5.0.0-okd-scos.ec.8

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:5.0.0-okd-scos.ec.8

Qualifiers (status api): None

Tests:

Blocking jobs
- upgrade Failed (2 retries) release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next

Upgrades from:

Untested upgrades: 4.22.0-okd-scos.ec.16, 5.0.0-okd-scos.ec.0, 5.0.0-okd-scos.ec.1, 5.0.0-okd-scos.ec.2, 5.0.0-okd-scos.ec.3, 5.0.0-okd-scos.ec.4

5.0.0-okd-scos.ec.5 - F F F

Changes from 5.0.0-okd-scos.ec.5

Created: 2026-09-01 06:28:25 +0000 UTC

Image Digest: sha256:05b9558f193d0d881ee7c70d4b1350eddcc4338bda0a4813c0587aa3a7ac577a

Release 5.0.0-okd-scos.ec.8 was created from registry.ci.openshift.org/origin/release-scos:5.0.0-0.okd-scos-nightly-2026-08-27-195325

Components

Kubectl upgraded from 1.35.2 to 1.36.2
Kubernetes upgraded from 1.35.3 to 1.36.3
Kubernetes Tests upgraded from 1.35.1 to 1.36.2
CentOS Stream CoreOS 10 upgraded from 10.0.20260702-0 to 10.0.20260806-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
AzureClusterHostedDNSInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NewOLMPreflightPermissionChecks (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
RouteExternalCertificate (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AWSDualStackInstall (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
AdditionalStorageConfig (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
EtcdBackendQuota (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
ExternalOIDCWithUpstreamParity (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
IngressControllerDynamicConfigurationManager (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
IngressControllerMultipleHAProxyVersions (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
IrreconcilableMachineConfig (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
OpenShiftPodSecurityAdmission (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled
SELinuxMountGAReadiness (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
VolumeGroupSnapshot (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
CRIOCredentialProviderConfig (0 tests)	Disabled	Enabled (Changed)	Disabled (Changed)	Enabled	Disabled	Enabled (Changed)	Disabled (Changed)	Enabled
NoRegistryClusterInstall (0 tests)	Disabled	Enabled (Changed)	Disabled	Enabled	Disabled	Enabled (Changed)	Disabled	Enabled
OLMLifecycleAndCompatibility (0 tests)	Disabled	Enabled (Changed)	Disabled	Enabled	Disabled	Enabled (Changed)	Disabled	Enabled
OSStreams (0 tests)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled (Changed)	Enabled	Enabled	Enabled
BGPBasedVIPManagement (0 tests)			Enabled (New)	Enabled (New)
GCPSovereignCloudInstall (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
GatewayAPIManagementMode (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)

New images

haproxy-router-haproxy28 git 33812291 sha256:b6a377f93e0dfae5d78b61e0fe4adabe016cd3242435f878c356e7bd93943762
haproxy-router-haproxy32 git 33812291 sha256:40dda7d61d9408160c0f126d859af361b44da0aa2edf6874c18481e860e8c888
kube-vip git f60a498a sha256:b8d64ab0b0145f0139baf442ffd4c09a3f812488fb9af3ae4d26a1f323a8b03c

Rebuilt images without code change

aws-ebs-csi-driver git 8b8c4cef sha256:7223f34c717aedc002ac1bdd5579d8a28b437211048478aa9ada1988adc00476
aws-node-termination-handler git e4ff2aae sha256:4327e93eea4af2369b84a93990f5e2c17b32dff5b389987e07514be6498a6331
azure-service-operator git 0611cd27 sha256:fa6da7efef7c782e708b9265a237a7bd4cf979d5dc07d74623b590603fd8ba56
azure-workload-identity-webhook git 2b4705c5 sha256:723363faeff812e7f82dea09cd7b9d4084f47eaa1e3b925604a84cfd7908ac63
baremetal-machine-controllers git f2b0db19 sha256:01d690539ebb09220106c05ae5ce25eedc595a2ac3a3d55d18a90b07f49f9c40
cluster-bootstrap git 7b1593a4 sha256:6245992b51fd5259f1e1d6d9f740469bb2dd1171081db26eeb73b5ec6b5e56d2
cluster-kube-storage-version-migrator-operator git f5d3bfe6 sha256:8b8c6402d976b4c49abcb771f3e6b098db897c0b583a26c9828debe42d32a3f6
cluster-update-keys git 9607604d sha256:3cd4d89d21f59867fc959f37d9110818e6947b86d5f4605a18193c7825f891ac
configmap-reloader git ce80869a sha256:c1ffb648e05c9110caf210b6d1a430e92d25cb158bd0eb49acf44b98c5c38473
container-networking-plugins git d6f73950 sha256:e2c5596f09a37306d0e3b399c75c8d4312c7626b089d84428dd237edff1b4c96
csi-external-snapshot-metadata git 239703c6 sha256:8419150b270f6c2231ae2ad4fbcc7b84569a389d11d4b0fa1346960b74619891
docker-builder git 2cda03a9 sha256:0561fa5e917568498b5509a2a45eb01b8870dfc291bb4767adbbfe915249964f
ironic-machine-os-downloader git f8e41b2e sha256:cb468ed8ee6f4ca20c76f2ef6a9fb4761552c7e1147329905cd588d81b48ae88
ironic-static-ip-manager git 486a0418 sha256:269d774e041ed5197d920df1ef3e8a3543ca2a78bbab624e1336a623b687f296
kube-rbac-proxy git 43c114bc sha256:4d6e1112443baa32e3f3662aead489690194269590f85395651ef65744efbfed
kube-storage-version-migrator git 72835e43 sha256:6853afa91d0ae826aa1234928cac304cb6bb4c48b25ddde76e08cc6d699d2c59
kubevirt-csi-driver git 7ff99994 sha256:fd3603073a6c71241399815768bb0323c56a4bf3d49929b6e8316d5343a342f3
multus-route-override-cni git 08af4127 sha256:90ef5ae6d27423afb0d9a50174814e8664f46d36c6bda2a659749070bac36f27
network-interface-bond-cni git 19d390fd sha256:41d50f6528f575f7011d9f1edeb600e1d26e86f7254499caa59d7f38da4ae183
network-tools git 0b53ac3d sha256:330c65ad5a0baf8f3e9270679c8d9011da670e7eef646043472fe9884e58733c
nutanix-cloud-controller-manager git dc584c6b sha256:56a927aaaf91e0da0c48451fd1d4f25cbb5d0dd8e8488578944396573ac3237b
openstack-machine-api-provider git 6b30092b sha256:382984c59d8b75981792609c43c322353fe3d90cd37e6798a0fcd87d44f5582e
openstack-resource-controller git 58dbc048 sha256:d7975e99bba145d83b42f085c88e103d80e0ff216e8da98fe869d5387db07b71
powervs-block-csi-driver git e7c2c09b sha256:7b22a57c4765f6a99bc0225ef833f0244e7f3e9d47697ff401d48c4916331322
prom-label-proxy git 4ab9ff73 sha256:b2a99c754c085d61602f804dbd641c14f4a083e91eaaf90b435959eabc5a0560
telemeter git 22ba1701 sha256:69b4f79368824191a72fc388fa5a4f30c2439c1e3df931150b4980651b7861fb
vsphere-csi-driver git 6b18bb29 sha256:96722803197158f70b310b8c5b754e62cbfc25632f062edc197910fac7ec861a
vsphere-csi-driver-syncer git 6b18bb29 sha256:8089f3ab386b27144195a5c0c4c1665fec0cbc3f1965361eaa658e559f386c13

agent-installer-api-server

NO-ISSUE: [master] Bump OCP versions: 4.21, 4.17, 4.22, 4.19, 4.18, 4.14, 4.16, 4.20 #10804
ACM-40452: CVE-2026-33815 Bump github.com/jackc/pgx/v5 to v5.9.0 #10783
ACM-40510: Fix infrastructure-operator NetworkPolicy egress to kubernetes API #10792
NO-ISSUE: Update oc-mirror locations to CGW following openshift release decoupling #10601
ACM-40436: Bump Go toolchain to go1.26.5 to fix stdlib CVEs #10770
OCPBUGS-93750: Bump github.com/moby/moby to v28.5.2 #10680
MGMT-24827: Resource-scoped auth for urlAuth endpoints #10667
MGMT-24831: Add ntpSources field to InfraEnv and AgentClusterInstall CRDs #10756
ACM-30180: Honor cluster TLS security profile in Infrastructure Operator #10734
NO-ISSUE: [master] Bump OCP versions: 4.22 #10735
MGMT-24939: (assisted-service) Upgrade operator-sdk from v1.10.1 to v1.42.3 (kubebuilder v3→v4 migration) #10716
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 5.0 #10733
MGMT-24903: Fall back to CoreOS image from worker ignition for day-2 persistent-boot #10717
MULTIARCH-6274: agent: Enable platform external s390x #10424
MGMT-24352: Reset finalizing timeout on transition from installing-pending-user-action #10293
OCPBUGS-97919: fix: use typed credentials key to support MAC-based fencing in ABI flow #10477
ACM-38238: Assisted-installer repos: Set Up Set up Renovate configuration to automatically create Hive API Synchronization PRs #10711
OCPBUGS-91733: manifest_generator add a label to LUKS root #10676
NO-ISSUE: [master] Bump OCP versions: 4.18, 4.19 #10724
NO-ISSUE: Refresh RPM lockfiles RPM lockfile refresh [SECURITY] #10718
NO-ISSUE: [master] Bump OCP versions: 4.20, 4.21, 4.22 #10715
NO-ISSUE: [master] Bump OCP versions: 4.13, 4.18, 4.19 #10710
ACM-35865: CVE-2026-39828 Bump golang.org/x/crypto to v0.52.0 using replace directive (client module) #10617
MGMT-23744: CVE-2026-33997 Bump docker/docker to v28.5.2 #10685
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 4.22, 4.21, 4.19, 4.20, 4.18 #10692
MGMT-24667: Fix disconnected ZTP spoke installs for OCP 5.0 OSImageStream images #10527
MGMT-24699: Assisted Service IPv6 CIDR comparison may fail with non-normalized CIDRs #10569
MGMT-24327: upgrade assisted-service postgresql from 15 to 16 #10519
ACM-35865: CVE-2026-39828 Bump golang.org/x/crypto to v0.52.0 using replace directive (api module) #10618
ACM-35865: CVE-2026-39828 Bump golang.org/x/crypto to v0.52.0 using replace directive (models module) #10616
NO-ISSUE: [master] Bump OCP versions: 4.18, 5.0, 4.20, 4.16, 4.22, 4.19, 4.21, 4.14, 4.17 #10622
MGMT-24786: Add resource-scoped authorization for local auth tokens #10603
And 4 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-101647: Bump golang.org/x/net to v0.56.0 #2251
MGMT-24598: CVE-2026-42306 Bump assisted-service dep to pick up docker v28.5.2 #2219
OCPBUGS-96799: Bump golang.org/x/net from v0.48.0 to v0.55.0 #2244
OCPBUGS-96696: Wait for all nodes to join before exiting for ABI #2230
ACM-38238: Assisted-installer repos: Set Up Set up Renovate configuration to automatically create Hive API Synchronization PRs #2224
MGMT-24702: CVE-2026-53488 Bump github.com/containerd/containerd to v1.7.33 #2204
Full changelog

agent-installer-node-agent

MGMT-24597: CVE-2026-42306 Bump assisted-service dep to pick up docker v28.5.2 #1560
NO-ISSUE: Refresh RPM lockfiles RPM lockfile refresh #1578
MGMT-24903: Preserve encapsulated MachineConfig in filtered ignition #1568
NO-ISSUE: Refresh RPM lockfiles RPM lockfile refresh #1555
Full changelog

agent-installer-ui

Update OWNERS file (#3995) #3995
OCPBUGS-104439: pin postcss resolution to >=8.5.23 (CVE-2026-69153) (#3957) #3957
AGENT-1570: Remove CustomNoUpgrade featureSet and NoRegistryClusterInstall feature gate (#3954) #3954
Bump js-yaml from 3.14.1 to 4.3.1 (#3951) #3951
Bump js-yaml from 4.3.0 to 4.3.1 (#3947) #3947
chore(deps): update dependency ws to ^8.21.2 (#3950) #3950
chore(deps): update dependency dompurify to ^3.4.13 (#3949) #3949
chore(deps): update konflux references (#3946) #3946
Add ‘Storage class’ option to Hypeshift details form (#3944) #3944
MGMT-24973: Fix missing padding on InfraEnv error alerts in the Add hosts modal (#3943) #3943
Bump ip-address from 10.2.0 to 10.3.1 (#3938) #3938
Add OptionalConfigurationStep (#3927) #3927
chore(deps): update konflux references (#3933) #3933
Bump undici from 7.28.0 to 7.29.0 (#3940) #3940
Bump fast-uri from 3.1.4 to 3.1.5 (#3939) #3939
chore(deps): update dependency minimatch to ^10.2.6 (#3936) #3936
NO-ISSUE: Silence TypeScript deprecation warning (#3937) #3937
chore(deps): update dependency brace-expansion to ^5.0.9 (#3935) #3935
Keep NMState resources when deleting BMC hosts (#3931) #3931
Block installation when custom-manifests-requirements-satisfied validation fails (#3923) #3923
Upgrade react-router to ^7.18.1 (#3925) #3925
MGMT-24641: Attempt to choose 5 masters for standalone cluster blocked (#3912) #3912
Bump tar from 7.5.20 to 7.5.22 (#3921) #3921
Bump postcss from 8.5.15 to 8.5.23 (#3920) #3920
Bump uuid from 8.3.2 to 14.0.1 (#3919) #3919
chore(deps): update dependency brace-expansion to ^5.0.8 (#3916) #3916
chore(deps): update dependency dompurify to ^3.4.12 (#3917) #3917
chore(deps): update konflux references (#3913) #3913
Bump shell-quote from 1.8.4 to 1.10.0 (#3909) #3909
Bump body-parser from 1.20.4 to 1.20.6 (#3911) #3911
Bump fast-uri from 3.1.2 to 3.1.4 (#3910) #3910
OCPBUGS-99039: Bump dompurify to 3.4.7+ in 5.0 (#3894) #3894
Update build_tools (#3901) #3901
Fix operator Learn more documentation links and remove duplicates (#3899) #3899
chore(deps): update dependency sanitize-html to ^2.17.6 (#3897) #3897
Bump websocket-driver from 0.7.4 to 0.7.5 (#3891) #3891
chore(deps): update dependency tar to ^7.5.20 (#3898) #3898
chore(deps): update konflux references (#3896) #3896
Upgrade node version in Containerfile (#3872) #3872
Apply patches (#3819) #3819
Upgrade path-to-regexp to ^8.4.2 (#3862) #3862
Upgrade sanitize-html to ^2.17.4 (#3861) #3861
Dedupe yarn.lock (#3863) #3863
Upgrade terser-webpack-plugin to ^5.6.1 (#3818) #3818
chore(deps): update typescript type definitions (non-major) (#3867) #3867
chore(deps): update dependency axios to ^1.18.1 (#3868) #3868
chore(deps): update konflux references (#3866) #3866
Full changelog

agent-installer-utils

OCPBUGS-105450: Update Konflux references #334
OCPBUGS-101759: Update Konflux references #331
OCPBUGS-99905: Update Konflux references #303
OCPBUGS-99745: Use Operator catalog in 4.22 for OVE #323
OCPBUGS-87367: Updating ose-agent-installer-utils-container image to be consistent with ART for 5.0 #308
OCPBUGS-99425: Use agent-preinstall-image-builder from quay-proxy #319
OCPBUGS-98692: Update cluster-logging and loki operator versions #315
Full changelog

apiserver-network-proxy

NO-JIRA: Merge https://github.com/kubernetes-sigs/apiserver-network-proxy:master (cc6bc61) into main #114
Full changelog

aws-cloud-controller-manager

OCPCLOUD-3643: Merge https://github.com/kubernetes/cloud-provider-aws:master (63ec440) into main #160
Full changelog

aws-cluster-api-controllers

✨ OCPCLOUD-3513: feat: add gh-summary target to download manifests from GitHub #617
✨ OCPCLOUD-3513: add a tool to generate manifests-summary #616
🐛OCPBUGS-104496: UPSTREAM: <carry>: Add projected bound SA token volume for OpenShift #624
✨ OCPCLOUD-3538,OCPCLOUD-3556: Exclude unsupported CAPI CRDs and scope ClusterRole #618
🌱 OCPCLOUD-3599: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.13.0 (a84670f) into main #623
:seedling: OCPBUGS-95028: bump golang.org/x/net to v0.55.0 for CVE-2026-25681 #622
:rocket: UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.12.1 (13af066) into main #621
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, gcp-pd-csi-driver-operator, openstack-cinder-csi-driver-operator

OCPBUGS-111893: Add proxy hook for HyperShift CSI driver controller deployments #599
OCPBUGS-100071: csi-driver-smb: DeleteVolume call fails to mkdir under /tmp #593
STOR-2998: Remove legacy gcp-pd-csi-driver-operator #592
STOR-3060, STOR-3061: implement TLS adherence for AWS EFS and SMB CSI driver operator #587
STOR-2998: Copy the test manifests from the legacy dir to a top-level test dir #589
STOR-2997: Auto generate assets for gcp pd csi driver #585
OCPBUGS-99199: Add networking.k8s.io group policy #579
STOR-2914: Bump all deps for 5.0.0 #582
OCPBUGS-99200: Add networking.k8s.io group policy #581
OCPBUGS-99490: Apply some static assets earlier, before starting controllers #584
STOR-2997: Minimal implementation of GCP PD CSI driver operator #576
Full changelog

aws-karpenter-provider-aws

OCPBUGS-100043: Updating aws-karpenter-provider-aws-container image to be consistent with ART for 5.0 #34
AUTOSCALE-644: Release chores 5.0 for Karpenter #33
Full changelog

aws-kms-encryption-provider

CNTRLPLANE-4011: Rebase aws-encryption-provider repo to upstream/master (8c16f8c) for OCP 5.0 #52
Full changelog

aws-machine-controllers

OCPCLOUD-3615: Bump k8s to 1.36 and Go to 1.26 #197
OCPBUGS-47508: Add max-concurrent-reconciles flag to machine actuator #195
NO-JIRA: Bump golang.org/x/crypto to fix CVE #194
Full changelog

aws-pod-identity-webhook

OCPCLOUD-3583: Update aws-pod-identity-webhook to k8s 1.36 #220
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-100185: fix: use PATCH when refreshing failed VMs #201
OCPCLOUD-3591: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (4128235) into main #164
Full changelog

azure-cluster-api-controllers

🚀 OCPCLOUD-3600: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.26.0 (19ff821) into main #388
🐛 OCPBUGS-85337: set imagePullPolicy IfNotPresent on provider workloads #393
Full changelog

azure-disk-csi-driver

OCPBUGS-101779: UPSTREAM: 3756: fix: optionally skip reading the config from the API server #159
OCPBUGS-96820: Bump golang.org/x/net from v0.52.0 to v0.55.0 #156
Full changelog

azure-file-csi-driver

STOR-2928: Rebase to v1.35.5 for OCP 5.0 #143
Full changelog

azure-kms-encryption-provider

CNTRLPLANE-4025: support sovereign Managed HSM endpoints #55
CNTRLPLANE-4022: Rebase azure-kubernetes-kms to v0.11.0 for OCP 5.1 #52
OCPSTRAT-3549: Correct Managed HSM endpoints #51
Full changelog

azure-machine-controllers

OCPCLOUD-3616: Bump k8s to 1.36 and Go to 1.26 #206
OCPBUGS-92024, OCPBUGS-98075: bump golang.org/x/crypto to v0.54.0 to fix CVEs #203
OCPBUGS-96854: bump golang.org/x/net to v0.55.0 #204
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-98546: Remove dangling symlink #87
🐛 OCPBUGS-85337: set imagePullPolicy IfNotPresent on provider workloads #85
OCPBUGS-98329: Grant capi-installer permission on ConfigMap #86
Full changelog

