# 5.1.0-okd-scos.ec.4
Created: 2026-11-14 04:07:48 +0000 UTC
Image Digest: `sha256:e00cb6ab045ae425290230e2e06628973a7eaa3311f2a70956ecd5e7098f176a`
Promoted from registry.ci.openshift.org/origin/release-scos:5.1.0-0.okd-scos-nightly-2026-11-13-075739
## Changes from 5.1.0-okd-scos.ec.3
### Components
* Kubectl 1.37.1
* Kubernetes upgraded from 1.37.1 to 1.37.2
* Kubernetes Tests 1.36.2
* CentOS Stream CoreOS 10 upgraded from 10.0.20261105-0 to 10.0.20261110-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | OKD
Hypershift | OKD
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: |
| CRDCompatibilityRequirementOperator
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled |
| OLMLifecycleAndCompatibility
(0 tests)| Disabled| Disabled| Disabled| Enabled
(Changed)| Disabled| Enabled| Disabled| Disabled
(Changed) |
### New images
* [haproxy-router-haproxy34](https://github.com/openshift/router) git [3533efa8](https://github.com/openshift/router/commit/3533efa85fcd139f5806906cfd99a0b6748d202f) `sha256:784fb4940ae151433259997545f73316eeb3ff3d0d3c5f6828cb2c6096acb1c5`
### Rebuilt images without code change
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [ca3c3554](https://github.com/openshift/agent-installer-utils/commit/ca3c355488cfd7cc1a194e075361f9cb5dc58522) `sha256:6289973e5981afd30e109419987477f669548030c37babdd51440f7fa65e1afb`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [ee1167a2](https://github.com/openshift/apiserver-network-proxy/commit/ee1167a208561c55485453d9237036c6ab37cb73) `sha256:380a7e52a04f1738ec1ab7ce772773ef8716638b4e8c362a9d4fe5a934afa5c1`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [6951d70c](https://github.com/openshift/cloud-provider-aws/commit/6951d70c670c52b37606fa1fab73f713677135ac) `sha256:535bcc585610bc0d361f465147f480004d28bf4a053af918e0522652f2f93391`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [6c2222d1](https://github.com/openshift/aws-ebs-csi-driver/commit/6c2222d12860b8d48352cf9effec9cda28b1ecbe) `sha256:183a224f3da7f109e01d072fc288e3f41410522ab87bf37a2ead196f8ec057dd`
* [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator) git [f5d54d11](https://github.com/openshift/csi-operator/commit/f5d54d11ed1ba2ee3cefb75a4b2c18b30c6df378) `sha256:ae6d9a8407625051c3e036a3f20eb72f0fb0e025c40cff5b95245c50714ca019`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [009f7e8d](https://github.com/openshift/machine-api-provider-aws/commit/009f7e8d19cd591e40b762d206d07e8cb74dc30e) `sha256:f6261fc099dd59472e820eec03096072581fdf5849e0a3547711920cddd037de`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [0d33a459](https://github.com/openshift/aws-pod-identity-webhook/commit/0d33a4596e2a22d188fe74c4a6497c37c2528c1f) `sha256:9b946bfeb17300779db48d8a8cfab871babcb1a25364921fbb8d8c6684fc7c35`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [c66a9088](https://github.com/openshift/cloud-provider-azure/commit/c66a908826575f8f88e750822fbe9c2afdbdb49a) `sha256:630fe8223149e7cf7b3726f7a77019faa230c52c9596e8170a41482966cd6d4f`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [c66a9088](https://github.com/openshift/cloud-provider-azure/commit/c66a908826575f8f88e750822fbe9c2afdbdb49a) `sha256:6b68f72cc7c61955b23afe83c7038f3efcca0e51ab9974014a693150a758ffe7`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [2428c31d](https://github.com/openshift/cluster-api-provider-azure/commit/2428c31ddd4f7208e971c4911b556fe5d00969db) `sha256:3e7cfb51fa867e03e11fa501b20893e165d300715dc2002610f3957d38067a6a`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [4f38fc62](https://github.com/openshift/azure-disk-csi-driver/commit/4f38fc62865498f7c28dca88f3d28fea0395799a) `sha256:f246af82fe84799ab843d69b93c6596b70da682e18c610d1ddbdeec1fbcc93c5`
* [azure-disk-csi-driver-operator](https://github.com/openshift/csi-operator) git [f5d54d11](https://github.com/openshift/csi-operator/commit/f5d54d11ed1ba2ee3cefb75a4b2c18b30c6df378) `sha256:604bc6beb4b2837c9f36e85e1aa522f903d0c3093933566eb768f15db7398d7b`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [696d3425](https://github.com/openshift/azure-file-csi-driver/commit/696d3425a343a1c8e1db4133f274c00dd01758a6) `sha256:c093a6307bc5044d57364d975c1d4342afc7cf1288eb8cb0ceeacda8862997aa`
* [azure-file-csi-driver-operator](https://github.com/openshift/csi-operator) git [f5d54d11](https://github.com/openshift/csi-operator/commit/f5d54d11ed1ba2ee3cefb75a4b2c18b30c6df378) `sha256:2bd599e7d4f73483d26aba80dad3fe27e6988fb3beb2a476b835511cafcc2e49`
* [azure-karpenter-provider-azure](https://github.com/openshift/Azure-karpenter-provider-azure) git [bc70c724](https://github.com/openshift/Azure-karpenter-provider-azure/commit/bc70c7241ed3f1e05d97a4713c9bfdefc52cf1ee) `sha256:d68bcee87c372cdb198912fc8c2f5fa495868f36f1b87b4b20bc5e9487ac9a56`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [4bbe983b](https://github.com/openshift/azure-kubernetes-kms/commit/4bbe983bea2d88b643fe756b8e013964fa312f0b) `sha256:2fe126969bc6ceec13dfd29c562db446003b7e30b8d804fdba8b694b909d5c94`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [f9f4e377](https://github.com/openshift/machine-api-provider-azure/commit/f9f4e3774358f1794a3fe683b47d5fc65acba5e4) `sha256:8b91fad99f6df837bb0bbe84d771f145d8f0076083a8dc76545b09a92480870f`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [3f118b30](https://github.com/openshift/azure-workload-identity/commit/3f118b30e806a344c9fbc08245fea677a9979cad) `sha256:5c746656724d4de5d64f7756cf58001fd1bef59608d4f0ccd6e536542f05c46a`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [19215586](https://github.com/openshift/cluster-api-provider-metal3/commit/19215586c53d63ea5d9e0f25db97b5ec4647420a) `sha256:290e12d9e084714af84e3f0aea50d858462767e4cc0f90b47481fad8815d13da`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [51bc686e](https://github.com/openshift/cluster-api-provider-baremetal/commit/51bc686e528a7c831f49c0057bed244fa24bbbb0) `sha256:299758296f2a4c6a5be2ec6bb82a9697918825b5696d0c9da34ad665d22e0c43`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [257604b5](https://github.com/openshift/baremetal-operator/commit/257604b553932dbfe490df459db29a42b781f7a5) `sha256:e4951f078349e9e17302d137dd96ded171a97d522e7b55b5c5d9c77004db717d`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [145ef72c](https://github.com/openshift/baremetal-runtimecfg/commit/145ef72c22b7a52aa28134fda17226a44a80935e) `sha256:6b0bac7368151c205392dab3e07cad8ab61bae0d53e7b5760b323dd73faa1113`
* [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [fba3af8b](https://github.com/openshift/cloud-credential-operator/commit/fba3af8b887d60c48d4536c9474c293a819af81a) `sha256:00e9b2e2cc0141f6a7e3332a6e46e277a8ce6613aa58bbbaeb69df373254e82a`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [e4d8b922](https://github.com/openshift/cloud-network-config-controller/commit/e4d8b92203f41156a03ea22f7f5a3360483a054c) `sha256:34925e817e3506f38d20831423bcfa226583072617254680f352c88fc1cf733f`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [49d03c60](https://github.com/openshift/cluster-autoscaler-operator/commit/49d03c60e05e8856dde5a416e01c8512cc824a59) `sha256:27fdf3159ed58eacf5a652b123b7046670ad122a421eab6dd323935382ebca29`
* [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator) git [a8d883df](https://github.com/openshift/cluster-baremetal-operator/commit/a8d883df796397c4e89300ccf15debab1a04924c) `sha256:d3501fb5c30301af39a3257abd31f23ecdac527ec6c7da57e5ff9be0bc270f73`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [641ed6cf](https://github.com/openshift/cluster-bootstrap/commit/641ed6cfb98189f02fe2eb515491ee9de0831136) `sha256:6c00a09aeea4910d2b78271fab29a46a9155fab669e9c01227150f6c1cccbc6b`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [068d09e0](https://github.com/openshift/cluster-api/commit/068d09e0089c3d8cdc12f00fb35d0ed74a3ed50d) `sha256:cc6b015a214f7470b93d47d8cfe67ad76256949bf729d836f1a5937618964ed9`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [fcbafa16](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/fcbafa164970c83caedec65303647a9dee5fc125) `sha256:36635389e660f9d71cd1b470f239ebd02c2829b4cf3b28b3ec0dbb8c30147c37`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [41e9a6cc](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/41e9a6ccf361de2b37c0e91c2e03fb7fec31a634) `sha256:8823fd8fcc4d380afc444d70299aa07d722e095d92c865deb55b0fb46d39c696`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [9a611701](https://github.com/openshift/cluster-dns-operator/commit/9a611701deab3e9945c4c3f828ced0fab5f06616) `sha256:adbd71b2f9532a87649b4104f91ae551df88910687be93bcf391cf8a332b43e4`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [663e936c](https://github.com/openshift/cluster-image-registry-operator/commit/663e936c02e30ea06b83d4e0235d0b82fa5b45b6) `sha256:1043006f0f93748f06c357bf9f5fb9383ab29c5f75b642b348fa1e054a1e6e50`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [cd261779](https://github.com/openshift/cluster-kube-scheduler-operator/commit/cd261779c0461060d8f6f63606b59d146d664561) `sha256:9480cefca6011133330e118bee87658c034f54687f3cb72eb76b07c67f6635f1`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [01da4b3e](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/01da4b3eee18148dddb64b734939ef2b3cb110ef) `sha256:d7ccb5faa973b7827410b1f15af6410afeba96e86fe0d1eed3a063371e