# 4.19.0-okd-scos.ec.9

Created: 2025-04-25 18:57:59 +0000 UTC

Image Digest: `sha256:7787f64ca7e0dadf641ce1600214f6cc263fd2abbc5c8cf534bda1fdeab39d55`

Promoted from registry.ci.openshift.org/origin/release-scos:4.19.0-0.okd-scos-2025-04-24-123954


## Changes from 4.19.0-okd-scos.ec.8

### Components

* Kubectl 1.32.1
* Kubernetes 1.32.3
* Kubernetes Tests 1.32.3
* CentOS Stream CoreOS upgraded from 9.0.20250407-0 to 9.0.20250419-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| ConsolePluginContentSecurityPolicy <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| GatewayAPI <br/> (6 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| MetricsCollectionProfiles <br/> (5 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| OnClusterBuild <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| RouteExternalCertificate <br/> (19 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| MachineAPIMigration <br/> (0 tests)| Disabled| Disabled| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled<br/>(Changed) |
| DualReplica <br/> (0 tests)| Disabled| Disabled| Enabled| Enabled| Disabled<br/>(Changed)| Disabled<br/>(Changed) |
| ExternalOIDCWithUIDAndExtraClaimMappings <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### Rebuilt images without code change

* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [227f7537](https://github.com/openshift/cluster-autoscaler-operator/commit/227f7537c3b459d4940522809df60b2dfca738ed) `sha256:bf263f8c7fee8a12514cdf9a068026f1722cc181c21cfd8b9ec253121a7005e8`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [5f66a3e1](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/5f66a3e13fd98eaaa0941e8e0724b1f56a797d6d) `sha256:80ef8dfc8fc962acd6c74074927206e8b7539cb42316fba0e5cff71646183016`
* [docker-builder](https://github.com/openshift/builder) git [f2e5d601](https://github.com/openshift/builder/commit/f2e5d60196778fd5452b345d93fc821218e3d2f3) `sha256:f9f576b5c04fb63f1fcf94159f2168e20ae2607fb253e2b05e70d2eb30ddee77`
* [haproxy-router](https://github.com/openshift/router) git [b41f9d05](https://github.com/openshift/router/commit/b41f9d05467fb7b3f6c2dafa6ac4b5e25164c0b6) `sha256:0cbbd3c32e718cccc2c970a165c5923de8628f9f262cfe549925211ec782e718`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [3342e1e9](https://github.com/openshift/insights-runtime-extractor/commit/3342e1e93f9b287e091089d42a44de10f7a78a36) `sha256:7dc348af08737dfeb8618d10523f6fd504560c9911fd9d26e718dcb6040aa25a`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [3342e1e9](https://github.com/openshift/insights-runtime-extractor/commit/3342e1e93f9b287e091089d42a44de10f7a78a36) `sha256:c1f4a81ce4f01ee18acba6e6ba16da6554b3bea929492634e09d3eec0998c7cb`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [4c521b09](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/4c521b09f4dc55ac69234419e083f3815646f4a9) `sha256:fdf6c740f707f050316a6586f1e1d6d9b17690a7e53507309cf9469b56e2508f`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [85f6eb27](https://github.com/openshift/openshift-apiserver/commit/85f6eb2719a0440565c8b7bf00de954eeb12fdd9) `sha256:8b8894e862326d49b438a89752fe26ba55e9c97b0b750c05c75ad635a2c1db84`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [f681413d](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/f681413d902e6634afd9d4ae80fd3b6e915f6585) `sha256:493739a84249d4e2d037e3948011a375ef1dc39edc1b3287392fc42c659040e6`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/3441575fd80a18c648c2d7461b3cfaf9d8620852)

* [MGMT-20324](https://issues.redhat.com/browse/MGMT-20324): Fix day2 add hosts with P/Z CPU architectures [#7527](https://github.com/openshift/assisted-service/pull/7527)
* [Full changelog](https://github.com/openshift/assisted-service/compare/7e3ad833ea507a1809fd99e5a21c594580b801e4...3441575fd80a18c648c2d7461b3cfaf9d8620852)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/0a2f134bb497dc0435c28f2a6d1080c1e70ddc28)

* NO-ISSUE: Apply konflux migration (#1105) [#1105](https://github.com/openshift/assisted-installer/pull/1105)
* NO-ISSUE: Update Konflux references (#1103) [#1103](https://github.com/openshift/assisted-installer/pull/1103)
* NO-ISSUE: Update Konflux references (#1095) [#1095](https://github.com/openshift/assisted-installer/pull/1095)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/873dfa463285c3604b402dc8adeedca3c7ef7939...0a2f134bb497dc0435c28f2a6d1080c1e70ddc28)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/7ccbc0a03e2ef02c33fa2da13cd8249426c5b600)

* NO-ISSUE: Update Konflux references (#976) [#976](https://github.com/openshift/assisted-installer-agent/pull/976)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/731bc830a3d640159865e2199f9b93e6da431add...7ccbc0a03e2ef02c33fa2da13cd8249426c5b600)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/42c0a09d410e0762a5e446b4305fd6d803d8ad98)

* NO-ISSUE: ISOBuilder-Add support-tools image for oc debug [#77](https://github.com/openshift/agent-installer-utils/pull/77)
* NO-ISSUE: ISOBuilder- Update README.md [#76](https://github.com/openshift/agent-installer-utils/pull/76)
* NO-ISSUE: ISOBuilder: Add Clean targets. [#69](https://github.com/openshift/agent-installer-utils/pull/69)
* [AGENT-1161](https://issues.redhat.com/browse/AGENT-1161): Update ISOBuilder dependencies [#75](https://github.com/openshift/agent-installer-utils/pull/75)
* [AGENT-1154](https://issues.redhat.com/browse/AGENT-1154): Dev docs for ISOBuilder [#74](https://github.com/openshift/agent-installer-utils/pull/74)
* NO-ISSUE: Remove extra doneFunc() call [#73](https://github.com/openshift/agent-installer-utils/pull/73)
* [AGENT-1188](https://issues.redhat.com/browse/AGENT-1188): Add MBR to El Torito ISO to support USB boot alongside VM [#72](https://github.com/openshift/agent-installer-utils/pull/72)
* NO-ISSUE: ISOBuilder: Use libpod registry [#71](https://github.com/openshift/agent-installer-utils/pull/71)
* [AGENT-1114](https://issues.redhat.com/browse/AGENT-1114): Check connectivity to rendezvous node and improvements [#64](https://github.com/openshift/agent-installer-utils/pull/64)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/a37c1e05825a536f4496e656a03358ad4f3b5887...42c0a09d410e0762a5e446b4305fd6d803d8ad98)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/1e82311cc3ab84cb3481fb018981d304e075ce4e)

* [OCPBUGS-52573](https://issues.redhat.com/browse/OCPBUGS-52573): Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.19 [#74](https://github.com/openshift/apiserver-network-proxy/pull/74)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/0e116160848d1eb189c5b5f77330f36e20c7e450...1e82311cc3ab84cb3481fb018981d304e075ce4e)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/005a7656f03fa9b993bceffdc85ff5918e16111a)

* [OCPBUGS-54567](https://issues.redhat.com/browse/OCPBUGS-54567): UPSTREAM: 5374: add marketType field validation [#548](https://github.com/openshift/cluster-api-provider-aws/pull/548)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/2d79247dca37395f1bbdf6919665a7cc4692a3b8...005a7656f03fa9b993bceffdc85ff5918e16111a)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/10b04b8abab5b134562c4d9d6bb7294023f8ef10)

* NO-JIRA: build only needed cmd in container image [#329](https://github.com/openshift/csi-operator/pull/329)
* [OCPBUGS-54382](https://issues.redhat.com/browse/OCPBUGS-54382): Correct ASH driver inject env config [#376](https://github.com/openshift/csi-operator/pull/376)
* [Full changelog](https://github.com/openshift/csi-operator/compare/582e1dce1e8bd80df6f294cb965256aa7c1a78ad...10b04b8abab5b134562c4d9d6bb7294023f8ef10)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/7109d6b4eaefda87b235c88b92c2e17fd3dd0117)

* [OCPBUGS-55162](https://issues.redhat.com/browse/OCPBUGS-55162): UPSTREAM: 8920: Fix azure stack hub volume detach failed [#142](https://github.com/openshift/cloud-provider-azure/pull/142)
* [OCPBUGS-51090](https://issues.redhat.com/browse/OCPBUGS-51090): Fix panic for GetZoneByNodeName on Azure Stack [#141](https://github.com/openshift/cloud-provider-azure/pull/141)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/cc04736128a2ef60e215809942de2b402296c64c...7109d6b4eaefda87b235c88b92c2e17fd3dd0117)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/4608eb4150f6d0ad1c63b49e087dc948cf836643)

* [CNTRLPLANE-373](https://issues.redhat.com/browse/CNTRLPLANE-373): Add Support for UserAssignedIdentityCredential for Kubernetes-KMS [#14](https://github.com/openshift/azure-kubernetes-kms/pull/14)
* [OCPBUGS-45592](https://issues.redhat.com/browse/OCPBUGS-45592): Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.19 [#9](https://github.com/openshift/azure-kubernetes-kms/pull/9)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/372d6f2c4127eb7218fe92f1f378bcdde57753e1...4608eb4150f6d0ad1c63b49e087dc948cf836643)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/dd3ca5704052ab83cc829e9be33b127d0d764a2a)

