# 4.22.0-okd-scos.ec.11
Created: 2026-04-17 20:50:06 +0000 UTC
Image Digest: `sha256:504312730931ff5c62ea79ac24feb085f8dc4f0bf3f62239e14fb307a43db260`
Promoted from registry.ci.openshift.org/origin/release-scos:4.22.0-0.okd-scos-nightly-2026-04-17-093748
## Changes from 4.21.0-okd-scos.ec.19
### Components
* Kubectl upgraded from 1.34.1 to 1.35.2
* Kubernetes upgraded from 1.34.2 to 1.35.3
* Kubernetes Tests upgraded from 1.34.1 to 1.35.1
* CentOS Stream CoreOS 10 upgraded from 10.0.20260109-0 to 10.0.20260408-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | OKD
Hypershift | OKD
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: |
| AdditionalRoutingCapabilities
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(New)| Unconditionally Enabled
(New)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| AdminNetworkPolicy
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(New)| Unconditionally Enabled
(New)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| AlibabaPlatform
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(New)| Unconditionally Enabled
(New)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| CPMSMachineNamePrefix
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(New)| Unconditionally Enabled
(New)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| GCPClusterHostedDNS
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(New)| Unconditionally Enabled
(New)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| GCPClusterHostedDNSInstall
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(New)| Unconditionally Enabled
(New)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| GatewayAPI
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(New)| Unconditionally Enabled
(New)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| GatewayAPIController
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(New)| Unconditionally Enabled
(New)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| HighlyAvailableArbiter
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(New)| Unconditionally Enabled
(New)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ImageVolume
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(New)| Unconditionally Enabled
(New)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| MachineConfigNodes
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(New)| Unconditionally Enabled
(New)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ManagedBootImages
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(New)| Unconditionally Enabled
(New)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ManagedBootImagesAWS
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(New)| Unconditionally Enabled
(New)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ManagedBootImagesAzure
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(New)| Unconditionally Enabled
(New)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ManagedBootImagesvSphere
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(New)| Unconditionally Enabled
(New)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| NetworkDiagnosticsConfig
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(New)| Unconditionally Enabled
(New)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| NetworkLiveMigration
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(New)| Unconditionally Enabled
(New)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| NetworkSegmentation
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(New)| Unconditionally Enabled
(New)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| PinnedImages
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(New)| Unconditionally Enabled
(New)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| PreconfiguredUDNAddresses
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(New)| Unconditionally Enabled
(New)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ProcMountType
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(New)| Unconditionally Enabled
(New)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| RouteAdvertisements
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(New)| Unconditionally Enabled
(New)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| TranslateStreamCloseWebsocketRequests
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(New)| Unconditionally Enabled
(New)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| VolumeAttributesClass
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(New)| Unconditionally Enabled
(New)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| AzureClusterHostedDNSInstall
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled
(New)| Enabled
(New)| Enabled| Enabled |
| BootImageSkewEnforcement
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled
(New)| Enabled
(New)| Enabled| Enabled |
| DualReplica
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled
(New)| Enabled
(New)| Enabled| Enabled |
| EventTTL
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled
(New)| Enabled
(New)| Enabled| Enabled |
| InsightsConfig
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled
(New)| Enabled
(New)| Enabled| Enabled |
| InsightsOnDemandDataGather
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled
(New)| Enabled
(New)| Enabled| Enabled |
| ManagedBootImagesCPMS
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled
(New)| Enabled
(New)| Enabled| Enabled |
| MutableCSINodeAllocatableCount
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled
(New)| Enabled
(New)| Enabled| Enabled |
| VSphereHostVMGroupZonal
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled
(New)| Enabled
(New)| Enabled| Enabled |
| AWSServiceLBNetworkSecurityGroup
(0 tests)| Disabled| Enabled
(Changed)| Enabled| Enabled| | Enabled
(New)| Enabled| Enabled |
| GatewayAPIWithoutOLM
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ClusterAPIMachineManagementVSphere
(0 tests)| Disabled| Disabled| Enabled| Enabled| | | Enabled
(Changed)| Enabled
(Changed) |
| IngressControllerDynamicConfigurationManager
(0 tests)| Disabled| Disabled| Enabled| Enabled| | | Enabled
(Changed)| Enabled
(Changed) |
| KMSEncryptionProvider
(0 tests)| Disabled| Disabled| Enabled| Enabled| | | Disabled
(Changed)| Disabled
(Changed) |
| NewOLMBoxCutterRuntime
(0 tests)| Disabled| Disabled| Disabled| Enabled
(Changed)| | | Disabled| Enabled
(Changed) |
| AWSEuropeanSovereignCloudInstall
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | Enabled
(New)| Enabled
(New) |
| AdditionalStorageConfig
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | Enabled
(New)| Enabled
(New) |
| CRIOCredentialProviderConfig
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | Enabled
(New)| Enabled
(New) |
| ClusterAPIComputeInstall
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | | |
| ClusterAPIControlPlaneInstall
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | | |
| ClusterAPIMachineManagementAWS
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | Enabled
(New)| Enabled
(New) |
| ClusterAPIMachineManagementAzure
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | Enabled
(New)| Enabled
(New) |
| ClusterAPIMachineManagementBareMetal
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | Enabled
(New)| Enabled
(New) |
| ClusterAPIMachineManagementGCP
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | Enabled
(New)| Enabled
(New) |
| ClusterAPIMachineManagementOpenStack
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | Enabled
(New)| Enabled
(New) |
| ClusterAPIMachineManagementPowerVS
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | Enabled
(New)| Enabled
(New) |
| ClusterUpdateAcceptRisks
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | Enabled
(New)| Enabled
(New) |
| ClusterUpdatePreflight
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | | |
| ConfidentialCluster
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | | |
| ConfigurablePKI
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | Enabled
(New)| Enabled
(New) |
| DRAPartitionableDevices
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | Enabled
(New)| Enabled
(New) |
| EVPN
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | Enabled
(New)| Enabled
(New) |
| ExternalOIDCExternalClaimsSourcing
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | | |
| ExternalOIDCWithUpstreamParity
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | Enabled
(New)| Enabled
(New) |
| KMSEncryption
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | Enabled
(New)| Enabled
(New) |
| MachineAPIMigrationAWS
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | Enabled
(New)| Enabled
(New) |
| MachineAPIMigrationOpenStack
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | Enabled
(New)| Enabled
(New) |
| MachineAPIMigrationVSphere
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | | |
| NetworkConnect
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | | |
| NewOLMConfigAPI
(0 tests)| | | | Enabled
(New)| | | | Enabled
(New) |
| NoOverlayMode
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | Enabled
(New)| Enabled
(New) |
| TLSAdherence
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | Enabled
(New)| Enabled
(New) |
| VSphereMultiVCenterDay2
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | | |
### New images
* [aws-node-termination-handler](https://github.com/openshift/aws-node-termination-handler) git [341ed3a0](https://github.com/openshift/aws-node-termination-handler/commit/341ed3a086925b17671c5349343fedf988a1139e) `sha256:85dcd06441580bbd06566eef1b3349ab6766ddd8a17acd0772b83529d6be6235`
### Removed images
* cluster-kube-cluster-api-operator
* installer-altinfra
* installer-etcd-artifacts
* installer-kube-apiserver-artifacts
* libvirt-machine-controllers
### Rebuilt images without code change
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [19e7b623](https://github.com/openshift/aws-encryption-provider/commit/19e7b623429799c9c549690a1b5ab499844411f9) `sha256:96ce4b08dcdd6ecf14ed6d81cc1fe9e6f2ba6ec29157bf6eaa46512414660262`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [17e57462](https://github.com/openshift/azure-service-operator/commit/17e574628ee7ef8aa694cfc0ab5e5232b651fbf8) `sha256:24364d3f9f279310b7be5faffdb0cdce3e1f3d30d8a3978678b91cdd3ba22daa`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:03c1db34d01b52af267b9d9d19fd52b01bcba44b048052c58f7ba17c17cbfed9`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:655c217eeea44ab6815a485a863ff5dcf090dbacd5815326a68b903492028d94`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [5e0f8d1b](https://github.com/openshift/egress-router-cni/commit/5e0f8d1b545899fda27c5e1cc8707d33cba1b534) `sha256:d8b6f0c189774fa4d736440c2ac2f8766ff9a6e6c457d251556b8f8715e66bbd`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [08af4127](https://github.com/openshift/route-override-cni/commit/08af4127c77976510cad1c096d9aca977d8ae5af) `sha256:a56b45e0f760c3ed3f59c62b8dc4cccf1ac2456b34e102b87e87e1da1ffd74dc`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [d691040e](https://github.com/openshift/whereabouts-cni/commit/d691040e509bb20c26b5e8366c0d6f3bb45a5e02) `sha256:419987b35457cbc16d01951dd69ec7dc51dbae9dc441523711c776980ff56eaf`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [297eeb43](https://github.com/openshift/bond-cni/commit/297eeb4320e07b18d559bc373b665479c760e8c7) `sha256:87656cb61c89f5c90f248d1a64f8cd5677ba00bc84a9bedec3a89166830bb24f`
### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/aed50cb7f9a7dd63dd865dfae9afb6844a2dd787)
* [MGMT-23548](https://issues.redhat.com/browse/MGMT-23548): Ensure tests w/ gomock controllers call Finish() [#10024](https://github.com/openshift/assisted-service/pull/10024)
* [MGMT-22849](https://issues.redhat.com/browse/MGMT-22849): Remove the nmconnection that the openshift-installer writes for the bootstrap. [#10086](https://github.com/openshift/assisted-service/pull/10086)
* NO-ISSUE: Detect missing PostgreSQL client in development [#10119](https://github.com/openshift/assisted-service/pull/10119)
* NO-ISSUE: Add assisted-service-writing-unit-tests agent skill [#10123](https://github.com/openshift/assisted-service/pull/10123)
* [MGMT-23451](https://issues.redhat.com/browse/MGMT-23451): Lower SNO vCPU min to 4 instead of 8 for assisted for OCP 4.22 and above [#10040](https://github.com/openshift/assisted-service/pull/10040)
* [MGMT-23141](https://issues.redhat.com/browse/MGMT-23141): Cluster creation returns SQL error rather than API error [#10113](https://github.com/openshift/assisted-service/pull/10113)
* NO-ISSUE: [master] Bump OCP versions: 4.20, 4.18, 4.21, 4.14, 4.17, 4.19, 4.16 [#10120](https://github.com/openshift/assisted-service/pull/10120)
* [MGMT-23340](https://issues.redhat.com/browse/MGMT-23340): upgrade assisted-service postgresql from 13 to 15 [#10096](https://github.com/openshift/assisted-service/pull/10096)
* NO-ISSUE: Replace github.com/golang/mock with go.uber.org/mock [#10082](https://github.com/openshift/assisted-service/pull/10082)
* [OCPBUGS-79576](https://issues.redhat.com/browse/OCPBUGS-79576): Prefer multipath disk in ABI disk selection [#10091](https://github.com/openshift/assisted-service/pull/10091)
* NO-ISSUE: BMAC: replace per-step Update calls with deferred Patch [#10095](https://github.com/openshift/assisted-service/pull/10095)
* [MGMT-22517](https://issues.redhat.com/browse/MGMT-22517): Change amd gpu operator namespace to openshift-amd-gpu [#10007](https://github.com/openshift/assisted-service/pull/10007)
* [MGMT-23228](https://issues.redhat.com/browse/MGMT-23228): Update NFD config for AMD Instinct GPU detection [#9918](https://github.com/openshift/assisted-service/pull/9918)
* [MGMT-23599](https://issues.redhat.com/browse/MGMT-23599): implement cluster and host validations for Kube API mode [#10044](https://github.com/openshift/assisted-service/pull/10044)
* [MGMT-23253](https://issues.redhat.com/browse/MGMT-23253): Reconcile stuck day2 agent status by checking spoke cluster [#10087](https://github.com/openshift/assisted-service/pull/10087)
* NO-ISSUE: clarify error when interface in bond missing [#10022](https://github.com/openshift/assisted-service/pull/10022)
* [MGMT-23060](https://issues.redhat.com/browse/MGMT-23060): Make InfraEnv CpuArchitecture immutable after creation [#9999](https://github.com/openshift/assisted-service/pull/9999)
* [MGMT-23625](https://issues.redhat.com/browse/MGMT-23625): Remove pinned image version for nfd operator [#10045](https://github.com/openshift/assisted-service/pull/10045)
* [MGMT-23231](https://issues.redhat.com/browse/MGMT-23231): Replace AcceleratorProfile with HardwareProfile [#9919](https://github.com/openshift/assisted-service/pull/9919)
* [MGMT-23674](https://issues.redhat.com/browse/MGMT-23674): Remove controller-runtime dependency from api module [#10071](https://github.com/openshift/assisted-service/pull/10071)
* [MGMT-23650](https://issues.redhat.com/browse/MGMT-23650): Disable image policy in assisted service operator deployment [#10070](https://github.com/openshift/assisted-service/pull/10070)
* [MGMT-23300](https://issues.redhat.com/browse/MGMT-23300): Add missing permission for host reclaim pod [#9934](https://github.com/openshift/assisted-service/pull/9934)
* [MGMT-22939](https://issues.redhat.com/browse/MGMT-22939): Fix cache key to get mustgather image [#9940](https://github.com/openshift/assisted-service/pull/9940)
* [OCPBUGS-79470](https://issues.redhat.com/browse/OCPBUGS-79470): Fix multi-document YAML parsing for NMStateConfig [#10053](https://github.com/openshift/assisted-service/pull/10053)
* NO-ISSUE: [master] Bump OCP versions: 4.16, 4.17, 4.19, 4.21, 4.22 [#10054](https://github.com/openshift/assisted-service/pull/10054)
* [AGENT-1426](https://issues.redhat.com/browse/AGENT-1426): Add localhost mirror only when missing in IRI patcher [#10028](https://github.com/openshift/assisted-service/pull/10028)
* [MGMT-23446](https://issues.redhat.com/browse/MGMT-23446): TNA none platform on 4.19 (block for 4.21 and lower) [#10013](https://github.com/openshift/assisted-service/pull/10013)
* [MGMT-23045](https://issues.redhat.com/browse/MGMT-23045): toggle metal3 integration [#9933](https://github.com/openshift/assisted-service/pull/9933)
* [OCPBUGS-78989](https://issues.redhat.com/browse/OCPBUGS-78989): Gate customDeploy on PreprovisioningImage having correct ISO [#10032](https://github.com/openshift/assisted-service/pull/10032)
* [MGMT-23339](https://issues.redhat.com/browse/MGMT-23339): Add url to release image comparison for Kube API versions [#10030](https://github.com/openshift/assisted-service/pull/10030)
* [MGMT-23550](https://issues.redhat.com/browse/MGMT-23550): Add feature usage for new CNI types [#10027](https://github.com/openshift/assisted-service/pull/10027)
* NO-ISSUE: add skipper skill [#10014](https://github.com/openshift/assisted-service/pull/10014)
* [MGMT-23432](https://issues.redhat.com/browse/MGMT-23432): add third parties CNI support to KUBE API mode [#10015](https://github.com/openshift/assisted-service/pull/10015)
* NO-ISSUE: [master] Bump OCP versions: 4.21 [#10023](https://github.com/openshift/assisted-service/pull/10023)
* NO-ISSUE: Add Go workspace files to .gitignore [#10000](https://github.com/openshift/assisted-service/pull/10000)
* NO-ISSUE: [master] Bump OCP versions: 4.18, 4.20 [#10002](https://github.com/openshift/assisted-service/pull/10002)
* [MGMT-22967](https://issues.redhat.com/browse/MGMT-22967): read MCS CA from machine-config-server-ca instead of kube-system/root-ca [#9990](https://github.com/openshift/assisted-service/pull/9990)
* NO-ISSUE: [master] Bump OCP versions: 4.21 [#9997](https://github.com/openshift/assisted-service/pull/9997)
* [MGMT-22782](https://issues.redhat.com/browse/MGMT-22782): Add state root cleanup script to day-2 worker ignition [#9942](https://github.com/openshift/assisted-service/pull/9942)
* NO-ISSUE: Add bluesort to OWNERS_ALIASES [#9979](https://github.com/openshift/assisted-service/pull/9979)
* [OCPBUGS-77767](https://issues.redhat.com/browse/OCPBUGS-77767): OVE Above/Below-the-sea integration - Network configuration not persisted [#9978](https://github.com/openshift/assisted-service/pull/9978)
* [MGMT-23339](https://issues.redhat.com/browse/MGMT-23339): Use release image URL from ClusterImageSet for KubeAPI clusters [#9957](https://github.com/openshift/assisted-service/pull/9957)
* NO-ISSUE: [master] Bump OCP versions: 4.19, 4.13 [#9988](https://github.com/openshift/assisted-service/pull/9988)
* [MGMT-22518](https://issues.redhat.com/browse/MGMT-22518): Adding RHOAI application endpoint to the list of known hosts for SNO [#9936](https://github.com/openshift/assisted-service/pull/9936)
* [OCPBUGS-77552](https://issues.redhat.com/browse/OCPBUGS-77552): fix: min supported arbiter disk size should be 50GB [#9977](https://github.com/openshift/assisted-service/pull/9977)
* NO-ISSUE: Update InfraEnv CR description [#9938](https://github.com/openshift/assisted-service/pull/9938)
* [MGMT-22905](https://issues.redhat.com/browse/MGMT-22905): Update LSO override for operator deployment [#8824](https://github.com/openshift/assisted-service/pull/8824)
* NO-ISSUE: [master] Bump OCP versions: 4.17 [#9975](https://github.com/openshift/assisted-service/pull/9975)
* NO-ISSUE: [master] Bump OCP versions: 4.22, 4.14, 4.21 [#9968](https://github.com/openshift/assisted-service/pull/9968)
* NO-ISSUE: Refresh RPM lockfiles [#9945](https://github.com/openshift/assisted-service/pull/9945)
* NO-ISSUE: Fix loki and logging [#9939](https://github.com/openshift/assisted-service/pull/9939)
* NO-ISSUE: [master] Bump OCP versions: 4.18, 4.20 [#9941](https://github.com/openshift/assisted-service/pull/9941)
* [MGMT-23205](https://issues.redhat.com/browse/MGMT-23205): Reject empty MAC address in NMState static network config [#9937](https://github.com/openshift/assisted-service/pull/9937)
* NO-ISSUE: [master] Bump OCP versions: 4.21 [#9935](https://github.com/openshift/assisted-service/pull/9935)
* [MGMT-21783](https://issues.redhat.com/browse/MGMT-21783): bundle cluster and host ignition endpoint CA certificates for day-2 hosts [#8826](https://github.com/openshift/assisted-service/pull/8826)
* [ACM-29247](https://issues.redhat.com/browse/ACM-29247): Infrastructure Operator - Set up Renovate configuration to automatically create Hive API Synchronization PRs [#9917](https://github.com/openshift/assisted-service/pull/9917)
* NO-ISSUE: Refresh RPM lockfiles [#9915](https://github.com/openshift/assisted-service/pull/9915)
* [ACM-29247](https://issues.redhat.com/browse/ACM-29247): (Revert) infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs [#9865](https://github.com/openshift/assisted-service/pull/9865)
* NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.19, 4.22, 4.21 [#9752](https://github.com/openshift/assisted-service/pull/9752)
* [MGMT-22907](https://issues.redhat.com/browse/MGMT-22907): Prepare 4.21 stable and 4.22 candidate versions assisted-service upstream [#8831](https://github.com/openshift/assisted-service/pull/8831)
* NO-ISSUE: Use renovate to update rpms.lock.yaml [#9619](https://github.com/openshift/assisted-service/pull/9619)
* [ACM-29247](https://issues.redhat.com/browse/ACM-29247): (FIX) infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs [#9505](https://github.com/openshift/assisted-service/pull/9505)
* NO-ISSUE: Update module github.com/go-logr/logr to v1.4.3 [#9357](https://github.com/openshift/assisted-service/pull/9357)
* NO-ISSUE: [master] Bump OCP versions: 4.21, 4.20, 4.18, 4.19, 4.17 [#8912](https://github.com/openshift/assisted-service/pull/8912)
* [ACM-29247](https://issues.redhat.com/browse/ACM-29247): infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs [#8870](https://github.com/openshift/assisted-service/pull/8870)
* [MGMT-22942](https://issues.redhat.com/browse/MGMT-22942): Temporarily mirror CAPI image and OCP 4.20 release for disconnected CAPI CI [#8819](https://github.com/openshift/assisted-service/pull/8819)
* [MGMT-23047](https://issues.redhat.com/browse/MGMT-23047): Ensure cluster is installed when adding an osImageVersion… [#8818](https://github.com/openshift/assisted-service/pull/8818)
* [MGMT-22998](https://issues.redhat.com/browse/MGMT-22998): Add documentation to add node to an upgraded cluster [#8810](https://github.com/openshift/assisted-service/pull/8810)
* [MGMT-23164](https://issues.redhat.com/browse/MGMT-23164): Bug: Assisted Installer fails for OCP < 4.16 due to missing libvirt dependency [#8869](https://github.com/openshift/assisted-service/pull/8869)
* [MGMT-22406](https://issues.redhat.com/browse/MGMT-22406): Include primary_ip_stack in cluster event notifications [#8846](https://github.com/openshift/assisted-service/pull/8846)
* [MGMT-22385](https://issues.redhat.com/browse/MGMT-22385): Skip ip= kernel args for Day2 iSCSI/multipath with unknown network [#8837](https://github.com/openshift/assisted-service/pull/8837)
* NO-ISSUE: Update setup-envtest version to release-0.22 [#8856](https://github.com/openshift/assisted-service/pull/8856)
* [MGMT-22885](https://issues.redhat.com/browse/MGMT-22885): Implement third-party CNI backend support [#8797](https://github.com/openshift/assisted-service/pull/8797)
* NO-ISSUE: Modify Konflux YAMLs to ocm-2.17 [#8850](https://github.com/openshift/assisted-service/pull/8850)
* NO-ISSUE: Update operator bundle channel to ocm-2.17 [#8847](https://github.com/openshift/assisted-service/pull/8847)
* [MGMT-23115](https://issues.redhat.com/browse/MGMT-23115): add FIPS feature usage tracking [#8845](https://github.com/openshift/assisted-service/pull/8845)
* [MGMT-23077](https://issues.redhat.com/browse/MGMT-23077): Revert "MGMT-21038: Prevent from inventory set host RequestedHostname directly" [#8840](https://github.com/openshift/assisted-service/pull/8840)
* [OCPEDGE-2367](https://issues.redhat.com/browse/OCPEDGE-2367): Add support for platform none and external on TNA clusters topology [#8830](https://github.com/openshift/assisted-service/pull/8830)
* [MGMT-22731](https://issues.redhat.com/browse/MGMT-22731): Add To Renovate Tool - Update UBI-minimal Version Automatically [#8802](https://github.com/openshift/assisted-service/pull/8802)
* [MGMT-22523](https://issues.redhat.com/browse/MGMT-22523): Bump AMD DeviceConfig driver version to 6.4.3 [#8823](https://github.com/openshift/assisted-service/pull/8823)
* [MGMT-23000](https://issues.redhat.com/browse/MGMT-23000): Fix when a BMH is paused in non-converged flow [#8812](https://github.com/openshift/assisted-service/pull/8812)
* [MGMT-22287](https://issues.redhat.com/browse/MGMT-22287): Remove OCP 4.12 support from assisted-service [#8794](https://github.com/openshift/assisted-service/pull/8794)
* [MGMT-21038](https://issues.redhat.com/browse/MGMT-21038): Prevent from inventory set host RequestedHostname directly [#7962](https://github.com/openshift/assisted-service/pull/7962)
* NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 4.21 [#8816](https://github.com/openshift/assisted-service/pull/8816)
* [ACM-29153](https://issues.redhat.com/browse/ACM-29153): Upgrade hive to e33d70 [#8807](https://github.com/openshift/assisted-service/pull/8807)
* [MGMT-21756](https://issues.redhat.com/browse/MGMT-21756): enable FIPS 140-3 crypto module in Go builds [#8755](https://github.com/openshift/assisted-service/pull/8755)
* NO-ISSUE: [master] Bump OCP versions: 4.20 [#8801](https://github.com/openshift/assisted-service/pull/8801)
* [MGMT-22583](https://issues.redhat.com/browse/MGMT-22583): Implement Swagger Definitions for 3rd Party CNI / No CNI [#8717](https://github.com/openshift/assisted-service/pull/8717)
* NO-ISSUE: [master] Bump OCP versions: 4.17, 4.20, 4.19, 4.13 [#8795](https://github.com/openshift/assisted-service/pull/8795)
* NO-ISSUE: Clarify release images needed for ironic agent image [#8778](https://github.com/openshift/assisted-service/pull/8778)
* NO-ISSUE: upgrade to 1.25 [#8769](https://github.com/openshift/assisted-service/pull/8769)
* NO-ISSUE: [master] Bump OCP versions: 4.12, 4.18, 4.21, 4.16, 4.20 [#8767](https://github.com/openshift/assisted-service/pull/8767)
* NO-ISSUE: Add parameter for pod disruption budget in openshift template [#8765](https://github.com/openshift/assisted-service/pull/8765)
* [MGMT-20701](https://issues.redhat.com/browse/MGMT-20701): host re-registration improvement [#8737](https://github.com/openshift/assisted-service/pull/8737)
* [MGMT-22189](https://issues.redhat.com/browse/MGMT-22189): Fix primary_ip_stack migration [#8760](https://github.com/openshift/assisted-service/pull/8760)
* [MGMT-22584](https://issues.redhat.com/browse/MGMT-22584): Create Enhancement Document for 3rd Party CNI / No CNI Support in Assisted Installer [#8594](https://github.com/openshift/assisted-service/pull/8594)
* [MGMT-22131](https://issues.redhat.com/browse/MGMT-22131): transitioning red hat operator base image to ubi minimal [#8711](https://github.com/openshift/assisted-service/pull/8711)
* [MGMT-22553](https://issues.redhat.com/browse/MGMT-22553): Partial cluster updates fail with false validation errors on dual-stack clusters [#8704](https://github.com/openshift/assisted-service/pull/8704)
* [MGMT-22297](https://issues.redhat.com/browse/MGMT-22297): fallback path for add-ntp-sources.sh [#8742](https://github.com/openshift/assisted-service/pull/8742)
* NO-ISSUE: Update CONTRIBUTING.md [#8745](https://github.com/openshift/assisted-service/pull/8745)
* [MGMT-22189](https://issues.redhat.com/browse/MGMT-22189): Order dual-stack networks when fetching from DB [#8488](https://github.com/openshift/assisted-service/pull/8488)
* [MGMT-22656](https://issues.redhat.com/browse/MGMT-22656): Remove serviceMesh & kserve from DataScienceCluster spec [#8741](https://github.com/openshift/assisted-service/pull/8741)
* NO-ISSUE: Add cpe label [#8739](https://github.com/openshift/assisted-service/pull/8739)
* NO-ISSUE: bumping go version on branch master to v1.25 to solve CVE-2025-58183 [#8708](https://github.com/openshift/assisted-service/pull/8708)
* [AGENT-1407](https://issues.redhat.com/browse/AGENT-1407): add support for InternalReleaseImage related resources [#8600](https://github.com/openshift/assisted-service/pull/8600)
* NO-ISSUE: [master] Bump OCP versions: 4.21 [#8733](https://github.com/openshift/assisted-service/pull/8733)
* [MGMT-16090](https://issues.redhat.com/browse/MGMT-16090): upgrade assisted-service postgresql from 12 to 13 [#8602](https://github.com/openshift/assisted-service/pull/8602)
* [MGMT-20499](https://issues.redhat.com/browse/MGMT-20499): Always generate iSCSI NIC reapply manifest for day2 host support [#8705](https://github.com/openshift/assisted-service/pull/8705)
* NO-ISSUE: [master] Bump OCP versions: 4.17 [#8725](https://github.com/openshift/assisted-service/pull/8725)
* [MGMT-22278](https://issues.redhat.com/browse/MGMT-22278): Skip deleting spoke resources for an uninstalled agent [#8608](https://github.com/openshift/assisted-service/pull/8608)
* [MGMT-22186](https://issues.redhat.com/browse/MGMT-22186): Add kata runtime class to Assisted installer [#8140](https://github.com/openshift/assisted-service/pull/8140)
* [ACM-27859](https://issues.redhat.com/browse/ACM-27859): Allow PreprovisioningImage finalizer to be removed once BMH finishes deprovisioning [#8604](https://github.com/openshift/assisted-service/pull/8604)
* [MGMT-20323](https://issues.redhat.com/browse/MGMT-20323): Prefer bootable disks for installation [#8701](https://github.com/openshift/assisted-service/pull/8701)
* NO-ISSUE: add to owners_aliases [#8703](https://github.com/openshift/assisted-service/pull/8703)
* [MGMT-22545](https://issues.redhat.com/browse/MGMT-22545): Fix YAML marshaling for Kubernetes types in disconnected ignition [#8619](https://github.com/openshift/assisted-service/pull/8619)
* [OCPBUGS-68355](https://issues.redhat.com/browse/OCPBUGS-68355): Fix Day-2 CSR approval race condition [#8622](https://github.com/openshift/assisted-service/pull/8622)
* [MGMT-22423](https://issues.redhat.com/browse/MGMT-22423): Fix race condition in ensureOwnerRef causing spec.installed to remain false [#8621](https://github.com/openshift/assisted-service/pull/8621)
* [ACM-27290](https://issues.redhat.com/browse/ACM-27290): Fix policy.json not generated for InfraEnv mirror registry config [#8609](https://github.com/openshift/assisted-service/pull/8609)
* [ACM-27906](https://issues.redhat.com/browse/ACM-27906): Fix container-image-availability check to use mirrored registries in disconnected environments [#8611](https://github.com/openshift/assisted-service/pull/8611)
* NO-ISSUE: [master] Bump OCP versions: 4.21, 4.20 [#8612](https://github.com/openshift/assisted-service/pull/8612)
* [MGMT-22458](https://issues.redhat.com/browse/MGMT-22458): CVE-2025-65637 Bump github.com/go-openapi/loads, github.com/go-openapi/analysis, github.com/go-openapi/validate to fix CVE-2025-65637 through introducers update (models module) [#8596](https://github.com/openshift/assisted-service/pull/8596)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-service/compare/184287279c2ecbe5df4e83862cb7a3a33977ffc7...aed50cb7f9a7dd63dd865dfae9afb6844a2dd787)
### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/a9bfcccdade3dec5e6d71dbbc6e03fe137a1660b)
* NO-ISSUE: Refresh RPM lockfiles [#2069](https://github.com/openshift/assisted-installer/pull/2069)
* [MGMT-23545](https://issues.redhat.com/browse/MGMT-23545): Mount pull secret token as a file [#2053](https://github.com/openshift/assisted-installer/pull/2053)
* [MGMT-23191](https://issues.redhat.com/browse/MGMT-23191): Ensure MCO configs are present before rebooting the bootstrap node [#2039](https://github.com/openshift/assisted-installer/pull/2039)
* [MGMT-23664](https://issues.redhat.com/browse/MGMT-23664): CVE-2026-33186 Bump google.golang.org/grpc to v1.79.3 through indirect dependency conversion [#2058](https://github.com/openshift/assisted-installer/pull/2058)
* [OCPBUGS-70213](https://issues.redhat.com/browse/OCPBUGS-70213): fix: allow workers to join TNA cluster when 1 master + arbiter are ready [#2056](https://github.com/openshift/assisted-installer/pull/2056)
* NO-ISSUE: Refresh RPM lockfiles [SECURITY] [#2040](https://github.com/openshift/assisted-installer/pull/2040)
* [OCPBUGS-76382](https://issues.redhat.com/browse/OCPBUGS-76382): Fix root partition before copying IRI registry data [#2034](https://github.com/openshift/assisted-installer/pull/2034)
* [ACM-29247](https://issues.redhat.com/browse/ACM-29247): Infrastructure Operator - Set up Renovate configuration to automatically create Hive API Synchronization PRs [#2037](https://github.com/openshift/assisted-installer/pull/2037)
* NO-ISSUE: Refresh RPM lockfiles [SECURITY] [#2035](https://github.com/openshift/assisted-installer/pull/2035)
* NO-ISSUE: Refresh RPM lockfiles [#2027](https://github.com/openshift/assisted-installer/pull/2027)
* [ACM-29247](https://issues.redhat.com/browse/ACM-29247): (Revert) infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs [#1998](https://github.com/openshift/assisted-installer/pull/1998)
* NO-ISSUE: Update module github.com/jackc/pgtype to v1.14.4 [#1664](https://github.com/openshift/assisted-installer/pull/1664)
* NO-ISSUE: Use renovate to update rpms.lock.yaml [#1515](https://github.com/openshift/assisted-installer/pull/1515)
* NO-ISSUE: Update github.com/alecthomas/units digest to 0f3dac3 [#1524](https://github.com/openshift/assisted-installer/pull/1524)
* [ACM-29247](https://issues.redhat.com/browse/ACM-29247): infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs [#1511](https://github.com/openshift/assisted-installer/pull/1511)
* [MGMT-22731](https://issues.redhat.com/browse/MGMT-22731): Add To Renovate Tool - Update UBI-minimal Version Automatically [#1487](https://github.com/openshift/assisted-installer/pull/1487)
* NO-ISSUE: Modify Konflux YAMLs to ocm-2.17 [#1498](https://github.com/openshift/assisted-installer/pull/1498)
* Revert "NO-ISSUE: test for FF ACM 2.17" [#1496](https://github.com/openshift/assisted-installer/pull/1496)
* NO-ISSUE: test for FF ACM 2.17 [#1495](https://github.com/openshift/assisted-installer/pull/1495)
* [ACM-29166](https://issues.redhat.com/browse/ACM-29166): Upgrade hive to e33d70 [#1491](https://github.com/openshift/assisted-installer/pull/1491)
* [MGMT-22499](https://issues.redhat.com/browse/MGMT-22499): CVE-2025-66506 Bump github.com/sigstore/fulcio to v1.8.3 using replace directive [#1484](https://github.com/openshift/assisted-installer/pull/1484)
* [MGMT-22532](https://issues.redhat.com/browse/MGMT-22532): CVE-2025-52881 Bump github.com/opencontainers/selinux to v1.13.0 using replace directive [#1483](https://github.com/openshift/assisted-installer/pull/1483)
* [MGMT-22393](https://issues.redhat.com/browse/MGMT-22393): CVE-2024-25621 Bump github.com/containerd/containerd to v1.7.29 using replace directive [#1474](https://github.com/openshift/assisted-installer/pull/1474)
* NO-ISSUE: upgrade go to 1.25 [#1466](https://github.com/openshift/assisted-installer/pull/1466)
* [MGMT-22653](https://issues.redhat.com/browse/MGMT-22653): bump the required minimal go version to 1.24 [#1459](https://github.com/openshift/assisted-installer/pull/1459)
* NO-ISSUE: Add cpe label [#1457](https://github.com/openshift/assisted-installer/pull/1457)
* [MGMT-22131](https://issues.redhat.com/browse/MGMT-22131): transitioning red hat operator base image to ubi minimal [#1444](https://github.com/openshift/assisted-installer/pull/1444)
* [ACM-25812](https://issues.redhat.com/browse/ACM-25812): bumping go version on branch master [#1446](https://github.com/openshift/assisted-installer/pull/1446)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/79093911c4613f9aa916b552a6376f3e38e3cbc1...a9bfcccdade3dec5e6d71dbbc6e03fe137a1660b)
### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/008935c33fb03bb246c22f8873da7599ec30aa2c)
* [MGMT-23517](https://issues.redhat.com/browse/MGMT-23517): Bump go modules [#1373](https://github.com/openshift/assisted-installer-agent/pull/1373)
* NO-ISSUE: Refresh RPM lockfiles [#1355](https://github.com/openshift/assisted-installer-agent/pull/1355)
* NO-ISSUE: Refresh RPM lockfiles [SECURITY] [#1351](https://github.com/openshift/assisted-installer-agent/pull/1351)
* NO-ISSUE: Use renovate to update rpms.lock.yaml [#1343](https://github.com/openshift/assisted-installer-agent/pull/1343)
* [MGMT-23123](https://issues.redhat.com/browse/MGMT-23123): fix bootkube.logs missing from bootstrap logs on success [#1320](https://github.com/openshift/assisted-installer-agent/pull/1320)
* [MGMT-22731](https://issues.redhat.com/browse/MGMT-22731): Add To Renovate Tool - Update UBI-minimal Version Automatically [#1309](https://github.com/openshift/assisted-installer-agent/pull/1309)
* NO-ISSUE: Modify Konflux YAMLs to ocm-2.17 [#1318](https://github.com/openshift/assisted-installer-agent/pull/1318)
* [ACM-29167](https://issues.redhat.com/browse/ACM-29167): Upgrade hive to e33d70 [#1311](https://github.com/openshift/assisted-installer-agent/pull/1311)
* [MGMT-22131](https://issues.redhat.com/browse/MGMT-22131): transitioning red hat operator base image to ubi minimal [#1288](https://github.com/openshift/assisted-installer-agent/pull/1288)
* [MGMT-22395](https://issues.redhat.com/browse/MGMT-22395): CVE-2024-25621 Bump github.com/containerd/containerd to v1.7.29 through indirect dependency conversion [#1302](https://github.com/openshift/assisted-installer-agent/pull/1302)
* NO-ISSUE: Bump mockery to a go 1.25 compatible version [#1295](https://github.com/openshift/assisted-installer-agent/pull/1295)
* NO-ISSUE: upgrade go to 1.25 [#1289](https://github.com/openshift/assisted-installer-agent/pull/1289)
* NO-ISSUE: Add cpe label [#1278](https://github.com/openshift/assisted-installer-agent/pull/1278)
* [MGMT-21739](https://issues.redhat.com/browse/MGMT-21739): Skip log collection for non-existent services [#1230](https://github.com/openshift/assisted-installer-agent/pull/1230)
* NO-ISSUE: add to owners_aliases [#1268](https://github.com/openshift/assisted-installer-agent/pull/1268)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/e57138265957c81b33d3ac13078d35f6ca07069d...008935c33fb03bb246c22f8873da7599ec30aa2c)
### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/72477b8616cffcd9abe7e3a32b93b83f60761b06)
* chore(deps): update dependency rimraf to v6 (#3564) [#3564](https://github.com/openshift-assisted/assisted-installer-ui/pull/3564)
* chore(deps): update konflux references (#3562) [#3562](https://github.com/openshift-assisted/assisted-installer-ui/pull/3562)
* chore(deps): update konflux references (#3561) [#3561](https://github.com/openshift-assisted/assisted-installer-ui/pull/3561)
* chore(deps): update module golang.org/x/sys to v0.43.0 (#3492) [#3492](https://github.com/openshift-assisted/assisted-installer-ui/pull/3492)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1775724628 (#3560) [#3560](https://github.com/openshift-assisted/assisted-installer-ui/pull/3560)
* chore(deps): update dependency qs to v6.15.1 (#3559) [#3559](https://github.com/openshift-assisted/assisted-installer-ui/pull/3559)
* chore(deps): update dependency @redhat-cloud-services/eslint-config-redhat-cloud-services to v3 (#3539) [#3539](https://github.com/openshift-assisted/assisted-installer-ui/pull/3539)
* chore(deps): update dependency msw to v2 (#3557) [#3557](https://github.com/openshift-assisted/assisted-installer-ui/pull/3557)
* chore(deps): update dependency concurrently to v9 (#3554) [#3554](https://github.com/openshift-assisted/assisted-installer-ui/pull/3554)
* chore(deps): update dependency @openapitools/openapi-generator-cli to v2.31.1 (#3534) [#3534](https://github.com/openshift-assisted/assisted-installer-ui/pull/3534)
* chore(deps): update dependency typescript to v5.9.3 (#3489) [#3489](https://github.com/openshift-assisted/assisted-installer-ui/pull/3489)
* chore(deps): update dependency @types/node to v24 (#3543) [#3543](https://github.com/openshift-assisted/assisted-installer-ui/pull/3543)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1775651161 (#3548) [#3548](https://github.com/openshift-assisted/assisted-installer-ui/pull/3548)
* chore(deps): update dependency i18next-parser to v9 (#3556) [#3556](https://github.com/openshift-assisted/assisted-installer-ui/pull/3556)
* Bump basic-ftp from 5.2.0 to 5.2.1 (#3552) [#3552](https://github.com/openshift-assisted/assisted-installer-ui/pull/3552)
* chore(deps): update dependency axios to v1.15.0 (#3551) [#3551](https://github.com/openshift-assisted/assisted-installer-ui/pull/3551)
* chore(deps): update dependency @redhat-cloud-services/frontend-components to v7.3.0 (#3550) [#3550](https://github.com/openshift-assisted/assisted-installer-ui/pull/3550)
* [MGMT-23313](https://issues.redhat.com/browse/MGMT-23313): long text breaks table layout (#3545) [#3545](https://github.com/openshift-assisted/assisted-installer-ui/pull/3545)
* Bump vite from 5.4.21 to 6.4.2 (#3547) [#3547](https://github.com/openshift-assisted/assisted-installer-ui/pull/3547)
* chore(deps): update dependency eslint-plugin-import to v2.32.0 (#3475) [#3475](https://github.com/openshift-assisted/assisted-installer-ui/pull/3475)
* fix(deps): update dependency monaco-editor to v0.55.1 (#3505) [#3505](https://github.com/openshift-assisted/assisted-installer-ui/pull/3505)
* fix(deps): update dependency cypress to v13.17.0 (#3500) [#3500](https://github.com/openshift-assisted/assisted-installer-ui/pull/3500)
* fix(deps): update dependency react-monaco-editor to v0.59.0 (#3537) [#3537](https://github.com/openshift-assisted/assisted-installer-ui/pull/3537)
* chore(deps): update dependency dpdm to v3.15.1 (#3473) [#3473](https://github.com/openshift-assisted/assisted-installer-ui/pull/3473)
* chore(deps): update dependency @redhat-cloud-services/frontend-components-config to v6.8.3 (#3471) [#3471](https://github.com/openshift-assisted/assisted-installer-ui/pull/3471)
* chore(deps): update dependency axios to v1.14.0 (#3536) [#3536](https://github.com/openshift-assisted/assisted-installer-ui/pull/3536)
* chore(deps): update dependency @types/eslint to v9 (#3541) [#3541](https://github.com/openshift-assisted/assisted-installer-ui/pull/3541)
* Updating assisted-installer-ui-container image to be consistent with ART for 4.22 (#3340) [#3340](https://github.com/openshift-assisted/assisted-installer-ui/pull/3340)
* chore(deps): update lodash monorepo to v4.18.1 (#3538) [#3538](https://github.com/openshift-assisted/assisted-installer-ui/pull/3538)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1775042950 (#3533) [#3533](https://github.com/openshift-assisted/assisted-installer-ui/pull/3533)
* chore(deps): update dependency eslint-plugin-react to v7.37.5 (#3476) [#3476](https://github.com/openshift-assisted/assisted-installer-ui/pull/3476)
* Bump @xmldom/xmldom from 0.8.10 to 0.8.12 (#3532) [#3532](https://github.com/openshift-assisted/assisted-installer-ui/pull/3532)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1774968108 (#3531) [#3531](https://github.com/openshift-assisted/assisted-installer-ui/pull/3531)
* Upgrade @openshift-console/dynamic-plugin/sdk (#3522) [#3522](https://github.com/openshift-assisted/assisted-installer-ui/pull/3522)
* Update translation files (#3524) [#3524](https://github.com/openshift-assisted/assisted-installer-ui/pull/3524)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1774618347 (#3519) [#3519](https://github.com/openshift-assisted/assisted-installer-ui/pull/3519)
* Add support for release branches in PR workflow (#3527) [#3527](https://github.com/openshift-assisted/assisted-installer-ui/pull/3527)
* chore(deps): update dependency @redhat-cloud-services/tsc-transform-imports to v1.0.57 (#3407) [#3407](https://github.com/openshift-assisted/assisted-installer-ui/pull/3407)
* Add feature branch to pull request workflow (#3520) [#3520](https://github.com/openshift-assisted/assisted-installer-ui/pull/3520)
* NO-ISSUE: Add cursor rules (#3515) [#3515](https://github.com/openshift-assisted/assisted-installer-ui/pull/3515)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.7-1774499506 (#3494) [#3494](https://github.com/openshift-assisted/assisted-installer-ui/pull/3494)
* fix(deps): update module github.com/sirupsen/logrus to v1.9.4 (#3441) [#3441](https://github.com/openshift-assisted/assisted-installer-ui/pull/3441)
* Revert abi abov the sea new flow (#3517) [#3517](https://github.com/openshift-assisted/assisted-installer-ui/pull/3517)
* Bump happy-dom from 20.0.2 to 20.8.9 (#3516) [#3516](https://github.com/openshift-assisted/assisted-installer-ui/pull/3516)
* chore(deps): update dependency swr to v2.4.1 (#3486) [#3486](https://github.com/openshift-assisted/assisted-installer-ui/pull/3486)
* Bump node-forge from 1.3.3 to 1.4.0 (#3513) [#3513](https://github.com/openshift-assisted/assisted-installer-ui/pull/3513)
* chore(deps): update konflux references (#3514) [#3514](https://github.com/openshift-assisted/assisted-installer-ui/pull/3514)
* Bump picomatch from 2.3.1 to 2.3.2 (#3507) [#3507](https://github.com/openshift-assisted/assisted-installer-ui/pull/3507)
* Bump brace-expansion from 1.1.11 to 1.1.13 (#3512) [#3512](https://github.com/openshift-assisted/assisted-installer-ui/pull/3512)
* add pull secret auto populate logic to ABI local UI (#3508) [#3508](https://github.com/openshift-assisted/assisted-installer-ui/pull/3508)
* chore(deps): update dependency tslib to v2.8.1 (#3487) [#3487](https://github.com/openshift-assisted/assisted-installer-ui/pull/3487)
* populate default values in local ui from infraEnv (#3502) [#3502](https://github.com/openshift-assisted/assisted-installer-ui/pull/3502)
* [MGMT-23648](https://issues.redhat.com/browse/MGMT-23648): Removing the manifests using the toggle (#3498) [#3498](https://github.com/openshift-assisted/assisted-installer-ui/pull/3498)
* Add cursor rules for generated files (#3497) [#3497](https://github.com/openshift-assisted/assisted-installer-ui/pull/3497)
* chore(deps): update konflux references (#3472) [#3472](https://github.com/openshift-assisted/assisted-installer-ui/pull/3472)
* chore(deps): update dependency start-server-and-test to v2.1.5 (#3484) [#3484](https://github.com/openshift-assisted/assisted-installer-ui/pull/3484)
* Set customManifestsUpdated when users remove a manifest (#3482) [#3482](https://github.com/openshift-assisted/assisted-installer-ui/pull/3482)
* Red Hat Konflux update assisted-ui-chatbot-saas-main (#3478) [#3478](https://github.com/openshift-assisted/assisted-installer-ui/pull/3478)
* [MGMT-23515](https://issues.redhat.com/browse/MGMT-23515): Use Network type support level (#3465) [#3465](https://github.com/openshift-assisted/assisted-installer-ui/pull/3465)
* Red Hat Konflux purge assisted-installer-chatbot-main (#3477) [#3477](https://github.com/openshift-assisted/assisted-installer-ui/pull/3477)
* fix(deps): update dependency @patternfly/react-core to v6.4.1 (#3438) [#3438](https://github.com/openshift-assisted/assisted-installer-ui/pull/3438)
* chore(deps): update dependency nodemon to v3.1.14 (#3435) [#3435](https://github.com/openshift-assisted/assisted-installer-ui/pull/3435)
* chore(deps): update dependency @vitejs/plugin-react-swc to v3.11.0 (#3444) [#3444](https://github.com/openshift-assisted/assisted-installer-ui/pull/3444)
* chore(deps): update dependency @openapitools/openapi-generator-cli to v2.30.2 (#3442) [#3442](https://github.com/openshift-assisted/assisted-installer-ui/pull/3442)
* chore(deps): update dependency @redhat-cloud-services/frontend-components to v7.1.1 (#3470) [#3470](https://github.com/openshift-assisted/assisted-installer-ui/pull/3470)
* fix(deps): update dependency @patternfly/react-code-editor to v6.4.1 (#3437) [#3437](https://github.com/openshift-assisted/assisted-installer-ui/pull/3437)
* fix(deps): update dependency @patternfly/react-table to v6.4.1 (#3440) [#3440](https://github.com/openshift-assisted/assisted-installer-ui/pull/3440)
* chore(deps): update dependency @redhat-cloud-services/frontend-components-config to v6.7.54 (#3406) [#3406](https://github.com/openshift-assisted/assisted-installer-ui/pull/3406)
* chore(deps): update dependency @sentry/browser to v7.120.4 (#3443) [#3443](https://github.com/openshift-assisted/assisted-installer-ui/pull/3443)
* chore(deps): update dependency eslint to v8.57.1 (#3432) [#3432](https://github.com/openshift-assisted/assisted-installer-ui/pull/3432)
* chore(deps): update dependency axios to v1.13.6 (#3431) [#3431](https://github.com/openshift-assisted/assisted-installer-ui/pull/3431)
* chore(deps): update dependency @types/node to v18.19.130 (#3429) [#3429](https://github.com/openshift-assisted/assisted-installer-ui/pull/3429)
* chore(deps): update dependency @types/lodash to v4.17.24 (#3428) [#3428](https://github.com/openshift-assisted/assisted-installer-ui/pull/3428)
* Bump ajv from 6.12.6 to 6.14.0 (#3411) [#3411](https://github.com/openshift-assisted/assisted-installer-ui/pull/3411)
* chore(deps): update dependency prettier to v2.8.8 (#3436) [#3436](https://github.com/openshift-assisted/assisted-installer-ui/pull/3436)
* chore(deps): update dependency msw to v1.3.5 (#3434) [#3434](https://github.com/openshift-assisted/assisted-installer-ui/pull/3434)
* chore(deps): update dependency eslint-config-prettier to v8.10.2 (#3433) [#3433](https://github.com/openshift-assisted/assisted-installer-ui/pull/3433)
* chore(deps): update dependency @types/react-redux to v7.1.34 (#3430) [#3430](https://github.com/openshift-assisted/assisted-installer-ui/pull/3430)
* chore(deps): update dependency @types/eslint to v8.56.12 (#3427) [#3427](https://github.com/openshift-assisted/assisted-installer-ui/pull/3427)
* chore(deps): update dependency @tsconfig/recommended to v1.0.13 (#3426) [#3426](https://github.com/openshift-assisted/assisted-installer-ui/pull/3426)
* Bump flatted from 3.3.1 to 3.4.2 (#3469) [#3469](https://github.com/openshift-assisted/assisted-installer-ui/pull/3469)
* fix validations for NTP and Proxy in above sea level ABI flow (#3464) [#3464](https://github.com/openshift-assisted/assisted-installer-ui/pull/3464)
* Add identifiers and checked state attribute to custom manifests switch (#3466) [#3466](https://github.com/openshift-assisted/assisted-installer-ui/pull/3466)
* [MGMT-23516](https://issues.redhat.com/browse/MGMT-23516): Left navigation menu is cut off (#3463) [#3463](https://github.com/openshift-assisted/assisted-installer-ui/pull/3463)
* UI doesnt save the data filled by the user (#3452) [#3452](https://github.com/openshift-assisted/assisted-installer-ui/pull/3452)
* fix ISO file name (#3462) [#3462](https://github.com/openshift-assisted/assisted-installer-ui/pull/3462)
* Tech Preview badge should appear at the end of the line (#3461) [#3461](https://github.com/openshift-assisted/assisted-installer-ui/pull/3461)
* [AGENT-1136](https://issues.redhat.com/browse/AGENT-1136): Add USER_AUTH_TOKEN support to disconnected UI proxy (#3454) [#3454](https://github.com/openshift-assisted/assisted-installer-ui/pull/3454)
* Bump rollup from 4.50.1 to 4.59.0 (#3421) [#3421](https://github.com/openshift-assisted/assisted-installer-ui/pull/3421)
* Bump immutable from 3.8.2 to 3.8.3 (#3451) [#3451](https://github.com/openshift-assisted/assisted-installer-ui/pull/3451)
* [MGMT-23131](https://issues.redhat.com/browse/MGMT-23131): Third-Party CNI Support (#3457) [#3457](https://github.com/openshift-assisted/assisted-installer-ui/pull/3457)
* Fix CVE-2026-27904: Bumping minimatch to latest versions via yarn resolutions (#3459) [#3459](https://github.com/openshift-assisted/assisted-installer-ui/pull/3459)
* Fix CVE-2025-15284: bump qs to ^6.14.1 via yarn resolutions (#3456) [#3456](https://github.com/openshift-assisted/assisted-installer-ui/pull/3456)
* [MGMT-23293](https://issues.redhat.com/browse/MGMT-23293): duplicate helper-text selector issue (#3446) [#3446](https://github.com/openshift-assisted/assisted-installer-ui/pull/3446)
* Above-the-sea UI QE test second phase (#3453) [#3453](https://github.com/openshift-assisted/assisted-installer-ui/pull/3453)
* above sea level QE test fix (#3450) [#3450](https://github.com/openshift-assisted/assisted-installer-ui/pull/3450)
* Update chatbot readme (#3447) [#3447](https://github.com/openshift-assisted/assisted-installer-ui/pull/3447)
* Make use of PF Icon component (#3439) [#3439](https://github.com/openshift-assisted/assisted-installer-ui/pull/3439)
* Red Hat Konflux update assisted-installer-chatbot-main (#3424) [#3424](https://github.com/openshift-assisted/assisted-installer-ui/pull/3424)
* [MGMT-22748](https://issues.redhat.com/browse/MGMT-22748): Setup insights-frontend-builder-common build tools (#3419) [#3419](https://github.com/openshift-assisted/assisted-installer-ui/pull/3419)
* [MGMT-23299](https://issues.redhat.com/browse/MGMT-23299): Make secondary VIP fields optional (#3417) [#3417](https://github.com/openshift-assisted/assisted-installer-ui/pull/3417)
* Include additional operators in OVE UI ISO config (#3413) [#3413](https://github.com/openshift-assisted/assisted-installer-ui/pull/3413)
* Update OCM setup docs (#3418) [#3418](https://github.com/openshift-assisted/assisted-installer-ui/pull/3418)
* fix: bump lodash to ^4.17.23 to address CVE-2025-13465 (#3410) [#3410](https://github.com/openshift-assisted/assisted-installer-ui/pull/3410)
* fix: bump react-router-dom-v5-compat to ^6.30.3 to address CVE-2026-22029 (#3409) [#3409](https://github.com/openshift-assisted/assisted-installer-ui/pull/3409)
* [OCPBUGS-76280](https://issues.redhat.com/browse/OCPBUGS-76280): Next button is disabled on optional configurations page (#3402) [#3402](https://github.com/openshift-assisted/assisted-installer-ui/pull/3402)
* change axios version (#3403) [#3403](https://github.com/openshift-assisted/assisted-installer-ui/pull/3403)
* UI freezes when clicking Select button without version (#3401) [#3401](https://github.com/openshift-assisted/assisted-installer-ui/pull/3401)
* OCPBUGS-75072 | OVE UI: Above-the-sea UI QE test (#3383) [#3383](https://github.com/openshift-assisted/assisted-installer-ui/pull/3383)
* Hypershift -- allow infra envs with no hosts in namespace dropdown (#3373) [#3373](https://github.com/openshift-assisted/assisted-installer-ui/pull/3373)
* [MGMT-22544](https://issues.redhat.com/browse/MGMT-22544): update latest doc version to 4.20 (#3392) [#3392](https://github.com/openshift-assisted/assisted-installer-ui/pull/3392)
* Bump axios from 1.12.2 to 1.13.5 (#3389) [#3389](https://github.com/openshift-assisted/assisted-installer-ui/pull/3389)
* Make lint:all serial instead of parallel (#3400) [#3400](https://github.com/openshift-assisted/assisted-installer-ui/pull/3400)
* fix: prevent form submission on cluster details step for existing clusters (#3372) [#3372](https://github.com/openshift-assisted/assisted-installer-ui/pull/3372)
* fix major.minor version extraction (#3377) [#3377](https://github.com/openshift-assisted/assisted-installer-ui/pull/3377)
* NO-ISSUE: Localise validation messages (#3379) [#3379](https://github.com/openshift-assisted/assisted-installer-ui/pull/3379)
* Fix Infinite Loader while Getting Empty Versions List (#3378) [#3378](https://github.com/openshift-assisted/assisted-installer-ui/pull/3378)
* Bump preact from 10.26.9 to 10.28.2 (#3356) [#3356](https://github.com/openshift-assisted/assisted-installer-ui/pull/3356)
* Bump lodash-es from 4.17.21 to 4.17.23 (#3364) [#3364](https://github.com/openshift-assisted/assisted-installer-ui/pull/3364)
* Bump lodash from 4.17.21 to 4.17.23 (#3365) [#3365](https://github.com/openshift-assisted/assisted-installer-ui/pull/3365)
* OCPBUGS-74421 | OVE UI: Fix rendezvousIP field name in error message (#3376) [#3376](https://github.com/openshift-assisted/assisted-installer-ui/pull/3376)
* [MGMT-22941](https://issues.redhat.com/browse/MGMT-22941): ABI: add version dropdown (#3370) [#3370](https://github.com/openshift-assisted/assisted-installer-ui/pull/3370)
* Do not delete disconnected cluster/infraenv. (#3368) [#3368](https://github.com/openshift-assisted/assisted-installer-ui/pull/3368)
* [MGMT-21058](https://issues.redhat.com/browse/MGMT-21058): Expose BareMetalHost (BMH) Status and Events in the Assisted Installer / CIM Console (#3363) [#3363](https://github.com/openshift-assisted/assisted-installer-ui/pull/3363)
* Clean up git conflict artefacts (#3325) [#3325](https://github.com/openshift-assisted/assisted-installer-ui/pull/3325)
* [MGMT-21991](https://issues.redhat.com/browse/MGMT-21991): Add Primary IPv6 Support-cim (#3346) [#3346](https://github.com/openshift-assisted/assisted-installer-ui/pull/3346)
* Stop using deprecate Modal component in CIM (#3343) [#3343](https://github.com/openshift-assisted/assisted-installer-ui/pull/3343)
* Add additional new fields to the above the sea UI (#3337) [#3337](https://github.com/openshift-assisted/assisted-installer-ui/pull/3337)
* [MGMT-20673](https://issues.redhat.com/browse/MGMT-20673): Improve OpenShift AI bundle requirements tooltip (#3352) [#3352](https://github.com/openshift-assisted/assisted-installer-ui/pull/3352)
* Fix React 18 types (#3361) [#3361](https://github.com/openshift-assisted/assisted-installer-ui/pull/3361)
* [MGMT-22746](https://issues.redhat.com/browse/MGMT-22746): Add chatbot app (#3350) [#3350](https://github.com/openshift-assisted/assisted-installer-ui/pull/3350)
* Refactor LabelsField component (#3354) [#3354](https://github.com/openshift-assisted/assisted-installer-ui/pull/3354)
* Use PF Dropdown component for namespace select (#3345) [#3345](https://github.com/openshift-assisted/assisted-installer-ui/pull/3345)
* Make Cisco Intersight URL editable in CIM config modal (#3357) [#3357](https://github.com/openshift-assisted/assisted-installer-ui/pull/3357)
* Fix mass hostname change content alignment (#3344) [#3344](https://github.com/openshift-assisted/assisted-installer-ui/pull/3344)
* Adapt PrismCode for dark mode (#3348) [#3348](https://github.com/openshift-assisted/assisted-installer-ui/pull/3348)
* Fix FileUpload component (#3355) [#3355](https://github.com/openshift-assisted/assisted-installer-ui/pull/3355)
* Assisted Installer OVE UI shows transient blank page with Technology Preview spinner (#3341) [#3341](https://github.com/openshift-assisted/assisted-installer-ui/pull/3341)
* API/Ingress IP fields lack character limit (#3342) [#3342](https://github.com/openshift-assisted/assisted-installer-ui/pull/3342)
* Use conversationId from props for feedback. (#3336) [#3336](https://github.com/openshift-assisted/assisted-installer-ui/pull/3336)
* use old release process (#3333) [#3333](https://github.com/openshift-assisted/assisted-installer-ui/pull/3333)
* [MGMT-20727](https://issues.redhat.com/browse/MGMT-20727): Cisco Intersight URL should be configurable (#3332) [#3332](https://github.com/openshift-assisted/assisted-installer-ui/pull/3332)
* [MGMT-22465](https://issues.redhat.com/browse/MGMT-22465): Merge the contents of releases/v2.17-cim into master (#3319) [#3319](https://github.com/openshift-assisted/assisted-installer-ui/pull/3319)
* change ABI above sea level iso size (#3322) [#3322](https://github.com/openshift-assisted/assisted-installer-ui/pull/3322)
* Openshift AI Bundle on SNO enables ODF and LVM which are uncompatible (#3320) [#3320](https://github.com/openshift-assisted/assisted-installer-ui/pull/3320)
* remove external platforms field from below sea level UI (#3316) [#3316](https://github.com/openshift-assisted/assisted-installer-ui/pull/3316)
* Fix Cluster summary styling (#3216) [#3216](https://github.com/openshift-assisted/assisted-installer-ui/pull/3216)
* Bump js-yaml from 4.1.0 to 4.1.1 (#3310) [#3310](https://github.com/openshift-assisted/assisted-installer-ui/pull/3310)
* provides parameters for the GET /v2/operators/bundles route (#3306) [#3306](https://github.com/openshift-assisted/assisted-installer-ui/pull/3306)
* Bump mdast-util-to-hast from 13.2.0 to 13.2.1 (#3287) [#3287](https://github.com/openshift-assisted/assisted-installer-ui/pull/3287)
* Bump zx from 7.2.3 to 8.8.5 (#3273) [#3273](https://github.com/openshift-assisted/assisted-installer-ui/pull/3273)
* Bump js-yaml from 4.1.0 to 4.1.1 (#3264) [#3264](https://github.com/openshift-assisted/assisted-installer-ui/pull/3264)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/479a68f329b4c4088a999a6f4f1c4a078a9b4e93...72477b8616cffcd9abe7e3a32b93b83f60761b06)
### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/8726a4266bbecd3c19f606370f58dd10ce81bc1f)
* [OCPBUGS-82537](https://issues.redhat.com/browse/OCPBUGS-82537): update konflux references [#274](https://github.com/openshift/agent-installer-utils/pull/274)
* NO-JIRA: enable xtrace in build-ove-image.sh for debugging [#281](https://github.com/openshift/agent-installer-utils/pull/281)
* [OCPBUGS-81585](https://issues.redhat.com/browse/OCPBUGS-81585): Update operator versions [#280](https://github.com/openshift/agent-installer-utils/pull/280)
* NO-JIRA: Pass environment through to podman [#279](https://github.com/openshift/agent-installer-utils/pull/279)
* [AGENT-1429](https://issues.redhat.com/browse/AGENT-1429): Pass OPENSHIFT_INSTALL_EXPERIMENTAL_DISABLE_IMAGE_POLICY [#278](https://github.com/openshift/agent-installer-utils/pull/278)
* [OCPBUGS-78042](https://issues.redhat.com/browse/OCPBUGS-78042): Update Konflux references [#266](https://github.com/openshift/agent-installer-utils/pull/266)
* [OCPBUGS-77956](https://issues.redhat.com/browse/OCPBUGS-77956): Update to use the 4.21 Operator Catalog [#268](https://github.com/openshift/agent-installer-utils/pull/268)
* [OCPBUGS-77611](https://issues.redhat.com/browse/OCPBUGS-77611): Updating ose-agent-installer-utils-container image to be consistent with ART for 4.22 [#267](https://github.com/openshift/agent-installer-utils/pull/267)
* [AGENT-1453](https://issues.redhat.com/browse/AGENT-1453): Add a flag to provide a custom appliance image [#264](https://github.com/openshift/agent-installer-utils/pull/264)
* [AGENT-1447](https://issues.redhat.com/browse/AGENT-1447): Override prefilled rendezvousIP [#256](https://github.com/openshift/agent-installer-utils/pull/256)
* [OCPBUGS-77270](https://issues.redhat.com/browse/OCPBUGS-77270): Remove multiple redhat-operator-index catalogs [#261](https://github.com/openshift/agent-installer-utils/pull/261)
* [OCPBUGS-77235](https://issues.redhat.com/browse/OCPBUGS-77235): Use mtv-operator from 4.20 catalog [#259](https://github.com/openshift/agent-installer-utils/pull/259)
* [OCPBUGS-77233](https://issues.redhat.com/browse/OCPBUGS-77233): Update Konflux references [#250](https://github.com/openshift/agent-installer-utils/pull/250)
* [OCPBUGS-77235](https://issues.redhat.com/browse/OCPBUGS-77235): Update mtv-operator version [#257](https://github.com/openshift/agent-installer-utils/pull/257)
* NO-ISSUE: Fix linting issues [#255](https://github.com/openshift/agent-installer-utils/pull/255)
* [OCPBUGS-76367](https://issues.redhat.com/browse/OCPBUGS-76367): Include additional operators in OVE config [#252](https://github.com/openshift/agent-installer-utils/pull/252)
* [OCPBUGS-76343](https://issues.redhat.com/browse/OCPBUGS-76343): Add lso operator to appliance config [#249](https://github.com/openshift/agent-installer-utils/pull/249)
* [OCPBUGS-74933](https://issues.redhat.com/browse/OCPBUGS-74933): Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 2f3015a [#221](https://github.com/openshift/agent-installer-utils/pull/221)
* [OCPBUGS-74932](https://issues.redhat.com/browse/OCPBUGS-74932): Update Konflux references [#219](https://github.com/openshift/agent-installer-utils/pull/219)
* [OCPBUGS-74242](https://issues.redhat.com/browse/OCPBUGS-74242): Increase Konflux build pipeline memory [#242](https://github.com/openshift/agent-installer-utils/pull/242)
* [AGENT-1313](https://issues.redhat.com/browse/AGENT-1313): enable MCO IRI registry [#232](https://github.com/openshift/agent-installer-utils/pull/232)
* [OCPBUGS-71231](https://issues.redhat.com/browse/OCPBUGS-71231): bump github.com/sirupsen/logrus to v1.9.3 [#233](https://github.com/openshift/agent-installer-utils/pull/233)
* [OCPBUGS-72420](https://issues.redhat.com/browse/OCPBUGS-72420): Increase capabilities passed via buildah [#229](https://github.com/openshift/agent-installer-utils/pull/229)
* NO-ISSUE: Add 4.22 isobuilder configs [#213](https://github.com/openshift/agent-installer-utils/pull/213)
* [AGENT-1334](https://issues.redhat.com/browse/AGENT-1334): Examples of golden snapshot and release for OVE ISO image [#202](https://github.com/openshift/agent-installer-utils/pull/202)
* NO-ISSUE:Updating ose-agent-installer-utils-container image to be consistent with ART for 4.22 [#216](https://github.com/openshift/agent-installer-utils/pull/216)
* [OCPBUGS-69438](https://issues.redhat.com/browse/OCPBUGS-69438): Remove operator manifests; now applied by assisted-installer [#211](https://github.com/openshift/agent-installer-utils/pull/211)
* [OCPBUGS-69406](https://issues.redhat.com/browse/OCPBUGS-69406): Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 20eb21c [#210](https://github.com/openshift/agent-installer-utils/pull/210)
* [OCPBUGS-69405](https://issues.redhat.com/browse/OCPBUGS-69405): Update Konflux references [#209](https://github.com/openshift/agent-installer-utils/pull/209)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/1c822ebc321e039b89d6952e3e781af9fa43c6f1...8726a4266bbecd3c19f606370f58dd10ce81bc1f)
### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/5e33c22867d59ddd9392a2c6b3194d2f3c6bdfc7)
* [OCPBUGS-77615](https://issues.redhat.com/browse/OCPBUGS-77615): Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.22 [#90](https://github.com/openshift/apiserver-network-proxy/pull/90)
* [OCPBUGS-73992](https://issues.redhat.com/browse/OCPBUGS-73992): Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.22 [#89](https://github.com/openshift/apiserver-network-proxy/pull/89)
* [OCPBUGS-69889](https://issues.redhat.com/browse/OCPBUGS-69889): Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.22 [#88](https://github.com/openshift/apiserver-network-proxy/pull/88)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/35ba137ab96d01f0b8df729ff5ad93ac2fdad800...5e33c22867d59ddd9392a2c6b3194d2f3c6bdfc7)
### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/e73d6a3821655afc6fb19d88a66907078e6854f2)
* [OCPCLOUD-3215](https://issues.redhat.com/browse/OCPCLOUD-3215): Add support for dual networking stack services [#135](https://github.com/openshift/cloud-provider-aws/pull/135)
* [OCPBUGS-69888](https://issues.redhat.com/browse/OCPBUGS-69888), [OCPBUGS-76344](https://issues.redhat.com/browse/OCPBUGS-76344), [OCPCLOUD-3276](https://issues.redhat.com/browse/OCPCLOUD-3276): Merge https://github.com/kubernetes/cloud-provider-aws:master (ea961d6) into main [#131](https://github.com/openshift/cloud-provider-aws/pull/131)
* [OCPBUGS-76344](https://issues.redhat.com/browse/OCPBUGS-76344), [OCPCLOUD-3276](https://issues.redhat.com/browse/OCPCLOUD-3276): Merge https://github.com/kubernetes/cloud-provider-aws:master (dc94f58) into main [#120](https://github.com/openshift/cloud-provider-aws/pull/120)
* [OCPCLOUD-3341](https://issues.redhat.com/browse/OCPCLOUD-3341): Updates ecr-credential-provider make target [#130](https://github.com/openshift/cloud-provider-aws/pull/130)
* [SPLAT-2220](https://issues.redhat.com/browse/SPLAT-2220): tests/ote: extend tests for gate AWSServiceLBNetworkSecurityGroup [#129](https://github.com/openshift/cloud-provider-aws/pull/129)
* [SPLAT-2220](https://issues.redhat.com/browse/SPLAT-2220): tests/ote: introduce openshift-only e2e to validate feature by feature gate [#126](https://github.com/openshift/cloud-provider-aws/pull/126)
* [TRT-2536](https://issues.redhat.com/browse/TRT-2536): UPSTREAM: <carry>: Fix OTE list tests when SingleReplica [#125](https://github.com/openshift/cloud-provider-aws/pull/125)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/3365bc9ca5b116c63c1c90130c017f3496a139a1...e73d6a3821655afc6fb19d88a66907078e6854f2)
### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/2d7aa679a7847b8831f4a14e84154170d33574ed)
* [OCPBUGS-77748](https://issues.redhat.com/browse/OCPBUGS-77748): Updating ose-aws-cluster-api-controllers-container image to be consistent with ART for 4.22 [#597](https://github.com/openshift/cluster-api-provider-aws/pull/597)
* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.10.2 (999ac9a) into main [#588](https://github.com/openshift/cluster-api-provider-aws/pull/588)
* NO-JIRA: Remove dead `RELEASE_DIR` ref [#596](https://github.com/openshift/cluster-api-provider-aws/pull/596)
* [OCPCLOUD-3326](https://issues.redhat.com/browse/OCPCLOUD-3326): Update to use new manifests-gen [#584](https://github.com/openshift/cluster-api-provider-aws/pull/584)
* NO-JIRA: UPSTREAM: <carry>: Add manifests verify target [#586](https://github.com/openshift/cluster-api-provider-aws/pull/586)
* [OCPBUGS-70053](https://issues.redhat.com/browse/OCPBUGS-70053): Updating ose-aws-cluster-api-controllers-container image to be consistent with ART for 4.22 [#585](https://github.com/openshift/cluster-api-provider-aws/pull/585)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/10ceef5e6f6d0cb79a3345de4fd8851f6300205c...2d7aa679a7847b8831f4a14e84154170d33574ed)
### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/0927af1c1397b6f3c7545c715e1a87e0263ae2bf)
* [TRT-2576](https://issues.redhat.com/browse/TRT-2576): Revert #301 "STOR-2766: Rebase to upstream v1.55.0 for OCP 4.22" [#303](https://github.com/openshift/aws-ebs-csi-driver/pull/303)
* [STOR-2766](https://issues.redhat.com/browse/STOR-2766): Rebase to upstream v1.55.0 for OCP 4.22 [#301](https://github.com/openshift/aws-ebs-csi-driver/pull/301)
* [OCPBUGS-77628](https://issues.redhat.com/browse/OCPBUGS-77628): Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.22 [#302](https://github.com/openshift/aws-ebs-csi-driver/pull/302)
* [OCPBUGS-74521](https://issues.redhat.com/browse/OCPBUGS-74521): UPSTREAM: 2806, 2816: Remove VolumeAttributesClass FeatureGate [#300](https://github.com/openshift/aws-ebs-csi-driver/pull/300)
* [OCPBUGS-69918](https://issues.redhat.com/browse/OCPBUGS-69918): Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.22 [#296](https://github.com/openshift/aws-ebs-csi-driver/pull/296)
* [OCPBUGS-69918](https://issues.redhat.com/browse/OCPBUGS-69918): UPSTREAM: <carry>: do not require license in OCP files (follow-up) [#298](https://github.com/openshift/aws-ebs-csi-driver/pull/298)
* [OCPBUGS-69918](https://issues.redhat.com/browse/OCPBUGS-69918): UPSTREAM: <carry>: do not require license in OCP files [#297](https://github.com/openshift/aws-ebs-csi-driver/pull/297)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/57eebffcc8abbbbb6edcf3b536b769d97e31819c...0927af1c1397b6f3c7545c715e1a87e0263ae2bf)
### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/8253452c39841b626cedd0b42dc0449943ccf938)
* [OCPBUGS-78291](https://issues.redhat.com/browse/OCPBUGS-78291): Allow azure-disk sidecars to read VolumeAttributeClasses [#525](https://github.com/openshift/csi-operator/pull/525)
* [STOR-2762](https://issues.redhat.com/browse/STOR-2762): Bump all deps for 4.22 [#526](https://github.com/openshift/csi-operator/pull/526)
* [OCPBUGS-77674](https://issues.redhat.com/browse/OCPBUGS-77674): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.22 [#516](https://github.com/openshift/csi-operator/pull/516)
* [OCPBUGS-77553](https://issues.redhat.com/browse/OCPBUGS-77553): Updating csi-driver-manila-operator-container image to be consistent with ART for 4.22 [#513](https://github.com/openshift/csi-operator/pull/513)
* [OCPBUGS-77612](https://issues.redhat.com/browse/OCPBUGS-77612): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.22 [#514](https://github.com/openshift/csi-operator/pull/514)
* [STOR-2884](https://issues.redhat.com/browse/STOR-2884): Add service to generate a TLS cert for EFS operator [#522](https://github.com/openshift/csi-operator/pull/522)
* [STOR-2884](https://issues.redhat.com/browse/STOR-2884): Add service to generate a TLS cert for SMB operator [#520](https://github.com/openshift/csi-operator/pull/520)
* NO-JIRA: Inherit any OpenShift global CodeRabbit setting [#519](https://github.com/openshift/csi-operator/pull/519)
* [OCPBUGS-77623](https://issues.redhat.com/browse/OCPBUGS-77623): Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.22 [#515](https://github.com/openshift/csi-operator/pull/515)
* [OCPBUGS-77571](https://issues.redhat.com/browse/OCPBUGS-77571): Add only to tags to volume object, if volume is not already tagged [#518](https://github.com/openshift/csi-operator/pull/518)
* [OCPBUGS-77497](https://issues.redhat.com/browse/OCPBUGS-77497): Fix readonly root fs in Azure init containers [#512](https://github.com/openshift/csi-operator/pull/512)
* NO-JIRA: Add coderabbit, including instructions [#509](https://github.com/openshift/csi-operator/pull/509)
* [STOR-2752](https://issues.redhat.com/browse/STOR-2752): Early chore: update OCP version in OLM metadata [#505](https://github.com/openshift/csi-operator/pull/505)
* Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.22 [#517](https://github.com/openshift/csi-operator/pull/517)
* [OCPBUGS-77378](https://issues.redhat.com/browse/OCPBUGS-77378): Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.22 [#510](https://github.com/openshift/csi-operator/pull/510)
* [OCPBUGS-77405](https://issues.redhat.com/browse/OCPBUGS-77405): Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.22 [#511](https://github.com/openshift/csi-operator/pull/511)
* [OCPBUGS-76298](https://issues.redhat.com/browse/OCPBUGS-76298): missing readOnlyRootFilesystem in AWS init containers [#506](https://github.com/openshift/csi-operator/pull/506)
