# 4.18.0-okd-scos.5

Created: 2025-03-21 20:46:34 +0000 UTC

Image Digest: `sha256:2fcf0247f6ae48ea21c168f33782385d3752a12d0917e76b35223c4e6a702e91`

Promoted from registry.ci.openshift.org/origin/release-scos:4.18.0-0.okd-scos-2025-03-21-070558


## Changes from 4.18.0-okd-scos.ec.3

### Components

* Kubectl 1.31.1
* Kubernetes upgraded from 1.31.4 to 1.31.6
* Kubernetes Tests upgraded from 1.31.1 to 1.31.6
* CentOS Stream CoreOS upgraded from 418.9.202501310632-0 to 418.9.202503200632-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| NetworkSegmentation <br/> (37 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| PersistentIPsForVirtualization <br/> (12 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |


### Removed images

* ovirt-machine-controllers


### Rebuilt images without code change

* stream-coreos `sha256:58ff82fa021afc822aa53019ab7c99cb561bc690be70d3efdb410377b57887bf`
* stream-coreos-extensions `sha256:81a25237c100b92fba92f8c42d7fa4a48b65a8250c621ec733288e969b89765e`


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/8bb42ac9fd9624f86c97c4422bd5f982251e5d91)

* [OCPBUGS-45116](https://issues.redhat.com/browse/OCPBUGS-45116): Add retry to mount efi device (#1030) [#1030](https://github.com/openshift/assisted-installer/pull/1030)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/5348c85cd03dddf1852873c6bb2f08aff3b0630e...8bb42ac9fd9624f86c97c4422bd5f982251e5d91)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/593c9c284e43fd00095cfdf3f55b9017f4104663)

* NO-ISSUE: Increase image pull timeout during install (#907) [#907](https://github.com/openshift/assisted-installer-agent/pull/907)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/51a74acb3f2e56bbeb1ffbe33cb3c5cf808a2512...593c9c284e43fd00095cfdf3f55b9017f4104663)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/b3446080be1c2898ee039030c346020fa6c1ed13)

* [OCPBUGS-50556](https://issues.redhat.com/browse/OCPBUGS-50556): UPSTREAM: 5339: Bump glog for recent fixes [#537](https://github.com/openshift/cluster-api-provider-aws/pull/537)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/6bd77fcce0c87571305edf5f1f28f1182ed25096...b3446080be1c2898ee039030c346020fa6c1ed13)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/a95f8b365dda90ca1cb9d85a13c84670f6200cff)

* [OCPBUGS-49843](https://issues.redhat.com/browse/OCPBUGS-49843): Support HCP labels [#356](https://github.com/openshift/csi-operator/pull/356)
* [Full changelog](https://github.com/openshift/csi-operator/compare/9432fd3e2cb63bc282f2d0b1ac8ab8f6691b49ab...a95f8b365dda90ca1cb9d85a13c84670f6200cff)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/f54f9a19adb43b395a880ca046aed0841466c28d)

* [OCPBUGS-51231](https://issues.redhat.com/browse/OCPBUGS-51231): github.com/go-jose/go-jose/v4 v4.0.5 [#201](https://github.com/openshift/aws-pod-identity-webhook/pull/201)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/5c43fe8e6c86c24f467070a8e5965a83c24f4360...f54f9a19adb43b395a880ca046aed0841466c28d)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/62f62f7a0bb3d836e238588527627684018e229b)

* [OCPBUGS-48659](https://issues.redhat.com/browse/OCPBUGS-48659): dynamically setting the amount of fault domains [#125](https://github.com/openshift/machine-api-provider-azure/pull/125)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/e2405dcd1e737899d1e1ba7c36b8c80262b7d65c...62f62f7a0bb3d836e238588527627684018e229b)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/d1dc8abd956e571e79dde6496d8bb4ca9aaadd83)

* [OCPBUGS-51233](https://issues.redhat.com/browse/OCPBUGS-51233): github.com/go-jose/go-jose/v4 v4.0.5 [#27](https://github.com/openshift/azure-workload-identity/pull/27)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/344c5dc56d6b7b1297db1b19eaa121bdbe0cec5b...d1dc8abd956e571e79dde6496d8bb4ca9aaadd83)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/e5ebf3caca66f0f486ed5c6ef84d196d5093e591)

* [OCPBUGS-52515](https://issues.redhat.com/browse/OCPBUGS-52515): Remove error logging when determining image arch [#9539](https://github.com/openshift/installer/pull/9539)
* [OCPBUGS-52429](https://issues.redhat.com/browse/OCPBUGS-52429): Remove tmp directory used for agent pxe files [#9536](https://github.com/openshift/installer/pull/9536)
* [OCPBUGS-51211](https://issues.redhat.com/browse/OCPBUGS-51211): Fixes panic during GCP tags fetch due to unstable network [#9513](https://github.com/openshift/installer/pull/9513)
* [OCPBUGS-49885](https://issues.redhat.com/browse/OCPBUGS-49885): [Nutanix] Install multi-NICs cluster failed with failureDomains [#9440](https://github.com/openshift/installer/pull/9440)
* [OCPBUGS-50524](https://issues.redhat.com/browse/OCPBUGS-50524): Add cluster:master_nodes metric retrieval in docs [#9449](https://github.com/openshift/installer/pull/9449)
* [OCPBUGS-49864](https://issues.redhat.com/browse/OCPBUGS-49864): handle runtime panic when validating ovnKubernetesConfig [#9435](https://github.com/openshift/installer/pull/9435)
* [OCPBUGS-49320](https://issues.redhat.com/browse/OCPBUGS-49320): pkg/gcp/destroy: add waits to prevent leaks during heavy load [#9402](https://github.com/openshift/installer/pull/9402)
* [OCPBUGS-50870](https://issues.redhat.com/browse/OCPBUGS-50870): PowerVS: destroy dhcp hack [#9483](https://github.com/openshift/installer/pull/9483)
* [OCPBUGS-50877](https://issues.redhat.com/browse/OCPBUGS-50877): correct typo [#9485](https://github.com/openshift/installer/pull/9485)
* [OCPBUGS-49792](https://issues.redhat.com/browse/OCPBUGS-49792): aws/edge/byovpc: subnets tag kube cluster tag to shared [#9430](https://github.com/openshift/installer/pull/9430)
* [OCPBUGS-49842](https://issues.redhat.com/browse/OCPBUGS-49842): Disable IP Forwarding for CAPG Machines [#9434](https://github.com/openshift/installer/pull/9434)
* [OCPBUGS-46548](https://issues.redhat.com/browse/OCPBUGS-46548): Update RHCOS 4.18 bootimage metadata to 418.94.202501221327-0 [#9437](https://github.com/openshift/installer/pull/9437)
* [OCPBUGS-49735](https://issues.redhat.com/browse/OCPBUGS-49735): aws/byo-ip added required permission ec2:ReleaseAddress [#9426](https://github.com/openshift/installer/pull/9426)
* [Full changelog](https://github.com/openshift/installer/compare/f1621a112f46ebdad3d2dc429464d6e075573679...e5ebf3caca66f0f486ed5c6ef84d196d5093e591)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/20646c92b5f1c2a7b49fe12effee0b3c74df8058)