baremetal-installer, installer, installer-artifacts

TRT-2925: Revert “CORS-4441: Bump Azure Marketplace Images” (#10802) #10814
OCPBUGS-113634: images: add BUILD_VERSION arg #10801
CORS-4441: Bump Azure Marketplace Images #10802
OCPBUGS-113641: Update timeout in GetMarketplaceImage to 5 minutes #10803
CORS-4549: gcp: set universe domain in Infrastructure status for GCD #10759
OCPBUGS-105449: update GCP auth functions & validations #10694
OCPBUGS-105456: fix KMS service agent domain for sovereign clouds #10752
OCPBUGS-88511: Disable apps DNS validation for add-nodes #10737
NO-JIRA: openstack: pin argcomplete for yq on Python 3.9 #10757
NO-ISSUE: Render OSImageStream in OKD too #10730
OCPBUGS-105407: Remove VSphereMultiNetworks feature gate #10760
OCPBUGS-74510: vsphere: remove VSphereMultiDisk feature gate references #10753
no-jira: Update GCD ability to identify project #10745
no-jira: vendor: update o/api to the latest after several Feature promotions to default #10746
OCPBUGS-101695: bump golang.org/x/net to v0.56.0 #10749
OCPBUGS-85296: export Azure Metadata.Region for state file serialization #10736
CORS-4406: CORS-4407: CORS-4408: CORS-4410: CORS-4411: CORS-4413: Installer use customer managed kms keys to encrypt S3 for Ignition and Internal Registry #10553
OCPBUGS-100189: Patch GCP Load Balancer Health Checks #10731
OCPBUGS-98700: Azure: delete bootstrap ignition storage during bootstrap destroy #10701
OCPBUGS-78995: Azure Machines: Accept explicit image ID #10712
OCPBUGS-104455: Add a 10sec restart interval for ICC service, so that there is enough time for CRDs to become available #10739
no-jira: Update hack scripts to set min go version to 1.26 #10738
CORS-4516: GCP: Configure cloud provider to use mounted creds #10733
OCPBUGS-98102: Add validations Azure Dualstack #10677
CORS-4537: GCP: gracefully handle 503 in disk type check #10732
CORS-3898: azure: Fix the dualstack errors #10656
OCPEDGE-2788: agent: split fencing credentials placement by identification key #10684
OCPBUGS-99164: bootstrap: replace envsubst with sed in konnectivity.sh #10728
CORS-4542: restrict ClusterAPI machine management to only supported platforms #10717
CORS-4425: gcp: add OS image validation for sovereign clouds #10709
CNTRLPLANE-2012: Wire signer certs to read PKI config via SignerKeyParams #10595
OCPBUGS-63133: PowerVS: Error out if VPC does not exist #10137
OCPBUGS-98696: baremetal: fix provisioning ISO kernel arguments #10702
no-jira: bump k8s packages to v0.36 #10713
CORS-4428: gcp: reject PSC endpoint overrides for sovereign clouds #10708
CORS-4514: Set sovereign cloud defaults for machine types #10706
CORS-4537: Add API-backed disk type availability validation #10687
no-jira: azure: Disable shared access key by default #10574
CORS-4507: aws: support edge machine pool management with ClusterAPI #10625
CNTRLPLANE-2847: bootstrap: pass rendered manifests and payload version to etcd render #10679
CORS-3997: azure: update default instance types from v3 to AMD Dasv5 #10565
OCPBUGS-98141, OCPBUGS-99018: bump golang.org/x/crypto to v0.52.0 #10690
CORS-4539: Support sovereign cloud service account email format for gcp/gcd #10691
CORS-4538: Use metadata project ID for sovereign cloud gather #10688
NO-ISSUE: Remove workaround for boot image version mismatch #10665
OCPBUGS-98586: Don’t wait on oc delete in konnectivity_cleanup #10682
OCPBUGS-98529: cluster-api: disable diagnostics endpoint for local CAPI controllers #10681
CORS-4423: GCP: Use WithCredentialsJSON when Possible #10624
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

baremetal-operator

NO-ISSUE: Merge upstream 2026-07-30 #516
NO-ISSUE: Merge upstream 2026-07-25 #513
METAL-1900: Merge upstream #510
Full changelog

baremetal-runtimecfg

OPNET-785: Add FRR peer-file rendering for BGP-based VIP management #395
OCPBUGS-99496: Detect bootstrap apiserver shutdown via /readyz #396
Full changelog

cli, cli-artifacts, deployer

OCPBUGS-85019: oc login: Fix polluting KUBECONFIG file #2357
NO-JIRA: Fix issues collection when CVO handles the risks #2352
OCPBUGS-99013: inspect: Redact OAuthClient secrets #2354
OTA-1959: Case 1 - oc adm upgrade recommend shows both Cincinnati-sourced and alert-sourced risks in output #2349
NO-JIRA: Update docs.openshift.com base URL to point to OCP docs #2353
OCPBUGS-101781: Isolate OCP-42982 kubeconfig writes #2337
OTA-1814: Handle accept risks with different commands #2336
OCPBUGS-100310: oc login –exec-plugin oc-oidc fails to refresh expired token against Microsoft Entra ID #2332
Revert “TRT-2817: Revert “Merge pull request #2279 from nbottari9/1814-duplicate-warning”” #2322
OCPBUGS-99757: Include extra scopes in OIDC token cache key #2323
TRT-2817: Revert “Merge pull request #2279 from nbottari9/1814-duplicate-warning” #2320
NO-JIRA: Bump k8s dependencies to 1.36 along with openshift #2318
OTA-1814: fix(alerts): Remove duplicate information in the recommend command #2279
NO-JIRA: Handle wrapped ENOTSUP error #2311
NO-JIRA: First try newer iotop-c and fallback to older one #2317
NO-JIRA: Register the e2e tests for accept in the subfolder #2300
NO-JIRA: Fix staticcheck warnings in pkg/cli/admin/mustgather #2306
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

cloud-credential-operator

CORS-4544: WIF Support on GCD #1073
CCO-848: Add tls-min-version and tls-cipher-suites CLI flags to CCO #1063
OCPBUGS-83624: Embed credentials_request.yaml template in test binary #1072
CCO-837: Replace deprecated golang/mock with go.uber.org/mock #1069
NO-ISSUE: Add patrickdillon to OWNERS #1071
CCO-834, CCO-835, CCO-836: Upgrade to Kubernetes 1.36 with CI and e2e tests #1066
CORS-4524: Enable GCP custom universe domain support for CCO #1068
Full changelog

cloud-network-config-controller

OCPBUGS-87249: on AWS, select associated IPv6 CIDR block for egress IP subnet #228
CORS-4523: support GCP custom universe domain #249
NO-JIRA: Update OWNERS file #229
CORENET-7047: CNCC K8s rebase to 1.36.2 #223
Full changelog

cluster-authentication-operator

NO-JIRA: Remove rh-roman from OWNERS #970
NO-JIRA: Retry conflict errors on UpdateKMSEncryptionStatus function #968
CNTRLPLANE-3237: kms key controller preflight support- #747 #965
CNTRLPLANE-2589: Migrate test/e2e-oidc to OTE + bug fixes(imagestream,scc,Pathological Event Monitor) #945
CNTRLPLANE-3762: Watch openshift-config ConfigMaps in OAuth route health check controller #964
NO-JIRA: bump library-go api and client-go #963
NO-JIRA: Bump library-go #962
CNTRLPLANE-3762: Include system cert pool in proxy resolver transport #961
CNTRLPLANE-3762: Clear IdP validation hash when all identity providers are removed #960
NO-JIRA: Update openshift/* #959
CNTRLPLANE-3762: Add support for component-scoped proxy #946
CNTRLPLANE-3237: creates the kms status provider from the operator client- #741 #958
NO-JIRA: add KMS preflight deploy e2e to encryption-kms-2 #956
CNTRLPLANE-3375: bugfix: make switched controller clear status conditions on delegate controller shutdown #955
CNTRLPLANE-3361: Update openshift/* #957
NO-JIRA: Automatic agentic rebase: Update library-go to d8f45c2 #954
CNTRLPLANE-3237: encryptionstatusprovider: implement UpdateKMSEncryptionStatus #953
CNTRLPLANE-3237: encryptionstatusprovider: use AuthenticationInterface instead of Clientset #952
CNTRLPLANE-3237: intro authenticationEncryptionStatusProvider #951
NO-JIRA: kms to kms key identifier check #941
NO-JIRA: Bump library-go to sync #948
CNTRLPLANE-3234: wire KMS health reporter status writer #947
Full changelog

cluster-autoscaler

OCPBUGS-99660: Fix VPA checkpoint overwrite bug #433
OCPBUGS-92799: UPSTREAM: 10001: chore(clusterapi): add machine phase check for failed machines #430
AUTOSCALE-637: Fix VPA E2E vendoring #429
AUTOSCALE-555: adding openshift provider #417
Full changelog

cluster-autoscaler-operator

NO-JIRA: Add /release-chores chore cycle skill #382
OCPBUGS-100034: Dump kube RBAC proxy and do metrics endpoint authn & authz in process #381
AUTOSCALE-642: Release chores 5.0 #380
NO-JIRA: add coderabbit configuration file #375
NO-JIRA: update owners file with autoscale team members #379
AUTOSCALE-555: change default cloud provider to openshift #368
Full changelog

cluster-baremetal-operator

OCPBUGS-111889: drop IRONIC_INSECURE from BMO #644
OCPBUGS-105455: Fix infinite reconciliation loop in EnsureMirrorConfig #641
OCPBUGS-86888: Mount IDMS mirror config into machine-os-images init container #636
OCPBUGS-100033: Migrate metrics from kube-rbac-proxy sidecar to controller-runtime’s SecureServing #638
OCPBUGS-66101: set Progressing=True during cluster update #599
OCPQE-32094: Address review feedback from PR #622 #637
METAL-1922: Bump BMO to latest downstream main branch, update the supported TLS groups for BMO #639
METAL-1833: Add host_fw_components tests to CBO test extension #622
METAL-1795: Add TLS group/curve support #632
OCPBUGS-99278: Apply cluster TLS profile to ironic-proxy container #633
OCPBUGS-99220: static-ip-manager should be optional #631
OCPBUGS-66101: Set Progressing=True during cluster update #629
METAL-1833: Add nic_validation OTE test #627
Full changelog

cluster-capi-controllers

OCPCLOUD-3434: add gh-summary target to download manifests from GitHub #306
OCPCLOUD-3434: Generating manifests-summary #305
OCPCLOUD-3434, OCPCLOUD-3556: Exclude unsupported CAPI CRDs and scope ClusterRole #304
🚀 OCPCLOUD-3598: Merge https://github.com/kubernetes-sigs/cluster-api:v1.13.4 (27f4644) into main #298
Full changelog

cluster-capi-operator

OCPBUGS-85063: Fix CredentialsRequest capability annotations #630
OCPBUGS-104496: aws: use capa-controller-manager as service account #644
OCPCLOUD-3513: Generate the manifests summary #643
OCPCLOUD-2664: Aggregate controller statuses in clusteroperator controller #574
OCPCLOUD-3647: Consolidate install-time object processing in toBoxcutterRevision #633
NO-JIRA: resolve placeholder version for k8s.io/autoscaler APIs #642
OCPBUGS-100143: e2e: skip CRD Compatibility Checker tests on External topology clusters #638
NO-JIRA: go.mod: pin k8s.io/cri-streaming to v0.36.2 #639
OCPBUGS-100246: Fix e2es on CAPI-native clusters #641
OCPCLOUD-3571: Add OTE e2e tests for ClusterAPIMachineManagementAWS feature gate #613
OCPCLOUD-3538, OCPCLOUD-3556: manifests-gen: enable KRM plugins and add exclude/rename-resources transformers #621
OCPBUGS-84321: ClusterAPIMachineManagement: capi-controllers: excessive restarts of during cluster installation #614
OCPCLOUD-3507: Add OTE e2e tests for ClusterAPIMachineManagement feature gate #606
NO-JIRA: Fix buildComponentList godoc #632
CORS-4512: aws: allow privateDNSName and assignPrimaryIPv6 field on CAPI machines in dual-stack clusters #592
CORS-4512: aws: set IPv6 block on AWSCluster in dual-stack clusters #593
OCPCLOUD-3607: Bump K8S to 1.36 #628
OCPCLOUD-3368: Adding annotations to manifests for CVO to identify #588
OCPCLOUD-3366: crdcompatibility: add validation for CRDData.Type field #625
OCPCLOUD-3542: Add CRD Compatibility Checker OTE e2e tests #599
OCPBUGS-98329: Add aggregated cluster role for extended per-provider RBAC #623
OCPCLOUD-3539: add topology-aware operator for CRD Compatibility Checker #600
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-112453: Moved node sync job creation from manifest to operator controller #506
OCPBUGS-112077: Bump cloud-provider-aws to fix NLB e2e occasional timeout failures #505
CORS-4551: GCP: mount bound sa token volume #502
OCPBUGS-100052: Created new job to update vSphere nodes to have vsphere label #497
OCPBUGS-105409: chore: remove AWSServiceLBNetworkSecurityGroup feature gate references #500
CORS-4516: GCP: Update Required Permissions #493
OCPCLOUD-3610: Update to K8s 1.36.3 dependencies #496
OCPBUGS-99755: OTE: fix AWS endpoint resolution for non-standard partitions #494
SPLAT-2713: Reapply “Merge pull request #476” to bring in e2e for BYO SG for AWS NLB #492
OCPBUGS-98617: Fixes daemonset Progressing=True logic #490
Revert #476 “SPLAT-2713: Update AWS CCM e2e test module version” #491
SPLAT-2713: Update AWS CCM e2e test module version #476
Full changelog

cluster-config-api

OCPBUGS-83412: Disable PSA for placeholder for 5.0 #3002
OCPBUGS-112657: Handle Sippy date-only format in featuregate-test-analyzer #3007
CNTRLPLANE-3871: promote OSStreams feature gate to Default for Hypershift #2997
TRT-2908: Revert openshift/api#2986 #2992
CNTRLPLANE-3609: graduate etcdBackendQuota to GA #2987
CNTRLPLANE-3871: promote OSStreams feature gate to Default for Hypershift #2986
MON-4608: add interrupts to NodeExporterCollectorConfig CRD types #2955
STOR-3014: Promote SELinuxMountGAReadiness to GA #2964
Promote ExternalOIDCWithUpstreamParity to Default feature set #2915
STOR-2959: Promote VolumeGroupSnapshots to GA #2965
Move GCD to TechPreview #2970
OCPNODE-4521: Promote AdditionalStorageConfig feature gate to Default #2858
MON-4625: add support for the nvmesubsystem collector #2960
Promote IrreconcilableMachineConfig to GA #2929
NE-2777, NE-2778: Implement Gateway API management knob #2890
Use regex instead of format help for KMS secret name validation #2966
OCPBUGS-74511: Remove RouteExternalCertificate feature gate #2962
MON-4607: add zoneinfo to NodeExporterCollectorConfig CRD types #2948
AGENT-1493: Promote NoRegistryClusterInstall Feature to Default #2859
MON-4620: expose remote-write protocol version #2958
CORS-4417: Add UniverseDomain field to GCPPlatformStatus #2963
OCPNODE-4622: Promote CRIOCredentialProviderConfig feature gate Default #2844
NE-2823: Promote Multi HAProxy Versions feature to default #2947
MON-4616: add support for dmmultipath collector #2956
CORS-4387: Promote AWS DualStack to Default #2797
CNTRLPLANE-3237: Kms plugin health report clean up #2931
OPRUN-4705: Remove NewOLMPreflightPermissionChecks FeatureGate #2957
SPLAT-2827: Added vSphere failure domain to vcenter check #2932
Check all hypershift variants when the featuregate is not platform specific #2951
OCPBUGS-80958: NodeUID in status to detect replaced node with same name #2821
OPRUN-4691: Promote OLMLifecycleAndCompatibility feature gate to Default #2920
OPNET-780: Add BGPBasedVIPManagement feature gate and BGP VIP management fields #2923
CNTRLPLANE-3361: Align with latest beta API of Vault #2936
Update KAL to latest #2939
NE-2569: Promote Dynamic Configuration Manager to Default #2788
Adapt publish kubebuilder tools to ocp5 + publish k8s v1.36 kubebuilder tools #2941
CNTRLPLANE-3237: Add KMS preflight check API to operator/v1 #2916
CORS-4435: GCP Sovereign Cloud Feature Gate #2810
OCPSTRAT-3036: Rebase 1.36.2 #2813
OCPBUGS-91634: CAPI: Fix ImageDigestFormat validation to allow deep registry paths #2918
Sippy timestamp filter should use Millisecond unix timestamp for proper filtering #2928
Remove AzureClusterHostedDNSInstall Featuregate #2902
Full changelog

cluster-config-operator

OCPBUGS-104562: Mark kube-cloud-config recreation test disruptive #497
MON-4499: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #468
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-105222: GCP e2e: bump only memory for E2 custom machine types #417
NO-JIRA: Fix flaky unit-test harness races and tight timeouts #416
OCPCLOUD-3611: Bump Kubernetes dependencies to 1.36 #414
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-csi-snapshot-controller-operator

STOR-3005: Remove v1beta2 group snapshot API #283
STOR-2914: Bump all deps for 5.0.0 #285
Full changelog

cluster-dns-operator

OCPBUGS-86009: Fix dns operator reporting Progressing=True on scale up #477
NE-2817: Gate operator metrics TLS on tlsAdherence via ShouldHonorClusterTLSProfile #484
NE-2765: Bump Kubernetes to 1.36.2 and Go to 1.26 #483
NE-2743: Support centralized TLS security profiles for CDO metrics #482
Full changelog

cluster-etcd-operator

CNTRLPLANE-4136: update api to pull in etcd db ga #1682
OCPEDGE-2118: Fix pcs stderr handling #1674
CNTRLPLANE-3460: Refactor defrag controller to lower impact of defrag #1618
OCPBUGS-81500: fix: udpate healthcheck previous state only after successful operator status update #1614
OCPBUGS-105357: Fix TNF fencing skip for IPv6 bracketed stonith IPs. #1669
CNTRLPLANE-3403: reduce default snapshot-count to 5000 #1666
OCPBUGS-84695: feat(tnf): TNF job controller framework and lifecycle management #1655
NO-JIRA: add ceo disruptive suite to sippy’s disruptive #1667
OCPBUGS-100294: fix TNFNodeInMaintenance PromQL label mismatch #1664
OCPBUGS-94106: Add APIServer informer to EnvVarController cache sync #1659
OCPBUGS-100072: Revert ‘OCPBUGS-88490: fix etcd operator deadlock when etcd-endpoints configmap is stale’ #1660
OCPEDGE-2094: Add console notifications for pacemaker health events #1654
CNTRLPLANE-3609: update TestEtcdDBScaling to also include the validation check for BackendQuotaGiB #1656
OCPEDGE-2118: Record Kubernetes events for etcd transition lifecycle #1653
OCPEDGE-2707: Add TNF Pacemaker PrometheusRule alerts #1650
CNTRLPLANE-2847: render: Read FeatureGate CR from rendered manifests #1648
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-image-registry-operator

