Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.12.0-0.okd-scos-2022-12-02-083740

Team Approvals:

No tests for this release

---

Loading changelog, this may take a while ...

Changes from 4.12.0-0.okd-scos-2022-10-25-053756

Created: 2022-12-02 15:56:29 +0000 UTC

Image Digest: sha256:3cdff7c4770488ca162b0099528ac6ab62c046d6c4a1d872ef30c0dd5bc9fcf6

Release 4.12.0-0.okd-scos-2022-12-02-083740 was created from registry.ci.openshift.org/origin/release-scos:4.12.0-0.okd-scos-2022-12-02-083740

Components

• Kubernetes 1.25.2
• CentOS Stream CoreOS upgraded from [37.20221005.10]() to 412.9.202211241749-0 (diff)

Removed images

• contour
• contour-operator
• external-dns
• ironic-hardware-inventory-recorder
• local-storage-static-provisioner

Rebuilt images without code change

• azure-cloud-controller-manager git 6ff1c8e5 sha256:14848c15f7807105a692244c69e6f2dadf41ccd05a10a322479f8c9b79ef66a9
• azure-cloud-node-manager git 6ff1c8e5 sha256:72129e2d5d052e35c2f754a591f3930f16c0d56242f937d0f66dc19a07b838e1
• centos-stream-coreos-9 sha256:ad863c1f987985e47887388acfe801d7f4dc3aaa768244e5d9e12a8989a8f13b
• cluster-update-keys git 2796e173 sha256:19f191903123806d0c17bb5b928269edb9770d81c4cf8746f92cbd953e505cbd
• csi-driver-shared-resource git 20cffc04 sha256:873469a0819995fb1bc349d22c09a2b423e47c13b71c447b3114a2a77a7a774e
• csi-driver-shared-resource-webhook git 20cffc04 sha256:20ff3f6602e22c2f42bbeb54cc000c0c2feb0e6510285f2a107639215bebb02a
• ironic-static-ip-manager git 0c7fbba9 sha256:bb827920307b202569663acac6a79515255d61536fe1e9b4648a3be44223a697
• olm-rukpak git 1b52bfeb sha256:e9d27d450c96178fa63c950806b095aa9d84bfd4f67f17e2d0a3c9608258305b

agent-installer-api-server

• OCPBUGS-2635: Patch the Scheduler manifest for schedulable masters (#4653) #4653
• MGMT-12361: Sync install-config structure with upstream (#4551) #4551
• Default to using converged flow for 4.12 hub versions (#4481) #4481
• MGMT-9984: Support iPXE in converged ZTP flow (#4439) #4439
• NO-ISSUE: annotate lso namespace instead of project (#4545) #4545
• MGMT-12318: fix conditions update on ASC (#4544) #4544
• Bump OCP versions: 4.10 (#4542) #4542
• MGMT-8578: Framework for day2 master CI ZTP jobs (#4437) #4437
• MGMT-11799: change all ‘go get’ commands (#4538) #4538
• Add some time to the cluster delete test to avoid flakes (#4539) #4539
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• Updating ose-agent-installer-csr-approver images to be consistent with ART (#535) #535
• Full changelog

agent-installer-node-agent

• Updating ose-agent-installer-node-agent images to be consistent with ART (#440) #440
• Full changelog

alibaba-disk-csi-driver-operator

• OCPBUGS-1904: Only deploy VolumeSnapshotClass when CRD exists #38
• Full changelog

aws-ebs-csi-driver-operator

• OCPBUGS-1904: Don’t deploy VolumeSnapshotClass in static controller #166
• STOR-1040: port to hypershift #159
• Full changelog

aws-machine-controllers

• OCPCLOUD-1131: Implement fetching instance types from API #53
• Full changelog

azure-disk-csi-driver-operator

• OCPBUGS-3425: Only deploy VolumeSnapshotClass if CRD exists #59
• Full changelog

baremetal-installer

• OCPBUGS-3249: update golang.org/x/crypto to address security vulnerabilities #6631
• OCPBUGS-4267: Azure Stack: use managed images for compute nodes #6639
• OCPBUGS-4308: Redact pull secret from agent-gather #6640
• OCPBUGS-4068: (Agent) Do not require host data in platform baremetal section in installconfig #6623
• OCPBUGS-4064: Restart create-cluster-and-infraenv.service if it fails #6622
• OCPBUGS-3657: Uplift terraform-provider-ironic to 0.3.0 #6592
• OCPBUGS-4063: OpenStack: Force JSON content-type in Swift #6621
• OCPBUGS-3055: add bootstrap configmap during the SNO reboot #6555
• OCPBUGS-3523: Pass FeatureSet to cluster config render #6590
• OCPBUGS-3406: Use project after creation #6575
• OCPBUGS-3307: gcp: fail during validation if service usage is not enabled #6565
• OCPBUGS-3515: (AGENT) only support amd64 archs #6580
• OCPBUGS-3520: Automatically retry install #6582
• OCPBUGS-3519: Always use first matching mirror in assisted-service #6581
• OCPBUGS-3459: Always add router CAs to kubeconfig, even if console is not available #6578
• OCPBUGS-3250: azure: Fix client certs authentication #6561
• OCPBUGS-3398: Fix cluster wide proxy #6587
• OCPBUGS-3366: Set PublicContainerRegistries for entries in mirror #6568
• OCPBUGS-3306: agent ased installation fix for dual stack vips #6564
• OCPBUGS-3095: Power VS Check for existing DNS permitted network and public gateway #6550
• OCPBUGS-3035: support multiple documents in the same extra manifest file #6549
• OCPBUGS-3343: [vsphere-zones] Fix user folders #6566
• OCPBUGS-3263: Static linking the terraform and providers binaries #6562
• OCPBUGS-2984: Azure: Fix DiskEncryptionSet regex validation #6538
• OCPBUGS-3028: Use result from List function after checking error #6543
• AGENT-348: Warn when information in install-config is ignored #6523
• OCPBUGS-2837: Reduce debug logs in agent wait-for commands #6520
• Fix unexpected behavior from merging #6470 and #6500 #6526
• AGENT-390: Include CPU Architecture in ISO filename #6485
• docs: feature sets #6506
• Agent-321: Cluster and Host validations rework #6500
• OCPBUGS-2327: Add validation for releaseImage and registry.conf #6423
• OCPBUGS-2086: Detect failure in wait-for on transition back to ready #6470
• OCPBUGS-2627: agent-config: Generate missing AdditionalNTPSources in InfraEnv #6495
• OCPBUGS-2338: Don’t use error messages as default values #6486
• OCPBUGS-1824: enhance agent systemd service dependency #6408
• OCPBUGS-1704: Service Usage API is required, not optional #6504
• Revert “create: add check for cluster operator stability” #6503
• OCPBUGS-2301: Search Network Project For resources #6499
• OCPBUGS-2436: Revert “Revert “[AWS] Add LB Type in the infrastructure cluster object via install-config yaml”” and fix OCPBUGS-2436 #6491
• OCPBUGS-2174: fix metadata tags not supported in certain regions #6475
• Add initial support for OKD/SCOS #6443
• Updating golang version to fix gofmt issues #6484
• Bug 2117537: validation rule for invalid rendezvousIP in AgentConfig #6474
• create: add check for cluster operator stability #6124
• Revert “[AWS] Add LB Type in the infrastructure cluster object via install-config yaml” #6490
• Add LB Type in the infrastructure cluster object via install-config yaml #6478
• Bug 2059491: [Alibaba] fix the format of Name #5668
• AGENT-284: Allow user to choose platform type #6438
• OCPBUGS-2262: Update gcp explain for DNS zones #6483
• OCPBUGS-1941: bump RHCOS 4.12 bootimage metadata #6452
• Bug 2072202: Check for api and api-int resolution during cluster install #5816
• OCPBUGS-2259: Fix soft-anti-affinity known issue #6479
• Removing jstuever from OWNERS #6480
• OCPBUGS-1881: vsphere/destroy: improve logs when folder is not empty #6456
• Adding “syd05” as a choice for zones in PowerVS #6468
• OCPBUGS-1856: IBMCloud: Allow traffic to kube-api-lb #6458
• update to release.openshift.io/feature-set to match OCP 4.12 #6476
• AGENT-347: generate OS_IMAGES dynamically #6441
• OCPBUGS-1900: Avoid SNO bootstrap jsonpath error #6463
• OCPBUGS-1698: multi-zone network slice validation #6422
• OCPBUGSM-47893: added validation rule for invalid mac address in AgentConfig #6473
• populate vSphere infrastructure spec #6457
• OCPBUGS-1896: Validate Credentials Mode After Install Config step #6453
• OCPBUGS-2029: Fix agent installation InstallConfig proxy processing #6461
• Add docs about IPv6 on the additional Networks #6435
• AGENT-375: generate FIPS annotation for ACI #6467
• Full changelog

baremetal-operator

• Updating ose-baremetal-operator images to be consistent with ART #243
• Full changelog

baremetal-runtimecfg

• OCPBUGS-2512: Improve IP address sort order for interface selection #199
• Full changelog

