5.1.0-0.nightly-multi-2026-09-23-215753

PullSpec:

quay.io/openshift-release-dev/ocp-release-nightly@sha256:90b0fc6a5ad40b1a3106b051cf65f050f514e1532d077cb74e3a8ac7532d6082

Qualifiers (status api): None

Tests:

Blocking jobs
- e2e-aws-ovn-multi-a-a Succeeded periodic-ci-openshift-multiarch-main-nightly-5.1-ocp-e2e-aws-ovn-multi-a-a
- e2e-aws-ovn-multi-x-x Succeeded periodic-ci-openshift-multiarch-main-nightly-5.1-ocp-e2e-aws-ovn-multi-x-x
- hypershift-e2e-aks-multi-x-ax Failed (1 retry) periodic-ci-openshift-hypershift-release-5.1-periodics-e2e-aks-multi-x-ax
  - Attempt 1 Failed
  - Attempt 2 Failed
- install-analysis-multi-p-p Succeeded periodic-ci-openshift-multiarch-main-nightly-5.1-install-analysis-all-multi-p-p
Informing jobs
- e2e-aws-ovn-major-upgrade-multi-a-a Failed periodic-ci-openshift-multiarch-main-nightly-5.1-upgrade-from-stable-5.0-ocp-e2e-upgrade-aws-ovn-multi-a-a
- e2e-aws-ovn-major-upgrade-multi-x-ax Succeeded periodic-ci-openshift-multiarch-main-nightly-5.1-upgrade-from-stable-5.0-ocp-e2e-aws-ovn-upgrade-multi-x-ax
- e2e-aws-ovn-multi-x-ax Succeeded periodic-ci-openshift-multiarch-main-nightly-5.1-ocp-e2e-aws-ovn-multi-x-ax
- e2e-aws-ovn-nightly-upgrade-multi-x-ax Succeeded periodic-ci-openshift-multiarch-main-nightly-5.1-ocp-e2e-aws-ovn-upgrade-multi-x-ax
- e2e-aws-ovn-nightly-upgrade-multi-x-x Succeeded periodic-ci-openshift-multiarch-main-nightly-5.1-ocp-e2e-upgrade-aws-ovn-multi-x-x
- e2e-aws-ovn-sno-multi-a-a Failed periodic-ci-openshift-multiarch-main-nightly-5.1-ocp-e2e-aws-ovn-sno-multi-a-a
- e2e-aws-ovn-techpreview-multi-a-a Failed periodic-ci-openshift-multiarch-main-nightly-5.1-ocp-e2e-aws-ovn-techpreview-multi-a-a
- e2e-aws-ovn-techpreview-serial-multi-a-a-1of3 Succeeded periodic-ci-openshift-multiarch-main-nightly-5.1-ocp-e2e-aws-ovn-techpreview-serial-multi-a-a-1of3
- e2e-aws-ovn-techpreview-serial-multi-a-a-2of3 Succeeded periodic-ci-openshift-multiarch-main-nightly-5.1-ocp-e2e-aws-ovn-techpreview-serial-multi-a-a-2of3
- e2e-aws-ovn-techpreview-serial-multi-a-a-3of3 Succeeded periodic-ci-openshift-multiarch-main-nightly-5.1-ocp-e2e-aws-ovn-techpreview-serial-multi-a-a-3of3
- e2e-azure-ovn-multi-a-a Succeeded periodic-ci-openshift-multiarch-main-nightly-5.1-ocp-e2e-azure-ovn-multi-a-a
- e2e-azure-ovn-multi-x-ax Succeeded periodic-ci-openshift-multiarch-main-nightly-5.1-ocp-e2e-azure-ovn-multi-x-ax
- e2e-gcp-ovn-multi-a-a Failed periodic-ci-openshift-multiarch-main-nightly-5.1-ocp-e2e-gcp-ovn-multi-a-a
- e2e-gcp-ovn-multi-x-ax Succeeded periodic-ci-openshift-multiarch-main-nightly-5.1-ocp-e2e-gcp-ovn-multi-x-ax
- e2e-major-upgrade-azure-ovn-multi-a-a Succeeded periodic-ci-openshift-multiarch-main-nightly-5.1-upgrade-from-stable-5.0-ocp-e2e-upgrade-azure-ovn-multi-a-a
- e2e-major-upgrade-azure-ovn-multi-x-ax Succeeded periodic-ci-openshift-multiarch-main-nightly-5.1-upgrade-from-stable-5.0-ocp-e2e-upgrade-azure-ovn-multi-x-ax
- e2e-major-upgrade-gcp-ovn-multi-a-a Succeeded periodic-ci-openshift-multiarch-main-nightly-5.1-upgrade-from-stable-5.0-ocp-e2e-upgrade-gcp-ovn-multi-a-a
- e2e-major-upgrade-gcp-ovn-multi-x-ax Failed periodic-ci-openshift-multiarch-main-nightly-5.1-upgrade-from-stable-5.0-ocp-e2e-upgrade-gcp-ovn-multi-x-ax
- e2e-nightly-upgrade-aws-ovn-multi-a-a Succeeded periodic-ci-openshift-multiarch-main-nightly-5.1-ocp-e2e-upgrade-aws-ovn-multi-a-a
- e2e-nightly-upgrade-azure-ovn-multi-a-a Succeeded periodic-ci-openshift-multiarch-main-nightly-5.1-ocp-e2e-upgrade-azure-ovn-multi-a-a
- e2e-nightly-upgrade-azure-ovn-multi-x-ax Succeeded periodic-ci-openshift-multiarch-main-nightly-5.1-ocp-e2e-upgrade-azure-ovn-multi-x-ax
- e2e-nightly-upgrade-gcp-ovn-multi-x-ax Failed periodic-ci-openshift-multiarch-main-nightly-5.1-ocp-e2e-upgrade-gcp-ovn-multi-x-ax
- e2e-ovn-remote-libvirt-multi-p-p Failed periodic-ci-openshift-multiarch-main-nightly-5.1-ocp-fips-ovn-remote-s2s-libvirt-multi-p-p
- e2e-ovn-remote-libvirt-multi-z-z Failed periodic-ci-openshift-multiarch-main-nightly-5.1-ocp-fips-ovn-remote-libvirt-multi-z-z
- e2e-ovn-serial-aws-multi-a-a-1of2 Succeeded periodic-ci-openshift-multiarch-main-nightly-5.1-ocp-e2e-ovn-serial-aws-multi-a-a-1of2
- e2e-ovn-serial-aws-multi-a-a-2of2 Succeeded periodic-ci-openshift-multiarch-main-nightly-5.1-ocp-e2e-ovn-serial-aws-multi-a-a-2of2
- e2e-serial-aws-ovn-multi-x-ax Succeeded periodic-ci-openshift-multiarch-main-nightly-5.1-ocp-e2e-serial-aws-ovn-multi-x-ax
- hypershift-e2e-aws Succeeded periodic-ci-openshift-hypershift-release-5.1-periodics-e2e-aws-multi

Upgrades from:

5.1.0-0.nightly-multi-2026-08-10-113053 - F F S S S S S S F
5.0.0-0.nightly-multi-2026-09-23-031212 (changes) - S F S S S F

Loading changelog, this may take a while ...

Changes from 5.1.0-0.nightly-multi-2026-08-10-113053

Created: 2026-09-23 22:34:19 +0000 UTC

Image Digest: sha256:d7e02ac70cdc5130d8202417d134297e8a69a751a452ca4b2a84e14ea76249e5

Components

Kubectl 1.36.2
Kubernetes upgraded from 1.36.2 to 1.36.4
Kubernetes Tests 1.36.2
Red Hat Enterprise Linux CoreOS upgraded from 10.2.20260808-0 to 10.2.20260923-1

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
AWSServiceLBNetworkSecurityGroup (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AzureWorkloadIdentity (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
SigstoreImageVerification (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
SigstoreImageVerificationPKI (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereMultiDisk (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereMultiNetworks (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VolumeGroupSnapshot (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GCPSovereignCloudInstall (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
AdditionalStorageConfig (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
EtcdBackendQuota (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
ExternalOIDCWithUpstreamParity (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
SELinuxMount (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
SELinuxMountGAReadiness (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
TLSAdherence (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
VSphereMultiVCenterDay2 (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
OSStreams (0 tests)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled (Changed)	Enabled	Enabled	Enabled
DRADeviceTaintRules (0 tests)
EgressIPNodeSelector (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
GomaxprocsInjection (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
IngressControllerLBSecurityGroupsAWS (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ManagedBootImagesAWSCAPI (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
OVNKubernetesUplinkMode (0 tests)			Enabled (New)	Enabled (New)
VSpherePerComponentScopedCreds (0 tests)			Enabled (New)	Enabled (New)

New images

kube-vip git b272a734 sha256:d149d7b18bb9c4a3646cfa09751b6c5259248f66ed17660ab08683b7d0471672

Rebuilt images without code change

aws-ebs-csi-driver git 8b8c4cef sha256:4334661bf48815140b56bea2c10d4bd6079973a6b9ed4c70dc364d9f4df9c2bd
aws-machine-controllers git 9f2e9b3c sha256:0b153a9aefc39bbd8e3f3704f980fb214ccbd8f936240ec1d44069ddd33507a6
aws-node-termination-handler git e4ff2aae sha256:aee77061eb60f2abac1e9d0874b669bad5c3120d62a30979fecec0980a257e46
aws-pod-identity-webhook git 0d33a459 sha256:15ed70f7393941b5cb3d2c5b93af5055f45301147fd545657bffc034bd55aa6f
azure-cluster-api-controllers git 63731729 sha256:9c1b700edce27fad8d3b937592555d005cc7ca765bd39cb3c41d2a9042ae7dfa
azure-file-csi-driver git 9689f030 sha256:88b5422ac3f76e54ac550ff16c4bd8c2059233c9efd859422ffc9f9f65ecd204
baremetal-cluster-api-controllers git ad4f1c2b sha256:c05cdfa9853f3efb69a5bd63c8c6667950dfc8d3732fee1c94cebdeb8471db3e
cluster-kube-storage-version-migrator-operator git f5d3bfe6 sha256:b271f5c9792e38bfc58ab9659ccdbc2eca65e38b0fbfcdc6d9b980b51708325e
cluster-update-console-plugin git 02b220dd sha256:121f8852a8cdd01e63db72ab1c29f13019c9d23f716d62c618d51f2163d53040
cluster-update-keys git 9607604d sha256:dea3adb3f9377cd30d44eec5cfd70657021455b6ee51cd6dc250e3a10e5a3520
coredns git 37aaba89 sha256:55c87afb8df61a7e65012bd81a9fa45c98422c8d48da1de73da1f9ffd5de8d5c
csi-external-attacher git 3fd668b3 sha256:4789790c9cf4e7f536ea0ddf92102b055927ed89b537699a30f735203fd76299
csi-external-provisioner git 7ff338c9 sha256:372bef098fb092452eb3576db9a56afd581a551822f4bf60fdd06beaa599f918
csi-external-resizer git 14aa7028 sha256:8be5b3728c793e2b9ea9b10351c79a0a248f622d9010b4950e395de6da3d97fc
csi-external-snapshotter git a019d1a9 sha256:9c1157a6fcfaff82aae621fce9358c4eb5e0a41da8b41285735571fc902a0f16
csi-node-driver-registrar git 5766960d sha256:b98d7581fe857a5ccf0a148cde6903a1a74136da460b30f848684477aacd7c93
csi-snapshot-controller git a019d1a9 sha256:8313c5bcdddfbba20afdb955e43bb4e3237373958e4a61e2483f74097e8bd942
driver-toolkit git b63b175a sha256:5502a5562ee7deeb67a5a486ba6c429aa60016ee8c3b516ea213477ea0afd57c
driver-toolkit-10 git b63b175a sha256:287c58e5109a13d87621a57e87474bb0a7fc59483d831fe67ceb8f903da51ae7
gcp-cloud-controller-manager git 51c32646 sha256:2b24d9878b4714df859a2574c403cd86d5e1f8c02495610fd69ae98ef16d802f
gcp-workload-identity-federation-webhook git 4501ff2f sha256:158b70454f4c029451e42b99c296a59ea36b6492cef60640f59a3f4fa80c98b2
ibm-cloud-controller-manager git 11bc35dd sha256:69d42e0b7b0c7dcdf803fe86249ca70bb6bfa2bbceba79c3ea1d0974e03797d5
ibm-vpc-block-csi-driver git 3a89d7d1 sha256:9d53ea03f4e9c38051095dd683339233979c370f1150ea0376d66a0362ac68c6
ironic-machine-os-downloader git f8e41b2e sha256:88e58a22b125bf8b627dfbf4dd82c62e3bd5eefae8c3c4ebb58be9e982021e1b
ironic-static-ip-manager git 486a0418 sha256:5771c8da8b5a55ef61a486924bd52b05241a663dba3be4a66aad90da8b4413cc
kube-metrics-server git 3d2e9cd0 sha256:682f64b9779c4c8b01c80223adcce705cfc8252840db807ac23814fcc7d13fd4
kubevirt-cloud-controller-manager git 5eb884ab sha256:e086f443f43c99c1007096665ba272024c047e634120e323a7887bfb55a0f089
kubevirt-csi-driver git 7ff99994 sha256:f318612c42469cb8d2c812e9eb60bf57d2826e878224ebc6aeadd484714db8b8
nutanix-cloud-controller-manager git dc584c6b sha256:0857368d9cef98a0cc1d1b0611d875b1f274c4ca2ef4c02a8c38bf6af1fdc557
nutanix-machine-controllers git 249b7c8e sha256:9084c14a44fc685cf9b901148dbc9ae257322d0702832e3901f6e841da2a5ffa
openstack-machine-api-provider git 6b30092b sha256:e1454c43ec19ef5f27f58fa6b25858537071f4e88a5427ed3f8ef4bffab603ce
powervs-block-csi-driver-operator git f90431bf sha256:510bb2ea7c9f10ea5cf89872057b31f995c05e2470ad388444fd2b052dc76289
service-ca-operator git ed872ba1 sha256:c5f98311074795b19c19b4e60e9b27c238d13fb76b81b56c2ecd5a05430f990d
vsphere-cloud-controller-manager git eb29de19 sha256:85350d8288a93d30245f6bdee94e5d3b675b1f6c128ec95dab180e252c3be641
vsphere-cluster-api-controllers git 557fdf1a sha256:73495ea31d924de68580f493f91f07cb1296babfb779d6c331a5761b5560a908
vsphere-problem-detector git 14a2d338 sha256:465ae8c707edd8773b933a73222c97f95ed9132acd62e7a2c5e50eafb72de551

agent-installer-api-server

NO-ISSUE: Refresh RPM lockfiles [SECURITY] #10958
NO-ISSUE: [master] Bump OCP versions: 5.0, 4.18, 4.19, 4.13 #10980
MGMT-25431: CVE-2026-84445 Bump google.golang.org/grpc to v1.82.2 through indirect dependency conversion #10975
MGMT-24967: Static-IP iSCSI Boot-from-SAN Support in Assisted Installer #10925
OCPBUGS-115550: Allow agent-installer invoker to have a suffix #10968
MGMT-25123: create endpoint for listing OVE images #10933
MGMT-25355: Migrate to harness-agnostic agent configuration layout #10966
ACM-38075: Assisted Service Agent controller does not approve day-2 CSRs for worker nodes provisioned with pre-existing BMHs via ClusterInstance scale-out #10944
NO-ISSUE: [master] Bump OCP versions: 4.21, 5.0, 4.16, 4.14, 4.22, 4.20, 4.19 #10967
MGMT-24854: Cilium CNI is not supported on OCP 4.22 #10819
MGMT-25367: consider imageType when selecting OpenShift version #10917
MGMT-25406: Add OpenShift-compatible CIDR length validation #10948
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #10946
NO-ISSUE: [master] Bump OCP versions: 4.21, 4.22, 4.20 #10942
ACM-41555: Enable PQC in Dockerfiles #10901
MGMT-25131: When getting the release image for a cluster we should always prioritize cluster.OcpReleaseImage if it’s set #10938
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #10941
NO-ISSUE: [master] Bump OCP versions: 5.0 #10937
APPSRE-14688: remove legacy monitoring.coreos.com/v1 ServiceMonitors #10931
NO-ISSUE: [master] Bump OCP versions: 4.17, 5.0 #10924
OCPBUGS-120683: Fix NUMAResourcesOperator CR name so it can be applied #10910
NO-ISSUE: Update operator bundle channel to ocm-5.1 #10867
OCPBUGS-120675: added missing subscription name for lvms-operator #10909
AGENT-1529: Add ovnKubernetesConfig to install-config definition #10430
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #10912
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.19, 4.20, 4.16, 4.21 #10907
NO-ISSUE:Bump go.opentelemetry.io/otel to v1.44.0 in master #10869
MGMT-25130: assisted-service and assisted-image-service NetworkPolicy ingress has no source restriction (any pod in any namespace can reach them directly) #10906
NO-ISSUE: Modify Konflux YAMLs to ocm-5.1 #10874
MGMT-25139: Allow setting os-stream on both clusters and infraenvs #10742
MGMT-20398: Force status on bmh after install #10606
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #10884
MGMT-24877: Improve sensitive credential redaction #10857
OCPBUGS-29975: Allow multiple machine networks for UMN clusters #10817
MGMT-21334: Don’t check ImageSetRef for installed clusters #10854
NO-ISSUE: Add missing Close() #10856
MGMT-24693: fix e2e-ai-operator-disconnected-capi #10806
ACM-42573: Assisted services’ networkpolicy doesn’t work for external image service and local image registry in disconnected environment #10850
MGMT-25066: Add continuous node label reconciliation in InfraEnv controller #10813
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #10829
MGMT-25065: Add InfraEnv to Agent node label propagation #10812
NO-ISSUE: Add same-namespace egress for image-service to assisted-service #10816
NO-ISSUE: [master] Bump OCP versions: 4.21, 4.17, 4.22, 4.19, 4.18, 4.14, 4.16, 4.20 #10804
ACM-40452: CVE-2026-33815 Bump github.com/jackc/pgx/v5 to v5.9.0 #10783
ACM-40510: Fix infrastructure-operator NetworkPolicy egress to kubernetes API #10792
NO-ISSUE: Update oc-mirror locations to CGW following openshift release decoupling #10601
ACM-40436: Bump Go toolchain to go1.26.5 to fix stdlib CVEs #10770
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Refresh RPM lockfiles [SECURITY] #2339
OCPBUGS-115550: Allow agent-installer invoker to have a suffix #2341
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #2326
ACM-41555: Enable PQC in Dockerfiles #2307
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #2309
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #2304
MGMT-24885: Harden command construction and credential handling #2275
NO-ISSUE: Add approver bluesort #2286
NO-ISSUE: Modify Konflux YAMLs to ocm-5.1 #2281
NO-ISSUE: Update module github.com/golangci/golangci-lint to v2.13.2 #2285
NO-ISSUE: Update module github.com/golangci/golangci-lint to v2.13.1 #2273
NO-ISSUE: Update module github.com/golangci/golangci-lint to v2.13.0 #2271
OCPBUGS-101647: Bump golang.org/x/net to v0.56.0 #2251
Full changelog

agent-installer-node-agent

NO-ISSUE: Refresh RPM lockfiles #1590
OCPBUGS-106189: Assisted installer fails to disambiguate machines #1625
ACM-41555: Enable PQC in Dockerfiles #1622
MGMT-20398: Don’t start main agent until ironic reports it’s ready #1518
NO-ISSUE: Modify Konflux YAMLs to ocm-5.1 #1602
NO-ISSUE: Update module github.com/golangci/golangci-lint to v2.13.1 #1600
NO-ISSUE: Update module github.com/golangci/golangci-lint to v2.13.0 #1597
Full changelog

agent-installer-ui

Add Proxy and NTP configurations (#4068) #4068
Above the sea - hide pull secret field when it’s already been set (#4067) #4067
chore(deps): update dependency brace-expansion to ^5.0.12 (#4063) #4063
chore(deps): update konflux references (#4061) #4061
chore(deps): update dependency @types/node to ^24.13.5 (#4062) #4062
Add Single-Stack, Increase ImageSize Label and show LVMS Label (#4054) #4054
fix(deps): update typescript type definitions (non-major) (#4022) #4022
OCPBUGS-121378: Do not show IRI custom manifests in the disconnected UI (#4048) #4048
chore(deps): update dependency axios to ^1.20.0 (#4047) #4047
chore(deps): update dependency dompurify to ^3.4.15 (#4046) #4046
Bump js-yaml from 4.3.1 to 4.3.2 (#4034) #4034
Bump react-router from 7.18.1 to 7.18.2 (#4036) #4036
OCPBUGS-115122: Show IPv6 Technology Preview badge in Subnets dropdown for single-cluster only (#4013) #4013
Bump vitest from 3.2.6 to 4.1.11 (#4035) #4035
Bump joi from 17.13.4 to 17.13.7 (#4033) #4033
OCPBUGS-121366: Move IPv6 Technology Preview badge out of the header (#4027) #4027
Remove stale OCM_REFRESH_TOKEN code (#4012) #4012
chore(deps): update dependency postcss to ^8.5.28 (#4021) #4021
chore(deps): update konflux references (#4020) #4020
Change reuse SSH key label in OVE (#4018) #4018
Bump qs from 6.15.3 to 6.16.0 (#4011) #4011
Bump fflate from 0.4.8 to 0.4.9 (#4017) #4017
MGMT-25128: Assisted Installer UI (above-the-sea) adjustment to 4.22 GA (#3996) #3996
Bump fast-uri from 3.1.5 to 3.1.7 (#4010) #4010
Bump browserslist from 4.28.2 to 4.28.8 (#4007) #4007
Bump postcss-selector-parser from 7.1.1 to 7.1.5 (#4006) #4006
Add LVM as an operator for OVE (#4001) #4001
Allow LSO to be selected as a standalone operator (#4000) #4000
chore(deps): update dependency yup to ^1.7.1 (#3999) #3999
chore(deps): update dependency js-cookie to ^3.0.8 (#3998) #3998
Update OWNERS file (#3989) #3989
NO-ISSUE: Add Yarn resolutions for js-cookie and basic-ftp (#3985) #3985
Tweak boot instructions for disconnected (#3968) #3968
MGMT-24639: Choosing 5 masters on hosts page instead of 3 that was configured on cluster details causing the Hosts page stuck with no error/warning (#3942) #3942
Hardcode OVE openshift version from 4.21 to 4.21.27 (#3976) #3976
Resolve console warnings/errors (#3967) #3967
Add rule for creating/editing forms (#3962) #3962
chore(deps): update dependency ws to ^8.21.3 (#3974) #3974
chore(deps): update dependency dompurify to ^3.4.14 (#3973) #3973
Resolve duplicate ‘useFeature’ issue (#3969) #3969
MGMT-24493: Allow HTTPS proxy for Discovery ISO (#3777) #3777
MGMT-24494: Add exclusive NTP sources to the Add hosts discovery ISO … (#3934) #3934
MGMT-24202 | [Staging] [UI] - Air-gapped -Technology Preview badge placement is inconsistent (should appear at end of line) (#3965) #3965
Fix BasicStep Form import (#3966) #3966
NO-ISSUE: Improve the /ocm folder structure (#3817) #3817
chore(deps): update dependency postcss to ^8.5.26 (#3963) #3963
chore(deps): update dependency sanitize-html to ^2.17.7 (#3964) #3964
OCPBUGS-104439: pin postcss resolution to >=8.5.23 (CVE-2026-69153) (#3957) #3957
AGENT-1570: Remove CustomNoUpgrade featureSet and NoRegistryClusterInstall feature gate (#3954) #3954
Bump js-yaml from 3.14.1 to 4.3.1 (#3951) #3951
Bump js-yaml from 4.3.0 to 4.3.1 (#3947) #3947
chore(deps): update dependency ws to ^8.21.2 (#3950) #3950
chore(deps): update dependency dompurify to ^3.4.13 (#3949) #3949
Full changelog

agent-installer-utils

OCPBUGS-111468: prefix-validate URLs used in commands #349
OCPBUGS-111479: Quote variable expansion in skopeo inspect invocation #348
OCPBUGS-63475: Refresh rendezvous IP selection list #345
OCPBUGS-123720: Fix agent TUI timeout #346
AGENT-1577: Use master branch of appliance as image builder #333
OCPBUGS-114020: Use branch 5.1 for Konflux builds #344
AGENT-1573: Add release-5.1 config for ISOBuilder #327
Full changelog

agentic-skills

GITOPS-10499: Add Argo knowledge skill #38
NO-JIRA: resolve skill-scanner findings for CI eval job #49
NO-ISSUE: fix: add compatibility attribute to the product-lifecycle skill #50
OBSINTA-1609: cluster-troubleshoot skill rename tools to scripts #46
OTA-2024, OTA-2070: Add eval test cases for cluster-update skills #34
NO-ISSUE: cluster-update: Set ‘license’ header on both skills #48
NO-ISSUE: cluster-update/cluster-update-advisor: Rename to match skill name #47
Full changelog

apiserver-network-proxy

NO-JIRA: Merge https://github.com/kubernetes-sigs/apiserver-network-proxy:master (cc6bc61) into main #114
Full changelog

aws-cloud-controller-manager

UPSTREAM-SYNC: Merge https://github.com/kubernetes/cloud-provider-aws:master (853eb04) into main #162
Full changelog

aws-cluster-api-controllers

NO-JIRA: UPSTREAM: <drop>: update manifests-gen #657
NO-JIRA: fix(make): verify generated summary from pull request revision #656
🌱 NO-JIRA: UPSTREAM: <carry>: Remove upstream .github files unused in OpenShift CI #632
✨ OCPCLOUD-3513: feat: add gh-summary target to download manifests from GitHub #617
✨ OCPCLOUD-3513: add a tool to generate manifests-summary #616
🐛OCPBUGS-104496: UPSTREAM: <carry>: Add projected bound SA token volume for OpenShift #624
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, gcp-pd-csi-driver-operator, openstack-cinder-csi-driver-operator

