Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.21.0-okd-scos.ec.3

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next

Upgrades from:

• 4.21.0-okd-scos.ec.2 - Success
• 4.20.0-okd-scos.ec.16 (changes) - Success

---

Changes from 4.21.0-okd-scos.ec.2

Created: 2025-10-13 05:00:35 +0000 UTC

Image Digest: sha256:8511215e7c953d3a0697bee011dee820950383b6680e4e8fce30d64190ec6b2b

Release 4.21.0-okd-scos.ec.3 was created from registry.ci.openshift.org/origin/release-scos:4.21.0-0.okd-scos-2025-10-12-024505

Components

• Kubectl 1.33.3
• Kubernetes 1.33.5
• Kubernetes Tests 1.33.4
• CentOS Stream CoreOS upgraded from 10.0.20250827-0 to 10.0.20251003-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
IngressControllerLBSubnetsAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
SetEIPForNLBIngressController (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
VolumeAttributesClass (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ExternalOIDC (0 tests)	Enabled	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
EventTTL (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImagesCPMS (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

• aws-cloud-controller-manager git fa4e6bb7 sha256:5902ed13959cc1c57e74f4d35f1d6c2eb39b63101e002425928f8a958a76bcfa
• aws-karpenter-provider-aws git b37141b0 sha256:ed15db4b6b7c43c87ad94abe7c0cdd626e571e2abad6f35cddf233b9cc67e970
• aws-machine-controllers git d1cc300e sha256:c7218a1ec1bf984e835383d46ebb57d93a9f6a42c160cd440bc312e3e39e0a5d
• azure-cluster-api-controllers git 8bf9ae8f sha256:b50601c8c7b7bb084ea0d0da0063b716b39fd57aac826eb970ffc6b75d022f94
• azure-kms-encryption-provider git ea0b9944 sha256:e6f687946579d7c267b0d417d5b9b52a9b0f1c67852f4880cad1f73b3ea50538
• azure-workload-identity-webhook git 88b18175 sha256:fe46f70b141b7acfa56cf8b1e4749b979ad02680955bd66261a814cad6135d71
• cluster-bootstrap git 74abc555 sha256:624f1dafeb8fd50f322fb4d724e3dd48bd728a62bce25bccf2bf638d8e44122a
• cluster-capi-controllers git 68af6246 sha256:8d7e5c7dcfcd6f08554523995f0feca27bb84cd0f884b2eecc14cb1588f7434e
• cluster-cloud-controller-manager-operator git 2dc5d4b1 sha256:bc937e6472edd834171182762088ae430c4bc1829fddc47f63e37e1a23a01e47
• cluster-control-plane-machine-set-operator git 4f691883 sha256:23b2addef1f622cfdfa10a894b12a5dd7f6a6ba616ffde9fce9ed2a9990e844b
• cluster-kube-cluster-api-operator git 947329c6 sha256:de50aefb9765756e35d18e91ede7083a86ee85088c8fd747fa155331172d3270
• configmap-reloader git 2438d7c8 sha256:dfd5b4963fc075aca81fca06a0e158b9a893c5b3e33ad8934fbde6ffac096025
• console-operator git ca22e61b sha256:e610f88755b9eabeaadc56cea5e6d27d1f420b65826a3713ef31937cc3d22ca8
• container-networking-plugins git 184a9601 sha256:e4a74928a1f88cf31d6aefff1df02130896d1faaf1979ab69516c0eb3d52fef6
• containernetworking-plugins-microshift git 184a9601 sha256:f8e48842d709df62d007424f3480fad5eaf65124ebfb774dc4289229baa2b45d
• csi-external-snapshot-metadata git 24faebef sha256:f3d42bf02ea49bf4ac83862125f3b2ab916f46c11f0eb21870f8085371e737fd
• docker-builder git ff595e4b sha256:fac12e33a4ed3af69487fdbe45216c3cc1d5b3961418c531ba7f3037fe54af01
• docker-registry git a6bab654 sha256:d0241466a4b91001f4667836832124c4d898289da7403c81b8960c135ff6d494
• driver-toolkit git 5c53d757 sha256:21b4204c120af0d0d8c62d8302c453074ad7feae23465d95ea4a8982d062a0de
• egress-router-cni git 5e0f8d1b sha256:80dc87e4796746223b10d98d158748f2dcd2b1c7c814e0c480653b397ffcf4d9
• gcp-cloud-controller-manager git b27a2f9a sha256:4e338b9ba88f7ee527aae49f39224adb2fcc8ac4840963f27eba8f46a2c79c74
• gcp-cluster-api-controllers git 9a472586 sha256:915479d1a47097a4a7b18935ed3c77862f8f74a15aa2646663fb4ef46321cc6d
• gcp-pd-csi-driver-operator git ac94bf2a sha256:06f48e440dae5156116242ebac24d451fe3165b74fdeca4340039ae41a8d2327
• keepalived-ipfailover git 9fd8d256 sha256:4dce0468701e2bcdda1cd37b623cbd158baea317a8fc325fd0e23b519e999b4f
• kube-rbac-proxy git b9134351 sha256:e7b835885a3e788025e38fdf29cefa0538daa9d079f1d442e640439c64b6a794
• kubevirt-cloud-controller-manager git 3f4542ec sha256:87f6e8d89bf4a8d54e8252887fb7dc6d142260c2b972391a1d0504d295c01748
• kubevirt-csi-driver git 8b8dd30e sha256:75f981a73882b779aaf4610fb253082575effcacf5d9ddf70c5ac0088b84ffe9
• libvirt-machine-controllers git a336f0b5 sha256:5d880cc50c548cf65c63933af4e8f303928b75d6e3a2461f3e4f8a09668d5e4b
• machine-api-operator git d19bdda6 sha256:12a99385a01b9fe629f12f07f1aac3c625c1e242c5a8a1211169cee11404090c
• metallb-frr git fc0fe74f sha256:630bc6c4f6c5613da6ad68832c0a25c0627d6a6fb88bceac82b881784703ed7d
• multus-admission-controller git fc73c803 sha256:8985284e228e0a1a39a22ef5246d87f4051572ff6e0127e8a052793d594cacf0
• multus-cni git cf0f68ec sha256:56649b95f02d1307a6594cb5dc621da438e5456a659c96e8de68f29737ee6ee8
• multus-cni-microshift git cf0f68ec sha256:521e205e561c8e571f81f9a459f7237f1f1804792544175693069aac9979329c
• multus-networkpolicy git ef99d3d4 sha256:0c1e95cff1b6698d5fc6f9ae09fc4558a16ea40ac2a3dd07642bfa3a10f34f3e
• multus-route-override-cni git 391c1b03 sha256:f0e47a2ef77b276ce138e4beadd3526676d8d2326faacf2fb29bc5231a95bd75
• multus-whereabouts-ipam-cni git 43c89591 sha256:61a2432b5bb9142345ca1875e00945b3dc286377f1161e152c8c6d022a0762e0
• network-interface-bond-cni git dd3c4d0b sha256:07176729347dee31191330b57089e4f449b5576965cc92dab4c46e39670b6631
• network-metrics-daemon git b81340a9 sha256:cef415e1958bba34292728ff17b7bf7c8c5c61136f2c18e5e88a2308fce0442a
• nutanix-cloud-controller-manager git 4133bb44 sha256:f1123c5cc45199f127edf155f0dcbbf0a8171abb76905c1e899bdbb3ccb7f7f1
• nutanix-machine-controllers git a52efa51 sha256:82f343ebcad26ae5dc535f0db35738be442f7ec62871fcf530173814a973a211
• oauth-apiserver git 309dd461 sha256:1caa6a8ff24b64f00d7aeb104288127551f84ad1dbf68001bd90730dae2be77c
• oauth-proxy git 6649cb8a sha256:540c221947ff07fd29d8f08d1c63624e485792aebe6bb554cbc533d37c62165d
• oauth-server git 81098796 sha256:98ddb409da2fdb2f05203d03edf65c96112d03afb555b0a67b419b9fe70400ae
• openshift-apiserver git da87a341 sha256:f8c5c4bbe376bac30ab8463b18835a6042e858154244533fadcc1fc3f2c39060
• openshift-controller-manager git 15fc552a sha256:3153e56f4d52a461c0b68d223074ce48566a478653f8df4609d40a31e20dcbff
• openstack-machine-api-provider git 5085f184 sha256:3f7b0841977937be12a81235528c854d47940d574bdc33e0250fa792cae4bc16
• openstack-resource-controller git bf0d2c88 sha256:a3aac8631ada525fd9270ead11c19ce9900b2272d72f74f96a9fecf1a0888c52
• powervs-block-csi-driver git 791e12ab sha256:74aeb6078a673899f9bddc3b80a92cd92d1de02b3e101c7d91711f7092eef930
• powervs-machine-controllers git f011b3c7 sha256:bafb20acdaea477bf4a34c580a164d0f699f60788e9c4cab6be1b546011cd310
• prometheus-node-exporter git e72c0718 sha256:811b84df00cb22a422564d2eb1fc42a2790649df78ae89a5b01cf579d0e7e204
• service-ca-operator git a40d9a8e sha256:ec21ba482cca32f47e046910a42e411336134e91e2e7cf3822e9944daa4dd3bd
• telemeter git 0634eee9 sha256:2a8c3c3479d562bb25874306d87b0f4feffca15a3ede124a6c5ee8d9e02b4c6e
• thanos git 6ea20ffa sha256:68a80909e96ff0b963c19a5fc1cc4bf8436293c212240c7ad77f458b32e48b58
• vsphere-cloud-controller-manager git f87b89c2 sha256:435cc36be670918096e4ef60328b6d76a71923377f2e925ca16258f28464f5d3
• vsphere-cluster-api-controllers git d5badc08 sha256:1936b1f4ee1bf6e64e139255532b86df26cc128036890bde16c143106fe5d8ec
• vsphere-csi-driver git 133442c2 sha256:48087d7b0d63f69d60dfd7065fb7bf3a181c0bd68a881a5e7dcabfafc544fb58
• vsphere-csi-driver-syncer git 133442c2 sha256:c727612768f1497c13c7dc1fbd054e5109178f515337df7f2c2b83fb341e7eb9

