# 4.22.0-okd-scos.4

Created: 2026-06-18 06:49:35 +0000 UTC

Image Digest: `sha256:79dea1961581c52b6b1674a318be012c1560acccfdf8954be46b06eaf8ca5307`

Promoted from registry.ci.openshift.org/origin/release-scos:4.22.0-0.okd-scos-nightly-2026-06-17-125002


## Changes from 4.22.0-okd-scos.2

### Components

* Kubectl 1.35.2
* Kubernetes 1.35.5
* Kubernetes Tests 1.35.1
* CentOS Stream CoreOS 10 upgraded from 10.0.20260526-0 to 10.0.20260614-0


### Rebuilt images without code change

* [machine-os-images](https://github.com/openshift/machine-os-images) git [4843e698](https://github.com/openshift/machine-os-images/commit/4843e69841263a99f7fbc05187557db408abf265) `sha256:373a7b92c4e6bcab49eba0a3d0cb931b4584740a7a96fbf88f08fc9cc64b2187`
* [network-tools](https://github.com/openshift/network-tools) git [5c4b905c](https://github.com/openshift/network-tools/commit/5c4b905c09ccd6edadb2ff359f45b70ed334f948) `sha256:ac193e4d55ceb5aaa61689ef005815ea3a53b67e76992b7cf39be5b13157c53b`


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/24e894263b3231ab8bb27acc9127a835b7b6e997)

* [OCPBUGS-69953](https://issues.redhat.com/browse/OCPBUGS-69953): Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.22 [#1406](https://github.com/openshift/assisted-installer/pull/1406)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/a9bfcccdade3dec5e6d71dbbc6e03fe137a1660b...24e894263b3231ab8bb27acc9127a835b7b6e997)


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/043f7fe6a4787dbd4e0e334d468fe3bb4a2a4d38)

* [OCPBUGS-86813](https://issues.redhat.com/browse/OCPBUGS-86813): Custom manifests are broken in local assisted UI (#3768) [#3768](https://github.com/openshift-assisted/assisted-installer-ui/pull/3768)
* [OCPBUGS-86258](https://issues.redhat.com/browse/OCPBUGS-86258): Static ip prefill for ove below the sea (#3767) [#3767](https://github.com/openshift-assisted/assisted-installer-ui/pull/3767)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/777a4a0450fdac9d45f4a39cf52156099c1a5689...043f7fe6a4787dbd4e0e334d468fe3bb4a2a4d38)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/4123dfb0d75ef84c7f32b85ed2e4e5e95a3b8aa0)

* [PIXAA-7](https://issues.redhat.com/browse/PIXAA-7): Leverage SpotRebalanceRecommendation for instance termination when available [#198](https://github.com/openshift/machine-api-provider-azure/pull/198)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/69d049094ee36ad9c706d65694a8cd42e9a64800...4123dfb0d75ef84c7f32b85ed2e4e5e95a3b8aa0)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/0e39bcd8a1ab4b7aa951b287b0290c94e606cbeb)

* [OCPBUGS-84402](https://issues.redhat.com/browse/OCPBUGS-84402): Bump go-jose/v4 to 4.1.4 [#10597](https://github.com/openshift/installer/pull/10597)
* [Full changelog](https://github.com/openshift/installer/compare/e6b9ec0127844d4a25a45b35a18704aa3af65949...0e39bcd8a1ab4b7aa951b287b0290c94e606cbeb)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/5805e17a895ac569decd193153d45662ede5fc6f)

* [OCPBUGS-87212](https://issues.redhat.com/browse/OCPBUGS-87212): Add watcher for both TLS Adherence policy and profile changes [#610](https://github.com/openshift/cluster-baremetal-operator/pull/610)
* [OCPBUGS-86226](https://issues.redhat.com/browse/OCPBUGS-86226): Fix empty IRONIC_BASE_URL [#606](https://github.com/openshift/cluster-baremetal-operator/pull/606)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/4ac0e75c11e14023fbf3ab3ea1fa6dba01b01769...5805e17a895ac569decd193153d45662ede5fc6f)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/2674d1c3f18e9ec17b8f6b76eadbf35d7ea0d8fb)

* [OCPBUGS-86960](https://issues.redhat.com/browse/OCPBUGS-86960): validate snapshot before destructive operations in cluster-restore-tnf.sh [#1627](https://github.com/openshift/cluster-etcd-operator/pull/1627)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/3698b93d071f8b279b1721f90ced478f0b90b426...2674d1c3f18e9ec17b8f6b76eadbf35d7ea0d8fb)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/84ebd6ef9374b0a05e83545d6334dd79c54a7861)

