# 4.19.0-okd-scos.2

Created: 2025-06-02 19:22:06 +0000 UTC

Image Digest: `sha256:12fea3266bf3e34044d9e9e73c8ebd1019f1e0fd902617deca5be1fdd06db37f`

Promoted from registry.ci.openshift.org/origin/release-scos:4.19.0-0.okd-scos-2025-05-31-105934


## Changes from 4.19.0-okd-scos.0

### Components

* Kubectl 1.32.1
* Kubernetes upgraded from 1.32.4 to 1.32.5
* Kubernetes Tests upgraded from 1.32.4 to 1.32.5
* CentOS Stream CoreOS upgraded from 9.0.20250507-0 to 9.0.20250515-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| OpenShiftPodSecurityAdmission <br/> (0 tests)| Disabled<br/>(Changed)| Disabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/0c4ca57fb2b169525ac58e7020883b1a9b70b023)

* [OCPBUGS-56810](https://issues.redhat.com/browse/OCPBUGS-56810): bump appliance to 936210 [#99](https://github.com/openshift/agent-installer-utils/pull/99)
* [OCPBUGS-56759](https://issues.redhat.com/browse/OCPBUGS-56759): ISOBuilder- Remove default password for nodes [#100](https://github.com/openshift/agent-installer-utils/pull/100)
* [OCPBUGS-56490](https://issues.redhat.com/browse/OCPBUGS-56490): Add operator CRs post-install in OVE build script [#95](https://github.com/openshift/agent-installer-utils/pull/95)
* [OCPBUGS-56216](https://issues.redhat.com/browse/OCPBUGS-56216): OVE builder: Remove RHEL9 image from additionalImages [#92](https://github.com/openshift/agent-installer-utils/pull/92)
* [OCPBUGS-56116](https://issues.redhat.com/browse/OCPBUGS-56116): configure the channel for each OLM operators [#90](https://github.com/openshift/agent-installer-utils/pull/90)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/d7d4c451dfc2dc4365847ab2007390844c630d5d...0c4ca57fb2b169525ac58e7020883b1a9b70b023)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/802452086a937fc7ac01e26542a05c697b363933)

* [OCPBUGS-55998](https://issues.redhat.com/browse/OCPBUGS-55998): Update manifests to remove reliance on v1beta1 admission registration [#552](https://github.com/openshift/cluster-api-provider-aws/pull/552)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/005a7656f03fa9b993bceffdc85ff5918e16111a...802452086a937fc7ac01e26542a05c697b363933)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/b61e357915000a5f6dc50aad2cabeb1ac55e2e3c)

* [OCPBUGS-56527](https://issues.redhat.com/browse/OCPBUGS-56527): openstack-cinder: Set --with-topology flag for node driver also [#384](https://github.com/openshift/csi-operator/pull/384)
* [Full changelog](https://github.com/openshift/csi-operator/compare/6bb12490780bbabc88b82bfe51197a961e4e722a...b61e357915000a5f6dc50aad2cabeb1ac55e2e3c)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/249e31eba655572a52f44c6065bc251341544883)

* [OCPBUGS-56653](https://issues.redhat.com/browse/OCPBUGS-56653): Fix failure when attempting to modify immutable availabilitySet [#154](https://github.com/openshift/machine-api-provider-azure/pull/154)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/dd3ca5704052ab83cc829e9be33b127d0d764a2a...249e31eba655572a52f44c6065bc251341544883)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/741cd11fa65540a4ec7ef046afdc1e77c1439c75)