agent-installer-api-server

• NO-ISSUE: [master] Bump OCP versions: 4.19 #8095
• NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.19, 4.18 #8089
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• NO-ISSUE: Update Konflux references #1283
• Full changelog

agent-installer-utils

• OCPBUGS-62958: Update Konflux references #168
• OCPBUGS-62905: Dockerfile cleanup #174
• OCPBUGS-62347: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.21 #165
• OCPBUGS-62704: remove hardcoded versions from iso_builder #171
• AGENT-1336: Add release label to build #170
• OCPBUGS-62646: Update Konflux references #167
• OCPBUGS-62645: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 0697723 #146
• Full changelog

apiserver-network-proxy

• OCPBUGS-62355: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.21 #86
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-62540: Updating ose-aws-cluster-api-controllers-container image to be consistent with ART for 4.21 #575
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-62380: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.21 #292
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-62374: Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.21 #437
• MULTIARCH-5554: update smb-csi-driver-operator support to add ppc64le #428
• OCPBUGS-62427: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.21 #439
• OCPBUGS-62348: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.21 #436
• OCPBUGS-61955: Add withCABundleDaemonSetHook() to AWS EFS operator #433
• Full changelog

aws-pod-identity-webhook

• OCPBUGS-62587: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.21 #206
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-62392: Updating ose-azure-cloud-node-manager-container image to be consistent with ART for 4.21 #150
• Full changelog

azure-disk-csi-driver

• NO-JIRA: Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.21 #110
• Full changelog

azure-file-csi-driver

• OCPBUGS-62547: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.21 #106
• Full changelog

azure-machine-controllers

• OCPBUGS-62335: Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.21 #163
• Full changelog

azure-service-operator

• OCPBUGS-62368: Updating ose-azure-service-operator-container image to be consistent with ART for 4.21 #13
• Full changelog

baremetal-cluster-api-controllers

• OCPBUGS-62565: Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.21 #53
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-62125: baremetal: set baremetalhost architecture #9987
• OCPBUGS-60752: Add MTU validation for networkConfig #9919
• OCPBUGS-62907: AGENT-1269: Use agent-installer-ui image from release #9995
• OCPBUGS-62430: None: Allow IPv6 Primary DualStack installs on platforms None and External #9983
• OCPBUGS-41567: Clean up baremetal bootstrap systemd dependencies #8986
• OCPBUGS-62452: Updating ose-installer-container image to be consistent with ART for 4.21 #9980
• OCPBUGS-62471: Updating ose-baremetal-installer-container image to be consistent with ART for 4.21 #9981
• OCPBUGS-60538: Update assisted-service dependencies #9956
• CORS-4256: Add PSC Endpoint to the installconfig #9991
• OCPBUGS-62514: Updating ose-installer-artifacts-container image to be consistent with ART for 4.21 #9984
• SPLAT-2511: vSphere - do not block on vSphere >7.0.2, allow 9 #9963
• CORS-4078: allow toggling AWS client logging #9976
• OCPBUGS-62363: Set agent-extract-tui start timeout #9975
• Full changelog

baremetal-operator

• OCPBUGS-61349, OCPBUGS-62112: Merge upstream #432
• OCPBUGS-62460: Updating ose-baremetal-operator-container image to be consistent with ART for 4.21 #433
• Full changelog

baremetal-runtimecfg

• OCPBUGS-62581: Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.21 #370
• Full changelog

cli, cli-artifacts, deployer, tools

• NO-JIRA: adm upgrade status: capture testcase for OCPBUGS-60768 #2081
• OCPBUGS-62445: prevent crash when rootDeviceHints format is invalid #2109
• NO-JIRA: Update shellescape and sspi to newer versions #2116
• NO-JIRA: Remove myself from update approvers, add Hongkai #2112
• OCPBUGS-62550: Updating ose-cli-artifacts-container image to be consistent with ART for 4.21 #2111
• OCPBUGS-61491: Update code to retrieve ICSP instead of ICP #2095
• OCPBUGS-62362: Updating ose-tools-container image to be consistent with ART for 4.21 #2108
• OCPBUGS-62548: Updating openshift-enterprise-deployer-container image to be consistent with ART for 4.21 #2110
• Full changelog

cloud-credential-operator

• OCPBUGS-62495: Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.21 #923
• Full changelog

cloud-network-config-controller

• OCPBUGS-62437: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.21 #181
• Full changelog

cluster-autoscaler-operator

• AUTOSCALE-244: Allow cluster-operator service account to patch machinesets/scale subresource #352
• Full changelog

cluster-baremetal-operator

• OCPBUGS-61477: Enable runtime extraction of aarch64 images #508
• OCPBUGS-62577: Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 4.21 #507
• Full changelog

cluster-capi-operator

• OCPCLOUD-2995: Machine status conversion and syncing #365
• NO-JIRA: hack/test.sh use eval for starting ginkgo so GINKO_EXTRA_ARGS having whitespaces works #380
• OCPCLOUD-2641: Validate creation of Machine API Machines #368
• OCPBUGS-62620: kubeconfig controller: do not error on token secret not yet populated #373
• NO-JIRA: lint: add aliases for machine api’s and controller-runtime log #367
• OCPCLOUD-2992: refactor: split machine migration testing into multiple files #364
• NO-JIRA: machine_sync: assorted fixes #370
• Full changelog

cluster-config-api

• CNTRLPLANE-1614: add event-ttl feature gate #2525
• : promote InsightConfigAPI and OnDemandDataGather to v1 #2448
• Switch to slices stable sort on manifest merging #2524
• Use separate serialization linting config for Machine API provider types #2522
• Add initial AI api-review configuration #2489
• Support AMD SEV-SNP on AWS #2424
• MCO-1805: MCO-1806: Add ManagedBootImagesCPMS feature gate & CPMS type to ManagedBootImages API #2396
• OCPBUGS-62482: Updating ose-cluster-config-api-container image to be consistent with ART for 4.21 #2513
• OCPBUGS-55649: Remove SetEIPForNLBIngressController feature gate #2501
• OCPBUGS-61382, STOR-2533: move VolumeAttributesClass to GA #2471
• Promote BYO OIDC features #2454
• OCPBUGS-55673: Remove IngressControllerLBSubnetsAWS featuregate #2400
• Full changelog

cluster-config-operator

• OCPBUGS-62330: Updating ose-cluster-config-operator-container image to be consistent with ART for 4.21 #450
• Full changelog

cluster-etcd-operator

• NO-JIRA: use scrapeClass for service monitors #1497
• NO-JIRA: add runbook urls for alerting rules #1496
• NO-JIRA: feat: update the ip parsing for the nodes #1479
• OCPEDGE-2183: Updating Quorum detection logic to absolve TNF of quorum loss reports. #1483
• NO-JIRA: remove etcd-backup-server from static pod lists #1492
• CNTRLPLANE-1315: Add OpenShift Tests Extension (OTE) for cluster-etcd-operator #1488
• OCPBUGS-62518: Updating cluster-etcd-operator-container image to be consistent with ART for 4.21 #1489
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

cluster-image-registry-operator

• OCPBUGS-62573: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.21 #1256
• Full changelog

cluster-ingress-operator

• OCPBUGS-43919: desiredWildcardDNSRecord: Check for nil LB field #1189
• OCPBUGS-62400: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.21 #1286
• NE-1334: Script to install ossm pre-release operator and run GWAPI e2e tests #1283
• Full changelog

cluster-kube-apiserver-operator

• OCPNODE-3758: alpha/beta apis for DRA should not be enabled in 1.34 #1932
• OCPBUGS-60045: Bump library-go to latest master #1928
• OCPBUGS-62450: Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.21 #1931
• NO-JIRA: Add priority field to prevent early shutdown #1915
• NO-ISSUE: Use scrapeClass for service monitors #1930
• Full changelog

cluster-kube-controller-manager-operator

• NO-ISSUE: Use scrapeClass for service monitors #880
• OCPBUGS-62408: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.21 #885
• Full changelog

cluster-kube-scheduler-operator

• CNTRLPLANE-1544: Enable user namespace for the operator #580
• OCPBUGS-62609: Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART for 4.21 #579
• NO-ISSUE: Use scrapeClass for service monitors #578
• Full changelog

cluster-kube-storage-version-migrator-operator

• OCPBUGS-62444: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.21 #132
• Full changelog

cluster-machine-approver

• OCPBUGS-62583: NO-JIRA: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.21 #277
• Full changelog