* [OCPBUGS-45250](https://issues.redhat.com/browse/OCPBUGS-45250): Remove dataImage finalizer if BMH is missing [#389](https://github.com/openshift/baremetal-operator/pull/389)
* [OCPBUGS-49699](https://issues.redhat.com/browse/OCPBUGS-49699): Handle HFC for non-redfish HW [#393](https://github.com/openshift/baremetal-operator/pull/393)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/044448aafa024c114b2ddba7afd4db9de845c82a...20646c92b5f1c2a7b49fe12effee0b3c74df8058)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/eb9bc9b02fc27a48cceccc0140fc3f8ee1414c64)

* [OCPBUGS-49440](https://issues.redhat.com/browse/OCPBUGS-49440): Address `golang.org/x/*` CVEs [#1961](https://github.com/openshift/oc/pull/1961)
* [OCPBUGS-48714](https://issues.redhat.com/browse/OCPBUGS-48714): monitor should not exit for temp api disconnect [#1963](https://github.com/openshift/oc/pull/1963)
* [Full changelog](https://github.com/openshift/oc/compare/36c93092776f8d964b4d09fa4c4f299d1ab55a08...eb9bc9b02fc27a48cceccc0140fc3f8ee1414c64)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/7785eb495aa92843e88c968a5c9a4a49aa7cf16d)

* [OCPBUGS-51550](https://issues.redhat.com/browse/OCPBUGS-51550): Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected [#822](https://github.com/openshift/cloud-credential-operator/pull/822)
* [OCPBUGS-51237](https://issues.redhat.com/browse/OCPBUGS-51237): github.com/go-jose/go-jose/v4 v4.0.5 [#824](https://github.com/openshift/cloud-credential-operator/pull/824)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/020f8b841abf6284642cd182d95611b79c2f3a19...7785eb495aa92843e88c968a5c9a4a49aa7cf16d)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/d1e019545aee3250920a01a5f5c465c570de573c)

* [OCPBUGS-49770](https://issues.redhat.com/browse/OCPBUGS-49770): bootstrap API server should terminate only after API is HA [#113](https://github.com/openshift/cluster-bootstrap/pull/113)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/c6db451da03b8883063e88d28d7962b605f65153...d1e019545aee3250920a01a5f5c465c570de573c)


### [cluster-config-api](https://github.com/openshift/api/tree/e7f23be12279d3c245c013c234f967e5ccb426e2)

* [OCPBUGS-51295](https://issues.redhat.com/browse/OCPBUGS-51295), [OCPBUGS-51380](https://issues.redhat.com/browse/OCPBUGS-51380): Reject new NodeStatus with revision set [#2215](https://github.com/openshift/api/pull/2215)
* [OCPBUGS-51295](https://issues.redhat.com/browse/OCPBUGS-51295): [release-4.18] Add the option to test ratcheting validations within integration tests [#2217](https://github.com/openshift/api/pull/2217)
* [OCPBUGS-51077](https://issues.redhat.com/browse/OCPBUGS-51077): [4.18] bump controller-tools dependency to latest downstream commit [#2210](https://github.com/openshift/api/pull/2210)
* [OCPBUGS-49751](https://issues.redhat.com/browse/OCPBUGS-49751): ipam, virt: graduate persistent ips feature gate to GA [#2140](https://github.com/openshift/api/pull/2140)
* [OCPBUGS-49809](https://issues.redhat.com/browse/OCPBUGS-49809), [SDN-5297](https://issues.redhat.com/browse/SDN-5297), [SDN-5403](https://issues.redhat.com/browse/SDN-5403): [release-4.18] Graduate `UserDefinedNetworks` to GA [#2127](https://github.com/openshift/api/pull/2127)
* [OCPBUGS-49780](https://issues.redhat.com/browse/OCPBUGS-49780): Use BASE_REF env var to pull the release version for sippy data [#2191](https://github.com/openshift/api/pull/2191)
* [Full changelog](https://github.com/openshift/api/compare/d15841be6bdeeb556cac490a084cb3ffb2aee215...e7f23be12279d3c245c013c234f967e5ccb426e2)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/6fe700087e8be6513285edd18f461790fecc65c3)

* [OCPBUGS-49843](https://issues.redhat.com/browse/OCPBUGS-49843): Support HCP labels [#227](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/227)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/46902b494ed0a608a48d2a04faf6e4ed2f9a6a5b...6fe700087e8be6513285edd18f461790fecc65c3)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/7cafd0c7dca2edb154b8444602b600b5901afeba)

* [OCPBUGS-52514](https://issues.redhat.com/browse/OCPBUGS-52514): [release-4.18] Add runbook_url for CoreDNSErrorsHigh [#429](https://github.com/openshift/cluster-dns-operator/pull/429)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/208d50c1a5e0aaeb991366daa749abdffa803224...7cafd0c7dca2edb154b8444602b600b5901afeba)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/26f6cb2494275fb713edbb535c3fe1d02fde94de)

* [OCPBUGS-49772](https://issues.redhat.com/browse/OCPBUGS-49772): Bump library-go for static pod controller apply fixes. [#1395](https://github.com/openshift/cluster-etcd-operator/pull/1395)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/b9f78653cf1435be9f4e208813f0e2e8c3ca54a6...26f6cb2494275fb713edbb535c3fe1d02fde94de)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/33197688ad59aed5cd6d51c34cb114944125b6a7)

* [OCPBUGS-51018](https://issues.redhat.com/browse/OCPBUGS-51018): ensure that storage names don't end in dashes [#1179](https://github.com/openshift/cluster-image-registry-operator/pull/1179)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/00882ba691a356151e29a9052ab0f82c24a7f9fb...33197688ad59aed5cd6d51c34cb114944125b6a7)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/b0222ed2054e3ff7b87f4f90d72b42b6cf2b53a7)

* [NE-1952](https://issues.redhat.com/browse/NE-1952): Pre-upgrade check for Gateway API CRD Management Succession [#1193](https://github.com/openshift/cluster-ingress-operator/pull/1193)
* [OCPBUGS-48377](https://issues.redhat.com/browse/OCPBUGS-48377): Add e2e tests for IdleConnectionTerminationPolicy [#1194](https://github.com/openshift/cluster-ingress-operator/pull/1194)
* [OCPBUGS-48377](https://issues.redhat.com/browse/OCPBUGS-48377): Add support for IdleConnectionTerminationPolicy [#1188](https://github.com/openshift/cluster-ingress-operator/pull/1188)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/8be174945db79b0660bd0fd21ed279ab7b6aafbf...b0222ed2054e3ff7b87f4f90d72b42b6cf2b53a7)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/087c72f1e261fb7c42fe6fc5d73a1f70d3c76d2f)

* [OCPBUGS-46411](https://issues.redhat.com/browse/OCPBUGS-46411): skip generating certs when networkConfig.status.ServiceNetwork is nil [#1780](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1780)
* [OCPBUGS-50479](https://issues.redhat.com/browse/OCPBUGS-50479): Increase waitForFallbackDegradedConditionTimeout [#1798](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1798)
* [OCPBUGS-49773](https://issues.redhat.com/browse/OCPBUGS-49773): Bump library-go for static pod controller apply fixes. [#1796](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1796)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/4babb3f18c19d2bef584a8389f34b8428cf52b9c...087c72f1e261fb7c42fe6fc5d73a1f70d3c76d2f)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/0fac9aa9a20b3c843e0e832a2849db6a7e3441c1)