cli, cli-artifacts, deployer, tools

• remove support for empty files and stdout in oc registry login #1277
• Bump go to 1.19 in go.mod #1262
• Full changelog

cloud-credential-operator

• Bump to k8s 1.25 #505
• Make ccoctl use regional STS endpoint by default #491
• Full changelog

cloud-network-config-controller

• OCPBUGS-4230: Fix azure log message for assigning and releasing an IP #80
• OCPBUGS-3552: Add assigned egress ips into capacity #73
• Full changelog

cluster-authentication-operator

• OCPBUGS-4040: Restart authentication operator if console capability is enabled #593
• OCPBUGS-3510: Update cluster-authentication-operator not to go degraded without console #590
• Full changelog

cluster-autoscaler

• Updating atomic-openshift-cluster-autoscaler images to be consistent with ART #242
• Full changelog

cluster-baremetal-operator

• Updating ose-cluster-baremetal-operator images to be consistent with ART #300
• Full changelog

cluster-capi-operator

• Add PowerVS platform to webhooks #81
• Full changelog

cluster-config-operator

• OCPBUGS-3523: add –feature-set option to render options #272
• Full changelog

cluster-control-plane-machine-set-operator

• OCPCLOUD-1674: Update installation docs to account for generation/activation #123
• OCPBUGS-2854: Ensure generated CPMS includes any failure domain already present in control plane machines #125
• OCPBUGS-2741: Deduplicate failure domains when generating a ControlPlaneMachineSet #124
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-4121: Don’t remove PDB on SNO clusters #134
• Full changelog

cluster-etcd-operator

• OCPBUGS-4193: later bootstrap removal in delayed scaling #967
• OCPBUGS-2918: update prometheus alerts #958
• Full changelog

cluster-image-registry-operator

• OCPBUGS-3175: Bump gophercloud #812
• add myself to OWNERS #813
• IR-295: upgrade to Go 1.19 #805
• IR-298: Bump k8s to 1.25.2 #803
• Full changelog

cluster-ingress-operator

• OCPBUGS-2775: Changed “name” label to “shard_name” of route_metrics_controller_routes_per_shard metric #851
• OCPBUGS-2848: Support matchExpressions selectors with route metrics #850
• Bug 2117524: Update CRLs when they expire #828
• OCPBUGS-853: certificate-publisher: Don’t publish extraneous certificates #824
• Bug 1962502: Add alerts for unmanaged Routes and Ingresses without IngressClassName #823
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-3663: Revert “turn PodSecurity admission to enforce restricted globally” #1405
• OCPBUGS-2071: revert dev cert rotation #1401
• Bug 2094362: Duplicate prometheus rules for API SLOs after upgrade #1376
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-4303: bootstrap-kube-controller-manager: specify resources.requests #666
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-4292: bootstrap-kube-scheduler: specify resources.requests #448
• Full changelog

cluster-machine-approver

• OCPBUGS-2621: Update capi related CMA deployment ports #173
• Full changelog

cluster-monitoring-operator

• OCPBUGS-3276: Pin Down Dependencies on Release 4.12 #1819
• OCPBUGS-4029: test: increase timeout when checking remote write metrics #1820
• MON-2727: Adds telemeter alert TelemeterClientFailures #1803
• *: don’t expose Prometheus operator’s port #1806
• Full changelog

cluster-network-operator

• OCPBUGS-3956: HyperShift: Do not accept empty infrastructure name #1634
• OCPBUGS-4183: Disable UDP aggregation on s390x #1643
• OCPBUGS-3824: ipsec: Run ovs-monitor-ipsec in the foreground and change probes #1621
• Jira OCPBUGS-3851: IPsec: Fix broken counter++ expression #1636
• OCPBUGS-3944: Remove references to the hosts kubeconfig #1632
• OCPBUGS-3437: HyperShift: Render cncc with proxy settings of the management cluster #1613
• OCPBUGS-3889: SDN: /var/run mount cleanup #1628
• OCPBUGS-3184: update microshift ovnk manifests #1610
• OCPBUGS-2362: Prefer oldest nodes, harden new alerts and revert setting new OVN-K alerts to info #1579
• fixed typo in comment #1597
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-4215: e2e: performance profile: add logs and minor fixes (#516) #516
• E2E: Automation offline CPUs test (#514) #514
• Configure ktimers scheduler prio same as ksoftirqs (#511) #511
• Set RPS for all rx queues (#503) #503
• E2E fix: Make Nodeselector tests independent (#422) #422
• Full changelog

cluster-policy-controller

• OCPBUGS-3663: Revert “Revert “Revert “psalabelsyncer: synchronize the enforcement l… #90
• Full changelog

cluster-samples-operator

• OCPBUGS-4369: Update Cluster Sample Operator dependencies and libraries for OCP 4.12 #477
• Full changelog

cluster-storage-operator

• STOR-1039: Make changes into CSO for hypershift #318
• OCPBUGS-2880: Fix panic on empty featureGate.spec.customNoUpgrade #325
• Full changelog

cluster-version-operator

• OCPBUGS-3770: Allow CVO to update KUBERNETES_SERVICE_HOST with LB address #866
• OCPBUGS-3352: Do not fail precondition check for UnknownUpdate #861
• Full changelog

console

• OCPBUGS-3333: Promote ConsolePlugins API version to v1 in console repository #12248
• OCPBUGS-4035: Fix for initial showing of topology contents #12299
• OCPBUGS-4117: Re-enable serverless e2e tests #12308
• OCPBUGS-4116: Re-enable pipelines e2e tests #12307
• OCPBUGS-4004: migrate Events integration test to Cypress to mitigate … #12291
• OCPBUGS-3927: show 403 error when normal user check operands on All … #12284
• OCPBUGS-3786: add Release not accepted to Update status on Cluster Se… #12273
• OCPBUGS-3754: Monitoring: Add popover help text for silence form’s negative matchers #12271
• OCPBUGS-3696: improve display of RetrievedUpdate condition in Update status #12270
• OCPBUGS-2874: add capacity action for SS CSV list page [OCP 4.12 & ODF 4.11] #12233
• OCPBUGS-2974: Monitoring: Fix permission check for Prometheus & Alertmanager pollers #12225
• OCPBUGS-3265: check that user can patch console operator config in s… #12239
• Create-Knative-Workload | Knative Serverless #12165
• add tab extension to dev console #12109
• OCPBUGS-2651: Show focus border on pipeline run nodes #12157
• OCPBUGS-2909: Fix documentation link which leads to 404 #12181
• OCPBUGS-2478: Fix i18n issue in Remove component node from application modal #12180
• Bug 2110256: Storage -> PVC -> upload data, does not support source reference #12213
• OCPBUGS-1950: Devfile samples (in Developer Catalog) link doesn’t include the current selected namespace #12193
• CONSOLE-3164: Move main nav components #12123
• CONSOLE-3224: Expose errorMessage and errorCause for failed plugins #12151
• CONSOLE-3336: Make dynamic plugin dependencies optional #12078
• Bug 2115347: Monitoring: Add support for Alertmanager negative matchers #12139
• Full changelog

console-operator

• CONSOLE-3252: Create a ConsoleNotification when cluster is performing an upgrade #687
• OCPBUGS-2219: Empty string should be valid for i18n loadType #689
• CONSOLE-3337: Dynamic plugin proxy reference issue #691
• Full changelog

container-networking-plugins

• OCPBUGS-4223: Fix path substitution to enable setting sysctls on vlan interfaces #68
• Full changelog

coredns

• OCPBUGS-240: Remove bufsize hardcoding to 2048 on cache upstream refreshes. #78
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• Bug OCPBUGS-4083: Allow deleting LBs in ERROR status #151
• Bug OCPBUGS-3700: Protect from AllocateLoadBalancerNodePorts=false (#1988) #148
• Bug OCPBUGS-3081: Do not create HTTP monitors for UDP on old Octavia #146
• Merge https://github.com/kubernetes/cloud-provider-openstack:master into master #143
• Full changelog

csi-driver-manila-operator

• OCPBUGS-1904: Only deploy VolumeSnapshotClass when CRD exists #159
• Full changelog

csi-driver-shared-resource-operator

• OCPBUGS-3359: Revert “[build-407] Mount shared secret and configmap list config path into shared driver node” #62
• Updating ose-csi-driver-shared-resource-operator images to be consistent with ART #58
• Full changelog

csi-external-attacher

• UPSTREAM: 379: Fix gofmt for go 1.19 #47
• Full changelog

docker-registry

• IR-299: bump go to 1.19 and k8s to 1.25.2 #351
• Full changelog

driver-toolkit

• Adding kernel-rpm-macros to the Dockerfile. (#107) #107
• Full changelog

etcd

• UPSTREAM: <carry>: rebase script #159
• Full changelog

gcp-cluster-api-controllers

• Updating ose-gcp-cluster-api-controllers images to be consistent with ART #186
• Full changelog

haproxy-router

• Updating ose-haproxy-router-base images to be consistent with ART #424
• Full changelog