cluster-monitoring-operator

• NO-ISSUE: Update jsonnet dependencies #2696
• OCPBUGS-62160: Remove AlertManager endpoints when disabled #2684
• NO-JIRA: [bot] Synchronize versions of the downstream components #2703
• MON-4395: Bump prometheus-operator to v0.86.0 #2698
• NO-ISSUE: set openshift-state-metrics as default container #2693
• OCPBUGS-61661: Remove cluster from non-multicluster dashboards #2679
• MON-4384: adding Blackwell GPU device to accelerators configmap #2689
• NO-ISSUE: chore: remove image locations in assets #2683
• NO-ISSUE: [bot] Update jsonnet dependencies #2687
• NO-ISSUE: chore: remove mentions of prometheus Adapter #2682
• Full changelog

cluster-network-operator

• OCPBUGS-54806: Add recording rules for UDN telemetry #2697
• OCPBUGS-61215: Tweak iptables-alerter to try to avoid crictl bug #2802
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-62835: E2E: llc: make sure to remove any trailing newspaces #1407
• OCPBUGS-62153: E2E: skip SMT disabled test when L3 cache spans entire NUMA node #1397
• OCPBUGS-62605: e2e: refactor GetSMTLevel to remove Gomega assertions #1399
• OCPBUGS-62578: Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.21 #1391
• Full changelog

cluster-olm-operator

• NO-ISSUE: Remove conditionals for cp-manifests use #142
• OPRUN-4079: Use helm to generate manifests #140
• Full changelog

cluster-openshift-apiserver-operator

• OCPBUGS-62500: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.21 #626
• Full changelog

cluster-openshift-controller-manager-operator

• CNTRLPLANE-1307: set up openshift-tests-extension for cluster-openshift-controller-manager-operator and add a sanity test #395
• Full changelog

cluster-policy-controller

• OCPBUGS-62440: Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.21 #169
• Full changelog

cluster-samples-operator

• OCPBUGS-62409: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.21 #651
• Full changelog

cluster-storage-operator

• OCPBUGS-60637: remove static value for runAsUser in securityContext #619
• OCPBUGS-62421: Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.21 #624
• OCPBUGS-62172: Add app label to Manila deployment #628
• OCPBUGS-61112: add Azure Disk CSI driver SA name to CredentialsRequest #618
• Full changelog

cluster-version-operator

• OCPBUGS-61872: Add ClusterVersionOperator manifests to TechPreviewNoUpgrade clusters #1232
• OCPBUGS-62861: temporarily disable metrics auth for hypershift clusters #1243
• OTA-1627: pkg/cincinnati: Centralize release metadata parsing #1231
• NO-JIRA: Move myself to emeritus #1239
• Full changelog

console

• OCPBUGS-62947: bump dompurify to latest #15586
• CONSOLE-4819: Migrate container-security to dynamic #15565
• CONSOLE-4602: Migrate enzyme “packages/console-app” unit tests to React Testing Library #15514
• OCPBUGS-60603: Add bearer token file configuration to oc-environment script #15521
• OCPBUGS-62315: Correct the width of the cluster config toolbar filter input #15546
• CONSOLE-4795, CONSOLE-4797, CONSOLE-4801: Migrate some static extensions to dynamic #15552
• CONSOLE-4804: Migrate TopologyCreateConnector to dynamic #15549
• CONSOLE-4800: Migrate HorizontalNavTab to dynamic #15553
• OCPBUGS-59529: Prevent the topology context menu items from truncating #15524
• CONSOLE-4798: Migrate StorageClassProvisioner to dynamic #15550
• OPRUN-4086: Add ClusterCatalog controller #15466
• NO-JIRA: chore(OWNERS): remove Mylanos from OWNERS #15559
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• NO-JIRA: shiftstack: Update OWNERS #353
• Full changelog

csi-driver-nfs

• NO-JIRA:shiftstack: Update OWNERS #162
• OCPBUGS-62509: Updating csi-driver-nfs-container image to be consistent with ART for 4.21 #161
• Full changelog

csi-external-provisioner

• OCPBUGS-62541: Updating csi-provisioner-container image to be consistent with ART for 4.21 #116
• Full changelog

csi-external-resizer

• OCPBUGS-62504: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.21 #178
• OCPBUGS-61547: Requeue PVC over PV creation #173
• Full changelog

csi-external-snapshotter, csi-snapshot-controller

• OCPBUGS-62423: Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.21 #188
• Full changelog

csi-livenessprobe

• OCPBUGS-62403: Updating csi-livenessprobe-container image to be consistent with ART for 4.21 #77
• Full changelog

csi-node-driver-registrar

• OCPBUGS-60108: update log level verbosity to not clutter logs #86
• OCPBUGS-62506: Updating csi-node-driver-registrar-container image to be consistent with ART for 4.21 #85
• Full changelog

etcd, installer-etcd-artifacts

• OCPBUGS-62338: Updating ose-etcd-container image to be consistent with ART for 4.21 #342
• Full changelog

gcp-machine-controllers

• OCPBUGS-62520: Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 4.21 #130
• Full changelog

gcp-pd-csi-driver

• Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.21 #84
• Full changelog

gcp-workload-identity-federation-webhook

• OCPBUGS-62591: Updating gcp-workload-identity-federation-webhook-container image to be consistent with ART for 4.21 #10
• Full changelog

haproxy-router

• OCPBUGS-62501: Updating ose-haproxy-router-base-container image to be consistent with ART for 4.21 #679
• OCPBUGS-62555: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.21 #680
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• OCPBUGS-62608: Updating openshift-enterprise-pod-container image to be consistent with ART for 4.21 #2481
• OCPBUGS-60610: UPSTREAM: 134199: Promote regression-issue-74839 to 1.4 #2472
• OCPBUGS-43994: UPSTREAM: <carry>: kube-apiserver: wire through isTerminating into handler chain #2477
• Full changelog

hypershift

• CNTRLPLANE-1484: Expose cluster autoscaler metrics in HCP #6902
• CNTRLPLANE-1582: Prevent azure cluster destroy command from deleting managed/main resource group #6956
• CNTRLPLANE-1543: fix(aws): use clean image for placeholder nodes #6935
• CNTRLPLANE-1468: feat(install): add command line argument for ImagePullPolicy configuration #6875
• NO-JIRA: feat(claude): add e2e-analyze command for CI failure analysis #6737
• CNTRLPLANE-1374: feat(azure): add setup scripts for self-managed Azure hosted clusters #6752
• NO-JIRA: chore(ai): configure all agents to inherit model configuration #6906
• CNTRLPLANE-1332: docs(azure): add self-managed Azure HyperShift overview guide #6948
• CNTRLPLANE-1432: Make PSA test conditional on OpenShiftPodSecurityAdmission feature gate #6923
• CNTRLPLANE-1581: feat(azure): relax API to make externalDNS optional for self-managed clusters #6951
• OCPBUGS-62446: fix(hcco): add retry mechanism for HCP retrieval to handle transient connectivity issues #6918
• NO-JIRA: docs(jira-solve): require godoc comments and unit tests for new functions #6957
• OCPBUGS-60637: feat(cpo): add UID security context to CSO deployment #6786
• OCPBUGS-62407: chore(build): update container images to 4.21 #6936
• NO-JIRA: Add openstack-reviewers, openstack-approvers #6911
• GCP-96: add GCPPlatform feature gate #6929
• CNTRLPLANE-1332: docs(readme): correct spelling mistake #6943
• CNTRLPLANE-1332: docs(azure): add self-managed cluster setup documentation #6808
• OCPBUGS-61245: Fix driver-config ConfigMap content flapping due to random ordering #6907
• CNTRLPLANE-1545: docs(commands): improve jira-solve command with logical commit organization #6937
• NO-JIRA: chore(ci): update Konflux Tekton tasks to latest trusted versions #6928
• OCPBUGS-62328: Add missing svc-kubeconfig mount to CAPO Deployment #6909
• OCPBUGS-62324: Fix test-e2e annotations flag parsing #6908
• AUTOSCALE-322: fix karpenter token secret leak #6790
• CNTRLPLANE-980: feat(api): add hc.status.configuration.authentication status field #6261
• NO-JIRA: fix(e2e): extend ValidateHostedClusterConditions timeout #6913
• Full changelog

ibm-cloud-controller-manager

• OCPBUGS-62342: Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART for 4.21 #86
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-62486: Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.21 #130
• Full changelog

ibmcloud-machine-controllers

• OCPBUGS-62491: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.21 #71
• Full changelog

insights-operator

• CCXDEV-15551: Decouple CRD storage specs #1157
• OCPBUGS-60870: The Gather Job did not check the current configuration before running #1154
• Full changelog

insights-runtime-exporter, insights-runtime-extractor

• OCPBUGS-62433: Updating ose-insights-runtime-extractor-container image to be consistent with ART for 4.21 #54
• Full changelog

ironic-agent

• OCPBUGS-62329: Updating ironic-agent-container image to be consistent with ART for 4.21 #197
• Full changelog

ironic-machine-os-downloader

• OCPBUGS-62357: Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.21 #107
• Full changelog

ironic-static-ip-manager

• OCPBUGS-62511: Updating ironic-static-ip-manager-container image to be consistent with ART for 4.21 #54
• Full changelog

kube-metrics-server

• OCPBUGS-62397: Updating ose-kube-metrics-server-container image to be consistent with ART for 4.21 #47
• Full changelog

kube-state-metrics

• OCPBUGS-62356: Updating kube-state-metrics-container image to be consistent with ART for 4.21 #125
• Full changelog

kube-storage-version-migrator

• OCPBUGS-62566: Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.21 #234
• Full changelog

