Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.22.0-okd-scos.10

Qualifiers (status api): None

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable
  • upgrade-minor Pending (1 retry) release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable

    • Attempt 1 Failed
    • Attempt 2 Pending

Upgrades from:

• 4.22.0-okd-scos.ec.16 - Success
• 4.21.0-okd-scos.ec.19 (changes) - Failed Pending

---

Loading changelog, this may take a while ...

Changes from 4.22.0-okd-scos.ec.16

Created: 2026-09-09 08:47:05 +0000 UTC

Image Digest: sha256:65f272bc84b5e235aa7f3026f08d69f00adebc3fd1228ea7f29e99c5580165af

Release 4.22.0-okd-scos.10 was created from registry.ci.openshift.org/origin/release-scos:4.22.0-0.okd-scos-nightly-2026-09-09-010118

Components

• Kubectl 1.35.2
• Kubernetes upgraded from 1.35.4 to 1.35.6
• Kubernetes Tests 1.35.1
• CentOS Stream CoreOS 10 upgraded from 10.0.20260428-0 to 10.0.20260806-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
EVPN (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
VSphereMixedNodeEnv (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
NoRegistryClusterInstall (0 tests)	Disabled	Enabled (Changed)	Disabled	Enabled	Disabled	Enabled (Changed)	Disabled	Enabled
GCPSovereignCloudInstall (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)

New images

• installer-etcd-artifacts git 6bd01267 sha256:63fd1fdc7731fe7928035d30258a802577923b28dec40aab643e2a3f49df231e
• installer-kube-apiserver-artifacts git 19365a06 sha256:359d64776e96a3768d2204e6cf8b538cc47a0bf4cacc13b450e5a412125ebddf

Rebuilt images without code change

• apiserver-network-proxy git 5e33c228 sha256:1bd87da8832223f7e20c18199141bfc96efd0617bb0079559b185f2086694780
• aws-kms-encryption-provider git 19e7b623 sha256:64df7ceb79216e49512daebf9cf5afb8d4964efc8951f522d741ea76a3ea9451
• aws-machine-controllers git 1a0ccbcf sha256:7439b972c227209447b8ae200054f4ea35c22c71aa56857a352f32fc84ad2e5b
• aws-node-termination-handler git 341ed3a0 sha256:8645eb4a468a2c93d508419f6a8f96a193c7f5ce4158ebcf7b526c34e806354b
• aws-pod-identity-webhook git 82088287 sha256:3cdaa627200529bd2d504dca397c4e8a64b1a87ad607b8bd68a550dbf753ae93
• azure-service-operator git b44d4444 sha256:f459247b7577169cf5621f108ff5130174a4064a799f1818d3342f1a785c7bf9
• azure-workload-identity-webhook git a8fb3bf1 sha256:e4c72469b4cea65eeed8a4c51c29ca7bd6e15f4e61273cac4427303aa04ed092
• baremetal-machine-controllers git 8d863b95 sha256:de2533054e22a4a0678f9ccbe19240d52e3c52046bc48f4cdb0a4c208fb5ae8f
• cluster-bootstrap git e6be0fdf sha256:460b6b136e41fbd2306786cf995fb105a3f869029dff54e898216adc7aafb896
• cluster-capi-controllers git f1718df9 sha256:0d0a68b1f91121ebbc328f2495ac0850e1280ee7f84e1ba39626c0a9d44dcb67
• cluster-config-operator git e0c2428e sha256:735f953d1e5de813da0bf511435e686a6a1d79d595fa50b744e86a2108bbc916
• cluster-dns-operator git 3d214118 sha256:236807ea16d9f5c8bdee6839b613149e77cf939be90c409eca41ea45fa09ee9e
• cluster-update-keys git 3b5c59cc sha256:779704ec7ee18798d72a5852dbc4f9a009a962ac9e73cef4b5ceaaf7a94f74d7
• configmap-reloader git 94e41c4c sha256:6d3f046783688fbbb01047201e1b37dc5c0d5864efef244030dae4682ce29de4
• csi-livenessprobe git 4d5e959a sha256:b6b7960839457517089d1fd14ce657f543d18b6a918c2e9012cf69e6ccd1edc3
• driver-toolkit git 7aa4007a sha256:10c2f165ad619577e924bf49f579fea9c7ba227b3552c1ad1cba9a826f9ec9a9
• gcp-machine-controllers git 0073bd11 sha256:813fcae0b6eec4a8ffe2f257b39fca4a10e9e15aace52e4b2f73b3247431c164
• gcp-workload-identity-federation-webhook git d7675f31 sha256:105a0918e88703a26bcf0afa761f4d24343e88a777366b62e4d920302c69c3ee
• insights-runtime-exporter git 70256457 sha256:534ddbbd71d0125a57953548770768374d64017351ff9f5586390cce2362f675
• insights-runtime-extractor git 70256457 sha256:e8b9091b79e9b0017b347eb9683ab70b175cd3f9a395f41f8b77024aa323833a
• ironic-machine-os-downloader git 9953d2b7 sha256:ad2ffe532ec1fed89697195173a64a237df61e2b399b98d3fb60178278ac3e24
• ironic-static-ip-manager git a379d09f sha256:3b5eeab00b02b8285934f6e377a36fd363901fcb7512c57a7a8ba332ac13c976
• kube-metrics-server git 38c16c46 sha256:d83826a058c1d274d03f64601d711548bd53370d326800cd5e32b92b433b6039
• kube-rbac-proxy git d12e2746 sha256:ffd8b92344801439c544006ef87cec00fc4cf67f2ab6ec6196616c436a8ab97d
• kube-storage-version-migrator git 72835e43 sha256:8b7f124e41ca19371c5a5615e10f4e29540d5f7c7d3dc55655c63a7ca980df9d
• machine-image-customization-controller git a43d9c97 sha256:0412dc6494bc71b80fc1feabc5f86dc24178eb68ed7da3c6b98f04f22662c51b
• multus-networkpolicy git 834a093f sha256:93174b9c6f3a51d97529956d7c4da845c5f1be028340ac4c65d2829762180ffa
• multus-route-override-cni git 08af4127 sha256:7c9a43560ca6ac4db5be16a2346a433b746b054d2c2a790ad5a5d7fde93ff7ee
• multus-whereabouts-ipam-cni git d691040e sha256:b544e0e88cb4fb7fd158b36ad4096cb4f4ffd2e589db50898bed7c25122c943b
• must-gather git 8554213f sha256:3312f4a63d28d4f2d61aef9cbab10aa6f64d963f50b22d03e3766012ad927ad7
• network-metrics-daemon git 5b233ea1 sha256:65453a1a26a442a94f926071384d3b7a5b4fb23d4ed3473414f21aa3683029f7
• network-tools git 5c4b905c sha256:091461fb89af925398084fef8069ff4c286ea099601633c475d12f11ee328c0a
• nutanix-cloud-controller-manager git 8e75679a sha256:ae6b6eaae143ec8aa5f31fbc81e413860629e8cb0f5a9475c94bb3b1127e20d2
• nutanix-machine-controllers git 60559fdd sha256:3623035649b5d6c802edb24c7daccea13ec341c5284ab42cce82003e561e6bd8
• oauth-apiserver git 4c002a91 sha256:a6dde1f5365de687698ca66b23d0574603c40911bccba154894f5b9a19804ae0
• openshift-controller-manager git 26d20fea sha256:c03e6cddd121a23bfa2037c1506dfbb04c08ebd135e43ce56f51bee954d3909d
• openshift-state-metrics git e71e0996 sha256:365ca355fd188528fc0fc8ed16d497dd2777b28f0e00ec713057d60d12885f37
• openstack-cluster-api-controllers git 06d95461 sha256:513495fa4738957abe9c31b7126d6d59128fc16dd0cff863b2ebb0debafbcbbf
• openstack-resource-controller git cbea7a9c sha256:867cfa44302914ecd39fe354b2f2985afa89eefd17e83a19cc6388fd867e608e
• operator-marketplace git 38da2ef7 sha256:b462bff2de2924cb0e58a3d69580588e4d8746f545dfe92e1bd91c682894535e
• powervs-cloud-controller-manager git 766c0952 sha256:c83b8db37574888b49fa2b1e504f7413ab011174bf7041850791060b226062d1
• powervs-machine-controllers git e88cf81d sha256:aa66fc27f7ae17138a717eb6a757dbfd4f297e850222339594f377140e61e9a9
• prom-label-proxy git c4c99a30 sha256:0792f108b67516b8d2927a06030b7dcd7f69b04c0469ebb6889ef817aac07345
• prometheus-config-reloader git 70e38466 sha256:6a8be22479880397b0b4e6b41f7680c86c4c26bfc148969780a32651272f279e
• prometheus-node-exporter git 6c4fc012 sha256:9b8478c5d89a11a52dd7b59096588c6569b989b0d20068302f98c713b7f0c91f
• prometheus-operator git 70e38466 sha256:1edb2118c4415255c0db15886374c3ab321d3f737f9962f4f4499bca4fa08188
• prometheus-operator-admission-webhook git 70e38466 sha256:9fa7f88afc05ad48b1ccff49999222e5bf8d6baae284f94506182e609781eea0
• service-ca-operator git 9fff46a5 sha256:a608c4db25a4ea967bd4115792c74cb28eec7a6ee741bbac9f455e731113ea56
• volume-data-source-validator git 8e176cec sha256:6d52894df789f8b9c190b7e307ccd1f3e4f021b783c70475336d4f7f225d745d
• vsphere-cloud-controller-manager git 39008107 sha256:ffb8440d2b6e4bf60a586c344d3421b6ac786c9884204c6b23528edd232a9830

agent-installer-api-server

• OCPBUGS-121355: Fix NUMAResourcesOperator CR name so it can be applied #10934
• OCPBUGS-120755: added missing subscription name for lvms-operator #10918
• OCPBUGS-105805: golang.org/x/crypto bump to v0.52.0 #10796
• OCPBUGS-104521: manifest_generator add a label to LUKS root #10755
• AGENT-1559: Remove LSO and LVMS as CNV operator dependencies #10666
• OCPBUGS-98693: PATCH /v2/clusters/{id} does not return updated operator_bundles #10608
• OCPBUGS-93786: Simplify IRI api dependency #10539
• OCPBUGS-92056: Stop setting DevPreviewNoUpgrade for TNF clusters #10516
• OCPBUGS-90638: Add sourcedir /run/chrony-dhcp to generated chrony.conf #10488
• OCPBUGS-83542: Mark raw FC/iSCSI multipath members as ineligible #10150
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• OCPBUGS-96592: Bump golang.org/x/net to v0.55.0 #2250
• OCPBUGS-104498: Wait for all nodes to join before exiting for ABI #2245
• OCPBUGS-69953: Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.22 #1406
• Full changelog

agent-installer-node-agent

• OCPBUGS-101855: Bump golang.org/x/net from v0.47.0 to v0.53.0 #1595
• OCPBUGS-84392: Bump go-jose in v4.22 #1488
• Full changelog

agent-installer-ui

• OCPBUGS-104555: Bump tmp to ^0.2.6 to address CVE-2026-44705 (#4014) #4014
• CVE-2026: 44990: bump sanitize-html to v2.17.4 (#4008) #4008
• Add LVM as an operator for OVE (#4005) #4005
• Allow LSO to be selected as a standalone operator (#4003) #4003
• NoRegistryClusterInstall has been promoted to default in the OpenShift API, (#3984) #3984
• Update OWNERS file (#3990) #3990
• OCPBUGS-100526, OCPBUGS-103014: Bump ip-address to 10.5.0 to fix CVE-2026-54272 and CVE-2026-69192 (#3987) #3987
• OCPBUGS-109783: Bump tar pkg to version ^7.5.21 to address CVE-2026-73566 (#3970) #3970
• OCPBUGS-104483: Pin minimatch to ^10.2.6 and brace-expansion to ^5.0.9 (CVE-2026-14257) (#3959) #3959
• CVE-2026: 9595: Bumped webpack-dev-server to 5.2.5 (#3924) #3924
• OCPBUGS-99025: Bump dompurify to 3.4.7+ in 4.22 (#3895) #3895
• OCPBUGS-91629: Bump ws to 8.21.0 for CVE-2026-45736 (#3906) #3906
• OCPBUGS-96710: Bump basic-ftp to 5.3.1 for CVE-2026-44240 (#3823) #3823
• CVE-2026: 59873 openshift4/ose-agent-installer-ui-rhel9: node-tar: Denial of Service via crafted gzip bomb openshift-4.22 #3890
• Update OWNERS file (#3883) #3883
• OCPBUGS-98431: Bump js-yaml to 4.3.0 in 4.22 (#3865) #3865
• Apply patches (#3873) #3873
• MGMT-24444: Apply sentence case to networking management type labels … (#3747) (#3871) #3747
• MGMT-24152: UI allows editing pull secret in draft cluster (#3662) (#3870) #3662
• OCPBUGD-89707: bump form-data from 4.0.5 to 4.0.6 to address CVE-2026-12143 (#3869) #3869
• patch CVE-2026-9277 and CVE-2026-42338 via yarn resolutions (#3851) #3851
• AGENT-1519 | [Below-the-sea UI] Allow the user to select IPv6 in the Networking Stack Type field (#3806) #3806
• MGMT-23950: [Staging] [UI] - Cluster name missing in page header for draft clusters (#3669) (#3835) #3669
• Fix disk encryption parsing for cluster details (#3737) (#3843) #3737
• MGMT-19002: [nmstate] UI form view missing autoconf field for ipv6 (#3681) (#3836) #3681
• Tweak discovery ISO modal sizing (#3792) (#3846) #3792
• MGMT-23490: Refactor Troubleshooting Web Console (#3688) (#3839) #3688
• OCPBUGS-88249, OCPBUGS-88400: Ensure axios version is resolved to 1.18.1 (#3857) #3857
• Pull secret appears editable in draft cluster but changes are not applied (#3597) (#3831) #3597
• MGMT-24099: UI redirects to Custom Manifest page before host discovery when cluster is OCI platform (#3739) (#3844) #3739
• Fix machine network autoselect to work with IPv6 only clusters (#3813) (#3848) #3813
• Fix nested expandable sections (#3798) #3798
• OCPBUGS-86813: Custom manifests are broken in local assisted UI (#3768) #3768
• OCPBUGS-86258: Static ip prefill for ove below the sea (#3767) #3767
• Operators section should not be displayed on review and installation progress pages when no operators are selected (#3750) #3750
• Remove Arbiter button (#3748) #3748
• fix monted pull secret parsing (#3724) #3724
• Allow to install SNO topology (#3721) #3721
• OCPBUGS-85230: Ensure follow-redirects pkg resolves to ^1.16.0 (#3705) #3705
• OCPBUGS-85265: [release-4.22] OCPBUGS-84038 | [Below the sea UI] Lack of visual feedback (spinner) on disabled “Next” button during background validation (#3703) #3703
• OCPBUGS-84318: fix operators list in ABI below the sea (#3645) #3645
• Hide internally generated custom manifests on the Cluster Review page (#3700) #3700
• OCPBUGS-85199: [release-4.22] OCPBUGS-84147 | [Below the sea UI] Leaky Abstraction: Transient 500 errors exposed during host binding process (#3683) #3683
• Remove 2 node arbiter option from the control plane dropdown option (#3702) #3702
• OCPBUGS-85220, OCPBUGS-85222, OCPBUGS-85224, OCPBUGS-85226, OCPBUGS-85228: Bump axios to ^1.15.1 (#3693) #3693
• OCPBUGS-84272: bump axios to ^1.15.0 for fixing CVE-2026-40175 (#3638) #3638
• Full changelog

agent-installer-utils

• OCPBUGS-105451: Update Konflux references #337
• OCPBUGS-101760: Update Konflux references #329
• OCPBUGS-100105: Use Operator catalog in 4.22 for OVE #325
• AGENT-1568: Add lvms-operator to config #324
• OCPBUGS-99906: Update Konflux references #302
• OCPBUGS-99556: Use agent-preinstall-image-builder from quay-proxy #321
• OCPBUGS-98743: Update cluster-logging and loki operator versions #316
• OCPBUGS-89320: bump mtv-operator to release-v2.12 #310
• OCPBUGS-86042: Filter out link-local IPv6 addresses #306
• OCPBUGS-85525: update konflux references #296
• Full changelog

aws-cloud-controller-manager

• OCPBUGS-83898: UPSTREAM: <drop>: bump google.golang.org/grpc to v1.79.3 #155
• Full changelog

