# 4.20.0-okd-scos.6
Created: 2025-10-27 22:45:10 +0000 UTC
Image Digest: `sha256:63ffdf70e99dfd6df9675c4b0a1c16185caca8a511d11f1530afa6cb1b4f8c94`
Promoted from registry.ci.openshift.org/origin/release-scos:4.20.0-0.okd-scos-2025-10-27-091911
## Changes from 4.20.0-okd-scos.0
### Components
* Kubectl 1.33.3
* Kubernetes upgraded from 1.33.4 to 1.33.5
* Kubernetes Tests upgraded from 1.33.3 to 1.33.4
* CentOS Stream CoreOS upgraded from 10.0.20250913-0 to 10.0.20251023-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: |
| AWSDualStackInstall
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| AzureDualStackInstall
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| GCPDualStackInstall
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| OpenShiftPodSecurityAdmission
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
### Rebuilt images without code change
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [11b24a2c](https://github.com/openshift/apiserver-network-proxy/commit/11b24a2c7452ef683a1d989f1016e6e815f5c112) `sha256:9ce6148e535bad573b7f436d42f77858fcb727f58be9b5d37d5065c290aaa11c`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [bb88da16](https://github.com/openshift/cloud-provider-aws/commit/bb88da16b29d63573861351afc5ca8c4547775d6) `sha256:90f7e82a288882eb3702e59bb27fc70ada9d0234e87e2f99be4458328b05b88d`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [a8ef205c](https://github.com/openshift/aws-ebs-csi-driver/commit/a8ef205c28b7b8c80b0caf1c1a9e12f81f4fdbb9) `sha256:9c3ea5ce5988392414bd4707344914575c07c3ea43186601625649afbde28c58`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [b37141b0](https://github.com/openshift/aws-karpenter-provider-aws/commit/b37141b051bdf790eb7e8f45b95f6bd7dc8140f4) `sha256:6ed83a36228d9cdcde7668059128b42322472cda4a1fbaba0e4b7b5f33c016b7`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [088dcaf7](https://github.com/openshift/aws-encryption-provider/commit/088dcaf73f980b977ef4f5d2f99e2a93deb87eef) `sha256:9401b995d9ffda05f5381a597408c22aebc618b703d5f3d669ad993acbea944b`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [a2ecb150](https://github.com/openshift/aws-pod-identity-webhook/commit/a2ecb1502280feb8e82c9cf6f3f77d62797e4445) `sha256:c579d6b69ccbad5cab9b548cea621254531a52542b7498249033f0ea38b46a3a`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [d469d04e](https://github.com/openshift/cloud-provider-azure/commit/d469d04ed645358d942af442fe21e2c2b44b9b2c) `sha256:ed7c5058ba31676e6666b758ff75e8d386ec3bef13e56823da8ba81dcdab975b`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [d469d04e](https://github.com/openshift/cloud-provider-azure/commit/d469d04ed645358d942af442fe21e2c2b44b9b2c) `sha256:00c391c9e588a1cc74061077e6e0d0a235706a68049798dab13a8a80b1e66fc7`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [cb8b5b6a](https://github.com/openshift/cluster-api-provider-azure/commit/cb8b5b6a485971a95c5a74508d76ab19b23cbf29) `sha256:104e14f67f8f4d2953cc9e9ae156e0da26ed2ee0512a29eabe53bb34237fd734`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [0b8e4d22](https://github.com/openshift/azure-disk-csi-driver/commit/0b8e4d2202b0d17942fd745a5e1948f46bdd0350) `sha256:4926d1382529baa38ecbe0c2ceb7139616536f07b11814223c82f05ae9e3205b`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [45d505bc](https://github.com/openshift/azure-file-csi-driver/commit/45d505bc11fedadece5ae27147c9595877e39f2a) `sha256:75ab8929c5a8653df81a3fa0e0e796d070614ab86943782eb222c38d3722f53c`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [ea0b9944](https://github.com/openshift/azure-kubernetes-kms/commit/ea0b9944dddcc7043065a1fab5fca72dd17450da) `sha256:276d6c1b986777c8deee2576842bd684117af694c08dfa2f217c503138423642`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [4927cc2b](https://github.com/openshift/machine-api-provider-azure/commit/4927cc2be4f629e367d2a79a310900c7cced3f6c) `sha256:f46dc821de75393e16a920f0eff421515d1d3e4f0276230b9715af06d0992c2a`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [6e2f3626](https://github.com/openshift/azure-service-operator/commit/6e2f362623720f7b6d634fbc424fbc61e4b481ae) `sha256:a8fdce0b73f869ab1f186f1d8f13557680fbb7450a9b21c1034d7dc4208bc642`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [88b18175](https://github.com/openshift/azure-workload-identity/commit/88b18175e46fe305486d172ec0b4e8471c55e30b) `sha256:36c67587fdf05630b16047797b425a4c3ff3862a3d30786d09f44d26f4f00790`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [f782ba74](https://github.com/openshift/cluster-api-provider-metal3/commit/f782ba747ed353721c84ceb754ca8403f94adb6a) `sha256:661ea4549a91dcaf845e7edf45523ecfb64f60ba1b02e80158b6f8d43484c44b`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [fb678fec](https://github.com/openshift/cluster-api-provider-baremetal/commit/fb678fec5f7e08348b281341481f33a848204e50) `sha256:90d23f9c4b32330d1ec25e8ca2529e7318724a6ee18e1ecc303378600aa74ce8`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [6553765e](https://github.com/openshift/baremetal-runtimecfg/commit/6553765e71c7f8d7db120af94473c9c0cb44d453) `sha256:5edb6a5c1737e1c0745bd5ff920621bb1036d0b6e4683c3ef9fc5818eaac06bf`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [467e50fe](https://github.com/openshift/cloud-network-config-controller/commit/467e50feff5a56afbf9ccefc025781c9ccff8eca) `sha256:307c95104ab57f6c3a10d4b4463eeeb73dd56cfb3ed426bbaaca80e8947d1cf5`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [11e57aa3](https://github.com/openshift/cluster-authentication-operator/commit/11e57aa35590d3481288e09003c9109e0bfc62ce) `sha256:add28a99d477bd0026cd1787f08f3570163d203cbe2253c2b358c2befa9697aa`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [d883d0e6](https://github.com/openshift/kubernetes-autoscaler/commit/d883d0e6dbb74f0839631ebc7a584669f0e955a3) `sha256:3d7bb243bd2e37f128ea1f53fa5b62d518d18765289fe73bee57df4a7685c8e8`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [74abc555](https://github.com/openshift/cluster-bootstrap/commit/74abc555111bac56a67957ef517ef086e4643c50) `sha256:67939f69b7d2973715f5e3acecfee0537dcc12341ebe155a59c0fa785c684dde`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [de1db297](https://github.com/openshift/cluster-api/commit/de1db2970e7fede7101e5a8188e74942ab6665e3) `sha256:48fc107d0e77fd853eafe544d93261a50bbd4919f09a532b0561a1504d85d820`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [e355ad38](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/e355ad389d1d09be1a83f024f54b15e844982d0a) `sha256:4ea6e88b1ec7c21aeff50911318412dd1a1f70ecafe328a0257290e3f95f9983`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [657754e2](https://github.com/openshift/cluster-config-operator/commit/657754e2beaed6295ff28bb0f7813cb1c9ce35b2) `sha256:e037e4d7d1a4e143df7769a50290c797e0885971129d20604d998fe3fb613b33`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [0bbafe24](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/0bbafe24ade564bc62554251f36de90d524abcde) `sha256:a229e2686ca49b128e815fb7d11d75b7a4d068501986cd817a3840624926fae8`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [b04c7c12](https://github.com/openshift/cluster-image-registry-operator/commit/b04c7c121851704973a94a50e42af1425045899c) `sha256:3069bc81135a34dfe62a425169470d9a98f0ca6192817051002e0757603732fc`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [3ec30377](https://github.com/openshift/cluster-api-operator/commit/3ec30377ffff951dc9c0fc2257d290e4b4958465) `sha256:eb6085c665065aa34282b23f3bb9d85aac80ec6a60d5306272e04bf0a5cf910a`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [ce275058](https://github.com/openshift/cluster-machine-approver/commit/ce2750589129dd20b3d1b6a5e7bb8c392d658c5c) `sha256:ce9d2d4b5a259a640e1322c5859462c8816c4255cfa44633784b7fd506c282e8`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [e4917368](https://github.com/openshift/cluster-olm-operator/commit/e4917368b6a547f97a0fb411fea90de246d1417e) `sha256:d6f466f907f1ac625b55bd183252bdab38ecc0dd71756fd2478089975a5dd2fa`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [62b3623c](https://github.com/openshift/cluster-samples-operator/commit/62b3623c6a2860e7a8cc368dbe76e767508cd261) `sha256:fe8da7c253351b6a835a458c03b4b2e4253be1b812f54b475db08a1b5abe6de8`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [c40e7b9b](https://github.com/openshift/cluster-update-keys/commit/c40e7b9b60c62690a25333fc54ae0d3705474afb) `sha256:0da5323c7489a84bbd292bd4a502ee597c0a8363a8dd105a1d8eca4d14d86cd7`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [2438d7c8](https://github.com/openshift/configmap-reload/commit/2438d7c8e495201361d87da205649bc38fc4822b) `sha256:dd992d6307f56299f201d7bba0481e30d647e5580a3e90eab2fc4bd24eaf31f5`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [184a9601](https://github.com/openshift/containernetworking-plugins/commit/184a96011a8cacb72319cdccb904271a99c5928d) `sha256:9e2b9a11f2db387f816ff6ca1d401d5118d7f87742339585633a1124237b6af6`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [184a9601](https://github.com/openshift/containernetworking-plugins/commit/184a96011a8cacb72319cdccb904271a99c5928d) `sha256:879ba685165e141272dbd5f9d8de8887d49fc701790a8dd14f5d9d3fc67192f2`
