4.22.0-okd-scos.ec.13

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.22.0-okd-scos.ec.13

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded (2 retries) release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next
- upgrade-minor Succeeded (1 retry) release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next
  - Attempt 1 Failed
  - Attempt 2 Succeeded

Upgrades from:

Untested upgrades: 4.22.0-0.okd-scos-nightly-2026-04-21-132408, 4.22.0-0.okd-scos-nightly-2026-04-22-012408, 4.22.0-0.okd-scos-nightly-2026-04-23-011615, 4.22.0-0.okd-scos-nightly-2026-04-23-141452, 4.22.0-0.okd-scos-nightly-2026-04-24-021452

4.22.0-okd-scos.ec.10 - F F S
4.21.0-okd-scos.ec.19 (changes) - Failed Success

Loading changelog, this may take a while ...

Changes from 4.22.0-okd-scos.ec.10

Created: 2026-04-24 11:16:10 +0000 UTC

Image Digest: sha256:d52657829d5f285932b83e36e0b6c8a03eb6912c6923b6fde27d7cdc4a1b92e2

Release 4.22.0-okd-scos.ec.13 was created from registry.ci.openshift.org/origin/release-scos:4.22.0-0.okd-scos-nightly-2026-04-24-021452

Components

Kubectl upgraded from 1.34.1 to 1.35.2
Kubernetes upgraded from 1.35.1 to 1.35.3
Kubernetes Tests upgraded from 1.34.1 to 1.35.1
CentOS Stream CoreOS 10 upgraded from 10.0.20260310-0 to 10.0.20260423-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
GCPClusterHostedDNS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GCPClusterHostedDNSInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
HighlyAvailableArbiter (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MachineConfigNodes (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
PinnedImages (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AzureClusterHostedDNSInstall (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
DualReplica (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
EventTTL (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
GatewayAPIWithoutOLM (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
OpenShiftPodSecurityAdmission (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled
VSphereHostVMGroupZonal (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
NewOLMOwnSingleNamespace (0 tests)	Disabled	Disabled (Changed)	Disabled	Enabled	Disabled	Disabled (Changed)	Disabled	Enabled
AWSEuropeanSovereignCloudInstall (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ConfidentialCluster (0 tests)			Enabled (New)	Enabled (New)
NewOLMConfigAPI (0 tests)				Enabled (New)				Enabled (New)
NoOverlayMode (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
TLSAdherence (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
VSphereMultiVCenterDay2 (0 tests)			Enabled (New)	Enabled (New)

Rebuilt images without code change

apiserver-network-proxy git 5e33c228 sha256:3f04b2bfc65b8cdaf1dc9af12af7ebaa43e57b11137098ff1aee329e713c6631
aws-cluster-api-controllers git 2d7aa679 sha256:313867306578369c7a304a4105cdbefda0060cd97e1a882bff00f8f15bab5ef7
aws-kms-encryption-provider git 19e7b623 sha256:ff290ec2b5701ecd7a342aba10ffb7d890aefd5d5b02bd07017f6b2e10b17fa0
aws-node-termination-handler git 341ed3a0 sha256:1da8bd603ae4a8ac110aab0f1262b26b72eab1440acd6eaad2499338f628342c
aws-pod-identity-webhook git 82088287 sha256:3a38454cc716620801231fe2ca4d7644defc3417e48d6c4734fe025050e36d1f
azure-kms-encryption-provider git 99b9a3a3 sha256:826b61e8def3fa7351c2804e3558a3bcc96395c803d16bca42efa11fdc50ec4f
baremetal-cluster-api-controllers git ad4eb8a5 sha256:488e188d1d7d5e65424978d1a56c2fed5e36a561bae14200c8c9b08dd7a0482f
configmap-reloader git 94e41c4c sha256:658f98921dc1a2782dfaf2692b3e9489383c3d7853a781b58775388e8b950435
container-networking-plugins git 747ad66c sha256:42edbbff13b1a9a967233c404e8b6d7388f35bb3ad680c9135ebf69ed44eccc6
containernetworking-plugins-microshift git 747ad66c sha256:0012c6a4f800ac7ba153ca6b412b32f3de8637be21605ccad740b01cba0a9751
coredns git 0dded2d2 sha256:7701962cbdbce626c188bd56d47b7c559eee7a93adb37303f0c185e2eb5c61c3
csi-driver-manila git fd31b5da sha256:3a11ad63ead3ba63b0b8e351cb0806aeba06487afae4203bad3e43e5fc8811ce
csi-driver-nfs git e9f24940 sha256:9fca4a2dbb80d57686b24a075bab413ebd7166d4759fb3628c624e214c6b7987
csi-external-snapshot-metadata git 76523185 sha256:f92cb44accb9d2685fe1f52765967503fe0342c0eb0c6a3482f1753fa1aa0404
csi-external-snapshotter git d1bc3ffa sha256:09c494d99f12c50908363c9d0a92fa0f80efe3e941ecf87cdb5e17d7addcbfa1
csi-livenessprobe git 4d5e959a sha256:708ab236de69414da11606b16544f85b477c7583eef6f80f68c4556abc55e115
csi-snapshot-controller git d1bc3ffa sha256:3f36103747f4d601bc46f3ef647a5963fe159c59b234f0ac817aa3545a5b7294
egress-router-cni git 5e0f8d1b sha256:83c36b9968bbacc74410ab09b63cf8c4dd3e386d78270683960018dff16e1a23
etcd git d8d67b8c sha256:a89ddee486c167a6085263031df53971b6c9b2418d30783fcb0650b92ef8c6b4
gcp-cluster-api-controllers git 37085d52 sha256:a363101cba3665c3c359e3380b6721936740c5d17cd14dbc28ef982ee050adcc
gcp-workload-identity-federation-webhook git d7675f31 sha256:a647e3a37643c939ff2d30e13ae5cc931cbfd5b40e39e49077b9401650c7c49e
ibm-cloud-controller-manager git d9222a1c sha256:4bd63c1257320b1651d7eb8d6598046975d9c2885619fe3406f541c579e01642
ironic-agent git 0336e638 sha256:17385b04799e448e7940a7f504f9ebbdcb1c251457755062a2b0af5519722ad8
ironic-machine-os-downloader git 9953d2b7 sha256:adde55255c206d1e26253ccf26dd9d1c3172465ad1a6abc1eec288d4926588dc
kube-state-metrics git 6fa06eac sha256:810bae7aaa817e32e4428a4ac9e11d323e19e119936739c0b7a27d01c7fb2a6a
kube-storage-version-migrator git 72835e43 sha256:db302adcbc5969d8d42e9e3278e92467da33a8f95aba15d84f8751938596e6e3
kubevirt-cloud-controller-manager git 76dd5a6f sha256:cca3bf3613636efa7180e85005e2f63971b41c82453f3a7677d672379b4345bd
metallb-frr git 5ccdd521 sha256:8972cedae05490da05a63270d7e093b63102f1f56bb92093a9ef23da337505a8
multus-networkpolicy git 834a093f sha256:973986e0bd477778a8fccfecb773052027944a7c9bc39542da65ff9f29598961
multus-route-override-cni git 08af4127 sha256:18258d5aafcc28337d2ff30c59ec0452ee96b09f03f4873f2aee37b0341e5d39
multus-whereabouts-ipam-cni git d691040e sha256:05f14686db5c51cd97b9267ccb6e747c3ada0bb4a86abf5693ebacea0eaaf207
network-interface-bond-cni git 297eeb43 sha256:0427c5168d9371e7d85167b0fb7ba5c30b0b92cd8b9620e561dbc48555e4e12d
network-metrics-daemon git 5b233ea1 sha256:dcdd8ae0ad25d4f8f639c89fb1ddd72bd9b3c7d9b73395d652c3d0da9ba82df9
oauth-proxy git 714292f5 sha256:553f76ec3af0eae0000613d86677c3fa683ec104bedcfa14a452926d38f0c6ab
openshift-controller-manager git 26d20fea sha256:ce1cce8e1021980575db27cbbbf7ae2c20031fe962e6ed883f42d3b56642f8d8
openshift-state-metrics git e71e0996 sha256:3dfd7f64fcf25f801586f32608b792f311bdd197c68a42e769a00212a3060b71
openstack-cinder-csi-driver git fd31b5da sha256:07d20dc4ff31a71b6a7912f64f45b090bf63316d0e64cd520a437534f162845d
openstack-cloud-controller-manager git fd31b5da sha256:bd8e0b8f23168a7d37ec86cb3ab1bf74d2e1946d4922e6a7a1f11a903929c018
openstack-cluster-api-controllers git 74cb5b08 sha256:518e02336d1a63b3fa1f7dd4c6879ddcd6787fe4b35dacd4100720ae263c24ee
prom-label-proxy git c4c99a30 sha256:3334621d20d5feb77d8300db32a15c777ed841eb74468c8598e4da01137cdee0
prometheus-node-exporter git 6c4fc012 sha256:76803bf7ff31b0dfc495d404f9c0697213ca1f28c2a1e79e64ebd33a1efff955
route-controller-manager git 624742d9 sha256:e3238869fbc6ac20a9635fb7ab358ca75c4e3e50a36887eb898a91f5296501b1
telemeter git d6c7dd49 sha256:e07443df75caebb30799b8f83d158849ce2d835188997dcc6b8abcf3a1389d7d
volume-data-source-validator git 8e176cec sha256:0fd50f458b08392ca7ab352ece41d7fc0952d38605476b19b6a04fccde05638a
vsphere-cluster-api-controllers git f12e5051 sha256:bc737ab64e2423f7bdf835e48ef7247820d1c753be9b182869cb594440081369

agent-installer-api-server

OCPBUGS-83511: Fix IRI patcher feature check #10147
MGMT-23548: Ensure tests w/ gomock controllers call Finish() #10024
MGMT-22849: Remove the nmconnection that the openshift-installer writes for the bootstrap. #10086
NO-ISSUE: Detect missing PostgreSQL client in development #10119
NO-ISSUE: Add assisted-service-writing-unit-tests agent skill #10123
MGMT-23451: Lower SNO vCPU min to 4 instead of 8 for assisted for OCP 4.22 and above #10040
MGMT-23141: Cluster creation returns SQL error rather than API error #10113
NO-ISSUE: [master] Bump OCP versions: 4.20, 4.18, 4.21, 4.14, 4.17, 4.19, 4.16 #10120
MGMT-23340: upgrade assisted-service postgresql from 13 to 15 #10096
NO-ISSUE: Replace github.com/golang/mock with go.uber.org/mock #10082
OCPBUGS-79576: Prefer multipath disk in ABI disk selection #10091
NO-ISSUE: BMAC: replace per-step Update calls with deferred Patch #10095
MGMT-22517: Change amd gpu operator namespace to openshift-amd-gpu #10007
MGMT-23228: Update NFD config for AMD Instinct GPU detection #9918
MGMT-23599: implement cluster and host validations for Kube API mode #10044
MGMT-23253: Reconcile stuck day2 agent status by checking spoke cluster #10087
NO-ISSUE: clarify error when interface in bond missing #10022
MGMT-23060: Make InfraEnv CpuArchitecture immutable after creation #9999
MGMT-23625: Remove pinned image version for nfd operator #10045
MGMT-23231: Replace AcceleratorProfile with HardwareProfile #9919
MGMT-23674: Remove controller-runtime dependency from api module #10071
MGMT-23650: Disable image policy in assisted service operator deployment #10070
MGMT-23300: Add missing permission for host reclaim pod #9934
MGMT-22939: Fix cache key to get mustgather image #9940
OCPBUGS-79470: Fix multi-document YAML parsing for NMStateConfig #10053
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.17, 4.19, 4.21, 4.22 #10054
AGENT-1426: Add localhost mirror only when missing in IRI patcher #10028
MGMT-23446: TNA none platform on 4.19 (block for 4.21 and lower) #10013
MGMT-23045: toggle metal3 integration #9933
OCPBUGS-78989: Gate customDeploy on PreprovisioningImage having correct ISO #10032
MGMT-23339: Add url to release image comparison for Kube API versions #10030
MGMT-23550: Add feature usage for new CNI types #10027
NO-ISSUE: add skipper skill #10014
MGMT-23432: add third parties CNI support to KUBE API mode #10015
NO-ISSUE: [master] Bump OCP versions: 4.21 #10023
NO-ISSUE: Add Go workspace files to .gitignore #10000
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Refresh RPM lockfiles #2069
MGMT-23545: Mount pull secret token as a file #2053
MGMT-23191: Ensure MCO configs are present before rebooting the bootstrap node #2039
MGMT-23664: CVE-2026-33186 Bump google.golang.org/grpc to v1.79.3 through indirect dependency conversion #2058
OCPBUGS-70213: fix: allow workers to join TNA cluster when 1 master + arbiter are ready #2056
Full changelog

agent-installer-node-agent

OCPBUGS-84129: add –copy-network when manual network config is detected #1416
MGMT-23517: Bump go modules #1373
Full changelog

agent-installer-ui

chore(deps): update dependency rimraf to v6 (#3564) #3564
chore(deps): update konflux references (#3562) #3562
chore(deps): update konflux references (#3561) #3561
chore(deps): update module golang.org/x/sys to v0.43.0 (#3492) #3492
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1775724628 (#3560) #3560
chore(deps): update dependency qs to v6.15.1 (#3559) #3559
chore(deps): update dependency @redhat-cloud-services/eslint-config-redhat-cloud-services to v3 (#3539) #3539
chore(deps): update dependency msw to v2 (#3557) #3557
chore(deps): update dependency concurrently to v9 (#3554) #3554
chore(deps): update dependency @openapitools/openapi-generator-cli to v2.31.1 (#3534) #3534
chore(deps): update dependency typescript to v5.9.3 (#3489) #3489
chore(deps): update dependency @types/node to v24 (#3543) #3543
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1775651161 (#3548) #3548
chore(deps): update dependency i18next-parser to v9 (#3556) #3556
Bump basic-ftp from 5.2.0 to 5.2.1 (#3552) #3552
chore(deps): update dependency axios to v1.15.0 (#3551) #3551
chore(deps): update dependency @redhat-cloud-services/frontend-components to v7.3.0 (#3550) #3550
MGMT-23313: long text breaks table layout (#3545) #3545
Bump vite from 5.4.21 to 6.4.2 (#3547) #3547
chore(deps): update dependency eslint-plugin-import to v2.32.0 (#3475) #3475
fix(deps): update dependency monaco-editor to v0.55.1 (#3505) #3505
fix(deps): update dependency cypress to v13.17.0 (#3500) #3500
fix(deps): update dependency react-monaco-editor to v0.59.0 (#3537) #3537
chore(deps): update dependency dpdm to v3.15.1 (#3473) #3473
chore(deps): update dependency @redhat-cloud-services/frontend-components-config to v6.8.3 (#3471) #3471
chore(deps): update dependency axios to v1.14.0 (#3536) #3536
chore(deps): update dependency @types/eslint to v9 (#3541) #3541
Updating assisted-installer-ui-container image to be consistent with ART for 4.22 (#3340) #3340
chore(deps): update lodash monorepo to v4.18.1 (#3538) #3538
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1775042950 (#3533) #3533
chore(deps): update dependency eslint-plugin-react to v7.37.5 (#3476) #3476
Bump @xmldom/xmldom from 0.8.10 to 0.8.12 (#3532) #3532
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1774968108 (#3531) #3531
Upgrade @openshift-console/dynamic-plugin/sdk (#3522) #3522
Update translation files (#3524) #3524
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1774618347 (#3519) #3519
Add support for release branches in PR workflow (#3527) #3527
chore(deps): update dependency @redhat-cloud-services/tsc-transform-imports to v1.0.57 (#3407) #3407
Add feature branch to pull request workflow (#3520) #3520
NO-ISSUE: Add cursor rules (#3515) #3515
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.7-1774499506 (#3494) #3494
fix(deps): update module github.com/sirupsen/logrus to v1.9.4 (#3441) #3441
Revert abi abov the sea new flow (#3517) #3517
Bump happy-dom from 20.0.2 to 20.8.9 (#3516) #3516
chore(deps): update dependency swr to v2.4.1 (#3486) #3486
Bump node-forge from 1.3.3 to 1.4.0 (#3513) #3513
chore(deps): update konflux references (#3514) #3514
Bump picomatch from 2.3.1 to 2.3.2 (#3507) #3507
Bump brace-expansion from 1.1.11 to 1.1.13 (#3512) #3512
add pull secret auto populate logic to ABI local UI (#3508) #3508
chore(deps): update dependency tslib to v2.8.1 (#3487) #3487
populate default values in local ui from infraEnv (#3502) #3502
MGMT-23648: Removing the manifests using the toggle (#3498) #3498
Add cursor rules for generated files (#3497) #3497
chore(deps): update konflux references (#3472) #3472
chore(deps): update dependency start-server-and-test to v2.1.5 (#3484) #3484
Set customManifestsUpdated when users remove a manifest (#3482) #3482
Red Hat Konflux update assisted-ui-chatbot-saas-main (#3478) #3478
MGMT-23515: Use Network type support level (#3465) #3465
Red Hat Konflux purge assisted-installer-chatbot-main (#3477) #3477
fix(deps): update dependency @patternfly/react-core to v6.4.1 (#3438) #3438
chore(deps): update dependency nodemon to v3.1.14 (#3435) #3435
chore(deps): update dependency @vitejs/plugin-react-swc to v3.11.0 (#3444) #3444
chore(deps): update dependency @openapitools/openapi-generator-cli to v2.30.2 (#3442) #3442
chore(deps): update dependency @redhat-cloud-services/frontend-components to v7.1.1 (#3470) #3470
fix(deps): update dependency @patternfly/react-code-editor to v6.4.1 (#3437) #3437
fix(deps): update dependency @patternfly/react-table to v6.4.1 (#3440) #3440
chore(deps): update dependency @redhat-cloud-services/frontend-components-config to v6.7.54 (#3406) #3406
chore(deps): update dependency @sentry/browser to v7.120.4 (#3443) #3443
chore(deps): update dependency eslint to v8.57.1 (#3432) #3432
chore(deps): update dependency axios to v1.13.6 (#3431) #3431
chore(deps): update dependency @types/node to v18.19.130 (#3429) #3429
chore(deps): update dependency @types/lodash to v4.17.24 (#3428) #3428
Bump ajv from 6.12.6 to 6.14.0 (#3411) #3411
chore(deps): update dependency prettier to v2.8.8 (#3436) #3436
chore(deps): update dependency msw to v1.3.5 (#3434) #3434
chore(deps): update dependency eslint-config-prettier to v8.10.2 (#3433) #3433
chore(deps): update dependency @types/react-redux to v7.1.34 (#3430) #3430
chore(deps): update dependency @types/eslint to v8.56.12 (#3427) #3427
chore(deps): update dependency @tsconfig/recommended to v1.0.13 (#3426) #3426
Bump flatted from 3.3.1 to 3.4.2 (#3469) #3469
fix validations for NTP and Proxy in above sea level ABI flow (#3464) #3464
Add identifiers and checked state attribute to custom manifests switch (#3466) #3466
MGMT-23516: Left navigation menu is cut off (#3463) #3463
UI doesnt save the data filled by the user (#3452) #3452
fix ISO file name (#3462) #3462
Tech Preview badge should appear at the end of the line (#3461) #3461
AGENT-1136: Add USER_AUTH_TOKEN support to disconnected UI proxy (#3454) #3454
Bump rollup from 4.50.1 to 4.59.0 (#3421) #3421
Bump immutable from 3.8.2 to 3.8.3 (#3451) #3451
MGMT-23131: Third-Party CNI Support (#3457) #3457
Fix CVE-2026-27904: Bumping minimatch to latest versions via yarn resolutions (#3459) #3459
Full changelog