OCPBUGS-113538: Enable SELinuxMount tests #605
STOR-3074: Bump OLM metadata to 5.1 #627
OCPBUGS-112272: node ServiceMonitor serverName uses guest namespace on HyperShift #603
OCPBUGS-115269: openstack-manila: Consume CA cert from CCO secret #617
NO-JIRA: Add reference to cluster-storage-operator in AGENTS.md #616
STOR-3090: Enable pod-delete-after-umount CSI suite for driver OCP manifests #596
OCPBUGS-120667: fix(gcp-pd): don’t apply guest-cluster resources against the management cluster on HyperShift #618
OCPBUGS-105410: Remove MutableCSINodeAllocatableCount featuregate #600
GCP-1074: feat(gcp-pd): enable HyperShift support for GCP PD CSI driver operator #601
OCPBUGS-111088: Replace deprecated pod.spec.service account #604
OCPBUGS-105392: Add proxy hook for HyperShift CSI driver controller deployments #594
OCPBUGS-100071: csi-driver-smb: DeleteVolume call fails to mkdir under /tmp #593
Full changelog

aws-karpenter-provider-aws

OCPBUGS-85090: Align simulated with actual allocatable resources #46
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #44
AUTOSCALE-904: Add agentic SDLC artifacts to aws-karpenter-provider-aws #41
OCPBUGS-85085: default max-pods to 250 for Custom AMI family #40
Full changelog

aws-kms-encryption-provider

OCPBUGS-124534: Bump grpc-go to v1.83.2 #55
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-105320: skip public ip check for azure stack #203
Full changelog

azure-disk-csi-driver

OCPBUGS-111076: UPSTREAM: 3754: chore: upgrade Azure cloud provider lib- #180
OCPBUGS-101779: UPSTREAM: 3756: fix: optionally skip reading the config from the API server #159
Full changelog

azure-kms-encryption-provider

OCPBUGS-124531: Bump grpc-go to v1.83.2 #65
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #64
OCPSTRAT-3549: support sovereign Managed HSM endpoints #54
CNTRLPLANE-4022: Rebase azure-kubernetes-kms to v0.11.0 for OCP 5.1 #52
OCPSTRAT-3549: Correct Managed HSM endpoints #51
Full changelog

azure-machine-controllers

OCPBUGS-105398: refactor: remove AzureWorkloadIdentity feature gate #207
Full changelog

azure-service-operator

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #47
Full changelog

azure-workload-identity-webhook

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #69
OCPBUGS-123198: Bump golang.org/x/net to v0.53.0 to address CVE-2026-33814 #70
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-126706: azure: allow isolated Ebdsv5/Ebsv5 VM families #10888
OCPBUGS-115550: use different INSTALL_INVOKER for unconfigured ignition #10848
OCPBUGS-99762: retry Azure bootstrap ignition upload #10835
OCPBUGS-90536: openstack: Guard network resource names on os_net_id being defined #10639
OCPBUGS-123770: Inject the pull-secret as podman secret in the agent-installer-ui container #10882
OCPBUGS-112483: use api-int record for ignition host when using externally managed LB and DNS #10860
no-jira: aws: fetch instance type on demand instead of listing all #10851
OCPBUGS-61892: fix swap disk nil-panic and block swap on control plane #10859
OCPBUGS-59743: azure: reject data disks on Azure Stack Hub #10823
OCPBUGS-86133: dont allow duplicate failure domains and fields #10741
OCPBUGS-91640: Warn about ignored install-config fields in ABI #10646
OCPBUGS-114375: azure: skip AppendVarPartition when DiskSetup provides a user-defined /var mount #10818
OCPBUGS-115187: Gather master only from primary IP on baremetal #10838
OCPBUGS-114882: OCPBUGS-112662: GCD load balancer health-check firewall ranges #10850
SPLAT-2923: vsphere: retry and throttle vCenter lookups during UPI VM creation #10847
OCPBUGS-59521: azure: fixes when setting DiskEncryptionSet on data disks #10776
CORS-4550: bump openshift api for gcd feature gate #10775
OCPBUGS-59520: azure: require storageAccountType when managedDisk is specified #10805
AGENT-626: Allow UserManaged LoadBalancer on baremetal/vsphere platforms #10558
OCPBUGS-59522: azure: reject securityEncryptionType on data disks #10777
OCPBUGS-45804: Update timeout in GetMarketplaceImage to 5 minutes #10767
CORS-4441: Bump Azure Marketplace Images #10764
OCPBUGS-105510: images: add BUILD_VERSION arg #10781
CORS-4308: networking: enforce NetworkObservabilityInstall feature gate #10774
MULTIARCH-6274: agent: Enable platform external s390x #10588
OCPBUGS-54305: Power VS: Get permitted network from user #9607
OSASINFRA-4359: Bump CAPO in openshift/installer #10726
OCPBUGS-60993: Enrich IBI config image proxy NoProxy with cluster networks #10649
CORS-4308: Enable Network Observability during installation #10382
OPNET-781: Add BGP VIP management support #10718
CORS-4549: gcp: set universe domain in Infrastructure status for GCD #10759
OCPBUGS-105449: update GCP auth functions & validations #10694
OCPBUGS-105456: fix KMS service agent domain for sovereign clouds #10752
OCPBUGS-88511: Disable apps DNS validation for add-nodes #10737
NO-JIRA: openstack: pin argcomplete for yq on Python 3.9 #10757
NO-ISSUE: Render OSImageStream in OKD too #10730
OCPBUGS-105407: Remove VSphereMultiNetworks feature gate #10760
OCPBUGS-74510: vsphere: remove VSphereMultiDisk feature gate references #10753
no-jira: Update GCD ability to identify project #10745
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

baremetal-machine-controllers

OCPBUGS-123730: Bump golang.org/x/net to v0.58.0 to address CVE-2026-33814 #279
OCPBUGS-112338: Fix race that can provision multiple hosts #275
Full changelog

baremetal-operator

OCPBUGS-121877: pull in gophercloud fix for fast inspection #525
OCPBUGS-122043, OCPBUGS-91736: Merge upstream #524
NO-ISSUE: Merge upstream 2026-09-03 #523
NO-ISSUE: Restore .golangci.yaml downstream #522
Full changelog

baremetal-runtimecfg

OCPBUGS-98258: Cloud Platforms: Filter out node’s own IP from Upstreams #399
OCPBUGS-86571: node-ip: wait for both address families on dual-stack clusters #391
OPNET-785: Add FRR peer-file rendering for BGP-based VIP management #395
Full changelog

cli, cli-artifacts, deployer, tools

OCPEDGE-2416: Add oc adm transition topology command for SNO to HA transitions #2295
OCPBUGS-126457: [oc create route edge –help] Typo in WildcardPolicy option description #2409
OCPBUGS-122354: Fix inconsistent terminology in oc set probe help example #2404
OCPBUGS-122036: docs(env): add deployment example for configmap import in oc set env help #2401
NO-JIRA: README: Mention gcc as an oc dependency #2402
OCPBUGS-122005: Add IDMS support to oc image info #2397
OCPBUGS-114015: Added deployment example to oc set env help command #2389
NO-JIRA: Move to openshift/osincli #2386
NO-JIRA: Fix oc builds on Mac OS X Apple Silicon machines #2246
OTA-1959: oc adm upgrade recommend works with accepted risks #2370
OCPBUGS-85019: oc login: Fix polluting KUBECONFIG file #2357
Full changelog

cloud-credential-operator

CCO-771: Add ccoctl apply secrets command for AWS, Azure and GCP #1095
OCPBUGS-17664: Improve error messages for SCP-denied IAM operations #1084
CCO-849: bump go toolchain to 1.26.5 to resolve snyk complaints #1065
OCPBUGS-112282: In testing skip pod-identity-webhook checks on external platform #1085
CORS-4544: WIF Support on GCD #1073
CCO-848: Add tls-min-version and tls-cipher-suites CLI flags to CCO #1063
OCPBUGS-83624: Embed credentials_request.yaml template in test binary #1072
Full changelog

cloud-network-config-controller

OCPBUGS-105398: refactor: remove Azure workload identity feature gate #266
OCPBUGS-112564: Fix CVE-2026-41178 - bump go.opentelemetry.io/otel to v1.44.0 #262
OCPBUGS-87249: on AWS, select associated IPv6 CIDR block for egress IP subnet #228
Full changelog

cluster-authentication-operator

OCPBUGS-107949: fix CVE-2026-41178 by updating otel to v1.44.0 #978
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2478 #1006
OPRUN-4768: bump openshift/api #1005
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2463 #997
OCPBUGS-114428: Update build-machinery-go vendor dependency #991
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2439 #987
CNTRLPLANE-3237: pick https://github.com/openshift/library-go/pull/2449- #2287 #985
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2451 #984
CNTRLPLANE-3237: kms: wire EncryptionConfigurationComputer into encryption controllers #983
NO-JIRA: Bump library-go #977
CNTRLPLANE-3237: kms: wire preflight deployer #975
NO-JIRA: Update library-go to get latest changes #976
NO-JIRA: bump library-go changes #974
NO-JIRA: update KMS tests with bump library-go changes #969
NO-JIRA: Remove rh-roman from OWNERS #970
NO-JIRA: Retry conflict errors on UpdateKMSEncryptionStatus function #968
CNTRLPLANE-3237: kms key controller preflight support- #747 #965
CNTRLPLANE-2589: Migrate test/e2e-oidc to OTE + bug fixes(imagestream,scc,Pathological Event Monitor) #945
Full changelog

cluster-autoscaler

AUTOSCALE-898: Add agentic SDLC files #437
Full changelog

cluster-autoscaler-operator

AUTOSCALE-899: add claude and contributing files #399
OCPBUGS-111092: update version to properly detect errors #395
OCPBUGS-105277: implement startupTaints #383
Full changelog

cluster-baremetal-operator

Metal-1833: Add attach_non_bootable_iso OTE test #617
OCPBUGS-115207: Make HostPath VolumeMounts ReadOnly for image customization container #658
OCPBUGS-86888: Fix IDMS YAML serialization for oc image extract #645
METAL-1833: Add bmo_validations and ncsi_reject_poweroff OTE test #618
OCPBUGS-115067: Use bcrypt DefaultCost for Ironic passwords #650
OCPBUGS-114433: Increase firmware e2e timeouts and add HPE Mellanox NIC bastion mapping #649
OCPQE-32100: Add batched firmware update tests (bmc+bios+nic) #643
OCPBUGS-105610: drop IRONIC_INSECURE from BMO #642
OCPBUGS-105455: Fix infinite reconciliation loop in EnsureMirrorConfig #641
Full changelog

cluster-bootstrap

OCPBUGS-114428: Update build-machinery-go vendor dependency #146
CNTRLPLANE-3717: Add Agentic SDLC context files #133
CNF-23048: Migrate away from deprecated ioutil #123
Full changelog

cluster-capi-controllers

OCPCLOUD-1501: allow CAPI manager to patch Nodes #311
OCPCLOUD-1501: add OpenShift CAPI manager local cluster RBAC #310
OCPCLOUD-3434: fix REPO_NAME #307
OCPCLOUD-3434: add gh-summary target to download manifests from GitHub #306
OCPCLOUD-3434: Generating manifests-summary #305
Full changelog

cluster-capi-operator

OCPCLOUD-1501: use projected tokens for management kubeconfig #669
OCPBUGS-100155: fix flaky MachineSet sync test by atomically verifying InfraTemplate #647
OCPBUGS-114670: fix(capi2mapi): normalize empty SSHKeyName to nil for MAPI AWS conversion #659
OCPBUGS-115197: machinesync: preserve Synchronized condition lastTransitionTime in CAPI-to-MAPI sync #656
NO-JIRA: Skip CAPI IPAM test on MicroShift #661
OCPCLOUD-3557: split capi-controllers and machine-api-migration #622
NO-JIRA: port OTP CAPI tests to OTE framework #627
OCPBUGS-105850: skip Cluster API Machine Management tests on External topology #646
NO-JIRA: embed transformer YAML so go mod vendor copies it #657
OCPCLOUD-3442: Migrate four controllers to per-controller condition reporting #577
NO-JIRA: Fix flaky CI unit tests: reduce parallelism #645
OCPBUGS-85063: Fix CredentialsRequest capability annotations #630
OCPBUGS-104496: aws: use capa-controller-manager as service account #644
OCPCLOUD-3513: Generate the manifests summary #643
OCPCLOUD-2664: Aggregate controller statuses in clusteroperator controller #574
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-111416: Moved node sync job creation from manifest to operator controller #504
OCPBUGS-105385: Bump cloud-provider-aws to fix NLB e2e occasional timeout failures #503
CORS-4551: GCP: mount bound sa token volume #502
OCPBUGS-100052: Created new job to update vSphere nodes to have vsphere label #497
OCPBUGS-105409: chore: remove AWSServiceLBNetworkSecurityGroup feature gate references #500
Full changelog

cluster-config-api

CNTRLPLANE-3237: replace KMS config with pluginConfig reference #3028
HPCASE-362: Promote TLSAdherence feature gate to GA #2883
NO-JIRA: Fix codegen diagnostic formatting #3049
operator: Add an option to configure OVN-Kubernetes GatewayConfig without an uplink specified. #3009
OCPBUGS-105398: chore: remove AzureWorkloadIdentity feature gate #3018
OPRUN-4768: Add serving TLS curve preferences #3044
Remove feature gate VolumeGroupSnapshot #3027
STOR-3089: Graduate SELinuxMount to GA #3023
OCPBUGS-112638: register DRADeviceTaintRules in TPNU #3004
Fix validation pattern for machine/vsphereprovider #3033
features: enable TLSAdherence feature gate for OKD featureset #3021
CORENET-7538: Add EgressIPNodeSelector feature gate #3032
SPLAT-2890: Add VSphereScopedCredentials feature gate #2988
MCO-2332: MCO-2333: Introduce CAPI resource types to boot image update API #2990
OCPBUGS-99266: move empty CRIOCredentialProviderConfig CR to run-level 0000_10 #3011
OCPBUGS-105399, OCPBUGS-105400: Remove SigstoreImageVerification and SigstoreImageVerificationPKI feature gates #3000
OCPBUGS-112330: Fix ‘supercede’ typos in machineconfiguration types #2996
SPLAT-2864: Promote VSphereMultiVCenterDay2 to GA #2968
CORS-4550: Promote GCD to Default #2991
OCPBUGS-105407: Remove VSphereMultiNetworks feature gate #2975
config/v1: add IBMCloudServiceTransitGateway and IBMCloudServicePowerVS to IBMCloudServiceName #2959
OCPNODE-4526: Block ‘..’ traversal in StorePath #2999
OCPBUGS-74510: Remove VSphereMultiDisk feature gate #2973
Add printer columns to PodNetworkConnectivityCheck CRD #2977
NE-2387: IngressController AWS NLB Security Group Selection #2914
OCPBUGS-112479: Handle Sippy date-only format in featuregate-test-analyzer #2998
CNTRLPLANE-3871: promote OSStreams feature gate to Default for Hypershift #2993
TRT-2908: Revert “CNTRLPLANE-3871: promote OSStreams feature gate to Default for Hypershift” #2989
OCPBUGS-105409: chore: remove AWSServiceLBNetworkSecurityGroup feature gate #2974
CORS-4529: Azure IL6 Secret Cloud support #2919
CNTRLPLANE-3609: graduate etcdBackendQuota to GA #2946
CNTRLPLANE-3871: promote OSStreams feature gate to Default for Hypershift #2950
OCPNODE-4601: Add {system,container}GomaxprocsBehavior field #2934
MON-4608: add interrupts to NodeExporterCollectorConfig CRD types #2955
STOR-3014: Promote SELinuxMountGAReadiness to GA #2964
Promote ExternalOIDCWithUpstreamParity to Default feature set #2915
STOR-2959: Promote VolumeGroupSnapshots to GA #2965
Move GCD to TechPreview #2970
OCPNODE-4521: Promote AdditionalStorageConfig feature gate to Default #2858
Full changelog

cluster-config-operator

NO-JIRA: chore: Adding some edge folks as OWNERS in the topology controller #508
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #504
OCPBUGS-114428: Update build-machinery-go vendor dependency #500
OCPEDGE-2747: feat: add topology transition controller for day-2 SNO to HA transitions #495
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-86988: Guard against empty workspace field on vsphere #407
OCPBUGS-105222: GCP e2e: bump only memory for E2 custom machine types #417
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-104846: Remove VolumeGroupSnapshot feature gate #297
Full changelog

cluster-dns-operator

ART-23537: Fix hermetic build failure by removing update-bindata from build target #489
NE-2880: Update GitHub issue template URLs #487
NE-2126: Migrating DNS operator test cases from QE repo #485
Full changelog

cluster-etcd-operator

OCPBUGS-126911: fix(tnf): set read-only root filesystems #1715
CNTRLPLANE-4414: allow TLS 1.3 profiles without ciphers #1710
NO-JIRA: refactor: remove unused cert-watcher daemonset manifest #1711
OCPBUGS-123168: fix: add missing workload paritioning annotation on cert-watcher daemonset #1706
OCPBUGS-104851: feat: add cert-watcher DaemonSet to restart etcd on CA bundle rotation #1675
OCPBUGS-94106: fall back to intermediate ciphers during etcd bootstrap #1689
OCPBUGS-80957: Reset node status when UID changes #1687
OCPBUGS-105322: fix etcdSignerCAExpiration* alert description wording #1686
CNTRLPLANE-4131: update to latest api to pull in etcd db ga #1680
OCPBUGS-109740: Fix tnf_cluster_in_service during per-node maintenance #1678
OCPBUGS-109743: Derive console notification docs URL from cluster version #1676
OCPEDGE-2118: Fix pcs stderr handling #1674
CNTRLPLANE-3460: Refactor defrag controller to lower impact of defrag #1618
OCPBUGS-81500: fix: udpate healthcheck previous state only after successful operator status update #1614
OCPBUGS-105357: Fix TNF fencing skip for IPv6 bracketed stonith IPs. #1669
Full changelog

cluster-image-registry-operator

OCPBUGS-114531: Add 2m degraded inertia to ImagePrunerController #1365
OCPBUGS-112551: imageconfig: Preserve ImageStreamImportMode during upgrade race #1363
OCPBUGS-86308: do not report progressing during cluster scale up #1361
OCPBUGS-113705: CNTRLPLANE-3779: Migrated go standard cases to ote #1343
Full changelog

cluster-ingress-operator

OCPBUGS-122346: Fix GatewayClass index registration retries during bootstrap #1588
OCPBUGS-105442: Remove escalate/bind from Sail Library ClusterRole #1548
NE-2909: Address Gateway API management-mode follow-ups #1595
OCPBUGS-105317: Bump to OSSM 3.4.2 and istio 1.30.4 #1576
OCPBUGS-105398: docs: clarify Azure workload identity token file #1586
NO-JIRA: Add pedjak to OWNERS #1596
NE-2388: aws nlb security groups #1500
NE-2779: Implement Gateway API management mode #1547
OCPBUGS-86050: Update ROUTER_CURVES environment variable for go 1.26 #1542
OCPBUGS-6718: minimize wildcard RBAC permissions #1579
OCPBUGS-105398: refactor: remove Azure workload identity feature gate #1575
NE-2491: Delete the CRL controller #1536
WAF-3: Implement extension provider capability for WAF #1555
OCPBUGS-62627: Suppress Progressing during infrastructure-driven ingress unavailability #1496
OCPBUGS-92835: add grace period to Available condition for deployment… #1544
OCPBUGS-109582: Normalize malformed CIDRs to avoid upgrade disruptions #1549
OCPBUGS-91026: Add missing KAS-defaulted fields to ValidatingAdmissionPolicy manifest #1560
OCPBUGS-112280: Preserve server-defaulted fields on init containers and volumes #1557
NE-2856: Fix staticcheck warnings across multiple packages #1553
NE-2032: e2e: Signal service deprovisioning issues during Gateway DNS test #1220
OCPBUGS-101783: reconcile canary certificate on dependency creation #1538
OCPBUGS-100074: Use /healthz for router startup probe #1528
OCPBUGS-86841: Add BackendTLSPolicy and ReferenceGrant e2e test coverage helpers #1467
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-112638: apienablement: enable resource.k8s.io/v1beta2 when DeviceTaintRule is enabled #2275
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2478 #2313
OPRUN-4768: bump openshift/api #2316
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2463 #2309
OCPBUGS-114428: Update build-machinery-go vendor dependency #2307
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2439 #2282
CNTRLPLANE-3237: pick https://github.com/openshift/library-go/pull/2449 #2287
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2451 #2289
CNTRLPLANE-3237: kms: wire EncryptionConfigurationComputer into encryption controllers #2292
NO-JIRA: Bump library-go #2286
CNTRLPLANE-3237: kms: wire preflight deployer #2276
NO-JIRA: Update library-go to get latest changes #2280
OCPBUGS-80958: Kube apiserver node replace #2199
NO-JIRA: bump library-go changes #2270
OCPBUGS-38661: Use 10min inertia for GuardControllerDegraded #2273
OCPBUGS-85183: Add kind-aware staleness detection for runtime-config entries #2179
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2430 #2271
NO-JIRA:Remove old perf tests and update Makefile #2269
CNTRLPLANE-4110: Migrate e2e encryption perf cases to ote #2256
NO-JIRA: update KMS tests with bump library-go changes #2264
OCPBUGS-85181: Remove MutatingAdmissionPolicy from defaultGroupVersionsByFeatureGate #2141
NO-JIRA: Retry conflict errors on UpdateKMSEncryptionStatus function #2265
NO-JIRA: Update KMStoKMS scenario to multi provider #2261
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-114428: Update build-machinery-go vendor dependency #967
OCPBUGS-107974: fix CVE-2026-41178 #955
OCPBUGS-38662: Use 10min inertia for GuardControllerDegraded #956
OCPBUGS-99770: Remove unnecessary namespace informers from kubeInformersForNamespaces #950
OCPBUGS-99770: remove duplicate wrappings of core_getters #952
CNTRLPLANE-3778: Migrate openshift-test-private kcm cases to OTE #943
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-114428: Update build-machinery-go vendor dependency #676
OCPBUGS-107969: bump otel to v1.44.0 to fix CVE-2026-41178 #662
OCPBUGS-38663: Use 10min inertia for GuardControllerDegraded #661
Full changelog

cluster-machine-approver

OCPBUGS-99489: Add NetworkPolicy manifests to openshift-cluster-machine-approver namespace #313
OCPBUGS-121194: fix: retry serving CSRs while Machine addresses populate #321
OCPBUGS-57437: Always validate EgressIPs #309
Full changelog

cluster-monitoring-operator

OCPBUGS-126689: fix(e2e): use Job with backoffLimit for TestDocExamples #3094
OCPBUGS-123794: Fix flaky TestTelemetryReport/rate_issues #3093
NO-JIRA: [bot] Synchronize versions of the downstream components #3097
MON-4689, OCPBUGS-123539: Bump prometheus-operator jsonnet and libs to v0.94.0 #3083
OCPBUGS-123792: restore node-exporter textfile metrics with read-only rootfs #3088
NO-JIRA: [bot] Synchronize versions of the downstream components #3089
NO-JIRA: Skip flaky TestTelemetryReport/rate_issues subtest #3087
OCPBUGS-83375: Create alerting rule for metrics-server failing to scrape kubelet #2933
MON-4638: align ThanosQueryOverload description with for=1h #3062
MON-4665: wire zoneinfo node-exporter collector from ClusterMonitorin… #3063
NO-JIRA: Makefile: ensure JUnit test name prefix is applied even on test failure #3079
NO-ISSUE: update jsonnet dependencies #3077
NO-JIRA: [bot] Synchronize versions of the downstream components #3076
MON-4560: implement merge logic in CMO for the new field in the ClusterMonitoring CRD #3056
MON-4632, MON-4633: Send metrics ramen:dr_policy_type:max and ramen:dr_protected_apps:max via Telemetry #3074
MON-4617: Update kube-prometheus and add resourceMetricsAPI field #3069
NO-JIRA: [bot] Synchronize versions of the downstream components #3068
NO-JIRA: Fix staticcheck warnings across multiple packages #3059
NO-JIRA: test: produce JUnit XML from e2e runs in CI #3054
NO-JIRA: Makefile: version-stamp golangci-lint binary to prevent stale linter - #3057#3057 #3057
OCPBUGS-99769: wrap library-go resourceCache with mutex for thread safety #3040
NO-JIRA: hack/tools: remove unused vendor directory #3055
MON-4548, MON-4549, MON-4550, MON-4551: Enforce Thanos grpc tls parameters #3018
MON-4612: log Phase 1 dual ConfigMap/CRD configuration notice #2995
MON-4559: enable interrupts node-exporter collector via config #2888
NO-JIRA: [bot] Synchronize versions of the downstream components #3049
MON-4629: support the nvmesubsystem collector in the config CRD #3046
NO-JIRA: update OWNERS #3050
NO-JIRA: feat: validate systemd units #3048
OCPBUGS-105438: feat: support ogx api adoption metrics #2984
OCPBUGS-105389: enable read-only rootfs for all containers #3039
Full changelog

cluster-network-operator

NO-JIRA: fix(ovn-kubernetes): disable local DB probes #3163
CORENET-7275: Add AGENTS.md, point CodeRabbit knowledge base at it #3146
CORENET-7479: Add status.vrfName and shortNames to UDN/CUDN CRDs #3145
OCPBUGS-113591: golangci-lint: enable ContextTodo/ContextBackground in usetesting #3138
OCPBUGS-92080: Adds rendering of enable-multi-network-policy in ovnkube-node #3084
OCPBUGS-112562: CVE-2026-41178 - bump go.opentelemetry.io/otel to v1.44.0 #3132
OCPBUGS-112278: Add ConfigMap hash annotation to networking console plugin deployment #3131
CORENET-6714: Install NOO using OLMv0 instead of OLMv1 #3115
OCPBUGS-64582: Drop strategy.rollingUpdate and switch strategy.type to Recreate via pre-patch in frr-k8s-statuscleaner deployments on SNO #3121
OCPBUGS-105887: Filter unsupported cipher suites to prevent ovnkube-identity crash #3119
NO-ISSUE: modernise the codebase using go fix #3113
CORENET-7330: Allow per-node OVN encap IP override via env-overrides #2998
NO-ISSUE: Drop github.com/pkg/errors #3112
OCPBUGS-64582: frr-k8s: use Recreate strategy for statuscleaner deployment #3104
Full changelog