* [OCPBUGS-56826](https://issues.redhat.com/browse/OCPBUGS-56826): update the punctuation [#9755](https://github.com/openshift/installer/pull/9755)
* [OCPBUGS-56372](https://issues.redhat.com/browse/OCPBUGS-56372): Added better logging for vSphere destroy [#9719](https://github.com/openshift/installer/pull/9719)
* [OCPBUGS-56832](https://issues.redhat.com/browse/OCPBUGS-56832): add unit tests for vsphere VIPS/machinenetworks population [#9757](https://github.com/openshift/installer/pull/9757)
* [OCPBUGS-56811](https://issues.redhat.com/browse/OCPBUGS-56811): Update Control Plane replica validation for Single Node OpenShift [#9756](https://github.com/openshift/installer/pull/9756)
* [MGMT-20702](https://issues.redhat.com/browse/MGMT-20702), [OCPBUGS-56762](https://issues.redhat.com/browse/OCPBUGS-56762): Avoid duplicate machine networks [#9745](https://github.com/openshift/installer/pull/9745)
* [OCPBUGS-55995](https://issues.redhat.com/browse/OCPBUGS-55995): [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field [#9701](https://github.com/openshift/installer/pull/9701)
* [OCPBUGS-56712](https://issues.redhat.com/browse/OCPBUGS-56712): add the VM types that the install pass into the tested_instance_types [#9730](https://github.com/openshift/installer/pull/9730)
* [OCPBUGS-56646](https://issues.redhat.com/browse/OCPBUGS-56646): Update RHCOS 4.19 bootimage metadata to 9.6.20250523-0 [#9742](https://github.com/openshift/installer/pull/9742)
* [OCPBUGS-56595](https://issues.redhat.com/browse/OCPBUGS-56595): [release-4.19] OCPBUGS-56567: default Azure to create VM user-assigned identities [#9735](https://github.com/openshift/installer/pull/9735)
* [OCPBUGS-55068](https://issues.redhat.com/browse/OCPBUGS-55068): Update RHCOS 4.19 bootimage metadata to 9.6.20250513-0 [#9721](https://github.com/openshift/installer/pull/9721)
* [OCPBUGS-56006](https://issues.redhat.com/browse/OCPBUGS-56006): [release-4.19] CORS-3634, CORS-3771, CORS-3772: Azure doc: add support for Lsv4, Lasv4, Dxv6, NDs and NV series [#9702](https://github.com/openshift/installer/pull/9702)
* [OKD-251](https://issues.redhat.com/browse/OKD-251): Update SCOS 4.19 bootimage metadata to 9.0.20250510-0 [#9714](https://github.com/openshift/installer/pull/9714)
* [OCPBUGS-56061](https://issues.redhat.com/browse/OCPBUGS-56061): fixes to get shellcheck to pass [#9705](https://github.com/openshift/installer/pull/9705)
* [OCPBUGS-56140](https://issues.redhat.com/browse/OCPBUGS-56140): apply fixes for yaml-lint errors [#9710](https://github.com/openshift/installer/pull/9710)
* [OCPBUGS-56075](https://issues.redhat.com/browse/OCPBUGS-56075): Pre-create password files for agent installer OVE [#9707](https://github.com/openshift/installer/pull/9707)
* [Full changelog](https://github.com/openshift/installer/compare/ac4fce322037a5894cd07ee7304a89f80e54739b...741cd11fa65540a4ec7ef046afdc1e77c1439c75)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/aa46a5a6144b865dbcdb8af35d13a790377542d4)

* [OCPBUGS-56026](https://issues.redhat.com/browse/OCPBUGS-56026): Redfish: correctly handle missing system ID [#415](https://github.com/openshift/baremetal-operator/pull/415)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/c8dc798c3de5e704c9f88c0c76f42739631882b0...aa46a5a6144b865dbcdb8af35d13a790377542d4)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/8f1c8b5768cdff8885ddef28e10de2c1928daf92)

* [OCPBUGS-56511](https://issues.redhat.com/browse/OCPBUGS-56511): Replace colon to hypen in the filename while extracting tar on Windows [#2024](https://github.com/openshift/oc/pull/2024)
* [OCPBUGS-56203](https://issues.redhat.com/browse/OCPBUGS-56203): Adding sos.conf file for default sos config into the tools image [#2020](https://github.com/openshift/oc/pull/2020)
* [Full changelog](https://github.com/openshift/oc/compare/e468aa68e754e22997f526fcdbbd470387ff5e33...8f1c8b5768cdff8885ddef28e10de2c1928daf92)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/20af0c3e9e089573e9528c0a4d41d5f26255c3f6)

