# 4.22.0-okd-scos.ec.11

Created: 2026-04-13 05:00:31 +0000 UTC

Image Digest: `sha256:ef4f34e11be80fb0a207c9177882f5bb5e3f9ab5e39266f744732c40e8acfc00`

Promoted from registry.ci.openshift.org/origin/release-scos:4.22.0-0.okd-scos-nightly-2026-04-10-232418


## Changes from 4.22.0-okd-scos.ec.10

### Components

* Kubectl upgraded from 1.34.1 to 1.35.2
* Kubernetes upgraded from 1.35.1 to 1.35.3
* Kubernetes Tests upgraded from 1.34.1 to 1.35.1
* CentOS Stream CoreOS 10 upgraded from 10.0.20260310-0 to 10.0.20260408-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | OKD<br/>Hypershift | OKD<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---:  |
| GCPClusterHostedDNS <br/> (0 tests)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed) |
| GCPClusterHostedDNSInstall <br/> (0 tests)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed) |
| HighlyAvailableArbiter <br/> (0 tests)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed) |
| MachineConfigNodes <br/> (0 tests)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed) |
| PinnedImages <br/> (0 tests)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed) |
| AzureClusterHostedDNSInstall <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled |
| DualReplica <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled |
| EventTTL <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled |
| GatewayAPIWithoutOLM <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled |
| VSphereHostVMGroupZonal <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled |
| NewOLMOwnSingleNamespace <br/> (0 tests)| Disabled| Disabled<br/>(Changed)| Disabled| Enabled| Disabled| Disabled<br/>(Changed)| Disabled| Enabled |
| AWSEuropeanSovereignCloudInstall <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)|  |  | Enabled<br/>(New)| Enabled<br/>(New) |
| ConfidentialCluster <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)|  |  |  |   |
| NewOLMConfigAPI <br/> (0 tests)|  |  |  | Enabled<br/>(New)|  |  |  | Enabled<br/>(New) |
| NoOverlayMode <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)|  |  | Enabled<br/>(New)| Enabled<br/>(New) |
| TLSAdherence <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)|  |  | Enabled<br/>(New)| Enabled<br/>(New) |
| VSphereMultiVCenterDay2 <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)|  |  |  |   |


### Rebuilt images without code change

* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [5e33c228](https://github.com/openshift/apiserver-network-proxy/commit/5e33c22867d59ddd9392a2c6b3194d2f3c6bdfc7) `sha256:be5884612f23f77260ec7cb06e9b11feb9afdcdd450249efe9d3cde4f52ef208`
* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [2d7aa679](https://github.com/openshift/cluster-api-provider-aws/commit/2d7aa679a7847b8831f4a14e84154170d33574ed) `sha256:dfbca2049e9083c8bae6af71c06c12a81b5d5812ae75390f3c3c27078e072c48`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [19e7b623](https://github.com/openshift/aws-encryption-provider/commit/19e7b623429799c9c549690a1b5ab499844411f9) `sha256:96ce4b08dcdd6ecf14ed6d81cc1fe9e6f2ba6ec29157bf6eaa46512414660262`
* [aws-node-termination-handler](https://github.com/openshift/aws-node-termination-handler) git [341ed3a0](https://github.com/openshift/aws-node-termination-handler/commit/341ed3a086925b17671c5349343fedf988a1139e) `sha256:85dcd06441580bbd06566eef1b3349ab6766ddd8a17acd0772b83529d6be6235`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [82088287](https://github.com/openshift/aws-pod-identity-webhook/commit/8208828799b6c4f91fd9b80128668f7765599e84) `sha256:5621592f077a22ce2e68d909d87f1d787e807de0da93769fb9cbfa827df93ade`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [950b1622](https://github.com/openshift/azure-disk-csi-driver/commit/950b1622c43e9c41a38354efb7bfa0d2aba50cdb) `sha256:96fdc6785efd91ef99684efba0e8e083d2026419aaa1b7929c5c8806ec5ba5c6`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [c481e92b](https://github.com/openshift/azure-file-csi-driver/commit/c481e92ba74550bbd3134a9ae92ccef31de7f60c) `sha256:3656edaa087aef5cb3ad9cd17e6890d1f5858b00caa093dc4eff995718533d84`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [99b9a3a3](https://github.com/openshift/azure-kubernetes-kms/commit/99b9a3a33d8edfd0a2d2876aa7ef1382b2c75a39) `sha256:8b22b0345bde38532a44b07024fe1227072b797f75c2d2c75d1a923167bcd87e`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [17e57462](https://github.com/openshift/azure-service-operator/commit/17e574628ee7ef8aa694cfc0ab5e5232b651fbf8) `sha256:24364d3f9f279310b7be5faffdb0cdce3e1f3d30d8a3978678b91cdd3ba22daa`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [ad4eb8a5](https://github.com/openshift/cluster-api-provider-metal3/commit/ad4eb8a5e67dc08c0686f006641847df4370d599) `sha256:3bcb904acf643f47ed015109ed2726b977c7a0f5009ffce5e4d5a8f93c4e5471`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [eeac6ba8](https://github.com/openshift/cluster-samples-operator/commit/eeac6ba8ddbe5cc6d3a403293581648affdf6566) `sha256:4af772f2d10f743c56c8ffe499a85feb46471dd0d6cfa3fc709211c813c4bf0e`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [94e41c4c](https://github.com/openshift/configmap-reload/commit/94e41c4c6a5832dfd19750173d6544784ba235ec) `sha256:6abd8367f896c87f7c2faf0050abd37e79ee78064a1c45685a870ae31cd5295c`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:03c1db34d01b52af267b9d9d19fd52b01bcba44b048052c58f7ba17c17cbfed9`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:655c217eeea44ab6815a485a863ff5dcf090dbacd5815326a68b903492028d94`
* [coredns](https://github.com/openshift/coredns) git [0dded2d2](https://github.com/openshift/coredns/commit/0dded2d232dab43c107b1dab9d0d9fdfd8259622) `sha256:3a379e4dd76603c1c254e3ff704fb40d27851bae2ce96903be9d8f97a67a2e6c`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [fd31b5da](https://github.com/openshift/cloud-provider-openstack/commit/fd31b5da11d75a7a80e7c4a6c7a56acf304e2661) `sha256:9d49b3818ca57936856b5475d39fa1b512c55d076d626c63d590dbb04f098cc6`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [e9f24940](https://github.com/openshift/csi-driver-nfs/commit/e9f249405ad2bced3d1805dd5beda368d7f3d564) `sha256:fb158906bdfec99bcb1461afd9681b42cb7cf3c21c0cb8f69e15c66362254309`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [76523185](https://github.com/openshift/csi-external-snapshot-metadata/commit/7652318579a38838931a5be492cee3573c7c8ecf) `sha256:91c506e0f9feb15a98e1f5bd4685a2fa69d75087cbd2279028e6fcb3dba502f2`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [d1bc3ffa](https://github.com/openshift/csi-external-snapshotter/commit/d1bc3ffaa9759c13a06c2ec61c541342e71bd109) `sha256:cbf2c6fef56d2aa7f2587d0473c4b6bf45073add6a16e097f7c5a400fced8ece`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [4d5e959a](https://github.com/openshift/csi-livenessprobe/commit/4d5e959a182b4db70dc52302bd89eebfec40d5a5) `sha256:ddaf72fc66eebf30a42731362054b4244725ac9b8978f7994bd62fab6f43816c`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [d1bc3ffa](https://github.com/openshift/csi-external-snapshotter/commit/d1bc3ffaa9759c13a06c2ec61c541342e71bd109) `sha256:19539017bee28938ef58efaacdcc12d1a4a68a9c86c4b6b09a756f4bc5b755f4`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [5e0f8d1b](https://github.com/openshift/egress-router-cni/commit/5e0f8d1b545899fda27c5e1cc8707d33cba1b534) `sha256:d8b6f0c189774fa4d736440c2ac2f8766ff9a6e6c457d251556b8f8715e66bbd`
* [etcd](https://github.com/openshift/etcd) git [d8d67b8c](https://github.com/openshift/etcd/commit/d8d67b8ce849f816d6d23c904098336632e2348f) `sha256:24d31e087f2e31e6e6a0fc71e45ed3b48d6c354f110e98cb121334069d08589b`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [37085d52](https://github.com/openshift/cluster-api-provider-gcp/commit/37085d5287031ee68f58b165256d4104bba99886) `sha256:6aa960e90fa17c29b71e5617cd4f90d68e09a86c6979a9d8085e5de01ce07ba8`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [d7675f31](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/d7675f312ffdc8501032ff8217776cd7172b6bb0) `sha256:0a4eb8ac2d6e96bae4b28c7afb8aebbe909a590683d591fbf34a6dfba835ec52`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [d9222a1c](https://github.com/openshift/cloud-provider-ibm/commit/d9222a1c00c37d635da02b65606fde1e54b2ec03) `sha256:d3a09f5bc07ded52ab4b491b590a7cf690b8a04f749dd00989d9a1be66f50ff0`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [0336e638](https://github.com/openshift/ironic-agent-image/commit/0336e6383c98f4f0c6b35c71e00116d3c3160c43) `sha256:17385b04799e448e7940a7f504f9ebbdcb1c251457755062a2b0af5519722ad8`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [9953d2b7](https://github.com/openshift/ironic-rhcos-downloader/commit/9953d2b77da077c28f9486a5d965a43149ce30c1) `sha256:952cf8b9f2860082ab9bdf0c97093267398719b62dc0a61d23f760e69599fe94`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [6fa06eac](https://github.com/openshift/kube-state-metrics/commit/6fa06eac4c3942ba64bff18ca93b5a019ea5c976) `sha256:f95097edd3854278f343316fdf0a128fcfb25998844981260229df4a19c906ea`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [72835e43](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/72835e43c7754356645e41031f3a99926b4d42e6) `sha256:7e1de2d013a2fbd8b49db6d7e4525b5a99df4a462a1cdcee01a9d925f4dcc5f1`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [76dd5a6f](https://github.com/openshift/cloud-provider-kubevirt/commit/76dd5a6fa9e86573bf3dfb79be17edf832e3bae1) `sha256:02f40c7fbccbb0a82518f1e0f44a305299faa60644eb8536d98882b7f8d75371`
* [metallb-frr](https://github.com/openshift/frr) git [5ccdd521](https://github.com/openshift/frr/commit/5ccdd521dd93522575c172dac86d0b6f301fb3ef) `sha256:83e55bc49e74806c5ed5c85c7e29e4663339c7de1f1f19742aaca73475ef0723`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [834a093f](https://github.com/openshift/multus-networkpolicy/commit/834a093f693e521b8dc4ec7168d03cfba2c1cba1) `sha256:b92a9f9e7a40c8e58b6299aa23909a80622ad8bad34d8413f19e2a99bf89be33`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [08af4127](https://github.com/openshift/route-override-cni/commit/08af4127c77976510cad1c096d9aca977d8ae5af) `sha256:a56b45e0f760c3ed3f59c62b8dc4cccf1ac2456b34e102b87e87e1da1ffd74dc`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [d691040e](https://github.com/openshift/whereabouts-cni/commit/d691040e509bb20c26b5e8366c0d6f3bb45a5e02) `sha256:419987b35457cbc16d01951dd69ec7dc51dbae9dc441523711c776980ff56eaf`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [297eeb43](https://github.com/openshift/bond-cni/commit/297eeb4320e07b18d559bc373b665479c760e8c7) `sha256:87656cb61c89f5c90f248d1a64f8cd5677ba00bc84a9bedec3a89166830bb24f`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [5b233ea1](https://github.com/openshift/network-metrics-daemon/commit/5b233ea1d80733c1b00c6bad65dec0620dbf783a) `sha256:09ceb4342916456737d6bcf96a440bdfd168a93168bb716af4f4d003b1af46a2`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [714292f5](https://github.com/openshift/oauth-proxy/commit/714292f5478e6c12da6a31710f72bc8fbe6fb925) `sha256:4dfb03e7326ec4bcd765dd5975b0bfc31b646d9e0a344d96c636dc1ea4ebf8ad`
* [oauth-server](https://github.com/openshift/oauth-server) git [69bdf8bc](https://github.com/openshift/oauth-server/commit/69bdf8bc63e094815d07aa16fc2537df5c045489) `sha256:6be84302bdd01bc2a561dc9e2c8b60b908b91a6246ca6b4ea57848796f379489`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [56aa2d96](https://github.com/openshift/openshift-apiserver/commit/56aa2d96edd725e44ddd7ff13f23e53e6c509828) `sha256:4567865c960b4142a41980205fe2c6aa50b3ee364591a018c8a2cce2241658d8`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [26d20fea](https://github.com/openshift/openshift-controller-manager/commit/26d20feae8892f648f5b06ed3f5492fe6ffb4532) `sha256:8f53e72611d8654fa2789598e5d988784acf4365d962ddd517e978a87faa0692`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [e71e0996](https://github.com/openshift/openshift-state-metrics/commit/e71e09969f11a47c87b87c43b762ad1d01f6b04f) `sha256:6ece2bb3000cee9438efd977050a800e78febd53edcb9a22a7cfe6ca32ab5b1e`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [fd31b5da](https://github.com/openshift/cloud-provider-openstack/commit/fd31b5da11d75a7a80e7c4a6c7a56acf304e2661) `sha256:62f5ae44a5d228cb8c7209217cbd8ba603fb066f4556362b0c0d22c934d54ebd`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [fd31b5da](https://github.com/openshift/cloud-provider-openstack/commit/fd31b5da11d75a7a80e7c4a6c7a56acf304e2661) `sha256:e27c38ab68de3cc111b3ad68f903af54f39c4d736547cdd36b342cd924943013`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [74cb5b08](https://github.com/openshift/cluster-api-provider-openstack/commit/74cb5b085a21fdec9f0f8c5c1dfa3933075fb1dc) `sha256:498353fd8cc7593867cb979d6e32af6749485581fbd0ff9858c20ee054c08b97`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [c4c99a30](https://github.com/openshift/prom-label-proxy/commit/c4c99a3071808f466ee6c3d7b7fa87108b457feb) `sha256:66c6d3360033de50531c47a67bc7c20c3795acae6e6e40be889b7be67785fb92`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [6c4fc012](https://github.com/openshift/node_exporter/commit/6c4fc0126407c8404b8604faa2f1230f385b9f44) `sha256:13bcaec988c8628e82b8d5aff7d133eeec2148d8baae70956c83263324370c20`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [624742d9](https://github.com/openshift/route-controller-manager/commit/624742d93f3a7885cf7f70985f1e23ff60da580d) `sha256:00c438a05846c53d804a0be62b6611e9c358f619ea6c90f52e4f533df1466c96`
* [telemeter](https://github.com/openshift/telemeter) git [d6c7dd49](https://github.com/openshift/telemeter/commit/d6c7dd499f7106df78aa8bfd9dee332121ab2f09) `sha256:01d5de96a4fe0271afc04dd012db3c79a83ba2d70f74cf111b7ceb1ad44b35e7`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [8e176cec](https://github.com/openshift/volume-data-source-validator/commit/8e176cec394709cac728423cbbb6c3c914be8485) `sha256:a9c9b6d890035f80344d7dbad3655566d1a0f364e26ea0544f08afc053a5501d`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [854aeeab](https://github.com/openshift/cloud-provider-vsphere/commit/854aeeabab6301b204efaf041e916847a3b47672) `sha256:033ecec7e50f5bdf39ee7a9f06a78e921a929e20816760760feb4e119119d413`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [f12e5051](https://github.com/openshift/cluster-api-provider-vsphere/commit/f12e50512efa829a2df97c897862c3f45c201300) `sha256:56c74a4ef15814a10b90713c507c315b58b73bac6aa633a375ca5bec8629c57f`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/317031656479ed245cbf4009cbb3fec4e3efd149)

* [MGMT-23141](https://issues.redhat.com/browse/MGMT-23141): Cluster creation returns SQL error rather than API error [#10113](https://github.com/openshift/assisted-service/pull/10113)
* NO-ISSUE: [master] Bump OCP versions: 4.20, 4.18, 4.21, 4.14, 4.17, 4.19, 4.16 [#10120](https://github.com/openshift/assisted-service/pull/10120)
* [MGMT-23340](https://issues.redhat.com/browse/MGMT-23340): upgrade assisted-service postgresql from 13 to 15 [#10096](https://github.com/openshift/assisted-service/pull/10096)
* NO-ISSUE: Replace github.com/golang/mock with go.uber.org/mock [#10082](https://github.com/openshift/assisted-service/pull/10082)
* [OCPBUGS-79576](https://issues.redhat.com/browse/OCPBUGS-79576): Prefer multipath disk in ABI disk selection [#10091](https://github.com/openshift/assisted-service/pull/10091)
* NO-ISSUE: BMAC: replace per-step Update calls with deferred Patch [#10095](https://github.com/openshift/assisted-service/pull/10095)
* [MGMT-22517](https://issues.redhat.com/browse/MGMT-22517): Change amd gpu operator namespace to openshift-amd-gpu [#10007](https://github.com/openshift/assisted-service/pull/10007)
* [MGMT-23228](https://issues.redhat.com/browse/MGMT-23228): Update NFD config for AMD Instinct GPU detection [#9918](https://github.com/openshift/assisted-service/pull/9918)
* [MGMT-23599](https://issues.redhat.com/browse/MGMT-23599): implement cluster and host validations for Kube API mode [#10044](https://github.com/openshift/assisted-service/pull/10044)
* [MGMT-23253](https://issues.redhat.com/browse/MGMT-23253): Reconcile stuck day2 agent status by checking spoke cluster [#10087](https://github.com/openshift/assisted-service/pull/10087)
* NO-ISSUE: clarify error when interface in bond missing [#10022](https://github.com/openshift/assisted-service/pull/10022)
* [MGMT-23060](https://issues.redhat.com/browse/MGMT-23060): Make InfraEnv CpuArchitecture immutable after creation [#9999](https://github.com/openshift/assisted-service/pull/9999)
* [MGMT-23625](https://issues.redhat.com/browse/MGMT-23625): Remove pinned image version for nfd operator [#10045](https://github.com/openshift/assisted-service/pull/10045)
* [MGMT-23231](https://issues.redhat.com/browse/MGMT-23231): Replace AcceleratorProfile with HardwareProfile [#9919](https://github.com/openshift/assisted-service/pull/9919)
* [MGMT-23674](https://issues.redhat.com/browse/MGMT-23674): Remove controller-runtime dependency from api module [#10071](https://github.com/openshift/assisted-service/pull/10071)
* [MGMT-23650](https://issues.redhat.com/browse/MGMT-23650): Disable image policy in assisted service operator deployment [#10070](https://github.com/openshift/assisted-service/pull/10070)
* [MGMT-23300](https://issues.redhat.com/browse/MGMT-23300): Add missing permission for host reclaim pod [#9934](https://github.com/openshift/assisted-service/pull/9934)
* [MGMT-22939](https://issues.redhat.com/browse/MGMT-22939): Fix cache key to get mustgather image [#9940](https://github.com/openshift/assisted-service/pull/9940)
* [OCPBUGS-79470](https://issues.redhat.com/browse/OCPBUGS-79470): Fix multi-document YAML parsing for NMStateConfig [#10053](https://github.com/openshift/assisted-service/pull/10053)
* NO-ISSUE: [master] Bump OCP versions: 4.16, 4.17, 4.19, 4.21, 4.22 [#10054](https://github.com/openshift/assisted-service/pull/10054)
* [AGENT-1426](https://issues.redhat.com/browse/AGENT-1426): Add localhost mirror only when missing in IRI patcher [#10028](https://github.com/openshift/assisted-service/pull/10028)
* [MGMT-23446](https://issues.redhat.com/browse/MGMT-23446): TNA none platform on 4.19 (block for 4.21 and lower) [#10013](https://github.com/openshift/assisted-service/pull/10013)
* [MGMT-23045](https://issues.redhat.com/browse/MGMT-23045): toggle metal3 integration [#9933](https://github.com/openshift/assisted-service/pull/9933)
* [OCPBUGS-78989](https://issues.redhat.com/browse/OCPBUGS-78989): Gate customDeploy on PreprovisioningImage having correct ISO [#10032](https://github.com/openshift/assisted-service/pull/10032)
* [MGMT-23339](https://issues.redhat.com/browse/MGMT-23339): Add url to release image comparison for Kube API versions [#10030](https://github.com/openshift/assisted-service/pull/10030)
* [MGMT-23550](https://issues.redhat.com/browse/MGMT-23550): Add feature usage for new CNI types [#10027](https://github.com/openshift/assisted-service/pull/10027)
* NO-ISSUE: add skipper skill [#10014](https://github.com/openshift/assisted-service/pull/10014)
* [MGMT-23432](https://issues.redhat.com/browse/MGMT-23432): add third parties CNI support to KUBE API mode [#10015](https://github.com/openshift/assisted-service/pull/10015)
* NO-ISSUE: [master] Bump OCP versions: 4.21 [#10023](https://github.com/openshift/assisted-service/pull/10023)
* NO-ISSUE: Add Go workspace files to .gitignore [#10000](https://github.com/openshift/assisted-service/pull/10000)
* [Full changelog](https://github.com/openshift/assisted-service/compare/89897ade71350d6b22ad33d326fcf02fe615dbfd...317031656479ed245cbf4009cbb3fec4e3efd149)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/a9bfcccdade3dec5e6d71dbbc6e03fe137a1660b)

* NO-ISSUE: Refresh RPM lockfiles [#2069](https://github.com/openshift/assisted-installer/pull/2069)
* [MGMT-23545](https://issues.redhat.com/browse/MGMT-23545): Mount pull secret token as a file [#2053](https://github.com/openshift/assisted-installer/pull/2053)
* [MGMT-23191](https://issues.redhat.com/browse/MGMT-23191): Ensure MCO configs are present before rebooting the bootstrap node [#2039](https://github.com/openshift/assisted-installer/pull/2039)
* [MGMT-23664](https://issues.redhat.com/browse/MGMT-23664): CVE-2026-33186 Bump google.golang.org/grpc to v1.79.3 through indirect dependency conversion [#2058](https://github.com/openshift/assisted-installer/pull/2058)
* [OCPBUGS-70213](https://issues.redhat.com/browse/OCPBUGS-70213): fix: allow workers to join TNA cluster when 1 master + arbiter are ready [#2056](https://github.com/openshift/assisted-installer/pull/2056)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/c3de39046aa6aaf9bbb531c7ad3cfd82b97a396b...a9bfcccdade3dec5e6d71dbbc6e03fe137a1660b)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/008935c33fb03bb246c22f8873da7599ec30aa2c)

* [MGMT-23517](https://issues.redhat.com/browse/MGMT-23517): Bump go modules [#1373](https://github.com/openshift/assisted-installer-agent/pull/1373)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/dd12f4a8b403cb33f7b3974ddc06cc73f4804b91...008935c33fb03bb246c22f8873da7599ec30aa2c)


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/8e2d5e172521d686997b70b8c70df06e71a7254e)