* [OCPBUGS-54617](https://issues.redhat.com/browse/OCPBUGS-54617): Update eviction policy for Spot VMs from Deallocate to Delete [#138](https://github.com/openshift/machine-api-provider-azure/pull/138)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/5d3ad0834085f96dd98bb9a1291ca845dba27972...dd3ca5704052ab83cc829e9be33b127d0d764a2a)


### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/9e7170f249a7e61769886d81869ab577949863ab)

* Remove ipam-controller-manager deployment [#43](https://github.com/openshift/cluster-api-provider-metal3/pull/43)
* Add metal3 infra group to IPAM manager RBAC [#42](https://github.com/openshift/cluster-api-provider-metal3/pull/42)
* Remove IPAM deployment [#39](https://github.com/openshift/cluster-api-provider-metal3/pull/39)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/fbcbf9a7597a0c943624cd4415da69612040cfa3...9e7170f249a7e61769886d81869ab577949863ab)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/08aa270e20db77b237306b3f3700d6b2ad654abc)

* [OCPBUGS-52203](https://issues.redhat.com/browse/OCPBUGS-52203): Find GCP KMS keys [#9597](https://github.com/openshift/installer/pull/9597)
* [CORS-3855](https://issues.redhat.com/browse/CORS-3855): Remove ARO build flag from installer [#9124](https://github.com/openshift/installer/pull/9124)
* [OCPBUGS-54902](https://issues.redhat.com/browse/OCPBUGS-54902): Custom-DNS: Update Kubeconfig and Infra CR based on private or public cluster [#9656](https://github.com/openshift/installer/pull/9656)
* NO-JIRA: Update SCOS 4.19 bootimage metadata to 9.0.20250411-0 [#9657](https://github.com/openshift/installer/pull/9657)
* [CORS-3870](https://issues.redhat.com/browse/CORS-3870): validate duplicate AZs if no subnet roles at all or only for subnets of the same role [#9663](https://github.com/openshift/installer/pull/9663)
* [CORS-3864](https://issues.redhat.com/browse/CORS-3864), [CORS-3959](https://issues.redhat.com/browse/CORS-3959): CAPI AzureStack Support, Take II [#9666](https://github.com/openshift/installer/pull/9666)
* [OCPEDGE-1749](https://issues.redhat.com/browse/OCPEDGE-1749): [TNF] Updated bare-metal init sequence to detach control-plane nodes in Two Node OpenShift. [#9661](https://github.com/openshift/installer/pull/9661)
* Revert "Merge pull request #9645 from patrickdillon/azurestack-mark-iii" [#9665](https://github.com/openshift/installer/pull/9665)
* [CORS-3864](https://issues.redhat.com/browse/CORS-3864), [CORS-3959](https://issues.redhat.com/browse/CORS-3959): CAPI-based AzureStack Installs [#9645](https://github.com/openshift/installer/pull/9645)
* [CORS-3870](https://issues.redhat.com/browse/CORS-3870): add validations for subnets field with AWS API [#9599](https://github.com/openshift/installer/pull/9599)
* [CORS-3871](https://issues.redhat.com/browse/CORS-3871), [CORS-3872](https://issues.redhat.com/browse/CORS-3872), [CORS-3873](https://issues.redhat.com/browse/CORS-3873): place the cluster components on the assigned byo subnets if any [#9633](https://github.com/openshift/installer/pull/9633)
* [CORS-3278](https://issues.redhat.com/browse/CORS-3278): IBMCloud: Remove IBM Cloud TF provider [#9649](https://github.com/openshift/installer/pull/9649)
* [OCPBUGS-54606](https://issues.redhat.com/browse/OCPBUGS-54606): convert OVNKubernetes networkType to correct format [#9653](https://github.com/openshift/installer/pull/9653)
* [CORS-3936](https://issues.redhat.com/browse/CORS-3936): Add support for public-only networking [#9544](https://github.com/openshift/installer/pull/9544)
* [CORS-3278](https://issues.redhat.com/browse/CORS-3278): IBMCloud: Add DestroyBootstrap for leftover CAPI resources [#9636](https://github.com/openshift/installer/pull/9636)
* [CORS-3854](https://issues.redhat.com/browse/CORS-3854): Enable option to set boot diagnostics [#9125](https://github.com/openshift/installer/pull/9125)
* [CORS-3278](https://issues.redhat.com/browse/CORS-3278): Switch IBMCloud to CAPI [#9652](https://github.com/openshift/installer/pull/9652)
* [CORS-3867](https://issues.redhat.com/browse/CORS-3867): fix CRD descriptor to mention required BootstrapNode role [#9655](https://github.com/openshift/installer/pull/9655)
* [CORS-3886](https://issues.redhat.com/browse/CORS-3886): azure: Set use managed identity to false [#9648](https://github.com/openshift/installer/pull/9648)
* [OCPBUGS-54319](https://issues.redhat.com/browse/OCPBUGS-54319): oci-eval-user-data uses dmidecode which is not supported on ppc64le or s390x [#9608](https://github.com/openshift/installer/pull/9608)
* [AGENT-1159](https://issues.redhat.com/browse/AGENT-1159): agent docs update [#9627](https://github.com/openshift/installer/pull/9627)
* [Full changelog](https://github.com/openshift/installer/compare/7acba9c1cfe126708871e7df1d3c66e708c4f4f6...08aa270e20db77b237306b3f3700d6b2ad654abc)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/b94d92874ab36d9d3ee26dda59f172611fca18fb)

* [OPNET-629](https://issues.redhat.com/browse/OPNET-629): Use HAProxy monitor endpoint instead of API [#343](https://github.com/openshift/baremetal-runtimecfg/pull/343)
* [OCPBUGS-48469](https://issues.redhat.com/browse/OCPBUGS-48469): Pass in platform as a optional parameter to runtimecfg cmds [#345](https://github.com/openshift/baremetal-runtimecfg/pull/345)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/22c15212b8236a490eeda4d0dbfa00235af8a8c8...b94d92874ab36d9d3ee26dda59f172611fca18fb)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/306c7b382cea28852f7d41332d4a41aa04a30f08)

* [OCPBUGS-52164](https://issues.redhat.com/browse/OCPBUGS-52164): Add the generation of initrd.addrsize and generic.ins file for ABI Day2 Artifacts [#2007](https://github.com/openshift/oc/pull/2007)
* NO-JIRA: `adm release new`: simplify `writePayload` [#2008](https://github.com/openshift/oc/pull/2008)
* [COS-3023](https://issues.redhat.com/browse/COS-3023): Fixing rpmdiff permissions when running in container [#2006](https://github.com/openshift/oc/pull/2006)
* [Full changelog](https://github.com/openshift/oc/compare/1719de833ae8e8a272ff55ca2a80489e6c791d92...306c7b382cea28852f7d41332d4a41aa04a30f08)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/9c3346aea5a7f9a38713c09d11605b8ee825446c)

* [OCPBUGS-55204](https://issues.redhat.com/browse/OCPBUGS-55204): Revert "Merge pull request #848 from jstuever/OCPBUGS-53429" [#854](https://github.com/openshift/cloud-credential-operator/pull/854)
* [OCPBUGS-53429](https://issues.redhat.com/browse/OCPBUGS-53429): Render: configure proxy on bootstrap static pod [#848](https://github.com/openshift/cloud-credential-operator/pull/848)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d66761c098427c1a700d984c78d03f785d233d83...9c3346aea5a7f9a38713c09d11605b8ee825446c)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/98ae311b854223a99e258d3c3369455d983de239)

* [OCPBUGS-45891](https://issues.redhat.com/browse/OCPBUGS-45891): Increase API call timeout to 30 second [#168](https://github.com/openshift/cloud-network-config-controller/pull/168)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Remove ARO HCP MIv2 authentication from CNCC [#169](https://github.com/openshift/cloud-network-config-controller/pull/169)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller [#166](https://github.com/openshift/cloud-network-config-controller/pull/166)
* [OSASINFRA-3755](https://issues.redhat.com/browse/OSASINFRA-3755): Prefer CA cert from credentials secret [#167](https://github.com/openshift/cloud-network-config-controller/pull/167)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/5985f3b31274c555b32ac59aa0dfcbca877a3235...98ae311b854223a99e258d3c3369455d983de239)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/ceeb021d7562cf3d669ed7293f46b2a50e848c73)

* [OCPBUGS-51203](https://issues.redhat.com/browse/OCPBUGS-51203): fix logo not being correctly aligned in Webkit [#758](https://github.com/openshift/cluster-authentication-operator/pull/758)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/8febe2bd01938702d5480bbd69c1c9fef21cd624...ceeb021d7562cf3d669ed7293f46b2a50e848c73)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/8eef719bfba1138fa78925ae040d9e25c50242e0)

* [OCPCLOUD-2835](https://issues.redhat.com/browse/OCPCLOUD-2835): rebase on upstream 1.32.0 release [#340](https://github.com/openshift/kubernetes-autoscaler/pull/340)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/b1bbcd4e16fa4e009a17da4d53493e93cad4da12...8eef719bfba1138fa78925ae040d9e25c50242e0)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/c50ed49c1735aaef836db5d0f7f6aa1ee57e4d6d)

