# 4.18.0-okd-scos.4

Created: 2025-03-15 02:37:21 +0000 UTC

Image Digest: `sha256:1fd37714fc0216d5f40197f841f2083df9d1008ae64567cbc50d5c761fb6de80`

Promoted from registry.ci.openshift.org/origin/release-scos:4.18.0-0.okd-scos-2025-03-14-073703


## Changes from 4.18.0-okd-scos.2

### Components

* Kubectl 1.31.1
* Kubernetes 1.31.6
* Kubernetes Tests upgraded from 1.31.1 to 1.31.6
* CentOS Stream CoreOS upgraded from 418.9.202502240632-0 to 418.9.202503140633-0


### Removed images

* ovirt-machine-controllers


### Rebuilt images without code change

* stream-coreos `sha256:073b0d42818f032b1aa55b1f41598634eaf3bb72e3f34848331aadeccccaa04d`
* stream-coreos-extensions `sha256:950b469535fae344ce30a018291173190d95a8bb840df79f1ea89b15da00d963`


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/8bb42ac9fd9624f86c97c4422bd5f982251e5d91)

* [OCPBUGS-45116](https://issues.redhat.com/browse/OCPBUGS-45116): Add retry to mount efi device (#1030) [#1030](https://github.com/openshift/assisted-installer/pull/1030)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/5348c85cd03dddf1852873c6bb2f08aff3b0630e...8bb42ac9fd9624f86c97c4422bd5f982251e5d91)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/593c9c284e43fd00095cfdf3f55b9017f4104663)

* NO-ISSUE: Increase image pull timeout during install (#907) [#907](https://github.com/openshift/assisted-installer-agent/pull/907)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/51a74acb3f2e56bbeb1ffbe33cb3c5cf808a2512...593c9c284e43fd00095cfdf3f55b9017f4104663)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/b3446080be1c2898ee039030c346020fa6c1ed13)

* [OCPBUGS-50556](https://issues.redhat.com/browse/OCPBUGS-50556): UPSTREAM: 5339: Bump glog for recent fixes [#537](https://github.com/openshift/cluster-api-provider-aws/pull/537)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/6bd77fcce0c87571305edf5f1f28f1182ed25096...b3446080be1c2898ee039030c346020fa6c1ed13)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/a95f8b365dda90ca1cb9d85a13c84670f6200cff)

* [OCPBUGS-49843](https://issues.redhat.com/browse/OCPBUGS-49843): Support HCP labels [#356](https://github.com/openshift/csi-operator/pull/356)
* [Full changelog](https://github.com/openshift/csi-operator/compare/9432fd3e2cb63bc282f2d0b1ac8ab8f6691b49ab...a95f8b365dda90ca1cb9d85a13c84670f6200cff)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/f54f9a19adb43b395a880ca046aed0841466c28d)

* [OCPBUGS-51231](https://issues.redhat.com/browse/OCPBUGS-51231): github.com/go-jose/go-jose/v4 v4.0.5 [#201](https://github.com/openshift/aws-pod-identity-webhook/pull/201)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/5c43fe8e6c86c24f467070a8e5965a83c24f4360...f54f9a19adb43b395a880ca046aed0841466c28d)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/50deebb4a117c2309b38f96551d0278409437dd6)

* [OCPBUGS-49885](https://issues.redhat.com/browse/OCPBUGS-49885): [Nutanix] Install multi-NICs cluster failed with failureDomains [#9440](https://github.com/openshift/installer/pull/9440)
* [OCPBUGS-50524](https://issues.redhat.com/browse/OCPBUGS-50524): Add cluster:master_nodes metric retrieval in docs [#9449](https://github.com/openshift/installer/pull/9449)
* [OCPBUGS-49864](https://issues.redhat.com/browse/OCPBUGS-49864): handle runtime panic when validating ovnKubernetesConfig [#9435](https://github.com/openshift/installer/pull/9435)
* [OCPBUGS-49320](https://issues.redhat.com/browse/OCPBUGS-49320): pkg/gcp/destroy: add waits to prevent leaks during heavy load [#9402](https://github.com/openshift/installer/pull/9402)
* [Full changelog](https://github.com/openshift/installer/compare/7d116b776c9b4a7b3906fdf79e7b68a45516994a...50deebb4a117c2309b38f96551d0278409437dd6)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/20646c92b5f1c2a7b49fe12effee0b3c74df8058)

