 2.0.29-17.el9 → 2.0.29-5.el9_6.2
kmod 28-11.el9 → 28-10.el9
kmod-libs 28-11.el9 → 28-10.el9
kpartx 0.8.7-45.el9 → 0.8.7-35.el9_6.3
krb5-libs 1.21.1-10.el9_8 → 1.21.1-8.el9_6.2
less 590-6.el9 → 590-5.el9
libarchive 3.5.3-9.el9_7 → 3.5.3-7.el9_6.1
libblkid 2.37.4-25.el9 → 2.37.4-21.el9
libbpf 2:1.5.0-3.el9 → 2:1.5.0-1.el9
libbrotli 1.0.9-9.el9_7 → 1.0.9-7.el9_6.1
libcap 2.48-10.el9_8.1 → 2.48-9.el9_6.1
libcom_err 1.46.5-8.el9 → 1.46.5-7.el9
libcurl 7.76.1-40.el9 → 7.76.1-31.el9_6.3
libdnf 0.69.0-18.el9 → 0.69.0-13.el9
libdnf-plugin-subscription-manager 1.29.50-1.el9 → 1.29.45.1-1.el9_6
libdrm 2.4.128-1.el9 → 2.4.123-2.el9
libeconf 0.4.1-7.el9_8 → 0.4.1-4.el9
libedit 3.1-39.20210216cvs.el9 → 3.1-38.20210216cvs.el9
libfdisk 2.37.4-25.el9 → 2.37.4-21.el9
libgcc 11.5.0-14.el9 → 11.5.0-5.el9_5
libgomp 11.5.0-14.el9 → 11.5.0-5.el9_5
libibverbs 61.0-2.el9 → 54.0-2.el9_6
libipa_hbac 2.9.8-4.el9_8 → 2.9.6-4.el9_6.4
libldb 4.23.5-10.el9_8 → 4.21.3-14.el9_6.1
libluksmeta 10-1.el9 → 9-12.el9
libmount 2.37.4-25.el9 → 2.37.4-21.el9
libnfsidmap 1:2.5.4-42.el9_8 → 1:2.5.4-34.el9_6.5
libnghttp2 1.43.0-6.el9_8.1 → 1.43.0-6.el9_6.1
libnvme 1.16.1-3.el9_8 → 1.11.1-1.el9
librepo 1.19.0-1.el9 → 1.14.5-2.el9
libsepol 3.6-3.el9 → 3.6-2.el9
libsmartcols 2.37.4-25.el9 → 2.37.4-21.el9
libsmbclient 4.23.5-10.el9_8 → 4.21.3-14.el9_6.1
libsolv 0.7.24-5.el9_8 → 0.7.24-3.el9
libss 1.46.5-8.el9 → 1.46.5-7.el9
libssh 0.10.4-18.el9 → 0.10.4-15.el9_6.1
libssh-config 0.10.4-18.el9 → 0.10.4-15.el9_6.1
libsss_certmap 2.9.8-4.el9_8 → 2.9.6-4.el9_6.4
libsss_idmap 2.9.8-4.el9_8 → 2.9.6-4.el9_6.4
libsss_nss_idmap 2.9.8-4.el9_8 → 2.9.6-4.el9_6.4
libsss_sudo 2.9.8-4.el9_8 → 2.9.6-4.el9_6.4
libstdc++ 11.5.0-14.el9 → 11.5.0-5.el9_5
libtalloc 2.4.3-1.el9 → 2.4.2-1.el9
libtasn1 4.16.0-10.el9_8 → 4.16.0-9.el9
libtdb 1.4.14-1.el9 → 1.4.12-1.el9
libtevent 0.17.1-1.el9 → 0.16.1-1.el9
liburing 2.12-1.el9 → 2.5-1.el9
libusbx 1.0.30-1.el9_8 → 1.0.26-1.el9
libuser 0.63-17.el9 → 0.63-16.el9
libuuid 2.37.4-25.el9 → 2.37.4-21.el9
libwbclient 4.23.5-10.el9_8 → 4.21.3-14.el9_6.1
libxml2 2.9.13-14.el9_8.1 → 2.9.13-12.el9_6.2
libxmlb 0.3.24-1.el9 → 0.3.10-1.el9
libxslt 1.1.34-14.el9_8.1 → 1.1.34-13.el9_6.2