CORS-4520: GCP Universe Domain Support #1356
OCPBUGS-99257: Improve GCS KMS encryption error handling and documentation #1344
CORENET-7355: Remove redundant ingress rule from image-registry netpol #1354
Full changelog

cluster-ingress-operator

OCPBUGS-114134: Preserve server-defaulted fields on init containers and volumes #1563
OCPBUGS-109738: Add BackendTLSPolicy and ReferenceGrant e2e test coverage helpers #1550
OCPBUGS-99921: Annotate GatewayClass when istiod is available to fix startup race #1540
OCPBUGS-100424, OCPBUGS-104205: Harden DNS duplicate-domain ownership checks #1543
OCPBUGS-99920: Vendor sail-operator from OSSM release-3.4.1 #1527
OCPBUGS-100435: Set Accepted=False and Prometheus alert for ListenerSets on managed Gateways #1539
TRT-2874: Revert #1513 “NE-2836: Set Accepted=False and Prometheus alert for ListenerSets on managed Gateways” #1537
NE-2833: Replace deprecated io/ioutil usage #1531
NE-2823: Bump API to promote Multi HAProxy Versions feature #1535
OCPBUGS-85680: Re-fetch infraConfig on every periodic loop iteration #1458
OCPBUGS-31521: Don’t publish duplicate DNS records #1229
NE-2836: Set Accepted=False and Prometheus alert for ListenerSets on managed Gateways #1513
OCPBUGS-63219: Support NLB protocol to configure proxy protocol and client IP preservation #1426
OCPBUGS-100186: Rename network policy in TestContainerLoggingMinLength #1532
NE-2585: Bump GWAPI to v1.5.1 and Istio v1.30.1 #1530
NE-2796: Respect OpenShift TLS Profiles during Istio/GatewayAPI installation #1480
NE-2742: Apply cluster TLS security profile to operator metrics and canary endpoints #1501
OCPBUGS-86841: Add BackendTLSPolicy to Gateway API e2e CRD test coverage #1523
CORS-4451: GCP: Set Universe Domain #1515
NE-2809: Add upgradeable logic for HAProxy version #1517
OCPBUGS-99775: Update TestHTTPHeaderBufferSize for HAProxy 3.2 response code change #1524
OCPBUGS-90616: Add GRPCRoute to Gateway API e2e CRD test coverage #1482
NE-2737: Add support for TLS curves in router deployment configuration #1478
NE-2764: Bump Kubernetes to 1.36.2 and Go to 1.26 #1505
OCPBUGS-98310: Bump sail-operator install library to OSSM 3.4.0 #1508
NE-2219: Select HAProxy version from IngressController API #1498
TRT-2793: Revert Bump sail-operator install library to OSSM 3.4.0 #1507
OCPBUGS-98310: vendor sail-operator install library from OSSM 3.4 #1456
NE-2218: Add new HAProxy 2.8 and 3.2 image references #1499
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-83400: revert dev cert rotation #2272
NO-JIRA: update KMS tests with bump library-go changes #2264
OCPBUGS-85181: Remove MutatingAdmissionPolicy from defaultGroupVersionsByFeatureGate #2141
NO-JIRA: Retry conflict errors on UpdateKMSEncryptionStatus function #2265
NO-JIRA: Update KMStoKMS scenario to multi provider #2261
CNTRLPLANE-3237: kms key controller preflight support #2252
NO-JIRA: bump library-go api and client-go #2257
NO-JIRA: Add parallelism KMS OnOff Scenarios #2251
NO-JIRA: Bump library-go #2255
NO-JIRA: Update openshift/* #2249
CNTRLPLANE-3237: creates the kms status provider from the operator client #2248
MON-4502: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #2036
NO-JIRA: add KMS preflight deploy e2e to encryption-kms-2 #2246
CNTRLPLANE-3361: Update openshift/* #2247
CNTRLPLANE-3861: Add KMS plugin sidecar revision readiness check #2220
NO-JIRA: Automatic agentic rebase: Update library-go to d8f45c2 #2238
NO-JIRA: Add KMS key ID identifier #2237
CNTRLPLANE-3237: encryptionstatusprovider: use KubeAPIServersGetter instead of Clientset #2235
NO-JIRA: Refactor KMS cases #2229
CNTRLPLANE-3237: intro kubeAPIServerEncryptionStatusProvider #2230
NO-JIRA: Remove old test files #2232
OCPSTRAT-3036: Rebase 1.36.2 #2129
NO-JIRA: Bump library-go to sync #2227
NO-JIRA: Remove old helper and assertion func #2223
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-99770: Remove unnecessary namespace informers from kubeInformersForNamespaces #950
OCPBUGS-99770: remove duplicate wrappings of core_getters #952
CNTRLPLANE-3778: Migrate openshift-test-private kcm cases to OTE #943
OCPSTRAT-3036: Rebase 1.36.2 #930
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-113761: bump otel to v1.44.0 to fix CVE-2026-41178 #663
OCPSTRAT-3036: Rebase 1.36.2 #646
Full changelog

cluster-machine-approver

OCPBUGS-100160: Fix status controller unit-test teardown race #312
NO-JIRA: Bump envtest to 1.36.2 #314
OCPCLOUD-3612: Bump k8s v1.36, go 1.26 #311
Full changelog

cluster-monitoring-operator

MON-4548, MON-4549, MON-4550, MON-4551: Enforce Thanos grpc tls parameters #3018
MON-4612: log Phase 1 dual ConfigMap/CRD configuration notice #2995
MON-4559: enable interrupts node-exporter collector via config #2888
NO-JIRA: [bot] Synchronize versions of the downstream components #3049
MON-4629: support the nvmesubsystem collector in the config CRD #3046
NO-JIRA: update OWNERS #3050
NO-JIRA: feat: validate systemd units #3048
OCPBUGS-105438: feat: support ogx api adoption metrics #2984
OCPBUGS-105389: enable read-only rootfs for all containers #3039
MON-4637: implement merge logic to support the new MessageVersion field in the config CRD #3036
NO-JIRA: Add test descriptions #3037
MON-4577: restrict alertmanager gossip mesh ports to same-instance pods #3032
NO-JIRA: [bot] Synchronize versions of the downstream components #3035
NO-JIRA: Allow to pass custom arguments to e2e test command #3033
NO-JIRA: tasks: pass context to MetricsServerTask methods instead of storing it #3025
NO-JIRA: [bot] Synchronize versions of the downstream components #3017
NO-JIRA: chore: update Prometheus-operator to v0.93.0 #3010
MON-4630: support the dmmultipath collector in the config CRD #3015
: OCPBUGS-91735: fix: watch cluster wide proxy changes and apply changes accordingly #3004
NO-JIRA: test: make TestDocExamples and TestNetworkPolicy more stable #3013
NO-JIRA: add metrics for the validating webhook #2838
NO-JIRA: e2e: defer subtest resource cleanup in TestPrometheusRemoteWrite #3016
NO-JIRA: [bot] Synchronize versions of the downstream components #3014
NO-JIRA: chore: pin GOTOOLCHAIN in update-go-deps + update Go dependencies #3006
NO-JIRA: increase golangci-lint timeout #3011
MON-4624: enable the nvmesubsystem collector by default #3005
NO-JIRA: [bot] Synchronize versions of the downstream components #2994
MON-4413: support MessageVersion v2.0 for remote-write #2977
OCPBUGS-85522: disable kubelet Endpoints in prometheus-operator #2931
NO-JIRA: test: adjust e2e tests on retention settings #2999
MON-4615: add option to disable the dmmultipath collector #2996
NO-JIRA: Revert “MON-3697: use maximumStartupDurationSeconds instead of container patch” #2982
MON-4558: enable zoneinfo node-exporter collector via config #2986
OCPBUGS-98450: fall back to kube-system/global-pull-secret for telemeter-client token #2985
NO-ISSUE: Update prometheus-operator dependencies #2966
OU-1389: manually pass features to monitoring plugin #2987
OCPBUGS-99019: jsonnet: exclude AlertmanagerClusterFailedPeers from shipped rules #2993
MON-4523: ClusterMonitoring prometheusConfig #2953
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-network-operator

OCPBUGS-105887: [cherry-pick 5.0] Filter unsupported cipher suites to prevent ovnkube-identity crash #3128
OCPBUGS-111097: Drop strategy.rollingUpdate and switch strategy.type to Recreate via pre-patch in frr-k8s-statuscleaner deployments on SNO #3129
NO-ISSUE: Drop github.com/pkg/errors #3112
OCPBUGS-64582: frr-k8s: use Recreate strategy for statuscleaner deployment #3104
OCPBUGS-98918: Use service-ca certificates for network-check-source metrics #3097
OCPBUGS-99460: Fix connectivity check for nodes named with IP address #3083
CORENET-5658: Bump ovn-controller CPU request to 50m to prevent CPU starvation #3051
CORENET-6714: Enable Network Observability on Day 0 #3087
CORENET-7054: Use TLS profile to render CLI args for deployed components #3043
CORENET-5972: Consume openvswitch-ipsec systemd service for OVN IPsec deployment #2662
NO-JIRA: vendor: bump github.com/openshift/api to latest master #3089
OCPBUGS-88063: ovn-kubernetes: Move MNP from ConfigMap to CLI flags #3072
CNTRLPLANE-3213: Enable configurable PKI for managed certificate rotation #2958
CORENET-6581: Add transport label to CUDN telemetry recording rule #2978
OCPBUGS-98619: Bump frr-k8s MAX_FDS from 1024 to 65536 #3054
Revert “Enable Network Observability on Day 0” (#2925) #3086
CORENET-6714: Enable Network Observability on Day 0 #2925
OCPBUGS-99074: Align frr-k8s 5.0 CRDs #3070
CORENET-7046: Bump Kubernetes to 1.36.2 and OCP to 5.0 #3017
CORENET-7125: iptables to nftables #3038
NO-JIRA: Refresh Reviewers & Approvers lists #3048
OCPBUGS-62144: Makes sure rendering for egress IP reachabilityTimeout triggers restart of ovnkube (node/control) pods #2955
CORENET-7267: Add pre-merge and custom checks to CodeRabbit configuration #3037
Full changelog

cluster-node-tuning-operator

OCPBUGS-114144: Update PPC help description #1617
OCPBUGS-104311: Bump golang.org/x/net #1600
OCPBUGS-112580: unconditionally disable fwupd-refresh.timer #1602
NO-JIRA: ci: disable smt alignment for ovsDpdk tests #1599
OCPBUGS-112279: Use Add() instead of AddRateLimited() for routine Profile enqueues #1595
CNF-26546: tuned:irqs: set default_smp_affinity using irqaffinity= #1572
CNF-20633: Enable nohz_full and skew_tick by default #1564
OCPBUGS-98060: BUG-FIX Latency Test #1566
OCPBUGS-99461: Add missing annotations to NetworkPolicy manifests #1569
MON-4506: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #1468
OCPBUGS-100115: E2E: LLC: Restore uncore cache annotation to true #1570
NO-JIRA: owners: update #1563
OCPBUGS-97809: e2e: fix broken checks and rework netqueue tests to avoid ARM ethtool blackout flakes #1557
OCPBUGS-98915: E2E: LLC: Pass fresh ctx variable to DeferCleanup functions #1562
CNF-23471: Dedicate cpus for dpdk vswitch #1546
Full changelog

cluster-olm-operator

NO-ISSUE: Add dependabot configuration #225
OPRUN-4665: Update k8s dependencies from v0.35.1 to v0.36.2 and OpenShift dependencies to latest #217
OCPBUGS-95475: chore: bump containerd to 1.7.33 #223
OPRUN-4676: support service account deprecation for OCP 5.0 #222
OPRUN-4696: fix upgrade block message and add 5.0 cluster unit tests #216
NO-ISSUE: Remove stale reviewers/approvers, add trgeiger #220
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-112074: Revert “Revert “NO-JIRA: Disable WatchList feature gate due to the missing support of Project watch”” #755
NO-JIRA: update KMS tests changes with latest library-go bump #753
NO-JIRA: Retry conflict errors on UpdateKMSEncryptionStatus function #752
OCPBUGS-98618: Add HostToContainer mountPropagation to node-pullsecrets volume mount #744
CNTRLPLANE-3237: kms key controller preflight support #747
NO-JIRA: bump library-go api and client-go #746
Revert “NO-JIRA: Disable WatchList feature gate due to the missing support of Project watch” #681
NO-JIRA: Bump library-go #745
NO-JIRA: Update openshift/* #742
CNTRLPLANE-3237: creates the kms status provider from the operator client #741
NO-JIRA: add KMS preflight deploy e2e to encryption-kms-2 #739
CNTRLPLANE-3361: Update openshift/* #740
NO-JIRA: Automatic agentic rebase: Update library-go to d8f45c2 #737
CNTRLPLANE-3237: encryptionstatusprovider: implement UpdateKMSEncryptionStatus #736
CNTRLPLANE-3237: encryptionstatusprovider: use OpenShiftAPIServerInterface instead of Clientset #735
NO-JIRA: kms to kms key identifier check #728
OCPBUGS-87507: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 5.0 #705
CNTRLPLANE-3237: intro openShiftAPIServerEncryptionStatusProvider #734
NO-JIRA: Bump library-go to sync #732
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-112448: Bump kubernetes dependencies to v1.36 #444
Full changelog

cluster-policy-controller

OCPBUGS-87476: Updating ose-cluster-policy-controller-container image to be consistent with ART for 5.0 #188
OCPSTRAT-3036: Bump to Kube v1.36.2 #197
Full changelog

cluster-samples-operator

OCPBUGS-111886: Fix python:latest and nodejs template references after UBI 8 tag removal - #707 #707
OCPBUGS-106188: Periodic sync of supported OCP samples #695
OCPBUGS-106187: Periodic sync of OKD samples #683
OCPSTRAT-3578: Add NetworkPolicy manifests for openshift-cluster-samples-operator namespace #703
OCPBUGS-105319: update kubernetes api to v0.36.3 #704
Full changelog

cluster-storage-operator

OCPBUGS-111892: Pass management cluster proxy env vars to CSI driver operator deployments #725
STOR-3011: Implement CSO upgrade check and Prometheus alerts for SELnuxMount readiness, updated runbook URL #724
OCPBUGS-101758: Fix SELinuxMountGAReadiness on HyperShift #721
STOR-2918: update AWS EBS CSI credentials request policy to mirror upstream #717
STOR-3056: inject TLS adherence from API to vsphere problem detector configmap #718
OCPBUGS-99492: NetworkPolicies should use numeric ports instead of named ports #720
STOR-3013: Add e2e test for SELinuxMount upgrade readiness #715
STOR-2914: Bump all deps for 5.0.0 #719
Full changelog

cluster-version-operator

OCPBUGS-111971: pkg/agenticrun/controller: Pivot to cluster-update-advisor directory #1448
OCPBUGS-14392: make sync status Failure logs human-readable #1440
OCPBUGS-79358: pkg/cvo/egress: Disable Proxy respect on HyperShift #1357
NO-JIRA: fix(pkg/cincinnati): log the correct root CA pool size #1413
OTA-1997: Allow the CVO to use the agentic-skills payload image when creating proposals #1433
OTA-2084: Register agenticrunv1alpha1 in the Runtime client scheme #1434
OTA-2084: pkg/agenticrun/controller: Inline AgenticRun prompt, dropping the ConfigMap #1432
TRT-2842: Revert #1427 “OTA-1997: Allow the CVO to use the agentic-skills payload image when creating proposals.” #1431
OTA-1997: Allow the CVO to use the agentic-skills payload image when creating proposals. #1427
OTA-2084, OTA-2097: pkg/agenticrun/controller: Additional logging to AgenticRun CRD detection #1428
OTA-2084: Conditionally deploy console plugin when AgenticRun CRD is present #1425
NO-JIRA: Fix make build target cd issue #1404
OTA-2064: Rename Proposal API to AgenticRun #1422
OTA-1967: install: Drop Lightspeed CustomResourceDefinitions (Proposal, etc.) #1412
OTA-1956: install: Split multi-document YAML and add missing annotations #1423
Full changelog

console

OCPBUGS-106132: fix gap in data view checkbox col #16964
CONSOLE-5438: Expose ResourceYAMLEditor onCancel to the SDK #16941
OCPBUGS-105598: Bump to @rspack/core 2.1.9 and drop “megahard” packages #16950
OCPBUGS-70112: Add Cache-Control headers to console responses #16923
OCPBUGS-105519: Fix flaky e2e tests missing warmupSPA #16939
OCPBUGS-98943: Make developerCatalog.types matching case-insensitive #16876
OCPBUGS-105517: Fix flaky search.spec.ts Playwright e2e tests #16938
OCPBUGS-95592: Humanize memory and storage values in ResourceQuota display #16874
CONSOLE-5428: follow up la migration du i18next-cli #16926
OCPBUGS-67295: Fix icon display for duplicate operator names from different catalogs #16898
OCPBUGS-81511: Remove unscoped CSV watch from ClusterNotUpgradeableAlert #16904
NO-JIRA: Add ReadWriteOncePod support for Cinder CSI driver #16870
OTA-2035: Address ProdSec findings for OLS Helper Buttons #16910
CONSOLE-5414: Migrate dev-console Cypress tests to Playwright (batch 2) #16741
OCPBUGS-105314: Fix xterm ResizeObserver crash on uninitialized dimensions #16918
OCPBUGS-105273: Fix nested interactive controls on Search page #16914
CONSOLE-5228: re-enable eslint rules and autofix + bump prettier #16915
OCPBUGS-105318: Fix node-groups-filter test to use correct page-heading test ID #16912
OCPBUGS-102342: Dismiss Quick Start drawer in Playwright e2e tests #16903
OCPBUGS-90514: Fix CVE-2026-12143 form-data CRLF injection #16865
NO-JIRA: Prepare for publishing new 4.23 prerelease plugin SDK packages #16905
CONSOLE-5424: Add minimize action for toast notifications #16762
CONSOLE-5118: Improve AI assessment prompts #16880
CONSOLE-5241: Migrate knative-ci.feature Cypress tests to Playwright #16658
CONSOLE-5065: Bump @openshift/dynamic-plugin-sdk to 9.1.0 #16897
CONSOLE-5425: Add rspack native bindings for linux/s390x and linux/ppc64le #16890
CONSOLE-5196: Fix Playwright e2e flakes across multiple test suites #16881
CONSOLE-5196: Increase Playwright CI retries and abort after 10 failures #16887
OCPBUGS-99434: Show toast notification for invalid Helm Chart repositories #16792
CONSOLE-5417: Migrate dev-console Cypress tests to Playwright (batch 4) #16767
CONSOLE-5065: Align Console useResolvedExtensions hook with upstream plugin SDK #16815
OCPBUGS-99491: Fix Installed Operators table row cells ignoring column management #16817
CONSOLE-5439: Migrate to eslint 9 #16878
CONSOLE-5409: Add Playwright e2e test for operator lifecycle metadata UI #16701
CONSOLE-5196: Replace page.locator with getByTestId in Playwright tests #16873
OCPBUGS-90080: Validate chart URL in /api/helm/verify to prevent SSRF #16786
CONSOLE-5400: Make Node management enhancements flagged by OpenShift 5 #16797
CONSOLE-5196: Fix Playwright e2e flakes and CI reliability #16863
NO-JIRA: Remove generated plugin manifest JSON schema files #16875
CONSOLE-5428: i18next-cli migration follow up #16864
RFE-4925: Fix inconsistent Search page filter default (use Name) #16601
HELM-763: Add secrets for Helm release upgrade #16787
CONSOLE-5397: Log perspective overrides when starting Bridge #16838
NO-JIRA: Remove plugin sdk build from yarn dev #16850
OCPBUGS-33836: quickstart page i18n misses (Fix Quick Starts i18n bundle lookup for zh-CN) #16819
OCPBUGS-99418: Bump protobufjs to 7.6.5 to fix CVE-2026-59877, CVE-2026-48712, CVE-2026-41242 #16813
OCPBUGS-84564: remove block volume mode in case of ocs-storagecluster-ceph-nfs #16397
OCPBUGS-86280: Guard against null plugin route components #16587
CONSOLE-5434: Replace Popper with PF components #16831
CNTRLPLANE-3423: feat: inject centralized TLS into console operand #16804
NO-JIRA: Make regular notification icon outlined by default #16811
OCPBUGS-94168: Fix CVE-2026-13149 brace-expansion DoS vulnerability #16812
OCPBUGS-72369: i18n format missing for Request/limit unit labels on deploy image page #16805
OCPBUGS-57309: ‘0 B’ is shown on details page when create pvc with ‘EiB’ unit #16800
OCPBUGS-77379: Incorrect translations for ‘CatalogSources’ and ‘OperatorGroups’ in l… #16801
OCPBUGS-99475: Fix virtualized table row overlap after react-virtualized 9.22.6 upgrade #16798
CONSOLE-5428: migrate to i18next-cli #16796
NO-JIRA: Move jest config out of package.json #16799
CONSOLE-5425: Migrate to rspack #16761
OCPBUGS-99226: Disable Knative e2e cypress test #16782
OCPBUGS-99052: recover from reverse proxy panic on browser disconnect #16776
OTA-2066: AIA mitigations #16763
CONSOLE-5065: Clean up Console extension code reference processing #16115
CONSOLE-5426: remove GraphQL proxy endpoint #16769
OCPBUGS-79520: Fix kebab actions on Installed Operators list page #16682
HELM-731: Upgrade helm in console #16607
OCPBUGS-98489: CVE-2026-59869 bump js-yaml #16760
CONSOLE-5415, OCPBUGS-94037: Bump react-router to ~7.18.1 #16726
NO-ISSUE: Add empty Prow techPreview e2e entrypoint scripts #16766
NO-ISSUE: Match operator lifecycle versions by major.minor only #16698
CONSOLE-3956: Replace custom Shortcut components with PF ShortcutGrid #16207
NO-ISSUE: Skip OLMv0-specific e2e tests when techPreview is enabled #16759
CONSOLE-5423: Add rspack support for dynamic plugins #16752
CONSOLE-5421: Rename “Self-support” to “Unsupported” and stack support phase date #16742
CONSOLE-5196: Fix flaky Playwright e2e tests caused by OAuth redirect timing #16740
CONSOLE-5306: Surface Playwright report link in Prow Spyglass #16743
OCPBUGS-50016, OCPBUGS-86587: Bump to PF 6.6.0 #16750
OCPBUGS-88715: Bump follow-redirects from 1.15.3 to 1.16.0 to remediate CVE-2026-40895 #16590
And 11 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-112264: Console Operator Fails to Recover from DEGRADED State After OIDC Configuration Removal #1213
OCPBUGS-109419: Bump documentationBaseURL to 5.0 #1207
OCPBUGS-77026: DNS optimization, add trailing dots #1112
OCPBUGS-95602: Add OpenShift Quickstart for JBoss EAP 8 #932
CNTRLPLANE-3423: Revert “TRT-2858: Revert “Merge pull request #1196 from ingvagabund/tls-injection-to-console”” #1205
OSDOCS-20110: Add Helm 3 CLI download links alongside Helm 4 #1197
OCPBUGS-99943: set API-server-defaulted fields on deployment specs to prevent excessive update events #1201
CONSOLE-5431: Add allow-all NetworkPolicy to openshift-console namespace #1199
TRT-2858: Revert “Merge pull request #1196 from ingvagabund/tls-injection-to-console” #1200
CONSOLE-5432: Add NetworkPolicy manifests for openshift-console-operator namespace #1198
CNTRLPLANE-3423: feat: inject centralized TLS into console operand #1196
NO-JIRA: Revert “Merge pull request #1170 from logonoff/http2” #1194
CONSOLE-5433: Add default-deny NetworkPolicy for openshift-console-user-settings namespace #1195
OCPBUGS-93982: gate Progressing on version transition and operand rollout status #1188
HELM-639: Update Helm download manifests for Helm 3 and Helm 4. #1175
CONSOLE-5122: Multi-domain console route, ConfigMap, and OAuth support #1184
OCPBUGS-67134: add grace period before reporting Available=False #1179
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

