# 5.0.0-okd-scos.ec.6

Created: 2026-07-27 11:46:41 +0000 UTC

Image Digest: `sha256:91cfbacb0187f72566884e6a751c936fedb3ca1e21011718dd35c6e0d651f383`

Promoted from registry.ci.openshift.org/origin/release-scos:5.0.0-0.okd-scos-nightly-2026-07-24-032429


## Changes from 5.0.0-okd-scos.ec.5

### Components

* Kubectl upgraded from 1.35.2 to 1.36.2
* Kubernetes upgraded from 1.35.3 to 1.36.2
* Kubernetes Tests 1.35.1
* CentOS Stream CoreOS 10 upgraded from 10.0.20260702-0 to 10.0.20260721-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | OKD<br/>Hypershift | OKD<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---:  |
| AzureClusterHostedDNSInstall <br/> (0 tests)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed) |
| IngressControllerDynamicConfigurationManager <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled |
| GCPSovereignCloudInstall <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)|  |  |  |   |


### New images

* [haproxy-router-haproxy28](https://github.com/openshift/router) git [2c923e57](https://github.com/openshift/router/commit/2c923e5799ed6622479461fa49ed860160c5314c) `sha256:3a5d6ef051d2520dd4bf69bd6d86decdc4f504d957d6ed7ff7a73277b6e292e3`
* [haproxy-router-haproxy32](https://github.com/openshift/router) git [2c923e57](https://github.com/openshift/router/commit/2c923e5799ed6622479461fa49ed860160c5314c) `sha256:2085dbb11a7e5acaebece2b6a91d15c2fb764db47b693b7c7a120b196ecec367`


### Rebuilt images without code change

* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [f84fd71b](https://github.com/openshift/assisted-installer-agent/commit/f84fd71b5732db9c0caf2d11672d579b2c3ea588) `sha256:37e1c56be9167a869ef955deb2164f27eea82bb44698385d8bb1fa00a39e60ab`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [8264c02d](https://github.com/openshift/apiserver-network-proxy/commit/8264c02deda9abb6cd9a6a5c23305428431473c2) `sha256:47e3af29d61b07158bb09329955aa06d8aad42eebd7462f18070fcc5ac2a2c48`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [5060934b](https://github.com/openshift/cloud-provider-aws/commit/5060934bc9ff325acf4bd0728bf37166255a501f) `sha256:19c975c285e1b36d340e7d1b6482d10a45b2ae5056da5fce8585124335746bbd`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [8b8c4cef](https://github.com/openshift/aws-ebs-csi-driver/commit/8b8c4cef02ec9b670e2709f2aacc0ed72420be90) `sha256:afee8275e3dbbd1e3d76e980d311cda75b242478da57e047881f5af0c13004eb`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [6ca6eea2](https://github.com/openshift/aws-encryption-provider/commit/6ca6eea2f3a9d0b090ff63ba5b8e342d5686c9a8) `sha256:16f08001f81f9359732cbb0d7972ad935d1c9bf59497b634f75d6fcbcbb6a5bd`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [10718580](https://github.com/openshift/machine-api-provider-aws/commit/10718580c265686b6af85caab68eed263eee2a41) `sha256:02038c89da6158f7366c4052a3ff042982cc8c93efd918d77214ce156c147197`
* [aws-node-termination-handler](https://github.com/openshift/aws-node-termination-handler) git [e4ff2aae](https://github.com/openshift/aws-node-termination-handler/commit/e4ff2aaec292db42de9f3eef4908ba1c421a2a6c) `sha256:d9732995bf7a90d402d02288b7e89068bb4e17a6944126177ee72085e6515b75`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [d04449b9](https://github.com/openshift/cloud-provider-azure/commit/d04449b95a54a9f41669d701ed63153575cced1e) `sha256:9544090ef71e2b2fc54447250f74a35cdd957d60445e766844e4d967f1afd57e`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [d04449b9](https://github.com/openshift/cloud-provider-azure/commit/d04449b95a54a9f41669d701ed63153575cced1e) `sha256:58453b96cd73bb209228f6f4923d7c432abf636323b0b5160e12f670c7fcd1e1`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [e87f7764](https://github.com/openshift/azure-disk-csi-driver/commit/e87f776402d402a3e291e24fa737fe4e5e9617aa) `sha256:586d2430d22cfc58180b743891f2536e9f40c7276440a1d14c4ca57a6ad38b57`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [f7724fbf](https://github.com/openshift/azure-file-csi-driver/commit/f7724fbf3ad694f957bd99fafa2fa7b658462624) `sha256:daa5cddb0a7f513f7fe6b23d5304b99e33f3de7e6ba83a493352899609ac9998`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [ca3d747d](https://github.com/openshift/azure-kubernetes-kms/commit/ca3d747de321b88a2c606e546851d1841d2fab9f) `sha256:a18f965f14efad4e6ab8a38eb3592680cfbd1dbdfb41941dada805e3f8026b48`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [bb01d0df](https://github.com/openshift/machine-api-provider-azure/commit/bb01d0dfee4abfe7274ff96cba280ad81ad99936) `sha256:91fc6762a766b637d8ad3e856cf8f06361b029a80e23654be60c012e176c22a5`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [0611cd27](https://github.com/openshift/azure-service-operator/commit/0611cd27b9eaa4a1fa8e0ab8ddc85352a61903e0) `sha256:9a7c37ff5420c2f588de85b7aa335334a9049f752e3c8bad1db5f5f87c147e94`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [2b4705c5](https://github.com/openshift/azure-workload-identity/commit/2b4705c5d999339ce17d47a9b2a637d238891dae) `sha256:bbb9c740e860f7f868e7a7e3fabcae3505e8dc3bc221c3751b139db73dc0b2ca`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [f2b0db19](https://github.com/openshift/cluster-api-provider-baremetal/commit/f2b0db1919fff1344bc68948894c6775c0bf24a3) `sha256:056f54fe0ce7704ab9c9a34bdaeaa7f8a4841134f3ebffb1480f15ffe13cdd09`
* [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [672b7900](https://github.com/openshift/cloud-credential-operator/commit/672b790022dbea667460b1a0467b6a0bc39c544b) `sha256:c5872897fb0e4aa170609b2c024caf74f0ff802a67804a2ca93a1f0e7e9309d5`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [0b49df2b](https://github.com/openshift/cloud-network-config-controller/commit/0b49df2bc4b10110463f1aa2a5fc475ebaeef9ab) `sha256:29a6c1fea4fc13e9922c90514f90cb9d0e68e1d8aa621c7c83ba0d3d48fca728`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [7b1593a4](https://github.com/openshift/cluster-bootstrap/commit/7b1593a47898b6a97dc457efaca464624e9f2afa) `sha256:0f0546f5603e1b1aedd41e1aa8e212f9d743966428bff4ef38732b77f98a4c1e`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [a02c8799](https://github.com/openshift/cluster-config-operator/commit/a02c879931c6108326c0a514df0ce2e390f3536c) `sha256:5392432afae6764c2810dd18459f555981a60c8632c638496154b03375e20e65`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [452cee8c](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/452cee8c1f4efb683fb6bcb15b61366695d98e1e) `sha256:ba97aad2771ed369d7a042d7d2cf4b3585e9ada2984256d449db7a7db6f82e50`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [f5d3bfe6](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/f5d3bfe64bda67ffb8299af01ebf2722287edf04) `sha256:4a3548501827f66e4eb9660310552439a6b6c381da8fb5d2bdaaa419dd2be1fe`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [1ae3f157](https://github.com/openshift/cluster-machine-approver/commit/1ae3f157b88c167a7dbe06c36d6e55a82f7fd4f0) `sha256:6b398ca1789786224de7a534c9bc2369c7a148b959dec44818cbf2075d36a393`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [34f95b07](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/34f95b07f4afbc47558e54e4fa2710fd692e615e) `sha256:f5cc7ea6e78927944dd041e4e27170d7544b32a80218c9965454b892ce1253b2`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [eee95bab](https://github.com/openshift/cluster-samples-operator/commit/eee95babd52053191e29355108f7daf149dfbf8f) `sha256:75198fe369b106977d30621ec9ab02a48d6f01dbc1d986b444b630974785be0e`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [8ac48254](https://github.com/openshift/cluster-storage-operator/commit/8ac48254009fb4987bee1f3e00cbb8e4d730f545) `sha256:2516fb3f1abeeee5c4811f717368702539fb5a5a3766d39c21beeb85db29b8d0`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [ce80869a](https://github.com/openshift/configmap-reload/commit/ce80869a83b55ebbdc21a5550ec5747645203bd2) `sha256:5efcd6d638766552498c92e05c8758e9f1bb899bd1987115bbff225d00647c93`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [d6f73950](https://github.com/openshift/containernetworking-plugins/commit/d6f73950658d258e0ddbf2a4ac92e13ac840158b) `sha256:a4fb3c5f6791105945592a77b77fead39b3c5b419db8223a10e8289781b98768`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [d6f73950](https://github.com/openshift/containernetworking-plugins/commit/d6f73950658d258e0ddbf2a4ac92e13ac840158b) `sha256:c879c3b4c4bb7f26ac0a553e09718d876427ce281d5a7565d2632813f8c110d3`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [f8bb5994](https://github.com/openshift/cloud-provider-openstack/commit/f8bb5994f3cee8ee2bb5cca25e3e9783ad7dd57c) `sha256:ffdcf112321699f9579ac3cc6918079bf77fbd6c4b753122be4af66de1487f8e`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [96ebfa73](https://github.com/openshift/csi-external-attacher/commit/96ebfa733c06c3398555d164c788e310908fecf6) `sha256:7a74406d38319b2b37f8e2a90644a2e965859a1b1b737bddcb543ddd2a384678`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [bdf440fa](https://github.com/openshift/csi-external-provisioner/commit/bdf440fab8a48e4b76cf0902ad5ba17a20881a8b) `sha256:4f2dde47548c8e846689da8c37624561ae948305096a39bd4a64f9f41fa2c3ab`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [c608adfc](https://github.com/openshift/csi-external-resizer/commit/c608adfc7e82c7c59221bb9d22642a1902cace43) `sha256:b29d96ac1592a0f3b17638ec4c5cab8e7c182f87629ee1a29a4ae86c8daa2838`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [239703c6](https://github.com/openshift/csi-external-snapshot-metadata/commit/239703c637e005cf785892d214d219add70e3533) `sha256:f61ba4e0b6484f4e26111ab44aba6e3da8bdb550ea1f310e23542ca642a79c92`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [b5e4b73f](https://github.com/openshift/csi-external-snapshotter/commit/b5e4b73f9a761ff8a59f31b982a63e1cdbb76ed8) `sha256:fbb27c5b2be0be8226be6443a3eb715d1b425a32064a57896bd3947e2130e4ac`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [f649d2c7](https://github.com/openshift/csi-livenessprobe/commit/f649d2c76f2484b73c70007801eb81ab4be63635) `sha256:d65f523c5ad31cd98f3da3a555dbe8559f1755006741b29e0e0acfa7dfb03219`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [02d53450](https://github.com/openshift/csi-node-driver-registrar/commit/02d5345005aeb6aac2277818937501cdd1a3a88e) `sha256:151550470e77b3e9f0641f788a734e7d93e65efba93fe8c5c077a8807a58aae4`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [b5e4b73f](https://github.com/openshift/csi-external-snapshotter/commit/b5e4b73f9a761ff8a59f31b982a63e1cdbb76ed8) `sha256:dda43f94e673eaf47a7924e697b11b9113d7cdc8356fb741d5ee26f03dc42a7a`
* [docker-builder](https://github.com/openshift/builder) git [2cda03a9](https://github.com/openshift/builder/commit/2cda03a93696d4620703848471b3b873b0b2fa1e) `sha256:bd6a86441a9dd908f4bc6517711da61bcb770aee635c15994d9390ec830d908f`
* [docker-registry](https://github.com/openshift/image-registry) git [eb1b09dc](https://github.com/openshift/image-registry/commit/eb1b09dc465a8d53c5683da40f5d5fd306fd945a) `sha256:5801492ce21677f65b8e2557478c2319ac025298a0e885aa8d7eedbdb250ba95`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [a923d37c](https://github.com/openshift/egress-router-cni/commit/a923d37cfe033853603240f862cb907ba997cb68) `sha256:46b9b514693a7027b3270684bc88d78eff2abb7f97673afafae3a5b97af12c5d`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [1d098131](https://github.com/openshift/machine-api-provider-gcp/commit/1d098131fa7123b9793e01dcdac4d0b18b9ef1ae) `sha256:4b4c0b82c2c9638f0c6106c01aea7cad2bb2cc43dc578414c4235b9d854ba3b2`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [a8f16141](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/a8f16141e4234fa2c9f6aeb8498622af6e4a080d) `sha256:31c3d08851bd7fad73092a58b1febf1402ccc316cef90f24da6b6766c43d2875`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [ef8fcc28](https://github.com/openshift/cloud-provider-ibm/commit/ef8fcc288d9248cd149f181e7f5c896f4a10eb3b) `sha256:213abdeb760aefe35fd56e3b20e0e5d95bf0644c70ca5f0e2e1d82e30b3b3aa9`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [ce30b4f9](https://github.com/openshift/insights-runtime-extractor/commit/ce30b4f9bc3ec867b976886a5207d36c50a396d9) `sha256:71537afd22db812177ab30c896010bd02a48863613df0b28faee24a316cd60d2`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [ce30b4f9](https://github.com/openshift/insights-runtime-extractor/commit/ce30b4f9bc3ec867b976886a5207d36c50a396d9) `sha256:0dd5476b2ce113fb938be56a366f32d6aec2db85ea399e202c244b1bb7807c5f`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [f8e41b2e](https://github.com/openshift/ironic-rhcos-downloader/commit/f8e41b2ed8915474a99e3eb34b54692afb0611da) `sha256:703228895f6a5c180e0a827442f6501a6a177ec7e845bc8b6b94faa080858606`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [43c114bc](https://github.com/openshift/kube-rbac-proxy/commit/43c114bc124f59e2fc3223dea8e0a8f4cdeed18d) `sha256:acb2ee93279849c58f4c29138e4da5d4e137039993357d4283336db7a2e71a33`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [72835e43](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/72835e43c7754356645e41031f3a99926b4d42e6) `sha256:f45325a01c1ca92288db85ca9acb3530a8c6960e7b4d075ee4b10d78d6fcb2d3`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [7ff99994](https://github.com/openshift/kubevirt-csi-driver/commit/7ff99994ecc3a675fac6f9aa7fa418cdb0dca32b) `sha256:b95323da743192c70e2ea7bbeb806d9779f1c0b21cd2a7fd5b36b5af0e78c6dd`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [7a348422](https://github.com/openshift/image-customization-controller/commit/7a348422137de33a9bfa6368b3797686ff4e8f98) `sha256:871b3681fa45f56382b172df1660192d5645d39ded445ad68c8426ff16e4f2cb`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [4bb2e206](https://github.com/openshift/multus-admission-controller/commit/4bb2e2069c3e4f11fbc4c1befd6dc1c41fa802b7) `sha256:306886b0ee375f8463cb5372e971b4ad39749bdbdfa4733bede3b254936dbf29`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [932bdaa4](https://github.com/openshift/multus-networkpolicy/commit/932bdaa4250d0a1db41a1a1fcac8192f2757211c) `sha256:d34377438ca1b172eea2b027e41704a25179a2949ee1c421430aed41cabaebab`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [08af4127](https://github.com/openshift/route-override-cni/commit/08af4127c77976510cad1c096d9aca977d8ae5af) `sha256:a1b0363df42a8e0a476582eec3e01cbd95c3d0ddac31351bbac2ec42ff1ba10f`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [19d390fd](https://github.com/openshift/bond-cni/commit/19d390fd4d353619fdfb5e0070962d2ddf54b5bb) `sha256:020633cb5bd666698b917b543cc9f28c506d9f156fb9c723a59841810105695c`
* [network-tools](https://github.com/openshift/network-tools) git [0b53ac3d](https://github.com/openshift/network-tools/commit/0b53ac3dccf59cd169555bf18c207122374bf003) `sha256:13c6784ddd166f8f1a0b8bfff6b20607f027efa1c26d544bd3c28d4126ec21de`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [dc584c6b](https://github.com/openshift/cloud-provider-nutanix/commit/dc584c6b2e895a6217f9e2dbed765209af1898a1) `sha256:b0b31a94393f3a734e699b6e0e3cd5e18b9b6281707fcaf747253c0c07cc2a62`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [b8b84ebc](https://github.com/openshift/machine-api-provider-nutanix/commit/b8b84ebcda147113477af9a4edbcdfb03e22875c) `sha256:799d87e0788848c3f3458331a342adb735d909be79ab43b28db99c457cb1383d`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [2b9ee007](https://github.com/openshift/oauth-proxy/commit/2b9ee007290b0e1cb85737f3b37075343f9f4857) `sha256:d901a054aa477b5d8d46c3f6e9a89bd1b6bdf0d49383d7735ee18877d1d2a02e`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [00b41f2b](https://github.com/openshift/openshift-apiserver/commit/00b41f2b10b173b37fb01bf71d72fcae2ff4c89a) `sha256:92492301f7b4032ed21d8130adafa9fe8092fa2ef4b4a6f0191f003bf9d3973d`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [5631cf49](https://github.com/openshift/openshift-controller-manager/commit/5631cf493b006cbc72a8600a7435813272d71940) `sha256:186bdf527066670a24e1efa483e061d5a6a0d34534c56baab242711b13748cfa`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [0e12f5d6](https://github.com/openshift/openshift-state-metrics/commit/0e12f5d6df02b37b0353a747d144e8069c3d0c2a) `sha256:d65364139f734670968c66806b2f4c22fef16bd2ce184ab7cb2c22761f2a3337`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [f8bb5994](https://github.com/openshift/cloud-provider-openstack/commit/f8bb5994f3cee8ee2bb5cca25e3e9783ad7dd57c) `sha256:43e34b4d9ca04f28fe9f6d2a98a16945f971d7989f816e3a1ed3d801235034d5`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [f8bb5994](https://github.com/openshift/cloud-provider-openstack/commit/f8bb5994f3cee8ee2bb5cca25e3e9783ad7dd57c) `sha256:43f54fea1904b2b2a32612c513f47c214bf382c4a8cf9fa8250797d8911dff3c`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [6b30092b](https://github.com/openshift/machine-api-provider-openstack/commit/6b30092b0a1196b016f4300b79c895f0e7f2e9a8) `sha256:ca451944c1ba5b45b4337a32a8feccc7d652d3389556b017edd9a85b55a619d3`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [58dbc048](https://github.com/openshift/openstack-resource-controller/commit/58dbc0482c144c21effee2476947889122a518eb) `sha256:f2fc8683bb663975ff5d8d6fb091182a1683cc21cd4e681671f10e9076b5ce3e`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [e7c2c09b](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/e7c2c09bd0507f8bd5a6dc3921024a379f4a8af0) `sha256:e46d8775880ddfce5f0e9a1bb269a526637dcbc80d705d984e3a26b162296267`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [626c77c1](https://github.com/openshift/cloud-provider-powervs/commit/626c77c1b8c4b81b2d2f775f98f740dc09648061) `sha256:2484831e51d203f34e7c7083cf2e26e0f612ecb21c5b10615c2abc8b64ada05c`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [e88cf81d](https://github.com/openshift/machine-api-provider-powervs/commit/e88cf81dd9ad174f395b86f9cdc40fa30cb06bf4) `sha256:0fd6ae85eb0621648be2624c28325d72a5b854f450b63942df17b58959e3cac0`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [4ab9ff73](https://github.com/openshift/prom-label-proxy/commit/4ab9ff73c665319352288fe0b9b9e1df71832525) `sha256:a38a3bf114efd68cd4f2c6040f0a09a982920a7f2aebc792ce441cb1df546e58`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [6a36acbd](https://github.com/openshift/prometheus-operator/commit/6a36acbd5ecd5a308bc81267f3b0567f93377247) `sha256:f8775486961438cdc41d76630b20b087f7201cd35bece1af919af9a35468cee9`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [6a36acbd](https://github.com/openshift/prometheus-operator/commit/6a36acbd5ecd5a308bc81267f3b0567f93377247) `sha256:e9a8aba7be546aa06dfaf15631a44fe353b66ab8889fd8cd6c695dc0aefcf7e4`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [6a36acbd](https://github.com/openshift/prometheus-operator/commit/6a36acbd5ecd5a308bc81267f3b0567f93377247) `sha256:ebd53a6ed8c93bcc66cd320fdd42c528fc854e15f8acea7cf71db2c7c7a1004e`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [6391e070](https://github.com/openshift/service-ca-operator/commit/6391e070d2ab026324b032a6fa5fc7d6be0d2cb5) `sha256:2204e0bd15c659cb6ec70d07a893690f303da501c204412ba2e594c00faa75b8`
* [stream-coreos](https://github.com/openshift/os) git [5ffc1da0](https://github.com/openshift/os/commit/5ffc1da076e834332482544182c22d984dbf76d2) `sha256:6bd10a513182bcdeaaf0f169e906b171db2305bbd2c85162016bfff918f0a1ea`
* [stream-coreos-extensions](https://github.com/openshift/os) git [5ffc1da0](https://github.com/openshift/os/commit/5ffc1da076e834332482544182c22d984dbf76d2) `sha256:6aebb9b0b03b7807a91603bdceaa445ac818979159ff9905194db40e16c3a419`
* [telemeter](https://github.com/openshift/telemeter) git [22ba1701](https://github.com/openshift/telemeter/commit/22ba1701333f3fd26490cc15b89ddf21df3f67f6) `sha256:484a0065d764d7e623a403e592fd9f77441641d89c5aad281dd7bd295dee61e5`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [a6c21eee](https://github.com/openshift/volume-data-source-validator/commit/a6c21eee63d1fae58b63d8493aeb0fd662d1c91e) `sha256:cd2e243ac8bcb105ba813aa8c2141c365e1ec6db4c3ed6a12d32f49d449b3bfc`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [a1553877](https://github.com/openshift/cloud-provider-vsphere/commit/a15538776eb26d20ab2969740cee25f9b4442302) `sha256:d60111945a3530c31303d38654295c53090caa89ccfdcefff009f4ace54bedd4`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [6b18bb29](https://github.com/openshift/vmware-vsphere-csi-driver/commit/6b18bb29fc45383c21aa6c7513d151e443aa305e) `sha256:910d036d966243b40934852a783316d15c2a79fae106c42057f26d6f56a104be`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [6b18bb29](https://github.com/openshift/vmware-vsphere-csi-driver/commit/6b18bb29fc45383c21aa6c7513d151e443aa305e) `sha256:a34bca0c869a1738af50e77b4fe25dddc268adc7a80985998142a4cf6db31d7e`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/f50c5b20c7e1c223b71840c5e4c802311b60c2e6)

