# 4.19.0-okd-scos.4

Created: 2025-06-17 21:15:36 +0000 UTC

Image Digest: `sha256:8fa28c1bf3351e367150bd5dc28686d5a5dcc48e73c3f922b5c681bcfbf45a0a`

Promoted from registry.ci.openshift.org/origin/release-scos:4.19.0-0.okd-scos-2025-06-16-143746


## Changes from 4.19.0-okd-scos.1

### Components

* Kubectl 1.32.1
* Kubernetes upgraded from 1.32.4 to 1.32.5
* Kubernetes Tests upgraded from 1.32.4 to 1.32.5
* CentOS Stream CoreOS upgraded from 9.0.20250515-0 to 9.0.20250611-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| OpenShiftPodSecurityAdmission <br/> (0 tests)| Disabled<br/>(Changed)| Disabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |


### Rebuilt images without code change

* [stream-coreos](https://github.com/openshift/os) git [2acbcb0f](https://github.com/openshift/os/commit/2acbcb0f9ef2e451f0138f1c33066fa6fa02ae20) `sha256:def6df145a7d1f834ccccbce7728a6abe88a043f08bede7a70dcf8621efb67d5`
* [stream-coreos-extensions](https://github.com/openshift/os) git [2acbcb0f](https://github.com/openshift/os/commit/2acbcb0f9ef2e451f0138f1c33066fa6fa02ae20) `sha256:c45707758d3c6032f3440e2446f1854e1a9de36973c7775e0579108ae93f23ba`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/d4d43dd72253e7c8c3ce4a3a1779aef3f59b251a)

* [OCPBUGS-54319](https://issues.redhat.com/browse/OCPBUGS-54319): mirror changes to openshift-installer with oci-eval-user-data (#7670) [#7670](https://github.com/openshift/assisted-service/pull/7670)
* [OCPBUGS-56596](https://issues.redhat.com/browse/OCPBUGS-56596): Include AdditionalTrustBundlePolicy in installConfig (#7747) [#7747](https://github.com/openshift/assisted-service/pull/7747)
* [Full changelog](https://github.com/openshift/assisted-service/compare/5b1d46609e5fc58a83fdc2ea2159ae652d156a9d...d4d43dd72253e7c8c3ce4a3a1779aef3f59b251a)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/8cc39210ed284ff6c597815dee379ef4bfeb9d77)

* [OCPBUGS-57420](https://issues.redhat.com/browse/OCPBUGS-57420): Bump iso-builder appliance dependency [#115](https://github.com/openshift/agent-installer-utils/pull/115)
* [OCPBUGS-57301](https://issues.redhat.com/browse/OCPBUGS-57301): Update mtv-operator to version used in 4.19 catalog [#112](https://github.com/openshift/agent-installer-utils/pull/112)
* [OCPBUGS-56991](https://issues.redhat.com/browse/OCPBUGS-56991): OVE isobuilder fails on CentOS Stream 9 due to missing… [#104](https://github.com/openshift/agent-installer-utils/pull/104)
* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#106](https://github.com/openshift/agent-installer-utils/pull/106)
* [OCPBUGS-56690](https://issues.redhat.com/browse/OCPBUGS-56690): Fix nmtui redirection after quit [#97](https://github.com/openshift/agent-installer-utils/pull/97)
* [OCPBUGS-56810](https://issues.redhat.com/browse/OCPBUGS-56810): bump appliance to 936210 [#99](https://github.com/openshift/agent-installer-utils/pull/99)
* [OCPBUGS-56759](https://issues.redhat.com/browse/OCPBUGS-56759): ISOBuilder- Remove default password for nodes [#100](https://github.com/openshift/agent-installer-utils/pull/100)
* [OCPBUGS-56490](https://issues.redhat.com/browse/OCPBUGS-56490): Add operator CRs post-install in OVE build script [#95](https://github.com/openshift/agent-installer-utils/pull/95)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/766df82081a65c57df4a0a5d19cea6635a31314c...8cc39210ed284ff6c597815dee379ef4bfeb9d77)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/77213cc5eed50f6c0ec0600133e01274020657ef)

* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#79](https://github.com/openshift/apiserver-network-proxy/pull/79)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/1e82311cc3ab84cb3481fb018981d304e075ce4e...77213cc5eed50f6c0ec0600133e01274020657ef)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/b61e357915000a5f6dc50aad2cabeb1ac55e2e3c)

* [OCPBUGS-56527](https://issues.redhat.com/browse/OCPBUGS-56527): openstack-cinder: Set --with-topology flag for node driver also [#384](https://github.com/openshift/csi-operator/pull/384)
* [Full changelog](https://github.com/openshift/csi-operator/compare/6bb12490780bbabc88b82bfe51197a961e4e722a...b61e357915000a5f6dc50aad2cabeb1ac55e2e3c)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/84fbc02a1b018ffc93ba05622282889a28343db0)

* [OCPBUGS-56633](https://issues.redhat.com/browse/OCPBUGS-56633): fix: make machineset annotation controller respect paused condition [#130](https://github.com/openshift/machine-api-provider-aws/pull/130)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/c2e0e74ee2f13e33871fb79196c69ed254f755e6...84fbc02a1b018ffc93ba05622282889a28343db0)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/7dc22457e9e0bae7329d0bb4a4705781f04446af)

