Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.12.0-0.okd-scos-2023-03-23-213604

Team Approvals:

No tests for this release

Upgrades from:

• 4.12.0-0.okd-scos-2023-03-23-160125 (changes) - Failed Success

---

Loading changelog, this may take a while ...

Changes from 4.12.0-0.okd-scos-2023-02-14-060109

Created: 2023-03-24 10:13:30 +0000 UTC

Image Digest: sha256:dccb04bec6bfb4a5eef60ea2375c66428c06ccf5f893c32f425c73e05256bad4

Release 4.12.0-0.okd-scos-2023-03-23-213604 was created from registry.ci.openshift.org/origin/release-scos:4.12.0-0.okd-scos-2023-03-23-213604

Components

• Kubernetes upgraded from 1.25.4 to 1.25.7
• CentOS Stream CoreOS upgraded from 412.9.202302091303-0 to 412.9.202303210437-0 (diff)

Rebuilt images without code change

• azure-machine-controllers git cfb76acd sha256:fd114ce5547460ee4c7d587317661a7c69e545cefe2a060f6ba50d94e36cfb74
• centos-stream-coreos-9 sha256:adf137acab1aaa52dde2e13d66f357da92f30b6d36de69e5b5ad02189c068ec5
• cluster-capi-operator git 3bfe36aa sha256:2c9c2d17ac800ba92f769c1be1023ac7077ffef254f46560cf99dfb9927b9500
• cluster-dns-operator git 1c136fe3 sha256:863cc4e4eefcb7821db6933cb4906b65f946a33ae02ea363f1289fb6df00d2c2
• cluster-image-registry-operator git e9a895af sha256:063055f9086236c87964aaa01fb76ddccfe9780a9578da2719269de4c2c18dab
• cluster-kube-apiserver-operator git 2076f3d0 sha256:aca1a08dcc591f6bf95dc270315e84e8477ee75973fd3863b119adfbaf3075a7
• gcp-machine-controllers git ada83dc6 sha256:a098684f8165249bb7898d67483adb91a0305b5b06a11b5e51ec7ae1fd1dc5e1
• kuryr-cni git 92b9be25 sha256:5cda4cd8c1e6bab1fab6ed319b6206d2d6e3d4d2e2054acb4b944446d6049a13
• kuryr-controller git 92b9be25 sha256:4bbd64a481cd6105db3da0c255b4c6302a8ff01f2d2cb888cb6703144bb7dfdc
• machine-os-content sha256:adf137acab1aaa52dde2e13d66f357da92f30b6d36de69e5b5ad02189c068ec5
• machine-os-images git 566bf595 sha256:175753f9f974346b15372577ab6e9c070a95f621a5ef92f1779ab16672487aab

