Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.21.0-okd-scos.ec.2

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next

Upgrades from:

• 4.21.0-okd-scos.ec.1 (changes) - Success
• 4.20.0-okd-scos.ec.16 - Success

Upgrades to:

• 4.21.0-okd-scos.ec.3 (changes) - Success

---

Loading changelog, this may take a while ...

Changes from 4.20.0-okd-scos.ec.16

Created: 2025-10-06 05:00:36 +0000 UTC

Image Digest: sha256:d6da98f22916e755e939c52ec0bffb69f244fe622b9d6a7e69759466e762a04f

Release 4.21.0-okd-scos.ec.2 was created from registry.ci.openshift.org/origin/release-scos:4.21.0-0.okd-scos-2025-09-30-202219

Components

• Kubectl 1.33.3
• Kubernetes upgraded from 1.33.4 to 1.33.5
• Kubernetes Tests upgraded from 1.33.3 to 1.33.4
• CentOS Stream CoreOS 10.0.20250827-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
InsightsConfigAPI (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NodeSwap (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GCPClusterHostedDNSInstall (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
CBORServingAndStorage (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClientsAllowCBOR (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClientsPreferCBOR (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIMachineManagementVSphere (0 tests)			Enabled (New)	Enabled (New)

Removed images

• ovirt-csi-driver
• ovirt-csi-driver-operator

Rebuilt images without code change

• cloud-network-config-controller git 467e50fe sha256:e8e0b74656219fe49a344e278827a20b7fbbf018ae33757c2bb9da5bd4ba5efa
• multus-networkpolicy git ef99d3d4 sha256:be6dd1a247ca54c251d73fd9585c0e7272748df0593dd4fb43479f2ff1799ac2

agent-installer-api-server

• NO-ISSUE: [master] Bump OCP versions: 4.17, 4.19, 4.20, 4.15, 4.14 #8084
• MGMT-20192: add possibility to disable image service #7955
• And 21 elided commits (e.g. from squash or rebase merges)
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• NO-ISSUE: Update Konflux references #1265
• And 5 elided commits (e.g. from squash or rebase merges)
• Full changelog

agent-installer-node-agent

• chore(KONFLUX-6210): fix and set name and cpe label for assisted-installer-agent-ds-main (#1111) #1111
• Full changelog

agent-installer-utils

• AGENT-1258: Build PipelineRun changes for Konflux #155
• OCPBUGS-61946: Include only final ISO in OVE UI container image #162
• OCPBUGS-61956: Disable Konflux go.mod PR updates #163
• OCPBUGS-61875: Add 4.21 config #160
• AGENT-1258: Red Hat Konflux kflux-prd-rh02 update ove-ui-iso #154
• AGENT-1258: Red Hat Konflux kflux-prd-rh02 purge agent-installer-utils #153
• Full changelog

aws-cloud-controller-manager

• NO-JIRA: Update OWNERS #116
• Full changelog

aws-cluster-api-controllers

• NO-JIRA: Update OWNERS #567
• NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.1 (9c17049) into main #569
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-60637: add runAsUser hook for operator deployment controller #431
• NO-JIRA: Centralize injection of hosted-kubeconfig volume #311
• NO-JIRA: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.21 #429
• OCPBUGS-54385: Avoid informer resync #432
• NO-JIRA: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.21 #427
• NO-JIRA: Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.21 #425
• NO-JIRA: azure-disk, azure-file sync code de-duplication #303
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• NO-JIRA: Update OWNERS #149
• Full changelog

azure-cluster-api-controllers

• NO-JIRA: Update OWNERS #351
• Full changelog

azure-machine-controllers

• NO-JIRA: Update OWNERS #162
• Full changelog

azure-service-operator

• NO-JIRA: Update OWNERS #12
• Full changelog

baremetal-installer, installer, installer-artifacts

• no-jira: Revert “Merge pull request #9939 from barbacbd/CORS-4058-release-4.21” #9974
• CORS-4078: bump AWS SDK v2 max backoff duration to 300s #9966
• CORS-4107: Update default release image to 4.21 #9954
• OCPBUGS-61514: Add check for gcp firewall deletion permission #9935
• OCPBUGS-62293: Set default for PrivateDNSZone Project ID #9967
• CORS-4078: disable rate limiter for AWS SDK v2 #9958
• OCPBUGS-61901: Update explain for Publish #9950
• no-jira: OWNERS: switch to joelcapitao #9951
• OCPBUGS-61935: Wildcards not reliable for copying container files #9948
• CORS-4058: Migrate AWS Destroy to SDK v2 #9939
• OCPBUGS-61353: Generated Redacted nutanix config for operator #9931
• CORS-3550: add ability to opt out of the sigstore signing requirement #9940
• CORS-4162: Remove GCPClusterHostedDNSInstall featuregate #9944
• OCPBUGS-61490: Update code to retrieve ICSP instead of ICP #9933
• MGMT-21586: Add an option in image-based installation to specify architecture #9934
• SPLAT-2430: Update vSphere version validations for 7 EOL and VCF 9 #9914
• OCPBUGS-61373: Fix shellcheck issues in bootstrap #9929
• OCPBUGS-61373: Fix agent shellcheck issues #9928
• no-jira: Fix logging and error messages #9917
• Full changelog

baremetal-machine-controllers

• OCPBUGS-62365: Updating baremetal-machine-controller-container image to be consistent with ART for 4.21 #237
• Full changelog

cli, cli-artifacts, deployer, tools

• NO-JIRA: Updating openshift-enterprise-cli-container image to be consistent with ART for 4.21 #2107
• OCPBUGS-59311: oc adm must-gather: Add support for context #2105
• OCPBUGS-59311: pkg/…/inspect: Add support for context.Context #2100
• WRKLDS-593: oc adm must-gather: Improve cleanup order #2080
• NO-JIRA: Add tchap as reviewer in oc #2099
• NO-JIRA: oc adm groups sync: Use client.Unbind #2094
• OCPBUGS-61063: pkg/cli/admin/upgrade/recommend: Enable precheck and accept gates #2088
• OCPBUGS-52936: oc adm policy: Only initialize UserClient if built-in OAuth is enabled #2090
• OCPBUGS-61311: Introduce auto-open-browser flag for external OIDC issuer login #2089
• NO-ISSUE: pkg/cli/admin/upgrade/recommend/examples/4.19.0-okd-scos.16: Add OKD example #2093
• OCPBUGS-59951: oc adm must-gather: Wrap gather in a session #2087
• NO-JIRA: Add some warnings into excluded list #2092
• OCPBUGS-56691: Rely on overall available disk space of the mounted volume #2084
• Full changelog

cloud-credential-operator

• OCPBUGS-62184: aws: remove endpoint overrides for s3 and cf clients #921
• CCO-692: Migrate to aws-ask-go-v2 #905
• OCPBUGS-61475: set cloud-credential-operator as default-container #914
• Full changelog

cluster-authentication-operator

• API-1835: fix integration tests #795
• OCPBUGS-57444: set appropriate rolling update settings #789
• NO-JIRA: om: fix integration testing #788
• Full changelog

cluster-autoscaler

• NO-JIRA: Remove OWNERS automation preamble #382
• Full changelog

cluster-baremetal-operator

• OCPBUGS-60498: Always have a service for ironic-api port #510
• Full changelog

cluster-capi-controllers

• NO-JIRA: Update OWNERS #246
• OCPBUGS-57605: Updating ose-cluster-api-container image to be consistent with ART for 4.20 #242
• Full changelog

cluster-capi-operator

• OCPCLOUD-2992: Enable MAPI machine synchronized e2e tests (re-enable after OCPBUGS-54703 fix) #359
• NO-JIRA: Update OWNERS #353
• OCPCLOUD-3162: conversion: do not set ignition version on AWSMachine #363
• NO-JIRA: use go workspaces #358
• OCPCLOUD-2714: Add VAPs to prevent setting of CAPI fields that are not supported by MAPI #334
• No-JIRA: increased timeout #354
• NO-JIRA: Adds AGENTS.md #349
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-60385: Add Microsoft.Network/publicIPAddresses/delete permission #416
• NO-JIRA: Update OWNERS #413
• OCPBUGS-54490: Add Azure permissions for Private Link Service operations #417
• SPLAT-2341: Add feature gate support in the cloud-config sync controller #400
• Full changelog

