# 5.1.0-okd-scos.ec.1
Created: 2026-10-28 20:35:05 +0000 UTC
Image Digest: `sha256:b2234b7aa8983346fd070cfa7b4473b8b2c007eda1d57ba8b92b24d14907be9f`
Promoted from registry.ci.openshift.org/origin/release-scos:5.1.0-0.okd-scos-nightly-2026-10-28-061324
## Changes from 5.1.0-okd-scos.ec.0
### Components
* Kubectl upgraded from 1.36.2 to 1.37.1
* Kubernetes 1.37.1
* Kubernetes Tests 1.36.2
* CentOS Stream CoreOS 10 10.0.20261014-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | OKD
Hypershift | OKD
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: |
| KMSEncryption
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled |
| OpenShiftPodSecurityAdmission
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled |
| DRAWorkloadResourceClaims
(0 tests)| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed)| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed) |
| GenericWorkload
(0 tests)| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed)| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed) |
| PodGroupPreemptionPolicy
(0 tests)| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed)| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed) |
| TopologyAwareWorkloadScheduling
(0 tests)| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed)| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed) |
| AuthenticationComponentProxyExternalOIDC
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | | |
| ClusterAPIOperator
(0 tests)| | | | Enabled
(New)| | | | Enabled
(New) |
| MachineAPIMigrationNutanix
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | Enabled
(New)| Enabled
(New) |
| MetalEnrollmentAPI
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | | |
| OLMLifecycleAndCompatibility
(0 tests)| Disabled| Enabled| Disabled| Disabled
(Changed)| Disabled| Enabled| Disabled| Disabled |
| StoragePathAlert
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | Enabled
(New)| Enabled
(New) |
### Removed images
* haproxy-router-haproxy28
### Rebuilt images without code change
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [f952dce2](https://github.com/openshift/agent-installer-utils/commit/f952dce298d6788f289e3ef95efa89d5ef1c9a3f) `sha256:d2969d93176a2f794ea3cf610a2788378c2b91203ba601cc80c9c1d0a5ba3147`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [ee1167a2](https://github.com/openshift/apiserver-network-proxy/commit/ee1167a208561c55485453d9237036c6ab37cb73) `sha256:1a6aca8797bd8d89e9b71badc5a4e8ad116c435de33d8b6dfada36a235b57f2d`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [aa136f7f](https://github.com/openshift/aws-karpenter-provider-aws/commit/aa136f7fdc38fb6d55888a2d623fed08ea73dfb7) `sha256:bffc29fda17eaeb6091fa35db35af0f2ecb4db6c3329bb69f63e8943c87b0cc5`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [f4d8aaa2](https://github.com/openshift/aws-encryption-provider/commit/f4d8aaa238a39279f90263de662eca89a52236d6) `sha256:6f4a91e942e44150d0fb0f56d25d81ebecb50f9fe6c79ed770a961e3d4dc1d8a`
* [aws-node-termination-handler](https://github.com/openshift/aws-node-termination-handler) git [b64c6ab9](https://github.com/openshift/aws-node-termination-handler/commit/b64c6ab9cec07965ad6688096822cce17338f089) `sha256:3f08380e5fb4a177f0266793d1f7183cd1a5c2ebd10572bd9966576d2050f4ef`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [0d33a459](https://github.com/openshift/aws-pod-identity-webhook/commit/0d33a4596e2a22d188fe74c4a6497c37c2528c1f) `sha256:602dd9d67ed4cece8ee273a029958426e81b824d65709de747a006246bd56323`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [4bbe983b](https://github.com/openshift/azure-kubernetes-kms/commit/4bbe983bea2d88b643fe756b8e013964fa312f0b) `sha256:64d2398490818410900d93a09bfea17f6ec1bd2be08cbb5245caf0b911b40e9d`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [b371cd04](https://github.com/openshift/azure-service-operator/commit/b371cd0419df01d984977779a729a098ed24b24d) `sha256:18e15c1d7f09f7ea4c90d4917aabadce1d6252a1fb558456b72b8c8ccea0d934`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [3f118b30](https://github.com/openshift/azure-workload-identity/commit/3f118b30e806a344c9fbc08245fea677a9979cad) `sha256:6d69fb7d2556453b288f2884c0a14a540f92a1b367dc85f072bb91af62205641`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [a819db45](https://github.com/openshift/kubernetes-autoscaler/commit/a819db459f3e0a88becba4c58bf053c6dbda28f2) `sha256:24870bcaf5e4223d0277513c09606d4adf7583dce48b74bff85b5d83b70b8ba0`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [49d03c60](https://github.com/openshift/cluster-autoscaler-operator/commit/49d03c60e05e8856dde5a416e01c8512cc824a59) `sha256:ff80619b8c02f7501bf1d5ad17b3215809bff21eb8e241395bf7b413c258a866`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [641ed6cf](https://github.com/openshift/cluster-bootstrap/commit/641ed6cfb98189f02fe2eb515491ee9de0831136) `sha256:4ba9851158b94726e5ae1873eba86191737806745d6ef3c11e74fe5155c4b276`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [8ca6b258](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/8ca6b2588cefcbeffc895ee8ec51fb52ce9f1bb3) `sha256:3bf5e93e81a66b2972949d16645e9ecba9a57643cb5bb274bedfb601cb406f3e`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [41e9a6cc](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/41e9a6ccf361de2b37c0e91c2e03fb7fec31a634) `sha256:aa1b821d1100ca539b169e9f0f8e996a872f92802c1b21319af337a7aedb627e`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [ab8cbfbb](https://github.com/openshift/cluster-kube-scheduler-operator/commit/ab8cbfbb1e5532cec39d08c6e84b8f8c0ea856ef) `sha256:b69145bedfe85e92e679d319dd5a019d36518eb5a0a326b63a12ff4c5770961e`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [01da4b3e](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/01da4b3eee18148dddb64b734939ef2b3cb110ef) `sha256:92bdf25ac9da890b67e44be99527bb99e4c4f3e06c560c29da92e9f58c588119`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [9607604d](https://github.com/openshift/cluster-update-keys/commit/9607604d35acee234051bd0da8a14321b4edd38e) `sha256:ae72613ecd7c669c4a87473be031f7b57dabe4fcd64398e774310fe21eb94a72`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [44c6428e](https://github.com/openshift/containernetworking-plugins/commit/44c6428e4c9a20fd2f0c3ad4de11e50862a51151) `sha256:f4adb58b25f7f9b089eb5fa71a730518e38e6d95c99ad72c3f99da5f4337cea2`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [44c6428e](https://github.com/openshift/containernetworking-plugins/commit/44c6428e4c9a20fd2f0c3ad4de11e50862a51151) `sha256:847a07c294892eabec87fb1843907405f9c2bd98e11e8eff0ad1f9ea247ce192`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [69f816f6](https://github.com/openshift/csi-driver-nfs/commit/69f816f69e1273868bc19cb13fe6dbd9a7a9ff5f) `sha256:5e78ddddd8c4ac82f5d2942a15440fdc89c5b275186a6d864fce1af7191012c1`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [9fec0cd4](https://github.com/openshift/csi-external-attacher/commit/9fec0cd4e5043505e3b0bf7230e3d41e1482f85b) `sha256:a1c20e21a575ad29566b7e403d1476d6100c740c751ea99ccc8d2f19c3fc6c22`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [4af23e63](https://github.com/openshift/csi-external-provisioner/commit/4af23e6310423f2be9f25dbd772d228a6ca34443) `sha256:8af836a5d7b4881eef6fc444e737d6d12c49aeeb9fa7dec0ce3734cb945898ef`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [0399f263](https://github.com/openshift/csi-external-snapshot-metadata/commit/0399f2634abb48378e1a29899530c1de157a03ec) `sha256:1d2e0578e899413f096c5424c15f06969e3593c804558488ee457c1ac1191390`
* [docker-builder](https://github.com/openshift/builder) git [eb6fab81](https://github.com/openshift/builder/commit/eb6fab812908e89e61afd9083d96a3e44d979b20) `sha256:72bf7f036e2ba91689f9801290cd85b02e2b4279d9a1ebd51a7ec2cffa9fd2d7`
* [docker-registry](https://github.com/openshift/image-registry) git [ad28258b](https://github.com/openshift/image-registry/commit/ad28258ba72b92639a64c13942528cfd07bcdcbd) `sha256:7c0af6fe534802af2bcc4b83840a0caa83a773fe82db7ea31947cc6c09062f3e`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [b63b175a](https://github.com/openshift/driver-toolkit/commit/b63b175a79b9fe0c29f6ed63df3c2d7862ba408a) `sha256:9d13322e12ff41b524510893cab8ab4e16c44f59c5ee332a6d453550fbcc79a7`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [0264f879](https://github.com/openshift/egress-router-cni/commit/0264f879b64fe94c28f1b7a32c5fcd91a5ec43db) `sha256:df1dc8bbd424cc195bf67a2f5e481edec0c5cab32400db141b486a9f8d723674`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [897628ca](https://github.com/openshift/cluster-api-provider-gcp/commit/897628ca4a2429cd3f6913e667a01b3c20613bac) `sha256:cfe1a8516637765d1d8f4d1156754e9ed5c6c92a9dd69652bc989082880fe549`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [ce7b501e](https://github.com/openshift/gcp-pd-csi-driver/commit/ce7b501ec5bc6ab63c894474a770ccc54fd8d1d2) `sha256:400feda1e3ebd54fdeaedd4e2ea8cf7ccd1c0f3f7e59135cd05cfbfb1013f8bc`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [4501ff2f](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/4501ff2f53576c31df0511b69444e65e1eeba745) `sha256:c53e57a3bb5a12fc5a5351a224075ec3eb3a3bbb96bfe25cc30b452a68c7a499`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [8f1f7d63](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/8f1f7d630bc9df33d25cd209fc04869f967b7823) `sha256:c8a61c5b2df061fc8b61d3ceb292a645e3eecf4aa4a46041c48dc490c4943e8e`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [5b8c7580](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/5b8c75809ee2c05b2e26d309aa4614fcb4c2d501) `sha256:4dc2ef9c587b047a871b145c915b018ffdbbef98f58cd946f571424cec9b6f0e`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [5823f38c](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/5823f38cea16b6a9a002e791288290bc50b500a0) `sha256:5dad7bc414de23d606462a9bb2dde67ae7cb8cf3a01028622f657a6c10ee46d5`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [23a0d856](https://github.com/openshift/insights-runtime-extractor/commit/23a0d856df20187f8a560f226546907a7bbeed23) `sha256:ef997560dc54273381b23b840d3c82ea80f1a2ac972d80335c73d55873f3a6a2`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [23a0d856](https://github.com/openshift/insights-runtime-extractor/commit/23a0d856df20187f8a560f226546907a7bbeed23) `sha256:9c81dcd5d9016e267f6f2414ddbede4f53fb74a9cc8578becdcfc88e9f38d6a4`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [f8e41b2e](https://github.com/openshift/ironic-rhcos-downloader/commit/f8e41b2ed8915474a99e3eb34b54692afb0611da) `sha256:e19426eb920f177c49e887fee3e3d7c6a737ff9dc6069818a458c5d7607b6476`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [486a0418](https://github.com/openshift/ironic-static-ip-manager/commit/486a041897d703d55ef59c98e2b20a01588a0b4c) `sha256:0514daddcab4a9ea43b13f852760d0ac992251b913d53db061c797e9c15009b2`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [b81e4806](https://github.com/openshift/kubernetes-metrics-server/commit/b81e4806032163f01cd40a3a39cc245eca1cf9d9) `sha256:786c7406d55aafcbb21516af43598dc483a2ff8578cadad86c9a3e088f7cbde7`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [75554a03](https://github.com/openshift/kube-rbac-proxy/commit/75554a0355eb0c9b25904102437a529703af89b8) `sha256:2f028705a0f62314c6fe86a408470e94a20aa125adcd9b3682b5ade97e92737b`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [4ee3abf7](https://github.com/openshift/kube-state-metrics/commit/4ee3abf755840bf17040e4008445cf4303e94fb9) `sha256:c6536186c5f1d3db9983a2fb38cecb064b8966d3f0a5facc12f8c9673346d9e3`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [c67b43a2](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/c67b43a2519e63f02e4be27ae6c8d4edcbc75950) `sha256:b8818e7bf345c7b435e7056a1cf6caba9fd4c61724eae7026d7a05ac417023a4`
* [kube-vip](https://github.com/openshift/kube-vip) git [b272a734](https://github.com/openshift/kube-vip/commit/b272a7342833dad64574158101decb94ebe703d0) `sha256:deb863327945e0b3582890970e3b4da88637a7d1f7ea080d765c5ed67d36ebf1`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [87f4774b](https://github.com/openshift/image-customization-controller/commit/87f4774be1fc58b6b3868c57326a80f95bd81594) `sha256:cb61d580dd60ff382e1b28b9d0c8e8440e13ad356459d02733d421aeb887cabf`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [3fca30d8](https://github.com/openshift/machine-os-images/commit/3fca30d8f935900603dab36abd6cc4a1e356b693) `sha256:069b243f19ef22ce052340ae2c2c18846537848d741d4695e16611165c0d0130`
* [metallb-frr](https://github.com/openshift/frr) git [567c9101](https://github.com/openshift/frr/commit/567c9101668ad51d96feb15ff121d69d6256fc1a) `sha256:69847a732aa63ff1cb6c9002f379beb77bd31f50482fb25f0a0b44d3d6ca5460`
