# 4.19.0-okd-scos.19

Created: 2025-09-15 06:36:44 +0000 UTC

Image Digest: `sha256:51e9baa28a2867159fa40cac60bae04056670ab5f40a2de705a87605434742a1`

Promoted from registry.ci.openshift.org/origin/release-scos:4.19.0-0.okd-scos-2025-09-14-164441


## Changes from 4.19.0-okd-scos.14

### Components

* Kubectl 1.32.1
* Kubernetes upgraded from 1.32.7 to 1.32.8
* Kubernetes Tests upgraded from 1.32.6 to 1.32.8
* CentOS Stream CoreOS upgraded from 9.0.20250731-1 to 9.0.20250827-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| MachineConfigNodes <br/> (13 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| PinnedImages <br/> (5 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| RouteAdvertisements <br/> (11 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |


### Rebuilt images without code change

* [stream-coreos](https://github.com/openshift/os) git [e97898c8](https://github.com/openshift/os/commit/e97898c8af9cad8e5375e4860a7d79c39a1c79fa) `sha256:210b83fcbbc41bbfadce649dfd4599b62d025a047017bcdcacc7f436cbd856b0`
* [stream-coreos-extensions](https://github.com/openshift/os) git [e97898c8](https://github.com/openshift/os/commit/e97898c8af9cad8e5375e4860a7d79c39a1c79fa) `sha256:1c76a94fe88c91d79160eff7d8b1527978bcb9d267fe5879d867fe47c6c69ba0`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/f56d2b039a7a924ae51be9475ebe11d6709878c4)

* NO-ISSUE: pin gotestsum to v1.12.3 (#8019) [#8019](https://github.com/openshift/assisted-service/pull/8019)
* [Full changelog](https://github.com/openshift/assisted-service/compare/be6aa91006d445bdaace0fdf6ed16b105ce930ee...f56d2b039a7a924ae51be9475ebe11d6709878c4)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/edfddbc100302df013eb3303c41da28f074e8dd4)

* [OCPBUGS-60938](https://issues.redhat.com/browse/OCPBUGS-60938): Update ISOBuilder OCP 4.19 Dev Preview Release notes [#142](https://github.com/openshift/agent-installer-utils/pull/142)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/f2d7fdb22c82e9561f607d93ce80c22a43ea39cd...edfddbc100302df013eb3303c41da28f074e8dd4)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/e6ffce5ffcad6385976f241c9ef57a7fe4be6282)

* [OCPBUGS-60595](https://issues.redhat.com/browse/OCPBUGS-60595): Bump library-go [#420](https://github.com/openshift/csi-operator/pull/420)
* [Full changelog](https://github.com/openshift/csi-operator/compare/e5d84763b378fff025540cb9a459dcf1bdfd903d...e6ffce5ffcad6385976f241c9ef57a7fe4be6282)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/7e30b7d6b421087ee6b6aaa639e40392c22ce52b)

* [OCPBUGS-61313](https://issues.redhat.com/browse/OCPBUGS-61313): Use less permissive access for /var/lib/etcd for SNO [#9927](https://github.com/openshift/installer/pull/9927)
* [OCPBUGS-59573](https://issues.redhat.com/browse/OCPBUGS-59573): Checking for selected PE retrieved data and returning errors for missing values [#9842](https://github.com/openshift/installer/pull/9842)
* [OCPBUGS-60832](https://issues.redhat.com/browse/OCPBUGS-60832): node-joner ignore error if SSH key was not found [#9910](https://github.com/openshift/installer/pull/9910)
* [OCPBUGS-61109](https://issues.redhat.com/browse/OCPBUGS-61109): Misleading error when confidentialCompute: Enabled [#9920](https://github.com/openshift/installer/pull/9920)
* [OCPBUGS-60925](https://issues.redhat.com/browse/OCPBUGS-60925): Update the RHCOS 4.19 bootimage metadata [#9915](https://github.com/openshift/installer/pull/9915)
* [OCPBUGS-60652](https://issues.redhat.com/browse/OCPBUGS-60652): PowerVS: config variables not honored [#9901](https://github.com/openshift/installer/pull/9901)
* [OCPBUGS-60666](https://issues.redhat.com/browse/OCPBUGS-60666): Azure: change LB and pubic IP skus to Standard [#9903](https://github.com/openshift/installer/pull/9903)
* [OCPBUGS-59607](https://issues.redhat.com/browse/OCPBUGS-59607): Refine check for supported SNO platforms [#9843](https://github.com/openshift/installer/pull/9843)
* Revert "Update RHCOS 4.19 bootimage metadata to 9.6.20250811-0" [#9906](https://github.com/openshift/installer/pull/9906)
* [OCPBUGS-60402](https://issues.redhat.com/browse/OCPBUGS-60402): baremetal: always set external v6 URL on dualstack [#9879](https://github.com/openshift/installer/pull/9879)
* [OCPBUGS-58905](https://issues.redhat.com/browse/OCPBUGS-58905): Update RHCOS 4.19 bootimage metadata to 9.6.20250811-0 [#9888](https://github.com/openshift/installer/pull/9888)
* [Full changelog](https://github.com/openshift/installer/compare/249d7428c51fe85cabdab6394c4aed86fc24d398...7e30b7d6b421087ee6b6aaa639e40392c22ce52b)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/2f969c7a1df33a398298df731505a508ad120db9)