agent-installer-api-server

• NO-ISSUE: [master] Bump OCP versions: 4.20, 4.21, 4.18, 4.19, 4.13, 4.22, 4.16, 5.0 #10546
• MGMT-24673: PATCH /v2/clusters/{id} does not return updated operator_bundles #10536
• NO-ISSUE: Update linter version #10509
• APPSRE-14691: add monitoring.rhobs/v1 ServiceMonitors for COO compatibility #10540
• OCPBUGS-93368: Simplify IRI api dependency #10528
• NO-ISSUE: Refresh RPM lockfiles RPM lockfile refresh [SECURITY] #10523
• MGMT-24443: watch configmap for CNI config update #10384
• OCPBUGS-91974: Stop setting DevPreviewNoUpgrade for TNF clusters #10507
• MGMT-24635: Incorrect grammar in OpenShift AI GPU validation message #10511
• ACM-35864: CVE-2026-39828/39829/39830 Bump golang.org/x/crypto to v0.52.0 #10495
• MGMT-24453: upgrade to golang 1.26 for assisted-service #10396
• MGMT-24610: Get OCP lifecycle data via api/v2 and update the product’s name #10478
• ACM-34978: apply disk encryption defaults on cluster create and update #10442
• OCPBUGS-87099: Add sourcedir /run/chrony-dhcp to generated chrony.conf #10479
• MGMT-21368: Log slow queries gorm #10457
• MGMT-23234: [BE] Improve the UX around the amd/nvidia operators selection - add profile to selection #10387
• MGMT-24398, MGMT-24399: Migrate test versions to OCP version builder #10412
• MGMT-22787: Limit inventory output #10374
• ACM-35140: CVE-2025-58058 Bump github.com/ulikunitz/xz to v0.5.15 #10450
• NO-ISSUE: [master] Bump OCP versions: 5.0, 4.21 #10472
• ACM-35141: CVE-2025-58058 Bump github.com/ulikunitz/xz to v0.5.15 through indirect dependency conversion #10461
• MGMT-24571: Fix initrd PPI reboot loop by comparing correct image URL #10456
• NO-ISSUE: [master] Bump OCP versions: 4.19 #10449
• MGMT-24551: Add vNIC NFD rule and refine NIC subsystem matchers #10448
• MGMT-24336: Bump LSO catalog fallback to v4.22 for OCP 5.0 #10437
• MGMT-24410: Fixes for installer cache #10397
• MGMT-24550: Migrate NFD NodeFeatureRule apiVersion to nfd.k8s-sigs.io #10444
• OCPEDGE-2692: feat: support MAC address fencing credentials in ABI flow #10385
• MGMT-24339: Prepare 4.22 stable versions assisted-service upstream #10440
• NO-ISSUE: [master] Bump OCP versions: 4.22 #10445
• NO-ISSUE: Update OCP 5.0 OS images to use released 4.22 RHCOS #10441
• MGMT-24495: Fix S3 additional_name and file_name #10432
• MGMT-24496: Allow spaces between the value and unit for installcache #10433
• NO-ISSUE: [master] Bump OCP versions: 4.18, 4.22, 4.20, 4.13 #10436
• MGMT-22787: Add enhancement doc to limit inventory size #10410
• NO-ISSUE: [master] Bump OCP versions: 4.22, 4.21 #10427
• MGMT-24397: Add OCP test version builder & PoC #10321
• MGMT-23738: Flaky test: “Move Agent to another infraenv” fails with Kubernetes conflict error #10319
• NO-ISSUE: [master] Bump OCP versions: 4.16 #10423
• MGMT-19732: Add ntp_sources field for exclusive NTP configuration #10408
• MGMT-22370: Add exponential backoff to agent image pull #10337
• MGMT-24243: Add option for a delay when applying static network config on minimal ISO #10373
• NO-ISSUE: [master] Bump OCP versions: 4.19, 4.22 #10402
• NO-ISSUE: add Assisted-by commit trailer convention to CLAUDE.md #10400
• NO-ISSUE: [master] Bump OCP versions: 4.21, 5.0 #10392
• MGMT-21836: Allow external platform with non-standard HA control plane #10286
• MGMT-23230: Add MachineConfig for AMD GPU kernel module blacklist #9920
• MGMT-24457: Add MI350P PCI device IDs to NFD NodeFeatureRule #10388
• MGMT-24393: Assisted Service IPv6 checks fails comparative #10340
• NO-ISSUE: [master] Bump OCP versions: 4.17, 4.20, 4.18 #10383
• NO-ISSUE: [master] Bump OCP versions: 4.21, 4.22 #10348
• NO-ISSUE: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26 #10354
• NO-ISSUE: Fix resource leak and inconsistency in manifest download #10322
• MGMT-21834: deprecate supported-platforms endpoint #10122
• NO-ISSUE: [master] Bump OCP versions: 4.14, 4.19, 4.18, 4.21, 4.20, 4.16 #10342
• NO-ISSUE: fix typo: ‘occured’ -> ‘occurred’ in main.go error wraps #10316
• NO-ISSUE: increase the timout waiting for assisted-image-service #10327
• MGMT-20634: Revert mac-identifier and global DNS workarounds as RHEL-91250 and RHEL-72440 resolved #10318
• ACM-33836: CVE-2026-35469 bump github.com/moby/spdystream #10314
• NO-ISSUE: [master] Bump OCP versions: 4.22, 4.13, 4.16, 4.17 #10296
• NO-ISSUE: [master] Bump OCP versions: 4.21, 4.20, 4.18, 4.19 #10287
• MGMT-19930: upgrade PostgreSQL stack to pgx v5 and ocm-sdk-go v0.1.499 #10230
• NO-ISSUE: [master] Bump OCP versions: 4.21 #10284
• MGMT-24236: Exclude post-installation hosts from pending-user-action timeout #10266
• MGMT-24138: Order network by bootstrap host #10257
• NO-ISSUE: Remove unused RegisterAddHostsOCPCluster functions #10265
• NO-ISSUE: [master] Bump OCP versions: 4.16, 5.0, 4.22 #10272
• MGMT-24119: Correct the namespace to install Loki Operator as “openshift-operators-redhat” instead of “openshift-loki” #10209
• MGMT-23755: Validate & trim MCS certificates when adding to ignition override #10262
• NO-ISSUE: [master] Bump OCP versions: 4.21, 4.19 #10263
• MGMT-23680: CVE-2026-32285 Bump github.com/buger/jsonparser to v1.1.2 #10240