* [OCPBUGS-87164](https://issues.redhat.com/browse/OCPBUGS-87164): Add referencegrants and backendtlspolicies to Gateway API RBAC [#1461](https://github.com/openshift/cluster-ingress-operator/pull/1461)
* [OCPBUGS-87167](https://issues.redhat.com/browse/OCPBUGS-87167): Add configuration override for X-SSL strip [#1468](https://github.com/openshift/cluster-ingress-operator/pull/1468)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/8ae91f62ca9e6ca1f210b815ab54edbae856ac4c...84ebd6ef9374b0a05e83545d6334dd79c54a7861)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/9c413cd4dc8c3876cc40ee85c207bf9b143f106f)

* [OCPBUGS-87844](https://issues.redhat.com/browse/OCPBUGS-87844): Fix kube-apiserver-to-kubelet-signer refresh interval [#2187](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2187)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/fb68eab51544f9dffac9916796723f6cee4faf3c...9c413cd4dc8c3876cc40ee85c207bf9b143f106f)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/d88243d9f9a0e6a6d1ff3855a336576fefa3a4c8)

* [OCPBUGS-86807](https://issues.redhat.com/browse/OCPBUGS-86807): jsonnet: exclude ReplicationController from catch-all … [#2940](https://github.com/openshift/cluster-monitoring-operator/pull/2940)
* [OCPBUGS-86990](https://issues.redhat.com/browse/OCPBUGS-86990): increase lookup interval [#2945](https://github.com/openshift/cluster-monitoring-operator/pull/2945)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/b4ce8c8e60a691ec428c6cb822c411d9b11efb5f...d88243d9f9a0e6a6d1ff3855a336576fefa3a4c8)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/0f1151ea0db94220ae0615162bcad1e2e8f838c2)

* [OCPBUGS-89244](https://issues.redhat.com/browse/OCPBUGS-89244): NVIDIA-554: DPU-host mode: use ConfigMap for OVN feature enablement instead of per-node script gating [#3029](https://github.com/openshift/cluster-network-operator/pull/3029)
* [OCPBUGS-88307](https://issues.redhat.com/browse/OCPBUGS-88307): Remove --enable-interconnect flag from OVN-K manifests [#3028](https://github.com/openshift/cluster-network-operator/pull/3028)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/e20b9cb9a0b3bc293e622ef1caf70a813710ffa8...0f1151ea0db94220ae0615162bcad1e2e8f838c2)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/f81a992eac545ce89c8af5b68dd21f54ebc8267e)

* [OCPBUGS-87891](https://issues.redhat.com/browse/OCPBUGS-87891): Enable timer migrations for all use-cases [#1542](https://github.com/openshift/cluster-node-tuning-operator/pull/1542)
* [OCPBUGS-87158](https://issues.redhat.com/browse/OCPBUGS-87158): e2e: Remove unnecessary len(numa) < 2 skip gates [#1538](https://github.com/openshift/cluster-node-tuning-operator/pull/1538)
* [OCPBUGS-84431](https://issues.redhat.com/browse/OCPBUGS-84431): Bump github.com/moby/spdystream from v0.5.0 to v0.5.1 [#1529](https://github.com/openshift/cluster-node-tuning-operator/pull/1529)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/89a680237e49d6b1107dd1b922aaf6a5d17caec2...f81a992eac545ce89c8af5b68dd21f54ebc8267e)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/7de363f2a12bb17c6703c77dec5b34760b3292db)

* [OCPBUGS-77681](https://issues.redhat.com/browse/OCPBUGS-77681): Updating cluster-version-operator-container image to be consistent with ART for 4.22 [#1331](https://github.com/openshift/cluster-version-operator/pull/1331)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/e9c1c39e21ec353ff5993d386c42bc1b15063dbf...7de363f2a12bb17c6703c77dec5b34760b3292db)