* [multus-cni](https://github.com/openshift/multus-cni) git [65b175bf](https://github.com/openshift/multus-cni/commit/65b175bfbceeb7de7bc4a82d336858d93e30120c) `sha256:3ecb951fe34a78cd9e7bb4129b87ca97765bbe0c4325df42025a92176aff4688`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [65b175bf](https://github.com/openshift/multus-cni/commit/65b175bfbceeb7de7bc4a82d336858d93e30120c) `sha256:05ded6ec046a0240f7f4d81b598c03a562c8f97111a73c125f9d1b5f6face0f2`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [39e9cccf](https://github.com/openshift/multus-networkpolicy/commit/39e9cccfa32951d0243c99638099da0a84d0d598) `sha256:0bb695bf594aa4284d3988dbfe9bed5b8a17551099887b57313f0ddf6af0bb45`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [345809e1](https://github.com/openshift/route-override-cni/commit/345809e13769604b88431f4a226c56c7227cadce) `sha256:cc569478ebd5439fc944e8ec2fb17e356ac6c90c047a292e4cdb5ff33d796958`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [6a6381d8](https://github.com/openshift/whereabouts-cni/commit/6a6381d869e964d741a551fd869644b0364c5b26) `sha256:bc1813051bdea9b139034df103b015c03c7c3675caaeee608b34477f03a70132`
* [must-gather](https://github.com/openshift/must-gather) git [e2487964](https://github.com/openshift/must-gather/commit/e2487964fe989e4147fc02cede01ea0bc8a6be7c) `sha256:b6430afa75a92fd53b9769ecfb5d8c47df226c3fbb3aab65ad4cec68455b74a5`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [b8723844](https://github.com/openshift/bond-cni/commit/b8723844dc69940f55208cdb265653ab57f959f0) `sha256:57de329a90692b31bd58d65f3656ae970b468114b8239840a98320c7a40657e2`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [f2abba74](https://github.com/openshift/network-metrics-daemon/commit/f2abba74f88bff66660ab1baa0a7e105ede1f399) `sha256:a9642b0b1eb1160b497a8deabe9a62aa4aaa24f314a3d350cb8dc2f1a7d1a90e`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [eded4633](https://github.com/openshift/cloud-provider-nutanix/commit/eded4633cafeaab62f01736ef6a6115077bebf7c) `sha256:6d734853ebb310733918f0b551c5af0981de88ab066564c5592df5ba3c0af4cd`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [dd82b4a7](https://github.com/openshift/oauth-apiserver/commit/dd82b4a7e06ef4c0ad5abc2a7fbbb2882d765b41) `sha256:73bafc63132f44a929028f519235feb0708c2f85c0af99d75fd6773c823c34ca`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [2c9e613a](https://github.com/openshift/oauth-proxy/commit/2c9e613ae807baecb5bbeeb47b567b2e6c47a088) `sha256:dc09ff3d8fda1a8254b8b60f3980a0300f8c8e802be72153b79fd8f6371c5698`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [72964318](https://github.com/openshift/openshift-controller-manager/commit/72964318318f2a65e66b766a288b2241e6a6c51e) `sha256:dba626f0da8d19fbbc5f00a9137bdf6e00c51bd9a017bee2861b5f2263e34dcf`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [de9762d4](https://github.com/openshift/openshift-state-metrics/commit/de9762d4058aab05b91e413dc0f700ff9f02431e) `sha256:52a67d36a6e322913bc010b989461e8e32e4d7524f9cc11af63a1d69faf4a6a6`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [64203711](https://github.com/openshift/openstack-resource-controller/commit/642037113b21f8b553ae449ed79888afd46cd006) `sha256:1375efa5dfceb20992b5845162088acdaa9b8d8ba72b46a8349c3d47b2f8c63e`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [5a7d0ade](https://github.com/operator-framework/operator-marketplace/commit/5a7d0ade6d5fae66fca8b5d376f89037a914b499) `sha256:7848f55c634b08ca556a724e85b4a4f7084e70dd048822c4d14692fe10ad096d`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [cfe345c7](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/cfe345c7dd6e7f817927847690658b199c3d1653) `sha256:9c3412ebfb0edb1943cc4e2f2e4541c61eb6e654b4ac44728c790815f9621660`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [769aeb6a](https://github.com/openshift/prom-label-proxy/commit/769aeb6a1dda2d71c5e91ea6cbb8d5f510821135) `sha256:2d03194e0281287f90a3c00c1ec3342f653f73a9db75c7c697639eee40c7d3c2`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [f126069d](https://github.com/openshift/prometheus-alertmanager/commit/f126069d12d76009293a0e1668a5c00425d5d926) `sha256:1a1a26f7cffd34c288c5705a8d6952d583ca794fd221709aac52cd825ab5d7a7`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [d54be631](https://github.com/openshift/node_exporter/commit/d54be6318c024ab0df5415548ab4deb35d1bab52) `sha256:225105f4e21841f59ab59658ac595a3486984c8d812ce027c4876ef0d4f61529`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [a158fff7](https://github.com/openshift/route-controller-manager/commit/a158fff7ce3826058bd2d7338b206cdd600d0d40) `sha256:bfb87da49b83e5192206e5e1b8622b588c939b2f44accf54821e144951a00665`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [ed872ba1](https://github.com/openshift/service-ca-operator/commit/ed872ba14b615ca5726ae90e987268877a0b0b20) `sha256:fe88ca9d6f1e964410e2885e6f2369ef2e84c5ce511c9cf4366d87b5997865c5`
* [stream-coreos-extensions](https://github.com/openshift/os) git [62965e80](https://github.com/openshift/os/commit/62965e8043270be3ae4b4568f6f6475ed1804973) `sha256:b92fa44918f5b7475a161790af2ebc480b1431df7a730670fa15a1fc208c42c8`
* [telemeter](https://github.com/openshift/telemeter) git [c1db3dc4](https://github.com/openshift/telemeter/commit/c1db3dc4233dc50dded21357182390188e0fc78e) `sha256:c640ae3927b233ca25f04deb2d5ab30fd270905668c8ae280a382600b947dac4`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [c228c0a1](https://github.com/openshift/cluster-api-provider-vsphere/commit/c228c0a16a2f1f63aa4ba975e6e728c070b8df7d) `sha256:d11198cc38b27153f490d5af347f77f696b05d242f6c5b6ccac5c9a9fc32b3e4`
### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/77b43f46974270eb5d4901587ee708832fa27478)
* NO-ISSUE: Refresh RPM lockfiles [#11297](https://github.com/openshift/assisted-service/pull/11297)
* NO-ISSUE: [master] Bump OCP versions: 4.19 [#11278](https://github.com/openshift/assisted-service/pull/11278)
* [MGMT-25480](https://issues.redhat.com/browse/MGMT-25480): Sync NTP sources from CRD spec by comparing to DB [#11198](https://github.com/openshift/assisted-service/pull/11198)
* NO-ISSUE: [master] Bump OCP versions: 4.21, 4.20, 4.22 [#11270](https://github.com/openshift/assisted-service/pull/11270)
* NO-ISSUE: Refresh RPM lockfiles [SECURITY] [#11264](https://github.com/openshift/assisted-service/pull/11264)
* [OCPEDGE-3082](https://issues.redhat.com/browse/OCPEDGE-3082): Skip dnsmasq for UnifiedClusterManagedDNSAndLB FG + SNO + None platform [#11228](https://github.com/openshift/assisted-service/pull/11228)
* [ACM-48279](https://issues.redhat.com/browse/ACM-48279): Cilium blocks infrastructure-operator access to the Kubernetes API [#11245](https://github.com/openshift/assisted-service/pull/11245)
* NO-ISSUE: Refresh RPM lockfiles [SECURITY] [#11254](https://github.com/openshift/assisted-service/pull/11254)
* NO-ISSUE: Refresh RPM lockfiles [SECURITY] [#11043](https://github.com/openshift/assisted-service/pull/11043)
* [ACM-44934](https://issues.redhat.com/browse/ACM-44934): CVE-2026-88031 Bump go.mongodb.org/mongo-driver to v1.17.10 using replace directive [#11220](https://github.com/openshift/assisted-service/pull/11220)
* NO-ISSUE: [master] Bump OCP versions: 4.13, 4.16, 4.17, 4.18, 5.0 [#11240](https://github.com/openshift/assisted-service/pull/11240)
* [Full changelog](https://github.com/openshift/assisted-service/compare/9307cfae14e639b061127932c2fefedb11c987f0...77b43f46974270eb5d4901587ee708832fa27478)
### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/1485df1bc332e738e5e9e12f5f1c36e7cde69866)
* [OCPBUGS-132570](https://issues.redhat.com/browse/OCPBUGS-132570): Preserve firstboot network config across OS image replacement [#2465](https://github.com/openshift/assisted-installer/pull/2465)
* NO-ISSUE: Update module github.com/golangci/golangci-lint to v2.15.0 [#2477](https://github.com/openshift/assisted-installer/pull/2477)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/eccd9f6920544feb01eb1da43dc81b9b9997dfe0...1485df1bc332e738e5e9e12f5f1c36e7cde69866)
### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/59d5879edc758aeede7b783588067f2729885e2e)
* [MGMT-25567](https://issues.redhat.com/browse/MGMT-25567): fix(apivip_check): honor HTTPS proxy with custom CA [#1737](https://github.com/openshift/assisted-installer-agent/pull/1737)
* NO-ISSUE: Refresh RPM lockfiles [#1757](https://github.com/openshift/assisted-installer-agent/pull/1757)
* NO-ISSUE: Refresh RPM lockfiles [#1705](https://github.com/openshift/assisted-installer-agent/pull/1705)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/775b77f30ea6a6f2980a5d2e744e22b65d8fb4b4...59d5879edc758aeede7b783588067f2729885e2e)
### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/f92a5adef38c364c43378671f3a02d91570fcb7d)
* Don't show Static IP steps in OVE below the sea (#4119) [#4119](https://github.com/openshift-assisted/assisted-installer-ui/pull/4119)
* Hide the network type control in OVE (#4129) [#4129](https://github.com/openshift-assisted/assisted-installer-ui/pull/4129)
* Add to OVE custom manifest workaround filter (#4128) [#4128](https://github.com/openshift-assisted/assisted-installer-ui/pull/4128)
* Update GH actions to @v7 (#4127) [#4127](https://github.com/openshift-assisted/assisted-installer-ui/pull/4127)
* Bump vite from 8.0.16 to 8.1.6 (#4121) [#4121](https://github.com/openshift-assisted/assisted-installer-ui/pull/4121)
* Bump follow-redirects from 1.16.0 to 1.16.1 (#4120) [#4120](https://github.com/openshift-assisted/assisted-installer-ui/pull/4120)
* Temporarily hide static IP controls (#4116) [#4116](https://github.com/openshift-assisted/assisted-installer-ui/pull/4116)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/046e90e94675f78b98f4dec149d0373b20421604...f92a5adef38c364c43378671f3a02d91570fcb7d)
### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/6951d70c670c52b37606fa1fab73f713677135ac)
* [OCPCLOUD-3684](https://issues.redhat.com/browse/OCPCLOUD-3684): Merge https://github.com/kubernetes/cloud-provider-aws/tree/master (c87c679) into main [#191](https://github.com/openshift/cloud-provider-aws/pull/191)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/e44d1350940f8fcc82fd60f91c5984d7952a3b08...6951d70c670c52b37606fa1fab73f713677135ac)
### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/801828ccdcdb90aa6714baace313a1bd9572115f)
* UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws/tree/v2.13.1 (6883178) into main [#664](https://github.com/openshift/cluster-api-provider-aws/pull/664)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/3bf5bb7061c12adfb93f7cb2c9ffe8370b0daa35...801828ccdcdb90aa6714baace313a1bd9572115f)
### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/82f8d242aed33911400428e92c76f780ef3e1493)
* NO-ISSUE: Address CVE-2026-33814 [#354](https://github.com/openshift/aws-ebs-csi-driver/pull/354)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/f0c5dd9f969c22ef16f279ecc9f42bcbf7bae35f...82f8d242aed33911400428e92c76f780ef3e1493)
### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, gcp-pd-csi-driver-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/8de788b13eda9c79a6847061f14d5d840f9200cf)
* [STOR-3176](https://issues.redhat.com/browse/STOR-3176): Support TLS Groups in operators for kube-rbac-proxy sidecar [#651](https://github.com/openshift/csi-operator/pull/651)
* [Full changelog](https://github.com/openshift/csi-operator/compare/3f56dc8428620a6c718bc3ab33cd2a6a44278493...8de788b13eda9c79a6847061f14d5d840f9200cf)
### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/456653e63c05ab78f31d0191a4a488b68d9b5eef)
* [OCPCLOUD-3661](https://issues.redhat.com/browse/OCPCLOUD-3661): bump to Kubernetes 1.37 [#227](https://github.com/openshift/machine-api-provider-aws/pull/227)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/f8155b0e0363d70d240dec04129cda9490f6ed1b...456653e63c05ab78f31d0191a4a488b68d9b5eef)
### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/c66a908826575f8f88e750822fbe9c2afdbdb49a)
* [OCPCLOUD-3676](https://issues.redhat.com/browse/OCPCLOUD-3676): Merge https://github.com/kubernetes-sigs/cloud-provider-azure/tree/release-1.37 (6e6e09b) into main [#200](https://github.com/openshift/cloud-provider-azure/pull/200)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/2b2ba3b799d7e126826d63dc153611b97cced61f...c66a908826575f8f88e750822fbe9c2afdbdb49a)
### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/1621a6f14ae1f7dfafa12a1cc616cca176048034)