* [OCPBUGS-45250](https://issues.redhat.com/browse/OCPBUGS-45250): Remove dataImage finalizer if BMH is missing [#389](https://github.com/openshift/baremetal-operator/pull/389)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/3d9304e76903b639b6d06e3b00d655e1ad5dbb9b...20646c92b5f1c2a7b49fe12effee0b3c74df8058)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/eb9bc9b02fc27a48cceccc0140fc3f8ee1414c64)

* [OCPBUGS-49440](https://issues.redhat.com/browse/OCPBUGS-49440): Address `golang.org/x/*` CVEs [#1961](https://github.com/openshift/oc/pull/1961)
* [Full changelog](https://github.com/openshift/oc/compare/a50d4c0e41a6eff7aafe21dbe564359a0b622bb1...eb9bc9b02fc27a48cceccc0140fc3f8ee1414c64)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/0152c3a444e1f459b4063056b3470bb3d2895d8d)

* [OCPBUGS-51237](https://issues.redhat.com/browse/OCPBUGS-51237): github.com/go-jose/go-jose/v4 v4.0.5 [#824](https://github.com/openshift/cloud-credential-operator/pull/824)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/020f8b841abf6284642cd182d95611b79c2f3a19...0152c3a444e1f459b4063056b3470bb3d2895d8d)


### [cluster-config-api](https://github.com/openshift/api/tree/e7f23be12279d3c245c013c234f967e5ccb426e2)

* [OCPBUGS-51295](https://issues.redhat.com/browse/OCPBUGS-51295), [OCPBUGS-51380](https://issues.redhat.com/browse/OCPBUGS-51380): Reject new NodeStatus with revision set [#2215](https://github.com/openshift/api/pull/2215)
* [OCPBUGS-51295](https://issues.redhat.com/browse/OCPBUGS-51295): [release-4.18] Add the option to test ratcheting validations within integration tests [#2217](https://github.com/openshift/api/pull/2217)
* [OCPBUGS-51077](https://issues.redhat.com/browse/OCPBUGS-51077): [4.18] bump controller-tools dependency to latest downstream commit [#2210](https://github.com/openshift/api/pull/2210)
* [Full changelog](https://github.com/openshift/api/compare/3175f3026f905a311fa0a462afce2393c42d7f87...e7f23be12279d3c245c013c234f967e5ccb426e2)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/7cafd0c7dca2edb154b8444602b600b5901afeba)

* [OCPBUGS-52514](https://issues.redhat.com/browse/OCPBUGS-52514): [release-4.18] Add runbook_url for CoreDNSErrorsHigh [#429](https://github.com/openshift/cluster-dns-operator/pull/429)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/208d50c1a5e0aaeb991366daa749abdffa803224...7cafd0c7dca2edb154b8444602b600b5901afeba)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/a730e8a7af570d3921cd44c1468f38a250a6e647)

* [OCPBUGS-48377](https://issues.redhat.com/browse/OCPBUGS-48377): Add e2e tests for IdleConnectionTerminationPolicy [#1194](https://github.com/openshift/cluster-ingress-operator/pull/1194)
* [OCPBUGS-48377](https://issues.redhat.com/browse/OCPBUGS-48377): Add support for IdleConnectionTerminationPolicy [#1188](https://github.com/openshift/cluster-ingress-operator/pull/1188)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/8be174945db79b0660bd0fd21ed279ab7b6aafbf...a730e8a7af570d3921cd44c1468f38a250a6e647)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/087c72f1e261fb7c42fe6fc5d73a1f70d3c76d2f)

* [OCPBUGS-46411](https://issues.redhat.com/browse/OCPBUGS-46411): skip generating certs when networkConfig.status.ServiceNetwork is nil [#1780](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1780)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/763313c860ea43fcfc9b1ac00ebae096b57c078e...087c72f1e261fb7c42fe6fc5d73a1f70d3c76d2f)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/efa77395b69d0916bbf9a756e52f60a9b9d655d5)