* [OCPBUGS-56100](https://issues.redhat.com/browse/OCPBUGS-56100): fix: reuse global TracerProvider [#340](https://github.com/openshift/cluster-api-provider-azure/pull/340)
* [OCPBUGS-56962](https://issues.redhat.com/browse/OCPBUGS-56962): [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 [#339](https://github.com/openshift/cluster-api-provider-azure/pull/339)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/2c931b4abe5a6618754e79274f7bc9df6c63e296...7dc22457e9e0bae7329d0bb4a4705781f04446af)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/20a9ba53d5900578d497c84bb09cd46bc5859a29)

* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#18](https://github.com/openshift/azure-kubernetes-kms/pull/18)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/70c82be884d0b86551e6dc2ccf4f80bec0f26f55...20a9ba53d5900578d497c84bb09cd46bc5859a29)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/249e31eba655572a52f44c6065bc251341544883)

* [OCPBUGS-56653](https://issues.redhat.com/browse/OCPBUGS-56653): Fix failure when attempting to modify immutable availabilitySet [#154](https://github.com/openshift/machine-api-provider-azure/pull/154)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/dd3ca5704052ab83cc829e9be33b127d0d764a2a...249e31eba655572a52f44c6065bc251341544883)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/e5c6c44c87ebbe57a33650dd6270275e7cca771e)

* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#36](https://github.com/openshift/azure-workload-identity/pull/36)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/892d3c4dc50827c1069beac55a6a8141cc891b65...e5c6c44c87ebbe57a33650dd6270275e7cca771e)


### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/06a66db1ac3c28f6d9a1adf16146ebec219c8534)

* [OCPBUGS-56962](https://issues.redhat.com/browse/OCPBUGS-56962): [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 [#45](https://github.com/openshift/cluster-api-provider-metal3/pull/45)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/9e7170f249a7e61769886d81869ab577949863ab...06a66db1ac3c28f6d9a1adf16146ebec219c8534)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/19278aebc6e9e9d3a18ba19f87d69146e0cd3d4f)

* [OCPBUGS-57137](https://issues.redhat.com/browse/OCPBUGS-57137): Revert "CORS-3883: Remove user-assigned identity from ARM template" [#9771](https://github.com/openshift/installer/pull/9771)
* [OCPBUGS-57039](https://issues.redhat.com/browse/OCPBUGS-57039): ensure ctrplane nodes can access bootstrap MCS [#9768](https://github.com/openshift/installer/pull/9768)
* [OCPBUGS-56826](https://issues.redhat.com/browse/OCPBUGS-56826): update the punctuation [#9755](https://github.com/openshift/installer/pull/9755)
* [OCPBUGS-56372](https://issues.redhat.com/browse/OCPBUGS-56372): Added better logging for vSphere destroy [#9719](https://github.com/openshift/installer/pull/9719)
* [OCPBUGS-56832](https://issues.redhat.com/browse/OCPBUGS-56832): add unit tests for vsphere VIPS/machinenetworks population [#9757](https://github.com/openshift/installer/pull/9757)
* [OCPBUGS-56811](https://issues.redhat.com/browse/OCPBUGS-56811): Update Control Plane replica validation for Single Node OpenShift [#9756](https://github.com/openshift/installer/pull/9756)
* [MGMT-20702](https://issues.redhat.com/browse/MGMT-20702), [OCPBUGS-56762](https://issues.redhat.com/browse/OCPBUGS-56762): Avoid duplicate machine networks [#9745](https://github.com/openshift/installer/pull/9745)
* [OCPBUGS-55995](https://issues.redhat.com/browse/OCPBUGS-55995): [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field [#9701](https://github.com/openshift/installer/pull/9701)
* [OCPBUGS-56712](https://issues.redhat.com/browse/OCPBUGS-56712): add the VM types that the install pass into the tested_instance_types [#9730](https://github.com/openshift/installer/pull/9730)
* [OCPBUGS-56646](https://issues.redhat.com/browse/OCPBUGS-56646): Update RHCOS 4.19 bootimage metadata to 9.6.20250523-0 [#9742](https://github.com/openshift/installer/pull/9742)
* [OCPBUGS-56595](https://issues.redhat.com/browse/OCPBUGS-56595): [release-4.19] OCPBUGS-56567: default Azure to create VM user-assigned identities [#9735](https://github.com/openshift/installer/pull/9735)
* [Full changelog](https://github.com/openshift/installer/compare/180d12f3c63388fb71150e8ce67dfb1e8e881c70...19278aebc6e9e9d3a18ba19f87d69146e0cd3d4f)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/8f1c8b5768cdff8885ddef28e10de2c1928daf92)

* [OCPBUGS-56511](https://issues.redhat.com/browse/OCPBUGS-56511): Replace colon to hypen in the filename while extracting tar on Windows [#2024](https://github.com/openshift/oc/pull/2024)
* [Full changelog](https://github.com/openshift/oc/compare/c88fd60ed9c4a349d52770884b3aad828432d01d...8f1c8b5768cdff8885ddef28e10de2c1928daf92)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/675dad516b5d96d4ecaa2df6461e2145204850f4)

