# 4.21.0-okd-scos.ec.0

Created: 2025-09-23 14:13:37 +0000 UTC

Image Digest: `sha256:d3aadc3fb1bdd21a36b846d47f8082990c8306a32e27eae02099537a4ecf80c2`

Promoted from registry.ci.openshift.org/origin/release-scos:4.21.0-0.okd-scos-2025-09-22-083455


## Changes from 4.20.0-okd-scos.ec.16

### Components

* Kubectl 1.33.3
* Kubernetes upgraded from 1.33.4 to 1.33.5
* Kubernetes Tests upgraded from 1.33.3 to 1.33.4
* CentOS Stream CoreOS 10.0.20250827-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| InsightsConfigAPI <br/> (0 tests)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed) |
| GCPClusterHostedDNSInstall <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| CBORServingAndStorage <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| ClientsAllowCBOR <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| ClientsPreferCBOR <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| ClusterAPIMachineManagementVSphere <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)|  |   |


### Rebuilt images without code change

* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [467e50fe](https://github.com/openshift/cloud-network-config-controller/commit/467e50feff5a56afbf9ccefc025781c9ccff8eca) `sha256:e8e0b74656219fe49a344e278827a20b7fbbf018ae33757c2bb9da5bd4ba5efa`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [ef99d3d4](https://github.com/openshift/multus-networkpolicy/commit/ef99d3d4cf1a15abfa55ef71b75c0eaa18a791ce) `sha256:be6dd1a247ca54c251d73fd9585c0e7272748df0593dd4fb43479f2ff1799ac2`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/5bfcedfa3fe52e7432482e821d83f7f45e5a70e2)

* NO-ISSUE: [master] Bump OCP versions: 4.13 (#8052) [#8052](https://github.com/openshift/assisted-service/pull/8052)
* [MGMT-21609](https://issues.redhat.com/browse/MGMT-21609): Drop EL8 support in master / release-ocm-2.15 (#8040) [#8040](https://github.com/openshift/assisted-service/pull/8040)
* NO-ISSUE: [master] Bump OCP versions: 4.16, 4.18 (#8047) [#8047](https://github.com/openshift/assisted-service/pull/8047)
* [MGMT-21320](https://issues.redhat.com/browse/MGMT-21320): VM disk defined with 100GB but not eligible for installation (#7931) [#7931](https://github.com/openshift/assisted-service/pull/7931)
* NO-ISSUE: [master] Bump OCP versions: 4.20, 4.19 (#8042) [#8042](https://github.com/openshift/assisted-service/pull/8042)
* [MGMT-21704](https://issues.redhat.com/browse/MGMT-21704): add index on host infra env (#7995) [#7995](https://github.com/openshift/assisted-service/pull/7995)
* [MGMT-21318](https://issues.redhat.com/browse/MGMT-21318): Create feature gate to allow installing TNF using the API (#7892) [#7892](https://github.com/openshift/assisted-service/pull/7892)
* [MGMT-21419](https://issues.redhat.com/browse/MGMT-21419): Fix Day 2 worker TLS validation by using internal API endpoint for HTTPS connections (#7942) [#7942](https://github.com/openshift/assisted-service/pull/7942)
* NO-ISSUE: [master] Bump OCP versions: 4.12, 4.20, 4.17 (#8028) [#8028](https://github.com/openshift/assisted-service/pull/8028)
* [MGMT-21482](https://issues.redhat.com/browse/MGMT-21482): Fix module dependencies (#7936) [#7936](https://github.com/openshift/assisted-service/pull/7936)
* NO-ISSUE: Update Konflux references (#8010) [#8010](https://github.com/openshift/assisted-service/pull/8010)
* NO-ISSUE: pin gotestsum to v1.12.3 (#8016) [#8016](https://github.com/openshift/assisted-service/pull/8016)
* [MGMT-20830](https://issues.redhat.com/browse/MGMT-20830): Support for serving an OVE image (ISO) with an embedded custom ignition - impl (#7981) [#7981](https://github.com/openshift/assisted-service/pull/7981)
* [MGMT-20239](https://issues.redhat.com/browse/MGMT-20239): Adjust SortHosts to prioritize GPU hosts for worker role assignment (#7957) [#7957](https://github.com/openshift/assisted-service/pull/7957)
* Use host rather than cluster when determining TANG servers to validate (#7982) [#7982](https://github.com/openshift/assisted-service/pull/7982)
* NO-ISSUE: [master] Bump OCP versions: 4.19, 4.20 (#7993) [#7993](https://github.com/openshift/assisted-service/pull/7993)
* Fix the nmstate example (#7992) [#7992](https://github.com/openshift/assisted-service/pull/7992)
* [MGMT-20830](https://issues.redhat.com/browse/MGMT-20830): enhancement doc (#7978) [#7978](https://github.com/openshift/assisted-service/pull/7978)
* [Full changelog](https://github.com/openshift/assisted-service/compare/d81ac6569ccedffd1a5a05ffc4767dec27e418cb...5bfcedfa3fe52e7432482e821d83f7f45e5a70e2)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/fe13ea8e4ac69ce95f0ac26aa4a8785ee68676db)

* chore(KONFLUX-6210): fix and set name and cpe label for assisted-installer-ds-main (#1247) [#1247](https://github.com/openshift/assisted-installer/pull/1247)
* NO-ISSUE: Update Konflux references (#1256) [#1256](https://github.com/openshift/assisted-installer/pull/1256)
* chore(KONFLUX-6210): fix and set name and cpe label for assisted-installer-controller-ds-main (#1246) [#1246](https://github.com/openshift/assisted-installer/pull/1246)
* [MGMT-20756](https://issues.redhat.com/browse/MGMT-20756): assisted installer naive string concatenation for partition finding (#1214) [#1214](https://github.com/openshift/assisted-installer/pull/1214)
* NO-ISSUE: Update Konflux references (#1242) [#1242](https://github.com/openshift/assisted-installer/pull/1242)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/a68b920cd884948e90ba31811e2577a5d54535cc...fe13ea8e4ac69ce95f0ac26aa4a8785ee68676db)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/9291c616d2f142854d601b18b17e5b9d2f005ba2)

* chore(KONFLUX-6210): fix and set name and cpe label for assisted-installer-agent-ds-main (#1111) [#1111](https://github.com/openshift/assisted-installer-agent/pull/1111)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/f6aa4cd4b00d18ba7f5fa3b0a039049c851e2ffd...9291c616d2f142854d601b18b17e5b9d2f005ba2)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/54a1654f1a601c7901c94a2d8801ae8b3c9f9bc1)

* [OCPBUGS-61956](https://issues.redhat.com/browse/OCPBUGS-61956): Disable Konflux go.mod PR updates [#163](https://github.com/openshift/agent-installer-utils/pull/163)
* [OCPBUGS-61875](https://issues.redhat.com/browse/OCPBUGS-61875): Add 4.21 config [#160](https://github.com/openshift/agent-installer-utils/pull/160)
* [AGENT-1258](https://issues.redhat.com/browse/AGENT-1258): Red Hat Konflux kflux-prd-rh02 update ove-ui-iso [#154](https://github.com/openshift/agent-installer-utils/pull/154)
* [AGENT-1258](https://issues.redhat.com/browse/AGENT-1258): Red Hat Konflux kflux-prd-rh02 purge agent-installer-utils [#153](https://github.com/openshift/agent-installer-utils/pull/153)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/3ae48f72fc311267ce09fa3f1088b3719f51a138...54a1654f1a601c7901c94a2d8801ae8b3c9f9bc1)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/02805eaa3af2d35c5e88b5307372547a36c0bc16)

* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.1 (9c17049) into main [#569](https://github.com/openshift/cluster-api-provider-aws/pull/569)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/9467200c8073d4609cfca356bc6fc8126c505886...02805eaa3af2d35c5e88b5307372547a36c0bc16)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/845e3ff6520f886dabcd35c853192a41133caadd)

* NO-JIRA: Centralize injection of hosted-kubeconfig volume [#311](https://github.com/openshift/csi-operator/pull/311)
* NO-JIRA: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.21 [#429](https://github.com/openshift/csi-operator/pull/429)
* [OCPBUGS-54385](https://issues.redhat.com/browse/OCPBUGS-54385): Avoid informer resync [#432](https://github.com/openshift/csi-operator/pull/432)
* NO-JIRA: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.21 [#427](https://github.com/openshift/csi-operator/pull/427)
* NO-JIRA: Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.21 [#425](https://github.com/openshift/csi-operator/pull/425)
* NO-JIRA: azure-disk, azure-file sync code de-duplication [#303](https://github.com/openshift/csi-operator/pull/303)
* [Full changelog](https://github.com/openshift/csi-operator/compare/a92ebd03f1d495e27a76b03e9db002e08fcb8ac8...845e3ff6520f886dabcd35c853192a41133caadd)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/801b059d6601d64b158950eb3bbf73124a15ee4a)

* NO-JIRA: Update OWNERS [#162](https://github.com/openshift/machine-api-provider-azure/pull/162)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/4927cc2be4f629e367d2a79a310900c7cced3f6c...801b059d6601d64b158950eb3bbf73124a15ee4a)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/bad1b52003febc2880c3b4f45b98ac38d2db206a)