aws-cluster-api-controllers

• 🌱 [release-4.22] OCPBUGS-119954: UPSTREAM: <carry>: Remove upstream .github files unused in OpenShift CI #633
• 🐛 [release-4.22] OCPBUGS-112305: UPSTREAM: 6132: Persist ProviderID immediately after instance creation #626
• OCPBUGS-84393: Bump github.com/go-jose/go-jose/v4 to 4.1.4 #606
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-83900: UPSTREAM: 2911: bump google.golang.org/grpc v1.80.0 to fix CVE-2026-33186 #316
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-119697: Add proxy hook for HyperShift CSI driver controller deployments #619
• OCPBUGS-101882, OCPBUGS-101889, OCPBUGS-101890, OCPBUGS-102000: Bump golang.org/x/net to v0.53.0 #602
• OCPBUGS-109635: csi-driver-smb: DeleteVolume call fails to mkdir under /tmp #597
• OCPBUGS-91947: maxOpenShiftVersion should be bumped to 5.0 #572
• OCPBUGS-85532: Add init container for Manila node daemonset #555
• OCPBUGS-85116: Mount writable /tmp in SMB CSI driver #550
• Full changelog

aws-karpenter-provider-aws

• OCPBUGS-118884: default max-pods to 250 for Custom AMI family #43
• OCPBUGS-101842: Fix CVE-2026-33814 #35
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-88485: Bump golang.org/x/net from v0.49.0 to v0.55.0 #193
• OCPBUGS-85706, OCPBUGS-85707: UPSTREAM: <drop>: bump google.golang.org/grpc to v1.79.3 #185
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-105465: Address CVE-2026-39829 #396
• Full changelog

azure-disk-csi-driver

• UPSTREAM: 3635: OCPBUGS-96598: Bump golang.org/x/net to v0.55.0 #165
• OCPBUGS-106152: UPSTREAM: 3756: fix: optionally skip reading the config from the API server #163
• OCPBUGS-83633: Bump spdystream to v0.5.1 #150
• OCPBUGS-85193: check for node name in waitForDiskManagedByTobeRemoved #146
• Full changelog

azure-file-csi-driver

• OCPBUGS-101874: Bump golang.org/x/net to v0.53.0 #154
• OCPBUGS-95536: Bump golang.org/x/crypto to v0.48.0-sec.1 #144
• Full changelog

azure-kms-encryption-provider

• CNTRLPLANE-4024: support sovereign Managed HSM endpoints- #56 #56
• OCPBUGS-101846: [release-4.22] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #57
• CNTRLPLANE-4024: [release-4.22]: Correct Managed HSM endpoints #53
• Full changelog

azure-machine-controllers

• OCPBUGS-98074: Bump golang.org/x/crypto from v0.47.0 to v0.54.0 #205
• OCPBUGS-86996: Don’t permanently fail Machines after provisioning #195
• PIXAA-7: Leverage SpotRebalanceRecommendation for instance termination when available #198
• Full changelog

baremetal-cluster-api-controllers

• OCPBUGS-86688: Adopt existing Metal3 Remediation CRDs on upgrade #83
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-100061: openstack: Reserve addresses for load balancer #10725
• OCPBUGS-114639: OCPBUGS-112550, OCPBUGS-112549: Release 4.22 GCD and KMS support #10783
• AGENT-1583: post-feature promotion (NoRegistryClusterInstall) openshift/api dependencies bump #10817
• OCPBUGS-112471: Update timeout in GetMarketplaceImage to 5 minutes #10784
• OCPBUGS-111885: pin argcomplete for yq on Python 3.9 (release-4.22) #10766
• Bug OCPBUGS-99399: baremetal: fix provisioning ISO kernel arguments #10703
• AGENT-1546: Backport NoRegistryClusterInstall feature to release-4.22 #10683
• OCPBUGS-87814: [release-4.22] Add omitempty to vSphere and Nutanix MachinePool slice fields #10606
• OCPBUGS-95555, OCPBUGS-99017: bump golang.org/x/crypto to 0.52.0 #10695
• OCPBUGS-98982: Update RHCOS-release-4.22 bootimage metadata to 9.8.20260715-1 / 10.2.20260715-0 #10692
• OCPBUGS-98701: cluster-api: disable diagnostics endpoint for local CAPI controllers #10685
• OCPBUGS-87812: [release-4.22] fix: reset associatedVCenter in failure domain validation loop #10604
• OCPBUGS-97964: destroy/aws: delete vpc endpoints earlier #10674
• no-jira: images: bump UPI image dependencies to 4.22 #10582
• OCPBUGS-84402: Bump go-jose/v4 to 4.1.4 #10597
• OCPBUGS-84643: Update RHCOS-release-4.22 bootimage metadata to 10.2.20260521-0 / 9.8.20260520-0 #10572
• OCPBUGS-85407: PowerVS: Add port 80 security group rule #10548
• OCPBUGS-85503: PowerVS: Fix supported system types retrieval #10521
• Full changelog

baremetal-operator

• OCPBUGS-90570: Reject non-empty checksum for OCI images #501
• OCPBUGS-99420: Create ports if they are already inspected and machine is re-registering #518
• OCPBUGS-83866: Include image URL and checksum in provisioning error message #500
• OCPBUGS-94109: cherry-pick reconciler optimizations #503
• OCPBUGS-97940: Add BMH finalizer on PreprovisioningImage #505
• OCPBUGS-87963: Fix preprovisioning network Secret lifecycle during BMH deletion #491
• Full changelog

baremetal-runtimecfg

• OCPBUGS-112618: Cloud Platforms: Filter out node’s own IP from Upstreams #401
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-114734: Fix windows builds of oc rpm #2383
• OCPBUGS-98547: bump x/crypto to the latest version #2309
• OCPBUGS-85066: Add required-scc annotation to node-joiner pod #2266
• Full changelog

cloud-credential-operator

• OCPBUGS-114669: Enable GCP custom universe domain support for CCO #1083
• NO-JIRA: Revert “OCPBUGS-87828: Scope minted AWS IAM policies to cluster-owned resources” #1059
• OCPBUGS-87828: Scope minted AWS IAM policies to cluster-owned resources #1045
• Full changelog

cloud-network-config-controller

• : [release-4.22] OCPBUGS-115316: GCP: Set Universe Domain #264
• Full changelog

cluster-authentication-operator

• OCPBUGS-85105: Fix OAuth page showing OKD branding instead of OpenShift #888
• Full changelog

cluster-autoscaler

• OCPBUGS-102038: [4.22] Fix OCPBUGS-102038 #434
• OCPBUGS-99551: [release-4.22] UPSTREAM: 10001: chore(clusterapi): add machine phase check for failed machines #431
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-101883: Bump x/net package in release-4.22 #387
• Full changelog

cluster-baremetal-operator

• OCPBUGS-99390: Make CBO progress in non-baremetal platforms #646
• OCPBUGS-99390: Cluster Operator baremetal did not report Progressing=True during a cluster update #634
• OCPBUGS-99501: Apply cluster TLS profile to ironic-proxy container #635
• OCPBUGS-87212: Add watcher for both TLS Adherence policy and profile changes #610
• OCPBUGS-86226: Fix empty IRONIC_BASE_URL #606
• OCPBUGS-85640: Fix webhook to validate the actual admission request object #602
• OCPBUGS-84936: Fix webhook server not starting due to missing WithValidator #598
• Full changelog

cluster-capi-operator

• OCPBUGS-96609: Bump golang.org/x/net to v0.56.0 to fix CVE-2026-27136 #624
• OCPBUGS-86353: fix: scope webhook to capi namespace, remove unused webhook endpoints #568
• NO-JIRA: Allow sustaining engineering to self serve dependency updates #555
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-114394: [release-4.22] GCP Alternate Universe Domain Support #508
• OCPBUGS-112665: Moved node sync job creation from manifest to operator controller #507
• OCPBUGS-105883: Created new job to update vSphere nodes to have vsphere label #501
• OCPBUGS-94184: OCPBUGS-65582: [release-4.22] OCPBUGS-65582: manifests: Shift operator Deployment and ClusterOperator after CredentialsRequests #484
• SPLAT-2794: Create OTE Binary and add vSphere hybrid e2e tests #471
• OCPBUGS-92656: e2e/ccm-aws-ote: support to dual-stack IPv6 primary #480
• Full changelog

cluster-config-api

• OCPBUGS-116848: Add Sovereign cloud feature gate and UniverseDomain field to GCPPlatformStatus #3022
• OCPBUGS-113639: move empty CRIOCredentialProviderConfig CR to run-level 0000_10 #3010
• SPLAT-2718: Promote FeatureGateVSphereMixedNodeEnv to GA #2949
• OCPBUGS-113600: [release-4.22] OCPBUGS-112479: Handle Sippy date-only format in featuregate-test-analyzer #3008
• OCPBUGS-105168: Add haproxyVersion in IngressController API #2971
• AGENT-1578: Promote NoRegistryClusterInstall feature to default #2979
• AGENT-1544: Backport NoRegistryClusterInstall feature to release-4.22 #2930
• OCPBUGS-98222: add new serviceAccountToken fs type #2922
• Promote EVPN Feature Gate to GA #2826
• OCPBUGS-85102: Add labelSelector to MachineSet status for scale subresource #2831
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-87968: Fixed issue where nameserver is not set when recreating cpms #409
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-101892: Bump golang.org/x/net from v0.52.0 to v0.53.0 #286
• OCPBUGS-88472: Fix group snapshots on HyperShift #280
• Full changelog

cluster-etcd-operator

• OCPBUGS-100120: Revert ‘OCPBUGS-88490: fix etcd operator deadlock when etcd-endpoints configmap is stale’ #1661
• OCPBUGS-90542: fix etcd operator deadlock when etcd-endpoints configmap is stale #1636
• OCPBUGS-86960: validate snapshot before destructive operations in cluster-restore-tnf.sh #1627
• And 2 elided commits (e.g. from squash or rebase merges)
• Full changelog

cluster-image-registry-operator

• OCPBUGS-88489: Fix image registry deployment failure on aws-ovn-edge-zones #1366
• [release 4.22] OCPBUGS-114413: GCP Universe Domain Support #1364
• OCPBUGS-112349: Improve GCS KMS encryption error handling and documentation #1362
• OCPBUGS-96612: Bump golang.org/x/net from v0.47.0 to v0.55.0 #1355
• OCPBUGS-85342: Fix stale config cache causing incorrect deployment #1342
• Full changelog

cluster-ingress-operator

• OCPBUGS-105168: Bump openshift/api which adds HAProxy version API #1545
• OCPBUGS-98728: Add missing include annotations to IBM Cloud and PowerVS ingress CredentialsRequests #1506
• OCPBUGS-97563: Detect orphaned OSSM subscription after noOLM migration #1495
• OCPBUGS-91967: Guard OLM watches with capability check in gatewayclass controller #1481
• OCPBUGS-87164: Add referencegrants and backendtlspolicies to Gateway API RBAC #1461
• OCPBUGS-87167: Add configuration override for X-SSL strip #1468
• OCPBUGS-86074: Update grpc-go and x/net #1449
• OCPBUGS-85024: TestUnsupportedConfigOverride: Ignore featuregate and defaults #1432
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-120318: [release-4.22] Backport 10-minute degraded inertia #2294
• OCPBUGS-87844: Fix kube-apiserver-to-kubelet-signer refresh interval #2187
• OCPBUGS-85269: fsync static pod cert and manifest writes for crash durability #2143
• OCPBUGS-85260: operator should not override authentication config serviceAccountIssuer with the default one during the operator initialization #2142
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-116225: [release-4.22] Add 10-minute degraded inertia #966
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-120133: [release-4.22] Backport 10-minute degraded inertia #664
• Full changelog

cluster-kube-storage-version-migrator-operator

• OCPBUGS-85570: add PodDisruptionBudget for migrator deployment #174
• OCPBUGS-84312: schedule migrator pods on control-plane nodes #162
• Full changelog

cluster-machine-approver

• OCPBUGS-86773: fix: use feature-gate annotation for CAPI manifests #305
• Full changelog

cluster-monitoring-operator

• OCPBUGS-105469: enable read-only rootfs for all containers #3047
• OCPBUGS-112572: [release-4.22] Makefile: version-stamp golangci-lint binary to prevent stale linter #3064
• OCPBUGS-105304: [release-4.22] wrap library-go resourceCache with mutex for thread safety #3045
• OCPBUGS-104852: [release-4.22] e2e: scale down CVO and MCO to prevent node reboots during proxy config watch test #3052
• OCPBUGS-104536: Backport e2e stabilization 4.22 #3026
• OCPBUGS-100367: [release-4.22] fix: watch cluster wide proxy changes and apply changes accordingly #3020
• OCPBUGS-99748: fall back to kube-system/global-pull-secret for telemeter-client token #3001
• OCPBUGS-93722: [release-4.22] Prometheus: Information disclosure of Azure OAuth client secret via config API #2976
• OCPBUGS-92193: set Prometheus shards value explicitly #2974
• OCPBUGS-88321: fix(TestDocExamples) flake: use internal registry for test pods #2965
• OCPBUGS-86807: jsonnet: exclude ReplicationController from catch-all … #2940
• OCPBUGS-86990: increase lookup interval #2945
• OCPBUGS-86034: fix: use numeric ports in NetworkPolicies and add enforcement e2e test #2929
• Full changelog

cluster-network-operator

• OCPBUGS-105556: [4.22] frr-k8s: use Recreate strategy for statuscleaner deployment #3130
• OCPBUGS-105512: Remove version-specific CNI binary copy logic #3114
• OCPBUGS-99744: Bump frr-k8s MAX_FDS from 1024 to 65536 #3090
• OCPBUGS-97939: bump containernetworking/cni v0.8.0 -> v1.3.0 #3044
• OCPBUGS-86033: Revert “[release-4.22] OCPBUGS-90721: NVIDIA-596: Enable dpu healthcheck” #3042
• OCPBUGS-84739: Use dedicated service accounts for multus pods #2985
• OCPBUGS-90721: NVIDIA-596: Enable dpu healthcheck #3009
• OCPBUGS-89244: NVIDIA-554: DPU-host mode: use ConfigMap for OVN feature enablement instead of per-node script gating #3029
• OCPBUGS-88307: Remove –enable-interconnect flag from OVN-K manifests #3028
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-113579: Update PPC help description #1613
• OCPBUGS-112554: Use Add() instead of AddRateLimited() for routine Profile enqueues #1601
• OCPBUGS-104615: E2E: LLC: Restore uncore cache annotation to true #1577
• OCPBUGS-105873: BUG-FIX Latency Test #1583
• OCPBUGS-105535: Add missing annotations to NetworkPolicy manifests #1580
• OCPBUGS-99265: E2E: LLC: Pass fresh ctx variable to DeferCleanup functions #1567
• OCPBUGS-92011: e2e: fix: clear hugepages before switching kernelPageSize to 4k #1554
• OCPBUGS-99290: e2e: fix broken checks and rework netqueue tests to avoid ARM ethtool blackout flakes #1568
• OCPBUGS-98400: E2E: Add functional test cases checking GOMAXPROCS #1561
• OCPBUGS-98062: E2E: Fix tuned active profile check for wrapped performance profiles #1559
• OCPBUGS-87153: E2E: Refactor OVS affinity tests into shared helpers and add new workload-partitioning and control-plane reboot test cases. #1537
• OCPBUGS-93924: Let cri-o manage the GOMAXPROC for burstable pods #1555
• OCPBUGS-86071: perf: latency: compute memory resources dynamically #1520
• OCPBUGS-87891: Enable timer migrations for all use-cases #1542
• OCPBUGS-87158: e2e: Remove unnecessary len(numa) < 2 skip gates #1538
• OCPBUGS-84431: Bump github.com/moby/spdystream from v0.5.0 to v0.5.1 #1529
• OCPBUGS-86247: Revert stalld backend to sched_debug #1523
• OCPBUGS-86024: Requeue PerformanceStatus update when status write fails #1518
• OCPBUGS-85020: e2e: Add irqbalance StartLimitBurst >= 100 config test #1506
• Full changelog

cluster-olm-operator

• OCPBUGS-94187: Scale to replicas=2 and enable PDB on HighlyAvailable topology [release-4.22] #215
• Full changelog

cluster-openshift-apiserver-operator

• OCPBUGS-100168: Allow Prometheus to scrape check-endpoints metrics on port 17698 #743
• OCPBUGS-105443: Add HostToContainer mountPropagation to node-pullsecrets volume mount #748
• Full changelog

