# 5.0.0-okd-scos.ec.4

Created: 2026-06-29 07:33:02 +0000 UTC

Image Digest: `sha256:7f380c4ae5b131652dc2548ede5e7ee04c9d4f53d4b01de9abe78fde915dd706`

Promoted from registry.ci.openshift.org/origin/release-scos:5.0.0-0.okd-scos-nightly-2026-06-27-195541


## Changes from 5.0.0-okd-scos.ec.3

### Components

* Kubectl 1.35.2
* Kubernetes 1.35.3
* Kubernetes Tests 1.35.1
* CentOS Stream CoreOS 10 10.0.20260614-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | OKD<br/>Hypershift | OKD<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---:  |
| AWSServiceLBNetworkSecurityGroup <br/> (0 tests)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled<br/>(Changed)| Enabled| Enabled| Enabled |
| ExternalSnapshotMetadata <br/> (0 tests)| Disabled| Disabled| Enabled| Enabled| Disabled| Disabled| Enabled<br/>(Changed)| Enabled<br/>(Changed) |
| SELinuxMountGAReadiness <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)|  |  | Enabled<br/>(New)| Enabled<br/>(New) |


### Rebuilt images without code change

* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [c41e0c7d](https://github.com/openshift/assisted-installer/commit/c41e0c7d465a9357a49036b350368f008730080e) `sha256:f215d504c567a56fbb4dc5a018f0bd9273c711ab71c4db2b29661e86bfd41209`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [c41e0c7d](https://github.com/openshift/assisted-installer/commit/c41e0c7d465a9357a49036b350368f008730080e) `sha256:d2f4cbf7e155b14be48f911942409e51bf8a6e668c0ed465ac6b81b48392c46e`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [c52e7a70](https://github.com/openshift/agent-installer-utils/commit/c52e7a7021da1cb083a252649ec3ca28503f1ab4) `sha256:657d3617e03bc48b063ebc66838ac987e6e5586af635cd53939af41449aee648`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [8264c02d](https://github.com/openshift/apiserver-network-proxy/commit/8264c02deda9abb6cd9a6a5c23305428431473c2) `sha256:bd8a4bf386d5cc09762f06ada249d037ee995f328a2d78b3df68fa699f8938e4`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [5060934b](https://github.com/openshift/cloud-provider-aws/commit/5060934bc9ff325acf4bd0728bf37166255a501f) `sha256:4adb5c5fae624aaa91718ce5d6cd1e97e1720a783d16dcc0fe0a4815e1b5b15a`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [8b8c4cef](https://github.com/openshift/aws-ebs-csi-driver/commit/8b8c4cef02ec9b670e2709f2aacc0ed72420be90) `sha256:5f534fb896b4670caae7fbe66987a5b0e914d137664a226fbb5de6a995283b54`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [6ca6eea2](https://github.com/openshift/aws-encryption-provider/commit/6ca6eea2f3a9d0b090ff63ba5b8e342d5686c9a8) `sha256:3fc98a46965329e10cdb325ff327ba37e5b6e3868de0f92ce1b338a23b17bc28`
* [aws-node-termination-handler](https://github.com/openshift/aws-node-termination-handler) git [e4ff2aae](https://github.com/openshift/aws-node-termination-handler/commit/e4ff2aaec292db42de9f3eef4908ba1c421a2a6c) `sha256:6ba48274b78903b30c9e024c3eaac8ee666119024539349665837965491deabc`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [dd3da573](https://github.com/openshift/aws-pod-identity-webhook/commit/dd3da573f41d7f4b78dd605373c5f1e441cb8e35) `sha256:af1dbcb8f85676d92699856d38123bc19508e5626542f8d38722380400b1f0b3`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [52af3f1a](https://github.com/openshift/cluster-api-provider-azure/commit/52af3f1a3ecffec69c621e80bc80adf67ecec7c0) `sha256:3df250b4429fdc8fb7a1b63bdd5aeb116d302fab20d0645ae482ebb21ac0021c`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [2745f1f1](https://github.com/openshift/azure-disk-csi-driver/commit/2745f1f1d2f1172d58f18bdb42c754451da976c2) `sha256:bdc17f0873f75872d77d0d59342fd4fa7ca9b31db6ccd42242e0668ce647dcde`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [bb01d0df](https://github.com/openshift/machine-api-provider-azure/commit/bb01d0dfee4abfe7274ff96cba280ad81ad99936) `sha256:fb4097949a207f9a4642c405f71e01919d804f6ff30e5b42ebc4e5a1a3a37dce`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [0611cd27](https://github.com/openshift/azure-service-operator/commit/0611cd27b9eaa4a1fa8e0ab8ddc85352a61903e0) `sha256:fad448892ba9a8dc4a308dfd239b2d94e52931056a072125eb8708cf8f185a6f`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [40d201db](https://github.com/openshift/azure-workload-identity/commit/40d201db10263abbb9f4ace0a4ea0c63c20bbfc2) `sha256:196aa5e101c41794f84a3c3592400899ba123ff78f906912d29d7c9dad7f7408`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [29a96694](https://github.com/openshift/cluster-api-provider-metal3/commit/29a96694bfc3b59d1fa95acf2ad87077cc1d3108) `sha256:aa95fda98a5de6db20f4669905abdbc96c3ceb9b22dda8ec0375314264af5932`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [f2b0db19](https://github.com/openshift/cluster-api-provider-baremetal/commit/f2b0db1919fff1344bc68948894c6775c0bf24a3) `sha256:190f3e89070cb982333395d015973b1839ff438dbb2caa1023df046ce5f421a0`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [5d3be939](https://github.com/openshift/baremetal-operator/commit/5d3be9399c46e8789a6e735672c5fb7abc4b46bd) `sha256:0637ed7264c9335f9275a73c6ebda02e20db816e56b7b34a7148e5e71a58b4c3`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [079091da](https://github.com/openshift/baremetal-runtimecfg/commit/079091da0e619331ec79b87e466781efe2445411) `sha256:59b459209f64b4e196badb4efe514d5081e31da4674c8a48f21de07938c155ed`
* [cli](https://github.com/openshift/oc) git [74e525a6](https://github.com/openshift/oc/commit/74e525a6a4523a23a5db585c411943b0a0a338da) `sha256:76b6f4d4d5a5554daaddf71d2665cc3198b657caed4d18803ecf66ab8290744c`
* [cli-artifacts](https://github.com/openshift/oc) git [74e525a6](https://github.com/openshift/oc/commit/74e525a6a4523a23a5db585c411943b0a0a338da) `sha256:861d8ce4e7423abd0235cc046b039d6814eac3e9d712f6f436ea888e20a495c1`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [02af1a9f](https://github.com/openshift/kubernetes-autoscaler/commit/02af1a9fd6bcb87745979980fbbf9a2b0671dddb) `sha256:61b4048156e267016933164c770a603b9d8967507f219a5eb000cb4f1594574f`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [7b1593a4](https://github.com/openshift/cluster-bootstrap/commit/7b1593a47898b6a97dc457efaca464624e9f2afa) `sha256:a039057c6d423d084e2e3dabd0f5c24402f0cb9d307488013d52302019a9f672`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [4917d862](https://github.com/openshift/cluster-api/commit/4917d86210f4decb58a7added337c209335d1314) `sha256:739beb974fb9f07e7422e5531b579c27293ec38b7b01246d10329822b552151f`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [046a4ea8](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/046a4ea83e45c3c1d5eb2d3ffc55a7e7d17fcc3c) `sha256:68f7c808d3b60ed976cfd8e34155b599d28942ff19b4df6de8cf2acd3d9071cb`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [d7262f23](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/d7262f23f8c661ef6a215377b9571b615a1ae0b8) `sha256:e05e10381fdb1bcb7fddb106047d3588ad6f8b10cbec79562e2dcb2967f3ab6b`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [8395f905](https://github.com/openshift/cluster-dns-operator/commit/8395f9054f235aec2cd5185019d201146c9827ed) `sha256:7cdbaece60f8ab9cdc14c5574a4f8f75d417612099ab6500f0b1b07bf47bc56a`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [c35307f0](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/c35307f04313369c9ba4dcab3308506a3987065e) `sha256:6f9c998a2fabc3f5b5770505fcf1b893c9c6d6b4a2205119aaec62a97e64618a`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [d43423b5](https://github.com/openshift/cluster-kube-scheduler-operator/commit/d43423b583269eea8236040424609c3f108ac9c4) `sha256:662ba39e3d5cf0ef8a4dd9985f396ca0a580469040b66e2019bc41c302dee802`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [42647cee](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/42647ceeb54e36b5f7c827302f443c10788407ec) `sha256:adc06b131721f7506aafdd93d691300caf880bd600e7f0aa4e1a02e72c61f4ec`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [1ae3f157](https://github.com/openshift/cluster-machine-approver/commit/1ae3f157b88c167a7dbe06c36d6e55a82f7fd4f0) `sha256:a33b175715eb74e52db58eb4c6f0d5e081eb0097c658ecfe1fd264c2fa7c271d`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [79538421](https://github.com/openshift/cluster-olm-operator/commit/795384212aa1ec66d3c176b33bd7ecc6a38fd560) `sha256:9ea58ec17f846f447c0c98edf7e4fbd87e5bbb873c085e768d2293ec03e94938`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [34f95b07](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/34f95b07f4afbc47558e54e4fa2710fd692e615e) `sha256:8086adcd6da08d02dd66644ca4d277309c914d03287a62f39e9e1b4806b60514`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [9607604d](https://github.com/openshift/cluster-update-keys/commit/9607604d35acee234051bd0da8a14321b4edd38e) `sha256:55c0ec08322d9c47f07de4609cc53ba6953f39bb49fbdafdda52186db387f635`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [ce80869a](https://github.com/openshift/configmap-reload/commit/ce80869a83b55ebbdc21a5550ec5747645203bd2) `sha256:8fa4b519a4129b2cb5a001f265bdea1af13d452bc2bf41d87a675aa1ffffab8e`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [d6f73950](https://github.com/openshift/containernetworking-plugins/commit/d6f73950658d258e0ddbf2a4ac92e13ac840158b) `sha256:42059288a4095641ef8db88fd781fc602ffa361531db9864d2c99868575ae5e7`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [d6f73950](https://github.com/openshift/containernetworking-plugins/commit/d6f73950658d258e0ddbf2a4ac92e13ac840158b) `sha256:9956af8e3c885830b1ee2c37f5c5e0625b92584ca2780af15279d230fd614f00`
* [coredns](https://github.com/openshift/coredns) git [97f7cc32](https://github.com/openshift/coredns/commit/97f7cc327ab5df7d6da38137b7be338efa9a3551) `sha256:06303e5f1eef073d8abac70c9fd5a3ad3c689b24ff4decec30957770d330488f`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [f8bb5994](https://github.com/openshift/cloud-provider-openstack/commit/f8bb5994f3cee8ee2bb5cca25e3e9783ad7dd57c) `sha256:ad2635d4bc55a34cc51a4a98a8e842e97828c6e529406a0ec75dfa4704ab05bf`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [a40a98e2](https://github.com/openshift/csi-driver-nfs/commit/a40a98e2027a63e2a8ddd3589ee3c5142104dbd6) `sha256:e22f529f1e1ad61667bd45ddc696791c4e7bfbbf0dfe163fbd17feb1e16fd506`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [96ebfa73](https://github.com/openshift/csi-external-attacher/commit/96ebfa733c06c3398555d164c788e310908fecf6) `sha256:70c578ea744396a6b2985f0e756162b384f453aa0f4752143184cb15d4b5d084`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [bdf440fa](https://github.com/openshift/csi-external-provisioner/commit/bdf440fab8a48e4b76cf0902ad5ba17a20881a8b) `sha256:4ba1606adfd815d66379a49d646c25e7e5e8cd7792398fd04708de14f1cc9c1e`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [c608adfc](https://github.com/openshift/csi-external-resizer/commit/c608adfc7e82c7c59221bb9d22642a1902cace43) `sha256:b600ecabbcb0a566d756e3cd8acc305f25675e2d3fd502877f9ab5ae8acf48c0`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [e695e2bd](https://github.com/openshift/csi-external-snapshotter/commit/e695e2bd0b548afd0fce049d86d4af29dd34e574) `sha256:f4a6b1f1c7157e4721cac975105fda94d58ce70ce975660cb02a8c59b9d25d00`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [f649d2c7](https://github.com/openshift/csi-livenessprobe/commit/f649d2c76f2484b73c70007801eb81ab4be63635) `sha256:d5a89169f167559433d5d133356a590196c4687b823606c693b05d1b72eae266`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [f0378629](https://github.com/openshift/csi-node-driver-registrar/commit/f0378629c970bc897439caaa85c4aec0971c1130) `sha256:df3d84613ef9de23c214008e525bbb622201a956c31a3fd181cb876e3f1ee784`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [e695e2bd](https://github.com/openshift/csi-external-snapshotter/commit/e695e2bd0b548afd0fce049d86d4af29dd34e574) `sha256:b35f88ac2e704170589606cf90c4e2105be1f7c7bc9f2793040aabe70a23f6de`
* [deployer](https://github.com/openshift/oc) git [74e525a6](https://github.com/openshift/oc/commit/74e525a6a4523a23a5db585c411943b0a0a338da) `sha256:78fe40fbfcb38e467004ec75e3e48e27822ff30d1760d846da4116a8b58e44b4`
* [docker-builder](https://github.com/openshift/builder) git [2cda03a9](https://github.com/openshift/builder/commit/2cda03a93696d4620703848471b3b873b0b2fa1e) `sha256:04b2995d81356c55a0c0cf9ce8c66c2ceb6931fbb22dc9f543ea33e7a04329e6`
