# 4.21.0-okd-scos.ec.1

Created: 2025-10-02 14:34:46 +0000 UTC

Image Digest: `sha256:d80af79ddeca8224b5cf7482e787214d1b03e80883c0c0c23dedb9671efc36b7`

Promoted from registry.ci.openshift.org/origin/release-scos:4.21.0-0.okd-scos-2025-09-30-202219


## Changes from 4.20.0-okd-scos.ec.16

### Components

* Kubectl 1.33.3
* Kubernetes upgraded from 1.33.4 to 1.33.5
* Kubernetes Tests upgraded from 1.33.3 to 1.33.4
* CentOS Stream CoreOS 10.0.20250827-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| InsightsConfigAPI <br/> (0 tests)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed) |
| NodeSwap <br/> (0 tests)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed) |
| GCPClusterHostedDNSInstall <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| CBORServingAndStorage <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| ClientsAllowCBOR <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| ClientsPreferCBOR <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| ClusterAPIMachineManagementVSphere <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)|  |   |


### Removed images

* ovirt-csi-driver
* ovirt-csi-driver-operator


### Rebuilt images without code change

* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [467e50fe](https://github.com/openshift/cloud-network-config-controller/commit/467e50feff5a56afbf9ccefc025781c9ccff8eca) `sha256:e8e0b74656219fe49a344e278827a20b7fbbf018ae33757c2bb9da5bd4ba5efa`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [ef99d3d4](https://github.com/openshift/multus-networkpolicy/commit/ef99d3d4cf1a15abfa55ef71b75c0eaa18a791ce) `sha256:be6dd1a247ca54c251d73fd9585c0e7272748df0593dd4fb43479f2ff1799ac2`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/9276f59eda850e52f9588b0809bb381ef3e24570)

* NO-ISSUE: [master] Bump OCP versions: 4.17, 4.19, 4.20, 4.15, 4.14 [#8084](https://github.com/openshift/assisted-service/pull/8084)
* [MGMT-20192](https://issues.redhat.com/browse/MGMT-20192): add possibility to disable image service [#7955](https://github.com/openshift/assisted-service/pull/7955)
* And 21 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-service/compare/d81ac6569ccedffd1a5a05ffc4767dec27e418cb...9276f59eda850e52f9588b0809bb381ef3e24570)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/d5d850c10cfd6bf7da11cf7aa1be89ab0ad7cd6b)

* NO-ISSUE: Update Konflux references [#1265](https://github.com/openshift/assisted-installer/pull/1265)
* And 5 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/a68b920cd884948e90ba31811e2577a5d54535cc...d5d850c10cfd6bf7da11cf7aa1be89ab0ad7cd6b)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/9291c616d2f142854d601b18b17e5b9d2f005ba2)

* chore(KONFLUX-6210): fix and set name and cpe label for assisted-installer-agent-ds-main (#1111) [#1111](https://github.com/openshift/assisted-installer-agent/pull/1111)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/f6aa4cd4b00d18ba7f5fa3b0a039049c851e2ffd...9291c616d2f142854d601b18b17e5b9d2f005ba2)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/bfc340d601a98eba90f42ad7df0db7c4e9fe4420)

* [AGENT-1258](https://issues.redhat.com/browse/AGENT-1258): Build PipelineRun changes for Konflux [#155](https://github.com/openshift/agent-installer-utils/pull/155)
* [OCPBUGS-61946](https://issues.redhat.com/browse/OCPBUGS-61946): Include only final ISO in OVE UI container image [#162](https://github.com/openshift/agent-installer-utils/pull/162)
* [OCPBUGS-61956](https://issues.redhat.com/browse/OCPBUGS-61956): Disable Konflux go.mod PR updates [#163](https://github.com/openshift/agent-installer-utils/pull/163)
* [OCPBUGS-61875](https://issues.redhat.com/browse/OCPBUGS-61875): Add 4.21 config [#160](https://github.com/openshift/agent-installer-utils/pull/160)
* [AGENT-1258](https://issues.redhat.com/browse/AGENT-1258): Red Hat Konflux kflux-prd-rh02 update ove-ui-iso [#154](https://github.com/openshift/agent-installer-utils/pull/154)
* [AGENT-1258](https://issues.redhat.com/browse/AGENT-1258): Red Hat Konflux kflux-prd-rh02 purge agent-installer-utils [#153](https://github.com/openshift/agent-installer-utils/pull/153)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/3ae48f72fc311267ce09fa3f1088b3719f51a138...bfc340d601a98eba90f42ad7df0db7c4e9fe4420)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/fa4e6bb70f444336072ff7c44f20afa38b2a3785)

* NO-JIRA: Update OWNERS [#116](https://github.com/openshift/cloud-provider-aws/pull/116)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/bb88da16b29d63573861351afc5ca8c4547775d6...fa4e6bb70f444336072ff7c44f20afa38b2a3785)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/043b4e8048915656d91428c01497fb109e534b09)

* NO-JIRA: Update OWNERS [#567](https://github.com/openshift/cluster-api-provider-aws/pull/567)
* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.1 (9c17049) into main [#569](https://github.com/openshift/cluster-api-provider-aws/pull/569)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/9467200c8073d4609cfca356bc6fc8126c505886...043b4e8048915656d91428c01497fb109e534b09)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/b52e702a6cffbb9b2016c5ef1e84511ab5d44527)

* [OCPBUGS-60637](https://issues.redhat.com/browse/OCPBUGS-60637): add runAsUser hook for operator deployment controller [#431](https://github.com/openshift/csi-operator/pull/431)
* NO-JIRA: Centralize injection of hosted-kubeconfig volume [#311](https://github.com/openshift/csi-operator/pull/311)
* NO-JIRA: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.21 [#429](https://github.com/openshift/csi-operator/pull/429)
* [OCPBUGS-54385](https://issues.redhat.com/browse/OCPBUGS-54385): Avoid informer resync [#432](https://github.com/openshift/csi-operator/pull/432)
* NO-JIRA: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.21 [#427](https://github.com/openshift/csi-operator/pull/427)
* NO-JIRA: Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.21 [#425](https://github.com/openshift/csi-operator/pull/425)
* NO-JIRA: azure-disk, azure-file sync code de-duplication [#303](https://github.com/openshift/csi-operator/pull/303)
* [Full changelog](https://github.com/openshift/csi-operator/compare/a92ebd03f1d495e27a76b03e9db002e08fcb8ac8...b52e702a6cffbb9b2016c5ef1e84511ab5d44527)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/69f6a4842c768950f7398dc301e1257c4f08a6f9)

* NO-JIRA: Update OWNERS [#149](https://github.com/openshift/cloud-provider-azure/pull/149)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/d469d04ed645358d942af442fe21e2c2b44b9b2c...69f6a4842c768950f7398dc301e1257c4f08a6f9)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/8bf9ae8fd009855c6be556cb9c5f883def133684)

* NO-JIRA: Update OWNERS [#351](https://github.com/openshift/cluster-api-provider-azure/pull/351)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/cb8b5b6a485971a95c5a74508d76ab19b23cbf29...8bf9ae8fd009855c6be556cb9c5f883def133684)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/801b059d6601d64b158950eb3bbf73124a15ee4a)

* NO-JIRA: Update OWNERS [#162](https://github.com/openshift/machine-api-provider-azure/pull/162)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/4927cc2be4f629e367d2a79a310900c7cced3f6c...801b059d6601d64b158950eb3bbf73124a15ee4a)


### [azure-service-operator](https://github.com/openshift/azure-service-operator/tree/f151109be3a712fd78016e8d8537dbe0971f025c)

* NO-JIRA: Update OWNERS [#12](https://github.com/openshift/azure-service-operator/pull/12)
* [Full changelog](https://github.com/openshift/azure-service-operator/compare/6e2f362623720f7b6d634fbc424fbc61e4b481ae...f151109be3a712fd78016e8d8537dbe0971f025c)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/a745dedc2dbc8c00eadbba58e8e6c5388f681510)

* no-jira: Revert "Merge pull request #9939 from barbacbd/CORS-4058-release-4.21" [#9974](https://github.com/openshift/installer/pull/9974)
* [CORS-4078](https://issues.redhat.com/browse/CORS-4078): bump AWS SDK v2 max backoff duration to 300s [#9966](https://github.com/openshift/installer/pull/9966)
* [CORS-4107](https://issues.redhat.com/browse/CORS-4107): Update default release image to 4.21 [#9954](https://github.com/openshift/installer/pull/9954)
* [OCPBUGS-61514](https://issues.redhat.com/browse/OCPBUGS-61514): Add check for gcp firewall deletion permission [#9935](https://github.com/openshift/installer/pull/9935)
* [OCPBUGS-62293](https://issues.redhat.com/browse/OCPBUGS-62293): Set default for PrivateDNSZone Project ID [#9967](https://github.com/openshift/installer/pull/9967)
* [CORS-4078](https://issues.redhat.com/browse/CORS-4078): disable rate limiter for AWS SDK v2 [#9958](https://github.com/openshift/installer/pull/9958)
* [OCPBUGS-61901](https://issues.redhat.com/browse/OCPBUGS-61901): Update explain for Publish [#9950](https://github.com/openshift/installer/pull/9950)
* no-jira: OWNERS: switch to joelcapitao [#9951](https://github.com/openshift/installer/pull/9951)
* [OCPBUGS-61935](https://issues.redhat.com/browse/OCPBUGS-61935): Wildcards not reliable for copying container files [#9948](https://github.com/openshift/installer/pull/9948)
* [CORS-4058](https://issues.redhat.com/browse/CORS-4058): Migrate AWS Destroy to SDK v2 [#9939](https://github.com/openshift/installer/pull/9939)
* [OCPBUGS-61353](https://issues.redhat.com/browse/OCPBUGS-61353): Generated Redacted nutanix config for operator [#9931](https://github.com/openshift/installer/pull/9931)
* [CORS-3550](https://issues.redhat.com/browse/CORS-3550): add ability to opt out of the sigstore signing requirement [#9940](https://github.com/openshift/installer/pull/9940)
* [CORS-4162](https://issues.redhat.com/browse/CORS-4162): Remove GCPClusterHostedDNSInstall featuregate [#9944](https://github.com/openshift/installer/pull/9944)
* [OCPBUGS-61490](https://issues.redhat.com/browse/OCPBUGS-61490): Update code to retrieve ICSP instead of ICP [#9933](https://github.com/openshift/installer/pull/9933)
* [MGMT-21586](https://issues.redhat.com/browse/MGMT-21586): Add an option in image-based installation to specify architecture [#9934](https://github.com/openshift/installer/pull/9934)
* [SPLAT-2430](https://issues.redhat.com/browse/SPLAT-2430): Update vSphere version validations for 7 EOL and VCF 9 [#9914](https://github.com/openshift/installer/pull/9914)
* [OCPBUGS-61373](https://issues.redhat.com/browse/OCPBUGS-61373): Fix shellcheck issues in bootstrap [#9929](https://github.com/openshift/installer/pull/9929)
* [OCPBUGS-61373](https://issues.redhat.com/browse/OCPBUGS-61373): Fix agent shellcheck issues [#9928](https://github.com/openshift/installer/pull/9928)
* no-jira: Fix logging and error messages [#9917](https://github.com/openshift/installer/pull/9917)
* [Full changelog](https://github.com/openshift/installer/compare/c805b240dc45c054ff83d57ae945772feef90ea4...a745dedc2dbc8c00eadbba58e8e6c5388f681510)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/4e6a729c5ac8fde8859db5830def262dfdee28ea)

* [OCPBUGS-62365](https://issues.redhat.com/browse/OCPBUGS-62365): Updating baremetal-machine-controller-container image to be consistent with ART for 4.21 [#237](https://github.com/openshift/cluster-api-provider-baremetal/pull/237)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/fb678fec5f7e08348b281341481f33a848204e50...4e6a729c5ac8fde8859db5830def262dfdee28ea)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/a43ea28ad0785e9f1f17dfa46c894e0a9f0b88da)

