# 4.19.0-okd-scos.17

Created: 2025-09-02 01:08:36 +0000 UTC

Image Digest: `sha256:2e3cb282ddd10ee85fa36ce08b515c48ca1ae6735d7d17d114f228de06be3c87`

Promoted from registry.ci.openshift.org/origin/release-scos:4.19.0-0.okd-scos-2025-09-01-095703


## Changes from 4.19.0-okd-scos.11

### Components

* Kubectl 1.32.1
* Kubernetes upgraded from 1.32.6 to 1.32.7
* Kubernetes Tests 1.32.6
* CentOS Stream CoreOS upgraded from 9.0.20250713-0 to 9.0.20250827-0


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/edfddbc100302df013eb3303c41da28f074e8dd4)

* [OCPBUGS-60938](https://issues.redhat.com/browse/OCPBUGS-60938): Update ISOBuilder OCP 4.19 Dev Preview Release notes [#142](https://github.com/openshift/agent-installer-utils/pull/142)
* [OCPBUGS-60107](https://issues.redhat.com/browse/OCPBUGS-60107): Add ISOBuilder Release notes [#137](https://github.com/openshift/agent-installer-utils/pull/137)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/aa7e2a3f2d848944348db327af66da4d1c9c4ee5...edfddbc100302df013eb3303c41da28f074e8dd4)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/e6ffce5ffcad6385976f241c9ef57a7fe4be6282)

* [OCPBUGS-60595](https://issues.redhat.com/browse/OCPBUGS-60595): Bump library-go [#420](https://github.com/openshift/csi-operator/pull/420)
* [OCPBUGS-59893](https://issues.redhat.com/browse/OCPBUGS-59893): Remove stale conditions [#411](https://github.com/openshift/csi-operator/pull/411)
* [Full changelog](https://github.com/openshift/csi-operator/compare/b61e357915000a5f6dc50aad2cabeb1ac55e2e3c...e6ffce5ffcad6385976f241c9ef57a7fe4be6282)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/87bc6d06e8abd759e92112b434a180c2ddff41f1)

* [OCPBUGS-60925](https://issues.redhat.com/browse/OCPBUGS-60925): Update the RHCOS 4.19 bootimage metadata [#9915](https://github.com/openshift/installer/pull/9915)
* [OCPBUGS-60652](https://issues.redhat.com/browse/OCPBUGS-60652): PowerVS: config variables not honored [#9901](https://github.com/openshift/installer/pull/9901)
* [OCPBUGS-60666](https://issues.redhat.com/browse/OCPBUGS-60666): Azure: change LB and pubic IP skus to Standard [#9903](https://github.com/openshift/installer/pull/9903)
* [OCPBUGS-59607](https://issues.redhat.com/browse/OCPBUGS-59607): Refine check for supported SNO platforms [#9843](https://github.com/openshift/installer/pull/9843)
* Revert "Update RHCOS 4.19 bootimage metadata to 9.6.20250811-0" [#9906](https://github.com/openshift/installer/pull/9906)
* [OCPBUGS-60402](https://issues.redhat.com/browse/OCPBUGS-60402): baremetal: always set external v6 URL on dualstack [#9879](https://github.com/openshift/installer/pull/9879)
* [OCPBUGS-58905](https://issues.redhat.com/browse/OCPBUGS-58905): Update RHCOS 4.19 bootimage metadata to 9.6.20250811-0 [#9888](https://github.com/openshift/installer/pull/9888)
* [Full changelog](https://github.com/openshift/installer/compare/249d7428c51fe85cabdab6394c4aed86fc24d398...87bc6d06e8abd759e92112b434a180c2ddff41f1)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/2f969c7a1df33a398298df731505a508ad120db9)

* [OCPBUGS-60110](https://issues.redhat.com/browse/OCPBUGS-60110): Re-add ENABLE_NODEIP_DEBUG env var [#365](https://github.com/openshift/baremetal-runtimecfg/pull/365)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/33a1d92344c6b56721a745fbe2e41d3ca899aa78...2f969c7a1df33a398298df731505a508ad120db9)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/dd9b5c3785154a172607d15997df2b1e6ae54d53)