agent-installer-utils

OCPBUGS-83734: Red Hat Konflux kflux-prd-rh02 update ove-ui-iso-4-22 #291
OCPBUGS-82537: update konflux references #274
NO-JIRA: enable xtrace in build-ove-image.sh for debugging #281
OCPBUGS-81585: Update operator versions #280
NO-JIRA: Pass environment through to podman #279
AGENT-1429: Pass OPENSHIFT_INSTALL_EXPERIMENTAL_DISABLE_IMAGE_POLICY #278
Full changelog

aws-cloud-controller-manager

OCPCLOUD-3215: Add support for dual networking stack services #135
OCPBUGS-69888, OCPBUGS-76344, OCPCLOUD-3276: Merge https://github.com/kubernetes/cloud-provider-aws:master (ea961d6) into main #131
Full changelog

aws-ebs-csi-driver

TRT-2576: Revert #301 “STOR-2766: Rebase to upstream v1.55.0 for OCP 4.22” #303
STOR-2766: Rebase to upstream v1.55.0 for OCP 4.22 #301
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-84243: [release-4.22] Add VolumeAttributesClass e2e test manifests for Azure disk #544
OCPBUGS-78291: Allow azure-disk sidecars to read VolumeAttributeClasses #525
STOR-2762: Bump all deps for 4.22 #526
OCPBUGS-77674: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.22 #516
OCPBUGS-77553: Updating csi-driver-manila-operator-container image to be consistent with ART for 4.22 #513
OCPBUGS-77612: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.22 #514
STOR-2884: Add service to generate a TLS cert for EFS operator #522
STOR-2884: Add service to generate a TLS cert for SMB operator #520
NO-JIRA: Inherit any OpenShift global CodeRabbit setting #519
Full changelog

aws-karpenter-provider-aws

AUTOSCALE-485: rebase to 1.9.0 #26
Full changelog

aws-machine-controllers

SPLAT-2627: Created OTE Tests for dedicated hosts #174
SPLAT-2700: Added shared tags for BYO DH #181
OCPCLOUD-3283: K8s 1.35 bump #179
CORS-4166: enable IPv6 IMDS endpoint and private DNS configuration for dualstack #177
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPCLOUD-3281: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (314ccf1) into main #155
Full changelog

azure-cluster-api-controllers

OCPCLOUD-3294: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.23.0 (ac446a1) into main #371
Full changelog

azure-disk-csi-driver

UPSTREAM: 3569: OCPBUGS-83425: Bump grpc to v1.79.3 #136
Full changelog

azure-file-csi-driver

UPSTREAM: 3023: OCPBUGS-83329: Bump grpc to v1.79.3 #126
Full changelog

azure-machine-controllers

OCPCLOUD-3280: Bump k8s 1.35 #189
Full changelog

azure-service-operator

OCPBUGS-83835: UPSTREAM: <carry>: add openshift/e2e-tests.sh #23
Full changelog

azure-workload-identity-webhook

CCO-785: add flag to configure TLS cipher suites #44
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-83611: PowerVS: update release 4.22 CAPI to v0.12.2 #10509
MULTIARCH-5854: implements retry-after logic to limit failures #10421
OCPBUGS-78151: Add provisioningNetworkGateway field to install-config #10387
OCPBUGS-77965: Update RHCOS-release-4.22 bootimage metadata to 10.2.20260405-0 / 9.8.20260403-0 #10482
OCPBUGS-77917: PowerVS: Use short regions and provide a default resource group in survey #10369
CORS-3900: Add IPv6 frontend IP configurations for dual-stack #10328
MCO-2135: Label Machines, MachineSets, and ControlPaneMachineSets with OSStream labels #10426
OCPBUGS-81509: fix ASO CRD duplication #10451
OCPBUGS-76468: PowerVS:: SSH key must be RSA #10289
no-jira: PowerVS: add mjturek and hamzy to approvers list #10483
OCPEDGE-2072: bump(ocp/api): pull in latest for DualReplica promotion #10471
OCPBUGS-77830: skip redirect when validating endpoint accessibility #10360
OCPBUGS-81622: Collect bootstrap service records in agent-gather #10457
AGENT-1448: Add IRI registry authentication support #10389
OCPBUGS-81635: AWS: Increase cluster bootstrap timeout with userProvisioned DNS #10459
CORS-4373: Remove checks for AzureClusterHostedDNSInstall featuregate #10455
CORS-4316: Update the Installer GCP UPI documentation. #10235
OCPBUGS-81309: Fix vSphere with static IPs on TPNU #10442
OCPBUGS-79542: Mount pullsecret manifest to UI container #10411
OCPBUGS-81470: Restart sshd after applying node-image to bootstrap #10452
OCPBUGS-37587: Sign blob container using user delegated creds #9851
SPLAT-2622: Bump govmomi to v0.53.0 #10431
OCPBUGS-78935: Fix bootstrap VM on non-x86 platforms #10419
CORS-4352: aws: validations to ensure install-config is valid for dualstack install #10380
OCPBUGS-74528: upkeep: remove tna feature gate #10403
NO-JIRA: Add Ella, Daniel to openstack-reviewers #10434
CORS-4324: Update default release image to 4.22 #10429
OCPBUGS-78589: baremetal: add serial console logging for bootstrap VM #10400
CORS-4359: feature gate install into EU Sovereign Cloud #10412
OCPBUGS-59514: redacted install config for baremetal #9972
AGENT-1461: Do not discard NMStateConfig when agent-config is on disk for unconfigured-ignition #10393
AGENT-1471: Fix race condition: wait for agent-register-infraenv before showing UI URL #10422
MCO-2116: Generate OSImageStream manifest #10357
AGENT-1136, AGENT-1229: Add auth to unconfigured-ignition #10381
SPLAT-2172: AWS dedicate host support #10079
MCO-2133: Select bootimages based on OSImageStream #10321
CORS-4336: Support for AWS European Sovereign Cloud #10303
OCPBUGS-74390: Allow all instance types in the install config for GCP #10271
no-jira: fix SC2328 shellcheck errors #10413
AGENT-1458: Don’t auto-calculate RendezvousIP in unconfigured-ignition #10405
CORS-4358: aws: add ICMPv6 ingress rule for dual-stack clusters #10408
CORS-4235: Machine Management API Field & Feature Gate #10402
no-jira: bump golangci-lint to v2.10.1 for Go 1.25 support #10397
OCPBUGS-57603: Disallow cross subscription encryption sets #10335
OCPBUGS-64842: Disable LoadBalancer in cloud config when Octavia is unavailable #10326
CORS-4288: docs(azure): Restructure tested VM families with Series-based organization #10314
CORS-4072: dualstack support for AWS #10353
CORS-4355: define required permissions for dualstack install #10371
CORS-3897: Dual stack support for cluster manifest & VNet #10319
CORS-4078: aws: standardize AWS client setup in the destroy code #10340
OCPBUGS-75250: Use correct Project ID with GCP Shared VPC #10297
METAL-1668: simplify BMC CA assets #10243
METAL-1750: baremetal: use q35 machine type with EFI firmware for bootstrap VM #10349
OCPEDGE-2383: feat: update sno minimum to 4vcpu #10283
CNTRLPLANE-2847: bump Go 1.25, openshift/api, and k8s.io dependencies #10376
Full changelog

baremetal-machine-controllers

OCPCLOUD-3346: Bump deps + Add centralized TLS configuration to Metal3Remediation webhook server #248
Full changelog

baremetal-operator

OCPBUGS-66071: Fix PPI for ACM #456
OCPBUGS-64617: Merge upstream #473
METAL-1720: Merge upstream #467
Full changelog

baremetal-runtimecfg

OPNET-709: Migrate from iptables to nftables #387
Full changelog

cli, deployer, tools

NO-JIRA: claude: Split tester agent away from code-reviewer #2250
OCPBUGS-77845: Fix extraction of gated manifests using –install-config #2249
NO-ISSUE: recover the context in upgrade #2248
NO-JIRA: claude: Turn pr-review skill into code-reviewer agent #2245
OCPBUGS-59311: must-gather: Handle signals properly #2237
OTA-1548: set up accepted risks #2170
MCO-1961: Allow multiple machine-os versions #2157
Revert “TRT-2587: Revert #2219 “CNTRLPLANE-2769: Bump k8s dependencies to 1.35”” #2241
TRT-2587: Revert #2219 “CNTRLPLANE-2769: Bump k8s dependencies to 1.35” #2236
TRT-2585: pkg/cli/admin/release/extract: Support zero-output extraction #2233
OCPBUGS-78701: adm policy add-role-to-user: Fix –dry-run=server #2231
OCPBUGS-77845: Update release extract inclusion to support feature gates and major version #2222
NO-ISSUE: pkg/cli/admin/release/extract: Read manifests into memory #2232
NO-JIRA: Add .coderabbit.yaml and AGENTS.md configurations #2229
CNTRLPLANE-2769: Bump k8s dependencies to 1.35 #2219
NO-JIRA:Fixing manifest ci failure #2228
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

cli-artifacts

NO-JIRA: claude: Split tester agent away from code-reviewer #2250
OCPBUGS-77845: Fix extraction of gated manifests using –install-config #2249
NO-ISSUE: recover the context in upgrade #2248
NO-JIRA: claude: Turn pr-review skill into code-reviewer agent #2245
OCPBUGS-59311: must-gather: Handle signals properly #2237
OTA-1548: set up accepted risks #2170
MCO-1961: Allow multiple machine-os versions #2157
Revert “TRT-2587: Revert #2219 “CNTRLPLANE-2769: Bump k8s dependencies to 1.35”” #2241
TRT-2587: Revert #2219 “CNTRLPLANE-2769: Bump k8s dependencies to 1.35” #2236
TRT-2585: pkg/cli/admin/release/extract: Support zero-output extraction #2233
OCPBUGS-78701: adm policy add-role-to-user: Fix –dry-run=server #2231
OCPBUGS-77845: Update release extract inclusion to support feature gates and major version #2222
NO-ISSUE: pkg/cli/admin/release/extract: Read manifests into memory #2232
NO-JIRA: Add .coderabbit.yaml and AGENTS.md configurations #2229
CNTRLPLANE-2769: Bump k8s dependencies to 1.35 #2219
NO-JIRA:Fixing manifest ci failure #2228
OCPBUGS-64840: image extract: Use Explicit strategy for ICSP/IDMS #2202
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

cloud-credential-operator

CCO-738, CCO-739, CCO-740: Overhaul status logic to correctly match spec #1008
CCO-787: use apiserver tls config #965
CCO-824: feat(gcp): add key-storage-method flag for workload identity providers #1004
CCO-779: e2e for removing kube-rbac-proxy container (CCO-779) #991
OCPBUGS-81584: Skip CCO health check test for PowerVS platform #1006
OCPBUGS-81328: tests-ext: Fix MicroShift gating in CCO tests #1005
Revert #978: CCO-738, CCO-739: Set operator condition to Progressing when pod identity webhook pod are updating #1007
CORS-4361: aws: add aws-eusc partition support for OIDC S3 buckets #995
CCO-738, CCO-739: Set operator condition to Progressing when pod identity webhook pod are updating #978
OCPBUGS-79360: google.golang.org/grpc v1.79.3 #992
CCO-788: Remove kube-rbac-proxy container from metrics #983
OCPBUGS-74627: Fix infrastructure resource name filtering in watch predicate #985
CCO-688: test-ext: enable test-extension cases for CI #984
CCO-788: test-ext: Update extend tests to adapt to CCO-788 #981
Full changelog

cloud-network-config-controller

OCPBUGS-74496: Add UserAgent to Azure SDK client telemetry options #208
Full changelog

cluster-authentication-operator

CNTRLPLANE-2625: Add Auth network policy e2e cases #831
OCPBUGS-78403: Do not return error when an IdP returns 500 during a grant check #856
Revert “CNTRLPLANE-2589: Migrate test/e2e-encryption to Ginkgo v2 framework” #857
CNTRLPLANE-2589: Migrate test/e2e-encryption to Ginkgo v2 framework #839
NO-JIRA: OWNERS: add everettraven as reviewer/approver add ibihim as approver #842
CNTRLPLANE-2610: Create network policies for AUTH components #825
CNTRLPLANE-2990: Update CAO to no longer write to the Authentication.spec.webhookTokenAuthenticator field #854
CNTRLPLANE-2996: dependencies: k8s 1.35 rebase #853
CNTRLPLANE-2552: Add support for CEL expression claim mappings for username and groups #850
MON-4473: Migrate Prometheus targets discovering from Endpoints to EndpointsSlices #823
Full changelog

cluster-autoscaler

NO-JIRA: ignore tool and hack files in .snyk scans #416
OCPBUGS-78152: allow clusterapi provider to skip paused resources #409
Full changelog

cluster-autoscaler-operator

OCPBUGS-65578: report Progressing=True on version upgrade #366
AUTOSCALE-560: Add support for using centralized cluster TLS profile for webhook service #367
OCPBUGS-78797: update rbac to include DRA-related resources #365
MON-4498: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #363
Full changelog

cluster-baremetal-operator

OCPBUGS-78151: Add provisioningNetworkGateway field to CBO #575
METAL-1715: Enforce 1-year validity and 30-day auto-rotation for Ironic TLS certs #570
METAL-1780: Gate TLS profile enforcement on APIServer tlsAdherence field #582
METAL-1720: Add IRONIC_ROOTFS_URL env var for multi-arch rootfs override #583
METAL-1716: Handle IPv6/dual-stack addresses in certificate SANs #573
NO-ISSUE: Update envtest version #580
METAL-1720: Add DEPLOY_KERNEL env var for image-customization-controller #581
METAL-1734: Add support for centralized tls #572
METAL-1714: Populate complete SANs in Ironic TLS certificate #569
OCPBUGS-69399: Allow ProvisioningCIDR for unmanaged network #553
Full changelog

cluster-bootstrap

OCPBUGS-69694: Updating ose-cluster-bootstrap-container image to be consistent with ART for 4.22 #124
Full changelog