* [OCPBUGS-129622](https://issues.redhat.com/browse/OCPBUGS-129622): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:release-1.27 (8c829ce) into main [#420](https://github.com/openshift/cluster-api-provider-azure/pull/420)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/dc9698901ac66aa4287ec3e2c95a8eb2580fc3a5...1621a6f14ae1f7dfafa12a1cc616cca176048034)
### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/4f38fc62865498f7c28dca88f3d28fea0395799a)
* [TRT-3028](https://issues.redhat.com/browse/TRT-3028): UPSTREAM: <drop>: Revert "STOR-3077: Rebase to v1.36.0 for OCP 5.1" [#187](https://github.com/openshift/azure-disk-csi-driver/pull/187)
* [STOR-3077](https://issues.redhat.com/browse/STOR-3077): Rebase to v1.36.0 for OCP 5.1 [#182](https://github.com/openshift/azure-disk-csi-driver/pull/182)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/f45ca8b02d65d6c5d57bd551c379fb2f08b1c43a...4f38fc62865498f7c28dca88f3d28fea0395799a)
### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/505f5a9465873952d8e80acbb7c8a9c37a7b921e)
* [STOR-3082](https://issues.redhat.com/browse/STOR-3082): Rebase to v1.35.10 for OCP 5.1 [#170](https://github.com/openshift/azure-file-csi-driver/pull/170)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/9dc3d1eb4a5fee41140dd49afd7769e4820bd961...505f5a9465873952d8e80acbb7c8a9c37a7b921e)
### [azure-karpenter-provider-azure](https://github.com/openshift/Azure-karpenter-provider-azure/tree/bc70c7241ed3f1e05d97a4713c9bfdefc52cf1ee)
* [AUTOSCALE-1062](https://issues.redhat.com/browse/AUTOSCALE-1062): remove Azure-specific maxPods bounds [#11](https://github.com/openshift/Azure-karpenter-provider-azure/pull/11)
* [OCPBUGS-131842](https://issues.redhat.com/browse/OCPBUGS-131842): fix OpenShift SSH public key format [#12](https://github.com/openshift/Azure-karpenter-provider-azure/pull/12)
* [Full changelog](https://github.com/openshift/Azure-karpenter-provider-azure/compare/28a0c2c60d6bd9e10cfcd8d891dee185b5d09750...bc70c7241ed3f1e05d97a4713c9bfdefc52cf1ee)
### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/0f6806316355ad37eb606d6ab74b0cf76a2efebe)
* [OCPBUGS-127058](https://issues.redhat.com/browse/OCPBUGS-127058): Azure DualStack: Update Load Balancer backend pool matching for IPv6 [#221](https://github.com/openshift/machine-api-provider-azure/pull/221)
* [OCPCLOUD-3663](https://issues.redhat.com/browse/OCPCLOUD-3663): bump Kubernetes dependencies to 1.37 [#220](https://github.com/openshift/machine-api-provider-azure/pull/220)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/4ba9605f3a9af6ddc31afb86a95439454fdd2965...0f6806316355ad37eb606d6ab74b0cf76a2efebe)
### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/90c6c496ada1995bda61bdb33fec84d1dec44c56)
* [OCPBUGS-132229](https://issues.redhat.com/browse/OCPBUGS-132229): UPSTREAM: 3440: Bump x/net to v0.55.0 [#113](https://github.com/openshift/cluster-api-provider-metal3/pull/113)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/077fb85ff07130c5262811512ab343b3294a9d4b...90c6c496ada1995bda61bdb33fec84d1dec44c56)
### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/9f74e6b679fe32d6fbf99ca4f27bf543780a10a5)
* [RFE-8788](https://issues.redhat.com/browse/RFE-8788): Update installer to accept Capacity Group Reservation IDs for Azure [#10102](https://github.com/openshift/installer/pull/10102)
* [OCPBUGS-127058](https://issues.redhat.com/browse/OCPBUGS-127058): Azure DualStack: Rename IPv6 Backend pools [#10998](https://github.com/openshift/installer/pull/10998)
* [SPLAT-3016](https://issues.redhat.com/browse/SPLAT-3016): multi-disk: disallow system mount paths for user-defined disks [#11021](https://github.com/openshift/installer/pull/11021)
* [OCPBUGS-130398](https://issues.redhat.com/browse/OCPBUGS-130398): PowerVC: Support non admin user [#10966](https://github.com/openshift/installer/pull/10966)
* [OCPBUGS-126133](https://issues.redhat.com/browse/OCPBUGS-126133): CVE-2026-84445: Bump google.golang.org/grpc to v1.83.2 [#10936](https://github.com/openshift/installer/pull/10936)
* [OPNET-810](https://issues.redhat.com/browse/OPNET-810): deps: bump openshift/api and Kubernetes packages to 1.37 [#10985](https://github.com/openshift/installer/pull/10985)
* [OCPBUGS-132573](https://issues.redhat.com/browse/OCPBUGS-132573): azure: omit empty machine security profiles [#10960](https://github.com/openshift/installer/pull/10960)
* [OPNET-810](https://issues.redhat.com/browse/OPNET-810): baremetal: align bgpVIPConfig peer fields with the BGPVIPConfig CRD [#10931](https://github.com/openshift/installer/pull/10931)
* [OCPBUGS-132208](https://issues.redhat.com/browse/OCPBUGS-132208): unconfigured-ignition must include nmstateconfig.yaml when present [#11010](https://github.com/openshift/installer/pull/11010)
* [OCPBUGS-130604](https://issues.redhat.com/browse/OCPBUGS-130604), [OCPBUGS-132034](https://issues.redhat.com/browse/OCPBUGS-132034): azure: set up data disks via the LUN link and other validation gaps [#10975](https://github.com/openshift/installer/pull/10975)
* [OKD-507](https://issues.redhat.com/browse/OKD-507): Update SCOS bootimage metadata to 10.0.20261014-0 [#10864](https://github.com/openshift/installer/pull/10864)
* [Full changelog](https://github.com/openshift/installer/compare/4cc123418234529a216eaed8547a878333f814d0...9f74e6b679fe32d6fbf99ca4f27bf543780a10a5)
### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/51bc686e528a7c831f49c0057bed244fa24bbbb0)
* [OCPCLOUD-3709](https://issues.redhat.com/browse/OCPCLOUD-3709): feat(tls): support remediation webhook curve preferences [#283](https://github.com/openshift/cluster-api-provider-baremetal/pull/283)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/26162bf34fac0761c66dc2a6c5cca9407b60b606...51bc686e528a7c831f49c0057bed244fa24bbbb0)
### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/257604b553932dbfe490df459db29a42b781f7a5)
* [METAL-1980](https://issues.redhat.com/browse/METAL-1980): Merge upstream [#529](https://github.com/openshift/baremetal-operator/pull/529)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/849e5bef16116cb16afbef129c102d0436f4e734...257604b553932dbfe490df459db29a42b781f7a5)
### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/4b4da7c9654361a9eee8f75c03acc22c3f0181e2)
* [OCPEDGE-3080](https://issues.redhat.com/browse/OCPEDGE-3080): Introduce --discover-node-ip for SNO CoreDNS [#417](https://github.com/openshift/baremetal-runtimecfg/pull/417)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/a8a259f56c61e086d96fab128f2b30738a36fa8b...4b4da7c9654361a9eee8f75c03acc22c3f0181e2)
### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/027bf0b05d713f85d6fc4674ff2e076684538a74)
* NO-JIRA: Rebase to 1.37 and update other dependencies. [#2435](https://github.com/openshift/oc/pull/2435)
* NO-JIRA: Add DS_Store to gitignore file [#2441](https://github.com/openshift/oc/pull/2441)
* [Full changelog](https://github.com/openshift/oc/compare/758dbfa96d00a3e7a1baef5d05f01a1ef620f661...027bf0b05d713f85d6fc4674ff2e076684538a74)
### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/a19ed01469ad1e3384df6636f6d9feffe5b1eb15)
* NO-JIRA: Fix staticcheck warnings across multiple packages [#1109](https://github.com/openshift/cloud-credential-operator/pull/1109)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/82a5b4459331bc8218bdf49cb83a8eaf92ba4b05...a19ed01469ad1e3384df6636f6d9feffe5b1eb15)
### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/c06f070a8be1a738f3c79cdbbb041b18b5d71fb5)
* [CORENET-7581](https://issues.redhat.com/browse/CORENET-7581): Bump Kubernetes dependencies to 1.37.1 [#273](https://github.com/openshift/cloud-network-config-controller/pull/273)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/3702e0a65c357082155ec3fb57fdc651ac33c4a0...c06f070a8be1a738f3c79cdbbb041b18b5d71fb5)
### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/7f547bb8360a4e83929e6996367a485fb3608b44)
* [CNTRLPLANE-4787](https://issues.redhat.com/browse/CNTRLPLANE-4787): Make External OIDC proxy handling more robust [#1036](https://github.com/openshift/cluster-authentication-operator/pull/1036)
* NO-JIRA: Fix staticcheck warnings across multiple packages [#1025](https://github.com/openshift/cluster-authentication-operator/pull/1025)
* NO-JIRA: bump(openshift/library-go): to get KMS GA [#1041](https://github.com/openshift/cluster-authentication-operator/pull/1041)
* [CNTRLPLANE-4787](https://issues.redhat.com/browse/CNTRLPLANE-4787): Reapply: Add support for External OIDC proxy [#1039](https://github.com/openshift/cluster-authentication-operator/pull/1039)
* NO-JIRA: Update library-go to get KMS changes [#1040](https://github.com/openshift/cluster-authentication-operator/pull/1040)
* [TRT-3040](https://issues.redhat.com/browse/TRT-3040): Revert #1001 "CNTRLPLANE-4787: Add support for External OIDC proxy" [#1038](https://github.com/openshift/cluster-authentication-operator/pull/1038)
* [CNTRLPLANE-4787](https://issues.redhat.com/browse/CNTRLPLANE-4787): Add support for External OIDC proxy [#1001](https://github.com/openshift/cluster-authentication-operator/pull/1001)
* [CNTRLPLANE-4519](https://issues.redhat.com/browse/CNTRLPLANE-4519): External OIDC lib go generator [#1018](https://github.com/openshift/cluster-authentication-operator/pull/1018)
* NO-JIRA: Update library-go [#1032](https://github.com/openshift/cluster-authentication-operator/pull/1032)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/d20beabe1dc06d236606e9aa63e492d5d7db2a18...7f547bb8360a4e83929e6996367a485fb3608b44)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/59633348314bca7302833b70c5f8f8da9d05d876)
* [METAL-1934](https://issues.redhat.com/browse/METAL-1934): Add support for feature gates [#663](https://github.com/openshift/cluster-baremetal-operator/pull/663)
* [OCPBUGS-115068](https://issues.redhat.com/browse/OCPBUGS-115068): Validate Provisioning fields passed to containers [#653](https://github.com/openshift/cluster-baremetal-operator/pull/653)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/2eb059a60ad7f4e332bd1208813f904ab51f2ddb...59633348314bca7302833b70c5f8f8da9d05d876)
### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/bb5a4cf7cfb28705a46e25bf26a6d13d0ddb0424)
* [TRT-3024](https://issues.redhat.com/browse/TRT-3024): UPSTREAM: <drop>: Revert "Rebase OpenShift Cluster API onto upstream v1.14.3" [#318](https://github.com/openshift/cluster-api/pull/318)
* [Full changelog](https://github.com/openshift/cluster-api/compare/0916086435f2570dcf91a198e420a14331a73546...bb5a4cf7cfb28705a46e25bf26a6d13d0ddb0424)
### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/417cbfb6fe1bbb1e6b453727eee664cebc0ec90a)
* [OCPBUGS-133479](https://issues.redhat.com/browse/OCPBUGS-133479): fix(e2e): remove CRD compatibility gate from handoff test [#699](https://github.com/openshift/cluster-capi-operator/pull/699)
* [OCPCLOUD-3725](https://issues.redhat.com/browse/OCPCLOUD-3725): test: separate Cluster API operator health checks from machine management [#698](https://github.com/openshift/cluster-capi-operator/pull/698)
* [OCPBUGS-133416](https://issues.redhat.com/browse/OCPBUGS-133416): fix(openstack): tolerate multiple external networks when no router exists [#697](https://github.com/openshift/cluster-capi-operator/pull/697)
* [OCPCLOUD-3725](https://issues.redhat.com/browse/OCPCLOUD-3725): Support operator no-components mode [#696](https://github.com/openshift/cluster-capi-operator/pull/696)
* [OCPCLOUD-3704](https://issues.redhat.com/browse/OCPCLOUD-3704): Enable CRD Compatibility Checker e2e tests on External topology [#688](https://github.com/openshift/cluster-capi-operator/pull/688)
* [OCPCLOUD-3724](https://issues.redhat.com/browse/OCPCLOUD-3724): Enable proxy injection for capi-controllers [#692](https://github.com/openshift/cluster-capi-operator/pull/692)
* [OCPCLOUD-3655](https://issues.redhat.com/browse/OCPCLOUD-3655): bump Kubernetes dependencies to 1.37 [#686](https://github.com/openshift/cluster-capi-operator/pull/686)
* [OCPCLOUD-3704](https://issues.redhat.com/browse/OCPCLOUD-3704): Enable CRD Compatibility Checker support on Hosted OpenShift independently of Cluster API [#685](https://github.com/openshift/cluster-capi-operator/pull/685)
* [OCPCLOUD-3465](https://issues.redhat.com/browse/OCPCLOUD-3465): feat: implement cluster-wide proxy support [#586](https://github.com/openshift/cluster-capi-operator/pull/586)
* [OCPCLOUD-3318](https://issues.redhat.com/browse/OCPCLOUD-3318): Integrate CompatibilityRequirements into the CCAPIO Installer [#648](https://github.com/openshift/cluster-capi-operator/pull/648)