* [OCPBUGS-55798](https://issues.redhat.com/browse/OCPBUGS-55798): Sync OpenStack CA Bundles from legacy location [#866](https://github.com/openshift/cloud-credential-operator/pull/866)
* [OCPBUGS-56978](https://issues.redhat.com/browse/OCPBUGS-56978): Azure: resolve nil pointer exception when role assignment exists [#870](https://github.com/openshift/cloud-credential-operator/pull/870)
* [OCPBUGS-55903](https://issues.redhat.com/browse/OCPBUGS-55903): Render: configure proxy on bootstrap static pod [#857](https://github.com/openshift/cloud-credential-operator/pull/857)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/409aa6893af94d8de67d07b03293676b5523412a...675dad516b5d96d4ecaa2df6461e2145204850f4)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/ee69183571b592073a7163c5aef34d1a970a8c19)

* [OCPBUGS-56776](https://issues.redhat.com/browse/OCPBUGS-56776): fix: ensure CAPI machineset is created not paused when authoritative [#304](https://github.com/openshift/cluster-capi-operator/pull/304)
* [OCPBUGS-56714](https://issues.redhat.com/browse/OCPBUGS-56714): fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller [#305](https://github.com/openshift/cluster-capi-operator/pull/305)
* [OCPBUGS-56633](https://issues.redhat.com/browse/OCPBUGS-56633): fix: watch CAPI resources in the migration controllers [#303](https://github.com/openshift/cluster-capi-operator/pull/303)
* [OCPBUGS-56722](https://issues.redhat.com/browse/OCPBUGS-56722): MachineSet deletion logic [#302](https://github.com/openshift/cluster-capi-operator/pull/302)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/321712b12b7a71240a49efa83e0bb5a1d6ada3d7...ee69183571b592073a7163c5aef34d1a970a8c19)


### [cluster-config-api](https://github.com/openshift/api/tree/97812373b6b447ff6b55d3e2625b4f62aff1a16f)

* [OCPBUGS-56773](https://issues.redhat.com/browse/OCPBUGS-56773): disable psa for 4.19 [#2346](https://github.com/openshift/api/pull/2346)
* [OCPBUGS-56761](https://issues.redhat.com/browse/OCPBUGS-56761): Revert v1alpha1 removal [#2345](https://github.com/openshift/api/pull/2345)
* [OCPBUGS-56407](https://issues.redhat.com/browse/OCPBUGS-56407): Fix validation for Resource field in MOSB API [#2329](https://github.com/openshift/api/pull/2329)
* [Full changelog](https://github.com/openshift/api/compare/d22fca85e3b9f77f0cf2b43759a5ff927e605f57...97812373b6b447ff6b55d3e2625b4f62aff1a16f)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/e654299baac2e333b86db9d5f8ec69dabbff0e3c)

* [OCPBUGS-56806](https://issues.redhat.com/browse/OCPBUGS-56806): increase tnf job timeouts [#1427](https://github.com/openshift/cluster-etcd-operator/pull/1427)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/fdefa0ae9d888d5a76d23508de8e1a58a1872d54...e654299baac2e333b86db9d5f8ec69dabbff0e3c)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/328419e7a2aba288a3405e76449f84d42b1952b3)

* [OCPBUGS-53872](https://issues.redhat.com/browse/OCPBUGS-53872): bump github.com/golang-jwt/jwt [#1214](https://github.com/openshift/cluster-image-registry-operator/pull/1214)
* [OCPBUGS-56363](https://issues.redhat.com/browse/OCPBUGS-56363): bump golang.org/x/oauth2 [#1207](https://github.com/openshift/cluster-image-registry-operator/pull/1207)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/85ac017f7c393b18696bf77a6e6415d05418dd0b...328419e7a2aba288a3405e76449f84d42b1952b3)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/e4ecf3131005f74d21d9b2dd2003ceab8678a17f)

* [OCPBUGS-57185](https://issues.redhat.com/browse/OCPBUGS-57185): chore(alerts): adjust PrometheusPossibleNarrowSelectors description and add link to to-be-added runbook [#2609](https://github.com/openshift/cluster-monitoring-operator/pull/2609)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/e4a04ee55a933a45a3b9b8e65ab994223c71196b...e4ecf3131005f74d21d9b2dd2003ceab8678a17f)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/54b097f8e25897bc08384d7df44ab750727a0da3)

* E2E: use 4 cpus for reserved from available cpus (#1337) [#1337](https://github.com/openshift/cluster-node-tuning-operator/pull/1337)
* e2e: arm: fix ginkgo doesn't recognize kernelPageSize suite (#1334) [#1334](https://github.com/openshift/cluster-node-tuning-operator/pull/1334)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/7172669c93307a2474c48911fd95f04a40aa4ea7...54b097f8e25897bc08384d7df44ab750727a0da3)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/06f6aa6e22eadcc38d57f5786c50ceef38bb4d5e)

* [OCPBUGS-56771](https://issues.redhat.com/browse/OCPBUGS-56771): Fix ImplicitlyEnabledCapabilities [#1199](https://github.com/openshift/cluster-version-operator/pull/1199)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/09edded491b9b591445a3502cb719403eb5f52e4...06f6aa6e22eadcc38d57f5786c50ceef38bb4d5e)


### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/a2a48a3a767fdb70644c65ab863bd4fc125987d2)

* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#68](https://github.com/openshift/configmap-reload/pull/68)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/9bfbde8676cca7b45efc4f76f683bd26fe65893d...a2a48a3a767fdb70644c65ab863bd4fc125987d2)