• NO-ISSUE: Update operator bundle channel to backplane-5.0 #10215
• MGMT-24115: allow empty image checksum/url in getChecksumAndURL #10246
• MGMT-23971: Add a timeout for installing-pending-user-action #10202
• NO-ISSUE: Modify Konflux YAMLs to backplane-5.0 #10237
• MGMT-23802: Fix manifest format in log bundles #10121
• MGMT-23861: Fix oci detection for day2 clusters #10231
• NO-ISSUE: [master] Bump OCP versions: 4.22 #10220
• ACM-33186: Revert Renovate configuration for Hive updates #10203
• MGMT-23553: Automate events table bloat cleanup #10140
• MGMT-23665: fixing CVE-2026-33186 #10173
• NO-ISSUE: Allow restoring soft deleted hosts #10185
• NO-ISSUE: [master] Bump OCP versions: 4.20, 4.21, 4.22, 4.18 #10201
• NO-ISSUE: Bump go modules and linters #10181
• MGMT-23861: Revert MGMT-22385 for oci iscsi day2 #10170
• ACM-32996: Missing nil check in BMACReconciler causes controller panic #10164
• MGMT-23920: 4.22 SNO doesn’t support 4 cpu cores node #10153
• NO-ISSUE: add shay23bra to owners #10163
• NO-ISSUE: [master] Bump OCP versions: 4.13, 4.19 #10162
• NO-ISSUE: Remove urlAuth from credentials endpoint #10161
• MCO-2223: Add osImageStream install-config overrides #10156
• NO-ISSUE: [master] Bump OCP versions: 4.21 #10152
• NO-ISSUE: [master] Bump OCP versions: 4.22, 4.18, 4.20 #10146
• OCPBUGS-79576: Mark raw FC/iSCSI multipath members as ineligible #10142
• OCPBUGS-83401: Fix IRI patcher feature check #10141
• MGMT-23227: Skip host operator validation for day2 clusters #10029
• ACM-32735: Add better API docs to CRDs #10124
• MGMT-23548: Ensure tests w/ gomock controllers call Finish() #10024
• MGMT-22849: Remove the nmconnection that the openshift-installer writes for the bootstrap. #10086
• NO-ISSUE: Detect missing PostgreSQL client in development #10119
• NO-ISSUE: Add assisted-service-writing-unit-tests agent skill #10123
• MGMT-23451: Lower SNO vCPU min to 4 instead of 8 for assisted for OCP 4.22 and above #10040
• MGMT-23141: Cluster creation returns SQL error rather than API error #10113
• NO-ISSUE: [master] Bump OCP versions: 4.20, 4.18, 4.21, 4.14, 4.17, 4.19, 4.16 #10120
• MGMT-23340: upgrade assisted-service postgresql from 13 to 15 #10096
• NO-ISSUE: Replace github.com/golang/mock with go.uber.org/mock #10082
• OCPBUGS-79576: Prefer multipath disk in ABI disk selection #10091
• NO-ISSUE: BMAC: replace per-step Update calls with deferred Patch #10095
• MGMT-22517: Change amd gpu operator namespace to openshift-amd-gpu #10007
• MGMT-23228: Update NFD config for AMD Instinct GPU detection #9918
• MGMT-23599: implement cluster and host validations for Kube API mode #10044
• MGMT-23253: Reconcile stuck day2 agent status by checking spoke cluster #10087
• NO-ISSUE: clarify error when interface in bond missing #10022
• MGMT-23060: Make InfraEnv CpuArchitecture immutable after creation #9999
• MGMT-23625: Remove pinned image version for nfd operator #10045
• MGMT-23231: Replace AcceleratorProfile with HardwareProfile #9919
• MGMT-23674: Remove controller-runtime dependency from api module #10071
• MGMT-23650: Disable image policy in assisted service operator deployment #10070
• MGMT-23300: Add missing permission for host reclaim pod #9934
• MGMT-22939: Fix cache key to get mustgather image #9940
• OCPBUGS-79470: Fix multi-document YAML parsing for NMStateConfig #10053
• NO-ISSUE: [master] Bump OCP versions: 4.16, 4.17, 4.19, 4.21, 4.22 #10054
• AGENT-1426: Add localhost mirror only when missing in IRI patcher #10028
• MGMT-23446: TNA none platform on 4.19 (block for 4.21 and lower) #10013
• MGMT-23045: toggle metal3 integration #9933
• OCPBUGS-78989: Gate customDeploy on PreprovisioningImage having correct ISO #10032
• MGMT-23339: Add url to release image comparison for Kube API versions #10030
• MGMT-23550: Add feature usage for new CNI types #10027
• NO-ISSUE: add skipper skill #10014
• MGMT-23432: add third parties CNI support to KUBE API mode #10015
• NO-ISSUE: [master] Bump OCP versions: 4.21 #10023
• NO-ISSUE: Add Go workspace files to .gitignore #10000
• NO-ISSUE: [master] Bump OCP versions: 4.18, 4.20 #10002
• MGMT-22967: read MCS CA from machine-config-server-ca instead of kube-system/root-ca #9990
• NO-ISSUE: [master] Bump OCP versions: 4.21 #9997
• MGMT-22782: Add state root cleanup script to day-2 worker ignition #9942
• NO-ISSUE: Add bluesort to OWNERS_ALIASES #9979
• OCPBUGS-77767: OVE Above/Below-the-sea integration - Network configuration not persisted #9978
• MGMT-23339: Use release image URL from ClusterImageSet for KubeAPI clusters #9957
• NO-ISSUE: [master] Bump OCP versions: 4.19, 4.13 #9988
• MGMT-22518: Adding RHOAI application endpoint to the list of known hosts for SNO #9936
• OCPBUGS-77552: fix: min supported arbiter disk size should be 50GB #9977
• NO-ISSUE: Update InfraEnv CR description #9938
• MGMT-22905: Update LSO override for operator deployment #8824
• NO-ISSUE: [master] Bump OCP versions: 4.17 #9975
• NO-ISSUE: [master] Bump OCP versions: 4.22, 4.14, 4.21 #9968
• NO-ISSUE: Refresh RPM lockfiles #9945
• NO-ISSUE: Fix loki and logging #9939
• NO-ISSUE: [master] Bump OCP versions: 4.18, 4.20 #9941
• MGMT-23205: Reject empty MAC address in NMState static network config #9937