89dcd4`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [47811c8f](https://github.com/openshift/cluster-olm-operator/commit/47811c8fb3a280f03468fc41c26190294f9af4fd) `sha256:ebe436c24f3e533d994cbfad6add3e9c9cac0da019672e6c9ca43eb581f013a7`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [81e22200](https://github.com/openshift/cluster-policy-controller/commit/81e222007c2ceec48a908877eb71fb135a2c2453) `sha256:46714b7fbd191c205f0b6b03b06852a2f1c8e9f324f299a6d7c91514dda2c2a4`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [cb826726](https://github.com/openshift/cluster-samples-operator/commit/cb826726d77224d5e8d1fd9026d25525c6982a55) `sha256:b85d711ed69e624688c7f491c6967928358eb4510ff03d900e523f3d02419a5f`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [9607604d](https://github.com/openshift/cluster-update-keys/commit/9607604d35acee234051bd0da8a14321b4edd38e) `sha256:dab460682a02ae1433b338cf5d3f025de4281dab783da0e82e868d8611ff159c`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [44c6428e](https://github.com/openshift/containernetworking-plugins/commit/44c6428e4c9a20fd2f0c3ad4de11e50862a51151) `sha256:d142bb0ea39ad9c55f851d9511801b0483a4dadd561230d0fe45d14d21652efd`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [44c6428e](https://github.com/openshift/containernetworking-plugins/commit/44c6428e4c9a20fd2f0c3ad4de11e50862a51151) `sha256:5939b940e128c7d4dbe495c13bb23526eca6b706e43d674e005ae390343a1443`
* [coredns](https://github.com/openshift/coredns) git [9d47fee7](https://github.com/openshift/coredns/commit/9d47fee71d861a739e943c2481815d6fcab25ee2) `sha256:e84434e74c4ca75abb57f0d8a4058224ada83c6e609182d5f0f4192867787ebd`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [049e93b6](https://github.com/openshift/cloud-provider-openstack/commit/049e93b693fd5ea7cbcddade0d4361f6d5125c0b) `sha256:10cc7a0204748a2474561100af7a5899a618e0d88aa529a25350e09a47a7d209`
* [csi-driver-manila-operator](https://github.com/openshift/csi-operator) git [f5d54d11](https://github.com/openshift/csi-operator/commit/f5d54d11ed1ba2ee3cefb75a4b2c18b30c6df378) `sha256:5c6b78a272648a6cd18ae512ea81ee177569e750828ad47ba3dc80032000410e`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [69f816f6](https://github.com/openshift/csi-driver-nfs/commit/69f816f69e1273868bc19cb13fe6dbd9a7a9ff5f) `sha256:fb5a2c6bec0e0f058a533ac2e8e61be9623fa07a5cf53a104bb56d4ccfea3445`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [9fec0cd4](https://github.com/openshift/csi-external-attacher/commit/9fec0cd4e5043505e3b0bf7230e3d41e1482f85b) `sha256:3e444d91c5e1807dc04bf6a8f66c6a3414e2d1889a5563dd365a06ff3ee413b1`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [4af23e63](https://github.com/openshift/csi-external-provisioner/commit/4af23e6310423f2be9f25dbd772d228a6ca34443) `sha256:2163c2b1008d8c98fcb466989d184603e805306d9957b7567806f9f4656b4a07`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [c01245ea](https://github.com/openshift/csi-external-resizer/commit/c01245ea625e058d6ee032fb2b3a2595a7ad499c) `sha256:06a1b089e7c3c54ab23fd09510df28caba5d94f1c01a4bbdb4a6d2d1fee199b8`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [0399f263](https://github.com/openshift/csi-external-snapshot-metadata/commit/0399f2634abb48378e1a29899530c1de157a03ec) `sha256:ddd0532e8f05ae75d42acd5f2c651bc67e34c58a6be67cc470bbff3e54aa2e4b`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [a570de6a](https://github.com/openshift/csi-external-snapshotter/commit/a570de6a368dab9532e540d7f1ce10c3b03c6d1a) `sha256:9b672fd023364480ac1c1c0c99d89df5b0602fe6285e3b8b47a781daee8c4a76`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [be6ff291](https://github.com/openshift/csi-livenessprobe/commit/be6ff291d9015cd0a96f54c152b18864906b5a6b) `sha256:4de73ca2b5c7e491b5ae08e68a2867c576a4e5c750e9fc082507d4cfd5334abc`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [de3c4217](https://github.com/openshift/csi-node-driver-registrar/commit/de3c4217dca58af8b0b267c378eccae45e9eeaf5) `sha256:3935af2b1ad87e439f3270787dfaa3d080225c438b8a29578637936c06e1ed24`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [a570de6a](https://github.com/openshift/csi-external-snapshotter/commit/a570de6a368dab9532e540d7f1ce10c3b03c6d1a) `sha256:aa8b8dc9fa12609925a9272dac8b37509cf28d4b69b87dee347bc81dde55341d`
* [csi-volume-device-exporter](https://github.com/openshift/csi-volume-device-exporter) git [2f805565](https://github.com/openshift/csi-volume-device-exporter/commit/2f8055659cd33e5942a23aad9d4ef553a35837fc) `sha256:2492f6d11e45f792f1e8880bc3112d80f609382e68d12e56c327d31d7918b0eb`
* [docker-builder](https://github.com/openshift/builder) git [eb6fab81](https://github.com/openshift/builder/commit/eb6fab812908e89e61afd9083d96a3e44d979b20) `sha256:d897899606a527153d7ba238c65e5f693c8021c5fc8113c47db9f348c793fa53`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [b63b175a](https://github.com/openshift/driver-toolkit/commit/b63b175a79b9fe0c29f6ed63df3c2d7862ba408a) `sha256:29ebf39ca42c7e62e2331957dcb35edf5c815d2d31b2b6178eddf5713d360636`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [0264f879](https://github.com/openshift/egress-router-cni/commit/0264f879b64fe94c28f1b7a32c5fcd91a5ec43db) `sha256:664efa1f551030518f3b37805feab865776c3677e4d32da7e6b89b113af116a0`
* [etcd](https://github.com/openshift/etcd) git [0066318f](https://github.com/openshift/etcd/commit/0066318fa231d64cd56f58e651ac05cbf613a590) `sha256:1c291917f9aa8f17a5c326e01a149e16dd442e3d1b8256f4b7040275eaca07be`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [3e67bea5](https://github.com/openshift/cloud-provider-gcp/commit/3e67bea588c9eac2978d14726db729ee420cd557) `sha256:761c510a73b9f309098c797ac90403414fad3b6a78d413d34963780b5f43e557`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [71989ea3](https://github.com/openshift/cluster-api-provider-gcp/commit/71989ea3a2b2540a4a2741863b1cbca1bb82782a) `sha256:841f080e3de9bf3963a82213d6fc3eb2d7241a74acbb7f604b97d035517d562a`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [c9690df2](https://github.com/openshift/machine-api-provider-gcp/commit/c9690df28e6bebb269ab207fe101337eac298743) `sha256:a1cee61199e1f62d5640fdb7c60c77eca53097e74eb1c4cc7b9f020b424ecbf9`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [b9f74839](https://github.com/openshift/gcp-pd-csi-driver/commit/b9f74839cc420aa3f6bd8f13e4baba7d7c54d2e3) `sha256:e2a5daf50c4be74e54b1a81669f21afde34c12d86d3028a48689cb2c0c270546`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/csi-operator) git [f5d54d11](https://github.com/openshift/csi-operator/commit/f5d54d11ed1ba2ee3cefb75a4b2c18b30c6df378) `sha256:14031fae67cd9f5fbc0c346dc97d3416327140b91f67243a21ebf41e08d1f8ac`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [4501ff2f](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/4501ff2f53576c31df0511b69444e65e1eeba745) `sha256:442698439daeab4b43123b3adcf224ee4a5b8792654b93ee20e66f25cc8d69af`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [acf2cb50](https://github.com/openshift/cloud-provider-ibm/commit/acf2cb50d53867796344a516b3aaabfcd7f2630d) `sha256:34ba34e17ab1b32fd3e9f7a0887133eb2d658d76e2aee8c2c15c06b1bb3c9203`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [ea479e39](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/ea479e39e9feb756e8c025ff2eca83f69bdd2a5d) `sha256:c9921f16888a8fad950a4df880388d01da2091d77a52a128cff1bbe45855fa50`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [eff02c84](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/eff02c84e81efacbb7419ee4f436a8eb9d7a8f03) `sha256:a5c7829e7b52a0df960a191ac8914fa4ee20caef15c1362e44a53573e8e3ae85`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [0a4f9f43](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/0a4f9f436f996bcc43e62082fcc949bd562b2496) `sha256:d00f34bac5a97594d7495d1d8f74a0489cbf3c66b10f07bb501a91cfc37f1604`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [56a4f882](https://github.com/openshift/machine-api-provider-ibmcloud/commit/56a4f8829ba8b48a22a175cc45bee7690896e221) `sha256:2c1fb40861e3311c63520265335eda264ac5c340362ed351cd2503f8fda0b32e`
* [insights-operator](https://github.com/openshift/insights-operator) git [31730f19](https://github.com/openshift/insights-operator/commit/31730f197e0cd1f473fbfcd200dbfac321b16805) `sha256:12ebdb566dc833199c8373160d62a68505be82d14dad042242acc6b44258feb4`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [68a7815c](https://github.com/openshift/insights-runtime-extractor/commit/68a7815cb622c7919e07bfba0e08334576189a25) `sha256:dc2587a42eae6a80235a5817a87d97e8f1917ebdd8bc5c5d1000445f3088fd44`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [68a7815c](https://github.com/openshift/insights-runtime-extractor/commit/68a7815cb622c7919e07bfba0e08334576189a25) `sha256:a82fabf9de967d7f900c9958b1e890a8c0790b6716b4e0335f9f2e19cf61b63a`