containernetworking-plugins-microshift

OCPBUGS-114407: Remove rhel8 build stage #247
Full changelog

coredns

NE-2744: UPSTREAM: 8227: fix(tls): use Go TLS defaults #194
OCPBUGS-87352: Updating coredns-container image to be consistent with ART for 5.0 #189
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-96822: Bump golang.org/x/net to v0.55.0 #405
Full changelog

csi-driver-nfs

OCPBUGS-97795: Bump golang.org/x/crypto to v0.53.0 #197
Full changelog

csi-external-attacher

STOR-2931: Rebase to upstream v4.12.0 for OCP 5.0 #110
Full changelog

csi-external-provisioner

STOR-2931: Rebase to upstream v6.3.0 for OCP 5.0 #146
Full changelog

csi-external-resizer

STOR-2931: Rebase to upstream v2.2.1 for OCP 5.0 #198
Full changelog

csi-external-snapshotter, csi-snapshot-controller

OCPBUGS-99009: [external-snapshotter] SnapshotContentObjectDeleteError event fired when VolumeSnapshotContent is already deleted #226
Full changelog

csi-livenessprobe

STOR-2931: Rebase to upstream v2.19.0 for OCP 5.0 #94
Full changelog

csi-node-driver-registrar

STOR-2931: Rebase to upstream v2.17.0 for OCP 5.0 #108
Full changelog

docker-registry

CORS-4520: GCP: Support Alternate Universe Domain #474
Full changelog

driver-toolkit

OCPBUGS-82502: Fix e2e test duplicate output from oc run -i –rm #198
Full changelog

egress-router-cni

NO-JIRA: Remove dead code, drastically shrink vendored deps #110
NO-JIRA: Update OWNERS file #104
Full changelog

etcd, installer-etcd-artifacts

DOWNSTREAM: carry: OCPBUGS-103516: Replace bbolt with patched fork to remove MADV_RANDOM #395
CNTRLPLANE-3461: refactor defrag to minimize database lock time #378
OCPBUGS-94014: Rebase v3.6.13 on main (5.0/4.23) #392
Full changelog

gcp-cloud-controller-manager

CORS-4516: Support setting universe domain in client options #131
OCPCLOUD-3592: Merge https://github.com/kubernetes/cloud-provider-gcp:master (b01dfd6) into main #104
OCPBUGS-84569: Fix node.kubernetes.io/exclude-from-external-load-balancers on masters #121
Full changelog

gcp-cluster-api-controllers

OCPCLOUD-3601: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.13.0 (be0534e) into main #300
🐛 OCPBUGS-85337: set imagePullPolicy IfNotPresent on provider workloads #299
Full changelog

gcp-machine-controllers

OCPCLOUD-3617: Update to Kubernetes 1.36 dependencies #182
CORS-4521: Support Alternate Universe Domain #180
Full changelog

gcp-pd-csi-driver

STOR-3064: Add Universe Domain Support (for Google Cloud Dedicated) #126
STOR-2915: Update go.opentelemetry.io/otel and otel/sdk to v1.43.0 #125
Full changelog

gcp-workload-identity-federation-webhook

OCPCLOUD-3585: Update gcp-workload-identity-federation-webhook to k8s 1.36 #21
Full changelog

haproxy-router

OCPBUGS-77056: Make external cert validation asynchronous (v3 — fix re-admission after secret deletion) #828
NE-2826: Fix staticcheck warnings across multiple packages #815
“NO-JIRA: Add AGENTS.md” #710
NE-2829: images/router/f5: Delete F5 router Dockerfile #826
OCPBUGS-77056: Revert #825 “Make external cert validation asynchronous (v2 — race condition fixes)” #829
OCPBUGS-77056: Make external cert validation asynchronous (v2 — race condition fixes) #825
NO-JIRA: Add default coderabbit for the repo #798
TRT-2841: Revert “OCPBUGS-77056: Make external cert validation asynchronous (Resurrection)” #824
OCPBUGS-77056: Make external cert validation asynchronous (Resurrection) #822
NE-2220: Update HAProxy RPM in the router container to 3.2.19 #792
NE-2741: Implement TLS Curves Support for Metrics Endpoints #811
TRT-2813: Revert “Make external cert validation asynchronous” #817
NE-2766: Bump Kubernetes to 1.36.2 and Go to 1.26 #814
OCPBUGS-77056: Make external cert validation asynchronous #745
OCPBUGS-87204: Prevent SSRF via FQDN-typed EndpointSlices #812
Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

OCPBUGS-100170: Rebase master to v1.36.3 #2746
OCPBUGS-64847: kubelet: don’t use non-admitted pods in calculation #2667
OCPBUGS-85262: Re-enable kubectl kuberc commands e2e tests #2731
OCPBUGS-92798: Add NodeSelectorAdjuster admission plugin for standalone clusters (part 2) #2717
STOR-2961: UPSTREAM: 138768: move VolumeGroupSnapshot to V1 #2723
CNTRLPLANE-3323: Update openshift-hack/rebase.sh #2701
OCPBUGS-98100: e2e: storage snapshot tests should read custom timeouts from manifest #2719
OCPBUGS-92836: UPSTREAM: <carry>: upkeep cpu partitioning admission webhook #2713
STOR-2963: Save SELinuxWarningController upgradeability to a ConfigMap #2720
OCPBUGS-90520: UPSTREAM: 140211: Promote regression-issue-74839 to 1.5 #2709
OCPBUGS-99058: Disable DRA extended resource test that requires dedicated DRA infrastructure #2721
OCPSTRAT-3036: Rebase 1.36.2 #2653
Full changelog

hypershift

CNTRLPLANE-3871: promote OSStreams feature gate to Default #9372
OCPBUGS-112497: Remove MutatingAdmissionPolicy runtime-config from KAS #9368
OCPBUGS-111055: Use the correct v1 mcfg api for OSImageStream during ignition #9319
OCPBUGS-108268: Rebase container images from 9.7 to 9.8 to fix gnutls CVEs #9307
CNTRLPLANE-4097: Add clebs to core-approvers #9316
OCPBUGS-109581: Add CVO and CNO to podCrashTolerations #9302
OCPBUGS-99898: Add unit test for aggregateMachineMessages truncation logic #9128
OCPBUGS-98460: Harden leader election failure detection in EnsureNoCrashingPods #9129
CNTRLPLANE-3772: promote ExternalOIDCWithUpstreamParity to Default #8952
NO-JIRA: Update Konflux Tekton task bundle digests #9300
CNTRLPLANE-3202: add restore, OADP, and limitations docs for self-managed Azure DR #9160
CNTRLPLANE-4038: feat(supportedversion): bump latest supported OCP version to 5.1 #9288
OCPBUGS-105865: fix(nodepool): include only TLSSecurityProfile in config hash instead of full APIServer #9287
AUTOSCALE-871: add deployment path for standalone karpenter-operator #9245
GCP-986: chore: add acwalczyk to gcp-reviewers alias #9222
NO-JIRA: Disable repo_gpgcheck for Microsoft repo in Dockerfile.e2e #9290
CNTRLPLANE-3863: improve v2 test isolation #9229
NO-JIRA: feat(ci): split CI report into ARO HCP, KubeVirt, and Azure Self-Managed categories #9282
OCPBUGS-101766: enable TLSAdherence feature gate part on TechPreviewNoUpgrade #9213
OCPBUGS-96908: remove redhat-marketplace catalog from HyperShift #8958
OCPBUGS-105555: Update ubi-minimal base image to fix glib2 CVEs (CVE-2025-14087, CVE-2025-14512) #9276
OCPBUGS-98065: Prevent infraID and clusterID removal via parent-level CEL rules #9102
OCPBUGS-105849: Remove docs/compare tooling to fix Snyk security scan #9285
CNTRLPLANE-3945: fix(docs): set writable uv cache path for arc-runner-set #9281
CNTRLPLANE-3945: Migrate documentation tooling from mkdocs-material to zensical #9139
NO-JIRA: fix: separate gci-only pre-commit hooks from full lint-fix targets #9272
CNTRLPLANE-3625: Add aws-pod-identity-webhook e2e tls cases #8953
OCPBUGS-105602: fix broken relative reference #9277
OCPBUGS-105597: fix(ci): update GHA runner base image to unblock CI #9275
OCPCLOUD-3261: feat(cloud providers): inject centralized TLS configuration #8864
CNTRLPLANE-3959: wire apiserver config through ignition server #9136
NO-JIRA: isolate NewSession tests from ambient AWS env vars #8911
CNTRLPLANE-3984: document all skills and commands in SKILLS.md #9210
OCPBUGS-105193: extract HCCO webhook validation into a dedicated controller #9239
CNTRLPLANE-3997: add manual trigger and fix path filter for docs publish #9261
CNTRLPLANE-3997: correct wrangler pages deploy flags for docs publish #9252
OCPBUGS-60093: fix(upsert): add desired-state hash to detect spec field removals #7713
CNTRLPLANE-3997: add workflow to publish docs to Cloudflare Pages on merge #9221
CNTRLPLANE-3291: docs: add upstream documentation for configurable log levels #9193
CNTRLPLANE-3978: Fix CPO finalizer race leaving orphaned Azure Private Endpoint resources #9194
CNTRLPLANE-3873, CNTRLPLANE-3874, OCPBUGS-94518: update azure CPO overrides for 4.20, 4.21, 4.22 #9211
CNTRLPLANE-3375: test(e2e): remove oc dependency in external oidc e2e tests #9208
OCPBUGS-104543: fix test isolation bug in EnsureDefaultSecurityGroupTagsTest #9228
NO-JIRA: build(deps): bump the github-dependencies group with 23 updates #9190
OCPBUGS-104505: fix(ci): trigger envtest workflows on dependency changes #9215
CNTRLPLANE-3673: add HO Konflux release gating documentation #8947
OCPBUGS-100279: load plugin explicitly in bare mode for skill resolution #9220
OCPBUGS-104528: Update openshift API to resolve broken hypershift integration tests on K8s 1.30 #9231
OCPBUGS-105207: Revert “OCPBUGS-89689: (karpenter) use completed release image for unpinned NodeClaims during CP upgrade” #9233
NO-JIRA: fix(build): bump hack/tools Go version to 1.26.0 to match main module #9223
CNTRLPLANE-3871: e2e: Remove osImageStream cleanup that violates immutability #9206
OCPBUGS-100054: Fix Azure Private clusters without external DNS #9171
GCP-896: chore: add gbarabasz to gcp-reviewers alias #9000
CNTRLPLANE-3979: Add missing ProjectDevelopmentStream 4.14 #9225
CNTRLPLANE-3863: emit lifecycle-aware JUnit for informing e2e tests #9168
NO-JIRA: add e2e-approvers owner alias, grant Dan Mace e2e role #9216
NO-JIRA: build(deps): bump the k8s-dependencies group across 1 directory with 12 updates #9189
OCPBUGS-100184: Wait for Azure ignition DNS before creating workers #9172
OCPBUGS-100279: isolate Claude from push credentials in PR workflows #9214
OCPBUGS-98983: improve guest cluster state management reliability #9198
STOR-2918: update AWS EBS CSI credentials request policy to mirror upstream #8954
OCPBUGS-100301: fix(hostedcluster): handle Unknown status in ClusterVersionFailing inversion #9186
OCPBUGS-89689: (karpenter) use completed release image for unpinned NodeClaims during CP upgrade #8957
NO-JIRA: build(deps): bump the misc-dependencies group across 1 directory with 6 updates #9164
CNTRLPLANE-3863: add e2e v2 test flow document #9151
docs: add July 2026 progress report blog post #9057
OCPBUGS-100302: fix(metrics): only report limited support when label … #9185
NO-JIRA: build(deps): bump github.com/google/cel-go from 0.28.1 to 0.29.0 #9125
CNTRLPLANE-3943: feat(destroy): add –force flag to strip finalizers on grace period expiry #9134
STOR-2954: inject centralized TLS configuration for storage operators #8887
Revert “CNTRLPLANE-3890: Add product-cli unit tests for HCP create cluster” #9201
CNTRLPLANE-3871: resolve RHEL stream dynamically for boot images #9099
NO-JIRA: build(deps): bump the sigs-k8s-dependencies group across 1 directory with 8 updates #9177
CNTRLPLANE-3890: Add product-cli unit tests for HCP create cluster #9107
CNTRLPLANE-3646: wire up AWS v2 e2e lifecycle test coverage #9174
OCPBUGS-100140: bracket IPv6 in OAuth issuer and callback URLs #9120
AUTOSCALE-644: bump karpenter deps to 1.13.0 #9170
CNTRLPLANE-3976: Document management cluster vs hosted cluster feature gates #9182
OCPBUGS-97804: Avoid printing errors twice #8931
CNTRLPLANE-3887: test(e2e): add metricsSet filtering coverage to metrics forwarder test #9078
OCPBUGS-86843: fix(konnectivity): conditionally prefer IPv4 based on HCP network config #9140
OCPBUGS-91511: Fix CPO infinite requeue during deletion when OIDC provider is gone #8894
OCPBUGS-98654: delete_hosted_cluster.sh fails to run with no –dns-zone-rg-name flag #8945
NO-JIRA: docs: fix ARCHITECTURE.md to reflect current CPO image resolution #9179
OCPBUGS-100087: Replace exponential backoff with fixed-interval requeue in CRR controller #9148
OCPBUGS-99783: fix(e2e): check pre-upgrade HO version for shared role support #8891
CNTRLPLANE-3709: test(azure): enable Global Pull Secret test in Azure CI #9073
CNTRLPLANE-3956: Make EnsureGlobalPullSecret e2e test informing #9167
CNTRLPLANE-2539: Move generation of the CAPI Provider Role #8305
NO-JIRA: docs: add hash migration impact guidance and CPO data-plane component docs #9161
CNTRLPLANE-3897: Add product-cli unit tests for create nodepool #9121
CNTRLPLANE-3600: Bump k8s to v0.36.2, controller-runtime to v0.24.1, CAPI to v1.12.8 #8695
CNTRLPLANE-3944: Regenerate requirements.txt files with pinned –hash entries #9135
AUTOSCALE-166: fix yq dependency for running upstream karpenter tests #9060
OCPBUGS-99288: Add proxy env vars to AWS cloud-controller-manager deployment #9053
CNTRLPLANE-3604: Add CAPI migration flag placeholder #9145
CNTRLPLANE-3564: test(awsprivatelink): add unit test for NoSuchHostedZone handling dur… #9141
NO-JIRA: build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.1 #9113
NO-JIRA: build(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.1 in /hack/tools #9111
CNTRLPLANE-3888: docs: add on-demand jira-agent triggering and plugin install instructions #9079
OCPBUGS-54776: fix(ignition-server): log MCS output on HTTP request failures #8936
CNTRLPLANE-400: feat(remediationAllowed in NP): propagate MHC RemediationAllowed to NodePool Ready condition #9019
NO-JIRA: align control-plane Dockerfile builder image with main Dockerfile #9138
OCPBUGS-99768: fix OSImageStream e2e test and Makefile test-changed for OCP 5.0 #9115
CNTRLPLANE-3893: Add product-cli unit tests for destroy cluster #9116
NO-JIRA: ci(deps): bump actions/checkout from 6.0.2 to 7.0.1 #9090
NO-JIRA: ci(deps): bump actions/setup-python from 6.2.0 to 7.0.0 #9089
NO-JIRA: ci(deps): bump actions/setup-go from 6.4.0 to 7.0.0 #9029
OCPBUGS-86494: fix(nodepool): preserve KubeVirt userdata Secrets during NodePool rollout #8581
CNTRLPLANE-3910: Fix e2e test reliability for mirroring tests and test-changed target #9086
CNTRLPLANE-3919: data race in TestEnqueueNodePoolsForCloudConfig #9095
NO-JIRA: chore(konflux): update Tekton task bundles to latest versions #9081
NE-2815: feat: configure HAProxy version selection #9040
CNTRLPLANE-3791: fix: revert api-lint –whole-files to avoid surfacing pre-existing violations #9071
OCPBUGS-99014: Authenticate Konnectivity agents with cluster CA #9031
CNTRLPLANE-3032: test: add e2e v2 tests for NodePool OSImageStream #9033
OCPBUGS-98744: compare post-upgrade RHCOS version against pre-upgrade instead of release metadata #9014
OCPBUGS-98462: add jitter to AWS endpoint service requeue delay #8996
OCPBUGS-98465: prevent DS crash in pull secret verifier and add propagation diagnostics #8991
OCPBUGS-99289: Exclude aggregated docs page from search index #9043
CNTRLPLANE-3199: add etcd backup infrastructure and docs for self-managed Azure #8785
CNTRLPLANE-3862: fix(ci): reintroduce verify-ci make target for GHA verify workflow #9045
CNTRLPLANE-3859: Restructure pre-commit push hooks for faster local feedback #9042
CNTRLPLANE-3434: add ho-release-gate pipeline for nightly promotion #8602
NO-JIRA: fix(cpo): regenerate stale ModernTLS test fixtures #9041
CNTRLPLANE-647: Expose v4/v6InternalSubnet OVN-Kubernetes configuration in HostedCluster API #8249
ARO-27360: Add ACR pull identity configured metric #8840
ARO-24037: gate cloud config on hash to prevent serving stale content #8946
CNTRLPLANE-3615: add tls security profile configuration for the etcd #8871
OCPBUGS-88312: use in-cluster service for oauth-server #8772
CNTRLPLANE-3791: make pre-commit hooks resilient to mock generation failures #9016
NO-JIRA: update Tekton task bundles to latest versions #9038
OCPBUGS-98384: fix bastion cleanup KeyPair leak by capturing infraID/region eagerly #8982
CNTRLPLANE-3674: Add Jira Agent onboarding guide #8814
CNTRLPLANE-3825: move test conventions to TESTING.md #9036
OCPSTRAT-3150: Add etcd sharding by resource kind support #8705
OCPBUGS-98695: add Azure CPO overrides for 4.22 #9010
NO-JIRA: ci(deps): bump actions/setup-node from 6.4.0 to 7.0.0 #9030
CNTRLPLANE-3763: tag bastion resources with e2e provenance #9022
OCPBUGS-98575: feat: inject hosted cluster TLS security profile into packageserver #9001
AUTOSCALE-870: add KarpenterOperator tech-preview FeatureGate #8976
CNTRLPLANE-3774: fix: control-plane-operator: improve opaque conditions #8804
CNTRLPLANE-3695: refactor(hcco): extract machine-config-daemon pod name format to constant #8988
CNTRLPLANE-3820: add cleanleaked tool for AWS leaked resource cleanup #8964
SPLAT-2743: aws/ccm - remove inline iam policy patch #8835
NO-JIRA: Add validateOnUpdateTableInput to envtest and fix test specs #9015
OCPBUGS-98461: requeue CRR on transiently unavailable resources #8997
OCPBUGS-98718: retry CreateVpcEndpoint on AWS throttle errors #9012
CNTRLPLANE-3030: feat(nodepool,ignition-server): consume os-stream and add ValidOSImageStream condition #8792
OCPBUGS-88738: clean up orphaned mirrored ConfigMaps on NodePool deletion #8890
OCPBUGS-97830: Add wait-for-etcd init container to oauth-apiserver #8940
fix(ci): make race detection opt-out for pre-push hook #9003
CNTRLPLANE-3763: tag CLI and e2e AWS resources with infra-id, cluster-name, and source #8909
OCPBUGS-93462: Fix stale resourceVersion in HCCO patchHCPStatusCondition #8902
OCPBUGS-98466: retry Prometheus query exec on transient konnectivity 502 #8995
OCPBUGS-98464: handle stale DaemonSet in GlobalPullSecret test #8990
SPLAT-2741: Add SetSecurityGroups perms for AWS CCM for BYO SG on AWS NLB #8401
OCPBUGS-98571: Skip Azure topology LB scope override for ARO HCP IngressController #8992
CNTRLPLANE-3553: Wire usesRunc detection into RHEL stream resolution #8832
OCPBUGS-88531: Remove CPO-side restart logic for CNO operands #8751
CNTRLPLANE-3831: skip UpstreamParity OIDC tests on releases before 4.23 #8987
OCPBUGS-98086: fix(cpo,hcco): prevent premature KAS convergence during KMS key rotation #8970
OCPBUGS-78310: fix(cli): initialize controller-runtime logger in product-cli #8955
OCPBUGS-63720: orphan machines when managed identity is invalid on clus… #8296
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