* [OCPBUGS-74971](https://issues.redhat.com/browse/OCPBUGS-74971): Fix azure-disk secret namespace/name args [#502](https://github.com/openshift/csi-operator/pull/502)
* [OCPBUGS-74521](https://issues.redhat.com/browse/OCPBUGS-74521): Remove VolumeAttributesClass FeatureGate [#503](https://github.com/openshift/csi-operator/pull/503)
* [STOR-2523](https://issues.redhat.com/browse/STOR-2523): hypershift: Add desired-version annotation to controller Deployments and use DeploymentVersionController in csi driver operators [#457](https://github.com/openshift/csi-operator/pull/457)
* [OCPBUGS-70304](https://issues.redhat.com/browse/OCPBUGS-70304): Fix azure-file secret namespace/name [#500](https://github.com/openshift/csi-operator/pull/500)
* [OCPBUGS-66113](https://issues.redhat.com/browse/OCPBUGS-66113): Some containers do not have readOnlyRootFilesystem [#476](https://github.com/openshift/csi-operator/pull/476)
* [OCPBUGS-70085](https://issues.redhat.com/browse/OCPBUGS-70085): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.22 [#483](https://github.com/openshift/csi-operator/pull/483)
* [OCPBUGS-70339](https://issues.redhat.com/browse/OCPBUGS-70339): deploy prometheus role and binding on hypershift guest [#488](https://github.com/openshift/csi-operator/pull/488)
* [OCPBUGS-63698](https://issues.redhat.com/browse/OCPBUGS-63698): fix(azure): add token-minter for self-managed hosted clusters [#461](https://github.com/openshift/csi-operator/pull/461)
* [OCPBUGS-69739](https://issues.redhat.com/browse/OCPBUGS-69739): Updating csi-driver-manila-operator-container image to be consistent with ART for 4.22 [#480](https://github.com/openshift/csi-operator/pull/480)
* [OCPBUGS-69907](https://issues.redhat.com/browse/OCPBUGS-69907): Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.22 [#482](https://github.com/openshift/csi-operator/pull/482)
* [OCPBUGS-69710](https://issues.redhat.com/browse/OCPBUGS-69710): Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.22 [#479](https://github.com/openshift/csi-operator/pull/479)
* NO-JIRA: Add /sniff-test claude command [#486](https://github.com/openshift/csi-operator/pull/486)
* [OCPBUGS-69883](https://issues.redhat.com/browse/OCPBUGS-69883): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.22 [#481](https://github.com/openshift/csi-operator/pull/481)
* [OCPBUGS-69982](https://issues.redhat.com/browse/OCPBUGS-69982): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.22 [#484](https://github.com/openshift/csi-operator/pull/484)
* [OCPBUGS-69695](https://issues.redhat.com/browse/OCPBUGS-69695): Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.22 [#478](https://github.com/openshift/csi-operator/pull/478)
* [STOR-2543](https://issues.redhat.com/browse/STOR-2543): add VAC manifest for tests in AWS EBS [#475](https://github.com/openshift/csi-operator/pull/475)
* [STOR-1945](https://issues.redhat.com/browse/STOR-1945): STOR-2056: Add SupportedSizeRange for azurefile-nfs [#477](https://github.com/openshift/csi-operator/pull/477)
* [Full changelog](https://github.com/openshift/csi-operator/compare/d739d8cacd23ca3545de402da9e5f49e547d1456...8253452c39841b626cedd0b42dc0449943ccf938)
### [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws/tree/f0be9c72e5bf25caeb2ca45c14e67e4d397a52cb)
* [AUTOSCALE-485](https://issues.redhat.com/browse/AUTOSCALE-485): rebase to 1.9.0 [#26](https://github.com/openshift/aws-karpenter-provider-aws/pull/26)
* [AUTOSCALE-485](https://issues.redhat.com/browse/AUTOSCALE-485): rebase to 1.8.6 [#25](https://github.com/openshift/aws-karpenter-provider-aws/pull/25)
* [AUTOSCALE-293](https://issues.redhat.com/browse/AUTOSCALE-293): partially ignore drift on ec2nodeclass userdata field [#21](https://github.com/openshift/aws-karpenter-provider-aws/pull/21)
* [Full changelog](https://github.com/openshift/aws-karpenter-provider-aws/compare/ff9c8d4e8fdc55d3e60c6add0942c018826ae870...f0be9c72e5bf25caeb2ca45c14e67e4d397a52cb)
### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/37a067230cbad4997dcf1d2c16685e36b6991c9e)
* [SPLAT-2627](https://issues.redhat.com/browse/SPLAT-2627): Created OTE Tests for dedicated hosts [#174](https://github.com/openshift/machine-api-provider-aws/pull/174)
* [SPLAT-2700](https://issues.redhat.com/browse/SPLAT-2700): Added shared tags for BYO DH [#181](https://github.com/openshift/machine-api-provider-aws/pull/181)
* [OCPCLOUD-3283](https://issues.redhat.com/browse/OCPCLOUD-3283): K8s 1.35 bump [#179](https://github.com/openshift/machine-api-provider-aws/pull/179)
* [CORS-4166](https://issues.redhat.com/browse/CORS-4166): enable IPv6 IMDS endpoint and private DNS configuration for dualstack [#177](https://github.com/openshift/machine-api-provider-aws/pull/177)
* [CORS-4315](https://issues.redhat.com/browse/CORS-4315): enable primary IPv6 when infrastructure ipFamily is DualStackIPv6Primary [#171](https://github.com/openshift/machine-api-provider-aws/pull/171)
* [SPLAT-2617](https://issues.redhat.com/browse/SPLAT-2617): Added dynamic dedicated host support [#172](https://github.com/openshift/machine-api-provider-aws/pull/172)
* [SPLAT-2558](https://issues.redhat.com/browse/SPLAT-2558): Add AWS Dedicated Host support [#160](https://github.com/openshift/machine-api-provider-aws/pull/160)
* [OCPBUGS-72390](https://issues.redhat.com/browse/OCPBUGS-72390): Fix reconciler consistency checks in Update and Exists [#162](https://github.com/openshift/machine-api-provider-aws/pull/162)
* [OCPBUGS-69950](https://issues.redhat.com/browse/OCPBUGS-69950): Updating ose-machine-api-provider-aws-container image to be consistent with ART for 4.22 [#161](https://github.com/openshift/machine-api-provider-aws/pull/161)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/938565c9f796fba385c0978a5ae1cc0a79f0f857...37a067230cbad4997dcf1d2c16685e36b6991c9e)
### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/8208828799b6c4f91fd9b80128668f7765599e84)
* [CCO-784](https://issues.redhat.com/browse/CCO-784): update to pick up tls-min-version and tls-cipher-suites [#207](https://github.com/openshift/aws-pod-identity-webhook/pull/207)
* [OCPBUGS-74165](https://issues.redhat.com/browse/OCPBUGS-74165): Fix GOTOOLCHAIN env var [#211](https://github.com/openshift/aws-pod-identity-webhook/pull/211)
* [CCO-728](https://issues.redhat.com/browse/CCO-728): merge upstream changes v0.6.11 [#209](https://github.com/openshift/aws-pod-identity-webhook/pull/209)
* [OCPBUGS-69825](https://issues.redhat.com/browse/OCPBUGS-69825): Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.22 [#208](https://github.com/openshift/aws-pod-identity-webhook/pull/208)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/0da6737b69c6676d9f9bc8b3fcc7f46fbe521096...8208828799b6c4f91fd9b80128668f7765599e84)
### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/4c7a764630c621d5e1700649fc056800d35bb6d1)
* [OCPCLOUD-3281](https://issues.redhat.com/browse/OCPCLOUD-3281): Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (314ccf1) into main [#155](https://github.com/openshift/cloud-provider-azure/pull/155)
* [OCPBUGS-65654](https://issues.redhat.com/browse/OCPBUGS-65654): Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (765f435) into main [#152](https://github.com/openshift/cloud-provider-azure/pull/152)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/aa6480c632b84371b8030b3f3f722d3d49601b02...4c7a764630c621d5e1700649fc056800d35bb6d1)
### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/de16e88406265ae154e18bc06e973579ef249cfa)
* [OCPCLOUD-3294](https://issues.redhat.com/browse/OCPCLOUD-3294): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.23.0 (ac446a1) into main [#371](https://github.com/openshift/cluster-api-provider-azure/pull/371)
* [OCPCLOUD-3294](https://issues.redhat.com/browse/OCPCLOUD-3294): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:main (bc68ad9) into main [#370](https://github.com/openshift/cluster-api-provider-azure/pull/370)
* [OCPBUGS-77637](https://issues.redhat.com/browse/OCPBUGS-77637): Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.22 [#369](https://github.com/openshift/cluster-api-provider-azure/pull/369)
* [OCPCLOUD-3324](https://issues.redhat.com/browse/OCPCLOUD-3324): Update to new manifests-gen [#357](https://github.com/openshift/cluster-api-provider-azure/pull/357)
* [OCPBUGS-53004](https://issues.redhat.com/browse/OCPBUGS-53004): Remove references to master branch [#336](https://github.com/openshift/cluster-api-provider-azure/pull/336)
* [OCPCLOUD-3101](https://issues.redhat.com/browse/OCPCLOUD-3101): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.22.0 (4523016) into master [#350](https://github.com/openshift/cluster-api-provider-azure/pull/350)
* NO-JIRA: UPSTREAM: <carry>: Add manifests verify target [#358](https://github.com/openshift/cluster-api-provider-azure/pull/358)
* [OCPBUGS-69934](https://issues.redhat.com/browse/OCPBUGS-69934): Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.22 [#356](https://github.com/openshift/cluster-api-provider-azure/pull/356)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/b80578abd9d7e6b0d0e9fa070f7ee88adc3bbb85...de16e88406265ae154e18bc06e973579ef249cfa)
### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/950b1622c43e9c41a38354efb7bfa0d2aba50cdb)
* [OCPBUGS-77248](https://issues.redhat.com/browse/OCPBUGS-77248): Rebase to v1.34.2 for OCP 4.22 [#124](https://github.com/openshift/azure-disk-csi-driver/pull/124)
* [OCPBUGS-77575](https://issues.redhat.com/browse/OCPBUGS-77575): Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.22 [#123](https://github.com/openshift/azure-disk-csi-driver/pull/123)
* [STOR-2768](https://issues.redhat.com/browse/STOR-2768): Rebase v1.34.1 [#120](https://github.com/openshift/azure-disk-csi-driver/pull/120)
* [OCPBUGS-69754](https://issues.redhat.com/browse/OCPBUGS-69754): Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.22 [#119](https://github.com/openshift/azure-disk-csi-driver/pull/119)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/d9137fcf733f644ca1e5cd0508cdc623febd7724...950b1622c43e9c41a38354efb7bfa0d2aba50cdb)
### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/c481e92ba74550bbd3134a9ae92ccef31de7f60c)
* [STOR-2761](https://issues.redhat.com/browse/STOR-2761): Rebase to upstream v1.35.0 for OCP 4.22 [#116](https://github.com/openshift/azure-file-csi-driver/pull/116)
* [OCPBUGS-77798](https://issues.redhat.com/browse/OCPBUGS-77798): Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.22 [#117](https://github.com/openshift/azure-file-csi-driver/pull/117)
* [OCPBUGS-70304](https://issues.redhat.com/browse/OCPBUGS-70304): UPSTREAM: 2940: fix: optionally skip reading the config from the API [#114](https://github.com/openshift/azure-file-csi-driver/pull/114)
* [OCPBUGS-70060](https://issues.redhat.com/browse/OCPBUGS-70060): Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.22 [#111](https://github.com/openshift/azure-file-csi-driver/pull/111)
* [OCPBUGS-70060](https://issues.redhat.com/browse/OCPBUGS-70060): fix failing unit tests in azure-file-csi-driver [#112](https://github.com/openshift/azure-file-csi-driver/pull/112)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/c77d75f90b7f84dfc25ba3439bc5eff87c3a2755...c481e92ba74550bbd3134a9ae92ccef31de7f60c)
### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/99b9a3a33d8edfd0a2d2876aa7ef1382b2c75a39)
* [OCPBUGS-69961](https://issues.redhat.com/browse/OCPBUGS-69961): Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.22 [#26](https://github.com/openshift/azure-kubernetes-kms/pull/26)
* [OCPBUGS-62405](https://issues.redhat.com/browse/OCPBUGS-62405): Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.21 [#23](https://github.com/openshift/azure-kubernetes-kms/pull/23)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/ea0b9944dddcc7043065a1fab5fca72dd17450da...99b9a3a33d8edfd0a2d2876aa7ef1382b2c75a39)
### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/69d049094ee36ad9c706d65694a8cd42e9a64800)
* [OCPCLOUD-3280](https://issues.redhat.com/browse/OCPCLOUD-3280): Bump k8s 1.35 [#189](https://github.com/openshift/machine-api-provider-azure/pull/189)
* [OCPBUGS-74076](https://issues.redhat.com/browse/OCPBUGS-74076): Fix: Enable boot diagnostics for Azure Stack Hub VMs [#182](https://github.com/openshift/machine-api-provider-azure/pull/182)
* [OCPBUGS-74573](https://issues.redhat.com/browse/OCPBUGS-74573): Add validation for AzureManaged boot diagnostics on Azure Stack Hub [#183](https://github.com/openshift/machine-api-provider-azure/pull/183)
* [OCPBUGS-77607](https://issues.redhat.com/browse/OCPBUGS-77607): Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.22 [#186](https://github.com/openshift/machine-api-provider-azure/pull/186)
* [OCPCLOUD-3252](https://issues.redhat.com/browse/OCPCLOUD-3252): Add AGENTS configuration [#181](https://github.com/openshift/machine-api-provider-azure/pull/181)
* [OCPBUGS-69864](https://issues.redhat.com/browse/OCPBUGS-69864): Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.22 [#179](https://github.com/openshift/machine-api-provider-azure/pull/179)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/b8b8cb1c5af7d2a3ef9a4a99a0739a2166a7932c...69d049094ee36ad9c706d65694a8cd42e9a64800)
### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/81a256e668a054385d4a27a393afd77148f268b0)
* [CCO-785](https://issues.redhat.com/browse/CCO-785): add flag to configure TLS cipher suites [#44](https://github.com/openshift/azure-workload-identity/pull/44)
* [OCPBUGS-73994](https://issues.redhat.com/browse/OCPBUGS-73994): Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.22 [#43](https://github.com/openshift/azure-workload-identity/pull/43)
* [CCO-729](https://issues.redhat.com/browse/CCO-729): merge upstream changes [#42](https://github.com/openshift/azure-workload-identity/pull/42)
* [OCPBUGS-69895](https://issues.redhat.com/browse/OCPBUGS-69895): Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.22 [#41](https://github.com/openshift/azure-workload-identity/pull/41)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/3f2a6e0d1ea68af321f9674b0b097939be7d2014...81a256e668a054385d4a27a393afd77148f268b0)
### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/ad4eb8a5e67dc08c0686f006641847df4370d599)
* [OCPBUGS-74161](https://issues.redhat.com/browse/OCPBUGS-74161): fix: pin metal3remediations CRDs storage version to v1beta1, deploy separate manifests in Default [#68](https://github.com/openshift/cluster-api-provider-metal3/pull/68)
* Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.22 [#67](https://github.com/openshift/cluster-api-provider-metal3/pull/67)
* [OCPBUGS-74161](https://issues.redhat.com/browse/OCPBUGS-74161): manifests-gen: include IPAM CRDs [#65](https://github.com/openshift/cluster-api-provider-metal3/pull/65)
* Merge upstream [#63](https://github.com/openshift/cluster-api-provider-metal3/pull/63)
* [OCPBUGS-73951](https://issues.redhat.com/browse/OCPBUGS-73951): Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.22 [#58](https://github.com/openshift/cluster-api-provider-metal3/pull/58)
* Update to new manifests-gen [#64](https://github.com/openshift/cluster-api-provider-metal3/pull/64)
* Revert "NO-JIRA: Add manifests verify target" [#60](https://github.com/openshift/cluster-api-provider-metal3/pull/60)
* NO-JIRA: UPSTREAM: <carry>: Do not ignore files in vendor [#59](https://github.com/openshift/cluster-api-provider-metal3/pull/59)
* NO-JIRA: Add manifests verify target [#57](https://github.com/openshift/cluster-api-provider-metal3/pull/57)
* [OCPBUGS-69724](https://issues.redhat.com/browse/OCPBUGS-69724): Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.22 [#56](https://github.com/openshift/cluster-api-provider-metal3/pull/56)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/ba386c376b386b3e0cff723f98bbff45cb358610...ad4eb8a5e67dc08c0686f006641847df4370d599)
### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/52540f5fe4cc693ec4c98af58175d76580f2ee8c)
* [MULTIARCH-5854](https://issues.redhat.com/browse/MULTIARCH-5854): implements retry-after logic to limit failures [#10421](https://github.com/openshift/installer/pull/10421)
* [OCPBUGS-78151](https://issues.redhat.com/browse/OCPBUGS-78151): Add provisioningNetworkGateway field to install-config [#10387](https://github.com/openshift/installer/pull/10387)
* [OCPBUGS-77965](https://issues.redhat.com/browse/OCPBUGS-77965): Update RHCOS-release-4.22 bootimage metadata to 10.2.20260405-0 / 9.8.20260403-0 [#10482](https://github.com/openshift/installer/pull/10482)
* [OCPBUGS-77917](https://issues.redhat.com/browse/OCPBUGS-77917): PowerVS: Use short regions and provide a default resource group in survey [#10369](https://github.com/openshift/installer/pull/10369)
* [CORS-3900](https://issues.redhat.com/browse/CORS-3900): Add IPv6 frontend IP configurations for dual-stack [#10328](https://github.com/openshift/installer/pull/10328)
* [MCO-2135](https://issues.redhat.com/browse/MCO-2135): Label Machines, MachineSets, and ControlPaneMachineSets with OSStream labels [#10426](https://github.com/openshift/installer/pull/10426)
* [OCPBUGS-81509](https://issues.redhat.com/browse/OCPBUGS-81509): fix ASO CRD duplication [#10451](https://github.com/openshift/installer/pull/10451)
* [OCPBUGS-76468](https://issues.redhat.com/browse/OCPBUGS-76468): PowerVS:: SSH key must be RSA [#10289](https://github.com/openshift/installer/pull/10289)
* no-jira: PowerVS: add mjturek and hamzy to approvers list [#10483](https://github.com/openshift/installer/pull/10483)
* [OCPEDGE-2072](https://issues.redhat.com/browse/OCPEDGE-2072): bump(ocp/api): pull in latest for DualReplica promotion [#10471](https://github.com/openshift/installer/pull/10471)
* [OCPBUGS-77830](https://issues.redhat.com/browse/OCPBUGS-77830): skip redirect when validating endpoint accessibility [#10360](https://github.com/openshift/installer/pull/10360)
* [OCPBUGS-81622](https://issues.redhat.com/browse/OCPBUGS-81622): Collect bootstrap service records in agent-gather [#10457](https://github.com/openshift/installer/pull/10457)
* [AGENT-1448](https://issues.redhat.com/browse/AGENT-1448): Add IRI registry authentication support [#10389](https://github.com/openshift/installer/pull/10389)
* [OCPBUGS-81635](https://issues.redhat.com/browse/OCPBUGS-81635): AWS: Increase cluster bootstrap timeout with userProvisioned DNS [#10459](https://github.com/openshift/installer/pull/10459)
* [CORS-4373](https://issues.redhat.com/browse/CORS-4373): Remove checks for AzureClusterHostedDNSInstall featuregate [#10455](https://github.com/openshift/installer/pull/10455)
* [CORS-4316](https://issues.redhat.com/browse/CORS-4316): Update the Installer GCP UPI documentation. [#10235](https://github.com/openshift/installer/pull/10235)
* [OCPBUGS-81309](https://issues.redhat.com/browse/OCPBUGS-81309): Fix vSphere with static IPs on TPNU [#10442](https://github.com/openshift/installer/pull/10442)
* [OCPBUGS-79542](https://issues.redhat.com/browse/OCPBUGS-79542): Mount pullsecret manifest to UI container [#10411](https://github.com/openshift/installer/pull/10411)
* [OCPBUGS-81470](https://issues.redhat.com/browse/OCPBUGS-81470): Restart sshd after applying node-image to bootstrap [#10452](https://github.com/openshift/installer/pull/10452)
* [OCPBUGS-37587](https://issues.redhat.com/browse/OCPBUGS-37587): Sign blob container using user delegated creds [#9851](https://github.com/openshift/installer/pull/9851)
* [SPLAT-2622](https://issues.redhat.com/browse/SPLAT-2622): Bump govmomi to v0.53.0 [#10431](https://github.com/openshift/installer/pull/10431)
* [OCPBUGS-78935](https://issues.redhat.com/browse/OCPBUGS-78935): Fix bootstrap VM on non-x86 platforms [#10419](https://github.com/openshift/installer/pull/10419)
* [CORS-4352](https://issues.redhat.com/browse/CORS-4352): aws: validations to ensure install-config is valid for dualstack install [#10380](https://github.com/openshift/installer/pull/10380)
* [OCPBUGS-74528](https://issues.redhat.com/browse/OCPBUGS-74528): upkeep: remove tna feature gate [#10403](https://github.com/openshift/installer/pull/10403)
* NO-JIRA: Add Ella, Daniel to openstack-reviewers [#10434](https://github.com/openshift/installer/pull/10434)
* [CORS-4324](https://issues.redhat.com/browse/CORS-4324): Update default release image to 4.22 [#10429](https://github.com/openshift/installer/pull/10429)
* [OCPBUGS-78589](https://issues.redhat.com/browse/OCPBUGS-78589): baremetal: add serial console logging for bootstrap VM [#10400](https://github.com/openshift/installer/pull/10400)
* [CORS-4359](https://issues.redhat.com/browse/CORS-4359): feature gate install into EU Sovereign Cloud [#10412](https://github.com/openshift/installer/pull/10412)
* [OCPBUGS-59514](https://issues.redhat.com/browse/OCPBUGS-59514): redacted install config for baremetal [#9972](https://github.com/openshift/installer/pull/9972)
* [AGENT-1461](https://issues.redhat.com/browse/AGENT-1461): Do not discard NMStateConfig when agent-config is on disk for unconfigured-ignition [#10393](https://github.com/openshift/installer/pull/10393)
* [AGENT-1471](https://issues.redhat.com/browse/AGENT-1471): Fix race condition: wait for agent-register-infraenv before showing UI URL [#10422](https://github.com/openshift/installer/pull/10422)
* [MCO-2116](https://issues.redhat.com/browse/MCO-2116): Generate OSImageStream manifest [#10357](https://github.com/openshift/installer/pull/10357)
* [AGENT-1136](https://issues.redhat.com/browse/AGENT-1136), [AGENT-1229](https://issues.redhat.com/browse/AGENT-1229): Add auth to unconfigured-ignition [#10381](https://github.com/openshift/installer/pull/10381)
* [SPLAT-2172](https://issues.redhat.com/browse/SPLAT-2172): AWS dedicate host support [#10079](https://github.com/openshift/installer/pull/10079)
* [MCO-2133](https://issues.redhat.com/browse/MCO-2133): Select bootimages based on OSImageStream [#10321](https://github.com/openshift/installer/pull/10321)
* [CORS-4336](https://issues.redhat.com/browse/CORS-4336): Support for AWS European Sovereign Cloud [#10303](https://github.com/openshift/installer/pull/10303)
* [OCPBUGS-74390](https://issues.redhat.com/browse/OCPBUGS-74390): Allow all instance types in the install config for GCP [#10271](https://github.com/openshift/installer/pull/10271)
* no-jira: fix SC2328 shellcheck errors [#10413](https://github.com/openshift/installer/pull/10413)
* [AGENT-1458](https://issues.redhat.com/browse/AGENT-1458): Don't auto-calculate RendezvousIP in unconfigured-ignition [#10405](https://github.com/openshift/installer/pull/10405)
* [CORS-4358](https://issues.redhat.com/browse/CORS-4358): aws: add ICMPv6 ingress rule for dual-stack clusters [#10408](https://github.com/openshift/installer/pull/10408)
* [CORS-4235](https://issues.redhat.com/browse/CORS-4235): Machine Management API Field & Feature Gate [#10402](https://github.com/openshift/installer/pull/10402)
* no-jira: bump golangci-lint to v2.10.1 for Go 1.25 support [#10397](https://github.com/openshift/installer/pull/10397)
* [OCPBUGS-57603](https://issues.redhat.com/browse/OCPBUGS-57603): Disallow cross subscription encryption sets [#10335](https://github.com/openshift/installer/pull/10335)
* [OCPBUGS-64842](https://issues.redhat.com/browse/OCPBUGS-64842): Disable LoadBalancer in cloud config when Octavia is unavailable [#10326](https://github.com/openshift/installer/pull/10326)
* [CORS-4288](https://issues.redhat.com/browse/CORS-4288): docs(azure): Restructure tested VM families with Series-based organization [#10314](https://github.com/openshift/installer/pull/10314)
* [CORS-4072](https://issues.redhat.com/browse/CORS-4072): dualstack support for AWS [#10353](https://github.com/openshift/installer/pull/10353)
* [CORS-4355](https://issues.redhat.com/browse/CORS-4355): define required permissions for dualstack install [#10371](https://github.com/openshift/installer/pull/10371)
* [CORS-3897](https://issues.redhat.com/browse/CORS-3897): Dual stack support for cluster manifest & VNet [#10319](https://github.com/openshift/installer/pull/10319)
* [CORS-4078](https://issues.redhat.com/browse/CORS-4078): aws: standardize AWS client setup in the destroy code [#10340](https://github.com/openshift/installer/pull/10340)
* [OCPBUGS-75250](https://issues.redhat.com/browse/OCPBUGS-75250): Use correct Project ID with GCP Shared VPC [#10297](https://github.com/openshift/installer/pull/10297)
* [METAL-1668](https://issues.redhat.com/browse/METAL-1668): simplify BMC CA assets [#10243](https://github.com/openshift/installer/pull/10243)
* [METAL-1750](https://issues.redhat.com/browse/METAL-1750): baremetal: use q35 machine type with EFI firmware for bootstrap VM [#10349](https://github.com/openshift/installer/pull/10349)
* [OCPEDGE-2383](https://issues.redhat.com/browse/OCPEDGE-2383): feat: update sno minimum to 4vcpu [#10283](https://github.com/openshift/installer/pull/10283)
* [CNTRLPLANE-2847](https://issues.redhat.com/browse/CNTRLPLANE-2847): bump Go 1.25, openshift/api, and k8s.io dependencies [#10376](https://github.com/openshift/installer/pull/10376)
* [OCPBUGS-77717](https://issues.redhat.com/browse/OCPBUGS-77717): Updating ose-installer-container image to be consistent with ART for 4.22 [#10351](https://github.com/openshift/installer/pull/10351)
* [OCPBUGS-78190](https://issues.redhat.com/browse/OCPBUGS-78190): Pass image policy env setting to assisted [#10379](https://github.com/openshift/installer/pull/10379)
* [OCPBUGS-77261](https://issues.redhat.com/browse/OCPBUGS-77261): Increase timeout for waiting control plane [#10370](https://github.com/openshift/installer/pull/10370)
* [OCPBUGS-77742](https://issues.redhat.com/browse/OCPBUGS-77742): Updating ose-installer-artifacts-container image to be consistent with ART for 4.22 [#10354](https://github.com/openshift/installer/pull/10354)
* NO-JIRA: aws: validate instance type and AMI compatibility for SEV-SNP [#10126](https://github.com/openshift/installer/pull/10126)
* [CORS-4345](https://issues.redhat.com/browse/CORS-4345): aws: config must be created with install region [#10374](https://github.com/openshift/installer/pull/10374)
* [OCPBUGS-77722](https://issues.redhat.com/browse/OCPBUGS-77722): Updating ose-baremetal-installer-container image to be consistent with ART for 4.22 [#10352](https://github.com/openshift/installer/pull/10352)
* no-jira: Golangci config [#10372](https://github.com/openshift/installer/pull/10372)
* [METAL-156](https://issues.redhat.com/browse/METAL-156): Use Live ISO for baremetal bootstrap VM [#9814](https://github.com/openshift/installer/pull/9814)
* no-jira: Bump openshift api [#10347](https://github.com/openshift/installer/pull/10347)
* no-jira: OCPBUGS-77255: wait for node-image-overly to restart sshd [#10363](https://github.com/openshift/installer/pull/10363)
* [OCPBUGS-77683](https://issues.redhat.com/browse/OCPBUGS-77683): Add c8g* to tested_instance_types_aarch64 [#10356](https://github.com/openshift/installer/pull/10356)
* [OCPBUGS-77440](https://issues.redhat.com/browse/OCPBUGS-77440): Image in worker machineset is auto-updated when user specifies the osImage [#10341](https://github.com/openshift/installer/pull/10341)
* [OCPBUGS-66941](https://issues.redhat.com/browse/OCPBUGS-66941): aws: throughput/iops validation for machine pools [#10222](https://github.com/openshift/installer/pull/10222)
* no-jira: [OCPBUGS-77255]: kludge: restart sshd server [#10345](https://github.com/openshift/installer/pull/10345)
* [OCPBUGS-70168](https://issues.redhat.com/browse/OCPBUGS-70168): Increase size of /var/ostreecontainer mount [#10304](https://github.com/openshift/installer/pull/10304)
* no-jira: ibmcloud: fix region survey default value [#10336](https://github.com/openshift/installer/pull/10336)
* [OCPBUGS-77355](https://issues.redhat.com/browse/OCPBUGS-77355): fix wavelength zone name regex [#10338](https://github.com/openshift/installer/pull/10338)
* [CORS-4345](https://issues.redhat.com/browse/CORS-4345): remove AWS SDK v1 unused code and go deps [#10339](https://github.com/openshift/installer/pull/10339)
* [CORS-4244](https://issues.redhat.com/browse/CORS-4244): adjust validations to allow dual-stack CIDRs on AWS [#10241](https://github.com/openshift/installer/pull/10241)
* [CORS-3954](https://issues.redhat.com/browse/CORS-3954): Enable strict unmarshaling for user invocations [#10287](https://github.com/openshift/installer/pull/10287)
* [CORS-4076](https://issues.redhat.com/browse/CORS-4076): bump capa version to support dualstack network infrastructure [#10337](https://github.com/openshift/installer/pull/10337)
* [OTA-1861](https://issues.redhat.com/browse/OTA-1861): data/bootstrap/files/usr/local/bin/bootkube: Pass CVO render --cluster-version-manifest-path [#10295](https://github.com/openshift/installer/pull/10295)
* [OCPBUGS-77182](https://issues.redhat.com/browse/OCPBUGS-77182): PowerVC: Add default LB [#10333](https://github.com/openshift/installer/pull/10333)
* [OKD-259](https://issues.redhat.com/browse/OKD-259): Add Validatation for the OKD Featureset to Prevent it From Being Enabled on OCP Clusters [#10260](https://github.com/openshift/installer/pull/10260)
* [OCPBUGS-54298](https://issues.redhat.com/browse/OCPBUGS-54298): Installer should validate mirror registry pull secret [#10239](https://github.com/openshift/installer/pull/10239)
* [OCPBUGS-56846](https://issues.redhat.com/browse/OCPBUGS-56846): validate azure user-assigned identity existence [#10220](https://github.com/openshift/installer/pull/10220)
* [CORS-4055](https://issues.redhat.com/browse/CORS-4055): migrate CCO permission check to AWS SDK v2 [#10262](https://github.com/openshift/installer/pull/10262)
* [OCPBUGS-63065](https://issues.redhat.com/browse/OCPBUGS-63065): Expand Azure userTags to support Azure Government Cloud [#10015](https://github.com/openshift/installer/pull/10015)
* [OCPBUGS-55407](https://issues.redhat.com/browse/OCPBUGS-55407): set DNS zone for Azure Stack Hub private clusters [#10233](https://github.com/openshift/installer/pull/10233)
* [CORS-4302](https://issues.redhat.com/browse/CORS-4302): Add N4A instance types to accepted in Installer [#10292](https://github.com/openshift/installer/pull/10292)
* [CORS-4142](https://issues.redhat.com/browse/CORS-4142): ensure lbType is NLB when dual-stack is configured [#10256](https://github.com/openshift/installer/pull/10256)
* [MCO-2031](https://issues.redhat.com/browse/MCO-2031): OS Image Stream to install-config schema [#10192](https://github.com/openshift/installer/pull/10192)
* [CORS-4055](https://issues.redhat.com/browse/CORS-4055): migrate EC2 API calls to AWS SDK v2 [#10244](https://github.com/openshift/installer/pull/10244)
* [OCPBUGS-60162](https://issues.redhat.com/browse/OCPBUGS-60162): reject byo vpc/subnets with CAPI owned cluster tag [#9913](https://github.com/openshift/installer/pull/9913)
* [OCPBUGS-41570](https://issues.redhat.com/browse/OCPBUGS-41570): Ensure correct mask for bootstrap external IP [#8987](https://github.com/openshift/installer/pull/8987)
* [OCPEDGE-2276](https://issues.redhat.com/browse/OCPEDGE-2276): Add support for platform None and External in TNA clusters [#10286](https://github.com/openshift/installer/pull/10286)
* [OCPEDGE-2276](https://issues.redhat.com/browse/OCPEDGE-2276): Add support for platform None in TNA (Two-Node Arbiter) clusters [#10236](https://github.com/openshift/installer/pull/10236)
* [CORS-4055](https://issues.redhat.com/browse/CORS-4055): migrate credential provider check to AWS SDK v2 [#10261](https://github.com/openshift/installer/pull/10261)
* [CORS-4328](https://issues.redhat.com/browse/CORS-4328): configure AWS CCM NodeIPFamilies for dual-stack support [#10257](https://github.com/openshift/installer/pull/10257)
* [CORS-4055](https://issues.redhat.com/browse/CORS-4055), [CORS-4078](https://issues.redhat.com/browse/CORS-4078): migrate ELB/ELBv2 API calls to AWS SDK v2 [#10258](https://github.com/openshift/installer/pull/10258)
* [OCPBUGS-74631](https://issues.redhat.com/browse/OCPBUGS-74631): Add validation to reject userProvisionedDNS on Azure Stack Hub [#10279](https://github.com/openshift/installer/pull/10279)
* [CORS-4055](https://issues.redhat.com/browse/CORS-4055): migrate default region check to AWS SDK v2 [#10267](https://github.com/openshift/installer/pull/10267)
* [OCPBUGS-74625](https://issues.redhat.com/browse/OCPBUGS-74625): gcp: skip AI zones [#10269](https://github.com/openshift/installer/pull/10269)
* [CORS-4055](https://issues.redhat.com/browse/CORS-4055): migrate IAM API calls to AWS SDK v2 [#10245](https://github.com/openshift/installer/pull/10245)
* [CORS-4055](https://issues.redhat.com/browse/CORS-4055): migrate S3 API calls to AWS SDK v2 [#10242](https://github.com/openshift/installer/pull/10242)
* [OCPBUGS-63305](https://issues.redhat.com/browse/OCPBUGS-63305): Make SimulatePrincipalPolicy optional [#10081](https://github.com/openshift/installer/pull/10081)
* [OCPBUGS-67816](https://issues.redhat.com/browse/OCPBUGS-67816): Revert storage account API version for client [#10224](https://github.com/openshift/installer/pull/10224)
* [OCPBUGS-74078](https://issues.redhat.com/browse/OCPBUGS-74078): add support for NVIDIA H100 and H200 enabled machine series [#10234](https://github.com/openshift/installer/pull/10234)
* [CORS-4299](https://issues.redhat.com/browse/CORS-4299), [CORS-4300](https://issues.redhat.com/browse/CORS-4300): Allow N4A Instance Types in the installer [#10211](https://github.com/openshift/installer/pull/10211)
* no-jira: add trace-config Claude command for installconfig field usage analysis [#10190](https://github.com/openshift/installer/pull/10190)
* [AGENT-1309](https://issues.redhat.com/browse/AGENT-1309): Increase disk size requirements for master and SNO [#10254](https://github.com/openshift/installer/pull/10254)
* [OSDOCS-17769](https://issues.redhat.com/browse/OSDOCS-17769): Add AWS m7 instance types [#10246](https://github.com/openshift/installer/pull/10246)
* [CORS-4073](https://issues.redhat.com/browse/CORS-4073): validate instance type support IPv6 in dual-stack [#10238](https://github.com/openshift/installer/pull/10238)
* [OCPBUGS-74363](https://issues.redhat.com/browse/OCPBUGS-74363): Remove region option for the GCP Private Service Connect Endpoint [#10249](https://github.com/openshift/installer/pull/10249)
* NO-JIRA: use v2 config for go-lint [#10240](https://github.com/openshift/installer/pull/10240)
* [AGENT-1425](https://issues.redhat.com/browse/AGENT-1425): Fix stale dependency in agent-register-infraenv [#10237](https://github.com/openshift/installer/pull/10237)
* [AGENT-1309](https://issues.redhat.com/browse/AGENT-1309): Modify NoRegistryClusterInstall storage requirements [#10176](https://github.com/openshift/installer/pull/10176)
* [OCPBUGS-56770](https://issues.redhat.com/browse/OCPBUGS-56770): Honor user-specified bootDiagnostics on Azure Stack Hub [#10223](https://github.com/openshift/installer/pull/10223)
* [OCPBUGS-63028](https://issues.redhat.com/browse/OCPBUGS-63028): filtering only PEs from cluster list [#10193](https://github.com/openshift/installer/pull/10193)
* [CORS-4075](https://issues.redhat.com/browse/CORS-4075), [CORS-4113](https://issues.redhat.com/browse/CORS-4113): Install-config and Infra manifest updates for DualStack for AWS and Azure [#10207](https://github.com/openshift/installer/pull/10207)
* [OCPBUGS-72525](https://issues.redhat.com/browse/OCPBUGS-72525): add newly detected instance types for Azure during 4.21 regression test [#10202](https://github.com/openshift/installer/pull/10202)
* [OCPBUGS-69735](https://issues.redhat.com/browse/OCPBUGS-69735): handle SSH rule deletion for Azure private [#10213](https://github.com/openshift/installer/pull/10213)
* [OCPBUGS-69734](https://issues.redhat.com/browse/OCPBUGS-69734): Fix destroy bootstrap command for Azure [#10212](https://github.com/openshift/installer/pull/10212)
* NO-JIRA: add user Rolv-Apneseth to coreos-maintainers and coreos-reviewers [#10206](https://github.com/openshift/installer/pull/10206)
* [OCPBUGS-69923](https://issues.redhat.com/browse/OCPBUGS-69923): ensure deterministic zone ordering for control plane machines [#10188](https://github.com/openshift/installer/pull/10188)
* NO-JIRA: Add angelcerveraroldan to coreos approvers and reviewers [#10209](https://github.com/openshift/installer/pull/10209)
* [OCPBUGS-72577](https://issues.redhat.com/browse/OCPBUGS-72577): bump default channel to stable-4.22 for main(4.22) branch [#10205](https://github.com/openshift/installer/pull/10205)
* [OCPBUGS-71232](https://issues.redhat.com/browse/OCPBUGS-71232): Fix nil pointer exception in azure mapiImage [#10200](https://github.com/openshift/installer/pull/10200)
* [OCPBUGS-70013](https://issues.redhat.com/browse/OCPBUGS-70013): Updating ose-installer-container image to be consistent with ART for 4.22 [#10182](https://github.com/openshift/installer/pull/10182)
* no-jira: Platform Experts Claude Command [#10186](https://github.com/openshift/installer/pull/10186)
* no-jira: Add barbacbd for gcp owners [#10189](https://github.com/openshift/installer/pull/10189)
* [OCPBUGS-70021](https://issues.redhat.com/browse/OCPBUGS-70021): Updating ose-baremetal-installer-container image to be consistent with ART for 4.22 [#10183](https://github.com/openshift/installer/pull/10183)
* [OCPBUGS-70047](https://issues.redhat.com/browse/OCPBUGS-70047): Updating ose-installer-artifacts-container image to be consistent with ART for 4.22 [#10184](https://github.com/openshift/installer/pull/10184)
* no-jira: Fix linting issues for golangci-lint v2 [#10138](https://github.com/openshift/installer/pull/10138)
* NO-JIRA: remove pod-infra-container-image flag from kubelet [#10145](https://github.com/openshift/installer/pull/10145)
* [OCPBUGS-69870](https://issues.redhat.com/browse/OCPBUGS-69870): rename "var-ostree\x2dcontainer.mount" to something more computer-friendly [#10171](https://github.com/openshift/installer/pull/10171)
* [OCPBUGS-69840](https://issues.redhat.com/browse/OCPBUGS-69840): PowerVC: fix PostProvision [#10175](https://github.com/openshift/installer/pull/10175)
* [OCPBUGS-69434](https://issues.redhat.com/browse/OCPBUGS-69434), [SPLAT-2584](https://issues.redhat.com/browse/SPLAT-2584): Added ability to install different IPAM version when in TP. [#10169](https://github.com/openshift/installer/pull/10169)
* [OCPBUGS-65859](https://issues.redhat.com/browse/OCPBUGS-65859): Fix set-hostname dependency for interactive console services [#10118](https://github.com/openshift/installer/pull/10118)
* [OCPBUGS-17667](https://issues.redhat.com/browse/OCPBUGS-17667): Validate vCenter datacenters in failure domain topology [#10086](https://github.com/openshift/installer/pull/10086)
* [OCPBUGS-61344](https://issues.redhat.com/browse/OCPBUGS-61344): skip deleting snapshots managed by AWS Backup service [#9964](https://github.com/openshift/installer/pull/9964)
* [OCPBUGS-62870](https://issues.redhat.com/browse/OCPBUGS-62870): installing into GCP Shared VPC with minimal permissions [#10157](https://github.com/openshift/installer/pull/10157)
* [OCPBUGS-64775](https://issues.redhat.com/browse/OCPBUGS-64775): use CAPZ to provision ssh rule [#10162](https://github.com/openshift/installer/pull/10162)
* [OCPBUGS-66295](https://issues.redhat.com/browse/OCPBUGS-66295): Fix ignition warning about agent-extract-tui.service [#10146](https://github.com/openshift/installer/pull/10146)
* [AGENT-1357](https://issues.redhat.com/browse/AGENT-1357): remove AgentWorkflowTypeInstallInteractiveDisconnected workflow [#10020](https://github.com/openshift/installer/pull/10020)
* And 5 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/installer/compare/a6c94ff2839258d0653650c82e93b593bac6988f...52540f5fe4cc693ec4c98af58175d76580f2ee8c)
### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/8d863b9505a5cfc0b01e33f985a3edf9d3c69f4b)
* [OCPCLOUD-3346](https://issues.redhat.com/browse/OCPCLOUD-3346): Bump deps + Add centralized TLS configuration to Metal3Remediation webhook server [#248](https://github.com/openshift/cluster-api-provider-baremetal/pull/248)
* [OCPBUGS-77619](https://issues.redhat.com/browse/OCPBUGS-77619): Updating baremetal-machine-controller-container image to be consistent with ART for 4.22 [#250](https://github.com/openshift/cluster-api-provider-baremetal/pull/250)
* [OCPBUGS-74161](https://issues.redhat.com/browse/OCPBUGS-74161): manifests: remove metal3remediation, now deployed from o/cluster-api-provider-metal3 [#249](https://github.com/openshift/cluster-api-provider-baremetal/pull/249)
* NO-ISSUE: Update fetch_ext_bins.sh to use setup-envtest for kubebuilder binaries [#251](https://github.com/openshift/cluster-api-provider-baremetal/pull/251)
* [OCPBUGS-73995](https://issues.redhat.com/browse/OCPBUGS-73995): Updating baremetal-machine-controller-container image to be consistent with ART for 4.22 [#242](https://github.com/openshift/cluster-api-provider-baremetal/pull/242)
* NO-ISSUE: Synchronize OWNERS with CAPM3 [#241](https://github.com/openshift/cluster-api-provider-baremetal/pull/241)
* [OCPBUGS-69896](https://issues.redhat.com/browse/OCPBUGS-69896): Updating baremetal-machine-controller-container image to be consistent with ART for 4.22 [#240](https://github.com/openshift/cluster-api-provider-baremetal/pull/240)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/4e6a729c5ac8fde8859db5830def262dfdee28ea...8d863b9505a5cfc0b01e33f985a3edf9d3c69f4b)
### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/c5e5048987427f58d3ca76238537e74bd3175e0f)
* [OCPBUGS-66071](https://issues.redhat.com/browse/OCPBUGS-66071): Fix PPI for ACM [#456](https://github.com/openshift/baremetal-operator/pull/456)
* [OCPBUGS-64617](https://issues.redhat.com/browse/OCPBUGS-64617): Merge upstream [#473](https://github.com/openshift/baremetal-operator/pull/473)
* [METAL-1720](https://issues.redhat.com/browse/METAL-1720): Merge upstream [#467](https://github.com/openshift/baremetal-operator/pull/467)
* [METAL-1708](https://issues.redhat.com/browse/METAL-1708): Merge upstream 2026-03-09 [#466](https://github.com/openshift/baremetal-operator/pull/466)
* NO-ISSUE: Merge upstream [#465](https://github.com/openshift/baremetal-operator/pull/465)
* Updating ose-baremetal-operator-container image to be consistent with ART for 4.22 [#464](https://github.com/openshift/baremetal-operator/pull/464)
* NO-ISSUE: Merge upstream [#455](https://github.com/openshift/baremetal-operator/pull/455)
* Bug OCPBUGS-75006: BMO fails to start servicing despite updates to HFC spec [#457](https://github.com/openshift/baremetal-operator/pull/457)
* [OCPBUGS-65571](https://issues.redhat.com/browse/OCPBUGS-65571): Fix deletion hang when aborting inspection during power-off [#447](https://github.com/openshift/baremetal-operator/pull/447)
* NO-ISSUE: Fix invalidDNSNameinvalidipv6 test for Go 1.24+ [#448](https://github.com/openshift/baremetal-operator/pull/448)
* [OCPBUGS-70265](https://issues.redhat.com/browse/OCPBUGS-70265): Fix errors.As usage for NoDataInSecretError [#444](https://github.com/openshift/baremetal-operator/pull/444)
* NO-ISSUE: Merge upstream [#442](https://github.com/openshift/baremetal-operator/pull/442)
* [OCPBUGS-70018](https://issues.redhat.com/browse/OCPBUGS-70018): Updating ose-baremetal-operator-container image to be consistent with ART for 4.22 [#441](https://github.com/openshift/baremetal-operator/pull/441)
* [METAL-1693](https://issues.redhat.com/browse/METAL-1693): Add "merge-upstream" slash command [#437](https://github.com/openshift/baremetal-operator/pull/437)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/eb6f984eeedf6918f531aa3c461f01d59dae9426...c5e5048987427f58d3ca76238537e74bd3175e0f)
### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/dca8cb1be0cce1ce404dfd407ead1326a3c8bb40)
* [OPNET-709](https://issues.redhat.com/browse/OPNET-709): Migrate from iptables to nftables [#387](https://github.com/openshift/baremetal-runtimecfg/pull/387)
* [OCPBUGS-77301](https://issues.redhat.com/browse/OCPBUGS-77301): Remove VIP leasing feature [#385](https://github.com/openshift/baremetal-runtimecfg/pull/385)
* Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.22 [#386](https://github.com/openshift/baremetal-runtimecfg/pull/386)
* [OCPBUGS-76394](https://issues.redhat.com/browse/OCPBUGS-76394): Install dbus-tools, needed in pkg/monitor/dnsmasqmonitor.go [#380](https://github.com/openshift/baremetal-runtimecfg/pull/380)
* [OCPBUGS-42805](https://issues.redhat.com/browse/OCPBUGS-42805): Add node caching with Kubernetes watch API to reduce API load [#374](https://github.com/openshift/baremetal-runtimecfg/pull/374)
* NO-ISSUE: Add agents.md and slash command for reviewing [#375](https://github.com/openshift/baremetal-runtimecfg/pull/375)
* [MGMT-22546](https://issues.redhat.com/browse/MGMT-22546): Fix TNA and TNF dummy ip for ipv6 [#369](https://github.com/openshift/baremetal-runtimecfg/pull/369)
* NO-ISSUE: Migrate away from deprecated ioutil [#373](https://github.com/openshift/baremetal-runtimecfg/pull/373)
* [OCPBUGS-69812](https://issues.redhat.com/browse/OCPBUGS-69812): Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.22 [#376](https://github.com/openshift/baremetal-runtimecfg/pull/376)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/8404689ecbcb940e113bfb7141909a6231401fee...dca8cb1be0cce1ce404dfd407ead1326a3c8bb40)
### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/66dee73f66c4f048c333c6a77d76871872027896)
* NO-JIRA: claude: Split tester agent away from code-reviewer [#2250](https://github.com/openshift/oc/pull/2250)
* [OCPBUGS-77845](https://issues.redhat.com/browse/OCPBUGS-77845): Fix extraction of gated manifests using --install-config [#2249](https://github.com/openshift/oc/pull/2249)
* NO-ISSUE: recover the context in upgrade [#2248](https://github.com/openshift/oc/pull/2248)
* NO-JIRA: claude: Turn pr-review skill into code-reviewer agent [#2245](https://github.com/openshift/oc/pull/2245)
* [OCPBUGS-59311](https://issues.redhat.com/browse/OCPBUGS-59311): must-gather: Handle signals properly [#2237](https://github.com/openshift/oc/pull/2237)
* [OTA-1548](https://issues.redhat.com/browse/OTA-1548): set up accepted risks [#2170](https://github.com/openshift/oc/pull/2170)
* [MCO-1961](https://issues.redhat.com/browse/MCO-1961): Allow multiple machine-os versions [#2157](https://github.com/openshift/oc/pull/2157)
* Revert "TRT-2587: Revert #2219 "CNTRLPLANE-2769: Bump k8s dependencies to 1.35"" [#2241](https://github.com/openshift/oc/pull/2241)
* [TRT-2587](https://issues.redhat.com/browse/TRT-2587): Revert #2219 "CNTRLPLANE-2769: Bump k8s dependencies to 1.35" [#2236](https://github.com/openshift/oc/pull/2236)
* [TRT-2585](https://issues.redhat.com/browse/TRT-2585): pkg/cli/admin/release/extract: Support zero-output extraction [#2233](https://github.com/openshift/oc/pull/2233)
* [OCPBUGS-78701](https://issues.redhat.com/browse/OCPBUGS-78701): adm policy add-role-to-user: Fix --dry-run=server [#2231](https://github.com/openshift/oc/pull/2231)
* [OCPBUGS-77845](https://issues.redhat.com/browse/OCPBUGS-77845): Update release extract inclusion to support feature gates and major version [#2222](https://github.com/openshift/oc/pull/2222)
* NO-ISSUE: pkg/cli/admin/release/extract: Read manifests into memory [#2232](https://github.com/openshift/oc/pull/2232)
* NO-JIRA: Add .coderabbit.yaml and AGENTS.md configurations [#2229](https://github.com/openshift/oc/pull/2229)
* [CNTRLPLANE-2769](https://issues.redhat.com/browse/CNTRLPLANE-2769): Bump k8s dependencies to 1.35 [#2219](https://github.com/openshift/oc/pull/2219)
* NO-JIRA:Fixing manifest ci failure [#2228](https://github.com/openshift/oc/pull/2228)
* [OCPBUGS-64840](https://issues.redhat.com/browse/OCPBUGS-64840): image extract: Use Explicit strategy for ICSP/IDMS [#2202](https://github.com/openshift/oc/pull/2202)
* NO-JIRA: fix: reduce the amount of resources for debug pod [#2225](https://github.com/openshift/oc/pull/2225)
* NO-JIRA: oc fips ci fix [#2224](https://github.com/openshift/oc/pull/2224)
* [OTA-1856](https://issues.redhat.com/browse/OTA-1856): pkg/cli/admin/release/mirror: Deprecate in favor of oc-mirror [#2195](https://github.com/openshift/oc/pull/2195)
* [OTA-1864](https://issues.redhat.com/browse/OTA-1864): Extend update recommend precheck alerts [#2210](https://github.com/openshift/oc/pull/2210)
* [COS-4005](https://issues.redhat.com/browse/COS-4005): Allow periods in display name labels for version validation [#2215](https://github.com/openshift/oc/pull/2215)
* NO-ISSUE: images/tools/Dockerfile: Install iotop, if that fails fall back to iotop-c [#2216](https://github.com/openshift/oc/pull/2216)
* [OCPBUGS-76318](https://issues.redhat.com/browse/OCPBUGS-76318): pkg/helpers: Print the right error object [#2197](https://github.com/openshift/oc/pull/2197)
* [OKD-322](https://issues.redhat.com/browse/OKD-322): Update OC-tools Dockerfile to work on CentOS/RHEL 10 [#2205](https://github.com/openshift/oc/pull/2205)
* [CNTRLPLANE-2656](https://issues.redhat.com/browse/CNTRLPLANE-2656): fixing oc cli failures [#2199](https://github.com/openshift/oc/pull/2199)
* [OCPBUGS-76319](https://issues.redhat.com/browse/OCPBUGS-76319): Makefile: Strip debugging symbols by default [#2196](https://github.com/openshift/oc/pull/2196)
* [OCPBUGS-76958](https://issues.redhat.com/browse/OCPBUGS-76958): inspect: Allow resource group to be specified in the namespace resources list [#2204](https://github.com/openshift/oc/pull/2204)
* [OCPBUGS-76394](https://issues.redhat.com/browse/OCPBUGS-76394): Ignore group ownership on rpm -V [#2206](https://github.com/openshift/oc/pull/2206)
* [OCPBUGS-76394](https://issues.redhat.com/browse/OCPBUGS-76394): Install subscription-manager in cli image [#2200](https://github.com/openshift/oc/pull/2200)
* Revert "CNTRLPLANE-2656: Fixing oc client cases for microshift and metal ipv6 profiles" [#2198](https://github.com/openshift/oc/pull/2198)
* [CNTRLPLANE-2656](https://issues.redhat.com/browse/CNTRLPLANE-2656): Fixing oc client cases for microshift and metal ipv6 profiles [#2192](https://github.com/openshift/oc/pull/2192)
* [OCPBUGS-74543](https://issues.redhat.com/browse/OCPBUGS-74543): expose: Fix labels not being added to route [#2189](https://github.com/openshift/oc/pull/2189)
* Revert "CNTRLPLANE-2656:Migrating oc cli tests to ote" [#2191](https://github.com/openshift/oc/pull/2191)
* [CNTRLPLANE-2656](https://issues.redhat.com/browse/CNTRLPLANE-2656): Migrating oc cli tests to ote [#2181](https://github.com/openshift/oc/pull/2181)
* [OSDOCS-18071](https://issues.redhat.com/browse/OSDOCS-18071): Updating CLI docs templates to include a required abstract/short description [#2190](https://github.com/openshift/oc/pull/2190)
* [OCPBUGS-73893](https://issues.redhat.com/browse/OCPBUGS-73893): Fix unit test failure by updating ruby version to 3.3 [#2184](https://github.com/openshift/oc/pull/2184)
* NO-ISSUE: add SecurityContext to node image creation and monitor containers [#2139](https://github.com/openshift/oc/pull/2139)
* [CNTRLPLANE-2167](https://issues.redhat.com/browse/CNTRLPLANE-2167): Adding oc ote sanity test [#2180](https://github.com/openshift/oc/pull/2180)
* [CNTRLPLANE-2167](https://issues.redhat.com/browse/CNTRLPLANE-2167): Integrate OpenShift Test Extension (OTE) into oc [#2177](https://github.com/openshift/oc/pull/2177)
* [CNTRLPLANE-2167](https://issues.redhat.com/browse/CNTRLPLANE-2167): Integrate OpenShift Test Extension (OTE) into oc [#2176](https://github.com/openshift/oc/pull/2176)
* [OCPBUGS-64619](https://issues.redhat.com/browse/OCPBUGS-64619): oc login: Respect insecure flag from kubeconfig [#2134](https://github.com/openshift/oc/pull/2134)
* NO-JIRA: Bump library-go to update selinux and x/crypto [#2169](https://github.com/openshift/oc/pull/2169)
* [OCPBUGS-70063](https://issues.redhat.com/browse/OCPBUGS-70063): Updating ose-cli-artifacts-container image to be consistent with ART for 4.22 [#2168](https://github.com/openshift/oc/pull/2168)
* [OCPBUGS-70061](https://issues.redhat.com/browse/OCPBUGS-70061): Updating openshift-enterprise-deployer-container image to be consistent with ART for 4.22 [#2167](https://github.com/openshift/oc/pull/2167)
* [OCPBUGS-69894](https://issues.redhat.com/browse/OCPBUGS-69894): Updating ose-tools-container image to be consistent with ART for 4.22 [#2166](https://github.com/openshift/oc/pull/2166)
* [OCPBUGS-69835](https://issues.redhat.com/browse/OCPBUGS-69835): Updating openshift-enterprise-cli-container image to be consistent with ART for 4.22 [#2164](https://github.com/openshift/oc/pull/2164)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/oc/compare/f192695743103be9ceb109526a89f4fd468e9be2...66dee73f66c4f048c333c6a77d76871872027896)
### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/c50292310b1070ff8bfe842ca7424bf5ae2c9346)
* [CCO-738](https://issues.redhat.com/browse/CCO-738), [CCO-739](https://issues.redhat.com/browse/CCO-739), [CCO-740](https://issues.redhat.com/browse/CCO-740): Overhaul status logic to correctly match spec [#1008](https://github.com/openshift/cloud-credential-operator/pull/1008)
* [CCO-787](https://issues.redhat.com/browse/CCO-787): use apiserver tls config [#965](https://github.com/openshift/cloud-credential-operator/pull/965)
* [CCO-824](https://issues.redhat.com/browse/CCO-824): feat(gcp): add key-storage-method flag for workload identity providers [#1004](https://github.com/openshift/cloud-credential-operator/pull/1004)
* [CCO-779](https://issues.redhat.com/browse/CCO-779): e2e for removing kube-rbac-proxy container (CCO-779) [#991](https://github.com/openshift/cloud-credential-operator/pull/991)
* [OCPBUGS-81584](https://issues.redhat.com/browse/OCPBUGS-81584): Skip CCO health check test for PowerVS platform [#1006](https://github.com/openshift/cloud-credential-operator/pull/1006)
* [OCPBUGS-81328](https://issues.redhat.com/browse/OCPBUGS-81328): tests-ext: Fix MicroShift gating in CCO tests [#1005](https://github.com/openshift/cloud-credential-operator/pull/1005)
* Revert #978: CCO-738, CCO-739: Set operator condition to Progressing when pod identity webhook pod are updating [#1007](https://github.com/openshift/cloud-credential-operator/pull/1007)
* [CORS-4361](https://issues.redhat.com/browse/CORS-4361): aws: add aws-eusc partition support for OIDC S3 buckets [#995](https://github.com/openshift/cloud-credential-operator/pull/995)
* [CCO-738](https://issues.redhat.com/browse/CCO-738), [CCO-739](https://issues.redhat.com/browse/CCO-739): Set operator condition to Progressing when pod identity webhook pod are updating [#978](https://github.com/openshift/cloud-credential-operator/pull/978)
* [OCPBUGS-79360](https://issues.redhat.com/browse/OCPBUGS-79360): google.golang.org/grpc v1.79.3 [#992](https://github.com/openshift/cloud-credential-operator/pull/992)
* [CCO-788](https://issues.redhat.com/browse/CCO-788): Remove kube-rbac-proxy container from metrics [#983](https://github.com/openshift/cloud-credential-operator/pull/983)
* [OCPBUGS-74627](https://issues.redhat.com/browse/OCPBUGS-74627): Fix infrastructure resource name filtering in watch predicate [#985](https://github.com/openshift/cloud-credential-operator/pull/985)
* [CCO-688](https://issues.redhat.com/browse/CCO-688): test-ext: enable test-extension cases for CI [#984](https://github.com/openshift/cloud-credential-operator/pull/984)
* [CCO-788](https://issues.redhat.com/browse/CCO-788): test-ext: Update extend tests to adapt to CCO-788 [#981](https://github.com/openshift/cloud-credential-operator/pull/981)
* [MON-4475](https://issues.redhat.com/browse/MON-4475): chore: add permissions on endpointslice to Prometheus Role and use serviceDiscoveryRole: EndpointSlice in ServiceMonitors [#964](https://github.com/openshift/cloud-credential-operator/pull/964)
* [TRT-2568](https://issues.redhat.com/browse/TRT-2568): Revert "CCO-788: Remove kube-rbac-proxy container from metrics" [#982](https://github.com/openshift/cloud-credential-operator/pull/982)
* [CCO-788](https://issues.redhat.com/browse/CCO-788): Remove kube-rbac-proxy container from metrics [#976](https://github.com/openshift/cloud-credential-operator/pull/976)
* [OCPBUGS-77550](https://issues.redhat.com/browse/OCPBUGS-77550): cloud-credential-tests-ext to support multiple architectures [#979](https://github.com/openshift/cloud-credential-operator/pull/979)
* [CCO-726](https://issues.redhat.com/browse/CCO-726): Update go modules [#974](https://github.com/openshift/cloud-credential-operator/pull/974)
* [CCO-767](https://issues.redhat.com/browse/CCO-767): test-ext: Migrate openshift-tests-private E2E cases [#961](https://github.com/openshift/cloud-credential-operator/pull/961)
* [CCO-813](https://issues.redhat.com/browse/CCO-813): Update kubernetes v1.35 and golang v1.25 [#967](https://github.com/openshift/cloud-credential-operator/pull/967)
* [OCPBUGS-74384](https://issues.redhat.com/browse/OCPBUGS-74384): Resolve nil pointer exception in hasResourceTags [#966](https://github.com/openshift/cloud-credential-operator/pull/966)
* [CCO-805](https://issues.redhat.com/browse/CCO-805): Ability to use featureGates [#962](https://github.com/openshift/cloud-credential-operator/pull/962)
* [OCPBUGS-71221](https://issues.redhat.com/browse/OCPBUGS-71221): test-ext: remove kubernetes module dependency [#957](https://github.com/openshift/cloud-credential-operator/pull/957)
* [OCPBUGS-70033](https://issues.redhat.com/browse/OCPBUGS-70033): Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.22 [#956](https://github.com/openshift/cloud-credential-operator/pull/956)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/8f1a631d825ff36e588d592b49d9eec3c33d01b3...c50292310b1070ff8bfe842ca7424bf5ae2c9346)
### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/2d69ad953cfaa419e9b6221da9edb152ded91e0b)
* [OCPBUGS-74496](https://issues.redhat.com/browse/OCPBUGS-74496): Add UserAgent to Azure SDK client telemetry options [#208](https://github.com/openshift/cloud-network-config-controller/pull/208)
* [GCP-429](https://issues.redhat.com/browse/GCP-429): feat: Add GCP Workload Identity Federation (WIF) credential support [#206](https://github.com/openshift/cloud-network-config-controller/pull/206)
* [CORENET-6562](https://issues.redhat.com/browse/CORENET-6562): CNCC rebase k8s to 1.35.0 [#202](https://github.com/openshift/cloud-network-config-controller/pull/202)
* [OCPBUGS-77711](https://issues.redhat.com/browse/OCPBUGS-77711): Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.22 [#207](https://github.com/openshift/cloud-network-config-controller/pull/207)
* [CORENET-6500](https://issues.redhat.com/browse/CORENET-6500): fix lint job and linting failures [#201](https://github.com/openshift/cloud-network-config-controller/pull/201)
* [OCPBUGS-69998](https://issues.redhat.com/browse/OCPBUGS-69998): Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.22 [#196](https://github.com/openshift/cloud-network-config-controller/pull/196)
* [OCPBUGS-45056](https://issues.redhat.com/browse/OCPBUGS-45056), [OCPBUGS-57447](https://issues.redhat.com/browse/OCPBUGS-57447): Refrain from adding Egress IP to public LB backend pool [#180](https://github.com/openshift/cloud-network-config-controller/pull/180)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/dcdf24f542ab4d65c85a4d63d553cc49085567ea...2d69ad953cfaa419e9b6221da9edb152ded91e0b)
### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/51ea6cdc877f997cc9b376aa26820e8e83d8c1c7)
* [CNTRLPLANE-2625](https://issues.redhat.com/browse/CNTRLPLANE-2625): Add Auth network policy e2e cases [#831](https://github.com/openshift/cluster-authentication-operator/pull/831)
* [OCPBUGS-78403](https://issues.redhat.com/browse/OCPBUGS-78403): Do not return error when an IdP returns 500 during a grant check [#856](https://github.com/openshift/cluster-authentication-operator/pull/856)
* Revert "CNTRLPLANE-2589: Migrate test/e2e-encryption to Ginkgo v2 framework" [#857](https://github.com/openshift/cluster-authentication-operator/pull/857)
* [CNTRLPLANE-2589](https://issues.redhat.com/browse/CNTRLPLANE-2589): Migrate test/e2e-encryption to Ginkgo v2 framework [#839](https://github.com/openshift/cluster-authentication-operator/pull/839)
* NO-JIRA: OWNERS: add everettraven as reviewer/approver add ibihim as approver [#842](https://github.com/openshift/cluster-authentication-operator/pull/842)
* [CNTRLPLANE-2610](https://issues.redhat.com/browse/CNTRLPLANE-2610): Create network policies for AUTH components [#825](https://github.com/openshift/cluster-authentication-operator/pull/825)
* [CNTRLPLANE-2990](https://issues.redhat.com/browse/CNTRLPLANE-2990): Update CAO to no longer write to the `Authentication.spec.webhookTokenAuthenticator` field [#854](https://github.com/openshift/cluster-authentication-operator/pull/854)
* [CNTRLPLANE-2996](https://issues.redhat.com/browse/CNTRLPLANE-2996): dependencies: k8s 1.35 rebase [#853](https://github.com/openshift/cluster-authentication-operator/pull/853)
* [CNTRLPLANE-2552](https://issues.redhat.com/browse/CNTRLPLANE-2552): Add support for CEL expression claim mappings for username and groups [#850](https://github.com/openshift/cluster-authentication-operator/pull/850)
* [MON-4473](https://issues.redhat.com/browse/MON-4473): Migrate Prometheus targets discovering from Endpoints to EndpointsSlices [#823](https://github.com/openshift/cluster-authentication-operator/pull/823)
* [OCPBUGS-74039](https://issues.redhat.com/browse/OCPBUGS-74039): Updating ose-cluster-authentication-operator-container image to be consistent with ART for 4.22 [#851](https://github.com/openshift/cluster-authentication-operator/pull/851)
* [CNTRLPLANE-312](https://issues.redhat.com/browse/CNTRLPLANE-312): Add generation logic for new API fields in the Authentication CR [#810](https://github.com/openshift/cluster-authentication-operator/pull/810)
* [CNTRLPLANE-2589](https://issues.redhat.com/browse/CNTRLPLANE-2589): update cases to execute as serial/parallel [#833](https://github.com/openshift/cluster-authentication-operator/pull/833)
* [CNTRLPLANE-2241](https://issues.redhat.com/browse/CNTRLPLANE-2241): Update library-go to get KMS encryption [#837](https://github.com/openshift/cluster-authentication-operator/pull/837)
* [CNTRLPLANE-2247](https://issues.redhat.com/browse/CNTRLPLANE-2247): Add Test encryption provider migration [#838](https://github.com/openshift/cluster-authentication-operator/pull/838)
* [CNTRLPLANE-2247](https://issues.redhat.com/browse/CNTRLPLANE-2247): Adding KMS TestKMSEncryptionOnOff test for AUTH [#834](https://github.com/openshift/cluster-authentication-operator/pull/834)
* [CNTRLPLANE-2241](https://issues.redhat.com/browse/CNTRLPLANE-2241): Conditionally add the KMS plugin volume mount to the oauth-apiserver container [#827](https://github.com/openshift/cluster-authentication-operator/pull/827)
* [CNTRLPLANE-2589](https://issues.redhat.com/browse/CNTRLPLANE-2589): Migrate serial e2e tests to Ginkgo framework [#828](https://github.com/openshift/cluster-authentication-operator/pull/828)
* [CNTRLPLANE-2247](https://issues.redhat.com/browse/CNTRLPLANE-2247): Add KMS encryption test target [#829](https://github.com/openshift/cluster-authentication-operator/pull/829)
* [CNTRLPLANE-2589](https://issues.redhat.com/browse/CNTRLPLANE-2589): Migrate RouterCerts e2e test to Ginkgo framework [#826](https://github.com/openshift/cluster-authentication-operator/pull/826)
* [CNTRLPLANE-2589](https://issues.redhat.com/browse/CNTRLPLANE-2589): OTE infrastructure [#822](https://github.com/openshift/cluster-authentication-operator/pull/822)
* [API-1835](https://issues.redhat.com/browse/API-1835): test/oauth-server-payloadConfigController: adds a test to show which input resources are required to run the operator and the payloadConfigController [#786](https://github.com/openshift/cluster-authentication-operator/pull/786)
* [OCPBUGS-70005](https://issues.redhat.com/browse/OCPBUGS-70005): Updating ose-cluster-authentication-operator-container image to be consistent with ART for 4.22 [#819](https://github.com/openshift/cluster-authentication-operator/pull/819)
* [API-1835](https://issues.redhat.com/browse/API-1835): adds an integration test for the oauth-server deployment controller [#784](https://github.com/openshift/cluster-authentication-operator/pull/784)
* [CNTRLPLANE-2196](https://issues.redhat.com/browse/CNTRLPLANE-2196): set up openshift-tests-extension for cluster-authentication-operator [#816](https://github.com/openshift/cluster-authentication-operator/pull/816)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/c7b85961405c2879d910e2ac228e3c375553b646...51ea6cdc877f997cc9b376aa26820e8e83d8c1c7)
### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/05bcec5a83ea3d9afc3a342a1b8878e30c19ef94)
* NO-JIRA: ignore tool and hack files in .snyk scans [#416](https://github.com/openshift/kubernetes-autoscaler/pull/416)
* [OCPBUGS-78152](https://issues.redhat.com/browse/OCPBUGS-78152): allow clusterapi provider to skip paused resources [#409](https://github.com/openshift/kubernetes-autoscaler/pull/409)
* [OCPBUGS-77631](https://issues.redhat.com/browse/OCPBUGS-77631): Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.22 [#408](https://github.com/openshift/kubernetes-autoscaler/pull/408)
* [AUTOSCALE-482](https://issues.redhat.com/browse/AUTOSCALE-482): VPA E2Es: switch from docker.io ubuntu to k8s-hosted image [#406](https://github.com/openshift/kubernetes-autoscaler/pull/406)
* [OCPBUGS-66405](https://issues.redhat.com/browse/OCPBUGS-66405): Pick upstream commits to Fix VPA recommender concurrent access panic [#403](https://github.com/openshift/kubernetes-autoscaler/pull/403)
* [AUTOSCALE-482](https://issues.redhat.com/browse/AUTOSCALE-482), [AUTOSCALE-483](https://issues.redhat.com/browse/AUTOSCALE-483): 1.35.0 Upstream rebase [#401](https://github.com/openshift/kubernetes-autoscaler/pull/401)
* [OCPBUGS-74005](https://issues.redhat.com/browse/OCPBUGS-74005): Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.22 [#399](https://github.com/openshift/kubernetes-autoscaler/pull/399)
* [OCPBUGS-70023](https://issues.redhat.com/browse/OCPBUGS-70023): Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.22 [#397](https://github.com/openshift/kubernetes-autoscaler/pull/397)
* [OCPBUGS-69928](https://issues.redhat.com/browse/OCPBUGS-69928): Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.22 [#396](https://github.com/openshift/kubernetes-autoscaler/pull/396)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/73b87353dd524cc63932c58bab555a94d67bff1b...05bcec5a83ea3d9afc3a342a1b8878e30c19ef94)
### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/260ea1b5967f47768a0727e8c84d451dc9de5ced)
* [OCPBUGS-65578](https://issues.redhat.com/browse/OCPBUGS-65578): report Progressing=True on version upgrade [#366](https://github.com/openshift/cluster-autoscaler-operator/pull/366)
* [AUTOSCALE-560](https://issues.redhat.com/browse/AUTOSCALE-560): Add support for using centralized cluster TLS profile for webhook service [#367](https://github.com/openshift/cluster-autoscaler-operator/pull/367)
* [OCPBUGS-78797](https://issues.redhat.com/browse/OCPBUGS-78797): update rbac to include DRA-related resources [#365](https://github.com/openshift/cluster-autoscaler-operator/pull/365)
* [MON-4498](https://issues.redhat.com/browse/MON-4498): Migrate Prometheus targets discovering from Endpoints to EndpointSlices [#363](https://github.com/openshift/cluster-autoscaler-operator/pull/363)
* [OCPBUGS-65471](https://issues.redhat.com/browse/OCPBUGS-65471): Add rbac related objects to clusteroperator [#364](https://github.com/openshift/cluster-autoscaler-operator/pull/364)
* [AUTOSCALE-172](https://issues.redhat.com/browse/AUTOSCALE-172): add kube api content type flag to autoscaler [#362](https://github.com/openshift/cluster-autoscaler-operator/pull/362)
* [AUTOSCALE-483](https://issues.redhat.com/browse/AUTOSCALE-483): Prepare for 4.22 [#361](https://github.com/openshift/cluster-autoscaler-operator/pull/361)
* [OCPBUGS-69828](https://issues.redhat.com/browse/OCPBUGS-69828): Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.22 [#358](https://github.com/openshift/cluster-autoscaler-operator/pull/358)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/dec12ba632a4810b4ff43a9172f462a1dd291e44...260ea1b5967f47768a0727e8c84d451dc9de5ced)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/e4f3cd50b6a33337b723beb682c4fdcf5cdd820c)
* [OCPBUGS-78151](https://issues.redhat.com/browse/OCPBUGS-78151): Add provisioningNetworkGateway field to CBO [#575](https://github.com/openshift/cluster-baremetal-operator/pull/575)
* [METAL-1715](https://issues.redhat.com/browse/METAL-1715): Enforce 1-year validity and 30-day auto-rotation for Ironic TLS certs [#570](https://github.com/openshift/cluster-baremetal-operator/pull/570)
* [METAL-1780](https://issues.redhat.com/browse/METAL-1780): Gate TLS profile enforcement on APIServer tlsAdherence field [#582](https://github.com/openshift/cluster-baremetal-operator/pull/582)
* [METAL-1720](https://issues.redhat.com/browse/METAL-1720): Add IRONIC_ROOTFS_URL env var for multi-arch rootfs override [#583](https://github.com/openshift/cluster-baremetal-operator/pull/583)
* [METAL-1716](https://issues.redhat.com/browse/METAL-1716): Handle IPv6/dual-stack addresses in certificate SANs [#573](https://github.com/openshift/cluster-baremetal-operator/pull/573)
* NO-ISSUE: Update envtest version [#580](https://github.com/openshift/cluster-baremetal-operator/pull/580)
* [METAL-1720](https://issues.redhat.com/browse/METAL-1720): Add DEPLOY_KERNEL env var for image-customization-controller [#581](https://github.com/openshift/cluster-baremetal-operator/pull/581)
* [METAL-1734](https://issues.redhat.com/browse/METAL-1734): Add support for centralized tls [#572](https://github.com/openshift/cluster-baremetal-operator/pull/572)
* [METAL-1714](https://issues.redhat.com/browse/METAL-1714): Populate complete SANs in Ironic TLS certificate [#569](https://github.com/openshift/cluster-baremetal-operator/pull/569)
* [OCPBUGS-69399](https://issues.redhat.com/browse/OCPBUGS-69399): Allow ProvisioningCIDR for unmanaged network [#553](https://github.com/openshift/cluster-baremetal-operator/pull/553)
* Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 4.22 [#568](https://github.com/openshift/cluster-baremetal-operator/pull/568)
* [OCPBUGS-65472](https://issues.redhat.com/browse/OCPBUGS-65472): Add ClusterRole to baremetal ClusterOperator relatedObjects [#544](https://github.com/openshift/cluster-baremetal-operator/pull/544)
* [OCPBUGS-73970](https://issues.redhat.com/browse/OCPBUGS-73970): Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 4.22 [#545](https://github.com/openshift/cluster-baremetal-operator/pull/545)
* [OCPBUGS-77027](https://issues.redhat.com/browse/OCPBUGS-77027): Update kubebuilder tools to more latest version [#556](https://github.com/openshift/cluster-baremetal-operator/pull/556)
* [OCPBUGS-72548](https://issues.redhat.com/browse/OCPBUGS-72548): Fix ironic-proxy service routing for port 6385 [#546](https://github.com/openshift/cluster-baremetal-operator/pull/546)
* [OCPBUGS-71233](https://issues.redhat.com/browse/OCPBUGS-71233): Fix libguestfs /tmp access in machine-os-downloader init container [#549](https://github.com/openshift/cluster-baremetal-operator/pull/549)
* [OCPBUGS-70157](https://issues.redhat.com/browse/OCPBUGS-70157): Add sharedVolumeMount to machine-os-downloader init container [#540](https://github.com/openshift/cluster-baremetal-operator/pull/540)
* [OCPBUGS-67216](https://issues.redhat.com/browse/OCPBUGS-67216): Remove the writable ironic CA cert volume mount at /certs/ca/ironic path, ironic will use the writable /conf mount if needed [#535](https://github.com/openshift/cluster-baremetal-operator/pull/535)
* NO-ISSUE: Add AGENTS.md [#538](https://github.com/openshift/cluster-baremetal-operator/pull/538)
* [OCPBUGS-69769](https://issues.redhat.com/browse/OCPBUGS-69769): Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 4.22 [#537](https://github.com/openshift/cluster-baremetal-operator/pull/537)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/46c1f95085beb893d3fd164e7c4d7a6730820520...e4f3cd50b6a33337b723beb682c4fdcf5cdd820c)
### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/e6be0fdfbf43883e2301dbf2d0eb3ab4a4f93383)
* [OCPBUGS-69694](https://issues.redhat.com/browse/OCPBUGS-69694): Updating ose-cluster-bootstrap-container image to be consistent with ART for 4.22 [#124](https://github.com/openshift/cluster-bootstrap/pull/124)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/dc0d4a5cdaf8a7477cab584208dc99352f46efe2...e6be0fdfbf43883e2301dbf2d0eb3ab4a4f93383)
### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/c11cf5d40d83b88479be4e8dd121801a71b3f0e0)
* NO-JIRA: IPAM CRDs: Use negated feature-gate: -ClusterAPIMachineManagement instead of feature-set: Default [#273](https://github.com/openshift/cluster-api/pull/273)
* [OCPCLOUD-3291](https://issues.redhat.com/browse/OCPCLOUD-3291): Merge https://github.com/kubernetes-sigs/cluster-api:v1.12.4 (8c01d2f5) into master [#255](https://github.com/openshift/cluster-api/pull/255)
* [OCPCLOUD-3320](https://issues.redhat.com/browse/OCPCLOUD-3320): Fix continuous reconciliation of cluster-api manifests [#269](https://github.com/openshift/cluster-api/pull/269)
* [OCPBUGS-73976](https://issues.redhat.com/browse/OCPBUGS-73976): Updating ose-cluster-api-container image to be consistent with ART for 4.22 [#262](https://github.com/openshift/cluster-api/pull/262)
* [OCPCLOUD-3320](https://issues.redhat.com/browse/OCPCLOUD-3320): Use new manifests-gen [#259](https://github.com/openshift/cluster-api/pull/259)
* [OCPBUGS-74426](https://issues.redhat.com/browse/OCPBUGS-74426): CAPI IPAM CRDs override storage version to v1beta1 [#263](https://github.com/openshift/cluster-api/pull/263)