* [OCPBUGS-52565](https://issues.redhat.com/browse/OCPBUGS-52565): Bump prometheus-operator to 0.78.2 [#2576](https://github.com/openshift/cluster-monitoring-operator/pull/2576)
* [OCPBUGS-50706](https://issues.redhat.com/browse/OCPBUGS-50706): Add incidents metric to telemetry [#2570](https://github.com/openshift/cluster-monitoring-operator/pull/2570)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/9852f98d559a7153213164e3518ffd6576b47b87...efa77395b69d0916bbf9a756e52f60a9b9d655d5)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/5d380cb3a88d78ac5c6f3d8dd8188d06ac6da1b4)

* [OCPBUGS-48305](https://issues.redhat.com/browse/OCPBUGS-48305): frr-k8s: align manifests with operator [#2657](https://github.com/openshift/cluster-network-operator/pull/2657)
* [OCPBUGS-41178](https://issues.redhat.com/browse/OCPBUGS-41178): Updating cluster-network-operator-container image to be consistent with ART for 4.18 [#2491](https://github.com/openshift/cluster-network-operator/pull/2491)
* [OCPBUGS-50625](https://issues.redhat.com/browse/OCPBUGS-50625): Cherry-pick RouteAdvertisements support back to 4.18 [#2645](https://github.com/openshift/cluster-network-operator/pull/2645)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/b48488a6ee4c9e1ae778217817266baddd5f3e51...5d380cb3a88d78ac5c6f3d8dd8188d06ac6da1b4)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/c004ea7ea486e983d296311ca2b40cc9a431c394)

* [OCPBUGS-52352](https://issues.redhat.com/browse/OCPBUGS-52352): Treat all aarch64 platforms as equals in tuned (#1303) (#1306) [#1303](https://github.com/openshift/cluster-node-tuning-operator/pull/1303)
* machineconfig: add support for various hugepage sizes. (#1299) [#1299](https://github.com/openshift/cluster-node-tuning-operator/pull/1299)
* [OCPBUGS-51088](https://issues.redhat.com/browse/OCPBUGS-51088): E2E: Add configuration tests related to align cpus by uncorecache feature (#1298) [#1298](https://github.com/openshift/cluster-node-tuning-operator/pull/1298)
* e2e: common way to fetch poolName (#1255) (#1300) [#1255](https://github.com/openshift/cluster-node-tuning-operator/pull/1255)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/b707be66f55efc54a9b348cd7f4b5fdcf5a58679...c004ea7ea486e983d296311ca2b40cc9a431c394)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/65d06444110f8044a84ccf4f977ee9520f2bdf89)

* [OCPBUGS-51320](https://issues.redhat.com/browse/OCPBUGS-51320): fix Vsphere cluster Storage operator in Unavailable state [#558](https://github.com/openshift/cluster-storage-operator/pull/558)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/d5869b21eee0acc5d734d92fa283b737b9e90b83...65d06444110f8044a84ccf4f977ee9520f2bdf89)