cluster-config-api

• OCPBUGS-62068: NodeSwap Feature Gate usage to be removed #2494
• OCPBUGS-59939: ConsoleLink CRD has incorrect additionalPrinterColumns entry #2507
• OCPBUGS-59940: ConsoleLink CRD has incorrect additionalPrinterColumns entry #2506
• (bugfix): crdify generator returns aggregated error when validations fail #2493
• MCO-1669: add BootImageSkewEnforcement API #2357
• remove unused feature gate InsightsConfigAPI #2474
• OCPBUGS-61689: Add ‘AGE’ print column to MachineConfigNode object #2476
• NO-JIRA: tooling: add crdify generator to run crdify against CRD changes #2472
• Update controller-tools to latest on fork #2478
• Monitoring API: Add Metric server config #2322
• CNTRLPLANE-5: Add CBOR feature gate #2235
• NO-JIRA: New rules about CO’s conditions #2469
• apiservers.config.openshift.io: remove spec.tlsSecurityProfile GoDoc caveats #2467
• SPLAT-2482: create new featuregate for ClusterAPIMachineManagementVSphere #2466
• MCO-1675: Update API for Status Reporting needs (REBASED) #2442
• CORS-3993: Promote GCPClusterHostedDNS to Default #2300
• Adjust typos #2243
• Update schema checker to avoid incorrect new required fields checks #2470
• Full changelog

cluster-control-plane-machine-set-operator

• NO-JIRA: Update OWNERS #367
• MCO-1866: Ignore boot image differences while reconciling Provider Configs #368
• Full changelog

cluster-csi-snapshot-controller-operator

• Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.21 #245
• OCPBUGS-62247: add all-egress label to deployments on HCP and IBM #243
• Full changelog

cluster-dns-operator

• NE-2138: Bump cluster-dns-operator to Kubernetes 1.33 for 4.21 #448
• NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #449
• Full changelog

cluster-ingress-operator

• OCPBUGS-55649: Remove SetEIPForNLBIngressController feature gate #1280
• OCPBUGS-55673: Remove IngressControllerLBSubnetsAWS featuregate #1242
• NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #1281
• NE-2139: Kubernetes to 1.33.4 and controller-runtime to 0.21 #1279
• NO-JIRA: Add davidesalerno to OWNERS #1278
• Full changelog

cluster-kube-apiserver-operator

• OCPSTRAT-2371: MutatingAdmissionPolicy e2es depend on both v1alpha1 and v1beta1 of admissionregistration.k8s.io being served in k8 1.34 #1927
• OCPBUGS-15430: move alerting rules from CMO over #1922
• Re-apply “OCPBUGS-57049: certrotation: move test case name outside of AutoRegenerateAfterOfflineExpiry” #1910
• OCPSTRAT-2371: promote MutatingAdmissionPolicy to v1beta1 for > 1.34.0 #1921
• Full changelog

cluster-kube-cluster-api-operator

• NO-JIRA: Update OWNERS #60
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-62255: Throttle resourcesynccontroller on pairs with dual writers. #881
• WRKLDS-1556: Remove –cloud-provider=external from KCM #862
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-61301: Add readonlyRootFilesystem #575
• Full changelog

cluster-machine-approver

• NO-JIRA: Update OWNERS #276
• NO-JIRA: set machine-approver-controller as default container #278
• Full changelog

cluster-monitoring-operator

• OCPBUGS-15430: remove Kubernetes API alerting rules #2671
• NO-JIRA: chore: bump jsonnet dependencies #2649
• OCPBUGS-62109: test: remove image registry e2e tests #2681
• NO-ISSUE: update Go dependencies #2674
• MON-4346: Bump Go to 1.24 #2655
• NO-JIRA: [bot] Synchronize versions of the downstream components #2673
• OCPBUGS-60161: Add mcd_local_unsupported_packages metric from MCO to telemetry #2638
• NO-ISSUE: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.21 #2662
• MON-4344: chore: port the test suite over from openshift-tests-private #2635
• MON-4371: chore(prometheus): enable use-uncached-io feature flag #2637
• NO-JIRA: [bot] Synchronize versions of the downstream components #2668
• OCPBUGS-61113: add flag --watch-referenced-objects-in-all-namespaces to prometheus-operator #2657
• NO-JIRA: [bot] Synchronize versions of the downstream components #2663
• Full changelog

cluster-network-operator

• OCPBUGS-42303: Add drop flows for GARP #2801
• OCPBUGS-61196: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes #2797
• OCPBUGS-61561: Relax label req. of DPU/DPU Host/Smart NIC #2786
• Revert “OCPBUGS-61196: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes” #2796
• OCPBUGS-61196: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes #2605
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-62091: E2E: Add function to check control plane nodes are schedulable. #1396
• And 2 elided commits (e.g. from squash or rebase merges)
• Full changelog

cluster-olm-operator

• NO-ISSUE: Updating ose-cluster-olm-operator-container image to be consistent with ART for 4.21 #138
• OCPBUGS-61873: Update RBAC to update/patch/delete what we create #139
• Full changelog

cluster-policy-controller

• OCPBUGS-57191: fix(psalabelsyncer): return an error instead of panic when converting an unknown volume #167
• NO-JIRA: scc allocation controller: Use server-side apply #165
• Full changelog

cluster-samples-operator

• OCPBUGS-62061: Re-sync OCP Samples Library for OCP 4.21 - 22Sep2025 #650
• Full changelog

cluster-storage-operator

• STOR-2297: remove oVirt code from CSO #617
• OCPBUGS-60637: HyperShift deployments should reflect user id security context #616
• OCPBUGS-62121: add all-egress label to deployments on HCP and IBM #621
• OCPBUGS-61175: Add RBAC rule to let manila-csi-driver-operator manage NetworkPolicy #615
• SPLAT-2467: Updated VPD alerts to reflect current vSphere support #612
• Full changelog

cluster-update-keys

• OCPBUGS-62464: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.21 #86
• Full changelog

cluster-version-operator

• OCPBUGS-62416: Updating cluster-version-operator-container image to be consistent with ART for 4.21 #1237
• OTA-1585: test: Rename an existing test to comply with the OTE integration guide #1235
• Full changelog

console

• CONSOLE-4332: Update the secrets forms to use PF components #15513
• OCPBUGS-62313: Returning from any Secret Create page does not return to secret page #15543
• CONSOLE-4684: Refactor machine-set modals #15484
• OCPBUGS-62281: InsecureSkipVerify to true for results proxy endpoint in off-cluster #14888
• CONSOLE-4808: update resource-log.cy.ts #15539
• CONSOLE-4799: update tests/app/debug-pod.cy.ts #15530
• CONSOLE-4802: Migrate KebabActions to dynamic #15535
• CONSOLE-3769: Add @openshift/dynamic-plugin-sdk to core and internal pkg deps #15518
• OCPBUGS-61536: Fix incorrect handling of vSphere settings #15481
• OCPBUGS-61937: Add Missing Periods to Error Messages and update try again button link #15511
• NO-JIRA: Remove yarn-generate from post-install script #15373
• CONSOLE-4796: Migrate some Dashboards extensions to dynamic #15526
• OCPBUGS-61535: Cancel PVC creation redirect user to last visited page instead of PVC list #15502
• CONSOLE-4764: Add tech preview feature flag support #15477
• CONSOLE-4715: Migrate the Enzyme test tests root directory and remove tests… #15462
• NO-JIRA: Update CHANGELOG based on 4.18 plugin SDK package release #15517
• CONSOLE-4760: update CRD list to use ResourceDataView #15469
• CONSOLE-3769: Install @openshift/dynamic-plugin-sdk #15509
• OCPBUGS-60084: Help dropdown should be closed automatically after tour model opened #15483
• OCPBUGS-55401: PVC shows negative Available space in OpenShift Console on RHOCP 4 #15315
• OCPBUGS-59634: Fix the events search input width, and incorporate PF Toolbar component #15501
• NO-JIRA: Update README.md with instructions for logging out kube:admin in local #15482
• NO-JIRA: chore(OWNERS): remove logonoff from reviewers #15505
• CONSOLE-4710: use useOverlay to launch ErrorModal #15475
• OCPBUGS-61087: Updation of label from edit label doesn’t work #15460
• OCPBUGS-61519: Fix improper DescriptionList refactor #15495
• OCPBUGS-59972: Add validation and type guards on healthHandler calls to prevent errors #15470
• CONSOLE-4756: Convert more files to TypeScript #15472
• OCPBUGS-61458: fix MachineSet YAML template #15478
• OCPBUGS-58118: fix namespace path generation for non-namespaced resources #15467
• OCPBUGS-61183: cluster in workload identity mode is not applied with the token-auth-… #15459
• OCPBUGS-61133: Fix catalog search relevance scoring, so that operators with attribute.keywords are displayed and remove unnecessary metadataName from calculation #15444
• OCPBUGS-61468: i18n upload/download routine task for OCP version 4.20 #15476
• CONSOLE-4727: Update OWNERS files across the repo #15461
• CONSOLE-4598: Migrate enzyme tests/components/utils unit tests to React Testing… #15442
• OCPBUGS-61393: Change default tab size from 4 to 2 #15474
• CONSOLE-4635: Refactor PDBActionFactory to hook form and cleanup. #15285
• And 6 elided commits (e.g. from squash or rebase merges)
• Full changelog