* NO-JIRA: UPSTREAM: <carry>: Add manifests verify target [#261](https://github.com/openshift/cluster-api/pull/261)
* [OCPBUGS-69810](https://issues.redhat.com/browse/OCPBUGS-69810): Updating ose-cluster-api-container image to be consistent with ART for 4.22 [#258](https://github.com/openshift/cluster-api/pull/258)
* [OCPBUGS-69434](https://issues.redhat.com/browse/OCPBUGS-69434): openshift: CAPI IPAM TechPreviewNoUpgrade: set webhooks failurepolicy: Ignore [#256](https://github.com/openshift/cluster-api/pull/256)
* [Full changelog](https://github.com/openshift/cluster-api/compare/a957484acb353220da0d3062867168d24494a2b6...c11cf5d40d83b88479be4e8dd121801a71b3f0e0)
### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/807bdc323f2f042961bcd783bd999bb3d03bda4b)
* NO-JIRA: Optimize envtest CRD loading by specifying necessary files explicitly [#520](https://github.com/openshift/cluster-capi-operator/pull/520)
* [OCPCLOUD-3319](https://issues.redhat.com/browse/OCPCLOUD-3319): Remove capiinstaller controller [#507](https://github.com/openshift/cluster-capi-operator/pull/507)
* [OCPCLOUD-3419](https://issues.redhat.com/browse/OCPCLOUD-3419): Add adopt-existing annotation [#514](https://github.com/openshift/cluster-capi-operator/pull/514)
* NO-JIRA: Fix flake in object pruning envtests [#516](https://github.com/openshift/cluster-capi-operator/pull/516)
* [OCPBUGS-80922](https://issues.redhat.com/browse/OCPBUGS-80922): Add CVO proxy injection annotation to capi-operator Deployment [#518](https://github.com/openshift/cluster-capi-operator/pull/518)
* [OCPBUGS-81683](https://issues.redhat.com/browse/OCPBUGS-81683): fix: remove Microsoft.Resourcehealth/healthevent permission [#515](https://github.com/openshift/cluster-capi-operator/pull/515)
* NO-JIRA: Add ClusterAPI singleton to related objects [#508](https://github.com/openshift/cluster-capi-operator/pull/508)
* [OCPCLOUD-3365](https://issues.redhat.com/browse/OCPCLOUD-3365), [OCPCLOUD-3384](https://issues.redhat.com/browse/OCPCLOUD-3384): Implement admission action Warn and ensure validations not active when not configured [#492](https://github.com/openshift/cluster-capi-operator/pull/492)
* [OCPCLOUD-3321](https://issues.redhat.com/browse/OCPCLOUD-3321), [OSASINFRA-3980](https://issues.redhat.com/browse/OSASINFRA-3980): Add openstack-resource-controller image to images.json [#506](https://github.com/openshift/cluster-capi-operator/pull/506)
* [OCPCLOUD-3319](https://issues.redhat.com/browse/OCPCLOUD-3319): Create installer controller [#494](https://github.com/openshift/cluster-capi-operator/pull/494)
* NO-JIRA: Fix 2 failures in ci jobs [#485](https://github.com/openshift/cluster-capi-operator/pull/485)
* [SPLAT-2167](https://issues.redhat.com/browse/SPLAT-2167): Added dedicated host support for AWS [#374](https://github.com/openshift/cluster-capi-operator/pull/374)
* [OCPCLOUD-3319](https://issues.redhat.com/browse/OCPCLOUD-3319): Convert ReconcileResult to use a builder pattern [#501](https://github.com/openshift/cluster-capi-operator/pull/501)
* [OCPCLOUD-3319](https://issues.redhat.com/browse/OCPCLOUD-3319): Simplify RelatedObjects on the cluster-api ClusterOperator [#497](https://github.com/openshift/cluster-capi-operator/pull/497)
* NO-JIRA: Common provider manifest fixtures [#498](https://github.com/openshift/cluster-capi-operator/pull/498)
* NO-JIRA: Drop unused replace manifests-gen [#504](https://github.com/openshift/cluster-capi-operator/pull/504)
* [OCPBUGS-77188](https://issues.redhat.com/browse/OCPBUGS-77188): Fix CRD Requirement deployment on SNO [#502](https://github.com/openshift/cluster-capi-operator/pull/502)
* NO-JIRA: Move ProviderMetadata into manifests-gen [#503](https://github.com/openshift/cluster-capi-operator/pull/503)
* NO-JIRA: Fix malformed VAP [#499](https://github.com/openshift/cluster-capi-operator/pull/499)
* NO-JIRA: Instruct agents more forcefully to run tests with make unit [#496](https://github.com/openshift/cluster-capi-operator/pull/496)
* [OCPCLOUD-3319](https://issues.redhat.com/browse/OCPCLOUD-3319): Bump controller-runtime to v0.23 [#495](https://github.com/openshift/cluster-capi-operator/pull/495)
* [OCPCLOUD-3290](https://issues.redhat.com/browse/OCPCLOUD-3290): Dependency bumps for release 4.22 [#491](https://github.com/openshift/cluster-capi-operator/pull/491)
* [OCPCLOUD-3184](https://issues.redhat.com/browse/OCPCLOUD-3184): Implement object schema pruning for compatibility requirements [#464](https://github.com/openshift/cluster-capi-operator/pull/464)
* [OCPCLOUD-3350](https://issues.redhat.com/browse/OCPCLOUD-3350): Revision controller [#469](https://github.com/openshift/cluster-capi-operator/pull/469)
* NO-JIRA: Add CodeRabbit inheritance for org-wide rules [#489](https://github.com/openshift/cluster-capi-operator/pull/489)
* [OCPCLOUD-3005](https://issues.redhat.com/browse/OCPCLOUD-3005), [OCPCLOUD-3186](https://issues.redhat.com/browse/OCPCLOUD-3186), [OCPCLOUD-3367](https://issues.redhat.com/browse/OCPCLOUD-3367): Implement validation webhook for custom resource admission [#461](https://github.com/openshift/cluster-capi-operator/pull/461)
* NO-JIRA: Remove duplicated vnet delete permission [#252](https://github.com/openshift/cluster-capi-operator/pull/252)
* NO-JIRA: improve unit test performance and CI flakiness [#487](https://github.com/openshift/cluster-capi-operator/pull/487)
* [OCPCLOUD-3369](https://issues.redhat.com/browse/OCPCLOUD-3369): Implement RequiredVersions functionality for CompatibilitySchema [#471](https://github.com/openshift/cluster-capi-operator/pull/471)
* [OSASINFRA-3980](https://issues.redhat.com/browse/OSASINFRA-3980): Re-add openstack credentials request [#478](https://github.com/openshift/cluster-capi-operator/pull/478)
* NO-JIRA: e2e: improve failure diagnostics [#484](https://github.com/openshift/cluster-capi-operator/pull/484)
* [OCPCLOUD-3386](https://issues.redhat.com/browse/OCPCLOUD-3386): Implement feature-gate support in capi-operator endpoint [#475](https://github.com/openshift/cluster-capi-operator/pull/475)
* [OCPCLOUD-3364](https://issues.redhat.com/browse/OCPCLOUD-3364): Implement ExcludedPaths functionality for CRD validation webhook [#467](https://github.com/openshift/cluster-capi-operator/pull/467)
* NO-JIRA: Add missing CVO annotations to RBAC [#480](https://github.com/openshift/cluster-capi-operator/pull/480)
* NO-JIRA: Set admission failure policy to Ignore [#479](https://github.com/openshift/cluster-capi-operator/pull/479)
* [OCPCLOUD-3329](https://issues.redhat.com/browse/OCPCLOUD-3329): Manifests gen all the VAPs [#470](https://github.com/openshift/cluster-capi-operator/pull/470)
* NO-JIRA: Update HaveCondition to version from revision controller branch [#481](https://github.com/openshift/cluster-capi-operator/pull/481)
* [OCPBUGS-77363](https://issues.redhat.com/browse/OCPBUGS-77363): manifests-gen: fix nil deref for non-webhook CRDs [#482](https://github.com/openshift/cluster-capi-operator/pull/482)
* NO-JIRA: e2es improvements [#473](https://github.com/openshift/cluster-capi-operator/pull/473)
* NO-JIRA: coderabbit: Tell it not to warn about old Go [#474](https://github.com/openshift/cluster-capi-operator/pull/474)
* NO-JIRA: Add timeout to all eventually entries with contexts [#472](https://github.com/openshift/cluster-capi-operator/pull/472)
* [OCPCLOUD-3005](https://issues.redhat.com/browse/OCPCLOUD-3005): Add CRD admission time validation implementation [#459](https://github.com/openshift/cluster-capi-operator/pull/459)
* [OCPCLOUD-3262](https://issues.redhat.com/browse/OCPCLOUD-3262): MAPI & CAPI MachineSet VAP [#440](https://github.com/openshift/cluster-capi-operator/pull/440)
* [OCPCLOUD-3005](https://issues.redhat.com/browse/OCPCLOUD-3005): Add MWC/VWC to compatibility requirements RBAC [#466](https://github.com/openshift/cluster-capi-operator/pull/466)
* NO-JIRA: Adds test-standards skill for claude [#468](https://github.com/openshift/cluster-capi-operator/pull/468)
* [OCPCLOUD-3005](https://issues.redhat.com/browse/OCPCLOUD-3005): Initial implementation of CompatibilityRequirement reconciler and webhook [#458](https://github.com/openshift/cluster-capi-operator/pull/458)
* [OCPBUGS-77036](https://issues.redhat.com/browse/OCPBUGS-77036), [OCPCLOUD-3342](https://issues.redhat.com/browse/OCPCLOUD-3342): provider images disconnected support [#463](https://github.com/openshift/cluster-capi-operator/pull/463)
* [OCPCLOUD-3005](https://issues.redhat.com/browse/OCPCLOUD-3005): Bootstrap compatibility requirements deployment [#457](https://github.com/openshift/cluster-capi-operator/pull/457)
* [OCPCLOUD-3327](https://issues.redhat.com/browse/OCPCLOUD-3327): Rewrite manifests-gen to support upgrade safety [#434](https://github.com/openshift/cluster-capi-operator/pull/434)
* NO-JIRA: Fix NetworkPolicy for openshift-capi-operator namespace [#453](https://github.com/openshift/cluster-capi-operator/pull/453)
* [OCPCLOUD-3327](https://issues.redhat.com/browse/OCPCLOUD-3327): Fix up related objects [#452](https://github.com/openshift/cluster-capi-operator/pull/452)
* [OCPBUGS-74295](https://issues.redhat.com/browse/OCPBUGS-74295): Move installer controller to independent manager [#447](https://github.com/openshift/cluster-capi-operator/pull/447)
* NO-JIRA: fix: e2e: workaround for flakes caused by OCPBUGS-74571, until it is fixed [#449](https://github.com/openshift/cluster-capi-operator/pull/449)
* [OCPBUGS-61949](https://issues.redhat.com/browse/OCPBUGS-61949): Remove references to cluster-api-operator image [#384](https://github.com/openshift/cluster-capi-operator/pull/384)
* [OCPCLOUD-3315](https://issues.redhat.com/browse/OCPCLOUD-3315): Add AWS CPUOptions to conversion [#438](https://github.com/openshift/cluster-capi-operator/pull/438)
* [OCPCLOUD-3017](https://issues.redhat.com/browse/OCPCLOUD-3017): add SHARD_ARGS [#442](https://github.com/openshift/cluster-capi-operator/pull/442)
* [OCPCLOUD-2566](https://issues.redhat.com/browse/OCPCLOUD-2566): tests with VAP msgs [#386](https://github.com/openshift/cluster-capi-operator/pull/386)
* NO-JIRA: Fix AWS fuzz tests by constraining Volume throughput to int32 range [#441](https://github.com/openshift/cluster-capi-operator/pull/441)
* [OCPCLOUD-3263](https://issues.redhat.com/browse/OCPCLOUD-3263): CAPI MachineSet creation validation [#437](https://github.com/openshift/cluster-capi-operator/pull/437)
* [OCPBUGS-69737](https://issues.redhat.com/browse/OCPBUGS-69737): Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.22 [#436](https://github.com/openshift/cluster-capi-operator/pull/436)
* NO-JIRA: Update openshift/api [#439](https://github.com/openshift/cluster-capi-operator/pull/439)
* [OCPCLOUD-3172](https://issues.redhat.com/browse/OCPCLOUD-3172): machinesetsync: refactor to a generalized differ which can work independent of types [#382](https://github.com/openshift/cluster-capi-operator/pull/382)
* [OCPCLOUD-2640](https://issues.redhat.com/browse/OCPCLOUD-2640): CAPI Machine creation validation [#412](https://github.com/openshift/cluster-capi-operator/pull/412)
* NO-JIRA: Write provider version to openshift/provider-version.mk [#424](https://github.com/openshift/cluster-capi-operator/pull/424)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/c68e5901d0d29ae5dc7b648fc3d4afdcb94ab135...807bdc323f2f042961bcd783bd999bb3d03bda4b)
### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/1eccfe33d83686e74769ea196660b8d09d249b04)
* NO-JIRA: fix: report all degraded controller conditions instead of first only#444 [#444](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/444)
* [OCPCLOUD-3348](https://issues.redhat.com/browse/OCPCLOUD-3348): Honor TLSAdherence [#440](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/440)
* [SPLAT-2672](https://issues.redhat.com/browse/SPLAT-2672): e2e/ote/ccm-aws: moving OTE binary from CCM-AWS [#437](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/437)
* [OCPBUGS-78118](https://issues.redhat.com/browse/OCPBUGS-78118): Add delete permission for Azure load balancers in credentials request [#438](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/438)
* [OCPCLOUD-3287](https://issues.redhat.com/browse/OCPCLOUD-3287): Update to k8s 1.35.1 dependencies [#439](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/439)
* [OCPBUGS-73979](https://issues.redhat.com/browse/OCPBUGS-73979): Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.22 [#432](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/432)
* [CORS-4209](https://issues.redhat.com/browse/CORS-4209): ensure NodeIPFamilies field is kept as-is after transforming [#426](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/426)
* [OCPBUGS-62176](https://issues.redhat.com/browse/OCPBUGS-62176), [OCPCLOUD-3348](https://issues.redhat.com/browse/OCPCLOUD-3348): tls: use centralized TLS profile [#433](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/433)
* [OCPBUGS-16728](https://issues.redhat.com/browse/OCPBUGS-16728): Add admission policy to deny changing an AWS LB type on an existing service [#362](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/362)
* [OCPBUGS-69820](https://issues.redhat.com/browse/OCPBUGS-69820): Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.22 [#430](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/430)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/6148c0cca626bcf0bfebcc6dd0c77a41944cba87...1eccfe33d83686e74769ea196660b8d09d249b04)
### [cluster-config-api](https://github.com/openshift/api/tree/b37d107c490a35659457ed38f9f5b109f85448da)
* [OCPBUGS-68358](https://issues.redhat.com/browse/OCPBUGS-68358): Disable PSA for 4.22 [#2802](https://github.com/openshift/api/pull/2802)
* [MON-4035](https://issues.redhat.com/browse/MON-4035): Add ThanosQuerierConfig to ClusterMonitoring API [#2769](https://github.com/openshift/api/pull/2769)
* [NE-2520](https://issues.redhat.com/browse/NE-2520): Promote GatewayAPIWithoutOLM to GA [#2772](https://github.com/openshift/api/pull/2772)
* [OCPEDGE-2197](https://issues.redhat.com/browse/OCPEDGE-2197): Promote TNF (Dual Replica) to default [#2723](https://github.com/openshift/api/pull/2723)
* [OCPBUGS-81627](https://issues.redhat.com/browse/OCPBUGS-81627): Load ClusterResourceQuota CRD before CVO manifests [#2796](https://github.com/openshift/api/pull/2796)
* [OCPEDGE-2492](https://issues.redhat.com/browse/OCPEDGE-2492): feat: promote pacemaker to v1 in prep for tnf [#2792](https://github.com/openshift/api/pull/2792)
* Update verify-feature-promotion HTML output to sort entries and fix overflow [#2793](https://github.com/openshift/api/pull/2793)
* Include candidate tier in default sippy queries for feature promotion [#2789](https://github.com/openshift/api/pull/2789)
* [CNTRLPLANE-2796](https://issues.redhat.com/browse/CNTRLPLANE-2796): promote the event-ttl feature [#2722](https://github.com/openshift/api/pull/2722)
* [OCPBUGS-74533](https://issues.redhat.com/browse/OCPBUGS-74533): Remove GCPClusterHostedDNSInstall featuregate [#2776](https://github.com/openshift/api/pull/2776)
* NO-ISSUE: Fixes KubeletConfig API doc, adds tests and kubebuilder validation [#2651](https://github.com/openshift/api/pull/2651)
* [CORS-4365](https://issues.redhat.com/browse/CORS-4365): Promote AzureClusterHostedDNSInstall to default [#2774](https://github.com/openshift/api/pull/2774)
* Add ConfidentialCluster feature gate [#2779](https://github.com/openshift/api/pull/2779)
* [SPLAT-2664](https://issues.redhat.com/browse/SPLAT-2664): Added new feature gate VSphereMultiVCenterDay2 [#2783](https://github.com/openshift/api/pull/2783)
* [CNTRLPLANE-3115](https://issues.redhat.com/browse/CNTRLPLANE-3115): Add envtest releases for 4.15 and 4.16 [#2785](https://github.com/openshift/api/pull/2785)
* [CNTRLPLANE-2777](https://issues.redhat.com/browse/CNTRLPLANE-2777): add TypeMeta to GenericControllerConfig [#2780](https://github.com/openshift/api/pull/2780)
* tools: codegen: increase sippy request timeout for feature promotion verification [#2782](https://github.com/openshift/api/pull/2782)
* [MON-4036](https://issues.redhat.com/browse/MON-4036): Add TelemeterClientConfig to ClusterMonitoring API [#2755](https://github.com/openshift/api/pull/2755)
* Allow JobTier=candidate in featuregate-test-analyzer with warning [#2781](https://github.com/openshift/api/pull/2781)
* [SPLAT-2320](https://issues.redhat.com/browse/SPLAT-2320): vsphere vm-host zonal ga [#2731](https://github.com/openshift/api/pull/2731)
* [NE-2512](https://issues.redhat.com/browse/NE-2512): operator/ingress: Add configurationManagement option [#2757](https://github.com/openshift/api/pull/2757)
* [CORS-4337](https://issues.redhat.com/browse/CORS-4337): allow AWS Europe Sovereign Cloud partition [#2708](https://github.com/openshift/api/pull/2708)
* [AGENT-1473](https://issues.redhat.com/browse/AGENT-1473): add InternalReleaseImageDegraded state type for MachineConfigNodeStatus Conditions field [#2777](https://github.com/openshift/api/pull/2777)
* [CNTRLPLANE-3010](https://issues.redhat.com/browse/CNTRLPLANE-3010): Add API-side validation to enforce prefixPolicy is not set when username expression is used [#2771](https://github.com/openshift/api/pull/2771)
* [OCPBUGS-74528](https://issues.redhat.com/browse/OCPBUGS-74528): upkeep: HighlyAvailableArbiter has been GA for 2 releases [#2759](https://github.com/openshift/api/pull/2759)
* Improve feature-gated CEL validation merge semantics [#2770](https://github.com/openshift/api/pull/2770)
* [OPRUN-4513](https://issues.redhat.com/browse/OPRUN-4513): Move OLMv1 Single/Own Namespace support back to TP [#2766](https://github.com/openshift/api/pull/2766)
* [CORENET-6390](https://issues.redhat.com/browse/CORENET-6390): API changes and feature gate for OVN-Kubernetes no-overlay mode [#2537](https://github.com/openshift/api/pull/2537)
* [OPRUN-4466](https://issues.redhat.com/browse/OPRUN-4466): Add NewOLMConfigAPI feature gate [#2756](https://github.com/openshift/api/pull/2756)
* Add TLS adherence feature gate [#2680](https://github.com/openshift/api/pull/2680)
* [TRT-2518](https://issues.redhat.com/browse/TRT-2518): Add variant OS and JobTier to promotion check [#2763](https://github.com/openshift/api/pull/2763)
* [MCO-2142](https://issues.redhat.com/browse/MCO-2142): Avoid OSImageStream defaultStream unset [#2764](https://github.com/openshift/api/pull/2764)
* [OCPBUGS-74513](https://issues.redhat.com/browse/OCPBUGS-74513): OCPBUGS-74519: OCPBUGS-78487: Remove `MachineConfigNodes` and `PinnedImages` feature gates and v1alpha1 references [#2715](https://github.com/openshift/api/pull/2715)
* [CORS-4348](https://issues.redhat.com/browse/CORS-4348): feature gate for EU Sovereign Cloud support [#2740](https://github.com/openshift/api/pull/2740)
* NO-ISSUE: config/v1alpha1: Drop (Cluster)ImagePolicy since the hard cut to v1 [#2760](https://github.com/openshift/api/pull/2760)
* Add prometheusConfig API [#2653](https://github.com/openshift/api/pull/2653)
* [OCPBUGS-74531](https://issues.redhat.com/browse/OCPBUGS-74531): Remove ImageVolume [#2689](https://github.com/openshift/api/pull/2689)
* [MCO-1985](https://issues.redhat.com/browse/MCO-1985): Move boot image skew enforcement to Default [#2758](https://github.com/openshift/api/pull/2758)
* [SPLAT-2637](https://issues.redhat.com/browse/SPLAT-2637): Promoting gate AWSServiceLBNetworkSecurityGroup to GA [#2717](https://github.com/openshift/api/pull/2717)
* [MON-4033](https://issues.redhat.com/browse/MON-4033): Add OpenShiftMetricsConfig [#2726](https://github.com/openshift/api/pull/2726)
* envtest-releases: add v1.35.1 to index [#2748](https://github.com/openshift/api/pull/2748)
* Fix MachineConfiguration BootImage Enum for MachineSets/ControlPlaneMachineSets [#2750](https://github.com/openshift/api/pull/2750)
* [OCPBUGS-74514](https://issues.redhat.com/browse/OCPBUGS-74514): OCPBUGS-74515: OCPBUGS-74516: OCPBUGS-74517: remove bootimage update feature gates [#2733](https://github.com/openshift/api/pull/2733)
* [OTA-253](https://issues.redhat.com/browse/OTA-253): Add cluster update preflight mode API [#2684](https://github.com/openshift/api/pull/2684)
* [OCPBUGS-74508](https://issues.redhat.com/browse/OCPBUGS-74508): Remove GatewayAPI featuregates [#2742](https://github.com/openshift/api/pull/2742)
* NO-ISSUE: Update dev go image [#2735](https://github.com/openshift/api/pull/2735)
* Add CodeRabbit inheritance for org-wide rules [#2746](https://github.com/openshift/api/pull/2746)
* [CNTRLPLANE-2522](https://issues.redhat.com/browse/CNTRLPLANE-2522): features: add ExternalOIDCExternalClaimsSourcing feature gate [#2743](https://github.com/openshift/api/pull/2743)
* [MCO-2142](https://issues.redhat.com/browse/MCO-2142): OSImageStream.spec.defaultStream validation [#2736](https://github.com/openshift/api/pull/2736)
* [CNTRLPLANE-2550](https://issues.redhat.com/browse/CNTRLPLANE-2550): Add support for CEL expression claim mappings for username and groups [#2719](https://github.com/openshift/api/pull/2719)
* NO-JIRA: Add MachineAPIMigrationVSphere feature gate for DevPreview [#2739](https://github.com/openshift/api/pull/2739)
* [CNTRLPLANE-1752](https://issues.redhat.com/browse/CNTRLPLANE-1752): Add PKI API to config.openshift.io/v1alpha1 [#2645](https://github.com/openshift/api/pull/2645)
* NO-JIRA: LabelSelector should have omitzero [#2741](https://github.com/openshift/api/pull/2741)
* [OCPNODE-4060](https://issues.redhat.com/browse/OCPNODE-4060): Add additional storage configuration fields to ContainerRuntimeConfig [#2681](https://github.com/openshift/api/pull/2681)
* AI: Adds a new `/generate-tests` Claude command that automates the generation of integration tests [#2706](https://github.com/openshift/api/pull/2706)
* [OCPSTRAT-2728](https://issues.redhat.com/browse/OCPSTRAT-2728): Rebase 1.35 [#2578](https://github.com/openshift/api/pull/2578)
* [OCPCLOUD-3386](https://issues.redhat.com/browse/OCPCLOUD-3386): Add platform-specific feature gates for CAPI Operator features [#2730](https://github.com/openshift/api/pull/2730)
* ClusterAPI revision components can be empty [#2728](https://github.com/openshift/api/pull/2728)
* NO-JIRA: feat: add link to sippy for tests [#2732](https://github.com/openshift/api/pull/2732)
* [SPLAT-2410](https://issues.redhat.com/browse/SPLAT-2410): Promote ClusterAPIMachineManagementVSphere to TechPreview [#2724](https://github.com/openshift/api/pull/2724)
* Require APIExcludedFields Versions to be set [#2727](https://github.com/openshift/api/pull/2727)
* [OCPBUGS-32275](https://issues.redhat.com/browse/OCPBUGS-32275): Add ingress.spec.domain immutability validation [#2695](https://github.com/openshift/api/pull/2695)
* [MON-4032](https://issues.redhat.com/browse/MON-4032): Add PrometheusOperatorAdmissionWebhookConfig to ClusterMonitoringSpec [#2716](https://github.com/openshift/api/pull/2716)
* refactor: use deepcopy-gen style in DeepCopyInto functions [#2721](https://github.com/openshift/api/pull/2721)
* [OCPNODE-3880](https://issues.redhat.com/browse/OCPNODE-3880): Add empty CRIOCredentialProviderConfig resource [#2711](https://github.com/openshift/api/pull/2711)
* NO-JIRA: feat: update the html for feature promotion [#2714](https://github.com/openshift/api/pull/2714)
* Ensure unique paths for excluded fields in compatibility requirement [#2720](https://github.com/openshift/api/pull/2720)
* [OCPBUGS-76919](https://issues.redhat.com/browse/OCPBUGS-76919): add listtype atomic [#2713](https://github.com/openshift/api/pull/2713)
* [CNTRLPLANE-2586](https://issues.redhat.com/browse/CNTRLPLANE-2586): postpone the removal of the DeploymentConfig API [#2646](https://github.com/openshift/api/pull/2646)
* [CCXDEV-15605](https://issues.redhat.com/browse/CCXDEV-15605): Promote InsightsOnDemandDataGather and InsightConfig feature gate to default [#2473](https://github.com/openshift/api/pull/2473)
* [OCPSTRAT-2876](https://issues.redhat.com/browse/OCPSTRAT-2876): Enable major version segmentation of enabled feature gates [#2637](https://github.com/openshift/api/pull/2637)
* [MCO-2126](https://issues.redhat.com/browse/MCO-2126): Add defaultStream field to OSImageStream spec [#2709](https://github.com/openshift/api/pull/2709)
* Prefer feature-gate manifest inclusion for merged CRDs [#2712](https://github.com/openshift/api/pull/2712)
* [CORS-4096](https://issues.redhat.com/browse/CORS-4096): Add DNS Record Type for IPv6 Domain mapping [#2361](https://github.com/openshift/api/pull/2361)
* [OCPBUGS-74512](https://issues.redhat.com/browse/OCPBUGS-74512): Remove CPMSMachineNamePrefix featuregate [#2677](https://github.com/openshift/api/pull/2677)
* [OCPCLOUD-3214](https://issues.redhat.com/browse/OCPCLOUD-3214): Add ClusterAPI config [#2564](https://github.com/openshift/api/pull/2564)
* [SPLAT-2615](https://issues.redhat.com/browse/SPLAT-2615): Added support for dynamic AWS dedicated hosts [#2650](https://github.com/openshift/api/pull/2650)
* config/v1: TLSSecurityProfile: align with Mozilla v5.7 guidelines for Go by removing unsupported go ciphers [#2697](https://github.com/openshift/api/pull/2697)
* [NE-2480](https://issues.redhat.com/browse/NE-2480): Add featuregate for Gateway API without OLM [#2691](https://github.com/openshift/api/pull/2691)
* Feature gate CVO application of CompatibilityRequirement CRD [#2701](https://github.com/openshift/api/pull/2701)
* Update integration test timeout and make parallel where possible [#2702](https://github.com/openshift/api/pull/2702)
* [STOR-2878](https://issues.redhat.com/browse/STOR-2878): Graduate MutableCSINodeAllocatableCount to GA [#2673](https://github.com/openshift/api/pull/2673)
* [OCPBUGS-67232](https://issues.redhat.com/browse/OCPBUGS-67232): Move DynamicConfigurationManager back to TPNU [#2621](https://github.com/openshift/api/pull/2621)
* [OCPNODE-4078](https://issues.redhat.com/browse/OCPNODE-4078): Add DRAPartitionableDevices to TechPreviewNoUpgrade [#2694](https://github.com/openshift/api/pull/2694)
* [OCPBUGS-74521](https://issues.redhat.com/browse/OCPBUGS-74521): Remove VolumeAttributesClass FeatureGate [#2675](https://github.com/openshift/api/pull/2675)
* [MON-4031](https://issues.redhat.com/browse/MON-4031): Add prometheusOperatorConfig API [#2481](https://github.com/openshift/api/pull/2481)
* Remove graduated SDN feature gates [#2672](https://github.com/openshift/api/pull/2672)
* [OCPNODE-3863](https://issues.redhat.com/browse/OCPNODE-3863): Add CRIOCredentialProviderConfig API [#2557](https://github.com/openshift/api/pull/2557)
* add Insights capability to Insights CRDs [#2682](https://github.com/openshift/api/pull/2682)
* CodeRabbit should not be looking at openapi generated content [#2688](https://github.com/openshift/api/pull/2688)
* [MCO-1931](https://issues.redhat.com/browse/MCO-1931): Promote ManagedBootImagesCPMS feature gate to the Default featureset [#2679](https://github.com/openshift/api/pull/2679)
* [OCPBUGS-74527](https://issues.redhat.com/browse/OCPBUGS-74527): Remove ProcMountType [#2676](https://github.com/openshift/api/pull/2676)
* [OCPBUGS-55654](https://issues.redhat.com/browse/OCPBUGS-55654): Remove AlibabaPlatform FeatureGate [#2671](https://github.com/openshift/api/pull/2671)
* Re-enable NewOLMBoxcutterRuntime featuregate in TPNU [#2659](https://github.com/openshift/api/pull/2659)
* [OCPBUGS-68343](https://issues.redhat.com/browse/OCPBUGS-68343): Introduce KMSEncryption feature gate [#2669](https://github.com/openshift/api/pull/2669)
* Fix payload CRD/FetaureGate ordering [#2667](https://github.com/openshift/api/pull/2667)
* [OCPEDGE-2084](https://issues.redhat.com/browse/OCPEDGE-2084): Add PacemakerStatus CRD for two-node fencing [#2544](https://github.com/openshift/api/pull/2544)
* [OCPBUGS-56851](https://issues.redhat.com/browse/OCPBUGS-56851): make multiline comments for oidc one line for better crd gen and better `oc explain` description format [#2655](https://github.com/openshift/api/pull/2655)
* no-jira: Validate AWS resource tag keys with aws: prefix [#2183](https://github.com/openshift/api/pull/2183)
* NO-JIRA: Fix Infrastructure PlatformType comment [#2660](https://github.com/openshift/api/pull/2660)
* [OCPEDGE-2084](https://issues.redhat.com/browse/OCPEDGE-2084): chore(tools): bump controller-tools with XValidation ordering fix [#2658](https://github.com/openshift/api/pull/2658)
* Update KAL to latest and configure new linters [#2662](https://github.com/openshift/api/pull/2662)
* [OCPCLOUD-2998](https://issues.redhat.com/browse/OCPCLOUD-2998): Add synchronizedAPI to Machine and MachineSet status [#2642](https://github.com/openshift/api/pull/2642)
* [CORENET-6609](https://issues.redhat.com/browse/CORENET-6609): Add EVPN featuregate [#2649](https://github.com/openshift/api/pull/2649)
* [OCPBUGS-73855](https://issues.redhat.com/browse/OCPBUGS-73855): Permit other machine managers when skew enforcement is in Automatic mode [#2648](https://github.com/openshift/api/pull/2648)
* [CONSOLE-4986](https://issues.redhat.com/browse/CONSOLE-4986): Add Guided Tour capability flag to Console API and vendor it into console-operator [#2644](https://github.com/openshift/api/pull/2644)
* [OCPCLOUD-3166](https://issues.redhat.com/browse/OCPCLOUD-3166): machine-api: disallow unsetting authoritativeAPI [#2091](https://github.com/openshift/api/pull/2091)
* Add insights v1 to payload [#2632](https://github.com/openshift/api/pull/2632)
* [CNTRLPLANE-1750](https://issues.redhat.com/browse/CNTRLPLANE-1750): Add FeatureGate: ConfigurablePKI [#2545](https://github.com/openshift/api/pull/2545)
* NO-JIRA: update TLS security profile documentation for clarity and consistency [#2595](https://github.com/openshift/api/pull/2595)
* [OPRUN-4226](https://issues.redhat.com/browse/OPRUN-4226): [OLMv1]: Promote NewOLMOwnSingleNamespace to GA #2527 [#2527](https://github.com/openshift/api/pull/2527)
* [SPLAT-2603](https://issues.redhat.com/browse/SPLAT-2603): Added support for legacy AWS dedicated hosts [#2643](https://github.com/openshift/api/pull/2643)
* Extend ClusterVersion for accepted risks [#2360](https://github.com/openshift/api/pull/2360)
* [CNTRLPLANE-311](https://issues.redhat.com/browse/CNTRLPLANE-311): adding auth config missing fields to API [#2487](https://github.com/openshift/api/pull/2487)
* NO-JIRA: Rename ImagePolicy nested types to prevent PKI collision [#2626](https://github.com/openshift/api/pull/2626)
* Reapply "Merge pull request #2448 from opokornyy/CCXDEV-15259-io-v1" [#2631](https://github.com/openshift/api/pull/2631)
* [OCPBUGS-70025](https://issues.redhat.com/browse/OCPBUGS-70025): Updating ose-cluster-config-api-container image to be consistent with ART for 4.22 [#2634](https://github.com/openshift/api/pull/2634)
* Add configuration for coderabbit [#2635](https://github.com/openshift/api/pull/2635)
* DevPreview: `NetworkConnect` feature gate [#2629](https://github.com/openshift/api/pull/2629)
* [OCPCLOUD-3164](https://issues.redhat.com/browse/OCPCLOUD-3164): Add CompatibilityRequirement [#2479](https://github.com/openshift/api/pull/2479)
* Disable the statusoptional linter [#2633](https://github.com/openshift/api/pull/2633)
* Migrate away from deprecated ioutil [#2603](https://github.com/openshift/api/pull/2603)
* [OKD-259](https://issues.redhat.com/browse/OKD-259): Support an "OKD" featureset to be enabled by default on OKD clusters [#2451](https://github.com/openshift/api/pull/2451)
* NO-JIRA: remove beta enabled TranslateStreamCloseWebsocketRequests feature from gates [#2613](https://github.com/openshift/api/pull/2613)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/api/compare/d1c4dc4fd37b8e8f6e4992cda4e84167a3f2cb8c...b37d107c490a35659457ed38f9f5b109f85448da)
### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/e0c2428e4618493ad9db0681e3b91444746ddf2c)
* [OCPEDGE-2071](https://issues.redhat.com/browse/OCPEDGE-2071): bump(ocp/api): pull in latest for DualReplica promotion [#480](https://github.com/openshift/cluster-config-operator/pull/480)
* [OCPBUGS-74528](https://issues.redhat.com/browse/OCPBUGS-74528): bump: ocp/api ocp/libray-go [#475](https://github.com/openshift/cluster-config-operator/pull/475)
* [API-1646](https://issues.redhat.com/browse/API-1646): Add config-operator workload and namespaces network policies [#463](https://github.com/openshift/cluster-config-operator/pull/463)
* [OCPSTRAT-2876](https://issues.redhat.com/browse/OCPSTRAT-2876): Teach config operator to filter feature gate manifests by major version inclusion [#459](https://github.com/openshift/cluster-config-operator/pull/459)
* NO-JIRA: OWNERS: remove engineer who has left Red Hat [#466](https://github.com/openshift/cluster-config-operator/pull/466)
* [OCPBUGS-73988](https://issues.redhat.com/browse/OCPBUGS-73988): Updating ose-cluster-config-operator-container image to be consistent with ART for 4.22 [#460](https://github.com/openshift/cluster-config-operator/pull/460)
* [CORS-4340](https://issues.redhat.com/browse/CORS-4340): add NodeIPFamilies configuration field [#472](https://github.com/openshift/cluster-config-operator/pull/472)
* NO-JIRA: bump: pull in latest ocp/api [#471](https://github.com/openshift/cluster-config-operator/pull/471)
* [OKD-320](https://issues.redhat.com/browse/OKD-320): Migrate to OKD featureset for OKD clusters [#462](https://github.com/openshift/cluster-config-operator/pull/462)
* [OKD-259](https://issues.redhat.com/browse/OKD-259): Allow the OKD feature set to upgrade [#461](https://github.com/openshift/cluster-config-operator/pull/461)
* [CNTRLPLANE-2272](https://issues.redhat.com/browse/CNTRLPLANE-2272): Refactor tests-ext initialization to improve error handling [#457](https://github.com/openshift/cluster-config-operator/pull/457)
* [OCPBUGS-69859](https://issues.redhat.com/browse/OCPBUGS-69859): Updating ose-cluster-config-operator-container image to be consistent with ART for 4.22 [#456](https://github.com/openshift/cluster-config-operator/pull/456)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/b58d2c2984f2f92cfd0b58a5c547eff268f6db86...e0c2428e4618493ad9db0681e3b91444746ddf2c)
### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/b2e26b937e7f6dab36b63ace9c8453ba9654011c)
* [OCPCLOUD-3349](https://issues.redhat.com/browse/OCPCLOUD-3349): Honor TLS adherence, allow TLS overrides via flags [#398](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/398)
* [OCPCLOUD-3284](https://issues.redhat.com/browse/OCPCLOUD-3284): Bump to k8s 1.35 and associated deps. [#397](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/397)
* [OCPBUGS-77596](https://issues.redhat.com/browse/OCPBUGS-77596): Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART for 4.22 [#396](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/396)
* [OCPBUGS-77259](https://issues.redhat.com/browse/OCPBUGS-77259): e2e: improve formatting of cluster operators stabilization timeouts, bump suite timeout [#394](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/394)
* [OCPCLOUD-3349](https://issues.redhat.com/browse/OCPCLOUD-3349): tls: use centralized TLS profile [#381](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/381)
* [TRT-2542](https://issues.redhat.com/browse/TRT-2542): Revert Fix framework initialization [#391](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/391)
* [OCPBUGS-74343](https://issues.redhat.com/browse/OCPBUGS-74343): Fix framework initialization [#384](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/384)
* [OCPBUGS-74512](https://issues.redhat.com/browse/OCPBUGS-74512): Remove CPMSMachineNamePrefix feature gate [#387](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/387)
* NO-JIRA: mockgen deprecated: use uber-go/mock instead [#374](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/374)
* [OCPBUGS-74478](https://issues.redhat.com/browse/OCPBUGS-74478): Bump openshift/api to get latest AWSMachineProviderConfig type [#385](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/385)
* [OCPBUGS-67230](https://issues.redhat.com/browse/OCPBUGS-67230): Fix Makefile to use vendor mode [#377](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/377)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/737457067d0b1a85cd2d9a9eba930fd7d7bd4e40...b2e26b937e7f6dab36b63ace9c8453ba9654011c)
### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/108f37f0e378accc322cbeb68136ec500ec35b94)
* [OCPBUGS-82535](https://issues.redhat.com/browse/OCPBUGS-82535): Fix PDB unhealthyPodEvictionPolicy field name [#271](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/271)
* [STOR-2762](https://issues.redhat.com/browse/STOR-2762): Bump all deps for 4.22 [#270](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/270)
* [OCPBUGS-77601](https://issues.redhat.com/browse/OCPBUGS-77601): Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.22 [#269](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/269)
* [STOR-2523](https://issues.redhat.com/browse/STOR-2523): Add desired-version annotation to controller Deployment and use DeploymentVersionController in csi-snapshot-controller-operator [#251](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/251)
* [OCPBUGS-73791](https://issues.redhat.com/browse/OCPBUGS-73791): Re-add serving cert volume mount to hypershift guest cluster manifest [#264](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/264)
* [OCPBUGS-66390](https://issues.redhat.com/browse/OCPBUGS-66390): Set client throttling parameters [#261](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/261)
* [OCPBUGS-69854](https://issues.redhat.com/browse/OCPBUGS-69854): Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.22 [#262](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/262)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/186ad6f430ae3f8f8e777e912efa6670033857e5...108f37f0e378accc322cbeb68136ec500ec35b94)
### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/3d2141182243cde1ec6417bd005c76d29aa88a01)
* [OCPBUGS-78085](https://issues.redhat.com/browse/OCPBUGS-78085): Fix dual-stack service update by preserving IP families [#467](https://github.com/openshift/cluster-dns-operator/pull/467)
* [NE-2500](https://issues.redhat.com/browse/NE-2500): Added network policies for DNS [#468](https://github.com/openshift/cluster-dns-operator/pull/468)
* [OCPBUGS-62178](https://issues.redhat.com/browse/OCPBUGS-62178): Dynamically set kube-rbac-proxy TLS args [#466](https://github.com/openshift/cluster-dns-operator/pull/466)
* [OCPBUGS-14346](https://issues.redhat.com/browse/OCPBUGS-14346): Fix when DNS operator reports Degraded [#373](https://github.com/openshift/cluster-dns-operator/pull/373)
* [NE-2469](https://issues.redhat.com/browse/NE-2469): Migrate away from deprecated ioutil [#454](https://github.com/openshift/cluster-dns-operator/pull/454)
* [NE-2482](https://issues.redhat.com/browse/NE-2482): bump k8s libraries to v0.35.0 and cr to v0.23.1 [#459](https://github.com/openshift/cluster-dns-operator/pull/459)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): manifests: Enable user namespaces [#451](https://github.com/openshift/cluster-dns-operator/pull/451)
* [OCPBUGS-69912](https://issues.redhat.com/browse/OCPBUGS-69912): Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.22 [#463](https://github.com/openshift/cluster-dns-operator/pull/463)
* [OCPBUGS-65498](https://issues.redhat.com/browse/OCPBUGS-65498): Add openshift-dns-operator ClusterRole to ClusterOpera… [#455](https://github.com/openshift/cluster-dns-operator/pull/455)
* NO-JIRA: Add NI&D team members to OWNERS [#465](https://github.com/openshift/cluster-dns-operator/pull/465)
* [NE-2414](https://issues.redhat.com/browse/NE-2414): Use `trafficDistribution: PreferSameNode` for openshift-dns Service [#457](https://github.com/openshift/cluster-dns-operator/pull/457)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/41a53fed36e6e99c7c9ceb3a699c3547ee5d9bb9...3d2141182243cde1ec6417bd005c76d29aa88a01)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/3698b93d071f8b279b1721f90ced478f0b90b426)
* NO-JIRA: Apply `go fix` changes [#1589](https://github.com/openshift/cluster-etcd-operator/pull/1589)
* NO-JIRA: Remove unused lib/resourcemerge package [#1590](https://github.com/openshift/cluster-etcd-operator/pull/1590)
* [OCPEDGE-2495](https://issues.redhat.com/browse/OCPEDGE-2495): upkeep: bump ocp/api ocp/client-go [#1591](https://github.com/openshift/cluster-etcd-operator/pull/1591)
* [OCPBUGS-81340](https://issues.redhat.com/browse/OCPBUGS-81340): pacemaker CronJob: tune history limit and Job TTL [#1581](https://github.com/openshift/cluster-etcd-operator/pull/1581)
* [OCPEDGE-2495](https://issues.redhat.com/browse/OCPEDGE-2495): feat: update pacemaker in preparation for DualReplica promotion [#1587](https://github.com/openshift/cluster-etcd-operator/pull/1587)
* [OCPBUGS-81341](https://issues.redhat.com/browse/OCPBUGS-81341): fix: add correct annotations to stop update events [#1580](https://github.com/openshift/cluster-etcd-operator/pull/1580)
* [CNTRLPLANE-2621](https://issues.redhat.com/browse/CNTRLPLANE-2621): Restart operator when TLS config changes [#1556](https://github.com/openshift/cluster-etcd-operator/pull/1556)
* [OCPBUGS-80959](https://issues.redhat.com/browse/OCPBUGS-80959): fix(tnf): align Pacemaker kubelet and etcd retry pacing [#1578](https://github.com/openshift/cluster-etcd-operator/pull/1578)
* [CNTRLPLANE-2668](https://issues.redhat.com/browse/CNTRLPLANE-2668): Migrating go standard etcd cases to ote [#1575](https://github.com/openshift/cluster-etcd-operator/pull/1575)
* NO-JIRA: add Lance as a reviewer [#1576](https://github.com/openshift/cluster-etcd-operator/pull/1576)
* [OCPBUGS-78956](https://issues.redhat.com/browse/OCPBUGS-78956): Disable member cache for quorum checker in TNF [#1568](https://github.com/openshift/cluster-etcd-operator/pull/1568)
* [OCPBUGS-65626](https://issues.redhat.com/browse/OCPBUGS-65626): upgrade library-go to latest changes [#1566](https://github.com/openshift/cluster-etcd-operator/pull/1566)
* [OCPBUGS-78930](https://issues.redhat.com/browse/OCPBUGS-78930): add tnf jobs to network policy exceptions [#1574](https://github.com/openshift/cluster-etcd-operator/pull/1574)
* [ETCD-557](https://issues.redhat.com/browse/ETCD-557): Add e2e Network policy test cases [#1543](https://github.com/openshift/cluster-etcd-operator/pull/1543)
* Revert "OCPBUGS-77947: fix(tnf): do not block on stable revision after external etcd transition" [#1572](https://github.com/openshift/cluster-etcd-operator/pull/1572)
* [OCPBUGS-74679](https://issues.redhat.com/browse/OCPBUGS-74679): fix: tweaking kubelet resource config to allow automatic fencing recovery [#1561](https://github.com/openshift/cluster-etcd-operator/pull/1561)
* [OCPBUGS-70050](https://issues.redhat.com/browse/OCPBUGS-70050): Updating cluster-etcd-operator-container image to be consistent with ART for 4.22 [#1569](https://github.com/openshift/cluster-etcd-operator/pull/1569)
* [MON-4484](https://issues.redhat.com/browse/MON-4484): chore: add permissions on endpointslice to Prometheus Role and use serviceDiscoveryRole: EndpointSlice in ServiceMonitors [#1536](https://github.com/openshift/cluster-etcd-operator/pull/1536)
* [OCPBUGS-77947](https://issues.redhat.com/browse/OCPBUGS-77947): fix(tnf): do not block on stable revision after external etcd transition [#1562](https://github.com/openshift/cluster-etcd-operator/pull/1562)
* [OCPBUGS-76538](https://issues.redhat.com/browse/OCPBUGS-76538): Removed unneeded ETCDCTL_API environment variable [#1560](https://github.com/openshift/cluster-etcd-operator/pull/1560)
* [OCPBUGS-76331](https://issues.redhat.com/browse/OCPBUGS-76331): fix: truncate job names to respect k8s 63-char limit [#1554](https://github.com/openshift/cluster-etcd-operator/pull/1554)
* NO-JIRA: fix unit-test flake in revision tests [#1558](https://github.com/openshift/cluster-etcd-operator/pull/1558)
* NO-JIRA: update cert injection annotations to beta [#1551](https://github.com/openshift/cluster-etcd-operator/pull/1551)
* NO-JIRA: Clean up stale Pacemaker attributes before TNF cluster restore [#1553](https://github.com/openshift/cluster-etcd-operator/pull/1553)
* [OCPBUGS-74151](https://issues.redhat.com/browse/OCPBUGS-74151): Wait for revision stability before removing etcd members [#1540](https://github.com/openshift/cluster-etcd-operator/pull/1540)
* NO-JIRA: fix: add missing priority class from status checker [#1552](https://github.com/openshift/cluster-etcd-operator/pull/1552)
* [OCPEDGE-2097](https://issues.redhat.com/browse/OCPEDGE-2097): Add pacemaker health check for ExternalEtcd clusters [#1487](https://github.com/openshift/cluster-etcd-operator/pull/1487)
* [OCPEDGE-2231](https://issues.redhat.com/browse/OCPEDGE-2231): [TNF] feat: Allow podman-etcd and kubelet resource-agent to restart on start failure [#1513](https://github.com/openshift/cluster-etcd-operator/pull/1513)
* NO-JIRA: [TNF] disable etcd member management after etcd handover [#1534](https://github.com/openshift/cluster-etcd-operator/pull/1534)
* [OCPBUGS-66152](https://issues.redhat.com/browse/OCPBUGS-66152): split grpc requests slow into read/write alerts [#1532](https://github.com/openshift/cluster-etcd-operator/pull/1532)
* [OCPBUGS-73857](https://issues.redhat.com/browse/OCPBUGS-73857): Prefer to remove members where they have another healthy machine in the same failure domain index [#1528](https://github.com/openshift/cluster-etcd-operator/pull/1528)
* [OCPBUGS-68371](https://issues.redhat.com/browse/OCPBUGS-68371): fix bootstrap race condition [#1524](https://github.com/openshift/cluster-etcd-operator/pull/1524)
* [OCPBUGS-38659](https://issues.redhat.com/browse/OCPBUGS-38659): bump inertia from 5-10 minutes [#1531](https://github.com/openshift/cluster-etcd-operator/pull/1531)
* [OCPBUGS-38659](https://issues.redhat.com/browse/OCPBUGS-38659): configure inertia for all controllers [#1527](https://github.com/openshift/cluster-etcd-operator/pull/1527)
* [OCPBUGS-60588](https://issues.redhat.com/browse/OCPBUGS-60588): [TNF] support restore for pacemaker-managed etcd [#1521](https://github.com/openshift/cluster-etcd-operator/pull/1521)
* [OCPBUGS-62422](https://issues.redhat.com/browse/OCPBUGS-62422): deps: Update library-go to update pruner [#1526](https://github.com/openshift/cluster-etcd-operator/pull/1526)
* And 3 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/2e46bfdf639578074b824bd63eaf3ab8b1cc14ea...3698b93d071f8b279b1721f90ced478f0b90b426)
### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/3a32428c3d183a0c6011359d2c6cf87d05736472)
* [CNTRLPLANE-3184](https://issues.redhat.com/browse/CNTRLPLANE-3184): Create network policies for image-registry components [#1301](https://github.com/openshift/cluster-image-registry-operator/pull/1301)
* [OCPBUGS-81750](https://issues.redhat.com/browse/OCPBUGS-81750): Use deterministic S3 bucket naming to prevent orphaned buckets [#1317](https://github.com/openshift/cluster-image-registry-operator/pull/1317)
* [OCPBUGS-66225](https://issues.redhat.com/browse/OCPBUGS-66225): ImageConfigController: wait for ClusterVersion informe… [#1316](https://github.com/openshift/cluster-image-registry-operator/pull/1316)
* [OCPBUGS-66225](https://issues.redhat.com/browse/OCPBUGS-66225): fix degraded blip on stale config caches [#1304](https://github.com/openshift/cluster-image-registry-operator/pull/1304)
* [OCPBUGS-66225](https://issues.redhat.com/browse/OCPBUGS-66225): migrate to go 1.25 [#1305](https://github.com/openshift/cluster-image-registry-operator/pull/1305)
* [IR-350](https://issues.redhat.com/browse/IR-350): make metrics server tls configuration file-based [#1297](https://github.com/openshift/cluster-image-registry-operator/pull/1297)
* [OCPBUGS-74495](https://issues.redhat.com/browse/OCPBUGS-74495): Fix Azure Stack Hub compatibility with dual SDK approach [#1287](https://github.com/openshift/cluster-image-registry-operator/pull/1287)
* [OCPBUGS-62626](https://issues.redhat.com/browse/OCPBUGS-62626): only report Progressing=True when progressing towards new configuration [#1293](https://github.com/openshift/cluster-image-registry-operator/pull/1293)
* [OCPBUGS-66225](https://issues.redhat.com/browse/OCPBUGS-66225): bump deployment ProgressDeadlineSeconds to 120s [#1298](https://github.com/openshift/cluster-image-registry-operator/pull/1298)
* [CNTRLPLANE-2651](https://issues.redhat.com/browse/CNTRLPLANE-2651): Fix OTE suite qualifiers to use proper CEL expressions [#1300](https://github.com/openshift/cluster-image-registry-operator/pull/1300)
* [CNTRLPLANE-2651](https://issues.redhat.com/browse/CNTRLPLANE-2651): OTE infrastructure [#1283](https://github.com/openshift/cluster-image-registry-operator/pull/1283)
* [IR-350](https://issues.redhat.com/browse/IR-350): keeps registry tls config in sync with cluster [#1278](https://github.com/openshift/cluster-image-registry-operator/pull/1278)
* [OCPBUGS-62626](https://issues.redhat.com/browse/OCPBUGS-62626): only report Progressing=True when progressing towards new configuration [#1286](https://github.com/openshift/cluster-image-registry-operator/pull/1286)
* NO-JIRA: fix TestImageRegistryRemovedWithImages flake [#1288](https://github.com/openshift/cluster-image-registry-operator/pull/1288)
* [OCPBUGS-74495](https://issues.redhat.com/browse/OCPBUGS-74495): Migrate Azure storage management to new ARM SDK [#1281](https://github.com/openshift/cluster-image-registry-operator/pull/1281)
* [IR-350](https://issues.redhat.com/browse/IR-350): bump library-go to the latest version [#1276](https://github.com/openshift/cluster-image-registry-operator/pull/1276)
* [OCPBUGS-69751](https://issues.redhat.com/browse/OCPBUGS-69751): Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.22 [#1275](https://github.com/openshift/cluster-image-registry-operator/pull/1275)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/ba14eb8ffce78b82b50c4a4fd95f063869aed5c0...3a32428c3d183a0c6011359d2c6cf87d05736472)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/2c5b4ef0021db96ba6fecf630c53a15c12134578)
* [OCPBUGS-81550](https://issues.redhat.com/browse/OCPBUGS-81550): AWS, Azure and GCP ClusterHostedDNS: Add Ingress LB IPs to Infra CR after masters up [#1411](https://github.com/openshift/cluster-ingress-operator/pull/1411)
* [OCPBUGS-76609](https://issues.redhat.com/browse/OCPBUGS-76609): Do not take over OSSM subscription [#1398](https://github.com/openshift/cluster-ingress-operator/pull/1398)
* [NE-2332](https://issues.redhat.com/browse/NE-2332): Implement ROUTER_CURVES environment variable [#1409](https://github.com/openshift/cluster-ingress-operator/pull/1409)
* [OCPBUGS-3917](https://issues.redhat.com/browse/OCPBUGS-3917): filter non-FIPS TLS 1.3 ciphers from ROUTER_CIPHERSUITES on FIPS clusters [#1401](https://github.com/openshift/cluster-ingress-operator/pull/1401)
* [NE-2501](https://issues.redhat.com/browse/NE-2501): Add network policies for ingress resources [#1392](https://github.com/openshift/cluster-ingress-operator/pull/1392)
* [OCPBUGS-79376](https://issues.redhat.com/browse/OCPBUGS-79376): Bump to OSSM 3.3.1 and Istio v1.28.5 [#1406](https://github.com/openshift/cluster-ingress-operator/pull/1406)
* [OCPBUGS-78541](https://issues.redhat.com/browse/OCPBUGS-78541): Move TestIngressControllerCustomEndpoints to run last [#1388](https://github.com/openshift/cluster-ingress-operator/pull/1388)
* [OCPBUGS-79467](https://issues.redhat.com/browse/OCPBUGS-79467): Change default log level from DEBUG to INFO [#1402](https://github.com/openshift/cluster-ingress-operator/pull/1402)
* [NE-2519](https://issues.redhat.com/browse/NE-2519): Move Sail Library to official release branch [#1404](https://github.com/openshift/cluster-ingress-operator/pull/1404)
* [NE-2523](https://issues.redhat.com/browse/NE-2523): Implement configurationManagement API [#1385](https://github.com/openshift/cluster-ingress-operator/pull/1385)
* [OCPBUGS-79667](https://issues.redhat.com/browse/OCPBUGS-79667): Use feature-gate annotation for Sail Library RBAC [#1393](https://github.com/openshift/cluster-ingress-operator/pull/1393)
* [NE-2396](https://issues.redhat.com/browse/NE-2396): gatewayclass: Enable Horizontal Pod Autoscaling [#1326](https://github.com/openshift/cluster-ingress-operator/pull/1326)
* [CORS-4335](https://issues.redhat.com/browse/CORS-4335): Add support for AWS European Sovereign Cloud [#1360](https://github.com/openshift/cluster-ingress-operator/pull/1360)
* [NE-2421](https://issues.redhat.com/browse/NE-2421): Support dual-stack IngressController on AWS [#1376](https://github.com/openshift/cluster-ingress-operator/pull/1376)
* [OCPBUGS-62237](https://issues.redhat.com/browse/OCPBUGS-62237): Apply APIServer TLS security profile to canary daemonset [#1386](https://github.com/openshift/cluster-ingress-operator/pull/1386)
* [OCPBUGS-78523](https://issues.redhat.com/browse/OCPBUGS-78523): gatewayapi_controller: Replace sync.Once with retry for GatewayClass field indexer setup [#1382](https://github.com/openshift/cluster-ingress-operator/pull/1382)
* [OCPBUGS-62627](https://issues.redhat.com/browse/OCPBUGS-62627): cluster operator ingress reported Progressing=True wit… [#1299](https://github.com/openshift/cluster-ingress-operator/pull/1299)
* [OCPBUGS-62238](https://issues.redhat.com/browse/OCPBUGS-62238): configure tls profile for router metrics [#1378](https://github.com/openshift/cluster-ingress-operator/pull/1378)
* [NE-2285](https://issues.redhat.com/browse/NE-2285): Bump to OSSM 3.3.0 and Istio v1.28.4 [#1396](https://github.com/openshift/cluster-ingress-operator/pull/1396)
* [OCPBUGS-77457](https://issues.redhat.com/browse/OCPBUGS-77457): Respect proxy configuration on gwapi provisioning [#1383](https://github.com/openshift/cluster-ingress-operator/pull/1383)
* [NE-2471](https://issues.redhat.com/browse/NE-2471): Replace OLM-based Istio install with Sail Library [#1354](https://github.com/openshift/cluster-ingress-operator/pull/1354)
* [NE-2501](https://issues.redhat.com/browse/NE-2501): Add RBAC to allow operator to manage network policies [#1389](https://github.com/openshift/cluster-ingress-operator/pull/1389)
* [OCPBUGS-78555](https://issues.redhat.com/browse/OCPBUGS-78555): Increase Gateway E2E timeout to 5 minutes [#1390](https://github.com/openshift/cluster-ingress-operator/pull/1390)
* [NE-2131](https://issues.redhat.com/browse/NE-2131): tests-extension: Append suite names to OTE test specs to preserve original test names [#1387](https://github.com/openshift/cluster-ingress-operator/pull/1387)
* [NE-2418](https://issues.redhat.com/browse/NE-2418): Add e2e test for haproxy_max_connections metric [#1361](https://github.com/openshift/cluster-ingress-operator/pull/1361)
* [NE-2183](https://issues.redhat.com/browse/NE-2183): Implement GatewayAPI status controller [#1294](https://github.com/openshift/cluster-ingress-operator/pull/1294)
* [NE-2131](https://issues.redhat.com/browse/NE-2131): tests-extension: restore test names and remove metadata tracking [#1379](https://github.com/openshift/cluster-ingress-operator/pull/1379)
* [OCPBUGS-77493](https://issues.redhat.com/browse/OCPBUGS-77493): e2e: Increase GatewayClass acceptance timeout to 5m [#1372](https://github.com/openshift/cluster-ingress-operator/pull/1372)
* [OCPBUGS-77704](https://issues.redhat.com/browse/OCPBUGS-77704): Update annotations in gatewayclass to use the istio version [#1375](https://github.com/openshift/cluster-ingress-operator/pull/1375)
* [NE-2131](https://issues.redhat.com/browse/NE-2131): Add OpenShift Tests Extension scaffolding with GatewayAPI CRD tests [#1371](https://github.com/openshift/cluster-ingress-operator/pull/1371)
* [OCPBUGS-74508](https://issues.redhat.com/browse/OCPBUGS-74508): Remove the GatewayAPI feature gate [#1366](https://github.com/openshift/cluster-ingress-operator/pull/1366)
* NO-JIRA: enable inheritance on coderabbit [#1373](https://github.com/openshift/cluster-ingress-operator/pull/1373)
* [OCPBUGS-74511](https://issues.redhat.com/browse/OCPBUGS-74511): remove RouteExternalCertificate feature gate [#1355](https://github.com/openshift/cluster-ingress-operator/pull/1355)
* [OCPBUGS-65629](https://issues.redhat.com/browse/OCPBUGS-65629): ensure canary daemon set uses its own service account. [#1310](https://github.com/openshift/cluster-ingress-operator/pull/1310)
* [OCPBUGS-77305](https://issues.redhat.com/browse/OCPBUGS-77305): Bump to OSSM 3.2.2 and Istio 1.27.5 [#1350](https://github.com/openshift/cluster-ingress-operator/pull/1350)
* NO-JIRA: Add coderabbit to CIO [#1348](https://github.com/openshift/cluster-ingress-operator/pull/1348)
* [OCPBUGS-58145](https://issues.redhat.com/browse/OCPBUGS-58145): reload serving cert on rotation [#1285](https://github.com/openshift/cluster-ingress-operator/pull/1285)
* [NE-2481](https://issues.redhat.com/browse/NE-2481): bump k8s libraries to v0.35.0 [#1356](https://github.com/openshift/cluster-ingress-operator/pull/1356)
* [NE-2434](https://issues.redhat.com/browse/NE-2434): E2E test for internal LoadBalancer Annotations [#1353](https://github.com/openshift/cluster-ingress-operator/pull/1353)
* [OCPBUGS-64565](https://issues.redhat.com/browse/OCPBUGS-64565), [OCPBUGS-9037](https://issues.redhat.com/browse/OCPBUGS-9037): Ensure canary cert matches the default ingress controller's cert [#1334](https://github.com/openshift/cluster-ingress-operator/pull/1334)
* [NE-2395](https://issues.redhat.com/browse/NE-2395): Fix e2e tests to work on platforms with unmanaged DNS [#1342](https://github.com/openshift/cluster-ingress-operator/pull/1342)
* [NE-2374](https://issues.redhat.com/browse/NE-2374): Add e2e test for Gateway API infrastructure annotations [#1331](https://github.com/openshift/cluster-ingress-operator/pull/1331)
* [NE-2435](https://issues.redhat.com/browse/NE-2435): Bump Gateway API CRDs to v1.4.1 [#1343](https://github.com/openshift/cluster-ingress-operator/pull/1343)
* [OCPBUGS-16728](https://issues.redhat.com/browse/OCPBUGS-16728): Require Service Deletion for LB Type Updates [#1142](https://github.com/openshift/cluster-ingress-operator/pull/1142)
* NO-JIRA: add jcmoraisjr to owners [#1346](https://github.com/openshift/cluster-ingress-operator/pull/1346)
* [OKD-259](https://issues.redhat.com/browse/OKD-259): Bump openshift/api and add support for OKD featureset specific CRDs [#1324](https://github.com/openshift/cluster-ingress-operator/pull/1324)
* [OCPBUGS-65482](https://issues.redhat.com/browse/OCPBUGS-65482): Add e2e test for secure redirect port stripping [#1316](https://github.com/openshift/cluster-ingress-operator/pull/1316)
* [NE-1743](https://issues.redhat.com/browse/NE-1743): Add documentation for pre-release script for OSSM testing [#1315](https://github.com/openshift/cluster-ingress-operator/pull/1315)
* [OCPBUGS-70212](https://issues.redhat.com/browse/OCPBUGS-70212): testGatewayAPIDNS: Fix nil gateway in cleanup [#1330](https://github.com/openshift/cluster-ingress-operator/pull/1330)
* [OCPBUGS-70211](https://issues.redhat.com/browse/OCPBUGS-70211): Fix logging for unmanaged controllers [#1329](https://github.com/openshift/cluster-ingress-operator/pull/1329)
* [OCPBUGS-69954](https://issues.redhat.com/browse/OCPBUGS-69954): Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.22 [#1328](https://github.com/openshift/cluster-ingress-operator/pull/1328)
* [OCPBUGS-65939](https://issues.redhat.com/browse/OCPBUGS-65939): Update command to get Konflux index image [#1325](https://github.com/openshift/cluster-ingress-operator/pull/1325)
* [OSSM-10865](https://issues.redhat.com/browse/OSSM-10865): set trustBundleName in Istio global values [#1288](https://github.com/openshift/cluster-ingress-operator/pull/1288)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/b62dd27c901d495e6e78b11968872c002cc2416f...2c5b4ef0021db96ba6fecf630c53a15c12134578)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/ebd723168d8bac16ce678a01c3ea7a7467030169)
* [OCPBUGS-68365](https://issues.redhat.com/browse/OCPBUGS-68365): revert dev cert rotation [#2017](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2017)
* [CNTRLPLANE-2698](https://issues.redhat.com/browse/CNTRLPLANE-2698): add network policies for apiserver operator and operands [#2029](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2029)
* [OCPBUGS-23366](https://issues.redhat.com/browse/OCPBUGS-23366): bindata/bootkube: Remove configmap-csr-controller-ca.yaml [#2076](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2076)
* [OCPBUGS-76952](https://issues.redhat.com/browse/OCPBUGS-76952): scc: fix uid{Min,Max}Range for nested-container [#2053](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2053)
* NO-JIRA:Fix TestBoundTokenOperatorSecretDeletion stability and monitor failures [#2080](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2080)
* [CNTRLPLANE-2622](https://issues.redhat.com/browse/CNTRLPLANE-2622): Restart operator when TLS config changes [#2059](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2059)
* [CORS-4363](https://issues.redhat.com/browse/CORS-4363): set bindAddress/bindNetwork for dual-stack clusters [#2079](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2079)
* [CNTRLPLANE-2992](https://issues.redhat.com/browse/CNTRLPLANE-2992): Update CKASO to use a default webhook authenticator secret when authentication type is not `None` [#2074](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2074)
* [OCPBUGS-65626](https://issues.redhat.com/browse/OCPBUGS-65626): update library-go to latest [#2026](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2026)
* [CNTRLPLANE-2223](https://issues.redhat.com/browse/CNTRLPLANE-2223): Migrate TestBoundTokenSignerController to ginkgo [#2067](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2067)
* [CNTRLPLANE-2622](https://issues.redhat.com/browse/CNTRLPLANE-2622): config tls on check-endpoints container [#2058](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2058)
* [OCPBUGS-46086](https://issues.redhat.com/browse/OCPBUGS-46086): Always set service-account-jwks-uri to LB URL even with custom issuer [#1919](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1919)
* [OCPBUGS-78146](https://issues.redhat.com/browse/OCPBUGS-78146): move event-ttl test to its own suite [#2069](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2069)
* [OCPBUGS-78117](https://issues.redhat.com/browse/OCPBUGS-78117): Update the deprecated usage alerts for 1.35 [#2068](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2068)
* [OCPBUGS-77509](https://issues.redhat.com/browse/OCPBUGS-77509): Add support for event-ttl cases and go test cases in Kube API Server Operator [#2060](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2060)
* [OCPSTRAT-2728](https://issues.redhat.com/browse/OCPSTRAT-2728): Rebase 1.35 [#2003](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2003)
* [CNTRLPLANE-2223](https://issues.redhat.com/browse/CNTRLPLANE-2223): Test bound token signer controller fix [#2050](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2050)
* [TRT-2561](https://issues.redhat.com/browse/TRT-2561): Revert #2032 "CNTRLPLANE-2622: config tls on check-endpoints container" [#2057](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2057)
* [CNTRLPLANE-2622](https://issues.redhat.com/browse/CNTRLPLANE-2622): config tls on check-endpoints container [#2032](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2032)
* [CNTRLPLANE-2241](https://issues.redhat.com/browse/CNTRLPLANE-2241): Update library-go to get KMS encryption [#2033](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2033)
* NO-JIRA: Test encryption provider migration [#2028](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2028)
* [OCPBUGS-70298](https://issues.redhat.com/browse/OCPBUGS-70298): remove kube-apiserver user from crb [#2012](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2012)
* [CNTRLPLANE-2247](https://issues.redhat.com/browse/CNTRLPLANE-2247): Adding KMS TestKMSEncryptionOnOff test [#2027](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2027)
* [CNTRLPLANE-2241](https://issues.redhat.com/browse/CNTRLPLANE-2241): Conditionally add the KMS plugin volume mount to the kube-apiserver container [#2015](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2015)
* [CNTRLPLANE-2563](https://issues.redhat.com/browse/CNTRLPLANE-2563): update wording for major upgrades [#2010](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2010)
* [CNTRLPLANE-2648](https://issues.redhat.com/browse/CNTRLPLANE-2648): Migrating user_cors_test to OTE [#2011](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2011)
* [CNTRLPLANE-2247](https://issues.redhat.com/browse/CNTRLPLANE-2247): Add empty KMS encryption test case for CI job validation [#2014](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2014)
* [CNTRLPLANE-2585](https://issues.redhat.com/browse/CNTRLPLANE-2585): Migrating user_client_ca_test to ginkgo [#2008](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2008)
* [OCPBUGS-65807](https://issues.redhat.com/browse/OCPBUGS-65807): SCC: allow image volume type for all SCCs [#1968](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1968)
* [CNTRLPLANE-2492](https://issues.redhat.com/browse/CNTRLPLANE-2492): Migrating user_certs_test to ote [#2005](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2005)
* NO-JIRA:Refactor serviceaccountissuer ginkgo test [#2002](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2002)
* NO-JIRA: clean up the OWNER files [#2001](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2001)
* NO-JIRA: Add API server stabilization wait to serviceaccountissuer tests [#1997](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1997)
* [OCPBUGS-62422](https://issues.redhat.com/browse/OCPBUGS-62422): deps: Update library-go to update pruner [#1994](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1994)
* NO-JIRA: ote: a small cleanup [#1995](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1995)
* [CNTRLPLANE-2286](https://issues.redhat.com/browse/CNTRLPLANE-2286): Migrating serviceaccountissuer test to ote [#1992](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1992)
* [CNTRLPLANE-2280](https://issues.redhat.com/browse/CNTRLPLANE-2280): Migrating deprecated_api_test to ote [#1990](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1990)
* [CNTRLPLANE-2281](https://issues.redhat.com/browse/CNTRLPLANE-2281): Migrating operator_test to ote [#1991](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1991)
* [OCPBUGS-70323](https://issues.redhat.com/browse/OCPBUGS-70323): bump library-go [#1986](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1986)
* [OCPBUGS-69758](https://issues.redhat.com/browse/OCPBUGS-69758): CNTRLPLANE-2222:Migrate go test cert-rotation-tests.go to OTE [#1983](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1983)
* [CNTRLPLANE-2158](https://issues.redhat.com/browse/CNTRLPLANE-2158): Migrating TestTokenRequestAndReview to ginkgo [#1978](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1978)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/33061a03e93d8000e7514fccabadf8cfb9d185c6...ebd723168d8bac16ce678a01c3ea7a7467030169)
### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/e2d54f2da0346309b329c34552d9896476683fc8)
* [CNTRLPLANE-3211](https://issues.redhat.com/browse/CNTRLPLANE-3211): enable configurable PKI for managed certificate rotation [#925](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/925)
* [OCPBUGS-23366](https://issues.redhat.com/browse/OCPBUGS-23366): bindata: Import configmap-csr-controller-ca.yaml from KAS-O [#918](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/918)
* [CNTRLPLANE-2623](https://issues.redhat.com/browse/CNTRLPLANE-2623): Restart operator when TLS config changes [#915](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/915)
* [OCPBUGS-65626](https://issues.redhat.com/browse/OCPBUGS-65626): update library-go to latest [#905](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/905)
* [MON-4503](https://issues.redhat.com/browse/MON-4503): Migrate Prometheus targets discovering from Endpoints to EndpointSlices [#907](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/907)
* [OCPSTRAT-2728](https://issues.redhat.com/browse/OCPSTRAT-2728): Rebase 1.35 [#902](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/902)
* [OCPBUGS-74023](https://issues.redhat.com/browse/OCPBUGS-74023): Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.22 [#903](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/903)
* [CORS-4220](https://issues.redhat.com/browse/CORS-4220): pass dualstack cluster cidrs as an comma-separated list argument [#889](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/889)
* [OCPBUGS-69964](https://issues.redhat.com/browse/OCPBUGS-69964): Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.22 [#901](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/901)
* [OCPBUGS-62422](https://issues.redhat.com/browse/OCPBUGS-62422): dep: Update library-go to update pruner [#895](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/895)
* [OCPBUGS-60568](https://issues.redhat.com/browse/OCPBUGS-60568): Use BoundServceAccountTokenVolume dy default [#858](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/858)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/395de96705749de9c6a5f25747b9d5c3d5f65a8f...e2d54f2da0346309b329c34552d9896476683fc8)
### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/b80850a15da8485c52c486de30cec79600782206)
* [CNTRLPLANE-3219](https://issues.redhat.com/browse/CNTRLPLANE-3219): vendor: bump library-go, api, client-go for configurable PKI [#636](https://github.com/openshift/cluster-kube-scheduler-operator/pull/636)
* [CNTRLPLANE-2756](https://issues.redhat.com/browse/CNTRLPLANE-2756): Add operator and operand network policies [#629](https://github.com/openshift/cluster-kube-scheduler-operator/pull/629)
* [CNTRLPLANE-2810](https://issues.redhat.com/browse/CNTRLPLANE-2810): Restart operator when TLS config changes [#617](https://github.com/openshift/cluster-kube-scheduler-operator/pull/617)
* [OCPBUGS-65626](https://issues.redhat.com/browse/OCPBUGS-65626): update library go to latest [#610](https://github.com/openshift/cluster-kube-scheduler-operator/pull/610)
* [MON-4504](https://issues.redhat.com/browse/MON-4504): Migrate Prometheus targets discovering from Endpoints to EndpointSlices [#614](https://github.com/openshift/cluster-kube-scheduler-operator/pull/614)
* [OCPBUGS-70046](https://issues.redhat.com/browse/OCPBUGS-70046): Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART for 4.22 [#592](https://github.com/openshift/cluster-kube-scheduler-operator/pull/592)
* [OCPSTRAT-2728](https://issues.redhat.com/browse/OCPSTRAT-2728): Rebase 1.35 [#602](https://github.com/openshift/cluster-kube-scheduler-operator/pull/602)
* [CNTRLPLANE-2843](https://issues.redhat.com/browse/CNTRLPLANE-2843): chore: update OWNERS [#618](https://github.com/openshift/cluster-kube-scheduler-operator/pull/618)
* [CNTRLPLANE-2649](https://issues.redhat.com/browse/CNTRLPLANE-2649): Add 30-minute timeout to preferred host e2e test [#616](https://github.com/openshift/cluster-kube-scheduler-operator/pull/616)
* [CNTRLPLANE-2649](https://issues.redhat.com/browse/CNTRLPLANE-2649): Migrate to Ginkgo-based e2e serial and parallel test suite [#611](https://github.com/openshift/cluster-kube-scheduler-operator/pull/611)
* [CNTRLPLANE-2649](https://issues.redhat.com/browse/CNTRLPLANE-2649): OTE infrastructure [#608](https://github.com/openshift/cluster-kube-scheduler-operator/pull/608)
* [OCPBUGS-65941](https://issues.redhat.com/browse/OCPBUGS-65941): Add OPERATOR_IMAGE_VERSION to recovery container [#600](https://github.com/openshift/cluster-kube-scheduler-operator/pull/600)
* NO-JIRA: pkg/operator: Remove staleConditions controller [#597](https://github.com/openshift/cluster-kube-scheduler-operator/pull/597)
* NO-JIRA: pkg/operator: Fix wrong ClusterOperator name [#596](https://github.com/openshift/cluster-kube-scheduler-operator/pull/596)
* no-jira: test(TargetConfigController): exercise --tls-cipher-suites and --tls-min-version injection [#595](https://github.com/openshift/cluster-kube-scheduler-operator/pull/595)
* [OCPBUGS-62422](https://issues.redhat.com/browse/OCPBUGS-62422): deps: Update library-go to update pruner [#593](https://github.com/openshift/cluster-kube-scheduler-operator/pull/593)
* no-jira: refactor(pkg/operator/targetconfigcontroller): code deduplication and improvements [#594](https://github.com/openshift/cluster-kube-scheduler-operator/pull/594)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/4f59ea50a588e9afa714e30e7502eca8b570751b...b80850a15da8485c52c486de30cec79600782206)
### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/e4e983adfde0ccf999efca551fc07b9e28562a10)
* [CNTRLPLANE-3055](https://issues.redhat.com/browse/CNTRLPLANE-3055): Migrate go standard casee to ote [#156](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/156)
* [CNTRLPLANE-2706](https://issues.redhat.com/browse/CNTRLPLANE-2706): add network policy e2e tests for operator and operand [#151](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/151)
* [OCPBUGS-65984](https://issues.redhat.com/browse/OCPBUGS-65984): Revert TRT-2577: Revert #139 "OCPBUGS-65984: scale migrator deployment" [#149](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/149)
* [OCPBUGS-74038](https://issues.redhat.com/browse/OCPBUGS-74038): Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.22 [#137](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/137)
* [TRT-2577](https://issues.redhat.com/browse/TRT-2577): Revert #139 "OCPBUGS-65984: scale migrator deployment" [#148](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/148)
* [OCPBUGS-65984](https://issues.redhat.com/browse/OCPBUGS-65984): scale migrator deployment [#139](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/139)
* NO-JIRA: OWNERS: remove engineers who have left Red Hat [#147](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/147)