* [OCPBUGS-60617](https://issues.redhat.com/browse/OCPBUGS-60617): ccoctl azure dnszone-resource-group-name now optional [#900](https://github.com/openshift/cloud-credential-operator/pull/900)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/a5d62675b21911cdff2bfd257a85ef0b5a793731...dd9b5c3785154a172607d15997df2b1e6ae54d53)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/c53c7153b62ff36cc725707297a4bbb7ea4f62e5)

* [OCPBUGS-60900](https://issues.redhat.com/browse/OCPBUGS-60900): revert openshift replica fix [#374](https://github.com/openshift/kubernetes-autoscaler/pull/374)
* [OCPBUGS-59638](https://issues.redhat.com/browse/OCPBUGS-59638): fix checkpoint gc of unknown recommenders [#366](https://github.com/openshift/kubernetes-autoscaler/pull/366)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/f746d442e69be1cf82cef1c473ddc0ab8a15d22f...c53c7153b62ff36cc725707297a4bbb7ea4f62e5)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/38dbc972321dd339464ffd4a92d2bb6f9b01d761)

* [OCPBUGS-60286](https://issues.redhat.com/browse/OCPBUGS-60286): Remove webhookport (9447) as HostPort [#498](https://github.com/openshift/cluster-baremetal-operator/pull/498)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/0c3beae1a216187270d60af49117a82e74de4020...38dbc972321dd339464ffd4a92d2bb6f9b01d761)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/68b46d78d8f181c3707aeb0c738780a89c3c19ae)

* [OCPBUGS-60950](https://issues.redhat.com/browse/OCPBUGS-60950): Default cloud.conf if no configmap is found [#412](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/412)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/5a484a0f3d97801bd3f1cc2db69e477fa9d13a9a...68b46d78d8f181c3707aeb0c738780a89c3c19ae)


### [cluster-config-api](https://github.com/openshift/api/tree/1c614f54419fa23266ae2f6660b9034893749079)

* [OCPBUGS-60414](https://issues.redhat.com/browse/OCPBUGS-60414): MachineOSConfig name should match MachineConfigPool [#2449](https://github.com/openshift/api/pull/2449)
* Update crd-schema.json to release 1.33 branch [#2447](https://github.com/openshift/api/pull/2447)
* [Full changelog](https://github.com/openshift/api/compare/97812373b6b447ff6b55d3e2625b4f62aff1a16f...1c614f54419fa23266ae2f6660b9034893749079)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/30578a8b3699d1caf73b281cdfb8ad691c0f32ca)

* [OCPBUGS-59802](https://issues.redhat.com/browse/OCPBUGS-59802): add missing informer syncs [#1454](https://github.com/openshift/cluster-etcd-operator/pull/1454)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/1d890f9a4e6f0090040b5c31527397f1d34d1b96...30578a8b3699d1caf73b281cdfb8ad691c0f32ca)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/3335b120ecbae4a792373a814474aeebde58d6c2)

* [OCPBUGS-60517](https://issues.redhat.com/browse/OCPBUGS-60517): fix(azure): resolve credential caching issues around UAMI support [#1243](https://github.com/openshift/cluster-image-registry-operator/pull/1243)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/328419e7a2aba288a3405e76449f84d42b1952b3...3335b120ecbae4a792373a814474aeebde58d6c2)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/ddd78734833eb45f2cd5fba677fe50e4ae9f063b)