cluster-openshift-controller-manager-operator

• OCPBUGS-86054: e2e network policy tests #436
• Full changelog

cluster-policy-controller

• OCPBUGS-98222: add serviceAccountToken volume type to psalabelsyncer #192
• Full changelog

cluster-samples-operator

• OKD-379: Fix missing namespace in database template image triggers #701
• Full changelog

cluster-storage-operator

• OCPBUGS-112334: Pass management cluster proxy env vars to CSI driver operator deployments #740
• OCPBUGS-96622: Bump golang.org/x/net to v0.55.0 #722
• Full changelog

cluster-version-operator

• OCPBUGS-104545: pkg/cvo/egress: Disable Proxy respect on HyperShift #1438
• OCPBUGS-98572: Tolerate unknown template fields during payload loading #1421
• OCPBUGS-77681: Updating cluster-version-operator-container image to be consistent with ART for 4.22 #1331
• Full changelog

console

• OCPBUGS-115003: Validate chart URL in /api/helm/verify to prevent SSRF #17118
• OCPBUGS-114725: display operators in catalog when Tech Preview enabled #17114
• OCPBUGS-111417: make cloud provider fields optional during operator install #17014
• OCPBUGS-109521: Remove unscoped CSV watch from ClusterNotUpgradeableAlert #17013
• OCPBUGS-100519, OCPBUGS-101795: Fix CVE-2026-69153 and CVE-2026-45623 - Bump postcss #17054
• OCPBUGS-112271: Fix flaky TestAsyncCache backend test #17045
• OCPBUGS-105478: [release-4.22] OCPBUGS-83799: Fix Workloads sidebar ordering when DeploymentConfig is unavailable #16928
• Fix OCPBUGS-99414: CVE-2026-59877 #16834
• OCPBUGS-95402: Fix orphaned shell processes in pod terminal on WebSocket disconnect #16694
• Fix for OCPBUGS-101812: CVE-2026-69152 #16930
• Fix for OCPBUGS-105894: CVE-2026-73086 #16965
• OCPBUGS-87832: Use stable username hash for user-settings ConfigMap names #16565
• OCPBUGS-105611: [release-4.22] Fix leading whitespace in Quick Start execute code snippets #16951
• OCPBUGS-89705: Fix CVE-2026-12143 form-data CRLF injection #16644
• OCPBUGS-100059: quickstart page i18n misses (Fix Quick Starts i18n bundle lookup for zh-CN) #16869
• OCPBUGS-100317: Fix pod terminal not rendering until resize #16892
• OCPBUGS-100307: Re-enable Knative Cypress e2e tests #16889
• Fix OCPBUGS-98791: CVE-2026-48801 #16852
• OCPBUGS-99545: ‘0 B’ is shown on details page when create pvc with ‘EiB’ unit #16807
• OCPBUGS-99548: Incorrect translations for ‘CatalogSources’ and ‘OperatorGroups’ in l… #16809
• OCPBUGS-99259: Disable Knative e2e Cypress tests in CI #16784
• OCPBUGS-98437: CVE-2026-59869 bump js-yaml #16768
• OCPBUGS-97600: Fix devfile sample import by adding fallback for parent resolution failures #16706
• OCPBUGS-88028: Bump follow-redirects from 1.15.3 to 1.16.0 to fix CVE-2026-40895 #16665
• OCPBUGS-95580: Fix unnecessary error on Node Terminal tab #16696
• OCPBUGS-88748: [release-4.22] webpack-dev-server: Information disclosure and denial of service via improper proxy configuration #16656
• OCPBUGS-89337: Use fixed artifacts directory to prevent stale temp dir accumulation #16638
• OCPBUGS-90636: Fix RoleBindings tab error for non-cluster-admin users #16662
• OCPBUGS-90495: Projects cannot be filtered by display name #16652
• OCPBUGS-90110: Fix ColumnManagementModal not showing NamespaceColumnHelpText #16643
• Fix for OCPBUGS-84470: CVE-2026-4800 #16573
• OCPBUGS-87933, OCPBUGS-87985: Bump protobufjs and shell-quote #16619
• OCPBUGS-87997: Bump fast-uri to 3.1.2 to fix CVE-2026-6322 #16605
• OCPBUGS-88304: Allow VolumeSnapshot restore when parent PVC is deleted #16592
• OCPBUGS-87096: fixing severity not showing number of issues #16575
• OCPBUGS-86580: Fix macOS Option key in pod terminal #16504
• OCPBUGS-77804: Update Console 4.22 plugin SDK CHANGELOG #16521
• OCPBUGS-86700: Fix and re-enable operator e2e tests disabled for createRoot #16518
• OCPBUGS-77804: prep for 4.22 GA SDK publish #16508
• OCPBUGS-86410: Fix Shipwright detail pages crashing with React error #310 #16485
• OCPBUGS-86239: Adapt dashboard Prometheus polling interval based on query response time #16469
• OCPBUGS-84963: Remove DataViewToolbar wrapper from bottom pagination #16483
• OCPBUGS-86227: Show empty state instead of 403 error for users without projects #16467
• OCPBUGS-86222: Use ETag conditional requests for OpenAPI v2 fetching #16466
• OCPBUGS-86228: Re-enable add-flow-ci.feature e2e tests disabled for createRoot adoption #16468
• OCPBUGS-86064: Enable Topology e2e tests #16458
• OCPBUGS-83940: bump gRPC-Go to v1.79.3 #16443
• OCPBUGS-83416: [release-4.22] CVE-2026-26996 Bump minimatch library #16278
• OCPBUGS-85505: Add Suspense boundary to LazyRoutePage for plugin routes #16438
• OCPBUGS-85494: Prevent binary secret data corruption when editing #16435
• NO-JIRA: enable multi-architecture yarn builds #16415
• OCPBUGS-85196: Remove @console imports from SDK dist #16407
• OCPBUGS-84843: i18n upload/download routine task - version 4.22 #16382
• OCPBUGS-85114: Fix SDK publish workflow for Yarn Berry #16403
• And 3 elided commits (e.g. from squash or rebase merges)
• Full changelog

console-operator

• OCPBUGS-81121: clone bump documentation base url #1154
• OCPBUGS-100387: Sort plugin list to make them deterministic #1165
• OCPBUGS-97828, OCPBUGS-97829: Stabilize telemetry config to prevent continuous console pod rollouts #1183
• OCPBUGS-94186: Add retry for transient API errors to prevent Degraded blips #1181
• OCPBUGS-94188: use ObservedGeneration to determine Progressing status #1180
• OCPBUGS-92829: Clean up old temp directories in downloads pod #1177
• OCPBUGS-86118: Add unit and e2e test coverage for cert rotation redeployment #1161
• OCPBUGS-83941: bump gRPC-Go package #1157
• NETOBSERV-2296: add missing annotations on netobserv quickstart #1097
• OCPBUGS-85507: feat: use 2 replicas for console on tnf #1155
• Full changelog

container-networking-plugins, containernetworking-plugins-microshift

• OCPBUGS-83942: Bump grpc to 1.79.3 to address CVE-2026-33186 #243
• OCPBUGS-87165: CI build root image tag sync with ART 4.22 #240
• Full changelog

coredns

• OCPBUGS-86189: [release-4.22] OCPBUGS-83943: Bump gRPC to v1.79.3 to resolve CVE-2026-33186 #185
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-83552: Bump google.golang.org/grpc to 1.79.3 #395
• UPSTREAM-SYNC: Sync release-4.22 with upstream release-1.35 #381
• OCPBUGS-85241: Updating ose-openstack-cloud-controller-manager-container image to be consistent with ART for 4.22 #392
• OCPBUGS-85239: Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.22 #390
• OCPBUGS-85240: Updating csi-driver-manila-container image to be consistent with ART for 4.22 #391
• Full changelog

csi-driver-nfs

• OCPBUGS-84434: Bump github.com/moby/spdystream@v0.5.1 #190
• Full changelog

csi-external-attacher

• OCPBUGS-83947: Bump google.golang.org/grpc to v1.79.3 #107
• Full changelog

csi-external-provisioner

• OCPBUGS-96626: Bump golang.org/x/net to v0.57.0 #148
• OCPBUGS-84435: Bump github.com/moby/spdystream to v0.5.1 in 4.22 #136
• OCPBUGS-82033: Bump google.golang.org/grpc to 1.79.3 #133
• Full changelog

csi-external-resizer

• OCPBUGS-101944: Bump golang.org/x/net to v0.53.0 #209
• OCPBUGS-82031: Bump google.golang.org/grpc to v1.79.3 #199
• Full changelog

csi-external-snapshot-metadata

• OCPBUGS-83948: Bump google.golang.org/grpc to v1.79.3 #19
• Full changelog

csi-external-snapshotter, csi-snapshot-controller

• OCPBUGS-88723: UPSTREAM: 1392: Fix VolumeSnapshotContent deletion #222
• OCPBUGS-83949, OCPBUGS-83952: Bump google.golang.org/grpc to v1.79.3 #216
• Full changelog

csi-node-driver-registrar

• OCPBUGS-84436: Bump github.com/moby/spdystream to v0.5.1 #105
• Full changelog

docker-builder

• OCPBUGS-86910: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.22 #538
• Full changelog

docker-registry

• [release 4.22] OCPBUGS-114405: GCP: Support Alternate Universe Domain #476
• Full changelog

egress-router-cni

• OCPBUGS-97939: bump containernetworking/cni to v1.3.0 #103
• Full changelog

etcd

• OCPBUGS-82497: Rebase v3.6.13 for openshift-4.22 #393
• Full changelog

gcp-cloud-controller-manager

• OCPBUGS-99228: Fix node.kubernetes.io/exclude-from-external-load-balancers on masters #130
• OCPBUGS-83965, OCPBUGS-84447: Update grpc and spdy dependencies #117
• Full changelog

gcp-cluster-api-controllers

• UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.12.0 (b9b055d) into release-4.22 #294
• OCPBUGS-83966: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.11.2 (14609a0) into release-4.22 #293
• Full changelog

gcp-pd-csi-driver

• OCPBUGS-114412: Add Universe Domain Support #129
• Full changelog

gcp-pd-csi-driver-operator

• OCPBUGS-115120: detect GCP Dedicated and use hyperdisk-balanced StorageClass #204
• OCPBUGS-86574: VolumeSnapshot snapshot-c9v52 is not ready within 5m0s… #193
• OCPBUGS-83968: Bump google.golang.org/grpc to v1.79.3 #183
• Full changelog

haproxy-router

• OCPBUGS-101956: Bump golang.org/x/net from v0.48.0 to v0.53.0 #834
• OCPBUGS-87166: Prevent SSRF via FQDN-typed EndpointSlices #813
• OCPBUGS-87167: Strip X-SSL-* headers for plain HTTP #793
• OCPBUGS-83969: Bump google.golang.org/grpc to v1.79.3 #776
• Full changelog

hyperkube, kube-proxy, pod

• OCPBUGS-98604: Add NodeSelectorAdjuster admission plugin for HCP clusters (part 2) #2767
• OCPBUGS-98604: Add NodeSelectorAdjuster admission plugin for HCP clusters #2718
• NO-JIRA: Update openshift-hack/rebase.sh #2733
• OCPBUGS-96637: Bump golang.org/x/net from v0.47.0 to v0.55.0 #2737
• OCPBUGS-91744, OCPBUGS-93526, OCPBUGS-93551, OCPBUGS-95549, OCPBUGS-95556: Bump golang.org/x/crypto/ssh to v0.52.0 #2725
• OCPBUGS-99766: UPSTREAM: <carry>: upkeep cpu partitioning admission webhook #2724
• OCPBUGS-90148: Rebase v1.35.6 in release-4.22 #2707
• OCPBUGS-93787: backport kubernetes/conformance umbrella suite #2705
• OCPBUGS-86898: Fix performance related issues when selinux metrics are emitted #2676
• OCPBUGS-85499: Bump Kubernetes v1.35.5 to release-4.22 #2664
• OCPBUGS-85415: [release-4.22] Improve WatchList test robustness #2663
• Full changelog

hypershift

• CNTRLPLANE-4321: Cherry-pick kube-scheduler metrics support #9490
• CNTRLPLANE-4024: feat(azure): support managed HSM for KMS encryption #9437
• OCPBUGS-98328: fix(kubevirt): use only first MachineInternalIP per family in EndpointSlice endpoints #8979
• CNTRLPLANE-3774: [release-4.22] fix: control-plane-operator: improve opaque conditions #9058
• OCPBUGS-111083: fix(hcco): run kas-connection-checker as non-root #9320
• OCPBUGS-105866: remove redhat-marketplace catalog from HyperShift #9289
• OCPBUGS-105591: [release-4.22] use in-cluster service for oauth-server #9127
• OCPBUGS-96711: Apply MetricsSet relabel configs to KAS ServiceMonitor #8901
• OCPBUGS-105421: fix(upsert): add desired-state hash to detect spec field removals #9259
• OCPBUGS-101964: [release-4.22] OCPBUGS-98213: fix router component ordering to prevent missing HAProxy backends #9212
• OCPBUGS-100332: fix(konnectivity): conditionally prefer IPv4 based on HCP network config [release-4.22] #9191
• OCPBUGS-100141: Add proxy env vars to AWS cloud-controller-manager deployment #9156
• OCPBUGS-94518: add ACR pull identity to worker cloud.conf and VMSS #8865
• OCPBUGS-100299: Avoid printing errors twice #9183
• OCPBUGS-94170: fix registry override matching and propagation to init containers #8877
• OCPBUGS-100176: Remove hardcoded quay.io credentials from EnsureGlobalPullSecret test #9169
• OCPBUGS-90086: [release-4.22] clear stale EtcdRecoveryActive failure condition when etcd is healthy #8806
• OCPBUGS-99554: fix(backport): konnectivity agent auth to 4.22 #9077
• OCPBUGS-99299: [release-4.22] OCPBUGS-86296: Propagate management cluster proxy env vars to konnectivity sidecar #8592
• CNTRLPLANE-3884: Add spec.monitoring API for metrics forwarding #8872
• OCPBUGS-97921: fix(nodepool): skip CNI-internal IPs in ClusterNetworkCIDRConflict check #8948
• OCPBUGS-98627: Skip Azure topology LB scope override for ARO HCP IngressController #8998
• OCPBUGS-98220: fix(cpo,hcco): prevent premature KAS convergence during KMS key rotation [release-4.22] #8972
• OCPBUGS-90083: Fix NodePool reconciliation failure when updating mirrored immutable ConfigMaps #8811
• OCPBUGS-89236: Handle CA bundle aggregation delay by requeuing revocation #8746
• CNTRLPLANE-3749: feat(api,cpo): add observedGeneration to ControlPlaneComponentStatus #8868
• OCPBUGS-93921: bump catalog image version cap from 4.21 to 4.22 #8861
• OCPBUGS-88325: fix(cpo) delete terminated MCD pods to retry in-place upgrades #8729
• OCPBUGS-87364: Gate Route watch on management cluster capability #8692
• CNTRLPLANE-3661: add etcd data re-encryption after encryption key rotation (#8219) #8790
• OCPBUGS-88356: fix(cpo): deduplicate VPC endpoint subnets by AZ #8724
• CNTRLPLANE-3619: backport API-driven Azure topology and private connectivity (Phase 1) #8721
• OCPBUGS-90563: Fix metrics-proxy unbounded memory growth #8788
• OCPBUGS-89352: build(operator): drop hypershift-no-cgo from operator container images #8756
• OCPBUGS-86912: [release-4.22] Stop controllers fighting over HCP status #8632
• OCPBUGS-86039: OCPBUGS-62177: [release-4.22] Verify cert revocation against all KAS pods #8538
• OCPBUGS-86578: bootstrap serving certs at hypershift operator startup #8599
• OCPBUGS-86354: add Konflux pipeline definitions for CPO 4.22 #8608
• OCPBUGS-86354: set limits for aro.openshift.io/swift-nic in request overrides for ARO swift #8564
• OCPBUGS-85620: Fix webhook TLS failure after service-ca to self-managed cert migration #8513
• OCPBUGS-83836: add missing RBAC for webhook configurations #8295
• OCPBUGS-84939: [release-4.22] add CP pull-secret watches for in-place propagation #8408
• OCPBUGS-86026: Fix metrics-proxy deployment failure due to dots in volume names #8534
• OCPBUGS-85779: Add AWS ISO domains to konnectivity IsCloudAPI #8447
• OCPBUGS-85659: Clarify –base-domain flag default behavior #8525
• ACM-33601: use the latest ubi9 nginx image #8465
• OCPBUGS-78988: bump go builder and ubi images #8457
• CNTRLPLANE-2939: Coordinate CRD lifecycle with Cluster CAPI Operator #8442
• OCPBUGS-85104: fix, cno, skip cloud-network-config-controller check on non-cloud platforms #8438
• Full changelog