* [MGMT-23744](https://issues.redhat.com/browse/MGMT-23744): CVE-2026-33997 Bump docker/docker to v28.5.2 [#10685](https://github.com/openshift/assisted-service/pull/10685)
* NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 4.22, 4.21, 4.19, 4.20, 4.18 [#10692](https://github.com/openshift/assisted-service/pull/10692)
* [MGMT-24667](https://issues.redhat.com/browse/MGMT-24667): Fix disconnected ZTP spoke installs for OCP 5.0 OSImageStream images [#10527](https://github.com/openshift/assisted-service/pull/10527)
* [MGMT-24699](https://issues.redhat.com/browse/MGMT-24699): Assisted Service IPv6 CIDR comparison may fail with non-normalized CIDRs [#10569](https://github.com/openshift/assisted-service/pull/10569)
* [MGMT-24327](https://issues.redhat.com/browse/MGMT-24327): upgrade assisted-service postgresql from 15 to 16 [#10519](https://github.com/openshift/assisted-service/pull/10519)
* [ACM-35865](https://issues.redhat.com/browse/ACM-35865): CVE-2026-39828 Bump golang.org/x/crypto to v0.52.0 using replace directive (api module) [#10618](https://github.com/openshift/assisted-service/pull/10618)
* [ACM-35865](https://issues.redhat.com/browse/ACM-35865): CVE-2026-39828 Bump golang.org/x/crypto to v0.52.0 using replace directive (models module) [#10616](https://github.com/openshift/assisted-service/pull/10616)
* NO-ISSUE: [master] Bump OCP versions: 4.18, 5.0, 4.20, 4.16, 4.22, 4.19, 4.21, 4.14, 4.17 [#10622](https://github.com/openshift/assisted-service/pull/10622)
* [MGMT-24786](https://issues.redhat.com/browse/MGMT-24786): Add resource-scoped authorization for local auth tokens [#10603](https://github.com/openshift/assisted-service/pull/10603)
* [Full changelog](https://github.com/openshift/assisted-service/compare/ad9783f44c2b9e147e8897b8cde00bfe06410d74...f50c5b20c7e1c223b71840c5e4c802311b60c2e6)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/e4afa401ce7d4f8a24a857fd2edf3338fef1556e)

* [MGMT-24702](https://issues.redhat.com/browse/MGMT-24702): CVE-2026-53488 Bump github.com/containerd/containerd to v1.7.33 [#2204](https://github.com/openshift/assisted-installer/pull/2204)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/019fed042d5aff7e5d390f00d4e4e8a712e4da40...e4afa401ce7d4f8a24a857fd2edf3338fef1556e)


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/149443766b2bc3f3106bd2496de746303d829b7f)