* chore(deps): update konflux references (#3561) [#3561](https://github.com/openshift-assisted/assisted-installer-ui/pull/3561)
* chore(deps): update module golang.org/x/sys to v0.43.0 (#3492) [#3492](https://github.com/openshift-assisted/assisted-installer-ui/pull/3492)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1775724628 (#3560) [#3560](https://github.com/openshift-assisted/assisted-installer-ui/pull/3560)
* chore(deps): update dependency qs to v6.15.1 (#3559) [#3559](https://github.com/openshift-assisted/assisted-installer-ui/pull/3559)
* chore(deps): update dependency @redhat-cloud-services/eslint-config-redhat-cloud-services to v3 (#3539) [#3539](https://github.com/openshift-assisted/assisted-installer-ui/pull/3539)
* chore(deps): update dependency msw to v2 (#3557) [#3557](https://github.com/openshift-assisted/assisted-installer-ui/pull/3557)
* chore(deps): update dependency concurrently to v9 (#3554) [#3554](https://github.com/openshift-assisted/assisted-installer-ui/pull/3554)
* chore(deps): update dependency @openapitools/openapi-generator-cli to v2.31.1 (#3534) [#3534](https://github.com/openshift-assisted/assisted-installer-ui/pull/3534)
* chore(deps): update dependency typescript to v5.9.3 (#3489) [#3489](https://github.com/openshift-assisted/assisted-installer-ui/pull/3489)
* chore(deps): update dependency @types/node to v24 (#3543) [#3543](https://github.com/openshift-assisted/assisted-installer-ui/pull/3543)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1775651161 (#3548) [#3548](https://github.com/openshift-assisted/assisted-installer-ui/pull/3548)
* chore(deps): update dependency i18next-parser to v9 (#3556) [#3556](https://github.com/openshift-assisted/assisted-installer-ui/pull/3556)
* Bump basic-ftp from 5.2.0 to 5.2.1 (#3552) [#3552](https://github.com/openshift-assisted/assisted-installer-ui/pull/3552)
* chore(deps): update dependency axios to v1.15.0 (#3551) [#3551](https://github.com/openshift-assisted/assisted-installer-ui/pull/3551)
* chore(deps): update dependency @redhat-cloud-services/frontend-components to v7.3.0 (#3550) [#3550](https://github.com/openshift-assisted/assisted-installer-ui/pull/3550)
* [MGMT-23313](https://issues.redhat.com/browse/MGMT-23313): long text breaks table layout (#3545) [#3545](https://github.com/openshift-assisted/assisted-installer-ui/pull/3545)
* Bump vite from 5.4.21 to 6.4.2 (#3547) [#3547](https://github.com/openshift-assisted/assisted-installer-ui/pull/3547)
* chore(deps): update dependency eslint-plugin-import to v2.32.0 (#3475) [#3475](https://github.com/openshift-assisted/assisted-installer-ui/pull/3475)
* fix(deps): update dependency monaco-editor to v0.55.1 (#3505) [#3505](https://github.com/openshift-assisted/assisted-installer-ui/pull/3505)
* fix(deps): update dependency cypress to v13.17.0 (#3500) [#3500](https://github.com/openshift-assisted/assisted-installer-ui/pull/3500)
* fix(deps): update dependency react-monaco-editor to v0.59.0 (#3537) [#3537](https://github.com/openshift-assisted/assisted-installer-ui/pull/3537)
* chore(deps): update dependency dpdm to v3.15.1 (#3473) [#3473](https://github.com/openshift-assisted/assisted-installer-ui/pull/3473)
* chore(deps): update dependency @redhat-cloud-services/frontend-components-config to v6.8.3 (#3471) [#3471](https://github.com/openshift-assisted/assisted-installer-ui/pull/3471)
* chore(deps): update dependency axios to v1.14.0 (#3536) [#3536](https://github.com/openshift-assisted/assisted-installer-ui/pull/3536)
* chore(deps): update dependency @types/eslint to v9 (#3541) [#3541](https://github.com/openshift-assisted/assisted-installer-ui/pull/3541)
* Updating assisted-installer-ui-container image to be consistent with ART for 4.22 (#3340) [#3340](https://github.com/openshift-assisted/assisted-installer-ui/pull/3340)
* chore(deps): update lodash monorepo to v4.18.1 (#3538) [#3538](https://github.com/openshift-assisted/assisted-installer-ui/pull/3538)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1775042950 (#3533) [#3533](https://github.com/openshift-assisted/assisted-installer-ui/pull/3533)
* chore(deps): update dependency eslint-plugin-react to v7.37.5 (#3476) [#3476](https://github.com/openshift-assisted/assisted-installer-ui/pull/3476)
* Bump @xmldom/xmldom from 0.8.10 to 0.8.12 (#3532) [#3532](https://github.com/openshift-assisted/assisted-installer-ui/pull/3532)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1774968108 (#3531) [#3531](https://github.com/openshift-assisted/assisted-installer-ui/pull/3531)
* Upgrade @openshift-console/dynamic-plugin/sdk (#3522) [#3522](https://github.com/openshift-assisted/assisted-installer-ui/pull/3522)
* Update translation files (#3524) [#3524](https://github.com/openshift-assisted/assisted-installer-ui/pull/3524)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1774618347 (#3519) [#3519](https://github.com/openshift-assisted/assisted-installer-ui/pull/3519)
* Add support for release branches in PR workflow (#3527) [#3527](https://github.com/openshift-assisted/assisted-installer-ui/pull/3527)
* chore(deps): update dependency @redhat-cloud-services/tsc-transform-imports to v1.0.57 (#3407) [#3407](https://github.com/openshift-assisted/assisted-installer-ui/pull/3407)
* Add feature branch to pull request workflow (#3520) [#3520](https://github.com/openshift-assisted/assisted-installer-ui/pull/3520)
* NO-ISSUE: Add cursor rules (#3515) [#3515](https://github.com/openshift-assisted/assisted-installer-ui/pull/3515)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.7-1774499506 (#3494) [#3494](https://github.com/openshift-assisted/assisted-installer-ui/pull/3494)
* fix(deps): update module github.com/sirupsen/logrus to v1.9.4 (#3441) [#3441](https://github.com/openshift-assisted/assisted-installer-ui/pull/3441)
* Revert abi abov the sea new flow (#3517) [#3517](https://github.com/openshift-assisted/assisted-installer-ui/pull/3517)
* Bump happy-dom from 20.0.2 to 20.8.9 (#3516) [#3516](https://github.com/openshift-assisted/assisted-installer-ui/pull/3516)
* chore(deps): update dependency swr to v2.4.1 (#3486) [#3486](https://github.com/openshift-assisted/assisted-installer-ui/pull/3486)
* Bump node-forge from 1.3.3 to 1.4.0 (#3513) [#3513](https://github.com/openshift-assisted/assisted-installer-ui/pull/3513)
* chore(deps): update konflux references (#3514) [#3514](https://github.com/openshift-assisted/assisted-installer-ui/pull/3514)
* Bump picomatch from 2.3.1 to 2.3.2 (#3507) [#3507](https://github.com/openshift-assisted/assisted-installer-ui/pull/3507)
* Bump brace-expansion from 1.1.11 to 1.1.13 (#3512) [#3512](https://github.com/openshift-assisted/assisted-installer-ui/pull/3512)
* add pull secret auto populate logic to ABI local UI (#3508) [#3508](https://github.com/openshift-assisted/assisted-installer-ui/pull/3508)
* chore(deps): update dependency tslib to v2.8.1 (#3487) [#3487](https://github.com/openshift-assisted/assisted-installer-ui/pull/3487)
* populate default values in local ui from infraEnv (#3502) [#3502](https://github.com/openshift-assisted/assisted-installer-ui/pull/3502)
* [MGMT-23648](https://issues.redhat.com/browse/MGMT-23648): Removing the manifests using the toggle (#3498) [#3498](https://github.com/openshift-assisted/assisted-installer-ui/pull/3498)
* Add cursor rules for generated files (#3497) [#3497](https://github.com/openshift-assisted/assisted-installer-ui/pull/3497)
* chore(deps): update konflux references (#3472) [#3472](https://github.com/openshift-assisted/assisted-installer-ui/pull/3472)
* chore(deps): update dependency start-server-and-test to v2.1.5 (#3484) [#3484](https://github.com/openshift-assisted/assisted-installer-ui/pull/3484)
* Set customManifestsUpdated when users remove a manifest (#3482) [#3482](https://github.com/openshift-assisted/assisted-installer-ui/pull/3482)
* Red Hat Konflux update assisted-ui-chatbot-saas-main (#3478) [#3478](https://github.com/openshift-assisted/assisted-installer-ui/pull/3478)
* [MGMT-23515](https://issues.redhat.com/browse/MGMT-23515): Use Network type support level (#3465) [#3465](https://github.com/openshift-assisted/assisted-installer-ui/pull/3465)
* Red Hat Konflux purge assisted-installer-chatbot-main (#3477) [#3477](https://github.com/openshift-assisted/assisted-installer-ui/pull/3477)
* fix(deps): update dependency @patternfly/react-core to v6.4.1 (#3438) [#3438](https://github.com/openshift-assisted/assisted-installer-ui/pull/3438)
* chore(deps): update dependency nodemon to v3.1.14 (#3435) [#3435](https://github.com/openshift-assisted/assisted-installer-ui/pull/3435)
* chore(deps): update dependency @vitejs/plugin-react-swc to v3.11.0 (#3444) [#3444](https://github.com/openshift-assisted/assisted-installer-ui/pull/3444)
* chore(deps): update dependency @openapitools/openapi-generator-cli to v2.30.2 (#3442) [#3442](https://github.com/openshift-assisted/assisted-installer-ui/pull/3442)
* chore(deps): update dependency @redhat-cloud-services/frontend-components to v7.1.1 (#3470) [#3470](https://github.com/openshift-assisted/assisted-installer-ui/pull/3470)
* fix(deps): update dependency @patternfly/react-code-editor to v6.4.1 (#3437) [#3437](https://github.com/openshift-assisted/assisted-installer-ui/pull/3437)
* fix(deps): update dependency @patternfly/react-table to v6.4.1 (#3440) [#3440](https://github.com/openshift-assisted/assisted-installer-ui/pull/3440)
* chore(deps): update dependency @redhat-cloud-services/frontend-components-config to v6.7.54 (#3406) [#3406](https://github.com/openshift-assisted/assisted-installer-ui/pull/3406)
* chore(deps): update dependency @sentry/browser to v7.120.4 (#3443) [#3443](https://github.com/openshift-assisted/assisted-installer-ui/pull/3443)
* chore(deps): update dependency eslint to v8.57.1 (#3432) [#3432](https://github.com/openshift-assisted/assisted-installer-ui/pull/3432)
* chore(deps): update dependency axios to v1.13.6 (#3431) [#3431](https://github.com/openshift-assisted/assisted-installer-ui/pull/3431)
* chore(deps): update dependency @types/node to v18.19.130 (#3429) [#3429](https://github.com/openshift-assisted/assisted-installer-ui/pull/3429)
* chore(deps): update dependency @types/lodash to v4.17.24 (#3428) [#3428](https://github.com/openshift-assisted/assisted-installer-ui/pull/3428)
* Bump ajv from 6.12.6 to 6.14.0 (#3411) [#3411](https://github.com/openshift-assisted/assisted-installer-ui/pull/3411)
* chore(deps): update dependency prettier to v2.8.8 (#3436) [#3436](https://github.com/openshift-assisted/assisted-installer-ui/pull/3436)
* chore(deps): update dependency msw to v1.3.5 (#3434) [#3434](https://github.com/openshift-assisted/assisted-installer-ui/pull/3434)
* chore(deps): update dependency eslint-config-prettier to v8.10.2 (#3433) [#3433](https://github.com/openshift-assisted/assisted-installer-ui/pull/3433)
* chore(deps): update dependency @types/react-redux to v7.1.34 (#3430) [#3430](https://github.com/openshift-assisted/assisted-installer-ui/pull/3430)
* chore(deps): update dependency @types/eslint to v8.56.12 (#3427) [#3427](https://github.com/openshift-assisted/assisted-installer-ui/pull/3427)
* chore(deps): update dependency @tsconfig/recommended to v1.0.13 (#3426) [#3426](https://github.com/openshift-assisted/assisted-installer-ui/pull/3426)
* Bump flatted from 3.3.1 to 3.4.2 (#3469) [#3469](https://github.com/openshift-assisted/assisted-installer-ui/pull/3469)
* fix validations for NTP and Proxy in above sea level ABI flow (#3464) [#3464](https://github.com/openshift-assisted/assisted-installer-ui/pull/3464)
* Add identifiers and checked state attribute to custom manifests switch (#3466) [#3466](https://github.com/openshift-assisted/assisted-installer-ui/pull/3466)
* [MGMT-23516](https://issues.redhat.com/browse/MGMT-23516): Left navigation menu is cut off (#3463) [#3463](https://github.com/openshift-assisted/assisted-installer-ui/pull/3463)
* UI doesnt save the data filled by the user (#3452) [#3452](https://github.com/openshift-assisted/assisted-installer-ui/pull/3452)
* fix ISO file name (#3462) [#3462](https://github.com/openshift-assisted/assisted-installer-ui/pull/3462)
* Tech Preview badge should appear at the end of the line (#3461) [#3461](https://github.com/openshift-assisted/assisted-installer-ui/pull/3461)
* [AGENT-1136](https://issues.redhat.com/browse/AGENT-1136): Add USER_AUTH_TOKEN support to disconnected UI proxy (#3454) [#3454](https://github.com/openshift-assisted/assisted-installer-ui/pull/3454)
* Bump rollup from 4.50.1 to 4.59.0 (#3421) [#3421](https://github.com/openshift-assisted/assisted-installer-ui/pull/3421)
* Bump immutable from 3.8.2 to 3.8.3 (#3451) [#3451](https://github.com/openshift-assisted/assisted-installer-ui/pull/3451)
* [MGMT-23131](https://issues.redhat.com/browse/MGMT-23131): Third-Party CNI Support (#3457) [#3457](https://github.com/openshift-assisted/assisted-installer-ui/pull/3457)
* Fix CVE-2026-27904: Bumping minimatch to latest versions via yarn resolutions (#3459) [#3459](https://github.com/openshift-assisted/assisted-installer-ui/pull/3459)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/70dbabf479a18b773c110dd33fb917c3afbf9df3...8e2d5e172521d686997b70b8c70df06e71a7254e)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/0df8de22b48eddb3bee026619b43ee582d07ce04)

* NO-JIRA: enable xtrace in build-ove-image.sh for debugging [#281](https://github.com/openshift/agent-installer-utils/pull/281)
* [OCPBUGS-81585](https://issues.redhat.com/browse/OCPBUGS-81585): Update operator versions [#280](https://github.com/openshift/agent-installer-utils/pull/280)
* NO-JIRA: Pass environment through to podman [#279](https://github.com/openshift/agent-installer-utils/pull/279)
* [AGENT-1429](https://issues.redhat.com/browse/AGENT-1429): Pass OPENSHIFT_INSTALL_EXPERIMENTAL_DISABLE_IMAGE_POLICY [#278](https://github.com/openshift/agent-installer-utils/pull/278)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/ee5dfd4813f6f9e5219e97109d8f2ce7b8612512...0df8de22b48eddb3bee026619b43ee582d07ce04)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/e73d6a3821655afc6fb19d88a66907078e6854f2)

* [OCPCLOUD-3215](https://issues.redhat.com/browse/OCPCLOUD-3215): Add support for dual networking stack services [#135](https://github.com/openshift/cloud-provider-aws/pull/135)
* [OCPBUGS-69888](https://issues.redhat.com/browse/OCPBUGS-69888), [OCPBUGS-76344](https://issues.redhat.com/browse/OCPBUGS-76344), [OCPCLOUD-3276](https://issues.redhat.com/browse/OCPCLOUD-3276): Merge https://github.com/kubernetes/cloud-provider-aws:master (ea961d6) into main [#131](https://github.com/openshift/cloud-provider-aws/pull/131)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/33c8f09d5d216038b9905ac9cf64e3f31e8fe70c...e73d6a3821655afc6fb19d88a66907078e6854f2)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/0927af1c1397b6f3c7545c715e1a87e0263ae2bf)

* [TRT-2576](https://issues.redhat.com/browse/TRT-2576): Revert #301 "STOR-2766: Rebase to upstream v1.55.0 for OCP 4.22" [#303](https://github.com/openshift/aws-ebs-csi-driver/pull/303)
* [STOR-2766](https://issues.redhat.com/browse/STOR-2766): Rebase to upstream v1.55.0 for OCP 4.22 [#301](https://github.com/openshift/aws-ebs-csi-driver/pull/301)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/e3a53930433bc6deec4e550b413b3693ecdf5ad3...0927af1c1397b6f3c7545c715e1a87e0263ae2bf)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/8253452c39841b626cedd0b42dc0449943ccf938)

* [OCPBUGS-78291](https://issues.redhat.com/browse/OCPBUGS-78291): Allow azure-disk sidecars to read VolumeAttributeClasses [#525](https://github.com/openshift/csi-operator/pull/525)
* [STOR-2762](https://issues.redhat.com/browse/STOR-2762): Bump all deps for 4.22 [#526](https://github.com/openshift/csi-operator/pull/526)
* [OCPBUGS-77674](https://issues.redhat.com/browse/OCPBUGS-77674): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.22 [#516](https://github.com/openshift/csi-operator/pull/516)
* [OCPBUGS-77553](https://issues.redhat.com/browse/OCPBUGS-77553): Updating csi-driver-manila-operator-container image to be consistent with ART for 4.22 [#513](https://github.com/openshift/csi-operator/pull/513)
* [OCPBUGS-77612](https://issues.redhat.com/browse/OCPBUGS-77612): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.22 [#514](https://github.com/openshift/csi-operator/pull/514)
* [STOR-2884](https://issues.redhat.com/browse/STOR-2884): Add service to generate a TLS cert for EFS operator [#522](https://github.com/openshift/csi-operator/pull/522)
* [STOR-2884](https://issues.redhat.com/browse/STOR-2884): Add service to generate a TLS cert for SMB operator [#520](https://github.com/openshift/csi-operator/pull/520)
* NO-JIRA: Inherit any OpenShift global CodeRabbit setting [#519](https://github.com/openshift/csi-operator/pull/519)
* [Full changelog](https://github.com/openshift/csi-operator/compare/a682e87aa633e69060d948a8f26bf4ef8c95472b...8253452c39841b626cedd0b42dc0449943ccf938)


### [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws/tree/f0be9c72e5bf25caeb2ca45c14e67e4d397a52cb)

* [AUTOSCALE-485](https://issues.redhat.com/browse/AUTOSCALE-485): rebase to 1.9.0 [#26](https://github.com/openshift/aws-karpenter-provider-aws/pull/26)
* [Full changelog](https://github.com/openshift/aws-karpenter-provider-aws/compare/2e871ee4d207e654f3f2fa05cbf16802f498ad6d...f0be9c72e5bf25caeb2ca45c14e67e4d397a52cb)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/37a067230cbad4997dcf1d2c16685e36b6991c9e)

* [SPLAT-2627](https://issues.redhat.com/browse/SPLAT-2627): Created OTE Tests for dedicated hosts [#174](https://github.com/openshift/machine-api-provider-aws/pull/174)
* [SPLAT-2700](https://issues.redhat.com/browse/SPLAT-2700): Added shared tags for BYO DH [#181](https://github.com/openshift/machine-api-provider-aws/pull/181)
* [OCPCLOUD-3283](https://issues.redhat.com/browse/OCPCLOUD-3283): K8s 1.35 bump [#179](https://github.com/openshift/machine-api-provider-aws/pull/179)
* [CORS-4166](https://issues.redhat.com/browse/CORS-4166): enable IPv6 IMDS endpoint and private DNS configuration for dualstack [#177](https://github.com/openshift/machine-api-provider-aws/pull/177)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/0dd849f8b9f7d4c8950dfe4086357dee483308a2...37a067230cbad4997dcf1d2c16685e36b6991c9e)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/4c7a764630c621d5e1700649fc056800d35bb6d1)

* [OCPCLOUD-3281](https://issues.redhat.com/browse/OCPCLOUD-3281): Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (314ccf1) into main [#155](https://github.com/openshift/cloud-provider-azure/pull/155)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/8584b9a8eee4464d72cc3c176d33885e098dda0c...4c7a764630c621d5e1700649fc056800d35bb6d1)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/de16e88406265ae154e18bc06e973579ef249cfa)

* [OCPCLOUD-3294](https://issues.redhat.com/browse/OCPCLOUD-3294): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.23.0 (ac446a1) into main [#371](https://github.com/openshift/cluster-api-provider-azure/pull/371)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/104ebbd2ba141dbeea63d6533004d6a9ac8437cf...de16e88406265ae154e18bc06e973579ef249cfa)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/69d049094ee36ad9c706d65694a8cd42e9a64800)

* [OCPCLOUD-3280](https://issues.redhat.com/browse/OCPCLOUD-3280): Bump k8s 1.35 [#189](https://github.com/openshift/machine-api-provider-azure/pull/189)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/178e7d8a482261b7cfb09019deffa55cefe6ec1d...69d049094ee36ad9c706d65694a8cd42e9a64800)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/81a256e668a054385d4a27a393afd77148f268b0)

* [CCO-785](https://issues.redhat.com/browse/CCO-785): add flag to configure TLS cipher suites [#44](https://github.com/openshift/azure-workload-identity/pull/44)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/d71abde3bdf99ca81d7bc032a0c23f3468e1b37c...81a256e668a054385d4a27a393afd77148f268b0)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/522ca80af1c4472ca9a5c1cf1b57a58f35f60483)

* [CORS-3900](https://issues.redhat.com/browse/CORS-3900): Add IPv6 frontend IP configurations for dual-stack [#10328](https://github.com/openshift/installer/pull/10328)
* [MCO-2135](https://issues.redhat.com/browse/MCO-2135): Label Machines, MachineSets, and ControlPaneMachineSets with OSStream labels [#10426](https://github.com/openshift/installer/pull/10426)
* [OCPBUGS-81509](https://issues.redhat.com/browse/OCPBUGS-81509): fix ASO CRD duplication [#10451](https://github.com/openshift/installer/pull/10451)
* [OCPBUGS-76468](https://issues.redhat.com/browse/OCPBUGS-76468): PowerVS:: SSH key must be RSA [#10289](https://github.com/openshift/installer/pull/10289)
* no-jira: PowerVS: add mjturek and hamzy to approvers list [#10483](https://github.com/openshift/installer/pull/10483)
* [OCPEDGE-2072](https://issues.redhat.com/browse/OCPEDGE-2072): bump(ocp/api): pull in latest for DualReplica promotion [#10471](https://github.com/openshift/installer/pull/10471)
* [OCPBUGS-77830](https://issues.redhat.com/browse/OCPBUGS-77830): skip redirect when validating endpoint accessibility [#10360](https://github.com/openshift/installer/pull/10360)
* [OCPBUGS-81622](https://issues.redhat.com/browse/OCPBUGS-81622): Collect bootstrap service records in agent-gather [#10457](https://github.com/openshift/installer/pull/10457)
* [AGENT-1448](https://issues.redhat.com/browse/AGENT-1448): Add IRI registry authentication support [#10389](https://github.com/openshift/installer/pull/10389)
* [OCPBUGS-81635](https://issues.redhat.com/browse/OCPBUGS-81635): AWS: Increase cluster bootstrap timeout with userProvisioned DNS [#10459](https://github.com/openshift/installer/pull/10459)
* [CORS-4373](https://issues.redhat.com/browse/CORS-4373): Remove checks for AzureClusterHostedDNSInstall featuregate [#10455](https://github.com/openshift/installer/pull/10455)
* [CORS-4316](https://issues.redhat.com/browse/CORS-4316): Update the Installer GCP UPI documentation. [#10235](https://github.com/openshift/installer/pull/10235)
* [OCPBUGS-81309](https://issues.redhat.com/browse/OCPBUGS-81309): Fix vSphere with static IPs on TPNU [#10442](https://github.com/openshift/installer/pull/10442)
* [OCPBUGS-79542](https://issues.redhat.com/browse/OCPBUGS-79542): Mount pullsecret manifest to UI container [#10411](https://github.com/openshift/installer/pull/10411)
* [OCPBUGS-81470](https://issues.redhat.com/browse/OCPBUGS-81470): Restart sshd after applying node-image to bootstrap [#10452](https://github.com/openshift/installer/pull/10452)
* [OCPBUGS-37587](https://issues.redhat.com/browse/OCPBUGS-37587): Sign blob container using user delegated creds [#9851](https://github.com/openshift/installer/pull/9851)
* [SPLAT-2622](https://issues.redhat.com/browse/SPLAT-2622): Bump govmomi to v0.53.0 [#10431](https://github.com/openshift/installer/pull/10431)
* [OCPBUGS-78935](https://issues.redhat.com/browse/OCPBUGS-78935): Fix bootstrap VM on non-x86 platforms [#10419](https://github.com/openshift/installer/pull/10419)
* [CORS-4352](https://issues.redhat.com/browse/CORS-4352): aws: validations to ensure install-config is valid for dualstack install [#10380](https://github.com/openshift/installer/pull/10380)
* [OCPBUGS-74528](https://issues.redhat.com/browse/OCPBUGS-74528): upkeep: remove tna feature gate [#10403](https://github.com/openshift/installer/pull/10403)
* NO-JIRA: Add Ella, Daniel to openstack-reviewers [#10434](https://github.com/openshift/installer/pull/10434)
* [CORS-4324](https://issues.redhat.com/browse/CORS-4324): Update default release image to 4.22 [#10429](https://github.com/openshift/installer/pull/10429)
* [OCPBUGS-78589](https://issues.redhat.com/browse/OCPBUGS-78589): baremetal: add serial console logging for bootstrap VM [#10400](https://github.com/openshift/installer/pull/10400)
* [CORS-4359](https://issues.redhat.com/browse/CORS-4359): feature gate install into EU Sovereign Cloud [#10412](https://github.com/openshift/installer/pull/10412)
* [OCPBUGS-59514](https://issues.redhat.com/browse/OCPBUGS-59514): redacted install config for baremetal [#9972](https://github.com/openshift/installer/pull/9972)
* [AGENT-1461](https://issues.redhat.com/browse/AGENT-1461): Do not discard NMStateConfig when agent-config is on disk for unconfigured-ignition [#10393](https://github.com/openshift/installer/pull/10393)
* [AGENT-1471](https://issues.redhat.com/browse/AGENT-1471): Fix race condition: wait for agent-register-infraenv before showing UI URL [#10422](https://github.com/openshift/installer/pull/10422)
* [MCO-2116](https://issues.redhat.com/browse/MCO-2116): Generate OSImageStream manifest [#10357](https://github.com/openshift/installer/pull/10357)
* [AGENT-1136](https://issues.redhat.com/browse/AGENT-1136), [AGENT-1229](https://issues.redhat.com/browse/AGENT-1229): Add auth to unconfigured-ignition [#10381](https://github.com/openshift/installer/pull/10381)
* [SPLAT-2172](https://issues.redhat.com/browse/SPLAT-2172): AWS dedicate host support [#10079](https://github.com/openshift/installer/pull/10079)
* [MCO-2133](https://issues.redhat.com/browse/MCO-2133): Select bootimages based on OSImageStream [#10321](https://github.com/openshift/installer/pull/10321)
* [CORS-4336](https://issues.redhat.com/browse/CORS-4336): Support for AWS European Sovereign Cloud [#10303](https://github.com/openshift/installer/pull/10303)
* [OCPBUGS-74390](https://issues.redhat.com/browse/OCPBUGS-74390): Allow all instance types in the install config for GCP [#10271](https://github.com/openshift/installer/pull/10271)
* no-jira: fix SC2328 shellcheck errors [#10413](https://github.com/openshift/installer/pull/10413)
* [AGENT-1458](https://issues.redhat.com/browse/AGENT-1458): Don't auto-calculate RendezvousIP in unconfigured-ignition [#10405](https://github.com/openshift/installer/pull/10405)
* [CORS-4358](https://issues.redhat.com/browse/CORS-4358): aws: add ICMPv6 ingress rule for dual-stack clusters [#10408](https://github.com/openshift/installer/pull/10408)
* [CORS-4235](https://issues.redhat.com/browse/CORS-4235): Machine Management API Field & Feature Gate [#10402](https://github.com/openshift/installer/pull/10402)
* no-jira: bump golangci-lint to v2.10.1 for Go 1.25 support [#10397](https://github.com/openshift/installer/pull/10397)
* [OCPBUGS-57603](https://issues.redhat.com/browse/OCPBUGS-57603): Disallow cross subscription encryption sets [#10335](https://github.com/openshift/installer/pull/10335)
* [OCPBUGS-64842](https://issues.redhat.com/browse/OCPBUGS-64842): Disable LoadBalancer in cloud config when Octavia is unavailable [#10326](https://github.com/openshift/installer/pull/10326)
* [CORS-4288](https://issues.redhat.com/browse/CORS-4288): docs(azure): Restructure tested VM families with Series-based organization [#10314](https://github.com/openshift/installer/pull/10314)
* [CORS-4072](https://issues.redhat.com/browse/CORS-4072): dualstack support for AWS [#10353](https://github.com/openshift/installer/pull/10353)
* [CORS-4355](https://issues.redhat.com/browse/CORS-4355): define required permissions for dualstack install [#10371](https://github.com/openshift/installer/pull/10371)
* [CORS-3897](https://issues.redhat.com/browse/CORS-3897): Dual stack support for cluster manifest & VNet [#10319](https://github.com/openshift/installer/pull/10319)
* [CORS-4078](https://issues.redhat.com/browse/CORS-4078): aws: standardize AWS client setup in the destroy code [#10340](https://github.com/openshift/installer/pull/10340)
* [OCPBUGS-75250](https://issues.redhat.com/browse/OCPBUGS-75250): Use correct Project ID with GCP Shared VPC [#10297](https://github.com/openshift/installer/pull/10297)
* [METAL-1668](https://issues.redhat.com/browse/METAL-1668): simplify BMC CA assets [#10243](https://github.com/openshift/installer/pull/10243)
* [METAL-1750](https://issues.redhat.com/browse/METAL-1750): baremetal: use q35 machine type with EFI firmware for bootstrap VM [#10349](https://github.com/openshift/installer/pull/10349)
* [OCPEDGE-2383](https://issues.redhat.com/browse/OCPEDGE-2383): feat: update sno minimum to 4vcpu [#10283](https://github.com/openshift/installer/pull/10283)
* [CNTRLPLANE-2847](https://issues.redhat.com/browse/CNTRLPLANE-2847): bump Go 1.25, openshift/api, and k8s.io dependencies [#10376](https://github.com/openshift/installer/pull/10376)
* [Full changelog](https://github.com/openshift/installer/compare/b9c6f8e365ecd117b5b5a181c8764e797658c719...522ca80af1c4472ca9a5c1cf1b57a58f35f60483)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/8d863b9505a5cfc0b01e33f985a3edf9d3c69f4b)

* [OCPCLOUD-3346](https://issues.redhat.com/browse/OCPCLOUD-3346): Bump deps + Add centralized TLS configuration to Metal3Remediation webhook server [#248](https://github.com/openshift/cluster-api-provider-baremetal/pull/248)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/3ef3a835df89c24d28baee3b0841f4d3e2792e07...8d863b9505a5cfc0b01e33f985a3edf9d3c69f4b)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/c5e5048987427f58d3ca76238537e74bd3175e0f)

* [OCPBUGS-66071](https://issues.redhat.com/browse/OCPBUGS-66071): Fix PPI for ACM [#456](https://github.com/openshift/baremetal-operator/pull/456)
* [OCPBUGS-64617](https://issues.redhat.com/browse/OCPBUGS-64617): Merge upstream [#473](https://github.com/openshift/baremetal-operator/pull/473)
* [METAL-1720](https://issues.redhat.com/browse/METAL-1720): Merge upstream [#467](https://github.com/openshift/baremetal-operator/pull/467)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/b659d2f783b4f78e4483322d377f40dfc62d4955...c5e5048987427f58d3ca76238537e74bd3175e0f)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/dca8cb1be0cce1ce404dfd407ead1326a3c8bb40)

* [OPNET-709](https://issues.redhat.com/browse/OPNET-709): Migrate from iptables to nftables [#387](https://github.com/openshift/baremetal-runtimecfg/pull/387)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/4215243a628dc74624416ab46f7ebc8b93404a38...dca8cb1be0cce1ce404dfd407ead1326a3c8bb40)


### [cli, deployer, tools](https://github.com/openshift/oc/tree/1c7b857603ca5af8c2941cf1e242db6cd2a7596e)

* [OCPBUGS-77845](https://issues.redhat.com/browse/OCPBUGS-77845): Fix extraction of gated manifests using --install-config [#2249](https://github.com/openshift/oc/pull/2249)
* NO-ISSUE: recover the context in upgrade [#2248](https://github.com/openshift/oc/pull/2248)
* NO-JIRA: claude: Turn pr-review skill into code-reviewer agent [#2245](https://github.com/openshift/oc/pull/2245)
* [OCPBUGS-59311](https://issues.redhat.com/browse/OCPBUGS-59311): must-gather: Handle signals properly [#2237](https://github.com/openshift/oc/pull/2237)
* [OTA-1548](https://issues.redhat.com/browse/OTA-1548): set up accepted risks [#2170](https://github.com/openshift/oc/pull/2170)
* [MCO-1961](https://issues.redhat.com/browse/MCO-1961): Allow multiple machine-os versions [#2157](https://github.com/openshift/oc/pull/2157)
* Revert "TRT-2587: Revert #2219 "CNTRLPLANE-2769: Bump k8s dependencies to 1.35"" [#2241](https://github.com/openshift/oc/pull/2241)
* [TRT-2587](https://issues.redhat.com/browse/TRT-2587): Revert #2219 "CNTRLPLANE-2769: Bump k8s dependencies to 1.35" [#2236](https://github.com/openshift/oc/pull/2236)
* [TRT-2585](https://issues.redhat.com/browse/TRT-2585): pkg/cli/admin/release/extract: Support zero-output extraction [#2233](https://github.com/openshift/oc/pull/2233)
* [OCPBUGS-78701](https://issues.redhat.com/browse/OCPBUGS-78701): adm policy add-role-to-user: Fix --dry-run=server [#2231](https://github.com/openshift/oc/pull/2231)
* [OCPBUGS-77845](https://issues.redhat.com/browse/OCPBUGS-77845): Update release extract inclusion to support feature gates and major version [#2222](https://github.com/openshift/oc/pull/2222)
* NO-ISSUE: pkg/cli/admin/release/extract: Read manifests into memory [#2232](https://github.com/openshift/oc/pull/2232)
* NO-JIRA: Add .coderabbit.yaml and AGENTS.md configurations [#2229](https://github.com/openshift/oc/pull/2229)
* [CNTRLPLANE-2769](https://issues.redhat.com/browse/CNTRLPLANE-2769): Bump k8s dependencies to 1.35 [#2219](https://github.com/openshift/oc/pull/2219)
* NO-JIRA:Fixing manifest ci failure [#2228](https://github.com/openshift/oc/pull/2228)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/oc/compare/f7a24ec33be5c7d13ddc96b487969d749bbdac92...1c7b857603ca5af8c2941cf1e242db6cd2a7596e)