linux-firmware 20260609-161.el9_8 → 20251111-151.8.el9_6
linux-firmware-whence 20260609-161.el9_8 → 20251111-151.8.el9_6
logrotate 3.18.0-12.el9 → 3.18.0-9.el9
luksmeta 10-1.el9 → 9-12.el9
lvm2 9:2.03.33-4.el9_8.1 → 9:2.03.28-6.el9
lvm2-libs 9:2.03.33-4.el9_8.1 → 9:2.03.28-6.el9
mdadm 4.4-4.el9_7 → 4.3-8.el9_6
microcode_ctl 4:20260210-1.el9_8 → 4:20250211-1.20260227.1.el9_6
mokutil 2:0.7.2-4.el9 → 2:0.6.0-4.el9
mpfr 4.1.0-10.el9 → 4.1.0-7.el9
ncurses 6.2-12.20210508.el9 → 6.2-10.20210508.el9_6.2
ncurses-base 6.2-12.20210508.el9 → 6.2-10.20210508.el9_6.2
ncurses-libs 6.2-12.20210508.el9 → 6.2-10.20210508.el9_6.2
netavark 2:1.17.2-1.el9 → 2:1.14.1-1.el9_6
nfs-utils 1:2.5.4-42.el9_8 → 1:2.5.4-34.el9_6.5
nftables 1:1.0.9-7.el9_8 → 1:1.0.9-4.el9_6
nmap-ncat 3:7.92-5.el9 → 3:7.92-3.el9
nmstate 2.2.60-1.el9_8 → 2.2.60-1.el9_6
numactl-libs 2.0.19-3.el9 → 2.0.19-1.el9
nvme-cli 2.16-1.el9 → 2.11-7.el9_6
open-vm-tools 13.0.10-1.el9 → 12.5.0-1.el9_6.2
openshift-clients 4.22.0-202605222252.p2.g062bc54.assembly.stream.el9 → 4.19.0-202605281656.p2.gb2a93a6.assembly.stream.el9
openshift-kubelet 4.22.0-202606301456.p2.g03c5938.assembly.stream.el9 → 4.19.0-202606301915.p2.g63adf01.assembly.stream.el9
openssh 9.9p1-7.el9_8 → 8.7p1-45.el9_6.3
openssh-clients 9.9p1-7.el9_8 → 8.7p1-45.el9_6.3
openssh-server 9.9p1-7.el9_8 → 8.7p1-45.el9_6.3
openssl 1:3.5.5-4.el9_8 → 1:3.2.2-7.el9_6.2
openssl-fips-provider 3.0.7-11.el9_8 → 3.0.7-11.el9_0
openssl-fips-provider-so 3.0.7-11.el9_8 → 3.0.7-11.el9_0
openssl-libs 1:3.5.5-4.el9_8 → 1:3.2.2-7.el9_6.2
ose-aws-ecr-image-credential-provider 4.22.0-202605191551.p2.gb4bad3f.assembly.stream.el9 → 4.19.0-202605281656.p2.g425c1c5.assembly.stream.el9
ose-azure-acr-image-credential-provider 4.22.0-202606291123.p2.ga17a3e3.assembly.stream.el9 → 4.19.0-202606111920.p2.g6282230.assembly.stream.el9
ose-gcp-gcr-image-credential-provider 4.22.0-202605192117.p2.gea31ab8.assembly.stream.el9 → 4.19.0-202605281656.p2.gd8d3aeb.assembly.stream.el9
ostree 2025.7-1.el9 → 2025.2-4.el9_6
ostree-grub2 2025.7-1.el9 → 2025.2-4.el9_6
ostree-libs 2025.7-1.el9 → 2025.2-4.el9_6
p11-kit 0.26.2-1.el9 → 0.25.3-3.el9_5
