# 5.0.0-okd-scos.ec.1

Created: 2026-06-11 08:38:00 +0000 UTC

Image Digest: `sha256:faa1adab3fea83b479a8ec94c53e51f30cf6eca9d46bfc5448dbbf076d750c3c`

Promoted from registry.ci.openshift.org/origin/release-scos:5.0.0-0.okd-scos-nightly-2026-06-10-184543


## Changes from 5.0.0-okd-scos.ec.0

### Components

* Kubectl 1.35.2
* Kubernetes 1.35.3
* Kubernetes Tests 1.35.1
* CentOS Stream CoreOS 10 upgraded from 10.0.20260428-0 to 10.0.20260602-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | OKD<br/>Hypershift | OKD<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---:  |
| EVPN <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled |
| MutatingAdmissionPolicy <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled |
| VSphereMultiVCenterDay2 <br/> (0 tests)| Disabled| Disabled| Enabled| Enabled| Disabled| Disabled| Enabled<br/>(Changed)| Enabled<br/>(Changed) |
| MutableTopology <br/> (0 tests)|  |  |  | Enabled<br/>(New)|  |  |  |   |
| NetworkObservabilityInstall <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)|  |  | Enabled<br/>(New)| Enabled<br/>(New) |
| OLMLifecycleAndCompatibility <br/> (0 tests)|  |  |  | Enabled<br/>(New)|  |  |  | Enabled<br/>(New) |
| TLSGroupPreferences <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)|  |  | Enabled<br/>(New)| Enabled<br/>(New) |


### Rebuilt images without code change

* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [f0be9c72](https://github.com/openshift/aws-karpenter-provider-aws/commit/f0be9c72e5bf25caeb2ca45c14e67e4d397a52cb) `sha256:981ddc3e038ac6cc48bb5480924b7128946aaea3f4ee89110b3b073787f9dd81`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [82088287](https://github.com/openshift/aws-pod-identity-webhook/commit/8208828799b6c4f91fd9b80128668f7765599e84) `sha256:a247b144a5453bc7cf23607cf05127ce995e8633863382313a837f636c41fecf`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [7b44f756](https://github.com/openshift/azure-workload-identity/commit/7b44f75681bf053805a9cff468149b0fe7cf1e33) `sha256:8284499249690a435ba21cfe869078c745932cc384827aba80ba6a6a26f18dad`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [cf62f8c7](https://github.com/openshift/baremetal-runtimecfg/commit/cf62f8c7ac7494096e99997a53ceb48e997c1273) `sha256:ee65e756152ffc1673ed2c3282753f301b98619bcbca768c447390f0c420cb8e`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [2d69ad95](https://github.com/openshift/cloud-network-config-controller/commit/2d69ad953cfaa419e9b6221da9edb152ded91e0b) `sha256:d28071e1cfb46d56837161f41148de1953394d2ce35ea08d91cd40aa48cb5e76`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [bb429f5b](https://github.com/openshift/cluster-policy-controller/commit/bb429f5b2a7d77791110b06d8ec5c017183e3ab9) `sha256:b41ceaad8b29699493c5569c61630302496e63bfe774419f6d85234ded2c6a29`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [0bfb6b3c](https://github.com/openshift/cluster-samples-operator/commit/0bfb6b3c2f558c9098c438082bffb44eb8f07099) `sha256:4d5cd177a110cfaf2c6beb552e5dfe35c9035404137d376b0cae689ce782cc3a`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [4e74a4aa](https://github.com/openshift/csi-external-resizer/commit/4e74a4aa52a2046d6b97a47dff7a60ddb73d0bbd) `sha256:efe058ef0eb8aef2ff9aebdf224797cd63b96566a4a2fe2fd7068a398e6eadd8`
* [docker-registry](https://github.com/openshift/image-registry) git [57039cd2](https://github.com/openshift/image-registry/commit/57039cd2d9c87547cdf9a8d1dc7cb94f1ca089f7) `sha256:9d1f0768bcdaed01bb3e68b9a71e7ab8009840963a7330df7978edb07983349a`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [d37f51e0](https://github.com/openshift/egress-router-cni/commit/d37f51e057620bdee564f68dcfde955acf033d3e) `sha256:6f36566594fa095e0f9bbb601f4f26fa9cbd47c398e8911737d57127d1dea7df`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [d7675f31](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/d7675f312ffdc8501032ff8217776cd7172b6bb0) `sha256:d9e46003a2bb13b6bcb802ad36529fc4de2b613c2282c239a6a41568e975d50a`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [1f739771](https://github.com/openshift/machine-api-provider-ibmcloud/commit/1f7397711bf06c87bf497e300870871dc345b827) `sha256:45b87175078a95028fb671791eba9861467ce8d999e9667057e3172fd5e6dd2e`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [38c16c46](https://github.com/openshift/kubernetes-metrics-server/commit/38c16c4698d131ab0e2da0d4b4b76d5322a89bab) `sha256:d46de40e3c13f822dd14323c9dd29ebda788ae5ff8c8a4617d25230e681f513a`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [d12e2746](https://github.com/openshift/kube-rbac-proxy/commit/d12e274605248f6c59373240a7eae7a7a357dcb3) `sha256:696697854b2100e8d9239d1b62b21d4a33f580e86afc50fbcf6c897f32498dd0`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [72835e43](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/72835e43c7754356645e41031f3a99926b4d42e6) `sha256:958399ba15199be5991b59b148205b96e87c88b10b4084e672df1476975ba13d`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [76dd5a6f](https://github.com/openshift/cloud-provider-kubevirt/commit/76dd5a6fa9e86573bf3dfb79be17edf832e3bae1) `sha256:3e957d8dce6390239241f181407a6768c892a94994fb683fbb347ea8c7deccac`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [771b562d](https://github.com/openshift/kubevirt-csi-driver/commit/771b562d4875296007850a4d3709a7ae1c6ed3e2) `sha256:9a0f9fb35b5a4c5fec4e0e67b14799904a9ec683222f7f50a466a23a9b67c88e`
* [multus-cni](https://github.com/openshift/multus-cni) git [b4ec7d82](https://github.com/openshift/multus-cni/commit/b4ec7d8239ce4bd3ed949bce9816a013377b44c7) `sha256:dec14d8856d6298bddff659d8d36d80a7fc10fe7b2ba43de1ffb754678790b6c`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [b4ec7d82](https://github.com/openshift/multus-cni/commit/b4ec7d8239ce4bd3ed949bce9816a013377b44c7) `sha256:543385bc12efea338abda5cc79d40a70abca53e51cf63eef3c46481fc032e519`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [08af4127](https://github.com/openshift/route-override-cni/commit/08af4127c77976510cad1c096d9aca977d8ae5af) `sha256:94c0dd49e54c8f65c1dbffb9821d95a253b3b96cdba41a1e1e6d652b030a2172`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [d691040e](https://github.com/openshift/whereabouts-cni/commit/d691040e509bb20c26b5e8366c0d6f3bb45a5e02) `sha256:7d9b3d12214852511e42b96f40104192e2e6753d739758c547f0850e487b068c`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [5b233ea1](https://github.com/openshift/network-metrics-daemon/commit/5b233ea1d80733c1b00c6bad65dec0620dbf783a) `sha256:b1d1c7a74f4bb88fc50f8b2d752022afbdad5c8268969cba21d6867b6178fac2`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [61ec6046](https://github.com/openshift/cloud-provider-nutanix/commit/61ec60465b92969966bc4b19637cdda75fb3105a) `sha256:27d77b6a78eb0055a076f8186aa725c3150b83b007b563e3d3431a38eaef1995`
* [oauth-server](https://github.com/openshift/oauth-server) git [3aa95c07](https://github.com/openshift/oauth-server/commit/3aa95c0715e812e17378bd78b223287ea6fb41f0) `sha256:55b57c678e51c073eaa962d8897e02631a2b69ac66d3fc42ddfa69562efb9a89`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [8a8c354b](https://github.com/openshift/machine-api-provider-openstack/commit/8a8c354b99ce83e3c05a91358aadec09944c2fce) `sha256:54c181018fc8a9b0bf12dc650cf5e58293bf7294ffc740edd206210d43761bc4`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [855eaaae](https://github.com/openshift/cloud-provider-powervs/commit/855eaaae59c78a00638d8426b4b1763e881d9e6f) `sha256:78e4608d0492fc26204366fc06721dcde8beb7fcc2e8e312ba868591086745f7`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [e88cf81d](https://github.com/openshift/machine-api-provider-powervs/commit/e88cf81dd9ad174f395b86f9cdc40fa30cb06bf4) `sha256:e9adda888a60645e689ec6abc627915415150315c5faa03264f964851ff8155b`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [e7ccfa30](https://github.com/openshift/service-ca-operator/commit/e7ccfa308e69ce4ad1f2afcd1d7c8ff25144374b) `sha256:d6549bd75f095b842dc89b5b4de894a5321556d9e2b997e3d5ce415c1badfe01`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [fb90e2d7](https://github.com/openshift/cloud-provider-vsphere/commit/fb90e2d792e464d9c5ccf782a8101d1f40cf29c0) `sha256:dd8abd627d0b62b33007cc2e68b24cd7a6248ea699557031505e094f80f3c84b`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/e795a7e5b14b70b261de10dbf5f7c4bb7d01cf2c)

* [MGMT-24339](https://issues.redhat.com/browse/MGMT-24339): Prepare 4.22 stable versions assisted-service upstream [#10440](https://github.com/openshift/assisted-service/pull/10440)
* NO-ISSUE: [master] Bump OCP versions: 4.22 [#10445](https://github.com/openshift/assisted-service/pull/10445)
* NO-ISSUE: Update OCP 5.0 OS images to use released 4.22 RHCOS [#10441](https://github.com/openshift/assisted-service/pull/10441)
* [MGMT-24495](https://issues.redhat.com/browse/MGMT-24495): Fix S3 additional_name and file_name [#10432](https://github.com/openshift/assisted-service/pull/10432)
* [MGMT-24496](https://issues.redhat.com/browse/MGMT-24496): Allow spaces between the value and unit for installcache [#10433](https://github.com/openshift/assisted-service/pull/10433)
* NO-ISSUE: [master] Bump OCP versions: 4.18, 4.22, 4.20, 4.13 [#10436](https://github.com/openshift/assisted-service/pull/10436)
* [MGMT-22787](https://issues.redhat.com/browse/MGMT-22787): Add enhancement doc to limit inventory size [#10410](https://github.com/openshift/assisted-service/pull/10410)
* NO-ISSUE: [master] Bump OCP versions: 4.22, 4.21 [#10427](https://github.com/openshift/assisted-service/pull/10427)
* [MGMT-24397](https://issues.redhat.com/browse/MGMT-24397): Add OCP test version builder & PoC [#10321](https://github.com/openshift/assisted-service/pull/10321)
* [MGMT-23738](https://issues.redhat.com/browse/MGMT-23738): Flaky test: "Move Agent to another infraenv" fails with Kubernetes conflict error [#10319](https://github.com/openshift/assisted-service/pull/10319)
* NO-ISSUE: [master] Bump OCP versions: 4.16 [#10423](https://github.com/openshift/assisted-service/pull/10423)
* [MGMT-19732](https://issues.redhat.com/browse/MGMT-19732): Add ntp_sources field for exclusive NTP configuration [#10408](https://github.com/openshift/assisted-service/pull/10408)
* [MGMT-22370](https://issues.redhat.com/browse/MGMT-22370): Add exponential backoff to agent image pull [#10337](https://github.com/openshift/assisted-service/pull/10337)
* [MGMT-24243](https://issues.redhat.com/browse/MGMT-24243): Add option for a delay when applying static network config on minimal ISO [#10373](https://github.com/openshift/assisted-service/pull/10373)
* NO-ISSUE: [master] Bump OCP versions: 4.19, 4.22 [#10402](https://github.com/openshift/assisted-service/pull/10402)
* NO-ISSUE: add Assisted-by commit trailer convention to CLAUDE.md [#10400](https://github.com/openshift/assisted-service/pull/10400)
* NO-ISSUE: [master] Bump OCP versions: 4.21, 5.0 [#10392](https://github.com/openshift/assisted-service/pull/10392)
* [MGMT-21836](https://issues.redhat.com/browse/MGMT-21836): Allow external platform with non-standard HA control plane [#10286](https://github.com/openshift/assisted-service/pull/10286)
* [MGMT-23230](https://issues.redhat.com/browse/MGMT-23230): Add MachineConfig for AMD GPU kernel module blacklist [#9920](https://github.com/openshift/assisted-service/pull/9920)
* [MGMT-24457](https://issues.redhat.com/browse/MGMT-24457): Add MI350P PCI device IDs to NFD NodeFeatureRule [#10388](https://github.com/openshift/assisted-service/pull/10388)
* [MGMT-24393](https://issues.redhat.com/browse/MGMT-24393): Assisted Service IPv6 checks fails comparative [#10340](https://github.com/openshift/assisted-service/pull/10340)
* NO-ISSUE: [master] Bump OCP versions: 4.17, 4.20, 4.18 [#10383](https://github.com/openshift/assisted-service/pull/10383)
* NO-ISSUE: [master] Bump OCP versions: 4.21, 4.22 [#10348](https://github.com/openshift/assisted-service/pull/10348)
* NO-ISSUE: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26 [#10354](https://github.com/openshift/assisted-service/pull/10354)
* NO-ISSUE: Fix resource leak and inconsistency in manifest download [#10322](https://github.com/openshift/assisted-service/pull/10322)
* [MGMT-21834](https://issues.redhat.com/browse/MGMT-21834): deprecate supported-platforms endpoint [#10122](https://github.com/openshift/assisted-service/pull/10122)
* NO-ISSUE: [master] Bump OCP versions: 4.14, 4.19, 4.18, 4.21, 4.20, 4.16 [#10342](https://github.com/openshift/assisted-service/pull/10342)
* NO-ISSUE: fix typo: 'occured' -&gt; 'occurred' in main.go error wraps [#10316](https://github.com/openshift/assisted-service/pull/10316)
* NO-ISSUE: increase the timout waiting for assisted-image-service [#10327](https://github.com/openshift/assisted-service/pull/10327)
* [MGMT-20634](https://issues.redhat.com/browse/MGMT-20634): Revert mac-identifier and global DNS workarounds as RHEL-91250 and RHEL-72440 resolved [#10318](https://github.com/openshift/assisted-service/pull/10318)
* [ACM-33836](https://issues.redhat.com/browse/ACM-33836): CVE-2026-35469 bump github.com/moby/spdystream [#10314](https://github.com/openshift/assisted-service/pull/10314)
* NO-ISSUE: [master] Bump OCP versions: 4.22, 4.13, 4.16, 4.17 [#10296](https://github.com/openshift/assisted-service/pull/10296)
* NO-ISSUE: [master] Bump OCP versions: 4.21, 4.20, 4.18, 4.19 [#10287](https://github.com/openshift/assisted-service/pull/10287)
* [MGMT-19930](https://issues.redhat.com/browse/MGMT-19930): upgrade PostgreSQL stack to pgx v5 and ocm-sdk-go v0.1.499 [#10230](https://github.com/openshift/assisted-service/pull/10230)
* NO-ISSUE: [master] Bump OCP versions: 4.21 [#10284](https://github.com/openshift/assisted-service/pull/10284)
* [Full changelog](https://github.com/openshift/assisted-service/compare/7efb52f69c7f5dc4d7d9717d4876cbed927a1f68...e795a7e5b14b70b261de10dbf5f7c4bb7d01cf2c)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/7c400e88587c5c52a14500ac4c228fa3f99a9d60)

* NO-ISSUE: Refresh RPM lockfiles [#2160](https://github.com/openshift/assisted-installer/pull/2160)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/28bc267a6a5fce13f43126fde48df3427a838e11...7c400e88587c5c52a14500ac4c228fa3f99a9d60)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/b5ecd18f8be9eac3fc6052b24dce306333e6cb8a)

* NO-ISSUE: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26 [#1461](https://github.com/openshift/assisted-installer-agent/pull/1461)
* NO-ISSUE: Upgrade linter [#1453](https://github.com/openshift/assisted-installer-agent/pull/1453)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/c64bacd536b2d79c8e54bbdf184ec8385f408f29...b5ecd18f8be9eac3fc6052b24dce306333e6cb8a)


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/52310ac7408466c6fe38c5dc95fc75497676110f)

* Fix FeedbackCard types (#3776) [#3776](https://github.com/openshift-assisted/assisted-installer-ui/pull/3776)
* Upgrade serialize_javascript to ^7.0.5 (#3775) [#3775](https://github.com/openshift-assisted/assisted-installer-ui/pull/3775)
* Updating assisted-installer-ui-container image to be consistent with ART for 5.0 (#3771) [#3771](https://github.com/openshift-assisted/assisted-installer-ui/pull/3771)
* Bump vitest from 0.34.6 to 3.2.6 (#3772) [#3772](https://github.com/openshift-assisted/assisted-installer-ui/pull/3772)
* [OCPBUGS-72598](https://issues.redhat.com/browse/OCPBUGS-72598): Custom manifests are broken in local assisted UI (#3766) [#3766](https://github.com/openshift-assisted/assisted-installer-ui/pull/3766)
* [OCPBUGS-85310](https://issues.redhat.com/browse/OCPBUGS-85310): Static ip prefill for ove below the sea (#3733) [#3733](https://github.com/openshift-assisted/assisted-installer-ui/pull/3733)
* [MGMT-24099](https://issues.redhat.com/browse/MGMT-24099): UI redirects to Custom Manifest page before host discovery when cluster is OCI platform (#3739) [#3739](https://github.com/openshift-assisted/assisted-installer-ui/pull/3739)
* chore(deps): update konflux references (#3762) [#3762](https://github.com/openshift-assisted/assisted-installer-ui/pull/3762)
* [MGMT-24304](https://issues.redhat.com/browse/MGMT-24304): On disconnected environment no Openshift version is set by default on standalone cluster details page and no version is shown in the dropdown till Show all available are shown (#3723) [#3723](https://github.com/openshift-assisted/assisted-installer-ui/pull/3723)
* Bump tmp from 0.2.5 to 0.2.6 (#3760) [#3760](https://github.com/openshift-assisted/assisted-installer-ui/pull/3760)
* chore(deps): update testing packages (#3742) [#3742](https://github.com/openshift-assisted/assisted-installer-ui/pull/3742)
* Revert "OCPBUGS-84038 | [Below the sea UI] Lack of visual feedback (spinner) …" (#3757) [#3757](https://github.com/openshift-assisted/assisted-installer-ui/pull/3757)
* Fix disk encryption parsing for cluster details (#3737) [#3737](https://github.com/openshift-assisted/assisted-installer-ui/pull/3737)
* Reset search field on 'Clear all filters' (#3736) [#3736](https://github.com/openshift-assisted/assisted-installer-ui/pull/3736)
* [MGMT-24444](https://issues.redhat.com/browse/MGMT-24444): Apply sentence case to networking management type labels … (#3747) [#3747](https://github.com/openshift-assisted/assisted-installer-ui/pull/3747)
* Operators section should not be displayed on review and installation progress pages when no operators are selected (#3745) [#3745](https://github.com/openshift-assisted/assisted-installer-ui/pull/3745)
* Remove Arbiter button (#3744) [#3744](https://github.com/openshift-assisted/assisted-installer-ui/pull/3744)
* chore(deps): update typescript (#3743) [#3743](https://github.com/openshift-assisted/assisted-installer-ui/pull/3743)
* chore(deps): update konflux references (#3741) [#3741](https://github.com/openshift-assisted/assisted-installer-ui/pull/3741)
* Update Konflux Quay image address (#3740) [#3740](https://github.com/openshift-assisted/assisted-installer-ui/pull/3740)
* Bump ws from 8.18.3 to 8.20.1 (#3726) [#3726](https://github.com/openshift-assisted/assisted-installer-ui/pull/3726)
* fix monted pull secret parsing (#3692) [#3692](https://github.com/openshift-assisted/assisted-installer-ui/pull/3692)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.9-1778675823 (#3720) [#3720](https://github.com/openshift-assisted/assisted-installer-ui/pull/3720)
* chore(deps): update dependency qs to ^6.15.2 (#3719) [#3719](https://github.com/openshift-assisted/assisted-installer-ui/pull/3719)
* chore(deps): update konflux references (#3718) [#3718](https://github.com/openshift-assisted/assisted-installer-ui/pull/3718)
* chore(deps): update dependency dpdm to v4 (#3555) [#3555](https://github.com/openshift-assisted/assisted-installer-ui/pull/3555)
* Implement useAgents hook for the CIM wizard (#3711) [#3711](https://github.com/openshift-assisted/assisted-installer-ui/pull/3711)
* Ugrade axios to 1.15.2 (#3710) [#3710](https://github.com/openshift-assisted/assisted-installer-ui/pull/3710)
* chore(deps): update dependency qs to ^6.15.1 (#3678) [#3678](https://github.com/openshift-assisted/assisted-installer-ui/pull/3678)
* chore(deps): update dependency eslint to ^8.57.1 (#3677) [#3677](https://github.com/openshift-assisted/assisted-installer-ui/pull/3677)
* chore(deps): update konflux references (#3707) [#3707](https://github.com/openshift-assisted/assisted-installer-ui/pull/3707)
* chore(deps): update dependency redux to ^4.2.1 (#3708) [#3708](https://github.com/openshift-assisted/assisted-installer-ui/pull/3708)
* chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.9-1778171507 (#3709) [#3709](https://github.com/openshift-assisted/assisted-installer-ui/pull/3709)
* Bump fast-uri from 3.1.0 to 3.1.2 (#3706) [#3706](https://github.com/openshift-assisted/assisted-installer-ui/pull/3706)
* OCPBUGS-84038 | [Below the sea UI] Lack of visual feedback (spinner) on disabled "Next" button during background validation (#3687) [#3687](https://github.com/openshift-assisted/assisted-installer-ui/pull/3687)
* [MGMT-23490](https://issues.redhat.com/browse/MGMT-23490): Refactor Troubleshooting Web Console (#3688) [#3688](https://github.com/openshift-assisted/assisted-installer-ui/pull/3688)
* Bump basic-ftp from 5.3.0 to 5.3.1 (#3698) [#3698](https://github.com/openshift-assisted/assisted-installer-ui/pull/3698)
* Bump ip-address from 7.1.0 to 10.1.1 (#3689) [#3689](https://github.com/openshift-assisted/assisted-installer-ui/pull/3689)
* Read from aipVIPs and ingressVIPs in getClusterProperties function (#3661) [#3661](https://github.com/openshift-assisted/assisted-installer-ui/pull/3661)
* Memoize the wizard footer on CIM Review step (#3686) [#3686](https://github.com/openshift-assisted/assisted-installer-ui/pull/3686)
* [MGMT-19002](https://issues.redhat.com/browse/MGMT-19002): [nmstate] UI form view missing autoconf field for ipv6 (#3681) [#3681](https://github.com/openshift-assisted/assisted-installer-ui/pull/3681)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/712f80e339763312aa673cebffd4de2eb5e168b5...52310ac7408466c6fe38c5dc95fc75497676110f)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/546c1a9f71cff62e7eb85e7e70cd0c66ecd66c13)

* [OCPBUGS-86036](https://issues.redhat.com/browse/OCPBUGS-86036): Filter out link-local IPv6 addresses [#305](https://github.com/openshift/agent-installer-utils/pull/305)
* [OCPBUGS-85524](https://issues.redhat.com/browse/OCPBUGS-85524): update konflux references [#286](https://github.com/openshift/agent-installer-utils/pull/286)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/eaafc6c1b97c1b06f285073efb98513ca77572c8...546c1a9f71cff62e7eb85e7e70cd0c66ecd66c13)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/c2014a5055dd4a3d32acdac070ee4e6b5207686f)

* [CNTRLPLANE-3380](https://issues.redhat.com/browse/CNTRLPLANE-3380): Merge https://github.com/kubernetes-sigs/apiserver-network-proxy:master (588e629) into main [#109](https://github.com/openshift/apiserver-network-proxy/pull/109)
* [CNTRLPLANE-3380](https://issues.redhat.com/browse/CNTRLPLANE-3380): Update OWNERS with HyperShift core team [#107](https://github.com/openshift/apiserver-network-proxy/pull/107)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/4fb0c812419671ae61e51225ac3ea9207170965d...c2014a5055dd4a3d32acdac070ee4e6b5207686f)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/d5b48e88d31113954ed45b4c37c383a7df30eed8)

* [OCPBUGS-87372](https://issues.redhat.com/browse/OCPBUGS-87372): Updating ose-aws-cloud-controller-manager-container image to be consistent with ART for 5.0 [#157](https://github.com/openshift/cloud-provider-aws/pull/157)
* [OCPBUGS-85643](https://issues.redhat.com/browse/OCPBUGS-85643): UPSTREAM: &lt;drop&gt;: bump google.golang.org/grpc to v1.79.3 [#154](https://github.com/openshift/cloud-provider-aws/pull/154)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/43906c280e2abaf3f182ff178ef73d554cbd98cf...d5b48e88d31113954ed45b4c37c383a7df30eed8)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/77b3287fd6d469dc4fe8f57ad6db25fa30a4ad45)

* [OCPBUGS-85567](https://issues.redhat.com/browse/OCPBUGS-85567): Bump github.com/go-jose/go-jose/v4 to 4.1.4 [#607](https://github.com/openshift/cluster-api-provider-aws/pull/607)
* NO-JIRA: manifests-gen: scope provider webhooks to capi namespace [#605](https://github.com/openshift/cluster-api-provider-aws/pull/605)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/fb02a12f9cbbce5e500f5fb78a0ebf6bc3ccce30...77b3287fd6d469dc4fe8f57ad6db25fa30a4ad45)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/0dc99489474b344fd8363d4ff1e2d91b4da1a312)

* NO-ISSUE: UPSTREAM: 2911: CVE-2026-33186: bump google.golang.org/grpc v1.80.0 [#315](https://github.com/openshift/aws-ebs-csi-driver/pull/315)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/0927af1c1397b6f3c7545c715e1a87e0263ae2bf...0dc99489474b344fd8363d4ff1e2d91b4da1a312)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/3a779d2f7815420faa47800a58356e481849d3ac)

* [OCPBUGS-87219](https://issues.redhat.com/browse/OCPBUGS-87219): Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 5.0 [#560](https://github.com/openshift/csi-operator/pull/560)
* [OCPBUGS-42363](https://issues.redhat.com/browse/OCPBUGS-42363): Re-enable Azure Disk load test [#558](https://github.com/openshift/csi-operator/pull/558)
* [OCPBUGS-86023](https://issues.redhat.com/browse/OCPBUGS-86023): Add memory limits to SMB CSI sidecar containers [#557](https://github.com/openshift/csi-operator/pull/557)
* [OCPBUGS-85457](https://issues.redhat.com/browse/OCPBUGS-85457): Add init container for Manila node daemonset [#552](https://github.com/openshift/csi-operator/pull/552)
* [OCPBUGS-84052](https://issues.redhat.com/browse/OCPBUGS-84052): Mount writable /tmp in SMB CSI driver [#545](https://github.com/openshift/csi-operator/pull/545)
* [Full changelog](https://github.com/openshift/csi-operator/compare/3f1abbe3fab85bf1ba07a17b4738e21d33d8f297...3a779d2f7815420faa47800a58356e481849d3ac)


### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/6ca6eea2f3a9d0b090ff63ba5b8e342d5686c9a8)

* [CNTRLPLANE-3380](https://issues.redhat.com/browse/CNTRLPLANE-3380): Update OWNERS with HyperShift core team [#45](https://github.com/openshift/aws-encryption-provider/pull/45)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/19e7b623429799c9c549690a1b5ab499844411f9...6ca6eea2f3a9d0b090ff63ba5b8e342d5686c9a8)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/2e4196b65473ae99bc9bbedc0bc7168ed3da3914)

* [OCPBUGS-83873](https://issues.redhat.com/browse/OCPBUGS-83873): Changed timeout for node ready logic in OTE [#185](https://github.com/openshift/machine-api-provider-aws/pull/185)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/cba0ea71f8aad552d9373f86c571db5f8ffd33c7...2e4196b65473ae99bc9bbedc0bc7168ed3da3914)


### [aws-node-termination-handler](https://github.com/openshift/aws-node-termination-handler/tree/e4ff2aaec292db42de9f3eef4908ba1c421a2a6c)

* [CNTRLPLANE-3380](https://issues.redhat.com/browse/CNTRLPLANE-3380): Update OWNERS with HyperShift core team [#7](https://github.com/openshift/aws-node-termination-handler/pull/7)
* [Full changelog](https://github.com/openshift/aws-node-termination-handler/compare/341ed3a086925b17671c5349343fedf988a1139e...e4ff2aaec292db42de9f3eef4908ba1c421a2a6c)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/f10dd9c791c0204da9a4e7620f7998e1c20de449)

* [OCPBUGS-85641](https://issues.redhat.com/browse/OCPBUGS-85641), [OCPBUGS-85642](https://issues.redhat.com/browse/OCPBUGS-85642): UPSTREAM: &lt;drop&gt;: bump google.golang.org/grpc to v1.79.3 [#184](https://github.com/openshift/cloud-provider-azure/pull/184)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/92dac5fb40ac662b46f95df6e3b86a935da0414b...f10dd9c791c0204da9a4e7620f7998e1c20de449)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/52af3f1a3ecffec69c621e80bc80adf67ecec7c0)

* NO-JIRA: Don't specify rules in aggregated cluster role [#392](https://github.com/openshift/cluster-api-provider-azure/pull/392)
* [OCPBUGS-87401](https://issues.redhat.com/browse/OCPBUGS-87401): Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 5.0 [#391](https://github.com/openshift/cluster-api-provider-azure/pull/391)
* NO-JIRA: manifests-gen: scope provider webhooks to capi namespace [#387](https://github.com/openshift/cluster-api-provider-azure/pull/387)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/efa8be1ab22e0cdefcd7a1fa371b5f8f7ad980ca...52af3f1a3ecffec69c621e80bc80adf67ecec7c0)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/799255f8fdbefc2686c3418dbd284ed50bae9e35)

* [OCPBUGS-87284](https://issues.redhat.com/browse/OCPBUGS-87284): Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 5.0 [#152](https://github.com/openshift/azure-disk-csi-driver/pull/152)
* [OCPBUGS-78197](https://issues.redhat.com/browse/OCPBUGS-78197): check for node name in waitForDiskManagedByTobeRemoved [#144](https://github.com/openshift/azure-disk-csi-driver/pull/144)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/4f6cc08d2180430239e67067920e850c26387699...799255f8fdbefc2686c3418dbd284ed50bae9e35)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/9380740c766b36f5b7246b13c46f5590b220fb21)

* NO-ISSUE: Bump spdystream to v0.5.1 [#135](https://github.com/openshift/azure-file-csi-driver/pull/135)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/b66940c2459bdd503270d758e92057c89b798c6d...9380740c766b36f5b7246b13c46f5590b220fb21)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/5367d3988bf7c629254ef77dbbbea058f48fdc47)

* [CNTRLPLANE-3380](https://issues.redhat.com/browse/CNTRLPLANE-3380): Merge https://github.com/Azure/kubernetes-kms:master (126fb87) into main [#42](https://github.com/openshift/azure-kubernetes-kms/pull/42)
* [CNTRLPLANE-3380](https://issues.redhat.com/browse/CNTRLPLANE-3380): Add rebasebot-compatible commit prefixes [#41](https://github.com/openshift/azure-kubernetes-kms/pull/41)
* [CNTRLPLANE-3380](https://issues.redhat.com/browse/CNTRLPLANE-3380): Update OWNERS with HyperShift core team [#35](https://github.com/openshift/azure-kubernetes-kms/pull/35)
* [CNTRLPLANE-3204](https://issues.redhat.com/browse/CNTRLPLANE-3204): feat: add workload identity support to Azure KMS plugin [#33](https://github.com/openshift/azure-kubernetes-kms/pull/33)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/dc5832a3068c2671cdc39c6d9506ee4aeb746298...5367d3988bf7c629254ef77dbbbea058f48fdc47)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/7b5a70c47cb57b9b73ac7753e90814b94af11b39)

* [OCPBUGS-87361](https://issues.redhat.com/browse/OCPBUGS-87361): Updating ose-machine-api-provider-azure-container image to be consistent with ART for 5.0 [#197](https://github.com/openshift/machine-api-provider-azure/pull/197)
* [PIXAA-7](https://issues.redhat.com/browse/PIXAA-7): Leverage SpotRebalanceRecommendation for instance termination when available [#196](https://github.com/openshift/machine-api-provider-azure/pull/196)
* [OCPBUGS-85416](https://issues.redhat.com/browse/OCPBUGS-85416): Don't permanently fail Machines after provisioning [#193](https://github.com/openshift/machine-api-provider-azure/pull/193)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/db9b10d2674def615be44d4bf385acb699c47ad2...7b5a70c47cb57b9b73ac7753e90814b94af11b39)


### [azure-service-operator](https://github.com/openshift/azure-service-operator/tree/0611cd27b9eaa4a1fa8e0ab8ddc85352a61903e0)

* [OCPBUGS-87382](https://issues.redhat.com/browse/OCPBUGS-87382): Updating ose-azure-service-operator-container image to be consistent with ART for 5.0 [#33](https://github.com/openshift/azure-service-operator/pull/33)
* [Full changelog](https://github.com/openshift/azure-service-operator/compare/0827c1fb110ea136fc7abb7b3ac8be062335d00d...0611cd27b9eaa4a1fa8e0ab8ddc85352a61903e0)


### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/29a96694bfc3b59d1fa95acf2ad87077cc1d3108)

* [OCPBUGS-87254](https://issues.redhat.com/browse/OCPBUGS-87254): Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 5.0 [#84](https://github.com/openshift/cluster-api-provider-metal3/pull/84)
* [OCPBUGS-86476](https://issues.redhat.com/browse/OCPBUGS-86476): Adopt existing Metal3 Remediation CRDs on upgrade [#82](https://github.com/openshift/cluster-api-provider-metal3/pull/82)
* NO-JIRA: manifests-gen: scope provider webhooks to capi namespace [#79](https://github.com/openshift/cluster-api-provider-metal3/pull/79)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/b041214aebeddffcc17f9698c0d9266a51cc14a9...29a96694bfc3b59d1fa95acf2ad87077cc1d3108)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/f014b1f35f7e226f5574fa91f42a5a2f2b23a6c6)

* [CORS-3895](https://issues.redhat.com/browse/CORS-3895): Add IPv6 backend pools and load balancing rules for dual-stack [#10329](https://github.com/openshift/installer/pull/10329)
* [CORS-4236](https://issues.redhat.com/browse/CORS-4236): aws: support worker machine pool management with ClusterAPI [#10577](https://github.com/openshift/installer/pull/10577)
* [OCPBUGS-76928](https://issues.redhat.com/browse/OCPBUGS-76928): Remove workaround to normalize ISO files extensions [#10315](https://github.com/openshift/installer/pull/10315)
* [OCPBUGS-86471](https://issues.redhat.com/browse/OCPBUGS-86471): baremetal: fix hostSelector for default stream [#10571](https://github.com/openshift/installer/pull/10571)
* [OCPBUGS-85509](https://issues.redhat.com/browse/OCPBUGS-85509): Add omitempty to vSphere and Nutanix MachinePool slice fields [#10551](https://github.com/openshift/installer/pull/10551)
* fix: OCPBUGS-86012: reset associatedVCenter in failure domain validation loop [#10559](https://github.com/openshift/installer/pull/10559)
* [OCPBUGS-87169](https://issues.redhat.com/browse/OCPBUGS-87169): CVE-2026-34986: Bump go-jose/v4 to 4.1.4 [#10596](https://github.com/openshift/installer/pull/10596)
* [MCO-2296](https://issues.redhat.com/browse/MCO-2296): Remove OSImageStreams v1 replace [#10592](https://github.com/openshift/installer/pull/10592)
* [MCO-2296](https://issues.redhat.com/browse/MCO-2296): OSImageStreams v1 promotion [#10566](https://github.com/openshift/installer/pull/10566)
* no-jira: remove reference to altinfra [#10585](https://github.com/openshift/installer/pull/10585)
* no-jira: improve AI agent readiness with guidelines and AGENTS.md [#10474](https://github.com/openshift/installer/pull/10474)
* [OCPBUGS-85352](https://issues.redhat.com/browse/OCPBUGS-85352): aws: fix Route 53 resource leak during cluster destroy in China regions [#10544](https://github.com/openshift/installer/pull/10544)
* [MCO-2200](https://issues.redhat.com/browse/MCO-2200): Add day-0 dual streams support for ABI install flow [#10481](https://github.com/openshift/installer/pull/10481)
* no-jira: logging: log invoked openshift-install command [#10490](https://github.com/openshift/installer/pull/10490)
* NO-ISSUE: Use types.OSImageStreamValues for validation [#10576](https://github.com/openshift/installer/pull/10576)
* [CORS-4495](https://issues.redhat.com/browse/CORS-4495): Populate RHCOS10 Marketplace Stream [#10556](https://github.com/openshift/installer/pull/10556)
* [MCO-2181](https://issues.redhat.com/browse/MCO-2181): Set OSImageStream default in install-config [#10570](https://github.com/openshift/installer/pull/10570)
* [OCPBUGS-84656](https://issues.redhat.com/browse/OCPBUGS-84656): Update RHCOS-release-4.22 bootimage metadata to 10.2.20260423-0 / 9.8.20260428-0 [#10524](https://github.com/openshift/installer/pull/10524)
* no-jira: PowerVS: Remove unrequired logging [#10552](https://github.com/openshift/installer/pull/10552)
* [CORS-4005](https://issues.redhat.com/browse/CORS-4005): refactor worker manifest serialization [#10407](https://github.com/openshift/installer/pull/10407)
* [OCPEDGE-2115](https://issues.redhat.com/browse/OCPEDGE-2115): types: support MAC address as alternative identifier for fencing credential [#10513](https://github.com/openshift/installer/pull/10513)
* [METAL-1731](https://issues.redhat.com/browse/METAL-1731): baremetal: Add coreos.openshift.io/stream label to BMH and hostSelector [#10502](https://github.com/openshift/installer/pull/10502)
* [OCPBUGS-78126](https://issues.redhat.com/browse/OCPBUGS-78126): baremetal: fix gather bootstrap failing with provisioningNetwork Disabled [#10395](https://github.com/openshift/installer/pull/10395)
* [SPLAT-2452](https://issues.redhat.com/browse/SPLAT-2452): Add SetSecurityGroups IAM permission to master nodes for BYO SG support for AWS NLBs [#10512](https://github.com/openshift/installer/pull/10512)
* [MCO-2164](https://issues.redhat.com/browse/MCO-2164): use machine-config-osimagestream to avoid hard-coding image tag names [#10416](https://github.com/openshift/installer/pull/10416)
* no-jira: images: bump UPI image dependencies to 4.22 [#10538](https://github.com/openshift/installer/pull/10538)
* [MCO-2200](https://issues.redhat.com/browse/MCO-2200): refactored node-joiner to use embedded rhcos data [#10537](https://github.com/openshift/installer/pull/10537)
* [OCPBUGS-79536](https://issues.redhat.com/browse/OCPBUGS-79536): Removing AWS security group OVNDB ports as they are no longer used [#10441](https://github.com/openshift/installer/pull/10441)
* [OCPBUGS-85232](https://issues.redhat.com/browse/OCPBUGS-85232): PowerVS: Add port 80 security group rule [#10541](https://github.com/openshift/installer/pull/10541)
* no-jira: tests: verify AWS instance type minimum cpu and mem requirement tests [#10536](https://github.com/openshift/installer/pull/10536)
* NO-JIRA: pkg/types/nutanix: warn about unused context [#10430](https://github.com/openshift/installer/pull/10430)
* [SPLAT-2710](https://issues.redhat.com/browse/SPLAT-2710): Added vSphere day 2 support [#10529](https://github.com/openshift/installer/pull/10529)
* [OCPBUGS-67159](https://issues.redhat.com/browse/OCPBUGS-67159): openstack: Reserve addresses for load balancer [#10375](https://github.com/openshift/installer/pull/10375)
* [Full changelog](https://github.com/openshift/installer/compare/f043a6dda382e2df186f21b3878b06a63e19f538...f014b1f35f7e226f5574fa91f42a5a2f2b23a6c6)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/f2b0db1919fff1344bc68948894c6775c0bf24a3)

* [OCPBUGS-87380](https://issues.redhat.com/browse/OCPBUGS-87380): Updating baremetal-machine-controller-container image to be consistent with ART for 5.0 [#256](https://github.com/openshift/cluster-api-provider-baremetal/pull/256)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/8d863b9505a5cfc0b01e33f985a3edf9d3c69f4b...f2b0db1919fff1344bc68948894c6775c0bf24a3)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/fbb5bf864756d1a01b865bc75b4d0fc1c3e55ffb)

* NO-ISSUE: Merge upstream [#489](https://github.com/openshift/baremetal-operator/pull/489)
* [OCPBUGS-87490](https://issues.redhat.com/browse/OCPBUGS-87490): Updating ose-baremetal-operator-container image to be consistent with ART for 5.0 [#488](https://github.com/openshift/baremetal-operator/pull/488)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/7a005472c3461a960aa983a325eddc504f836365...fbb5bf864756d1a01b865bc75b4d0fc1c3e55ffb)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/4007283544cbc3609f90375b7a8efd395561612f)

* [OCPBUGS-87534](https://issues.redhat.com/browse/OCPBUGS-87534): Updating openshift-enterprise-deployer-container image to be consistent with ART for 5.0 [#2284](https://github.com/openshift/oc/pull/2284)
* [OCPBUGS-87198](https://issues.redhat.com/browse/OCPBUGS-87198): Fix windows builds of oc rpm [#2281](https://github.com/openshift/oc/pull/2281)
* NO-JIRA: Switch container dependencies to Podman monorepo [#2277](https://github.com/openshift/oc/pull/2277)
* NO-JIRA: Bump go-jose dependency [#2269](https://github.com/openshift/oc/pull/2269)
* NO-JIRA: Making oc cli case blocking [#2260](https://github.com/openshift/oc/pull/2260)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/oc/compare/6ac066994b962cb01886dab515d821720324ed52...4007283544cbc3609f90375b7a8efd395561612f)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/833d9a3e986b917d22e063444031b3a1bda3195f)

* [OCPBUGS-82165](https://issues.redhat.com/browse/OCPBUGS-82165): Add retry logic for concurrent IAM policy changes in GCP [#1014](https://github.com/openshift/cloud-credential-operator/pull/1014)
* [OCPBUGS-58181](https://issues.redhat.com/browse/OCPBUGS-58181): Fix nil pointer dereference in ensureRolesAssignedToManagedIdentity [#987](https://github.com/openshift/cloud-credential-operator/pull/987)
* [CCO-683](https://issues.redhat.com/browse/CCO-683): Remove go-autorest dependency for Azure Stack Cloud configuration [#1024](https://github.com/openshift/cloud-credential-operator/pull/1024)
* [CCO-845](https://issues.redhat.com/browse/CCO-845): use AlwaysAllow UnhealthyPodEvictionPolicy option in PDBs [#1019](https://github.com/openshift/cloud-credential-operator/pull/1019)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/4f642703c07ee36873b155bbbc79f9ee784b38da...833d9a3e986b917d22e063444031b3a1bda3195f)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/4c8a2c04d67f9fddac0ec2f53e27d5ec5a63f013)

* NO-JIRA: Automatic agentic rebase: Update library-go to 0469313 [#912](https://github.com/openshift/cluster-authentication-operator/pull/912)
* [OCPBUGS-86221](https://issues.redhat.com/browse/OCPBUGS-86221): Update the well-known readiness controller to properly set cluster-operator conditions [#901](https://github.com/openshift/cluster-authentication-operator/pull/901)
* [CNTRLPLANE-3226](https://issues.redhat.com/browse/CNTRLPLANE-3226): switch to real Vault KMS plugin in CI [#909](https://github.com/openshift/cluster-authentication-operator/pull/909)
* [CNTRLPLANE-3226](https://issues.redhat.com/browse/CNTRLPLANE-3226): bump library-go to get KMS plugin credentials [#903](https://github.com/openshift/cluster-authentication-operator/pull/903)
* NO-JIRA: Automatic agentic rebase: Update library-go to d8750ed [#908](https://github.com/openshift/cluster-authentication-operator/pull/908)
* NO-JIRA: Automatic agentic rebase: Update library-go to 0cf249e [#907](https://github.com/openshift/cluster-authentication-operator/pull/907)
* [CNTRLPLANE-3364](https://issues.redhat.com/browse/CNTRLPLANE-3364): remove the old go lib std tests [#906](https://github.com/openshift/cluster-authentication-operator/pull/906)
* NO-JIRA: bump latest library-go changes [#904](https://github.com/openshift/cluster-authentication-operator/pull/904)
* NO-JIRA: remove old mock plugin deployment [#902](https://github.com/openshift/cluster-authentication-operator/pull/902)
* [CNTRLPLANE-3236](https://issues.redhat.com/browse/CNTRLPLANE-3236): support deploying Vault mock KMS plugin [#899](https://github.com/openshift/cluster-authentication-operator/pull/899)
* [CNTRLPLANE-3431](https://issues.redhat.com/browse/CNTRLPLANE-3431): restart operator upon config change [#897](https://github.com/openshift/cluster-authentication-operator/pull/897)
* NO-JIRA: Bump auth with latest library-go changes [#900](https://github.com/openshift/cluster-authentication-operator/pull/900)
* [CNTRLPLANE-3210](https://issues.redhat.com/browse/CNTRLPLANE-3210): Refactor `externaloidc` controller to support different configuration generation logic [#893](https://github.com/openshift/cluster-authentication-operator/pull/893)
* [CNTRLPLANE-3364](https://issues.redhat.com/browse/CNTRLPLANE-3364): add the kms suite and migrate the kms tests of auth-o to ote [#895](https://github.com/openshift/cluster-authentication-operator/pull/895)
* [CNTRLPLANE-3237](https://issues.redhat.com/browse/CNTRLPLANE-3237): Bump library-go and sync plugin changes [#896](https://github.com/openshift/cluster-authentication-operator/pull/896)
* [CNTRLPLANE-3237](https://issues.redhat.com/browse/CNTRLPLANE-3237): Bump library-go and sync encryption tests with APIServerEncryption struct change [#894](https://github.com/openshift/cluster-authentication-operator/pull/894)
* [CNTRLPLANE-3431](https://issues.redhat.com/browse/CNTRLPLANE-3431): enable tls config injection [#892](https://github.com/openshift/cluster-authentication-operator/pull/892)
* NO-JIRA: Bump latest library-go changes [#890](https://github.com/openshift/cluster-authentication-operator/pull/890)
* [OCPBUGS-69977](https://issues.redhat.com/browse/OCPBUGS-69977): Fix OAuth page showing OKD branding instead of OpenShift [#887](https://github.com/openshift/cluster-authentication-operator/pull/887)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/8fb6c6c1b87aa0350a9c6aacbe0a9270fa6f33eb...4c8a2c04d67f9fddac0ec2f53e27d5ec5a63f013)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/02af1a9fd6bcb87745979980fbbf9a2b0671dddb)

* [OCPBUGS-84130](https://issues.redhat.com/browse/OCPBUGS-84130): UPSTREAM: 9458: fix(clusterapi): use kind-aware version discovery for infra references [#418](https://github.com/openshift/kubernetes-autoscaler/pull/418)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/05bcec5a83ea3d9afc3a342a1b8878e30c19ef94...02af1a9fd6bcb87745979980fbbf9a2b0671dddb)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/5c8643284941ebd66a9d6aab4637e6e555919a9e)

* [OCPBUGS-87339](https://issues.redhat.com/browse/OCPBUGS-87339): Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 5.0 [#377](https://github.com/openshift/cluster-autoscaler-operator/pull/377)
* [OCPBUGS-52155](https://issues.redhat.com/browse/OCPBUGS-52155): Add machinesets to cluster operator related objects [#369](https://github.com/openshift/cluster-autoscaler-operator/pull/369)
* [AUTOSCALE-660](https://issues.redhat.com/browse/AUTOSCALE-660): add enforce node group min size flag [#374](https://github.com/openshift/cluster-autoscaler-operator/pull/374)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/260ea1b5967f47768a0727e8c84d451dc9de5ced...5c8643284941ebd66a9d6aab4637e6e555919a9e)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/3c65cfcd29414ddf50c0f4c3cdf6030dfd715d2f)

* [METAL-1730](https://issues.redhat.com/browse/METAL-1730): Pass IMAGE_SHARED_DIR to image-customization-controller [#590](https://github.com/openshift/cluster-baremetal-operator/pull/590)
* [OCPBUGS-87290](https://issues.redhat.com/browse/OCPBUGS-87290): Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 5.0 [#611](https://github.com/openshift/cluster-baremetal-operator/pull/611)
* [OCPBUGS-84934](https://issues.redhat.com/browse/OCPBUGS-84934): Add watcher for both TLS Adherence policy and profile changes [#597](https://github.com/openshift/cluster-baremetal-operator/pull/597)
* [OCPBUGS-85824](https://issues.redhat.com/browse/OCPBUGS-85824): Fix empty IRONIC_BASE_URL [#603](https://github.com/openshift/cluster-baremetal-operator/pull/603)
* [OCPBUGS-85496](https://issues.redhat.com/browse/OCPBUGS-85496): Fix webhook to validate the actual admission request object [#601](https://github.com/openshift/cluster-baremetal-operator/pull/601)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/be6246928e515e37a0ac87c4a0d881fd9fc303fd...3c65cfcd29414ddf50c0f4c3cdf6030dfd715d2f)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/7b1593a47898b6a97dc457efaca464624e9f2afa)

* [OCPBUGS-73886](https://issues.redhat.com/browse/OCPBUGS-73886): Fix typo in logs [#125](https://github.com/openshift/cluster-bootstrap/pull/125)
* NO-JIRA: Add control-plane-approvers to OWNERS [#127](https://github.com/openshift/cluster-bootstrap/pull/127)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/e6be0fdfbf43883e2301dbf2d0eb3ab4a4f93383...7b1593a47898b6a97dc457efaca464624e9f2afa)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/0a73a6858bf14e1b82d2c7477dbb392d882f6a21)

* [OCPBUGS-53005](https://issues.redhat.com/browse/OCPBUGS-53005): Remove references to master branch [#235](https://github.com/openshift/cluster-api/pull/235)
* NO-JIRA: manifests-gen: scope provider webhooks to capi namespace [#292](https://github.com/openshift/cluster-api/pull/292)
* [Full changelog](https://github.com/openshift/cluster-api/compare/a80fb578a643934166e53a1d2a4ce94215b082ed...0a73a6858bf14e1b82d2c7477dbb392d882f6a21)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/05c113ea5edd0aaf43e34c4a534a673d457449c1)

* NO-JIRA: build: add podman support to container image targets [#580](https://github.com/openshift/cluster-capi-operator/pull/580)
* NO-JIRA: Fix flake in infracluster test [#578](https://github.com/openshift/cluster-capi-operator/pull/578)
* NO-JIRA: fix shell compatibility in Makefile [#572](https://github.com/openshift/cluster-capi-operator/pull/572)
* [OCPBUGS-85530](https://issues.redhat.com/browse/OCPBUGS-85530): Fix failure to start on arm64 [#571](https://github.com/openshift/cluster-capi-operator/pull/571)
* NO-JIRA: Remove stale TODO comment for HostPlacement conversion [#569](https://github.com/openshift/cluster-capi-operator/pull/569)
* NO-JIRA: Allow sustaining engineering to self serve dependency updates [#553](https://github.com/openshift/cluster-capi-operator/pull/553)
* [OCPBUGS-84815](https://issues.redhat.com/browse/OCPBUGS-84815): fix: scope webhook to capi namespace, remove unused webhook endpoints [#543](https://github.com/openshift/cluster-capi-operator/pull/543)
* [OCPCLOUD-2664](https://issues.redhat.com/browse/OCPCLOUD-2664): Update operatorstatus to write correct sub-Conditions [#552](https://github.com/openshift/cluster-capi-operator/pull/552)
* [OCPCLOUD-3429](https://issues.redhat.com/browse/OCPCLOUD-3429): Mount provider images with image volumes [#527](https://github.com/openshift/cluster-capi-operator/pull/527)
* NO-JIRA: manifests-gen: scope provider webhooks to capi namespace [#544](https://github.com/openshift/cluster-capi-operator/pull/544)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/55cde4fda87cad940e8a3ddf83582f8dfbe835d9...05c113ea5edd0aaf43e34c4a534a673d457449c1)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/d3f8b6aa59a4e308824557b0eeb5f3dd40a2848f)

* [OCPBUGS-64852](https://issues.redhat.com/browse/OCPBUGS-64852): Progressing fix [#467](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/467)
* [SPLAT-2792](https://issues.redhat.com/browse/SPLAT-2792): Fixed issue where old vCenters not removed from new cloud config [#469](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/469)
* [OCPBUGS-86303](https://issues.redhat.com/browse/OCPBUGS-86303): e2e/ote-ccm-aws: enhance tests to run hybrid in hypershift HC [#464](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/464)
* NO-JIRA: update owners for CCM-AWS OTE path for SPLAT teeam [#468](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/468)
* [OCPBUGS-42837](https://issues.redhat.com/browse/OCPBUGS-42837): Do not set Degraded=True on transient errors [#436](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/436)
* [OCPBUGS-86299](https://issues.redhat.com/browse/OCPBUGS-86299): e2e/ccm-aws-ote: support to dual-stack IPv6 primary [#466](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/466)
* [OCPBUGS-85414](https://issues.redhat.com/browse/OCPBUGS-85414): fix ote ccm aws e2e resiliency on HCP [#462](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/462)
* [OCPCLOUD-3436](https://issues.redhat.com/browse/OCPCLOUD-3436): use AlwaysAllow UnhealthyPodEvictionPolicy option in PDBs [#457](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/457)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/ff92368b866a0d3d6d1534345a6a2110c2c16992...d3f8b6aa59a4e308824557b0eeb5f3dd40a2848f)