* [NE-2102](https://issues.redhat.com/browse/NE-2102): Bump to OSSM 3.1.0 and Istio 1.26.2 [#1264](https://github.com/openshift/cluster-ingress-operator/pull/1264)
* NO-JIRA: [release-4.19] docs - correct Istio version format in ossm-overrides.md [#1255](https://github.com/openshift/cluster-ingress-operator/pull/1255)
* [OCPBUGS-60204](https://issues.redhat.com/browse/OCPBUGS-60204): Update GatewayAPI test to check if deployment has 1 or more pod [#1260](https://github.com/openshift/cluster-ingress-operator/pull/1260)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/cee87b619fed55a2fcf7e5f74bc72fa486d8e4ec...ddd78734833eb45f2cd5fba677fe50e4ae9f063b)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/80c1fc3d81e3392ef7b056c8833185c8bdf6f599)

* [OCPBUGS-60121](https://issues.redhat.com/browse/OCPBUGS-60121): [release-4.19] Set goaway chance to 0.001 [#1887](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1887)
* [OCPBUGS-60677](https://issues.redhat.com/browse/OCPBUGS-60677): certrotation: ensure that all rotated secrets/configmaps have RefreshOnlyWhenExpired set [#1901](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1901)
* [OCPBUGS-60495](https://issues.redhat.com/browse/OCPBUGS-60495): certrotationcontroller: extend node-system-admin-signer lifetime [#1897](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1897)
* [OCPBUGS-59957](https://issues.redhat.com/browse/OCPBUGS-59957): Add missing service ports to apiserver service [#1880](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1880)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/cd86a6772107b5213da2e649530b1a64eb6c2781...80c1fc3d81e3392ef7b056c8833185c8bdf6f599)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/3dfbb67635ce056fd55c360937be9868a3cf8ad5)

* [OCPBUGS-60132](https://issues.redhat.com/browse/OCPBUGS-60132): Missing endpoint slices for open ports the operator uses [#853](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/853)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/cec410b7f877a6eef57968889a644b848bdb540a...3dfbb67635ce056fd55c360937be9868a3cf8ad5)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/bc62016ccc39a66406caf5110ac7140f285fb264)

* [OCPBUGS-60761](https://issues.redhat.com/browse/OCPBUGS-60761): Allow overriding OVN-Kubernetes configuration [#2781](https://github.com/openshift/cluster-network-operator/pull/2781)
* [OCPBUGS-60534](https://issues.redhat.com/browse/OCPBUGS-60534): Fix multus webhook match condition for spec changes [#2777](https://github.com/openshift/cluster-network-operator/pull/2777)
* [OCPBUGS-60095](https://issues.redhat.com/browse/OCPBUGS-60095): Add release version annotation to whereabouts-controller/whereabouts-token-watcher [#2762](https://github.com/openshift/cluster-network-operator/pull/2762)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/fd80a4aa660c66c93ba01749e23af2c9ea45d5b2...bc62016ccc39a66406caf5110ac7140f285fb264)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/ec11c34d05139605830621b18763f57ef717f05f)

* [OCPBUGS-60855](https://issues.redhat.com/browse/OCPBUGS-60855): e2e: arm: add validation tests for hugepages with 4k and 64k kernelPageSize (#1383) [#1383](https://github.com/openshift/cluster-node-tuning-operator/pull/1383)
* E2E: skip stalld test case checking sched_fifo (#1385) [#1385](https://github.com/openshift/cluster-node-tuning-operator/pull/1385)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/61b6637d88503c5ddaace05a3e7a3f0b04d49183...ec11c34d05139605830621b18763f57ef717f05f)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/975ad328d5965a4e297b5b5eb0a7098976d50b09)

* [OCPBUGS-60152](https://issues.redhat.com/browse/OCPBUGS-60152): hypershift: add app label to csdriveroperators running in HCP [#604](https://github.com/openshift/cluster-storage-operator/pull/604)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/c09f715fa8592f79d2436218779614b13cd9c592...975ad328d5965a4e297b5b5eb0a7098976d50b09)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/f165654c6db20683b2f609561450917efe3066ff)

* [OCPBUGS-60168](https://issues.redhat.com/browse/OCPBUGS-60168): CVO protects /metrics with authorization [#1222](https://github.com/openshift/cluster-version-operator/pull/1222)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/06f6aa6e22eadcc38d57f5786c50ceef38bb4d5e...f165654c6db20683b2f609561450917efe3066ff)