* [CORS-4058](https://issues.redhat.com/browse/CORS-4058): Migrate AWS Destroy to SDK v2 [#9939](https://github.com/openshift/installer/pull/9939)
* [OCPBUGS-61353](https://issues.redhat.com/browse/OCPBUGS-61353): Generated Redacted nutanix config for operator [#9931](https://github.com/openshift/installer/pull/9931)
* [CORS-3550](https://issues.redhat.com/browse/CORS-3550): add ability to opt out of the sigstore signing requirement [#9940](https://github.com/openshift/installer/pull/9940)
* [CORS-4162](https://issues.redhat.com/browse/CORS-4162): Remove GCPClusterHostedDNSInstall featuregate [#9944](https://github.com/openshift/installer/pull/9944)
* [OCPBUGS-61490](https://issues.redhat.com/browse/OCPBUGS-61490): Update code to retrieve ICSP instead of ICP [#9933](https://github.com/openshift/installer/pull/9933)
* [MGMT-21586](https://issues.redhat.com/browse/MGMT-21586): Add an option in image-based installation to specify architecture [#9934](https://github.com/openshift/installer/pull/9934)
* [SPLAT-2430](https://issues.redhat.com/browse/SPLAT-2430): Update vSphere version validations for 7 EOL and VCF 9 [#9914](https://github.com/openshift/installer/pull/9914)
* [OCPBUGS-61373](https://issues.redhat.com/browse/OCPBUGS-61373): Fix shellcheck issues in bootstrap [#9929](https://github.com/openshift/installer/pull/9929)
* [OCPBUGS-61373](https://issues.redhat.com/browse/OCPBUGS-61373): Fix agent shellcheck issues [#9928](https://github.com/openshift/installer/pull/9928)
* no-jira: Fix logging and error messages [#9917](https://github.com/openshift/installer/pull/9917)
* [Full changelog](https://github.com/openshift/installer/compare/c805b240dc45c054ff83d57ae945772feef90ea4...bad1b52003febc2880c3b4f45b98ac38d2db206a)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/0e4fabc98dc46c9fca79544297783053a49370ce)

* [OCPBUGS-59311](https://issues.redhat.com/browse/OCPBUGS-59311): pkg/.../inspect: Add support for context.Context [#2100](https://github.com/openshift/oc/pull/2100)
* [WRKLDS-593](https://issues.redhat.com/browse/WRKLDS-593): oc adm must-gather: Improve cleanup order [#2080](https://github.com/openshift/oc/pull/2080)
* NO-JIRA: Add tchap as reviewer in oc [#2099](https://github.com/openshift/oc/pull/2099)
* NO-JIRA: oc adm groups sync: Use client.Unbind [#2094](https://github.com/openshift/oc/pull/2094)
* [OCPBUGS-61063](https://issues.redhat.com/browse/OCPBUGS-61063): pkg/cli/admin/upgrade/recommend: Enable precheck and accept gates [#2088](https://github.com/openshift/oc/pull/2088)
* [OCPBUGS-52936](https://issues.redhat.com/browse/OCPBUGS-52936): oc adm policy: Only initialize UserClient if built-in OAuth is enabled [#2090](https://github.com/openshift/oc/pull/2090)
* [OCPBUGS-61311](https://issues.redhat.com/browse/OCPBUGS-61311): Introduce auto-open-browser flag for external OIDC issuer login [#2089](https://github.com/openshift/oc/pull/2089)
* NO-ISSUE: pkg/cli/admin/upgrade/recommend/examples/4.19.0-okd-scos.16: Add OKD example [#2093](https://github.com/openshift/oc/pull/2093)
* [OCPBUGS-59951](https://issues.redhat.com/browse/OCPBUGS-59951): oc adm must-gather: Wrap gather in a session [#2087](https://github.com/openshift/oc/pull/2087)
* NO-JIRA: Add some warnings into excluded list [#2092](https://github.com/openshift/oc/pull/2092)
* [OCPBUGS-56691](https://issues.redhat.com/browse/OCPBUGS-56691): Rely on overall available disk space of the mounted volume [#2084](https://github.com/openshift/oc/pull/2084)
* [Full changelog](https://github.com/openshift/oc/compare/a43428189603f12ae190703cb725f66f742fbe52...0e4fabc98dc46c9fca79544297783053a49370ce)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/d1ce7cad5a47a30de10e13c704421bbb5068c7ab)

* [OCPBUGS-61475](https://issues.redhat.com/browse/OCPBUGS-61475): set cloud-credential-operator as default-container [#914](https://github.com/openshift/cloud-credential-operator/pull/914)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/69a6090e6d2ddedb585d9e0583628028ebe4b26f...d1ce7cad5a47a30de10e13c704421bbb5068c7ab)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/ed0d09e6a99743a14b1a48cf131e3e9125c86bf7)

* [OCPBUGS-57444](https://issues.redhat.com/browse/OCPBUGS-57444): set appropriate rolling update settings [#789](https://github.com/openshift/cluster-authentication-operator/pull/789)
* NO-JIRA: om: fix integration testing [#788](https://github.com/openshift/cluster-authentication-operator/pull/788)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/11e57aa35590d3481288e09003c9109e0bfc62ce...ed0d09e6a99743a14b1a48cf131e3e9125c86bf7)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/9f0b2517b9bdb365553d2b93c79744cdd90a55b8)

* [OCPBUGS-57605](https://issues.redhat.com/browse/OCPBUGS-57605): Updating ose-cluster-api-container image to be consistent with ART for 4.20 [#242](https://github.com/openshift/cluster-api/pull/242)
* [Full changelog](https://github.com/openshift/cluster-api/compare/de1db2970e7fede7101e5a8188e74942ab6665e3...9f0b2517b9bdb365553d2b93c79744cdd90a55b8)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/a01dc659c3912be68d2bc158e768f58d7388944a)

* [OCPCLOUD-3162](https://issues.redhat.com/browse/OCPCLOUD-3162): conversion: do not set ignition version on AWSMachine [#363](https://github.com/openshift/cluster-capi-operator/pull/363)
* NO-JIRA: use go workspaces [#358](https://github.com/openshift/cluster-capi-operator/pull/358)
* [OCPCLOUD-2714](https://issues.redhat.com/browse/OCPCLOUD-2714): Add VAPs to prevent setting of CAPI fields that are not supported by MAPI [#334](https://github.com/openshift/cluster-capi-operator/pull/334)
* No-JIRA: increased timeout [#354](https://github.com/openshift/cluster-capi-operator/pull/354)
* NO-JIRA: Adds AGENTS.md [#349](https://github.com/openshift/cluster-capi-operator/pull/349)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/64fd75d91fed293329d2cd681ea3fa703fad6bff...a01dc659c3912be68d2bc158e768f58d7388944a)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/614b98d724f34f8859a793c634e5742542f29b02)

* [SPLAT-2341](https://issues.redhat.com/browse/SPLAT-2341): Add feature gate support in the cloud-config sync controller [#400](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/400)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/e355ad389d1d09be1a83f024f54b15e844982d0a...614b98d724f34f8859a793c634e5742542f29b02)


### [cluster-config-api](https://github.com/openshift/api/tree/bc748ef9703ff4bfca4c377fb3dd5dc53f955b2b)

* remove unused feature gate InsightsConfigAPI [#2474](https://github.com/openshift/api/pull/2474)
* [OCPBUGS-61689](https://issues.redhat.com/browse/OCPBUGS-61689): Add 'AGE' print column to `MachineConfigNode` object [#2476](https://github.com/openshift/api/pull/2476)
* NO-JIRA: tooling: add crdify generator to run crdify against CRD changes [#2472](https://github.com/openshift/api/pull/2472)
* Update controller-tools to latest on fork [#2478](https://github.com/openshift/api/pull/2478)
* Monitoring API: Add Metric server config [#2322](https://github.com/openshift/api/pull/2322)
* [CNTRLPLANE-5](https://issues.redhat.com/browse/CNTRLPLANE-5): Add CBOR feature gate [#2235](https://github.com/openshift/api/pull/2235)
* NO-JIRA: New rules about CO's conditions [#2469](https://github.com/openshift/api/pull/2469)
* apiservers.config.openshift.io: remove spec.tlsSecurityProfile GoDoc caveats [#2467](https://github.com/openshift/api/pull/2467)
* [SPLAT-2482](https://issues.redhat.com/browse/SPLAT-2482): create new featuregate for ClusterAPIMachineManagementVSphere [#2466](https://github.com/openshift/api/pull/2466)
* [MCO-1675](https://issues.redhat.com/browse/MCO-1675): Update API for Status Reporting needs (REBASED) [#2442](https://github.com/openshift/api/pull/2442)
* [CORS-3993](https://issues.redhat.com/browse/CORS-3993): Promote GCPClusterHostedDNS to Default [#2300](https://github.com/openshift/api/pull/2300)
* Adjust typos [#2243](https://github.com/openshift/api/pull/2243)
* Update schema checker to avoid incorrect new required fields checks [#2470](https://github.com/openshift/api/pull/2470)
* [Full changelog](https://github.com/openshift/api/compare/8634aa495a26bb4aaa63ce810b9768899a0c6e19...bc748ef9703ff4bfca4c377fb3dd5dc53f955b2b)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/f75055ba0ebc726e02c91b10b8efdbf136902d8a)