cluster-capi-controllers

OCPBUGS-83759, OCPCLOUD-3419: Adopt IPAM CRDs on upgrade #280
NO-JIRA: IPAM CRDs: Use negated feature-gate: -ClusterAPIMachineManagement instead of feature-set: Default #273
OCPCLOUD-3291: Merge https://github.com/kubernetes-sigs/cluster-api:v1.12.4 (8c01d2f5) into master #255
OCPCLOUD-3320: Fix continuous reconciliation of cluster-api manifests #269
Full changelog

cluster-capi-operator

NO-JIRA: Optimize envtest CRD loading by specifying necessary files explicitly #520
OCPCLOUD-3319: Remove capiinstaller controller #507
OCPCLOUD-3419: Add adopt-existing annotation #514
NO-JIRA: Fix flake in object pruning envtests #516
OCPBUGS-80922: Add CVO proxy injection annotation to capi-operator Deployment #518
OCPBUGS-81683: fix: remove Microsoft.Resourcehealth/healthevent permission #515
NO-JIRA: Add ClusterAPI singleton to related objects #508
OCPCLOUD-3365, OCPCLOUD-3384: Implement admission action Warn and ensure validations not active when not configured #492
OCPCLOUD-3321, OSASINFRA-3980: Add openstack-resource-controller image to images.json #506
OCPCLOUD-3319: Create installer controller #494
NO-JIRA: Fix 2 failures in ci jobs #485
SPLAT-2167: Added dedicated host support for AWS #374
OCPCLOUD-3319: Convert ReconcileResult to use a builder pattern #501
OCPCLOUD-3319: Simplify RelatedObjects on the cluster-api ClusterOperator #497
NO-JIRA: Common provider manifest fixtures #498
NO-JIRA: Drop unused replace manifests-gen #504
OCPBUGS-77188: Fix CRD Requirement deployment on SNO #502
NO-JIRA: Move ProviderMetadata into manifests-gen #503
NO-JIRA: Fix malformed VAP #499
NO-JIRA: Instruct agents more forcefully to run tests with make unit #496
OCPCLOUD-3319: Bump controller-runtime to v0.23 #495
OCPCLOUD-3290: Dependency bumps for release 4.22 #491
OCPCLOUD-3184: Implement object schema pruning for compatibility requirements #464
OCPCLOUD-3350: Revision controller #469
Full changelog

cluster-cloud-controller-manager-operator

NO-JIRA: fix: report all degraded controller conditions instead of first only#444 #444
OCPCLOUD-3348: Honor TLSAdherence #440
SPLAT-2672: e2e/ote/ccm-aws: moving OTE binary from CCM-AWS #437
OCPBUGS-78118: Add delete permission for Azure load balancers in credentials request #438
OCPCLOUD-3287: Update to k8s 1.35.1 dependencies #439
Full changelog

cluster-config-api

OCPBUGS-83846: Add component names, manifestSubstitutions, and observedGeneration to CAPI revisions #2819
OCPBUGS-83768: extend supported values for MCN IRI image status field #2817
OCPBUGS-83755: fix(config/v1): define constants for authentication types as typed constants #2816
OCPBUGS-68358: Disable PSA for 4.22 #2802
MON-4035: Add ThanosQuerierConfig to ClusterMonitoring API #2769
NE-2520: Promote GatewayAPIWithoutOLM to GA #2772
OCPEDGE-2197: Promote TNF (Dual Replica) to default #2723
OCPBUGS-81627: Load ClusterResourceQuota CRD before CVO manifests #2796
OCPEDGE-2492: feat: promote pacemaker to v1 in prep for tnf #2792
Update verify-feature-promotion HTML output to sort entries and fix overflow #2793
Include candidate tier in default sippy queries for feature promotion #2789
CNTRLPLANE-2796: promote the event-ttl feature #2722
OCPBUGS-74533: Remove GCPClusterHostedDNSInstall featuregate #2776
NO-ISSUE: Fixes KubeletConfig API doc, adds tests and kubebuilder validation #2651
CORS-4365: Promote AzureClusterHostedDNSInstall to default #2774
Add ConfidentialCluster feature gate #2779
SPLAT-2664: Added new feature gate VSphereMultiVCenterDay2 #2783
CNTRLPLANE-3115: Add envtest releases for 4.15 and 4.16 #2785
CNTRLPLANE-2777: add TypeMeta to GenericControllerConfig #2780
tools: codegen: increase sippy request timeout for feature promotion verification #2782
MON-4036: Add TelemeterClientConfig to ClusterMonitoring API #2755
Allow JobTier=candidate in featuregate-test-analyzer with warning #2781
SPLAT-2320: vsphere vm-host zonal ga #2731
NE-2512: operator/ingress: Add configurationManagement option #2757
CORS-4337: allow AWS Europe Sovereign Cloud partition #2708
AGENT-1473: add InternalReleaseImageDegraded state type for MachineConfigNodeStatus Conditions field #2777
CNTRLPLANE-3010: Add API-side validation to enforce prefixPolicy is not set when username expression is used #2771
OCPBUGS-74528: upkeep: HighlyAvailableArbiter has been GA for 2 releases #2759
Improve feature-gated CEL validation merge semantics #2770
OPRUN-4513: Move OLMv1 Single/Own Namespace support back to TP #2766
CORENET-6390: API changes and feature gate for OVN-Kubernetes no-overlay mode #2537
OPRUN-4466: Add NewOLMConfigAPI feature gate #2756
Add TLS adherence feature gate #2680
TRT-2518: Add variant OS and JobTier to promotion check #2763
MCO-2142: Avoid OSImageStream defaultStream unset #2764
OCPBUGS-74513: OCPBUGS-74519: OCPBUGS-78487: Remove MachineConfigNodes and PinnedImages feature gates and v1alpha1 references #2715
CORS-4348: feature gate for EU Sovereign Cloud support #2740
NO-ISSUE: config/v1alpha1: Drop (Cluster)ImagePolicy since the hard cut to v1 #2760
Full changelog

cluster-config-operator

OCPEDGE-2071: bump(ocp/api): pull in latest for DualReplica promotion #480
OCPBUGS-74528: bump: ocp/api ocp/libray-go #475
API-1646: Add config-operator workload and namespaces network policies #463
OCPSTRAT-2876: Teach config operator to filter feature gate manifests by major version inclusion #459
Full changelog

cluster-control-plane-machine-set-operator

OCPCLOUD-3349: Honor TLS adherence, allow TLS overrides via flags #398
OCPCLOUD-3284: Bump to k8s 1.35 and associated deps. #397
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-82535: Fix PDB unhealthyPodEvictionPolicy field name #271
STOR-2762: Bump all deps for 4.22 #270
Full changelog

cluster-dns-operator

OCPBUGS-78085: Fix dual-stack service update by preserving IP families #467
NE-2500: Added network policies for DNS #468
OCPBUGS-62178: Dynamically set kube-rbac-proxy TLS args #466
OCPBUGS-14346: Fix when DNS operator reports Degraded #373
Full changelog

cluster-etcd-operator

NO-JIRA: Apply go fix changes #1589
NO-JIRA: Remove unused lib/resourcemerge package #1590
OCPEDGE-2495: upkeep: bump ocp/api ocp/client-go #1591
OCPBUGS-81340: pacemaker CronJob: tune history limit and Job TTL #1581
OCPEDGE-2495: feat: update pacemaker in preparation for DualReplica promotion #1587
OCPBUGS-81341: fix: add correct annotations to stop update events #1580
CNTRLPLANE-2621: Restart operator when TLS config changes #1556
OCPBUGS-80959: fix(tnf): align Pacemaker kubelet and etcd retry pacing #1578
CNTRLPLANE-2668: Migrating go standard etcd cases to ote #1575
NO-JIRA: add Lance as a reviewer #1576
OCPBUGS-78956: Disable member cache for quorum checker in TNF #1568
OCPBUGS-65626: upgrade library-go to latest changes #1566
OCPBUGS-78930: add tnf jobs to network policy exceptions #1574
ETCD-557: Add e2e Network policy test cases #1543
Revert “OCPBUGS-77947: fix(tnf): do not block on stable revision after external etcd transition” #1572
OCPBUGS-74679: fix: tweaking kubelet resource config to allow automatic fencing recovery #1561
OCPBUGS-70050: Updating cluster-etcd-operator-container image to be consistent with ART for 4.22 #1569
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-image-registry-operator

CNTRLPLANE-3184: Create network policies for image-registry components #1301
OCPBUGS-81750: Use deterministic S3 bucket naming to prevent orphaned buckets #1317
OCPBUGS-66225: ImageConfigController: wait for ClusterVersion informe… #1316
OCPBUGS-66225: fix degraded blip on stale config caches #1304
OCPBUGS-66225: migrate to go 1.25 #1305
IR-350: make metrics server tls configuration file-based #1297
Full changelog

cluster-ingress-operator

OCPBUGS-81550: AWS, Azure and GCP ClusterHostedDNS: Add Ingress LB IPs to Infra CR after masters up #1411
OCPBUGS-76609: Do not take over OSSM subscription #1398
NE-2332: Implement ROUTER_CURVES environment variable #1409
OCPBUGS-3917: filter non-FIPS TLS 1.3 ciphers from ROUTER_CIPHERSUITES on FIPS clusters #1401
NE-2501: Add network policies for ingress resources #1392
OCPBUGS-79376: Bump to OSSM 3.3.1 and Istio v1.28.5 #1406
OCPBUGS-78541: Move TestIngressControllerCustomEndpoints to run last #1388
OCPBUGS-79467: Change default log level from DEBUG to INFO #1402
NE-2519: Move Sail Library to official release branch #1404
NE-2523: Implement configurationManagement API #1385
OCPBUGS-79667: Use feature-gate annotation for Sail Library RBAC #1393
NE-2396: gatewayclass: Enable Horizontal Pod Autoscaling #1326
CORS-4335: Add support for AWS European Sovereign Cloud #1360
NE-2421: Support dual-stack IngressController on AWS #1376
OCPBUGS-62237: Apply APIServer TLS security profile to canary daemonset #1386
OCPBUGS-78523: gatewayapi_controller: Replace sync.Once with retry for GatewayClass field indexer setup #1382
OCPBUGS-62627: cluster operator ingress reported Progressing=True wit… #1299
OCPBUGS-62238: configure tls profile for router metrics #1378
NE-2285: Bump to OSSM 3.3.0 and Istio v1.28.4 #1396
OCPBUGS-77457: Respect proxy configuration on gwapi provisioning #1383
NE-2471: Replace OLM-based Istio install with Sail Library #1354
NE-2501: Add RBAC to allow operator to manage network policies #1389
OCPBUGS-78555: Increase Gateway E2E timeout to 5 minutes #1390
NE-2131: tests-extension: Append suite names to OTE test specs to preserve original test names #1387
NE-2418: Add e2e test for haproxy_max_connections metric #1361
NE-2183: Implement GatewayAPI status controller #1294
NE-2131: tests-extension: restore test names and remove metadata tracking #1379
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-83770: Allow setting the oauthMetadata when auth type is None #2112
OCPBUGS-68365: revert dev cert rotation #2017
CNTRLPLANE-2698: add network policies for apiserver operator and operands #2029
OCPBUGS-23366: bindata/bootkube: Remove configmap-csr-controller-ca.yaml #2076
OCPBUGS-76952: scc: fix uid{Min,Max}Range for nested-container #2053
NO-JIRA:Fix TestBoundTokenOperatorSecretDeletion stability and monitor failures #2080
CNTRLPLANE-2622: Restart operator when TLS config changes #2059
CORS-4363: set bindAddress/bindNetwork for dual-stack clusters #2079
CNTRLPLANE-2992: Update CKASO to use a default webhook authenticator secret when authentication type is not None #2074
OCPBUGS-65626: update library-go to latest #2026
CNTRLPLANE-2223: Migrate TestBoundTokenSignerController to ginkgo #2067
CNTRLPLANE-2622: config tls on check-endpoints container #2058
OCPBUGS-46086: Always set service-account-jwks-uri to LB URL even with custom issuer #1919
OCPBUGS-78146: move event-ttl test to its own suite #2069
Full changelog

cluster-kube-controller-manager-operator

CNTRLPLANE-3211: enable configurable PKI for managed certificate rotation #925
OCPBUGS-23366: bindata: Import configmap-csr-controller-ca.yaml from KAS-O #918
CNTRLPLANE-2623: Restart operator when TLS config changes #915
OCPBUGS-65626: update library-go to latest #905
MON-4503: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #907
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-83736: add /var/run/kubernetes as emptyDir #640
CNTRLPLANE-3219: vendor: bump library-go, api, client-go for configurable PKI #636
CNTRLPLANE-2756: Add operator and operand network policies #629
CNTRLPLANE-2810: Restart operator when TLS config changes #617
OCPBUGS-65626: update library go to latest #610
MON-4504: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #614
Full changelog

cluster-kube-storage-version-migrator-operator

CNTRLPLANE-3055: Migrate go standard casee to ote #156
CNTRLPLANE-2706: add network policy e2e tests for operator and operand #151
OCPBUGS-65984: Revert TRT-2577: Revert #139 “OCPBUGS-65984: scale migrator deployment” #149
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-machine-approver

OCPCLOUD-3286: Bump k8s v1.35, go 1.25 #295
Full changelog

cluster-monitoring-operator

MON-4543, OPNET-765: Add kubernetes-nmstate telemetry metrics to allowlist #2855
OCPBUGS-74645: delay alert dispatch in Alertmanager #2848
OCPBUGS-81554: CVE-2026-33186 - bump google.golang.org/grpc to v1.79.3 #2872
NO-ISSUE: exclude hack/tools/vendor from shellcheck #2873
NO-JIRA: [bot] Synchronize versions of the downstream components #2865
OCPBUGS-81159: reject invalid collection profile in webhook #2860
NO-ISSUE: [bot] Update jsonnet dependencies #2861
MON-4481, MON-4482: set minimum TLS version for Thanos sidecars #2859
NO-JIRA: update jsonnet dependencies #2858
OCPBUGS-78976: configure repair policy to ‘evict’ #2856
MON-4542: update Prometheus operator CRDS to v0.90.0 #2854
NO-JIRA: update github.com/openshift/library-go #2852
NO-JIRA: change ClusterRolefailed to ClusterRole failed #2853
NO-JIRA: [bot] Synchronize versions of the downstream components #2857
NO-JIRA: [bot] Synchronize versions of the downstream components #2851
NO-JIRA: add unit tests for admission webhook’s TLS configuration #2850
MON-4479: use TLS profile to configure CMO server #2841
NO-JIRA: [bot] Synchronize versions of the downstream components #2849
MON-4535: Add .coderabbit.yaml to reduce review noise #2845
NO-JIRA: [bot] Synchronize versions of the downstream components #2847
OCPBUGS-48578: chore(metrics-server): prefer control-plane nodes and tolerate their taints #2801
OCPBUGS-78221: fix return value format #2846
Full changelog

cluster-network-operator

OCPBUGS-83637: only report Progressing for active network rollouts #2962
CORENET-6543: Align VTEP CRD additionalPrinterColumns with upstream #2957
CNF-21001: multus: MultiNetworkPolicy nftables #2883
CORENET-6816: Add NetworkPolicies for CNO and its operands #2892
CORENET-6933: Update VTEPs/CUDN APIs #2952
OCPBUGS-78974: Fix ManagementState being reset on operator restart #2942
CORENET-6613: ClusterNetworkConnect DevPreview FG #2880
no-jira: Update OWNERS_ALIASES to include myself + “taanyas” and “marty-power” #2908
CORENET-6813: Add config override for allow-icmp-network-policy #2920
CORENET-6100: Add support for no-overlay mode #2844
CORENET-6561: CNO Rebase k8s to 1.35.0 #2887
OCPBUGS-78731: Revert “NVIDIA-554: DPU-host mode: use ConfigMap for OVN feature enablement instead of per-node script gating” #2938
OCPBUGS-77015: wait for patch port to apply drop garp flows #2910
OCPBUGS-70016: Updating cluster-network-operator-container image to be consistent with ART for 4.22 #2863
OCPBUGS-65633: add network-check-target + networking-console-plugin service accounts #2868
CORENET-6871: Handle zero-worker HyperShift clusters in daemonset rollout #2897
Full changelog

cluster-node-tuning-operator

NO-JIRA: Bump ghw dependency #1492
NO-JIRA: E2E: move dra resource test to reboot tests directory #1486
PSAP-2185: Support centralized TLS security profile configuration #1483
CNF-18941: e2e: PP: cover ExecCPUAffinity support in tests #1432
CNF-20404: DRA: disable Kubelet resources and topology managers #1445
OCPBUGS-78470: e2e: fixed flaky test_id:32646 CPU load balancing on cgroupv1 #1457
PSAP-2229: Prevent multiple reboots via MachineConfig creation/update sync #1474
Full changelog

cluster-olm-operator

OPRUN-4521: handle OCP 4.²³⁄₅.0 upgrade boundary #184
OCPBUGS-77899: Fix wait logic to handle NewOLM enabled on Default Feature #193
NO-ISSUE: remove no-op os.Remove call in TestRenderHelmTemplate #192
OCPBUGS-77899: Wait for operator-controller resources before verifyig #181
OPRUN-4518: Rename ClusterExtensionRevision to ClusterObjectSet #191
NO-ISSUE: Add fgiudici as reviewer #190
NO-ISSUE: return semver conversion errors #183
OCPBUGS-81188: Update grpc and other dependencies #182
OPRUN-4502: Use FratureGateNewOLMConfigAPI from openshift/api #180
OPRUN-4502: Add feature-gate for DeploymentConfig #176
Full changelog

cluster-openshift-apiserver-operator

CNTRLPLANE-2619: Restart operator when TLS config changes #662
CNTRLPLANE-2450: bump(k8s.io): 1.35.2 #669
CNTRLPLANE-2619: make checkendpoints use apiserver config #657
NO-JIRA: OWNERS: remove engineers who have left Red Hat #646
NO-JIRA: Disable WatchList feature gate due to the missing support of Project watch #667
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-81472: Prevent possibility of running controllers against empty informer caches #426
CNTRLPLANE-2620: Restart operator when TLS config changes #412
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-policy-controller

