Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.22.0-okd-scos.8

Qualifiers (status api): None

Tests:

• Blocking jobs
  • upgrade Pending release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable
  • upgrade-minor Pending release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable

Upgrades from:

• 4.22.0-okd-scos.ec.16 (changes) - Pending
• 4.22.0-okd-scos.7 (changes) - Pending
• 4.22.0-okd-scos.6 (changes) - Pending
• 4.22.0-okd-scos.5 (changes) - Pending
• 4.22.0-okd-scos.4 (changes) - Pending
• 4.22.0-okd-scos.3 (changes) - Pending
• 4.22.0-okd-scos.2 (changes) - Pending
• 4.22.0-okd-scos.1 (changes) - Pending
• 4.22.0-okd-scos.0 - Pending
• 4.21.0-okd-scos.ec.19 (changes) - Pending
• 4.21.0-okd-scos.11 (changes) - Pending

---

Changes from 4.22.0-okd-scos.0

Created: 2026-08-20 09:58:36 +0000 UTC

Image Digest: sha256:65141d97096e2f81b35e212c7fa22c5265c23479130552e2ef25a7012e400cdb

Release 4.22.0-okd-scos.8 was created from registry.ci.openshift.org/origin/release-scos:4.22.0-0.okd-scos-nightly-2026-08-20-020135

Components

• Kubectl 1.35.2
• Kubernetes upgraded from 1.35.4 to 1.35.6
• Kubernetes Tests 1.35.1
• CentOS Stream CoreOS 10 upgraded from 10.0.20260428-0 to 10.0.20260806-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
EVPN (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
NoRegistryClusterInstall (0 tests)	Disabled	Enabled (Changed)	Disabled	Enabled	Disabled	Enabled (Changed)	Disabled	Enabled

New images

• installer-etcd-artifacts git 6bd01267 sha256:1749d8ea644160bcceb79517271da66be844e20e6b9cee883c869433b9c3eb42
• installer-kube-apiserver-artifacts git 05744abb sha256:a077ea6785b687d3bfadfb284230be60f92d78dc06d46ec3edaf6b86fce843be