### [console](https://github.com/openshift/console/tree/f413a075c54ee859d3b2e89cba0848b5d2d89c53)

* [OCPBUGS-60420](https://issues.redhat.com/browse/OCPBUGS-60420): QuickStarts Link buttons to other quickstarts are duplicate [#15391](https://github.com/openshift/console/pull/15391)
* [OCPBUGS-50571](https://issues.redhat.com/browse/OCPBUGS-50571): Make sure CSP violations are only reported to telemetry once per day per browser [#15366](https://github.com/openshift/console/pull/15366)
* [OCPBUGS-60279](https://issues.redhat.com/browse/OCPBUGS-60279): Remove ancient `X-XSS-Protection` header [#15381](https://github.com/openshift/console/pull/15381)
* [OCPBUGS-60038](https://issues.redhat.com/browse/OCPBUGS-60038): Resolving API Version Conflicts in Tekton Pipeline Runs [#15354](https://github.com/openshift/console/pull/15354)
* [OCPBUGS-60294](https://issues.redhat.com/browse/OCPBUGS-60294): OpenShift Console's "Start Job" action overrides configured "backoffLimit" to "6" [#15382](https://github.com/openshift/console/pull/15382)
* NO-JIRA: Update CHANGELOG for latest 4.19 plugin SDK package publish [#15406](https://github.com/openshift/console/pull/15406)
* [OCPBUGS-60039](https://issues.redhat.com/browse/OCPBUGS-60039): Fix i18n string for event stream (again) [#15388](https://github.com/openshift/console/pull/15388)
* [OCPBUGS-60039](https://issues.redhat.com/browse/OCPBUGS-60039): Fix i18n string for event stream [#15355](https://github.com/openshift/console/pull/15355)
* [OCPBUGS-56651](https://issues.redhat.com/browse/OCPBUGS-56651): Recognize Detached BMH status [#15083](https://github.com/openshift/console/pull/15083)
* [Full changelog](https://github.com/openshift/console/compare/a79116718e31fa73c6ed1072aa0484305db969ba...f413a075c54ee859d3b2e89cba0848b5d2d89c53)


### [coredns](https://github.com/openshift/coredns/tree/4f64931403bf747b78bccb40ad877b08da534e23)

* [OCPBUGS-60246](https://issues.redhat.com/browse/OCPBUGS-60246): UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy [#148](https://github.com/openshift/coredns/pull/148)
* [Full changelog](https://github.com/openshift/coredns/compare/74776b850522c912db5fbadf7353f1eab669bd2a...4f64931403bf747b78bccb40ad877b08da534e23)


### [etcd, installer-etcd-artifacts](https://github.com/openshift/etcd/tree/eb0acd5c92a830da18d7d0d789f7a8ecac860620)

* [OCPBUGS-61041](https://issues.redhat.com/browse/OCPBUGS-61041): Revert "OCPBUGS-52181: Ensure cluster id changes during force-new-cluster" [#340](https://github.com/openshift/etcd/pull/340)
* [Full changelog](https://github.com/openshift/etcd/compare/a5421dfe551a2e9c911a75062a4cdeb7473f5c26...eb0acd5c92a830da18d7d0d789f7a8ecac860620)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/4fd69cf5c0b71fb477271c69d6ddd4b276b18092)

* [OCPBUGS-59386](https://issues.redhat.com/browse/OCPBUGS-59386): Add max-concurrent-reconciles flag to machine actuator [#125](https://github.com/openshift/machine-api-provider-gcp/pull/125)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/9c99902f29b77e842400ad37925fcb67820d3675...4fd69cf5c0b71fb477271c69d6ddd4b276b18092)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/063b256caae5fbe3b6f2a5b1c35339220c7b4188)