* [coredns](https://github.com/openshift/coredns) git [6f39336e](https://github.com/openshift/coredns/commit/6f39336e6da9dc77b2db140a96773c413d50a665) `sha256:dcfe5a25898b63ad75c5b8af78e0fc9cc8ec567170e2cc8e4e441967f761b84d`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [c4fe3e8a](https://github.com/openshift/cloud-provider-openstack/commit/c4fe3e8ad29e58f081f3883de0893c2025a097b2) `sha256:9653b1636b5e1306532522bcbd32a9a5d4383077ddf425094272a43b7cefc102`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [1abaf844](https://github.com/openshift/csi-driver-nfs/commit/1abaf84447384a486a9f9da7cd7b9e53784c8a55) `sha256:c44d2cc82fd3b2f98b0cc9c9ed3e8299302880be486385158c28c64970c0a480`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [45239149](https://github.com/openshift/csi-external-attacher/commit/45239149cb387bcc51d944b802db0e804dc02688) `sha256:ce81973fa79e0699d0c86b8e0717205a4405105e46c8ff12597769456db33ccd`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [81fca036](https://github.com/openshift/csi-external-provisioner/commit/81fca03694bca1bae8606d8970472330e1e4fcad) `sha256:2a82886b3625d782ccf7b33fa4042f47ec95b2ba7b007edcb549310748ec85c9`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [693a8264](https://github.com/openshift/csi-external-snapshot-metadata/commit/693a826455777eaafc677bb2195dc071d184243b) `sha256:6859cbb87d5978cb39f42b478c5a43f6c504699ce4c1212246d5e63d3f7b5616`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [42604822](https://github.com/openshift/csi-external-snapshotter/commit/42604822c25eb2aa0ecb017c24e328221b238eb9) `sha256:1f66d53342aaabe609a50ca734838f1239f3681f438d20e45b159fbb866cf720`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [1d6d6b27](https://github.com/openshift/csi-livenessprobe/commit/1d6d6b27460e58f24110c72ec9c96afe2c1d891d) `sha256:815d09cdf1cd3c0b8611b00df17a987a962be151e40e02873c44bb0fa90e1f43`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [42604822](https://github.com/openshift/csi-external-snapshotter/commit/42604822c25eb2aa0ecb017c24e328221b238eb9) `sha256:788856dd27a37e70bdf7076dd93b0790c1cd63b3dee24aefc9cefb6973074274`
* [docker-builder](https://github.com/openshift/builder) git [ff595e4b](https://github.com/openshift/builder/commit/ff595e4bbf5301039fc62f0cdd7b5610605f633e) `sha256:5c058ce8df96bd96f4c06a9060d4806d529e1cf0d0a17bbbfad8d18f47f63c09`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [9d55fd1a](https://github.com/openshift/driver-toolkit/commit/9d55fd1aaba05830f857132bd149ee3cf18cc20f) `sha256:12f4acd1165ab385c0303a1d3c6920b7fb5f7f761e7c2c05cb434e113b6de3d0`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [5e0f8d1b](https://github.com/openshift/egress-router-cni/commit/5e0f8d1b545899fda27c5e1cc8707d33cba1b534) `sha256:087822adfa5a2e022c49445f9d03c558964b2784963b25c0532c0318aa622f82`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [f940e72e](https://github.com/openshift/cloud-provider-gcp/commit/f940e72e7611ce4a96da3e47966ba1befd25c474) `sha256:953442607f0066380bd75ecde2d2cb0538d655a01aa391c872d4bcffc322d9aa`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [65539c71](https://github.com/openshift/cluster-api-provider-gcp/commit/65539c71b4c292fc0f4eeb572dfe490af63063d9) `sha256:b8ead547ea08bbfc8543c97cb047b31f90efcb581066619c1bbb89ecf23a0de1`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [01515888](https://github.com/openshift/machine-api-provider-gcp/commit/01515888c83526ec235b7bc3a27df6eba3034b00) `sha256:05a0d3f08e50ab24c7170e48ac6c27606dd15542646d2ad81db6233b4239290b`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [500ab5d3](https://github.com/openshift/gcp-pd-csi-driver/commit/500ab5d31ad382805070c8ae329a9a34163ebc99) `sha256:cf87d40e90506edd27a936c12e930e900d7597519e2c5082cddd1a36da3dce9b`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [e0ad050a](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/e0ad050a84bab669e0f11e080fc4c388ef417bba) `sha256:a05d3fcf8e64388ab01314193ec0bdb09f59f90caafbbb55e8e49daa58651a9b`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [b36788ed](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/b36788edd4c559cffd5f7f1b2e3e51b98c3e92b8) `sha256:de0decbdc3de10b9e024299612b2ed5979bc76a8f5769ccdf8211beb49470fc2`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [36ab30f9](https://github.com/openshift/cloud-provider-ibm/commit/36ab30f90e87de0daa926d20ccda88c41abed191) `sha256:f83f8eda34f712884aa603740d77b0023381cc6d6cb3725e4fa534fbca6c1317`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [19801353](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/19801353c97d08b1333177be45c848082af0643c) `sha256:70919f212b22fdab83226963e586d7c819084fc41978ec6fe06cb1d84e7e3903`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [21f405cc](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/21f405cce9573eee1c4f1cf95c0eb601ae77ed99) `sha256:5dcea93f66b49c7281138811a5c6e3df18327a86bc7d519ca4820037cce422ac`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [8b6396a4](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/8b6396a4c78f4791b7f3c5ec404a78b499f8546b) `sha256:8e8e983dea1fc0c7200e0d89985b3cb3af6e74b3377861197ef971442cf6c175`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [035805df](https://github.com/openshift/machine-api-provider-ibmcloud/commit/035805df5277c9f9c0cd9d4a44f59a08ab3ce031) `sha256:487711f8b38cb60badcfc1096ea800c4fd70cf5d2ed9395e12cf26cd4aa708a2`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [3d378369](https://github.com/openshift/insights-runtime-extractor/commit/3d3783698b20f5c27e4f35051b1450e47e789068) `sha256:e375da10cc320cd210248216cd7b5e201a42a654a08fa43cfbdb4e43f9106ce7`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [3d378369](https://github.com/openshift/insights-runtime-extractor/commit/3d3783698b20f5c27e4f35051b1450e47e789068) `sha256:e47f5c9ce4bcb203970b61b91477a1a395745d762da15fa8f1b1041295e42545`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [ce01f3c1](https://github.com/openshift/ironic-agent-image/commit/ce01f3c1ed6022f9eecc164b2ae34aec25b3dee4) `sha256:663564f64eab9d0a4064a2d99db8abcadb08bee020c58c0427544b689396185c`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [6c92e542](https://github.com/openshift/ironic-rhcos-downloader/commit/6c92e5425b58baa9d4dd951a992b7460e8407247) `sha256:401c09a52e4d238faf4b42a6fb978fa86a3f3f588755884fa7bc0fe9bbad0cef`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [fa5b8b8b](https://github.com/openshift/ironic-static-ip-manager/commit/fa5b8b8bb73e509f74205a99a0ed1cb07a843885) `sha256:3c4cd99df369158fee1dd173db00ba50d466cc1961325a64e010cb0f5dd46576`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [cfa5ee9f](https://github.com/openshift/kubernetes-metrics-server/commit/cfa5ee9f1c94d7faec36de970033b9e329326f38) `sha256:438b8ecfc827c27003f0347fc2d62e0fcd46654719acdfc3b6c04862c7d0b9bb`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [b9134351](https://github.com/openshift/kube-rbac-proxy/commit/b9134351be37c43408334047d8eb85d0ac01fe4e) `sha256:6d4056bf69022cd09ecf845fb46c1743ad4aaa394b935285d1c5af5dac681f10`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [a8c9a5f0](https://github.com/openshift/kube-state-metrics/commit/a8c9a5f08f675ae9afbaafdc47d7d2acb4a3709d) `sha256:c762b290a185eadc4e5d0dea5527ea54c23cfd6e1c7c28633565e29f617bdca4`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [0f8a4eb8](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/0f8a4eb84ace9b746cf25d51d80dacf34ca5f953) `sha256:f2654576aa8ae04d5a3199618d74d68c05f5b4d9f14e2cfc09aac9a36df724e7`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:609ecb961b89d7a0d0e80bd84862eb4c40c8cd774ee98461da3b2c0aefd01821`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [8b8dd30e](https://github.com/openshift/kubevirt-csi-driver/commit/8b8dd30ecd302e2b260c666702dffb19abf7c1aa) `sha256:99f246a49fc125ee50f6961b4e7aa3c9fa9b3a357773e22ecf89339ecc43ca7e`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:dbd435ed9051c1162d9e99c6f98d215adc22a72ff21b9ea7bbc2d5df2ce1ede5`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [20f6d615](https://github.com/openshift/image-customization-controller/commit/20f6d615c03b9c579037cdcdc327bd2bcefde4e6) `sha256:44ca69e7b2b541f1fbf037abc1451f5a0d543934c47bf59ec3933f383fd1404d`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [64bfec79](https://github.com/openshift/machine-os-images/commit/64bfec79ae03b50b1da5b614a4cca2937ea9927d) `sha256:12241c14501852a7758b7b36b81062669a3667263d6cd90c5e5851c8f4e5c712`
* [metallb-frr](https://github.com/openshift/frr) git [fc0fe74f](https://github.com/openshift/frr/commit/fc0fe74f94b415b28d772dbc61f6323171a11b50) `sha256:8d9478439835895210e6bfcc85e8a809602c90c2cb1f59c7429c9bd83e7c22f3`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [fc73c803](https://github.com/openshift/multus-admission-controller/commit/fc73c803caa1140e5a9115ceeb0e38504b001722) `sha256:65b990776d4b15c5748624dbb354450fc67566f9f553f7ae357e9b7387d09376`