cluster-node-tuning-operator

OCPBUGS-127362: E2E: ovsDpdk remaining cases and consolidate suite #1628
OCPBUGS-116703: E2E: add missing matcher to offlined CPU Expect() calls #1629
OCPBUGS-112336: apis: add missing fields to apis v1 #1597
NO-JIRA: Fix CentOS Stream image build failing in dnf history undo #1633
CNF-23698: e2e: make OVS dynamic pinning tests compatible with ovsDpdk CPUs #1598
CNF-25173: e2e: resolve primary MCP from profile in test 32364 #1624
OCPBUGS-113651: Disable timer.migration on RHCOS 10 #1614
CNF-26060: add optional –ovs-dpdk-cpu-count flag (default 0) #1590
NO-JIRA: Bump Kubernetes, OpenShift and other dependencies #1615
OCPBUGS-113647: E2E: Minor fixes to Memory Manager and hugepages split tests #1578
OCPBUGS-112537: E2E: Fix ovs dynamic pinning, kubelet and mustgather tests #1565
CNF-26497: unconditionally disable fwupd-refresh.timer #1591
OCPBUGS-112025: Bump golang.org/x/net #1593
OCPBUGS-105476: Update PPC help description #1582
OCPBUGS-105458: Use Add() instead of AddRateLimited() for routine Profile enqueues #1584
NO-JIRA: ci: disable smt alignment for ovsDpdk tests #1589
CNF-26546: tuned:irqs: set default_smp_affinity using irqaffinity= #1572
CNF-20633: Enable nohz_full and skew_tick by default #1564
OCPBUGS-98060: BUG-FIX Latency Test #1566
Full changelog

cluster-olm-operator

OCPBUGS-105876: Wire availableInertia into the olm StatusSyncer #233
OPRUN-4645: observe and apply TLS curve preferences to operand deployments #226
NO-ISSUE: Bump helm.sh/helm/v3 from 3.21.3 to 3.21.4 #235
NO-ISSUE: Bump the k8s-dependencies group across 1 directory with 5 updates #237
NO-ISSUE: Bump golang.org/x/text from 0.40.0 to 0.41.0 #234
NO-ISSUE: Bump github.com/stretchr/testify from 1.11.1 to 1.12.1 #236
NO-ISSUE: Bump the k8s-dependencies group across 1 directory with 5 updates #227
NO-ISSUE: Bump github.com/operator-framework/operator-controller from 1.5.1 to 1.11.0 #228
NO-ISSUE: Update dependabot config with NO-ISSUE prefix #232
NO-ISSUE: Bump github.com/go-logr/logr from 1.4.3 to 1.4.4 #231
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-109468: fix CVE-2026-41178 by updating otel to v1.44.0 #761
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2478 #783
OPRUN-4768: bump openshift/api #782
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2463- #2309 #770
OCPBUGS-114428: Update build-machinery-go vendor dependency #768
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2439 #767
CNTRLPLANE-3237: pick https://github.com/openshift/library-go/pull/2449- #2287 #764
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2451 #763
CNTRLPLANE-3237: kms: wire EncryptionConfigurationComputer into encryption controllers #762
NO-JIRA: Bump library-go #760
CNTRLPLANE-3237: kms: wire preflight deployer #758
NO-JIRA: Update library-go to get latest changes #759
NO-JIRA: Update KMS cases and bump library-go #756
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2430 #754
OCPBUGS-105786: Revert “Revert “NO-JIRA: Disable WatchList feature gate due to the missing support of Project watch”” #751
NO-JIRA: update KMS tests changes with latest library-go bump #753
NO-JIRA: Retry conflict errors on UpdateKMSEncryptionStatus function #752
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-112448: Bump kubernetes dependencies to v1.36 #444
Full changelog

cluster-policy-controller

CNTRLPLANE-3731: Add Agentic SDLC context files to cluster-policy-controller #191
OCPBUGS-87476: Updating ose-cluster-policy-controller-container image to be consistent with ART for 5.0 #188
Full changelog

cluster-samples-operator

OKD-425: Revert openliberty back to 26.0.0.6 #709
TRT-2905: Fix python:latest and nodejs template references after UBI 8 tag removal #706
OCPBUGS-106188: Periodic sync of supported OCP samples #695
OCPBUGS-106187: Periodic sync of OKD samples #683
OCPSTRAT-3578: Add NetworkPolicy manifests for openshift-cluster-samples-operator namespace #703
OCPBUGS-105319: update kubernetes api to v0.36.3 #704
Full changelog

cluster-storage-operator

GCP-958: re-enable GCP PD CSI driver in HyperShift path #742
GCP-958: temporarily disable GCP PD CSI driver in HyperShift path #739
GCP-1075: feat(gcp-pd): enable HyperShift support for GCP PD CSI driver operator #728
OCPBUGS-112710: clusterrole/openshift-csi-main-snapshotter-role needs volume group snapshot rules #727
OCPBUGS-91027: Add KAS-defaulted fields to storage-operator ValidatingAdmissionPolicy manifests #726
OCPBUGS-105391: Pass management cluster proxy env vars to CSI driver operator deployments #723
STOR-3011: Implement CSO upgrade check and Prometheus alerts for SELnuxMount readiness, updated runbook URL #724
Full changelog

cluster-version-operator

OKD-194: Add OKD cincinnati as the default update service for OKD #1466
OTA-2109: harden console plugin nginx TLS configuration #1453
OTA-2110: remove cluster_id from LLM-bound readiness payload #1451
OTA-2111: set readOnlyRootFilesystem on console plugin container #1452
OTA-2108: restrict console plugin NetworkPolicy to openshift-console namespace #1450
OTA-2106: drop NetworkCheck (SDN gone, proxy data unused) #1442
NO-ISSUE: pkg/readiness/cluster_conditions: Conditionally include Upgradeable #1463
OCPBUGS-54864: reduce verbosity of skipping metrics log messages #1439
NO-ISSUE: OWNERS: Pratik is no longer at Red Hat :( #1449
OCPBUGS-80925: Remove the CRB for the default openshift-cluster-version SA #1366
OCPBUGS-110322: pkg/agenticrun/controller: Pivot to cluster-update-advisor directory #1446
“OTA-2107: Harden AgenticRun against indirect prompt injection” #1443
OCPBUGS-14392: make sync status Failure logs human-readable #1440
Full changelog

configmap-reloader

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #84
Full changelog

console

NO-JIRA: small improvements and dep bumps #17219
CONSOLE-5113: Add default namespace warnings #17177
OCPBUGS-126807: Post qa-verify evidence via gh’s native –attach instead of base64 #17193
OCPBUGS-125223: restore some old test-prow-e2e scenarios #17187
OCPBUGS-126219: i18n upload/download routine task - version 4.²³⁄₅.0 (Additional) #17190
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #17176
OCPBUGS-90834: Fix empty vSphere connection details after upgrade #17020
OCPBUGS-123141: i18n upload/download routine task - version 4.²³⁄₅.0 #17165
CONSOLE-4998: Add types for serverless resources #17152
OCPBUGS-121263: bump go-git to 5.19.2 #17148
OCPBUGS-115458: CVE-2026-84375 bump js-yaml to 3.15.²⁄₄.3.2 #17133
OCPBUGS-115318: fix Helm test flake by replacing pkill with PID-file cleanup #17128
OCPBUGS-120684: Update stale comment #17141
NO-JIRA: add prettier to playwright folder #17137
OCPBUGS-115300: Stabilize topology, node-groups, and debug-pod e2e #17134
OCPBUGS-115300: Fix Playwright login helper idempotency and session recovery #17126
HELM-480: Change handler return code #17042
OCPBUGS-115298: Rename e2e scripts so playwright is the main one #17127
CONSOLE-5002: UserPreferenceContextand linting follow up #17124
OCPBUGS-109632: Fix webhook creation in Git for PAC #17078
NO-JIRA: fix session-persistence tests failing due to pre-loaded storageState #17121
CONSOLE-5002: re-render user preferences only when a listened key changes #17104
OCPBUGS-114052: move yarn install to prow scripts #17119
OCPBUGS-115128: Upgrade grpc to v1.83.2 and x/net to v0.58.0 #17120
RFE-9146: Docs followup for service account impersonation #17093
CONSOLE-5000: Remove Redux activeNamespace in favor of NamespaceContext #17102
NO-JIRA: Improve readability of test-frontend output #17080
OCPBUGS-112809: Restore panic on Helm test infrastructure failure #17077
OCPBUGS-85646: display operators in catalog when Tech Preview enabled #16976
OCPBUGS-95590: Hide Builds nav section when Build capability is disabled #16891
CONSOLE-5001: Remove ImmutableJS #17024
OCPBUGS-105603: Strip version tag from OCI chart URL to prevent doubl… #16999
OCPBUGS-99884: Fix “Set as default” StorageClass action #17066
OCPBUGS-112462: Remove empty integration-tests package from CI #17064
OCPBUGS-52186: Show CPU/Memory metrics for non-admin users on Projects page #17001
OCPBUGS-111698: Migrate app/ Cypress e2e tests to Playwright #17015
OCPBUGS-112046: fix Helm test flake by detecting dead processes early #17039
CONSOLE-5463: Turn on react compiler linting rules #17032
OCPBUGS-75963: Fix Edit Machine count action on MachineSet details page #17038
OCPBUGS-95597: Fix UI validation for private Bitbucket repositories #17028
OCPBUGS-111634: Keep OLS cluster-update prompts within OpenAI 32k limit #17018
OCPBUGS-111699: Migrate secrets e2e tests from Cypress to Playwright #17006
CONSOLE-5159, OCPBUGS-95606: Replace deprecated Node10 moduleResolution with Bundler for TS6 compatibility #16259
OCPBUGS-111929: Fix plugin entrypoint failing to load #17027
HELM-827: Add RTL unit tests for 9 critical Helm plugin components #16909
NO-JIRA: add myself to owners and add frontend owners to .claude #17025
OCPBUGS-86298: Fix missing Impersonate action on RoleBinding detail page #16783
OCPBUGS-86294: Fix MachineAutoscaler modal crash when opened from detail page #16781
OCPBUGS-86511: Fix flaky TestAsyncCache backend test #17009
OCPBUGS-111644: Shared Playwright e2e context and test generation skill #16986
CONSOLE-5003: reimplement and enable jest linting #17019
OCPBUGS-95594: make cloud provider fields optional during operator install #16927
OCPBUGS-14473: Guard against undefined data in dashboard charts #16952
Fix for OCPBUGS-104441: CVE-2026-69152 #16937
CONSOLE-5040: Detangle TableColumn and ConsoleDataViewColumn #16984
CONSOLE-5451: Display projected volume sources with navigable links in Volumes table #16924
OCPBUGS-109592: Bump to @rspack/core 2.1.10 #16978
CONSOLE-5132: Migrate console plugins table to DataView #16942
OCPBUGS-106132: fix gap in data view checkbox col #16964
CONSOLE-5438: Expose ResourceYAMLEditor onCancel to the SDK #16941
OCPBUGS-105598: Bump to @rspack/core 2.1.9 and drop “megahard” packages #16950
OCPBUGS-70112: Add Cache-Control headers to console responses #16923
OCPBUGS-105519: Fix flaky e2e tests missing warmupSPA #16939
OCPBUGS-98943: Make developerCatalog.types matching case-insensitive #16876
OCPBUGS-105517: Fix flaky search.spec.ts Playwright e2e tests #16938
OCPBUGS-95592: Humanize memory and storage values in ResourceQuota display #16874
CONSOLE-5428: follow up la migration du i18next-cli #16926
OCPBUGS-67295: Fix icon display for duplicate operator names from different catalogs #16898
OCPBUGS-81511: Remove unscoped CSV watch from ClusterNotUpgradeableAlert #16904
And 27 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

CONSOLE-5405: Update console-operator to Kubernetes 1.36 #1211
OCPBUGS-104500: Use content hash for ConfigMap deployment annotations #1217
OCPBUGS-71237: Generate session-secret for all auth types #1204
OCPBUGS-58422: Handle disabled Ingress capability in HyperShift #1182
OCPBUGS-92204: Clear stale OIDC degraded condition on auth type change #1212
CNF-23047: Migrate away from deprecated ioutil #1072
OCPBUGS-104854: Fix excessive DeploymentUpdated events via content hash #1210
OCPBUGS-109670: Derive documentationBaseURL dynamically from OPERATOR_IMAGE_VERSION #1209
OCPBUGS-109419: Bump documentationBaseURL to 5.0 #1207
OCPBUGS-77026: DNS optimization, add trailing dots #1112
OCPBUGS-95602: Add OpenShift Quickstart for JBoss EAP 8 #932
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-83863: Remove rhel8 build stage #228
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-98116: Bump golang.org/x/crypto to v0.52.0 #410
Full changelog

csi-driver-nfs

UPSTREAM-SYNC: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master (f12e133) into main #199
Full changelog

csi-external-snapshot-metadata

NO-ISSUE: Bump golang.org/x/net to v0.53.0 and Go to 1.25.10 #22
Full changelog

csi-livenessprobe

OCPBUGS-122222: Bump go.opentelemetry.io/otel to v1.44.0 to address CVE-2026-41178 #96
Full changelog

docker-builder

NO-JIRA: Bump golang.org/x/crypto, update CI builder images and go directive to go1.26 #555
Full changelog

docker-registry

OCPBUGS-99398: Fix resolveUpstreamRef to properly propagate not-found errors #475
Full changelog

egress-router-cni

OCPBUGS-105251: Update Dockerfiles #111
Full changelog

etcd

CNTRLPLANE-3724: add agentic context docs for the openshift/etcd fork #411
DOWNSTREAM: carry: OCPBUGS-103516: Replace bbolt with patched fork to remove MADV_RANDOM #395
Full changelog

gcp-cluster-api-controllers

UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.13.1 (8198b8b) into main #302
Full changelog

gcp-machine-controllers

OCPBUGS-82191: Wait for RUNNING before providerID; retry stockout #160
Full changelog

gcp-pd-csi-driver

STOR-3064: Add Universe Domain Support (for Google Cloud Dedicated) #126
Full changelog

haproxy-router, haproxy-router-haproxy28, haproxy-router-haproxy32

OCPBUGS-77056: Lock DeleteFunc to stop SARCompleted overwriting rejection #840
OCPBUGS-77056: Make external cert validation asynchronous (v3 — fix re-admission after secret deletion) #828
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-123651: UPSTREAM: <carry>: Use FROM scratch for RHEL pause image #2774
NO-JIRA: Rebase master to Kubernetes v1.36.4 #2777
NO-JIRA: Skip SELinuxMountReadWriteOncePodOnly tests now that SELinuxMount is GA #2782
OCPBUGS-104846: UPSTREAM: 141358: Enable group snapshot tests in all configurations #2747
NO-JIRA: Make graceful-termination-duration flag required for the watch-termination command #2761
OCPBUGS-100170: Rebase master to v1.36.3 #2746
OCPBUGS-64847: kubelet: don’t use non-admitted pods in calculation #2667
Full changelog

hypershift

CNTRLPLANE-4090: Move HostedControlPlaneNamespace to shared package #9551
SPLAT-2742: remove inlined SetSecurityGroups IAM permission #9717
CNTRLPLANE-4213: decouple konflux pr pipelines #9413
NO-JIRA: test(e2e): check OS streams for OpenShift 5.0 nightlies #9712
CNTRLPLANE-3755: fix(e2e): gate release-specific fields for version compatibility #9564
CNTRLPLANE-2775: Expose KAS availability and latency metrics from CPO #9244
CNTRLPLANE-4092: Move dump.go to its own package to break transitive dependency on sharedingress #9727
OCPBUGS-125907: fix(aws): use unique Route 53 caller references #9647
OCPBUGS-114723: Decouple user CA bundle reconciliation from resources controller #9458
NO-JIRA: chore(owners): add daniel-rejniak to gcp-reviewers #9700
CNTRLPLANE-4304: fix(ci): validate pending commit messages with gitlint #9710
CNTRLPLANE-4395: Make git commit format skill model and harness agnostic #9625
OCPBUGS-123791: CAPI storage version migration exclude IPAM #9642
CNTRLPLANE-4365: Publish hosted control plane sizing guidance #9532
AUTOSCALE-873: Add sidecar to standalone karpenter-operator #9565
CNTRLPLANE-4090: Move CPO, HCCO and etcd recovery manifest constructors to shared packages #9592
OCPBUGS-113995: classify WebIdentityErr by cause to prevent false invalid creds #9406
OCPBUGS-115468: fix NodePool: truncate oversized machine messages instead of dropping them #9567
feat(kubevirt): OCPBUGS-55974: add CPU model configuration for NodePool VMs #7431
CNTRLPLANE-4209: Consolidate Azure lifecycle test lanes #9572
GCP-510: Implement GCP NodePool CLI Commands #9466
OCPBUGS-84562: Configure AWS CCM region directly #9602
NO-JIRA: ci(deps): bump astral-sh/setup-uv from 6.1.0 to 10.1.0 #9682
NO-JIRA: chore(owners): add core approvers #9651
CNTRLPLANE-4090: Move metric name constants to shared packages #9540
OCPBUGS-125803: skip TLS flag propagation tests for older operator versions #9641
CNTRLPLANE-4453: clarify private Key Vault validation comments #9645
CNTRLPLANE-4209: Update Azure lifecycle test-flow documentation #9573
CNTRLPLANE-4456: Run envtests for release-5.0 #9649
AUTOSCALE-974, AUTOSCALE-980: allow Karpenter to be deployed on Azure #9545
OCPBUGS-123512: fix(e2e): derive node runtimes from upgraded NodePool state #9611
OCPBUGS-122236: stabilize JUnit test identities #9580
chore(renovate): enable supported release branches #9631
CNTRLPLANE-4209: Reject shared variants in concurrent e2e lanes #9571
OCPBUGS-109672: fix(cpo) wait for etcd health, not just DNS #9460
OCPBUGS-123645: add missing Azure v2 matrix coverage #9616
NO-JIRA: fix(e2e): restore Eventually retry for post-upgrade health condition check #9632
OCPBUGS-89689: karpenter control plane upgrade premature drift fix #9234
CNTRLPLANE-3880: Add E2E test for etcd snapshot restore to prevent split brain regression #9356
NO-JIRA: Bump envtest workflow timeout to 20 minutes #9630
CNTRLPLANE-4090: Move labels, taints, scheduler, VAP and misc constants to shared packages #9544
NO-JIRA: Fix CONTRIBUTING.md link path and remove trailing blank lines #9621
OCPBUGS-122011: fix(e2e): Make InstallHyperShiftOperator platform aware #9555
CNTRLPLANE-3532: Enable HC and HCP status-write linting #9563
CNTRLPLANE-3608: Add nested virtualization support for AWS EC2 NodePools #8681
GCP-1122: chore: add pvasant to gcp-reviewers alias #9465
CNTRLPLANE-4393: document CAPI provider image override mechanisms #9482
CNTRLPLANE-3277: Add Azure OAuth LoadBalancer private topology e2e test #8584
OCPBUGS-122232: Gate CAPI API version by management release #9587
CNTRLPLANE-4093: Move shared label constants to api/hypershift/v1beta1 #9415
CNTRLPLANE-4207: document Azure lifecycle test sharding #9504
GCP-958: test(e2e/v2): register gcp-pd-csi-driver control plane workloads #9589
OCPBUGS-97942: fix(cli): add –service-publishing-strategy flag to hcp create cluster agent #8985
NO-JIRA: build(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 #9546
CNTRLPLANE-4094: Move ExternalDNSLBPort and KASRouteHostname to support/netutil #9414
NO-JIRA: fix(ci): use –target for pip install on ARC runner #9531
CNTRLPLANE-4150: feat: Maintain ingress serving cert for HostedCluster ingress #9132
CNTRLPLANE-4207: update v2 test flow documentation #9569
CNTRLPLANE-4369: add prow job id tag to e2e v2 aws resources #9542
NO-JIRA: fix(managed-azure): continue resource group cleanup when HC destroy fails #9404
ACM-41684: Switch hypershift-operator runtime to PQC base image #9453
NO-JIRA: fix(install): increase WaitUntilAvailable timeout from 5m to 10m #9306
OCPBUGS-87991: validate additionalNetworks name format in KubeVirt NodePools #8710
NO-JIRA: feat(azure): Add scripts to setup credentials and check resources #9446
CNTRLPLANE-4005: Skip CDI importer pods from custom labels and tolerations checks #9240
OCPBUGS-109724: fix KubeVirt custom baseDomain ingress documentation #9318
NO-JIRA: spread AKS nodes across availability zones #9449
CNTRLPLANE-4370: Revert “Merge pull request #9543 from ironcladlou/e2e-promotion” #9574
OCPBUGS-114415: Increase relay timeouts to prevent intermittent test failures #9459
NO-JIRA: Gate GCP credential validation by control plane version #9562
OCPBUGS-120840: remove TechPreviewNoUpgrade from AWS cluster creation args #9535
OCPBUGS-121208: filter AWS-reserved tag keys before calling DeleteTags #9538
GCP-883: Optimize GCP PSC NAT allocation #9472
CNTRLPLANE-3603: Migrate clients from CAPI v1beta1 to v1beta2 #8717
NO-JIRA: remove duplicate e2e v2 test flow doc #9553
CNTRLPLANE-4370: enforce explicit blocking/informing labels on all v2 e2e tests #9543
NO-JIRA: ci(deps): bump actions/actions-runner from 2.336.0 to 2.337.0- #9513 #9513
CNTRLPLANE-3998: warn when deprecated kube-apiserver verbosity annotation is set #9461
CNTRLPLANE-3532: migrate HCCO/route status patches to statuspatching #9385
OCPBUGS-99534: etcd initialization bugs after etcdctl snapshot restore #9048
CNTRLPLANE-3646: increase e2e v2 control plane upgrade coverage for v1 parity #9491
OCPBUGS-120685: fix(e2e): select a live NodePool for osImageStream node OS verification #9506
ROSAENG-63186: fix(hcco): Add VAP to protect kas-bootstrap RBAC bindings from deletion #9203
NO-JIRA: remove unsafe v1 framework usage from karpenter upgrade test #9522
CNTRLPLANE-2007: KubeVirt default ingress passthrough with HostNetwork endpoint publishing strategy #9514
CNTRLPLANE-4207: Balance Azure v2 lifecycle test shards #9419
CNTRLPLANE-3532: add hcpstatuspatch linter and status-patching AGENTS.md guidance #9388
OCPBUGS-114459: recognize domain-specific test fields #9454
GCP-503: feat(gcp): Implement OrphanDeleter #8884
OCPBUGS-115269: openstack: Start populating cacert in clouds.yaml #9467
CNTRLPLANE-3951: fix(e2e): accept node deletion as success in TestSpotTerminationHandler #9428
OCPBUGS-74960: fix orphaned security group during VPC endpoint deletion #9517
NO-JIRA: test(backuprestore): enable SnapshotMoveData in backup configurations #9429
GCP-958: feat(gcp): complete GCP PD CSI driver wiring in HyperShift #9450
RHOBS-1707: Add OpenTelemetry SDK tracing to hypershift-operator #9390
OCPBUGS-105464: fix(nodepool): inject default worker SG by status ID, not fail-open capability flag #9456
OCPBUGS-84368: add safe-to-evict annotation and remove tolerations to fix autoscaler scale-down and drain loop #8338
AUTOSCALE-998: inject token-minter image to standalone karpenter-operator #9492
OCPBUGS-120685: fix(e2e): label flaking nodepool osImageStream test informing #9505
NO-JIRA: feat(chaibot): add per-platform Slack handle pings to CI health report #9478
build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1 in /hack/tools #9479
build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1 #9480
OCPBUGS-114408: fix(api): allow spaces in AWS resource tag keys and values #9425
GCP-1113: retry transient network errors in hypershift create iam gcp #9436
OCPBUGS-115542: fix(e2e): poll for etcd-init completion before reading restore logs #9481
OCPBUGS-114368: Retry Microsoft Graph transport failures #9421
OCPBUGS-86690: fix Azure cluster deletion hanging when resource groups are already deleted #8682
CNTRLPLANE-4041: add new release branches to renovate config #9470
OCPBUGS-77781: fix(certs): normalize IP SANs to stop dual-stack KAS cert churn #9286
CNTRLPLANE-4205: document OSImageStream behaviour deviations #9486
CNTRLPLANE-3755: fix(e2e): add version gating to EnsureCAPIFinalizers tests #9443
CNTRLPLANE-3646: enable e2e v2 aws control plane upgrade tests #9474
OCPBUGS-115403: ensure informing junit files are unique across test groups #9473
ACM-41685: Enable PQC crypto policy in hypershift-cli image #9463
OCPBUGS-113712: preserve immutable AWS load balancer annotations #9469
NO-JIRA: chore(konflux): update Tekton task bundles to latest versions #9483
CNTRLPLANE-4204: reorganize OSImageStream e2e tests after graduation #9418
CNTRLPLANE-3201: feat(e2e): enable etcd snapshot backup test on Azure #9226
CNTRLPLANE-2029: docs(backuprestore): add Agent and KubeVirt platform prerequisites #9072
CNTRLPLANE-3950: fix flaky TestKMSRootVolumeEncryption race condition. #9304
CNTRLPLANE-4208: Right-size Azure v2 e2e worker counts #9426
CNTRLPLANE-3646: port karpenter upgrade test to v2 #9397
NO-JIRA: fix(azure): orphan AzureMachines when capi-provider cannot run #9403
OCPBUGS-99021: Use separate certificate signers for konnectivity #9098
OCPBUGS-99329: avoid cache miss false-negative on credential Secret lookup #9074
NO-JIRA: group ChaiBot health report by OCP version #9447
NO-JIRA: Migrate hypershift-ci-python and contrib/oidc to uv for managing python deps #9442
GCP-421: feat(install): bump external-dns to 1.3.5 and bundle DNSEndpoint CRD #9433
NO-JIRA: test(e2e/v2): add upsert desired-state-hash E2E tests #9257
RFE-9138: feat: label some hosted control plane services #8298
OCPBUGS-109595: use RetryWatcher and TCP keepalive for create-guests watch resilience #9435
OCPBUGS-95614: fix(cpo): include unavailable components in KASLoadBalancerNotReachable message #9232
OCPBUGS-114014: add Agent CAPI pause step to cross-cluster migration #9416
CNTRLPLANE-4216: Migrate Azure VM instance families to Dsv5 #9423
CNTRLPLANE-4006: fix(e2e) disable client-side rate limiting and increase NodePool config timeout #9331
CNTRLPLANE-4004: test(envtest): add CEL validation tests for AWS resource tag types #9375
OCPBUGS-86669: fix(cli): make deleteCLISecrets non-fatal during cluster destroy #8787
CNTRLPLANE-3999: add declarative TestPlan for composing v2 cluster variants and test matrices #9420
NO-JIRA: test(e2e): allow more time for control plane pod restarts #9422
OCPBUGS-113580: Bound NodePool metrics cache reads #9389
NO-JIRA: Makefile: fix PULL_BASE_SHA leading space breaking local verify #9395
OCPBUGS-97811: fix Tenant API downtime during a management worker node #9279
NO-JIRA: Run lint and vet against all build tags #9427
OCPBUGS-114265: Use managemet cluster kubeconfig for CAPI migration test #9412
OCPBUGS-100142: fix(konnectivity): fallback to alternative DNS-resolved IPs on connection failure #9181
CNTRLPLANE-3532: migrate CPO status patches to statuspatching helpers #8966
OCPSTRAT-3686: Add pipeline for nightly release tag process #9371
OCPBUGS-111601: Fix v2 control plane upgrade rollout race #9384
CNTRLPLANE-2883: Migrate ARM64 NodePool creation test to v2 #8926
CNTRLPLANE-4115: fix(ci): report actionable cause when /rebase push hits workflow files #9358
OCPBUGS-113991: Scope forced NodePool cleanup to the target cluster #9398
CNTRLPLANE-1831: address review feedback on DR documentation #9407
OCPBUGS-98467: fix(konnectivity): enable –sync-forever to restore lost agent-server tunnels #9260
CNTRLPLANE-3616: e2e tests for TLS profile change of konnectivity-server #8886
CNTRLPLANE-3626: feat(ignition-server, ignition-server-proxy): inject centralized TLS configuration #8910
OCPBUGS-112450: introduce e2e v2 linting rules and enforcement #9357
CNTRLPLANE-1831: restructure backup/restore disaster recovery documentation #9382
ACM-42704: Add Konflux MCE 5.1 pipelines for hypershift CLI and operator #9396
OCPBUGS-111601: Prevent conversion webhook startup deadlock #9387
ROSAENG-14082: –dump-guest-cluster option can now optionally be supplied with policies #8882
CNTRLPLANE-3646: port core karpenter autonode e2e tests to v2 framework #9292
GCP-916: allow goog-partner-solution label key in GCP resourceLabels #9267
CNTRLPLANE-3871: promote OSStreams feature gate to Default #9328
CNTRLPLANE-3903: Add unit test for hcp version command #9218
OCPBUGS-111985, OCPBUGS-111986: bump haproxy to 3.0.5-6.el10_2.2 to fix CVE-2026-55203 and CVE-2026-55204 #9333
OCPBUGS-112328: Clear SSHKey from HCP and delete synced secret when HC SSHKey is removed #9374
CNTRLPLANE-4169: Add GHA envtest jobs for Kubernetes 1.36 #9353
CNTRLPLANE-3604: Capi v1beta2 storage migration #8938
CNTRLPLANE-3532: migrate HO karpenter status patch to statuspatching helper #8968
no-jira: add karpenter-operator dev image override annotation #9295
CNTRLPLANE-4025: feat(azure): support managed HSM for KMS encryption #9199
OCPBUGS-44164: Fix TestNodePoolReplaceUpgrade flaky timeout on OpenStack #8749
revert: OCPBUGS-112478: fix(cpo): handle service-ca generation errors in CSI serving cert reconciliation #9365
CNTRLPLANE-3954: add kube-scheduler metrics endpoint e2e coverage #9159
NO-JIRA: align aws_test.go test case names with testcasename linter #9367
CNTRLPLANE-4003: Add per-tag override field for AWS resource tag precedence #9152
OCPBUGS-97705: fix(azure): skip KMS validation for private Key Vaults on ARO HCP #8965
chore: add .pi symlink for Claude Code skill discovery #9361
OCPBUGS-85182: Remove MutatingAdmissionPolicy runtime-config from KAS #9350
OCPBUGS-86771: docs(api): document issuerURL immutability and serviceAccountIssuer override #8916
NO-JIRA: chore(owners): add members to core-reviewers #9352
OCPBUGS-85065: Fix repeated CPO Deployment churn due to OPENSHIFT_IMG_OVERRIDES reordering #8656
NO-JIRA: align GCP creds metric test case names with testcasename linter #9351
GCP-959: Add GCP PSC conditions to metrics and add platform-specific gauges #9258
CNTRLPLANE-3899: Add shared cmd/ unit tests for create nodepool agent #9162
CNTRLPLANE-4008: enable hypershiftlinter and fix test naming #9271
OCPBUGS-86670: fix(cpo): handle service-ca generation errors in CSI serving cert reconciliation #8622
OCPBUGS-105194: Add retry with exponential back-off for transient dump errors #9303
CNTRLPLANE-4041: fix(build): bump missed second-stage base image in Dockerfile.e2e to 5.1 #9345
CNTRLPLANE-4026: fix(ci): Enable Dependabot to track and automate GHA runner image updates #9330
CNTRLPLANE-4041: bump base images in dockerfiles to 5.1 #9325
NO-JIRA: fix(ci): update restructure-commits workflow path after skills migration #9335
CNTRLPLANE-4115: Revert invalid workflows permission from rebase.yaml #9329
OCPBUGS-99550: Managed Azure setup_aks_cluster.sh fails to run with “–kubernetes-version 1.33.0” flag #9080
OCPBUGS-105282: Add proxy env vars to cluster-storage-operator deployment #9256
CNTRLPLANE-4115: Fix /rebase workflow: add missing workflows permission #9323
NO-JIRA: Convert Claude commands to agentskills.io skill format for harness portability #9062
CNTRLPLANE-3871: add [FeatureGate:OSStreams] tag for FG promotion tracking #9297
OCPBUGS-83564: Apply registry overrides to release image pullspec before fetching #9108
CNTRLPLANE-4008: feat: add hypershiftlinter golangci-lint plugin #9237
OCPBUGS-105875: fix(hcco): run kas-connection-checker as non-root #9296
ARO-26896: feat: hardcode ETCD_METRICS=extensive in etcd StatefulSet template #9192
OCPBUGS-105802: Use the correct v1 mcfg api for OSImageStream during ignition #9283
CNTRLPLANE-4043: ci(e2e): add CI workflow to verify e2e compilation on PRs #9305
OCPBUGS-108268: Rebase container images from 9.7 to 9.8 to fix gnutls CVEs #9307
CNTRLPLANE-4097: Add clebs to core-approvers #9316
OCPBUGS-109581: Add CVO and CNO to podCrashTolerations #9302
OCPBUGS-99898: Add unit test for aggregateMachineMessages truncation logic #9128
OCPBUGS-98460: Harden leader election failure detection in EnsureNoCrashingPods #9129
CNTRLPLANE-3772: promote ExternalOIDCWithUpstreamParity to Default #8952
NO-JIRA: Update Konflux Tekton task bundle digests #9300
CNTRLPLANE-3202: add restore, OADP, and limitations docs for self-managed Azure DR #9160
CNTRLPLANE-4038: feat(supportedversion): bump latest supported OCP version to 5.1 #9288
OCPBUGS-105865: fix(nodepool): include only TLSSecurityProfile in config hash instead of full APIServer #9287
AUTOSCALE-871: add deployment path for standalone karpenter-operator #9245
GCP-986: chore: add acwalczyk to gcp-reviewers alias #9222
NO-JIRA: Disable repo_gpgcheck for Microsoft repo in Dockerfile.e2e #9290
CNTRLPLANE-3863: improve v2 test isolation #9229
NO-JIRA: feat(ci): split CI report into ARO HCP, KubeVirt, and Azure Self-Managed categories #9282
OCPBUGS-101766: enable TLSAdherence feature gate part on TechPreviewNoUpgrade #9213
OCPBUGS-96908: remove redhat-marketplace catalog from HyperShift #8958
OCPBUGS-105555: Update ubi-minimal base image to fix glib2 CVEs (CVE-2025-14087, CVE-2025-14512) #9276
OCPBUGS-98065: Prevent infraID and clusterID removal via parent-level CEL rules #9102
OCPBUGS-105849: Remove docs/compare tooling to fix Snyk security scan #9285
CNTRLPLANE-3945: fix(docs): set writable uv cache path for arc-runner-set #9281
CNTRLPLANE-3945: Migrate documentation tooling from mkdocs-material to zensical #9139
NO-JIRA: fix: separate gci-only pre-commit hooks from full lint-fix targets #9272
CNTRLPLANE-3625: Add aws-pod-identity-webhook e2e tls cases #8953
OCPBUGS-105602: fix broken relative reference #9277
OCPBUGS-105597: fix(ci): update GHA runner base image to unblock CI #9275
OCPCLOUD-3261: feat(cloud providers): inject centralized TLS configuration #8864
CNTRLPLANE-3959: wire apiserver config through ignition server #9136
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-113538: Enable SELinuxMount tests #180
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-114006: UPSTREAM: 2933: Bump all go.opentelemetry.io/otel modules to v1.44.0 #165
Full changelog