console-operator

• CONSOLE-4765, CONSOLE-4767: Automate console tech preview flag via cluster FeatureSet, Grant console service account watch permissions for ClusterCatalogs #1043
• OCPBUGS-61726: Revert “OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition” #1046
• OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition #1041
• OCPBUGS-61483: Update DEFAULT_DOC_URL to point to OpenShift Container Platform 4.21 #1044
• OCPBUGS-61383: Update QuickStarts typo and doc link #1042
• OCPBUGS-60863: Rename Dockerfile to Dockerfile.ocp #1039
• Full changelog

coredns

• NO-JIRA: Updating coredns-container image to be consistent with ART for 4.21 #154
• NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #153
• Full changelog

csi-external-attacher

• OCPBUGS-61394: UPSTREAM: 682: Skip VolumeAttachments of other drivers #88
• NO-JIRA: Updating csi-attacher-container image to be consistent with ART for 4.21 #87
• Full changelog

csi-external-snapshot-metadata

• NO-JIRA: Updating csi-external-snapshot-metadata-container image to be consistent with ART for 4.21 #5
• Full changelog

csi-external-snapshotter, csi-snapshot-controller

• NO-JIRA: Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.21 #187
• Full changelog

docker-registry

• OCPBUGS-60845: update OWNERS #447
• Full changelog

driver-toolkit

• Updating the OWNERS file. (#175) #175
• Updating driver-toolkit-container image to be consistent with ART for 4.21 (#172) #172
• Full changelog

gcp-cloud-controller-manager

• OCPBUGS-61006: Adjust vendoring to use go.work to get rid of the symlink #91
• Full changelog

gcp-cluster-api-controllers

• NO-JIRA: Update OWNERS #248
• Full changelog

gcp-machine-controllers

• NO-JIRA: Update OWNERS #129
• no-jira: Machine Api Operator GCP must search for the GCP Custom Endpoints Installer feature gate #128
• Full changelog

gcp-pd-csi-driver-operator

• NO-JIRA: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.21 #151
• CORS-4201: Search for the feature gate for GCP Custom Endpoints #150
• Full changelog

haproxy-router

• OCPBUGS-49769: Validate the key and cert content before accepting #669
• NE-2137: Bump router k8s libraries to 0.33.4 #671
• OCPBUGS-60257: fix extra space in haproxy template #676
• OCPBUGS-57896: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.20 #660
• OCPBUGS-57845: Updating ose-haproxy-router-base-container image to be consistent with ART for 4.20 #659
• NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #675
• OCPBUGS-61224: Revert Prevent startup failures due to name resolution” #672
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• OCPBUGS-61554: Bump 1.33.5 #2459
• OCPBUGS-61754: UPSTREAM: <carry>: Add retries for GetCurrentResourceVersion. #2467
• OCPBUGS-61222: Do not remove PVC ClaimRef to fix flaky VAC test #2452
• OCPBUGS-58313: apiserver library go bump #2457
• NO-JIRA: UPSTREAM: 133682: Increase port-forward broken connection detection client timeout #2428
• Full changelog

hypershift

• KFLUXSPRT-5246: update base images from RHEL9 ELS to UBI9 minimal 9.4 #6916
• OCPBUGS-62172: Add Manila, Cinder to list of pods allowed readOnlyRootFileSystem=false #6885
• NO-JIRA: fix(test): support external oidc settings on non-aws platform #6754
• NO-JIRA: chore(ai): ensure jira-solve run make pre-commit #6901
• NO-JIRA: chore(ai): let jira-solve show the executed command in the PR desc #6898
• OCPBUGS-61936: fix(capi-provider): wait for infrastructure resource before startup #6860
• OCPBUGS-62224: fix(e2e): add stabilization wait in GlobalPullSecret test to reduce flakiness #6892
• CNTRLPLANE-1478: chore: add AI directory paths to OWNERS file #6884
• NO-JIRA: chore(ai): add claude slash command jira solve #6882
• OCPBUGS-62099: make TestAutoscalingBalancing more robust #6877
• OCPBUGS-61850: fix(kas-bootstrap): increase wait timeouts to avoid KAS startup races #6843
• NO-JIRA: ci(dev-cluster): Fix dev token secret annotation #6876
• OCPBUGS-62056: test(e2e): fix flaky EnsureOAPIMountsTrustBundle with retry logic #6872
• OCPBUGS-62128: hcco: sync watched resource types to availability-prober #6879
• CNTRLPLANE-1331: Get self-managed Azure working again #6703
• OCPBUGS-59885: [e2e][KubeVirt] Ignore KubeVirtNodesLiveMigratable Condition on HC #6826
• CNTRLPLANE-1455: docs(contribute): consolidate contributing guide; refresh PR template; add landing page #6866
• OCPBUGS-61776: fix(ignition-server): Don’t delete user-managed cert secrets #6836
• OCPBUGS-61894: Enable VolumeAttributesClass runtime config #6855
• CNTRLPLANE-1452: docs(ci): add documentation for checking CI status #6849
• OCPBUGS-61438: fix(security): harden konnectivity-agent DaemonSet security context #6835
• OCPBUGS-61828: refactor FeatureGate status check #6862
• OCPBUGS-61329: skip EnsureReadOnlyRootFilesystemTmpDirMount check for kubevirt HCP pods #6842
• OCPBUGS-61825: test(e2e,kubevirt): skip break-glass-credentials on kubevirt #6856
• OCPBUGS-61862: ci: Remove the MCE 2.10 konflux pipeline #6848
• OCPBUGS-61719: fix: propagate AWSLoadBalancerTargetNodesAnnotation to… #6823
• OCPBUGS-61334: fix(kas): Set correct container port in postStart handler, 2 #6824
• OCPBUGS-61177: ci: use common MCE konflux pipeline #6743
• NO-JIRA: Update Branch Tasks Docs #6840
• OCPBUGS-56249: fix lint-fix Makefile rule #6151
• OCPBUGS-61048: test(e2e): add autoscaler deployment verification to autoscaling test #6779
• OCPBUGS-61687: fix(capi-provider): use single replica deployment for aws and azure #6807
• fix(disable-psa): disable PSA check for 4.20 #6831
• OCPBUGS-61482: fix(proxy): ensure URLs have scheme before proxy resolution #6789
• OCPBUGS-61587: fix(oauth): oauth-openshift deployment should be HA #6802
• CNTRLPLANE-1277: Enable TestCreateClusterCustomConfig for Azure #6706
• Revert “OCPBUGS-61334: fix(kas): Set correct container port in postStart handler” #6805
• OCPBUGS-60185: resolve MIRRORED_RELEASE_IMAGE flapping #6751
• OCPBUGS-61499: fix(control-plane): remove resource limits from kube-controller-manager #6785
• CNTRLPLANE-1364: feat: enable global pull secret for AWS #6736
• OCPBUGS-61334: fix(kas): Set correct container port in postStart handler #6773
• NO-JIRA: fix karpenter metric validation in e2e #6714
• NO-JIRA: chore(AI): add claude agents for different SMEs #6787
• OCPBUGS-61329: test(e2e): skip kubevirt pods in EnsureReadOnlyRootFilesystem #6770
• OCPBUGS-61462: temporarily use v4.20 catalogs #6782
• NO-JIRA: add permissions to role policy #6783
• Full changelog

ibm-cloud-controller-manager

• NO-JIRA: Update OWNERS #85
• Full changelog

ibm-vpc-block-csi-driver

• Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART for 4.21 #112
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-62375: Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.21 #156
• Full changelog

ibmcloud-cluster-api-controllers

• NO-JIRA: Update OWNERS #126
• Full changelog

ibmcloud-machine-controllers

• NO-JIRA: Update OWNERS #70
• Full changelog

insights-operator

• OCPBUGS-61893: set extractor as default container #1141
• OCPBUGS-62215: operator is not set as degraded when failed #1151
• And 7 elided commits (e.g. from squash or rebase merges)
• Full changelog

ironic

• OCPBUGS-62443: Updating ironic-container image to be consistent with ART for 4.21 #699
• OCPBUGS-62201: Bump ironic to include idrac10 fix #697
• METAL-1446, METAL-1566, METAL-1577: Sync Ironic and Sushy #695
• METAL-1574: Remove temporary dependencies from source #692
• OKD-283: fixing OKD ironic-image errors and metal3 pod crashes (centos9) #688
• OCPBUGS-61459: sync with Ironic changes, including the local RPC revert #687
• METAL-1528: Use custom directories in the runironic-proxy script #679
• Full changelog

ironic-agent

• METAL-1574: Update deps pkgs versions #196
• Full changelog

kube-state-metrics

• NO-ISSUE: [bot] Bump openshift/kube-state-metrics to v2.17.0 #124
• Full changelog

machine-api-operator

• OCPBUGS-61728: Fixed multi nic e2e to wait for node removal after machineset tests #1417
• OCPBUGS-61728: Adjusted machine e2e tests to wait for nodes to clean up #1415
• NO-JIRA: Update OWNERS_ALIASES #1414
• Full changelog