* Bump shell-quote from 1.8.4 to 1.10.0 (#3909) [#3909](https://github.com/openshift-assisted/assisted-installer-ui/pull/3909)
* Bump body-parser from 1.20.4 to 1.20.6 (#3911) [#3911](https://github.com/openshift-assisted/assisted-installer-ui/pull/3911)
* Bump fast-uri from 3.1.2 to 3.1.4 (#3910) [#3910](https://github.com/openshift-assisted/assisted-installer-ui/pull/3910)
* [OCPBUGS-99039](https://issues.redhat.com/browse/OCPBUGS-99039): Bump dompurify to 3.4.7+ in 5.0 (#3894) [#3894](https://github.com/openshift-assisted/assisted-installer-ui/pull/3894)
* Update build_tools (#3901) [#3901](https://github.com/openshift-assisted/assisted-installer-ui/pull/3901)
* Fix operator Learn more documentation links and remove duplicates (#3899) [#3899](https://github.com/openshift-assisted/assisted-installer-ui/pull/3899)
* chore(deps): update dependency sanitize-html to ^2.17.6 (#3897) [#3897](https://github.com/openshift-assisted/assisted-installer-ui/pull/3897)
* Bump websocket-driver from 0.7.4 to 0.7.5 (#3891) [#3891](https://github.com/openshift-assisted/assisted-installer-ui/pull/3891)
* chore(deps): update dependency tar to ^7.5.20 (#3898) [#3898](https://github.com/openshift-assisted/assisted-installer-ui/pull/3898)
* chore(deps): update konflux references (#3896) [#3896](https://github.com/openshift-assisted/assisted-installer-ui/pull/3896)
* Upgrade node version in Containerfile (#3872) [#3872](https://github.com/openshift-assisted/assisted-installer-ui/pull/3872)
* Apply patches (#3819) [#3819](https://github.com/openshift-assisted/assisted-installer-ui/pull/3819)
* Upgrade path-to-regexp to ^8.4.2 (#3862) [#3862](https://github.com/openshift-assisted/assisted-installer-ui/pull/3862)
* Upgrade sanitize-html to ^2.17.4 (#3861) [#3861](https://github.com/openshift-assisted/assisted-installer-ui/pull/3861)
* Dedupe yarn.lock (#3863) [#3863](https://github.com/openshift-assisted/assisted-installer-ui/pull/3863)
* Upgrade terser-webpack-plugin to ^5.6.1 (#3818) [#3818](https://github.com/openshift-assisted/assisted-installer-ui/pull/3818)
* chore(deps): update typescript type definitions (non-major) (#3867) [#3867](https://github.com/openshift-assisted/assisted-installer-ui/pull/3867)
* chore(deps): update dependency axios to ^1.18.1 (#3868) [#3868](https://github.com/openshift-assisted/assisted-installer-ui/pull/3868)
* chore(deps): update konflux references (#3866) [#3866](https://github.com/openshift-assisted/assisted-installer-ui/pull/3866)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/3aadc22a8cc9849b0907ba6082b759b8c51c90cb...149443766b2bc3f3106bd2496de746303d829b7f)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/4c1ca15266d79b638bb0bc376b9536522f302025)

* [OCPBUGS-99425](https://issues.redhat.com/browse/OCPBUGS-99425): Use agent-preinstall-image-builder from quay-proxy [#319](https://github.com/openshift/agent-installer-utils/pull/319)
* [OCPBUGS-98692](https://issues.redhat.com/browse/OCPBUGS-98692): Update cluster-logging and loki operator versions [#315](https://github.com/openshift/agent-installer-utils/pull/315)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/001a8f25faafa0290483617c2f73fdf15dbc25fc...4c1ca15266d79b638bb0bc376b9536522f302025)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/902df006f6c3a37aaeed7e09fa6f892788e36d00)

* :rocket: UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.12.1 (13af066) into main [#621](https://github.com/openshift/cluster-api-provider-aws/pull/621)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/c2dd5cd7921fa56b05f7c95b333ee3f59f850bc5...902df006f6c3a37aaeed7e09fa6f892788e36d00)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, gcp-pd-csi-driver-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/1da479883b5713c356c7c9f838ff71a2db886a29)

* [STOR-2997](https://issues.redhat.com/browse/STOR-2997): Minimal implementation of GCP PD CSI driver operator [#576](https://github.com/openshift/csi-operator/pull/576)
* [Full changelog](https://github.com/openshift/csi-operator/compare/1f648349427a0f61e3022f8ec20f270394dc80c5...1da479883b5713c356c7c9f838ff71a2db886a29)


### [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws/tree/abcf7d1e34173037a13fc47317f313cb6ac2f667)

* [AUTOSCALE-644](https://issues.redhat.com/browse/AUTOSCALE-644): Release chores 5.0 for Karpenter [#33](https://github.com/openshift/aws-karpenter-provider-aws/pull/33)
* [Full changelog](https://github.com/openshift/aws-karpenter-provider-aws/compare/d8187d40117d334c5bb6e4b4f9613b617dc8e45c...abcf7d1e34173037a13fc47317f313cb6ac2f667)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/0d33a4596e2a22d188fe74c4a6497c37c2528c1f)

* [OCPCLOUD-3583](https://issues.redhat.com/browse/OCPCLOUD-3583): Update aws-pod-identity-webhook to k8s 1.36 [#220](https://github.com/openshift/aws-pod-identity-webhook/pull/220)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/631a2f5496d1cb29eaaedac38c199a8c3ba9b0af...0d33a4596e2a22d188fe74c4a6497c37c2528c1f)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/37318c181c099b704b50d589e2a3618901989c34)

* 🐛 OCPBUGS-85337: set imagePullPolicy IfNotPresent on provider workloads [#393](https://github.com/openshift/cluster-api-provider-azure/pull/393)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/52af3f1a3ecffec69c621e80bc80adf67ecec7c0...37318c181c099b704b50d589e2a3618901989c34)


### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/0afcbf370086fe550560784f9cbf7182a9e8b72e)

* 🐛 OCPBUGS-85337: set imagePullPolicy IfNotPresent on provider workloads [#85](https://github.com/openshift/cluster-api-provider-metal3/pull/85)
* [OCPBUGS-98329](https://issues.redhat.com/browse/OCPBUGS-98329): Grant capi-installer permission on ConfigMap [#86](https://github.com/openshift/cluster-api-provider-metal3/pull/86)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/29a96694bfc3b59d1fa95acf2ad87077cc1d3108...0afcbf370086fe550560784f9cbf7182a9e8b72e)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/d8f6a96a1c18ee540099ff73789fde54cc9b12cd)

* [CORS-4514](https://issues.redhat.com/browse/CORS-4514): Set sovereign cloud defaults for machine types [#10706](https://github.com/openshift/installer/pull/10706)
* [CORS-4537](https://issues.redhat.com/browse/CORS-4537): Add API-backed disk type availability validation [#10687](https://github.com/openshift/installer/pull/10687)
* no-jira: azure: Disable shared access key by default [#10574](https://github.com/openshift/installer/pull/10574)
* [CORS-4507](https://issues.redhat.com/browse/CORS-4507): aws: support edge machine pool management with ClusterAPI [#10625](https://github.com/openshift/installer/pull/10625)
* [CNTRLPLANE-2847](https://issues.redhat.com/browse/CNTRLPLANE-2847): bootstrap: pass rendered manifests and payload version to etcd render [#10679](https://github.com/openshift/installer/pull/10679)
* [CORS-3997](https://issues.redhat.com/browse/CORS-3997): azure: update default instance types from v3 to AMD Dasv5 [#10565](https://github.com/openshift/installer/pull/10565)
* [OCPBUGS-98141](https://issues.redhat.com/browse/OCPBUGS-98141), [OCPBUGS-99018](https://issues.redhat.com/browse/OCPBUGS-99018): bump golang.org/x/crypto to v0.52.0 [#10690](https://github.com/openshift/installer/pull/10690)
* [CORS-4539](https://issues.redhat.com/browse/CORS-4539): Support sovereign cloud service account email format for gcp/gcd [#10691](https://github.com/openshift/installer/pull/10691)
* [CORS-4538](https://issues.redhat.com/browse/CORS-4538): Use metadata project ID for sovereign cloud gather [#10688](https://github.com/openshift/installer/pull/10688)
* NO-ISSUE: Remove workaround for boot image version mismatch [#10665](https://github.com/openshift/installer/pull/10665)
* [OCPBUGS-98586](https://issues.redhat.com/browse/OCPBUGS-98586): Don't wait on oc delete in konnectivity_cleanup [#10682](https://github.com/openshift/installer/pull/10682)
* [OCPBUGS-98529](https://issues.redhat.com/browse/OCPBUGS-98529): cluster-api: disable diagnostics endpoint for local CAPI controllers [#10681](https://github.com/openshift/installer/pull/10681)
* [CORS-4423](https://issues.redhat.com/browse/CORS-4423): GCP: Use WithCredentialsJSON when Possible [#10624](https://github.com/openshift/installer/pull/10624)
* [Full changelog](https://github.com/openshift/installer/compare/7adbf7cc743214d2a176a4552fd9db4a0371ec5b...d8f6a96a1c18ee540099ff73789fde54cc9b12cd)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/775d84f5afecf432c7a0330bfaadd669b4a68ab0)

* [METAL-1900](https://issues.redhat.com/browse/METAL-1900): Merge upstream [#510](https://github.com/openshift/baremetal-operator/pull/510)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/5d3be9399c46e8789a6e735672c5fb7abc4b46bd...775d84f5afecf432c7a0330bfaadd669b4a68ab0)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/660073616802e3d1258a036f2e57ca18a7baafa0)

* [OCPBUGS-99496](https://issues.redhat.com/browse/OCPBUGS-99496): Detect bootstrap apiserver shutdown via /readyz [#396](https://github.com/openshift/baremetal-runtimecfg/pull/396)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/079091da0e619331ec79b87e466781efe2445411...660073616802e3d1258a036f2e57ca18a7baafa0)


### [cli, cli-artifacts, deployer](https://github.com/openshift/oc/tree/a88e785e90aa96ac96da93359bacf3ea5c174733)

* [TRT-2817](https://issues.redhat.com/browse/TRT-2817): Revert "Merge pull request #2279 from nbottari9/1814-duplicate-warning" [#2320](https://github.com/openshift/oc/pull/2320)
* NO-JIRA: Bump k8s dependencies to 1.36 along with openshift [#2318](https://github.com/openshift/oc/pull/2318)
* [OTA-1814](https://issues.redhat.com/browse/OTA-1814): fix(alerts): Remove duplicate information in the recommend command [#2279](https://github.com/openshift/oc/pull/2279)
* NO-JIRA: Handle wrapped ENOTSUP error [#2311](https://github.com/openshift/oc/pull/2311)
* NO-JIRA: First try newer iotop-c and fallback to older one [#2317](https://github.com/openshift/oc/pull/2317)
* NO-JIRA: Register the e2e tests for accept in the subfolder [#2300](https://github.com/openshift/oc/pull/2300)
* NO-JIRA: Fix staticcheck warnings in pkg/cli/admin/mustgather [#2306](https://github.com/openshift/oc/pull/2306)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/oc/compare/22c69c0ff5da7e390b42880141e43d555e38ef41...a88e785e90aa96ac96da93359bacf3ea5c174733)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/8c68999bf7b5d6c7aaf3937bb897db5ca43c2132)

* [CNTRLPLANE-3237](https://issues.redhat.com/browse/CNTRLPLANE-3237): encryptionstatusprovider: implement UpdateKMSEncryptionStatus [#953](https://github.com/openshift/cluster-authentication-operator/pull/953)
* [CNTRLPLANE-3237](https://issues.redhat.com/browse/CNTRLPLANE-3237): encryptionstatusprovider: use AuthenticationInterface instead of Clientset [#952](https://github.com/openshift/cluster-authentication-operator/pull/952)
* [CNTRLPLANE-3237](https://issues.redhat.com/browse/CNTRLPLANE-3237): intro authenticationEncryptionStatusProvider [#951](https://github.com/openshift/cluster-authentication-operator/pull/951)
* NO-JIRA: kms to kms key identifier check [#941](https://github.com/openshift/cluster-authentication-operator/pull/941)
* NO-JIRA: Bump library-go to sync [#948](https://github.com/openshift/cluster-authentication-operator/pull/948)
* [CNTRLPLANE-3234](https://issues.redhat.com/browse/CNTRLPLANE-3234): wire KMS health reporter status writer [#947](https://github.com/openshift/cluster-authentication-operator/pull/947)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/6a43170712f2da9405235824ceea3dd531570642...8c68999bf7b5d6c7aaf3937bb897db5ca43c2132)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/70920d3c6f5ff55d0eb72368767a81aea1a62abb)

* [OCPBUGS-92799](https://issues.redhat.com/browse/OCPBUGS-92799): UPSTREAM: 10001: chore(clusterapi): add machine phase check for failed machines [#430](https://github.com/openshift/kubernetes-autoscaler/pull/430)
* [AUTOSCALE-637](https://issues.redhat.com/browse/AUTOSCALE-637): Fix VPA E2E vendoring [#429](https://github.com/openshift/kubernetes-autoscaler/pull/429)
* [AUTOSCALE-555](https://issues.redhat.com/browse/AUTOSCALE-555): adding openshift provider [#417](https://github.com/openshift/kubernetes-autoscaler/pull/417)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/5313828166550a946438f683333450d7b06942e9...70920d3c6f5ff55d0eb72368767a81aea1a62abb)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/4eba1788615dcaf77498d063f51812d5d4b2281a)