* [MCO-1866](https://issues.redhat.com/browse/MCO-1866): Ignore boot image differences while reconciling Provider Configs [#368](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/368)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/0bbafe24ade564bc62554251f36de90d524abcde...f75055ba0ebc726e02c91b10b8efdbf136902d8a)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/1272aef21dd5dcdbefbf4888c7b0a4a427683fd7)

* NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS [#449](https://github.com/openshift/cluster-dns-operator/pull/449)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/63a93b05b131a3f7ee8b482a5cb4f0c1eac8660e...1272aef21dd5dcdbefbf4888c7b0a4a427683fd7)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/c968596268df58ed8747a8f88ebb8c501824bbb2)

* [OCPBUGS-55673](https://issues.redhat.com/browse/OCPBUGS-55673): Remove IngressControllerLBSubnetsAWS featuregate [#1242](https://github.com/openshift/cluster-ingress-operator/pull/1242)
* NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS [#1281](https://github.com/openshift/cluster-ingress-operator/pull/1281)
* [NE-2139](https://issues.redhat.com/browse/NE-2139): Kubernetes to 1.33.4 and controller-runtime to 0.21 [#1279](https://github.com/openshift/cluster-ingress-operator/pull/1279)
* NO-JIRA: Add davidesalerno to OWNERS [#1278](https://github.com/openshift/cluster-ingress-operator/pull/1278)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/e3ae45d527d0d587b991d34ea276fb671fad0165...c968596268df58ed8747a8f88ebb8c501824bbb2)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/6333489fd7d8d3494372cb830efba40eb28e45c1)

* [OCPBUGS-15430](https://issues.redhat.com/browse/OCPBUGS-15430): move alerting rules from CMO over [#1922](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1922)
* Re-apply "OCPBUGS-57049: certrotation: move test case name outside of AutoRegenerateAfterOfflineExpiry" [#1910](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1910)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): promote MutatingAdmissionPolicy to v1beta1 for &gt; 1.34.0 [#1921](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1921)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/0bec046c8c10682390e2a20ae4f416a2d8589f40...6333489fd7d8d3494372cb830efba40eb28e45c1)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/a92da07ac1f335c148411c838dd2982c9ca90988)

* [WRKLDS-1556](https://issues.redhat.com/browse/WRKLDS-1556): Remove --cloud-provider=external from KCM [#862](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/862)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/3b20c534b1b92d46055147c4f82f69b2ad3044c9...a92da07ac1f335c148411c838dd2982c9ca90988)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/2345371abed5896006ac4a60c7d555fc25502c0a)

* [OCPBUGS-61301](https://issues.redhat.com/browse/OCPBUGS-61301): Add readonlyRootFilesystem [#575](https://github.com/openshift/cluster-kube-scheduler-operator/pull/575)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/f9b5b31943f2be768af6373def4c8946a30d0ed6...2345371abed5896006ac4a60c7d555fc25502c0a)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/b5df9f410596a35c5ca517a7837673bad40f4066)

* NO-JIRA: set machine-approver-controller as default container [#278](https://github.com/openshift/cluster-machine-approver/pull/278)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/ce2750589129dd20b3d1b6a5e7bb8c392d658c5c...b5df9f410596a35c5ca517a7837673bad40f4066)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/e7abc6a1574d8949b6ff2b8ec8bfba8561d4463c)

* NO-ISSUE: update Go dependencies [#2674](https://github.com/openshift/cluster-monitoring-operator/pull/2674)
* [MON-4346](https://issues.redhat.com/browse/MON-4346): Bump Go to 1.24 [#2655](https://github.com/openshift/cluster-monitoring-operator/pull/2655)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2673](https://github.com/openshift/cluster-monitoring-operator/pull/2673)
* [OCPBUGS-60161](https://issues.redhat.com/browse/OCPBUGS-60161): Add mcd_local_unsupported_packages metric from MCO to telemetry [#2638](https://github.com/openshift/cluster-monitoring-operator/pull/2638)
* NO-ISSUE: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.21 [#2662](https://github.com/openshift/cluster-monitoring-operator/pull/2662)
* [MON-4344](https://issues.redhat.com/browse/MON-4344): chore: port the test suite over from openshift-tests-private [#2635](https://github.com/openshift/cluster-monitoring-operator/pull/2635)
* [MON-4371](https://issues.redhat.com/browse/MON-4371): chore(prometheus): enable use-uncached-io feature flag [#2637](https://github.com/openshift/cluster-monitoring-operator/pull/2637)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2668](https://github.com/openshift/cluster-monitoring-operator/pull/2668)
* [OCPBUGS-61113](https://issues.redhat.com/browse/OCPBUGS-61113): add flag `--watch-referenced-objects-in-all-namespaces` to prometheus-operator [#2657](https://github.com/openshift/cluster-monitoring-operator/pull/2657)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2663](https://github.com/openshift/cluster-monitoring-operator/pull/2663)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/4496a0a83b65e566038715a1f2405ba194c10439...e7abc6a1574d8949b6ff2b8ec8bfba8561d4463c)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/c069f36d58d9d8ad4a9cd23a410fb263a5e689ed)

* [OCPBUGS-61561](https://issues.redhat.com/browse/OCPBUGS-61561): Relax label req. of DPU/DPU Host/Smart NIC [#2786](https://github.com/openshift/cluster-network-operator/pull/2786)
* Revert "OCPBUGS-61196: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes" [#2796](https://github.com/openshift/cluster-network-operator/pull/2796)
* [OCPBUGS-61196](https://issues.redhat.com/browse/OCPBUGS-61196): Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes [#2605](https://github.com/openshift/cluster-network-operator/pull/2605)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/11ee8f9ffc0a6a0fd3fd7471d84963d7bd2a540f...c069f36d58d9d8ad4a9cd23a410fb263a5e689ed)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/5de3dcf92d4d3f34f31077a2faae4aaff3c59cd6)

* NO-JIRA:e2e: set of fixes/changes to ovs pinning testing (#1390) [#1390](https://github.com/openshift/cluster-node-tuning-operator/pull/1390)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/3c890f038bc1da82298b2633c8c61f466e0b3e68...5de3dcf92d4d3f34f31077a2faae4aaff3c59cd6)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/d1182c7ad66759ec4aae942090fdc7df3d2a69e3)

* NO-ISSUE: Updating ose-cluster-olm-operator-container image to be consistent with ART for 4.21 [#138](https://github.com/openshift/cluster-olm-operator/pull/138)
* [OCPBUGS-61873](https://issues.redhat.com/browse/OCPBUGS-61873): Update RBAC to update/patch/delete what we create [#139](https://github.com/openshift/cluster-olm-operator/pull/139)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/e4917368b6a547f97a0fb411fea90de246d1417e...d1182c7ad66759ec4aae942090fdc7df3d2a69e3)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/0e2948510331ff9351c5eb6d7f2f440afc7aa17a)

* NO-JIRA: scc allocation controller: Use server-side apply [#165](https://github.com/openshift/cluster-policy-controller/pull/165)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/3e7538547c8f209c72083097a4ebaada6e9c46c5...0e2948510331ff9351c5eb6d7f2f440afc7aa17a)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/0098376911def266fb04da95316a61725f37cc51)

* [OCPBUGS-61175](https://issues.redhat.com/browse/OCPBUGS-61175): Add RBAC rule to let manila-csi-driver-operator manage NetworkPolicy [#615](https://github.com/openshift/cluster-storage-operator/pull/615)
* [SPLAT-2467](https://issues.redhat.com/browse/SPLAT-2467): Updated VPD alerts to reflect current vSphere support [#612](https://github.com/openshift/cluster-storage-operator/pull/612)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/cfcc1f7f1f2c702118cd4b182d04c12defac6d30...0098376911def266fb04da95316a61725f37cc51)