* [OCPBUGS-55903](https://issues.redhat.com/browse/OCPBUGS-55903): Render: configure proxy on bootstrap static pod [#857](https://github.com/openshift/cloud-credential-operator/pull/857)
* [OCPBUGS-56054](https://issues.redhat.com/browse/OCPBUGS-56054): golang.org/x/net v0.38.0 [#858](https://github.com/openshift/cloud-credential-operator/pull/858)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/9c3346aea5a7f9a38713c09d11605b8ee825446c...20af0c3e9e089573e9528c0a4d41d5f26255c3f6)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/479f0c4edcfc5bc5706600070e8b8c142e59a5d4)

* [OCPBUGS-55998](https://issues.redhat.com/browse/OCPBUGS-55998): Regenerate manifests to drop usage of v1beta1 admissionregistration [#237](https://github.com/openshift/cluster-api/pull/237)
* [Full changelog](https://github.com/openshift/cluster-api/compare/7e2de8d31922c9e9a1bf93dba1816b2d65a2df3d...479f0c4edcfc5bc5706600070e8b8c142e59a5d4)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/ee69183571b592073a7163c5aef34d1a970a8c19)

* [OCPBUGS-56776](https://issues.redhat.com/browse/OCPBUGS-56776): fix: ensure CAPI machineset is created not paused when authoritative [#304](https://github.com/openshift/cluster-capi-operator/pull/304)
* [OCPBUGS-56714](https://issues.redhat.com/browse/OCPBUGS-56714): fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller [#305](https://github.com/openshift/cluster-capi-operator/pull/305)
* [OCPBUGS-56633](https://issues.redhat.com/browse/OCPBUGS-56633): fix: watch CAPI resources in the migration controllers [#303](https://github.com/openshift/cluster-capi-operator/pull/303)
* [OCPBUGS-56722](https://issues.redhat.com/browse/OCPBUGS-56722): MachineSet deletion logic [#302](https://github.com/openshift/cluster-capi-operator/pull/302)
* [OCPBUGS-56105](https://issues.redhat.com/browse/OCPBUGS-56105), [OCPCLOUD-2893](https://issues.redhat.com/browse/OCPCLOUD-2893): Add related objects to must-gather config [#296](https://github.com/openshift/cluster-capi-operator/pull/296)
* [OCPBUGS-56055](https://issues.redhat.com/browse/OCPBUGS-56055): fix: machine: propagate non-authoritative deletion [#294](https://github.com/openshift/cluster-capi-operator/pull/294)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/72ad6eb01a1ffd8deb49e83f74caa7aed8ae1eff...ee69183571b592073a7163c5aef34d1a970a8c19)


### [cluster-config-api](https://github.com/openshift/api/tree/97812373b6b447ff6b55d3e2625b4f62aff1a16f)

* [OCPBUGS-56773](https://issues.redhat.com/browse/OCPBUGS-56773): disable psa for 4.19 [#2346](https://github.com/openshift/api/pull/2346)
* [OCPBUGS-56761](https://issues.redhat.com/browse/OCPBUGS-56761): Revert v1alpha1 removal [#2345](https://github.com/openshift/api/pull/2345)
* [OCPBUGS-56407](https://issues.redhat.com/browse/OCPBUGS-56407): Fix validation for Resource field in MOSB API [#2329](https://github.com/openshift/api/pull/2329)
* [Full changelog](https://github.com/openshift/api/compare/d22fca85e3b9f77f0cf2b43759a5ff927e605f57...97812373b6b447ff6b55d3e2625b4f62aff1a16f)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/fdefa0ae9d888d5a76d23508de8e1a58a1872d54)

* [OCPBUGS-56109](https://issues.redhat.com/browse/OCPBUGS-56109): adjust alerts according to platform [#1423](https://github.com/openshift/cluster-etcd-operator/pull/1423)
* [OCPBUGS-55691](https://issues.redhat.com/browse/OCPBUGS-55691): Remove 'meta' keyword from pcs resource create command [#1420](https://github.com/openshift/cluster-etcd-operator/pull/1420)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/145959693ebe5a4412c468f4ec5cd4163cb68acc...fdefa0ae9d888d5a76d23508de8e1a58a1872d54)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/328419e7a2aba288a3405e76449f84d42b1952b3)