* [AUTOSCALE-642](https://issues.redhat.com/browse/AUTOSCALE-642): Release chores 5.0 [#380](https://github.com/openshift/cluster-autoscaler-operator/pull/380)
* NO-JIRA: add coderabbit configuration file [#375](https://github.com/openshift/cluster-autoscaler-operator/pull/375)
* NO-JIRA: update owners file with autoscale team members [#379](https://github.com/openshift/cluster-autoscaler-operator/pull/379)
* [AUTOSCALE-555](https://issues.redhat.com/browse/AUTOSCALE-555): change default cloud provider to openshift [#368](https://github.com/openshift/cluster-autoscaler-operator/pull/368)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/f8fc286e8fe102766b191410e66dfc2554bbe17f...4eba1788615dcaf77498d063f51812d5d4b2281a)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/521cbeca353045e7e1c03a1dbdcfda292e6e860b)

* [OCPBUGS-99278](https://issues.redhat.com/browse/OCPBUGS-99278): Apply cluster TLS profile to ironic-proxy container [#633](https://github.com/openshift/cluster-baremetal-operator/pull/633)
* [OCPBUGS-99220](https://issues.redhat.com/browse/OCPBUGS-99220): static-ip-manager should be optional [#631](https://github.com/openshift/cluster-baremetal-operator/pull/631)
* [OCPBUGS-66101](https://issues.redhat.com/browse/OCPBUGS-66101): Set Progressing=True during cluster update [#629](https://github.com/openshift/cluster-baremetal-operator/pull/629)
* [METAL-1833](https://issues.redhat.com/browse/METAL-1833): Add nic_validation OTE test [#627](https://github.com/openshift/cluster-baremetal-operator/pull/627)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/0d634647457a992eb69e140e4e22cd159986b397...521cbeca353045e7e1c03a1dbdcfda292e6e860b)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/16b6909b3c73d84fe1fbda0d12f9be80aaae00db)

* 🚀 OCPCLOUD-3598: Merge https://github.com/kubernetes-sigs/cluster-api:v1.13.4 (27f4644) into main [#298](https://github.com/openshift/cluster-api/pull/298)
* [Full changelog](https://github.com/openshift/cluster-api/compare/75dfb8c5ee880caacb736841eb9954a0be75567c...16b6909b3c73d84fe1fbda0d12f9be80aaae00db)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/5767be9caecedf9dbbd2bdfd04633514b34b408f)

* [CORS-4512](https://issues.redhat.com/browse/CORS-4512): aws: allow privateDNSName and assignPrimaryIPv6 field on CAPI machines in dual-stack clusters [#592](https://github.com/openshift/cluster-capi-operator/pull/592)
* [CORS-4512](https://issues.redhat.com/browse/CORS-4512): aws: set IPv6 block on AWSCluster in dual-stack clusters [#593](https://github.com/openshift/cluster-capi-operator/pull/593)
* [OCPCLOUD-3607](https://issues.redhat.com/browse/OCPCLOUD-3607): Bump K8S to 1.36 [#628](https://github.com/openshift/cluster-capi-operator/pull/628)
* [OCPCLOUD-3368](https://issues.redhat.com/browse/OCPCLOUD-3368): Adding annotations to manifests for CVO to identify [#588](https://github.com/openshift/cluster-capi-operator/pull/588)
* [OCPCLOUD-3366](https://issues.redhat.com/browse/OCPCLOUD-3366): crdcompatibility: add validation for CRDData.Type field [#625](https://github.com/openshift/cluster-capi-operator/pull/625)
* [OCPCLOUD-3542](https://issues.redhat.com/browse/OCPCLOUD-3542): Add CRD Compatibility Checker OTE e2e tests [#599](https://github.com/openshift/cluster-capi-operator/pull/599)
* [OCPBUGS-98329](https://issues.redhat.com/browse/OCPBUGS-98329): Add aggregated cluster role for extended per-provider RBAC [#623](https://github.com/openshift/cluster-capi-operator/pull/623)
* [OCPCLOUD-3539](https://issues.redhat.com/browse/OCPCLOUD-3539): add topology-aware operator for CRD Compatibility Checker [#600](https://github.com/openshift/cluster-capi-operator/pull/600)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/5fbc7d6ca9c4c06d76d0b46969a7db192dac180a...5767be9caecedf9dbbd2bdfd04633514b34b408f)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/38f5e00cbd0085f6b62b98cd9ed044f54c89ad07)

* [SPLAT-2713](https://issues.redhat.com/browse/SPLAT-2713): Reapply "Merge pull request #476" to bring in e2e for BYO SG for AWS NLB [#492](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/492)
* [OCPBUGS-98617](https://issues.redhat.com/browse/OCPBUGS-98617): Fixes daemonset Progressing=True logic [#490](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/490)
* Revert #476 "SPLAT-2713: Update AWS CCM e2e test module version" [#491](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/491)
* [SPLAT-2713](https://issues.redhat.com/browse/SPLAT-2713): Update AWS CCM e2e test module version [#476](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/476)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/a1fd4479e4e166f40778b10406238dd95427b26b...38f5e00cbd0085f6b62b98cd9ed044f54c89ad07)


### [cluster-config-api](https://github.com/openshift/api/tree/0f2bcae5eb15ef94975c1e0aa544cc1f509b93a8)

* [CNTRLPLANE-3361](https://issues.redhat.com/browse/CNTRLPLANE-3361): Align with latest beta API of Vault [#2936](https://github.com/openshift/api/pull/2936)
* Update KAL to latest [#2939](https://github.com/openshift/api/pull/2939)
* [NE-2569](https://issues.redhat.com/browse/NE-2569): Promote Dynamic Configuration Manager to Default [#2788](https://github.com/openshift/api/pull/2788)
* Adapt publish kubebuilder tools to ocp5 + publish k8s v1.36 kubebuilder tools [#2941](https://github.com/openshift/api/pull/2941)
* [CNTRLPLANE-3237](https://issues.redhat.com/browse/CNTRLPLANE-3237): Add KMS preflight check API to operator/v1 [#2916](https://github.com/openshift/api/pull/2916)
* [CORS-4435](https://issues.redhat.com/browse/CORS-4435): GCP Sovereign Cloud Feature Gate [#2810](https://github.com/openshift/api/pull/2810)
* [OCPSTRAT-3036](https://issues.redhat.com/browse/OCPSTRAT-3036): Rebase 1.36.2 [#2813](https://github.com/openshift/api/pull/2813)
* [OCPBUGS-91634](https://issues.redhat.com/browse/OCPBUGS-91634): CAPI: Fix ImageDigestFormat validation to allow deep registry paths [#2918](https://github.com/openshift/api/pull/2918)
* Sippy timestamp filter should use Millisecond unix timestamp for proper filtering [#2928](https://github.com/openshift/api/pull/2928)
* Remove AzureClusterHostedDNSInstall Featuregate [#2902](https://github.com/openshift/api/pull/2902)
* [Full changelog](https://github.com/openshift/api/compare/d8a1748da7dce3a6292cec8d0822c2d5e1e4318b...0f2bcae5eb15ef94975c1e0aa544cc1f509b93a8)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/67648d56d6b312e661714f8e7bf0e9be1d532c1c)

* [STOR-2914](https://issues.redhat.com/browse/STOR-2914): Bump all deps for 5.0.0 [#285](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/285)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/ef7a4c8b7f5c5e6cba4486dcc37f50521e7bc655...67648d56d6b312e661714f8e7bf0e9be1d532c1c)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/4b8ae49940eefc50fa48da5179e735dd6ccd42d9)

* [NE-2765](https://issues.redhat.com/browse/NE-2765): Bump Kubernetes to 1.36.2 and Go to 1.26 [#483](https://github.com/openshift/cluster-dns-operator/pull/483)
* [NE-2743](https://issues.redhat.com/browse/NE-2743): Support centralized TLS security profiles for CDO metrics [#482](https://github.com/openshift/cluster-dns-operator/pull/482)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/2e6634547bd3ac0f08350bc2235447ddf06db2b2...4b8ae49940eefc50fa48da5179e735dd6ccd42d9)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/1fe5873b112029a943e113ba377413b32ae13443)

* [CNTRLPLANE-2847](https://issues.redhat.com/browse/CNTRLPLANE-2847): render: Read FeatureGate CR from rendered manifests [#1648](https://github.com/openshift/cluster-etcd-operator/pull/1648)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/831d5e6296e75b42d7cbf33fd26cd88f3b7472ea...1fe5873b112029a943e113ba377413b32ae13443)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/02bb5c2cd4d5f4d277cf987d6f65e58a732aefee)

* [OCPBUGS-99257](https://issues.redhat.com/browse/OCPBUGS-99257): Improve GCS KMS encryption error handling and documentation [#1344](https://github.com/openshift/cluster-image-registry-operator/pull/1344)
* [CORENET-7355](https://issues.redhat.com/browse/CORENET-7355): Remove redundant ingress rule from image-registry netpol [#1354](https://github.com/openshift/cluster-image-registry-operator/pull/1354)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/35ad96dc9fa4ac89028e22ef624d1187a57607bd...02bb5c2cd4d5f4d277cf987d6f65e58a732aefee)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/d7aafd957d1c126f5241ab716ad55ad0d160c042)

* [OCPBUGS-90616](https://issues.redhat.com/browse/OCPBUGS-90616): Add GRPCRoute to Gateway API e2e CRD test coverage [#1482](https://github.com/openshift/cluster-ingress-operator/pull/1482)
* [NE-2737](https://issues.redhat.com/browse/NE-2737): Add support for TLS curves in router deployment configuration [#1478](https://github.com/openshift/cluster-ingress-operator/pull/1478)
* [NE-2764](https://issues.redhat.com/browse/NE-2764): Bump Kubernetes to 1.36.2 and Go to 1.26 [#1505](https://github.com/openshift/cluster-ingress-operator/pull/1505)
* [OCPBUGS-98310](https://issues.redhat.com/browse/OCPBUGS-98310): Bump sail-operator install library to OSSM 3.4.0 [#1508](https://github.com/openshift/cluster-ingress-operator/pull/1508)
* [NE-2219](https://issues.redhat.com/browse/NE-2219): Select HAProxy version from IngressController API [#1498](https://github.com/openshift/cluster-ingress-operator/pull/1498)
* [TRT-2793](https://issues.redhat.com/browse/TRT-2793): Revert Bump sail-operator install library to OSSM 3.4.0 [#1507](https://github.com/openshift/cluster-ingress-operator/pull/1507)
* [OCPBUGS-98310](https://issues.redhat.com/browse/OCPBUGS-98310): vendor sail-operator install library from OSSM 3.4 [#1456](https://github.com/openshift/cluster-ingress-operator/pull/1456)
* [NE-2218](https://issues.redhat.com/browse/NE-2218): Add new HAProxy 2.8 and 3.2 image references [#1499](https://github.com/openshift/cluster-ingress-operator/pull/1499)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/7b7406ee0d4bf03de360d53c9cc4a83ee14332cc...d7aafd957d1c126f5241ab716ad55ad0d160c042)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/8435938a07d3cc11c7c0df84fc3afee3d98adfc3)

* NO-JIRA: Add KMS key ID identifier [#2237](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2237)
* [CNTRLPLANE-3237](https://issues.redhat.com/browse/CNTRLPLANE-3237): encryptionstatusprovider: use KubeAPIServersGetter instead of Clientset [#2235](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2235)
* NO-JIRA: Refactor KMS cases [#2229](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2229)
* [CNTRLPLANE-3237](https://issues.redhat.com/browse/CNTRLPLANE-3237): intro kubeAPIServerEncryptionStatusProvider [#2230](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2230)
* NO-JIRA: Remove old test files [#2232](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2232)
* [OCPSTRAT-3036](https://issues.redhat.com/browse/OCPSTRAT-3036): Rebase 1.36.2 [#2129](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2129)
* NO-JIRA: Bump library-go to sync [#2227](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2227)
* NO-JIRA: Remove old helper and assertion func [#2223](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2223)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/ec48ccc58abf89708dcdb1a477ed260d7754a17d...8435938a07d3cc11c7c0df84fc3afee3d98adfc3)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/4e72164b8bc505033ad565ab01d57963e7c9688e)

* [OCPSTRAT-3036](https://issues.redhat.com/browse/OCPSTRAT-3036): Rebase 1.36.2 [#930](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/930)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/209d5915dc12d517be79430e4bf4e8b0f88e405b...4e72164b8bc505033ad565ab01d57963e7c9688e)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/56fa325466a1f2a2d41435ba3a58b2bf8fdab2f3)