* [OCPBUGS-60110](https://issues.redhat.com/browse/OCPBUGS-60110): Re-add ENABLE_NODEIP_DEBUG env var [#365](https://github.com/openshift/baremetal-runtimecfg/pull/365)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/33a1d92344c6b56721a745fbe2e41d3ca899aa78...2f969c7a1df33a398298df731505a508ad120db9)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/0a5409aaef9203a4551bce93eac5637a32c87f7b)

* [OCPBUGS-60970](https://issues.redhat.com/browse/OCPBUGS-60970): ccoctl: aws to use proper issuer url on subsequent runs [#906](https://github.com/openshift/cloud-credential-operator/pull/906)
* [OCPBUGS-60617](https://issues.redhat.com/browse/OCPBUGS-60617): ccoctl azure dnszone-resource-group-name now optional [#900](https://github.com/openshift/cloud-credential-operator/pull/900)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/a5d62675b21911cdff2bfd257a85ef0b5a793731...0a5409aaef9203a4551bce93eac5637a32c87f7b)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/c53c7153b62ff36cc725707297a4bbb7ea4f62e5)

* [OCPBUGS-60900](https://issues.redhat.com/browse/OCPBUGS-60900): revert openshift replica fix [#374](https://github.com/openshift/kubernetes-autoscaler/pull/374)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/b8e06f4f46570e6a14b0dcd37f27b46a2a02555b...c53c7153b62ff36cc725707297a4bbb7ea4f62e5)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/38dbc972321dd339464ffd4a92d2bb6f9b01d761)

* [OCPBUGS-60286](https://issues.redhat.com/browse/OCPBUGS-60286): Remove webhookport (9447) as HostPort [#498](https://github.com/openshift/cluster-baremetal-operator/pull/498)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/0c3beae1a216187270d60af49117a82e74de4020...38dbc972321dd339464ffd4a92d2bb6f9b01d761)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/bd2845df55a487e49aa73706cca6211877a912d5)

* [OCPBUGS-56788](https://issues.redhat.com/browse/OCPBUGS-56788): Fix config-sync-controller logging [#390](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/390)
* [OCPBUGS-60950](https://issues.redhat.com/browse/OCPBUGS-60950): Default cloud.conf if no configmap is found [#412](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/412)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/5a484a0f3d97801bd3f1cc2db69e477fa9d13a9a...bd2845df55a487e49aa73706cca6211877a912d5)