• NO-ISSUE: [master] Bump OCP versions: 4.21 #9935
• MGMT-21783: bundle cluster and host ignition endpoint CA certificates for day-2 hosts #8826
• ACM-29247: Infrastructure Operator - Set up Renovate configuration to automatically create Hive API Synchronization PRs #9917
• NO-ISSUE: Refresh RPM lockfiles #9915
• ACM-29247: (Revert) infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #9865
• NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.19, 4.22, 4.21 #9752
• MGMT-22907: Prepare 4.21 stable and 4.22 candidate versions assisted-service upstream #8831
• NO-ISSUE: Use renovate to update rpms.lock.yaml #9619
• ACM-29247: (FIX) infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #9505
• NO-ISSUE: Update module github.com/go-logr/logr to v1.4.3 #9357
• NO-ISSUE: [master] Bump OCP versions: 4.21, 4.20, 4.18, 4.19, 4.17 #8912
• ACM-29247: infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #8870
• MGMT-22942: Temporarily mirror CAPI image and OCP 4.20 release for disconnected CAPI CI #8819
• MGMT-23047: Ensure cluster is installed when adding an osImageVersion… #8818
• MGMT-22998: Add documentation to add node to an upgraded cluster #8810
• MGMT-23164: Bug: Assisted Installer fails for OCP < 4.16 due to missing libvirt dependency #8869
• MGMT-22406: Include primary_ip_stack in cluster event notifications #8846
• MGMT-22385: Skip ip= kernel args for Day2 iSCSI/multipath with unknown network #8837
• NO-ISSUE: Update setup-envtest version to release-0.22 #8856
• MGMT-22885: Implement third-party CNI backend support #8797
• NO-ISSUE: Modify Konflux YAMLs to ocm-2.17 #8850
• NO-ISSUE: Update operator bundle channel to ocm-2.17 #8847
• MGMT-23115: add FIPS feature usage tracking #8845
• MGMT-23077: Revert “MGMT-21038: Prevent from inventory set host RequestedHostname directly” #8840
• OCPEDGE-2367: Add support for platform none and external on TNA clusters topology #8830
• MGMT-22731: Add To Renovate Tool - Update UBI-minimal Version Automatically #8802
• MGMT-22523: Bump AMD DeviceConfig driver version to 6.4.3 #8823
• MGMT-23000: Fix when a BMH is paused in non-converged flow #8812
• MGMT-22287: Remove OCP 4.12 support from assisted-service #8794
• MGMT-21038: Prevent from inventory set host RequestedHostname directly #7962
• NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 4.21 #8816
• ACM-29153: Upgrade hive to e33d70 #8807
• MGMT-21756: enable FIPS 140-3 crypto module in Go builds #8755
• NO-ISSUE: [master] Bump OCP versions: 4.20 #8801
• MGMT-22583: Implement Swagger Definitions for 3rd Party CNI / No CNI #8717
• NO-ISSUE: [master] Bump OCP versions: 4.17, 4.20, 4.19, 4.13 #8795
• NO-ISSUE: Clarify release images needed for ironic agent image #8778
• NO-ISSUE: upgrade to 1.25 #8769
• NO-ISSUE: [master] Bump OCP versions: 4.12, 4.18, 4.21, 4.16, 4.20 #8767
• NO-ISSUE: Add parameter for pod disruption budget in openshift template #8765
• MGMT-20701: host re-registration improvement #8737
• MGMT-22189: Fix primary_ip_stack migration #8760
• MGMT-22584: Create Enhancement Document for 3rd Party CNI / No CNI Support in Assisted Installer #8594
• MGMT-22131: transitioning red hat operator base image to ubi minimal #8711
• MGMT-22553: Partial cluster updates fail with false validation errors on dual-stack clusters #8704
• MGMT-22297: fallback path for add-ntp-sources.sh #8742
• NO-ISSUE: Update CONTRIBUTING.md #8745
• MGMT-22189: Order dual-stack networks when fetching from DB #8488
• MGMT-22656: Remove serviceMesh & kserve from DataScienceCluster spec #8741
• NO-ISSUE: Add cpe label #8739
• NO-ISSUE: bumping go version on branch master to v1.25 to solve CVE-2025-58183 #8708
• AGENT-1407: add support for InternalReleaseImage related resources #8600
• NO-ISSUE: [master] Bump OCP versions: 4.21 #8733
• MGMT-16090: upgrade assisted-service postgresql from 12 to 13 #8602
• MGMT-20499: Always generate iSCSI NIC reapply manifest for day2 host support #8705
• NO-ISSUE: [master] Bump OCP versions: 4.17 #8725
• MGMT-22278: Skip deleting spoke resources for an uninstalled agent #8608
• MGMT-22186: Add kata runtime class to Assisted installer #8140
• ACM-27859: Allow PreprovisioningImage finalizer to be removed once BMH finishes deprovisioning #8604
• MGMT-20323: Prefer bootable disks for installation #8701
• NO-ISSUE: add to owners_aliases #8703
• MGMT-22545: Fix YAML marshaling for Kubernetes types in disconnected ignition #8619
• OCPBUGS-68355: Fix Day-2 CSR approval race condition #8622
• MGMT-22423: Fix race condition in ensureOwnerRef causing spec.installed to remain false #8621
• ACM-27290: Fix policy.json not generated for InfraEnv mirror registry config #8609
• ACM-27906: Fix container-image-availability check to use mirrored registries in disconnected environments #8611
• NO-ISSUE: [master] Bump OCP versions: 4.21, 4.20 #8612
• MGMT-22458: CVE-2025-65637 Bump github.com/go-openapi/loads, github.com/go-openapi/analysis, github.com/go-openapi/validate to fix CVE-2025-65637 through introducers update (models module) #8596
• NO-ISSUE: Fix golangci-lint branch #8572
• MGMT-22159: Add NFD operator to the list of OSC operator dependencies #8292