ibm-cloud-controller-manager

OCPCLOUD-3593: Rebase from upstream IBM-Cloud/cloud-provider-ibm release-1.36 (K8s 1.36.2) #109
Full changelog

ibm-vpc-block-csi-driver

NO-JIRA: standardize build paths #155
STOR-2921: Rebase to v5.2.27 for OCP 5.0 #154
Full changelog

ibm-vpc-block-csi-driver-operator

STOR-2914: Bump all deps for 5.0.0 #176
STOR-2921: update deployment manifests from upstream #174
Full changelog

ibmcloud-cluster-api-controllers

🚀 OCPCLOUD-3602: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.14.0 (5d081d1) into main #161
🐛 OCPBUGS-85337: set imagePullPolicy IfNotPresent on provider workloads #164
Full changelog

ibmcloud-machine-controllers

OCPCLOUD-3618: Bump k8s 1.36 #100
OCPBUGS-96827: bump golang.org/x/net to v0.57.0 #98
OCPCLOUD-3641: Support configurable boot volume profile, size, IOPS and bandwidth #97
Full changelog

insights-operator

OCPBUGS-112481: Add multicluster gatherer #1349
CCXDEV-16647: add create gatherer skill #1335
NO-JIRA: remove katarina #1336
CCXDEV-16629: Add network policy #1331
CCXDEV-15210: secrets and configmap revisions count gathering #1316
OCPBUGS-98690: Fix indentation bug on livenessProbe #1320
OCPBUGS-96894: Update net and crypto libraries #1321
CCXDEV-16524: gather alertmanager configuration #1322
NO-JIRA: Update misleading docs on the QEMU gatherer #1319
Full changelog

insights-runtime-exporter, insights-runtime-extractor

CCXDEV-16674: chore: add clippy linting #87
NO-JIRA: Add new owners required for managing OCP CI config #86
Full changelog

ironic

METAL-1931: [5.0] Add cargo for bcrypt rust extensions #900
METAL-1929: Merge upstream 2026 07 31 #875
OKD-421: Fix Dockerfile.scos crypto-policies PQ failure on CentOS Stream 10 #886
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #873
NO-ISSUE: Merge upstream 2026 07 24 #872
NO-ISSUE: Filter blank lines from build-packages-list.ocp in Dockerfile #869
METAL-1912: Add PQC support until we have pqc minimal images available #871
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #867
METAL-1898: Add ironic-prometheus-exporter to update-requirements workflow #866
Full changelog

ironic-agent

METAL-1931: [5.0] Add cargo for bcrypt rust extensions #305
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #300
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #299
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #297
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #295
NO-ISSUE: Filter blank lines from build-packages-list.ocp in Dockerfile #292
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #293
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #291
METAL-1878: [s2i] Move direct dependencies from packages to source #290
Full changelog

karpenter-operator

no-jira: rename guest kubeconfig back to target kubeconfig #21
AUTOSCALE-166: Add make target and scripts for karpenter core regression e2e tests #20
AUTOSCALE-871: allow Karpenter Operator to run in ManagementCluster mode #19
no-jira: change karpenter CR singleton name to default #17
AUTOSCALE-644: Release chores 5.0 for Karpenter #18
AUTOSCALE-806: Introduce Karpenter API lifecycle object and controller #16
Full changelog

keepalived-ipfailover

OCPBUGS-99649: Reinstall tzdata if /usr/share/zoneinfo is missing #246
NE-2223: Bump HAProxy to 3.2 in egress DNS proxy #244
NE-2716: Replace iptables with nftables in origin-egress-router #242
Full changelog

kube-metrics-server

OCPBUGS-93753: Bump openshift/kubernetes-metrics-server to v0.9.0 #71
OCPBUGS-87412: Updating ose-kube-metrics-server-container image to be consistent with ART for 5.0 #69
Full changelog

kube-state-metrics

OCPBUGS-99282: embed a copy of the timezone database #148
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-87345: Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART for 5.0 #75
Full changelog

machine-api-operator

OCPBUGS-85110: Move required-scc annotation to pod template for machine-api-controllers #1511
OCPBUGS-100056: fix: skip Multisubnet test for single network infra #1527
OCPBUGS-99903: Fixing test issue where error result was for other resource type #1524
OCPBUGS-100067: Deduplicate unchanged status upgrade events #1526
CORS-4521: GCP: Add regional permission #1523
OCPCLOUD-3614: bump k8s and openshift deps #1520
SPLAT-2854: Fixing issue related to unintended VAP interactions #1518
SPLAT-2858: Fixing test issue where error result was for other resource type #1522
SPLAT-2813: Create VAP E2Es #1517
Full changelog

machine-config-operator

OCPBUGS-114389: Use kubernetes scheme in drain controller event recorder #6455
CORS-4441: Bootimage controller should gracefully handle Azure gen1 image removal #6453
OCPBUGS-113615: Azure confidential clusters should be flagged by skew enforcement #6448
OCPBUGS-112447: Increase rpm-ostree rebase retry backoff and preserve error #6425
OCPBUGS-112466: Fix upstreams for CoreDNS pods on Cloud platforms #6429
OCPBUGS-112082: skip proxy for OSImageStream discovery in HyperShift #6423
OCPBUGS-105426: OCPBUGS-105430: OCPBUGS-105431: OCPBUGS-105315: Fix duplicate template error and e2es #6387
OCPBUGS-59197: Fix MOSB image deletion race during MOSC removal #6348
OCPBUGS-83562: Bump kubensmnt dependency and service to v1.3.0 #6051
NO-ISSUE: Add fix TC 63866 failing in CI job #6380
MCO-2256: Drop RHEL8 support #6130
AGENT-1570: update dependencies to the latest after several Feature promotions to default #6393
OKD-419: Add missing variant check for SCOS #6371
OCPBUGS-105432: fix nil pointer panic in IRI controller informer race #6385
NO-ISSUE: Adapt vsphere bootimage tests for mult-vcenter scenarios #6317
OCPBUGS-92062: reduce memory usage in MCC and MCD #6259
OCPBUGS-100433: Update AMI Whitelist #6358
MCO-2275: Part2 Migrate MCO OCB #6340
MCO-1814, MCO-2377: Setup metrics for builds, Add metric to gather how many people are using OCL #6316
OCPNODE-4040: Use single KubeletConfigAccepted condition type with True/False status #5854
OCPBUGS-92182: OCPBUGS-99219: Use providerSpec.Template in vSphere machineset reconciliation #6234
OCPBUGS-99696: Add extension verification failure test cases OCP-89090 and OCP-89095 #6333
MCO-2485: Mark scale-up test as ‘informing’ #6364
OCPBUGS-100458: Adapt bootimage tests for CAPI migration #6363
MCO-1540: Set up events for builds #6252
MCO-2482: Revert “MCO-2470: Disable scale-up test support for AWS and vSphere” #6356
TRT-2875: Revert #6303 “MCO-2205: Make ImageModeStatusReporting MCP count test more resilient on SNO” #6359
MCO-2205: Make ImageModeStatusReporting MCP count test more resilient on SNO #6303
OCPBUGS-98316: Fix SHA idempotency test in nmstate-configuration.sh #6291
OCPBUGS-100389: machine-config-daemon-firstboot: disable ostree fsync during bootstrap #6122
MCO-2275: Part 1 Migrate OCB test cases from openshift-tests-private #6080
NO-ISSUE: test MCC proxy. Refactor TC 52373 proxy test. #6355
MCO-2468: Cache backed OSImageStreams for PIS #6329
NO-ISSUE: Fix setArchitectureAndCheckStatus corrupting multi-label annotations #6347
OCPBUGS-100277: Fix TC 43278 failing when release payload has no MCO commit info #6349
NO-ISSUE: Fix incorrect OSImageStreams log #6338
MCO-2244: Update MCO dependencies to Kubernetes 1.36 #6321
MCO-2470: Disable scale-up test support for AWS and vSphere #6344
NO-ISSUE: fix fencing_validator ocdebug fence dispatch race condition #6341
OCPBUGS-82139: Add control-plane NoSchedule taint support alongside master taint #6313
NO-JIRA: vendor: bump github.com/openshift/api to latest master #6334
NO-ISSUE: Use context instead of discrete signal #6337
OCPNODE-4518: Block runc on RHEL 10 via OSImageURL stream class inspection #6238
MCO-2380: MCO-2381: Expose MachineOSBuild Status Conditions on Paused MachineConfigPools and add E2E Tests for Paused Pool Builds #6282
MCO-2414: Add unit tests for osImageStream #6312
NO-ISSUE: extended tests, restore initial maxUnavailable when modified #6336
OCPBUGS-99695: Add TC 88940- Apply password only if changes exist #6328
NO-ISSUE: add AWS marketplace polarion ID test #6330
MCO-2184: Adapt scale extended tests to support osstreams #6299
CNTRLPLANE-3840: Remove ExternalTopologyMode guard from OSImageStream bootstrap #6308
MCO-2450: Enable OS ImageStreams in OKD #6314
MCO-1333: Validate OCL Containerfiles #6187
NO-ISSUE: Add reusable utilities for image inspection #6327
MCO-1944: Add NetworkPolicy Test case #6283
MCO-2413: Image inspection cache #6306
MCO-1847: adapt tc 52373 to new AWS marketplace feature #6324
MCO-1847: update AWS backdated images in extended tests #6320
CORENET-5972: Add openvswitch-ipsec package into ipsec plugin #4878
MCO-2408: Improve/Reduce code/duplicated logic in OsImageBuilderInNode #6270
MCO-2424: Fix cert rotation timeout #6309
MCO-1990: Irreconcilable configs test suite #6085
OCPBUGS-98745: MCO-2424: add missing RBAC for pkis resource in MCC ClusterRole #6307
MCO-2301: AWS Marketplace bootimage update support #6015
MCO-2407: Move OSImageStream sync to MCC #6278
MCO-2427: move password, bootimages and cpms suites to longduration suite #6302
OCPNODE-4604: upgrade CRIOCredentialProviderConfig to v1 #6220
OCPBUGS-98210: Fix imagestream detection with extra guard #6296
MCO-1997: MCO-2297: Add test for osImageStream #5881
Full changelog

machine-image-customization-controller

NO-ISSUE: update BMO #183
Full changelog

machine-os-images

OCPBUGS-86888: Add IDMS mirror support for disconnected aarch64 ISO extraction #108
Full changelog

metallb-frr

OCPBUGS-104452: Fix TLS ciphers for MinVersion=1.3 #135
Full changelog

monitoring-plugin

OU-1409: [release-5.0] : include the legal disclaimer in the alert actions to agentic runs #1193
OLS-3921: disable button shrink #1191
NO-JIRA: remove cypress/ imports #1146
OU-1107, OU-1108: ACM alerting UI with alerts and perses #1143
OBSINTA-1505: improve OLS timeseries Cypress test stability #1122
NO-JIRA: remove helm chart #1126
OU-1486: feat: add art dockerfile #1117
OCPBUGS-98488: security: fix js-yaml vulnerable version #1115
NO-JIRA: feat: add renovate configuration #1113
OCPBUGS-104374: upgrade go stdlib and patch vulnerabilities #1111
OU-1409: fix: remove deprecation in favor of k8sListItems to fetch agentic runs #1110
OU-1466: swap dashboard-list-page to use shared table setup #1109
NO-JIRA: don’t filter silences based on namespace in acm #1108
OCPBUGS-98877: fix: upgrade linkify-it #1104
OU-1389: remove default features from plugin-backend #1078
OU-1240: Makefile and package.json to enable test-frontend-ci #1091
OU-1389: add OWNERS_ALIAS and feature based OWNERS files #1083
OU-1389: update devspace setup #1073
NO-JIRA: build(deps-dev): bump websocket-driver from 0.7.4 to 0.7.5 in /web #1084
OU-1389: Remove Shared Dashbaords Components #1077
OBSINTA-1290: fix incident detection test selectors #1022
OU-1240: Dockerfile.test permission #1076
OU-1240: increasing node options memory #1069
OCPBUGS-92067: graph redirect query parameter #1067
OU-1389: add styleguide and file-naming rules #1065
OU-1389: Update Import Linting #1062
OU-1389: move components and utils into shared locations #1056
OU-1389: don’t match on feature_* webpack bundles #1061
OU-1389: update documentation with new frontend folder structure #1055
OU-651: Fix AlertRules page to display user defined loki alerts #1054
OU-1389: restructure folders #1038
OU-1409: Match new ols routing and names #1052
OU-1409: feat: align proposal url with ols detail view, check multiple namespaces for proposals #1044
OU-1389: swap monitoring-plugin to be feature driven #1034
OBSINTA-1006: Add UI performance benchmarks for Incidents page #873
NO-JIRA: fixing unit-test severity sort, variable template regex, and test corrections. #1035
Full changelog

multus-admission-controller

NO-JIRA: Remove TLS min version validation for OpenShift profile compatibility #122
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-86046, OCPBUGS-94044: DS Merge 07/24/2026 #335
CORENET-7233: Update OWNERS file #304
OCPBUGS-83863: Simplify Dockerfile to rhel9-only build #285
Full changelog

multus-networkpolicy

OCPBUGS-104353: [release-5.0] Bump golang.org/x/net to 0.57.0 to fix CVE-2026-33814 #121
CORENET-7235: Update OWNERS file #116
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-83863: Drop rhel8 builds, strip debug info #405
Full changelog

must-gather

OCPBUGS-113491: REDUCE_LOGS=compress_logs compresses large must-gather logs before rsync #561
OCPBUGS-87538: Updating ose-must-gather-container image to be consistent with ART for 5.0 #553
MG-247: collect imagedigestmirrorsets and imagetagmirrorset resources #538
OCPBUGS-85052: feat: add pacemaker resource to mustgather #556
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

network-metrics-daemon

OCPBUGS-87459: Updating ose-network-metrics-daemon-container image to be consistent with ART for 5.0 #144
Full changelog

networking-console-plugin

OCPBUGS-112661: Marked strings for i18n in NetworkPolicies list page #479
chore(i18n): add Cursor Memsource skill and peer usage guide #466
IP address & Adapter model columns #465
OCPNETUI-58: Add Health and Backend health columns to Services and Routes list pages #457
OCPNETUI-38: Virtual Machines tab on NAD/UDN/CUDN detail pages #442
OCPNETUI-21, OCPNETUI-25: made form for creating services #453
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

nutanix-machine-controllers

OCPCLOUD-3619: Bump k8s 1.36 #139
Full changelog

oauth-apiserver

CNTRLPLANE-3947: Bump to 1.36.2 #213
CNTRLPLANE-3947: hack/update-openapi-spec: add image resolution and registry auth #214
CNTRLPLANE-2445: K8s 1.35 rebase #179
CNTRLPLANE-2449: feat: generate OpenAPI schemas from a running oauth-apiserver instance #211
Full changelog

oauth-proxy

OCPBUGS-87343: Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART for 5.0 #367
Full changelog

oauth-server

CNTRLPLANE-3948: Bump to 1.36.2 #248
RFE-9629: Add copy to clipboard buttons to display token page #200
CNTRLPLANE-2446: K8s 1.35 rebase #215
CNTRLPLANE-3751: Add dynamic proxy CA reload for outbound IdP transports #244
CNTRLPLANE-3751: Rebase onto 1.35 to be able to update openshift/api #247
Full changelog