### [cluster-config-api](https://github.com/openshift/api/tree/5ce2c30718512fe5bf1209471cf787e5054a62cc)

* [SPLAT-2793](https://issues.redhat.com/browse/SPLAT-2793): Promoted VSphereMultiVCenterDay2 feature gate to TP [#2879](https://github.com/openshift/api/pull/2879)
* [OCPBUGS-87497](https://issues.redhat.com/browse/OCPBUGS-87497): Updating ose-cluster-config-api-container image to be consistent with ART for 5.0 [#2878](https://github.com/openshift/api/pull/2878)
* [CNTRLPLANE-3395](https://issues.redhat.com/browse/CNTRLPLANE-3395): Lower maximum allowed etcd quota from 32 to 16GiB [#2840](https://github.com/openshift/api/pull/2840)
* [OCPEDGE-2410](https://issues.redhat.com/browse/OCPEDGE-2410): feat: add mutable topology featuregate [#2872](https://github.com/openshift/api/pull/2872)
* Add KubeletConfigAccepted const in 'machineconfiguration/v1/types.go' [#2853](https://github.com/openshift/api/pull/2853)
* [MON-4029](https://issues.redhat.com/browse/MON-4029): Add KubeStateMetricsConfig to ClusterMonitoring API [#2778](https://github.com/openshift/api/pull/2778)
* [MCO-2296](https://issues.redhat.com/browse/MCO-2296): Promote OSImageStreams to v1 [#2854](https://github.com/openshift/api/pull/2854)
* [MON-4565](https://issues.redhat.com/browse/MON-4565): Add enableUserAlertmanagerConfig to ClusterMonitoring API [#2855](https://github.com/openshift/api/pull/2855)
* Update getLatestReleases to ignore non OCP releases [#2868](https://github.com/openshift/api/pull/2868)
* [NE-2334](https://issues.redhat.com/browse/NE-2334): Implement enhancement in OpenShift API to support for TLS curves in TLSProfile [#2583](https://github.com/openshift/api/pull/2583)
* Revert "Merge pull request #2693 from jcmoraisjr/OCPBUGS-74511-remove… [#2862](https://github.com/openshift/api/pull/2862)
* [CNTRLPLANE-2521](https://issues.redhat.com/browse/CNTRLPLANE-2521): feat: configv1/authentication: add fields for sourcing claims from external sources [#2827](https://github.com/openshift/api/pull/2827)
* [MON-4578](https://issues.redhat.com/browse/MON-4578): Add new fields to ThanosQuerierConfig [#2835](https://github.com/openshift/api/pull/2835)
* [CNTRLPLANE-3361](https://issues.redhat.com/browse/CNTRLPLANE-3361): make transitMount required [#2847](https://github.com/openshift/api/pull/2847)
* [MON-4579](https://issues.redhat.com/browse/MON-4579): Remove NodeSelector and Tolerations from NodeExporterConfig [#2837](https://github.com/openshift/api/pull/2837)
* [CORENET-6714](https://issues.redhat.com/browse/CORENET-6714): Enable Network Observability on Day 0 [#2752](https://github.com/openshift/api/pull/2752)
* [OCPBUGS-74511](https://issues.redhat.com/browse/OCPBUGS-74511): remove RouteExternalCertificate feature gate [#2693](https://github.com/openshift/api/pull/2693)
* [CNTRLPLANE-3361](https://issues.redhat.com/browse/CNTRLPLANE-3361): update vault kms plugin validation [#2836](https://github.com/openshift/api/pull/2836)
* [OCPSTRAT-3036](https://issues.redhat.com/browse/OCPSTRAT-3036): Promote MutatingAdmissionPolicy feature to Default [#2832](https://github.com/openshift/api/pull/2832)
* [OPRUN-4590](https://issues.redhat.com/browse/OPRUN-4590): Add OLMLifecycleAndCompatibility feature gate [#2824](https://github.com/openshift/api/pull/2824)
* [CNTRLPLANE-3237](https://issues.redhat.com/browse/CNTRLPLANE-3237): Rename KMSConfig Struct to KMSPluginConfig [#2833](https://github.com/openshift/api/pull/2833)
* [SRVKP-11558](https://issues.redhat.com/browse/SRVKP-11558): remove deprecated k8s.io/api packages removed in v0.36.0 [#2834](https://github.com/openshift/api/pull/2834)
* [CORENET-6861](https://issues.redhat.com/browse/CORENET-6861): Promote EVPN Feature Gate [#2799](https://github.com/openshift/api/pull/2799)
* Revert "OCPBUGS-83492: Allow :ref suffix in additionalLayerStores path for stargz-store to support lazy image pulling" [#2823](https://github.com/openshift/api/pull/2823)
* [Full changelog](https://github.com/openshift/api/compare/28b45b8020c71ad7c056b3ad1d569eff94d6b878...5ce2c30718512fe5bf1209471cf787e5054a62cc)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/2697a43188018b6e76a5acbd672d59bc2f77b79e)

* [CNTRLPLANE-3423](https://issues.redhat.com/browse/CNTRLPLANE-3423): feat: have CVO inject the centralized TLS configuration into the operator's config [#491](https://github.com/openshift/cluster-config-operator/pull/491)
* [SPLAT-2747](https://issues.redhat.com/browse/SPLAT-2747): Updated kube cloud config controller to react to feature gate updates [#489](https://github.com/openshift/cluster-config-operator/pull/489)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/15a09d1fa8e370ef0b840ba9cc58647e4eea3a29...2697a43188018b6e76a5acbd672d59bc2f77b79e)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/046a4ea83e45c3c1d5eb2d3ffc55a7e7d17fcc3c)

* [OCPBUGS-86860](https://issues.redhat.com/browse/OCPBUGS-86860): Fixed issue where nameserver is not set when recreating cpms [#406](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/406)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/85f92f79174d6df783f631eb3187f0e11e89cc96...046a4ea83e45c3c1d5eb2d3ffc55a7e7d17fcc3c)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/d12393588345a4ea3bdfc1c31c77eda409321c30)

* [OCPBUGS-87252](https://issues.redhat.com/browse/OCPBUGS-87252): Fix group snapshots on HyperShift [#278](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/278)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/108f37f0e378accc322cbeb68136ec500ec35b94...d12393588345a4ea3bdfc1c31c77eda409321c30)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/4556c40798213ee824f76c26bef66865326fe08b)

* [NE-2391](https://issues.redhat.com/browse/NE-2391): Add progressive disclosure AI agent context [#471](https://github.com/openshift/cluster-dns-operator/pull/471)
* [OCPBUGS-77532](https://issues.redhat.com/browse/OCPBUGS-77532): Fix premature node schedulability marking in taint checking [#470](https://github.com/openshift/cluster-dns-operator/pull/470)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/3d2141182243cde1ec6417bd005c76d29aa88a01...4556c40798213ee824f76c26bef66865326fe08b)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/2abd78c6f6e8315e53b2f40f4f6eca9a889ec3b9)

* [OCPBUGS-77345](https://issues.redhat.com/browse/OCPBUGS-77345): validate snapshot before destructive operations in cluster-restore-tnf.sh [#1626](https://github.com/openshift/cluster-etcd-operator/pull/1626)
* [OCPEDGE-2116](https://issues.redhat.com/browse/OCPEDGE-2116): feat: support MAC-address based fencing credentials lookup [#1600](https://github.com/openshift/cluster-etcd-operator/pull/1600)
* [OCPBUGS-83332](https://issues.redhat.com/browse/OCPBUGS-83332): fix cluster-restore-tnf.sh for FQDN hostnames [#1622](https://github.com/openshift/cluster-etcd-operator/pull/1622)
* NO-JIRA: Fixed spelling in files and file names [#1624](https://github.com/openshift/cluster-etcd-operator/pull/1624)
* [OCPEDGE-2604](https://issues.redhat.com/browse/OCPEDGE-2604), [OCPEDGE-2605](https://issues.redhat.com/browse/OCPEDGE-2605): feat: add update-fencing-credentials.sh script for TNF fencing credentials rotation [#1611](https://github.com/openshift/cluster-etcd-operator/pull/1611)
* [CNTRLPLANE-3392](https://issues.redhat.com/browse/CNTRLPLANE-3392): Migrating etcd otp cases to ote [#1612](https://github.com/openshift/cluster-etcd-operator/pull/1612)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/487cd008afc1ee7cce21300091c201d29cefd0d7...2abd78c6f6e8315e53b2f40f4f6eca9a889ec3b9)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/aee833aab65ab5a5aa29a04ca9a55bfb0c3e4fe3)

* [OCPBUGS-73768](https://issues.redhat.com/browse/OCPBUGS-73768): bugfix: podtemplatespec: update topology spread constraints [#1347](https://github.com/openshift/cluster-image-registry-operator/pull/1347)
* NO-JIRA: fix flaky TestGlobalTLSCopy unit test [#1341](https://github.com/openshift/cluster-image-registry-operator/pull/1341)
* [OCPBUGS-84725](https://issues.redhat.com/browse/OCPBUGS-84725): Fix stale config cache causing incorrect deployment [#1329](https://github.com/openshift/cluster-image-registry-operator/pull/1329)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/a48d45f263abb970124aa1ac1213d68559c9bff1...aee833aab65ab5a5aa29a04ca9a55bfb0c3e4fe3)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/e1c32f87fc8d0f0c197068c398c6417d2c6e8b09)

* [OCPBUGS-87205](https://issues.redhat.com/browse/OCPBUGS-87205): Add configuration override for X-SSL strip [#1465](https://github.com/openshift/cluster-ingress-operator/pull/1465)
* [NE-2692](https://issues.redhat.com/browse/NE-2692): Replace iptables with nftables in TestConnectTimeout e2e test [#1443](https://github.com/openshift/cluster-ingress-operator/pull/1443)
* [OCPBUGS-36723](https://issues.redhat.com/browse/OCPBUGS-36723): Add missing include annotations to IBM Cloud and PowerVS ingress CredentialsRequests [#1457](https://github.com/openshift/cluster-ingress-operator/pull/1457)
* [NE-2723](https://issues.redhat.com/browse/NE-2723): Migrate to aws-sdk-go-v2 [#1445](https://github.com/openshift/cluster-ingress-operator/pull/1445)
* [OCPBUGS-85679](https://issues.redhat.com/browse/OCPBUGS-85679): Improve e2e tests reliability [#1434](https://github.com/openshift/cluster-ingress-operator/pull/1434)
* [OCPBUGS-85676](https://issues.redhat.com/browse/OCPBUGS-85676): Harden CRD permission RBAC in operator ClusterRole [#1454](https://github.com/openshift/cluster-ingress-operator/pull/1454)
* [OCPBUGS-74497](https://issues.redhat.com/browse/OCPBUGS-74497): Add UserAgent to Azure SDK client telemetry options [#1400](https://github.com/openshift/cluster-ingress-operator/pull/1400)
* [OCPBUGS-85690](https://issues.redhat.com/browse/OCPBUGS-85690): Add referencegrants and backendtlspolicies to Gateway API RBAC [#1453](https://github.com/openshift/cluster-ingress-operator/pull/1453)
* [OCPBUGS-84491](https://issues.redhat.com/browse/OCPBUGS-84491): Set terminationMessagePolicy on gateway proxy containers [#1428](https://github.com/openshift/cluster-ingress-operator/pull/1428)
* [OCPBUGS-83923](https://issues.redhat.com/browse/OCPBUGS-83923): Update grpc-go and x/net [#1447](https://github.com/openshift/cluster-ingress-operator/pull/1447)
* [NE-2662](https://issues.redhat.com/browse/NE-2662): use AlwaysAllow UnhealthyPodEvictionPolicy option in PDBs [#1431](https://github.com/openshift/cluster-ingress-operator/pull/1431)
* [OCPBUGS-80966](https://issues.redhat.com/browse/OCPBUGS-80966): Fix malformed PEM bundle when tls.crt lacks trailing newline [#1405](https://github.com/openshift/cluster-ingress-operator/pull/1405)
* [OCPBUGS-84773](https://issues.redhat.com/browse/OCPBUGS-84773): Allow host network connections to the ingress canary [#1430](https://github.com/openshift/cluster-ingress-operator/pull/1430)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/df64b34df475cd58b0342dd617c29a9180ea9e5e...e1c32f87fc8d0f0c197068c398c6417d2c6e8b09)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/a61282875d032c4b8cc7ea5567830942583ec378)

* [OCPBUGS-86699](https://issues.redhat.com/browse/OCPBUGS-86699): Fix kube-apiserver-to-kubelet-signer refresh interval [#2174](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2174)
* NO-JIRA: Automatic agentic rebase: Update library-go to 0469313 [#2184](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2184)
* [CNTRLPLANE-3226](https://issues.redhat.com/browse/CNTRLPLANE-3226): switch to real Vault KMS plugin in CI [#2180](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2180)
* [CNTRLPLANE-3226](https://issues.redhat.com/browse/CNTRLPLANE-3226): bump library-go to get KMS plugin credentials [#2169](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2169)
* NO-JIRA: Automatic agentic rebase: Update library-go to d8750ed [#2177](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2177)
* NO-JIRA: Automatic agentic rebase: Update library-go to 0cf249e [#2176](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2176)
* NO-JIRA: Bump latest libray-go changes [#2173](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2173)
* NO-JIRA: remove old mock plugin deployment [#2168](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2168)
* NO-JIRA: kms: use DefaultFakeVaultEncryptionProvider to ensure AppRole secret setup [#2167](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2167)
* [OCPBUGS-86057](https://issues.redhat.com/browse/OCPBUGS-86057): render: fall back to Authentication CR [#2166](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2166)
* [CNTRLPLANE-3236](https://issues.redhat.com/browse/CNTRLPLANE-3236): support deploying Vault mock KMS plugin [#2146](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2146)
* NO-JIRA: Add KMS dummy case [#2161](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2161)
* NO-JIRA: Bump latest library-go changes [#2160](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2160)
* [CNTRLPLANE-3238](https://issues.redhat.com/browse/CNTRLPLANE-3238): Add New kms suite [#2156](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2156)
* [CNTRLPLANE-3237](https://issues.redhat.com/browse/CNTRLPLANE-3237): Bump library-go and sync plugin changes [#2155](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2155)
* [CNTRLPLANE-3237](https://issues.redhat.com/browse/CNTRLPLANE-3237): pull https://github.com/openshift/library-go/pull/2220 [#2150](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2150)
* [OCPSTRAT-3036](https://issues.redhat.com/browse/OCPSTRAT-3036): Temporarily extend MutatingAdmissionPolicy runtime-config range to &lt;1.37.0 [#2148](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2148)
* [CNTRLPLANE-3347](https://issues.redhat.com/browse/CNTRLPLANE-3347): Migrate testKMSEncryptionOnOff to ote [#2127](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2127)
* [OCPBUGS-78016](https://issues.redhat.com/browse/OCPBUGS-78016): Use SkipInClusterAuthenticationLookup in check-endpoints [#2113](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2113)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/9b45cbafcea23be9c63e01947506495d030666d0...a61282875d032c4b8cc7ea5567830942583ec378)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/c35307f04313369c9ba4dcab3308506a3987065e)

* NO-JIRA: fix lock failure cases [#939](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/939)
* [CNTRLPLANE-3349](https://issues.redhat.com/browse/CNTRLPLANE-3349): Migrate KCM-O cases to ote [#935](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/935)
* [CNTRLPLANE-3107](https://issues.redhat.com/browse/CNTRLPLANE-3107): e2e testing automation Create network network policy test cases [#924](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/924)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/f66ec606970c59461a174d789a5cccbe231c9b32...c35307f04313369c9ba4dcab3308506a3987065e)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/d43423b583269eea8236040424609c3f108ac9c4)

* [WRKLDS-1126](https://issues.redhat.com/browse/WRKLDS-1126): e2e network policy tests [#637](https://github.com/openshift/cluster-kube-scheduler-operator/pull/637)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/a0495853f80d38e19d07b98a225e1aa0e7972ac9...d43423b583269eea8236040424609c3f108ac9c4)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/42647ceeb54e36b5f7c827302f443c10788407ec)

* [OCPBUGS-65984](https://issues.redhat.com/browse/OCPBUGS-65984): add PodDisruptionBudget for migrator deployment [#172](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/172)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/ddbad075f32f85365d8e8068a96f77ea415e0b27...42647ceeb54e36b5f7c827302f443c10788407ec)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/1ae3f157b88c167a7dbe06c36d6e55a82f7fd4f0)

* [OCPBUGS-87331](https://issues.redhat.com/browse/OCPBUGS-87331): Updating ose-cluster-machine-approver-container image to be consistent with ART for 5.0 [#306](https://github.com/openshift/cluster-machine-approver/pull/306)
* NO-JIRA: fix: use feature-gate annotation for CAPI manifests [#304](https://github.com/openshift/cluster-machine-approver/pull/304)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/077692a84f2b84185be4bf60263cfa45577b7751...1ae3f157b88c167a7dbe06c36d6e55a82f7fd4f0)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/7090835da48005b2ac7ec2fa38d9654e6f05ffe0)

* NO-ISSUE: Fix typo in KubeDeploymentReplicasMismatch alert description [#2955](https://github.com/openshift/cluster-monitoring-operator/pull/2955)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2954](https://github.com/openshift/cluster-monitoring-operator/pull/2954)
* [MON-4524](https://issues.redhat.com/browse/MON-4524): manifests: merge OpenShiftStateMetricsConfig from ClusterMonitoring CRD [#2952](https://github.com/openshift/cluster-monitoring-operator/pull/2952)
* [OCPBUGS-87267](https://issues.redhat.com/browse/OCPBUGS-87267): Updating cluster-monitoring-operator-container image to be consistent with ART for 5.0 [#2949](https://github.com/openshift/cluster-monitoring-operator/pull/2949)
* NO-ISSUE: Update golangci-lint version [#2941](https://github.com/openshift/cluster-monitoring-operator/pull/2941)
* [OCPBUGS-86989](https://issues.redhat.com/browse/OCPBUGS-86989): increase lookup interval [#2943](https://github.com/openshift/cluster-monitoring-operator/pull/2943)
* [MON-4583](https://issues.redhat.com/browse/MON-4583): adding NVIDIA H200 GPU device to accelerators configmap [#2942](https://github.com/openshift/cluster-monitoring-operator/pull/2942)
* [MON-4555](https://issues.redhat.com/browse/MON-4555): migrate federate tests to e2e suite [#2902](https://github.com/openshift/cluster-monitoring-operator/pull/2902)
* NO-ISSUE: improve logging for doc example tests [#2936](https://github.com/openshift/cluster-monitoring-operator/pull/2936)
* [MON-4526](https://issues.redhat.com/browse/MON-4526): manifests: merge ThanosQuerierConfig from ClusterMonitoring CRD [#2924](https://github.com/openshift/cluster-monitoring-operator/pull/2924)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2937](https://github.com/openshift/cluster-monitoring-operator/pull/2937)
* Update jsonnet dependencies [#2927](https://github.com/openshift/cluster-monitoring-operator/pull/2927)
* NO-ISSUE: manifests: remove unused NewConfigMapList method [#2935](https://github.com/openshift/cluster-monitoring-operator/pull/2935)
* [OCPBUGS-86352](https://issues.redhat.com/browse/OCPBUGS-86352): jsonnet: exclude ReplicationController from catch-all … [#2932](https://github.com/openshift/cluster-monitoring-operator/pull/2932)
* NO-ISSUE: chore: remove unused function [#2934](https://github.com/openshift/cluster-monitoring-operator/pull/2934)
* [MON-4525](https://issues.redhat.com/browse/MON-4525): manifests: merge TelemeterClientConfig from ClusterMonitoring CRD [#2928](https://github.com/openshift/cluster-monitoring-operator/pull/2928)
* [MON-4566](https://issues.redhat.com/browse/MON-4566): chore: add telemetry_report tool to help with telemetry change review [#2885](https://github.com/openshift/cluster-monitoring-operator/pull/2885)
* [MON-4529](https://issues.redhat.com/browse/MON-4529): manifests: merge PrometheusOperatorAdmissionWebhookConfig from ClusterMonitoring CRD [#2923](https://github.com/openshift/cluster-monitoring-operator/pull/2923)
* [OCPBUGS-85709](https://issues.redhat.com/browse/OCPBUGS-85709): fix: use numeric ports in NetworkPolicies and add enforcement e2e test [#2925](https://github.com/openshift/cluster-monitoring-operator/pull/2925)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2921](https://github.com/openshift/cluster-monitoring-operator/pull/2921)
* [OCPBUGS-83284](https://issues.redhat.com/browse/OCPBUGS-83284): validate more CMO configmap fields [#2877](https://github.com/openshift/cluster-monitoring-operator/pull/2877)
* [MON-4524](https://issues.redhat.com/browse/MON-4524): MetricsServerConfig resources merge [#2907](https://github.com/openshift/cluster-monitoring-operator/pull/2907)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2918](https://github.com/openshift/cluster-monitoring-operator/pull/2918)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/999c422e9dc95e42f3f55d0142c8fd3deb985772...7090835da48005b2ac7ec2fa38d9654e6f05ffe0)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/7d4c17ac28ac25d47be68694956a693c15b80939)

* [CORENET-7154](https://issues.redhat.com/browse/CORENET-7154): Fix debounce timer for OperatorConfig level being incorrectly cleared [#3011](https://github.com/openshift/cluster-network-operator/pull/3011)
* NO-JIRA: Remove --enable-interconnect flag from OVN-K manifests [#3008](https://github.com/openshift/cluster-network-operator/pull/3008)
* [OCPBUGS-83863](https://issues.redhat.com/browse/OCPBUGS-83863): Remove version-specific CNI binary copy logic [#2967](https://github.com/openshift/cluster-network-operator/pull/2967)
* [OCPBUGS-84519](https://issues.redhat.com/browse/OCPBUGS-84519): Add terminationMessagePolicy to missing ovn-kubernetes containers [#3004](https://github.com/openshift/cluster-network-operator/pull/3004)
* [NVIDIA-596](https://issues.redhat.com/browse/NVIDIA-596): Enable dpu healthcheck [#2941](https://github.com/openshift/cluster-network-operator/pull/2941)
* [TRT-2657](https://issues.redhat.com/browse/TRT-2657): Revert "add remaining CNO NetworkPolicies" (#2959) [#2999](https://github.com/openshift/cluster-network-operator/pull/2999)
* [OCPBUGS-83800](https://issues.redhat.com/browse/OCPBUGS-83800): add remaining CNO NetworkPolicies [#2959](https://github.com/openshift/cluster-network-operator/pull/2959)
* [NVIDIA-554](https://issues.redhat.com/browse/NVIDIA-554): DPU-host mode: use ConfigMap for OVN feature enablement instead of per-node script gating [#2944](https://github.com/openshift/cluster-network-operator/pull/2944)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/b1101d16e850319c488a47cb5c756402075900b8...7d4c17ac28ac25d47be68694956a693c15b80939)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/0743c93ce6cf359045e69e5e561d854871388535)

* [OCPBUGS-87293](https://issues.redhat.com/browse/OCPBUGS-87293): Updating cluster-node-tuning-operator-container image to be consistent with ART for 5.0 [#1540](https://github.com/openshift/cluster-node-tuning-operator/pull/1540)
* [OCPBUGS-86541](https://issues.redhat.com/browse/OCPBUGS-86541): Enable timer migrations for all use-cases [#1534](https://github.com/openshift/cluster-node-tuning-operator/pull/1534)
* [OCPBUGS-87132](https://issues.redhat.com/browse/OCPBUGS-87132): E2E: Remove ovs-vswitchd from platform services [#1526](https://github.com/openshift/cluster-node-tuning-operator/pull/1526)
* [OCPBUGS-86803](https://issues.redhat.com/browse/OCPBUGS-86803): e2e: Remove unnecessary len(numa) &lt; 2 skip gates [#1528](https://github.com/openshift/cluster-node-tuning-operator/pull/1528)
* NO-JIRA: Bump github.com/moby/spdystream from v0.5.0 to v0.5.1 [#1527](https://github.com/openshift/cluster-node-tuning-operator/pull/1527)
* [OCPBUGS-86480](https://issues.redhat.com/browse/OCPBUGS-86480): E2E:  Refactor OVS affinity tests into shared helpers and add new workload-partitioning and control-plane reboot test cases. [#1509](https://github.com/openshift/cluster-node-tuning-operator/pull/1509)
* [OCPBUGS-83865](https://issues.redhat.com/browse/OCPBUGS-83865): Revert stalld backend to sched_debug [#1515](https://github.com/openshift/cluster-node-tuning-operator/pull/1515)
* NO-JIRA: E2E: remove obsolete ContainerRuntimeConfig runtime-switch test [#1510](https://github.com/openshift/cluster-node-tuning-operator/pull/1510)
* [OCPBUGS-80952](https://issues.redhat.com/browse/OCPBUGS-80952): perf: latency: compute memory resources dynamically [#1517](https://github.com/openshift/cluster-node-tuning-operator/pull/1517)
* [OCPBUGS-62277](https://issues.redhat.com/browse/OCPBUGS-62277): Requeue PerformanceStatus update when status write fails [#1495](https://github.com/openshift/cluster-node-tuning-operator/pull/1495)
* NO-JIRA: ote: embed extended testdata in cluster-node-tuning-operator-test-ext binary [#1512](https://github.com/openshift/cluster-node-tuning-operator/pull/1512)
* [TRT-2659](https://issues.redhat.com/browse/TRT-2659): Revert #1499 "NO-JIRA: ote: embed extended testdata in cluster-node-tuning-operator-test-ext binary" [#1511](https://github.com/openshift/cluster-node-tuning-operator/pull/1511)
* NO-JIRA: e2e: fix tuned deferred tests on Hypershift [#1494](https://github.com/openshift/cluster-node-tuning-operator/pull/1494)
* NO-JIRA: test/extended: scope oc process to NTO namespace [#1508](https://github.com/openshift/cluster-node-tuning-operator/pull/1508)
* NO-JIRA: ote: embed extended testdata in cluster-node-tuning-operator-test-ext binary [#1499](https://github.com/openshift/cluster-node-tuning-operator/pull/1499)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/38959063cda97728c8a6cac57bf469a5b65f3574...0743c93ce6cf359045e69e5e561d854871388535)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/4efbda8c0a649ecf3338ae5a7faa79a7665eef9d)