* [OCPBUGS-65984](https://issues.redhat.com/browse/OCPBUGS-65984): Prevent AvailableReplicas from dropping to 0 during deployment rollout [#138](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/138)
* [OCPBUGS-70004](https://issues.redhat.com/browse/OCPBUGS-70004): Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.22 [#136](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/136)
* [OCPBUGS-65984](https://issues.redhat.com/browse/OCPBUGS-65984): Prevent AvailableReplicas from dropping to 0 during deployment rollout [#135](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/135)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/8a42beebd580bd2e241aa6d93860c09e907f2407...e4e983adfde0ccf999efca551fc07b9e28562a10)
### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/a9edd695aca56fb58e739b774670a01428360dd8)
* [OCPCLOUD-3286](https://issues.redhat.com/browse/OCPCLOUD-3286): Bump k8s v1.35, go 1.25 [#295](https://github.com/openshift/cluster-machine-approver/pull/295)
* Revert "OCPCLOUD-3347: tls: use centralized TLS profile" [#291](https://github.com/openshift/cluster-machine-approver/pull/291)
* [OCPCLOUD-3347](https://issues.redhat.com/browse/OCPCLOUD-3347): tls: use centralized TLS profile [#286](https://github.com/openshift/cluster-machine-approver/pull/286)
* [OCPBUGS-69815](https://issues.redhat.com/browse/OCPBUGS-69815): Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.22 [#289](https://github.com/openshift/cluster-machine-approver/pull/289)
* [MON-4476](https://issues.redhat.com/browse/MON-4476): chore: add permissions on endpointslice to Prometheus Role and use serviceDiscoveryRole: EndpointSlice in ServiceMonitors [#288](https://github.com/openshift/cluster-machine-approver/pull/288)
* NO-JIRA: Fix expired test certificate in csr_check_test.go [#287](https://github.com/openshift/cluster-machine-approver/pull/287)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/d864813cd3ab01c0f975b2bf41e9046948f0afa1...a9edd695aca56fb58e739b774670a01428360dd8)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/f6a7969c5c070e4deb6136c3561af60ab44780e1)
* [MON-4543](https://issues.redhat.com/browse/MON-4543), [OPNET-765](https://issues.redhat.com/browse/OPNET-765): Add kubernetes-nmstate telemetry metrics to allowlist [#2855](https://github.com/openshift/cluster-monitoring-operator/pull/2855)
* [OCPBUGS-74645](https://issues.redhat.com/browse/OCPBUGS-74645): delay alert dispatch in Alertmanager [#2848](https://github.com/openshift/cluster-monitoring-operator/pull/2848)
* [OCPBUGS-81554](https://issues.redhat.com/browse/OCPBUGS-81554): CVE-2026-33186 - bump google.golang.org/grpc to v1.79.3 [#2872](https://github.com/openshift/cluster-monitoring-operator/pull/2872)
* NO-ISSUE: exclude hack/tools/vendor from shellcheck [#2873](https://github.com/openshift/cluster-monitoring-operator/pull/2873)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2865](https://github.com/openshift/cluster-monitoring-operator/pull/2865)
* [OCPBUGS-81159](https://issues.redhat.com/browse/OCPBUGS-81159): reject invalid collection profile in webhook [#2860](https://github.com/openshift/cluster-monitoring-operator/pull/2860)
* NO-ISSUE: [bot] Update jsonnet dependencies [#2861](https://github.com/openshift/cluster-monitoring-operator/pull/2861)
* [MON-4481](https://issues.redhat.com/browse/MON-4481), [MON-4482](https://issues.redhat.com/browse/MON-4482): set minimum TLS version for Thanos sidecars [#2859](https://github.com/openshift/cluster-monitoring-operator/pull/2859)
* NO-JIRA: update jsonnet dependencies [#2858](https://github.com/openshift/cluster-monitoring-operator/pull/2858)
* [OCPBUGS-78976](https://issues.redhat.com/browse/OCPBUGS-78976): configure repair policy to 'evict' [#2856](https://github.com/openshift/cluster-monitoring-operator/pull/2856)
* [MON-4542](https://issues.redhat.com/browse/MON-4542): update Prometheus operator CRDS to v0.90.0 [#2854](https://github.com/openshift/cluster-monitoring-operator/pull/2854)
* NO-JIRA: update github.com/openshift/library-go [#2852](https://github.com/openshift/cluster-monitoring-operator/pull/2852)
* NO-JIRA: change ClusterRolefailed to ClusterRole failed [#2853](https://github.com/openshift/cluster-monitoring-operator/pull/2853)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2857](https://github.com/openshift/cluster-monitoring-operator/pull/2857)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2851](https://github.com/openshift/cluster-monitoring-operator/pull/2851)
* NO-JIRA: add unit tests for admission webhook's TLS configuration [#2850](https://github.com/openshift/cluster-monitoring-operator/pull/2850)
* [MON-4479](https://issues.redhat.com/browse/MON-4479): use TLS profile to configure CMO server [#2841](https://github.com/openshift/cluster-monitoring-operator/pull/2841)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2849](https://github.com/openshift/cluster-monitoring-operator/pull/2849)
* [MON-4535](https://issues.redhat.com/browse/MON-4535): Add .coderabbit.yaml to reduce review noise [#2845](https://github.com/openshift/cluster-monitoring-operator/pull/2845)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2847](https://github.com/openshift/cluster-monitoring-operator/pull/2847)
* [OCPBUGS-48578](https://issues.redhat.com/browse/OCPBUGS-48578): chore(metrics-server): prefer control-plane nodes and tolerate their taints [#2801](https://github.com/openshift/cluster-monitoring-operator/pull/2801)
* [OCPBUGS-78221](https://issues.redhat.com/browse/OCPBUGS-78221): fix return value format [#2846](https://github.com/openshift/cluster-monitoring-operator/pull/2846)
* NO-JIRA: fix wrong string formatter in tests [#2839](https://github.com/openshift/cluster-monitoring-operator/pull/2839)
* NO-ISSUE: fix typo [#2837](https://github.com/openshift/cluster-monitoring-operator/pull/2837)
* [OCPBUGS-77543](https://issues.redhat.com/browse/OCPBUGS-77543): Updating cluster-monitoring-operator-container image to be consistent with ART for 4.22 [#2836](https://github.com/openshift/cluster-monitoring-operator/pull/2836)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2830](https://github.com/openshift/cluster-monitoring-operator/pull/2830)
* [MON-4533](https://issues.redhat.com/browse/MON-4533): Bump prometheus-operator to v0.89.0 [#2822](https://github.com/openshift/cluster-monitoring-operator/pull/2822)
* [OCPBUGS-74524](https://issues.redhat.com/browse/OCPBUGS-74524): Remove MetricsCollectionProfiles feature-gate [#2812](https://github.com/openshift/cluster-monitoring-operator/pull/2812)
* [MON-4494](https://issues.redhat.com/browse/MON-4494): add kubernetes-mcp-server metrics to allowed list [#2818](https://github.com/openshift/cluster-monitoring-operator/pull/2818)
* [MON-4491](https://issues.redhat.com/browse/MON-4491): Implement Logic for User Defined [#2807](https://github.com/openshift/cluster-monitoring-operator/pull/2807)
* [OCPBUGS-61262](https://issues.redhat.com/browse/OCPBUGS-61262): AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change [#2820](https://github.com/openshift/cluster-monitoring-operator/pull/2820)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2800](https://github.com/openshift/cluster-monitoring-operator/pull/2800)
* [OCPBUGS-73957](https://issues.redhat.com/browse/OCPBUGS-73957): Updating cluster-monitoring-operator-container image to be consistent with ART for 4.22 [#2790](https://github.com/openshift/cluster-monitoring-operator/pull/2790)
* NO-ISSUE: test/e2e: add Func suffix to assertion helpers for consistency [#2803](https://github.com/openshift/cluster-monitoring-operator/pull/2803)
* [OCPBUGS-74673](https://issues.redhat.com/browse/OCPBUGS-74673): Fix NodeRAIDDegraded & NodeRAIDDiskFailure alerts [#2799](https://github.com/openshift/cluster-monitoring-operator/pull/2799)
* [OCPBUGS-69397](https://issues.redhat.com/browse/OCPBUGS-69397): Move console control plane health queries to their own… [#2778](https://github.com/openshift/cluster-monitoring-operator/pull/2778)
* [OCPBUGS-74347](https://issues.redhat.com/browse/OCPBUGS-74347): config: add bond device to default node-exporter ignore list [#2806](https://github.com/openshift/cluster-monitoring-operator/pull/2806)
* NO-ISSUE: merge case 67008,68958 to node-exporter e2e test [#2788](https://github.com/openshift/cluster-monitoring-operator/pull/2788)
* NO-ISSUE: test: TestUserWorkloadWithAlertmanager|TestNetworkPolicy: fix a no-op check [#2802](https://github.com/openshift/cluster-monitoring-operator/pull/2802)
* [OCPBUGS-67162](https://issues.redhat.com/browse/OCPBUGS-67162): update expr for AlertmanagerClusterFailedToSendAlerts to exclude value 0 [#2796](https://github.com/openshift/cluster-monitoring-operator/pull/2796)
* NO-JIRA: Upgrade golangci-lint from v1 to v2 [#2789](https://github.com/openshift/cluster-monitoring-operator/pull/2789)
* [OCPBUGS-66069](https://issues.redhat.com/browse/OCPBUGS-66069): Include `kube_pod_labels` in minimal profile [#2777](https://github.com/openshift/cluster-monitoring-operator/pull/2777)
* [MON-4470](https://issues.redhat.com/browse/MON-4470): ship collector:node_scrape_collector_success:avg to Telemetry [#2794](https://github.com/openshift/cluster-monitoring-operator/pull/2794)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2791](https://github.com/openshift/cluster-monitoring-operator/pull/2791)
* [OCPBUGS-66180](https://issues.redhat.com/browse/OCPBUGS-66180): create networkpolicy settings for user workload monitoring [#2765](https://github.com/openshift/cluster-monitoring-operator/pull/2765)
* NO-ISSUE: move endpointslice RBAC to Role [#2786](https://github.com/openshift/cluster-monitoring-operator/pull/2786)
* [MON-4466](https://issues.redhat.com/browse/MON-4466): enable ethtool collector [#2779](https://github.com/openshift/cluster-monitoring-operator/pull/2779)
* NO-ISSUE: add app.kubernetes.io/part-of=openshift-monitoring label to thanos-ruler pod [#2787](https://github.com/openshift/cluster-monitoring-operator/pull/2787)
* [MON-4343](https://issues.redhat.com/browse/MON-4343): Reapply "MON-4343: Cleanup deprecate pa config" [#2782](https://github.com/openshift/cluster-monitoring-operator/pull/2782)
* NO-ISSUE: remove test case 74734 [#2785](https://github.com/openshift/cluster-monitoring-operator/pull/2785)
* [OCPBUGS-61088](https://issues.redhat.com/browse/OCPBUGS-61088): revert PR #2766 [#2769](https://github.com/openshift/cluster-monitoring-operator/pull/2769)
* [OCPBUGS-69733](https://issues.redhat.com/browse/OCPBUGS-69733): Updating cluster-monitoring-operator-container image to be consistent with ART for 4.22 [#2781](https://github.com/openshift/cluster-monitoring-operator/pull/2781)
* [MON-4406](https://issues.redhat.com/browse/MON-4406): watch ClusterMonitoring config resource [#2770](https://github.com/openshift/cluster-monitoring-operator/pull/2770)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2780](https://github.com/openshift/cluster-monitoring-operator/pull/2780)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/fa0bed2be659cad3dd792ef310375773afeb72cd...f6a7969c5c070e4deb6136c3561af60ab44780e1)
### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/bc5af87f8957262a504b225591593c92db1c8bc2)
* [CORENET-6543](https://issues.redhat.com/browse/CORENET-6543): Align VTEP CRD additionalPrinterColumns with upstream [#2957](https://github.com/openshift/cluster-network-operator/pull/2957)
* [CNF-21001](https://issues.redhat.com/browse/CNF-21001): multus: MultiNetworkPolicy nftables [#2883](https://github.com/openshift/cluster-network-operator/pull/2883)
* [CORENET-6816](https://issues.redhat.com/browse/CORENET-6816): Add NetworkPolicies for CNO and its operands [#2892](https://github.com/openshift/cluster-network-operator/pull/2892)
* [CORENET-6933](https://issues.redhat.com/browse/CORENET-6933): Update VTEPs/CUDN APIs [#2952](https://github.com/openshift/cluster-network-operator/pull/2952)
* [OCPBUGS-78974](https://issues.redhat.com/browse/OCPBUGS-78974): Fix ManagementState being reset on operator restart [#2942](https://github.com/openshift/cluster-network-operator/pull/2942)
* [CORENET-6613](https://issues.redhat.com/browse/CORENET-6613): `ClusterNetworkConnect` DevPreview FG [#2880](https://github.com/openshift/cluster-network-operator/pull/2880)
* no-jira: Update OWNERS_ALIASES to include myself + "taanyas" and "marty-power" [#2908](https://github.com/openshift/cluster-network-operator/pull/2908)
* [CORENET-6813](https://issues.redhat.com/browse/CORENET-6813): Add config override for allow-icmp-network-policy [#2920](https://github.com/openshift/cluster-network-operator/pull/2920)
* [CORENET-6100](https://issues.redhat.com/browse/CORENET-6100): Add support for no-overlay mode [#2844](https://github.com/openshift/cluster-network-operator/pull/2844)
* [CORENET-6561](https://issues.redhat.com/browse/CORENET-6561): CNO Rebase k8s to 1.35.0 [#2887](https://github.com/openshift/cluster-network-operator/pull/2887)
* [OCPBUGS-78731](https://issues.redhat.com/browse/OCPBUGS-78731): Revert "NVIDIA-554: DPU-host mode: use ConfigMap for OVN feature enablement instead of per-node script gating" [#2938](https://github.com/openshift/cluster-network-operator/pull/2938)
* [OCPBUGS-77015](https://issues.redhat.com/browse/OCPBUGS-77015): wait for patch port to apply drop garp flows [#2910](https://github.com/openshift/cluster-network-operator/pull/2910)
* [OCPBUGS-70016](https://issues.redhat.com/browse/OCPBUGS-70016): Updating cluster-network-operator-container image to be consistent with ART for 4.22 [#2863](https://github.com/openshift/cluster-network-operator/pull/2863)
* [OCPBUGS-65633](https://issues.redhat.com/browse/OCPBUGS-65633): add network-check-target + networking-console-plugin service accounts [#2868](https://github.com/openshift/cluster-network-operator/pull/2868)
* [CORENET-6871](https://issues.redhat.com/browse/CORENET-6871): Handle zero-worker HyperShift clusters in daemonset rollout [#2897](https://github.com/openshift/cluster-network-operator/pull/2897)
* [NVIDIA-554](https://issues.redhat.com/browse/NVIDIA-554): DPU-host mode: use ConfigMap for OVN feature enablement instead of per-node script gating [#2907](https://github.com/openshift/cluster-network-operator/pull/2907)
* [OCPBUGS-76500](https://issues.redhat.com/browse/OCPBUGS-76500): Add config override for openflow-probe [#2916](https://github.com/openshift/cluster-network-operator/pull/2916)
* [OCPBUGS-60670](https://issues.redhat.com/browse/OCPBUGS-60670): Add ValidatingAdmissionPolicy for EgressIP [#2837](https://github.com/openshift/cluster-network-operator/pull/2837)
* [CORENET-6605](https://issues.redhat.com/browse/CORENET-6605): fix more transient error condtions caused Degraded [#2896](https://github.com/openshift/cluster-network-operator/pull/2896)
* [CORENET-6417](https://issues.redhat.com/browse/CORENET-6417): Drop remaining openshift-sdn code [#2882](https://github.com/openshift/cluster-network-operator/pull/2882)
* [CORENET-6610](https://issues.redhat.com/browse/CORENET-6610): Add EVPN APIs [#2881](https://github.com/openshift/cluster-network-operator/pull/2881)
* [OCPBUGS-60077](https://issues.redhat.com/browse/OCPBUGS-60077): Silence ovnkube-lib.sh to avoid mass of logs to collectors [#2761](https://github.com/openshift/cluster-network-operator/pull/2761)
* [CNF-20883](https://issues.redhat.com/browse/CNF-20883): Align templates frrk8s [#2874](https://github.com/openshift/cluster-network-operator/pull/2874)
* [OCPBUGS-74401](https://issues.redhat.com/browse/OCPBUGS-74401): Remove duplicated openssl parameter [#2889](https://github.com/openshift/cluster-network-operator/pull/2889)
* NO-JIRA: Remove references to AdminNetworkPolicy, NetworkSegmentation, RouteAdvertisements and PreconfiguredUDNAddresses featuregates [#2891](https://github.com/openshift/cluster-network-operator/pull/2891)
* [CORENET-6561](https://issues.redhat.com/browse/CORENET-6561): Update the golangci-lint configuration for v2 compatibility and fix all resulting lint issues. [#2893](https://github.com/openshift/cluster-network-operator/pull/2893)
* [CORENET-6605](https://issues.redhat.com/browse/CORENET-6605): avoid flapping Degraded on transient failures [#2862](https://github.com/openshift/cluster-network-operator/pull/2862)
* [CORENET-6416](https://issues.redhat.com/browse/CORENET-6416): drop networkType migration support [#2456](https://github.com/openshift/cluster-network-operator/pull/2456)
* [CNF-21001](https://issues.redhat.com/browse/CNF-21001): mnp: Set `hostname` using downward API [#2840](https://github.com/openshift/cluster-network-operator/pull/2840)
* [CORS-4180](https://issues.redhat.com/browse/CORS-4180): Allow AWS and Azure as platforms that support dual-stack on Day-0 [#2804](https://github.com/openshift/cluster-network-operator/pull/2804)
* NO-JIRA: set ovnkube-cluster-manager as default container [#2798](https://github.com/openshift/cluster-network-operator/pull/2798)
* [OCPBUGS-72411](https://issues.redhat.com/browse/OCPBUGS-72411): fix(hypershift): use net.JoinHostPort for URL construction [#2871](https://github.com/openshift/cluster-network-operator/pull/2871)
* [OCPBUGS-66417](https://issues.redhat.com/browse/OCPBUGS-66417): Add kubevirt platform to dual-stack supported platforms [#2849](https://github.com/openshift/cluster-network-operator/pull/2849)
* [OCPBUGS-49662](https://issues.redhat.com/browse/OCPBUGS-49662): Prevent resetting masquerade subnet [#2641](https://github.com/openshift/cluster-network-operator/pull/2641)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/05d65e63fd668e97c1b7f45837ba66075f478d6d...bc5af87f8957262a504b225591593c92db1c8bc2)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/3d98f7ee7fe0651d182b8a780956512eb407a963)
* NO-JIRA: Bump ghw dependency [#1492](https://github.com/openshift/cluster-node-tuning-operator/pull/1492)
* NO-JIRA: E2E: move dra resource test to reboot tests directory [#1486](https://github.com/openshift/cluster-node-tuning-operator/pull/1486)
* [PSAP-2185](https://issues.redhat.com/browse/PSAP-2185): Support centralized TLS security profile configuration [#1483](https://github.com/openshift/cluster-node-tuning-operator/pull/1483)
* [CNF-18941](https://issues.redhat.com/browse/CNF-18941): e2e: PP: cover ExecCPUAffinity support in tests [#1432](https://github.com/openshift/cluster-node-tuning-operator/pull/1432)
* [CNF-20404](https://issues.redhat.com/browse/CNF-20404): DRA: disable Kubelet resources and topology managers [#1445](https://github.com/openshift/cluster-node-tuning-operator/pull/1445)
* [OCPBUGS-78470](https://issues.redhat.com/browse/OCPBUGS-78470): e2e: fixed flaky test_id:32646 CPU load balancing on cgroupv1 [#1457](https://github.com/openshift/cluster-node-tuning-operator/pull/1457)
* [PSAP-2229](https://issues.redhat.com/browse/PSAP-2229): Prevent multiple reboots via MachineConfig creation/update sync [#1474](https://github.com/openshift/cluster-node-tuning-operator/pull/1474)
* NO-JIRA: workloadhints: use IsVM to skip BM-only tests [#1478](https://github.com/openshift/cluster-node-tuning-operator/pull/1478)
* [OCPBUGS-77200](https://issues.redhat.com/browse/OCPBUGS-77200): Remove hardcoded nf_conntrack_hashsize from performance profile tuned configuration [#1477](https://github.com/openshift/cluster-node-tuning-operator/pull/1477)
* [OCPBUGS-62702](https://issues.redhat.com/browse/OCPBUGS-62702): AA: latency-e2e: skip tests on HT-disabled systems [#1386](https://github.com/openshift/cluster-node-tuning-operator/pull/1386)
* [OCPBUGS-77377](https://issues.redhat.com/browse/OCPBUGS-77377): E2E: Add test case to check Infrastructure pods affinity [#1470](https://github.com/openshift/cluster-node-tuning-operator/pull/1470)
* NO-JIRA: Eliminate expensive and unnecessary MachineConfig updates [#1473](https://github.com/openshift/cluster-node-tuning-operator/pull/1473)
* NO-JIRA: Bump Kubernetes, OpenShift and other dependencies [#1475](https://github.com/openshift/cluster-node-tuning-operator/pull/1475)
* [OCPBUGS-74027](https://issues.redhat.com/browse/OCPBUGS-74027): AA: E2E: LLC: Add tests related to odd cpus [#1458](https://github.com/openshift/cluster-node-tuning-operator/pull/1458)
* [CNF-20755](https://issues.redhat.com/browse/CNF-20755): e2e: Add housekeeping IRQ load balancing tests [#1456](https://github.com/openshift/cluster-node-tuning-operator/pull/1456)
* [CNF-18941](https://issues.redhat.com/browse/CNF-18941): perfprof: enable `exec-cpu-affinity` by default (annotation) [#1426](https://github.com/openshift/cluster-node-tuning-operator/pull/1426)
* NO-JIRA: Make changes for migrating to OTE in Dockerfile [#1453](https://github.com/openshift/cluster-node-tuning-operator/pull/1453)
* [OCPBUGS-62632](https://issues.redhat.com/browse/OCPBUGS-62632): Do not report Progressing=True during cluster scaleup or node reboot [#1447](https://github.com/openshift/cluster-node-tuning-operator/pull/1447)
* NO-JIRA: Bump upstream containerfile to 4.22 [#1452](https://github.com/openshift/cluster-node-tuning-operator/pull/1452)
* [OCPBUGS-62496](https://issues.redhat.com/browse/OCPBUGS-62496): hypershift:e2e:status: check for duplicated configmap status [#1413](https://github.com/openshift/cluster-node-tuning-operator/pull/1413)
* [OCPBUGS-69802](https://issues.redhat.com/browse/OCPBUGS-69802): Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.22 [#1450](https://github.com/openshift/cluster-node-tuning-operator/pull/1450)
* [OCPBUGS-69391](https://issues.redhat.com/browse/OCPBUGS-69391): E2E: Granular IRQ functional test cases [#1441](https://github.com/openshift/cluster-node-tuning-operator/pull/1441)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/0e275839ec18e436487508b729ed7fcfe41e3875...3d98f7ee7fe0651d182b8a780956512eb407a963)
### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/d131450b2645623089b26353a309015c95c8871c)
* [OPRUN-4521](https://issues.redhat.com/browse/OPRUN-4521): handle OCP 4.23/5.0 upgrade boundary [#184](https://github.com/openshift/cluster-olm-operator/pull/184)
* [OCPBUGS-77899](https://issues.redhat.com/browse/OCPBUGS-77899): Fix wait logic to handle NewOLM enabled on Default Feature [#193](https://github.com/openshift/cluster-olm-operator/pull/193)
* NO-ISSUE: remove no-op os.Remove call in TestRenderHelmTemplate [#192](https://github.com/openshift/cluster-olm-operator/pull/192)
* [OCPBUGS-77899](https://issues.redhat.com/browse/OCPBUGS-77899): Wait for operator-controller resources before verifyig [#181](https://github.com/openshift/cluster-olm-operator/pull/181)
* [OPRUN-4518](https://issues.redhat.com/browse/OPRUN-4518): Rename ClusterExtensionRevision to ClusterObjectSet [#191](https://github.com/openshift/cluster-olm-operator/pull/191)
* NO-ISSUE: Add fgiudici as reviewer [#190](https://github.com/openshift/cluster-olm-operator/pull/190)
* NO-ISSUE: return semver conversion errors [#183](https://github.com/openshift/cluster-olm-operator/pull/183)
* [OCPBUGS-81188](https://issues.redhat.com/browse/OCPBUGS-81188): Update grpc and other dependencies [#182](https://github.com/openshift/cluster-olm-operator/pull/182)
* [OPRUN-4502](https://issues.redhat.com/browse/OPRUN-4502): Use FratureGateNewOLMConfigAPI from openshift/api [#180](https://github.com/openshift/cluster-olm-operator/pull/180)
* [OPRUN-4502](https://issues.redhat.com/browse/OPRUN-4502): Add feature-gate for DeploymentConfig [#176](https://github.com/openshift/cluster-olm-operator/pull/176)
* NO-ISSUE: Update to go 1.25.7 [#175](https://github.com/openshift/cluster-olm-operator/pull/175)
* [OCPBUGS-65623](https://issues.redhat.com/browse/OCPBUGS-65623): cluster-olm-operator sets Progressing=True during upgrade [#173](https://github.com/openshift/cluster-olm-operator/pull/173)
* [OPRUN-4230](https://issues.redhat.com/browse/OPRUN-4230), [OPRUN-4440](https://issues.redhat.com/browse/OPRUN-4440): Enable Boxcutter in TPNU [#163](https://github.com/openshift/cluster-olm-operator/pull/163)
* NO-ISSUE: Bump golangci to v2 [#174](https://github.com/openshift/cluster-olm-operator/pull/174)
* NO-ISSUE: Add pedjak as reviewer and approver [#171](https://github.com/openshift/cluster-olm-operator/pull/171)
* [OCPBUGS-65505](https://issues.redhat.com/browse/OCPBUGS-65505): add resources to clusterOperator relatedObjects [#166](https://github.com/openshift/cluster-olm-operator/pull/166)
* [OPRUN-4408](https://issues.redhat.com/browse/OPRUN-4408): Update upgrade message to mention both 4.23 and 5.0 upgrade paths [#164](https://github.com/openshift/cluster-olm-operator/pull/164)
* [OCPBUGS-69807](https://issues.redhat.com/browse/OCPBUGS-69807): Update image locations to be consistent with ART for 4.22 [#158](https://github.com/openshift/cluster-olm-operator/pull/158)
* [OPRUN-4360](https://issues.redhat.com/browse/OPRUN-4360): Remove references to operator-framework/catalogd [#155](https://github.com/openshift/cluster-olm-operator/pull/155)
* [OPRUN-4352](https://issues.redhat.com/browse/OPRUN-4352): Update to golang 1.25/ocp 4.22 [#156](https://github.com/openshift/cluster-olm-operator/pull/156)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/81989478e114b090ec0cfbf9ae7c000f9b876749...d131450b2645623089b26353a309015c95c8871c)
### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/e6a55cd55c867bf9e26e7ec0ba5accc959b0c27c)
* [CNTRLPLANE-2619](https://issues.redhat.com/browse/CNTRLPLANE-2619): Restart operator when TLS config changes [#662](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/662)
* [CNTRLPLANE-2450](https://issues.redhat.com/browse/CNTRLPLANE-2450): bump(k8s.io): 1.35.2 [#669](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/669)
* [CNTRLPLANE-2619](https://issues.redhat.com/browse/CNTRLPLANE-2619): make checkendpoints use apiserver config [#657](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/657)
* NO-JIRA: OWNERS: remove engineers who have left Red Hat [#646](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/646)
* NO-JIRA: Disable WatchList feature gate due to the missing support of Project watch [#667](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/667)
* [CNTRLPLANE-2241](https://issues.redhat.com/browse/CNTRLPLANE-2241): Update library-go to get KMS encryption [#647](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/647)
* NO-JIRA: Create test namespace for KMS migration scenario [#650](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/650)
* [CNTRLPLANE-2247](https://issues.redhat.com/browse/CNTRLPLANE-2247): Adding KMS TestKMSEncryptionOnOff test for OAS [#649](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/649)
* [CNTRLPLANE-2247](https://issues.redhat.com/browse/CNTRLPLANE-2247): Adding KMS TestKMSEncryptionOnOff test for Routes [#644](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/644)
* [CNTRLPLANE-2241](https://issues.redhat.com/browse/CNTRLPLANE-2241): Conditionally add the KMS plugin volume mount to the openshift-apiserver container [#641](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/641)
* [CNTRLPLANE-2247](https://issues.redhat.com/browse/CNTRLPLANE-2247): Add KMS encryption test target [#642](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/642)
* NO-JIRA: update to Kubernetes v1.34.1 [#640](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/640)
* [OCPBUGS-70035](https://issues.redhat.com/browse/OCPBUGS-70035): Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.22 [#635](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/635)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/c2d0127291dfe824d9591d4e37ec319a739d988e...e6a55cd55c867bf9e26e7ec0ba5accc959b0c27c)
### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/e1c3674198c6c1274fd3fd3c3108eb4cade4eb0a)
* [OCPBUGS-81472](https://issues.redhat.com/browse/OCPBUGS-81472): Prevent possibility of running controllers against empty informer caches [#426](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/426)
* [CNTRLPLANE-2620](https://issues.redhat.com/browse/CNTRLPLANE-2620): Restart operator when TLS config changes [#412](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/412)
* [CNTRLPLANE-2769](https://issues.redhat.com/browse/CNTRLPLANE-2769): bump kubernetes dependencies to v1.35 [#415](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/415)
* no-jira: Migrate away from deprecated ioutil [#401](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/401)
* no-jira: refactor: use the configured clock source during startup [#411](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/411)
* [CNTRLPLANE-2620](https://issues.redhat.com/browse/CNTRLPLANE-2620): propagate global tls config to operand [#407](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/407)
* [OCPBUGS-70032](https://issues.redhat.com/browse/OCPBUGS-70032): Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.22 [#404](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/404)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/2617a201bb3607192a9f82faa18384676f611e3c...e1c3674198c6c1274fd3fd3c3108eb4cade4eb0a)
### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/44985a1306411101c84dd5081598fc928b432321)
* [CNTRLPLANE-2769](https://issues.redhat.com/browse/CNTRLPLANE-2769): bump k8s 1.35 [#174](https://github.com/openshift/cluster-policy-controller/pull/174)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/8b775487512fb543bff470ff1042bd3ac31b29be...44985a1306411101c84dd5081598fc928b432321)
### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/eeac6ba8ddbe5cc6d3a403293581648affdf6566)
* [OCPBUGS-77919](https://issues.redhat.com/browse/OCPBUGS-77919): Periodic sync of OKD samples [#666](https://github.com/openshift/cluster-samples-operator/pull/666)
* [MON-4508](https://issues.redhat.com/browse/MON-4508): Migrate Prometheus targets discovering from Endpoints to EndpointSlices [#673](https://github.com/openshift/cluster-samples-operator/pull/673)
* [OCPBUGS-77918](https://issues.redhat.com/browse/OCPBUGS-77918): Periodic sync of supported OCP samples [#667](https://github.com/openshift/cluster-samples-operator/pull/667)
* [OCPBUGS-77879](https://issues.redhat.com/browse/OCPBUGS-77879): update kubernetes api to v0.35.2 [#676](https://github.com/openshift/cluster-samples-operator/pull/676)
* [OCPBUGS-77678](https://issues.redhat.com/browse/OCPBUGS-77678): Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.22 [#675](https://github.com/openshift/cluster-samples-operator/pull/675)
* [OCPBUGS-74024](https://issues.redhat.com/browse/OCPBUGS-74024): Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.22 [#672](https://github.com/openshift/cluster-samples-operator/pull/672)
* [OCPBUGS-69966](https://issues.redhat.com/browse/OCPBUGS-69966): Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.22 [#671](https://github.com/openshift/cluster-samples-operator/pull/671)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/11ed1942dbbf7a8334862b3d598a967e9b92aa77...eeac6ba8ddbe5cc6d3a403293581648affdf6566)
### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/8dfdf2ef3310358f3559a5481df43b98b2294791)
* NO-JIRA: Add initial Agent Guide [#682](https://github.com/openshift/cluster-storage-operator/pull/682)
* [STOR-2770](https://issues.redhat.com/browse/STOR-2770): Mount metrics certs of azure-disk and azure-file CSI driver operator for Hypershift [#686](https://github.com/openshift/cluster-storage-operator/pull/686)
* [STOR-2762](https://issues.redhat.com/browse/STOR-2762): Bump all deps for 4.22 [#684](https://github.com/openshift/cluster-storage-operator/pull/684)
* [OCPBUGS-74232](https://issues.redhat.com/browse/OCPBUGS-74232): volume-data-source-validator should run on master nodes [#659](https://github.com/openshift/cluster-storage-operator/pull/659)
* [OCPBUGS-78291](https://issues.redhat.com/browse/OCPBUGS-78291): Allow azure-disk operator to read VolumeAttributeClasses [#683](https://github.com/openshift/cluster-storage-operator/pull/683)
* [MON-4509](https://issues.redhat.com/browse/MON-4509): Migrate Prometheus targets discovering from Endpoints to EndpointSlices [#665](https://github.com/openshift/cluster-storage-operator/pull/665)
* [MON-4496](https://issues.redhat.com/browse/MON-4496): metrics: migrate Prometheus SD from Endpoints to EndpointSlices [#668](https://github.com/openshift/cluster-storage-operator/pull/668)
* NO-JIRA: Add a comment to sync AWS EBS IAM role into HyperShift [#676](https://github.com/openshift/cluster-storage-operator/pull/676)
* [STOR-2758](https://issues.redhat.com/browse/STOR-2758): Update rbac from provisioner rebase [#674](https://github.com/openshift/cluster-storage-operator/pull/674)
* [OCPBUGS-77686](https://issues.redhat.com/browse/OCPBUGS-77686): Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.22 [#671](https://github.com/openshift/cluster-storage-operator/pull/671)
* [TRT-2542](https://issues.redhat.com/browse/TRT-2542): Revert #661 "OCPBUGS-74530: Remove featuregate StoragePerformantSecurityPolicy" [#664](https://github.com/openshift/cluster-storage-operator/pull/664)
* [OCPBUGS-74530](https://issues.redhat.com/browse/OCPBUGS-74530): Remove featuregate StoragePerformantSecurityPolicy [#661](https://github.com/openshift/cluster-storage-operator/pull/661)
* [OCPBUGS-66212](https://issues.redhat.com/browse/OCPBUGS-66212): Remove VSS permissions [#649](https://github.com/openshift/cluster-storage-operator/pull/649)
* [STOR-2523](https://issues.redhat.com/browse/STOR-2523): hypershift: Add desired-version annotation to operand Deployments and use DeploymentVersionController in CSO [#638](https://github.com/openshift/cluster-storage-operator/pull/638)
* [OCPBUGS-60159](https://issues.redhat.com/browse/OCPBUGS-60159): add vsphere permissions for checking if users is authorized to see metrics [#642](https://github.com/openshift/cluster-storage-operator/pull/642)
* [OCPBUGS-69978](https://issues.redhat.com/browse/OCPBUGS-69978): Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.22 [#651](https://github.com/openshift/cluster-storage-operator/pull/651)
* [OCPBUGS-63698](https://issues.redhat.com/browse/OCPBUGS-63698): feat(azure): add HYPERSHIFT_IMAGE env var for token-minter [#643](https://github.com/openshift/cluster-storage-operator/pull/643)
* [OCPBUGS-62634](https://issues.redhat.com/browse/OCPBUGS-62634): Fix deployment controller Progressing=true on node drain [#648](https://github.com/openshift/cluster-storage-operator/pull/648)
* [OCPBUGS-67012](https://issues.redhat.com/browse/OCPBUGS-67012): volume-data-source-validator must use IfNotPresent image pull policy [#650](https://github.com/openshift/cluster-storage-operator/pull/650)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/dc5d5f1f47ce949339f3bced4021f3768ed1c57c...8dfdf2ef3310358f3559a5481df43b98b2294791)
### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/3b5c59cc6461663751bc510b4f9f1954ed8c9b50)
* [OCPNODE-3978](https://issues.redhat.com/browse/OCPNODE-3978): Third run at expanding the default ClusterImagePolicy for openshift component images [#97](https://github.com/openshift/cluster-update-keys/pull/97)
* revert 'OCPNODE-3978: Second run at expanding the default ClusterImagePolicy for openshift component images [#96](https://github.com/openshift/cluster-update-keys/pull/96)
* [OCPNODE-3978](https://issues.redhat.com/browse/OCPNODE-3978): Second run at expanding the default ClusterImagePolicy for openshift component images [#95](https://github.com/openshift/cluster-update-keys/pull/95)
* [TRT-2537](https://issues.redhat.com/browse/TRT-2537): Revert "OCPNODE-3978: Extend the default ClusterImagePolicy for openshift component images" [#94](https://github.com/openshift/cluster-update-keys/pull/94)
* [OCPNODE-3978](https://issues.redhat.com/browse/OCPNODE-3978): Extend the default ClusterImagePolicy for openshift component images [#75](https://github.com/openshift/cluster-update-keys/pull/75)
* [OCPBUGS-70020](https://issues.redhat.com/browse/OCPBUGS-70020): Updating ose-cluster-update-keys-container image to be consistent with ART for 4.22 [#91](https://github.com/openshift/cluster-update-keys/pull/91)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/b3cae8f22b51d9062d0ceb6ac9cf2f7651b4ce8f...3b5c59cc6461663751bc510b4f9f1954ed8c9b50)
### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/e9c1c39e21ec353ff5993d386c42bc1b15063dbf)
* [OTA-1933](https://issues.redhat.com/browse/OTA-1933): pkg/risk: Refactor alerts into a generic update-risk interface [#1367](https://github.com/openshift/cluster-version-operator/pull/1367)
* NO-JIRA: All CVO manifests in payload should be included [#1337](https://github.com/openshift/cluster-version-operator/pull/1337)
* [OTA-1813](https://issues.redhat.com/browse/OTA-1813): Drop a local label on alert-risk e2e [#1363](https://github.com/openshift/cluster-version-operator/pull/1363)
* NO-ISSUE: Add CodeRabbit config with review rules from PR analysis [#1360](https://github.com/openshift/cluster-version-operator/pull/1360)
* NO-JIRA: use scrape class which is more succinct [#1365](https://github.com/openshift/cluster-version-operator/pull/1365)
* [CNTRLPLANE-2777](https://issues.redhat.com/browse/CNTRLPLANE-2777): feat(resource builder): allow to inject tls configuration into annotated config maps [#1322](https://github.com/openshift/cluster-version-operator/pull/1322)
* [OTA-1813](https://issues.redhat.com/browse/OTA-1813): Populate risks from alerts [#1329](https://github.com/openshift/cluster-version-operator/pull/1329)
* [OCPBUGS-78997](https://issues.redhat.com/browse/OCPBUGS-78997): Do not discard ListOptions in waitForPodCompletion. [#1361](https://github.com/openshift/cluster-version-operator/pull/1361)
* [OCPBUGS-65621](https://issues.redhat.com/browse/OCPBUGS-65621): add dedicated service account to crb, cvo and version pod [#1266](https://github.com/openshift/cluster-version-operator/pull/1266)
* NO-JIRA: Add test migration guide for openshift-tests-private to CVO [#1336](https://github.com/openshift/cluster-version-operator/pull/1336)
* NO-JIRA: Try not to block by informing [#1356](https://github.com/openshift/cluster-version-operator/pull/1356)
* [OCPSTRAT-2876](https://issues.redhat.com/browse/OCPSTRAT-2876): Allow inclusion/exclusion of manifests based on the OCP major version [#1282](https://github.com/openshift/cluster-version-operator/pull/1282)
* [TRT-2581](https://issues.redhat.com/browse/TRT-2581): Revert "NO-ISSUE: OTA-1605 Automate OCP-42543" [#1353](https://github.com/openshift/cluster-version-operator/pull/1353)
* NO-ISSUE: OTA-1605 Automate OCP-42543 [#1309](https://github.com/openshift/cluster-version-operator/pull/1309)
* [CNTRLPLANE-2777](https://issues.redhat.com/browse/CNTRLPLANE-2777): refactor(lib/resourcebuilder): generate interface for client instead of their specific types [#1344](https://github.com/openshift/cluster-version-operator/pull/1344)
* [OTA-1546](https://issues.redhat.com/browse/OTA-1546): Evaluate conditional updates if accept risks change [#1348](https://github.com/openshift/cluster-version-operator/pull/1348)
* [OTA-1546](https://issues.redhat.com/browse/OTA-1546): Skip an accept-risk case on network-restricted environment [#1332](https://github.com/openshift/cluster-version-operator/pull/1332)
* NO-ISSUE: Update fake clientsets to NewClientset [#1340](https://github.com/openshift/cluster-version-operator/pull/1340)
* [TRT-2569](https://issues.redhat.com/browse/TRT-2569): (fix) hypershift-e2e-aks and hypershift-e2e-aws failing with CVO bootstrap deadlock in ci amd64 payload [#1342](https://github.com/openshift/cluster-version-operator/pull/1342)
* [OCPBUGS-78061](https://issues.redhat.com/browse/OCPBUGS-78061): Fix invalid ClusterVersion.Spec.DesiredUpdate [#1345](https://github.com/openshift/cluster-version-operator/pull/1345)
* [OTA-1860](https://issues.redhat.com/browse/OTA-1860): Stop blocking patch updates when cluster version overrides are set [#1314](https://github.com/openshift/cluster-version-operator/pull/1314)
* [TRT-2569](https://issues.redhat.com/browse/TRT-2569): Revert "OTA-1546: Add a metric and an alert for conditional risk conditions" [#1339](https://github.com/openshift/cluster-version-operator/pull/1339)
* [OTA-1546](https://issues.redhat.com/browse/OTA-1546): Add a metric and an alert for conditional risk conditions [#1318](https://github.com/openshift/cluster-version-operator/pull/1318)
* [OCPBUGS-77762](https://issues.redhat.com/browse/OCPBUGS-77762): Add an e2e to check the default network polocy [#1334](https://github.com/openshift/cluster-version-operator/pull/1334)
* [OTA-1546](https://issues.redhat.com/browse/OTA-1546): Generate riskConditions in a better way [#1324](https://github.com/openshift/cluster-version-operator/pull/1324)
* NO-JIRA: Allow for risks only desired update [#1335](https://github.com/openshift/cluster-version-operator/pull/1335)
* [OCPBUGS-77762](https://issues.redhat.com/browse/OCPBUGS-77762): install/0000_00_cluster-version-operator_02_networkpolicy: Add inclusion annotations [#1333](https://github.com/openshift/cluster-version-operator/pull/1333)
* NO-JIRA: Use github.com/daixiang0/gci to sort imports [#1330](https://github.com/openshift/cluster-version-operator/pull/1330)
* NO-JIRA: Sort and verify imports [#1328](https://github.com/openshift/cluster-version-operator/pull/1328)
* Revert "TRT-2549: Revert "Add a serial e2e for accept-risks"" [#1323](https://github.com/openshift/cluster-version-operator/pull/1323)
* NO-JIRA: Mention the fauxinnati in the developer documentation [#1308](https://github.com/openshift/cluster-version-operator/pull/1308)
* [OCPBUGS-66898](https://issues.redhat.com/browse/OCPBUGS-66898): Implement mTLS authentication and authorization for CVO metrics endpoint [#1271](https://github.com/openshift/cluster-version-operator/pull/1271)
* [OTA-1861](https://issues.redhat.com/browse/OTA-1861): cmd/cluster-version-operator/render: Add --cluster-version-manifest-path option [#1315](https://github.com/openshift/cluster-version-operator/pull/1315)
* [TRT-2549](https://issues.redhat.com/browse/TRT-2549): Revert "Add a serial e2e for accept-risks" [#1319](https://github.com/openshift/cluster-version-operator/pull/1319)
* [OTA-1546](https://issues.redhat.com/browse/OTA-1546): Add a serial e2e for accept-risks [#1310](https://github.com/openshift/cluster-version-operator/pull/1310)
* NO-JIRA: Add docs about places running e2e tests [#1312](https://github.com/openshift/cluster-version-operator/pull/1312)
* [OCPBUGS-74028](https://issues.redhat.com/browse/OCPBUGS-74028): Updating cluster-version-operator-container image to be consistent with ART for 4.22 [#1296](https://github.com/openshift/cluster-version-operator/pull/1296)
* [OCPSTRAT-2485](https://issues.redhat.com/browse/OCPSTRAT-2485): Introduce feature gate based inclusion/exclusion of manifests [#1273](https://github.com/openshift/cluster-version-operator/pull/1273)
* NO-JIRA: More flexible timeout option for oc-cli [#1311](https://github.com/openshift/cluster-version-operator/pull/1311)
* [OTA-1546](https://issues.redhat.com/browse/OTA-1546): Reconcile cv.spec.desiredUpdate.acceptRisks [#1284](https://github.com/openshift/cluster-version-operator/pull/1284)
* NO-JIRA: Add a serial e2e test [#1306](https://github.com/openshift/cluster-version-operator/pull/1306)
* [TRT-2511](https://issues.redhat.com/browse/TRT-2511): Reapply "OTA-1604: migrate ocp-46922 from otp to cvo repo" [#1301](https://github.com/openshift/cluster-version-operator/pull/1301)
* NO-JIRA: Fix linter issues on dot-imports [#1304](https://github.com/openshift/cluster-version-operator/pull/1304)
* [OTA-1546](https://issues.redhat.com/browse/OTA-1546), [OTA-1833](https://issues.redhat.com/browse/OTA-1833): Add OKD feature set filtering logic, Bump openshift/api [#1302](https://github.com/openshift/cluster-version-operator/pull/1302)
* NO-JIRA: Fix some lint issues [#1299](https://github.com/openshift/cluster-version-operator/pull/1299)
* Revert "OTA-1604: migrate ocp-46922 from otp to cvo repo" [#1297](https://github.com/openshift/cluster-version-operator/pull/1297)
* [OTA-1787](https://issues.redhat.com/browse/OTA-1787): pkg: Update Upgradeable condition to explicitly mention major version updates [#1276](https://github.com/openshift/cluster-version-operator/pull/1276)
* NO-JIRA: hack/build-image.sh: Update Dockerfile reference [#1272](https://github.com/openshift/cluster-version-operator/pull/1272)
* [OCPBUGS-73929](https://issues.redhat.com/browse/OCPBUGS-73929): lib/resourcemerge/core: Reconcile ConfigMap binaryData too [#1294](https://github.com/openshift/cluster-version-operator/pull/1294)
* NO-JIRA: Bump to builder:rhel-9-golang-1.25-openshift-4.22 [#1293](https://github.com/openshift/cluster-version-operator/pull/1293)
* [OTA-1604](https://issues.redhat.com/browse/OTA-1604): migrate ocp-46922 from otp to cvo repo [#1279](https://github.com/openshift/cluster-version-operator/pull/1279)
* NO-JIRA: Introduce oc-cli for e2e tests [#1267](https://github.com/openshift/cluster-version-operator/pull/1267)
* [OTA-1786](https://issues.redhat.com/browse/OTA-1786): pkg/payload/precondition/clusterversion/gianthop: Allow updates to 5.0 [#1275](https://github.com/openshift/cluster-version-operator/pull/1275)
* NO-ISSUE: .claude/commands/update-godocs: New command for Go doc updates [#1278](https://github.com/openshift/cluster-version-operator/pull/1278)
* NO-ISSUE: OTA-1605 Adding descriptions for building the binary and running the tests [#1263](https://github.com/openshift/cluster-version-operator/pull/1263)
* NO-JIRA: Create AGENTS.md file [#1268](https://github.com/openshift/cluster-version-operator/pull/1268)
* [OCPBUGS-17007](https://issues.redhat.com/browse/OCPBUGS-17007): vendor: Update openshift/library-go to get new default TLS configuration [#1270](https://github.com/openshift/cluster-version-operator/pull/1270)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/2e80794d2ab57eff6420e8bb5e882e12f4b6600d...e9c1c39e21ec353ff5993d386c42bc1b15063dbf)
### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/94e41c4c6a5832dfd19750173d6544784ba235ec)
* NO-JIRA: disable automatic coderabbit reviews [#79](https://github.com/openshift/configmap-reload/pull/79)
* [OCPBUGS-77734](https://issues.redhat.com/browse/OCPBUGS-77734): Updating configmap-reload-container image to be consistent with ART for 4.22 [#78](https://github.com/openshift/configmap-reload/pull/78)
* [OCPBUGS-70038](https://issues.redhat.com/browse/OCPBUGS-70038): Updating configmap-reload-container image to be consistent with ART for 4.22 [#76](https://github.com/openshift/configmap-reload/pull/76)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/16114b8de20278b8f4b7a425ece6d35d53214773...94e41c4c6a5832dfd19750173d6544784ba235ec)
### [console](https://github.com/openshift/console/tree/52099b4a905e210e1a30f54727ca3d214d130902)
* [CONSOLE-4809](https://issues.redhat.com/browse/CONSOLE-4809): Extend RTL Test Coverage for Components Migrated from Enzyme [#16249](https://github.com/openshift/console/pull/16249)
* [CONSOLE-4512](https://issues.redhat.com/browse/CONSOLE-4512), [OCPBUGS-82473](https://issues.redhat.com/browse/OCPBUGS-82473): Switch from legacy `render` to `createRoot` [#16202](https://github.com/openshift/console/pull/16202)
* [OCPBUGS-77113](https://issues.redhat.com/browse/OCPBUGS-77113): remove dev to admin links as dev monitoring views are enabled [#16163](https://github.com/openshift/console/pull/16163)
* NO-JIRA: Update Dockerfile.dev to use latest base images [#16264](https://github.com/openshift/console/pull/16264)
* [CONSOLE-5065](https://issues.redhat.com/browse/CONSOLE-5065): Refactor dynamic module import transform code [#16224](https://github.com/openshift/console/pull/16224)
* [OCPBUGS-76556](https://issues.redhat.com/browse/OCPBUGS-76556): fix Developer Sandbox telemetry [#16020](https://github.com/openshift/console/pull/16020)
* NO-JIRA: Add stefanonardo to frontend reviewers#16267 [#16267](https://github.com/openshift/console/pull/16267)
* [OCPBUGS-78904](https://issues.redhat.com/browse/OCPBUGS-78904): Mark notification drawer title for translation [#16229](https://github.com/openshift/console/pull/16229)
* [CONSOLE-3955](https://issues.redhat.com/browse/CONSOLE-3955): Migrate LogSnippet to PatternFly component [#16190](https://github.com/openshift/console/pull/16190)
* [OCPBUGS-81654](https://issues.redhat.com/browse/OCPBUGS-81654): Filter out isActionCell prop to fix React warning [#16247](https://github.com/openshift/console/pull/16247)
* [CONSOLE-5152](https://issues.redhat.com/browse/CONSOLE-5152): bump cypress to latest [#16244](https://github.com/openshift/console/pull/16244)
* [OCPBUGS-81744](https://issues.redhat.com/browse/OCPBUGS-81744): Convert cluster update status integration test to unit test [#16260](https://github.com/openshift/console/pull/16260)
* [OCPBUGS-81506](https://issues.redhat.com/browse/OCPBUGS-81506): Add missing i18n translations for Pagination component [#16233](https://github.com/openshift/console/pull/16233)
* [CNV-62016](https://issues.redhat.com/browse/CNV-62016): add description to ResourceQuota page title [#16086](https://github.com/openshift/console/pull/16086)
* [OCPBUGS-80989](https://issues.redhat.com/browse/OCPBUGS-80989): Skip to fetch resource if model not found and load the other resources in list-page [#16230](https://github.com/openshift/console/pull/16230)
* [CONSOLE-5110](https://issues.redhat.com/browse/CONSOLE-5110): Assorted fixes and improvements [#16250](https://github.com/openshift/console/pull/16250)
* [OCPBUGS-79355](https://issues.redhat.com/browse/OCPBUGS-79355): Fix and enable OLM Package E2E tests disabled during the public/ directory useK8sWatchResource refactoring [#16220](https://github.com/openshift/console/pull/16220)
* [OCPBUGS-74156](https://issues.redhat.com/browse/OCPBUGS-74156): Prevent pod log search from shifting page layout [#16223](https://github.com/openshift/console/pull/16223)
* Revert "OCPBUGS-74156: Prevent pod log viewer from shifting page layout when searching" [#16218](https://github.com/openshift/console/pull/16218)
* [OCPBUGS-74506](https://issues.redhat.com/browse/OCPBUGS-74506): Remove ConsolePluginSecurityPolicy featuregate [#16013](https://github.com/openshift/console/pull/16013)
* [CONSOLE-5151](https://issues.redhat.com/browse/CONSOLE-5151): Replace showdown with marked [#16239](https://github.com/openshift/console/pull/16239)
* [CONSOLE-5094](https://issues.redhat.com/browse/CONSOLE-5094): cypress test improvements [#16046](https://github.com/openshift/console/pull/16046)
* [OCPBUGS-81331](https://issues.redhat.com/browse/OCPBUGS-81331): Storage > VolumeSnapshots and VAC throws error [#16219](https://github.com/openshift/console/pull/16219)
* [CONSOLE-4447](https://issues.redhat.com/browse/CONSOLE-4447): Additional modals switched to use ModalFooterWithAlerts for consistency [#16171](https://github.com/openshift/console/pull/16171)
* [OCPBUGS-80939](https://issues.redhat.com/browse/OCPBUGS-80939): Add robots.txt policy to console [#16205](https://github.com/openshift/console/pull/16205)
* [OCPBUGS-79315](https://issues.redhat.com/browse/OCPBUGS-79315): fix analyze.sh/react-icons treeshake [#16188](https://github.com/openshift/console/pull/16188)
* [CONSOLE-5015](https://issues.redhat.com/browse/CONSOLE-5015): Remove drag-and-drop from TextColumnField [#16204](https://github.com/openshift/console/pull/16204)
* [CONSOLE-5065](https://issues.redhat.com/browse/CONSOLE-5065): Update list of PatternFly packages that support dynamic modules [#16182](https://github.com/openshift/console/pull/16182)
* NO-ISSUE: frontend/packages/console-dynamic-plugin-sdk/README: 4.22 doesn't support PatternFly 5 [#16206](https://github.com/openshift/console/pull/16206)
* [OCPBUGS-62700](https://issues.redhat.com/browse/OCPBUGS-62700): Fix VolumeSnapshot table sorting [#16200](https://github.com/openshift/console/pull/16200)
* [OCPBUGS-79581](https://issues.redhat.com/browse/OCPBUGS-79581): Fix Deprecated Operator Warnings E2E tests Skipped in the Firehose Public Folder PR [#16197](https://github.com/openshift/console/pull/16197)
* [OCPBUGS-74156](https://issues.redhat.com/browse/OCPBUGS-74156): Prevent pod log viewer from shifting page layout when searching [#16193](https://github.com/openshift/console/pull/16193)
* [OCPBUGS-79678](https://issues.redhat.com/browse/OCPBUGS-79678): Align the search input so that its next to the select menu toggle [#16198](https://github.com/openshift/console/pull/16198)
* [OCPBUGS-78584](https://issues.redhat.com/browse/OCPBUGS-78584): Preserve query params in CatalogRedirect [#16165](https://github.com/openshift/console/pull/16165)
* [OCPBUGS-79525](https://issues.redhat.com/browse/OCPBUGS-79525): Fix null reference error in subscription action menu [#16196](https://github.com/openshift/console/pull/16196)
* [OCPBUGS-72526](https://issues.redhat.com/browse/OCPBUGS-72526): Impersonating user loads extra pages that user not authorized to view [#16088](https://github.com/openshift/console/pull/16088)
* [OCPBUGS-79000](https://issues.redhat.com/browse/OCPBUGS-79000): Fix perspective switcher icon suspending the whole app [#16183](https://github.com/openshift/console/pull/16183)
* [CONSOLE-5015](https://issues.redhat.com/browse/CONSOLE-5015): Refactor pinned nav to react-drag-drop [#16146](https://github.com/openshift/console/pull/16146)
* [CONSOLE-5031](https://issues.redhat.com/browse/CONSOLE-5031): Remove Firehose Component and Fix and Cleanup Impacted Types [#16096](https://github.com/openshift/console/pull/16096)
* [CONSOLE-4983](https://issues.redhat.com/browse/CONSOLE-4983): Add Groups to node details [#15981](https://github.com/openshift/console/pull/15981)
* NO-JIRA: prep for 4.22.0-prerelease.2 SDK publish [#16201](https://github.com/openshift/console/pull/16201)
* [OCPBUGS-74140](https://issues.redhat.com/browse/OCPBUGS-74140): Prevent Chinese characters from rendering as unicode escape sequences in alert messages [#16156](https://github.com/openshift/console/pull/16156)
* [OCPBUGS-77814](https://issues.redhat.com/browse/OCPBUGS-77814): Add E2E tests for VolumeAttributesClass UI [#16085](https://github.com/openshift/console/pull/16085)
* [CONSOLE-5073](https://issues.redhat.com/browse/CONSOLE-5073): Update redux-related packages to latest [#16087](https://github.com/openshift/console/pull/16087)
* [OCPBUGS-78543](https://issues.redhat.com/browse/OCPBUGS-78543): Hide filter category selector when only one filter exists [#16153](https://github.com/openshift/console/pull/16153)
* [CONSOLE-5015](https://issues.redhat.com/browse/CONSOLE-5015): Replace react-dnd with PF MultipleFileUpload in topology [#16179](https://github.com/openshift/console/pull/16179)
* [CONSOLE-5134](https://issues.redhat.com/browse/CONSOLE-5134): Update to Go 1.25, K8s 1.35, and Helm 3.20 [#16147](https://github.com/openshift/console/pull/16147)
* [CONSOLE-5135](https://issues.redhat.com/browse/CONSOLE-5135): add deprecation warning for `react-router-dom` [#16178](https://github.com/openshift/console/pull/16178)
* [OCPBUGS-79462](https://issues.redhat.com/browse/OCPBUGS-79462): Skip flaky Data Grid operator E2E tests [#16191](https://github.com/openshift/console/pull/16191)
* [CONSOLE-5027](https://issues.redhat.com/browse/CONSOLE-5027): Refactor public/ Directory Components to useK8sWatchResource(s) [#15954](https://github.com/openshift/console/pull/15954)
* [OCPBUGS-63391](https://issues.redhat.com/browse/OCPBUGS-63391): Replace DataViewTextFilter with existing custom TextFilter [#16151](https://github.com/openshift/console/pull/16151)
* [OCPBUGS-73803](https://issues.redhat.com/browse/OCPBUGS-73803): Fix incorrect OLMv1 documentation URL [#16052](https://github.com/openshift/console/pull/16052)
* [OCPBUGS-74346](https://issues.redhat.com/browse/OCPBUGS-74346): Fix useOperatorCatalogCategories hook. [#16093](https://github.com/openshift/console/pull/16093)
* [OCPBUGS-78534](https://issues.redhat.com/browse/OCPBUGS-78534): Make E2E test create helper idempotent and improve test cleanup [#16148](https://github.com/openshift/console/pull/16148)
* [OCPBUGS-66147](https://issues.redhat.com/browse/OCPBUGS-66147): Make folder field optional for vsphere [#16142](https://github.com/openshift/console/pull/16142)
* [OCPBUGS-77912](https://issues.redhat.com/browse/OCPBUGS-77912): Fix TypeError in OLS code import to console [#16119](https://github.com/openshift/console/pull/16119)
* [OCPBUGS-44612](https://issues.redhat.com/browse/OCPBUGS-44612): Remove useUserPreferenceCompatibility and withUserPreferenceCompatibility [#16076](https://github.com/openshift/console/pull/16076)
* [CONSOLE-5073](https://issues.redhat.com/browse/CONSOLE-5073): Bump i18next to latest [#16150](https://github.com/openshift/console/pull/16150)
* [CONSOLE-4447](https://issues.redhat.com/browse/CONSOLE-4447): Update SecretFormWrapper modal to use ModalFooterWithAlerts [#16167](https://github.com/openshift/console/pull/16167)
* [RFE-7965](https://issues.redhat.com/browse/RFE-7965): add basic auth support for helm repositories [#15624](https://github.com/openshift/console/pull/15624)
* [CONSOLE-5094](https://issues.redhat.com/browse/CONSOLE-5094): Add pesudo CSP violation detection to Cypress [#16048](https://github.com/openshift/console/pull/16048)
* NO-JIRA: Update demo plugin README [#16166](https://github.com/openshift/console/pull/16166)
* [CONSOLE-5093](https://issues.redhat.com/browse/CONSOLE-5093): Remove support for deprecated extensions [#16043](https://github.com/openshift/console/pull/16043)
* [CONSOLE-4447](https://issues.redhat.com/browse/CONSOLE-4447): Remove deprecated modal components and CSS [#16126](https://github.com/openshift/console/pull/16126)
* [CONSOLE-5018](https://issues.redhat.com/browse/CONSOLE-5018): Refactor `UNSAFE_` class components to FC [#16062](https://github.com/openshift/console/pull/16062)
* [CONSOLE-5129](https://issues.redhat.com/browse/CONSOLE-5129): Theme context cleanup [#16155](https://github.com/openshift/console/pull/16155)
* [OCPBUGS-78390](https://issues.redhat.com/browse/OCPBUGS-78390): Reset pagination page when changing namespace [#16138](https://github.com/openshift/console/pull/16138)
* [OCPBUGS-78253](https://issues.redhat.com/browse/OCPBUGS-78253): Fix InstallPlan > Components layout issue [#16127](https://github.com/openshift/console/pull/16127)
* [CONSOLE-4447](https://issues.redhat.com/browse/CONSOLE-4447): Migrate @console/shared modals to PatternFly v6 Modal components [#16079](https://github.com/openshift/console/pull/16079)
* NO-JIRA: Remove cursor context [#16106](https://github.com/openshift/console/pull/16106)
* [CONSOLE-5087](https://issues.redhat.com/browse/CONSOLE-5087): Refactor console-shared-package from Firehose to useK8sWatchResource [#16077](https://github.com/openshift/console/pull/16077)
* [CONSOLE-4447](https://issues.redhat.com/browse/CONSOLE-4447): Migrate modal hooks from useModal to useOverlay [#16061](https://github.com/openshift/console/pull/16061)
* [CONSOLE-5114](https://issues.redhat.com/browse/CONSOLE-5114): Clean up React Router imports and dependencies [#16139](https://github.com/openshift/console/pull/16139)
* [OCPBUGS-78499](https://issues.redhat.com/browse/OCPBUGS-78499): Fix curly quote in operator-hub-community-provider-modal [#16145](https://github.com/openshift/console/pull/16145)
* NO-JIRA: Update PageHeading types [#16095](https://github.com/openshift/console/pull/16095)
* NO-JIRA: Add a progress bar when building [#16099](https://github.com/openshift/console/pull/16099)
* [CONSOLE-4447](https://issues.redhat.com/browse/CONSOLE-4447): Migrate knative-plugin modals to PatternFly 6 [#16065](https://github.com/openshift/console/pull/16065)
* [OCPBUGS-78404](https://issues.redhat.com/browse/OCPBUGS-78404): Fix flaky secret integration tests [#16140](https://github.com/openshift/console/pull/16140)
* [CONSOLE-4447](https://issues.redhat.com/browse/CONSOLE-4447): Migrate core modals to PatternFly 6 Modal components (part 2) [#16123](https://github.com/openshift/console/pull/16123)
* [CONSOLE-4439](https://issues.redhat.com/browse/CONSOLE-4439): Upgrade to React Router 7 [#14957](https://github.com/openshift/console/pull/14957)
* [OCPBUGS-78361](https://issues.redhat.com/browse/OCPBUGS-78361): Fix flaky popover-status-button integration test [#16135](https://github.com/openshift/console/pull/16135)
* [CONSOLE-4447](https://issues.redhat.com/browse/CONSOLE-4447): Migrate core modals to PatternFly v6 modal components (part 1) [#16100](https://github.com/openshift/console/pull/16100)
* [CONSOLE-4447](https://issues.redhat.com/browse/CONSOLE-4447): Migrate console-app modals to modern PatternFly Modal components [#16037](https://github.com/openshift/console/pull/16037)
* [OCPBUGS-69853](https://issues.redhat.com/browse/OCPBUGS-69853): Updating openshift-enterprise-console-container image to be consistent with ART for 4.22 [#15865](https://github.com/openshift/console/pull/15865)
* [CONSOLE-4447](https://issues.redhat.com/browse/CONSOLE-4447): Migrate legacy PatternFly Modals to PatternFly v6 [#16054](https://github.com/openshift/console/pull/16054)
* [HELM-609](https://issues.redhat.com/browse/HELM-609): Fix upgrade failure for URL-installed charts [#16049](https://github.com/openshift/console/pull/16049)
* [CONSOLE-5068](https://issues.redhat.com/browse/CONSOLE-5068): Remove createModalLauncher from modal factory [#16066](https://github.com/openshift/console/pull/16066)
* [CONSOLE-4990](https://issues.redhat.com/browse/CONSOLE-4990): History object migration for #15961 / unit test fixes [#16120](https://github.com/openshift/console/pull/16120)
* [OCPBUGS-77867](https://issues.redhat.com/browse/OCPBUGS-77867): Fix perspective switcher E2E test flake that causes 6-hour CI timeout [#16114](https://github.com/openshift/console/pull/16114)
* [HELM-609](https://issues.redhat.com/browse/HELM-609): Frontend for Installation of Helm Charts via URL [#15961](https://github.com/openshift/console/pull/15961)
* NO-JIRA: Enforce no yarn.lock changes at build time [#16107](https://github.com/openshift/console/pull/16107)
* [OCPBUGS-77658](https://issues.redhat.com/browse/OCPBUGS-77658): Azure Provisioning Fields are not mandatory [#16092](https://github.com/openshift/console/pull/16092)
* [CONSOLE-5049](https://issues.redhat.com/browse/CONSOLE-5049): Migrate DeleteResourceModal to useOverlay pattern [#16022](https://github.com/openshift/console/pull/16022)
* [CONSOLE-4827](https://issues.redhat.com/browse/CONSOLE-4827): make software catalog work with all projects [#15804](https://github.com/openshift/console/pull/15804)
* [OCPBUGS-77848](https://issues.redhat.com/browse/OCPBUGS-77848): [CI] Fix the VolumeSnapshot CRUD flaky test failures [#16110](https://github.com/openshift/console/pull/16110)
* [CONSOLE-4447](https://issues.redhat.com/browse/CONSOLE-4447): Migrate modals to modern PatternFly Modal components [#16015](https://github.com/openshift/console/pull/16015)
* [OCPBUGS-77804](https://issues.redhat.com/browse/OCPBUGS-77804): prep for 4.21 GA SDK publish [#16109](https://github.com/openshift/console/pull/16109)
* [CONSOLE-4990](https://issues.redhat.com/browse/CONSOLE-4990): Replace history object navigation with useNavigate hook [#15959](https://github.com/openshift/console/pull/15959)
* [CONSOLE-5030](https://issues.redhat.com/browse/CONSOLE-5030): Refactor remaining firehose impacted components [#16039](https://github.com/openshift/console/pull/16039)
* [CONSOLE-4945](https://issues.redhat.com/browse/CONSOLE-4945): Add Disk, Network, CPU and VM counts to node overview [#16000](https://github.com/openshift/console/pull/16000)
* [OCPBUGS-77415](https://issues.redhat.com/browse/OCPBUGS-77415): Fix infinite recursion in project access form [#16069](https://github.com/openshift/console/pull/16069)
* [CONSOLE-5019](https://issues.redhat.com/browse/CONSOLE-5019): Consistently use FC and memo type param [#16098](https://github.com/openshift/console/pull/16098)
* [OCPBUGS-77423](https://issues.redhat.com/browse/OCPBUGS-77423): Fix extra space in PageHeading when no actions present [#16072](https://github.com/openshift/console/pull/16072)
* [OCPBUGS-77044](https://issues.redhat.com/browse/OCPBUGS-77044): Fix topology node labels disappearing when moving cursor to kebab menu [#16042](https://github.com/openshift/console/pull/16042)
* NO-JIRA: Context improvements [#16068](https://github.com/openshift/console/pull/16068)
* [OCPBUGS-44612](https://issues.redhat.com/browse/OCPBUGS-44612): Deprecate useUserSettings and expose useUserPreference [#16057](https://github.com/openshift/console/pull/16057)
* [CONSOLE-5100](https://issues.redhat.com/browse/CONSOLE-5100): Remove support for PatternFly 5 [#16056](https://github.com/openshift/console/pull/16056)
* [CONSOLE-5094](https://issues.redhat.com/browse/CONSOLE-5094): Delete Dockerfile.product.nodejs [#16047](https://github.com/openshift/console/pull/16047)
* [OCPBUGS-77016](https://issues.redhat.com/browse/OCPBUGS-77016): fix type as K8sResourceKind assertion in createKnatifyPage [#16044](https://github.com/openshift/console/pull/16044)
* [CONSOLE-5063](https://issues.redhat.com/browse/CONSOLE-5063): Remove AppInitSDK [#16019](https://github.com/openshift/console/pull/16019)
* [OCPBUGS-76945](https://issues.redhat.com/browse/OCPBUGS-76945): Add Azure Resource Group in OCP console for ODF STS installation [#16030](https://github.com/openshift/console/pull/16030)
* [OCPBUGS-76378](https://issues.redhat.com/browse/OCPBUGS-76378): fix display of Lightspeed button [#16012](https://github.com/openshift/console/pull/16012)
* [OCPBUGS-77000](https://issues.redhat.com/browse/OCPBUGS-77000), [OCPBUGS-77013](https://issues.redhat.com/browse/OCPBUGS-77013): OLM prompts for GCP Workload Identity parameters during Kiali Operato… [#16051](https://github.com/openshift/console/pull/16051)
* NO-JIRA: `/microcopy-review` improvements [#16026](https://github.com/openshift/console/pull/16026)
* [CONSOLE-4991](https://issues.redhat.com/browse/CONSOLE-4991): Reenable all unit tests [#16025](https://github.com/openshift/console/pull/16025)
* [CONSOLE-5021](https://issues.redhat.com/browse/CONSOLE-5021): Enable consistent-type-imports [#16031](https://github.com/openshift/console/pull/16031)
* [HELM-598](https://issues.redhat.com/browse/HELM-598): Add new server endpoint for installing OCI charts without Helm repository [#15863](https://github.com/openshift/console/pull/15863)
* [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#15986](https://github.com/openshift/console/pull/15986)
* [OCPBUGS-76554](https://issues.redhat.com/browse/OCPBUGS-76554): Ban CJS imports of PF react-icons [#16023](https://github.com/openshift/console/pull/16023)
* [OCPBUGS-76283](https://issues.redhat.com/browse/OCPBUGS-76283): Show modal when downloading pod logs [#16014](https://github.com/openshift/console/pull/16014)
* NO-JIRA: New `microcopy-review` skill and context simplification [#16009](https://github.com/openshift/console/pull/16009)
* [CONSOLE-5055](https://issues.redhat.com/browse/CONSOLE-5055): AsyncComponent type improvements [#16002](https://github.com/openshift/console/pull/16002)
* [OCPBUGS-76553](https://issues.redhat.com/browse/OCPBUGS-76553): i18n miss in CustomIconModal [#16021](https://github.com/openshift/console/pull/16021)
* [CONSOLE-5012](https://issues.redhat.com/browse/CONSOLE-5012): Create shared error modal launcher using React Context [#15946](https://github.com/openshift/console/pull/15946)
* [CONSOLE-4991](https://issues.redhat.com/browse/CONSOLE-4991), [ODC-6264](https://issues.redhat.com/browse/ODC-6264): Jest 30 followup [#16010](https://github.com/openshift/console/pull/16010)
* [CONSOLE-5064](https://issues.redhat.com/browse/CONSOLE-5064): Properly mock PluginStore in unit tests [#16017](https://github.com/openshift/console/pull/16017)
* [CONSOLE-5012](https://issues.redhat.com/browse/CONSOLE-5012): Migrate remaining modals to useOverlay pattern [#15990](https://github.com/openshift/console/pull/15990)
* [CONSOLE-4976](https://issues.redhat.com/browse/CONSOLE-4976): Add ClusterExtension creation form and unit tests [#15955](https://github.com/openshift/console/pull/15955)
* [CONSOLE-3769](https://issues.redhat.com/browse/CONSOLE-3769): Phase 2 of using OpenShift Dynamic Plugin SDK [#15904](https://github.com/openshift/console/pull/15904)
* [CONSOLE-4990](https://issues.redhat.com/browse/CONSOLE-4990): Migrate from history object to React Router v6/v7 hooks [#15956](https://github.com/openshift/console/pull/15956)
* [OCPBUGS-73871](https://issues.redhat.com/browse/OCPBUGS-73871): i18n upload/download routine task - 4.21 / 281 (Latest) [#15976](https://github.com/openshift/console/pull/15976)
* [OCPBUGS-74974](https://issues.redhat.com/browse/OCPBUGS-74974): Use Actions button instead of kebab menu on Subscription details page [#15983](https://github.com/openshift/console/pull/15983)
* [CONSOLE-5043](https://issues.redhat.com/browse/CONSOLE-5043): Remove `defaultProps` from operator-hub-item-details [#16003](https://github.com/openshift/console/pull/16003)
* [OCPBUGS-74538](https://issues.redhat.com/browse/OCPBUGS-74538): User without access on causes NamespaceBar to reset to All projects when used via dynamic plugin [#15996](https://github.com/openshift/console/pull/15996)
* [CONSOLE-5044](https://issues.redhat.com/browse/CONSOLE-5044): TypeScript port of events.jsx [#15944](https://github.com/openshift/console/pull/15944)
* [CONSOLE-4987](https://issues.redhat.com/browse/CONSOLE-4987): Conditionally render Guided Tour based on capability and disable it for Console E2E tests [#15926](https://github.com/openshift/console/pull/15926)
* [OCPBUGS-74639](https://issues.redhat.com/browse/OCPBUGS-74639): Number links for failed pods/nodes on 'Cluster inventory' card are not linked to filtered table list [#15979](https://github.com/openshift/console/pull/15979)
* NO-JIRA: Convert useTechPreviewFlagProvider to static function [#15960](https://github.com/openshift/console/pull/15960)
* [CONSOLE-5015](https://issues.redhat.com/browse/CONSOLE-5015): Refactor file-input to use PF [#15952](https://github.com/openshift/console/pull/15952)
* [OCPBUGS-74137](https://issues.redhat.com/browse/OCPBUGS-74137): DataView Pagination page menus : i18n misses [#15982](https://github.com/openshift/console/pull/15982)
* [OCPBUGS-74349](https://issues.redhat.com/browse/OCPBUGS-74349): Worklodas - Edit pod count and Edit parallelism : Content is in English [#15980](https://github.com/openshift/console/pull/15980)
* [CONSOLE-5029](https://issues.redhat.com/browse/CONSOLE-5029): Refactor withDashboardResources in with-dashboard-resources.tsx into … [#15927](https://github.com/openshift/console/pull/15927)
* [CONSOLE-5012](https://issues.redhat.com/browse/CONSOLE-5012): Additional modal migrations to overlay pattern [#15940](https://github.com/openshift/console/pull/15940)
* NO-JIRA: Add guidance for avoiding deprecated components [#15969](https://github.com/openshift/console/pull/15969)
* [OCPBUGS-74647](https://issues.redhat.com/browse/OCPBUGS-74647): Fix referenceFor parameter in SubscriptionDetailsPage [#15957](https://github.com/openshift/console/pull/15957)
* [OCPBUGS-65967](https://issues.redhat.com/browse/OCPBUGS-65967): Clean up old session cookies to prevent accumulation [#15837](https://github.com/openshift/console/pull/15837)
* [CONSOLE-5012](https://issues.redhat.com/browse/CONSOLE-5012): Migrate modals to overlay pattern [#15939](https://github.com/openshift/console/pull/15939)
* [OCPBUGS-65828](https://issues.redhat.com/browse/OCPBUGS-65828): Reduce log noise from transient async cache failures [#15821](https://github.com/openshift/console/pull/15821)
* [OCPBUGS-70329](https://issues.redhat.com/browse/OCPBUGS-70329): Auto-linkify URLs in status card alert messages [#15880](https://github.com/openshift/console/pull/15880)
* [CONSOLE-5039](https://issues.redhat.com/browse/CONSOLE-5039): Remove useSafetyFirst [#15937](https://github.com/openshift/console/pull/15937)
* [CONSOLE-4943](https://issues.redhat.com/browse/CONSOLE-4943): Add Machine Set, MachineConfigPool, and VMs columns to Nodes list view [#15909](https://github.com/openshift/console/pull/15909)
* [OCPBUGS-74241](https://issues.redhat.com/browse/OCPBUGS-74241): Add null checks to CRB subject [#15943](https://github.com/openshift/console/pull/15943)
* [OCPBUGS-72585](https://issues.redhat.com/browse/OCPBUGS-72585): Do not resolve disabled catalog type extensions [#15908](https://github.com/openshift/console/pull/15908)
* [CONSOLE-5012](https://issues.redhat.com/browse/CONSOLE-5012): Migrate delete modals and PVC modals to overlay pattern [#15932](https://github.com/openshift/console/pull/15932)
* [OCPBUGS-74369](https://issues.redhat.com/browse/OCPBUGS-74369): Bump lodash to latest [#15947](https://github.com/openshift/console/pull/15947)
* NO-JIRA: Suppress ResizeObserver-related windowError [#15958](https://github.com/openshift/console/pull/15958)
* [OCPBUGS-72260](https://issues.redhat.com/browse/OCPBUGS-72260): '0 of pods' are shown in Status column on DaemonSets list page. [#15928](https://github.com/openshift/console/pull/15928)
* NO-JIRA: Suppress ResizeObserver-related e2e errors [#15950](https://github.com/openshift/console/pull/15950)
* [CONSOLE-5041](https://issues.redhat.com/browse/CONSOLE-5041): Replace testHook with renderHook from RTL [#15936](https://github.com/openshift/console/pull/15936)
* NO-JIRA: SDK post-publish tasks [#15942](https://github.com/openshift/console/pull/15942)
* [OCPBUGS-74178](https://issues.redhat.com/browse/OCPBUGS-74178): Direct AI agents to AGENTS.md documentation hub [#15938](https://github.com/openshift/console/pull/15938)
* NO-JIRA: Moving the oc and kubectl delete,apply,create commands from deny to ask permissions [#15941](https://github.com/openshift/console/pull/15941)