machine-config-operator

• OCPNODE-3747: Disable Swap mode in Kubelet and enable drop-in directory #5294
• OCPEDGE-2188: embed fencing validator into TNF MCO #5285
• NO-JIRA: shiftstack: Update OWNERS #5334
• OCPBUGS-62510: Skip rpm-ostree local rebase if no PIS #5333
• OCPBUGS-62493: Only fire OSImageURLOverridden and set metrics on changes #5319
• MCO-1844: Remove MissingMachineConfig Alert #5261
• MCO-1685: Add mco-sanitize utility main logic #5303
• OCPBUGS-59968: Cert Controller should live fetch SAN IPs during cert rotation #5245
• OCPBUGS-62341: Ensure the node passed to RunCordonOrUncordon comes from the latest updated state #5305
• OCPBUGS-60805: configure-ovs: work around a Cisco switch issue #5274
• Full changelog

machine-image-customization-controller

• METAL-1564: Use available images #147
• OCPBUGS-62505: Updating ose-image-customization-controller-container image to be consistent with ART for 4.21 #148
• Full changelog

machine-os-images

• OCPBUGS-61477: Acquire aarch64 ISO at runtime #67
• OCPBUGS-56049: Force rebuild for OCP 4.21 #66
• OCPBUGS-62596: Updating ose-machine-os-images-container image to be consistent with ART for 4.21 #69
• Full changelog

monitoring-plugin

• OU-1011: Display determistic start and end dates #585
• OU-999: automation monitoring plugin image injection and kubevirt installation cleanup working #590
• OCPBUGS-62276: allow additional TLS config #580
• OCPBUGS-62454: Updating monitoring-plugin-container image to be consistent with ART for 4.21 #566
• OU-1011: Render short-lived incidents and alerts #581
• OU-1016: avoid displaying stale alerts data when selecting another incident detail #573
• OBSINTA-789: Sort alerts by start time #577
• NO-JIRA: fix handle empty queries when removing incident filters #574
• NO-JIRA: Fix tooltip vertical position #576
• OU-986: automation removing uncaught exception #575
• OBSINTA-789: Fix alert loading and processing #569
• OU-1025: keep alerts populated for the incident, when the graph is hidden… #572
• NO-JIRA: chore: add unit test command and dependencies #571
• OBSINTA-857: Cypress add SKIP_ALL_INSTALL #568
• Full changelog

must-gather

• OSSM-10530: add Istio/Gateway API gather scripts #503
• OCPBUGS-62551: Updating ose-must-gather-container image to be consistent with ART for 4.21 #507
• Full changelog

network-tools

• NO-JIRA:Add two new team members #163
• Full changelog

networking-console-plugin

• CNV-61569: Mark OVN K8s secondary localnet as deprecated #282
• OCPBUGS-62442: Updating networking-console-plugin-container image to be consistent with ART for 4.21 #279
• Full changelog

oc-mirror

• OCPBUGS-56398: Removes the clean up of logs directory #1289
• OCPBUGS-62478: Updating oc-mirror-plugin-container image to be consistent with ART for 4.21 (missing files of pr 1280) #1283
• OCPBUGS-62478: Updating oc-mirror-plugin-container image to be consistent with ART for 4.21 #1280
• Full changelog

olm-catalogd, olm-operator-controller

• OPRUN-4156: UPSTREAM: <carry>: support webhook case in disconnected #508
• NO-ISSUE: Synchronize From Upstream Repositories #512
• OPRUN-4176: Update does-not-exist and simple install to work i… #510
• NO-ISSUE: Clean up cp-manifests #511
• NO-ISSUE: Synchronize From Upstream Repositories #506
• NO-ISSUE: UPSTREAM: <carry>: check kubeconfig only run-test and run-suite #507
• NO-ISSUE: Fix VERSION replacement in catalog bindata #505
• NO-ISSUE: Synchronize From Upstream Repositories #498
• OCPBUGS-62753: for incompatible test add func to wait SA creation #501
• NO-ISSUE: Synchronize From Upstream Repositories #497
• OPRUN-4169: OTE building controller image #483
• OPRUN-4080: Remove kustomize manifests from images and repo #494
• Full changelog

openshift-state-metrics

• OCPBUGS-62431: Updating openshift-state-metrics-container image to be consistent with ART for 4.21 #126
• Full changelog

openstack-cluster-api-controllers

• NO-JIRA: Fix internal vendoring #378
• NO-JIRA: shiftstack: Update OWNERS #377
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-42303, OCPBUGS-56783: DownStream Merge [10-08-2025] #2790
• OCPBUGS-62574: Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.21 #2756
• OCPBUGS-60468: DownStream Merge [09-23-2025] #2762
• Full changelog

powervs-cloud-controller-manager

• OCPBUGS-62515: Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART for 4.21 #88
• Full changelog

prom-label-proxy

• OCPBUGS-62508: Updating prom-label-proxy-container image to be consistent with ART for 4.21 #386
• Full changelog

prometheus

• NO-JIRA: update Prometheus to v3.6.0 #277
• OCPBUGS-62401: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.21 #274
• Full changelog

prometheus-alertmanager

• OCPBUGS-62428: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.21 #107
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• MON-4395: Bump openshift/prometheus-operator to v0.86.0 #344
• OCPBUGS-62448: Updating prometheus-config-reloader-container image to be consistent with ART for 4.21 #341
• OCPBUGS-62542: Updating prometheus-operator-container image to be consistent with ART for 4.21 #342
• Full changelog

route-controller-manager

• OCPBUGS-62586: Updating ose-route-controller-manager-container image to be consistent with ART for 4.21 #65
• NE-2169: Move annotations and metrics to a constants file #66
• Full changelog

stream-coreos, stream-coreos-extensions

• NO-JIRA: update the okd repo for 4.21 #1862
• NO-JIRA: OWNERS: switch to joelcapitao #1861
• NO-JIRA: bump version to 4.21 #1860
• Full changelog

tests

• NO-JIRA: generate unique namespace names for UDN tests #30348
• NO-JIRA: update namespace privilege check to use PSA label #30355
• OCPBUGS-56281: gatewayapicontroller: Clean up resources when done #29900
• NO-JIRA: another attempt at disabling blank issues #30369
• NO-JIRA: Make it clear that we do not monitor GH issues #30368
• NO-JIRA: Update OWNERS for compat_otp #30361
• NO-ISSUE: Add webhook image for the olmv1 tests #30356
• OTA-1637: ClusterOperators should not go Progressing only for cluster scaling #30297
• OCPBUGS-60593: Skip oauth test for external control plane topology #30200
• TRT-2351: Revert “NO-JIRA: Improve case execution time” #30363
• TRT-2349: Revert “make TLS registry tests required” #30358
• OCPNODE-3238: Add SigstoreImageVerificationPKI image policy validation tests #30315
• TRT-2346: Fix not initializing adminRESTConfig #30345
• OCPBUGS-60853: make TLS registry tests required #29074
• TRT-1854: remove upstream annotation framework #30340
• NO-JIRA: Filter preconfiguredIPs based on cluster IP family support #30338
• NO-JIRA: Improve case execution time #30329
• CORENET-6363: Add PreconfiguredUDNAddresses duplicate IP detection tests #30197
• OCPBUGS-62701: Revert TRT-1854: remove upstream annotation framework #30337
• Revert “Revert “NO-JIRA: Add olm into the known operator set”” #30325
• NO-JIRA: BugFix- don’t modify finalArgs in Template func #30328
• OCPNODE-3659: Not fail upgrade checks if all nodes are ready #30318
• OCPBUGS-62249: Tweak Endpoints admission test for upcoming change #30304
• MCO-1828: Remove pathological test in disruptive #30272
• OCPBUGS-61196: Add test that the ServiceCIDR API is blocked #30234
• NO-JIRA: oc adm upgrade status: Skip test in multihop update jobs #30150
• MCO-1865: Update MCO tests to be in only one test suite each #30309
• OCPBUGS-62474: CNTRLPLANE-1308: Enable OTE for OCM and OCM Operator #30270
• TRT-1854: remove upstream annotation framework #30305
• Full changelog

volume-data-source-validator

• OCPBUGS-62367: Updating volume-data-source-validator-container image to be consistent with ART for 4.21 #5
• Full changelog

vsphere-problem-detector

• OCPBUGS-62595: Updating ose-vsphere-problem-detector-container image to be consistent with ART for 4.21 #191
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Package List

• cri-o-1.34.0-1.el10s
• kernel-6.12.0-136.el10
• openshift-kubelet-4.21.0-202510080354.p2.g00e7ec7.assembly.stream.el9
• systemd-257-13.el10

Full list (575 packages)