### [cluster-config-api](https://github.com/openshift/api/tree/93b8cc2cf247366771a42d967d836f1968418540)

* [OCPBUGS-61096](https://issues.redhat.com/browse/OCPBUGS-61096): Add default value for MachineHealthCheck's maxUnhealthy to the description [#2464](https://github.com/openshift/api/pull/2464)
* [MCO-1766](https://issues.redhat.com/browse/MCO-1766): Promote PinnedImageSets feature gate to default [#2377](https://github.com/openshift/api/pull/2377)
* [MCO-1720](https://issues.redhat.com/browse/MCO-1720): Promote MachineConfigNode feature gate to default [#2376](https://github.com/openshift/api/pull/2376)
* [CORENET-6148](https://issues.redhat.com/browse/CORENET-6148): Promote RouteAdvertisements feature gate to default feature set [#2425](https://github.com/openshift/api/pull/2425)
* [OCPBUGS-60414](https://issues.redhat.com/browse/OCPBUGS-60414): MachineOSConfig name should match MachineConfigPool [#2449](https://github.com/openshift/api/pull/2449)
* Update crd-schema.json to release 1.33 branch [#2447](https://github.com/openshift/api/pull/2447)
* [Full changelog](https://github.com/openshift/api/compare/97812373b6b447ff6b55d3e2625b4f62aff1a16f...93b8cc2cf247366771a42d967d836f1968418540)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/4d6a1658537e8bb4e2e0cc2370557ab6077850ee)

* [OCPBUGS-60443](https://issues.redhat.com/browse/OCPBUGS-60443): Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace [#1472](https://github.com/openshift/cluster-etcd-operator/pull/1472)
* [OCPBUGS-59802](https://issues.redhat.com/browse/OCPBUGS-59802): add missing informer syncs [#1454](https://github.com/openshift/cluster-etcd-operator/pull/1454)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/1d890f9a4e6f0090040b5c31527397f1d34d1b96...4d6a1658537e8bb4e2e0cc2370557ab6077850ee)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/3335b120ecbae4a792373a814474aeebde58d6c2)

* [OCPBUGS-60517](https://issues.redhat.com/browse/OCPBUGS-60517): fix(azure): resolve credential caching issues around UAMI support [#1243](https://github.com/openshift/cluster-image-registry-operator/pull/1243)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/328419e7a2aba288a3405e76449f84d42b1952b3...3335b120ecbae4a792373a814474aeebde58d6c2)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/ddd78734833eb45f2cd5fba677fe50e4ae9f063b)

* [NE-2102](https://issues.redhat.com/browse/NE-2102): Bump to OSSM 3.1.0 and Istio 1.26.2 [#1264](https://github.com/openshift/cluster-ingress-operator/pull/1264)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/beb84efd63f1600ac6c475decc979c63dbdaeb12...ddd78734833eb45f2cd5fba677fe50e4ae9f063b)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/80c1fc3d81e3392ef7b056c8833185c8bdf6f599)

* [OCPBUGS-60121](https://issues.redhat.com/browse/OCPBUGS-60121): [release-4.19] Set goaway chance to 0.001 [#1887](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1887)
* [OCPBUGS-60677](https://issues.redhat.com/browse/OCPBUGS-60677): certrotation: ensure that all rotated secrets/configmaps have RefreshOnlyWhenExpired set [#1901](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1901)
* [OCPBUGS-60495](https://issues.redhat.com/browse/OCPBUGS-60495): certrotationcontroller: extend node-system-admin-signer lifetime [#1897](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1897)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/e2ad6c193a3a0ee71a2bd128d5a4692ad8a6776a...80c1fc3d81e3392ef7b056c8833185c8bdf6f599)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/9d49a4beb3693a53833a7af29e54567a97c2de2f)

* [OCPBUGS-61460](https://issues.redhat.com/browse/OCPBUGS-61460): Set maxUnavailable 10% on MultiNetworkPolicy DS [#2794](https://github.com/openshift/cluster-network-operator/pull/2794)
* [OCPBUGS-61185](https://issues.redhat.com/browse/OCPBUGS-61185): Consume latest OCP API in 4.19 [#2790](https://github.com/openshift/cluster-network-operator/pull/2790)
* [OCPBUGS-60983](https://issues.redhat.com/browse/OCPBUGS-60983): Update CNO reviewers/approvers [#2765](https://github.com/openshift/cluster-network-operator/pull/2765)
* [OCPBUGS-60761](https://issues.redhat.com/browse/OCPBUGS-60761): Allow overriding OVN-Kubernetes configuration [#2781](https://github.com/openshift/cluster-network-operator/pull/2781)
* [OCPBUGS-60534](https://issues.redhat.com/browse/OCPBUGS-60534): Fix multus webhook match condition for spec changes [#2777](https://github.com/openshift/cluster-network-operator/pull/2777)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/f17bb7a589e7a9516c35aa0a3bd1bbc55f071ebd...9d49a4beb3693a53833a7af29e54567a97c2de2f)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/f1ff5dac295d07083e6c5decb80e157a9e87bcc9)