machine-config-operator

• MCO-408: Add OpenShift-native access to change logLevel for MachineConfigOperator components #5291
• OCPBUGS-42303: Networking: reset ovn-remote config and allow ovnkube controller to s… #5123
• MCO-1685: Add mco-sanitize file processing logic #5298
• MCO-1685: Add mco-sanitize redactor #5295
• OCPBUGS-58198: Fix MCP updated machine count for image mode disabling case #5271
• MCO-1673: Add Component Readiness tests for Azure boot image updates #5257
• MCO-1840: Remove MCN CRD cleanup cronjob #5234
• OCPBUGS-60120: Add nil/null checks to image registry secret decode #5253
• NO-ISSUE: Add delays to reduce TestOSBuildController failures #5239
• MCO-1808: MCO-1790: Implement Azure boot image updates #5202
• OCPBUGS-61695: Override NMState service definition #5284
• OCPBUGS-60161: Add mcd_local_unsupported_packages recording rule #5242
• CORS-4170: Extending in-cluster DNS support to Azure #5216
• OCPBUGS-60537: Machine-config controller should actively manage cordon while draining #5276
• Full changelog

monitoring-plugin

• NO-JIRA: fix hermetic builds #564
• OBSINTA-858: Cypress incidents incident traversing robustness #556
• OBSINTA-858: Cypress incidents mocking metric name change workaround #553
• COO-1134: fix: update vulnerable dependencies #561
• NO-JIRA: Update .gitignore (Cypress specific) #558
• OU-1011: REVERT add a 5 minute to the first alert timestamp #559
• OU-1011: add a 5 minute to the first alert timestamp #550
• NO-JIRA: automation log and debug mode in headless mode #557
• OU-1015: fix: incidents dropdown stays open fix #554
• NO-JIRA: Update translations for incidents #555
• OBSINTA-795: Data Test Selectors for Incidents Page #545
• NO-JIRA: fix: immer dependency anr patternfly icons import #542
• OU-989: Kubevirt with fixes after namespace level and session handler #543
• NO-JIRA: Improve incidents timeline chart domain and loading UX #551
• OU-1005: upgrade perses plugins #540
• OBSINTA-789: Fix alerts chart empty state #549
• RHINENG-20863: improved fetching logic for incidents #546
• NO-JIRA: Login validation for all session flows #544
• OU-833: fix 2 bugs for incidents page #539
• NO-JIRA: Cypress Testsuite – Enhance Session Management #536
• OBSINTA-463: Rename the cluster health metrics #514
• OBSINTA-789: Update layout and labels #534
• OU-863: fix step calculation to fix non existent data gaps #535
• RHINENG-20701: fix utc timestamps in chart tooltips #531
• OBSINTA-798: Cypress Incident Tests – Query Mocking #521
• NO-JIRA: set rules as silenced if all alerts are silenced #533
• RHINENG-20667: silenced alerts for chart and table #530
• OU-658: Major Refactor + Adding Namespace dropdown to admin pages #483
• NO-JIRA: automation - fix monitoring-plugin injection #532
• NO-JIRA: Update build-image.sh #528
• OU-671: Add Patternfly Theming to Perses #522
• RHINENG-20424: fix clear filter bug with incident selected #527
• OU-783: Fit the alerts timeline to the actual data timespan #529
• Full changelog

network-tools

• NO-JIRA: Add Marty P to bug tooling #161
• OCPBUGS-53196: Update references of master to main #160
• Full changelog

networking-console-plugin

• CNV-70018: fix null error #278
• Merge #273
• CNV-59876: use correct name space when switching tabs #276
• OCPBUGS-61531: show VM network menu only on admin #275
• OCPBUGS-61548: use console extension to render same nad actions #274
• CNV-59629: set default MTU visible in form and yaml #272
• CNV-68685: add primary UDN label info to VirtualMachine network creation form #271
• Full changelog

nutanix-cloud-controller-manager

• NO-JIRA: Update OWNERS #50
• Full changelog

nutanix-machine-controllers

• NO-JIRA: Update OWNERS #122
• Full changelog

oauth-apiserver

• OCPBUGS-61754: Bump openshift/kubernetes-apiserver for consistent list etcd retries. #146
• Full changelog

oc-mirror

• OCPBUGS-60929: generate the archive only after mirroring #1272
• OCPBUGS-62106: v2/cli: show binary version in output #1273
• And 4 elided commits (e.g. from squash or rebase merges)
• Full changelog

olm-catalogd, olm-operator-controller

• NO-ISSUE: Synchronize From Upstream Repositories #493
• OCPBUGS-62372: Updating ose-olm-catalogd-container image to be consistent with ART for 4.21 #491
• NO-ISSUE: Synchronize From Upstream Repositories #492
• OCPBUGS-62370: Updating ose-olm-operator-controller-container image to be consistent with ART for 4.21 #490
• OCPQE-30671: UPSTREAM: <carry>: migrate more cases from tests-private #488
• NO-ISSUE: Synchronize From Upstream Repositories #489
• OPRUN-4160: Fix cp-manifests copying of helm charts #482
• OPRUN-4164: Synchronize From Upstream Repositories #487
• OPRUN-4164: Synchronize From Upstream Repositories #484
• NO-ISSUE: Add pedjak and trgeiger as reviewers #463
• NO-ISSUE: Synchronize From Upstream Repositories #480
• NO-ISSUE: Synchronize From Upstream Repositories #479
• OCPQE-29416: Init OLMv1 OTE Framework for tests-private to migrate first case #467
• OPRUN-4076, OPRUN-4078: Replace kustomize config with helm config #475
• NO-ISSUE: add jiazha to approvers #477
• NO-ISSUE: Synchronize From Upstream Repositories #476
• NO-ISSUE: Synchronize From Upstream Repositories #473
• NO-ISSUE: Synchronize From Upstream Repositories #471
• NO-ISSUE: Synchronize From Upstream Repositories #465
• NO-ISSUE: Grant QE approver permissions for OTE contributions #457
• And 3 elided commits (e.g. from squash or rebase merges)
• Full changelog

openshift-apiserver

• OCPBUGS-61768: update pkg/image/OWNERS #555
• OCPBUGS-61754: Bump openshift/kubernetes-apiserver for consistent list etcd retries. #556
• OCPBUGS-61228: Bump Route generation when spec is updated #550
• OCPBUGS-37215: pkg/image: conditionally parse raw image manifest #551
• Full changelog

openshift-controller-manager

• OCPBUGS-61899: CNTRLPLANE-1308: Fix Dockerfile.rhel: Add OTE binary build and packaging #419
• CNTRLPLANE-1308: set up openshift-tests-extension for openshift-controller-manager and add a sanity test #417
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPQE-30781: support hypershift binary #1119
• OCPQE-30679: migrate more cases from tests-private to make layout #1118
• OCPQE-29415: correct suite name #1117
• OCPQE-29415: enhance filters to add more suites #1116
• NO-ISSUE: Synchronize From Upstream Repositories #1115
• OCPQE-29415: add testing framework based on OTE and the first tests-private case #1113
• OCPQE-29415: move golangci-lint and go-bindata to new location to fix sync #1114
• OCPQE-29415: add OTE into olmv0 with new location #1108
• NO-ISSUE: Synchronize From Upstream Repositories #1112
• NO-ISSUE: UPSTREAM: <carry>: add jiazha to approvers #1110
• Revert “OCPQE-29415: UPSTREAM: <carry>: add OTE into olmv0” #1109
• NO-ISSUE: Updating operator-registry-container image to be consistent with ART for 4.21 #1106
• OCPQE-29415: UPSTREAM: <carry>: add OTE into olmv0 #1105
• NO-ISSUE: set package-server-manager as default container #1104
• NO-ISSUE: Synchronize From Upstream Repositories #1103
• NO-ISSUE: Updating ose-operator-framework-tools-container image to be consistent with ART for 4.21 #1100
• NO-ISSUE: Synchronize From Upstream Repositories #1101
• NO-ISSUE: Updating operator-lifecycle-manager-container image to be consistent with ART for 4.21 #1094
• Full changelog

operator-marketplace

• NO-ISSUE: Bump github.com/prometheus/client_golang from 1.22.0 to 1.23.2 #661
• OCPBUGS-62132: Remove Expect func so that the test case can use the retry logic #665
• NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.23.4 to 2.25.1 #658
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-42303, OCPBUGS-58501, OCPBUGS-59657, OCPBUGS-61566: DownStream Merge [09-09-2025] #2750
• OCPBUGS-61065: Adding ovndb-raft-functions.sh to ovnk image #2740
• NO-JIRA: DownStream Merge [08-27-2025] #2736
• Full changelog

powervs-block-csi-driver

• Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.21 #107
• Full changelog

powervs-block-csi-driver-operator

• OCPBUGS-62373: Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.21 #88
• Full changelog

prom-label-proxy

• NO-JIRA: [bot] Bump openshift/prom-label-proxy to v0.12.1 #385
• Full changelog