* NO-JIRA: Updating openshift-enterprise-cli-container image to be consistent with ART for 4.21 [#2107](https://github.com/openshift/oc/pull/2107)
* [OCPBUGS-59311](https://issues.redhat.com/browse/OCPBUGS-59311): oc adm must-gather: Add support for context [#2105](https://github.com/openshift/oc/pull/2105)
* [OCPBUGS-59311](https://issues.redhat.com/browse/OCPBUGS-59311): pkg/.../inspect: Add support for context.Context [#2100](https://github.com/openshift/oc/pull/2100)
* [WRKLDS-593](https://issues.redhat.com/browse/WRKLDS-593): oc adm must-gather: Improve cleanup order [#2080](https://github.com/openshift/oc/pull/2080)
* NO-JIRA: Add tchap as reviewer in oc [#2099](https://github.com/openshift/oc/pull/2099)
* NO-JIRA: oc adm groups sync: Use client.Unbind [#2094](https://github.com/openshift/oc/pull/2094)
* [OCPBUGS-61063](https://issues.redhat.com/browse/OCPBUGS-61063): pkg/cli/admin/upgrade/recommend: Enable precheck and accept gates [#2088](https://github.com/openshift/oc/pull/2088)
* [OCPBUGS-52936](https://issues.redhat.com/browse/OCPBUGS-52936): oc adm policy: Only initialize UserClient if built-in OAuth is enabled [#2090](https://github.com/openshift/oc/pull/2090)
* [OCPBUGS-61311](https://issues.redhat.com/browse/OCPBUGS-61311): Introduce auto-open-browser flag for external OIDC issuer login [#2089](https://github.com/openshift/oc/pull/2089)
* NO-ISSUE: pkg/cli/admin/upgrade/recommend/examples/4.19.0-okd-scos.16: Add OKD example [#2093](https://github.com/openshift/oc/pull/2093)
* [OCPBUGS-59951](https://issues.redhat.com/browse/OCPBUGS-59951): oc adm must-gather: Wrap gather in a session [#2087](https://github.com/openshift/oc/pull/2087)
* NO-JIRA: Add some warnings into excluded list [#2092](https://github.com/openshift/oc/pull/2092)
* [OCPBUGS-56691](https://issues.redhat.com/browse/OCPBUGS-56691): Rely on overall available disk space of the mounted volume [#2084](https://github.com/openshift/oc/pull/2084)
* [Full changelog](https://github.com/openshift/oc/compare/a43428189603f12ae190703cb725f66f742fbe52...a43ea28ad0785e9f1f17dfa46c894e0a9f0b88da)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/a3e50aeacc553ba4e612af349741ae1a33ad0ba2)

* [OCPBUGS-62184](https://issues.redhat.com/browse/OCPBUGS-62184): aws: remove endpoint overrides for s3 and cf clients [#921](https://github.com/openshift/cloud-credential-operator/pull/921)
* [CCO-692](https://issues.redhat.com/browse/CCO-692): Migrate to aws-ask-go-v2 [#905](https://github.com/openshift/cloud-credential-operator/pull/905)
* [OCPBUGS-61475](https://issues.redhat.com/browse/OCPBUGS-61475): set cloud-credential-operator as default-container [#914](https://github.com/openshift/cloud-credential-operator/pull/914)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/69a6090e6d2ddedb585d9e0583628028ebe4b26f...a3e50aeacc553ba4e612af349741ae1a33ad0ba2)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/cb20ecadf8f6a878cfc1803b29ae6a20c27f7601)

* [API-1835](https://issues.redhat.com/browse/API-1835): fix integration tests [#795](https://github.com/openshift/cluster-authentication-operator/pull/795)
* [OCPBUGS-57444](https://issues.redhat.com/browse/OCPBUGS-57444): set appropriate rolling update settings [#789](https://github.com/openshift/cluster-authentication-operator/pull/789)
* NO-JIRA: om: fix integration testing [#788](https://github.com/openshift/cluster-authentication-operator/pull/788)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/11e57aa35590d3481288e09003c9109e0bfc62ce...cb20ecadf8f6a878cfc1803b29ae6a20c27f7601)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/116fdbabba7ec83174f300f0b241360cfc6fabd6)

* NO-JIRA: Remove OWNERS automation preamble [#382](https://github.com/openshift/kubernetes-autoscaler/pull/382)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/d883d0e6dbb74f0839631ebc7a584669f0e955a3...116fdbabba7ec83174f300f0b241360cfc6fabd6)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/4f560b2f1f15e2d5e3d36062b4cc7b9df7ce11c2)

* [OCPBUGS-60498](https://issues.redhat.com/browse/OCPBUGS-60498): Always have a service for ironic-api port [#510](https://github.com/openshift/cluster-baremetal-operator/pull/510)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/7c032738a133c6061997d6a8062c841d9f164090...4f560b2f1f15e2d5e3d36062b4cc7b9df7ce11c2)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/68af62466a46bf75de1b9665e6d42c7a19f477bd)

* NO-JIRA: Update OWNERS [#246](https://github.com/openshift/cluster-api/pull/246)
* [OCPBUGS-57605](https://issues.redhat.com/browse/OCPBUGS-57605): Updating ose-cluster-api-container image to be consistent with ART for 4.20 [#242](https://github.com/openshift/cluster-api/pull/242)
* [Full changelog](https://github.com/openshift/cluster-api/compare/de1db2970e7fede7101e5a8188e74942ab6665e3...68af62466a46bf75de1b9665e6d42c7a19f477bd)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/2a0af92c5080d528bf88f342a963130c9b840ba5)

* [OCPCLOUD-2992](https://issues.redhat.com/browse/OCPCLOUD-2992): Enable MAPI machine synchronized e2e tests (re-enable after OCPBUGS-54703 fix) [#359](https://github.com/openshift/cluster-capi-operator/pull/359)
* NO-JIRA: Update OWNERS [#353](https://github.com/openshift/cluster-capi-operator/pull/353)
* [OCPCLOUD-3162](https://issues.redhat.com/browse/OCPCLOUD-3162): conversion: do not set ignition version on AWSMachine [#363](https://github.com/openshift/cluster-capi-operator/pull/363)
* NO-JIRA: use go workspaces [#358](https://github.com/openshift/cluster-capi-operator/pull/358)
* [OCPCLOUD-2714](https://issues.redhat.com/browse/OCPCLOUD-2714): Add VAPs to prevent setting of CAPI fields that are not supported by MAPI [#334](https://github.com/openshift/cluster-capi-operator/pull/334)
* No-JIRA: increased timeout [#354](https://github.com/openshift/cluster-capi-operator/pull/354)
* NO-JIRA: Adds AGENTS.md [#349](https://github.com/openshift/cluster-capi-operator/pull/349)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/64fd75d91fed293329d2cd681ea3fa703fad6bff...2a0af92c5080d528bf88f342a963130c9b840ba5)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/2dc5d4b1d8fb5de40563e5c38179f39293f23c80)

* [OCPBUGS-60385](https://issues.redhat.com/browse/OCPBUGS-60385): Add Microsoft.Network/publicIPAddresses/delete permission [#416](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/416)
* NO-JIRA: Update OWNERS [#413](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/413)
* [OCPBUGS-54490](https://issues.redhat.com/browse/OCPBUGS-54490): Add Azure permissions for Private Link Service operations [#417](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/417)
* [SPLAT-2341](https://issues.redhat.com/browse/SPLAT-2341): Add feature gate support in the cloud-config sync controller [#400](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/400)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/e355ad389d1d09be1a83f024f54b15e844982d0a...2dc5d4b1d8fb5de40563e5c38179f39293f23c80)


### [cluster-config-api](https://github.com/openshift/api/tree/7f245291a17ac0bd31cf8ba08530c3355b86dbea)

* [OCPBUGS-62068](https://issues.redhat.com/browse/OCPBUGS-62068): NodeSwap Feature Gate usage to be removed [#2494](https://github.com/openshift/api/pull/2494)
* [OCPBUGS-59939](https://issues.redhat.com/browse/OCPBUGS-59939): ConsoleLink CRD has incorrect additionalPrinterColumns entry [#2507](https://github.com/openshift/api/pull/2507)
* [OCPBUGS-59940](https://issues.redhat.com/browse/OCPBUGS-59940): ConsoleLink CRD has incorrect additionalPrinterColumns entry [#2506](https://github.com/openshift/api/pull/2506)
* (bugfix): crdify generator returns aggregated error when validations fail [#2493](https://github.com/openshift/api/pull/2493)
* [MCO-1669](https://issues.redhat.com/browse/MCO-1669): add BootImageSkewEnforcement API [#2357](https://github.com/openshift/api/pull/2357)
* remove unused feature gate InsightsConfigAPI [#2474](https://github.com/openshift/api/pull/2474)
* [OCPBUGS-61689](https://issues.redhat.com/browse/OCPBUGS-61689): Add 'AGE' print column to `MachineConfigNode` object [#2476](https://github.com/openshift/api/pull/2476)
* NO-JIRA: tooling: add crdify generator to run crdify against CRD changes [#2472](https://github.com/openshift/api/pull/2472)
* Update controller-tools to latest on fork [#2478](https://github.com/openshift/api/pull/2478)
* Monitoring API: Add Metric server config [#2322](https://github.com/openshift/api/pull/2322)
* [CNTRLPLANE-5](https://issues.redhat.com/browse/CNTRLPLANE-5): Add CBOR feature gate [#2235](https://github.com/openshift/api/pull/2235)
* NO-JIRA: New rules about CO's conditions [#2469](https://github.com/openshift/api/pull/2469)
* apiservers.config.openshift.io: remove spec.tlsSecurityProfile GoDoc caveats [#2467](https://github.com/openshift/api/pull/2467)
* [SPLAT-2482](https://issues.redhat.com/browse/SPLAT-2482): create new featuregate for ClusterAPIMachineManagementVSphere [#2466](https://github.com/openshift/api/pull/2466)
* [MCO-1675](https://issues.redhat.com/browse/MCO-1675): Update API for Status Reporting needs (REBASED) [#2442](https://github.com/openshift/api/pull/2442)
* [CORS-3993](https://issues.redhat.com/browse/CORS-3993): Promote GCPClusterHostedDNS to Default [#2300](https://github.com/openshift/api/pull/2300)
* Adjust typos [#2243](https://github.com/openshift/api/pull/2243)
* Update schema checker to avoid incorrect new required fields checks [#2470](https://github.com/openshift/api/pull/2470)
* [Full changelog](https://github.com/openshift/api/compare/8634aa495a26bb4aaa63ce810b9768899a0c6e19...7f245291a17ac0bd31cf8ba08530c3355b86dbea)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/4f691883db3a8cd4eee7eae035cc4aedf5ac52fa)

* NO-JIRA: Update OWNERS [#367](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/367)
* [MCO-1866](https://issues.redhat.com/browse/MCO-1866): Ignore boot image differences while reconciling Provider Configs [#368](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/368)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/0bbafe24ade564bc62554251f36de90d524abcde...4f691883db3a8cd4eee7eae035cc4aedf5ac52fa)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/b022cf72ba3b4e982626d6d0b80bd53064bbe6ee)

* Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.21 [#245](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/245)
* [OCPBUGS-62247](https://issues.redhat.com/browse/OCPBUGS-62247): add all-egress label to deployments on HCP and IBM [#243](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/243)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/3880c9659829c9904e58a943050e8dfd4c9a79cb...b022cf72ba3b4e982626d6d0b80bd53064bbe6ee)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/2ec8a3de79d73760abbccdbcbbf9951fc93097cd)

* [NE-2138](https://issues.redhat.com/browse/NE-2138): Bump cluster-dns-operator to Kubernetes 1.33 for 4.21 [#448](https://github.com/openshift/cluster-dns-operator/pull/448)
* NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS [#449](https://github.com/openshift/cluster-dns-operator/pull/449)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/63a93b05b131a3f7ee8b482a5cb4f0c1eac8660e...2ec8a3de79d73760abbccdbcbbf9951fc93097cd)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/69ba323f05c84f72f11a0d086836b3f3412512d4)

* [OCPBUGS-55649](https://issues.redhat.com/browse/OCPBUGS-55649): Remove SetEIPForNLBIngressController feature gate [#1280](https://github.com/openshift/cluster-ingress-operator/pull/1280)
* [OCPBUGS-55673](https://issues.redhat.com/browse/OCPBUGS-55673): Remove IngressControllerLBSubnetsAWS featuregate [#1242](https://github.com/openshift/cluster-ingress-operator/pull/1242)
* NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS [#1281](https://github.com/openshift/cluster-ingress-operator/pull/1281)
* [NE-2139](https://issues.redhat.com/browse/NE-2139): Kubernetes to 1.33.4 and controller-runtime to 0.21 [#1279](https://github.com/openshift/cluster-ingress-operator/pull/1279)
* NO-JIRA: Add davidesalerno to OWNERS [#1278](https://github.com/openshift/cluster-ingress-operator/pull/1278)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/e3ae45d527d0d587b991d34ea276fb671fad0165...69ba323f05c84f72f11a0d086836b3f3412512d4)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/aaf8f8b64f4b309adb19a652db1298a8dc7cd8aa)

* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): MutatingAdmissionPolicy e2es depend on both v1alpha1 and v1beta1 of admissionregistration.k8s.io being served in k8 1.34 [#1927](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1927)
* [OCPBUGS-15430](https://issues.redhat.com/browse/OCPBUGS-15430): move alerting rules from CMO over [#1922](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1922)
* Re-apply "OCPBUGS-57049: certrotation: move test case name outside of AutoRegenerateAfterOfflineExpiry" [#1910](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1910)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): promote MutatingAdmissionPolicy to v1beta1 for &gt; 1.34.0 [#1921](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1921)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/0bec046c8c10682390e2a20ae4f416a2d8589f40...aaf8f8b64f4b309adb19a652db1298a8dc7cd8aa)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/947329c64c68ec3aa5a759242e74177f99e23d3b)

* NO-JIRA: Update OWNERS [#60](https://github.com/openshift/cluster-api-operator/pull/60)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/3ec30377ffff951dc9c0fc2257d290e4b4958465...947329c64c68ec3aa5a759242e74177f99e23d3b)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/5a7a19516b3fabb83213776683d7f5d6cb61ca3a)