* [OCPBUGS-53872](https://issues.redhat.com/browse/OCPBUGS-53872): bump github.com/golang-jwt/jwt [#1214](https://github.com/openshift/cluster-image-registry-operator/pull/1214)
* [OCPBUGS-56363](https://issues.redhat.com/browse/OCPBUGS-56363): bump golang.org/x/oauth2 [#1207](https://github.com/openshift/cluster-image-registry-operator/pull/1207)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/85ac017f7c393b18696bf77a6e6415d05418dd0b...328419e7a2aba288a3405e76449f84d42b1952b3)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/6d54169d4c6643ae9b6ff81b3a21b929934062fa)

* [OCPBUGS-56213](https://issues.redhat.com/browse/OCPBUGS-56213): Check capabilities before watching OLM resource [#1233](https://github.com/openshift/cluster-ingress-operator/pull/1233)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/2e6bd66d4ad11f58b8dea2677a94751bb372dca5...6d54169d4c6643ae9b6ff81b3a21b929934062fa)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/34bd8a7860802d310b4b0c124dc7975b6fa52773)

* [OCPBUGS-56160](https://issues.redhat.com/browse/OCPBUGS-56160): Change validity / refresh for some certs which should not be affected by dev cycle rotation change [#1841](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1841)
* [OCPBUGS-56266](https://issues.redhat.com/browse/OCPBUGS-56266): SCC: add hostmount-anyuid-v2 [#1844](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1844)
* [OCPBUGS-55709](https://issues.redhat.com/browse/OCPBUGS-55709): bump library-go to bring in updated audit policies [#1840](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1840)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/23b5175aa2d5b8f7364ef4aed1966745d6735c2a...34bd8a7860802d310b4b0c124dc7975b6fa52773)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/06f6aa6e22eadcc38d57f5786c50ceef38bb4d5e)

* [OCPBUGS-56771](https://issues.redhat.com/browse/OCPBUGS-56771): Fix ImplicitlyEnabledCapabilities [#1199](https://github.com/openshift/cluster-version-operator/pull/1199)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/09edded491b9b591445a3502cb719403eb5f52e4...06f6aa6e22eadcc38d57f5786c50ceef38bb4d5e)


### [console](https://github.com/openshift/console/tree/94c7d7c00db644607ecd97459add850e5247a309)

* [OCPBUGS-56149](https://issues.redhat.com/browse/OCPBUGS-56149): Refactor Kebab+ActionsMenu to use PF [#15051](https://github.com/openshift/console/pull/15051)
* [OCPBUGS-56413](https://issues.redhat.com/browse/OCPBUGS-56413): [knative] Self-provisioner user can not access or create event sources via ODC [#15067](https://github.com/openshift/console/pull/15067)
* [OCPBUGS-55941](https://issues.redhat.com/browse/OCPBUGS-55941), [OCPBUGS-56107](https://issues.redhat.com/browse/OCPBUGS-56107): get `go mod tidy` to pass, bump Console Helm dependencies to 3.17.3 [#15032](https://github.com/openshift/console/pull/15032)
* [OCPBUGS-56362](https://issues.redhat.com/browse/OCPBUGS-56362): improve description of the custom logos CLI args [#15061](https://github.com/openshift/console/pull/15061)
* [OCPBUGS-55979](https://issues.redhat.com/browse/OCPBUGS-55979): fix alignment of Getting Started item icons [#15040](https://github.com/openshift/console/pull/15040)
* [OCPBUGS-55929](https://issues.redhat.com/browse/OCPBUGS-55929): Sample segment sessions [#15031](https://github.com/openshift/console/pull/15031)
* NO-JIRA: Update plugin SDK docs [#15074](https://github.com/openshift/console/pull/15074)
* [OCPBUGS-55987](https://issues.redhat.com/browse/OCPBUGS-55987): Fix impersonate group action [#15041](https://github.com/openshift/console/pull/15041)
* [OCPBUGS-55976](https://issues.redhat.com/browse/OCPBUGS-55976): Add patternfly/react-topology to shared modules list of dynamic plugin sdk [#15039](https://github.com/openshift/console/pull/15039)
* [OCPBUGS-56077](https://issues.redhat.com/browse/OCPBUGS-56077): remove 60 day alert from cluster update modal [#15047](https://github.com/openshift/console/pull/15047)
* [Full changelog](https://github.com/openshift/console/compare/95ac1dc4492962bfd9db2e73a0e9dae33cc420b2...94c7d7c00db644607ecd97459add850e5247a309)