• NetworkManager-1:1.55.4-1.el10
• NetworkManager-cloud-setup-1:1.55.4-1.el10
• NetworkManager-libnm-1:1.55.4-1.el10
• NetworkManager-ovs-1:1.55.4-1.el10
• NetworkManager-tui-1:1.55.4-1.el10
• WALinuxAgent-udev-2.13.1.1-2.el10
• aardvark-dns-2:1.16.0-2.el10
• acl-2.3.2-4.el10
• adcli-0.9.2-9.el10
• afterburn-5.9.0-1.el10
• afterburn-dracut-5.9.0-1.el10
• alternatives-1.30-2.el10
• amd-gpu-firmware-20250812-19.el10
• amd-ucode-firmware-20250812-19.el10
• atheros-firmware-20250812-19.el10
• attr-2.5.2-5.el10
• audit-4.0.3-4.el10
• audit-libs-4.0.3-4.el10
• audit-rules-4.0.3-4.el10
• authselect-1.5.0-8.el10
• authselect-libs-1.5.0-8.el10
• avahi-libs-0.9~rc2-2.el10
• basesystem-11-22.el10
• bash-5.2.26-6.el10
• bash-completion-1:2.11-16.el10
• bind-libs-32:9.18.33-5.el10
• bind-license-32:9.18.33-5.el10
• bind-utils-32:9.18.33-5.el10
• binutils-2.41-58.el10
• binutils-gold-2.41-58.el10
• bootc-1.8.0-1.el10
• bootupd-0.2.28-2.el10
• brcmfmac-firmware-20250812-19.el10
• bsdtar-3.7.7-4.el10
• bubblewrap-0.10.0-3.el10
• bzip2-1.0.8-25.el10
• bzip2-libs-1.0.8-25.el10
• c-ares-1.25.0-6.el10
• ca-certificates-2024.2.69_v8.0.303-102.3.el10
• catatonit-5:0.2.1-1.el10
• centos-gpg-keys-10.0-11.el10
• centos-release-cloud-1-1.el10s
• centos-release-nfv-common-1-5.el10s
• centos-release-virt-common-1-1.el10s
• centos-stream-release-10.0-11.el10
• centos-stream-repos-10.0-11.el10
• checkpolicy-3.9-1.el10
• chrony-4.6.1-2.el10
• cifs-utils-7.2-1.el10
• cirrus-audio-firmware-20250812-19.el10
• clevis-21-8.el10
• clevis-dracut-21-8.el10
• clevis-luks-21-8.el10
• clevis-pin-tpm2-0.5.3-8.el10
• clevis-systemd-21-8.el10
• cloud-utils-growpart-0.33-11.el10
• composefs-1.0.8-1.el10
• composefs-libs-1.0.8-1.el10
• conmon-3:2.1.13-1.el10
• conmon-rs-0.6.6-2.el10s
• console-login-helper-messages-0.21.3-10.el10
• console-login-helper-messages-issuegen-0.21.3-10.el10
• console-login-helper-messages-profile-0.21.3-10.el10
• container-selinux-4:2.241.0-1.el10
• containers-common-5:0.64.0-4.el10
• containers-common-extra-5:0.64.0-4.el10
• coreos-installer-0.24.0-1.el10
• coreos-installer-bootinfra-0.24.0-1.el10
• coreutils-9.5-6.el10
• coreutils-common-9.5-6.el10
• cpio-2.15-3.el10
• cracklib-2.9.11-8.el10
• cracklib-dicts-2.9.11-8.el10
• cri-o-1.34.0-1.el10s
• cri-tools-1.34.0-2.el10s
• criu-3.19-9.el10
• criu-libs-3.19-9.el10
• crun-1.24-1.el10
• crypto-policies-20250905-2.gitc7eb7b2.el10
• crypto-policies-scripts-20250905-2.gitc7eb7b2.el10
• cryptsetup-2.8.1-1.el10
• cryptsetup-libs-2.8.1-1.el10
• curl-8.12.1-2.el10
• cyrus-sasl-gssapi-2.1.28-27.el10
• cyrus-sasl-lib-2.1.28-27.el10
• dbus-1:1.14.10-5.el10
• dbus-broker-36-4.el10
• dbus-common-1:1.14.10-5.el10
• dbus-libs-1:1.14.10-5.el10
• dbus-tools-1:1.14.10-5.el10
• device-mapper-10:1.02.206-3.el10
• device-mapper-event-10:1.02.206-3.el10
• device-mapper-event-libs-10:1.02.206-3.el10
• device-mapper-libs-10:1.02.206-3.el10
• device-mapper-multipath-0.9.9-12.el10
• device-mapper-multipath-libs-0.9.9-12.el10
• device-mapper-persistent-data-1.1.0-2.el10
• diffutils-3.10-8.el10
• dmidecode-1:3.6-3.el10
• dnf-4.20.0-18.el10
• dnf-data-4.20.0-18.el10
• dnsmasq-2.90-4.el10
• dosfstools-4.2-12.el10
• dracut-107-3.el10
• dracut-network-107-3.el10
• dracut-squash-107-3.el10
• duktape-2.7.0-10.el10
• e2fsprogs-1.47.1-4.el10
• e2fsprogs-libs-1.47.1-4.el10
• efi-filesystem-6-6.el10
• efibootmgr-18-8.el10
• efivar-libs-39-3.el10
• elfutils-debuginfod-client-0.193-1.el10
• elfutils-default-yama-scope-0.193-1.el10
• elfutils-libelf-0.193-1.el10
• elfutils-libs-0.193-1.el10
• erofs-utils-1.8.10-1.el10
• ethtool-2:6.15-2.el10
• expat-2.7.1-1.el10
• file-5.45-8.el10
• file-libs-5.45-8.el10
• filesystem-3.18-17.el10
• findutils-1:4.10.0-5.el10
• firewalld-filesystem-2.3.1-1.el10
• flashrom-1.3.0-8.el10
• flatpak-session-helper-1.16.0-6.el10
• fstrm-0.6.1-12.el10
• fuse-common-3.16.2-5.el10
• fuse-libs-2.9.9-25.el10
• fuse3-3.16.2-5.el10
• fuse3-libs-3.16.2-5.el10
• fwupd-1.9.31-1.el10
• fwupd-efi-1.6-3.el10
• fwupd-plugin-flashrom-1.9.31-1.el10
• gawk-5.3.0-6.el10
• gawk-all-langpacks-5.3.0-6.el10
• gdbm-1:1.23-14.el10
• gdbm-libs-1:1.23-14.el10
• geolite2-city-20191217-14.el10
• geolite2-country-20191217-14.el10
• gettext-envsubst-0.22.5-6.el10
• gettext-libs-0.22.5-6.el10
• gettext-runtime-0.22.5-6.el10
• git-core-2.47.3-1.el10
• glib2-2.80.4-8.el10
• glibc-2.39-69.el10
• glibc-common-2.39-69.el10
• glibc-gconv-extra-2.39-69.el10
• glibc-minimal-langpack-2.39-69.el10
• gmp-1:6.2.1-12.el10
• gnupg2-2.4.5-2.el10
• gnupg2-smime-2.4.5-2.el10
• gnutls-3.8.10-2.el10
• gobject-introspection-1.79.1-6.el10
• gpgme-1.23.2-6.el10
• grep-3.11-10.el10
• groff-base-1.23.0-10.el10
• grub2-common-1:2.12-29.el10
• grub2-efi-x64-1:2.12-29.el10
• grub2-pc-1:2.12-29.el10
• grub2-pc-modules-1:2.12-29.el10
• grub2-tools-1:2.12-29.el10
• grub2-tools-minimal-1:2.12-29.el10
• gssproxy-0.9.2-10.el10
• gzip-1.13-3.el10
• hostname-3.23-14.el10
• hwdata-0.379-10.6.el10
• ignition-2.23.0-1.el10
• ignition-grub-2.23.0-1.el10
• ima-evm-utils-1.6.2-3.el10
• info-7.1-6.el10
• inih-58-3.el10
• initscripts-service-10.26-2.el10
• intel-audio-firmware-20250812-19.el10
• intel-gpu-firmware-20250812-19.el10
• ipcalc-1.0.3-12.el10
• iproute-6.14.0-2.el10
• iproute-tc-6.14.0-2.el10
• iptables-libs-1.8.11-11.el10
• iptables-nft-1.8.11-11.el10
• iputils-20240905-4.el10
• irqbalance-2:1.9.4-5.el10
• iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10
• iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el10
• isns-utils-libs-0.103-1.el10
• jansson-2.14-3.el10
• jose-14-102.el10
• jq-1.7.1-11.el10
• json-c-0.18-3.el10
• json-glib-1.8.0-5.el10
• kbd-2.6.4-7.el10
• kbd-legacy-2.6.4-7.el10
• kbd-misc-2.6.4-7.el10
• kdump-utils-1.0.54-7.el10
• kernel-6.12.0-136.el10
• kernel-core-6.12.0-136.el10
• kernel-modules-6.12.0-136.el10
• kernel-modules-core-6.12.0-136.el10
• kernel-modules-extra-6.12.0-136.el10
• kernel-modules-extra-matched-6.12.0-136.el10
• kexec-tools-2.0.31-1.el10
• keyutils-1.6.3-5.el10
• keyutils-libs-1.6.3-5.el10
• kmod-31-12.el10
• kmod-libs-31-12.el10
• kpartx-0.9.9-12.el10
• krb5-libs-1.21.3-8.el10
• less-661-3.el10
• libacl-2.3.2-4.el10
• libaio-0.3.111-22.el10
• libarchive-3.7.7-4.el10
• libassuan-2.5.6-6.el10
• libattr-2.5.2-5.el10
• libbasicobjects-0.1.1-58.el10
• libblkid-2.40.2-13.el10
• libbpf-2:1.6.0-3.el10
• libcap-2.69-7.el10
• libcap-ng-0.8.4-6.el10
• libcbor-0.11.0-3.el10
• libcollection-0.7.0-58.el10
• libcom_err-1.47.1-4.el10
• libcomps-0.1.21-3.el10
• libcurl-minimal-8.12.1-2.el10
• libdhash-0.5.0-58.el10
• libdnf-0.73.1-12.el10
• libdnf-plugin-subscription-manager-1.30.10-1.el10
• libdrm-2.4.123-1.el10
• libeconf-0.6.2-4.el10
• libedit-3.1-52.20230828cvs.el10
• libev-4.33-14.el10
• libevent-2.1.12-16.el10
• libfdisk-2.40.2-13.el10
• libffi-3.4.4-10.el10
• libfido2-1.14.0-7.el10
• libgcc-14.3.1-2.1.el10
• libgcrypt-1.11.0-6.el10
• libgomp-14.3.1-2.1.el10
• libgpg-error-1.50-2.el10
• libgudev-238-7.el10
• libgusb-0.4.9-4.el10
• libibverbs-57.0-2.el10
• libicu-74.2-5.el10
• libidn2-2.3.7-3.el10
• libini_config-1.3.1-58.el10
• libipa_hbac-2.11.1-3.el10
• libjcat-0.2.2-2.el10
• libjose-14-102.el10
• libkcapi-1.5.0-3.el10
• libkcapi-hasher-1.5.0-3.el10
• libkcapi-hmaccalc-1.5.0-3.el10
• libksba-1.6.7-2.el10
• libldb-4.23.0-101.el10
• libluksmeta-9-26.el10
• libmaxminddb-1.9.1-4.el10
• libmicrohttpd-1:1.0.0-3.el10
• libmnl-1.0.5-7.el10
• libmodulemd-2.15.0-12.el10
• libmount-2.40.2-13.el10
• libmspack-0.10.1-0.14.alpha.el10
• libndp-1.9-2.el10
• libnet-1.3-7.el10
• libnetfilter_conntrack-1.0.9-12.el10
• libnfnetlink-1.0.2-3.el10
• libnfsidmap-1:2.8.3-2.el10
• libnftnl-1.2.8-3.el10
• libnghttp2-1.64.0-2.el10
• libnl3-3.11.0-1.el10
• libnvme-1.13-1.el10
• libpath_utils-0.2.1-58.el10
• libpcap-14:1.10.4-7.el10
• libpciaccess-0.16-16.el10
• libpkgconf-2.1.0-3.el10
• libpwquality-1.4.5-12.el10
• libref_array-0.1.5-58.el10
• librepo-1.18.0-5.el10
• libseccomp-2.5.6-1.el10
• libsecret-0.21.2-8.el10
• libselinux-3.9-1.el10
• libselinux-utils-3.9-1.el10
• libsemanage-3.9-1.el10
• libsepol-3.9-1.el10
• libsmartcols-2.40.2-13.el10
• libsmbclient-4.23.0-101.el10
• libsolv-0.7.29-8.el10
• libss-1.47.1-4.el10
• libsss_certmap-2.11.1-3.el10
• libsss_idmap-2.11.1-3.el10
• libsss_nss_idmap-2.11.1-3.el10
• libsss_sudo-2.11.1-3.el10
• libstdc++-14.3.1-2.1.el10
• libtalloc-2.4.3-100.el10
• libtasn1-4.20.0-1.el10
• libtdb-1.4.14-100.el10
• libtevent-0.17.1-100.el10
• libtirpc-1.3.5-1.el10
• libtool-ltdl-2.4.7-13.el10