* [OCPBUGS-60796](https://issues.redhat.com/browse/OCPBUGS-60796): E2E: llc test fix:  Get updated Performance profile before modifying (#1381) [#1381](https://github.com/openshift/cluster-node-tuning-operator/pull/1381)
* [OCPBUGS-59633](https://issues.redhat.com/browse/OCPBUGS-59633): E2E add test to verify guaranteed pod is running after kubelet restart (#1365) [#1365](https://github.com/openshift/cluster-node-tuning-operator/pull/1365)
* [OCPBUGS-60855](https://issues.redhat.com/browse/OCPBUGS-60855): e2e: arm: add validation tests for hugepages with 4k and 64k kernelPageSize (#1383) [#1383](https://github.com/openshift/cluster-node-tuning-operator/pull/1383)
* E2E: skip stalld test case checking sched_fifo (#1385) [#1385](https://github.com/openshift/cluster-node-tuning-operator/pull/1385)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/61b6637d88503c5ddaace05a3e7a3f0b04d49183...f1ff5dac295d07083e6c5decb80e157a9e87bcc9)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/975ad328d5965a4e297b5b5eb0a7098976d50b09)

* [OCPBUGS-60152](https://issues.redhat.com/browse/OCPBUGS-60152): hypershift: add app label to csdriveroperators running in HCP [#604](https://github.com/openshift/cluster-storage-operator/pull/604)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/c09f715fa8592f79d2436218779614b13cd9c592...975ad328d5965a4e297b5b5eb0a7098976d50b09)


### [console](https://github.com/openshift/console/tree/98aa524f3d164a91250447fb4c7e5dd341687da7)

* NO-JIRA: Update CHANGELOG in relation to 4.18 plugin SDK package publish [#15457](https://github.com/openshift/console/pull/15457)
* [OCPBUGS-60420](https://issues.redhat.com/browse/OCPBUGS-60420): QuickStarts Link buttons to other quickstarts are duplicate [#15391](https://github.com/openshift/console/pull/15391)
* [OCPBUGS-50571](https://issues.redhat.com/browse/OCPBUGS-50571): Make sure CSP violations are only reported to telemetry once per day per browser [#15366](https://github.com/openshift/console/pull/15366)
* [OCPBUGS-60279](https://issues.redhat.com/browse/OCPBUGS-60279): Remove ancient `X-XSS-Protection` header [#15381](https://github.com/openshift/console/pull/15381)
* [OCPBUGS-60038](https://issues.redhat.com/browse/OCPBUGS-60038): Resolving API Version Conflicts in Tekton Pipeline Runs [#15354](https://github.com/openshift/console/pull/15354)
* [OCPBUGS-60294](https://issues.redhat.com/browse/OCPBUGS-60294): OpenShift Console's "Start Job" action overrides configured "backoffLimit" to "6" [#15382](https://github.com/openshift/console/pull/15382)
* NO-JIRA: Update CHANGELOG for latest 4.19 plugin SDK package publish [#15406](https://github.com/openshift/console/pull/15406)
* [OCPBUGS-60039](https://issues.redhat.com/browse/OCPBUGS-60039): Fix i18n string for event stream (again) [#15388](https://github.com/openshift/console/pull/15388)
* [Full changelog](https://github.com/openshift/console/compare/8e996e840bcb9ec7bc2820c73e0703d88e443121...98aa524f3d164a91250447fb4c7e5dd341687da7)


### [console-operator](https://github.com/openshift/console-operator/tree/43183002057ff8e97ff210b1af94f5d0b2d24cd9)

* [OCPBUGS-61119](https://issues.redhat.com/browse/OCPBUGS-61119): Consolidate telemetry values oscilation [#1037](https://github.com/openshift/console-operator/pull/1037)
* [Full changelog](https://github.com/openshift/console-operator/compare/3861c72d7928d87bafa94260b6a0038b21821843...43183002057ff8e97ff210b1af94f5d0b2d24cd9)