### [console](https://github.com/openshift/console/tree/232ba651887b4fc6c9e2b84d7a60a338b94c63f7)

* [OCPBUGS-87933](https://issues.redhat.com/browse/OCPBUGS-87933), [OCPBUGS-87985](https://issues.redhat.com/browse/OCPBUGS-87985): Bump protobufjs and shell-quote [#16619](https://github.com/openshift/console/pull/16619)
* [OCPBUGS-87997](https://issues.redhat.com/browse/OCPBUGS-87997): Bump fast-uri to 3.1.2 to fix CVE-2026-6322 [#16605](https://github.com/openshift/console/pull/16605)
* [OCPBUGS-88304](https://issues.redhat.com/browse/OCPBUGS-88304): Allow VolumeSnapshot restore when parent PVC is deleted [#16592](https://github.com/openshift/console/pull/16592)
* [OCPBUGS-87096](https://issues.redhat.com/browse/OCPBUGS-87096): fixing severity not showing number of issues [#16575](https://github.com/openshift/console/pull/16575)
* [OCPBUGS-86580](https://issues.redhat.com/browse/OCPBUGS-86580): Fix macOS Option key in pod terminal [#16504](https://github.com/openshift/console/pull/16504)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/ab5c9a6f55346e3f2fe7195b1a1f7be840c4b495...232ba651887b4fc6c9e2b84d7a60a338b94c63f7)


### [console-operator](https://github.com/openshift/console-operator/tree/cfe5f34a2ddcd7fdd907446fa67afb8bdf897995)

* [OCPBUGS-86118](https://issues.redhat.com/browse/OCPBUGS-86118): Add unit and e2e test coverage for cert rotation redeployment [#1161](https://github.com/openshift/console-operator/pull/1161)
* [Full changelog](https://github.com/openshift/console-operator/compare/b0cf7200cae5a97e9e2e0cb3d788956bb7d2eaf6...cfe5f34a2ddcd7fdd907446fa67afb8bdf897995)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/659bc0aabf3b5cad58efc0aef1b9cc07abb1610a)

* [OCPBUGS-87165](https://issues.redhat.com/browse/OCPBUGS-87165): CI build root image tag sync with ART 4.22 [#240](https://github.com/openshift/containernetworking-plugins/pull/240)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/747ad66caa1109b2b490aebad01af42bd2d738f1...659bc0aabf3b5cad58efc0aef1b9cc07abb1610a)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/710a2aea744fd04546d11ac781fb874694e33ad8)

* [OCPBUGS-83552](https://issues.redhat.com/browse/OCPBUGS-83552): Bump google.golang.org/grpc to 1.79.3 [#395](https://github.com/openshift/cloud-provider-openstack/pull/395)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/f146b90407764c052b7e26ee5a4da338b240eea5...710a2aea744fd04546d11ac781fb874694e33ad8)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/bb6a6378d2af235b3b253cb422d406bd3d7e30b1)

* [OCPBUGS-84436](https://issues.redhat.com/browse/OCPBUGS-84436): Bump github.com/moby/spdystream to v0.5.1 [#105](https://github.com/openshift/csi-node-driver-registrar/pull/105)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/cf174b30fad107d354afb0f0b09030a7c97fd296...bb6a6378d2af235b3b253cb422d406bd3d7e30b1)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/3da58a8c88a425e8e05d6e907f5492a49a0ee348)

* [OCPBUGS-86574](https://issues.redhat.com/browse/OCPBUGS-86574): VolumeSnapshot snapshot-c9v52 is not ready within 5m0s… [#193](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/193)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/14ba2df86d164fd252998c3c717e4b7ead7f7733...3da58a8c88a425e8e05d6e907f5492a49a0ee348)


### [haproxy-router](https://github.com/openshift/router/tree/5586fa9c77025679df4dee2a0895e95333ffbc8a)

* [OCPBUGS-87167](https://issues.redhat.com/browse/OCPBUGS-87167): Strip X-SSL-* headers for plain HTTP [#793](https://github.com/openshift/router/pull/793)
* [Full changelog](https://github.com/openshift/router/compare/1d980e1d4c65832893e91150df92fc6ad1932d89...5586fa9c77025679df4dee2a0895e95333ffbc8a)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/7250fd5b9e6ffa2f127d4ae559e4adf1100d10b9)

* [OCPBUGS-86898](https://issues.redhat.com/browse/OCPBUGS-86898): Fix performance related issues when selinux metrics are emitted [#2676](https://github.com/openshift/kubernetes/pull/2676)
* [Full changelog](https://github.com/openshift/kubernetes/compare/c5ea727d19837f8a22cda5c0ba8899960b7777ff...7250fd5b9e6ffa2f127d4ae559e4adf1100d10b9)