* [docker-registry](https://github.com/openshift/image-registry) git [57039cd2](https://github.com/openshift/image-registry/commit/57039cd2d9c87547cdf9a8d1dc7cb94f1ca089f7) `sha256:ab6e0d5af6b5ea19ca72c4e6e86356b774c32a8c0530b01583feeec0e0656f93`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [7905e32b](https://github.com/openshift/driver-toolkit/commit/7905e32b1822a369ac59ca5da55a4ecd12658d97) `sha256:cd80158af31ac1022993a75e149c808a412222c5689f0043b9e36aa2d62fca46`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [d37f51e0](https://github.com/openshift/egress-router-cni/commit/d37f51e057620bdee564f68dcfde955acf033d3e) `sha256:8585f217e8a2ee355d059e16001281253691c4c7ad36bb1f9a618c77c1dce20c`
* [etcd](https://github.com/openshift/etcd) git [bf6c0094](https://github.com/openshift/etcd/commit/bf6c0094589afdf6c814a28c24f8f1bb5a577816) `sha256:7f0e672422a7b2e84e4254eeb514b44ba1fa070eb162c998ae2cb155a9e71055`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [ffbf9c2a](https://github.com/openshift/cluster-api-provider-gcp/commit/ffbf9c2a410aa425c29c4628fa250d2e949b6876) `sha256:a1f595201f28ec03b0cf845c4a2ceb981ad3802c5ae45483c62a7369976c8a25`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [af299785](https://github.com/openshift/machine-api-provider-gcp/commit/af29978573161a98d41f1baae67d05da7398a646) `sha256:538b999e4a16acdb29f38e44426b7656af627f65f7b3df06bb764a78588522b8`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [3b9e6d19](https://github.com/openshift/gcp-pd-csi-driver/commit/3b9e6d19109ebfafa13f638f469071027f82b744) `sha256:cecc60b6aaca55fd00789e2ded4ac387acaea1e3f1bee615d83791f220f880a7`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [73d67a58](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/73d67a587c98f1e2aec3969c59a66458096cd80c) `sha256:97f3cc81b3f649ac056b370dc7767079d6e5d6b5f6fe765fe6cfbbf1fa00130b`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [ef8fcc28](https://github.com/openshift/cloud-provider-ibm/commit/ef8fcc288d9248cd149f181e7f5c896f4a10eb3b) `sha256:e40c344353772c057bbff40ce1b2dc463730a1778195dc5a59fb0036fec58506`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [f78abbb3](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/f78abbb3502a875b7ddf769cf6b7c1b8e3ebba29) `sha256:f8abcd0d6789dfd39dc728045c4379b39f1744b81523718116f187c0213a31d3`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [e6d299f7](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/e6d299f720a76dd25fcdc304d408f43c33a42fb6) `sha256:8a515e1e708ecd79186f31abdfec45024bc8bc7bee971d21bda565151c1ac1af`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [ce30b4f9](https://github.com/openshift/insights-runtime-extractor/commit/ce30b4f9bc3ec867b976886a5207d36c50a396d9) `sha256:04e53ef7e507bbeb9ecb4397147575c7258703a85add9ecee5c6d03cd0f856b5`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [ce30b4f9](https://github.com/openshift/insights-runtime-extractor/commit/ce30b4f9bc3ec867b976886a5207d36c50a396d9) `sha256:9abfb711d7afd3cd7b1121226945fee0ea48a61ac7bcd1f88404a9777978aceb`
* [ironic](https://github.com/openshift/ironic-image) git [f5123e09](https://github.com/openshift/ironic-image/commit/f5123e096a6c29f82d102ab78a9b700592c6cb8d) `sha256:4523aee9e56fe5a64d52a098d0461c4b562147cc00aa3ed01e7eab45a740a105`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [f8e41b2e](https://github.com/openshift/ironic-rhcos-downloader/commit/f8e41b2ed8915474a99e3eb34b54692afb0611da) `sha256:06507ab392ff9648ee8e60f269699e0ae86c48b43b9ba4ad3df6b0c5a20da6b8`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [486a0418](https://github.com/openshift/ironic-static-ip-manager/commit/486a041897d703d55ef59c98e2b20a01588a0b4c) `sha256:b84c794da8c165d5cc941f4229922035452251ca92ef13e6da0be44bbfe89687`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [38c16c46](https://github.com/openshift/kubernetes-metrics-server/commit/38c16c4698d131ab0e2da0d4b4b76d5322a89bab) `sha256:acd688c5135471262aa9cea1888ea6a478ad4feefd1ba7c97d083e172f721821`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [d12e2746](https://github.com/openshift/kube-rbac-proxy/commit/d12e274605248f6c59373240a7eae7a7a357dcb3) `sha256:d716ed70e483cadd892a70c1b2465194bcce98a6a209b5723421c5bfeb6fe18b`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [b5df9039](https://github.com/openshift/kube-state-metrics/commit/b5df90392fbb08eb4c48e8a07f35b34a4c846312) `sha256:2582fd1ef56f439ae9726e971414ffa498015a1f0c4bfebe99c23ebc1415ff71`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [72835e43](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/72835e43c7754356645e41031f3a99926b4d42e6) `sha256:0800c0c10022eb14a135b1d86d952b2ca3bccce3ce03f587073f989b6a7265e5`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [76dd5a6f](https://github.com/openshift/cloud-provider-kubevirt/commit/76dd5a6fa9e86573bf3dfb79be17edf832e3bae1) `sha256:919de15f1f4a81a3c39dddce3e32c1251169e7782180818d381cc06f7b6403bb`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [7a348422](https://github.com/openshift/image-customization-controller/commit/7a348422137de33a9bfa6368b3797686ff4e8f98) `sha256:3db436c41bce4eabd2e697cd39de40019b5e8162ce7ca2ccc96a49d01c616816`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [4bb2e206](https://github.com/openshift/multus-admission-controller/commit/4bb2e2069c3e4f11fbc4c1befd6dc1c41fa802b7) `sha256:ef4a767dedde22645887951c5dda15db3936ea8d83246fda5746133adee0bacf`
* [multus-cni](https://github.com/openshift/multus-cni) git [b4ec7d82](https://github.com/openshift/multus-cni/commit/b4ec7d8239ce4bd3ed949bce9816a013377b44c7) `sha256:07da53c63e433e360bf73345205805fa9d0a3c663e67b2f7f51419ee768fc6f8`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [b4ec7d82](https://github.com/openshift/multus-cni/commit/b4ec7d8239ce4bd3ed949bce9816a013377b44c7) `sha256:b16478f445138ac62e94705d6952369da10c28b2ace2e182adcaa2f93d4dc6f0`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [932bdaa4](https://github.com/openshift/multus-networkpolicy/commit/932bdaa4250d0a1db41a1a1fcac8192f2757211c) `sha256:431a3aaa740c06468e76b627603f1d268accf9f3774392b72bbee0c7ca9d3f49`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [08af4127](https://github.com/openshift/route-override-cni/commit/08af4127c77976510cad1c096d9aca977d8ae5af) `sha256:5666847cb97369f89e9bb964e59e840b8f7a6026001cdc4aaa5f0b9ea18e0201`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [d691040e](https://github.com/openshift/whereabouts-cni/commit/d691040e509bb20c26b5e8366c0d6f3bb45a5e02) `sha256:29ed5c2f119f7ce8117886042e523d31aea578d893cc54a305bbe7a738ca3e9b`
* [must-gather](https://github.com/openshift/must-gather) git [16ac27ee](https://github.com/openshift/must-gather/commit/16ac27eedcc79f5b57d77eb01e6b187b84fe7daa) `sha256:7db73eef46fd79c38252340e42af71cf10526bfd4f1284d80510bbd28d4d3fec`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [466a73ab](https://github.com/openshift/bond-cni/commit/466a73aba120221bc080e4bbb9857ce56a7b5cce) `sha256:310f3e1216af98f659a9ef696d08f33dc66eb03dd24d977b20b94573bf435fa1`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [5b233ea1](https://github.com/openshift/network-metrics-daemon/commit/5b233ea1d80733c1b00c6bad65dec0620dbf783a) `sha256:8693581cac1053cc9f69ac9399ded27a2fd0be575313efad5d731d12c5515606`
* [networking-console-plugin](https://github.com/openshift/networking-console-plugin) git [daad9020](https://github.com/openshift/networking-console-plugin/commit/daad90209a0d7ca20eff4fa67009f3771aebee9d) `sha256:f2d07b787a593e918c3581f5bed896afdfde2bd5ec7c2c6c1bf6b5e976bdc783`
* [oauth-server](https://github.com/openshift/oauth-server) git [f892602b](https://github.com/openshift/oauth-server/commit/f892602b822782e0080abc70c6cd1d178f11e684) `sha256:902a77704157672638e107a17a9a1446a457673bff4a296d9e4348ad64413cfe`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [831ab1bd](https://github.com/openshift/openshift-apiserver/commit/831ab1bd2e1cf4e2deacf8f243e22c34b89a38c5) `sha256:24a011a98929365a7900f19d7126f0b2f9b8394f5be71d33a5b0fb1a0853db98`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [5631cf49](https://github.com/openshift/openshift-controller-manager/commit/5631cf493b006cbc72a8600a7435813272d71940) `sha256:0f660bdb9f4dd920bb3d953a983bbcba1a1a16089d00ce3022358ce6606da5ce`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [0e12f5d6](https://github.com/openshift/openshift-state-metrics/commit/0e12f5d6df02b37b0353a747d144e8069c3d0c2a) `sha256:ff0fac989e758dd306f37fd0ba92368409c3725546a5754986db4cd86c3c82c1`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [f8bb5994](https://github.com/openshift/cloud-provider-openstack/commit/f8bb5994f3cee8ee2bb5cca25e3e9783ad7dd57c) `sha256:e8dd2de8ff72734be6402521860675d3516216cbf98eeb9b011a6056760bf64b`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [f8bb5994](https://github.com/openshift/cloud-provider-openstack/commit/f8bb5994f3cee8ee2bb5cca25e3e9783ad7dd57c) `sha256:80453870becce79c2e2bd24f409cfff7194c74a03cebf0aeddc016735ec44897`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [76198b24](https://github.com/openshift/cluster-api-provider-openstack/commit/76198b243458ca266eb8b87bbcf69a7b7c3eec7f) `sha256:eb9537cbb830b79569f4b3a5eba1a2f28b1372523d8d93e4db6c451331d279e6`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [58dbc048](https://github.com/openshift/openstack-resource-controller/commit/58dbc0482c144c21effee2476947889122a518eb) `sha256:dd1e2f3bebbedb341008e37b3a8fa299feaff4bb09a415c00b88808326daa50a`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [e7c2c09b](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/e7c2c09bd0507f8bd5a6dc3921024a379f4a8af0) `sha256:36be0349437c249280aa6ca9136e36422c4b657aad4e60876a5e27666b28890c`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [ab04496a](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/ab04496a6855098853048c957c499f2a63200f8e) `sha256:51311b17f1b6242e427eb7f6353b7b6a8a3b4d3a18f354157893d33d5103b7bd`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [279b5927](https://github.com/openshift/cloud-provider-powervs/commit/279b5927e540312bf3886267c9bcabc806d9f286) `sha256:45dc042e531b812c58aeed12784edb21a61a470fd49e9855597ca02fb89b51ff`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [e88cf81d](https://github.com/openshift/machine-api-provider-powervs/commit/e88cf81dd9ad174f395b86f9cdc40fa30cb06bf4) `sha256:07343bbb00a17d479f535c7e9c489097f1a91e8bd46a5ba54288d9543860eb49`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [6a36acbd](https://github.com/openshift/prometheus-operator/commit/6a36acbd5ecd5a308bc81267f3b0567f93377247) `sha256:5ace57c73e9707f8423e6d3aa0d4235fc1f4c41ce8460a7a444cd6e5f977ea4c`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [45dec4eb](https://github.com/openshift/node_exporter/commit/45dec4ebf58ec9fb7083411ee4b6d46c01140c5f) `sha256:37b5688b8e241f28c92cfcc4342207b3da12fedc574659bbbc1dcdb6e517ac00`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [6a36acbd](https://github.com/openshift/prometheus-operator/commit/6a36acbd5ecd5a308bc81267f3b0567f93377247) `sha256:ea0dcc1288137c2128ac5f1a0b3f5815138dd1cb3c594802e5ef407c6423c9d3`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [6a36acbd](https://github.com/openshift/prometheus-operator/commit/6a36acbd5ecd5a308bc81267f3b0567f93377247) `sha256:e072e4f5ad6405fdbe4d80ba1e0808bc2c3396915d331085ac8cd728c387f9e2`
* [telemeter](https://github.com/openshift/telemeter) git [a1dabee1](https://github.com/openshift/telemeter/commit/a1dabee1951bd2878719a6da9d5d4304332ef0d4) `sha256:bf8091b4718bc38df3aa6dcbd9afcb268f66db8b586bab2119a75352fb5ab60d`
* [tools](https://github.com/openshift/oc) git [74e525a6](https://github.com/openshift/oc/commit/74e525a6a4523a23a5db585c411943b0a0a338da) `sha256:a6b2e7e292a233fc7966644262971d4542acdfc5311edea6dc29b6a7374a6080`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [a6c21eee](https://github.com/openshift/volume-data-source-validator/commit/a6c21eee63d1fae58b63d8493aeb0fd662d1c91e) `sha256:8ec2a88510f8a058d3f00912e701e41a3b0bef84cdcf29ef50a7445e3e299c2c`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/fa8eb3d7b72d49f8ea01a30f09037d7e9a53081e)