### [console](https://github.com/openshift/console/tree/e31f575c3a6424514bb0d993e575af39867d28f6)

* [OCPBUGS-61535](https://issues.redhat.com/browse/OCPBUGS-61535): Cancel PVC creation redirect user to last visited page instead of PVC list [#15502](https://github.com/openshift/console/pull/15502)
* [CONSOLE-4764](https://issues.redhat.com/browse/CONSOLE-4764): Add tech preview feature flag support [#15477](https://github.com/openshift/console/pull/15477)
* [CONSOLE-4715](https://issues.redhat.com/browse/CONSOLE-4715): Migrate the Enzyme test __tests__ root directory and remove __tests__… [#15462](https://github.com/openshift/console/pull/15462)
* NO-JIRA: Update CHANGELOG based on 4.18 plugin SDK package release [#15517](https://github.com/openshift/console/pull/15517)
* [CONSOLE-4760](https://issues.redhat.com/browse/CONSOLE-4760): update CRD list to use ResourceDataView [#15469](https://github.com/openshift/console/pull/15469)
* [CONSOLE-3769](https://issues.redhat.com/browse/CONSOLE-3769): Install `@openshift/dynamic-plugin-sdk` [#15509](https://github.com/openshift/console/pull/15509)
* [OCPBUGS-60084](https://issues.redhat.com/browse/OCPBUGS-60084): Help dropdown should be closed automatically after tour model opened [#15483](https://github.com/openshift/console/pull/15483)
* [OCPBUGS-55401](https://issues.redhat.com/browse/OCPBUGS-55401): PVC shows negative Available space in OpenShift Console on RHOCP 4 [#15315](https://github.com/openshift/console/pull/15315)
* [OCPBUGS-59634](https://issues.redhat.com/browse/OCPBUGS-59634): Fix the events search input width, and incorporate PF Toolbar component [#15501](https://github.com/openshift/console/pull/15501)
* NO-JIRA: Update README.md with instructions for logging out kube:admin in local [#15482](https://github.com/openshift/console/pull/15482)
* NO-JIRA: chore(OWNERS): remove logonoff from reviewers [#15505](https://github.com/openshift/console/pull/15505)
* [CONSOLE-4710](https://issues.redhat.com/browse/CONSOLE-4710): use useOverlay to launch ErrorModal [#15475](https://github.com/openshift/console/pull/15475)
* [OCPBUGS-61087](https://issues.redhat.com/browse/OCPBUGS-61087): Updation of label from edit label doesn't work [#15460](https://github.com/openshift/console/pull/15460)
* [OCPBUGS-61519](https://issues.redhat.com/browse/OCPBUGS-61519): Fix improper DescriptionList refactor [#15495](https://github.com/openshift/console/pull/15495)
* [OCPBUGS-59972](https://issues.redhat.com/browse/OCPBUGS-59972): Add validation and type guards on healthHandler calls to prevent errors [#15470](https://github.com/openshift/console/pull/15470)
* [CONSOLE-4756](https://issues.redhat.com/browse/CONSOLE-4756): Convert more files to TypeScript [#15472](https://github.com/openshift/console/pull/15472)
* [OCPBUGS-61458](https://issues.redhat.com/browse/OCPBUGS-61458): fix MachineSet YAML template [#15478](https://github.com/openshift/console/pull/15478)
* [OCPBUGS-58118](https://issues.redhat.com/browse/OCPBUGS-58118): fix namespace path generation for non-namespaced resources [#15467](https://github.com/openshift/console/pull/15467)
* [OCPBUGS-61183](https://issues.redhat.com/browse/OCPBUGS-61183): cluster in workload identity mode is not applied with the token-auth-… [#15459](https://github.com/openshift/console/pull/15459)
* [OCPBUGS-61133](https://issues.redhat.com/browse/OCPBUGS-61133): Fix catalog search relevance scoring, so that operators with attribute.keywords are displayed and remove unnecessary metadataName from calculation [#15444](https://github.com/openshift/console/pull/15444)
* [OCPBUGS-61468](https://issues.redhat.com/browse/OCPBUGS-61468): i18n upload/download routine task for OCP version 4.20 [#15476](https://github.com/openshift/console/pull/15476)
* [CONSOLE-4727](https://issues.redhat.com/browse/CONSOLE-4727): Update OWNERS files across the repo [#15461](https://github.com/openshift/console/pull/15461)
* [CONSOLE-4598](https://issues.redhat.com/browse/CONSOLE-4598): Migrate enzyme __tests__/components/utils unit tests to React Testing… [#15442](https://github.com/openshift/console/pull/15442)
* [OCPBUGS-61393](https://issues.redhat.com/browse/OCPBUGS-61393): Change default tab size from 4 to 2 [#15474](https://github.com/openshift/console/pull/15474)
* [CONSOLE-4635](https://issues.redhat.com/browse/CONSOLE-4635): Refactor PDBActionFactory to hook form and cleanup. [#15285](https://github.com/openshift/console/pull/15285)
* And 5 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/0748392def188dbb070308c32c1fbb3457624f95...e31f575c3a6424514bb0d993e575af39867d28f6)


### [console-operator](https://github.com/openshift/console-operator/tree/740b913992c69c0ad5d7693db0b597566a184a95)

* [OCPBUGS-61726](https://issues.redhat.com/browse/OCPBUGS-61726): Revert "OCPBUGS-61432: fix(oidc): fix  OIDCClientSecretGet condition" [#1046](https://github.com/openshift/console-operator/pull/1046)
* [OCPBUGS-61432](https://issues.redhat.com/browse/OCPBUGS-61432): fix(oidc): fix  OIDCClientSecretGet condition [#1041](https://github.com/openshift/console-operator/pull/1041)
* [OCPBUGS-61483](https://issues.redhat.com/browse/OCPBUGS-61483): Update DEFAULT_DOC_URL to point to OpenShift Container Platform 4.21 [#1044](https://github.com/openshift/console-operator/pull/1044)
* [OCPBUGS-61383](https://issues.redhat.com/browse/OCPBUGS-61383): Update QuickStarts typo and doc link [#1042](https://github.com/openshift/console-operator/pull/1042)
* [OCPBUGS-60863](https://issues.redhat.com/browse/OCPBUGS-60863): Rename Dockerfile to Dockerfile.ocp [#1039](https://github.com/openshift/console-operator/pull/1039)
* [Full changelog](https://github.com/openshift/console-operator/compare/76ae5dafe7640111fa8e9c7f745122e4844d4a5d...740b913992c69c0ad5d7693db0b597566a184a95)


### [coredns](https://github.com/openshift/coredns/tree/42e2cf1e46dfd9dd11669b06fb1d619cd9335e17)

* NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS [#153](https://github.com/openshift/coredns/pull/153)
* [Full changelog](https://github.com/openshift/coredns/compare/6f39336e6da9dc77b2db140a96773c413d50a665...42e2cf1e46dfd9dd11669b06fb1d619cd9335e17)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/ddfb31979c0448f6a5cc7f5c71473a7fb9e9fbce)

* NO-JIRA: Updating csi-attacher-container image to be consistent with ART for 4.21 [#87](https://github.com/openshift/csi-external-attacher/pull/87)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/45239149cb387bcc51d944b802db0e804dc02688...ddfb31979c0448f6a5cc7f5c71473a7fb9e9fbce)


### [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata/tree/24faebef64fac7975f6556996c3c2a1388a479ff)

* NO-JIRA: Updating csi-external-snapshot-metadata-container image to be consistent with ART for 4.21 [#5](https://github.com/openshift/csi-external-snapshot-metadata/pull/5)
* [Full changelog](https://github.com/openshift/csi-external-snapshot-metadata/compare/693a826455777eaafc677bb2195dc071d184243b...24faebef64fac7975f6556996c3c2a1388a479ff)


### [csi-external-snapshotter, csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter/tree/ba8194d5920973069bc56a8bf5844afeedc66bbd)

* NO-JIRA: Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.21 [#187](https://github.com/openshift/csi-external-snapshotter/pull/187)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/42604822c25eb2aa0ecb017c24e328221b238eb9...ba8194d5920973069bc56a8bf5844afeedc66bbd)


### [docker-registry](https://github.com/openshift/image-registry/tree/a6bab654daa9d8e715392464d228fc3f5eae8dfe)

* [OCPBUGS-60845](https://issues.redhat.com/browse/OCPBUGS-60845): update OWNERS [#447](https://github.com/openshift/image-registry/pull/447)
* [Full changelog](https://github.com/openshift/image-registry/compare/887533765ee92e061fd44ad0b032aefd5b9b4e3c...a6bab654daa9d8e715392464d228fc3f5eae8dfe)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/5c53d757ae380994b89701a98d8b61912154aca7)

* Updating the OWNERS file. (#175) [#175](https://github.com/openshift/driver-toolkit/pull/175)
* Updating driver-toolkit-container image to be consistent with ART for 4.21 (#172) [#172](https://github.com/openshift/driver-toolkit/pull/172)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/9d55fd1aaba05830f857132bd149ee3cf18cc20f...5c53d757ae380994b89701a98d8b61912154aca7)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/b27a2f9a7629aca3c2ce4d9356092ea1f09d5719)

* [OCPBUGS-61006](https://issues.redhat.com/browse/OCPBUGS-61006): Adjust vendoring to use go.work to get rid of the symlink [#91](https://github.com/openshift/cloud-provider-gcp/pull/91)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/f940e72e7611ce4a96da3e47966ba1befd25c474...b27a2f9a7629aca3c2ce4d9356092ea1f09d5719)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/55e308aa22c8cbdbc1c79e510f7808388044b315)

* no-jira: Machine Api Operator GCP must search for the GCP Custom Endpoints Installer feature gate [#128](https://github.com/openshift/machine-api-provider-gcp/pull/128)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/01515888c83526ec235b7bc3a27df6eba3034b00...55e308aa22c8cbdbc1c79e510f7808388044b315)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/ac94bf2abcd3b339764fd30e581209f37ec43938)

* NO-JIRA: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.21 [#151](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/151)
* [CORS-4201](https://issues.redhat.com/browse/CORS-4201): Search for the feature gate for GCP Custom Endpoints [#150](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/150)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/e0ad050a84bab669e0f11e080fc4c388ef417bba...ac94bf2abcd3b339764fd30e581209f37ec43938)