p11-kit-trust 0.26.2-1.el9 → 0.25.3-3.el9_5
pam 1.5.1-28.el9 → 1.5.1-26.el9_6
passt 0^20251210.gd04c480-5.el9_8 → 0^20250217.ga1e48a0-14.el9_6
passt-selinux 0^20251210.gd04c480-5.el9_8 → 0^20250217.ga1e48a0-14.el9_6
perl-Net-SSLeay 1.94-3.el9 → 1.94-1.el9
podman 6:5.8.2-3.el9_8 → 5:5.4.0-20.el9_6.3
policycoreutils 3.6-5.el9 → 3.6-2.1.el9
policycoreutils-python-utils 3.6-5.el9 → 3.6-2.1.el9
polkit 0.117-14.el9 → 0.117-13.el9
polkit-libs 0.117-14.el9 → 0.117-13.el9
python-unversioned-command 3.9.25-7.el9_8 → 3.9.21-2.el9_6.6
python3 3.9.25-7.el9_8 → 3.9.21-2.el9_6.6
python3-audit 3.1.5-8.el9 → 3.1.5-4.el9
python3-cloud-what 1.29.50-1.el9 → 1.29.45.1-1.el9_6
python3-dateutil 1:2.9.0.post0-1.el9_7 → 1:2.8.1-7.el9
python3-dnf 4.14.0-34.el9_8 → 4.14.0-25.el9
python3-dnf-plugin-versionlock 4.3.0-26.el9 → 4.3.0-20.el9
python3-dnf-plugins-core 4.3.0-26.el9 → 4.3.0-20.el9
python3-hawkey 0.69.0-18.el9 → 0.69.0-13.el9
python3-libdnf 0.69.0-18.el9 → 0.69.0-13.el9
python3-librepo 1.19.0-1.el9 → 1.14.5-2.el9
python3-libs 3.9.25-7.el9_8 → 3.9.21-2.el9_6.6
python3-pip-wheel 21.3.1-2.el9_8 → 21.3.1-1.el9
python3-policycoreutils 3.6-5.el9 → 3.6-2.1.el9
python3-rpm 4.16.1.3-40.el9 → 4.16.1.3-37.el9
python3-setuptools 53.0.0-15.el9 → 53.0.0-13.el9_6.1
python3-setuptools-wheel 53.0.0-15.el9 → 53.0.0-13.el9_6.1
python3-subscription-manager-rhsm 1.29.50-1.el9 → 1.29.45.1-1.el9_6
python3-urllib3 1.26.5-8.el9_8 → 1.26.5-6.el9_6.1
qemu-guest-agent 17:10.1.0-17.el9_8.3 → 17:9.1.0-15.el9_6.18
rdma-core 61.0-2.el9 → 54.0-2.el9_6
redhat-release 9.8-1.0.el9 → 9.6-0.1.el9
redhat-release-eula 9.8-1.0.el9 → 9.6-0.1.el9
rpm 4.16.1.3-40.el9 → 4.16.1.3-37.el9
rpm-build-libs 4.16.1.3-40.el9 → 4.16.1.3-37.el9
rpm-libs 4.16.1.3-40.el9 → 4.16.1.3-37.el9
rpm-ostree 2026.1-6.el9_8 → 2025.6-6.el9_6
rpm-ostree-libs 2026.1-6.el9_8 → 2025.6-6.el9_6
rpm-plugin-selinux 4.16.1.3-40.el9 → 4.16.1.3-37.el9
rpm-plugin-systemd-inhibit 4.16.1.3-40.el9 → 4.16.1.3-37.el9
rpm-sign-libs 4.16.1.3-40.el9 → 4.16.1.3-37.el9
rsync 3.2.5-7.el9_8.2 → 3.2.5-3.el9_6.1
runc 4:1.4.2-2.el9_8 → 4:1.2.9-3.el9_6
samba-client-libs 4.23.5-10.el9_8 → 4.21.3-14.el9_6.1
samba-common 4.23.5-10.el9_8 → 4.21.3-14.el9_6.1