* [OCPBUGS-49777](https://issues.redhat.com/browse/OCPBUGS-49777): Bump library-go for static pod controller apply fixes. [#832](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/832)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/ce2c021f23f5d178da6ea35d98a229137e5a81c4...0fac9aa9a20b3c843e0e832a2849db6a7e3441c1)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/6182930dde5ec8dd22bd50481e8b369ce673484c)

* [OCPBUGS-49776](https://issues.redhat.com/browse/OCPBUGS-49776): Bump library-go for static pod controller apply fixes. [#559](https://github.com/openshift/cluster-kube-scheduler-operator/pull/559)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/e4c772cd344e538342a4e1cd91635b387e1c18ba...6182930dde5ec8dd22bd50481e8b369ce673484c)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/2800e3ef7f19e8238046a9a80562d010a53b138f)

* [OCPBUGS-53024](https://issues.redhat.com/browse/OCPBUGS-53024): Fix opentelemetry metrics to use regexp on label match [#2578](https://github.com/openshift/cluster-monitoring-operator/pull/2578)
* [OCPBUGS-52565](https://issues.redhat.com/browse/OCPBUGS-52565): Bump prometheus-operator to 0.78.2 [#2576](https://github.com/openshift/cluster-monitoring-operator/pull/2576)
* [OCPBUGS-50706](https://issues.redhat.com/browse/OCPBUGS-50706): Add incidents metric to telemetry [#2570](https://github.com/openshift/cluster-monitoring-operator/pull/2570)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/9852f98d559a7153213164e3518ffd6576b47b87...2800e3ef7f19e8238046a9a80562d010a53b138f)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/8cbda2ddf6aef578ea40f224c1281c2a6ee262c4)

* [OCPBUGS-52837](https://issues.redhat.com/browse/OCPBUGS-52837): frr-k8s: rename validatingwebhook name [#2661](https://github.com/openshift/cluster-network-operator/pull/2661)
* [OCPBUGS-48305](https://issues.redhat.com/browse/OCPBUGS-48305): frr-k8s: align manifests with operator [#2657](https://github.com/openshift/cluster-network-operator/pull/2657)
* [OCPBUGS-41178](https://issues.redhat.com/browse/OCPBUGS-41178): Updating cluster-network-operator-container image to be consistent with ART for 4.18 [#2491](https://github.com/openshift/cluster-network-operator/pull/2491)
* [OCPBUGS-50625](https://issues.redhat.com/browse/OCPBUGS-50625): Cherry-pick RouteAdvertisements support back to 4.18 [#2645](https://github.com/openshift/cluster-network-operator/pull/2645)
* [OCPBUGS-49589](https://issues.redhat.com/browse/OCPBUGS-49589): Update egressfirewall CRD to be consistent with ovn-kubernetes repo [#2631](https://github.com/openshift/cluster-network-operator/pull/2631)
* [OCPBUGS-49736](https://issues.redhat.com/browse/OCPBUGS-49736): Fix UDN and CUDN hostSubnet validation [#2637](https://github.com/openshift/cluster-network-operator/pull/2637)
* [OCPBUGS-49670](https://issues.redhat.com/browse/OCPBUGS-49670): OVNK should be able to annotate network ID on NADs [#2635](https://github.com/openshift/cluster-network-operator/pull/2635)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/4616940d5e04f53b5bed811449b89acf2bb11514...8cbda2ddf6aef578ea40f224c1281c2a6ee262c4)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/c004ea7ea486e983d296311ca2b40cc9a431c394)

* [OCPBUGS-52352](https://issues.redhat.com/browse/OCPBUGS-52352): Treat all aarch64 platforms as equals in tuned (#1303) (#1306) [#1303](https://github.com/openshift/cluster-node-tuning-operator/pull/1303)
* machineconfig: add support for various hugepage sizes. (#1299) [#1299](https://github.com/openshift/cluster-node-tuning-operator/pull/1299)
* [OCPBUGS-51088](https://issues.redhat.com/browse/OCPBUGS-51088): E2E: Add configuration tests related to align cpus by uncorecache feature (#1298) [#1298](https://github.com/openshift/cluster-node-tuning-operator/pull/1298)
* e2e: common way to fetch poolName (#1255) (#1300) [#1255](https://github.com/openshift/cluster-node-tuning-operator/pull/1255)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/b707be66f55efc54a9b348cd7f4b5fdcf5a58679...c004ea7ea486e983d296311ca2b40cc9a431c394)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/0a6f6eb9efec43dfd3c8570b7a08a3d00afc5534)

* [OCPBUGS-49749](https://issues.redhat.com/browse/OCPBUGS-49749): Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups [#613](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/613)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/9da25f01f448cf603993f2e311e9b779f300690e...0a6f6eb9efec43dfd3c8570b7a08a3d00afc5534)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/65d06444110f8044a84ccf4f977ee9520f2bdf89)

* [OCPBUGS-51320](https://issues.redhat.com/browse/OCPBUGS-51320): fix Vsphere cluster Storage operator in Unavailable state [#558](https://github.com/openshift/cluster-storage-operator/pull/558)
* [OCPBUGS-49843](https://issues.redhat.com/browse/OCPBUGS-49843): Support HCP labels [#552](https://github.com/openshift/cluster-storage-operator/pull/552)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/d0086059867b069dbc9eec2ae84d79c2119b5b4c...65d06444110f8044a84ccf4f977ee9520f2bdf89)