• MGMT-22320: Expose GPU data in Agent CR inventory #8495
• NO-ISSUE: Fix list bundle validation to check for feature incompatibilities #8571
• MGMT-22273: reduce log amount #8565
• MGMT-22396: CVE-2024-25621 Bump github.com/containerd/containerd to v1.7.29 through indirect dependency conversion #8555
• MGMT-18971: Backup and restore for BMH #8563
• NO-ISSUE: Add documentation for creating RHCOS template and configuring MachineSets on vSphere clusters #8441
• MGMT-22278: Allow Agent deletion when InfraEnv is deleted #8416
• NO-ISSUE: [master] Bump OCP versions: 4.14, 4.16, 4.18, 4.19 #8564
• OCPBUGS-66947: Fix OLM manifest configMap metadata names #8496
• OCPBUGS-61237: Prevent race in agent-installer kubeconfig generation #8440
• OCPBUGS-66374: Compare usable memory fairly in validations #8476
• MGMT-21809: Limit TNF Clusters’ platform to either baremetal or none #8390
• MGMT-22181: [4.18] ODF compact mode with 5 masters fails #8471
• NO-ISSUE: [master] Bump OCP versions: 4.13 #8491
• MGMT-22103: Add EVENT_RATE_LIMITS configuration support #8466
• MGMT-22297: synch NTP in discovery #8478
• NO-ISSUE: [master] Bump OCP versions: 4.20, 4.16, 4.17, 4.19, 4.12 #8477
• MGMT-22078: Add readOnlyRootFilesystem to assisted-service template #8229
• NO-ISSUE: Update module github.com/golangci/golangci-lint to v1.64.8 #8464
• AGENT-1216: HostStage for ‘Copying registry data to disk’ #8423
• MGMT-22280: remove loki dependency from logging op #8458
• NO-ISSUE: [master] Bump OCP versions: 4.18 #8456
• NO-ISSUE: [master] Bump OCP versions: 4.20 #8454
• MGMT-22280: new logging operators (loki, logging) #8445
• NO-ISSUE: Update go.mod Hive dependency to 715614a9f379395dbb5b5091276ec59cacfd0599 #8450
• NO-ISSUE: [master] Bump OCP versions: 4.14, 4.19 #8442
• MGMT-22193: Fix dual-stack BMH NIC creation to support multiple NICs per interface #8426
• MGMT-22292: Add url label #8425
• MGMT-22244: add AgentServiceConfig ctrl watch for mirror regsitry configmap changes #8391
• MGMT-22246: Allow late binding for arbiter hosts #8395
• MGMT-22263: Fix Image service health check timeout too short for onprem deployments #8405
• NO-ISSUE: [master] Bump OCP versions: 4.17, 4.21, 4.19 #8404
• MGMT-21691: Reorder networks and VIPs after each DB fetch before install-config generation #8400
• ACM-26371: Update go.mod Hive dependency #8392
• OCPBUGS-56913: Retry incomplete cluster registration in ABI #8241
• NO-ISSUE: [master] Bump OCP versions: 4.20 #8398
• MGMT-21982: Remove –interactive flag from the unconfigured ignition #8389
• NO-JIRA: Add project documentation to CLAUDE.md #8209
• MGMT-22154: return bad request when cluster or host are missing in v2uploadLogs #8356
• NO-JIRA: Fix database initialization in unit tests #8353
• NO-ISSUE: [master] Bump OCP versions: 4.12, 4.18 #8387
• ACM-25423: CVE-2024-45339 Bump github.com/golang/glog to v1.2.4 using replace directive (api module) #8372
• NO-ISSUE: Remove unused ISO_CACHE_DIR variable #8361
• MGMT-22154: enable 400 status code in V2UploadLogs endpoint #8355
• MGMT-22081: Add proxy, NTP, network config, and rendezvous IP to OVE #8144
• NO-ISSUE: [master] Bump OCP versions: 4.16 #8354
• MGMT-19212: Update PreprovisioningImage status when InfraEnv not found #8264
• MGMT-21604: Remove OCP 4.15 support from assisted-service #8248
• MGMT-22184: Sanitize HTTP request logging to exclude authorization headers #8293
• NO-ISSUE: [master] Bump OCP versions: 4.20 #8288
• MGMT-22052: Allow single API and Ingress VIPs in dual-stack with IPv6 primary #8250
• MGMT-22153: increase log capacity from 100MB to 250MB #8260
• NO-ISSUE: [master] Bump OCP versions: 4.15 #8267
• MGMT-22127: Stop non-existing InfraEnv reconcile #8252
• MGMT-9154: agent auto approval #8234
• MGMT-22053: Add Feature Support for Dual-Stack Primary IPv6 #8258
• NO-ISSUE: Add maorfr to OWNERS_ALIASES file #8262
• AGENT-1248: Create configmap containing operator manifests #7818
• ACM-2554: inject imagePullSecrets when available under k8s-mode #8196
• NO-ISSUE: [master] Bump OCP versions: 4.16, 4.19, 4.17 #8249
• NO-ISSUE: [master] Bump OCP versions: 4.20, 4.18 #8247
• MGMT-22042: add cve-automation github app to owners_aliases #8243
• MGMT-22066: Enable TNA clusters support by default #8242
• MGMT-21904: Improve Duplicate certificate Detection used by the infrastructure operator #8233
• ACM-25980: Introduce PreprovisioningImage finalizer #8221
• MGMT-21848: Allow matching host’s disk using byPath #8113
• NO-ISSUE: [master] Bump OCP versions: 4.20, 4.14, 4.16, 4.18 #8219
• MGMT-21230: Use XTS for disk encryption #8115
• MGMT-21870: Add new parameters for bundle routes #8101
• MGMT-22038: Only check TNF version for day-1 bound hosts #8213
• MGMT-22025: Filter out irrelevant RHCOS images in operator deployment scripts #8194
• MGMT-20681: Improve discovery ISO password change script #7683
• MGMT-21624: Fix dual-stack primary IPv6 migrations and update #8145
• NO-ISSUE: [master] Bump OCP versions: 4.13, 4.17, 4.21, 4.19 #8156
• MGMT-21958: Prepare 4.20 stable versions assisted-service upstream #8142
• NO-ISSUE: Update konflux pipelines to use a remote pipeline #8143
• NO-ISSUE: adds example Agent resource to docs #8120