ibm-cloud-controller-manager

• OCPBUGS-83973: Upgrade grpc for CVE-2026-33186 #105
• Full changelog

ibm-vpc-block-csi-driver

• OCPBUGS-83974: Bump google.golang.org/grpc to v1.79.3 #147
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-83774: Bump google.golang.org/grpc to v1.79.3 #171
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-101965: Replace golang.org/x/net with openshift-sustaining/net #176
• Full changelog

ibmcloud-machine-controllers

• OCPBUGS-96641: bump golang.org/x/net to v0.57.0 #99
• Full changelog

insights-operator

• OCPBUGS-105227: secrets and configmap revisions count gathering #1339
• OCPBUGS-100173: Update installer dependency to use tagged version #1332
• OCPBUGS-100154: [release-4.22] Fix indentation bug on livenessProbe #1330
• OCPBUGS-96642: [release-4.22] Upgrade Golang and net library #1327
• OCPBUGS-98383: controlplanemachinesets gatherer #1318
• OCPBUGS-98153: update HyperShift deployment manifest #1315
• OCPBUGS-98381: Optimize the CPU usage of insights-runtime-extractor #1317
• OCPBUGS-88026: fall back to kube-system/global-pull-secret for Insights token #1305
• OCPBUGS-86818: extractor controller #1296
• OCPBUGS-86013: add trusted-ca-bundle to gatherin job #1290
• OCPBUGS-83976: Bump google.golang.org/grpc to v1.79.3 #1287
• Full changelog

ironic

• OCPBUGS-105863: update ironic pin to include CVE-2026-54423 fix (release-4.22) #889
• OCPBUGS-100167: Update openstack-ironic commit hash for CVE-2026-44918 #874
• OCPBUGS-88478: Update openstack-ironic commit hash in requirements.cachito that addresses CVE-2026-43003 #860
• OCPBUGS-98873: Selectively backport Redfish firmware update fix to 4.22 #870
• OCPBUGS-84369: selectively backport servicing patches to 4.22 #848
• Full changelog

ironic-agent

• OCPBUGS-99897: Bump ironic-python-agent pinned commit for CVE-2026-66138 #294
• OCPBUGS-88478: Update commit SHA in requirements.cachito to address CVE-2026-43003 #266
• OCPBUGS-95061: Replace individual package removal with a single rpm -e loop #282
• OCPBUGS-95061: Replace dnf remove with rpm -e to prevent dependency removal #270
• Full changelog

keepalived-ipfailover

• OCPBUGS-99767: Reinstall tzdata if /usr/share/zoneinfo is missing #247
• Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.22 #229
• OCPBUGS-72552: Updating openshift-enterprise-base-rhel9-minimal-container image to be consistent with ART for 4.22 #220
• Full changelog

kube-state-metrics

• OCPBUGS-87957: embed timezone data in kube-state-metrics binary #150
• OCPBUGS-87957: fix: don’t panic on CronJobs with unparseable schedules #147
• OCPBUGS-86653: [Backport] Handle DeletedFinalStateUnknown panic #142
• Full changelog

kubevirt-cloud-controller-manager

• OCPBUGS-69842: Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART for 4.22 #59
• Full changelog

kubevirt-csi-driver

• OCPBUGS-83883: Bump google.golang.org/grpc to v1.79.3 #107
• Full changelog

machine-api-operator

• OCPBUGS-101989: Bump golang.org/x/net from v0.49.0 to v0.53.0 #1541
• OCPBUGS-115165: CORS-4521: GCP: Add regional permission #1538
• OCPBUGS-85102: Populate status label selector for scale subresource #1497
• Full changelog

machine-config-operator

• OCPBUGS-121849: Fix vsphere network absolute paths #6512
• OCPBUGS-120671: Skip vsphere fd-unmatched machinesets for bootimage updates #6494
• OCPBUGS-119936: Increase TC-74751 Eventually timeout for vSphere OVA upload #6492
• OCPBUGS-115401: Update message for MachineOSBuildFailed condition #6479
• OCPBUGS-116943: Update AMI Whitelist #6489
• OCPBUGS-112785: Revert TNF Graceful node shutdown #6461
• OCPBUGS-114418: [release-4.22] OCPBUGS-113615: Azure confidential clusters should be flagged by skew enforcement #6459
• OCPBUGS-114392: Use kubernetes scheme in drain controller event recorder #6458
• AGENT-1583: post-feature promotion (NoRegistryClusterInstall) openshift/api dependencies bump #6418
• OCPBUGS-112618: Fix upstreams for CoreDNS pods on Cloud platforms #6438
• OCPBUGS-112614: OCPBUGS-109739: Increase rpm-ostree rebase retry backoff and preserve error #6436
• OCPBUGS-105521: Fix SHA idempotency test in nmstate-configuration.sh #6392
• OCPBUGS-105929: Fix duplicate template error and e2es #6397
• Fixes OCPBUGS-105190: increase LRU cache and prefetch timeout for PinnedImageSet #6372
• OCPBUGS-105447: fix nil pointer panic in IRI controller informer race #6390
• OCPBUGS-105212: [release-4.22] Part2 Migrate OCB test-case #6374
• OCPBUGS-105213: Update AMI Whitelist #6375
• OCPBUGS-104563: Use providerSpec.Template in vSphere machineset reconciliation #6370
• OCPBUGS-100583: [release-4.22] Part 1 Migrate OCB test cases from openshift-tests-private #6361
• OCPBUGS-104576: [release-4.22] Add extension verification failure test cases OCP-89090 and OCP-89095 #6367
• OCPBUGS-104451: [release-4.22] fix fencing_validator ocdebug fence dispatch race condition #6360
• OCPBUGS-100293: Fix TC 43278 failing when release payload has no MCO commit info #6351
• AGENT-1548: Backport NoRegistryClusterInstall feature to release-4.22 #6323
• OCPBUGS-99712: Add TC 88940- Apply password only if changes exist #6339
• OCPBUGS-98962: [release4.22] MCO-1997: MCO-2297: MCO-2440 Add osImagestream test-cases #6301
• OCPBUGS-93804: move cleanUpDuplicatedMC to avoid double reboot on first updated Master node #6240
• OCPBUGS-97904: Inject proxy into MCC deployment #6275
• OCPBUGS-96145: Update AMI Whitelist #6260
• OCPBUGS-89329: Fix kubelet certificate wait loop in criometricsproxy.yaml #6200
• OCPBUGS-93743: Fix bootupd workaround in old nodes #6239
• OCPBUGS-92026: OCPEDGE-2474: TNF - Add fencing taint/untaint alert agent scripts #6230
• OCPBUGS-92022: MCO-2275: Migrate OS layering tests from openshift-tests-private #6218
• [release:4.22] OCPBUGS-88330: MCO-2209 MCO-2213 MCO-2207: Migrate security, daemon, and kernel TCs from mco.go #6171
• OCPBUGS-91958: Boot image skew check silently passes when MachineSets are reconcile-skipped #6227
• OCPBUGS-91954: Make vsphere template updates atomic #6226
• OCPBUGS-88184: Replace wildcard permissions with explicit verbs and resources in MCC ClusterRole #6170
• OCPBUGS-88683: Process rebuild annotation on machine-os-builder restart #6190
• OCPBUGS-87981: Fix MCP.status.osImageStream #6164
• OCPBUGS-88496: Update custom containerfile OCB test to work in a disconnected environment #6188
• OCPBUGS-88001: Add mco_extensions.go e2e test suite for MCO extension install, enable, and validation #6184
• OCPBUGS-88329: In OCB to check when a image is removed the old build is triggered again and the MC should start updating directly and no new MOSB should be triggred #6175
• OCPBUGS-87019: fix: update arbiter crio config #6142
• OCPBUGS-88487: make test 69755 more stable #6186
• OCPBUGS-88331: [release-4.22] Remove skopeo-install script #6176
• OCPBUGS-84679: add RootCA cert to the sysContextBuilder certs #5897
• OCPBUGS-87840: vSphere boot image hot loop detection is non-functional due to stable template names #6157
• OCPBUGS-87900: [release-4.22] OCPBUGS-87181: MCO-2211: MCO-2210: MCO-2234 MCO-Migrate MCO tests from openshift-tests-private #6148
• OCPBUGS-88114: Skip chrony-wait on first node join #6168
• OCPBUGS-88120: daemon: don’t pull/extract extensions for all OS updates #6169
• OCPBUGS-87811: [release-4.22] OCPBUGS-87550: Update TC-88366 to check osImageStream status after update completes #6153
• OCPBUGS-87161: [release-4.22] OCPBUGS-87027: MCO-2212: MCO-2213: Migrate mco_observability and mco_daemon test-suite #6143
• OCPBUGS-86865: Stabilize ocl 4.22 #6115
• OCPBUGS-86985: MCO-2297: Add OCP-88366 and OCP-88814 for osImageStream with osImageURL #6083
• OCPBUGS-87163: Remove trailing newline (\n) characters in klog message strings #6147
• OCPBUGS-86893: Add version guard for OSStream rendering #6123
• OCPBUGS-86997: [release-4.22] OCPBUGS-86984: MCO-2273: MCO-2215: MCO-2183: Migrate remaining TCs from mco.go to MCO, units, kublet suite #6126
• OCPBUGS-86297: configure-ovs: copy lldp mode to br-ex port #6073
• OCPBUGS-86870: Update AMI Whitelist #6116
• OCPBUGS-86732: remove tests using base images older than 4.13 #6104
• OCPBUGS-86769: Adapt test ‘54922 - daemon: add check before updating kernel #6103
• MCO-2233: Migrate Kernel related MCO test-cases #5860
• OCPBUGS-86262: Verify extension packages are installed #6071
• OCPBUGS-85127: Fix wrong early exit during kubelet MCs regeneration #6009
• OCPBUGS-86267: Fix CVE-2026-33186 #6072
• OCPBUGS-85341: Apply password only if changes exist #6053
• OCPBUGS-86047: Manually uncordoned nodes are not automatically re-cordoned #6060
• OCPBUGS-85124: use --delete-if-present for karg removal #6007
• OCPBUGS-85626: only check password hash in /etc/shadow #6042
• OCPBUGS-85651: BareMetal skew e2e fails patching provisioning CR after CBO webhook fix #6047
• OCPBUGS-85198: Add terminationMessagePolicy to build pod containers #6012
• OCPBUGS-85481: Add fix for ossImagestream status #6026
• OCPBUGS-84813: Include RootCA in the temporal CC #5904
• OCPBUGS-84406: Fix CVE-2026-34986 #5986
• OCPBUGS-85156: Bootloader update attempt should be conditional #6011
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

machine-os-images

• OCPBUGS-87872: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #96
• OCPBUGS-85477: Force rebuild for OCP 4.22 #88
• Full changelog

metallb-frr

• OCPBUGS-86568: Generate fallback BGP router-id on IPv6-only nodes #133
• Full changelog

monitoring-plugin

• OLS-3921: disable button shrink #1189
• OCPBUGS-98787: replace outdated react-linkify dependency #1150
• OCPBUGS-98787: replace outdated react-linkify dependency #1145
• OCPBUGS-98432: fix for CVE-2026-59869 #1114
• OU-1240: Makefile and package.json to enable test-frontend-ci #1094
• OCPBUGS-99032: Fix CVE-2026-49978 - bump DOMPurify to >= 3.4.7 #1085
• OCPBUGS-99234: graph redirect query parameter #1070
• OU-651: Fix AlertRules page to display user defined loki alerts #1057
• Fix for OCPBUGS-89698: CVE-2026-12143 #1053
• Fix for OCPBUGS-91628: CVE-2026-45736 #1023
• NO-JIRA: fix unit test severitySort and incidents #1036
• Fix for OCPBUGS-94005: CVE-2026-13676 #1028
• OU-1396: [release-4.22] fix: use replace to set variables to avoid navigation trap #1019
• OCPBUGS-87979: [release-4.22] fast-uri: URI authority bypass due to improper delimiter handling #989
• OCPBUGS-88413: [release-4.22] Fix CVE-2026-44494: bump axios to ^1.16.0 via overrides #997
• OU-1360: reset queries when namespace changes in dev perspective #934
• OU-1366: prevent namespace and project desync #935
• Full changelog

multus-admission-controller

• OCPBUGS-85569: Bump Go version to 1.25.0 for ML-KEM/PQC support #116
• Full changelog

multus-cni, multus-cni-microshift

• OCPBUGS-120682: [Release 4.22] Cherry-pick fix for the issue of stripping delegate datastore config on CNI DEL, leaking IPAM addresses #350
• OCPBUGS-114732: [release-4.22] Revert “Sort DeviceIDs in GetPodResourceMap for deterministic ordering” #346
• Full changelog

network-interface-bond-cni

• OCPBUGS-97943: Update OWNERS for release-4.22 #119
• Full changelog

networking-console-plugin

• OCPBUGS-82108: Marked strings for i18n in NetworkPolicies list page #475
• OCPBUGS-98788: Updating linkify-it to 5.0.2 to fix CVE-2026-48801 #464
• OCPBUGS-92205: Updated doc links based on release #438
• OCPBUGS-92196: fixed translations of pod column titles #437
• OCPBUGS-88314: Trim subnet input in UDN creation form #431
• CNV-90049: [UDN] Add condition column to the list page #432
• OCPBUGS-88025: Fix empty state Create button links #429
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

oauth-proxy

• OCPBUGS-93565: update x/crypto to v0.52.0 and x/net to v0.55.0 #369
• OCPBUGS-86213: Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART for 4.22 #366
• Full changelog

oauth-server

• OCPBUGS-84381: Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 #233
• Full changelog

oc-mirror

• OCPBUGS-92814: v1/e2e: reduce helm download flakiness #1455
• OCPBUGS-90149: fix(helm): tolerate v-prefix version mismatch in disk-to-mirror #1448
• OCPBUGS-105777: fix for CVE-2026-39829 #1501
• OCPBUGS-98716: Include index image sub-digests in dry run mapping.txt #1474
• OCPBUGS-93773: Make dry-run also generate cluster-resources #1457
• OCPBUGS-97946: skip manifest list signatures #1469
• OCPBUGS-88484: Include tag+digest images in both IDMS and ITMS #1442
• OCPBUGS-87806: fixes race condition when mirroring operator catalogs #1434
• OCPBUGS-84389: Upgrade go-jose to v4.1.4 to fix CVE-2026-34986 #1419
• Full changelog

olm-catalogd, olm-operator-controller

• OCPBUGS-102011: Bump golang.org/x/net to v0.53.0 to address CVE-2026-33814 #793
• OCPBUGS-100305: Fix cache path to avoid /var/cache/dnf conflict #783
• OCPBUGS-99298: increase catalog HTTP client timeout from 10s to 5m #768
• OCPBUGS-94187: enable OLMv1 topology-based deployment scaling e2e test #761
• OCPBUGS-94187: Backport HA topology deployment scaling to release-4.22 #758
• Full changelog

openshift-apiserver

• OCPBUGS-87022: fix concurrent map race in project authorization cache #653
• OCPBUGS-84454: Address CVE-2026-35469 #651
• Full changelog

openstack-machine-api-provider

• OCPBUGS-97826: Revendor CAPO #175
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-101995: Bump golang.org/x/net to v0.53.0 to address CVE-2026-33814 #1362
• OCPBUGS-95441, OCPBUGS-95458: bumping containerd to v1.7.33 #1353
• OCPBUGS-84411, OCPBUGS-84412: Update github.com/go-jose/go-jose/v4 to v4.1.4 [release-4.22] #1292
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-112496: NO-JIRA: Branch Sync main to release-4.22 [08-18-2026] #3406
• OCPBUGS-99043: Branch Sync main to release-4.22 [08-13-2026] #3394
• OCPBUGS-105515, OCPBUGS-105604: Branch Sync main to release-4.22 [08-10-2026] #3373
• OCPBUGS-95560: Branch Sync main to release-4.22 [08-04-2026] #3358
• OCPBUGS-100119, OCPBUGS-95064: Branch Sync main to release-4.22 [07-28-2026] #3333
• OCPBUGS-99043: Branch Sync main to release-4.22 [07-16-2026] #3304
• OCPBUGS-88733, OCPBUGS-88734: Branch Sync main to release-4.22 [06-16-2026] #3252
• OCPBUGS-88718: Branch Sync main to release-4.22 [06-10-2026] #3244
• OCPBUGS-87214: Branch Sync main to release-4.22 [06-05-2026] #3232
• OCPBUGS-84384: CORENET-6537: OTE: Add external container support to infra provider #3147
• Full changelog