### [console](https://github.com/openshift/console/tree/14c0cfd94cd67ba673b15acb31fad40066f898fd)

* [OCPBUGS-52372](https://issues.redhat.com/browse/OCPBUGS-52372): VolumeSnapshots are not displayed in OpenShift Web Console [#14833](https://github.com/openshift/console/pull/14833)
* [OCPBUGS-52406](https://issues.redhat.com/browse/OCPBUGS-52406): Retain original path when detecting perspective [#14834](https://github.com/openshift/console/pull/14834)
* [OCPBUGS-52371](https://issues.redhat.com/browse/OCPBUGS-52371): Update the monitoring topic used by the console team [#14832](https://github.com/openshift/console/pull/14832)
* [OCPBUGS-52490](https://issues.redhat.com/browse/OCPBUGS-52490): enable clicking outside NodeLogs Selects to close them [#14843](https://github.com/openshift/console/pull/14843)
* [OCPBUGS-50501](https://issues.redhat.com/browse/OCPBUGS-50501): Updating cypress config to have video enabled for the CI results [#14831](https://github.com/openshift/console/pull/14831)
* [OCPBUGS-52511](https://issues.redhat.com/browse/OCPBUGS-52511): Remove logoutOpenShift method call [#14845](https://github.com/openshift/console/pull/14845)
* [OCPBUGS-50609](https://issues.redhat.com/browse/OCPBUGS-50609): update the Deployment pod on change in imageStream [#14757](https://github.com/openshift/console/pull/14757)
* [OCPBUGS-50648](https://issues.redhat.com/browse/OCPBUGS-50648): add support for "OpenShift Virtualization Engine" valid subscription filter on OperatorHub [#14761](https://github.com/openshift/console/pull/14761)
* [OCPBUGS-51086](https://issues.redhat.com/browse/OCPBUGS-51086): Show Observe section without PROMETHEUS and MONITORING flags [#14784](https://github.com/openshift/console/pull/14784)
* [OCPBUGS-48798](https://issues.redhat.com/browse/OCPBUGS-48798): Pipeline visualisation shows all tasks as Failed and after that goes to Running state [#14698](https://github.com/openshift/console/pull/14698)
* [OCPBUGS-51180](https://issues.redhat.com/browse/OCPBUGS-51180): Linkify OLM operator uninstall message [#14789](https://github.com/openshift/console/pull/14789)
* [OCPBUGS-51149](https://issues.redhat.com/browse/OCPBUGS-51149): Do not load CSRs if user does not have permissions [#14787](https://github.com/openshift/console/pull/14787)
* [OCPBUGS-50647](https://issues.redhat.com/browse/OCPBUGS-50647): Enable web terminal tests [#14758](https://github.com/openshift/console/pull/14758)
* [OCPBUGS-50573](https://issues.redhat.com/browse/OCPBUGS-50573): Render refresh popover after adding CSP directive to the ConsolePlugin CR [#14755](https://github.com/openshift/console/pull/14755)
* [OCPBUGS-49867](https://issues.redhat.com/browse/OCPBUGS-49867): Add support for conditional CSP headers [#14720](https://github.com/openshift/console/pull/14720)
* [OCPBUGS-48736](https://issues.redhat.com/browse/OCPBUGS-48736): update variable name for plugin name parsing [#14696](https://github.com/openshift/console/pull/14696)
* [OCPBUGS-49921](https://issues.redhat.com/browse/OCPBUGS-49921): fix run time error when no completed version exists [#14743](https://github.com/openshift/console/pull/14743)
* [OCPBUGS-49920](https://issues.redhat.com/browse/OCPBUGS-49920): fix bug where Search filter dropdown label isn't i18n [#14724](https://github.com/openshift/console/pull/14724)
* [OCPBUGS-48200](https://issues.redhat.com/browse/OCPBUGS-48200): 'create a Project' button on Getting started page doesn't work [#14672](https://github.com/openshift/console/pull/14672)
* [Full changelog](https://github.com/openshift/console/compare/7bb8f0d706d0a4c86750adb82bc02791f1fa6002...14c0cfd94cd67ba673b15acb31fad40066f898fd)


### [console-operator](https://github.com/openshift/console-operator/tree/10a0cc293e61b8125ebec8c9c98ede22a0824d06)

* [OCPBUGS-52294](https://issues.redhat.com/browse/OCPBUGS-52294): Custom route TLS should be optional when IngressController's DefaultCertificate is set [#966](https://github.com/openshift/console-operator/pull/966)
* [OCPBUGS-49867](https://issues.redhat.com/browse/OCPBUGS-49867): Add ConsolePluginContentSecurityPolicy feature gate to… [#959](https://github.com/openshift/console-operator/pull/959)
* [Full changelog](https://github.com/openshift/console-operator/compare/18590a15d7ba5447b10be371681424e09ccacdf8...10a0cc293e61b8125ebec8c9c98ede22a0824d06)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/b52ca7e89560678f3420aac02cfdb11febcfae67)

* [OCPBUGS-43430](https://issues.redhat.com/browse/OCPBUGS-43430): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into release-4.18 [#312](https://github.com/openshift/cloud-provider-openstack/pull/312)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/90891d4634af0fe61393de5ad5b448eb5d070f48...b52ca7e89560678f3420aac02cfdb11febcfae67)


### [docker-builder](https://github.com/openshift/builder/tree/6a5ec2a8c8e6cf0d348bee762706c0e24d5517d8)

* [OCPBUGS-46580](https://issues.redhat.com/browse/OCPBUGS-46580): buildah dependency bump to 1.37.6 [#453](https://github.com/openshift/builder/pull/453)
* [Full changelog](https://github.com/openshift/builder/compare/336d783e6fb6d10c32b4e386523325751c33b3ee...6a5ec2a8c8e6cf0d348bee762706c0e24d5517d8)


### [docker-registry](https://github.com/openshift/image-registry/tree/e36d3655ba8c33cff1afaa9f816ae2399f4cd42f)

* [OCPBUGS-49693](https://issues.redhat.com/browse/OCPBUGS-49693): bump docker distribution [#421](https://github.com/openshift/image-registry/pull/421)
* [Full changelog](https://github.com/openshift/image-registry/compare/8def65e61ff3afa5a16396045418ff306f72243e...e36d3655ba8c33cff1afaa9f816ae2399f4cd42f)


### [etcd, installer-etcd-artifacts](https://github.com/openshift/etcd/tree/98b19154718fd94d4e8ad30824c00ba1de87cb78)

* DOWNSTREAM: &lt;carry&gt;: OCPBUGS-51971: fix a compaction induce latency issue [#312](https://github.com/openshift/etcd/pull/312)
* [ETCD-708](https://issues.redhat.com/browse/ETCD-708): Rebase etcd 3.5.18 openshift 4.18 [#307](https://github.com/openshift/etcd/pull/307)
* [Full changelog](https://github.com/openshift/etcd/compare/914783cae63a13b90971c65e28c3349c1ecb7dfb...98b19154718fd94d4e8ad30824c00ba1de87cb78)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/01f6b419357a539389704fcec9872997f808e540)

* [OCPBUGS-52495](https://issues.redhat.com/browse/OCPBUGS-52495): OCPBUGS-52494:  Disable shielded VMs for non-UEFI disks [#112](https://github.com/openshift/machine-api-provider-gcp/pull/112)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/a3716418ec55c5767f4dab86991ffad6161031e9...01f6b419357a539389704fcec9872997f808e540)


### [haproxy-router](https://github.com/openshift/router/tree/d8058949aaf91dcdea050c58e6a34ef5f6670c67)

* [OCPBUGS-48377](https://issues.redhat.com/browse/OCPBUGS-48377): Add support for IdleCloseTerminationPolicy [#647](https://github.com/openshift/router/pull/647)
* [OCPBUGS-49389](https://issues.redhat.com/browse/OCPBUGS-49389): Reject All CA-Signed Certs Using SHA1 [#649](https://github.com/openshift/router/pull/649)
* [Full changelog](https://github.com/openshift/router/compare/061909a4c397c048e6def163fda5d227c75f176b...d8058949aaf91dcdea050c58e6a34ef5f6670c67)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/6020cf5333bdeb77f95fa33f8272e5251ea28edc)

* [OCPBUGS-50929](https://issues.redhat.com/browse/OCPBUGS-50929): Update to Kubernetes v1.31.6 [#2208](https://github.com/openshift/kubernetes/pull/2208)
* [OCPBUGS-49841](https://issues.redhat.com/browse/OCPBUGS-49841): Don't retry storage calls with side effects. [#2197](https://github.com/openshift/kubernetes/pull/2197)
* [OCPBUGS-48552](https://issues.redhat.com/browse/OCPBUGS-48552): Update to Kubernetes 1.31.5 [#2176](https://github.com/openshift/kubernetes/pull/2176)
* [OCPBUGS-49782](https://issues.redhat.com/browse/OCPBUGS-49782): OCPBUGS-39305: UPSTREAM: &lt;carry&gt;: log only deprecated api requests [#2195](https://github.com/openshift/kubernetes/pull/2195)
* [OCPBUGS-49749](https://issues.redhat.com/browse/OCPBUGS-49749): UPSTREAM: &lt;carry&gt;: disable etcd readiness checks by default [#2193](https://github.com/openshift/kubernetes/pull/2193)
* [Full changelog](https://github.com/openshift/kubernetes/compare/e18ecb4c7c8e2d8ca398f0ecdf76119d9f471cf3...6020cf5333bdeb77f95fa33f8272e5251ea28edc)