* [OCPBUGS-62255](https://issues.redhat.com/browse/OCPBUGS-62255): Throttle resourcesynccontroller on pairs with dual writers. [#881](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/881)
* [WRKLDS-1556](https://issues.redhat.com/browse/WRKLDS-1556): Remove --cloud-provider=external from KCM [#862](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/862)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/3b20c534b1b92d46055147c4f82f69b2ad3044c9...5a7a19516b3fabb83213776683d7f5d6cb61ca3a)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/2345371abed5896006ac4a60c7d555fc25502c0a)

* [OCPBUGS-61301](https://issues.redhat.com/browse/OCPBUGS-61301): Add readonlyRootFilesystem [#575](https://github.com/openshift/cluster-kube-scheduler-operator/pull/575)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/f9b5b31943f2be768af6373def4c8946a30d0ed6...2345371abed5896006ac4a60c7d555fc25502c0a)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/70edaa819a00eb8eaf57b471db1d95f818042cba)

* NO-JIRA: Update OWNERS [#276](https://github.com/openshift/cluster-machine-approver/pull/276)
* NO-JIRA: set machine-approver-controller as default container [#278](https://github.com/openshift/cluster-machine-approver/pull/278)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/ce2750589129dd20b3d1b6a5e7bb8c392d658c5c...70edaa819a00eb8eaf57b471db1d95f818042cba)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/0142d3f6119db99f15c571d6d924674cf52ead03)

* [OCPBUGS-15430](https://issues.redhat.com/browse/OCPBUGS-15430): remove Kubernetes API alerting rules [#2671](https://github.com/openshift/cluster-monitoring-operator/pull/2671)
* NO-JIRA: chore: bump jsonnet dependencies [#2649](https://github.com/openshift/cluster-monitoring-operator/pull/2649)
* [OCPBUGS-62109](https://issues.redhat.com/browse/OCPBUGS-62109): test: remove image registry e2e tests [#2681](https://github.com/openshift/cluster-monitoring-operator/pull/2681)
* NO-ISSUE: update Go dependencies [#2674](https://github.com/openshift/cluster-monitoring-operator/pull/2674)
* [MON-4346](https://issues.redhat.com/browse/MON-4346): Bump Go to 1.24 [#2655](https://github.com/openshift/cluster-monitoring-operator/pull/2655)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2673](https://github.com/openshift/cluster-monitoring-operator/pull/2673)
* [OCPBUGS-60161](https://issues.redhat.com/browse/OCPBUGS-60161): Add mcd_local_unsupported_packages metric from MCO to telemetry [#2638](https://github.com/openshift/cluster-monitoring-operator/pull/2638)
* NO-ISSUE: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.21 [#2662](https://github.com/openshift/cluster-monitoring-operator/pull/2662)
* [MON-4344](https://issues.redhat.com/browse/MON-4344): chore: port the test suite over from openshift-tests-private [#2635](https://github.com/openshift/cluster-monitoring-operator/pull/2635)
* [MON-4371](https://issues.redhat.com/browse/MON-4371): chore(prometheus): enable use-uncached-io feature flag [#2637](https://github.com/openshift/cluster-monitoring-operator/pull/2637)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2668](https://github.com/openshift/cluster-monitoring-operator/pull/2668)
* [OCPBUGS-61113](https://issues.redhat.com/browse/OCPBUGS-61113): add flag `--watch-referenced-objects-in-all-namespaces` to prometheus-operator [#2657](https://github.com/openshift/cluster-monitoring-operator/pull/2657)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2663](https://github.com/openshift/cluster-monitoring-operator/pull/2663)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/4496a0a83b65e566038715a1f2405ba194c10439...0142d3f6119db99f15c571d6d924674cf52ead03)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/6f6d0ee4a020c1cb971d63bc8f68d9f7792dc802)

* [OCPBUGS-42303](https://issues.redhat.com/browse/OCPBUGS-42303): Add drop flows for GARP [#2801](https://github.com/openshift/cluster-network-operator/pull/2801)
* [OCPBUGS-61196](https://issues.redhat.com/browse/OCPBUGS-61196): Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes [#2797](https://github.com/openshift/cluster-network-operator/pull/2797)
* [OCPBUGS-61561](https://issues.redhat.com/browse/OCPBUGS-61561): Relax label req. of DPU/DPU Host/Smart NIC [#2786](https://github.com/openshift/cluster-network-operator/pull/2786)
* Revert "OCPBUGS-61196: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes" [#2796](https://github.com/openshift/cluster-network-operator/pull/2796)
* [OCPBUGS-61196](https://issues.redhat.com/browse/OCPBUGS-61196): Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes [#2605](https://github.com/openshift/cluster-network-operator/pull/2605)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/11ee8f9ffc0a6a0fd3fd7471d84963d7bd2a540f...6f6d0ee4a020c1cb971d63bc8f68d9f7792dc802)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/b5d66f8d5955d74377a11355c6931330a490cf5b)

* [OCPBUGS-62091](https://issues.redhat.com/browse/OCPBUGS-62091): E2E: Add function to check control plane nodes are schedulable. [#1396](https://github.com/openshift/cluster-node-tuning-operator/pull/1396)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/3c890f038bc1da82298b2633c8c61f466e0b3e68...b5d66f8d5955d74377a11355c6931330a490cf5b)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/d1182c7ad66759ec4aae942090fdc7df3d2a69e3)

* NO-ISSUE: Updating ose-cluster-olm-operator-container image to be consistent with ART for 4.21 [#138](https://github.com/openshift/cluster-olm-operator/pull/138)
* [OCPBUGS-61873](https://issues.redhat.com/browse/OCPBUGS-61873): Update RBAC to update/patch/delete what we create [#139](https://github.com/openshift/cluster-olm-operator/pull/139)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/e4917368b6a547f97a0fb411fea90de246d1417e...d1182c7ad66759ec4aae942090fdc7df3d2a69e3)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/5c0dd7a1b366d314aa9c929fe775ee3041b348cb)

* [OCPBUGS-57191](https://issues.redhat.com/browse/OCPBUGS-57191): fix(psalabelsyncer): return an error instead of panic when converting an unknown volume [#167](https://github.com/openshift/cluster-policy-controller/pull/167)
* NO-JIRA: scc allocation controller: Use server-side apply [#165](https://github.com/openshift/cluster-policy-controller/pull/165)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/3e7538547c8f209c72083097a4ebaada6e9c46c5...5c0dd7a1b366d314aa9c929fe775ee3041b348cb)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/8a74b8054dad10eb32c629542f653d8eb44a88dc)

* [OCPBUGS-62061](https://issues.redhat.com/browse/OCPBUGS-62061): Re-sync OCP Samples Library for OCP 4.21 - 22Sep2025 [#650](https://github.com/openshift/cluster-samples-operator/pull/650)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/62b3623c6a2860e7a8cc368dbe76e767508cd261...8a74b8054dad10eb32c629542f653d8eb44a88dc)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/eb5ba15585650e5f76272c3a5db82e0bee11617e)

* [STOR-2297](https://issues.redhat.com/browse/STOR-2297): remove oVirt code from CSO [#617](https://github.com/openshift/cluster-storage-operator/pull/617)
* [OCPBUGS-60637](https://issues.redhat.com/browse/OCPBUGS-60637): HyperShift deployments should reflect user id security context [#616](https://github.com/openshift/cluster-storage-operator/pull/616)
* [OCPBUGS-62121](https://issues.redhat.com/browse/OCPBUGS-62121): add all-egress label to deployments on HCP and IBM [#621](https://github.com/openshift/cluster-storage-operator/pull/621)
* [OCPBUGS-61175](https://issues.redhat.com/browse/OCPBUGS-61175): Add RBAC rule to let manila-csi-driver-operator manage NetworkPolicy [#615](https://github.com/openshift/cluster-storage-operator/pull/615)
* [SPLAT-2467](https://issues.redhat.com/browse/SPLAT-2467): Updated VPD alerts to reflect current vSphere support [#612](https://github.com/openshift/cluster-storage-operator/pull/612)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/cfcc1f7f1f2c702118cd4b182d04c12defac6d30...eb5ba15585650e5f76272c3a5db82e0bee11617e)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/f4335a376852396a21e9f5b9b40d40b9b50640ed)

* [OCPBUGS-62464](https://issues.redhat.com/browse/OCPBUGS-62464): Updating ose-cluster-update-keys-container image to be consistent with ART for 4.21 [#86](https://github.com/openshift/cluster-update-keys/pull/86)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/c40e7b9b60c62690a25333fc54ae0d3705474afb...f4335a376852396a21e9f5b9b40d40b9b50640ed)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/e21c93c4727f555c6e5784ab9e7a558db1678ef0)

* [OCPBUGS-62416](https://issues.redhat.com/browse/OCPBUGS-62416): Updating cluster-version-operator-container image to be consistent with ART for 4.21 [#1237](https://github.com/openshift/cluster-version-operator/pull/1237)
* [OTA-1585](https://issues.redhat.com/browse/OTA-1585): test: Rename an existing test to comply with the OTE integration guide [#1235](https://github.com/openshift/cluster-version-operator/pull/1235)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/b21fbd24bd0512b38e9dab463383e662d1c92a01...e21c93c4727f555c6e5784ab9e7a558db1678ef0)


### [console](https://github.com/openshift/console/tree/0a2f026449d01ab9372b78a3d767057bb16810c6)

* [CONSOLE-4332](https://issues.redhat.com/browse/CONSOLE-4332): Update the secrets forms to use PF components [#15513](https://github.com/openshift/console/pull/15513)
* [OCPBUGS-62313](https://issues.redhat.com/browse/OCPBUGS-62313): Returning from any Secret Create page does not return to secret page [#15543](https://github.com/openshift/console/pull/15543)
* [CONSOLE-4684](https://issues.redhat.com/browse/CONSOLE-4684): Refactor machine-set modals [#15484](https://github.com/openshift/console/pull/15484)
* [OCPBUGS-62281](https://issues.redhat.com/browse/OCPBUGS-62281): InsecureSkipVerify to true for results proxy endpoint in off-cluster [#14888](https://github.com/openshift/console/pull/14888)
* [CONSOLE-4808](https://issues.redhat.com/browse/CONSOLE-4808): update resource-log.cy.ts [#15539](https://github.com/openshift/console/pull/15539)
* [CONSOLE-4799](https://issues.redhat.com/browse/CONSOLE-4799): update tests/app/debug-pod.cy.ts [#15530](https://github.com/openshift/console/pull/15530)
* [CONSOLE-4802](https://issues.redhat.com/browse/CONSOLE-4802): Migrate `KebabActions` to dynamic [#15535](https://github.com/openshift/console/pull/15535)
* [CONSOLE-3769](https://issues.redhat.com/browse/CONSOLE-3769): Add @openshift/dynamic-plugin-sdk to core and internal pkg deps [#15518](https://github.com/openshift/console/pull/15518)
* [OCPBUGS-61536](https://issues.redhat.com/browse/OCPBUGS-61536): Fix incorrect handling of vSphere settings [#15481](https://github.com/openshift/console/pull/15481)
* [OCPBUGS-61937](https://issues.redhat.com/browse/OCPBUGS-61937): Add Missing Periods to Error Messages and update try again button link [#15511](https://github.com/openshift/console/pull/15511)
* NO-JIRA: Remove yarn-generate from post-install script [#15373](https://github.com/openshift/console/pull/15373)
* [CONSOLE-4796](https://issues.redhat.com/browse/CONSOLE-4796): Migrate some Dashboards extensions to dynamic [#15526](https://github.com/openshift/console/pull/15526)
* [OCPBUGS-61535](https://issues.redhat.com/browse/OCPBUGS-61535): Cancel PVC creation redirect user to last visited page instead of PVC list [#15502](https://github.com/openshift/console/pull/15502)
* [CONSOLE-4764](https://issues.redhat.com/browse/CONSOLE-4764): Add tech preview feature flag support [#15477](https://github.com/openshift/console/pull/15477)
* [CONSOLE-4715](https://issues.redhat.com/browse/CONSOLE-4715): Migrate the Enzyme test __tests__ root directory and remove __tests__… [#15462](https://github.com/openshift/console/pull/15462)
* NO-JIRA: Update CHANGELOG based on 4.18 plugin SDK package release [#15517](https://github.com/openshift/console/pull/15517)
* [CONSOLE-4760](https://issues.redhat.com/browse/CONSOLE-4760): update CRD list to use ResourceDataView [#15469](https://github.com/openshift/console/pull/15469)
* [CONSOLE-3769](https://issues.redhat.com/browse/CONSOLE-3769): Install `@openshift/dynamic-plugin-sdk` [#15509](https://github.com/openshift/console/pull/15509)
* [OCPBUGS-60084](https://issues.redhat.com/browse/OCPBUGS-60084): Help dropdown should be closed automatically after tour model opened [#15483](https://github.com/openshift/console/pull/15483)
* [OCPBUGS-55401](https://issues.redhat.com/browse/OCPBUGS-55401): PVC shows negative Available space in OpenShift Console on RHOCP 4 [#15315](https://github.com/openshift/console/pull/15315)
* [OCPBUGS-59634](https://issues.redhat.com/browse/OCPBUGS-59634): Fix the events search input width, and incorporate PF Toolbar component [#15501](https://github.com/openshift/console/pull/15501)
* NO-JIRA: Update README.md with instructions for logging out kube:admin in local [#15482](https://github.com/openshift/console/pull/15482)
* NO-JIRA: chore(OWNERS): remove logonoff from reviewers [#15505](https://github.com/openshift/console/pull/15505)
* [CONSOLE-4710](https://issues.redhat.com/browse/CONSOLE-4710): use useOverlay to launch ErrorModal [#15475](https://github.com/openshift/console/pull/15475)
* [OCPBUGS-61087](https://issues.redhat.com/browse/OCPBUGS-61087): Updation of label from edit label doesn't work [#15460](https://github.com/openshift/console/pull/15460)
* [OCPBUGS-61519](https://issues.redhat.com/browse/OCPBUGS-61519): Fix improper DescriptionList refactor [#15495](https://github.com/openshift/console/pull/15495)
* [OCPBUGS-59972](https://issues.redhat.com/browse/OCPBUGS-59972): Add validation and type guards on healthHandler calls to prevent errors [#15470](https://github.com/openshift/console/pull/15470)
* [CONSOLE-4756](https://issues.redhat.com/browse/CONSOLE-4756): Convert more files to TypeScript [#15472](https://github.com/openshift/console/pull/15472)
* [OCPBUGS-61458](https://issues.redhat.com/browse/OCPBUGS-61458): fix MachineSet YAML template [#15478](https://github.com/openshift/console/pull/15478)
* [OCPBUGS-58118](https://issues.redhat.com/browse/OCPBUGS-58118): fix namespace path generation for non-namespaced resources [#15467](https://github.com/openshift/console/pull/15467)
* [OCPBUGS-61183](https://issues.redhat.com/browse/OCPBUGS-61183): cluster in workload identity mode is not applied with the token-auth-… [#15459](https://github.com/openshift/console/pull/15459)
* [OCPBUGS-61133](https://issues.redhat.com/browse/OCPBUGS-61133): Fix catalog search relevance scoring, so that operators with attribute.keywords are displayed and remove unnecessary metadataName from calculation [#15444](https://github.com/openshift/console/pull/15444)
* [OCPBUGS-61468](https://issues.redhat.com/browse/OCPBUGS-61468): i18n upload/download routine task for OCP version 4.20 [#15476](https://github.com/openshift/console/pull/15476)
* [CONSOLE-4727](https://issues.redhat.com/browse/CONSOLE-4727): Update OWNERS files across the repo [#15461](https://github.com/openshift/console/pull/15461)
* [CONSOLE-4598](https://issues.redhat.com/browse/CONSOLE-4598): Migrate enzyme __tests__/components/utils unit tests to React Testing… [#15442](https://github.com/openshift/console/pull/15442)
* [OCPBUGS-61393](https://issues.redhat.com/browse/OCPBUGS-61393): Change default tab size from 4 to 2 [#15474](https://github.com/openshift/console/pull/15474)
* [CONSOLE-4635](https://issues.redhat.com/browse/CONSOLE-4635): Refactor PDBActionFactory to hook form and cleanup. [#15285](https://github.com/openshift/console/pull/15285)
* And 6 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/0748392def188dbb070308c32c1fbb3457624f95...0a2f026449d01ab9372b78a3d767057bb16810c6)