* NO-ISSUE: Refresh RPM lockfiles RPM lockfile refresh [SECURITY] [#10523](https://github.com/openshift/assisted-service/pull/10523)
* [MGMT-24443](https://issues.redhat.com/browse/MGMT-24443): watch configmap for CNI config update [#10384](https://github.com/openshift/assisted-service/pull/10384)
* [OCPBUGS-91974](https://issues.redhat.com/browse/OCPBUGS-91974): Stop setting DevPreviewNoUpgrade for TNF clusters [#10507](https://github.com/openshift/assisted-service/pull/10507)
* [MGMT-24635](https://issues.redhat.com/browse/MGMT-24635): Incorrect grammar in OpenShift AI GPU validation message [#10511](https://github.com/openshift/assisted-service/pull/10511)
* [ACM-35864](https://issues.redhat.com/browse/ACM-35864): CVE-2026-39828/39829/39830 Bump golang.org/x/crypto to v0.52.0 [#10495](https://github.com/openshift/assisted-service/pull/10495)
* [MGMT-24453](https://issues.redhat.com/browse/MGMT-24453): upgrade to golang 1.26 for assisted-service [#10396](https://github.com/openshift/assisted-service/pull/10396)
* [Full changelog](https://github.com/openshift/assisted-service/compare/0880ae61dcd8d7e85a2f6bfecd00957f398763a8...fa8eb3d7b72d49f8ea01a30f09037d7e9a53081e)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/bdf48b99ec8ca8ce67669fabd59a9669faa0e64e)

* NO-ISSUE: Refresh RPM lockfiles RPM lockfile refresh [SECURITY] [#1520](https://github.com/openshift/assisted-installer-agent/pull/1520)
* NO-ISSUE: Update module github.com/golangci/golangci-lint to v2.12.2 [#1515](https://github.com/openshift/assisted-installer-agent/pull/1515)
* [MGMT-24453](https://issues.redhat.com/browse/MGMT-24453): upgrade to golang 1.26 [#1509](https://github.com/openshift/assisted-installer-agent/pull/1509)
* [MGMT-22787](https://issues.redhat.com/browse/MGMT-22787): Log inventory when it's too big [#1510](https://github.com/openshift/assisted-installer-agent/pull/1510)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/23e48fc717c5f55782b021a9e122367eaab0e08f...bdf48b99ec8ca8ce67669fabd59a9669faa0e64e)


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/17da3a80f7c338e39f67568842af373fbd3be284)