### [cli-artifacts](https://github.com/openshift/oc/tree/1c7b857603ca5af8c2941cf1e242db6cd2a7596e)

* [OCPBUGS-77845](https://issues.redhat.com/browse/OCPBUGS-77845): Fix extraction of gated manifests using --install-config [#2249](https://github.com/openshift/oc/pull/2249)
* NO-ISSUE: recover the context in upgrade [#2248](https://github.com/openshift/oc/pull/2248)
* NO-JIRA: claude: Turn pr-review skill into code-reviewer agent [#2245](https://github.com/openshift/oc/pull/2245)
* [OCPBUGS-59311](https://issues.redhat.com/browse/OCPBUGS-59311): must-gather: Handle signals properly [#2237](https://github.com/openshift/oc/pull/2237)
* [OTA-1548](https://issues.redhat.com/browse/OTA-1548): set up accepted risks [#2170](https://github.com/openshift/oc/pull/2170)
* [MCO-1961](https://issues.redhat.com/browse/MCO-1961): Allow multiple machine-os versions [#2157](https://github.com/openshift/oc/pull/2157)
* Revert "TRT-2587: Revert #2219 "CNTRLPLANE-2769: Bump k8s dependencies to 1.35"" [#2241](https://github.com/openshift/oc/pull/2241)
* [TRT-2587](https://issues.redhat.com/browse/TRT-2587): Revert #2219 "CNTRLPLANE-2769: Bump k8s dependencies to 1.35" [#2236](https://github.com/openshift/oc/pull/2236)
* [TRT-2585](https://issues.redhat.com/browse/TRT-2585): pkg/cli/admin/release/extract: Support zero-output extraction [#2233](https://github.com/openshift/oc/pull/2233)
* [OCPBUGS-78701](https://issues.redhat.com/browse/OCPBUGS-78701): adm policy add-role-to-user: Fix --dry-run=server [#2231](https://github.com/openshift/oc/pull/2231)
* [OCPBUGS-77845](https://issues.redhat.com/browse/OCPBUGS-77845): Update release extract inclusion to support feature gates and major version [#2222](https://github.com/openshift/oc/pull/2222)
* NO-ISSUE: pkg/cli/admin/release/extract: Read manifests into memory [#2232](https://github.com/openshift/oc/pull/2232)
* NO-JIRA: Add .coderabbit.yaml and AGENTS.md configurations [#2229](https://github.com/openshift/oc/pull/2229)
* [CNTRLPLANE-2769](https://issues.redhat.com/browse/CNTRLPLANE-2769): Bump k8s dependencies to 1.35 [#2219](https://github.com/openshift/oc/pull/2219)
* NO-JIRA:Fixing manifest ci failure [#2228](https://github.com/openshift/oc/pull/2228)
* [OCPBUGS-64840](https://issues.redhat.com/browse/OCPBUGS-64840): image extract: Use Explicit strategy for ICSP/IDMS [#2202](https://github.com/openshift/oc/pull/2202)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/oc/compare/b0ae763a2b314a0f3643d098fb199de954502583...1c7b857603ca5af8c2941cf1e242db6cd2a7596e)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/00334ea027f0cecf3d79c7c49f0f48a86c6607af)

* [CCO-787](https://issues.redhat.com/browse/CCO-787): use apiserver tls config [#965](https://github.com/openshift/cloud-credential-operator/pull/965)
* [CCO-824](https://issues.redhat.com/browse/CCO-824): feat(gcp): add key-storage-method flag for workload identity providers [#1004](https://github.com/openshift/cloud-credential-operator/pull/1004)
* [CCO-779](https://issues.redhat.com/browse/CCO-779): e2e for removing kube-rbac-proxy container (CCO-779) [#991](https://github.com/openshift/cloud-credential-operator/pull/991)
* [OCPBUGS-81584](https://issues.redhat.com/browse/OCPBUGS-81584): Skip CCO health check test for PowerVS platform [#1006](https://github.com/openshift/cloud-credential-operator/pull/1006)
* [OCPBUGS-81328](https://issues.redhat.com/browse/OCPBUGS-81328): tests-ext: Fix MicroShift gating in CCO tests [#1005](https://github.com/openshift/cloud-credential-operator/pull/1005)
* Revert #978: CCO-738, CCO-739: Set operator condition to Progressing when pod identity webhook pod are updating [#1007](https://github.com/openshift/cloud-credential-operator/pull/1007)
* [CORS-4361](https://issues.redhat.com/browse/CORS-4361): aws: add aws-eusc partition support for OIDC S3 buckets [#995](https://github.com/openshift/cloud-credential-operator/pull/995)
* [CCO-738](https://issues.redhat.com/browse/CCO-738), [CCO-739](https://issues.redhat.com/browse/CCO-739): Set operator condition to Progressing when pod identity webhook pod are updating [#978](https://github.com/openshift/cloud-credential-operator/pull/978)
* [OCPBUGS-79360](https://issues.redhat.com/browse/OCPBUGS-79360): google.golang.org/grpc v1.79.3 [#992](https://github.com/openshift/cloud-credential-operator/pull/992)
* [CCO-788](https://issues.redhat.com/browse/CCO-788): Remove kube-rbac-proxy container from metrics [#983](https://github.com/openshift/cloud-credential-operator/pull/983)
* [OCPBUGS-74627](https://issues.redhat.com/browse/OCPBUGS-74627): Fix infrastructure resource name filtering in watch predicate [#985](https://github.com/openshift/cloud-credential-operator/pull/985)
* [CCO-688](https://issues.redhat.com/browse/CCO-688): test-ext: enable test-extension cases for CI [#984](https://github.com/openshift/cloud-credential-operator/pull/984)
* [CCO-788](https://issues.redhat.com/browse/CCO-788): test-ext: Update extend tests to adapt to CCO-788 [#981](https://github.com/openshift/cloud-credential-operator/pull/981)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/b0297f0a8ab8a2a058cae0a4d1095ad0cda79399...00334ea027f0cecf3d79c7c49f0f48a86c6607af)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/2d69ad953cfaa419e9b6221da9edb152ded91e0b)

* [OCPBUGS-74496](https://issues.redhat.com/browse/OCPBUGS-74496): Add UserAgent to Azure SDK client telemetry options [#208](https://github.com/openshift/cloud-network-config-controller/pull/208)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/6f38237490a1e94ac13a2240caa48457c0a3bfd8...2d69ad953cfaa419e9b6221da9edb152ded91e0b)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/51ea6cdc877f997cc9b376aa26820e8e83d8c1c7)

* [CNTRLPLANE-2625](https://issues.redhat.com/browse/CNTRLPLANE-2625): Add Auth network policy e2e cases [#831](https://github.com/openshift/cluster-authentication-operator/pull/831)
* [OCPBUGS-78403](https://issues.redhat.com/browse/OCPBUGS-78403): Do not return error when an IdP returns 500 during a grant check [#856](https://github.com/openshift/cluster-authentication-operator/pull/856)
* Revert "CNTRLPLANE-2589: Migrate test/e2e-encryption to Ginkgo v2 framework" [#857](https://github.com/openshift/cluster-authentication-operator/pull/857)
* [CNTRLPLANE-2589](https://issues.redhat.com/browse/CNTRLPLANE-2589): Migrate test/e2e-encryption to Ginkgo v2 framework [#839](https://github.com/openshift/cluster-authentication-operator/pull/839)
* NO-JIRA: OWNERS: add everettraven as reviewer/approver add ibihim as approver [#842](https://github.com/openshift/cluster-authentication-operator/pull/842)
* [CNTRLPLANE-2610](https://issues.redhat.com/browse/CNTRLPLANE-2610): Create network policies for AUTH components [#825](https://github.com/openshift/cluster-authentication-operator/pull/825)
* [CNTRLPLANE-2990](https://issues.redhat.com/browse/CNTRLPLANE-2990): Update CAO to no longer write to the `Authentication.spec.webhookTokenAuthenticator` field [#854](https://github.com/openshift/cluster-authentication-operator/pull/854)
* [CNTRLPLANE-2996](https://issues.redhat.com/browse/CNTRLPLANE-2996): dependencies: k8s 1.35 rebase [#853](https://github.com/openshift/cluster-authentication-operator/pull/853)
* [CNTRLPLANE-2552](https://issues.redhat.com/browse/CNTRLPLANE-2552): Add support for CEL expression claim mappings for username and groups [#850](https://github.com/openshift/cluster-authentication-operator/pull/850)
* [MON-4473](https://issues.redhat.com/browse/MON-4473): Migrate Prometheus targets discovering from Endpoints to EndpointsSlices [#823](https://github.com/openshift/cluster-authentication-operator/pull/823)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/eca6050eeef6e032e4bc89ba8d9fc522301ec491...51ea6cdc877f997cc9b376aa26820e8e83d8c1c7)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/05bcec5a83ea3d9afc3a342a1b8878e30c19ef94)

* NO-JIRA: ignore tool and hack files in .snyk scans [#416](https://github.com/openshift/kubernetes-autoscaler/pull/416)
* [OCPBUGS-78152](https://issues.redhat.com/browse/OCPBUGS-78152): allow clusterapi provider to skip paused resources [#409](https://github.com/openshift/kubernetes-autoscaler/pull/409)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/b03eb2aa84f7aa18cd12b2f34f6eeafc43ff478b...05bcec5a83ea3d9afc3a342a1b8878e30c19ef94)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/260ea1b5967f47768a0727e8c84d451dc9de5ced)

* [OCPBUGS-65578](https://issues.redhat.com/browse/OCPBUGS-65578): report Progressing=True on version upgrade [#366](https://github.com/openshift/cluster-autoscaler-operator/pull/366)
* [AUTOSCALE-560](https://issues.redhat.com/browse/AUTOSCALE-560): Add support for using centralized cluster TLS profile for webhook service [#367](https://github.com/openshift/cluster-autoscaler-operator/pull/367)
* [OCPBUGS-78797](https://issues.redhat.com/browse/OCPBUGS-78797): update rbac to include DRA-related resources [#365](https://github.com/openshift/cluster-autoscaler-operator/pull/365)
* [MON-4498](https://issues.redhat.com/browse/MON-4498): Migrate Prometheus targets discovering from Endpoints to EndpointSlices [#363](https://github.com/openshift/cluster-autoscaler-operator/pull/363)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/c0650db9ed563c5169e28bd5589a21d1f987a7c2...260ea1b5967f47768a0727e8c84d451dc9de5ced)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/e4f3cd50b6a33337b723beb682c4fdcf5cdd820c)

* [OCPBUGS-78151](https://issues.redhat.com/browse/OCPBUGS-78151): Add provisioningNetworkGateway field to CBO [#575](https://github.com/openshift/cluster-baremetal-operator/pull/575)
* [METAL-1715](https://issues.redhat.com/browse/METAL-1715): Enforce 1-year validity and 30-day auto-rotation for Ironic TLS certs [#570](https://github.com/openshift/cluster-baremetal-operator/pull/570)
* [METAL-1780](https://issues.redhat.com/browse/METAL-1780): Gate TLS profile enforcement on APIServer tlsAdherence field [#582](https://github.com/openshift/cluster-baremetal-operator/pull/582)
* [METAL-1720](https://issues.redhat.com/browse/METAL-1720): Add IRONIC_ROOTFS_URL env var for multi-arch rootfs override [#583](https://github.com/openshift/cluster-baremetal-operator/pull/583)
* [METAL-1716](https://issues.redhat.com/browse/METAL-1716): Handle IPv6/dual-stack addresses in certificate SANs [#573](https://github.com/openshift/cluster-baremetal-operator/pull/573)
* NO-ISSUE: Update envtest version [#580](https://github.com/openshift/cluster-baremetal-operator/pull/580)
* [METAL-1720](https://issues.redhat.com/browse/METAL-1720): Add DEPLOY_KERNEL env var for image-customization-controller [#581](https://github.com/openshift/cluster-baremetal-operator/pull/581)
* [METAL-1734](https://issues.redhat.com/browse/METAL-1734): Add support for centralized tls [#572](https://github.com/openshift/cluster-baremetal-operator/pull/572)
* [METAL-1714](https://issues.redhat.com/browse/METAL-1714): Populate complete SANs in Ironic TLS certificate [#569](https://github.com/openshift/cluster-baremetal-operator/pull/569)
* [OCPBUGS-69399](https://issues.redhat.com/browse/OCPBUGS-69399): Allow ProvisioningCIDR for unmanaged network [#553](https://github.com/openshift/cluster-baremetal-operator/pull/553)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/aff20f178671ebc3df3f4bdee4b7e04e69dc42f7...e4f3cd50b6a33337b723beb682c4fdcf5cdd820c)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/e6be0fdfbf43883e2301dbf2d0eb3ab4a4f93383)

* [OCPBUGS-69694](https://issues.redhat.com/browse/OCPBUGS-69694): Updating ose-cluster-bootstrap-container image to be consistent with ART for 4.22 [#124](https://github.com/openshift/cluster-bootstrap/pull/124)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/dc0d4a5cdaf8a7477cab584208dc99352f46efe2...e6be0fdfbf43883e2301dbf2d0eb3ab4a4f93383)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/c11cf5d40d83b88479be4e8dd121801a71b3f0e0)

* NO-JIRA: IPAM CRDs: Use negated feature-gate: -ClusterAPIMachineManagement instead of feature-set: Default [#273](https://github.com/openshift/cluster-api/pull/273)
* [OCPCLOUD-3291](https://issues.redhat.com/browse/OCPCLOUD-3291): Merge https://github.com/kubernetes-sigs/cluster-api:v1.12.4 (8c01d2f5) into master [#255](https://github.com/openshift/cluster-api/pull/255)
* [OCPCLOUD-3320](https://issues.redhat.com/browse/OCPCLOUD-3320): Fix continuous reconciliation of cluster-api manifests [#269](https://github.com/openshift/cluster-api/pull/269)
* [Full changelog](https://github.com/openshift/cluster-api/compare/54cf5acda5d2742d180b5ae327b0babf61e11cb5...c11cf5d40d83b88479be4e8dd121801a71b3f0e0)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/50ba4c27c5e9c1c5c5e948c92b821e6958debde9)

* [OCPCLOUD-3319](https://issues.redhat.com/browse/OCPCLOUD-3319): Remove capiinstaller controller [#507](https://github.com/openshift/cluster-capi-operator/pull/507)
* [OCPCLOUD-3419](https://issues.redhat.com/browse/OCPCLOUD-3419): Add adopt-existing annotation [#514](https://github.com/openshift/cluster-capi-operator/pull/514)
* NO-JIRA: Fix flake in object pruning envtests [#516](https://github.com/openshift/cluster-capi-operator/pull/516)
* [OCPBUGS-80922](https://issues.redhat.com/browse/OCPBUGS-80922): Add CVO proxy injection annotation to capi-operator Deployment [#518](https://github.com/openshift/cluster-capi-operator/pull/518)
* [OCPBUGS-81683](https://issues.redhat.com/browse/OCPBUGS-81683): fix: remove Microsoft.Resourcehealth/healthevent permission [#515](https://github.com/openshift/cluster-capi-operator/pull/515)
* NO-JIRA: Add ClusterAPI singleton to related objects [#508](https://github.com/openshift/cluster-capi-operator/pull/508)
* [OCPCLOUD-3365](https://issues.redhat.com/browse/OCPCLOUD-3365), [OCPCLOUD-3384](https://issues.redhat.com/browse/OCPCLOUD-3384): Implement admission action Warn and ensure validations not active when not configured [#492](https://github.com/openshift/cluster-capi-operator/pull/492)
* [OCPCLOUD-3321](https://issues.redhat.com/browse/OCPCLOUD-3321), [OSASINFRA-3980](https://issues.redhat.com/browse/OSASINFRA-3980): Add openstack-resource-controller image to images.json [#506](https://github.com/openshift/cluster-capi-operator/pull/506)
* [OCPCLOUD-3319](https://issues.redhat.com/browse/OCPCLOUD-3319): Create installer controller [#494](https://github.com/openshift/cluster-capi-operator/pull/494)
* NO-JIRA: Fix 2 failures in ci jobs [#485](https://github.com/openshift/cluster-capi-operator/pull/485)
* [SPLAT-2167](https://issues.redhat.com/browse/SPLAT-2167): Added dedicated host support for AWS [#374](https://github.com/openshift/cluster-capi-operator/pull/374)
* [OCPCLOUD-3319](https://issues.redhat.com/browse/OCPCLOUD-3319): Convert ReconcileResult to use a builder pattern [#501](https://github.com/openshift/cluster-capi-operator/pull/501)
* [OCPCLOUD-3319](https://issues.redhat.com/browse/OCPCLOUD-3319): Simplify RelatedObjects on the cluster-api ClusterOperator [#497](https://github.com/openshift/cluster-capi-operator/pull/497)
* NO-JIRA: Common provider manifest fixtures [#498](https://github.com/openshift/cluster-capi-operator/pull/498)
* NO-JIRA: Drop unused replace manifests-gen [#504](https://github.com/openshift/cluster-capi-operator/pull/504)
* [OCPBUGS-77188](https://issues.redhat.com/browse/OCPBUGS-77188): Fix CRD Requirement deployment on SNO [#502](https://github.com/openshift/cluster-capi-operator/pull/502)
* NO-JIRA: Move ProviderMetadata into manifests-gen [#503](https://github.com/openshift/cluster-capi-operator/pull/503)
* NO-JIRA: Fix malformed VAP [#499](https://github.com/openshift/cluster-capi-operator/pull/499)
* NO-JIRA: Instruct agents more forcefully to run tests with make unit [#496](https://github.com/openshift/cluster-capi-operator/pull/496)
* [OCPCLOUD-3319](https://issues.redhat.com/browse/OCPCLOUD-3319): Bump controller-runtime to v0.23 [#495](https://github.com/openshift/cluster-capi-operator/pull/495)
* [OCPCLOUD-3290](https://issues.redhat.com/browse/OCPCLOUD-3290): Dependency bumps for release 4.22 [#491](https://github.com/openshift/cluster-capi-operator/pull/491)
* [OCPCLOUD-3184](https://issues.redhat.com/browse/OCPCLOUD-3184): Implement object schema pruning for compatibility requirements [#464](https://github.com/openshift/cluster-capi-operator/pull/464)
* [OCPCLOUD-3350](https://issues.redhat.com/browse/OCPCLOUD-3350): Revision controller [#469](https://github.com/openshift/cluster-capi-operator/pull/469)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/48b44cd08f859b901b0445e67f7becc25bd2397a...50ba4c27c5e9c1c5c5e948c92b821e6958debde9)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/b4e6117253f22058c7ba1567f713a53a374c2e4e)

* [OCPCLOUD-3348](https://issues.redhat.com/browse/OCPCLOUD-3348): Honor TLSAdherence [#440](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/440)
* [SPLAT-2672](https://issues.redhat.com/browse/SPLAT-2672): e2e/ote/ccm-aws: moving OTE binary from CCM-AWS [#437](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/437)
* [OCPBUGS-78118](https://issues.redhat.com/browse/OCPBUGS-78118): Add delete permission for Azure load balancers in credentials request [#438](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/438)
* [OCPCLOUD-3287](https://issues.redhat.com/browse/OCPCLOUD-3287): Update to k8s 1.35.1 dependencies [#439](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/439)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/b1082464bff54680dea0df95d6e5f1aa3ce313b7...b4e6117253f22058c7ba1567f713a53a374c2e4e)


### [cluster-config-api](https://github.com/openshift/api/tree/464776f9520793f0f20645fbcb82d945abb0a05b)

* [MON-4035](https://issues.redhat.com/browse/MON-4035): Add ThanosQuerierConfig to ClusterMonitoring API [#2769](https://github.com/openshift/api/pull/2769)
* [NE-2520](https://issues.redhat.com/browse/NE-2520): Promote GatewayAPIWithoutOLM to GA [#2772](https://github.com/openshift/api/pull/2772)
* [OCPEDGE-2197](https://issues.redhat.com/browse/OCPEDGE-2197): Promote TNF (Dual Replica) to default [#2723](https://github.com/openshift/api/pull/2723)
* [OCPBUGS-81627](https://issues.redhat.com/browse/OCPBUGS-81627): Load ClusterResourceQuota CRD before CVO manifests [#2796](https://github.com/openshift/api/pull/2796)
* [OCPEDGE-2492](https://issues.redhat.com/browse/OCPEDGE-2492): feat: promote pacemaker to v1 in prep for tnf [#2792](https://github.com/openshift/api/pull/2792)
* Update verify-feature-promotion HTML output to sort entries and fix overflow [#2793](https://github.com/openshift/api/pull/2793)
* Include candidate tier in default sippy queries for feature promotion [#2789](https://github.com/openshift/api/pull/2789)
* [CNTRLPLANE-2796](https://issues.redhat.com/browse/CNTRLPLANE-2796): promote the event-ttl feature [#2722](https://github.com/openshift/api/pull/2722)
* [OCPBUGS-74533](https://issues.redhat.com/browse/OCPBUGS-74533): Remove GCPClusterHostedDNSInstall featuregate [#2776](https://github.com/openshift/api/pull/2776)
* NO-ISSUE: Fixes KubeletConfig API doc, adds tests and kubebuilder validation [#2651](https://github.com/openshift/api/pull/2651)
* [CORS-4365](https://issues.redhat.com/browse/CORS-4365): Promote AzureClusterHostedDNSInstall to default [#2774](https://github.com/openshift/api/pull/2774)
* Add ConfidentialCluster feature gate [#2779](https://github.com/openshift/api/pull/2779)
* [SPLAT-2664](https://issues.redhat.com/browse/SPLAT-2664): Added new feature gate VSphereMultiVCenterDay2 [#2783](https://github.com/openshift/api/pull/2783)
* [CNTRLPLANE-3115](https://issues.redhat.com/browse/CNTRLPLANE-3115): Add envtest releases for 4.15 and 4.16 [#2785](https://github.com/openshift/api/pull/2785)
* [CNTRLPLANE-2777](https://issues.redhat.com/browse/CNTRLPLANE-2777): add TypeMeta to GenericControllerConfig [#2780](https://github.com/openshift/api/pull/2780)
* tools: codegen: increase sippy request timeout for feature promotion verification [#2782](https://github.com/openshift/api/pull/2782)
* [MON-4036](https://issues.redhat.com/browse/MON-4036): Add TelemeterClientConfig to ClusterMonitoring API [#2755](https://github.com/openshift/api/pull/2755)
* Allow JobTier=candidate in featuregate-test-analyzer with warning [#2781](https://github.com/openshift/api/pull/2781)
* [SPLAT-2320](https://issues.redhat.com/browse/SPLAT-2320): vsphere vm-host zonal ga [#2731](https://github.com/openshift/api/pull/2731)
* [NE-2512](https://issues.redhat.com/browse/NE-2512): operator/ingress: Add configurationManagement option [#2757](https://github.com/openshift/api/pull/2757)
* [CORS-4337](https://issues.redhat.com/browse/CORS-4337): allow AWS Europe Sovereign Cloud partition [#2708](https://github.com/openshift/api/pull/2708)
* [AGENT-1473](https://issues.redhat.com/browse/AGENT-1473): add InternalReleaseImageDegraded state type for MachineConfigNodeStatus Conditions field [#2777](https://github.com/openshift/api/pull/2777)
* [CNTRLPLANE-3010](https://issues.redhat.com/browse/CNTRLPLANE-3010): Add API-side validation to enforce prefixPolicy is not set when username expression is used [#2771](https://github.com/openshift/api/pull/2771)
* [OCPBUGS-74528](https://issues.redhat.com/browse/OCPBUGS-74528): upkeep: HighlyAvailableArbiter has been GA for 2 releases [#2759](https://github.com/openshift/api/pull/2759)
* Improve feature-gated CEL validation merge semantics [#2770](https://github.com/openshift/api/pull/2770)
* [OPRUN-4513](https://issues.redhat.com/browse/OPRUN-4513): Move OLMv1 Single/Own Namespace support back to TP [#2766](https://github.com/openshift/api/pull/2766)
* [CORENET-6390](https://issues.redhat.com/browse/CORENET-6390): API changes and feature gate for OVN-Kubernetes no-overlay mode [#2537](https://github.com/openshift/api/pull/2537)
* [OPRUN-4466](https://issues.redhat.com/browse/OPRUN-4466): Add NewOLMConfigAPI feature gate [#2756](https://github.com/openshift/api/pull/2756)
* Add TLS adherence feature gate [#2680](https://github.com/openshift/api/pull/2680)
* [TRT-2518](https://issues.redhat.com/browse/TRT-2518): Add variant OS and JobTier to promotion check [#2763](https://github.com/openshift/api/pull/2763)
* [MCO-2142](https://issues.redhat.com/browse/MCO-2142): Avoid OSImageStream defaultStream unset [#2764](https://github.com/openshift/api/pull/2764)
* [OCPBUGS-74513](https://issues.redhat.com/browse/OCPBUGS-74513): OCPBUGS-74519: OCPBUGS-78487: Remove `MachineConfigNodes` and `PinnedImages` feature gates and v1alpha1 references [#2715](https://github.com/openshift/api/pull/2715)
* [CORS-4348](https://issues.redhat.com/browse/CORS-4348): feature gate for EU Sovereign Cloud support [#2740](https://github.com/openshift/api/pull/2740)
* NO-ISSUE: config/v1alpha1: Drop (Cluster)ImagePolicy since the hard cut to v1 [#2760](https://github.com/openshift/api/pull/2760)
* [Full changelog](https://github.com/openshift/api/compare/5e946e2d43b71b30614a146906ffc7027b267b63...464776f9520793f0f20645fbcb82d945abb0a05b)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/e0c2428e4618493ad9db0681e3b91444746ddf2c)

* [OCPEDGE-2071](https://issues.redhat.com/browse/OCPEDGE-2071): bump(ocp/api): pull in latest for DualReplica promotion [#480](https://github.com/openshift/cluster-config-operator/pull/480)
* [OCPBUGS-74528](https://issues.redhat.com/browse/OCPBUGS-74528): bump: ocp/api ocp/libray-go [#475](https://github.com/openshift/cluster-config-operator/pull/475)
* [API-1646](https://issues.redhat.com/browse/API-1646): Add config-operator workload and namespaces network policies [#463](https://github.com/openshift/cluster-config-operator/pull/463)
* [OCPSTRAT-2876](https://issues.redhat.com/browse/OCPSTRAT-2876): Teach config operator to filter feature gate manifests by major version inclusion [#459](https://github.com/openshift/cluster-config-operator/pull/459)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/9ac2336f38cda129355ff48ab76a97a545fd07ab...e0c2428e4618493ad9db0681e3b91444746ddf2c)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/b2e26b937e7f6dab36b63ace9c8453ba9654011c)

* [OCPCLOUD-3349](https://issues.redhat.com/browse/OCPCLOUD-3349): Honor TLS adherence, allow TLS overrides via flags [#398](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/398)
* [OCPCLOUD-3284](https://issues.redhat.com/browse/OCPCLOUD-3284): Bump to k8s 1.35 and associated deps. [#397](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/397)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/fd6ee313ebfa9ae0c269d06942cf135a8f6b4d87...b2e26b937e7f6dab36b63ace9c8453ba9654011c)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/98d8223ebe55a0ddc10bb485e7603deb2c0acbb9)

* [STOR-2762](https://issues.redhat.com/browse/STOR-2762): Bump all deps for 4.22 [#270](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/270)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/74486094e54c300de15bc19cbdd7144a609ecbc3...98d8223ebe55a0ddc10bb485e7603deb2c0acbb9)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/3d2141182243cde1ec6417bd005c76d29aa88a01)

* [OCPBUGS-78085](https://issues.redhat.com/browse/OCPBUGS-78085): Fix dual-stack service update by preserving IP families [#467](https://github.com/openshift/cluster-dns-operator/pull/467)
* [NE-2500](https://issues.redhat.com/browse/NE-2500): Added network policies for DNS [#468](https://github.com/openshift/cluster-dns-operator/pull/468)
* [OCPBUGS-62178](https://issues.redhat.com/browse/OCPBUGS-62178): Dynamically set kube-rbac-proxy TLS args [#466](https://github.com/openshift/cluster-dns-operator/pull/466)
* [OCPBUGS-14346](https://issues.redhat.com/browse/OCPBUGS-14346): Fix when DNS operator reports Degraded [#373](https://github.com/openshift/cluster-dns-operator/pull/373)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/51e7d46b5ef631171633fe743e56fa0ef9a9fc37...3d2141182243cde1ec6417bd005c76d29aa88a01)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/3698b93d071f8b279b1721f90ced478f0b90b426)

* NO-JIRA: Apply `go fix` changes [#1589](https://github.com/openshift/cluster-etcd-operator/pull/1589)
* NO-JIRA: Remove unused lib/resourcemerge package [#1590](https://github.com/openshift/cluster-etcd-operator/pull/1590)
* [OCPEDGE-2495](https://issues.redhat.com/browse/OCPEDGE-2495): upkeep: bump ocp/api ocp/client-go [#1591](https://github.com/openshift/cluster-etcd-operator/pull/1591)
* [OCPBUGS-81340](https://issues.redhat.com/browse/OCPBUGS-81340): pacemaker CronJob: tune history limit and Job TTL [#1581](https://github.com/openshift/cluster-etcd-operator/pull/1581)
* [OCPEDGE-2495](https://issues.redhat.com/browse/OCPEDGE-2495): feat: update pacemaker in preparation for DualReplica promotion [#1587](https://github.com/openshift/cluster-etcd-operator/pull/1587)
* [OCPBUGS-81341](https://issues.redhat.com/browse/OCPBUGS-81341): fix: add correct annotations to stop update events [#1580](https://github.com/openshift/cluster-etcd-operator/pull/1580)
* [CNTRLPLANE-2621](https://issues.redhat.com/browse/CNTRLPLANE-2621): Restart operator when TLS config changes [#1556](https://github.com/openshift/cluster-etcd-operator/pull/1556)
* [OCPBUGS-80959](https://issues.redhat.com/browse/OCPBUGS-80959): fix(tnf): align Pacemaker kubelet and etcd retry pacing [#1578](https://github.com/openshift/cluster-etcd-operator/pull/1578)
* [CNTRLPLANE-2668](https://issues.redhat.com/browse/CNTRLPLANE-2668): Migrating go standard etcd cases to ote [#1575](https://github.com/openshift/cluster-etcd-operator/pull/1575)
* NO-JIRA: add Lance as a reviewer [#1576](https://github.com/openshift/cluster-etcd-operator/pull/1576)
* [OCPBUGS-78956](https://issues.redhat.com/browse/OCPBUGS-78956): Disable member cache for quorum checker in TNF [#1568](https://github.com/openshift/cluster-etcd-operator/pull/1568)
* [OCPBUGS-65626](https://issues.redhat.com/browse/OCPBUGS-65626): upgrade library-go to latest changes [#1566](https://github.com/openshift/cluster-etcd-operator/pull/1566)
* [OCPBUGS-78930](https://issues.redhat.com/browse/OCPBUGS-78930): add tnf jobs to network policy exceptions [#1574](https://github.com/openshift/cluster-etcd-operator/pull/1574)
* [ETCD-557](https://issues.redhat.com/browse/ETCD-557): Add e2e Network policy test cases [#1543](https://github.com/openshift/cluster-etcd-operator/pull/1543)
* Revert "OCPBUGS-77947: fix(tnf): do not block on stable revision after external etcd transition" [#1572](https://github.com/openshift/cluster-etcd-operator/pull/1572)
* [OCPBUGS-74679](https://issues.redhat.com/browse/OCPBUGS-74679): fix: tweaking kubelet resource config to allow automatic fencing recovery [#1561](https://github.com/openshift/cluster-etcd-operator/pull/1561)
* [OCPBUGS-70050](https://issues.redhat.com/browse/OCPBUGS-70050): Updating cluster-etcd-operator-container image to be consistent with ART for 4.22 [#1569](https://github.com/openshift/cluster-etcd-operator/pull/1569)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/fe7511e936f874018b206cd2ef833faec175daa5...3698b93d071f8b279b1721f90ced478f0b90b426)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/3a32428c3d183a0c6011359d2c6cf87d05736472)