samba-common-libs 4.23.5-10.el9_8 → 4.21.3-14.el9_6.1
sed 4.8-10.el9 → 4.8-9.el9
selinux-policy 38.1.75-2.el9_8 → 38.1.53-5.el9_6.2
selinux-policy-targeted 38.1.75-2.el9_8 → 38.1.53-5.el9_6.2
shadow-utils 2:4.9-16.el9 → 2:4.9-12.el9
shadow-utils-subid 2:4.9-16.el9 → 2:4.9-12.el9
shim-x64 16.1-7.el9 → 16.1-8.el9_6
skopeo 2:1.22.2-6.el9_8 → 2:1.18.1-5.el9_6.1
slirp4netns 1.3.3-1.el9 → 1.3.2-1.el9
socat 1.7.4.1-8.el9 → 1.7.4.1-6.el9_6.1
sqlite-libs 3.34.1-10.el9_8 → 3.34.1-8.el9_6
sssd 2.9.8-4.el9_8 → 2.9.6-4.el9_6.4
sssd-ad 2.9.8-4.el9_8 → 2.9.6-4.el9_6.4
sssd-client 2.9.8-4.el9_8 → 2.9.6-4.el9_6.4
sssd-common 2.9.8-4.el9_8 → 2.9.6-4.el9_6.4
sssd-common-pac 2.9.8-4.el9_8 → 2.9.6-4.el9_6.4
sssd-ipa 2.9.8-4.el9_8 → 2.9.6-4.el9_6.4
sssd-krb5 2.9.8-4.el9_8 → 2.9.6-4.el9_6.4
sssd-krb5-common 2.9.8-4.el9_8 → 2.9.6-4.el9_6.4
sssd-ldap 2.9.8-4.el9_8 → 2.9.6-4.el9_6.4
sssd-nfs-idmap 2.9.8-4.el9_8 → 2.9.6-4.el9_6.4
sssd-proxy 2.9.8-4.el9_8 → 2.9.6-4.el9_6.4
stalld 1.26.3-1.el9 → 1.20.4-1.el9_6
subscription-manager 1.29.50-1.el9 → 1.29.45.1-1.el9_6
sudo 1.9.17p2-3.el9_8 → 1.9.5p2-10.el9_6.3
systemd 252-67.el9_8.4 → 252-51.el9_6.4
systemd-journal-remote 252-67.el9_8.4 → 252-51.el9_6.4
systemd-libs 252-67.el9_8.4 → 252-51.el9_6.4
systemd-pam 252-67.el9_8.4 → 252-51.el9_6.4
systemd-rpm-macros 252-67.el9_8.4 → 252-51.el9_6.4
systemd-udev 252-67.el9_8.4 → 252-51.el9_6.4
tar 2:1.34-11.el9 → 2:1.34-7.el9_6.2
toolbox 0.1.2-1.rhaos4.22.el9 → 0.1.2-1.rhaos4.19.el9
tpm2-tools 5.2-7.el9 → 5.2-4.el9
tzdata 2026b-1.el9 → 2026b-1.el9_0
unbound-libs 1.24.2-3.el9_8.1 → 1.16.2-19.el9_6.1
usermode 1.114-7.el9 → 1.114-6.el9
util-linux 2.37.4-25.el9 → 2.37.4-21.el9
util-linux-core 2.37.4-25.el9 → 2.37.4-21.el9
vim-minimal 2:8.2.2637-26.el9_8.6 → 2:8.2.2637-22.el9_6.3
virt-what 1.27-2.el9 → 1.27-1.el9
xfsprogs 6.4.0-7.el9 → 6.4.0-5.el9
zram-generator 1.1.2-1.el9 → 0.3.2-7.el9

Removed:

adcli-selinux 0.9.3.1-3.el9
azure-vm-utils 0.7.0-1.el9
numactl 2.0.19-3.el9
ose-crio-credential-provider 4.22.0-202602261640.p2.g83d4961.assembly.stream.el9

Added:

libgudev 237-1.el9
libgusb 0.3.8-2.el9

Extensions

Full list (162 packages)

NetworkManager-libreswan-1.2.29-1.el9_6.x86_64