### [console-operator](https://github.com/openshift/console-operator/tree/0cb29273c8b1efec6ca591d5259a69d34e5ce51f)

* [OCPBUGS-56761](https://issues.redhat.com/browse/OCPBUGS-56761): Revert v1alpha1 removal [#991](https://github.com/openshift/console-operator/pull/991)
* [OCPBUGS-55716](https://issues.redhat.com/browse/OCPBUGS-55716): Fix issue where console operator orphans custom logo configmaps in openshift-console namespace [#985](https://github.com/openshift/console-operator/pull/985)
* [OCPBUGS-55842](https://issues.redhat.com/browse/OCPBUGS-55842): Lift FeatureGate by bumping openshift/api [#986](https://github.com/openshift/console-operator/pull/986)
* [Full changelog](https://github.com/openshift/console-operator/compare/b6949a5f482005f25095b0c0dc68460e3873dffd...0cb29273c8b1efec6ca591d5259a69d34e5ce51f)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/c736cbfdc99bd2f3ed955fa6ebd3568984e57c87)

* [OCPBUGS-56027](https://issues.redhat.com/browse/OCPBUGS-56027): [cinder-csi-plugin] Don't report topology capability when --with-topology=False [#323](https://github.com/openshift/cloud-provider-openstack/pull/323)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/68986f5ba00648402ec4ca9da7303ff509689ab1...c736cbfdc99bd2f3ed955fa6ebd3568984e57c87)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/fadb78e720779ed1b29f32170f3e9dd32584a7e6)

* [OCPBUGS-56082](https://issues.redhat.com/browse/OCPBUGS-56082): UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver [#2297](https://github.com/openshift/kubernetes/pull/2297)
* [OCPBUGS-56437](https://issues.redhat.com/browse/OCPBUGS-56437): Bump 4.19 1.32.5 [#2304](https://github.com/openshift/kubernetes/pull/2304)
* [OCPBUGS-56256](https://issues.redhat.com/browse/OCPBUGS-56256): UPSTREAM: 131495: Handle unsupported node expansion for RWX volumes [#2302](https://github.com/openshift/kubernetes/pull/2302)
* [OCPBUGS-56193](https://issues.redhat.com/browse/OCPBUGS-56193): UPSTREAM: 131236: RWX tests should create RWX volumes [#2301](https://github.com/openshift/kubernetes/pull/2301)
* [OCPBUGS-55895](https://issues.redhat.com/browse/OCPBUGS-55895): Fix node expansion on older kubelets [#2289](https://github.com/openshift/kubernetes/pull/2289)
* [Full changelog](https://github.com/openshift/kubernetes/compare/f6cfe0c54a1fa9314c65e30c613df641c7226ed0...fadb78e720779ed1b29f32170f3e9dd32584a7e6)