### [console](https://github.com/openshift/console/tree/15cc829fa8f9c42c6d25f5fbe5e4fb11ea519093)

* [OCPBUGS-52371](https://issues.redhat.com/browse/OCPBUGS-52371): Update the monitoring topic used by the console team [#14832](https://github.com/openshift/console/pull/14832)
* [OCPBUGS-52490](https://issues.redhat.com/browse/OCPBUGS-52490): enable clicking outside NodeLogs Selects to close them [#14843](https://github.com/openshift/console/pull/14843)
* [OCPBUGS-50501](https://issues.redhat.com/browse/OCPBUGS-50501): Updating cypress config to have video enabled for the CI results [#14831](https://github.com/openshift/console/pull/14831)
* [OCPBUGS-52511](https://issues.redhat.com/browse/OCPBUGS-52511): Remove logoutOpenShift method call [#14845](https://github.com/openshift/console/pull/14845)
* [OCPBUGS-50609](https://issues.redhat.com/browse/OCPBUGS-50609): update the Deployment pod on change in imageStream [#14757](https://github.com/openshift/console/pull/14757)
* [OCPBUGS-50648](https://issues.redhat.com/browse/OCPBUGS-50648): add support for "OpenShift Virtualization Engine" valid subscription filter on OperatorHub [#14761](https://github.com/openshift/console/pull/14761)
* [OCPBUGS-51086](https://issues.redhat.com/browse/OCPBUGS-51086): Show Observe section without PROMETHEUS and MONITORING flags [#14784](https://github.com/openshift/console/pull/14784)
* [OCPBUGS-48798](https://issues.redhat.com/browse/OCPBUGS-48798): Pipeline visualisation shows all tasks as Failed and after that goes to Running state [#14698](https://github.com/openshift/console/pull/14698)
* [OCPBUGS-51180](https://issues.redhat.com/browse/OCPBUGS-51180): Linkify OLM operator uninstall message [#14789](https://github.com/openshift/console/pull/14789)
* [OCPBUGS-51149](https://issues.redhat.com/browse/OCPBUGS-51149): Do not load CSRs if user does not have permissions [#14787](https://github.com/openshift/console/pull/14787)
* [OCPBUGS-50647](https://issues.redhat.com/browse/OCPBUGS-50647): Enable web terminal tests [#14758](https://github.com/openshift/console/pull/14758)
* [OCPBUGS-50573](https://issues.redhat.com/browse/OCPBUGS-50573): Render refresh popover after adding CSP directive to the ConsolePlugin CR [#14755](https://github.com/openshift/console/pull/14755)
* [OCPBUGS-49867](https://issues.redhat.com/browse/OCPBUGS-49867): Add support for conditional CSP headers [#14720](https://github.com/openshift/console/pull/14720)
* [OCPBUGS-48736](https://issues.redhat.com/browse/OCPBUGS-48736): update variable name for plugin name parsing [#14696](https://github.com/openshift/console/pull/14696)
* [OCPBUGS-49921](https://issues.redhat.com/browse/OCPBUGS-49921): fix run time error when no completed version exists [#14743](https://github.com/openshift/console/pull/14743)
* [Full changelog](https://github.com/openshift/console/compare/24ccf7adbe24e9327b5d7d18ccb273d95e943616...15cc829fa8f9c42c6d25f5fbe5e4fb11ea519093)


### [console-operator](https://github.com/openshift/console-operator/tree/10a0cc293e61b8125ebec8c9c98ede22a0824d06)

* [OCPBUGS-52294](https://issues.redhat.com/browse/OCPBUGS-52294): Custom route TLS should be optional when IngressController's DefaultCertificate is set [#966](https://github.com/openshift/console-operator/pull/966)
* [OCPBUGS-49867](https://issues.redhat.com/browse/OCPBUGS-49867): Add ConsolePluginContentSecurityPolicy feature gate to… [#959](https://github.com/openshift/console-operator/pull/959)
* [Full changelog](https://github.com/openshift/console-operator/compare/18590a15d7ba5447b10be371681424e09ccacdf8...10a0cc293e61b8125ebec8c9c98ede22a0824d06)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/b52ca7e89560678f3420aac02cfdb11febcfae67)

* [OCPBUGS-43430](https://issues.redhat.com/browse/OCPBUGS-43430): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into release-4.18 [#312](https://github.com/openshift/cloud-provider-openstack/pull/312)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/90891d4634af0fe61393de5ad5b448eb5d070f48...b52ca7e89560678f3420aac02cfdb11febcfae67)


### [docker-builder](https://github.com/openshift/builder/tree/6a5ec2a8c8e6cf0d348bee762706c0e24d5517d8)

* [OCPBUGS-46580](https://issues.redhat.com/browse/OCPBUGS-46580): buildah dependency bump to 1.37.6 [#453](https://github.com/openshift/builder/pull/453)
* [Full changelog](https://github.com/openshift/builder/compare/336d783e6fb6d10c32b4e386523325751c33b3ee...6a5ec2a8c8e6cf0d348bee762706c0e24d5517d8)