CNTRLPLANE-2769: bump k8s 1.35 #174
Full changelog

cluster-samples-operator

CNTRLPLANE-3176: implements operator tls config compliance #688
Full changelog

cluster-storage-operator

NO-JIRA: Add initial Agent Guide #682
STOR-2770: Mount metrics certs of azure-disk and azure-file CSI driver operator for Hypershift #686
STOR-2762: Bump all deps for 4.22 #684
OCPBUGS-74232: volume-data-source-validator should run on master nodes #659
OCPBUGS-78291: Allow azure-disk operator to read VolumeAttributeClasses #683
MON-4509: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #665
MON-4496: metrics: migrate Prometheus SD from Endpoints to EndpointSlices #668
NO-JIRA: Add a comment to sync AWS EBS IAM role into HyperShift #676
Full changelog

cluster-version-operator

OTA-1933: pkg/risk: Refactor alerts into a generic update-risk interface #1367
NO-JIRA: All CVO manifests in payload should be included #1337
OTA-1813: Drop a local label on alert-risk e2e #1363
NO-ISSUE: Add CodeRabbit config with review rules from PR analysis #1360
NO-JIRA: use scrape class which is more succinct #1365
CNTRLPLANE-2777: feat(resource builder): allow to inject tls configuration into annotated config maps #1322
OTA-1813: Populate risks from alerts #1329
OCPBUGS-78997: Do not discard ListOptions in waitForPodCompletion. #1361
OCPBUGS-65621: add dedicated service account to crb, cvo and version pod #1266
NO-JIRA: Add test migration guide for openshift-tests-private to CVO #1336
NO-JIRA: Try not to block by informing #1356
OCPSTRAT-2876: Allow inclusion/exclusion of manifests based on the OCP major version #1282
TRT-2581: Revert “NO-ISSUE: OTA-1605 Automate OCP-42543” #1353
NO-ISSUE: OTA-1605 Automate OCP-42543 #1309
CNTRLPLANE-2777: refactor(lib/resourcebuilder): generate interface for client instead of their specific types #1344
OTA-1546: Evaluate conditional updates if accept risks change #1348
OTA-1546: Skip an accept-risk case on network-restricted environment #1332
NO-ISSUE: Update fake clientsets to NewClientset #1340
TRT-2569: (fix) hypershift-e2e-aks and hypershift-e2e-aws failing with CVO bootstrap deadlock in ci amd64 payload #1342
Full changelog

console

OCPBUGS-84246: 4.22 SDK fixes #16321
OCPBUGS-83543: Add empty state visibility check to CRD test #16309
OCPBUGS-83543: Fix race condition in CRD Cypress test #16290
CONSOLE-4809: Extend RTL Test Coverage for Components Migrated from Enzyme #16249
CONSOLE-4512, OCPBUGS-82473: Switch from legacy render to createRoot #16202
OCPBUGS-77113: remove dev to admin links as dev monitoring views are enabled #16163
NO-JIRA: Update Dockerfile.dev to use latest base images #16264
CONSOLE-5065: Refactor dynamic module import transform code #16224
OCPBUGS-76556: fix Developer Sandbox telemetry #16020
NO-JIRA: Add stefanonardo to frontend reviewers#16267 #16267
OCPBUGS-78904: Mark notification drawer title for translation #16229
CONSOLE-3955: Migrate LogSnippet to PatternFly component #16190
OCPBUGS-81654: Filter out isActionCell prop to fix React warning #16247
CONSOLE-5152: bump cypress to latest #16244
OCPBUGS-81744: Convert cluster update status integration test to unit test #16260
OCPBUGS-81506: Add missing i18n translations for Pagination component #16233
CNV-62016: add description to ResourceQuota page title #16086
OCPBUGS-80989: Skip to fetch resource if model not found and load the other resources in list-page #16230
CONSOLE-5110: Assorted fixes and improvements #16250
OCPBUGS-79355: Fix and enable OLM Package E2E tests disabled during the public/ directory useK8sWatchResource refactoring #16220
OCPBUGS-74156: Prevent pod log search from shifting page layout #16223
Revert “OCPBUGS-74156: Prevent pod log viewer from shifting page layout when searching” #16218
OCPBUGS-74506: Remove ConsolePluginSecurityPolicy featuregate #16013
CONSOLE-5151: Replace showdown with marked #16239
CONSOLE-5094: cypress test improvements #16046
OCPBUGS-81331: Storage > VolumeSnapshots and VAC throws error #16219
CONSOLE-4447: Additional modals switched to use ModalFooterWithAlerts for consistency #16171
OCPBUGS-80939: Add robots.txt policy to console #16205
OCPBUGS-79315: fix analyze.sh/react-icons treeshake #16188
CONSOLE-5015: Remove drag-and-drop from TextColumnField #16204
CONSOLE-5065: Update list of PatternFly packages that support dynamic modules #16182
NO-ISSUE: frontend/packages/console-dynamic-plugin-sdk/README: 4.22 doesn’t support PatternFly 5 #16206
OCPBUGS-62700: Fix VolumeSnapshot table sorting #16200
OCPBUGS-79581: Fix Deprecated Operator Warnings E2E tests Skipped in the Firehose Public Folder PR #16197
OCPBUGS-74156: Prevent pod log viewer from shifting page layout when searching #16193
OCPBUGS-79678: Align the search input so that its next to the select menu toggle #16198
OCPBUGS-78584: Preserve query params in CatalogRedirect #16165
OCPBUGS-79525: Fix null reference error in subscription action menu #16196
OCPBUGS-72526: Impersonating user loads extra pages that user not authorized to view #16088
OCPBUGS-79000: Fix perspective switcher icon suspending the whole app #16183
CONSOLE-5015: Refactor pinned nav to react-drag-drop #16146
CONSOLE-5031: Remove Firehose Component and Fix and Cleanup Impacted Types #16096
CONSOLE-4983: Add Groups to node details #15981
NO-JIRA: prep for 4.22.0-prerelease.2 SDK publish #16201
OCPBUGS-74140: Prevent Chinese characters from rendering as unicode escape sequences in alert messages #16156
OCPBUGS-77814: Add E2E tests for VolumeAttributesClass UI #16085
CONSOLE-5073: Update redux-related packages to latest #16087
OCPBUGS-78543: Hide filter category selector when only one filter exists #16153
CONSOLE-5015: Replace react-dnd with PF MultipleFileUpload in topology #16179
CONSOLE-5134: Update to Go 1.25, K8s 1.35, and Helm 3.20 #16147
CONSOLE-5135: add deprecation warning for react-router-dom #16178
OCPBUGS-79462: Skip flaky Data Grid operator E2E tests #16191
CONSOLE-5027: Refactor public/ Directory Components to useK8sWatchResource(s) #15954
OCPBUGS-63391: Replace DataViewTextFilter with existing custom TextFilter #16151
OCPBUGS-73803: Fix incorrect OLMv1 documentation URL #16052
OCPBUGS-74346: Fix useOperatorCatalogCategories hook. #16093
OCPBUGS-78534: Make E2E test create helper idempotent and improve test cleanup #16148
OCPBUGS-66147: Make folder field optional for vsphere #16142
OCPBUGS-77912: Fix TypeError in OLS code import to console #16119
OCPBUGS-44612: Remove useUserPreferenceCompatibility and withUserPreferenceCompatibility #16076
CONSOLE-5073: Bump i18next to latest #16150
CONSOLE-4447: Update SecretFormWrapper modal to use ModalFooterWithAlerts #16167
RFE-7965: add basic auth support for helm repositories #15624
CONSOLE-5094: Add pesudo CSP violation detection to Cypress #16048
NO-JIRA: Update demo plugin README #16166
CONSOLE-5093: Remove support for deprecated extensions #16043
CONSOLE-4447: Remove deprecated modal components and CSS #16126
CONSOLE-5018: Refactor UNSAFE_ class components to FC #16062
CONSOLE-5129: Theme context cleanup #16155
OCPBUGS-78390: Reset pagination page when changing namespace #16138
OCPBUGS-78253: Fix InstallPlan > Components layout issue #16127
CONSOLE-4447: Migrate @console/shared modals to PatternFly v6 Modal components #16079
NO-JIRA: Remove cursor context #16106
CONSOLE-5087: Refactor console-shared-package from Firehose to useK8sWatchResource #16077
CONSOLE-4447: Migrate modal hooks from useModal to useOverlay #16061
CONSOLE-5114: Clean up React Router imports and dependencies #16139
OCPBUGS-78499: Fix curly quote in operator-hub-community-provider-modal #16145
NO-JIRA: Update PageHeading types #16095
NO-JIRA: Add a progress bar when building #16099
CONSOLE-4447: Migrate knative-plugin modals to PatternFly 6 #16065
OCPBUGS-78404: Fix flaky secret integration tests #16140
CONSOLE-4447: Migrate core modals to PatternFly 6 Modal components (part 2) #16123
CONSOLE-4439: Upgrade to React Router 7 #14957
OCPBUGS-78361: Fix flaky popover-status-button integration test #16135
CONSOLE-4447: Migrate core modals to PatternFly v6 modal components (part 1) #16100
And 16 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-79068: Fix HelmChartRepository YAML format #1129
CONSOLE-5138: Enable readOnlyRootFilesystem for console and download pod #1123
OCPBUGS-78477: Bump API to support ExternalOIDCWithUpstreamParity new API fields #1125
OCPBUGS-63502: Redeploy console pods upon cert rotation #1093
OCPBUGS-65622: add controller for downloads service account deletion logic #1111
Sync Dockerfile.ocp image #1127
Full changelog

csi-external-attacher

OCPBUGS-77562, STOR-2758: Rebase to upstream v4.11.0 for OCP 4.22 #94
Full changelog

csi-external-provisioner

STOR-2758: Rebase to upstream v6.2.0 for OCP 4.22 #121
Full changelog

csi-external-resizer

STOR-2758: Rebase to upstream v2.1.0 for OCP 4.22 #183
Full changelog

csi-node-driver-registrar

OCPBUGS-77738, STOR-2758: Rebase to upstream v2.16.0 for OCP 4.22 #95
Full changelog

docker-builder

OKD-322: Update Dockerfile to work on CentOS/RHEL 10 #500
Full changelog

docker-registry

CNTRLPLANE-3073: bump kubernetes to v1.35 #467
Full changelog

gcp-cloud-controller-manager

OCPBUGS-78471: Fix OSD ILB bug #103
OCPCLOUD-3274: Merge https://github.com/kubernetes/cloud-provider-gcp:master (378730f) into main #99
Full changelog

gcp-machine-controllers

OCPBUGS-81576: Bump gRPC-Go package for CVE fix #155
OCPCLOUD-3279: Rebase to Kube 1.35 for Machine API Provider GCP #145
Full changelog

gcp-pd-csi-driver

STOR-2751: Rebase to upstream v1.24.1 for OCP 4.22 #98
Full changelog

gcp-pd-csi-driver-operator

STOR-2762: Bump all deps for 4.22 #175
Full changelog

haproxy-router

NE-2332: Add support for TLS curves in HAProxy configuration #755
TRT-2597: Revert “NE-2333: Add support for configurable SSL curves in HAProxy configuration” #754
NE-2333: Add support for configurable SSL curves in HAProxy configuration #678
OCPBUGS-77773: fix backend server health check if DCM is enabled #747
OCPBUGS-62238: configure TLS profile for metrics endpoint #748
NO-JIRA: Do not install weak dependencies such as logrotate #687
NE-2418: Add haproxy_max_connections metric #728
OCPBUGS-75009: sort list of map entries on DCM #738
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-78990: Bump 1.35.3 to master #2633
OCPBUGS-78986: UPSTREAM: 137926: KEP-961: demote maxUnavailable feature in statefulset to off by default #2632
NO-JIRA: UPSTREAM: <carry>: Register OpenShift cloud providers in k8s-tests-ext #2635
OCPBUGS-78504: unflake HPAConfigurableTolerance test #2631
UPSTREAM: <carry>: OCPBUGS-39360: Fix ClusterIsIPv6() detection for dual-stack v6-primary clusters #2603
NO-JIRA: UPSTREAM: <carry>: Add jacobsee and jubittajohn to DOWNSTREAM_OWNERS #2630
OCPBUGS-77866: Bump 1.35.2 to master #2612
Full changelog