powervs-block-csi-driver

• OCPBUGS-101580, OCPBUGS-102012, OCPBUGS-93554, OCPBUGS-95566, OCPBUGS-96671, OCPBUGS-98019: Fix CVE-2026-39828, 46597, 39835, 27136, 2502 and 33814 #142
• Full changelog

powervs-block-csi-driver-operator

• OCPBUGS-101993: Mitigate CVE-2026-33814 by bumping golang.org/x/net to v0.57.0 #121
• OCPBUGS-107713: Mitigate CVE-2026-41178 by bumping go.opentelemetry.io/otel/sdk to v1.44.0 #120
• Full changelog

prometheus

• OCPBUGS-93732: fix for CVE-2026-42151 #355
• OCPBUGS-93919: fix(tsdb): temporarily ignore Direct IO enablement errors on unsupported filesystems #339
• OCPBUGS-92818: bump x/crypto, x/net, and otel dependencies to fix CVEs #337
• OCPBUGS-88666: remote: validate snappy decoded length before allocation in read endpoint #330
• OCPBUGS-86248: fix: TLS client cert rotation when no CA is configured #313
• OCPBUGS-84010: bump google.golang.org/grpc to v1.79.3 [release-4.22] #310
• Full changelog

prometheus-alertmanager

• OCPBUGS-98185: build(deps): bump github.com/hashicorp/memberlist from 0.5.4 to 0.6.0 #157
• OCPBUGS-99442: embed tzdata in the alertmanager binary #141
• Full changelog

route-controller-manager

• OCPBUGS-86184: OCPBUGS-83892: Update grpc-go and x/net #90
• Full changelog

stream-coreos, stream-coreos-extensions

• OCPBUGS-105444: NetworkManager-ovs has moved to RHCOS #1956
• NO-JIRA: Containerfile: restore meta.json as last layer in image #1950
• And 7 elided commits (e.g. from squash or rebase merges)
• Full changelog

telemeter

• OCPBUGS-84021: update google.golang.org/grpc #605
• Full changelog

tests

• OCPBUGS-115199: fix: skip MCPs with non-ready nodes during MCN property validation #31525
• OCPBUGS-114438: Fix probe termination test to use pod status instead of kubelet event text #31568
• OCPBUGS-115161: Raise status polling timeout and write bound #31582
• OCPBUGS-115191: fix: adjusting DaemonSet test to dynamically compute expected pod count #31522
• AGENT-1583: post-feature promotion (NoRegistryClusterInstall) openshift/api dependencies bump #31565
• OCPBUGS-111831: tolerate one NotReady CP node in EnsureNodesReady for degraded TNF #31527
• OCPBUGS-100438: retry GetVotingMemberNames on transient etcd client fails #31506
• OCPBUGS-88711: Backport node_e2e test migrations #31306
• AGENT-1549: Backport NoRegistryClusterInstall feature to release-4.22 #31406
• SPLAT-2802: Added VVCDO OTE binary to extensionBinary list #31321
• SPLAT-2794: Added 3CMO OTE binary to extensionBinary list #31303
• OCPBUGS-90522: Use AdminPolicyBasedExternalRoute CR for external gateway test #31317
• OCPBUGS-87838: support Parents field on origin test suites #31270
• OCPBUGS-92656: bump openshift-tests-extension to fix klog stdout parsing on 4.22 #31349
• OCPBUGS-92048: fix PDB AlwaysAllow test failure on IPv6-primary dualstack clusters #31337
• OCPBUGS-92047: Fix AWS DualStack CI jobs consistently encounter 2 EgressFirewall Test Failures #31336
• OCPBUGS-85708: Raise OpenStack operator watch limits #31183
• OCPBUGS-85655: Validate no WAL corruption when both nodes shutdown gracefully #31174
• OCPBUGS-85515: Verify dynamic revision bump for etcd during kernel crash #31166
• OCPBUGS-85339: Add e2e tests for KubeletEnsureSecretPulledImages feature gate #31148
• OCPBUGS-85089: Allow OVN-Kubernetes CIDROverlap pathological events #31141
• Full changelog

thanos

• fix for OCPBUGS-107709: CVE-2026-41178 #202
• OCPBUGS-105471: UPSTREAM: <carry>: bump google.golang.org/grpc to v1.82.1 (GHSA-hrxh-6v49-42gf) #199
• COO-2034, OCPBUGS-105219, OCPBUGS-105223, OCPBUGS-105224: [release-4.22] vendor: bump vulnerable Go dependencies for GovCloud CVE remediation #197
• OCPBUGS-96898: Address CVE-2026-39882 #192
• OCPBUGS-92813: Fix CVE-2026-39883 #191
• Full changelog

vsphere-cluster-api-controllers

• OCPBUGS-84028: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.15.3 (e917f8e) into release-4.22 #108
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• UPSTREAM: 187: OCPBUGS-96686: Bump golang.org/x/net to v0.50.0-sec.4 #195
• OCPBUGS-95573: Bump golang.org/x/crypto/ssh to v0.48.0-sec.1 #189
• OCPBUGS-92190: Rebase 3.6.2 on 422 #188
• OCPBUGS-83636: Bump spdystream to v0.5.1 #180
• Full changelog

vsphere-csi-driver-operator

• SPLAT-2802: Port vSphere hybrid OTE to release-4.22 #349
• Full changelog

vsphere-problem-detector

• OCPBUGS-102050: Bump golang.org/x/net to 0.53.0 #229
• OCPBUGS-86866: Fixed compute cluster permission logic for single fd with read-only custom resourcepool #221
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

CentOS Stream CoreOS 10 (stream-coreos)

Package List

• cri-o-1.35.5-1.el10s
• kernel-6.12.0-254.el10
• openshift-kubelet-4.22.0-202606041959.p2.g7250fd5.assembly.stream.el9
• systemd-257-31.el10

Full list (493 packages)