### [coredns](https://github.com/openshift/coredns/tree/4f64931403bf747b78bccb40ad877b08da534e23)

* [OCPBUGS-60246](https://issues.redhat.com/browse/OCPBUGS-60246): UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy [#148](https://github.com/openshift/coredns/pull/148)
* [Full changelog](https://github.com/openshift/coredns/compare/74776b850522c912db5fbadf7353f1eab669bd2a...4f64931403bf747b78bccb40ad877b08da534e23)


### [etcd, installer-etcd-artifacts](https://github.com/openshift/etcd/tree/eb0acd5c92a830da18d7d0d789f7a8ecac860620)

* [OCPBUGS-61041](https://issues.redhat.com/browse/OCPBUGS-61041): Revert "OCPBUGS-52181: Ensure cluster id changes during force-new-cluster" [#340](https://github.com/openshift/etcd/pull/340)
* [Full changelog](https://github.com/openshift/etcd/compare/a5421dfe551a2e9c911a75062a4cdeb7473f5c26...eb0acd5c92a830da18d7d0d789f7a8ecac860620)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/335be3a93cc6f48d84e5e6cd515ef748efb9664b)

* [OCPBUGS-61488](https://issues.redhat.com/browse/OCPBUGS-61488): UPSTREAM: &lt;carry&gt;: backporting fix for concurrent map iteration and write [#2456](https://github.com/openshift/kubernetes/pull/2456)
* [OCPBUGS-60510](https://issues.redhat.com/browse/OCPBUGS-60510): Unrevert bump to v1.32.8 [#2439](https://github.com/openshift/kubernetes/pull/2439)
* [OCPBUGS-61021](https://issues.redhat.com/browse/OCPBUGS-61021): UPSTREAM: &lt;carry&gt;: Revert "Rebase v1.32.8 to 4.19" [#2433](https://github.com/openshift/kubernetes/pull/2433)
* [OCPBUGS-60510](https://issues.redhat.com/browse/OCPBUGS-60510): Rebase v1.32.8 to 4.19 [#2412](https://github.com/openshift/kubernetes/pull/2412)
* [OCPBUGS-60074](https://issues.redhat.com/browse/OCPBUGS-60074): UPSTREAM: 132028: podresources: list: use active pods [#2391](https://github.com/openshift/kubernetes/pull/2391)
* [Full changelog](https://github.com/openshift/kubernetes/compare/138db5223eea57e4408598a32320896c216724e1...335be3a93cc6f48d84e5e6cd515ef748efb9664b)