ibmcloud-machine-controllers

CNF-23394: mockgen deprecated: use uber-go/mock instead #73
Full changelog

insights-operator

CCXDEV-16666: gather InferenceService from the KServe operator #1345
OCPBUGS-97968: add insights-runtime-extractor-scc missing fields #1359
CCXDEV-16041: multiclusterhub gatherer #1343
NO-JIRA: improve create-gatherer skill #1348
CCXDEV-16040: Add multicluster gatherer #1337
CCXDEV-16594: add custom proxy field to insights config #1329
Full changelog

insights-runtime-exporter, insights-runtime-extractor

NO-JIRA: chore: add slashpai to owner list #91
CCXDEV-16674: chore: add clippy linting #87
Full changelog

ironic

METAL-1958: Merge contiguous Dockerfile RUN layers to reduce image size #916
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #917
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #910
NO-ISSUE: Manually sync Ironic - part 2 #909
NO-ISSUE: Manually sync Ironic and Sushy from the forks #906
METAL-1931: Add cargo for bcrypt rust extensions #895
METAL-1929: Merge upstream 2026 07 31 #875
OKD-421: Fix Dockerfile.scos crypto-policies PQ failure on CentOS Stream 10 #886
Full changelog

ironic-agent

METAL-1958: Remove OKD build deps in the same layer they are installed #318
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #319
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #317
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #302
METAL-1931: Add cargo for bcrypt rust extensions #303
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #300
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #299
Full changelog

karpenter-operator

AUTOSCALE-166: Add minimum instance size requirements #36
NO-JIRA: fixup OWNERS_ALIASES #35
NO-JIRA: chore: update build tool versions #34
AUTOSCALE-873: fix: apply OpenShift Karpenter CRD adjustments #33
AUTOSCALE-974: deploy karpenter-provider-azure on HCP #32
AUTOSCALE-946: migrate approver for node CSRs #29
no-jira: remove aggregate cluster role #30
AUTOSCALE-998: deploy karpenter-provider-aws on HCP #26
AUTOSCALE-968: sync AKSNodeClass CRD and add Azure cloud provider #28
AUTOSCALE-906: add agentic SDLC context files #27
AUTOSCALE-976: enable CRD controller for management cluster mode #24
AUTOSCALE-872: Implement OpenshiftEC2NodeClass objects #25
AUTOSCALE-166: Apply NodeOverlay to hostedcluster during karpenter-core e2e for AWS HCP AutoNode #22
AUTOSCALE-945: add support for hosted cluster client via –target-kubeconfig #23
no-jira: rename guest kubeconfig back to target kubeconfig #21
Full changelog

keepalived-ipfailover

NE-2126: Migrating Ipfailover test cases to images repo #245
Full changelog

kube-rbac-proxy

CNTRLPLANE-3685: docs - add Agentic SDLC context files #144
NO-JIRA: update OWNERS #147
NO-JIRA: Merge upstream v0.22.1 #146
Full changelog

kube-state-metrics

NO-ISSUE: [bot] Bump openshift/kube-state-metrics to v2.20.0 #155
Full changelog

kube-storage-version-migrator

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #262
OCPBUGS-114428: Update build-machinery-go vendor dependency #259
Full changelog

machine-api-operator

OCPCLOUD-3438: Bump govmomi to 0.53.0 #1498
NO-ISSUE: Add opt-in kube-rbac-proxy sidecar for pprof endpoint (AWS) #1502
OCPBUGS-47508: Set –max-concurrent-reconciles=10 for AWS machine controller #1521
SPLAT-2825: Moved OTE machine tests to openshift/disruptive-longrunning #1539
OCPBUGS-105398: refactor: remove AzureWorkloadIdentity feature gate #1537
SPLAT-2826: Compare against oldObject in vSphere failure-domain VAPs #1536
OCPBUGS-74510: Removed VSphereMultiDisk feature gate #1532
OCPBUGS-105407: Remove VSphereMultiNetworks feature gate from e2e test #1533
Full changelog

machine-config-operator

NO-ISSUE: Increase timeout for ImagePulledFromRegistry=Unknown in non-SNO suites #6574
OCPBUGS-86768: Nodes created with 4.13 base images cannot join the cluster #6435
MCO-2536: Update operator to populate CAPI bootimage status #6469
OCPBUGS-126899: Add MCN/PIS/MOSC/MOSB/OSImageStream to relatedObjects #6563
OCPBUGS-86571: templates: pass –dual-stack to nodeip-configuration #6105
OCPBUGS-57177: Degrade the MachineConfigPool on PinnedImageSet degrade #6443
OCPBUGS-63048: Kube object asserts do not handle case where object is replaced #6059
OCPBUGS-100366: Re-queue ContainerRuntimeConfig on status update failure #6415
OCPBUGS-90502: Run nmstatectl format in nmstate-configuration #6209
OCPBUGS-115002: Remove BootImageSkewEnforcement references to gate component from MCO #6522
OCPBUGS-114882: drop GCD health-check ranges in openshift-gcp-routes #6501
OPNET-801: Switch on-prem HAProxy pods to haproxy-router-haproxy32 image #6502
OCPBUGS-122237: [TNF] Add infinite retry on untaint systemd unit #6535
OCPBUGS-116491: Correctly handle MC deletion in image mode when no new build is required #6528
OCPBUGS-121353: Pass missing proxy vars to bootstrap MCC #6526
MCO-2575: Refactor verification functions for calculateStatus test cases #6543
MCO-2570: remove poll methods #6532
OCPBUGS-114737: updateLayeredOS deploy-from-self when skopeo < 1.22.2 #6475
OCPBUGS-122209: Fix IsBootImageUpdateSupported to include vSphere and Azure platforms #6523
OCPBUGS-105283: Mount /etc/container in mosb #6451
OCPBUGS-95238: Dump compact cache to CM for persistence #6379
OCPBUGS-114664: Fix CVE-2026-15792: Upgrade BuildKit to v0.31.2 #6472
OCPBUGS-120711: Fix vsphere network absolute paths #6497
OCPBUGS-112721: Retry on conflict in syncMachineConfigNodes #6496
OCPBUGS-116490: remove nft chains before checking the ignition config #6485
NO-ISSUE: check mosb failed message in test 85980 #6500
OCPBUGS-109657: Assert errors in TestGetPrimaryPoolForNode #6482
OCPBUGS-115123: Replace wildcard permissions with explicit verbs in MachineConfigServer ClusterRole #6470
OCPBUGS-112348: Increase TC-74751 Eventually timeout for vSphere OVA upload #6481
OCPBUGS-115158: Update AMI Whitelist #6474
OCPBUGS-115203: Skip vsphere fd-unmatched machinesets for bootimage updates #6477
MCO-2530: Remove unused functions, constants, parameters, and returns throughout the codebase #6403
MCO-2427: Move OCB and OSStreams tests to longduration suite #6454
OCPBUGS-109659: Check conddegraded nil before dereference in TestCalculateStatus #6462
OCPBUGS-69681: limit ContainerRuntimeConfig status condition to 3 #6434
OCPBUGS-111648: crio: drop restore support #6412
OCPBUGS-112043: Preserve proxy environment vars #6424
OPNET-679: grant NET_ADMIN capability to coredns-monitor #6449
OCPEDGE-2984: fix: adjust fencing validator to match MAC-address based credential secrets #6450
OCPBUGS-112465: Update the MachineOSBuild event and condition functionality to more clearly handle pod failures with retries #6431
OCPBUGS-112784: Revert TNF Graceful node shutdown #6442
OCPBUGS-105399: Remove SigstoreImageVerification feature gate references #6445
OCPBUGS-64623: Use kubernetes scheme in drain controller event recorder #6446
OCPNODE-4526: Add ‘..’ block, max-length, and cross-store uniqueness #6433
OCPBUGS-100065: on-prem: tune API VIP haproxy health checks #6400
OCPBUGS-109746: OCPBUGS-112085: CORS-4441: Bootimage controller should gracefully handle Azure gen1 image removal #6404
NO-ISSUE: Extend timeout for waiting for UpdatePrepared MCN condition for SNO resiliency #6428
OCPBUGS-98258: Fix upstreams for CoreDNS pods on Cloud platforms #6383
NO-JIRA: Skip OVN-K VRFs in ofport-request dispatcher script #6398
OCPBUGS-109739: Increase rpm-ostree rebase retry backoff and preserve error #6413
OCPBUGS-112075: skip proxy for OSImageStream discovery in HyperShift #6420
OCPBUGS-65504: machine-config ClusterOperator relatedObjects missing ClusterRoleBinding #6369
AGENT-1570: Remove all NoRegistryClusterInstall feature gate check #6396
MCO-2411: Add AWS marketplace AMI band check target #6365
OCPBUGS-105426: OCPBUGS-105430: OCPBUGS-105431: OCPBUGS-105315: Fix duplicate template error and e2es #6387
OCPBUGS-59197: Fix MOSB image deletion race during MOSC removal #6348
OCPBUGS-83562: Bump kubensmnt dependency and service to v1.3.0 #6051
NO-ISSUE: Add fix TC 63866 failing in CI job #6380
MCO-2256: Drop RHEL8 support #6130
AGENT-1570: update dependencies to the latest after several Feature promotions to default #6393
OKD-419: Add missing variant check for SCOS #6371
Full changelog

machine-image-customization-controller

OCPBUGS-112616: Update xz and ignition/v2 with known vulnerabilities #185
OCPBUGS-112617: Stop accepting IRONIC_AGENT_PULL_SECRET from the envi… #186
Full changelog

machine-os-images

OCPBUGS-126621: Select bundled CoreOS version when COREOS_VERSION is unset #116
OCPBUGS-112613: Validate aarch64 ISO checksum after cross-arch extraction #113
TRT-2935: Revert machine-os-images PR #110 — fatal aarch64 ISO check crashes metal3 init-container #112
OKD-429: Fix OKD/SCOS builds to use centos CoreOS streams #109
OCPBUGS-112613: Validate aarch64 ISO checksum after cross-arch extraction #110
Full changelog

metallb-frr

OKD-453: Dockerfile.openshift: conditionally install frr or frr10 based on OS version #137
Full changelog

monitoring-plugin

NO-JIRA: sanitize runbook_url #1255
OU-1150: more refactors #1286
NO-JIRA: duplicate dashboard creates perses project #1258
OCPBUGS-123668: patch adm-zip vulnerable version #1274
NO-JIRA: feat: migrate to vitest #1237
OU-1220: Add column to display dashboard id in perses dashboard list page #1257
OU-791: hide Export as CSV link on empty Alerts page #1251
NO-JIRA: fix(metrics): sync query-browser URL into Redux after navigation #1238
OU-1344: Add granular permission checks #1185
NO-JIRA: Pin node 22 and migrate deprecated i18next-parser #1235
NO-JIRA: use existing env var as a dashboard project in the OLS show time… #1236
OU-1147: Perses UI Customization. Allow semantic tokens to map correctly with PatternFly themes and modes #1226
OU-1472: refactor variables #1224
OCPBUGS-119714, OCPBUGS-119717: fix: upgrade fast-uri to 3.1.7 #1234
OCPBUGS-115456: fix: upgrade vulnerable dependencies #1233
OU-1472: lint tags #1221
OU-1472: perses version upgrade fixes #1228
OCPBUGS-114786, OCPBUGS-114789, OCPBUGS-114792: fix: upgrade vulnerable fast-uri dependency #1200
NO-JIRA: Add dchromik to observability-ui aliases #1230
NO-JIRA: upgrade webpack #1213
OCPBUGS-114776, OCPBUGS-114795: fix: upgrade vulnerable dompurify dependency #1199
OU-1423: fix: adjust perses mui theme to patternfly glass mode #1195
NO-JIRA: swap perses to ols specific tag for ols testing run #1194
OU-1409: include the legal disclaimer in the alert actions to agentic runs #1188
OU-1417: Fix Perses tooltips background color in OCP 5 #1178
OLS-3921: disable button shrink #1186
OU-1422: feat: update perses dependecies to allow to tag the OLS contributed panels #1045
OU-1472: rename tags to be the same as backend features #1128
OU-1471: don’t throw when listing globaldatasource for fallback #1153
OU-1514: update useFeatures hook to feature driven backend #1151
NO-JIRA: chore: organize dev dependencies and avoid cypress binary install #1148
NO-JIRA: feat: replace outdated react-linkify dependency #1144
OU-1472: remove incidents feature from backend and tests #1127
OU-1107, OU-1108: ACM alerting UI with alerts and perses #1105
OBSINTA-1505: improve OLS timeseries Cypress test stability #1122
NO-JIRA: remove helm chart #1126
OU-1486: feat: add art dockerfile #1117
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

multus-admission-controller

CORENET-7375: d/s merge Bump Kubernetes to 1.36.2 and Go to 1.26 #123
OCPBUGS-112557: Bump golang.org/x/net to 0.57.0 to fix CVE-2026-33814 #125
NO-JIRA: Remove TLS min version validation for OpenShift profile compatibility #122
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-114000: DS Merge 08/27/2026 #344
Full changelog

multus-networkpolicy

NO-JIRA: Downstream merge 20260826 #120
CORENET-7235: Update OWNERS file #116
Full changelog

multus-route-override-cni

OCPBUGS-83863: Remove rhel8 build stage #66
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-112555: Fix for CVE-2026-33814 #418
Full changelog

must-gather

WINC-2092: Add windows_exporter log collection #560
OCPBUGS-114428: Update build-machinery-go vendor dependency #563
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

network-interface-bond-cni

OCPBUGS-83863: Remove rhel8 build stage #113
Full changelog

network-metrics-daemon

CORENET-7238: Update OWNERS file #145
OCPBUGS-112553, OCPBUGS-112568: Fix CVE for ose-network-metrics-daemon #147
Full changelog

network-tools

NO-JIRA: Added iperf3 #189
Full changelog

networking-console-plugin

maintenance: bump the npm-security group across 1 directory with 10 updates #521
OCPNETUI-65: Enable dependabot updates on release-5.0 #524
OCPBUGS-86053: Fix MultiNetworkPolicy list crash when spec is missing #523
OCPNETUI-78: Remove unused Dockerfile.art #516
OCPNETUI-63: Drop unused Helm charts #473
OCPNETUI-14: Add Cypress E2E tests for network-to-VM cross-navigation #493
OCPNETUI-65: Add multi-branch dependabot config #487
CNV-67257: Set physicalNetworkName on OVN localnet NADs created from the console #477
OCPBUGS-105358: Fix NAD config generated in form for OVN K8s secondary localnet networks #496
OCPNETUI-81: Retry fetching from npm registry to unblock OKD build #494
OCPNETUI-56: Add CI scripts for hot-cluster E2E infrastructure #489
OCPNETUI-56: Add ci-env-controller Helm chart for test environment lifecycle #491
OCPNETUI-56: Add ci-test-stack Helm chart for E2E test environments #490
OCPNETUI-22: Add Cypress E2E tests for Service create and edit form #480
OCPNETUI-78: Sync Dockerfile and Dockerfile.art #485
OCPNETUI-59: Add Cypress E2E tests for Service and Route endpoint health #481
OCPNETUI-66: Drop unused devcontainer config #474
OCPNETUI-56: Add Cypress test specs and runner scripts #470
OCPBUGS-113967: Fix 404 error on MultiNetworkPolicy page when “All projects” is selected #483
OCPBUGS-91643: Fixed IP sorting in service overview #482
OCPBUGS-112660: Marked strings for i18n in NetworkPolicies list page #478
OCPBUGS-86249: fixed edit pod selector #476
OCPNETUI-56: Add Cypress E2E framework config and support files #468
OCPNETUI-56: Add Cypress page objects and test constants #469
chore(i18n): update Sprint 1 translations and Memsource CLI skill docs #471
chore(i18n): add Cursor Memsource skill and peer usage guide #466
Full changelog

oauth-apiserver

OCPBUGS-114428: Update build-machinery-go vendor dependency #228
OCPBUGS-108041: fix CVE-2026-41178 by bumping otel to v1.44.0 #219
CNTRLPLANE-2260: test migration of tokenreview tests to OTE #212
NO-JIRA: Remove cluster profile directory authentication as it is no longer injected in CI #217
CNTRLPLANE-3947: Bump to 1.36.2 #213
CNTRLPLANE-3947: hack/update-openapi-spec: add image resolution and registry auth #214
Full changelog

oauth-proxy

ACM-37203: Add support for configurable TLS profiles #372
OCPBUGS-115305: bugfix: rewrite open redirect strings to ‘/’ #374
NO-JIRA: Add control-plane-approvers to OWNERS #373
Full changelog

oauth-server

OCPBUGS-114428: Update build-machinery-go vendor dependency #260
OCPBUGS-115307: bugfix: default to english when Accept-Language header contains more than 1000 underscores #253
CNTRLPLANE-3948: Bump to 1.36.2 #248
Full changelog

olm-catalogd, olm-operator-controller

OPRUN-4723: Synchronize From Upstream Repositories #811
NO-ISSUE: Synchronize From Upstream Repositories #791
OCPBUGS-83515: UPSTREAM: <carry>: use internal shell image for catalog FBC curl Job #792
NO-ISSUE: Synchronize From Upstream Repositories #790
NO-ISSUE: Synchronize From Upstream Repositories #788
Full changelog

openshift-apiserver

OCPBUGS-108032: update otel to 1.44.0 to fix CVE-2026-41178 #684
OCPBUGS-85429: Bump to 1.36.2 #666
NO-JIRA: Remove cluster profile directory authentication as it is no longer injected in CI #674
OCPBUGS-85429: hack/update-openapi-spec: add image resolution and registry auth #667
OCPBUGS-94042: Return proper 404 when deleting a non-existent project #671
Full changelog

openshift-controller-manager

CNTRLPLANE-3878: bump(k8s.io): 1.36.3 #451
Full changelog

openshift-state-metrics

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #139
NO-JIRA: update Go dependencies #135
Full changelog

openstack-cluster-api-controllers

Fix release 0.14 sync: incomplete vendoring in hack/tools #433
Fix rebasebot post-rebase hook helper path lookup #432
Fix rebasebot merge-bot by removing stale API version artifacts #431
Bug: Fix make merge-bot after rebasebot by cleaning stale openshift artifacts #430
Full changelog

openstack-resource-controller

UPSTREAM-SYNC: Merge https://github.com/k-orc/openstack-resource-controller:release-2.0 into main #40
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