### [hypershift](https://github.com/openshift/hypershift/tree/dec319950a1f662305191f981ff087097312fe33)

* [OCPBUGS-56792](https://issues.redhat.com/browse/OCPBUGS-56792): Fix CatalogSource image check when unauthorized [#6198](https://github.com/openshift/hypershift/pull/6198)
* [OCPBUGS-56910](https://issues.redhat.com/browse/OCPBUGS-56910): util/version: Add Version420 [#6215](https://github.com/openshift/hypershift/pull/6215)
* [OCPBUGS-56910](https://issues.redhat.com/browse/OCPBUGS-56910): Move EnsurePSANotPrivileged to AtLeast(t, Version420) [#6212](https://github.com/openshift/hypershift/pull/6212)
* [CNTRLPLANE-831](https://issues.redhat.com/browse/CNTRLPLANE-831): feat(konflux): add arm64 builds to cpo pipeline [#6182](https://github.com/openshift/hypershift/pull/6182)
* [OCPBUGS-56777](https://issues.redhat.com/browse/OCPBUGS-56777): Disable PSA enforcement in 4.19 hosted cluster [#6201](https://github.com/openshift/hypershift/pull/6201)
* [OCPBUGS-56458](https://issues.redhat.com/browse/OCPBUGS-56458): switch termination message policy to TerminationMessageFallbackToLogsOnError for debugability [#6170](https://github.com/openshift/hypershift/pull/6170)
* [OCPBUGS-56562](https://issues.redhat.com/browse/OCPBUGS-56562): Do not validate OCP API Server SANS if PKI reconciliation is disabled [#6178](https://github.com/openshift/hypershift/pull/6178)
* [CNTRLPLANE-831](https://issues.redhat.com/browse/CNTRLPLANE-831): Red Had Konflux control-plane-operator-4-19 intial pipeline [#6181](https://github.com/openshift/hypershift/pull/6181)
* [CNTRLPLANE-916](https://issues.redhat.com/browse/CNTRLPLANE-916): Konflux build pipeline service account migration [#6089](https://github.com/openshift/hypershift/pull/6089)
* [CNTRLPLANE-915](https://issues.redhat.com/browse/CNTRLPLANE-915): chore(deps): update konflux references [#6139](https://github.com/openshift/hypershift/pull/6139)
* [OCPBUGS-55789](https://issues.redhat.com/browse/OCPBUGS-55789): [release-4.19] Update KAS structured authentication configuration logic to use new uid and extras fields [#6121](https://github.com/openshift/hypershift/pull/6121)
* [OCPBUGS-56036](https://issues.redhat.com/browse/OCPBUGS-56036): add multi-arch build for MCE 2.9 [#6145](https://github.com/openshift/hypershift/pull/6145)
* [OCPBUGS-55693](https://issues.redhat.com/browse/OCPBUGS-55693): Add support for registry root entry only in the IDMS/ICSP [#6131](https://github.com/openshift/hypershift/pull/6131)
* [Full changelog](https://github.com/openshift/hypershift/compare/bf350e52e7b5e1e65ed29feb0640c6f82f876561...dec319950a1f662305191f981ff087097312fe33)


### [insights-operator](https://github.com/openshift/insights-operator/tree/fa84a57ac4c8c47cb70dc07c4e9c812aaee98e49)

* feat: ensure the etc-entitlement-pki secret exists (#1087) [#1087](https://github.com/openshift/insights-operator/pull/1087)
* [Full changelog](https://github.com/openshift/insights-operator/compare/b1e0f8fce485de56a28f27793fa2bcec87a72771...fa84a57ac4c8c47cb70dc07c4e9c812aaee98e49)


### [ironic](https://github.com/openshift/ironic-image/tree/fe31e71dbbbd24c77adaecdc3d4d895375a611a5)

* Bug OCPBUGS-56639: Bump sushy to include SuperMicro Cd boot device string workaround [#660](https://github.com/openshift/ironic-image/pull/660)
* [Full changelog](https://github.com/openshift/ironic-image/compare/8a2091a6cfd25a6bc91b0714de25af904cc733ee...fe31e71dbbbd24c77adaecdc3d4d895375a611a5)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/5b5afbd42650dacfc34d03f599ebd980d55e10e6)

* [OCPBUGS-56042](https://issues.redhat.com/browse/OCPBUGS-56042): collect the entire journal from the host [#188](https://github.com/openshift/ironic-agent-image/pull/188)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/670323f3bb7d01a681a4c583d9540006ec8b871e...5b5afbd42650dacfc34d03f599ebd980d55e10e6)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/5eb6a3610eed1f873926eaf4db17669cdb308a1c)

* [OCPBUGS-56227](https://issues.redhat.com/browse/OCPBUGS-56227): correct aws kms permissions [#1371](https://github.com/openshift/machine-api-operator/pull/1371)
* [OCPBUGS-55715](https://issues.redhat.com/browse/OCPBUGS-55715): Revert "Added skip for when config not multi nic" [#1366](https://github.com/openshift/machine-api-operator/pull/1366)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/79a98238fc57ef28a122a8a3b838759de81b9a09...5eb6a3610eed1f873926eaf4db17669cdb308a1c)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/bccdc7e7382c5958f040769d7ff20ab27ece5bdf)