* NO-JIRA: Prepare for 4.22-prerelease.1 release [#15933](https://github.com/openshift/console/pull/15933)
* [CONSOLE-5050](https://issues.redhat.com/browse/CONSOLE-5050): Make shared modules peerDeps in SDK [#15934](https://github.com/openshift/console/pull/15934)
* [CONSOLE-3769](https://issues.redhat.com/browse/CONSOLE-3769): Refactor weird `getResourceSidebarSamples` [#15915](https://github.com/openshift/console/pull/15915)
* [CONSOLE-5042](https://issues.redhat.com/browse/CONSOLE-5042): Remove React.FCC [#15929](https://github.com/openshift/console/pull/15929)
* [OCPBUGS-70340](https://issues.redhat.com/browse/OCPBUGS-70340): Ensure OpenAPI in monaco stays fresh [#15890](https://github.com/openshift/console/pull/15890)
* [CONSOLE-4402](https://issues.redhat.com/browse/CONSOLE-4402), [CONSOLE-4510](https://issues.redhat.com/browse/CONSOLE-4510): React 18 upgrade - phase 1 [#14869](https://github.com/openshift/console/pull/14869)
* NO-JIRA: Add /pre-push review command for comprehensive local code analysis [#15800](https://github.com/openshift/console/pull/15800)
* [OCPBUGS-65891](https://issues.redhat.com/browse/OCPBUGS-65891): Follow up on fixing the remaining issues in the multi-group impersonation feature [#15916](https://github.com/openshift/console/pull/15916)
* [CONSOLE-4630](https://issues.redhat.com/browse/CONSOLE-4630): `@types/react` 18 prep work [#15893](https://github.com/openshift/console/pull/15893)
* [OCPBUGS-73766](https://issues.redhat.com/browse/OCPBUGS-73766): Configure coderabbit.yaml for only major reviews and disable multiple summaries [#15919](https://github.com/openshift/console/pull/15919)
* [CONSOLE-5035](https://issues.redhat.com/browse/CONSOLE-5035): cache lazy route components to prevent navigation freeze [#15924](https://github.com/openshift/console/pull/15924)
* [CONSOLE-4865](https://issues.redhat.com/browse/CONSOLE-4865): Remove `@openshift-console/plugin-shared` [#15921](https://github.com/openshift/console/pull/15921)
* NO-JIRA: Update dynamic demo plugin OWNERS and lock files [#15920](https://github.com/openshift/console/pull/15920)
* NO-JIRA: Refactor - consolidate K8s client creation into new function [#15897](https://github.com/openshift/console/pull/15897)
* [OCPBUGS-70011](https://issues.redhat.com/browse/OCPBUGS-70011): i18n upload/download routine task - 4.21 / 281 [#15905](https://github.com/openshift/console/pull/15905)
* [OCPBUGS-69377](https://issues.redhat.com/browse/OCPBUGS-69377): Update the perspective name in dev-console guided tour [#15852](https://github.com/openshift/console/pull/15852)
* [OCPBUGS-69380](https://issues.redhat.com/browse/OCPBUGS-69380): Fixed loaded page no roles error upon render [#15878](https://github.com/openshift/console/pull/15878)
* [OCPBUGS-72571](https://issues.redhat.com/browse/OCPBUGS-72571): remove "OperatorHub" from OLM integration tests where … [#15911](https://github.com/openshift/console/pull/15911)
* [OCPBUGS-69387](https://issues.redhat.com/browse/OCPBUGS-69387): update operator details when changing channels [#15853](https://github.com/openshift/console/pull/15853)
* [OCPBUGS-70344](https://issues.redhat.com/browse/OCPBUGS-70344): change OperatorHub strings to Software Catalog [#15891](https://github.com/openshift/console/pull/15891)
* [CONSOLE-4844](https://issues.redhat.com/browse/CONSOLE-4844): merge secret scenarios [#15684](https://github.com/openshift/console/pull/15684)
* [CONSOLE-4912](https://issues.redhat.com/browse/CONSOLE-4912): update machine config tests [#15759](https://github.com/openshift/console/pull/15759)
* [OCPBUGS-63120](https://issues.redhat.com/browse/OCPBUGS-63120): Home -> Overview page returns error during upgrade process [#15831](https://github.com/openshift/console/pull/15831)
* [OCPBUGS-62611](https://issues.redhat.com/browse/OCPBUGS-62611): Fix editing secrets with mixed text and binary data [#15820](https://github.com/openshift/console/pull/15820)
* [OCPBUGS-65946](https://issues.redhat.com/browse/OCPBUGS-65946): Fix search component to not pass ALL_NAMESPACES_KEY to… [#15789](https://github.com/openshift/console/pull/15789)
* [OCPBUGS-65831](https://issues.redhat.com/browse/OCPBUGS-65831): Fix catalog service swapping description and markdownDescription fields [#15750](https://github.com/openshift/console/pull/15750)
* [OCPBUGS-68332](https://issues.redhat.com/browse/OCPBUGS-68332): Improve VAC field on PVC details page [#15843](https://github.com/openshift/console/pull/15843)
* [OCPBUGS-70330](https://issues.redhat.com/browse/OCPBUGS-70330): remove support for Windows 8 Live Tiles and IE "standards mode" [#15886](https://github.com/openshift/console/pull/15886)
* [OCPBUGS-70324](https://issues.redhat.com/browse/OCPBUGS-70324): Revert the console-shared.json to console-shared directory [#15885](https://github.com/openshift/console/pull/15885)
* [CONSOLE-4989](https://issues.redhat.com/browse/CONSOLE-4989): bump to `react-redux` 8 [#15854](https://github.com/openshift/console/pull/15854)
* [CONSOLE-3769](https://issues.redhat.com/browse/CONSOLE-3769): Update OpenShift Dynamic Plugin SDK + webpack-related deps [#15892](https://github.com/openshift/console/pull/15892)
* [CONSOLE-4969](https://issues.redhat.com/browse/CONSOLE-4969): Configure a coderabbit.yaml file for console repo [#15818](https://github.com/openshift/console/pull/15818)
* NO-JIRA: Fix incorrect syntax for claude settings [#15899](https://github.com/openshift/console/pull/15899)
* [CONSOLE-4971](https://issues.redhat.com/browse/CONSOLE-4971): Add AGENTS.md and structured AI documentation [#15896](https://github.com/openshift/console/pull/15896)
* [OCPBUGS-66247](https://issues.redhat.com/browse/OCPBUGS-66247): make cloudCredentials optional so operators load when … [#15803](https://github.com/openshift/console/pull/15803)
* [CONSOLE-3769](https://issues.redhat.com/browse/CONSOLE-3769): Even more openshift/dynamic-plugin-sdk prep work [#15778](https://github.com/openshift/console/pull/15778)
* [OCPBUGS-63389](https://issues.redhat.com/browse/OCPBUGS-63389): Remove asterisk from Routing label field in alertManager receiver form [#15825](https://github.com/openshift/console/pull/15825)
* [CONSOLE-4631](https://issues.redhat.com/browse/CONSOLE-4631), [CONSOLE-5005](https://issues.redhat.com/browse/CONSOLE-5005): Manually rewrite remaining namespace/default imports [#15884](https://github.com/openshift/console/pull/15884)
* [CONSOLE-4631](https://issues.redhat.com/browse/CONSOLE-4631): Run react/update-react-imports [#15872](https://github.com/openshift/console/pull/15872)
* [OCPBUGS-68376](https://issues.redhat.com/browse/OCPBUGS-68376): fix routing issues on packageserver PackageManifest de… [#15844](https://github.com/openshift/console/pull/15844)
* [CONSOLE-4916](https://issues.redhat.com/browse/CONSOLE-4916): add auto scenario about yaml sidebar [#15790](https://github.com/openshift/console/pull/15790)
* [OCPBUGS-65678](https://issues.redhat.com/browse/OCPBUGS-65678), [OCPBUGS-65765](https://issues.redhat.com/browse/OCPBUGS-65765): apiVersion is empty on YAML creation page - Runtime error occurs when create MachineConfig with default yaml from… [#15763](https://github.com/openshift/console/pull/15763)
* [OCPBUGS-63159](https://issues.redhat.com/browse/OCPBUGS-63159): Prevent the display of events from projects other than the currently selected project [#15836](https://github.com/openshift/console/pull/15836)
* [OCPBUGS-63237](https://issues.redhat.com/browse/OCPBUGS-63237): There should be no role ARN field as token-auth-aws/azure/gcp=false in csv annotations [#15813](https://github.com/openshift/console/pull/15813)
* [OCPBUGS-60426](https://issues.redhat.com/browse/OCPBUGS-60426): Fix edit application via Deploy image internal registry doesn't select correct image stream [#15795](https://github.com/openshift/console/pull/15795)
* NO-JIRA: Add /gen-rtl-tests Claude code slash command for generating React Testing Library tests for React components [#15668](https://github.com/openshift/console/pull/15668)
* [CONSOLE-4970](https://issues.redhat.com/browse/CONSOLE-4970): Upgrade Jest from 22 to 30 [#15817](https://github.com/openshift/console/pull/15817)
* [CONSOLE-4979](https://issues.redhat.com/browse/CONSOLE-4979): Speed up check-patternfly-modules + add dedupe step to CI [#15835](https://github.com/openshift/console/pull/15835)
* [OCPBUGS-67002](https://issues.redhat.com/browse/OCPBUGS-67002): fix bug where Installed badge is not fully visible [#15828](https://github.com/openshift/console/pull/15828)
* [OCPBUGS-63390](https://issues.redhat.com/browse/OCPBUGS-63390): show DASH to routing labels column when receiver doesn't have routing labels [#15824](https://github.com/openshift/console/pull/15824)
* [CONSOLE-4630](https://issues.redhat.com/browse/CONSOLE-4630): Fix 67 react 18 type errors [#15779](https://github.com/openshift/console/pull/15779)
* [CONSOLE-4106](https://issues.redhat.com/browse/CONSOLE-4106): Add ClusterExtension creation page [#15741](https://github.com/openshift/console/pull/15741)
* [OCPBUGS-62713](https://issues.redhat.com/browse/OCPBUGS-62713): Prevent application filter in Topology view from resetting to all applications unexpectedly [#15812](https://github.com/openshift/console/pull/15812)
* NO-JIRA: disable guided tour when cypress is running [#15841](https://github.com/openshift/console/pull/15841)
* And 39 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/4a47100d3f4ef855a9a98278631f148cda31dbe4...52099b4a905e210e1a30f54727ca3d214d130902)
### [console-operator](https://github.com/openshift/console-operator/tree/f0619391890c61e1a4ebdf5c1c0b247b30f81248)
* [OCPBUGS-79068](https://issues.redhat.com/browse/OCPBUGS-79068): Fix HelmChartRepository YAML format [#1129](https://github.com/openshift/console-operator/pull/1129)
* [CONSOLE-5138](https://issues.redhat.com/browse/CONSOLE-5138): Enable readOnlyRootFilesystem for console and download pod [#1123](https://github.com/openshift/console-operator/pull/1123)
* [OCPBUGS-78477](https://issues.redhat.com/browse/OCPBUGS-78477): Bump API to support ExternalOIDCWithUpstreamParity new API fields [#1125](https://github.com/openshift/console-operator/pull/1125)
* [OCPBUGS-63502](https://issues.redhat.com/browse/OCPBUGS-63502): Redeploy console pods upon cert rotation [#1093](https://github.com/openshift/console-operator/pull/1093)
* [OCPBUGS-65622](https://issues.redhat.com/browse/OCPBUGS-65622): add controller for downloads service account deletion logic [#1111](https://github.com/openshift/console-operator/pull/1111)
* Sync Dockerfile.ocp image [#1127](https://github.com/openshift/console-operator/pull/1127)
* NO-JIRA: Add linked repository for cross-repo CodeRabbit reviews [#1120](https://github.com/openshift/console-operator/pull/1120)
* [OCPBUGS-74506](https://issues.redhat.com/browse/OCPBUGS-74506): Remove ConsolePluginSecurityPolicy featuregate [#1108](https://github.com/openshift/console-operator/pull/1108)
* [OCPBUGS-77741](https://issues.redhat.com/browse/OCPBUGS-77741): Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.22 [#1121](https://github.com/openshift/console-operator/pull/1121)
* [OCPBUGS-65622](https://issues.redhat.com/browse/OCPBUGS-65622): add service account to downloads deployment [#1087](https://github.com/openshift/console-operator/pull/1087)
* [OCPBUGS-62307](https://issues.redhat.com/browse/OCPBUGS-62307): Remove orphaned console-conversion-webhook deployment and related resource [#1053](https://github.com/openshift/console-operator/pull/1053)
* [OCPBUGS-57468](https://issues.redhat.com/browse/OCPBUGS-57468): Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads [#1102](https://github.com/openshift/console-operator/pull/1102)
* [OCPBUGS-72387](https://issues.redhat.com/browse/OCPBUGS-72387): Update the downloads manifest [#1101](https://github.com/openshift/console-operator/pull/1101)
* [OCPBUGS-72387](https://issues.redhat.com/browse/OCPBUGS-72387): Fix PDB blocking node drains during cluster upgrades [#1099](https://github.com/openshift/console-operator/pull/1099)
* [CONSOLE-4986](https://issues.redhat.com/browse/CONSOLE-4986): Vendor API changes for GuidedTourFeature capability [#1091](https://github.com/openshift/console-operator/pull/1091)
* [NETOBSERV-2296](https://issues.redhat.com/browse/NETOBSERV-2296): add missing annotations on netobserv quickstart [#1080](https://github.com/openshift/console-operator/pull/1080)
* [OCPBUGS-65496](https://issues.redhat.com/browse/OCPBUGS-65496): Add missing relatedObjects + small refactoring [#1075](https://github.com/openshift/console-operator/pull/1075)
* NO-JIRA: Fix claude syntax [#1088](https://github.com/openshift/console-operator/pull/1088)
* [OCPBUGS-68367](https://issues.redhat.com/browse/OCPBUGS-68367): Add missing console annotation to the quickstart [#1082](https://github.com/openshift/console-operator/pull/1082)
* [OCPBUGS-70045](https://issues.redhat.com/browse/OCPBUGS-70045): Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.22 [#1086](https://github.com/openshift/console-operator/pull/1086)
* [CONSOLE-4871](https://issues.redhat.com/browse/CONSOLE-4871): Add AI context documentation files [#1077](https://github.com/openshift/console-operator/pull/1077)
* [Full changelog](https://github.com/openshift/console-operator/compare/e056fd6e1cd0935df6ae7b57957f1b1ab2dc78df...f0619391890c61e1a4ebdf5c1c0b247b30f81248)
### [coredns](https://github.com/openshift/coredns/tree/0dded2d232dab43c107b1dab9d0d9fdfd8259622)
* [OCPBUGS-77600](https://issues.redhat.com/browse/OCPBUGS-77600): Updating coredns-container image to be consistent with ART for 4.22 [#170](https://github.com/openshift/coredns/pull/170)
* [OCPBUGS-69852](https://issues.redhat.com/browse/OCPBUGS-69852): Updating coredns-container image to be consistent with ART for 4.22 [#159](https://github.com/openshift/coredns/pull/159)
* NO-JIRA: Add team members to the OWNERS file [#162](https://github.com/openshift/coredns/pull/162)
* [Full changelog](https://github.com/openshift/coredns/compare/7486e9e4330c1e41d9a91e4673b7f2782efc112c...0dded2d232dab43c107b1dab9d0d9fdfd8259622)
### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/fd31b5da11d75a7a80e7c4a6c7a56acf304e2661)
* NO-JIRA: Update DOWNSTREAM_OWNERS [#373](https://github.com/openshift/cloud-provider-openstack/pull/373)
* [OCPBUGS-69813](https://issues.redhat.com/browse/OCPBUGS-69813): Updating csi-driver-manila-container image to be consistent with ART for 4.22 [#369](https://github.com/openshift/cloud-provider-openstack/pull/369)
* [OCPBUGS-70057](https://issues.redhat.com/browse/OCPBUGS-70057): Updating ose-openstack-cloud-controller-manager-container image to be consistent with ART for 4.22 [#360](https://github.com/openshift/cloud-provider-openstack/pull/360)
* [OCPBUGS-70072](https://issues.redhat.com/browse/OCPBUGS-70072): Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.22 [#358](https://github.com/openshift/cloud-provider-openstack/pull/358)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/bf508c062084dc6dec20480f7d173f047ad4f2d6...fd31b5da11d75a7a80e7c4a6c7a56acf304e2661)
### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/e9f249405ad2bced3d1805dd5beda368d7f3d564)
* [OCPBUGS-77740](https://issues.redhat.com/browse/OCPBUGS-77740): Updating csi-driver-nfs-container image to be consistent with ART for 4.22 [#169](https://github.com/openshift/csi-driver-nfs/pull/169)
* NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main [#167](https://github.com/openshift/csi-driver-nfs/pull/167)
* [OCPBUGS-70043](https://issues.redhat.com/browse/OCPBUGS-70043): Updating csi-driver-nfs-container image to be consistent with ART for 4.22 [#168](https://github.com/openshift/csi-driver-nfs/pull/168)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/49f2d86fb6172d9d8909ed0f70cb3bc71a4f7c01...e9f249405ad2bced3d1805dd5beda368d7f3d564)
### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/98b1f4acf9c004687ef55e9f187703768933bb56)
* [OCPBUGS-77562](https://issues.redhat.com/browse/OCPBUGS-77562), [STOR-2758](https://issues.redhat.com/browse/STOR-2758): Rebase to upstream v4.11.0 for OCP 4.22 [#94](https://github.com/openshift/csi-external-attacher/pull/94)
* [OCPBUGS-69744](https://issues.redhat.com/browse/OCPBUGS-69744): Updating csi-attacher-container image to be consistent with ART for 4.22 [#91](https://github.com/openshift/csi-external-attacher/pull/91)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/344669a2189fecdf5471fdc9a1246dd751cb1afb...98b1f4acf9c004687ef55e9f187703768933bb56)
### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/f90c06a3113696cdb757e4b7c9dcfeb0e9dddb81)
* [STOR-2758](https://issues.redhat.com/browse/STOR-2758): Rebase to upstream v6.2.0 for OCP 4.22 [#121](https://github.com/openshift/csi-external-provisioner/pull/121)
* [OCPBUGS-77752](https://issues.redhat.com/browse/OCPBUGS-77752): Updating csi-provisioner-container image to be consistent with ART for 4.22 [#120](https://github.com/openshift/csi-external-provisioner/pull/120)
* [OCPBUGS-70054](https://issues.redhat.com/browse/OCPBUGS-70054): Updating csi-provisioner-container image to be consistent with ART for 4.22 [#118](https://github.com/openshift/csi-external-provisioner/pull/118)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/f18190fb8aa26bdcb4ceb57cdd6cf77b5488ed58...f90c06a3113696cdb757e4b7c9dcfeb0e9dddb81)
### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/4e74a4aa52a2046d6b97a47dff7a60ddb73d0bbd)
* [STOR-2758](https://issues.redhat.com/browse/STOR-2758): Rebase to upstream v2.1.0 for OCP 4.22 [#183](https://github.com/openshift/csi-external-resizer/pull/183)
* [OCPBUGS-77735](https://issues.redhat.com/browse/OCPBUGS-77735): Updating ose-csi-external-resizer-container image to be consistent with ART for 4.22 [#182](https://github.com/openshift/csi-external-resizer/pull/182)
* [OCPBUGS-70039](https://issues.redhat.com/browse/OCPBUGS-70039): Updating ose-csi-external-resizer-container image to be consistent with ART for 4.22 [#180](https://github.com/openshift/csi-external-resizer/pull/180)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/d880a1ec6da02dbf61600ec7999266185ca9f784...4e74a4aa52a2046d6b97a47dff7a60ddb73d0bbd)
### [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata/tree/7652318579a38838931a5be492cee3573c7c8ecf)
* [OCPBUGS-77411](https://issues.redhat.com/browse/OCPBUGS-77411): Updating csi-external-snapshot-metadata-container image to be consistent with ART for 4.22 [#10](https://github.com/openshift/csi-external-snapshot-metadata/pull/10)
* [OCPBUGS-69720](https://issues.redhat.com/browse/OCPBUGS-69720): Updating csi-external-snapshot-metadata-container image to be consistent with ART for 4.22 [#8](https://github.com/openshift/csi-external-snapshot-metadata/pull/8)
* [Full changelog](https://github.com/openshift/csi-external-snapshot-metadata/compare/af250fdbac8af84d9808a2892bfc911c04162115...7652318579a38838931a5be492cee3573c7c8ecf)
### [csi-external-snapshotter, csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter/tree/d1bc3ffaa9759c13a06c2ec61c541342e71bd109)
* [STOR-2758](https://issues.redhat.com/browse/STOR-2758): Rebase to upstream v8.5.0 for OCP 4.22 [#202](https://github.com/openshift/csi-external-snapshotter/pull/202)
* [OCPBUGS-77687](https://issues.redhat.com/browse/OCPBUGS-77687): Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.22 [#201](https://github.com/openshift/csi-external-snapshotter/pull/201)
* [OCPBUGS-69935](https://issues.redhat.com/browse/OCPBUGS-69935): UPSTREAM: <drop>: restore log level of the group snapshot reconciler [#200](https://github.com/openshift/csi-external-snapshotter/pull/200)
* [OCPBUGS-77413](https://issues.redhat.com/browse/OCPBUGS-77413): Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.22 [#199](https://github.com/openshift/csi-external-snapshotter/pull/199)
* [OCPBUGS-66967](https://issues.redhat.com/browse/OCPBUGS-66967): UPSTREAM: 1354: UPSTREAM: 1359: Fix for cases where the resource is already present on the cluster [#193](https://github.com/openshift/csi-external-snapshotter/pull/193)
* [OCPBUGS-69979](https://issues.redhat.com/browse/OCPBUGS-69979): Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.22 [#195](https://github.com/openshift/csi-external-snapshotter/pull/195)
* [OCPBUGS-66967](https://issues.redhat.com/browse/OCPBUGS-66967): UPSTREAM: <drop>: bump log level of the group snapshot reconciler [#192](https://github.com/openshift/csi-external-snapshotter/pull/192)
* [OCPBUGS-69721](https://issues.redhat.com/browse/OCPBUGS-69721): Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.22 [#194](https://github.com/openshift/csi-external-snapshotter/pull/194)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/9098db0e434e0d986eeadd2ebe69119540a550d1...d1bc3ffaa9759c13a06c2ec61c541342e71bd109)
### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/4d5e959a182b4db70dc52302bd89eebfec40d5a5)
* [OCPBUGS-77672](https://issues.redhat.com/browse/OCPBUGS-77672), [STOR-2758](https://issues.redhat.com/browse/STOR-2758): Rebase to upstream v2.18.0 for OCP 4.22 [#81](https://github.com/openshift/csi-livenessprobe/pull/81)
* [OCPBUGS-69958](https://issues.redhat.com/browse/OCPBUGS-69958): Updating csi-livenessprobe-container image to be consistent with ART for 4.22 [#78](https://github.com/openshift/csi-livenessprobe/pull/78)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/78dacb7c661a62c78036c2737401afd3eb6fd04d...4d5e959a182b4db70dc52302bd89eebfec40d5a5)
### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/cf174b30fad107d354afb0f0b09030a7c97fd296)
* [OCPBUGS-77738](https://issues.redhat.com/browse/OCPBUGS-77738), [STOR-2758](https://issues.redhat.com/browse/STOR-2758): Rebase to upstream v2.16.0 for OCP 4.22 [#95](https://github.com/openshift/csi-node-driver-registrar/pull/95)
* [OCPBUGS-70041](https://issues.redhat.com/browse/OCPBUGS-70041): Updating csi-node-driver-registrar-container image to be consistent with ART for 4.22 [#92](https://github.com/openshift/csi-node-driver-registrar/pull/92)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/d29f3f7a4aed4465e7e40e323bd3c0e0d9871e4c...cf174b30fad107d354afb0f0b09030a7c97fd296)
### [docker-builder](https://github.com/openshift/builder/tree/fcd4ce2d96613a27bd1ab7f53ff47225976c4ba9)
* [OKD-322](https://issues.redhat.com/browse/OKD-322): Update Dockerfile to work on CentOS/RHEL 10 [#500](https://github.com/openshift/builder/pull/500)
* [OCPBUGS-70150](https://issues.redhat.com/browse/OCPBUGS-70150): bump buildah to 1.39.7 to fix CVE-2025-52881 [#494](https://github.com/openshift/builder/pull/494)
* [OCPBUGS-69871](https://issues.redhat.com/browse/OCPBUGS-69871): Updating openshift-enterprise-builder-container image to be consistent with ART for 4.22 [#493](https://github.com/openshift/builder/pull/493)
* [Full changelog](https://github.com/openshift/builder/compare/c0ef8399e6c3d8731b47502e7ed9d8563a481cdc...fcd4ce2d96613a27bd1ab7f53ff47225976c4ba9)
### [docker-registry](https://github.com/openshift/image-registry/tree/c3fa7db05e878e35ff95fcff896f716e82fdd170)
* [CNTRLPLANE-3073](https://issues.redhat.com/browse/CNTRLPLANE-3073): bump kubernetes to v1.35 [#467](https://github.com/openshift/image-registry/pull/467)
* [IR-350](https://issues.redhat.com/browse/IR-350): bump library-go to the latest version [#460](https://github.com/openshift/image-registry/pull/460)
* [IR-350](https://issues.redhat.com/browse/IR-350): fix cipher suite configuration conflict with docker distribution [#459](https://github.com/openshift/image-registry/pull/459)
* [OCPBUGS-69762](https://issues.redhat.com/browse/OCPBUGS-69762): Updating openshift-enterprise-registry-container image to be consistent with ART for 4.22 [#457](https://github.com/openshift/image-registry/pull/457)
* [Full changelog](https://github.com/openshift/image-registry/compare/602f51c795dcdcd71c75f6abfe79dc0424a0476a...c3fa7db05e878e35ff95fcff896f716e82fdd170)
### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/7aa4007a8601bf4bb23b696f580c022f58877223)
* [OCPBUGS-77868](https://issues.redhat.com/browse/OCPBUGS-77868): Clean up cruft in /var/cache/dnf [#182](https://github.com/openshift/driver-toolkit/pull/182)
* NO-ISSUE: Add autoconf, automake and libtool packages [#181](https://github.com/openshift/driver-toolkit/pull/181)
* NO-ISSUE: Support ubi minimal base image [#179](https://github.com/openshift/driver-toolkit/pull/179)
* [OCPBUGS-69699](https://issues.redhat.com/browse/OCPBUGS-69699): Updating driver-toolkit-container image to be consistent with ART for 4.22 [#178](https://github.com/openshift/driver-toolkit/pull/178)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/5c53d757ae380994b89701a98d8b61912154aca7...7aa4007a8601bf4bb23b696f580c022f58877223)
### [etcd](https://github.com/openshift/etcd/tree/d8d67b8ce849f816d6d23c904098336632e2348f)
* [OCPBUGS-74168](https://issues.redhat.com/browse/OCPBUGS-74168): Remove unused ART dockerfiles [#356](https://github.com/openshift/etcd/pull/356)
* [OCPBUGS-69868](https://issues.redhat.com/browse/OCPBUGS-69868): Updating ose-etcd-container image to be consistent with ART for 4.22 [#353](https://github.com/openshift/etcd/pull/353)
* [Full changelog](https://github.com/openshift/etcd/compare/806f690e1f140e0aea2eb05ef5f288b756b62895...d8d67b8ce849f816d6d23c904098336632e2348f)
### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/4d9707e182c4f8734d83ebf21e3ffcc4c38d04e9)
* [OCPBUGS-78471](https://issues.redhat.com/browse/OCPBUGS-78471): Fix OSD ILB bug [#103](https://github.com/openshift/cloud-provider-gcp/pull/103)
* [OCPCLOUD-3274](https://issues.redhat.com/browse/OCPCLOUD-3274): Merge https://github.com/kubernetes/cloud-provider-gcp:master (378730f) into main [#99](https://github.com/openshift/cloud-provider-gcp/pull/99)
* [OCPBUGS-77570](https://issues.redhat.com/browse/OCPBUGS-77570): Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART for 4.22 [#98](https://github.com/openshift/cloud-provider-gcp/pull/98)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/8732386c3ddcb98dae624f7bb925ed0ef8d077d5...4d9707e182c4f8734d83ebf21e3ffcc4c38d04e9)
### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/37085d5287031ee68f58b165256d4104bba99886)
* NO-JIRA: Remove dead `RELEASE_DIR` ref [#263](https://github.com/openshift/cluster-api-provider-gcp/pull/263)
* NO-JIRA: Remove old manifest-gen assets [#264](https://github.com/openshift/cluster-api-provider-gcp/pull/264)
* [OCPCLOUD-3325](https://issues.redhat.com/browse/OCPCLOUD-3325): Update to new manifests-gen [#258](https://github.com/openshift/cluster-api-provider-gcp/pull/258)
* [OCPBUGS-74913](https://issues.redhat.com/browse/OCPBUGS-74913): Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.11.0 (1cb204d) into master [#261](https://github.com/openshift/cluster-api-provider-gcp/pull/261)
* NO-JIRA: UPSTREAM: <carry>: Add manifests verify target [#259](https://github.com/openshift/cluster-api-provider-gcp/pull/259)
* Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART for 4.22 [#257](https://github.com/openshift/cluster-api-provider-gcp/pull/257)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/085f35d033a51fbb4784f6553ff9176960b0da97...37085d5287031ee68f58b165256d4104bba99886)
### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/0073bd1187c07febc963fc67f0df67cd33c8f218)
* [OCPBUGS-81576](https://issues.redhat.com/browse/OCPBUGS-81576): Bump gRPC-Go package for CVE fix [#155](https://github.com/openshift/machine-api-provider-gcp/pull/155)
* [OCPCLOUD-3279](https://issues.redhat.com/browse/OCPCLOUD-3279): Rebase to Kube 1.35 for Machine API Provider GCP [#145](https://github.com/openshift/machine-api-provider-gcp/pull/145)
* [OCPNODE-4168](https://issues.redhat.com/browse/OCPNODE-4168): Empty disk should be ignored for gcp additional disk [#141](https://github.com/openshift/machine-api-provider-gcp/pull/141)
* [OCPBUGS-77746](https://issues.redhat.com/browse/OCPBUGS-77746): Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 4.22 [#144](https://github.com/openshift/machine-api-provider-gcp/pull/144)
* [CORS-4296](https://issues.redhat.com/browse/CORS-4296): Add the N4A machine type [#138](https://github.com/openshift/machine-api-provider-gcp/pull/138)
* [OCPBUGS-70052](https://issues.redhat.com/browse/OCPBUGS-70052): Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 4.22 [#137](https://github.com/openshift/machine-api-provider-gcp/pull/137)
* [OCPCLOUD-3255](https://issues.redhat.com/browse/OCPCLOUD-3255): Add AGENTS configuration [#136](https://github.com/openshift/machine-api-provider-gcp/pull/136)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/91f71c9adfd6b715a6ef340bb43ea5e1a8b44245...0073bd1187c07febc963fc67f0df67cd33c8f218)
### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/2ba117405ff1cee765d42491f5863b06a1c9a2da)
* [STOR-2751](https://issues.redhat.com/browse/STOR-2751): Rebase to upstream v1.24.1 for OCP 4.22 [#98](https://github.com/openshift/gcp-pd-csi-driver/pull/98)
* [OCPBUGS-77632](https://issues.redhat.com/browse/OCPBUGS-77632): Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.22 [#100](https://github.com/openshift/gcp-pd-csi-driver/pull/100)
* [OCPBUGS-77602](https://issues.redhat.com/browse/OCPBUGS-77602): Support Downward API node name override [#99](https://github.com/openshift/gcp-pd-csi-driver/pull/99)
* [OCPBUGS-74521](https://issues.redhat.com/browse/OCPBUGS-74521): UPSTREAM: 2175: Move VAC storage API to v1 from v1beta1 [#97](https://github.com/openshift/gcp-pd-csi-driver/pull/97)
* [OCPBUGS-69930](https://issues.redhat.com/browse/OCPBUGS-69930): Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.22 [#87](https://github.com/openshift/gcp-pd-csi-driver/pull/87)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/a022e754beec5b234f922ee3b7330ea157c852d8...2ba117405ff1cee765d42491f5863b06a1c9a2da)
### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/6b00096f4a84203a69467802b846f215b4e04888)
* [STOR-2762](https://issues.redhat.com/browse/STOR-2762): Bump all deps for 4.22 [#175](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/175)
* [OCPBUGS-77558](https://issues.redhat.com/browse/OCPBUGS-77558): Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.22 [#174](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/174)
* [OCPBUGS-77428](https://issues.redhat.com/browse/OCPBUGS-77428): Pass node name to csi-driver container [#172](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/172)
* [OCPBUGS-77183](https://issues.redhat.com/browse/OCPBUGS-77183): Add RBAC permission for node driver to get Node objects [#170](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/170)
* [OCPBUGS-74521](https://issues.redhat.com/browse/OCPBUGS-74521): Remove VolumeAttributesClass FeatureGate [#168](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/168)
* [STOR-2792](https://issues.redhat.com/browse/STOR-2792): STOR-2842: Enable Hyperdisk-balanced High Availability disks [#158](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/158)
* [STOR-2793](https://issues.redhat.com/browse/STOR-2793): Add volume snapshot class of type images [#165](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/165)
* [STOR-2543](https://issues.redhat.com/browse/STOR-2543): Add VAC manifest to support tests on GCP PD [#160](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/160)
* [OCPBUGS-69742](https://issues.redhat.com/browse/OCPBUGS-69742): Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.22 [#159](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/159)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/f8782653af61f43542e3403f35d682649973b769...6b00096f4a84203a69467802b846f215b4e04888)
### [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook/tree/d7675f312ffdc8501032ff8217776cd7172b6bb0)
* [CCO-786](https://issues.redhat.com/browse/CCO-786): update to pick up tls-cipher-suites and tls-min-version [#16](https://github.com/openshift/gcp-workload-identity-federation-webhook/pull/16)
* [CCO-730](https://issues.redhat.com/browse/CCO-730): Revendor upstream changes [#14](https://github.com/openshift/gcp-workload-identity-federation-webhook/pull/14)
* [OCPBUGS-69839](https://issues.redhat.com/browse/OCPBUGS-69839): Updating gcp-workload-identity-federation-webhook-container image to be consistent with ART for 4.22 [#13](https://github.com/openshift/gcp-workload-identity-federation-webhook/pull/13)
* [Full changelog](https://github.com/openshift/gcp-workload-identity-federation-webhook/compare/d481e5cb9323b01964bf143b58403b62fa31e5e7...d7675f312ffdc8501032ff8217776cd7172b6bb0)
### [haproxy-router](https://github.com/openshift/router/tree/896390778ebe15f57f87e6ca78f11c96e64c2652)
* [NE-2332](https://issues.redhat.com/browse/NE-2332): Add support for TLS curves in HAProxy configuration [#755](https://github.com/openshift/router/pull/755)
* [TRT-2597](https://issues.redhat.com/browse/TRT-2597): [Revert "NE-2333: Add support for configurable SSL curves in HAProxy configuration"](https://github.com/openshift/router/pull/754#top) [#754](https://github.com/openshift/router/pull/754)
* [NE-2333](https://issues.redhat.com/browse/NE-2333): Add support for configurable SSL curves in HAProxy configuration [#678](https://github.com/openshift/router/pull/678)
* [OCPBUGS-77773](https://issues.redhat.com/browse/OCPBUGS-77773): fix backend server health check if DCM is enabled [#747](https://github.com/openshift/router/pull/747)
* [OCPBUGS-62238](https://issues.redhat.com/browse/OCPBUGS-62238): configure TLS profile for metrics endpoint [#748](https://github.com/openshift/router/pull/748)
* NO-JIRA: Do not install weak dependencies such as logrotate [#687](https://github.com/openshift/router/pull/687)
* [NE-2418](https://issues.redhat.com/browse/NE-2418): Add haproxy_max_connections metric [#728](https://github.com/openshift/router/pull/728)
* [OCPBUGS-75009](https://issues.redhat.com/browse/OCPBUGS-75009): sort list of map entries on DCM [#738](https://github.com/openshift/router/pull/738)
* [OCPBUGS-75010](https://issues.redhat.com/browse/OCPBUGS-75010): Change how DCM identifies state changes [#725](https://github.com/openshift/router/pull/725)
* [OCPBUGS-67161](https://issues.redhat.com/browse/OCPBUGS-67161): Replace HTTP backend liveness check with admin socket check [#737](https://github.com/openshift/router/pull/737)
* [OCPBUGS-77412](https://issues.redhat.com/browse/OCPBUGS-77412): reload router if route is changed on DCM [#739](https://github.com/openshift/router/pull/739)
* NO-JIRA: hack: steps to run router locally [#712](https://github.com/openshift/router/pull/712)
* [NE-2468](https://issues.redhat.com/browse/NE-2468): Migrate away from deprecated ioutil [#693](https://github.com/openshift/router/pull/693)
* [OCPBUGS-74511](https://issues.redhat.com/browse/OCPBUGS-74511): remove RouteExternalCertificate feature gate [#730](https://github.com/openshift/router/pull/730)
* [NE-2483](https://issues.redhat.com/browse/NE-2483): bump k8s libraries to v0.35.0 [#729](https://github.com/openshift/router/pull/729)
* [OCPBUGS-72591](https://issues.redhat.com/browse/OCPBUGS-72591): Lower verbosity for parseIPList empty list logging [#709](https://github.com/openshift/router/pull/709)
* NO-JIRA: hack: update image without push [#711](https://github.com/openshift/router/pull/711)
* NO-JIRA: add jcmoraisjr to owners [#717](https://github.com/openshift/router/pull/717)
* [OCPBUGS-70068](https://issues.redhat.com/browse/OCPBUGS-70068): Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.22 [#707](https://github.com/openshift/router/pull/707)
* [OCPBUGS-65482](https://issues.redhat.com/browse/OCPBUGS-65482): Fix HAProxy redirect: strip port from Host header [#696](https://github.com/openshift/router/pull/696)
* [Full changelog](https://github.com/openshift/router/compare/b231c65b5c06c1f74590ca8e77caecc6213beb6a...896390778ebe15f57f87e6ca78f11c96e64c2652)
### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/9193b12ab88e006723c8605bea1659bfcbe7d638)
* [OCPBUGS-78990](https://issues.redhat.com/browse/OCPBUGS-78990): Bump 1.35.3 to master [#2633](https://github.com/openshift/kubernetes/pull/2633)
* [OCPBUGS-78986](https://issues.redhat.com/browse/OCPBUGS-78986): UPSTREAM: 137926: KEP-961: demote maxUnavailable feature in statefulset to off by default [#2632](https://github.com/openshift/kubernetes/pull/2632)
* NO-JIRA: UPSTREAM: <carry>: Register OpenShift cloud providers in k8s-tests-ext [#2635](https://github.com/openshift/kubernetes/pull/2635)
* [OCPBUGS-78504](https://issues.redhat.com/browse/OCPBUGS-78504): unflake HPAConfigurableTolerance test [#2631](https://github.com/openshift/kubernetes/pull/2631)
* UPSTREAM: <carry>: OCPBUGS-39360: Fix ClusterIsIPv6() detection for dual-stack v6-primary clusters [#2603](https://github.com/openshift/kubernetes/pull/2603)
* NO-JIRA: UPSTREAM: <carry>: Add jacobsee and jubittajohn to DOWNSTREAM_OWNERS [#2630](https://github.com/openshift/kubernetes/pull/2630)
* [OCPBUGS-77866](https://issues.redhat.com/browse/OCPBUGS-77866): Bump 1.35.2 to master [#2612](https://github.com/openshift/kubernetes/pull/2612)
* [OCPBUGS-73813](https://issues.redhat.com/browse/OCPBUGS-73813): UPSTREAM: <carry>: un-skip MutableCSINodeAllocatableCount tests [#2613](https://github.com/openshift/kubernetes/pull/2613)
* [OCPSTRAT-2728](https://issues.redhat.com/browse/OCPSTRAT-2728): Rebase to 1.35 [#2523](https://github.com/openshift/kubernetes/pull/2523)
* [OCPBUGS-66338](https://issues.redhat.com/browse/OCPBUGS-66338): UPSTREAM: 135629: selinux: Fix the controller to ignore finished pods [#2538](https://github.com/openshift/kubernetes/pull/2538)
* [OCPBUGS-67200](https://issues.redhat.com/browse/OCPBUGS-67200): UPSTREAM: 136202: raise kubelet CSI init backoff to cover ~140s DNS delays [#2578](https://github.com/openshift/kubernetes/pull/2578)
* [OKD-259](https://issues.redhat.com/browse/OKD-259): Validate OKD featureset to prevent it from being enabled on OCP clusters [#2420](https://github.com/openshift/kubernetes/pull/2420)
* [OCPBUGS-73913](https://issues.redhat.com/browse/OCPBUGS-73913): UPSTREAM: 135340: cbor: bump limits [#2564](https://github.com/openshift/kubernetes/pull/2564)
* [OCPBUGS-70170](https://issues.redhat.com/browse/OCPBUGS-70170): add label serial for iperf2 testing [#2559](https://github.com/openshift/kubernetes/pull/2559)
* [OCPBUGS-63045](https://issues.redhat.com/browse/OCPBUGS-63045): enable InPlace resize test [#2532](https://github.com/openshift/kubernetes/pull/2532)
* NO-ISSUE: Extend k8s suite timeouts for parallel testing load [#2497](https://github.com/openshift/kubernetes/pull/2497)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/kubernetes/compare/f80fdf620b057bc3c66a6feb8b6cdc9f33f2c5c9...9193b12ab88e006723c8605bea1659bfcbe7d638)
### [hypershift](https://github.com/openshift/hypershift/tree/db4a00917eee389079fba1608e993f9b67d957d9)
* [OCPBUGS-83285](https://issues.redhat.com/browse/OCPBUGS-83285): revert 5.0 supported version from release-4.22 [#8216](https://github.com/openshift/hypershift/pull/8216)
* [CNTRLPLANE-3233](https://issues.redhat.com/browse/CNTRLPLANE-3233): ci(gha): add release-4.22 branch to GitHub Actions workflows [#8218](https://github.com/openshift/hypershift/pull/8218)
* [CNTRLPLANE-3197](https://issues.redhat.com/browse/CNTRLPLANE-3197): update latest supported version from 4.22 to 4.23 [#8193](https://github.com/openshift/hypershift/pull/8193)
* [CNTRLPLANE-3174](https://issues.redhat.com/browse/CNTRLPLANE-3174): Add unit tests for CPO controller packages [#8184](https://github.com/openshift/hypershift/pull/8184)
* [CNTRLPLANE-3215](https://issues.redhat.com/browse/CNTRLPLANE-3215): fix envtest GHA workflow path filters for CRD test suites [#8200](https://github.com/openshift/hypershift/pull/8200)
* [CNTRLPLANE-2078](https://issues.redhat.com/browse/CNTRLPLANE-2078): add unit tests for AWS Route53 and IAM [#8079](https://github.com/openshift/hypershift/pull/8079)
* [OCPBUGS-82301](https://issues.redhat.com/browse/OCPBUGS-82301): fix(catalogs): use semver comparison for catalog version cap to handle OCP 5.0 [#8195](https://github.com/openshift/hypershift/pull/8195)
* NO-JIRA: control-plane-pki-operator: fix Event emission logic, format [#8190](https://github.com/openshift/hypershift/pull/8190)
* [OCPBUGS-82192](https://issues.redhat.com/browse/OCPBUGS-82192): fix(webhookcerts): handle upgrade from service-ca managed certs [#8189](https://github.com/openshift/hypershift/pull/8189)
* [OCPBUGS-82159](https://issues.redhat.com/browse/OCPBUGS-82159): fix(ignition-server): use major+minor version comparison for OCP 5.0 payloads [#8182](https://github.com/openshift/hypershift/pull/8182)
* [CNTRLPLANE-2511](https://issues.redhat.com/browse/CNTRLPLANE-2511): refactor(cpo): move OAuth internal LB annotation into ReconcileService [#8185](https://github.com/openshift/hypershift/pull/8185)
* [CNTRLPLANE-2511](https://issues.redhat.com/browse/CNTRLPLANE-2511): Support OAuth LoadBalancer with Azure Private Link Service [#8149](https://github.com/openshift/hypershift/pull/8149)
* [OCPBUGS-81644](https://issues.redhat.com/browse/OCPBUGS-81644): fix(cli): fix Azure destroy cluster leaving vnet/nsg resource groups for private topology [#8151](https://github.com/openshift/hypershift/pull/8151)
* [OCPBUGS-33097](https://issues.redhat.com/browse/OCPBUGS-33097): Remove deprecated OVNSbDb service type from default strategy mappings [#8164](https://github.com/openshift/hypershift/pull/8164)
* [CNTRLPLANE-3174](https://issues.redhat.com/browse/CNTRLPLANE-3174): test: Add unit tests for product-cli, token-minter, and sync-fg-configmap [#8178](https://github.com/openshift/hypershift/pull/8178)
* [CNTRLPLANE-3050](https://issues.redhat.com/browse/CNTRLPLANE-3050): feat(ci): use Konflux-built image for GitHub Actions runners [#8092](https://github.com/openshift/hypershift/pull/8092)
* [CNTRLPLANE-2841](https://issues.redhat.com/browse/CNTRLPLANE-2841): test(e2e): add metrics-forwarder e2e test verifying data-plane scraping [#8147](https://github.com/openshift/hypershift/pull/8147)
* [CNTRLPLANE-3037](https://issues.redhat.com/browse/CNTRLPLANE-3037): Create separate assets package specifically for CRD management [#8150](https://github.com/openshift/hypershift/pull/8150)
* [GCP-462](https://issues.redhat.com/browse/GCP-462): Add GCP hosted cluster documentation [#8027](https://github.com/openshift/hypershift/pull/8027)
* NO-JIRA: docs(ci): add sync-community-fork token rotation guide [#8173](https://github.com/openshift/hypershift/pull/8173)
* [CNTRLPLANE-2841](https://issues.redhat.com/browse/CNTRLPLANE-2841): feat(HCCO): reintroduce guest cluster metrics forwarder for control plane metrics [#8146](https://github.com/openshift/hypershift/pull/8146)
* NO-JIRA: fix(e2e): handle rate limiter context deadline error during cleanup [#8137](https://github.com/openshift/hypershift/pull/8137)
* NO-JIRA: fix(ci): remove catch-all pattern from codecov ignore list [#8171](https://github.com/openshift/hypershift/pull/8171)
* [CNTRLPLANE-2511](https://issues.redhat.com/browse/CNTRLPLANE-2511): Allow LoadBalancer publishing strategy for OAuthServer on self-managed Azure [#8148](https://github.com/openshift/hypershift/pull/8148)
* NO-JIRA: chore(ci): add client/ to codecov ignore list [#8167](https://github.com/openshift/hypershift/pull/8167)
* NO-JIRA: feat(e2e): add Azure platform support for backup/restore tests [#8144](https://github.com/openshift/hypershift/pull/8144)
* [OCPBUGS-74960](https://issues.redhat.com/browse/OCPBUGS-74960): prevent resource leak on deletion and handle DependencyViolation [#7868](https://github.com/openshift/hypershift/pull/7868)
* NO-JIRA: docs: expand custom images guide with Dockerfile.dev and CPO override [#8155](https://github.com/openshift/hypershift/pull/8155)
* [CNTRLPLANE-3042](https://issues.redhat.com/browse/CNTRLPLANE-3042): Parallelize make verify targets for faster local development [#8051](https://github.com/openshift/hypershift/pull/8051)
* NO-JIRA: ci: fix codecov ignore patterns for docs and nested files [#8156](https://github.com/openshift/hypershift/pull/8156)
* [OCPBUGS-81270](https://issues.redhat.com/browse/OCPBUGS-81270): fix(external-dns): mitigate Azure DNS API throttling [#8098](https://github.com/openshift/hypershift/pull/8098)
* NO-JIRA: ci: ignore non-Go files in codecov coverage analysis [#8154](https://github.com/openshift/hypershift/pull/8154)
* [OCPBUGS-67240](https://issues.redhat.com/browse/OCPBUGS-67240): Ignition generalize image download errors [#7673](https://github.com/openshift/hypershift/pull/7673)
* NO-JIRA: fix(Makefile): auto-detect upstream remote for lint [#8152](https://github.com/openshift/hypershift/pull/8152)
* [OCPBUGS-79539](https://issues.redhat.com/browse/OCPBUGS-79539): fix(cpo-v2): preserve HCCO modifications to OCM Controllers field [#8072](https://github.com/openshift/hypershift/pull/8072)
* [AUTOSCALE-582](https://issues.redhat.com/browse/AUTOSCALE-582): wire CRD sync and CEL adjustments into karpenter-api target [#8119](https://github.com/openshift/hypershift/pull/8119)
* [CNTRLPLANE-3111](https://issues.redhat.com/browse/CNTRLPLANE-3111): docs: add service publishing strategies reference documentation [#8107](https://github.com/openshift/hypershift/pull/8107)
* NO-JIRA: ci: make docs deploy preview non-blocking [#8145](https://github.com/openshift/hypershift/pull/8145)
* Revert "CNTRLPLANE-2841: feat(HCCO): add guest cluster metrics forwarder for control plane metrics" [#8141](https://github.com/openshift/hypershift/pull/8141)
* NO-JIRA: fix(e2e): handle dual RHCOS payloads in Karpenter drift OS image check [#8128](https://github.com/openshift/hypershift/pull/8128)
* [OCPBUGS-50003](https://issues.redhat.com/browse/OCPBUGS-50003): add ConfigMap fallback and EC2 error caching for vCPU metrics resolution [#6723](https://github.com/openshift/hypershift/pull/6723)
* [CNTRLPLANE-2172](https://issues.redhat.com/browse/CNTRLPLANE-2172): feat(azure): add private endpoint access topology for self-managed HostedClusters [#7821](https://github.com/openshift/hypershift/pull/7821)
* [CNTRLPLANE-2841](https://issues.redhat.com/browse/CNTRLPLANE-2841): feat(HCCO): add guest cluster metrics forwarder for control plane metrics [#7790](https://github.com/openshift/hypershift/pull/7790)
* [CNTRLPLANE-2797](https://issues.redhat.com/browse/CNTRLPLANE-2797): hypershift-operator webhooks port 9443 respect cluster TLS security profile [#8078](https://github.com/openshift/hypershift/pull/8078)
* [OCPBUGS-50603](https://issues.redhat.com/browse/OCPBUGS-50603): Create dedicated identity for KAS bootstrap container [#6827](https://github.com/openshift/hypershift/pull/6827)
* Revert "NO-JIRA: test(e2e): extend AWS guest resource cleanup timeout" [#8138](https://github.com/openshift/hypershift/pull/8138)
* NO-JIRA: ci: improve CI efficiency and codecov configuration [#8113](https://github.com/openshift/hypershift/pull/8113)
* NO-JIRA: test(e2e): add KubeVirt platform to backup/restore e2e test [#8131](https://github.com/openshift/hypershift/pull/8131)
* [OCPBUGS-81162](https://issues.redhat.com/browse/OCPBUGS-81162): fix(cpo): skip router LB services for ARO HCP [#8087](https://github.com/openshift/hypershift/pull/8087)
* NO-JIRA: ci: enable paths filter on envtest workflows [#8125](https://github.com/openshift/hypershift/pull/8125)
* NO-JIRA: test(e2e): extend AWS guest resource cleanup timeout [#8124](https://github.com/openshift/hypershift/pull/8124)
* NO-JIRA: fix(test): deep copy CRDs inside envtest retry loop [#8127](https://github.com/openshift/hypershift/pull/8127)
* NO-JIRA: chore(docs-agg): remove document count from aggregated file [#8126](https://github.com/openshift/hypershift/pull/8126)
* NO-JIRA: ci: separate envtest from unit tests in CI workflow [#8120](https://github.com/openshift/hypershift/pull/8120)
* [OCPBUGS-80926](https://issues.redhat.com/browse/OCPBUGS-80926): consolidate disaster-recovery prerequisites into dedicated page [#8080](https://github.com/openshift/hypershift/pull/8080)
* [CNTRLPLANE-3116](https://issues.redhat.com/browse/CNTRLPLANE-3116): fix(ci): drop pip cache from docs-preview workflow [#8116](https://github.com/openshift/hypershift/pull/8116)
* NO-JIRA: fix(api): regenerate feature gate manifests for ExternalOIDCWithUpstreamParity [#8117](https://github.com/openshift/hypershift/pull/8117)
* [OCPBUGS-78763](https://issues.redhat.com/browse/OCPBUGS-78763): fix: global-pull-secret daemonset node labeling race condition causes pods not to be scheduled on Replace upgrade strategy nodes in time [#7981](https://github.com/openshift/hypershift/pull/7981)
* [CNTRLPLANE-3037](https://issues.redhat.com/browse/CNTRLPLANE-3037): Introduce envtest for integration tests alternative [#8089](https://github.com/openshift/hypershift/pull/8089)
* [CNTRLPLANE-3116](https://issues.redhat.com/browse/CNTRLPLANE-3116): ci(docs): migrate docs-preview job to GitHub Actions [#8109](https://github.com/openshift/hypershift/pull/8109)
* [CNTRLPLANE-244](https://issues.redhat.com/browse/CNTRLPLANE-244): fix(ci): configure Codecov PR comments and add unit tests [#8085](https://github.com/openshift/hypershift/pull/8085)
* NO-JIRA: chore(deps): weekly dependabot consolidation [#8077](https://github.com/openshift/hypershift/pull/8077)
* [OCPBUGS-78931](https://issues.redhat.com/browse/OCPBUGS-78931): add KubeVirt-specific backup settings [#8022](https://github.com/openshift/hypershift/pull/8022)
* [OCPBUGS-81284](https://issues.redhat.com/browse/OCPBUGS-81284): fix(release): allow multiple machine-os component versions [#8101](https://github.com/openshift/hypershift/pull/8101)
* NO-JIRA: fix(aws): load credentials from --aws-creds file using SDK v2 [#8095](https://github.com/openshift/hypershift/pull/8095)
* NO-JIRA: chore(ci): update hypershift-ci-2 manifests [#8062](https://github.com/openshift/hypershift/pull/8062)
* [CNTRLPLANE-2678](https://issues.redhat.com/browse/CNTRLPLANE-2678): Adapt etcd-backup command and add HO namespace manifests [#8040](https://github.com/openshift/hypershift/pull/8040)
* [CNTRLPLANE-2551](https://issues.redhat.com/browse/CNTRLPLANE-2551): Hypershift integration for API Auth Config changes [#7774](https://github.com/openshift/hypershift/pull/7774)
* [GCP-447](https://issues.redhat.com/browse/GCP-447): inject token-minter as native sidecar init container [#7965](https://github.com/openshift/hypershift/pull/7965)
* [AUTOSCALE-538](https://issues.redhat.com/browse/AUTOSCALE-538), [AUTOSCALE-539](https://issues.redhat.com/browse/AUTOSCALE-539): Add Autonode status node counts + enabled condition to HostedCluster API [#7794](https://github.com/openshift/hypershift/pull/7794)
* [CNTRLPLANE-244](https://issues.redhat.com/browse/CNTRLPLANE-244): ci: add Codecov integration to unit test workflow [#8060](https://github.com/openshift/hypershift/pull/8060)
* [CNTRLPLANE-3050](https://issues.redhat.com/browse/CNTRLPLANE-3050): Pre-build lint tools and fix Konflux pipeline triggers [#8052](https://github.com/openshift/hypershift/pull/8052)
* [CNTRLPLANE-2838](https://issues.redhat.com/browse/CNTRLPLANE-2838): feat(CPO): add metrics-proxy control plane component [#7752](https://github.com/openshift/hypershift/pull/7752)
* [CNTRLPLANE-2787](https://issues.redhat.com/browse/CNTRLPLANE-2787): Introduce BASE_DOMAIN env var for E2E test configuration [#7930](https://github.com/openshift/hypershift/pull/7930)
* [CNTRLPLANE-2786](https://issues.redhat.com/browse/CNTRLPLANE-2786): Extend controller architecture diagram with consumes relationship [#8029](https://github.com/openshift/hypershift/pull/8029)
* [IR-350](https://issues.redhat.com/browse/IR-350): add tls security profile configuration for the image registry operator [#8011](https://github.com/openshift/hypershift/pull/8011)
* [AUTOSCALE-571](https://issues.redhat.com/browse/AUTOSCALE-571): fix(karpenter): don't associate public IP addresses for the default OpenshiftEC2NodeClass [#7853](https://github.com/openshift/hypershift/pull/7853)
* NO-JIRA: feat(e2e): skip SupportedVersionSkew condition on OCP < 4.21 in backup/restore tests [#8067](https://github.com/openshift/hypershift/pull/8067)
* [CNTRLPLANE-2076](https://issues.redhat.com/browse/CNTRLPLANE-2076): remove v2 import aliases left from SDK migration [#8063](https://github.com/openshift/hypershift/pull/8063)
* [AUTOSCALE-559](https://issues.redhat.com/browse/AUTOSCALE-559): PrivateLink plumbing for karpenter ec2nodeclass subnets [#7791](https://github.com/openshift/hypershift/pull/7791)
* [STOR-2770](https://issues.redhat.com/browse/STOR-2770): Generate Azure Disk and File CSI Driver Operator metrics serving certs by HCP controller [#7970](https://github.com/openshift/hypershift/pull/7970)
* [CNTRLPLANE-2678](https://issues.redhat.com/browse/CNTRLPLANE-2678): Add fetch-etcd-certs CPO subcommand for HCPEtcdBackup [#8010](https://github.com/openshift/hypershift/pull/8010)
* NO-JIRA: revert(api): remove APIServer Route CEL validation for Azure [#8074](https://github.com/openshift/hypershift/pull/8074)
* [CNTRLPLANE-2172](https://issues.redhat.com/browse/CNTRLPLANE-2172): feat(api): add Azure private endpoint access and PrivateLinkService CRD [#8055](https://github.com/openshift/hypershift/pull/8055)
* [OCPSTRAT-2831](https://issues.redhat.com/browse/OCPSTRAT-2831): chore(owners): add cblecker to core-reviewers and core-approvers [#8018](https://github.com/openshift/hypershift/pull/8018)
* [OCPBUGS-79428](https://issues.redhat.com/browse/OCPBUGS-79428): Add recipe for ACM/MCE HyperShift Operator overrides [#8057](https://github.com/openshift/hypershift/pull/8057)
* [CNTRLPLANE-2076](https://issues.redhat.com/browse/CNTRLPLANE-2076): complete SDK v1 removal and post-migration cleanup [#8038](https://github.com/openshift/hypershift/pull/8038)
* [CNTRLPLANE-2049](https://issues.redhat.com/browse/CNTRLPLANE-2049): update GCP validation error expectations in TestOnCreateAPIUX [#8037](https://github.com/openshift/hypershift/pull/8037)
* [CNTRLPLANE-3046](https://issues.redhat.com/browse/CNTRLPLANE-3046): feat(ci): add monitoring and alerting for ARC runners [#8044](https://github.com/openshift/hypershift/pull/8044)
* [CNTRLPLANE-3049](https://issues.redhat.com/browse/CNTRLPLANE-3049): split verify checks into individual GitHub Actions workflows [#8049](https://github.com/openshift/hypershift/pull/8049)
* [OCPBUGS-79352](https://issues.redhat.com/browse/OCPBUGS-79352): fix(oapi): force WatchList feature gate to disabled for openshift-apiserver [#8035](https://github.com/openshift/hypershift/pull/8035)
* [OCPBUGS-79071](https://issues.redhat.com/browse/OCPBUGS-79071): Fix AWSEndpointService private-router teardown stuck on active VPC Endpoint connections [#8030](https://github.com/openshift/hypershift/pull/8030)
* [CNTRLPLANE-3041](https://issues.redhat.com/browse/CNTRLPLANE-3041): Override ARO/HCP 4.20 CPO with Azure Pod Identity backport [#8025](https://github.com/openshift/hypershift/pull/8025)
* [CNTRLPLANE-3054](https://issues.redhat.com/browse/CNTRLPLANE-3054): Apply init task 0.3 migration to fix broken Konflux pipelines [#8053](https://github.com/openshift/hypershift/pull/8053)
* [OCPBUGS-70301](https://issues.redhat.com/browse/OCPBUGS-70301): force-remove karpenter finalizer when guest KAS is down [#7939](https://github.com/openshift/hypershift/pull/7939)
* [CNTRLPLANE-3047](https://issues.redhat.com/browse/CNTRLPLANE-3047): fix(ci): use community fork token for checkout credential helper [#8050](https://github.com/openshift/hypershift/pull/8050)
* [CNTRLPLANE-2788](https://issues.redhat.com/browse/CNTRLPLANE-2788): validate memory quantity in KubeVirt nodepool create [#7884](https://github.com/openshift/hypershift/pull/7884)
* NO-JIRA: chore(ci): update Konflux Tekton tasks to latest versions [#8048](https://github.com/openshift/hypershift/pull/8048)
* [CNTRLPLANE-3048](https://issues.redhat.com/browse/CNTRLPLANE-3048): refactor gh-actions-runner pipelines and improve CEL triggers [#8045](https://github.com/openshift/hypershift/pull/8045)
* [OCPBUGS-79369](https://issues.redhat.com/browse/OCPBUGS-79369): Add Konflux archived PipelineRun skill and update task discovery [#8043](https://github.com/openshift/hypershift/pull/8043)
* [CNTRLPLANE-3047](https://issues.redhat.com/browse/CNTRLPLANE-3047): add workflow to sync hypershift-community fork [#8042](https://github.com/openshift/hypershift/pull/8042)
* NO-JIRA: chore(claude): add restructure-commits plugin command [#7927](https://github.com/openshift/hypershift/pull/7927)
* [CNTRLPLANE-2986](https://issues.redhat.com/browse/CNTRLPLANE-2986): feat(ci): Add self-hosted GitHub Actions runners for HyperShift [#7980](https://github.com/openshift/hypershift/pull/7980)
* NO-JIRA: fix(ci): pass --upgrade-versions to konflux task update skill [#8036](https://github.com/openshift/hypershift/pull/8036)
* [CNTRLPLANE-2998](https://issues.redhat.com/browse/CNTRLPLANE-2998): Migrate SQS to AWS SDK v2 [#8015](https://github.com/openshift/hypershift/pull/8015)
* NO-JIRA: refactor(oadp): unify backup/restore e2e test with platform auto-detection [#7971](https://github.com/openshift/hypershift/pull/7971)
* [OCPBUGS-78996](https://issues.redhat.com/browse/OCPBUGS-78996): fix(test): create SQS queue dynamically in spot termination handler e2e test [#8007](https://github.com/openshift/hypershift/pull/8007)
* [CNTRLPLANE-2049](https://issues.redhat.com/browse/CNTRLPLANE-2049): fix(api): audit and improve GCP API validation rules [#8003](https://github.com/openshift/hypershift/pull/8003)
* [CNTRLPLANE-2081](https://issues.redhat.com/browse/CNTRLPLANE-2081): Migrate RAM and ARN to AWS SDK v2 [#7986](https://github.com/openshift/hypershift/pull/7986)
* [OCPBUGS-78778](https://issues.redhat.com/browse/OCPBUGS-78778): fix(cpo): Don't remove HCP Ingress from routes when CapabilityRoute is disabled [#8001](https://github.com/openshift/hypershift/pull/8001)
* NO-JIRA: Disable parent ownership for api subdir [#8009](https://github.com/openshift/hypershift/pull/8009)
* NO-JIRA: fix(api): replace CEL url() validators with regex to fix CRD cost budget [#8004](https://github.com/openshift/hypershift/pull/8004)
* [OCPBUGS-78544](https://issues.redhat.com/browse/OCPBUGS-78544): Update base images to address multiple CVEs flagged by MSFT security scans [#7983](https://github.com/openshift/hypershift/pull/7983)
* [OCPBUGS-78705](https://issues.redhat.com/browse/OCPBUGS-78705): Bootstrap CVO manifests should be filtered based on feature-set annotation [#7984](https://github.com/openshift/hypershift/pull/7984)
* NO-JIRA: fix(api): extend kubeapilinter scope to all non-vendor API types [#8002](https://github.com/openshift/hypershift/pull/8002)
* NO-JIRA: build(e2e): include hypershift binary in Dockerfile.e2e [#7919](https://github.com/openshift/hypershift/pull/7919)
* [CNTRLPLANE-2925](https://issues.redhat.com/browse/CNTRLPLANE-2925): add NodePool.Status.NodesInfo for node version distribution [#7917](https://github.com/openshift/hypershift/pull/7917)
* [OCPSTRAT-2336](https://issues.redhat.com/browse/OCPSTRAT-2336): Adjust karpenter API to OpenShift conventions [#7952](https://github.com/openshift/hypershift/pull/7952)
* [OCPBUGS-78539](https://issues.redhat.com/browse/OCPBUGS-78539): chore(e2e): add temporary crash toleration for dns-operator [#7978](https://github.com/openshift/hypershift/pull/7978)
* [CNTRLPLANE-2172](https://issues.redhat.com/browse/CNTRLPLANE-2172): fix(e2e): register Azure private platform e2e flags [#7977](https://github.com/openshift/hypershift/pull/7977)
* NO-JIRA: chore(owners): require api-approvers approval for api/ changes [#7972](https://github.com/openshift/hypershift/pull/7972)
* Update Kube API Linter config for new APIs [#7982](https://github.com/openshift/hypershift/pull/7982)
* NO-JIRA: add .gitattributes to collapse generated files in PR diffs [#7918](https://github.com/openshift/hypershift/pull/7918)
* [CNTRLPLANE-2910](https://issues.redhat.com/browse/CNTRLPLANE-2910): feat(cpo): add Azure workload identity webhook as KAS sidecar [#7867](https://github.com/openshift/hypershift/pull/7867)
* [CNTRLPLANE-2077](https://issues.redhat.com/browse/CNTRLPLANE-2077): refactor(cleanzones): migrate AWS SDK from v1 to v2 [#7960](https://github.com/openshift/hypershift/pull/7960)
* [CNTRLPLANE-2219](https://issues.redhat.com/browse/CNTRLPLANE-2219): feat(aws): migrate ec2 to AWS SDK v2 [#7871](https://github.com/openshift/hypershift/pull/7871)
* [GCP-440](https://issues.redhat.com/browse/GCP-440): Fix GCP boot image discovery from CoreOS stream metadata [#7881](https://github.com/openshift/hypershift/pull/7881)
* NO-JIRA: fix(oadp): correct Agent platform API group in backup/restore resources [#7974](https://github.com/openshift/hypershift/pull/7974)
* [OCPBUGS-78356](https://issues.redhat.com/browse/OCPBUGS-78356): fix(sharedingress): coalesce HAProxy reloads to prevent reload storms [#7945](https://github.com/openshift/hypershift/pull/7945)
* [CNTRLPLANE-2172](https://issues.redhat.com/browse/CNTRLPLANE-2172): fix(operator): accept Azure as valid private-platform value [#7968](https://github.com/openshift/hypershift/pull/7968)
* NO-JIRA: Rename cilium directory to v1.15.1 [#7888](https://github.com/openshift/hypershift/pull/7888)
* [OCPBUGS-70354](https://issues.redhat.com/browse/OCPBUGS-70354): add serviceAccount to global-pull-secret-syncer [#7439](https://github.com/openshift/hypershift/pull/7439)
* NO-JIRA: feat(e2e): add OIDC IAM fix and NodePool validation to backup/restore [#7837](https://github.com/openshift/hypershift/pull/7837)
* [CNTRLPLANE-2172](https://issues.redhat.com/browse/CNTRLPLANE-2172): feat(install): register Azure private platform flags [#7912](https://github.com/openshift/hypershift/pull/7912)
* [CNTRLPLANE-2978](https://issues.redhat.com/browse/CNTRLPLANE-2978): Add Azure CPO override for OCP 4.20 [#7955](https://github.com/openshift/hypershift/pull/7955)
* [OCPBUGS-65687](https://issues.redhat.com/browse/OCPBUGS-65687): fix(cpo): prevent informer creation for inaccessible resource types [#7819](https://github.com/openshift/hypershift/pull/7819)
* [GCP-441](https://issues.redhat.com/browse/GCP-441): correct CCM crash toleration key to match pod label [#7926](https://github.com/openshift/hypershift/pull/7926)
* [CNTRLPLANE-2916](https://issues.redhat.com/browse/CNTRLPLANE-2916): conditionally create openshift-ingress network policy based on route labeling [#7872](https://github.com/openshift/hypershift/pull/7872)
* NO-JIRA: chore: add .git/ to .dockerignore [#7944](https://github.com/openshift/hypershift/pull/7944)
* NO-JIRA: fix(test): add aws-node-termination-handler to safe-evict audited list [#7816](https://github.com/openshift/hypershift/pull/7816)
* NO-JIRA: test(scheduler): add pair loss recovery unit coverage [#7848](https://github.com/openshift/hypershift/pull/7848)
* [OCPBUGS-67262](https://issues.redhat.com/browse/OCPBUGS-67262): fix(e2e): Use NodePool replicas as authoritative source for expected node count instead of CountAvailableNodes [#7378](https://github.com/openshift/hypershift/pull/7378)
* [OCPBUGS-77160](https://issues.redhat.com/browse/OCPBUGS-77160): include NMStateConfig in Agent platform OADP backup resources [#7847](https://github.com/openshift/hypershift/pull/7847)
* [AUTOSCALE-571](https://issues.redhat.com/browse/AUTOSCALE-571): fix(karpenter): select existing private subnets for default `OpenshiftEC2NodeClass` [#7933](https://github.com/openshift/hypershift/pull/7933)
* [OCPBUGS-78198](https://issues.redhat.com/browse/OCPBUGS-78198): fix(catalogs): update catalog image version cap to 4.21 [#7915](https://github.com/openshift/hypershift/pull/7915)
* [OCPBUGS-78184](https://issues.redhat.com/browse/OCPBUGS-78184): fix(hostedcluster): Remove referenced resource annotations regardless of hcp status [#7913](https://github.com/openshift/hypershift/pull/7913)
* [CNTRLPLANE-2203](https://issues.redhat.com/browse/CNTRLPLANE-2203): reintroduce ControlPlaneConnectionAvailable condition with conformance fix [#7746](https://github.com/openshift/hypershift/pull/7746)
* [OCPBUGS-78185](https://issues.redhat.com/browse/OCPBUGS-78185): Fix deadlock when changing release image during initial provisioning [#7910](https://github.com/openshift/hypershift/pull/7910)
* [CNTRLPLANE-634](https://issues.redhat.com/browse/CNTRLPLANE-634): Make external-dns interval and AWS zones cache duration configurable [#7931](https://github.com/openshift/hypershift/pull/7931)
* [OCPBUGS-78045](https://issues.redhat.com/browse/OCPBUGS-78045): allow autonode provisioned arm instances [#7893](https://github.com/openshift/hypershift/pull/7893)
* [OCPBUGS-78329](https://issues.redhat.com/browse/OCPBUGS-78329): fix(releaseinfo): allow periods in version display name regex [#7940](https://github.com/openshift/hypershift/pull/7940)
* [OCPBUGS-78223](https://issues.redhat.com/browse/OCPBUGS-78223): add NodePool Rollouts reference documentation [#7923](https://github.com/openshift/hypershift/pull/7923)
* NO-JIRA: chore(gitignore): add .claude/worktrees/ to .gitignore [#7938](https://github.com/openshift/hypershift/pull/7938)
* [OCPBUGS-78189](https://issues.redhat.com/browse/OCPBUGS-78189): fix(e2e): fix nil deref in validateAWSGuestResourcesDeletedFunc [#7911](https://github.com/openshift/hypershift/pull/7911)
* [OCPBUGS-77514](https://issues.redhat.com/browse/OCPBUGS-77514): E2E filter rolling upgrade verification to current MachineSet [#7864](https://github.com/openshift/hypershift/pull/7864)
* [OCPBUGS-77703](https://issues.redhat.com/browse/OCPBUGS-77703): fix(api): add omitempty to NodePoolAutoScaling.Min for N-1 compatibility [#7849](https://github.com/openshift/hypershift/pull/7849)
* [GCP-411](https://issues.redhat.com/browse/GCP-411): Add comprehensive unit tests for ReconcileInfrastructure [#7895](https://github.com/openshift/hypershift/pull/7895)
* NO-JIRA: fix KubeVirtAdvancedMultinetTest IPv6 and apk errors [#7860](https://github.com/openshift/hypershift/pull/7860)
* NO-JIRA: chore(e2e): increase nodepool condition check timeout [#7906](https://github.com/openshift/hypershift/pull/7906)
* [CNTRLPLANE-2789](https://issues.redhat.com/browse/CNTRLPLANE-2789): add StatefulSet test case to controlplane-component reconcile tests [#7764](https://github.com/openshift/hypershift/pull/7764)
* NO-JIRA: Add CodeRabbit config to exclude autogenerated files [#7905](https://github.com/openshift/hypershift/pull/7905)
* [CNTRLPLANE-2933](https://issues.redhat.com/browse/CNTRLPLANE-2933): add docs recipe for SPO configuration in HCP environments [#7886](https://github.com/openshift/hypershift/pull/7886)
* [CNTRLPLANE-2031](https://issues.redhat.com/browse/CNTRLPLANE-2031): test(e2e): add comprehensive backup and restore test suite [#7745](https://github.com/openshift/hypershift/pull/7745)
* [CNTRLPLANE-2588](https://issues.redhat.com/browse/CNTRLPLANE-2588): docs: add dependabot triage agent to AI CI jobs documentation [#7889](https://github.com/openshift/hypershift/pull/7889)
* [CNTRLPLANE-2793](https://issues.redhat.com/browse/CNTRLPLANE-2793): Cache MCS TLS certificate generation in ignition provider [#7841](https://github.com/openshift/hypershift/pull/7841)
* [ROSAENG-132](https://issues.redhat.com/browse/ROSAENG-132): fix(karpenter): Set Ready condition to False when version resolution fails [#7866](https://github.com/openshift/hypershift/pull/7866)
* NO-JIRA: api: fix AutoNode types to comply with OpenShift API conventions [#7859](https://github.com/openshift/hypershift/pull/7859)
* NO-JIRA: chore(deps): weekly dependabot consolidation [#7876](https://github.com/openshift/hypershift/pull/7876)
* [OCPBUGS-39604](https://issues.redhat.com/browse/OCPBUGS-39604): Include shared ingress resources in render output for proper uninstall cleanup [#7836](https://github.com/openshift/hypershift/pull/7836)
* [OCPBUGS-76645](https://issues.redhat.com/browse/OCPBUGS-76645): Make generated container names k8s compliant [#7711](https://github.com/openshift/hypershift/pull/7711)
* [OCPBUGS-77254](https://issues.redhat.com/browse/OCPBUGS-77254): fix(globalps): watch Machine updates to fix node labeling race condition [#7803](https://github.com/openshift/hypershift/pull/7803)
* [GCP-441](https://issues.redhat.com/browse/GCP-441): tolerate 1 restart for GCP CCM token-minter race condition [#7865](https://github.com/openshift/hypershift/pull/7865)
* NO-JIRA: chore(deps): weekly dependabot consolidation [#7863](https://github.com/openshift/hypershift/pull/7863)
* [OCPBUGS-77477](https://issues.redhat.com/browse/OCPBUGS-77477): fix(awsutil): handle smithy errors in AWSErrorCode [#7827](https://github.com/openshift/hypershift/pull/7827)
* [SREP-3855](https://issues.redhat.com/browse/SREP-3855): unpause leaked child objects on deleting clusters (OCPBUGS-77530) [#7861](https://github.com/openshift/hypershift/pull/7861)
* [CNTRLPLANE-2218](https://issues.redhat.com/browse/CNTRLPLANE-2218): feat(aws): migrate ELB/ELBV2 to AWS SDK v2 [#7825](https://github.com/openshift/hypershift/pull/7825)
* [OCPBUGS-77621](https://issues.redhat.com/browse/OCPBUGS-77621): fix(nodepool): preserve ignition-reached annotation on token secret after restore [#7851](https://github.com/openshift/hypershift/pull/7851)
* [OCPBUGS-76337](https://issues.redhat.com/browse/OCPBUGS-76337): feat(scale-from-zero): add DescribeInstanceTypes IAM permission [#7648](https://github.com/openshift/hypershift/pull/7648)
* [GCP-391](https://issues.redhat.com/browse/GCP-391): Add ImageRegistry GSA field and IAM binding for Image Registry Operator [#7828](https://github.com/openshift/hypershift/pull/7828)
* [CNTRLPLANE-2801](https://issues.redhat.com/browse/CNTRLPLANE-2801): fix(router): deploy router services for private ARO and remove KAS/OAPI dependencies [#7845](https://github.com/openshift/hypershift/pull/7845)
* [CNTRLPLANE-2842](https://issues.redhat.com/browse/CNTRLPLANE-2842): Fix context cancel accumulation in getMirrorFromICSPOrIDMS [#7846](https://github.com/openshift/hypershift/pull/7846)
* [CNTRLPLANE-2801](https://issues.redhat.com/browse/CNTRLPLANE-2801): api: remove redundant kubebuilder enum marker from KeyVaultAccess field [#7835](https://github.com/openshift/hypershift/pull/7835)
* NO-JIRA: bug(metrics): fix typo in `hypershift_cluster_waiting_initial_availability_duration_seconds` metric [#7730](https://github.com/openshift/hypershift/pull/7730)
* [CNTRLPLANE-2840](https://issues.redhat.com/browse/CNTRLPLANE-2840): fix(endpoint-resolver): sort pods by name for deterministic ordering [#7854](https://github.com/openshift/hypershift/pull/7854)
* [CNTRLPLANE-2808](https://issues.redhat.com/browse/CNTRLPLANE-2808): bump golang.org/x dependencies in / and /api modules [#7818](https://github.com/openshift/hypershift/pull/7818)
* [CNTRLPLANE-2840](https://issues.redhat.com/browse/CNTRLPLANE-2840): feat(CPO): add endpoint-resolver control plane component [#7786](https://github.com/openshift/hypershift/pull/7786)
* [CNTRLPLANE-2794](https://issues.redhat.com/browse/CNTRLPLANE-2794): Re-add TestGetDigest and TestGetManifest with mockgen mocks [#7777](https://github.com/openshift/hypershift/pull/7777)
* [OCPBUGS-77034](https://issues.redhat.com/browse/OCPBUGS-77034): fix(ho): add nil guard for Platform.AWS in metrics collector [#7747](https://github.com/openshift/hypershift/pull/7747)
* [GCP-295](https://issues.redhat.com/browse/GCP-295): Add GCP platform support to E2E test framework [#7697](https://github.com/openshift/hypershift/pull/7697)
* [OCPBUGS-76997](https://issues.redhat.com/browse/OCPBUGS-76997): remove resource limits from Agent CAPI provider [#7812](https://github.com/openshift/hypershift/pull/7812)
* [OCPBUGS-60936](https://issues.redhat.com/browse/OCPBUGS-60936): fix(hccp): remove immutable field from kubeletconfigmap [#6726](https://github.com/openshift/hypershift/pull/6726)
* [OCPBUGS-77311](https://issues.redhat.com/browse/OCPBUGS-77311): handle HostedCluster deletion in secretJanitor to prevent stuck cluster deletions [#7779](https://github.com/openshift/hypershift/pull/7779)
* [OCPBUGS-60185](https://issues.redhat.com/browse/OCPBUGS-60185): Remove non-deterministic registry override computation from ignition-server [#7811](https://github.com/openshift/hypershift/pull/7811)
* [CNTRLPLANE-2784](https://issues.redhat.com/browse/CNTRLPLANE-2784): Document IAM policies for PowerVS credential fields [#7778](https://github.com/openshift/hypershift/pull/7778)
* [CNTRLPLANE-2801](https://issues.redhat.com/browse/CNTRLPLANE-2801): add Key Vault private endpoint TCP relay via private router [#7701](https://github.com/openshift/hypershift/pull/7701)
* [CNTRLPLANE-2217](https://issues.redhat.com/browse/CNTRLPLANE-2217): feat(aws): migrate kms and Resource Tagging to AWS SDK v2 [#7795](https://github.com/openshift/hypershift/pull/7795)
* [CNTRLPLANE-2807](https://issues.redhat.com/browse/CNTRLPLANE-2807): Fix version showing <unknown> in git worktree builds [#7814](https://github.com/openshift/hypershift/pull/7814)
* [OCPBUGS-65636](https://issues.redhat.com/browse/OCPBUGS-65636): add service account to konnectivity-agent [#7309](https://github.com/openshift/hypershift/pull/7309)
* NO-JIRA: docs(pki): add CA hierarchy diagram and trust distribution details [#7799](https://github.com/openshift/hypershift/pull/7799)
* [CNTRLPLANE-2799](https://issues.redhat.com/browse/CNTRLPLANE-2799): Unit test HCP availability and Ready flag reconciliation [#7796](https://github.com/openshift/hypershift/pull/7796)
* [OCPBUGS-67262](https://issues.redhat.com/browse/OCPBUGS-67262): fix(sync-global-pullsecret): compare content ignoring trailing newlines [#7638](https://github.com/openshift/hypershift/pull/7638)
* [GCP-386](https://issues.redhat.com/browse/GCP-386): scope externaldns RBAC to GCP platform only [#7781](https://github.com/openshift/hypershift/pull/7781)