• libunistring-1.1-10.el10
• liburing-2.12-1.el10
• libusb1-1.0.28-1.el10
• libutempter-1.2.1-15.el10
• libuuid-2.40.2-13.el10
• libuv-1:1.51.0-1.el10
• libverto-0.3.2-10.el10
• libverto-libev-0.3.2-10.el10
• libwbclient-4.23.0-101.el10
• libxcrypt-4.4.36-10.el10
• libxkbcommon-1.7.0-4.el10
• libxml2-2.12.5-9.el10
• libxmlb-0.3.23-1.el10
• libxslt-1.1.39-8.el10
• libyaml-0.2.5-16.el10
• libzstd-1.5.5-9.el10
• linux-firmware-20250812-19.el10
• linux-firmware-whence-20250812-19.el10
• lmdb-libs-0.9.32-4.el10
• logrotate-3.22.0-4.el10
• lsof-4.98.0-7.el10
• lua-libs-5.4.6-7.el10
• luksmeta-9-26.el10
• lvm2-10:2.03.32-3.el10
• lvm2-libs-10:2.03.32-3.el10
• lz4-libs-1.9.4-8.el10
• lzo-2.10-14.el10
• makedumpfile-1.7.7-2.el10
• mdadm-4.4-2.el10
• memstrack-0.2.5-6.el10
• microcode_ctl-4:20250812-1.el10
• mokutil-2:0.7.2-1.el10
• mpdecimal-2.5.1-12.el10
• mpfr-4.2.1-5.el10
• mt7xxx-firmware-20250812-19.el10
• nano-8.1-3.el10
• ncurses-6.4-14.20240127.el10
• ncurses-base-6.4-14.20240127.el10
• ncurses-libs-6.4-14.20240127.el10
• net-tools-2.0-0.73.20160912git.el10
• netavark-2:1.16.0-1.el10
• nettle-3.10.1-1.el10
• newt-0.52.24-5.el10
• nfs-utils-1:2.8.3-2.el10
• nftables-1:1.1.1-5.el10
• nmap-ncat-4:7.92-3.el10
• nmstate-2.2.52-1.el10
• npth-1.6-21.el10
• nss-altfiles-2.23.0-5.el10
• numactl-libs-2.0.19-2.el10
• nvidia-gpu-firmware-20250812-19.el10
• nvme-cli-2.13-2.el10
• nxpwireless-firmware-20250812-19.el10
• oniguruma-6.9.9-7.el10
• open-vm-tools-13.0.0-1.el10
• openldap-2.6.9-1.el10
• openshift-clients-4.21.0-202510070153.p2.g229ead6.assembly.stream.el9
• openshift-kubelet-4.21.0-202510080354.p2.g00e7ec7.assembly.stream.el9
• openssh-9.9p1-14.el10
• openssh-clients-9.9p1-14.el10
• openssh-server-9.9p1-14.el10
• openssl-1:3.5.1-5.el10
• openssl-fips-provider-1:3.5.1-5.el10
• openssl-libs-1:3.5.1-5.el10
• openvswitch-selinux-extra-policy-1.0-36.el10s
• openvswitch3.5-3.5.0-6.el10s
• os-prober-1.81-9.el10
• ose-aws-ecr-image-credential-provider-4.21.0-202509221503.p2.gfa4e6bb.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.21.0-202510011456.p2.g7659e06.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.21.0-202509221503.p2.gb27a2f9.assembly.stream.el9
• ostree-2025.6-1.el10
• ostree-grub2-2025.6-1.el10
• ostree-libs-2025.6-1.el10
• p11-kit-0.25.10-1.el10
• p11-kit-server-0.25.10-1.el10
• p11-kit-trust-0.25.10-1.el10
• pam-1.6.1-8.el10
• pam-libs-1.6.1-8.el10
• passt-0^20250512.g8ec1341-2.el10
• passt-selinux-0^20250512.g8ec1341-2.el10
• pciutils-3.13.0-6.el10
• pciutils-libs-3.13.0-6.el10
• pcre2-10.44-1.el10.3
• pcre2-syntax-10.44-1.el10.3
• pcsc-lite-2.2.3-2.el10
• pcsc-lite-ccid-1.6.0-2.el10
• pcsc-lite-libs-2.2.3-2.el10
• perl-AutoLoader-5.74-514.el10
• perl-B-1.89-514.el10
• perl-Carp-1.54-511.el10
• perl-Class-Struct-0.68-514.el10
• perl-Data-Dumper-2.189-512.el10
• perl-Digest-1.20-511.el10
• perl-Digest-MD5-2.59-6.el10
• perl-DynaLoader-1.56-514.el10
• perl-Encode-4:3.21-511.el10
• perl-Errno-1.38-514.el10
• perl-Exporter-5.78-511.el10
• perl-Fcntl-1.18-514.el10
• perl-File-Basename-2.86-514.el10
• perl-File-Path-2.18-511.el10
• perl-File-Temp-1:0.231.100-512.el10
• perl-File-stat-1.14-514.el10
• perl-FileHandle-2.05-514.el10
• perl-Getopt-Long-1:2.58-3.el10
• perl-Getopt-Std-1.14-514.el10
• perl-HTTP-Tiny-0.088-512.el10
• perl-IO-1.55-514.el10
• perl-IO-Socket-IP-0.42-512.el10
• perl-IO-Socket-SSL-2.085-3.el10
• perl-IPC-Open3-1.22-514.el10
• perl-MIME-Base64-3.16-511.el10
• perl-Mozilla-CA-20231213-5.el10
• perl-NDBM_File-1.17-514.el10
• perl-Net-SSLeay-1.94-8.el10
• perl-POSIX-2.20-514.el10
• perl-PathTools-3.91-512.el10
• perl-Pod-Escapes-1:1.07-511.el10
• perl-Pod-Perldoc-3.28.01-512.el10
• perl-Pod-Simple-1:3.45-511.el10
• perl-Pod-Usage-4:2.03-511.el10
• perl-Scalar-List-Utils-5:1.63-511.el10
• perl-SelectSaver-1.02-514.el10
• perl-Socket-4:2.038-511.el10
• perl-Storable-1:3.32-511.el10
• perl-Symbol-1.09-514.el10
• perl-Term-ANSIColor-5.01-512.el10
• perl-Term-Cap-1.18-511.el10
• perl-Text-ParseWords-3.31-511.el10
• perl-Text-Tabs+Wrap-2024.001-511.el10
• perl-Time-Local-2:1.350-511.el10
• perl-URI-5.27-3.el10
• perl-base-2.27-514.el10
• perl-constant-1.33-512.el10
• perl-if-0.61.000-514.el10
• perl-interpreter-4:5.40.2-514.el10
• perl-libnet-3.15-512.el10
• perl-libs-4:5.40.2-514.el10
• perl-locale-1.12-514.el10
• perl-mro-1.29-514.el10
• perl-overload-1.37-514.el10
• perl-overloading-0.02-514.el10
• perl-parent-1:0.241-512.el10
• perl-podlators-1:5.01-511.el10
• perl-vars-1.05-514.el10
• pigz-2.8-7.el10
• pinentry-1.3.1-1.el10
• pkgconf-2.1.0-3.el10
• pkgconf-m4-2.1.0-3.el10
• pkgconf-pkg-config-2.1.0-3.el10
• podman-7:5.6.0-2.el10
• policycoreutils-3.9-1.el10
• policycoreutils-python-utils-3.9-1.el10
• polkit-125-4.el10
• polkit-libs-125-4.el10
• polkit-pkla-compat-0.1-30.el10
• popt-1.19-8.el10
• procps-ng-4.0.4-8.el10
• protobuf-c-1.5.0-6.el10
• psmisc-23.6-8.el10
• python-unversioned-command-3.12.11-3.el10
• python3-3.12.11-3.el10
• python3-audit-4.0.3-4.el10
• python3-charset-normalizer-3.4.2-1.el10
• python3-cloud-what-1.30.10-1.el10
• python3-dateutil-1:2.9.0.post0-1.el10
• python3-dbus-1.3.2-8.el10
• python3-decorator-5.1.1-12.el10
• python3-distro-1.9.0-5.el10
• python3-dnf-4.20.0-18.el10
• python3-dnf-plugin-versionlock-4.7.0-9.el10
• python3-dnf-plugins-core-4.7.0-9.el10
• python3-gobject-base-3.46.0-7.el10
• python3-gobject-base-noarch-3.46.0-7.el10
• python3-hawkey-0.73.1-12.el10
• python3-idna-3.7-4.el10
• python3-iniparse-0.5-10.el10
• python3-inotify-0.9.6-36.el10
• python3-libcomps-0.1.21-3.el10
• python3-libdnf-0.73.1-12.el10
• python3-librepo-1.18.0-5.el10
• python3-libs-3.12.11-3.el10
• python3-libselinux-3.9-1.el10
• python3-libsemanage-3.9-1.el10
• python3-pip-wheel-23.3.2-7.el10
• python3-policycoreutils-3.9-1.el10
• python3-requests-2.32.4-1.el10
• python3-rpm-4.19.1.1-20.el10
• python3-setools-4.5.1-5.el10
• python3-setuptools-69.0.3-12.el10
• python3-six-1.16.0-16.el10
• python3-subscription-manager-rhsm-1.30.10-1.el10
• python3-systemd-235-11.el10
• python3-urllib3-1.26.19-2.el10
• qemu-guest-agent-18:10.0.0-12.el10
• quota-1:4.09-9.el10
• quota-nls-1:4.09-9.el10
• rdma-core-57.0-2.el10
• readline-8.2-11.el10
• realtek-firmware-20250812-19.el10
• rpcbind-1.2.7-3.el10
• rpm-4.19.1.1-20.el10
• rpm-build-libs-4.19.1.1-20.el10
• rpm-libs-4.19.1.1-20.el10
• rpm-ostree-2025.11-1.el10
• rpm-ostree-libs-2025.11-1.el10
• rpm-plugin-audit-4.19.1.1-20.el10
• rpm-plugin-selinux-4.19.1.1-20.el10
• rpm-plugin-systemd-inhibit-4.19.1.1-20.el10
• rpm-sequoia-1.9.0.3-1.el10
• rpm-sign-libs-4.19.1.1-20.el10
• rsync-3.4.1-2.el10
• samba-client-libs-4.23.0-101.el10
• samba-common-4.23.0-101.el10
• samba-common-libs-4.23.0-101.el10
• sed-4.9-3.el10
• selinux-policy-42.1.7-1.el10
• selinux-policy-targeted-42.1.7-1.el10
• setup-2.14.5-7.el10
• sg3_utils-1.48-7.el10
• sg3_utils-libs-1.48-7.el10
• shadow-utils-2:4.15.0-8.el10
• shadow-utils-subid-2:4.15.0-8.el10
• shared-mime-info-2.3-8.el10
• shim-x64-15.8-5.el10
• skopeo-2:1.20.0-1.el10
• slang-2.3.3-8.el10
• snappy-1.1.10-7.el10
• socat-1.7.4.4-8.el10
• sqlite-libs-3.46.1-5.el10
• ssh-key-dir-0.1.4-9.el10
• sssd-2.11.1-3.el10
• sssd-ad-2.11.1-3.el10
• sssd-client-2.11.1-3.el10
• sssd-common-2.11.1-3.el10
• sssd-common-pac-2.11.1-3.el10
• sssd-ipa-2.11.1-3.el10
• sssd-krb5-2.11.1-3.el10
• sssd-krb5-common-2.11.1-3.el10
• sssd-ldap-2.11.1-3.el10
• sssd-nfs-idmap-2.11.1-3.el10
• sssd-proxy-2.11.1-3.el10
• stalld-1.20.4-1.el10
• strace-6.12-1.el10
• subscription-manager-1.30.10-1.el10
• subscription-manager-rhsm-certificates-20220623-6.el10
• sudo-1.9.15-9.p5.el10
• sudo-python-plugin-1.9.15-9.p5.el10
• systemd-257-13.el10
• systemd-journal-remote-257-13.el10
• systemd-libs-257-13.el10
• systemd-pam-257-13.el10
• systemd-udev-257-13.el10
• tar-2:1.35-7.el10
• tiwilink-firmware-20250812-19.el10
• tmux-3.3a-13.20230918gitb202a2f.el10
• toolbox-0.2-2.el10
• tpm2-tools-5.7-4.el10
• tpm2-tss-4.1.3-5.el10
• tpm2-tss-fapi-4.1.3-5.el10
• tzdata-2025b-2.el10
• unbound-anchor-1.20.0-13.el10
• unbound-libs-1.20.0-13.el10
• userspace-rcu-0.14.0-7.el10
• util-linux-2.40.2-13.el10
• util-linux-core-2.40.2-13.el10
• vim-data-2:9.1.083-5.el10
• vim-minimal-2:9.1.083-5.el10
• virt-what-1.27-3.el10
• which-2.21-44.el10
• xfsprogs-6.11.0-2.el10
• xkeyboard-config-2.41-3.el10
• xmlsec1-1:1.2.39-3.el10
• xmlsec1-openssl-1:1.2.39-3.el10
• xz-1:5.6.2-4.el10
• xz-libs-1:5.6.2-4.el10
• zlib-ng-compat-2.2.3-2.el10
• zram-generator-1.1.2-14.el10
• zstd-1.5.5-9.el10