* [METAL-966](https://issues.redhat.com/browse/METAL-966): Reapply "Merge pull request #175 from honza/add-metal3" [#284](https://github.com/openshift/cluster-capi-operator/pull/284)
* [OCPCLOUD-2648](https://issues.redhat.com/browse/OCPCLOUD-2648): Machine sync controller deletion logic [#278](https://github.com/openshift/cluster-capi-operator/pull/278)
* [OCPCLOUD-2713](https://issues.redhat.com/browse/OCPCLOUD-2713): Handle credential fields in both mapi2capi and capi2mapi [#282](https://github.com/openshift/cluster-capi-operator/pull/282)
* [OCPCLOUD-2564](https://issues.redhat.com/browse/OCPCLOUD-2564): add migration controllers [#268](https://github.com/openshift/cluster-capi-operator/pull/268)
* [OCPBUGS-54972](https://issues.redhat.com/browse/OCPBUGS-54972): Revert #175 "METAL-966: Add metal3 provider" [#283](https://github.com/openshift/cluster-capi-operator/pull/283)
* [OCPCLOUD-2880](https://issues.redhat.com/browse/OCPCLOUD-2880): label selector and labels conversion, fixes to sync controllers and conversions [#281](https://github.com/openshift/cluster-capi-operator/pull/281)
* [METAL-966](https://issues.redhat.com/browse/METAL-966): Add metal3 provider [#175](https://github.com/openshift/cluster-capi-operator/pull/175)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/21a29a4ecbe2059071653ba2c8807ef8ef8693c0...c50ed49c1735aaef836db5d0f7f6aa1ee57e4d6d)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/7ddcbe3dd3a7b836ec0c882032944dcded78f866)

* [OCPBUGS-54427](https://issues.redhat.com/browse/OCPBUGS-54427): Add rbac leases rbac for cloud-provider on Azure stack hub [#387](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/387)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/09f143bfcc676ab16c216515873aa236c2e0a5e7...7ddcbe3dd3a7b836ec0c882032944dcded78f866)


### [cluster-config-api](https://github.com/openshift/api/tree/eb41266d115eb77a569f2072222e7ea37db0a95b)

* [OCPCLOUD-2914](https://issues.redhat.com/browse/OCPCLOUD-2914): Add MAPI to CAPI migration to TechPreview [#2279](https://github.com/openshift/api/pull/2279)
* [OCPEDGE-1775](https://issues.redhat.com/browse/OCPEDGE-1775): Enable separation of conflicting enum values, and drop DualReplica to DevPreview [#2283](https://github.com/openshift/api/pull/2283)
* [OAPE-92](https://issues.redhat.com/browse/OAPE-92): Promote RouteExternalCertificate feature gate to default feature set [#2268](https://github.com/openshift/api/pull/2268)
* [CONSOLE-4523](https://issues.redhat.com/browse/CONSOLE-4523): Lift Featuregate for the ConsolePlugin ContentSecurityPolicy API [#2275](https://github.com/openshift/api/pull/2275)
* [MON-4071](https://issues.redhat.com/browse/MON-4071): GA `MetricsCollectionProfiles` [#2286](https://github.com/openshift/api/pull/2286)
* [CNTRLPLANE-332](https://issues.redhat.com/browse/CNTRLPLANE-332): Add uid and extra claim mappings for external OIDC configuration [#2234](https://github.com/openshift/api/pull/2234)
* Promote OnClusterBuild featuregate to default [#2192](https://github.com/openshift/api/pull/2192)
* trt-2080: check devlopment start date for latest release [#2285](https://github.com/openshift/api/pull/2285)
* [NE-2009](https://issues.redhat.com/browse/NE-2009): Re-enable GatewayAPI featuregate in Default featureset [#2281](https://github.com/openshift/api/pull/2281)
* [TRT-2081](https://issues.redhat.com/browse/TRT-2081): Revert #2261 "NE-2009: Enable GatewayAPI featuregate in Default featureset" [#2277](https://github.com/openshift/api/pull/2277)
* Temporarily pin feature-gate-analyzer to 4.19 [#2276](https://github.com/openshift/api/pull/2276)
* image/v1/types: improve documentation [#2240](https://github.com/openshift/api/pull/2240)
* [NE-2009](https://issues.redhat.com/browse/NE-2009): Enable GatewayAPI featuregate in Default featureset [#2261](https://github.com/openshift/api/pull/2261)
* [Full changelog](https://github.com/openshift/api/compare/8fcc4e71758aefadc7bf7da355ca8619bcc1d34d...eb41266d115eb77a569f2072222e7ea37db0a95b)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/21abc4564158fb81bcd8c617b6cd4d8cf81f9b6c)

* [OCPBUGS-52744](https://issues.redhat.com/browse/OCPBUGS-52744): Bump golang.org/x/crypto [#433](https://github.com/openshift/cluster-config-operator/pull/433)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/cbfd00a8204d5ae5d755edf05b7c26a60218a9b7...21abc4564158fb81bcd8c617b6cd4d8cf81f9b6c)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/1dbf0c7a5d513dedcc18de0ee5fb34e18b8b53f2)

* [OCPBUGS-55017](https://issues.redhat.com/browse/OCPBUGS-55017): Wait for operators to be stable for 2 minutes before accepting cluster is stable [#358](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/358)
* [OAPE-163](https://issues.redhat.com/browse/OAPE-163): Extend E2E tests for MachineNamePrefix when the field is reset [#355](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/355)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/3698f07f6b9ccb575a3d7950a992c65f6711f3c0...1dbf0c7a5d513dedcc18de0ee5fb34e18b8b53f2)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/145959693ebe5a4412c468f4ec5cd4163cb68acc)

* [OCPEDGE-1773](https://issues.redhat.com/browse/OCPEDGE-1773): Fix arbiter field in install-config [#1409](https://github.com/openshift/cluster-etcd-operator/pull/1409)
* [OCPBUGS-53512](https://issues.redhat.com/browse/OCPBUGS-53512): fix CVE-2025-30204 [#1412](https://github.com/openshift/cluster-etcd-operator/pull/1412)
* [OCPBUGS-54222](https://issues.redhat.com/browse/OCPBUGS-54222): increase etcdGRPCRequestsSlow duration [#1402](https://github.com/openshift/cluster-etcd-operator/pull/1402)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/3ed824228e2285bf2bf0df7aa8edcfc11c59c32d...145959693ebe5a4412c468f4ec5cd4163cb68acc)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/85ac017f7c393b18696bf77a6e6415d05418dd0b)

* [OSASINFRA-3747](https://issues.redhat.com/browse/OSASINFRA-3747): Prefer CA cert from credentials secret [#1190](https://github.com/openshift/cluster-image-registry-operator/pull/1190)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/ade277a9d3c2a8fac34036613ec7627e11b01031...85ac017f7c393b18696bf77a6e6415d05418dd0b)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/2e6bd66d4ad11f58b8dea2677a94751bb372dca5)

* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Remove ARO HCP MIv2 Authentication for Ingress Operator [#1222](https://github.com/openshift/cluster-ingress-operator/pull/1222)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Add new Azure authentication type for managed Azure HCP for cluster-ingress [#1191](https://github.com/openshift/cluster-ingress-operator/pull/1191)
* [NE-2009](https://issues.redhat.com/browse/NE-2009): Relax pod bound validating admission rule for HyperShift [#1221](https://github.com/openshift/cluster-ingress-operator/pull/1221)
* [NE-1969](https://issues.redhat.com/browse/NE-1969): Set Degraded=True if unmanaged Gateway API CRDs exist [#1205](https://github.com/openshift/cluster-ingress-operator/pull/1205)
* [NE-1957](https://issues.redhat.com/browse/NE-1957): Add Gateway API DNS Feature e2e tests [#1213](https://github.com/openshift/cluster-ingress-operator/pull/1213)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/6897ce1b5c8f8292ac77218ff2e15043f23b83c5...2e6bd66d4ad11f58b8dea2677a94751bb372dca5)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/93fe617f5239c8ef3933eb4ef1d04695ce3ab630)

* Revert "OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects" [#1830](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1830)
* [OCPBUGS-43777](https://issues.redhat.com/browse/OCPBUGS-43777): certrotationcontroller: run tests which runs deployment and creates projects [#1759](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1759)
* [CNTRLPLANE-347](https://issues.redhat.com/browse/CNTRLPLANE-347): Issue short lived certificates if ShortCertRotation featuregate is enabled [#1823](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1823)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/963692e0d0b46d52236ca27f1adf20aebec2c25d...93fe617f5239c8ef3933eb4ef1d04695ce3ab630)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/3ec30377ffff951dc9c0fc2257d290e4b4958465)

* [OCPBUGS-45390](https://issues.redhat.com/browse/OCPBUGS-45390): Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.19 [#56](https://github.com/openshift/cluster-api-operator/pull/56)
* [ACM-14968](https://issues.redhat.com/browse/ACM-14968): Modified readme for cert-manager changes. [#55](https://github.com/openshift/cluster-api-operator/pull/55)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/33a1141ebfe0476e9f8c9d7dc20e49e42c52a9dd...3ec30377ffff951dc9c0fc2257d290e4b4958465)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/cec410b7f877a6eef57968889a644b848bdb540a)

* [OCPBUGS-54945](https://issues.redhat.com/browse/OCPBUGS-54945): Bump library-go [#838](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/838)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/75f30cdb07d58ce71c0a247207a5d91799a48cc0...cec410b7f877a6eef57968889a644b848bdb540a)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/8740a60de76690a17d5081db078eb93dfdb7a066)

* [OCPBUGS-54945](https://issues.redhat.com/browse/OCPBUGS-54945): Bump library-go [#560](https://github.com/openshift/cluster-kube-scheduler-operator/pull/560)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/4210c04aec1c7fde8f4c294421e090ebf9248285...8740a60de76690a17d5081db078eb93dfdb7a066)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/3e270732c774433b17aec6033520abea093ed13c)