* [OCPBUGS-76350](https://issues.redhat.com/browse/OCPBUGS-76350): Honor AWS AMI override in NodePool token generation [#7675](https://github.com/openshift/hypershift/pull/7675)
* [OCPBUGS-60185](https://issues.redhat.com/browse/OCPBUGS-60185): Fix ignition-server pod restarts due to MIRRORED_RELEASE_IMAGE flapping [#7588](https://github.com/openshift/hypershift/pull/7588)
* NO-JIRA: docs(agents): add multi-module structure guidance to AGENTS.md [#7797](https://github.com/openshift/hypershift/pull/7797)
* [OCPBUGS-76452](https://issues.redhat.com/browse/OCPBUGS-76452): update OAuth certificate configuration doc [#7785](https://github.com/openshift/hypershift/pull/7785)
* [GCP-402](https://issues.redhat.com/browse/GCP-402): Add gcp-project and gcp-region flags to hypershift install [#7710](https://github.com/openshift/hypershift/pull/7710)
* [GCP-376](https://issues.redhat.com/browse/GCP-376): Add service account for storage [#7676](https://github.com/openshift/hypershift/pull/7676)
* [GCP-367](https://issues.redhat.com/browse/GCP-367): enable multizone support in CCM cloud config [#7731](https://github.com/openshift/hypershift/pull/7731)
* [OCPBUGS-77224](https://issues.redhat.com/browse/OCPBUGS-77224): fix(routing): add Azure platform to LabelHCPRoutes() switch [#7789](https://github.com/openshift/hypershift/pull/7789)
* [CNTRLPLANE-2220](https://issues.redhat.com/browse/CNTRLPLANE-2220): feat(aws): migrate iam to AWS SDK v2 [#7765](https://github.com/openshift/hypershift/pull/7765)
* NO-JIRA: Skip ./dev directory in codespell checks [#7775](https://github.com/openshift/hypershift/pull/7775)
* NO-JIRA: MCE 2.17 konflux pipielines [#7736](https://github.com/openshift/hypershift/pull/7736)
* NO-JIRA: chore: add powervs-reviewers to OWNERS_ALIASES and OWNERS [#7782](https://github.com/openshift/hypershift/pull/7782)
* [OCPBUGS-59876](https://issues.redhat.com/browse/OCPBUGS-59876): feat: implement CLI-based OIDC disaster recovery command [#7210](https://github.com/openshift/hypershift/pull/7210)
* [OCPBUGS-62177](https://issues.redhat.com/browse/OCPBUGS-62177): revert CRR controller changes [#7784](https://github.com/openshift/hypershift/pull/7784)
* [OCPBUGS-65824](https://issues.redhat.com/browse/OCPBUGS-65824): Add dynamic NodePort range validation to prevent cluster creation failures [#7652](https://github.com/openshift/hypershift/pull/7652)
* [CNTRLPLANE-2740](https://issues.redhat.com/browse/CNTRLPLANE-2740): Set unhealthyPodEvictionPolicy to AlwaysAllow on all PDBs [#7721](https://github.com/openshift/hypershift/pull/7721)
* [OCPBUGS-32770](https://issues.redhat.com/browse/OCPBUGS-32770): fix(kubevirt): require CAPK image to be explicitly specified [#7615](https://github.com/openshift/hypershift/pull/7615)
* [OCPBUGS-62177](https://issues.redhat.com/browse/OCPBUGS-62177): fix(pki): use pod container port instead of kubeconfig service port [#7744](https://github.com/openshift/hypershift/pull/7744)
* [CNTRLPLANE-1987](https://issues.redhat.com/browse/CNTRLPLANE-1987): Ensure Azure HCP CLI infra commands work correctly [#7436](https://github.com/openshift/hypershift/pull/7436)
* NO-JIRA: fix(e2e): retry guest cluster API calls in EnsureFeatureGateStatus [#7723](https://github.com/openshift/hypershift/pull/7723)
* [OCPBUGS-70152](https://issues.redhat.com/browse/OCPBUGS-70152): Correct route labeling logic for HCP router infratructure [#7605](https://github.com/openshift/hypershift/pull/7605)
* [CNTRLPLANE-2216](https://issues.redhat.com/browse/CNTRLPLANE-2216): feat(aws): migrate route53 to AWS SDK v2 [#7726](https://github.com/openshift/hypershift/pull/7726)
* [OCPBUGS-43449](https://issues.redhat.com/browse/OCPBUGS-43449): Remove UltraSSD_LRS from DiskStorageAccountType for OS Disks [#7727](https://github.com/openshift/hypershift/pull/7727)
* [CNTRLPLANE-644](https://issues.redhat.com/browse/CNTRLPLANE-644): Unify Validate/Complete Function Signatures Across Providers [#7577](https://github.com/openshift/hypershift/pull/7577)
* [OCPBUGS-65879](https://issues.redhat.com/browse/OCPBUGS-65879): Fix image-overrides annotation removal propagation to HCP [#7533](https://github.com/openshift/hypershift/pull/7533)
* [CNTRLPLANE-2740](https://issues.redhat.com/browse/CNTRLPLANE-2740): Add KAS liveness readiness sidecar to OAS and OAuth API Server [#7722](https://github.com/openshift/hypershift/pull/7722)
* [OCPBUGS-34662](https://issues.redhat.com/browse/OCPBUGS-34662): Manage AWS EBS CSI driver metrics serving certificates via CPO [#7538](https://github.com/openshift/hypershift/pull/7538)
* [OCPBUGS-73915](https://issues.redhat.com/browse/OCPBUGS-73915): Use openshift golang builder for MCE builds [#7735](https://github.com/openshift/hypershift/pull/7735)
* NO-JIRA: Remove .claude/settings.json [#7751](https://github.com/openshift/hypershift/pull/7751)
* [OCPBUGS-62177](https://issues.redhat.com/browse/OCPBUGS-62177): Fix certificate revocation validation across all KAS pods [#7405](https://github.com/openshift/hypershift/pull/7405)
* [CNTRLPLANE-2696](https://issues.redhat.com/browse/CNTRLPLANE-2696): docs(azure): add managed Azure control plane authentication documentation [#7653](https://github.com/openshift/hypershift/pull/7653)
* NO-JIRA: test(e2e): add CloudController field to GCP ServiceAccountsEmails structs [#7739](https://github.com/openshift/hypershift/pull/7739)
* [AUTOSCALE-485](https://issues.redhat.com/browse/AUTOSCALE-485): bump karpenter-aws dependencies to 1.8.6 [#7611](https://github.com/openshift/hypershift/pull/7611)
* [TRT-2554](https://issues.redhat.com/browse/TRT-2554): Revert #7489 "CNTRLPLANE-2203: add ControlPlaneConnectionAvailable condition" [#7734](https://github.com/openshift/hypershift/pull/7734)
* [GCP-367](https://issues.redhat.com/browse/GCP-367): Implement GCP Cloud Controller Manager component [#7677](https://github.com/openshift/hypershift/pull/7677)
* [OCPBUGS-72596](https://issues.redhat.com/browse/OCPBUGS-72596): Fix node-tuning-operator metrics port configuration [#7468](https://github.com/openshift/hypershift/pull/7468)
* [CNTRLPLANE-2203](https://issues.redhat.com/browse/CNTRLPLANE-2203): add ControlPlaneConnectionAvailable condition [#7489](https://github.com/openshift/hypershift/pull/7489)
* [GCP-386](https://issues.redhat.com/browse/GCP-386): feat(gcp): enable DNS delegation for hosted cluster ingress via DNSEndpoint [#7702](https://github.com/openshift/hypershift/pull/7702)
* NO-JIRA: ci: fix bug in leader election detection [#7696](https://github.com/openshift/hypershift/pull/7696)
* [GCP-308](https://issues.redhat.com/browse/GCP-308): test: verify control plane workloads have resource requests [#7623](https://github.com/openshift/hypershift/pull/7623)
* [OCPBUGS-60707](https://issues.redhat.com/browse/OCPBUGS-60707): Fix user-ca-bundle cleanup when additionalTrustBundle is removed [#6900](https://github.com/openshift/hypershift/pull/6900)
* [CNTRLPLANE-2736](https://issues.redhat.com/browse/CNTRLPLANE-2736): Rename review-agent-single-pr to address-review-comments [#7709](https://github.com/openshift/hypershift/pull/7709)
* [CNTRLPLANE-2215](https://issues.redhat.com/browse/CNTRLPLANE-2215): feat(aws): migrate S3 to AWS SDK v2 [#7678](https://github.com/openshift/hypershift/pull/7678)
* NO-JIRA: test(nodepool): add unit tests for scale-from-zero annotations [#7688](https://github.com/openshift/hypershift/pull/7688)
* [OCPBUGS-55151](https://issues.redhat.com/browse/OCPBUGS-55151): Move proxy certificate validation from metrics collector to reconcile loop [#7536](https://github.com/openshift/hypershift/pull/7536)
* [CNTRLPLANE-418](https://issues.redhat.com/browse/CNTRLPLANE-418): Aro swift private [#7613](https://github.com/openshift/hypershift/pull/7613)
* [CNTRLPLANE-2700](https://issues.redhat.com/browse/CNTRLPLANE-2700): docs: add HCP networking requirements documentation [#7654](https://github.com/openshift/hypershift/pull/7654)
* [CNTRLPLANE-2675](https://issues.redhat.com/browse/CNTRLPLANE-2675): chore(cpo): move infrastructure reconciliation to infra package [#7658](https://github.com/openshift/hypershift/pull/7658)
* [GCP-216](https://issues.redhat.com/browse/GCP-216): feat(nodepool): add GCP platform support [#7631](https://github.com/openshift/hypershift/pull/7631)
* [GCP-199](https://issues.redhat.com/browse/GCP-199): add DNS management to Control Plane Operator [#7639](https://github.com/openshift/hypershift/pull/7639)
* [AUTOSCALE-492](https://issues.redhat.com/browse/AUTOSCALE-492): karpenter-ignition controller [#7582](https://github.com/openshift/hypershift/pull/7582)
* [OCPBUGS-66966](https://issues.redhat.com/browse/OCPBUGS-66966): loop over node-pool conditions updating in order [#7325](https://github.com/openshift/hypershift/pull/7325)
* [SREP-715](https://issues.redhat.com/browse/SREP-715): New option to dump data plane content through the kube API server service exposed in HCP namespaces [#6533](https://github.com/openshift/hypershift/pull/6533)
* [OCPBUGS-74620](https://issues.redhat.com/browse/OCPBUGS-74620): test(e2e): increase default node ready timeout to 45 minutes [#7629](https://github.com/openshift/hypershift/pull/7629)
* [OCPBUGS-74498](https://issues.redhat.com/browse/OCPBUGS-74498): Add UserAgent telemetry to CPO Azure SDK clients [#7620](https://github.com/openshift/hypershift/pull/7620)
* [OCPBUGS-74931](https://issues.redhat.com/browse/OCPBUGS-74931): fix(hcco): gate image registry workaround to pre-4.20 releases [#7634](https://github.com/openshift/hypershift/pull/7634)
* NO-JIRA: docs(aws): add AWS PrivateLink architecture documentation [#7645](https://github.com/openshift/hypershift/pull/7645)
* NO-JIRA: chore(ai): Add skills for dev workflow [#7636](https://github.com/openshift/hypershift/pull/7636)
* [CNTRLPLANE-2709](https://issues.redhat.com/browse/CNTRLPLANE-2709): Update Dependabot to use conventional commits [#7672](https://github.com/openshift/hypershift/pull/7672)
* [CNTRLPLANE-2703](https://issues.redhat.com/browse/CNTRLPLANE-2703): Disable Renovate dependency updates [#7657](https://github.com/openshift/hypershift/pull/7657)
* [OCPBUGS-74988](https://issues.redhat.com/browse/OCPBUGS-74988): fix(test): resolve E2E flakes in global-pull-secret-syncer DaemonSet readiness checks [#7627](https://github.com/openshift/hypershift/pull/7627)
* [CNTRLPLANE-2214](https://issues.redhat.com/browse/CNTRLPLANE-2214): Migrate STS to AWS SDK v2 [#7386](https://github.com/openshift/hypershift/pull/7386)
* NO-JIRA:Docs: update documentation URL from netlify to pages.dev [#7622](https://github.com/openshift/hypershift/pull/7622)
* [GCP-366](https://issues.redhat.com/browse/GCP-366): add CloudController service account for CCM [#7617](https://github.com/openshift/hypershift/pull/7617)
* NO-JIRA: ci: Improves the `isLeaderElectionFailure` function: [#7589](https://github.com/openshift/hypershift/pull/7589)
* NO-JIRA: Fix teardown flag timing in e2e tests [#7586](https://github.com/openshift/hypershift/pull/7586)
* [CNTRLPLANE-2548](https://issues.redhat.com/browse/CNTRLPLANE-2548): add direct Jira REST API integration to pr-report [#7532](https://github.com/openshift/hypershift/pull/7532)
* [OCPSTRAT-2437](https://issues.redhat.com/browse/OCPSTRAT-2437): add unit test for custom HAProxy image annotation [#7458](https://github.com/openshift/hypershift/pull/7458)
* [CNTRLPLANE-1708](https://issues.redhat.com/browse/CNTRLPLANE-1708): Enable EnsureGlobalPullSecret AtLeast Version418 [#7624](https://github.com/openshift/hypershift/pull/7624)
* [CNTRLPLANE-418](https://issues.redhat.com/browse/CNTRLPLANE-418): fix shared ingress AllowedCIDRs to use fc_src for PROXY protocol [#7587](https://github.com/openshift/hypershift/pull/7587)
* [AUTOSCALE-535](https://issues.redhat.com/browse/AUTOSCALE-535): default block device mappings [#7583](https://github.com/openshift/hypershift/pull/7583)
* [OCPBUGS-69447](https://issues.redhat.com/browse/OCPBUGS-69447): feat(updates): enable CVO metrics access with RHOBS monitoring flag [#7399](https://github.com/openshift/hypershift/pull/7399)
* [GCP-198](https://issues.redhat.com/browse/GCP-198): add PSC endpoint controller for customer-side management [#7603](https://github.com/openshift/hypershift/pull/7603)
* [CNTRLPLANE-2650](https://issues.redhat.com/browse/CNTRLPLANE-2650): docs(ci): add security requirement for Jira agent issues [#7626](https://github.com/openshift/hypershift/pull/7626)
* [CNTRLPLANE-2650](https://issues.redhat.com/browse/CNTRLPLANE-2650): docs: add AI-assisted CI jobs documentation [#7598](https://github.com/openshift/hypershift/pull/7598)
* [OCPBUGS-62760](https://issues.redhat.com/browse/OCPBUGS-62760): Pre-pull images to avoid startup delays and flaky e2e [#7382](https://github.com/openshift/hypershift/pull/7382)
* [OCPBUGS-74247](https://issues.redhat.com/browse/OCPBUGS-74247): CAPI image overrides aware of registry config [#7575](https://github.com/openshift/hypershift/pull/7575)
* [CNTRLPLANE-1137](https://issues.redhat.com/browse/CNTRLPLANE-1137): Add support for external CNI provider Cilium [#7423](https://github.com/openshift/hypershift/pull/7423)
* [GCP-176](https://issues.redhat.com/browse/GCP-176): feat(gcp): add WIF credentials support for control plane op… [#7600](https://github.com/openshift/hypershift/pull/7600)
* NO-JIRA: test(assets): add unit test for CAPI resources file paths [#7601](https://github.com/openshift/hypershift/pull/7601)
* [CNTRLPLANE-2580](https://issues.redhat.com/browse/CNTRLPLANE-2580): feat(claude): update /update-konflux-tasks to work without log file [#7591](https://github.com/openshift/hypershift/pull/7591)
* [GCP-213](https://issues.redhat.com/browse/GCP-213): feat(platform): add Google Cloud Platform support with CAPG Deployment [#7305](https://github.com/openshift/hypershift/pull/7305)
* [OCPBUGS-62944](https://issues.redhat.com/browse/OCPBUGS-62944): forceful termination of instances during HCP AutoNode deletion [#7281](https://github.com/openshift/hypershift/pull/7281)
* NO-JIRA: build: bump Go version to 1.25.3 [#7592](https://github.com/openshift/hypershift/pull/7592)
* [CNTRLPLANE-1388](https://issues.redhat.com/browse/CNTRLPLANE-1388): Spot with termination handler [#7567](https://github.com/openshift/hypershift/pull/7567)
* [CNTRLPLANE-1892](https://issues.redhat.com/browse/CNTRLPLANE-1892): chore(e2ev2): fixup GCP API checks [#7555](https://github.com/openshift/hypershift/pull/7555)
* NO-JIRA: ci: update build root image to Go 1.25 [#7584](https://github.com/openshift/hypershift/pull/7584)
* [CNTRLPLANE-1988](https://issues.redhat.com/browse/CNTRLPLANE-1988): Add Azure support to product CLI for self-managed customers [#7407](https://github.com/openshift/hypershift/pull/7407)
* [AUTOSCALE-373](https://issues.redhat.com/browse/AUTOSCALE-373): Proper ROSA instance tagging for AutoNode [#6939](https://github.com/openshift/hypershift/pull/6939)
* [OCPBUGS-63345](https://issues.redhat.com/browse/OCPBUGS-63345): AWS credential metric to distinguish unknown from invalid status [#7075](https://github.com/openshift/hypershift/pull/7075)
* [OCPBUGS-74336](https://issues.redhat.com/browse/OCPBUGS-74336): feat(cpo): check components have rolled out before setting available [#7434](https://github.com/openshift/hypershift/pull/7434)
* NO-JIRA: chore(deps): weekly dependabot consolidation [#7563](https://github.com/openshift/hypershift/pull/7563)
* [OCPBUGS-64576](https://issues.redhat.com/browse/OCPBUGS-64576): fix(dump): Fix dump command failure when EC2NodeClass resource is not registered [#7147](https://github.com/openshift/hypershift/pull/7147)
* [CNTRLPLANE-2559](https://issues.redhat.com/browse/CNTRLPLANE-2559): feat(contrib): add request serving setup utility [#7534](https://github.com/openshift/hypershift/pull/7534)
* [CNV-76520](https://issues.redhat.com/browse/CNV-76520): ci: allow restart of kubevirt-cloud-controller-manager [#7469](https://github.com/openshift/hypershift/pull/7469)
* NO-JIRA: fix(test): shorten scale-from-zero test name to avoid IAM role length limit [#7558](https://github.com/openshift/hypershift/pull/7558)
* [OTA-1833](https://issues.redhat.com/browse/OTA-1833): Adopt a new FeatureSet OKD [#7557](https://github.com/openshift/hypershift/pull/7557)
* [OCPBUGS-62761](https://issues.redhat.com/browse/OCPBUGS-62761): chore(e2e): remove KAS check from capi pod [#7485](https://github.com/openshift/hypershift/pull/7485)
* [OCPBUGS-73817](https://issues.redhat.com/browse/OCPBUGS-73817): fix: add hypershift.openshift.io/nodepool-globalps-enabled label to be ignored in cluster-autoscaler deployment [#7480](https://github.com/openshift/hypershift/pull/7480)
* [OCPBUGS-65885](https://issues.redhat.com/browse/OCPBUGS-65885): added 1.34 required ELBv2 perms to CCM role [#7339](https://github.com/openshift/hypershift/pull/7339)
* [API-1835](https://issues.redhat.com/browse/API-1835): Scaffold dynamic informers [#7477](https://github.com/openshift/hypershift/pull/7477)
* [CNTRLPLANE-2579](https://issues.redhat.com/browse/CNTRLPLANE-2579): feat(konflux): add script to update pipeline task bundles to latest trusted versions [#7553](https://github.com/openshift/hypershift/pull/7553)
* [OCPBUGS-58397](https://issues.redhat.com/browse/OCPBUGS-58397): feat(KubeVirt): configure External evictionStrategy on VMs [#6380](https://github.com/openshift/hypershift/pull/6380)
* [GCP-197](https://issues.redhat.com/browse/GCP-197): add GCPPrivateServiceConnect controller for managing Service Attachments for Private Service Connect [#7302](https://github.com/openshift/hypershift/pull/7302)
* NO-JIRA: fix(e2e): TestNodePoolAutoscalingScaleFromZero for 4.20 and later only [#7556](https://github.com/openshift/hypershift/pull/7556)
* [CNTRLPLANE-2291](https://issues.redhat.com/browse/CNTRLPLANE-2291): feat(claude): add fix-hypershift-repo-robot-pr command [#7438](https://github.com/openshift/hypershift/pull/7438)
* [CNTRLPLANE-2568](https://issues.redhat.com/browse/CNTRLPLANE-2568): Update Konflux Tekton tasks to latest versions [#7551](https://github.com/openshift/hypershift/pull/7551)
* NO-JIRA: test(ingress): add test for clearing LoadBalancerSourceRanges [#7544](https://github.com/openshift/hypershift/pull/7544)
* NO-JIRA: fix(claude): fix Claude Code subagents frontmatter [#7550](https://github.com/openshift/hypershift/pull/7550)
* NO-JIRA: chore(deps): bump github.com/opencontainers/selinux from 1.11.0 to 1.13.0 [#7462](https://github.com/openshift/hypershift/pull/7462)
* [OCPBUGS-55399](https://issues.redhat.com/browse/OCPBUGS-55399): Add NTO Service and ServiceMonitor [#7355](https://github.com/openshift/hypershift/pull/7355)
* NO-JIRA: test(autoscaling): make GPU annotation optional in scale-from-zero test [#7484](https://github.com/openshift/hypershift/pull/7484)
* [OCPBUGS-73914](https://issues.redhat.com/browse/OCPBUGS-73914): Update Tekton tasks to pass enterprise contract validation [#7535](https://github.com/openshift/hypershift/pull/7535)
* NO-JIRA: chore(deps): bump github.com/cloudflare/circl from 1.3.7 to 1.6.1 in /hack/tools [#7463](https://github.com/openshift/hypershift/pull/7463)
* NO-JIRA: Add karpenter approvers and reviewers [#7488](https://github.com/openshift/hypershift/pull/7488)
* NO-JIRA: chore(ho): update lower bound version checks for OCP 5 [#7472](https://github.com/openshift/hypershift/pull/7472)
* NO-JIRA: fix(docs): strip markdown links from aggregated documentation [#7487](https://github.com/openshift/hypershift/pull/7487)
* NO-JIRA: chore(deps): bump github-dependencies group with 17 updates [#7455](https://github.com/openshift/hypershift/pull/7455)
* [OCPBUGS-73847](https://issues.redhat.com/browse/OCPBUGS-73847): fix(cli): use /tags endpoint for all release streams to enable RC filtering [#7483](https://github.com/openshift/hypershift/pull/7483)
* [OCPBUGS-67234](https://issues.redhat.com/browse/OCPBUGS-67234): fix(hostedcluster): unpause CAPI cluster when deleting paused HostedCluster [#7389](https://github.com/openshift/hypershift/pull/7389)
* [OCPBUGS-72258](https://issues.redhat.com/browse/OCPBUGS-72258): use InfraStatus.APIPort for custom DNS kubeconfig [#7470](https://github.com/openshift/hypershift/pull/7470)
* [API-1835](https://issues.redhat.com/browse/API-1835): Scaffold OpenShiftManager controller [#7445](https://github.com/openshift/hypershift/pull/7445)
* [CNTRLPLANE-1768](https://issues.redhat.com/browse/CNTRLPLANE-1768): feat(api): add support for graceful service account signing key rotation [#7324](https://github.com/openshift/hypershift/pull/7324)
* [OCPBUGS-66205](https://issues.redhat.com/browse/OCPBUGS-66205): [kubevirt] Make L3 migration labeling conditional [#7308](https://github.com/openshift/hypershift/pull/7308)
* NO-JIRA: chore(deps): bump Azure SDK and misc-dependencies groups [#7464](https://github.com/openshift/hypershift/pull/7464)
* NO-JIRA: chore(tekton): update Konflux task digests to latest versions [#7465](https://github.com/openshift/hypershift/pull/7465)
* [OCPBUGS-70320](https://issues.redhat.com/browse/OCPBUGS-70320): enable scale-up from zero with InPlace upgrade [#7427](https://github.com/openshift/hypershift/pull/7427)
* NO-JIRA: Add review process docs to CONTRIBUTING.md [#7426](https://github.com/openshift/hypershift/pull/7426)
* [CNTRLPLANE-208](https://issues.redhat.com/browse/CNTRLPLANE-208): Document needed Azure infrastructure [#7361](https://github.com/openshift/hypershift/pull/7361)
* NO-JIRA: fix(deps): update k8s.io/utils digest to 914a6e7 [#7450](https://github.com/openshift/hypershift/pull/7450)
* NO-JIRA: chore(deps): bump misc-dependencies group with 11 updates [#7437](https://github.com/openshift/hypershift/pull/7437)
* [OCPBUGS-72411](https://issues.redhat.com/browse/OCPBUGS-72411): fix(cno): use brackets only for IPv6 in server URL [#7447](https://github.com/openshift/hypershift/pull/7447)
* NO-JIRA: chore(konflux): update Tekton tasks to latest versions [#7451](https://github.com/openshift/hypershift/pull/7451)
* [OCPBUGS-72397](https://issues.redhat.com/browse/OCPBUGS-72397): Fix Konflux EC voilation, update deprecated base … [#7442](https://github.com/openshift/hypershift/pull/7442)
* NO-JIRA: docs(konflux): add IMAGE_RELEASE_PROCESS.md [#7432](https://github.com/openshift/hypershift/pull/7432)
* NO-JIRA: test(e2e): fix AKS e2e test flakiness [#7410](https://github.com/openshift/hypershift/pull/7410)
* [CNTRLPLANE-1978](https://issues.redhat.com/browse/CNTRLPLANE-1978): add e2e tests for DataPlaneConnectionAvailable condition [#7291](https://github.com/openshift/hypershift/pull/7291)
* [AUTOSCALE-473](https://issues.redhat.com/browse/AUTOSCALE-473): Add HostedCluster annotation for karpenter ec2nodeclass instanceProfile [#7392](https://github.com/openshift/hypershift/pull/7392)
* NO-JIRA: fix(awseps): cache local zone ID in non-shared VPC case [#7409](https://github.com/openshift/hypershift/pull/7409)
* [OCPBUGS-66211](https://issues.redhat.com/browse/OCPBUGS-66211): fix(azure): preserve defaulted values in Infrastructure status [#7393](https://github.com/openshift/hypershift/pull/7393)
* [OCPBUGS-69761](https://issues.redhat.com/browse/OCPBUGS-69761): fix(ingress): clear LoadBalancerSourceRanges when AllowedCIDRBlocks is removed [#7425](https://github.com/openshift/hypershift/pull/7425)
* [GCP-258](https://issues.redhat.com/browse/GCP-258): Use PullAlways for :latest image tags in control plane components [#7313](https://github.com/openshift/hypershift/pull/7313)
* [OCPBUGS-63698](https://issues.redhat.com/browse/OCPBUGS-63698): fix(azure): remove CSI secret ownership from hypershift-operator [#7157](https://github.com/openshift/hypershift/pull/7157)
* [OCPBUGS-66154](https://issues.redhat.com/browse/OCPBUGS-66154): add OAuth certificate configuration doc [#7351](https://github.com/openshift/hypershift/pull/7351)
* [OCPBUGS-67224](https://issues.redhat.com/browse/OCPBUGS-67224): fix(Portieris): Fix Portieris by mounting emptyDir to './.trust' work dir [#7368](https://github.com/openshift/hypershift/pull/7368)
* [CNTRLPLANE-1622](https://issues.redhat.com/browse/CNTRLPLANE-1622): Enable nodepool autoscaling min zero [#6975](https://github.com/openshift/hypershift/pull/6975)
* [CNTRLPLANE-2119](https://issues.redhat.com/browse/CNTRLPLANE-2119): feat(hostedcluster): implement service account signing key rotation [#6874](https://github.com/openshift/hypershift/pull/6874)
* [OCPBUGS-66325](https://issues.redhat.com/browse/OCPBUGS-66325): fix: ValidAWSIdentityProvider condition not being correctly copied from HCP [#7352](https://github.com/openshift/hypershift/pull/7352)
* NO-JIRA: fix(install): skip IPAM CRDs if they already exist [#7363](https://github.com/openshift/hypershift/pull/7363)
* [CNTRLPLANE-1977](https://issues.redhat.com/browse/CNTRLPLANE-1977): Add weekly PR report generation capability [#7272](https://github.com/openshift/hypershift/pull/7272)
* [OCPBUGS-68366](https://issues.redhat.com/browse/OCPBUGS-68366): CVE-2025-58183 [#7374](https://github.com/openshift/hypershift/pull/7374)
* [CNTRLPLANE-2123](https://issues.redhat.com/browse/CNTRLPLANE-2123): feat: update builder images from 4.21 to 4.22 [#7317](https://github.com/openshift/hypershift/pull/7317)
* [OCPBUGS-63452](https://issues.redhat.com/browse/OCPBUGS-63452): Add finalizer protection to control plane workloads [#7258](https://github.com/openshift/hypershift/pull/7258)
* [CNTRLPLANE-2205](https://issues.redhat.com/browse/CNTRLPLANE-2205): feat(aws): enable shared role in e2e [#7400](https://github.com/openshift/hypershift/pull/7400)
* NO-JIRA: chore(azure): bump AKS Kubernetes version to 1.33.0 [#7371](https://github.com/openshift/hypershift/pull/7371)
* [CNTRLPLANE-2206](https://issues.redhat.com/browse/CNTRLPLANE-2206): Create tool to aggregate upstream docs into single file for NotebookLM [#7367](https://github.com/openshift/hypershift/pull/7367)
* [OCPBUGS-66211](https://issues.redhat.com/browse/OCPBUGS-66211): fix(vendor): bump openshift/api dependency to current master [#7345](https://github.com/openshift/hypershift/pull/7345)
* [OCPBUGS-66146](https://issues.redhat.com/browse/OCPBUGS-66146): Add OADP backup recovery tool for HyperShift clusters [#7385](https://github.com/openshift/hypershift/pull/7385)
* [CNTRLPLANE-2221](https://issues.redhat.com/browse/CNTRLPLANE-2221): Add CI infrastructure documentation [#7369](https://github.com/openshift/hypershift/pull/7369)
* [CNTRLPLANE-2123](https://issues.redhat.com/browse/CNTRLPLANE-2123): Fix buildah-remote-oci-ta task enterprise contract violation [#7396](https://github.com/openshift/hypershift/pull/7396)
* [CNTRLPLANE-2049](https://issues.redhat.com/browse/CNTRLPLANE-2049): Update kube-api-linter dependency [#7346](https://github.com/openshift/hypershift/pull/7346)
* [NVIDIA-314](https://issues.redhat.com/browse/NVIDIA-314): Support Node CIDR Allocation for networkType=Other Using AllocateNodesCIDRs [#7278](https://github.com/openshift/hypershift/pull/7278)
* [CNTRLPLANE-2123](https://issues.redhat.com/browse/CNTRLPLANE-2123): feat: update latest supported version from 4.21 to 4.22 [#7315](https://github.com/openshift/hypershift/pull/7315)
* [CNTRLPLANE-2205](https://issues.redhat.com/browse/CNTRLPLANE-2205): cmd/aws: fix managed role handling and auto-detect on destroy [#7373](https://github.com/openshift/hypershift/pull/7373)
* [CNTRLPLANE-2123](https://issues.redhat.com/browse/CNTRLPLANE-2123): feat: add release-4.21 branch to renovate configuration [#7318](https://github.com/openshift/hypershift/pull/7318)
* NO-JIRA: test: remove network-dependent unit tests for image metadata [#7381](https://github.com/openshift/hypershift/pull/7381)
* [OCPBUGS-67233](https://issues.redhat.com/browse/OCPBUGS-67233): fix(konflux): update outdated Tekton tasks to pass enterprise contract validation [#7372](https://github.com/openshift/hypershift/pull/7372)
* And 17 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/hypershift/compare/6fb603c54baa899b853e5761ecad55b5579a7c92...db4a00917eee389079fba1608e993f9b67d957d9)
### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/d9222a1c00c37d635da02b65606fde1e54b2ec03)
* [OCPCLOUD-3273](https://issues.redhat.com/browse/OCPCLOUD-3273): Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.35 (7d70282) into main [#87](https://github.com/openshift/cloud-provider-ibm/pull/87)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/c566572b2cf0120499e81181f1efb1e729e9c418...d9222a1c00c37d635da02b65606fde1e54b2ec03)
### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/aa40cd7e1a37e2f48f238fc8d293b0546d5d4caf)
* [STOR-2754](https://issues.redhat.com/browse/STOR-2754): Rebase to upstream v5.2.21 for OCP 4.22 [#118](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/118)
* [OCPBUGS-77598](https://issues.redhat.com/browse/OCPBUGS-77598): Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART for 4.22 [#129](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/129)
* [OCPBUGS-77167](https://issues.redhat.com/browse/OCPBUGS-77167): standardize build paths [#117](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/117)
* [OCPBUGS-69849](https://issues.redhat.com/browse/OCPBUGS-69849): Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART for 4.22 [#116](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/116)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/ab36dcc19e6063bf55158b59588448151a200170...aa40cd7e1a37e2f48f238fc8d293b0546d5d4caf)
### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/f859eac9612d8fff52013b809840b015cee6742d)
* [STOR-2762](https://issues.redhat.com/browse/STOR-2762): Bump all deps for 4.22 [#168](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/168)
* [OCPBUGS-77624](https://issues.redhat.com/browse/OCPBUGS-77624): Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.22 [#167](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/167)
* [STOR-2852](https://issues.redhat.com/browse/STOR-2852): Enable snapshot tests ibm vpc block csi [#160](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/160)
* [OCPBUGS-69909](https://issues.redhat.com/browse/OCPBUGS-69909): Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.22 [#159](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/159)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/00bc740728d9f8ec86fe04199884108c2a091b58...f859eac9612d8fff52013b809840b015cee6742d)
### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/03b143d588768a18fd8afa1534ea7d7a04b4d1f3)
* [OCPCLOUD-3296](https://issues.redhat.com/browse/OCPCLOUD-3296): Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.13.1 (93d5b50) into main [#142](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/142)
* [OCPBUGS-77728](https://issues.redhat.com/browse/OCPBUGS-77728): Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.22 [#151](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/151)
* [OCPCLOUD-3322](https://issues.redhat.com/browse/OCPCLOUD-3322): Update to new manifests-gen [#150](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/150)
* NO-JIRA: UPSTREAM: <carry>: Add manifests verify target [#145](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/145)
* [OCPBUGS-70027](https://issues.redhat.com/browse/OCPBUGS-70027): Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.22 [#143](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/143)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/64c2e90e3992c3c1aa761e1b5a20bd6d307d651f...03b143d588768a18fd8afa1534ea7d7a04b4d1f3)
### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/46b8c72c675770295f5c2c8f85f5f705ca35787c)
* [OCPCLOUD-3278](https://issues.redhat.com/browse/OCPCLOUD-3278): Rebase to Kube 1.35 for Machine API Provider IBM [#83](https://github.com/openshift/machine-api-provider-ibmcloud/pull/83)
* [OCPBUGS-77729](https://issues.redhat.com/browse/OCPBUGS-77729): Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.22 [#80](https://github.com/openshift/machine-api-provider-ibmcloud/pull/80)
* NO-JIRA: Modernize test infrastructure to align with other MAPI providers [#82](https://github.com/openshift/machine-api-provider-ibmcloud/pull/82)
* [OCPBUGS-71220](https://issues.redhat.com/browse/OCPBUGS-71220): Bump vpc go sdk [#76](https://github.com/openshift/machine-api-provider-ibmcloud/pull/76)
* [OCPBUGS-70030](https://issues.redhat.com/browse/OCPBUGS-70030): Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.22 [#74](https://github.com/openshift/machine-api-provider-ibmcloud/pull/74)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/e72a84714e5fb8c3256def77f7d77ffdc4b9b82e...46b8c72c675770295f5c2c8f85f5f705ca35787c)
### [insights-operator](https://github.com/openshift/insights-operator/tree/d7b9c77e6565d4452ff79cd346f3ee6b8535698c)
* [CCXDEV-15964](https://issues.redhat.com/browse/CCXDEV-15964): fetch TLS profiles from API server [#1257](https://github.com/openshift/insights-operator/pull/1257)
* [CCXDEV-15963](https://issues.redhat.com/browse/CCXDEV-15963): kubeletconfig gatherer [#1247](https://github.com/openshift/insights-operator/pull/1247)
* NO-JIRA: generate gatherer docs [#1256](https://github.com/openshift/insights-operator/pull/1256)
* [CCXDEV-16094](https://issues.redhat.com/browse/CCXDEV-16094): add config option to disable runtime extractor [#1248](https://github.com/openshift/insights-operator/pull/1248)
* [CCXDEV-16006](https://issues.redhat.com/browse/CCXDEV-16006): add permission for opentelemetrycollectors [#1252](https://github.com/openshift/insights-operator/pull/1252)
* [OCPBUGS-78115](https://issues.redhat.com/browse/OCPBUGS-78115): Fix string accessor error [#1253](https://github.com/openshift/insights-operator/pull/1253)
* [OCPBUGS-78115](https://issues.redhat.com/browse/OCPBUGS-78115): New Gatherer for OpenTelemetryCollector CRs [#1246](https://github.com/openshift/insights-operator/pull/1246)
* [OCPBUGS-78251](https://issues.redhat.com/browse/OCPBUGS-78251): Updating ose-insights-operator-container image to be consistent with ART for 4.22 [#1249](https://github.com/openshift/insights-operator/pull/1249)
* [CCXDEV-15992](https://issues.redhat.com/browse/CCXDEV-15992): obfuscation config precedence [#1223](https://github.com/openshift/insights-operator/pull/1223)
* [MON-4511](https://issues.redhat.com/browse/MON-4511): Migrate Prometheus targets discovering from Endpoints to EndpointSlices [#1225](https://github.com/openshift/insights-operator/pull/1225)
* NO-JIRA: Add CodeRabbit inheritance for org-wide rules [#1245](https://github.com/openshift/insights-operator/pull/1245)
* [CCXDEV-15829](https://issues.redhat.com/browse/CCXDEV-15829): subscription gathering [#1235](https://github.com/openshift/insights-operator/pull/1235)
* [CCXDEV-15776](https://issues.redhat.com/browse/CCXDEV-15776): install config update [#1229](https://github.com/openshift/insights-operator/pull/1229)
* [CCXDEV-15641](https://issues.redhat.com/browse/CCXDEV-15641): gather machineconfig size [#1240](https://github.com/openshift/insights-operator/pull/1240)
* NO-JIRA: exclude vendors file from coderabbit review [#1243](https://github.com/openshift/insights-operator/pull/1243)
* NO-JIRA: Upgrade Golangci-lint to version 2 [#1237](https://github.com/openshift/insights-operator/pull/1237)
* NO-JIRA: enable InsightsDataGather in all clusters [#1242](https://github.com/openshift/insights-operator/pull/1242)
* NO-JIRA: add custom coderabbit config [#1232](https://github.com/openshift/insights-operator/pull/1232)
* [OCPBUGS-66233](https://issues.redhat.com/browse/OCPBUGS-66233): Custom Obfuscation unmarshal [#1216](https://github.com/openshift/insights-operator/pull/1216)
* [CCXDEV-15561](https://issues.redhat.com/browse/CCXDEV-15561): Improve test coverage 3 [#1213](https://github.com/openshift/insights-operator/pull/1213)
* NO-JIRA: update on-demand gathering examples [#1212](https://github.com/openshift/insights-operator/pull/1212)
* [OCPBUGS-65500](https://issues.redhat.com/browse/OCPBUGS-65500): reference ClusterRoles in ClusterOperator [#1211](https://github.com/openshift/insights-operator/pull/1211)
* [CCXDEV-15778](https://issues.redhat.com/browse/CCXDEV-15778): add event logging for operator version changes [#1202](https://github.com/openshift/insights-operator/pull/1202)
* [CCXDEV-15589](https://issues.redhat.com/browse/CCXDEV-15589): set limit for gathering interval [#1171](https://github.com/openshift/insights-operator/pull/1171)
* [OCPBUGS-67001](https://issues.redhat.com/browse/OCPBUGS-67001): update dataGather status after job deletion [#1201](https://github.com/openshift/insights-operator/pull/1201)
* [OCPBUGS-66386](https://issues.redhat.com/browse/OCPBUGS-66386): [bugfix] The ConfigMap value for StoragePath is ignored on basic routine [#1203](https://github.com/openshift/insights-operator/pull/1203)
* [CCXDEV-15561](https://issues.redhat.com/browse/CCXDEV-15561): Improve test coverage 2 [#1199](https://github.com/openshift/insights-operator/pull/1199)
* [OCPBUGS-65582](https://issues.redhat.com/browse/OCPBUGS-65582): set Progressing condition on cluster update [#1207](https://github.com/openshift/insights-operator/pull/1207)
* [CCXDEV-15258](https://issues.redhat.com/browse/CCXDEV-15258): DataGather and InsightsDataGather update to v1 [#1159](https://github.com/openshift/insights-operator/pull/1159)
* [OCPBUGS-66996](https://issues.redhat.com/browse/OCPBUGS-66996): Extends the time for the extractor liveness probe [#1198](https://github.com/openshift/insights-operator/pull/1198)
* [OCPBUGS-69764](https://issues.redhat.com/browse/OCPBUGS-69764): Updating ose-insights-operator-container image to be consistent with ART for 4.22 [#1204](https://github.com/openshift/insights-operator/pull/1204)
* [Full changelog](https://github.com/openshift/insights-operator/compare/489fae2342784478008f86f2159cbc9d38d119db...d7b9c77e6565d4452ff79cd346f3ee6b8535698c)
### [insights-runtime-exporter, insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor/tree/70256457b507ec09737800ee7ea022143ed6c3c2)
* Update OWNERS to remove 'tremes' [#67](https://github.com/openshift/insights-runtime-extractor/pull/67)
* Optimize the CPU usage of insights-runtime-extractor [#60](https://github.com/openshift/insights-runtime-extractor/pull/60)
* [OCPBUGS-77060](https://issues.redhat.com/browse/OCPBUGS-77060): Update Go to 1.25 [#63](https://github.com/openshift/insights-runtime-extractor/pull/63)
* [OCPBUGS-76464](https://issues.redhat.com/browse/OCPBUGS-76464): remove dnf cache from the container images [#62](https://github.com/openshift/insights-runtime-extractor/pull/62)
* chore: Update JBoss EAP 8.1 runtime samples [#61](https://github.com/openshift/insights-runtime-extractor/pull/61)
* eap 8.1 test fix [#57](https://github.com/openshift/insights-runtime-extractor/pull/57)
* [Full changelog](https://github.com/openshift/insights-runtime-extractor/compare/015f7b616bdf0cc062b370079eb42685e81ba11d...70256457b507ec09737800ee7ea022143ed6c3c2)
### [ironic](https://github.com/openshift/ironic-image/tree/208ccd1666573f55b608475e53f9072175f9562f)
* [OCPBUGS-82540](https://issues.redhat.com/browse/OCPBUGS-82540): Bump pyasn1 to 0.5.1-5 [#822](https://github.com/openshift/ironic-image/pull/822)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#818](https://github.com/openshift/ironic-image/pull/818)
* [METAL-1758](https://issues.redhat.com/browse/METAL-1758): Merge upstream 2026 03 16 [#814](https://github.com/openshift/ironic-image/pull/814)
* [METAL-1735](https://issues.redhat.com/browse/METAL-1735): Add TLS cipher suite and curves related options to ironic for centralized tls support [#810](https://github.com/openshift/ironic-image/pull/810)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#816](https://github.com/openshift/ironic-image/pull/816)
* [METAL-1771](https://issues.redhat.com/browse/METAL-1771): Remove heredoc syntax for hermetic builds compatibility [#815](https://github.com/openshift/ironic-image/pull/815)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#812](https://github.com/openshift/ironic-image/pull/812)
* [OCPBUGS-77528](https://issues.redhat.com/browse/OCPBUGS-77528): Fix interface detection when MAC/IP matches multiple interfaces [#807](https://github.com/openshift/ironic-image/pull/807)
* [METAL-1726](https://issues.redhat.com/browse/METAL-1726): Multi-stage wheel-builder for OCP builds [#786](https://github.com/openshift/ironic-image/pull/786)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#808](https://github.com/openshift/ironic-image/pull/808)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#806](https://github.com/openshift/ironic-image/pull/806)
* [METAL-1749](https://issues.redhat.com/browse/METAL-1749): Uplift setuptools to remove python-wheel deps [#804](https://github.com/openshift/ironic-image/pull/804)
* [METAL-1748](https://issues.redhat.com/browse/METAL-1748): Drop genisoimage in favor of xorriso [#803](https://github.com/openshift/ironic-image/pull/803)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#805](https://github.com/openshift/ironic-image/pull/805)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#801](https://github.com/openshift/ironic-image/pull/801)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#799](https://github.com/openshift/ironic-image/pull/799)
* [OCPBUGS-76935](https://issues.redhat.com/browse/OCPBUGS-76935): Bump keystonemiddleware version to 10.9.0-0.20260216145500.557d173 for CVE-2026-22797 fix [#790](https://github.com/openshift/ironic-image/pull/790)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#793](https://github.com/openshift/ironic-image/pull/793)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#789](https://github.com/openshift/ironic-image/pull/789)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#784](https://github.com/openshift/ironic-image/pull/784)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#783](https://github.com/openshift/ironic-image/pull/783)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#773](https://github.com/openshift/ironic-image/pull/773)
* [ART-14497](https://issues.redhat.com/browse/ART-14497): Fix ART builds with -minimal [#779](https://github.com/openshift/ironic-image/pull/779)
* NO-ISSUE: Bump openstacksdk version to 4.9.0 [#776](https://github.com/openshift/ironic-image/pull/776)
* [OCPBUGS-74579](https://issues.redhat.com/browse/OCPBUGS-74579): fix for minimal builds [#772](https://github.com/openshift/ironic-image/pull/772)
* [OCPBUGS-74427](https://issues.redhat.com/browse/OCPBUGS-74427): Bump eventlet version to latest bugfix [#770](https://github.com/openshift/ironic-image/pull/770)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#768](https://github.com/openshift/ironic-image/pull/768)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#762](https://github.com/openshift/ironic-image/pull/762)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#758](https://github.com/openshift/ironic-image/pull/758)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#757](https://github.com/openshift/ironic-image/pull/757)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#755](https://github.com/openshift/ironic-image/pull/755)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#754](https://github.com/openshift/ironic-image/pull/754)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#751](https://github.com/openshift/ironic-image/pull/751)
* [OCPBUGS-70001](https://issues.redhat.com/browse/OCPBUGS-70001): Updating ironic-container image to be consistent with ART for 4.22 [#752](https://github.com/openshift/ironic-image/pull/752)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#748](https://github.com/openshift/ironic-image/pull/748)
* [Full changelog](https://github.com/openshift/ironic-image/compare/9b78befe121a6b64ae29acc019b25c5f3a693d35...208ccd1666573f55b608475e53f9072175f9562f)
### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/0336e6383c98f4f0c6b35c71e00116d3c3160c43)
* [METAL-1749](https://issues.redhat.com/browse/METAL-1749): Uplift setuptools to remove python-wheel deps [#245](https://github.com/openshift/ironic-agent-image/pull/245)
* NO-ISSUE: Update requirements.cachito with latest ironic-python-agent [#243](https://github.com/openshift/ironic-agent-image/pull/243)
* NO-ISSUE: Update requirements.cachito with latest ironic-python-agent [#242](https://github.com/openshift/ironic-agent-image/pull/242)
* [OCPBUGS-74579](https://issues.redhat.com/browse/OCPBUGS-74579): fixes for minimal builds [#240](https://github.com/openshift/ironic-agent-image/pull/240)
* NO-ISSUE: Update requirements.cachito with latest ironic-python-agent [#238](https://github.com/openshift/ironic-agent-image/pull/238)
* NO-ISSUE: Update requirements.cachito with latest ironic-python-agent [#237](https://github.com/openshift/ironic-agent-image/pull/237)
* Updating ironic-agent-container image to be consistent with ART for 4.22 [#225](https://github.com/openshift/ironic-agent-image/pull/225)
* NO-ISSUE: Update requirements.cachito with latest ironic-python-agent [#223](https://github.com/openshift/ironic-agent-image/pull/223)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/e39f354cbf0ed5f2eea09ed93f7b066d0ef0fd1e...0336e6383c98f4f0c6b35c71e00116d3c3160c43)
### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/9953d2b77da077c28f9486a5d965a43149ce30c1)
* [OCPBUGS-77617](https://issues.redhat.com/browse/OCPBUGS-77617): Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.22 [#115](https://github.com/openshift/ironic-rhcos-downloader/pull/115)
* [OCPBUGS-71233](https://issues.redhat.com/browse/OCPBUGS-71233): Export TMPDIR to be available to child processes [#111](https://github.com/openshift/ironic-rhcos-downloader/pull/111)
* [OCPBUGS-69891](https://issues.redhat.com/browse/OCPBUGS-69891): Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.22 [#110](https://github.com/openshift/ironic-rhcos-downloader/pull/110)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/08fdfd37a6d41bfc6a1fe7ac90dbe293c8a5b555...9953d2b77da077c28f9486a5d965a43149ce30c1)
### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/a379d09f228d93f2beab1c73d67764c64b21e3cb)
* [OCPBUGS-70044](https://issues.redhat.com/browse/OCPBUGS-70044): Updating ironic-static-ip-manager-container image to be consistent with ART for 4.22 [#56](https://github.com/openshift/ironic-static-ip-manager/pull/56)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/b95b05fe0ba17255ef61e92d4167ca4c9de789b8...a379d09f228d93f2beab1c73d67764c64b21e3cb)
### [keepalived-ipfailover](https://github.com/openshift/images/tree/95eb21f013e39ba2100917591bfa18546f0980a3)
* NO-JIRA: Install gpgme for RHEL/Centos 10 [#228](https://github.com/openshift/images/pull/228)
* [ART-14594](https://issues.redhat.com/browse/ART-14594): Update Dockerfile for centos 10 base [#223](https://github.com/openshift/images/pull/223)
* [OCPBUGS-76286](https://issues.redhat.com/browse/OCPBUGS-76286): openshift-enterprise-base: remove subscription-manager, dbus, systemd [#221](https://github.com/openshift/images/pull/221)
* [Full changelog](https://github.com/openshift/images/compare/4d151b9137b16ceb20d0929ad4c8fa1c8c211040...95eb21f013e39ba2100917591bfa18546f0980a3)
### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/38c16c4698d131ab0e2da0d4b4b76d5322a89bab)
* NO-JIRA: disable automatic coderabbit reviews [#53](https://github.com/openshift/kubernetes-metrics-server/pull/53)
* [OCPBUGS-77817](https://issues.redhat.com/browse/OCPBUGS-77817): Updating ose-kube-metrics-server-container image to be consistent with ART for 4.22 [#52](https://github.com/openshift/kubernetes-metrics-server/pull/52)
* [OCPBUGS-74012](https://issues.redhat.com/browse/OCPBUGS-74012): Updating ose-kube-metrics-server-container image to be consistent with ART for 4.22 [#49](https://github.com/openshift/kubernetes-metrics-server/pull/49)
* : NO-JIRA: Bump openshift/kubernetes-metrics-server to v0.8.1 [#50](https://github.com/openshift/kubernetes-metrics-server/pull/50)
* NO-JIRA: Bump golang image versions [#51](https://github.com/openshift/kubernetes-metrics-server/pull/51)
* [OCPBUGS-69952](https://issues.redhat.com/browse/OCPBUGS-69952): Updating ose-kube-metrics-server-container image to be consistent with ART for 4.22 [#48](https://github.com/openshift/kubernetes-metrics-server/pull/48)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/ed76a5e8051caae6519342ae189088b8ddd09979...38c16c4698d131ab0e2da0d4b4b76d5322a89bab)
### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/d12e274605248f6c59373240a7eae7a7a357dcb3)
* [CNTRLPLANE-2932](https://issues.redhat.com/browse/CNTRLPLANE-2932): Merge upstream v0.21.1 [#133](https://github.com/openshift/kube-rbac-proxy/pull/133)
* [OCPBUGS-69716](https://issues.redhat.com/browse/OCPBUGS-69716): Updating kube-rbac-proxy-container image to be consistent with ART for 4.22 [#129](https://github.com/openshift/kube-rbac-proxy/pull/129)
* [CNTRLPLANE-882](https://issues.redhat.com/browse/CNTRLPLANE-882): 0.20.2 downstream [#131](https://github.com/openshift/kube-rbac-proxy/pull/131)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/cd636680e06a55395c26570dff0cb37277014388...d12e274605248f6c59373240a7eae7a7a357dcb3)
### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/6fa06eac4c3942ba64bff18ca93b5a019ea5c976)
* NO-JIRA: disable automatic coderabbit reviews [#135](https://github.com/openshift/kube-state-metrics/pull/135)
* [OCPBUGS-77616](https://issues.redhat.com/browse/OCPBUGS-77616): Updating kube-state-metrics-container image to be consistent with ART for 4.22 [#134](https://github.com/openshift/kube-state-metrics/pull/134)
* [OCPBUGS-73993](https://issues.redhat.com/browse/OCPBUGS-73993): Updating kube-state-metrics-container image to be consistent with ART for 4.22 [#129](https://github.com/openshift/kube-state-metrics/pull/129)
* [OCPBUGS-71224](https://issues.redhat.com/browse/OCPBUGS-71224): [bot] Bump openshift/kube-state-metrics to v2.18.0 [#130](https://github.com/openshift/kube-state-metrics/pull/130)
* Updating kube-state-metrics-container image to be consistent with ART for 4.22 [#126](https://github.com/openshift/kube-state-metrics/pull/126)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/cb0aa591e89797cc0f45b934b8baeccc3a3b09bf...6fa06eac4c3942ba64bff18ca93b5a019ea5c976)
### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/72835e43c7754356645e41031f3a99926b4d42e6)
* [OCPBUGS-65984](https://issues.redhat.com/browse/OCPBUGS-65984): add leader election [#237](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/237)
* [OCPBUGS-73955](https://issues.redhat.com/browse/OCPBUGS-73955): Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.22 [#236](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/236)
* [OCPBUGS-69726](https://issues.redhat.com/browse/OCPBUGS-69726): Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.22 [#235](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/235)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/ce5ff17e9a81ce754567e6dd5053d13409c251e9...72835e43c7754356645e41031f3a99926b4d42e6)
### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/76dd5a6fa9e86573bf3dfb79be17edf832e3bae1)
* NO-JIRA: Upstream Sync - 2026-01-27 [#60](https://github.com/openshift/cloud-provider-kubevirt/pull/60)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/daf5fba2d1a1514bcbe67edc0230a06136156094...76dd5a6fa9e86573bf3dfb79be17edf832e3bae1)
### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/771b562d4875296007850a4d3709a7ae1c6ed3e2)
* [CNV-82343](https://issues.redhat.com/browse/CNV-82343): Add annotation-based fallback for infra VM node ID resolution (#170) [#80](https://github.com/openshift/kubevirt-csi-driver/pull/80)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/9e2dbddfe27080b834c83ef93503f886ad4189b6...771b562d4875296007850a4d3709a7ae1c6ed3e2)
### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/33cb2da02d57004711bd09dd8f288ed6174f48fc)
* [OCPCLOUD-3346](https://issues.redhat.com/browse/OCPCLOUD-3346): tls: use centralized TLS [#1456](https://github.com/openshift/machine-api-operator/pull/1456)
* [MON-4497](https://issues.redhat.com/browse/MON-4497): metrics: migrate Prometheus SD from Endpoints to EndpointSlices [#1457](https://github.com/openshift/machine-api-operator/pull/1457)
* [SPLAT-2680](https://issues.redhat.com/browse/SPLAT-2680): Changed DHA to require hostAffinity=host [#1484](https://github.com/openshift/machine-api-operator/pull/1484)
* [OCPCLOUD-3282](https://issues.redhat.com/browse/OCPCLOUD-3282), [OCPCLOUD-3288](https://issues.redhat.com/browse/OCPCLOUD-3288): Bump to k8s 1.35 dependencies [#1474](https://github.com/openshift/machine-api-operator/pull/1474)
* NO-JIRA: fix flaky TestReconcile/machine_with_node_likely_to_go_unhealthy#1483 [#1483](https://github.com/openshift/machine-api-operator/pull/1483)
* [SPLAT-2680](https://issues.redhat.com/browse/SPLAT-2680): Fixed MAO to not allow dedicated host configurations for control plane nodes [#1477](https://github.com/openshift/machine-api-operator/pull/1477)
* [OCPBUGS-77941](https://issues.redhat.com/browse/OCPBUGS-77941): Remove cluster-api-provider-libvirt references [#1472](https://github.com/openshift/machine-api-operator/pull/1472)
* [OCPNODE-4168](https://issues.redhat.com/browse/OCPNODE-4168): Add image only if its a boot disk [#1471](https://github.com/openshift/machine-api-operator/pull/1471)
* [OCPBUGS-44332](https://issues.redhat.com/browse/OCPBUGS-44332): Suppress degraded reporting while MAO is actively upgrading. [#1464](https://github.com/openshift/machine-api-operator/pull/1464)
* [OCPBUGS-77606](https://issues.redhat.com/browse/OCPBUGS-77606): Updating ose-machine-api-operator-container image to be consistent with ART for 4.22 [#1468](https://github.com/openshift/machine-api-operator/pull/1468)
* [SPLAT-2615](https://issues.redhat.com/browse/SPLAT-2615): Added AWS dynamic dedicated host support [#1455](https://github.com/openshift/machine-api-operator/pull/1455)
* [OCPCLOUD-3166](https://issues.redhat.com/browse/OCPCLOUD-3166): Bump openshift/api [#1453](https://github.com/openshift/machine-api-operator/pull/1453)
* [OKD-259](https://issues.redhat.com/browse/OKD-259): Vendor API and add OKD featureset Specific CRDs [#1448](https://github.com/openshift/machine-api-operator/pull/1448)
* [SPLAT-2603](https://issues.redhat.com/browse/SPLAT-2603): Updated AWS dedicated host id validation pattern [#1451](https://github.com/openshift/machine-api-operator/pull/1451)
* [OCPBUGS-64937](https://issues.redhat.com/browse/OCPBUGS-64937): vsphere - Cache REST API sessions to prevent excessive vCenter logouts [#1432](https://github.com/openshift/machine-api-operator/pull/1432)
* [OCPCLOUD-3222](https://issues.redhat.com/browse/OCPCLOUD-3222): Adds agents.md [#1449](https://github.com/openshift/machine-api-operator/pull/1449)
* [OCPBUGS-69862](https://issues.redhat.com/browse/OCPBUGS-69862): Updating ose-machine-api-operator-container image to be consistent with ART for 4.22 [#1450](https://github.com/openshift/machine-api-operator/pull/1450)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/83936ddec5de0d3c9e6db44e541e0abac2b60b6c...33cb2da02d57004711bd09dd8f288ed6174f48fc)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/efd28f77a895cc3d1ed2ccc9072d78cd9b52996f)
* [OCPBUGS-83540](https://issues.redhat.com/browse/OCPBUGS-83540): order corosync after OVS configuration on TNF clusters] [#5852](https://github.com/openshift/machine-config-operator/pull/5852)
* Revert "OCPBUGS-69936: ovs: increase CPU priority for Open vSwitch Forwarding Unit" [#5850](https://github.com/openshift/machine-config-operator/pull/5850)
* [MCO-2135](https://issues.redhat.com/browse/MCO-2135): Add test for OSStream labeling of Machines, MachineSets, and ControlPaneMachineSets [#5814](https://github.com/openshift/machine-config-operator/pull/5814)
* [AGENT-1307](https://issues.redhat.com/browse/AGENT-1307): add MCD IRI manager [#5807](https://github.com/openshift/machine-config-operator/pull/5807)
* [MCO-2202](https://issues.redhat.com/browse/MCO-2202): separate duplicate PinnedImageSet validation into OCP-88562 [#5839](https://github.com/openshift/machine-config-operator/pull/5839)
* [MCO-2163](https://issues.redhat.com/browse/MCO-2163): adds machine-config-osimagestream installer helper [#5770](https://github.com/openshift/machine-config-operator/pull/5770)
* [OCPBUGS-69936](https://issues.redhat.com/browse/OCPBUGS-69936): ovs: increase CPU priority for Open vSwitch Forwarding Unit [#5797](https://github.com/openshift/machine-config-operator/pull/5797)
* [MCO-1972](https://issues.redhat.com/browse/MCO-1972): Removes OSImageURLConfig from the build controller [#5424](https://github.com/openshift/machine-config-operator/pull/5424)
* Reapply "MCO-2120: Rework OS Image Stream label classification" [#5767](https://github.com/openshift/machine-config-operator/pull/5767)
* [OCPBUGS-68336](https://issues.redhat.com/browse/OCPBUGS-68336): When adding new nodes, MCD executes commands after setting the nodes' state as Done [#5832](https://github.com/openshift/machine-config-operator/pull/5832)
* [AGENT-1416](https://issues.redhat.com/browse/AGENT-1416): Add default NodeDisruptionPolicy for IRI [#5683](https://github.com/openshift/machine-config-operator/pull/5683)
* NO-ISSUE: Fix order of cleanup to further avoid race [#5826](https://github.com/openshift/machine-config-operator/pull/5826)
* [MCO-2183](https://issues.redhat.com/browse/MCO-2183): migrated configdrift, kubeletconfig, containerruntimeconfig… [#5818](https://github.com/openshift/machine-config-operator/pull/5818)
* [OCPBUGS-78154](https://issues.redhat.com/browse/OCPBUGS-78154): Use HA leader election defaults for MCO on SNO [#5764](https://github.com/openshift/machine-config-operator/pull/5764)
* [OCPBUGS-78498](https://issues.redhat.com/browse/OCPBUGS-78498): Update skew error message with doc links [#5825](https://github.com/openshift/machine-config-operator/pull/5825)
* [MCO-2168](https://issues.redhat.com/browse/MCO-2168): Deleting a PinnedImageSet does not affect images pinned by another PinnedImageSet [#5786](https://github.com/openshift/machine-config-operator/pull/5786)
* NO-ISSUE: In extended tests, disable Skew when disabling the bootimag… [#5811](https://github.com/openshift/machine-config-operator/pull/5811)
* [MCO-2171](https://issues.redhat.com/browse/MCO-2171): Move long running boot image tests to MCO's disruptive suites [#5808](https://github.com/openshift/machine-config-operator/pull/5808)
* NO-ISSUE: Fix MCN Applied condition checks for TP and non-TP clusters [#5796](https://github.com/openshift/machine-config-operator/pull/5796)
* [OCPBUGS-80970](https://issues.redhat.com/browse/OCPBUGS-80970): MCS fallback to latest v3 [#5816](https://github.com/openshift/machine-config-operator/pull/5816)
* [AGENT-1366](https://issues.redhat.com/browse/AGENT-1366): Report InternalReleaseImageController errors in IRI status [#5803](https://github.com/openshift/machine-config-operator/pull/5803)
* [OCPBUGS-62619](https://issues.redhat.com/browse/OCPBUGS-62619): Add etcd size limit validation for rendered MachineConfigs [#5729](https://github.com/openshift/machine-config-operator/pull/5729)
* [MCO-2155](https://issues.redhat.com/browse/MCO-2155): Add stream detection to some more boot image tests [#5799](https://github.com/openshift/machine-config-operator/pull/5799)
* [MCO-2167](https://issues.redhat.com/browse/MCO-2167): Migrate alert test cases from the private repository [#5781](https://github.com/openshift/machine-config-operator/pull/5781)
* [OCPBUGS-78500](https://issues.redhat.com/browse/OCPBUGS-78500): Skew enforcement should dynamically handle baremetal clusters [#5768](https://github.com/openshift/machine-config-operator/pull/5768)
* [OCPBUGS-79088](https://issues.redhat.com/browse/OCPBUGS-79088): OCPBUGS-79357: Skip boot image updates until cluster is stable [#5789](https://github.com/openshift/machine-config-operator/pull/5789)
* [OCPBUGS-79361](https://issues.redhat.com/browse/OCPBUGS-79361): Update AMI Whitelist [#5788](https://github.com/openshift/machine-config-operator/pull/5788)
* NO-ISSUE: Update AMI collection script for installer changes [#5790](https://github.com/openshift/machine-config-operator/pull/5790)
* [OCPBUGS-75200](https://issues.redhat.com/browse/OCPBUGS-75200): set default-timeout-stop to 200s globally [#5782](https://github.com/openshift/machine-config-operator/pull/5782)
* [MCO-2155](https://issues.redhat.com/browse/MCO-2155): Add stream detection to boot image tests [#5784](https://github.com/openshift/machine-config-operator/pull/5784)
* NO-ISSUE: Revert "extract oc binary from base OS image after build" [#5785](https://github.com/openshift/machine-config-operator/pull/5785)
* [OCPBUGS-66104](https://issues.redhat.com/browse/OCPBUGS-66104): Fine tune CoreDNS pod configuration to improve performance [#5695](https://github.com/openshift/machine-config-operator/pull/5695)
* [MCO-2117](https://issues.redhat.com/browse/MCO-2117): Allow default OSImageStream overrides [#5714](https://github.com/openshift/machine-config-operator/pull/5714)
* [OCPBUGS-78595](https://issues.redhat.com/browse/OCPBUGS-78595): Fix log substring matching for disruptive test suite jobs [#5769](https://github.com/openshift/machine-config-operator/pull/5769)
* [OCPBUGS-74223](https://issues.redhat.com/browse/OCPBUGS-74223): Re-order logger setting to eliminate race condition [#5691](https://github.com/openshift/machine-config-operator/pull/5691)
* [MCO-2146](https://issues.redhat.com/browse/MCO-2146): do not use OSImageStream in Hypershift [#5750](https://github.com/openshift/machine-config-operator/pull/5750)
* NO-ISSUE: always build golangci-lint from vendor [#5772](https://github.com/openshift/machine-config-operator/pull/5772)
* [OCPNODE-3201](https://issues.redhat.com/browse/OCPNODE-3201): Default Enablement of system-reserved-compressible in OpenShift [#5408](https://github.com/openshift/machine-config-operator/pull/5408)
* [OCPNODE-3880](https://issues.redhat.com/browse/OCPNODE-3880): Add criocredentialproviderconfig event handler [#5487](https://github.com/openshift/machine-config-operator/pull/5487)
* [OCPNODE-4074](https://issues.redhat.com/browse/OCPNODE-4074): Add additional storage configuration support for CRI-O [#5666](https://github.com/openshift/machine-config-operator/pull/5666)
* NO-ISSUE: Increase timeout + interval for OCL test cleanup [#5732](https://github.com/openshift/machine-config-operator/pull/5732)
* [MCO-2151](https://issues.redhat.com/browse/MCO-2151): Add stream detection to the boot image controller [#5752](https://github.com/openshift/machine-config-operator/pull/5752)
* NO-ISSUE: Allow setting kubeletconfig log level to zero [#5757](https://github.com/openshift/machine-config-operator/pull/5757)
* [OCPBUGS-57473](https://issues.redhat.com/browse/OCPBUGS-57473): extract oc binary instead of pulling OS image [#5313](https://github.com/openshift/machine-config-operator/pull/5313)
* [OCPBUGS-78107](https://issues.redhat.com/browse/OCPBUGS-78107): Disable sandboxed-containers in arm64 10 [#5754](https://github.com/openshift/machine-config-operator/pull/5754)
* [MCO-2007](https://issues.redhat.com/browse/MCO-2007): MCO-2096: MCO-2095: MCO-2011: Update MCO dependencies to Kubernetes 1.35 [#5603](https://github.com/openshift/machine-config-operator/pull/5603)
* NO-ISSUE: remove boot image e2es from mco suite [#5760](https://github.com/openshift/machine-config-operator/pull/5760)
* [OCPNODE-4049](https://issues.redhat.com/browse/OCPNODE-4049): Revert "OCPNODE-3173: Disable OCI artifact mount by default." [#5687](https://github.com/openshift/machine-config-operator/pull/5687)
* [OCPBUGS-74513](https://issues.redhat.com/browse/OCPBUGS-74513): OCPBUGS-74519: Remove `MachineConfigNodes` and `PinnedImages` feature gates [#5609](https://github.com/openshift/machine-config-operator/pull/5609)
* [OCPBUGS-75869](https://issues.redhat.com/browse/OCPBUGS-75869): kubelet: Less aggressive low memory reservation [#5716](https://github.com/openshift/machine-config-operator/pull/5716)
* [MCO-2136](https://issues.redhat.com/browse/MCO-2136): Implement osImageStream inheritance for custom MCPs [#5697](https://github.com/openshift/machine-config-operator/pull/5697)
* [OCPBUGS-77839](https://issues.redhat.com/browse/OCPBUGS-77839): Fix node degrades due to file and OS update failures [#5744](https://github.com/openshift/machine-config-operator/pull/5744)
* [MCO-2147](https://issues.redhat.com/browse/MCO-2147): Remove all remaining hardcoded references for TLS configuration [#5747](https://github.com/openshift/machine-config-operator/pull/5747)
* [MCO-2145](https://issues.redhat.com/browse/MCO-2145): Disable skew enforcement on SNO clusters [#5739](https://github.com/openshift/machine-config-operator/pull/5739)
* [MCO-2138](https://issues.redhat.com/browse/MCO-2138): migrate multi-stream test cases from the private tests repo… [#5701](https://github.com/openshift/machine-config-operator/pull/5701)
* [OCPBUGS-77625](https://issues.redhat.com/browse/OCPBUGS-77625): Update ose-machine-config-operator-container image to be consistent with ART for 4.22 [#5730](https://github.com/openshift/machine-config-operator/pull/5730)
* [OCPBUGS-77803](https://issues.redhat.com/browse/OCPBUGS-77803): Update AMI Whitelist [#5740](https://github.com/openshift/machine-config-operator/pull/5740)
* [MCO-2025](https://issues.redhat.com/browse/MCO-2025): Add functionality to populate OSImageStream value in MCP status [#5689](https://github.com/openshift/machine-config-operator/pull/5689)
* [AGENT-1424](https://issues.redhat.com/browse/AGENT-1424): Fix e2e iri tests [#5717](https://github.com/openshift/machine-config-operator/pull/5717)
* [OCPBUGS-77498](https://issues.redhat.com/browse/OCPBUGS-77498): Fix failure domain matching during vsphere boot image updates [#5723](https://github.com/openshift/machine-config-operator/pull/5723)
* [MCO-2141](https://issues.redhat.com/browse/MCO-2141): dont execute tls tests until OCPBUGS-76990 is fixed [#5713](https://github.com/openshift/machine-config-operator/pull/5713)
* [OCPBUGS-74514](https://issues.redhat.com/browse/OCPBUGS-74514): OCPBUGS-74515: OCPBUGS-74516: OCPBUGS-74517: remove bootimage update feature gates [#5718](https://github.com/openshift/machine-config-operator/pull/5718)
* [OCPBUGS-77483](https://issues.redhat.com/browse/OCPBUGS-77483): Update AMI Whitelist [#5719](https://github.com/openshift/machine-config-operator/pull/5719)
* [CORENET-6738](https://issues.redhat.com/browse/CORENET-6738): Remove lingering references to openshift-sdn [#5591](https://github.com/openshift/machine-config-operator/pull/5591)
* NO-ISSUE: Increate timeout for sharded ocl test [#5696](https://github.com/openshift/machine-config-operator/pull/5696)
* [OCPBUGS-77318](https://issues.redhat.com/browse/OCPBUGS-77318): Clean up vsphere login error logging [#5702](https://github.com/openshift/machine-config-operator/pull/5702)
* NO-ISSUE: Revert "MCO-2120: Rework OS Image Stream label classification" [#5703](https://github.com/openshift/machine-config-operator/pull/5703)
* [MCO-2124](https://issues.redhat.com/browse/MCO-2124), [MCO-2125](https://issues.redhat.com/browse/MCO-2125): migrate units and storage test cases [#5660](https://github.com/openshift/machine-config-operator/pull/5660)
* NO-ISSUE: Create timeout per resource to clean up [#5676](https://github.com/openshift/machine-config-operator/pull/5676)
* [MCO-1870](https://issues.redhat.com/browse/MCO-1870): Split `MachineConfigNodeUpdateFilesAndOS` condition into `MachineConfigNodeUpdateOS` and `MachineConfigNodeUpdateFiles` [#5411](https://github.com/openshift/machine-config-operator/pull/5411)
* [MCO-1803](https://issues.redhat.com/browse/MCO-1803): Add test case: CPMS interaction with automatic skew [#5661](https://github.com/openshift/machine-config-operator/pull/5661)
* [MCO-2032](https://issues.redhat.com/browse/MCO-2032): Avoid MCPs duplication at install time [#5518](https://github.com/openshift/machine-config-operator/pull/5518)
* [MCO-2131](https://issues.redhat.com/browse/MCO-2131): Break e2e-ocl test suite into 2 [#5669](https://github.com/openshift/machine-config-operator/pull/5669)
* [MCO-2120](https://issues.redhat.com/browse/MCO-2120): Rework OS Image Stream label classification [#5650](https://github.com/openshift/machine-config-operator/pull/5650)
* [OCPBUGS-24003](https://issues.redhat.com/browse/OCPBUGS-24003): mcd_config_drift not working properly [#5632](https://github.com/openshift/machine-config-operator/pull/5632)
* [MCO-2035](https://issues.redhat.com/browse/MCO-2035): Add a prometheus alert to indicate scaling risk [#5615](https://github.com/openshift/machine-config-operator/pull/5615)
* [MCO-2036](https://issues.redhat.com/browse/MCO-2036): Enable boot image updates by default for vsphere and Azure [#5583](https://github.com/openshift/machine-config-operator/pull/5583)
* [OCPNODE-3880](https://issues.redhat.com/browse/OCPNODE-3880): bump openshift/client-go [#5663](https://github.com/openshift/machine-config-operator/pull/5663)
* [OCPBUGS-76444](https://issues.redhat.com/browse/OCPBUGS-76444): pkg/daemon/update: Remove kernel-rt-kvm [#5654](https://github.com/openshift/machine-config-operator/pull/5654)
* [MCO-2110](https://issues.redhat.com/browse/MCO-2110): Migrate security tests [#5621](https://github.com/openshift/machine-config-operator/pull/5621)
* [OCPNODE-3880](https://issues.redhat.com/browse/OCPNODE-3880): Bump openshift/api [#5655](https://github.com/openshift/machine-config-operator/pull/5655)
* [OCPBUGS-23418](https://issues.redhat.com/browse/OCPBUGS-23418): Machine-config controller should not log about non-existent pull-secret changes [#5625](https://github.com/openshift/machine-config-operator/pull/5625)
* [OCPBUGS-76450](https://issues.redhat.com/browse/OCPBUGS-76450): reduce MCO image size [#5644](https://github.com/openshift/machine-config-operator/pull/5644)
* NO-ISSUE: Fix cleanup verification timeouts in e2e-ocl tests [#5652](https://github.com/openshift/machine-config-operator/pull/5652)
* [OCPBUGS-74692](https://issues.redhat.com/browse/OCPBUGS-74692): Write all units when forcefile exists to recover from systemd unit config drift [#5612](https://github.com/openshift/machine-config-operator/pull/5612)
* [OCPBUGS-63699](https://issues.redhat.com/browse/OCPBUGS-63699): Remove MCD liveness probe [#5623](https://github.com/openshift/machine-config-operator/pull/5623)
* [MCO-1984](https://issues.redhat.com/browse/MCO-1984): Add Component Readiness tests for boot image skew enforcement [#5547](https://github.com/openshift/machine-config-operator/pull/5547)
* [TRT-2543](https://issues.redhat.com/browse/TRT-2543): Revert #5586 "MCO-2065: Move systemctl execs to dbus calls" [#5638](https://github.com/openshift/machine-config-operator/pull/5638)
* [OCPBUGS-75916](https://issues.redhat.com/browse/OCPBUGS-75916): crio: disable short_name_mode until we introduce ctrcfg api for it [#5628](https://github.com/openshift/machine-config-operator/pull/5628)
* NO-ISSUE: Make TestImagePrunerErrors flexible to registry behavior changes [#5613](https://github.com/openshift/machine-config-operator/pull/5613)
* [OCPEDGE-2216](https://issues.redhat.com/browse/OCPEDGE-2216): feat: increase reserved memory for tnf masters [#5592](https://github.com/openshift/machine-config-operator/pull/5592)
* [MCO-2065](https://issues.redhat.com/browse/MCO-2065): Move systemctl execs to dbus calls [#5586](https://github.com/openshift/machine-config-operator/pull/5586)
* NO-ISSUE: Fix-up AMI update script to work from CI image [#5626](https://github.com/openshift/machine-config-operator/pull/5626)
* NO-ISSUE: Update AMI script and list [#5616](https://github.com/openshift/machine-config-operator/pull/5616)
* [MCO-1877](https://issues.redhat.com/browse/MCO-1877): MCO-1879: MCO-1882: MCO-1884: Implement boot image skew enforcement MVP [#5428](https://github.com/openshift/machine-config-operator/pull/5428)
* [MCO-1924](https://issues.redhat.com/browse/MCO-1924): MCO-500: Migrate direct runGetOut() to use CommandRunner in the MCD [#5546](https://github.com/openshift/machine-config-operator/pull/5546)
* NO-JIRA: Fix OSImageStream validating admission policies for OKD [#5618](https://github.com/openshift/machine-config-operator/pull/5618)
* [MCO-1953](https://issues.redhat.com/browse/MCO-1953): Refactor functionality to grab machines by state for calculating MCP status [#5541](https://github.com/openshift/machine-config-operator/pull/5541)
* [OCPBUGS-20561](https://issues.redhat.com/browse/OCPBUGS-20561): machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] [#5601](https://github.com/openshift/machine-config-operator/pull/5601)
* [MCO-2090](https://issues.redhat.com/browse/MCO-2090): migrate nodedisruptionpolicy tests from the private reposit… [#5602](https://github.com/openshift/machine-config-operator/pull/5602)
* NO-JIRA: Pass TAGS argument to the machine-config-controller image build [#5611](https://github.com/openshift/machine-config-operator/pull/5611)
* [AGENT-1395](https://issues.redhat.com/browse/AGENT-1395): IRI followup changes [#5562](https://github.com/openshift/machine-config-operator/pull/5562)
* [AGENT-1424](https://issues.redhat.com/browse/AGENT-1424): Add e2e test for IRI deletion [#5608](https://github.com/openshift/machine-config-operator/pull/5608)
* [MCO-2088](https://issues.redhat.com/browse/MCO-2088): Remove wasm extension [#5598](https://github.com/openshift/machine-config-operator/pull/5598)
* [OCPBUGS-72555](https://issues.redhat.com/browse/OCPBUGS-72555): Restrict CPMS boot image configuration to only AWS, GCP and Azure platforms [#5540](https://github.com/openshift/machine-config-operator/pull/5540)
* NO-ISSUE: Add bootstrap e2e guide [#5604](https://github.com/openshift/machine-config-operator/pull/5604)