### [etcd, installer-etcd-artifacts](https://github.com/openshift/etcd/tree/98b19154718fd94d4e8ad30824c00ba1de87cb78)

* DOWNSTREAM: <carry>: OCPBUGS-51971: fix a compaction induce latency issue [#312](https://github.com/openshift/etcd/pull/312)
* [ETCD-708](https://issues.redhat.com/browse/ETCD-708): Rebase etcd 3.5.18 openshift 4.18 [#307](https://github.com/openshift/etcd/pull/307)
* [Full changelog](https://github.com/openshift/etcd/compare/914783cae63a13b90971c65e28c3349c1ecb7dfb...98b19154718fd94d4e8ad30824c00ba1de87cb78)


### [haproxy-router](https://github.com/openshift/router/tree/d8058949aaf91dcdea050c58e6a34ef5f6670c67)

* [OCPBUGS-48377](https://issues.redhat.com/browse/OCPBUGS-48377): Add support for IdleCloseTerminationPolicy [#647](https://github.com/openshift/router/pull/647)
* [OCPBUGS-49389](https://issues.redhat.com/browse/OCPBUGS-49389): Reject All CA-Signed Certs Using SHA1 [#649](https://github.com/openshift/router/pull/649)
* [Full changelog](https://github.com/openshift/router/compare/061909a4c397c048e6def163fda5d227c75f176b...d8058949aaf91dcdea050c58e6a34ef5f6670c67)


### [hypershift](https://github.com/openshift/hypershift/tree/77952bed2c91d448705d775a0dbd99c77cdde4f4)

* [OCPBUGS-52863](https://issues.redhat.com/browse/OCPBUGS-52863): stop using dev mode for loggers [#5811](https://github.com/openshift/hypershift/pull/5811)
* [OCPBUGS-52878](https://issues.redhat.com/browse/OCPBUGS-52878): Kubernetes API Server apply-bootstrap container does not respect SIGTERM [#5780](https://github.com/openshift/hypershift/pull/5780)
* [OCPBUGS-52516](https://issues.redhat.com/browse/OCPBUGS-52516): Make managed-trust-bundle optional [#5783](https://github.com/openshift/hypershift/pull/5783)
* [OCPBUGS-52417](https://issues.redhat.com/browse/OCPBUGS-52417): [release-4.18] refactor aws identity health check into new controller [#5770](https://github.com/openshift/hypershift/pull/5770)
* [OCPBUGS-51375](https://issues.redhat.com/browse/OCPBUGS-51375): use registryOverrides when automaitcally retrieving catalog images for hosted control plane [#5723](https://github.com/openshift/hypershift/pull/5723)
* [OCPBUGS-50696](https://issues.redhat.com/browse/OCPBUGS-50696): add region to AWS creds passed to operators managed by CPO [#5629](https://github.com/openshift/hypershift/pull/5629)
* [Full changelog](https://github.com/openshift/hypershift/compare/ac7b4b2c592e0f772a03d4426cbfd6b359a71204...77952bed2c91d448705d775a0dbd99c77cdde4f4)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/2ba764f9a38c27f82a9198472c584fa633c8f2cd)

* [OCPBUGS-50565](https://issues.redhat.com/browse/OCPBUGS-50565): Fix for CVE-2024-45338 in golang.org/x/net/html in release-4.18 [#100](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/100)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/ef05fb5528638fa81cec911cebb7333d5f1d21df...2ba764f9a38c27f82a9198472c584fa633c8f2cd)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/3ffdea64f170ec98ddcaa3bc72a289bddc5b0a9f)

* [OCPBUGS-52872](https://issues.redhat.com/browse/OCPBUGS-52872): IBMCloud: MAPI replacing unhealthy CP nodes [#62](https://github.com/openshift/machine-api-provider-ibmcloud/pull/62)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/0fdb727264afaa7f02c8bd602f3769427e520300...3ffdea64f170ec98ddcaa3bc72a289bddc5b0a9f)