* [OCPSTRAT-3036](https://issues.redhat.com/browse/OCPSTRAT-3036): Rebase 1.36.2 [#646](https://github.com/openshift/cluster-kube-scheduler-operator/pull/646)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/4d89ee063475ec33671b7f255bf6e304bb11e235...56fa325466a1f2a2d41435ba3a58b2bf8fdab2f3)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/74395dcb5ce562c63d9847aa5816c474188fea78)

* [OCPBUGS-98450](https://issues.redhat.com/browse/OCPBUGS-98450): fall back to kube-system/global-pull-secret for telemeter-client token [#2985](https://github.com/openshift/cluster-monitoring-operator/pull/2985)
* NO-ISSUE: Update prometheus-operator dependencies [#2966](https://github.com/openshift/cluster-monitoring-operator/pull/2966)
* [OU-1389](https://issues.redhat.com/browse/OU-1389): manually pass features to monitoring plugin [#2987](https://github.com/openshift/cluster-monitoring-operator/pull/2987)
* [OCPBUGS-99019](https://issues.redhat.com/browse/OCPBUGS-99019): jsonnet: exclude AlertmanagerClusterFailedPeers from shipped rules [#2993](https://github.com/openshift/cluster-monitoring-operator/pull/2993)
* [MON-4523](https://issues.redhat.com/browse/MON-4523): ClusterMonitoring prometheusConfig [#2953](https://github.com/openshift/cluster-monitoring-operator/pull/2953)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/81d1a317a59d2b51ca83a282dd23b3b9563f0974...74395dcb5ce562c63d9847aa5816c474188fea78)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/a9eba93f442f24b01ab2592417d0190a3a1fc8ea)

* Revert "Enable Network Observability on Day 0" (#2925) [#3086](https://github.com/openshift/cluster-network-operator/pull/3086)
* [CORENET-6714](https://issues.redhat.com/browse/CORENET-6714): Enable Network Observability on Day 0 [#2925](https://github.com/openshift/cluster-network-operator/pull/2925)
* [OCPBUGS-99074](https://issues.redhat.com/browse/OCPBUGS-99074): Align frr-k8s 5.0 CRDs [#3070](https://github.com/openshift/cluster-network-operator/pull/3070)
* [CORENET-7046](https://issues.redhat.com/browse/CORENET-7046): Bump Kubernetes to 1.36.2 and OCP to 5.0 [#3017](https://github.com/openshift/cluster-network-operator/pull/3017)
* [CORENET-7125](https://issues.redhat.com/browse/CORENET-7125): iptables to nftables [#3038](https://github.com/openshift/cluster-network-operator/pull/3038)
* NO-JIRA: Refresh Reviewers & Approvers lists [#3048](https://github.com/openshift/cluster-network-operator/pull/3048)
* [OCPBUGS-62144](https://issues.redhat.com/browse/OCPBUGS-62144): Makes sure rendering for egress IP reachabilityTimeout triggers restart of ovnkube (node/control) pods [#2955](https://github.com/openshift/cluster-network-operator/pull/2955)
* [CORENET-7267](https://issues.redhat.com/browse/CORENET-7267): Add pre-merge and custom checks to CodeRabbit configuration [#3037](https://github.com/openshift/cluster-network-operator/pull/3037)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/d46aa4c5f37dba622ee78279cedfdf2775324fe1...a9eba93f442f24b01ab2592417d0190a3a1fc8ea)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/a9d25d502ca894272f88753f1bd7ecef82fb188e)

* [OCPBUGS-97809](https://issues.redhat.com/browse/OCPBUGS-97809): e2e: fix broken checks and rework netqueue tests to avoid ARM ethtool blackout flakes [#1557](https://github.com/openshift/cluster-node-tuning-operator/pull/1557)
* [OCPBUGS-98915](https://issues.redhat.com/browse/OCPBUGS-98915): E2E: LLC: Pass fresh ctx variable to DeferCleanup functions [#1562](https://github.com/openshift/cluster-node-tuning-operator/pull/1562)
* [CNF-23471](https://issues.redhat.com/browse/CNF-23471): Dedicate cpus for dpdk vswitch [#1546](https://github.com/openshift/cluster-node-tuning-operator/pull/1546)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/35d8129e2d0ebaf0a76f4b93d22387234bf4acac...a9d25d502ca894272f88753f1bd7ecef82fb188e)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/7e4e62ec9b5cd8bbe183566e02f6d1abae71eb40)

* [OPRUN-4676](https://issues.redhat.com/browse/OPRUN-4676): support service account deprecation for OCP 5.0 [#222](https://github.com/openshift/cluster-olm-operator/pull/222)
* [OPRUN-4696](https://issues.redhat.com/browse/OPRUN-4696): fix upgrade block message and add 5.0 cluster unit tests [#216](https://github.com/openshift/cluster-olm-operator/pull/216)
* NO-ISSUE: Remove stale reviewers/approvers, add trgeiger [#220](https://github.com/openshift/cluster-olm-operator/pull/220)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/795384212aa1ec66d3c176b33bd7ecc6a38fd560...7e4e62ec9b5cd8bbe183566e02f6d1abae71eb40)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/fe23a9955661bfc5c6b67fccae4fdf1fe68fedc2)

* [CNTRLPLANE-3237](https://issues.redhat.com/browse/CNTRLPLANE-3237): encryptionstatusprovider: implement UpdateKMSEncryptionStatus [#736](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/736)
* [CNTRLPLANE-3237](https://issues.redhat.com/browse/CNTRLPLANE-3237): encryptionstatusprovider: use OpenShiftAPIServerInterface instead of Clientset [#735](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/735)
* NO-JIRA: kms to kms key identifier check [#728](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/728)
* [OCPBUGS-87507](https://issues.redhat.com/browse/OCPBUGS-87507): Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 5.0 [#705](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/705)
* [CNTRLPLANE-3237](https://issues.redhat.com/browse/CNTRLPLANE-3237): intro openShiftAPIServerEncryptionStatusProvider [#734](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/734)
* NO-JIRA: Bump library-go to sync [#732](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/732)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/0296e27fd2034cf4365b97b4c1a103b3be4a6298...fe23a9955661bfc5c6b67fccae4fdf1fe68fedc2)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/01afc4aac71a8e8be26383a0421bed7673391750)

* [OCPSTRAT-3036](https://issues.redhat.com/browse/OCPSTRAT-3036): Bump to Kube v1.36.2 [#197](https://github.com/openshift/cluster-policy-controller/pull/197)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/050c1ee6aeb0838daf75858fd853cca1e0098fa9...01afc4aac71a8e8be26383a0421bed7673391750)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/027e419696ec443ee8b6257bc306d14dd024eaa7)

* [OTA-2084](https://issues.redhat.com/browse/OTA-2084): Conditionally deploy console plugin when AgenticRun CRD is present [#1425](https://github.com/openshift/cluster-version-operator/pull/1425)
* NO-JIRA: Fix make build target cd issue [#1404](https://github.com/openshift/cluster-version-operator/pull/1404)
* [OTA-2064](https://issues.redhat.com/browse/OTA-2064): Rename Proposal API to AgenticRun [#1422](https://github.com/openshift/cluster-version-operator/pull/1422)
* [OTA-1967](https://issues.redhat.com/browse/OTA-1967): install: Drop Lightspeed CustomResourceDefinitions (Proposal, etc.) [#1412](https://github.com/openshift/cluster-version-operator/pull/1412)
* [OTA-1956](https://issues.redhat.com/browse/OTA-1956): install: Split multi-document YAML and add missing annotations [#1423](https://github.com/openshift/cluster-version-operator/pull/1423)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/b5833af1ada5a3036f60cc0c22d460908958e02a...027e419696ec443ee8b6257bc306d14dd024eaa7)


### [console](https://github.com/openshift/console/tree/41d3938c6aae34462398432f3013358ddf37dbb4)

* [HELM-731](https://issues.redhat.com/browse/HELM-731): Upgrade helm in console [#16607](https://github.com/openshift/console/pull/16607)
* [OCPBUGS-98489](https://issues.redhat.com/browse/OCPBUGS-98489): CVE-2026-59869 bump js-yaml [#16760](https://github.com/openshift/console/pull/16760)
* [CONSOLE-5415](https://issues.redhat.com/browse/CONSOLE-5415), [OCPBUGS-94037](https://issues.redhat.com/browse/OCPBUGS-94037): Bump react-router to ~7.18.1 [#16726](https://github.com/openshift/console/pull/16726)
* NO-ISSUE: Add empty Prow techPreview e2e entrypoint scripts [#16766](https://github.com/openshift/console/pull/16766)
* NO-ISSUE: Match operator lifecycle versions by major.minor only [#16698](https://github.com/openshift/console/pull/16698)
* [CONSOLE-3956](https://issues.redhat.com/browse/CONSOLE-3956): Replace custom Shortcut components with PF ShortcutGrid [#16207](https://github.com/openshift/console/pull/16207)
* NO-ISSUE: Skip OLMv0-specific e2e tests when techPreview is enabled [#16759](https://github.com/openshift/console/pull/16759)
* [CONSOLE-5423](https://issues.redhat.com/browse/CONSOLE-5423): Add rspack support for dynamic plugins [#16752](https://github.com/openshift/console/pull/16752)
* [CONSOLE-5421](https://issues.redhat.com/browse/CONSOLE-5421): Rename "Self-support" to "Unsupported" and stack support phase date [#16742](https://github.com/openshift/console/pull/16742)
* [CONSOLE-5196](https://issues.redhat.com/browse/CONSOLE-5196): Fix flaky Playwright e2e tests caused by OAuth redirect timing [#16740](https://github.com/openshift/console/pull/16740)
* [CONSOLE-5306](https://issues.redhat.com/browse/CONSOLE-5306): Surface Playwright report link in Prow Spyglass [#16743](https://github.com/openshift/console/pull/16743)
* [OCPBUGS-50016](https://issues.redhat.com/browse/OCPBUGS-50016), [OCPBUGS-86587](https://issues.redhat.com/browse/OCPBUGS-86587): Bump to PF 6.6.0 [#16750](https://github.com/openshift/console/pull/16750)
* [OCPBUGS-88715](https://issues.redhat.com/browse/OCPBUGS-88715): Bump follow-redirects from 1.15.3 to 1.16.0 to remediate CVE-2026-40895 [#16590](https://github.com/openshift/console/pull/16590)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/bc58d0788f862ae05af0a910c701fd47b16b791b...41d3938c6aae34462398432f3013358ddf37dbb4)


### [console-operator](https://github.com/openshift/console-operator/tree/cf5ddbe391ff5ad7e683c1c553887ea6c1c38693)

* [OCPBUGS-93982](https://issues.redhat.com/browse/OCPBUGS-93982): gate Progressing on version transition and operand rollout status [#1188](https://github.com/openshift/console-operator/pull/1188)
* [HELM-639](https://issues.redhat.com/browse/HELM-639): Update Helm download manifests for Helm 3 and Helm 4. [#1175](https://github.com/openshift/console-operator/pull/1175)
* [CONSOLE-5122](https://issues.redhat.com/browse/CONSOLE-5122): Multi-domain console route, ConfigMap, and OAuth support [#1184](https://github.com/openshift/console-operator/pull/1184)
* [OCPBUGS-67134](https://issues.redhat.com/browse/OCPBUGS-67134): add grace period before reporting Available=False [#1179](https://github.com/openshift/console-operator/pull/1179)
* [Full changelog](https://github.com/openshift/console-operator/compare/da112ceea6da057747900b7e39a88ada9e320e9b...cf5ddbe391ff5ad7e683c1c553887ea6c1c38693)


### [coredns](https://github.com/openshift/coredns/tree/37aaba896e97f4b9a091aab6d36f2213b8854474)

* [NE-2744](https://issues.redhat.com/browse/NE-2744): UPSTREAM: 8227: fix(tls): use Go TLS defaults [#194](https://github.com/openshift/coredns/pull/194)
* [OCPBUGS-87352](https://issues.redhat.com/browse/OCPBUGS-87352): Updating coredns-container image to be consistent with ART for 5.0 [#189](https://github.com/openshift/coredns/pull/189)
* [Full changelog](https://github.com/openshift/coredns/compare/97f7cc327ab5df7d6da38137b7be338efa9a3551...37aaba896e97f4b9a091aab6d36f2213b8854474)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/beb9567b4ef15656a88c1c71e0b08e7bf2e96aaa)

* [OCPBUGS-97795](https://issues.redhat.com/browse/OCPBUGS-97795): Bump golang.org/x/crypto to v0.53.0 [#197](https://github.com/openshift/csi-driver-nfs/pull/197)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/a40a98e2027a63e2a8ddd3589ee3c5142104dbd6...beb9567b4ef15656a88c1c71e0b08e7bf2e96aaa)