* [OCPBUGS-87296](https://issues.redhat.com/browse/OCPBUGS-87296): Updating ose-cluster-olm-operator-container image to be consistent with ART for 5.0 [#212](https://github.com/openshift/cluster-olm-operator/pull/212)
* [OPRUN-4640](https://issues.redhat.com/browse/OPRUN-4640): Update to golang 1.26.3 and openshift-4.23 builders [#211](https://github.com/openshift/cluster-olm-operator/pull/211)
* [OPRUN-4627](https://issues.redhat.com/browse/OPRUN-4627): override catalog tag to 4.x when RELEASE_VERSION is 4.x and catalogd.yaml pins v5.0 [#210](https://github.com/openshift/cluster-olm-operator/pull/210)
* [OPRUN-4599](https://issues.redhat.com/browse/OPRUN-4599): dynamically resolve catalog image tag from OCP release version [#203](https://github.com/openshift/cluster-olm-operator/pull/203)
* [OCPBUGS-62517](https://issues.redhat.com/browse/OCPBUGS-62517): Scale to replicas=2 and enable PDB on HighlyAvailable topology [#202](https://github.com/openshift/cluster-olm-operator/pull/202)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/d131450b2645623089b26353a309015c95c8871c...4efbda8c0a649ecf3338ae5a7faa79a7665eef9d)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/98775a10673342e09ed518a29cae15288624a522)

* NO-JIRA: Automatic agentic rebase: Update library-go to 0469313 [#707](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/707)
* [CNTRLPLANE-3226](https://issues.redhat.com/browse/CNTRLPLANE-3226): switch to real Vault KMS plugin in CI [#704](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/704)
* [CNTRLPLANE-3226](https://issues.redhat.com/browse/CNTRLPLANE-3226): bump library-go to get KMS plugin credentials [#699](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/699)
* [CNTRLPLANE-3364](https://issues.redhat.com/browse/CNTRLPLANE-3364): remove old go std tests [#703](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/703)
* NO-JIRA: Automatic agentic rebase: Update library-go to d8750ed [#702](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/702)
* NO-JIRA: Automatic agentic rebase: Update library-go to 0cf249e [#701](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/701)
* NO-JIRA: bump latest library-go changes [#700](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/700)
* NO-jIRA: Remove old mock plugin deployment [#698](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/698)
* NO-JIRA: kms: use DefaultFakeVaultEncryptionProvider to ensure AppRole secre setup [#697](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/697)
* [CNTRLPLANE-3236](https://issues.redhat.com/browse/CNTRLPLANE-3236): support deploying Vault mock KMS plugin [#693](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/693)
* NO-JIRA: Bump latest library-go changes [#692](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/692)
* [CNTRLPLANE-3364](https://issues.redhat.com/browse/CNTRLPLANE-3364): add the kms suite and migrate the kms tests of oas-o to ote [#690](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/690)
* [CNTRLPLANE-3237](https://issues.redhat.com/browse/CNTRLPLANE-3237): Bump library-go and sync encryption tests with APIServerEncryption struct change [#689](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/689)
* NO-JIRA: Bump latest library-go changes [#688](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/688)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/68ccb3c86e529df04da3dd68a78cdde5f5ea58bd...98775a10673342e09ed518a29cae15288624a522)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/34f95b07f4afbc47558e54e4fa2710fd692e615e)

* [CNTRLPLANE-2907](https://issues.redhat.com/browse/CNTRLPLANE-2907): e2e network policy tests [#428](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/428)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/c941a99dd2b9200c0de23606c4372d33d656a756...34f95b07f4afbc47558e54e4fa2710fd692e615e)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/1e360248ce502fb225c8a3b6ecda03c215efdce3)

* [OCPBUGS-87464](https://issues.redhat.com/browse/OCPBUGS-87464): Updating ose-cluster-storage-operator-container image to be consistent with ART for 5.0 [#706](https://github.com/openshift/cluster-storage-operator/pull/706)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/8dfdf2ef3310358f3559a5481df43b98b2294791...1e360248ce502fb225c8a3b6ecda03c215efdce3)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/18bdde92dde5a349f2e509c75107c37b609d655e)

* NO-JIRA: Add thread-safe AddSchemes() to fix concurrent map writes [#1401](https://github.com/openshift/cluster-version-operator/pull/1401)
* [OTA-1996](https://issues.redhat.com/browse/OTA-1996): Add e2e tests for TLS profile update [#1393](https://github.com/openshift/cluster-version-operator/pull/1393)
* NO-JIRA: Risk from alert e2e blocking [#1399](https://github.com/openshift/cluster-version-operator/pull/1399)
* NO-JIRA: chore: exclude e2e tests from make test unconditionally [#1321](https://github.com/openshift/cluster-version-operator/pull/1321)
* [OTA-1836](https://issues.redhat.com/browse/OTA-1836): Honor the centralized TLS configuration [#1338](https://github.com/openshift/cluster-version-operator/pull/1338)
* NO-JIRA: refactor: simplify redundant error checking conditions [#1320](https://github.com/openshift/cluster-version-operator/pull/1320)
* [OTA-1966](https://issues.redhat.com/browse/OTA-1966): Install namespace/openshift-lightspeed only when TechPreview is enabled [#1394](https://github.com/openshift/cluster-version-operator/pull/1394)
* [OTA-1966](https://issues.redhat.com/browse/OTA-1966): Manage proposals [#1382](https://github.com/openshift/cluster-version-operator/pull/1382)
* [OTA-1935](https://issues.redhat.com/browse/OTA-1935): pkg: Use risk.Source framework to feed Upgradeable [#1368](https://github.com/openshift/cluster-version-operator/pull/1368)
* [OTA-1967](https://issues.redhat.com/browse/OTA-1967): Take official CRDs from the OpenShift Lightspeed operator [#1387](https://github.com/openshift/cluster-version-operator/pull/1387)
* [MON-4477](https://issues.redhat.com/browse/MON-4477): chore: add permissions on endpointslice to Prometheus Role and use serviceDiscoveryRole: EndpointSlice in ServiceMonitors [#1305](https://github.com/openshift/cluster-version-operator/pull/1305)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/4cfd94b468732a9fff4c29afa679085fcf363e5f...18bdde92dde5a349f2e509c75107c37b609d655e)


### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/ce80869a83b55ebbdc21a5550ec5747645203bd2)

* [OCPBUGS-87510](https://issues.redhat.com/browse/OCPBUGS-87510): Updating configmap-reload-container image to be consistent with ART for 5.0 [#83](https://github.com/openshift/configmap-reload/pull/83)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/94e41c4c6a5832dfd19750173d6544784ba235ec...ce80869a83b55ebbdc21a5550ec5747645203bd2)


### [console](https://github.com/openshift/console/tree/d7aca4bf7a62e09579ee5a71609cc4833b0f4967)

* [OCPBUGS-86894](https://issues.redhat.com/browse/OCPBUGS-86894): reduce startup API calls and prioritize critical fetches [#16533](https://github.com/openshift/console/pull/16533)
* [CONSOLE-5271](https://issues.redhat.com/browse/CONSOLE-5271), [CONSOLE-5272](https://issues.redhat.com/browse/CONSOLE-5272): Add operator lifecycle metadata to installed operators table [#16428](https://github.com/openshift/console/pull/16428)
* [OCPBUGS-86338](https://issues.redhat.com/browse/OCPBUGS-86338): Bump immutable.js to v3.8.3 [#16480](https://github.com/openshift/console/pull/16480)
* [CONSOLE-5336](https://issues.redhat.com/browse/CONSOLE-5336): Add CreateContainerError filter to pod list status filters [#16559](https://github.com/openshift/console/pull/16559)
* [CONSOLE-5242](https://issues.redhat.com/browse/CONSOLE-5242): Remove shipwright-plugin Cypress integration tests [#16553](https://github.com/openshift/console/pull/16553)
* [CONSOLE-4946](https://issues.redhat.com/browse/CONSOLE-4946): Add Configuration tab to Node view [#16124](https://github.com/openshift/console/pull/16124)
* NO-JIRA: Improve cypress-migration skill [#16550](https://github.com/openshift/console/pull/16550)
* [OCPBUGS-82506](https://issues.redhat.com/browse/OCPBUGS-82506), [OCPBUGS-82507](https://issues.redhat.com/browse/OCPBUGS-82507): Re-enable OLM Cypress tests disabled for createRoot [#16531](https://github.com/openshift/console/pull/16531)
* [OCPBUGS-86564](https://issues.redhat.com/browse/OCPBUGS-86564): Use stable username hash for user-settings ConfigMap names [#16512](https://github.com/openshift/console/pull/16512)
* [OCPBUGS-86875](https://issues.redhat.com/browse/OCPBUGS-86875): Always use RHUI icons [#16528](https://github.com/openshift/console/pull/16528)
* [OCPBUGS-86755](https://issues.redhat.com/browse/OCPBUGS-86755): use a clip path instead of overlapping triangles [#16520](https://github.com/openshift/console/pull/16520)
* [CONSOLE-5037](https://issues.redhat.com/browse/CONSOLE-5037): Add knip-based dead code detection in CI [#16523](https://github.com/openshift/console/pull/16523)
* [CONSOLE-5284](https://issues.redhat.com/browse/CONSOLE-5284): Put new node inventory items behind tech-preview [#16414](https://github.com/openshift/console/pull/16414)
* [CONSOLE-5307](https://issues.redhat.com/browse/CONSOLE-5307): Remove dead code 2: electric boogaloo [#16513](https://github.com/openshift/console/pull/16513)
* NO-JIRA: Update Console 4.23 plugin SDK CHANGELOG [#16516](https://github.com/openshift/console/pull/16516)
* [CONSOLE-5091](https://issues.redhat.com/browse/CONSOLE-5091): Add bulk selection and schedulable actions to Nodes page [#16203](https://github.com/openshift/console/pull/16203)
* [CONSOLE-5296](https://issues.redhat.com/browse/CONSOLE-5296): Add non-scalable image warning when scaling workloads [#16436](https://github.com/openshift/console/pull/16436)
* [OCPBUGS-82508](https://issues.redhat.com/browse/OCPBUGS-82508), [OCPBUGS-82509](https://issues.redhat.com/browse/OCPBUGS-82509): Fix and re-enable operator e2e tests disabled for createRoot [#16517](https://github.com/openshift/console/pull/16517)
* [OCPBUGS-86614](https://issues.redhat.com/browse/OCPBUGS-86614): prep for 4.22 GA SDK publish [#16507](https://github.com/openshift/console/pull/16507)
* [CONSOLE-5308](https://issues.redhat.com/browse/CONSOLE-5308): Centralize ResizeObserver polyfill in Jest setup for unit tests [#16506](https://github.com/openshift/console/pull/16506)
* [CONSOLE-5286](https://issues.redhat.com/browse/CONSOLE-5286): Block snapshot tests via ESLint and migrate existing tests to explicit assertions [#16427](https://github.com/openshift/console/pull/16427)
* [CONSOLE-5307](https://issues.redhat.com/browse/CONSOLE-5307): Remove unused exports and dead code [#16502](https://github.com/openshift/console/pull/16502)
* NO-JIRA: Update plugin SDK core package CHANGELOG [#16496](https://github.com/openshift/console/pull/16496)
* NO-JIRA: Capitalize "Basic" in secret dropdown label [#16490](https://github.com/openshift/console/pull/16490)
* [OCPBUGS-83767](https://issues.redhat.com/browse/OCPBUGS-83767): Helm upgrade — preserve release values when changing chart version [#16364](https://github.com/openshift/console/pull/16364)
* [OCPBUGS-86491](https://issues.redhat.com/browse/OCPBUGS-86491): Fix macOS Option key in pod terminal [#16492](https://github.com/openshift/console/pull/16492)
* [CONSOLE-5293](https://issues.redhat.com/browse/CONSOLE-5293): Update Dockerfile.downloads for 4.22 and add RHEL 8/9 oc binaries [#16455](https://github.com/openshift/console/pull/16455)
* [CONSOLE-5298](https://issues.redhat.com/browse/CONSOLE-5298): enable http2 on the backend [#16471](https://github.com/openshift/console/pull/16471)
* [CONSOLE-5253](https://issues.redhat.com/browse/CONSOLE-5253): Extend Unit Tests: Console-App - Core Navigation & Orchestration [#16452](https://github.com/openshift/console/pull/16452)
* [OCPBUGS-86488](https://issues.redhat.com/browse/OCPBUGS-86488): Bump to PatternFly 6.5.1 [#16491](https://github.com/openshift/console/pull/16491)
* [CONSOLE-5244](https://issues.redhat.com/browse/CONSOLE-5244): Migrate webterminal-plugin Cypress tests to Playwright [#16461](https://github.com/openshift/console/pull/16461)
* [CONSOLE-5110](https://issues.redhat.com/browse/CONSOLE-5110): update to PatternFly 6.5.0 [#16172](https://github.com/openshift/console/pull/16172)
* [OCPBUGS-82512](https://issues.redhat.com/browse/OCPBUGS-82512): Fix knative e2e test failures caused by createRoot timing [#16289](https://github.com/openshift/console/pull/16289)
* [CONSOLE-5300](https://issues.redhat.com/browse/CONSOLE-5300): Parallelize context detection to reduce initial load time [#16477](https://github.com/openshift/console/pull/16477)
* [HELM-703](https://issues.redhat.com/browse/HELM-703): Add authentication for Helm chart URLs [#16360](https://github.com/openshift/console/pull/16360)
* [CONSOLE-5194](https://issues.redhat.com/browse/CONSOLE-5194): Audit and fix Claude Code skills for accuracy [#16316](https://github.com/openshift/console/pull/16316)
* [OCPBUGS-84876](https://issues.redhat.com/browse/OCPBUGS-84876): Remove DataViewToolbar wrapper from bottom pagination [#16479](https://github.com/openshift/console/pull/16479)
* NO-JIRA: Add `eslint-plugin-no-barrel-files` [#16476](https://github.com/openshift/console/pull/16476)
* [OCPBUGS-84214](https://issues.redhat.com/browse/OCPBUGS-84214): Fix Shipwright detail pages crashing with React error #310 [#16474](https://github.com/openshift/console/pull/16474)
* [CONSOLE-5197](https://issues.redhat.com/browse/CONSOLE-5197): Improve Playwright artifact collection and add safety checks [#16463](https://github.com/openshift/console/pull/16463)
* [OCPBUGS-71878](https://issues.redhat.com/browse/OCPBUGS-71878): Show empty state instead of 403 error for users without projects [#16464](https://github.com/openshift/console/pull/16464)
* [OCPBUGS-82505](https://issues.redhat.com/browse/OCPBUGS-82505): Re-enable add-flow-ci.feature e2e tests disabled for createRoot adoption [#16285](https://github.com/openshift/console/pull/16285)
* NO-JIRA: Update Console plugin SDK CHANGELOG files [#16465](https://github.com/openshift/console/pull/16465)
* [CONSOLE-5280](https://issues.redhat.com/browse/CONSOLE-5280): Migrate cluster-settings Cypress tests to Playwright [#16444](https://github.com/openshift/console/pull/16444)
* [OCPBUGS-81521](https://issues.redhat.com/browse/OCPBUGS-81521): Adapt dashboard Prometheus polling interval based on query response time [#16441](https://github.com/openshift/console/pull/16441)
* [CONSOLE-5245](https://issues.redhat.com/browse/CONSOLE-5245): Install and configure eslint-plugin-playwright for e2e directory [#16433](https://github.com/openshift/console/pull/16433)
* [CONSOLE-5197](https://issues.redhat.com/browse/CONSOLE-5197): Collect Playwright test artifacts for Prow CI [#16453](https://github.com/openshift/console/pull/16453)
* [OCPBUGS-85649](https://issues.redhat.com/browse/OCPBUGS-85649): bump gRPC-Go package [#16442](https://github.com/openshift/console/pull/16442)
* [OCPBUGS-82513](https://issues.redhat.com/browse/OCPBUGS-82513): Enable Topology e2e tests [#16273](https://github.com/openshift/console/pull/16273)
* [CONSOLE-5200](https://issues.redhat.com/browse/CONSOLE-5200): add qa-verify skill for automated PR visual verification [#16429](https://github.com/openshift/console/pull/16429)
* [OCPBUGS-84669](https://issues.redhat.com/browse/OCPBUGS-84669): Fix ProjectLink to update active namespace in Redux [#16430](https://github.com/openshift/console/pull/16430)
* [CONSOLE-5212](https://issues.redhat.com/browse/CONSOLE-5212): Fix ESM compatibility for Playwright e2e tests [#16445](https://github.com/openshift/console/pull/16445)
* [OCPBUGS-79521](https://issues.redhat.com/browse/OCPBUGS-79521): Restore list page text and row filter functionality [#16440](https://github.com/openshift/console/pull/16440)
* [OCPBUGS-59404](https://issues.redhat.com/browse/OCPBUGS-59404): Allow VolumeSnapshot restore when parent PVC is deleted [#16447](https://github.com/openshift/console/pull/16447)
* [OCPBUGS-83569](https://issues.redhat.com/browse/OCPBUGS-83569): [main] CVE-2026-26996 Bump minimatch library [#16301](https://github.com/openshift/console/pull/16301)
* [CONSOLE-5211](https://issues.redhat.com/browse/CONSOLE-5211): Add Cypress-to-Playwright migration skills and context [#16315](https://github.com/openshift/console/pull/16315)
* [CONSOLE-5229](https://issues.redhat.com/browse/CONSOLE-5229): Enable RTL ESLint rules in Knative tests by removing file-level no-container / no-node-access suppressions [#16405](https://github.com/openshift/console/pull/16405)
* [CONSOLE-5197](https://issues.redhat.com/browse/CONSOLE-5197): Add Playwright E2E test infrastructure for Prow/CI [#16374](https://github.com/openshift/console/pull/16374)
* [CONSOLE-5034](https://issues.redhat.com/browse/CONSOLE-5034): Migrate tile-view-page and value-from-pair to TypeScript [#16412](https://github.com/openshift/console/pull/16412)
* [OCPBUGS-85242](https://issues.redhat.com/browse/OCPBUGS-85242): Add Suspense boundary to LazyRoutePage for plugin routes [#16409](https://github.com/openshift/console/pull/16409)
* [OCPBUGS-77952](https://issues.redhat.com/browse/OCPBUGS-77952): Fix devfile sample import by adding fallback for parent resolution failures [#16149](https://github.com/openshift/console/pull/16149)
* [OCPBUGS-70273](https://issues.redhat.com/browse/OCPBUGS-70273): Prevent binary secret data corruption when editing [#16053](https://github.com/openshift/console/pull/16053)
* [OCPBUGS-65950](https://issues.redhat.com/browse/OCPBUGS-65950): Update template whenever settings are updated [#16143](https://github.com/openshift/console/pull/16143)
* [CONSOLE-5212](https://issues.redhat.com/browse/CONSOLE-5212): Migrate Playwright setup to project dependencies [#16408](https://github.com/openshift/console/pull/16408)
* [CONSOLE-5285](https://issues.redhat.com/browse/CONSOLE-5285): remove corepack dep for build-(frontend/demos), bump yarn [#16426](https://github.com/openshift/console/pull/16426)
* [OCPBUGS-81518](https://issues.redhat.com/browse/OCPBUGS-81518): Increase Resource Dropdown visible items cap to 250. [#16398](https://github.com/openshift/console/pull/16398)
* [CONSOLE-5273](https://issues.redhat.com/browse/CONSOLE-5273): Expose `useToast` in the SDK [#16400](https://github.com/openshift/console/pull/16400)
* [OCPBUGS-59353](https://issues.redhat.com/browse/OCPBUGS-59353): Fix authentication redirect loop on repeated 401 responses [#15814](https://github.com/openshift/console/pull/15814)
* [CONSOLE-5015](https://issues.redhat.com/browse/CONSOLE-5015): Migrate NameValueEditor to TypeScript and PatternFly drag-drop [#16406](https://github.com/openshift/console/pull/16406)
* NO-JIRA: Add approvers and reviewers to helm-plugin OWNERS [#16361](https://github.com/openshift/console/pull/16361)
* [OCPBUGS-85043](https://issues.redhat.com/browse/OCPBUGS-85043): Remove `@console` imports from SDK dist [#16399](https://github.com/openshift/console/pull/16399)
* [OCPBUGS-77931](https://issues.redhat.com/browse/OCPBUGS-77931): Loosen default `img-src` CSP [#16388](https://github.com/openshift/console/pull/16388)
* [OCPBUGS-84324](https://issues.redhat.com/browse/OCPBUGS-84324): Update outdated documentation links and references [#16362](https://github.com/openshift/console/pull/16362)
* [CONSOLE-5212](https://issues.redhat.com/browse/CONSOLE-5212): Set up Playwright e2e test infrastructure [#16320](https://github.com/openshift/console/pull/16320)
* [OCPBUGS-84844](https://issues.redhat.com/browse/OCPBUGS-84844): VSphere plugin changes broke i18n translations - missing strings in locales/en/ [#16384](https://github.com/openshift/console/pull/16384)
* [OCPBUGS-80940](https://issues.redhat.com/browse/OCPBUGS-80940): Fix SDK publish workflow for Yarn Berry [#16392](https://github.com/openshift/console/pull/16392)
* [HELM-613](https://issues.redhat.com/browse/HELM-613): Reject basic auth over non-HTTPS for Helm chart repositories [#16317](https://github.com/openshift/console/pull/16317)
* And 8 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/b89d84bbad605b9b4f44fc6061313050c89d0d87...d7aca4bf7a62e09579ee5a71609cc4833b0f4967)


### [console-operator](https://github.com/openshift/console-operator/tree/658550c71d5664068572d217a58ae7bcc2eb6847)

* [CONSOLE-5298](https://issues.redhat.com/browse/CONSOLE-5298): Auto-generate throwaway TLS cert for HTTP/2 support [#1170](https://github.com/openshift/console-operator/pull/1170)
* NO-JIRA: feat: have CVO inject the centralized TLS configuration into the operator's config [#1167](https://github.com/openshift/console-operator/pull/1167)
* [OCPBUGS-74872](https://issues.redhat.com/browse/OCPBUGS-74872): Sort plugin list to make them deterministic [#1107](https://github.com/openshift/console-operator/pull/1107)
* [OCPBUGS-86117](https://issues.redhat.com/browse/OCPBUGS-86117): Add unit and e2e test coverage for cert rotation redeployment [#1160](https://github.com/openshift/console-operator/pull/1160)
* [OCPBUGS-85650](https://issues.redhat.com/browse/OCPBUGS-85650): bump gRPC-Go package [#1156](https://github.com/openshift/console-operator/pull/1156)
* [MON-4510](https://issues.redhat.com/browse/MON-4510): Migrate Prometheus targets discovering from Endpoints to EndpointSlices [#1106](https://github.com/openshift/console-operator/pull/1106)
* [OCPBUGS-85060](https://issues.redhat.com/browse/OCPBUGS-85060): feat: use 2 replicas for console on tnf [#1151](https://github.com/openshift/console-operator/pull/1151)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console-operator/compare/5ced247355e1f55a05f2e2e6a022f4427b04c5b2...658550c71d5664068572d217a58ae7bcc2eb6847)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/d6f73950658d258e0ddbf2a4ac92e13ac840158b)

* [OCPBUGS-85826](https://issues.redhat.com/browse/OCPBUGS-85826): rebase to pick up dependency updates [#237](https://github.com/openshift/containernetworking-plugins/pull/237)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/747ad66caa1109b2b490aebad01af42bd2d738f1...d6f73950658d258e0ddbf2a4ac92e13ac840158b)


### [coredns](https://github.com/openshift/coredns/tree/3c21b066c9bd86caa06f790dcd1c046667875d46)

* [OCPBUGS-83943](https://issues.redhat.com/browse/OCPBUGS-83943): Bump gRPC to v1.79.3 to resolve CVE-2026-33186 [#183](https://github.com/openshift/coredns/pull/183)
* [Full changelog](https://github.com/openshift/coredns/compare/0dded2d232dab43c107b1dab9d0d9fdfd8259622...3c21b066c9bd86caa06f790dcd1c046667875d46)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/f8bb5994f3cee8ee2bb5cca25e3e9783ad7dd57c)

* UPSTREAM-SYNC: Sync main with latest upstream (release-1.36) [#393](https://github.com/openshift/cloud-provider-openstack/pull/393)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/3e411dcd9507ad2ad63362b44f7140b1db6ed243...f8bb5994f3cee8ee2bb5cca25e3e9783ad7dd57c)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/a40a98e2027a63e2a8ddd3589ee3c5142104dbd6)

* [OCPBUGS-87515](https://issues.redhat.com/browse/OCPBUGS-87515): Updating csi-driver-nfs-container image to be consistent with ART for 5.0 [#196](https://github.com/openshift/csi-driver-nfs/pull/196)
* NO-JIRA: CVE-2026-35469: Bump github.com/moby/spdystream@v0.5.1 [#189](https://github.com/openshift/csi-driver-nfs/pull/189)
* UPSTREAM-SYNC: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main [#179](https://github.com/openshift/csi-driver-nfs/pull/179)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/8b3ee62655a066e903e94d98a3b1fa87dfbbd93e...a40a98e2027a63e2a8ddd3589ee3c5142104dbd6)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/96ebfa733c06c3398555d164c788e310908fecf6)

* [OCPBUGS-87274](https://issues.redhat.com/browse/OCPBUGS-87274): Updating csi-attacher-container image to be consistent with ART for 5.0 [#109](https://github.com/openshift/csi-external-attacher/pull/109)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/98b1f4acf9c004687ef55e9f187703768933bb56...96ebfa733c06c3398555d164c788e310908fecf6)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/fba79d329ba3e1c8bddd817e2ca14245ed905de3)

* [OCPBUGS-87526](https://issues.redhat.com/browse/OCPBUGS-87526): Updating csi-provisioner-container image to be consistent with ART for 5.0 [#137](https://github.com/openshift/csi-external-provisioner/pull/137)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/2ccbf8c35aa2e5b851116706c018ff44f0bb7d08...fba79d329ba3e1c8bddd817e2ca14245ed905de3)


### [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata/tree/42ffa2027dd0195d7bf1a31ae1eb51140fde949f)

* [OCPBUGS-87248](https://issues.redhat.com/browse/OCPBUGS-87248): Updating csi-external-snapshot-metadata-container image to be consistent with ART for 5.0 [#17](https://github.com/openshift/csi-external-snapshot-metadata/pull/17)
* [Full changelog](https://github.com/openshift/csi-external-snapshot-metadata/compare/7652318579a38838931a5be492cee3573c7c8ecf...42ffa2027dd0195d7bf1a31ae1eb51140fde949f)


### [csi-external-snapshotter, csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter/tree/9cdd51ad003d2023503189b75929a614d1e46ba0)