* [installer-etcd-artifacts](https://github.com/openshift/etcd) git [0066318f](https://github.com/openshift/etcd/commit/0066318fa231d64cd56f58e651ac05cbf613a590) `sha256:fd2bde5ce9049e4b11926b5265e2fbb4cc7fdfb132e216f736916e7aa614aaa1`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [f8e41b2e](https://github.com/openshift/ironic-rhcos-downloader/commit/f8e41b2ed8915474a99e3eb34b54692afb0611da) `sha256:ad8512761b5ee078f500df742b6dd1e442212eb9d33e19da865e0d355a194788`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [486a0418](https://github.com/openshift/ironic-static-ip-manager/commit/486a041897d703d55ef59c98e2b20a01588a0b4c) `sha256:b31b7b177c9766ce012edf193356b4685808e830aca88f36770424beba463a8f`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [f260d5ba](https://github.com/openshift/kubernetes-metrics-server/commit/f260d5ba2211732bcbc7383cb7a07c9a144b4014) `sha256:668e105e8cb03f0bc8f511244da63ae89e770d2cabfc4106b27539b96af33988`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [75554a03](https://github.com/openshift/kube-rbac-proxy/commit/75554a0355eb0c9b25904102437a529703af89b8) `sha256:2b264c3a53dcf7d6f38c96b97ab7b4ee699c0bcbfd6040865af86db89a5c0f99`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [4ee3abf7](https://github.com/openshift/kube-state-metrics/commit/4ee3abf755840bf17040e4008445cf4303e94fb9) `sha256:a98498fd52001810961d856f5a91af78177860fdb323f26f1313d09363b61619`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [c67b43a2](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/c67b43a2519e63f02e4be27ae6c8d4edcbc75950) `sha256:04baf2f83fe56b309bd706349da6f9ca0804de0ed3020377d891c18904c6d132`
* [kube-vip](https://github.com/openshift/kube-vip) git [b272a734](https://github.com/openshift/kube-vip/commit/b272a7342833dad64574158101decb94ebe703d0) `sha256:fcf07cbd23796af9eb292a15d43a0131b191aab4f1dd4b4831ac289b3de5dc3f`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [3fca30d8](https://github.com/openshift/machine-os-images/commit/3fca30d8f935900603dab36abd6cc4a1e356b693) `sha256:24afb111e8792711b06fa5543bf9accdb20f00f278e19dad931f305ab0fec11d`
* [metallb-frr](https://github.com/openshift/frr) git [5f7712b4](https://github.com/openshift/frr/commit/5f7712b486942769dc12a6c8e993537569faa587) `sha256:4cb9dd313c760af93f113b99eb50660c7e5e369ec1c74c033d47b3871181f590`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [3d6d6699](https://github.com/openshift/multus-admission-controller/commit/3d6d6699aa06bb3b24d35620fb17b5b705ed0bb8) `sha256:94256310a4393a829bc8cd6629a856f6aad82f3a1eba8e5da5c1b2b23ee10431`
* [multus-cni](https://github.com/openshift/multus-cni) git [65b175bf](https://github.com/openshift/multus-cni/commit/65b175bfbceeb7de7bc4a82d336858d93e30120c) `sha256:a156b2b2b946594a805c484cd0777fea2b5b575a1c98da02763d83239ecacfb0`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [65b175bf](https://github.com/openshift/multus-cni/commit/65b175bfbceeb7de7bc4a82d336858d93e30120c) `sha256:fc1a6628368a338e93d71bc23701ca211fee6446c15d35b2f0cdd26bcb127dfa`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [39e9cccf](https://github.com/openshift/multus-networkpolicy/commit/39e9cccfa32951d0243c99638099da0a84d0d598) `sha256:38a34423e1c35d66d8aeee7280d21e82db0d43f1daeca44adf1934df6f37ea03`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [345809e1](https://github.com/openshift/route-override-cni/commit/345809e13769604b88431f4a226c56c7227cadce) `sha256:e3a335f720a1ed568e59d0d0a1ccd8d7ae3dde9d00ff71731d39e4557915dab3`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [6a6381d8](https://github.com/openshift/whereabouts-cni/commit/6a6381d869e964d741a551fd869644b0364c5b26) `sha256:e927cfc2711384695adb6e70413d78399438e76de08c8b376b4ae1eb5a22ef19`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [b8723844](https://github.com/openshift/bond-cni/commit/b8723844dc69940f55208cdb265653ab57f959f0) `sha256:4ddc28677899cd8f5ffe1463988cefd1bec4c8c1c9fe657239efc03da34d7102`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [f2abba74](https://github.com/openshift/network-metrics-daemon/commit/f2abba74f88bff66660ab1baa0a7e105ede1f399) `sha256:71c413029bcea25b02a30ffc24e29fead4ac7f6d92d120db4f804d10848f2055`
* [network-tools](https://github.com/openshift/network-tools) git [47d3d41a](https://github.com/openshift/network-tools/commit/47d3d41a66947a012fbe6370b91470f7b19ae8bf) `sha256:930b460f86eda5e9574abe777a3c9575c2aed621117157d387ad49df3271386b`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [eded4633](https://github.com/openshift/cloud-provider-nutanix/commit/eded4633cafeaab62f01736ef6a6115077bebf7c) `sha256:05fdcd946907cc904c985871241c7f770f246e037dbd4ad027180d1fabeb43b0`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [a74a90b5](https://github.com/openshift/machine-api-provider-nutanix/commit/a74a90b53058160348a8817aa6b02ca176168e15) `sha256:bd9a1174d50e9477798f717dfe37942a925cb3cfe1e4739f0a3ff835f87524ca`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [873552c1](https://github.com/openshift/oauth-apiserver/commit/873552c1e2e32dcd58d2163a2751b313b5ff0baf) `sha256:de07b1c950dd06caf4504fff58da5a7746212438e66f83ad0d540a634f1047e3`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [2c9e613a](https://github.com/openshift/oauth-proxy/commit/2c9e613ae807baecb5bbeeb47b567b2e6c47a088) `sha256:2dbf573e3f7cd73d79e9bc780339d0164552e5b0773515a785bf89d78a842b9d`
* [oauth-server](https://github.com/openshift/oauth-server) git [c7275e74](https://github.com/openshift/oauth-server/commit/c7275e7430212511532b678d69f53add19d2708b) `sha256:d590147d98ede88b0c88d69a791487137f2be26c270c0debef00ab5136ee2d49`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [9fc0918d](https://github.com/openshift/openshift-apiserver/commit/9fc0918d1c6908e8e8ceb8e215e86bde4aeaabec) `sha256:549db7f66315015ef4989561a7e02d79db17c025a80e011a88a050b36bcb51f8`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [72964318](https://github.com/openshift/openshift-controller-manager/commit/72964318318f2a65e66b766a288b2241e6a6c51e) `sha256:a44baf2427e0dbf667138430b5dd58813c967da5920a6f2ecc3cae38bcf1a3b7`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [de9762d4](https://github.com/openshift/openshift-state-metrics/commit/de9762d4058aab05b91e413dc0f700ff9f02431e) `sha256:ced1a922978f97b4099c964667c818b6f1f6dad8ed0edb55c7a615d113cbf097`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [049e93b6](https://github.com/openshift/cloud-provider-openstack/commit/049e93b693fd5ea7cbcddade0d4361f6d5125c0b) `sha256:18dfb9490ede3ecb5786cc2502615cad4fb157fc2ac73917fb79c0eeb10af416`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator) git [f5d54d11](https://github.com/openshift/csi-operator/commit/f5d54d11ed1ba2ee3cefb75a4b2c18b30c6df378) `sha256:6518a8a764e266f537451ff96a9779ec155f59b4e1d4a48eb34b9c4fe9f5f365`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [049e93b6](https://github.com/openshift/cloud-provider-openstack/commit/049e93b693fd5ea7cbcddade0d4361f6d5125c0b) `sha256:f9958bfa539fe11004f43e4bbe147e3fad7895386ef0c21405fdc1b424b4cf5b`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [b6b2c839](https://github.com/openshift/cluster-api-provider-openstack/commit/b6b2c8393370dccb3549cd7485faac290045e258) `sha256:ddcd244f809638d4ed92d14fab0f4c309b7cbb98c9f2ec01adf0644b75d8c0af`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [7cc618d2](https://github.com/openshift/machine-api-provider-openstack/commit/7cc618d2b3fac0925fb8570cb0440e9172bfba19) `sha256:6b7e5e4fe63528c5563c6e8b9ff8885767e65badc13782725ac744fdb5d0bd00`
* [operator-framework-tools](https://github.com/openshift/operator-framework-olm) git [a941d9fe](https://github.com/openshift/operator-framework-olm/commit/a941d9fec006aabc186915a87b52b6a75d76f5de) `sha256:ca76d3061f03afd066ce21a8cd0c0884ba08cc401947b2f210a83508bb10e94c`
* [operator-lifecycle-manager](https://github.com/openshift/operator-framework-olm) git [a941d9fe](https://github.com/openshift/operator-framework-olm/commit/a941d9fec006aabc186915a87b52b6a75d76f5de) `sha256:a5f06cbc4d7e9fbfbcccaea2e1ce0821f029f843eabce25339c1063c7e003caf`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [5a7d0ade](https://github.com/operator-framework/operator-marketplace/commit/5a7d0ade6d5fae66fca8b5d376f89037a914b499) `sha256:1b6e38eb161eefc07a66e248e4755ef76788d5d457a3e533a3ab5fb55fbc444b`
* [operator-registry](https://github.com/openshift/operator-framework-olm) git [a941d9fe](https://github.com/openshift/operator-framework-olm/commit/a941d9fec006aabc186915a87b52b6a75d76f5de) `sha256:e316fcdadefd21a8e1c26acaa086b0bf5fdf6544cddf8ec71f1b37d835c33266`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [cfe345c7](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/cfe345c7dd6e7f817927847690658b199c3d1653) `sha256:c98fce2b87d0a45240a49d01fb9607d2b3eb017f0e2020b60b872876f33d2adf`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [c130d47e](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/c130d47e0bbc870188f1d8995d7ae2fa3f63e337) `sha256:7d5e0e4b981390cb08cf6ad0a13e53ee93d79b792b0b45d692a5c9c8908dbd81`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [a663b6d1](https://github.com/openshift/cloud-provider-powervs/commit/a663b6d1d212ad36cb7454a5e46b37b84fe35cd7) `sha256:aac392f402f145056f438e128922f1b5518f85738e67a259776709fe044f5a89`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [7795af21](https://github.com/openshift/machine-api-provider-powervs/commit/7795af213a299bcd0aeed5bbaa88a229d393cd78) `sha256:cb35c5c89b7be7f81cd4cc228c2d773dc5addbb8f9d0622c0abbe7407add9a24`