olm-catalogd, olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #788
OCPBUGS-89330: Synchronize From Upstream Repositories #779
NO-ISSUE: Synchronize From Upstream Repositories #776
OPRUN-4436: fix(test): update PolarionID:87224 for 4.²³⁄₅.0 upgrade boundary #766
OPRUN-4659, OPRUN-4666, OPRUN-4671, OPRUN-4672, OPRUN-4673, OPRUN-4674: Synchronize From Upstream Repositories + Remove spec.serviceAccount tests #767
NO-ISSUE: Remove stale reviewers/approvers, add trgeiger #769
OPRUN-4392, OPRUN-4393: Add OLMv1 progress deadline QE tests + fixes #755
OPRUN-4437: test: add allow-case for operator maxOCPVersion > cluster version #765
NO-ISSUE: Remove HelmChartSupport feature gate from experimental manifests #764
Full changelog

openshift-apiserver

OCPBUGS-85429: Bump to 1.36.2 #666
NO-JIRA: Remove cluster profile directory authentication as it is no longer injected in CI #674
OCPBUGS-85429: hack/update-openapi-spec: add image resolution and registry auth #667
OCPBUGS-94042: Return proper 404 when deleting a non-existent project #671
OCPBUGS-85429: hack/update-openapi-spec: prefer REGISTRY_AUTH_FILE over cluster profile pull secret #669
OCPBUGS-78480: address review feedback on project watcher #664
CNTRLPLANE-2449: K8s 1.35 rebase #616
Full changelog

openshift-controller-manager

OCPBUGS-112448: bump(k8s.io): 1.36.3 #452
Full changelog

openshift-state-metrics

NO-JIRA: update Go dependencies #135
Full changelog

openstack-cluster-api-controllers

Bug: Fix make merge-bot after rebasebot by cleaning stale openshift artifacts #430
OSPRH-33339: Add rebasebot post-rebase hook script #428
OCPBUGS-94057: UPSTREAM: 3265: :bug: allow unconditional providerID updates in OpenStackMachine #425
🐛 OCPBUGS-85337: set imagePullPolicy IfNotPresent on provider workloads #424
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-83412: set catalogsource spec.grpcpodconfig.scc: restricted for all non-legacy cases #1360
OCPBUGS-113283: force node arch for opm and catalogsource pod for multiarch tests; fix test failure #1358
Revert “OCPBUGS-104542: force same arch for opm and catalogsource pod for multiarch tests” #1349
OCPBUGS-74905: Synchronize From Upstream Repositories #1346
OCPBUGS-104542: force same arch for opm and catalogsource pod for multiarch tests #1344
OCPBUGS-86895: Ensure packageserver pod seccompProfile is always set #1341
NO-ISSUE: Synchronize From Upstream Repositories #1343
NO-ISSUE: Synchronize From Upstream Repositories #1340
OCPBUGS-96749, OCPBUGS-96752: Synchronize From Upstream Repositories #1338
NO-ISSUE: Remove stale reviewers/approvers, add trgeiger #1339
Full changelog

operator-marketplace

NO-ISSUE: Bump the k8s-dependencies group across 1 directory with 3 updates #769
NO-ISSUE: Bump github.com/prometheus/client_golang from 1.24.0 to 1.24.1 #772
NO-ISSUE: Bump github.com/operator-framework/operator-lifecycle-manager from 0.45.0 to 0.46.0 #771
NO-ISSUE: Bump github.com/operator-framework/operator-lifecycle-manager from 0.43.0 to 0.45.0 #761
NO-ISSUE: Bump dependencies to kube 1.36 #766
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-105440: DownStream Merge [08-13-2026] #3395
NO-JIRA: DownStream Merge [08-11-2026] #3383
OCPBUGS-100275, OCPBUGS-85627: DownStream Merge [08-10-2026] #3361
NO-JIRA: openshift: fix lint issues #3301
CORENET-7229: OTE: Add test list validation tooling #3221
OCPBUGS-83863: Remove RHEL 8 binary build #3149
OCPBUGS-87283, OCPBUGS-87530, OCPBUGS-87532, OCPBUGS-93623, OCPBUGS-95512, OCPBUGS-98138: DownStream Merge [07-31-2026] #3332
OCPBUGS-65865, OCPBUGS-86223, OCPBUGS-89327: DownStream Merge [07-17-2026] #3298
NO-JIRA: Update OWNERS File #3288
NO-JIRA: DownStream Merge [07-02-2026] #3279
Full changelog

powervs-block-csi-driver-operator

STOR-2914: Bump all deps for 5.0.0 #119
Full changelog

powervs-cloud-controller-manager

No-Jira: Bump cel-go to v0.29.0, grpc to v1.82.1 and x/text to v0.39.0 to address security vulnerabilities #107
Full changelog

powervs-machine-controllers

OCPBUGS-87523: Updating ose-powervs-machine-controllers-container image to be consistent with ART for 5.0 #144
Full changelog

prometheus

NO-JIRA: [bot] Bump openshift/prometheus to v3.13.2 #351
OCPBUGS-100192: [bot] Bump openshift/prometheus to v3.13.2 #350
Bump openshift/prometheus to v3.13.1 #347
NO-JIRA: [bot] Bump openshift/prometheus to v3.13.1 #345
NO-JIRA: chore: revert narrow selectors detection for le/quantile labels #344
Full changelog

prometheus-alertmanager

OCPBUGS-104610: bump dependencies from the golang-org-x group #156
OCPBUGS-98190: bump github.com/hashicorp/memberlist from 0.5.4 to 0.6.0 #155
OCPBUGS-99435: embed tzdata in the alertmanager binary #140
Bump openshift/prometheus-alertmanager to v0.33.1 #139
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

NO-ISSUE: [bot] Bump openshift/prometheus-operator to v0.93.1 #391
NO-ISSUE: [bot] Bump openshift/prometheus-operator to v0.93.0 #388
OCPBUGS-96853: [bot] Bump openshift/prometheus-operator to v0.92.1 #385
Full changelog

prometheus-node-exporter

OCPBUGS-100376: fibre_channel: fix crash when attempting to dereference invalid count… #183
MON-4614: [bot] Bump openshift/node_exporter to v1.12.1 #182
Full changelog

route-controller-manager

NE-2767: Bump Kubernetes to 1.36.2 #100
OCPBUGS-92032: Dockerfile: Copy only build-required files in builder stage #99
Full changelog

service-ca-operator

CNTRLPLANE-3898: Bump kubernetes dependencies to v1.36.2 #366
MON-4515: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #319
OCPBUGS-87390: Updating ose-service-ca-operator-container image to be consistent with ART for 5.0 #361
NO-JIRA: Bump github.com/openshift/build-machinery-go #367
CNTRLPLANE-3423: feat: inject centralized TLS into service-ca operand #365
Full changelog

stream-coreos, stream-coreos-extensions

Revert “Revert “OCPBUGS-104572: NetworkManager-ovs has moved up to RHCOS”” #1955
Revert “OCPBUGS-104572: NetworkManager-ovs has moved up to RHCOS” #1954
OCPBUGS-104572: NetworkManager-ovs has moved up to RHCOS #1952
Full changelog

tests

OCPBUGS-83412: monitortests: skip PodSecurityViolation invariant when OpenShiftPodSecurityAdmission is disabled #31561
OCPBUGS-113760: Allow KubeDaemonSetMisScheduled alert on external platform clusters #31558
OCPBUGS-111877: tolerate brief olm Available=False during upgrades #31529
OCPBUGS-111969: router/metrics: enable proxy protocol for client on AWS clusters #31533
OCPBUGS-109775: Fix leaked ClusterRoleBinding in pull_secrets test - #31520 #31520
OCPQE-32064: Reduce monitortest sensitivity for upcoming spot check jobs, use etcd-scaling job as early example #31212
OCPBUGS-105606: Allow DualReplica stable-system CVO Available blips from NoExecuteTaintManager #31501
NO-ISSUE: Update agnhost image to 2.63.0 (mirrored version) #31498
CNTRLPLANE-2157: Migrate OTE for Pull Secrets, Feature Gates and Webhooks #31382
OCPBUGS-105768: Update s2i_images test for OCP samples sync #31504
OCPBUGS-98719: retry GetVotingMemberNames on transient etcd client fails #31445
OCPBUGS-105466: monitortests: recognize PascalCase TNF JobRunning CO reasons #31499
OCPEDGE-2700: fix flaky etcd disruption tests and remove unreliable is_standalone test #31276
OCPNODE-4623: e2e for Block runc on RHEL 10 via OSImageURL stream class inspection #31433
OCPBUGS-104544: tolerate one NotReady CP node in EnsureNodesReady for degraded TNF #31442
OCPNODE-4521: Use programmatic skip for single-node instead of test name tag #31486
NO-ISSUE: Consider centos-10 stream for OKD clusters #31487
OCPBUGS-84491: Remove openshift-ingress terminationMessagePolicy exemption #31435
OCPBUGS-99492: remove storage NetworkPolicies from validation skip list #31429
NO-ISSUE: Skip Additional Storage tests on HyperShift - MachineConfig API not available #31489
NE-2788: exempt ingress Upgradeable=False for deprecated HAProxy versions #31494
NO-JIRA: Remove Istio configmap workaround from ClusterResourceQuota test #31444
OCPEDGE-2787: fix: skip MCPs with non-ready nodes during MCN property validation #31380
OCPEDGE-2785: fix: adjusting DaemonSet test to dynamically compute expected pod count #31378
OCPCLOUD-3074: Validate Azure dual-stack load balancers #31452
CNTRLPLANE-2157: Migrate tests of Prometheus, Audit and TLS to OTE #31360
TRT-2618: Add env var support to selectively enable resource monitor tests and event collection #31420
Bug OCPBUGS-104497: Fix [sig-ci] prow job name OS version test for 4.23 rhcos9 #31481
OCPBUGS-100392: Exclude openshift-debug-* namespaces from CPU Partitioning annotation check #31465
NO-ISSUE: Automated - Update synthetic test data #31459
Revert “TRT-2869: Revert “NO-JIRA: Re-enable tests for the recommend cmd if alertsByCVO”” #31462
OCPBUGS-101912: derive cluster quota from namespace configmaps #31476
STOR-3065: Add storage CSI tests for cloning PVC to a larger volume #31443
OCPBUGS-100386: test: scope hosted etcd leader metrics by namespace #31456
OCPBUGS-63219: Remove NLB hairpin workaround from dual-stack test #31453
OCPBUGS-99899: add os name exception for runc jobs #31479
CORENET-6714: Adding netobserv namespace exception for prometheus endpoint auth #31447
OCPBUGS-100388: Fix project name collision in test framework #31464
OCPBUGS-100385: MonitorTest: measure the union of ClusterOperator wait intervals #31457
OCPBUGS-99397: remove custom MCP and pause master pool in mirror-set tests to prevent PDB drain deadlock and suite timeout #31408
Revert: Fix APIs for openshift.io must have stable versions check #31468
OCPBUGS-99916: exclude openshift-debug-* namespaces from best-effort QoS invariant #31437
TRT-2869: Revert #31440 “NO-JIRA: Re-enable tests for the recommend cmd if alertsByCVO” #31460
OCPBUGS-100308: Fix test APIs for openshift.io must have stable versions #31458
OCPBUGS-99047: Fix flaky oc adm storage-admin test #31400
OCPBUGS-84695: [TNF] Fix update-setup job discovery to limit check to active job #31451
OCPBUGS-99921: Dump istiod logs and gateway state on GatewayAPI test failure #31454
NO-JIRA: Re-enable tests for the recommend cmd if alertsByCVO #31440
OCPBUGS-100183: Always tear down upgrade tests after setup failures #31450
OCPBUGS-98576: Improve test output for nodes should be ready test #31419
OCPBUGS-78480: handle bookmark events in project watch tests #31313
NO-JIRA: Update minio image to use source with all supported architectures #31441
OCPBUGS-85529: Fix IPv6 prefix in MultiNetworkPolicy test (/32 → /64) #31407
OCPBUGS-99535: Skip Squid proxy configuration #31423
NO-ISSUE: Skip additional storage support E2E test for on single-node - MCP rollouts timeout #31439
CNTRLPLANE-3789: images: Add squid image used in CAO e2e tests #31434
OTA-1814: Skip tests temporarily for the new output of the recommend cmd #31417
STOR-3063: Add GCP regional PD e2e test for cross-zone data sync #31416
CNTRLPLANE-3741: PKI config tests for service-ca and kube-apiserver-operator #31341
NO-JIRA: Replace a bug id: 25739 -> 92835 #31345
OCPNODE-4055: Add e2e testcase for additional storage support feature #31399
NO-ISSUE: Automated - Update synthetic test data #31260
OCPNODE-4494: e2e test case for RHCOS upgrade from 9 → 10 #31393
OCPSTRAT-3036: Rebase 1.36.2 #31237
NE-2789: Add a guard to skip IngressControllerMultipleHAProxyVersions tests if IngressController CRD lacks haproxyVersion field #31424
NO-JIRA: chore(extended/prometheus): reduce targets-auth skip list and handle mTLS #31372
NO-JIRA: Ensure Platform Prometheus targets are not scraped with insecure_skip_verify #31373
NO-JIRA: Add e2e test to detect named ports in NetworkPolicies #31375
OCPQUAL-20: Regenerate retry allowlist from 5.0 CI data #31411
OCPBUGS-87079: Add polling and longer waits in the EgressFirewall tests to avoid flakiness #31376
NE-2789: Create 5 e2e test cases to help graduate the featuregate: IngressControllerMultipleHAProxyVersions #31392
OCPBUGS-85696: Adding logs and exponential backoff on execPod #31352
NO-JIRA: .devcontainer: bump Fedora base image to 44 for Go 1.26 #31413
CONSOLE-5209: Add e2e tests for IngressComponentRouteLabels feature gate #31385
OCPNODE-4538: Add e2e tests for DRA Partitionable Devices (KEP-4815) #31230
TRT-2689: Add verify-apm to the verify target #31379
OCPBUGS-99166: wait for default ServiceAccount before creating IRI test pod #31401
MCO-2371: Add back “should match os version” test #31301
AGENT-1522: bump InternalReleaseImage to v1 #31294
NO-ISSUE: Fix longrunning suite for node test cases #31339
NO-ISSUE: Always emit precondition validation synthetic test entry #31388
OCPBUGS-98956: use admin-client namespace creation for IRI workload test #31394
OCPNODE-4055: Add Additional Storage Support - API validation test cases #31384
NO-ISSUE: Remove Feature:NodeSwap tag and update README selectors #31389
OCPNODE-4604: allow registry.redhat.io reboot requried test #31383
OCPNODE-4604: upgrade to test v1 CRIOCredentialProviderConfig #31324
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

thanos

OCPBUGS-104611: vendor: bump vulnerable Go dependencies for CVE remediation #198
NO-JIRA: [bot] Bump openshift/thanos to v0.42.4 #196
NO-ISSUE: [bot] Bump openshift/thanos to v0.42.3 #195
OCPBUGS-97627: [bot] Bump openshift/thanos to v0.42.2 #194
NO-JIRA: chore: revert narrow selectors detection for le/quantile labels #193
Full changelog

tools

OTA-1959: oc adm upgrade recommend works with accepted risks #2370
OCPBUGS-85019: oc login: Fix polluting KUBECONFIG file #2357
NO-JIRA: Fix issues collection when CVO handles the risks #2352
OCPBUGS-99013: inspect: Redact OAuthClient secrets #2354
OTA-1959: Case 1 - oc adm upgrade recommend shows both Cincinnati-sourced and alert-sourced risks in output #2349
NO-JIRA: Update docs.openshift.com base URL to point to OCP docs #2353
OCPBUGS-101781: Isolate OCP-42982 kubeconfig writes #2337
OTA-1814: Handle accept risks with different commands #2336
OCPBUGS-100310: oc login –exec-plugin oc-oidc fails to refresh expired token against Microsoft Entra ID #2332
Revert “TRT-2817: Revert “Merge pull request #2279 from nbottari9/1814-duplicate-warning”” #2322
OCPBUGS-99757: Include extra scopes in OIDC token cache key #2323
TRT-2817: Revert “Merge pull request #2279 from nbottari9/1814-duplicate-warning” #2320
NO-JIRA: Bump k8s dependencies to 1.36 along with openshift #2318
OTA-1814: fix(alerts): Remove duplicate information in the recommend command #2279
NO-JIRA: Handle wrapped ENOTSUP error #2311
NO-JIRA: First try newer iotop-c and fallback to older one #2317
NO-JIRA: Register the e2e tests for accept in the subfolder #2300
NO-JIRA: Fix staticcheck warnings in pkg/cli/admin/mustgather #2306
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

volume-data-source-validator

STOR-2917: Rebase to v1.7.0 for OCP 5.0 #16
Full changelog

vsphere-cloud-controller-manager

OCPCLOUD-3596: Merge https://github.com/kubernetes/cloud-provider-vsphere:master (ed5683c) into main #118
Full changelog

vsphere-cluster-api-controllers

🚀 OCPCLOUD-3604: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.16.1 (5b57d1d) into main #112
🐛 OCPBUGS-85337: set imagePullPolicy IfNotPresent on provider workloads #114
Full changelog

vsphere-csi-driver-operator

STOR-3062: Remove the validation webhook #351
STOR-2914: Bump all deps for 5.0.0 #350
Full changelog

vsphere-problem-detector

OCPBUGS-87906: Fixed GetVCenter to handle removed FDs better #224
STOR-2914: Bump all deps for 5.0.0 #226
Full changelog

Node Image Info

Loading node image info, this may take a while ...