NO-ISSUE: add per-scenario PSA compliance audit #1374
NO-ISSUE: Synchronize From Upstream Repositories #1361
OCPBUGS-122255: tests-extension: fix PolarionID:68521 and Polarion:27680 #1376
OCPBUGS-83412: set catalogsource spec.grpcpodconfig.scc: restricted for all non-legacy cases #1359
OCPBUGS-104542: force node arch for opm and catalogsource pod for multiarch tests; fix test failure #1357
OCPBUGS-23954, OCPBUGS-78095: Synchronize From Upstream Repositories #1355
Revert “OCPBUGS-104542: force same arch for opm and catalogsource pod for multiarch tests” #1349
OCPBUGS-74905: Synchronize From Upstream Repositories #1346
OCPBUGS-104542: force same arch for opm and catalogsource pod for multiarch tests #1344
OCPBUGS-86895: Ensure packageserver pod seccompProfile is always set #1341
Full changelog

operator-marketplace

NO-ISSUE: Bump github.com/onsi/gomega from 1.43.0 to 1.43.1 #795
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.32.2 to 2.33.0 #796
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.32.1 to 2.32.2 #794
NO-ISSUE: Bump github.com/onsi/gomega from 1.42.1 to 1.43.0 #781
NO-ISSUE: Bump github.com/sirupsen/logrus from 1.10.1 to 1.10.2 #779
NO-ISSUE: Bump github.com/stretchr/testify from 1.12.0 to 1.12.1 #777
NO-ISSUE: Bump the k8s-dependencies group across 1 directory with 3 updates #776
NO-ISSUE: Bump github.com/sirupsen/logrus from 1.10.0 to 1.10.1 #778
NO-ISSUE: Bump github.com/sirupsen/logrus from 1.9.4 to 1.10.0 #774
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.32.0 to 2.32.1 #773
NO-ISSUE: Bump the k8s-dependencies group across 1 directory with 3 updates #769
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

CORENET-7572: DownStream Merge [09-21-2026] #3465
CORENET-7562, OCPBUGS-98726, OCPBUGS-99645: DownStream Merge [09-11-2026] #3439
OCPBUGS-112563, OCPBUGS-99451: DownStream Merge [08-31-2026] #3434
CORENET-7467: run OTE tests only in ovn-kubernetes conformance suites #3416
OCPBUGS-112470: Register test images using tests extension #3363
NO-JIRA: DownStream Merge [08-17-2026] #3402
OCPBUGS-105440: DownStream Merge [08-13-2026] #3395
NO-JIRA: DownStream Merge [08-11-2026] #3383
OCPBUGS-100275, OCPBUGS-85627: DownStream Merge [08-10-2026] #3361
Full changelog

powervs-block-csi-driver

MULTIARCH-6346: Rebase with upstream - go modules updates and code changes #138
Full changelog

powervs-cloud-controller-manager

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #109
No-Jira: Update packages in go.mod #108
Full changelog

powervs-machine-controllers

OCPBUGS-87523: Updating ose-powervs-machine-controllers-container image to be consistent with ART for 5.0 #144
Full changelog

prom-label-proxy

NO-ISSUE: [bot] Bump openshift/prom-label-proxy to v0.15.1 #399
Full changelog

prometheus

NO-JIRA: [bot] Bump openshift/prometheus to v3.14.0 #363
NO-ISSUE: [bot] Bump openshift/prometheus to v3.14.0 #361
Full changelog

prometheus-alertmanager

OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #175
Bump openshift/prometheus-alertmanager to v0.34.1 #177
Bump openshift/prometheus-alertmanager to v0.34.0 #168
NO-ISSUE: Remove unused upstream .github/workflows #167
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

MON-4689: Bump openshift/prometheus-operator to v0.94.0 #400
NO-ISSUE: [bot] Bump openshift/prometheus-operator to v0.93.1 #393
NO-ISSUE: [bot] Bump openshift/prometheus-operator to v0.93.1 #391
Full changelog

prometheus-node-exporter

NO-ISSUE: [bot] Bump openshift/node_exporter to v1.12.1 #186
OCPBUGS-100376: cherry-pick 24c6dce279c418bcb911824e8c8be1c81a1e832b - Fix fibrechannel_linux for ppc64le (#3769) #184
Full changelog

rhel-coreos, rhel-coreos-10, rhel-coreos-10-extensions, rhel-coreos-extensions

OCPBUGS-115309: Re-enable sandboxed-containers extension for 5.0 #1965
NO-JIRA: Use –nobest when installing node packages #1958
Full changelog

route-controller-manager

OCPBUGS-104856: clear unmanaged-route metric when the route is removed #102
Full changelog

telemeter

OCPBUGS-114428: Remove generated Telemeter tools vendor tree #618
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #615
OCPBUGS-115550: Add ‘agent-installer-postconfig’ install_type #616
BIZ-794: separte managed and self-managed ACM capacity #612
Full changelog

tests

OCPBUGS-127184: Redact OAuth tokens from test cleanup logs #31640
STOR-3090: Add CSI storage test for pod delete after host umount of mounted volume #31488
OCPBUGS-111056: Make operator log scraper and monitor tests topology-aware #31597
CNTRLPLANE-4303: Add threshold for ote encryption cases #31658
OCPBUGS-112722: make webhook build resolution wait phase-independent #31655
OCPBUGS-121385: Resolve Additional Storage agnhost image through mirror #31618
NE-2750: implement feature test for GatewayAPIManagementMode #31503
OCPEDGE-3076: Fix TNF kubelet disruption test race condition #31650
OCPSTRAT-3661: Always emit passing cases for found issues in RBAC monitor test #31639
NO-ISSUE: Automated - Update synthetic test data #31607
NO-JIRA: Add a new test for mass DNS disruption #31625
OCPBUGS-114022: Avoid polling skipped Prometheus target namespaces #31563
TRT-2830: add REVIEW.md for agentic review responses #31637
OCPSTRAT-3661: Add Sippy discovered exceptions for RBAC monitor test #31616
OCPBUGS-104846: Filter both [FeatureGate:] and [OCPFeatureGate:] #31623
OCPBUGS-121384: Isolate KubeletEnsureSecretPulledImages test setup #31619
OKD-454: Skip OKD job name check for cluster-bot launch jobs #31628
OCPBUGS-92837: test/router: wait for all per-route metrics before asserting #31344
CORENET-6746: Allow EgressIP NoMatchingNodeFound events to repeat pathologically #31614
OCPBUGS-86789: Bump network config timeout to 25 minutes #31599
CNTRLPLANE-3789: Add e2e tests for authentication component proxy #31446
OCPBUGS-84250: Increase router verbosity in DCM tests #31555
NO-JIRA: test: poll final EgressFirewall DNS deny assertion #31473
OCPBUGS-66213: add link to jira card #31609
NE-2839: Add HAProxy version upgrade tests #31602
CORENET-7243: Add TLS Profile Compliance tests for networking components #31500
OCPSTRAT-3618: Fix check in auth test for 1.37 given new NamedAuthorizer behavior #31574
OCPSTRAT-3618: Update etcd test data for k8s 1.37 release #31605
METAL-1833: Register cluster-baremetal-tests-ext in extension registry #31197
OCPSTRAT-3661: Add monitortest to verify possible Cluster Admin escalation paths #31536
OCPBUGS-66213: image registry single replica exceptions #31544
OCPBUGS-111997: Add Degraded=True exception for authentication operator during upgrade #31535
TRT-2939: Revert “Merge pull request #31495 from jcmoraisjr/NE-2839-haproxy-version-upgrade-tests” #31598
OCPBUGS-77283: bump kubevirt fedora containerDisk to multi-arch v1.8.2 + permanent exception #31284
OCPBUGS-112662: Fix the number of requests in repeated exec #31548
OCPBUGS-115153: Make extension test-binary extraction architecture-aware #31579
NO-ISSUE: Automated - Update synthetic test data #31581
NE-2839: Add HAProxy version upgrade tests #31495
OCPBUGS-111643: Fixed Flakiness of Webhook test - ClusterResourceQuota validation #31531
OCPNODE-4470: Add DRA consumable capacity e2e tests #31448
OCPBUGS-112390: Fix node replacement test timestamp filter and allow job retry #31492
TRT-2930: skip regional-PD e2e on GCP families without pd-standard #31572
ROSAENG-391: Add CustomResourcePublishOpenAPI conformance test to retry allowlist #31552
OCPBUGS-114341: Allow KubeDaemonSetRolloutStuck alert on external platform clusters #31564
OCPBUGS-111581: Fix probe termination test to use pod status instead of kubelet event text #31528
OCPBUGS-112283: Allow KubeDaemonSetMisScheduled alert on external platform clusters #31556
OCPBUGS-99536: Raise status polling timeout and write bound #31534
OCPBUGS-86257: Fix pathological events #31543
OCPBUGS-105399, OCPBUGS-105400: Remove TechPreview skips and event matchers from sigstore imagepolicy tests #31521
CNTRLPLANE-3423: e2e TLS test for service-operator-ca #31480
OCPBUGS-112470: fix duplicate destination tags in openshift-tests images output #31542
OCPBUGS-84517: Remove stale openshift-marketplace terminationMessagePolicy exemption #31355
CONSOLE-5188: remove console exceptions #31280
OCPBUGS-100298: pin internal-lb-monitor pollers to worker nodes #31466
OCPBUGS-84513: remove openshift-cluster-version terminationMessagePolicy exemption #31359
OCPBUGS-105461: allow baremetal to progress while MCO does #31511
OCPBUGS-105874: Avoid TLS port-forward to stale endpoints on degraded TNF clusters. #31502
OCPBUGS-111704: router/metrics: enable proxy protocol for client on AWS clusters #31526
OCPBUGS-109671: monitortests: allow image-registry node-ca Progressing on DualReplica #31517
CNTRLPLANE-1739: e2e additional tests for pki config #31491
OCPBUGS-104561: test: exclude NTO debug pods from best-effort QoS invariant #31472
OCPBUGS-105876: tolerate brief olm Available=False during upgrades #31518
NO-JIRA: Remove exception OCPBUGS-66225 #31471
NO-JIRA: Remove exception OCPBUGS-86009 #31470
OCPCLOUD-3420: Remove exceptions OCPBUGS-42837 and OCPBUGS-64852 #31469
MON-4471: test/extended/prometheus: move alert tests to “Test Framework” #30703
OCPBUGS-106190: Make oc rsh test resilient #31515
TRT-2898: Fix leaked ClusterRoleBinding in pull_secrets test #31514
OCPQE-32064: Reduce monitortest sensitivity for upcoming spot check jobs, use etcd-scaling job as early example #31212
OCPBUGS-105606: Allow DualReplica stable-system CVO Available blips from NoExecuteTaintManager #31501
NO-ISSUE: Update agnhost image to 2.63.0 (mirrored version) #31498
CNTRLPLANE-2157: Migrate OTE for Pull Secrets, Feature Gates and Webhooks #31382
OCPBUGS-105768: Update s2i_images test for OCP samples sync #31504
OCPBUGS-98719: retry GetVotingMemberNames on transient etcd client fails #31445
OCPBUGS-105466: monitortests: recognize PascalCase TNF JobRunning CO reasons #31499
OCPEDGE-2700: fix flaky etcd disruption tests and remove unreliable is_standalone test #31276
OCPNODE-4623: e2e for Block runc on RHEL 10 via OSImageURL stream class inspection #31433
OCPBUGS-104544: tolerate one NotReady CP node in EnsureNodesReady for degraded TNF #31442
OCPNODE-4521: Use programmatic skip for single-node instead of test name tag #31486
NO-ISSUE: Consider centos-10 stream for OKD clusters #31487
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

thanos

Bump openshift/thanos to v0.42.4 #203
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #206
OCPBUGS-120744: bump go.opentelemetry.io/otel to fix CVE-2026-41178 #204
Full changelog

volume-data-source-validator

OCPBUGS-127004: Bump golang.org/x/net to version 0.57.0 that fixes CVE-2026-33814 #17
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-122179: Fix credential exposure in logs (CWE-532) #199
OCPBUGS-114884: UPSTREAM: 4272: Fix crash in syncer when node can’t be found #201
Full changelog

vsphere-csi-driver-operator

OCPBUGS-113538: Enable SELinuxMount tests #362
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Red Hat Enterprise Linux CoreOS 9.8 (`rhel-coreos`)

Package List

cri-o-5.0.0-202609212354.p2.gee69985.assembly.stream.el9
kernel-5.14.0-687.50.1.el9_8
openshift-kubelet-5.0.0-202609212354.p2.g4517836.assembly.stream.el9
systemd-252-67.el9_8.6

Full list (570 packages)

NetworkManager-1:1.54.3-5.el9_8
NetworkManager-cloud-setup-1:1.54.3-5.el9_8
NetworkManager-libnm-1:1.54.3-5.el9_8
NetworkManager-ovs-1:1.54.3-5.el9_8
NetworkManager-team-1:1.54.3-5.el9_8
NetworkManager-tui-1:1.54.3-5.el9_8
WALinuxAgent-udev-2.14.0.1-4.el9
aardvark-dns-2:1.17.1-1.el9_8
acl-2.4.0-1.el9_8
adcli-0.9.3.1-3.el9
adcli-selinux-0.9.3.1-3.el9
afterburn-5.10.0-1.el9
afterburn-dracut-5.10.0-1.el9
alternatives-1.24-2.el9
attr-2.6.0-1.el9_8
audit-3.1.5-8.el9
audit-libs-3.1.5-8.el9
authselect-1.2.6-3.el9
authselect-libs-1.2.6-3.el9
avahi-libs-0.8-23.el9
azure-vm-utils-0.7.0-1.el9
basesystem-11-13.el9
bash-5.1.8-9.el9
bash-completion-1:2.11-5.el9
bind-libs-32:9.16.23-40.el9_8.9
bind-license-32:9.16.23-40.el9_8.9
bind-utils-32:9.16.23-40.el9_8.9
binutils-2.35.2-72.el9
binutils-gold-2.35.2-72.el9
bootc-1.16.4-1.el9_8
bootupd-0.2.35-1.el9_8
bsdtar-3.5.3-11.el9_8
bubblewrap-0.6.3-1.el9
bzip2-1.0.8-11.el9
bzip2-libs-1.0.8-11.el9
c-ares-1.19.1-2.el9_4
ca-certificates-2025.2.80_v9.0.305-91.el9
checkpolicy-3.6-1.el9
chrony-4.8-1.el9
cifs-utils-7.6-2.el9_8
clevis-21-209.el9
clevis-dracut-21-209.el9
clevis-luks-21-209.el9
clevis-systemd-21-209.el9
cloud-utils-growpart-0.33-1.el9
composefs-1.0.8-1.el9
composefs-libs-1.0.8-1.el9
conmon-3:2.2.1-2.el9_8
conmon-rs-0.6.6-0.rhaos5.0.el9
console-login-helper-messages-0.21.3-1.el9
console-login-helper-messages-issuegen-0.21.3-1.el9
console-login-helper-messages-profile-0.21.3-1.el9
container-selinux-4:2.247.0-1.el9_8
containernetworking-plugins-1:1.9.0-3.el9_8
containers-common-5:5.8-1.el9
coreos-installer-0.26.0-1.el9_8
coreos-installer-bootinfra-0.26.0-1.el9_8
coreutils-8.32-41.el9_8.1
coreutils-common-8.32-41.el9_8.1
cpio-2.13-16.el9
cracklib-2.9.6-28.el9
cracklib-dicts-2.9.6-28.el9
cri-o-5.0.0-202609212354.p2.gee69985.assembly.stream.el9
cri-tools-1.36.0-3.el9
criu-3.19-4.el9_8
criu-libs-3.19-4.el9_8
crun-1.27-1.el9_8
crypto-policies-20260224-1.gitea0f072.el9_8
crypto-policies-scripts-20260224-1.gitea0f072.el9_8
cryptsetup-2.8.1-3.el9
cryptsetup-libs-2.8.1-3.el9
curl-7.76.1-40.el9_8.7
cyrus-sasl-gssapi-2.1.27-22.el9
cyrus-sasl-lib-2.1.27-22.el9
dbus-1:1.12.20-8.el9
dbus-broker-28-9.el9_8
dbus-common-1:1.12.20-8.el9
dbus-libs-1:1.12.20-8.el9
dbus-tools-1:1.12.20-8.el9
device-mapper-9:1.02.207-4.el9_8.1
device-mapper-event-9:1.02.207-4.el9_8.1
device-mapper-event-libs-9:1.02.207-4.el9_8.1
device-mapper-libs-9:1.02.207-4.el9_8.1
device-mapper-multipath-0.8.7-45.el9
device-mapper-multipath-libs-0.8.7-45.el9
device-mapper-persistent-data-1.1.0-1.el9
diffutils-3.7-12.el9
dmidecode-1:3.6-2.el9
dnf-4.14.0-34.el9_8
dnf-data-4.14.0-34.el9_8
dnsmasq-2.85-18.el9_8.2
dosfstools-4.2-3.el9
dracut-057-120.git20260728.el9_8
dracut-network-057-120.git20260728.el9_8
dracut-squash-057-120.git20260728.el9_8
e2fsprogs-1.46.5-8.el9
e2fsprogs-libs-1.46.5-8.el9
efi-filesystem-6-4.el9
efibootmgr-16-12.el9
efivar-libs-38-3.el9
elfutils-debuginfod-client-0.194-1.el9
elfutils-default-yama-scope-0.194-1.el9
elfutils-libelf-0.194-1.el9
elfutils-libs-0.194-1.el9
ethtool-2:6.15-2.el9
expat-2.5.0-6.el9_8.3
fcoe-utils-1.0.34-0.git14ef0d2.el9
file-5.39-17.el9
file-libs-5.39-17.el9
filesystem-3.16-5.el9
findutils-1:4.8.0-7.el9
firewalld-filesystem-1.3.4-20.el9_8
flashrom-1.2-10.el9
fstrm-0.6.1-3.el9
fuse-2.9.9-17.el9
fuse-common-3.10.2-9.el9
fuse-libs-2.9.9-17.el9
fuse-overlayfs-1.16-1.el9_7
fuse3-3.10.2-9.el9
fuse3-libs-3.10.2-9.el9
fwupd-2.0.19-2.el9_8
fwupd-plugin-flashrom-2.0.19-2.el9_8
gawk-5.1.0-6.el9
gawk-all-langpacks-5.1.0-6.el9
gdbm-libs-1:1.23-1.el9
gdisk-1.0.7-5.el9
geolite2-city-20191217-6.el9
geolite2-country-20191217-6.el9
gettext-0.21-8.el9
gettext-libs-0.21-8.el9
git-core-2.52.0-1.el9
glib2-2.68.4-19.el9_8.10
glibc-2.34-275.el9_8
glibc-common-2.34-275.el9_8
glibc-gconv-extra-2.34-275.el9_8
glibc-minimal-langpack-2.34-275.el9_8
glusterfs-6.0-57.4.el9
glusterfs-client-xlators-6.0-57.4.el9
glusterfs-fuse-6.0-57.4.el9
glusterfs-libs-6.0-57.4.el9
gmp-1:6.2.0-13.el9
gnupg2-2.3.3-5.el9_7
gnutls-3.8.10-8.el9_8
gobject-introspection-1.68.0-11.el9
gpgme-1.15.1-6.el9
grep-3.6-5.el9
groff-base-1.22.4-10.el9
grub2-common-1:2.06-126.el9_8
grub2-efi-x64-1:2.06-126.el9_8
grub2-pc-1:2.06-126.el9_8
grub2-pc-modules-1:2.06-126.el9_8
grub2-tools-1:2.06-126.el9_8
grub2-tools-minimal-1:2.06-126.el9_8
gssproxy-0.8.4-7.el9
gzip-1.12-2.el9_8
hostname-3.23-6.el9
hwdata-0.348-9.22.el9
ignition-2.26.0-1.el9_8
ignition-grub-2.26.0-1.el9_8
ima-evm-utils-1.6.2-2.el9
info-6.7-15.el9
inih-49-6.el9
initscripts-service-10.11.8-4.el9
ipcalc-1.0.0-5.el9
iproute-6.17.0-2.el9
iproute-tc-6.17.0-2.el9
iptables-libs-1.8.10-11.el9_5
iptables-nft-1.8.10-11.el9_5
iputils-20210202-15.el9_7
irqbalance-2:1.9.4-5.el9
iscsi-initiator-utils-6.2.1.11-1.git4b3e853.el9_8.2
iscsi-initiator-utils-iscsiuio-6.2.1.11-1.git4b3e853.el9_8.2
isns-utils-libs-0.101-4.el9_8.1
jansson-2.14-1.el9
jose-14-1.el9
jq-1.6-19.el9_8.2
json-c-0.14-11.el9
json-glib-1.6.6-1.el9
kbd-2.4.0-12.el9_8
kbd-legacy-2.4.0-12.el9_8
kbd-misc-2.4.0-12.el9_8
kernel-5.14.0-687.50.1.el9_8
kernel-core-5.14.0-687.50.1.el9_8
kernel-modules-5.14.0-687.50.1.el9_8
kernel-modules-core-5.14.0-687.50.1.el9_8
kernel-modules-extra-5.14.0-687.50.1.el9_8
kexec-tools-2.0.29-17.el9
keyutils-1.6.3-1.el9
keyutils-libs-1.6.3-1.el9
kmod-28-11.el9
kmod-libs-28-11.el9
kpartx-0.8.7-45.el9
krb5-libs-1.21.1-10.el9_8
less-590-6.el9
libacl-2.4.0-1.el9_8
libaio-0.3.111-13.el9
libarchive-3.5.3-11.el9_8
libassuan-2.5.5-3.el9
libattr-2.6.0-1.el9_8
libbasicobjects-0.1.1-53.el9
libblkid-2.37.4-25.el9
libbpf-2:1.5.0-3.el9
libbrotli-1.0.9-9.el9_7
libcap-2.48-10.el9_8.1
libcap-ng-0.8.2-7.el9
libcbor-0.7.0-5.el9
libcollection-0.7.0-53.el9
libcom_err-1.46.5-8.el9
libcomps-0.1.18-1.el9
libconfig-1.7.2-9.el9
libcurl-7.76.1-40.el9_8.7
libdaemon-0.14-23.el9
libdb-5.3.28-57.el9_6
libdhash-0.5.0-53.el9
libdnf-0.69.0-18.el9
libdnf-plugin-subscription-manager-1.29.50-1.el9
libdrm-2.4.128-1.el9
libeconf-0.4.1-7.el9_8
libedit-3.1-39.20210216cvs.el9
libev-4.33-6.el9
libevent-2.1.13-1.el9_8
libfdisk-2.37.4-25.el9
libffi-3.4.2-8.el9
libfido2-1.13.0-2.el9
libgcc-11.5.0-14.el9
libgcrypt-1.10.0-13.el9_8
libgomp-11.5.0-14.el9
libgpg-error-1.42-5.el9
libibverbs-61.0-2.el9
libicu-67.1-10.el9_6
libidn2-2.3.0-7.el9
libini_config-1.3.1-53.el9
libipa_hbac-2.9.8-4.el9_8.1
libjcat-0.1.6-3.el9
libjose-14-1.el9
libkcapi-1.4.0-3.el9_8
libkcapi-hmaccalc-1.4.0-3.el9_8
libksba-1.5.1-7.el9
libldb-4.23.5-11.el9_8
libluksmeta-10-1.el9
libmaxminddb-1.5.2-4.el9
libmicrohttpd-1:0.9.72-5.el9
libmnl-1.0.4-16.el9_4
libmodulemd-2.13.0-2.el9
libmount-2.37.4-25.el9
libmspack-0.10.1-0.7.alpha.el9
libndp-1.9-1.el9
libnet-1.2-7.el9
libnetfilter_conntrack-1.0.9-1.el9
libnfnetlink-1.0.1-23.el9_5
libnfsidmap-1:2.5.4-42.el9_8
libnftnl-1.2.6-4.el9_4
libnghttp2-1.43.0-6.el9_8.2
libnl3-3.11.0-1.el9
libnl3-cli-3.11.0-1.el9
libnvme-1.16.1-3.el9_8
libpath_utils-0.2.1-53.el9
libpcap-14:1.10.0-4.el9
libpciaccess-0.16-7.el9
libpkgconf-1.7.3-10.el9
libpsl-0.21.1-5.el9
libpwquality-1.4.4-8.el9
libref_array-0.1.5-53.el9
librepo-1.19.0-1.el9
libreport-filesystem-2.15.2-6.el9
librhsm-0.0.3-9.el9
libseccomp-2.5.2-2.el9
libselinux-3.6-3.el9
libselinux-utils-3.6-3.el9
libsemanage-3.6-5.el9_6
libsepol-3.6-3.el9
libsigsegv-2.13-4.el9
libslirp-4.4.0-8.el9
libsmartcols-2.37.4-25.el9
libsmbclient-4.23.5-11.el9_8
libsolv-0.7.24-6.el9_8
libss-1.46.5-8.el9
libssh-0.10.4-19.el9_8
libssh-config-0.10.4-19.el9_8
libsss_certmap-2.9.8-4.el9_8.1
libsss_idmap-2.9.8-4.el9_8.1
libsss_nss_idmap-2.9.8-4.el9_8.1
libsss_sudo-2.9.8-4.el9_8.1
libstdc++-11.5.0-14.el9
libtalloc-2.4.3-1.el9
libtasn1-4.16.0-10.el9_8
libtdb-1.4.14-1.el9
libteam-1.31-16.el9_1
libtevent-0.17.1-1.el9
libtirpc-1.3.3-9.el9
libtool-ltdl-2.4.6-46.el9
libunistring-0.9.10-15.el9
liburing-2.12-1.el9
libusbx-1.0.30-1.el9_8
libuser-0.63-17.el9
libutempter-1.2.1-6.el9
libuuid-2.37.4-25.el9
libuv-1:1.42.0-2.el9_4
libverto-0.3.2-3.el9
libverto-libev-0.3.2-3.el9
libwbclient-4.23.5-11.el9_8
libxcrypt-4.4.18-3.el9
libxcrypt-compat-4.4.18-3.el9
libxml2-2.9.13-14.el9_8.4
libxmlb-0.3.24-1.el9
libxslt-1.1.34-14.el9_8.1
libyaml-0.2.5-7.el9
libzstd-1.5.5-1.el9
linux-firmware-20260804-161.2.el9_8
linux-firmware-whence-20260804-161.2.el9_8
lldpad-1.1.1-4.gitf1dd9eb.el9
lmdb-libs-0.9.29-3.el9
logrotate-3.18.0-12.el9
lsof-4.94.0-3.el9
lua-libs-5.4.4-4.el9
luksmeta-10-1.el9
lvm2-9:2.03.33-4.el9_8.1
lvm2-libs-9:2.03.33-4.el9_8.1
lz4-libs-1.9.3-5.el9
lzo-2.10-7.el9
mdadm-4.4-4.el9_8.1
microcode_ctl-4:20260210-1.20260812.1.el9_8
mokutil-2:0.7.2-4.el9
mpfr-4.1.0-10.el9
nano-5.6.1-7.el9
ncurses-6.2-12.20210508.el9
ncurses-base-6.2-12.20210508.el9
ncurses-libs-6.2-12.20210508.el9
net-tools-2.0-0.64.20160912git.el9
netavark-2:1.17.2-1.el9
nettle-3.10.1-1.el9
newt-0.52.21-11.el9
nfs-utils-1:2.5.4-42.el9_8
nftables-1:1.0.9-9.el9_8
nmap-ncat-3:7.92-5.el9
nmstate-2.2.60-2.el9_8
npth-1.6-8.el9
nss-altfiles-2.18.1-20.el9
numactl-2.0.19-3.el9
numactl-libs-2.0.19-3.el9
numad-0.5-37.20150602git.el9
nvme-cli-2.16-1.el9
oniguruma-6.9.6-1.el9.6
open-vm-tools-13.0.10-1.el9
openldap-2.6.8-4.el9
openshift-clients-5.0.0-202609211906.p2.g4b0a124.assembly.stream.el9
openshift-kubelet-5.0.0-202609212354.p2.g4517836.assembly.stream.el9
openssh-9.9p1-11.el9_8
openssh-clients-9.9p1-11.el9_8
openssh-server-9.9p1-11.el9_8
openssl-1:3.5.8-1.el9_8
openssl-fips-provider-3.0.7-11.el9_8
openssl-fips-provider-so-3.0.7-11.el9_8
openssl-libs-1:3.5.8-1.el9_8
openvswitch-selinux-extra-policy-1.0-39.el9fdp
openvswitch3.5-3.5.2-72.el9fdp.2
os-prober-1.77-12.el9_5
ose-aws-ecr-image-credential-provider-5.0.0-202609211906.p2.g278e8c0.assembly.stream.el9
ose-azure-acr-image-credential-provider-5.0.0-202609151726.p2.g95f0a12.assembly.stream.el9
ose-crio-credential-provider-5.0.0-202609211906.p2.g83d4961.assembly.stream.el9
ose-gcp-gcr-image-credential-provider-5.0.0-202609211906.p2.g51c3264.assembly.stream.el9
ostree-2025.7-1.el9
ostree-grub2-2025.7-1.el9
ostree-libs-2025.7-1.el9
p11-kit-0.26.4-1.el9_8
p11-kit-trust-0.26.4-1.el9_8
pam-1.5.1-28.el9_8.1
passt-0^20251210.gd04c480-6.el9_8
passt-selinux-0^20251210.gd04c480-6.el9_8
passwd-0.80-12.el9
pciutils-3.7.0-7.el9
pciutils-libs-3.7.0-7.el9
pcre-8.44-4.el9
pcre2-10.40-6.el9
pcre2-syntax-10.40-6.el9
perl-AutoLoader-5.74-484.el9_8
perl-B-1.80-484.el9_8
perl-Carp-1.50-460.el9
perl-Class-Struct-0.66-484.el9_8
perl-Data-Dumper-2.174-462.el9
perl-Digest-1.19-4.el9
perl-Digest-MD5-2.58-4.el9
perl-Encode-4:3.08-462.el9
perl-Errno-1.30-484.el9_8
perl-Exporter-5.74-461.el9
perl-Fcntl-1.13-484.el9_8
perl-File-Basename-2.85-484.el9_8
perl-File-Path-2.18-4.el9
perl-File-Temp-1:0.231.100-4.el9
perl-File-stat-1.09-484.el9_8
perl-FileHandle-2.03-484.el9_8
perl-Getopt-Long-1:2.52-4.el9
perl-Getopt-Std-1.12-484.el9_8
perl-HTTP-Tiny-0.076-462.el9
perl-IO-1.43-484.el9_8
perl-IO-Socket-IP-0.41-5.el9
perl-IO-Socket-SSL-2.073-2.el9
perl-IPC-Open3-1.21-484.el9_8
perl-MIME-Base64-3.16-4.el9
perl-Mozilla-CA-20200520-6.el9
perl-NDBM_File-1.15-484.el9_8
perl-Net-SSLeay-1.94-3.el9
perl-POSIX-1.94-484.el9_8
perl-PathTools-3.78-461.el9
perl-Pod-Escapes-1:1.07-460.el9
perl-Pod-Perldoc-3.28.01-461.el9
perl-Pod-Simple-1:3.42-4.el9
perl-Pod-Usage-4:2.01-4.el9
perl-Scalar-List-Utils-4:1.56-462.el9
perl-SelectSaver-1.02-484.el9_8
perl-Socket-4:2.031-4.el9
perl-Storable-1:3.21-460.el9
perl-Symbol-1.08-484.el9_8
perl-Term-ANSIColor-5.01-461.el9
perl-Term-Cap-1.17-460.el9
perl-Text-ParseWords-3.30-460.el9
perl-Text-Tabs+Wrap-2013.0523-460.el9
perl-Time-Local-2:1.300-7.el9
perl-URI-5.09-3.el9
perl-base-2.27-484.el9_8
perl-constant-1.33-461.el9
perl-if-0.60.800-484.el9_8
perl-interpreter-4:5.32.1-484.el9_8
perl-libnet-3.13-4.el9
perl-libs-4:5.32.1-484.el9_8
perl-mro-1.23-484.el9_8
perl-overload-1.31-484.el9_8
perl-overloading-0.02-484.el9_8
perl-parent-1:0.238-460.el9
perl-podlators-1:4.14-460.el9
perl-subs-1.03-484.el9_8
perl-vars-1.05-484.el9_8
pigz-2.8-1.el9
pkgconf-1.7.3-10.el9
pkgconf-m4-1.7.3-10.el9
pkgconf-pkg-config-1.7.3-10.el9
podman-6:5.8.2-7.el9_8
policycoreutils-3.6-5.el9
policycoreutils-python-utils-3.6-5.el9
polkit-0.117-14.el9
polkit-libs-0.117-14.el9
polkit-pkla-compat-0.1-21.el9
popt-1.18-8.el9
procps-ng-3.3.17-14.el9
protobuf-c-1.3.3-13.el9
psmisc-23.4-3.el9
publicsuffix-list-dafsa-20210518-3.el9
python-unversioned-command-3.9.25-7.el9_8.3
python3-3.9.25-7.el9_8.3
python3-audit-3.1.5-8.el9
python3-chardet-4.0.0-5.el9
python3-cloud-what-1.29.50-1.el9
python3-dateutil-1:2.9.0.post0-1.el9_7
python3-dbus-1.2.18-2.el9
python3-decorator-4.4.2-6.el9
python3-distro-1.5.0-7.el9
python3-dnf-4.14.0-34.el9_8
python3-dnf-plugin-versionlock-4.3.0-26.el9
python3-dnf-plugins-core-4.3.0-26.el9
python3-gobject-base-3.40.1-6.el9
python3-gobject-base-noarch-3.40.1-6.el9
python3-gpg-1.15.1-6.el9
python3-hawkey-0.69.0-18.el9
python3-idna-2.10-8.el9_8
python3-iniparse-0.4-45.el9
python3-inotify-0.9.6-25.el9
python3-libcomps-0.1.18-1.el9
python3-libdnf-0.69.0-18.el9
python3-librepo-1.19.0-1.el9
python3-libs-3.9.25-7.el9_8.3
python3-libselinux-3.6-3.el9
python3-libsemanage-3.6-5.el9_6
python3-pip-wheel-21.3.1-2.el9_8
python3-policycoreutils-3.6-5.el9
python3-pysocks-1.7.1-12.el9
python3-pyyaml-5.4.1-6.el9
python3-requests-2.25.1-10.el9_6
python3-rpm-4.16.1.3-40.el9
python3-setools-4.4.4-1.el9
python3-setuptools-53.0.0-15.el9
python3-setuptools-wheel-53.0.0-15.el9
python3-six-1.15.0-9.el9
python3-subscription-manager-rhsm-1.29.50-1.el9
python3-systemd-234-19.el9
python3-urllib3-1.26.5-8.el9_8
qemu-guest-agent-17:10.1.0-17.el9_8.5
quota-1:4.09-4.el9
quota-nls-1:4.09-4.el9
rdma-core-61.0-2.el9
readline-8.1-4.el9
redhat-release-9.8-1.0.el9
redhat-release-eula-9.8-1.0.el9
rpcbind-1.2.6-7.el9
rpm-4.16.1.3-40.el9
rpm-build-libs-4.16.1.3-40.el9
rpm-libs-4.16.1.3-40.el9
rpm-ostree-2026.1-6.el9_8
rpm-ostree-libs-2026.1-6.el9_8
rpm-plugin-selinux-4.16.1.3-40.el9
rpm-plugin-systemd-inhibit-4.16.1.3-40.el9
rpm-sign-libs-4.16.1.3-40.el9
rsync-3.2.7-1.el9_8
runc-4:1.4.2-3.el9_8
samba-client-libs-4.23.5-11.el9_8
samba-common-4.23.5-11.el9_8
samba-common-libs-4.23.5-11.el9_8
sed-4.8-10.el9
selinux-policy-38.1.75-2.el9_8
selinux-policy-targeted-38.1.75-2.el9_8
setup-2.13.7-10.el9
sg3_utils-1.47-10.el9_8.1
sg3_utils-libs-1.47-10.el9_8.1
shadow-utils-2:4.9-16.el9
shadow-utils-subid-2:4.9-16.el9
shared-mime-info-2.1-5.el9
shim-x64-16.1-7.el9
skopeo-2:1.22.2-7.el9_8
slang-2.3.2-11.el9
slirp4netns-1.3.3-1.el9
snappy-1.1.8-8.el9
socat-1.7.4.1-8.el9
sqlite-libs-3.34.1-11.el9_8
squashfs-tools-4.4-10.git1.el9
ssh-key-dir-0.1.4-1.el9
sssd-2.9.8-4.el9_8.1
sssd-ad-2.9.8-4.el9_8.1
sssd-client-2.9.8-4.el9_8.1
sssd-common-2.9.8-4.el9_8.1
sssd-common-pac-2.9.8-4.el9_8.1
sssd-ipa-2.9.8-4.el9_8.1
sssd-krb5-2.9.8-4.el9_8.1
sssd-krb5-common-2.9.8-4.el9_8.1
sssd-ldap-2.9.8-4.el9_8.1
sssd-nfs-idmap-2.9.8-4.el9_8.1
sssd-proxy-2.9.8-4.el9_8.1
stalld-1.26.3-1.el9
strace-6.12-1.el9
subscription-manager-1.29.50-1.el9
subscription-manager-rhsm-certificates-20220623-1.el9
sudo-1.9.17p2-3.el9_8.1
systemd-252-67.el9_8.6
systemd-journal-remote-252-67.el9_8.6
systemd-libs-252-67.el9_8.6
systemd-pam-252-67.el9_8.6
systemd-rpm-macros-252-67.el9_8.6
systemd-udev-252-67.el9_8.6
tar-2:1.34-13.el9_8
teamd-1.31-16.el9_1
tmux-3.2a-5.el9
toolbox-0.1.2-1.rhaos4.22.el9
tpm2-tools-5.2-7.el9
tpm2-tss-3.2.3-1.el9
tzdata-2026c-1.el9_8
unbound-libs-1.24.2-3.el9_8.6
usermode-1.114-7.el9
userspace-rcu-0.12.1-6.el9
util-linux-2.37.4-25.el9
util-linux-core-2.37.4-25.el9
vim-minimal-2:8.2.2637-26.el9_8.21
virt-what-1.27-2.el9
which-2.21-30.el9_6
xfsprogs-6.4.0-7.el9
xmlsec1-1.2.29-13.el9
xmlsec1-openssl-1.2.29-13.el9
xz-5.2.5-8.el9_0
xz-libs-5.2.5-8.el9_0
yajl-2.1.0-25.el9
zlib-1.2.11-40.el9
zram-generator-1.1.2-1.el9
zstd-1.5.5-1.el9