* [multus-cni](https://github.com/openshift/multus-cni) git [cf0f68ec](https://github.com/openshift/multus-cni/commit/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe) `sha256:b0732bb8f252bbadc68be5499aca48194a0678dba2f4d0d7b7ce995e84e3def7`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [cf0f68ec](https://github.com/openshift/multus-cni/commit/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe) `sha256:ad6ad5731956b2cbfc7d2728cbc4425a66e2a8c1330ce669f8f6c4eba0d794c4`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:7b57f6aec40aa42c8a0f7c0733491964f4933b78af3e141cf64ac0cfc3082b86`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [43c89591](https://github.com/openshift/whereabouts-cni/commit/43c8959152a6ca8afdc73eaed624286628c2c22e) `sha256:ec1864b957b8c3b331644d751ff57fdfd97f775ee62f146bfafc25e15c75f032`
* [must-gather](https://github.com/openshift/must-gather) git [f0c64742](https://github.com/openshift/must-gather/commit/f0c64742c79afce5e367ca2c7b830ad448abe1df) `sha256:e1bcd28cdeefcdd002d99a01e0ffaba0dfffa0c04da3fb5d044e8d61bc00c73a`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [dd3c4d0b](https://github.com/openshift/bond-cni/commit/dd3c4d0b886138d974022b963e72f2e90293abfe) `sha256:7bb484b9a66692b86090b142cb7aaffd717ecd825d55c9bcba08b1add44056dc`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [b81340a9](https://github.com/openshift/network-metrics-daemon/commit/b81340a9fc6963fa3d64d215a12e8528ca797131) `sha256:130bfe900550b1ffb50b66aaa805bd5cf8c2f6b22e275d438c536683d5d0048b`
* [network-tools](https://github.com/openshift/network-tools) git [26d09174](https://github.com/openshift/network-tools/commit/26d09174cbd92386469e777e3bf49bfa95d035d5) `sha256:a5d5049a416b434554d4d9e66753018b9742f59c9f8e76c5f1aa2ae259858b7c`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [b575ef15](https://github.com/openshift/cloud-provider-nutanix/commit/b575ef15f13e1434c793ae50824fd0676480be05) `sha256:fd3b10b440966f635b172c7bbe7e278f08e1631f92f0c833383cf33e59142a0c`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [3200ddef](https://github.com/openshift/machine-api-provider-nutanix/commit/3200ddef48a5a8d47b96539419c51f3619cb1fd5) `sha256:7ca9e7664ffcf2f1240ab76fff9bd41b390c2dc60a13f1ec44147d06088b2d31`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [6649cb8a](https://github.com/openshift/oauth-proxy/commit/6649cb8a7c4dd7d1c4e03c9b0bc7594089fba991) `sha256:30a821f6da55dbbd79d5f4d9b4dd93baaa688c23e8445d4d6c9f5769a752e825`
* [oauth-server](https://github.com/openshift/oauth-server) git [81098796](https://github.com/openshift/oauth-server/commit/81098796234cbe75e656ffddd8a015953e0bb1c7) `sha256:457b3795d4f69cd5ace36c74e6a1e2780ec1801dcb39d470e825d2f5b06c745c`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [b04e2ef0](https://github.com/openshift/openshift-state-metrics/commit/b04e2ef05498c2a4504bd9396a3290c4f263fc37) `sha256:5e89dfeaa8bc31b301e9e9a2dfb793e0374ac967736ff2fe4bc48fb3d12519a1`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [c4fe3e8a](https://github.com/openshift/cloud-provider-openstack/commit/c4fe3e8ad29e58f081f3883de0893c2025a097b2) `sha256:da96b51814ed0bdab15f946c88ef7f6be9cc676d0640b4827c8f1fbfdd370a1f`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [c4fe3e8a](https://github.com/openshift/cloud-provider-openstack/commit/c4fe3e8ad29e58f081f3883de0893c2025a097b2) `sha256:9005cdd5dd72d7f02ec2786188d5238ad12f77a6c0c30a571651e79fdb04c80c`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [30944900](https://github.com/openshift/cluster-api-provider-openstack/commit/30944900c974852654db4125082d616f9be4b1a6) `sha256:8ae1f253ce0c394510865e59033c914cbc4aa2fd25732ebdfa825f5b2e28b553`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [5085f184](https://github.com/openshift/machine-api-provider-openstack/commit/5085f184c7d2ed21f36e5e3fe65bf023b38afe67) `sha256:4a9094d035a3e4a20fc983b120b2e26193cdae3c59a3d46ef2c685bbe96b46ba`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [bf0d2c88](https://github.com/openshift/openstack-resource-controller/commit/bf0d2c88d6bf9bd90b24c979ea63dc37606b45fc) `sha256:3b158b2918f2e97fdb7497aa4f9cc3249078e8a0b0a45af3fe984d3c4aa489fa`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:c66de1ab2f3f0631983099450467a76488bd0910edbd13b572f8abdfc58ed4db`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [76db379d](https://github.com/openshift/ovirt-csi-driver-operator/commit/76db379d075fdae94ca604f3fa83b0612b36ef8d) `sha256:576090918b92fc03072e32d4a1473e84d3f133f9a80cb530f3e9c64c1d085e3d`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [0693fe5d](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/0693fe5dcfab224466fba7a19e614de71f727999) `sha256:2ef1a609c7209981b757a7068a3931cb9e05285e16a37c40c583f7b7b54db418`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [319efc99](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/319efc99be8cc2603fad1677acee7c4a4a096913) `sha256:ce74c887dc80ff2b7846a22019b54843b08f095bd4937ff28392aecdfd5dbd4c`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [2424e8dd](https://github.com/openshift/cloud-provider-powervs/commit/2424e8dd4bf3e19c3e65efebc03bf4942665f7c4) `sha256:812b35b38ac31846edb2c95a50aed614542f5eef2248d603f5bb77632d10a6fa`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [f011b3c7](https://github.com/openshift/machine-api-provider-powervs/commit/f011b3c727c5377302b2ab0a203457490b930a3d) `sha256:b44efdbc9f9962792429e9aca9d9da8a9455a0ca720f49d5000147ea2789b508`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [f2529aee](https://github.com/openshift/prom-label-proxy/commit/f2529aee3dc2e9065de08b035d53151e007136fd) `sha256:99744f30f04a26f10fa97c9b546ba486ce6132f5c8fc610e13459072391f97b7`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [419f2843](https://github.com/openshift/prometheus-alertmanager/commit/419f2843332265d44982920d6fb4db220ec26f91) `sha256:9e2e81a8fe8fab112af5ec1e1c44175a3a2b5d9b92100eef6187b37569c8a64a`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [e2bd260c](https://github.com/openshift/prometheus-operator/commit/e2bd260c9d686192a5ed9b85dfd4a9f7a2a03666) `sha256:aab1f8c7fbe97afd795c9ffa0a89063624b90981b64867a77dae7b31d47d3fed`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [56f6158e](https://github.com/openshift/node_exporter/commit/56f6158e797ab80e5e0da2cb0ba701cb02902ef7) `sha256:9cf94e1db97c525aa8bc796f2e2c7884e8e2caa9605533b6e47f5e6cc7d7f2e6`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [e2bd260c](https://github.com/openshift/prometheus-operator/commit/e2bd260c9d686192a5ed9b85dfd4a9f7a2a03666) `sha256:d2ed4c0cb8aa214b5c1471071f0baa8474b20f02ea4ee2a52c240e181ec446e5`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [e2bd260c](https://github.com/openshift/prometheus-operator/commit/e2bd260c9d686192a5ed9b85dfd4a9f7a2a03666) `sha256:740ba6c9b54de182e1783c6a8c62ac81d90a22b7c8b8cf6ba34ee2eb7057ffea`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [bf2fa662](https://github.com/openshift/route-controller-manager/commit/bf2fa662f57f233d8541f94c4953e0dcd7a5ab20) `sha256:c6ae4a293d19bf8982ae767d91262ffb300bb95451911ff1c939f5d12512029a`
* [telemeter](https://github.com/openshift/telemeter) git [4c6036ee](https://github.com/openshift/telemeter/commit/4c6036eeb851ad6e0e837e214a2d08ffc8f0d1d0) `sha256:ab1390be3c250364a00f3ae3b57d231026882edcd0fac1d4121f94f8a24fecd5`
* [thanos](https://github.com/openshift/thanos) git [c0951032](https://github.com/openshift/thanos/commit/c0951032b34b832d0f5467e616999490a284101b) `sha256:609bacb542cf73dde0b6e680f3a85e51eba1d9dae6e84935444871028ec0b494`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [0e61642f](https://github.com/openshift/volume-data-source-validator/commit/0e61642f8d898ee199e42f37319864851dd3627f) `sha256:8242047efa386101a51b87cc13f3b674359411eae432d04b72601e14fad774e8`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [5cd04d61](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/5cd04d61c20872edaaa2c3958779ff29ea6e6d82) `sha256:d42444d17c3e7e1effdf2b4012628f11bb05621954c3f91d5a005c50edc4b072`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [9d55c028](https://github.com/openshift/vsphere-problem-detector/commit/9d55c028b27bc63c687342f0b7172ce39e07ec5a) `sha256:04d1d4afba9beaf8d2946420ae9a33f35ce9ef3132b1d93ffa0460a9d64944a2`
### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/c616cdc940cf15bc911d0228e589d931c5a741d3)
* NO-ISSUE: pin gotestsum to v1.12.3 (#8020) [#8020](https://github.com/openshift/assisted-service/pull/8020)
* [Full changelog](https://github.com/openshift/assisted-service/compare/d81ac6569ccedffd1a5a05ffc4767dec27e418cb...c616cdc940cf15bc911d0228e589d931c5a741d3)
### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/11ced42a5369c0e78de202cf261c8c4db3eb7911)
* [OCPBUGS-63372](https://issues.redhat.com/browse/OCPBUGS-63372): Backport Konflux changes [#183](https://github.com/openshift/agent-installer-utils/pull/183)
* [OCPBUGS-62749](https://issues.redhat.com/browse/OCPBUGS-62749): Red Hat Konflux kflux-prd-rh02 update ove-ui-iso-4-20 [#172](https://github.com/openshift/agent-installer-utils/pull/172)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/3ae48f72fc311267ce09fa3f1088b3719f51a138...11ced42a5369c0e78de202cf261c8c4db3eb7911)
### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/300439ea0736444a160c061578b3bd8956d4f7e6)