* [OCPBUGS-87250](https://issues.redhat.com/browse/OCPBUGS-87250): Updating ose-csi-external-snapshotter-container image to be consistent with ART for 5.0 [#217](https://github.com/openshift/csi-external-snapshotter/pull/217)
* [OCPBUGS-87466](https://issues.redhat.com/browse/OCPBUGS-87466): Updating ose-csi-snapshot-controller-container image to be consistent with ART for 5.0 [#218](https://github.com/openshift/csi-external-snapshotter/pull/218)
* NO-JIRA: Bump google.golang.org/grpc to v1.79.3 [#215](https://github.com/openshift/csi-external-snapshotter/pull/215)
* [OCPBUGS-77492](https://issues.redhat.com/browse/OCPBUGS-77492): UPSTREAM: 1392: Fix VolumeSnapshotContent deletion [#207](https://github.com/openshift/csi-external-snapshotter/pull/207)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/d1bc3ffaa9759c13a06c2ec61c541342e71bd109...9cdd51ad003d2023503189b75929a614d1e46ba0)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/f649d2c76f2484b73c70007801eb81ab4be63635)

* [OCPBUGS-87448](https://issues.redhat.com/browse/OCPBUGS-87448): Updating csi-livenessprobe-container image to be consistent with ART for 5.0 [#93](https://github.com/openshift/csi-livenessprobe/pull/93)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/4d5e959a182b4db70dc52302bd89eebfec40d5a5...f649d2c76f2484b73c70007801eb81ab4be63635)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/f0378629c970bc897439caaa85c4aec0971c1130)

* [OCPBUGS-87513](https://issues.redhat.com/browse/OCPBUGS-87513): Updating csi-node-driver-registrar-container image to be consistent with ART for 5.0 [#106](https://github.com/openshift/csi-node-driver-registrar/pull/106)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/cf174b30fad107d354afb0f0b09030a7c97fd296...f0378629c970bc897439caaa85c4aec0971c1130)


### [docker-builder](https://github.com/openshift/builder/tree/2cda03a93696d4620703848471b3b873b0b2fa1e)

* [OCPBUGS-77610](https://issues.redhat.com/browse/OCPBUGS-77610): Updating openshift-enterprise-builder-container image to be consistent with ART for 4.22 [#503](https://github.com/openshift/builder/pull/503)
* [Full changelog](https://github.com/openshift/builder/compare/fcd4ce2d96613a27bd1ab7f53ff47225976c4ba9...2cda03a93696d4620703848471b3b873b0b2fa1e)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/b14626537079a48625feae5646caaa5e066363db)

* [OCPBUGS-87225](https://issues.redhat.com/browse/OCPBUGS-87225): Updating driver-toolkit-container image to be consistent with ART for 5.0 [#191](https://github.com/openshift/driver-toolkit/pull/191)
* [OCPBUGS-69851](https://issues.redhat.com/browse/OCPBUGS-69851): Adding support for payload multiple-stream. [#180](https://github.com/openshift/driver-toolkit/pull/180)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/7aa4007a8601bf4bb23b696f580c022f58877223...b14626537079a48625feae5646caaa5e066363db)


### [etcd](https://github.com/openshift/etcd/tree/bf6c0094589afdf6c814a28c24f8f1bb5a577816)

* [OCPBUGS-87363](https://issues.redhat.com/browse/OCPBUGS-87363): Updating ose-etcd-container image to be consistent with ART for 5.0 [#384](https://github.com/openshift/etcd/pull/384)
* [OCPBUGS-85258](https://issues.redhat.com/browse/OCPBUGS-85258): 5.0 rebase 3.6.11 [#375](https://github.com/openshift/etcd/pull/375)
* [OCPBUGS-82495](https://issues.redhat.com/browse/OCPBUGS-82495): 5.0/4.23 rebase 3.6.10 [#368](https://github.com/openshift/etcd/pull/368)
* [Full changelog](https://github.com/openshift/etcd/compare/d8d67b8ce849f816d6d23c904098336632e2348f...bf6c0094589afdf6c814a28c24f8f1bb5a577816)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/808c2a2d59dc0584d31484fe49085ba1de7bed74)

* [OCPBUGS-85551](https://issues.redhat.com/browse/OCPBUGS-85551), [OCPBUGS-85552](https://issues.redhat.com/browse/OCPBUGS-85552): Upgrade spdystream and grpc to fix CVEs [#115](https://github.com/openshift/cloud-provider-gcp/pull/115)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/0549c6032a279580f85467b8681dcf04b1f2959b...808c2a2d59dc0584d31484fe49085ba1de7bed74)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/ffbf9c2a410aa425c29c4628fa250d2e949b6876)

* [OCPBUGS-87462](https://issues.redhat.com/browse/OCPBUGS-87462): Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART for 5.0 [#298](https://github.com/openshift/cluster-api-provider-gcp/pull/298)
* [OCPBUGS-53005](https://issues.redhat.com/browse/OCPBUGS-53005): Remove references to master branch [#297](https://github.com/openshift/cluster-api-provider-gcp/pull/297)
* UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.12.0 (b9b055d) into master [#295](https://github.com/openshift/cluster-api-provider-gcp/pull/295)
* [OCPBUGS-85101](https://issues.redhat.com/browse/OCPBUGS-85101): Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.11.2 (14609a0) into master [#273](https://github.com/openshift/cluster-api-provider-gcp/pull/273)
* NO-JIRA: manifests-gen: scope provider webhooks to capi namespace [#292](https://github.com/openshift/cluster-api-provider-gcp/pull/292)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/a6d791565d3be23246efac6aa3294347004d6911...ffbf9c2a410aa425c29c4628fa250d2e949b6876)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/af29978573161a98d41f1baae67d05da7398a646)

* [OCPBUGS-87524](https://issues.redhat.com/browse/OCPBUGS-87524): Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 5.0 [#170](https://github.com/openshift/machine-api-provider-gcp/pull/170)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/065e2b608a027ba47fce02aaabb986e6c650e6d6...af29978573161a98d41f1baae67d05da7398a646)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/3b9e6d19109ebfafa13f638f469071027f82b744)

* [OCPBUGS-87399](https://issues.redhat.com/browse/OCPBUGS-87399): Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 5.0 [#123](https://github.com/openshift/gcp-pd-csi-driver/pull/123)
* UPSTREAM: 2297: OCPBUGS-83423: Bump google.golang.org/grpc to v1.79.3 [#121](https://github.com/openshift/gcp-pd-csi-driver/pull/121)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/2ba117405ff1cee765d42491f5863b06a1c9a2da...3b9e6d19109ebfafa13f638f469071027f82b744)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/55f736869c0905eedd6a0f85dc7b182d27d39c3e)

* [OCPBUGS-87867](https://issues.redhat.com/browse/OCPBUGS-87867): [5.0] VolumeSnapshot snapshot-c9v52 is not ready within 5m0s… [#192](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/192)
* NO-JIRA: Bump google.golang.org/grpc to v1.79.3 to address CVE-2026-33186 [#182](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/182)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/f2427fae9f2115a920a5d8cf8c645afa3ff827d9...55f736869c0905eedd6a0f85dc7b182d27d39c3e)


### [haproxy-router](https://github.com/openshift/router/tree/808b0001233b4c084694244f25cd53c3808c4e81)

* [OCPBUGS-87205](https://issues.redhat.com/browse/OCPBUGS-87205): Strip X-SSL-Client-* headers for plain HTTP [#787](https://github.com/openshift/router/pull/787)
* [OCPBUGS-87208](https://issues.redhat.com/browse/OCPBUGS-87208): Adding escapeHAProxySingleQuotes for sanitize [#785](https://github.com/openshift/router/pull/785)
* [NE-2572](https://issues.redhat.com/browse/NE-2572): use add/del haproxy api calls [#763](https://github.com/openshift/router/pull/763)
* [OCPBUGS-86168](https://issues.redhat.com/browse/OCPBUGS-86168): Bump google.golang.org/grpc to v1.79.3 [#777](https://github.com/openshift/router/pull/777)
* Reapply "OCPBUGS-55506: Prevent startup failures due to name resolution" [#677](https://github.com/openshift/router/pull/677)
* [OCPBUGS-77263](https://issues.redhat.com/browse/OCPBUGS-77263): create self-signed crt if failing to read default [#740](https://github.com/openshift/router/pull/740)
* [Full changelog](https://github.com/openshift/router/compare/e12bd0931f8011ddb390abc096940bb05a8ed888...808b0001233b4c084694244f25cd53c3808c4e81)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/d8d517e6bbe7cf7359026cac26bb96ea45e18806)

* [OCPBUGS-84961](https://issues.redhat.com/browse/OCPBUGS-84961): add kubernetes/conformance umbrella suite [#2682](https://github.com/openshift/kubernetes/pull/2682)
* [OCPBUGS-85410](https://issues.redhat.com/browse/OCPBUGS-85410): Fix performance related issues when selinux metrics are emitted [#2668](https://github.com/openshift/kubernetes/pull/2668)
* [OCPBUGS-86229](https://issues.redhat.com/browse/OCPBUGS-86229): apiserver: cache etcd storage monitors to avoid recreating clients on each metrics scrape [#2674](https://github.com/openshift/kubernetes/pull/2674)
* [OCPBUGS-74511](https://issues.redhat.com/browse/OCPBUGS-74511): remove RouteExternalCertificate feature gate [#2585](https://github.com/openshift/kubernetes/pull/2585)
* [OCPBUGS-77243](https://issues.redhat.com/browse/OCPBUGS-77243): test: skip private registry test [#2621](https://github.com/openshift/kubernetes/pull/2621)
* [OCPBUGS-78044](https://issues.redhat.com/browse/OCPBUGS-78044): Improve WatchList test robustness [#2622](https://github.com/openshift/kubernetes/pull/2622)
* [Full changelog](https://github.com/openshift/kubernetes/compare/5f099ccd1e8345f615d10381290909a8ca581b66...d8d517e6bbe7cf7359026cac26bb96ea45e18806)


### [hypershift](https://github.com/openshift/hypershift/tree/4755e9c941b52bb4719efe16b9102dc46e7c3bea)

* NO-JIRA: fix address-review-comments workflow for fork PRs [#8706](https://github.com/openshift/hypershift/pull/8706)
* NO-JIRA: Add gitlint to pre-commit hooks [#8701](https://github.com/openshift/hypershift/pull/8701)
* [CNTRLPLANE-3584](https://issues.redhat.com/browse/CNTRLPLANE-3584): Add kube-scheduler ServiceMonitor with CA-signed serving certs [#8489](https://github.com/openshift/hypershift/pull/8489)
* NO-JIRA: Improve AI skill quality and restructure AGENTS.md [#8690](https://github.com/openshift/hypershift/pull/8690)
* [CNTRLPLANE-3555](https://issues.redhat.com/browse/CNTRLPLANE-3555): Add ARCHITECTURE.md to repository root [#8668](https://github.com/openshift/hypershift/pull/8668)
* [OCPBUGS-84308](https://issues.redhat.com/browse/OCPBUGS-84308): fix(cpo) delete terminated MCD pods to retry in-place upgrades [#8434](https://github.com/openshift/hypershift/pull/8434)
* [OCPBUGS-87217](https://issues.redhat.com/browse/OCPBUGS-87217): fix: add CPU partitioning workload annotation to control-plane-metrics-forwarder [#8686](https://github.com/openshift/hypershift/pull/8686)
* [CNTRLPLANE-3599](https://issues.redhat.com/browse/CNTRLPLANE-3599): Remove controller-runtime v0.19.7 pin for k8s 1.36 bump [#8683](https://github.com/openshift/hypershift/pull/8683)
* [CNTRLPLANE-3550](https://issues.redhat.com/browse/CNTRLPLANE-3550): Add missing v2 test suites to Azure self-managed test matrix [#8658](https://github.com/openshift/hypershift/pull/8658)
* NO-JIRA: chore(deps): weekly dependabot consolidation [#8634](https://github.com/openshift/hypershift/pull/8634)
* NO-JIRA: test(e2e/v2): sweep AGENTS.md conformance violations [#8659](https://github.com/openshift/hypershift/pull/8659)
* [OCPBUGS-87018](https://issues.redhat.com/browse/OCPBUGS-87018): Revert conditional deletion of openshift-ingress NetworkPolicy [#8662](https://github.com/openshift/hypershift/pull/8662)
* NO-JIRA: move CONTRIBUTING.md to repo root and update CI guidance [#8329](https://github.com/openshift/hypershift/pull/8329)
* [CNTRLPLANE-3548](https://issues.redhat.com/browse/CNTRLPLANE-3548): Add v2 e2e test framework documentation [#8641](https://github.com/openshift/hypershift/pull/8641)
* [OCPBUGS-86008](https://issues.redhat.com/browse/OCPBUGS-86008): Gate Route watch on management cluster capability [#8484](https://github.com/openshift/hypershift/pull/8484)
* Revert "OCPBUGS-86774: Pin azure-cli to 2.72.0 in e2e Dockerfile" [#8652](https://github.com/openshift/hypershift/pull/8652)
* [OCPBUGS-77268](https://issues.redhat.com/browse/OCPBUGS-77268): reconcile HCP when pull secret is unavailable [#8352](https://github.com/openshift/hypershift/pull/8352)
* [GCP-298](https://issues.redhat.com/browse/GCP-298): Add GCP e2e v2 test artifacts directory structure documentation [#8446](https://github.com/openshift/hypershift/pull/8446)
* [CNTRLPLANE-2207](https://issues.redhat.com/browse/CNTRLPLANE-2207): Upgrade to CAPI 1.11 [#8594](https://github.com/openshift/hypershift/pull/8594)
* NO-JIRA: chore(ci): enforce v2 e2e AGENTS.md standards via CodeRabbit [#8660](https://github.com/openshift/hypershift/pull/8660)
* [CNTRLPLANE-1357](https://issues.redhat.com/browse/CNTRLPLANE-1357): add KMSv2 secret encryption e2e v2 test for Self Managed Azure [#8653](https://github.com/openshift/hypershift/pull/8653)
* [CNTRLPLANE-3167](https://issues.redhat.com/browse/CNTRLPLANE-3167): Auto-detect credential type for HCPEtcdBackup [#8368](https://github.com/openshift/hypershift/pull/8368)
* NO-JIRA: Fix Azure private/topology CEL validation rules [#8490](https://github.com/openshift/hypershift/pull/8490)
* [GCP-688](https://issues.redhat.com/browse/GCP-688): Port remaining v1 TestCreateCluster gaps to v2 e2e [#8590](https://github.com/openshift/hypershift/pull/8590)
* NO-JIRA: feat(skills): add validate-pr-override-images skill [#8616](https://github.com/openshift/hypershift/pull/8616)
* [OCPSTRAT-1677](https://issues.redhat.com/browse/OCPSTRAT-1677): Add Spot instances documentation [#8485](https://github.com/openshift/hypershift/pull/8485)
* [OCPBUGS-43444](https://issues.redhat.com/browse/OCPBUGS-43444): Allow kubevirt-csi storageclass default to be changed by user [#8597](https://github.com/openshift/hypershift/pull/8597)
* [CNTRLPLANE-3510](https://issues.redhat.com/browse/CNTRLPLANE-3510): Enable additional golangci-lint linters [#8567](https://github.com/openshift/hypershift/pull/8567)
* [OCPBUGS-86306](https://issues.redhat.com/browse/OCPBUGS-86306): Stop controllers fighting over HCP status [#8562](https://github.com/openshift/hypershift/pull/8562)
* [CNTRLPLANE-3535](https://issues.redhat.com/browse/CNTRLPLANE-3535): Add codecov carryforward flags to stabilize project coverage checks [#8642](https://github.com/openshift/hypershift/pull/8642)
* [OCPSTRAT-1677](https://issues.redhat.com/browse/OCPSTRAT-1677): fix(cpo): increase NTH default workers from 10 to 20 [#8500](https://github.com/openshift/hypershift/pull/8500)
* NO-JIRA: feat(ci): add skopeo and gh CLI to ARC runner image [#8627](https://github.com/openshift/hypershift/pull/8627)
* [OCPBUGS-85584](https://issues.redhat.com/browse/OCPBUGS-85584): Fix stale api.openshift.com labels on HostedControlPlane [#8507](https://github.com/openshift/hypershift/pull/8507)
* NO-JIRA: ci(runner): update base image to actions-runner v2.334.0 [#8643](https://github.com/openshift/hypershift/pull/8643)
* [CNTRLPLANE-3533](https://issues.redhat.com/browse/CNTRLPLANE-3533): Add Dockerfiles to codecov ignore list [#8640](https://github.com/openshift/hypershift/pull/8640)
* [OCPBUGS-86774](https://issues.redhat.com/browse/OCPBUGS-86774): Pin azure-cli to 2.72.0 in e2e Dockerfile [#8638](https://github.com/openshift/hypershift/pull/8638)
* NO-JIRA: ci(deps): bump google-github-actions/auth from 2.1.13 to 3.0.0 [#8630](https://github.com/openshift/hypershift/pull/8630)
* NO-JIRA: ci(deps): bump actions/checkout from 4.3.1 to 6.0.2 [#8631](https://github.com/openshift/hypershift/pull/8631)
* NO-JIRA: Fix HCCO deployment location in AGENTS.md [#8635](https://github.com/openshift/hypershift/pull/8635)
* [CNTRLPLANE-3534](https://issues.redhat.com/browse/CNTRLPLANE-3534): ci: add --allowedTools to address-review-comments workflow [#8639](https://github.com/openshift/hypershift/pull/8639)
* [OCPBUGS-86238](https://issues.redhat.com/browse/OCPBUGS-86238): add CPO overrides for ARO swift-nic resource limits [#8610](https://github.com/openshift/hypershift/pull/8610)
* [OCPBUGS-81544](https://issues.redhat.com/browse/OCPBUGS-81544): requeue when AutoNodeEnabled is progressing [#8497](https://github.com/openshift/hypershift/pull/8497)
* NO-JIRA: add address-review-comments workflow [#8621](https://github.com/openshift/hypershift/pull/8621)
* NO-JIRA: De-duplicate Azure self-managed documentation [#8566](https://github.com/openshift/hypershift/pull/8566)
* [CNTRLPLANE-3531](https://issues.redhat.com/browse/CNTRLPLANE-3531): Remove EFS-backed Go build cache from CI runners [#8637](https://github.com/openshift/hypershift/pull/8637)
* [CNTRLPLANE-3329](https://issues.redhat.com/browse/CNTRLPLANE-3329): Rebuild runner image on gocacheprog and pipeline changes [#8633](https://github.com/openshift/hypershift/pull/8633)
* [CNTRLPLANE-3329](https://issues.redhat.com/browse/CNTRLPLANE-3329): Fix gocacheprog cache corruption with atomic writes [#8624](https://github.com/openshift/hypershift/pull/8624)
* NO-JIRA: fix(karpenter): start node cleanup when CAPI Cluster is deleted [#8589](https://github.com/openshift/hypershift/pull/8589)
* [OCPBUGS-85151](https://issues.redhat.com/browse/OCPBUGS-85151): Re-enable serviceaccount-pull-secrets controller when registry managementState changes from Removed [#8522](https://github.com/openshift/hypershift/pull/8522)
* [OCPBUGS-85243](https://issues.redhat.com/browse/OCPBUGS-85243): Set aws-load-balancer-scheme on public HCP router service [#8458](https://github.com/openshift/hypershift/pull/8458)
* [OCPBUGS-38898](https://issues.redhat.com/browse/OCPBUGS-38898): fix kubeadmin password hash reconciliation to compare password against stored hash [#8358](https://github.com/openshift/hypershift/pull/8358)
* [OCPBUGS-84303](https://issues.redhat.com/browse/OCPBUGS-84303): fix(api): add IPv6 OVN join subnet config to prevent dual-stack routing collision [#8421](https://github.com/openshift/hypershift/pull/8421)
* NO-JIRA: clone ai-helpers into workspace for plugin file access [#8620](https://github.com/openshift/hypershift/pull/8620)
* NO-JIRA: bump claude max-turns to 50 in WIF test [#8619](https://github.com/openshift/hypershift/pull/8619)
* NO-JIRA: test ai-sbom plugin and verify plugin loading [#8614](https://github.com/openshift/hypershift/pull/8614)
* [CNTRLPLANE-3329](https://issues.redhat.com/browse/CNTRLPLANE-3329): Use GOCACHEPROG for zero-copy EFS build cache [#8576](https://github.com/openshift/hypershift/pull/8576)
* NO-JIRA: replace container image with workflow-step plugin setup [#8611](https://github.com/openshift/hypershift/pull/8611)
* NO-JIRA: use ai-helpers container image for Claude WIF test [#8609](https://github.com/openshift/hypershift/pull/8609)
* NO-JIRA: fix Claude WIF test workflow HOME for ARC runners [#8600](https://github.com/openshift/hypershift/pull/8600)
* NO-JIRA: fix Claude WIF test workflow for ARC runners [#8598](https://github.com/openshift/hypershift/pull/8598)
* NO-JIRA: test Claude Code WIF auth in GitHub Actions [#8588](https://github.com/openshift/hypershift/pull/8588)
* [OCPBUGS-86296](https://issues.redhat.com/browse/OCPBUGS-86296): Propagate management cluster proxy env vars to konnectivity sidecar [#8569](https://github.com/openshift/hypershift/pull/8569)
* [OCPBUGS-65730](https://issues.redhat.com/browse/OCPBUGS-65730): add --tls-cipher-suites to oauth-apiserver deployment [#8554](https://github.com/openshift/hypershift/pull/8554)
* [OCPBUGS-85351](https://issues.redhat.com/browse/OCPBUGS-85351): Revert "fix(azure): prevent externalDNSDomain from shadowing cluster apps domain" [#8585](https://github.com/openshift/hypershift/pull/8585)
* [OCPBUGS-84955](https://issues.redhat.com/browse/OCPBUGS-84955): bootstrap serving certs at hypershift operator startup [#8545](https://github.com/openshift/hypershift/pull/8545)
* ci(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 [#8574](https://github.com/openshift/hypershift/pull/8574)
* [CNTRLPLANE-3040](https://issues.redhat.com/browse/CNTRLPLANE-3040): add regression tests for CAS pause/unpause replica clamping [#8262](https://github.com/openshift/hypershift/pull/8262)
* NO-JIRA: chore(deps): weekly dependabot consolidation [#8578](https://github.com/openshift/hypershift/pull/8578)
* [GCP-688](https://issues.redhat.com/browse/GCP-688): Port v1 E2E validations to envtest, unit tests, and v2 Ginkgo specs [#8511](https://github.com/openshift/hypershift/pull/8511)
* NO-JIRA: fix(e2e): lower pull secret in-place propagation test gate to 4.22 [#8553](https://github.com/openshift/hypershift/pull/8553)
* [OCPBUGS-86075](https://issues.redhat.com/browse/OCPBUGS-86075): docs(nodepool): fixing incomplete stuck node drain documentation in section Scaling To Zero [#8544](https://github.com/openshift/hypershift/pull/8544)
* [CNTRLPLANE-3222](https://issues.redhat.com/browse/CNTRLPLANE-3222): Port v1 lifecycle tests to v2 Ginkgo framework [#8527](https://github.com/openshift/hypershift/pull/8527)
* [AUTOSCALE-692](https://issues.redhat.com/browse/AUTOSCALE-692): remove default debug log level from karpenter container [#8561](https://github.com/openshift/hypershift/pull/8561)
* [OCPBUGS-86310](https://issues.redhat.com/browse/OCPBUGS-86310): Handle CA bundle aggregation delay by requeuing revocation [#8563](https://github.com/openshift/hypershift/pull/8563)
* [CNTRLPLANE-3329](https://issues.redhat.com/browse/CNTRLPLANE-3329): Use fuse-overlayfs for build cache instead of full copy [#8568](https://github.com/openshift/hypershift/pull/8568)
* NO-JIRA: fix(e2e): use public multi-arch image for ARM64 karpenter test [#8532](https://github.com/openshift/hypershift/pull/8532)
* [OCPBUGS-86238](https://issues.redhat.com/browse/OCPBUGS-86238): set limits for aro.openshift.io/swift-nic in request overrides for ARO swift [#8552](https://github.com/openshift/hypershift/pull/8552)
* [OCPBUGS-85351](https://issues.redhat.com/browse/OCPBUGS-85351): fix(azure): prevent externalDNSDomain from shadowing cluster apps domain [#8480](https://github.com/openshift/hypershift/pull/8480)
* [CNTRLPLANE-3371](https://issues.redhat.com/browse/CNTRLPLANE-3371): Fix AllowedCIDRs e2e test for Route-based KAS [#8469](https://github.com/openshift/hypershift/pull/8469)
* NO-JIRA: build(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 in /hack/tools [#8547](https://github.com/openshift/hypershift/pull/8547)
* NO-JIRA: Update Konflux Tekton task bundles [#8557](https://github.com/openshift/hypershift/pull/8557)
* NO-JIRA: chore(deps): weekly dependabot consolidation [#8464](https://github.com/openshift/hypershift/pull/8464)
* [CNTRLPLANE-3070](https://issues.redhat.com/browse/CNTRLPLANE-3070): Support KMS on self-managed Azure without affecting ARO HCP [#8088](https://github.com/openshift/hypershift/pull/8088)
* [OCPBUGS-59142](https://issues.redhat.com/browse/OCPBUGS-59142): fix ValidReleaseImage condition message to show minor version [#8519](https://github.com/openshift/hypershift/pull/8519)
* NO-JIRA: Add onboarding guide for new HCP team members [#8132](https://github.com/openshift/hypershift/pull/8132)
* [OCPBUGS-85011](https://issues.redhat.com/browse/OCPBUGS-85011): fix(cpo): use check-first pattern for EBS CSI operator serving cert [#8418](https://github.com/openshift/hypershift/pull/8418)
* [CNTRLPLANE-3329](https://issues.redhat.com/browse/CNTRLPLANE-3329): Extend EFS-backed build cache to lint, verify, and envtest workflows [#8495](https://github.com/openshift/hypershift/pull/8495)
* NO-JIRA: ci(deps): bump cloudflare/wrangler-action from 3.15.0 to 4.0.0 [#8524](https://github.com/openshift/hypershift/pull/8524)
* [OCPBUGS-85763](https://issues.redhat.com/browse/OCPBUGS-85763): Fix metrics-proxy deployment failure due to dots in volume names [#8530](https://github.com/openshift/hypershift/pull/8530)
* [GCP-636](https://issues.redhat.com/browse/GCP-636): feat(gcp): support for managing GCP OIDC discovery documents [#8413](https://github.com/openshift/hypershift/pull/8413)
* [OCPBUGS-84307](https://issues.redhat.com/browse/OCPBUGS-84307): Clarify --base-domain flag default behavior [#8381](https://github.com/openshift/hypershift/pull/8381)
* [AUTOSCALE-681](https://issues.redhat.com/browse/AUTOSCALE-681): various karpenter and karpenterupgrade test fixes [#8510](https://github.com/openshift/hypershift/pull/8510)
* [CNTRLPLANE-3329](https://issues.redhat.com/browse/CNTRLPLANE-3329): Replace actions/cache with EFS-backed build cache in unit tests [#8494](https://github.com/openshift/hypershift/pull/8494)
* [OCPBUGS-85577](https://issues.redhat.com/browse/OCPBUGS-85577): Update external-dns image from 1.1.0-3 to 1.2.1 [#8506](https://github.com/openshift/hypershift/pull/8506)
* [OCPBUGS-77827](https://issues.redhat.com/browse/OCPBUGS-77827): fix(api): add missing has() guards to servingCerts CEL validation rule [#8331](https://github.com/openshift/hypershift/pull/8331)
* [CNTRLPLANE-3380](https://issues.redhat.com/browse/CNTRLPLANE-3380): docs: add aws-node-termination-handler to repositories list [#8514](https://github.com/openshift/hypershift/pull/8514)
* [OCPBUGS-85580](https://issues.redhat.com/browse/OCPBUGS-85580): Fix webhook TLS failure after service-ca to self-managed cert migration [#8504](https://github.com/openshift/hypershift/pull/8504)
* build(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 in /hack/tools [#8481](https://github.com/openshift/hypershift/pull/8481)
* [OCPBUGS-85344](https://issues.redhat.com/browse/OCPBUGS-85344): Add version gates for 4.22 backward compatibility in e2e tests [#8466](https://github.com/openshift/hypershift/pull/8466)
* [AUTOSCALE-681](https://issues.redhat.com/browse/AUTOSCALE-681): remove TechPreviewNoUpgrade gate from karpenter upgrade test [#8498](https://github.com/openshift/hypershift/pull/8498)
* [CNTRLPLANE-3329](https://issues.redhat.com/browse/CNTRLPLANE-3329): Mount EFS-backed Go build cache PV on ARC runner pods [#8493](https://github.com/openshift/hypershift/pull/8493)
* NO-JIRA: docs: add repositories page listing team-owned repos [#8505](https://github.com/openshift/hypershift/pull/8505)
* [CNTRLPLANE-3329](https://issues.redhat.com/browse/CNTRLPLANE-3329): Add nightly CronJob to warm EFS-backed Go build cache [#8496](https://github.com/openshift/hypershift/pull/8496)
* [CNTRLPLANE-3324](https://issues.redhat.com/browse/CNTRLPLANE-3324): Restore non-obvious comments after gocyclo refactor [#8487](https://github.com/openshift/hypershift/pull/8487)
* [AUTOSCALE-558](https://issues.redhat.com/browse/AUTOSCALE-558): Expose KubeletConfig on OpenShiftEC2Nodeclass as structured fields + preserveunknown/overflow [#8192](https://github.com/openshift/hypershift/pull/8192)
* NO-JIRA: Fix docs deploy preview by replacing gh CLI with curl [#8488](https://github.com/openshift/hypershift/pull/8488)
* [CNTRLPLANE-2946](https://issues.redhat.com/browse/CNTRLPLANE-2946): Move AWS NLB annotation inside LoadBalancer strategy block [#7993](https://github.com/openshift/hypershift/pull/7993)
* [OCPBUGS-78539](https://issues.redhat.com/browse/OCPBUGS-78539): re-add crash toleration for dns-operator during upgrades [#8483](https://github.com/openshift/hypershift/pull/8483)
* [CNTRLPLANE-3384](https://issues.redhat.com/browse/CNTRLPLANE-3384): Remove unconditional low-quality log messages from controllers [#8428](https://github.com/openshift/hypershift/pull/8428)
* [OCPBUGS-84971](https://issues.redhat.com/browse/OCPBUGS-84971): Gate AWSDefaultSecurityGroupDeleted condition to AWS platform [#8415](https://github.com/openshift/hypershift/pull/8415)
* [CNTRLPLANE-3324](https://issues.redhat.com/browse/CNTRLPLANE-3324): Enable gocyclo linter and reduce cyclomatic complexity [#8309](https://github.com/openshift/hypershift/pull/8309)
* NO-JIRA: fix(karpenter): resolve HCP karpenter finalizer when AutoNode is disabled [#8404](https://github.com/openshift/hypershift/pull/8404)
* [OCPBUGS-62177](https://issues.redhat.com/browse/OCPBUGS-62177): verify cert revocation against all KAS pods [#8263](https://github.com/openshift/hypershift/pull/8263)
* NO-JIRA: Document CEL over webhooks policy for AI agents [#8478](https://github.com/openshift/hypershift/pull/8478)
* NO-JIRA: docs(kubevirt): add how-to for configuring VMs with JSON patches [#8473](https://github.com/openshift/hypershift/pull/8473)
* [CNTRLPLANE-1741](https://issues.redhat.com/browse/CNTRLPLANE-1741): Migrate gomaxprocs-webhook pipelines to use common-operator-build [#7122](https://github.com/openshift/hypershift/pull/7122)
* NO-JIRA: docs: update api-sme agent and api/AGENTS.md conventions [#8477](https://github.com/openshift/hypershift/pull/8477)
* [OCPBUGS-81686](https://issues.redhat.com/browse/OCPBUGS-81686): fix(authentication): use v2 auth validation for CEL and expression support. [#8246](https://github.com/openshift/hypershift/pull/8246)
* [OCPBUGS-85084](https://issues.redhat.com/browse/OCPBUGS-85084): fix(ci): use explicit lease in dependabot commit fix push [#8476](https://github.com/openshift/hypershift/pull/8476)
* [OCPBUGS-75887](https://issues.redhat.com/browse/OCPBUGS-75887): fix(inplaceupgrader): include node name in degraded upgrade error message [#8244](https://github.com/openshift/hypershift/pull/8244)
* NO-JIRA: fix(e2e): prevent agent unbinding and node reboots during backup/restore [#8356](https://github.com/openshift/hypershift/pull/8356)
* NO-JIRA: Update GHA docs for reusable workflow pattern [#8453](https://github.com/openshift/hypershift/pull/8453)
* [GCP-413](https://issues.redhat.com/browse/GCP-413): add image registry v2 e2e tests for hosted clusters [#8412](https://github.com/openshift/hypershift/pull/8412)
* NO-JIRA: docs: make CLAUDE.md a symlink to AGENTS.md across the repo [#8444](https://github.com/openshift/hypershift/pull/8444)
* [CNTRLPLANE-2778](https://issues.redhat.com/browse/CNTRLPLANE-2778): feat(tooling): overhaul pr-report skill and Python script [#7754](https://github.com/openshift/hypershift/pull/7754)
* [ACM-33601](https://issues.redhat.com/browse/ACM-33601): use the latest ubi9 nginx image [#8432](https://github.com/openshift/hypershift/pull/8432)
* [GCP-414](https://issues.redhat.com/browse/GCP-414): add image registry operational guide [#8455](https://github.com/openshift/hypershift/pull/8455)
* [OCPBUGS-84528](https://issues.redhat.com/browse/OCPBUGS-84528): clarify pull secret in-place update behavior and add CP watches [#8327](https://github.com/openshift/hypershift/pull/8327)
* [OCPBUGS-84955](https://issues.redhat.com/browse/OCPBUGS-84955): Add render-sensitive flag to `hypershift install render` [#8436](https://github.com/openshift/hypershift/pull/8436)
* [OCPBUGS-84857](https://issues.redhat.com/browse/OCPBUGS-84857): bump go builder and ubi images [#8437](https://github.com/openshift/hypershift/pull/8437)
* [GCP-410](https://issues.redhat.com/browse/GCP-410): fix(gcp): add registry SA WIF binding for image registry GCS access [#8445](https://github.com/openshift/hypershift/pull/8445)
* [CNTRLPLANE-3381](https://issues.redhat.com/browse/CNTRLPLANE-3381): CPO: Surface cloud resource deletion timeout as a status condition [#8426](https://github.com/openshift/hypershift/pull/8426)
* [OCPBUGS-85084](https://issues.redhat.com/browse/OCPBUGS-85084): fix(ci): rewrite dependabot commit messages to pass gitlint [#8435](https://github.com/openshift/hypershift/pull/8435)
* NO-JIRA: docs: detail release branch e2e config steps in branch-process guide [#8441](https://github.com/openshift/hypershift/pull/8441)
* [CNTRLPLANE-3222](https://issues.redhat.com/browse/CNTRLPLANE-3222): Migrate self-managed Azure e2e tests to v2 Ginkgo framework [#8204](https://github.com/openshift/hypershift/pull/8204)
* [GCP-412](https://issues.redhat.com/browse/GCP-412): add envtest cases for GCP imageRegistry CEL validation [#8411](https://github.com/openshift/hypershift/pull/8411)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/hypershift/compare/effd75432d795fdecd36e5f254f6da235de079d7...4755e9c941b52bb4719efe16b9102dc46e7c3bea)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/ef8fcc288d9248cd149f181e7f5c896f4a10eb3b)