### [etcd](https://github.com/openshift/etcd/tree/64f8851a001f7e102d47bfe51ca0dac23951879a)

* [OCPBUGS-94014](https://issues.redhat.com/browse/OCPBUGS-94014): Rebase v3.6.13 on main (5.0/4.23) [#392](https://github.com/openshift/etcd/pull/392)
* [Full changelog](https://github.com/openshift/etcd/compare/bf6c0094589afdf6c814a28c24f8f1bb5a577816...64f8851a001f7e102d47bfe51ca0dac23951879a)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/30cc04797f50e78e91f8e47cc6c36c0da84eee2c)

* [OCPBUGS-84569](https://issues.redhat.com/browse/OCPBUGS-84569): Fix node.kubernetes.io/exclude-from-external-load-balancers on masters [#121](https://github.com/openshift/cloud-provider-gcp/pull/121)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/1a542ecb49b1b26ea7ecd6344a9ebe7dbe09b6b6...30cc04797f50e78e91f8e47cc6c36c0da84eee2c)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/194befaa927c8e6ca56526218f2d4f5e2d4bd431)

* 🐛 OCPBUGS-85337: set imagePullPolicy IfNotPresent on provider workloads [#299](https://github.com/openshift/cluster-api-provider-gcp/pull/299)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/ffbf9c2a410aa425c29c4628fa250d2e949b6876...194befaa927c8e6ca56526218f2d4f5e2d4bd431)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/2dad9ff88511cc4e82a777c49ec55cbed2e3a057)

* [STOR-2915](https://issues.redhat.com/browse/STOR-2915): Update go.opentelemetry.io/otel and otel/sdk to v1.43.0 [#125](https://github.com/openshift/gcp-pd-csi-driver/pull/125)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/e5a04641120fdae120db1c53cbed703f1ecf77e7...2dad9ff88511cc4e82a777c49ec55cbed2e3a057)


### [haproxy-router](https://github.com/openshift/router/tree/2c923e5799ed6622479461fa49ed860160c5314c)

* [NE-2220](https://issues.redhat.com/browse/NE-2220): Update HAProxy RPM in the router container to 3.2.19 [#792](https://github.com/openshift/router/pull/792)
* [NE-2741](https://issues.redhat.com/browse/NE-2741): Implement TLS Curves Support for Metrics Endpoints [#811](https://github.com/openshift/router/pull/811)
* [TRT-2813](https://issues.redhat.com/browse/TRT-2813): Revert "Make external cert validation asynchronous" [#817](https://github.com/openshift/router/pull/817)
* [NE-2766](https://issues.redhat.com/browse/NE-2766): Bump Kubernetes to 1.36.2 and Go to 1.26 [#814](https://github.com/openshift/router/pull/814)
* [OCPBUGS-77056](https://issues.redhat.com/browse/OCPBUGS-77056): Make external cert validation asynchronous [#745](https://github.com/openshift/router/pull/745)
* [OCPBUGS-87204](https://issues.redhat.com/browse/OCPBUGS-87204): Prevent SSRF via FQDN-typed EndpointSlices [#812](https://github.com/openshift/router/pull/812)
* [Full changelog](https://github.com/openshift/router/compare/92a1fe6420e7fa5cff3ac1e4234b866e8f742c9f...2c923e5799ed6622479461fa49ed860160c5314c)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/98b35193b2ac7a23a673325f5e9b830ecd5ba406)

* [OCPBUGS-90520](https://issues.redhat.com/browse/OCPBUGS-90520): UPSTREAM: 140211: Promote regression-issue-74839 to 1.5 [#2709](https://github.com/openshift/kubernetes/pull/2709)
* [OCPBUGS-99058](https://issues.redhat.com/browse/OCPBUGS-99058): Disable DRA extended resource test that requires dedicated DRA infrastructure [#2721](https://github.com/openshift/kubernetes/pull/2721)
* [OCPSTRAT-3036](https://issues.redhat.com/browse/OCPSTRAT-3036): Rebase 1.36.2 [#2653](https://github.com/openshift/kubernetes/pull/2653)
* [Full changelog](https://github.com/openshift/kubernetes/compare/a466682e3867da746be24d7d56c6641612721d6c...98b35193b2ac7a23a673325f5e9b830ecd5ba406)


### [hypershift](https://github.com/openshift/hypershift/tree/144cca9c5efe6c680bf91f0668313450019e3596)

* NO-JIRA: chore(konflux): update Tekton task bundles to latest versions [#9081](https://github.com/openshift/hypershift/pull/9081)
* [NE-2815](https://issues.redhat.com/browse/NE-2815): feat: configure HAProxy version selection [#9040](https://github.com/openshift/hypershift/pull/9040)
* [CNTRLPLANE-3791](https://issues.redhat.com/browse/CNTRLPLANE-3791): fix: revert api-lint --whole-files to avoid surfacing pre-existing violations [#9071](https://github.com/openshift/hypershift/pull/9071)
* [OCPBUGS-99014](https://issues.redhat.com/browse/OCPBUGS-99014): Authenticate Konnectivity agents with cluster CA [#9031](https://github.com/openshift/hypershift/pull/9031)
* [CNTRLPLANE-3032](https://issues.redhat.com/browse/CNTRLPLANE-3032): test: add e2e v2 tests for NodePool OSImageStream [#9033](https://github.com/openshift/hypershift/pull/9033)
* [OCPBUGS-98744](https://issues.redhat.com/browse/OCPBUGS-98744): compare post-upgrade RHCOS version against pre-upgrade instead of release metadata [#9014](https://github.com/openshift/hypershift/pull/9014)
* [OCPBUGS-98462](https://issues.redhat.com/browse/OCPBUGS-98462): add jitter to AWS endpoint service requeue delay [#8996](https://github.com/openshift/hypershift/pull/8996)
* [OCPBUGS-98465](https://issues.redhat.com/browse/OCPBUGS-98465): prevent DS crash in pull secret verifier and add propagation diagnostics [#8991](https://github.com/openshift/hypershift/pull/8991)
* [OCPBUGS-99289](https://issues.redhat.com/browse/OCPBUGS-99289): Exclude aggregated docs page from search index [#9043](https://github.com/openshift/hypershift/pull/9043)
* [CNTRLPLANE-3199](https://issues.redhat.com/browse/CNTRLPLANE-3199): add etcd backup infrastructure and docs for self-managed Azure [#8785](https://github.com/openshift/hypershift/pull/8785)
* [CNTRLPLANE-3862](https://issues.redhat.com/browse/CNTRLPLANE-3862): fix(ci): reintroduce verify-ci make target for GHA verify workflow [#9045](https://github.com/openshift/hypershift/pull/9045)
* [CNTRLPLANE-3859](https://issues.redhat.com/browse/CNTRLPLANE-3859): Restructure pre-commit push hooks for faster local feedback [#9042](https://github.com/openshift/hypershift/pull/9042)
* [CNTRLPLANE-3434](https://issues.redhat.com/browse/CNTRLPLANE-3434): add ho-release-gate pipeline for nightly promotion [#8602](https://github.com/openshift/hypershift/pull/8602)
* NO-JIRA: fix(cpo): regenerate stale ModernTLS test fixtures [#9041](https://github.com/openshift/hypershift/pull/9041)
* [CNTRLPLANE-647](https://issues.redhat.com/browse/CNTRLPLANE-647): Expose v4/v6InternalSubnet OVN-Kubernetes configuration in HostedCluster API [#8249](https://github.com/openshift/hypershift/pull/8249)
* [ARO-27360](https://issues.redhat.com/browse/ARO-27360): Add ACR pull identity configured metric [#8840](https://github.com/openshift/hypershift/pull/8840)
* [ARO-24037](https://issues.redhat.com/browse/ARO-24037): gate cloud config on hash to prevent serving stale content [#8946](https://github.com/openshift/hypershift/pull/8946)
* [CNTRLPLANE-3615](https://issues.redhat.com/browse/CNTRLPLANE-3615): add tls security profile configuration for the etcd [#8871](https://github.com/openshift/hypershift/pull/8871)
* [OCPBUGS-88312](https://issues.redhat.com/browse/OCPBUGS-88312): use in-cluster service for oauth-server [#8772](https://github.com/openshift/hypershift/pull/8772)
* [CNTRLPLANE-3791](https://issues.redhat.com/browse/CNTRLPLANE-3791): make pre-commit hooks resilient to mock generation failures [#9016](https://github.com/openshift/hypershift/pull/9016)
* NO-JIRA: update Tekton task bundles to latest versions [#9038](https://github.com/openshift/hypershift/pull/9038)
* [OCPBUGS-98384](https://issues.redhat.com/browse/OCPBUGS-98384): fix bastion cleanup KeyPair leak by capturing infraID/region eagerly [#8982](https://github.com/openshift/hypershift/pull/8982)
* [CNTRLPLANE-3674](https://issues.redhat.com/browse/CNTRLPLANE-3674): Add Jira Agent onboarding guide [#8814](https://github.com/openshift/hypershift/pull/8814)
* [CNTRLPLANE-3825](https://issues.redhat.com/browse/CNTRLPLANE-3825): move test conventions to TESTING.md [#9036](https://github.com/openshift/hypershift/pull/9036)
* [OCPSTRAT-3150](https://issues.redhat.com/browse/OCPSTRAT-3150): Add etcd sharding by resource kind support [#8705](https://github.com/openshift/hypershift/pull/8705)
* [OCPBUGS-98695](https://issues.redhat.com/browse/OCPBUGS-98695): add Azure CPO overrides for 4.22 [#9010](https://github.com/openshift/hypershift/pull/9010)
* NO-JIRA: ci(deps): bump actions/setup-node from 6.4.0 to 7.0.0 [#9030](https://github.com/openshift/hypershift/pull/9030)
* [CNTRLPLANE-3763](https://issues.redhat.com/browse/CNTRLPLANE-3763): tag bastion resources with e2e provenance [#9022](https://github.com/openshift/hypershift/pull/9022)
* [OCPBUGS-98575](https://issues.redhat.com/browse/OCPBUGS-98575): feat: inject hosted cluster TLS security profile into packageserver [#9001](https://github.com/openshift/hypershift/pull/9001)
* [AUTOSCALE-870](https://issues.redhat.com/browse/AUTOSCALE-870): add KarpenterOperator tech-preview FeatureGate [#8976](https://github.com/openshift/hypershift/pull/8976)
* [CNTRLPLANE-3774](https://issues.redhat.com/browse/CNTRLPLANE-3774): fix: control-plane-operator: improve opaque conditions [#8804](https://github.com/openshift/hypershift/pull/8804)
* [CNTRLPLANE-3695](https://issues.redhat.com/browse/CNTRLPLANE-3695): refactor(hcco): extract machine-config-daemon pod name format to constant [#8988](https://github.com/openshift/hypershift/pull/8988)
* [CNTRLPLANE-3820](https://issues.redhat.com/browse/CNTRLPLANE-3820): add cleanleaked tool for AWS leaked resource cleanup [#8964](https://github.com/openshift/hypershift/pull/8964)
* [SPLAT-2743](https://issues.redhat.com/browse/SPLAT-2743): aws/ccm - remove inline iam policy patch [#8835](https://github.com/openshift/hypershift/pull/8835)
* NO-JIRA: Add validateOnUpdateTableInput to envtest and fix test specs [#9015](https://github.com/openshift/hypershift/pull/9015)
* [OCPBUGS-98461](https://issues.redhat.com/browse/OCPBUGS-98461): requeue CRR on transiently unavailable resources [#8997](https://github.com/openshift/hypershift/pull/8997)
* [OCPBUGS-98718](https://issues.redhat.com/browse/OCPBUGS-98718): retry CreateVpcEndpoint on AWS throttle errors [#9012](https://github.com/openshift/hypershift/pull/9012)
* [CNTRLPLANE-3030](https://issues.redhat.com/browse/CNTRLPLANE-3030): feat(nodepool,ignition-server): consume os-stream and add ValidOSImageStream condition [#8792](https://github.com/openshift/hypershift/pull/8792)
* [OCPBUGS-88738](https://issues.redhat.com/browse/OCPBUGS-88738): clean up orphaned mirrored ConfigMaps on NodePool deletion [#8890](https://github.com/openshift/hypershift/pull/8890)
* [OCPBUGS-97830](https://issues.redhat.com/browse/OCPBUGS-97830): Add wait-for-etcd init container to oauth-apiserver [#8940](https://github.com/openshift/hypershift/pull/8940)
* fix(ci): make race detection opt-out for pre-push hook [#9003](https://github.com/openshift/hypershift/pull/9003)
* [CNTRLPLANE-3763](https://issues.redhat.com/browse/CNTRLPLANE-3763): tag CLI and e2e AWS resources with infra-id, cluster-name, and source [#8909](https://github.com/openshift/hypershift/pull/8909)
* [OCPBUGS-93462](https://issues.redhat.com/browse/OCPBUGS-93462): Fix stale resourceVersion in HCCO patchHCPStatusCondition [#8902](https://github.com/openshift/hypershift/pull/8902)
* [OCPBUGS-98466](https://issues.redhat.com/browse/OCPBUGS-98466): retry Prometheus query exec on transient konnectivity 502 [#8995](https://github.com/openshift/hypershift/pull/8995)
* [OCPBUGS-98464](https://issues.redhat.com/browse/OCPBUGS-98464): handle stale DaemonSet in GlobalPullSecret test [#8990](https://github.com/openshift/hypershift/pull/8990)
* [SPLAT-2741](https://issues.redhat.com/browse/SPLAT-2741): Add SetSecurityGroups perms for AWS CCM for BYO SG on AWS NLB [#8401](https://github.com/openshift/hypershift/pull/8401)
* [OCPBUGS-98571](https://issues.redhat.com/browse/OCPBUGS-98571): Skip Azure topology LB scope override for ARO HCP IngressController [#8992](https://github.com/openshift/hypershift/pull/8992)
* [CNTRLPLANE-3553](https://issues.redhat.com/browse/CNTRLPLANE-3553): Wire usesRunc detection into RHEL stream resolution [#8832](https://github.com/openshift/hypershift/pull/8832)
* [OCPBUGS-88531](https://issues.redhat.com/browse/OCPBUGS-88531): Remove CPO-side restart logic for CNO operands [#8751](https://github.com/openshift/hypershift/pull/8751)
* [CNTRLPLANE-3831](https://issues.redhat.com/browse/CNTRLPLANE-3831): skip UpstreamParity OIDC tests on releases before 4.23 [#8987](https://github.com/openshift/hypershift/pull/8987)
* [OCPBUGS-98086](https://issues.redhat.com/browse/OCPBUGS-98086): fix(cpo,hcco): prevent premature KAS convergence during KMS key rotation [#8970](https://github.com/openshift/hypershift/pull/8970)
* [OCPBUGS-78310](https://issues.redhat.com/browse/OCPBUGS-78310): fix(cli): initialize controller-runtime logger in product-cli [#8955](https://github.com/openshift/hypershift/pull/8955)
* [OCPBUGS-63720](https://issues.redhat.com/browse/OCPBUGS-63720): orphan machines when managed identity is invalid on clus… [#8296](https://github.com/openshift/hypershift/pull/8296)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/hypershift/compare/8ea96d7f8cfa3eb4e7dc93be96a04341fc5a2240...144cca9c5efe6c680bf91f0668313450019e3596)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/970918e2a33b4191e56e511a84144d93180bdcb4)