* [OCPBUGS-98492](https://issues.redhat.com/browse/OCPBUGS-98492): Fix orphaned MachineSet sync finalizer cleanup [#689](https://github.com/openshift/cluster-capi-operator/pull/689)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/330eb41ef26ade36bfd230044a09e27894d371f2...417cbfb6fe1bbb1e6b453727eee664cebc0ec90a)
### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/6b0b0f5f7ba29152717c8e1340a87f73ca3eacfa)
* [OCPCLOUD-3673](https://issues.redhat.com/browse/OCPCLOUD-3673): bump Kubernetes dependencies to 1.37 [#523](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/523)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/9ca11878cc35862f4af4c194985b4f3ae3a835fa...6b0b0f5f7ba29152717c8e1340a87f73ca3eacfa)
### [cluster-config-api](https://github.com/openshift/api/tree/77c45d1bcab323f765d55b4619a583d0293410e9)
* Nutanix: featuregate for MachineAPIMigrationNutanix [#3125](https://github.com/openshift/api/pull/3125)
* [OPNET-809](https://issues.redhat.com/browse/OPNET-809): ship the BGPVIPConfig CRD in the payload [#3127](https://github.com/openshift/api/pull/3127)
* [METAL-1977](https://issues.redhat.com/browse/METAL-1977): add MetalEnrollmentAPI feature gate [#3090](https://github.com/openshift/api/pull/3090)
* [OCPCLOUD-3544](https://issues.redhat.com/browse/OCPCLOUD-3544): Graduate CompatibilityRequirement API to v1 [#2905](https://github.com/openshift/api/pull/2905)
* [CNTRLPLANE-4390](https://issues.redhat.com/browse/CNTRLPLANE-4390): Remove OpenShiftPodSecurityAdmission feature gate from Default feature set. [#3035](https://github.com/openshift/api/pull/3035)
* [CNTRLPLANE-4771](https://issues.redhat.com/browse/CNTRLPLANE-4771): Graduate KMSEncryption to GA [#3100](https://github.com/openshift/api/pull/3100)
* [STOR-3180](https://issues.redhat.com/browse/STOR-3180): Add Feature Gate StoragePathAlert [#3105](https://github.com/openshift/api/pull/3105)
* [OCPNODE-4827](https://issues.redhat.com/browse/OCPNODE-4827): Drop v1apha1 CRIOCredentialProviderConfig entirely [#3113](https://github.com/openshift/api/pull/3113)
* [OCPCLOUD-3330](https://issues.redhat.com/browse/OCPCLOUD-3330): Add ClusterAPIOperator feature gate [#3109](https://github.com/openshift/api/pull/3109)
* [OCPKUEUE-887](https://issues.redhat.com/browse/OCPKUEUE-887): Enable workload scheduling feature gates for DP/TP (except CompositePodGroup) [#3112](https://github.com/openshift/api/pull/3112)
* [TRT-3027](https://issues.redhat.com/browse/TRT-3027): Revert #3102 "OCPKUEUE-887: Enable workload scheduling feature gates for DP/TP" [#3107](https://github.com/openshift/api/pull/3107)
* [OCPEDGE-2989](https://issues.redhat.com/browse/OCPEDGE-2989): OCPEDGE-2958: Add topologyTransitionStatus to Infrastructure status [#3029](https://github.com/openshift/api/pull/3029)
* [CNTRLPLANE-4394](https://issues.redhat.com/browse/CNTRLPLANE-4394): Add foundations for AuthenticationComponentProxyExternalOIDC [#3037](https://github.com/openshift/api/pull/3037)
* [OCPKUEUE-887](https://issues.redhat.com/browse/OCPKUEUE-887): Enable workload scheduling feature gates for DP/TP [#3102](https://github.com/openshift/api/pull/3102)
* [Full changelog](https://github.com/openshift/api/compare/e07c1fd9d99c88fda2804b1a14bff2d14bede331...77c45d1bcab323f765d55b4619a583d0293410e9)
### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/25d3850c8799c11a0924dcc32576ae44d647ee9f)
* [OCPEDGE-2990](https://issues.redhat.com/browse/OCPEDGE-2990): Report supported topology evaluations [#522](https://github.com/openshift/cluster-config-operator/pull/522)
* NO-JIRA: Update Go to 1.26 and OpenShift API dependencies [#528](https://github.com/openshift/cluster-config-operator/pull/528)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/5c5530c5944b227649717a76273cc09c18005356...25d3850c8799c11a0924dcc32576ae44d647ee9f)
### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/9d18bdd71092bd9eaad426c6ec42b719c3a992e9)
* [NE-2126](https://issues.redhat.com/browse/NE-2126): Ship tests-ext binary as raw gzip instead of tar.gz [#503](https://github.com/openshift/cluster-dns-operator/pull/503)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/3a1eec9b63b48748e5aae3d281b40deaeb3a84e9...9d18bdd71092bd9eaad426c6ec42b719c3a992e9)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/88ac66d6714baa24466adbf697a75b0781b1362c)
* NO-JIRA: bump k8s 1.37 [#1733](https://github.com/openshift/cluster-etcd-operator/pull/1733)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/04b4210b9c8681cbbb3849682a5966ed383d3376...88ac66d6714baa24466adbf697a75b0781b1362c)
### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/9dba9645bb8ebae13006c76e726d6e2e42e72b1d)
* [CNTRLPLANE-4447](https://issues.redhat.com/browse/CNTRLPLANE-4447): observe tls groups preferences [#1379](https://github.com/openshift/cluster-image-registry-operator/pull/1379)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/440b92963974ca8f8c0fd7187b2c4d4492a406a4...9dba9645bb8ebae13006c76e726d6e2e42e72b1d)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/97da5fb8c7de84bfa6d38c4ce7a1709c45113959)
* [NE-2922](https://issues.redhat.com/browse/NE-2922): Migrate operator Ingress consumers to v1 [#1618](https://github.com/openshift/cluster-ingress-operator/pull/1618)
* [OCPBUGS-121851](https://issues.redhat.com/browse/OCPBUGS-121851): Complete zero-worker HyperShift startup without premature router readiness [#1631](https://github.com/openshift/cluster-ingress-operator/pull/1631)
* [NE-2938](https://issues.redhat.com/browse/NE-2938): Bump Kubernetes to 1.37 [#1643](https://github.com/openshift/cluster-ingress-operator/pull/1643)
* [NE-2779](https://issues.redhat.com/browse/NE-2779): Move Gateway API CRD VAP management from CVO to CIO [#1627](https://github.com/openshift/cluster-ingress-operator/pull/1627)
* [NE-2913](https://issues.redhat.com/browse/NE-2913): Remove HAProxy 2.8 reference [#1599](https://github.com/openshift/cluster-ingress-operator/pull/1599)
* [TRT-3032](https://issues.redhat.com/browse/TRT-3032): Revert #1607 "OCPBUGS-121851: Report ingress Available=True on zero-worker HyperShift startup" [#1630](https://github.com/openshift/cluster-ingress-operator/pull/1630)
* [NE-2901](https://issues.redhat.com/browse/NE-2901): Document commit conventions in AGENTS.md [#1582](https://github.com/openshift/cluster-ingress-operator/pull/1582)
* [OCPBUGS-128105](https://issues.redhat.com/browse/OCPBUGS-128105): Allow disabling endpoint address validation [#1608](https://github.com/openshift/cluster-ingress-operator/pull/1608)
* [OCPBUGS-118434](https://issues.redhat.com/browse/OCPBUGS-118434): Remove obsolete workaround that hardcodes spec.replicas [#1581](https://github.com/openshift/cluster-ingress-operator/pull/1581)
* [OCPBUGS-121851](https://issues.redhat.com/browse/OCPBUGS-121851): Report ingress Available=True on zero-worker HyperShift startup [#1607](https://github.com/openshift/cluster-ingress-operator/pull/1607)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/45007ca6932ce7159ee5120084bde0a4d33c4b83...97da5fb8c7de84bfa6d38c4ce7a1709c45113959)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/8619d44406fe87cbb21d188b0cf82bbb01709db0)
* NO-JIRA: bump(openshift/library-go): to get KMS GA [#2364](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2364)
* NO-JIRA: Update library-go [#2362](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2362)
* [OCPBUGS-60496](https://issues.redhat.com/browse/OCPBUGS-60496): Use BoundServceAccountTokenVolume dy default [#1896](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1896)
* NO-JIRA: Update library-go [#2354](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2354)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/ad5501e4bfad0397f73b1f91a907c5dc6cfe5fd0...8619d44406fe87cbb21d188b0cf82bbb01709db0)
### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/8935774b925a368067e112b15554534a85b87718)
* [STOR-2875](https://issues.redhat.com/browse/STOR-2875): wire volumeForceDetach config observer for KCM [#975](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/975)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/c4854ad5ad5d1f9b2dfef3f721f96632334acde7...8935774b925a368067e112b15554534a85b87718)
### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/f53c9f299a40cbf5fe49135dcdf7247547b3de23)
* NO-JIRA: Fix inconsistent vendoring [#345](https://github.com/openshift/cluster-machine-approver/pull/345)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/bd330ca2421f5a30cca8aafa26b60ad5af321ec8...f53c9f299a40cbf5fe49135dcdf7247547b3de23)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/5874161568c13df53cea7442b5b622ebaf308fc9)
* [OU-1306](https://issues.redhat.com/browse/OU-1306): add monitoring-plugin backend proxy for all non-GET requests [#3159](https://github.com/openshift/cluster-monitoring-operator/pull/3159)
* [OCPBUGS-132863](https://issues.redhat.com/browse/OCPBUGS-132863): remove Prometheus config reloader rules [#3169](https://github.com/openshift/cluster-monitoring-operator/pull/3169)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#3167](https://github.com/openshift/cluster-monitoring-operator/pull/3167)
* NO-JIRA: [bot] Update jsonnet dependencies [#3168](https://github.com/openshift/cluster-monitoring-operator/pull/3168)
* [MON-4655](https://issues.redhat.com/browse/MON-4655): append byte unit to enforced body size limit [#3145](https://github.com/openshift/cluster-monitoring-operator/pull/3145)
* NO-JIRA: chore: restrict NetworkPolicy ingress rules for thanos ruler and thanos sidecars on prometheus pods [#2926](https://github.com/openshift/cluster-monitoring-operator/pull/2926)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/23655aab712adb18ce1f0690ff8598a8ed165947...5874161568c13df53cea7442b5b622ebaf308fc9)
### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/a4b15373ac356ff9b6b0b717bd2642cc0598e8bf)
* [CORENET-6512](https://issues.redhat.com/browse/CORENET-6512): [CNO] Setup OTE framework and migrate test cases from tests-private [#3015](https://github.com/openshift/cluster-network-operator/pull/3015)
* [CNV-97772](https://issues.redhat.com/browse/CNV-97772): ovn-kubernetes, Gate MAC security schemas for Tech Preview [#3179](https://github.com/openshift/cluster-network-operator/pull/3179)
* [OCPBUGS-123662](https://issues.redhat.com/browse/OCPBUGS-123662): Provide clarity on status of NOO installation [#3166](https://github.com/openshift/cluster-network-operator/pull/3166)
* [OPNET-819](https://issues.redhat.com/browse/OPNET-819): frr-k8s: master-monitor follows platform pod conventions [#3202](https://github.com/openshift/cluster-network-operator/pull/3202)
* [CORENET-7580](https://issues.redhat.com/browse/CORENET-7580): Bump Kubernetes to 1.37.1 [#3183](https://github.com/openshift/cluster-network-operator/pull/3183)
* [CORENET-6320](https://issues.redhat.com/browse/CORENET-6320): fix(workloads): enforce read-only root filesystems [#3170](https://github.com/openshift/cluster-network-operator/pull/3170)
* [OPNET-783](https://issues.redhat.com/browse/OPNET-783): statusmanager: Treat zero-node DaemonSets as rolled out [#3046](https://github.com/openshift/cluster-network-operator/pull/3046)
* NO-ISSUE: Align frr-k8s 5.1 CRDs [#3195](https://github.com/openshift/cluster-network-operator/pull/3195)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/fc66cef8b3724a5d724fc8f8d9ef5c7bac755916...a4b15373ac356ff9b6b0b717bd2642cc0598e8bf)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/f02d1329cbef6d83e0d52e687d71eeef50b67c90)
* [CNF-28347](https://issues.redhat.com/browse/CNF-28347): Makefile: fix ARM e2e target and Hypershift ginkgo args [#1675](https://github.com/openshift/cluster-node-tuning-operator/pull/1675)
* NO-JIRA: fix isolatedCpuFreq doc comment to say maximum frequency [#1669](https://github.com/openshift/cluster-node-tuning-operator/pull/1669)
* NO-JIRA: Restrict metrics and webhook ingress [#1670](https://github.com/openshift/cluster-node-tuning-operator/pull/1670)
* NO-JIRA: tuned: restrict profile names [#1661](https://github.com/openshift/cluster-node-tuning-operator/pull/1661)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/728999bd889af5e4a6a6c8dcbfe781102188906c...f02d1329cbef6d83e0d52e687d71eeef50b67c90)
### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/f71f8213797cc8cfda3569baae15f387b57a745c)
* [OCPBUGS-132357](https://issues.redhat.com/browse/OCPBUGS-132357): Prevent TLS curve restart loop on FIPS clusters [#257](https://github.com/openshift/cluster-olm-operator/pull/257)
* [OPRUN-4799](https://issues.redhat.com/browse/OPRUN-4799): Update OpenShift and Kubernetes libraries [#260](https://github.com/openshift/cluster-olm-operator/pull/260)