### [console-operator](https://github.com/openshift/console-operator/tree/ca22e61b677ad21da5060fab7d447292c4d01afe)

* [CONSOLE-4765](https://issues.redhat.com/browse/CONSOLE-4765), [CONSOLE-4767](https://issues.redhat.com/browse/CONSOLE-4767): Automate console tech preview flag via cluster FeatureSet, Grant console service account watch permissions for ClusterCatalogs [#1043](https://github.com/openshift/console-operator/pull/1043)
* [OCPBUGS-61726](https://issues.redhat.com/browse/OCPBUGS-61726): Revert "OCPBUGS-61432: fix(oidc): fix  OIDCClientSecretGet condition" [#1046](https://github.com/openshift/console-operator/pull/1046)
* [OCPBUGS-61432](https://issues.redhat.com/browse/OCPBUGS-61432): fix(oidc): fix  OIDCClientSecretGet condition [#1041](https://github.com/openshift/console-operator/pull/1041)
* [OCPBUGS-61483](https://issues.redhat.com/browse/OCPBUGS-61483): Update DEFAULT_DOC_URL to point to OpenShift Container Platform 4.21 [#1044](https://github.com/openshift/console-operator/pull/1044)
* [OCPBUGS-61383](https://issues.redhat.com/browse/OCPBUGS-61383): Update QuickStarts typo and doc link [#1042](https://github.com/openshift/console-operator/pull/1042)
* [OCPBUGS-60863](https://issues.redhat.com/browse/OCPBUGS-60863): Rename Dockerfile to Dockerfile.ocp [#1039](https://github.com/openshift/console-operator/pull/1039)
* [Full changelog](https://github.com/openshift/console-operator/compare/76ae5dafe7640111fa8e9c7f745122e4844d4a5d...ca22e61b677ad21da5060fab7d447292c4d01afe)


### [coredns](https://github.com/openshift/coredns/tree/91ae57f91e0bba5fc4fdb816e1f1cea633b3a8b5)

* NO-JIRA: Updating coredns-container image to be consistent with ART for 4.21 [#154](https://github.com/openshift/coredns/pull/154)
* NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS [#153](https://github.com/openshift/coredns/pull/153)
* [Full changelog](https://github.com/openshift/coredns/compare/6f39336e6da9dc77b2db140a96773c413d50a665...91ae57f91e0bba5fc4fdb816e1f1cea633b3a8b5)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/8d440867f9983c59c3c54f1e382542d71126d3d3)

* [OCPBUGS-61394](https://issues.redhat.com/browse/OCPBUGS-61394): UPSTREAM: 682: Skip VolumeAttachments of other drivers [#88](https://github.com/openshift/csi-external-attacher/pull/88)
* NO-JIRA: Updating csi-attacher-container image to be consistent with ART for 4.21 [#87](https://github.com/openshift/csi-external-attacher/pull/87)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/45239149cb387bcc51d944b802db0e804dc02688...8d440867f9983c59c3c54f1e382542d71126d3d3)


### [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata/tree/24faebef64fac7975f6556996c3c2a1388a479ff)

* NO-JIRA: Updating csi-external-snapshot-metadata-container image to be consistent with ART for 4.21 [#5](https://github.com/openshift/csi-external-snapshot-metadata/pull/5)
* [Full changelog](https://github.com/openshift/csi-external-snapshot-metadata/compare/693a826455777eaafc677bb2195dc071d184243b...24faebef64fac7975f6556996c3c2a1388a479ff)


### [csi-external-snapshotter, csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter/tree/ba8194d5920973069bc56a8bf5844afeedc66bbd)

* NO-JIRA: Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.21 [#187](https://github.com/openshift/csi-external-snapshotter/pull/187)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/42604822c25eb2aa0ecb017c24e328221b238eb9...ba8194d5920973069bc56a8bf5844afeedc66bbd)


### [docker-registry](https://github.com/openshift/image-registry/tree/a6bab654daa9d8e715392464d228fc3f5eae8dfe)

* [OCPBUGS-60845](https://issues.redhat.com/browse/OCPBUGS-60845): update OWNERS [#447](https://github.com/openshift/image-registry/pull/447)
* [Full changelog](https://github.com/openshift/image-registry/compare/887533765ee92e061fd44ad0b032aefd5b9b4e3c...a6bab654daa9d8e715392464d228fc3f5eae8dfe)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/5c53d757ae380994b89701a98d8b61912154aca7)

* Updating the OWNERS file. (#175) [#175](https://github.com/openshift/driver-toolkit/pull/175)
* Updating driver-toolkit-container image to be consistent with ART for 4.21 (#172) [#172](https://github.com/openshift/driver-toolkit/pull/172)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/9d55fd1aaba05830f857132bd149ee3cf18cc20f...5c53d757ae380994b89701a98d8b61912154aca7)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/b27a2f9a7629aca3c2ce4d9356092ea1f09d5719)

* [OCPBUGS-61006](https://issues.redhat.com/browse/OCPBUGS-61006): Adjust vendoring to use go.work to get rid of the symlink [#91](https://github.com/openshift/cloud-provider-gcp/pull/91)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/f940e72e7611ce4a96da3e47966ba1befd25c474...b27a2f9a7629aca3c2ce4d9356092ea1f09d5719)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/9a47258683617971e3da686e897766bd42cc751b)

* NO-JIRA: Update OWNERS [#248](https://github.com/openshift/cluster-api-provider-gcp/pull/248)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/65539c71b4c292fc0f4eeb572dfe490af63063d9...9a47258683617971e3da686e897766bd42cc751b)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/498f27049011c7e6e59a6a26ffe55d49f65ed911)

* NO-JIRA: Update OWNERS [#129](https://github.com/openshift/machine-api-provider-gcp/pull/129)
* no-jira: Machine Api Operator GCP must search for the GCP Custom Endpoints Installer feature gate [#128](https://github.com/openshift/machine-api-provider-gcp/pull/128)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/01515888c83526ec235b7bc3a27df6eba3034b00...498f27049011c7e6e59a6a26ffe55d49f65ed911)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/ac94bf2abcd3b339764fd30e581209f37ec43938)

* NO-JIRA: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.21 [#151](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/151)
* [CORS-4201](https://issues.redhat.com/browse/CORS-4201): Search for the feature gate for GCP Custom Endpoints [#150](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/150)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/e0ad050a84bab669e0f11e080fc4c388ef417bba...ac94bf2abcd3b339764fd30e581209f37ec43938)


### [haproxy-router](https://github.com/openshift/router/tree/48642ee220fe9cf5842a46ea1283817f0f2b7272)

* [OCPBUGS-49769](https://issues.redhat.com/browse/OCPBUGS-49769): Validate the key and cert content before accepting [#669](https://github.com/openshift/router/pull/669)
* [NE-2137](https://issues.redhat.com/browse/NE-2137): Bump router k8s libraries to 0.33.4 [#671](https://github.com/openshift/router/pull/671)
* [OCPBUGS-60257](https://issues.redhat.com/browse/OCPBUGS-60257): fix extra space in haproxy template [#676](https://github.com/openshift/router/pull/676)
* [OCPBUGS-57896](https://issues.redhat.com/browse/OCPBUGS-57896): Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.20 [#660](https://github.com/openshift/router/pull/660)
* [OCPBUGS-57845](https://issues.redhat.com/browse/OCPBUGS-57845): Updating ose-haproxy-router-base-container image to be consistent with ART for 4.20 [#659](https://github.com/openshift/router/pull/659)
* NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS [#675](https://github.com/openshift/router/pull/675)
* [OCPBUGS-61224](https://issues.redhat.com/browse/OCPBUGS-61224): Revert Prevent startup failures due to name resolution" [#672](https://github.com/openshift/router/pull/672)
* [Full changelog](https://github.com/openshift/router/compare/47274e213d8a511066a9492b73c9b8eccc353571...48642ee220fe9cf5842a46ea1283817f0f2b7272)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/5c9df339496a7595967e06682ece7d0b2145411c)

* [OCPBUGS-61554](https://issues.redhat.com/browse/OCPBUGS-61554): Bump 1.33.5 [#2459](https://github.com/openshift/kubernetes/pull/2459)
* [OCPBUGS-61754](https://issues.redhat.com/browse/OCPBUGS-61754): UPSTREAM: &lt;carry&gt;: Add retries for GetCurrentResourceVersion. [#2467](https://github.com/openshift/kubernetes/pull/2467)
* [OCPBUGS-61222](https://issues.redhat.com/browse/OCPBUGS-61222): Do not remove PVC ClaimRef to fix flaky VAC test [#2452](https://github.com/openshift/kubernetes/pull/2452)
* [OCPBUGS-58313](https://issues.redhat.com/browse/OCPBUGS-58313): apiserver library go bump [#2457](https://github.com/openshift/kubernetes/pull/2457)
* NO-JIRA: UPSTREAM: 133682: Increase port-forward broken connection detection client timeout [#2428](https://github.com/openshift/kubernetes/pull/2428)
* [Full changelog](https://github.com/openshift/kubernetes/compare/6efb6a95323fe35285877dcdade237444b35cae0...5c9df339496a7595967e06682ece7d0b2145411c)