* [prometheus](https://github.com/openshift/prometheus) git [543037dc](https://github.com/openshift/prometheus/commit/543037dcbf433bbabcc3d77ce2764c1329ea6054) `sha256:67523a1790901c6a1a8d294926692b8aa91250eb1ccc1e6da8f41de70d7f3fe0`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [82bbbc48](https://github.com/openshift/prometheus-alertmanager/commit/82bbbc4864172a755fb5cf30b844323bbbdb5154) `sha256:439efecbac0af3a4f912f1a4a0e7ca31258dec4011378e1178a4b80e957ae42e`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [642070bf](https://github.com/openshift/prometheus-operator/commit/642070bf0faa0a0271923adca02e614a63822b7a) `sha256:16cfa9a3709418a3138ffbc50b79c2ce4659e201fa8ea57c53dbdf05c207eb85`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [41a2ce96](https://github.com/openshift/node_exporter/commit/41a2ce965e42357f5d1cd71f34498c19eb99932f) `sha256:63d5cffe76fe52793d91b91253c72b9c3727b795276f093df16227168d8fc045`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [642070bf](https://github.com/openshift/prometheus-operator/commit/642070bf0faa0a0271923adca02e614a63822b7a) `sha256:926ea4e0f7098c72a7b6a3e57cba10684a40de07c0b59cf02132090621e990bc`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [642070bf](https://github.com/openshift/prometheus-operator/commit/642070bf0faa0a0271923adca02e614a63822b7a) `sha256:b2cc236086ca6749c8240c981913d9efc675ffa44ab9d958a8e49b805f9ba1e0`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [ed872ba1](https://github.com/openshift/service-ca-operator/commit/ed872ba14b615ca5726ae90e987268877a0b0b20) `sha256:ec82a9d3bb451ba7adcca29b17c46fbd6fcb3e36adf91d0df625b2197cf739ca`
* [telemeter](https://github.com/openshift/telemeter) git [6d1c450a](https://github.com/openshift/telemeter/commit/6d1c450af5883606acf8a2e4362b4c77e243124a) `sha256:949749b37cadbcedaef59b9997d2867465deaf88ac0601d2e3cf45126a49ee77`
* [thanos](https://github.com/openshift/thanos) git [15e695e8](https://github.com/openshift/thanos/commit/15e695e8c60c36ec276e7cf6ebe9caa01f2218ea) `sha256:46b8a43ccbfe075c385e8165e3f25e9143328b7851c1842c4c294175145ae9a0`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [3ac9e351](https://github.com/openshift/volume-data-source-validator/commit/3ac9e351c97a083eb89ae3f8d695df0af138efc0) `sha256:d258de0bde35dda2816d8b9ef0a8daccefcd30e70b3fbf6a3ccf544fd8600e93`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [103974bf](https://github.com/openshift/cloud-provider-vsphere/commit/103974bfb3aa79c162c739af91c40ea5a0660700) `sha256:c9290ebbba4da816217c353b4c52effd13ab48d98623127cf0b8247bc9e52fe5`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [7237e7ff](https://github.com/openshift/cluster-api-provider-vsphere/commit/7237e7ff7540955cd9d4e2bd561fbfa2a5416743) `sha256:948e3aa8d92ece270a7eb3aef7e177d1e46b45f533fb7b7236ffdccef3588959`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [21451380](https://github.com/openshift/vmware-vsphere-csi-driver/commit/214513803f414f1a688e5e7d6cb021b8e9777581) `sha256:f6b150b71968ae9a46a166a6d598a3933343a6c8b57b8a0bdec8f76132561b4e`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [639d1baa](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/639d1baab138ecd7e3adb12c49fd8c7dd4fa6b28) `sha256:05d3290bbb9705658e9cf99a3246099332f16ffb4036b7c8be6da1d1259d997f`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [21451380](https://github.com/openshift/vmware-vsphere-csi-driver/commit/214513803f414f1a688e5e7d6cb021b8e9777581) `sha256:ff713c4ea3294ce19c0e9cadac33b83587194ea4d786bc5a336eae384e1e8498`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [784de65a](https://github.com/openshift/vsphere-problem-detector/commit/784de65a26a17fdf276c11401d4659609c3b26af) `sha256:2957f0a8ce9f561e2137ba50588ca1c9dbb620593dcf70ddad85e2e309702d59`
### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/cc149fc04b0571f536824b96df299e05a06f3eba)
* Revert "MGMT-24854: Cilium CNI is not supported on OCP 4.22" [#11378](https://github.com/openshift/assisted-service/pull/11378)
* [MGMT-25637](https://issues.redhat.com/browse/MGMT-25637): Prepare 5.0 stable versions assisted-service upstream [#11384](https://github.com/openshift/assisted-service/pull/11384)
* [ACM-47237](https://issues.redhat.com/browse/ACM-47237): Add support for TLS groups [#11354](https://github.com/openshift/assisted-service/pull/11354)
* NO-ISSUE: [master] Bump OCP versions: 4.20, 4.21, 4.16, 5.0, 4.22, 4.14, 4.19, 4.18 [#11372](https://github.com/openshift/assisted-service/pull/11372)
* [MGMT-25638](https://issues.redhat.com/browse/MGMT-25638): Bump LSO version override to 5.1 [#11358](https://github.com/openshift/assisted-service/pull/11358)
* [Full changelog](https://github.com/openshift/assisted-service/compare/ae2e656f99bc4e501c293edcd26f433857230d44...cc149fc04b0571f536824b96df299e05a06f3eba)
### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/ab7171da240d7ff877733107de2d4b81a607c65c)
* NO-ISSUE: Update module github.com/sigstore/fulcio to v1.8.6 [SECURITY] [#2593](https://github.com/openshift/assisted-installer/pull/2593)
* NO-ISSUE: Update module github.com/metal3-io/baremetal-operator/apis to v0.8.1 [SECURITY] [#2601](https://github.com/openshift/assisted-installer/pull/2601)
* NO-ISSUE: Update go toolchain directive to v1.26.11 [SECURITY] [#2582](https://github.com/openshift/assisted-installer/pull/2582)
* NO-ISSUE: Update module github.com/opencontainers/runc to v1.3.6 [SECURITY] [#2609](https://github.com/openshift/assisted-installer/pull/2609)
* NO-ISSUE: Refresh RPM lockfiles [SECURITY] [#2575](https://github.com/openshift/assisted-installer/pull/2575)
* NO-ISSUE: Refresh RPM lockfiles [SECURITY] [#2570](https://github.com/openshift/assisted-installer/pull/2570)
* [OCPBUGS-136026](https://issues.redhat.com/browse/OCPBUGS-136026): Update github.com/klauspost/compress to fix CVE-2026-116591 [#2532](https://github.com/openshift/assisted-installer/pull/2532)
* [MGMT-18684](https://issues.redhat.com/browse/MGMT-18684): CVE-2026-19706 validate CSRs during assisted installation [#2542](https://github.com/openshift/assisted-installer/pull/2542)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/1485df1bc332e738e5e9e12f5f1c36e7cde69866...ab7171da240d7ff877733107de2d4b81a607c65c)
### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/1d70fe63ea1a1988db8b1405f5d2b5e6503425c4)
* NO-ISSUE: Refresh RPM lockfiles [SECURITY] [#1789](https://github.com/openshift/assisted-installer-agent/pull/1789)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/c9c45088c300b0a2aee2b03d294ed4c885587461...1d70fe63ea1a1988db8b1405f5d2b5e6503425c4)
### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/4d20eabf622da1e9c613949f84755a026fc36a6c)
* Unhide static IP controls (#4153) [#4153](https://github.com/openshift-assisted/assisted-installer-ui/pull/4153)
* Static IP NMState link should lead to OCP documentation (#4152) [#4152](https://github.com/openshift-assisted/assisted-installer-ui/pull/4152)
* OVE above the sea: rework ISO download button, add clipboard copy (#4141) [#4141](https://github.com/openshift-assisted/assisted-installer-ui/pull/4141)
* Bump follow-redirects from 1.16.1 to 1.16.3 (#4155) [#4155](https://github.com/openshift-assisted/assisted-installer-ui/pull/4155)
* [OCPBUGS-136500](https://issues.redhat.com/browse/OCPBUGS-136500): Bump joi to ^18.3.1 to fix CVE-2026-118772 (#4154) [#4154](https://github.com/openshift-assisted/assisted-installer-ui/pull/4154)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/58e24601e5d0769ba95de52032ceb6bf7db0c144...4d20eabf622da1e9c613949f84755a026fc36a6c)
### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/203b1a2417ee940230e7bf361f200ed200e81966)
* [CNTRLPLANE-3391](https://issues.redhat.com/browse/CNTRLPLANE-3391): UPSTREAM: 6310: Add SourceDestCheck configuration to AWSMachine [#672](https://github.com/openshift/cluster-api-provider-aws/pull/672)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/a76bfe28a92b7c1b5f8a177f1556f8871917903a...203b1a2417ee940230e7bf361f200ed200e81966)
### [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws/tree/8b75b8bea4378893fa0eb211ad602fe99ce00b23)
* [AUTOSCALE-952](https://issues.redhat.com/browse/AUTOSCALE-952): aws-karpenter-provider-aws release chores 5.1 [#55](https://github.com/openshift/aws-karpenter-provider-aws/pull/55)
* [Full changelog](https://github.com/openshift/aws-karpenter-provider-aws/compare/aa136f7fdc38fb6d55888a2d623fed08ea73dfb7...8b75b8bea4378893fa0eb211ad602fe99ce00b23)
### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/df23b5cc8738bb559d93196c100ea35ed2be2262)
* [CNTRLPLANE-3380](https://issues.redhat.com/browse/CNTRLPLANE-3380): Remove enxebre and sjenning from OWNERS [#59](https://github.com/openshift/aws-encryption-provider/pull/59)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/f4d8aaa238a39279f90263de662eca89a52236d6...df23b5cc8738bb559d93196c100ea35ed2be2262)
### [aws-node-termination-handler](https://github.com/openshift/aws-node-termination-handler/tree/a988f5c084271989004efaf9160e07c4b08d2f49)
* [CNTRLPLANE-3380](https://issues.redhat.com/browse/CNTRLPLANE-3380): Rebase onto upstream main and make the repo rebasebot-ready [#18](https://github.com/openshift/aws-node-termination-handler/pull/18)
* [Full changelog](https://github.com/openshift/aws-node-termination-handler/compare/b64c6ab9cec07965ad6688096822cce17338f089...a988f5c084271989004efaf9160e07c4b08d2f49)
### [azure-service-operator](https://github.com/openshift/azure-service-operator/tree/bdd4ba9ac27b107e9858ae946d79e3ebdc4ca468)
* [OCPBUGS-140491](https://issues.redhat.com/browse/OCPBUGS-140491): CVE-2026-33814: bump golang.org/x/net [#53](https://github.com/openshift/azure-service-operator/pull/53)