* [OCPBUGS-59749](https://issues.redhat.com/browse/OCPBUGS-59749): 4.19: UPSTREAM: 2116: Remove check on snapshot create support for multi-writer HyperDisk-HA and let such validations occur at the PD control plane layer [#80](https://github.com/openshift/gcp-pd-csi-driver/pull/80)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/3aeac35b36ea59188761c2980451217b2099e5da...063b256caae5fbe3b6f2a5b1c35339220c7b4188)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/169f654a6b0bc3dcca620eda17240b86c578cb10)

* [OCPBUGS-61021](https://issues.redhat.com/browse/OCPBUGS-61021): UPSTREAM: <carry>: Revert "Rebase v1.32.8 to 4.19" [#2433](https://github.com/openshift/kubernetes/pull/2433)
* [OCPBUGS-60510](https://issues.redhat.com/browse/OCPBUGS-60510): Rebase v1.32.8 to 4.19 [#2412](https://github.com/openshift/kubernetes/pull/2412)
* [OCPBUGS-60074](https://issues.redhat.com/browse/OCPBUGS-60074): UPSTREAM: 132028: podresources: list: use active pods [#2391](https://github.com/openshift/kubernetes/pull/2391)
* [OCPBUGS-59534](https://issues.redhat.com/browse/OCPBUGS-59534): Rebase v1.32.7 to 4.19 [#2367](https://github.com/openshift/kubernetes/pull/2367)
* [Full changelog](https://github.com/openshift/kubernetes/compare/38c60a516ecb061270b0f0f05239b8fe2ce4bf0e...169f654a6b0bc3dcca620eda17240b86c578cb10)


### [hypershift](https://github.com/openshift/hypershift/tree/f35b2f720e0b3d15bc12b7d0338432ea907e7104)

* [OCPBUGS-60483](https://issues.redhat.com/browse/OCPBUGS-60483): feat(validations): add wildcard support to DNS SAN conflict detection [#6648](https://github.com/openshift/hypershift/pull/6648)
* [OCPBUGS-60147](https://issues.redhat.com/browse/OCPBUGS-60147): Always compress and encode payload in token secret for inplace upgrades [#6606](https://github.com/openshift/hypershift/pull/6606)
* [OCPBUGS-60152](https://issues.redhat.com/browse/OCPBUGS-60152): add missing app label to some components [#6636](https://github.com/openshift/hypershift/pull/6636)
* [OCPBUGS-60125](https://issues.redhat.com/browse/OCPBUGS-60125): fix(OCPBUGS-60125): Allow HCCO to set registry managementState to Removed; delete VAP during HC deletion [#6689](https://github.com/openshift/hypershift/pull/6689)
* [OCPBUGS-60648](https://issues.redhat.com/browse/OCPBUGS-60648): Cache Azure KMS TokenCredential for ARO HCP and clarify CPO credentials cache naming [#6677](https://github.com/openshift/hypershift/pull/6677)
* [OCPBUGS-60100](https://issues.redhat.com/browse/OCPBUGS-60100): fix: add dynamic security context uid to 4.19 missing components [#6675](https://github.com/openshift/hypershift/pull/6675)
* [OCPBUGS-57141](https://issues.redhat.com/browse/OCPBUGS-57141): HCP payload doesn't respect multiple mirrors [#6517](https://github.com/openshift/hypershift/pull/6517)
* [CNTRLPLANE-1270](https://issues.redhat.com/browse/CNTRLPLANE-1270): Red Hat Konflux update control-plane-operator-4-19 [#6660](https://github.com/openshift/hypershift/pull/6660)
* Red Hat Konflux purge control-plane-operator-4-19 [#6659](https://github.com/openshift/hypershift/pull/6659)
* [CNTRLPLANE-1267](https://issues.redhat.com/browse/CNTRLPLANE-1267): conditional builds for mce-2.9 [#6657](https://github.com/openshift/hypershift/pull/6657)
* [OCPBUGS-57588](https://issues.redhat.com/browse/OCPBUGS-57588): Update PSA from v1beta1 to v1 [#6302](https://github.com/openshift/hypershift/pull/6302)
* [OCPBUGS-59805](https://issues.redhat.com/browse/OCPBUGS-59805): Router publish strategy related changes for IBM Cloud platform [#6490](https://github.com/openshift/hypershift/pull/6490)
* [OCPBUGS-59933](https://issues.redhat.com/browse/OCPBUGS-59933): Use the image reference for the cache in the image metadata provider [#6535](https://github.com/openshift/hypershift/pull/6535)
* [CNTRLPLANE-1016](https://issues.redhat.com/browse/CNTRLPLANE-1016): Support day2 tags changes for AWS default SecurityGroup [#6455](https://github.com/openshift/hypershift/pull/6455)
* [CNTRLPLANE-1034](https://issues.redhat.com/browse/CNTRLPLANE-1034): chore: Relax the kas healthcheck for aro when AllowedCIDRBlocks [#6617](https://github.com/openshift/hypershift/pull/6617)
* [OCPBUGS-60100](https://issues.redhat.com/browse/OCPBUGS-60100): feat: let ARO honour cp namespace annotation for default SC uids in 4.19 [#6592](https://github.com/openshift/hypershift/pull/6592)
* [CNTRLPLANE-1226](https://issues.redhat.com/browse/CNTRLPLANE-1226): feat(konflux): Make CPO builds hermetic [#6596](https://github.com/openshift/hypershift/pull/6596)
* [Full changelog](https://github.com/openshift/hypershift/compare/29450d42776ed03c98d88430927f0da4f426e8bf...f35b2f720e0b3d15bc12b7d0338432ea907e7104)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/940ac1c27e5548f738219b8c2ea4d1b6924e60e5)