### [hypershift](https://github.com/openshift/hypershift/tree/ec4bc4402f8a6f423eb5d76f8728b36f3c52bbf2)

* [KFLUXSPRT-5246](https://issues.redhat.com/browse/KFLUXSPRT-5246): update base images from RHEL9 ELS to UBI9 minimal 9.4 [#6916](https://github.com/openshift/hypershift/pull/6916)
* [OCPBUGS-62172](https://issues.redhat.com/browse/OCPBUGS-62172): Add Manila, Cinder to list of pods allowed readOnlyRootFileSystem=false [#6885](https://github.com/openshift/hypershift/pull/6885)
* NO-JIRA: fix(test): support external oidc settings on non-aws platform [#6754](https://github.com/openshift/hypershift/pull/6754)
* NO-JIRA: chore(ai): ensure jira-solve run make pre-commit [#6901](https://github.com/openshift/hypershift/pull/6901)
* NO-JIRA: chore(ai): let jira-solve show the executed command in the PR desc [#6898](https://github.com/openshift/hypershift/pull/6898)
* [OCPBUGS-61936](https://issues.redhat.com/browse/OCPBUGS-61936): fix(capi-provider): wait for infrastructure resource before startup [#6860](https://github.com/openshift/hypershift/pull/6860)
* [OCPBUGS-62224](https://issues.redhat.com/browse/OCPBUGS-62224): fix(e2e): add stabilization wait in GlobalPullSecret test to reduce flakiness [#6892](https://github.com/openshift/hypershift/pull/6892)
* [CNTRLPLANE-1478](https://issues.redhat.com/browse/CNTRLPLANE-1478): chore: add AI directory paths to OWNERS file [#6884](https://github.com/openshift/hypershift/pull/6884)
* NO-JIRA: chore(ai): add claude slash command jira solve [#6882](https://github.com/openshift/hypershift/pull/6882)
* [OCPBUGS-62099](https://issues.redhat.com/browse/OCPBUGS-62099): make TestAutoscalingBalancing more robust [#6877](https://github.com/openshift/hypershift/pull/6877)
* [OCPBUGS-61850](https://issues.redhat.com/browse/OCPBUGS-61850): fix(kas-bootstrap): increase wait timeouts to avoid KAS startup races [#6843](https://github.com/openshift/hypershift/pull/6843)
* NO-JIRA: ci(dev-cluster): Fix dev token secret annotation [#6876](https://github.com/openshift/hypershift/pull/6876)
* [OCPBUGS-62056](https://issues.redhat.com/browse/OCPBUGS-62056): test(e2e): fix flaky EnsureOAPIMountsTrustBundle with retry logic [#6872](https://github.com/openshift/hypershift/pull/6872)
* [OCPBUGS-62128](https://issues.redhat.com/browse/OCPBUGS-62128): hcco: sync watched resource types to availability-prober [#6879](https://github.com/openshift/hypershift/pull/6879)
* [CNTRLPLANE-1331](https://issues.redhat.com/browse/CNTRLPLANE-1331): Get self-managed Azure working again [#6703](https://github.com/openshift/hypershift/pull/6703)
* [OCPBUGS-59885](https://issues.redhat.com/browse/OCPBUGS-59885): [e2e][KubeVirt] Ignore KubeVirtNodesLiveMigratable Condition on HC [#6826](https://github.com/openshift/hypershift/pull/6826)
* [CNTRLPLANE-1455](https://issues.redhat.com/browse/CNTRLPLANE-1455): docs(contribute): consolidate contributing guide; refresh PR template; add landing page [#6866](https://github.com/openshift/hypershift/pull/6866)
* [OCPBUGS-61776](https://issues.redhat.com/browse/OCPBUGS-61776): fix(ignition-server): Don't delete user-managed cert secrets [#6836](https://github.com/openshift/hypershift/pull/6836)
* [OCPBUGS-61894](https://issues.redhat.com/browse/OCPBUGS-61894): Enable VolumeAttributesClass runtime config [#6855](https://github.com/openshift/hypershift/pull/6855)
* [CNTRLPLANE-1452](https://issues.redhat.com/browse/CNTRLPLANE-1452): docs(ci): add documentation for checking CI status [#6849](https://github.com/openshift/hypershift/pull/6849)
* [OCPBUGS-61438](https://issues.redhat.com/browse/OCPBUGS-61438): fix(security): harden konnectivity-agent DaemonSet security context [#6835](https://github.com/openshift/hypershift/pull/6835)
* [OCPBUGS-61828](https://issues.redhat.com/browse/OCPBUGS-61828): refactor FeatureGate status check [#6862](https://github.com/openshift/hypershift/pull/6862)
* [OCPBUGS-61329](https://issues.redhat.com/browse/OCPBUGS-61329): skip EnsureReadOnlyRootFilesystemTmpDirMount check for kubevirt HCP pods [#6842](https://github.com/openshift/hypershift/pull/6842)
* [OCPBUGS-61825](https://issues.redhat.com/browse/OCPBUGS-61825): test(e2e,kubevirt): skip break-glass-credentials on kubevirt [#6856](https://github.com/openshift/hypershift/pull/6856)
* [OCPBUGS-61862](https://issues.redhat.com/browse/OCPBUGS-61862): ci: Remove the MCE 2.10 konflux pipeline [#6848](https://github.com/openshift/hypershift/pull/6848)
* [OCPBUGS-61719](https://issues.redhat.com/browse/OCPBUGS-61719): fix: propagate AWSLoadBalancerTargetNodesAnnotation to… [#6823](https://github.com/openshift/hypershift/pull/6823)
* [OCPBUGS-61334](https://issues.redhat.com/browse/OCPBUGS-61334): fix(kas): Set correct container port in postStart handler, 2 [#6824](https://github.com/openshift/hypershift/pull/6824)
* [OCPBUGS-61177](https://issues.redhat.com/browse/OCPBUGS-61177): ci: use common MCE konflux pipeline [#6743](https://github.com/openshift/hypershift/pull/6743)
* NO-JIRA: Update Branch Tasks Docs [#6840](https://github.com/openshift/hypershift/pull/6840)
* [OCPBUGS-56249](https://issues.redhat.com/browse/OCPBUGS-56249): fix lint-fix Makefile rule [#6151](https://github.com/openshift/hypershift/pull/6151)
* [OCPBUGS-61048](https://issues.redhat.com/browse/OCPBUGS-61048): test(e2e): add autoscaler deployment verification to autoscaling test [#6779](https://github.com/openshift/hypershift/pull/6779)
* [OCPBUGS-61687](https://issues.redhat.com/browse/OCPBUGS-61687): fix(capi-provider): use single replica deployment for aws and azure [#6807](https://github.com/openshift/hypershift/pull/6807)
* fix(disable-psa): disable PSA check for 4.20 [#6831](https://github.com/openshift/hypershift/pull/6831)
* [OCPBUGS-61482](https://issues.redhat.com/browse/OCPBUGS-61482): fix(proxy): ensure URLs have scheme before proxy resolution [#6789](https://github.com/openshift/hypershift/pull/6789)
* [OCPBUGS-61587](https://issues.redhat.com/browse/OCPBUGS-61587): fix(oauth): oauth-openshift deployment should be HA [#6802](https://github.com/openshift/hypershift/pull/6802)
* [CNTRLPLANE-1277](https://issues.redhat.com/browse/CNTRLPLANE-1277): Enable TestCreateClusterCustomConfig for Azure [#6706](https://github.com/openshift/hypershift/pull/6706)
* Revert "OCPBUGS-61334: fix(kas): Set correct container port in postStart handler" [#6805](https://github.com/openshift/hypershift/pull/6805)
* [OCPBUGS-60185](https://issues.redhat.com/browse/OCPBUGS-60185): resolve MIRRORED_RELEASE_IMAGE flapping [#6751](https://github.com/openshift/hypershift/pull/6751)
* [OCPBUGS-61499](https://issues.redhat.com/browse/OCPBUGS-61499): fix(control-plane): remove resource limits from kube-controller-manager [#6785](https://github.com/openshift/hypershift/pull/6785)
* [CNTRLPLANE-1364](https://issues.redhat.com/browse/CNTRLPLANE-1364): feat: enable global pull secret for AWS [#6736](https://github.com/openshift/hypershift/pull/6736)
* [OCPBUGS-61334](https://issues.redhat.com/browse/OCPBUGS-61334): fix(kas): Set correct container port in postStart handler [#6773](https://github.com/openshift/hypershift/pull/6773)
* NO-JIRA: fix karpenter metric validation in e2e [#6714](https://github.com/openshift/hypershift/pull/6714)
* NO-JIRA: chore(AI): add claude agents for different SMEs [#6787](https://github.com/openshift/hypershift/pull/6787)
* [OCPBUGS-61329](https://issues.redhat.com/browse/OCPBUGS-61329): test(e2e): skip kubevirt pods in EnsureReadOnlyRootFilesystem [#6770](https://github.com/openshift/hypershift/pull/6770)
* [OCPBUGS-61462](https://issues.redhat.com/browse/OCPBUGS-61462): temporarily use v4.20 catalogs [#6782](https://github.com/openshift/hypershift/pull/6782)
* NO-JIRA: add permissions to role policy [#6783](https://github.com/openshift/hypershift/pull/6783)
* [Full changelog](https://github.com/openshift/hypershift/compare/55ffa9313ae32a9b31a06b748a90b7d8f69d9396...ec4bc4402f8a6f423eb5d76f8728b36f3c52bbf2)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/79221ddcb0161dbeeb7c087f7a3104ecc239adf9)

* NO-JIRA: Update OWNERS [#85](https://github.com/openshift/cloud-provider-ibm/pull/85)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/36ab30f90e87de0daa926d20ccda88c41abed191...79221ddcb0161dbeeb7c087f7a3104ecc239adf9)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/0a6bb9018ec40d8b19f83d6914ae8ef3b0061c03)

* Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART for 4.21 [#112](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/112)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/19801353c97d08b1333177be45c848082af0643c...0a6bb9018ec40d8b19f83d6914ae8ef3b0061c03)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/3b63707ce26bdbdc84cda5c6f53f3af8b98ca68b)

* [OCPBUGS-62375](https://issues.redhat.com/browse/OCPBUGS-62375): Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.21 [#156](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/156)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/21f405cce9573eee1c4f1cf95c0eb601ae77ed99...3b63707ce26bdbdc84cda5c6f53f3af8b98ca68b)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/48ff68d58ea3917e1a4d53aadf997ca03824678c)

* NO-JIRA: Update OWNERS [#126](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/126)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/8b6396a4c78f4791b7f3c5ec404a78b499f8546b...48ff68d58ea3917e1a4d53aadf997ca03824678c)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/a5f71a8f64f0077fc6ed0c5a28047f2ccc23a897)

* NO-JIRA: Update OWNERS [#70](https://github.com/openshift/machine-api-provider-ibmcloud/pull/70)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/035805df5277c9f9c0cd9d4a44f59a08ab3ce031...a5f71a8f64f0077fc6ed0c5a28047f2ccc23a897)


### [insights-operator](https://github.com/openshift/insights-operator/tree/7a313a6f1a93b9b6bb547752a03b779bbd61d800)

* [OCPBUGS-61893](https://issues.redhat.com/browse/OCPBUGS-61893): set extractor as default container [#1141](https://github.com/openshift/insights-operator/pull/1141)
* [OCPBUGS-62215](https://issues.redhat.com/browse/OCPBUGS-62215): operator is not set as degraded when failed [#1151](https://github.com/openshift/insights-operator/pull/1151)
* And 7 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/insights-operator/compare/b82259ab1186594ff62bd063ee5145ded9a09e95...7a313a6f1a93b9b6bb547752a03b779bbd61d800)


### [ironic](https://github.com/openshift/ironic-image/tree/79fbe470d9f49f03bcacc01da138e44588301ab4)

* [OCPBUGS-62443](https://issues.redhat.com/browse/OCPBUGS-62443): Updating ironic-container image to be consistent with ART for 4.21 [#699](https://github.com/openshift/ironic-image/pull/699)
* [OCPBUGS-62201](https://issues.redhat.com/browse/OCPBUGS-62201): Bump ironic to include idrac10 fix [#697](https://github.com/openshift/ironic-image/pull/697)
* [METAL-1446](https://issues.redhat.com/browse/METAL-1446), [METAL-1566](https://issues.redhat.com/browse/METAL-1566), [METAL-1577](https://issues.redhat.com/browse/METAL-1577): Sync Ironic and Sushy [#695](https://github.com/openshift/ironic-image/pull/695)
* [METAL-1574](https://issues.redhat.com/browse/METAL-1574): Remove temporary dependencies from source [#692](https://github.com/openshift/ironic-image/pull/692)
* [OKD-283](https://issues.redhat.com/browse/OKD-283): fixing OKD ironic-image errors and metal3 pod crashes (centos9) [#688](https://github.com/openshift/ironic-image/pull/688)
* [OCPBUGS-61459](https://issues.redhat.com/browse/OCPBUGS-61459): sync with Ironic changes, including the local RPC revert [#687](https://github.com/openshift/ironic-image/pull/687)
* [METAL-1528](https://issues.redhat.com/browse/METAL-1528): Use custom directories in the runironic-proxy script [#679](https://github.com/openshift/ironic-image/pull/679)
* [Full changelog](https://github.com/openshift/ironic-image/compare/e9d325e27753eb41c9646dcdffc30833426e2502...79fbe470d9f49f03bcacc01da138e44588301ab4)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/0cdaa82190b18a327c4181b965b9824a14cb4411)

* [METAL-1574](https://issues.redhat.com/browse/METAL-1574): Update deps pkgs versions [#196](https://github.com/openshift/ironic-agent-image/pull/196)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/ce01f3c1ed6022f9eecc164b2ae34aec25b3dee4...0cdaa82190b18a327c4181b965b9824a14cb4411)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/7dec3478a9173d2c00a05382fd5800a53f1fdc2f)