* NO-ISSUE: Remove SingleOwnNamespaceInstallSupport integration [#256](https://github.com/openshift/cluster-olm-operator/pull/256)
* NO-ISSUE: Bump github.com/operator-framework/operator-controller from 1.11.0 to 1.12.0 [#253](https://github.com/openshift/cluster-olm-operator/pull/253)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/b1f8f5a3abe4561d7c1c0a89183b03d735e037bb...f71f8213797cc8cfda3569baae15f387b57a745c)
### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/d68b10d68ee8b06656fc0f101698a4fb4cd8fe34)
* NO-JIRA: bump(openshift/library-go): to get KMS GA [#810](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/810)
* NO-JIRA: Update library-go [#809](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/809)
* NO-JIRA: Update library-go [#807](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/807)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/125ba73aa08c5398a20adcad89b63e6cc1245ce7...d68b10d68ee8b06656fc0f101698a4fb4cd8fe34)
### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/81e222007c2ceec48a908877eb71fb135a2c2453)
* [OCPSTRAT-3618](https://issues.redhat.com/browse/OCPSTRAT-3618): bump k8s 1.37 [#211](https://github.com/openshift/cluster-policy-controller/pull/211)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/c9e9a348260921c9e788e33a51e904502cbe2d13...81e222007c2ceec48a908877eb71fb135a2c2453)
### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/cb826726d77224d5e8d1fd9026d25525c6982a55)
* NO-ISSUE: Restrict samples operator access to the global pull-secret [#726](https://github.com/openshift/cluster-samples-operator/pull/726)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/2c667f703af8eaec6a76c91263ba9c78c60675ab...cb826726d77224d5e8d1fd9026d25525c6982a55)
### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/9f3cf47a210cb1366b8317a16fa0fd75daf51432)
* [OCPBUGS-104847](https://issues.redhat.com/browse/OCPBUGS-104847): Remove SELinuxMountGAReadiness patches [#759](https://github.com/openshift/cluster-storage-operator/pull/759)
* [STOR-3172](https://issues.redhat.com/browse/STOR-3172): Add TLS group support to CSO [#758](https://github.com/openshift/cluster-storage-operator/pull/758)
* [STOR-3176](https://issues.redhat.com/browse/STOR-3176): Add featuregates and clusterversions permissions to ClusterRoles [#756](https://github.com/openshift/cluster-storage-operator/pull/756)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/b229e74889130654d9f8da310af9ad3bacc8edda...9f3cf47a210cb1366b8317a16fa0fd75daf51432)
### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/1eeb46148a6eabdee90ccd3dabf26646476b0fcf)
* NO-JIRA: test/util: wait for the update service to serve before returning [#1498](https://github.com/openshift/cluster-version-operator/pull/1498)
* [OTA-2144](https://issues.redhat.com/browse/OTA-2144): TLSGroups support on the /metrics endpoint [#1495](https://github.com/openshift/cluster-version-operator/pull/1495)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/ef627b49dc6fb986260f78bb79bf8a4e547657af...1eeb46148a6eabdee90ccd3dabf26646476b0fcf)
### [console](https://github.com/openshift/console/tree/e6238e162e402b713f4bc154ca87e293b3b06c1f)
* [OCPBUGS-128928](https://issues.redhat.com/browse/OCPBUGS-128928): Preserve ~new route when switching projects [#17349](https://github.com/openshift/console/pull/17349)
* [OCPBUGS-132338](https://issues.redhat.com/browse/OCPBUGS-132338): Preserve revealed Secret values across page rerenders [#17412](https://github.com/openshift/console/pull/17412)
* [CONSOLE-5568](https://issues.redhat.com/browse/CONSOLE-5568): migrate to oxlint [#17425](https://github.com/openshift/console/pull/17425)
* [CONSOLE-5479](https://issues.redhat.com/browse/CONSOLE-5479): UI and backend for OLMv0-to-OLMv1 migration [#17377](https://github.com/openshift/console/pull/17377)
* [OCPBUGS-132933](https://issues.redhat.com/browse/OCPBUGS-132933): Isolate polling test plugin mocks [#17421](https://github.com/openshift/console/pull/17421)
* NO-JIRA: migrate to ESM only + migrate to oxfmt [#17408](https://github.com/openshift/console/pull/17408)
* [OCPBUGS-132163](https://issues.redhat.com/browse/OCPBUGS-132163): Use "Technology Preview" in preview badge labels [#17396](https://github.com/openshift/console/pull/17396)
* [CONSOLE-5477](https://issues.redhat.com/browse/CONSOLE-5477): Support TLS group preferences [#17371](https://github.com/openshift/console/pull/17371)
* [CONSOLE-5567](https://issues.redhat.com/browse/CONSOLE-5567): Increase size of annotation, label and taint edit modals [#17398](https://github.com/openshift/console/pull/17398)
* [OCPBUGS-114708](https://issues.redhat.com/browse/OCPBUGS-114708): Remove early "analytics.page()" on Segment init [#17178](https://github.com/openshift/console/pull/17178)
* [OCPBUGS-132032](https://issues.redhat.com/browse/OCPBUGS-132032): Restore ConfigMap and BuildConfig form view edit actions [#17397](https://github.com/openshift/console/pull/17397)
* [CONSOLE-4824](https://issues.redhat.com/browse/CONSOLE-4824): migrate remaining jsx/js to tsx/ts [#17391](https://github.com/openshift/console/pull/17391)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/de8cdf6461735171f2384af93eb44a0606f25ec4...e6238e162e402b713f4bc154ca87e293b3b06c1f)
### [console-operator](https://github.com/openshift/console-operator/tree/e0cad3633cd4737403a37dd7efe46a7830a5de32)
* [CONSOLE-5477](https://issues.redhat.com/browse/CONSOLE-5477): Support TLS group preferences [#1240](https://github.com/openshift/console-operator/pull/1240)
* [Full changelog](https://github.com/openshift/console-operator/compare/4105b421407c8f7c1cff49f3221235861d39dec2...e0cad3633cd4737403a37dd7efe46a7830a5de32)
### [coredns](https://github.com/openshift/coredns/tree/ad7aaecd3e975727735ee8245d3917ee870cc50c)
* [OCPBUGS-125770](https://issues.redhat.com/browse/OCPBUGS-125770): validate DNS requests before unpacking [#217](https://github.com/openshift/coredns/pull/217)
* [Full changelog](https://github.com/openshift/coredns/compare/83aefed36b4dd6eb800885e56af7cf97fc9db8d7...ad7aaecd3e975727735ee8245d3917ee870cc50c)
### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/049e93b693fd5ea7cbcddade0d4361f6d5125c0b)
* [OSASINFRA-4483](https://issues.redhat.com/browse/OSASINFRA-4483): UPSTREAM: <carry>: Initial Dockerfile for osbrick-sidecar [#447](https://github.com/openshift/cloud-provider-openstack/pull/447)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/ce2ac54d011d7292c44828f1603490d7593bd73d...049e93b693fd5ea7cbcddade0d4361f6d5125c0b)
### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/c01245ea625e058d6ee032fb2b3a2595a7ad499c)
* [STOR-3085](https://issues.redhat.com/browse/STOR-3085): Rebase to upstream v2.3.0 for OCP 5.1 [#217](https://github.com/openshift/csi-external-resizer/pull/217)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/14aa7028f485e95c800bb7ffbf9b66a2bf75ceaf...c01245ea625e058d6ee032fb2b3a2595a7ad499c)
### [csi-external-snapshotter, csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter/tree/a570de6a368dab9532e540d7f1ce10c3b03c6d1a)
* [STOR-3085](https://issues.redhat.com/browse/STOR-3085): Rebase to upstream v8.7.0 for OCP 5.1 [#260](https://github.com/openshift/csi-external-snapshotter/pull/260)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/a019d1a9d9e1d26ffd0b2e0d911733180fa608b2...a570de6a368dab9532e540d7f1ce10c3b03c6d1a)
### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/be6ff291d9015cd0a96f54c152b18864906b5a6b)
* [STOR-3085](https://issues.redhat.com/browse/STOR-3085): Rebase to upstream v2.20.0 for OCP 5.1 [#105](https://github.com/openshift/csi-livenessprobe/pull/105)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/4d22ba873038484dcd7fa67553d00ae01d20428a...be6ff291d9015cd0a96f54c152b18864906b5a6b)
### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/de3c4217dca58af8b0b267c378eccae45e9eeaf5)
* [STOR-3085](https://issues.redhat.com/browse/STOR-3085): Rebase to upstream v2.18.0 for OCP 5.1 [#110](https://github.com/openshift/csi-node-driver-registrar/pull/110)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/5766960d82ffb9ef84d15e903ae57d0a6781ef11...de3c4217dca58af8b0b267c378eccae45e9eeaf5)
### [etcd, installer-etcd-artifacts](https://github.com/openshift/etcd/tree/73444cb5a323cd994151234e2eed701f8647b0ea)
* NO-JIRA: allow 60s for snapshot member readiness [#424](https://github.com/openshift/etcd/pull/424)
* NO-JIRA: allow 180s for retained client reconnect [#423](https://github.com/openshift/etcd/pull/423)
* [Full changelog](https://github.com/openshift/etcd/compare/8480451b19d39e15760c32e773521a295920eaa9...73444cb5a323cd994151234e2eed701f8647b0ea)
### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/05099ac2932974114fd5a30cb172d888505c8056)
* Revert "OCPCLOUD-3677: Merge https://github.com/kubernetes/cloud-provider-gcp/tree/master (05550ad) into main" [#175](https://github.com/openshift/cloud-provider-gcp/pull/175)
* [OCPBUGS-122200](https://issues.redhat.com/browse/OCPBUGS-122200), [OCPCLOUD-3677](https://issues.redhat.com/browse/OCPCLOUD-3677): Merge https://github.com/kubernetes/cloud-provider-gcp/tree/master (05550ad) into main [#133](https://github.com/openshift/cloud-provider-gcp/pull/133)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/51c326465b3160124b8097953b42e44f1056da5a...05099ac2932974114fd5a30cb172d888505c8056)
### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/6c9aa976f3fef0be78383fd45ef01262cdce673a)
* [OCPCLOUD-3662](https://issues.redhat.com/browse/OCPCLOUD-3662): bump Kubernetes dependencies to 1.37 [#197](https://github.com/openshift/machine-api-provider-gcp/pull/197)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/64956d7e3314b1b5922e6a1f384846769341bba3...6c9aa976f3fef0be78383fd45ef01262cdce673a)
### [haproxy-router, haproxy-router-haproxy32](https://github.com/openshift/router/tree/12074b829811275700c93259973041f286beb0fe)
* [ART-24596](https://issues.redhat.com/browse/ART-24596): Update openshift/origin to v1.6.2 in tests-extension [#868](https://github.com/openshift/router/pull/868)
* [OCPBUGS-77056](https://issues.redhat.com/browse/OCPBUGS-77056): External certificate routes admit slowly at scale [#863](https://github.com/openshift/router/pull/863)
* [NE-2912](https://issues.redhat.com/browse/NE-2912): Add HAProxy 3.4 standalone image [#853](https://github.com/openshift/router/pull/853)
* [NE-2126](https://issues.redhat.com/browse/NE-2126): Ship tests-ext binary as raw gzip instead of tar.gz [#867](https://github.com/openshift/router/pull/867)
* [Full changelog](https://github.com/openshift/router/compare/237097c7a3fedcd6c3218d7b7d1c580f401f34a6...12074b829811275700c93259973041f286beb0fe)
### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/8e30e543958ab5d408a337a5957663e5fd9aea12)
* [OCPBUGS-129682](https://issues.redhat.com/browse/OCPBUGS-129682): Repair SingleReplica test exclusions [#2815](https://github.com/openshift/kubernetes/pull/2815)
* [Full changelog](https://github.com/openshift/kubernetes/compare/92e1a4b8eea32cd95383e29e7cfafc8d562917e4...8e30e543958ab5d408a337a5957663e5fd9aea12)
### [hypershift](https://github.com/openshift/hypershift/tree/509e9061022ee60b2924f6e19f6485adccf62071)
* [CONSOLE-5449](https://issues.redhat.com/browse/CONSOLE-5449): Preserve component route labels in HostedCluster and HostedControlPlane CRDs [#9815](https://github.com/openshift/hypershift/pull/9815)
* [OCPBUGS-127549](https://issues.redhat.com/browse/OCPBUGS-127549): gate ARO HCP router on backend service ClusterIPs being assigned [#9775](https://github.com/openshift/hypershift/pull/9775)
* [OCPBUGS-133784](https://issues.redhat.com/browse/OCPBUGS-133784): ensure verify-ci runs lint [#10126](https://github.com/openshift/hypershift/pull/10126)
* [OCPBUGS-133387](https://issues.redhat.com/browse/OCPBUGS-133387): Sync OSImageStream e2eutilallowlist scopes [#10124](https://github.com/openshift/hypershift/pull/10124)
* [OCPBUGS-131937](https://issues.redhat.com/browse/OCPBUGS-131937): Fix TLS downgrade restart waits for unsupported operators [#10108](https://github.com/openshift/hypershift/pull/10108)
* [CNTRLPLANE-4557](https://issues.redhat.com/browse/CNTRLPLANE-4557): Make restructure-commits model-neutral and enforce component boundaries [#9853](https://github.com/openshift/hypershift/pull/9853)
* NO-JIRA: chore(deps): update module go.mongodb.org/mongo-driver to v1.17.10 (main) [#10055](https://github.com/openshift/hypershift/pull/10055)
* [OCPBUGS-100035](https://issues.redhat.com/browse/OCPBUGS-100035): Add periodic resync and reduce backoff ceiling for HCCO resources controller [#10013](https://github.com/openshift/hypershift/pull/10013)