### [console](https://github.com/openshift/console/tree/f2724a7348fbeb44382fe2e7f819065f14238863)

* [OCPBUGS-56779](https://issues.redhat.com/browse/OCPBUGS-56779): Fix and enable web terminal tests [#15097](https://github.com/openshift/console/pull/15097)
* [OCPBUGS-55928](https://issues.redhat.com/browse/OCPBUGS-55928): Improving the DevExp for passing the CSP directives to console per flag [#15076](https://github.com/openshift/console/pull/15076)
* [OCPBUGS-56693](https://issues.redhat.com/browse/OCPBUGS-56693): Expose PodRingSet via Dynamic Plugin SDK [#15086](https://github.com/openshift/console/pull/15086)
* [OCPBUGS-57180](https://issues.redhat.com/browse/OCPBUGS-57180): Fix '/metrics' endpoint token review to handle interna… [#15152](https://github.com/openshift/console/pull/15152)
* [OCPBUGS-57207](https://issues.redhat.com/browse/OCPBUGS-57207): Getting "Oh no something went wrong" error message in web console. [#15159](https://github.com/openshift/console/pull/15159)
* [OCPBUGS-57319](https://issues.redhat.com/browse/OCPBUGS-57319): Add Select project field in import forms [#15171](https://github.com/openshift/console/pull/15171)
* [OCPBUGS-57110](https://issues.redhat.com/browse/OCPBUGS-57110): fix VirtualizedTable runtime error if sortColumn is no… [#15140](https://github.com/openshift/console/pull/15140)
* [OCPBUGS-57105](https://issues.redhat.com/browse/OCPBUGS-57105): Fix runtime error when navigating alert actions [#15138](https://github.com/openshift/console/pull/15138)
* [OCPBUGS-56470](https://issues.redhat.com/browse/OCPBUGS-56470): fix bug where AlertItem is missing info icon [#15071](https://github.com/openshift/console/pull/15071)
* [OCPBUGS-57200](https://issues.redhat.com/browse/OCPBUGS-57200): Opening Edit Secret modal and saving without changes throws error [#15157](https://github.com/openshift/console/pull/15157)
* [OCPBUGS-56764](https://issues.redhat.com/browse/OCPBUGS-56764): Fix regression with drawers and modals [#15094](https://github.com/openshift/console/pull/15094)
* [OCPBUGS-56475](https://issues.redhat.com/browse/OCPBUGS-56475): Enable pipeline tests by installing  operator version 1.17 [#15073](https://github.com/openshift/console/pull/15073)
* [OCPBUGS-56882](https://issues.redhat.com/browse/OCPBUGS-56882): Add initialization link annotation support to csv anno… [#15104](https://github.com/openshift/console/pull/15104)
* [OCPBUGS-57183](https://issues.redhat.com/browse/OCPBUGS-57183): clarify verbiage for Lightspeed hide button [#15151](https://github.com/openshift/console/pull/15151)
* [OCPBUGS-57054](https://issues.redhat.com/browse/OCPBUGS-57054): Should show default OpenShift Logo for a theme when there is not custom logo set for the theme. [#15123](https://github.com/openshift/console/pull/15123)
* [OCPBUGS-57128](https://issues.redhat.com/browse/OCPBUGS-57128): HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling [#15145](https://github.com/openshift/console/pull/15145)
* [OCPBUGS-56885](https://issues.redhat.com/browse/OCPBUGS-56885): Helm resource list error in console [#15105](https://github.com/openshift/console/pull/15105)
* [OCPBUGS-56888](https://issues.redhat.com/browse/OCPBUGS-56888): Add flags in console static plugin for all the components of this epic [#15106](https://github.com/openshift/console/pull/15106)
* [OCPBUGS-56837](https://issues.redhat.com/browse/OCPBUGS-56837): Added developer getting started card in Admin project overview page [#15098](https://github.com/openshift/console/pull/15098)
* [OCPBUGS-56987](https://issues.redhat.com/browse/OCPBUGS-56987): fix bug where Roles list was displaying invalid data f… [#15120](https://github.com/openshift/console/pull/15120)
* [OCPBUGS-56775](https://issues.redhat.com/browse/OCPBUGS-56775): Layout of Welcome to the new OpenShift experience! buttons is wonky on mobile [#15096](https://github.com/openshift/console/pull/15096)
* [OCPBUGS-56149](https://issues.redhat.com/browse/OCPBUGS-56149): Refactor Kebab+ActionsMenu to use PF [#15051](https://github.com/openshift/console/pull/15051)
* [OCPBUGS-56413](https://issues.redhat.com/browse/OCPBUGS-56413): [knative] Self-provisioner user can not access or create event sources via ODC [#15067](https://github.com/openshift/console/pull/15067)
* [OCPBUGS-55941](https://issues.redhat.com/browse/OCPBUGS-55941), [OCPBUGS-56107](https://issues.redhat.com/browse/OCPBUGS-56107): get `go mod tidy` to pass, bump Console Helm dependencies to 3.17.3 [#15032](https://github.com/openshift/console/pull/15032)
* [OCPBUGS-56362](https://issues.redhat.com/browse/OCPBUGS-56362): improve description of the custom logos CLI args [#15061](https://github.com/openshift/console/pull/15061)
* [OCPBUGS-55979](https://issues.redhat.com/browse/OCPBUGS-55979): fix alignment of Getting Started item icons [#15040](https://github.com/openshift/console/pull/15040)
* [OCPBUGS-55929](https://issues.redhat.com/browse/OCPBUGS-55929): Sample segment sessions [#15031](https://github.com/openshift/console/pull/15031)
* NO-JIRA: Update plugin SDK docs [#15074](https://github.com/openshift/console/pull/15074)
* [OCPBUGS-55987](https://issues.redhat.com/browse/OCPBUGS-55987): Fix impersonate group action [#15041](https://github.com/openshift/console/pull/15041)
* [Full changelog](https://github.com/openshift/console/compare/bd198ef0915477dadbe16d71d1277d5691773cf6...f2724a7348fbeb44382fe2e7f819065f14238863)