* [OCPBUGS-87366](https://issues.redhat.com/browse/OCPBUGS-87366): Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART for 5.0 [#108](https://github.com/openshift/cloud-provider-ibm/pull/108)
* [OCPBUGS-83587](https://issues.redhat.com/browse/OCPBUGS-83587): bump google.golang.org grpc v1.79.3 [#106](https://github.com/openshift/cloud-provider-ibm/pull/106)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/5fbabb9090dbc92f2a4ce9a9ae601403b64c996c...ef8fcc288d9248cd149f181e7f5c896f4a10eb3b)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/f78abbb3502a875b7ddf769cf6b7c1b8e3ebba29)

* [OCPBUGS-87350](https://issues.redhat.com/browse/OCPBUGS-87350): Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART for 5.0 [#153](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/153)
* NO-JIRA: Bump gRPC library to v1.79.3 and replace golang.org/x/net/context with context [#149](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/149)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/aa40cd7e1a37e2f48f238fc8d293b0546d5d4caf...f78abbb3502a875b7ddf769cf6b7c1b8e3ebba29)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/e6d299f720a76dd25fcdc304d408f43c33a42fb6)

* [OCPBUGS-87388](https://issues.redhat.com/browse/OCPBUGS-87388): Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 5.0 [#173](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/173)
* NO-ISSUE: Bump google.golang.org/grpc to v1.79.3 [#172](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/172)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/f859eac9612d8fff52013b809840b015cee6742d...e6d299f720a76dd25fcdc304d408f43c33a42fb6)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/a26ad7ece37d9ae974d4384d6a4676ccb7666cd9)

* NO-JIRA: manifests-gen: scope provider webhooks to capi namespace [#160](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/160)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/df7d8ab6851e72e5bb1111d75ca0bf7ecc7a1647...a26ad7ece37d9ae974d4384d6a4676ccb7666cd9)


### [insights-operator](https://github.com/openshift/insights-operator/tree/c3583e22871aec1175dcc4ed2ae6edf516fb4208)

* [OCPBUGS-87289](https://issues.redhat.com/browse/OCPBUGS-87289): Updating ose-insights-operator-container image to be consistent with ART for 5.0 [#1301](https://github.com/openshift/insights-operator/pull/1301)
* [CCXDEV-15790](https://issues.redhat.com/browse/CCXDEV-15790): extractor controller [#1280](https://github.com/openshift/insights-operator/pull/1280)
* [OCPBUGS-85710](https://issues.redhat.com/browse/OCPBUGS-85710): add trusted-ca-bundle to gatherin job [#1289](https://github.com/openshift/insights-operator/pull/1289)
* [CCXDEV-16348](https://issues.redhat.com/browse/CCXDEV-16348): tls metrics [#1275](https://github.com/openshift/insights-operator/pull/1275)
* [OCPBUGS-77351](https://issues.redhat.com/browse/OCPBUGS-77351): fix: add terminationMessagePolicy to runtime extractor containers [#1286](https://github.com/openshift/insights-operator/pull/1286)
* NO-JIRA: remove BaiyangZhou from OWNERS [#1273](https://github.com/openshift/insights-operator/pull/1273)
* [OCPBUGS-85201](https://issues.redhat.com/browse/OCPBUGS-85201): Bump google.golang.org/grpc to v1.79.3 [#1288](https://github.com/openshift/insights-operator/pull/1288)
* [Full changelog](https://github.com/openshift/insights-operator/compare/7af02981d7630a742896a606a9c0b9a7b88b2acc...c3583e22871aec1175dcc4ed2ae6edf516fb4208)


### [insights-runtime-exporter, insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor/tree/ce30b4f9bc3ec867b976886a5207d36c50a396d9)

* [OCPBUGS-87370](https://issues.redhat.com/browse/OCPBUGS-87370): Updating ose-insights-runtime-exporter-container image to be consistent with ART for 5.0 [#84](https://github.com/openshift/insights-runtime-extractor/pull/84)
* [OCPBUGS-87473](https://issues.redhat.com/browse/OCPBUGS-87473): Updating ose-insights-runtime-extractor-container image to be consistent with ART for 5.0 [#85](https://github.com/openshift/insights-runtime-extractor/pull/85)
* [Full changelog](https://github.com/openshift/insights-runtime-extractor/compare/70256457b507ec09737800ee7ea022143ed6c3c2...ce30b4f9bc3ec867b976886a5207d36c50a396d9)


### [ironic](https://github.com/openshift/ironic-image/tree/aad2a040dbea4d8ad3d2abc641b9dc40150381a5)

* [OCPBUGS-44902](https://issues.redhat.com/browse/OCPBUGS-44902): Bump python packaging version and update commit hashes [#850](https://github.com/openshift/ironic-image/pull/850)
* [OCPBUGS-87478](https://issues.redhat.com/browse/OCPBUGS-87478): Updating ironic-container image to be consistent with ART for 5.0 [#851](https://github.com/openshift/ironic-image/pull/851)
* [METAL-1838](https://issues.redhat.com/browse/METAL-1838): Bump setuptools version to align with latest ironic requirements [#847](https://github.com/openshift/ironic-image/pull/847)
* [METAL-1844](https://issues.redhat.com/browse/METAL-1844): Add Slack notification to update-requirements workflow [#849](https://github.com/openshift/ironic-image/pull/849)
* [Full changelog](https://github.com/openshift/ironic-image/compare/323974b0aadc149d0dc29ca352b4be6c53b395d2...aad2a040dbea4d8ad3d2abc641b9dc40150381a5)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/a7cef6a1a98ad2ffad50fc01999d4c721dde541f)

* NO-ISSUE: Update requirements.cachito with latest ironic-python-agent [#259](https://github.com/openshift/ironic-agent-image/pull/259)
* [OCPBUGS-87357](https://issues.redhat.com/browse/OCPBUGS-87357): Updating ironic-agent-container image to be consistent with ART for 5.0 [#261](https://github.com/openshift/ironic-agent-image/pull/261)
* [METAL-1838](https://issues.redhat.com/browse/METAL-1838): Bump setuptools version to align with latest ironic requirements [#257](https://github.com/openshift/ironic-agent-image/pull/257)
* [METAL-1844](https://issues.redhat.com/browse/METAL-1844): Add Slack notification to update-requirements workflow [#260](https://github.com/openshift/ironic-agent-image/pull/260)
* NO-ISSUE: Update requirements.cachito with latest ironic-python-agent [#255](https://github.com/openshift/ironic-agent-image/pull/255)
* NO-ISSUE: Update requirements.cachito with latest ironic-python-agent [#254](https://github.com/openshift/ironic-agent-image/pull/254)
* NO-ISSUE: Remove openstack repo workaround [#249](https://github.com/openshift/ironic-agent-image/pull/249)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/125fd1fd65df56bc451b104546f66461aadbd969...a7cef6a1a98ad2ffad50fc01999d4c721dde541f)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/f8e41b2ed8915474a99e3eb34b54692afb0611da)

* [OCPBUGS-87375](https://issues.redhat.com/browse/OCPBUGS-87375): Updating ironic-rhcos-downloader-container image to be consistent with ART for 5.0 [#122](https://github.com/openshift/ironic-rhcos-downloader/pull/122)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/9953d2b77da077c28f9486a5d965a43149ce30c1...f8e41b2ed8915474a99e3eb34b54692afb0611da)


### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/486a041897d703d55ef59c98e2b20a01588a0b4c)

* [OCPBUGS-87516](https://issues.redhat.com/browse/OCPBUGS-87516): Updating ironic-static-ip-manager-container image to be consistent with ART for 5.0 [#60](https://github.com/openshift/ironic-static-ip-manager/pull/60)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/a379d09f228d93f2beab1c73d67764c64b21e3cb...486a041897d703d55ef59c98e2b20a01588a0b4c)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/f5dba030c456e9d8b5804929e3f3b98072cdc08b)

* [OCPBUGS-86911](https://issues.redhat.com/browse/OCPBUGS-86911): Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 5.0 [#236](https://github.com/openshift/images/pull/236)
* [OCPSTRAT-3113](https://issues.redhat.com/browse/OCPSTRAT-3113): Set DEFAULT:PQ crypto-policies to RHEL9 base image [#230](https://github.com/openshift/images/pull/230)
* Revert "OCPBUGS-84344: yum.conf: omit docs, weak deps" [#234](https://github.com/openshift/images/pull/234)
* [OCPBUGS-84344](https://issues.redhat.com/browse/OCPBUGS-84344): yum.conf: omit docs, weak deps [#231](https://github.com/openshift/images/pull/231)
* [Full changelog](https://github.com/openshift/images/compare/edb8b1e6c5e949c0b470b2bdf7a32f17e53d2f71...f5dba030c456e9d8b5804929e3f3b98072cdc08b)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/c84b25b2ab9b7c3fe50d292de03080290e0c9c20)

* [OCPBUGS-87374](https://issues.redhat.com/browse/OCPBUGS-87374): Updating kube-state-metrics-container image to be consistent with ART for 5.0 [#145](https://github.com/openshift/kube-state-metrics/pull/145)
* [OCPBUGS-85098](https://issues.redhat.com/browse/OCPBUGS-85098): [bot] Bump openshift/kube-state-metrics to v2.19.0 [#141](https://github.com/openshift/kube-state-metrics/pull/141)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/6fa06eac4c3942ba64bff18ca93b5a019ea5c976...c84b25b2ab9b7c3fe50d292de03080290e0c9c20)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/d7772c62914781cd312b5e6db24532d694a8a140)

* [OCPBUGS-85416](https://issues.redhat.com/browse/OCPBUGS-85416): Enable actuators to set terminal failure on Exists and Update [#1499](https://github.com/openshift/machine-api-operator/pull/1499)
* [SPLAT-2745](https://issues.redhat.com/browse/SPLAT-2745): Changed vSphere cloud config to be read from openshift-config-managed [#1495](https://github.com/openshift/machine-api-operator/pull/1495)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/368779864a6f9d6dc0c2000033b68ea56be320bf...d7772c62914781cd312b5e6db24532d694a8a140)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/c6695976b219ef02cef100cb8f903824783edf38)

* [OCPBUGS-87389](https://issues.redhat.com/browse/OCPBUGS-87389): Updating ose-machine-config-operator-container image to be consistent with ART for 5.0 [#6152](https://github.com/openshift/machine-config-operator/pull/6152)
* [OCPBUGS-87635](https://issues.redhat.com/browse/OCPBUGS-87635): Fix MCP.status.osImageStream [#6154](https://github.com/openshift/machine-config-operator/pull/6154)
* [OCPBUGS-87192](https://issues.redhat.com/browse/OCPBUGS-87192): Add mco_extensions.go e2e test suite for MCO extension install, enable, and validation [#6034](https://github.com/openshift/machine-config-operator/pull/6034)
* [MCO-2343](https://issues.redhat.com/browse/MCO-2343): Temporary make MCO default to rhel-9 [#6156](https://github.com/openshift/machine-config-operator/pull/6156)
* [OCPBUGS-86588](https://issues.redhat.com/browse/OCPBUGS-86588): vSphere boot image hot loop detection is non-functional due to stable template names [#6094](https://github.com/openshift/machine-config-operator/pull/6094)
* [OCPBUGS-85428](https://issues.redhat.com/browse/OCPBUGS-85428): Lowercase the start of all error messages [#6106](https://github.com/openshift/machine-config-operator/pull/6106)
* [MCO-2208](https://issues.redhat.com/browse/MCO-2208): MCO-2125: Migrate mco registry units [#6079](https://github.com/openshift/machine-config-operator/pull/6079)
* [OCPBUGS-86978](https://issues.redhat.com/browse/OCPBUGS-86978): adapt osimagestream tests to handle clusters defaulting to rhel-10 [#6099](https://github.com/openshift/machine-config-operator/pull/6099)
* [AGENT-1517](https://issues.redhat.com/browse/AGENT-1517): avoid running IRI deletion tests for standard e2e IRI tests [#6145](https://github.com/openshift/machine-config-operator/pull/6145)
* [AGENT-1531](https://issues.redhat.com/browse/AGENT-1531): Remove localhost.localdomain workaround for MCN IRI image field [#6146](https://github.com/openshift/machine-config-operator/pull/6146)
* Fixes OCPBUGS-77140: increase LRU cache and prefetch timeout for PinnedImageSet [#6046](https://github.com/openshift/machine-config-operator/pull/6046)
* [OCPBUGS-87014](https://issues.redhat.com/browse/OCPBUGS-87014): Remove skopeo-install script [#6141](https://github.com/openshift/machine-config-operator/pull/6141)
* [OCPBUGS-86965](https://issues.redhat.com/browse/OCPBUGS-86965): make test 69755 more stable [#6127](https://github.com/openshift/machine-config-operator/pull/6127)
* [OCPBUGS-86554](https://issues.redhat.com/browse/OCPBUGS-86554): Wait for operators after removing master machine [#6091](https://github.com/openshift/machine-config-operator/pull/6091)
* [OCPBUGS-85427](https://issues.redhat.com/browse/OCPBUGS-85427): Remove trailing newline (\n) characters in klog message strings [#6112](https://github.com/openshift/machine-config-operator/pull/6112)
* [MCO-2211](https://issues.redhat.com/browse/MCO-2211): MCO-2210: MCO-2234 MCO-Migrate MCO tests from openshift-tests-private [#5902](https://github.com/openshift/machine-config-operator/pull/5902)
* [OCPBUGS-86890](https://issues.redhat.com/browse/OCPBUGS-86890): fix: update arbiter crio config [#6120](https://github.com/openshift/machine-config-operator/pull/6120)
* [MCO-2296](https://issues.redhat.com/browse/MCO-2296): Remove OSImageStreams v1 replace [#6133](https://github.com/openshift/machine-config-operator/pull/6133)
* [MCO-2296](https://issues.redhat.com/browse/MCO-2296): OSImageStreams v1 promotion [#6076](https://github.com/openshift/machine-config-operator/pull/6076)
* [AGENT-1526](https://issues.redhat.com/browse/AGENT-1526): disable htpasswd auth on IRI registry, keep read-only [#6109](https://github.com/openshift/machine-config-operator/pull/6109)
* NO-ISSUE: Add -L flag to curl to follow redirects automatically [#6121](https://github.com/openshift/machine-config-operator/pull/6121)
* [OCPBUGS-86041](https://issues.redhat.com/browse/OCPBUGS-86041): update IsSNO helper function to correctly access the cluster's topology [#6110](https://github.com/openshift/machine-config-operator/pull/6110)
* [OCPBUGS-83619](https://issues.redhat.com/browse/OCPBUGS-83619): Add version guard for OSStream rendering [#6111](https://github.com/openshift/machine-config-operator/pull/6111)
* NO-ISSUE: Lower IRI deletion log verbosity [#6119](https://github.com/openshift/machine-config-operator/pull/6119)
* [OCPBUGS-86179](https://issues.redhat.com/browse/OCPBUGS-86179): Update ImageModeStatusReporting MCP machine count tests to be resilient on SNO topology [#6089](https://github.com/openshift/machine-config-operator/pull/6089)
* [OCPBUGS-86800](https://issues.redhat.com/browse/OCPBUGS-86800): Update AMI Whitelist [#6108](https://github.com/openshift/machine-config-operator/pull/6108)
* [OCPBUGS-86671](https://issues.redhat.com/browse/OCPBUGS-86671): Fix InternalReleaseImage URL transform [#6100](https://github.com/openshift/machine-config-operator/pull/6100)
* [AGENT-1488](https://issues.redhat.com/browse/AGENT-1488): Aggregate IRI status from MachineConfigNodes [#5841](https://github.com/openshift/machine-config-operator/pull/5841)
* [OCPBUGS-63750](https://issues.redhat.com/browse/OCPBUGS-63750): fix Go build tag behavior [#5494](https://github.com/openshift/machine-config-operator/pull/5494)
* [OCPBUGS-86474](https://issues.redhat.com/browse/OCPBUGS-86474): Tests using realtime kernel should not be limited to a… [#6084](https://github.com/openshift/machine-config-operator/pull/6084)
* [OCPBUGS-86332](https://issues.redhat.com/browse/OCPBUGS-86332): remove tests using base images older than 4.13 [#6077](https://github.com/openshift/machine-config-operator/pull/6077)
* NO-ISSUE: Update TC-88366 to check osImageStream status after update completes [#6078](https://github.com/openshift/machine-config-operator/pull/6078)
* [AGENT-1491](https://issues.redhat.com/browse/AGENT-1491): reclaim disk space from the node when IRI resource is deleted [#5988](https://github.com/openshift/machine-config-operator/pull/5988)
* [OCPBUGS-86035](https://issues.redhat.com/browse/OCPBUGS-86035): Adapt test '54922 - daemon: add check before updating kerne… [#6056](https://github.com/openshift/machine-config-operator/pull/6056)
* [AGENT-1517](https://issues.redhat.com/browse/AGENT-1517): fix iri deletion test [#6070](https://github.com/openshift/machine-config-operator/pull/6070)
* [OCPBUGS-83987](https://issues.redhat.com/browse/OCPBUGS-83987): Fix CVE-2026-33186 [#6065](https://github.com/openshift/machine-config-operator/pull/6065)
* [OCPBUGS-84814](https://issues.redhat.com/browse/OCPBUGS-84814): Skip chrony-wait on first node join [#5990](https://github.com/openshift/machine-config-operator/pull/5990)
* [MCO-2273](https://issues.redhat.com/browse/MCO-2273): MCO-2215: MCO-2183: Migrate remaining TCs from mco.go to MCO, units, kublet suite [#6024](https://github.com/openshift/machine-config-operator/pull/6024)
* [AGENT-1517](https://issues.redhat.com/browse/AGENT-1517): disable iri-registry service on IRI delete [#6041](https://github.com/openshift/machine-config-operator/pull/6041)
* [OCPBUGS-85237](https://issues.redhat.com/browse/OCPBUGS-85237): Manually uncordoned nodes are not automatically re-cordoned [#6028](https://github.com/openshift/machine-config-operator/pull/6028)
* [OCPBUGS-15157](https://issues.redhat.com/browse/OCPBUGS-15157): Replace wildcard permissions with explicit verbs and resources in MCC ClusterRole [#6000](https://github.com/openshift/machine-config-operator/pull/6000)
* [OCPBUGS-65645](https://issues.redhat.com/browse/OCPBUGS-65645): Verify extension packages are installed [#6010](https://github.com/openshift/machine-config-operator/pull/6010)
* [OCPBUGS-79502](https://issues.redhat.com/browse/OCPBUGS-79502): Enable AutoSizingReserved for Hypershift workers [#5847](https://github.com/openshift/machine-config-operator/pull/5847)
* NO-JIRA: daemon: expand os image presence check [#6005](https://github.com/openshift/machine-config-operator/pull/6005)
* [MCO-2212](https://issues.redhat.com/browse/MCO-2212): MCO-2213: Migrate mco_observability and mco_daemon test-suite [#5875](https://github.com/openshift/machine-config-operator/pull/5875)
* [OCPBUGS-63650](https://issues.redhat.com/browse/OCPBUGS-63650): configure-ovs: copy lldp mode to br-ex port [#5698](https://github.com/openshift/machine-config-operator/pull/5698)
* [OCPBUGS-85498](https://issues.redhat.com/browse/OCPBUGS-85498): BareMetal skew e2e fails patching provisioning CR after CBO webhook fix [#6031](https://github.com/openshift/machine-config-operator/pull/6031)
* [OCPBUGS-85497](https://issues.redhat.com/browse/OCPBUGS-85497): only check password hash in /etc/shadow [#6030](https://github.com/openshift/machine-config-operator/pull/6030)
* NO-JIRA: Add fix for ossImagestream status [#6018](https://github.com/openshift/machine-config-operator/pull/6018)
* [MCO-2025](https://issues.redhat.com/browse/MCO-2025): OCP-88366 and add OCP-88814 for osImageStream with osImageURL [#6014](https://github.com/openshift/machine-config-operator/pull/6014)
* [OCPBUGS-83830](https://issues.redhat.com/browse/OCPBUGS-83830): Apply password only if changes exist [#5889](https://github.com/openshift/machine-config-operator/pull/5889)
* [AGENT-1514](https://issues.redhat.com/browse/AGENT-1514): Add ML-KEM verification test for IRI registry [#6003](https://github.com/openshift/machine-config-operator/pull/6003)
* [OCPBUGS-84516](https://issues.redhat.com/browse/OCPBUGS-84516): Add `terminationMessagePolicy` to build pod containers [#5993](https://github.com/openshift/machine-config-operator/pull/5993)
* [OCPBUGS-85117](https://issues.redhat.com/browse/OCPBUGS-85117): Fix 2 flakes happening in the ocl test suite [#6004](https://github.com/openshift/machine-config-operator/pull/6004)
* [OCPBUGS-84842](https://issues.redhat.com/browse/OCPBUGS-84842): Bootloader update attempt should be conditional [#5907](https://github.com/openshift/machine-config-operator/pull/5907)
* [OCPBUGS-75894](https://issues.redhat.com/browse/OCPBUGS-75894): use `--delete-if-present` for karg removal [#5914](https://github.com/openshift/machine-config-operator/pull/5914)
* [OCPBUGS-84661](https://issues.redhat.com/browse/OCPBUGS-84661): Fix wrong early exit during kubelet MCs regeneration [#5898](https://github.com/openshift/machine-config-operator/pull/5898)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/9d3ee9d972ed9373db03a498ca6ab831093d2420...c6695976b219ef02cef100cb8f903824783edf38)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/7a348422137de33a9bfa6368b3797686ff4e8f98)