hypershift

OCPBUGS-83576: fix(metrics-proxy): resolve ports from pods instead of deployments #8260
NO-JIRA: revert: remove .git/ from .dockerignore #8234
OCPBUGS-83285: revert 5.0 supported version from release-4.22 #8216
CNTRLPLANE-3233: ci(gha): add release-4.22 branch to GitHub Actions workflows #8218
CNTRLPLANE-3197: update latest supported version from 4.22 to 4.23 #8193
CNTRLPLANE-3174: Add unit tests for CPO controller packages #8184
CNTRLPLANE-3215: fix envtest GHA workflow path filters for CRD test suites #8200
CNTRLPLANE-2078: add unit tests for AWS Route53 and IAM #8079
OCPBUGS-82301: fix(catalogs): use semver comparison for catalog version cap to handle OCP 5.0 #8195
NO-JIRA: control-plane-pki-operator: fix Event emission logic, format #8190
OCPBUGS-82192: fix(webhookcerts): handle upgrade from service-ca managed certs #8189
OCPBUGS-82159: fix(ignition-server): use major+minor version comparison for OCP 5.0 payloads #8182
CNTRLPLANE-2511: refactor(cpo): move OAuth internal LB annotation into ReconcileService #8185
CNTRLPLANE-2511: Support OAuth LoadBalancer with Azure Private Link Service #8149
OCPBUGS-81644: fix(cli): fix Azure destroy cluster leaving vnet/nsg resource groups for private topology #8151
OCPBUGS-33097: Remove deprecated OVNSbDb service type from default strategy mappings #8164
CNTRLPLANE-3174: test: Add unit tests for product-cli, token-minter, and sync-fg-configmap #8178
CNTRLPLANE-3050: feat(ci): use Konflux-built image for GitHub Actions runners #8092
CNTRLPLANE-2841: test(e2e): add metrics-forwarder e2e test verifying data-plane scraping #8147
CNTRLPLANE-3037: Create separate assets package specifically for CRD management #8150
GCP-462: Add GCP hosted cluster documentation #8027
NO-JIRA: docs(ci): add sync-community-fork token rotation guide #8173
CNTRLPLANE-2841: feat(HCCO): reintroduce guest cluster metrics forwarder for control plane metrics #8146
NO-JIRA: fix(e2e): handle rate limiter context deadline error during cleanup #8137
NO-JIRA: fix(ci): remove catch-all pattern from codecov ignore list #8171
CNTRLPLANE-2511: Allow LoadBalancer publishing strategy for OAuthServer on self-managed Azure #8148
NO-JIRA: chore(ci): add client/ to codecov ignore list #8167
NO-JIRA: feat(e2e): add Azure platform support for backup/restore tests #8144
OCPBUGS-74960: prevent resource leak on deletion and handle DependencyViolation #7868
NO-JIRA: docs: expand custom images guide with Dockerfile.dev and CPO override #8155
CNTRLPLANE-3042: Parallelize make verify targets for faster local development #8051
NO-JIRA: ci: fix codecov ignore patterns for docs and nested files #8156
OCPBUGS-81270: fix(external-dns): mitigate Azure DNS API throttling #8098
NO-JIRA: ci: ignore non-Go files in codecov coverage analysis #8154
OCPBUGS-67240: Ignition generalize image download errors #7673
NO-JIRA: fix(Makefile): auto-detect upstream remote for lint #8152
OCPBUGS-79539: fix(cpo-v2): preserve HCCO modifications to OCM Controllers field #8072
AUTOSCALE-582: wire CRD sync and CEL adjustments into karpenter-api target #8119
CNTRLPLANE-3111: docs: add service publishing strategies reference documentation #8107
NO-JIRA: ci: make docs deploy preview non-blocking #8145
Revert “CNTRLPLANE-2841: feat(HCCO): add guest cluster metrics forwarder for control plane metrics” #8141
NO-JIRA: fix(e2e): handle dual RHCOS payloads in Karpenter drift OS image check #8128
OCPBUGS-50003: add ConfigMap fallback and EC2 error caching for vCPU metrics resolution #6723
CNTRLPLANE-2172: feat(azure): add private endpoint access topology for self-managed HostedClusters #7821
CNTRLPLANE-2841: feat(HCCO): add guest cluster metrics forwarder for control plane metrics #7790
CNTRLPLANE-2797: hypershift-operator webhooks port 9443 respect cluster TLS security profile #8078
OCPBUGS-50603: Create dedicated identity for KAS bootstrap container #6827
Revert “NO-JIRA: test(e2e): extend AWS guest resource cleanup timeout” #8138
NO-JIRA: ci: improve CI efficiency and codecov configuration #8113
NO-JIRA: test(e2e): add KubeVirt platform to backup/restore e2e test #8131
OCPBUGS-81162: fix(cpo): skip router LB services for ARO HCP #8087
NO-JIRA: ci: enable paths filter on envtest workflows #8125
NO-JIRA: test(e2e): extend AWS guest resource cleanup timeout #8124
NO-JIRA: fix(test): deep copy CRDs inside envtest retry loop #8127
NO-JIRA: chore(docs-agg): remove document count from aggregated file #8126
NO-JIRA: ci: separate envtest from unit tests in CI workflow #8120
OCPBUGS-80926: consolidate disaster-recovery prerequisites into dedicated page #8080
CNTRLPLANE-3116: fix(ci): drop pip cache from docs-preview workflow #8116
NO-JIRA: fix(api): regenerate feature gate manifests for ExternalOIDCWithUpstreamParity #8117
OCPBUGS-78763: fix: global-pull-secret daemonset node labeling race condition causes pods not to be scheduled on Replace upgrade strategy nodes in time #7981
CNTRLPLANE-3037: Introduce envtest for integration tests alternative #8089
CNTRLPLANE-3116: ci(docs): migrate docs-preview job to GitHub Actions #8109
CNTRLPLANE-244: fix(ci): configure Codecov PR comments and add unit tests #8085
NO-JIRA: chore(deps): weekly dependabot consolidation #8077
OCPBUGS-78931: add KubeVirt-specific backup settings #8022
OCPBUGS-81284: fix(release): allow multiple machine-os component versions #8101
NO-JIRA: fix(aws): load credentials from –aws-creds file using SDK v2 #8095
NO-JIRA: chore(ci): update hypershift-ci-2 manifests #8062
CNTRLPLANE-2678: Adapt etcd-backup command and add HO namespace manifests #8040
CNTRLPLANE-2551: Hypershift integration for API Auth Config changes #7774
GCP-447: inject token-minter as native sidecar init container #7965
AUTOSCALE-538, AUTOSCALE-539: Add Autonode status node counts + enabled condition to HostedCluster API #7794
CNTRLPLANE-244: ci: add Codecov integration to unit test workflow #8060
CNTRLPLANE-3050: Pre-build lint tools and fix Konflux pipeline triggers #8052
CNTRLPLANE-2838: feat(CPO): add metrics-proxy control plane component #7752
CNTRLPLANE-2787: Introduce BASE_DOMAIN env var for E2E test configuration #7930
CNTRLPLANE-2786: Extend controller architecture diagram with consumes relationship #8029
IR-350: add tls security profile configuration for the image registry operator #8011
AUTOSCALE-571: fix(karpenter): don’t associate public IP addresses for the default OpenshiftEC2NodeClass #7853
NO-JIRA: feat(e2e): skip SupportedVersionSkew condition on OCP < 4.21 in backup/restore tests #8067
CNTRLPLANE-2076: remove v2 import aliases left from SDK migration #8063
AUTOSCALE-559: PrivateLink plumbing for karpenter ec2nodeclass subnets #7791
STOR-2770: Generate Azure Disk and File CSI Driver Operator metrics serving certs by HCP controller #7970
CNTRLPLANE-2678: Add fetch-etcd-certs CPO subcommand for HCPEtcdBackup #8010
NO-JIRA: revert(api): remove APIServer Route CEL validation for Azure #8074
CNTRLPLANE-2172: feat(api): add Azure private endpoint access and PrivateLinkService CRD #8055
OCPSTRAT-2831: chore(owners): add cblecker to core-reviewers and core-approvers #8018
OCPBUGS-79428: Add recipe for ACM/MCE HyperShift Operator overrides #8057
CNTRLPLANE-2076: complete SDK v1 removal and post-migration cleanup #8038
CNTRLPLANE-2049: update GCP validation error expectations in TestOnCreateAPIUX #8037
CNTRLPLANE-3046: feat(ci): add monitoring and alerting for ARC runners #8044
CNTRLPLANE-3049: split verify checks into individual GitHub Actions workflows #8049
OCPBUGS-79352: fix(oapi): force WatchList feature gate to disabled for openshift-apiserver #8035
OCPBUGS-79071: Fix AWSEndpointService private-router teardown stuck on active VPC Endpoint connections #8030
CNTRLPLANE-3041: Override ARO/HCP 4.20 CPO with Azure Pod Identity backport #8025
CNTRLPLANE-3054: Apply init task 0.3 migration to fix broken Konflux pipelines #8053
OCPBUGS-70301: force-remove karpenter finalizer when guest KAS is down #7939
CNTRLPLANE-3047: fix(ci): use community fork token for checkout credential helper #8050
CNTRLPLANE-2788: validate memory quantity in KubeVirt nodepool create #7884
NO-JIRA: chore(ci): update Konflux Tekton tasks to latest versions #8048
CNTRLPLANE-3048: refactor gh-actions-runner pipelines and improve CEL triggers #8045
OCPBUGS-79369: Add Konflux archived PipelineRun skill and update task discovery #8043
CNTRLPLANE-3047: add workflow to sync hypershift-community fork #8042
NO-JIRA: chore(claude): add restructure-commits plugin command #7927
CNTRLPLANE-2986: feat(ci): Add self-hosted GitHub Actions runners for HyperShift #7980
NO-JIRA: fix(ci): pass –upgrade-versions to konflux task update skill #8036
CNTRLPLANE-2998: Migrate SQS to AWS SDK v2 #8015
NO-JIRA: refactor(oadp): unify backup/restore e2e test with platform auto-detection #7971
OCPBUGS-78996: fix(test): create SQS queue dynamically in spot termination handler e2e test #8007
CNTRLPLANE-2049: fix(api): audit and improve GCP API validation rules #8003
CNTRLPLANE-2081: Migrate RAM and ARN to AWS SDK v2 #7986
OCPBUGS-78778: fix(cpo): Don’t remove HCP Ingress from routes when CapabilityRoute is disabled #8001
NO-JIRA: Disable parent ownership for api subdir #8009
NO-JIRA: fix(api): replace CEL url() validators with regex to fix CRD cost budget #8004
OCPBUGS-78544: Update base images to address multiple CVEs flagged by MSFT security scans #7983
OCPBUGS-78705: Bootstrap CVO manifests should be filtered based on feature-set annotation #7984
NO-JIRA: fix(api): extend kubeapilinter scope to all non-vendor API types #8002
NO-JIRA: build(e2e): include hypershift binary in Dockerfile.e2e #7919
CNTRLPLANE-2925: add NodePool.Status.NodesInfo for node version distribution #7917
OCPSTRAT-2336: Adjust karpenter API to OpenShift conventions #7952
OCPBUGS-78539: chore(e2e): add temporary crash toleration for dns-operator #7978
CNTRLPLANE-2172: fix(e2e): register Azure private platform e2e flags #7977
NO-JIRA: chore(owners): require api-approvers approval for api/ changes #7972
Update Kube API Linter config for new APIs #7982
NO-JIRA: add .gitattributes to collapse generated files in PR diffs #7918
CNTRLPLANE-2910: feat(cpo): add Azure workload identity webhook as KAS sidecar #7867
CNTRLPLANE-2077: refactor(cleanzones): migrate AWS SDK from v1 to v2 #7960
CNTRLPLANE-2219: feat(aws): migrate ec2 to AWS SDK v2 #7871
GCP-440: Fix GCP boot image discovery from CoreOS stream metadata #7881
NO-JIRA: fix(oadp): correct Agent platform API group in backup/restore resources #7974
OCPBUGS-78356: fix(sharedingress): coalesce HAProxy reloads to prevent reload storms #7945
CNTRLPLANE-2172: fix(operator): accept Azure as valid private-platform value #7968
NO-JIRA: Rename cilium directory to v1.15.1 #7888
OCPBUGS-70354: add serviceAccount to global-pull-secret-syncer #7439
NO-JIRA: feat(e2e): add OIDC IAM fix and NodePool validation to backup/restore #7837
CNTRLPLANE-2172: feat(install): register Azure private platform flags #7912
CNTRLPLANE-2978: Add Azure CPO override for OCP 4.20 #7955
OCPBUGS-65687: fix(cpo): prevent informer creation for inaccessible resource types #7819
GCP-441: correct CCM crash toleration key to match pod label #7926
CNTRLPLANE-2916: conditionally create openshift-ingress network policy based on route labeling #7872
NO-JIRA: chore: add .git/ to .dockerignore #7944
NO-JIRA: fix(test): add aws-node-termination-handler to safe-evict audited list #7816
NO-JIRA: test(scheduler): add pair loss recovery unit coverage #7848
OCPBUGS-67262: fix(e2e): Use NodePool replicas as authoritative source for expected node count instead of CountAvailableNodes #7378
OCPBUGS-77160: include NMStateConfig in Agent platform OADP backup resources #7847
AUTOSCALE-571: fix(karpenter): select existing private subnets for default OpenshiftEC2NodeClass #7933
OCPBUGS-78198: fix(catalogs): update catalog image version cap to 4.21 #7915
OCPBUGS-78184: fix(hostedcluster): Remove referenced resource annotations regardless of hcp status #7913
CNTRLPLANE-2203: reintroduce ControlPlaneConnectionAvailable condition with conformance fix #7746
OCPBUGS-78185: Fix deadlock when changing release image during initial provisioning #7910
CNTRLPLANE-634: Make external-dns interval and AWS zones cache duration configurable #7931
And 13 elided commits (e.g. from squash or rebase merges)
Full changelog

ibm-vpc-block-csi-driver

STOR-2754: Rebase to upstream v5.2.21 for OCP 4.22 #118
Full changelog

ibm-vpc-block-csi-driver-operator

STOR-2762: Bump all deps for 4.22 #168
Full changelog

ibmcloud-cluster-api-controllers

OCPCLOUD-3296: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.13.1 (93d5b50) into main #142
Full changelog

ibmcloud-machine-controllers

OCPCLOUD-3278: Rebase to Kube 1.35 for Machine API Provider IBM #83
OCPBUGS-77729: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.22 #80
NO-JIRA: Modernize test infrastructure to align with other MAPI providers #82
Full changelog

insights-operator

CCXDEV-15964: fetch TLS profiles from API server #1257
CCXDEV-15963: kubeletconfig gatherer #1247
NO-JIRA: generate gatherer docs #1256
CCXDEV-16094: add config option to disable runtime extractor #1248
CCXDEV-16006: add permission for opentelemetrycollectors #1252
OCPBUGS-78115: Fix string accessor error #1253
Full changelog

insights-runtime-exporter, insights-runtime-extractor

Update OWNERS to remove ‘tremes’ #67
Full changelog

ironic

OCPBUGS-82540: Bump pyasn1 to 0.5.1-5 #822
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #818
METAL-1758: Merge upstream 2026 03 16 #814
METAL-1735: Add TLS cipher suite and curves related options to ironic for centralized tls support #810
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #816
METAL-1771: Remove heredoc syntax for hermetic builds compatibility #815
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #812
OCPBUGS-77528: Fix interface detection when MAC/IP matches multiple interfaces #807
METAL-1726: Multi-stage wheel-builder for OCP builds #786
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #808
Full changelog

kube-metrics-server

NO-JIRA: disable automatic coderabbit reviews #53
Full changelog

kube-rbac-proxy

CNTRLPLANE-2932: Merge upstream v0.21.1 #133
Full changelog

kubevirt-csi-driver

CNV-82343: Add annotation-based fallback for infra VM node ID resolution (#170) #80
Full changelog

machine-api-operator

OCPCLOUD-3346: tls: use centralized TLS #1456
MON-4497: metrics: migrate Prometheus SD from Endpoints to EndpointSlices #1457
SPLAT-2680: Changed DHA to require hostAffinity=host #1484
OCPCLOUD-3282, OCPCLOUD-3288: Bump to k8s 1.35 dependencies #1474
NO-JIRA: fix flaky TestReconcile/machine_with_node_likely_to_go_unhealthy#1483 #1483
SPLAT-2680: Fixed MAO to not allow dedicated host configurations for control plane nodes #1477
Full changelog

machine-config-operator

OCPBUGS-83818: ClusterHostedDNS on AWS/Azure/GCP: Modify Corefile template to better handle empty record types #5862
OCPBUGS-83771: Make IRI registry read-only via environment variable #5859
OCPBUGS-83577: Allow enablement of systemd units with existing files #5855
OCPBUGS-83559: Update AMI Whitelist #5853
OCPBUGS-83540: order corosync after OVS configuration on TNF clusters] #5852
Revert “OCPBUGS-69936: ovs: increase CPU priority for Open vSwitch Forwarding Unit” #5850
MCO-2135: Add test for OSStream labeling of Machines, MachineSets, and ControlPaneMachineSets #5814
AGENT-1307: add MCD IRI manager #5807
MCO-2202: separate duplicate PinnedImageSet validation into OCP-88562 #5839
MCO-2163: adds machine-config-osimagestream installer helper #5770
OCPBUGS-69936: ovs: increase CPU priority for Open vSwitch Forwarding Unit #5797
MCO-1972: Removes OSImageURLConfig from the build controller #5424
Reapply “MCO-2120: Rework OS Image Stream label classification” #5767
OCPBUGS-68336: When adding new nodes, MCD executes commands after setting the nodes’ state as Done #5832
AGENT-1416: Add default NodeDisruptionPolicy for IRI #5683
NO-ISSUE: Fix order of cleanup to further avoid race #5826
MCO-2183: migrated configdrift, kubeletconfig, containerruntimeconfig… #5818
OCPBUGS-78154: Use HA leader election defaults for MCO on SNO #5764
OCPBUGS-78498: Update skew error message with doc links #5825
MCO-2168: Deleting a PinnedImageSet does not affect images pinned by another PinnedImageSet #5786
NO-ISSUE: In extended tests, disable Skew when disabling the bootimag… #5811
MCO-2171: Move long running boot image tests to MCO’s disruptive suites #5808
NO-ISSUE: Fix MCN Applied condition checks for TP and non-TP clusters #5796
OCPBUGS-80970: MCS fallback to latest v3 #5816
AGENT-1366: Report InternalReleaseImageController errors in IRI status #5803
OCPBUGS-62619: Add etcd size limit validation for rendered MachineConfigs #5729
MCO-2155: Add stream detection to some more boot image tests #5799
MCO-2167: Migrate alert test cases from the private repository #5781
OCPBUGS-78500: Skew enforcement should dynamically handle baremetal clusters #5768
OCPBUGS-79088: OCPBUGS-79357: Skip boot image updates until cluster is stable #5789
OCPBUGS-79361: Update AMI Whitelist #5788
NO-ISSUE: Update AMI collection script for installer changes #5790
OCPBUGS-75200: set default-timeout-stop to 200s globally #5782
MCO-2155: Add stream detection to boot image tests #5784
NO-ISSUE: Revert “extract oc binary from base OS image after build” #5785
OCPBUGS-66104: Fine tune CoreDNS pod configuration to improve performance #5695
MCO-2117: Allow default OSImageStream overrides #5714
OCPBUGS-78595: Fix log substring matching for disruptive test suite jobs #5769
OCPBUGS-74223: Re-order logger setting to eliminate race condition #5691
MCO-2146: do not use OSImageStream in Hypershift #5750
NO-ISSUE: always build golangci-lint from vendor #5772
OCPNODE-3201: Default Enablement of system-reserved-compressible in OpenShift #5408
OCPNODE-3880: Add criocredentialproviderconfig event handler #5487
OCPNODE-4074: Add additional storage configuration support for CRI-O #5666
NO-ISSUE: Increase timeout + interval for OCL test cleanup #5732
MCO-2151: Add stream detection to the boot image controller #5752
NO-ISSUE: Allow setting kubeletconfig log level to zero #5757
OCPBUGS-57473: extract oc binary instead of pulling OS image #5313
OCPBUGS-78107: Disable sandboxed-containers in arm64 10 #5754
MCO-2007: MCO-2096: MCO-2095: MCO-2011: Update MCO dependencies to Kubernetes 1.35 #5603
Full changelog