prometheus

• OCPBUGS-62166: chore(scrape): default to legacy validation/escaping scheme until utf-8 is fully supported by prometheus-operator #272
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.21 #340
• Full changelog

prometheus-node-exporter

• NO-ISSUE: Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.21 #170
• Full changelog

route-controller-manager

• NO-JIRA: Add new team members to OWNERS #64
• Full changelog

service-ca-operator

• OCPBUGS-56599: don’t hotloop on secret creation errors #274
• Full changelog

telemeter

• Updating telemeter-container image to be consistent with ART for 4.21 #565
• Full changelog

tests

• Revert “NO-JIRA: Add olm into the known operator set” #30313
• NO-JIRA: Add olm into the known operator set #30308
• MCO-1875: Bump timeout for vSphereBootimageUpdate tests #30288
• NO-ISSUE: Automated - Update synthetic test data #30277
• OCPBUGS-62227: bump telemetry series limit to 1000 #30302
• OCPERT-151: Migrate new func for Compare structured data instead of string from openshift-test-private repo #30291
• OCPBUGS-61398: fix(ginkgo): avoid nil deref and harden env var setup #30289
• OCPQE-30698: enable OTE for olmv0 #30285
• OTA-1626: Fail CI if alert/ClusterOperatorDegraded is fired #30282
• TRT-2071: Remove annotations and replace with environment selector based test skipping and disablement #30064
• trt-2246: lower parallelism based on worker nodes #30226
• OCPSTRAT-2045: Automating OCPSTRAT-2045 feature in upstream #30067
• OCPBUGS-61980: Temporarily remove commatrix documentation test for rework #30280
• OCPBUGS-61905: oidc: improve rollout wait times #30274
• OCPSTRAT-2371: image: add busybox to list of allowed images #30281
• CORENET-6418: drop openshift-sdn tests #29085
• OCPEDGE-1483: Add TNF E2E tests for network failure #30110
• OCPBUGS-61196: Skip ServiceCIDR in etcd_storage_path test #30254
• OCPBUGS-61855: Temporarily disable InstallPlanStepAppliedWithWarnings for k8s 1.34 rebase #30275
• OCPBUGS-61398: fix(test): prevent nil pointer dereference in ginkgo test runner #30224
• OCPBUGS-61855: CRD Apply Alert Allowance #30265
• NE-2090: adding one GIE automation test #30189
• OTA-1601: upgrade status: recover checking the updating COs #30154
• NO-JIRA: Allow systemd-coredump test to fail #30261
• OCPSTRAT-2371: Update etcd test data for k8s 1.34 release #30242
• OCPBUGS-61733: Restore retries for port-forward test #30255
• OCPEDGE-2090: Add validation tests for tnf topology effects #30252
• TRT-2275: introduce cluster e2e-analysis sub command for openshift-tests #30211
• MON-4290: add test for must-gather gather_metrics #30054
• OCPBUGS-61193: chore(extended/prometheus): ²⁄₂: make ‘targets auth’ test more lenient and more resilient #30256
• OCPBUGS-57325: update machines scale test #30028
• Trt-2246: network test isolation #30192
• NO-ISSUE: Automated - Update synthetic test data #30244
• NO-JIRA: Remove runbook exceptions for fixed bugs #30246
• trt-2230: Add monitor test annotation #30196
• NO-JIRA: Increase request-timeout to deflake test #30248
• NO-JIRA: Deflake oc observe test by using explicit port number #30247
• OTA-1559: test/extended/cli/adm_upgrade/recommend: TestRiskA PromQL use max_over_time #30160
• NO-JIRA: Add intervals and a test for systemd-coredumps #30222
• CNTRLPLANE-945: oidc: add retry logic for Keycloak route creation #30233
• CNF-18661: Update vendor to include communication matrix bug fix #30232
• CNTRLPLANE-945: images: add keycloak images and use them in ExternalOIDC tests #30221
• NO-JIRA: Migrate new func for non-Job pods readiness helper for OCL from openshift-test-private repo #30193
• NO-ISSUE: test/extended/util/framework: Poll in IsMicroShiftCluster #30161
• OCPBUGS-61538: Skip config-operator checking when featureSet is DevPreviewNoUpgrade #30236
• OCPBUGS-61193: chore(extended/prometheus): make ‘targets auth’ test more lenient and more resilient. #30219
• NO-ISSUE: Automated - Update synthetic test data #30020
• OCPBUGS-61287: Add flaky kubectl logs test to the retry list to clean signal for release #30215
• OCPBUGS-60507: Bump to latest openshift/kubernetes (v1.33.4) #30227
• CNF-18661: update the commatrix vendor version to contain new changes #30220
• Trt-2257: track run options #30195
• And 2 elided commits (e.g. from squash or rebase merges)
• Full changelog

thanos

• Updating ose-thanos-container image to be consistent with ART for 4.21 #164
• Full changelog

vsphere-cloud-controller-manager

• NO-JIRA: Update OWNERS #99
• NO-JIRA: Update OWNERS #96
• OCPCLOUD-2933: Rebase onto main #95
• OCPBUGS-57574: Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART for 4.20 #92
• Full changelog

vsphere-cluster-api-controllers

• OCPBUGS-57668: Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.20 #59
• NO-JIRA: Update OWNERS #65
• OCPBUGS-61498: UPSTREAM: 3636: VSphereClusterIdentity: ensure namespace in tests exists when not using the default #67
• OCPBUGS-61498: Fix openshift/unit-tests.sh #66
• NO-JIRA: Update OWNERS #63
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.21 #150
• NO-JIRA: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.21 #148
• STOR-2404: Rebase to upstream v3.5.0 for OCP 4.20 #147
• OCPBUGS-57582: Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.20 #146
• OCPBUGS-57570: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.20 #145
• Full changelog

vsphere-csi-driver-operator

• Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.21 #311
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Package List

• cri-o-1.33.3-1.el10s
• kernel-6.12.0-122.el10
• openshift-kubelet-4.20.0-202508152244.p0.g7b25b18.assembly.stream.el9
• systemd-257-13.el10

Full list (575 packages)