### [hypershift](https://github.com/openshift/hypershift/tree/0bed2c5241652892d67d013a360ff4163207756d)

* [OCPBUGS-61206](https://issues.redhat.com/browse/OCPBUGS-61206): use common MCE konflux pipeline [#6748](https://github.com/openshift/hypershift/pull/6748)
* [OCPBUGS-61031](https://issues.redhat.com/browse/OCPBUGS-61031): [release-4.19]: set default goaway-chance to 0.001 [#6712](https://github.com/openshift/hypershift/pull/6712)
* [OCPBUGS-60483](https://issues.redhat.com/browse/OCPBUGS-60483): feat(validations): add wildcard support to DNS SAN conflict detection [#6648](https://github.com/openshift/hypershift/pull/6648)
* [OCPBUGS-60147](https://issues.redhat.com/browse/OCPBUGS-60147): Always compress and encode payload in token secret for inplace upgrades [#6606](https://github.com/openshift/hypershift/pull/6606)
* [OCPBUGS-60152](https://issues.redhat.com/browse/OCPBUGS-60152): add missing app label to some components [#6636](https://github.com/openshift/hypershift/pull/6636)
* [OCPBUGS-60125](https://issues.redhat.com/browse/OCPBUGS-60125): fix(OCPBUGS-60125): Allow HCCO to set registry managementState to Removed; delete VAP during HC deletion [#6689](https://github.com/openshift/hypershift/pull/6689)
* [OCPBUGS-60648](https://issues.redhat.com/browse/OCPBUGS-60648): Cache Azure KMS TokenCredential for ARO HCP and clarify CPO credentials cache naming [#6677](https://github.com/openshift/hypershift/pull/6677)
* [OCPBUGS-60100](https://issues.redhat.com/browse/OCPBUGS-60100): fix: add dynamic security context uid to 4.19 missing components [#6675](https://github.com/openshift/hypershift/pull/6675)
* [OCPBUGS-57141](https://issues.redhat.com/browse/OCPBUGS-57141): HCP payload doesn't respect multiple mirrors [#6517](https://github.com/openshift/hypershift/pull/6517)
* [CNTRLPLANE-1270](https://issues.redhat.com/browse/CNTRLPLANE-1270): Red Hat Konflux update control-plane-operator-4-19 [#6660](https://github.com/openshift/hypershift/pull/6660)
* Red Hat Konflux purge control-plane-operator-4-19 [#6659](https://github.com/openshift/hypershift/pull/6659)
* [CNTRLPLANE-1267](https://issues.redhat.com/browse/CNTRLPLANE-1267): conditional builds for mce-2.9 [#6657](https://github.com/openshift/hypershift/pull/6657)
* [OCPBUGS-57588](https://issues.redhat.com/browse/OCPBUGS-57588): Update PSA from v1beta1 to v1 [#6302](https://github.com/openshift/hypershift/pull/6302)
* [OCPBUGS-59805](https://issues.redhat.com/browse/OCPBUGS-59805): Router publish strategy related changes for IBM Cloud platform [#6490](https://github.com/openshift/hypershift/pull/6490)
* [OCPBUGS-59933](https://issues.redhat.com/browse/OCPBUGS-59933): Use the image reference for the cache in the image metadata provider [#6535](https://github.com/openshift/hypershift/pull/6535)
* [CNTRLPLANE-1016](https://issues.redhat.com/browse/CNTRLPLANE-1016): Support day2 tags changes for AWS default SecurityGroup [#6455](https://github.com/openshift/hypershift/pull/6455)
* [Full changelog](https://github.com/openshift/hypershift/compare/7ed7c357e69292e169686f009a516c4bad55a0ff...0bed2c5241652892d67d013a360ff4163207756d)


### [insights-operator](https://github.com/openshift/insights-operator/tree/e4df617aa9b4b586e21afcd4b92270ab52392461)

* [OCPBUGS-61485](https://issues.redhat.com/browse/OCPBUGS-61485): virt launcher logs gatherer (#1132) [#1132](https://github.com/openshift/insights-operator/pull/1132)
* feat: add permissions to gather clusterrole (#1112) [#1112](https://github.com/openshift/insights-operator/pull/1112)
* fix: incorrect anonymization of domains (#1114) [#1114](https://github.com/openshift/insights-operator/pull/1114)
* [Full changelog](https://github.com/openshift/insights-operator/compare/8fffce910f39cf33efa97a24a894c84cf3f3d1f6...e4df617aa9b4b586e21afcd4b92270ab52392461)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/dd0126864cf2196ac84b4c1fe862178b70aebc7a)

* [OCPBUGS-61096](https://issues.redhat.com/browse/OCPBUGS-61096): bump openshift/api [#1411](https://github.com/openshift/machine-api-operator/pull/1411)
* fix for OCPBUGS-60427: userDataSecret.name should be a Required value on AWS [#1403](https://github.com/openshift/machine-api-operator/pull/1403)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/7cf7a446c086a97cb15766cb100b468573192b8e...dd0126864cf2196ac84b4c1fe862178b70aebc7a)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/37499cebe4e30aea812eb2a0e0cb5ed9ee961c5f)