### [haproxy-router](https://github.com/openshift/router/tree/844b37df3c6fae1458720cee3397ad80147187d3)

* [OCPBUGS-60257](https://issues.redhat.com/browse/OCPBUGS-60257): fix extra space in haproxy template [#676](https://github.com/openshift/router/pull/676)
* [OCPBUGS-57896](https://issues.redhat.com/browse/OCPBUGS-57896): Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.20 [#660](https://github.com/openshift/router/pull/660)
* [OCPBUGS-57845](https://issues.redhat.com/browse/OCPBUGS-57845): Updating ose-haproxy-router-base-container image to be consistent with ART for 4.20 [#659](https://github.com/openshift/router/pull/659)
* NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS [#675](https://github.com/openshift/router/pull/675)
* [OCPBUGS-61224](https://issues.redhat.com/browse/OCPBUGS-61224): Revert Prevent startup failures due to name resolution" [#672](https://github.com/openshift/router/pull/672)
* [Full changelog](https://github.com/openshift/router/compare/47274e213d8a511066a9492b73c9b8eccc353571...844b37df3c6fae1458720cee3397ad80147187d3)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/5c9df339496a7595967e06682ece7d0b2145411c)

* [OCPBUGS-61554](https://issues.redhat.com/browse/OCPBUGS-61554): Bump 1.33.5 [#2459](https://github.com/openshift/kubernetes/pull/2459)
* [OCPBUGS-61754](https://issues.redhat.com/browse/OCPBUGS-61754): UPSTREAM: &lt;carry&gt;: Add retries for GetCurrentResourceVersion. [#2467](https://github.com/openshift/kubernetes/pull/2467)
* [OCPBUGS-61222](https://issues.redhat.com/browse/OCPBUGS-61222): Do not remove PVC ClaimRef to fix flaky VAC test [#2452](https://github.com/openshift/kubernetes/pull/2452)
* [OCPBUGS-58313](https://issues.redhat.com/browse/OCPBUGS-58313): apiserver library go bump [#2457](https://github.com/openshift/kubernetes/pull/2457)
* NO-JIRA: UPSTREAM: 133682: Increase port-forward broken connection detection client timeout [#2428](https://github.com/openshift/kubernetes/pull/2428)
* [Full changelog](https://github.com/openshift/kubernetes/compare/6efb6a95323fe35285877dcdade237444b35cae0...5c9df339496a7595967e06682ece7d0b2145411c)


### [hypershift](https://github.com/openshift/hypershift/tree/21088b5edf54e98fe024dcd6e9856d4d36c709cd)

* [OCPBUGS-61776](https://issues.redhat.com/browse/OCPBUGS-61776): fix(ignition-server): Don't delete user-managed cert secrets [#6836](https://github.com/openshift/hypershift/pull/6836)
* [OCPBUGS-61894](https://issues.redhat.com/browse/OCPBUGS-61894): Enable VolumeAttributesClass runtime config [#6855](https://github.com/openshift/hypershift/pull/6855)
* [CNTRLPLANE-1452](https://issues.redhat.com/browse/CNTRLPLANE-1452): docs(ci): add documentation for checking CI status [#6849](https://github.com/openshift/hypershift/pull/6849)
* [OCPBUGS-61438](https://issues.redhat.com/browse/OCPBUGS-61438): fix(security): harden konnectivity-agent DaemonSet security context [#6835](https://github.com/openshift/hypershift/pull/6835)
* [OCPBUGS-61828](https://issues.redhat.com/browse/OCPBUGS-61828): refactor FeatureGate status check [#6862](https://github.com/openshift/hypershift/pull/6862)
* [OCPBUGS-61329](https://issues.redhat.com/browse/OCPBUGS-61329): skip EnsureReadOnlyRootFilesystemTmpDirMount check for kubevirt HCP pods [#6842](https://github.com/openshift/hypershift/pull/6842)
* [OCPBUGS-61825](https://issues.redhat.com/browse/OCPBUGS-61825): test(e2e,kubevirt): skip break-glass-credentials on kubevirt [#6856](https://github.com/openshift/hypershift/pull/6856)
* [OCPBUGS-61862](https://issues.redhat.com/browse/OCPBUGS-61862): ci: Remove the MCE 2.10 konflux pipeline [#6848](https://github.com/openshift/hypershift/pull/6848)
* [OCPBUGS-61719](https://issues.redhat.com/browse/OCPBUGS-61719): fix: propagate AWSLoadBalancerTargetNodesAnnotation to… [#6823](https://github.com/openshift/hypershift/pull/6823)
* [OCPBUGS-61334](https://issues.redhat.com/browse/OCPBUGS-61334): fix(kas): Set correct container port in postStart handler, 2 [#6824](https://github.com/openshift/hypershift/pull/6824)
* [OCPBUGS-61177](https://issues.redhat.com/browse/OCPBUGS-61177): ci: use common MCE konflux pipeline [#6743](https://github.com/openshift/hypershift/pull/6743)
* NO-JIRA: Update Branch Tasks Docs [#6840](https://github.com/openshift/hypershift/pull/6840)
* [OCPBUGS-56249](https://issues.redhat.com/browse/OCPBUGS-56249): fix lint-fix Makefile rule [#6151](https://github.com/openshift/hypershift/pull/6151)
* [OCPBUGS-61048](https://issues.redhat.com/browse/OCPBUGS-61048): test(e2e): add autoscaler deployment verification to autoscaling test [#6779](https://github.com/openshift/hypershift/pull/6779)
* [OCPBUGS-61687](https://issues.redhat.com/browse/OCPBUGS-61687): fix(capi-provider): use single replica deployment for aws and azure [#6807](https://github.com/openshift/hypershift/pull/6807)
* fix(disable-psa): disable PSA check for 4.20 [#6831](https://github.com/openshift/hypershift/pull/6831)
* [OCPBUGS-61482](https://issues.redhat.com/browse/OCPBUGS-61482): fix(proxy): ensure URLs have scheme before proxy resolution [#6789](https://github.com/openshift/hypershift/pull/6789)
* [OCPBUGS-61587](https://issues.redhat.com/browse/OCPBUGS-61587): fix(oauth): oauth-openshift deployment should be HA [#6802](https://github.com/openshift/hypershift/pull/6802)
* [CNTRLPLANE-1277](https://issues.redhat.com/browse/CNTRLPLANE-1277): Enable TestCreateClusterCustomConfig for Azure [#6706](https://github.com/openshift/hypershift/pull/6706)
* Revert "OCPBUGS-61334: fix(kas): Set correct container port in postStart handler" [#6805](https://github.com/openshift/hypershift/pull/6805)
* [OCPBUGS-60185](https://issues.redhat.com/browse/OCPBUGS-60185): resolve MIRRORED_RELEASE_IMAGE flapping [#6751](https://github.com/openshift/hypershift/pull/6751)
* [OCPBUGS-61499](https://issues.redhat.com/browse/OCPBUGS-61499): fix(control-plane): remove resource limits from kube-controller-manager [#6785](https://github.com/openshift/hypershift/pull/6785)
* [CNTRLPLANE-1364](https://issues.redhat.com/browse/CNTRLPLANE-1364): feat: enable global pull secret for AWS [#6736](https://github.com/openshift/hypershift/pull/6736)
* [OCPBUGS-61334](https://issues.redhat.com/browse/OCPBUGS-61334): fix(kas): Set correct container port in postStart handler [#6773](https://github.com/openshift/hypershift/pull/6773)
* NO-JIRA: fix karpenter metric validation in e2e [#6714](https://github.com/openshift/hypershift/pull/6714)
* NO-JIRA: chore(AI): add claude agents for different SMEs [#6787](https://github.com/openshift/hypershift/pull/6787)
* [OCPBUGS-61329](https://issues.redhat.com/browse/OCPBUGS-61329): test(e2e): skip kubevirt pods in EnsureReadOnlyRootFilesystem [#6770](https://github.com/openshift/hypershift/pull/6770)
* [OCPBUGS-61462](https://issues.redhat.com/browse/OCPBUGS-61462): temporarily use v4.20 catalogs [#6782](https://github.com/openshift/hypershift/pull/6782)
* NO-JIRA: add permissions to role policy [#6783](https://github.com/openshift/hypershift/pull/6783)
* [Full changelog](https://github.com/openshift/hypershift/compare/55ffa9313ae32a9b31a06b748a90b7d8f69d9396...21088b5edf54e98fe024dcd6e9856d4d36c709cd)


### [insights-operator](https://github.com/openshift/insights-operator/tree/b10b40a7244b76c5ffe2949f95fda801dee71de1)

* feat: update DataGather condition when gathering job fails (#1131) [#1131](https://github.com/openshift/insights-operator/pull/1131)
* fix: correct feature gate for InsightsDataGather (#1137) [#1137](https://github.com/openshift/insights-operator/pull/1137)
* Updating ose-insights-operator-container image to be consistent with ART for 4.21 (#1136) [#1136](https://github.com/openshift/insights-operator/pull/1136)
* [OCPBUGS-61798](https://issues.redhat.com/browse/OCPBUGS-61798): Run missing make update (#1140) [#1140](https://github.com/openshift/insights-operator/pull/1140)
* fix: Update error message for missing SCA certificates (#1134) [#1134](https://github.com/openshift/insights-operator/pull/1134)
* chore(OWNERS): add katarina (#1133) [#1133](https://github.com/openshift/insights-operator/pull/1133)
* fix: add missing permissions for replicasets and events (#1123) [#1123](https://github.com/openshift/insights-operator/pull/1123)
* [Full changelog](https://github.com/openshift/insights-operator/compare/b82259ab1186594ff62bd063ee5145ded9a09e95...b10b40a7244b76c5ffe2949f95fda801dee71de1)