* NO-ISSUE: [bot] Bump openshift/kube-state-metrics to v2.17.0 [#124](https://github.com/openshift/kube-state-metrics/pull/124)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/a8c9a5f08f675ae9afbaafdc47d7d2acb4a3709d...7dec3478a9173d2c00a05382fd5800a53f1fdc2f)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/d19bdda61baf7b737a6e8c78eb97c8772a34563e)

* [OCPBUGS-61728](https://issues.redhat.com/browse/OCPBUGS-61728): Fixed multi nic e2e to wait for node removal after machineset tests [#1417](https://github.com/openshift/machine-api-operator/pull/1417)
* [OCPBUGS-61728](https://issues.redhat.com/browse/OCPBUGS-61728): Adjusted machine e2e tests to wait for nodes to clean up [#1415](https://github.com/openshift/machine-api-operator/pull/1415)
* NO-JIRA: Update OWNERS_ALIASES [#1414](https://github.com/openshift/machine-api-operator/pull/1414)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/e3846e13997f0d6e93b4b2e740212379e4500dc2...d19bdda61baf7b737a6e8c78eb97c8772a34563e)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/adb087cee869e7e1c1efc33aab6a5766eaa7233b)

* [MCO-408](https://issues.redhat.com/browse/MCO-408): Add OpenShift-native access to change logLevel for MachineConfigOperator components [#5291](https://github.com/openshift/machine-config-operator/pull/5291)
* [OCPBUGS-42303](https://issues.redhat.com/browse/OCPBUGS-42303): Networking: reset ovn-remote config and allow ovnkube controller to s… [#5123](https://github.com/openshift/machine-config-operator/pull/5123)
* [MCO-1685](https://issues.redhat.com/browse/MCO-1685): Add mco-sanitize file processing logic [#5298](https://github.com/openshift/machine-config-operator/pull/5298)
* [MCO-1685](https://issues.redhat.com/browse/MCO-1685): Add mco-sanitize redactor [#5295](https://github.com/openshift/machine-config-operator/pull/5295)
* [OCPBUGS-58198](https://issues.redhat.com/browse/OCPBUGS-58198): Fix MCP updated machine count for image mode disabling case [#5271](https://github.com/openshift/machine-config-operator/pull/5271)
* [MCO-1673](https://issues.redhat.com/browse/MCO-1673): Add Component Readiness tests for Azure boot image updates [#5257](https://github.com/openshift/machine-config-operator/pull/5257)
* [MCO-1840](https://issues.redhat.com/browse/MCO-1840): Remove MCN CRD cleanup cronjob [#5234](https://github.com/openshift/machine-config-operator/pull/5234)
* [OCPBUGS-60120](https://issues.redhat.com/browse/OCPBUGS-60120): Add nil/null checks to image registry secret decode [#5253](https://github.com/openshift/machine-config-operator/pull/5253)
* NO-ISSUE: Add delays to reduce TestOSBuildController failures [#5239](https://github.com/openshift/machine-config-operator/pull/5239)
* [MCO-1808](https://issues.redhat.com/browse/MCO-1808): MCO-1790: Implement Azure boot image updates [#5202](https://github.com/openshift/machine-config-operator/pull/5202)
* [OCPBUGS-61695](https://issues.redhat.com/browse/OCPBUGS-61695): Override NMState service definition [#5284](https://github.com/openshift/machine-config-operator/pull/5284)
* [OCPBUGS-60161](https://issues.redhat.com/browse/OCPBUGS-60161): Add mcd_local_unsupported_packages recording rule [#5242](https://github.com/openshift/machine-config-operator/pull/5242)
* [CORS-4170](https://issues.redhat.com/browse/CORS-4170): Extending in-cluster DNS support to Azure [#5216](https://github.com/openshift/machine-config-operator/pull/5216)
* [OCPBUGS-60537](https://issues.redhat.com/browse/OCPBUGS-60537): Machine-config controller should actively manage cordon while draining [#5276](https://github.com/openshift/machine-config-operator/pull/5276)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/063455217c390b9196f1577378cbb8a6454de527...adb087cee869e7e1c1efc33aab6a5766eaa7233b)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/15f15c1063dda6037d5aa2460427605863f6315b)

* NO-JIRA: fix hermetic builds [#564](https://github.com/openshift/monitoring-plugin/pull/564)
* [OBSINTA-858](https://issues.redhat.com/browse/OBSINTA-858): Cypress incidents incident traversing robustness [#556](https://github.com/openshift/monitoring-plugin/pull/556)
* [OBSINTA-858](https://issues.redhat.com/browse/OBSINTA-858): Cypress incidents mocking metric name change workaround [#553](https://github.com/openshift/monitoring-plugin/pull/553)
* [COO-1134](https://issues.redhat.com/browse/COO-1134): fix: update vulnerable dependencies [#561](https://github.com/openshift/monitoring-plugin/pull/561)
* NO-JIRA: Update .gitignore (Cypress specific) [#558](https://github.com/openshift/monitoring-plugin/pull/558)
* [OU-1011](https://issues.redhat.com/browse/OU-1011): REVERT add a 5 minute to the first alert timestamp [#559](https://github.com/openshift/monitoring-plugin/pull/559)
* [OU-1011](https://issues.redhat.com/browse/OU-1011): add a 5 minute to the first alert timestamp [#550](https://github.com/openshift/monitoring-plugin/pull/550)
* NO-JIRA: automation log and debug mode in headless mode [#557](https://github.com/openshift/monitoring-plugin/pull/557)
* [OU-1015](https://issues.redhat.com/browse/OU-1015): fix: incidents dropdown stays open fix [#554](https://github.com/openshift/monitoring-plugin/pull/554)
* NO-JIRA: Update translations for incidents [#555](https://github.com/openshift/monitoring-plugin/pull/555)
* [OBSINTA-795](https://issues.redhat.com/browse/OBSINTA-795): Data Test Selectors for Incidents Page [#545](https://github.com/openshift/monitoring-plugin/pull/545)
* NO-JIRA: fix: immer dependency anr patternfly icons import [#542](https://github.com/openshift/monitoring-plugin/pull/542)
* [OU-989](https://issues.redhat.com/browse/OU-989): Kubevirt with fixes after namespace level and session handler [#543](https://github.com/openshift/monitoring-plugin/pull/543)
* NO-JIRA: Improve incidents timeline chart domain and loading UX [#551](https://github.com/openshift/monitoring-plugin/pull/551)
* [OU-1005](https://issues.redhat.com/browse/OU-1005): upgrade perses plugins [#540](https://github.com/openshift/monitoring-plugin/pull/540)
* [OBSINTA-789](https://issues.redhat.com/browse/OBSINTA-789): Fix alerts chart empty state [#549](https://github.com/openshift/monitoring-plugin/pull/549)
* [RHINENG-20863](https://issues.redhat.com/browse/RHINENG-20863): improved fetching logic for incidents [#546](https://github.com/openshift/monitoring-plugin/pull/546)
* NO-JIRA: Login validation for all session flows [#544](https://github.com/openshift/monitoring-plugin/pull/544)
* [OU-833](https://issues.redhat.com/browse/OU-833): fix 2 bugs for incidents page [#539](https://github.com/openshift/monitoring-plugin/pull/539)
* NO-JIRA: Cypress Testsuite – Enhance Session Management [#536](https://github.com/openshift/monitoring-plugin/pull/536)
* [OBSINTA-463](https://issues.redhat.com/browse/OBSINTA-463): Rename the cluster health metrics [#514](https://github.com/openshift/monitoring-plugin/pull/514)
* [OBSINTA-789](https://issues.redhat.com/browse/OBSINTA-789): Update layout and labels [#534](https://github.com/openshift/monitoring-plugin/pull/534)
* [OU-863](https://issues.redhat.com/browse/OU-863): fix step calculation to fix non existent data gaps [#535](https://github.com/openshift/monitoring-plugin/pull/535)
* [RHINENG-20701](https://issues.redhat.com/browse/RHINENG-20701): fix utc timestamps in chart tooltips [#531](https://github.com/openshift/monitoring-plugin/pull/531)
* [OBSINTA-798](https://issues.redhat.com/browse/OBSINTA-798): Cypress Incident Tests – Query Mocking [#521](https://github.com/openshift/monitoring-plugin/pull/521)
* NO-JIRA: set rules as silenced if all alerts are silenced [#533](https://github.com/openshift/monitoring-plugin/pull/533)
* [RHINENG-20667](https://issues.redhat.com/browse/RHINENG-20667): silenced alerts for chart and table [#530](https://github.com/openshift/monitoring-plugin/pull/530)
* [OU-658](https://issues.redhat.com/browse/OU-658): Major Refactor + Adding Namespace dropdown to admin pages [#483](https://github.com/openshift/monitoring-plugin/pull/483)
* NO-JIRA: automation - fix monitoring-plugin injection [#532](https://github.com/openshift/monitoring-plugin/pull/532)
* NO-JIRA: Update build-image.sh [#528](https://github.com/openshift/monitoring-plugin/pull/528)
* [OU-671](https://issues.redhat.com/browse/OU-671): Add Patternfly Theming to Perses [#522](https://github.com/openshift/monitoring-plugin/pull/522)
* [RHINENG-20424](https://issues.redhat.com/browse/RHINENG-20424): fix clear filter bug with incident selected [#527](https://github.com/openshift/monitoring-plugin/pull/527)
* [OU-783](https://issues.redhat.com/browse/OU-783): Fit the alerts timeline to the actual data timespan [#529](https://github.com/openshift/monitoring-plugin/pull/529)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/2f449d8c47450c60510abb675616a8b493055628...15f15c1063dda6037d5aa2460427605863f6315b)


### [network-tools](https://github.com/openshift/network-tools/tree/f32437985bb6b1c262841bf66af19752e50a7a28)

* NO-JIRA: Add Marty P to bug tooling [#161](https://github.com/openshift/network-tools/pull/161)
* [OCPBUGS-53196](https://issues.redhat.com/browse/OCPBUGS-53196): Update references of `master` to `main` [#160](https://github.com/openshift/network-tools/pull/160)
* [Full changelog](https://github.com/openshift/network-tools/compare/26d09174cbd92386469e777e3bf49bfa95d035d5...f32437985bb6b1c262841bf66af19752e50a7a28)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/6d92e16021e422ace95dd28a1613b78fa217c229)

* [CNV-70018](https://issues.redhat.com/browse/CNV-70018): fix null error [#278](https://github.com/openshift/networking-console-plugin/pull/278)
* Merge [#273](https://github.com/openshift/networking-console-plugin/pull/273)
* [CNV-59876](https://issues.redhat.com/browse/CNV-59876): use correct name space when switching tabs [#276](https://github.com/openshift/networking-console-plugin/pull/276)
* [OCPBUGS-61531](https://issues.redhat.com/browse/OCPBUGS-61531): show VM network menu only on admin [#275](https://github.com/openshift/networking-console-plugin/pull/275)
* [OCPBUGS-61548](https://issues.redhat.com/browse/OCPBUGS-61548): use console extension to render same nad actions [#274](https://github.com/openshift/networking-console-plugin/pull/274)
* [CNV-59629](https://issues.redhat.com/browse/CNV-59629): set default MTU visible in form and yaml [#272](https://github.com/openshift/networking-console-plugin/pull/272)
* [CNV-68685](https://issues.redhat.com/browse/CNV-68685): add primary UDN label info to VirtualMachine network creation form [#271](https://github.com/openshift/networking-console-plugin/pull/271)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/208b2453a12d79aa0ad1007633b9ee24e6fbdd8e...6d92e16021e422ace95dd28a1613b78fa217c229)


### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/4133bb448403c03210b9ef419b21ec588bf65746)

* NO-JIRA: Update OWNERS [#50](https://github.com/openshift/cloud-provider-nutanix/pull/50)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/b575ef15f13e1434c793ae50824fd0676480be05...4133bb448403c03210b9ef419b21ec588bf65746)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/a52efa5159de1326bf3f9011b1852eab3f26f25b)

* NO-JIRA: Update OWNERS [#122](https://github.com/openshift/machine-api-provider-nutanix/pull/122)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/3200ddef48a5a8d47b96539419c51f3619cb1fd5...a52efa5159de1326bf3f9011b1852eab3f26f25b)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/309dd46138e2f0aa0f3136af32152d07527df96d)

* [OCPBUGS-61754](https://issues.redhat.com/browse/OCPBUGS-61754): Bump openshift/kubernetes-apiserver for consistent list etcd retries. [#146](https://github.com/openshift/oauth-apiserver/pull/146)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/7033e0fa18593c8814cf14d0f10a9226d7d93c45...309dd46138e2f0aa0f3136af32152d07527df96d)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/c548ba07a6373af3632d90e6e4109d8dfda750d8)

* [OCPBUGS-60929](https://issues.redhat.com/browse/OCPBUGS-60929): generate the archive only after mirroring [#1272](https://github.com/openshift/oc-mirror/pull/1272)
* [OCPBUGS-62106](https://issues.redhat.com/browse/OCPBUGS-62106): v2/cli: show binary version in output [#1273](https://github.com/openshift/oc-mirror/pull/1273)
* And 4 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/d42ff12456f3f227bfd42a769c4d5780dd1c6087...c548ba07a6373af3632d90e6e4109d8dfda750d8)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/82611a3c603b51de56521ad517111c7d379ea753)