• NetworkManager-1:1.54.0-1.el10
• NetworkManager-cloud-setup-1:1.54.0-1.el10
• NetworkManager-libnm-1:1.54.0-1.el10
• NetworkManager-ovs-1:1.54.0-1.el10
• NetworkManager-tui-1:1.54.0-1.el10
• WALinuxAgent-udev-2.13.1.1-2.el10
• aardvark-dns-2:1.16.0-2.el10
• acl-2.3.2-4.el10
• adcli-0.9.2-9.el10
• afterburn-5.9.0-1.el10
• afterburn-dracut-5.9.0-1.el10
• alternatives-1.30-2.el10
• amd-gpu-firmware-20250812-19.el10
• amd-ucode-firmware-20250812-19.el10
• atheros-firmware-20250812-19.el10
• attr-2.5.2-5.el10
• audit-4.0.3-4.el10
• audit-libs-4.0.3-4.el10
• audit-rules-4.0.3-4.el10
• authselect-1.5.0-8.el10
• authselect-libs-1.5.0-8.el10
• avahi-libs-0.9~rc2-2.el10
• basesystem-11-22.el10
• bash-5.2.26-6.el10
• bash-completion-1:2.11-16.el10
• bind-libs-32:9.18.33-5.el10
• bind-license-32:9.18.33-5.el10
• bind-utils-32:9.18.33-5.el10
• binutils-2.41-58.el10
• binutils-gold-2.41-58.el10
• bootc-1.5.1-2.el10
• bootupd-0.2.28-2.el10
• brcmfmac-firmware-20250812-19.el10
• bsdtar-3.7.7-4.el10
• bubblewrap-0.10.0-3.el10
• bzip2-1.0.8-25.el10
• bzip2-libs-1.0.8-25.el10
• c-ares-1.25.0-6.el10
• ca-certificates-2024.2.69_v8.0.303-102.3.el10
• catatonit-5:0.2.1-1.el10
• centos-gpg-keys-10.0-10.el10
• centos-release-cloud-1-1.el10s
• centos-release-nfv-common-1-5.el10s
• centos-release-virt-common-1-1.el10s
• centos-stream-release-10.0-10.el10
• centos-stream-repos-10.0-10.el10
• checkpolicy-3.9-1.el10
• chrony-4.6.1-2.el10
• cifs-utils-7.2-1.el10
• cirrus-audio-firmware-20250812-19.el10
• clevis-21-8.el10
• clevis-dracut-21-8.el10
• clevis-luks-21-8.el10
• clevis-pin-tpm2-0.5.3-8.el10
• clevis-systemd-21-8.el10
• cloud-utils-growpart-0.33-11.el10
• composefs-1.0.8-1.el10
• composefs-libs-1.0.8-1.el10
• conmon-3:2.1.13-1.el10
• conmon-rs-0.6.6-2.el10s
• console-login-helper-messages-0.21.3-10.el10
• console-login-helper-messages-issuegen-0.21.3-10.el10
• console-login-helper-messages-profile-0.21.3-10.el10
• container-selinux-4:2.240.0-1.el10
• containers-common-5:0.64.0-4.el10
• containers-common-extra-5:0.64.0-4.el10
• coreos-installer-0.24.0-1.el10
• coreos-installer-bootinfra-0.24.0-1.el10
• coreutils-9.5-6.el10
• coreutils-common-9.5-6.el10
• cpio-2.15-3.el10
• cracklib-2.9.11-8.el10
• cracklib-dicts-2.9.11-8.el10
• cri-o-1.33.3-1.el10s
• cri-tools-1.33.0-2.el10s
• criu-3.19-9.el10
• criu-libs-3.19-9.el10
• crun-1.23-1.el10
• crypto-policies-20250804-1.git2ca4115.el10
• crypto-policies-scripts-20250804-1.git2ca4115.el10
• cryptsetup-2.7.5-2.el10
• cryptsetup-libs-2.7.5-2.el10
• curl-8.12.1-2.el10
• cyrus-sasl-gssapi-2.1.28-27.el10
• cyrus-sasl-lib-2.1.28-27.el10
• dbus-1:1.14.10-5.el10
• dbus-broker-36-4.el10
• dbus-common-1:1.14.10-5.el10
• dbus-libs-1:1.14.10-5.el10
• dbus-tools-1:1.14.10-5.el10
• device-mapper-10:1.02.206-3.el10
• device-mapper-event-10:1.02.206-3.el10
• device-mapper-event-libs-10:1.02.206-3.el10
• device-mapper-libs-10:1.02.206-3.el10
• device-mapper-multipath-0.9.9-11.el10
• device-mapper-multipath-libs-0.9.9-11.el10
• device-mapper-persistent-data-1.1.0-2.el10
• diffutils-3.10-8.el10
• dmidecode-1:3.6-3.el10
• dnf-4.20.0-18.el10
• dnf-data-4.20.0-18.el10
• dnsmasq-2.90-4.el10
• dosfstools-4.2-12.el10
• dracut-107-3.el10
• dracut-network-107-3.el10
• dracut-squash-107-3.el10
• duktape-2.7.0-10.el10
• e2fsprogs-1.47.1-4.el10
• e2fsprogs-libs-1.47.1-4.el10
• efi-filesystem-6-6.el10
• efibootmgr-18-8.el10
• efivar-libs-39-3.el10
• elfutils-debuginfod-client-0.193-1.el10
• elfutils-default-yama-scope-0.193-1.el10
• elfutils-libelf-0.193-1.el10
• elfutils-libs-0.193-1.el10
• erofs-utils-1.8.10-1.el10
• ethtool-2:6.15-1.el10
• expat-2.7.1-1.el10
• file-5.45-8.el10
• file-libs-5.45-8.el10
• filesystem-3.18-17.el10
• findutils-1:4.10.0-5.el10
• firewalld-filesystem-2.3.1-1.el10
• flashrom-1.3.0-8.el10
• flatpak-session-helper-1.16.0-6.el10
• fstrm-0.6.1-12.el10
• fuse-common-3.16.2-5.el10
• fuse-libs-2.9.9-25.el10
• fuse3-3.16.2-5.el10
• fuse3-libs-3.16.2-5.el10
• fwupd-1.9.31-1.el10
• fwupd-efi-1.6-3.el10
• fwupd-plugin-flashrom-1.9.31-1.el10
• gawk-5.3.0-6.el10
• gawk-all-langpacks-5.3.0-6.el10
• gdbm-1:1.23-14.el10
• gdbm-libs-1:1.23-14.el10
• geolite2-city-20191217-14.el10
• geolite2-country-20191217-14.el10
• gettext-envsubst-0.22.5-6.el10
• gettext-libs-0.22.5-6.el10
• gettext-runtime-0.22.5-6.el10
• git-core-2.47.3-1.el10
• glib2-2.80.4-8.el10
• glibc-2.39-54.el10
• glibc-common-2.39-54.el10
• glibc-gconv-extra-2.39-54.el10
• glibc-minimal-langpack-2.39-54.el10
• gmp-1:6.2.1-12.el10
• gnupg2-2.4.5-2.el10
• gnupg2-smime-2.4.5-2.el10
• gnutls-3.8.10-2.el10
• gobject-introspection-1.79.1-6.el10
• gpgme-1.23.2-6.el10
• grep-3.11-10.el10
• groff-base-1.23.0-10.el10
• grub2-common-1:2.12-26.el10
• grub2-efi-x64-1:2.12-26.el10
• grub2-pc-1:2.12-26.el10
• grub2-pc-modules-1:2.12-26.el10
• grub2-tools-1:2.12-26.el10
• grub2-tools-minimal-1:2.12-26.el10
• gssproxy-0.9.2-10.el10
• gzip-1.13-3.el10
• hostname-3.23-14.el10
• hwdata-0.379-10.6.el10
• ignition-2.22.0-1.el10
• ignition-grub-2.22.0-1.el10
• ima-evm-utils-1.6.2-3.el10
• info-7.1-6.el10
• inih-58-3.el10
• initscripts-service-10.26-2.el10
• intel-audio-firmware-20250812-19.el10
• intel-gpu-firmware-20250812-19.el10
• ipcalc-1.0.3-12.el10
• iproute-6.14.0-2.el10
• iproute-tc-6.14.0-2.el10
• iptables-libs-1.8.11-11.el10
• iptables-nft-1.8.11-11.el10
• iputils-20240905-4.el10
• irqbalance-2:1.9.4-5.el10
• iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10
• iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el10
• isns-utils-libs-0.103-1.el10
• jansson-2.14-3.el10
• jose-14-102.el10
• jq-1.7.1-11.el10
• json-c-0.18-3.el10
• json-glib-1.8.0-5.el10
• kbd-2.6.4-7.el10
• kbd-legacy-2.6.4-7.el10
• kbd-misc-2.6.4-7.el10
• kdump-utils-1.0.54-7.el10
• kernel-6.12.0-122.el10
• kernel-core-6.12.0-122.el10
• kernel-modules-6.12.0-122.el10
• kernel-modules-core-6.12.0-122.el10
• kernel-modules-extra-6.12.0-122.el10
• kernel-modules-extra-matched-6.12.0-122.el10
• kexec-tools-2.0.31-1.el10
• keyutils-1.6.3-5.el10
• keyutils-libs-1.6.3-5.el10
• kmod-31-12.el10
• kmod-libs-31-12.el10
• kpartx-0.9.9-11.el10
• krb5-libs-1.21.3-8.el10
• less-661-3.el10
• libacl-2.3.2-4.el10
• libaio-0.3.111-22.el10
• libarchive-3.7.7-4.el10
• libassuan-2.5.6-6.el10
• libattr-2.5.2-5.el10
• libbasicobjects-0.1.1-58.el10
• libblkid-2.40.2-13.el10
• libbpf-2:1.6.0-3.el10
• libcap-2.69-7.el10
• libcap-ng-0.8.4-6.el10
• libcbor-0.11.0-3.el10
• libcollection-0.7.0-58.el10
• libcom_err-1.47.1-4.el10
• libcomps-0.1.21-3.el10
• libcurl-minimal-8.12.1-2.el10
• libdhash-0.5.0-58.el10
• libdnf-0.73.1-12.el10
• libdnf-plugin-subscription-manager-1.30.10-1.el10
• libdrm-2.4.123-1.el10
• libeconf-0.6.2-4.el10
• libedit-3.1-52.20230828cvs.el10
• libev-4.33-14.el10
• libevent-2.1.12-16.el10
• libfdisk-2.40.2-13.el10
• libffi-3.4.4-10.el10
• libfido2-1.14.0-7.el10
• libgcc-14.3.1-2.1.el10
• libgcrypt-1.11.0-6.el10
• libgomp-14.3.1-2.1.el10
• libgpg-error-1.50-2.el10
• libgudev-238-7.el10
• libgusb-0.4.9-4.el10
• libibverbs-57.0-1.el10
• libicu-74.2-5.el10
• libidn2-2.3.7-3.el10
• libini_config-1.3.1-58.el10
• libipa_hbac-2.11.1-2.el10
• libjcat-0.2.2-2.el10
• libjose-14-102.el10
• libkcapi-1.5.0-3.el10
• libkcapi-hasher-1.5.0-3.el10
• libkcapi-hmaccalc-1.5.0-3.el10
• libksba-1.6.7-2.el10
• libldb-4.22.4-104.el10
• libluksmeta-9-26.el10
• libmaxminddb-1.9.1-4.el10
• libmicrohttpd-1:1.0.0-3.el10
• libmnl-1.0.5-7.el10
• libmodulemd-2.15.0-12.el10
• libmount-2.40.2-13.el10
• libmspack-0.10.1-0.14.alpha.el10
• libndp-1.9-2.el10
• libnet-1.3-7.el10
• libnetfilter_conntrack-1.0.9-12.el10
• libnfnetlink-1.0.2-3.el10
• libnfsidmap-1:2.8.3-0.el10
• libnftnl-1.2.8-3.el10
• libnghttp2-1.64.0-2.el10
• libnl3-3.11.0-1.el10
• libnvme-1.13-1.el10
• libpath_utils-0.2.1-58.el10
• libpcap-14:1.10.4-7.el10
• libpciaccess-0.16-16.el10
• libpkgconf-2.1.0-3.el10
• libpwquality-1.4.5-12.el10
• libref_array-0.1.5-58.el10
• librepo-1.18.0-5.el10
• libseccomp-2.5.6-1.el10
• libsecret-0.21.2-8.el10
• libselinux-3.9-1.el10
• libselinux-utils-3.9-1.el10
• libsemanage-3.9-1.el10
• libsepol-3.9-1.el10
• libsmartcols-2.40.2-13.el10
• libsmbclient-4.22.4-104.el10
• libsolv-0.7.29-8.el10
• libss-1.47.1-4.el10
• libsss_certmap-2.11.1-2.el10
• libsss_idmap-2.11.1-2.el10
• libsss_nss_idmap-2.11.1-2.el10
• libsss_sudo-2.11.1-2.el10
• libstdc++-14.3.1-2.1.el10
• libtalloc-2.4.3-100.el10
• libtasn1-4.20.0-1.el10
• libtdb-1.4.13-100.el10
• libtevent-0.16.2-100.el10
• libtirpc-1.3.5-1.el10
• libtool-ltdl-2.4.7-13.el10