Changed:

NetworkManager 1:1.54.3-4.el9_8 → 1:1.54.3-5.el9_8
NetworkManager-cloud-setup 1:1.54.3-4.el9_8 → 1:1.54.3-5.el9_8
NetworkManager-libnm 1:1.54.3-4.el9_8 → 1:1.54.3-5.el9_8
NetworkManager-ovs 1:1.54.3-4.el9_8 → 1:1.54.3-5.el9_8
NetworkManager-team 1:1.54.3-4.el9_8 → 1:1.54.3-5.el9_8
NetworkManager-tui 1:1.54.3-4.el9_8 → 1:1.54.3-5.el9_8
attr 2.5.1-3.el9 → 2.6.0-1.el9_8
bind-libs 32:9.16.23-40.el9_8.2 → 32:9.16.23-40.el9_8.9
bind-license 32:9.16.23-40.el9_8.2 → 32:9.16.23-40.el9_8.9
bind-utils 32:9.16.23-40.el9_8.2 → 32:9.16.23-40.el9_8.9
bootc 1.13.0-1.el9 → 1.16.4-1.el9_8
bsdtar 3.5.3-9.el9_7 → 3.5.3-11.el9_8
container-selinux 4:2.245.0-1.el9 → 4:2.247.0-1.el9_8
coreutils 8.32-41.el9_8 → 8.32-41.el9_8.1
coreutils-common 8.32-41.el9_8 → 8.32-41.el9_8.1
cri-o 1.36.2-6.rhaos5.0.git6aba8f0.el9 → 5.0.0-202609212354.p2.gee69985.assembly.stream.el9
cri-tools 1.36.0-2.el9 → 1.36.0-3.el9
criu 3.19-3.el9 → 3.19-4.el9_8
criu-libs 3.19-3.el9 → 3.19-4.el9_8
curl 7.76.1-40.el9 → 7.76.1-40.el9_8.7
dbus-broker 28-7.el9 → 28-9.el9_8
dnsmasq 2.85-18.el9_8.1 → 2.85-18.el9_8.2
dracut 057-117.git20260625.el9_8 → 057-120.git20260728.el9_8
dracut-network 057-117.git20260625.el9_8 → 057-120.git20260728.el9_8
dracut-squash 057-117.git20260625.el9_8 → 057-120.git20260728.el9_8
expat 2.5.0-6.el9_8.1 → 2.5.0-6.el9_8.3
firewalld-filesystem 1.3.4-19.el9_8 → 1.3.4-20.el9_8
glib2 2.68.4-19.el9_8.2 → 2.68.4-19.el9_8.10
gzip 1.12-1.el9 → 1.12-2.el9_8
iscsi-initiator-utils 6.2.1.11-0.git4b3e853.el9 → 6.2.1.11-1.git4b3e853.el9_8.2
iscsi-initiator-utils-iscsiuio 6.2.1.11-0.git4b3e853.el9 → 6.2.1.11-1.git4b3e853.el9_8.2
isns-utils-libs 0.101-4.el9 → 0.101-4.el9_8.1
kbd 2.4.0-11.el9 → 2.4.0-12.el9_8
kbd-legacy 2.4.0-11.el9 → 2.4.0-12.el9_8
kbd-misc 2.4.0-11.el9 → 2.4.0-12.el9_8
kernel 5.14.0-687.37.1.el9_8 → 5.14.0-687.50.1.el9_8
kernel-core 5.14.0-687.37.1.el9_8 → 5.14.0-687.50.1.el9_8
kernel-modules 5.14.0-687.37.1.el9_8 → 5.14.0-687.50.1.el9_8
kernel-modules-core 5.14.0-687.37.1.el9_8 → 5.14.0-687.50.1.el9_8
kernel-modules-extra 5.14.0-687.37.1.el9_8 → 5.14.0-687.50.1.el9_8
libarchive 3.5.3-9.el9_7 → 3.5.3-11.el9_8
libattr 2.5.1-3.el9 → 2.6.0-1.el9_8
libcurl 7.76.1-40.el9 → 7.76.1-40.el9_8.7
libevent 2.1.12-8.el9_4 → 2.1.13-1.el9_8
libkcapi 1.4.0-2.el9 → 1.4.0-3.el9_8
libkcapi-hmaccalc 1.4.0-2.el9 → 1.4.0-3.el9_8
libldb 4.23.5-10.el9_8 → 4.23.5-11.el9_8
libnghttp2 1.43.0-6.el9_8.1 → 1.43.0-6.el9_8.2
libsmbclient 4.23.5-10.el9_8 → 4.23.5-11.el9_8
libssh 0.10.4-18.el9 → 0.10.4-19.el9_8
libssh-config 0.10.4-18.el9 → 0.10.4-19.el9_8
libwbclient 4.23.5-10.el9_8 → 4.23.5-11.el9_8
libxml2 2.9.13-14.el9_8.2 → 2.9.13-14.el9_8.4
linux-firmware 20260707-161.1.el9_8 → 20260804-161.2.el9_8
linux-firmware-whence 20260707-161.1.el9_8 → 20260804-161.2.el9_8
mdadm 4.4-4.el9_7 → 4.4-4.el9_8.1
microcode_ctl 4:20260210-1.20260512.1.el9_8 → 4:20260210-1.20260812.1.el9_8
nftables 1:1.0.9-7.el9_8 → 1:1.0.9-9.el9_8
nmstate 2.2.60-1.el9_8 → 2.2.60-2.el9_8
openshift-clients 5.0.0-202608081440.p2.gd436a45.assembly.stream.el9 → 5.0.0-202609211906.p2.g4b0a124.assembly.stream.el9
openshift-kubelet 5.0.0-202607301230.p2.ge63ab41.assembly.stream.el9 → 5.0.0-202609212354.p2.g4517836.assembly.stream.el9
openssh 9.9p1-9.el9_8 → 9.9p1-11.el9_8
openssh-clients 9.9p1-9.el9_8 → 9.9p1-11.el9_8
openssh-server 9.9p1-9.el9_8 → 9.9p1-11.el9_8
openssl 1:3.5.5-6.el9_8 → 1:3.5.8-1.el9_8
openssl-libs 1:3.5.5-6.el9_8 → 1:3.5.8-1.el9_8
ose-aws-ecr-image-credential-provider 5.0.0-202607281540.p2.g278e8c0.assembly.stream.el9 → 5.0.0-202609211906.p2.g278e8c0.assembly.stream.el9
ose-azure-acr-image-credential-provider 5.0.0-202608060825.p2.gb99e4ce.assembly.stream.el9 → 5.0.0-202609151726.p2.g95f0a12.assembly.stream.el9
ose-crio-credential-provider 5.0.0-202603041733.p2.g83d4961.assembly.stream.el9 → 5.0.0-202609211906.p2.g83d4961.assembly.stream.el9
ose-gcp-gcr-image-credential-provider 5.0.0-202608040132.p2.g51c3264.assembly.stream.el9 → 5.0.0-202609211906.p2.g51c3264.assembly.stream.el9
pam 1.5.1-28.el9 → 1.5.1-28.el9_8.1
perl-AutoLoader 5.74-481.1.el9_6 → 5.74-484.el9_8
perl-B 1.80-481.1.el9_6 → 1.80-484.el9_8
perl-Class-Struct 0.66-481.1.el9_6 → 0.66-484.el9_8
perl-Errno 1.30-481.1.el9_6 → 1.30-484.el9_8
perl-Fcntl 1.13-481.1.el9_6 → 1.13-484.el9_8
perl-File-Basename 2.85-481.1.el9_6 → 2.85-484.el9_8
perl-File-stat 1.09-481.1.el9_6 → 1.09-484.el9_8
perl-FileHandle 2.03-481.1.el9_6 → 2.03-484.el9_8
perl-Getopt-Std 1.12-481.1.el9_6 → 1.12-484.el9_8
perl-IO 1.43-481.1.el9_6 → 1.43-484.el9_8
perl-IPC-Open3 1.21-481.1.el9_6 → 1.21-484.el9_8
perl-NDBM_File 1.15-481.1.el9_6 → 1.15-484.el9_8
perl-POSIX 1.94-481.1.el9_6 → 1.94-484.el9_8
perl-SelectSaver 1.02-481.1.el9_6 → 1.02-484.el9_8
perl-Symbol 1.08-481.1.el9_6 → 1.08-484.el9_8
perl-base 2.27-481.1.el9_6 → 2.27-484.el9_8
perl-if 0.60.800-481.1.el9_6 → 0.60.800-484.el9_8
perl-interpreter 4:5.32.1-481.1.el9_6 → 4:5.32.1-484.el9_8
perl-libs 4:5.32.1-481.1.el9_6 → 4:5.32.1-484.el9_8
perl-mro 1.23-481.1.el9_6 → 1.23-484.el9_8
perl-overload 1.31-481.1.el9_6 → 1.31-484.el9_8
perl-overloading 0.02-481.1.el9_6 → 0.02-484.el9_8
perl-subs 1.03-481.1.el9_6 → 1.03-484.el9_8
perl-vars 1.05-481.1.el9_6 → 1.05-484.el9_8
podman 6:5.8.2-5.el9_8 → 6:5.8.2-7.el9_8
python-unversioned-command 3.9.25-7.el9_8.2 → 3.9.25-7.el9_8.3
python3 3.9.25-7.el9_8.2 → 3.9.25-7.el9_8.3
python3-idna 2.10-7.el9_4.1 → 2.10-8.el9_8
python3-libs 3.9.25-7.el9_8.2 → 3.9.25-7.el9_8.3
rsync 3.2.5-7.el9_8.2 → 3.2.7-1.el9_8
runc 4:1.4.2-2.el9_8 → 4:1.4.2-3.el9_8
samba-client-libs 4.23.5-10.el9_8 → 4.23.5-11.el9_8
samba-common 4.23.5-10.el9_8 → 4.23.5-11.el9_8
samba-common-libs 4.23.5-10.el9_8 → 4.23.5-11.el9_8
sqlite-libs 3.34.1-10.el9_8 → 3.34.1-11.el9_8
sudo 1.9.17p2-3.el9_8 → 1.9.17p2-3.el9_8.1
systemd 252-67.el9_8.4 → 252-67.el9_8.6
systemd-journal-remote 252-67.el9_8.4 → 252-67.el9_8.6
systemd-libs 252-67.el9_8.4 → 252-67.el9_8.6
systemd-pam 252-67.el9_8.4 → 252-67.el9_8.6
systemd-rpm-macros 252-67.el9_8.4 → 252-67.el9_8.6
systemd-udev 252-67.el9_8.4 → 252-67.el9_8.6
tar 2:1.34-11.el9 → 2:1.34-13.el9_8
unbound-libs 1.24.2-3.el9_8.2 → 1.24.2-3.el9_8.6
vim-minimal 2:8.2.2637-26.el9_8.13 → 2:8.2.2637-26.el9_8.21

Extensions

Full list (154 packages)