* NO-ISSUE: Synchronize From Upstream Repositories [#493](https://github.com/openshift/operator-framework-operator-controller/pull/493)
* [OCPBUGS-62372](https://issues.redhat.com/browse/OCPBUGS-62372): Updating ose-olm-catalogd-container image to be consistent with ART for 4.21 [#491](https://github.com/openshift/operator-framework-operator-controller/pull/491)
* NO-ISSUE: Synchronize From Upstream Repositories [#492](https://github.com/openshift/operator-framework-operator-controller/pull/492)
* [OCPBUGS-62370](https://issues.redhat.com/browse/OCPBUGS-62370): Updating ose-olm-operator-controller-container image to be consistent with ART for 4.21 [#490](https://github.com/openshift/operator-framework-operator-controller/pull/490)
* [OCPQE-30671](https://issues.redhat.com/browse/OCPQE-30671): UPSTREAM: &lt;carry&gt;: migrate more cases from tests-private [#488](https://github.com/openshift/operator-framework-operator-controller/pull/488)
* NO-ISSUE: Synchronize From Upstream Repositories [#489](https://github.com/openshift/operator-framework-operator-controller/pull/489)
* [OPRUN-4160](https://issues.redhat.com/browse/OPRUN-4160): Fix cp-manifests copying of helm charts [#482](https://github.com/openshift/operator-framework-operator-controller/pull/482)
* [OPRUN-4164](https://issues.redhat.com/browse/OPRUN-4164): Synchronize From Upstream Repositories [#487](https://github.com/openshift/operator-framework-operator-controller/pull/487)
* [OPRUN-4164](https://issues.redhat.com/browse/OPRUN-4164): Synchronize From Upstream Repositories [#484](https://github.com/openshift/operator-framework-operator-controller/pull/484)
* NO-ISSUE: Add pedjak and trgeiger as reviewers [#463](https://github.com/openshift/operator-framework-operator-controller/pull/463)
* NO-ISSUE: Synchronize From Upstream Repositories [#480](https://github.com/openshift/operator-framework-operator-controller/pull/480)
* NO-ISSUE: Synchronize From Upstream Repositories [#479](https://github.com/openshift/operator-framework-operator-controller/pull/479)
* [OCPQE-29416](https://issues.redhat.com/browse/OCPQE-29416): Init OLMv1 OTE Framework for tests-private to migrate first case [#467](https://github.com/openshift/operator-framework-operator-controller/pull/467)
* [OPRUN-4076](https://issues.redhat.com/browse/OPRUN-4076), [OPRUN-4078](https://issues.redhat.com/browse/OPRUN-4078): Replace kustomize config with helm config [#475](https://github.com/openshift/operator-framework-operator-controller/pull/475)
* NO-ISSUE: add jiazha to approvers [#477](https://github.com/openshift/operator-framework-operator-controller/pull/477)
* NO-ISSUE: Synchronize From Upstream Repositories [#476](https://github.com/openshift/operator-framework-operator-controller/pull/476)
* NO-ISSUE: Synchronize From Upstream Repositories [#473](https://github.com/openshift/operator-framework-operator-controller/pull/473)
* NO-ISSUE: Synchronize From Upstream Repositories [#471](https://github.com/openshift/operator-framework-operator-controller/pull/471)
* NO-ISSUE: Synchronize From Upstream Repositories [#465](https://github.com/openshift/operator-framework-operator-controller/pull/465)
* NO-ISSUE: Grant QE approver permissions for OTE contributions [#457](https://github.com/openshift/operator-framework-operator-controller/pull/457)
* And 3 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/1544a1b71476f28889220d37ecafb74f5653e8bd...82611a3c603b51de56521ad517111c7d379ea753)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/da87a341733722eaf8e285fe3f2b2ba86afdba9c)

* [OCPBUGS-61768](https://issues.redhat.com/browse/OCPBUGS-61768): update pkg/image/OWNERS [#555](https://github.com/openshift/openshift-apiserver/pull/555)
* [OCPBUGS-61754](https://issues.redhat.com/browse/OCPBUGS-61754): Bump openshift/kubernetes-apiserver for consistent list etcd retries. [#556](https://github.com/openshift/openshift-apiserver/pull/556)
* [OCPBUGS-61228](https://issues.redhat.com/browse/OCPBUGS-61228): Bump Route generation when spec is updated [#550](https://github.com/openshift/openshift-apiserver/pull/550)
* [OCPBUGS-37215](https://issues.redhat.com/browse/OCPBUGS-37215): pkg/image: conditionally parse raw image manifest [#551](https://github.com/openshift/openshift-apiserver/pull/551)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/e817f8439e1379485594f56d74c2160c44db0864...da87a341733722eaf8e285fe3f2b2ba86afdba9c)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/15fc552a73e47ae715f0cf59e3f535e26b43477a)

* [OCPBUGS-61899](https://issues.redhat.com/browse/OCPBUGS-61899): CNTRLPLANE-1308: Fix Dockerfile.rhel: Add OTE binary build and packaging [#419](https://github.com/openshift/openshift-controller-manager/pull/419)
* [CNTRLPLANE-1308](https://issues.redhat.com/browse/CNTRLPLANE-1308): set up openshift-tests-extension for openshift-controller-manager and add a sanity test [#417](https://github.com/openshift/openshift-controller-manager/pull/417)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/49aaf599fb9024f36359f55bac6b3bb1482e24b8...15fc552a73e47ae715f0cf59e3f535e26b43477a)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/2c539ec14ba778ae4085be9af77231e32ff4005b)

* [OCPQE-30781](https://issues.redhat.com/browse/OCPQE-30781): support hypershift binary [#1119](https://github.com/openshift/operator-framework-olm/pull/1119)
* [OCPQE-30679](https://issues.redhat.com/browse/OCPQE-30679): migrate more cases from tests-private to make layout [#1118](https://github.com/openshift/operator-framework-olm/pull/1118)
* [OCPQE-29415](https://issues.redhat.com/browse/OCPQE-29415): correct suite name [#1117](https://github.com/openshift/operator-framework-olm/pull/1117)
* [OCPQE-29415](https://issues.redhat.com/browse/OCPQE-29415): enhance filters to add more suites [#1116](https://github.com/openshift/operator-framework-olm/pull/1116)
* NO-ISSUE: Synchronize From Upstream Repositories [#1115](https://github.com/openshift/operator-framework-olm/pull/1115)
* [OCPQE-29415](https://issues.redhat.com/browse/OCPQE-29415): add testing framework based on OTE and the first tests-private case [#1113](https://github.com/openshift/operator-framework-olm/pull/1113)
* [OCPQE-29415](https://issues.redhat.com/browse/OCPQE-29415): move golangci-lint and go-bindata to new location to fix sync [#1114](https://github.com/openshift/operator-framework-olm/pull/1114)
* [OCPQE-29415](https://issues.redhat.com/browse/OCPQE-29415): add OTE into olmv0 with new location [#1108](https://github.com/openshift/operator-framework-olm/pull/1108)
* NO-ISSUE: Synchronize From Upstream Repositories [#1112](https://github.com/openshift/operator-framework-olm/pull/1112)
* NO-ISSUE: UPSTREAM: &lt;carry&gt;: add jiazha to approvers [#1110](https://github.com/openshift/operator-framework-olm/pull/1110)
* Revert "OCPQE-29415: UPSTREAM: &lt;carry&gt;: add OTE into olmv0" [#1109](https://github.com/openshift/operator-framework-olm/pull/1109)
* NO-ISSUE: Updating operator-registry-container image to be consistent with ART for 4.21 [#1106](https://github.com/openshift/operator-framework-olm/pull/1106)
* [OCPQE-29415](https://issues.redhat.com/browse/OCPQE-29415): UPSTREAM: &lt;carry&gt;: add OTE into olmv0 [#1105](https://github.com/openshift/operator-framework-olm/pull/1105)
* NO-ISSUE: set package-server-manager as default container [#1104](https://github.com/openshift/operator-framework-olm/pull/1104)
* NO-ISSUE: Synchronize From Upstream Repositories [#1103](https://github.com/openshift/operator-framework-olm/pull/1103)
* NO-ISSUE: Updating ose-operator-framework-tools-container image to be consistent with ART for 4.21 [#1100](https://github.com/openshift/operator-framework-olm/pull/1100)
* NO-ISSUE: Synchronize From Upstream Repositories [#1101](https://github.com/openshift/operator-framework-olm/pull/1101)
* NO-ISSUE: Updating operator-lifecycle-manager-container image to be consistent with ART for 4.21 [#1094](https://github.com/openshift/operator-framework-olm/pull/1094)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/d0e47893fd1cd037d56f40322133012d0aecd4ac...2c539ec14ba778ae4085be9af77231e32ff4005b)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/da6248257a797e45abaca79292d22111827143e3)

* NO-ISSUE: Bump github.com/prometheus/client_golang from 1.22.0 to 1.23.2 [#661](https://github.com/operator-framework/operator-marketplace/pull/661)
* [OCPBUGS-62132](https://issues.redhat.com/browse/OCPBUGS-62132): Remove Expect func so that the test case can use the retry logic [#665](https://github.com/operator-framework/operator-marketplace/pull/665)
* NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.23.4 to 2.25.1 [#658](https://github.com/operator-framework/operator-marketplace/pull/658)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/0b6ddc07cc445687b1fa2ed205fce9cc1462abba...da6248257a797e45abaca79292d22111827143e3)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/e71219323b38af7afff0710a815a539260832550)

* [OCPBUGS-42303](https://issues.redhat.com/browse/OCPBUGS-42303), [OCPBUGS-58501](https://issues.redhat.com/browse/OCPBUGS-58501), [OCPBUGS-59657](https://issues.redhat.com/browse/OCPBUGS-59657), [OCPBUGS-61566](https://issues.redhat.com/browse/OCPBUGS-61566): DownStream Merge [09-09-2025] [#2750](https://github.com/openshift/ovn-kubernetes/pull/2750)
* [OCPBUGS-61065](https://issues.redhat.com/browse/OCPBUGS-61065): Adding ovndb-raft-functions.sh to ovnk image [#2740](https://github.com/openshift/ovn-kubernetes/pull/2740)
* NO-JIRA: DownStream Merge [08-27-2025] [#2736](https://github.com/openshift/ovn-kubernetes/pull/2736)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/9741174157381d7b87e2d21559cbe06b8f2b5ebf...e71219323b38af7afff0710a815a539260832550)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/791e12aba9ab7c4fed1e5f9554e5b9ec86342e1a)

* Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.21 [#107](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/107)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/0693fe5dcfab224466fba7a19e614de71f727999...791e12aba9ab7c4fed1e5f9554e5b9ec86342e1a)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/ea123ee3e02c067bf89da22b994b601bc40c027b)

* [OCPBUGS-62373](https://issues.redhat.com/browse/OCPBUGS-62373): Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.21 [#88](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/88)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/319efc99be8cc2603fad1677acee7c4a4a096913...ea123ee3e02c067bf89da22b994b601bc40c027b)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/70f3c88ff788f5c0f00c3839f99c8957f466eba0)

* NO-JIRA: [bot] Bump openshift/prom-label-proxy to v0.12.1 [#385](https://github.com/openshift/prom-label-proxy/pull/385)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/f2529aee3dc2e9065de08b035d53151e007136fd...70f3c88ff788f5c0f00c3839f99c8957f466eba0)


### [prometheus](https://github.com/openshift/prometheus/tree/389b83c21f1b9a99c98095acdc51ff01b22ec117)

* [OCPBUGS-62166](https://issues.redhat.com/browse/OCPBUGS-62166): chore(scrape): default to legacy validation/escaping scheme until utf-8 is fully supported by prometheus-operator [#272](https://github.com/openshift/prometheus/pull/272)
* [Full changelog](https://github.com/openshift/prometheus/compare/d703f9b685380fdcfa4114f4cfd463e9b68ab00d...389b83c21f1b9a99c98095acdc51ff01b22ec117)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/7e019d7eee8d874c5a2560ff40443fafa75ce437)

* Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.21 [#340](https://github.com/openshift/prometheus-operator/pull/340)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/e2bd260c9d686192a5ed9b85dfd4a9f7a2a03666...7e019d7eee8d874c5a2560ff40443fafa75ce437)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/e72c0718ad998d5113271537227a147e5af50330)

* NO-ISSUE: Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.21 [#170](https://github.com/openshift/node_exporter/pull/170)
* [Full changelog](https://github.com/openshift/node_exporter/compare/56f6158e797ab80e5e0da2cb0ba701cb02902ef7...e72c0718ad998d5113271537227a147e5af50330)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/9f4b06c555c177a7d3bf96c4b407f7c76c4492e4)

* NO-JIRA: Add new team members to OWNERS [#64](https://github.com/openshift/route-controller-manager/pull/64)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/bf2fa662f57f233d8541f94c4953e0dcd7a5ab20...9f4b06c555c177a7d3bf96c4b407f7c76c4492e4)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/a40d9a8ec60e0c6c1578300c372b6104130f2ecc)