* [Full changelog](https://github.com/openshift/azure-service-operator/compare/b371cd0419df01d984977779a729a098ed24b24d...bdd4ba9ac27b107e9858ae946d79e3ebdc4ca468)
### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/55dcc382bc3beb4fd615112c4a6102dad61c96ca)
* [OCPBUGS-140605](https://issues.redhat.com/browse/OCPBUGS-140605): Update RHCOS-release-5.1 bootimage metadata to 10.2.20261108-0 / 9.8.20261108-0 [#11082](https://github.com/openshift/installer/pull/11082)
* [OCPBUGS-136628](https://issues.redhat.com/browse/OCPBUGS-136628): Listing Service Accounts Fails out Early [#11068](https://github.com/openshift/installer/pull/11068)
* [MULTIARCH-6330](https://issues.redhat.com/browse/MULTIARCH-6330): PowerVS: DHCP Subnet follow up PR to address lingering coderabbit comments [#11067](https://github.com/openshift/installer/pull/11067)
* [OCPBUGS-132799](https://issues.redhat.com/browse/OCPBUGS-132799): fix MachinePool management field godoc and CRD default [#11018](https://github.com/openshift/installer/pull/11018)
* [CORS-4541](https://issues.redhat.com/browse/CORS-4541): day-0 nested virtualization enablement for AWS [#11050](https://github.com/openshift/installer/pull/11050)
* no-jira: bump envtest binaries version to 1.37.0 [#11014](https://github.com/openshift/installer/pull/11014)
* [OCPBUGS-131042](https://issues.redhat.com/browse/OCPBUGS-131042): agent: scope ICSP/IDMS mutual-exclusivity check to install workflow [#10940](https://github.com/openshift/installer/pull/10940)
* [Full changelog](https://github.com/openshift/installer/compare/4da4f1f39d8fba0011e4d1ebf5dab6fc7d05285a...55dcc382bc3beb4fd615112c4a6102dad61c96ca)
### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/121c3e2a79e02aac5f3a2ca48f229982116ab774)
* [OCPBUGS-133414](https://issues.redhat.com/browse/OCPBUGS-133414): keep valid UTF-8 ConfigMap values in data [#2450](https://github.com/openshift/oc/pull/2450)
* [OCPBUGS-136039](https://issues.redhat.com/browse/OCPBUGS-136039): update klauspost/compress to v1.20.2 to fix CVE-2026-116591 [#2457](https://github.com/openshift/oc/pull/2457)
* [Full changelog](https://github.com/openshift/oc/compare/651634d88b4209cb4a01faec9dd3c889aa5169a6...121c3e2a79e02aac5f3a2ca48f229982116ab774)
### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/f8d2914eb161357c0d7f19d7828f9cfb15fda15c)
* NO-JIRA: Update library-go to get unprivileged KMS container [#1059](https://github.com/openshift/cluster-authentication-operator/pull/1059)
* NO-JIRA: Update library-go to get new KMS API [#1057](https://github.com/openshift/cluster-authentication-operator/pull/1057)
* [CNTRLPLANE-4794](https://issues.redhat.com/browse/CNTRLPLANE-4794): Token review service [#1034](https://github.com/openshift/cluster-authentication-operator/pull/1034)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/5a17788ddb9921882df2941dee4a40862e4c8127...f8d2914eb161357c0d7f19d7828f9cfb15fda15c)
### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/54c276296444a80cae2b4f27665dcdc2fd01242c)
* [OCPBUGS-129089](https://issues.redhat.com/browse/OCPBUGS-129089): cache kind version discovery across loop iterations [#463](https://github.com/openshift/kubernetes-autoscaler/pull/463)
* [OCPBUGS-135209](https://issues.redhat.com/browse/OCPBUGS-135209): charge a pending machine once, not once per autoscaler pass [#459](https://github.com/openshift/kubernetes-autoscaler/pull/459)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/a819db459f3e0a88becba4c58bf053c6dbda28f2...54c276296444a80cae2b4f27665dcdc2fd01242c)
### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/dcaaf11281dc987c295810f2833f9f345c4c8874)
* [OCPBUGS-140593](https://issues.redhat.com/browse/OCPBUGS-140593): fix(upgradeable): Restrict image-reading pods to control-plane nodes [#723](https://github.com/openshift/cluster-capi-operator/pull/723)
* [OCPCLOUD-3727](https://issues.redhat.com/browse/OCPCLOUD-3727): Fix upgradeability controller on arm64 [#722](https://github.com/openshift/cluster-capi-operator/pull/722)
* [OCPCLOUD-3727](https://issues.redhat.com/browse/OCPCLOUD-3727): Remove upgradeable e2e inter-test dependencies [#721](https://github.com/openshift/cluster-capi-operator/pull/721)
* [OCPCLOUD-3726](https://issues.redhat.com/browse/OCPCLOUD-3726): Implement the upgradeable controller [#712](https://github.com/openshift/cluster-capi-operator/pull/712)
* [OCPBUGS-138578](https://issues.redhat.com/browse/OCPBUGS-138578): crdvalidation: Permit CRD deletion when action = Warn [#717](https://github.com/openshift/cluster-capi-operator/pull/717)
* NO-JIRA: Constrain linter resource usage in ci [#719](https://github.com/openshift/cluster-capi-operator/pull/719)
* [OCPBUGS-138579](https://issues.redhat.com/browse/OCPBUGS-138579): Fix OOMKiller running units [#718](https://github.com/openshift/cluster-capi-operator/pull/718)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/2bc5b4e9fc2e4bf636770733020a3a19584638fd...dcaaf11281dc987c295810f2833f9f345c4c8874)
### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/9cb41621d722471b7947209a9b0bab4d8f4fdd2d)
* [OCPCLOUD-3670](https://issues.redhat.com/browse/OCPCLOUD-3670): propagate TLS group preferences [#532](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/532)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/7e0c5d998df0a158a3fad0d1e7e83fee46ef9ced...9cb41621d722471b7947209a9b0bab4d8f4fdd2d)
### [cluster-config-api](https://github.com/openshift/api/tree/b027bed8bb3fb3fc6a283981237c2be55d044973)
* [OCPBUGS-134623](https://issues.redhat.com/browse/OCPBUGS-134623): accept empty imageStreamImportMode again, keep omitempty [#3172](https://github.com/openshift/api/pull/3172)
* [CNTRLPLANE-4788](https://issues.redhat.com/browse/CNTRLPLANE-4788): authentication: AuthenticationConfiguration: Clarify trustedCAFilePath scope [#3173](https://github.com/openshift/api/pull/3173)
* [OCPCLOUD-3722](https://issues.redhat.com/browse/OCPCLOUD-3722): Stop serving CompatibilityRequirement v1alpha1 [#3148](https://github.com/openshift/api/pull/3148)
* [OCPCLOUD-3546](https://issues.redhat.com/browse/OCPCLOUD-3546): Promote CRDCompatibilityRequirementOperator feature gate to Default [#2908](https://github.com/openshift/api/pull/2908)
* [OCPBUGS-134623](https://issues.redhat.com/browse/OCPBUGS-134623): make ImageSpec.ImageStreamImportMode omitempty and drop "" from the enum [#3159](https://github.com/openshift/api/pull/3159)
* [CNTRLPLANE-3745](https://issues.redhat.com/browse/CNTRLPLANE-3745): add api validation cases for AuthenticationComponentProxy [#3158](https://github.com/openshift/api/pull/3158)
* [OSDOCS-24092](https://issues.redhat.com/browse/OSDOCS-24092): Correct ImageDigestMirrorSet/ImageTagMirrorSet API documentation [#3144](https://github.com/openshift/api/pull/3144)
* [CNTRLPLANE-4318](https://issues.redhat.com/browse/CNTRLPLANE-4318): etcd backups [#2952](https://github.com/openshift/api/pull/2952)
* [Full changelog](https://github.com/openshift/api/compare/248dd91956cec586fd277b02f58a745d1ed292e4...b027bed8bb3fb3fc6a283981237c2be55d044973)
### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/c6ebb70cf3d1d80cb6a3db5088b9c958910974aa)
* [OCPEDGE-2959](https://issues.redhat.com/browse/OCPEDGE-2959): Migrate topology transition tracking from operator's conditions to infra API [#499](https://github.com/openshift/cluster-config-operator/pull/499)
* [OCPEDGE-3021](https://issues.redhat.com/browse/OCPEDGE-3021): feat: add infrastructure SingleReplica to HighlyAvailable topology transition [#525](https://github.com/openshift/cluster-config-operator/pull/525)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/48c96eaabe616ab7eca2f031c340c3490f744cd4...c6ebb70cf3d1d80cb6a3db5088b9c958910974aa)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/04f8f6786f4e39c1a0b94878fd71b54124dff5f8)
* [CNTRLPLANE-4527](https://issues.redhat.com/browse/CNTRLPLANE-4527): align automated backup E2E tests with policy scheduling [#1746](https://github.com/openshift/cluster-etcd-operator/pull/1746)
* [CNTRLPLANE-4423](https://issues.redhat.com/browse/CNTRLPLANE-4423): Add TLSCurve support [#1740](https://github.com/openshift/cluster-etcd-operator/pull/1740)
* [CNTRLPLANE-4318](https://issues.redhat.com/browse/CNTRLPLANE-4318): etcd backups [#1657](https://github.com/openshift/cluster-etcd-operator/pull/1657)
* [OCPBUGS-138702](https://issues.redhat.com/browse/OCPBUGS-138702): Enable etcd lease checkpointing by default [#1748](https://github.com/openshift/cluster-etcd-operator/pull/1748)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/1dda408fa4ce9c5c86a4e0f3f3b612bda1f72e30...04f8f6786f4e39c1a0b94878fd71b54124dff5f8)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/b849ee87a63fd710b33cbca4d36177a9225114ea)
* [NE-2912](https://issues.redhat.com/browse/NE-2912): Add non-default HAProxy 3.4 image selection [#1660](https://github.com/openshift/cluster-ingress-operator/pull/1660)
* [OCPBUGS-131939](https://issues.redhat.com/browse/OCPBUGS-131939): [OSSM 26-20] Bump to OSSM 3.5.0 and Istio v1.30.5-2 for y-stream update prep [#1626](https://github.com/openshift/cluster-ingress-operator/pull/1626)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/58102d5ad724d902c72d402c46d0ac2a9baf6f95...b849ee87a63fd710b33cbca4d36177a9225114ea)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/908dca4fff868c5d7b02c2d8c574611b92811007)