* AGENT-1519 | [Below-the-sea UI] Allow the user to select IPv6 in the Networking Stack Type field (#3732) [#3732](https://github.com/openshift-assisted/assisted-installer-ui/pull/3732)
* Bump http-proxy-middleware from 2.0.9 to 2.0.10 (#3799) [#3799](https://github.com/openshift-assisted/assisted-installer-ui/pull/3799)
* chore(deps): update dependency serialize-javascript to ^7.0.6 (#3797) [#3797](https://github.com/openshift-assisted/assisted-installer-ui/pull/3797)
* Fix nested expandable sections (#3793) [#3793](https://github.com/openshift-assisted/assisted-installer-ui/pull/3793)
* [MGMT-23172](https://issues.redhat.com/browse/MGMT-23172): Improve the UX of the operators tab (#3780) [#3780](https://github.com/openshift-assisted/assisted-installer-ui/pull/3780)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/e7863bcc2000a66509762f36cc7b913bae813d00...17da3a80f7c338e39f67568842af373fbd3be284)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/90f95c204e7897f567643951b36ed2010f658469)

* :bug: OCPBUGS-87525: Updating ose-aws-cluster-api-controllers-container image to be consistent with ART for 5.0 [#612](https://github.com/openshift/cluster-api-provider-aws/pull/612)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/77b3287fd6d469dc4fe8f57ad6db25fa30a4ad45...90f95c204e7897f567643951b36ed2010f658469)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/15814dd6702eb673cedb9bdc116a112363e6559a)

* [OCPBUGS-90151](https://issues.redhat.com/browse/OCPBUGS-90151): hack/update-metadata.sh: allow MAX_OCP_VERSION override [#571](https://github.com/openshift/csi-operator/pull/571)
* [STOR-2996](https://issues.redhat.com/browse/STOR-2996): Sync gcp pd csi driver operator to legacy subdir [#570](https://github.com/openshift/csi-operator/pull/570)
* [OCPBUGS-87449](https://issues.redhat.com/browse/OCPBUGS-87449): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 5.0 [#566](https://github.com/openshift/csi-operator/pull/566)
* [STOR-2920](https://issues.redhat.com/browse/STOR-2920): Bump OLM metadata to 5.0 [#568](https://github.com/openshift/csi-operator/pull/568)
* [Full changelog](https://github.com/openshift/csi-operator/compare/d768b7959da78a559399bb00554a133631e7f847...15814dd6702eb673cedb9bdc116a112363e6559a)


### [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws/tree/9d3e33c99a323659ae02d1121fe36141ccf292f0)

* [OCPBUGS-87402](https://issues.redhat.com/browse/OCPBUGS-87402): Updating aws-karpenter-provider-aws-container image to be consistent with ART for 5.0 [#30](https://github.com/openshift/aws-karpenter-provider-aws/pull/30)
* [Full changelog](https://github.com/openshift/aws-karpenter-provider-aws/compare/f0be9c72e5bf25caeb2ca45c14e67e4d397a52cb...9d3e33c99a323659ae02d1121fe36141ccf292f0)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/015a38c0b149fbbc22d261c162493fd801018d4d)

* NO-ISSUE: Add opt-in pprof endpoint to machine-controller-manager [#189](https://github.com/openshift/machine-api-provider-aws/pull/189)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/2e4196b65473ae99bc9bbedc0bc7168ed3da3914...015a38c0b149fbbc22d261c162493fd801018d4d)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/2aea5dfd437a32bd8e543c2e938af43eb1771fce)

* [OCPBUGS-88486](https://issues.redhat.com/browse/OCPBUGS-88486): UPSTREAM: 10458: CVE-2026-39821: x/net v0.55.0 [#191](https://github.com/openshift/cloud-provider-azure/pull/191)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/f10dd9c791c0204da9a4e7620f7998e1c20de449...2aea5dfd437a32bd8e543c2e938af43eb1771fce)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/ca3d747de321b88a2c606e546851d1841d2fab9f)

* [CNTRLPLANE-3660](https://issues.redhat.com/browse/CNTRLPLANE-3660): Add AGENTS.md, ARCHITECTURE.md, CLAUDE.md, update CONTRIBUTING.md [#49](https://github.com/openshift/azure-kubernetes-kms/pull/49)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/5367d3988bf7c629254ef77dbbbea058f48fdc47...ca3d747de321b88a2c606e546851d1841d2fab9f)


### [baremetal-installer](https://github.com/openshift/installer/tree/4644679c432fba5e65712308000ef81c365a7f2f)

* [OCPBUGS-93627](https://issues.redhat.com/browse/OCPBUGS-93627): destroy/aws: delete vpc endpoints earlier [#10661](https://github.com/openshift/installer/pull/10661)
* [OCPBUGS-91975](https://issues.redhat.com/browse/OCPBUGS-91975), [OCPBUGS-91976](https://issues.redhat.com/browse/OCPBUGS-91976): Include bootstrap gather in agent-gather archive [#10501](https://github.com/openshift/installer/pull/10501)
* no-jira: dynamically set CVO upgrade version [#10655](https://github.com/openshift/installer/pull/10655)
* [CORS-4334](https://issues.redhat.com/browse/CORS-4334): Konnectivity [#10344](https://github.com/openshift/installer/pull/10344)
* [OCPBUGS-88303](https://issues.redhat.com/browse/OCPBUGS-88303): pkg/types/gcp: apply defaultMachinePlatform values [#10617](https://github.com/openshift/installer/pull/10617)
* NO-ISSUE: Add AI skill for modifying install-config [#10645](https://github.com/openshift/installer/pull/10645)
* [OCPBUGS-90537](https://issues.redhat.com/browse/OCPBUGS-90537): allow agent TUI to be shown also for rhcos10 base ISO [#10640](https://github.com/openshift/installer/pull/10640)
* [Full changelog](https://github.com/openshift/installer/compare/fec93616c1cc6fe9b58d2215a73f33afcb86f22c...4644679c432fba5e65712308000ef81c365a7f2f)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/72a5a4676668c7105203aa7ec1b33a74ff23f75e)

* [OCPBUGS-87029](https://issues.redhat.com/browse/OCPBUGS-87029): nutanix: fix ccoctl to accept directory for --credentials-source-filepath [#1036](https://github.com/openshift/cloud-credential-operator/pull/1036)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/9d6f071cb9f054de86e8e9c1b8e8b62b05670ceb...72a5a4676668c7105203aa7ec1b33a74ff23f75e)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/0b49df2bc4b10110463f1aa2a5fc475ebaeef9ab)

* [CORENET-7297](https://issues.redhat.com/browse/CORENET-7297): Add CodeRabbit AI review configuration [#227](https://github.com/openshift/cloud-network-config-controller/pull/227)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/5e28e1e5708c26308b1ec495ef6d55a3bf44cc51...0b49df2bc4b10110463f1aa2a5fc475ebaeef9ab)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/60f4dee2ea47070dbc5bf34042db50fb2e63f7c1)

* [CNTRLPLANE-3720](https://issues.redhat.com/browse/CNTRLPLANE-3720): Add human and agent context files [#933](https://github.com/openshift/cluster-authentication-operator/pull/933)
* NO-JIRA: Bump library-go [#932](https://github.com/openshift/cluster-authentication-operator/pull/932)
* NO-JIRA: Update openshift dependencies [#931](https://github.com/openshift/cluster-authentication-operator/pull/931)
* NO-JIRA: add kms preflight to NP to allow egress [#928](https://github.com/openshift/cluster-authentication-operator/pull/928)
* NO-JIRA: Store authentication-operator image as OPERATOR_IMAGE [#927](https://github.com/openshift/cluster-authentication-operator/pull/927)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/54664d4da74f669aad4cf90b7f2c9126a814c066...60f4dee2ea47070dbc5bf34042db50fb2e63f7c1)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/f8fc286e8fe102766b191410e66dfc2554bbe17f)

* [OCPBUGS-87827](https://issues.redhat.com/browse/OCPBUGS-87827): only use central TLS profile when the cluster says to [#378](https://github.com/openshift/cluster-autoscaler-operator/pull/378)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/5c8643284941ebd66a9d6aab4637e6e555919a9e...f8fc286e8fe102766b191410e66dfc2554bbe17f)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/b1ff82e4955de63cf5c93cea981c17c1b0926658)

* [METAL-1833](https://issues.redhat.com/browse/METAL-1833): Add otp tags to ironic tests [#624](https://github.com/openshift/cluster-baremetal-operator/pull/624)
* [METAL-1833](https://issues.redhat.com/browse/METAL-1833): Remove openshift-tests-private from vendor directory [#621](https://github.com/openshift/cluster-baremetal-operator/pull/621)
* [METAL-1833](https://issues.redhat.com/browse/METAL-1833): Add ironic_* tests to CBO test extension [#615](https://github.com/openshift/cluster-baremetal-operator/pull/615)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/30b7dd35adfc5c293113f72ac1bf3ae9beddfc41...b1ff82e4955de63cf5c93cea981c17c1b0926658)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/60a95f868ee5fd743ad6b4976f84a3c833368286)

* NO-JIRA: Fix races in machineset sync units [#551](https://github.com/openshift/cluster-capi-operator/pull/551)
* NO-JIRA: Fix a race in MachineSet e2es [#605](https://github.com/openshift/cluster-capi-operator/pull/605)
* [OCPCLOUD-3455](https://issues.redhat.com/browse/OCPCLOUD-3455): refine AWS CredentialsRequest permissions [#601](https://github.com/openshift/cluster-capi-operator/pull/601)
* [OCPBUGS-91667](https://issues.redhat.com/browse/OCPBUGS-91667): Bump capi-installer resync to 12 hours [#608](https://github.com/openshift/cluster-capi-operator/pull/608)
* [OCPCLOUD-3009](https://issues.redhat.com/browse/OCPCLOUD-3009): Bootstrap OTE framework [#597](https://github.com/openshift/cluster-capi-operator/pull/597)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/33e0119926f083a2941c8ee35d128d74a68651b9...60a95f868ee5fd743ad6b4976f84a3c833368286)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/4f8df24f1c4176888643e2d3cedd6a33ae76fd4b)

* NO-JIRA: manifests: Shift operator Deployment and ClusterOperator after CredentialsRequests [#478](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/478)
* [TRT-2754](https://issues.redhat.com/browse/TRT-2754): Revert "Updates clusteroperator_controller progressing" [#477](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/477)
* [OCPBUGS-64852](https://issues.redhat.com/browse/OCPBUGS-64852): Updates clusteroperator_controller progressing [#473](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/473)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/d3f8b6aa59a4e308824557b0eeb5f3dd40a2848f...4f8df24f1c4176888643e2d3cedd6a33ae76fd4b)