machine-image-customization-controller

METAL-1720: Add kernel file support for multi-architecture PXE boot #170
Full changelog

machine-os-images

METAL-1729: Add dual CoreOS version support for RHCOS 9 and 10 #81
Full changelog

monitoring-plugin

OU-1307: [release-4.22] don’t fight console to setActiveNamespace #881
NO-JIRA: re-enable get CSRF token #876
OU-1264: mcpToolUI basic implementation for OpenShift Lightpseed + obs-mcp + Perses #797
NO-JIRA: breaking changes follow up #875
OU-1175: OCP 4.22 Breaking Changes #863
OCPBUGS-81567: fix: re encode params when redirecting from graph to query-browser #869
OU-1184: lint enabled against cypress files and changes post coo #862
NO-JIRA: automation testing fix on podImage #868
NO-JIRA: exclude @xfail tests from CI incident commands #865
OBSINTA-1002: consolidate COO 1.4.0 test case documentation #793
NO-JIRA: podImage fix automation testing to remove extra click #864
OBSINTA-993: Tests for incident detection coo 1.4.0 changes #857
OCPBUGS-77113: feat: re enable dev console views #831
NO-JIRA: Incident Detection Tests Stabilization #854
NO-JIRA: switch to core platform page before test case run #837
NO-JIRA: Refactor cypress setup and operator commands #788
NO-JIRA: Add test configuration scenarios overview #745
Full changelog

multus-admission-controller

OCPBUGS-74025: Updating ose-multus-admission-controller-container image to be consistent with ART for 4.22 #114
Full changelog

multus-cni, multus-cni-microshift

CORENET-6886: downstream sync to kube 1.35 and go to 1.25 #281
OKD-322: Update Dockerfile to work on CentOS/RHEL 10 #275
Full changelog

must-gather

MG-241: Adding support for skipping rotated logs #536
no-jira: build(make): default podman flags for ART DNF wrapper #535
no-jira: docs: add proposal for e2e #526
RFE-8344: Add Node Feature Discovery Operator collection script #508
RFE-8932: Included object size with the object count #527
Full changelog

network-tools

NO-JIRA: Image slimming #154
Full changelog

networking-console-plugin

Bump lodash from 4.17.23 to 4.18.1 #366
OCPBUGS-70285: Upgrade cypress to v15 to fix CVEs #345
OCPBUGS-78542: Remove useHistory and replace with useNavigate #364
Full changelog

nutanix-cloud-controller-manager

OCPCLOUD-3272: Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (9c374cb) into main #54
Full changelog

nutanix-machine-controllers

OCPCLOUD-3277: Bump k8s 1.35 #134
Full changelog

oauth-apiserver

OCPBUGS-82579: [release-4.22]: chore: sync with openshift repositories #191
CNTRLPLANE-2989: feat: add external-oidc subcommand to oauth-apiserver #181
CNTRLPLANE-2260: cmd: wire up OTE ginkgo suite for tokenreviews #163
Full changelog

oauth-server

OCPBUGS-82579: [release-4.22]: chore: sync with openshift repositories #222
Full changelog

oc-mirror

CLID-532: Separate Image struct into AdditionalImage, BlockedImage, SampleImage #1372
OCPBUGS-62603: Fix printing collection messages with 0 collection items #1385
OCPBUGS-61136: Only print catalog rebuild message if there are catalo… #1386
CLID-524: additionalImages collector error handling #1343
CLID-535: api: use OCI definitions from opencontainers spec #1341
CLID-547: v2: add list releases command #1373
CLID-540: v2: add list operators command #1370
NO-JIRA: Group dependabot updates by package origin #1336
no-jira: lint: Remove golangci-lint v1 config. #1374
OCPBUGS-77146: Remove status field from CatalogSource, ClusterCatalog… #1369
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

olm-catalogd, olm-operator-controller

OPRUN-4546: Fix boxcutter finalizer ResourceNames in preflight test #695
NO-ISSUE: Synchronize From Upstream Repositories #694
NO-ISSUE: Synchronize From Upstream Repositories #693
OCPQE-31553: Test empty affinity erasure and cleanup #689
NO-ISSUE: Synchronize From Upstream Repositories #692
OPRUN-4518: Remove skip for incompatible operator check after rename of CER #690
OCPBUGS-60693, OCPBUGS-60958: Synchronize From Upstream Repositories #691
OPRUN-4426: add ocp-87557 #635
OCPQE-31553: update preflight permission case #686
NO-ISSUE: Add fgiudici as reviewer #681
OCPBUGS-78211, OCPBUGS-78455: Synchronize From Upstream Repositories #682
NO-ISSUE: Add long-duration test script and documents #664
OCPBUGS-81194: Update grpc in default-catalog-consistency tests #679
OCPBUGS-78092, OCPBUGS-78311: Synchronize From Upstream Repositories #677
OPRUN-4063: verify volume/volumeMount override #678
OCPBUGS-78999: Update quay-operator bundle version in OTE to fix missing arch #673
OCPQE-31636: enhance QE cases #666
OCPBUGS-76380: Synchronize From Upstream Repositories #676
OPRUN-4228: Add boxcutter tests #672
OPRUN-4468: Add OTE tests for OLMv1 DeploymentConfig support #662
OCPBUGS-78787: Synchronize from upstream #670
OCPBUGS-65634: UPSTREAM: <carry>: add service account to curl job #653
OPRUN-4063: deployment config cases #654
OCPQE-31265: update OCP-75441 to support multi-arch #668
OPRUN-4509: Synchronize From Upstream Repositories #669
NO-ISSUE: Synchronize From Upstream Repositories #667
NO-ISSUE: Synchronize From Upstream Repositories #665
NO-ISSUE: Synchronize From Upstream Repositories #663
Full changelog

openshift-apiserver

OCPBUGS-82579: [release-4.22] CNTRLPLANE-3226: Sync with openshift apiserver 4.22 kubernetes 1.34.1 #631
Full changelog

openstack-machine-api-provider

OCPBUGS-77724: Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.22 #161
Full changelog

openstack-resource-controller

OCPCLOUD-3321, OSASINFRA-3980: Update to image-based manifests #30
NO-JIRA: Update OWNERS_ALIASES #28
OCPBUGS-77719: Updating openstack-resource-controller-container image to be consistent with ART for 4.22 #26
UPSTREAM-SYNC: Sync main with upstream (release-1.0) #27
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-77984: test(olm): skip ppc64le/s390x for tests using single-arch images #1276
NO-ISSUE: Synchronize From Upstream Repositories #1278
NO-ISSUE: Synchronize From Upstream Repositories #1277
NO-ISSUE: retry transient registry errors in opm QE #1272
NO-ISSUE: Synchronize From Upstream Repositories #1275
NO-ISSUE: Synchronize From Upstream Repositories #1274
NO-ISSUE: Add pedjak and fgiudici as reviewers #1271
NO-ISSUE: Synchronize From Upstream Repositories #1268
: NO-ISSUE: Migrate away from deprecated ioutil #1160
OCPBUGS-79397: Fix SA restore resourceVersion conflict error #1264
OCPBUGS-77179: Synchronize From Upstream Repositories #1260
NO-ISSUE: remove etcd dependency from failing cases #1241
OCPQE-31468: verify images command log pollution #1262
OCPBUGS-78557: Re-Apply Fix admin context race condition in parallel tests #1259
OPRUN-4415: automate OCP-87188: Central TLS Profile Consistency #1207
TRT-2580: Revert “OCPBUGS-78557: Fix admin context race condition in parallel tests” #1258
OCPQE-31804: Fix admin context race condition in parallel tests #1256
NO-ISSUE: Synchronize From Upstream Repositories #1255
Full changelog

operator-marketplace

NO-ISSUE: Bump github.com/operator-framework/api from 0.41.0 to 0.42.0 #738
NO-ISSUE: Add fgiudici as reviewer #739
NO-ISSUE: Bump the k8s-dependencies group with 3 updates #737
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-83535: CARRY: skip ote tests 4.22 #3139
NO-JIRA: DownStream Merge [2026-04-09] #3126
NO-JIRA: DownStream Merge [04-02-2026] #3114
NO-JIRA: Disable informing tests for the time being #3118
OCPBUGS-77510: DownStream Merge [03-24-2026] #3084
OCPBUGS-77819: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.22 #3036
OCPBUGS-77795: Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.22 #3039
NO-JIRA: DownStream Merge [02-27-2026] #3011
Full changelog

powervs-block-csi-driver

OCPBUGS-77586: Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.22 #115
MULTIARCH-6015: Rebase ibm-powervs-block-csi-driver with upstream #116
OCPBUGS-77586: Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.22 #118
MULTIARCH-6016: Upgrade golangci-lint version to support go1.25 #117
Full changelog

powervs-block-csi-driver-operator

STOR-2762: Bump all deps for 4.22 #104
Full changelog

powervs-cloud-controller-manager

OCPBUGS-83398: Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.35 (e48649f) into release-4.22 #95
No-Jira: Update go.opentelemetry.io/otel and google.golang.org/grpc #94
OCPBUGS-70048: Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART for 4.22 #91
Full changelog

powervs-machine-controllers

OCPCLOUD-3271: Update dependencies for OpenShift 4.22 release #140
NO-JIRA: Add damdo to approvers list in OWNERS file #141
OCPBUGS-77745: Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.22 #139
Full changelog

prometheus

OCPBUGS-65568: chore(kubernetes): deduplicate warning logs from the API #296
Full changelog

prometheus-alertmanager

NO-ISSUE: [bot] Bump openshift/prometheus-alertmanager to v0.31.1 #127
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

NO-ISSUE: [bot] Bump openshift/prometheus-operator to v0.90.1 #378
MON-4542: bump v0.90.0 #377
NO-JIRA: Update v0.89.0 #374
Full changelog

service-ca-operator

OCPBUGS-82110: fix service-ca-controller CrashLoop on MicroShift #344
CNTRLPLANE-2845: add service-ca operator and workload network policies #324
CNTRLPLANE-2947: Enable configurable PKI for signing CA and serving certificates #327
NO-JIRA: migrate from go-bindata to embed #326
NO-JIRA: OWNERS: remove vrutkovs and add sanchezl #318
NO-JIRA:Update e2e test owners #339
NO-JIRA: Add CLAUDE.md #333
CNTRLPLANE-3038: test/e2e: migrate validatingwebhook-ca-bundle-injection to OTE serial suite #336
CNTRLPLANE-3035: test/e2e: migrate mutatingwebhook-ca-bundle-injection to OTE serial suite #335
CNTRLPLANE-3034: test/e2e: migrate crd-ca-bundle-injection to OTE serial suite #334
CNTRLPLANE-3033: test/e2e: migrate apiservice-ca-bundle-injection to OTE serial suite #332
CNTRLPLANE-3015: test/e2e: restore operator config after forced rotation #331
CNTRLPLANE-3009: test/e2e: migrate forced-ca-rotation to OTE serial-disruptive suite #330
CNTRLPLANE-3000: test/e2e: migrate time-based-ca-rotation test for OTE compatibility #308
NO-JIRA: bump Go to 1.25 and update dependencies #328
CNTRLPLANE-2549: test/e2e: add control plane stabilization wait after CA rotation #325
CNTRLPLANE-2549: test/e2e: migrate refresh-CA test for OTE compatibility #306
Full changelog

stream-coreos, stream-coreos-extensions

NO-JIRA: Revert “OCPBUGS-77244: 9.8: override runc package to pull in newer fixes” #1925
OCPBUGS-64841: post-process: Remove workaround for openvswitch additional group #1918
OCPBUGS-77244: 9.8: override runc package to pull in newer fixes #1923
Full changelog

tests

OCPBUGS-83803: Move imagepolicy test to disruptive long-running suite #31056
OCPBUGS-83783: Add test to verify for backup container exists when etcd crashes #31035
OCPBUGS-83778: Verify etc pod should start with oom_score_adj as system-node-critical #31034
OCPBUGS-83712: Use upgrades.Skippable for Gateway API upgrade test skip logic #31030
OCPBUGS-83787: OCPSTRAT-3082:TLS propagation test #31038
OCPBUGS-78997: Revert “NO-ISSUE: test/e2e/upgrade: Raise default update-ack timeout to 10m” #30919
OCPBUGS-82557: DCM tests need to be backward compatible #30999
OCPBUGS-77948, OCPBUGS-77949, OCPBUGS-78298, OCPEDGE-2443: TNF node replacement test updates #30846
NO-JIRA: Update OWNERS #30996
OCPBUGS-82046: Revert “remove some duplicate ovnk test cases” #30975
OCPBUGS-78090: Avoid copy of the oc binary, to support heterogeneous environments #30992
OCPBUGS-81340: fix pacemaker CronJob duplicate-event namespace #30985
OCPEDGE-2491: Log pcs status and etcd member list after every recovery #30949
NE-2561: Add Gateway API OLM to NO-OLM migration upgrade test #30897
OCPBUGS-81716: Add retry logic for transient network errors in restartKubeletOnNode #30966
CORENET-6168: Add ovn tests extension #30560
OCPBUGS-81640: test/ccm: upgrade ccm healthz test to use aws sdk v2 #30954
TRT-2084: terminationmessagepolicy: relax for 5.0 #30979
OCPBUGS-81340: openshift-tests: allow duplicate pacemaker status collector CronJob events #30953
OCPBUGS-81737: Dynamically find worker-generated-kubelet MC name to support different platforms #30967
OCPBUGS-81742: Add exception for the newly added kas-bootstrap-container #30963
OCPNODE-4224: Migrating test case OCP-70987 from OTP to origin #30948
OCPBUGS-82039: Fix DCM ingress tests to support IPv6-only clusters #30972
OCPBUGS-81685: OVNK BGP: fix curl arguments not properly tokenized #30961
OCPBUGS-81751: Fix GatewayClass update conflict in markTestDone #30964
NO-JIRA: Ignore extra fields #30939
NO-JIRA: fix CUDN status condition tests for new TransportAccepted condition #30958
NE-2529: add new dcm e2e tests #30926
OCPBUGS-81629: Skip NoRegistryClusterInstall feature tests if InternalReleaseImage resource was not present #30955
NO-JIRA: feat: update etcd/certrotation suite to disruptive #30947
OCPCLOUD-3215: test/ccm: add support for verifying NLB health check configuration #30952
NE-2520: Enable Gateway API tests on vSphere and baremetal #30946
SPLAT-2672: e2e/ote/ccm-aws: moving binary to cccmo #30864
OCPNODE-3725: Add System compressible test #30935
OCPCLOUD-3215: Detect IPv6 clusters and apply correct policy #30938
OCPNODE-4179: Migrating test case OCP-80983 from openshift-tests-private to origin #30899
OCPSTRAT-886: Support dual-stack LB in service disruption monitor #30936
OCPBUGS-78978: Workaround packet sniffer timeouts in BGP tests #30912
OTA-1813: Allow for alerts to fire from an e2e test #30929
AGENT-1428: Add e2e extended tests for NoRegistryClusterInstall #30941
SPLAT-2627: Added MAPA OTE entry #30808
OCPSTRAT-2728: Rebase 1.35 #30866
OCPNODE-4043: Add DRA e2e tests to run on NVIDIA GPU #30758
NE-2422: Skip Gateway API tests on dual-stack clusters #30942
NE-2131: register CIO tests extension and remove tests migrated to CIO #30911
MCO-2171: remove MCO bootimage tests from origin #30933
OCPBUGS-78617: Fix PinnedImages test should respect node taints #30913
NO-ISSUE: Make MCN degrade test stable across TechPreview and non-TechPreview #30943
TRT-2573: Show non-blocking failure message in JUnit failure output #30921
NE-2422: Add dual-stack ingress e2e tests for AWSDualStackInstall featuregate #30904
OCPNODE-4031: Add criocredentialprovider tests #30821
OCPNODE-3720: Test for AutoNodeSizing #30789
NE-2422: Fix router e2e tests for dual-stack AWS clusters #30934
STOR-2505: Add storage binaries check #30698
OCPBUGS-78940: Treat groups as existent if they were found but discovery is stale #30923
NO-JIRA: Reverting case OOM score adjustment #30932
OCPEDGE-2447: IsMicroShiftCluster: return error instead of calling Skip from container node #30914
NE-2501: Allow prometheus test pods to access Ingress Operator metrics port #30928
NO-JIRA: remove extra character #30920
OCPEDGE-2447: increase precondition cluster health timeout to 10m #30893
OCPNODE-3751: Add automated tests for kubelet LimitedSwap drop-in configuration for CNV #30795
MCO-2155: add osstream exclusion for mco bootimage tests #30918
TRT-2539: Fix output capture in ginkgo RunSpec to capture stdout/stderr #30769
NE-2498: add new DCM e2e tests #30741
NO-ISSUE: test/e2e/upgrade: Raise default update-ack timeout to 10m #30917
TRT-2506: Add OS version info to ClusterData #30827
NE-2292: Tests for gatewayAPIWithoutOLM featuregate graduation #30905
OCPEDGE-2381: Verify etc pod should start with oom_score_adj as system-node-critical #30867
NO-JIRA: remove test exception for Insights operator #30849
NE-2292: Skip OLM tests when GatewayAPIWithoutOLM enabled #30896
NO-JIRA: Remove TNF node replacement test #30901
OCPBUGS-78384: changed http to https for three places to reduce test false positives and false negatives #30872
CNTRLPLANE-2999: Revert PR #30746: TLS 1.3 test causing instability in 4.22 #30895
NO-JIRA: Add a singleton instance for list of nodes #30830
OCPNODE-3932: Add automated tests for non-CNV swap configuration #30807
OCPBUGS-78016: Fix double counting of pod restart events #30862
CNTRLPLANE-2449: test(sig-builds][Feature:Builds]): ignore watchapi.Bookmark as they are synthetic and used only for signaling sync completion #30885
OCPBUGS-77281: Add exception for GCE CSI driver images #30870
OCPBUGS-77002: Remove temporarily skip of MCO tests creating custom MCPs in RHEL10 suites #30845
CNTRLPLANE-2549: monitortests: treat Thanos collection failure as flake in disruptive suites #30877
OCPBUGS-76334: Add TLS 1.3 (Modern profile) support to TestTLSDefaults #30746
OCPNODE-4093: Update readme to include long running test information #30791
OCPBUGS-48186: Add kubelet and CRI-O panic detection invariant test #30243
OCPBUGS-38666, OCPBUGS-38750, OCPBUGS-62623: Remove DNS test exceptions #30865
OCPBUGS-77991: suppress podman build - URLs #30851
SPLAT-2672: ote/ccm-aws removing binary while migrating to CCCMO #30869
OCPBUGS-8933: run resource request/limit check early #30874
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

thanos

OCPBUGS-81494: CVE-2026-33186 openshift4/ose-thanos-rhel9: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation #179
NO-JIRA: Bump to v0.41.0 #173
Full changelog

vsphere-cloud-controller-manager

NO-JIRA: Merge https://github.com/kubernetes/cloud-provider-vsphere:release-1.35 (93af0f7) into main #113
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-81525: Bump google.golang.org/grpc to 1.79.3 #170
Full changelog

vsphere-csi-driver-operator

STOR-2762: Bump all deps for 4.22 #334
STOR-2882: add feature gate for checking platform type is vsphere #331
Full changelog

vsphere-problem-detector

STOR-2762: Bump all deps for 4.22 #214
Full changelog

Node Image Info

Loading node image info, this may take a while ...