Rebuilt images without code change

• apiserver-network-proxy git 5e33c228 sha256:cc6b7f38566651f1db3f7e0de2bd93995f5aa925b49137d0bc4adfa99434fead
• aws-kms-encryption-provider git 19e7b623 sha256:3e232780e79da408799c1f72f698bc58b0780677fe4e67111a67966ad2e44c07
• aws-machine-controllers git 1a0ccbcf sha256:99a4bfd3ea9fbe9b4f587c3ef2a5cb7870d5cb3a1ec9735204eb5ef18d81bf8f
• aws-node-termination-handler git 341ed3a0 sha256:3e33111baf95a8eee1dfdc29d5d7f50fd914569e115be1b3e78bbd037c8c1b90
• aws-pod-identity-webhook git 82088287 sha256:5df098cc8a517b27b3013b64b9777504584df5033d82625fe188f7cc15ea79cc
• azure-service-operator git b44d4444 sha256:3a07439e5d9da9d5316e7bc2cbd47e23cdf1cdad184cfd1cc5ac6e65cfb72632
• azure-workload-identity-webhook git a8fb3bf1 sha256:a2d04ea854d5a4a709926c298c4d0c21642bcc5f4ffe2c7f11db16c8f44afa02
• baremetal-machine-controllers git 8d863b95 sha256:ccb18fdc9f214a2ce33f9f9131c6a6c6041fa8b7e727b6e410572d8204960800
• baremetal-runtimecfg git dca8cb1b sha256:cbcc3eb8930c344094679c2e4ae3c1e9ace23aba7a5264df86ec132c6b880e1f
• cloud-network-config-controller git 2d69ad95 sha256:f20d96fa8941866aa317e2af0618859d695305a5bd5ee71f578824b0fdeb4358
• cluster-authentication-operator git 5a44cc2a sha256:2874342f8017918d5fbba0b4faca03ea0f9f24de3118289319d493624d116caf
• cluster-autoscaler-operator git 260ea1b5 sha256:aad481f6755e367baa5d5744d853d4680f876b8e990f458121c181d03b578c5a
• cluster-bootstrap git e6be0fdf sha256:08e21737123757bd7aeea73deca9ade9a9acf03c170fba639827cf08b6239fc7
• cluster-capi-controllers git f1718df9 sha256:891b57f80470b9f93f307af2211690117873286769fc722412db3920e1a27466
• cluster-config-operator git e0c2428e sha256:a8f8a389480be896eb4ad7132b5b92b49a7d0c72f417d022040253af159276d2
• cluster-dns-operator git 3d214118 sha256:cc6464c4533d6fe2bdeed48d4db4d74fbf27f08da13653b308e99677b4ac471e
• cluster-kube-controller-manager-operator git 95150ed5 sha256:d871d730e585c6e777d8a6826cd7011f7206cdbb03d69ab4b070bd242d1e779f
• cluster-kube-scheduler-operator git 51ea59ab sha256:686b33ca6f3f410842a983005eac2677779f8f8cd6de24e3a6f6fbe6f87b3f14
• cluster-update-keys git 3b5c59cc sha256:78731f71721b38923c52faa11d84ea949272739df460ccfd9c9e9f7c05ad7fa2
• configmap-reloader git 94e41c4c sha256:237d6d72a3e74573b7f3bd7084780eb60c5dda7ee85dc09c1cfd19333a833e5d
• csi-external-attacher git 95a19797 sha256:a242a756b9918d5e75d225656d4f04472917951f8e682bfe10706714648032c5
• csi-livenessprobe git 4d5e959a sha256:30a52e001ca48e5ab31281f56cce2297f3da480409a301de16c344b2b182fb05
• docker-builder git fcd4ce2d sha256:2642087e615693e2099e041687bfd275b208199c5abe0a3db3d476874c3da24d
• docker-registry git 9eae44fc sha256:36154f71e46c37a7b2ad696c13a688dfaf78e1e05aa4158842bf6915adeb2ee2
• driver-toolkit git 7aa4007a sha256:becb6ead8bf16baaf89a17c9b36fc26665ffcbf89fb82e6ac9df4e86b30bcb8c
• gcp-machine-controllers git 0073bd11 sha256:3aea692018895c214e0756c5f7b40dddcc9b94ec669ac47ad4f580e7c5ef3ed6
• gcp-pd-csi-driver git 48a7a1aa sha256:d4474137505d87d1ea360ddf0639f331c0b0789d55da6f21e749969f638e3bf1
• gcp-workload-identity-federation-webhook git d7675f31 sha256:da3d74392bd4699d2c87e596d0f09f1a89fcb520a3d747523718335881c9e46d
• ibmcloud-cluster-api-controllers git 03b143d5 sha256:4bb83b34f0d908956144fa825b440a7541a90f22b8f714b624b879c10d7dde37
• insights-runtime-exporter git 70256457 sha256:221320bc9917250a7a6238eb3982767f2c31dab649ff9e96f6e5bbae00e31be7
• insights-runtime-extractor git 70256457 sha256:e16656be734e1d5659f5ce908777f76dc0d2bf6848da85ba1ac8498cd1f9893c
• ironic-machine-os-downloader git 9953d2b7 sha256:0d2f1225eb95ad0fa60b0997cbd71567c4440b69a9c9995c0cf666a297e27826
• ironic-static-ip-manager git a379d09f sha256:2591ca07c7088fad385c16e0762addb8cc4479dcac741dd8457568b94eaba10a
• kube-metrics-server git 38c16c46 sha256:9c42fe91dc2f23400dd61dfde6683b09b6e3f63d7bf34debd732af2f239a89b6
• kube-rbac-proxy git d12e2746 sha256:23d1d3b3e33e32680070077839c0fc2b84e215e05fc68c344bb72b749ac441cb