### [console-operator](https://github.com/openshift/console-operator/tree/0cb29273c8b1efec6ca591d5259a69d34e5ce51f)

* [OCPBUGS-56761](https://issues.redhat.com/browse/OCPBUGS-56761): Revert v1alpha1 removal [#991](https://github.com/openshift/console-operator/pull/991)
* [OCPBUGS-55716](https://issues.redhat.com/browse/OCPBUGS-55716): Fix issue where console operator orphans custom logo configmaps in openshift-console namespace [#985](https://github.com/openshift/console-operator/pull/985)
* [Full changelog](https://github.com/openshift/console-operator/compare/9af3e5fd7bbcb72975c7316bba38ea13c4937320...0cb29273c8b1efec6ca591d5259a69d34e5ce51f)


### [coredns](https://github.com/openshift/coredns/tree/74776b850522c912db5fbadf7353f1eab669bd2a)

* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#133](https://github.com/openshift/coredns/pull/133)
* [Full changelog](https://github.com/openshift/coredns/compare/7a1451db77a68161d58af9b6ca2c9388d578310a...74776b850522c912db5fbadf7353f1eab669bd2a)


### [docker-registry](https://github.com/openshift/image-registry/tree/b1d09765386d98825e92d8759767a53849d82e9a)

* [OCPBUGS-53656](https://issues.redhat.com/browse/OCPBUGS-53656): bump jwt and oauth dependencies [#429](https://github.com/openshift/image-registry/pull/429)
* [Full changelog](https://github.com/openshift/image-registry/compare/59376a751cdc4c936b22aa228bf2ceb889b471f3...b1d09765386d98825e92d8759767a53849d82e9a)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/c8b865a1c4045a3b62dbf5ffea514f2c62d893f8)

* [OCPBUGS-56962](https://issues.redhat.com/browse/OCPBUGS-56962): [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 [#243](https://github.com/openshift/cluster-api-provider-gcp/pull/243)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/8fba88aad6122e8468897b35da4288c90d607609...c8b865a1c4045a3b62dbf5ffea514f2c62d893f8)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/9c99902f29b77e842400ad37925fcb67820d3675)

* [OCPBUGS-56924](https://issues.redhat.com/browse/OCPBUGS-56924): allow instances with unknown quotas to be created [#119](https://github.com/openshift/machine-api-provider-gcp/pull/119)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/bbe620874dee86ea85b93562e9f39e69594f7bf1...9c99902f29b77e842400ad37925fcb67820d3675)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/fadb78e720779ed1b29f32170f3e9dd32584a7e6)

* [OCPBUGS-56082](https://issues.redhat.com/browse/OCPBUGS-56082): UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver [#2297](https://github.com/openshift/kubernetes/pull/2297)
* [OCPBUGS-56437](https://issues.redhat.com/browse/OCPBUGS-56437): Bump 4.19 1.32.5 [#2304](https://github.com/openshift/kubernetes/pull/2304)
* [OCPBUGS-56256](https://issues.redhat.com/browse/OCPBUGS-56256): UPSTREAM: 131495: Handle unsupported node expansion for RWX volumes [#2302](https://github.com/openshift/kubernetes/pull/2302)
* [Full changelog](https://github.com/openshift/kubernetes/compare/9fe7dfdeb6714effef45be12ec451a0f06893660...fadb78e720779ed1b29f32170f3e9dd32584a7e6)