### [cluster-config-api](https://github.com/openshift/api/tree/3d22ba1007502a22d83aebecb29457d8ef124c5a)

* [SPLAT-2588](https://issues.redhat.com/browse/SPLAT-2588): Promoting AWSServiceLBNetworkSecurityGroup on hypershift [#2838](https://github.com/openshift/api/pull/2838)
* [STOR-2771](https://issues.redhat.com/browse/STOR-2771): Add SELinuxMountGAReadiness FG [#2882](https://github.com/openshift/api/pull/2882)
* [OCPEDGE-2746](https://issues.redhat.com/browse/OCPEDGE-2746): Add MutableTopology feature gated infra spec.controlPlaneTopology [#2891](https://github.com/openshift/api/pull/2891)
* [OCPNODE-4125](https://issues.redhat.com/browse/OCPNODE-4125): Introduce to v1 CRIOCredentialProviderConfig [#2725](https://github.com/openshift/api/pull/2725)
* [STOR-2966](https://issues.redhat.com/browse/STOR-2966): Promote ExternalSnapshotMetadata feature gate to TechPreviewNoUpgrade [#2887](https://github.com/openshift/api/pull/2887)
* [OCPBUGS-63219](https://issues.redhat.com/browse/OCPBUGS-63219): Add protocol to AWS NLB parameters [#2661](https://github.com/openshift/api/pull/2661)
* [SSCSI-245](https://issues.redhat.com/browse/SSCSI-245): Add Secrets Store CSI driver configuration to ClusterCSIDriver API [#2846](https://github.com/openshift/api/pull/2846)
* [OCPCLOUD-3368](https://issues.redhat.com/browse/OCPCLOUD-3368): Adding cabilities for crdcompatibilitychecker and capi CRs [#2884](https://github.com/openshift/api/pull/2884)
* [SPLAT-2588](https://issues.redhat.com/browse/SPLAT-2588): fix hypershift topology variant to match Sippy classification [#2899](https://github.com/openshift/api/pull/2899)
* [Full changelog](https://github.com/openshift/api/compare/5346161d1bf2a4b45d998678f00e1e8d224acf7b...3d22ba1007502a22d83aebecb29457d8ef124c5a)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/a346b395960addcf7140551c78f86281d92d7dd2)

* [CNTRLPLANE-2270](https://issues.redhat.com/browse/CNTRLPLANE-2270): OTE scaffolding and E2E tests [#492](https://github.com/openshift/cluster-config-operator/pull/492)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/2697a43188018b6e76a5acbd672d59bc2f77b79e...a346b395960addcf7140551c78f86281d92d7dd2)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/7432b62cb6c80c86918f26c9d5d85e31fb863e04)

* NO-JIRA: update build-machinery-go to pull in updated verify [#1642](https://github.com/openshift/cluster-etcd-operator/pull/1642)
* NO-JIRA: quote bootstrap IP in bootkube etcd endpoints manifest [#1640](https://github.com/openshift/cluster-etcd-operator/pull/1640)
* [OCPEDGE-2770](https://issues.redhat.com/browse/OCPEDGE-2770): fix: handle default-port BMC URLs in Phase 3 address matching [#1638](https://github.com/openshift/cluster-etcd-operator/pull/1638)
* [OCPBUGS-88318](https://issues.redhat.com/browse/OCPBUGS-88318): fix cluster-restore-tnf.sh IP auto-detection when hostname diverges from node name [#1633](https://github.com/openshift/cluster-etcd-operator/pull/1633)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/c0280776d283b456872f0b700e2e124e04740a4f...7432b62cb6c80c86918f26c9d5d85e31fb863e04)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/d30e780bad20389fd85eaac6dbb6e1ffae958bbe)

* [CNTRLPLANE-3658](https://issues.redhat.com/browse/CNTRLPLANE-3658): Add AGENTS.md, ARCHITECTURE.md, CLAUDE.md, update CONTRIBUTING.md [#1352](https://github.com/openshift/cluster-image-registry-operator/pull/1352)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/b52dc51982469572e839b9b7f6ef7052a75d1d82...d30e780bad20389fd85eaac6dbb6e1ffae958bbe)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/8908668eac379bd29431c70f195618efa0337522)

* Revert "NE-2664: deploy haproxy as sidecar (#1439)" [#1483](https://github.com/openshift/cluster-ingress-operator/pull/1483)
* [NE-2664](https://issues.redhat.com/browse/NE-2664): deploy haproxy as sidecar [#1439](https://github.com/openshift/cluster-ingress-operator/pull/1439)
* [OCPBUGS-90505](https://issues.redhat.com/browse/OCPBUGS-90505): Guard OLM watches with capability check in gatewayclass controller [#1479](https://github.com/openshift/cluster-ingress-operator/pull/1479)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/bf13f251347308b80b170582de455c59cb0510be...8908668eac379bd29431c70f195618efa0337522)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/5e0353a93bfa9a7dbe3a5afe9e9e3b0aa66fe585)

* NO-JIRA: Bump library-go [#2212](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2212)
* NO-JIRA: Update openshift dependencies [#2211](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2211)
* NO-JIRA: add kms preflight to NP to allow egress [#2209](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2209)
* [CNTRLPLANE-3518](https://issues.redhat.com/browse/CNTRLPLANE-3518): add openshift/kms parent to kms test suites [#2195](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2195)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/e3c762513675e506be2be1e219f1ef621db18275...5e0353a93bfa9a7dbe3a5afe9e9e3b0aa66fe585)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/2b502a5c620bf10837655f72eec520d4078d5fa7)

* [OCPBUGS-92085](https://issues.redhat.com/browse/OCPBUGS-92085): set Prometheus shards value explicitly [#2972](https://github.com/openshift/cluster-monitoring-operator/pull/2972)
* [MON-4527](https://issues.redhat.com/browse/MON-4527): ClusterMonitoring NodeExporterConfig logic [#2919](https://github.com/openshift/cluster-monitoring-operator/pull/2919)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2971](https://github.com/openshift/cluster-monitoring-operator/pull/2971)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2967](https://github.com/openshift/cluster-monitoring-operator/pull/2967)
* NO-JIRA: test: add alertmanager test to catch broken UI embeds during automated bumps [#2968](https://github.com/openshift/cluster-monitoring-operator/pull/2968)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/5197396a55733cbc359e3d34706cf99da64b8c5d...2b502a5c620bf10837655f72eec520d4078d5fa7)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/a95f01f7abe520b3c315d1cb262840fb686126b7)

* [OCPBUGS-81741](https://issues.redhat.com/browse/OCPBUGS-81741): Watch Network and Infrastructure in proxyconfig controller [#2968](https://github.com/openshift/cluster-network-operator/pull/2968)
* [CORENET-7297](https://issues.redhat.com/browse/CORENET-7297): Add CodeRabbit configuration for automated PR reviews [#3035](https://github.com/openshift/cluster-network-operator/pull/3035)
* NO-JIRA: Update openshift/api and openshift/client-go to latest [#3023](https://github.com/openshift/cluster-network-operator/pull/3023)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/c376140ed1842c6a5f78cb74c55b4b49ba212041...a95f01f7abe520b3c315d1cb262840fb686126b7)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/8b4b292a427c90a45988432380c37196fba7e9d7)

* [CNF-24293](https://issues.redhat.com/browse/CNF-24293): Let cri-o manage the GOMAXPROC for burstable pods [#1547](https://github.com/openshift/cluster-node-tuning-operator/pull/1547)
* NO-JIRA: cleanup: remove utils/errors [#1536](https://github.com/openshift/cluster-node-tuning-operator/pull/1536)
* [OCPBUGS-91745](https://issues.redhat.com/browse/OCPBUGS-91745): e2e: fix: clear hugepages before switching kernelPageSize to 4k [#1550](https://github.com/openshift/cluster-node-tuning-operator/pull/1550)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/8978bc513cff097aada40acfeda736c85d6f8ca5...8b4b292a427c90a45988432380c37196fba7e9d7)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/ec1966f2ba07c78e248fe218cbd15564d828a8dc)

* NO-JIRA: Bump library-go [#723](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/723)
* NO-JIRA: Update openshift dependencies [#722](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/722)
* NO-JIRA: add preflight command [#714](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/714)
* NO-JIRA: add kms preflight to NP to allow egress [#720](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/720)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/38149448d288b1fa23255b9175b781cc2ad009fa...ec1966f2ba07c78e248fe218cbd15564d828a8dc)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/050c1ee6aeb0838daf75858fd853cca1e0098fa9)

* NO-JIRA: update OWNERS file [#190](https://github.com/openshift/cluster-policy-controller/pull/190)
* [OCPBUGS-90053](https://issues.redhat.com/browse/OCPBUGS-90053): add serviceAccountToken volume type to psalabelsyncer [#189](https://github.com/openshift/cluster-policy-controller/pull/189)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/bb429f5b2a7d77791110b06d8ec5c017183e3ab9...050c1ee6aeb0838daf75858fd853cca1e0098fa9)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/eee95babd52053191e29355108f7daf149dfbf8f)

* [OCPBUGS-87454](https://issues.redhat.com/browse/OCPBUGS-87454): Updating ose-cluster-samples-operator-container image to be consistent with ART for 5.0 [#700](https://github.com/openshift/cluster-samples-operator/pull/700)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/0bfb6b3c2f558c9098c438082bffb44eb8f07099...eee95babd52053191e29355108f7daf149dfbf8f)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/1715686df95688a690e8071c88112aaf3983f4c8)

* [OCPBUGS-88299](https://issues.redhat.com/browse/OCPBUGS-88299): Let gcp-pd csi driver operator to use SCC `hostnetwork-v2` [#713](https://github.com/openshift/cluster-storage-operator/pull/713)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/ec09e31dea1bdcdd65c2ba34f588603b692a2896...1715686df95688a690e8071c88112aaf3983f4c8)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/dd0a8410467a09cd181216e191825d4088ea2115)