* [OCPBUGS-52542](https://issues.redhat.com/browse/OCPBUGS-52542): CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork [#118](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/118)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/877ef8cd546facbc2416c194128557a25b95d141...940ac1c27e5548f738219b8c2ea4d1b6924e60e5)


### [insights-operator](https://github.com/openshift/insights-operator/tree/9fd1106b89d42891e4aa4eec7a1f328b211b83fe)

* feat: add permissions to gather clusterrole (#1112) [#1112](https://github.com/openshift/insights-operator/pull/1112)
* fix: incorrect anonymization of domains (#1114) [#1114](https://github.com/openshift/insights-operator/pull/1114)
* [Full changelog](https://github.com/openshift/insights-operator/compare/8fffce910f39cf33efa97a24a894c84cf3f3d1f6...9fd1106b89d42891e4aa4eec7a1f328b211b83fe)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/fdef30c84b3d45ede364500984221c3f492b1415)

* NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-19). [#223](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/223)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/4ab93e07bb7c525990ef21a11caae2122ace63f6...fdef30c84b3d45ede364500984221c3f492b1415)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/7cf9bf8a41b97b6defea060cda71968378dd2fbb)

* fix for OCPBUGS-60427: userDataSecret.name should be a Required value on AWS [#1403](https://github.com/openshift/machine-api-operator/pull/1403)
* [OCPBUGS-59386](https://issues.redhat.com/browse/OCPBUGS-59386): Enabled 10 concurrent reconciles on GCP [#1391](https://github.com/openshift/machine-api-operator/pull/1391)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/5eb6a3610eed1f873926eaf4db17669cdb308a1c...7cf9bf8a41b97b6defea060cda71968378dd2fbb)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/1cc3b020cb2d5cdcb9135de39ddbd0ddd494495f)