* [OCPBUGS-87512](https://issues.redhat.com/browse/OCPBUGS-87512): Updating ose-image-customization-controller-container image to be consistent with ART for 5.0 [#178](https://github.com/openshift/image-customization-controller/pull/178)
* [METAL-1730](https://issues.redhat.com/browse/METAL-1730): Add stream selection for multi-version support [#175](https://github.com/openshift/image-customization-controller/pull/175)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/a43d9c977f6332577efcd383cf173a2ff5805a4d...7a348422137de33a9bfa6368b3797686ff4e8f98)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/8888cd22679abb0bc7ae1a22e50ed6c5f64ae9ba)

* [OCPBUGS-87871](https://issues.redhat.com/browse/OCPBUGS-87871): Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs [#95](https://github.com/openshift/machine-os-images/pull/95)
* [OCPBUGS-87356](https://issues.redhat.com/browse/OCPBUGS-87356): Updating ose-machine-os-images-container image to be consistent with ART for 5.0 [#91](https://github.com/openshift/machine-os-images/pull/91)
* [METAL-1730](https://issues.redhat.com/browse/METAL-1730): Add stream symlinks for multi-stream support [#83](https://github.com/openshift/machine-os-images/pull/83)
* [OCPBUGS-85476](https://issues.redhat.com/browse/OCPBUGS-85476): Force rebuild for OCP 5.0 [#87](https://github.com/openshift/machine-os-images/pull/87)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/65d3078760791b7c258824c80b4133fee88f9aab...8888cd22679abb0bc7ae1a22e50ed6c5f64ae9ba)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/aa3681b0cf788aa87ca488ee18d07942f3bbdb82)

* [OCPBUGS-87485](https://issues.redhat.com/browse/OCPBUGS-87485): Updating monitoring-plugin-container image to be consistent with ART for 5.0 [#972](https://github.com/openshift/monitoring-plugin/pull/972)
* [OBSINTA-1358](https://issues.redhat.com/browse/OBSINTA-1358): add operator-sdk to Cypress test runner image [#966](https://github.com/openshift/monitoring-plugin/pull/966)
* [OU-1399](https://issues.redhat.com/browse/OU-1399): pass ISO string to Timestamp component for valid date rendering [#968](https://github.com/openshift/monitoring-plugin/pull/968)
* [OU-1275](https://issues.redhat.com/browse/OU-1275): remove byte order mark from dashboard text [#960](https://github.com/openshift/monitoring-plugin/pull/960)
* [COO-1776](https://issues.redhat.com/browse/COO-1776): fix: throw error for unsupported dashboard level datasources [#948](https://github.com/openshift/monitoring-plugin/pull/948)
* [OU-1269](https://issues.redhat.com/browse/OU-1269): Update monitoring-console-plugin for 4.22 [#923](https://github.com/openshift/monitoring-plugin/pull/923)
* [OU-1281](https://issues.redhat.com/browse/OU-1281): show disabled project bar while loading [#936](https://github.com/openshift/monitoring-plugin/pull/936)
* [OU-1351](https://issues.redhat.com/browse/OU-1351): prevent namespace and project desync [#933](https://github.com/openshift/monitoring-plugin/pull/933)
* [OU-1315](https://issues.redhat.com/browse/OU-1315): reset queries when namespace changes in dev perspective [#932](https://github.com/openshift/monitoring-plugin/pull/932)
* [OU-1348](https://issues.redhat.com/browse/OU-1348): fix: panel actions index so they are visible on click [#928](https://github.com/openshift/monitoring-plugin/pull/928)
* [OU-1347](https://issues.redhat.com/browse/OU-1347): fix: avoid throwing error to fallback to global datasource [#920](https://github.com/openshift/monitoring-plugin/pull/920)
* [OU-1203](https://issues.redhat.com/browse/OU-1203): upgrade perses dependencies [#914](https://github.com/openshift/monitoring-plugin/pull/914)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/5b613f267533dd00ef5283e44ae5cb4efb786fb5...aa3681b0cf788aa87ca488ee18d07942f3bbdb82)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/12d99f3f29fe38f900d0c6400889e3d58c588f45)

* [OCPBUGS-85053](https://issues.redhat.com/browse/OCPBUGS-85053): Bump Go version to 1.25.0 for ML-KEM/PQC support [#115](https://github.com/openshift/multus-admission-controller/pull/115)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/16ba7ef8026f5b6d0d08b19c707648d82b1ac592...12d99f3f29fe38f900d0c6400889e3d58c588f45)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/932bdaa4250d0a1db41a1a1fcac8192f2757211c)

* [OCPBUGS-87264](https://issues.redhat.com/browse/OCPBUGS-87264): Updating ose-multus-networkpolicy-container image to be consistent with ART for 5.0 [#117](https://github.com/openshift/multus-networkpolicy/pull/117)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/43b16450b76093cd33da339fd9b9c246a619d340...932bdaa4250d0a1db41a1a1fcac8192f2757211c)


### [must-gather](https://github.com/openshift/must-gather/tree/16ac27eedcc79f5b57d77eb01e6b187b84fe7daa)

* [OCPBUGS-86136](https://issues.redhat.com/browse/OCPBUGS-86136): Add InternalReleaseImage to gather [#552](https://github.com/openshift/must-gather/pull/552)
* no-jira: collect OS Image Stream resource [#533](https://github.com/openshift/must-gather/pull/533)
* [CNV-41714](https://issues.redhat.com/browse/CNV-41714): Add a collector for basic virt related data [#539](https://github.com/openshift/must-gather/pull/539)
* [Full changelog](https://github.com/openshift/must-gather/compare/56f0500399d17002c0d00d5d785b153cb876a8af...16ac27eedcc79f5b57d77eb01e6b187b84fe7daa)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/466a73aba120221bc080e4bbb9857ce56a7b5cce)

* [OCPBUGS-87460](https://issues.redhat.com/browse/OCPBUGS-87460): Updating ose-network-interface-bond-cni-container image to be consistent with ART for 5.0 [#118](https://github.com/openshift/bond-cni/pull/118)
* NO-JIRA: Sync upstream k8snetworkplumbingwg/master (2026-05-19) [#117](https://github.com/openshift/bond-cni/pull/117)
* NO-JIRA: Openshift Only - update owners file [#111](https://github.com/openshift/bond-cni/pull/111)
* NO-JIRA: Fix diverged git histories via upstream merge [#108](https://github.com/openshift/bond-cni/pull/108)
* [Full changelog](https://github.com/openshift/bond-cni/compare/297eeb4320e07b18d559bc373b665479c760e8c7...466a73aba120221bc080e4bbb9857ce56a7b5cce)


### [network-tools](https://github.com/openshift/network-tools/tree/b05fd6281beaad05e7de1f95b506679ca53d2b49)

* NO-JIRA:  Add new member [#179](https://github.com/openshift/network-tools/pull/179)
* NO-ISSUE: Add myself back to the bug script [#177](https://github.com/openshift/network-tools/pull/177)
* NO-JIRA: Add mattedallo, marty-power, taanyas as reviewers [#172](https://github.com/openshift/network-tools/pull/172)
* NO-JIRA: Refresh list of team members [#176](https://github.com/openshift/network-tools/pull/176)
* [Full changelog](https://github.com/openshift/network-tools/compare/5da4bc2754768cc00bacc65f811be203da3ac1f5...b05fd6281beaad05e7de1f95b506679ca53d2b49)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/f5d4e5c5a572e1fa9f289f94b8798c3fe9de65b4)

* [OCPBUGS-81271](https://issues.redhat.com/browse/OCPBUGS-81271): Trim subnet input in UDN creation form [#425](https://github.com/openshift/networking-console-plugin/pull/425)
* [OCPBUGS-54248](https://issues.redhat.com/browse/OCPBUGS-54248): Fix empty state Create button links [#423](https://github.com/openshift/networking-console-plugin/pull/423)
* [CNV-61064](https://issues.redhat.com/browse/CNV-61064): [UDN] Add condition column to the list page [#421](https://github.com/openshift/networking-console-plugin/pull/421)
* Align PatternFly dependencies with resolutions in Console main branch [#420](https://github.com/openshift/networking-console-plugin/pull/420)
* [CONSOLE-5218](https://issues.redhat.com/browse/CONSOLE-5218): Add project documentation and rewrite README [#417](https://github.com/openshift/networking-console-plugin/pull/417)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/d4b638df2c340347aedec9798fe0e8a372096cb3...f5d4e5c5a572e1fa9f289f94b8798c3fe9de65b4)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/e2646a4822c26d8451d69740103c3c2676085892)

* [OCPBUGS-87392](https://issues.redhat.com/browse/OCPBUGS-87392): Updating ose-nutanix-machine-controllers-container image to be consistent with ART for 5.0 [#138](https://github.com/openshift/machine-api-provider-nutanix/pull/138)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/246b53bfc7bb59f3cf1e708c7858f12934a5ddbd...e2646a4822c26d8451d69740103c3c2676085892)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/97a820bd5412c2d3bb22f083152107ef41631c8c)

* [CNTRLPLANE-2518](https://issues.redhat.com/browse/CNTRLPLANE-2518): Add support for sourcing external claims from a source that requires client credential authentication [#197](https://github.com/openshift/oauth-apiserver/pull/197)
* [CNTRLPLANE-2516](https://issues.redhat.com/browse/CNTRLPLANE-2516): feat: externaloidc: add support for externally sourcing claims [#195](https://github.com/openshift/oauth-apiserver/pull/195)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/160ac7fb4ea6c0d5089539024c30ba54b0672bbe...97a820bd5412c2d3bb22f083152107ef41631c8c)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/fa27a041c546f80152f1bb0deec777e406f38f87)

* [OCPBUGS-69836](https://issues.redhat.com/browse/OCPBUGS-69836): Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART for 4.22 [#341](https://github.com/openshift/oauth-proxy/pull/341)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/714292f5478e6c12da6a31710f72bc8fbe6fb925...fa27a041c546f80152f1bb0deec777e406f38f87)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/9054b9a94cf71f27d141c72807928ded09dadb8e)

* [OCPBUGS-87496](https://issues.redhat.com/browse/OCPBUGS-87496): Updating oc-mirror-plugin-container image to be consistent with ART for 5.0 [#1432](https://github.com/openshift/oc-mirror/pull/1432)
* [OCPBUGS-87496](https://issues.redhat.com/browse/OCPBUGS-87496): update images to be consistent with ART [#1433](https://github.com/openshift/oc-mirror/pull/1433)
* [OCPBUGS-81712](https://issues.redhat.com/browse/OCPBUGS-81712): fixes race condition when mirroring operator catalogs [#1390](https://github.com/openshift/oc-mirror/pull/1390)
* [CLID-621](https://issues.redhat.com/browse/CLID-621): simplify test catalog building [#1420](https://github.com/openshift/oc-mirror/pull/1420)
* [CLID-655](https://issues.redhat.com/browse/CLID-655): Add test for incremental mirroring using archives by date [#1416](https://github.com/openshift/oc-mirror/pull/1416)
* [CLID-625](https://issues.redhat.com/browse/CLID-625), [CLID-626](https://issues.redhat.com/browse/CLID-626): Tests for --parallel-images and --parallel-layers flags [#1415](https://github.com/openshift/oc-mirror/pull/1415)
* [CLID-647](https://issues.redhat.com/browse/CLID-647): Add testing docs and skills [#1422](https://github.com/openshift/oc-mirror/pull/1422)
* [OCPBUGS-86264](https://issues.redhat.com/browse/OCPBUGS-86264): Upgrade go-jose to v4.1.4 to fix CVE-2026-34986 [#1414](https://github.com/openshift/oc-mirror/pull/1414)
* [CLID-579](https://issues.redhat.com/browse/CLID-579): Validate BlockedImage regex [#1401](https://github.com/openshift/oc-mirror/pull/1401)
* [OCPBUGS-64640](https://issues.redhat.com/browse/OCPBUGS-64640): remove environment setup output [#1384](https://github.com/openshift/oc-mirror/pull/1384)
* [CLID-623](https://issues.redhat.com/browse/CLID-623): Encapsulate unit test data into tests/unit [#1407](https://github.com/openshift/oc-mirror/pull/1407)
* [CLID-479](https://issues.redhat.com/browse/CLID-479): OTE migration [#1375](https://github.com/openshift/oc-mirror/pull/1375)
* NO-JIRA: Update README.md for Enclave Support link [#1404](https://github.com/openshift/oc-mirror/pull/1404)
* [CLID-612](https://issues.redhat.com/browse/CLID-612): Move integration tests within oc-mirror [#1400](https://github.com/openshift/oc-mirror/pull/1400)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/961b3616e2319f93734b5422e2886fb816f50bb9...9054b9a94cf71f27d141c72807928ded09dadb8e)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/8dcfe85f7608d472896bdc1cc2e43df853e2861d)

* [OCPBUGS-86797](https://issues.redhat.com/browse/OCPBUGS-86797), [OPRUN-4415](https://issues.redhat.com/browse/OPRUN-4415): Synchronize From Upstream Repositories [#743](https://github.com/openshift/operator-framework-operator-controller/pull/743)
* [OCPBUGS-87383](https://issues.redhat.com/browse/OCPBUGS-87383): Updating ose-olm-operator-controller-container image to be consistent with ART for 5.0 [#749](https://github.com/openshift/operator-framework-operator-controller/pull/749)
* [OCPBUGS-87385](https://issues.redhat.com/browse/OCPBUGS-87385): Updating ose-olm-catalogd-container image to be consistent with ART for 5.0 [#750](https://github.com/openshift/operator-framework-operator-controller/pull/750)
* [OPRUN-4637](https://issues.redhat.com/browse/OPRUN-4637): Update dockerfiles to use golang-1.26-release-4.23 builders [#746](https://github.com/openshift/operator-framework-operator-controller/pull/746)
* NO-ISSUE: Synchronize From Upstream Repositories [#741](https://github.com/openshift/operator-framework-operator-controller/pull/741)
* [OPRUN-4571](https://issues.redhat.com/browse/OPRUN-4571): add OLMv1 topology-based deployment scaling e2e test [#737](https://github.com/openshift/operator-framework-operator-controller/pull/737)
* [OPRUN-4625](https://issues.redhat.com/browse/OPRUN-4625): Synchronize from Upstream Repositories [#738](https://github.com/openshift/operator-framework-operator-controller/pull/738)
* [OPRUN-4617](https://issues.redhat.com/browse/OPRUN-4617): Update readme Default Catalog Tests [#739](https://github.com/openshift/operator-framework-operator-controller/pull/739)
* [OPRUN-4607](https://issues.redhat.com/browse/OPRUN-4607): Remove test-experimenal-e2e [#732](https://github.com/openshift/operator-framework-operator-controller/pull/732)
* NO-ISSUE: Synchronize From Upstream Repositories [#733](https://github.com/openshift/operator-framework-operator-controller/pull/733)
* NO-ISSUE: Synchronize From Upstream Repositories [#730](https://github.com/openshift/operator-framework-operator-controller/pull/730)
* [OPRUN-4608](https://issues.redhat.com/browse/OPRUN-4608): UPSTREAM: &lt;carry&gt;: Delete openshift/registry.Dockerfile [#729](https://github.com/openshift/operator-framework-operator-controller/pull/729)
* NO-ISSUE: Synchronize From Upstream Repositories [#726](https://github.com/openshift/operator-framework-operator-controller/pull/726)
* [OPRUN-4607](https://issues.redhat.com/browse/OPRUN-4607): Fix flags passed to test-experimental-e2e [#723](https://github.com/openshift/operator-framework-operator-controller/pull/723)
* [OCPBUGS-85508](https://issues.redhat.com/browse/OCPBUGS-85508): Synchronize From Upstream Repositories [#725](https://github.com/openshift/operator-framework-operator-controller/pull/725)
* NO-ISSUE: Synchronize From Upstream Repositories [#724](https://github.com/openshift/operator-framework-operator-controller/pull/724)
* NO-ISSUE: Synchronize From Upstream Repositories [#722](https://github.com/openshift/operator-framework-operator-controller/pull/722)
* [OCPBUGS-62517](https://issues.redhat.com/browse/OCPBUGS-62517): Set replicas=1, PDB, and pod anti-affinity for HA topology [#709](https://github.com/openshift/operator-framework-operator-controller/pull/709)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/556670876f5a6c3a807b15ceefe1b41a7842829e...8dcfe85f7608d472896bdc1cc2e43df853e2861d)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/22f07f6e7825c572abf8214e6a376078d9048296)

* [OCPBUGS-84534](https://issues.redhat.com/browse/OCPBUGS-84534): fix concurrent map race in project authorization cache [#642](https://github.com/openshift/openshift-apiserver/pull/642)
* NO-ISSUE: bump github.com/moby/spdystream v0.5.0 to v0.5.1 to fix CVE-2026-35469 [#650](https://github.com/openshift/openshift-apiserver/pull/650)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/999dd5aefb3efef7ff26105b3208f7fc04ff5b06...22f07f6e7825c572abf8214e6a376078d9048296)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/5631cf493b006cbc72a8600a7435813272d71940)

* [CNF-23051](https://issues.redhat.com/browse/CNF-23051): Migrate away from deprecated ioutil [#422](https://github.com/openshift/openshift-controller-manager/pull/422)
* NO-JIRA: Add control-plane-approvers to OWNERS [#438](https://github.com/openshift/openshift-controller-manager/pull/438)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/26d20feae8892f648f5b06ed3f5492fe6ffb4532...5631cf493b006cbc72a8600a7435813272d71940)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/0e12f5d6df02b37b0353a747d144e8069c3d0c2a)

* [OCPBUGS-87472](https://issues.redhat.com/browse/OCPBUGS-87472): Updating openshift-state-metrics-container image to be consistent with ART for 5.0 [#134](https://github.com/openshift/openshift-state-metrics/pull/134)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/e71e09969f11a47c87b87c43b762ad1d01f6b04f...0e12f5d6df02b37b0353a747d144e8069c3d0c2a)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/4bc7bc64a57f67992ad074c55d4e8e57fe5ec2ea)

* NO-JIRA: manifests-gen: scope provider webhooks to capi namespace [#416](https://github.com/openshift/cluster-api-provider-openstack/pull/416)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/c63a204c8ce5cf8783d41ad3cecbe033d139cd2d...4bc7bc64a57f67992ad074c55d4e8e57fe5ec2ea)


### [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller/tree/77f1d500ba6ce86cac13594c043a776b8b37b764)

* UPSTREAM-SYNC: Merge https://github.com/k-orc/openstack-resource-controller:release-2.0 into main [#38](https://github.com/openshift/openstack-resource-controller/pull/38)
* UPSTREAM-SYNC: Sync main with latest upstream (release-2.0) [#36](https://github.com/openshift/openstack-resource-controller/pull/36)
* UPSTREAM-SYNC:Merge https://github.com/k-orc/openstack-resource-controller:release-1.0 into main [#20](https://github.com/openshift/openstack-resource-controller/pull/20)
* [Full changelog](https://github.com/openshift/openstack-resource-controller/compare/cbea7a9cab145c32e2f347be69996b649893cc22...77f1d500ba6ce86cac13594c043a776b8b37b764)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/c0b1b223882bd7657853441ccf18099527a8841b)

* [OPRUN-4639](https://issues.redhat.com/browse/OPRUN-4639): Update to golang 1.26.3 and openshift-4.23 builders [#1317](https://github.com/openshift/operator-framework-olm/pull/1317)
* NO-ISSUE: Synchronize From Upstream Repositories [#1313](https://github.com/openshift/operator-framework-olm/pull/1313)
* NO-ISSUE: Synchronize From Upstream Repositories [#1311](https://github.com/openshift/operator-framework-olm/pull/1311)
* NO-ISSUE: Synchronize From Upstream Repositories [#1308](https://github.com/openshift/operator-framework-olm/pull/1308)
* NO-ISSUE: Synchronize From Upstream Repositories [#1307](https://github.com/openshift/operator-framework-olm/pull/1307)
* NO-ISSUE: Synchronize From Upstream Repositories [#1306](https://github.com/openshift/operator-framework-olm/pull/1306)
* NO-ISSUE: Synchronize From Upstream Repositories [#1299](https://github.com/openshift/operator-framework-olm/pull/1299)
* [OPRUN-4610](https://issues.redhat.com/browse/OPRUN-4610): Revert lifecycle server changes [#1300](https://github.com/openshift/operator-framework-olm/pull/1300)
* [OCPBUGS-54790](https://issues.redhat.com/browse/OCPBUGS-54790): Fix packageserver PDB annotation for HyperShift [#1297](https://github.com/openshift/operator-framework-olm/pull/1297)
* [OPRUN-4588](https://issues.redhat.com/browse/OPRUN-4588): use AlwaysAllow UnhealthyPodEvictionPolicy option in PDBs [#1280](https://github.com/openshift/operator-framework-olm/pull/1280)
* NO-ISSUE: Synchronize From Upstream Repositories [#1298](https://github.com/openshift/operator-framework-olm/pull/1298)
* [OPRUN-4601](https://issues.redhat.com/browse/OPRUN-4601): use resource-based RBAC for lifecycle-server auth [#1290](https://github.com/openshift/operator-framework-olm/pull/1290)
* [OCPBUGS-84642](https://issues.redhat.com/browse/OCPBUGS-84642): Synchronize From Upstream Repositories [#1291](https://github.com/openshift/operator-framework-olm/pull/1291)
* [OPRUN-4597](https://issues.redhat.com/browse/OPRUN-4597): Fix lifecycle-server readiness probe to allow empty index [#1288](https://github.com/openshift/operator-framework-olm/pull/1288)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/2fcbb3e4a8a1445c2b557d3485ac3f63ba5127a1...c0b1b223882bd7657853441ccf18099527a8841b)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/97c9ba7446d677d51ccd72cecb8601458e576dac)

* [OCPBUGS-87398](https://issues.redhat.com/browse/OCPBUGS-87398): Updating marketplace-operator-container image to be consistent with ART for 5.0 [#758](https://github.com/operator-framework/operator-marketplace/pull/758)
* [OPRUN-4642](https://issues.redhat.com/browse/OPRUN-4642): Update to golang-1.26-release-4.23 [#757](https://github.com/operator-framework/operator-marketplace/pull/757)
* [OPRUN-4628](https://issues.redhat.com/browse/OPRUN-4628): restrict dynamic version selection for default catalogsources to only apply to v5.0-&gt;v4.y [#754](https://github.com/operator-framework/operator-marketplace/pull/754)
* [OPRUN-4598](https://issues.redhat.com/browse/OPRUN-4598): dynamically resolve catalog image tag from OCP release version [#750](https://github.com/operator-framework/operator-marketplace/pull/750)
* NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.28.3 to 2.29.0 [#751](https://github.com/operator-framework/operator-marketplace/pull/751)
* NO-ISSUE: Bump github.com/onsi/gomega from 1.40.0 to 1.41.0 [#752](https://github.com/operator-framework/operator-marketplace/pull/752)
* NO-ISSUE: Bump github.com/fsnotify/fsnotify from 1.9.0 to 1.10.1 [#747](https://github.com/operator-framework/operator-marketplace/pull/747)
* NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.28.3 [#746](https://github.com/operator-framework/operator-marketplace/pull/746)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/4cc7c72487269f0e29fcf48e8d4aa579facbeb6e...97c9ba7446d677d51ccd72cecb8601458e576dac)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/e9295c0d0d7caa1eda7cc9f2f3900c64096c943c)