* [OCPBUGS-130512](https://issues.redhat.com/browse/OCPBUGS-130512): Bump golang.org/x/net to v0.60.0 to fix CVE-2026-78669 [#2370](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2370)
* [CNTRLPLANE-4864](https://issues.redhat.com/browse/CNTRLPLANE-4864): configobservation/auth: coordinate direct-to-webhook OIDC migration [#2383](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2383)
* NO-JIRA: Update library-go to get unprivileged KMS container [#2382](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2382)
* NO-JIRA: Update library-go to get new KMS CRD [#2380](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2380)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/5105250647f33a232b1bf2982372f7cc66580deb...908dca4fff868c5d7b02c2d8c574611b92811007)
### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/9a2bc0b162ae50b652b08a14444a28ca2bb9b963)
* [CNTRLPLANE-4778](https://issues.redhat.com/browse/CNTRLPLANE-4778): Turn node cert recovery off 24h after it's turned on [#977](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/977)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/cd45079d8bb7a391ba0eb3282d9ef75232fe425c...9a2bc0b162ae50b652b08a14444a28ca2bb9b963)
### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/623256d497dcc3444c0f679f2706927c9ee21b35)
* [OCPBUGS-136132](https://issues.redhat.com/browse/OCPBUGS-136132): Remove vendor for cluster-machine-approver-tests-ext [#356](https://github.com/openshift/cluster-machine-approver/pull/356)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/d97aeb1edf3e14a5ced766e965c539862b088575...623256d497dcc3444c0f679f2706927c9ee21b35)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/27a588b0a4ae03966ecaa1355277b001e3eee84d)
* [OCPBUGS-123708](https://issues.redhat.com/browse/OCPBUGS-123708): exclude secondary pod interfaces from node exporter [#3131](https://github.com/openshift/cluster-monitoring-operator/pull/3131)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/2df56bade8f0d6bfc9c1b183d3abc913eaf58b90...27a588b0a4ae03966ecaa1355277b001e3eee84d)
### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/ac275c7fcaec5f9d4a53b0163eb9daddabc5d67e)
* [OSASINFRA-4400](https://issues.redhat.com/browse/OSASINFRA-4400): Add support for max_allowed_address_pairs OpenStack [#3058](https://github.com/openshift/cluster-network-operator/pull/3058)
* [OCPBUGS-105402](https://issues.redhat.com/browse/OCPBUGS-105402): Remove EVPN feature gate [#3137](https://github.com/openshift/cluster-network-operator/pull/3137)
* [OCPBUGS-76964](https://issues.redhat.com/browse/OCPBUGS-76964): ovn-kubernetes: Relax control-plane zone anti-affinity [#3215](https://github.com/openshift/cluster-network-operator/pull/3215)
* Merge [#3106](https://github.com/openshift/cluster-network-operator/pull/3106)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/e2c7bfa308a6168985d1ca0154a2c20913920930...ac275c7fcaec5f9d4a53b0163eb9daddabc5d67e)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/f7ff87f38b4c314a732b057dbffafe9c11e132d8)
* NO-JIRA: Update cluster-node-tuning-operator-container image to 5.1 [#1688](https://github.com/openshift/cluster-node-tuning-operator/pull/1688)
* NO-JIRA: chore(deps): bump the catch-all group with 7 updates [#1690](https://github.com/openshift/cluster-node-tuning-operator/pull/1690)
* NO-JIRA: Add Dependabot config [#1689](https://github.com/openshift/cluster-node-tuning-operator/pull/1689)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/9943788bb775306e92017973e5fc50fb5b6694d1...f7ff87f38b4c314a732b057dbffafe9c11e132d8)
### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/52ff756919aed21410c131c238c0c3e5872cb3fd)
* [OCPBUGS-133763](https://issues.redhat.com/browse/OCPBUGS-133763): Raise openshift-apiserver-operator memory request to 210Mi [#815](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/815)
* NO-JIRA: Update library-go to get unprivileged KMS container [#820](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/820)
* NO-JIRA: Update library-go to get new KMS API [#818](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/818)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/ca0cb5278212eae6b96d3084441b44c600792032...52ff756919aed21410c131c238c0c3e5872cb3fd)
### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/540c66668a8bb6252772711d9ca01909fef94ab2)
* [STOR-3187](https://issues.redhat.com/browse/STOR-3187): maxUnavailable fix [#777](https://github.com/openshift/cluster-storage-operator/pull/777)
* [STOR-3232](https://issues.redhat.com/browse/STOR-3232): Rename device-exporter assets [#770](https://github.com/openshift/cluster-storage-operator/pull/770)
* [STOR-3232](https://issues.redhat.com/browse/STOR-3232): Add probes to the device exporter Pods [#771](https://github.com/openshift/cluster-storage-operator/pull/771)
* [STOR-3232](https://issues.redhat.com/browse/STOR-3232): Set loglevel of the device exporter [#769](https://github.com/openshift/cluster-storage-operator/pull/769)
* [STOR-3187](https://issues.redhat.com/browse/STOR-3187): CSO: csi-volume-device-exporter for storage path alerting [#757](https://github.com/openshift/cluster-storage-operator/pull/757)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/4758df05bb932c03ffbae77993d10e0ed729afdd...540c66668a8bb6252772711d9ca01909fef94ab2)
### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/75c08cdc7aa5655a35fd969a9526691f8bab83f7)
* [OCPBUGS-133746](https://issues.redhat.com/browse/OCPBUGS-133746): Raise CVO memory request to 240Mi [#1502](https://github.com/openshift/cluster-version-operator/pull/1502)
* NO-JIRA: Remove CRD COPY lines from Dockerfile [#1507](https://github.com/openshift/cluster-version-operator/pull/1507)
* [OTA-2132](https://issues.redhat.com/browse/OTA-2132): phase-aware lifecycle for execution step [#1478](https://github.com/openshift/cluster-version-operator/pull/1478)
* NO-JIRA: Stop using Fauxinnati in the e2e tests [#1493](https://github.com/openshift/cluster-version-operator/pull/1493)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/9bce7217edae5c43ac07a7d93da954aa2859e57d...75c08cdc7aa5655a35fd969a9526691f8bab83f7)
### [console](https://github.com/openshift/console/tree/2cffefbf8d34ab797cf34630b33fd9716fb1975f)
* OCPBUGS-139150, NO-JIRA: e2e cleanup and disable migration specs [#17515](https://github.com/openshift/console/pull/17515)
* [OCPBUGS-51368](https://issues.redhat.com/browse/OCPBUGS-51368): Disable telemetry when Segment JS host is not configured [#17497](https://github.com/openshift/console/pull/17497)
* [OCPBUGS-123211](https://issues.redhat.com/browse/OCPBUGS-123211): Persist Segment sampling decision across page reloads [#17179](https://github.com/openshift/console/pull/17179)
* [CONSOLE-5065](https://issues.redhat.com/browse/CONSOLE-5065): Update relative path links in plugin SDK docs to use Console repo URLs [#17488](https://github.com/openshift/console/pull/17488)
* NO-JIRA: even more react 19 alignment [#17495](https://github.com/openshift/console/pull/17495)
* And 4 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/e990dae3c2f6921965965ce32f6b50d4f20e5ab8...2cffefbf8d34ab797cf34630b33fd9716fb1975f)
### [console-operator](https://github.com/openshift/console-operator/tree/649bb6ff1301251c1e8c7d6c0b14c4ec1c1efb3d)
* [CONSOLE-5180](https://issues.redhat.com/browse/CONSOLE-5180): Add quick start for configuring additional console routes [#1253](https://github.com/openshift/console-operator/pull/1253)
* [Full changelog](https://github.com/openshift/console-operator/compare/a0d111dd8b824e519ffd291b06da52bcf93ca8ec...649bb6ff1301251c1e8c7d6c0b14c4ec1c1efb3d)
### [docker-registry](https://github.com/openshift/image-registry/tree/a51fbda8b93869f02be4520ceb4381d3f5597d73)
* NO-JIRA: add self to reviewers [#500](https://github.com/openshift/image-registry/pull/500)
* [Full changelog](https://github.com/openshift/image-registry/compare/ad28258ba72b92639a64c13942528cfd07bcdcbd...a51fbda8b93869f02be4520ceb4381d3f5597d73)
### [haproxy-router, haproxy-router-haproxy32](https://github.com/openshift/router/tree/3533efa85fcd139f5806906cfd99a0b6748d202f)
* [OCPBUGS-134713](https://issues.redhat.com/browse/OCPBUGS-134713): Reuse polled router configuration in template assertions [#878](https://github.com/openshift/router/pull/878)
* [Full changelog](https://github.com/openshift/router/compare/bd0e4e8392ec875ae9f6c48c298298f002857f25...3533efa85fcd139f5806906cfd99a0b6748d202f)
### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/90b87c7dec8046734eea9392ae39b9bbf3b5b29b)
* [OCPBUGS-137196](https://issues.redhat.com/browse/OCPBUGS-137196): UPSTREAM: 143844: Add parameter for number of parallel clones [#2849](https://github.com/openshift/kubernetes/pull/2849)
* NO-JIRA: Rebase v1.37.2 in master [#2837](https://github.com/openshift/kubernetes/pull/2837)
* [Full changelog](https://github.com/openshift/kubernetes/compare/6a4bd0ddfd4a657f3bd2e3654ba134aa637b7208...90b87c7dec8046734eea9392ae39b9bbf3b5b29b)
### [hypershift](https://github.com/openshift/hypershift/tree/f0df0e35dec618067c0bb19d86c2526e2065c537)
* [OCPBUGS-140686](https://issues.redhat.com/browse/OCPBUGS-140686): fix(control-plane-operator): enable compatibility requirements for default clusters [#10288](https://github.com/openshift/hypershift/pull/10288)