• libunistring-1.1-10.el10
• liburing-2.5-5.el10
• libusb1-1.0.28-1.el10
• libutempter-1.2.1-15.el10
• libuuid-2.40.2-13.el10
• libuv-1:1.51.0-1.el10
• libverto-0.3.2-10.el10
• libverto-libev-0.3.2-10.el10
• libwbclient-4.22.4-104.el10
• libxcrypt-4.4.36-10.el10
• libxkbcommon-1.7.0-4.el10
• libxml2-2.12.5-9.el10
• libxmlb-0.3.15-7.el10
• libxslt-1.1.39-8.el10
• libyaml-0.2.5-16.el10
• libzstd-1.5.5-9.el10
• linux-firmware-20250812-19.el10
• linux-firmware-whence-20250812-19.el10
• lmdb-libs-0.9.32-4.el10
• logrotate-3.22.0-4.el10
• lsof-4.98.0-7.el10
• lua-libs-5.4.6-7.el10
• luksmeta-9-26.el10
• lvm2-10:2.03.32-3.el10
• lvm2-libs-10:2.03.32-3.el10
• lz4-libs-1.9.4-8.el10
• lzo-2.10-14.el10
• makedumpfile-1.7.7-2.el10
• mdadm-4.4-2.el10
• memstrack-0.2.5-6.el10
• microcode_ctl-4:20250812-1.el10
• mokutil-2:0.7.2-1.el10
• mpdecimal-2.5.1-12.el10
• mpfr-4.2.1-5.el10
• mt7xxx-firmware-20250812-19.el10
• nano-8.1-3.el10
• ncurses-6.4-14.20240127.el10
• ncurses-base-6.4-14.20240127.el10
• ncurses-libs-6.4-14.20240127.el10
• net-tools-2.0-0.73.20160912git.el10
• netavark-2:1.16.0-1.el10
• nettle-3.10.1-1.el10
• newt-0.52.24-5.el10
• nfs-utils-1:2.8.3-0.el10
• nftables-1:1.1.1-5.el10
• nmap-ncat-4:7.92-3.el10
• nmstate-2.2.48-1.el10
• npth-1.6-21.el10
• nss-altfiles-2.23.0-5.el10
• numactl-libs-2.0.19-2.el10
• nvidia-gpu-firmware-20250812-19.el10
• nvme-cli-2.13-2.el10
• nxpwireless-firmware-20250812-19.el10
• oniguruma-6.9.9-7.el10
• open-vm-tools-13.0.0-1.el10
• openldap-2.6.9-1.el10
• openshift-clients-4.20.0-202508150943.p0.g1c54ec0.assembly.stream.el9
• openshift-kubelet-4.20.0-202508152244.p0.g7b25b18.assembly.stream.el9
• openssh-9.9p1-11.el10
• openssh-clients-9.9p1-11.el10
• openssh-server-9.9p1-11.el10
• openssl-1:3.5.1-3.el10
• openssl-fips-provider-1:3.5.1-3.el10
• openssl-libs-1:3.5.1-3.el10
• openvswitch-selinux-extra-policy-1.0-36.el10s
• openvswitch3.5-3.5.0-6.el10s
• os-prober-1.81-9.el10
• ose-aws-ecr-image-credential-provider-4.20.0-202508191400.p2.gbb88da1.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.20.0-202507171059.p0.gd469d04.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.20.0-202508130315.p0.g0634bec.assembly.stream.el9
• ostree-2025.4-3.el10
• ostree-grub2-2025.4-3.el10
• ostree-libs-2025.4-3.el10
• p11-kit-0.25.5-7.el10
• p11-kit-server-0.25.5-7.el10
• p11-kit-trust-0.25.5-7.el10
• pam-1.6.1-8.el10
• pam-libs-1.6.1-8.el10
• passt-0^20250512.g8ec1341-2.el10
• passt-selinux-0^20250512.g8ec1341-2.el10
• pciutils-3.13.0-6.el10
• pciutils-libs-3.13.0-6.el10
• pcre2-10.44-1.el10.3
• pcre2-syntax-10.44-1.el10.3
• pcsc-lite-2.2.3-2.el10
• pcsc-lite-ccid-1.6.0-2.el10
• pcsc-lite-libs-2.2.3-2.el10
• perl-AutoLoader-5.74-514.el10
• perl-B-1.89-514.el10
• perl-Carp-1.54-511.el10
• perl-Class-Struct-0.68-514.el10
• perl-Data-Dumper-2.189-512.el10
• perl-Digest-1.20-511.el10
• perl-Digest-MD5-2.59-6.el10
• perl-DynaLoader-1.56-514.el10
• perl-Encode-4:3.21-511.el10
• perl-Errno-1.38-514.el10
• perl-Exporter-5.78-511.el10
• perl-Fcntl-1.18-514.el10
• perl-File-Basename-2.86-514.el10
• perl-File-Path-2.18-511.el10
• perl-File-Temp-1:0.231.100-512.el10
• perl-File-stat-1.14-514.el10
• perl-FileHandle-2.05-514.el10
• perl-Getopt-Long-1:2.58-3.el10
• perl-Getopt-Std-1.14-514.el10
• perl-HTTP-Tiny-0.088-512.el10
• perl-IO-1.55-514.el10
• perl-IO-Socket-IP-0.42-512.el10
• perl-IO-Socket-SSL-2.085-3.el10
• perl-IPC-Open3-1.22-514.el10
• perl-MIME-Base64-3.16-511.el10
• perl-Mozilla-CA-20231213-5.el10
• perl-NDBM_File-1.17-514.el10
• perl-Net-SSLeay-1.94-8.el10
• perl-POSIX-2.20-514.el10
• perl-PathTools-3.91-512.el10
• perl-Pod-Escapes-1:1.07-511.el10
• perl-Pod-Perldoc-3.28.01-512.el10
• perl-Pod-Simple-1:3.45-511.el10
• perl-Pod-Usage-4:2.03-511.el10
• perl-Scalar-List-Utils-5:1.63-511.el10
• perl-SelectSaver-1.02-514.el10
• perl-Socket-4:2.038-511.el10
• perl-Storable-1:3.32-511.el10
• perl-Symbol-1.09-514.el10
• perl-Term-ANSIColor-5.01-512.el10
• perl-Term-Cap-1.18-511.el10
• perl-Text-ParseWords-3.31-511.el10
• perl-Text-Tabs+Wrap-2024.001-511.el10
• perl-Time-Local-2:1.350-511.el10
• perl-URI-5.27-3.el10
• perl-base-2.27-514.el10
• perl-constant-1.33-512.el10
• perl-if-0.61.000-514.el10
• perl-interpreter-4:5.40.2-514.el10
• perl-libnet-3.15-512.el10
• perl-libs-4:5.40.2-514.el10
• perl-locale-1.12-514.el10
• perl-mro-1.29-514.el10
• perl-overload-1.37-514.el10
• perl-overloading-0.02-514.el10
• perl-parent-1:0.241-512.el10
• perl-podlators-1:5.01-511.el10
• perl-vars-1.05-514.el10
• pigz-2.8-7.el10
• pinentry-1.3.1-1.el10
• pkgconf-2.1.0-3.el10
• pkgconf-m4-2.1.0-3.el10
• pkgconf-pkg-config-2.1.0-3.el10
• podman-6:5.6.0-1.el10
• policycoreutils-3.9-1.el10
• policycoreutils-python-utils-3.9-1.el10
• polkit-125-4.el10
• polkit-libs-125-4.el10
• polkit-pkla-compat-0.1-30.el10
• popt-1.19-8.el10
• procps-ng-4.0.4-8.el10
• protobuf-c-1.5.0-6.el10
• psmisc-23.6-8.el10
• python-unversioned-command-3.12.11-3.el10
• python3-3.12.11-3.el10
• python3-audit-4.0.3-4.el10
• python3-charset-normalizer-3.4.2-1.el10
• python3-cloud-what-1.30.10-1.el10
• python3-dateutil-1:2.9.0.post0-1.el10
• python3-dbus-1.3.2-8.el10
• python3-decorator-5.1.1-12.el10
• python3-distro-1.9.0-5.el10
• python3-dnf-4.20.0-18.el10
• python3-dnf-plugin-versionlock-4.7.0-9.el10
• python3-dnf-plugins-core-4.7.0-9.el10
• python3-gobject-base-3.46.0-7.el10
• python3-gobject-base-noarch-3.46.0-7.el10
• python3-hawkey-0.73.1-12.el10
• python3-idna-3.7-4.el10
• python3-iniparse-0.5-10.el10
• python3-inotify-0.9.6-36.el10
• python3-libcomps-0.1.21-3.el10
• python3-libdnf-0.73.1-12.el10
• python3-librepo-1.18.0-5.el10
• python3-libs-3.12.11-3.el10
• python3-libselinux-3.9-1.el10
• python3-libsemanage-3.9-1.el10
• python3-pip-wheel-23.3.2-7.el10
• python3-policycoreutils-3.9-1.el10
• python3-requests-2.32.4-1.el10
• python3-rpm-4.19.1.1-19.el10
• python3-setools-4.5.1-5.el10
• python3-setuptools-69.0.3-12.el10
• python3-six-1.16.0-16.el10
• python3-subscription-manager-rhsm-1.30.10-1.el10
• python3-systemd-235-11.el10
• python3-urllib3-1.26.19-2.el10
• qemu-guest-agent-18:10.0.0-12.el10
• quota-1:4.09-9.el10
• quota-nls-1:4.09-9.el10
• rdma-core-57.0-1.el10
• readline-8.2-11.el10
• realtek-firmware-20250812-19.el10
• rpcbind-1.2.7-3.el10
• rpm-4.19.1.1-19.el10
• rpm-build-libs-4.19.1.1-19.el10
• rpm-libs-4.19.1.1-19.el10
• rpm-ostree-2025.10-1.el10
• rpm-ostree-libs-2025.10-1.el10
• rpm-plugin-audit-4.19.1.1-19.el10
• rpm-plugin-selinux-4.19.1.1-19.el10
• rpm-plugin-systemd-inhibit-4.19.1.1-19.el10
• rpm-sequoia-1.9.0.1-1.el10
• rpm-sign-libs-4.19.1.1-19.el10
• rsync-3.4.1-2.el10
• samba-client-libs-4.22.4-104.el10
• samba-common-4.22.4-104.el10
• samba-common-libs-4.22.4-104.el10
• sed-4.9-3.el10
• selinux-policy-42.1.7-1.el10
• selinux-policy-targeted-42.1.7-1.el10
• setup-2.14.5-7.el10
• sg3_utils-1.48-7.el10
• sg3_utils-libs-1.48-7.el10
• shadow-utils-2:4.15.0-6.el10
• shadow-utils-subid-2:4.15.0-8.el10
• shared-mime-info-2.3-8.el10
• shim-x64-15.8-5.el10
• skopeo-2:1.20.0-1.el10
• slang-2.3.3-8.el10
• snappy-1.1.10-7.el10
• socat-1.7.4.4-8.el10
• sqlite-libs-3.46.1-4.el10
• ssh-key-dir-0.1.4-9.el10
• sssd-2.11.1-2.el10
• sssd-ad-2.11.1-2.el10
• sssd-client-2.11.1-2.el10
• sssd-common-2.11.1-2.el10
• sssd-common-pac-2.11.1-2.el10
• sssd-ipa-2.11.1-2.el10
• sssd-krb5-2.11.1-2.el10
• sssd-krb5-common-2.11.1-2.el10
• sssd-ldap-2.11.1-2.el10
• sssd-nfs-idmap-2.11.1-2.el10
• sssd-proxy-2.11.1-2.el10
• stalld-1.20.4-1.el10
• strace-6.12-1.el10
• subscription-manager-1.30.10-1.el10
• subscription-manager-rhsm-certificates-20220623-6.el10
• sudo-1.9.15-9.p5.el10
• sudo-python-plugin-1.9.15-9.p5.el10
• systemd-257-13.el10
• systemd-journal-remote-257-13.el10
• systemd-libs-257-13.el10
• systemd-pam-257-13.el10
• systemd-udev-257-13.el10
• tar-2:1.35-7.el10
• tiwilink-firmware-20250812-19.el10
• tmux-3.3a-13.20230918gitb202a2f.el10
• toolbox-0.2-2.el10
• tpm2-tools-5.7-4.el10
• tpm2-tss-4.1.3-5.el10
• tpm2-tss-fapi-4.1.3-5.el10
• tzdata-2025b-2.el10
• unbound-anchor-1.20.0-13.el10
• unbound-libs-1.20.0-13.el10
• userspace-rcu-0.14.0-7.el10
• util-linux-2.40.2-13.el10
• util-linux-core-2.40.2-13.el10
• vim-data-2:9.1.083-5.el10
• vim-minimal-2:9.1.083-5.el10
• virt-what-1.27-3.el10
• which-2.21-44.el10
• xfsprogs-6.11.0-2.el10
• xkeyboard-config-2.41-3.el10
• xmlsec1-1:1.2.39-3.el10
• xmlsec1-openssl-1:1.2.39-3.el10
• xz-1:5.6.2-4.el10
• xz-libs-1:5.6.2-4.el10
• zlib-ng-compat-2.2.3-2.el10
• zram-generator-1.1.2-14.el10
• zstd-1.5.5-9.el10