### [hypershift](https://github.com/openshift/hypershift/tree/5cb873528a4bf4b181c7258516294f0a8d774345)

* [OCPBUGS-86912](https://issues.redhat.com/browse/OCPBUGS-86912): [release-4.22] Stop controllers fighting over HCP status [#8632](https://github.com/openshift/hypershift/pull/8632)
* [OCPBUGS-86039](https://issues.redhat.com/browse/OCPBUGS-86039): OCPBUGS-62177: [release-4.22] Verify cert revocation against all KAS pods [#8538](https://github.com/openshift/hypershift/pull/8538)
* [Full changelog](https://github.com/openshift/hypershift/compare/937a38f79b103182b99f4322b5a85912e63568df...5cb873528a4bf4b181c7258516294f0a8d774345)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/3d5956ddd2292c381309106d23fff1765380c55e)

* [OCPBUGS-83774](https://issues.redhat.com/browse/OCPBUGS-83774): Bump google.golang.org/grpc to v1.79.3 [#171](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/171)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/f859eac9612d8fff52013b809840b015cee6742d...3d5956ddd2292c381309106d23fff1765380c55e)


### [insights-operator](https://github.com/openshift/insights-operator/tree/38043c4fbd619ee1d87b60b31f0ca9d073df328f)

* [OCPBUGS-86818](https://issues.redhat.com/browse/OCPBUGS-86818): extractor controller [#1296](https://github.com/openshift/insights-operator/pull/1296)
* [Full changelog](https://github.com/openshift/insights-operator/compare/db59978d438a92e6fe805e9a9fb4dbbc5edaa4b6...38043c4fbd619ee1d87b60b31f0ca9d073df328f)


### [ironic](https://github.com/openshift/ironic-image/tree/6984e87571f14d42463e10acee6bae32f9294534)

* [OCPBUGS-84369](https://issues.redhat.com/browse/OCPBUGS-84369): selectively backport servicing patches to 4.22 [#848](https://github.com/openshift/ironic-image/pull/848)
* [Full changelog](https://github.com/openshift/ironic-image/compare/f934d2cdf0bebbde4992980a770dd799056ab867...6984e87571f14d42463e10acee6bae32f9294534)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/67efe85db36678a609e092dcdaae645a42ccf5a5)