* [OCPBUGS-140683](https://issues.redhat.com/browse/OCPBUGS-140683): Compare release images by digest [#10289](https://github.com/openshift/hypershift/pull/10289)
* [GCP-1228](https://issues.redhat.com/browse/GCP-1228): Add GCP resource label E2E coverage [#9697](https://github.com/openshift/hypershift/pull/9697)
* NO-JIRA: Read ClusterVersion CRDs from /release-manifests [#10243](https://github.com/openshift/hypershift/pull/10243)
* [CNTRLPLANE-4736](https://issues.redhat.com/browse/CNTRLPLANE-4736): ignition re-architecture (1/7) — IgnitionPayload CRD + PayloadStore (gated) [#9916](https://github.com/openshift/hypershift/pull/9916)
* NO-JIRA: ci(deps): bump actions/actions-runner from 2.338.0 to 2.338.2 [#10164](https://github.com/openshift/hypershift/pull/10164)
* [CNTRLPLANE-4969](https://issues.redhat.com/browse/CNTRLPLANE-4969): test(e2e): label HostedCluster conditions for external runners [#10246](https://github.com/openshift/hypershift/pull/10246)
* NO-JIRA: ci(e2e-v2-aws): split public sequential group to avoid timeout [#10254](https://github.com/openshift/hypershift/pull/10254)
* NO-JIRA: Update Zensical to v0.0.74 and align docs tooling [#10249](https://github.com/openshift/hypershift/pull/10249)
* NO-JIRA: ci(deps): bump actions/setup-node from 7.0.0 to 7.1.0 [#10010](https://github.com/openshift/hypershift/pull/10010)
* NO-JIRA: ci(deps): bump codecov/codecov-action from 7.1.0 to 7.1.1 [#9786](https://github.com/openshift/hypershift/pull/9786)
* NO-JIRA: ci(deps): bump astral-sh/setup-uv from 10.3.2 to 10.3.3 [#10227](https://github.com/openshift/hypershift/pull/10227)
* NO-JIRA: update dependency zensical to v0.0.74 [#9867](https://github.com/openshift/hypershift/pull/9867)
* NO-JIRA: Allow Jira IDs in commit message bodies [#10255](https://github.com/openshift/hypershift/pull/10255)
* [CNTRLPLANE-4417](https://issues.redhat.com/browse/CNTRLPLANE-4417): (feat)make kube-apiserver event-ttl configurable per hosted cluster [#9836](https://github.com/openshift/hypershift/pull/9836)
* NO-JIRA: consolidate v2 e2e execution guidance [#10221](https://github.com/openshift/hypershift/pull/10221)
* [CNTRLPLANE-4338](https://issues.redhat.com/browse/CNTRLPLANE-4338): Extract global-configuration ownership with characterization [#9920](https://github.com/openshift/hypershift/pull/9920)
* [CNTRLPLANE-3838](https://issues.redhat.com/browse/CNTRLPLANE-3838): telemetry: add CAPI storage migration metrics recording rules [#10130](https://github.com/openshift/hypershift/pull/10130)
* [GCP-1292](https://issues.redhat.com/browse/GCP-1292): add --enable-gmp-monitoring plumbing and API-only GMP types [#10041](https://github.com/openshift/hypershift/pull/10041)
* [CNTRLPLANE-4165](https://issues.redhat.com/browse/CNTRLPLANE-4165): add E2E test coverage for ETCD Sharding [#9702](https://github.com/openshift/hypershift/pull/9702)
* [CNTRLPLANE-4826](https://issues.redhat.com/browse/CNTRLPLANE-4826): Document CAPI UpToDate status for Replace NodePools [#10234](https://github.com/openshift/hypershift/pull/10234)
* NO-JIRA: feat(OWNERS): introduce advisory approvers [#10202](https://github.com/openshift/hypershift/pull/10202)
* [AUTOSCALE-970](https://issues.redhat.com/browse/AUTOSCALE-970): Integrate karpenterignition for Azure: ignition injection and RHCOS image resolution [#10038](https://github.com/openshift/hypershift/pull/10038)
* NO-JIRA: skip CPU options test based in version [#10236](https://github.com/openshift/hypershift/pull/10236)
* [OCPBUGS-137944](https://issues.redhat.com/browse/OCPBUGS-137944): fix(cpo): update oauth cert SAN generation [#10219](https://github.com/openshift/hypershift/pull/10219)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/hypershift/compare/ddfdbdc811c08ebc2fbe0dc607fb52b5548592c4...f0df0e35dec618067c0bb19d86c2526e2065c537)
### [ironic](https://github.com/openshift/ironic-image/tree/b293955a16701c5ebb12077233c3d7d16334b8f9)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#952](https://github.com/openshift/ironic-image/pull/952)
* [METAL-2021](https://issues.redhat.com/browse/METAL-2021): Make Python selection RHEL-aware [#957](https://github.com/openshift/ironic-image/pull/957)
* [OCPBUGS-138692](https://issues.redhat.com/browse/OCPBUGS-138692): Remove proliantutils and scciclient from ironic image [#953](https://github.com/openshift/ironic-image/pull/953)
* [Full changelog](https://github.com/openshift/ironic-image/compare/091231b15fdd772190d13a332e3c9cf987b4c62f...b293955a16701c5ebb12077233c3d7d16334b8f9)
### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/adbc923a3e244a7d8e7a4ec1aa6f9badc7051127)
* NO-ISSUE: Update requirements.cachito with latest ironic-python-agent [#333](https://github.com/openshift/ironic-agent-image/pull/333)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/1b8257584003040ee6ca0cc02508b86df718d33c...adbc923a3e244a7d8e7a4ec1aa6f9badc7051127)
### [karpenter-operator](https://github.com/openshift/karpenter-operator/tree/1895388a169479709f08581134ec71ecce442f2e)
* [AUTOSCALE-1069](https://issues.redhat.com/browse/AUTOSCALE-1069): approve CSRs of Karpenter-provisioned Azure nodes [#76](https://github.com/openshift/karpenter-operator/pull/76)
* [AUTOSCALE-1061](https://issues.redhat.com/browse/AUTOSCALE-1061): test: add NodeClass CRD schema tests [#72](https://github.com/openshift/karpenter-operator/pull/72)
* NO-JIRA: test: run operator info metric error cases on synctest time [#75](https://github.com/openshift/karpenter-operator/pull/75)
* [Full changelog](https://github.com/openshift/karpenter-operator/compare/1aef4f4146b5b597bf60ea7b434f8ac9794b7870...1895388a169479709f08581134ec71ecce442f2e)
### [keepalived-ipfailover](https://github.com/openshift/images/tree/0c565cdf7dd11f74bc3141cf1e53360eb8911aad)
* [OKD-516](https://issues.redhat.com/browse/OKD-516): Re add /run/lock to OKD 5.1 container base [#258](https://github.com/openshift/images/pull/258)
* [OCPBUGS-137961](https://issues.redhat.com/browse/OCPBUGS-137961): Updating openshift-enterprise-base-rhel10-container image to be consistent with ART for 5.1 [#250](https://github.com/openshift/images/pull/250)
* [Full changelog](https://github.com/openshift/images/compare/84d094b6d4256de219f083689cede80c6fce4e7a...0c565cdf7dd11f74bc3141cf1e53360eb8911aad)
### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/95da0604a3acd54890089a43dc8a200e43ba2ae1)
* UPSTREAM: <carry>: OCPBUGS-124587: vendor grpc v1.83.2 [#110](https://github.com/openshift/cloud-provider-kubevirt/pull/110)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/4b1124a8cfcb65556fe44fac4150c0e86640bb0b...95da0604a3acd54890089a43dc8a200e43ba2ae1)
### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/f7766b1dfeb414abdd7c4bee277e376283509ce6)
* [OCPBUGS-140018](https://issues.redhat.com/browse/OCPBUGS-140018): Propagate management-cluster provisioning failures from CreateVolume [#126](https://github.com/openshift/kubevirt-csi-driver/pull/126)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/ca0f399ff3423275c67a224418253a219c760a42...f7766b1dfeb414abdd7c4bee277e376283509ce6)
### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/7758b60dfa56ce1e952d24fa4a7be23b50913c26)
* [OCPBUGS-136332](https://issues.redhat.com/browse/OCPBUGS-136332): Fix flaky vSphere failure domain VAP e2e tests [#1591](https://github.com/openshift/machine-api-operator/pull/1591)
* [OCPBUGS-133742](https://issues.redhat.com/browse/OCPBUGS-133742): Raise machine API memory requests [#1595](https://github.com/openshift/machine-api-operator/pull/1595)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/b8adcaf38baf943f71777bacb7f977b422981552...7758b60dfa56ce1e952d24fa4a7be23b50913c26)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/81077fc6d41d526c08a780972b06162ca246e468)
* [OCPBUGS-61487](https://issues.redhat.com/browse/OCPBUGS-61487): Add timer for Azure VIP routes reconciliation [#5455](https://github.com/openshift/machine-config-operator/pull/5455)
* [OCPNODE-4842](https://issues.redhat.com/browse/OCPNODE-4842): Support kubelet tlsCurvePreferences [#6695](https://github.com/openshift/machine-config-operator/pull/6695)
* [SPLAT-3023](https://issues.redhat.com/browse/SPLAT-3023): test/extended: drop the MultiDiskSetup tag, skip on extenal topology [#6728](https://github.com/openshift/machine-config-operator/pull/6728)
* [MCO-2573](https://issues.redhat.com/browse/MCO-2573): MCNs should reflect user manual actions [#6682](https://github.com/openshift/machine-config-operator/pull/6682)
* [AGENT-1640](https://issues.redhat.com/browse/AGENT-1640): re-enable htpasswd auth on IRI registry [#6668](https://github.com/openshift/machine-config-operator/pull/6668)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/0d9b0b6fc76663bc50671ee966c6f79c74461730...81077fc6d41d526c08a780972b06162ca246e468)
### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/05c1e34ae6ba117aea375d69a17297c35d666af4)
* [OU-1489](https://issues.redhat.com/browse/OU-1489): remove cors wildcard [#1420](https://github.com/openshift/monitoring-plugin/pull/1420)
* [OCPBUGS-138695](https://issues.redhat.com/browse/OCPBUGS-138695): feat: upgrade vulnerable dependencies [#1421](https://github.com/openshift/monitoring-plugin/pull/1421)