* NO-JIRA: Synchronize versions of the downstream components [#2594](https://github.com/openshift/cluster-monitoring-operator/pull/2594)
* [MON-4207](https://issues.redhat.com/browse/MON-4207): Bump prometheus-operator to v0.81.0 [#2593](https://github.com/openshift/cluster-monitoring-operator/pull/2593)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2589](https://github.com/openshift/cluster-monitoring-operator/pull/2589)
* [MON-4161](https://issues.redhat.com/browse/MON-4161): add topology telemetry signals [#2588](https://github.com/openshift/cluster-monitoring-operator/pull/2588)
* [MON-4126](https://issues.redhat.com/browse/MON-4126): set fallbackScrapeProtocol: 'PrometheusText1.0.0' as default for all UWM Prometheus targets for backward compatibility with Prometheus v2 until a better migration process is available [#2590](https://github.com/openshift/cluster-monitoring-operator/pull/2590)
* [MON-4150](https://issues.redhat.com/browse/MON-4150): chore: update prometheus-operator go dep [#2586](https://github.com/openshift/cluster-monitoring-operator/pull/2586)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/de9e43445501d156eae1a3991a1aaac01588449f...3e270732c774433b17aec6033520abea093ed13c)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/6f02e29af57ff4ac1728d95e97bfa468ed397759)

* [OCPBUGS-55090](https://issues.redhat.com/browse/OCPBUGS-55090): Configures subdirectory based CNI chain loading [#2690](https://github.com/openshift/cluster-network-operator/pull/2690)
* [OCPBUGS-54238](https://issues.redhat.com/browse/OCPBUGS-54238): Update CSR status condition appropriately [#2674](https://github.com/openshift/cluster-network-operator/pull/2674)
* [CORENET-5914](https://issues.redhat.com/browse/CORENET-5914): bindata,ovn-k: Update CUDN CRD following localnet support [#2678](https://github.com/openshift/cluster-network-operator/pull/2678)
* [SDN-5701](https://issues.redhat.com/browse/SDN-5701): [multus-networkpolicy] Update CRD to the latest v1beta1 [#2668](https://github.com/openshift/cluster-network-operator/pull/2668)
* [CNF-16707](https://issues.redhat.com/browse/CNF-16707): frr-k8s: wire the frr-status sidecar container [#2687](https://github.com/openshift/cluster-network-operator/pull/2687)
* [CORENET-5856](https://issues.redhat.com/browse/CORENET-5856): Update RouteAdvertisements schema [#2685](https://github.com/openshift/cluster-network-operator/pull/2685)
* [OCPBUGS-54837](https://issues.redhat.com/browse/OCPBUGS-54837): Add missing backendAddressPools read permission on azure [#2684](https://github.com/openshift/cluster-network-operator/pull/2684)
* [CORENET-4481](https://issues.redhat.com/browse/CORENET-4481): update install-cni script [#2676](https://github.com/openshift/cluster-network-operator/pull/2676)
* [SDN-5342](https://issues.redhat.com/browse/SDN-5342): Signer username validation [#2560](https://github.com/openshift/cluster-network-operator/pull/2560)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/66f0e1346e30bcf5df8c87397c3158a39758ece0...6f02e29af57ff4ac1728d95e97bfa468ed397759)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/023668f3592f60c72cb1133878067eb2b9518fcc)

* Use cpuset.CPUSet for reserved, isolated and offline  fields (#1321) [#1321](https://github.com/openshift/cluster-node-tuning-operator/pull/1321)
* Make the e2e/basic/modules.go test reentrant (#1322) [#1322](https://github.com/openshift/cluster-node-tuning-operator/pull/1322)
* Enhance hugepages validation error message (#1320) [#1320](https://github.com/openshift/cluster-node-tuning-operator/pull/1320)
* Bump to k8s 1.32.3 (#1318) [#1318](https://github.com/openshift/cluster-node-tuning-operator/pull/1318)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/4f58be155c79b2c92e7e1c36f481f7163b7f2497...023668f3592f60c72cb1133878067eb2b9518fcc)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/6a517418e9a01d880226959b06c6adcaf0f4d504)

* [OCPBUGS-54877](https://issues.redhat.com/browse/OCPBUGS-54877): Increase debug logging level for op-con/catd [#114](https://github.com/openshift/cluster-olm-operator/pull/114)
* [OPRUN-3782](https://issues.redhat.com/browse/OPRUN-3782): Watch for permissions preflight feature gate [#113](https://github.com/openshift/cluster-olm-operator/pull/113)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/b6a825e1517f1ba09e945901d65e9823dcc36943...6a517418e9a01d880226959b06c6adcaf0f4d504)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/94ed00846022ffffba2fcb0444c46beb0b9a2108)

* NO-JIRA: correct cinder operator CredentialsRequest name [#577](https://github.com/openshift/cluster-storage-operator/pull/577)
* [OCPBUGS-54491](https://issues.redhat.com/browse/OCPBUGS-54491): sync Azure File permissions with upstream docs [#576](https://github.com/openshift/cluster-storage-operator/pull/576)
* [STOR-2078](https://issues.redhat.com/browse/STOR-2078): Enable VolumeAttributesClass for GCP-PD [#574](https://github.com/openshift/cluster-storage-operator/pull/574)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/678bf4a32c5f2d6fc1ad20d08d4eca24f7f0fb6b...94ed00846022ffffba2fcb0444c46beb0b9a2108)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/d949cfe664794de94479f17627609bfeedf0ba53)

* NO-JIRA: make verify [#1177](https://github.com/openshift/cluster-version-operator/pull/1177)
* [OCPBUGS-23514](https://issues.redhat.com/browse/OCPBUGS-23514): Failing=Unknown upon long CO updating [#1165](https://github.com/openshift/cluster-version-operator/pull/1165)
* NO-JIRA: manifests: make template manifests valid YAML [#1171](https://github.com/openshift/cluster-version-operator/pull/1171)
* [OTA-1488](https://issues.redhat.com/browse/OTA-1488): Remove USC code [#1176](https://github.com/openshift/cluster-version-operator/pull/1176)
* [OTA-1488](https://issues.redhat.com/browse/OTA-1488): Remove DevPreview USC manifests [#1175](https://github.com/openshift/cluster-version-operator/pull/1175)
* NO-JIRA: Fix some issues identified by yamllint [#1174](https://github.com/openshift/cluster-version-operator/pull/1174)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/b247772a126b4afa506a9409ad04f174e065346c...d949cfe664794de94479f17627609bfeedf0ba53)