### [hypershift](https://github.com/openshift/hypershift/tree/81ff5061471f5565de908e96e2a90119ad8b0550)

* [OCPBUGS-51239](https://issues.redhat.com/browse/OCPBUGS-51239): fix(deps): bump go-jose [#5858](https://github.com/openshift/hypershift/pull/5858)
* [OCPBUGS-52982](https://issues.redhat.com/browse/OCPBUGS-52982): Fix audit-logs container to properly handle SIGTERM [#5774](https://github.com/openshift/hypershift/pull/5774)
* [OCPBUGS-52863](https://issues.redhat.com/browse/OCPBUGS-52863): stop using dev mode for loggers [#5811](https://github.com/openshift/hypershift/pull/5811)
* [OCPBUGS-52878](https://issues.redhat.com/browse/OCPBUGS-52878): Kubernetes API Server apply-bootstrap container does not respect SIGTERM [#5780](https://github.com/openshift/hypershift/pull/5780)
* [OCPBUGS-52516](https://issues.redhat.com/browse/OCPBUGS-52516): Make managed-trust-bundle optional [#5783](https://github.com/openshift/hypershift/pull/5783)
* [OCPBUGS-52417](https://issues.redhat.com/browse/OCPBUGS-52417): [release-4.18] refactor aws identity health check into new controller [#5770](https://github.com/openshift/hypershift/pull/5770)
* [OCPBUGS-51375](https://issues.redhat.com/browse/OCPBUGS-51375): use registryOverrides when automaitcally retrieving catalog images for hosted control plane [#5723](https://github.com/openshift/hypershift/pull/5723)
* [OCPBUGS-50696](https://issues.redhat.com/browse/OCPBUGS-50696): add region to AWS creds passed to operators managed by CPO [#5629](https://github.com/openshift/hypershift/pull/5629)
* [OCPBUGS-51050](https://issues.redhat.com/browse/OCPBUGS-51050): Add HostedCluster additional trustbundles to konnectivity-https-proxy [#5667](https://github.com/openshift/hypershift/pull/5667)
* NO-JIRA: Update dependency mkdocs-mermaid2-plugin to v1.2.1 [#5640](https://github.com/openshift/hypershift/pull/5640)
* NO-JIRA: Update dependency mkdocs to v1.6.1 [#5638](https://github.com/openshift/hypershift/pull/5638)
* [OCPBUGS-50550](https://issues.redhat.com/browse/OCPBUGS-50550): Honor proxy vars in the util insecure http client [#5598](https://github.com/openshift/hypershift/pull/5598)
* [OCPBUGS-49698](https://issues.redhat.com/browse/OCPBUGS-49698): Konnectivity: add agent readiness [#5521](https://github.com/openshift/hypershift/pull/5521)
* [OCPBUGS-45600](https://issues.redhat.com/browse/OCPBUGS-45600): override OpenShiftPodSecurityAdmission featue gate to false for HCP components [#5585](https://github.com/openshift/hypershift/pull/5585)
* [OCPBUGS-49827](https://issues.redhat.com/browse/OCPBUGS-49827): Duplicate hostDevices.name when hostDevices.deviceName has multiple types. [#5557](https://github.com/openshift/hypershift/pull/5557)
* [OCPBUGS-49904](https://issues.redhat.com/browse/OCPBUGS-49904): Use /livez for kubernetes scheduler liveness probe [#5567](https://github.com/openshift/hypershift/pull/5567)
* [OCPBUGS-45600](https://issues.redhat.com/browse/OCPBUGS-45600): enforce privileged PSA by default [#5566](https://github.com/openshift/hypershift/pull/5566)
* [OCPBUGS-49819](https://issues.redhat.com/browse/OCPBUGS-49819): Add ObjectEncoding to the Azure API and SecretProviderClass Reconciliation in the CPO [#5548](https://github.com/openshift/hypershift/pull/5548)
* [OCPBUGS-48689](https://issues.redhat.com/browse/OCPBUGS-48689): Remove Credentials from the Azure API [#5530](https://github.com/openshift/hypershift/pull/5530)
* [Full changelog](https://github.com/openshift/hypershift/compare/05039f3446362d68dca2d032898f55f91976928e...81ff5061471f5565de908e96e2a90119ad8b0550)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/2ba764f9a38c27f82a9198472c584fa633c8f2cd)

* [OCPBUGS-50565](https://issues.redhat.com/browse/OCPBUGS-50565): Fix for CVE-2024-45338 in golang.org/x/net/html in release-4.18 [#100](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/100)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/ef05fb5528638fa81cec911cebb7333d5f1d21df...2ba764f9a38c27f82a9198472c584fa633c8f2cd)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/3ffdea64f170ec98ddcaa3bc72a289bddc5b0a9f)

* [OCPBUGS-52872](https://issues.redhat.com/browse/OCPBUGS-52872): IBMCloud: MAPI replacing unhealthy CP nodes [#62](https://github.com/openshift/machine-api-provider-ibmcloud/pull/62)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/0fdb727264afaa7f02c8bd602f3769427e520300...3ffdea64f170ec98ddcaa3bc72a289bddc5b0a9f)


### [insights-operator](https://github.com/openshift/insights-operator/tree/8a9746e4b1bbe139d162ecc894041495059dac4a)

* [OCPBUGS-48790](https://issues.redhat.com/browse/OCPBUGS-48790): Add a liveness probe to the extractor container (#1068) [#1068](https://github.com/openshift/insights-operator/pull/1068)
* [Full changelog](https://github.com/openshift/insights-operator/compare/5c8b7154a3afb0e7eed60480bed41bbb45b413f1...8a9746e4b1bbe139d162ecc894041495059dac4a)


### [ironic](https://github.com/openshift/ironic-image/tree/bc0800a6d184c4253ee18d7e8f68aecebe1b3393)

* [METAL-1302](https://issues.redhat.com/browse/METAL-1302): Do not use openstack packages [#646](https://github.com/openshift/ironic-image/pull/646)
* [OCPBUGS-52290](https://issues.redhat.com/browse/OCPBUGS-52290): Fix runlogwatch script [#642](https://github.com/openshift/ironic-image/pull/642)
* [OCPBUGS-50641](https://issues.redhat.com/browse/OCPBUGS-50641): Install python3-inotify pkg explicitly [#639](https://github.com/openshift/ironic-image/pull/639)
* [OCPBUGS-49982](https://issues.redhat.com/browse/OCPBUGS-49982): Fix runlogwatch failure if LOG_DIR does not exist [#636](https://github.com/openshift/ironic-image/pull/636)
* [OCPBUGS-49765](https://issues.redhat.com/browse/OCPBUGS-49765): Drop quiet option of grep to avoid race condition with pipefail [#632](https://github.com/openshift/ironic-image/pull/632)
* [OCPBUGS-49755](https://issues.redhat.com/browse/OCPBUGS-49755): Use pynotify instead of inotify-tools [#630](https://github.com/openshift/ironic-image/pull/630)
* [Full changelog](https://github.com/openshift/ironic-image/compare/3ed02cb9ec6171a279808b1eb09d1fa7b0db98f5...bc0800a6d184c4253ee18d7e8f68aecebe1b3393)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/cfff1ce89bc4e3cb24995547c6645f21431a9d14)