### [insights-operator](https://github.com/openshift/insights-operator/tree/8a9746e4b1bbe139d162ecc894041495059dac4a)

* [OCPBUGS-48790](https://issues.redhat.com/browse/OCPBUGS-48790): Add a liveness probe to the extractor container (#1068) [#1068](https://github.com/openshift/insights-operator/pull/1068)
* [Full changelog](https://github.com/openshift/insights-operator/compare/5c8b7154a3afb0e7eed60480bed41bbb45b413f1...8a9746e4b1bbe139d162ecc894041495059dac4a)


### [ironic](https://github.com/openshift/ironic-image/tree/b288ebe9daaed7501d80fe85501dcebe4848362f)

* [OCPBUGS-52290](https://issues.redhat.com/browse/OCPBUGS-52290): Fix runlogwatch script [#642](https://github.com/openshift/ironic-image/pull/642)
* [Full changelog](https://github.com/openshift/ironic-image/compare/afb7947613cac32c5c136e1757d7f21d0b034dd9...b288ebe9daaed7501d80fe85501dcebe4848362f)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/99889497d1290c20663621a52eee8d5b685935df)

* [OCPBUGS-52494](https://issues.redhat.com/browse/OCPBUGS-52494), [OCPBUGS-52496](https://issues.redhat.com/browse/OCPBUGS-52496): Updates GCP credentials request [#1341](https://github.com/openshift/machine-api-operator/pull/1341)
* [OCPBUGS-52567](https://issues.redhat.com/browse/OCPBUGS-52567): add image/read permissions [#1342](https://github.com/openshift/machine-api-operator/pull/1342)
* [OCPBUGS-51263](https://issues.redhat.com/browse/OCPBUGS-51263): Drop oVirt support [#1333](https://github.com/openshift/machine-api-operator/pull/1333)
* [CORS-3741](https://issues.redhat.com/browse/CORS-3741): [Nutanix] support multi-subnets in Machine providerSpec [#1301](https://github.com/openshift/machine-api-operator/pull/1301)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/227a54168e409e577e78f369c31d8b3858f6b86b...99889497d1290c20663621a52eee8d5b685935df)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/9f18ef9ca8a4aff64948a11967d50d4c60606f82)

* [release 4.18] OCPBUGS-50954: In OCL, MCPs are reporting Updating=false while the image is being built [#4859](https://github.com/openshift/machine-config-operator/pull/4859)
* [OCPBUGS-50865](https://issues.redhat.com/browse/OCPBUGS-50865): Make resolv-prepender env file optional [#4855](https://github.com/openshift/machine-config-operator/pull/4855)
* [OCPBUGS-48809](https://issues.redhat.com/browse/OCPBUGS-48809): Enable nmstate-configuration on all platforms [#4804](https://github.com/openshift/machine-config-operator/pull/4804)
* [OCPBUGS-48296](https://issues.redhat.com/browse/OCPBUGS-48296): Update machine-config-daemon-pull.service to use custom policy for Podman < 4.4.1 [#4788](https://github.com/openshift/machine-config-operator/pull/4788)
* [OCPBUGS-48341](https://issues.redhat.com/browse/OCPBUGS-48341): configure-ovs workaround for ovs-if-br-ex bug [#4883](https://github.com/openshift/machine-config-operator/pull/4883)
* [OCPBUGS-51015](https://issues.redhat.com/browse/OCPBUGS-51015): Enforce VIPs to be collocated at the same host [#4865](https://github.com/openshift/machine-config-operator/pull/4865)
* [OCPBUGS-51194](https://issues.redhat.com/browse/OCPBUGS-51194): Update cluster-reader ClusterRole permissions [#4874](https://github.com/openshift/machine-config-operator/pull/4874)
* [OCPBUGS-50633](https://issues.redhat.com/browse/OCPBUGS-50633): Update format verbs for alert logs [#4849](https://github.com/openshift/machine-config-operator/pull/4849)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/965278a90f8d3d01d8c20bf87a8a5f26278748c3...9f18ef9ca8a4aff64948a11967d50d4c60606f82)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/ccdaa71f2165dd277f8a2e3ddc8bdaa2f5200723)