* [OCPBUGS-61040](https://issues.redhat.com/browse/OCPBUGS-61040): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.2 (d3a7da1) into release-4.20 [#578](https://github.com/openshift/cluster-api-provider-aws/pull/578)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/9467200c8073d4609cfca356bc6fc8126c505886...300439ea0736444a160c061578b3bd8956d4f7e6)
### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/aaed46b82068ec95f4de716c9e7c09174cfee582)
* [OCPBUGS-62688](https://issues.redhat.com/browse/OCPBUGS-62688): Add withCABundleDaemonSetHook() to AWS EFS operator [#441](https://github.com/openshift/csi-operator/pull/441)
* [Full changelog](https://github.com/openshift/csi-operator/compare/a92ebd03f1d495e27a76b03e9db002e08fcb8ac8...aaed46b82068ec95f4de716c9e7c09174cfee582)
### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/f5c125807016b8e0187654e53762532d8c2fe923)
* [OCPBUGS-63136](https://issues.redhat.com/browse/OCPBUGS-63136): client: re-use a single file for building the session instead of randomly named files [#148](https://github.com/openshift/machine-api-provider-aws/pull/148)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/d1cc300e80d2c02c234a04b8c72b71e720bc311f...f5c125807016b8e0187654e53762532d8c2fe923)
### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/cbd9f67f1260b158294f7dd16a87863c139702cb)
* [OCPBUGS-63461](https://issues.redhat.com/browse/OCPBUGS-63461): Prevent duplicate noProxy when adding nodes [#10028](https://github.com/openshift/installer/pull/10028)
* [OCPBUGS-62920](https://issues.redhat.com/browse/OCPBUGS-62920): AGENT-1269: Use agent-installer-ui image from release [#10009](https://github.com/openshift/installer/pull/10009)
* [OCPBUGS-62343](https://issues.redhat.com/browse/OCPBUGS-62343): [release-4.20] vSphere 7 deprecation [#9973](https://github.com/openshift/installer/pull/9973)
* [OCPBUGS-62124](https://issues.redhat.com/browse/OCPBUGS-62124): Update the RHCOS 4.20 bootimage metadata [#9997](https://github.com/openshift/installer/pull/9997)
* [OCPBUGS-62948](https://issues.redhat.com/browse/OCPBUGS-62948): Add an option in image-based installation to specify architecture [#9943](https://github.com/openshift/installer/pull/9943)
* [OCPBUGS-62935](https://issues.redhat.com/browse/OCPBUGS-62935): Add MTU validation for networkConfig [#10010](https://github.com/openshift/installer/pull/10010)
* [OCPBUGS-62846](https://issues.redhat.com/browse/OCPBUGS-62846): None: Allow IPv6 Primary DualStack installs on platforms None and External [#10005](https://github.com/openshift/installer/pull/10005)
* [OCPBUGS-62656](https://issues.redhat.com/browse/OCPBUGS-62656): Set agent-extract-tui start timeout [#9990](https://github.com/openshift/installer/pull/9990)
* [OCPBUGS-62640](https://issues.redhat.com/browse/OCPBUGS-62640): Wildcards not reliable for copying container files [#9986](https://github.com/openshift/installer/pull/9986)
* [OCPBUGS-62297](https://issues.redhat.com/browse/OCPBUGS-62297): Set default for PrivateDNSZone Project ID [#9968](https://github.com/openshift/installer/pull/9968)
* [OCPBUGS-61528](https://issues.redhat.com/browse/OCPBUGS-61528): Allow user to BYO private zone without specifying name [#9936](https://github.com/openshift/installer/pull/9936)
* [OCPBUGS-61552](https://issues.redhat.com/browse/OCPBUGS-61552): Shellcheck fix 4.20 [#9938](https://github.com/openshift/installer/pull/9938)
* [Full changelog](https://github.com/openshift/installer/compare/c805b240dc45c054ff83d57ae945772feef90ea4...cbd9f67f1260b158294f7dd16a87863c139702cb)
### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/7f1d6f88cb0c8ed5c877fc0ae2bd99298c6339f2)
* [OCPBUGS-61757](https://issues.redhat.com/browse/OCPBUGS-61757): pkg/cli/admin/upgrade/recommend: Enable precheck and accept gates [#2097](https://github.com/openshift/oc/pull/2097)
* [Full changelog](https://github.com/openshift/oc/compare/a43428189603f12ae190703cb725f66f742fbe52...7f1d6f88cb0c8ed5c877fc0ae2bd99298c6339f2)
### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/d391c0b339c48f49711ccff9ebac62039bf5c6f7)
* [OCPBUGS-61586](https://issues.redhat.com/browse/OCPBUGS-61586): set cloud-credential-operator as default-container [#916](https://github.com/openshift/cloud-credential-operator/pull/916)
* [OCPBUGS-61225](https://issues.redhat.com/browse/OCPBUGS-61225): ccoctl: aws to use proper issuer url on subsequent runs [#912](https://github.com/openshift/cloud-credential-operator/pull/912)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/69a6090e6d2ddedb585d9e0583628028ebe4b26f...d391c0b339c48f49711ccff9ebac62039bf5c6f7)
### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/147e5a7ff20b46ade7dd932b47e06ca82729f5e8)
* [AUTOSCALE-244](https://issues.redhat.com/browse/AUTOSCALE-244): Allow cluster-operator service account to patch machinesets/scale subresource [#352](https://github.com/openshift/cluster-autoscaler-operator/pull/352)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/737a029cead22e5cb03991f0efbff7bc1d901caa...147e5a7ff20b46ade7dd932b47e06ca82729f5e8)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/2c9f77f2a7fe3c7233a50b2ba0acb3155f9d34bb)
* [OCPBUGS-62316](https://issues.redhat.com/browse/OCPBUGS-62316): Always have a service for ironic-api port [#511](https://github.com/openshift/cluster-baremetal-operator/pull/511)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/7c032738a133c6061997d6a8062c841d9f164090...2c9f77f2a7fe3c7233a50b2ba0acb3155f9d34bb)
### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/acf331446369b5307b6b435af14daabdca9fafbc)
* [OCPBUGS-62755](https://issues.redhat.com/browse/OCPBUGS-62755): kubeconfig controller: do not error on token secret not yet populated [#377](https://github.com/openshift/cluster-capi-operator/pull/377)
* [OCPBUGS-61770](https://issues.redhat.com/browse/OCPBUGS-61770): Fix conversion of Machines without MachineSet [#362](https://github.com/openshift/cluster-capi-operator/pull/362)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/64fd75d91fed293329d2cd681ea3fa703fad6bff...acf331446369b5307b6b435af14daabdca9fafbc)
### [cluster-config-api](https://github.com/openshift/api/tree/41627d81e9c18fbcc3f7ff6de2ba50e0b98435c4)
* [OCPBUGS-62280](https://issues.redhat.com/browse/OCPBUGS-62280): ConsoleLink CRD has incorrect additionalPrinterColumns entry [#2509](https://github.com/openshift/api/pull/2509)
* [OCPBUGS-62256](https://issues.redhat.com/browse/OCPBUGS-62256): ConsoleLink CRD has incorrect additionalPrinterColumns entry [#2508](https://github.com/openshift/api/pull/2508)
* [OCPBUGS-61977](https://issues.redhat.com/browse/OCPBUGS-61977): Add 'AGE' print column to MachineConfigNode object [#2497](https://github.com/openshift/api/pull/2497)
* [OCPBUGS-56778](https://issues.redhat.com/browse/OCPBUGS-56778): Disable PSA for 4.20 [#2475](https://github.com/openshift/api/pull/2475)
* [Full changelog](https://github.com/openshift/api/compare/8634aa495a26bb4aaa63ce810b9768899a0c6e19...41627d81e9c18fbcc3f7ff6de2ba50e0b98435c4)
### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/019abe0c7671962829eb91269e1d76916966320e)
* [OCPBUGS-62258](https://issues.redhat.com/browse/OCPBUGS-62258): add all-egress label to deployments on HCP and IBM [#244](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/244)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/3880c9659829c9904e58a943050e8dfd4c9a79cb...019abe0c7671962829eb91269e1d76916966320e)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/0d7067cb286ad4efad5cad9bcff17656ef9827a3)
* [OCPBUGS-62738](https://issues.redhat.com/browse/OCPBUGS-62738): CNTRLPLANE-1315:Add OpenShift Tests Extension (OTE) for cluster-etcd-operator [#1491](https://github.com/openshift/cluster-etcd-operator/pull/1491)
* [OCPBUGS-63249](https://issues.redhat.com/browse/OCPBUGS-63249): Ensure revision.json persists on ungraceful shutdown [#1501](https://github.com/openshift/cluster-etcd-operator/pull/1501)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/61b7fb5116f8672bab6fcccbb9336e197ac07602...0d7067cb286ad4efad5cad9bcff17656ef9827a3)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/cae310f190fccb3f0fa613de50c484afb039c098)
* [OCPBUGS-55670](https://issues.redhat.com/browse/OCPBUGS-55670): revert dev cert rotation [#1906](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1906)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/0bec046c8c10682390e2a20ae4f416a2d8589f40...cae310f190fccb3f0fa613de50c484afb039c098)
### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/5a7da72ce2d21fc0900b428334865d97f39f6037)
* [OCPBUGS-55217](https://issues.redhat.com/browse/OCPBUGS-55217): Throttle resourcesynccontroller on pairs with dual writers. [#882](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/882)
* [OCPBUGS-61323](https://issues.redhat.com/browse/OCPBUGS-61323): CNTRLPLANE-1275:Fixing arch issue [#870](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/870)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/3b20c534b1b92d46055147c4f82f69b2ad3044c9...5a7da72ce2d21fc0900b428334865d97f39f6037)
### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/58cbd296eecc61c0871739588ae65af9c05e87a6)