hyperkube, pod

• OCPBUGS-3878: UPSTREAM: <drop>: Bump openshift/api. #1425
• OCPBUGS-3875: UPSTREAM: <carry>: Add host assignment plugin for CRD-based routes. #1427
• OCPBUGS-3780: UPSTREAM: <carry>: Add validation plugin for CRD-based route parity. #1422
• OCPBUGS-3503: UPSTREAM: <drop>: Bump library-go. #1423
• Bug OCPBUGS-2927: Disable expansion in SC, if driver does not support it #1403
• OCPBUGS-3503: UPSTREAM: : Bump library-go. #1414
• OCPBUGS-3094: Tag AWS security groups at creation #1412
• OCPBUGS-3071: 4.12: revert: 1340: tag AWS security group at creation #1405
• OCPBUGS-3117: UPSTREAM: 113481: kubelet: fix pod log line corruption when using timestamps and long lines #1407
• OCPBUGS-2774: UPSTREAM: 112807 Fix Load balancer services with xTP local #1400
• Full changelog

hypershift

• SDN-3508: Add proxy env variables to CNO deployment #1845
• MCO-258: inplaceupgrader: handle multiple upgrade versions #1810
• PowerVS Refactor docs - bug fixes #1825
• Docs: add nodes for InPlace Upgrade NodePools #1805
• network: Use non default ovn-k V4InternalSubnet at tenant #1783
• Adds davidvossel as approver #1833
• NodePool API: rename spec.tunedConfig to spec.tuningConfig #1802
• reduce konnectivity-agent log verbosity #1828
• add HC available duration metric #1829
• aws: use gp3-csi storage class by default #1830
• Full changelog

ibm-cloud-controller-manager

• Updating ose-ibm-cloud-controller-manager images to be consistent with ART #42
• Full changelog

ibm-vpc-block-csi-driver

• STOR-1060: Update ibm-vpc-block-csi-driver to v5.0.0 #26
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-3464: Update deployment files for snapshot support #46
• Full changelog

ibmcloud-cluster-api-controllers

• Updating ose-ibmcloud-cluster-api-controllers images to be consistent with ART #43
• Full changelog

ibmcloud-machine-controllers

• OCPBUGS-3289: IBMCloud: Replace stuck machine #11
• Full changelog

insights-operator

• OCPBUGS-2915: Updated info link in insights recommendations (#683) #683
• Full changelog

installer, installer-artifacts

• OCPBUGS-3249: update golang.org/x/crypto to address security vulnerabilities #6631
• OCPBUGS-4267: Azure Stack: use managed images for compute nodes #6639
• OCPBUGS-4308: Redact pull secret from agent-gather #6640
• OCPBUGS-4068: (Agent) Do not require host data in platform baremetal section in installconfig #6623
• OCPBUGS-4064: Restart create-cluster-and-infraenv.service if it fails #6622
• OCPBUGS-3657: Uplift terraform-provider-ironic to 0.3.0 #6592
• OCPBUGS-4063: OpenStack: Force JSON content-type in Swift #6621
• OCPBUGS-3055: add bootstrap configmap during the SNO reboot #6555
• OCPBUGS-3523: Pass FeatureSet to cluster config render #6590
• OCPBUGS-3406: Use project after creation #6575
• OCPBUGS-3307: gcp: fail during validation if service usage is not enabled #6565
• OCPBUGS-3515: (AGENT) only support amd64 archs #6580
• OCPBUGS-3520: Automatically retry install #6582
• OCPBUGS-3519: Always use first matching mirror in assisted-service #6581
• OCPBUGS-3459: Always add router CAs to kubeconfig, even if console is not available #6578
• OCPBUGS-3250: azure: Fix client certs authentication #6561
• OCPBUGS-3398: Fix cluster wide proxy #6587
• OCPBUGS-3366: Set PublicContainerRegistries for entries in mirror #6568
• OCPBUGS-3306: agent ased installation fix for dual stack vips #6564
• OCPBUGS-3095: Power VS Check for existing DNS permitted network and public gateway #6550
• OCPBUGS-3035: support multiple documents in the same extra manifest file #6549
• OCPBUGS-3343: [vsphere-zones] Fix user folders #6566
• OCPBUGS-3263: Static linking the terraform and providers binaries #6562
• OCPBUGS-2984: Azure: Fix DiskEncryptionSet regex validation #6538
• OCPBUGS-3028: Use result from List function after checking error #6543
• AGENT-348: Warn when information in install-config is ignored #6523
• OCPBUGS-2837: Reduce debug logs in agent wait-for commands #6520
• Fix unexpected behavior from merging #6470 and #6500 #6526
• AGENT-390: Include CPU Architecture in ISO filename #6485
• docs: feature sets #6506
• Agent-321: Cluster and Host validations rework #6500
• OCPBUGS-2327: Add validation for releaseImage and registry.conf #6423
• OCPBUGS-2086: Detect failure in wait-for on transition back to ready #6470
• OCPBUGS-2627: agent-config: Generate missing AdditionalNTPSources in InfraEnv #6495
• OCPBUGS-2338: Don’t use error messages as default values #6486
• Full changelog

ironic-machine-os-downloader

• Updating ironic-rhcos-downloader images to be consistent with ART #83
• Full changelog

k8s-prometheus-adapter

• Updating ose-prometheus-adapter images to be consistent with ART #65
• Full changelog

keepalived-ipfailover

• Updating openshift-enterprise-egress-router images to be consistent with ART #115
• Updating ose-egress-http-proxy images to be consistent with ART #114
• Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #117
• Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #116
• Full changelog

kube-state-metrics

• OCPBUGS-4118: cherry-pick, do not expose ingress path metric when service is nil #84
• OCPBUGS-4112: cherry-pick, autoscaling/v2beta2 HorizontalPodAutoscaler is deprecated in v1.23+ #83
• Full changelog

kuryr-cni, kuryr-controller

• Merge https://opendev.org/openstack/kuryr-kubernetes:master into master #707
• Full changelog

machine-api-operator

• Show warnings if provider specs have invalid GroupVersionKind #1018
• Update envtest #1071
• Full changelog

machine-config-operator

• OCPBUGS-4091: NM resolve prepender: remove extra quotes in OKD flow #3433
• OCPBUGS-3955: daemon: gate done state on uncordon completion #3425
• OCPBUGS-3750: daemon: Stop setting I/O scheduler to bfq #3417
• OCPBUGS-3874: Don’t make https call to http endpoint #3420
• OCPBUGS-3504: On-prem: Ensure resolv-prepender respects NM dispatcher timeout #3410
• OCPBUGS-3650: Revert “Substitute skopeo inspect for imageInspect/podman” #3414
• OCPBUGS-3001: Substitute skopeo inspect for imageInspect/podman, drop podman inspect fallback #3396
• Force string format when logging rpm-ostree status #3393
• controller: Don’t allow creating the force file via MachineConfig #3391
• Bug 2034883: Sync controllerconfig anyway if daemon sync fails #3388
• Fix machine-config-operator logspam when extensions container is not present #3387
• Full changelog

machine-image-customization-controller

• Updating ose-image-customization-controller images to be consistent with ART #65
• OCPBUGS-3557: use host IPC for the agent container #69
• Full changelog

multus-networkpolicy

• OCPBUGS-977: Sync k8snetworkplumbingwg/multi-networkpolicy-iptables 2022_10 (#20) #20
• Full changelog

must-gather

• OCPBUGS-4250: [release-4.12] backport PodNetworkConnectivityCheck gather script #334 #334
• Updating ose-must-gather images to be consistent with ART #330
• Full changelog

oc-mirror

• docs: adds grammar fixes to metadata-management.md (#521) #521
• WRKLDS-547 (#519) #519
• Full changelog

openshift-apiserver

• OCPBUGS-4339: fix printer panic #335
• IR-259: changing image stream importMode increments its generation #329
• IR-258: ImageStreamImport manifest list support #290
• bump to kube 1.25.2 #320
• Full changelog

openshift-controller-manager

• Updating ose-openshift-controller-manager images to be consistent with ART #241
• Full changelog

openshift-state-metrics

• Updating openshift-state-metrics images to be consistent with ART #91
• Full changelog

openstack-cinder-csi-driver-operator

• Bug OCPBUGS-3774: Add SecretHashAnnotation to node service #98
• OCPBUGS-1904: Only deploy VolumeSnapshotClass when CRD exists #94
• Full changelog