* [CNTRLPLANE-3184](https://issues.redhat.com/browse/CNTRLPLANE-3184): Create network policies for image-registry components [#1301](https://github.com/openshift/cluster-image-registry-operator/pull/1301)
* [OCPBUGS-81750](https://issues.redhat.com/browse/OCPBUGS-81750): Use deterministic S3 bucket naming to prevent orphaned buckets [#1317](https://github.com/openshift/cluster-image-registry-operator/pull/1317)
* [OCPBUGS-66225](https://issues.redhat.com/browse/OCPBUGS-66225): ImageConfigController: wait for ClusterVersion informe… [#1316](https://github.com/openshift/cluster-image-registry-operator/pull/1316)
* [OCPBUGS-66225](https://issues.redhat.com/browse/OCPBUGS-66225): fix degraded blip on stale config caches [#1304](https://github.com/openshift/cluster-image-registry-operator/pull/1304)
* [OCPBUGS-66225](https://issues.redhat.com/browse/OCPBUGS-66225): migrate to go 1.25 [#1305](https://github.com/openshift/cluster-image-registry-operator/pull/1305)
* [IR-350](https://issues.redhat.com/browse/IR-350): make metrics server tls configuration file-based [#1297](https://github.com/openshift/cluster-image-registry-operator/pull/1297)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/e000262ca78f9bc8dabff8dcfd3d163a37e29b51...3a32428c3d183a0c6011359d2c6cf87d05736472)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/b408b277a445e93861d570d6f93f57b29f5486c3)

* [OCPBUGS-76609](https://issues.redhat.com/browse/OCPBUGS-76609): Do not take over OSSM subscription [#1398](https://github.com/openshift/cluster-ingress-operator/pull/1398)
* [NE-2332](https://issues.redhat.com/browse/NE-2332): Implement ROUTER_CURVES environment variable [#1409](https://github.com/openshift/cluster-ingress-operator/pull/1409)
* [OCPBUGS-3917](https://issues.redhat.com/browse/OCPBUGS-3917): filter non-FIPS TLS 1.3 ciphers from ROUTER_CIPHERSUITES on FIPS clusters [#1401](https://github.com/openshift/cluster-ingress-operator/pull/1401)
* [NE-2501](https://issues.redhat.com/browse/NE-2501): Add network policies for ingress resources [#1392](https://github.com/openshift/cluster-ingress-operator/pull/1392)
* [OCPBUGS-79376](https://issues.redhat.com/browse/OCPBUGS-79376): Bump to OSSM 3.3.1 and Istio v1.28.5 [#1406](https://github.com/openshift/cluster-ingress-operator/pull/1406)
* [OCPBUGS-78541](https://issues.redhat.com/browse/OCPBUGS-78541): Move TestIngressControllerCustomEndpoints to run last [#1388](https://github.com/openshift/cluster-ingress-operator/pull/1388)
* [OCPBUGS-79467](https://issues.redhat.com/browse/OCPBUGS-79467): Change default log level from DEBUG to INFO [#1402](https://github.com/openshift/cluster-ingress-operator/pull/1402)
* [NE-2519](https://issues.redhat.com/browse/NE-2519): Move Sail Library to official release branch [#1404](https://github.com/openshift/cluster-ingress-operator/pull/1404)
* [NE-2523](https://issues.redhat.com/browse/NE-2523): Implement configurationManagement API [#1385](https://github.com/openshift/cluster-ingress-operator/pull/1385)
* [OCPBUGS-79667](https://issues.redhat.com/browse/OCPBUGS-79667): Use feature-gate annotation for Sail Library RBAC [#1393](https://github.com/openshift/cluster-ingress-operator/pull/1393)
* [NE-2396](https://issues.redhat.com/browse/NE-2396): gatewayclass: Enable Horizontal Pod Autoscaling [#1326](https://github.com/openshift/cluster-ingress-operator/pull/1326)
* [CORS-4335](https://issues.redhat.com/browse/CORS-4335): Add support for AWS European Sovereign Cloud [#1360](https://github.com/openshift/cluster-ingress-operator/pull/1360)
* [NE-2421](https://issues.redhat.com/browse/NE-2421): Support dual-stack IngressController on AWS [#1376](https://github.com/openshift/cluster-ingress-operator/pull/1376)
* [OCPBUGS-62237](https://issues.redhat.com/browse/OCPBUGS-62237): Apply APIServer TLS security profile to canary daemonset [#1386](https://github.com/openshift/cluster-ingress-operator/pull/1386)
* [OCPBUGS-78523](https://issues.redhat.com/browse/OCPBUGS-78523): gatewayapi_controller: Replace sync.Once with retry for GatewayClass field indexer setup [#1382](https://github.com/openshift/cluster-ingress-operator/pull/1382)
* [OCPBUGS-62627](https://issues.redhat.com/browse/OCPBUGS-62627): cluster operator ingress reported Progressing=True wit… [#1299](https://github.com/openshift/cluster-ingress-operator/pull/1299)
* [OCPBUGS-62238](https://issues.redhat.com/browse/OCPBUGS-62238): configure tls profile for router metrics [#1378](https://github.com/openshift/cluster-ingress-operator/pull/1378)
* [NE-2285](https://issues.redhat.com/browse/NE-2285): Bump to OSSM 3.3.0 and Istio v1.28.4 [#1396](https://github.com/openshift/cluster-ingress-operator/pull/1396)
* [OCPBUGS-77457](https://issues.redhat.com/browse/OCPBUGS-77457): Respect proxy configuration on gwapi provisioning [#1383](https://github.com/openshift/cluster-ingress-operator/pull/1383)
* [NE-2471](https://issues.redhat.com/browse/NE-2471): Replace OLM-based Istio install with Sail Library [#1354](https://github.com/openshift/cluster-ingress-operator/pull/1354)
* [NE-2501](https://issues.redhat.com/browse/NE-2501): Add RBAC to allow operator to manage network policies [#1389](https://github.com/openshift/cluster-ingress-operator/pull/1389)
* [OCPBUGS-78555](https://issues.redhat.com/browse/OCPBUGS-78555): Increase Gateway E2E timeout to 5 minutes [#1390](https://github.com/openshift/cluster-ingress-operator/pull/1390)
* [NE-2131](https://issues.redhat.com/browse/NE-2131): tests-extension: Append suite names to OTE test specs to preserve original test names [#1387](https://github.com/openshift/cluster-ingress-operator/pull/1387)
* [NE-2418](https://issues.redhat.com/browse/NE-2418): Add e2e test for haproxy_max_connections metric [#1361](https://github.com/openshift/cluster-ingress-operator/pull/1361)
* [NE-2183](https://issues.redhat.com/browse/NE-2183): Implement GatewayAPI status controller [#1294](https://github.com/openshift/cluster-ingress-operator/pull/1294)
* [NE-2131](https://issues.redhat.com/browse/NE-2131): tests-extension: restore test names and remove metadata tracking [#1379](https://github.com/openshift/cluster-ingress-operator/pull/1379)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/4d7cbb087e4442c284504110e2ae1ac1a879111b...b408b277a445e93861d570d6f93f57b29f5486c3)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/6df1155aa6e1d29f77b7b2aa1973ae2721975dae)

* [CNTRLPLANE-2698](https://issues.redhat.com/browse/CNTRLPLANE-2698): add network policies for apiserver operator and operands [#2029](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2029)
* [OCPBUGS-23366](https://issues.redhat.com/browse/OCPBUGS-23366): bindata/bootkube: Remove configmap-csr-controller-ca.yaml [#2076](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2076)
* [OCPBUGS-76952](https://issues.redhat.com/browse/OCPBUGS-76952): scc: fix uid{Min,Max}Range for nested-container [#2053](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2053)
* NO-JIRA:Fix TestBoundTokenOperatorSecretDeletion stability and monitor failures [#2080](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2080)
* [CNTRLPLANE-2622](https://issues.redhat.com/browse/CNTRLPLANE-2622): Restart operator when TLS config changes [#2059](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2059)
* [CORS-4363](https://issues.redhat.com/browse/CORS-4363): set bindAddress/bindNetwork for dual-stack clusters [#2079](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2079)
* [CNTRLPLANE-2992](https://issues.redhat.com/browse/CNTRLPLANE-2992): Update CKASO to use a default webhook authenticator secret when authentication type is not `None` [#2074](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2074)
* [OCPBUGS-65626](https://issues.redhat.com/browse/OCPBUGS-65626): update library-go to latest [#2026](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2026)
* [CNTRLPLANE-2223](https://issues.redhat.com/browse/CNTRLPLANE-2223): Migrate TestBoundTokenSignerController to ginkgo [#2067](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2067)
* [CNTRLPLANE-2622](https://issues.redhat.com/browse/CNTRLPLANE-2622): config tls on check-endpoints container [#2058](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2058)
* [OCPBUGS-46086](https://issues.redhat.com/browse/OCPBUGS-46086): Always set service-account-jwks-uri to LB URL even with custom issuer [#1919](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1919)
* [OCPBUGS-78146](https://issues.redhat.com/browse/OCPBUGS-78146): move event-ttl test to its own suite [#2069](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2069)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/8a099d417645f3788106cedb71e7e4d35ff18a97...6df1155aa6e1d29f77b7b2aa1973ae2721975dae)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/295165e9ba512e226d75b866b1e496d9f94732c6)

* [OCPBUGS-23366](https://issues.redhat.com/browse/OCPBUGS-23366): bindata: Import configmap-csr-controller-ca.yaml from KAS-O [#918](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/918)
* [CNTRLPLANE-2623](https://issues.redhat.com/browse/CNTRLPLANE-2623): Restart operator when TLS config changes [#915](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/915)
* [OCPBUGS-65626](https://issues.redhat.com/browse/OCPBUGS-65626): update library-go to latest [#905](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/905)
* [MON-4503](https://issues.redhat.com/browse/MON-4503): Migrate Prometheus targets discovering from Endpoints to EndpointSlices [#907](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/907)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/a7ff6a4647805362618c61a031196cc791cb9963...295165e9ba512e226d75b866b1e496d9f94732c6)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/16a817b60465024f675a44067f3eaa93ea322658)

* [CNTRLPLANE-2756](https://issues.redhat.com/browse/CNTRLPLANE-2756): Add operator and operand network policies [#629](https://github.com/openshift/cluster-kube-scheduler-operator/pull/629)
* [CNTRLPLANE-2810](https://issues.redhat.com/browse/CNTRLPLANE-2810): Restart operator when TLS config changes [#617](https://github.com/openshift/cluster-kube-scheduler-operator/pull/617)
* [OCPBUGS-65626](https://issues.redhat.com/browse/OCPBUGS-65626): update library go to latest [#610](https://github.com/openshift/cluster-kube-scheduler-operator/pull/610)
* [MON-4504](https://issues.redhat.com/browse/MON-4504): Migrate Prometheus targets discovering from Endpoints to EndpointSlices [#614](https://github.com/openshift/cluster-kube-scheduler-operator/pull/614)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/a51975da7993b40c35a892e3437f354cb3e133d7...16a817b60465024f675a44067f3eaa93ea322658)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/e4e983adfde0ccf999efca551fc07b9e28562a10)

* [CNTRLPLANE-3055](https://issues.redhat.com/browse/CNTRLPLANE-3055): Migrate go standard casee to ote [#156](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/156)
* [CNTRLPLANE-2706](https://issues.redhat.com/browse/CNTRLPLANE-2706): add network policy e2e tests for operator and operand [#151](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/151)
* [OCPBUGS-65984](https://issues.redhat.com/browse/OCPBUGS-65984): Revert TRT-2577: Revert #139 "OCPBUGS-65984: scale migrator deployment" [#149](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/149)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/01a238f1848e3eaf689552247c3782c5a328e73a...e4e983adfde0ccf999efca551fc07b9e28562a10)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/a9edd695aca56fb58e739b774670a01428360dd8)

* [OCPCLOUD-3286](https://issues.redhat.com/browse/OCPCLOUD-3286): Bump k8s v1.35, go 1.25 [#295](https://github.com/openshift/cluster-machine-approver/pull/295)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/8b92e37d00c4bfcab24ad3c56e6330552a8cfc1a...a9edd695aca56fb58e739b774670a01428360dd8)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/f6a7969c5c070e4deb6136c3561af60ab44780e1)

* [MON-4543](https://issues.redhat.com/browse/MON-4543), [OPNET-765](https://issues.redhat.com/browse/OPNET-765): Add kubernetes-nmstate telemetry metrics to allowlist [#2855](https://github.com/openshift/cluster-monitoring-operator/pull/2855)
* [OCPBUGS-74645](https://issues.redhat.com/browse/OCPBUGS-74645): delay alert dispatch in Alertmanager [#2848](https://github.com/openshift/cluster-monitoring-operator/pull/2848)
* [OCPBUGS-81554](https://issues.redhat.com/browse/OCPBUGS-81554): CVE-2026-33186 - bump google.golang.org/grpc to v1.79.3 [#2872](https://github.com/openshift/cluster-monitoring-operator/pull/2872)
* NO-ISSUE: exclude hack/tools/vendor from shellcheck [#2873](https://github.com/openshift/cluster-monitoring-operator/pull/2873)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2865](https://github.com/openshift/cluster-monitoring-operator/pull/2865)
* [OCPBUGS-81159](https://issues.redhat.com/browse/OCPBUGS-81159): reject invalid collection profile in webhook [#2860](https://github.com/openshift/cluster-monitoring-operator/pull/2860)
* NO-ISSUE: [bot] Update jsonnet dependencies [#2861](https://github.com/openshift/cluster-monitoring-operator/pull/2861)
* [MON-4481](https://issues.redhat.com/browse/MON-4481), [MON-4482](https://issues.redhat.com/browse/MON-4482): set minimum TLS version for Thanos sidecars [#2859](https://github.com/openshift/cluster-monitoring-operator/pull/2859)
* NO-JIRA: update jsonnet dependencies [#2858](https://github.com/openshift/cluster-monitoring-operator/pull/2858)
* [OCPBUGS-78976](https://issues.redhat.com/browse/OCPBUGS-78976): configure repair policy to 'evict' [#2856](https://github.com/openshift/cluster-monitoring-operator/pull/2856)
* [MON-4542](https://issues.redhat.com/browse/MON-4542): update Prometheus operator CRDS to v0.90.0 [#2854](https://github.com/openshift/cluster-monitoring-operator/pull/2854)
* NO-JIRA: update github.com/openshift/library-go [#2852](https://github.com/openshift/cluster-monitoring-operator/pull/2852)
* NO-JIRA: change ClusterRolefailed to ClusterRole failed [#2853](https://github.com/openshift/cluster-monitoring-operator/pull/2853)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2857](https://github.com/openshift/cluster-monitoring-operator/pull/2857)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2851](https://github.com/openshift/cluster-monitoring-operator/pull/2851)
* NO-JIRA: add unit tests for admission webhook's TLS configuration [#2850](https://github.com/openshift/cluster-monitoring-operator/pull/2850)
* [MON-4479](https://issues.redhat.com/browse/MON-4479): use TLS profile to configure CMO server [#2841](https://github.com/openshift/cluster-monitoring-operator/pull/2841)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2849](https://github.com/openshift/cluster-monitoring-operator/pull/2849)
* [MON-4535](https://issues.redhat.com/browse/MON-4535): Add .coderabbit.yaml to reduce review noise [#2845](https://github.com/openshift/cluster-monitoring-operator/pull/2845)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2847](https://github.com/openshift/cluster-monitoring-operator/pull/2847)
* [OCPBUGS-48578](https://issues.redhat.com/browse/OCPBUGS-48578): chore(metrics-server): prefer control-plane nodes and tolerate their taints [#2801](https://github.com/openshift/cluster-monitoring-operator/pull/2801)
* [OCPBUGS-78221](https://issues.redhat.com/browse/OCPBUGS-78221): fix return value format [#2846](https://github.com/openshift/cluster-monitoring-operator/pull/2846)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/61407b03dba260864ff1719595e5f776a5c5a19e...f6a7969c5c070e4deb6136c3561af60ab44780e1)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/bc5af87f8957262a504b225591593c92db1c8bc2)

* [CORENET-6543](https://issues.redhat.com/browse/CORENET-6543): Align VTEP CRD additionalPrinterColumns with upstream [#2957](https://github.com/openshift/cluster-network-operator/pull/2957)
* [CNF-21001](https://issues.redhat.com/browse/CNF-21001): multus: MultiNetworkPolicy nftables [#2883](https://github.com/openshift/cluster-network-operator/pull/2883)
* [CORENET-6816](https://issues.redhat.com/browse/CORENET-6816): Add NetworkPolicies for CNO and its operands [#2892](https://github.com/openshift/cluster-network-operator/pull/2892)
* [CORENET-6933](https://issues.redhat.com/browse/CORENET-6933): Update VTEPs/CUDN APIs [#2952](https://github.com/openshift/cluster-network-operator/pull/2952)
* [OCPBUGS-78974](https://issues.redhat.com/browse/OCPBUGS-78974): Fix ManagementState being reset on operator restart [#2942](https://github.com/openshift/cluster-network-operator/pull/2942)
* [CORENET-6613](https://issues.redhat.com/browse/CORENET-6613): `ClusterNetworkConnect` DevPreview FG [#2880](https://github.com/openshift/cluster-network-operator/pull/2880)
* no-jira: Update OWNERS_ALIASES to include myself + "taanyas" and "marty-power" [#2908](https://github.com/openshift/cluster-network-operator/pull/2908)
* [CORENET-6813](https://issues.redhat.com/browse/CORENET-6813): Add config override for allow-icmp-network-policy [#2920](https://github.com/openshift/cluster-network-operator/pull/2920)
* [CORENET-6100](https://issues.redhat.com/browse/CORENET-6100): Add support for no-overlay mode [#2844](https://github.com/openshift/cluster-network-operator/pull/2844)
* [CORENET-6561](https://issues.redhat.com/browse/CORENET-6561): CNO Rebase k8s to 1.35.0 [#2887](https://github.com/openshift/cluster-network-operator/pull/2887)
* [OCPBUGS-78731](https://issues.redhat.com/browse/OCPBUGS-78731): Revert "NVIDIA-554: DPU-host mode: use ConfigMap for OVN feature enablement instead of per-node script gating" [#2938](https://github.com/openshift/cluster-network-operator/pull/2938)
* [OCPBUGS-77015](https://issues.redhat.com/browse/OCPBUGS-77015): wait for patch port to apply drop garp flows [#2910](https://github.com/openshift/cluster-network-operator/pull/2910)
* [OCPBUGS-70016](https://issues.redhat.com/browse/OCPBUGS-70016): Updating cluster-network-operator-container image to be consistent with ART for 4.22 [#2863](https://github.com/openshift/cluster-network-operator/pull/2863)
* [OCPBUGS-65633](https://issues.redhat.com/browse/OCPBUGS-65633): add network-check-target + networking-console-plugin service accounts [#2868](https://github.com/openshift/cluster-network-operator/pull/2868)
* [CORENET-6871](https://issues.redhat.com/browse/CORENET-6871): Handle zero-worker HyperShift clusters in daemonset rollout [#2897](https://github.com/openshift/cluster-network-operator/pull/2897)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/88891a97bff0bbff05f7eec89b0cc777085b29b8...bc5af87f8957262a504b225591593c92db1c8bc2)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/1d3e91fd6b0af04e048a9523182321653572440a)

* NO-JIRA: E2E: move dra resource test to reboot tests directory [#1486](https://github.com/openshift/cluster-node-tuning-operator/pull/1486)
* [PSAP-2185](https://issues.redhat.com/browse/PSAP-2185): Support centralized TLS security profile configuration [#1483](https://github.com/openshift/cluster-node-tuning-operator/pull/1483)
* [CNF-18941](https://issues.redhat.com/browse/CNF-18941): e2e: PP: cover ExecCPUAffinity support in tests [#1432](https://github.com/openshift/cluster-node-tuning-operator/pull/1432)
* [CNF-20404](https://issues.redhat.com/browse/CNF-20404): DRA: disable Kubelet resources and topology managers [#1445](https://github.com/openshift/cluster-node-tuning-operator/pull/1445)
* [OCPBUGS-78470](https://issues.redhat.com/browse/OCPBUGS-78470): e2e: fixed flaky test_id:32646 CPU load balancing on cgroupv1 [#1457](https://github.com/openshift/cluster-node-tuning-operator/pull/1457)
* [PSAP-2229](https://issues.redhat.com/browse/PSAP-2229): Prevent multiple reboots via MachineConfig creation/update sync [#1474](https://github.com/openshift/cluster-node-tuning-operator/pull/1474)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/84548365386cde1278edd721b652d9c83ac78172...1d3e91fd6b0af04e048a9523182321653572440a)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/d131450b2645623089b26353a309015c95c8871c)

* [OPRUN-4521](https://issues.redhat.com/browse/OPRUN-4521): handle OCP 4.23/5.0 upgrade boundary [#184](https://github.com/openshift/cluster-olm-operator/pull/184)
* [OCPBUGS-77899](https://issues.redhat.com/browse/OCPBUGS-77899): Fix wait logic to handle NewOLM enabled on Default Feature [#193](https://github.com/openshift/cluster-olm-operator/pull/193)
* NO-ISSUE: remove no-op os.Remove call in TestRenderHelmTemplate [#192](https://github.com/openshift/cluster-olm-operator/pull/192)
* [OCPBUGS-77899](https://issues.redhat.com/browse/OCPBUGS-77899): Wait for operator-controller resources before verifyig [#181](https://github.com/openshift/cluster-olm-operator/pull/181)
* [OPRUN-4518](https://issues.redhat.com/browse/OPRUN-4518): Rename ClusterExtensionRevision to ClusterObjectSet [#191](https://github.com/openshift/cluster-olm-operator/pull/191)
* NO-ISSUE: Add fgiudici as reviewer [#190](https://github.com/openshift/cluster-olm-operator/pull/190)
* NO-ISSUE: return semver conversion errors [#183](https://github.com/openshift/cluster-olm-operator/pull/183)
* [OCPBUGS-81188](https://issues.redhat.com/browse/OCPBUGS-81188): Update grpc and other dependencies [#182](https://github.com/openshift/cluster-olm-operator/pull/182)
* [OPRUN-4502](https://issues.redhat.com/browse/OPRUN-4502): Use FratureGateNewOLMConfigAPI from openshift/api [#180](https://github.com/openshift/cluster-olm-operator/pull/180)
* [OPRUN-4502](https://issues.redhat.com/browse/OPRUN-4502): Add feature-gate for DeploymentConfig [#176](https://github.com/openshift/cluster-olm-operator/pull/176)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/8ecafe23f3828c3750dfbdd55f9a9d105c984963...d131450b2645623089b26353a309015c95c8871c)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/e6a55cd55c867bf9e26e7ec0ba5accc959b0c27c)

* [CNTRLPLANE-2619](https://issues.redhat.com/browse/CNTRLPLANE-2619): Restart operator when TLS config changes [#662](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/662)
* [CNTRLPLANE-2450](https://issues.redhat.com/browse/CNTRLPLANE-2450): bump(k8s.io): 1.35.2 [#669](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/669)
* [CNTRLPLANE-2619](https://issues.redhat.com/browse/CNTRLPLANE-2619): make checkendpoints use apiserver config [#657](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/657)
* NO-JIRA: OWNERS: remove engineers who have left Red Hat [#646](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/646)
* NO-JIRA: Disable WatchList feature gate due to the missing support of Project watch [#667](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/667)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/ad799627e1fbec6205f8a7f670d9694f76b01dc4...e6a55cd55c867bf9e26e7ec0ba5accc959b0c27c)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/e1c3674198c6c1274fd3fd3c3108eb4cade4eb0a)

* [OCPBUGS-81472](https://issues.redhat.com/browse/OCPBUGS-81472): Prevent possibility of running controllers against empty informer caches [#426](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/426)
* [CNTRLPLANE-2620](https://issues.redhat.com/browse/CNTRLPLANE-2620): Restart operator when TLS config changes [#412](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/412)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/8e04fd3a6d1bbdb878a83fa13fde240c593504cc...e1c3674198c6c1274fd3fd3c3108eb4cade4eb0a)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/44985a1306411101c84dd5081598fc928b432321)

* [CNTRLPLANE-2769](https://issues.redhat.com/browse/CNTRLPLANE-2769): bump k8s 1.35 [#174](https://github.com/openshift/cluster-policy-controller/pull/174)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/8b775487512fb543bff470ff1042bd3ac31b29be...44985a1306411101c84dd5081598fc928b432321)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/8dfdf2ef3310358f3559a5481df43b98b2294791)

* NO-JIRA: Add initial Agent Guide [#682](https://github.com/openshift/cluster-storage-operator/pull/682)
* [STOR-2770](https://issues.redhat.com/browse/STOR-2770): Mount metrics certs of azure-disk and azure-file CSI driver operator for Hypershift [#686](https://github.com/openshift/cluster-storage-operator/pull/686)
* [STOR-2762](https://issues.redhat.com/browse/STOR-2762): Bump all deps for 4.22 [#684](https://github.com/openshift/cluster-storage-operator/pull/684)
* [OCPBUGS-74232](https://issues.redhat.com/browse/OCPBUGS-74232): volume-data-source-validator should run on master nodes [#659](https://github.com/openshift/cluster-storage-operator/pull/659)
* [OCPBUGS-78291](https://issues.redhat.com/browse/OCPBUGS-78291): Allow azure-disk operator to read VolumeAttributeClasses [#683](https://github.com/openshift/cluster-storage-operator/pull/683)
* [MON-4509](https://issues.redhat.com/browse/MON-4509): Migrate Prometheus targets discovering from Endpoints to EndpointSlices [#665](https://github.com/openshift/cluster-storage-operator/pull/665)
* [MON-4496](https://issues.redhat.com/browse/MON-4496): metrics: migrate Prometheus SD from Endpoints to EndpointSlices [#668](https://github.com/openshift/cluster-storage-operator/pull/668)
* NO-JIRA: Add a comment to sync AWS EBS IAM role into HyperShift [#676](https://github.com/openshift/cluster-storage-operator/pull/676)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/e31c296b846b2127205ad849628c9d7d951bebe8...8dfdf2ef3310358f3559a5481df43b98b2294791)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/e9c1c39e21ec353ff5993d386c42bc1b15063dbf)

* [OTA-1933](https://issues.redhat.com/browse/OTA-1933): pkg/risk: Refactor alerts into a generic update-risk interface [#1367](https://github.com/openshift/cluster-version-operator/pull/1367)
* NO-JIRA: All CVO manifests in payload should be included [#1337](https://github.com/openshift/cluster-version-operator/pull/1337)
* [OTA-1813](https://issues.redhat.com/browse/OTA-1813): Drop a local label on alert-risk e2e [#1363](https://github.com/openshift/cluster-version-operator/pull/1363)
* NO-ISSUE: Add CodeRabbit config with review rules from PR analysis [#1360](https://github.com/openshift/cluster-version-operator/pull/1360)
* NO-JIRA: use scrape class which is more succinct [#1365](https://github.com/openshift/cluster-version-operator/pull/1365)
* [CNTRLPLANE-2777](https://issues.redhat.com/browse/CNTRLPLANE-2777): feat(resource builder): allow to inject tls configuration into annotated config maps [#1322](https://github.com/openshift/cluster-version-operator/pull/1322)
* [OTA-1813](https://issues.redhat.com/browse/OTA-1813): Populate risks from alerts [#1329](https://github.com/openshift/cluster-version-operator/pull/1329)
* [OCPBUGS-78997](https://issues.redhat.com/browse/OCPBUGS-78997): Do not discard ListOptions in waitForPodCompletion. [#1361](https://github.com/openshift/cluster-version-operator/pull/1361)
* [OCPBUGS-65621](https://issues.redhat.com/browse/OCPBUGS-65621): add dedicated service account to crb, cvo and version pod [#1266](https://github.com/openshift/cluster-version-operator/pull/1266)
* NO-JIRA: Add test migration guide for openshift-tests-private to CVO [#1336](https://github.com/openshift/cluster-version-operator/pull/1336)
* NO-JIRA: Try not to block by informing [#1356](https://github.com/openshift/cluster-version-operator/pull/1356)
* [OCPSTRAT-2876](https://issues.redhat.com/browse/OCPSTRAT-2876): Allow inclusion/exclusion of manifests based on the OCP major version [#1282](https://github.com/openshift/cluster-version-operator/pull/1282)
* [TRT-2581](https://issues.redhat.com/browse/TRT-2581): Revert "NO-ISSUE: OTA-1605 Automate OCP-42543" [#1353](https://github.com/openshift/cluster-version-operator/pull/1353)
* NO-ISSUE: OTA-1605 Automate OCP-42543 [#1309](https://github.com/openshift/cluster-version-operator/pull/1309)
* [CNTRLPLANE-2777](https://issues.redhat.com/browse/CNTRLPLANE-2777): refactor(lib/resourcebuilder): generate interface for client instead of their specific types [#1344](https://github.com/openshift/cluster-version-operator/pull/1344)
* [OTA-1546](https://issues.redhat.com/browse/OTA-1546): Evaluate conditional updates if accept risks change [#1348](https://github.com/openshift/cluster-version-operator/pull/1348)
* [OTA-1546](https://issues.redhat.com/browse/OTA-1546): Skip an accept-risk case on network-restricted environment [#1332](https://github.com/openshift/cluster-version-operator/pull/1332)
* NO-ISSUE: Update fake clientsets to NewClientset [#1340](https://github.com/openshift/cluster-version-operator/pull/1340)
* [TRT-2569](https://issues.redhat.com/browse/TRT-2569): (fix) hypershift-e2e-aks and hypershift-e2e-aws failing with CVO bootstrap deadlock in ci amd64 payload [#1342](https://github.com/openshift/cluster-version-operator/pull/1342)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/7beceeeb12b5a73728e80edaa6d88f5cebf1fcac...e9c1c39e21ec353ff5993d386c42bc1b15063dbf)