bison-3.7.4-5.el9.x86_64
capstone-4.0.2-11.el9_6.x86_64
corosync-3.1.9-2.el9_6.1.x86_64
corosynclib-3.1.9-2.el9_6.1.x86_64
cpp-11.5.0-5.el9_5.x86_64
crun-wasm-1.8.5-5.rhaos4.14.el9.x86_64
daxctl-libs-78-2.el9.x86_64
edk2-ovmf-20241117-2.el9_6.2.noarch
elfutils-libelf-devel-0.192-6.el9_6.x86_64
fence-agents-all-4.10.0-86.el9_6.18.x86_64
fence-agents-amt-ws-4.10.0-86.el9_6.18.noarch
fence-agents-apc-4.10.0-86.el9_6.18.noarch
fence-agents-apc-snmp-4.10.0-86.el9_6.18.noarch
fence-agents-bladecenter-4.10.0-86.el9_6.18.noarch
fence-agents-brocade-4.10.0-86.el9_6.18.noarch
fence-agents-cisco-mds-4.10.0-86.el9_6.18.noarch
fence-agents-cisco-ucs-4.10.0-86.el9_6.18.noarch
fence-agents-common-4.10.0-86.el9_6.18.noarch
fence-agents-drac5-4.10.0-86.el9_6.18.noarch
fence-agents-eaton-snmp-4.10.0-86.el9_6.18.noarch
fence-agents-emerson-4.10.0-86.el9_6.18.noarch
fence-agents-eps-4.10.0-86.el9_6.18.noarch
fence-agents-heuristics-ping-4.10.0-86.el9_6.18.noarch
fence-agents-hpblade-4.10.0-86.el9_6.18.noarch
fence-agents-ibmblade-4.10.0-86.el9_6.18.noarch
fence-agents-ifmib-4.10.0-86.el9_6.18.noarch
fence-agents-ilo-moonshot-4.10.0-86.el9_6.18.noarch
fence-agents-ilo-mp-4.10.0-86.el9_6.18.noarch
fence-agents-ilo-ssh-4.10.0-86.el9_6.18.noarch
fence-agents-ilo2-4.10.0-86.el9_6.18.noarch
fence-agents-intelmodular-4.10.0-86.el9_6.18.noarch
fence-agents-ipdu-4.10.0-86.el9_6.18.noarch
fence-agents-ipmilan-4.10.0-86.el9_6.18.noarch
fence-agents-kdump-4.10.0-86.el9_6.18.x86_64
fence-agents-mpath-4.10.0-86.el9_6.18.noarch
fence-agents-redfish-4.10.0-86.el9_6.18.x86_64
fence-agents-rhevm-4.10.0-86.el9_6.18.noarch
fence-agents-rsa-4.10.0-86.el9_6.18.noarch
fence-agents-rsb-4.10.0-86.el9_6.18.noarch
fence-agents-sbd-4.10.0-86.el9_6.18.noarch
fence-agents-scsi-4.10.0-86.el9_6.18.noarch
fence-agents-vmware-rest-4.10.0-86.el9_6.18.noarch
fence-agents-vmware-soap-4.10.0-86.el9_6.18.noarch
fence-agents-wti-4.10.0-86.el9_6.18.noarch
fence-virt-4.10.0-86.el9_6.18.x86_64
flex-2.6.4-9.el9.x86_64
fmt-9.1.0-1.el9.x86_64
gcc-11.5.0-5.el9_5.x86_64
glibc-devel-2.34-168.el9_6.25.x86_64
glibc-headers-2.34-168.el9_6.25.x86_64
gnutls-dane-3.8.3-6.el9_6.4.x86_64