### [ironic](https://github.com/openshift/ironic-image/tree/b08af2b98179713c0f183f68b7a92b915f2ccc5b)

* [OKD-283](https://issues.redhat.com/browse/OKD-283): fixing OKD ironic-image errors and metal3 pod crashes (centos9) [#688](https://github.com/openshift/ironic-image/pull/688)
* [OCPBUGS-61459](https://issues.redhat.com/browse/OCPBUGS-61459): sync with Ironic changes, including the local RPC revert [#687](https://github.com/openshift/ironic-image/pull/687)
* [METAL-1528](https://issues.redhat.com/browse/METAL-1528): Use custom directories in the runironic-proxy script [#679](https://github.com/openshift/ironic-image/pull/679)
* [Full changelog](https://github.com/openshift/ironic-image/compare/e9d325e27753eb41c9646dcdffc30833426e2502...b08af2b98179713c0f183f68b7a92b915f2ccc5b)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/7dec3478a9173d2c00a05382fd5800a53f1fdc2f)

* NO-ISSUE: [bot] Bump openshift/kube-state-metrics to v2.17.0 [#124](https://github.com/openshift/kube-state-metrics/pull/124)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/a8c9a5f08f675ae9afbaafdc47d7d2acb4a3709d...7dec3478a9173d2c00a05382fd5800a53f1fdc2f)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/d19bdda61baf7b737a6e8c78eb97c8772a34563e)

* [OCPBUGS-61728](https://issues.redhat.com/browse/OCPBUGS-61728): Fixed multi nic e2e to wait for node removal after machineset tests [#1417](https://github.com/openshift/machine-api-operator/pull/1417)
* [OCPBUGS-61728](https://issues.redhat.com/browse/OCPBUGS-61728): Adjusted machine e2e tests to wait for nodes to clean up [#1415](https://github.com/openshift/machine-api-operator/pull/1415)
* NO-JIRA: Update OWNERS_ALIASES [#1414](https://github.com/openshift/machine-api-operator/pull/1414)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/e3846e13997f0d6e93b4b2e740212379e4500dc2...d19bdda61baf7b737a6e8c78eb97c8772a34563e)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/223bed017865d085a6fda3a41050627be96ed340)

* [MCO-1840](https://issues.redhat.com/browse/MCO-1840): Remove MCN CRD cleanup cronjob [#5234](https://github.com/openshift/machine-config-operator/pull/5234)
* [OCPBUGS-60120](https://issues.redhat.com/browse/OCPBUGS-60120): Add nil/null checks to image registry secret decode [#5253](https://github.com/openshift/machine-config-operator/pull/5253)
* NO-ISSUE: Add delays to reduce TestOSBuildController failures [#5239](https://github.com/openshift/machine-config-operator/pull/5239)
* [MCO-1808](https://issues.redhat.com/browse/MCO-1808): MCO-1790: Implement Azure boot image updates [#5202](https://github.com/openshift/machine-config-operator/pull/5202)
* [OCPBUGS-61695](https://issues.redhat.com/browse/OCPBUGS-61695): Override NMState service definition [#5284](https://github.com/openshift/machine-config-operator/pull/5284)
* [OCPBUGS-60161](https://issues.redhat.com/browse/OCPBUGS-60161): Add mcd_local_unsupported_packages recording rule [#5242](https://github.com/openshift/machine-config-operator/pull/5242)
* [CORS-4170](https://issues.redhat.com/browse/CORS-4170): Extending in-cluster DNS support to Azure [#5216](https://github.com/openshift/machine-config-operator/pull/5216)
* [OCPBUGS-60537](https://issues.redhat.com/browse/OCPBUGS-60537): Machine-config controller should actively manage cordon while draining [#5276](https://github.com/openshift/machine-config-operator/pull/5276)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/063455217c390b9196f1577378cbb8a6454de527...223bed017865d085a6fda3a41050627be96ed340)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/41c52ce203bdde743abd0641a019fab947b235e5)

* NO-JIRA: Login validation for all session flows [#544](https://github.com/openshift/monitoring-plugin/pull/544)
* [OU-833](https://issues.redhat.com/browse/OU-833): fix 2 bugs for incidents page [#539](https://github.com/openshift/monitoring-plugin/pull/539)
* NO-JIRA: Cypress Testsuite – Enhance Session Management [#536](https://github.com/openshift/monitoring-plugin/pull/536)
* [OBSINTA-463](https://issues.redhat.com/browse/OBSINTA-463): Rename the cluster health metrics [#514](https://github.com/openshift/monitoring-plugin/pull/514)
* [OBSINTA-789](https://issues.redhat.com/browse/OBSINTA-789): Update layout and labels [#534](https://github.com/openshift/monitoring-plugin/pull/534)
* [OU-863](https://issues.redhat.com/browse/OU-863): fix step calculation to fix non existent data gaps [#535](https://github.com/openshift/monitoring-plugin/pull/535)
* [RHINENG-20701](https://issues.redhat.com/browse/RHINENG-20701): fix utc timestamps in chart tooltips [#531](https://github.com/openshift/monitoring-plugin/pull/531)
* [OBSINTA-798](https://issues.redhat.com/browse/OBSINTA-798): Cypress Incident Tests – Query Mocking [#521](https://github.com/openshift/monitoring-plugin/pull/521)
* NO-JIRA: set rules as silenced if all alerts are silenced [#533](https://github.com/openshift/monitoring-plugin/pull/533)
* [RHINENG-20667](https://issues.redhat.com/browse/RHINENG-20667): silenced alerts for chart and table [#530](https://github.com/openshift/monitoring-plugin/pull/530)
* [OU-658](https://issues.redhat.com/browse/OU-658): Major Refactor + Adding Namespace dropdown to admin pages [#483](https://github.com/openshift/monitoring-plugin/pull/483)
* NO-JIRA: automation - fix monitoring-plugin injection [#532](https://github.com/openshift/monitoring-plugin/pull/532)
* NO-JIRA: Update build-image.sh [#528](https://github.com/openshift/monitoring-plugin/pull/528)
* [OU-671](https://issues.redhat.com/browse/OU-671): Add Patternfly Theming to Perses [#522](https://github.com/openshift/monitoring-plugin/pull/522)
* [RHINENG-20424](https://issues.redhat.com/browse/RHINENG-20424): fix clear filter bug with incident selected [#527](https://github.com/openshift/monitoring-plugin/pull/527)
* [OU-783](https://issues.redhat.com/browse/OU-783): Fit the alerts timeline to the actual data timespan [#529](https://github.com/openshift/monitoring-plugin/pull/529)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/2f449d8c47450c60510abb675616a8b493055628...41c52ce203bdde743abd0641a019fab947b235e5)


### [network-tools](https://github.com/openshift/network-tools/tree/623ab0246c2533b974d293489fb745ec97991739)

* [OCPBUGS-53196](https://issues.redhat.com/browse/OCPBUGS-53196): Update references of `master` to `main` [#160](https://github.com/openshift/network-tools/pull/160)
* [Full changelog](https://github.com/openshift/network-tools/compare/26d09174cbd92386469e777e3bf49bfa95d035d5...623ab0246c2533b974d293489fb745ec97991739)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/18585b0dee70b79e61ee99d6af68afc66592def6)

* Merge [#273](https://github.com/openshift/networking-console-plugin/pull/273)
* [CNV-59876](https://issues.redhat.com/browse/CNV-59876): use correct name space when switching tabs [#276](https://github.com/openshift/networking-console-plugin/pull/276)
* [OCPBUGS-61531](https://issues.redhat.com/browse/OCPBUGS-61531): show VM network menu only on admin [#275](https://github.com/openshift/networking-console-plugin/pull/275)
* [OCPBUGS-61548](https://issues.redhat.com/browse/OCPBUGS-61548): use console extension to render same nad actions [#274](https://github.com/openshift/networking-console-plugin/pull/274)
* [CNV-59629](https://issues.redhat.com/browse/CNV-59629): set default MTU visible in form and yaml [#272](https://github.com/openshift/networking-console-plugin/pull/272)
* [CNV-68685](https://issues.redhat.com/browse/CNV-68685): add primary UDN label info to VirtualMachine network creation form [#271](https://github.com/openshift/networking-console-plugin/pull/271)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/208b2453a12d79aa0ad1007633b9ee24e6fbdd8e...18585b0dee70b79e61ee99d6af68afc66592def6)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/309dd46138e2f0aa0f3136af32152d07527df96d)

* [OCPBUGS-61754](https://issues.redhat.com/browse/OCPBUGS-61754): Bump openshift/kubernetes-apiserver for consistent list etcd retries. [#146](https://github.com/openshift/oauth-apiserver/pull/146)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/7033e0fa18593c8814cf14d0f10a9226d7d93c45...309dd46138e2f0aa0f3136af32152d07527df96d)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/26b909578873ce21c21962b8eb10b4826cddcdd9)

* Adding r4f4 and Prashanth684 as approvers and removing contributors who are not working with oc-mirror anymore. (#1264) [#1264](https://github.com/openshift/oc-mirror/pull/1264)
* ocpbugs-60999: fix issue when using full true in m2m (#1256) [#1256](https://github.com/openshift/oc-mirror/pull/1256)
* [OCPBUGS-61386](https://issues.redhat.com/browse/OCPBUGS-61386): fixes permissions on rebuilt catalog (#1257) [#1257](https://github.com/openshift/oc-mirror/pull/1257)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/d42ff12456f3f227bfd42a769c4d5780dd1c6087...26b909578873ce21c21962b8eb10b4826cddcdd9)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/83ffc35bcee134facab729e51aad8ca6449feb20)