* NO-ISSUE: CPMS test should account for skew API [#5599](https://github.com/openshift/machine-config-operator/pull/5599)
* [OCPBUGS-74368](https://issues.redhat.com/browse/OCPBUGS-74368): Stale operator metrics Service and ServiceMonitor resources need to be deleted [#5593](https://github.com/openshift/machine-config-operator/pull/5593)
* [MCO-2059](https://issues.redhat.com/browse/MCO-2059): migrate machineconfignodes from private repo [#5589](https://github.com/openshift/machine-config-operator/pull/5589)
* [OCPBUGS-58023](https://issues.redhat.com/browse/OCPBUGS-58023): Prevent unnecessary systemd unit disable [#5582](https://github.com/openshift/machine-config-operator/pull/5582)
* NO-ISSUE: Fix e2e ocl intermittent failures [#5595](https://github.com/openshift/machine-config-operator/pull/5595)
* [MCO-1182](https://issues.redhat.com/browse/MCO-1182): migrate private test case OCP-87023 [#5587](https://github.com/openshift/machine-config-operator/pull/5587)
* [AGENT-1424](https://issues.redhat.com/browse/AGENT-1424): add initial e2e tests for the InternalReleaseImage controller [#5588](https://github.com/openshift/machine-config-operator/pull/5588)
* [AGENT-1412](https://issues.redhat.com/browse/AGENT-1412): Prevent deletion of InternalReleaseImage when in use [#5545](https://github.com/openshift/machine-config-operator/pull/5545)
* [OCPBUGS-71238](https://issues.redhat.com/browse/OCPBUGS-71238): Consider image mirrors for OSImageStream fetching [#5560](https://github.com/openshift/machine-config-operator/pull/5560)
* NO-ISSUE: Fix Failure Status condition to True when kubeletconfig or container runtime config validation fails [#5542](https://github.com/openshift/machine-config-operator/pull/5542)
* [OCPBUGS-62295](https://issues.redhat.com/browse/OCPBUGS-62295): Shorten HAProxy timeouts [#5312](https://github.com/openshift/machine-config-operator/pull/5312)
* [MCO-2055](https://issues.redhat.com/browse/MCO-2055): migrate bootimages tests [#5551](https://github.com/openshift/machine-config-operator/pull/5551)
* Revert "OCPBUGS-58023: Prevent unnecessary systemd unit disable" [#5576](https://github.com/openshift/machine-config-operator/pull/5576)
* [OCPBUGS-73802](https://issues.redhat.com/browse/OCPBUGS-73802): Fix up bootstrap-e2e [#5563](https://github.com/openshift/machine-config-operator/pull/5563)
* [MCO-2028](https://issues.redhat.com/browse/MCO-2028): Add target OS version detection [#5556](https://github.com/openshift/machine-config-operator/pull/5556)
* NO-JIRA: bump openshift/client-go [#5500](https://github.com/openshift/machine-config-operator/pull/5500)
* NO-ISSUE: Fixes the issue in the test TestKubeletConfigMaxPods when AutoNodeSizing is enabled by default [#5555](https://github.com/openshift/machine-config-operator/pull/5555)
* [OCPBUGS-72396](https://issues.redhat.com/browse/OCPBUGS-72396): use D-Bus API to list systemd units [#5537](https://github.com/openshift/machine-config-operator/pull/5537)
* [OCPBUGS-56717](https://issues.redhat.com/browse/OCPBUGS-56717): enable nodeip-configuration for platform external [#5475](https://github.com/openshift/machine-config-operator/pull/5475)
* [CORS-4208](https://issues.redhat.com/browse/CORS-4208): set default KUBELET_NODE_IPS for dualstack nodes [#5384](https://github.com/openshift/machine-config-operator/pull/5384)
* [OCPBUGS-72553](https://issues.redhat.com/browse/OCPBUGS-72553): CPMS boot image config should not override standard MachineSet configuration [#5539](https://github.com/openshift/machine-config-operator/pull/5539)
* [OCPBUGS-67229](https://issues.redhat.com/browse/OCPBUGS-67229): Set `NodeDegraded` MCN condition when node state annotation is set to `Degraded` [#5509](https://github.com/openshift/machine-config-operator/pull/5509)
* [OCPBUGS-58023](https://issues.redhat.com/browse/OCPBUGS-58023): Prevent unnecessary systemd unit disable [#5527](https://github.com/openshift/machine-config-operator/pull/5527)
* [AGENT-1411](https://issues.redhat.com/browse/AGENT-1411): fix IRI registry setup file [#5543](https://github.com/openshift/machine-config-operator/pull/5543)
* [OCPBUGS-71189](https://issues.redhat.com/browse/OCPBUGS-71189): Configure proxy from ControllerConfig [#5538](https://github.com/openshift/machine-config-operator/pull/5538)
* [MCO-2047](https://issues.redhat.com/browse/MCO-2047): migrate scale tests from private repository to MCO repository [#5533](https://github.com/openshift/machine-config-operator/pull/5533)
* [MCO-650](https://issues.redhat.com/browse/MCO-650): Implement custom pool booting [#5361](https://github.com/openshift/machine-config-operator/pull/5361)
* [MCO-2049](https://issues.redhat.com/browse/MCO-2049): Validate MCP osImageStream reference [#5535](https://github.com/openshift/machine-config-operator/pull/5535)
* NO-ISSUE: Add README for MCO Operator disruptive e2e tests [#5522](https://github.com/openshift/machine-config-operator/pull/5522)
* [MCO-2037](https://issues.redhat.com/browse/MCO-2037): Fix timeout during configMap cleanup [#5529](https://github.com/openshift/machine-config-operator/pull/5529)
* [AGENT-1411](https://issues.redhat.com/browse/AGENT-1411): Preload the registry image when starting the iri-service [#5514](https://github.com/openshift/machine-config-operator/pull/5514)
* NO-JIRA: kubelet: drop pod-infra-container-image usage [#5460](https://github.com/openshift/machine-config-operator/pull/5460)
* [OCPBUGS-70259](https://issues.redhat.com/browse/OCPBUGS-70259): Enable existing units without content [#5520](https://github.com/openshift/machine-config-operator/pull/5520)
* [MCO-2018](https://issues.redhat.com/browse/MCO-2018): Move operator metrics into the controller [#5498](https://github.com/openshift/machine-config-operator/pull/5498)
* [MCO-2033](https://issues.redhat.com/browse/MCO-2033): Refactor bootstrap dependency handling [#5519](https://github.com/openshift/machine-config-operator/pull/5519)
* [OCPNODE-3973](https://issues.redhat.com/browse/OCPNODE-3973): Default CPU/Memory changes to Workers - AutoSizingReserved [#5491](https://github.com/openshift/machine-config-operator/pull/5491)
* [OCPBUGS-69910](https://issues.redhat.com/browse/OCPBUGS-69910): Bump OpenShift builder images to 4.22 [#5512](https://github.com/openshift/machine-config-operator/pull/5512)
* [OCPBUGS-69674](https://issues.redhat.com/browse/OCPBUGS-69674): Skip boot image updates if arch annotation is not found [#5508](https://github.com/openshift/machine-config-operator/pull/5508)
* [MCO-1961](https://issues.redhat.com/browse/MCO-1961): Integrate OSImageStream into MCP and sync logic [#5476](https://github.com/openshift/machine-config-operator/pull/5476)
* [MCO-2006](https://issues.redhat.com/browse/MCO-2006): Migrate pinned images sets private test cases [#5466](https://github.com/openshift/machine-config-operator/pull/5466)
* [OCPBUGS-66209](https://issues.redhat.com/browse/OCPBUGS-66209): clusteroperator/machine-config blips Degraded=True in CI jobs [#5465](https://github.com/openshift/machine-config-operator/pull/5465)
* [MCO-2015](https://issues.redhat.com/browse/MCO-2015): Use an event based queue in the boot image controller [#5479](https://github.com/openshift/machine-config-operator/pull/5479)
* [MCO-1016](https://issues.redhat.com/browse/MCO-1016): Only update when there is an actual controller change [#4742](https://github.com/openshift/machine-config-operator/pull/4742)
* [MCO-1961](https://issues.redhat.com/browse/MCO-1961): Rework MC's OSImageURL merge logic [#5488](https://github.com/openshift/machine-config-operator/pull/5488)
* [OCPBUGS-62984](https://issues.redhat.com/browse/OCPBUGS-62984): MCP is not correctly degraded when a pivotError happens [#5492](https://github.com/openshift/machine-config-operator/pull/5492)
* [OCPBUGS-62828](https://issues.redhat.com/browse/OCPBUGS-62828): MCO degraded when an empty pull-secret is configured [#5486](https://github.com/openshift/machine-config-operator/pull/5486)
* [AGENT-1391](https://issues.redhat.com/browse/AGENT-1391): Use TLS cert for the InternalReleaseImage registry [#5483](https://github.com/openshift/machine-config-operator/pull/5483)
* [OCPBUGS-66420](https://issues.redhat.com/browse/OCPBUGS-66420): Revert "Default Enablement of Auto Sizing Reserved in OpenShift 4.21" [#5489](https://github.com/openshift/machine-config-operator/pull/5489)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/f20ca236ffead6b7603c4f42a35c49fbed328bc3...efd28f77a895cc3d1ed2ccc9072d78cd9b52996f)
### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/a43d9c977f6332577efcd383cf173a2ff5805a4d)
* [METAL-1720](https://issues.redhat.com/browse/METAL-1720): Add kernel file support for multi-architecture PXE boot [#170](https://github.com/openshift/image-customization-controller/pull/170)
* [OCPBUGS-77840](https://issues.redhat.com/browse/OCPBUGS-77840): Return error when network data Secret lacks nmstate key [#169](https://github.com/openshift/image-customization-controller/pull/169)
* [OCPBUGS-77737](https://issues.redhat.com/browse/OCPBUGS-77737): Updating ose-image-customization-controller-container image to be consistent with ART for 4.22 [#167](https://github.com/openshift/image-customization-controller/pull/167)
* [OCPBUGS-76461](https://issues.redhat.com/browse/OCPBUGS-76461): Clean up dnf cache to reduce container image size [#162](https://github.com/openshift/image-customization-controller/pull/162)
* [OCPBUGS-22175](https://issues.redhat.com/browse/OCPBUGS-22175): Add IPA messages for console and SSH login [#158](https://github.com/openshift/image-customization-controller/pull/158)
* NO-ISSUE: Add AGENTS.md and CLAUDE.md [#156](https://github.com/openshift/image-customization-controller/pull/156)
* [OCPBUGS-70040](https://issues.redhat.com/browse/OCPBUGS-70040): Updating ose-image-customization-controller-container image to be consistent with ART for 4.22 [#155](https://github.com/openshift/image-customization-controller/pull/155)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/d958f0bf39ee93368c89919b7dbe23363f38493e...a43d9c977f6332577efcd383cf173a2ff5805a4d)
### [machine-os-images](https://github.com/openshift/machine-os-images/tree/df9a652cb1572172e404655bb021525be2e3d8ab)
* [METAL-1729](https://issues.redhat.com/browse/METAL-1729): Add dual CoreOS version support for RHCOS 9 and 10 [#81](https://github.com/openshift/machine-os-images/pull/81)
* [OKD-322](https://issues.redhat.com/browse/OKD-322): Swap uname -p to uname -m [#80](https://github.com/openshift/machine-os-images/pull/80)
* [METAL-1720](https://issues.redhat.com/browse/METAL-1720): Add aarch64 symlinks for initramfs [#79](https://github.com/openshift/machine-os-images/pull/79)
* NO-ISSUE: Run fetch_image with tracing [#68](https://github.com/openshift/machine-os-images/pull/68)
* [OCPBUGS-69857](https://issues.redhat.com/browse/OCPBUGS-69857): Updating ose-machine-os-images-container image to be consistent with ART for 4.22 [#76](https://github.com/openshift/machine-os-images/pull/76)
* NO-ISSUE: Add AGENTS.md file [#75](https://github.com/openshift/machine-os-images/pull/75)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/9a8e96a60bb6d8e3c86c2780fd4212e80f5d28e5...df9a652cb1572172e404655bb021525be2e3d8ab)
### [metallb-frr](https://github.com/openshift/frr/tree/5ccdd521dd93522575c172dac86d0b6f301fb3ef)
* [OCPBUGS-69901](https://issues.redhat.com/browse/OCPBUGS-69901): Updating ose-frr-container image to be consistent with ART for 4.22 [#116](https://github.com/openshift/frr/pull/116)
* [CNF-20883](https://issues.redhat.com/browse/CNF-20883): Downstream merge 2025-12-30 [#118](https://github.com/openshift/frr/pull/118)
* [Full changelog](https://github.com/openshift/frr/compare/c82bfaad01b196e12f00622a9a609d87e0a56701...5ccdd521dd93522575c172dac86d0b6f301fb3ef)
### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/c43889fdf60b85fe43dc45417be3f644586e7cc4)
* [OU-1307](https://issues.redhat.com/browse/OU-1307): [release-4.22] don't fight console to setActiveNamespace [#881](https://github.com/openshift/monitoring-plugin/pull/881)
* NO-JIRA: re-enable get CSRF token [#876](https://github.com/openshift/monitoring-plugin/pull/876)
* [OU-1264](https://issues.redhat.com/browse/OU-1264): mcpToolUI basic implementation for OpenShift Lightpseed + obs-mcp + Perses [#797](https://github.com/openshift/monitoring-plugin/pull/797)
* NO-JIRA: breaking changes follow up [#875](https://github.com/openshift/monitoring-plugin/pull/875)
* [OU-1175](https://issues.redhat.com/browse/OU-1175): OCP 4.22 Breaking Changes [#863](https://github.com/openshift/monitoring-plugin/pull/863)
* [OCPBUGS-81567](https://issues.redhat.com/browse/OCPBUGS-81567): fix: re encode params when redirecting from graph to query-browser [#869](https://github.com/openshift/monitoring-plugin/pull/869)
* [OU-1184](https://issues.redhat.com/browse/OU-1184): lint enabled against cypress files and changes post coo [#862](https://github.com/openshift/monitoring-plugin/pull/862)
* NO-JIRA: automation testing fix on podImage [#868](https://github.com/openshift/monitoring-plugin/pull/868)
* NO-JIRA: exclude @xfail tests from CI incident commands [#865](https://github.com/openshift/monitoring-plugin/pull/865)
* [OBSINTA-1002](https://issues.redhat.com/browse/OBSINTA-1002): consolidate COO 1.4.0 test case documentation [#793](https://github.com/openshift/monitoring-plugin/pull/793)
* NO-JIRA: podImage fix automation testing to remove extra click [#864](https://github.com/openshift/monitoring-plugin/pull/864)
* [OBSINTA-993](https://issues.redhat.com/browse/OBSINTA-993): Tests for incident detection coo 1.4.0 changes [#857](https://github.com/openshift/monitoring-plugin/pull/857)
* [OCPBUGS-77113](https://issues.redhat.com/browse/OCPBUGS-77113): feat: re enable dev console views [#831](https://github.com/openshift/monitoring-plugin/pull/831)
* NO-JIRA: Incident Detection Tests Stabilization [#854](https://github.com/openshift/monitoring-plugin/pull/854)
* NO-JIRA: switch to core platform page before test case run [#837](https://github.com/openshift/monitoring-plugin/pull/837)
* NO-JIRA: Refactor cypress setup and operator commands [#788](https://github.com/openshift/monitoring-plugin/pull/788)
* NO-JIRA: Add test configuration scenarios overview [#745](https://github.com/openshift/monitoring-plugin/pull/745)
* NO-JIRA: add golangci-lint [#835](https://github.com/openshift/monitoring-plugin/pull/835)
* [OCPBUGS-78369](https://issues.redhat.com/browse/OCPBUGS-78369): fix for CVE-2025-69873 [#834](https://github.com/openshift/monitoring-plugin/pull/834)
* NO-JIRA: Add CodeRabbit inheritance for org-wide rules [#822](https://github.com/openshift/monitoring-plugin/pull/822)
* [OU-1247](https://issues.redhat.com/browse/OU-1247): Followup Persist TimeRange in Main [#827](https://github.com/openshift/monitoring-plugin/pull/827)
* [OU-1242](https://issues.redhat.com/browse/OU-1242): dont autofill rename [#820](https://github.com/openshift/monitoring-plugin/pull/820)
* [COO-1562](https://issues.redhat.com/browse/COO-1562): fix coo namespace issue [#804](https://github.com/openshift/monitoring-plugin/pull/804)
* [OCPBUGS-77718](https://issues.redhat.com/browse/OCPBUGS-77718): Updating monitoring-plugin-container image to be consistent with ART for 4.22 [#803](https://github.com/openshift/monitoring-plugin/pull/803)
* NO-JIRA: simplify dockerfile by removing cachito dependencies [#799](https://github.com/openshift/monitoring-plugin/pull/799)
* [OU-1162](https://issues.redhat.com/browse/OU-1162): perses automation testing - import dashboard and rbac [#794](https://github.com/openshift/monitoring-plugin/pull/794)
* [OU-1236](https://issues.redhat.com/browse/OU-1236): Kebab icon should be disable while "Checking permissions" is happening [#783](https://github.com/openshift/monitoring-plugin/pull/783)
* NO-JIRA: fix radius of button groups [#784](https://github.com/openshift/monitoring-plugin/pull/784)
* [OU-1234](https://issues.redhat.com/browse/OU-1234): perses automation testing - rbac users scenarios added with project selector [#781](https://github.com/openshift/monitoring-plugin/pull/781)
* [OU-1139](https://issues.redhat.com/browse/OU-1139): feat: allow to import and migrate a dashboard [#779](https://github.com/openshift/monitoring-plugin/pull/779)
* [OU-1214](https://issues.redhat.com/browse/OU-1214): [Edit Dashboard] - Time range is not persisted when saving [#778](https://github.com/openshift/monitoring-plugin/pull/778)
* [OU-1195](https://issues.redhat.com/browse/OU-1195): List OCP namespaces in Create Dashboard ProjectSelector [#765](https://github.com/openshift/monitoring-plugin/pull/765)
* [OU-1231](https://issues.redhat.com/browse/OU-1231): customizable dashboards automation testing fixes after merge to main [#771](https://github.com/openshift/monitoring-plugin/pull/771)
* NO-JIRA: Init Coderabbit config [#770](https://github.com/openshift/monitoring-plugin/pull/770)
* [OU-1189](https://issues.redhat.com/browse/OU-1189): automation for kebab management actions for perses dashboards [#757](https://github.com/openshift/monitoring-plugin/pull/757)
* [COO-1562](https://issues.redhat.com/browse/COO-1562): update acm alerting UI test case [#753](https://github.com/openshift/monitoring-plugin/pull/753)
* [OBSINTA-1063](https://issues.redhat.com/browse/OBSINTA-1063): Add incidents e2e command [#740](https://github.com/openshift/monitoring-plugin/pull/740)
* [OU-1213](https://issues.redhat.com/browse/OU-1213): IncidentPage add error state [#750](https://github.com/openshift/monitoring-plugin/pull/750)
* [OU-1062](https://issues.redhat.com/browse/OU-1062): feat: mark alert menu active for incidents tab [#754](https://github.com/openshift/monitoring-plugin/pull/754)
* [OU-1205](https://issues.redhat.com/browse/OU-1205): feat: force rounded dates for consecutive intervals [#748](https://github.com/openshift/monitoring-plugin/pull/748)
* [OU-915](https://issues.redhat.com/browse/OU-915): create dashboards and rbac [#746](https://github.com/openshift/monitoring-plugin/pull/746)
* [OU-1039](https://issues.redhat.com/browse/OU-1039): add info alert to the Incident page [#741](https://github.com/openshift/monitoring-plugin/pull/741)
* NO-JIRA: fix: update vulnerable dependencies [#742](https://github.com/openshift/monitoring-plugin/pull/742)
* [COO-1515](https://issues.redhat.com/browse/COO-1515): add the cluster-health-analyzer feature [#736](https://github.com/openshift/monitoring-plugin/pull/736)
* [OCPBUGS-72604](https://issues.redhat.com/browse/OCPBUGS-72604): remove top level dispatch into useEffect [#730](https://github.com/openshift/monitoring-plugin/pull/730)
* NO-JIRA: monitoring testing - metrics - ungraphable for periodics [#731](https://github.com/openshift/monitoring-plugin/pull/731)
* [OU-1134](https://issues.redhat.com/browse/OU-1134): edit perses dashboards automation testing [#712](https://github.com/openshift/monitoring-plugin/pull/712)
* [OU-1122](https://issues.redhat.com/browse/OU-1122): reuse existing handler to set alerts table data [#690](https://github.com/openshift/monitoring-plugin/pull/690)
* NO-JIRA: fix: remove unnecessary package.lock [#728](https://github.com/openshift/monitoring-plugin/pull/728)
* [OCPBUGS-70014](https://issues.redhat.com/browse/OCPBUGS-70014): Updating monitoring-plugin-container image to be consistent with ART for 4.22 [#708](https://github.com/openshift/monitoring-plugin/pull/708)
* [OBSINTA-1062](https://issues.redhat.com/browse/OBSINTA-1062): custom cluster-health-analyzer builds [#720](https://github.com/openshift/monitoring-plugin/pull/720)
* NO-JIRA: metrics automation failing only in periodics - fix click and type timespan [#725](https://github.com/openshift/monitoring-plugin/pull/725)
* NO-JIRA: fix esbuild optional dependencies for cross arch builds [#721](https://github.com/openshift/monitoring-plugin/pull/721)
* [OCPBUGS-70314](https://issues.redhat.com/browse/OCPBUGS-70314): fix: update qs vulnerable dependency [#715](https://github.com/openshift/monitoring-plugin/pull/715)
* NO-JIRA: metrics automation testing for presubmit and periodic [#716](https://github.com/openshift/monitoring-plugin/pull/716)
* NO-JIRA: feat: use esbuild-loader, add push manifest command to makefile [#713](https://github.com/openshift/monitoring-plugin/pull/713)
* [OU-1064](https://issues.redhat.com/browse/OU-1064): list perses dashboards automation testing [#711](https://github.com/openshift/monitoring-plugin/pull/711)
* NO-JIRA: monitoring automation fixing Core platform change [#709](https://github.com/openshift/monitoring-plugin/pull/709)
* [OU-632](https://issues.redhat.com/browse/OU-632): Split ALERTS query_range into several requests for Incidents [#678](https://github.com/openshift/monitoring-plugin/pull/678)
* [OU-1082](https://issues.redhat.com/browse/OU-1082): claude slash commands cypress-setup and cypress-run [#673](https://github.com/openshift/monitoring-plugin/pull/673)
* [OU-1074](https://issues.redhat.com/browse/OU-1074): feat: add backport claude command [#691](https://github.com/openshift/monitoring-plugin/pull/691)
* [OU-1088](https://issues.redhat.com/browse/OU-1088): remove random multiplication [#696](https://github.com/openshift/monitoring-plugin/pull/696)
* [OU-1073](https://issues.redhat.com/browse/OU-1073): chore: add contributing guide [#694](https://github.com/openshift/monitoring-plugin/pull/694)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/a243f0667e8d8ec61078d2417d9fff46ec752634...c43889fdf60b85fe43dc45417be3f644586e7cc4)
### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/16ba7ef8026f5b6d0d08b19c707648d82b1ac592)
* [OCPBUGS-74025](https://issues.redhat.com/browse/OCPBUGS-74025): Updating ose-multus-admission-controller-container image to be consistent with ART for 4.22 [#114](https://github.com/openshift/multus-admission-controller/pull/114)
* [OCPBUGS-69968](https://issues.redhat.com/browse/OCPBUGS-69968): Updating ose-multus-admission-controller-container image to be consistent with ART for 4.22 [#113](https://github.com/openshift/multus-admission-controller/pull/113)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/d95feb67adfb97346849c79e36b6a9d404296ae9...16ba7ef8026f5b6d0d08b19c707648d82b1ac592)
### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/b4ec7d8239ce4bd3ed949bce9816a013377b44c7)
* [CORENET-6886](https://issues.redhat.com/browse/CORENET-6886): downstream sync to kube 1.35 and go to 1.25 [#281](https://github.com/openshift/multus-cni/pull/281)
* [OKD-322](https://issues.redhat.com/browse/OKD-322): Update Dockerfile to work on CentOS/RHEL 10 [#275](https://github.com/openshift/multus-cni/pull/275)
* [CORENET-6864](https://issues.redhat.com/browse/CORENET-6864): Ds merge 3/3/2026 [#280](https://github.com/openshift/multus-cni/pull/280)
* [Full changelog](https://github.com/openshift/multus-cni/compare/93556f99405e29900c5445f7bbf7c70b8935e339...b4ec7d8239ce4bd3ed949bce9816a013377b44c7)
### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/834a093f693e521b8dc4ec7168d03cfba2c1cba1)
* downstream sync 2026-02-23 [#97](https://github.com/openshift/multus-networkpolicy/pull/97)
* ds: disable DependaBot downstream [#96](https://github.com/openshift/multus-networkpolicy/pull/96)
* [OCPBUGS-77537](https://issues.redhat.com/browse/OCPBUGS-77537): Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.22 [#101](https://github.com/openshift/multus-networkpolicy/pull/101)
* [OCPBUGS-76465](https://issues.redhat.com/browse/OCPBUGS-76465): Clean up dnf cache [#99](https://github.com/openshift/multus-networkpolicy/pull/99)
* [OCPBUGS-77019](https://issues.redhat.com/browse/OCPBUGS-77019): Disable metrics server [#98](https://github.com/openshift/multus-networkpolicy/pull/98)
* [CNF-21001](https://issues.redhat.com/browse/CNF-21001): downstream: Transition to nftables backend [#77](https://github.com/openshift/multus-networkpolicy/pull/77)
* [OCPBUGS-69727](https://issues.redhat.com/browse/OCPBUGS-69727): Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.22 [#83](https://github.com/openshift/multus-networkpolicy/pull/83)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/5ed5d2408a35847dabfc843b032ee3eecb4d6ee1...834a093f693e521b8dc4ec7168d03cfba2c1cba1)
### [must-gather](https://github.com/openshift/must-gather/tree/8554213fa214e8e165e7bedaf8d892bb824d83ef)
* [MG-241](https://issues.redhat.com/browse/MG-241): Adding support for skipping rotated logs [#536](https://github.com/openshift/must-gather/pull/536)
* no-jira: build(make): default podman flags for ART DNF wrapper [#535](https://github.com/openshift/must-gather/pull/535)
* no-jira: docs: add proposal for e2e [#526](https://github.com/openshift/must-gather/pull/526)
* [RFE-8344](https://issues.redhat.com/browse/RFE-8344): Add Node Feature Discovery Operator collection script [#508](https://github.com/openshift/must-gather/pull/508)
* [RFE-8932](https://issues.redhat.com/browse/RFE-8932): Included object size with the object count [#527](https://github.com/openshift/must-gather/pull/527)
* [OCPBUGS-77832](https://issues.redhat.com/browse/OCPBUGS-77832): Updating ose-must-gather-container image to be consistent with ART for 4.22 [#528](https://github.com/openshift/must-gather/pull/528)
* NO-JIRA:gather_ppc: detect NTO image from TuneD pods on HCP [#518](https://github.com/openshift/must-gather/pull/518)
* no-jira: chore: ensure scripts are properly formatted [#524](https://github.com/openshift/must-gather/pull/524)
* no-jira: test: add basic UT for collection-scripts [#521](https://github.com/openshift/must-gather/pull/521)
* [OSSM-11290](https://issues.redhat.com/browse/OSSM-11290): Collect Istio ZTunnel resources [#511](https://github.com/openshift/must-gather/pull/511)
* [OCPBUGS-70064](https://issues.redhat.com/browse/OCPBUGS-70064): Updating ose-must-gather-container image to be consistent with ART for 4.22 [#519](https://github.com/openshift/must-gather/pull/519)
* [Full changelog](https://github.com/openshift/must-gather/compare/b4b434c427ddde3dafd8518d1aa754e49b7bfef1...8554213fa214e8e165e7bedaf8d892bb824d83ef)
### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/5b233ea1d80733c1b00c6bad65dec0620dbf783a)
* [OCPBUGS-74026](https://issues.redhat.com/browse/OCPBUGS-74026): Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.22 [#141](https://github.com/openshift/network-metrics-daemon/pull/141)
* [OCPBUGS-69971](https://issues.redhat.com/browse/OCPBUGS-69971): Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.22 [#140](https://github.com/openshift/network-metrics-daemon/pull/140)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/844fa588c4200b8ff768d1916d63f1d4c1db2daf...5b233ea1d80733c1b00c6bad65dec0620dbf783a)
### [network-tools](https://github.com/openshift/network-tools/tree/5c4b905c09ccd6edadb2ff359f45b70ed334f948)
* NO-JIRA: Image slimming [#154](https://github.com/openshift/network-tools/pull/154)
* [OCPBUGS-77809](https://issues.redhat.com/browse/OCPBUGS-77809): Updating ose-network-tools-container image to be consistent with ART for 4.22 [#173](https://github.com/openshift/network-tools/pull/173)
* NO-JIRA: Comment submariner team members until they're ready for OVNK bugs [#171](https://github.com/openshift/network-tools/pull/171)
* [OCPBUGS-70066](https://issues.redhat.com/browse/OCPBUGS-70066): Updating ose-network-tools-container image to be consistent with ART for 4.22 [#170](https://github.com/openshift/network-tools/pull/170)
* [Full changelog](https://github.com/openshift/network-tools/compare/d6717e453a098d551c9e2d2868e1f5317c41e688...5c4b905c09ccd6edadb2ff359f45b70ed334f948)
### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/5422f79693a1f8625db4e2a23c3048e75b59c092)
* Bump lodash from 4.17.23 to 4.18.1 [#366](https://github.com/openshift/networking-console-plugin/pull/366)
* [OCPBUGS-70285](https://issues.redhat.com/browse/OCPBUGS-70285): Upgrade cypress to v15 to fix CVEs [#345](https://github.com/openshift/networking-console-plugin/pull/345)
* [OCPBUGS-78542](https://issues.redhat.com/browse/OCPBUGS-78542): Remove useHistory and replace with useNavigate [#364](https://github.com/openshift/networking-console-plugin/pull/364)
* [CNV-81752](https://issues.redhat.com/browse/CNV-81752): Fix runtime error when clicking "Create Route" [#363](https://github.com/openshift/networking-console-plugin/pull/363)
* [OCPBUGS-74912](https://issues.redhat.com/browse/OCPBUGS-74912): Fix namespace resolution and resource path for Routes and Services list pages [#362](https://github.com/openshift/networking-console-plugin/pull/362)
* [OCPBUGS-77868](https://issues.redhat.com/browse/OCPBUGS-77868): Clean up cruft in /var/cache/dnf [#360](https://github.com/openshift/networking-console-plugin/pull/360)
* [OCPBUGS-77174](https://issues.redhat.com/browse/OCPBUGS-77174): Fix display of NAD type for NADs created from YAML [#358](https://github.com/openshift/networking-console-plugin/pull/358)
* [OCPBUGS-77414](https://issues.redhat.com/browse/OCPBUGS-77414): simplify dockerfile by removing cachito dependencies [#356](https://github.com/openshift/networking-console-plugin/pull/356)
* [CNV-59877](https://issues.redhat.com/browse/CNV-59877): Fix permissions request for NADs [#352](https://github.com/openshift/networking-console-plugin/pull/352)
* [OCPBUGS-41199](https://issues.redhat.com/browse/OCPBUGS-41199): Fix NAD creation using default namespace instead of selected one [#348](https://github.com/openshift/networking-console-plugin/pull/348)
* Remove yarn references from ART Dockerfile [#347](https://github.com/openshift/networking-console-plugin/pull/347)
* [CNV-78079](https://issues.redhat.com/browse/CNV-78079): remove Virtual machine networks page [#344](https://github.com/openshift/networking-console-plugin/pull/344)
* [CNV-78079](https://issues.redhat.com/browse/CNV-78079): Virtual machine networks page - Other types tab [#335](https://github.com/openshift/networking-console-plugin/pull/335)
* [CNV-78079](https://issues.redhat.com/browse/CNV-78079): Virtual machine networks - deletion [#343](https://github.com/openshift/networking-console-plugin/pull/343)
* [CNV-78079](https://issues.redhat.com/browse/CNV-78079): Virtual machine networks - details page updates [#333](https://github.com/openshift/networking-console-plugin/pull/333)
* [CNV-77540](https://issues.redhat.com/browse/CNV-77540): fix Enable MultiNetworkPolicies lead to invalid URL [#339](https://github.com/openshift/networking-console-plugin/pull/339)
* [CNV-78194](https://issues.redhat.com/browse/CNV-78194): update PatternFly to 6.4.0 to align with Console main [#336](https://github.com/openshift/networking-console-plugin/pull/336)
* [CNV-70790](https://issues.redhat.com/browse/CNV-70790): Navigation to Project Mapping Before Network Definition Com… [#338](https://github.com/openshift/networking-console-plugin/pull/338)
* [CNV-69219](https://issues.redhat.com/browse/CNV-69219): New translations [#337](https://github.com/openshift/networking-console-plugin/pull/337)
* [CNV-78079](https://issues.redhat.com/browse/CNV-78079): Virtual machine networks - list updates [#329](https://github.com/openshift/networking-console-plugin/pull/329)
* [OCPBUGS-74423](https://issues.redhat.com/browse/OCPBUGS-74423): Migrate to npm [#331](https://github.com/openshift/networking-console-plugin/pull/331)
* [CNV-77547](https://issues.redhat.com/browse/CNV-77547): add "Make this network available for all projects" option to Virtual machine network Wizard [#328](https://github.com/openshift/networking-console-plugin/pull/328)
* [CNV-76711](https://issues.redhat.com/browse/CNV-76711): Remove @openshift-console/plugin-shared package [#327](https://github.com/openshift/networking-console-plugin/pull/327)
* [CNV-76879](https://issues.redhat.com/browse/CNV-76879): Allow passing the physical network name via URL parameter in the VM network wizard [#326](https://github.com/openshift/networking-console-plugin/pull/326)
* [CNV-76435](https://issues.redhat.com/browse/CNV-76435): CUDN breadcrumb link to page with Project selector [#325](https://github.com/openshift/networking-console-plugin/pull/325)
* [OCPBUGS-73548](https://issues.redhat.com/browse/OCPBUGS-73548): remove whitelist for allowlist [#321](https://github.com/openshift/networking-console-plugin/pull/321)
* [CNV-75831](https://issues.redhat.com/browse/CNV-75831): list all NetworkPolicies in "All projects" [#313](https://github.com/openshift/networking-console-plugin/pull/313)
* [CNV-76277](https://issues.redhat.com/browse/CNV-76277): Fix name generator with unprofessional names [#315](https://github.com/openshift/networking-console-plugin/pull/315)
* [OCPBUGS-70000](https://issues.redhat.com/browse/OCPBUGS-70000): Updating networking-console-plugin-container image to be consistent with ART for 4.22 [#312](https://github.com/openshift/networking-console-plugin/pull/312)
* [CNV-76211](https://issues.redhat.com/browse/CNV-76211): Remove deprecated badge from localnet [#314](https://github.com/openshift/networking-console-plugin/pull/314)
* [CNV-74685](https://issues.redhat.com/browse/CNV-74685): Fix vm network edit modal [#311](https://github.com/openshift/networking-console-plugin/pull/311)
* [CNV-74687](https://issues.redhat.com/browse/CNV-74687): Fixing the title and redirect when deleting a vm network [#307](https://github.com/openshift/networking-console-plugin/pull/307)
* [CNV-72230](https://issues.redhat.com/browse/CNV-72230): fix networking links [#309](https://github.com/openshift/networking-console-plugin/pull/309)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/482f1e7dbf737c7864e6d2a1bd9e9e3066d6c048...5422f79693a1f8625db4e2a23c3048e75b59c092)
### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/8e75679a965b80fee0332f8758471a7d3a75a4e8)
* [OCPCLOUD-3272](https://issues.redhat.com/browse/OCPCLOUD-3272): Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (9c374cb) into main [#54](https://github.com/openshift/cloud-provider-nutanix/pull/54)
* [OCPBUGS-69976](https://issues.redhat.com/browse/OCPBUGS-69976): Updating ose-nutanix-cloud-controller-manager-container image to be consistent with ART for 4.22 [#53](https://github.com/openshift/cloud-provider-nutanix/pull/53)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/33b7bec6fe27b8d126982a70b4579112cd67052b...8e75679a965b80fee0332f8758471a7d3a75a4e8)
### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/60559fdd7092dd29aa1c72797c49279aa2da39ee)
* [OCPCLOUD-3277](https://issues.redhat.com/browse/OCPCLOUD-3277): Bump k8s 1.35 [#134](https://github.com/openshift/machine-api-provider-nutanix/pull/134)
* [OCPBUGS-74002](https://issues.redhat.com/browse/OCPBUGS-74002): Updating ose-nutanix-machine-controllers-container image to be consistent with ART for 4.22 [#129](https://github.com/openshift/machine-api-provider-nutanix/pull/129)
* [OCPBUGS-69913](https://issues.redhat.com/browse/OCPBUGS-69913): Updating ose-nutanix-machine-controllers-container image to be consistent with ART for 4.22 [#128](https://github.com/openshift/machine-api-provider-nutanix/pull/128)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/b15a665cd9c12c5a7d2ac81b5330b6f446c3a8be...60559fdd7092dd29aa1c72797c49279aa2da39ee)
### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/29215dddf12f5b0f549125c22cebe56f14596529)
* [CNTRLPLANE-2989](https://issues.redhat.com/browse/CNTRLPLANE-2989): feat: add external-oidc subcommand to oauth-apiserver [#181](https://github.com/openshift/oauth-apiserver/pull/181)
* [CNTRLPLANE-2260](https://issues.redhat.com/browse/CNTRLPLANE-2260): cmd: wire up OTE ginkgo suite for tokenreviews [#163](https://github.com/openshift/oauth-apiserver/pull/163)
* [CNTRLPLANE-2436](https://issues.redhat.com/browse/CNTRLPLANE-2436): bump(k8s)=1.34.1 [#164](https://github.com/openshift/oauth-apiserver/pull/164)
* [CNTRLPLANE-2260](https://issues.redhat.com/browse/CNTRLPLANE-2260): cmd/oauth-apiserver-tests-ext: Update OTE framework integration [#162](https://github.com/openshift/oauth-apiserver/pull/162)
* [OCPBUGS-69818](https://issues.redhat.com/browse/OCPBUGS-69818): Updating ose-oauth-apiserver-container image to be consistent with ART for 4.22 [#160](https://github.com/openshift/oauth-apiserver/pull/160)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/cd7a88e42d42751ebf2e00618d7ca201c61978fc...29215dddf12f5b0f549125c22cebe56f14596529)
### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/714292f5478e6c12da6a31710f72bc8fbe6fb925)
* [OCPBUGS-73848](https://issues.redhat.com/browse/OCPBUGS-73848): test/e2e - do not use ambiguous container image short names [#343](https://github.com/openshift/oauth-proxy/pull/343)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/39f8426add0e2b669cae3232c3fb793ad1b6bb07...714292f5478e6c12da6a31710f72bc8fbe6fb925)
### [oauth-server](https://github.com/openshift/oauth-server/tree/69bdf8bc63e094815d07aa16fc2537df5c045489)
* [OCPBUGS-63228](https://issues.redhat.com/browse/OCPBUGS-63228): groupmapper: avoid mutating original group users slice when removing user [#211](https://github.com/openshift/oauth-server/pull/211)
* [CNTRLPLANE-2437](https://issues.redhat.com/browse/CNTRLPLANE-2437): bump(k8s)=1.34.1 [#208](https://github.com/openshift/oauth-server/pull/208)
* [Full changelog](https://github.com/openshift/oauth-server/compare/3ab74506e64c804a465eb74b74046174a1121dd8...69bdf8bc63e094815d07aa16fc2537df5c045489)
### [oc-mirror](https://github.com/openshift/oc-mirror/tree/ca5eebdcecf9650248f15fe6009b22788ba0c434)
* [CLID-532](https://issues.redhat.com/browse/CLID-532): Separate Image struct into AdditionalImage, BlockedImage, SampleImage [#1372](https://github.com/openshift/oc-mirror/pull/1372)
* [OCPBUGS-62603](https://issues.redhat.com/browse/OCPBUGS-62603): Fix printing collection messages with 0 collection items [#1385](https://github.com/openshift/oc-mirror/pull/1385)
* [OCPBUGS-61136](https://issues.redhat.com/browse/OCPBUGS-61136): Only print catalog rebuild message if there are catalo… [#1386](https://github.com/openshift/oc-mirror/pull/1386)
* [CLID-524](https://issues.redhat.com/browse/CLID-524): additionalImages collector error handling [#1343](https://github.com/openshift/oc-mirror/pull/1343)
* [CLID-535](https://issues.redhat.com/browse/CLID-535): api: use OCI definitions from opencontainers spec [#1341](https://github.com/openshift/oc-mirror/pull/1341)
* [CLID-547](https://issues.redhat.com/browse/CLID-547): v2: add `list releases` command [#1373](https://github.com/openshift/oc-mirror/pull/1373)
* [CLID-540](https://issues.redhat.com/browse/CLID-540): v2: add `list operators` command [#1370](https://github.com/openshift/oc-mirror/pull/1370)
* NO-JIRA: Group dependabot updates by package origin [#1336](https://github.com/openshift/oc-mirror/pull/1336)
* no-jira: lint: Remove golangci-lint v1 config. [#1374](https://github.com/openshift/oc-mirror/pull/1374)
* [OCPBUGS-77146](https://issues.redhat.com/browse/OCPBUGS-77146): Remove status field from CatalogSource, ClusterCatalog… [#1369](https://github.com/openshift/oc-mirror/pull/1369)
* [CLID-549](https://issues.redhat.com/browse/CLID-549): Update Dockerfile.tests to run Go integration tests [#1368](https://github.com/openshift/oc-mirror/pull/1368)
* [CLID-197](https://issues.redhat.com/browse/CLID-197): Add TargetRepo, TargetTag to additionalImages [#1327](https://github.com/openshift/oc-mirror/pull/1327)
* [OCPBUGS-77726](https://issues.redhat.com/browse/OCPBUGS-77726): Updating oc-mirror-plugin-container image to be consistent with ART for 4.22 [#1364](https://github.com/openshift/oc-mirror/pull/1364)
* [OCPBUGS-77726](https://issues.redhat.com/browse/OCPBUGS-77726): Updating oc-mirror-plugin-container image to be consistent with ART for 4.22 (missing files from ART PR 1364 ) [#1366](https://github.com/openshift/oc-mirror/pull/1366)
* [CLID-539](https://issues.redhat.com/browse/CLID-539): Remove unused constants and centralize widely used ones [#1354](https://github.com/openshift/oc-mirror/pull/1354)
* NO-JIRA: Bump github.com/containerd/containerd from 1.7.27 to 1.7.29 in the oc-mirror-v2-security-updates group across 1 directory [#1308](https://github.com/openshift/oc-mirror/pull/1308)
* [OCPBUGS-77141](https://issues.redhat.com/browse/OCPBUGS-77141): Fix registriesd "unknown userid" failure for arbitrary UIDs [#1357](https://github.com/openshift/oc-mirror/pull/1357)
* [CLID-513](https://issues.redhat.com/browse/CLID-513): operator catalogs pinned by digest in ISC [#1333](https://github.com/openshift/oc-mirror/pull/1333)
* [OCPBUGS-75013](https://issues.redhat.com/browse/OCPBUGS-75013): Fix reg config detection for explicit false values [#1348](https://github.com/openshift/oc-mirror/pull/1348)
* [OCPBUGS-73760](https://issues.redhat.com/browse/OCPBUGS-73760): fix conversion issue for catalog [#1338](https://github.com/openshift/oc-mirror/pull/1338)
* [OCPBUGS-69745](https://issues.redhat.com/browse/OCPBUGS-69745): fix duplicated channel bug in filtered catalogs [#1339](https://github.com/openshift/oc-mirror/pull/1339)
* [CLID-476](https://issues.redhat.com/browse/CLID-476): Fixes for cross-build errors [#1303](https://github.com/openshift/oc-mirror/pull/1303)
* [OCPBUGS-70024](https://issues.redhat.com/browse/OCPBUGS-70024): images: update images to 4.22 [#1337](https://github.com/openshift/oc-mirror/pull/1337)
* [OCPBUGS-70024](https://issues.redhat.com/browse/OCPBUGS-70024): Updating oc-mirror-plugin-container image to be consistent with ART for 4.22 [#1331](https://github.com/openshift/oc-mirror/pull/1331)
* NO-JIRA: Add tests/results-integration to .gitignore [#1326](https://github.com/openshift/oc-mirror/pull/1326)
* [CLID-480](https://issues.redhat.com/browse/CLID-480): v2: do not invoke v1 make commands [#1310](https://github.com/openshift/oc-mirror/pull/1310)
* [CLID-512](https://issues.redhat.com/browse/CLID-512): claude: add slash command for ISC generation [#1328](https://github.com/openshift/oc-mirror/pull/1328)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/38b29a1d4a2e825ee10bed72ad2d92056b3d36f2...ca5eebdcecf9650248f15fe6009b22788ba0c434)
### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/a3e5b4ff3745e6e6f0371fc14c124089a7289e7c)
* [OPRUN-4546](https://issues.redhat.com/browse/OPRUN-4546): Fix boxcutter finalizer ResourceNames in preflight test [#695](https://github.com/openshift/operator-framework-operator-controller/pull/695)
* NO-ISSUE: Synchronize From Upstream Repositories [#694](https://github.com/openshift/operator-framework-operator-controller/pull/694)
* NO-ISSUE: Synchronize From Upstream Repositories [#693](https://github.com/openshift/operator-framework-operator-controller/pull/693)
* [OCPQE-31553](https://issues.redhat.com/browse/OCPQE-31553): Test empty affinity erasure and cleanup [#689](https://github.com/openshift/operator-framework-operator-controller/pull/689)
* NO-ISSUE: Synchronize From Upstream Repositories [#692](https://github.com/openshift/operator-framework-operator-controller/pull/692)
* [OPRUN-4518](https://issues.redhat.com/browse/OPRUN-4518): Remove skip for incompatible operator check after rename of CER [#690](https://github.com/openshift/operator-framework-operator-controller/pull/690)
* [OCPBUGS-60693](https://issues.redhat.com/browse/OCPBUGS-60693), [OCPBUGS-60958](https://issues.redhat.com/browse/OCPBUGS-60958): Synchronize From Upstream Repositories [#691](https://github.com/openshift/operator-framework-operator-controller/pull/691)
* [OPRUN-4426](https://issues.redhat.com/browse/OPRUN-4426): add ocp-87557 [#635](https://github.com/openshift/operator-framework-operator-controller/pull/635)
* [OCPQE-31553](https://issues.redhat.com/browse/OCPQE-31553): update preflight permission case [#686](https://github.com/openshift/operator-framework-operator-controller/pull/686)
* NO-ISSUE: Add fgiudici as reviewer [#681](https://github.com/openshift/operator-framework-operator-controller/pull/681)
* [OCPBUGS-78211](https://issues.redhat.com/browse/OCPBUGS-78211), [OCPBUGS-78455](https://issues.redhat.com/browse/OCPBUGS-78455): Synchronize From Upstream Repositories [#682](https://github.com/openshift/operator-framework-operator-controller/pull/682)
* NO-ISSUE: Add long-duration test script and documents [#664](https://github.com/openshift/operator-framework-operator-controller/pull/664)
* [OCPBUGS-81194](https://issues.redhat.com/browse/OCPBUGS-81194): Update grpc in default-catalog-consistency tests [#679](https://github.com/openshift/operator-framework-operator-controller/pull/679)
* [OCPBUGS-78092](https://issues.redhat.com/browse/OCPBUGS-78092), [OCPBUGS-78311](https://issues.redhat.com/browse/OCPBUGS-78311): Synchronize From Upstream Repositories [#677](https://github.com/openshift/operator-framework-operator-controller/pull/677)
* [OPRUN-4063](https://issues.redhat.com/browse/OPRUN-4063): verify volume/volumeMount override [#678](https://github.com/openshift/operator-framework-operator-controller/pull/678)
* [OCPBUGS-78999](https://issues.redhat.com/browse/OCPBUGS-78999): Update quay-operator bundle version in OTE to fix missing arch [#673](https://github.com/openshift/operator-framework-operator-controller/pull/673)
* [OCPQE-31636](https://issues.redhat.com/browse/OCPQE-31636): enhance QE cases [#666](https://github.com/openshift/operator-framework-operator-controller/pull/666)
* [OCPBUGS-76380](https://issues.redhat.com/browse/OCPBUGS-76380): Synchronize From Upstream Repositories [#676](https://github.com/openshift/operator-framework-operator-controller/pull/676)
* [OPRUN-4228](https://issues.redhat.com/browse/OPRUN-4228): Add boxcutter tests [#672](https://github.com/openshift/operator-framework-operator-controller/pull/672)
* [OPRUN-4468](https://issues.redhat.com/browse/OPRUN-4468): Add OTE tests for OLMv1 DeploymentConfig support [#662](https://github.com/openshift/operator-framework-operator-controller/pull/662)
* [OCPBUGS-78787](https://issues.redhat.com/browse/OCPBUGS-78787): Synchronize from upstream [#670](https://github.com/openshift/operator-framework-operator-controller/pull/670)
* [OCPBUGS-65634](https://issues.redhat.com/browse/OCPBUGS-65634): UPSTREAM: <carry>: add service account to curl job [#653](https://github.com/openshift/operator-framework-operator-controller/pull/653)
* [OPRUN-4063](https://issues.redhat.com/browse/OPRUN-4063): deployment config cases [#654](https://github.com/openshift/operator-framework-operator-controller/pull/654)
* [OCPQE-31265](https://issues.redhat.com/browse/OCPQE-31265): update OCP-75441 to support multi-arch [#668](https://github.com/openshift/operator-framework-operator-controller/pull/668)
* [OPRUN-4509](https://issues.redhat.com/browse/OPRUN-4509): Synchronize From Upstream Repositories [#669](https://github.com/openshift/operator-framework-operator-controller/pull/669)
* NO-ISSUE: Synchronize From Upstream Repositories [#667](https://github.com/openshift/operator-framework-operator-controller/pull/667)
* NO-ISSUE: Synchronize From Upstream Repositories [#665](https://github.com/openshift/operator-framework-operator-controller/pull/665)
* NO-ISSUE: Synchronize From Upstream Repositories [#663](https://github.com/openshift/operator-framework-operator-controller/pull/663)
* NO-ISSUE: Synchronize From Upstream Repositories [#661](https://github.com/openshift/operator-framework-operator-controller/pull/661)
* [OCPBUGS-77847](https://issues.redhat.com/browse/OCPBUGS-77847): Increase install timeout and add diagnostic logging for CE install tests [#660](https://github.com/openshift/operator-framework-operator-controller/pull/660)
* [OCPBUGS-76453](https://issues.redhat.com/browse/OCPBUGS-76453): Synchronize From Upstream Repositories [#659](https://github.com/openshift/operator-framework-operator-controller/pull/659)
* [OCPBUGS-77942](https://issues.redhat.com/browse/OCPBUGS-77942): Fix OLMv1 test operator to listen on IPv6 [#657](https://github.com/openshift/operator-framework-operator-controller/pull/657)
* NO-ISSUE: Synchronize From Upstream Repositories [#658](https://github.com/openshift/operator-framework-operator-controller/pull/658)
* [OCPQE-31707](https://issues.redhat.com/browse/OCPQE-31707): serviceAccount validation unified across all runtimes to enhance cases [#656](https://github.com/openshift/operator-framework-operator-controller/pull/656)
* NO-ISSUE: Synchronize From Upstream Repositories [#655](https://github.com/openshift/operator-framework-operator-controller/pull/655)
* NO-ISSUE: Synchronize From Upstream Repositories [#651](https://github.com/openshift/operator-framework-operator-controller/pull/651)
* [OCPQE-31637](https://issues.redhat.com/browse/OCPQE-31637): fix 83026 for TP cluster [#652](https://github.com/openshift/operator-framework-operator-controller/pull/652)
* [OPRUN-4461](https://issues.redhat.com/browse/OPRUN-4461): Upgrade OTE and Default Catalog Tests dependencies and go [#649](https://github.com/openshift/operator-framework-operator-controller/pull/649)
* [OPRUN-4459](https://issues.redhat.com/browse/OPRUN-4459): Update OCP catalogs to v4.22 ( Release Blocker ; Must go in before OCP release 4.22 ) [#627](https://github.com/openshift/operator-framework-operator-controller/pull/627)
* [OCPQE-31553](https://issues.redhat.com/browse/OCPQE-31553): adjust qe sa and permission test cases per new change [#631](https://github.com/openshift/operator-framework-operator-controller/pull/631)
* NO-ISSUE: Synchronize From Upstream Repositories [#648](https://github.com/openshift/operator-framework-operator-controller/pull/648)
* [OPRUN-4459](https://issues.redhat.com/browse/OPRUN-4459), [OPRUN-4460](https://issues.redhat.com/browse/OPRUN-4460): Preflight tests use in-cluster catalog and bundles instead of openshift-pipelines-operator-rh [#644](https://github.com/openshift/operator-framework-operator-controller/pull/644)
* NO-ISSUE: Synchronize From Upstream Repositories [#646](https://github.com/openshift/operator-framework-operator-controller/pull/646)
* [OCPBUGS-65634](https://issues.redhat.com/browse/OCPBUGS-65634): add service account to verify pod [#638](https://github.com/openshift/operator-framework-operator-controller/pull/638)
* NO-ISSUE: Synchronize From Upstream Repositories [#645](https://github.com/openshift/operator-framework-operator-controller/pull/645)
* NO-ISSUE: Synchronize From Upstream Repositories [#643](https://github.com/openshift/operator-framework-operator-controller/pull/643)
* [MON-4516](https://issues.redhat.com/browse/MON-4516): Synchronize From Upstream Repositories [#641](https://github.com/openshift/operator-framework-operator-controller/pull/641)
* NO-ISSUE: Synchronize From Upstream Repositories [#640](https://github.com/openshift/operator-framework-operator-controller/pull/640)
* NO-ISSUE: Synchronize From Upstream Repositories [#639](https://github.com/openshift/operator-framework-operator-controller/pull/639)
* NO-ISSUE: Synchronize From Upstream Repositories [#637](https://github.com/openshift/operator-framework-operator-controller/pull/637)
* [OPRUN-4441](https://issues.redhat.com/browse/OPRUN-4441): fix(ote): Fix up own-namespace invalid configuration test [#634](https://github.com/openshift/operator-framework-operator-controller/pull/634)
* NO-ISSUE: Synchronize From Upstream Repositories [#633](https://github.com/openshift/operator-framework-operator-controller/pull/633)
* NO-ISSUE: Synchronize From Upstream Repositories [#632](https://github.com/openshift/operator-framework-operator-controller/pull/632)
* NO-ISSUE: Synchronize From Upstream Repositories [#630](https://github.com/openshift/operator-framework-operator-controller/pull/630)
* [OPRUN-4439](https://issues.redhat.com/browse/OPRUN-4439): Update test-operator startup script to fix pod probe endpoints [#629](https://github.com/openshift/operator-framework-operator-controller/pull/629)
* NO-ISSUE: add 85889 automation [#603](https://github.com/openshift/operator-framework-operator-controller/pull/603)
* NO-ISSUE: add 83979 automation [#602](https://github.com/openshift/operator-framework-operator-controller/pull/602)
* NO-ISSUE: Synchronize From Upstream Repositories [#625](https://github.com/openshift/operator-framework-operator-controller/pull/625)
* [OPRUN-4441](https://issues.redhat.com/browse/OPRUN-4441): fix(ote): fix SingleOwnNamespace test for Boxcutter runtime compatibility and use as operator-controller dep from root instead of upstream release [#628](https://github.com/openshift/operator-framework-operator-controller/pull/628)
* [OCPQE-31553](https://issues.redhat.com/browse/OCPQE-31553): adjust watchnamespace qe case based on change [#623](https://github.com/openshift/operator-framework-operator-controller/pull/623)
* [OPRUN-4439](https://issues.redhat.com/browse/OPRUN-4439): Fix test operator controller pod probes [#614](https://github.com/openshift/operator-framework-operator-controller/pull/614)
* NO-ISSUE: Synchronize From Upstream Repositories [#622](https://github.com/openshift/operator-framework-operator-controller/pull/622)
* [OPRUN-4446](https://issues.redhat.com/browse/OPRUN-4446): Update preflight auth checks for Boxcutter feature gate [#621](https://github.com/openshift/operator-framework-operator-controller/pull/621)
* [OPRUN-4112](https://issues.redhat.com/browse/OPRUN-4112): Synchronize From Upstream Repositories [#615](https://github.com/openshift/operator-framework-operator-controller/pull/615)
* [OPRUN-4403](https://issues.redhat.com/browse/OPRUN-4403): OPRUN-4403 case for upgrade major version [#618](https://github.com/openshift/operator-framework-operator-controller/pull/618)
* [OCPQE-31521](https://issues.redhat.com/browse/OCPQE-31521): enhance ocp-79770 [#616](https://github.com/openshift/operator-framework-operator-controller/pull/616)
* [OPRUN-4063](https://issues.redhat.com/browse/OPRUN-4063): config watchnamespace api cases [#612](https://github.com/openshift/operator-framework-operator-controller/pull/612)
* NO-ISSUE: Synchronize From Upstream Repositories [#610](https://github.com/openshift/operator-framework-operator-controller/pull/610)
* [OPRUN-4385](https://issues.redhat.com/browse/OPRUN-4385): Remove marketplace index from tests [#598](https://github.com/openshift/operator-framework-operator-controller/pull/598)
* NO-ISSUE: Synchronize From Upstream Repositories [#608](https://github.com/openshift/operator-framework-operator-controller/pull/608)
* [TRT-2516](https://issues.redhat.com/browse/TRT-2516): Revert #594 "OCPBUGS-65634: add service account to curl job" [#609](https://github.com/openshift/operator-framework-operator-controller/pull/609)
* [OCPBUGS-65634](https://issues.redhat.com/browse/OCPBUGS-65634): add service account to curl job [#594](https://github.com/openshift/operator-framework-operator-controller/pull/594)
* NO-ISSUE: Synchronize From Upstream Repositories [#601](https://github.com/openshift/operator-framework-operator-controller/pull/601)
* [OCPQE-31296](https://issues.redhat.com/browse/OCPQE-31296): enhance qe cases to make it more stable [#604](https://github.com/openshift/operator-framework-operator-controller/pull/604)
* NO-ISSUE: Run upstream e2e tests tagged with `@catalogd-update` [#605](https://github.com/openshift/operator-framework-operator-controller/pull/605)
* NO-ISSUE: Synchronize From Upstream Repositories [#597](https://github.com/openshift/operator-framework-operator-controller/pull/597)
* [OPRUN-4350](https://issues.redhat.com/browse/OPRUN-4350): Update to golang 1.25 and ocp 4.22 [#586](https://github.com/openshift/operator-framework-operator-controller/pull/586)
* [OCPQE-31263](https://issues.redhat.com/browse/OCPQE-31263): update 83026 to specify the clustercatalog [#583](https://github.com/openshift/operator-framework-operator-controller/pull/583)
* [OCPQE-30674](https://issues.redhat.com/browse/OCPQE-30674): migrate bandrade's OLMv1 test cases to OTE [#562](https://github.com/openshift/operator-framework-operator-controller/pull/562)
* [OCPQE-31264](https://issues.redhat.com/browse/OCPQE-31264): update 80458's timeout to 180s [#579](https://github.com/openshift/operator-framework-operator-controller/pull/579)
* NO-ISSUE: Synchronize from upstream [#581](https://github.com/openshift/operator-framework-operator-controller/pull/581)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/bc5f350745f86a8fa60caccff6c3ea1ecf2ac977...a3e5b4ff3745e6e6f0371fc14c124089a7289e7c)
### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/56aa2d96edd725e44ddd7ff13f23e53e6c509828)
* [CNTRLPLANE-2438](https://issues.redhat.com/browse/CNTRLPLANE-2438): chore: bump(k8s)=1.34.1 [#592](https://github.com/openshift/openshift-apiserver/pull/592)
* Revert "OCPBUGS-72408: block image import from cluster IP addresses" [#599](https://github.com/openshift/openshift-apiserver/pull/599)
* [OCPBUGS-72408](https://issues.redhat.com/browse/OCPBUGS-72408): block image import from cluster IP addresses [#591](https://github.com/openshift/openshift-apiserver/pull/591)
* [OCPBUGS-70049](https://issues.redhat.com/browse/OCPBUGS-70049): Updating ose-openshift-apiserver-container image to be consistent with ART for 4.22 [#590](https://github.com/openshift/openshift-apiserver/pull/590)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/64dea074d6b457e1fae3598cea0bb72493d2cab8...56aa2d96edd725e44ddd7ff13f23e53e6c509828)
### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/26d20feae8892f648f5b06ed3f5492fe6ffb4532)
* [CNTRLPLANE-2769](https://issues.redhat.com/browse/CNTRLPLANE-2769): bump kubernetes dependencies to v1.35 [#429](https://github.com/openshift/openshift-controller-manager/pull/429)
* [CNTRLPLANE-2620](https://issues.redhat.com/browse/CNTRLPLANE-2620): bump github.com/openshift/library-go [#427](https://github.com/openshift/openshift-controller-manager/pull/427)
* [OCPBUGS-69696](https://issues.redhat.com/browse/OCPBUGS-69696): Updating ose-openshift-controller-manager-container image to be consistent with ART for 4.22 [#425](https://github.com/openshift/openshift-controller-manager/pull/425)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/438d52e79d691e016d66eabfe9a53c84229db40c...26d20feae8892f648f5b06ed3f5492fe6ffb4532)
### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/e71e09969f11a47c87b87c43b762ad1d01f6b04f)
* [OCPBUGS-77709](https://issues.redhat.com/browse/OCPBUGS-77709): Updating openshift-state-metrics-container image to be consistent with ART for 4.22 [#130](https://github.com/openshift/openshift-state-metrics/pull/130)
* [OCPBUGS-74036](https://issues.redhat.com/browse/OCPBUGS-74036): Updating openshift-state-metrics-container image to be consistent with ART for 4.22 [#129](https://github.com/openshift/openshift-state-metrics/pull/129)
* [OCPBUGS-69985](https://issues.redhat.com/browse/OCPBUGS-69985): Updating openshift-state-metrics-container image to be consistent with ART for 4.22 [#128](https://github.com/openshift/openshift-state-metrics/pull/128)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/ab605a4bf1c6cd5a6c58f245fb67ce648caebfa8...e71e09969f11a47c87b87c43b762ad1d01f6b04f)
### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/74cb5b085a21fdec9f0f8c5c1dfa3933075fb1dc)
* [OCPCLOUD-3321](https://issues.redhat.com/browse/OCPCLOUD-3321), [OSASINFRA-3980](https://issues.redhat.com/browse/OSASINFRA-3980): Migrate asset generation to ocp-manifests [#386](https://github.com/openshift/cluster-api-provider-openstack/pull/386)
* NO-JIRA: Update DOWNSTREAM_OWNERS [#398](https://github.com/openshift/cluster-api-provider-openstack/pull/398)
* NO-JIRA: Cleanup post-infracluster migration [#397](https://github.com/openshift/cluster-api-provider-openstack/pull/397)
* [OCPBUGS-69731](https://issues.redhat.com/browse/OCPBUGS-69731): Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.22 [#396](https://github.com/openshift/cluster-api-provider-openstack/pull/396)
* NO-JIRA: Sync main with latest upstream (release-0.14) [#395](https://github.com/openshift/cluster-api-provider-openstack/pull/395)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/e1c0f2f9e2e70843d5c42dfe3bddf70530a97b0f...74cb5b085a21fdec9f0f8c5c1dfa3933075fb1dc)
### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/8a8c354b99ce83e3c05a91358aadec09944c2fce)
* [OCPBUGS-77724](https://issues.redhat.com/browse/OCPBUGS-77724): Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.22 [#161](https://github.com/openshift/machine-api-provider-openstack/pull/161)
* [OCPBUGS-76788](https://issues.redhat.com/browse/OCPBUGS-76788): Fix make test [#154](https://github.com/openshift/machine-api-provider-openstack/pull/154)
* [OCPBUGS-70022](https://issues.redhat.com/browse/OCPBUGS-70022): Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.22 [#149](https://github.com/openshift/machine-api-provider-openstack/pull/149)
* [OCPBUGS-67298](https://issues.redhat.com/browse/OCPBUGS-67298): Don't record event for every reconcile [#142](https://github.com/openshift/machine-api-provider-openstack/pull/142)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/b5a300cae8a79a59417c0a24c371af9a8f0258fe...8a8c354b99ce83e3c05a91358aadec09944c2fce)
### [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller/tree/cbea7a9cab145c32e2f347be69996b649893cc22)
* [OCPCLOUD-3321](https://issues.redhat.com/browse/OCPCLOUD-3321), [OSASINFRA-3980](https://issues.redhat.com/browse/OSASINFRA-3980): Update to image-based manifests [#30](https://github.com/openshift/openstack-resource-controller/pull/30)
* NO-JIRA: Update OWNERS_ALIASES [#28](https://github.com/openshift/openstack-resource-controller/pull/28)
* [OCPBUGS-77719](https://issues.redhat.com/browse/OCPBUGS-77719): Updating openstack-resource-controller-container image to be consistent with ART for 4.22 [#26](https://github.com/openshift/openstack-resource-controller/pull/26)
* UPSTREAM-SYNC: Sync main with upstream (release-1.0) [#27](https://github.com/openshift/openstack-resource-controller/pull/27)
* [OCPBUGS-70015](https://issues.redhat.com/browse/OCPBUGS-70015): Updating openstack-resource-controller-container image to be consistent with ART for 4.22 [#25](https://github.com/openshift/openstack-resource-controller/pull/25)
* [Full changelog](https://github.com/openshift/openstack-resource-controller/compare/70f5ad34915041c82ad0a8ed6ea64bd8859d1e72...cbea7a9cab145c32e2f347be69996b649893cc22)
### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/e627823c743797da91b4ae8a318d2420a511b752)
* [OCPBUGS-77984](https://issues.redhat.com/browse/OCPBUGS-77984): test(olm): skip ppc64le/s390x for tests using single-arch images [#1276](https://github.com/openshift/operator-framework-olm/pull/1276)
* NO-ISSUE: Synchronize From Upstream Repositories [#1278](https://github.com/openshift/operator-framework-olm/pull/1278)
* NO-ISSUE: Synchronize From Upstream Repositories [#1277](https://github.com/openshift/operator-framework-olm/pull/1277)
* NO-ISSUE: retry transient registry errors in opm QE [#1272](https://github.com/openshift/operator-framework-olm/pull/1272)
* NO-ISSUE: Synchronize From Upstream Repositories [#1275](https://github.com/openshift/operator-framework-olm/pull/1275)
* NO-ISSUE: Synchronize From Upstream Repositories [#1274](https://github.com/openshift/operator-framework-olm/pull/1274)
* NO-ISSUE: Add pedjak and fgiudici as reviewers [#1271](https://github.com/openshift/operator-framework-olm/pull/1271)
* NO-ISSUE: Synchronize From Upstream Repositories [#1268](https://github.com/openshift/operator-framework-olm/pull/1268)
* : NO-ISSUE: Migrate away from deprecated ioutil [#1160](https://github.com/openshift/operator-framework-olm/pull/1160)
* [OCPBUGS-79397](https://issues.redhat.com/browse/OCPBUGS-79397): Fix SA restore resourceVersion conflict error [#1264](https://github.com/openshift/operator-framework-olm/pull/1264)
* [OCPBUGS-77179](https://issues.redhat.com/browse/OCPBUGS-77179): Synchronize From Upstream Repositories [#1260](https://github.com/openshift/operator-framework-olm/pull/1260)
* NO-ISSUE: remove etcd dependency from failing cases [#1241](https://github.com/openshift/operator-framework-olm/pull/1241)
* [OCPQE-31468](https://issues.redhat.com/browse/OCPQE-31468): verify images command log pollution [#1262](https://github.com/openshift/operator-framework-olm/pull/1262)
* [OCPBUGS-78557](https://issues.redhat.com/browse/OCPBUGS-78557): Re-Apply Fix admin context race condition in parallel tests [#1259](https://github.com/openshift/operator-framework-olm/pull/1259)
* [OPRUN-4415](https://issues.redhat.com/browse/OPRUN-4415): automate OCP-87188: Central TLS Profile Consistency [#1207](https://github.com/openshift/operator-framework-olm/pull/1207)
* [TRT-2580](https://issues.redhat.com/browse/TRT-2580): Revert "OCPBUGS-78557: Fix admin context race condition in parallel tests" [#1258](https://github.com/openshift/operator-framework-olm/pull/1258)
* [OCPQE-31804](https://issues.redhat.com/browse/OCPQE-31804): Fix admin context race condition in parallel tests [#1256](https://github.com/openshift/operator-framework-olm/pull/1256)
* NO-ISSUE: Synchronize From Upstream Repositories [#1255](https://github.com/openshift/operator-framework-olm/pull/1255)
* NO-ISSUE: Synchronize From Upstream Repositories [#1248](https://github.com/openshift/operator-framework-olm/pull/1248)
* [OCPQE-31752](https://issues.redhat.com/browse/OCPQE-31752): enhance qe test cases [#1254](https://github.com/openshift/operator-framework-olm/pull/1254)
* [OCPQE-31756](https://issues.redhat.com/browse/OCPQE-31756): enhance case to make it pass per test bundle change [#1252](https://github.com/openshift/operator-framework-olm/pull/1252)
* [OCPQE-31607](https://issues.redhat.com/browse/OCPQE-31607): update 43101 for FIPS enabled cluster [#1249](https://github.com/openshift/operator-framework-olm/pull/1249)
* [OCPQE-31615](https://issues.redhat.com/browse/OCPQE-31615): fix OCP-33450 for FIPS enabled cluster [#1247](https://github.com/openshift/operator-framework-olm/pull/1247)
* [OCPBUGS-74928](https://issues.redhat.com/browse/OCPBUGS-74928), [OCPBUGS-76460](https://issues.redhat.com/browse/OCPBUGS-76460): Synchronize From Upstream Repositories [#1244](https://github.com/openshift/operator-framework-olm/pull/1244)
* [MON-4513](https://issues.redhat.com/browse/MON-4513), [OCPBUGS-75921](https://issues.redhat.com/browse/OCPBUGS-75921), [OCPBUGS-76460](https://issues.redhat.com/browse/OCPBUGS-76460): Synchronize From Upstream Repositories [#1237](https://github.com/openshift/operator-framework-olm/pull/1237)
* [OCPBUGS-77006](https://issues.redhat.com/browse/OCPBUGS-77006): Remove the collect-profiles info from the microshift kustomization file [#1233](https://github.com/openshift/operator-framework-olm/pull/1233)
* NO-ISSUE: Synchronize From Upstream Repositories [#1228](https://github.com/openshift/operator-framework-olm/pull/1228)
* NO-ISSUE: UPSTREAM:<carry>: automate OCP-40945 [#1209](https://github.com/openshift/operator-framework-olm/pull/1209)
* NO-ISSUE: Synchronize From Upstream Repositories [#1226](https://github.com/openshift/operator-framework-olm/pull/1226)
* [OCPBUGS-76323](https://issues.redhat.com/browse/OCPBUGS-76323): OCPQE-31553:remove qe case of testing collect-profiles [#1221](https://github.com/openshift/operator-framework-olm/pull/1221)
* NO-ISSUE: UPSTREAM: : migrate bandrade test cases to OTE [#1193](https://github.com/openshift/operator-framework-olm/pull/1193)
* [OCPBUGS-31547](https://issues.redhat.com/browse/OCPBUGS-31547): Remove the collect-profiles job [#1215](https://github.com/openshift/operator-framework-olm/pull/1215)
* [OCPBUGS-26404](https://issues.redhat.com/browse/OCPBUGS-26404): Add retry logic for SNO cluster detection in leader election configuration [#1210](https://github.com/openshift/operator-framework-olm/pull/1210)
* [OCPQE-31553](https://issues.redhat.com/browse/OCPQE-31553): continue to adjust case per collect-profiles change [#1218](https://github.com/openshift/operator-framework-olm/pull/1218)
* [OPRUN-4407](https://issues.redhat.com/browse/OPRUN-4407): automate OCP-87276 [#1212](https://github.com/openshift/operator-framework-olm/pull/1212)
* [OCPQE-31558](https://issues.redhat.com/browse/OCPQE-31558), [OCPQE-31559](https://issues.redhat.com/browse/OCPQE-31559): Update QE test cases to align with the removal of the redhat-marketplace catalog [#1217](https://github.com/openshift/operator-framework-olm/pull/1217)
* [OCPQE-31553](https://issues.redhat.com/browse/OCPQE-31553): change to check collect-profile networkpolicy dynamically [#1216](https://github.com/openshift/operator-framework-olm/pull/1216)
* [OCPBUGS-74389](https://issues.redhat.com/browse/OCPBUGS-74389): Synchronize From Upstream Repositories [#1206](https://github.com/openshift/operator-framework-olm/pull/1206)
* [OPRUN-4414](https://issues.redhat.com/browse/OPRUN-4414): Integrate APIServer TLS controller into PSM [#1205](https://github.com/openshift/operator-framework-olm/pull/1205)
* [OPRUN-4415](https://issues.redhat.com/browse/OPRUN-4415): Synchronize From Upstream Repositories [#1202](https://github.com/openshift/operator-framework-olm/pull/1202)
* NO-ISSUE: Synchronize From Upstream Repositories [#1201](https://github.com/openshift/operator-framework-olm/pull/1201)
* [OPRUN-4416](https://issues.redhat.com/browse/OPRUN-4416): Remove kube-rbac-proxy from PSM [#1190](https://github.com/openshift/operator-framework-olm/pull/1190)
* NO-ISSUE: automate ocp-85743 and ocp-85745 [#1197](https://github.com/openshift/operator-framework-olm/pull/1197)
* [OCPQE-31468](https://issues.redhat.com/browse/OCPQE-31468): add missed opm db testdata [#1196](https://github.com/openshift/operator-framework-olm/pull/1196)
* [OCPQE-31468](https://issues.redhat.com/browse/OCPQE-31468): recovery missed qe testdata [#1194](https://github.com/openshift/operator-framework-olm/pull/1194)
* [OCPBUGS-65867](https://issues.redhat.com/browse/OCPBUGS-65867): Synchronize From Upstream Repositories [#1195](https://github.com/openshift/operator-framework-olm/pull/1195)
* NO-ISSUE: Synchronize From Upstream Repositories [#1192](https://github.com/openshift/operator-framework-olm/pull/1192)
* [OCPQE-30680](https://issues.redhat.com/browse/OCPQE-30680): migrate ocp-25674 [#1185](https://github.com/openshift/operator-framework-olm/pull/1185)
* NO-ISSUE: UPSTREAM: <carry>: migrate bandrade test cases to OTE [#1169](https://github.com/openshift/operator-framework-olm/pull/1169)
* [OCPQE-31297](https://issues.redhat.com/browse/OCPQE-31297): enhance ocp and microshift olm case [#1173](https://github.com/openshift/operator-framework-olm/pull/1173)
* NO-ISSUE: Synchronize From Upstream Repositories [#1168](https://github.com/openshift/operator-framework-olm/pull/1168)
* [OCPQE-30680](https://issues.redhat.com/browse/OCPQE-30680): migrate OLMv0 test cases to OTE [#1166](https://github.com/openshift/operator-framework-olm/pull/1166)
* [OPRUN-4351](https://issues.redhat.com/browse/OPRUN-4351): Update Dockerfiles/CI to use golang 1.25/ocp 4.22 [#1178](https://github.com/openshift/operator-framework-olm/pull/1178)
* Updating ose-operator-framework-tools-container image to be consistent with ART for 4.22 [#1174](https://github.com/openshift/operator-framework-olm/pull/1174)
* [OCPBUGS-69774](https://issues.redhat.com/browse/OCPBUGS-69774): Updating operator-registry-container image to be consistent with ART for 4.22 [#1177](https://github.com/openshift/operator-framework-olm/pull/1177)
* [OCPBUGS-69740](https://issues.redhat.com/browse/OCPBUGS-69740): Updating operator-lifecycle-manager-container image to be consistent with ART for 4.22 [#1175](https://github.com/openshift/operator-framework-olm/pull/1175)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/67b24a854479ff5e92f98a928b07683bddfc91b6...e627823c743797da91b4ae8a318d2420a511b752)
### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/38da2ef78cc429f67aea7fb4e589df21ac1ed327)
* NO-ISSUE: Bump github.com/operator-framework/api from 0.41.0 to 0.42.0 [#738](https://github.com/operator-framework/operator-marketplace/pull/738)
* NO-ISSUE: Add fgiudici as reviewer [#739](https://github.com/operator-framework/operator-marketplace/pull/739)
* NO-ISSUE: Bump the k8s-dependencies group with 3 updates [#737](https://github.com/operator-framework/operator-marketplace/pull/737)
* NO-ISSUE: Bump github.com/operator-framework/operator-lifecycle-manager from 0.40.0 to 0.41.0 [#732](https://github.com/operator-framework/operator-marketplace/pull/732)
* [MON-4514](https://issues.redhat.com/browse/MON-4514): Migrate Prometheus targets discovering from Endpoints to EndpointSlices [#725](https://github.com/operator-framework/operator-marketplace/pull/725)
* NO-ISSUE: Bump sigs.k8s.io/controller-runtime from 0.23.1 to 0.23.3 in the k8s-dependencies group [#731](https://github.com/operator-framework/operator-marketplace/pull/731)
* [OCPBUGS-74928](https://issues.redhat.com/browse/OCPBUGS-74928): Bump github.com/operator-framework/api from 0.39.0 to 0.41.0 [#728](https://github.com/operator-framework/operator-marketplace/pull/728)
* NO-ISSUE: Bump the k8s-dependencies group with 3 updates [#726](https://github.com/operator-framework/operator-marketplace/pull/726)
* [OCPBUGS-66980](https://issues.redhat.com/browse/OCPBUGS-66980): Update NetworkPolicy egress to support HyperShift custom API ports [#723](https://github.com/operator-framework/operator-marketplace/pull/723)
* [OPRUN-4458](https://issues.redhat.com/browse/OPRUN-4458): Upgrade Catalog Source Index from 4.21 to 4.22 [#727](https://github.com/operator-framework/operator-marketplace/pull/727)
* [OPRUN-4456](https://issues.redhat.com/browse/OPRUN-4456): chore(deps): upgrade Go module dependencies (edge) [#724](https://github.com/operator-framework/operator-marketplace/pull/724)
* NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.27.5 to 2.28.1 [#720](https://github.com/operator-framework/operator-marketplace/pull/720)