* [OCPBUGS-56829](https://issues.redhat.com/browse/OCPBUGS-56829): Only update boot disks during GCP boot image updates [#5088](https://github.com/openshift/machine-config-operator/pull/5088)
* [OCPBUGS-56445](https://issues.redhat.com/browse/OCPBUGS-56445): Boot Image Controller should not degrade when golden configmap is slow to update [#5063](https://github.com/openshift/machine-config-operator/pull/5063)
* [OCPBUGS-56632](https://issues.redhat.com/browse/OCPBUGS-56632): daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers [#5076](https://github.com/openshift/machine-config-operator/pull/5076)
* [OCPBUGS-56035](https://issues.redhat.com/browse/OCPBUGS-56035): Only populate `Status.PinnedImageSets.CurrentGeneration` on valid generation value [#5039](https://github.com/openshift/machine-config-operator/pull/5039)
* [OCPBUGS-56261](https://issues.redhat.com/browse/OCPBUGS-56261): Fix interrupt state to account for failure correctly [#5055](https://github.com/openshift/machine-config-operator/pull/5055)
* [OCPBUGS-56180](https://issues.redhat.com/browse/OCPBUGS-56180): Add hot loop detection in the boot image controller [#5050](https://github.com/openshift/machine-config-operator/pull/5050)
* [OCPBUGS-56263](https://issues.redhat.com/browse/OCPBUGS-56263): scope MCD node listers to current node [#5058](https://github.com/openshift/machine-config-operator/pull/5058)
* [OCPBUGS-56121](https://issues.redhat.com/browse/OCPBUGS-56121): Adapt MCC to use LayeredNodeState and remove LayeredPoolState [#5045](https://github.com/openshift/machine-config-operator/pull/5045)
* [OCPBUGS-56136](https://issues.redhat.com/browse/OCPBUGS-56136): Compare the osImageURLs for OS validation check [#5048](https://github.com/openshift/machine-config-operator/pull/5048)
* [OCPBUGS-56119](https://issues.redhat.com/browse/OCPBUGS-56119): error from generateAndValidateRenderedMachineConfig function can be misleading [#5044](https://github.com/openshift/machine-config-operator/pull/5044)
* [OCPBUGS-56038](https://issues.redhat.com/browse/OCPBUGS-56038): OWNERS: update owners file with current MCO team members [#5040](https://github.com/openshift/machine-config-operator/pull/5040)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/a9859b62f67382ee2042209f5e98b91cb5c45dff...bccdc7e7382c5958f040769d7ff20ab27ece5bdf)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/73a8e79b19fd6f89ff13b760e00d010ffae4c065)

* [OCPBUGS-56422](https://issues.redhat.com/browse/OCPBUGS-56422): "Negative matcher" is checked by default on Create silence page [#415](https://github.com/openshift/monitoring-plugin/pull/415)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/362765260b5b4cbfe29e85aa6e82532ba509f300...73a8e79b19fd6f89ff13b760e00d010ffae4c065)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/e69a044ba8849095880303dee620b62958912e36)

* [OCPBUGS-56185](https://issues.redhat.com/browse/OCPBUGS-56185): [release-4.19] v2: bump containers/common dep to 0.63.0 (#1148) [#1148](https://github.com/openshift/oc-mirror/pull/1148)
* disables the signature verification on operator catalog collection (#1157) [#1157](https://github.com/openshift/oc-mirror/pull/1157)
* [OCPBUGS-56433](https://issues.redhat.com/browse/OCPBUGS-56433): v2/cli: always remove past archives before m2d (#1152) [#1152](https://github.com/openshift/oc-mirror/pull/1152)
* [OCPBUGS-56563](https://issues.redhat.com/browse/OCPBUGS-56563): v2/archive: print unarchive progress (#1158) [#1158](https://github.com/openshift/oc-mirror/pull/1158)
* changes the signature mirroring default to disabled (#1149) [#1149](https://github.com/openshift/oc-mirror/pull/1149)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/c58d7a3565b1446aa5b99509309af4aae5eefa0a...e69a044ba8849095880303dee620b62958912e36)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/18061bfe9586919421ed2bb342d9b326b1002bd7)