* [OCPBUGS-88683](https://issues.redhat.com/browse/OCPBUGS-88683): Process rebuild annotation on machine-os-builder restart [#6190](https://github.com/openshift/machine-config-operator/pull/6190)
* [OCPBUGS-87981](https://issues.redhat.com/browse/OCPBUGS-87981): Fix MCP.status.osImageStream [#6164](https://github.com/openshift/machine-config-operator/pull/6164)
* [OCPBUGS-88496](https://issues.redhat.com/browse/OCPBUGS-88496): Update custom containerfile OCB test to work in a disconnected environment [#6188](https://github.com/openshift/machine-config-operator/pull/6188)
* [OCPBUGS-88001](https://issues.redhat.com/browse/OCPBUGS-88001): Add mco_extensions.go e2e test suite for MCO extension install, enable, and validation [#6184](https://github.com/openshift/machine-config-operator/pull/6184)
* [OCPBUGS-88329](https://issues.redhat.com/browse/OCPBUGS-88329): In OCB to check when a image is removed the old build is triggered again and the MC should start updating directly and no new MOSB should be triggred [#6175](https://github.com/openshift/machine-config-operator/pull/6175)
* [OCPBUGS-87019](https://issues.redhat.com/browse/OCPBUGS-87019): fix: update arbiter crio config [#6142](https://github.com/openshift/machine-config-operator/pull/6142)
* [OCPBUGS-88487](https://issues.redhat.com/browse/OCPBUGS-88487): make test 69755 more stable [#6186](https://github.com/openshift/machine-config-operator/pull/6186)
* [OCPBUGS-88331](https://issues.redhat.com/browse/OCPBUGS-88331): [release-4.22] Remove skopeo-install script [#6176](https://github.com/openshift/machine-config-operator/pull/6176)
* [OCPBUGS-84679](https://issues.redhat.com/browse/OCPBUGS-84679): add RootCA cert to the sysContextBuilder certs [#5897](https://github.com/openshift/machine-config-operator/pull/5897)
* [OCPBUGS-87840](https://issues.redhat.com/browse/OCPBUGS-87840): vSphere boot image hot loop detection is non-functional due to stable template names [#6157](https://github.com/openshift/machine-config-operator/pull/6157)
* [OCPBUGS-87900](https://issues.redhat.com/browse/OCPBUGS-87900): [release-4.22] OCPBUGS-87181:  MCO-2211: MCO-2210: MCO-2234 MCO-Migrate MCO tests from openshift-tests-private [#6148](https://github.com/openshift/machine-config-operator/pull/6148)
* [OCPBUGS-88114](https://issues.redhat.com/browse/OCPBUGS-88114): Skip chrony-wait on first node join [#6168](https://github.com/openshift/machine-config-operator/pull/6168)
* [OCPBUGS-88120](https://issues.redhat.com/browse/OCPBUGS-88120): daemon: don't pull/extract extensions for all OS updates [#6169](https://github.com/openshift/machine-config-operator/pull/6169)
* [OCPBUGS-87811](https://issues.redhat.com/browse/OCPBUGS-87811): [release-4.22] OCPBUGS-87550: Update TC-88366 to check osImageStream status after update completes [#6153](https://github.com/openshift/machine-config-operator/pull/6153)
* [OCPBUGS-87161](https://issues.redhat.com/browse/OCPBUGS-87161): [release-4.22] OCPBUGS-87027: MCO-2212: MCO-2213: Migrate mco_observability and mco_daemon test-suite [#6143](https://github.com/openshift/machine-config-operator/pull/6143)
* [OCPBUGS-86865](https://issues.redhat.com/browse/OCPBUGS-86865): Stabilize ocl 4.22 [#6115](https://github.com/openshift/machine-config-operator/pull/6115)
* [OCPBUGS-86985](https://issues.redhat.com/browse/OCPBUGS-86985): MCO-2297: Add OCP-88366 and OCP-88814 for osImageStream with osImageURL [#6083](https://github.com/openshift/machine-config-operator/pull/6083)
* [OCPBUGS-87163](https://issues.redhat.com/browse/OCPBUGS-87163): Remove trailing newline (\n) characters in klog message strings [#6147](https://github.com/openshift/machine-config-operator/pull/6147)
* [OCPBUGS-86893](https://issues.redhat.com/browse/OCPBUGS-86893): Add version guard for OSStream rendering [#6123](https://github.com/openshift/machine-config-operator/pull/6123)
* [OCPBUGS-86997](https://issues.redhat.com/browse/OCPBUGS-86997): [release-4.22] OCPBUGS-86984: MCO-2273: MCO-2215: MCO-2183: Migrate remaining TCs from mco.go to MCO, units, kublet suite [#6126](https://github.com/openshift/machine-config-operator/pull/6126)
* [OCPBUGS-86297](https://issues.redhat.com/browse/OCPBUGS-86297): configure-ovs: copy lldp mode to br-ex port [#6073](https://github.com/openshift/machine-config-operator/pull/6073)
* [OCPBUGS-86870](https://issues.redhat.com/browse/OCPBUGS-86870): Update AMI Whitelist [#6116](https://github.com/openshift/machine-config-operator/pull/6116)
* [OCPBUGS-86732](https://issues.redhat.com/browse/OCPBUGS-86732): remove tests using base images older than 4.13 [#6104](https://github.com/openshift/machine-config-operator/pull/6104)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/6202afb0547a4b81bd862e9a9ea1b45f32ed75ff...67efe85db36678a609e092dcdaae645a42ccf5a5)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/3bd7c2092ee0fe8bbad7fb4006b41ff23755343a)

* [OCPBUGS-87979](https://issues.redhat.com/browse/OCPBUGS-87979): [release-4.22] fast-uri: URI authority bypass due to improper delimiter handling [#989](https://github.com/openshift/monitoring-plugin/pull/989)
* [OCPBUGS-88413](https://issues.redhat.com/browse/OCPBUGS-88413): [release-4.22] Fix CVE-2026-44494: bump axios to ^1.16.0 via overrides [#997](https://github.com/openshift/monitoring-plugin/pull/997)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/cf64033683b8caed13ac3b39c2d4c9564888c8e7...3bd7c2092ee0fe8bbad7fb4006b41ff23755343a)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/ab696d90af299db9098f1d3a9fed0a27e5ba3a8a)