* [OCPBUGS-61544](https://issues.redhat.com/browse/OCPBUGS-61544): add readonlyRootFilesystem [#576](https://github.com/openshift/cluster-kube-scheduler-operator/pull/576)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/f9b5b31943f2be768af6373def4c8946a30d0ed6...58cbd296eecc61c0871739588ae65af9c05e87a6)
### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/5adc14299739bc64c8812cbab0b0ff2d12863602)
* [OCPBUGS-61325](https://issues.redhat.com/browse/OCPBUGS-61325): CNTRLPLANE-1306:Fixing arch issue [#131](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/131)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/8f8e94713cf1f0fe373836b147fd8190340deef8...5adc14299739bc64c8812cbab0b0ff2d12863602)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/c2dfaad07a7098d4b88df54d88fa2b77f18df52b)
* [OCPBUGS-63408](https://issues.redhat.com/browse/OCPBUGS-63408): chore(prometheus/remotewrite): [release-4.20] clarify that the in-cluster proxy env vars set in prometheus container can be used in all configs that support proxyConfig.proxyFromEnvironment [#2721](https://github.com/openshift/cluster-monitoring-operator/pull/2721)
* [OCPBUGS-62979](https://issues.redhat.com/browse/OCPBUGS-62979): Remove AlertManager endpoints when disabled [#2710](https://github.com/openshift/cluster-monitoring-operator/pull/2710)
* [OCPBUGS-62750](https://issues.redhat.com/browse/OCPBUGS-62750): Add mcd_local_unsupported_packages metric from MCO to telemetry 4.20 [#2692](https://github.com/openshift/cluster-monitoring-operator/pull/2692)
* [OCPBUGS-62308](https://issues.redhat.com/browse/OCPBUGS-62308): test: remove image registry e2e tests [#2686](https://github.com/openshift/cluster-monitoring-operator/pull/2686)
* [OCPBUGS-61680](https://issues.redhat.com/browse/OCPBUGS-61680): add flag `--watch-referenced-objects-in-all-namespaces` to prometheus-operator [#2667](https://github.com/openshift/cluster-monitoring-operator/pull/2667)
* [OCPBUGS-61207](https://issues.redhat.com/browse/OCPBUGS-61207): chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind [#2661](https://github.com/openshift/cluster-monitoring-operator/pull/2661)
* [OCPBUGS-61166](https://issues.redhat.com/browse/OCPBUGS-61166): Revert "MON-4343: Cleanup deprecate pa config" [#2659](https://github.com/openshift/cluster-monitoring-operator/pull/2659)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/4496a0a83b65e566038715a1f2405ba194c10439...c2dfaad07a7098d4b88df54d88fa2b77f18df52b)
### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/b0393aa3e67302d89e91b8f7b1013b6d2e317f04)
* [OCPBUGS-62678](https://issues.redhat.com/browse/OCPBUGS-62678): Tweak iptables-alerter to try to avoid crictl bug [#2811](https://github.com/openshift/cluster-network-operator/pull/2811)
* [OCPBUGS-62273](https://issues.redhat.com/browse/OCPBUGS-62273): Fix EgressIP stale GARP post reboot + pod restart [#2806](https://github.com/openshift/cluster-network-operator/pull/2806)
* [OCPBUGS-61779](https://issues.redhat.com/browse/OCPBUGS-61779): Relax label req. of DPU/DPU Host/Smart NIC [#2800](https://github.com/openshift/cluster-network-operator/pull/2800)
* [OCPBUGS-61370](https://issues.redhat.com/browse/OCPBUGS-61370): Set maxUnavailable 10% on MultiNetworkPolicy DS [#2793](https://github.com/openshift/cluster-network-operator/pull/2793)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/11ee8f9ffc0a6a0fd3fd7471d84963d7bd2a540f...b0393aa3e67302d89e91b8f7b1013b6d2e317f04)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/2bcf9f0303ea6a77813f7f1c79d91cd3b67c2860)
* [OCPBUGS-63334](https://issues.redhat.com/browse/OCPBUGS-63334): Do not cause kubelet failed dependency by ocp-tuned-one-shot.service [#1415](https://github.com/openshift/cluster-node-tuning-operator/pull/1415)
* [OCPBUGS-62214](https://issues.redhat.com/browse/OCPBUGS-62214): E2E: Add function to check control plane nodes are schedulable. [#1398](https://github.com/openshift/cluster-node-tuning-operator/pull/1398)
* [OCPBUGS-62023](https://issues.redhat.com/browse/OCPBUGS-62023): release-4.20: e2e: set of fixes/changes to ovs pinning testing [#1394](https://github.com/openshift/cluster-node-tuning-operator/pull/1394)
* [OCPBUGS-62017](https://issues.redhat.com/browse/OCPBUGS-62017): E2E: llc: Create testing namespace before Runtime tests [#1393](https://github.com/openshift/cluster-node-tuning-operator/pull/1393)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/3c890f038bc1da82298b2633c8c61f466e0b3e68...2bcf9f0303ea6a77813f7f1c79d91cd3b67c2860)
### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/aa455c043152123595c2b4f72e02279aad9dd48a)
* [OCPBUGS-61607](https://issues.redhat.com/browse/OCPBUGS-61607): set up openshift-tests-extension for cluster-openshift-controller-manager-operator and add a sanity test [#396](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/396)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/dfaeb8d5fdf1f43df37916ec3d70f57ddebb1028...aa455c043152123595c2b4f72e02279aad9dd48a)
### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/47c783103216aa5e1242632127a5d8f98b8b7455)
* [OCPBUGS-62053](https://issues.redhat.com/browse/OCPBUGS-62053): fix(psalabelsyncer): return an error instead of panic when converting an unknown volume [#168](https://github.com/openshift/cluster-policy-controller/pull/168)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/3e7538547c8f209c72083097a4ebaada6e9c46c5...47c783103216aa5e1242632127a5d8f98b8b7455)
### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/d6b7775e872264a8e53f4bfe3ba884a3888367b7)
* [OCPBUGS-62668](https://issues.redhat.com/browse/OCPBUGS-62668), [OCPBUGS-62993](https://issues.redhat.com/browse/OCPBUGS-62993): Move metrics to vsphere driver [#630](https://github.com/openshift/cluster-storage-operator/pull/630)
* [OCPBUGS-62175](https://issues.redhat.com/browse/OCPBUGS-62175): add all-egress label to deployments on HCP and IBM [#622](https://github.com/openshift/cluster-storage-operator/pull/622)
* [OCPBUGS-61249](https://issues.redhat.com/browse/OCPBUGS-61249): Fix logging e2e also faster cleanup [#613](https://github.com/openshift/cluster-storage-operator/pull/613)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/cfcc1f7f1f2c702118cd4b182d04c12defac6d30...d6b7775e872264a8e53f4bfe3ba884a3888367b7)
### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/77782f1a4b9648f8ade2bc1e75d10779784e341f)
* [OCPBUGS-63001](https://issues.redhat.com/browse/OCPBUGS-63001): Add ClusterVersionOperator manifests to TechPreviewNoUpgrade clusters in 4.20 [#1247](https://github.com/openshift/cluster-version-operator/pull/1247)
* [OCPBUGS-62867](https://issues.redhat.com/browse/OCPBUGS-62867): temporarily disable metrics auth for hypershift clusters [#1244](https://github.com/openshift/cluster-version-operator/pull/1244)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/b21fbd24bd0512b38e9dab463383e662d1c92a01...77782f1a4b9648f8ade2bc1e75d10779784e341f)
### [console](https://github.com/openshift/console/tree/712584257c2fb5b9b060a5e49ce44591cb4363de)
* [OCPBUGS-63440](https://issues.redhat.com/browse/OCPBUGS-63440): Expose prometheus tenancy label path as a proxy [#15632](https://github.com/openshift/console/pull/15632)
* [OCPBUGS-63465](https://issues.redhat.com/browse/OCPBUGS-63465): Remove required flag from 'console.flag/model' pipelines-plugin extension [#15634](https://github.com/openshift/console/pull/15634)
* [OCPBUGS-63403](https://issues.redhat.com/browse/OCPBUGS-63403): Fix Bare Metal Hosts nav item [#15628](https://github.com/openshift/console/pull/15628)
* [OCPBUGS-62644](https://issues.redhat.com/browse/OCPBUGS-62644): bump dompurify to latest [#15587](https://github.com/openshift/console/pull/15587)
* [OCPBUGS-61926](https://issues.redhat.com/browse/OCPBUGS-61926): PVC shows negative Available space in OpenShift Console on RHOCP 4 [#15512](https://github.com/openshift/console/pull/15512)
* [OCPBUGS-61861](https://issues.redhat.com/browse/OCPBUGS-61861): cluster in workload identity mode is not applied with the token-auth-ā¦ [#15507](https://github.com/openshift/console/pull/15507)
* [OCPBUGS-61848](https://issues.redhat.com/browse/OCPBUGS-61848): Updation of label from edit label doesn't work [#15506](https://github.com/openshift/console/pull/15506)
* [OCPBUGS-62196](https://issues.redhat.com/browse/OCPBUGS-62196): Add Missing Periods to Error Messages and update try again button link [#15537](https://github.com/openshift/console/pull/15537)
* [OCPBUGS-62015](https://issues.redhat.com/browse/OCPBUGS-62015): Help dropdown should be closed automatically after tour model opened [#15519](https://github.com/openshift/console/pull/15519)
* [OCPBUGS-61990](https://issues.redhat.com/browse/OCPBUGS-61990): Change default tab size from 4 to 2 [#15515](https://github.com/openshift/console/pull/15515)
* [OCPBUGS-61671](https://issues.redhat.com/browse/OCPBUGS-61671): i18n upload/download routine task for OCP version 4.20 [#15485](https://github.com/openshift/console/pull/15485)
* [OCPBUGS-61777](https://issues.redhat.com/browse/OCPBUGS-61777): Fix improper DescriptionList refactor [#15499](https://github.com/openshift/console/pull/15499)
* [OCPBUGS-61327](https://issues.redhat.com/browse/OCPBUGS-61327): Correct the ordering of Catalog categories to be alphabetized [#15468](https://github.com/openshift/console/pull/15468)