### [console](https://github.com/openshift/console/tree/4d11b53b80347ec17f7f3fdf916e0c424146dd69)

* [OCPBUGS-54833](https://issues.redhat.com/browse/OCPBUGS-54833): fix spacing of secondary action in notification drawer… [#14980](https://github.com/openshift/console/pull/14980)
* [OCPBUGS-54976](https://issues.redhat.com/browse/OCPBUGS-54976): Mark `withHandlePromise` HOC as Deprecated [#14969](https://github.com/openshift/console/pull/14969)
* [OCPBUGS-54656](https://issues.redhat.com/browse/OCPBUGS-54656): Add space between quick start action list items [#14940](https://github.com/openshift/console/pull/14940)
* [OCPBUGS-54601](https://issues.redhat.com/browse/OCPBUGS-54601): fix bug where operator appears twice [#14983](https://github.com/openshift/console/pull/14983)
* [OCPBUGS-45514](https://issues.redhat.com/browse/OCPBUGS-45514): Add account email to the telemetry [#14978](https://github.com/openshift/console/pull/14978)
* [CONSOLE-4464](https://issues.redhat.com/browse/CONSOLE-4464): Update PatternFly to latest [#14979](https://github.com/openshift/console/pull/14979)
* [OCPBUGS-54657](https://issues.redhat.com/browse/OCPBUGS-54657): Expose OdcBaseNode through the dynamic plugin SDK [#14955](https://github.com/openshift/console/pull/14955)
* [OCPBUGS-55047](https://issues.redhat.com/browse/OCPBUGS-55047): align spacing after breadrcumb with PatternFly [#14972](https://github.com/openshift/console/pull/14972)
* [OCPBUGS-55018](https://issues.redhat.com/browse/OCPBUGS-55018): fix web terminal initialize form style [#14974](https://github.com/openshift/console/pull/14974)
* [CONSOLE-4505](https://issues.redhat.com/browse/CONSOLE-4505): Update i18next package [#14881](https://github.com/openshift/console/pull/14881)
* [OCPBUGS-55084](https://issues.redhat.com/browse/OCPBUGS-55084): fix bug where highlighting items from quickstart does … [#14976](https://github.com/openshift/console/pull/14976)
* [CONSOLE-4542](https://issues.redhat.com/browse/CONSOLE-4542): Remove base `dl` `dd` `dt` CSS [#14966](https://github.com/openshift/console/pull/14966)
* [CONSOLE-4541](https://issues.redhat.com/browse/CONSOLE-4541): deprecate VirtualizedTable and ListPageFilter and useLi… [#14967](https://github.com/openshift/console/pull/14967)
* [CONSOLE-4524](https://issues.redhat.com/browse/CONSOLE-4524): Allow Deletion of Identity Providers (IDPs) via OpenShift Web Console [#14949](https://github.com/openshift/console/pull/14949)
* [OCPBUGS-43792](https://issues.redhat.com/browse/OCPBUGS-43792): Load extensions in same order as plugins listed in SERVER_FLAGS global [#14902](https://github.com/openshift/console/pull/14902)
* [ODC-7781](https://issues.redhat.com/browse/ODC-7781): Running knative e2e tests from admin view [#14952](https://github.com/openshift/console/pull/14952)
* [OCPBUGS-54669](https://issues.redhat.com/browse/OCPBUGS-54669): Enable project selector dropdown on Helm form in admin perspective [#14956](https://github.com/openshift/console/pull/14956)
* [OCPBUGS-54963](https://issues.redhat.com/browse/OCPBUGS-54963): Fix visual regression with knative getting started card [#14968](https://github.com/openshift/console/pull/14968)
* [OCPBUGS-54536](https://issues.redhat.com/browse/OCPBUGS-54536): Use router link for OLM CSV empty state [#14929](https://github.com/openshift/console/pull/14929)
* [CONSOLE-4492](https://issues.redhat.com/browse/CONSOLE-4492): Use `helpText` for help text [#14964](https://github.com/openshift/console/pull/14964)
* [OCPBUGS-54878](https://issues.redhat.com/browse/OCPBUGS-54878): Align left/right margins of add card items [#14963](https://github.com/openshift/console/pull/14963)
* [CONSOLE-4542](https://issues.redhat.com/browse/CONSOLE-4542): Convert `dl`, `dd`, `dt` to PF `DescriptionList` [#14947](https://github.com/openshift/console/pull/14947)
* [CONSOLE-4538](https://issues.redhat.com/browse/CONSOLE-4538): Add error reporting link to `ErrorBoundary` modal [#14958](https://github.com/openshift/console/pull/14958)
* [OCPEDGE-1614](https://issues.redhat.com/browse/OCPEDGE-1614): hack: allow DualReplica in control plane topology validation [#14934](https://github.com/openshift/console/pull/14934)
* [OCPBUGS-36658](https://issues.redhat.com/browse/OCPBUGS-36658): Fetching taskRuns in PLR details page using PLR UID also [#14921](https://github.com/openshift/console/pull/14921)
* [CONSOLE-4507](https://issues.redhat.com/browse/CONSOLE-4507): Clean up catalog view [#14954](https://github.com/openshift/console/pull/14954)
* [CONSOLE-4520](https://issues.redhat.com/browse/CONSOLE-4520): Further PatternFly 6 bug fixes and cleanup [#14945](https://github.com/openshift/console/pull/14945)
* [CONSOLE-4464](https://issues.redhat.com/browse/CONSOLE-4464): Update PatternFly to 6.2.0 [#14953](https://github.com/openshift/console/pull/14953)
* [OCPBUGS-49870](https://issues.redhat.com/browse/OCPBUGS-49870): Can't edit deployment (from the private git repository) in RHOCP 4.15 via console [#14887](https://github.com/openshift/console/pull/14887)
* [Full changelog](https://github.com/openshift/console/compare/a4dfe6d905dba57e9653bf404150c398a5e8e663...4d11b53b80347ec17f7f3fdf916e0c424146dd69)


### [console-operator](https://github.com/openshift/console-operator/tree/b6949a5f482005f25095b0c0dc68460e3873dffd)

* [ODC-7780](https://issues.redhat.com/browse/ODC-7780): update quick starts to work in the converged perspective [#977](https://github.com/openshift/console-operator/pull/977)
* [OCPBUGS-55082](https://issues.redhat.com/browse/OCPBUGS-55082): Revert "Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads" [#979](https://github.com/openshift/console-operator/pull/979)
* [CONSOLE-4523](https://issues.redhat.com/browse/CONSOLE-4523): Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads [#976](https://github.com/openshift/console-operator/pull/976)
* [NETOBSERV-2023](https://issues.redhat.com/browse/NETOBSERV-2023): Implement a quickstart for netobserv operator [#955](https://github.com/openshift/console-operator/pull/955)
* [CONSOLE-4481](https://issues.redhat.com/browse/CONSOLE-4481): Add additional CSP test [#975](https://github.com/openshift/console-operator/pull/975)
* [Full changelog](https://github.com/openshift/console-operator/compare/66fbbb102119be6c6866caa65cb7dafa3dabf34a...b6949a5f482005f25095b0c0dc68460e3873dffd)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/b09f487cf0529098b2065ca169ae85ccec955796)

* [OCPBUGS-37212](https://issues.redhat.com/browse/OCPBUGS-37212): Upstream sync 15042025 [#183](https://github.com/openshift/containernetworking-plugins/pull/183)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/7e4193dee9b2eb8b9a5450ed460774c8954fccc5...b09f487cf0529098b2065ca169ae85ccec955796)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/2eb5c109dd19f5a1b84410c0952db5cfaecb2f56)

* NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main [#153](https://github.com/openshift/csi-driver-nfs/pull/153)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/c0632514db5edfec16e33197729f695f255f4aac...2eb5c109dd19f5a1b84410c0952db5cfaecb2f56)


### [etcd, installer-etcd-artifacts](https://github.com/openshift/etcd/tree/a5421dfe551a2e9c911a75062a4cdeb7473f5c26)

* [ETCD-726](https://issues.redhat.com/browse/ETCD-726): Rebase etcd 3.5.21 openshift 4.19 [#324](https://github.com/openshift/etcd/pull/324)
* [Full changelog](https://github.com/openshift/etcd/compare/2f703d6792c6f60b89f5b51d8018ba70a24d6472...a5421dfe551a2e9c911a75062a4cdeb7473f5c26)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/8fba88aad6122e8468897b35da4288c90d607609)

* [ART-12521](https://issues.redhat.com/browse/ART-12521): update go mod dependency for konflux [#240](https://github.com/openshift/cluster-api-provider-gcp/pull/240)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/86f30fc7544e55bb6e9b7149a9747efeffb2ea44...8fba88aad6122e8468897b35da4288c90d607609)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/3aeac35b36ea59188761c2980451217b2099e5da)

* [OCPBUGS-39258](https://issues.redhat.com/browse/OCPBUGS-39258): UPSTREAM: 2021: Add Attach Limit for Hyperdisk + Gen4 VMs [#77](https://github.com/openshift/gcp-pd-csi-driver/pull/77)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/0fc515f405fa2c4acfa935d081011c5daaa82318...3aeac35b36ea59188761c2980451217b2099e5da)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/44c74f24fba97b4afdbac55c9e77eb50eb21a4d1)

* [OCPBUGS-53451](https://issues.redhat.com/browse/OCPBUGS-53451): enable VolumeAttributesClass [#145](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/145)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/cf7114fc396b1e82672de1b830d3877c71712730...44c74f24fba97b4afdbac55c9e77eb50eb21a4d1)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/76a7b9964ebe022596bbbabe2e2ca371b02b2752)

* [OCPBUGS-37706](https://issues.redhat.com/browse/OCPBUGS-37706): allow TLS1.3 or modern profile to be specified [#2135](https://github.com/openshift/kubernetes/pull/2135)
* [OCPBUGS-53249](https://issues.redhat.com/browse/OCPBUGS-53249): skip UDP LoadBalancer on external [#2247](https://github.com/openshift/kubernetes/pull/2247)
* [Full changelog](https://github.com/openshift/kubernetes/compare/e15f4f8936ca26f9de398b849c4632a57bba1914...76a7b9964ebe022596bbbabe2e2ca371b02b2752)