* [OCPBUGS-88314](https://issues.redhat.com/browse/OCPBUGS-88314): Trim subnet input in UDN creation form [#431](https://github.com/openshift/networking-console-plugin/pull/431)
* [CNV-90049](https://issues.redhat.com/browse/CNV-90049): [UDN] Add condition column to the list page [#432](https://github.com/openshift/networking-console-plugin/pull/432)
* [OCPBUGS-88025](https://issues.redhat.com/browse/OCPBUGS-88025): Fix empty state Create button links [#429](https://github.com/openshift/networking-console-plugin/pull/429)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/d73167a4d7fca871d64d3591aac388cfd2d37bbe...ab696d90af299db9098f1d3a9fed0a27e5ba3a8a)


### [oauth-server](https://github.com/openshift/oauth-server/tree/42031614956a88806d0503cd619b49975ad61682)

* [OCPBUGS-84381](https://issues.redhat.com/browse/OCPBUGS-84381): Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 [#233](https://github.com/openshift/oauth-server/pull/233)
* [Full changelog](https://github.com/openshift/oauth-server/compare/6c6e96279eb140ef7b4e2028ac874d79fd5bdbc9...42031614956a88806d0503cd619b49975ad61682)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/41d68b1c1dbd3d16fab14bc101d9e28826362757)

* [OCPBUGS-87806](https://issues.redhat.com/browse/OCPBUGS-87806): fixes race condition when mirroring operator catalogs [#1434](https://github.com/openshift/oc-mirror/pull/1434)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/661c49e4a3694aabc933ee99c1ea925b5bbf17f3...41d68b1c1dbd3d16fab14bc101d9e28826362757)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/7fa546d41a73b519e3af0e6428471c4aaf5c71e5)

* [OCPBUGS-87022](https://issues.redhat.com/browse/OCPBUGS-87022): fix concurrent map race in project authorization cache [#653](https://github.com/openshift/openshift-apiserver/pull/653)
* [OCPBUGS-84454](https://issues.redhat.com/browse/OCPBUGS-84454): Address CVE-2026-35469 [#651](https://github.com/openshift/openshift-apiserver/pull/651)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/fbea5220c4fe13c20107d6c4631f4e53007ca761...7fa546d41a73b519e3af0e6428471c4aaf5c71e5)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/8d3b38cdbe7005e2f8443dc02b0e94b65a8f05e9)

* [OCPBUGS-88718](https://issues.redhat.com/browse/OCPBUGS-88718): Branch Sync main to release-4.22 [06-10-2026] [#3244](https://github.com/openshift/ovn-kubernetes/pull/3244)
* [OCPBUGS-87214](https://issues.redhat.com/browse/OCPBUGS-87214): Branch Sync main to release-4.22 [06-05-2026] [#3232](https://github.com/openshift/ovn-kubernetes/pull/3232)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/72db5e8d8ec23d4108183a8c67b45cdfdb8057ba...8d3b38cdbe7005e2f8443dc02b0e94b65a8f05e9)


### [stream-coreos, stream-coreos-extensions](https://github.com/openshift/os/tree/d75a447b705c33cb96a43355eae4355c609d0784)

* NO-JIRA: extensions: templatize OCP version in repo names; drop kata from extensions [#1942](https://github.com/openshift/os/pull/1942)
* NO-JIRA: Add configs for 4.23; update build-args file naming [#1941](https://github.com/openshift/os/pull/1941)
* NO-JIRA: Set io.openshift.os.streamclass label on built images [#1940](https://github.com/openshift/os/pull/1940)
* [Full changelog](https://github.com/openshift/os/compare/176d885f2a299d37b6d443deaedfae8059bd63e0...d75a447b705c33cb96a43355eae4355c609d0784)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/ecd20781f41ed71552c05650c76021da57138b7d)

* [OCPBUGS-83636](https://issues.redhat.com/browse/OCPBUGS-83636): Bump spdystream to v0.5.1 [#180](https://github.com/openshift/vmware-vsphere-csi-driver/pull/180)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/cf21e1211225e3cf6baa27bdb12ae86c5c13db39...ecd20781f41ed71552c05650c76021da57138b7d)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/438d5aad88be4f7d9237d87ed70589e1ebaf18f8)

* [OCPBUGS-86866](https://issues.redhat.com/browse/OCPBUGS-86866): Fixed compute cluster permission logic for single fd with read-only custom resourcepool [#221](https://github.com/openshift/vsphere-problem-detector/pull/221)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/842aed3df97005839ef5deaf560abbe6486b9daf...438d5aad88be4f7d9237d87ed70589e1ebaf18f8)