### [console](https://github.com/openshift/console/tree/a60ab60cc4a1ec115437dcda4c786296d94f00a8)

* [CONSOLE-5065](https://issues.redhat.com/browse/CONSOLE-5065): Refactor dynamic module import transform code [#16224](https://github.com/openshift/console/pull/16224)
* [OCPBUGS-76556](https://issues.redhat.com/browse/OCPBUGS-76556): fix Developer Sandbox telemetry [#16020](https://github.com/openshift/console/pull/16020)
* NO-JIRA: Add stefanonardo to frontend reviewers#16267 [#16267](https://github.com/openshift/console/pull/16267)
* [OCPBUGS-78904](https://issues.redhat.com/browse/OCPBUGS-78904): Mark notification drawer title for translation [#16229](https://github.com/openshift/console/pull/16229)
* [CONSOLE-3955](https://issues.redhat.com/browse/CONSOLE-3955): Migrate LogSnippet to PatternFly component [#16190](https://github.com/openshift/console/pull/16190)
* [OCPBUGS-81654](https://issues.redhat.com/browse/OCPBUGS-81654): Filter out isActionCell prop to fix React warning [#16247](https://github.com/openshift/console/pull/16247)
* [CONSOLE-5152](https://issues.redhat.com/browse/CONSOLE-5152): bump cypress to latest [#16244](https://github.com/openshift/console/pull/16244)
* [OCPBUGS-81744](https://issues.redhat.com/browse/OCPBUGS-81744): Convert cluster update status integration test to unit test [#16260](https://github.com/openshift/console/pull/16260)
* [OCPBUGS-81506](https://issues.redhat.com/browse/OCPBUGS-81506): Add missing i18n translations for Pagination component [#16233](https://github.com/openshift/console/pull/16233)
* [CNV-62016](https://issues.redhat.com/browse/CNV-62016): add description to ResourceQuota page title [#16086](https://github.com/openshift/console/pull/16086)
* [OCPBUGS-80989](https://issues.redhat.com/browse/OCPBUGS-80989): Skip to fetch resource if model not found and load the other resources in list-page [#16230](https://github.com/openshift/console/pull/16230)
* [CONSOLE-5110](https://issues.redhat.com/browse/CONSOLE-5110): Assorted fixes and improvements [#16250](https://github.com/openshift/console/pull/16250)
* [OCPBUGS-79355](https://issues.redhat.com/browse/OCPBUGS-79355): Fix and enable OLM Package E2E tests disabled during the public/ directory useK8sWatchResource refactoring [#16220](https://github.com/openshift/console/pull/16220)
* [OCPBUGS-74156](https://issues.redhat.com/browse/OCPBUGS-74156): Prevent pod log search from shifting page layout [#16223](https://github.com/openshift/console/pull/16223)
* Revert "OCPBUGS-74156: Prevent pod log viewer from shifting page layout when searching" [#16218](https://github.com/openshift/console/pull/16218)
* [OCPBUGS-74506](https://issues.redhat.com/browse/OCPBUGS-74506): Remove ConsolePluginSecurityPolicy featuregate [#16013](https://github.com/openshift/console/pull/16013)
* [CONSOLE-5151](https://issues.redhat.com/browse/CONSOLE-5151): Replace showdown with marked [#16239](https://github.com/openshift/console/pull/16239)
* [CONSOLE-5094](https://issues.redhat.com/browse/CONSOLE-5094): cypress test improvements [#16046](https://github.com/openshift/console/pull/16046)
* [OCPBUGS-81331](https://issues.redhat.com/browse/OCPBUGS-81331): Storage &gt; VolumeSnapshots and VAC throws  error [#16219](https://github.com/openshift/console/pull/16219)
* [CONSOLE-4447](https://issues.redhat.com/browse/CONSOLE-4447): Additional modals switched to use ModalFooterWithAlerts for consistency [#16171](https://github.com/openshift/console/pull/16171)
* [OCPBUGS-80939](https://issues.redhat.com/browse/OCPBUGS-80939): Add robots.txt policy to console [#16205](https://github.com/openshift/console/pull/16205)
* [OCPBUGS-79315](https://issues.redhat.com/browse/OCPBUGS-79315): fix analyze.sh/react-icons treeshake [#16188](https://github.com/openshift/console/pull/16188)
* [CONSOLE-5015](https://issues.redhat.com/browse/CONSOLE-5015): Remove drag-and-drop from TextColumnField [#16204](https://github.com/openshift/console/pull/16204)
* [CONSOLE-5065](https://issues.redhat.com/browse/CONSOLE-5065): Update list of PatternFly packages that support dynamic modules [#16182](https://github.com/openshift/console/pull/16182)
* NO-ISSUE: frontend/packages/console-dynamic-plugin-sdk/README: 4.22 doesn't support PatternFly 5 [#16206](https://github.com/openshift/console/pull/16206)
* [OCPBUGS-62700](https://issues.redhat.com/browse/OCPBUGS-62700): Fix VolumeSnapshot table sorting [#16200](https://github.com/openshift/console/pull/16200)
* [OCPBUGS-79581](https://issues.redhat.com/browse/OCPBUGS-79581): Fix Deprecated Operator Warnings E2E tests Skipped in the Firehose Public Folder PR [#16197](https://github.com/openshift/console/pull/16197)
* [OCPBUGS-74156](https://issues.redhat.com/browse/OCPBUGS-74156): Prevent pod log viewer from shifting page layout when searching [#16193](https://github.com/openshift/console/pull/16193)
* [OCPBUGS-79678](https://issues.redhat.com/browse/OCPBUGS-79678): Align the search input so that its next to the select menu toggle [#16198](https://github.com/openshift/console/pull/16198)
* [OCPBUGS-78584](https://issues.redhat.com/browse/OCPBUGS-78584): Preserve query params in CatalogRedirect [#16165](https://github.com/openshift/console/pull/16165)
* [OCPBUGS-79525](https://issues.redhat.com/browse/OCPBUGS-79525): Fix null reference error in subscription action menu [#16196](https://github.com/openshift/console/pull/16196)
* [OCPBUGS-72526](https://issues.redhat.com/browse/OCPBUGS-72526): Impersonating user loads extra pages that user not authorized to view [#16088](https://github.com/openshift/console/pull/16088)
* [OCPBUGS-79000](https://issues.redhat.com/browse/OCPBUGS-79000): Fix perspective switcher icon suspending the whole app [#16183](https://github.com/openshift/console/pull/16183)
* [CONSOLE-5015](https://issues.redhat.com/browse/CONSOLE-5015): Refactor pinned nav to react-drag-drop [#16146](https://github.com/openshift/console/pull/16146)
* [CONSOLE-5031](https://issues.redhat.com/browse/CONSOLE-5031): Remove Firehose Component and Fix and Cleanup Impacted Types [#16096](https://github.com/openshift/console/pull/16096)
* [CONSOLE-4983](https://issues.redhat.com/browse/CONSOLE-4983): Add Groups to node details [#15981](https://github.com/openshift/console/pull/15981)
* NO-JIRA: prep for 4.22.0-prerelease.2 SDK publish [#16201](https://github.com/openshift/console/pull/16201)
* [OCPBUGS-74140](https://issues.redhat.com/browse/OCPBUGS-74140): Prevent Chinese characters from rendering as unicode escape sequences in alert messages [#16156](https://github.com/openshift/console/pull/16156)
* [OCPBUGS-77814](https://issues.redhat.com/browse/OCPBUGS-77814): Add E2E tests for VolumeAttributesClass UI [#16085](https://github.com/openshift/console/pull/16085)
* [CONSOLE-5073](https://issues.redhat.com/browse/CONSOLE-5073): Update redux-related packages to latest [#16087](https://github.com/openshift/console/pull/16087)
* [OCPBUGS-78543](https://issues.redhat.com/browse/OCPBUGS-78543): Hide filter category selector when only one filter exists [#16153](https://github.com/openshift/console/pull/16153)
* [CONSOLE-5015](https://issues.redhat.com/browse/CONSOLE-5015): Replace react-dnd with PF MultipleFileUpload in topology [#16179](https://github.com/openshift/console/pull/16179)
* [CONSOLE-5134](https://issues.redhat.com/browse/CONSOLE-5134): Update to Go 1.25, K8s 1.35, and Helm 3.20 [#16147](https://github.com/openshift/console/pull/16147)
* [CONSOLE-5135](https://issues.redhat.com/browse/CONSOLE-5135): add deprecation warning for `react-router-dom` [#16178](https://github.com/openshift/console/pull/16178)
* [OCPBUGS-79462](https://issues.redhat.com/browse/OCPBUGS-79462): Skip flaky Data Grid operator E2E tests [#16191](https://github.com/openshift/console/pull/16191)
* [CONSOLE-5027](https://issues.redhat.com/browse/CONSOLE-5027): Refactor public/ Directory Components to useK8sWatchResource(s) [#15954](https://github.com/openshift/console/pull/15954)
* [OCPBUGS-63391](https://issues.redhat.com/browse/OCPBUGS-63391): Replace DataViewTextFilter with existing custom TextFilter [#16151](https://github.com/openshift/console/pull/16151)
* [OCPBUGS-73803](https://issues.redhat.com/browse/OCPBUGS-73803): Fix incorrect OLMv1 documentation URL [#16052](https://github.com/openshift/console/pull/16052)
* [OCPBUGS-74346](https://issues.redhat.com/browse/OCPBUGS-74346): Fix useOperatorCatalogCategories hook. [#16093](https://github.com/openshift/console/pull/16093)
* [OCPBUGS-78534](https://issues.redhat.com/browse/OCPBUGS-78534): Make E2E test create helper idempotent and improve test cleanup [#16148](https://github.com/openshift/console/pull/16148)
* [OCPBUGS-66147](https://issues.redhat.com/browse/OCPBUGS-66147): Make folder field optional for vsphere [#16142](https://github.com/openshift/console/pull/16142)
* [OCPBUGS-77912](https://issues.redhat.com/browse/OCPBUGS-77912): Fix TypeError in OLS code import to console [#16119](https://github.com/openshift/console/pull/16119)
* [OCPBUGS-44612](https://issues.redhat.com/browse/OCPBUGS-44612): Remove useUserPreferenceCompatibility and withUserPreferenceCompatibility [#16076](https://github.com/openshift/console/pull/16076)
* [CONSOLE-5073](https://issues.redhat.com/browse/CONSOLE-5073): Bump i18next to latest [#16150](https://github.com/openshift/console/pull/16150)
* [CONSOLE-4447](https://issues.redhat.com/browse/CONSOLE-4447): Update SecretFormWrapper modal to use ModalFooterWithAlerts [#16167](https://github.com/openshift/console/pull/16167)
* [RFE-7965](https://issues.redhat.com/browse/RFE-7965): add basic auth support for helm repositories [#15624](https://github.com/openshift/console/pull/15624)
* [CONSOLE-5094](https://issues.redhat.com/browse/CONSOLE-5094): Add pesudo CSP violation detection to Cypress [#16048](https://github.com/openshift/console/pull/16048)
* NO-JIRA: Update demo plugin README [#16166](https://github.com/openshift/console/pull/16166)
* [CONSOLE-5093](https://issues.redhat.com/browse/CONSOLE-5093): Remove support for deprecated extensions [#16043](https://github.com/openshift/console/pull/16043)
* [CONSOLE-4447](https://issues.redhat.com/browse/CONSOLE-4447): Remove deprecated modal components and CSS [#16126](https://github.com/openshift/console/pull/16126)
* [CONSOLE-5018](https://issues.redhat.com/browse/CONSOLE-5018): Refactor `UNSAFE_` class components to FC [#16062](https://github.com/openshift/console/pull/16062)
* [CONSOLE-5129](https://issues.redhat.com/browse/CONSOLE-5129): Theme context cleanup [#16155](https://github.com/openshift/console/pull/16155)
* [OCPBUGS-78390](https://issues.redhat.com/browse/OCPBUGS-78390): Reset pagination page when changing namespace [#16138](https://github.com/openshift/console/pull/16138)
* [OCPBUGS-78253](https://issues.redhat.com/browse/OCPBUGS-78253): Fix InstallPlan &gt; Components layout issue [#16127](https://github.com/openshift/console/pull/16127)
* [CONSOLE-4447](https://issues.redhat.com/browse/CONSOLE-4447): Migrate @console/shared modals to PatternFly v6 Modal components [#16079](https://github.com/openshift/console/pull/16079)
* NO-JIRA: Remove cursor context [#16106](https://github.com/openshift/console/pull/16106)
* [CONSOLE-5087](https://issues.redhat.com/browse/CONSOLE-5087): Refactor console-shared-package from Firehose to useK8sWatchResource [#16077](https://github.com/openshift/console/pull/16077)
* [CONSOLE-4447](https://issues.redhat.com/browse/CONSOLE-4447): Migrate modal hooks from useModal to useOverlay [#16061](https://github.com/openshift/console/pull/16061)
* [CONSOLE-5114](https://issues.redhat.com/browse/CONSOLE-5114): Clean up React Router imports and dependencies [#16139](https://github.com/openshift/console/pull/16139)
* [OCPBUGS-78499](https://issues.redhat.com/browse/OCPBUGS-78499): Fix curly quote in operator-hub-community-provider-modal [#16145](https://github.com/openshift/console/pull/16145)
* NO-JIRA: Update PageHeading types [#16095](https://github.com/openshift/console/pull/16095)
* NO-JIRA: Add a progress bar when building [#16099](https://github.com/openshift/console/pull/16099)
* [CONSOLE-4447](https://issues.redhat.com/browse/CONSOLE-4447): Migrate knative-plugin modals to PatternFly 6 [#16065](https://github.com/openshift/console/pull/16065)
* [OCPBUGS-78404](https://issues.redhat.com/browse/OCPBUGS-78404): Fix flaky secret integration tests [#16140](https://github.com/openshift/console/pull/16140)
* [CONSOLE-4447](https://issues.redhat.com/browse/CONSOLE-4447): Migrate core modals to PatternFly 6 Modal components (part 2) [#16123](https://github.com/openshift/console/pull/16123)
* [CONSOLE-4439](https://issues.redhat.com/browse/CONSOLE-4439): Upgrade to React Router 7 [#14957](https://github.com/openshift/console/pull/14957)
* [OCPBUGS-78361](https://issues.redhat.com/browse/OCPBUGS-78361): Fix flaky popover-status-button integration test [#16135](https://github.com/openshift/console/pull/16135)
* [CONSOLE-4447](https://issues.redhat.com/browse/CONSOLE-4447): Migrate core modals to PatternFly v6 modal components (part 1) [#16100](https://github.com/openshift/console/pull/16100)
* And 16 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/afa9aa7a2bcffd0a677b1eef4f196979fe031a4c...a60ab60cc4a1ec115437dcda4c786296d94f00a8)


### [console-operator](https://github.com/openshift/console-operator/tree/f0619391890c61e1a4ebdf5c1c0b247b30f81248)

* [OCPBUGS-79068](https://issues.redhat.com/browse/OCPBUGS-79068): Fix HelmChartRepository YAML format [#1129](https://github.com/openshift/console-operator/pull/1129)
* [CONSOLE-5138](https://issues.redhat.com/browse/CONSOLE-5138): Enable readOnlyRootFilesystem for console and download pod [#1123](https://github.com/openshift/console-operator/pull/1123)
* [OCPBUGS-78477](https://issues.redhat.com/browse/OCPBUGS-78477): Bump API to support ExternalOIDCWithUpstreamParity new  API fields [#1125](https://github.com/openshift/console-operator/pull/1125)
* [OCPBUGS-63502](https://issues.redhat.com/browse/OCPBUGS-63502): Redeploy console pods upon cert rotation [#1093](https://github.com/openshift/console-operator/pull/1093)
* [OCPBUGS-65622](https://issues.redhat.com/browse/OCPBUGS-65622): add controller for downloads service account deletion logic [#1111](https://github.com/openshift/console-operator/pull/1111)
* Sync Dockerfile.ocp image [#1127](https://github.com/openshift/console-operator/pull/1127)
* [Full changelog](https://github.com/openshift/console-operator/compare/3d173bcd4293731589d746450509e074dbc4dc59...f0619391890c61e1a4ebdf5c1c0b247b30f81248)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/98b1f4acf9c004687ef55e9f187703768933bb56)

* [OCPBUGS-77562](https://issues.redhat.com/browse/OCPBUGS-77562), [STOR-2758](https://issues.redhat.com/browse/STOR-2758): Rebase to upstream v4.11.0 for OCP 4.22 [#94](https://github.com/openshift/csi-external-attacher/pull/94)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/cb0b279d879d906a2e7173210b319cb0ab17b95c...98b1f4acf9c004687ef55e9f187703768933bb56)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/f90c06a3113696cdb757e4b7c9dcfeb0e9dddb81)

* [STOR-2758](https://issues.redhat.com/browse/STOR-2758): Rebase to upstream v6.2.0 for OCP 4.22 [#121](https://github.com/openshift/csi-external-provisioner/pull/121)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/e45946608ec831b2af081716d7e3587af6fd9707...f90c06a3113696cdb757e4b7c9dcfeb0e9dddb81)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/4e74a4aa52a2046d6b97a47dff7a60ddb73d0bbd)

* [STOR-2758](https://issues.redhat.com/browse/STOR-2758): Rebase to upstream v2.1.0 for OCP 4.22 [#183](https://github.com/openshift/csi-external-resizer/pull/183)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/a3f9bc8774b384a4e21c0e85a48b63e1d6ad192a...4e74a4aa52a2046d6b97a47dff7a60ddb73d0bbd)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/cf174b30fad107d354afb0f0b09030a7c97fd296)

* [OCPBUGS-77738](https://issues.redhat.com/browse/OCPBUGS-77738), [STOR-2758](https://issues.redhat.com/browse/STOR-2758): Rebase to upstream v2.16.0 for OCP 4.22 [#95](https://github.com/openshift/csi-node-driver-registrar/pull/95)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/65d7aa731ce115a2ecb0d79720a05d34c92b05ba...cf174b30fad107d354afb0f0b09030a7c97fd296)


### [docker-builder](https://github.com/openshift/builder/tree/fcd4ce2d96613a27bd1ab7f53ff47225976c4ba9)

* [OKD-322](https://issues.redhat.com/browse/OKD-322): Update Dockerfile to work on CentOS/RHEL 10 [#500](https://github.com/openshift/builder/pull/500)
* [Full changelog](https://github.com/openshift/builder/compare/711f2e6886a2afaa281524cd08327f86771f53b0...fcd4ce2d96613a27bd1ab7f53ff47225976c4ba9)


### [docker-registry](https://github.com/openshift/image-registry/tree/c3fa7db05e878e35ff95fcff896f716e82fdd170)

* [CNTRLPLANE-3073](https://issues.redhat.com/browse/CNTRLPLANE-3073): bump kubernetes to v1.35 [#467](https://github.com/openshift/image-registry/pull/467)
* [Full changelog](https://github.com/openshift/image-registry/compare/d4cce000f749280e593ed758791b6ef97cc01746...c3fa7db05e878e35ff95fcff896f716e82fdd170)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/4665af94c9085874d9f3a34fabfccdea12950f3a)

* [OCPCLOUD-3274](https://issues.redhat.com/browse/OCPCLOUD-3274): Merge https://github.com/kubernetes/cloud-provider-gcp:master (378730f) into main [#99](https://github.com/openshift/cloud-provider-gcp/pull/99)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/c87eef5d0dfc33bc07c9b74cd68f4b5f38203c04...4665af94c9085874d9f3a34fabfccdea12950f3a)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/0073bd1187c07febc963fc67f0df67cd33c8f218)

* [OCPBUGS-81576](https://issues.redhat.com/browse/OCPBUGS-81576): Bump gRPC-Go package for CVE fix [#155](https://github.com/openshift/machine-api-provider-gcp/pull/155)
* [OCPCLOUD-3279](https://issues.redhat.com/browse/OCPCLOUD-3279): Rebase to Kube 1.35 for Machine API Provider GCP [#145](https://github.com/openshift/machine-api-provider-gcp/pull/145)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/e31069d585cd2f3f7d93dee40ed6312c634c7c36...0073bd1187c07febc963fc67f0df67cd33c8f218)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/2ba117405ff1cee765d42491f5863b06a1c9a2da)

* [STOR-2751](https://issues.redhat.com/browse/STOR-2751): Rebase to upstream v1.24.1 for OCP 4.22 [#98](https://github.com/openshift/gcp-pd-csi-driver/pull/98)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/88e5fe85ca8aef5de6ac32f898325f44c33c0c2f...2ba117405ff1cee765d42491f5863b06a1c9a2da)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/6b00096f4a84203a69467802b846f215b4e04888)

* [STOR-2762](https://issues.redhat.com/browse/STOR-2762): Bump all deps for 4.22 [#175](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/175)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/14179b560cb644f386e42174a326d00bc7ba9479...6b00096f4a84203a69467802b846f215b4e04888)


### [haproxy-router](https://github.com/openshift/router/tree/896390778ebe15f57f87e6ca78f11c96e64c2652)

* [NE-2332](https://issues.redhat.com/browse/NE-2332): Add support for TLS curves in HAProxy configuration [#755](https://github.com/openshift/router/pull/755)
* [TRT-2597](https://issues.redhat.com/browse/TRT-2597): [Revert "NE-2333: Add support for configurable SSL curves in HAProxy configuration"](https://github.com/openshift/router/pull/754#top) [#754](https://github.com/openshift/router/pull/754)
* [NE-2333](https://issues.redhat.com/browse/NE-2333): Add support for configurable SSL curves in HAProxy configuration [#678](https://github.com/openshift/router/pull/678)
* [OCPBUGS-77773](https://issues.redhat.com/browse/OCPBUGS-77773): fix backend server health check if DCM is enabled [#747](https://github.com/openshift/router/pull/747)
* [OCPBUGS-62238](https://issues.redhat.com/browse/OCPBUGS-62238): configure TLS profile for metrics endpoint [#748](https://github.com/openshift/router/pull/748)
* NO-JIRA: Do not install weak dependencies such as logrotate [#687](https://github.com/openshift/router/pull/687)
* [NE-2418](https://issues.redhat.com/browse/NE-2418): Add haproxy_max_connections metric [#728](https://github.com/openshift/router/pull/728)
* [OCPBUGS-75009](https://issues.redhat.com/browse/OCPBUGS-75009): sort list of map entries on DCM [#738](https://github.com/openshift/router/pull/738)
* [Full changelog](https://github.com/openshift/router/compare/2e1389e6227ed0099bd1c41b883363e6575cb2f0...896390778ebe15f57f87e6ca78f11c96e64c2652)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/9193b12ab88e006723c8605bea1659bfcbe7d638)

* [OCPBUGS-78990](https://issues.redhat.com/browse/OCPBUGS-78990): Bump 1.35.3 to master [#2633](https://github.com/openshift/kubernetes/pull/2633)
* [OCPBUGS-78986](https://issues.redhat.com/browse/OCPBUGS-78986): UPSTREAM: 137926: KEP-961: demote maxUnavailable feature in statefulset to off by default [#2632](https://github.com/openshift/kubernetes/pull/2632)
* NO-JIRA: UPSTREAM: &lt;carry&gt;: Register OpenShift cloud providers in k8s-tests-ext [#2635](https://github.com/openshift/kubernetes/pull/2635)
* [OCPBUGS-78504](https://issues.redhat.com/browse/OCPBUGS-78504): unflake HPAConfigurableTolerance test [#2631](https://github.com/openshift/kubernetes/pull/2631)
* UPSTREAM: &lt;carry&gt;: OCPBUGS-39360: Fix ClusterIsIPv6() detection for dual-stack v6-primary clusters [#2603](https://github.com/openshift/kubernetes/pull/2603)
* NO-JIRA: UPSTREAM: &lt;carry&gt;: Add jacobsee and jubittajohn to DOWNSTREAM_OWNERS [#2630](https://github.com/openshift/kubernetes/pull/2630)
* [OCPBUGS-77866](https://issues.redhat.com/browse/OCPBUGS-77866): Bump 1.35.2 to master [#2612](https://github.com/openshift/kubernetes/pull/2612)
* [Full changelog](https://github.com/openshift/kubernetes/compare/ac14da2d42850801e43e6c61f985f24915f6f2ee...9193b12ab88e006723c8605bea1659bfcbe7d638)