CentOS Stream CoreOS 10 (`stream-coreos`)

Package List

cri-o-1.35.0-1.el10s
kernel-6.12.0-223.el10
openshift-kubelet-4.22.0-202604010134.p2.g9193b12.assembly.stream.el9
systemd-257-24.el10

Full list (484 packages)

NetworkManager-1:1.56.0-1.el10
NetworkManager-cloud-setup-1:1.56.0-1.el10
NetworkManager-libnm-1:1.56.0-1.el10
NetworkManager-ovs-1:1.56.0-1.el10
NetworkManager-tui-1:1.56.0-1.el10
WALinuxAgent-udev-2.14.0.1-3.el10
aardvark-dns-2:1.17.0-1.el10
acl-2.3.2-4.el10
afterburn-5.10.0-1.el10
afterburn-dracut-5.10.0-1.el10
alternatives-1.30-2.el10
amd-gpu-firmware-20260130-22.el10
amd-ucode-firmware-20260130-22.el10
attr-2.5.2-5.el10
audit-4.0.3-5.el10
audit-libs-4.0.3-5.el10
audit-rules-4.0.3-5.el10
authselect-1.5.2-1.el10
authselect-libs-1.5.2-1.el10
avahi-libs-0.9~rc2-3.el10
azure-vm-utils-0.7.0-1.el10
basesystem-11-22.el10
bash-5.2.26-6.el10
bash-completion-1:2.11-16.el10
bind-libs-32:9.18.33-15.el10
bind-license-32:9.18.33-15.el10
bind-utils-32:9.18.33-15.el10
bootc-1.15.1-1.el10
bootupd-0.2.32-2.el10
bsdtar-3.7.7-8.el10
bubblewrap-0.10.0-3.el10
bzip2-1.0.8-25.el10
bzip2-libs-1.0.8-25.el10
c-ares-1.34.6-1.el10
ca-certificates-2025.2.80_v9.0.305-102.el10
catatonit-5:0.2.1-4.el10
centos-gpg-keys-10.0-21.el10
centos-release-cloud-1-1.el10s
centos-release-nfv-common-1-5.el10s
centos-release-virt-common-1-1.el10s
centos-stream-release-10.0-21.el10
centos-stream-repos-10.0-21.el10
checkpolicy-3.10-1.el10
chrony-4.8-1.el10
cifs-utils-7.5-2.el10
clevis-22-1.el10
clevis-dracut-22-1.el10
clevis-luks-22-1.el10
clevis-pin-tpm2-0.5.3-9.el10
clevis-systemd-22-1.el10
cloud-utils-growpart-0.33-11.el10
composefs-1.0.8-1.el10
composefs-libs-1.0.8-1.el10
conmon-3:2.2.1-3.el10
conmon-rs-0.6.6-2.el10s
console-login-helper-messages-0.21.3-10.el10
console-login-helper-messages-issuegen-0.21.3-10.el10
console-login-helper-messages-profile-0.21.3-10.el10
container-selinux-4:2.246.0-1.el10
containers-common-6:5.8-2.el10
containers-common-extra-6:5.8-2.el10
coreos-installer-0.26.0-1.el10
coreos-installer-bootinfra-0.26.0-1.el10
coreutils-9.5-7.el10
coreutils-common-9.5-7.el10
cpio-2.15-3.el10
cracklib-2.9.11-8.el10
cracklib-dicts-2.9.11-8.el10
cri-o-1.35.0-1.el10s
cri-tools-1.35.0-1.el10s
criu-4.2-3.el10
criu-libs-4.2-3.el10
crun-1.27-1.el10
crypto-policies-20260216-1.git0e54016.el10
crypto-policies-scripts-20260216-1.git0e54016.el10
cryptsetup-2.8.1-2.el10
cryptsetup-libs-2.8.1-2.el10
curl-8.12.1-5.el10
cyrus-sasl-gssapi-2.1.28-27.el10
cyrus-sasl-lib-2.1.28-27.el10
dbus-1:1.14.10-5.el10
dbus-broker-36-4.el10
dbus-common-1:1.14.10-5.el10
dbus-libs-1:1.14.10-5.el10
dbus-tools-1:1.14.10-5.el10
device-mapper-10:1.02.210-2.el10
device-mapper-event-10:1.02.210-2.el10
device-mapper-event-libs-10:1.02.210-2.el10
device-mapper-libs-10:1.02.210-2.el10
device-mapper-multipath-0.9.9-19.el10
device-mapper-multipath-libs-0.9.9-19.el10
device-mapper-persistent-data-1.3.0-1.el10
diffutils-3.10-8.el10
dmidecode-1:3.6-5.el10
dnf-4.20.0-23.el10
dnf-data-4.20.0-23.el10
dnsmasq-2.90-5.el10
dosfstools-4.2-12.el10
dracut-107-4.el10
dracut-network-107-4.el10
dracut-squash-107-4.el10
duktape-2.7.0-10.el10
e2fsprogs-1.47.1-5.el10
e2fsprogs-libs-1.47.1-5.el10
efi-filesystem-6-8.el10
efibootmgr-18-9.el10
efivar-libs-39-3.el10
elfutils-default-yama-scope-0.194-2.el10
elfutils-libelf-0.194-2.el10
elfutils-libs-0.194-2.el10
erofs-utils-1.8.10-1.el10
ethtool-2:6.15-2.el10
expat-2.7.3-1.el10
fcoe-utils-1.0.34-11.gitb233050.el10
file-5.45-9.el10
file-libs-5.45-9.el10
filesystem-3.18-17.el10
findutils-1:4.10.0-5.el10
firewalld-filesystem-2.4.0-1.el10
flatpak-session-helper-1.16.0-9.el10
fstrm-0.6.1-12.el10
fuse-common-3.16.2-5.el10
fuse-libs-2.9.9-25.el10
fuse3-3.16.2-5.el10
fuse3-libs-3.16.2-5.el10
fwupd-2.0.19-2.el10
gawk-5.3.0-6.el10
gdbm-1:1.23-14.el10
gdbm-libs-1:1.23-14.el10
gettext-envsubst-0.22.5-6.el10
gettext-libs-0.22.5-6.el10
gettext-runtime-0.22.5-6.el10
git-core-2.52.0-1.el10
glib2-2.80.4-12.el10
glibc-2.39-117.el10
glibc-common-2.39-117.el10
glibc-gconv-extra-2.39-117.el10
glibc-minimal-langpack-2.39-117.el10
gmp-1:6.2.1-12.el10
gnupg2-2.4.5-4.el10
gnutls-3.8.10-3.el10
gobject-introspection-1.79.1-6.el10
gpg-pubkey-764429e6-55567027
gpgme-1.23.2-6.el10
grep-3.11-10.el10
grub2-common-1:2.12-45.el10
grub2-efi-x64-1:2.12-45.el10
grub2-pc-1:2.12-45.el10
grub2-pc-modules-1:2.12-45.el10
grub2-tools-1:2.12-45.el10
grub2-tools-minimal-1:2.12-45.el10
gssproxy-0.9.2-10.el10
gzip-1.13-3.el10
hostname-3.23-14.el10
hwdata-0.379-10.8.el10
ignition-2.26.0-2.el10
ignition-grub-2.26.0-2.el10
ima-evm-utils-1.6.2-5.el10
info-7.1-6.el10
inih-58-3.el10
intel-gpu-firmware-20260130-22.el10
ipcalc-1.0.3-12.el10
iproute-6.17.0-2.el10
iproute-tc-6.17.0-2.el10
iptables-libs-1.8.11-12.el10
iptables-nft-1.8.11-12.el10
iputils-20240905-5.el10
irqbalance-2:1.9.4-6.el10
iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10
iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el10
isns-utils-libs-0.103-1.el10
jansson-2.14-3.el10
jose-14-102.el10
jq-1.7.1-11.el10
json-c-0.18-3.el10
json-glib-1.8.0-5.el10
kbd-2.6.4-7.el10
kbd-legacy-2.6.4-7.el10
kbd-misc-2.6.4-7.el10
kdump-utils-1.0.58-15.el10
kernel-6.12.0-223.el10
kernel-core-6.12.0-223.el10
kernel-modules-6.12.0-223.el10
kernel-modules-core-6.12.0-223.el10
kernel-modules-extra-6.12.0-223.el10
kexec-tools-2.0.32-3.el10
keyutils-1.6.3-5.el10
keyutils-libs-1.6.3-5.el10
kmod-31-13.el10
kmod-libs-31-13.el10
kpartx-0.9.9-19.el10
krb5-libs-1.21.3-9.el10
less-661-3.el10
libacl-2.3.2-4.el10
libaio-0.3.111-22.el10
libarchive-3.7.7-8.el10
libassuan-2.5.6-6.el10
libattr-2.5.2-5.el10
libbasicobjects-0.1.1-58.el10
libblkid-2.40.2-19.el10
libbpf-2:1.7.0-1.el10
libcap-2.69-7.el10
libcap-ng-0.8.4-6.el10
libcbor-0.11.0-3.el10
libcollection-0.7.0-58.el10
libcom_err-1.47.1-5.el10
libcomps-0.1.21-3.el10
libconfig-1.7.3-10.el10
libcurl-minimal-8.12.1-5.el10
libdhash-0.5.0-58.el10
libdnf-0.73.1-15.el10
libdnf-plugin-subscription-manager-1.30.14-1.el10
libdrm-2.4.128-1.el10
libeconf-0.6.2-4.el10
libedit-3.1-52.20230828cvs.el10
libev-4.33-15.el10
libevent-2.1.12-16.el10
libfdisk-2.40.2-19.el10
libffi-3.4.4-10.el10
libfido2-1.14.0-7.el10
libgcc-14.3.1-4.4.el10
libgcrypt-1.11.0-6.el10
libgomp-14.3.1-4.4.el10
libgpg-error-1.50-2.el10
libibverbs-61.0-1.el10
libicu-74.2-5.el10
libidn2-2.3.7-3.el10
libini_config-1.3.1-58.el10
libipa_hbac-2.12.0-3.el10
libjcat-0.2.2-2.el10
libjose-14-102.el10
libkcapi-1.5.0-3.el10
libkcapi-hasher-1.5.0-3.el10
libkcapi-hmaccalc-1.5.0-3.el10
libksba-1.6.7-2.el10
libldb-4.23.5-107.el10
libluksmeta-10-1.el10
libmaxminddb-1.9.1-4.el10
libmicrohttpd-1:1.0.0-3.el10
libmnl-1.0.5-7.el10
libmodulemd-2.15.0-12.el10
libmount-2.40.2-19.el10
libmspack-0.10.1-0.14.alpha.el10
libndp-1.9-2.el10
libnet-1.3-7.el10
libnetfilter_conntrack-1.0.9-12.el10
libnfnetlink-1.0.2-3.el10
libnfsidmap-1:2.8.3-7.el10
libnftnl-1.3.0-3.el10
libnghttp2-1.68.0-4.el10
libnl3-3.11.0-1.el10
libnvme-1.16.1-3.el10
libpath_utils-0.2.1-58.el10
libpcap-14:1.10.4-7.el10
libpciaccess-0.16-16.el10
libpkgconf-2.1.0-3.el10
libpwquality-1.4.5-12.el10
libref_array-0.1.5-58.el10
librepo-1.19.0-1.el10
libseccomp-2.5.6-1.el10
libselinux-3.10-1.el10
libselinux-utils-3.10-1.el10
libsemanage-3.10-1.el10
libsepol-3.10-1.el10
libsmartcols-2.40.2-19.el10
libsmbclient-4.23.5-107.el10
libsolv-0.7.33-2.el10
libss-1.47.1-5.el10
libsss_certmap-2.12.0-3.el10
libsss_idmap-2.12.0-3.el10
libsss_nss_idmap-2.12.0-3.el10
libsss_sudo-2.12.0-3.el10
libstdc++-14.3.1-4.4.el10
libtalloc-2.4.3-100.el10
libtasn1-4.20.0-1.el10
libtdb-1.4.14-100.el10
libtevent-0.17.1-100.el10
libtirpc-1.3.5-1.el10
libtool-ltdl-2.4.7-14.el10
libunistring-1.1-10.el10
liburing-2.12-1.el10
libusb1-1.0.29-3.el10
libutempter-1.2.1-15.el10
libuuid-2.40.2-19.el10
libuv-1:1.51.0-1.el10
libverto-0.3.2-10.el10
libverto-libev-0.3.2-10.el10
libwbclient-4.23.5-107.el10
libxcrypt-4.4.36-10.el10
libxml2-2.12.5-10.el10
libxmlb-0.3.24-1.el10
libxslt-1.1.39-8.el10
libyaml-0.2.5-16.el10
libzstd-1.5.5-9.el10
linux-firmware-20260130-22.el10
linux-firmware-whence-20260130-22.el10
lldpad-1.1.1-4.gitf1dd9eb.el10
lmdb-libs-0.9.32-4.el10
logrotate-3.22.0-5.el10
lsof-4.98.0-7.el10
lua-libs-5.4.8-1.el10
luksmeta-10-1.el10
lvm2-10:2.03.36-2.el10
lvm2-libs-10:2.03.36-2.el10
lz4-libs-1.9.4-8.el10
lzo-2.10-14.el10
makedumpfile-1.7.8-1.el10
mdadm-4.4-3.el10
microcode_ctl-4:20260210-1.el10
mokutil-2:0.7.2-4.el10
mpdecimal-2.5.1-12.el10
mpfr-4.2.1-8.el10
nano-8.1-3.el10
ncurses-base-6.4-15.20240127.el10
ncurses-libs-6.4-15.20240127.el10
net-tools-2.0-0.73.20160912git.el10
netavark-2:1.17.2-1.el10
nettle-3.10.1-1.el10
newt-0.52.24-5.el10
nfs-utils-1:2.8.3-7.el10
nftables-1:1.1.5-3.el10
nmap-ncat-4:7.92-5.el10
nmstate-2.2.59-1.el10
npth-1.6-21.el10
nss-altfiles-2.23.0-6.el10
numactl-libs-2.0.19-3.el10
numad-0.5-50.20251104git.el10
nvidia-gpu-firmware-20260130-22.el10
nvme-cli-2.16-2.el10
oniguruma-6.9.9-7.el10
open-vm-tools-13.0.10-1.el10
openldap-2.6.10-1.el10
openshift-clients-4.22.0-202604110549.p2.g66dee73.assembly.stream.el9
openshift-kubelet-4.22.0-202604010134.p2.g9193b12.assembly.stream.el9
openssh-9.9p1-26.el10
openssh-clients-9.9p1-26.el10
openssh-server-9.9p1-26.el10
openssl-1:3.5.5-2.el10
openssl-fips-provider-1:3.5.5-2.el10
openssl-libs-1:3.5.5-2.el10
openvswitch-selinux-extra-policy-1.0-36.el10s
openvswitch3.5-3.5.3-5.el10s
os-prober-1.81-9.el10
ose-aws-ecr-image-credential-provider-4.22.0-202603272150.p2.ge73d6a3.assembly.stream.el9
ose-azure-acr-image-credential-provider-4.22.0-202603191400.p2.g4c7a764.assembly.stream.el9
ose-crio-credential-provider-4.22.0-202602261640.p2.g83d4961.assembly.stream.el9
ose-gcp-gcr-image-credential-provider-4.22.0-202604110549.p2.g4d9707e.assembly.stream.el9
ostree-2026.1-1.el10
ostree-grub2-2026.1-1.el10
ostree-libs-2026.1-1.el10
p11-kit-0.26.2-1.el10
p11-kit-trust-0.26.2-1.el10
pam-1.6.1-10.el10
pam-libs-1.6.1-10.el10
passt-0^20251210.gd04c480-3.el10
passt-selinux-0^20251210.gd04c480-3.el10
pciutils-3.13.0-6.el10
pciutils-libs-3.13.0-6.el10
pcre2-10.44-1.el10.3
pcre2-syntax-10.44-1.el10.3
pkgconf-2.1.0-3.el10
pkgconf-m4-2.1.0-3.el10
pkgconf-pkg-config-2.1.0-3.el10
podman-7:5.8.2-1.el10
podman-sequoia-0.4.0~pqc.2-1.el10
policycoreutils-3.10-2.el10
policycoreutils-python-utils-3.10-2.el10
polkit-125-4.el10
polkit-libs-125-4.el10
popt-1.19-8.el10
procps-ng-4.0.4-11.el10
protobuf-c-1.5.0-6.el10
psmisc-23.6-8.el10
python3-3.12.13-2.el10
python3-audit-4.0.3-5.el10
python3-charset-normalizer-3.4.2-1.el10
python3-cloud-what-1.30.14-1.el10
python3-dateutil-1:2.9.0.post0-1.el10
python3-dbus-1.3.2-8.el10
python3-decorator-5.1.1-12.el10
python3-distro-1.9.0-5.el10
python3-dnf-4.20.0-23.el10
python3-dnf-plugin-versionlock-4.7.0-10.el10
python3-dnf-plugins-core-4.7.0-10.el10
python3-gobject-base-3.46.0-7.el10
python3-gobject-base-noarch-3.46.0-7.el10
python3-hawkey-0.73.1-15.el10
python3-idna-3.7-4.el10
python3-iniparse-0.5-10.el10
python3-inotify-0.9.6-36.el10
python3-libcomps-0.1.21-3.el10
python3-libdnf-0.73.1-15.el10
python3-librepo-1.19.0-1.el10
python3-libs-3.12.13-2.el10
python3-libselinux-3.10-1.el10
python3-libsemanage-3.10-1.el10
python3-pip-wheel-23.3.2-7.el10
python3-policycoreutils-3.10-2.el10
python3-requests-2.32.4-1.el10
python3-rpm-4.19.1.1-23.el10
python3-setools-4.6.0-3.el10
python3-six-1.16.0-16.el10
python3-subscription-manager-rhsm-1.30.14-1.el10
python3-systemd-235-11.el10
python3-urllib3-1.26.19-3.el10
qemu-guest-agent-18:10.1.0-16.el10
quota-1:4.09-10.el10
quota-nls-1:4.09-10.el10
rdma-core-61.0-1.el10
readline-8.2-11.el10
rpcbind-1.2.7-3.el10
rpm-4.19.1.1-23.el10
rpm-build-libs-4.19.1.1-23.el10
rpm-libs-4.19.1.1-23.el10
rpm-ostree-2026.1-4.el10
rpm-ostree-libs-2026.1-4.el10
rpm-plugin-selinux-4.19.1.1-23.el10
rpm-sequoia-1.10.1.1-2.el10
rpm-sign-libs-4.19.1.1-23.el10
rsync-3.4.1-3.el10
samba-client-libs-4.23.5-107.el10
samba-common-4.23.5-107.el10
samba-common-libs-4.23.5-107.el10
sed-4.9-5.el10
selinux-policy-42.1.19-1.el10
selinux-policy-targeted-42.1.19-1.el10
setup-2.14.5-7.el10
sg3_utils-1.48-7.el10
sg3_utils-libs-1.48-7.el10
shadow-utils-2:4.15.0-11.el10
shadow-utils-subid-2:4.15.0-11.el10
shared-mime-info-2.3-8.el10
shim-x64-15.8-5.el10
skopeo-2:1.22.0-2.el10
slang-2.3.3-8.el10
snappy-1.1.10-7.el10
socat-1.7.4.4-8.el10
sqlite-libs-3.46.1-5.el10
ssh-key-dir-0.1.4-9.el10
sssd-2.12.0-3.el10
sssd-ad-2.12.0-3.el10
sssd-client-2.12.0-3.el10
sssd-common-2.12.0-3.el10
sssd-common-pac-2.12.0-3.el10
sssd-ipa-2.12.0-3.el10
sssd-krb5-2.12.0-3.el10
sssd-krb5-common-2.12.0-3.el10
sssd-ldap-2.12.0-3.el10
sssd-nfs-idmap-2.12.0-3.el10
sssd-proxy-2.12.0-3.el10
stalld-1.26.3-1.el10
strace-6.12-3.el10
subscription-manager-1.30.14-1.el10
subscription-manager-rhsm-certificates-20220623-6.el10
sudo-1.9.17-4.p2.el10
systemd-257-24.el10
systemd-journal-remote-257-24.el10
systemd-libs-257-24.el10
systemd-pam-257-24.el10
systemd-udev-257-24.el10
tar-2:1.35-11.el10
tmux-3.3a-13.20230918gitb202a2f.el10
toolbox-0.3-3.el10
tpm2-tools-5.7-5.el10
tpm2-tss-4.1.3-6.el10
tpm2-tss-fapi-4.1.3-6.el10
tzdata-2026a-1.el10
unbound-anchor-1.24.2-7.el10
unbound-libs-1.24.2-7.el10
userspace-rcu-0.14.0-7.el10
util-linux-2.40.2-19.el10
util-linux-core-2.40.2-19.el10
vim-data-2:9.1.083-10.el10
vim-minimal-2:9.1.083-10.el10
virt-what-1.27-3.el10
which-2.21-44.el10
xfsprogs-6.16.0-1.el10
xmlsec1-1:1.2.39-3.el10
xmlsec1-openssl-1:1.2.39-3.el10
xz-1:5.6.2-4.el10
xz-libs-1:5.6.2-4.el10
zlib-ng-compat-2.2.3-3.el10
zram-generator-1.1.2-14.el10
zstd-1.5.5-9.el10