* [METAL-1302](https://issues.redhat.com/browse/METAL-1302): Do not use openstack packages [#178](https://github.com/openshift/ironic-agent-image/pull/178)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/a26fffeb4d36b22951095e20988f1757044e8d2a...cfff1ce89bc4e3cb24995547c6645f21431a9d14)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/99889497d1290c20663621a52eee8d5b685935df)

* [OCPBUGS-52494](https://issues.redhat.com/browse/OCPBUGS-52494), [OCPBUGS-52496](https://issues.redhat.com/browse/OCPBUGS-52496): Updates GCP credentials request [#1341](https://github.com/openshift/machine-api-operator/pull/1341)
* [OCPBUGS-52567](https://issues.redhat.com/browse/OCPBUGS-52567): add image/read permissions [#1342](https://github.com/openshift/machine-api-operator/pull/1342)
* [OCPBUGS-51263](https://issues.redhat.com/browse/OCPBUGS-51263): Drop oVirt support [#1333](https://github.com/openshift/machine-api-operator/pull/1333)
* [CORS-3741](https://issues.redhat.com/browse/CORS-3741): [Nutanix] support multi-subnets in Machine providerSpec [#1301](https://github.com/openshift/machine-api-operator/pull/1301)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/227a54168e409e577e78f369c31d8b3858f6b86b...99889497d1290c20663621a52eee8d5b685935df)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/46eed2bde29dc49aeac37903c3d0df0c7b07583d)

* [OCPNODE-2276](https://issues.redhat.com/browse/OCPNODE-2276): Set `Upgradeable=False` when cluster is on cgroup `v1` [#4921](https://github.com/openshift/machine-config-operator/pull/4921)
* [OCPBUGS-53111](https://issues.redhat.com/browse/OCPBUGS-53111): daemon: ensure ostree-finalize-staged is started before rebooting [#4918](https://github.com/openshift/machine-config-operator/pull/4918)
* [OCPBUGS-53110](https://issues.redhat.com/browse/OCPBUGS-53110): Update ObservedGeneration in KubeletConfig [#4917](https://github.com/openshift/machine-config-operator/pull/4917)
* [release 4.18] OCPBUGS-50954: In OCL, MCPs are reporting Updating=false while the image is being built [#4859](https://github.com/openshift/machine-config-operator/pull/4859)
* [OCPBUGS-50865](https://issues.redhat.com/browse/OCPBUGS-50865): Make resolv-prepender env file optional [#4855](https://github.com/openshift/machine-config-operator/pull/4855)
* [OCPBUGS-48809](https://issues.redhat.com/browse/OCPBUGS-48809): Enable nmstate-configuration on all platforms [#4804](https://github.com/openshift/machine-config-operator/pull/4804)
* [OCPBUGS-48296](https://issues.redhat.com/browse/OCPBUGS-48296): Update machine-config-daemon-pull.service to use custom policy for Podman &lt; 4.4.1 [#4788](https://github.com/openshift/machine-config-operator/pull/4788)
* [OCPBUGS-48341](https://issues.redhat.com/browse/OCPBUGS-48341): configure-ovs workaround for ovs-if-br-ex bug [#4883](https://github.com/openshift/machine-config-operator/pull/4883)
* [OCPBUGS-51015](https://issues.redhat.com/browse/OCPBUGS-51015): Enforce VIPs to be collocated at the same host [#4865](https://github.com/openshift/machine-config-operator/pull/4865)
* [OCPBUGS-51194](https://issues.redhat.com/browse/OCPBUGS-51194): Update cluster-reader ClusterRole permissions [#4874](https://github.com/openshift/machine-config-operator/pull/4874)
* [OCPBUGS-50633](https://issues.redhat.com/browse/OCPBUGS-50633): Update format verbs for alert logs [#4849](https://github.com/openshift/machine-config-operator/pull/4849)
* [OCPBUGS-49774](https://issues.redhat.com/browse/OCPBUGS-49774): Correct MachineConfig documentation on sysstat extension support [#4829](https://github.com/openshift/machine-config-operator/pull/4829)
* [OCPBUGS-49433](https://issues.redhat.com/browse/OCPBUGS-49433): create /run/nodeip-configuration before use [#4813](https://github.com/openshift/machine-config-operator/pull/4813)
* [OCPBUGS-46032](https://issues.redhat.com/browse/OCPBUGS-46032): Update the storage.conf configuration file template [#4751](https://github.com/openshift/machine-config-operator/pull/4751)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/d6090f11285d3b9a9262290f17bc3f90eb3dd8e5...46eed2bde29dc49aeac37903c3d0df0c7b07583d)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/ccdaa71f2165dd277f8a2e3ddc8bdaa2f5200723)

* [OCPBUGS-51266](https://issues.redhat.com/browse/OCPBUGS-51266): Decompress pxe file only if it's a valid compressed file [#52](https://github.com/openshift/machine-os-images/pull/52)
* [OCPBUGS-45456](https://issues.redhat.com/browse/OCPBUGS-45456): Fix shellcheck [#47](https://github.com/openshift/machine-os-images/pull/47)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/f57df5207bc9bde0a9bea650d51f6ae859a12282...ccdaa71f2165dd277f8a2e3ddc8bdaa2f5200723)


### [metallb-frr](https://github.com/openshift/frr/tree/78714ea6d2fd4de722473fa68125bfb09b21e6f8)

* [OCPBUGS-48305](https://issues.redhat.com/browse/OCPBUGS-48305): Use metrics for readiness/liveness probes [#76](https://github.com/openshift/frr/pull/76)
* [Full changelog](https://github.com/openshift/frr/compare/1ad8f2e711d33fd0416b8e2b8d26a413d26b38e2...78714ea6d2fd4de722473fa68125bfb09b21e6f8)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/21fb8e05e5de697bbb4ec3c7ca685b0518aca82d)

* [OCPBUGS-47470](https://issues.redhat.com/browse/OCPBUGS-47470): adds getpodcontext (backport 4.18) [#259](https://github.com/openshift/multus-cni/pull/259)
* [Full changelog](https://github.com/openshift/multus-cni/compare/69733b264233684deb30defbc357a1ecf03c0d02...21fb8e05e5de697bbb4ec3c7ca685b0518aca82d)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/d9f7f31c78c4f4eeee734936cd814ab0542e4ad0)