Changed:

• NetworkManager 1:1.54.0-1.el10 → 1:1.55.4-1.el10
• NetworkManager-cloud-setup 1:1.54.0-1.el10 → 1:1.55.4-1.el10
• NetworkManager-libnm 1:1.54.0-1.el10 → 1:1.55.4-1.el10
• NetworkManager-ovs 1:1.54.0-1.el10 → 1:1.55.4-1.el10
• NetworkManager-tui 1:1.54.0-1.el10 → 1:1.55.4-1.el10
• bootc 1.5.1-2.el10 → 1.8.0-1.el10
• centos-gpg-keys 10.0-10.el10 → 10.0-11.el10
• centos-stream-release 10.0-10.el10 → 10.0-11.el10
• centos-stream-repos 10.0-10.el10 → 10.0-11.el10
• container-selinux 4:2.240.0-1.el10 → 4:2.241.0-1.el10
• cri-o 1.33.3-1.el10s → 1.34.0-1.el10s
• cri-tools 1.33.0-2.el10s → 1.34.0-2.el10s
• crun 1.23-1.el10 → 1.24-1.el10
• crypto-policies 20250804-1.git2ca4115.el10 → 20250905-2.gitc7eb7b2.el10
• crypto-policies-scripts 20250804-1.git2ca4115.el10 → 20250905-2.gitc7eb7b2.el10
• cryptsetup 2.7.5-2.el10 → 2.8.1-1.el10
• cryptsetup-libs 2.7.5-2.el10 → 2.8.1-1.el10
• device-mapper-multipath 0.9.9-11.el10 → 0.9.9-12.el10
• device-mapper-multipath-libs 0.9.9-11.el10 → 0.9.9-12.el10
• ethtool 2:6.15-1.el10 → 2:6.15-2.el10
• glibc 2.39-54.el10 → 2.39-69.el10
• glibc-common 2.39-54.el10 → 2.39-69.el10
• glibc-gconv-extra 2.39-54.el10 → 2.39-69.el10
• glibc-minimal-langpack 2.39-54.el10 → 2.39-69.el10
• grub2-common 1:2.12-26.el10 → 1:2.12-29.el10
• grub2-efi-x64 1:2.12-26.el10 → 1:2.12-29.el10
• grub2-pc 1:2.12-26.el10 → 1:2.12-29.el10
• grub2-pc-modules 1:2.12-26.el10 → 1:2.12-29.el10
• grub2-tools 1:2.12-26.el10 → 1:2.12-29.el10
• grub2-tools-minimal 1:2.12-26.el10 → 1:2.12-29.el10
• ignition 2.22.0-1.el10 → 2.23.0-1.el10
• ignition-grub 2.22.0-1.el10 → 2.23.0-1.el10
• kernel 6.12.0-122.el10 → 6.12.0-136.el10
• kernel-core 6.12.0-122.el10 → 6.12.0-136.el10
• kernel-modules 6.12.0-122.el10 → 6.12.0-136.el10
• kernel-modules-core 6.12.0-122.el10 → 6.12.0-136.el10
• kernel-modules-extra 6.12.0-122.el10 → 6.12.0-136.el10
• kernel-modules-extra-matched 6.12.0-122.el10 → 6.12.0-136.el10
• kpartx 0.9.9-11.el10 → 0.9.9-12.el10
• libibverbs 57.0-1.el10 → 57.0-2.el10
• libipa_hbac 2.11.1-2.el10 → 2.11.1-3.el10
• libldb 4.22.4-104.el10 → 4.23.0-101.el10
• libnfsidmap 1:2.8.3-0.el10 → 1:2.8.3-2.el10
• libsmbclient 4.22.4-104.el10 → 4.23.0-101.el10
• libsss_certmap 2.11.1-2.el10 → 2.11.1-3.el10
• libsss_idmap 2.11.1-2.el10 → 2.11.1-3.el10
• libsss_nss_idmap 2.11.1-2.el10 → 2.11.1-3.el10
• libsss_sudo 2.11.1-2.el10 → 2.11.1-3.el10
• libtdb 1.4.13-100.el10 → 1.4.14-100.el10
• libtevent 0.16.2-100.el10 → 0.17.1-100.el10
• liburing 2.5-5.el10 → 2.12-1.el10
• libwbclient 4.22.4-104.el10 → 4.23.0-101.el10
• libxmlb 0.3.15-7.el10 → 0.3.23-1.el10
• nfs-utils 1:2.8.3-0.el10 → 1:2.8.3-2.el10
• nmstate 2.2.48-1.el10 → 2.2.52-1.el10
• openshift-clients 4.20.0-202508150943.p0.g1c54ec0.assembly.stream.el9 → 4.21.0-202510070153.p2.g229ead6.assembly.stream.el9
• openshift-kubelet 4.20.0-202508152244.p0.g7b25b18.assembly.stream.el9 → 4.21.0-202510080354.p2.g00e7ec7.assembly.stream.el9
• openssh 9.9p1-11.el10 → 9.9p1-14.el10
• openssh-clients 9.9p1-11.el10 → 9.9p1-14.el10
• openssh-server 9.9p1-11.el10 → 9.9p1-14.el10
• openssl 1:3.5.1-3.el10 → 1:3.5.1-5.el10
• openssl-fips-provider 1:3.5.1-3.el10 → 1:3.5.1-5.el10
• openssl-libs 1:3.5.1-3.el10 → 1:3.5.1-5.el10
• ose-aws-ecr-image-credential-provider 4.20.0-202508191400.p2.gbb88da1.assembly.stream.el9 → 4.21.0-202509221503.p2.gfa4e6bb.assembly.stream.el9
• ose-azure-acr-image-credential-provider 4.20.0-202507171059.p0.gd469d04.assembly.stream.el9 → 4.21.0-202510011456.p2.g7659e06.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider 4.20.0-202508130315.p0.g0634bec.assembly.stream.el9 → 4.21.0-202509221503.p2.gb27a2f9.assembly.stream.el9
• ostree 2025.4-3.el10 → 2025.6-1.el10
• ostree-grub2 2025.4-3.el10 → 2025.6-1.el10
• ostree-libs 2025.4-3.el10 → 2025.6-1.el10
• p11-kit 0.25.5-7.el10 → 0.25.10-1.el10
• p11-kit-server 0.25.5-7.el10 → 0.25.10-1.el10
• p11-kit-trust 0.25.5-7.el10 → 0.25.10-1.el10
• podman 6:5.6.0-1.el10 → 7:5.6.0-2.el10
• python3-rpm 4.19.1.1-19.el10 → 4.19.1.1-20.el10
• rdma-core 57.0-1.el10 → 57.0-2.el10
• rpm 4.19.1.1-19.el10 → 4.19.1.1-20.el10
• rpm-build-libs 4.19.1.1-19.el10 → 4.19.1.1-20.el10
• rpm-libs 4.19.1.1-19.el10 → 4.19.1.1-20.el10
• rpm-ostree 2025.10-1.el10 → 2025.11-1.el10
• rpm-ostree-libs 2025.10-1.el10 → 2025.11-1.el10
• rpm-plugin-audit 4.19.1.1-19.el10 → 4.19.1.1-20.el10
• rpm-plugin-selinux 4.19.1.1-19.el10 → 4.19.1.1-20.el10
• rpm-plugin-systemd-inhibit 4.19.1.1-19.el10 → 4.19.1.1-20.el10
• rpm-sequoia 1.9.0.1-1.el10 → 1.9.0.3-1.el10
• rpm-sign-libs 4.19.1.1-19.el10 → 4.19.1.1-20.el10
• samba-client-libs 4.22.4-104.el10 → 4.23.0-101.el10
• samba-common 4.22.4-104.el10 → 4.23.0-101.el10
• samba-common-libs 4.22.4-104.el10 → 4.23.0-101.el10
• shadow-utils 2:4.15.0-6.el10 → 2:4.15.0-8.el10
• sqlite-libs 3.46.1-4.el10 → 3.46.1-5.el10
• sssd 2.11.1-2.el10 → 2.11.1-3.el10
• sssd-ad 2.11.1-2.el10 → 2.11.1-3.el10
• sssd-client 2.11.1-2.el10 → 2.11.1-3.el10
• sssd-common 2.11.1-2.el10 → 2.11.1-3.el10
• sssd-common-pac 2.11.1-2.el10 → 2.11.1-3.el10
• sssd-ipa 2.11.1-2.el10 → 2.11.1-3.el10
• sssd-krb5 2.11.1-2.el10 → 2.11.1-3.el10
• sssd-krb5-common 2.11.1-2.el10 → 2.11.1-3.el10
• sssd-ldap 2.11.1-2.el10 → 2.11.1-3.el10
• sssd-nfs-idmap 2.11.1-2.el10 → 2.11.1-3.el10
• sssd-proxy 2.11.1-2.el10 → 2.11.1-3.el10