Changed:

avahi-libs 0.9~rc2-2.el10 → 0.9~rc2-3.el10
bootc 1.13.0-1.el10 → 1.15.1-1.el10
bootupd 0.2.32-1.el10 → 0.2.32-2.el10
bsdtar 3.7.7-4.el10 → 3.7.7-8.el10
centos-gpg-keys 10.0-20.el10 → 10.0-21.el10
centos-stream-release 10.0-20.el10 → 10.0-21.el10
centos-stream-repos 10.0-20.el10 → 10.0-21.el10
clevis 21-9.el10 → 22-1.el10
clevis-dracut 21-9.el10 → 22-1.el10
clevis-luks 21-9.el10 → 22-1.el10
clevis-systemd 21-9.el10 → 22-1.el10
coreos-installer 0.25.0-1.el10 → 0.26.0-1.el10
coreos-installer-bootinfra 0.25.0-1.el10 → 0.26.0-1.el10
criu 4.2-2.el10 → 4.2-3.el10
criu-libs 4.2-2.el10 → 4.2-3.el10
crun 1.26-2.el10 → 1.27-1.el10
curl 8.12.1-4.el10 → 8.12.1-5.el10
device-mapper-multipath 0.9.9-15.el10 → 0.9.9-19.el10
device-mapper-multipath-libs 0.9.9-15.el10 → 0.9.9-19.el10
dnf 4.20.0-21.el10 → 4.20.0-23.el10
dnf-data 4.20.0-21.el10 → 4.20.0-23.el10
efi-filesystem 6-6.el10 → 6-8.el10
efibootmgr 18-8.el10 → 18-9.el10
glibc 2.39-114.el10 → 2.39-117.el10
glibc-common 2.39-114.el10 → 2.39-117.el10
glibc-gconv-extra 2.39-114.el10 → 2.39-117.el10
glibc-minimal-langpack 2.39-114.el10 → 2.39-117.el10
grub2-common 1:2.12-43.el10 → 1:2.12-45.el10
grub2-efi-x64 1:2.12-43.el10 → 1:2.12-45.el10
grub2-pc 1:2.12-43.el10 → 1:2.12-45.el10
grub2-pc-modules 1:2.12-43.el10 → 1:2.12-45.el10
grub2-tools 1:2.12-43.el10 → 1:2.12-45.el10
grub2-tools-minimal 1:2.12-43.el10 → 1:2.12-45.el10
ignition 2.25.1-1.el10 → 2.26.0-2.el10
ignition-grub 2.25.1-1.el10 → 2.26.0-2.el10
ima-evm-utils 1.6.2-4.el10 → 1.6.2-5.el10
iproute 6.17.0-1.el10 → 6.17.0-2.el10
iproute-tc 6.17.0-1.el10 → 6.17.0-2.el10
kernel 6.12.0-212.el10 → 6.12.0-223.el10
kernel-core 6.12.0-212.el10 → 6.12.0-223.el10
kernel-modules 6.12.0-212.el10 → 6.12.0-223.el10
kernel-modules-core 6.12.0-212.el10 → 6.12.0-223.el10
kernel-modules-extra 6.12.0-212.el10 → 6.12.0-223.el10
kpartx 0.9.9-15.el10 → 0.9.9-19.el10
libarchive 3.7.7-4.el10 → 3.7.7-8.el10
libcurl-minimal 8.12.1-4.el10 → 8.12.1-5.el10
libdnf 0.73.1-14.el10 → 0.73.1-15.el10
libdnf-plugin-subscription-manager 1.30.12-1.el10 → 1.30.14-1.el10
libipa_hbac 2.12.0-1.el10 → 2.12.0-3.el10
libldb 4.23.5-105.el10 → 4.23.5-107.el10
libnfsidmap 1:2.8.3-4.el10 → 1:2.8.3-7.el10
libnghttp2 1.68.0-3.el10 → 1.68.0-4.el10
libnvme 1.16.1-2.el10 → 1.16.1-3.el10
libsmbclient 4.23.5-105.el10 → 4.23.5-107.el10
libsss_certmap 2.12.0-1.el10 → 2.12.0-3.el10
libsss_idmap 2.12.0-1.el10 → 2.12.0-3.el10
libsss_nss_idmap 2.12.0-1.el10 → 2.12.0-3.el10
libsss_sudo 2.12.0-1.el10 → 2.12.0-3.el10
libwbclient 4.23.5-105.el10 → 4.23.5-107.el10
lua-libs 5.4.6-7.el10 → 5.4.8-1.el10
ncurses-base 6.4-14.20240127.el10 → 6.4-15.20240127.el10
ncurses-libs 6.4-14.20240127.el10 → 6.4-15.20240127.el10
nfs-utils 1:2.8.3-4.el10 → 1:2.8.3-7.el10
openshift-clients 4.22.0-202603100924.p2.ge028dbf.assembly.stream.el9 → 4.22.0-202604110549.p2.g66dee73.assembly.stream.el9
openshift-kubelet 4.22.0-202603092136.p2.gac14da2.assembly.stream.el9 → 4.22.0-202604010134.p2.g9193b12.assembly.stream.el9
openssh 9.9p1-20.el10 → 9.9p1-26.el10
openssh-clients 9.9p1-20.el10 → 9.9p1-26.el10
openssh-server 9.9p1-20.el10 → 9.9p1-26.el10
openssl 1:3.5.5-1.el10 → 1:3.5.5-2.el10
openssl-fips-provider 1:3.5.5-1.el10 → 1:3.5.5-2.el10
openssl-libs 1:3.5.5-1.el10 → 1:3.5.5-2.el10
openvswitch3.5 3.5.0-6.el10s → 3.5.3-5.el10s
ose-aws-ecr-image-credential-provider 4.22.0-202603092136.p2.g33c8f09.assembly.stream.el9 → 4.22.0-202603272150.p2.ge73d6a3.assembly.stream.el9
ose-azure-acr-image-credential-provider 4.22.0-202602261640.p2.g8584b9a.assembly.stream.el9 → 4.22.0-202603191400.p2.g4c7a764.assembly.stream.el9
ose-gcp-gcr-image-credential-provider 4.22.0-202603041118.p2.gc87eef5.assembly.stream.el9 → 4.22.0-202604110549.p2.g4d9707e.assembly.stream.el9
ostree 2025.7-1.el10 → 2026.1-1.el10
ostree-grub2 2025.7-1.el10 → 2026.1-1.el10
ostree-libs 2025.7-1.el10 → 2026.1-1.el10
pam 1.6.1-9.el10 → 1.6.1-10.el10
pam-libs 1.6.1-9.el10 → 1.6.1-10.el10
podman 7:5.8.0-2.el10 → 7:5.8.2-1.el10
policycoreutils 3.10-1.el10 → 3.10-2.el10
policycoreutils-python-utils 3.10-1.el10 → 3.10-2.el10
python3 3.12.12-3.el10 → 3.12.13-2.el10
python3-cloud-what 1.30.12-1.el10 → 1.30.14-1.el10
python3-dnf 4.20.0-21.el10 → 4.20.0-23.el10
python3-hawkey 0.73.1-14.el10 → 0.73.1-15.el10
python3-libdnf 0.73.1-14.el10 → 0.73.1-15.el10
python3-libs 3.12.12-3.el10 → 3.12.13-2.el10
python3-policycoreutils 3.10-1.el10 → 3.10-2.el10
python3-subscription-manager-rhsm 1.30.12-1.el10 → 1.30.14-1.el10
qemu-guest-agent 18:10.1.0-13.el10 → 18:10.1.0-16.el10
rpm-ostree 2026.1-2.el10 → 2026.1-4.el10
rpm-ostree-libs 2026.1-2.el10 → 2026.1-4.el10
samba-client-libs 4.23.5-105.el10 → 4.23.5-107.el10
samba-common 4.23.5-105.el10 → 4.23.5-107.el10
samba-common-libs 4.23.5-105.el10 → 4.23.5-107.el10
selinux-policy 42.1.18-2.el10 → 42.1.19-1.el10
selinux-policy-targeted 42.1.18-2.el10 → 42.1.19-1.el10
sssd 2.12.0-1.el10 → 2.12.0-3.el10
sssd-ad 2.12.0-1.el10 → 2.12.0-3.el10
sssd-client 2.12.0-1.el10 → 2.12.0-3.el10
sssd-common 2.12.0-1.el10 → 2.12.0-3.el10
sssd-common-pac 2.12.0-1.el10 → 2.12.0-3.el10
sssd-ipa 2.12.0-1.el10 → 2.12.0-3.el10
sssd-krb5 2.12.0-1.el10 → 2.12.0-3.el10
sssd-krb5-common 2.12.0-1.el10 → 2.12.0-3.el10
sssd-ldap 2.12.0-1.el10 → 2.12.0-3.el10
sssd-nfs-idmap 2.12.0-1.el10 → 2.12.0-3.el10
sssd-proxy 2.12.0-1.el10 → 2.12.0-3.el10
subscription-manager 1.30.12-1.el10 → 1.30.14-1.el10
sudo 1.9.17-2.p2.el10 → 1.9.17-4.p2.el10
systemd 257-23.el10 → 257-24.el10
systemd-journal-remote 257-23.el10 → 257-24.el10
systemd-libs 257-23.el10 → 257-24.el10
systemd-pam 257-23.el10 → 257-24.el10
systemd-udev 257-23.el10 → 257-24.el10
toolbox 0.3-1.el10 → 0.3-3.el10
tzdata 2025c-1.el10 → 2026a-1.el10
vim-data 2:9.1.083-8.el10 → 2:9.1.083-10.el10
vim-minimal 2:9.1.083-8.el10 → 2:9.1.083-10.el10

Extensions

Full list (0 packages)

CentOS Stream CoreOS base layer: 10 upgraded from 10.0.20260310-0 to 10.0.20260423-0

GCP-440: Fix GCP boot image discovery from CoreOS base layer: stream metadata #7881

METAL-1729: Add dual CoreOS base layer: version support for RHCOS 9 and 10 #81

View changelog in Markdown or change previous release:

Source code for this page located on github