Extensions

Full list (48 packages)

• NetworkManager-libreswan-1.2.24-2.el10.x86_64
• bison-3.8.2-9.el10.x86_64
• cmake-filesystem-3.30.5-3.el10.x86_64
• cpp-14.3.1-2.1.el10.x86_64
• elfutils-libelf-devel-0.193-1.el10.x86_64
• flex-2.6.4-19.el10.x86_64
• gcc-14.3.1-2.1.el10.x86_64
• glibc-devel-2.39-54.el10.x86_64
• kernel-6.12.0-122.el10.x86_64
• kernel-core-6.12.0-122.el10.x86_64
• kernel-devel-6.12.0-122.el10.x86_64
• kernel-headers-6.12.0-122.el10.x86_64
• kernel-modules-6.12.0-122.el10.x86_64
• kernel-modules-extra-6.12.0-122.el10.x86_64
• kernel-rt-core-6.12.0-122.el10.x86_64
• kernel-rt-devel-6.12.0-122.el10.x86_64
• kernel-rt-modules-6.12.0-122.el10.x86_64
• kernel-rt-modules-core-6.12.0-122.el10.x86_64
• kernel-rt-modules-extra-6.12.0-122.el10.x86_64
• krb5-pkinit-1.21.3-8.el10.x86_64
• krb5-workstation-1.21.3-8.el10.x86_64
• ldns-1.8.3-18.el10.x86_64
• libkadm5-1.21.3-8.el10.x86_64
• libmpc-1.3.1-7.el10.x86_64
• libqb-2.0.8-6.el10.x86_64
• libreswan-5.3-1.el10.x86_64
• libxcrypt-devel-4.4.36-10.el10.x86_64
• libzstd-devel-1.5.5-9.el10.x86_64
• lm_sensors-libs-3.6.0-20.el10.x86_64
• m4-1.4.19-11.el10.x86_64
• make-1:4.4.1-9.el10.x86_64
• nspr-4.36.0-4.el10.x86_64
• nss-3.112.0-4.el10.x86_64
• nss-softokn-3.112.0-4.el10.x86_64
• nss-softokn-freebl-3.112.0-4.el10.x86_64
• nss-sysinit-3.112.0-4.el10.x86_64
• nss-tools-3.112.0-4.el10.x86_64
• nss-util-3.112.0-4.el10.x86_64
• openssl-devel-1:3.5.1-3.el10.x86_64
• openvswitch3.5-ipsec-3.5.0-6.el10s.x86_64
• pcp-conf-6.3.7-5.el10.x86_64
• pcp-libs-6.3.7-5.el10.x86_64
• protobuf-3.19.6-11.el10.x86_64
• python3-openvswitch3.5-3.5.0-6.el10s.x86_64
• sysstat-12.7.6-2.el10.x86_64
• usbguard-1.1.3-6.el10.x86_64
• usbguard-selinux-1.1.3-6.el10.noarch
• zlib-ng-compat-devel-2.2.3-2.el10.x86_64

CentOS Stream CoreOS base layer: 10.0.20250827-0