• NO-ISSUE: migrate renovate config #8060
• MGMT-21135: Unexpected Additional Subnet Appears in Machine Network Selection #7953
• MGMT-21810: Support TNF cluster installation using kube-api #8085
• MGMT-21759: Update Assisted Service webhook away from deprecated webhook.Validator API #8135
• MGMT-21859: Move osc operators to supported #8056
• MGMT-19836: Add ClusterID field on HostRoleUpdatedEvent #8111
• MGMT-21624: Add Dual-Stack with primary IPv6 support in Assisted #8026
• NO-ISSUE: [master] Bump OCP versions: 4.16, 4.12, 4.18, 4.20, 4.19, 4.17 #8134
• AGENT-1303: Allow InfraEnv registration to use late binding #8059
• NO-ISSUE: Update Konflux references #8128
• NO-ISSUE: bump ocp dockerfile base image to 4.21 #8110
• MGMT-20588: Align kube descheduler activation CR with OVE needs #7960
• NO-ISSUE: Update Konflux references #8050
• ACM-25137: Remove the SERVICE_EL8_IMAGE env vars #8108
• MGMT-21725: Update Renovate for legacy EL8 Dockerfiles #8090
• OCPBUGS-62580: Fix edge jobs to be consistent with ART for 4.21 #8104
• NO-ISSUE: [master] Bump OCP versions: 4.19 #8095
• NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.19, 4.18 #8089
• NO-ISSUE: [master] Bump OCP versions: 4.17, 4.19, 4.20, 4.15, 4.14 #8084
• MGMT-20192: add possibility to disable image service #7955
• MGMT-20464: Fix NFD detection of NVIDIA GPUs #7696
• MGMT-20324: Fix day2 add hosts with P/Z CPU architectures #7527
• MGMT-20207: avoid adding system CA bundle to AdditionalTrustBundle #7448
• MGMT-20009: Change OCP 4.19 to the default version #7506
• NO-ISSUE: Change node-maintenance operator namespace to avoid conflict with node-healthcheck operator #7491
• NO-ISSUE: fixing late binding #7070
• And 1652 elided commits (e.g. from squash or rebase merges)
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• MGMT-24453: upgrade to golang 1.26 #2171
• NO-ISSUE: Refresh RPM lockfiles #2182
• NO-ISSUE: Refresh RPM lockfiles #2160
• MGMT-23784: CVE-2026-34986 Bump github.com/go-jose/go-jose/v3 to v3.0.5 using replace directive #2121
• NO-ISSUE: Modify Konflux YAMLs to backplane-5.0 #2119
• ACM-33186: Revert Renovate configuration for Hive updates #2107
• NO-ISSUE: upgrade go.opentelemetry.io/otel/sdk to … #2097
• MGMT-23789: CVE-2026-34986 Bump github.com/go-jose/go-jose/v4 to v4.1.4 through indirect dependency conversion #2081
• NO-ISSUE: Refresh RPM lockfiles #2069
• MGMT-23545: Mount pull secret token as a file #2053
• MGMT-23191: Ensure MCO configs are present before rebooting the bootstrap node #2039
• MGMT-23664: CVE-2026-33186 Bump google.golang.org/grpc to v1.79.3 through indirect dependency conversion #2058
• OCPBUGS-70213: fix: allow workers to join TNA cluster when 1 master + arbiter are ready #2056
• NO-ISSUE: Refresh RPM lockfiles [SECURITY] #2040
• OCPBUGS-76382: Fix root partition before copying IRI registry data #2034
• ACM-29247: Infrastructure Operator - Set up Renovate configuration to automatically create Hive API Synchronization PRs #2037
• NO-ISSUE: Refresh RPM lockfiles [SECURITY] #2035
• NO-ISSUE: Refresh RPM lockfiles #2027
• ACM-29247: (Revert) infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #1998
• NO-ISSUE: Update module github.com/jackc/pgtype to v1.14.4 #1664
• NO-ISSUE: Use renovate to update rpms.lock.yaml #1515
• NO-ISSUE: Update github.com/alecthomas/units digest to 0f3dac3 #1524
• ACM-29247: infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #1511
• MGMT-22731: Add To Renovate Tool - Update UBI-minimal Version Automatically #1487
• NO-ISSUE: Modify Konflux YAMLs to ocm-2.17 #1498
• Revert “NO-ISSUE: test for FF ACM 2.17” #1496
• NO-ISSUE: test for FF ACM 2.17 #1495
• ACM-29166: Upgrade hive to e33d70 #1491
• MGMT-22499: CVE-2025-66506 Bump github.com/sigstore/fulcio to v1.8.3 using replace directive #1484
• MGMT-22532: CVE-2025-52881 Bump github.com/opencontainers/selinux to v1.13.0 using replace directive #1483
• MGMT-22393: CVE-2024-25621 Bump github.com/containerd/containerd to v1.7.29 using replace directive #1474
• NO-ISSUE: upgrade go to 1.25 #1466
• MGMT-22653: bump the required minimal go version to 1.24 #1459
• NO-ISSUE: Add cpe label #1457
• MGMT-22131: transitioning red hat operator base image to ubi minimal #1444
• ACM-25812: bumping go version on branch master #1446
• AGENT-1216: support new HostStage (HostStageCopyingRegistryDataToDisk) #1384
• AGENT-1216: copy registry data to disk in ABI/Appliance flow #1359
• MGMT-22292: Add url label #1375
• AGENT-1072: Apply operator manifests from ConfigMap for agent-installer #1175
• MGMT-22042: add cve-automation github app to owners_aliases #1328
• MGMT-20756: assisted installer naive string concatenation for partiti… #1308
• NO-ISSUE: Update konflux pipelines to use a remote pipeline #1301
• NO-ISSUE: Update Konflux references #1299
• MGMT-21724: Update Renovate for legacy EL8 Dockerfiles #1289
• OCPBUGS-62361: Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.21 #1276
• OCPBUGS-62398: Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.21 #1277
• NO-ISSUE: Update Konflux references #1283
• NO-ISSUE: Update Konflux references #1265
• And 239 elided commits (e.g. from squash or rebase merges)
• Full changelog