* [OCPBUGS-129497](https://issues.redhat.com/browse/OCPBUGS-129497): Align shared root and API dependencies [#9940](https://github.com/openshift/hypershift/pull/9940)
* NO-JIRA: Update e2e v2 AGENTS.md [#10115](https://github.com/openshift/hypershift/pull/10115)
* NO-JIRA: Deny use of v1 e2e package code in new v2 e2e code [#10112](https://github.com/openshift/hypershift/pull/10112)
* [CNTRLPLANE-4843](https://issues.redhat.com/browse/CNTRLPLANE-4843): Update common Konflux task bundles and artifact wiring [#10120](https://github.com/openshift/hypershift/pull/10120)
* [CNTRLPLANE-4447](https://issues.redhat.com/browse/CNTRLPLANE-4447): enable TLSGroupPreferences on TechPreviewNoUpgrade [#10094](https://github.com/openshift/hypershift/pull/10094)
* [GCP-1220](https://issues.redhat.com/browse/GCP-1220): Reconcile GCP LoadBalancer Service resource-label annotations in HCCO [#9644](https://github.com/openshift/hypershift/pull/9644)
* [CNTRLPLANE-4576](https://issues.redhat.com/browse/CNTRLPLANE-4576): Add loadBalancerClass and serviceAnnotations API fields [#9913](https://github.com/openshift/hypershift/pull/9913)
* [CNTRLPLANE-4807](https://issues.redhat.com/browse/CNTRLPLANE-4807): Add KubeletHAProxyRouting FeatureGate [#10043](https://github.com/openshift/hypershift/pull/10043)
* [CNTRLPLANE-4601](https://issues.redhat.com/browse/CNTRLPLANE-4601): Add a GitHub Actions deadcode gate [#10110](https://github.com/openshift/hypershift/pull/10110)
* [CNTRLPLANE-3927](https://issues.redhat.com/browse/CNTRLPLANE-3927): add e2e v2 test for imageContentSources propagation to IDMS and ignition [#10029](https://github.com/openshift/hypershift/pull/10029)
* [OCPBUGS-133387](https://issues.redhat.com/browse/OCPBUGS-133387): fix(e2e) wait for NodePool version in cross-major OSImageStream specs [#10107](https://github.com/openshift/hypershift/pull/10107)
* [OCPBUGS-131838](https://issues.redhat.com/browse/OCPBUGS-131838): pass allocated UID to standalone karpenter-operator [#10024](https://github.com/openshift/hypershift/pull/10024)
* [CNTRLPLANE-4600](https://issues.redhat.com/browse/CNTRLPLANE-4600): Add reporting-only deadcode command and reports [#9902](https://github.com/openshift/hypershift/pull/9902)
* [CNTRLPLANE-4817](https://issues.redhat.com/browse/CNTRLPLANE-4817): Resolve CAPI packages with go list in the provider sync [#10083](https://github.com/openshift/hypershift/pull/10083)
* [OCPBUGS-132920](https://issues.redhat.com/browse/OCPBUGS-132920): sync CAPK install CRDs with openshift CAPK release-5.1 [#10082](https://github.com/openshift/hypershift/pull/10082)
* NO-JIRA: fix(e2e): skip managed DNS e2e below 5.1 [#10063](https://github.com/openshift/hypershift/pull/10063)
* NO-JIRA: bump google.golang.org/grpc to 1.83.2 in tools [#10095](https://github.com/openshift/hypershift/pull/10095)
* [CNTRLPLANE-3632](https://issues.redhat.com/browse/CNTRLPLANE-3632): Predictable NodePool rollout control [#9818](https://github.com/openshift/hypershift/pull/9818)
* [OCPBUGS-84499](https://issues.redhat.com/browse/OCPBUGS-84499): Etcd recovery on unreachable nodes [#9992](https://github.com/openshift/hypershift/pull/9992)
* NO-JIRA: chore: fixup karpenter reviewers and approvers in OWNERS [#10023](https://github.com/openshift/hypershift/pull/10023)
* NO-JIRA: Fix kube-storage-version-migrator removal assertion [#10097](https://github.com/openshift/hypershift/pull/10097)
* [CNTRLPLANE-2042](https://issues.redhat.com/browse/CNTRLPLANE-2042): test(e2e): add cross-cluster backup restore coverage for AWS [#9979](https://github.com/openshift/hypershift/pull/9979)
* NO-JIRA: ci(deps): bump actions/create-github-app-token from 1.12.0 to 3.3.0 [#10087](https://github.com/openshift/hypershift/pull/10087)
* [OCPBUGS-132561](https://issues.redhat.com/browse/OCPBUGS-132561): Fix Azure role-assignment cleanup in CI [#10061](https://github.com/openshift/hypershift/pull/10061)
* [CNTRLPLANE-4662](https://issues.redhat.com/browse/CNTRLPLANE-4662): docs(aws): add managed DNS how-to [#9943](https://github.com/openshift/hypershift/pull/9943)
* [OCPBUGS-132796](https://issues.redhat.com/browse/OCPBUGS-132796): Filter nonstandard AZ subnets from AWS endpoints [#10080](https://github.com/openshift/hypershift/pull/10080)
* [OCPCLOUD-3704](https://issues.redhat.com/browse/OCPCLOUD-3704): enable CRD compatibility requirements for preview clusters [#9871](https://github.com/openshift/hypershift/pull/9871)
* [OCPBUGS-130965](https://issues.redhat.com/browse/OCPBUGS-130965): CVO upgrades stuck in Upgradeable=False (ResourceDeletesInProgress) [#10037](https://github.com/openshift/hypershift/pull/10037)
* NO-JIRA: build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.44.0 to 1.45.0 [#9661](https://github.com/openshift/hypershift/pull/9661)
* [GCP-1221](https://issues.redhat.com/browse/GCP-1221): Manage GCP worker firewall rules in CPO [#9640](https://github.com/openshift/hypershift/pull/9640)
* [CNTRLPLANE-4193](https://issues.redhat.com/browse/CNTRLPLANE-4193): feat: add initialKMSKeyARN for StorageClass KMS encryption [#9147](https://github.com/openshift/hypershift/pull/9147)
* [AUTOSCALE-944](https://issues.redhat.com/browse/AUTOSCALE-944): fix(karpenter): defer HCP lifecycle to standalone operator [#9930](https://github.com/openshift/hypershift/pull/9930)
* [CNTRLPLANE-3999](https://issues.redhat.com/browse/CNTRLPLANE-3999): Replace e2e v2 Platform.DeleteArgs with declarative ClusterSpec [#10033](https://github.com/openshift/hypershift/pull/10033)
* NO-JIRA: build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.37.0 to 1.45.0 in /hack/tools [#9656](https://github.com/openshift/hypershift/pull/9656)
* [OCPBUGS-86668](https://issues.redhat.com/browse/OCPBUGS-86668): fix CA rotation race in ReconcileTotalClientCA [#8618](https://github.com/openshift/hypershift/pull/8618)
* [GCP-1211](https://issues.redhat.com/browse/GCP-1211): Set PSC and load balancer resource labels [#9612](https://github.com/openshift/hypershift/pull/9612)
* [OCPBUGS-85079](https://issues.redhat.com/browse/OCPBUGS-85079): Fix global pull-secret label sync on HO upgrade [#8650](https://github.com/openshift/hypershift/pull/8650)
* [OCPBUGS-128637](https://issues.redhat.com/browse/OCPBUGS-128637): preserve role credentials for shared service accounts [#9828](https://github.com/openshift/hypershift/pull/9828)
* NO-JIRA: chore(deps): update cloudflare/wrangler-action action to v4.1.3 (main) [#9907](https://github.com/openshift/hypershift/pull/9907)
* [CNTRLPLANE-3610](https://issues.redhat.com/browse/CNTRLPLANE-3610): Decouple CAPI provider Go module dependencies [#8704](https://github.com/openshift/hypershift/pull/8704)
* [CNTRLPLANE-4559](https://issues.redhat.com/browse/CNTRLPLANE-4559): Add OpenShift Kubernetes 1.37.1 envtest coverage [#10039](https://github.com/openshift/hypershift/pull/10039)
* [OCPKUEUE-921](https://issues.redhat.com/browse/OCPKUEUE-921): feat: enable was in hypershift [#10034](https://github.com/openshift/hypershift/pull/10034)
* [CNTRLPLANE-4642](https://issues.redhat.com/browse/CNTRLPLANE-4642): Capture Azure E2E diagnostics [#9915](https://github.com/openshift/hypershift/pull/9915)
* NO-JIRA: chore(deps): update actions/upload-artifact action to v7.0.2 (main) [#9969](https://github.com/openshift/hypershift/pull/9969)
* [AUTOSCALE-1068](https://issues.redhat.com/browse/AUTOSCALE-1068): docs for AutoNode/Karpenter on self-managed azure [#10009](https://github.com/openshift/hypershift/pull/10009)
* [CNTRLPLANE-4167](https://issues.redhat.com/browse/CNTRLPLANE-4167): test: port scale-from-zero autoscaling test to v2 framework [#9411](https://github.com/openshift/hypershift/pull/9411)
* ci: sync release branches to community fork [#8220](https://github.com/openshift/hypershift/pull/8220)
* [OCPBUGS-74083](https://issues.redhat.com/browse/OCPBUGS-74083): encryption condition propagation [#10008](https://github.com/openshift/hypershift/pull/10008)
* [OCPBUGS-131937](https://issues.redhat.com/browse/OCPBUGS-131937): test(e2e-v2): skip control-plane-pki-operator TLS config tests on older operators [#10032](https://github.com/openshift/hypershift/pull/10032)
* [NE-2913](https://issues.redhat.com/browse/NE-2913): remove HAProxy 2.8 reference [#9984](https://github.com/openshift/hypershift/pull/9984)
* [CNTRLPLANE-3999](https://issues.redhat.com/browse/CNTRLPLANE-3999): remove Platform.CreateArgs to make ClusterSpecs more declarative [#10005](https://github.com/openshift/hypershift/pull/10005)
* [OCPBUGS-123171](https://issues.redhat.com/browse/OCPBUGS-123171): docs(capi-image-overrides): Add new override for versions below 4.19 [#9942](https://github.com/openshift/hypershift/pull/9942)
* [CNTRLPLANE-4160](https://issues.redhat.com/browse/CNTRLPLANE-4160), [CNTRLPLANE-4161](https://issues.redhat.com/browse/CNTRLPLANE-4161): use newer CPO for azure 4.20/4.21 overrides [#9967](https://github.com/openshift/hypershift/pull/9967)
* NO-JIRA: Document proportionate pre-PR validation [#10015](https://github.com/openshift/hypershift/pull/10015)
* NO-JIRA: clarify NodePool status.osImageStream vs MCO OSImageStream status [#10019](https://github.com/openshift/hypershift/pull/10019)
* [CNTRLPLANE-3201](https://issues.redhat.com/browse/CNTRLPLANE-3201): test(backup-restore): wait for manual backup before scheduling [#9961](https://github.com/openshift/hypershift/pull/9961)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/hypershift/compare/253c3f5c790d08668d4aa365688e88a0ab950af8...509e9061022ee60b2924f6e19f6485adccf62071)
### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/acf2cb50d53867796344a516b3aaabfcd7f2630d)
* [OCPCLOUD-3678](https://issues.redhat.com/browse/OCPCLOUD-3678): Merge https://github.com/IBM-Cloud/cloud-provider-ibm:01595b6d497cc6ec6f807bd7136ac43d147ea042 (01595b6) into main [#89](https://github.com/openshift/cloud-provider-ibm/pull/89)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/11bc35dd6fd5163259023a6f1dfcc59ce813ab5f...acf2cb50d53867796344a516b3aaabfcd7f2630d)
### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/5b19ea36429837bc3e68204b3219776ed2c43dff)
* [OCPCLOUD-3666](https://issues.redhat.com/browse/OCPCLOUD-3666): bump Kubernetes dependencies to 1.37 [#117](https://github.com/openshift/machine-api-provider-ibmcloud/pull/117)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/c2439897d64ade66b2159b48dc7ae68712b98400...5b19ea36429837bc3e68204b3219776ed2c43dff)
### [insights-operator](https://github.com/openshift/insights-operator/tree/8bdb4812c7dbca93dd11a2bc5fe0e7d875f070ee)
* [OCPBUGS-132789](https://issues.redhat.com/browse/OCPBUGS-132789): Gate ingress secret bindings on Ingress capability [#1403](https://github.com/openshift/insights-operator/pull/1403)
* [CCXDEV-16668](https://issues.redhat.com/browse/CCXDEV-16668): kserve gather servingRuntimes and clusterServingRuntimes CRs [#1385](https://github.com/openshift/insights-operator/pull/1385)
* [OCPBUGS-132226](https://issues.redhat.com/browse/OCPBUGS-132226): add CVO annotations to secret gatherer RBAC [#1397](https://github.com/openshift/insights-operator/pull/1397)
* NO-JIRA: Restructure scope of gather SA to specific namespaces (from 5.0) [#1392](https://github.com/openshift/insights-operator/pull/1392)
* [Full changelog](https://github.com/openshift/insights-operator/compare/4c9b958a938d50286f23748a2cac692006bd94a6...8bdb4812c7dbca93dd11a2bc5fe0e7d875f070ee)
### [ironic](https://github.com/openshift/ironic-image/tree/8573ccb2896d2d7e25370d4efb38295504f9307c)
* NO-ISSUE: Improve Slack notification for existing requirements update PRs [#940](https://github.com/openshift/ironic-image/pull/940)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#939](https://github.com/openshift/ironic-image/pull/939)
* [OCPBUGS-130802](https://issues.redhat.com/browse/OCPBUGS-130802), [OCPBUGS-130834](https://issues.redhat.com/browse/OCPBUGS-130834): Bump urllib3 to 2.8.0 [#938](https://github.com/openshift/ironic-image/pull/938)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#933](https://github.com/openshift/ironic-image/pull/933)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#931](https://github.com/openshift/ironic-image/pull/931)
* [Full changelog](https://github.com/openshift/ironic-image/compare/96b9798380748f08e36d190af8cb6ef9672b9c0a...8573ccb2896d2d7e25370d4efb38295504f9307c)
### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/be4a5b903fd8dcc4f2b4fc67ef96514a710a8f3c)
* NO-ISSUE: Improve Slack notification for existing requirements update PRs [#329](https://github.com/openshift/ironic-agent-image/pull/329)