* [OU-1306](https://issues.redhat.com/browse/OU-1306): add alert-management-api frontend client based on openapi spec [#1417](https://github.com/openshift/monitoring-plugin/pull/1417)
* [OU-1306](https://issues.redhat.com/browse/OU-1306): add state, matcher, and filter openapi definition [#1404](https://github.com/openshift/monitoring-plugin/pull/1404)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/57121469084c877941f7bb15aa102aad6d3b5a00...05c1e34ae6ba117aea375d69a17297c35d666af4)
### [must-gather](https://github.com/openshift/must-gather/tree/6b4d6857e4ad556d702582d7e739898cf7dfb4ca)
* [OCPBUGS-137965](https://issues.redhat.com/browse/OCPBUGS-137965): Updating ose-must-gather-container image to be consistent with ART for 5.1 [#577](https://github.com/openshift/must-gather/pull/577)
* [Full changelog](https://github.com/openshift/must-gather/compare/e2487964fe989e4147fc02cede01ea0bc8a6be7c...6b4d6857e4ad556d702582d7e739898cf7dfb4ca)
### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/3704db19dadfc8c352b6c44ef4db0d5028c5283b)
* [OCPNETUI-19](https://issues.redhat.com/browse/OCPNETUI-19): Service port builder and pod selector [#672](https://github.com/openshift/networking-console-plugin/pull/672)
* [OCPNETUI-212](https://issues.redhat.com/browse/OCPNETUI-212): Add Jest unit tests for topology and a Test workflow [#671](https://github.com/openshift/networking-console-plugin/pull/671)
* [OCPNETUI-190](https://issues.redhat.com/browse/OCPNETUI-190): Add port isolation support to LinuxBridge NAD form [#670](https://github.com/openshift/networking-console-plugin/pull/670)
* [OCPBUGS-41784](https://issues.redhat.com/browse/OCPBUGS-41784): Honor label selectors when searching Services [#673](https://github.com/openshift/networking-console-plugin/pull/673)
* maintenance: bump the npm group with 46 updates [#681](https://github.com/openshift/networking-console-plugin/pull/681)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/29caa5e403d0107a7da66bbe961047ed826a8ee9...3704db19dadfc8c352b6c44ef4db0d5028c5283b)
### [olm-catalogd](https://github.com/openshift/operator-framework-operator-controller/tree/41e8e7d432221679ef51d560393b100eff402907)
* [OPRUN-4784](https://issues.redhat.com/browse/OPRUN-4784): Synchronize From Upstream Repositories [#856](https://github.com/openshift/operator-framework-operator-controller/pull/856)
* [OPRUN-4784](https://issues.redhat.com/browse/OPRUN-4784), [OPRUN-4794](https://issues.redhat.com/browse/OPRUN-4794): Synchronize From Upstream Repositories [#852](https://github.com/openshift/operator-framework-operator-controller/pull/852)
* [OPRUN-4784](https://issues.redhat.com/browse/OPRUN-4784): Synchronize From Upstream Repositories [#850](https://github.com/openshift/operator-framework-operator-controller/pull/850)
* [OPRUN-4881](https://issues.redhat.com/browse/OPRUN-4881): Add object-controller downstream packaging [#849](https://github.com/openshift/operator-framework-operator-controller/pull/849)
* NO-ISSUE: Synchronize From Upstream Repositories [#848](https://github.com/openshift/operator-framework-operator-controller/pull/848)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/2af1706acc9c15f85e4b990aaae51cbc43de07a6...41e8e7d432221679ef51d560393b100eff402907)
### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/d9dccea4cbe605fef4760a7eea00fa140d381459)
* NO-ISSUE: Make OpenShift go-build-local work from either directory [#855](https://github.com/openshift/operator-framework-operator-controller/pull/855)
* [OPRUN-4784](https://issues.redhat.com/browse/OPRUN-4784): Synchronize From Upstream Repositories [#856](https://github.com/openshift/operator-framework-operator-controller/pull/856)
* [OPRUN-4784](https://issues.redhat.com/browse/OPRUN-4784), [OPRUN-4794](https://issues.redhat.com/browse/OPRUN-4794): Synchronize From Upstream Repositories [#852](https://github.com/openshift/operator-framework-operator-controller/pull/852)
* [OPRUN-4784](https://issues.redhat.com/browse/OPRUN-4784): Synchronize From Upstream Repositories [#850](https://github.com/openshift/operator-framework-operator-controller/pull/850)
* [OPRUN-4881](https://issues.redhat.com/browse/OPRUN-4881): Add object-controller downstream packaging [#849](https://github.com/openshift/operator-framework-operator-controller/pull/849)
* NO-ISSUE: Synchronize From Upstream Repositories [#848](https://github.com/openshift/operator-framework-operator-controller/pull/848)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/2af1706acc9c15f85e4b990aaae51cbc43de07a6...d9dccea4cbe605fef4760a7eea00fa140d381459)
### [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller/tree/4454ca1a5ba867fa883dd3bba43e82cfd2a37516)
* NO-JIRA: Update OWNERS_ALIASES [#29](https://github.com/openshift/openstack-resource-controller/pull/29)
* [Full changelog](https://github.com/openshift/openstack-resource-controller/compare/642037113b21f8b553ae449ed79888afd46cd006...4454ca1a5ba867fa883dd3bba43e82cfd2a37516)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/0a24f2d1e25cdd8b97518c781b2a05971f823b5c)
* NO-JIRA: DownStream Merge [11-09-2026] [#3621](https://github.com/openshift/ovn-kubernetes/pull/3621)
* [CNV-99195](https://issues.redhat.com/browse/CNV-99195): openshift: Activate mac-security tests with pods over layer2 topology [#3555](https://github.com/openshift/ovn-kubernetes/pull/3555)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/4df88b49aacd59fafcef9c48d8ba167e98817383...0a24f2d1e25cdd8b97518c781b2a05971f823b5c)
### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/e2b80aac4ec18723977f42bb1f7d7ae5ebe548e6)
* NO-ISSUE: [bot] Bump openshift/prom-label-proxy to v0.16.2 [#417](https://github.com/openshift/prom-label-proxy/pull/417)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/769aeb6a1dda2d71c5e91ea6cbb8d5f510821135...e2b80aac4ec18723977f42bb1f7d7ae5ebe548e6)
### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/d2fec61b151340ac930dfccc865bdfc3a78d1896)
* [OCPBUGS-126131](https://issues.redhat.com/browse/OCPBUGS-126131): bump grpc-go to v1.84.0 [#116](https://github.com/openshift/route-controller-manager/pull/116)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/a158fff7ce3826058bd2d7338b206cdd600d0d40...d2fec61b151340ac930dfccc865bdfc3a78d1896)
### [stream-coreos, stream-coreos-extensions](https://github.com/openshift/os/tree/66b5033223c6f1fc358ebad7a1ec9f9353cbec0f)
* [COS-5251](https://issues.redhat.com/browse/COS-5251): Nvidia - Add DOCA packages [#1982](https://github.com/openshift/os/pull/1982)
* [Full changelog](https://github.com/openshift/os/compare/286a9a3722a2544db7e4af7b7f85392c4bc53cf1...66b5033223c6f1fc358ebad7a1ec9f9353cbec0f)
### [tests](https://github.com/openshift/origin/tree/763824f2ddf6ec2f1adf0a5a73f2f931272285b6)
* [OPNET-595](https://issues.redhat.com/browse/OPNET-595): Add BGPBasedVIPManagement e2e tests and suites [#31893](https://github.com/openshift/origin/pull/31893)
* [ROSAENG-65766](https://issues.redhat.com/browse/ROSAENG-65766): Termination message policy grandfather [#31731](https://github.com/openshift/origin/pull/31731)
* NO-JIRA: Remove exception OCPBUGS-38663 [#31886](https://github.com/openshift/origin/pull/31886)
* [CNTRLPLANE-4846](https://issues.redhat.com/browse/CNTRLPLANE-4846): Migrate IR otp cases to e2e [#31800](https://github.com/openshift/origin/pull/31800)
* [OCPBUGS-136122](https://issues.redhat.com/browse/OCPBUGS-136122): commatrix: skip kube-apiserver-proxy haproxy DNS reso… [#31874](https://github.com/openshift/origin/pull/31874)
* [STOR-2801](https://issues.redhat.com/browse/STOR-2801): add e2e tests for volumeForceDetach ControllerManager config [#31833](https://github.com/openshift/origin/pull/31833)
* [CONSOLE-5209](https://issues.redhat.com/browse/CONSOLE-5209): Fix IngressComponentRouteLabels e2e tests for HCP compatibility [#31483](https://github.com/openshift/origin/pull/31483)
* NO-JIRA: Remove exception OCPBUGS-62629 [#31885](https://github.com/openshift/origin/pull/31885)
* NO-JIRA: e2e: move AdminKubeClient() from init to BeforeEach in router config_manager test [#31335](https://github.com/openshift/origin/pull/31335)
* [OCPBUGS-122213](https://issues.redhat.com/browse/OCPBUGS-122213): Sync journal before collecting reboot history in unexpected-reboots test [#31630](https://github.com/openshift/origin/pull/31630)
* NO-JIRA: Update security context test to accept unprivileged kms containers [#31881](https://github.com/openshift/origin/pull/31881)
* NO-JIRA: Exclude leader-change invariant from etcd certificate rotation [#31882](https://github.com/openshift/origin/pull/31882)
* [OCPCLOUD-3726](https://issues.redhat.com/browse/OCPCLOUD-3726): Ignore failed pulls of fake CVO upgrade image [#31876](https://github.com/openshift/origin/pull/31876)
* NO-JIRA: Harden etcd certificate rotation stabilization waits [#31863](https://github.com/openshift/origin/pull/31863)
* NO-JIRA: fix(security): read FIPS state from HostedCluster on HyperShift [#31288](https://github.com/openshift/origin/pull/31288)
* [OCPBUGS-122924](https://issues.redhat.com/browse/OCPBUGS-122924): Preserve default IngressController TLS profile during upgrade [#31647](https://github.com/openshift/origin/pull/31647)
* [Full changelog](https://github.com/openshift/origin/compare/77e3b03b1e5b8c26d91d2f27203e19bde2a2eefb...763824f2ddf6ec2f1adf0a5a73f2f931272285b6)