NetworkManager-libreswan-1.2.30-1.el9.x86_64
bison-3.7.4-5.el9.x86_64
capstone-4.0.2-13.el9_8.x86_64
corosync-3.1.10-1.el9_8.2.x86_64
corosynclib-3.1.10-1.el9_8.2.x86_64
cpp-11.5.0-14.el9.x86_64
daxctl-libs-82-1.el9.x86_64
edk2-ovmf-20241117-8.el9.noarch
elfutils-libelf-devel-0.194-1.el9.x86_64
fence-agents-all-4.10.0-110.el9_8.7.x86_64
fence-agents-amt-ws-4.10.0-110.el9_8.7.noarch
fence-agents-apc-4.10.0-110.el9_8.7.noarch
fence-agents-apc-snmp-4.10.0-110.el9_8.7.noarch
fence-agents-bladecenter-4.10.0-110.el9_8.7.noarch
fence-agents-brocade-4.10.0-110.el9_8.7.noarch
fence-agents-cisco-mds-4.10.0-110.el9_8.7.noarch
fence-agents-cisco-ucs-4.10.0-110.el9_8.7.noarch
fence-agents-common-4.10.0-110.el9_8.7.noarch
fence-agents-drac5-4.10.0-110.el9_8.7.noarch
fence-agents-eaton-snmp-4.10.0-110.el9_8.7.noarch
fence-agents-emerson-4.10.0-110.el9_8.7.noarch
fence-agents-eps-4.10.0-110.el9_8.7.noarch
fence-agents-heuristics-ping-4.10.0-110.el9_8.7.noarch
fence-agents-hpblade-4.10.0-110.el9_8.7.noarch
fence-agents-ibmblade-4.10.0-110.el9_8.7.noarch
fence-agents-ifmib-4.10.0-110.el9_8.7.noarch
fence-agents-ilo-moonshot-4.10.0-110.el9_8.7.noarch
fence-agents-ilo-mp-4.10.0-110.el9_8.7.noarch
fence-agents-ilo-ssh-4.10.0-110.el9_8.7.noarch
fence-agents-ilo2-4.10.0-110.el9_8.7.noarch
fence-agents-intelmodular-4.10.0-110.el9_8.7.noarch
fence-agents-ipdu-4.10.0-110.el9_8.7.noarch
fence-agents-ipmilan-4.10.0-110.el9_8.7.noarch
fence-agents-kdump-4.10.0-110.el9_8.7.x86_64
fence-agents-mpath-4.10.0-110.el9_8.7.noarch
fence-agents-redfish-4.10.0-110.el9_8.7.x86_64
fence-agents-rhevm-4.10.0-110.el9_8.7.noarch
fence-agents-rsa-4.10.0-110.el9_8.7.noarch
fence-agents-rsb-4.10.0-110.el9_8.7.noarch
fence-agents-sbd-4.10.0-110.el9_8.7.noarch
fence-agents-scsi-4.10.0-110.el9_8.7.noarch
fence-agents-vmware-rest-4.10.0-110.el9_8.7.noarch
fence-agents-vmware-soap-4.10.0-110.el9_8.7.noarch
fence-agents-wti-4.10.0-110.el9_8.7.noarch
fence-virt-4.10.0-110.el9_8.7.x86_64
flex-2.6.4-9.el9.x86_64
gcc-11.5.0-14.el9.x86_64
glibc-devel-2.34-275.el9_8.x86_64
glibc-headers-2.34-275.el9_8.x86_64
gnutls-dane-3.8.10-8.el9_8.x86_64
gnutls-utils-3.8.10-8.el9_8.x86_64
ipmitool-1.8.18-27.el9.x86_64
ipxe-roms-qemu-20200823-9.git4bd064de.el9_0.noarch
kata-containers-3.31.0-5.rhaos4.22.el9.x86_64
kernel-5.14.0-687.50.1.el9_8.x86_64
kernel-core-5.14.0-687.50.1.el9_8.x86_64
kernel-devel-5.14.0-687.50.1.el9_8.x86_64
kernel-headers-5.14.0-687.50.1.el9_8.x86_64
kernel-modules-5.14.0-687.50.1.el9_8.x86_64
kernel-modules-core-5.14.0-687.50.1.el9_8.x86_64
kernel-modules-extra-5.14.0-687.50.1.el9_8.x86_64
kernel-rt-core-5.14.0-687.50.1.el9_8.x86_64
kernel-rt-devel-5.14.0-687.50.1.el9_8.x86_64
kernel-rt-modules-5.14.0-687.50.1.el9_8.x86_64
kernel-rt-modules-core-5.14.0-687.50.1.el9_8.x86_64
kernel-rt-modules-extra-5.14.0-687.50.1.el9_8.x86_64
krb5-pkinit-1.21.1-10.el9_8.x86_64
krb5-workstation-1.21.1-10.el9_8.x86_64
ldns-1.7.1-12.el9_8.1.x86_64
libfdt-1.6.0-7.el9.x86_64
libkadm5-1.21.1-10.el9_8.x86_64
libknet1-1.28-1.el9.x86_64
libknet1-compress-bzip2-plugin-1.28-1.el9.x86_64
libknet1-compress-lz4-plugin-1.28-1.el9.x86_64
libknet1-compress-lzma-plugin-1.28-1.el9.x86_64
libknet1-compress-lzo2-plugin-1.28-1.el9.x86_64
libknet1-compress-plugins-all-1.28-1.el9.x86_64
libknet1-compress-zlib-plugin-1.28-1.el9.x86_64
libknet1-compress-zstd-plugin-1.28-1.el9.x86_64
libknet1-crypto-nss-plugin-1.28-1.el9.x86_64
libknet1-crypto-openssl-plugin-1.28-1.el9.x86_64
libknet1-crypto-plugins-all-1.28-1.el9.x86_64
libknet1-plugins-all-1.28-1.el9.x86_64
libmpc-1.2.1-4.el9.x86_64
libnozzle1-1.28-1.el9.x86_64
libpmem-1.12.1-1.el9.x86_64
libpng-2:1.6.37-15.el9_8.2.x86_64
libqb-2.0.8-1.el9.x86_64
librdmacm-61.0-2.el9.x86_64
libreswan-5.3.2-2.el9fdp.x86_64
libwsman1-2.8.1-2.el9.x86_64
libxcrypt-devel-4.4.18-3.el9.x86_64
libzstd-devel-1.5.5-1.el9.x86_64
lm_sensors-libs-3.6.0-10.el9.x86_64
m4-1.4.19-1.el9.x86_64
make-1:4.3-8.el9.x86_64
ndctl-libs-82-1.el9.x86_64
net-snmp-libs-1:5.9.1-21.el9.x86_64
net-snmp-utils-1:5.9.1-21.el9.x86_64
nspr-4.39.0-5.el9_6.x86_64
nss-3.124.0-5.el9_6.x86_64
nss-softokn-3.124.0-5.el9_6.x86_64
nss-softokn-freebl-3.124.0-5.el9_6.x86_64
nss-sysinit-3.124.0-5.el9_6.x86_64
nss-tools-3.124.0-5.el9_6.x86_64
nss-util-3.124.0-5.el9_6.x86_64
openssl-devel-1:3.5.8-1.el9_8.x86_64
openvswitch3.5-ipsec-3.5.2-72.el9fdp.2.x86_64
openwsman-python3-2.8.1-2.el9.x86_64
pacemaker-2.1.10-3.el9_8.x86_64
pacemaker-cli-2.1.10-3.el9_8.x86_64
pacemaker-cluster-libs-2.1.10-3.el9_8.x86_64
pacemaker-libs-2.1.10-3.el9_8.x86_64
pacemaker-schemas-2.1.10-3.el9_8.noarch
pcp-conf-6.3.7-8.el9_8.4.x86_64
pcp-libs-6.3.7-8.el9_8.4.x86_64
pcs-0.11.11-2.el9_8.1.x86_64
perl-TimeDate-1:2.33-6.el9.noarch
pixman-0.40.0-6.el9_3.x86_64
protobuf-3.14.0-17.el9_7.x86_64
python3-cffi-1.14.5-5.el9.x86_64
python3-cryptography-36.0.1-5.el9_6.x86_64
python3-lxml-4.6.5-3.el9_8.1.x86_64
python3-openvswitch3.5-3.5.2-72.el9fdp.2.x86_64
python3-ply-3.11-14.el9.noarch
python3-pycparser-2.20-6.el9.noarch
python3-pycurl-7.43.0.6-8.el9.x86_64
python3-pyparsing-2.4.7-9.el9.noarch
python3-tornado-6.5.8-0.el9_8.1.x86_64
qemu-img-17:10.1.0-17.el9_8.5.x86_64
qemu-kvm-common-17:10.1.0-17.el9_8.5.x86_64
qemu-kvm-core-17:10.1.0-17.el9_8.5.x86_64
redhat-logos-90.6-1.el9.x86_64
resource-agents-4.10.0-111.el9_8.12.x86_64
ruby-3.0.7-167.el9_8.x86_64
ruby-default-gems-3.0.7-167.el9_8.noarch
ruby-libs-3.0.7-167.el9_8.x86_64
rubygem-bigdecimal-3.0.0-167.el9_8.x86_64
rubygem-bundler-2.2.33-167.el9_8.noarch
rubygem-io-console-0.5.7-167.el9_8.x86_64
rubygem-json-2.5.1-167.el9_8.x86_64
rubygem-psych-3.3.2-167.el9_8.x86_64
rubygem-rdoc-6.3.4.1-167.el9_8.noarch
rubygem-rexml-3.2.5-167.el9_8.noarch
rubygems-3.2.33-167.el9_8.noarch
sbd-1.5.2-1.el9.x86_64
seabios-bin-1.16.3-5.el9.noarch
seavgabios-bin-1.16.3-5.el9.noarch
sysstat-12.5.4-11.el9.x86_64
telnet-1:0.17-85.el9.x86_64
usbguard-1.1.4-2.el9.x86_64
usbguard-selinux-1.1.4-2.el9.noarch
virtiofsd-1.13.3-1.el9.x86_64
zlib-devel-1.2.11-40.el9.x86_64

Red Hat Enterprise Linux CoreOS 10.2 (`rhel-coreos-10`)

Package List

cri-o-5.0.0-202609212354.p2.gee69985.assembly.stream.el10
kernel-6.12.0-211.59.1.el10_2
openshift-kubelet-5.0.0-202609212354.p2.g4517836.assembly.stream.el10
systemd-257-23.el10_2.2

Full list (489 packages)

NetworkManager-1:1.56.0-2.el10_2
NetworkManager-cloud-setup-1:1.56.0-2.el10_2
NetworkManager-libnm-1:1.56.0-2.el10_2
NetworkManager-ovs-1:1.56.0-2.el10_2
NetworkManager-tui-1:1.56.0-2.el10_2
WALinuxAgent-udev-2.14.0.1-3.el10
aardvark-dns-2:1.17.1-1.el10_2
acl-2.4.0-1.el10_2
afterburn-5.10.0-1.el10
afterburn-dracut-5.10.0-1.el10
alternatives-1.30-2.el10
amd-gpu-firmware-20260804-23.2.el10_2
amd-ucode-firmware-20260804-23.2.el10_2
attr-2.6.0-1.el10_2
audit-4.0.3-5.el10
audit-libs-4.0.3-5.el10
audit-rules-4.0.3-5.el10
authselect-1.5.2-1.el10
authselect-libs-1.5.2-1.el10
avahi-libs-0.9~rc2-2.el10
azure-vm-utils-0.7.0-1.el10
basesystem-11-22.el10
bash-5.2.26-6.el10
bash-completion-1:2.11-16.el10
bind-libs-32:9.18.33-15.el10_2.11
bind-license-32:9.18.33-15.el10_2.11
bind-utils-32:9.18.33-15.el10_2.11
bootc-1.16.4-1.el10_2
bootupd-0.2.35-1.el10_2
bsdtar-3.7.7-11.el10_2
bubblewrap-0.10.0-3.el10
bzip2-1.0.8-25.el10
bzip2-libs-1.0.8-25.el10
c-ares-1.34.6-2.el10_2
ca-certificates-2025.2.80_v9.0.305-102.el10_1
catatonit-5:0.2.1-1.el10
checkpolicy-3.10-1.el10
chrony-4.8-2.el10
cifs-utils-7.7-1.el10_2
clevis-21-9.el10
clevis-dracut-21-9.el10
clevis-luks-21-9.el10
clevis-pin-tpm2-0.5.3-9.el10
clevis-systemd-21-9.el10
cloud-utils-growpart-0.33-11.el10
composefs-1.0.8-1.el10
composefs-libs-1.0.8-1.el10
conmon-3:2.2.1-2.el10
conmon-rs-0.6.6-0.rhaos5.0.el10
console-login-helper-messages-0.21.3-10.el10
console-login-helper-messages-issuegen-0.21.3-10.el10
console-login-helper-messages-profile-0.21.3-10.el10
container-selinux-4:2.248.0-1.el10_2
containers-common-6:5.8-2.el10
containers-common-extra-6:5.8-2.el10
coreos-installer-0.26.0-1.el10_2
coreos-installer-bootinfra-0.26.0-1.el10_2
coreutils-9.5-8.el10_2.1
coreutils-common-9.5-8.el10_2.1
cpio-2.15-3.el10
cracklib-2.9.11-8.el10
cracklib-dicts-2.9.11-8.el10
cri-o-5.0.0-202609212354.p2.gee69985.assembly.stream.el10
cri-tools-1.36.0-3.el10
criu-4.2-2.el10_2
criu-libs-4.2-2.el10_2
crun-1.27-2.el10_2
crypto-policies-20260216-1.git0e54016.el10_2.2
crypto-policies-scripts-20260216-1.git0e54016.el10_2.2
cryptsetup-2.8.1-2.el10
cryptsetup-libs-2.8.1-2.el10
curl-8.12.1-4.el10_2.6
cyrus-sasl-gssapi-2.1.28-30.el10_2
cyrus-sasl-lib-2.1.28-30.el10_2
dbus-1:1.14.10-5.el10
dbus-broker-36-5.el10_2
dbus-common-1:1.14.10-5.el10
dbus-libs-1:1.14.10-5.el10
dbus-tools-1:1.14.10-5.el10
device-mapper-10:1.02.210-2.el10
device-mapper-event-10:1.02.210-2.el10
device-mapper-event-libs-10:1.02.210-2.el10
device-mapper-libs-10:1.02.210-2.el10
device-mapper-multipath-0.9.9-18.el10
device-mapper-multipath-libs-0.9.9-18.el10
device-mapper-persistent-data-1.3.0-1.el10
diffutils-3.10-8.el10
dmidecode-1:3.6-5.el10
dnf-4.20.0-22.el10_2
dnf-data-4.20.0-22.el10_2
dnsmasq-2.90-7.el10_2.1
dosfstools-4.2-12.el10
dracut-107-9.el10_2
dracut-network-107-9.el10_2
dracut-squash-107-9.el10_2
duktape-2.7.0-10.el10
e2fsprogs-1.47.1-5.el10
e2fsprogs-libs-1.47.1-5.el10
efi-filesystem-6-6.el10
efibootmgr-18-8.el10
efivar-libs-39-3.el10
elfutils-default-yama-scope-0.194-2.el10_2
elfutils-libelf-0.194-2.el10_2
elfutils-libs-0.194-2.el10_2
erofs-utils-1.8.10-1.el10
ethtool-2:6.15-2.el10
expat-2.7.3-1.el10_2.3
fcoe-utils-1.0.34-11.gitb233050.el10
file-5.45-9.el10
file-libs-5.45-9.el10
filesystem-3.18-17.el10
findutils-1:4.10.0-5.el10
firewalld-filesystem-2.4.3-4.el10_2
flatpak-session-helper-1.16.0-9.el10_2.1
fstrm-0.6.1-12.el10
fuse-common-3.16.2-5.el10
fuse-libs-2.9.9-25.el10
fuse3-3.16.2-5.el10
fuse3-libs-3.16.2-5.el10
fwupd-2.0.19-4.1.el10_2
gawk-5.3.0-6.el10
gdbm-1:1.23-12.el10_0
gdbm-libs-1:1.23-12.el10_0
gettext-envsubst-0.22.5-6.el10
gettext-libs-0.22.5-6.el10
gettext-runtime-0.22.5-6.el10
git-core-2.52.0-1.el10
glib2-2.80.4-12.el10_2.22
glibc-2.39-128.el10_2
glibc-common-2.39-128.el10_2
glibc-gconv-extra-2.39-128.el10_2
glibc-minimal-langpack-2.39-128.el10_2
gmp-1:6.2.1-12.el10
gnupg2-2.4.5-4.el10_1
gnutls-3.8.10-4.el10_2
gobject-introspection-1.79.1-6.el10
gpgme-1.23.2-6.el10
grep-3.11-10.el10
grub2-common-1:2.12-46.el10_2
grub2-efi-x64-1:2.12-46.el10_2
grub2-pc-1:2.12-46.el10_2
grub2-pc-modules-1:2.12-46.el10_2
grub2-tools-1:2.12-46.el10_2
grub2-tools-minimal-1:2.12-46.el10_2
gssproxy-0.9.2-10.el10
gzip-1.13-4.el10_2
hostname-3.23-14.el10
hwdata-0.379-10.8.el10
ignition-2.26.0-2.el10_2
ignition-grub-2.26.0-2.el10_2
ima-evm-utils-1.6.2-4.el10
info-7.1-6.el10
inih-58-3.el10
intel-gpu-firmware-20260804-23.2.el10_2
ipcalc-1.0.3-12.el10
iproute-6.17.0-2.el10
iproute-tc-6.17.0-2.el10
iptables-libs-1.8.11-16.el10_2
iptables-nft-1.8.11-16.el10_2
iputils-20240905-5.el10
irqbalance-2:1.9.4-6.el10
iscsi-initiator-utils-6.2.1.11-1.git4b3e853.el10_2.2
iscsi-initiator-utils-iscsiuio-6.2.1.11-1.git4b3e853.el10_2.2
isns-utils-libs-0.103-1.el10_2.1
jansson-2.14-3.el10
jose-14-102.el10
jq-1.7.1-11.el10_2.2
json-c-0.18-3.el10
json-glib-1.8.0-5.el10
kbd-2.6.4-8.el10_2
kbd-legacy-2.6.4-8.el10_2
kbd-misc-2.6.4-8.el10_2
kdump-utils-1.0.58-15.el10
kernel-6.12.0-211.59.1.el10_2
kernel-core-6.12.0-211.59.1.el10_2
kernel-modules-6.12.0-211.59.1.el10_2
kernel-modules-core-6.12.0-211.59.1.el10_2
kernel-modules-extra-6.12.0-211.59.1.el10_2
kexec-tools-2.0.32-3.el10
keyutils-1.6.3-5.el10
keyutils-libs-1.6.3-5.el10
kmod-31-13.el10
kmod-libs-31-13.el10
kpartx-0.9.9-18.el10
krb5-libs-1.21.3-10.el10_2
less-661-3.el10
libacl-2.4.0-1.el10_2
libaio-0.3.111-22.el10
libarchive-3.7.7-11.el10_2
libassuan-2.5.6-6.el10
libattr-2.6.0-1.el10_2
libbasicobjects-0.1.1-58.el10
libblkid-2.40.2-18.el10
libbpf-2:1.7.0-1.el10
libcap-2.69-7.el10_2.1
libcap-ng-0.8.4-6.el10
libcbor-0.11.0-3.el10
libcollection-0.7.0-58.el10
libcom_err-1.47.1-5.el10
libcomps-0.1.21-3.el10
libconfig-1.7.3-10.el10
libcurl-minimal-8.12.1-4.el10_2.6
libdhash-0.5.0-58.el10
libdnf-0.73.1-15.el10_2
libdnf-plugin-subscription-manager-1.30.12-1.el10
libdrm-2.4.128-1.el10
libeconf-0.6.2-4.el10
libedit-3.1-52.20230828cvs.el10
libev-4.33-15.el10
libevent-2.1.13-1.el10_2
libfdisk-2.40.2-18.el10
libffi-3.4.4-10.el10
libfido2-1.14.0-7.el10
libgcc-14.3.1-4.4.el10
libgcrypt-1.11.0-7.el10_2
libgomp-14.3.1-4.4.el10
libgpg-error-1.50-2.el10
libibverbs-61.0-1.el10
libicu-74.2-5.el10_0
libidn2-2.3.7-3.el10
libini_config-1.3.1-58.el10
libipa_hbac-2.12.0-3.el10_2.1
libjcat-0.2.2-2.el10
libjose-14-102.el10
libkcapi-1.5.1-1.el10_2
libkcapi-hasher-1.5.1-1.el10_2
libkcapi-hmaccalc-1.5.1-1.el10_2
libksba-1.6.7-2.el10
libldb-4.23.5-110.el10_2
libluksmeta-10-1.el10
libmaxminddb-1.9.1-4.el10
libmicrohttpd-1:1.0.0-3.el10
libmnl-1.0.5-7.el10
libmodulemd-2.15.0-12.el10
libmount-2.40.2-18.el10
libmspack-0.10.1-0.14.alpha.el10
libndp-1.9-2.el10
libnet-1.3-7.el10
libnetfilter_conntrack-1.0.9-12.el10
libnfnetlink-1.0.2-3.el10
libnfsidmap-1:2.8.3-5.el10_2
libnftnl-1.3.0-3.el10
libnghttp2-1.68.0-3.el10_2.2
libnl3-3.11.0-1.el10
libnvme-1.16.1-3.el10_2
libpath_utils-0.2.1-58.el10
libpcap-14:1.10.4-7.el10
libpciaccess-0.16-16.el10
libpkgconf-2.1.0-3.el10
libpwquality-1.4.5-12.el10
libref_array-0.1.5-58.el10
librepo-1.19.0-1.el10
librhsm-0.0.3-16.el10
libseccomp-2.5.6-1.el10
libselinux-3.10-1.el10
libselinux-utils-3.10-1.el10
libsemanage-3.10-1.el10
libsepol-3.10-1.el10
libsmartcols-2.40.2-18.el10
libsmbclient-4.23.5-110.el10_2
libsolv-0.7.33-5.el10_2
libss-1.47.1-5.el10
libsss_certmap-2.12.0-3.el10_2.1
libsss_idmap-2.12.0-3.el10_2.1
libsss_nss_idmap-2.12.0-3.el10_2.1
libsss_sudo-2.12.0-3.el10_2.1
libstdc++-14.3.1-4.4.el10
libtalloc-2.4.3-100.el10
libtasn1-4.20.0-5.el10_2
libtdb-1.4.14-100.el10
libtevent-0.17.1-100.el10
libtirpc-1.3.5-1.el10
libtool-ltdl-2.4.7-13.el10
libunistring-1.1-10.el10
liburing-2.12-1.el10
libusb1-1.0.30-1.el10_2
libutempter-1.2.1-15.el10
libuuid-2.40.2-18.el10
libuv-1:1.52.1-1.el10_2
libverto-0.3.2-10.el10
libverto-libev-0.3.2-10.el10
libwbclient-4.23.5-110.el10_2
libxcrypt-4.4.36-10.el10
libxml2-2.12.5-10.el10_2.3
libxmlb-0.3.24-1.el10
libxslt-1.1.39-8.el10_2.1
libyaml-0.2.5-16.el10
libzstd-1.5.5-9.el10
linux-firmware-20260804-23.2.el10_2
linux-firmware-whence-20260804-23.2.el10_2
lldpad-1.1.1-4.gitf1dd9eb.el10
lmdb-libs-0.9.32-4.el10
logrotate-3.22.0-5.el10
lsof-4.98.0-7.el10
lua-libs-5.4.6-7.el10
luksmeta-10-1.el10
lvm2-10:2.03.36-2.el10
lvm2-libs-10:2.03.36-2.el10
lz4-libs-1.9.4-8.el10
lzo-2.10-14.el10
makedumpfile-1.7.8-1.el10
mdadm-4.4-3.el10_2.1
microcode_ctl-4:20260812-0.el10_2
mokutil-2:0.7.2-4.el10
mpdecimal-2.5.1-12.el10
mpfr-4.2.1-8.el10
nano-8.1-3.el10
ncurses-base-6.4-15.20240127.el10_1
ncurses-libs-6.4-15.20240127.el10_1
net-tools-2.0-0.73.20160912git.el10
netavark-2:1.17.2-1.el10
nettle-3.10.1-1.el10
newt-0.52.24-5.el10
nfs-utils-1:2.8.3-5.el10_2
nftables-1:1.1.5-6.el10_2
nmap-ncat-4:7.92-5.el10
nmstate-2.2.60-3.el10_2
npth-1.6-21.el10
nss-altfiles-2.23.0-6.el10
numactl-2.0.19-3.el10
numactl-libs-2.0.19-3.el10
numad-0.5-50.20251104git.el10
nvidia-gpu-firmware-20260804-23.2.el10_2
nvme-cli-2.16-2.el10
oniguruma-6.9.9-7.el10
open-vm-tools-13.0.10-1.el10
openldap-2.6.10-1.el10
openshift-clients-5.0.0-202609211906.p2.g4b0a124.assembly.stream.el10
openshift-kubelet-5.0.0-202609212354.p2.g4517836.assembly.stream.el10
openssh-9.9p1-27.el10_2
openssh-clients-9.9p1-27.el10_2
openssh-server-9.9p1-27.el10_2
openssl-1:3.5.8-1.el10_2
openssl-fips-provider-3.0.7-11.el10_2
openssl-fips-provider-so-3.0.7-11.el10_2
openssl-libs-1:3.5.8-1.el10_2
openvswitch-selinux-extra-policy-1.0-40.el10fdp
openvswitch3.5-3.5.2-63.el10fdp
os-prober-1.81-9.el10
ose-aws-ecr-image-credential-provider-5.0.0-202609211906.p2.g278e8c0.assembly.stream.el10
ose-azure-acr-image-credential-provider-5.0.0-202609151726.p2.g95f0a12.assembly.stream.el10
ose-crio-credential-provider-5.0.0-202609211906.p2.g83d4961.assembly.stream.el10
ose-gcp-gcr-image-credential-provider-5.0.0-202609211906.p2.g51c3264.assembly.stream.el10
ostree-2025.7-1.el10
ostree-grub2-2025.7-1.el10
ostree-libs-2025.7-1.el10
p11-kit-0.26.4-1.el10_2
p11-kit-trust-0.26.4-1.el10_2
pam-1.6.1-9.el10_2.1
pam-libs-1.6.1-9.el10_2.1
passt-0^20251210.gd04c480-6.el10_2
passt-selinux-0^20251210.gd04c480-6.el10_2
pciutils-3.13.0-6.el10
pciutils-libs-3.13.0-6.el10
pcre2-10.44-1.el10.3
pcre2-syntax-10.44-1.el10.3
pkgconf-2.1.0-3.el10
pkgconf-m4-2.1.0-3.el10
pkgconf-pkg-config-2.1.0-3.el10
podman-7:5.8.2-9.el10_2
podman-sequoia-0.4.0~pqc.3-1.el10_2
policycoreutils-3.10-2.el10_2
policycoreutils-python-utils-3.10-2.el10_2
polkit-125-4.el10_2.1
polkit-libs-125-4.el10_2.1
popt-1.19-8.el10
procps-ng-4.0.4-11.el10
protobuf-c-1.5.0-6.el10
psmisc-23.6-8.el10
python3-3.12.14-1.el10_2
python3-audit-4.0.3-5.el10
python3-charset-normalizer-3.4.2-1.el10
python3-cloud-what-1.30.12-1.el10
python3-dateutil-1:2.9.0.post0-1.el10_0
python3-dbus-1.3.2-8.el10
python3-decorator-5.1.1-12.el10
python3-distro-1.9.0-5.el10
python3-dnf-4.20.0-22.el10_2
python3-dnf-plugin-versionlock-4.7.0-10.el10
python3-dnf-plugins-core-4.7.0-10.el10
python3-file-magic-5.45-9.el10
python3-gobject-base-3.46.0-7.el10
python3-gobject-base-noarch-3.46.0-7.el10
python3-hawkey-0.73.1-15.el10_2
python3-idna-3.7-6.el10_2
python3-iniparse-0.5-10.el10
python3-inotify-0.9.6-36.el10
python3-libcomps-0.1.21-3.el10
python3-libdnf-0.73.1-15.el10_2
python3-librepo-1.19.0-1.el10
python3-libs-3.12.14-1.el10_2
python3-libselinux-3.10-1.el10
python3-libsemanage-3.10-1.el10
python3-packaging-24.2-2.el10
python3-pexpect-4.9.0-6.el10
python3-pip-wheel-23.3.2-11.el10_2
python3-policycoreutils-3.10-2.el10_2
python3-ptyprocess-0.7.0-9.el10
python3-pyyaml-6.0.1-19.el10
python3-requests-2.32.4-1.el10_0
python3-rpm-4.19.1.1-23.el10
python3-setools-4.6.0-3.el10
python3-setuptools-69.0.3-12.el10_0
python3-six-1.16.0-16.el10
python3-subscription-manager-rhsm-1.30.12-1.el10
python3-systemd-235-11.el10
python3-urllib3-1.26.19-4.el10_2
qemu-guest-agent-18:10.1.0-16.el10_2.5
quota-1:4.09-10.el10
quota-nls-1:4.09-10.el10
rdma-core-61.0-1.el10
readline-8.2-11.el10
redhat-release-10.2-21.el10
redhat-release-eula-10.2-21.el10
rpcbind-1.2.7-3.el10
rpm-4.19.1.1-23.el10
rpm-build-libs-4.19.1.1-23.el10
rpm-libs-4.19.1.1-23.el10
rpm-ostree-2026.2-2.el10_2
rpm-ostree-libs-2026.2-2.el10_2
rpm-plugin-selinux-4.19.1.1-23.el10
rpm-sequoia-1.10.1.1-2.el10
rpm-sign-libs-4.19.1.1-23.el10
rsync-3.5.0-3.el10_2
samba-client-libs-4.23.5-110.el10_2
samba-common-4.23.5-110.el10_2
samba-common-libs-4.23.5-110.el10_2
sed-4.9-5.el10
selinux-policy-42.1.18-4.el10_2.3
selinux-policy-targeted-42.1.18-4.el10_2.3
setup-2.14.5-7.el10
sg3_utils-1.48-7.el10_2.1
sg3_utils-libs-1.48-7.el10_2.1
shadow-utils-2:4.15.0-11.el10
shadow-utils-subid-2:4.15.0-11.el10
shared-mime-info-2.3-8.el10
shim-x64-16.1-4.el10
skopeo-2:1.22.2-5.el10_2
slang-2.3.3-8.el10
snappy-1.1.10-7.el10
socat-1.7.4.4-8.el10
sos-4.11.2-4.el10_2
sqlite-libs-3.46.1-6.el10_2
ssh-key-dir-0.1.4-9.el10
sssd-2.12.0-3.el10_2.1
sssd-ad-2.12.0-3.el10_2.1
sssd-client-2.12.0-3.el10_2.1
sssd-common-2.12.0-3.el10_2.1
sssd-common-pac-2.12.0-3.el10_2.1
sssd-ipa-2.12.0-3.el10_2.1
sssd-krb5-2.12.0-3.el10_2.1
sssd-krb5-common-2.12.0-3.el10_2.1
sssd-ldap-2.12.0-3.el10_2.1
sssd-nfs-idmap-2.12.0-3.el10_2.1
sssd-proxy-2.12.0-3.el10_2.1
stalld-1.26.3-1.el10
strace-6.12-3.el10
subscription-manager-1.30.12-1.el10
subscription-manager-rhsm-certificates-20220623-6.el10
sudo-1.9.17-10.p2.el10_2.6
systemd-257-23.el10_2.2
systemd-journal-remote-257-23.el10_2.2
systemd-libs-257-23.el10_2.2
systemd-pam-257-23.el10_2.2
systemd-udev-257-23.el10_2.2
tar-2:1.35-13.el10_2
tmux-3.3a-13.20230918gitb202a2f.el10
toolbox-0.3-2.el10_2
tpm2-tools-5.7-5.el10
tpm2-tss-4.1.3-6.el10
tpm2-tss-fapi-4.1.3-6.el10
tzdata-2026c-1.el10_2
unbound-anchor-1.24.2-7.el10_2.5
unbound-libs-1.24.2-7.el10_2.5
userspace-rcu-0.14.0-7.el10
util-linux-2.40.2-18.el10
util-linux-core-2.40.2-18.el10
vim-data-2:9.1.083-9.el10_2.20
vim-minimal-2:9.1.083-9.el10_2.20
virt-what-1.27-3.el10
which-2.21-44.el10_0
xfsprogs-6.16.0-1.el10
xmlsec1-1:1.2.39-3.el10
xmlsec1-openssl-1:1.2.39-3.el10
xz-1:5.6.2-4.el10_2.1
xz-libs-1:5.6.2-4.el10_2.1
zlib-ng-compat-2.2.3-3.el10_1
zram-generator-1.1.2-14.el10
zstd-1.5.5-9.el10