* NO-ISSUE: Update requirements.cachito with latest ironic-python-agent [#322](https://github.com/openshift/ironic-agent-image/pull/322)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/283fb6c94c73cb621b892e1f14f2e2d851ccc7cf...be4a5b903fd8dcc4f2b4fc67ef96514a710a8f3c)
### [karpenter-operator](https://github.com/openshift/karpenter-operator/tree/1a34f515b6ddb607839a6eb1583f7cebe1a9c6f0)
* [OCPBUGS-133401](https://issues.redhat.com/browse/OCPBUGS-133401): attach HCP pull credentials to operand service account [#68](https://github.com/openshift/karpenter-operator/pull/68)
* [AUTOSCALE-166](https://issues.redhat.com/browse/AUTOSCALE-166): improve core karpenter e2es more [#67](https://github.com/openshift/karpenter-operator/pull/67)
* [AUTOSCALE-166](https://issues.redhat.com/browse/AUTOSCALE-166): Scope core regression to performance tests [#63](https://github.com/openshift/karpenter-operator/pull/63)
* [OCPBUGS-131838](https://issues.redhat.com/browse/OCPBUGS-131838): support karpenter operand UID without scc [#61](https://github.com/openshift/karpenter-operator/pull/61)
* [AUTOSCALE-166](https://issues.redhat.com/browse/AUTOSCALE-166): fixup karpenter core e2e script [#64](https://github.com/openshift/karpenter-operator/pull/64)
* NO-JIRA: chore: allow karpenter operand images to be overriden [#58](https://github.com/openshift/karpenter-operator/pull/58)
* [AUTOSCALE-944](https://issues.redhat.com/browse/AUTOSCALE-944): feat: migrate HostedControlPlane lifecycle controller from HyperShift [#52](https://github.com/openshift/karpenter-operator/pull/52)
* [Full changelog](https://github.com/openshift/karpenter-operator/compare/f6687434d78c8b2f96d86e0c91f8beb82998608a...1a34f515b6ddb607839a6eb1583f7cebe1a9c6f0)
### [keepalived-ipfailover](https://github.com/openshift/images/tree/8dedb38a6bd26e7cb0818768a4b077b01c035927)
* [NE-2126](https://issues.redhat.com/browse/NE-2126): Materialize ipfailover testdata lazily into a temp directory [#255](https://github.com/openshift/images/pull/255)
* [Full changelog](https://github.com/openshift/images/compare/8ca25e40158ebc16da94bcec6a4f89c980cb3c73...8dedb38a6bd26e7cb0818768a4b077b01c035927)
### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/4b1124a8cfcb65556fe44fac4150c0e86640bb0b)
* NO-ISSUE: Fix CVE-2026-33814 - bump golang.org/x/net to sustaining fork v0.50.0-sec.4 [#104](https://github.com/openshift/cloud-provider-kubevirt/pull/104)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/69b587936de73e3d9c6479b7b39899b6a45e90aa...4b1124a8cfcb65556fe44fac4150c0e86640bb0b)
### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/85737e90631afcfe5a504473bd80e0a1b1297a9e)
* [OCPBUGS-114428](https://issues.redhat.com/browse/OCPBUGS-114428): Bump Go builder to 1.26 [#123](https://github.com/openshift/kubevirt-csi-driver/pull/123)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/5dc8df62eab9bd1539ad03ec776fad08df62ab58...85737e90631afcfe5a504473bd80e0a1b1297a9e)
### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/6c82e841709eaef480988a6bf56f3d92a39a0928)
* [CNF-26431](https://issues.redhat.com/browse/CNF-26431): Allow ironic-networking JSON-RPC port in NetworkPolicy [#1530](https://github.com/openshift/machine-api-operator/pull/1530)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/b86410145e827fed51b4ed4ec7d01cf6ed4f5623...6c82e841709eaef480988a6bf56f3d92a39a0928)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/734b76c3b4457ce89f2ad3995f39a2e45944e98b)
* [OCPBUGS-126565](https://issues.redhat.com/browse/OCPBUGS-126565): OCPBUGS-127024: OCPBUGS-127025: Enable `readOnlyRootFilesystem: true` for `machine-os-builder` and `create-digest-configmap` containers [#6640](https://github.com/openshift/machine-config-operator/pull/6640)
* [OCPBUGS-132309](https://issues.redhat.com/browse/OCPBUGS-132309): Fix MCN stale current config edge case [#6676](https://github.com/openshift/machine-config-operator/pull/6676)
* [OCPNODE-4602](https://issues.redhat.com/browse/OCPNODE-4602): implement {system,container}GomaxprocsBehavior field [#6332](https://github.com/openshift/machine-config-operator/pull/6332)
* [OCPBUGS-132754](https://issues.redhat.com/browse/OCPBUGS-132754): Handle restrictive policies for layered OS updates [#6670](https://github.com/openshift/machine-config-operator/pull/6670)
* [OCPBUGS-126565](https://issues.redhat.com/browse/OCPBUGS-126565): OCPBUGS-127021: Enable readOnlyRootFilesystem: true for `machine-config-controller` container [#6573](https://github.com/openshift/machine-config-operator/pull/6573)
* [OPNET-818](https://issues.redhat.com/browse/OPNET-818): on-prem: BGP VIP static pods follow platform pod conventions [#6673](https://github.com/openshift/machine-config-operator/pull/6673)
* [MCO-2622](https://issues.redhat.com/browse/MCO-2622): Update MCO dependencies to Kubernetes 1.37 [#6661](https://github.com/openshift/machine-config-operator/pull/6661)
* [OPNET-782](https://issues.redhat.com/browse/OPNET-782): on-prem: give the frr-k8s static pod reloader writable /tmp and /var/log/frr [#6643](https://github.com/openshift/machine-config-operator/pull/6643)
* [OCPBUGS-132308](https://issues.redhat.com/browse/OCPBUGS-132308): stabilize test 66436 - disable weak SSH cipher suites [#6666](https://github.com/openshift/machine-config-operator/pull/6666)
* [OCPBUGS-131830](https://issues.redhat.com/browse/OCPBUGS-131830): stabilise TestAPIServerCiphers unit test [#6659](https://github.com/openshift/machine-config-operator/pull/6659)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/328a5db3946d1b024116cef74154ec70f23d5fb3...734b76c3b4457ce89f2ad3995f39a2e45944e98b)
### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/54cd780b782125005f176129166792c9e1a1f0b6)
* [OU-1593](https://issues.redhat.com/browse/OU-1593): Upgrade perses [#1366](https://github.com/openshift/monitoring-plugin/pull/1366)
* [OU-1595](https://issues.redhat.com/browse/OU-1595): merge logging-view into the monitoring console plugin [#1360](https://github.com/openshift/monitoring-plugin/pull/1360)
* [OU-1428](https://issues.redhat.com/browse/OU-1428): add missing alert list page tooltips [#1387](https://github.com/openshift/monitoring-plugin/pull/1387)
* [OU-1428](https://issues.redhat.com/browse/OU-1428): alert management list page [#1345](https://github.com/openshift/monitoring-plugin/pull/1345)
* [OCPBUGS-131104](https://issues.redhat.com/browse/OCPBUGS-131104), [OCPBUGS-131955](https://issues.redhat.com/browse/OCPBUGS-131955), [OCPBUGS-131960](https://issues.redhat.com/browse/OCPBUGS-131960), [OCPBUGS-131970](https://issues.redhat.com/browse/OCPBUGS-131970), [OCPBUGS-131984](https://issues.redhat.com/browse/OCPBUGS-131984), [OCPBUGS-132028](https://issues.redhat.com/browse/OCPBUGS-132028): Upgrade vulnerable dependencies [#1328](https://github.com/openshift/monitoring-plugin/pull/1328)
* [OCPBUGS-132207](https://issues.redhat.com/browse/OCPBUGS-132207): fix metrics series color squares [#1368](https://github.com/openshift/monitoring-plugin/pull/1368)
* [OU-1488](https://issues.redhat.com/browse/OU-1488): sanitize linkified URLs in alert annotations [#1374](https://github.com/openshift/monitoring-plugin/pull/1374)
* [OU-1428](https://issues.redhat.com/browse/OU-1428): fix prometheus rules api compatibility by removing omitempty's [#1373](https://github.com/openshift/monitoring-plugin/pull/1373)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/a4c94901209a8f37718a78a69dffc2de8cfe0319...54cd780b782125005f176129166792c9e1a1f0b6)
### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/3d6d6699aa06bb3b24d35620fb17b5b705ed0bb8)
* [CORENET-6320](https://issues.redhat.com/browse/CORENET-6320): fix(deployment): use read-only root filesystems [#138](https://github.com/openshift/multus-admission-controller/pull/138)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/38e6aaf2312bd7b330b36c30404f3a0f25c1bda0...3d6d6699aa06bb3b24d35620fb17b5b705ed0bb8)
### [network-tools](https://github.com/openshift/network-tools/tree/47d3d41a66947a012fbe6370b91470f7b19ae8bf)
* [CORENET-7641](https://issues.redhat.com/browse/CORENET-7641), [CORENET-7647](https://issues.redhat.com/browse/CORENET-7647): Add AGENTS.md and coderabbit config [#192](https://github.com/openshift/network-tools/pull/192)
* [Full changelog](https://github.com/openshift/network-tools/compare/03ae0e816cbf7608e6a326ac71a0a00619941e08...47d3d41a66947a012fbe6370b91470f7b19ae8bf)
### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/4acb35d74877b6d9b6a3a0aa08e35a98d5d5c9d8)
* maintenance: bump the npm group with 32 updates [#635](https://github.com/openshift/networking-console-plugin/pull/635)
* [OCPNETUI-178](https://issues.redhat.com/browse/OCPNETUI-178): migrate to @kubevirt-ui-ext/kubevirt-api [#626](https://github.com/openshift/networking-console-plugin/pull/626)
* [OCPNETUI-137](https://issues.redhat.com/browse/OCPNETUI-137): E2E tests for the topology view toolbar [#632](https://github.com/openshift/networking-console-plugin/pull/632)
* [OCPNETUI-56](https://issues.redhat.com/browse/OCPNETUI-56): Hot-cluster CI infrastructure and test fixes [#522](https://github.com/openshift/networking-console-plugin/pull/522)
* maintenance: bump the npm group with 33 updates [#619](https://github.com/openshift/networking-console-plugin/pull/619)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/8504c88cc43720f26fbc22855e32664bb8a94b5a...4acb35d74877b6d9b6a3a0aa08e35a98d5d5c9d8)
### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/62f4cab314a62b41ddf45e183c5137db9510cac5)
* [OCPCLOUD-3664](https://issues.redhat.com/browse/OCPCLOUD-3664): bump Kubernetes dependencies to 1.37 [#142](https://github.com/openshift/machine-api-provider-nutanix/pull/142)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/249b7c8edfca8f25413dc76bc5a216fbe12a9ab1...62f4cab314a62b41ddf45e183c5137db9510cac5)
### [oauth-server](https://github.com/openshift/oauth-server/tree/c7275e7430212511532b678d69f53add19d2708b)
* [CNTRLPLANE-4583](https://issues.redhat.com/browse/CNTRLPLANE-4583): K8s 1.37 rebase [#290](https://github.com/openshift/oauth-server/pull/290)
* [OCPBUGS-130780](https://issues.redhat.com/browse/OCPBUGS-130780): Remove ancient deprecated header [#196](https://github.com/openshift/oauth-server/pull/196)
* [Full changelog](https://github.com/openshift/oauth-server/compare/0a5bbfdd3e9dd93f46133b92841087995095e09a...c7275e7430212511532b678d69f53add19d2708b)
### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/c5ea3997b25a159586c9e439260403ad2f067b09)
* [OPRUN-4791](https://issues.redhat.com/browse/OPRUN-4791): Synchronize From Upstream Repositories [#838](https://github.com/openshift/operator-framework-operator-controller/pull/838)
* NO-ISSUE: Synchronize From Upstream Repositories [#832](https://github.com/openshift/operator-framework-operator-controller/pull/832)
* NO-ISSUE: Remove NewOLMOwnSingleNamespace OTE tests [#833](https://github.com/openshift/operator-framework-operator-controller/pull/833)
* [OPRUN-4802](https://issues.redhat.com/browse/OPRUN-4802): Synchronize From Upstream Repositories [#836](https://github.com/openshift/operator-framework-operator-controller/pull/836)
* NO-ISSUE: Synchronize From Upstream Repositories [#831](https://github.com/openshift/operator-framework-operator-controller/pull/831)
* [OPRUN-4786](https://issues.redhat.com/browse/OPRUN-4786), [OPRUN-4793](https://issues.redhat.com/browse/OPRUN-4793): Synchronize From Upstream Repositories [#830](https://github.com/openshift/operator-framework-operator-controller/pull/830)
* NO-ISSUE: Synchronize From Upstream Repositories [#829](https://github.com/openshift/operator-framework-operator-controller/pull/829)
* NO-ISSUE: Synchronize From Upstream Repositories [#828](https://github.com/openshift/operator-framework-operator-controller/pull/828)
* NO-ISSUE: Synchronize From Upstream Repositories [#826](https://github.com/openshift/operator-framework-operator-controller/pull/826)
* NO-ISSUE: Synchronize From Upstream Repositories [#823](https://github.com/openshift/operator-framework-operator-controller/pull/823)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/f1fea91342f9317cf0a3c023208849d79030a915...c5ea3997b25a159586c9e439260403ad2f067b09)
### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/2926454df7613f5addfff9c8b274337c014a513b)
* [CNTRLPLANE-4583](https://issues.redhat.com/browse/CNTRLPLANE-4583): K8s 1.37 rebase [#692](https://github.com/openshift/openshift-apiserver/pull/692)
* NO-JIRA: route: Use Network Ingress DNS owner aliases [#690](https://github.com/openshift/openshift-apiserver/pull/690)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/34196aabd9e9a3435bbd7824d1f0b5b409264c23...2926454df7613f5addfff9c8b274337c014a513b)
### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/b6b2c8393370dccb3549cd7485faac290045e258)
* Bump manifests-gen for proxy injection annotation [#452](https://github.com/openshift/cluster-api-provider-openstack/pull/452)
* [OCPBUGS-131040](https://issues.redhat.com/browse/OCPBUGS-131040): Replace golang.org/x/net with openshift-sustaining/net v0.50.0-sec.4 for CVE-2026-33814 [main] [#451](https://github.com/openshift/cluster-api-provider-openstack/pull/451)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/b8ba789ff1dcc2db5e8a9605eec30258ca815485...b6b2c8393370dccb3549cd7485faac290045e258)
### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/58a615b1517504c85786ee08163625bcd6a39a22)
* [OSASINFRA-4544](https://issues.redhat.com/browse/OSASINFRA-4544): Bump CAPO to 0.15 and adopt CAPO API v1beta2 [#193](https://github.com/openshift/machine-api-provider-openstack/pull/193)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/310df6f120009ed6fbb9935556d226ec0b207a1b...58a615b1517504c85786ee08163625bcd6a39a22)
### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/191c02fc8f0c9f6aac2fa780f5bec55a5758524e)
* [OPRUN-4798](https://issues.redhat.com/browse/OPRUN-4798): Synchronize From Upstream Repositories [#1377](https://github.com/openshift/operator-framework-olm/pull/1377)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/14f999ff089a3275d3a144224e871d825461ec3b...191c02fc8f0c9f6aac2fa780f5bec55a5758524e)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/baff7a3fb039209599691f57b01bf46d8c3a2466)
* NO-JIRA: Add arkadeepsen, martinkennelly and pperiyasamy to OWNERS file [#3570](https://github.com/openshift/ovn-kubernetes/pull/3570)
* [CORENET-6746](https://issues.redhat.com/browse/CORENET-6746): Enable EgressIP E2E tests on baremetal, AWS, Azure and GCP for OTE [#3227](https://github.com/openshift/ovn-kubernetes/pull/3227)
* [NO-JIRA: DownStream Merge [10-19-2026] [#3561](https://github.com/openshift/ovn-kubernetes/pull/3561)
* [OCPBUGS-120087](https://issues.redhat.com/browse/OCPBUGS-120087), [OCPBUGS-123556](https://issues.redhat.com/browse/OCPBUGS-123556), [OCPBUGS-128278](https://issues.redhat.com/browse/OCPBUGS-128278): DownStream Merge [10-14-2026] [#3543](https://github.com/openshift/ovn-kubernetes/pull/3543)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/0de3886bb79aa0db71e17ddc42898f934e43359e...baff7a3fb039209599691f57b01bf46d8c3a2466)
### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/c130d47e0bbc870188f1d8995d7ae2fa3f63e337)
* [STOR-3176](https://issues.redhat.com/browse/STOR-3176): Support TLS Groups in operators for kube-rbac-proxy sidecar [#130](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/130)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/ed2182b2c4bf9fb565aeef5dff5de0f7b9a10a33...c130d47e0bbc870188f1d8995d7ae2fa3f63e337)
### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/a663b6d1d212ad36cb7454a5e46b37b84fe35cd7)
* [OCPCLOUD-3723](https://issues.redhat.com/browse/OCPCLOUD-3723): Merge https://github.com/IBM-Cloud/cloud-provider-ibm:01595b6d497cc6ec6f807bd7136ac43d147ea042 (01595b6) into main [#124](https://github.com/openshift/cloud-provider-powervs/pull/124)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/d522403fbb37f32b03048b0aef1544abce127f33...a663b6d1d212ad36cb7454a5e46b37b84fe35cd7)
### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/e4595aacf90d261c6ac17c5a5b53f5947c23ea13)
* [OCPCLOUD-3665](https://issues.redhat.com/browse/OCPCLOUD-3665): bump Kubernetes dependencies to 1.37 [#152](https://github.com/openshift/machine-api-provider-powervs/pull/152)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/8a58cd4c8cd3281461a9ddd6b0ccb0615402fe5d...e4595aacf90d261c6ac17c5a5b53f5947c23ea13)
### [prometheus](https://github.com/openshift/prometheus/tree/5ee7c34ddf532bacdac39ced4c61a54ab1e2cd66)
* NO-ISSUE: [bot] Bump openshift/prometheus to v3.15.1 [#405](https://github.com/openshift/prometheus/pull/405)
* [Full changelog](https://github.com/openshift/prometheus/compare/bd8b9338260ba7cb7c5903abc75e0ea87935df6b...5ee7c34ddf532bacdac39ced4c61a54ab1e2cd66)
### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/db2005715d9dda659f69d5dabf244c9a529d7734)
* NO-ISSUE: [bot] Bump openshift/prometheus-operator to v0.94.2 [#423](https://github.com/openshift/prometheus-operator/pull/423)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/551af86c1cf232f82140e1c50725d8d3c1df746e...db2005715d9dda659f69d5dabf244c9a529d7734)
### [stream-coreos](https://github.com/openshift/os/tree/286a9a3722a2544db7e4af7b7f85392c4bc53cf1)
* [COS-4569](https://issues.redhat.com/browse/COS-4569): Add off-layering directory for Nvidia builds [#1979](https://github.com/openshift/os/pull/1979)
* [Full changelog](https://github.com/openshift/os/compare/62965e8043270be3ae4b4568f6f6475ed1804973...286a9a3722a2544db7e4af7b7f85392c4bc53cf1)
### [tests](https://github.com/openshift/origin/tree/aa8744d51ce62bb0752ec6d1627c8d68876feba0)
* NO-JIRA: Add ANP/BANP Ready-In-Zone status cleanup e2e [#31593](https://github.com/openshift/origin/pull/31593)
* [NE-2922](https://issues.redhat.com/browse/NE-2922): Migrate operator Ingress management-mode tests to v1 [#31807](https://github.com/openshift/origin/pull/31807)
* [OCPBUGS-82190](https://issues.redhat.com/browse/OCPBUGS-82190): Remove etcd preDrain hook strip workaround from node replacement test [#31149](https://github.com/openshift/origin/pull/31149)
* [CNTRLPLANE-2157](https://issues.redhat.com/browse/CNTRLPLANE-2157): Migrate test cases of KubeAPI server functionality to OTE [#31697](https://github.com/openshift/origin/pull/31697)
* NO-JIRA: Improve etcd-scaling job reliability by removing checks that don't apply to control plane replacement [#31797](https://github.com/openshift/origin/pull/31797)
* [OCPBUGS-131892](https://issues.redhat.com/browse/OCPBUGS-131892): add memory thrashing and CPU saturation intervals [#31766](https://github.com/openshift/origin/pull/31766)
* [OCPNODE-4674](https://issues.redhat.com/browse/OCPNODE-4674): Split node long-running tests into openshift/nodes/isolated [#31586](https://github.com/openshift/origin/pull/31586)
* [OCPSTRAT-3618](https://issues.redhat.com/browse/OCPSTRAT-3618): Rebase 1.37 [#31721](https://github.com/openshift/origin/pull/31721)
* [OCPSTRAT-3661](https://issues.redhat.com/browse/OCPSTRAT-3661): Add additional rbac escalation monitortest exceptions [#31802](https://github.com/openshift/origin/pull/31802)
* NO-ISSUE: Automated - Update synthetic test data [#31799](https://github.com/openshift/origin/pull/31799)
* [OCPBUGS-130621](https://issues.redhat.com/browse/OCPBUGS-130621): Isolate LDAP group sync test resources [#31730](https://github.com/openshift/origin/pull/31730)
* [OCPBUGS-132757](https://issues.redhat.com/browse/OCPBUGS-132757): Further optimize oc must gather tests to improve efficiency [#31282](https://github.com/openshift/origin/pull/31282)
* NO-JIRA: Fix CPU partitioning test isolation [#31777](https://github.com/openshift/origin/pull/31777)
* NO-JIRA: add host-network-connection-integrity monitor test [#31785](https://github.com/openshift/origin/pull/31785)
* NO-JIRA: cli: accept both error: invalid/Invalid image name casing in oc run tests [#31791](https://github.com/openshift/origin/pull/31791)
* [OCPBUGS-123644](https://issues.redhat.com/browse/OCPBUGS-123644): Allow etcd probe error due to tls config change [#31789](https://github.com/openshift/origin/pull/31789)
* [OCPBUGS-130780](https://issues.redhat.com/browse/OCPBUGS-130780): stop expecting OAuth X-XSS-Protection header [#31788](https://github.com/openshift/origin/pull/31788)
* [OCPBUGS-126709](https://issues.redhat.com/browse/OCPBUGS-126709): Allow VirtPlatformDependencyMissing alert [#31787](https://github.com/openshift/origin/pull/31787)
* [OCPBUGS-131892](https://issues.redhat.com/browse/OCPBUGS-131892): add singleton-placement-collector monitor test [#31768](https://github.com/openshift/origin/pull/31768)
* NO-JIRA: Support reusable devcontainer setup and optional OpenCode [#31775](https://github.com/openshift/origin/pull/31775)
* [OCPEDGE-3027](https://issues.redhat.com/browse/OCPEDGE-3027): add TNF metrics e2e coverage [#31663](https://github.com/openshift/origin/pull/31663)
* [OCPBUGS-132363](https://issues.redhat.com/browse/OCPBUGS-132363): Allow prometheus test pods to access NTO metrics port [#31781](https://github.com/openshift/origin/pull/31781)
* [TRT-3011](https://issues.redhat.com/browse/TRT-3011): Include noProxy login test in OAuth scaling event exception [#31780](https://github.com/openshift/origin/pull/31780)
* [OCPBUGS-132202](https://issues.redhat.com/browse/OCPBUGS-132202): request only supported IP families in kubevirt VM network data [#31770](https://github.com/openshift/origin/pull/31770)
* [MCO-2626](https://issues.redhat.com/browse/MCO-2626): Remove MCN's node create and delete test [#31771](https://github.com/openshift/origin/pull/31771)
* [CNTRLPLANE-3481](https://issues.redhat.com/browse/CNTRLPLANE-3481): (Testing/Functional) Sourcing claims from multiple sources works as expected [#31712](https://github.com/openshift/origin/pull/31712)
* [NE-2816](https://issues.redhat.com/browse/NE-2816): Apply HAProxy sidecar on router e2e tests [#31589](https://github.com/openshift/origin/pull/31589)
* [OCPBUGS-129429](https://issues.redhat.com/browse/OCPBUGS-129429): Soften PHC offline assertions [#31717](https://github.com/openshift/origin/pull/31717)
* [NETOBSERV-2563](https://issues.redhat.com/browse/NETOBSERV-2563): skip network observability e2e tests in disconnected env [#31767](https://github.com/openshift/origin/pull/31767)
* [TRT-3011](https://issues.redhat.com/browse/TRT-3011): Increase AuthenticationComponentProxy scaling event allowance to 70 [#31754](https://github.com/openshift/origin/pull/31754)
* [Full changelog](https://github.com/openshift/origin/compare/f95ab45b16cf0ae68b7c106c48cd3befd8eaf9fb...aa8744d51ce62bb0752ec6d1627c8d68876feba0)
### [thanos](https://github.com/openshift/thanos/tree/85cd4d9292fc660609a0a3715b8a0b2ba9d09788)
* [OCPBUGS-129064](https://issues.redhat.com/browse/OCPBUGS-129064): Bump github.com/klauspost/compress to fix CVE-2026-63209 [#227](https://github.com/openshift/thanos/pull/227)
* [Full changelog](https://github.com/openshift/thanos/compare/dd928fe046fcdae5bd0566da9a605bdbe171d0f0...85cd4d9292fc660609a0a3715b8a0b2ba9d09788)
### [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator/tree/3ac9e351c97a083eb89ae3f8d695df0af138efc0)
* [STOR-3071](https://issues.redhat.com/browse/STOR-3071): Rebase to v1.8.0 for OCP 5.1 [#22](https://github.com/openshift/volume-data-source-validator/pull/22)
* [Full changelog](https://github.com/openshift/volume-data-source-validator/compare/74c15812928b59e90bc271d0173130d0e7171eb3...3ac9e351c97a083eb89ae3f8d695df0af138efc0)
### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/103974bfb3aa79c162c739af91c40ea5a0660700)
* [OCPCLOUD-3680](https://issues.redhat.com/browse/OCPCLOUD-3680): Merge https://github.com/kubernetes/cloud-provider-vsphere/tree/master (cd8a5b0) into main [#130](https://github.com/openshift/cloud-provider-vsphere/pull/130)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/eb29de194594bad8e5bc572102f1008cb26655a7...103974bfb3aa79c162c739af91c40ea5a0660700)
### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/854d56df29ba8b108d7c397e9cb34df317dca13a)
* [OCPBUGS-132044](https://issues.redhat.com/browse/OCPBUGS-132044): Fix build without boringcrypto [#229](https://github.com/openshift/vmware-vsphere-csi-driver/pull/229)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/ab0b0520dcc2ac95c5e95cc37c31c1a24ebeb9f3...854d56df29ba8b108d7c397e9cb34df317dca13a)
### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/639d1baab138ecd7e3adb12c49fd8c7dd4fa6b28)
* [STOR-3176](https://issues.redhat.com/browse/STOR-3176): Support TLS Groups in operators for kube-rbac-proxy sidecar [#373](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/373)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/408de115e87d22e4a8cff933e53048db9815bf76...639d1baab138ecd7e3adb12c49fd8c7dd4fa6b28)
### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/784de65a26a17fdf276c11401d4659609c3b26af)
* [OCPBUGS-130729](https://issues.redhat.com/browse/OCPBUGS-130729): Skip node checks for non-vSphere nodes [#247](https://github.com/openshift/vsphere-problem-detector/pull/247)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/967ce27a302cbdf5a40647544c73734aa4ffbb56...784de65a26a17fdf276c11401d4659609c3b26af)