gnutls-utils-3.8.3-6.el9_6.4.x86_64
ipmitool-1.8.18-27.el9.x86_64
ipxe-roms-qemu-20200823-9.git4bd064de.el9_0.noarch
kata-containers-3.31.0-3.rhaos4.19.el9.x86_64
kernel-5.14.0-570.126.1.el9_6.x86_64
kernel-core-5.14.0-570.126.1.el9_6.x86_64
kernel-devel-5.14.0-570.126.1.el9_6.x86_64
kernel-headers-5.14.0-570.126.1.el9_6.x86_64
kernel-modules-5.14.0-570.126.1.el9_6.x86_64
kernel-modules-extra-5.14.0-570.126.1.el9_6.x86_64
kernel-rt-core-5.14.0-570.126.1.el9_6.x86_64
kernel-rt-devel-5.14.0-570.126.1.el9_6.x86_64
kernel-rt-kvm-5.14.0-570.126.1.el9_6.x86_64
kernel-rt-modules-5.14.0-570.126.1.el9_6.x86_64
kernel-rt-modules-core-5.14.0-570.126.1.el9_6.x86_64
kernel-rt-modules-extra-5.14.0-570.126.1.el9_6.x86_64
krb5-pkinit-1.21.1-8.el9_6.2.x86_64
krb5-workstation-1.21.1-8.el9_6.2.x86_64
ldns-1.7.1-12.el9.x86_64
libfdt-1.6.0-7.el9.x86_64
libkadm5-1.21.1-8.el9_6.2.x86_64
libknet1-1.28-1.el9.x86_64
libknet1-compress-bzip2-plugin-1.28-1.el9.x86_64
libknet1-compress-lz4-plugin-1.28-1.el9.x86_64
libknet1-compress-lzma-plugin-1.28-1.el9.x86_64
libknet1-compress-lzo2-plugin-1.28-1.el9.x86_64
libknet1-compress-plugins-all-1.28-1.el9.x86_64
libknet1-compress-zlib-plugin-1.28-1.el9.x86_64
libknet1-compress-zstd-plugin-1.28-1.el9.x86_64
libknet1-crypto-nss-plugin-1.28-1.el9.x86_64
libknet1-crypto-openssl-plugin-1.28-1.el9.x86_64
libknet1-crypto-plugins-all-1.28-1.el9.x86_64
libknet1-plugins-all-1.28-1.el9.x86_64
libmpc-1.2.1-4.el9.x86_64
libnozzle1-1.28-1.el9.x86_64
libpmem-1.12.1-1.el9.x86_64
libpng-2:1.6.37-12.el9_6.4.x86_64
libqb-2.0.8-1.el9.x86_64
librdmacm-54.0-2.el9_6.x86_64
libreswan-5.3-5.el9fdp.x86_64
libwsman1-2.6.8-23.el9.x86_64
libxcrypt-devel-4.4.18-3.el9.x86_64
libzstd-devel-1.5.5-1.el9.x86_64
lld-17.0.6-1.el9.x86_64
lld-libs-17.0.6-1.el9.x86_64
llvm-17.0.6-5.el9.x86_64
llvm-libs-17.0.6-5.el9.x86_64
lm_sensors-libs-3.6.0-10.el9.x86_64
m4-1.4.19-1.el9.x86_64
make-1:4.3-8.el9.x86_64
ndctl-libs-78-2.el9.x86_64
net-snmp-libs-1:5.9.1-17.el9_6.1.x86_64
net-snmp-utils-1:5.9.1-17.el9_6.1.x86_64
nspr-4.36.0-8.el9_4.x86_64
nss-3.112.0-8.el9_4.x86_64
nss-softokn-3.112.0-8.el9_4.x86_64
nss-softokn-freebl-3.112.0-8.el9_4.x86_64