* [OTA-1966](https://issues.redhat.com/browse/OTA-1966): Add readiness checks and wire into proposal controller [#1395](https://github.com/openshift/cluster-version-operator/pull/1395)
* [OCPBUGS-60579](https://issues.redhat.com/browse/OCPBUGS-60579): install: Remove manual BoundServiceAccountTokenVolume configuration [#1411](https://github.com/openshift/cluster-version-operator/pull/1411)
* [OTA-1956](https://issues.redhat.com/browse/OTA-1956): pkg/payload: Add Images map and tolerate unknown template fields during upgrades [#1410](https://github.com/openshift/cluster-version-operator/pull/1410)
* [OCPBUGS-36246](https://issues.redhat.com/browse/OCPBUGS-36246): Improve resource merge diffs [#1409](https://github.com/openshift/cluster-version-operator/pull/1409)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/810bfc18fc62c70e2163f59e8d215d344b420d70...dd0a8410467a09cd181216e191825d4088ea2115)


### [console](https://github.com/openshift/console/tree/c7f0a381cc07df0b368936505f6c24fa91d83849)

* [CONSOLE-5235](https://issues.redhat.com/browse/CONSOLE-5235): Migrate basic app Cypress e2e tests to Playwright [#16431](https://github.com/openshift/console/pull/16431)
* [CONSOLE-4951](https://issues.redhat.com/browse/CONSOLE-4951): Add Health tab to Node View, remove events tab [#16581](https://github.com/openshift/console/pull/16581)
* [CONSOLE-5271](https://issues.redhat.com/browse/CONSOLE-5271): Address docs review feedback from PR #16551 [#16655](https://github.com/openshift/console/pull/16655)
* [OCPBUGS-85485](https://issues.redhat.com/browse/OCPBUGS-85485): Append id_token_hint to OIDC logout redirect URL [#16548](https://github.com/openshift/console/pull/16548)
* [CONSOLE-5315](https://issues.redhat.com/browse/CONSOLE-5315): Get Node inventory card items from extensions [#16582](https://github.com/openshift/console/pull/16582)
* [OCPBUGS-90555](https://issues.redhat.com/browse/OCPBUGS-90555): [release-5.0] webpack-dev-server: Information disclosure and denial of service via improper proxy configuration [#16667](https://github.com/openshift/console/pull/16667)
* [OCPBUGS-81749](https://issues.redhat.com/browse/OCPBUGS-81749): Add SSAR checks to gate OLM actions [#16554](https://github.com/openshift/console/pull/16554)
* [HELM-728](https://issues.redhat.com/browse/HELM-728): Persist secrets for Helm upgrade [#16432](https://github.com/openshift/console/pull/16432)
* [CONSOLE-4950](https://issues.redhat.com/browse/CONSOLE-4950): Add high availability section to Configuration [#16555](https://github.com/openshift/console/pull/16555)
* [CONSOLE-5277](https://issues.redhat.com/browse/CONSOLE-5277): Improve ResourceName data-test uniqueness and fix e2e test patterns [#16679](https://github.com/openshift/console/pull/16679)
* [CONSOLE-5277](https://issues.redhat.com/browse/CONSOLE-5277): Migrate console e2e CRUD tests to Playwright [#16556](https://github.com/openshift/console/pull/16556)
* [OCPBUGS-91965](https://issues.redhat.com/browse/OCPBUGS-91965): Add catalog item-type for OLMv1 operator catalog [#16666](https://github.com/openshift/console/pull/16666)
* [OCPBUGS-59569](https://issues.redhat.com/browse/OCPBUGS-59569): Disable create button until CRD is available [#16633](https://github.com/openshift/console/pull/16633)
* [OCPBUGS-87201](https://issues.redhat.com/browse/OCPBUGS-87201): Fix RoleBindings tab error for non-cluster-admin users [#16639](https://github.com/openshift/console/pull/16639)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/f01f9651452450506e9833e2e75b7eb24ff443c1...c7f0a381cc07df0b368936505f6c24fa91d83849)


### [console-operator](https://github.com/openshift/console-operator/tree/58e10b0ac1a23d864ee9eae2631c705c3b670a4c)

* [OCPBUGS-91663](https://issues.redhat.com/browse/OCPBUGS-91663): Clean up old temp directories in downloads pod [#1176](https://github.com/openshift/console-operator/pull/1176)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console-operator/compare/014243ce9349d82c4f97f8cf934dad253a4ec1ad...58e10b0ac1a23d864ee9eae2631c705c3b670a4c)


### [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata/tree/239703c637e005cf785892d214d219add70e3533)

* [STOR-2965](https://issues.redhat.com/browse/STOR-2965): Rebase to v1.0.0 for OCP 5.0 [#18](https://github.com/openshift/csi-external-snapshot-metadata/pull/18)
* [Full changelog](https://github.com/openshift/csi-external-snapshot-metadata/compare/42ffa2027dd0195d7bf1a31ae1eb51140fde949f...239703c637e005cf785892d214d219add70e3533)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/1a542ecb49b1b26ea7ecd6344a9ebe7dbe09b6b6)

* [OCPBUGS-87279](https://issues.redhat.com/browse/OCPBUGS-87279): Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART for 5.0 [#120](https://github.com/openshift/cloud-provider-gcp/pull/120)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/808c2a2d59dc0584d31484fe49085ba1de7bed74...1a542ecb49b1b26ea7ecd6344a9ebe7dbe09b6b6)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/936b1710729592015497bea76b27f787ec742f3e)

* [OCPBUGS-88299](https://issues.redhat.com/browse/OCPBUGS-88299): Avoid controller pods run as root [#194](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/194)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/af203c69941c7c78503e67947db679ae6e147ebd...936b1710729592015497bea76b27f787ec742f3e)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/a466682e3867da746be24d7d56c6641612721d6c)

* [OCPBUGS-84961](https://issues.redhat.com/browse/OCPBUGS-84961): UPSTREAM: &lt;carry&gt;: fix kubernetes/conformance to filter on [Conformance] label [#2694](https://github.com/openshift/kubernetes/pull/2694)
* [AUTOSCALE-812](https://issues.redhat.com/browse/AUTOSCALE-812): Add NodeSelectorAdjuster admission plugin for standalone clusters [#2695](https://github.com/openshift/kubernetes/pull/2695)
* [Full changelog](https://github.com/openshift/kubernetes/compare/d8d517e6bbe7cf7359026cac26bb96ea45e18806...a466682e3867da746be24d7d56c6641612721d6c)