* [CNV-56436](https://issues.redhat.com/browse/CNV-56436): show ipam lifecycle correctly with new spec [#220](https://github.com/openshift/networking-console-plugin/pull/220)
* [CNV-56236](https://issues.redhat.com/browse/CNV-56236): fix cudn modal form titles [#219](https://github.com/openshift/networking-console-plugin/pull/219)
* [CNV-56336](https://issues.redhat.com/browse/CNV-56336): fix ipam lifecycle with new spec [#213](https://github.com/openshift/networking-console-plugin/pull/213)
* [CNV-56076](https://issues.redhat.com/browse/CNV-56076): create cudn from empty state [#211](https://github.com/openshift/networking-console-plugin/pull/211)
* Fix nads with no label [#207](https://github.com/openshift/networking-console-plugin/pull/207)
* [OCPBUGS-49681](https://issues.redhat.com/browse/OCPBUGS-49681): Fix weight width [#205](https://github.com/openshift/networking-console-plugin/pull/205)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/9f60c8a135fbc130c516ed25da80156a539327e7...d9f7f31c78c4f4eeee734936cd814ab0542e4ad0)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/7d0cb735f3e86c0828821cf54f8a40c74d9232aa)

* [OCPBUGS-47268](https://issues.redhat.com/browse/OCPBUGS-47268): fixing CVE-2024-45338 [#91](https://github.com/openshift/machine-api-provider-nutanix/pull/91)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/9c2ff5e75240902a64b13aabbd39c0ae7b970473...7d0cb735f3e86c0828821cf54f8a40c74d9232aa)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/2575ff417406ea6680aff0de6efb524dbbe2b8d2)

* [OCPBUGS-49847](https://issues.redhat.com/browse/OCPBUGS-49847): Prevent storage layer retries for methods with side effects. [#129](https://github.com/openshift/oauth-apiserver/pull/129)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/afe74a0a2f6b4044b6c71feb3bee72ac9380cade...2575ff417406ea6680aff0de6efb524dbbe2b8d2)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/cbd44ad9f0e433d32ff16a2691c6278298afe89a)

* [OCPBUGS-48332](https://issues.redhat.com/browse/OCPBUGS-48332): Update dependencies to address CVE-2024-24786 [#312](https://github.com/openshift/oauth-proxy/pull/312)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/2957f139b4a9982163e4ee76fdc7c532669b6b9f...cbd44ad9f0e433d32ff16a2691c6278298afe89a)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/c6ec6e36092ff22d2a248deec06b32cb3257d621)

* [OCPBUGS-52969](https://issues.redhat.com/browse/OCPBUGS-52969): remove TechPreview mentions of v2 in --help (#1114) [#1114](https://github.com/openshift/oc-mirror/pull/1114)
* [OCPBUGS-52588](https://issues.redhat.com/browse/OCPBUGS-52588): fix: error when no related image was found (#1106) [#1106](https://github.com/openshift/oc-mirror/pull/1106)
* [CLID-325](https://issues.redhat.com/browse/CLID-325): adds cpu and memory profiling (#1103) [#1103](https://github.com/openshift/oc-mirror/pull/1103)
* fixes CVE-2024-0406 (#1101) [#1101](https://github.com/openshift/oc-mirror/pull/1101)
* v2: disable spinners when not running in a tty (#1082) [#1082](https://github.com/openshift/oc-mirror/pull/1082)
* [OCPBUGS-49990](https://issues.redhat.com/browse/OCPBUGS-49990): v2/release: error out for kubevirt/graph image errors (#1081) [#1081](https://github.com/openshift/oc-mirror/pull/1081)
* [OCPBUGS-50963](https://issues.redhat.com/browse/OCPBUGS-50963): v2: don't clean cluster resources on dry-run mode (#1091) [#1091](https://github.com/openshift/oc-mirror/pull/1091)
* [OCPBUGS-49991](https://issues.redhat.com/browse/OCPBUGS-49991): fixes bundle related images being skipped (#1074) [#1074](https://github.com/openshift/oc-mirror/pull/1074)
* v2/cli: always stop local registry and close registry.log (#1090) [#1090](https://github.com/openshift/oc-mirror/pull/1090)
* [OCPBUGS-44103](https://issues.redhat.com/browse/OCPBUGS-44103): bump oc fork version (#1089) [#1089](https://github.com/openshift/oc-mirror/pull/1089)
* [OCPBUGS-50685](https://issues.redhat.com/browse/OCPBUGS-50685): fixes the code to make the spinner trigger after semaphore is released (#1079) [#1079](https://github.com/openshift/oc-mirror/pull/1079)
* [OCPBUGS-50503](https://issues.redhat.com/browse/OCPBUGS-50503): oc-mirror fails with error `unknown image: reference name is empty` (#1075) [#1075](https://github.com/openshift/oc-mirror/pull/1075)
* [OCPBUGS-49899](https://issues.redhat.com/browse/OCPBUGS-49899): v2/cli: share common flag options (#1067) [#1067](https://github.com/openshift/oc-mirror/pull/1067)
* [OCPBUGS-49723](https://issues.redhat.com/browse/OCPBUGS-49723): v2/clusterresources: remove ClusterCatalog namespace (#1059) [#1059](https://github.com/openshift/oc-mirror/pull/1059)
* [OCPBUGS-49798](https://issues.redhat.com/browse/OCPBUGS-49798): exposes the parallel-layers flag (#1066) [#1066](https://github.com/openshift/oc-mirror/pull/1066)
* [OCPBUGS-49730](https://issues.redhat.com/browse/OCPBUGS-49730): fixes the infinite loop when no images to mirror (#1064) [#1064](https://github.com/openshift/oc-mirror/pull/1064)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/eb818d4c5bea5ac4d42242bac3b2ef11005eb5ad...c6ec6e36092ff22d2a248deec06b32cb3257d621)


### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/fa0280c39bd3e20e3e2c3a3c6277051a4f81ba5b)

* UPSTREAM: 502: Upgrade golang.org/x/net (#502) [#502](https://github.com/openshift/operator-framework-catalogd/pull/502)
* UPSTREAM: &lt;drop&gt;: Separate CA configuration for pulls vs catalogd services (#1673) [#1673](https://github.com/openshift/operator-framework-catalogd/pull/1673)
* UPSTREAM: &lt;drop&gt;: Revert "UPSTREAM: &lt;drop&gt;: Separate CA configuration for pulls vs catalogd services (#1673)" [#1673](https://github.com/openshift/operator-framework-catalogd/pull/1673)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/ab7ec240dd7675d7fb0416487adf9d7e096d6421...fa0280c39bd3e20e3e2c3a3c6277051a4f81ba5b)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/481e275e3316037c9d6eec441ec7a5e9d85f4f90)

* UPSTREAM: &lt;drop&gt;: Separate CA configuration for pulls vs catalogd services (#1673) [#1673](https://github.com/openshift/operator-framework-operator-controller/pull/1673)
* UPSTREAM: &lt;drop&gt;: Add support for SSL env vars to cert pool watcher (#1672) [#1672](https://github.com/openshift/operator-framework-operator-controller/pull/1672)
* UPSTREAM: &lt;drop&gt;: Revert "Add support for SSL env vars to cert pool watcher (#1672)" [#1672](https://github.com/openshift/operator-framework-operator-controller/pull/1672)
* UPSTREAM: &lt;drop&gt;: Revert "Separate CA configuration for pulls vs catalogd services (#1673)" [#1673](https://github.com/openshift/operator-framework-operator-controller/pull/1673)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/859b4d2ed92e29ef3a380f65066ecc4511cec6ef...481e275e3316037c9d6eec441ec7a5e9d85f4f90)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/1872fbf5967acd6485589c339ac8cb6bd156ad72)