### [hypershift](https://github.com/openshift/hypershift/tree/77b70b5ebd2d3547b1f628441824ab73da1ab3d7)

* [CNTRLPLANE-713](https://issues.redhat.com/browse/CNTRLPLANE-713): Pass featuregates for ocm and oapi in cpov2 [#6071](https://github.com/openshift/hypershift/pull/6071)
* [HOSTEDCP-2059](https://issues.redhat.com/browse/HOSTEDCP-2059): Support capacity reservation in NodePool API [#5972](https://github.com/openshift/hypershift/pull/5972)
* NO-JIRA: Fix hostedcluster_controller unit test for featuregate job [#6067](https://github.com/openshift/hypershift/pull/6067)
* [CNTRLPLANE-713](https://issues.redhat.com/browse/CNTRLPLANE-713): Pass featuregates to ocm and oapi [#6068](https://github.com/openshift/hypershift/pull/6068)
* [CNTRLPLANE-713](https://issues.redhat.com/browse/CNTRLPLANE-713): Use feature flags from release payload for control plane workloads [#6060](https://github.com/openshift/hypershift/pull/6060)
* [CNTRLPLANE-711](https://issues.redhat.com/browse/CNTRLPLANE-711): transition admissionregistration from v1beta1 to v1 [#6005](https://github.com/openshift/hypershift/pull/6005)
* [AUTOSCALE-127](https://issues.redhat.com/browse/AUTOSCALE-127): fix e2e autonode drift test [#6062](https://github.com/openshift/hypershift/pull/6062)
* [CNTRLPLANE-112](https://issues.redhat.com/browse/CNTRLPLANE-112): Enable MIv3 for Ingress [#6058](https://github.com/openshift/hypershift/pull/6058)
* NO-JIRA: Remove kas from EnsureNoCrashingPods exceptions [#5946](https://github.com/openshift/hypershift/pull/5946)
* [OCPBUGS-54863](https://issues.redhat.com/browse/OCPBUGS-54863): Add annotation to configure KAS goaway-chance [#6019](https://github.com/openshift/hypershift/pull/6019)
* [AUTOSCALE-193](https://issues.redhat.com/browse/AUTOSCALE-193): Use payload karpenter image if present, otherwise don't [#6029](https://github.com/openshift/hypershift/pull/6029)
* NO-JIRA: Red Hat Konflux update hypershift-release-mce-29 [#6056](https://github.com/openshift/hypershift/pull/6056)
* NO-JIRA: Add cpo container sync to verify job [#6051](https://github.com/openshift/hypershift/pull/6051)
* [OCPBUGS-54867](https://issues.redhat.com/browse/OCPBUGS-54867): Use 135 for terminationGracePeriodSeconds for v2 KAS [#6021](https://github.com/openshift/hypershift/pull/6021)
* [OCPBUGS-54810](https://issues.redhat.com/browse/OCPBUGS-54810): Don't check if olm images exist if guest cluster [#5982](https://github.com/openshift/hypershift/pull/5982)
* [OCPBUGS-54819](https://issues.redhat.com/browse/OCPBUGS-54819): Update OpenShift apiserver liveness and readiness probe endpoints to … [#6016](https://github.com/openshift/hypershift/pull/6016)
* NO-JIRA: Add README.md to docs folder [#6050](https://github.com/openshift/hypershift/pull/6050)
* NO-JIRA: version check csi-snapshot-webhook for EnsureSATokenNotMountedUnlessNecessary [#6043](https://github.com/openshift/hypershift/pull/6043)
* [OCPBUGS-54225](https://issues.redhat.com/browse/OCPBUGS-54225): Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests [#5897](https://github.com/openshift/hypershift/pull/5897)
* NO-JIRA: Improve API docs for configuration.Image [#6034](https://github.com/openshift/hypershift/pull/6034)
* Revert "Revert "CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure"" [#6012](https://github.com/openshift/hypershift/pull/6012)
* [OCPBUGS-54533](https://issues.redhat.com/browse/OCPBUGS-54533): Update DNS names for ovn-kubernetes cp metrics [#6007](https://github.com/openshift/hypershift/pull/6007)
* [OCPBUGS-54763](https://issues.redhat.com/browse/OCPBUGS-54763): openstack/cli: only set port security when specified [#6036](https://github.com/openshift/hypershift/pull/6036)
* NO-JIRA: Bump o/api version to 4.19 tag [#6035](https://github.com/openshift/hypershift/pull/6035)
* [OCPBUGS-54916](https://issues.redhat.com/browse/OCPBUGS-54916): Set Azure KMS Configuration to v2 [#6027](https://github.com/openshift/hypershift/pull/6027)
* [OCPBUGS-54309](https://issues.redhat.com/browse/OCPBUGS-54309): Drop isIP CEL check [#6032](https://github.com/openshift/hypershift/pull/6032)
* [AUTOSCALE-127](https://issues.redhat.com/browse/AUTOSCALE-127): allow karpenter-provider-aws image to be overriden by hcp annotation [#5999](https://github.com/openshift/hypershift/pull/5999)
* [CNTRLPLANE-217](https://issues.redhat.com/browse/CNTRLPLANE-217): Add E2E to KubeAPIServerDNSName API to cover KAS custom certificate [#5968](https://github.com/openshift/hypershift/pull/5968)
* [STOR-2281](https://issues.redhat.com/browse/STOR-2281): Remove snapshot webhook [#6004](https://github.com/openshift/hypershift/pull/6004)
* [OCPBUGS-54763](https://issues.redhat.com/browse/OCPBUGS-54763): openstack: set port security only if explicitly specified [#6015](https://github.com/openshift/hypershift/pull/6015)
* [OCPBUGS-52661](https://issues.redhat.com/browse/OCPBUGS-52661): KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled [#5798](https://github.com/openshift/hypershift/pull/5798)
* NO-JIRA: Bump CAPZ to v1.19.2 [#6018](https://github.com/openshift/hypershift/pull/6018)
* NO-JIRA: update konflux references [#5987](https://github.com/openshift/hypershift/pull/5987)
* [OCPBUGS-48540](https://issues.redhat.com/browse/OCPBUGS-48540): Mcd proxy [#6011](https://github.com/openshift/hypershift/pull/6011)
* [Full changelog](https://github.com/openshift/hypershift/compare/e1791b0438c53ce51d0d954c79362825ab209978...77b70b5ebd2d3547b1f628441824ab73da1ab3d7)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/176b6ef1136c45b8e3cb24a48458a251deca99bc)

* NO-JIRA: NO-JIRA: Update bertinatto from OWNERS [#80](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/80)
* [OCPBUGS-53912](https://issues.redhat.com/browse/OCPBUGS-53912): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#81](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/81)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/b4596e5f90d79cd43e74a875c534c1f49575238f...176b6ef1136c45b8e3cb24a48458a251deca99bc)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/3dfcfa12e31bccd7c43018e1324a391b0bc03244)

* [OCPBUGS-55038](https://issues.redhat.com/browse/OCPBUGS-55038): [IBM VPC] set offlineExpansion to false in e2e test manifest [#143](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/143)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/ae192c8cf2061984b749ffa6618c2d25a22d372b...3dfcfa12e31bccd7c43018e1324a391b0bc03244)


### [insights-operator](https://github.com/openshift/insights-operator/tree/b1e0f8fce485de56a28f27793fa2bcec87a72771)

* [CCXDEV-15083](https://issues.redhat.com/browse/CCXDEV-15083): Move the Insights runtime extractor feature to GA (#1081) [#1081](https://github.com/openshift/insights-operator/pull/1081)
* feat: remove the upgradeable condition (#1079) [#1079](https://github.com/openshift/insights-operator/pull/1079)
* [Full changelog](https://github.com/openshift/insights-operator/compare/2de75171fd5b9a86067ba1b7782b2943cd82b43e...b1e0f8fce485de56a28f27793fa2bcec87a72771)


### [ironic](https://github.com/openshift/ironic-image/tree/9de7792a5e26fa6bc6a16bc582ace1d67f72bd7f)

* [METAL-1327](https://issues.redhat.com/browse/METAL-1327): Update pkgs ocp419 take2 [#651](https://github.com/openshift/ironic-image/pull/651)
* [Full changelog](https://github.com/openshift/ironic-image/compare/d1835bd98af2079a1434fa766f3dcf387f59342e...9de7792a5e26fa6bc6a16bc582ace1d67f72bd7f)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/e3027025743b10d8a1df75afcf9c28d4ac8dbf3f)

* NO-JIRA: Add awels as approver [#59](https://github.com/openshift/kubevirt-csi-driver/pull/59)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/2bc76d6370f2bd4e1a2e06dfbe732c02ba9a8a21...e3027025743b10d8a1df75afcf9c28d4ac8dbf3f)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/0c6e45601724d86a3ba14d8075775014f9a84230)

* [OCPBUGS-55025](https://issues.redhat.com/browse/OCPBUGS-55025): fix: nodelink use patch to apply machine's nodeRef [#1352](https://github.com/openshift/machine-api-operator/pull/1352)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/904c53692e6a98dd03c394b5a66c53dea81fef80...0c6e45601724d86a3ba14d8075775014f9a84230)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/eb9ed828ff9be92ecfd422701244cff685fd5310)

* [OCPBUGS-44732](https://issues.redhat.com/browse/OCPBUGS-44732): Support for br-ex with DHCP and static DNS [#4724](https://github.com/openshift/machine-config-operator/pull/4724)
* [OCPBUGS-55043](https://issues.redhat.com/browse/OCPBUGS-55043): Fix PollUntilContextTimeout in syncRenderConfig [#4987](https://github.com/openshift/machine-config-operator/pull/4987)
* [OCPBUGS-55231](https://issues.redhat.com/browse/OCPBUGS-55231): MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists [#4995](https://github.com/openshift/machine-config-operator/pull/4995)
* [OCPBUGS-49675](https://issues.redhat.com/browse/OCPBUGS-49675), [OCPBUGS-55039](https://issues.redhat.com/browse/OCPBUGS-55039): In OCL. Usbguard service fails when we install the usbguard extension: IPsec tmpfile.d directives missing when enabling IPsec in OCL [#4986](https://github.com/openshift/machine-config-operator/pull/4986)
* [OCPBUGS-54592](https://issues.redhat.com/browse/OCPBUGS-54592): Only populate `LastFailedGeneration` & `LastFailedGenerationError` on PIS failure [#4983](https://github.com/openshift/machine-config-operator/pull/4983)
* [OCPBUGS-55234](https://issues.redhat.com/browse/OCPBUGS-55234): kubelet: readonly mounts for criometricsproxy [#4997](https://github.com/openshift/machine-config-operator/pull/4997)
* [OCPBUGS-48469](https://issues.redhat.com/browse/OCPBUGS-48469): Fix CoreDNS static pod bring-up on cloud platforms [#4830](https://github.com/openshift/machine-config-operator/pull/4830)
* [MCO-1584](https://issues.redhat.com/browse/MCO-1584): Opt-in boot image updates for AWS & GCP by default [#4902](https://github.com/openshift/machine-config-operator/pull/4902)
* [MCO-1615](https://issues.redhat.com/browse/MCO-1615): MCN status update degraded [#4977](https://github.com/openshift/machine-config-operator/pull/4977)
* [MCO-1509](https://issues.redhat.com/browse/MCO-1509): Enable OCL for disconnected workflow [#4971](https://github.com/openshift/machine-config-operator/pull/4971)
* [MCO-1558](https://issues.redhat.com/browse/MCO-1558), [OCPBUGS-34745](https://issues.redhat.com/browse/OCPBUGS-34745): Add support to rebuild and prune OCL images [#4975](https://github.com/openshift/machine-config-operator/pull/4975)
* [OCPEDGE-1690](https://issues.redhat.com/browse/OCPEDGE-1690): add dual-replica templates [#4938](https://github.com/openshift/machine-config-operator/pull/4938)
* [OCPBUGS-53408](https://issues.redhat.com/browse/OCPBUGS-53408): wait for build and ensure OS image is actually new [#4924](https://github.com/openshift/machine-config-operator/pull/4924)
* [OCPBUGS-54872](https://issues.redhat.com/browse/OCPBUGS-54872): Make sure generation fields in MCN do not have a value of 0 [#4982](https://github.com/openshift/machine-config-operator/pull/4982)
* [MCO-1544](https://issues.redhat.com/browse/MCO-1544): Update MCO code to use MCN’s updated v1alpha1 API [#4962](https://github.com/openshift/machine-config-operator/pull/4962)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/43fe1cb52bb0fedacce7deb8f2af740d59fff2fe...eb9ed828ff9be92ecfd422701244cff685fd5310)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/7d0667469c6a7980f0f6cbaeb2b17686378696f1)