* [OCPBUGS-61284](https://issues.redhat.com/browse/OCPBUGS-61284): Make MCN e2e tests blocking [#5275](https://github.com/openshift/machine-config-operator/pull/5275)
* [OCPBUGS-60110](https://issues.redhat.com/browse/OCPBUGS-60110): Enable debug logging for nodeip-configuration [#5221](https://github.com/openshift/machine-config-operator/pull/5221)
* [OCPBUGS-59871](https://issues.redhat.com/browse/OCPBUGS-59871): Understand and eliminate noisy logs for MCN [#5199](https://github.com/openshift/machine-config-operator/pull/5199)
* [OCPBUGS-60767](https://issues.redhat.com/browse/OCPBUGS-60767): Update the OnClusterBuild payload tests to reflect the validation rule requiring MCP & MOSC names to match [#5258](https://github.com/openshift/machine-config-operator/pull/5258)
* [OCPBUGS-60265](https://issues.redhat.com/browse/OCPBUGS-60265): Reintroduce cronjob that deletes MCN v1alpha1 CRD [#5243](https://github.com/openshift/machine-config-operator/pull/5243)
* [OCPBUGS-60224](https://issues.redhat.com/browse/OCPBUGS-60224): Invalid architecture value found in annotation during 4.19 update [#5227](https://github.com/openshift/machine-config-operator/pull/5227)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/1b3ce4ea5b1943283ed703f55800a8f08d26e4a8...37499cebe4e30aea812eb2a0e0cb5ed9ee961c5f)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/345d64d597581eb0cb3cd2c1cf06124446da79a5)

* NO-JIRA: [release-4.19] OCPBUGS-60296: fix legend height to avoid scroll overlap [#498](https://github.com/openshift/monitoring-plugin/pull/498)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/91b1cbb53007ae7ccd8f81d58f4485e34c28cb2d...345d64d597581eb0cb3cd2c1cf06124446da79a5)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/e176bf605757d52e7ea8a33bb9e243bf67ccba97)

* [OCPBUGS-59760](https://issues.redhat.com/browse/OCPBUGS-59760): warn if tmp is `noexec` (#1234) [#1234](https://github.com/openshift/oc-mirror/pull/1234)
* [OCPBUGS-59976](https://issues.redhat.com/browse/OCPBUGS-59976): v2/operator: support manifest lists with one arch (#1230) [#1230](https://github.com/openshift/oc-mirror/pull/1230)
* [OCPBUGS-59949](https://issues.redhat.com/browse/OCPBUGS-59949): fixes the result output showing the wrong total (#1237) [#1237](https://github.com/openshift/oc-mirror/pull/1237)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/e91ec32c8c0195393280c734ba46de5a31637479...e176bf605757d52e7ea8a33bb9e243bf67ccba97)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/5b3063ff149f290bebca0783fc508dfbf07689a5)

* [OCPBUGS-56614](https://issues.redhat.com/browse/OCPBUGS-56614): legacy image pull secret rollback controller [#384](https://github.com/openshift/openshift-controller-manager/pull/384)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/a672407574befa9faf6a56078d6852229701f8c6...5b3063ff149f290bebca0783fc508dfbf07689a5)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/e42f5c26092b9dea5856807d314f57e1886d31d7)

* [OCPBUGS-61363](https://issues.redhat.com/browse/OCPBUGS-61363): [4.19] e2e stability fixes [#1079](https://github.com/openshift/operator-framework-olm/pull/1079)
* [OCPBUGS-60525](https://issues.redhat.com/browse/OCPBUGS-60525): Add NetworkPolicy as a supported kind [#1047](https://github.com/openshift/operator-framework-olm/pull/1047)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/8bcf1556a550efa7bb380ec315c077cf29438695...e42f5c26092b9dea5856807d314f57e1886d31d7)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/6ff66743c4fbd0c413cf4bb9933a1eb510aa42e4)

* [OCPBUGS-48709](https://issues.redhat.com/browse/OCPBUGS-48709), [OCPBUGS-60797](https://issues.redhat.com/browse/OCPBUGS-60797), [OCPBUGS-60979](https://issues.redhat.com/browse/OCPBUGS-60979): DownStream Merge Sync from 4.20 [08-22-2025] [#2733](https://github.com/openshift/ovn-kubernetes/pull/2733)
* [OCPBUGS-48709](https://issues.redhat.com/browse/OCPBUGS-48709): DownStream Merge Sync from 4.20 [08-06-2025] [#2704](https://github.com/openshift/ovn-kubernetes/pull/2704)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/e24389403dd961a14b6512e40cda7e3e5d0a4b20...6ff66743c4fbd0c413cf4bb9933a1eb510aa42e4)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/ff6e9a8e1ea2eebb552cdc64974f8f6e7e5cbd1a)