* [OCPBUGS-61226](https://issues.redhat.com/browse/OCPBUGS-61226): fix typo in update approval strategy label [#15458](https://github.com/openshift/console/pull/15458)
* [Full changelog](https://github.com/openshift/console/compare/0748392def188dbb070308c32c1fbb3457624f95...712584257c2fb5b9b060a5e49ce44591cb4363de)
### [console-operator](https://github.com/openshift/console-operator/tree/5e127e5f49c56b47914e2ba4aedb09e99b165800)
* [OCPBUGS-61230](https://issues.redhat.com/browse/OCPBUGS-61230): pluginOrder field should only contain available plugins [#1040](https://github.com/openshift/console-operator/pull/1040)
* [Full changelog](https://github.com/openshift/console-operator/compare/76ae5dafe7640111fa8e9c7f745122e4844d4a5d...5e127e5f49c56b47914e2ba4aedb09e99b165800)
### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/c674bea9bb6a81e463c7fefa974e2109d829daef)
* [OCPBUGS-61546](https://issues.redhat.com/browse/OCPBUGS-61546): Requeue PVC over PV creation [#172](https://github.com/openshift/csi-external-resizer/pull/172)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/9cd710b1f1f0ce002af0af76709401ace3e48051...c674bea9bb6a81e463c7fefa974e2109d829daef)
### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/6ce4713c87b735e2546a65a871bd2c7cfe383c31)
* [OCPBUGS-62844](https://issues.redhat.com/browse/OCPBUGS-62844): update log level verbosity to not clutter logs [#87](https://github.com/openshift/csi-node-driver-registrar/pull/87)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/3a2c732e73b19c947945256e9ea0581653988ab0...6ce4713c87b735e2546a65a871bd2c7cfe383c31)
### [docker-registry](https://github.com/openshift/image-registry/tree/0c09647aa2db93a8584dfe8079ed919145c662fb)
* [OCPBUGS-61638](https://issues.redhat.com/browse/OCPBUGS-61638): update OWNERS [#449](https://github.com/openshift/image-registry/pull/449)
* [Full changelog](https://github.com/openshift/image-registry/compare/887533765ee92e061fd44ad0b032aefd5b9b4e3c...0c09647aa2db93a8584dfe8079ed919145c662fb)
### [haproxy-router](https://github.com/openshift/router/tree/96bfd2164c7885df9019ce9eeb79d506bd7e871b)
* [OCPBUGS-61558](https://issues.redhat.com/browse/OCPBUGS-61558): Revert Prevent startup failures due to name resolution" [#674](https://github.com/openshift/router/pull/674)
* [Full changelog](https://github.com/openshift/router/compare/47274e213d8a511066a9492b73c9b8eccc353571...96bfd2164c7885df9019ce9eeb79d506bd7e871b)
### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/e0d42164c84ee27644b85a1d2c9bbb062066056d)
* [OCPBUGS-61555](https://issues.redhat.com/browse/OCPBUGS-61555): Bump 1.33.5 [#2461](https://github.com/openshift/kubernetes/pull/2461)
* [OCPBUGS-61753](https://issues.redhat.com/browse/OCPBUGS-61753): UPSTREAM: <carry>: Add retries for GetCurrentResourceVersion. [#2469](https://github.com/openshift/kubernetes/pull/2469)
* [OCPBUGS-61720](https://issues.redhat.com/browse/OCPBUGS-61720): Do not remove PVC ClaimRef to fix flaky VAC test [#2463](https://github.com/openshift/kubernetes/pull/2463)
* [OCPBUGS-61197](https://issues.redhat.com/browse/OCPBUGS-61197): UPSTREAM: 133425: Fix SELinux label comparison [#2445](https://github.com/openshift/kubernetes/pull/2445)
* [OCPBUGS-61347](https://issues.redhat.com/browse/OCPBUGS-61347): UPSTREAM: <carry>: backporting fix for concurrent map iteration and write [#2450](https://github.com/openshift/kubernetes/pull/2450)
* [OCPBUGS-61333](https://issues.redhat.com/browse/OCPBUGS-61333): Unrevert bump to v1.33.4 [#2449](https://github.com/openshift/kubernetes/pull/2449)
* [Full changelog](https://github.com/openshift/kubernetes/compare/6efb6a95323fe35285877dcdade237444b35cae0...e0d42164c84ee27644b85a1d2c9bbb062066056d)
### [hypershift](https://github.com/openshift/hypershift/tree/0e15c389eeafd816549bcda092124105a762f7d1)
* [OCPBUGS-62020](https://issues.redhat.com/browse/OCPBUGS-62020): fix(security): harden konnectivity-agent DaemonSet security context [#6870](https://github.com/openshift/hypershift/pull/6870)
* [OCPBUGS-62806](https://issues.redhat.com/browse/OCPBUGS-62806): Fix driver-config ConfigMap content flapping due to random ordering [#6945](https://github.com/openshift/hypershift/pull/6945)
* [OCPBUGS-63387](https://issues.redhat.com/browse/OCPBUGS-63387): fix: routes are not used in case of IBM Cloud [#7079](https://github.com/openshift/hypershift/pull/7079)
* [CNTRLPLANE-1648](https://issues.redhat.com/browse/CNTRLPLANE-1648): Remove main-branch build pipelines from release-4.20 [#7050](https://github.com/openshift/hypershift/pull/7050)
* [OCPSTRAT-2472](https://issues.redhat.com/browse/OCPSTRAT-2472): Add latest tag to MCE 2.10 build pipeline [#6912](https://github.com/openshift/hypershift/pull/6912)
* [OCPBUGS-62182](https://issues.redhat.com/browse/OCPBUGS-62182): fix(kas-bootstrap): increase wait timeouts to avoid KAS startup races [#6887](https://github.com/openshift/hypershift/pull/6887)
* [OCPBUGS-62005](https://issues.redhat.com/browse/OCPBUGS-62005): Enable VolumeAttributesClass runtime config [#6868](https://github.com/openshift/hypershift/pull/6868)
* [OCPBUGS-62006](https://issues.redhat.com/browse/OCPBUGS-62006): fix(ignition-server): Don't delete user-managed cert secrets [#6869](https://github.com/openshift/hypershift/pull/6869)
* [OCPBUGS-61863](https://issues.redhat.com/browse/OCPBUGS-61863): ci: Use the common MCE konflux pipeline [#6847](https://github.com/openshift/hypershift/pull/6847)
* [OCPBUGS-61066](https://issues.redhat.com/browse/OCPBUGS-61066): fix: propagate AWSLoadBalancerTargetNodesAnnotation to HCP [#6772](https://github.com/openshift/hypershift/pull/6772)
* [OCPBUGS-61575](https://issues.redhat.com/browse/OCPBUGS-61575): fix(kas): Set correct container port in postStart handler, 2 [#6854](https://github.com/openshift/hypershift/pull/6854)
* [OCPBUGS-61565](https://issues.redhat.com/browse/OCPBUGS-61565): [release-4.20] fix(proxy): ensure URLs have scheme before proxy resolution [#6791](https://github.com/openshift/hypershift/pull/6791)
* [OCPBUGS-61746](https://issues.redhat.com/browse/OCPBUGS-61746): fix(oauth): oauth-openshift deployment should be HA [#6828](https://github.com/openshift/hypershift/pull/6828)
* [OCPBUGS-56778](https://issues.redhat.com/browse/OCPBUGS-56778): fix(kas): Disable PSA enforcement in 4.20 [#6830](https://github.com/openshift/hypershift/pull/6830)
* [CNTRLPLANE-1397](https://issues.redhat.com/browse/CNTRLPLANE-1397): feat(konflux): tag MCE HO images with latest [#6784](https://github.com/openshift/hypershift/pull/6784)
* [OCPBUGS-61670](https://issues.redhat.com/browse/OCPBUGS-61670): fix(control-plane): remove resource limits from kube-controller-manager [#6804](https://github.com/openshift/hypershift/pull/6804)
* [OCPBUGS-61667](https://issues.redhat.com/browse/OCPBUGS-61667): resolve MIRRORED_RELEASE_IMAGE flapping [#6803](https://github.com/openshift/hypershift/pull/6803)
* [OCPBUGS-61321](https://issues.redhat.com/browse/OCPBUGS-61321): rename CCM deployments to align with 4.19 [#6768](https://github.com/openshift/hypershift/pull/6768)
* [OCPBUGS-61322](https://issues.redhat.com/browse/OCPBUGS-61322): fix: cleanup old PKI operator deployment during upgrades [#6769](https://github.com/openshift/hypershift/pull/6769)
* [Full changelog](https://github.com/openshift/hypershift/compare/55ffa9313ae32a9b31a06b748a90b7d8f69d9396...0e15c389eeafd816549bcda092124105a762f7d1)
### [insights-operator](https://github.com/openshift/insights-operator/tree/10a1c1746d728197c42163217764eda00a3cbb4f)
* [OCPBUGS-62019](https://issues.redhat.com/browse/OCPBUGS-62019): update DataGather condition when gathering job fails [#1155](https://github.com/openshift/insights-operator/pull/1155)
* [OCPBUGS-61784](https://issues.redhat.com/browse/OCPBUGS-61784): Update error message for missing SCA certificates [#1139](https://github.com/openshift/insights-operator/pull/1139)
* [OCPBUGS-61845](https://issues.redhat.com/browse/OCPBUGS-61845): add missing permissions for replicasets and events [#1144](https://github.com/openshift/insights-operator/pull/1144)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/insights-operator/compare/b82259ab1186594ff62bd063ee5145ded9a09e95...10a1c1746d728197c42163217764eda00a3cbb4f)
### [ironic](https://github.com/openshift/ironic-image/tree/9c57a81902530b0268eddd7ad623a972b5ba4042)
* [OCPBUGS-52427](https://issues.redhat.com/browse/OCPBUGS-52427): Bump ironic and sushy to fix idrac10 [#698](https://github.com/openshift/ironic-image/pull/698)
* [OKD-290](https://issues.redhat.com/browse/OKD-290): (OKD4.20) Fix ironic-image errors and metal3 pod crashes on CentOS9 [#696](https://github.com/openshift/ironic-image/pull/696)
* [OCPBUGS-61461](https://issues.redhat.com/browse/OCPBUGS-61461): revert the switch to local RPC [#690](https://github.com/openshift/ironic-image/pull/690)
* [OCPBUGS-61257](https://issues.redhat.com/browse/OCPBUGS-61257): set [json_rpc]port unconditionally [#686](https://github.com/openshift/ironic-image/pull/686)
* [Full changelog](https://github.com/openshift/ironic-image/compare/e9d325e27753eb41c9646dcdffc30833426e2502...9c57a81902530b0268eddd7ad623a972b5ba4042)
### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/4a9b90e306a04ddfacfa408609c98b48a1cdea17)
* [OCPBUGS-61853](https://issues.redhat.com/browse/OCPBUGS-61853): Fixed multi nic e2e to wait for node removal after machineset tests [#1418](https://github.com/openshift/machine-api-operator/pull/1418)
* [OCPBUGS-61853](https://issues.redhat.com/browse/OCPBUGS-61853): Adjusted machine e2e tests to wait for nodes to clean up [#1416](https://github.com/openshift/machine-api-operator/pull/1416)
* [OCPBUGS-61314](https://issues.redhat.com/browse/OCPBUGS-61314): bump openshift/api [#1410](https://github.com/openshift/machine-api-operator/pull/1410)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/e3846e13997f0d6e93b4b2e740212379e4500dc2...4a9b90e306a04ddfacfa408609c98b48a1cdea17)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/d239f7a5eacf418d8333d021dc02abe3ec176ace)
* [OCPBUGS-62167](https://issues.redhat.com/browse/OCPBUGS-62167): Fix - NetworkManager restart or crash renders br-ex unusable [#5353](https://github.com/openshift/machine-config-operator/pull/5353)
* [OCPBUGS-63127](https://issues.redhat.com/browse/OCPBUGS-63127): Ensure the node passed to RunCordonOrUncordon comes from the latest updated state [#5349](https://github.com/openshift/machine-config-operator/pull/5349)
* [OCPBUGS-63337](https://issues.redhat.com/browse/OCPBUGS-63337): RHEL10 RT kernel packages filtering [#5365](https://github.com/openshift/machine-config-operator/pull/5365)
* [OCPBUGS-62801](https://issues.redhat.com/browse/OCPBUGS-62801): Only fire OSImageURLOverridden and set metrics on changes [#5339](https://github.com/openshift/machine-config-operator/pull/5339)
* [OCPBUGS-62273](https://issues.redhat.com/browse/OCPBUGS-62273): Networking: reset ovn-remote config and allow ovnkube controller to sā¦ [#5317](https://github.com/openshift/machine-config-operator/pull/5317)
* [OCPBUGS-62803](https://issues.redhat.com/browse/OCPBUGS-62803): Skip rpm-ostree local rebase if no PIS [#5340](https://github.com/openshift/machine-config-operator/pull/5340)
* [OCPBUGS-62095](https://issues.redhat.com/browse/OCPBUGS-62095): CRI-O: set hard/soft file descriptor ulimits to `1048576` [#5308](https://github.com/openshift/machine-config-operator/pull/5308)
* [OCPBUGS-62174](https://issues.redhat.com/browse/OCPBUGS-62174): Fix MCP updated machine count for image mode disabling case [#5307](https://github.com/openshift/machine-config-operator/pull/5307)
* [OCPBUGS-62675](https://issues.redhat.com/browse/OCPBUGS-62675): Cert Controller should live fetch SAN IPs during cert rotation [#5326](https://github.com/openshift/machine-config-operator/pull/5326)
* [OCPBUGS-62602](https://issues.redhat.com/browse/OCPBUGS-62602): configure-ovs: work around a Cisco switch issue [#5321](https://github.com/openshift/machine-config-operator/pull/5321)
* [OCPBUGS-62080](https://issues.redhat.com/browse/OCPBUGS-62080): Add mcd_local_unsupported_packages recording rule [#5297](https://github.com/openshift/machine-config-operator/pull/5297)
* [OCPBUGS-61882](https://issues.redhat.com/browse/OCPBUGS-61882): Add nil/null checks to image registry secret decode [#5292](https://github.com/openshift/machine-config-operator/pull/5292)
* [OCPBUGS-62073](https://issues.redhat.com/browse/OCPBUGS-62073): Improve MCN CRD clean-up script [#5296](https://github.com/openshift/machine-config-operator/pull/5296)
* [OCPBUGS-61516](https://issues.redhat.com/browse/OCPBUGS-61516): Machine-config controller should actively manage cordon while draining [#5281](https://github.com/openshift/machine-config-operator/pull/5281)
* [OCPBUGS-61824](https://issues.redhat.com/browse/OCPBUGS-61824): Override NMState service definition [#5286](https://github.com/openshift/machine-config-operator/pull/5286)
* [OCPBUGS-61232](https://issues.redhat.com/browse/OCPBUGS-61232): Recheck `generatedByControllerVersion` annotation prior to deleting a degraded MC [#5273](https://github.com/openshift/machine-config-operator/pull/5273)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/063455217c390b9196f1577378cbb8a6454de527...d239f7a5eacf418d8333d021dc02abe3ec176ace)
### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/736cb4836b5b86c2fcf9aed4e87d3f528d6f9246)
* [OCPBUGS-63162](https://issues.redhat.com/browse/OCPBUGS-63162): [release-4.20] Improve alignment with console SDK [#604](https://github.com/openshift/monitoring-plugin/pull/604)
* [OCPBUGS-62978](https://issues.redhat.com/browse/OCPBUGS-62978): allow additional TLS config [#592](https://github.com/openshift/monitoring-plugin/pull/592)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/2f449d8c47450c60510abb675616a8b493055628...736cb4836b5b86c2fcf9aed4e87d3f528d6f9246)
### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/e5ad4f6fdc093595f6d939eb43868ae36ae3fdaa)
* [OCPBUGS-63052](https://issues.redhat.com/browse/OCPBUGS-63052): (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission [#151](https://github.com/openshift/oauth-apiserver/pull/151)
* [OCPBUGS-61753](https://issues.redhat.com/browse/OCPBUGS-61753): Bump openshift/kubernetes-apiserver. [#147](https://github.com/openshift/oauth-apiserver/pull/147)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/7033e0fa18593c8814cf14d0f10a9226d7d93c45...e5ad4f6fdc093595f6d939eb43868ae36ae3fdaa)
### [oc-mirror](https://github.com/openshift/oc-mirror/tree/b51b46d4d6000054d1a11568b3302f709a28bdde)
* [OCPBUGS-62463](https://issues.redhat.com/browse/OCPBUGS-62463): generate the archive only after mirroring [#1279](https://github.com/openshift/oc-mirror/pull/1279)
* [OCPBUGS-62283](https://issues.redhat.com/browse/OCPBUGS-62283): v2/cli: show binary version in output [#1276](https://github.com/openshift/oc-mirror/pull/1276)
* And 4 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/d42ff12456f3f227bfd42a769c4d5780dd1c6087...b51b46d4d6000054d1a11568b3302f709a28bdde)
### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/3e2401f23ef666e8f33789a397d81a7d352b0a33)
* [OCPBUGS-61890](https://issues.redhat.com/browse/OCPBUGS-61890): š CRD upgrade safety fixes and ratcheting (#2123) [#527](https://github.com/openshift/operator-framework-operator-controller/pull/527)
* NO-ISSUE: add jiazha to approvers [#513](https://github.com/openshift/operator-framework-operator-controller/pull/513)
* [OCPBUGS-62811](https://issues.redhat.com/browse/OCPBUGS-62811): for incompatible test add func to wait builder and deployer SA creation by OCP controller [#503](https://github.com/openshift/operator-framework-operator-controller/pull/503)
* [OCPBUGS-62722](https://issues.redhat.com/browse/OCPBUGS-62722): (cherry-pick) Fix truncate large error messages and unhandle changes for crd upgrade safety in status conditions [#496](https://github.com/openshift/operator-framework-operator-controller/pull/496)
* [OCPBUGS-61705](https://issues.redhat.com/browse/OCPBUGS-61705): Revert "Handle service-ca cert availability/rotation" [#474](https://github.com/openshift/operator-framework-operator-controller/pull/474)
* [OCPBUGS-61563](https://issues.redhat.com/browse/OCPBUGS-61563): [OTE] Update webhook ote tests to use latest webhook-operator [#469](https://github.com/openshift/operator-framework-operator-controller/pull/469)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/1544a1b71476f28889220d37ecafb74f5653e8bd...3e2401f23ef666e8f33789a397d81a7d352b0a33)
### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/a1535bf4ed12bd3210135bbe459f9324875f24ce)
* [OCPBUGS-61753](https://issues.redhat.com/browse/OCPBUGS-61753): Bump openshift/kubernetes-apiserver. [#557](https://github.com/openshift/openshift-apiserver/pull/557)
* [OCPBUGS-61494](https://issues.redhat.com/browse/OCPBUGS-61494): ensure cache invalidation after a time [#553](https://github.com/openshift/openshift-apiserver/pull/553)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/e817f8439e1379485594f56d74c2160c44db0864...a1535bf4ed12bd3210135bbe459f9324875f24ce)
### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/d9e543dd31e981f279c447e4f92f0dac3f665f9e)
* [OCPBUGS-61900](https://issues.redhat.com/browse/OCPBUGS-61900): Fix Dockerfile.rhel: Add OTE binary build and packaging for release-4.20 [#420](https://github.com/openshift/openshift-controller-manager/pull/420)
* [OCPBUGS-61790](https://issues.redhat.com/browse/OCPBUGS-61790): CNTRLPLANE-1308: set up openshift-tests-extension for openshift-controller-manager and add a sanity test [#418](https://github.com/openshift/openshift-controller-manager/pull/418)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/49aaf599fb9024f36359f55bac6b3bb1482e24b8...d9e543dd31e981f279c447e4f92f0dac3f665f9e)
### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/10d327b38876b2fbc654ddc54eee6199ea0dbbb8)
* [OCPBUGS-61362](https://issues.redhat.com/browse/OCPBUGS-61362): [4.20] e2e stability fixes [#1077](https://github.com/openshift/operator-framework-olm/pull/1077)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/d0e47893fd1cd037d56f40322133012d0aecd4ac...10d327b38876b2fbc654ddc54eee6199ea0dbbb8)
### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/c6abd3acc6af77a7f117bd89cececfae8c4830b1)