### [hypershift](https://github.com/openshift/hypershift/tree/6a333169a21858dd7eb14509b01ab34f7f24e99e)

* [OCPBUGS-82301](https://issues.redhat.com/browse/OCPBUGS-82301): fix(catalogs): use semver comparison for catalog version cap to handle OCP 5.0 [#8195](https://github.com/openshift/hypershift/pull/8195)
* NO-JIRA: control-plane-pki-operator: fix Event emission logic, format [#8190](https://github.com/openshift/hypershift/pull/8190)
* [OCPBUGS-82192](https://issues.redhat.com/browse/OCPBUGS-82192): fix(webhookcerts): handle upgrade from service-ca managed certs [#8189](https://github.com/openshift/hypershift/pull/8189)
* [OCPBUGS-82159](https://issues.redhat.com/browse/OCPBUGS-82159): fix(ignition-server): use major+minor version comparison for OCP 5.0 payloads [#8182](https://github.com/openshift/hypershift/pull/8182)
* [CNTRLPLANE-2511](https://issues.redhat.com/browse/CNTRLPLANE-2511): refactor(cpo): move OAuth internal LB annotation into ReconcileService [#8185](https://github.com/openshift/hypershift/pull/8185)
* [CNTRLPLANE-2511](https://issues.redhat.com/browse/CNTRLPLANE-2511): Support OAuth LoadBalancer with Azure Private Link Service [#8149](https://github.com/openshift/hypershift/pull/8149)
* [OCPBUGS-81644](https://issues.redhat.com/browse/OCPBUGS-81644): fix(cli): fix Azure destroy cluster leaving vnet/nsg resource groups for private topology [#8151](https://github.com/openshift/hypershift/pull/8151)
* [OCPBUGS-33097](https://issues.redhat.com/browse/OCPBUGS-33097): Remove deprecated OVNSbDb service type from default strategy mappings [#8164](https://github.com/openshift/hypershift/pull/8164)
* [CNTRLPLANE-3174](https://issues.redhat.com/browse/CNTRLPLANE-3174): test: Add unit tests for product-cli, token-minter, and sync-fg-configmap [#8178](https://github.com/openshift/hypershift/pull/8178)
* [CNTRLPLANE-3050](https://issues.redhat.com/browse/CNTRLPLANE-3050): feat(ci): use Konflux-built image for GitHub Actions runners [#8092](https://github.com/openshift/hypershift/pull/8092)
* [CNTRLPLANE-2841](https://issues.redhat.com/browse/CNTRLPLANE-2841): test(e2e): add metrics-forwarder e2e test verifying data-plane scraping [#8147](https://github.com/openshift/hypershift/pull/8147)
* [CNTRLPLANE-3037](https://issues.redhat.com/browse/CNTRLPLANE-3037): Create separate assets package specifically for CRD management [#8150](https://github.com/openshift/hypershift/pull/8150)
* [GCP-462](https://issues.redhat.com/browse/GCP-462): Add GCP hosted cluster documentation [#8027](https://github.com/openshift/hypershift/pull/8027)
* NO-JIRA: docs(ci): add sync-community-fork token rotation guide [#8173](https://github.com/openshift/hypershift/pull/8173)
* [CNTRLPLANE-2841](https://issues.redhat.com/browse/CNTRLPLANE-2841): feat(HCCO): reintroduce guest cluster metrics forwarder for control plane metrics [#8146](https://github.com/openshift/hypershift/pull/8146)
* NO-JIRA: fix(e2e): handle rate limiter context deadline error during cleanup [#8137](https://github.com/openshift/hypershift/pull/8137)
* NO-JIRA: fix(ci): remove catch-all pattern from codecov ignore list [#8171](https://github.com/openshift/hypershift/pull/8171)
* [CNTRLPLANE-2511](https://issues.redhat.com/browse/CNTRLPLANE-2511): Allow LoadBalancer publishing strategy for OAuthServer on self-managed Azure [#8148](https://github.com/openshift/hypershift/pull/8148)
* NO-JIRA: chore(ci): add client/ to codecov ignore list [#8167](https://github.com/openshift/hypershift/pull/8167)
* NO-JIRA: feat(e2e): add Azure platform support for backup/restore tests [#8144](https://github.com/openshift/hypershift/pull/8144)
* [OCPBUGS-74960](https://issues.redhat.com/browse/OCPBUGS-74960): prevent resource leak on deletion and handle DependencyViolation [#7868](https://github.com/openshift/hypershift/pull/7868)
* NO-JIRA: docs: expand custom images guide with Dockerfile.dev and CPO override [#8155](https://github.com/openshift/hypershift/pull/8155)
* [CNTRLPLANE-3042](https://issues.redhat.com/browse/CNTRLPLANE-3042): Parallelize make verify targets for faster local development [#8051](https://github.com/openshift/hypershift/pull/8051)
* NO-JIRA: ci: fix codecov ignore patterns for docs and nested files [#8156](https://github.com/openshift/hypershift/pull/8156)
* [OCPBUGS-81270](https://issues.redhat.com/browse/OCPBUGS-81270): fix(external-dns): mitigate Azure DNS API throttling [#8098](https://github.com/openshift/hypershift/pull/8098)
* NO-JIRA: ci: ignore non-Go files in codecov coverage analysis [#8154](https://github.com/openshift/hypershift/pull/8154)
* [OCPBUGS-67240](https://issues.redhat.com/browse/OCPBUGS-67240): Ignition generalize image download errors [#7673](https://github.com/openshift/hypershift/pull/7673)
* NO-JIRA: fix(Makefile): auto-detect upstream remote for lint [#8152](https://github.com/openshift/hypershift/pull/8152)
* [OCPBUGS-79539](https://issues.redhat.com/browse/OCPBUGS-79539): fix(cpo-v2): preserve HCCO modifications to OCM Controllers field [#8072](https://github.com/openshift/hypershift/pull/8072)
* [AUTOSCALE-582](https://issues.redhat.com/browse/AUTOSCALE-582): wire CRD sync and CEL adjustments into karpenter-api target [#8119](https://github.com/openshift/hypershift/pull/8119)
* [CNTRLPLANE-3111](https://issues.redhat.com/browse/CNTRLPLANE-3111): docs: add service publishing strategies reference documentation [#8107](https://github.com/openshift/hypershift/pull/8107)
* NO-JIRA: ci: make docs deploy preview non-blocking [#8145](https://github.com/openshift/hypershift/pull/8145)
* Revert "CNTRLPLANE-2841: feat(HCCO): add guest cluster metrics forwarder for control plane metrics" [#8141](https://github.com/openshift/hypershift/pull/8141)
* NO-JIRA: fix(e2e): handle dual RHCOS payloads in Karpenter drift OS image check [#8128](https://github.com/openshift/hypershift/pull/8128)
* [OCPBUGS-50003](https://issues.redhat.com/browse/OCPBUGS-50003): add ConfigMap fallback and EC2 error caching for vCPU metrics resolution [#6723](https://github.com/openshift/hypershift/pull/6723)
* [CNTRLPLANE-2172](https://issues.redhat.com/browse/CNTRLPLANE-2172): feat(azure): add private endpoint access topology for self-managed HostedClusters [#7821](https://github.com/openshift/hypershift/pull/7821)
* [CNTRLPLANE-2841](https://issues.redhat.com/browse/CNTRLPLANE-2841): feat(HCCO): add guest cluster metrics forwarder for control plane metrics [#7790](https://github.com/openshift/hypershift/pull/7790)
* [CNTRLPLANE-2797](https://issues.redhat.com/browse/CNTRLPLANE-2797): hypershift-operator webhooks port 9443 respect cluster TLS security profile [#8078](https://github.com/openshift/hypershift/pull/8078)
* [OCPBUGS-50603](https://issues.redhat.com/browse/OCPBUGS-50603): Create dedicated identity for KAS bootstrap container [#6827](https://github.com/openshift/hypershift/pull/6827)
* Revert "NO-JIRA: test(e2e): extend AWS guest resource cleanup timeout" [#8138](https://github.com/openshift/hypershift/pull/8138)
* NO-JIRA: ci: improve CI efficiency and codecov configuration [#8113](https://github.com/openshift/hypershift/pull/8113)
* NO-JIRA: test(e2e): add KubeVirt platform to backup/restore e2e test [#8131](https://github.com/openshift/hypershift/pull/8131)
* [OCPBUGS-81162](https://issues.redhat.com/browse/OCPBUGS-81162): fix(cpo): skip router LB services for ARO HCP [#8087](https://github.com/openshift/hypershift/pull/8087)
* NO-JIRA: ci: enable paths filter on envtest workflows [#8125](https://github.com/openshift/hypershift/pull/8125)
* NO-JIRA: test(e2e): extend AWS guest resource cleanup timeout [#8124](https://github.com/openshift/hypershift/pull/8124)
* NO-JIRA: fix(test): deep copy CRDs inside envtest retry loop [#8127](https://github.com/openshift/hypershift/pull/8127)
* NO-JIRA: chore(docs-agg): remove document count from aggregated file [#8126](https://github.com/openshift/hypershift/pull/8126)
* NO-JIRA: ci: separate envtest from unit tests in CI workflow [#8120](https://github.com/openshift/hypershift/pull/8120)
* [OCPBUGS-80926](https://issues.redhat.com/browse/OCPBUGS-80926): consolidate disaster-recovery prerequisites into dedicated page [#8080](https://github.com/openshift/hypershift/pull/8080)
* [CNTRLPLANE-3116](https://issues.redhat.com/browse/CNTRLPLANE-3116): fix(ci): drop pip cache from docs-preview workflow [#8116](https://github.com/openshift/hypershift/pull/8116)
* NO-JIRA: fix(api): regenerate feature gate manifests for ExternalOIDCWithUpstreamParity [#8117](https://github.com/openshift/hypershift/pull/8117)
* [OCPBUGS-78763](https://issues.redhat.com/browse/OCPBUGS-78763): fix: global-pull-secret daemonset node labeling race condition causes pods not to be scheduled on Replace upgrade strategy nodes in time [#7981](https://github.com/openshift/hypershift/pull/7981)
* [CNTRLPLANE-3037](https://issues.redhat.com/browse/CNTRLPLANE-3037): Introduce envtest for integration tests alternative [#8089](https://github.com/openshift/hypershift/pull/8089)
* [CNTRLPLANE-3116](https://issues.redhat.com/browse/CNTRLPLANE-3116): ci(docs): migrate docs-preview job to GitHub Actions [#8109](https://github.com/openshift/hypershift/pull/8109)
* [CNTRLPLANE-244](https://issues.redhat.com/browse/CNTRLPLANE-244): fix(ci): configure Codecov PR comments and add unit tests [#8085](https://github.com/openshift/hypershift/pull/8085)
* NO-JIRA: chore(deps): weekly dependabot consolidation [#8077](https://github.com/openshift/hypershift/pull/8077)
* [OCPBUGS-78931](https://issues.redhat.com/browse/OCPBUGS-78931): add KubeVirt-specific backup settings [#8022](https://github.com/openshift/hypershift/pull/8022)
* [OCPBUGS-81284](https://issues.redhat.com/browse/OCPBUGS-81284): fix(release): allow multiple machine-os component versions [#8101](https://github.com/openshift/hypershift/pull/8101)
* NO-JIRA: fix(aws): load credentials from --aws-creds file using SDK v2 [#8095](https://github.com/openshift/hypershift/pull/8095)
* NO-JIRA: chore(ci): update hypershift-ci-2 manifests [#8062](https://github.com/openshift/hypershift/pull/8062)
* [CNTRLPLANE-2678](https://issues.redhat.com/browse/CNTRLPLANE-2678): Adapt etcd-backup command and add HO namespace manifests [#8040](https://github.com/openshift/hypershift/pull/8040)
* [CNTRLPLANE-2551](https://issues.redhat.com/browse/CNTRLPLANE-2551): Hypershift integration for API Auth Config changes [#7774](https://github.com/openshift/hypershift/pull/7774)
* [GCP-447](https://issues.redhat.com/browse/GCP-447): inject token-minter as native sidecar init container [#7965](https://github.com/openshift/hypershift/pull/7965)
* [AUTOSCALE-538](https://issues.redhat.com/browse/AUTOSCALE-538), [AUTOSCALE-539](https://issues.redhat.com/browse/AUTOSCALE-539): Add Autonode status node counts + enabled condition to HostedCluster API [#7794](https://github.com/openshift/hypershift/pull/7794)
* [CNTRLPLANE-244](https://issues.redhat.com/browse/CNTRLPLANE-244): ci: add Codecov integration to unit test workflow [#8060](https://github.com/openshift/hypershift/pull/8060)
* [CNTRLPLANE-3050](https://issues.redhat.com/browse/CNTRLPLANE-3050): Pre-build lint tools and fix Konflux pipeline triggers [#8052](https://github.com/openshift/hypershift/pull/8052)
* [CNTRLPLANE-2838](https://issues.redhat.com/browse/CNTRLPLANE-2838): feat(CPO): add metrics-proxy control plane component [#7752](https://github.com/openshift/hypershift/pull/7752)
* [CNTRLPLANE-2787](https://issues.redhat.com/browse/CNTRLPLANE-2787): Introduce BASE_DOMAIN env var for E2E test configuration [#7930](https://github.com/openshift/hypershift/pull/7930)
* [CNTRLPLANE-2786](https://issues.redhat.com/browse/CNTRLPLANE-2786): Extend controller architecture diagram with consumes relationship [#8029](https://github.com/openshift/hypershift/pull/8029)
* [IR-350](https://issues.redhat.com/browse/IR-350): add tls security profile configuration for the image registry operator [#8011](https://github.com/openshift/hypershift/pull/8011)
* [AUTOSCALE-571](https://issues.redhat.com/browse/AUTOSCALE-571): fix(karpenter): don't associate public IP addresses for the default OpenshiftEC2NodeClass [#7853](https://github.com/openshift/hypershift/pull/7853)
* NO-JIRA: feat(e2e): skip SupportedVersionSkew condition on OCP &lt; 4.21 in backup/restore tests [#8067](https://github.com/openshift/hypershift/pull/8067)
* [CNTRLPLANE-2076](https://issues.redhat.com/browse/CNTRLPLANE-2076): remove v2 import aliases left from SDK migration [#8063](https://github.com/openshift/hypershift/pull/8063)
* [AUTOSCALE-559](https://issues.redhat.com/browse/AUTOSCALE-559): PrivateLink plumbing for karpenter ec2nodeclass subnets [#7791](https://github.com/openshift/hypershift/pull/7791)
* [STOR-2770](https://issues.redhat.com/browse/STOR-2770): Generate Azure Disk and File CSI Driver Operator metrics serving certs by HCP controller [#7970](https://github.com/openshift/hypershift/pull/7970)
* [CNTRLPLANE-2678](https://issues.redhat.com/browse/CNTRLPLANE-2678): Add fetch-etcd-certs CPO subcommand for HCPEtcdBackup [#8010](https://github.com/openshift/hypershift/pull/8010)
* NO-JIRA: revert(api): remove APIServer Route CEL validation for Azure [#8074](https://github.com/openshift/hypershift/pull/8074)
* [CNTRLPLANE-2172](https://issues.redhat.com/browse/CNTRLPLANE-2172): feat(api): add Azure private endpoint access and PrivateLinkService CRD [#8055](https://github.com/openshift/hypershift/pull/8055)
* [OCPSTRAT-2831](https://issues.redhat.com/browse/OCPSTRAT-2831): chore(owners): add cblecker to core-reviewers and core-approvers [#8018](https://github.com/openshift/hypershift/pull/8018)
* [OCPBUGS-79428](https://issues.redhat.com/browse/OCPBUGS-79428): Add recipe for ACM/MCE HyperShift Operator overrides [#8057](https://github.com/openshift/hypershift/pull/8057)
* [CNTRLPLANE-2076](https://issues.redhat.com/browse/CNTRLPLANE-2076): complete SDK v1 removal and post-migration cleanup [#8038](https://github.com/openshift/hypershift/pull/8038)
* [CNTRLPLANE-2049](https://issues.redhat.com/browse/CNTRLPLANE-2049): update GCP validation error expectations in TestOnCreateAPIUX [#8037](https://github.com/openshift/hypershift/pull/8037)
* [CNTRLPLANE-3046](https://issues.redhat.com/browse/CNTRLPLANE-3046): feat(ci): add monitoring and alerting for ARC runners [#8044](https://github.com/openshift/hypershift/pull/8044)
* [CNTRLPLANE-3049](https://issues.redhat.com/browse/CNTRLPLANE-3049): split verify checks into individual GitHub Actions workflows [#8049](https://github.com/openshift/hypershift/pull/8049)
* [OCPBUGS-79352](https://issues.redhat.com/browse/OCPBUGS-79352): fix(oapi): force WatchList feature gate to disabled for openshift-apiserver [#8035](https://github.com/openshift/hypershift/pull/8035)
* [OCPBUGS-79071](https://issues.redhat.com/browse/OCPBUGS-79071): Fix AWSEndpointService private-router teardown stuck on active VPC Endpoint connections [#8030](https://github.com/openshift/hypershift/pull/8030)
* [CNTRLPLANE-3041](https://issues.redhat.com/browse/CNTRLPLANE-3041): Override ARO/HCP 4.20 CPO with Azure Pod Identity backport [#8025](https://github.com/openshift/hypershift/pull/8025)
* [CNTRLPLANE-3054](https://issues.redhat.com/browse/CNTRLPLANE-3054): Apply init task 0.3 migration to fix broken Konflux pipelines [#8053](https://github.com/openshift/hypershift/pull/8053)
* [OCPBUGS-70301](https://issues.redhat.com/browse/OCPBUGS-70301): force-remove karpenter finalizer when guest KAS is down [#7939](https://github.com/openshift/hypershift/pull/7939)
* [CNTRLPLANE-3047](https://issues.redhat.com/browse/CNTRLPLANE-3047): fix(ci): use community fork token for checkout credential helper [#8050](https://github.com/openshift/hypershift/pull/8050)
* [CNTRLPLANE-2788](https://issues.redhat.com/browse/CNTRLPLANE-2788): validate memory quantity in KubeVirt nodepool create [#7884](https://github.com/openshift/hypershift/pull/7884)
* NO-JIRA: chore(ci): update Konflux Tekton tasks to latest versions [#8048](https://github.com/openshift/hypershift/pull/8048)
* [CNTRLPLANE-3048](https://issues.redhat.com/browse/CNTRLPLANE-3048): refactor gh-actions-runner pipelines and improve CEL triggers [#8045](https://github.com/openshift/hypershift/pull/8045)
* [OCPBUGS-79369](https://issues.redhat.com/browse/OCPBUGS-79369): Add Konflux archived PipelineRun skill and update task discovery [#8043](https://github.com/openshift/hypershift/pull/8043)
* [CNTRLPLANE-3047](https://issues.redhat.com/browse/CNTRLPLANE-3047): add workflow to sync hypershift-community fork [#8042](https://github.com/openshift/hypershift/pull/8042)
* NO-JIRA: chore(claude): add restructure-commits plugin command [#7927](https://github.com/openshift/hypershift/pull/7927)
* [CNTRLPLANE-2986](https://issues.redhat.com/browse/CNTRLPLANE-2986): feat(ci): Add self-hosted GitHub Actions runners for HyperShift [#7980](https://github.com/openshift/hypershift/pull/7980)
* NO-JIRA: fix(ci): pass --upgrade-versions to konflux task update skill [#8036](https://github.com/openshift/hypershift/pull/8036)
* [CNTRLPLANE-2998](https://issues.redhat.com/browse/CNTRLPLANE-2998): Migrate SQS to AWS SDK v2 [#8015](https://github.com/openshift/hypershift/pull/8015)
* NO-JIRA: refactor(oadp): unify backup/restore e2e test with platform auto-detection [#7971](https://github.com/openshift/hypershift/pull/7971)
* [OCPBUGS-78996](https://issues.redhat.com/browse/OCPBUGS-78996): fix(test): create SQS queue dynamically in spot termination handler e2e test [#8007](https://github.com/openshift/hypershift/pull/8007)
* [CNTRLPLANE-2049](https://issues.redhat.com/browse/CNTRLPLANE-2049): fix(api): audit and improve GCP API validation rules [#8003](https://github.com/openshift/hypershift/pull/8003)
* [CNTRLPLANE-2081](https://issues.redhat.com/browse/CNTRLPLANE-2081): Migrate RAM and ARN to AWS SDK v2 [#7986](https://github.com/openshift/hypershift/pull/7986)
* [OCPBUGS-78778](https://issues.redhat.com/browse/OCPBUGS-78778): fix(cpo): Don't remove HCP Ingress from routes when CapabilityRoute is disabled [#8001](https://github.com/openshift/hypershift/pull/8001)
* NO-JIRA: Disable parent ownership for api subdir [#8009](https://github.com/openshift/hypershift/pull/8009)
* NO-JIRA: fix(api): replace CEL url() validators with regex to fix CRD cost budget [#8004](https://github.com/openshift/hypershift/pull/8004)
* [OCPBUGS-78544](https://issues.redhat.com/browse/OCPBUGS-78544): Update base images to address multiple CVEs flagged by MSFT security scans [#7983](https://github.com/openshift/hypershift/pull/7983)
* [OCPBUGS-78705](https://issues.redhat.com/browse/OCPBUGS-78705): Bootstrap CVO manifests should be filtered based on feature-set annotation [#7984](https://github.com/openshift/hypershift/pull/7984)
* NO-JIRA: fix(api): extend kubeapilinter scope to all non-vendor API types [#8002](https://github.com/openshift/hypershift/pull/8002)
* NO-JIRA: build(e2e): include hypershift binary in Dockerfile.e2e [#7919](https://github.com/openshift/hypershift/pull/7919)
* [CNTRLPLANE-2925](https://issues.redhat.com/browse/CNTRLPLANE-2925): add NodePool.Status.NodesInfo for node version distribution [#7917](https://github.com/openshift/hypershift/pull/7917)
* [OCPSTRAT-2336](https://issues.redhat.com/browse/OCPSTRAT-2336): Adjust karpenter API to OpenShift conventions [#7952](https://github.com/openshift/hypershift/pull/7952)
* [OCPBUGS-78539](https://issues.redhat.com/browse/OCPBUGS-78539): chore(e2e): add temporary crash toleration for dns-operator [#7978](https://github.com/openshift/hypershift/pull/7978)
* [CNTRLPLANE-2172](https://issues.redhat.com/browse/CNTRLPLANE-2172): fix(e2e): register Azure private platform e2e flags [#7977](https://github.com/openshift/hypershift/pull/7977)
* NO-JIRA: chore(owners): require api-approvers approval for api/ changes [#7972](https://github.com/openshift/hypershift/pull/7972)
* Update Kube API Linter config for new APIs [#7982](https://github.com/openshift/hypershift/pull/7982)
* NO-JIRA: add .gitattributes to collapse generated files in PR diffs [#7918](https://github.com/openshift/hypershift/pull/7918)
* [CNTRLPLANE-2910](https://issues.redhat.com/browse/CNTRLPLANE-2910): feat(cpo): add Azure workload identity webhook as KAS sidecar [#7867](https://github.com/openshift/hypershift/pull/7867)
* [CNTRLPLANE-2077](https://issues.redhat.com/browse/CNTRLPLANE-2077): refactor(cleanzones): migrate AWS SDK from v1 to v2 [#7960](https://github.com/openshift/hypershift/pull/7960)
* [CNTRLPLANE-2219](https://issues.redhat.com/browse/CNTRLPLANE-2219): feat(aws): migrate ec2 to AWS SDK v2 [#7871](https://github.com/openshift/hypershift/pull/7871)
* [GCP-440](https://issues.redhat.com/browse/GCP-440): Fix GCP boot image discovery from CoreOS stream metadata [#7881](https://github.com/openshift/hypershift/pull/7881)
* NO-JIRA: fix(oadp): correct Agent platform API group in backup/restore resources [#7974](https://github.com/openshift/hypershift/pull/7974)
* [OCPBUGS-78356](https://issues.redhat.com/browse/OCPBUGS-78356): fix(sharedingress): coalesce HAProxy reloads to prevent reload storms [#7945](https://github.com/openshift/hypershift/pull/7945)
* [CNTRLPLANE-2172](https://issues.redhat.com/browse/CNTRLPLANE-2172): fix(operator): accept Azure as valid private-platform value [#7968](https://github.com/openshift/hypershift/pull/7968)
* NO-JIRA: Rename cilium directory to v1.15.1 [#7888](https://github.com/openshift/hypershift/pull/7888)
* [OCPBUGS-70354](https://issues.redhat.com/browse/OCPBUGS-70354): add serviceAccount to global-pull-secret-syncer [#7439](https://github.com/openshift/hypershift/pull/7439)
* NO-JIRA: feat(e2e): add OIDC IAM fix and NodePool validation to backup/restore [#7837](https://github.com/openshift/hypershift/pull/7837)
* [CNTRLPLANE-2172](https://issues.redhat.com/browse/CNTRLPLANE-2172): feat(install): register Azure private platform flags [#7912](https://github.com/openshift/hypershift/pull/7912)
* [CNTRLPLANE-2978](https://issues.redhat.com/browse/CNTRLPLANE-2978): Add Azure CPO override for OCP 4.20 [#7955](https://github.com/openshift/hypershift/pull/7955)
* [OCPBUGS-65687](https://issues.redhat.com/browse/OCPBUGS-65687): fix(cpo): prevent informer creation for inaccessible resource types [#7819](https://github.com/openshift/hypershift/pull/7819)
* [GCP-441](https://issues.redhat.com/browse/GCP-441): correct CCM crash toleration key to match pod label [#7926](https://github.com/openshift/hypershift/pull/7926)
* [CNTRLPLANE-2916](https://issues.redhat.com/browse/CNTRLPLANE-2916): conditionally create openshift-ingress network policy based on route labeling [#7872](https://github.com/openshift/hypershift/pull/7872)
* NO-JIRA: chore: add .git/ to .dockerignore [#7944](https://github.com/openshift/hypershift/pull/7944)
* NO-JIRA: fix(test): add aws-node-termination-handler to safe-evict audited list [#7816](https://github.com/openshift/hypershift/pull/7816)
* NO-JIRA: test(scheduler): add pair loss recovery unit coverage [#7848](https://github.com/openshift/hypershift/pull/7848)
* [OCPBUGS-67262](https://issues.redhat.com/browse/OCPBUGS-67262): fix(e2e): Use NodePool replicas as authoritative source for expected node count instead of CountAvailableNodes [#7378](https://github.com/openshift/hypershift/pull/7378)
* [OCPBUGS-77160](https://issues.redhat.com/browse/OCPBUGS-77160): include NMStateConfig in Agent platform OADP backup resources [#7847](https://github.com/openshift/hypershift/pull/7847)
* [AUTOSCALE-571](https://issues.redhat.com/browse/AUTOSCALE-571): fix(karpenter): select existing private subnets for default `OpenshiftEC2NodeClass` [#7933](https://github.com/openshift/hypershift/pull/7933)
* [OCPBUGS-78198](https://issues.redhat.com/browse/OCPBUGS-78198): fix(catalogs): update catalog image version cap to 4.21 [#7915](https://github.com/openshift/hypershift/pull/7915)
* [OCPBUGS-78184](https://issues.redhat.com/browse/OCPBUGS-78184): fix(hostedcluster): Remove referenced resource annotations regardless of hcp status [#7913](https://github.com/openshift/hypershift/pull/7913)
* [CNTRLPLANE-2203](https://issues.redhat.com/browse/CNTRLPLANE-2203): reintroduce ControlPlaneConnectionAvailable condition with conformance fix [#7746](https://github.com/openshift/hypershift/pull/7746)
* [OCPBUGS-78185](https://issues.redhat.com/browse/OCPBUGS-78185): Fix deadlock when changing release image during initial provisioning [#7910](https://github.com/openshift/hypershift/pull/7910)
* [CNTRLPLANE-634](https://issues.redhat.com/browse/CNTRLPLANE-634): Make external-dns interval and AWS zones cache duration configurable [#7931](https://github.com/openshift/hypershift/pull/7931)
* And 10 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/hypershift/compare/7ca0a78a8221b2bc10e2a81e335731765ef3ad16...6a333169a21858dd7eb14509b01ab34f7f24e99e)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/aa40cd7e1a37e2f48f238fc8d293b0546d5d4caf)

* [STOR-2754](https://issues.redhat.com/browse/STOR-2754): Rebase to upstream v5.2.21 for OCP 4.22 [#118](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/118)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/55d3c828de3fe592566faeff19d71231bbc8963c...aa40cd7e1a37e2f48f238fc8d293b0546d5d4caf)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/f859eac9612d8fff52013b809840b015cee6742d)

* [STOR-2762](https://issues.redhat.com/browse/STOR-2762): Bump all deps for 4.22 [#168](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/168)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/fcb386083a9523234e1baf20efa39aee4719b3df...f859eac9612d8fff52013b809840b015cee6742d)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/03b143d588768a18fd8afa1534ea7d7a04b4d1f3)

* [OCPCLOUD-3296](https://issues.redhat.com/browse/OCPCLOUD-3296): Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.13.1 (93d5b50) into main [#142](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/142)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/f309776baba3efe0c9faf7b8b786e9bc114f656a...03b143d588768a18fd8afa1534ea7d7a04b4d1f3)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/46b8c72c675770295f5c2c8f85f5f705ca35787c)

* [OCPCLOUD-3278](https://issues.redhat.com/browse/OCPCLOUD-3278): Rebase to Kube 1.35 for Machine API Provider IBM [#83](https://github.com/openshift/machine-api-provider-ibmcloud/pull/83)
* [OCPBUGS-77729](https://issues.redhat.com/browse/OCPBUGS-77729): Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.22 [#80](https://github.com/openshift/machine-api-provider-ibmcloud/pull/80)
* NO-JIRA: Modernize test infrastructure to align with other MAPI providers [#82](https://github.com/openshift/machine-api-provider-ibmcloud/pull/82)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/2294fb1c5141034674f1a4e29a16a599cf8e4990...46b8c72c675770295f5c2c8f85f5f705ca35787c)


### [insights-operator](https://github.com/openshift/insights-operator/tree/d7b9c77e6565d4452ff79cd346f3ee6b8535698c)

* [CCXDEV-15964](https://issues.redhat.com/browse/CCXDEV-15964): fetch TLS profiles from API server [#1257](https://github.com/openshift/insights-operator/pull/1257)
* [CCXDEV-15963](https://issues.redhat.com/browse/CCXDEV-15963): kubeletconfig gatherer [#1247](https://github.com/openshift/insights-operator/pull/1247)
* NO-JIRA: generate gatherer docs [#1256](https://github.com/openshift/insights-operator/pull/1256)
* [CCXDEV-16094](https://issues.redhat.com/browse/CCXDEV-16094): add config option to disable runtime extractor [#1248](https://github.com/openshift/insights-operator/pull/1248)
* [CCXDEV-16006](https://issues.redhat.com/browse/CCXDEV-16006): add permission for opentelemetrycollectors [#1252](https://github.com/openshift/insights-operator/pull/1252)
* [OCPBUGS-78115](https://issues.redhat.com/browse/OCPBUGS-78115): Fix string accessor error [#1253](https://github.com/openshift/insights-operator/pull/1253)
* [Full changelog](https://github.com/openshift/insights-operator/compare/0a638f675ccfe9446ac4f2609c3698d084259ab7...d7b9c77e6565d4452ff79cd346f3ee6b8535698c)


### [insights-runtime-exporter, insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor/tree/70256457b507ec09737800ee7ea022143ed6c3c2)

* Update OWNERS to remove 'tremes' [#67](https://github.com/openshift/insights-runtime-extractor/pull/67)
* [Full changelog](https://github.com/openshift/insights-runtime-extractor/compare/0f2bcfdf2a7c42f318e3a950fac48f4190ec2676...70256457b507ec09737800ee7ea022143ed6c3c2)


### [ironic](https://github.com/openshift/ironic-image/tree/437c88a98ba1a5f5ce847e87ff73f6ff0b2d1a39)

* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#818](https://github.com/openshift/ironic-image/pull/818)
* [METAL-1758](https://issues.redhat.com/browse/METAL-1758): Merge upstream 2026 03 16 [#814](https://github.com/openshift/ironic-image/pull/814)
* [METAL-1735](https://issues.redhat.com/browse/METAL-1735): Add TLS cipher suite and curves related options to ironic for centralized tls support [#810](https://github.com/openshift/ironic-image/pull/810)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#816](https://github.com/openshift/ironic-image/pull/816)
* [METAL-1771](https://issues.redhat.com/browse/METAL-1771): Remove heredoc syntax for hermetic builds compatibility [#815](https://github.com/openshift/ironic-image/pull/815)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#812](https://github.com/openshift/ironic-image/pull/812)
* [OCPBUGS-77528](https://issues.redhat.com/browse/OCPBUGS-77528): Fix interface detection when MAC/IP matches multiple interfaces [#807](https://github.com/openshift/ironic-image/pull/807)
* [METAL-1726](https://issues.redhat.com/browse/METAL-1726): Multi-stage wheel-builder for OCP builds [#786](https://github.com/openshift/ironic-image/pull/786)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#808](https://github.com/openshift/ironic-image/pull/808)
* [Full changelog](https://github.com/openshift/ironic-image/compare/0c076565bfb87f1e2377c1a2f620ea40803468de...437c88a98ba1a5f5ce847e87ff73f6ff0b2d1a39)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/38c16c4698d131ab0e2da0d4b4b76d5322a89bab)

* NO-JIRA: disable automatic coderabbit reviews [#53](https://github.com/openshift/kubernetes-metrics-server/pull/53)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/098c2708cf55684be2a65a1efae8f60d3716f940...38c16c4698d131ab0e2da0d4b4b76d5322a89bab)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/d12e274605248f6c59373240a7eae7a7a357dcb3)