* NO-JIRA: Sync informing EVPN E2Es with upstream naming [#3220](https://github.com/openshift/ovn-kubernetes/pull/3220)
* [OCPBUGS-81326](https://issues.redhat.com/browse/OCPBUGS-81326), [OCPBUGS-84917](https://issues.redhat.com/browse/OCPBUGS-84917): DownStream Merge [05-19-2026] [#3195](https://github.com/openshift/ovn-kubernetes/pull/3195)
* NO-JIRA: Revert "OCPBUGS-61065: Adding ovndb-raft-functions.sh to ovnk image" [#3192](https://github.com/openshift/ovn-kubernetes/pull/3192)
* NO-JIRA: DownStream Merge [05-07-2026] [#3177](https://github.com/openshift/ovn-kubernetes/pull/3177)
* [TRT-2652](https://issues.redhat.com/browse/TRT-2652): Allow OTE info and list tests commands to work without KUBECONFIG [#3170](https://github.com/openshift/ovn-kubernetes/pull/3170)
* NO-JIRA: DownStream Merge [04-30-2026] [#3169](https://github.com/openshift/ovn-kubernetes/pull/3169)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/952886fd8af2ca3ecf1717a2cb69311a32f25c06...e9295c0d0d7caa1eda7cc9f2f3900c64096c943c)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/ab0cc0842f47d20b063fc1e863c7da4ca43cfadd)

* [OCPBUGS-87294](https://issues.redhat.com/browse/OCPBUGS-87294): Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 5.0 [#136](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/136)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/b5bc8bbd638c08e4df6ff4e382b4170b202733be...ab0cc0842f47d20b063fc1e863c7da4ca43cfadd)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/22f900e5b9c428af9317dcf1019422df74dbf9f5)

* [OCPBUGS-87386](https://issues.redhat.com/browse/OCPBUGS-87386): Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 5.0 [#117](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/117)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/a56f9e95588f656435e2cc3b256d9782213a7813...22f900e5b9c428af9317dcf1019422df74dbf9f5)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/3ba6cd3ccf08695e11b67bf5eaf287198dda8e10)

* [OCPBUGS-87514](https://issues.redhat.com/browse/OCPBUGS-87514): Updating prom-label-proxy-container image to be consistent with ART for 5.0 [#397](https://github.com/openshift/prom-label-proxy/pull/397)
* NO-ISSUE: [bot] Bump openshift/prom-label-proxy to v0.13.0 [#394](https://github.com/openshift/prom-label-proxy/pull/394)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/c4c99a3071808f466ee6c3d7b7fa87108b457feb...3ba6cd3ccf08695e11b67bf5eaf287198dda8e10)


### [prometheus](https://github.com/openshift/prometheus/tree/5b326ca47e77b78c0b5a3a5f528faf1829a1afe4)

* [OCPBUGS-87446](https://issues.redhat.com/browse/OCPBUGS-87446): Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 5.0 [#326](https://github.com/openshift/prometheus/pull/326)
* NO-ISSUE: [bot] Bump openshift/prometheus to v3.11.3 [#318](https://github.com/openshift/prometheus/pull/318)
* NO-ISSUE: [bot] Bump openshift/prometheus to v3.11.3 [#317](https://github.com/openshift/prometheus/pull/317)
* [OCPBUGS-62118](https://issues.redhat.com/browse/OCPBUGS-62118): fix TLS client cert rotation when no CA is configured [#312](https://github.com/openshift/prometheus/pull/312)
* [Full changelog](https://github.com/openshift/prometheus/compare/d9a07e053e734f6da2520be60bcd043693c47c54...5b326ca47e77b78c0b5a3a5f528faf1829a1afe4)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/c15e8d57976b0d8fb944724d0b14d1f05f855539)

* NO-ISSUE: [bot] Bump openshift/prometheus-alertmanager to v0.32.2 [#135](https://github.com/openshift/prometheus-alertmanager/pull/135)
* [OCPBUGS-87471](https://issues.redhat.com/browse/OCPBUGS-87471): Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 5.0 [#136](https://github.com/openshift/prometheus-alertmanager/pull/136)
* NO-ISSUE: remove ui/app/dist/.build_stamp [#133](https://github.com/openshift/prometheus-alertmanager/pull/133)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/a9fb7e7dcc88a6f1a96d67e8cbeb086c54e388e7...c15e8d57976b0d8fb944724d0b14d1f05f855539)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/6a36acbd5ecd5a308bc81267f3b0567f93377247)

* [OCPBUGS-87481](https://issues.redhat.com/browse/OCPBUGS-87481): Updating prometheus-config-reloader-container image to be consistent with ART for 5.0 [#383](https://github.com/openshift/prometheus-operator/pull/383)
* [OCPBUGS-87527](https://issues.redhat.com/browse/OCPBUGS-87527): Updating prometheus-operator-container image to be consistent with ART for 5.0 [#384](https://github.com/openshift/prometheus-operator/pull/384)
* [OCPBUGS-87341](https://issues.redhat.com/browse/OCPBUGS-87341): Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 5.0 [#382](https://github.com/openshift/prometheus-operator/pull/382)
* NO-ISSUE: [bot] Bump openshift/prometheus-operator to v0.91.0 [#380](https://github.com/openshift/prometheus-operator/pull/380)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/70e38466b9b9143f48283dab8bd0c227f35efe69...6a36acbd5ecd5a308bc81267f3b0567f93377247)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/45dec4ebf58ec9fb7083411ee4b6d46c01140c5f)

* [OCPBUGS-87295](https://issues.redhat.com/browse/OCPBUGS-87295): Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 5.0 [#181](https://github.com/openshift/node_exporter/pull/181)
* [OCPBUGS-83863](https://issues.redhat.com/browse/OCPBUGS-83863): Strip debug symbols from Go binaries [#180](https://github.com/openshift/node_exporter/pull/180)
* [Full changelog](https://github.com/openshift/node_exporter/compare/b1b5423ff3cea86d7f7be9e5f739aaf61df75cdc...45dec4ebf58ec9fb7083411ee4b6d46c01140c5f)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/1916ceb059f500f06e8552f88bf38cd09f9522fd)

* [OCPBUGS-39598](https://issues.redhat.com/browse/OCPBUGS-39598): Remove all duplicate ingress IP addresses in clearPersistedAllocation [#91](https://github.com/openshift/route-controller-manager/pull/91)
* [OCPBUGS-83892](https://issues.redhat.com/browse/OCPBUGS-83892): Update grpc-go and x/net [#88](https://github.com/openshift/route-controller-manager/pull/88)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/624742d93f3a7885cf7f70985f1e23ff60da580d...1916ceb059f500f06e8552f88bf38cd09f9522fd)


### [stream-coreos, stream-coreos-extensions](https://github.com/openshift/os/tree/ce34c6f402c35baf6188bbeae72d6e93120e4e01)

* NO-JIRA: Set io.openshift.os.streamclass label on built images [#1940](https://github.com/openshift/os/pull/1940)
* [ART-14453](https://issues.redhat.com/browse/ART-14453): Use rpm-ostree install directly in legacy build pipeline [#1935](https://github.com/openshift/os/pull/1935)
* NO-JIRA: Make build-args files use 5.0 version and revert repo names change [#1936](https://github.com/openshift/os/pull/1936)
* NO-JIRA: Update to track 5.0 [#1930](https://github.com/openshift/os/pull/1930)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/os/compare/398ab69c2acd04c17c7dfc41d1ef7d4dc3edf276...ce34c6f402c35baf6188bbeae72d6e93120e4e01)


### [telemeter](https://github.com/openshift/telemeter/tree/a1dabee1951bd2878719a6da9d5d4304332ef0d4)

* [OCPBUGS-87222](https://issues.redhat.com/browse/OCPBUGS-87222): Updating telemeter-container image to be consistent with ART for 5.0 [#607](https://github.com/openshift/telemeter/pull/607)
* [OCPBUGS-85082](https://issues.redhat.com/browse/OCPBUGS-85082): update google.golang.org/grpc [#601](https://github.com/openshift/telemeter/pull/601)
* NO-ISSUE: add .coderabbit.yaml [#603](https://github.com/openshift/telemeter/pull/603)
* NO-ISSUE: bump golangci-lint to v2.11.3 [#602](https://github.com/openshift/telemeter/pull/602)
* NO-ISSUE: update OWNERS [#604](https://github.com/openshift/telemeter/pull/604)
* [Full changelog](https://github.com/openshift/telemeter/compare/8bfe7aa763d87b29c90dd922d7b5b824e1e73f86...a1dabee1951bd2878719a6da9d5d4304332ef0d4)


### [tests](https://github.com/openshift/origin/tree/af43b923088b2c7ba0c06595e0ecdde2275ec050)

* [OCPBUGS-87541](https://issues.redhat.com/browse/OCPBUGS-87541): Updating openshift-enterprise-tests-container image to be consistent with ART for 5.0 [#31265](https://github.com/openshift/origin/pull/31265)
* "OCPSTRAT-3036: Temporary 1.36 image fixes (revert in rebase PR)" [#31263](https://github.com/openshift/origin/pull/31263)
* [OCPNODE-4506](https://issues.redhat.com/browse/OCPNODE-4506), [OCPNODE-4539](https://issues.redhat.com/browse/OCPNODE-4539): Migrate ContainerRuntimeConfig tests (OCP-45351, OCP-46313) [#31153](https://github.com/openshift/origin/pull/31153)
* [OCPNODE-4516](https://issues.redhat.com/browse/OCPNODE-4516): PDB configured with 100% minAvailable - Migrate - 67564 [#31161](https://github.com/openshift/origin/pull/31161)
* [OCPBUGS-84961](https://issues.redhat.com/browse/OCPBUGS-84961): support Parents field on origin test suites [#31261](https://github.com/openshift/origin/pull/31261)
* NO-JIRA: Update hello-openshift base images from 4.16/4.17 to 4.22 [#31264](https://github.com/openshift/origin/pull/31264)
* no-jira: refactor(test/extended/tls): simplify the workflow, reduce code duplication [#31246](https://github.com/openshift/origin/pull/31246)
* [OCPBUGS-85486](https://issues.redhat.com/browse/OCPBUGS-85486): Add client retry to critical monitor test setup to avoid transient et… [#31249](https://github.com/openshift/origin/pull/31249)
* NO-JIRA: upkeep: add exception for expected disruption during tnf upgrade [#31206](https://github.com/openshift/origin/pull/31206)
* [OCPEDGE-2436](https://issues.redhat.com/browse/OCPEDGE-2436): Add is_standalone learner check test for two-node etcd disruption suite [#30950](https://github.com/openshift/origin/pull/30950)
* [OCPBUGS-86044](https://issues.redhat.com/browse/OCPBUGS-86044): Use generated names in oc adm policy SCC test [#31221](https://github.com/openshift/origin/pull/31221)
* NO-ISSUE: Automated - Update synthetic test data [#31233](https://github.com/openshift/origin/pull/31233)
* [OCPBUGS-86473](https://issues.redhat.com/browse/OCPBUGS-86473): Consolidate audit log must-gather tests to reduce parallel downloads and master node CPU pressure [#31200](https://github.com/openshift/origin/pull/31200)
* [MCO-2296](https://issues.redhat.com/browse/MCO-2296): Remove OSImageStreams v1 replace [#31256](https://github.com/openshift/origin/pull/31256)
* [TRT-2617](https://issues.redhat.com/browse/TRT-2617): Fix CPU metrics monitor node role lookup [#31252](https://github.com/openshift/origin/pull/31252)
* [MCO-2296](https://issues.redhat.com/browse/MCO-2296): OSImageStreams v1 promotion [#31211](https://github.com/openshift/origin/pull/31211)
* NO-JIRA: Clarify why Envoy pods have no CPU or memory limit [#31145](https://github.com/openshift/origin/pull/31145)
* [TRT-2673](https://issues.redhat.com/browse/TRT-2673): Filter NoExecuteTaintManager disruption from backend-disruption.json [#31248](https://github.com/openshift/origin/pull/31248)
* [OCPBUGS-86221](https://issues.redhat.com/browse/OCPBUGS-86221): update authentication operator conditions to no longer expect WellKnownReadyProgressing [#31236](https://github.com/openshift/origin/pull/31236)
* NO-JIRA: Remove fixed bugs on CO conditions (2) - 2nd try [#31207](https://github.com/openshift/origin/pull/31207)
* [AGENT-1527](https://issues.redhat.com/browse/AGENT-1527): Fix comparison of InternalReleaseImage to mirror [#31250](https://github.com/openshift/origin/pull/31250)
* Revert "CLID-589: add oc-mirror to extensionBinaries" [#31238](https://github.com/openshift/origin/pull/31238)
* [OCPBUGS-86017](https://issues.redhat.com/browse/OCPBUGS-86017): Extend image-registry single replica exception to s390x architecture [#31190](https://github.com/openshift/origin/pull/31190)
* [OCPBUGS-82501](https://issues.redhat.com/browse/OCPBUGS-82501): Fix AWS DualStack CI jobs consistently encounter 2 EgressFirewall Test Failures [#31147](https://github.com/openshift/origin/pull/31147)
* [OCPBUGS-84519](https://issues.redhat.com/browse/OCPBUGS-84519): Remove openshift-ovn-kubernetes terminationMessagePolicy exemption [#31159](https://github.com/openshift/origin/pull/31159)
* NO-ISSUE: Restrict test retries to an allowlist of test names [#31222](https://github.com/openshift/origin/pull/31222)
* [OCPBUGS-86611](https://issues.redhat.com/browse/OCPBUGS-86611): Wait for namespace initialization before creating pod [#31225](https://github.com/openshift/origin/pull/31225)
* [CNTRLPLANE-3238](https://issues.redhat.com/browse/CNTRLPLANE-3238): pathological events: bump KMS ScalingReplicaSet threshold to 120 [#31209](https://github.com/openshift/origin/pull/31209)
* NO-JIRA: Skip CO condition tests on SNO [#30775](https://github.com/openshift/origin/pull/30775)
* [CLID-589](https://issues.redhat.com/browse/CLID-589): add oc-mirror to extensionBinaries [#31006](https://github.com/openshift/origin/pull/31006)
* [OCPBUGS-59500](https://issues.redhat.com/browse/OCPBUGS-59500): pathologicalevents: fix HPA FailedGetResourceMetric allowlist [#31213](https://github.com/openshift/origin/pull/31213)
* [OCPBUGS-86225](https://issues.redhat.com/browse/OCPBUGS-86225): fix PDB AlwaysAllow test failure on IPv6-primary dualstack clusters [#31196](https://github.com/openshift/origin/pull/31196)
* [CNTRLPLANE-3428](https://issues.redhat.com/browse/CNTRLPLANE-3428): tls: add cluster-authentication-operator and operands to tested compo… [#31208](https://github.com/openshift/origin/pull/31208)
* NO-ISSUE: Automated - Update synthetic test data [#31192](https://github.com/openshift/origin/pull/31192)
* [OCPBUGS-86328](https://issues.redhat.com/browse/OCPBUGS-86328): if rhcos9-10 in the job name,update jobname test [#31198](https://github.com/openshift/origin/pull/31198)
* [OCPNODE-4535](https://issues.redhat.com/browse/OCPNODE-4535): Automate OCP-44820 change container registry config [#31182](https://github.com/openshift/origin/pull/31182)
* [OCPBUGS-85363](https://issues.redhat.com/browse/OCPBUGS-85363): Fixed flakiness of oc set image E2E tests [#31191](https://github.com/openshift/origin/pull/31191)
* [OCPNODE-4125](https://issues.redhat.com/browse/OCPNODE-4125): fix imagepolicy image config testcase [#31185](https://github.com/openshift/origin/pull/31185)
* [CNTRLPLANE-3428](https://issues.redhat.com/browse/CNTRLPLANE-3428): tls fix HyperShift guest-side CO wait and Custom profile handling [#31194](https://github.com/openshift/origin/pull/31194)
* [TRT-2669](https://issues.redhat.com/browse/TRT-2669): Revert #31112 "NO-JIRA: Remove fixed bugs on CO conditions (2)" [#31201](https://github.com/openshift/origin/pull/31201)
* [AGENT-1517](https://issues.redhat.com/browse/AGENT-1517): refactored the logic to filter IRI related MachineConfigs [#31179](https://github.com/openshift/origin/pull/31179)
* [OPRUN-4569](https://issues.redhat.com/browse/OPRUN-4569): test: remove OLMv1 OTE exceptions; scope OLMv0 exceptions to SNO [#31172](https://github.com/openshift/origin/pull/31172)
* NO-JIRA: Remove fixed bugs on CO conditions (2) [#31112](https://github.com/openshift/origin/pull/31112)
* [OCPBUGS-85378](https://issues.redhat.com/browse/OCPBUGS-85378): Fix OCP E2E test - Object count when exceed openshift.io/image-tags will ban to create new image references in the project [#31155](https://github.com/openshift/origin/pull/31155)
* NO-ISSUE: Automated - Update synthetic test data [#31181](https://github.com/openshift/origin/pull/31181)
* NO-JIRA: Fix flaky storage-admin e2e test [#31180](https://github.com/openshift/origin/pull/31180)
* [CNTRLPLANE-3428](https://issues.redhat.com/browse/CNTRLPLANE-3428): tls: introduce narrow target types and migrate test functions [#31160](https://github.com/openshift/origin/pull/31160)
* Revert "OCPBUGS-85363: Fixed flakiness of oc set image E2E tests" [#31188](https://github.com/openshift/origin/pull/31188)
* [OCPBUGS-85370](https://issues.redhat.com/browse/OCPBUGS-85370): Raise OpenStack operator watch limits [#31154](https://github.com/openshift/origin/pull/31154)
* [OCPBUGS-85363](https://issues.redhat.com/browse/OCPBUGS-85363): Fixed flakiness of oc set image E2E tests [#31152](https://github.com/openshift/origin/pull/31152)
* [OCPBUGS-85058](https://issues.redhat.com/browse/OCPBUGS-85058): monitortests: allow etcd CO blips during TNF jobs on two-node upgrades [#31138](https://github.com/openshift/origin/pull/31138)
* [OCPBUGS-85486](https://issues.redhat.com/browse/OCPBUGS-85486): stage the creation of test pods to minimize etcd impact [#31164](https://github.com/openshift/origin/pull/31164)
* [OCPNODE-4505](https://issues.redhat.com/browse/OCPNODE-4505): Automation creation of OCP-57401 [#31142](https://github.com/openshift/origin/pull/31142)
* [OCPBUGS-83623](https://issues.redhat.com/browse/OCPBUGS-83623): fix: add distruption tolerance for DualReplica (two-node) topology [#31127](https://github.com/openshift/origin/pull/31127)
* [OCPBUGS-85531](https://issues.redhat.com/browse/OCPBUGS-85531): Fixed flakiness in OCP E2E tests -  oc debug image stream [#31168](https://github.com/openshift/origin/pull/31168)
* Revert "OPRUN-4569: test: remove OTE exceptions for OLM" [#31171](https://github.com/openshift/origin/pull/31171)
* [OCPNODE-4108](https://issues.redhat.com/browse/OCPNODE-4108): add E2E tests for upstream dra-example-driver [#31064](https://github.com/openshift/origin/pull/31064)
* [OPRUN-4569](https://issues.redhat.com/browse/OPRUN-4569): test: remove OTE exceptions for OLM [#31150](https://github.com/openshift/origin/pull/31150)
* [OCPEDGE-2386](https://issues.redhat.com/browse/OCPEDGE-2386): Add tnf_etcd_disruption test with 5 new etcd resilience tests. [#30880](https://github.com/openshift/origin/pull/30880)
* NO-JIRA: Improve graceful shutdown LB test output with more details of late requests [#31158](https://github.com/openshift/origin/pull/31158)
* [OCPNODE-4047](https://issues.redhat.com/browse/OCPNODE-4047): Implement kubelet TLS 1.3 via KubeletConfig on workers [#31016](https://github.com/openshift/origin/pull/31016)
* NO-ISSUE: Automated - Update synthetic test data [#31146](https://github.com/openshift/origin/pull/31146)
* [CNTRLPLANE-3374](https://issues.redhat.com/browse/CNTRLPLANE-3374): remove multus exception from monitor test [#31130](https://github.com/openshift/origin/pull/31130)
* [CNTRLPLANE-3428](https://issues.redhat.com/browse/CNTRLPLANE-3428): tls: extract annotation and ConfigMap update helpers [#31156](https://github.com/openshift/origin/pull/31156)
* [OCPBUGS-83580](https://issues.redhat.com/browse/OCPBUGS-83580): Skip dev fuse test on runc runtime [#31140](https://github.com/openshift/origin/pull/31140)
* [OCPBUGS-84516](https://issues.redhat.com/browse/OCPBUGS-84516): remove openshift-machine-config-operator exemption from terminationMessagePolicy monitor [#31120](https://github.com/openshift/origin/pull/31120)
* [CNTRLPLANE-3387](https://issues.redhat.com/browse/CNTRLPLANE-3387): Update list of pending namespaces in the required-scc monitor test [#31135](https://github.com/openshift/origin/pull/31135)
* NO-ISSUE: improve error reporting in cpumetriccollector [#31132](https://github.com/openshift/origin/pull/31132)
* no-jira: tls: deduplicate ConfigMap helpers into standalone functions [#31136](https://github.com/openshift/origin/pull/31136)
* [OCPBUGS-84500](https://issues.redhat.com/browse/OCPBUGS-84500): Verify dynamic revision bump for etcd during kernel crash [#30915](https://github.com/openshift/origin/pull/30915)
* [OCPNODE-3983](https://issues.redhat.com/browse/OCPNODE-3983): Add e2e tests for KubeletEnsureSecretPulledImages feature gate [#31102](https://github.com/openshift/origin/pull/31102)
* [OCPNODE-4381](https://issues.redhat.com/browse/OCPNODE-4381): Migrate OCP-38271 from openshift-tests-private [#30960](https://github.com/openshift/origin/pull/30960)
* [OCPBUGS-85087](https://issues.redhat.com/browse/OCPBUGS-85087): Allow OVN-Kubernetes CIDROverlap pathological events [#31131](https://github.com/openshift/origin/pull/31131)
* NO-JIRA: Increase pathological event thresholds for API server rollout scenarios [#31122](https://github.com/openshift/origin/pull/31122)
* [CNTRLPLANE-2554](https://issues.redhat.com/browse/CNTRLPLANE-2554): Add ExternalOIDCWithUpstreamParity e2e tests [#31028](https://github.com/openshift/origin/pull/31028)
* : no-jira: tls: extract injectTLSAnnotation constant [#31125](https://github.com/openshift/origin/pull/31125)
* [OCPSTRAT-3036](https://issues.redhat.com/browse/OCPSTRAT-3036): Update etcd test data for k8s 1.36 release [#31113](https://github.com/openshift/origin/pull/31113)
* [Full changelog](https://github.com/openshift/origin/compare/cf7e2698dcb78750fa8d18f06a9e4b71769ca1ff...af43b923088b2c7ba0c06595e0ecdde2275ec050)


### [thanos](https://github.com/openshift/thanos/tree/97c62b806e54c7603b70dddd258939b9cd721b83)

* [OCPBUGS-87269](https://issues.redhat.com/browse/OCPBUGS-87269): Updating ose-thanos-container image to be consistent with ART for 5.0 [#189](https://github.com/openshift/thanos/pull/189)
* [Full changelog](https://github.com/openshift/thanos/compare/5d9d0f387e5cc651470f27352b28674103bfdd77...97c62b806e54c7603b70dddd258939b9cd721b83)


### [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator/tree/a6c21eee63d1fae58b63d8493aeb0fd662d1c91e)

* [OCPBUGS-87381](https://issues.redhat.com/browse/OCPBUGS-87381): Updating volume-data-source-validator-container image to be consistent with ART for 5.0 [#15](https://github.com/openshift/volume-data-source-validator/pull/15)
* [Full changelog](https://github.com/openshift/volume-data-source-validator/compare/8e176cec394709cac728423cbbb6c3c914be8485...a6c21eee63d1fae58b63d8493aeb0fd662d1c91e)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/cd9a63d6ef3eedebc687ec6b675db1a1ad947ebb)

* [OCPBUGS-87359](https://issues.redhat.com/browse/OCPBUGS-87359): Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 5.0 [#113](https://github.com/openshift/cluster-api-provider-vsphere/pull/113)
* [OCPBUGS-53005](https://issues.redhat.com/browse/OCPBUGS-53005): Remove references to master branch [#111](https://github.com/openshift/cluster-api-provider-vsphere/pull/111)
* [OCPBUGS-83600](https://issues.redhat.com/browse/OCPBUGS-83600): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.15.3 (e917f8e) into master [#107](https://github.com/openshift/cluster-api-provider-vsphere/pull/107)
* NO-JIRA: manifests-gen: scope provider webhooks to capi namespace [#106](https://github.com/openshift/cluster-api-provider-vsphere/pull/106)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/a474cef26b5ece9a65cce06c533a5b64d2f7e42d...cd9a63d6ef3eedebc687ec6b675db1a1ad947ebb)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/3a6bbdd463c47d8d18a055f6e54c9c8fae52ce58)

* [OCPBUGS-87286](https://issues.redhat.com/browse/OCPBUGS-87286): Updating vmware-vsphere-syncer-container image to be consistent with ART for 5.0 [#185](https://github.com/openshift/vmware-vsphere-csi-driver/pull/185)
* [OCPBUGS-87275](https://issues.redhat.com/browse/OCPBUGS-87275): Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 5.0 [#184](https://github.com/openshift/vmware-vsphere-csi-driver/pull/184)
* NO-ISSUE: Bump spdystream to v0.5.1 [#181](https://github.com/openshift/vmware-vsphere-csi-driver/pull/181)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/cf21e1211225e3cf6baa27bdb12ae86c5c13db39...3a6bbdd463c47d8d18a055f6e54c9c8fae52ce58)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/ef4e3b6de5ec19ac4d20a699dfc2aa1d6834f040)

* [OCPBUGS-87395](https://issues.redhat.com/browse/OCPBUGS-87395): Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 5.0 [#346](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/346)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/e91f95e27cd47b41ba31399781bba361d6090634...ef4e3b6de5ec19ac4d20a699dfc2aa1d6834f040)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/185e33940da6f0743176b25a162ee8e87d21b75a)

* [CNF-23389](https://issues.redhat.com/browse/CNF-23389): mockgen deprecated: use uber-go/mock instead [#194](https://github.com/openshift/vsphere-problem-detector/pull/194)
* [OCPBUGS-79057](https://issues.redhat.com/browse/OCPBUGS-79057): Fixed compute cluster permission logic for single fd with read-only custom resourcepool [#220](https://github.com/openshift/vsphere-problem-detector/pull/220)
* [OCPBUGS-56274](https://issues.redhat.com/browse/OCPBUGS-56274): add datacenter consistency check [#212](https://github.com/openshift/vsphere-problem-detector/pull/212)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/842aed3df97005839ef5deaf560abbe6486b9daf...185e33940da6f0743176b25a162ee8e87d21b75a)