* [OCPBUGS-44031](https://issues.redhat.com/browse/OCPBUGS-44031): Verify tls while pulling down IPA [#131](https://github.com/openshift/image-customization-controller/pull/131)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/d7f860055301859a087664681243a0b9b84e3085...7d0667469c6a7980f0f6cbaeb2b17686378696f1)


### [metallb-frr](https://github.com/openshift/frr/tree/5076dbc4f8483a844f1fce06b57216d743600237)

* [OCPBUGS-55284](https://issues.redhat.com/browse/OCPBUGS-55284): OpenShift Only: TEMPORARY: pin FRR version to known working rpm [#87](https://github.com/openshift/frr/pull/87)
* Syncmetallb 04042025 [#81](https://github.com/openshift/frr/pull/81)
* [Full changelog](https://github.com/openshift/frr/compare/c4cf8929b2e1daae3ecfe0baedffe7643842a6f1...5076dbc4f8483a844f1fce06b57216d743600237)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/c3be77cc15073634db2cd2e067f858884216f35f)

* [OU-750](https://issues.redhat.com/browse/OU-750): update the metrics typeahead to look pf-6 native [#395](https://github.com/openshift/monitoring-plugin/pull/395)
* [OCPBUGS-54292](https://issues.redhat.com/browse/OCPBUGS-54292): Show column headings on metrics page [#397](https://github.com/openshift/monitoring-plugin/pull/397)
* [OU-760](https://issues.redhat.com/browse/OU-760): Requests UX changes post PF-6 [#390](https://github.com/openshift/monitoring-plugin/pull/390)
* [OU-723](https://issues.redhat.com/browse/OU-723), [OU-729](https://issues.redhat.com/browse/OU-729): Add label typeahead [#392](https://github.com/openshift/monitoring-plugin/pull/392)
* [OU-757](https://issues.redhat.com/browse/OU-757): Show cluster column heading on acm silences page [#393](https://github.com/openshift/monitoring-plugin/pull/393)
* [OU-703](https://issues.redhat.com/browse/OU-703): fix states filter in aggregated row [#389](https://github.com/openshift/monitoring-plugin/pull/389)
* [OU-752](https://issues.redhat.com/browse/OU-752): Clear out old queries when loading queries from URL [#391](https://github.com/openshift/monitoring-plugin/pull/391)
* [RHINENG-16773](https://issues.redhat.com/browse/RHINENG-16773): fixed silence alerts data form not filled with alert details [#384](https://github.com/openshift/monitoring-plugin/pull/384)
* [OU-702](https://issues.redhat.com/browse/OU-702): re-add csv button for aggregated alert list [#383](https://github.com/openshift/monitoring-plugin/pull/383)
* [OU-659](https://issues.redhat.com/browse/OU-659): PF-6 Migration [#380](https://github.com/openshift/monitoring-plugin/pull/380)
* [OU-678](https://issues.redhat.com/browse/OU-678): fix: allow to set refresh interval to off [#379](https://github.com/openshift/monitoring-plugin/pull/379)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/aa1a9c0127ab7bdfeb14dd6821e57bb49d3199d7...c3be77cc15073634db2cd2e067f858884216f35f)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe)

* : OCPBUGS-55091: CNI subdirectory chaining for composable CNI chaining [#268](https://github.com/openshift/multus-cni/pull/268)
* [Full changelog](https://github.com/openshift/multus-cni/compare/722e5aa092480087542900e1cfc1e8c691c36ea8...cf0f68ec2b5fe9bc72d0da325e02cf63968747fe)


### [network-tools](https://github.com/openshift/network-tools/tree/ebd18d146a6f06df7e403e771d16bd960b3d891f)

* NO-JIRA: Fix JIRA queries [#141](https://github.com/openshift/network-tools/pull/141)
* [Full changelog](https://github.com/openshift/network-tools/compare/d7c9fb23fba9da6a8fff6beb331c1aff3e664049...ebd18d146a6f06df7e403e771d16bd960b3d891f)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/1ade505601c4309d897b790be2d7abc1c59d814a)

* [CNV-60065](https://issues.redhat.com/browse/CNV-60065): fix cudn input name [#233](https://github.com/openshift/networking-console-plugin/pull/233)
* [OCPBUGS-49395](https://issues.redhat.com/browse/OCPBUGS-49395): adding translations [#236](https://github.com/openshift/networking-console-plugin/pull/236)
* Upload i18n translations scripts [#229](https://github.com/openshift/networking-console-plugin/pull/229)
* [CNV-59853](https://issues.redhat.com/browse/CNV-59853): remove co-m-table-grid and dropdown-kebab-pf classes [#231](https://github.com/openshift/networking-console-plugin/pull/231)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/30ba9b25417f5e9b9889bff65c94e7a511358d09...1ade505601c4309d897b790be2d7abc1c59d814a)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/1469856f937f3d05093302c3940b0b34ae5cfa78)

* [OCPBUGS-54653](https://issues.redhat.com/browse/OCPBUGS-54653): delete: continue on errors (#1127) [#1127](https://github.com/openshift/oc-mirror/pull/1127)
* [OCPBUGS-50617](https://issues.redhat.com/browse/OCPBUGS-50617): oc-mirror does not create signature files (#1073) [#1073](https://github.com/openshift/oc-mirror/pull/1073)
* [CLID-246](https://issues.redhat.com/browse/CLID-246), [CLID-307](https://issues.redhat.com/browse/CLID-307), [CLID-308](https://issues.redhat.com/browse/CLID-308), [CLID-309](https://issues.redhat.com/browse/CLID-309), [CLID-310](https://issues.redhat.com/browse/CLID-310), [CLID-347](https://issues.redhat.com/browse/CLID-347): feat/adds signatures to the archive (#1119) [#1119](https://github.com/openshift/oc-mirror/pull/1119)
* [CLID-321](https://issues.redhat.com/browse/CLID-321): Add annotations to resources generated by oc-mirror v2 (#1086) [#1086](https://github.com/openshift/oc-mirror/pull/1086)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/e5cfdba32f76616e21836414e4630d687c096fa2...1469856f937f3d05093302c3940b0b34ae5cfa78)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/355dcf40d5fcb4d9e93ab312a376c4e80d46ba76)

* NO-ISSUE: Synchronize From Upstream Repositories [#315](https://github.com/openshift/operator-framework-operator-controller/pull/315)
* NO-ISSUE: Synchronize From Upstream Repositories [#312](https://github.com/openshift/operator-framework-operator-controller/pull/312)
* NO-ISSUE: Synchronize From Upstream Repositories [#309](https://github.com/openshift/operator-framework-operator-controller/pull/309)
* NO-ISSUE: Synchronize From Upstream Repositories [#308](https://github.com/openshift/operator-framework-operator-controller/pull/308)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/23b0aff4e0c55f600370719a4777004dc5cbcb2f...355dcf40d5fcb4d9e93ab312a376c4e80d46ba76)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/3eee0290520abd860efb4c71ecf1d8067c054a9c)

* [OCPBUGS-52923](https://issues.redhat.com/browse/OCPBUGS-52923): Synchronize From Upstream Repositories (with a revert) PR 988 with revert [#991](https://github.com/openshift/operator-framework-olm/pull/991)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/84b340e84ff53899465eed6ddb6d790a6297be2d...3eee0290520abd860efb4c71ecf1d8067c054a9c)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/02d245516289b2f3a27b81ce59b9cef66750501c)

* [OPRUN-3835](https://issues.redhat.com/browse/OPRUN-3835): Update to 4.19 community-operators catalog [#621](https://github.com/operator-framework/operator-marketplace/pull/621)
* NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.23.4 [#618](https://github.com/operator-framework/operator-marketplace/pull/618)
* NO-ISSUE: Bump github.com/onsi/gomega from 1.36.2 to 1.37.0 [#617](https://github.com/operator-framework/operator-marketplace/pull/617)
* [OPRUN-3621](https://issues.redhat.com/browse/OPRUN-3621): Replace 4.18 image references with 4.19 [#579](https://github.com/operator-framework/operator-marketplace/pull/579)
* NO-ISSUE: Bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 [#616](https://github.com/operator-framework/operator-marketplace/pull/616)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/e7b5daea08d5ef47f004d39a326fe255e5385ce6...02d245516289b2f3a27b81ce59b9cef66750501c)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/76db379d075fdae94ca604f3fa83b0612b36ef8d)