nss-sysinit-3.112.0-8.el9_4.x86_64
nss-tools-3.112.0-8.el9_4.x86_64
nss-util-3.112.0-8.el9_4.x86_64
openssl-devel-1:3.2.2-7.el9_6.2.x86_64
openvswitch3.5-ipsec-3.5.2-72.el9fdp.2.x86_64
openwsman-python3-2.6.8-23.el9.x86_64
pacemaker-2.1.9-1.3.el9_6.x86_64
pacemaker-cli-2.1.9-1.3.el9_6.x86_64
pacemaker-cluster-libs-2.1.9-1.3.el9_6.x86_64
pacemaker-libs-2.1.9-1.3.el9_6.x86_64
pacemaker-schemas-2.1.9-1.3.el9_6.noarch
pcp-conf-6.3.7-1.el9_6.x86_64
pcp-libs-6.3.7-1.el9_6.x86_64
pcs-0.11.9-2.el9_6.4.x86_64
perl-TimeDate-1:2.33-6.el9.noarch
pixman-0.40.0-6.el9_3.x86_64
protobuf-3.14.0-16.el9_6.1.x86_64
python3-cffi-1.14.5-5.el9.x86_64
python3-cryptography-36.0.1-5.el9_6.x86_64
python3-lxml-4.6.5-3.el9.x86_64
python3-openvswitch3.5-3.5.2-72.el9fdp.2.x86_64
python3-ply-3.11-14.el9.noarch
python3-pycparser-2.20-6.el9.noarch
python3-pycurl-7.43.0.6-8.el9.x86_64
python3-pyparsing-2.4.7-9.el9.noarch
python3-tornado-6.4.2-2.el9_6.3.x86_64
qemu-img-17:9.1.0-15.el9_6.19.x86_64
qemu-kvm-common-17:9.1.0-15.el9_6.19.x86_64
qemu-kvm-core-17:9.1.0-15.el9_6.19.x86_64
redhat-logos-90.5-1.el9_6.1.x86_64
resource-agents-4.10.0-71.el9_6.28.x86_64
ruby-3.0.7-165.el9_6.1.x86_64
ruby-default-gems-3.0.7-165.el9_6.1.noarch
ruby-libs-3.0.7-165.el9_6.1.x86_64
rubygem-bigdecimal-3.0.0-165.el9_6.1.x86_64
rubygem-bundler-2.2.33-165.el9_6.1.noarch
rubygem-io-console-0.5.7-165.el9_6.1.x86_64
rubygem-json-2.5.1-165.el9_6.1.x86_64
rubygem-psych-3.3.2-165.el9_6.1.x86_64
rubygem-rdoc-6.3.4.1-165.el9_6.1.noarch
rubygem-rexml-3.2.5-165.el9_6.1.noarch
rubygems-3.2.33-165.el9_6.1.noarch
sbd-1.5.2-1.el9.x86_64
seabios-bin-1.16.3-4.el9.noarch
seavgabios-bin-1.16.3-4.el9.noarch
spdlog-1.13.0-1.rhaos4.14.el9.x86_64
sysstat-12.5.4-9.el9.x86_64
telnet-1:0.17-85.el9.x86_64
usbguard-1.0.0-16.el9.x86_64
usbguard-selinux-1.0.0-16.el9.noarch
virtiofsd-1.13.2-1.el9_6.x86_64
wasmedge-0.14.0-2.rhaos4.19.el9.x86_64
zlib-devel-1.2.11-40.el9.x86_64

Red Hat Enterprise Linux CoreOS base layer: 9.6.20260702-0

OCPBUGS-87875: Add support for hermetic builds via Cachi2 prefetched CoreOS base layer: ISOs #99

View changelog in Markdown or change previous release:

Source code for this page located on github