Extensions

Full list (48 packages)

• NetworkManager-libreswan-1.2.27-1.el10.x86_64
• bison-3.8.2-9.el10.x86_64
• cmake-filesystem-3.31.8-1.el10.x86_64
• cpp-14.3.1-2.1.el10.x86_64
• elfutils-libelf-devel-0.193-1.el10.x86_64
• flex-2.6.4-19.el10.x86_64
• gcc-14.3.1-2.1.el10.x86_64
• glibc-devel-2.39-69.el10.x86_64
• kernel-6.12.0-136.el10.x86_64
• kernel-core-6.12.0-136.el10.x86_64
• kernel-devel-6.12.0-136.el10.x86_64
• kernel-headers-6.12.0-136.el10.x86_64
• kernel-modules-6.12.0-136.el10.x86_64
• kernel-modules-extra-6.12.0-136.el10.x86_64
• kernel-rt-core-6.12.0-136.el10.x86_64
• kernel-rt-devel-6.12.0-136.el10.x86_64
• kernel-rt-modules-6.12.0-136.el10.x86_64
• kernel-rt-modules-core-6.12.0-136.el10.x86_64
• kernel-rt-modules-extra-6.12.0-136.el10.x86_64
• krb5-pkinit-1.21.3-8.el10.x86_64
• krb5-workstation-1.21.3-8.el10.x86_64
• ldns-1.8.3-18.el10.x86_64
• libkadm5-1.21.3-8.el10.x86_64
• libmpc-1.3.1-7.el10.x86_64
• libqb-2.0.8-6.el10.x86_64
• libreswan-5.3-1.el10.x86_64
• libxcrypt-devel-4.4.36-10.el10.x86_64
• libzstd-devel-1.5.5-9.el10.x86_64
• lm_sensors-libs-3.6.0-20.el10.x86_64
• m4-1.4.19-11.el10.x86_64
• make-1:4.4.1-9.el10.x86_64
• nspr-4.36.0-4.el10.x86_64
• nss-3.112.0-4.el10.x86_64
• nss-softokn-3.112.0-4.el10.x86_64
• nss-softokn-freebl-3.112.0-4.el10.x86_64
• nss-sysinit-3.112.0-4.el10.x86_64
• nss-tools-3.112.0-4.el10.x86_64
• nss-util-3.112.0-4.el10.x86_64
• openssl-devel-1:3.5.1-5.el10.x86_64
• openvswitch3.5-ipsec-3.5.0-6.el10s.x86_64
• pcp-conf-6.3.7-5.el10.x86_64
• pcp-libs-6.3.7-5.el10.x86_64
• protobuf-3.19.6-11.el10.x86_64
• python3-openvswitch3.5-3.5.0-6.el10s.x86_64
• sysstat-12.7.6-2.el10.x86_64
• usbguard-1.1.3-6.el10.x86_64
• usbguard-selinux-1.1.3-6.el10.noarch
• zlib-ng-compat-devel-2.2.3-2.el10.x86_64

CentOS Stream CoreOS base layer: 10.0.20251003-0