agent-installer-node-agent

• MGMT-13946: Ignore Proliant Gen 11 serial (#524) #524
• Add sg3_utils package (#497) (#500) #497
• Full changelog

alibaba-cloud-controller-manager

• NO-JIRA: Update OWNERS #56
• NO-JIRA: Update OWNERS #53
• OCPBUGS-23004: Merge https://github.com/kubernetes/cloud-provider-alibaba-cloud:master (8244569) into master #37
• OCPBUGS-25563: Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART #44
• OCPBUGS-25632: Add Snyk file to exclude vendor directory on scan #47
• OCPBUGS-25457: Bump golang.org/x/net to v0.19.0 #42
• OCPBUGS-24926: Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART #40
• OCPBUGS-24111: Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART #39
• Update OWNERS #36
• Rebase onto latest upstream version #35
• OCPBUGS-10120: Updating ose-alibaba-cloud-controller-manager images to be consistent with ART #30
• Update OWNERS #29
• Update OWNERS #27
• Updating ose-alibaba-cloud-controller-manager images to be consistent with ART #26
• Full changelog

aws-ebs-csi-driver-operator

• OCPBUGS-7892: do not inject-proxy when deploying in hypershift control plane #187
• Full changelog

azure-disk-csi-driver-operator

• OCPBUGS-7885: Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars #70
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-7481: Fix file check for loading openshift manifests #6907
• OCPBUGS-10497: [release-4.12] aws: bump aws-sdk-go version #6985
• OCPBUGS-10439: Sort userTags in Machine and Machineset manifests #6984
• OCPBUGS-7469: [release-4.12] GCP XPN Featuregates #6851
• OCPBUGS-7063: vSphere - Remove regexs in terraform ova import #6868
• OCPBUGS-8658: Pass Capabilites from install-config to cluster #6947
• OCPBUGS-7594: fully qualified username must be provided #6864
• OCPBUGS-7746: Convert platform type for AgentClusterInstall #6878
• OCPBUGS-8015: make VIP 168.63.129.16 noProxy in all clouds except Public #6909
• OCPBUGS-6087: Warn if agent assets detected when using non-agent waitfor #6788
• OCPBUGS-7607: IBMCloud: Handle COS reclamations #6867
• OCPBUGS-7529: bump RHCOS 4.12 bootimage metadata #6873
• OCPBUGS-7521: Update AgentConfig template #6857
• OCPBUGS-5992: azure: validate Windows-only VM types #6780
• OCPBUGS-6991: Don’t require vSphere details for agent installer #6826
• Full changelog

baremetal-operator

• OCPBUGS-9955: allow namespace to continue with terminating when deprovisioning a bmh #258
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-10774: bump repo sclorg/s2i-ruby-container location for newapp test #1382
• OCPBUGS-7960: pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates #1354
• Full changelog

cluster-baremetal-operator

• OCPBUGS-7585: also use BMH.ConsumerRef for linking to master Machines #326
• Full changelog