### [hypershift](https://github.com/openshift/hypershift/tree/c180b15368bd8d15da91460440a0026692e34e03)

* NO-JIRA: docs: add required pod-security annotation for GCP hosted clusters [#8850](https://github.com/openshift/hypershift/pull/8850)
* [CNTRLPLANE-3716](https://issues.redhat.com/browse/CNTRLPLANE-3716): Update GitHub Actions docs with slash-command workflows [#8822](https://github.com/openshift/hypershift/pull/8822)
* [OSDOCS-19432](https://issues.redhat.com/browse/OSDOCS-19432): docs: add cluster capabilities how-to and contributor guide [#8371](https://github.com/openshift/hypershift/pull/8371)
* [OCPBUGS-76530](https://issues.redhat.com/browse/OCPBUGS-76530): Fix intermittent etcd peer communication failures [#8479](https://github.com/openshift/hypershift/pull/8479)
* [OCPBUGS-81312](https://issues.redhat.com/browse/OCPBUGS-81312): fix(cpo): use KubeAPIServerDNSName for OAuth LoginURL when set [#8433](https://github.com/openshift/hypershift/pull/8433)
* [OCPBUGS-84114](https://issues.redhat.com/browse/OCPBUGS-84114), [OSASINFRA-4368](https://issues.redhat.com/browse/OSASINFRA-4368): Update CAPO to latest stable release [#8687](https://github.com/openshift/hypershift/pull/8687)
* [CNTRLPLANE-597](https://issues.redhat.com/browse/CNTRLPLANE-597): Surface HCCO reconciliation failures in HostedCluster status [#8340](https://github.com/openshift/hypershift/pull/8340)
* [OCPBUGS-92013](https://issues.redhat.com/browse/OCPBUGS-92013): fix NodePool stuck in UpdatingVersion/UpdatingConfig due to stale conversion-data annotation [#8821](https://github.com/openshift/hypershift/pull/8821)
* [CNTRLPLANE-3526](https://issues.redhat.com/browse/CNTRLPLANE-3526): Add spec.monitoring API for metrics forwarding [#8626](https://github.com/openshift/hypershift/pull/8626)
* NO-JIRA: add blog section with June 2026 progress report [#8816](https://github.com/openshift/hypershift/pull/8816)
* [OCPBUGS-91656](https://issues.redhat.com/browse/OCPBUGS-91656): fix(test): add retry logic to GetLogs in Karpenter kubelet propagatio… [#8805](https://github.com/openshift/hypershift/pull/8805)
* [OCPBUGS-86415](https://issues.redhat.com/browse/OCPBUGS-86415): Use canonical image for kube-apiserver-proxy static pod [#8742](https://github.com/openshift/hypershift/pull/8742)
* [OCPBUGS-92034](https://issues.redhat.com/browse/OCPBUGS-92034): fix registry override matching for digest and tag separators [#8824](https://github.com/openshift/hypershift/pull/8824)
* [OCPBUGS-91997](https://issues.redhat.com/browse/OCPBUGS-91997): Apply MetricsSet relabel configs to KAS ServiceMonitor [#8715](https://github.com/openshift/hypershift/pull/8715)
* [OCPBUGS-91650](https://issues.redhat.com/browse/OCPBUGS-91650): bump consolidateAfter to 60s in karpenter e2e base NodePool [#8820](https://github.com/openshift/hypershift/pull/8820)
* [CNTRLPLANE-596](https://issues.redhat.com/browse/CNTRLPLANE-596): Add --kubeconfig flag to HyperShift and HCP CLI [#8402](https://github.com/openshift/hypershift/pull/8402)
* NO-JIRA: Exclude generated delegating client from codecov [#8825](https://github.com/openshift/hypershift/pull/8825)
* [CNTRLPLANE-3276](https://issues.redhat.com/browse/CNTRLPLANE-3276): Add Azure ExternalPrivateService and endpoint access transition test [#8718](https://github.com/openshift/hypershift/pull/8718)
* [OCPBUGS-57453](https://issues.redhat.com/browse/OCPBUGS-57453): fix(cpo): use Status.DNSZoneID before querying AWS Route53 [#8615](https://github.com/openshift/hypershift/pull/8615)
* [CNTRLPLANE-2916](https://issues.redhat.com/browse/CNTRLPLANE-2916): restore conditional deletion of openshift-ingress NetworkPolicy [#8754](https://github.com/openshift/hypershift/pull/8754)
* [CNTRLPLANE-3352](https://issues.redhat.com/browse/CNTRLPLANE-3352): fix GHA reusable workflow for fork PRs [#8818](https://github.com/openshift/hypershift/pull/8818)
* [CNTRLPLANE-502](https://issues.redhat.com/browse/CNTRLPLANE-502): Add CRD breaking changes validation to HyperShift CI [#8535](https://github.com/openshift/hypershift/pull/8535)
* NO-JIRA: chore(deps): weekly dependabot consolidation [#8784](https://github.com/openshift/hypershift/pull/8784)
* [CNTRLPLANE-3352](https://issues.redhat.com/browse/CNTRLPLANE-3352): force HTTPS for GHA plugin dependency clones [#8815](https://github.com/openshift/hypershift/pull/8815)
* [OCPBUGS-90663](https://issues.redhat.com/browse/OCPBUGS-90663): fix(test): use Eventually for auth-config ConfigMap assertions [#8799](https://github.com/openshift/hypershift/pull/8799)
* NO-JIRA: docs: Add private topology DNS architecture documentation [#8803](https://github.com/openshift/hypershift/pull/8803)
* [CNTRLPLANE-3145](https://issues.redhat.com/browse/CNTRLPLANE-3145): refactor(hostedcluster): segregate reconcile loop into error-collecting blocks [#7908](https://github.com/openshift/hypershift/pull/7908)
* [OCPBUGS-86949](https://issues.redhat.com/browse/OCPBUGS-86949): Guard HCCO KubeletConfig CM deletion against transient source absence [#8672](https://github.com/openshift/hypershift/pull/8672)
* NO-JIRA: fix(ci): switch to openshift-developer plugin bundle for GHA workflows [#8809](https://github.com/openshift/hypershift/pull/8809)
* [CNTRLPLANE-3611](https://issues.redhat.com/browse/CNTRLPLANE-3611): propagate tls profile to aws-pod-identity-webhook [#8713](https://github.com/openshift/hypershift/pull/8713)
* NO-JIRA: fix(ci): increase reusable workflow timeout to 90 minutes [#8797](https://github.com/openshift/hypershift/pull/8797)
* [OCPBUGS-55621](https://issues.redhat.com/browse/OCPBUGS-55621): Replace konnectivity Dial with DialContext in konnectivity-https-proxy/cmd.go [#8550](https://github.com/openshift/hypershift/pull/8550)
* [OCPBUGS-85585](https://issues.redhat.com/browse/OCPBUGS-85585): tighten registry override matching to strict longest-prefix across release-image consumers [#8509](https://github.com/openshift/hypershift/pull/8509)
* NO-JIRA: fix(ci): add --verbose flag required by stream-json output format [#8796](https://github.com/openshift/hypershift/pull/8796)
* [CNTRLPLANE-3568](https://issues.redhat.com/browse/CNTRLPLANE-3568): test(e2e): verify AWS additional-tags propagation to guest infrastruc… [#8712](https://github.com/openshift/hypershift/pull/8712)
* ci: stream Claude output in GHA workflow logs [#8778](https://github.com/openshift/hypershift/pull/8778)
* [Full changelog](https://github.com/openshift/hypershift/compare/80198108f879b26a7e990bc621b490c50fe1c196...c180b15368bd8d15da91460440a0026692e34e03)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/0fdc00b1c1f411da3c385e27e63d909761ad1aa9)

* [OCPBUGS-87499](https://issues.redhat.com/browse/OCPBUGS-87499): Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 5.0 [#163](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/163)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/a26ad7ece37d9ae974d4384d6a4676ccb7666cd9...0fdc00b1c1f411da3c385e27e63d909761ad1aa9)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/80a91b3fb96a4fb74ed03e895d617b462ad21db2)

* [OCPBUGS-87502](https://issues.redhat.com/browse/OCPBUGS-87502): Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 5.0 [#96](https://github.com/openshift/machine-api-provider-ibmcloud/pull/96)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/1f7397711bf06c87bf497e300870871dc345b827...80a91b3fb96a4fb74ed03e895d617b462ad21db2)


### [insights-operator](https://github.com/openshift/insights-operator/tree/4c4c3bbe8c4e617bc7dd03ee492cb74122970bd9)

* Bug OCPBUGS-90497: Remove metadata.namespace from cluster-scoped resources [#1307](https://github.com/openshift/insights-operator/pull/1307)
* [Full changelog](https://github.com/openshift/insights-operator/compare/314becc76aacb6997874bfa72d3615b983ed4c4f...4c4c3bbe8c4e617bc7dd03ee492cb74122970bd9)


### [karpenter-operator](https://github.com/openshift/karpenter-operator/tree/01d708f6cedaa55252fedb1db24c7455678bfb81)

* [AUTOSCALE-810](https://issues.redhat.com/browse/AUTOSCALE-810): add e2e test structure [#13](https://github.com/openshift/karpenter-operator/pull/13)
* [Full changelog](https://github.com/openshift/karpenter-operator/compare/1c27f0d7acb55db4fe777372be4a839ffc5e2ae1...01d708f6cedaa55252fedb1db24c7455678bfb81)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/34acc695df8c51e7ff10a853fb13ad1928ac2e04)

* NO-JIRA: Update ipfailover/OWNERS to reflect current NID team [#240](https://github.com/openshift/images/pull/240)
* [Full changelog](https://github.com/openshift/images/compare/1d29b6fbcbd0ed0ca988130cf1dd2c3cef69c58a...34acc695df8c51e7ff10a853fb13ad1928ac2e04)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/7ff99994ecc3a675fac6f9aa7fa418cdb0dca32b)

* [OCPBUGS-92795](https://issues.redhat.com/browse/OCPBUGS-92795): Sync upstream 04/30/2026 [#97](https://github.com/openshift/kubevirt-csi-driver/pull/97)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/771b562d4875296007850a4d3709a7ae1c6ed3e2...7ff99994ecc3a675fac6f9aa7fa418cdb0dca32b)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/bd501fc8f16e6ce158add5ae335e9920a277fe68)

* [OCPBUGS-87360](https://issues.redhat.com/browse/OCPBUGS-87360): Updating ose-machine-api-operator-container image to be consistent with ART for 5.0 [#1507](https://github.com/openshift/machine-api-operator/pull/1507)
* [SPLAT-2790](https://issues.redhat.com/browse/SPLAT-2790): Added new VAP for vSphere infra validation against current cpms and machines [#1510](https://github.com/openshift/machine-api-operator/pull/1510)
* NO-JIRA: fix: honor --stderrthreshold flag when --logtostderr is enabled [#1485](https://github.com/openshift/machine-api-operator/pull/1485)
* [OCPBUGS-66940](https://issues.redhat.com/browse/OCPBUGS-66940): fix default image for confidential VMs [#1443](https://github.com/openshift/machine-api-operator/pull/1443)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/d7772c62914781cd312b5e6db24532d694a8a140...bd501fc8f16e6ce158add5ae335e9920a277fe68)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/c3ce5f2d89bae99230e4d763cd413bc312d5cac7)

* [OCPBUGS-91982](https://issues.redhat.com/browse/OCPBUGS-91982): Bootstrap MCS logging entire ignition [#6231](https://github.com/openshift/machine-config-operator/pull/6231)
* [OCPNODE-4443](https://issues.redhat.com/browse/OCPNODE-4443): Add runc upgradeable guard to block upgrades on RHEL 10 streams [#5891](https://github.com/openshift/machine-config-operator/pull/5891)
* NO-ISSUE: Remove stub upgrade test [#6224](https://github.com/openshift/machine-config-operator/pull/6224)
* [OCPBUGS-86448](https://issues.redhat.com/browse/OCPBUGS-86448): Skip no-op MCN SSA calls [#6217](https://github.com/openshift/machine-config-operator/pull/6217)
* [OCPBUGS-87962](https://issues.redhat.com/browse/OCPBUGS-87962): Boot image skew check silently passes when MachineSets are reconcile-skipped [#6162](https://github.com/openshift/machine-config-operator/pull/6162)
* [OCPBUGS-86826](https://issues.redhat.com/browse/OCPBUGS-86826): Make vsphere template updates atomic [#6117](https://github.com/openshift/machine-config-operator/pull/6117)
* [OKD-305](https://issues.redhat.com/browse/OKD-305): Remove migration code(for runc-&gt;crun) [#5682](https://github.com/openshift/machine-config-operator/pull/5682)
* [OCPBUGS-91746](https://issues.redhat.com/browse/OCPBUGS-91746): temporarily remove sandboxed-containers from extensions test [#6213](https://github.com/openshift/machine-config-operator/pull/6213)
* [OCPBUGS-91746](https://issues.redhat.com/browse/OCPBUGS-91746): Remove sandboxed-containers (kata-containers) from extended-priv tests [#6221](https://github.com/openshift/machine-config-operator/pull/6221)
* [MCO-2275](https://issues.redhat.com/browse/MCO-2275): Migrate OS layering tests from openshift-tests-private [#6081](https://github.com/openshift/machine-config-operator/pull/6081)
* [MCO-2257](https://issues.redhat.com/browse/MCO-2257): ensure MCO tests pass in both RHEL9 and RHEL10 [#6055](https://github.com/openshift/machine-config-operator/pull/6055)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/ae127c3c06eddd12a7f801a34f84109317ab0cbc...c3ce5f2d89bae99230e4d763cd413bc312d5cac7)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/d5ffdd28dcf8863f9163fe930ffa0753b09161f3)