* [OCPBUGS-62216](https://issues.redhat.com/browse/OCPBUGS-62216): Remove Expect func so that the test case can use the retry logic [#667](https://github.com/operator-framework/operator-marketplace/pull/667)
* [OCPBUGS-61200](https://issues.redhat.com/browse/OCPBUGS-61200): Add NetworkPolicy for hypershift [#660](https://github.com/operator-framework/operator-marketplace/pull/660)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/0b6ddc07cc445687b1fa2ed205fce9cc1462abba...c6abd3acc6af77a7f117bd89cececfae8c4830b1)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/050ed2c215b55aef456c73c5217427600756ae75)
* [OCPBUGS-62913](https://issues.redhat.com/browse/OCPBUGS-62913): Configure sec nic EIPv6 address with NODAD and maximum lifetime [#2797](https://github.com/openshift/ovn-kubernetes/pull/2797)
* [OCPBUGS-62273](https://issues.redhat.com/browse/OCPBUGS-62273): Fix EgressIP stale GARP post reboot + pod restart [#2767](https://github.com/openshift/ovn-kubernetes/pull/2767)
* [OCPBUGS-61453](https://issues.redhat.com/browse/OCPBUGS-61453): [4.20] allow default network -> localnet on the same node for any localnet subnet [#2751](https://github.com/openshift/ovn-kubernetes/pull/2751)
* [OCPBUGS-62336](https://issues.redhat.com/browse/OCPBUGS-62336): Fix EgressIP controller deadlock by sorting node locks lexicographically [#2770](https://github.com/openshift/ovn-kubernetes/pull/2770)
* [OCPBUGS-61239](https://issues.redhat.com/browse/OCPBUGS-61239): Skip node-encap-ips annotation in DPU host mode [#2763](https://github.com/openshift/ovn-kubernetes/pull/2763)
* [OCPBUGS-61778](https://issues.redhat.com/browse/OCPBUGS-61778): Adding ovndb-raft-functions.sh to ovnk image [#2760](https://github.com/openshift/ovn-kubernetes/pull/2760)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/9741174157381d7b87e2d21559cbe06b8f2b5ebf...050ed2c215b55aef456c73c5217427600756ae75)
### [prometheus](https://github.com/openshift/prometheus/tree/af9b206808f8eaeb4acec7fe74ba6b145bbdc921)
* [OCPBUGS-62275](https://issues.redhat.com/browse/OCPBUGS-62275): chore(scrape): default to legacy validation/escaping scheme until utf-8 is fully supported by prometheus-operator [#273](https://github.com/openshift/prometheus/pull/273)
* [OCPBUGS-61207](https://issues.redhat.com/browse/OCPBUGS-61207): chore: compute highestTimestamp at queryManager level [#264](https://github.com/openshift/prometheus/pull/264)
* [Full changelog](https://github.com/openshift/prometheus/compare/d703f9b685380fdcfa4114f4cfd463e9b68ab00d...af9b206808f8eaeb4acec7fe74ba6b145bbdc921)
### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/37e0c31790b6a954214817974a56c9a699d0cf78)
* [OCPBUGS-61966](https://issues.redhat.com/browse/OCPBUGS-61966): don't hotloop on secret creation errors [#275](https://github.com/openshift/service-ca-operator/pull/275)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/b0fe556a981964728306f803864af9d2881db967...37e0c31790b6a954214817974a56c9a699d0cf78)
### [tests](https://github.com/openshift/origin/tree/30f0ace4f4f3fc575a05c253e8893e92d2a68404)
* [OCPBUGS-62841](https://issues.redhat.com/browse/OCPBUGS-62841): fix(test): prevent nil pointer dereference in ginkgo test runner [#30350](https://github.com/openshift/origin/pull/30350)
* [OCPBUGS-46422](https://issues.redhat.com/browse/OCPBUGS-46422): Skip ServiceCIDR in etcd_storage_path test (4.20) [#30257](https://github.com/openshift/origin/pull/30257)
* [OCPBUGS-62695](https://issues.redhat.com/browse/OCPBUGS-62695): cherry-pick 30270 to release-4.20 [#30335](https://github.com/openshift/origin/pull/30335)
* [OCPBUGS-62231](https://issues.redhat.com/browse/OCPBUGS-62231): network test isolation and reduced parallelization to protect cpu [#30300](https://github.com/openshift/origin/pull/30300)
* Revert "[release-4.20] OCPBUGS-62140:OCPSTRAT-2045:Automating OCPSTRAT-2045 feature in upstream" [#30303](https://github.com/openshift/origin/pull/30303)
* [OCPBUGS-62140](https://issues.redhat.com/browse/OCPBUGS-62140): OCPSTRAT-2045:Automating OCPSTRAT-2045 feature in upstream [#30299](https://github.com/openshift/origin/pull/30299)
* [OCPBUGS-61757](https://issues.redhat.com/browse/OCPBUGS-61757): test/extended/cli/adm_upgrade/recommend: Enable precheck and accept [#30260](https://github.com/openshift/origin/pull/30260)
* [OCPBUGS-62075](https://issues.redhat.com/browse/OCPBUGS-62075): Temporarily remove commatrix documentation test for rework [#30287](https://github.com/openshift/origin/pull/30287)
* [OCPBUGS-62007](https://issues.redhat.com/browse/OCPBUGS-62007): oidc: improve rollout wait times [#30284](https://github.com/openshift/origin/pull/30284)
* [CNF-18661](https://issues.redhat.com/browse/CNF-18661): Update vendor with communication matrix bug fixes on 4.20 [#30271](https://github.com/openshift/origin/pull/30271)
* [OCPBUGS-61734](https://issues.redhat.com/browse/OCPBUGS-61734): Restore retries for flaky port foward test [#30266](https://github.com/openshift/origin/pull/30266)
* [OCPBUGS-61540](https://issues.redhat.com/browse/OCPBUGS-61540): chore(extended/prometheus): 2/2: make 'targets auth' test more lenient and more resilient [#30263](https://github.com/openshift/origin/pull/30263)
* [OCPBUGS-61744](https://issues.redhat.com/browse/OCPBUGS-61744): update machines scale test [#30258](https://github.com/openshift/origin/pull/30258)
* [OCPBUGS-61732](https://issues.redhat.com/browse/OCPBUGS-61732): [release-4.20] CNTRLPLANE-945: oidc: add retry logic for Keycloak route creation [#30251](https://github.com/openshift/origin/pull/30251)
* [OCPBUGS-61731](https://issues.redhat.com/browse/OCPBUGS-61731): [release-4.20] CNTRLPLANE-945: images: add keycloak images and use them in ExternalOIDC tests [#30250](https://github.com/openshift/origin/pull/30250)
* [OCPBUGS-61600](https://issues.redhat.com/browse/OCPBUGS-61600): Skip config-operator checking when featureSet is DevPreviewNoUpgrade [#30245](https://github.com/openshift/origin/pull/30245)
* [OCPBUGS-61540](https://issues.redhat.com/browse/OCPBUGS-61540): chore(extended/prometheus): make 'targets auth' test more lenient and more resilient. [#30237](https://github.com/openshift/origin/pull/30237)
* [OCPBUGS-61478](https://issues.redhat.com/browse/OCPBUGS-61478): Add flaky kubectl logs test to the retry list to clean signal for release [#30231](https://github.com/openshift/origin/pull/30231)
* [OCPBUGS-61333](https://issues.redhat.com/browse/OCPBUGS-61333): Bump to latest openshift/kubernetes (v1.33.4) [#30228](https://github.com/openshift/origin/pull/30228)
* [OCPBUGS-61286](https://issues.redhat.com/browse/OCPBUGS-61286): Mark etcd net overload logging test as a flake [#30214](https://github.com/openshift/origin/pull/30214)
* [CNTRLPLANE-1306](https://issues.redhat.com/browse/CNTRLPLANE-1306): Enable OTE for cluster-kube-storage-version-migrator-operator [#30213](https://github.com/openshift/origin/pull/30213)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): [release-4.20] CNTRLPLANE-945: improve logging, add startup probe to Keycloak Deployment [#30204](https://github.com/openshift/origin/pull/30204)
* [Full changelog](https://github.com/openshift/origin/compare/755c0d2c77c6b880efd65248fb3267c189bf069d...30f0ace4f4f3fc575a05c253e8893e92d2a68404)
### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/b93eb64ff72e7c005687813c8b478d694a0f517a)
* NO-JIRA: Update OWNERS [#96](https://github.com/openshift/cloud-provider-vsphere/pull/96)
* [OCPCLOUD-2933](https://issues.redhat.com/browse/OCPCLOUD-2933): Rebase onto main [#95](https://github.com/openshift/cloud-provider-vsphere/pull/95)
* [OCPBUGS-57574](https://issues.redhat.com/browse/OCPBUGS-57574): Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART for 4.20 [#92](https://github.com/openshift/cloud-provider-vsphere/pull/92)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/70242a37ac0c7e59fd4ffb539e272ea976b88eb6...b93eb64ff72e7c005687813c8b478d694a0f517a)
### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/1ff9e11f5a117505d935549b96cd0d129917c015)
* [OCPBUGS-61647](https://issues.redhat.com/browse/OCPBUGS-61647): Fix unit tests [#68](https://github.com/openshift/cluster-api-provider-vsphere/pull/68)
* NO-JIRA: Update OWNERS [#63](https://github.com/openshift/cluster-api-provider-vsphere/pull/63)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/64ebe003b8932779a01eaf2244cda82d9e5de68d...1ff9e11f5a117505d935549b96cd0d129917c015)
### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/61d0d00a78ee60ee57fcc99648a8851f0db52e5a)
* [STOR-2404](https://issues.redhat.com/browse/STOR-2404): Rebase to upstream v3.5.0 for OCP 4.20 [#147](https://github.com/openshift/vmware-vsphere-csi-driver/pull/147)
* [OCPBUGS-57582](https://issues.redhat.com/browse/OCPBUGS-57582): Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.20 [#146](https://github.com/openshift/vmware-vsphere-csi-driver/pull/146)
* [OCPBUGS-57570](https://issues.redhat.com/browse/OCPBUGS-57570): Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.20 [#145](https://github.com/openshift/vmware-vsphere-csi-driver/pull/145)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/0130247772b8d6618f9d25bbe7bde0a6c9224f9a...61d0d00a78ee60ee57fcc99648a8851f0db52e5a)