* [OCPBUGS-59871](https://issues.redhat.com/browse/OCPBUGS-59871): Understand and eliminate noisy logs for MCN [#5199](https://github.com/openshift/machine-config-operator/pull/5199)
* [OCPBUGS-60767](https://issues.redhat.com/browse/OCPBUGS-60767): Update the OnClusterBuild payload tests to reflect the validation rule requiring MCP & MOSC names to match [#5258](https://github.com/openshift/machine-config-operator/pull/5258)
* [OCPBUGS-60265](https://issues.redhat.com/browse/OCPBUGS-60265): Reintroduce cronjob that deletes MCN v1alpha1 CRD [#5243](https://github.com/openshift/machine-config-operator/pull/5243)
* [OCPBUGS-60224](https://issues.redhat.com/browse/OCPBUGS-60224): Invalid architecture value found in annotation during 4.19 update [#5227](https://github.com/openshift/machine-config-operator/pull/5227)
* [OCPBUGS-60080](https://issues.redhat.com/browse/OCPBUGS-60080): use channel to signal controller shutdown [#5217](https://github.com/openshift/machine-config-operator/pull/5217)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/a297a545c9f6dc811723ee94390a2c130cc167a3...1cc3b020cb2d5cdcb9135de39ddbd0ddd494495f)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/345d64d597581eb0cb3cd2c1cf06124446da79a5)

* NO-JIRA: [release-4.19] OCPBUGS-60296: fix legend height to avoid scroll overlap [#498](https://github.com/openshift/monitoring-plugin/pull/498)
* NO-JIRA: improve consistency in tab string [#496](https://github.com/openshift/monitoring-plugin/pull/496)
* : NO-JIRA: update the i18n [#495](https://github.com/openshift/monitoring-plugin/pull/495)
* [OCPBUGS-60129](https://issues.redhat.com/browse/OCPBUGS-60129): feat: add alerting rules tab to dev console [#488](https://github.com/openshift/monitoring-plugin/pull/488)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/9817e3ed3b1db29b9803051eb8f3bc32aa2246e0...345d64d597581eb0cb3cd2c1cf06124446da79a5)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/89e4882698653fdd80fcee2e9d92e668cb02d2d1)

* [OCPBUGS-58851](https://issues.redhat.com/browse/OCPBUGS-58851): Bump github.com/golang/glog to v1.2.4 (#110) [#110](https://github.com/openshift/network-metrics-daemon/pull/110)
* [OCPBUGS-60172](https://issues.redhat.com/browse/OCPBUGS-60172): Replace e2e test image (#119) [#119](https://github.com/openshift/network-metrics-daemon/pull/119)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/5ec8c6bde236feab19525c2d84f7d55f430f9e2b...89e4882698653fdd80fcee2e9d92e668cb02d2d1)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/e176bf605757d52e7ea8a33bb9e243bf67ccba97)

* [OCPBUGS-59760](https://issues.redhat.com/browse/OCPBUGS-59760): warn if tmp is `noexec` (#1234) [#1234](https://github.com/openshift/oc-mirror/pull/1234)
* [OCPBUGS-59976](https://issues.redhat.com/browse/OCPBUGS-59976): v2/operator: support manifest lists with one arch (#1230) [#1230](https://github.com/openshift/oc-mirror/pull/1230)
* [OCPBUGS-59949](https://issues.redhat.com/browse/OCPBUGS-59949): fixes the result output showing the wrong total (#1237) [#1237](https://github.com/openshift/oc-mirror/pull/1237)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/e91ec32c8c0195393280c734ba46de5a31637479...e176bf605757d52e7ea8a33bb9e243bf67ccba97)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/5b3063ff149f290bebca0783fc508dfbf07689a5)

* [OCPBUGS-56614](https://issues.redhat.com/browse/OCPBUGS-56614): legacy image pull secret rollback controller [#384](https://github.com/openshift/openshift-controller-manager/pull/384)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/a672407574befa9faf6a56078d6852229701f8c6...5b3063ff149f290bebca0783fc508dfbf07689a5)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/5c83a8adfd3fb0a5b3f2f8a26d3d05eefd5ba9d0)

* [OCPBUGS-60525](https://issues.redhat.com/browse/OCPBUGS-60525): Add NetworkPolicy as a supported kind [#1047](https://github.com/openshift/operator-framework-olm/pull/1047)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/8bcf1556a550efa7bb380ec315c077cf29438695...5c83a8adfd3fb0a5b3f2f8a26d3d05eefd5ba9d0)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/6ff66743c4fbd0c413cf4bb9933a1eb510aa42e4)