• kube-storage-version-migrator git 72835e43 sha256:5118c6c7419c5804642288f7473ffc4139d975c5ab37de9a6099478be8f66669
• machine-image-customization-controller git a43d9c97 sha256:010406345b610aafb183b99b7b4cb969860a7913b74088da8952423b14c3f9f9
• multus-cni git b4ec7d82 sha256:471129546af44e02c11a9df5d655fa12665f6ceb40b3d2ae0ee9135dc0d87b76
• multus-cni-microshift git b4ec7d82 sha256:17349826496812ea023a97c569d51dd1d94d2cf3cee21af4473c37a3609821ff
• multus-networkpolicy git 834a093f sha256:876e26062713c77bbb2b55bfd8ba53ccabfb83677ce4573fb70fc4ae022b7482
• multus-route-override-cni git 08af4127 sha256:84c75c08b4392972202657d26094a47a52d406bd36badb3bb1d873561481c2f2
• multus-whereabouts-ipam-cni git d691040e sha256:4feeecb3d13cca7842950d170134011dc50ed85e2acedf5646678190535aadb4
• must-gather git 8554213f sha256:57c8739f0c1034cae02d212d0271b8f4ec04977de71f5975c87523512ddec264
• network-metrics-daemon git 5b233ea1 sha256:76c03f1c443f6f885c62b9e77b9246a9f0a336bb3e474c0b4bdaa77095853e14
• network-tools git 5c4b905c sha256:da15857d7849e836e73f7121d5ef6e346cc888e6ce733f019f035bfcd0296262
• nutanix-cloud-controller-manager git 8e75679a sha256:767368e9f36f3485b3e1a22409055fd48284d79413c8d5e319894c0e0bdaf217
• nutanix-machine-controllers git 60559fdd sha256:f53db897286442553249baad412089dda699990d636125f3ed7d5fca6100a2cf
• oauth-apiserver git 4c002a91 sha256:0b423d2bdc47a80b98b3ebde235a16b51acf0363380ad7fd71664db41ded2b17
• openshift-controller-manager git 26d20fea sha256:5fa77c391f323b3c4e8cd6dc227014e6a87971334b7bb37f0a11e1ba720584ba
• openshift-state-metrics git e71e0996 sha256:0acdd40cbdb35ce1dfb2d16917a8c7995b362b4cc428708c6ada10a95cf763eb
• openstack-cluster-api-controllers git 06d95461 sha256:b5a26e7c44ee7678a031b8533d7925be87c8af313b3537cd8a15e87147948937
• openstack-resource-controller git cbea7a9c sha256:aac663d436de543290d6b6747b6a6dd854f2092498312a849339928874184ae6
• operator-framework-tools git de6260e5 sha256:ea51b0b956f2256416444cbd24a953de12a2155c31e573b43d052ea07e2d34bd
• operator-lifecycle-manager git de6260e5 sha256:50f3da5c14d7779026c9e0cc5389fc6b5f9c9c25678fafe811392abcb8a8a0aa
• operator-marketplace git 38da2ef7 sha256:af5ca2f67e1818ed204e44bf7faf785a29ce60e70b32c8b416d763454a1444f9
• operator-registry git de6260e5 sha256:d4983c7647505a9f9f3c4542b701efa7d9f11065c4159ecc78147458984ccd05
• powervs-block-csi-driver git 02959a8d sha256:43d99c8c9c4593e0aadad76c92805fce2e3fc83f7972df671aa41a72369edf02
• powervs-block-csi-driver-operator git 27747821 sha256:9398b0a48a4b9323052bafaad3164e416309bc45812f614dc68d7f344e099793
• powervs-cloud-controller-manager git 766c0952 sha256:901f9f42ead1a33d2480866b6426e0289f1b55a29ebcc9b57373f160441a39c2
• powervs-machine-controllers git e88cf81d sha256:4719d1a9c555dd1443b3fc5474217c371f52d70adfcb99fefde1c74646c91a5a
• prom-label-proxy git c4c99a30 sha256:eb0d12c9caeaa5a47e37ab8d2f5f1799ef99f92c443fc041b49db2f81b1912ef
• prometheus-config-reloader git 70e38466 sha256:8fc36be6d3d8aa2202f52518b690c04f75618cc01c622e4a88df34b40209517c
• prometheus-node-exporter git 6c4fc012 sha256:396c47e020a479a7a05e946aa966f5fd98712c0ac242599198c7c0861485b21f
• prometheus-operator git 70e38466 sha256:7172383dbf06186ae048f0c81110ad80cc11faf4e758813fc1b24e54a5946697
• prometheus-operator-admission-webhook git 70e38466 sha256:ec6ce576a4c7ecd909f84a09c6ca66abc004fd4f9b328b1c39591367db72f57f
• service-ca-operator git 9fff46a5 sha256:a8a33ee6e4ab47f2f361ef45b348ce66530d1e68e1ef048b31e6488533f7f91b
• telemeter git c2ffb0a7 sha256:736f8d6fbb09e2af0489100c083a7cb0f516afd11def7a6f2d409615f3270548
• volume-data-source-validator git 8e176cec sha256:4f67ac2e2de039fdb74ead09ace47899f55df2f758ba277882f715249405821a
• vsphere-cloud-controller-manager git 39008107 sha256:94fa77aa99844a52361bf8443583dfe3e91f29a8f7315318cf978ce36bb745fb
• vsphere-cluster-api-controllers git ac542b5a sha256:3769de4d99cbff9b9f0d965cf7f5e20de7b006199389daabb65d513ba93bdedf