### [hypershift](https://github.com/openshift/hypershift/tree/dfe264f07e228ad0bb0f513aceda6a0ee8463273)

* [OCPBUGS-56930](https://issues.redhat.com/browse/OCPBUGS-56930): cpov1: set terminationMessagePolicy to FallbackToLogsOnError for all HCP containers [#6245](https://github.com/openshift/hypershift/pull/6245)
* [ARO-15626](https://issues.redhat.com/browse/ARO-15626): Disallow users from setting .spec.managementState to Removed in the image registry operator config on Azure [#6233](https://github.com/openshift/hypershift/pull/6233)
* [OCPBUGS-56792](https://issues.redhat.com/browse/OCPBUGS-56792): Fix CatalogSource image check when unauthorized [#6198](https://github.com/openshift/hypershift/pull/6198)
* [OCPBUGS-56910](https://issues.redhat.com/browse/OCPBUGS-56910): util/version: Add Version420 [#6215](https://github.com/openshift/hypershift/pull/6215)
* [OCPBUGS-56910](https://issues.redhat.com/browse/OCPBUGS-56910): Move EnsurePSANotPrivileged to AtLeast(t, Version420) [#6212](https://github.com/openshift/hypershift/pull/6212)
* [CNTRLPLANE-831](https://issues.redhat.com/browse/CNTRLPLANE-831): feat(konflux): add arm64 builds to cpo pipeline [#6182](https://github.com/openshift/hypershift/pull/6182)
* [OCPBUGS-56777](https://issues.redhat.com/browse/OCPBUGS-56777): Disable PSA enforcement in 4.19 hosted cluster [#6201](https://github.com/openshift/hypershift/pull/6201)
* [OCPBUGS-56458](https://issues.redhat.com/browse/OCPBUGS-56458): switch termination message policy to TerminationMessageFallbackToLogsOnError for debugability [#6170](https://github.com/openshift/hypershift/pull/6170)
* [OCPBUGS-56562](https://issues.redhat.com/browse/OCPBUGS-56562): Do not validate OCP API Server SANS if PKI reconciliation is disabled [#6178](https://github.com/openshift/hypershift/pull/6178)
* [CNTRLPLANE-831](https://issues.redhat.com/browse/CNTRLPLANE-831): Red Had Konflux control-plane-operator-4-19 intial pipeline [#6181](https://github.com/openshift/hypershift/pull/6181)
* [CNTRLPLANE-916](https://issues.redhat.com/browse/CNTRLPLANE-916): Konflux build pipeline service account migration [#6089](https://github.com/openshift/hypershift/pull/6089)
* [CNTRLPLANE-915](https://issues.redhat.com/browse/CNTRLPLANE-915): chore(deps): update konflux references [#6139](https://github.com/openshift/hypershift/pull/6139)
* [OCPBUGS-55789](https://issues.redhat.com/browse/OCPBUGS-55789): [release-4.19] Update KAS structured authentication configuration logic to use new uid and extras fields [#6121](https://github.com/openshift/hypershift/pull/6121)
* [Full changelog](https://github.com/openshift/hypershift/compare/d42b1a3da546e231ee6f8dd7162cca433fa2e444...dfe264f07e228ad0bb0f513aceda6a0ee8463273)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/877ef8cd546facbc2416c194128557a25b95d141)

* [OCPBUGS-56962](https://issues.redhat.com/browse/OCPBUGS-56962): [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 [#115](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/115)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/0453d282cbd6e51902d1e8298d15181765e7fe98...877ef8cd546facbc2416c194128557a25b95d141)


### [insights-operator](https://github.com/openshift/insights-operator/tree/fa84a57ac4c8c47cb70dc07c4e9c812aaee98e49)

* feat: ensure the etc-entitlement-pki secret exists (#1087) [#1087](https://github.com/openshift/insights-operator/pull/1087)
* [Full changelog](https://github.com/openshift/insights-operator/compare/b1e0f8fce485de56a28f27793fa2bcec87a72771...fa84a57ac4c8c47cb70dc07c4e9c812aaee98e49)


### [ironic](https://github.com/openshift/ironic-image/tree/fe31e71dbbbd24c77adaecdc3d4d895375a611a5)

* Bug OCPBUGS-56639: Bump sushy to include SuperMicro Cd boot device string workaround [#660](https://github.com/openshift/ironic-image/pull/660)
* [Full changelog](https://github.com/openshift/ironic-image/compare/8a2091a6cfd25a6bc91b0714de25af904cc733ee...fe31e71dbbbd24c77adaecdc3d4d895375a611a5)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/dacba7d7809a048392d18050096dcc20f2878b6f)

* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#102](https://github.com/openshift/ironic-rhcos-downloader/pull/102)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/dbe197724c9e2e5f7279665e5bcb16ff3bc8d97b...dacba7d7809a048392d18050096dcc20f2878b6f)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/4ab93e07bb7c525990ef21a11caae2122ace63f6)

* Fix verify job with build-machinery bump [#215](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/215)
* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#213](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/213)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/4c521b09f4dc55ac69234419e083f3815646f4a9...4ab93e07bb7c525990ef21a11caae2122ace63f6)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/70025364a114fc3067b2e82ce47fdb0149630e4b)

* [OCPBUGS-56899](https://issues.redhat.com/browse/OCPBUGS-56899): Fix `dynamic-system-reserved-calc.sh` when only `true` parameter is used [#5094](https://github.com/openshift/machine-config-operator/pull/5094)
* [OCPBUGS-56829](https://issues.redhat.com/browse/OCPBUGS-56829): Only update boot disks during GCP boot image updates [#5088](https://github.com/openshift/machine-config-operator/pull/5088)
* [OCPBUGS-56445](https://issues.redhat.com/browse/OCPBUGS-56445): Boot Image Controller should not degrade when golden configmap is slow to update [#5063](https://github.com/openshift/machine-config-operator/pull/5063)
* [OCPBUGS-56632](https://issues.redhat.com/browse/OCPBUGS-56632): daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers [#5076](https://github.com/openshift/machine-config-operator/pull/5076)
* [OCPBUGS-56035](https://issues.redhat.com/browse/OCPBUGS-56035): Only populate `Status.PinnedImageSets.CurrentGeneration` on valid generation value [#5039](https://github.com/openshift/machine-config-operator/pull/5039)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/7ef676ce0b13a25c6572d4595d92fd487dbc98b5...70025364a114fc3067b2e82ce47fdb0149630e4b)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/9369858a409280dc6891cb817931978b77168de7)

* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#95](https://github.com/openshift/multus-admission-controller/pull/95)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/0b1b812e082285fd19da6bde67c905f3893bf0d7...9369858a409280dc6891cb817931978b77168de7)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/c8e23b6ca2d6ca5300b2970d9320d3a0b849be04)

* [OCPBUGS-57283](https://issues.redhat.com/browse/OCPBUGS-57283): Bump github.com/containernetworking/plugins from to 1.7.1 [#72](https://github.com/openshift/bond-cni/pull/72)
* [Full changelog](https://github.com/openshift/bond-cni/compare/f575d888893dd427d6cf02271c5b6e64d0baf2c0...c8e23b6ca2d6ca5300b2970d9320d3a0b849be04)


### [network-tools](https://github.com/openshift/network-tools/tree/81f7aebeb1553998800c32644a8d982121277b4e)

* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#146](https://github.com/openshift/network-tools/pull/146)
* [Full changelog](https://github.com/openshift/network-tools/compare/ebd18d146a6f06df7e403e771d16bd960b3d891f...81f7aebeb1553998800c32644a8d982121277b4e)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/a5c90cb0192f98ec61b71b9a15d53fce8fb6f12e)

* [OCPBUGS-57266](https://issues.redhat.com/browse/OCPBUGS-57266): Add fileupload translation [#248](https://github.com/openshift/networking-console-plugin/pull/248)
* [OCPBUGS-57265](https://issues.redhat.com/browse/OCPBUGS-57265): Fix pod context [#247](https://github.com/openshift/networking-console-plugin/pull/247)
* [CNV-61827](https://issues.redhat.com/browse/CNV-61827): fix styling issues [#250](https://github.com/openshift/networking-console-plugin/pull/250)
* [CNV-61902](https://issues.redhat.com/browse/CNV-61902): fetch description of terms for popovers [#249](https://github.com/openshift/networking-console-plugin/pull/249)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/581812ac48f8f2e414050bff933f6b07fe98bb28...a5c90cb0192f98ec61b71b9a15d53fce8fb6f12e)


### [oauth-server](https://github.com/openshift/oauth-server/tree/6acb955fc87e1d487093217ca949f08eb8dc88c3)

* Use newer build-machinery-go [#178](https://github.com/openshift/oauth-server/pull/178)
* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#176](https://github.com/openshift/oauth-server/pull/176)
* [Full changelog](https://github.com/openshift/oauth-server/compare/d034c480e538052c996cce5fb55c435972c02326...6acb955fc87e1d487093217ca949f08eb8dc88c3)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/05e5ab2ccbb2eb104e8238ff81d2f4a5c512b3de)

* adds code to handle signature errors in the archive pkg (#1177) [#1177](https://github.com/openshift/oc-mirror/pull/1177)
* [OCPBUGS-56486](https://issues.redhat.com/browse/OCPBUGS-56486): v2/config: allow `delete` and `mirror` words (#1166) [#1166](https://github.com/openshift/oc-mirror/pull/1166)
* [OCPBUGS-56890](https://issues.redhat.com/browse/OCPBUGS-56890): Bug fix for no release signature found (#1168) [#1168](https://github.com/openshift/oc-mirror/pull/1168)
* [OCPBUGS-57007](https://issues.redhat.com/browse/OCPBUGS-57007): skips signature mirroring for rebuilt operator catalogs (#1171) [#1171](https://github.com/openshift/oc-mirror/pull/1171)
* [OCPBUGS-55701](https://issues.redhat.com/browse/OCPBUGS-55701): v2/imgbuilder: use --authfile when set (#1170) [#1170](https://github.com/openshift/oc-mirror/pull/1170)
* [OCPBUGS-56185](https://issues.redhat.com/browse/OCPBUGS-56185): [release-4.19] v2: bump containers/common dep to 0.63.0 (#1148) [#1148](https://github.com/openshift/oc-mirror/pull/1148)
* disables the signature verification on operator catalog collection (#1157) [#1157](https://github.com/openshift/oc-mirror/pull/1157)
* [OCPBUGS-56433](https://issues.redhat.com/browse/OCPBUGS-56433): v2/cli: always remove past archives before m2d (#1152) [#1152](https://github.com/openshift/oc-mirror/pull/1152)
* [OCPBUGS-56563](https://issues.redhat.com/browse/OCPBUGS-56563): v2/archive: print unarchive progress (#1158) [#1158](https://github.com/openshift/oc-mirror/pull/1158)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/85c1426f7cf9f3a943468ff88bc6e8264cca5dd2...05e5ab2ccbb2eb104e8238ff81d2f4a5c512b3de)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/18061bfe9586919421ed2bb342d9b326b1002bd7)

* [OCPBUGS-56494](https://issues.redhat.com/browse/OCPBUGS-56494): Fix image reference in TestImageStreamImportQuayIO [#510](https://github.com/openshift/openshift-apiserver/pull/510)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/85f6eb2719a0440565c8b7bf00de954eeb12fdd9...18061bfe9586919421ed2bb342d9b326b1002bd7)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/af43fe68a7d862959a797b66307a1277fffbc9df)