* [OCPBUGS-61134](https://issues.redhat.com/browse/OCPBUGS-61134): Use OS_GIT_VERSION in Makefile when found (for Konflux builds) [#124](https://github.com/openshift/machine-api-provider-powervs/pull/124)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/87f8e306940e6b0231e6b8fb655ca1e6f21ba95a...ff6e9a8e1ea2eebb552cdc64974f8f6e7e5cbd1a)


### [tests](https://github.com/openshift/origin/tree/6835ae8654ce734d4c171b31fef245db0a0e25d6)

* [OCPBUGS-61666](https://issues.redhat.com/browse/OCPBUGS-61666): chore(test/extended/prometheus): bump the series limit of total series sent via telemetry from each cluster [#30249](https://github.com/openshift/origin/pull/30249)
* [OCPBUGS-59512](https://issues.redhat.com/browse/OCPBUGS-59512): disruptioninclusterapiserver: bump timeout to 10 mins [#29999](https://github.com/openshift/origin/pull/29999)
* [OCPBUGS-60510](https://issues.redhat.com/browse/OCPBUGS-60510): Bump to latest openshift/kubernetes (v1.32.8) [#30229](https://github.com/openshift/origin/pull/30229)
* [OCPBUGS-60244](https://issues.redhat.com/browse/OCPBUGS-60244): Wait 30s after the upgrade is complete to validate workloads [#30144](https://github.com/openshift/origin/pull/30144)
* [OCPBUGS-60797](https://issues.redhat.com/browse/OCPBUGS-60797): Don't check for remote node subnet BGP routes [#30156](https://github.com/openshift/origin/pull/30156)
* NO-JIRA: Update extended/networking OWNERS [#30088](https://github.com/openshift/origin/pull/30088)
* [OCPBUGS-60569](https://issues.redhat.com/browse/OCPBUGS-60569): images/tests: Remove rteval [#30124](https://github.com/openshift/origin/pull/30124)
* [OCPBUGS-60429](https://issues.redhat.com/browse/OCPBUGS-60429): Load our MCO's OTE binary [#30043](https://github.com/openshift/origin/pull/30043)
* [OCPBUGS-59757](https://issues.redhat.com/browse/OCPBUGS-59757): OCPBUGS-59758: Improve MCN test stability [#30018](https://github.com/openshift/origin/pull/30018)
* [OCPBUGS-60117](https://issues.redhat.com/browse/OCPBUGS-60117): Enable test for LGW L2 [#30052](https://github.com/openshift/origin/pull/30052)
* [OCPBUGS-60234](https://issues.redhat.com/browse/OCPBUGS-60234): Move the legacy container failures [#30073](https://github.com/openshift/origin/pull/30073)
* [Full changelog](https://github.com/openshift/origin/compare/1a15c85aaa9f0b6c1e7ed2f9776a6c1d98b5cb1f...6835ae8654ce734d4c171b31fef245db0a0e25d6)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/f33d67f8f38e33af45efcb25003a001a17165cdc)

* [OCPBUGS-61650](https://issues.redhat.com/browse/OCPBUGS-61650): Fix unit tests [#69](https://github.com/openshift/cluster-api-provider-vsphere/pull/69)
* [OCPBUGS-56962](https://issues.redhat.com/browse/OCPBUGS-56962): Update manifests gen to remove reliance on admission registration v1beta1 [#61](https://github.com/openshift/cluster-api-provider-vsphere/pull/61)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/8c61ba3dce7d8e838e41827576c18f4a092f36e4...f33d67f8f38e33af45efcb25003a001a17165cdc)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/4f3a1da10d7f060f4b6530e70bd03892d9c43277)

* [OCPBUGS-60535](https://issues.redhat.com/browse/OCPBUGS-60535): Check for number of FailureDomain-s in GetVCenter() [#188](https://github.com/openshift/vsphere-problem-detector/pull/188)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/32b15d87f5fd387dd5d04b96b7250a353240bf92...4f3a1da10d7f060f4b6530e70bd03892d9c43277)