• NetworkManager-1:1.58.0-1.el10
• NetworkManager-cloud-setup-1:1.58.0-1.el10
• NetworkManager-libnm-1:1.58.0-1.el10
• NetworkManager-ovs-1:1.58.0-1.el10
• NetworkManager-tui-1:1.58.0-1.el10
• WALinuxAgent-udev-2.14.0.1-3.el10
• aardvark-dns-4:2.0.0-2.el10
• acl-2.4.0-2.el10
• afterburn-5.10.0-2.el10
• afterburn-dracut-5.10.0-2.el10
• alternatives-1.30-2.el10
• amd-gpu-firmware-20260722-25.el10
• amd-ucode-firmware-20260722-25.el10
• attr-2.6.0-2.el10
• audit-4.0.3-5.el10
• audit-libs-4.0.3-5.el10
• audit-rules-4.0.3-5.el10
• authselect-1.5.3-1.el10
• authselect-libs-1.5.3-1.el10
• azure-vm-utils-0.7.0-1.el10
• basesystem-11-22.el10
• bash-5.2.26-6.el10
• bash-completion-1:2.11-16.el10
• bind-libs-32:9.18.33-19.el10
• bind-license-32:9.18.33-19.el10
• bind-utils-32:9.18.33-19.el10
• bootc-1.16.6-1.el10
• bootupd-0.2.35-1.el10
• bsdtar-3.7.7-8.el10
• bubblewrap-0.10.0-3.el10
• bzip2-1.0.8-25.el10
• bzip2-libs-1.0.8-25.el10
• c-ares-1.34.6-4.el10
• ca-certificates-2025.2.80_v9.0.305-102.el10
• catatonit-5:0.2.1-4.el10
• centos-gpg-keys-10.0-23.el10
• centos-release-cloud-1-1.el10s
• centos-release-nfv-common-1-5.el10s
• centos-release-virt-common-1-1.el10s
• centos-stream-release-10.0-23.el10
• centos-stream-repos-10.0-23.el10
• checkpolicy-3.11-1.el10
• chrony-4.8-2.el10
• cifs-utils-7.6-2.el10
• clevis-23-2.el10
• clevis-dracut-23-2.el10
• clevis-luks-23-2.el10
• clevis-pin-tpm2-0.5.5-1.el10
• clevis-systemd-23-2.el10
• cloud-utils-growpart-0.33-11.el10
• composefs-1.0.8-1.el10
• composefs-libs-1.0.8-1.el10
• conmon-3:2.2.1-4.el10
• conmon-rs-0.6.6-2.el10s
• console-login-helper-messages-0.21.3-10.el10
• console-login-helper-messages-issuegen-0.21.3-10.el10
• console-login-helper-messages-profile-0.21.3-10.el10
• container-selinux-4:2.250.0-1.el10
• containers-common-6:6.0-2.el10
• containers-common-extra-6:6.0-2.el10
• coreos-installer-0.26.0-1.el10
• coreos-installer-bootinfra-0.26.0-1.el10
• coreutils-9.5-12.el10
• coreutils-common-9.5-12.el10
• cpio-2.15-3.el10
• cracklib-2.9.11-8.el10
• cracklib-dicts-2.9.11-8.el10
• cri-o-1.35.5-1.el10s
• cri-tools-1.35.0-1.el10s
• criu-4.2-8.el10
• criu-libs-4.2-8.el10
• crun-1.28-1.el10
• crypto-policies-20260708-1.git988eb15.el10
• crypto-policies-scripts-20260708-1.git988eb15.el10
• cryptsetup-2.8.6-2.el10
• cryptsetup-libs-2.8.6-2.el10
• curl-8.12.1-6.el10
• cyrus-sasl-gssapi-2.1.28-27.el10
• cyrus-sasl-lib-2.1.28-27.el10
• dbus-1:1.14.10-6.el10
• dbus-broker-36-4.el10
• dbus-common-1:1.14.10-6.el10
• dbus-libs-1:1.14.10-6.el10
• dbus-tools-1:1.14.10-6.el10
• device-mapper-10:1.02.215-3.el10
• device-mapper-event-10:1.02.215-3.el10
• device-mapper-event-libs-10:1.02.215-3.el10
• device-mapper-libs-10:1.02.215-3.el10
• device-mapper-multipath-0.9.9-19.el10
• device-mapper-multipath-libs-0.9.9-19.el10
• device-mapper-persistent-data-1.3.2-1.el10
• diffutils-3.10-8.el10
• dmidecode-1:3.6-5.el10
• dnf-4.20.0-26.el10
• dnf-data-4.20.0-26.el10
• dnsmasq-2.90-7.el10
• dosfstools-4.2-12.el10
• dracut-107-9.el10
• dracut-network-107-9.el10
• dracut-squash-107-9.el10
• duktape-2.7.0-10.el10
• e2fsprogs-1.47.1-5.el10
• e2fsprogs-libs-1.47.1-5.el10
• efi-filesystem-6-8.el10
• efibootmgr-18-9.el10
• efivar-libs-39-3.el10
• elfutils-default-yama-scope-0.195-1.el10
• elfutils-libelf-0.195-1.el10
• elfutils-libs-0.195-1.el10
• erofs-utils-1.8.10-1.el10
• ethtool-2:6.19-1.el10
• expat-2.7.3-2.el10
• fcoe-utils-1.0.34-11.gitb233050.el10
• file-5.45-12.el10
• file-libs-5.45-12.el10
• filesystem-3.18-17.el10
• findutils-1:4.10.0-5.el10
• firewalld-filesystem-2.4.3-2.el10
• flatpak-session-helper-1.18.0-1.el10
• fstrm-0.6.1-12.el10
• fuse-common-3.16.2-5.el10
• fuse-libs-2.9.9-25.el10
• fuse3-3.16.2-5.el10
• fuse3-libs-3.16.2-5.el10
• fwupd-2.1.6-1.el10
• gawk-5.3.0-6.el10
• gdbm-1:1.23-14.el10
• gdbm-libs-1:1.23-14.el10
• gettext-envsubst-0.22.5-6.el10
• gettext-libs-0.22.5-6.el10
• gettext-runtime-0.22.5-6.el10
• git-core-2.52.0-1.el10
• glib2-2.80.4-14.el10
• glibc-2.39-133.el10
• glibc-common-2.39-133.el10
• glibc-gconv-extra-2.39-133.el10
• glibc-minimal-langpack-2.39-133.el10
• gmp-1:6.2.1-12.el10
• gnupg2-2.4.5-5.el10
• gnutls-3.8.10-4.el10
• gobject-introspection-1.79.1-7.el10
• gpgme-1.23.2-6.el10
• grep-3.11-10.el10
• grub2-common-1:2.12-54.el10
• grub2-efi-x64-1:2.12-54.el10
• grub2-pc-1:2.12-54.el10
• grub2-pc-modules-1:2.12-54.el10
• grub2-tools-1:2.12-54.el10
• grub2-tools-minimal-1:2.12-54.el10
• gssproxy-0.9.2-10.el10
• gzip-1.13-3.el10
• hostname-3.23-14.el10
• hwdata-0.379-10.9.el10
• ignition-2.26.0-4.el10
• ignition-grub-2.26.0-4.el10
• ima-evm-utils-1.6.2-6.el10
• info-7.1-6.el10
• inih-58-3.el10
• intel-gpu-firmware-20260722-25.el10
• ipcalc-1.0.3-12.el10
• iproute-7.0.0-2.el10
• iproute-tc-7.0.0-2.el10
• iptables-libs-1.8.11-15.el10
• iptables-nft-1.8.11-15.el10
• iputils-20240905-5.el10
• irqbalance-2:1.9.4-6.el10
• iscsi-initiator-utils-6.2.1.11-2.git4b3e853.el10
• iscsi-initiator-utils-iscsiuio-6.2.1.11-2.git4b3e853.el10
• isns-utils-libs-0.103-1.el10
• jansson-2.14-3.el10
• jose-14-102.el10
• jq-1.7.1-13.el10
• json-c-0.18-3.el10
• json-glib-1.8.0-5.el10
• kbd-2.6.4-7.el10
• kbd-legacy-2.6.4-7.el10
• kbd-misc-2.6.4-7.el10
• kdump-utils-1.0.58-15.el10
• kernel-6.12.0-254.el10
• kernel-core-6.12.0-254.el10
• kernel-modules-6.12.0-254.el10
• kernel-modules-core-6.12.0-254.el10
• kernel-modules-extra-6.12.0-254.el10
• kexec-tools-2.0.32-3.el10
• keyutils-1.6.3-5.el10
• keyutils-libs-1.6.3-5.el10
• kmod-31-13.el10
• kmod-libs-31-13.el10
• kpartx-0.9.9-19.el10
• krb5-libs-1.21.3-11.el10
• less-661-3.el10
• libacl-2.4.0-2.el10
• libaio-0.3.112-1.el10
• libarchive-3.7.7-8.el10
• libassuan-2.5.6-6.el10
• libattr-2.6.0-2.el10
• libbasicobjects-0.1.1-58.el10
• libblkid-2.40.2-20.el10
• libbpf-2:1.7.0-2.el10
• libcap-2.69-7.el10
• libcap-ng-0.9.3-2.el10
• libcbor-0.11.0-3.el10
• libcollection-0.7.0-58.el10
• libcom_err-1.47.1-5.el10
• libcomps-0.1.21-3.el10
• libconfig-1.7.3-10.el10
• libcurl-minimal-8.12.1-6.el10
• libdhash-0.5.0-58.el10
• libdnf-0.73.1-17.el10
• libdnf-plugin-subscription-manager-1.30.15-1.el10
• libdrm-2.4.128-1.el10
• libeconf-0.6.2-4.el10
• libedit-3.1-52.20230828cvs.el10
• libev-4.33-15.el10
• libevent-2.1.12-16.el10
• libfdisk-2.40.2-20.el10
• libffi-3.4.4-10.el10
• libfido2-1.14.0-7.el10
• libgcc-14.4.1-1.el10
• libgcrypt-1.11.0-7.el10
• libgomp-14.4.1-1.el10
• libgpg-error-1.50-2.el10
• libibverbs-62.0-2.el10
• libicu-74.2-5.el10
• libidn2-2.3.7-3.el10
• libini_config-1.3.1-58.el10
• libipa_hbac-2.13.1-2.el10
• libjcat-0.2.2-2.el10
• libjose-14-102.el10
• libkcapi-1.5.0-3.el10
• libkcapi-hasher-1.5.0-3.el10
• libkcapi-hmaccalc-1.5.0-3.el10
• libksba-1.6.7-2.el10
• libldb-4.24.5-100.el10
• libluksmeta-10-1.el10
• libmaxminddb-1.9.1-4.el10
• libmicrohttpd-1:1.0.0-3.el10
• libmnl-1.0.5-7.el10
• libmodulemd-2.15.0-12.el10
• libmount-2.40.2-20.el10
• libmspack-0.10.1-0.14.alpha.el10
• libndp-1.9-2.el10
• libnet-1.3-7.el10
• libnetfilter_conntrack-1.0.9-12.el10
• libnfnetlink-1.0.2-3.el10
• libnfsidmap-1:2.8.3-8.el10
• libnftnl-1.3.0-3.el10
• libnghttp2-1.68.0-5.el10
• libnl3-3.11.0-1.el10
• libnvme-1.16.2-1.el10
• libpath_utils-0.2.1-58.el10
• libpcap-14:1.10.4-7.el10
• libpciaccess-0.16-16.el10
• libpkgconf-2.1.0-3.el10
• libpwquality-1.4.5-13.el10
• libref_array-0.1.5-58.el10
• librepo-1.19.0-1.el10
• libseccomp-2.5.6-1.el10
• libselinux-3.11-1.el10
• libselinux-utils-3.11-1.el10
• libsemanage-3.11-1.el10
• libsepol-3.11-1.el10
• libsmartcols-2.40.2-20.el10
• libsmbclient-4.24.5-100.el10
• libsolv-0.7.33-5.el10
• libss-1.47.1-5.el10
• libsss_certmap-2.13.1-2.el10
• libsss_idmap-2.13.1-2.el10
• libsss_nss_idmap-2.13.1-2.el10
• libsss_sudo-2.13.1-2.el10
• libstdc++-14.4.1-1.el10
• libtalloc-2.4.4-100.el10
• libtasn1-4.20.0-5.el10
• libtdb-1.4.15-100.el10
• libtevent-0.17.1-100.el10
• libtirpc-1.3.5-1.el10
• libtool-ltdl-2.4.7-14.el10
• libunistring-1.1-10.el10
• liburing-2.12-1.el10
• libusb1-1.0.30-1.el10
• libutempter-1.2.1-15.el10
• libuuid-2.40.2-20.el10
• libuv-1:1.52.1-1.el10
• libverto-0.3.2-10.el10
• libverto-libev-0.3.2-10.el10
• libwbclient-4.24.5-100.el10
• libxcrypt-4.4.36-10.el10
• libxml2-2.12.5-15.el10
• libxmlb-0.3.28-1.el10
• libxslt-1.1.39-10.el10
• libyaml-0.2.5-16.el10
• libzstd-1.5.5-9.el10
• linux-firmware-20260722-25.el10
• linux-firmware-whence-20260722-25.el10
• lldpad-1.1.1-4.gitf1dd9eb.el10
• lmdb-libs-0.9.32-4.el10
• logrotate-3.22.0-5.el10
• lsof-4.98.0-7.el10
• lua-libs-5.4.8-1.el10
• luksmeta-10-1.el10
• lvm2-10:2.03.41-3.el10
• lvm2-libs-10:2.03.41-3.el10
• lz4-libs-1.9.4-8.el10
• lzo-2.10-14.el10
• makedumpfile-1.7.8-1.el10
• mdadm-4.4-4.el10
• microcode_ctl-4:20260210-1.el10
• mokutil-2:0.7.2-5.el10
• mpdecimal-2.5.1-12.el10
• mpfr-4.2.1-8.el10
• nano-8.1-3.el10
• ncurses-base-6.4-15.20240127.el10
• ncurses-libs-6.4-15.20240127.el10
• net-tools-2.0-0.73.20160912git.el10
• netavark-4:2.0.0-2.el10
• nettle-3.10.1-1.el10
• newt-0.52.24-5.el10
• nfs-utils-1:2.8.3-8.el10
• nftables-1:1.1.5-6.el10
• nmap-ncat-4:7.92-5.el10
• nmstate-2.2.61-1.el10
• npth-1.6-21.el10
• nss-altfiles-2.23.0-6.el10
• numactl-2.0.19-3.el10
• numactl-libs-2.0.19-3.el10
• numad-0.5-50.20251104git.el10
• nvidia-gpu-firmware-20260722-25.el10
• nvme-cli-2.16-2.el10
• oniguruma-6.9.9-7.el10
• open-vm-tools-13.0.10-1.el10
• openldap-2.6.13-1.el10
• openshift-clients-4.22.0-202605222252.p2.g062bc54.assembly.stream.el9
• openshift-kubelet-4.22.0-202606041959.p2.g7250fd5.assembly.stream.el9
• openssh-9.9p1-28.el10
• openssh-clients-9.9p1-28.el10
• openssh-server-9.9p1-28.el10
• openssl-1:3.5.7-2.el10
• openssl-fips-provider-1:3.5.7-2.el10
• openssl-libs-1:3.5.7-2.el10
• openvswitch-selinux-extra-policy-1.0-36.el10s
• openvswitch3.5-3.5.3-5.el10s
• os-prober-1.81-9.el10
• ose-aws-ecr-image-credential-provider-4.22.0-202605191551.p2.gb4bad3f.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.22.0-202605292128.p2.g0e3fc8d.assembly.stream.el9
• ose-crio-credential-provider-4.22.0-202602261640.p2.g83d4961.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.22.0-202605192117.p2.gea31ab8.assembly.stream.el9
• ostree-2026.2-1.el10
• ostree-grub2-2026.2-1.el10
• ostree-libs-2026.2-1.el10
• p11-kit-0.26.4-1.el10
• p11-kit-trust-0.26.4-1.el10
• pam-1.6.1-11.el10
• pam-libs-1.6.1-11.el10
• passt-0^20260728.gf8df3f1-1.el10
• passt-selinux-0^20260728.gf8df3f1-1.el10
• pciutils-3.13.0-6.el10
• pciutils-libs-3.13.0-6.el10
• pcre2-10.44-1.el10.3
• pcre2-syntax-10.44-1.el10.3
• pkgconf-2.1.0-3.el10
• pkgconf-m4-2.1.0-3.el10
• pkgconf-pkg-config-2.1.0-3.el10
• podman-7:6.0.2-1.el10
• podman-sequoia-0.4.0~pqc.3-1.el10
• policycoreutils-3.11-1.el10
• policycoreutils-python-utils-3.11-1.el10
• polkit-125-6.el10
• polkit-libs-125-6.el10
• popt-1.19-8.el10
• procps-ng-4.0.4-13.el10
• protobuf-c-1.5.0-6.el10
• psmisc-23.6-8.el10
• python3-3.12.13-3.el10
• python3-audit-4.0.3-5.el10
• python3-charset-normalizer-3.4.2-1.el10
• python3-cloud-what-1.30.15-1.el10
• python3-dateutil-1:2.9.0.post0-1.el10
• python3-dbus-1.3.2-8.el10
• python3-decorator-5.1.1-12.el10
• python3-distro-1.9.0-5.el10
• python3-dnf-4.20.0-26.el10
• python3-dnf-plugin-versionlock-4.7.0-11.el10
• python3-dnf-plugins-core-4.7.0-11.el10
• python3-file-magic-5.45-12.el10
• python3-gobject-base-3.46.0-7.el10
• python3-gobject-base-noarch-3.46.0-7.el10
• python3-hawkey-0.73.1-17.el10
• python3-idna-3.7-4.el10
• python3-iniparse-0.5-10.el10
• python3-inotify-0.9.6-36.el10
• python3-libcomps-0.1.21-3.el10
• python3-libdnf-0.73.1-17.el10
• python3-librepo-1.19.0-1.el10
• python3-libs-3.12.13-3.el10
• python3-libselinux-3.11-1.el10
• python3-libsemanage-3.11-1.el10
• python3-packaging-24.2-2.el10
• python3-pexpect-4.9.0-6.el10
• python3-pip-wheel-23.3.2-11.el10
• python3-policycoreutils-3.11-1.el10
• python3-ptyprocess-0.7.0-9.el10
• python3-pyyaml-6.0.1-19.el10
• python3-requests-2.32.4-1.el10
• python3-rpm-4.19.1.1-25.el10
• python3-setools-4.7.0-1.el10
• python3-setuptools-69.0.3-12.el10
• python3-six-1.16.0-16.el10
• python3-subscription-manager-rhsm-1.30.15-1.el10
• python3-systemd-235-11.el10
• python3-urllib3-1.26.19-4.el10
• qemu-guest-agent-18:10.1.0-24.el10
• quota-1:4.09-10.el10
• quota-nls-1:4.09-10.el10
• rdma-core-62.0-2.el10
• readline-8.2-11.el10
• rpcbind-1.2.9-0.el10
• rpm-4.19.1.1-25.el10
• rpm-build-libs-4.19.1.1-25.el10
• rpm-libs-4.19.1.1-25.el10
• rpm-ostree-2026.2-1.el10
• rpm-ostree-libs-2026.2-1.el10
• rpm-plugin-audit-4.19.1.1-25.el10
• rpm-plugin-selinux-4.19.1.1-25.el10
• rpm-plugin-syslog-4.19.1.1-25.el10
• rpm-sequoia-1.10.2.3-1.el10
• rpm-sign-libs-4.19.1.1-25.el10
• rsync-3.4.4-1.el10
• samba-client-libs-4.24.5-100.el10
• samba-common-4.24.5-100.el10
• samba-core-libs-4.24.5-100.el10
• samba-ndr-libs-4.24.5-100.el10
• sed-4.9-5.el10
• selinux-policy-42.1.26-1.el10
• selinux-policy-targeted-42.1.26-1.el10
• setup-2.14.5-7.el10
• sg3_utils-1.48-10.el10
• sg3_utils-libs-1.48-10.el10
• shadow-utils-2:4.15.0-13.el10
• shadow-utils-subid-2:4.15.0-13.el10
• shared-mime-info-2.3-8.el10
• shim-x64-16.1-1.el10
• skopeo-2:1.23.0-1.el10
• slang-2.3.3-8.el10
• snappy-1.1.10-7.el10
• socat-1.7.4.4-9.el10
• sos-4.11.2-3.el10
• sqlite-libs-3.46.1-5.el10
• ssh-key-dir-0.1.4-9.el10
• sssd-2.13.1-2.el10
• sssd-ad-2.13.1-2.el10
• sssd-client-2.13.1-2.el10
• sssd-common-2.13.1-2.el10
• sssd-common-pac-2.13.1-2.el10
• sssd-ipa-2.13.1-2.el10
• sssd-krb5-2.13.1-2.el10
• sssd-krb5-common-2.13.1-2.el10
• sssd-ldap-2.13.1-2.el10
• sssd-nfs-idmap-2.13.1-2.el10
• sssd-proxy-2.13.1-2.el10
• stalld-1.26.3-1.el10
• strace-6.12-3.el10
• subscription-manager-1.30.15-1.el10
• subscription-manager-rhsm-certificates-20220623-6.el10
• sudo-1.9.17-9.p2.el10
• systemd-257-31.el10
• systemd-journal-remote-257-31.el10
• systemd-libs-257-31.el10
• systemd-pam-257-31.el10
• systemd-udev-257-31.el10
• tar-2:1.35-11.el10
• tmux-3.3a-14.20230918gitb202a2f.el10
• toolbox-0.3-3.el10
• tpm2-tools-5.7-5.el10
• tpm2-tss-4.1.3-6.el10
• tpm2-tss-fapi-4.1.3-6.el10
• tzdata-2026c-1.el10
• unbound-anchor-1.25.1-1.el10
• unbound-libs-1.25.1-1.el10
• userspace-rcu-0.14.0-7.el10
• util-linux-2.40.2-20.el10
• util-linux-core-2.40.2-20.el10
• vim-data-2:9.1.083-15.el10
• vim-minimal-2:9.1.083-15.el10
• virt-what-1.27-3.el10
• which-2.21-44.el10
• xfsprogs-6.16.0-1.el10
• xmlsec1-1:1.2.39-3.el10
• xmlsec1-openssl-1:1.2.39-3.el10
• xz-1:5.6.2-4.el10
• xz-libs-1:5.6.2-4.el10
• zlib-ng-compat-2.2.3-3.el10
• zram-generator-1.1.2-14.el10
• zstd-1.5.5-9.el10

Changed:

• NetworkManager 1:1.56.0-1.el10 → 1:1.58.0-1.el10
• NetworkManager-cloud-setup 1:1.56.0-1.el10 → 1:1.58.0-1.el10
• NetworkManager-libnm 1:1.56.0-1.el10 → 1:1.58.0-1.el10
• NetworkManager-ovs 1:1.56.0-1.el10 → 1:1.58.0-1.el10
• NetworkManager-tui 1:1.56.0-1.el10 → 1:1.58.0-1.el10
• aardvark-dns 2:1.17.0-1.el10 → 4:2.0.0-2.el10
• acl 2.3.2-4.el10 → 2.4.0-2.el10
• afterburn 5.10.0-1.el10 → 5.10.0-2.el10
• afterburn-dracut 5.10.0-1.el10 → 5.10.0-2.el10
• amd-gpu-firmware 20260130-22.el10 → 20260722-25.el10
• amd-ucode-firmware 20260130-22.el10 → 20260722-25.el10
• attr 2.5.2-5.el10 → 2.6.0-2.el10
• authselect 1.5.2-1.el10 → 1.5.3-1.el10
• authselect-libs 1.5.2-1.el10 → 1.5.3-1.el10
• bind-libs 32:9.18.33-15.el10 → 32:9.18.33-19.el10
• bind-license 32:9.18.33-15.el10 → 32:9.18.33-19.el10
• bind-utils 32:9.18.33-15.el10 → 32:9.18.33-19.el10
• bootc 1.15.1-2.el10 → 1.16.6-1.el10
• bootupd 0.2.32-2.el10 → 0.2.35-1.el10
• c-ares 1.34.6-1.el10 → 1.34.6-4.el10
• centos-gpg-keys 10.0-21.el10 → 10.0-23.el10
• centos-stream-release 10.0-21.el10 → 10.0-23.el10
• centos-stream-repos 10.0-21.el10 → 10.0-23.el10
• checkpolicy 3.10-1.el10 → 3.11-1.el10
• cifs-utils 7.5-2.el10 → 7.6-2.el10
• clevis 22-1.el10 → 23-2.el10
• clevis-dracut 22-1.el10 → 23-2.el10
• clevis-luks 22-1.el10 → 23-2.el10
• clevis-pin-tpm2 0.5.3-9.el10 → 0.5.5-1.el10
• clevis-systemd 22-1.el10 → 23-2.el10
• conmon 3:2.2.1-3.el10 → 3:2.2.1-4.el10
• container-selinux 4:2.247.0-1.el10 → 4:2.250.0-1.el10
• containers-common 6:5.8-2.el10 → 6:6.0-2.el10
• containers-common-extra 6:5.8-2.el10 → 6:6.0-2.el10
• coreutils 9.5-7.el10 → 9.5-12.el10
• coreutils-common 9.5-7.el10 → 9.5-12.el10
• cri-o 1.35.2-1.el10s → 1.35.5-1.el10s
• criu 4.2-3.el10 → 4.2-8.el10
• criu-libs 4.2-3.el10 → 4.2-8.el10
• crun 1.27-1.el10 → 1.28-1.el10
• crypto-policies 20260216-1.git0e54016.el10 → 20260708-1.git988eb15.el10
• crypto-policies-scripts 20260216-1.git0e54016.el10 → 20260708-1.git988eb15.el10
• cryptsetup 2.8.1-2.el10 → 2.8.6-2.el10
• cryptsetup-libs 2.8.1-2.el10 → 2.8.6-2.el10
• curl 8.12.1-5.el10 → 8.12.1-6.el10
• dbus 1:1.14.10-5.el10 → 1:1.14.10-6.el10
• dbus-common 1:1.14.10-5.el10 → 1:1.14.10-6.el10
• dbus-libs 1:1.14.10-5.el10 → 1:1.14.10-6.el10
• dbus-tools 1:1.14.10-5.el10 → 1:1.14.10-6.el10
• device-mapper 10:1.02.210-2.el10 → 10:1.02.215-3.el10
• device-mapper-event 10:1.02.210-2.el10 → 10:1.02.215-3.el10
• device-mapper-event-libs 10:1.02.210-2.el10 → 10:1.02.215-3.el10
• device-mapper-libs 10:1.02.210-2.el10 → 10:1.02.215-3.el10
• device-mapper-persistent-data 1.3.0-1.el10 → 1.3.2-1.el10
• dnf 4.20.0-23.el10 → 4.20.0-26.el10
• dnf-data 4.20.0-23.el10 → 4.20.0-26.el10
• dnsmasq 2.90-5.el10 → 2.90-7.el10
• dracut 107-4.el10 → 107-9.el10
• dracut-network 107-4.el10 → 107-9.el10
• dracut-squash 107-4.el10 → 107-9.el10
• elfutils-default-yama-scope 0.194-2.el10 → 0.195-1.el10
• elfutils-libelf 0.194-2.el10 → 0.195-1.el10
• elfutils-libs 0.194-2.el10 → 0.195-1.el10
• ethtool 2:6.15-2.el10 → 2:6.19-1.el10
• expat 2.7.3-1.el10 → 2.7.3-2.el10
• file 5.45-9.el10 → 5.45-12.el10
• file-libs 5.45-9.el10 → 5.45-12.el10
• firewalld-filesystem 2.4.0-1.el10 → 2.4.3-2.el10
• flatpak-session-helper 1.16.0-9.el10 → 1.18.0-1.el10
• fwupd 2.0.19-2.el10 → 2.1.6-1.el10
• glib2 2.80.4-12.el10 → 2.80.4-14.el10
• glibc 2.39-117.el10 → 2.39-133.el10
• glibc-common 2.39-117.el10 → 2.39-133.el10
• glibc-gconv-extra 2.39-117.el10 → 2.39-133.el10
• glibc-minimal-langpack 2.39-117.el10 → 2.39-133.el10
• gnupg2 2.4.5-4.el10 → 2.4.5-5.el10
• gnutls 3.8.10-3.el10 → 3.8.10-4.el10
• gobject-introspection 1.79.1-6.el10 → 1.79.1-7.el10
• grub2-common 1:2.12-45.el10 → 1:2.12-54.el10
• grub2-efi-x64 1:2.12-45.el10 → 1:2.12-54.el10
• grub2-pc 1:2.12-45.el10 → 1:2.12-54.el10
• grub2-pc-modules 1:2.12-45.el10 → 1:2.12-54.el10
• grub2-tools 1:2.12-45.el10 → 1:2.12-54.el10
• grub2-tools-minimal 1:2.12-45.el10 → 1:2.12-54.el10
• hwdata 0.379-10.8.el10 → 0.379-10.9.el10
• ignition 2.26.0-2.el10 → 2.26.0-4.el10
• ignition-grub 2.26.0-2.el10 → 2.26.0-4.el10
• ima-evm-utils 1.6.2-5.el10 → 1.6.2-6.el10
• intel-gpu-firmware 20260130-22.el10 → 20260722-25.el10
• iproute 6.17.0-2.el10 → 7.0.0-2.el10
• iproute-tc 6.17.0-2.el10 → 7.0.0-2.el10
• iptables-libs 1.8.11-12.el10 → 1.8.11-15.el10
• iptables-nft 1.8.11-12.el10 → 1.8.11-15.el10
• iscsi-initiator-utils 6.2.1.11-0.git4b3e853.el10 → 6.2.1.11-2.git4b3e853.el10
• iscsi-initiator-utils-iscsiuio 6.2.1.11-0.git4b3e853.el10 → 6.2.1.11-2.git4b3e853.el10
• jq 1.7.1-11.el10 → 1.7.1-13.el10
• kernel 6.12.0-224.el10 → 6.12.0-254.el10
• kernel-core 6.12.0-224.el10 → 6.12.0-254.el10
• kernel-modules 6.12.0-224.el10 → 6.12.0-254.el10
• kernel-modules-core 6.12.0-224.el10 → 6.12.0-254.el10
• kernel-modules-extra 6.12.0-224.el10 → 6.12.0-254.el10
• krb5-libs 1.21.3-9.el10 → 1.21.3-11.el10
• libacl 2.3.2-4.el10 → 2.4.0-2.el10
• libaio 0.3.111-22.el10 → 0.3.112-1.el10
• libattr 2.5.2-5.el10 → 2.6.0-2.el10
• libblkid 2.40.2-19.el10 → 2.40.2-20.el10
• libbpf 2:1.7.0-1.el10 → 2:1.7.0-2.el10
• libcap-ng 0.8.4-6.el10 → 0.9.3-2.el10
• libcurl-minimal 8.12.1-5.el10 → 8.12.1-6.el10
• libdnf 0.73.1-15.el10 → 0.73.1-17.el10
• libdnf-plugin-subscription-manager 1.30.14-1.el10 → 1.30.15-1.el10
• libfdisk 2.40.2-19.el10 → 2.40.2-20.el10
• libgcc 14.3.1-4.4.el10 → 14.4.1-1.el10
• libgcrypt 1.11.0-6.el10 → 1.11.0-7.el10
• libgomp 14.3.1-4.4.el10 → 14.4.1-1.el10
• libibverbs 61.0-1.el10 → 62.0-2.el10
• libipa_hbac 2.12.0-3.el10 → 2.13.1-2.el10
• libldb 4.23.5-107.el10 → 4.24.5-100.el10
• libmount 2.40.2-19.el10 → 2.40.2-20.el10
• libnfsidmap 1:2.8.3-7.el10 → 1:2.8.3-8.el10
• libnghttp2 1.68.0-4.el10 → 1.68.0-5.el10
• libnvme 1.16.1-3.el10 → 1.16.2-1.el10
• libpwquality 1.4.5-12.el10 → 1.4.5-13.el10
• libselinux 3.10-1.el10 → 3.11-1.el10
• libselinux-utils 3.10-1.el10 → 3.11-1.el10
• libsemanage 3.10-1.el10 → 3.11-1.el10
• libsepol 3.10-1.el10 → 3.11-1.el10
• libsmartcols 2.40.2-19.el10 → 2.40.2-20.el10
• libsmbclient 4.23.5-107.el10 → 4.24.5-100.el10
• libsolv 0.7.33-2.el10 → 0.7.33-5.el10
• libsss_certmap 2.12.0-3.el10 → 2.13.1-2.el10
• libsss_idmap 2.12.0-3.el10 → 2.13.1-2.el10
• libsss_nss_idmap 2.12.0-3.el10 → 2.13.1-2.el10
• libsss_sudo 2.12.0-3.el10 → 2.13.1-2.el10
• libstdc++ 14.3.1-4.4.el10 → 14.4.1-1.el10
• libtalloc 2.4.3-100.el10 → 2.4.4-100.el10
• libtasn1 4.20.0-1.el10 → 4.20.0-5.el10
• libtdb 1.4.14-100.el10 → 1.4.15-100.el10
• libusb1 1.0.29-3.el10 → 1.0.30-1.el10
• libuuid 2.40.2-19.el10 → 2.40.2-20.el10
• libuv 1:1.51.0-1.el10 → 1:1.52.1-1.el10
• libwbclient 4.23.5-107.el10 → 4.24.5-100.el10
• libxml2 2.12.5-10.el10 → 2.12.5-15.el10
• libxmlb 0.3.24-1.el10 → 0.3.28-1.el10
• libxslt 1.1.39-8.el10 → 1.1.39-10.el10
• linux-firmware 20260130-22.el10 → 20260722-25.el10
• linux-firmware-whence 20260130-22.el10 → 20260722-25.el10
• lvm2 10:2.03.36-2.el10 → 10:2.03.41-3.el10
• lvm2-libs 10:2.03.36-2.el10 → 10:2.03.41-3.el10
• mdadm 4.4-3.el10 → 4.4-4.el10
• mokutil 2:0.7.2-4.el10 → 2:0.7.2-5.el10
• netavark 2:1.17.2-1.el10 → 4:2.0.0-2.el10
• nfs-utils 1:2.8.3-7.el10 → 1:2.8.3-8.el10
• nftables 1:1.1.5-3.el10 → 1:1.1.5-6.el10
• nmstate 2.2.59-1.el10 → 2.2.61-1.el10
• nvidia-gpu-firmware 20260130-22.el10 → 20260722-25.el10
• openldap 2.6.10-1.el10 → 2.6.13-1.el10
• openshift-clients 4.22.0-202604110549.p2.g66dee73.assembly.stream.el9 → 4.22.0-202605222252.p2.g062bc54.assembly.stream.el9
• openshift-kubelet 4.22.0-202604271615.p2.gb0a9fa6.assembly.stream.el9 → 4.22.0-202606041959.p2.g7250fd5.assembly.stream.el9
• openssh 9.9p1-26.el10 → 9.9p1-28.el10
• openssh-clients 9.9p1-26.el10 → 9.9p1-28.el10
• openssh-server 9.9p1-26.el10 → 9.9p1-28.el10
• openssl 1:3.5.5-2.el10 → 1:3.5.7-2.el10
• openssl-fips-provider 1:3.5.5-2.el10 → 1:3.5.7-2.el10
• openssl-libs 1:3.5.5-2.el10 → 1:3.5.7-2.el10
• ose-aws-ecr-image-credential-provider 4.22.0-202603272150.p2.ge73d6a3.assembly.stream.el9 → 4.22.0-202605191551.p2.gb4bad3f.assembly.stream.el9
• ose-azure-acr-image-credential-provider 4.22.0-202603191400.p2.g4c7a764.assembly.stream.el9 → 4.22.0-202605292128.p2.g0e3fc8d.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider 4.22.0-202604110549.p2.g4d9707e.assembly.stream.el9 → 4.22.0-202605192117.p2.gea31ab8.assembly.stream.el9
• ostree 2026.1-1.el10 → 2026.2-1.el10
• ostree-grub2 2026.1-1.el10 → 2026.2-1.el10
• ostree-libs 2026.1-1.el10 → 2026.2-1.el10
• p11-kit 0.26.2-1.el10 → 0.26.4-1.el10
• p11-kit-trust 0.26.2-1.el10 → 0.26.4-1.el10
• pam 1.6.1-10.el10 → 1.6.1-11.el10
• pam-libs 1.6.1-10.el10 → 1.6.1-11.el10
• passt 0^20251210.gd04c480-3.el10 → 0^20260728.gf8df3f1-1.el10
• passt-selinux 0^20251210.gd04c480-3.el10 → 0^20260728.gf8df3f1-1.el10
• podman 7:5.8.2-1.el10 → 7:6.0.2-1.el10
• podman-sequoia 0.4.0~pqc.2-1.el10 → 0.4.0~pqc.3-1.el10
• policycoreutils 3.10-2.el10 → 3.11-1.el10
• policycoreutils-python-utils 3.10-2.el10 → 3.11-1.el10
• polkit 125-4.el10 → 125-6.el10
• polkit-libs 125-4.el10 → 125-6.el10
• procps-ng 4.0.4-11.el10 → 4.0.4-13.el10
• python3 3.12.13-2.el10 → 3.12.13-3.el10
• python3-cloud-what 1.30.14-1.el10 → 1.30.15-1.el10
• python3-dnf 4.20.0-23.el10 → 4.20.0-26.el10
• python3-dnf-plugin-versionlock 4.7.0-10.el10 → 4.7.0-11.el10
• python3-dnf-plugins-core 4.7.0-10.el10 → 4.7.0-11.el10
• python3-hawkey 0.73.1-15.el10 → 0.73.1-17.el10
• python3-libdnf 0.73.1-15.el10 → 0.73.1-17.el10
• python3-libs 3.12.13-2.el10 → 3.12.13-3.el10
• python3-libselinux 3.10-1.el10 → 3.11-1.el10
• python3-libsemanage 3.10-1.el10 → 3.11-1.el10
• python3-pip-wheel 23.3.2-7.el10 → 23.3.2-11.el10
• python3-policycoreutils 3.10-2.el10 → 3.11-1.el10
• python3-rpm 4.19.1.1-23.el10 → 4.19.1.1-25.el10
• python3-setools 4.6.0-3.el10 → 4.7.0-1.el10
• python3-subscription-manager-rhsm 1.30.14-1.el10 → 1.30.15-1.el10
• python3-urllib3 1.26.19-3.el10 → 1.26.19-4.el10
• qemu-guest-agent 18:10.1.0-16.el10 → 18:10.1.0-24.el10
• rdma-core 61.0-1.el10 → 62.0-2.el10
• rpcbind 1.2.7-3.el10 → 1.2.9-0.el10
• rpm 4.19.1.1-23.el10 → 4.19.1.1-25.el10
• rpm-build-libs 4.19.1.1-23.el10 → 4.19.1.1-25.el10
• rpm-libs 4.19.1.1-23.el10 → 4.19.1.1-25.el10
• rpm-ostree 2026.1-4.el10 → 2026.2-1.el10
• rpm-ostree-libs 2026.1-4.el10 → 2026.2-1.el10
• rpm-plugin-selinux 4.19.1.1-23.el10 → 4.19.1.1-25.el10
• rpm-sequoia 1.10.1.1-2.el10 → 1.10.2.3-1.el10
• rpm-sign-libs 4.19.1.1-23.el10 → 4.19.1.1-25.el10
• rsync 3.4.1-3.el10 → 3.4.4-1.el10
• samba-client-libs 4.23.5-107.el10 → 4.24.5-100.el10
• samba-common 4.23.5-107.el10 → 4.24.5-100.el10
• selinux-policy 42.1.19-1.el10 → 42.1.26-1.el10
• selinux-policy-targeted 42.1.19-1.el10 → 42.1.26-1.el10
• sg3_utils 1.48-7.el10 → 1.48-10.el10
• sg3_utils-libs 1.48-7.el10 → 1.48-10.el10
• shadow-utils 2:4.15.0-11.el10 → 2:4.15.0-13.el10
• shadow-utils-subid 2:4.15.0-11.el10 → 2:4.15.0-13.el10
• shim-x64 15.8-5.el10 → 16.1-1.el10
• skopeo 2:1.22.2-2.el10 → 2:1.23.0-1.el10
• socat 1.7.4.4-8.el10 → 1.7.4.4-9.el10
• sssd 2.12.0-3.el10 → 2.13.1-2.el10
• sssd-ad 2.12.0-3.el10 → 2.13.1-2.el10
• sssd-client 2.12.0-3.el10 → 2.13.1-2.el10
• sssd-common 2.12.0-3.el10 → 2.13.1-2.el10
• sssd-common-pac 2.12.0-3.el10 → 2.13.1-2.el10
• sssd-ipa 2.12.0-3.el10 → 2.13.1-2.el10
• sssd-krb5 2.12.0-3.el10 → 2.13.1-2.el10
• sssd-krb5-common 2.12.0-3.el10 → 2.13.1-2.el10
• sssd-ldap 2.12.0-3.el10 → 2.13.1-2.el10
• sssd-nfs-idmap 2.12.0-3.el10 → 2.13.1-2.el10
• sssd-proxy 2.12.0-3.el10 → 2.13.1-2.el10
• subscription-manager 1.30.14-1.el10 → 1.30.15-1.el10
• sudo 1.9.17-4.p2.el10 → 1.9.17-9.p2.el10
• systemd 257-24.el10 → 257-31.el10
• systemd-journal-remote 257-24.el10 → 257-31.el10
• systemd-libs 257-24.el10 → 257-31.el10
• systemd-pam 257-24.el10 → 257-31.el10
• systemd-udev 257-24.el10 → 257-31.el10
• tmux 3.3a-13.20230918gitb202a2f.el10 → 3.3a-14.20230918gitb202a2f.el10
• tzdata 2026a-1.el10 → 2026c-1.el10
• unbound-anchor 1.24.2-7.el10 → 1.25.1-1.el10
• unbound-libs 1.24.2-7.el10 → 1.25.1-1.el10
• util-linux 2.40.2-19.el10 → 2.40.2-20.el10
• util-linux-core 2.40.2-19.el10 → 2.40.2-20.el10
• vim-data 2:9.1.083-10.el10 → 2:9.1.083-15.el10
• vim-minimal 2:9.1.083-10.el10 → 2:9.1.083-15.el10

Removed:

• avahi-libs 0.9~rc2-3.el10
• gpg-pubkey 764429e6-55567027
• samba-common-libs 4.23.5-107.el10

Added:

• python3-file-magic 5.45-12.el10
• python3-packaging 24.2-2.el10
• python3-pexpect 4.9.0-6.el10
• python3-ptyprocess 0.7.0-9.el10
• python3-pyyaml 6.0.1-19.el10
• python3-setuptools 69.0.3-12.el10
• rpm-plugin-audit 4.19.1.1-25.el10
• rpm-plugin-syslog 4.19.1.1-25.el10
• samba-core-libs 4.24.5-100.el10
• samba-ndr-libs 4.24.5-100.el10
• sos 4.11.2-3.el10

Extensions

Full list (112 packages)