* [CNTRLPLANE-2932](https://issues.redhat.com/browse/CNTRLPLANE-2932): Merge upstream v0.21.1 [#133](https://github.com/openshift/kube-rbac-proxy/pull/133)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/bdd87a0646eae5683bb83fe30e3649471b757ebf...d12e274605248f6c59373240a7eae7a7a357dcb3)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/771b562d4875296007850a4d3709a7ae1c6ed3e2)

* [CNV-82343](https://issues.redhat.com/browse/CNV-82343): Add annotation-based fallback for infra VM node ID resolution (#170) [#80](https://github.com/openshift/kubevirt-csi-driver/pull/80)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/9e2dbddfe27080b834c83ef93503f886ad4189b6...771b562d4875296007850a4d3709a7ae1c6ed3e2)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/33cb2da02d57004711bd09dd8f288ed6174f48fc)

* [OCPCLOUD-3346](https://issues.redhat.com/browse/OCPCLOUD-3346): tls: use centralized TLS [#1456](https://github.com/openshift/machine-api-operator/pull/1456)
* [MON-4497](https://issues.redhat.com/browse/MON-4497): metrics: migrate Prometheus SD from Endpoints to EndpointSlices [#1457](https://github.com/openshift/machine-api-operator/pull/1457)
* [SPLAT-2680](https://issues.redhat.com/browse/SPLAT-2680): Changed DHA to require hostAffinity=host [#1484](https://github.com/openshift/machine-api-operator/pull/1484)
* [OCPCLOUD-3282](https://issues.redhat.com/browse/OCPCLOUD-3282), [OCPCLOUD-3288](https://issues.redhat.com/browse/OCPCLOUD-3288): Bump to k8s 1.35 dependencies [#1474](https://github.com/openshift/machine-api-operator/pull/1474)
* NO-JIRA: fix flaky TestReconcile/machine_with_node_likely_to_go_unhealthy#1483 [#1483](https://github.com/openshift/machine-api-operator/pull/1483)
* [SPLAT-2680](https://issues.redhat.com/browse/SPLAT-2680): Fixed MAO to not allow dedicated host configurations for control plane nodes [#1477](https://github.com/openshift/machine-api-operator/pull/1477)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/d8d9ab7e0fce2c6d4fcf24ec45662aa2c88c631e...33cb2da02d57004711bd09dd8f288ed6174f48fc)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/449e78f7ec941d8db237da39ccce2095912fea43)

* [MCO-2135](https://issues.redhat.com/browse/MCO-2135): Add test for OSStream labeling of Machines, MachineSets, and ControlPaneMachineSets [#5814](https://github.com/openshift/machine-config-operator/pull/5814)
* [AGENT-1307](https://issues.redhat.com/browse/AGENT-1307): add MCD IRI manager [#5807](https://github.com/openshift/machine-config-operator/pull/5807)
* [MCO-2202](https://issues.redhat.com/browse/MCO-2202): separate duplicate PinnedImageSet validation into OCP-88562 [#5839](https://github.com/openshift/machine-config-operator/pull/5839)
* [MCO-2163](https://issues.redhat.com/browse/MCO-2163): adds machine-config-osimagestream installer helper [#5770](https://github.com/openshift/machine-config-operator/pull/5770)
* [OCPBUGS-69936](https://issues.redhat.com/browse/OCPBUGS-69936): ovs: increase CPU priority for Open vSwitch Forwarding Unit [#5797](https://github.com/openshift/machine-config-operator/pull/5797)
* [MCO-1972](https://issues.redhat.com/browse/MCO-1972): Removes OSImageURLConfig from the build controller [#5424](https://github.com/openshift/machine-config-operator/pull/5424)
* Reapply "MCO-2120: Rework OS Image Stream label classification" [#5767](https://github.com/openshift/machine-config-operator/pull/5767)
* [OCPBUGS-68336](https://issues.redhat.com/browse/OCPBUGS-68336): When adding new nodes, MCD executes commands after setting the nodes' state as Done [#5832](https://github.com/openshift/machine-config-operator/pull/5832)
* [AGENT-1416](https://issues.redhat.com/browse/AGENT-1416): Add default NodeDisruptionPolicy for IRI [#5683](https://github.com/openshift/machine-config-operator/pull/5683)
* NO-ISSUE: Fix order of cleanup to further avoid race [#5826](https://github.com/openshift/machine-config-operator/pull/5826)
* [MCO-2183](https://issues.redhat.com/browse/MCO-2183): migrated configdrift, kubeletconfig, containerruntimeconfig… [#5818](https://github.com/openshift/machine-config-operator/pull/5818)
* [OCPBUGS-78154](https://issues.redhat.com/browse/OCPBUGS-78154): Use HA leader election defaults for MCO on SNO [#5764](https://github.com/openshift/machine-config-operator/pull/5764)
* [OCPBUGS-78498](https://issues.redhat.com/browse/OCPBUGS-78498): Update skew error message with doc links [#5825](https://github.com/openshift/machine-config-operator/pull/5825)
* [MCO-2168](https://issues.redhat.com/browse/MCO-2168): Deleting a PinnedImageSet does not affect images pinned by another PinnedImageSet [#5786](https://github.com/openshift/machine-config-operator/pull/5786)
* NO-ISSUE: In extended tests, disable Skew when disabling the bootimag… [#5811](https://github.com/openshift/machine-config-operator/pull/5811)
* [MCO-2171](https://issues.redhat.com/browse/MCO-2171): Move long running boot image tests to MCO's disruptive suites [#5808](https://github.com/openshift/machine-config-operator/pull/5808)
* NO-ISSUE: Fix MCN Applied condition checks for TP and non-TP clusters [#5796](https://github.com/openshift/machine-config-operator/pull/5796)
* [OCPBUGS-80970](https://issues.redhat.com/browse/OCPBUGS-80970): MCS fallback to latest v3 [#5816](https://github.com/openshift/machine-config-operator/pull/5816)
* [AGENT-1366](https://issues.redhat.com/browse/AGENT-1366): Report InternalReleaseImageController errors in IRI status [#5803](https://github.com/openshift/machine-config-operator/pull/5803)
* [OCPBUGS-62619](https://issues.redhat.com/browse/OCPBUGS-62619): Add etcd size limit validation for rendered MachineConfigs [#5729](https://github.com/openshift/machine-config-operator/pull/5729)
* [MCO-2155](https://issues.redhat.com/browse/MCO-2155): Add stream detection to some more boot image tests [#5799](https://github.com/openshift/machine-config-operator/pull/5799)
* [MCO-2167](https://issues.redhat.com/browse/MCO-2167): Migrate alert test cases from the private repository [#5781](https://github.com/openshift/machine-config-operator/pull/5781)
* [OCPBUGS-78500](https://issues.redhat.com/browse/OCPBUGS-78500): Skew enforcement should dynamically handle baremetal clusters [#5768](https://github.com/openshift/machine-config-operator/pull/5768)
* [OCPBUGS-79088](https://issues.redhat.com/browse/OCPBUGS-79088): OCPBUGS-79357: Skip boot image updates until cluster is stable [#5789](https://github.com/openshift/machine-config-operator/pull/5789)
* [OCPBUGS-79361](https://issues.redhat.com/browse/OCPBUGS-79361): Update AMI Whitelist [#5788](https://github.com/openshift/machine-config-operator/pull/5788)
* NO-ISSUE: Update AMI collection script for installer changes [#5790](https://github.com/openshift/machine-config-operator/pull/5790)
* [OCPBUGS-75200](https://issues.redhat.com/browse/OCPBUGS-75200): set default-timeout-stop to 200s globally [#5782](https://github.com/openshift/machine-config-operator/pull/5782)
* [MCO-2155](https://issues.redhat.com/browse/MCO-2155): Add stream detection to boot image tests [#5784](https://github.com/openshift/machine-config-operator/pull/5784)
* NO-ISSUE: Revert "extract oc binary from base OS image after build" [#5785](https://github.com/openshift/machine-config-operator/pull/5785)
* [OCPBUGS-66104](https://issues.redhat.com/browse/OCPBUGS-66104): Fine tune CoreDNS pod configuration to improve performance [#5695](https://github.com/openshift/machine-config-operator/pull/5695)
* [MCO-2117](https://issues.redhat.com/browse/MCO-2117): Allow default OSImageStream overrides [#5714](https://github.com/openshift/machine-config-operator/pull/5714)
* [OCPBUGS-78595](https://issues.redhat.com/browse/OCPBUGS-78595): Fix log substring matching for disruptive test suite jobs [#5769](https://github.com/openshift/machine-config-operator/pull/5769)
* [OCPBUGS-74223](https://issues.redhat.com/browse/OCPBUGS-74223): Re-order logger setting to eliminate race condition [#5691](https://github.com/openshift/machine-config-operator/pull/5691)
* [MCO-2146](https://issues.redhat.com/browse/MCO-2146): do not use OSImageStream in Hypershift [#5750](https://github.com/openshift/machine-config-operator/pull/5750)
* NO-ISSUE: always build golangci-lint from vendor [#5772](https://github.com/openshift/machine-config-operator/pull/5772)
* [OCPNODE-3201](https://issues.redhat.com/browse/OCPNODE-3201): Default Enablement of system-reserved-compressible in OpenShift [#5408](https://github.com/openshift/machine-config-operator/pull/5408)
* [OCPNODE-3880](https://issues.redhat.com/browse/OCPNODE-3880): Add criocredentialproviderconfig event handler [#5487](https://github.com/openshift/machine-config-operator/pull/5487)
* [OCPNODE-4074](https://issues.redhat.com/browse/OCPNODE-4074): Add additional storage configuration support for CRI-O [#5666](https://github.com/openshift/machine-config-operator/pull/5666)
* NO-ISSUE: Increase timeout + interval for OCL test cleanup [#5732](https://github.com/openshift/machine-config-operator/pull/5732)
* [MCO-2151](https://issues.redhat.com/browse/MCO-2151): Add stream detection to the boot image controller [#5752](https://github.com/openshift/machine-config-operator/pull/5752)
* NO-ISSUE: Allow setting kubeletconfig log level to zero [#5757](https://github.com/openshift/machine-config-operator/pull/5757)
* [OCPBUGS-57473](https://issues.redhat.com/browse/OCPBUGS-57473): extract oc binary instead of pulling OS image [#5313](https://github.com/openshift/machine-config-operator/pull/5313)
* [OCPBUGS-78107](https://issues.redhat.com/browse/OCPBUGS-78107): Disable sandboxed-containers in arm64 10 [#5754](https://github.com/openshift/machine-config-operator/pull/5754)
* [MCO-2007](https://issues.redhat.com/browse/MCO-2007): MCO-2096: MCO-2095: MCO-2011: Update MCO dependencies to Kubernetes 1.35 [#5603](https://github.com/openshift/machine-config-operator/pull/5603)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/4b32d3f8d98549400ec029c7c5cb23b44e045d10...449e78f7ec941d8db237da39ccce2095912fea43)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/a43d9c977f6332577efcd383cf173a2ff5805a4d)

* [METAL-1720](https://issues.redhat.com/browse/METAL-1720): Add kernel file support for multi-architecture PXE boot [#170](https://github.com/openshift/image-customization-controller/pull/170)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/eacc65f2ff39a62ac3d229d684b634c7e44acf5f...a43d9c977f6332577efcd383cf173a2ff5805a4d)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/df9a652cb1572172e404655bb021525be2e3d8ab)

* [METAL-1729](https://issues.redhat.com/browse/METAL-1729): Add dual CoreOS version support for RHCOS 9 and 10 [#81](https://github.com/openshift/machine-os-images/pull/81)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/d819e02d984741ffb8f150b4d909d5f874e75935...df9a652cb1572172e404655bb021525be2e3d8ab)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/bf53ceb304f57290b7293c34a0b33a7da5977800)

* [OU-1175](https://issues.redhat.com/browse/OU-1175): OCP 4.22 Breaking Changes [#863](https://github.com/openshift/monitoring-plugin/pull/863)
* [OCPBUGS-81567](https://issues.redhat.com/browse/OCPBUGS-81567): fix: re encode params when redirecting from graph to query-browser [#869](https://github.com/openshift/monitoring-plugin/pull/869)
* [OU-1184](https://issues.redhat.com/browse/OU-1184): lint enabled against cypress files and changes post coo [#862](https://github.com/openshift/monitoring-plugin/pull/862)
* NO-JIRA: automation testing fix on podImage [#868](https://github.com/openshift/monitoring-plugin/pull/868)
* NO-JIRA: exclude @xfail tests from CI incident commands [#865](https://github.com/openshift/monitoring-plugin/pull/865)
* [OBSINTA-1002](https://issues.redhat.com/browse/OBSINTA-1002): consolidate COO 1.4.0 test case documentation [#793](https://github.com/openshift/monitoring-plugin/pull/793)
* NO-JIRA: podImage fix automation testing to remove extra click [#864](https://github.com/openshift/monitoring-plugin/pull/864)
* [OBSINTA-993](https://issues.redhat.com/browse/OBSINTA-993): Tests for incident detection coo 1.4.0 changes [#857](https://github.com/openshift/monitoring-plugin/pull/857)
* [OCPBUGS-77113](https://issues.redhat.com/browse/OCPBUGS-77113): feat: re enable dev console views [#831](https://github.com/openshift/monitoring-plugin/pull/831)
* NO-JIRA: Incident Detection Tests Stabilization [#854](https://github.com/openshift/monitoring-plugin/pull/854)
* NO-JIRA: switch to core platform page before test case run [#837](https://github.com/openshift/monitoring-plugin/pull/837)
* NO-JIRA: Refactor cypress setup and operator commands [#788](https://github.com/openshift/monitoring-plugin/pull/788)
* NO-JIRA: Add test configuration scenarios overview [#745](https://github.com/openshift/monitoring-plugin/pull/745)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/7bcbe8647e971b2b929aa3c716e2d35ddeede0d9...bf53ceb304f57290b7293c34a0b33a7da5977800)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/16ba7ef8026f5b6d0d08b19c707648d82b1ac592)

* [OCPBUGS-74025](https://issues.redhat.com/browse/OCPBUGS-74025): Updating ose-multus-admission-controller-container image to be consistent with ART for 4.22 [#114](https://github.com/openshift/multus-admission-controller/pull/114)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/ce94b849567e25007c30dd2a6d249e9f307371e4...16ba7ef8026f5b6d0d08b19c707648d82b1ac592)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/b4ec7d8239ce4bd3ed949bce9816a013377b44c7)

* [CORENET-6886](https://issues.redhat.com/browse/CORENET-6886): downstream sync to kube 1.35 and go to 1.25 [#281](https://github.com/openshift/multus-cni/pull/281)
* [OKD-322](https://issues.redhat.com/browse/OKD-322): Update Dockerfile to work on CentOS/RHEL 10 [#275](https://github.com/openshift/multus-cni/pull/275)
* [Full changelog](https://github.com/openshift/multus-cni/compare/0d343fe11a824b6f5a44571ae0e079e6ed7627a7...b4ec7d8239ce4bd3ed949bce9816a013377b44c7)


### [must-gather](https://github.com/openshift/must-gather/tree/8554213fa214e8e165e7bedaf8d892bb824d83ef)

* [MG-241](https://issues.redhat.com/browse/MG-241): Adding support for skipping rotated logs [#536](https://github.com/openshift/must-gather/pull/536)
* no-jira: build(make): default podman flags for ART DNF wrapper [#535](https://github.com/openshift/must-gather/pull/535)
* no-jira: docs: add proposal for e2e [#526](https://github.com/openshift/must-gather/pull/526)
* [RFE-8344](https://issues.redhat.com/browse/RFE-8344): Add Node Feature Discovery Operator collection script [#508](https://github.com/openshift/must-gather/pull/508)
* [RFE-8932](https://issues.redhat.com/browse/RFE-8932): Included object size with the object count [#527](https://github.com/openshift/must-gather/pull/527)
* [Full changelog](https://github.com/openshift/must-gather/compare/d7db85b9511a580691a2c894536dcb838d9f84a3...8554213fa214e8e165e7bedaf8d892bb824d83ef)


### [network-tools](https://github.com/openshift/network-tools/tree/5c4b905c09ccd6edadb2ff359f45b70ed334f948)

* NO-JIRA: Image slimming [#154](https://github.com/openshift/network-tools/pull/154)
* [Full changelog](https://github.com/openshift/network-tools/compare/a6bcd3cdaf956beec70e6edde2160625d8e8f817...5c4b905c09ccd6edadb2ff359f45b70ed334f948)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/5422f79693a1f8625db4e2a23c3048e75b59c092)

* Bump lodash from 4.17.23 to 4.18.1 [#366](https://github.com/openshift/networking-console-plugin/pull/366)
* [OCPBUGS-70285](https://issues.redhat.com/browse/OCPBUGS-70285): Upgrade cypress to v15 to fix CVEs [#345](https://github.com/openshift/networking-console-plugin/pull/345)
* [OCPBUGS-78542](https://issues.redhat.com/browse/OCPBUGS-78542): Remove useHistory and replace with useNavigate [#364](https://github.com/openshift/networking-console-plugin/pull/364)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/97f0b8d314f6a87270b7633dfc55c4fd68c0064a...5422f79693a1f8625db4e2a23c3048e75b59c092)


### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/8e75679a965b80fee0332f8758471a7d3a75a4e8)

* [OCPCLOUD-3272](https://issues.redhat.com/browse/OCPCLOUD-3272): Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (9c374cb) into main [#54](https://github.com/openshift/cloud-provider-nutanix/pull/54)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/ecf52c516afe46f6462e6162266c7e934ec9b29c...8e75679a965b80fee0332f8758471a7d3a75a4e8)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/60559fdd7092dd29aa1c72797c49279aa2da39ee)

* [OCPCLOUD-3277](https://issues.redhat.com/browse/OCPCLOUD-3277): Bump k8s 1.35 [#134](https://github.com/openshift/machine-api-provider-nutanix/pull/134)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/e00a719f35cc4ec04441cbe883b01db3377144e4...60559fdd7092dd29aa1c72797c49279aa2da39ee)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/29215dddf12f5b0f549125c22cebe56f14596529)

* [CNTRLPLANE-2989](https://issues.redhat.com/browse/CNTRLPLANE-2989): feat: add external-oidc subcommand to oauth-apiserver [#181](https://github.com/openshift/oauth-apiserver/pull/181)
* [CNTRLPLANE-2260](https://issues.redhat.com/browse/CNTRLPLANE-2260): cmd: wire up OTE ginkgo suite for tokenreviews [#163](https://github.com/openshift/oauth-apiserver/pull/163)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/467c63180c69eb57c57f456a09e839c9d8c1f480...29215dddf12f5b0f549125c22cebe56f14596529)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/55ba6b56ceb9a214a2810e08d31f9850fe2e0549)

* [CLID-524](https://issues.redhat.com/browse/CLID-524): additionalImages collector error handling [#1343](https://github.com/openshift/oc-mirror/pull/1343)
* [CLID-535](https://issues.redhat.com/browse/CLID-535): api: use OCI definitions from opencontainers spec [#1341](https://github.com/openshift/oc-mirror/pull/1341)
* [CLID-547](https://issues.redhat.com/browse/CLID-547): v2: add `list releases` command [#1373](https://github.com/openshift/oc-mirror/pull/1373)
* [CLID-540](https://issues.redhat.com/browse/CLID-540): v2: add `list operators` command [#1370](https://github.com/openshift/oc-mirror/pull/1370)
* NO-JIRA: Group dependabot updates by package origin [#1336](https://github.com/openshift/oc-mirror/pull/1336)
* no-jira: lint: Remove golangci-lint v1 config. [#1374](https://github.com/openshift/oc-mirror/pull/1374)
* [OCPBUGS-77146](https://issues.redhat.com/browse/OCPBUGS-77146): Remove status field from CatalogSource, ClusterCatalog… [#1369](https://github.com/openshift/oc-mirror/pull/1369)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/516a503976fb75b74c8234b4afa8115e61413d88...55ba6b56ceb9a214a2810e08d31f9850fe2e0549)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/5f801adc0321a187c6912c493ab527cab6d2f783)

* NO-ISSUE: Synchronize From Upstream Repositories [#694](https://github.com/openshift/operator-framework-operator-controller/pull/694)
* NO-ISSUE: Synchronize From Upstream Repositories [#693](https://github.com/openshift/operator-framework-operator-controller/pull/693)
* [OCPQE-31553](https://issues.redhat.com/browse/OCPQE-31553): Test empty affinity erasure and cleanup [#689](https://github.com/openshift/operator-framework-operator-controller/pull/689)
* NO-ISSUE: Synchronize From Upstream Repositories [#692](https://github.com/openshift/operator-framework-operator-controller/pull/692)
* [OPRUN-4518](https://issues.redhat.com/browse/OPRUN-4518): Remove skip for incompatible operator check after rename of CER [#690](https://github.com/openshift/operator-framework-operator-controller/pull/690)
* [OCPBUGS-60693](https://issues.redhat.com/browse/OCPBUGS-60693), [OCPBUGS-60958](https://issues.redhat.com/browse/OCPBUGS-60958): Synchronize From Upstream Repositories [#691](https://github.com/openshift/operator-framework-operator-controller/pull/691)
* [OPRUN-4426](https://issues.redhat.com/browse/OPRUN-4426): add ocp-87557 [#635](https://github.com/openshift/operator-framework-operator-controller/pull/635)
* [OCPQE-31553](https://issues.redhat.com/browse/OCPQE-31553): update preflight permission case [#686](https://github.com/openshift/operator-framework-operator-controller/pull/686)
* NO-ISSUE: Add fgiudici as reviewer [#681](https://github.com/openshift/operator-framework-operator-controller/pull/681)
* [OCPBUGS-78211](https://issues.redhat.com/browse/OCPBUGS-78211), [OCPBUGS-78455](https://issues.redhat.com/browse/OCPBUGS-78455): Synchronize From Upstream Repositories [#682](https://github.com/openshift/operator-framework-operator-controller/pull/682)
* NO-ISSUE: Add long-duration test script and documents [#664](https://github.com/openshift/operator-framework-operator-controller/pull/664)
* [OCPBUGS-81194](https://issues.redhat.com/browse/OCPBUGS-81194): Update grpc in default-catalog-consistency tests [#679](https://github.com/openshift/operator-framework-operator-controller/pull/679)
* [OCPBUGS-78092](https://issues.redhat.com/browse/OCPBUGS-78092), [OCPBUGS-78311](https://issues.redhat.com/browse/OCPBUGS-78311): Synchronize From Upstream Repositories [#677](https://github.com/openshift/operator-framework-operator-controller/pull/677)
* [OPRUN-4063](https://issues.redhat.com/browse/OPRUN-4063): verify volume/volumeMount override [#678](https://github.com/openshift/operator-framework-operator-controller/pull/678)
* [OCPBUGS-78999](https://issues.redhat.com/browse/OCPBUGS-78999): Update quay-operator bundle version in OTE to fix missing arch [#673](https://github.com/openshift/operator-framework-operator-controller/pull/673)
* [OCPQE-31636](https://issues.redhat.com/browse/OCPQE-31636): enhance QE cases [#666](https://github.com/openshift/operator-framework-operator-controller/pull/666)
* [OCPBUGS-76380](https://issues.redhat.com/browse/OCPBUGS-76380): Synchronize From Upstream Repositories [#676](https://github.com/openshift/operator-framework-operator-controller/pull/676)
* [OPRUN-4228](https://issues.redhat.com/browse/OPRUN-4228): Add boxcutter tests [#672](https://github.com/openshift/operator-framework-operator-controller/pull/672)
* [OPRUN-4468](https://issues.redhat.com/browse/OPRUN-4468): Add OTE tests for OLMv1 DeploymentConfig support [#662](https://github.com/openshift/operator-framework-operator-controller/pull/662)
* [OCPBUGS-78787](https://issues.redhat.com/browse/OCPBUGS-78787): Synchronize from upstream [#670](https://github.com/openshift/operator-framework-operator-controller/pull/670)
* [OCPBUGS-65634](https://issues.redhat.com/browse/OCPBUGS-65634): UPSTREAM: &lt;carry&gt;: add service account to curl job [#653](https://github.com/openshift/operator-framework-operator-controller/pull/653)
* [OPRUN-4063](https://issues.redhat.com/browse/OPRUN-4063): deployment config cases [#654](https://github.com/openshift/operator-framework-operator-controller/pull/654)
* [OCPQE-31265](https://issues.redhat.com/browse/OCPQE-31265): update OCP-75441 to support multi-arch [#668](https://github.com/openshift/operator-framework-operator-controller/pull/668)
* [OPRUN-4509](https://issues.redhat.com/browse/OPRUN-4509): Synchronize From Upstream Repositories [#669](https://github.com/openshift/operator-framework-operator-controller/pull/669)
* NO-ISSUE: Synchronize From Upstream Repositories [#667](https://github.com/openshift/operator-framework-operator-controller/pull/667)
* NO-ISSUE: Synchronize From Upstream Repositories [#665](https://github.com/openshift/operator-framework-operator-controller/pull/665)
* NO-ISSUE: Synchronize From Upstream Repositories [#663](https://github.com/openshift/operator-framework-operator-controller/pull/663)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/4b4983ac173881433e4c313bfba5b5594b7449eb...5f801adc0321a187c6912c493ab527cab6d2f783)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/8a8c354b99ce83e3c05a91358aadec09944c2fce)

* [OCPBUGS-77724](https://issues.redhat.com/browse/OCPBUGS-77724): Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.22 [#161](https://github.com/openshift/machine-api-provider-openstack/pull/161)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/bd549946407598aa6354583e404cd740a9201ac2...8a8c354b99ce83e3c05a91358aadec09944c2fce)


### [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller/tree/cbea7a9cab145c32e2f347be69996b649893cc22)

* [OCPCLOUD-3321](https://issues.redhat.com/browse/OCPCLOUD-3321), [OSASINFRA-3980](https://issues.redhat.com/browse/OSASINFRA-3980): Update to image-based manifests [#30](https://github.com/openshift/openstack-resource-controller/pull/30)
* NO-JIRA: Update OWNERS_ALIASES [#28](https://github.com/openshift/openstack-resource-controller/pull/28)
* [OCPBUGS-77719](https://issues.redhat.com/browse/OCPBUGS-77719): Updating openstack-resource-controller-container image to be consistent with ART for 4.22 [#26](https://github.com/openshift/openstack-resource-controller/pull/26)
* UPSTREAM-SYNC: Sync main with upstream (release-1.0) [#27](https://github.com/openshift/openstack-resource-controller/pull/27)
* [Full changelog](https://github.com/openshift/openstack-resource-controller/compare/6a62845e025d223cc17c5cbc02ae2af985624e0b...cbea7a9cab145c32e2f347be69996b649893cc22)


### [operator-framework-tools, operator-lifecycle-manager](https://github.com/openshift/operator-framework-olm/tree/e627823c743797da91b4ae8a318d2420a511b752)

* [OCPBUGS-77984](https://issues.redhat.com/browse/OCPBUGS-77984): test(olm): skip ppc64le/s390x for tests using single-arch images [#1276](https://github.com/openshift/operator-framework-olm/pull/1276)
* NO-ISSUE: Synchronize From Upstream Repositories [#1278](https://github.com/openshift/operator-framework-olm/pull/1278)
* NO-ISSUE: Synchronize From Upstream Repositories [#1277](https://github.com/openshift/operator-framework-olm/pull/1277)
* NO-ISSUE: retry transient registry errors in opm QE [#1272](https://github.com/openshift/operator-framework-olm/pull/1272)
* NO-ISSUE: Synchronize From Upstream Repositories [#1275](https://github.com/openshift/operator-framework-olm/pull/1275)
* NO-ISSUE: Synchronize From Upstream Repositories [#1274](https://github.com/openshift/operator-framework-olm/pull/1274)
* NO-ISSUE: Add pedjak and fgiudici as reviewers [#1271](https://github.com/openshift/operator-framework-olm/pull/1271)
* NO-ISSUE: Synchronize From Upstream Repositories [#1268](https://github.com/openshift/operator-framework-olm/pull/1268)
* : NO-ISSUE: Migrate away from deprecated ioutil [#1160](https://github.com/openshift/operator-framework-olm/pull/1160)
* [OCPBUGS-79397](https://issues.redhat.com/browse/OCPBUGS-79397): Fix SA restore resourceVersion conflict error [#1264](https://github.com/openshift/operator-framework-olm/pull/1264)
* [OCPBUGS-77179](https://issues.redhat.com/browse/OCPBUGS-77179): Synchronize From Upstream Repositories [#1260](https://github.com/openshift/operator-framework-olm/pull/1260)
* NO-ISSUE: remove etcd dependency from failing cases [#1241](https://github.com/openshift/operator-framework-olm/pull/1241)
* [OCPQE-31468](https://issues.redhat.com/browse/OCPQE-31468): verify images command log pollution [#1262](https://github.com/openshift/operator-framework-olm/pull/1262)
* [OCPBUGS-78557](https://issues.redhat.com/browse/OCPBUGS-78557): Re-Apply Fix admin context race condition in parallel tests [#1259](https://github.com/openshift/operator-framework-olm/pull/1259)
* [OPRUN-4415](https://issues.redhat.com/browse/OPRUN-4415): automate OCP-87188: Central TLS Profile Consistency [#1207](https://github.com/openshift/operator-framework-olm/pull/1207)
* [TRT-2580](https://issues.redhat.com/browse/TRT-2580): Revert "OCPBUGS-78557: Fix admin context race condition in parallel tests" [#1258](https://github.com/openshift/operator-framework-olm/pull/1258)
* [OCPQE-31804](https://issues.redhat.com/browse/OCPQE-31804): Fix admin context race condition in parallel tests [#1256](https://github.com/openshift/operator-framework-olm/pull/1256)
* NO-ISSUE: Synchronize From Upstream Repositories [#1255](https://github.com/openshift/operator-framework-olm/pull/1255)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/425bb657d646f0485b841eead9ae903ea982a119...e627823c743797da91b4ae8a318d2420a511b752)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/38da2ef78cc429f67aea7fb4e589df21ac1ed327)