* [OCPBUGS-52312](https://issues.redhat.com/browse/OCPBUGS-52312): Skip blocked registry check for registries with mirrors [#498](https://github.com/openshift/openshift-apiserver/pull/498)
* [OCPBUGS-49848](https://issues.redhat.com/browse/OCPBUGS-49848): Prevent storage layer retries for methods with side effects. [#496](https://github.com/openshift/openshift-apiserver/pull/496)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/775f6a1596b3971526db52a70e11d70e044896d5...1872fbf5967acd6485589c339ac8cb6bd156ad72)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/cc44b486ea91015a30946029b3a0be3af49ea789)

* [OCPBUGS-53108](https://issues.redhat.com/browse/OCPBUGS-53108): Ensure that PSA label is latest instead of pinning versions [#983](https://github.com/openshift/operator-framework-olm/pull/983)
* [OCPBUGS-53040](https://issues.redhat.com/browse/OCPBUGS-53040): add missing pod disruption reasons to isPodDead [#981](https://github.com/openshift/operator-framework-olm/pull/981)
* [OCPBUGS-50830](https://issues.redhat.com/browse/OCPBUGS-50830), [OCPBUGS-50832](https://issues.redhat.com/browse/OCPBUGS-50832), [OCPBUGS-50836](https://issues.redhat.com/browse/OCPBUGS-50836): Bump github.com/distribution/distribution/v3 [#965](https://github.com/openshift/operator-framework-olm/pull/965)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/182471a8d72ee38d2ff82ce44db6903e66c4b22b...cc44b486ea91015a30946029b3a0be3af49ea789)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/9ee02a6318a9578ece5e6a89dffea4f7e18cc15a)

* [OCPBUGS-53149](https://issues.redhat.com/browse/OCPBUGS-53149): Ensure that PSA label is latest instead of pinning versions [#601](https://github.com/operator-framework/operator-marketplace/pull/601)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/5a1e906724ed6d88161f8faaa90e4fe447689725...9ee02a6318a9578ece5e6a89dffea4f7e18cc15a)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/799f96146c2056a50ae8252a87c03de1cc698f13)

* [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710): DownStream Merge Sync from 4.19 [02-13-2025] [#2470](https://github.com/openshift/ovn-kubernetes/pull/2470)
* [OCPBUGS-50513](https://issues.redhat.com/browse/OCPBUGS-50513), [OCPBUGS-50514](https://issues.redhat.com/browse/OCPBUGS-50514): Downstream Merge 7th Feb 2025 [#2449](https://github.com/openshift/ovn-kubernetes/pull/2449)
* [OCPBUGS-49851](https://issues.redhat.com/browse/OCPBUGS-49851): Bump OVN to 24.09.2-14 for FDP-1131 [#2448](https://github.com/openshift/ovn-kubernetes/pull/2448)
* [OCPBUGS-48337](https://issues.redhat.com/browse/OCPBUGS-48337), [OCPBUGS-49821](https://issues.redhat.com/browse/OCPBUGS-49821), [OCPBUGS-49856](https://issues.redhat.com/browse/OCPBUGS-49856), [OCPBUGS-49857](https://issues.redhat.com/browse/OCPBUGS-49857): [DownstreamMerge] 2-4-25 [#2447](https://github.com/openshift/ovn-kubernetes/pull/2447)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/5086614cde9fbec2cce4c8184ea407adaef5c2a3...799f96146c2056a50ae8252a87c03de1cc698f13)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/74987748a60f14816975fa1070ce485393a38f64)

* [OCPBUGS-52565](https://issues.redhat.com/browse/OCPBUGS-52565): Bump openshift/prometheus-operator to v0.78.2 [#327](https://github.com/openshift/prometheus-operator/pull/327)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/ede3c1406e70f359c76c1403a2b14bc60ad386bf...74987748a60f14816975fa1070ce485393a38f64)


### [tests](https://github.com/openshift/origin/tree/68b6d984eccbfe3ffd58099f618632ac48915a5b)

* [OCPBUGS-52579](https://issues.redhat.com/browse/OCPBUGS-52579): Use payload pullspec for image info test [#29587](https://github.com/openshift/origin/pull/29587)
* [OCPBUGS-51295](https://issues.redhat.com/browse/OCPBUGS-51295): Rely on unstructured for update status instead of type conversion [#29564](https://github.com/openshift/origin/pull/29564)
* [OCPBUGS-50929](https://issues.redhat.com/browse/OCPBUGS-50929): Update to Kubernetes v1.31.6 [#29548](https://github.com/openshift/origin/pull/29548)
* [OCPBUGS-48389](https://issues.redhat.com/browse/OCPBUGS-48389): move initialization of OC to test instead of package level [#29472](https://github.com/openshift/origin/pull/29472)
* [OCPBUGS-50921](https://issues.redhat.com/browse/OCPBUGS-50921): managed services: add hcp crd to unstable list [#29545](https://github.com/openshift/origin/pull/29545)
* [OCPBUGS-50930](https://issues.redhat.com/browse/OCPBUGS-50930): managed services: add known image check for gcp [#29547](https://github.com/openshift/origin/pull/29547)
* [OCPBUGS-48474](https://issues.redhat.com/browse/OCPBUGS-48474): Replace RunHostCmd with Exec function to censor bearer token being exposed [#29377](https://github.com/openshift/origin/pull/29377)
* [OCPBUGS-49687](https://issues.redhat.com/browse/OCPBUGS-49687): Add Readiness Probe to Router Status Tests [#29513](https://github.com/openshift/origin/pull/29513)
* [OCPBUGS-49821](https://issues.redhat.com/browse/OCPBUGS-49821): Allows for backwards compatibility with upcoming network name change [#29527](https://github.com/openshift/origin/pull/29527)
* [OCPBUGS-48403](https://issues.redhat.com/browse/OCPBUGS-48403): Bring groupsnapshot beta feature to 4.18 [#29427](https://github.com/openshift/origin/pull/29427)
* [Full changelog](https://github.com/openshift/origin/compare/4b725c23bcff735e5c257c56afd08e8b10c4b541...68b6d984eccbfe3ffd58099f618632ac48915a5b)


### [thanos](https://github.com/openshift/thanos/tree/f1599f65c5fd652150821ae954d563747a649b53)

* [OCPBUGS-52945](https://issues.redhat.com/browse/OCPBUGS-52945): Update Go version in go.mod to 1.22.0 [#159](https://github.com/openshift/thanos/pull/159)
* [Full changelog](https://github.com/openshift/thanos/compare/314589cf9b4e86507634ab3406deb08402fa7af9...f1599f65c5fd652150821ae954d563747a649b53)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/b8ed572d70acddd695a769fac3d1ba93f168fd05)

* [OCPBUGS-50638](https://issues.redhat.com/browse/OCPBUGS-50638): fix panic when vcenter address is incorrect [#293](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/293)
* [OCPBUGS-49863](https://issues.redhat.com/browse/OCPBUGS-49863): Set reconcile-sync to 10 minute for ListVolume [#290](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/290)
* [OCPBUGS-48706](https://issues.redhat.com/browse/OCPBUGS-48706): Escape backslash in vCenter username [#282](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/282)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/73b303ebfdbb31da4879b1ae534cadbb16225135...b8ed572d70acddd695a769fac3d1ba93f168fd05)