operator-lifecycle-manager, operator-registry

• Updating operator-lifecycle-manager images to be consistent with ART #398
• OCPBUGS-3837: fix service account token secret reference (#2862) #412
• OCPBUGS-3795: Order an operator CR’s status.Component.Refs array (#2880) #411
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-4356: Bump OVN to 22.09.0-22 #1407
• OCPBUGS-2896: Refactor retry into its own pkg #1376
• Updating ovn-kubernetes-base images to be consistent with ART #1287
• OCPBUGS-3798: [4.12] Dockerfile: bump OVS to 2.17.0-62.el8fdp #1387
• OCPBUGS-3977: Handle expired entry while handling dns update #1392
• OCPBUGS-3871: Ignore addresses in masquerade subnet when retrieving gateway IPs #1386
• OCPBUGS-3348: Validate node subnet annotations against cluster networks #1351
• OCPBUGS-3658: [release-4.12] Support proper parsing of IPs with leading zeros #1379
• OCPBUGS-3773: Adjust ovs bundle timeout #1382
• OCPBUGS-3468: Disable packet MTU check when OVS HW Offload is enabled #1368
• OCPBUGS-298: Adapt ovnkube-trace to work with external controlplane #1363
• OCPBUGS-3075: [release-4.12] Fix netpol races #1347
• OCPBUGS-3346: vendor: bump libovsdb to 8f21d188c3a50d0ce378bd66ec68215967aaad77 #1348
• OCPBUGS-3369: Fix mac address not set in SRIOV container interface #1361
• OCPBUGS-3221: Allow empty nexthop in L3GatewayConfig node annotation #1356
• OCPBUGS-3003: Ignore non-ready endpoints when processing endpointslices #1344
• OCPBUGS-2826: ovnkube-trace: Fix ofproto/trace for IPv6 #1338
• OCPBUGS-1520: Fixes SNAT-ing Logic for EgressIPs #1331
• OCPBUGS-1520: Prioritize adding events to handlers for shared resources #1333
• Full changelog

powervs-block-csi-driver

• Updating ose-powervs-block-csi-driver images to be consistent with ART #15
• io/util removed as deprected #18
• Fix formatting issues #17
• Full changelog

prometheus

• OCPBUGS-4048: fix certificate reloads after rotation #149
• Revert unwanted downstream patch #144
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• Updating prometheus-operator images to be consistent with ART #204
• Full changelog

route-controller-manager

• OCPBUGS-4199: do not depend on the API defaulting when creating Routes #12
• Bug 1962502: Create custom metrics to list unmanaged Routes and Ingresses without IngressClassName #8
• Full changelog

service-ca-operator

• OCPBUGS-3279: Return nil from start funcs after context is cancelled. #203
• Full changelog

tests

• OCPBUGS-3649: : Fix flake reporting for certain tests. #27557
• OCPBUGS-3649: Revert “Merge pull request #27533 from dgoodwin/merge-alert-backstops” #27550
• Synchronize release-4.12 with master #27541
• OCPBUGS-3428: Skip broken [sig-devex][Feature:ImageEcosystem] tests #27537
• k8s 1.25.0 #27503
• Revert 1.25 again #27499
• Extend SCC tests with their corresponding service account variants #27491
• MicroShift: label e2es with more apigroup labels (squashing more PRs into a single one + fixes) #27498
• Skip resource growth checks in upgrade-rollback jobs #27450
• k8s 1.25.0 #27490
• Remove must-gather pod from lack priorityclass exception list #27469
• Ocpbugs 2275 remove templateservicebroker test #27484
• Support external topology for hypershift #27437
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-3281: set TLS cipher suites in Kube RBAC sidecars #118
• OCPBUGS-1904: Only deploy VolumeSnapshotClass when CRD exists #116
• Full changelog

---

CoreOS Package Diff

CentOS Stream CoreOS upgraded from [37.20221005.10]() to 412.9.202211241749-0

Changed:

• NetworkManager 1:1.40.0-1.fc37 → 1:1.41.5-1.el9

• NetworkManager-cloud-setup 1:1.40.0-1.fc37 → 1:1.41.5-1.el9

• NetworkManager-libnm 1:1.40.0-1.fc37 → 1:1.41.5-1.el9

• NetworkManager-ovs 1:1.40.0-1.fc37 → 1:1.41.5-1.el9

• NetworkManager-team 1:1.40.0-1.fc37 → 1:1.41.5-1.el9

• NetworkManager-tui 1:1.40.0-1.fc37 → 1:1.41.5-1.el9

• WALinuxAgent-udev 2.7.3.0-1.fc37 → 2.7.0.6-6.el9

• aardvark-dns 1.1.0-1.fc37 → 2:1.3.0-1.el9

• acl 2.3.1-4.fc37 → 2.3.1-3.el9

• adcli 0.9.1-11.fc37 → 0.9.2-1.el9

• afterburn 5.3.0-3.fc37 → 5.3.0-1.el9

• afterburn-dracut 5.3.0-3.fc37 → 5.3.0-1.el9

• alternatives 1.19-3.fc37 → 1.20-2.el9

• attr 2.5.1-5.fc37 → 2.5.1-3.el9

• audit-libs 3.0.9-1.fc37 → 3.0.7-103.el9

• authselect 1.4.0-3.fc37 → 1.2.5-1.el9

• authselect-libs 1.4.0-3.fc37 → 1.2.5-1.el9

• avahi-libs 0.8-17.fc37 → 0.8-12.el9

• basesystem 11-14.fc37 → 11-13.el9

• bash 5.1.16-4.fc37 → 5.1.8-5.el9

• bash-completion 1:2.11-8.fc37 → 1:2.11-4.el9

• bind-libs 32:9.18.7-1.fc37 → 32:9.16.23-4.el9

• bind-license 32:9.18.7-1.fc37 → 32:9.16.23-4.el9

• bind-utils 32:9.18.7-1.fc37 → 32:9.16.23-4.el9

• bootupd 0.2.7-2.fc37 → 0.2.7-2.el9

• bsdtar 3.6.1-2.fc37 → 3.5.3-3.el9

• bubblewrap 0.5.0-3.fc37 → 0.4.1-6.el9

• bzip2 1.0.8-12.fc37 → 1.0.8-8.el9

• bzip2-libs 1.0.8-12.fc37 → 1.0.8-8.el9

• c-ares 1.17.2-3.fc37 → 1.17.1-5.el9

• ca-certificates 2022.2.54-5.fc37 → 2022.2.54-90.2.el9

• chrony 4.3-1.fc37 → 4.3-1.el9

• cifs-utils 6.15-2.fc37 → 6.14-1.el9

• clevis 18-12.fc37 → 18-106.el9

• clevis-dracut 18-12.fc37 → 18-106.el9

• clevis-luks 18-12.fc37 → 18-106.el9

• clevis-systemd 18-12.fc37 → 18-106.el9

• cloud-utils-growpart 0.31-11.fc37 → 0.33-1.el9

• conmon 2:2.1.4-2.fc37 → 2:2.1.5-1.el9

• console-login-helper-messages 0.21.3-3.fc37 → 0.21.3-1.el9

• console-login-helper-messages-issuegen 0.21.3-3.fc37 → 0.21.3-1.el9

• console-login-helper-messages-profile 0.21.3-3.fc37 → 0.21.3-1.el9

• container-selinux 2:2.190.0-1.fc37 → 3:2.191.0-1.el9

• containernetworking-plugins 1.1.1-8.fc37 → 1:1.1.1-3.el9

• containers-common 4:1-66.fc37 → 2:1-46.el9

• coreos-installer 0.16.0-1.fc37 → 0.16.1-1.el9

• coreos-installer-bootinfra 0.16.0-1.fc37 → 0.16.1-1.el9

• coreutils 9.1-6.fc37 → 8.32-33.el9

• coreutils-common 9.1-6.fc37 → 8.32-33.el9

• cpio 2.13-13.fc37 → 2.13-16.el9

• cracklib 2.9.7-30.fc37 → 2.9.6-27.el9

• cracklib-dicts 2.9.7-30.fc37 → 2.9.6-27.el9

• cri-o 1.25.1-None.fc36 → 1.25.1-None.el9

• cri-tools 1.24.2-1.20220811122251151384.master.35.g77d02a03.fc36 → 1.24.2-1.20220811122251151384.master.35.g77d02a03.el9