* NO-ISSUE: Bump github.com/operator-framework/api from 0.41.0 to 0.42.0 [#738](https://github.com/operator-framework/operator-marketplace/pull/738)
* NO-ISSUE: Add fgiudici as reviewer [#739](https://github.com/operator-framework/operator-marketplace/pull/739)
* NO-ISSUE: Bump the k8s-dependencies group with 3 updates [#737](https://github.com/operator-framework/operator-marketplace/pull/737)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/d87b105718d6b3fad0b556c89bcbdabc1d474138...38da2ef78cc429f67aea7fb4e589df21ac1ed327)


### [operator-registry](https://github.com/openshift/operator-framework-olm/tree/f32f9fa3f5c750ec1f98ad3ed290e51d445d1c3b)

* NO-ISSUE: Synchronize From Upstream Repositories [#1278](https://github.com/openshift/operator-framework-olm/pull/1278)
* NO-ISSUE: Synchronize From Upstream Repositories [#1277](https://github.com/openshift/operator-framework-olm/pull/1277)
* NO-ISSUE: retry transient registry errors in opm QE [#1272](https://github.com/openshift/operator-framework-olm/pull/1272)
* NO-ISSUE: Synchronize From Upstream Repositories [#1275](https://github.com/openshift/operator-framework-olm/pull/1275)
* NO-ISSUE: Synchronize From Upstream Repositories [#1274](https://github.com/openshift/operator-framework-olm/pull/1274)
* NO-ISSUE: Add pedjak and fgiudici as reviewers [#1271](https://github.com/openshift/operator-framework-olm/pull/1271)
* NO-ISSUE: Synchronize From Upstream Repositories [#1268](https://github.com/openshift/operator-framework-olm/pull/1268)
* : NO-ISSUE: Migrate away from deprecated ioutil [#1160](https://github.com/openshift/operator-framework-olm/pull/1160)
* [OCPBUGS-79397](https://issues.redhat.com/browse/OCPBUGS-79397): Fix SA restore resourceVersion conflict error [#1264](https://github.com/openshift/operator-framework-olm/pull/1264)
* [OCPBUGS-77179](https://issues.redhat.com/browse/OCPBUGS-77179): Synchronize From Upstream Repositories [#1260](https://github.com/openshift/operator-framework-olm/pull/1260)
* NO-ISSUE: remove etcd dependency from failing cases [#1241](https://github.com/openshift/operator-framework-olm/pull/1241)
* [OCPQE-31468](https://issues.redhat.com/browse/OCPQE-31468): verify images command log pollution [#1262](https://github.com/openshift/operator-framework-olm/pull/1262)
* [OCPBUGS-78557](https://issues.redhat.com/browse/OCPBUGS-78557): Re-Apply Fix admin context race condition in parallel tests [#1259](https://github.com/openshift/operator-framework-olm/pull/1259)
* [OPRUN-4415](https://issues.redhat.com/browse/OPRUN-4415): automate OCP-87188: Central TLS Profile Consistency [#1207](https://github.com/openshift/operator-framework-olm/pull/1207)
* [TRT-2580](https://issues.redhat.com/browse/TRT-2580): Revert "OCPBUGS-78557: Fix admin context race condition in parallel tests" [#1258](https://github.com/openshift/operator-framework-olm/pull/1258)
* [OCPQE-31804](https://issues.redhat.com/browse/OCPQE-31804): Fix admin context race condition in parallel tests [#1256](https://github.com/openshift/operator-framework-olm/pull/1256)
* NO-ISSUE: Synchronize From Upstream Repositories [#1255](https://github.com/openshift/operator-framework-olm/pull/1255)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/425bb657d646f0485b841eead9ae903ea982a119...f32f9fa3f5c750ec1f98ad3ed290e51d445d1c3b)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/c118cd49190f25281a4547182754b65d841f71c8)

* NO-JIRA: DownStream Merge [04-02-2026] [#3114](https://github.com/openshift/ovn-kubernetes/pull/3114)
* NO-JIRA: Disable informing tests for the time being [#3118](https://github.com/openshift/ovn-kubernetes/pull/3118)
* [OCPBUGS-77510](https://issues.redhat.com/browse/OCPBUGS-77510): DownStream Merge [03-24-2026] [#3084](https://github.com/openshift/ovn-kubernetes/pull/3084)
* [OCPBUGS-77819](https://issues.redhat.com/browse/OCPBUGS-77819): Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.22 [#3036](https://github.com/openshift/ovn-kubernetes/pull/3036)
* [OCPBUGS-77795](https://issues.redhat.com/browse/OCPBUGS-77795): Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.22 [#3039](https://github.com/openshift/ovn-kubernetes/pull/3039)
* NO-JIRA: DownStream Merge [02-27-2026] [#3011](https://github.com/openshift/ovn-kubernetes/pull/3011)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/eedfcd073cbae0eea97638716019b2b39f141a41...c118cd49190f25281a4547182754b65d841f71c8)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/c208095b1f3ff79e2d9eed7f8045d330a8e15c08)

* [OCPBUGS-77586](https://issues.redhat.com/browse/OCPBUGS-77586): Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.22 [#115](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/115)
* [MULTIARCH-6015](https://issues.redhat.com/browse/MULTIARCH-6015): Rebase ibm-powervs-block-csi-driver with upstream [#116](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/116)
* [OCPBUGS-77586](https://issues.redhat.com/browse/OCPBUGS-77586): Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.22 [#118](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/118)
* [MULTIARCH-6016](https://issues.redhat.com/browse/MULTIARCH-6016): Upgrade golangci-lint version to support go1.25 [#117](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/117)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/6a7c7778760066122a6bd73ddd9f385ceec823db...c208095b1f3ff79e2d9eed7f8045d330a8e15c08)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/a56f9e95588f656435e2cc3b256d9782213a7813)

* [STOR-2762](https://issues.redhat.com/browse/STOR-2762): Bump all deps for 4.22 [#104](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/104)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/ef3f7f44de76bb73f51ec1259d855e9c753d249e...a56f9e95588f656435e2cc3b256d9782213a7813)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/d8bc2845303cbfb3fa4cb0f0e11fa4b78d2c87ac)

* No-Jira: Update go.opentelemetry.io/otel and google.golang.org/grpc [#94](https://github.com/openshift/cloud-provider-powervs/pull/94)
* [OCPBUGS-70048](https://issues.redhat.com/browse/OCPBUGS-70048): Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART for 4.22 [#91](https://github.com/openshift/cloud-provider-powervs/pull/91)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/5ea93179bf25360bd3e72f931dda8087ba572f04...d8bc2845303cbfb3fa4cb0f0e11fa4b78d2c87ac)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/e88cf81dd9ad174f395b86f9cdc40fa30cb06bf4)

* [OCPCLOUD-3271](https://issues.redhat.com/browse/OCPCLOUD-3271): Update dependencies for OpenShift 4.22 release [#140](https://github.com/openshift/machine-api-provider-powervs/pull/140)
* NO-JIRA: Add damdo to approvers list in OWNERS file [#141](https://github.com/openshift/machine-api-provider-powervs/pull/141)
* [OCPBUGS-77745](https://issues.redhat.com/browse/OCPBUGS-77745): Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.22 [#139](https://github.com/openshift/machine-api-provider-powervs/pull/139)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/bc7c3eecb22547fcb20ed36a6f36fccd3fe8ac3b...e88cf81dd9ad174f395b86f9cdc40fa30cb06bf4)


### [prometheus](https://github.com/openshift/prometheus/tree/e1e355916c789607fe98c8832920e2218de4bad5)

* [OCPBUGS-65568](https://issues.redhat.com/browse/OCPBUGS-65568): chore(kubernetes): deduplicate warning logs from the API [#296](https://github.com/openshift/prometheus/pull/296)
* [Full changelog](https://github.com/openshift/prometheus/compare/9b96528f24085fbbbd6670eea6dab7a75b23f09d...e1e355916c789607fe98c8832920e2218de4bad5)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/02dc3e9e55cf7fa0279e22762d6ace19bbc65fde)

* NO-ISSUE: [bot] Bump openshift/prometheus-alertmanager to v0.31.1 [#127](https://github.com/openshift/prometheus-alertmanager/pull/127)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/ee51f9914c49e1bb459ad7654fc8ddb67c9120fb...02dc3e9e55cf7fa0279e22762d6ace19bbc65fde)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/70e38466b9b9143f48283dab8bd0c227f35efe69)

* NO-ISSUE: [bot] Bump openshift/prometheus-operator to v0.90.1 [#378](https://github.com/openshift/prometheus-operator/pull/378)
* [MON-4542](https://issues.redhat.com/browse/MON-4542): bump v0.90.0 [#377](https://github.com/openshift/prometheus-operator/pull/377)
* NO-JIRA: Update v0.89.0 [#374](https://github.com/openshift/prometheus-operator/pull/374)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/eb17cbf16e4965835a67c73fdcb9ace05e01f6a6...70e38466b9b9143f48283dab8bd0c227f35efe69)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/7b3033bba87d7b40684b66f8f44a3525433d1ac7)

* [OCPBUGS-82110](https://issues.redhat.com/browse/OCPBUGS-82110): fix service-ca-controller CrashLoop on MicroShift [#344](https://github.com/openshift/service-ca-operator/pull/344)
* [CNTRLPLANE-2845](https://issues.redhat.com/browse/CNTRLPLANE-2845): add service-ca operator and workload network policies [#324](https://github.com/openshift/service-ca-operator/pull/324)
* [CNTRLPLANE-2947](https://issues.redhat.com/browse/CNTRLPLANE-2947): Enable configurable PKI for signing CA and serving certificates [#327](https://github.com/openshift/service-ca-operator/pull/327)
* NO-JIRA: migrate from go-bindata to embed [#326](https://github.com/openshift/service-ca-operator/pull/326)
* NO-JIRA: OWNERS: remove vrutkovs and add sanchezl [#318](https://github.com/openshift/service-ca-operator/pull/318)
* NO-JIRA:Update e2e test owners [#339](https://github.com/openshift/service-ca-operator/pull/339)
* NO-JIRA: Add CLAUDE.md [#333](https://github.com/openshift/service-ca-operator/pull/333)
* [CNTRLPLANE-3038](https://issues.redhat.com/browse/CNTRLPLANE-3038): test/e2e: migrate validatingwebhook-ca-bundle-injection to OTE serial suite [#336](https://github.com/openshift/service-ca-operator/pull/336)
* [CNTRLPLANE-3035](https://issues.redhat.com/browse/CNTRLPLANE-3035): test/e2e: migrate mutatingwebhook-ca-bundle-injection to OTE serial suite [#335](https://github.com/openshift/service-ca-operator/pull/335)
* [CNTRLPLANE-3034](https://issues.redhat.com/browse/CNTRLPLANE-3034): test/e2e: migrate crd-ca-bundle-injection to OTE serial suite [#334](https://github.com/openshift/service-ca-operator/pull/334)
* [CNTRLPLANE-3033](https://issues.redhat.com/browse/CNTRLPLANE-3033): test/e2e: migrate apiservice-ca-bundle-injection to OTE serial suite [#332](https://github.com/openshift/service-ca-operator/pull/332)
* [CNTRLPLANE-3015](https://issues.redhat.com/browse/CNTRLPLANE-3015): test/e2e: restore operator config after forced rotation [#331](https://github.com/openshift/service-ca-operator/pull/331)
* [CNTRLPLANE-3009](https://issues.redhat.com/browse/CNTRLPLANE-3009): test/e2e: migrate forced-ca-rotation to OTE serial-disruptive suite [#330](https://github.com/openshift/service-ca-operator/pull/330)
* [CNTRLPLANE-3000](https://issues.redhat.com/browse/CNTRLPLANE-3000): test/e2e: migrate time-based-ca-rotation test for OTE compatibility [#308](https://github.com/openshift/service-ca-operator/pull/308)
* NO-JIRA: bump Go to 1.25 and update dependencies [#328](https://github.com/openshift/service-ca-operator/pull/328)
* [CNTRLPLANE-2549](https://issues.redhat.com/browse/CNTRLPLANE-2549): test/e2e: add control plane stabilization wait after CA rotation [#325](https://github.com/openshift/service-ca-operator/pull/325)
* [CNTRLPLANE-2549](https://issues.redhat.com/browse/CNTRLPLANE-2549): test/e2e: migrate refresh-CA test for OTE compatibility [#306](https://github.com/openshift/service-ca-operator/pull/306)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/503e4f5f4c74fd095a8dca385541125f3c9ee28b...7b3033bba87d7b40684b66f8f44a3525433d1ac7)


### [stream-coreos, stream-coreos-extensions](https://github.com/openshift/os/tree/f41264dc5f1c1f0a389787ecc5aaec573d485b8e)

* NO-JIRA: Revert "OCPBUGS-77244: 9.8: override runc package to pull in newer fixes" [#1925](https://github.com/openshift/os/pull/1925)
* [OCPBUGS-64841](https://issues.redhat.com/browse/OCPBUGS-64841): post-process: Remove workaround for openvswitch additional group [#1918](https://github.com/openshift/os/pull/1918)
* [OCPBUGS-77244](https://issues.redhat.com/browse/OCPBUGS-77244): 9.8: override runc package to pull in newer fixes [#1923](https://github.com/openshift/os/pull/1923)
* [Full changelog](https://github.com/openshift/os/compare/3d00d375d491de94fd9dcd0b5440a0efbec3d9db...f41264dc5f1c1f0a389787ecc5aaec573d485b8e)


### [tests](https://github.com/openshift/origin/tree/7da3e1c37ad14643c4cfda3d48d2f0416b677dea)

* [NE-2561](https://issues.redhat.com/browse/NE-2561): Add Gateway API OLM to NO-OLM migration upgrade test [#30897](https://github.com/openshift/origin/pull/30897)
* [OCPBUGS-81716](https://issues.redhat.com/browse/OCPBUGS-81716): Add retry logic for transient network errors in restartKubeletOnNode [#30966](https://github.com/openshift/origin/pull/30966)
* [CORENET-6168](https://issues.redhat.com/browse/CORENET-6168): Add ovn tests extension [#30560](https://github.com/openshift/origin/pull/30560)
* [OCPBUGS-81640](https://issues.redhat.com/browse/OCPBUGS-81640): test/ccm: upgrade ccm healthz test to use aws sdk v2 [#30954](https://github.com/openshift/origin/pull/30954)
* [TRT-2084](https://issues.redhat.com/browse/TRT-2084): terminationmessagepolicy: relax for 5.0 [#30979](https://github.com/openshift/origin/pull/30979)
* [OCPBUGS-81340](https://issues.redhat.com/browse/OCPBUGS-81340): openshift-tests: allow duplicate pacemaker status collector CronJob events [#30953](https://github.com/openshift/origin/pull/30953)
* [OCPBUGS-81737](https://issues.redhat.com/browse/OCPBUGS-81737): Dynamically find worker-generated-kubelet MC name to support different platforms [#30967](https://github.com/openshift/origin/pull/30967)
* [OCPBUGS-81742](https://issues.redhat.com/browse/OCPBUGS-81742): Add exception for the newly added kas-bootstrap-container [#30963](https://github.com/openshift/origin/pull/30963)
* [OCPNODE-4224](https://issues.redhat.com/browse/OCPNODE-4224): Migrating test case OCP-70987 from OTP to origin [#30948](https://github.com/openshift/origin/pull/30948)
* [OCPBUGS-82039](https://issues.redhat.com/browse/OCPBUGS-82039): Fix DCM ingress tests to support IPv6-only clusters [#30972](https://github.com/openshift/origin/pull/30972)
* [OCPBUGS-81685](https://issues.redhat.com/browse/OCPBUGS-81685): OVNK BGP: fix curl arguments not properly tokenized [#30961](https://github.com/openshift/origin/pull/30961)
* [OCPBUGS-81751](https://issues.redhat.com/browse/OCPBUGS-81751): Fix GatewayClass update conflict in markTestDone [#30964](https://github.com/openshift/origin/pull/30964)
* NO-JIRA: Ignore extra fields [#30939](https://github.com/openshift/origin/pull/30939)
* NO-JIRA: fix CUDN status condition tests for new TransportAccepted condition [#30958](https://github.com/openshift/origin/pull/30958)
* [NE-2529](https://issues.redhat.com/browse/NE-2529): add new dcm e2e tests [#30926](https://github.com/openshift/origin/pull/30926)
* [OCPBUGS-81629](https://issues.redhat.com/browse/OCPBUGS-81629): Skip NoRegistryClusterInstall feature tests if InternalReleaseImage resource was not present [#30955](https://github.com/openshift/origin/pull/30955)
* NO-JIRA: feat: update etcd/certrotation suite to disruptive [#30947](https://github.com/openshift/origin/pull/30947)
* [OCPCLOUD-3215](https://issues.redhat.com/browse/OCPCLOUD-3215): test/ccm: add support for verifying NLB health check configuration [#30952](https://github.com/openshift/origin/pull/30952)
* [NE-2520](https://issues.redhat.com/browse/NE-2520): Enable Gateway API tests on vSphere and baremetal [#30946](https://github.com/openshift/origin/pull/30946)
* [SPLAT-2672](https://issues.redhat.com/browse/SPLAT-2672): e2e/ote/ccm-aws: moving binary to cccmo [#30864](https://github.com/openshift/origin/pull/30864)
* [OCPNODE-3725](https://issues.redhat.com/browse/OCPNODE-3725): Add System compressible test [#30935](https://github.com/openshift/origin/pull/30935)
* [OCPCLOUD-3215](https://issues.redhat.com/browse/OCPCLOUD-3215): Detect IPv6 clusters and apply correct policy [#30938](https://github.com/openshift/origin/pull/30938)
* [OCPNODE-4179](https://issues.redhat.com/browse/OCPNODE-4179): Migrating test case OCP-80983 from openshift-tests-private to origin [#30899](https://github.com/openshift/origin/pull/30899)
* [OCPSTRAT-886](https://issues.redhat.com/browse/OCPSTRAT-886): Support dual-stack LB in service disruption monitor [#30936](https://github.com/openshift/origin/pull/30936)
* [OCPBUGS-78978](https://issues.redhat.com/browse/OCPBUGS-78978): Workaround packet sniffer timeouts in BGP tests [#30912](https://github.com/openshift/origin/pull/30912)
* [OTA-1813](https://issues.redhat.com/browse/OTA-1813): Allow for alerts to fire from an e2e test [#30929](https://github.com/openshift/origin/pull/30929)
* [AGENT-1428](https://issues.redhat.com/browse/AGENT-1428): Add e2e extended tests for NoRegistryClusterInstall [#30941](https://github.com/openshift/origin/pull/30941)
* [SPLAT-2627](https://issues.redhat.com/browse/SPLAT-2627): Added MAPA OTE entry [#30808](https://github.com/openshift/origin/pull/30808)
* [OCPSTRAT-2728](https://issues.redhat.com/browse/OCPSTRAT-2728): Rebase 1.35 [#30866](https://github.com/openshift/origin/pull/30866)
* [OCPNODE-4043](https://issues.redhat.com/browse/OCPNODE-4043): Add DRA e2e tests to run on NVIDIA GPU [#30758](https://github.com/openshift/origin/pull/30758)
* [NE-2422](https://issues.redhat.com/browse/NE-2422): Skip Gateway API tests on dual-stack clusters [#30942](https://github.com/openshift/origin/pull/30942)
* [NE-2131](https://issues.redhat.com/browse/NE-2131): register CIO tests extension and remove tests migrated to CIO [#30911](https://github.com/openshift/origin/pull/30911)
* [MCO-2171](https://issues.redhat.com/browse/MCO-2171): remove MCO bootimage tests from origin [#30933](https://github.com/openshift/origin/pull/30933)
* [OCPBUGS-78617](https://issues.redhat.com/browse/OCPBUGS-78617): Fix PinnedImages test should respect node taints [#30913](https://github.com/openshift/origin/pull/30913)
* NO-ISSUE: Make MCN degrade test stable across TechPreview and non-TechPreview [#30943](https://github.com/openshift/origin/pull/30943)
* [TRT-2573](https://issues.redhat.com/browse/TRT-2573): Show non-blocking failure message in JUnit failure output [#30921](https://github.com/openshift/origin/pull/30921)
* [NE-2422](https://issues.redhat.com/browse/NE-2422): Add dual-stack ingress e2e tests for AWSDualStackInstall featuregate [#30904](https://github.com/openshift/origin/pull/30904)
* [OCPNODE-4031](https://issues.redhat.com/browse/OCPNODE-4031): Add criocredentialprovider tests [#30821](https://github.com/openshift/origin/pull/30821)
* [OCPNODE-3720](https://issues.redhat.com/browse/OCPNODE-3720): Test for AutoNodeSizing [#30789](https://github.com/openshift/origin/pull/30789)
* [NE-2422](https://issues.redhat.com/browse/NE-2422): Fix router e2e tests for dual-stack AWS clusters [#30934](https://github.com/openshift/origin/pull/30934)
* [STOR-2505](https://issues.redhat.com/browse/STOR-2505): Add storage binaries check [#30698](https://github.com/openshift/origin/pull/30698)
* [OCPBUGS-78940](https://issues.redhat.com/browse/OCPBUGS-78940): Treat groups as existent if they were found but discovery is stale [#30923](https://github.com/openshift/origin/pull/30923)
* NO-JIRA: Reverting case OOM score adjustment [#30932](https://github.com/openshift/origin/pull/30932)
* [OCPEDGE-2447](https://issues.redhat.com/browse/OCPEDGE-2447): IsMicroShiftCluster: return error instead of calling Skip from container node [#30914](https://github.com/openshift/origin/pull/30914)
* [NE-2501](https://issues.redhat.com/browse/NE-2501): Allow prometheus test pods to access Ingress Operator metrics port [#30928](https://github.com/openshift/origin/pull/30928)
* NO-JIRA: remove extra character [#30920](https://github.com/openshift/origin/pull/30920)
* [OCPEDGE-2447](https://issues.redhat.com/browse/OCPEDGE-2447): increase precondition cluster health timeout to 10m [#30893](https://github.com/openshift/origin/pull/30893)
* [OCPNODE-3751](https://issues.redhat.com/browse/OCPNODE-3751): Add automated tests for kubelet LimitedSwap drop-in configuration for CNV [#30795](https://github.com/openshift/origin/pull/30795)
* [MCO-2155](https://issues.redhat.com/browse/MCO-2155): add osstream exclusion for mco bootimage tests [#30918](https://github.com/openshift/origin/pull/30918)
* [TRT-2539](https://issues.redhat.com/browse/TRT-2539): Fix output capture in ginkgo RunSpec to capture stdout/stderr [#30769](https://github.com/openshift/origin/pull/30769)
* [NE-2498](https://issues.redhat.com/browse/NE-2498): add new DCM e2e tests [#30741](https://github.com/openshift/origin/pull/30741)
* NO-ISSUE: test/e2e/upgrade: Raise default update-ack timeout to 10m [#30917](https://github.com/openshift/origin/pull/30917)
* [TRT-2506](https://issues.redhat.com/browse/TRT-2506): Add OS version info to ClusterData [#30827](https://github.com/openshift/origin/pull/30827)
* [NE-2292](https://issues.redhat.com/browse/NE-2292): Tests for gatewayAPIWithoutOLM featuregate graduation [#30905](https://github.com/openshift/origin/pull/30905)
* [OCPEDGE-2381](https://issues.redhat.com/browse/OCPEDGE-2381): Verify etc pod should start with oom_score_adj as system-node-critical [#30867](https://github.com/openshift/origin/pull/30867)
* NO-JIRA: remove test exception for Insights operator [#30849](https://github.com/openshift/origin/pull/30849)
* [NE-2292](https://issues.redhat.com/browse/NE-2292): Skip OLM tests when GatewayAPIWithoutOLM enabled [#30896](https://github.com/openshift/origin/pull/30896)
* NO-JIRA: Remove TNF node replacement test [#30901](https://github.com/openshift/origin/pull/30901)
* [OCPBUGS-78384](https://issues.redhat.com/browse/OCPBUGS-78384): changed http to https for three places to reduce test false positives and false negatives [#30872](https://github.com/openshift/origin/pull/30872)
* [CNTRLPLANE-2999](https://issues.redhat.com/browse/CNTRLPLANE-2999): Revert PR #30746: TLS 1.3 test causing instability in 4.22 [#30895](https://github.com/openshift/origin/pull/30895)
* NO-JIRA: Add a singleton instance for list of nodes [#30830](https://github.com/openshift/origin/pull/30830)
* [OCPNODE-3932](https://issues.redhat.com/browse/OCPNODE-3932): Add automated tests for non-CNV swap configuration [#30807](https://github.com/openshift/origin/pull/30807)
* [OCPBUGS-78016](https://issues.redhat.com/browse/OCPBUGS-78016): Fix double counting of pod restart events [#30862](https://github.com/openshift/origin/pull/30862)
* [CNTRLPLANE-2449](https://issues.redhat.com/browse/CNTRLPLANE-2449): test(sig-builds][Feature:Builds]): ignore watchapi.Bookmark as they are synthetic and used only for signaling sync completion [#30885](https://github.com/openshift/origin/pull/30885)
* [OCPBUGS-77281](https://issues.redhat.com/browse/OCPBUGS-77281): Add exception for GCE CSI driver images [#30870](https://github.com/openshift/origin/pull/30870)
* [OCPBUGS-77002](https://issues.redhat.com/browse/OCPBUGS-77002): Remove temporarily skip of MCO tests creating custom MCPs in RHEL10 suites [#30845](https://github.com/openshift/origin/pull/30845)
* [CNTRLPLANE-2549](https://issues.redhat.com/browse/CNTRLPLANE-2549): monitortests: treat Thanos collection failure as flake in disruptive suites [#30877](https://github.com/openshift/origin/pull/30877)
* [OCPBUGS-76334](https://issues.redhat.com/browse/OCPBUGS-76334): Add TLS 1.3 (Modern profile) support to TestTLSDefaults [#30746](https://github.com/openshift/origin/pull/30746)
* [OCPNODE-4093](https://issues.redhat.com/browse/OCPNODE-4093): Update readme to include long running test information [#30791](https://github.com/openshift/origin/pull/30791)
* [OCPBUGS-48186](https://issues.redhat.com/browse/OCPBUGS-48186): Add kubelet and CRI-O panic detection invariant test [#30243](https://github.com/openshift/origin/pull/30243)
* [OCPBUGS-38666](https://issues.redhat.com/browse/OCPBUGS-38666), [OCPBUGS-38750](https://issues.redhat.com/browse/OCPBUGS-38750), [OCPBUGS-62623](https://issues.redhat.com/browse/OCPBUGS-62623): Remove DNS test exceptions [#30865](https://github.com/openshift/origin/pull/30865)
* [OCPBUGS-77991](https://issues.redhat.com/browse/OCPBUGS-77991): suppress podman build - URLs [#30851](https://github.com/openshift/origin/pull/30851)
* [SPLAT-2672](https://issues.redhat.com/browse/SPLAT-2672): ote/ccm-aws removing binary while migrating to CCCMO [#30869](https://github.com/openshift/origin/pull/30869)
* [OCPBUGS-8933](https://issues.redhat.com/browse/OCPBUGS-8933): run resource request/limit check early [#30874](https://github.com/openshift/origin/pull/30874)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/origin/compare/8ea9a12f5c78d1928225bd4afacca4230c4cdae5...7da3e1c37ad14643c4cfda3d48d2f0416b677dea)


### [thanos](https://github.com/openshift/thanos/tree/5d9d0f387e5cc651470f27352b28674103bfdd77)

* [OCPBUGS-81494](https://issues.redhat.com/browse/OCPBUGS-81494): CVE-2026-33186 openshift4/ose-thanos-rhel9: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation [#179](https://github.com/openshift/thanos/pull/179)
* NO-JIRA: Bump to v0.41.0 [#173](https://github.com/openshift/thanos/pull/173)
* [Full changelog](https://github.com/openshift/thanos/compare/5efff2ec5b46b48ceee92e85aede2d7ed0682907...5d9d0f387e5cc651470f27352b28674103bfdd77)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/cf21e1211225e3cf6baa27bdb12ae86c5c13db39)

* [OCPBUGS-81525](https://issues.redhat.com/browse/OCPBUGS-81525): Bump google.golang.org/grpc  to 1.79.3 [#170](https://github.com/openshift/vmware-vsphere-csi-driver/pull/170)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/e5c5c1ea677ee1fbfd74823265afa1b82b91df50...cf21e1211225e3cf6baa27bdb12ae86c5c13db39)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/d3668c9a9510f189604343e817cc79ab23367f40)

* [STOR-2762](https://issues.redhat.com/browse/STOR-2762): Bump all deps for 4.22 [#334](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/334)
* [STOR-2882](https://issues.redhat.com/browse/STOR-2882): add feature gate for checking platform type is vsphere [#331](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/331)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/e325a0db6fe047330d316def901e7d73fadf9beb...d3668c9a9510f189604343e817cc79ab23367f40)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/842aed3df97005839ef5deaf560abbe6486b9daf)

* [STOR-2762](https://issues.redhat.com/browse/STOR-2762): Bump all deps for 4.22 [#214](https://github.com/openshift/vsphere-problem-detector/pull/214)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/acf69b9fd87581907f36f50268c4dd02b37ebace...842aed3df97005839ef5deaf560abbe6486b9daf)