* [OCPBUGS-57193](https://issues.redhat.com/browse/OCPBUGS-57193): Set node-pullsecrets volume to read-only to protect image pull credentials [#390](https://github.com/openshift/openshift-controller-manager/pull/390)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/8be524d728d03e61ee029ad2f7229ca97c93f87f...af43fe68a7d862959a797b66307a1277fffbc9df)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/c604f81c4953f0feacfcf927cb5de883af027060)

* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#122](https://github.com/openshift/openshift-state-metrics/pull/122)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/3106bcc3747c3c63e24775f096779b06a2436357...c604f81c4953f0feacfcf927cb5de883af027060)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/4a6530a4cf4e8e81d8f04923f36dd36023f45902)

* [OCPBUGS-57352](https://issues.redhat.com/browse/OCPBUGS-57352): reduce cache expiry frequency [release-4.19] [#1019](https://github.com/openshift/operator-framework-olm/pull/1019)
* [OCPBUGS-57279](https://issues.redhat.com/browse/OCPBUGS-57279): [release-4.19]: operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted [#1015](https://github.com/openshift/operator-framework-olm/pull/1015)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/358b7053a231876cda29cf4d822e3e702389b117...4a6530a4cf4e8e81d8f04923f36dd36023f45902)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/13666465233bfe72a19d6d3f48576a508fdea145)

* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#382](https://github.com/openshift/prom-label-proxy/pull/382)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/7184f58d8faba1eb73ff9c0ce188af3aa776c4d7...13666465233bfe72a19d6d3f48576a508fdea145)


### [telemeter](https://github.com/openshift/telemeter/tree/d72f157000039dddd96962d08d51c17ef716a7d4)

* [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#560](https://github.com/openshift/telemeter/pull/560)
* [Full changelog](https://github.com/openshift/telemeter/compare/cffdabd448b53b5903b871450bac8e6cbb8dd88d...d72f157000039dddd96962d08d51c17ef716a7d4)


### [tests](https://github.com/openshift/origin/tree/827e2ac2372ade0708488e95e3c8e98b083617a0)

* [OCPBUGS-57303](https://issues.redhat.com/browse/OCPBUGS-57303): Fix failed tests of e2e-aws-ovn-tls-13 [#29906](https://github.com/openshift/origin/pull/29906)
* [OCPBUGS-57020](https://issues.redhat.com/browse/OCPBUGS-57020): Skip tests modifying cluster/network.config when it is not permitted [#29884](https://github.com/openshift/origin/pull/29884)
* [OCPBUGS-57189](https://issues.redhat.com/browse/OCPBUGS-57189): `RouteExternalCertificate` : Add fix for `None` platform type [#29899](https://github.com/openshift/origin/pull/29899)
* [OCPBUGS-56187](https://issues.redhat.com/browse/OCPBUGS-56187): OCPBUGS-55968: Fix PIS tests on SNO & Enable applicable MCN & PIS tests on SNO [#29789](https://github.com/openshift/origin/pull/29789)
* [OCPBUGS-56969](https://issues.redhat.com/browse/OCPBUGS-56969), [OCPBUGS-56970](https://issues.redhat.com/browse/OCPBUGS-56970): Fix `RouteExternalCertificate` tests for few other on-prem jobs [#29880](https://github.com/openshift/origin/pull/29880)
* [OCPBUGS-56829](https://issues.redhat.com/browse/OCPBUGS-56829): Only update boot disks during GCP boot image updates tests [#29878](https://github.com/openshift/origin/pull/29878)
* [OCPBUGS-56967](https://issues.redhat.com/browse/OCPBUGS-56967): Do not set the MTU when using NetworkAttachementDefinition [#29879](https://github.com/openshift/origin/pull/29879)
* [OCPBUGS-56947](https://issues.redhat.com/browse/OCPBUGS-56947): fix deployment rollout wait to wait for desired replicas [#29877](https://github.com/openshift/origin/pull/29877)
* [OCPBUGS-56886](https://issues.redhat.com/browse/OCPBUGS-56886): Fix bearer token exposure in exit condition as well [#29841](https://github.com/openshift/origin/pull/29841)
* [OCPBUGS-56437](https://issues.redhat.com/browse/OCPBUGS-56437): Update to kubernetes 1.32.5 [#29875](https://github.com/openshift/origin/pull/29875)
* [OCPBUGS-56796](https://issues.redhat.com/browse/OCPBUGS-56796): Skip failing test [release-4.19] [#29865](https://github.com/openshift/origin/pull/29865)
* [OCPBUGS-56045](https://issues.redhat.com/browse/OCPBUGS-56045): OLMv1: Update test bundles [release-4.19] [#29836](https://github.com/openshift/origin/pull/29836)
* [OCPBUGS-56662](https://issues.redhat.com/browse/OCPBUGS-56662): Fix failed etcd test on arbiter ci run [#29826](https://github.com/openshift/origin/pull/29826)
* [OCPBUGS-56399](https://issues.redhat.com/browse/OCPBUGS-56399): fix watch request counts [#29799](https://github.com/openshift/origin/pull/29799)
* [Full changelog](https://github.com/openshift/origin/compare/65422c86f13fbdccca00adf5cfc570b37a2aebb3...827e2ac2372ade0708488e95e3c8e98b083617a0)