* [OCPBUGS-51266](https://issues.redhat.com/browse/OCPBUGS-51266): Decompress pxe file only if it's a valid compressed file [#52](https://github.com/openshift/machine-os-images/pull/52)
* [OCPBUGS-45456](https://issues.redhat.com/browse/OCPBUGS-45456): Fix shellcheck [#47](https://github.com/openshift/machine-os-images/pull/47)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/f57df5207bc9bde0a9bea650d51f6ae859a12282...ccdaa71f2165dd277f8a2e3ddc8bdaa2f5200723)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/7d0cb735f3e86c0828821cf54f8a40c74d9232aa)

* [OCPBUGS-47268](https://issues.redhat.com/browse/OCPBUGS-47268): fixing CVE-2024-45338 [#91](https://github.com/openshift/machine-api-provider-nutanix/pull/91)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/9c2ff5e75240902a64b13aabbd39c0ae7b970473...7d0cb735f3e86c0828821cf54f8a40c74d9232aa)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/cbd44ad9f0e433d32ff16a2691c6278298afe89a)

* [OCPBUGS-48332](https://issues.redhat.com/browse/OCPBUGS-48332): Update dependencies to address CVE-2024-24786 [#312](https://github.com/openshift/oauth-proxy/pull/312)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/2957f139b4a9982163e4ee76fdc7c532669b6b9f...cbd44ad9f0e433d32ff16a2691c6278298afe89a)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/2022f4987e3cb28152e1260b940c61343c462b5d)

* [OCPBUGS-52588](https://issues.redhat.com/browse/OCPBUGS-52588): fix: error when no related image was found (#1106) [#1106](https://github.com/openshift/oc-mirror/pull/1106)
* [CLID-325](https://issues.redhat.com/browse/CLID-325): adds cpu and memory profiling (#1103) [#1103](https://github.com/openshift/oc-mirror/pull/1103)
* fixes CVE-2024-0406 (#1101) [#1101](https://github.com/openshift/oc-mirror/pull/1101)
* v2: disable spinners when not running in a tty (#1082) [#1082](https://github.com/openshift/oc-mirror/pull/1082)
* [OCPBUGS-49990](https://issues.redhat.com/browse/OCPBUGS-49990): v2/release: error out for kubevirt/graph image errors (#1081) [#1081](https://github.com/openshift/oc-mirror/pull/1081)
* [OCPBUGS-50963](https://issues.redhat.com/browse/OCPBUGS-50963): v2: don't clean cluster resources on dry-run mode (#1091) [#1091](https://github.com/openshift/oc-mirror/pull/1091)
* [OCPBUGS-49991](https://issues.redhat.com/browse/OCPBUGS-49991): fixes bundle related images being skipped (#1074) [#1074](https://github.com/openshift/oc-mirror/pull/1074)
* v2/cli: always stop local registry and close registry.log (#1090) [#1090](https://github.com/openshift/oc-mirror/pull/1090)
* [OCPBUGS-44103](https://issues.redhat.com/browse/OCPBUGS-44103): bump oc fork version (#1089) [#1089](https://github.com/openshift/oc-mirror/pull/1089)
* [OCPBUGS-50685](https://issues.redhat.com/browse/OCPBUGS-50685): fixes the code to make the spinner trigger after semaphore is released (#1079) [#1079](https://github.com/openshift/oc-mirror/pull/1079)
* [OCPBUGS-50503](https://issues.redhat.com/browse/OCPBUGS-50503): oc-mirror fails with error `unknown image: reference name is empty` (#1075) [#1075](https://github.com/openshift/oc-mirror/pull/1075)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/c00c7c9f973ed593b639db63102101a4ab911033...2022f4987e3cb28152e1260b940c61343c462b5d)


### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/fa0280c39bd3e20e3e2c3a3c6277051a4f81ba5b)