* [OCPBUGS-56494](https://issues.redhat.com/browse/OCPBUGS-56494): Fix image reference in TestImageStreamImportQuayIO [#510](https://github.com/openshift/openshift-apiserver/pull/510)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/85f6eb2719a0440565c8b7bf00de954eeb12fdd9...18061bfe9586919421ed2bb342d9b326b1002bd7)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/358b7053a231876cda29cf4d822e3e702389b117)

* [OCPBUGS-56034](https://issues.redhat.com/browse/OCPBUGS-56034): fix(olm): improve error logging for missing olm.managed label (#3558) [#999](https://github.com/openshift/operator-framework-olm/pull/999)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/ec31de865be0c822d967ec8fe563c6eb8c4757e5...358b7053a231876cda29cf4d822e3e702389b117)


### [stream-coreos, stream-coreos-extensions](https://github.com/openshift/os/tree/2acbcb0f9ef2e451f0138f1c33066fa6fa02ae20)

* [OCPBUGS-56278](https://issues.redhat.com/browse/OCPBUGS-56278): extensions: llvm now available in rhel 9.6 and 10 [#1817](https://github.com/openshift/os/pull/1817)
* [Full changelog](https://github.com/openshift/os/compare/be084e2ed8e668592fd6b084a87b5183b0aa546a...2acbcb0f9ef2e451f0138f1c33066fa6fa02ae20)


### [tests](https://github.com/openshift/origin/tree/33fe530740e17ef0332e874544a0f0d153be7e53)

* [OCPBUGS-56886](https://issues.redhat.com/browse/OCPBUGS-56886): Fix bearer token exposure in exit condition as well [#29841](https://github.com/openshift/origin/pull/29841)
* [OCPBUGS-56437](https://issues.redhat.com/browse/OCPBUGS-56437): Update to kubernetes 1.32.5 [#29875](https://github.com/openshift/origin/pull/29875)
* [OCPBUGS-56796](https://issues.redhat.com/browse/OCPBUGS-56796): Skip failing test [release-4.19] [#29865](https://github.com/openshift/origin/pull/29865)
* [OCPBUGS-56045](https://issues.redhat.com/browse/OCPBUGS-56045): OLMv1: Update test bundles [release-4.19] [#29836](https://github.com/openshift/origin/pull/29836)
* [OCPBUGS-56662](https://issues.redhat.com/browse/OCPBUGS-56662): Fix failed etcd test on arbiter ci run [#29826](https://github.com/openshift/origin/pull/29826)
* [OCPBUGS-56399](https://issues.redhat.com/browse/OCPBUGS-56399): fix watch request counts [#29799](https://github.com/openshift/origin/pull/29799)
* [CORENET-5875](https://issues.redhat.com/browse/CORENET-5875), [CORENET-5876](https://issues.redhat.com/browse/CORENET-5876), [OCPBUGS-56000](https://issues.redhat.com/browse/OCPBUGS-56000): Add EgressIP and L2 UDN route advertisements tests [#29777](https://github.com/openshift/origin/pull/29777)
* [OCPBUGS-55897](https://issues.redhat.com/browse/OCPBUGS-55897): bump limits [#29783](https://github.com/openshift/origin/pull/29783)
* [Full changelog](https://github.com/openshift/origin/compare/fca6932b03dca2ea0873ad3946d01b87d3f16760...33fe530740e17ef0332e874544a0f0d153be7e53)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/32b15d87f5fd387dd5d04b96b7250a353240bf92)

* [OCPBUGS-56230](https://issues.redhat.com/browse/OCPBUGS-56230): replace operator client [#183](https://github.com/openshift/vsphere-problem-detector/pull/183)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/a32d32242d23ac22c1c8a5419d7de8583db3fcb9...32b15d87f5fd387dd5d04b96b7250a353240bf92)