CentOS Stream CoreOS 10 (`stream-coreos`)

Package List

cri-o-1.36.2-1.el10s
kernel-6.12.0-254.el10
openshift-kubelet-5.0.0-202607301230.p2.ge63ab41.assembly.stream.el10
systemd-257-31.el10

Full list (493 packages)

NetworkManager-1:1.58.0-1.el10
NetworkManager-cloud-setup-1:1.58.0-1.el10
NetworkManager-libnm-1:1.58.0-1.el10
NetworkManager-ovs-1:1.58.0-1.el10
NetworkManager-tui-1:1.58.0-1.el10
WALinuxAgent-udev-2.14.0.1-3.el10
aardvark-dns-4:2.0.0-2.el10
acl-2.4.0-2.el10
afterburn-5.10.0-2.el10
afterburn-dracut-5.10.0-2.el10
alternatives-1.30-2.el10
amd-gpu-firmware-20260722-25.el10
amd-ucode-firmware-20260722-25.el10
attr-2.6.0-2.el10
audit-4.0.3-5.el10
audit-libs-4.0.3-5.el10
audit-rules-4.0.3-5.el10
authselect-1.5.3-1.el10
authselect-libs-1.5.3-1.el10
azure-vm-utils-0.7.0-1.el10
basesystem-11-22.el10
bash-5.2.26-6.el10
bash-completion-1:2.11-16.el10
bind-libs-32:9.18.33-19.el10
bind-license-32:9.18.33-19.el10
bind-utils-32:9.18.33-19.el10
bootc-1.16.6-1.el10
bootupd-0.2.35-1.el10
bsdtar-3.7.7-8.el10
bubblewrap-0.10.0-3.el10
bzip2-1.0.8-25.el10
bzip2-libs-1.0.8-25.el10
c-ares-1.34.6-4.el10
ca-certificates-2025.2.80_v9.0.305-102.el10
catatonit-5:0.2.1-4.el10
centos-gpg-keys-10.0-23.el10
centos-release-cloud-1-1.el10s
centos-release-nfv-common-1-5.el10s
centos-release-virt-common-1-1.el10s
centos-stream-release-10.0-23.el10
centos-stream-repos-10.0-23.el10
checkpolicy-3.11-1.el10
chrony-4.8-2.el10
cifs-utils-7.6-2.el10
clevis-23-2.el10
clevis-dracut-23-2.el10
clevis-luks-23-2.el10
clevis-pin-tpm2-0.5.5-1.el10
clevis-systemd-23-2.el10
cloud-utils-growpart-0.33-11.el10
composefs-1.0.8-1.el10
composefs-libs-1.0.8-1.el10
conmon-3:2.2.1-4.el10
conmon-rs-0.6.6-2.el10s
console-login-helper-messages-0.21.3-10.el10
console-login-helper-messages-issuegen-0.21.3-10.el10
console-login-helper-messages-profile-0.21.3-10.el10
container-selinux-4:2.250.0-1.el10
containers-common-6:6.0-2.el10
containers-common-extra-6:6.0-2.el10
coreos-installer-0.26.0-1.el10
coreos-installer-bootinfra-0.26.0-1.el10
coreutils-9.5-12.el10
coreutils-common-9.5-12.el10
cpio-2.15-3.el10
cracklib-2.9.11-8.el10
cracklib-dicts-2.9.11-8.el10
cri-o-1.36.2-1.el10s
cri-tools-1.36.0-1.el10s
criu-4.2-8.el10
criu-libs-4.2-8.el10
crun-1.28-1.el10
crypto-policies-20260708-1.git988eb15.el10
crypto-policies-scripts-20260708-1.git988eb15.el10
cryptsetup-2.8.6-2.el10
cryptsetup-libs-2.8.6-2.el10
curl-8.12.1-6.el10
cyrus-sasl-gssapi-2.1.28-27.el10
cyrus-sasl-lib-2.1.28-27.el10
dbus-1:1.14.10-6.el10
dbus-broker-36-4.el10
dbus-common-1:1.14.10-6.el10
dbus-libs-1:1.14.10-6.el10
dbus-tools-1:1.14.10-6.el10
device-mapper-10:1.02.215-3.el10
device-mapper-event-10:1.02.215-3.el10
device-mapper-event-libs-10:1.02.215-3.el10
device-mapper-libs-10:1.02.215-3.el10
device-mapper-multipath-0.9.9-19.el10
device-mapper-multipath-libs-0.9.9-19.el10
device-mapper-persistent-data-1.3.2-1.el10
diffutils-3.10-8.el10
dmidecode-1:3.6-5.el10
dnf-4.20.0-26.el10
dnf-data-4.20.0-26.el10
dnsmasq-2.90-7.el10
dosfstools-4.2-12.el10
dracut-107-9.el10
dracut-network-107-9.el10
dracut-squash-107-9.el10
duktape-2.7.0-10.el10
e2fsprogs-1.47.1-5.el10
e2fsprogs-libs-1.47.1-5.el10
efi-filesystem-6-8.el10
efibootmgr-18-9.el10
efivar-libs-39-3.el10
elfutils-default-yama-scope-0.195-1.el10
elfutils-libelf-0.195-1.el10
elfutils-libs-0.195-1.el10
erofs-utils-1.8.10-1.el10
ethtool-2:6.19-1.el10
expat-2.7.3-2.el10
fcoe-utils-1.0.34-11.gitb233050.el10
file-5.45-12.el10
file-libs-5.45-12.el10
filesystem-3.18-17.el10
findutils-1:4.10.0-5.el10
firewalld-filesystem-2.4.3-2.el10
flatpak-session-helper-1.18.0-1.el10
fstrm-0.6.1-12.el10
fuse-common-3.16.2-5.el10
fuse-libs-2.9.9-25.el10
fuse3-3.16.2-5.el10
fuse3-libs-3.16.2-5.el10
fwupd-2.1.6-1.el10
gawk-5.3.0-6.el10
gdbm-1:1.23-14.el10
gdbm-libs-1:1.23-14.el10
gettext-envsubst-0.22.5-6.el10
gettext-libs-0.22.5-6.el10
gettext-runtime-0.22.5-6.el10
git-core-2.52.0-1.el10
glib2-2.80.4-14.el10
glibc-2.39-133.el10
glibc-common-2.39-133.el10
glibc-gconv-extra-2.39-133.el10
glibc-minimal-langpack-2.39-133.el10
gmp-1:6.2.1-12.el10
gnupg2-2.4.5-5.el10
gnutls-3.8.10-4.el10
gobject-introspection-1.79.1-7.el10
gpgme-1.23.2-6.el10
grep-3.11-10.el10
grub2-common-1:2.12-54.el10
grub2-efi-x64-1:2.12-54.el10
grub2-pc-1:2.12-54.el10
grub2-pc-modules-1:2.12-54.el10
grub2-tools-1:2.12-54.el10
grub2-tools-minimal-1:2.12-54.el10
gssproxy-0.9.2-10.el10
gzip-1.13-3.el10
hostname-3.23-14.el10
hwdata-0.379-10.9.el10
ignition-2.26.0-4.el10
ignition-grub-2.26.0-4.el10
ima-evm-utils-1.6.2-6.el10
info-7.1-6.el10
inih-58-3.el10
intel-gpu-firmware-20260722-25.el10
ipcalc-1.0.3-12.el10
iproute-7.0.0-2.el10
iproute-tc-7.0.0-2.el10
iptables-libs-1.8.11-15.el10
iptables-nft-1.8.11-15.el10
iputils-20240905-5.el10
irqbalance-2:1.9.4-6.el10
iscsi-initiator-utils-6.2.1.11-2.git4b3e853.el10
iscsi-initiator-utils-iscsiuio-6.2.1.11-2.git4b3e853.el10
isns-utils-libs-0.103-1.el10
jansson-2.14-3.el10
jose-14-102.el10
jq-1.7.1-13.el10
json-c-0.18-3.el10
json-glib-1.8.0-5.el10
kbd-2.6.4-7.el10
kbd-legacy-2.6.4-7.el10
kbd-misc-2.6.4-7.el10
kdump-utils-1.0.58-15.el10
kernel-6.12.0-254.el10
kernel-core-6.12.0-254.el10
kernel-modules-6.12.0-254.el10
kernel-modules-core-6.12.0-254.el10
kernel-modules-extra-6.12.0-254.el10
kexec-tools-2.0.32-3.el10
keyutils-1.6.3-5.el10
keyutils-libs-1.6.3-5.el10
kmod-31-13.el10
kmod-libs-31-13.el10
kpartx-0.9.9-19.el10
krb5-libs-1.21.3-11.el10
less-661-3.el10
libacl-2.4.0-2.el10
libaio-0.3.112-1.el10
libarchive-3.7.7-8.el10
libassuan-2.5.6-6.el10
libattr-2.6.0-2.el10
libbasicobjects-0.1.1-58.el10
libblkid-2.40.2-20.el10
libbpf-2:1.7.0-2.el10
libcap-2.69-7.el10
libcap-ng-0.9.3-2.el10
libcbor-0.11.0-3.el10
libcollection-0.7.0-58.el10
libcom_err-1.47.1-5.el10
libcomps-0.1.21-3.el10
libconfig-1.7.3-10.el10
libcurl-minimal-8.12.1-6.el10
libdhash-0.5.0-58.el10
libdnf-0.73.1-17.el10
libdnf-plugin-subscription-manager-1.30.15-1.el10
libdrm-2.4.128-1.el10
libeconf-0.6.2-4.el10
libedit-3.1-52.20230828cvs.el10
libev-4.33-15.el10
libevent-2.1.12-16.el10
libfdisk-2.40.2-20.el10
libffi-3.4.4-10.el10
libfido2-1.14.0-7.el10
libgcc-14.4.1-1.el10
libgcrypt-1.11.0-7.el10
libgomp-14.4.1-1.el10
libgpg-error-1.50-2.el10
libibverbs-62.0-2.el10
libicu-74.2-5.el10
libidn2-2.3.7-3.el10
libini_config-1.3.1-58.el10
libipa_hbac-2.13.1-2.el10
libjcat-0.2.2-2.el10
libjose-14-102.el10
libkcapi-1.5.0-3.el10
libkcapi-hasher-1.5.0-3.el10
libkcapi-hmaccalc-1.5.0-3.el10
libksba-1.6.7-2.el10
libldb-4.24.5-100.el10
libluksmeta-10-1.el10
libmaxminddb-1.9.1-4.el10
libmicrohttpd-1:1.0.0-3.el10
libmnl-1.0.5-7.el10
libmodulemd-2.15.0-12.el10
libmount-2.40.2-20.el10
libmspack-0.10.1-0.14.alpha.el10
libndp-1.9-2.el10
libnet-1.3-7.el10
libnetfilter_conntrack-1.0.9-12.el10
libnfnetlink-1.0.2-3.el10
libnfsidmap-1:2.8.3-8.el10
libnftnl-1.3.0-3.el10
libnghttp2-1.68.0-5.el10
libnl3-3.11.0-1.el10
libnvme-1.16.2-1.el10
libpath_utils-0.2.1-58.el10
libpcap-14:1.10.4-7.el10
libpciaccess-0.16-16.el10
libpkgconf-2.1.0-3.el10
libpwquality-1.4.5-13.el10
libref_array-0.1.5-58.el10
librepo-1.19.0-1.el10
libseccomp-2.5.6-1.el10
libselinux-3.11-1.el10
libselinux-utils-3.11-1.el10
libsemanage-3.11-1.el10
libsepol-3.11-1.el10
libsmartcols-2.40.2-20.el10
libsmbclient-4.24.5-100.el10
libsolv-0.7.33-5.el10
libss-1.47.1-5.el10
libsss_certmap-2.13.1-2.el10
libsss_idmap-2.13.1-2.el10
libsss_nss_idmap-2.13.1-2.el10
libsss_sudo-2.13.1-2.el10
libstdc++-14.4.1-1.el10
libtalloc-2.4.4-100.el10
libtasn1-4.20.0-5.el10
libtdb-1.4.15-100.el10
libtevent-0.17.1-100.el10
libtirpc-1.3.5-1.el10
libtool-ltdl-2.4.7-14.el10
libunistring-1.1-10.el10
liburing-2.12-1.el10
libusb1-1.0.30-1.el10
libutempter-1.2.1-15.el10
libuuid-2.40.2-20.el10
libuv-1:1.52.1-1.el10
libverto-0.3.2-10.el10
libverto-libev-0.3.2-10.el10
libwbclient-4.24.5-100.el10
libxcrypt-4.4.36-10.el10
libxml2-2.12.5-15.el10
libxmlb-0.3.28-1.el10
libxslt-1.1.39-10.el10
libyaml-0.2.5-16.el10
libzstd-1.5.5-9.el10
linux-firmware-20260722-25.el10
linux-firmware-whence-20260722-25.el10
lldpad-1.1.1-4.gitf1dd9eb.el10
lmdb-libs-0.9.32-4.el10
logrotate-3.22.0-5.el10
lsof-4.98.0-7.el10
lua-libs-5.4.8-1.el10
luksmeta-10-1.el10
lvm2-10:2.03.41-3.el10
lvm2-libs-10:2.03.41-3.el10
lz4-libs-1.9.4-8.el10
lzo-2.10-14.el10
makedumpfile-1.7.8-1.el10
mdadm-4.4-4.el10
microcode_ctl-4:20260210-1.el10
mokutil-2:0.7.2-5.el10
mpdecimal-2.5.1-12.el10
mpfr-4.2.1-8.el10
nano-8.1-3.el10
ncurses-base-6.4-15.20240127.el10
ncurses-libs-6.4-15.20240127.el10
net-tools-2.0-0.73.20160912git.el10
netavark-4:2.0.0-2.el10
nettle-3.10.1-1.el10
newt-0.52.24-5.el10
nfs-utils-1:2.8.3-8.el10
nftables-1:1.1.5-6.el10
nmap-ncat-4:7.92-5.el10
nmstate-2.2.61-1.el10
npth-1.6-21.el10
nss-altfiles-2.23.0-6.el10
numactl-2.0.19-3.el10
numactl-libs-2.0.19-3.el10
numad-0.5-50.20251104git.el10
nvidia-gpu-firmware-20260722-25.el10
nvme-cli-2.16-2.el10
oniguruma-6.9.9-7.el10
open-vm-tools-13.0.10-1.el10
openldap-2.6.13-1.el10
openshift-clients-5.0.0-202608070127.p2.g8b0ecc6.assembly.stream.el10
openshift-kubelet-5.0.0-202607301230.p2.ge63ab41.assembly.stream.el10
openssh-9.9p1-28.el10
openssh-clients-9.9p1-28.el10
openssh-server-9.9p1-28.el10
openssl-1:3.5.7-2.el10
openssl-fips-provider-1:3.5.7-2.el10
openssl-libs-1:3.5.7-2.el10
openvswitch-selinux-extra-policy-1.0-36.el10s
openvswitch3.5-3.5.3-5.el10s
os-prober-1.81-9.el10
ose-aws-ecr-image-credential-provider-5.0.0-202607281540.p2.g278e8c0.assembly.stream.el10
ose-azure-acr-image-credential-provider-5.0.0-202608060825.p2.gb99e4ce.assembly.stream.el10
ose-crio-credential-provider-5.0.0-202603041733.p2.g83d4961.assembly.stream.el10
ose-gcp-gcr-image-credential-provider-5.0.0-202608040132.p2.g51c3264.assembly.stream.el10
ostree-2026.2-1.el10
ostree-grub2-2026.2-1.el10
ostree-libs-2026.2-1.el10
p11-kit-0.26.4-1.el10
p11-kit-trust-0.26.4-1.el10
pam-1.6.1-11.el10
pam-libs-1.6.1-11.el10
passt-0^20260728.gf8df3f1-1.el10
passt-selinux-0^20260728.gf8df3f1-1.el10
pciutils-3.13.0-6.el10
pciutils-libs-3.13.0-6.el10
pcre2-10.44-1.el10.3
pcre2-syntax-10.44-1.el10.3
pkgconf-2.1.0-3.el10
pkgconf-m4-2.1.0-3.el10
pkgconf-pkg-config-2.1.0-3.el10
podman-7:6.0.2-1.el10
podman-sequoia-0.4.0~pqc.3-1.el10
policycoreutils-3.11-1.el10
policycoreutils-python-utils-3.11-1.el10
polkit-125-6.el10
polkit-libs-125-6.el10
popt-1.19-8.el10
procps-ng-4.0.4-13.el10
protobuf-c-1.5.0-6.el10
psmisc-23.6-8.el10
python3-3.12.13-3.el10
python3-audit-4.0.3-5.el10
python3-charset-normalizer-3.4.2-1.el10
python3-cloud-what-1.30.15-1.el10
python3-dateutil-1:2.9.0.post0-1.el10
python3-dbus-1.3.2-8.el10
python3-decorator-5.1.1-12.el10
python3-distro-1.9.0-5.el10
python3-dnf-4.20.0-26.el10
python3-dnf-plugin-versionlock-4.7.0-11.el10
python3-dnf-plugins-core-4.7.0-11.el10
python3-file-magic-5.45-12.el10
python3-gobject-base-3.46.0-7.el10
python3-gobject-base-noarch-3.46.0-7.el10
python3-hawkey-0.73.1-17.el10
python3-idna-3.7-4.el10
python3-iniparse-0.5-10.el10
python3-inotify-0.9.6-36.el10
python3-libcomps-0.1.21-3.el10
python3-libdnf-0.73.1-17.el10
python3-librepo-1.19.0-1.el10
python3-libs-3.12.13-3.el10
python3-libselinux-3.11-1.el10
python3-libsemanage-3.11-1.el10
python3-packaging-24.2-2.el10
python3-pexpect-4.9.0-6.el10
python3-pip-wheel-23.3.2-11.el10
python3-policycoreutils-3.11-1.el10
python3-ptyprocess-0.7.0-9.el10
python3-pyyaml-6.0.1-19.el10
python3-requests-2.32.4-1.el10
python3-rpm-4.19.1.1-25.el10
python3-setools-4.7.0-1.el10
python3-setuptools-69.0.3-12.el10
python3-six-1.16.0-16.el10
python3-subscription-manager-rhsm-1.30.15-1.el10
python3-systemd-235-11.el10
python3-urllib3-1.26.19-4.el10
qemu-guest-agent-18:10.1.0-24.el10
quota-1:4.09-10.el10
quota-nls-1:4.09-10.el10
rdma-core-62.0-2.el10
readline-8.2-11.el10
rpcbind-1.2.9-0.el10
rpm-4.19.1.1-25.el10
rpm-build-libs-4.19.1.1-25.el10
rpm-libs-4.19.1.1-25.el10
rpm-ostree-2026.2-1.el10
rpm-ostree-libs-2026.2-1.el10
rpm-plugin-audit-4.19.1.1-25.el10
rpm-plugin-selinux-4.19.1.1-25.el10
rpm-plugin-syslog-4.19.1.1-25.el10
rpm-sequoia-1.10.2.3-1.el10
rpm-sign-libs-4.19.1.1-25.el10
rsync-3.4.4-1.el10
samba-client-libs-4.24.5-100.el10
samba-common-4.24.5-100.el10
samba-core-libs-4.24.5-100.el10
samba-ndr-libs-4.24.5-100.el10
sed-4.9-5.el10
selinux-policy-42.1.26-1.el10
selinux-policy-targeted-42.1.26-1.el10
setup-2.14.5-7.el10
sg3_utils-1.48-10.el10
sg3_utils-libs-1.48-10.el10
shadow-utils-2:4.15.0-13.el10
shadow-utils-subid-2:4.15.0-13.el10
shared-mime-info-2.3-8.el10
shim-x64-16.1-1.el10
skopeo-2:1.23.0-1.el10
slang-2.3.3-8.el10
snappy-1.1.10-7.el10
socat-1.7.4.4-9.el10
sos-4.11.2-3.el10
sqlite-libs-3.46.1-5.el10
ssh-key-dir-0.1.4-9.el10
sssd-2.13.1-2.el10
sssd-ad-2.13.1-2.el10
sssd-client-2.13.1-2.el10
sssd-common-2.13.1-2.el10
sssd-common-pac-2.13.1-2.el10
sssd-ipa-2.13.1-2.el10
sssd-krb5-2.13.1-2.el10
sssd-krb5-common-2.13.1-2.el10
sssd-ldap-2.13.1-2.el10
sssd-nfs-idmap-2.13.1-2.el10
sssd-proxy-2.13.1-2.el10
stalld-1.26.3-1.el10
strace-6.12-3.el10
subscription-manager-1.30.15-1.el10
subscription-manager-rhsm-certificates-20220623-6.el10
sudo-1.9.17-9.p2.el10
systemd-257-31.el10
systemd-journal-remote-257-31.el10
systemd-libs-257-31.el10
systemd-pam-257-31.el10
systemd-udev-257-31.el10
tar-2:1.35-11.el10
tmux-3.3a-14.20230918gitb202a2f.el10
toolbox-0.3-3.el10
tpm2-tools-5.7-5.el10
tpm2-tss-4.1.3-6.el10
tpm2-tss-fapi-4.1.3-6.el10
tzdata-2026c-1.el10
unbound-anchor-1.25.1-1.el10
unbound-libs-1.25.1-1.el10
userspace-rcu-0.14.0-7.el10
util-linux-2.40.2-20.el10
util-linux-core-2.40.2-20.el10
vim-data-2:9.1.083-15.el10
vim-minimal-2:9.1.083-15.el10
virt-what-1.27-3.el10
which-2.21-44.el10
xfsprogs-6.16.0-1.el10
xmlsec1-1:1.2.39-3.el10
xmlsec1-openssl-1:1.2.39-3.el10
xz-1:5.6.2-4.el10
xz-libs-1:5.6.2-4.el10
zlib-ng-compat-2.2.3-3.el10
zram-generator-1.1.2-14.el10
zstd-1.5.5-9.el10

Changed:

NetworkManager 1:1.56.1-1.el10 → 1:1.58.0-1.el10
NetworkManager-cloud-setup 1:1.56.1-1.el10 → 1:1.58.0-1.el10
NetworkManager-libnm 1:1.56.1-1.el10 → 1:1.58.0-1.el10
NetworkManager-ovs 1:1.56.1-1.el10 → 1:1.58.0-1.el10
NetworkManager-tui 1:1.56.1-1.el10 → 1:1.58.0-1.el10
aardvark-dns 2:2.0.0-1.el10 → 4:2.0.0-2.el10
acl 2.3.2-4.el10 → 2.4.0-2.el10
amd-gpu-firmware 20260624-24.el10 → 20260722-25.el10
amd-ucode-firmware 20260624-24.el10 → 20260722-25.el10
attr 2.5.2-5.el10 → 2.6.0-2.el10
bind-libs 32:9.18.33-18.el10 → 32:9.18.33-19.el10
bind-license 32:9.18.33-18.el10 → 32:9.18.33-19.el10
bind-utils 32:9.18.33-18.el10 → 32:9.18.33-19.el10
bootc 1.16.2-1.el10 → 1.16.6-1.el10
c-ares 1.34.6-1.el10 → 1.34.6-4.el10
checkpolicy 3.10-1.el10 → 3.11-1.el10
cifs-utils 7.6-1.el10 → 7.6-2.el10
clevis 23-1.el10 → 23-2.el10
clevis-dracut 23-1.el10 → 23-2.el10
clevis-luks 23-1.el10 → 23-2.el10
clevis-systemd 23-1.el10 → 23-2.el10
container-selinux 4:2.249.0-1.el10 → 4:2.250.0-1.el10
containers-common 6:5.8-2.el10 → 6:6.0-2.el10
containers-common-extra 6:5.8-2.el10 → 6:6.0-2.el10
criu 4.2-4.el10 → 4.2-8.el10
criu-libs 4.2-4.el10 → 4.2-8.el10
crypto-policies 20260525-1.gitf5f5370.el10 → 20260708-1.git988eb15.el10
crypto-policies-scripts 20260525-1.gitf5f5370.el10 → 20260708-1.git988eb15.el10
cryptsetup 2.8.6-1.el10 → 2.8.6-2.el10
cryptsetup-libs 2.8.6-1.el10 → 2.8.6-2.el10
dbus 1:1.14.10-5.el10 → 1:1.14.10-6.el10
dbus-common 1:1.14.10-5.el10 → 1:1.14.10-6.el10
dbus-libs 1:1.14.10-5.el10 → 1:1.14.10-6.el10
dbus-tools 1:1.14.10-5.el10 → 1:1.14.10-6.el10
device-mapper 10:1.02.215-2.el10 → 10:1.02.215-3.el10
device-mapper-event 10:1.02.215-2.el10 → 10:1.02.215-3.el10
device-mapper-event-libs 10:1.02.215-2.el10 → 10:1.02.215-3.el10
device-mapper-libs 10:1.02.215-2.el10 → 10:1.02.215-3.el10
dnf 4.20.0-24.el10 → 4.20.0-26.el10
dnf-data 4.20.0-24.el10 → 4.20.0-26.el10
dracut 107-4.el10 → 107-9.el10
dracut-network 107-4.el10 → 107-9.el10
dracut-squash 107-4.el10 → 107-9.el10
expat 2.7.3-1.el10 → 2.7.3-2.el10
fwupd 2.0.19-2.el10 → 2.1.6-1.el10
glib2 2.80.4-13.el10 → 2.80.4-14.el10
glibc 2.39-126.el10 → 2.39-133.el10
glibc-common 2.39-126.el10 → 2.39-133.el10
glibc-gconv-extra 2.39-126.el10 → 2.39-133.el10
glibc-minimal-langpack 2.39-126.el10 → 2.39-133.el10
gobject-introspection 1.79.1-6.el10 → 1.79.1-7.el10
grub2-common 1:2.12-49.el10 → 1:2.12-54.el10
grub2-efi-x64 1:2.12-49.el10 → 1:2.12-54.el10
grub2-pc 1:2.12-49.el10 → 1:2.12-54.el10
grub2-pc-modules 1:2.12-49.el10 → 1:2.12-54.el10
grub2-tools 1:2.12-49.el10 → 1:2.12-54.el10
grub2-tools-minimal 1:2.12-49.el10 → 1:2.12-54.el10
ignition 2.26.0-3.el10 → 2.26.0-4.el10
ignition-grub 2.26.0-3.el10 → 2.26.0-4.el10
ima-evm-utils 1.6.2-5.el10 → 1.6.2-6.el10
intel-gpu-firmware 20260624-24.el10 → 20260722-25.el10
iproute 6.17.0-2.el10 → 7.0.0-2.el10
iproute-tc 6.17.0-2.el10 → 7.0.0-2.el10
iscsi-initiator-utils 6.2.1.11-0.git4b3e853.el10 → 6.2.1.11-2.git4b3e853.el10
iscsi-initiator-utils-iscsiuio 6.2.1.11-0.git4b3e853.el10 → 6.2.1.11-2.git4b3e853.el10
kernel 6.12.0-243.el10 → 6.12.0-254.el10
kernel-core 6.12.0-243.el10 → 6.12.0-254.el10
kernel-modules 6.12.0-243.el10 → 6.12.0-254.el10
kernel-modules-core 6.12.0-243.el10 → 6.12.0-254.el10
kernel-modules-extra 6.12.0-243.el10 → 6.12.0-254.el10
libacl 2.3.2-4.el10 → 2.4.0-2.el10
libaio 0.3.111-22.el10 → 0.3.112-1.el10
libattr 2.5.2-5.el10 → 2.6.0-2.el10
libcap-ng 0.9.3-1.el10 → 0.9.3-2.el10
libgcc 14.3.1-4.4.el10 → 14.4.1-1.el10
libgomp 14.3.1-4.4.el10 → 14.4.1-1.el10
libipa_hbac 2.13.1-1.el10 → 2.13.1-2.el10
libldb 4.24.3-100.el10 → 4.24.5-100.el10
libnfsidmap 1:2.8.3-7.el10 → 1:2.8.3-8.el10
libnghttp2 1.68.0-4.el10 → 1.68.0-5.el10
libnvme 1.16.1-3.el10 → 1.16.2-1.el10
libselinux 3.10-2.el10 → 3.11-1.el10
libselinux-utils 3.10-2.el10 → 3.11-1.el10
libsemanage 3.10-1.el10 → 3.11-1.el10
libsepol 3.10-2.el10 → 3.11-1.el10
libsmbclient 4.24.3-100.el10 → 4.24.5-100.el10
libsss_certmap 2.13.1-1.el10 → 2.13.1-2.el10
libsss_idmap 2.13.1-1.el10 → 2.13.1-2.el10
libsss_nss_idmap 2.13.1-1.el10 → 2.13.1-2.el10
libsss_sudo 2.13.1-1.el10 → 2.13.1-2.el10
libstdc++ 14.3.1-4.4.el10 → 14.4.1-1.el10
libwbclient 4.24.3-100.el10 → 4.24.5-100.el10
libxml2 2.12.5-14.el10 → 2.12.5-15.el10
libxmlb 0.3.24-1.el10 → 0.3.28-1.el10
libxslt 1.1.39-9.el10 → 1.1.39-10.el10
linux-firmware 20260624-24.el10 → 20260722-25.el10
linux-firmware-whence 20260624-24.el10 → 20260722-25.el10
lvm2 10:2.03.41-2.el10 → 10:2.03.41-3.el10
lvm2-libs 10:2.03.41-2.el10 → 10:2.03.41-3.el10
mdadm 4.4-3.el10 → 4.4-4.el10
mokutil 2:0.7.2-4.el10 → 2:0.7.2-5.el10
netavark 2:1.17.2-2.el10 → 4:2.0.0-2.el10
nfs-utils 1:2.8.3-7.el10 → 1:2.8.3-8.el10
nftables 1:1.1.5-5.el10 → 1:1.1.5-6.el10
nmstate 2.2.60-2.el10 → 2.2.61-1.el10
nvidia-gpu-firmware 20260624-24.el10 → 20260722-25.el10
openshift-clients 5.0.0-202606220255.p2.g74e525a.assembly.stream.el10 → 5.0.0-202608070127.p2.g8b0ecc6.assembly.stream.el10
openshift-kubelet 5.0.0-202606250141.p2.ga466682.assembly.stream.el10 → 5.0.0-202607301230.p2.ge63ab41.assembly.stream.el10
openssh 9.9p1-26.el10 → 9.9p1-28.el10
openssh-clients 9.9p1-26.el10 → 9.9p1-28.el10
openssh-server 9.9p1-26.el10 → 9.9p1-28.el10
openssl 1:3.5.5-3.el10 → 1:3.5.7-2.el10
openssl-fips-provider 1:3.5.5-3.el10 → 1:3.5.7-2.el10
openssl-libs 1:3.5.5-3.el10 → 1:3.5.7-2.el10
ose-aws-ecr-image-credential-provider 5.0.0-202606171004.p2.g5060934.assembly.stream.el10 → 5.0.0-202607281540.p2.g278e8c0.assembly.stream.el10
ose-azure-acr-image-credential-provider 5.0.0-202606241438.p2.g2aea5df.assembly.stream.el10 → 5.0.0-202608060825.p2.gb99e4ce.assembly.stream.el10
ose-gcp-gcr-image-credential-provider 5.0.0-202605141918.p2.g808c2a2.assembly.stream.el10 → 5.0.0-202608040132.p2.g51c3264.assembly.stream.el10
ostree 2026.1-1.el10 → 2026.2-1.el10
ostree-grub2 2026.1-1.el10 → 2026.2-1.el10
ostree-libs 2026.1-1.el10 → 2026.2-1.el10
p11-kit 0.26.2-1.el10 → 0.26.4-1.el10
p11-kit-trust 0.26.2-1.el10 → 0.26.4-1.el10
pam 1.6.1-10.el10 → 1.6.1-11.el10
pam-libs 1.6.1-10.el10 → 1.6.1-11.el10
passt 0^20260611.ga9c61ff-1.el10 → 0^20260728.gf8df3f1-1.el10
passt-selinux 0^20260611.ga9c61ff-1.el10 → 0^20260728.gf8df3f1-1.el10
podman 7:5.8.3-1.el10 → 7:6.0.2-1.el10
policycoreutils 3.10-3.el10 → 3.11-1.el10
policycoreutils-python-utils 3.10-3.el10 → 3.11-1.el10
python3 3.12.13-2.el10 → 3.12.13-3.el10
python3-dnf 4.20.0-24.el10 → 4.20.0-26.el10
python3-dnf-plugin-versionlock 4.7.0-10.el10 → 4.7.0-11.el10
python3-dnf-plugins-core 4.7.0-10.el10 → 4.7.0-11.el10
python3-libs 3.12.13-2.el10 → 3.12.13-3.el10
python3-libselinux 3.10-2.el10 → 3.11-1.el10
python3-libsemanage 3.10-1.el10 → 3.11-1.el10
python3-policycoreutils 3.10-3.el10 → 3.11-1.el10
python3-setools 4.6.0-3.el10 → 4.7.0-1.el10
qemu-guest-agent 18:10.1.0-23.el10 → 18:10.1.0-24.el10
rpcbind 1.2.7-3.el10 → 1.2.9-0.el10
rpm-ostree 2026.1-4.el10 → 2026.2-1.el10
rpm-ostree-libs 2026.1-4.el10 → 2026.2-1.el10
rpm-sequoia 1.10.2.1-1.el10 → 1.10.2.3-1.el10
samba-client-libs 4.24.3-100.el10 → 4.24.5-100.el10
samba-common 4.24.3-100.el10 → 4.24.5-100.el10
samba-core-libs 4.24.3-100.el10 → 4.24.5-100.el10
samba-ndr-libs 4.24.3-100.el10 → 4.24.5-100.el10
selinux-policy 42.1.24-1.el10 → 42.1.26-1.el10
selinux-policy-targeted 42.1.24-1.el10 → 42.1.26-1.el10
socat 1.7.4.4-8.el10 → 1.7.4.4-9.el10
sos 4.11.0-1.el10 → 4.11.2-3.el10
sssd 2.13.1-1.el10 → 2.13.1-2.el10
sssd-ad 2.13.1-1.el10 → 2.13.1-2.el10
sssd-client 2.13.1-1.el10 → 2.13.1-2.el10
sssd-common 2.13.1-1.el10 → 2.13.1-2.el10
sssd-common-pac 2.13.1-1.el10 → 2.13.1-2.el10
sssd-ipa 2.13.1-1.el10 → 2.13.1-2.el10
sssd-krb5 2.13.1-1.el10 → 2.13.1-2.el10
sssd-krb5-common 2.13.1-1.el10 → 2.13.1-2.el10
sssd-ldap 2.13.1-1.el10 → 2.13.1-2.el10
sssd-nfs-idmap 2.13.1-1.el10 → 2.13.1-2.el10
sssd-proxy 2.13.1-1.el10 → 2.13.1-2.el10
systemd 257-27.el10 → 257-31.el10
systemd-journal-remote 257-27.el10 → 257-31.el10
systemd-libs 257-27.el10 → 257-31.el10
systemd-pam 257-27.el10 → 257-31.el10
systemd-udev 257-27.el10 → 257-31.el10
tmux 3.3a-13.20230918gitb202a2f.el10 → 3.3a-14.20230918gitb202a2f.el10
tzdata 2026b-1.el10 → 2026c-1.el10
vim-data 2:9.1.083-13.el10 → 2:9.1.083-15.el10
vim-minimal 2:9.1.083-13.el10 → 2:9.1.083-15.el10

Extensions

Full list (113 packages)

NetworkManager-libreswan-1.2.30-2.el10.x86_64
binutils-2.41-65.el10.x86_64
binutils-gold-2.41-65.el10.x86_64
bison-3.8.2-9.el10.x86_64
cmake-filesystem-3.31.8-1.el10.x86_64
cpp-14.4.1-1.el10.x86_64
elfutils-debuginfod-client-0.195-1.el10.x86_64
elfutils-libelf-devel-0.195-1.el10.x86_64
flex-2.6.4-19.el10.x86_64
gcc-14.4.1-1.el10.x86_64
glibc-devel-2.39-133.el10.x86_64
groff-base-1.23.0-10.el10.x86_64
kernel-6.12.0-254.el10.x86_64
kernel-core-6.12.0-254.el10.x86_64
kernel-devel-6.12.0-254.el10.x86_64
kernel-headers-6.12.0-254.el10.x86_64
kernel-modules-6.12.0-254.el10.x86_64
kernel-modules-core-6.12.0-254.el10.x86_64
kernel-modules-extra-6.12.0-254.el10.x86_64
kernel-rt-core-6.12.0-254.el10.x86_64
kernel-rt-devel-6.12.0-254.el10.x86_64
kernel-rt-modules-6.12.0-254.el10.x86_64
kernel-rt-modules-core-6.12.0-254.el10.x86_64
kernel-rt-modules-extra-6.12.0-254.el10.x86_64
krb5-pkinit-1.21.3-11.el10.x86_64
krb5-workstation-1.21.3-11.el10.x86_64
ldns-1.8.3-18.el10.x86_64
libkadm5-1.21.3-11.el10.x86_64
libmpc-1.3.1-7.el10.x86_64
libqb-2.0.8-6.el10.x86_64
libreswan-5.3.2-1.el10.x86_64
libreswan-minimal-5.3.2-1.el10.x86_64
libxcrypt-devel-4.4.36-10.el10.x86_64
libzstd-devel-1.5.5-9.el10.x86_64
lm_sensors-libs-3.6.0-20.el10.x86_64
m4-1.4.19-11.el10.x86_64
make-1:4.4.1-9.el10.x86_64
ncurses-6.4-15.20240127.el10.x86_64
nspr-4.39.0-5.el10.x86_64
nss-3.124.0-5.el10.x86_64
nss-softokn-3.124.0-5.el10.x86_64
nss-softokn-freebl-3.124.0-5.el10.x86_64
nss-sysinit-3.124.0-5.el10.x86_64
nss-tools-3.124.0-5.el10.x86_64
nss-util-3.124.0-5.el10.x86_64
openssl-devel-1:3.5.7-2.el10.x86_64
openvswitch3.5-ipsec-3.5.3-5.el10s.x86_64
pcp-conf-7.1.5-2.el10.x86_64
pcp-libs-7.1.5-2.el10.x86_64
perl-AutoLoader-5.74-514.el10.noarch
perl-B-1.89-514.el10.x86_64
perl-Carp-1.54-511.el10.noarch
perl-Class-Struct-0.68-514.el10.noarch
perl-Data-Dumper-2.189-512.el10.x86_64
perl-Digest-1.20-511.el10.noarch
perl-Digest-MD5-2.59-6.el10.x86_64
perl-DynaLoader-1.56-514.el10.x86_64
perl-Encode-4:3.21-511.el10.x86_64
perl-Errno-1.38-514.el10.x86_64
perl-Exporter-5.78-511.el10.noarch
perl-Fcntl-1.18-514.el10.x86_64
perl-File-Basename-2.86-514.el10.noarch
perl-File-Path-2.18-512.el10.noarch
perl-File-Temp-1:0.231.100-512.el10.noarch
perl-File-stat-1.14-514.el10.noarch
perl-FileHandle-2.05-514.el10.noarch
perl-Getopt-Long-1:2.58-3.el10.noarch
perl-Getopt-Std-1.14-514.el10.noarch
perl-HTTP-Tiny-0.088-512.el10.noarch
perl-IO-1.55-514.el10.x86_64
perl-IO-Socket-IP-0.42-512.el10.noarch
perl-IO-Socket-SSL-2.085-3.el10.noarch
perl-IPC-Open3-1.22-514.el10.noarch
perl-MIME-Base64-3.16-511.el10.x86_64
perl-Mozilla-CA-20231213-5.el10.noarch
perl-NDBM_File-1.17-514.el10.x86_64
perl-Net-SSLeay-1.94-9.el10.x86_64
perl-POSIX-2.20-514.el10.x86_64
perl-PathTools-3.91-512.el10.x86_64
perl-Pod-Escapes-1:1.07-511.el10.noarch
perl-Pod-Perldoc-3.28.01-512.el10.noarch
perl-Pod-Simple-1:3.45-511.el10.noarch
perl-Pod-Usage-4:2.03-511.el10.noarch
perl-Scalar-List-Utils-5:1.63-511.el10.x86_64
perl-SelectSaver-1.02-514.el10.noarch
perl-Socket-4:2.038-511.el10.x86_64
perl-Storable-1:3.32-511.el10.x86_64
perl-Symbol-1.09-514.el10.noarch
perl-Term-ANSIColor-5.01-512.el10.noarch
perl-Term-Cap-1.18-511.el10.noarch
perl-Text-ParseWords-3.31-511.el10.noarch
perl-Text-Tabs+Wrap-2024.001-511.el10.noarch
perl-Time-Local-2:1.350-511.el10.noarch
perl-URI-5.27-3.el10.noarch
perl-base-2.27-514.el10.noarch
perl-constant-1.33-512.el10.noarch
perl-if-0.61.000-514.el10.noarch
perl-interpreter-4:5.40.2-514.el10.x86_64
perl-libnet-3.15-512.el10.noarch
perl-libs-4:5.40.2-514.el10.x86_64
perl-locale-1.12-514.el10.noarch
perl-mro-1.29-514.el10.x86_64
perl-overload-1.37-514.el10.noarch
perl-overloading-0.02-514.el10.noarch
perl-parent-1:0.241-512.el10.noarch
perl-podlators-1:5.01-511.el10.noarch
perl-vars-1.05-514.el10.noarch
protobuf-3.19.6-15.el10.x86_64
python3-openvswitch3.5-3.5.3-5.el10s.x86_64
sysstat-12.7.6-4.el10.x86_64
usbguard-1.1.4-2.el10.x86_64
usbguard-selinux-1.1.4-2.el10.noarch
zlib-ng-compat-devel-2.2.3-3.el10.x86_64

CentOS Stream CoreOS base layer: 10 upgraded from 10.0.20260702-0 to 10.0.20260806-0

MGMT-24903: Fall back to CoreOS base layer: image from worker ignition for day-2 persistent-boot #10717

View changelog in Markdown or change previous release:

Source code for this page located on github