Changed:

amd-gpu-firmware 20260707-23.1.el10_2 → 20260804-23.2.el10_2
amd-ucode-firmware 20260707-23.1.el10_2 → 20260804-23.2.el10_2
attr 2.5.2-5.el10 → 2.6.0-1.el10_2
bind-libs 32:9.18.33-15.el10_2.2 → 32:9.18.33-15.el10_2.11
bind-license 32:9.18.33-15.el10_2.2 → 32:9.18.33-15.el10_2.11
bind-utils 32:9.18.33-15.el10_2.2 → 32:9.18.33-15.el10_2.11
bootc 1.15.2-1.el10_2 → 1.16.4-1.el10_2
bsdtar 3.7.7-8.el10_1 → 3.7.7-11.el10_2
cifs-utils 7.6-2.el10_2 → 7.7-1.el10_2
container-selinux 4:2.246.0-1.el10 → 4:2.248.0-1.el10_2
coreutils 9.5-8.el10_2 → 9.5-8.el10_2.1
coreutils-common 9.5-8.el10_2 → 9.5-8.el10_2.1
cri-o 1.36.2-5.rhaos5.0.git6aba8f0.el10 → 5.0.0-202609212354.p2.gee69985.assembly.stream.el10
criu 4.2-1.el10 → 4.2-2.el10_2
criu-libs 4.2-1.el10 → 4.2-2.el10_2
crypto-policies 20260216-1.git0e54016.el10 → 20260216-1.git0e54016.el10_2.2
crypto-policies-scripts 20260216-1.git0e54016.el10 → 20260216-1.git0e54016.el10_2.2
curl 8.12.1-4.el10 → 8.12.1-4.el10_2.6
dbus-broker 36-4.el10 → 36-5.el10_2
dnsmasq 2.90-7.el10_2 → 2.90-7.el10_2.1
dracut 107-8.el10_2 → 107-9.el10_2
dracut-network 107-8.el10_2 → 107-9.el10_2
dracut-squash 107-8.el10_2 → 107-9.el10_2
expat 2.7.3-1.el10_2.1 → 2.7.3-1.el10_2.3
firewalld-filesystem 2.4.3-2.el10_2 → 2.4.3-4.el10_2
glib2 2.80.4-12.el10_2.14 → 2.80.4-12.el10_2.22
gzip 1.13-3.el10 → 1.13-4.el10_2
intel-gpu-firmware 20260707-23.1.el10_2 → 20260804-23.2.el10_2
iptables-libs 1.8.11-15.el10_2 → 1.8.11-16.el10_2
iptables-nft 1.8.11-15.el10_2 → 1.8.11-16.el10_2
iscsi-initiator-utils 6.2.1.11-0.git4b3e853.el10 → 6.2.1.11-1.git4b3e853.el10_2.2
iscsi-initiator-utils-iscsiuio 6.2.1.11-0.git4b3e853.el10 → 6.2.1.11-1.git4b3e853.el10_2.2
isns-utils-libs 0.103-1.el10 → 0.103-1.el10_2.1
kbd 2.6.4-7.el10 → 2.6.4-8.el10_2
kbd-legacy 2.6.4-7.el10 → 2.6.4-8.el10_2
kbd-misc 2.6.4-7.el10 → 2.6.4-8.el10_2
kernel 6.12.0-211.45.1.el10_2 → 6.12.0-211.59.1.el10_2
kernel-core 6.12.0-211.45.1.el10_2 → 6.12.0-211.59.1.el10_2
kernel-modules 6.12.0-211.45.1.el10_2 → 6.12.0-211.59.1.el10_2
kernel-modules-core 6.12.0-211.45.1.el10_2 → 6.12.0-211.59.1.el10_2
kernel-modules-extra 6.12.0-211.45.1.el10_2 → 6.12.0-211.59.1.el10_2
libarchive 3.7.7-8.el10_1 → 3.7.7-11.el10_2
libattr 2.5.2-5.el10 → 2.6.0-1.el10_2
libcurl-minimal 8.12.1-4.el10 → 8.12.1-4.el10_2.6
libevent 2.1.12-16.el10 → 2.1.13-1.el10_2
libkcapi 1.5.0-3.el10 → 1.5.1-1.el10_2
libkcapi-hasher 1.5.0-3.el10 → 1.5.1-1.el10_2
libkcapi-hmaccalc 1.5.0-3.el10 → 1.5.1-1.el10_2
libldb 4.23.5-109.el10_2 → 4.23.5-110.el10_2
libnghttp2 1.68.0-3.el10_2.1 → 1.68.0-3.el10_2.2
libsmbclient 4.23.5-109.el10_2 → 4.23.5-110.el10_2
libwbclient 4.23.5-109.el10_2 → 4.23.5-110.el10_2
libxml2 2.12.5-10.el10_2.2 → 2.12.5-10.el10_2.3
linux-firmware 20260707-23.1.el10_2 → 20260804-23.2.el10_2
linux-firmware-whence 20260707-23.1.el10_2 → 20260804-23.2.el10_2
mdadm 4.4-3.el10_1 → 4.4-3.el10_2.1
microcode_ctl 4:20260512-1.1.el10_2 → 4:20260812-0.el10_2
nftables 1:1.1.5-5.el10_2 → 1:1.1.5-6.el10_2
nmstate 2.2.60-2.el10_2 → 2.2.60-3.el10_2
nvidia-gpu-firmware 20260707-23.1.el10_2 → 20260804-23.2.el10_2
openshift-clients 5.0.0-202608081440.p2.gd436a45.assembly.stream.el10 → 5.0.0-202609211906.p2.g4b0a124.assembly.stream.el10
openshift-kubelet 5.0.0-202607301230.p2.ge63ab41.assembly.stream.el10 → 5.0.0-202609212354.p2.g4517836.assembly.stream.el10
openssh 9.9p1-25.el10_2 → 9.9p1-27.el10_2
openssh-clients 9.9p1-25.el10_2 → 9.9p1-27.el10_2
openssh-server 9.9p1-25.el10_2 → 9.9p1-27.el10_2
openssl 1:3.5.5-6.el10_2 → 1:3.5.8-1.el10_2
openssl-libs 1:3.5.5-6.el10_2 → 1:3.5.8-1.el10_2
openvswitch-selinux-extra-policy 1.0-39.el10fdp → 1.0-40.el10fdp
ose-aws-ecr-image-credential-provider 5.0.0-202607281540.p2.g278e8c0.assembly.stream.el10 → 5.0.0-202609211906.p2.g278e8c0.assembly.stream.el10
ose-azure-acr-image-credential-provider 5.0.0-202608060825.p2.gb99e4ce.assembly.stream.el10 → 5.0.0-202609151726.p2.g95f0a12.assembly.stream.el10
ose-crio-credential-provider 5.0.0-202603041733.p2.g83d4961.assembly.stream.el10 → 5.0.0-202609211906.p2.g83d4961.assembly.stream.el10
ose-gcp-gcr-image-credential-provider 5.0.0-202608040132.p2.g51c3264.assembly.stream.el10 → 5.0.0-202609211906.p2.g51c3264.assembly.stream.el10
pam 1.6.1-9.el10 → 1.6.1-9.el10_2.1
pam-libs 1.6.1-9.el10 → 1.6.1-9.el10_2.1
podman 7:5.8.2-5.el10_2 → 7:5.8.2-9.el10_2
polkit 125-4.el10 → 125-4.el10_2.1
polkit-libs 125-4.el10 → 125-4.el10_2.1
python3 3.12.13-2.el10_2.1 → 3.12.14-1.el10_2
python3-idna 3.7-4.el10 → 3.7-6.el10_2
python3-libs 3.12.13-2.el10_2.1 → 3.12.14-1.el10_2
qemu-guest-agent 18:10.1.0-16.el10_2.2 → 18:10.1.0-16.el10_2.5
rpm-ostree 2026.1-5.el10_2 → 2026.2-2.el10_2
rpm-ostree-libs 2026.1-5.el10_2 → 2026.2-2.el10_2
rsync 3.4.4-1.el10_2 → 3.5.0-3.el10_2
samba-client-libs 4.23.5-109.el10_2 → 4.23.5-110.el10_2
samba-common 4.23.5-109.el10_2 → 4.23.5-110.el10_2
samba-common-libs 4.23.5-109.el10_2 → 4.23.5-110.el10_2
selinux-policy 42.1.18-4.el10_2.2 → 42.1.18-4.el10_2.3
selinux-policy-targeted 42.1.18-4.el10_2.2 → 42.1.18-4.el10_2.3
skopeo 2:1.22.2-2.el10_2 → 2:1.22.2-5.el10_2
sos 4.11.0-1.el10_2 → 4.11.2-4.el10_2
sqlite-libs 3.46.1-5.el10_1 → 3.46.1-6.el10_2
sudo 1.9.17-4.p2.el10_2 → 1.9.17-10.p2.el10_2.6
tar 2:1.35-11.el10 → 2:1.35-13.el10_2
unbound-anchor 1.24.2-7.el10_2.2 → 1.24.2-7.el10_2.5
unbound-libs 1.24.2-7.el10_2.2 → 1.24.2-7.el10_2.5
vim-data 2:9.1.083-9.el10_2.12 → 2:9.1.083-9.el10_2.20
vim-minimal 2:9.1.083-9.el10_2.12 → 2:9.1.083-9.el10_2.20
xz 1:5.6.2-4.el10_0 → 1:5.6.2-4.el10_2.1
xz-libs 1:5.6.2-4.el10_0 → 1:5.6.2-4.el10_2.1

Extensions

Full list (214 packages)

NetworkManager-libreswan-1.2.30-1.el10.x86_64
bc-1.07.1-23.el10.x86_64
binutils-2.41-63.el10.x86_64
binutils-gold-2.41-63.el10.x86_64
bison-3.8.2-9.el10.x86_64
capstone-5.0.1-8.el10_2.x86_64
cmake-filesystem-3.31.8-1.el10.x86_64
corosync-3.1.10-1.el10_2.2.x86_64
corosynclib-3.1.10-1.el10_2.2.x86_64
cpp-14.3.1-4.4.el10.x86_64
edk2-ovmf-20251114-5.el10_2.2.noarch
elfutils-debuginfod-client-0.194-2.el10_2.x86_64
elfutils-libelf-devel-0.194-2.el10_2.x86_64
fence-agents-all-4.16.0-21.el10_2.6.x86_64
fence-agents-amt-ws-4.16.0-21.el10_2.6.noarch
fence-agents-apc-4.16.0-21.el10_2.6.noarch
fence-agents-apc-snmp-4.16.0-21.el10_2.6.noarch
fence-agents-bladecenter-4.16.0-21.el10_2.6.noarch
fence-agents-brocade-4.16.0-21.el10_2.6.noarch
fence-agents-cisco-mds-4.16.0-21.el10_2.6.noarch
fence-agents-cisco-ucs-4.16.0-21.el10_2.6.noarch
fence-agents-common-4.16.0-21.el10_2.6.x86_64
fence-agents-drac5-4.16.0-21.el10_2.6.noarch
fence-agents-eaton-snmp-4.16.0-21.el10_2.6.noarch
fence-agents-emerson-4.16.0-21.el10_2.6.noarch
fence-agents-eps-4.16.0-21.el10_2.6.noarch
fence-agents-heuristics-ping-4.16.0-21.el10_2.6.noarch
fence-agents-hpblade-4.16.0-21.el10_2.6.noarch
fence-agents-ibmblade-4.16.0-21.el10_2.6.noarch
fence-agents-ifmib-4.16.0-21.el10_2.6.noarch
fence-agents-ilo-moonshot-4.16.0-21.el10_2.6.noarch
fence-agents-ilo-mp-4.16.0-21.el10_2.6.noarch
fence-agents-ilo-ssh-4.16.0-21.el10_2.6.noarch
fence-agents-ilo2-4.16.0-21.el10_2.6.noarch
fence-agents-intelmodular-4.16.0-21.el10_2.6.noarch
fence-agents-ipdu-4.16.0-21.el10_2.6.noarch
fence-agents-ipmilan-4.16.0-21.el10_2.6.noarch
fence-agents-kdump-4.16.0-21.el10_2.6.x86_64
fence-agents-mpath-4.16.0-21.el10_2.6.noarch
fence-agents-redfish-4.16.0-21.el10_2.6.x86_64
fence-agents-rhevm-4.16.0-21.el10_2.6.noarch
fence-agents-rsa-4.16.0-21.el10_2.6.noarch
fence-agents-rsb-4.16.0-21.el10_2.6.noarch
fence-agents-sbd-4.16.0-21.el10_2.6.noarch
fence-agents-scsi-4.16.0-21.el10_2.6.noarch
fence-agents-vmware-rest-4.16.0-21.el10_2.6.noarch
fence-agents-vmware-soap-4.16.0-21.el10_2.6.noarch
fence-agents-wti-4.16.0-21.el10_2.6.noarch
fence-virt-4.16.0-21.el10_2.6.x86_64
flex-2.6.4-19.el10.x86_64
gcc-14.3.1-4.4.el10.x86_64
glibc-devel-2.39-128.el10_2.x86_64
gnutls-dane-3.8.10-4.el10_2.x86_64
gnutls-utils-3.8.10-4.el10_2.x86_64
groff-base-1.23.0-10.el10.x86_64
ipmitool-1.8.19-10.el10_1.x86_64
ipxe-roms-qemu-20240119-5.gitde8a0821.el10.noarch
kata-containers-3.31.0-5.rhaos4.22.el10.x86_64
kernel-6.12.0-211.59.1.el10_2.x86_64
kernel-core-6.12.0-211.59.1.el10_2.x86_64
kernel-devel-6.12.0-211.59.1.el10_2.x86_64
kernel-headers-6.12.0-211.59.1.el10_2.x86_64
kernel-modules-6.12.0-211.59.1.el10_2.x86_64
kernel-modules-core-6.12.0-211.59.1.el10_2.x86_64
kernel-modules-extra-6.12.0-211.59.1.el10_2.x86_64
kernel-rt-core-6.12.0-211.59.1.el10_2.x86_64
kernel-rt-devel-6.12.0-211.59.1.el10_2.x86_64
kernel-rt-modules-6.12.0-211.59.1.el10_2.x86_64
kernel-rt-modules-core-6.12.0-211.59.1.el10_2.x86_64
kernel-rt-modules-extra-6.12.0-211.59.1.el10_2.x86_64
krb5-pkinit-1.21.3-10.el10_2.x86_64
krb5-workstation-1.21.3-10.el10_2.x86_64
ldns-1.8.3-18.el10_2.1.x86_64
libfdt-1.7.0-12.el10.x86_64
libkadm5-1.21.3-10.el10_2.x86_64
libknet1-1.30-1.el10.x86_64
libknet1-compress-bzip2-plugin-1.30-1.el10.x86_64
libknet1-compress-lz4-plugin-1.30-1.el10.x86_64
libknet1-compress-lzma-plugin-1.30-1.el10.x86_64
libknet1-compress-lzo2-plugin-1.30-1.el10.x86_64
libknet1-compress-plugins-all-1.30-1.el10.x86_64
libknet1-compress-zlib-plugin-1.30-1.el10.x86_64
libknet1-compress-zstd-plugin-1.30-1.el10.x86_64
libknet1-crypto-nss-plugin-1.30-1.el10.x86_64
libknet1-crypto-openssl-plugin-1.30-1.el10.x86_64
libknet1-crypto-plugins-all-1.30-1.el10.x86_64
libknet1-plugins-all-1.30-1.el10.x86_64
libmpc-1.3.1-7.el10.x86_64
libnozzle1-1.30-1.el10.x86_64
libpng-2:1.6.40-11.el10_2.1.x86_64
libqb-2.0.8-6.el10.x86_64
libreswan-5.3.2-1.el10_2.x86_64
libreswan-minimal-5.3.2-1.el10_2.x86_64
libslirp-4.7.0-10.el10.x86_64
libwsman1-2.8.1-3.el10.x86_64
libxcrypt-devel-4.4.36-10.el10.x86_64
libzstd-devel-1.5.5-9.el10.x86_64
lm_sensors-libs-3.6.0-20.el10.x86_64
m4-1.4.19-11.el10.x86_64
make-1:4.4.1-9.el10.x86_64
ncurses-6.4-15.20240127.el10_1.x86_64
net-snmp-libs-1:5.9.4-19.el10.x86_64
net-snmp-utils-1:5.9.4-19.el10.x86_64
nspr-4.39.0-5.el10_0.x86_64
nss-3.124.0-5.el10_0.x86_64
nss-softokn-3.124.0-5.el10_0.x86_64
nss-softokn-freebl-3.124.0-5.el10_0.x86_64
nss-sysinit-3.124.0-5.el10_0.x86_64
nss-tools-3.124.0-5.el10_0.x86_64
nss-util-3.124.0-5.el10_0.x86_64
openssl-devel-1:3.5.8-1.el10_2.x86_64
openvswitch3.5-ipsec-3.5.2-63.el10fdp.x86_64
openwsman-python3-2.8.1-3.el10.x86_64
pacemaker-3.0.1-5.el10_2.1.x86_64
pacemaker-cli-3.0.1-5.el10_2.1.x86_64
pacemaker-cluster-libs-3.0.1-5.el10_2.1.x86_64
pacemaker-libs-3.0.1-5.el10_2.1.x86_64
pacemaker-schemas-3.0.1-5.el10_2.1.noarch
pcp-conf-7.0.3-5.el10_2.x86_64
pcp-libs-7.0.3-5.el10_2.x86_64
pcs-0.12.2-3.el10_2.1.x86_64
perl-AutoLoader-5.74-515.el10_2.noarch
perl-B-1.89-515.el10_2.x86_64
perl-Carp-1.54-511.el10.noarch
perl-Class-Struct-0.68-515.el10_2.noarch
perl-Data-Dumper-2.189-512.el10.x86_64
perl-Digest-1.20-511.el10.noarch
perl-Digest-MD5-2.59-6.el10.x86_64
perl-DynaLoader-1.56-515.el10_2.x86_64
perl-Encode-4:3.21-511.el10.x86_64
perl-Errno-1.38-515.el10_2.x86_64
perl-Exporter-5.78-511.el10.noarch
perl-Fcntl-1.18-515.el10_2.x86_64
perl-File-Basename-2.86-515.el10_2.noarch
perl-File-Path-2.18-512.el10.noarch
perl-File-Temp-1:0.231.100-512.el10.noarch
perl-File-stat-1.14-515.el10_2.noarch
perl-FileHandle-2.05-515.el10_2.noarch
perl-Getopt-Long-1:2.58-3.el10.noarch
perl-Getopt-Std-1.14-515.el10_2.noarch
perl-HTTP-Tiny-0.088-512.el10.noarch
perl-IO-1.55-515.el10_2.x86_64
perl-IO-Socket-IP-0.42-512.el10.noarch
perl-IO-Socket-SSL-2.085-3.el10.noarch
perl-IPC-Open3-1.22-515.el10_2.noarch
perl-MIME-Base64-3.16-511.el10.x86_64
perl-Mozilla-CA-20231213-5.el10.noarch
perl-NDBM_File-1.17-515.el10_2.x86_64
perl-Net-SSLeay-1.94-8.el10.x86_64
perl-POSIX-2.20-515.el10_2.x86_64
perl-PathTools-3.91-512.el10.x86_64
perl-Pod-Escapes-1:1.07-511.el10.noarch
perl-Pod-Perldoc-3.28.01-512.el10.noarch
perl-Pod-Simple-1:3.45-511.el10.noarch
perl-Pod-Usage-4:2.03-511.el10.noarch
perl-Scalar-List-Utils-5:1.63-511.el10.x86_64
perl-SelectSaver-1.02-515.el10_2.noarch
perl-Socket-4:2.038-511.el10.x86_64
perl-Storable-1:3.32-511.el10.x86_64
perl-Symbol-1.09-515.el10_2.noarch
perl-Term-ANSIColor-5.01-512.el10.noarch
perl-Term-Cap-1.18-511.el10.noarch
perl-Text-ParseWords-3.31-511.el10.noarch
perl-Text-Tabs+Wrap-2024.001-511.el10.noarch
perl-Time-Local-2:1.350-511.el10.noarch
perl-TimeDate-1:2.33-16.el10.noarch
perl-URI-5.27-3.el10.noarch
perl-base-2.27-515.el10_2.noarch
perl-constant-1.33-512.el10.noarch
perl-if-0.61.000-515.el10_2.noarch
perl-interpreter-4:5.40.2-515.el10_2.x86_64
perl-libnet-3.15-512.el10.noarch
perl-libs-4:5.40.2-515.el10_2.x86_64
perl-locale-1.12-515.el10_2.noarch
perl-mro-1.29-515.el10_2.x86_64
perl-overload-1.37-515.el10_2.noarch
perl-overloading-0.02-515.el10_2.noarch
perl-parent-1:0.241-512.el10.noarch
perl-podlators-1:5.01-511.el10.noarch
perl-vars-1.05-515.el10_2.noarch
pixman-0.43.4-2.el10.x86_64
protobuf-3.19.6-15.el10_1.x86_64
python3-cffi-1.16.0-7.el10.x86_64
python3-cryptography-43.0.0-4.el10.x86_64
python3-lxml-5.2.1-4.el10.x86_64
python3-openvswitch3.5-3.5.2-63.el10fdp.x86_64
python3-ply-3.11-25.el10.noarch
python3-pycparser-2.20-16.el10.noarch
python3-pyparsing-3.1.1-7.el10.noarch
python3-tornado-6.5.8-0.el10_2.1.x86_64
qemu-img-18:10.1.0-16.el10_2.5.x86_64
qemu-kvm-common-18:10.1.0-16.el10_2.5.x86_64
qemu-kvm-core-18:10.1.0-16.el10_2.5.x86_64
resource-agents-4.16.0-53.el10_2.9.x86_64
ruby-3.3.12-14.el10_2.x86_64
ruby-default-gems-3.3.12-14.el10_2.noarch
ruby-libs-3.3.12-14.el10_2.x86_64
rubygem-bigdecimal-3.1.5-14.el10_2.x86_64
rubygem-bundler-2.5.22-14.el10_2.noarch
rubygem-io-console-0.7.1-14.el10_2.x86_64
rubygem-json-2.7.2-14.el10_2.x86_64
rubygem-psych-5.1.2-14.el10_2.x86_64
rubygem-rdoc-6.6.3.1-14.el10_2.noarch
rubygem-rexml-3.4.4-14.el10_2.noarch
rubygems-3.5.22-14.el10_2.noarch
sbd-1.5.2-1.el10.5.x86_64
seabios-bin-1.17.0-1.el10.noarch
seavgabios-bin-1.17.0-1.el10.noarch
sysstat-12.7.6-4.el10.x86_64
telnet-1:0.17-94.el10.x86_64
usbguard-1.1.4-2.el10.x86_64
usbguard-selinux-1.1.4-2.el10.noarch
virtiofsd-1.13.3-1.el10.x86_64
zlib-ng-compat-devel-2.2.3-3.el10_1.x86_64

Red Hat Enterprise Linux CoreOS base layer: 10.2.20260923-1

OCPBUGS-126621: Select bundled CoreOS base layer: version when COREOS_VERSION is unset #116

OKD-429: Fix OKD/SCOS builds to use centos CoreOS base layer: streams #109

View changelog in Markdown or change previous release:

Source code for this page located on github

5.1.0-0.nightly-multi-2026-09-23-215753

Changes from 5.1.0-0.nightly-multi-2026-08-10-113053

Components

FeatureGate Changes

New images

Rebuilt images without code change

Node Image Info

Red Hat Enterprise Linux CoreOS 9.8 (rhel-coreos)

Package List

Changed:

Extensions

Red Hat Enterprise Linux CoreOS 10.2 (rhel-coreos-10)

Package List

Changed:

Extensions

Red Hat Enterprise Linux CoreOS 9.8 (`rhel-coreos`)

Red Hat Enterprise Linux CoreOS 10.2 (`rhel-coreos-10`)