* [OCPBUGS-56599](https://issues.redhat.com/browse/OCPBUGS-56599): don't hotloop on secret creation errors [#274](https://github.com/openshift/service-ca-operator/pull/274)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/b0fe556a981964728306f803864af9d2881db967...a40d9a8ec60e0c6c1578300c372b6104130f2ecc)


### [telemeter](https://github.com/openshift/telemeter/tree/0634eee9f7efb2c53eb3b13f9ebfb1315386e285)

* Updating telemeter-container image to be consistent with ART for 4.21 [#565](https://github.com/openshift/telemeter/pull/565)
* [Full changelog](https://github.com/openshift/telemeter/compare/4c6036eeb851ad6e0e837e214a2d08ffc8f0d1d0...0634eee9f7efb2c53eb3b13f9ebfb1315386e285)


### [tests](https://github.com/openshift/origin/tree/c49344feb8bb3e8b7fd449913f2a94b81b574a70)

* Revert "NO-JIRA: Add olm into the known operator set" [#30313](https://github.com/openshift/origin/pull/30313)
* NO-JIRA: Add olm into the known operator set [#30308](https://github.com/openshift/origin/pull/30308)
* [MCO-1875](https://issues.redhat.com/browse/MCO-1875): Bump timeout for vSphereBootimageUpdate tests [#30288](https://github.com/openshift/origin/pull/30288)
* NO-ISSUE: Automated - Update synthetic test data [#30277](https://github.com/openshift/origin/pull/30277)
* [OCPBUGS-62227](https://issues.redhat.com/browse/OCPBUGS-62227): bump telemetry series limit to 1000 [#30302](https://github.com/openshift/origin/pull/30302)
* [OCPERT-151](https://issues.redhat.com/browse/OCPERT-151): Migrate new func for Compare structured data instead of string from openshift-test-private repo [#30291](https://github.com/openshift/origin/pull/30291)
* [OCPBUGS-61398](https://issues.redhat.com/browse/OCPBUGS-61398): fix(ginkgo): avoid nil deref and harden env var setup [#30289](https://github.com/openshift/origin/pull/30289)
* [OCPQE-30698](https://issues.redhat.com/browse/OCPQE-30698): enable OTE for olmv0 [#30285](https://github.com/openshift/origin/pull/30285)
* [OTA-1626](https://issues.redhat.com/browse/OTA-1626): Fail CI if alert/ClusterOperatorDegraded is fired [#30282](https://github.com/openshift/origin/pull/30282)
* [TRT-2071](https://issues.redhat.com/browse/TRT-2071): Remove annotations and replace with environment selector based test skipping and disablement [#30064](https://github.com/openshift/origin/pull/30064)
* trt-2246: lower parallelism based on worker nodes [#30226](https://github.com/openshift/origin/pull/30226)
* [OCPSTRAT-2045](https://issues.redhat.com/browse/OCPSTRAT-2045): Automating OCPSTRAT-2045 feature in upstream [#30067](https://github.com/openshift/origin/pull/30067)
* [OCPBUGS-61980](https://issues.redhat.com/browse/OCPBUGS-61980): Temporarily remove commatrix documentation test for rework [#30280](https://github.com/openshift/origin/pull/30280)
* [OCPBUGS-61905](https://issues.redhat.com/browse/OCPBUGS-61905): oidc: improve rollout wait times [#30274](https://github.com/openshift/origin/pull/30274)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): image: add busybox to list of allowed images [#30281](https://github.com/openshift/origin/pull/30281)
* [CORENET-6418](https://issues.redhat.com/browse/CORENET-6418): drop openshift-sdn tests [#29085](https://github.com/openshift/origin/pull/29085)
* [OCPEDGE-1483](https://issues.redhat.com/browse/OCPEDGE-1483): Add TNF E2E tests for network failure [#30110](https://github.com/openshift/origin/pull/30110)
* [OCPBUGS-61196](https://issues.redhat.com/browse/OCPBUGS-61196): Skip ServiceCIDR in etcd_storage_path test [#30254](https://github.com/openshift/origin/pull/30254)
* [OCPBUGS-61855](https://issues.redhat.com/browse/OCPBUGS-61855): Temporarily disable InstallPlanStepAppliedWithWarnings for k8s 1.34 rebase [#30275](https://github.com/openshift/origin/pull/30275)
* [OCPBUGS-61398](https://issues.redhat.com/browse/OCPBUGS-61398): fix(test): prevent nil pointer dereference in ginkgo test runner [#30224](https://github.com/openshift/origin/pull/30224)
* [OCPBUGS-61855](https://issues.redhat.com/browse/OCPBUGS-61855): CRD Apply Alert Allowance [#30265](https://github.com/openshift/origin/pull/30265)
* [NE-2090](https://issues.redhat.com/browse/NE-2090): adding one GIE automation test [#30189](https://github.com/openshift/origin/pull/30189)
* [OTA-1601](https://issues.redhat.com/browse/OTA-1601): upgrade status: recover checking the updating COs [#30154](https://github.com/openshift/origin/pull/30154)
* NO-JIRA: Allow systemd-coredump test to fail [#30261](https://github.com/openshift/origin/pull/30261)
* [OCPSTRAT-2371](https://issues.redhat.com/browse/OCPSTRAT-2371): Update etcd test data for k8s 1.34 release [#30242](https://github.com/openshift/origin/pull/30242)
* [OCPBUGS-61733](https://issues.redhat.com/browse/OCPBUGS-61733): Restore retries for port-forward test [#30255](https://github.com/openshift/origin/pull/30255)
* [OCPEDGE-2090](https://issues.redhat.com/browse/OCPEDGE-2090): Add validation tests for tnf topology effects [#30252](https://github.com/openshift/origin/pull/30252)
* [TRT-2275](https://issues.redhat.com/browse/TRT-2275): introduce cluster e2e-analysis sub command for openshift-tests [#30211](https://github.com/openshift/origin/pull/30211)
* [MON-4290](https://issues.redhat.com/browse/MON-4290): add test for must-gather gather_metrics [#30054](https://github.com/openshift/origin/pull/30054)
* [OCPBUGS-61193](https://issues.redhat.com/browse/OCPBUGS-61193): chore(extended/prometheus): 2/2: make 'targets auth' test more lenient and more resilient [#30256](https://github.com/openshift/origin/pull/30256)
* [OCPBUGS-57325](https://issues.redhat.com/browse/OCPBUGS-57325): update machines scale test [#30028](https://github.com/openshift/origin/pull/30028)
* Trt-2246: network test isolation [#30192](https://github.com/openshift/origin/pull/30192)
* NO-ISSUE: Automated - Update synthetic test data [#30244](https://github.com/openshift/origin/pull/30244)
* NO-JIRA: Remove runbook exceptions for fixed bugs [#30246](https://github.com/openshift/origin/pull/30246)
* trt-2230: Add monitor test annotation [#30196](https://github.com/openshift/origin/pull/30196)
* NO-JIRA: Increase request-timeout to deflake test [#30248](https://github.com/openshift/origin/pull/30248)
* NO-JIRA: Deflake oc observe test by using explicit port number [#30247](https://github.com/openshift/origin/pull/30247)
* [OTA-1559](https://issues.redhat.com/browse/OTA-1559): test/extended/cli/adm_upgrade/recommend: TestRiskA PromQL use max_over_time [#30160](https://github.com/openshift/origin/pull/30160)
* NO-JIRA: Add intervals and a test for systemd-coredumps [#30222](https://github.com/openshift/origin/pull/30222)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): oidc: add retry logic for Keycloak route creation [#30233](https://github.com/openshift/origin/pull/30233)
* [CNF-18661](https://issues.redhat.com/browse/CNF-18661): Update vendor to include communication matrix bug fix [#30232](https://github.com/openshift/origin/pull/30232)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): images: add keycloak images and use them in ExternalOIDC tests [#30221](https://github.com/openshift/origin/pull/30221)
* NO-JIRA: Migrate new func for  non-Job pods readiness helper for OCL from  openshift-test-private repo [#30193](https://github.com/openshift/origin/pull/30193)
* NO-ISSUE: test/extended/util/framework: Poll in IsMicroShiftCluster [#30161](https://github.com/openshift/origin/pull/30161)
* [OCPBUGS-61538](https://issues.redhat.com/browse/OCPBUGS-61538): Skip config-operator checking when featureSet is DevPreviewNoUpgrade [#30236](https://github.com/openshift/origin/pull/30236)
* [OCPBUGS-61193](https://issues.redhat.com/browse/OCPBUGS-61193): chore(extended/prometheus): make 'targets auth' test more lenient and more resilient. [#30219](https://github.com/openshift/origin/pull/30219)
* NO-ISSUE: Automated - Update synthetic test data [#30020](https://github.com/openshift/origin/pull/30020)
* [OCPBUGS-61287](https://issues.redhat.com/browse/OCPBUGS-61287): Add flaky kubectl logs test to the retry list to clean signal for release [#30215](https://github.com/openshift/origin/pull/30215)
* [OCPBUGS-60507](https://issues.redhat.com/browse/OCPBUGS-60507): Bump to latest openshift/kubernetes (v1.33.4) [#30227](https://github.com/openshift/origin/pull/30227)
* [CNF-18661](https://issues.redhat.com/browse/CNF-18661): update the commatrix vendor version to contain new changes [#30220](https://github.com/openshift/origin/pull/30220)
* Trt-2257: track run options [#30195](https://github.com/openshift/origin/pull/30195)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/origin/compare/755c0d2c77c6b880efd65248fb3267c189bf069d...c49344feb8bb3e8b7fd449913f2a94b81b574a70)


### [thanos](https://github.com/openshift/thanos/tree/6ea20ffaa35b7b31fe7ef9a99287bdd4a1c1e4e8)

* Updating ose-thanos-container image to be consistent with ART for 4.21 [#164](https://github.com/openshift/thanos/pull/164)
* [Full changelog](https://github.com/openshift/thanos/compare/c0951032b34b832d0f5467e616999490a284101b...6ea20ffaa35b7b31fe7ef9a99287bdd4a1c1e4e8)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/f87b89c26eac5893a1c55f522a67a1b72bbe7796)

* NO-JIRA: Update OWNERS [#99](https://github.com/openshift/cloud-provider-vsphere/pull/99)
* NO-JIRA: Update OWNERS [#96](https://github.com/openshift/cloud-provider-vsphere/pull/96)
* [OCPCLOUD-2933](https://issues.redhat.com/browse/OCPCLOUD-2933): Rebase onto main [#95](https://github.com/openshift/cloud-provider-vsphere/pull/95)
* [OCPBUGS-57574](https://issues.redhat.com/browse/OCPBUGS-57574): Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART for 4.20 [#92](https://github.com/openshift/cloud-provider-vsphere/pull/92)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/70242a37ac0c7e59fd4ffb539e272ea976b88eb6...f87b89c26eac5893a1c55f522a67a1b72bbe7796)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/d5badc08a832cedbb8e41b64506ab71888583709)

* [OCPBUGS-57668](https://issues.redhat.com/browse/OCPBUGS-57668): Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.20 [#59](https://github.com/openshift/cluster-api-provider-vsphere/pull/59)
* NO-JIRA: Update OWNERS [#65](https://github.com/openshift/cluster-api-provider-vsphere/pull/65)
* [OCPBUGS-61498](https://issues.redhat.com/browse/OCPBUGS-61498): UPSTREAM: 3636: VSphereClusterIdentity: ensure namespace in tests exists when not using the default [#67](https://github.com/openshift/cluster-api-provider-vsphere/pull/67)
* [OCPBUGS-61498](https://issues.redhat.com/browse/OCPBUGS-61498): Fix openshift/unit-tests.sh [#66](https://github.com/openshift/cluster-api-provider-vsphere/pull/66)
* NO-JIRA: Update OWNERS [#63](https://github.com/openshift/cluster-api-provider-vsphere/pull/63)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/64ebe003b8932779a01eaf2244cda82d9e5de68d...d5badc08a832cedbb8e41b64506ab71888583709)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/133442c239c6ebfeec175f1620b5b08d887cbe90)

* Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.21 [#150](https://github.com/openshift/vmware-vsphere-csi-driver/pull/150)
* NO-JIRA: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.21 [#148](https://github.com/openshift/vmware-vsphere-csi-driver/pull/148)
* [STOR-2404](https://issues.redhat.com/browse/STOR-2404): Rebase to upstream v3.5.0 for OCP 4.20 [#147](https://github.com/openshift/vmware-vsphere-csi-driver/pull/147)
* [OCPBUGS-57582](https://issues.redhat.com/browse/OCPBUGS-57582): Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.20 [#146](https://github.com/openshift/vmware-vsphere-csi-driver/pull/146)
* [OCPBUGS-57570](https://issues.redhat.com/browse/OCPBUGS-57570): Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.20 [#145](https://github.com/openshift/vmware-vsphere-csi-driver/pull/145)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/0130247772b8d6618f9d25bbe7bde0a6c9224f9a...133442c239c6ebfeec175f1620b5b08d887cbe90)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/58a512dd275b46f10297caaaef179cd3af8c82d1)

* Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.21 [#311](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/311)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/5cd04d61c20872edaaa2c3958779ff29ea6e6d82...58a512dd275b46f10297caaaef179cd3af8c82d1)