• criu 3.17.1-3.fc37 → 3.17-4.el9

• criu-libs 3.17.1-3.fc37 → 3.17-4.el9

• crun 1.6-2.fc37 → 1.5-1.el9

• crypto-policies 20220815-1.gite4ed860.fc37 → 20221003-1.git04dee29.el9

• cryptsetup 2.5.0-1.fc37 → 2.4.3-5.el9

• cryptsetup-libs 2.5.0-1.fc37 → 2.4.3-5.el9

• curl 7.85.0-1.fc37 → 7.76.1-21.el9

• cyrus-sasl-gssapi 2.1.28-8.fc37 → 2.1.27-21.el9

• cyrus-sasl-lib 2.1.28-8.fc37 → 2.1.27-21.el9

• dbus 1:1.14.2-1.fc37 → 1:1.12.20-7.el9

• dbus-broker 32-1.fc37 → 28-7.el9

• dbus-common 1:1.14.2-1.fc37 → 1:1.12.20-7.el9

• dbus-libs 1:1.14.2-1.fc37 → 1:1.12.20-7.el9

• device-mapper 1.02.175-9.fc37 → 9:1.02.185-3.el9

• device-mapper-event 1.02.175-9.fc37 → 9:1.02.185-3.el9

• device-mapper-event-libs 1.02.175-9.fc37 → 9:1.02.185-3.el9

• device-mapper-libs 1.02.175-9.fc37 → 9:1.02.185-3.el9

• device-mapper-multipath 0.9.0-3.fc37 → 0.8.7-14.el9

• device-mapper-multipath-libs 0.9.0-3.fc37 → 0.8.7-14.el9

• device-mapper-persistent-data 0.9.0-8.fc37 → 0.9.0-13.el9

• diffutils 3.8-3.fc37 → 3.7-12.el9

• dnsmasq 2.87-1.fc37 → 2.85-5.el9

• dosfstools 4.2-4.fc37 → 4.2-3.el9

• dracut 057-3.fc37 → 057-13.git20220816.el9

• dracut-network 057-3.fc37 → 057-13.git20220816.el9

• dracut-squash 057-3.fc37 → 057-13.git20220816.el9

• e2fsprogs 1.46.5-3.fc37 → 1.46.5-3.el9

• e2fsprogs-libs 1.46.5-3.fc37 → 1.46.5-3.el9

• efi-filesystem 5-6.fc37 → 4-9.el9

• efibootmgr 18-2.fc37 → 16-12.el9

• efivar-libs 38-5.fc37 → 38-2.el9

• elfutils-default-yama-scope 0.187-8.fc37 → 0.188-3.el9

• elfutils-libelf 0.187-8.fc37 → 0.188-3.el9

• elfutils-libs 0.187-8.fc37 → 0.188-3.el9

• ethtool 2:5.19-1.fc37 → 2:5.10-4.el9

• expat 2.4.8-2.fc37 → 2.5.0-1.el9

• file 5.42-4.fc37 → 5.39-10.el9

• file-libs 5.42-4.fc37 → 5.39-10.el9

• filesystem 3.18-2.fc37 → 3.16-2.el9

• findutils 1:4.9.0-2.fc37 → 1:4.8.0-5.el9

• fstrm 0.6.1-5.fc37 → 0.6.1-3.el9

• fuse 2.9.9-15.fc37 → 2.9.9-15.el9

• fuse-common 3.10.5-5.fc37 → 3.10.2-5.el9

• fuse-libs 2.9.9-15.fc37 → 2.9.9-15.el9

• fuse-overlayfs 1.9-3.fc37 → 1.9-1.el9

• fuse3 3.10.5-5.fc37 → 3.10.2-5.el9

• fuse3-libs 3.10.5-5.fc37 → 3.10.2-5.el9

• fwupd 1.8.5-1.fc37 → 1.7.10-1.el9

• gawk 5.1.1-4.fc37 → 5.1.0-6.el9

• gdbm-libs 1:1.23-2.fc37 → 1:1.19-4.el9

• gdisk 1.0.9-4.fc37 → 1.0.7-5.el9

• gettext-libs 0.21-19.0.20220203.fc37 → 0.21-7.el9

• git-core 2.37.3-1.fc37 → 2.31.1-2.el9.2

• glib2 2.74.0-3.fc37 → 2.68.4-5.el9

• glibc 2.36-4.fc37 → 2.34-49.el9

• glibc-common 2.36-4.fc37 → 2.34-49.el9

• glibc-minimal-langpack 2.36-4.fc37 → 2.34-49.el9

• gmp 1:6.2.1-3.fc37 → 1:6.2.0-10.el9

• gnupg2 2.3.7-3.fc37 → 2.3.3-2.el9

• gnutls 3.7.7-1.fc37 → 3.7.6-12.el9

• gpgme 1.17.0-4.fc37 → 1.15.1-6.el9

• grep 3.7-4.fc37 → 3.6-5.el9

• grub2-common 1:2.06-58.fc37 → 1:2.06-46.el9

• grub2-efi-x64 1:2.06-58.fc37 → 1:2.06-46.el9

• grub2-pc 1:2.06-58.fc37 → 1:2.06-46.el9

• grub2-pc-modules 1:2.06-58.fc37 → 1:2.06-46.el9

• grub2-tools 1:2.06-58.fc37 → 1:2.06-46.el9

• grub2-tools-minimal 1:2.06-58.fc37 → 1:2.06-46.el9

• gzip 1.12-2.fc37 → 1.12-1.el9

• hostname 3.23-7.fc37 → 3.23-6.el9

• hwdata 0.363-1.fc37 → 0.348-9.5.el9

• ignition 2.14.0-4.fc37 → 2.14.0-1.el9

• inih 56-2.fc37 → 49-6.el9

• iproute 5.18.0-2.fc37 → 5.18.0-1.el9

• iproute-tc 5.18.0-2.fc37 → 5.18.0-1.el9

• iptables-libs 1.8.8-3.fc37 → 1.8.8-4.el9

• iptables-nft 1.8.8-3.fc37 → 1.8.8-4.el9

• iputils 20211215-3.fc37 → 20210202-7.el9

• irqbalance 2:1.9.0-1.fc37 → 2:1.9.0-3.el9

• iscsi-initiator-utils 6.2.1.4-6.git2a8f9d8.fc37 → 6.2.1.4-3.git2a8f9d8.el9

• iscsi-initiator-utils-iscsiuio 6.2.1.4-6.git2a8f9d8.fc37 → 6.2.1.4-3.git2a8f9d8.el9