---

View changelog in Markdown or change previous release: 5.0.0-0.okd-scos-nightly-2026-07-04-1701095.0.0-0.okd-scos-nightly-2026-07-04-0248525.0.0-0.okd-scos-nightly-2026-07-03-1256465.0.0-0.okd-scos-nightly-2026-07-03-0056465.0.0-0.okd-scos-nightly-2026-07-02-1256465.0.0-0.okd-scos-nightly-2026-07-02-0056465.0.0-0.okd-scos-nightly-2026-07-01-1030455.0.0-0.okd-scos-nightly-2026-06-30-2010155.0.0-0.okd-scos-nightly-2026-06-30-081015───5.0.0-0.okd-scos-2026-02-24-143251───4.23.0-0.okd-scos-nightly-2026-06-19-2121094.23.0-0.okd-scos-nightly-2026-06-19-0921094.23.0-0.okd-scos-nightly-2026-03-09-153314───4.23.0-0.okd-scos-2026-03-09-153314───4.22.0-0.okd-scos-nightly-2026-07-05-0959314.22.0-0.okd-scos-nightly-2026-07-04-2027124.22.0-0.okd-scos-nightly-2026-07-04-0707484.22.0-0.okd-scos-nightly-2026-07-03-1907484.22.0-0.okd-scos-nightly-2026-07-03-0533424.22.0-0.okd-scos-nightly-2026-07-02-154311───4.22.0-0.okd-scos-2026-07-04-2258404.22.0-0.okd-scos-2026-07-04-0843414.22.0-0.okd-scos-2026-07-03-2043414.22.0-0.okd-scos-2026-07-03-0843414.22.0-0.okd-scos-2026-07-02-1921094.22.0-0.okd-scos-2026-07-02-054413───4.21.0-0.okd-scos-nightly-2026-07-04-1636234.21.0-0.okd-scos-nightly-2026-07-04-0436234.21.0-0.okd-scos-nightly-2026-07-03-1636234.21.0-0.okd-scos-nightly-2026-07-03-0436234.21.0-0.okd-scos-nightly-2026-07-02-1636234.21.0-0.okd-scos-nightly-2026-07-02-0436234.21.0-0.okd-scos-nightly-2026-07-01-1636234.21.0-0.okd-scos-nightly-2026-07-01-0436234.21.0-0.okd-scos-nightly-2026-06-02-1245274.21.0-0.okd-scos-nightly-2026-06-02-004120───4.21.0-0.okd-scos-2026-07-03-1248244.21.0-0.okd-scos-2026-07-03-0048234.21.0-0.okd-scos-2026-07-02-1248224.21.0-0.okd-scos-2026-07-02-0048214.21.0-0.okd-scos-2026-07-01-124820───4.20.0-0.okd-scos-2026-02-10-1309514.20.0-0.okd-scos-2026-02-07-0016394.20.0-0.okd-scos-2026-02-06-1216394.20.0-0.okd-scos-2026-02-06-0016394.20.0-0.okd-scos-2026-02-05-1216384.20.0-0.okd-scos-2026-02-05-001637───4.19.0-0.okd-scos-2025-10-25-0018304.19.0-0.okd-scos-2025-10-24-1218294.19.0-0.okd-scos-2025-10-24-0018284.19.0-0.okd-scos-2025-10-23-1218284.19.0-0.okd-scos-2025-10-23-001828───4.18.0-0.okd-scos-2025-05-27-0825374.18.0-0.okd-scos-2025-05-26-2025374.18.0-0.okd-scos-2025-05-26-0825374.18.0-0.okd-scos-2025-05-23-0333574.18.0-0.okd-scos-2025-05-22-153357───4.17.0-0.okd-scos-2025-02-25-0904554.17.0-0.okd-scos-2025-02-24-2104554.17.0-0.okd-scos-2025-02-24-0904544.17.0-0.okd-scos-2025-02-23-2104544.17.0-0.okd-scos-2025-02-22-211215───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2025-06-27-1341344.15.0-0.okd-2025-06-17-1652194.15.0-0.okd-2025-05-02-1402244.15.0-0.okd-2025-04-03-2126204.15.0-0.okd-2025-04-02-1800124.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───5.0.0-okd-scos.ec.45.0.0-okd-scos.ec.35.0.0-okd-scos.ec.25.0.0-okd-scos.ec.15.0.0-okd-scos.ec.0───4.22.0-okd-scos.ec.164.22.0-okd-scos.ec.154.22.0-okd-scos.ec.144.22.0-okd-scos.ec.134.22.0-okd-scos.ec.124.22.0-okd-scos.ec.114.22.0-okd-scos.ec.104.22.0-okd-scos.ec.94.22.0-okd-scos.ec.84.22.0-okd-scos.ec.74.22.0-okd-scos.ec.64.22.0-okd-scos.ec.54.22.0-okd-scos.ec.44.22.0-okd-scos.ec.34.22.0-okd-scos.ec.24.22.0-okd-scos.ec.14.22.0-okd-scos.ec.04.21.0-okd-scos.ec.194.21.0-okd-scos.ec.184.21.0-okd-scos.ec.174.21.0-okd-scos.ec.164.21.0-okd-scos.ec.154.21.0-okd-scos.ec.144.21.0-okd-scos.ec.134.21.0-okd-scos.ec.124.21.0-okd-scos.ec.114.21.0-okd-scos.ec.104.21.0-okd-scos.ec.94.21.0-okd-scos.ec.84.21.0-okd-scos.ec.74.21.0-okd-scos.ec.64.21.0-okd-scos.ec.54.21.0-okd-scos.ec.44.21.0-okd-scos.ec.34.21.0-okd-scos.ec.24.21.0-okd-scos.ec.14.21.0-okd-scos.ec.0───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424

Source code for this page located on github