• NetworkManager-libreswan-1.2.30-2.el10.x86_64
• binutils-2.41-65.el10.x86_64
• binutils-gold-2.41-65.el10.x86_64
• bison-3.8.2-9.el10.x86_64
• cmake-filesystem-3.31.8-1.el10.x86_64
• cpp-14.4.1-1.el10.x86_64
• elfutils-debuginfod-client-0.195-1.el10.x86_64
• elfutils-libelf-devel-0.195-1.el10.x86_64
• flex-2.6.4-19.el10.x86_64
• gcc-14.4.1-1.el10.x86_64
• glibc-devel-2.39-133.el10.x86_64
• groff-base-1.23.0-10.el10.x86_64
• kernel-6.12.0-254.el10.x86_64
• kernel-core-6.12.0-254.el10.x86_64
• kernel-devel-6.12.0-254.el10.x86_64
• kernel-headers-6.12.0-254.el10.x86_64
• kernel-modules-6.12.0-254.el10.x86_64
• kernel-modules-extra-6.12.0-254.el10.x86_64
• kernel-rt-core-6.12.0-254.el10.x86_64
• kernel-rt-devel-6.12.0-254.el10.x86_64
• kernel-rt-modules-6.12.0-254.el10.x86_64
• kernel-rt-modules-core-6.12.0-254.el10.x86_64
• kernel-rt-modules-extra-6.12.0-254.el10.x86_64
• krb5-pkinit-1.21.3-11.el10.x86_64
• krb5-workstation-1.21.3-11.el10.x86_64
• ldns-1.8.3-18.el10.x86_64
• libkadm5-1.21.3-11.el10.x86_64
• libmpc-1.3.1-7.el10.x86_64
• libqb-2.0.8-6.el10.x86_64
• libreswan-5.3.2-1.el10.x86_64
• libreswan-minimal-5.3.2-1.el10.x86_64
• libxcrypt-devel-4.4.36-10.el10.x86_64
• libzstd-devel-1.5.5-9.el10.x86_64
• lm_sensors-libs-3.6.0-20.el10.x86_64
• m4-1.4.19-11.el10.x86_64
• make-1:4.4.1-9.el10.x86_64
• ncurses-6.4-15.20240127.el10.x86_64
• nspr-4.39.0-5.el10.x86_64
• nss-3.124.0-5.el10.x86_64
• nss-softokn-3.124.0-5.el10.x86_64
• nss-softokn-freebl-3.124.0-5.el10.x86_64
• nss-sysinit-3.124.0-5.el10.x86_64
• nss-tools-3.124.0-5.el10.x86_64
• nss-util-3.124.0-5.el10.x86_64
• openssl-devel-1:3.5.7-2.el10.x86_64
• openvswitch3.5-ipsec-3.5.3-5.el10s.x86_64
• pcp-conf-7.1.5-2.el10.x86_64
• pcp-libs-7.1.5-2.el10.x86_64
• perl-AutoLoader-5.74-514.el10.noarch
• perl-B-1.89-514.el10.x86_64
• perl-Carp-1.54-511.el10.noarch
• perl-Class-Struct-0.68-514.el10.noarch
• perl-Data-Dumper-2.189-512.el10.x86_64
• perl-Digest-1.20-511.el10.noarch
• perl-Digest-MD5-2.59-6.el10.x86_64
• perl-DynaLoader-1.56-514.el10.x86_64
• perl-Encode-4:3.21-511.el10.x86_64
• perl-Errno-1.38-514.el10.x86_64
• perl-Exporter-5.78-511.el10.noarch
• perl-Fcntl-1.18-514.el10.x86_64
• perl-File-Basename-2.86-514.el10.noarch
• perl-File-Path-2.18-512.el10.noarch
• perl-File-Temp-1:0.231.100-512.el10.noarch
• perl-File-stat-1.14-514.el10.noarch
• perl-FileHandle-2.05-514.el10.noarch
• perl-Getopt-Long-1:2.58-3.el10.noarch
• perl-Getopt-Std-1.14-514.el10.noarch
• perl-HTTP-Tiny-0.088-512.el10.noarch
• perl-IO-1.55-514.el10.x86_64
• perl-IO-Socket-IP-0.42-512.el10.noarch
• perl-IO-Socket-SSL-2.085-3.el10.noarch
• perl-IPC-Open3-1.22-514.el10.noarch
• perl-MIME-Base64-3.16-511.el10.x86_64
• perl-Mozilla-CA-20231213-5.el10.noarch
• perl-NDBM_File-1.17-514.el10.x86_64
• perl-Net-SSLeay-1.94-9.el10.x86_64
• perl-POSIX-2.20-514.el10.x86_64
• perl-PathTools-3.91-512.el10.x86_64
• perl-Pod-Escapes-1:1.07-511.el10.noarch
• perl-Pod-Perldoc-3.28.01-512.el10.noarch
• perl-Pod-Simple-1:3.45-511.el10.noarch
• perl-Pod-Usage-4:2.03-511.el10.noarch
• perl-Scalar-List-Utils-5:1.63-511.el10.x86_64
• perl-SelectSaver-1.02-514.el10.noarch
• perl-Socket-4:2.038-511.el10.x86_64
• perl-Storable-1:3.32-511.el10.x86_64
• perl-Symbol-1.09-514.el10.noarch
• perl-Term-ANSIColor-5.01-512.el10.noarch
• perl-Term-Cap-1.18-511.el10.noarch
• perl-Text-ParseWords-3.31-511.el10.noarch
• perl-Text-Tabs+Wrap-2024.001-511.el10.noarch
• perl-Time-Local-2:1.350-511.el10.noarch
• perl-URI-5.27-3.el10.noarch
• perl-base-2.27-514.el10.noarch
• perl-constant-1.33-512.el10.noarch
• perl-if-0.61.000-514.el10.noarch
• perl-interpreter-4:5.40.2-514.el10.x86_64
• perl-libnet-3.15-512.el10.noarch
• perl-libs-4:5.40.2-514.el10.x86_64
• perl-locale-1.12-514.el10.noarch
• perl-mro-1.29-514.el10.x86_64
• perl-overload-1.37-514.el10.noarch
• perl-overloading-0.02-514.el10.noarch
• perl-parent-1:0.241-512.el10.noarch
• perl-podlators-1:5.01-511.el10.noarch
• perl-vars-1.05-514.el10.noarch
• protobuf-3.19.6-15.el10.x86_64
• python3-openvswitch3.5-3.5.3-5.el10s.x86_64
• sysstat-12.7.6-4.el10.x86_64
• usbguard-1.1.4-2.el10.x86_64
• usbguard-selinux-1.1.4-2.el10.noarch
• zlib-ng-compat-devel-2.2.3-3.el10.x86_64

CentOS Stream CoreOS base layer: 10 upgraded from 10.0.20260428-0 to 10.0.20260806-0

OCPBUGS-87872: Add support for hermetic builds via Cachi2 prefetched CoreOS base layer: ISOs #96

View changelog in Markdown or change previous release: 4.22.0-okd-scos.94.22.0-okd-scos.84.22.0-okd-scos.74.22.0-okd-scos.64.22.0-okd-scos.54.22.0-okd-scos.44.22.0-okd-scos.34.22.0-okd-scos.24.22.0-okd-scos.14.22.0-okd-scos.04.21.0-okd-scos.114.21.0-okd-scos.104.21.0-okd-scos.94.21.0-okd-scos.84.21.0-okd-scos.74.21.0-okd-scos.64.21.0-okd-scos.54.21.0-okd-scos.44.21.0-okd-scos.34.21.0-okd-scos.24.21.0-okd-scos.14.21.0-okd-scos.04.20.0-okd-scos.174.20.0-okd-scos.164.20.0-okd-scos.154.20.0-okd-scos.144.20.0-okd-scos.134.20.0-okd-scos.124.20.0-okd-scos.114.20.0-okd-scos.104.20.0-okd-scos.94.20.0-okd-scos.84.20.0-okd-scos.74.20.0-okd-scos.64.20.0-okd-scos.54.20.0-okd-scos.44.20.0-okd-scos.34.20.0-okd-scos.24.20.0-okd-scos.14.20.0-okd-scos.04.19.0-okd-scos.194.19.0-okd-scos.184.19.0-okd-scos.174.19.0-okd-scos.164.19.0-okd-scos.154.19.0-okd-scos.144.19.0-okd-scos.134.19.0-okd-scos.124.19.0-okd-scos.114.19.0-okd-scos.104.19.0-okd-scos.94.19.0-okd-scos.84.19.0-okd-scos.74.19.0-okd-scos.64.19.0-okd-scos.54.19.0-okd-scos.44.19.0-okd-scos.34.19.0-okd-scos.24.19.0-okd-scos.14.19.0-okd-scos.04.18.0-okd-scos.104.18.0-okd-scos.94.18.0-okd-scos.84.18.0-okd-scos.74.18.0-okd-scos.64.18.0-okd-scos.54.18.0-okd-scos.44.18.0-okd-scos.34.18.0-okd-scos.24.18.0-okd-scos.14.18.0-okd-scos.04.17.0-okd-scos.34.17.0-okd-scos.24.17.0-okd-scos.14.17.0-okd-scos.04.16.0-okd-scos.14.16.0-okd-scos.0───5.1.0-0.okd-scos-nightly-2026-09-09-0423585.1.0-0.okd-scos-nightly-2026-09-01-1341515.1.0-0.okd-scos-nightly-2026-09-01-0141515.1.0-0.okd-scos-nightly-2026-08-31-1341515.1.0-0.okd-scos-nightly-2026-08-31-0137135.1.0-0.okd-scos-nightly-2026-08-30-1337135.1.0-0.okd-scos-nightly-2026-08-30-013713───5.1.0-0.okd-scos-2026-09-08-1301285.1.0-0.okd-scos-2026-08-06-182818───5.0.0-0.okd-scos-nightly-2026-09-09-0757475.0.0-0.okd-scos-nightly-2026-09-08-1750045.0.0-0.okd-scos-nightly-2026-09-08-0550045.0.0-0.okd-scos-nightly-2026-09-07-1441185.0.0-0.okd-scos-nightly-2026-09-07-0232555.0.0-0.okd-scos-nightly-2026-09-06-1403225.0.0-0.okd-scos-nightly-2026-09-06-0203225.0.0-0.okd-scos-nightly-2026-09-05-1403225.0.0-0.okd-scos-nightly-2026-09-03-1205165.0.0-0.okd-scos-nightly-2026-09-02-1720475.0.0-0.okd-scos-nightly-2026-09-01-1724245.0.0-0.okd-scos-nightly-2026-09-01-0524245.0.0-0.okd-scos-nightly-2026-08-27-1953255.0.0-0.okd-scos-nightly-2026-08-27-0753255.0.0-0.okd-scos-nightly-2026-08-26-195325───5.0.0-0.okd-scos-2026-09-09-0647445.0.0-0.okd-scos-2026-09-08-1847445.0.0-0.okd-scos-2026-09-08-0647445.0.0-0.okd-scos-2026-09-05-0537515.0.0-0.okd-scos-2026-09-04-1737515.0.0-0.okd-scos-2026-09-04-0537515.0.0-0.okd-scos-2026-09-03-1737515.0.0-0.okd-scos-2026-09-03-0537515.0.0-0.okd-scos-2026-09-02-1737515.0.0-0.okd-scos-2026-09-02-053740───4.23.0-0.okd-scos-nightly-2026-08-22-0639414.23.0-0.okd-scos-nightly-2026-08-21-1839414.23.0-0.okd-scos-nightly-2026-06-19-2121094.23.0-0.okd-scos-nightly-2026-06-19-0921094.23.0-0.okd-scos-nightly-2026-03-09-153314───4.23.0-0.okd-scos-2026-08-01-0343024.23.0-0.okd-scos-2026-07-31-1543024.23.0-0.okd-scos-2026-07-29-1405184.23.0-0.okd-scos-2026-03-09-153314───4.22.0-0.okd-scos-nightly-2026-09-09-0101184.22.0-0.okd-scos-nightly-2026-09-08-1301184.22.0-0.okd-scos-nightly-2026-09-08-0101184.22.0-0.okd-scos-nightly-2026-09-07-1301184.22.0-0.okd-scos-nightly-2026-09-05-131448───4.22.0-0.okd-scos-2026-09-09-0834594.22.0-0.okd-scos-2026-09-08-2034594.22.0-0.okd-scos-2026-09-08-0834594.22.0-0.okd-scos-2026-09-07-2034594.22.0-0.okd-scos-2026-09-07-0834594.22.0-0.okd-scos-2026-09-05-025919───4.21.0-0.okd-scos-nightly-2026-09-09-0111344.21.0-0.okd-scos-nightly-2026-09-08-1311344.21.0-0.okd-scos-nightly-2026-09-08-0111344.21.0-0.okd-scos-nightly-2026-09-07-1311344.21.0-0.okd-scos-nightly-2026-09-05-130159───4.21.0-0.okd-scos-2026-07-29-0152434.21.0-0.okd-scos-2026-07-28-1352434.21.0-0.okd-scos-2026-07-27-2036484.21.0-0.okd-scos-2026-07-22-1643374.21.0-0.okd-scos-2026-07-22-0443374.21.0-0.okd-scos-2026-07-21-1643374.21.0-0.okd-scos-2026-07-21-0443374.21.0-0.okd-scos-2026-07-20-1643374.21.0-0.okd-scos-2026-07-14-1808504.21.0-0.okd-scos-2026-07-14-012503───4.20.0-0.okd-scos-2026-02-10-1309514.20.0-0.okd-scos-2026-02-07-0016394.20.0-0.okd-scos-2026-02-06-1216394.20.0-0.okd-scos-2026-02-06-0016394.20.0-0.okd-scos-2026-02-05-1216384.20.0-0.okd-scos-2026-02-05-001637───4.19.0-0.okd-scos-2025-10-25-0018304.19.0-0.okd-scos-2025-10-24-1218294.19.0-0.okd-scos-2025-10-24-0018284.19.0-0.okd-scos-2025-10-23-1218284.19.0-0.okd-scos-2025-10-23-001828───4.18.0-0.okd-scos-2025-05-27-0825374.18.0-0.okd-scos-2025-05-26-2025374.18.0-0.okd-scos-2025-05-26-0825374.18.0-0.okd-scos-2025-05-23-0333574.18.0-0.okd-scos-2025-05-22-153357───4.17.0-0.okd-scos-2025-02-25-0904554.17.0-0.okd-scos-2025-02-24-2104554.17.0-0.okd-scos-2025-02-24-0904544.17.0-0.okd-scos-2025-02-23-2104544.17.0-0.okd-scos-2025-02-22-211215───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2025-06-27-1341344.15.0-0.okd-2025-06-17-1652194.15.0-0.okd-2025-05-02-1402244.15.0-0.okd-2025-04-03-2126204.15.0-0.okd-2025-04-02-1800124.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424───5.0.0-okd-scos.ec.95.0.0-okd-scos.ec.85.0.0-okd-scos.ec.75.0.0-okd-scos.ec.65.0.0-okd-scos.ec.55.0.0-okd-scos.ec.45.0.0-okd-scos.ec.35.0.0-okd-scos.ec.25.0.0-okd-scos.ec.15.0.0-okd-scos.ec.0───4.22.0-okd-scos.ec.164.22.0-okd-scos.ec.154.22.0-okd-scos.ec.144.22.0-okd-scos.ec.134.22.0-okd-scos.ec.124.22.0-okd-scos.ec.114.22.0-okd-scos.ec.104.22.0-okd-scos.ec.94.22.0-okd-scos.ec.84.22.0-okd-scos.ec.74.22.0-okd-scos.ec.64.22.0-okd-scos.ec.54.22.0-okd-scos.ec.44.22.0-okd-scos.ec.34.22.0-okd-scos.ec.24.22.0-okd-scos.ec.14.22.0-okd-scos.ec.04.21.0-okd-scos.ec.194.21.0-okd-scos.ec.184.21.0-okd-scos.ec.174.21.0-okd-scos.ec.164.21.0-okd-scos.ec.154.21.0-okd-scos.ec.144.21.0-okd-scos.ec.134.21.0-okd-scos.ec.124.21.0-okd-scos.ec.114.21.0-okd-scos.ec.104.21.0-okd-scos.ec.94.21.0-okd-scos.ec.84.21.0-okd-scos.ec.74.21.0-okd-scos.ec.64.21.0-okd-scos.ec.54.21.0-okd-scos.ec.44.21.0-okd-scos.ec.34.21.0-okd-scos.ec.24.21.0-okd-scos.ec.14.21.0-okd-scos.ec.0

Source code for this page located on github