• isns-utils-libs 0.101-5.fc37 → 0.101-4.el9

• jansson 2.13.1-5.fc37 → 2.14-1.el9

• jose 11-6.fc37 → 11-3.el9

• jq 1.6-14.fc37 → 1.6-14.el9

• json-c 0.16-2.fc37 → 0.14-11.el9

• json-glib 1.6.6-3.fc37 → 1.6.6-1.el9

• kbd 2.5.1-3.fc37 → 2.4.0-8.el9

• kbd-misc 2.5.1-3.fc37 → 2.4.0-8.el9

• kernel 5.18.0-60.fc37 → 5.14.0-200.el9

• kernel-core 5.18.0-60.fc37 → 5.14.0-200.el9

• kernel-modules 5.18.0-60.fc37 → 5.14.0-200.el9

• kexec-tools 2.0.25-1.fc37 → 2.0.25-5.el9

• keyutils 1.6.1-5.fc37 → 1.6.3-1.el9

• keyutils-libs 1.6.1-5.fc37 → 1.6.3-1.el9

• kmod 30-2.fc37 → 28-7.el9

• kmod-libs 30-2.fc37 → 28-7.el9

• kpartx 0.9.0-3.fc37 → 0.8.7-14.el9

• krb5-libs 1.19.2-11.fc37.1 → 1.19.1-22.el9

• less 590-5.fc37 → 590-1.el9

• libacl 2.3.1-4.fc37 → 2.3.1-3.el9

• libaio 0.3.111-14.fc37 → 0.3.111-13.el9

• libarchive 3.6.1-2.fc37 → 3.5.3-3.el9

• libassuan 2.5.5-5.fc37 → 2.5.5-3.el9

• libattr 2.5.1-5.fc37 → 2.5.1-3.el9

• libbasicobjects 0.1.1-52.fc37 → 0.1.1-53.el9

• libblkid 2.38.1-1.fc37 → 2.37.4-9.el9

• libbpf 2:0.8.0-2.fc37 → 2:0.6.0-1.el9

• libcap 2.48-5.fc37 → 2.48-8.el9

• libcap-ng 0.8.3-3.fc37 → 0.8.2-7.el9

• libcbor 0.7.0-7.fc37 → 0.7.0-5.el9

• libcollection 0.7.0-52.fc37 → 0.7.0-53.el9

• libcom_err 1.46.5-3.fc37 → 1.46.5-3.el9

• libdaemon 0.14-24.fc37 → 0.14-23.el9

• libdb 5.3.28-53.fc37 → 5.3.28-53.el9

• libdhash 0.5.0-52.fc37 → 0.5.0-53.el9

• libdrm 2.4.112-1.fc37 → 2.4.111-1.el9

• libeconf 0.4.0-4.fc37 → 0.4.1-2.el9

• libedit 3.1-42.20210910cvs.fc37 → 3.1-37.20210216cvs.el9

• libevent 2.1.12-7.fc37 → 2.1.12-6.el9

• libfdisk 2.38.1-1.fc37 → 2.37.4-9.el9

• libffi 3.4.2-9.fc37 → 3.4.2-7.el9

• libfido2 1.11.0-3.fc37 → 1.6.0-7.el9

• libgcab1 1.5-1.fc37 → 1.4-6.el9

• libgcc 12.2.1-2.fc37 → 11.3.1-2.1.el9

• libgcrypt 1.10.1-4.fc37 → 1.10.0-8.el9

• libgomp 12.2.1-2.fc37 → 11.3.1-2.1.el9

• libgpg-error 1.45-2.fc37 → 1.42-5.el9

• libgudev 237-3.fc37 → 237-1.el9

• libgusb 0.4.1-1.fc37 → 0.3.6-3.el9

• libibverbs 41.0-1.fc37 → 41.0-3.el9

• libicu 71.1-2.fc37 → 67.1-9.el9

• libidn2 2.3.3-2.fc37 → 2.3.0-7.el9

• libini_config 1.3.1-52.fc37 → 1.3.1-53.el9

• libipa_hbac 2.7.4-1.fc37 → 2.8.1-1.el9

• libjcat 0.1.12-1.fc37 → 0.1.6-3.el9

• libjose 11-6.fc37 → 11-3.el9

• libkcapi 1.4.0-2.fc37 → 1.3.1-3.el9

• libkcapi-hmaccalc 1.4.0-2.fc37 → 1.3.1-3.el9

• libksba 1.6.1-1.fc37 → 1.5.1-5.el9

• libldb 2.6.1-1.fc37 → 2.6.1-1.el9

• libluksmeta 9-14.fc37 → 9-12.el9

• libmaxminddb 1.7.1-1.fc37 → 1.5.2-3.el9

• libmnl 1.0.5-1.fc37 → 1.0.4-15.el9

• libmodulemd 2.14.0-4.fc37 → 2.13.0-2.el9

• libmount 2.38.1-1.fc37 → 2.37.4-9.el9

• libmspack 0.10.1-0.8.alpha.fc37 → 0.10.1-0.7.alpha.el9

• libndp 1.8-4.fc37 → 1.8-4.el9

• libnet 1.2-6.fc37 → 1.2-6.el9

• libnetfilter_conntrack 1.0.8-5.fc37 → 1.0.8-4.el9

• libnfnetlink 1.0.1-22.fc37 → 1.0.1-21.el9

• libnfsidmap 1:2.6.2-1.rc2.fc37 → 1:2.5.4-16.el9

• libnftnl 1.2.2-2.fc37 → 1.2.2-1.el9

• libnghttp2 1.49.0-1.fc37 → 1.43.0-5.el9

• libnl3 3.7.0-2.fc37 → 3.7.0-1.el9

• libnl3-cli 3.7.0-2.fc37 → 3.7.0-1.el9

• libnvme 1.1-1.fc37 → 1.2-1.el9

• libpath_utils 0.2.1-52.fc37 → 0.2.1-53.el9

• libpcap 14:1.10.1-4.fc37 → 14:1.10.0-4.el9

• libpciaccess 0.16-7.fc37 → 0.16-6.el9

• libpkgconf 1.8.0-3.fc37 → 1.7.3-10.el9

• libpsl 0.21.1-6.fc37 → 0.21.1-5.el9

• libpwquality 1.4.4-11.fc37 → 1.4.4-8.el9

• libref_array 0.1.5-52.fc37 → 0.1.5-53.el9

• librepo 1.14.4-1.fc37 → 1.14.5-1.el9

• libreport-filesystem 2.17.4-1.fc37 → 2.15.2-6.el9

• libseccomp 2.5.3-3.fc37 → 2.5.2-2.el9

• libselinux 3.4-5.fc37 → 3.4-3.el9

• libselinux-utils 3.4-5.fc37 → 3.4-3.el9

• libsemanage 3.4-5.fc37 → 3.4-2.el9

• libsepol 3.4-3.fc37 → 3.4-3.el9

• libsigsegv 2.14-3.fc37 → 2.13-4.el9

• libslirp 4.7.0-2.fc37 → 4.4.0-4.el9

• libsmartcols 2.38.1-1.fc37 → 2.37.4-9.el9

• libsmbclient 2:4.17.0-1.fc37 → 4.17.2-103.el9

• libsmbios 2.4.3-7.fc37 → 2.4.3-4.el9

• libsolv 0.7.22-3.fc37 → 0.7.22-1.el9

• libss 1.46.5-3.fc37 → 1.46.5-3.el9

• libsss_certmap 2.7.4-1.fc37 → 2.8.1-1.el9

• libsss_idmap 2.7.4-1.fc37 → 2.8.1-1.el9

• libsss_nss_idmap 2.7.4-1.fc37 → 2.8.1-1.el9

• libsss_sudo 2.7.4-1.fc37 → 2.8.1-1.el9

• libstdc++ 12.2.1-2.fc37 → 11.3.1-2.1.el9

• libtalloc 2.3.4-3.fc37 → 2.3.4-1.el9

• libtasn1 4.18.0-3.fc37 → 4.16.0-7.el9

• libtdb 1.4.7-3.fc37 → 1.4.7-1.el9

• libteam 1.31-6.fc37 → 1.31-14.el9

• libtevent 0.13.0-1.fc37 → 0.13.0-1.el9

• libtirpc 1.3.3-0.fc37 → 1.3.3-1.el9

• libtool-ltdl 2.4.7-2.fc37 → 2.4.6-45.el9

• libunistring 1.0-2.fc37 → 0.9.10-15.el9

• libuser 0.63-13.fc37 → 0.63-11.el9

• libutempter 1.2.1-7.fc37 → 1.2.1-6.el9

• libuuid 2.38.1-1.fc37 → 2.37.4-9.el9

• libuv 1:1.44.2-2.fc37 → 1:1.42.0-1.el9

• libverto 0.3.2-4.fc37 → 0.3.2-3.el9

• libwbclient 2:4.17.0-1.fc37 → 4.17.2-103.el9

• libxcrypt 4.4.28-3.fc37 → 4.4.18-3.el9

• libxcrypt-compat 4.4.28-3.fc37 → 4.4.18-3.el9

• libxml2 2.9.14-3.fc37 → 2.9.13-3.el9

• libxmlb 0.3.10-1.fc37 → 0.3.10-1.el9

• libxslt 1.1.37-1.fc37 → 1.1.34-9.el9

• libyaml 0.2.5-8.fc37 → 0.2.5-7.el9

• libzstd 1.5.2-3.fc37 → 1.5.1-2.el9

• linux-firmware 20220913-140.fc37 → 20221012-128.el9

• linux-firmware-whence 20220913-140.fc37 → 20221012-128.el9

• lmdb-libs 0.9.29-4.fc37 → 0.9.29-3.el9

• logrotate 3.20.1-3.fc37 → 3.18.0-7.el9

• lsof 4.94.0-4.fc37 → 4.94.0-3.el9

• lua-libs 5.4.4-4.fc37 → 5.4.2-4.el9

• luksmeta 9-14.fc37 → 9-12.el9

• lvm2 2.03.11-9.fc37 → 9:2.03.16-3.el9

• lvm2-libs 2.03.11-9.fc37 → 9:2.03.16-3.el9

• lz4-libs 1.9.3-5.fc37 → 1.9.3-5.el9

• lzo 2.10-7.fc37 → 2.10-7.el9

• mdadm 4.2-2.fc37 → 4.2-7.el9

• microcode_ctl 2:2.1-53.fc37 → 4:20220809-1.el9

• mokutil 2:0.6.0-5.fc37 → 2:0.4.0-9.el9

• mpfr 4.1.0-10.fc37 → 4.1.0-7.el9

• nano 6.4-1.fc37 → 5.6.1-5.el9

• ncurses 6.3-3.20220501.fc37 → 6.2-8.20210508.el9

• ncurses-base 6.3-3.20220501.fc37 → 6.2-8.20210508.el9

• ncurses-libs 6.3-3.20220501.fc37 → 6.2-8.20210508.el9

• net-tools 2.0-0.63.20160912git.fc37 → 2.0-0.62.20160912git.el9

• netavark 1.1.0-1.fc37 → 2:1.3.0-1.el9

• nettle 3.8-2.fc37 → 3.8-3.el9

• newt 0.52.21-14.fc37 → 0.52.21-11.el9

• nftables 1:1.0.4-3.fc37 → 1:1.0.4-2.el9

• npth 1.6-9.fc37 → 1.6-8.el9

• nss-altfiles 2.18.1-21.fc37 → 2.18.1-20.el9

• numactl-libs 2.0.14-6.fc37 → 2.0.14-7.el9