* [STOR-2921](https://issues.redhat.com/browse/STOR-2921): Rebase to v5.2.27 for OCP 5.0 [#154](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/154)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/f78abbb3502a875b7ddf769cf6b7c1b8e3ebba29...970918e2a33b4191e56e511a84144d93180bdcb4)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/be4fd01725ce5ab0b47f846c905a349aeee8ab53)

* [STOR-2914](https://issues.redhat.com/browse/STOR-2914): Bump all deps for 5.0.0 [#176](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/176)
* [STOR-2921](https://issues.redhat.com/browse/STOR-2921): update deployment manifests from upstream [#174](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/174)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/e6d299f720a76dd25fcdc304d408f43c33a42fb6...be4fd01725ce5ab0b47f846c905a349aeee8ab53)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/be3192e4c05659282c3d1f1720f8cd93b59b399a)

* 🐛 OCPBUGS-85337: set imagePullPolicy IfNotPresent on provider workloads [#164](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/164)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/0fdc00b1c1f411da3c385e27e63d909761ad1aa9...be3192e4c05659282c3d1f1720f8cd93b59b399a)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/a31f65a766150264daac38fcebe1d111c5ad79a0)

* [OCPCLOUD-3641](https://issues.redhat.com/browse/OCPCLOUD-3641): Support configurable boot volume profile, size, IOPS and bandwidth [#97](https://github.com/openshift/machine-api-provider-ibmcloud/pull/97)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/80a91b3fb96a4fb74ed03e895d617b462ad21db2...a31f65a766150264daac38fcebe1d111c5ad79a0)


### [insights-operator](https://github.com/openshift/insights-operator/tree/46db2e2ca9b0b7576e0b66f4521a2cf83aad8893)

* [CCXDEV-16524](https://issues.redhat.com/browse/CCXDEV-16524): gather alertmanager configuration [#1322](https://github.com/openshift/insights-operator/pull/1322)
* NO-JIRA: Update misleading docs on the QEMU gatherer [#1319](https://github.com/openshift/insights-operator/pull/1319)
* [Full changelog](https://github.com/openshift/insights-operator/compare/ad672d905ed6c2df22de2d2ccf6712e04abf10f9...46db2e2ca9b0b7576e0b66f4521a2cf83aad8893)


### [ironic](https://github.com/openshift/ironic-image/tree/e9478ec49dd508f74234582a8247f9186f584500)

* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#867](https://github.com/openshift/ironic-image/pull/867)
* [METAL-1898](https://issues.redhat.com/browse/METAL-1898): Add ironic-prometheus-exporter to update-requirements workflow [#866](https://github.com/openshift/ironic-image/pull/866)
* [Full changelog](https://github.com/openshift/ironic-image/compare/3320724e7b08113b20b518af155fb44aabc87093...e9478ec49dd508f74234582a8247f9186f584500)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/f0ff570e26f0312dbb02058a092887c276bf0706)

* NO-ISSUE: Update requirements.cachito with latest ironic-python-agent [#291](https://github.com/openshift/ironic-agent-image/pull/291)
* [METAL-1878](https://issues.redhat.com/browse/METAL-1878): [s2i] Move direct dependencies from packages to source [#290](https://github.com/openshift/ironic-agent-image/pull/290)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/5d658b9a168b136153842afbce46ab0e874f404d...f0ff570e26f0312dbb02058a092887c276bf0706)


### [karpenter-operator](https://github.com/openshift/karpenter-operator/tree/79a93d5b4221424832a247a618e20b8177ec71ed)

* [AUTOSCALE-644](https://issues.redhat.com/browse/AUTOSCALE-644): Release chores 5.0 for Karpenter [#18](https://github.com/openshift/karpenter-operator/pull/18)
* [AUTOSCALE-806](https://issues.redhat.com/browse/AUTOSCALE-806): Introduce Karpenter API lifecycle object and controller [#16](https://github.com/openshift/karpenter-operator/pull/16)
* [Full changelog](https://github.com/openshift/karpenter-operator/compare/7a35066ed99bdab16a8ddb2f82260144621630cc...79a93d5b4221424832a247a618e20b8177ec71ed)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/e7a7870abd5c0729e2bc4cfe688e141cff9f5c75)

* [NE-2223](https://issues.redhat.com/browse/NE-2223): Bump HAProxy to 3.2 in egress DNS proxy [#244](https://github.com/openshift/images/pull/244)
* [NE-2716](https://issues.redhat.com/browse/NE-2716): Replace iptables with nftables in origin-egress-router [#242](https://github.com/openshift/images/pull/242)
* [Full changelog](https://github.com/openshift/images/compare/c0471a7e1f4d7ca01b7089ee2993ca659cd84594...e7a7870abd5c0729e2bc4cfe688e141cff9f5c75)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/e24eb97b02b3d39095c70675f5594ae5bc98d238)

* [OCPBUGS-87412](https://issues.redhat.com/browse/OCPBUGS-87412): Updating ose-kube-metrics-server-container image to be consistent with ART for 5.0 [#69](https://github.com/openshift/kubernetes-metrics-server/pull/69)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/f4cd53392e69c6ba7c2d878ad929f6cdfb131b1d...e24eb97b02b3d39095c70675f5594ae5bc98d238)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/019ecc7d533333dfd3bf8893e78cd7ec6e282f01)

* [OCPBUGS-99282](https://issues.redhat.com/browse/OCPBUGS-99282): embed a copy of the timezone database [#148](https://github.com/openshift/kube-state-metrics/pull/148)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/b5df90392fbb08eb4c48e8a07f35b34a4c846312...019ecc7d533333dfd3bf8893e78cd7ec6e282f01)


### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/5eb884abcd2ff17ae8d7b2691ca12494597c08a6)

* [OCPBUGS-87345](https://issues.redhat.com/browse/OCPBUGS-87345): Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART for 5.0 [#75](https://github.com/openshift/cloud-provider-kubevirt/pull/75)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/76dd5a6fa9e86573bf3dfb79be17edf832e3bae1...5eb884abcd2ff17ae8d7b2691ca12494597c08a6)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/3be0a58b3e9d168eb2dd746c58d79e9081f10c73)

* [SPLAT-2854](https://issues.redhat.com/browse/SPLAT-2854): Fixing issue related to unintended VAP interactions [#1518](https://github.com/openshift/machine-api-operator/pull/1518)
* [SPLAT-2858](https://issues.redhat.com/browse/SPLAT-2858): Fixing test issue where error result was for other resource type [#1522](https://github.com/openshift/machine-api-operator/pull/1522)
* [SPLAT-2813](https://issues.redhat.com/browse/SPLAT-2813): Create VAP E2Es [#1517](https://github.com/openshift/machine-api-operator/pull/1517)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/c0b2d2c9c112bc46d8b4ac1c92e7fd0f216ad826...3be0a58b3e9d168eb2dd746c58d79e9081f10c73)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/2c2abc8c85878ab4cc84d2fbdc7752d34b46948c)

* [CNTRLPLANE-3840](https://issues.redhat.com/browse/CNTRLPLANE-3840): Remove ExternalTopologyMode guard from OSImageStream bootstrap [#6308](https://github.com/openshift/machine-config-operator/pull/6308)
* [MCO-2450](https://issues.redhat.com/browse/MCO-2450): Enable OS ImageStreams in OKD [#6314](https://github.com/openshift/machine-config-operator/pull/6314)
* [MCO-1333](https://issues.redhat.com/browse/MCO-1333): Validate OCL Containerfiles [#6187](https://github.com/openshift/machine-config-operator/pull/6187)
* NO-ISSUE: Add reusable utilities for image inspection [#6327](https://github.com/openshift/machine-config-operator/pull/6327)
* [MCO-1944](https://issues.redhat.com/browse/MCO-1944): Add NetworkPolicy Test case [#6283](https://github.com/openshift/machine-config-operator/pull/6283)
* [MCO-2413](https://issues.redhat.com/browse/MCO-2413): Image inspection cache [#6306](https://github.com/openshift/machine-config-operator/pull/6306)
* [MCO-1847](https://issues.redhat.com/browse/MCO-1847): adapt tc 52373 to new AWS marketplace feature [#6324](https://github.com/openshift/machine-config-operator/pull/6324)
* [MCO-1847](https://issues.redhat.com/browse/MCO-1847): update AWS backdated images in extended tests [#6320](https://github.com/openshift/machine-config-operator/pull/6320)
* [CORENET-5972](https://issues.redhat.com/browse/CORENET-5972): Add openvswitch-ipsec package into ipsec plugin [#4878](https://github.com/openshift/machine-config-operator/pull/4878)
* [MCO-2408](https://issues.redhat.com/browse/MCO-2408): Improve/Reduce code/duplicated logic in OsImageBuilderInNode [#6270](https://github.com/openshift/machine-config-operator/pull/6270)
* [MCO-2424](https://issues.redhat.com/browse/MCO-2424): Fix cert rotation timeout [#6309](https://github.com/openshift/machine-config-operator/pull/6309)
* [MCO-1990](https://issues.redhat.com/browse/MCO-1990): Irreconcilable configs test suite [#6085](https://github.com/openshift/machine-config-operator/pull/6085)
* [OCPBUGS-98745](https://issues.redhat.com/browse/OCPBUGS-98745): MCO-2424: add missing RBAC for pkis resource in MCC ClusterRole [#6307](https://github.com/openshift/machine-config-operator/pull/6307)
* [MCO-2301](https://issues.redhat.com/browse/MCO-2301): AWS Marketplace bootimage update support [#6015](https://github.com/openshift/machine-config-operator/pull/6015)
* [MCO-2407](https://issues.redhat.com/browse/MCO-2407): Move OSImageStream sync to MCC [#6278](https://github.com/openshift/machine-config-operator/pull/6278)
* [MCO-2427](https://issues.redhat.com/browse/MCO-2427): move password, bootimages and cpms suites to longduration suite [#6302](https://github.com/openshift/machine-config-operator/pull/6302)
* [OCPNODE-4604](https://issues.redhat.com/browse/OCPNODE-4604): upgrade CRIOCredentialProviderConfig to v1 [#6220](https://github.com/openshift/machine-config-operator/pull/6220)
* [OCPBUGS-98210](https://issues.redhat.com/browse/OCPBUGS-98210): Fix imagestream detection with extra guard [#6296](https://github.com/openshift/machine-config-operator/pull/6296)
* [MCO-1997](https://issues.redhat.com/browse/MCO-1997): MCO-2297: Add test for osImageStream [#5881](https://github.com/openshift/machine-config-operator/pull/5881)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/4d59cd4cf18393469ecfdc5e89e43c8b3f427117...2c2abc8c85878ab4cc84d2fbdc7752d34b46948c)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/15a47271dcfda5c0e57a0a79720bab4e0baabdd8)