* NO-ISSUE: Synchronize From Upstream Repositories [#480](https://github.com/openshift/operator-framework-operator-controller/pull/480)
* NO-ISSUE: Synchronize From Upstream Repositories [#479](https://github.com/openshift/operator-framework-operator-controller/pull/479)
* [OCPQE-29416](https://issues.redhat.com/browse/OCPQE-29416): Init OLMv1 OTE Framework for tests-private to migrate first case [#467](https://github.com/openshift/operator-framework-operator-controller/pull/467)
* [OPRUN-4076](https://issues.redhat.com/browse/OPRUN-4076), [OPRUN-4078](https://issues.redhat.com/browse/OPRUN-4078): Replace kustomize config with helm config [#475](https://github.com/openshift/operator-framework-operator-controller/pull/475)
* NO-ISSUE: add jiazha to approvers [#477](https://github.com/openshift/operator-framework-operator-controller/pull/477)
* NO-ISSUE: Synchronize From Upstream Repositories [#476](https://github.com/openshift/operator-framework-operator-controller/pull/476)
* NO-ISSUE: Synchronize From Upstream Repositories [#473](https://github.com/openshift/operator-framework-operator-controller/pull/473)
* NO-ISSUE: Synchronize From Upstream Repositories [#471](https://github.com/openshift/operator-framework-operator-controller/pull/471)
* NO-ISSUE: Synchronize From Upstream Repositories [#465](https://github.com/openshift/operator-framework-operator-controller/pull/465)
* NO-ISSUE: Grant QE approver permissions for OTE contributions [#457](https://github.com/openshift/operator-framework-operator-controller/pull/457)
* And 3 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/1544a1b71476f28889220d37ecafb74f5653e8bd...83ffc35bcee134facab729e51aad8ca6449feb20)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/da87a341733722eaf8e285fe3f2b2ba86afdba9c)

* [OCPBUGS-61768](https://issues.redhat.com/browse/OCPBUGS-61768): update pkg/image/OWNERS [#555](https://github.com/openshift/openshift-apiserver/pull/555)
* [OCPBUGS-61754](https://issues.redhat.com/browse/OCPBUGS-61754): Bump openshift/kubernetes-apiserver for consistent list etcd retries. [#556](https://github.com/openshift/openshift-apiserver/pull/556)
* [OCPBUGS-61228](https://issues.redhat.com/browse/OCPBUGS-61228): Bump Route generation when spec is updated [#550](https://github.com/openshift/openshift-apiserver/pull/550)
* [OCPBUGS-37215](https://issues.redhat.com/browse/OCPBUGS-37215): pkg/image: conditionally parse raw image manifest [#551](https://github.com/openshift/openshift-apiserver/pull/551)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/e817f8439e1379485594f56d74c2160c44db0864...da87a341733722eaf8e285fe3f2b2ba86afdba9c)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/15fc552a73e47ae715f0cf59e3f535e26b43477a)

* [OCPBUGS-61899](https://issues.redhat.com/browse/OCPBUGS-61899): CNTRLPLANE-1308: Fix Dockerfile.rhel: Add OTE binary build and packaging [#419](https://github.com/openshift/openshift-controller-manager/pull/419)
* [CNTRLPLANE-1308](https://issues.redhat.com/browse/CNTRLPLANE-1308): set up openshift-tests-extension for openshift-controller-manager and add a sanity test [#417](https://github.com/openshift/openshift-controller-manager/pull/417)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/49aaf599fb9024f36359f55bac6b3bb1482e24b8...15fc552a73e47ae715f0cf59e3f535e26b43477a)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/0b07ab92a28d0377c6600d0b40c5486b4b942ca1)

* NO-ISSUE: Synchronize From Upstream Repositories [#1115](https://github.com/openshift/operator-framework-olm/pull/1115)
* [OCPQE-29415](https://issues.redhat.com/browse/OCPQE-29415): add testing framework based on OTE and the first tests-private case [#1113](https://github.com/openshift/operator-framework-olm/pull/1113)
* [OCPQE-29415](https://issues.redhat.com/browse/OCPQE-29415): move golangci-lint and go-bindata to new location to fix sync [#1114](https://github.com/openshift/operator-framework-olm/pull/1114)
* [OCPQE-29415](https://issues.redhat.com/browse/OCPQE-29415): add OTE into olmv0 with new location [#1108](https://github.com/openshift/operator-framework-olm/pull/1108)
* NO-ISSUE: Synchronize From Upstream Repositories [#1112](https://github.com/openshift/operator-framework-olm/pull/1112)
* NO-ISSUE: UPSTREAM: &lt;carry&gt;: add jiazha to approvers [#1110](https://github.com/openshift/operator-framework-olm/pull/1110)
* Revert "OCPQE-29415: UPSTREAM: &lt;carry&gt;: add OTE into olmv0" [#1109](https://github.com/openshift/operator-framework-olm/pull/1109)
* NO-ISSUE: Updating operator-registry-container image to be consistent with ART for 4.21 [#1106](https://github.com/openshift/operator-framework-olm/pull/1106)
* [OCPQE-29415](https://issues.redhat.com/browse/OCPQE-29415): UPSTREAM: &lt;carry&gt;: add OTE into olmv0 [#1105](https://github.com/openshift/operator-framework-olm/pull/1105)
* NO-ISSUE: set package-server-manager as default container [#1104](https://github.com/openshift/operator-framework-olm/pull/1104)
* NO-ISSUE: Synchronize From Upstream Repositories [#1103](https://github.com/openshift/operator-framework-olm/pull/1103)
* NO-ISSUE: Updating ose-operator-framework-tools-container image to be consistent with ART for 4.21 [#1100](https://github.com/openshift/operator-framework-olm/pull/1100)
* NO-ISSUE: Synchronize From Upstream Repositories [#1101](https://github.com/openshift/operator-framework-olm/pull/1101)
* NO-ISSUE: Updating operator-lifecycle-manager-container image to be consistent with ART for 4.21 [#1094](https://github.com/openshift/operator-framework-olm/pull/1094)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/d0e47893fd1cd037d56f40322133012d0aecd4ac...0b07ab92a28d0377c6600d0b40c5486b4b942ca1)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/40cfb562f2fb7ff0017b5a67e33deb481671fc4f)

* NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.23.4 to 2.25.1 [#658](https://github.com/operator-framework/operator-marketplace/pull/658)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/0b6ddc07cc445687b1fa2ed205fce9cc1462abba...40cfb562f2fb7ff0017b5a67e33deb481671fc4f)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/5ad762f86466c2e11b94da2cee211cec97e16a3a)

* [OCPBUGS-61065](https://issues.redhat.com/browse/OCPBUGS-61065): Adding ovndb-raft-functions.sh to ovnk image [#2740](https://github.com/openshift/ovn-kubernetes/pull/2740)
* NO-JIRA: DownStream Merge [08-27-2025] [#2736](https://github.com/openshift/ovn-kubernetes/pull/2736)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/9741174157381d7b87e2d21559cbe06b8f2b5ebf...5ad762f86466c2e11b94da2cee211cec97e16a3a)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/791e12aba9ab7c4fed1e5f9554e5b9ec86342e1a)

* Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.21 [#107](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/107)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/0693fe5dcfab224466fba7a19e614de71f727999...791e12aba9ab7c4fed1e5f9554e5b9ec86342e1a)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/70f3c88ff788f5c0f00c3839f99c8957f466eba0)

* NO-JIRA: [bot] Bump openshift/prom-label-proxy to v0.12.1 [#385](https://github.com/openshift/prom-label-proxy/pull/385)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/f2529aee3dc2e9065de08b035d53151e007136fd...70f3c88ff788f5c0f00c3839f99c8957f466eba0)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/e72c0718ad998d5113271537227a147e5af50330)

* NO-ISSUE: Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.21 [#170](https://github.com/openshift/node_exporter/pull/170)
* [Full changelog](https://github.com/openshift/node_exporter/compare/56f6158e797ab80e5e0da2cb0ba701cb02902ef7...e72c0718ad998d5113271537227a147e5af50330)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/a40d9a8ec60e0c6c1578300c372b6104130f2ecc)

* [OCPBUGS-56599](https://issues.redhat.com/browse/OCPBUGS-56599): don't hotloop on secret creation errors [#274](https://github.com/openshift/service-ca-operator/pull/274)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/b0fe556a981964728306f803864af9d2881db967...a40d9a8ec60e0c6c1578300c372b6104130f2ecc)


### [telemeter](https://github.com/openshift/telemeter/tree/0634eee9f7efb2c53eb3b13f9ebfb1315386e285)

* Updating telemeter-container image to be consistent with ART for 4.21 [#565](https://github.com/openshift/telemeter/pull/565)
* [Full changelog](https://github.com/openshift/telemeter/compare/4c6036eeb851ad6e0e837e214a2d08ffc8f0d1d0...0634eee9f7efb2c53eb3b13f9ebfb1315386e285)