• nvme-cli 2.1.2-1.fc37 → 2.2.1-2.el9

• oniguruma 6.9.8-2.D20220919gitb041f6d.fc37 → 6.9.6-1.el9.5

• open-vm-tools 12.1.0-1.fc37 → 12.1.0-1.el9

• openldap 2.6.3-1.fc37 → 2.6.2-3.el9

• openshift-hyperkube 1.25.0-1.0.3ef6ef3 → 1.25.2-1.0.5533733

• openssh 8.8p1-7.fc37 → 8.7p1-24.el9

• openssh-clients 8.8p1-7.fc37 → 8.7p1-24.el9

• openssh-server 8.8p1-7.fc37 → 8.7p1-24.el9

• openssl 1:3.0.5-2.fc37 → 1:3.0.1-43.el9

• openssl-libs 1:3.0.5-2.fc37 → 1:3.0.1-43.el9

• os-prober 1.81-1.fc37 → 1.77-9.el9

• ostree 2022.5-2.fc37 → 2022.6-1.el9

• ostree-libs 2022.5-2.fc37 → 2022.6-1.el9

• p11-kit 0.24.1-3.fc37 → 0.24.1-2.el9

• p11-kit-trust 0.24.1-3.fc37 → 0.24.1-2.el9

• pam 1.5.2-14.fc37 → 1.5.1-13.el9

• passwd 0.80-13.fc37 → 0.80-12.el9

• pciutils 3.8.0-2.fc37 → 3.7.0-5.el9

• pciutils-libs 3.8.0-2.fc37 → 3.7.0-5.el9

• pcre 8.45-1.fc37.2 → 8.44-3.el9.3

• pcre2 10.40-1.fc37.1 → 10.40-2.el9

• pcre2-syntax 10.40-1.fc37.1 → 10.40-2.el9

• pigz 2.7-2.fc37 → 2.5-4.el9

• pkgconf 1.8.0-3.fc37 → 1.7.3-10.el9

• pkgconf-m4 1.8.0-3.fc37 → 1.7.3-10.el9

• pkgconf-pkg-config 1.8.0-3.fc37 → 1.7.3-10.el9

• podman 4:4.2.1-2.fc37 → 2:4.3.1-1.el9

• policycoreutils 3.4-6.fc37 → 3.4-4.el9

• polkit 121-4.fc37 → 0.117-10.el9

• polkit-libs 121-4.fc37 → 0.117-10.el9

• polkit-pkla-compat 0.1-22.fc37 → 0.1-21.el9

• popt 1.19-1.fc37 → 1.18-8.el9

• procps-ng 3.3.17-6.fc37 → 3.3.17-8.el9

• protobuf-c 1.4.1-2.fc37 → 1.3.3-12.el9

• psmisc 23.4-4.fc37 → 23.4-3.el9

• publicsuffix-list-dafsa 20210518-5.fc37 → 20210518-3.el9

• python-unversioned-command 3.11.0~rc2-1.fc37 → 3.9.14-1.el9

• python3 3.11.0~rc2-1.fc37 → 3.9.14-1.el9

• python3-libs 3.11.0~rc2-1.fc37 → 3.9.14-1.el9

• qemu-guest-agent 2:7.0.0-9.fc37 → 17:7.1.0-4.el9

• readline 8.1-7.fc37 → 8.1-4.el9

• rpcbind 1.2.6-3.fc37 → 1.2.6-5.el9

• rpm 4.18.0-1.fc37 → 4.16.1.3-19.el9

• rpm-libs 4.18.0-1.fc37 → 4.16.1.3-19.el9

• rpm-ostree 2022.13.134.g4f4caa36-1.fc37 → 2022.14-1.el9

• rpm-ostree-libs 2022.13.134.g4f4caa36-1.fc37 → 2022.14-1.el9

• rpm-plugin-selinux 4.18.0-1.fc37 → 4.16.1.3-19.el9

• rsync 3.2.6-1.fc37 → 3.2.3-19.el9

• runc 2:1.1.3-1.fc37 → 4:1.1.4-1.el9

• samba-client-libs 2:4.17.0-1.fc37 → 4.17.2-103.el9

• samba-common 2:4.17.0-1.fc37 → 4.17.2-103.el9

• samba-common-libs 2:4.17.0-1.fc37 → 4.17.2-103.el9

• sed 4.8-11.fc37 → 4.8-9.el9

• selinux-policy 37.12-2.fc37 → 34.1.47-1.el9

• selinux-policy-targeted 37.12-2.fc37 → 34.1.47-1.el9

• setup 2.14.1-2.fc37 → 2.13.7-7.el9

• sg3_utils 1.46-4.fc37 → 1.47-9.el9

• sg3_utils-libs 1.46-4.fc37 → 1.47-9.el9

• shadow-utils 2:4.12.3-2.fc37 → 2:4.9-6.el9

• shadow-utils-subid 2:4.12.3-2.fc37 → 2:4.9-6.el9

• shared-mime-info 2.2-2.fc37 → 2.1-5.el9

• shim-x64 15.6-2 → 15-15.el8_2

• skopeo 1:1.9.2-1.fc37 → 2:1.9.2-1.el9

• slang 2.3.3-1.fc37 → 2.3.2-11.el9

• slirp4netns 1.2.0-5.fc37 → 1.2.0-2.el9

• snappy 1.1.9-5.fc37 → 1.1.8-8.el9

• socat 1.7.4.2-3.fc37 → 1.7.4.1-5.el9

• sqlite-libs 3.39.2-2.fc37 → 3.34.1-5.el9

• squashfs-tools 4.5.1-2.fc37 → 4.4-8.git1.el9

• ssh-key-dir 0.1.3-4.fc37 → 0.1.4-1.el9

• sssd-ad 2.7.4-1.fc37 → 2.8.1-1.el9

• sssd-client 2.7.4-1.fc37 → 2.8.1-1.el9

• sssd-common 2.7.4-1.fc37 → 2.8.1-1.el9

• sssd-common-pac 2.7.4-1.fc37 → 2.8.1-1.el9

• sssd-ipa 2.7.4-1.fc37 → 2.8.1-1.el9

• sssd-krb5 2.7.4-1.fc37 → 2.8.1-1.el9

• sssd-krb5-common 2.7.4-1.fc37 → 2.8.1-1.el9

• sssd-ldap 2.7.4-1.fc37 → 2.8.1-1.el9

• sssd-nfs-idmap 2.7.4-1.fc37 → 2.8.1-1.el9

• stalld 1.16-2.fc37 → 1.17.1-1.el9

• sudo 1.9.11-4.p3.fc37 → 1.9.5p2-7.el9

• systemd 251.5-607.fc37 → 250-11.el9

• systemd-libs 251.5-607.fc37 → 250-11.el9

• systemd-pam 251.5-607.fc37 → 250-11.el9

• systemd-udev 251.5-607.fc37 → 250-11.el9

• tar 2:1.34-3.fc36 → 2:1.34-5.el9

• teamd 1.31-6.fc37 → 1.31-14.el9

• toolbox 0.0.99.3-7.fc37 → 0.0.99.3-6.el9

• tpm2-tools 5.3-1.fc37 → 5.2-2.el9

• tpm2-tss 3.2.0-3.fc37 → 3.0.3-8.el9

• tzdata 2022d-1.fc37 → 2022f-1.el9

• unbound-libs 1.16.3-1.fc37 → 1.16.2-2.el9

• userspace-rcu 0.13.0-5.fc37 → 0.12.1-6.el9

• util-linux 2.38.1-1.fc37 → 2.37.4-9.el9

• util-linux-core 2.38.1-1.fc37 → 2.37.4-9.el9

• vim-minimal 2:9.0.475-1.fc37 → 2:8.2.2637-16.el9

• which 2.21-35.fc37 → 2.21-28.el9

• xfsprogs 5.18.0-3.fc37 → 5.14.2-1.el9

• xmlsec1 1.2.34-2.fc37 → 1.2.29-9.el9

• xmlsec1-openssl 1.2.34-2.fc37 → 1.2.29-9.el9

• xz 5.2.5-10.fc37 → 5.2.5-8.el9

• xz-libs 5.2.5-10.fc37 → 5.2.5-8.el9

• yajl 2.1.0-19.fc37 → 2.1.0-21.el9

• zlib 1.2.12-5.fc37 → 1.2.11-35.el9

• zstd 1.5.2-3.fc37 → 1.5.1-2.el9

  Removed:

• btrfs-progs 5.18-3.fc37

• catatonit 0.1.7-7.fc37

• console-login-helper-messages-motdgen 0.21.3-3.fc37

• containerd 1.6.8-4.fc37

• dpdk 2:21.11.1-3.fc37

• fedora-gpg-keys 37-0.6

• fedora-release-common 37-0.13

• fedora-release-coreos 37-0.13

• fedora-release-identity-coreos 37-0.13

• fedora-repos 37-0.6

• fedora-repos-archive 37-0.6

• fedora-repos-modular 37-0.6

• fedora-repos-ostree 37-0.6

• flatpak-session-helper 1.14.0-2.fc37

• fuse-sshfs 3.7.3-2.fc37

• gettext-envsubst 0.21-19.0.20220203.fc37

• gettext-runtime 0.21-19.0.20220203.fc37

• iptables-legacy 1.8.8-3.fc37

• iptables-legacy-libs 1.8.8-3.fc37

• iptables-services 1.8.8-3.fc37

• iptables-utils 1.8.8-3.fc37

• jemalloc 5.3.0-2.fc37

• kbd-legacy 2.5.1-3.fc37

• libargon2 20190702-1.fc37

• libatomic 12.2.1-2.fc37

• libb2 0.98.1-7.fc37

• libbsd 0.10.0-10.fc37

• libcurl-minimal 7.85.0-1.fc37

• libfdt 1.6.1-5.fc37

• libnsl2 2.0.0-4.fc37

• liburing 2.0-4.fc37

• libusb1 1.0.25-9.fc37

• linux-atm-libs 2.5.1-33.fc37

• moby-engine 20.10.18-1.fc37

• mozjs102 102.3.0-1.fc37

• mpdecimal 2.5.1-4.fc37

• nano-default-editor 6.4-1.fc37

• nfs-utils-coreos 1:2.6.2-1.rc2.fc37

• openvswitch 2.17.0-6.fc37

• openvswitch-dpdk 2.17.0-6.fc37

• pam-libs 1.5.2-14.fc37

• podman-plugins 4:4.2.1-2.fc37

• python-pip-wheel 22.2.2-2.fc37

• python-setuptools-wheel 62.6.0-2.fc37

• systemd-container 251.5-607.fc37

• systemd-resolved 251.5-607.fc37

• unbound-anchor 1.16.3-1.fc37

• vim-data 2:9.0.475-1.fc37

• wireguard-tools 1.0.20210914-3.fc37

• xxhash-libs 0.8.1-3.fc37

• zchunk-libs 1.2.3-1.fc37

• zincati 0.0.24-6.fc37

• zram-generator 1.1.2-2.fc37

  Added:

• audit 3.0.7-103.el9

• centos-gpg-keys 9.0-18.el9

• centos-stream-release 9.0-18.el9

• centos-stream-repos 9.0-18.el9

• checkpolicy 3.4-1.el9

• conmon-rs 101:0.0.git.1304.cb0734a6-1.el9

• conntrack-tools 1.4.5-16.el9

• crypto-policies-scripts 20221003-1.git04dee29.el9

• dmidecode 1:3.3-7.el9

• firewalld-filesystem 1.0.0-2.el9

• flashrom 1.2-10.el9

• fwupd-plugin-flashrom 1.7.10-1.el9

• gawk-all-langpacks 5.1.0-6.el9

• gettext 0.21-7.el9

• glibc-gconv-extra 2.34-49.el9

• glusterfs 6.0-57.4.el9

• glusterfs-client-xlators 6.0-57.4.el9

• glusterfs-fuse 6.0-57.4.el9

• glusterfs-libs 6.0-57.4.el9

• groff-base 1.22.4-10.el9

• gssproxy 0.8.4-4.el9

• info 6.7-15.el9

• initscripts-service 10.11.5-1.el9

• kernel-modules-extra 5.14.0-200.el9

• libbrotli 1.0.9-6.el9

• libcurl 7.76.1-21.el9

• libev 4.33-5.el9

• libmicrohttpd 1:0.9.72-4.el9

• libnetfilter_cthelper 1.0.0-22.el9

• libnetfilter_cttimeout 1.0.0-19.el9

• libnetfilter_queue 1.0.5-1.el9

• libssh 0.10.4-3.el9

• libssh-config 0.10.4-3.el9

• libusbx 1.0.26-1.el9

• libverto-libev 0.3.2-3.el9

• nfs-utils 1:2.5.4-16.el9

• nmap-ncat 3:7.91-10.el9

• openldap-compat 2.6.2-3.el9

• openssl-pkcs11 0.4.11-7.el9

• openvswitch-selinux-extra-policy 1.0-31.el9s

• openvswitch2.17 2.17.0-55.el9s

• ostree-grub2 2022.6-1.el9

• perl-AutoLoader 5.74-479.el9

• perl-B 1.80-479.el9

• perl-Carp 1.50-460.el9

• perl-Class-Struct 0.66-479.el9

• perl-Data-Dumper 2.174-462.el9

• perl-Digest 1.19-4.el9

• perl-Digest-MD5 2.58-4.el9

• perl-Encode 4:3.08-462.el9

• perl-Errno 1.30-479.el9

• perl-Exporter 5.74-461.el9

• perl-Fcntl 1.13-479.el9

• perl-File-Basename 2.85-479.el9

• perl-File-Path 2.18-4.el9

• perl-File-Temp 1:0.231.100-4.el9

• perl-File-stat 1.09-479.el9

• perl-FileHandle 2.03-479.el9

• perl-Getopt-Long 1:2.52-4.el9

• perl-Getopt-Std 1.12-479.el9

• perl-HTTP-Tiny 0.076-460.el9

• perl-IO 1.43-479.el9

• perl-IO-Socket-IP 0.41-5.el9

• perl-IO-Socket-SSL 2.073-1.el9

• perl-IPC-Open3 1.21-479.el9

• perl-MIME-Base64 3.16-4.el9

• perl-Mozilla-CA 20200520-6.el9

• perl-NDBM_File 1.15-479.el9

• perl-Net-SSLeay 1.92-2.el9

• perl-POSIX 1.94-479.el9

• perl-PathTools 3.78-461.el9

• perl-Pod-Escapes 1:1.07-460.el9

• perl-Pod-Perldoc 3.28.01-461.el9

• perl-Pod-Simple 1:3.42-4.el9

• perl-Pod-Usage 4:2.01-4.el9

• perl-Scalar-List-Utils 4:1.56-461.el9

• perl-SelectSaver 1.02-479.el9

• perl-Socket 4:2.031-4.el9

• perl-Storable 1:3.21-460.el9

• perl-Symbol 1.08-479.el9

• perl-Term-ANSIColor 5.01-461.el9

• perl-Term-Cap 1.17-460.el9

• perl-Text-ParseWords 3.30-460.el9

• perl-Text-Tabs+Wrap 2013.0523-460.el9

• perl-Time-Local 2:1.300-7.el9

• perl-URI 5.09-3.el9

• perl-base 2.27-479.el9

• perl-constant 1.33-461.el9

• perl-if 0.60.800-479.el9

• perl-interpreter 4:5.32.1-479.el9

• perl-libnet 3.13-4.el9

• perl-libs 4:5.32.1-479.el9

• perl-mro 1.23-479.el9

• perl-overload 1.31-479.el9

• perl-overloading 0.02-479.el9

• perl-parent 1:0.238-460.el9

• perl-podlators 1:4.14-460.el9

• perl-subs 1.03-479.el9

• perl-vars 1.05-479.el9

• podman-catatonit 2:4.3.1-1.el9

• policycoreutils-python-utils 3.4-4.el9

• python3-audit 3.0.7-103.el9

• python3-libselinux 3.4-3.el9

• python3-libsemanage 3.4-2.el9

• python3-pip-wheel 21.2.3-6.el9

• python3-policycoreutils 3.4-4.el9

• python3-pyyaml 5.4.1-6.el9

• python3-setools 4.4.0-5.el9

• python3-setuptools 53.0.0-11.el9

• python3-setuptools-wheel 53.0.0-11.el9

• quota 1:4.06-6.el9

• quota-nls 1:4.06-6.el9

• rdma-core 41.0-3.el9

• sssd 2.8.1-1.el9

• sssd-proxy 2.8.1-1.el9

• strace 5.18-2.el9

• subscription-manager-rhsm-certificates 20220623-1.el9

• systemd-journal-remote 250-11.el9

• systemd-rpm-macros 250-11.el9

• tmux 3.2a-4.el9

View changelog in Markdown or change previous release: 4.20.0-0.okd-scos-2025-05-14-2215334.20.0-0.okd-scos-2025-05-14-1015324.20.0-0.okd-scos-2025-05-13-2215314.20.0-0.okd-scos-2025-05-13-1015304.20.0-0.okd-scos-2025-05-12-2215294.20.0-0.okd-scos-2025-05-12-101528───4.19.0-0.okd-scos-2025-05-14-1821084.19.0-0.okd-scos-2025-05-14-0621084.19.0-0.okd-scos-2025-05-13-1821084.19.0-0.okd-scos-2025-05-13-0621084.19.0-0.okd-scos-2025-05-12-1821084.19.0-0.okd-scos-2025-05-12-062108───4.18.0-0.okd-scos-2025-05-15-0108384.18.0-0.okd-scos-2025-05-14-1308384.18.0-0.okd-scos-2025-05-13-1654244.18.0-0.okd-scos-2025-05-13-0454244.18.0-0.okd-scos-2025-05-12-1654244.18.0-0.okd-scos-2025-05-12-045424───4.17.0-0.okd-scos-2025-02-25-0904554.17.0-0.okd-scos-2025-02-24-2104554.17.0-0.okd-scos-2025-02-24-0904544.17.0-0.okd-scos-2025-02-23-2104544.17.0-0.okd-scos-2025-02-22-211215───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2025-05-02-1402244.15.0-0.okd-2025-04-03-2126204.15.0-0.okd-2025-04-02-1800124.15.0-0.okd-2025-03-28-1148024.15.0-0.okd-2025-03-26-0131074.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.3.0-0.okd-2025-04-09-1531174.3.0-0.okd-2021-08-03-2048314.3.0-0.okd-2021-03-22-1309504.3.0-0.okd-2021-02-02-2356544.3.0-0.okd-2021-02-02-1747534.3.0-0.okd-2021-01-28-0046514.3.0-0.okd-2021-01-18-145029───4.20.0-okd-scos.ec.04.19.0-okd-scos.ec.104.19.0-okd-scos.ec.84.19.0-okd-scos.ec.74.19.0-okd-scos.ec.64.19.0-okd-scos.ec.54.19.0-okd-scos.ec.44.19.0-okd-scos.ec.34.19.0-okd-scos.ec.24.19.0-okd-scos.ec.14.19.0-okd-scos.ec.04.18.0-okd-scos.ec.34.18.0-okd-scos.ec.24.18.0-okd-scos.ec.14.18.0-okd-scos.ec.04.17.0-okd-scos.ec.44.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424

Source code for this page located on github