* [OCPBUGS-83863](https://issues.redhat.com/browse/OCPBUGS-83863): Simplify Dockerfile to rhel9-only build [#285](https://github.com/openshift/multus-cni/pull/285)
* [Full changelog](https://github.com/openshift/multus-cni/compare/b4ec7d8239ce4bd3ed949bce9816a013377b44c7...15a47271dcfda5c0e57a0a79720bab4e0baabdd8)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/d918bda28ad3d0200b6e4f2ef2801556764762e5)

* [OCPBUGS-83863](https://issues.redhat.com/browse/OCPBUGS-83863): Drop rhel8 builds, strip debug info [#405](https://github.com/openshift/whereabouts-cni/pull/405)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/d691040e509bb20c26b5e8366c0d6f3bb45a5e02...d918bda28ad3d0200b6e4f2ef2801556764762e5)


### [must-gather](https://github.com/openshift/must-gather/tree/9bb48fe05db060476f9a380b9d6ea16f1e94a98b)

* [OCPBUGS-87538](https://issues.redhat.com/browse/OCPBUGS-87538): Updating ose-must-gather-container image to be consistent with ART for 5.0 [#553](https://github.com/openshift/must-gather/pull/553)
* [MG-247](https://issues.redhat.com/browse/MG-247): collect imagedigestmirrorsets and imagetagmirrorset resources [#538](https://github.com/openshift/must-gather/pull/538)
* [OCPBUGS-85052](https://issues.redhat.com/browse/OCPBUGS-85052): feat: add pacemaker resource to mustgather [#556](https://github.com/openshift/must-gather/pull/556)
* [Full changelog](https://github.com/openshift/must-gather/compare/16ac27eedcc79f5b57d77eb01e6b187b84fe7daa...9bb48fe05db060476f9a380b9d6ea16f1e94a98b)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/e0fc86dadfa62716b69d2ed9e084f9dcd0fc8844)

* [OCPBUGS-87459](https://issues.redhat.com/browse/OCPBUGS-87459): Updating ose-network-metrics-daemon-container image to be consistent with ART for 5.0 [#144](https://github.com/openshift/network-metrics-daemon/pull/144)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/5b233ea1d80733c1b00c6bad65dec0620dbf783a...e0fc86dadfa62716b69d2ed9e084f9dcd0fc8844)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/2d8f85d257952c1a90467b6ee397334d49b7820e)

* [OCPBUGS-98878](https://issues.redhat.com/browse/OCPBUGS-98878): Override linkify-it to v5.0.2 and run npm audit fix (#452) [#452](https://github.com/openshift/networking-console-plugin/pull/452)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/35f8ec76aeffeab0452e36d39488ad00ac9c22c1...2d8f85d257952c1a90467b6ee397334d49b7820e)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/534d780fe51bac9f9d75ff650fccb95d72cfcdb4)

* [CNTRLPLANE-2449](https://issues.redhat.com/browse/CNTRLPLANE-2449): feat: generate OpenAPI schemas from a running oauth-apiserver instance [#211](https://github.com/openshift/oauth-apiserver/pull/211)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/9e9722dd2f3f71ec891e3413a8a8cdd6dbfe872f...534d780fe51bac9f9d75ff650fccb95d72cfcdb4)


### [oauth-server](https://github.com/openshift/oauth-server/tree/e3f99711a0137c15a8263ec753681d82c4634e10)

* [CNTRLPLANE-3751](https://issues.redhat.com/browse/CNTRLPLANE-3751): Add dynamic proxy CA reload for outbound IdP transports [#244](https://github.com/openshift/oauth-server/pull/244)
* [CNTRLPLANE-3751](https://issues.redhat.com/browse/CNTRLPLANE-3751): Rebase onto 1.35 to be able to update openshift/api [#247](https://github.com/openshift/oauth-server/pull/247)
* [Full changelog](https://github.com/openshift/oauth-server/compare/79ea885db0e910f37c9a69388df9ee06a491a0bb...e3f99711a0137c15a8263ec753681d82c4634e10)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/186c9e640dcbadd09b8ef67773cb43eae733330a)

* NO-ISSUE: Remove stale reviewers/approvers, add trgeiger [#769](https://github.com/openshift/operator-framework-operator-controller/pull/769)
* [OPRUN-4392](https://issues.redhat.com/browse/OPRUN-4392), [OPRUN-4393](https://issues.redhat.com/browse/OPRUN-4393): Add OLMv1 progress deadline QE tests + fixes [#755](https://github.com/openshift/operator-framework-operator-controller/pull/755)
* [OPRUN-4437](https://issues.redhat.com/browse/OPRUN-4437): test: add allow-case for operator maxOCPVersion &gt; cluster version [#765](https://github.com/openshift/operator-framework-operator-controller/pull/765)
* NO-ISSUE: Remove HelmChartSupport feature gate from experimental manifests [#764](https://github.com/openshift/operator-framework-operator-controller/pull/764)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/c86311fbce5d931b387b4d579e0e301406ce9c86...186c9e640dcbadd09b8ef67773cb43eae733330a)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/51bafa8bfb18064eae0ca9502fb4bb6c6963ff61)

* 🐛 OCPBUGS-85337: set imagePullPolicy IfNotPresent on provider workloads [#424](https://github.com/openshift/cluster-api-provider-openstack/pull/424)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/76198b243458ca266eb8b87bbcf69a7b7c3eec7f...51bafa8bfb18064eae0ca9502fb4bb6c6963ff61)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/56b3931de4636f7e0d212001f2074b9dddb45a8f)

* NO-ISSUE: Remove stale reviewers/approvers, add trgeiger [#1339](https://github.com/openshift/operator-framework-olm/pull/1339)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/277e53cc3ad60306296e1269ea12b97c3558cfdc...56b3931de4636f7e0d212001f2074b9dddb45a8f)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/1b7ac84cc2c8bdef32807efa5650752a46bca96c)

* NO-ISSUE: Bump github.com/operator-framework/operator-lifecycle-manager from 0.43.0 to 0.45.0 [#761](https://github.com/operator-framework/operator-marketplace/pull/761)
* NO-ISSUE: Bump dependencies to kube 1.36 [#766](https://github.com/operator-framework/operator-marketplace/pull/766)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/7e3aaeefdac17e1dd690554c9f0549319d219214...1b7ac84cc2c8bdef32807efa5650752a46bca96c)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/8e2e1542642847da592268a0ab94a207eb8d3605)

* NO-JIRA: DownStream Merge [07-02-2026] [#3279](https://github.com/openshift/ovn-kubernetes/pull/3279)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/fc46681bd5720c0139c394eea3d2ab686a2cf46f...8e2e1542642847da592268a0ab94a207eb8d3605)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/f90431bfe8ca93850450b2b24fae152d2385ca08)

* [STOR-2914](https://issues.redhat.com/browse/STOR-2914): Bump all deps for 5.0.0 [#119](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/119)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/ab04496a6855098853048c957c499f2a63200f8e...f90431bfe8ca93850450b2b24fae152d2385ca08)


### [prometheus](https://github.com/openshift/prometheus/tree/5de59a08aee5922ea327f38d027780056a41acfa)

* NO-JIRA: [bot] Bump openshift/prometheus to v3.13.1 [#345](https://github.com/openshift/prometheus/pull/345)
* NO-JIRA: chore: revert narrow selectors detection for le/quantile labels [#344](https://github.com/openshift/prometheus/pull/344)
* [Full changelog](https://github.com/openshift/prometheus/compare/fb9f64e2410f196d83761048726ed94802f6b8f0...5de59a08aee5922ea327f38d027780056a41acfa)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/5434dc397b4590f2906a9cd774d711113fc9f25b)

* [OCPBUGS-99435](https://issues.redhat.com/browse/OCPBUGS-99435): embed tzdata in the alertmanager binary [#140](https://github.com/openshift/prometheus-alertmanager/pull/140)
* Bump openshift/prometheus-alertmanager to v0.33.1 [#139](https://github.com/openshift/prometheus-alertmanager/pull/139)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/c30580cbb1af27356599c785720ee5043440e84a...5434dc397b4590f2906a9cd774d711113fc9f25b)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/6241c74e49baed25b1479c1786a6fc69b57b5a5b)

* [MON-4614](https://issues.redhat.com/browse/MON-4614): [bot] Bump openshift/node_exporter to v1.12.1 [#182](https://github.com/openshift/node_exporter/pull/182)
* [Full changelog](https://github.com/openshift/node_exporter/compare/45dec4ebf58ec9fb7083411ee4b6d46c01140c5f...6241c74e49baed25b1479c1786a6fc69b57b5a5b)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/59697cf7af4517dd44e28179a57f7f35b6ea0e22)

* [NE-2767](https://issues.redhat.com/browse/NE-2767): Bump Kubernetes to 1.36.2 [#100](https://github.com/openshift/route-controller-manager/pull/100)
* [OCPBUGS-92032](https://issues.redhat.com/browse/OCPBUGS-92032): Dockerfile: Copy only build-required files in builder stage [#99](https://github.com/openshift/route-controller-manager/pull/99)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/01ccbfb991fdbc559820a04c4932fc5ddf2339d0...59697cf7af4517dd44e28179a57f7f35b6ea0e22)


### [tests](https://github.com/openshift/origin/tree/478b8a2c0287f03b99a579ff86e9435aaafde60c)

* NO-ISSUE: Always emit precondition validation synthetic test entry [#31388](https://github.com/openshift/origin/pull/31388)
* [OCPBUGS-98956](https://issues.redhat.com/browse/OCPBUGS-98956): use admin-client namespace creation for IRI workload test [#31394](https://github.com/openshift/origin/pull/31394)
* [OCPNODE-4055](https://issues.redhat.com/browse/OCPNODE-4055): Add Additional Storage Support - API validation test cases [#31384](https://github.com/openshift/origin/pull/31384)
* NO-ISSUE: Remove Feature:NodeSwap tag and update README selectors [#31389](https://github.com/openshift/origin/pull/31389)
* [OCPNODE-4604](https://issues.redhat.com/browse/OCPNODE-4604): allow registry.redhat.io reboot requried test [#31383](https://github.com/openshift/origin/pull/31383)
* [OCPNODE-4604](https://issues.redhat.com/browse/OCPNODE-4604): upgrade to test v1  CRIOCredentialProviderConfig [#31324](https://github.com/openshift/origin/pull/31324)
* [Full changelog](https://github.com/openshift/origin/compare/0f64c4954e83d3cd781f656464d167cc3a79f502...478b8a2c0287f03b99a579ff86e9435aaafde60c)


### [thanos](https://github.com/openshift/thanos/tree/7923992496585d7471b26abbd15bfa7aaa745755)

* [OCPBUGS-97627](https://issues.redhat.com/browse/OCPBUGS-97627): [bot] Bump openshift/thanos to v0.42.2 [#194](https://github.com/openshift/thanos/pull/194)
* NO-JIRA: chore: revert narrow selectors detection for le/quantile labels [#193](https://github.com/openshift/thanos/pull/193)
* [Full changelog](https://github.com/openshift/thanos/compare/779d690da4fafe809a689f02e889e6fd9ffd4405...7923992496585d7471b26abbd15bfa7aaa745755)


### [tools](https://github.com/openshift/oc/tree/1115b44ce353f8e50f05d062a5a62601a0b46617)

* NO-JIRA: Register the e2e tests for accept in the subfolder [#2300](https://github.com/openshift/oc/pull/2300)
* NO-JIRA: Fix staticcheck warnings in pkg/cli/admin/mustgather [#2306](https://github.com/openshift/oc/pull/2306)
* [Full changelog](https://github.com/openshift/oc/compare/22c69c0ff5da7e390b42880141e43d555e38ef41...1115b44ce353f8e50f05d062a5a62601a0b46617)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/557fdf1a9a3540d9aa8f3a81e4a950673a416a80)

* 🚀 OCPCLOUD-3604: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.16.1 (5b57d1d) into main [#112](https://github.com/openshift/cluster-api-provider-vsphere/pull/112)
* 🐛 OCPBUGS-85337: set imagePullPolicy IfNotPresent on provider workloads [#114](https://github.com/openshift/cluster-api-provider-vsphere/pull/114)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/cd9a63d6ef3eedebc687ec6b675db1a1ad947ebb...557fdf1a9a3540d9aa8f3a81e4a950673a416a80)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/9bf3f85fde177dc4b65ea92d08b472f6573633f8)

* [STOR-2914](https://issues.redhat.com/browse/STOR-2914): Bump all deps for 5.0.0 [#350](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/350)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/030ff0e326205bcacaddb901d6b3cb6ab4db63dd...9bf3f85fde177dc4b65ea92d08b472f6573633f8)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/b2f09a5b559ddb0a114892889f88dcff1037b2c3)

* [STOR-2914](https://issues.redhat.com/browse/STOR-2914): Bump all deps for 5.0.0 [#226](https://github.com/openshift/vsphere-problem-detector/pull/226)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/34586ec43cc2a94c098ac27cf0f2b89f1460b323...b2f09a5b559ddb0a114892889f88dcff1037b2c3)