### [tests](https://github.com/openshift/origin/tree/92f0f58072daeecaf367e181fca17afebd395d6e)

* [OCPBUGS-61980](https://issues.redhat.com/browse/OCPBUGS-61980): Temporarily remove commatrix documentation test for rework [#30280](https://github.com/openshift/origin/pull/30280)
* [OCPBUGS-61905](https://issues.redhat.com/browse/OCPBUGS-61905): oidc: improve rollout wait times [#30274](https://github.com/openshift/origin/pull/30274)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): image: add busybox to list of allowed images [#30281](https://github.com/openshift/origin/pull/30281)
* [CORENET-6418](https://issues.redhat.com/browse/CORENET-6418): drop openshift-sdn tests [#29085](https://github.com/openshift/origin/pull/29085)
* [OCPEDGE-1483](https://issues.redhat.com/browse/OCPEDGE-1483): Add TNF E2E tests for network failure [#30110](https://github.com/openshift/origin/pull/30110)
* [OCPBUGS-61196](https://issues.redhat.com/browse/OCPBUGS-61196): Skip ServiceCIDR in etcd_storage_path test [#30254](https://github.com/openshift/origin/pull/30254)
* [OCPBUGS-61855](https://issues.redhat.com/browse/OCPBUGS-61855): Temporarily disable InstallPlanStepAppliedWithWarnings for k8s 1.34 rebase [#30275](https://github.com/openshift/origin/pull/30275)
* [OCPBUGS-61398](https://issues.redhat.com/browse/OCPBUGS-61398): fix(test): prevent nil pointer dereference in ginkgo test runner [#30224](https://github.com/openshift/origin/pull/30224)
* [OCPBUGS-61855](https://issues.redhat.com/browse/OCPBUGS-61855): CRD Apply Alert Allowance [#30265](https://github.com/openshift/origin/pull/30265)
* [NE-2090](https://issues.redhat.com/browse/NE-2090): adding one GIE automation test [#30189](https://github.com/openshift/origin/pull/30189)
* [OTA-1601](https://issues.redhat.com/browse/OTA-1601): upgrade status: recover checking the updating COs [#30154](https://github.com/openshift/origin/pull/30154)
* NO-JIRA: Allow systemd-coredump test to fail [#30261](https://github.com/openshift/origin/pull/30261)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): Update etcd test data for k8s 1.34 release [#30242](https://github.com/openshift/origin/pull/30242)
* [OCPBUGS-61733](https://issues.redhat.com/browse/OCPBUGS-61733): Restore retries for port-forward test [#30255](https://github.com/openshift/origin/pull/30255)
* [OCPEDGE-2090](https://issues.redhat.com/browse/OCPEDGE-2090): Add validation tests for tnf topology effects [#30252](https://github.com/openshift/origin/pull/30252)
* [TRT-2275](https://issues.redhat.com/browse/TRT-2275): introduce cluster e2e-analysis sub command for openshift-tests [#30211](https://github.com/openshift/origin/pull/30211)
* [MON-4290](https://issues.redhat.com/browse/MON-4290): add test for must-gather gather_metrics [#30054](https://github.com/openshift/origin/pull/30054)
* [OCPBUGS-61193](https://issues.redhat.com/browse/OCPBUGS-61193): chore(extended/prometheus): 2/2: make 'targets auth' test more lenient and more resilient [#30256](https://github.com/openshift/origin/pull/30256)
* [OCPBUGS-57325](https://issues.redhat.com/browse/OCPBUGS-57325): update machines scale test [#30028](https://github.com/openshift/origin/pull/30028)
* Trt-2246: network test isolation [#30192](https://github.com/openshift/origin/pull/30192)
* NO-ISSUE: Automated - Update synthetic test data [#30244](https://github.com/openshift/origin/pull/30244)
* NO-JIRA: Remove runbook exceptions for fixed bugs [#30246](https://github.com/openshift/origin/pull/30246)
* trt-2230: Add monitor test annotation [#30196](https://github.com/openshift/origin/pull/30196)
* NO-JIRA: Increase request-timeout to deflake test [#30248](https://github.com/openshift/origin/pull/30248)
* NO-JIRA: Deflake oc observe test by using explicit port number [#30247](https://github.com/openshift/origin/pull/30247)
* [OTA-1559](https://issues.redhat.com/browse/OTA-1559): test/extended/cli/adm_upgrade/recommend: TestRiskA PromQL use max_over_time [#30160](https://github.com/openshift/origin/pull/30160)
* NO-JIRA: Add intervals and a test for systemd-coredumps [#30222](https://github.com/openshift/origin/pull/30222)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): oidc: add retry logic for Keycloak route creation [#30233](https://github.com/openshift/origin/pull/30233)
* [CNF-18661](https://issues.redhat.com/browse/CNF-18661): Update vendor to include communication matrix bug fix [#30232](https://github.com/openshift/origin/pull/30232)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): images: add keycloak images and use them in ExternalOIDC tests [#30221](https://github.com/openshift/origin/pull/30221)
* NO-JIRA: Migrate new func for  non-Job pods readiness helper for OCL from  openshift-test-private repo [#30193](https://github.com/openshift/origin/pull/30193)
* NO-ISSUE: test/extended/util/framework: Poll in IsMicroShiftCluster [#30161](https://github.com/openshift/origin/pull/30161)
* [OCPBUGS-61538](https://issues.redhat.com/browse/OCPBUGS-61538): Skip config-operator checking when featureSet is DevPreviewNoUpgrade [#30236](https://github.com/openshift/origin/pull/30236)
* [OCPBUGS-61193](https://issues.redhat.com/browse/OCPBUGS-61193): chore(extended/prometheus): make 'targets auth' test more lenient and more resilient. [#30219](https://github.com/openshift/origin/pull/30219)
* NO-ISSUE: Automated - Update synthetic test data [#30020](https://github.com/openshift/origin/pull/30020)
* [OCPBUGS-61287](https://issues.redhat.com/browse/OCPBUGS-61287): Add flaky kubectl logs test to the retry list to clean signal for release [#30215](https://github.com/openshift/origin/pull/30215)
* [OCPBUGS-60507](https://issues.redhat.com/browse/OCPBUGS-60507): Bump to latest openshift/kubernetes (v1.33.4) [#30227](https://github.com/openshift/origin/pull/30227)
* [CNF-18661](https://issues.redhat.com/browse/CNF-18661): update the commatrix vendor version to contain new changes [#30220](https://github.com/openshift/origin/pull/30220)
* Trt-2257: track run options [#30195](https://github.com/openshift/origin/pull/30195)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/origin/compare/755c0d2c77c6b880efd65248fb3267c189bf069d...92f0f58072daeecaf367e181fca17afebd395d6e)


### [thanos](https://github.com/openshift/thanos/tree/6ea20ffaa35b7b31fe7ef9a99287bdd4a1c1e4e8)

* Updating ose-thanos-container image to be consistent with ART for 4.21 [#164](https://github.com/openshift/thanos/pull/164)
* [Full changelog](https://github.com/openshift/thanos/compare/c0951032b34b832d0f5467e616999490a284101b...6ea20ffaa35b7b31fe7ef9a99287bdd4a1c1e4e8)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/d5badc08a832cedbb8e41b64506ab71888583709)

* [OCPBUGS-57668](https://issues.redhat.com/browse/OCPBUGS-57668): Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.20 [#59](https://github.com/openshift/cluster-api-provider-vsphere/pull/59)
* NO-JIRA: Update OWNERS [#65](https://github.com/openshift/cluster-api-provider-vsphere/pull/65)
* [OCPBUGS-61498](https://issues.redhat.com/browse/OCPBUGS-61498): UPSTREAM: 3636: VSphereClusterIdentity: ensure namespace in tests exists when not using the default [#67](https://github.com/openshift/cluster-api-provider-vsphere/pull/67)
* [OCPBUGS-61498](https://issues.redhat.com/browse/OCPBUGS-61498): Fix openshift/unit-tests.sh [#66](https://github.com/openshift/cluster-api-provider-vsphere/pull/66)
* NO-JIRA: Update OWNERS [#63](https://github.com/openshift/cluster-api-provider-vsphere/pull/63)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/64ebe003b8932779a01eaf2244cda82d9e5de68d...d5badc08a832cedbb8e41b64506ab71888583709)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/133442c239c6ebfeec175f1620b5b08d887cbe90)

* Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.21 [#150](https://github.com/openshift/vmware-vsphere-csi-driver/pull/150)
* NO-JIRA: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.21 [#148](https://github.com/openshift/vmware-vsphere-csi-driver/pull/148)
* [STOR-2404](https://issues.redhat.com/browse/STOR-2404): Rebase to upstream v3.5.0 for OCP 4.20 [#147](https://github.com/openshift/vmware-vsphere-csi-driver/pull/147)
* [OCPBUGS-57582](https://issues.redhat.com/browse/OCPBUGS-57582): Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.20 [#146](https://github.com/openshift/vmware-vsphere-csi-driver/pull/146)
* [OCPBUGS-57570](https://issues.redhat.com/browse/OCPBUGS-57570): Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.20 [#145](https://github.com/openshift/vmware-vsphere-csi-driver/pull/145)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/0130247772b8d6618f9d25bbe7bde0a6c9224f9a...133442c239c6ebfeec175f1620b5b08d887cbe90)