* NO-ISSUE: Bump sigs.k8s.io/controller-runtime from 0.23.0 to 0.23.1 in the k8s-dependencies group [#718](https://github.com/operator-framework/operator-marketplace/pull/718)
* NO-ISSUE: Bump github.com/onsi/gomega from 1.39.0 to 1.39.1 [#719](https://github.com/operator-framework/operator-marketplace/pull/719)
* [OCPBUGS-65581](https://issues.redhat.com/browse/OCPBUGS-65581): marketplace-operator sets Progressing=True during upgrade [#713](https://github.com/operator-framework/operator-marketplace/pull/713)
* [OPRUN-4410](https://issues.redhat.com/browse/OPRUN-4410): Add Openshift TLS Profiles support to marketplace-operator [#715](https://github.com/operator-framework/operator-marketplace/pull/715)
* NO-ISSUE: Bump github.com/operator-framework/api from 0.37.0 to 0.38.0 [#717](https://github.com/operator-framework/operator-marketplace/pull/717)
* [OPRUN-4302](https://issues.redhat.com/browse/OPRUN-4302): Remove marketplace index [#698](https://github.com/operator-framework/operator-marketplace/pull/698)
* [OCPBUGS-74360](https://issues.redhat.com/browse/OCPBUGS-74360): Fix image for the build [#714](https://github.com/operator-framework/operator-marketplace/pull/714)
* NO-ISSUE: Bump sigs.k8s.io/controller-runtime from 0.22.4 to 0.23.0 in the k8s-dependencies group [#711](https://github.com/operator-framework/operator-marketplace/pull/711)
* NO-ISSUE: Bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 [#712](https://github.com/operator-framework/operator-marketplace/pull/712)
* [OCPBUGS-74006](https://issues.redhat.com/browse/OCPBUGS-74006): Updating marketplace-operator-container image to be consistent with ART for 4.22 [#709](https://github.com/operator-framework/operator-marketplace/pull/709)
* NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.27.3 to 2.27.4 [#701](https://github.com/operator-framework/operator-marketplace/pull/701)
* NO-ISSUE: Bump github.com/onsi/gomega from 1.38.3 to 1.39.0 [#702](https://github.com/operator-framework/operator-marketplace/pull/702)
* [OCPBUGS-69441](https://issues.redhat.com/browse/OCPBUGS-69441): Increase default catalog polling interval to 4h (240m) [#695](https://github.com/operator-framework/operator-marketplace/pull/695)
* NO-ISSUE: Bump the k8s-dependencies group with 2 updates [#697](https://github.com/operator-framework/operator-marketplace/pull/697)
* NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.27.2 to 2.27.3 [#691](https://github.com/operator-framework/operator-marketplace/pull/691)
* [OPRUN-4354](https://issues.redhat.com/browse/OPRUN-4354): Update to build containers to golang-1.25 [#696](https://github.com/operator-framework/operator-marketplace/pull/696)
* NO-ISSUE: update ports on deployment manifests, fix spacing [#689](https://github.com/operator-framework/operator-marketplace/pull/689)
* [OCPBUGS-69929](https://issues.redhat.com/browse/OCPBUGS-69929): Updating marketplace-operator-container image to be consistent with ART for 4.22 [#694](https://github.com/operator-framework/operator-marketplace/pull/694)
* NO-ISSUE: Bump github.com/onsi/gomega from 1.38.2 to 1.38.3 [#692](https://github.com/operator-framework/operator-marketplace/pull/692)
* NO-ISSUE: Bump github.com/operator-framework/api from 0.36.0 to 0.37.0 [#693](https://github.com/operator-framework/operator-marketplace/pull/693)
* NO-ISSUE: Bump the k8s-dependencies group with 3 updates [#686](https://github.com/operator-framework/operator-marketplace/pull/686)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/6792bede6c2ed304046c8ef993b4e870378a8be1...38da2ef78cc429f67aea7fb4e589df21ac1ed327)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/14b5022bad5b21334e3ad9d500763474016b2a9c)
* [OCPBUGS-83535](https://issues.redhat.com/browse/OCPBUGS-83535): CARRY: skip ote tests 4.22 [#3139](https://github.com/openshift/ovn-kubernetes/pull/3139)
* NO-JIRA: DownStream Merge [2026-04-09] [#3126](https://github.com/openshift/ovn-kubernetes/pull/3126)
* NO-JIRA: DownStream Merge [04-02-2026] [#3114](https://github.com/openshift/ovn-kubernetes/pull/3114)
* NO-JIRA: Disable informing tests for the time being [#3118](https://github.com/openshift/ovn-kubernetes/pull/3118)
* [OCPBUGS-77510](https://issues.redhat.com/browse/OCPBUGS-77510): DownStream Merge [03-24-2026] [#3084](https://github.com/openshift/ovn-kubernetes/pull/3084)
* [OCPBUGS-77819](https://issues.redhat.com/browse/OCPBUGS-77819): Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.22 [#3036](https://github.com/openshift/ovn-kubernetes/pull/3036)
* [OCPBUGS-77795](https://issues.redhat.com/browse/OCPBUGS-77795): Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.22 [#3039](https://github.com/openshift/ovn-kubernetes/pull/3039)
* NO-JIRA: DownStream Merge [02-27-2026] [#3011](https://github.com/openshift/ovn-kubernetes/pull/3011)
* [OCPBUGS-76500](https://issues.redhat.com/browse/OCPBUGS-76500): Minimize ACLs by combining ipBlocks into single ACL [#2978](https://github.com/openshift/ovn-kubernetes/pull/2978)
* [CORENET-6168](https://issues.redhat.com/browse/CORENET-6168): OTE: u/s tests are Informing by default [#3006](https://github.com/openshift/ovn-kubernetes/pull/3006)
* [OCPBUGS-49368](https://issues.redhat.com/browse/OCPBUGS-49368), [OCPBUGS-62895](https://issues.redhat.com/browse/OCPBUGS-62895), [OCPBUGS-65114](https://issues.redhat.com/browse/OCPBUGS-65114), [OCPBUGS-66267](https://issues.redhat.com/browse/OCPBUGS-66267), [OCPBUGS-70130](https://issues.redhat.com/browse/OCPBUGS-70130), [OCPBUGS-74164](https://issues.redhat.com/browse/OCPBUGS-74164): DownStream Merge [02-12-2026] [#2980](https://github.com/openshift/ovn-kubernetes/pull/2980)
* [CORENET-6840](https://issues.redhat.com/browse/CORENET-6840): OTE: Exclude new BGP and EVPN tests [#2982](https://github.com/openshift/ovn-kubernetes/pull/2982)
* [CORENET-6840](https://issues.redhat.com/browse/CORENET-6840): Exclude NetSeg tests for SingleReplica topology [#2973](https://github.com/openshift/ovn-kubernetes/pull/2973)
* [OCPBUGS-61864](https://issues.redhat.com/browse/OCPBUGS-61864): DownStream Merge [01-27-2026] [#2962](https://github.com/openshift/ovn-kubernetes/pull/2962)
* [CORENET-6168](https://issues.redhat.com/browse/CORENET-6168): skip new NetSeg Localnet test [#2963](https://github.com/openshift/ovn-kubernetes/pull/2963)
* [OCPBUGS-69753](https://issues.redhat.com/browse/OCPBUGS-69753): Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.22 [#2907](https://github.com/openshift/ovn-kubernetes/pull/2907)
* [OCPBUGS-61524](https://issues.redhat.com/browse/OCPBUGS-61524), [OCPBUGS-66994](https://issues.redhat.com/browse/OCPBUGS-66994): DownStream Merge [01-03-2026] [#2917](https://github.com/openshift/ovn-kubernetes/pull/2917)
* [CORENET-6170](https://issues.redhat.com/browse/CORENET-6170): Add OCP tests extension [#2461](https://github.com/openshift/ovn-kubernetes/pull/2461)
* [OCPBUGS-70087](https://issues.redhat.com/browse/OCPBUGS-70087): Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.22 [#2913](https://github.com/openshift/ovn-kubernetes/pull/2913)
* [OCPBUGS-70058](https://issues.redhat.com/browse/OCPBUGS-70058): Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.22 [#2912](https://github.com/openshift/ovn-kubernetes/pull/2912)
* [OCPBUGS-66235](https://issues.redhat.com/browse/OCPBUGS-66235): DownStream Merge [12-19-2025] [#2910](https://github.com/openshift/ovn-kubernetes/pull/2910)
* [CORENET-6356](https://issues.redhat.com/browse/CORENET-6356): Bump OVN to 25.09 and 25.09 for OKD [#2909](https://github.com/openshift/ovn-kubernetes/pull/2909)
* [OCPBUGS-66234](https://issues.redhat.com/browse/OCPBUGS-66234): DownStream Merge [12-04-2025] [#2896](https://github.com/openshift/ovn-kubernetes/pull/2896)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/25a714b82c643bcfdf5543cb467afa32dac06787...14b5022bad5b21334e3ad9d500763474016b2a9c)
### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/c208095b1f3ff79e2d9eed7f8045d330a8e15c08)
* [OCPBUGS-77586](https://issues.redhat.com/browse/OCPBUGS-77586): Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.22 [#115](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/115)
* [MULTIARCH-6015](https://issues.redhat.com/browse/MULTIARCH-6015): Rebase ibm-powervs-block-csi-driver with upstream [#116](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/116)
* [OCPBUGS-77586](https://issues.redhat.com/browse/OCPBUGS-77586): Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.22 [#118](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/118)
* [MULTIARCH-6016](https://issues.redhat.com/browse/MULTIARCH-6016): Upgrade golangci-lint version to support go1.25 [#117](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/117)
* [MULTIARCH-6001](https://issues.redhat.com/browse/MULTIARCH-6001): Rebase ibm-powervs-block-csi-driver with upstream [#114](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/114)
* [MULTIARCH-5838](https://issues.redhat.com/browse/MULTIARCH-5838): Rebase ibm-powervs-block-csi-driver with upstream [#109](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/109)
* [OCPBUGS-69805](https://issues.redhat.com/browse/OCPBUGS-69805): Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.22 [#108](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/108)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/791e12aba9ab7c4fed1e5f9554e5b9ec86342e1a...c208095b1f3ff79e2d9eed7f8045d330a8e15c08)
### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/a56f9e95588f656435e2cc3b256d9782213a7813)
* [STOR-2762](https://issues.redhat.com/browse/STOR-2762): Bump all deps for 4.22 [#104](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/104)
* [OCPBUGS-77622](https://issues.redhat.com/browse/OCPBUGS-77622): Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.22 [#103](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/103)
* [STOR-2809](https://issues.redhat.com/browse/STOR-2809): Central TLS Profile consistency [#97](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/97)
* [STOR-2523](https://issues.redhat.com/browse/STOR-2523): Add desired-version annotation to controller Deployment and use DeploymentVersionController in ibm-powervs-block-csi-driver-operator [#90](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/90)
* No-JIRA: Update owners [#93](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/93)
* [OCPBUGS-69906](https://issues.redhat.com/browse/OCPBUGS-69906): Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.22 [#94](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/94)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/e22228ae9f53298e7520d9ae2b9230b2d5dd4cff...a56f9e95588f656435e2cc3b256d9782213a7813)
### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/766c0952fd19f8225fe59b2be8e8c8932b24ebd7)
* [OCPBUGS-83398](https://issues.redhat.com/browse/OCPBUGS-83398): Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.35 (e48649f) into release-4.22 [#95](https://github.com/openshift/cloud-provider-powervs/pull/95)
* No-Jira: Update go.opentelemetry.io/otel and google.golang.org/grpc [#94](https://github.com/openshift/cloud-provider-powervs/pull/94)
* [OCPBUGS-70048](https://issues.redhat.com/browse/OCPBUGS-70048): Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART for 4.22 [#91](https://github.com/openshift/cloud-provider-powervs/pull/91)
* No-Jira: Bump golang.org/x/crypto to 0.45.0 [#90](https://github.com/openshift/cloud-provider-powervs/pull/90)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/969a04e9dcb4cdde10e3038a9e28d2e27548918d...766c0952fd19f8225fe59b2be8e8c8932b24ebd7)
### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/e88cf81dd9ad174f395b86f9cdc40fa30cb06bf4)
* [OCPCLOUD-3271](https://issues.redhat.com/browse/OCPCLOUD-3271): Update dependencies for OpenShift 4.22 release [#140](https://github.com/openshift/machine-api-provider-powervs/pull/140)
* NO-JIRA: Add damdo to approvers list in OWNERS file [#141](https://github.com/openshift/machine-api-provider-powervs/pull/141)
* [OCPBUGS-77745](https://issues.redhat.com/browse/OCPBUGS-77745): Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.22 [#139](https://github.com/openshift/machine-api-provider-powervs/pull/139)
* [OCPBUGS-70051](https://issues.redhat.com/browse/OCPBUGS-70051): Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.22 [#133](https://github.com/openshift/machine-api-provider-powervs/pull/133)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/551974ef93dedb1b9677a778e1533391448e0c56...e88cf81dd9ad174f395b86f9cdc40fa30cb06bf4)
### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/c4c99a3071808f466ee6c3d7b7fa87108b457feb)
* NO-JIRA: disable automatic coderabbit reviews [#390](https://github.com/openshift/prom-label-proxy/pull/390)
* [OCPBUGS-77739](https://issues.redhat.com/browse/OCPBUGS-77739): Updating prom-label-proxy-container image to be consistent with ART for 4.22 [#389](https://github.com/openshift/prom-label-proxy/pull/389)
* [OCPBUGS-70042](https://issues.redhat.com/browse/OCPBUGS-70042): Updating prom-label-proxy-container image to be consistent with ART for 4.22 [#388](https://github.com/openshift/prom-label-proxy/pull/388)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/610c11b59dd17f1d6dc35b62ca1d0602b5c0f494...c4c99a3071808f466ee6c3d7b7fa87108b457feb)
### [prometheus](https://github.com/openshift/prometheus/tree/e1e355916c789607fe98c8832920e2218de4bad5)
* [OCPBUGS-65568](https://issues.redhat.com/browse/OCPBUGS-65568): chore(kubernetes): deduplicate warning logs from the API [#296](https://github.com/openshift/prometheus/pull/296)
* NO-JIRA: disable automatic coderabbit reviews [#295](https://github.com/openshift/prometheus/pull/295)
* [OCPBUGS-77667](https://issues.redhat.com/browse/OCPBUGS-77667): Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.22 [#294](https://github.com/openshift/prometheus/pull/294)
* NO-JIRA: update rh-manifest.txt [#293](https://github.com/openshift/prometheus/pull/293)
* NO-JIRA: [bot] Bump openshift/prometheus to v3.9.1 [#292](https://github.com/openshift/prometheus/pull/292)
* [OCPBUGS-74015](https://issues.redhat.com/browse/OCPBUGS-74015): Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.22 [#286](https://github.com/openshift/prometheus/pull/286)
* [OCPBUGS-69956](https://issues.redhat.com/browse/OCPBUGS-69956): Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.22 [#284](https://github.com/openshift/prometheus/pull/284)
* [Full changelog](https://github.com/openshift/prometheus/compare/ac9443d270b96912311ede64da160f839278bb65...e1e355916c789607fe98c8832920e2218de4bad5)
### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/02dc3e9e55cf7fa0279e22762d6ace19bbc65fde)
* NO-ISSUE: [bot] Bump openshift/prometheus-alertmanager to v0.31.1 [#127](https://github.com/openshift/prometheus-alertmanager/pull/127)
* [MON-4536](https://issues.redhat.com/browse/MON-4536): Bump alertmanager to v0.31.1 [#118](https://github.com/openshift/prometheus-alertmanager/pull/118)
* NO-JIRA: disable automatic coderabbit reviews [#126](https://github.com/openshift/prometheus-alertmanager/pull/126)
* [OCPBUGS-77708](https://issues.redhat.com/browse/OCPBUGS-77708): Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.22 [#119](https://github.com/openshift/prometheus-alertmanager/pull/119)
* [OCPBUGS-74035](https://issues.redhat.com/browse/OCPBUGS-74035): Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.22 [#112](https://github.com/openshift/prometheus-alertmanager/pull/112)
* [OCPBUGS-69983](https://issues.redhat.com/browse/OCPBUGS-69983): Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.22 [#109](https://github.com/openshift/prometheus-alertmanager/pull/109)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/3dbe0b64ae3b9439b888be65a32431c7bf0d6806...02dc3e9e55cf7fa0279e22762d6ace19bbc65fde)
### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/70e38466b9b9143f48283dab8bd0c227f35efe69)
* NO-ISSUE: [bot] Bump openshift/prometheus-operator to v0.90.1 [#378](https://github.com/openshift/prometheus-operator/pull/378)
* [MON-4542](https://issues.redhat.com/browse/MON-4542): bump v0.90.0 [#377](https://github.com/openshift/prometheus-operator/pull/377)
* NO-JIRA: Update v0.89.0 [#374](https://github.com/openshift/prometheus-operator/pull/374)
* NO-JIRA: disable automatic coderabbit reviews [#375](https://github.com/openshift/prometheus-operator/pull/375)
* [OCPBUGS-77597](https://issues.redhat.com/browse/OCPBUGS-77597): Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.22 [#371](https://github.com/openshift/prometheus-operator/pull/371)
* [OCPBUGS-77753](https://issues.redhat.com/browse/OCPBUGS-77753): Updating prometheus-operator-container image to be consistent with ART for 4.22 [#373](https://github.com/openshift/prometheus-operator/pull/373)
* Updating prometheus-config-reloader-container image to be consistent with ART for 4.22 [#372](https://github.com/openshift/prometheus-operator/pull/372)
* [OCPBUGS-74491](https://issues.redhat.com/browse/OCPBUGS-74491): backport upstream fix to reconcile resources with inconsistent status [#364](https://github.com/openshift/prometheus-operator/pull/364)
* [OCPBUGS-73982](https://issues.redhat.com/browse/OCPBUGS-73982): Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.22 [#355](https://github.com/openshift/prometheus-operator/pull/355)
* [OCPBUGS-67303](https://issues.redhat.com/browse/OCPBUGS-67303): Validate `webhookURL` secret for `MSTeams` receiver in `AlertmanagerConfig` CRD [#358](https://github.com/openshift/prometheus-operator/pull/358)
* [OCPBUGS-70007](https://issues.redhat.com/browse/OCPBUGS-70007): Updating prometheus-config-reloader-container image to be consistent with ART for 4.22 [#352](https://github.com/openshift/prometheus-operator/pull/352)
* [OCPBUGS-70055](https://issues.redhat.com/browse/OCPBUGS-70055): Updating prometheus-operator-container image to be consistent with ART for 4.22 [#353](https://github.com/openshift/prometheus-operator/pull/353)
* [OCPBUGS-69832](https://issues.redhat.com/browse/OCPBUGS-69832): Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.22 [#351](https://github.com/openshift/prometheus-operator/pull/351)
* [OCPBUGS-67215](https://issues.redhat.com/browse/OCPBUGS-67215): [bot] Bump openshift/prometheus-operator to v0.87.1 [#349](https://github.com/openshift/prometheus-operator/pull/349)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/4889ec9a591e78f50916a9ffedf4499c6fc63259...70e38466b9b9143f48283dab8bd0c227f35efe69)
### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/6c4fc0126407c8404b8604faa2f1230f385b9f44)
* NO-JIRA: disable automatic coderabbit reviews [#176](https://github.com/openshift/node_exporter/pull/176)
* [OCPBUGS-77587](https://issues.redhat.com/browse/OCPBUGS-77587): Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.22 [#175](https://github.com/openshift/node_exporter/pull/175)
* [OCPBUGS-69806](https://issues.redhat.com/browse/OCPBUGS-69806): Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.22 [#174](https://github.com/openshift/node_exporter/pull/174)
* [Full changelog](https://github.com/openshift/node_exporter/compare/39d728735779afef886bc10a8bc7cf72f54d51a0...6c4fc0126407c8404b8604faa2f1230f385b9f44)
### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/624742d93f3a7885cf7f70985f1e23ff60da580d)
* [OCPBUGS-20536](https://issues.redhat.com/browse/OCPBUGS-20536): bump library-go version [#70](https://github.com/openshift/route-controller-manager/pull/70)
* [NE-2484](https://issues.redhat.com/browse/NE-2484): bump k8s libraries to v0.35.0 and cr to v0.23.1 [#72](https://github.com/openshift/route-controller-manager/pull/72)
* [OCPBUGS-63449](https://issues.redhat.com/browse/OCPBUGS-63449): filter ingress namespace on UnmanagedRoutes metric [#71](https://github.com/openshift/route-controller-manager/pull/71)
* NO-JIRA: add jcmoraisjr to owners [#69](https://github.com/openshift/route-controller-manager/pull/69)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/8a69194a461dc33d2ed67a220bca91d384d34df4...624742d93f3a7885cf7f70985f1e23ff60da580d)
### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/7b3033bba87d7b40684b66f8f44a3525433d1ac7)
* [OCPBUGS-82110](https://issues.redhat.com/browse/OCPBUGS-82110): fix service-ca-controller CrashLoop on MicroShift [#344](https://github.com/openshift/service-ca-operator/pull/344)
* [CNTRLPLANE-2845](https://issues.redhat.com/browse/CNTRLPLANE-2845): add service-ca operator and workload network policies [#324](https://github.com/openshift/service-ca-operator/pull/324)
* [CNTRLPLANE-2947](https://issues.redhat.com/browse/CNTRLPLANE-2947): Enable configurable PKI for signing CA and serving certificates [#327](https://github.com/openshift/service-ca-operator/pull/327)
* NO-JIRA: migrate from go-bindata to embed [#326](https://github.com/openshift/service-ca-operator/pull/326)
* NO-JIRA: OWNERS: remove vrutkovs and add sanchezl [#318](https://github.com/openshift/service-ca-operator/pull/318)
* NO-JIRA:Update e2e test owners [#339](https://github.com/openshift/service-ca-operator/pull/339)
* NO-JIRA: Add CLAUDE.md [#333](https://github.com/openshift/service-ca-operator/pull/333)
* [CNTRLPLANE-3038](https://issues.redhat.com/browse/CNTRLPLANE-3038): test/e2e: migrate validatingwebhook-ca-bundle-injection to OTE serial suite [#336](https://github.com/openshift/service-ca-operator/pull/336)
* [CNTRLPLANE-3035](https://issues.redhat.com/browse/CNTRLPLANE-3035): test/e2e: migrate mutatingwebhook-ca-bundle-injection to OTE serial suite [#335](https://github.com/openshift/service-ca-operator/pull/335)
* [CNTRLPLANE-3034](https://issues.redhat.com/browse/CNTRLPLANE-3034): test/e2e: migrate crd-ca-bundle-injection to OTE serial suite [#334](https://github.com/openshift/service-ca-operator/pull/334)
* [CNTRLPLANE-3033](https://issues.redhat.com/browse/CNTRLPLANE-3033): test/e2e: migrate apiservice-ca-bundle-injection to OTE serial suite [#332](https://github.com/openshift/service-ca-operator/pull/332)
* [CNTRLPLANE-3015](https://issues.redhat.com/browse/CNTRLPLANE-3015): test/e2e: restore operator config after forced rotation [#331](https://github.com/openshift/service-ca-operator/pull/331)
* [CNTRLPLANE-3009](https://issues.redhat.com/browse/CNTRLPLANE-3009): test/e2e: migrate forced-ca-rotation to OTE serial-disruptive suite [#330](https://github.com/openshift/service-ca-operator/pull/330)
* [CNTRLPLANE-3000](https://issues.redhat.com/browse/CNTRLPLANE-3000): test/e2e: migrate time-based-ca-rotation test for OTE compatibility [#308](https://github.com/openshift/service-ca-operator/pull/308)
* NO-JIRA: bump Go to 1.25 and update dependencies [#328](https://github.com/openshift/service-ca-operator/pull/328)
* [CNTRLPLANE-2549](https://issues.redhat.com/browse/CNTRLPLANE-2549): test/e2e: add control plane stabilization wait after CA rotation [#325](https://github.com/openshift/service-ca-operator/pull/325)
* [CNTRLPLANE-2549](https://issues.redhat.com/browse/CNTRLPLANE-2549): test/e2e: migrate refresh-CA test for OTE compatibility [#306](https://github.com/openshift/service-ca-operator/pull/306)
* [CNTRLPLANE-2547](https://issues.redhat.com/browse/CNTRLPLANE-2547): test/e2e: migrate metrics tests for OTE compatibility [#305](https://github.com/openshift/service-ca-operator/pull/305)
* [CNTRLPLANE-2537](https://issues.redhat.com/browse/CNTRLPLANE-2537): test/e2e: migrate headless-stateful-serving-cert-secret-delete-data test for OTE compatibility [#304](https://github.com/openshift/service-ca-operator/pull/304)
* [CNTRLPLANE-2508](https://issues.redhat.com/browse/CNTRLPLANE-2508): test/e2e: migrate vulnerable-legacy-ca-bundle-injection-configmap test for OTE compatibility [#303](https://github.com/openshift/service-ca-operator/pull/303)
* [CNTRLPLANE-2499](https://issues.redhat.com/browse/CNTRLPLANE-2499): test/e2e: migrate ca-bundle-injection-configmap-update test for OTE compatibility [#302](https://github.com/openshift/service-ca-operator/pull/302)
* [CNTRLPLANE-2498](https://issues.redhat.com/browse/CNTRLPLANE-2498): test/e2e: migrate ca-bundle-injection-configmap test for OTE compatibility [#301](https://github.com/openshift/service-ca-operator/pull/301)
* [CNTRLPLANE-2494](https://issues.redhat.com/browse/CNTRLPLANE-2494): test/e2e: migrate serving-cert-secret-delete-data test for OTE compatibility [#300](https://github.com/openshift/service-ca-operator/pull/300)
* [CNTRLPLANE-2491](https://issues.redhat.com/browse/CNTRLPLANE-2491): test/e2e: migrate serving-cert-secret-add-data test for OTE compatibility [#299](https://github.com/openshift/service-ca-operator/pull/299)
* [CNTRLPLANE-2490](https://issues.redhat.com/browse/CNTRLPLANE-2490): test/e2e: migrate serving-cert-secret-modify-bad-tlsCert test for OTE compatibility [#298](https://github.com/openshift/service-ca-operator/pull/298)
* [CNTRLPLANE-2161](https://issues.redhat.com/browse/CNTRLPLANE-2161): test/e2e: migrate serving-cert-annotation test for OTE compatibility [#297](https://github.com/openshift/service-ca-operator/pull/297)
* [OCPBUGS-69911](https://issues.redhat.com/browse/OCPBUGS-69911): Updating ose-service-ca-operator-container image to be consistent with ART for 4.22 [#296](https://github.com/openshift/service-ca-operator/pull/296)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/6fce3653673ecbe49393bcf66cfbec783c787b3c...7b3033bba87d7b40684b66f8f44a3525433d1ac7)
### [stream-coreos, stream-coreos-extensions](https://github.com/openshift/os/tree/f41264dc5f1c1f0a389787ecc5aaec573d485b8e)
* NO-JIRA: Revert "OCPBUGS-77244: 9.8: override runc package to pull in newer fixes" [#1925](https://github.com/openshift/os/pull/1925)
* [OCPBUGS-64841](https://issues.redhat.com/browse/OCPBUGS-64841): post-process: Remove workaround for openvswitch additional group [#1918](https://github.com/openshift/os/pull/1918)
* [OCPBUGS-77244](https://issues.redhat.com/browse/OCPBUGS-77244): 9.8: override runc package to pull in newer fixes [#1923](https://github.com/openshift/os/pull/1923)
* NO-JIRA: extensions: Add rhel-9.8-server-ose-4.22 [#1910](https://github.com/openshift/os/pull/1910)
* NO-JIRA: tests: add openshift tag [#1906](https://github.com/openshift/os/pull/1906)
* [COS-3912](https://issues.redhat.com/browse/COS-3912): denylist: drop rhcos.network.init-interfaces-test [#1900](https://github.com/openshift/os/pull/1900)
* NO-JIRA: OWNERS: Add angelcerveraroldan [#1883](https://github.com/openshift/os/pull/1883)
* NO-JIRA: Rename extensions/Dockerfile to Containerfile [#1896](https://github.com/openshift/os/pull/1896)
* NO-JIRA: packages-openshift: Fix repo versions [#1895](https://github.com/openshift/os/pull/1895)
* NO-JIRA: extensions: add a label for extensions image discovery [#1894](https://github.com/openshift/os/pull/1894)
* [COS-3900](https://issues.redhat.com/browse/COS-3900): Start using rhel-10.2 [#1892](https://github.com/openshift/os/pull/1892)
* NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches [#1891](https://github.com/openshift/os/pull/1891)
* No-JIRA: move the OKD SIG repo to 4.22 [#1890](https://github.com/openshift/os/pull/1890)
* NO-JIRA: OWNERS: add user `Rolv-Apneseth` [#1882](https://github.com/openshift/os/pull/1882)
* NO-JIRA: Update to track 4.22 and rhel-9.8 [#1881](https://github.com/openshift/os/pull/1881)
* NO-JIRA: rhel-10.1: enable rhel-10.1-fast-datapath [#1885](https://github.com/openshift/os/pull/1885)
* NO-JIRA: packages-openshift: enable rhel-10.1-fast-datapath [#1884](https://github.com/openshift/os/pull/1884)
* [OCPNODE-4010](https://issues.redhat.com/browse/OCPNODE-4010): package: add ose-crio-credential-provider [#1879](https://github.com/openshift/os/pull/1879)
* [OCPBUGS-70162](https://issues.redhat.com/browse/OCPBUGS-70162): extensions/rhel-10.1: Re-enable ipsec [#1878](https://github.com/openshift/os/pull/1878)
* NO-JIRA: drop use of rhel-9.6-appstream-containernetworking repo [#1877](https://github.com/openshift/os/pull/1877)
* And 3 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/os/compare/f067e01e102f8d8ca2759ac00dea6ae4a7f67a95...f41264dc5f1c1f0a389787ecc5aaec573d485b8e)
### [telemeter](https://github.com/openshift/telemeter/tree/d6c7dd499f7106df78aa8bfd9dee332121ab2f09)
* [SREP-3493](https://issues.redhat.com/browse/SREP-3493): update cluster:usage:workload:capacity_physical_instance_hours [#581](https://github.com/openshift/telemeter/pull/581)
* Updating telemeter-container image to be consistent with ART for 4.22 [#580](https://github.com/openshift/telemeter/pull/580)
* [SREP-3493](https://issues.redhat.com/browse/SREP-3493): deduplicate cluster:usage:control_plane:instance_hours output series [#579](https://github.com/openshift/telemeter/pull/579)
* [SREP-3493](https://issues.redhat.com/browse/SREP-3493): add `cluster:usage:control_plane:instance_hours` [#578](https://github.com/openshift/telemeter/pull/578)
* [SREP-3493](https://issues.redhat.com/browse/SREP-3493): ROSA HCP billing for control planes [#577](https://github.com/openshift/telemeter/pull/577)
* [OCPBUGS-73928](https://issues.redhat.com/browse/OCPBUGS-73928): Updating telemeter-container image to be consistent with ART for 4.22 [#575](https://github.com/openshift/telemeter/pull/575)
* NO-ISSUE: switch http_request_size_bytes to histogram [#574](https://github.com/openshift/telemeter/pull/574)
* NO-ISSUE: support native histograms [#573](https://github.com/openshift/telemeter/pull/573)
* NO-ISSUE: update github.com/prometheus/client_golang [#572](https://github.com/openshift/telemeter/pull/572)
* [OCPBUGS-69697](https://issues.redhat.com/browse/OCPBUGS-69697): Updating telemeter-container image to be consistent with ART for 4.22 [#571](https://github.com/openshift/telemeter/pull/571)
* [Full changelog](https://github.com/openshift/telemeter/compare/a54acdfeb2d62c79516d099e37f3319205c903a7...d6c7dd499f7106df78aa8bfd9dee332121ab2f09)
### [tests](https://github.com/openshift/origin/tree/1a93dad027b5135d67388b359c2b12d87beae0b0)
* [OCPBUGS-78997](https://issues.redhat.com/browse/OCPBUGS-78997): Revert "NO-ISSUE: test/e2e/upgrade: Raise default update-ack timeout to 10m" [#30919](https://github.com/openshift/origin/pull/30919)
* [OCPBUGS-82557](https://issues.redhat.com/browse/OCPBUGS-82557): DCM tests need to be backward compatible [#30999](https://github.com/openshift/origin/pull/30999)
* [OCPBUGS-77948](https://issues.redhat.com/browse/OCPBUGS-77948), [OCPBUGS-77949](https://issues.redhat.com/browse/OCPBUGS-77949), [OCPBUGS-78298](https://issues.redhat.com/browse/OCPBUGS-78298), [OCPEDGE-2443](https://issues.redhat.com/browse/OCPEDGE-2443): TNF node replacement test updates [#30846](https://github.com/openshift/origin/pull/30846)
* NO-JIRA: Update OWNERS [#30996](https://github.com/openshift/origin/pull/30996)
* [OCPBUGS-82046](https://issues.redhat.com/browse/OCPBUGS-82046): Revert "remove some duplicate ovnk test cases" [#30975](https://github.com/openshift/origin/pull/30975)
* [OCPBUGS-78090](https://issues.redhat.com/browse/OCPBUGS-78090): Avoid copy of the oc binary, to support heterogeneous environments [#30992](https://github.com/openshift/origin/pull/30992)
* [OCPBUGS-81340](https://issues.redhat.com/browse/OCPBUGS-81340): fix pacemaker CronJob duplicate-event namespace [#30985](https://github.com/openshift/origin/pull/30985)
* [OCPEDGE-2491](https://issues.redhat.com/browse/OCPEDGE-2491): Log pcs status and etcd member list after every recovery [#30949](https://github.com/openshift/origin/pull/30949)
* [NE-2561](https://issues.redhat.com/browse/NE-2561): Add Gateway API OLM to NO-OLM migration upgrade test [#30897](https://github.com/openshift/origin/pull/30897)
* [OCPBUGS-81716](https://issues.redhat.com/browse/OCPBUGS-81716): Add retry logic for transient network errors in restartKubeletOnNode [#30966](https://github.com/openshift/origin/pull/30966)
* [CORENET-6168](https://issues.redhat.com/browse/CORENET-6168): Add ovn tests extension [#30560](https://github.com/openshift/origin/pull/30560)
* [OCPBUGS-81640](https://issues.redhat.com/browse/OCPBUGS-81640): test/ccm: upgrade ccm healthz test to use aws sdk v2 [#30954](https://github.com/openshift/origin/pull/30954)
* [TRT-2084](https://issues.redhat.com/browse/TRT-2084): terminationmessagepolicy: relax for 5.0 [#30979](https://github.com/openshift/origin/pull/30979)
* [OCPBUGS-81340](https://issues.redhat.com/browse/OCPBUGS-81340): openshift-tests: allow duplicate pacemaker status collector CronJob events [#30953](https://github.com/openshift/origin/pull/30953)
* [OCPBUGS-81737](https://issues.redhat.com/browse/OCPBUGS-81737): Dynamically find worker-generated-kubelet MC name to support different platforms [#30967](https://github.com/openshift/origin/pull/30967)
* [OCPBUGS-81742](https://issues.redhat.com/browse/OCPBUGS-81742): Add exception for the newly added kas-bootstrap-container [#30963](https://github.com/openshift/origin/pull/30963)
* [OCPNODE-4224](https://issues.redhat.com/browse/OCPNODE-4224): Migrating test case OCP-70987 from OTP to origin [#30948](https://github.com/openshift/origin/pull/30948)
* [OCPBUGS-82039](https://issues.redhat.com/browse/OCPBUGS-82039): Fix DCM ingress tests to support IPv6-only clusters [#30972](https://github.com/openshift/origin/pull/30972)
* [OCPBUGS-81685](https://issues.redhat.com/browse/OCPBUGS-81685): OVNK BGP: fix curl arguments not properly tokenized [#30961](https://github.com/openshift/origin/pull/30961)
* [OCPBUGS-81751](https://issues.redhat.com/browse/OCPBUGS-81751): Fix GatewayClass update conflict in markTestDone [#30964](https://github.com/openshift/origin/pull/30964)
* NO-JIRA: Ignore extra fields [#30939](https://github.com/openshift/origin/pull/30939)
* NO-JIRA: fix CUDN status condition tests for new TransportAccepted condition [#30958](https://github.com/openshift/origin/pull/30958)
* [NE-2529](https://issues.redhat.com/browse/NE-2529): add new dcm e2e tests [#30926](https://github.com/openshift/origin/pull/30926)
* [OCPBUGS-81629](https://issues.redhat.com/browse/OCPBUGS-81629): Skip NoRegistryClusterInstall feature tests if InternalReleaseImage resource was not present [#30955](https://github.com/openshift/origin/pull/30955)
* NO-JIRA: feat: update etcd/certrotation suite to disruptive [#30947](https://github.com/openshift/origin/pull/30947)
* [OCPCLOUD-3215](https://issues.redhat.com/browse/OCPCLOUD-3215): test/ccm: add support for verifying NLB health check configuration [#30952](https://github.com/openshift/origin/pull/30952)
* [NE-2520](https://issues.redhat.com/browse/NE-2520): Enable Gateway API tests on vSphere and baremetal [#30946](https://github.com/openshift/origin/pull/30946)
* [SPLAT-2672](https://issues.redhat.com/browse/SPLAT-2672): e2e/ote/ccm-aws: moving binary to cccmo [#30864](https://github.com/openshift/origin/pull/30864)
* [OCPNODE-3725](https://issues.redhat.com/browse/OCPNODE-3725): Add System compressible test [#30935](https://github.com/openshift/origin/pull/30935)
* [OCPCLOUD-3215](https://issues.redhat.com/browse/OCPCLOUD-3215): Detect IPv6 clusters and apply correct policy [#30938](https://github.com/openshift/origin/pull/30938)
* [OCPNODE-4179](https://issues.redhat.com/browse/OCPNODE-4179): Migrating test case OCP-80983 from openshift-tests-private to origin [#30899](https://github.com/openshift/origin/pull/30899)
* [OCPSTRAT-886](https://issues.redhat.com/browse/OCPSTRAT-886): Support dual-stack LB in service disruption monitor [#30936](https://github.com/openshift/origin/pull/30936)
* [OCPBUGS-78978](https://issues.redhat.com/browse/OCPBUGS-78978): Workaround packet sniffer timeouts in BGP tests [#30912](https://github.com/openshift/origin/pull/30912)
* [OTA-1813](https://issues.redhat.com/browse/OTA-1813): Allow for alerts to fire from an e2e test [#30929](https://github.com/openshift/origin/pull/30929)
* [AGENT-1428](https://issues.redhat.com/browse/AGENT-1428): Add e2e extended tests for NoRegistryClusterInstall [#30941](https://github.com/openshift/origin/pull/30941)
* [SPLAT-2627](https://issues.redhat.com/browse/SPLAT-2627): Added MAPA OTE entry [#30808](https://github.com/openshift/origin/pull/30808)
* [OCPSTRAT-2728](https://issues.redhat.com/browse/OCPSTRAT-2728): Rebase 1.35 [#30866](https://github.com/openshift/origin/pull/30866)
* [OCPNODE-4043](https://issues.redhat.com/browse/OCPNODE-4043): Add DRA e2e tests to run on NVIDIA GPU [#30758](https://github.com/openshift/origin/pull/30758)
* [NE-2422](https://issues.redhat.com/browse/NE-2422): Skip Gateway API tests on dual-stack clusters [#30942](https://github.com/openshift/origin/pull/30942)
* [NE-2131](https://issues.redhat.com/browse/NE-2131): register CIO tests extension and remove tests migrated to CIO [#30911](https://github.com/openshift/origin/pull/30911)
* [MCO-2171](https://issues.redhat.com/browse/MCO-2171): remove MCO bootimage tests from origin [#30933](https://github.com/openshift/origin/pull/30933)
* [OCPBUGS-78617](https://issues.redhat.com/browse/OCPBUGS-78617): Fix PinnedImages test should respect node taints [#30913](https://github.com/openshift/origin/pull/30913)
* NO-ISSUE: Make MCN degrade test stable across TechPreview and non-TechPreview [#30943](https://github.com/openshift/origin/pull/30943)
* [TRT-2573](https://issues.redhat.com/browse/TRT-2573): Show non-blocking failure message in JUnit failure output [#30921](https://github.com/openshift/origin/pull/30921)
* [NE-2422](https://issues.redhat.com/browse/NE-2422): Add dual-stack ingress e2e tests for AWSDualStackInstall featuregate [#30904](https://github.com/openshift/origin/pull/30904)
* [OCPNODE-4031](https://issues.redhat.com/browse/OCPNODE-4031): Add criocredentialprovider tests [#30821](https://github.com/openshift/origin/pull/30821)
* [OCPNODE-3720](https://issues.redhat.com/browse/OCPNODE-3720): Test for AutoNodeSizing [#30789](https://github.com/openshift/origin/pull/30789)
* [NE-2422](https://issues.redhat.com/browse/NE-2422): Fix router e2e tests for dual-stack AWS clusters [#30934](https://github.com/openshift/origin/pull/30934)
* [STOR-2505](https://issues.redhat.com/browse/STOR-2505): Add storage binaries check [#30698](https://github.com/openshift/origin/pull/30698)
* [OCPBUGS-78940](https://issues.redhat.com/browse/OCPBUGS-78940): Treat groups as existent if they were found but discovery is stale [#30923](https://github.com/openshift/origin/pull/30923)
* NO-JIRA: Reverting case OOM score adjustment [#30932](https://github.com/openshift/origin/pull/30932)
* [OCPEDGE-2447](https://issues.redhat.com/browse/OCPEDGE-2447): IsMicroShiftCluster: return error instead of calling Skip from container node [#30914](https://github.com/openshift/origin/pull/30914)
* [NE-2501](https://issues.redhat.com/browse/NE-2501): Allow prometheus test pods to access Ingress Operator metrics port [#30928](https://github.com/openshift/origin/pull/30928)
* NO-JIRA: remove extra character [#30920](https://github.com/openshift/origin/pull/30920)
* [OCPEDGE-2447](https://issues.redhat.com/browse/OCPEDGE-2447): increase precondition cluster health timeout to 10m [#30893](https://github.com/openshift/origin/pull/30893)
* [OCPNODE-3751](https://issues.redhat.com/browse/OCPNODE-3751): Add automated tests for kubelet LimitedSwap drop-in configuration for CNV [#30795](https://github.com/openshift/origin/pull/30795)
* [MCO-2155](https://issues.redhat.com/browse/MCO-2155): add osstream exclusion for mco bootimage tests [#30918](https://github.com/openshift/origin/pull/30918)
* [TRT-2539](https://issues.redhat.com/browse/TRT-2539): Fix output capture in ginkgo RunSpec to capture stdout/stderr [#30769](https://github.com/openshift/origin/pull/30769)
* [NE-2498](https://issues.redhat.com/browse/NE-2498): add new DCM e2e tests [#30741](https://github.com/openshift/origin/pull/30741)
* NO-ISSUE: test/e2e/upgrade: Raise default update-ack timeout to 10m [#30917](https://github.com/openshift/origin/pull/30917)
* [TRT-2506](https://issues.redhat.com/browse/TRT-2506): Add OS version info to ClusterData [#30827](https://github.com/openshift/origin/pull/30827)
* [NE-2292](https://issues.redhat.com/browse/NE-2292): Tests for gatewayAPIWithoutOLM featuregate graduation [#30905](https://github.com/openshift/origin/pull/30905)
* [OCPEDGE-2381](https://issues.redhat.com/browse/OCPEDGE-2381): Verify etc pod should start with oom_score_adj as system-node-critical [#30867](https://github.com/openshift/origin/pull/30867)
* NO-JIRA: remove test exception for Insights operator [#30849](https://github.com/openshift/origin/pull/30849)
* [NE-2292](https://issues.redhat.com/browse/NE-2292): Skip OLM tests when GatewayAPIWithoutOLM enabled [#30896](https://github.com/openshift/origin/pull/30896)
* NO-JIRA: Remove TNF node replacement test [#30901](https://github.com/openshift/origin/pull/30901)
* [OCPBUGS-78384](https://issues.redhat.com/browse/OCPBUGS-78384): changed http to https for three places to reduce test false positives and false negatives [#30872](https://github.com/openshift/origin/pull/30872)
* [CNTRLPLANE-2999](https://issues.redhat.com/browse/CNTRLPLANE-2999): Revert PR #30746: TLS 1.3 test causing instability in 4.22 [#30895](https://github.com/openshift/origin/pull/30895)
* NO-JIRA: Add a singleton instance for list of nodes [#30830](https://github.com/openshift/origin/pull/30830)
* [OCPNODE-3932](https://issues.redhat.com/browse/OCPNODE-3932): Add automated tests for non-CNV swap configuration [#30807](https://github.com/openshift/origin/pull/30807)
* [OCPBUGS-78016](https://issues.redhat.com/browse/OCPBUGS-78016): Fix double counting of pod restart events [#30862](https://github.com/openshift/origin/pull/30862)
* [CNTRLPLANE-2449](https://issues.redhat.com/browse/CNTRLPLANE-2449): test(sig-builds][Feature:Builds]): ignore watchapi.Bookmark as they are synthetic and used only for signaling sync completion [#30885](https://github.com/openshift/origin/pull/30885)
* [OCPBUGS-77281](https://issues.redhat.com/browse/OCPBUGS-77281): Add exception for GCE CSI driver images [#30870](https://github.com/openshift/origin/pull/30870)
* [OCPBUGS-77002](https://issues.redhat.com/browse/OCPBUGS-77002): Remove temporarily skip of MCO tests creating custom MCPs in RHEL10 suites [#30845](https://github.com/openshift/origin/pull/30845)
* [CNTRLPLANE-2549](https://issues.redhat.com/browse/CNTRLPLANE-2549): monitortests: treat Thanos collection failure as flake in disruptive suites [#30877](https://github.com/openshift/origin/pull/30877)
* [OCPBUGS-76334](https://issues.redhat.com/browse/OCPBUGS-76334): Add TLS 1.3 (Modern profile) support to TestTLSDefaults [#30746](https://github.com/openshift/origin/pull/30746)
* [OCPNODE-4093](https://issues.redhat.com/browse/OCPNODE-4093): Update readme to include long running test information [#30791](https://github.com/openshift/origin/pull/30791)
* [OCPBUGS-48186](https://issues.redhat.com/browse/OCPBUGS-48186): Add kubelet and CRI-O panic detection invariant test [#30243](https://github.com/openshift/origin/pull/30243)
* [OCPBUGS-38666](https://issues.redhat.com/browse/OCPBUGS-38666), [OCPBUGS-38750](https://issues.redhat.com/browse/OCPBUGS-38750), [OCPBUGS-62623](https://issues.redhat.com/browse/OCPBUGS-62623): Remove DNS test exceptions [#30865](https://github.com/openshift/origin/pull/30865)
* [OCPBUGS-77991](https://issues.redhat.com/browse/OCPBUGS-77991): suppress podman build - URLs [#30851](https://github.com/openshift/origin/pull/30851)
* [SPLAT-2672](https://issues.redhat.com/browse/SPLAT-2672): ote/ccm-aws removing binary while migrating to CCCMO [#30869](https://github.com/openshift/origin/pull/30869)
* [OCPBUGS-8933](https://issues.redhat.com/browse/OCPBUGS-8933): run resource request/limit check early [#30874](https://github.com/openshift/origin/pull/30874)
* [TRT-2295](https://issues.redhat.com/browse/TRT-2295): admit and extract non-payload OTE binaries [#30863](https://github.com/openshift/origin/pull/30863)
* [CORENET-6462](https://issues.redhat.com/browse/CORENET-6462): Remove exceptions for network operator [#30842](https://github.com/openshift/origin/pull/30842)
* [OCPEDGE-1036](https://issues.redhat.com/browse/OCPEDGE-1036): fix: latency tuning for the rt-kernel tests on AWS metal [#30790](https://github.com/openshift/origin/pull/30790)
* [OCPBUGS-78191](https://issues.redhat.com/browse/OCPBUGS-78191): Exclude disruption during NoExecuteTaintManager serial tests [#30855](https://github.com/openshift/origin/pull/30855)
* [TRT-2506](https://issues.redhat.com/browse/TRT-2506): Add OS version validation to prow job name test [#30826](https://github.com/openshift/origin/pull/30826)
* [OCPBUGS-66419](https://issues.redhat.com/browse/OCPBUGS-66419): fix: handing static pods not appearing on SNO+RT metal lanes [#30608](https://github.com/openshift/origin/pull/30608)
* NO-JIRA: Add condition for rejecting connection [#30835](https://github.com/openshift/origin/pull/30835)
* [OCPBUGS-77839](https://issues.redhat.com/browse/OCPBUGS-77839): Remove 'AppliedFilesAndOS' reference in MachineConfigNode's node degrade test [#30841](https://github.com/openshift/origin/pull/30841)
* NO-ISSUE: Automated - Update synthetic test data [#30844](https://github.com/openshift/origin/pull/30844)
* [OCPBUGS-77807](https://issues.redhat.com/browse/OCPBUGS-77807): Updating openshift-enterprise-tests-container image to be consistent with ART for 4.22 [#30834](https://github.com/openshift/origin/pull/30834)
* [OCPBUGS-77014](https://issues.redhat.com/browse/OCPBUGS-77014): Add Azure OS disk metrics to cloud monitor tests [#30840](https://github.com/openshift/origin/pull/30840)
* [CNTRLPLANE-2202](https://issues.redhat.com/browse/CNTRLPLANE-2202): Check for debug pod (regardless of ns) in default service account monitor test [#30815](https://github.com/openshift/origin/pull/30815)
* [CORENET-6169](https://issues.redhat.com/browse/CORENET-6169), [CORENET-6864](https://issues.redhat.com/browse/CORENET-6864): remove some duplicate ovnk test cases [#30820](https://github.com/openshift/origin/pull/30820)
* [OCPBUGS-77736](https://issues.redhat.com/browse/OCPBUGS-77736): add the missing namespace from managed openshift [#30828](https://github.com/openshift/origin/pull/30828)
* NO-JIRA: upkeep: remove dualreplica recert [#30831](https://github.com/openshift/origin/pull/30831)
* [OCPBUGS-76943](https://issues.redhat.com/browse/OCPBUGS-76943): Fix dualstack BMC secret and BMH lookup using short name extraction [#30788](https://github.com/openshift/origin/pull/30788)
* [TRT-2372](https://issues.redhat.com/browse/TRT-2372): document the manifest-list verification in the images command [#30818](https://github.com/openshift/origin/pull/30818)
* NO-JIRA: add NI&D team members [#30816](https://github.com/openshift/origin/pull/30816)
* NO-ISSUE: Automated - Update synthetic test data [#30803](https://github.com/openshift/origin/pull/30803)
* [TRT-2563](https://issues.redhat.com/browse/TRT-2563): Revert #30647 "STOR-2560: Add testcase for readonlyrootfilesystem" [#30819](https://github.com/openshift/origin/pull/30819)
* [OCPBUGS-77085](https://issues.redhat.com/browse/OCPBUGS-77085): Use multi-architecture zstd-chunked image [#30805](https://github.com/openshift/origin/pull/30805)
* [TRT-2545](https://issues.redhat.com/browse/TRT-2545): Extend known image checker to cover openshift-must-gather-* namespaces [#30777](https://github.com/openshift/origin/pull/30777)
* [STOR-2560](https://issues.redhat.com/browse/STOR-2560): Add testcase for readonlyrootfilesystem [#30647](https://github.com/openshift/origin/pull/30647)
* [OCPBUGS-65623](https://issues.redhat.com/browse/OCPBUGS-65623): Remove exception for monitoring OLM Progression condition [#30754](https://github.com/openshift/origin/pull/30754)
* [STOR-2857](https://issues.redhat.com/browse/STOR-2857): Enable MutableCSINodeAllocatableCount tests for all clusters [#30767](https://github.com/openshift/origin/pull/30767)
* [CCO-690](https://issues.redhat.com/browse/CCO-690): Register cloud-credential-operator tests extension [#29984](https://github.com/openshift/origin/pull/29984)
* [NE-906](https://issues.redhat.com/browse/NE-906): fix DCM tests [#30734](https://github.com/openshift/origin/pull/30734)
* NO-JIRA: Exclude KubeJobFailed for periodic-gathering jobs in openshift-insights [#30810](https://github.com/openshift/origin/pull/30810)
* NO-JIRA: refactor(tnf): separate precondition timeouts from recovery cluster health [#30812](https://github.com/openshift/origin/pull/30812)
* NO-JIRA: Fix PodSecurityViolation in set-liveness-probe cmd test [#30809](https://github.com/openshift/origin/pull/30809)
* [OCPNODE-4092](https://issues.redhat.com/browse/OCPNODE-4092): add the whole team as reviewers for node tests [#30756](https://github.com/openshift/origin/pull/30756)
* [CNTRLPLANE-2202](https://issues.redhat.com/browse/CNTRLPLANE-2202): add new exceptions + fail if uncaught default sa usage is detected [#30685](https://github.com/openshift/origin/pull/30685)
* NO-JIRA: Fix lack of human readable timestamps in two tests output [#30796](https://github.com/openshift/origin/pull/30796)
* NO-JIRA: update cluster-autoscaler component [#30527](https://github.com/openshift/origin/pull/30527)
* [OCPBUGS-77010](https://issues.redhat.com/browse/OCPBUGS-77010): [TNF] fix network disruption on ipv6 [#30798](https://github.com/openshift/origin/pull/30798)
* [TRT-2372](https://issues.redhat.com/browse/TRT-2372): `filter-by-os` is ignored when the image isn't a manifest-list; leading to false positives in the check [#30806](https://github.com/openshift/origin/pull/30806)
* [NE-1476](https://issues.redhat.com/browse/NE-1476): Allow test pods to access DNS metrics ports [#30753](https://github.com/openshift/origin/pull/30753)
* NO-JIRA: Batch etcdlog intervals to prevent hundreds of thousands slamming browser charts [#30763](https://github.com/openshift/origin/pull/30763)
* [TRT-2471](https://issues.redhat.com/browse/TRT-2471): Create massive test failure junit [#30797](https://github.com/openshift/origin/pull/30797)
* Revert " OCPNODE-3932: Add automated tests for non-CNV swap configuration" [#30804](https://github.com/openshift/origin/pull/30804)
* [TRT-2372](https://issues.redhat.com/browse/TRT-2372): check that each of the required architectures is available for each image in the `images` command [#30799](https://github.com/openshift/origin/pull/30799)
* [OCPBUGS-74151](https://issues.redhat.com/browse/OCPBUGS-74151): Add test for CPMS OnDelete strategy with full master replacement [#30760](https://github.com/openshift/origin/pull/30760)
* [OCPNODE-3932](https://issues.redhat.com/browse/OCPNODE-3932): Add automated tests for non-CNV swap configuration [#30794](https://github.com/openshift/origin/pull/30794)
* [OCPBUGS-76551](https://issues.redhat.com/browse/OCPBUGS-76551): Temporarily skip MCO tests creating custom MCPS with RHEL10 machines [#30793](https://github.com/openshift/origin/pull/30793)
* NO-JIRA:fixing CNV's must-gather image ci failure [#30784](https://github.com/openshift/origin/pull/30784)
* NO-ISSUE: Automated - Update synthetic test data [#30781](https://github.com/openshift/origin/pull/30781)
* NO-JIRA: Remove RouteAdvertisements feature gate check [#30787](https://github.com/openshift/origin/pull/30787)
* [OCPNODE-4093](https://issues.redhat.com/browse/OCPNODE-4093): Readme updates for Node tests [#30773](https://github.com/openshift/origin/pull/30773)
* NO-JIRA: Simplify zstd:chunked image test to use prebuilt image. [#30739](https://github.com/openshift/origin/pull/30739)
* [OCPBUGS-60853](https://issues.redhat.com/browse/OCPBUGS-60853): cert tests: mark TLS registry test as informing [#30585](https://github.com/openshift/origin/pull/30585)
* [TRT-2545](https://issues.redhat.com/browse/TRT-2545): Allow pathological Failed/ImagePullBackOff events in must-gather name [#30776](https://github.com/openshift/origin/pull/30776)
* [OCPBUGS-76327](https://issues.redhat.com/browse/OCPBUGS-76327): Fix flakiness in MutableCSINodeAllocatableCount test [#30766](https://github.com/openshift/origin/pull/30766)
* NO-JIRA: ote: fix duplicated topology label on SingleReplica [#30759](https://github.com/openshift/origin/pull/30759)
* NO-ISSUE: Automated - Update synthetic test data [#30694](https://github.com/openshift/origin/pull/30694)
* NO-JIRA: Ignore state transitions on upgrade failures and SNO [#30762](https://github.com/openshift/origin/pull/30762)
* [SPLAT-2337](https://issues.redhat.com/browse/SPLAT-2337): CCM-AWS OTE binary and skips [#30747](https://github.com/openshift/origin/pull/30747)
* NO-JIRA: Fix discrepancies in use of failure message vs output [#30752](https://github.com/openshift/origin/pull/30752)
* [OCPEDGE-2166](https://issues.redhat.com/browse/OCPEDGE-2166): test(two-node): stablize tnf recovery suite [#30716](https://github.com/openshift/origin/pull/30716)
* NO-JIRA: Fix OKD featureset test as it should only run if the current featureset is Default [#30757](https://github.com/openshift/origin/pull/30757)
* [OCPBUGS-74917](https://issues.redhat.com/browse/OCPBUGS-74917), [TRT-2504](https://issues.redhat.com/browse/TRT-2504): Claude command to manage watch request limits, split test by operator/component [#30750](https://github.com/openshift/origin/pull/30750)
* [TRT-2540](https://issues.redhat.com/browse/TRT-2540): Revert #30657 "OCPNODE-3944: Create e2e automation in origin for case OCP-84149" [#30761](https://github.com/openshift/origin/pull/30761)
* [CNTRLPLANE-2196](https://issues.redhat.com/browse/CNTRLPLANE-2196): reg ote bin for cluster auth operator [#30735](https://github.com/openshift/origin/pull/30735)
* NO-JIRA: upkeep: add collection of errors for crio tests [#30743](https://github.com/openshift/origin/pull/30743)
* [OCPEDGE-1484](https://issues.redhat.com/browse/OCPEDGE-1484): [TNF] kubelet disruption test [#30290](https://github.com/openshift/origin/pull/30290)
* [OKD-259](https://issues.redhat.com/browse/OKD-259): Test OKD Feature set Against OKD and OCP clusters [#30693](https://github.com/openshift/origin/pull/30693)
* [OCPNODE-3944](https://issues.redhat.com/browse/OCPNODE-3944): Create e2e automation in origin for case OCP-84149 [#30657](https://github.com/openshift/origin/pull/30657)
* [OCPEDGE-2355](https://issues.redhat.com/browse/OCPEDGE-2355): feat: skip unsupported commatrix tests for two node [#30720](https://github.com/openshift/origin/pull/30720)
* [OCPEDGE-2274](https://issues.redhat.com/browse/OCPEDGE-2274): fix: change arbiter topology test to verify pods do not run on arbiter nodes [#30737](https://github.com/openshift/origin/pull/30737)
* [OCPQE-31524](https://issues.redhat.com/browse/OCPQE-31524): Add conditional SCC wait for Kubernetes compatibility [#30736](https://github.com/openshift/origin/pull/30736)
* Revert "SPLAT-2337: Added OTE binary for ccm-aws" [#30744](https://github.com/openshift/origin/pull/30744)
* [SPLAT-2337](https://issues.redhat.com/browse/SPLAT-2337): Added OTE binary for ccm-aws [#30525](https://github.com/openshift/origin/pull/30525)
* NO-JIRA: bump SNO marketplace-operator watch count limit [#30738](https://github.com/openshift/origin/pull/30738)
* [OCPBUGS-73778](https://issues.redhat.com/browse/OCPBUGS-73778): revert LSO networkpolicy cases [#30684](https://github.com/openshift/origin/pull/30684)
* [STOR-2838](https://issues.redhat.com/browse/STOR-2838): fix OTP AsGuestKubeconf [#30721](https://github.com/openshift/origin/pull/30721)
* [OCPBUGS-63307](https://issues.redhat.com/browse/OCPBUGS-63307): Add/RemoveSigtermProtection event matcher for SigstoreImageVerification tests [#30624](https://github.com/openshift/origin/pull/30624)
* [TRT-2522](https://issues.redhat.com/browse/TRT-2522): Update optimized builds test to use `rpm -qa` instead of `dnf` [#30722](https://github.com/openshift/origin/pull/30722)
* NO-JIRA: Replace OCPBUGS-20062 with OCPBUGS-65984 [#30554](https://github.com/openshift/origin/pull/30554)
* [OCPNODE-3203](https://issues.redhat.com/browse/OCPNODE-3203): Add a test suite for kubeletconfig testing [#30648](https://github.com/openshift/origin/pull/30648)
* [OCPBUGS-61855](https://issues.redhat.com/browse/OCPBUGS-61855): Revert "Temporarily disable InstallPlanStepAppliedWithWarnings alert for k8s 1.34 rebase" [#30559](https://github.com/openshift/origin/pull/30559)
* NO-ISSUE: Update boot image manifests for skew API [#30712](https://github.com/openshift/origin/pull/30712)
* [NE-2376](https://issues.redhat.com/browse/NE-2376): Remove restriction of unmanaged x-k8s.io [#30658](https://github.com/openshift/origin/pull/30658)
* [OCPBUGS-74237](https://issues.redhat.com/browse/OCPBUGS-74237): Update MCN tests to better handle condition transitions through the "Unknown" state [#30705](https://github.com/openshift/origin/pull/30705)
* [OTA-1681](https://issues.redhat.com/browse/OTA-1681): remove etcd exceptions [#30688](https://github.com/openshift/origin/pull/30688)
* [OCPBUGS-74280](https://issues.redhat.com/browse/OCPBUGS-74280): Add filter for openshift-copy-to-node ns [#30713](https://github.com/openshift/origin/pull/30713)
* [OCPBUGS-62929](https://issues.redhat.com/browse/OCPBUGS-62929): Check router RBAC before external cert ops [#30395](https://github.com/openshift/origin/pull/30395)
* [OCPCLOUD-3351](https://issues.redhat.com/browse/OCPCLOUD-3351): monitortest: add crdversionchecker [#30603](https://github.com/openshift/origin/pull/30603)
* [OCPBUGS-65674](https://issues.redhat.com/browse/OCPBUGS-65674): VsphereConfigurationTestsRollOutTooOften event matcher should use broader regex [#30654](https://github.com/openshift/origin/pull/30654)
* [OCPSTRAT-2728](https://issues.redhat.com/browse/OCPSTRAT-2728): add images required for the 1.35 rebase (temporary) [#30687](https://github.com/openshift/origin/pull/30687)
* NO-JIRA: Remove exceptions for storage operators [#30677](https://github.com/openshift/origin/pull/30677)
* NO-ISSUE: Allow test to tolerate running on minimal images [#30695](https://github.com/openshift/origin/pull/30695)
* [TRT-2483](https://issues.redhat.com/browse/TRT-2483): feat(ginkgo): add monitor tests to extension test result output [#30678](https://github.com/openshift/origin/pull/30678)
* NO-JIRA: Update Networking team lead [#30301](https://github.com/openshift/origin/pull/30301)
* [OCPEDGE-2303](https://issues.redhat.com/browse/OCPEDGE-2303): update test logic for degraded cluster run [#30649](https://github.com/openshift/origin/pull/30649)
* NO-JIRA: CO must go Progressing during a minor-level upgrade [#30626](https://github.com/openshift/origin/pull/30626)
* [OCPBUGS-39026](https://issues.redhat.com/browse/OCPBUGS-39026): Remove exception for monitoring operator going degraded during upgrade [#30012](https://github.com/openshift/origin/pull/30012)
* NO-JIRA: Fix Pod.Create() to use --local flag for template processing [#30686](https://github.com/openshift/origin/pull/30686)
* [OCPEDGE-1788](https://issues.redhat.com/browse/OCPEDGE-1788): TNF add etcd cold boot recovery tests from graceful node shutdown [#30519](https://github.com/openshift/origin/pull/30519)
* NO-JIRA: Replace OCPBUGS-38667 with OCPBUGS-66225 [#30551](https://github.com/openshift/origin/pull/30551)
* [OCPEDGE-2304](https://issues.redhat.com/browse/OCPEDGE-2304): adjust olm test to pass on a degraded run [#30664](https://github.com/openshift/origin/pull/30664)
* [OCPBUGS-72547](https://issues.redhat.com/browse/OCPBUGS-72547): Isolate and reduce parallelism for OrderedNamespaceDeletion tests. [#30672](https://github.com/openshift/origin/pull/30672)
* [OCPNODE-3823](https://issues.redhat.com/browse/OCPNODE-3823): Migrating test case from Openshift-test-private to origin [#30512](https://github.com/openshift/origin/pull/30512)
* NO-JIRA: add the intervals bucket for Netpol tests [#30679](https://github.com/openshift/origin/pull/30679)
* NO-ISSUE: Update synthetic test data [#30680](https://github.com/openshift/origin/pull/30680)
* NO-JIRA: Remove exceptions for co/machine-config on Available=False [#30550](https://github.com/openshift/origin/pull/30550)
* [CNTRLPLANE-2167](https://issues.redhat.com/browse/CNTRLPLANE-2167): Add oc-tests-ext to extension binaries [#30653](https://github.com/openshift/origin/pull/30653)
* [OCPBUGS-69676](https://issues.redhat.com/browse/OCPBUGS-69676): update watch request limits for cluster-autoscaler-operator [#30656](https://github.com/openshift/origin/pull/30656)
* NO-JIRA: Remove the exception for CO/console's Available=False [#30553](https://github.com/openshift/origin/pull/30553)
* Revert "CNF-18661: add a skip on the commatrix test for the unsupported topology by commatrix" [#30670](https://github.com/openshift/origin/pull/30670)
* NO-ISSUE: Fix the PinnedImage test to set imageMinimumGCAge to 1s [#30645](https://github.com/openshift/origin/pull/30645)
* [OCPBUGS-70170](https://issues.redhat.com/browse/OCPBUGS-70170): change iperf2 test to serial from parallel [#30671](https://github.com/openshift/origin/pull/30671)
* NO-JIRA: register cluster-node-tuning-operator-test-ext the binary to origin for OTE migration [#30598](https://github.com/openshift/origin/pull/30598)
* [NE-2056](https://issues.redhat.com/browse/NE-2056): auto negative tests of gatewayapicontroller [#30599](https://github.com/openshift/origin/pull/30599)
* NO-JIRA: Add more output for debegging [#30583](https://github.com/openshift/origin/pull/30583)
* NO-JIRA: Skip a ClusterOperator test if a cluster upgrade is blocked [#30558](https://github.com/openshift/origin/pull/30558)
* NO-JIRA: Track the total kubelet metrics outage durations with autodl framework [#30593](https://github.com/openshift/origin/pull/30593)
* NO-JIRA: Add images that shouldn’t be mirrored to the exception list. [#30652](https://github.com/openshift/origin/pull/30652)
* [OCPBUGS-66225](https://issues.redhat.com/browse/OCPBUGS-66225): Add more exceptions for CO/image-registry's Degraded=True [#30581](https://github.com/openshift/origin/pull/30581)
* [OCPBUGS-66065](https://issues.redhat.com/browse/OCPBUGS-66065): remove duplicated events before processing lease intervals [#30639](https://github.com/openshift/origin/pull/30639)
* [OCPBUGS-57665](https://issues.redhat.com/browse/OCPBUGS-57665): only run Netpol two at a time [#30618](https://github.com/openshift/origin/pull/30618)
* [OCPBUGS-70249](https://issues.redhat.com/browse/OCPBUGS-70249): Unrevert tls tests with fixes [#30536](https://github.com/openshift/origin/pull/30536)
* [OCPBUGS-70065](https://issues.redhat.com/browse/OCPBUGS-70065): Updating openshift-enterprise-tests-container image to be consistent with ART for 4.22 [#30636](https://github.com/openshift/origin/pull/30636)
* [OCPBUGS-69400](https://issues.redhat.com/browse/OCPBUGS-69400): Ignore repeated TopologyAwareHintsDisabled events [#30614](https://github.com/openshift/origin/pull/30614)
* [CNF-18661](https://issues.redhat.com/browse/CNF-18661): add a skip on the commatrix test for the unsupported topology by commatrix [#30640](https://github.com/openshift/origin/pull/30640)
* [CNTRLPLANE-2167](https://issues.redhat.com/browse/CNTRLPLANE-2167): Migrate must-gather cases to origin [#30594](https://github.com/openshift/origin/pull/30594)
* NO-JIRA: Remove DennisPeriquet from OWNERS [#30650](https://github.com/openshift/origin/pull/30650)
* [OCPSTRAT-2728](https://issues.redhat.com/browse/OCPSTRAT-2728): Update etcd test data for k8s 1.35 release [#30605](https://github.com/openshift/origin/pull/30605)
* [OCPBUGS-67313](https://issues.redhat.com/browse/OCPBUGS-67313): Fix race condition in external binary extraction [#30616](https://github.com/openshift/origin/pull/30616)
* [OCPBUGS-70134](https://issues.redhat.com/browse/OCPBUGS-70134): Fix JSONL parsing to handle stray JSON in test output [#30634](https://github.com/openshift/origin/pull/30634)
* [TRT-2394](https://issues.redhat.com/browse/TRT-2394): Detect duplicate tests [#30498](https://github.com/openshift/origin/pull/30498)
* [CNTRLPLANE-947](https://issues.redhat.com/browse/CNTRLPLANE-947): E2E test adaptations for OIDC [#30292](https://github.com/openshift/origin/pull/30292)
* [TRT-2418](https://issues.redhat.com/browse/TRT-2418): Add CPU metrics autodl [#30609](https://github.com/openshift/origin/pull/30609)
* NO-JIRA: feat: render OTE JSON results in spyglass [#30619](https://github.com/openshift/origin/pull/30619)
* NO-JIRA: Increase tolerance of CO's not reporting Progressing [#30602](https://github.com/openshift/origin/pull/30602)
* [MCO-2006](https://issues.redhat.com/browse/MCO-2006): move node-filecycle monitor to default [#30592](https://github.com/openshift/origin/pull/30592)
* NO-ISSUE: Two more COs report Available=False in a non-upgrade job [#30588](https://github.com/openshift/origin/pull/30588)
* [CNTRLPLANE-1437](https://issues.redhat.com/browse/CNTRLPLANE-1437): add monitor test for checking default service account in pods (static test name) [#30561](https://github.com/openshift/origin/pull/30561)
* NO-JIRA: feat(monitor): track test bucket execution intervals [#30615](https://github.com/openshift/origin/pull/30615)
* [STOR-2550](https://issues.redhat.com/browse/STOR-2550): add LSO network policy test case [#30562](https://github.com/openshift/origin/pull/30562)
* [OCPBUGS-63618](https://issues.redhat.com/browse/OCPBUGS-63618): BeforeEach was indirectly called in DetermineReleasePayloadImage [#30610](https://github.com/openshift/origin/pull/30610)
* [CNTRLPLANE-1683](https://issues.redhat.com/browse/CNTRLPLANE-1683): added the OTE binary for cluster-image-registry-operator [#30612](https://github.com/openshift/origin/pull/30612)
* [OCPBUGS-67211](https://issues.redhat.com/browse/OCPBUGS-67211): exculude Flaky tests for openshift/csi test suite [#30597](https://github.com/openshift/origin/pull/30597)
* [OCPBUGS-65674](https://issues.redhat.com/browse/OCPBUGS-65674): VsphereConfigurationTestsRollOutTooOften event matcher should match also dep and ds events [#30547](https://github.com/openshift/origin/pull/30547)
* NO-JIRA: Allow group snapshot tests to be re-tried [#30607](https://github.com/openshift/origin/pull/30607)
* [OCPNODE-3780](https://issues.redhat.com/browse/OCPNODE-3780): Add e2e tests to validate DRA APIs [#30462](https://github.com/openshift/origin/pull/30462)
* And 4 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/origin/compare/4a4e5866cdcd4ac74935b016746f7ce114a9809e...1a93dad027b5135d67388b359c2b12d87beae0b0)
### [thanos](https://github.com/openshift/thanos/tree/5d9d0f387e5cc651470f27352b28674103bfdd77)
* [OCPBUGS-81494](https://issues.redhat.com/browse/OCPBUGS-81494): CVE-2026-33186 openshift4/ose-thanos-rhel9: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation [#179](https://github.com/openshift/thanos/pull/179)
* NO-JIRA: Bump to v0.41.0 [#173](https://github.com/openshift/thanos/pull/173)
* NO-JIRA: Disable default coderabbit reviews [#171](https://github.com/openshift/thanos/pull/171)
* [OCPBUGS-77547](https://issues.redhat.com/browse/OCPBUGS-77547): Updating ose-thanos-container image to be consistent with ART for 4.22 [#170](https://github.com/openshift/thanos/pull/170)
* [OCPBUGS-69738](https://issues.redhat.com/browse/OCPBUGS-69738): Updating ose-thanos-container image to be consistent with ART for 4.22 [#166](https://github.com/openshift/thanos/pull/166)
* [Full changelog](https://github.com/openshift/thanos/compare/6ea20ffaa35b7b31fe7ef9a99287bdd4a1c1e4e8...5d9d0f387e5cc651470f27352b28674103bfdd77)
### [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator/tree/8e176cec394709cac728423cbbb6c3c914be8485)
* [STOR-2750](https://issues.redhat.com/browse/STOR-2750): Rebase to upstream v1.6.0 for OCP 4.22 [#9](https://github.com/openshift/volume-data-source-validator/pull/9)
* [OCPBUGS-69897](https://issues.redhat.com/browse/OCPBUGS-69897): Updating volume-data-source-validator-container image to be consistent with ART for 4.22 [#8](https://github.com/openshift/volume-data-source-validator/pull/8)
* [Full changelog](https://github.com/openshift/volume-data-source-validator/compare/8b9293323cf8fdce93824e37168573ca3f73de3a...8e176cec394709cac728423cbbb6c3c914be8485)
### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/39008107b1463e3299b0d60c3ac1f7e71ad3e014)
* NO-JIRA: Merge https://github.com/kubernetes/cloud-provider-vsphere:release-1.35 (93af0f7) into main [#113](https://github.com/openshift/cloud-provider-vsphere/pull/113)
* [OCPCLOUD-3275](https://issues.redhat.com/browse/OCPCLOUD-3275): Merge https://github.com/kubernetes/cloud-provider-vsphere:master (499b4a3) into main [#101](https://github.com/openshift/cloud-provider-vsphere/pull/101)
* Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART for 4.22 [#102](https://github.com/openshift/cloud-provider-vsphere/pull/102)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/f69584d6ed7411504b0fff77eb36d0fd64f0fd5e...39008107b1463e3299b0d60c3ac1f7e71ad3e014)
### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/f12e50512efa829a2df97c897862c3f45c201300)
* [OCPCLOUD-3295](https://issues.redhat.com/browse/OCPCLOUD-3295): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.15.2 (91522fc) into master [#79](https://github.com/openshift/cluster-api-provider-vsphere/pull/79)
* [OCPCLOUD-3323](https://issues.redhat.com/browse/OCPCLOUD-3323): Update to new manifests-gen [#82](https://github.com/openshift/cluster-api-provider-vsphere/pull/82)
* [OCPBUGS-69861](https://issues.redhat.com/browse/OCPBUGS-69861): Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.22 [#81](https://github.com/openshift/cluster-api-provider-vsphere/pull/81)
* NO-JIRA: UPSTREAM: <carry>: Add manifests verify target [#80](https://github.com/openshift/cluster-api-provider-vsphere/pull/80)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/6626b2998e29189d1ff031c0a589f9c3413feac4...f12e50512efa829a2df97c897862c3f45c201300)
### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/cf21e1211225e3cf6baa27bdb12ae86c5c13db39)
* [OCPBUGS-81525](https://issues.redhat.com/browse/OCPBUGS-81525): Bump google.golang.org/grpc to 1.79.3 [#170](https://github.com/openshift/vmware-vsphere-csi-driver/pull/170)
* [OCPBUGS-77563](https://issues.redhat.com/browse/OCPBUGS-77563): Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.22 [#164](https://github.com/openshift/vmware-vsphere-csi-driver/pull/164)
* Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.22 [#165](https://github.com/openshift/vmware-vsphere-csi-driver/pull/165)
* [OCPBUGS-69760](https://issues.redhat.com/browse/OCPBUGS-69760): Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.22 [#153](https://github.com/openshift/vmware-vsphere-csi-driver/pull/153)
* [OCPBUGS-69746](https://issues.redhat.com/browse/OCPBUGS-69746): Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.22 [#152](https://github.com/openshift/vmware-vsphere-csi-driver/pull/152)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/5e680186a305e1e0a11950630f7addcb1aa19e0e...cf21e1211225e3cf6baa27bdb12ae86c5c13db39)
### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/d3668c9a9510f189604343e817cc79ab23367f40)
* [STOR-2762](https://issues.redhat.com/browse/STOR-2762): Bump all deps for 4.22 [#334](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/334)
* [STOR-2882](https://issues.redhat.com/browse/STOR-2882): add feature gate for checking platform type is vsphere [#331](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/331)
* [OCPBUGS-77629](https://issues.redhat.com/browse/OCPBUGS-77629): Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.22 [#333](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/333)
* [OCPBUGS-74225](https://issues.redhat.com/browse/OCPBUGS-74225): Bump library-go [#328](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/328)
* [OCPBUGS-74206](https://issues.redhat.com/browse/OCPBUGS-74206): fix snapshot config non-deterministic ordering [#329](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/329)
* [STOR-2840](https://issues.redhat.com/browse/STOR-2840): Declare RWX capability explicitly [#324](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/324)
* [STOR-2852](https://issues.redhat.com/browse/STOR-2852): Enable snapshot tests for vsphere [#321](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/321)
* [OCPBUGS-69924](https://issues.redhat.com/browse/OCPBUGS-69924): Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.22 [#320](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/320)
* [OCPBUGS-66113](https://issues.redhat.com/browse/OCPBUGS-66113): Some containers do not have readOnlyRootFilesystem [#319](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/319)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/57c19630194a26e9e2338b0ba8a32e8922e74259...d3668c9a9510f189604343e817cc79ab23367f40)
### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/842aed3df97005839ef5deaf560abbe6486b9daf)
* [STOR-2762](https://issues.redhat.com/browse/STOR-2762): Bump all deps for 4.22 [#214](https://github.com/openshift/vsphere-problem-detector/pull/214)
* [OCPBUGS-77603](https://issues.redhat.com/browse/OCPBUGS-77603): Updating ose-vsphere-problem-detector-container image to be consistent with ART for 4.22 [#213](https://github.com/openshift/vsphere-problem-detector/pull/213)
* [OCPBUGS-74989](https://issues.redhat.com/browse/OCPBUGS-74989): GetVCenterHostnames lacks lock protection causing potential data race [#209](https://github.com/openshift/vsphere-problem-detector/pull/209)
* [OCPBUGS-70365](https://issues.redhat.com/browse/OCPBUGS-70365): fix concurrent map writes [#206](https://github.com/openshift/vsphere-problem-detector/pull/206)
* [OCPBUGS-69856](https://issues.redhat.com/browse/OCPBUGS-69856): Updating ose-vsphere-problem-detector-container image to be consistent with ART for 4.22 [#199](https://github.com/openshift/vsphere-problem-detector/pull/199)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/5ddf3f06b3c50c4500195d315cbea1688e45ba22...842aed3df97005839ef5deaf560abbe6486b9daf)