* NO-JIRA: Readme update [#139](https://github.com/openshift/ovirt-csi-driver-operator/pull/139)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/c5b83033d3979ac73032771467f9bcc3df286cef...76db379d075fdae94ca604f3fa83b0612b36ef8d)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/ced1ea727a09b7024786b08f57d78ff624afc4c1)

* [CORENET-5389](https://issues.redhat.com/browse/CORENET-5389), [OCPBUGS-51040](https://issues.redhat.com/browse/OCPBUGS-51040), [OCPBUGS-54577](https://issues.redhat.com/browse/OCPBUGS-54577): [DownstreamMerge] 2025-04-16 [#2516](https://github.com/openshift/ovn-kubernetes/pull/2516)
* [CORENET-5721](https://issues.redhat.com/browse/CORENET-5721), [CORENET-5856](https://issues.redhat.com/browse/CORENET-5856), [OCPBUGS-51317](https://issues.redhat.com/browse/OCPBUGS-51317): [DownstreamMerge] 2025-04-14 [#2513](https://github.com/openshift/ovn-kubernetes/pull/2513)
* [CORENET-5371](https://issues.redhat.com/browse/CORENET-5371): Dockerfile: Bump OVS version to 3.5.0-0.9 [#2472](https://github.com/openshift/ovn-kubernetes/pull/2472)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/e356c93468c4b686eca25a1ec92e7cf9ec0d8bf3...ced1ea727a09b7024786b08f57d78ff624afc4c1)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/a2346ca5bd71f535399435cd70a8e9519e521c4b)

* NO-JIRA: Bump openshift/prometheus-alertmanager to v0.28.1 [#99](https://github.com/openshift/prometheus-alertmanager/pull/99)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/4313100525f72692f870af2044fb2822e831c5d2...a2346ca5bd71f535399435cd70a8e9519e521c4b)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/b8debb4c0493078dd64bf8a74cee9f0649705f51)

* [MON-4207](https://issues.redhat.com/browse/MON-4207): Bump openshift/prometheus-operator to v0.81.0 [#329](https://github.com/openshift/prometheus-operator/pull/329)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/3779c1d5d59ac355082618e6423710759675aaed...b8debb4c0493078dd64bf8a74cee9f0649705f51)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/c90542d8cef6d25545ae00481ffff5622cdce928)

* [MON-4204](https://issues.redhat.com/browse/MON-4204): Use slog for accelerators (and version bump) [#164](https://github.com/openshift/node_exporter/pull/164)
* [Full changelog](https://github.com/openshift/node_exporter/compare/57a4e99895d08df172b4fb315f5b7e893d516bde...c90542d8cef6d25545ae00481ffff5622cdce928)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/422ebd8b9450954626c765911238162f16beca10)

* [CNTRLPLANE-339](https://issues.redhat.com/browse/CNTRLPLANE-339): Issue short lived certificates if ShortCertRotation featuregate is enabled [#245](https://github.com/openshift/service-ca-operator/pull/245)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/fdd9502ff3446725b4f1fbf6902547dba9266061...422ebd8b9450954626c765911238162f16beca10)


### [stream-coreos, stream-coreos-extensions](https://github.com/openshift/os/tree/960baca1d792bc66bb6e30a39e3adabb72725fd7)

* NO-JIRA: manifest-el9-shared: Update comment for composefs=maybe [#1805](https://github.com/openshift/os/pull/1805)
* [OCPEDGE-1704](https://issues.redhat.com/browse/OCPEDGE-1704): [TNF] Added symlink to allow for custom pacemaker resource agent in two-node OCP variant [#1796](https://github.com/openshift/os/pull/1796)
* NO-JIRA: denylist: update iso mpath denials [#1798](https://github.com/openshift/os/pull/1798)
* NO-JIRA: c10s.repo: use x86_64 extras-common URL for all arch [#1797](https://github.com/openshift/os/pull/1797)
* [COS-3126](https://issues.redhat.com/browse/COS-3126): overlay.d: replace 25rhcos-azure-udev [#1776](https://github.com/openshift/os/pull/1776)
* [Full changelog](https://github.com/openshift/os/compare/0f860eb185a7b777f58f61003bed756224ef0ee2...960baca1d792bc66bb6e30a39e3adabb72725fd7)


### [telemeter](https://github.com/openshift/telemeter/tree/cffdabd448b53b5903b871450bac8e6cbb8dd88d)

* [OCPBUGS-50837](https://issues.redhat.com/browse/OCPBUGS-50837): Drop nil metrics during elide transform and capture metric for same [#556](https://github.com/openshift/telemeter/pull/556)
* [OCPBUGS-50837](https://issues.redhat.com/browse/OCPBUGS-50837): Check nil metric in elide label [#555](https://github.com/openshift/telemeter/pull/555)
* [Full changelog](https://github.com/openshift/telemeter/compare/70e6d4b750bf232d121b2e932278f5aed7f9c3fb...cffdabd448b53b5903b871450bac8e6cbb8dd88d)


### [tests](https://github.com/openshift/origin/tree/6dc0a25d36c9491352d8a4c82edb902afbfe3e16)

* [OCPBUGS-22413](https://issues.redhat.com/browse/OCPBUGS-22413): Add myql-80 to fix known image check test for OKD [#29659](https://github.com/openshift/origin/pull/29659)
* [OCPBUGS-54869](https://issues.redhat.com/browse/OCPBUGS-54869): bump limits [#29700](https://github.com/openshift/origin/pull/29700)
* [OCPBUGS-55214](https://issues.redhat.com/browse/OCPBUGS-55214): Fix default cert issuer name for HyperShift in `RouteExternalCertificate` test case [#29698](https://github.com/openshift/origin/pull/29698)
* [OCPEDGE-1680](https://issues.redhat.com/browse/OCPEDGE-1680): Fix failed arbiter tests on ci run [#29691](https://github.com/openshift/origin/pull/29691)
* [OCPBUGS-54906](https://issues.redhat.com/browse/OCPBUGS-54906): Remove [Skipped:Disconnected] from the test name to allow metal ipv6 [#29685](https://github.com/openshift/origin/pull/29685)
* [OCPBUGS-54651](https://issues.redhat.com/browse/OCPBUGS-54651): resources: Add limit exceptions for Istio [#29690](https://github.com/openshift/origin/pull/29690)
* [OCPBUGS-55175](https://issues.redhat.com/browse/OCPBUGS-55175): Add cleanup to MCN test [#29695](https://github.com/openshift/origin/pull/29695)
* [OCPBUGS-55132](https://issues.redhat.com/browse/OCPBUGS-55132): gatewayapicontroller: Increase timeouts [#29693](https://github.com/openshift/origin/pull/29693)
* [OCPBUGS-54951](https://issues.redhat.com/browse/OCPBUGS-54951): MCO-1520: Reintroduction of MachineConfigNode e2e tests [#29683](https://github.com/openshift/origin/pull/29683)
* [OCPBUGS-54869](https://issues.redhat.com/browse/OCPBUGS-54869): bump limits [#29688](https://github.com/openshift/origin/pull/29688)
* [NE-1970](https://issues.redhat.com/browse/NE-1970): 5 e2e origin tests for gatewayApiController featureGate [#29670](https://github.com/openshift/origin/pull/29670)
* [TRT-2082](https://issues.redhat.com/browse/TRT-2082): Revert "MCO-1520: Add MachineConfigNode e2e tests" [#29682](https://github.com/openshift/origin/pull/29682)
* [OCPBUGS-54906](https://issues.redhat.com/browse/OCPBUGS-54906): Change the test image to registry.k8s.io/e2e-test-images/agnhost [#29672](https://github.com/openshift/origin/pull/29672)
* [OCPEDGE-1675](https://issues.redhat.com/browse/OCPEDGE-1675): feat: update some tests to account for the arbiter node [#29639](https://github.com/openshift/origin/pull/29639)
* [MCO-1636](https://issues.redhat.com/browse/MCO-1636): skip PIS custom pool checks on SNO cluster [#29673](https://github.com/openshift/origin/pull/29673)
* [MCO-1520](https://issues.redhat.com/browse/MCO-1520): Add MachineConfigNode e2e tests [#29596](https://github.com/openshift/origin/pull/29596)
* [OCPBUGS-54869](https://issues.redhat.com/browse/OCPBUGS-54869): bump limits [#29679](https://github.com/openshift/origin/pull/29679)
* [OCPBUGS-54661](https://issues.redhat.com/browse/OCPBUGS-54661): Route ExternalCertificate: Fix e2e tests for metal platform [#29656](https://github.com/openshift/origin/pull/29656)
* [SPLAT-2060](https://issues.redhat.com/browse/SPLAT-2060): Registered Machine API tests extension [#29579](https://github.com/openshift/origin/pull/29579)
* [Full changelog](https://github.com/openshift/origin/compare/6c336d1d160b849bfc4dbc9e1756d0243b358c77...6dc0a25d36c9491352d8a4c82edb902afbfe3e16)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/c2b41c36105daa94272ff4c5a32ec9d5637626a4)

* [OCPBUGS-53059](https://issues.redhat.com/browse/OCPBUGS-53059): Fix panic issues when LegacyConfig is nil [#304](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/304)
* [SPLAT-2072](https://issues.redhat.com/browse/SPLAT-2072): Removed VSphereMultiVCenters feature gate [#300](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/300)
* [STOR-2141](https://issues.redhat.com/browse/STOR-2141): add support for maxAllowedBlockVolumesPerNode [#287](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/287)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/8a4da29e85014da5f51371379f6a17798f055cbb...c2b41c36105daa94272ff4c5a32ec9d5637626a4)