* [OCPBUGS-48709](https://issues.redhat.com/browse/OCPBUGS-48709), [OCPBUGS-60797](https://issues.redhat.com/browse/OCPBUGS-60797), [OCPBUGS-60979](https://issues.redhat.com/browse/OCPBUGS-60979): DownStream Merge Sync from 4.20 [08-22-2025] [#2733](https://github.com/openshift/ovn-kubernetes/pull/2733)
* [OCPBUGS-48709](https://issues.redhat.com/browse/OCPBUGS-48709): DownStream Merge Sync from 4.20 [08-06-2025] [#2704](https://github.com/openshift/ovn-kubernetes/pull/2704)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/e24389403dd961a14b6512e40cda7e3e5d0a4b20...6ff66743c4fbd0c413cf4bb9933a1eb510aa42e4)


### [stream-coreos, stream-coreos-extensions](https://github.com/openshift/os/tree/e97898c8af9cad8e5375e4860a7d79c39a1c79fa)

* Merge [#1853](https://github.com/openshift/os/pull/1853)
* Merge [#1851](https://github.com/openshift/os/pull/1851)
* [Full changelog](https://github.com/openshift/os/compare/334ed7c68677a737579fe0f4f9eaa74ca67ea817...e97898c8af9cad8e5375e4860a7d79c39a1c79fa)


### [tests](https://github.com/openshift/origin/tree/e4547472c759ab77d577fb062922da08d998794b)

* [OCPBUGS-60244](https://issues.redhat.com/browse/OCPBUGS-60244): Wait 30s after the upgrade is complete to validate workloads [#30144](https://github.com/openshift/origin/pull/30144)
* [OCPBUGS-60797](https://issues.redhat.com/browse/OCPBUGS-60797): Don't check for remote node subnet BGP routes [#30156](https://github.com/openshift/origin/pull/30156)
* NO-JIRA: Update extended/networking OWNERS [#30088](https://github.com/openshift/origin/pull/30088)
* [OCPBUGS-60569](https://issues.redhat.com/browse/OCPBUGS-60569): images/tests: Remove rteval [#30124](https://github.com/openshift/origin/pull/30124)
* [OCPBUGS-60429](https://issues.redhat.com/browse/OCPBUGS-60429): Load our MCO's OTE binary [#30043](https://github.com/openshift/origin/pull/30043)
* [OCPBUGS-59757](https://issues.redhat.com/browse/OCPBUGS-59757): OCPBUGS-59758: Improve MCN test stability [#30018](https://github.com/openshift/origin/pull/30018)
* [OCPBUGS-60117](https://issues.redhat.com/browse/OCPBUGS-60117): Enable test for LGW L2 [#30052](https://github.com/openshift/origin/pull/30052)
* [OCPBUGS-60234](https://issues.redhat.com/browse/OCPBUGS-60234): Move the legacy container failures [#30073](https://github.com/openshift/origin/pull/30073)
* [OCPBUGS-60092](https://issues.redhat.com/browse/OCPBUGS-60092): feat(azure): skip metrics collection for ARO HCP hypershift [#30051](https://github.com/openshift/origin/pull/30051)
* [Full changelog](https://github.com/openshift/origin/compare/bb0d44936a0b231205adfae9a6de4885f6a86209...e4547472c759ab77d577fb062922da08d998794b)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/4f3a1da10d7f060f4b6530e70bd03892d9c43277)

* [OCPBUGS-60535](https://issues.redhat.com/browse/OCPBUGS-60535): Check for number of FailureDomain-s in GetVCenter() [#188](https://github.com/openshift/vsphere-problem-detector/pull/188)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/32b15d87f5fd387dd5d04b96b7250a353240bf92...4f3a1da10d7f060f4b6530e70bd03892d9c43277)