* UPSTREAM: 502: Upgrade golang.org/x/net (#502) [#502](https://github.com/openshift/operator-framework-catalogd/pull/502)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/f95a88f7e7a2925b6b878c2acb26451005f0d37a...fa0280c39bd3e20e3e2c3a3c6277051a4f81ba5b)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/802665ed8c0a1b62165353151da210addbfe0c73)

* [OCPBUGS-53040](https://issues.redhat.com/browse/OCPBUGS-53040): add missing pod disruption reasons to isPodDead [#981](https://github.com/openshift/operator-framework-olm/pull/981)
* [OCPBUGS-50830](https://issues.redhat.com/browse/OCPBUGS-50830), [OCPBUGS-50832](https://issues.redhat.com/browse/OCPBUGS-50832), [OCPBUGS-50836](https://issues.redhat.com/browse/OCPBUGS-50836): Bump github.com/distribution/distribution/v3 [#965](https://github.com/openshift/operator-framework-olm/pull/965)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/182471a8d72ee38d2ff82ce44db6903e66c4b22b...802665ed8c0a1b62165353151da210addbfe0c73)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/799f96146c2056a50ae8252a87c03de1cc698f13)

* [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710): DownStream Merge Sync from 4.19 [02-13-2025] [#2470](https://github.com/openshift/ovn-kubernetes/pull/2470)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/5f6ad07d88d8470b2d525803c60bdb5cd0164639...799f96146c2056a50ae8252a87c03de1cc698f13)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/74987748a60f14816975fa1070ce485393a38f64)

* [OCPBUGS-52565](https://issues.redhat.com/browse/OCPBUGS-52565): Bump openshift/prometheus-operator to v0.78.2 [#327](https://github.com/openshift/prometheus-operator/pull/327)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/ede3c1406e70f359c76c1403a2b14bc60ad386bf...74987748a60f14816975fa1070ce485393a38f64)


### [tests](https://github.com/openshift/origin/tree/68b6d984eccbfe3ffd58099f618632ac48915a5b)

* [OCPBUGS-52579](https://issues.redhat.com/browse/OCPBUGS-52579): Use payload pullspec for image info test [#29587](https://github.com/openshift/origin/pull/29587)
* [OCPBUGS-51295](https://issues.redhat.com/browse/OCPBUGS-51295): Rely on unstructured for update status instead of type conversion [#29564](https://github.com/openshift/origin/pull/29564)
* [OCPBUGS-50929](https://issues.redhat.com/browse/OCPBUGS-50929): Update to Kubernetes v1.31.6 [#29548](https://github.com/openshift/origin/pull/29548)
* [OCPBUGS-48389](https://issues.redhat.com/browse/OCPBUGS-48389): move initialization of OC to test instead of package level [#29472](https://github.com/openshift/origin/pull/29472)
* [OCPBUGS-50921](https://issues.redhat.com/browse/OCPBUGS-50921): managed services: add hcp crd to unstable list [#29545](https://github.com/openshift/origin/pull/29545)
* [OCPBUGS-50930](https://issues.redhat.com/browse/OCPBUGS-50930): managed services: add known image check for gcp [#29547](https://github.com/openshift/origin/pull/29547)
* [Full changelog](https://github.com/openshift/origin/compare/f5a460e98df6ae0f232754ee7d1e2aea92e020d1...68b6d984eccbfe3ffd58099f618632ac48915a5b)


### [thanos](https://github.com/openshift/thanos/tree/f1599f65c5fd652150821ae954d563747a649b53)

* [OCPBUGS-52945](https://issues.redhat.com/browse/OCPBUGS-52945): Update Go version in go.mod to 1.22.0 [#159](https://github.com/openshift/thanos/pull/159)
* [Full changelog](https://github.com/openshift/thanos/compare/314589cf9b4e86507634ab3406deb08402fa7af9...f1599f65c5fd652150821ae954d563747a649b53)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/b8ed572d70acddd695a769fac3d1ba93f168fd05)

* [OCPBUGS-50638](https://issues.redhat.com/browse/OCPBUGS-50638): fix panic when vcenter address is incorrect [#293](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/293)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/39b30343b8462a298c4d34cf6e579330af42368e...b8ed572d70acddd695a769fac3d1ba93f168fd05)