* [OU-1396](https://issues.redhat.com/browse/OU-1396): fix: use replace to set variables to avoid navigation trap [#1013](https://github.com/openshift/monitoring-plugin/pull/1013)
* [OCPBUGS-85473](https://issues.redhat.com/browse/OCPBUGS-85473): fix: escape regex variable values in regex matcher contexts [#1010](https://github.com/openshift/monitoring-plugin/pull/1010)
* [OBSINTA-1290](https://issues.redhat.com/browse/OBSINTA-1290): Incident Tests Stability [#887](https://github.com/openshift/monitoring-plugin/pull/887)
* [OBSINTA-1358](https://issues.redhat.com/browse/OBSINTA-1358): Fix COO_BUNDLE_IMAGE install path in Cypress Tests. [#994](https://github.com/openshift/monitoring-plugin/pull/994)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/d01a05c37208a5420a0c2387c5ea586be244831c...d5ffdd28dcf8863f9163fe930ffa0753b09161f3)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/9e9722dd2f3f71ec891e3413a8a8cdd6dbfe872f)

* [CNTRLPLANE-3715](https://issues.redhat.com/browse/CNTRLPLANE-3715): Agentic-SDLC: Add human and agent context files [#210](https://github.com/openshift/oauth-apiserver/pull/210)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/97a820bd5412c2d3bb22f083152107ef41631c8c...9e9722dd2f3f71ec891e3413a8a8cdd6dbfe872f)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/2b9ee007290b0e1cb85737f3b37075343f9f4857)

* [OCPBUGS-92053](https://issues.redhat.com/browse/OCPBUGS-92053): update x/crypto to v0.52.0 and x/net to v0.55.0 [#368](https://github.com/openshift/oauth-proxy/pull/368)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/fa27a041c546f80152f1bb0deec777e406f38f87...2b9ee007290b0e1cb85737f3b37075343f9f4857)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/0264de126b0c71017a950b7e944b3570369fb1aa)

* NO-ISSUE: Synchronize From Upstream Repositories [#754](https://github.com/openshift/operator-framework-operator-controller/pull/754)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/ecd140bbf6c4b244704e6c52a5bdd25007fb9030...0264de126b0c71017a950b7e944b3570369fb1aa)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/6b30092b0a1196b016f4300b79c895f0e7f2e9a8)

* [OCPBUGS-77061](https://issues.redhat.com/browse/OCPBUGS-77061): Vendor Downstream CAPO [#170](https://github.com/openshift/machine-api-provider-openstack/pull/170)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/f4619caee7828e2b2d85c096933020e63e6dee29...6b30092b0a1196b016f4300b79c895f0e7f2e9a8)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/0adff33f0e0251265c6574319131f6918e9f8993)

* NO-ISSUE: Synchronize From Upstream Repositories [#1330](https://github.com/openshift/operator-framework-olm/pull/1330)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/32225496430f8607ece581277f56e254fed708be...0adff33f0e0251265c6574319131f6918e9f8993)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/a8006e26248b52c659315bd98eef227596964e41)

* NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.29.0 to 2.31.0 [#760](https://github.com/operator-framework/operator-marketplace/pull/760)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/cd20b29b9ce55af65fd1435f2c59905c45341256...a8006e26248b52c659315bd98eef227596964e41)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/4ab9ff73c665319352288fe0b9b9e1df71832525)

* NO-ISSUE: [bot] Bump openshift/prom-label-proxy to v0.14.0 [#398](https://github.com/openshift/prom-label-proxy/pull/398)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/3ba6cd3ccf08695e11b67bf5eaf287198dda8e10...4ab9ff73c665319352288fe0b9b9e1df71832525)


### [prometheus](https://github.com/openshift/prometheus/tree/6d5e6fee576a7e192b82209c6ce09855ca4bbaab)

* [OCPBUGS-92815](https://issues.redhat.com/browse/OCPBUGS-92815): bump golang.org/x/crypto to v0.53.0 [#334](https://github.com/openshift/prometheus/pull/334)
* [Full changelog](https://github.com/openshift/prometheus/compare/4f1cf63cbdd086c4dca583fbe5ce82a3baf34fbc...6d5e6fee576a7e192b82209c6ce09855ca4bbaab)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/c30580cbb1af27356599c785720ee5043440e84a)

* NO-JIRA: bump to 0.33.0 [#138](https://github.com/openshift/prometheus-alertmanager/pull/138)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/c15e8d57976b0d8fb944724d0b14d1f05f855539...c30580cbb1af27356599c785720ee5043440e84a)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/01ccbfb991fdbc559820a04c4932fc5ddf2339d0)

* [OCPBUGS-87336](https://issues.redhat.com/browse/OCPBUGS-87336): Updating ose-route-controller-manager-container image to be consistent with ART for 5.0 [#98](https://github.com/openshift/route-controller-manager/pull/98)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/e454c01fbe561cce9973f54b1ddbcdd35a9d18ff...01ccbfb991fdbc559820a04c4932fc5ddf2339d0)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/883c387c71c59767f08e21ca57c810b56ab16d01)

* [CNTRLPLANE-3718](https://issues.redhat.com/browse/CNTRLPLANE-3718): Add AI SDLC context files [#362](https://github.com/openshift/service-ca-operator/pull/362)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/35cf51895f4dc77dca8a709e7635980753f87e17...883c387c71c59767f08e21ca57c810b56ab16d01)


### [tests](https://github.com/openshift/origin/tree/f36c810ba26cd860199f536172d14636d3cf8d16)

* [OCPBUGS-85426](https://issues.redhat.com/browse/OCPBUGS-85426): improve DCM tests to reduce flakiness in endpoints [#31173](https://github.com/openshift/origin/pull/31173)
* NO-ISSUE: monitor/haproxy: treat all-apiservers-down test as flake [#31343](https://github.com/openshift/origin/pull/31343)
* [OCPBUGS-90507](https://issues.redhat.com/browse/OCPBUGS-90507): Update CNV swap tests for mandatory drop-in directory [#31318](https://github.com/openshift/origin/pull/31318)
* [OCPQE-32077](https://issues.redhat.com/browse/OCPQE-32077): Add a monitortest for cluster region/zone/instance type autodl data [#31305](https://github.com/openshift/origin/pull/31305)
* [OCPBUGS-91825](https://issues.redhat.com/browse/OCPBUGS-91825): monitor/haproxy: tolerate install-phase apiserver bounces in all-down test [#31326](https://github.com/openshift/origin/pull/31326)
* [CNTRLPLANE-3629](https://issues.redhat.com/browse/CNTRLPLANE-3629): authentication: skip external oidc kube-apiserver configuration check when new architecture gate is enabled [#31314](https://github.com/openshift/origin/pull/31314)
* [OCPBUGS-91956](https://issues.redhat.com/browse/OCPBUGS-91956): Fix isNoOLMFeatureGateEnabled to check only the current cluster version [#31329](https://github.com/openshift/origin/pull/31329)
* [OCPBUGS-86789](https://issues.redhat.com/browse/OCPBUGS-86789): Make early request monitor test informing [#31323](https://github.com/openshift/origin/pull/31323)
* [OCPBUGS-85782](https://issues.redhat.com/browse/OCPBUGS-85782): Add extra wait after mco and cvo considers upgrade complete [#31289](https://github.com/openshift/origin/pull/31289)
* [OCPEDGE-2606](https://issues.redhat.com/browse/OCPEDGE-2606): e2e: add fencing credentials update and validation tests for dual-replica etcd [#31199](https://github.com/openshift/origin/pull/31199)
* NO-JIRA: Fix interval filtering bug in watchnodes tests [#31320](https://github.com/openshift/origin/pull/31320)
* [CNTRLPLANE-3540](https://issues.redhat.com/browse/CNTRLPLANE-3540): refactor(test/extended/tls): simplify the testing and remove duplication [#31277](https://github.com/openshift/origin/pull/31277)
* NO-JIRA:Added penetration tests important to Telco partners/customers [#31283](https://github.com/openshift/origin/pull/31283)
* [OCPBUGS-89351](https://issues.redhat.com/browse/OCPBUGS-89351): Fix flake in best-effort QoS test due to debug pods [#31312](https://github.com/openshift/origin/pull/31312)
* [Full changelog](https://github.com/openshift/origin/compare/dd883a71f38df7c9715e1905b76ab554d4510db0...f36c810ba26cd860199f536172d14636d3cf8d16)


### [thanos](https://github.com/openshift/thanos/tree/779d690da4fafe809a689f02e889e6fd9ffd4405)

* [OCPBUGS-92812](https://issues.redhat.com/browse/OCPBUGS-92812): Fix CVE-2026-39882 [#190](https://github.com/openshift/thanos/pull/190)
* [Full changelog](https://github.com/openshift/thanos/compare/97c62b806e54c7603b70dddd258939b9cd721b83...779d690da4fafe809a689f02e889e6fd9ffd4405)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/a15538776eb26d20ab2969740cee25f9b4442302)

* [OCPBUGS-87278](https://issues.redhat.com/browse/OCPBUGS-87278): Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART for 5.0 [#128](https://github.com/openshift/cloud-provider-vsphere/pull/128)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/fb90e2d792e464d9c5ccf782a8101d1f40cf29c0...a15538776eb26d20ab2969740cee25f9b4442302)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/6b18bb29fc45383c21aa6c7513d151e443aa305e)

* [STOR-2929](https://issues.redhat.com/browse/STOR-2929): Rebase openshift v3.7.1 [#187](https://github.com/openshift/vmware-vsphere-csi-driver/pull/187)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/3a6bbdd463c47d8d18a055f6e54c9c8fae52ce58...6b18bb29fc45383c21aa6c7513d151e443aa305e)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/030ff0e326205bcacaddb901d6b3cb6ab4db63dd)

* [OCPBUGS-85345](https://issues.redhat.com/browse/OCPBUGS-85345): Fixed hybrid env test to use disruptive / serial labels in title [#344](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/344)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/ef4e3b6de5ec19ac4d20a699dfc2aa1d6834f040...030ff0e326205bcacaddb901d6b3cb6ab4db63dd)