agent-installer-api-server

• OCPBUGS-104521: manifest_generator add a label to LUKS root #10755
• AGENT-1559: Remove LSO and LVMS as CNV operator dependencies #10666
• OCPBUGS-98693: PATCH /v2/clusters/{id} does not return updated operator_bundles #10608
• OCPBUGS-93786: Simplify IRI api dependency #10539
• OCPBUGS-92056: Stop setting DevPreviewNoUpgrade for TNF clusters #10516
• OCPBUGS-90638: Add sourcedir /run/chrony-dhcp to generated chrony.conf #10488
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• OCPBUGS-96592: Bump golang.org/x/net to v0.55.0 #2250
• OCPBUGS-104498: Wait for all nodes to join before exiting for ABI #2245
• OCPBUGS-69953: Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.22 #1406
• Full changelog

agent-installer-node-agent

• OCPBUGS-84392: Bump go-jose in v4.22 #1488
• Full changelog

agent-installer-ui

• OCPBUGS-104483: Pin minimatch to ^10.2.6 and brace-expansion to ^5.0.9 (CVE-2026-14257) (#3959) #3959
• CVE-2026: 9595: Bumped webpack-dev-server to 5.2.5 (#3924) #3924
• OCPBUGS-99025: Bump dompurify to 3.4.7+ in 4.22 (#3895) #3895
• OCPBUGS-91629: Bump ws to 8.21.0 for CVE-2026-45736 (#3906) #3906
• OCPBUGS-96710: Bump basic-ftp to 5.3.1 for CVE-2026-44240 (#3823) #3823
• CVE-2026: 59873 openshift4/ose-agent-installer-ui-rhel9: node-tar: Denial of Service via crafted gzip bomb openshift-4.22 #3890
• Update OWNERS file (#3883) #3883
• OCPBUGS-98431: Bump js-yaml to 4.3.0 in 4.22 (#3865) #3865
• Apply patches (#3873) #3873
• MGMT-24444: Apply sentence case to networking management type labels … (#3747) (#3871) #3747
• MGMT-24152: UI allows editing pull secret in draft cluster (#3662) (#3870) #3662
• OCPBUGD-89707: bump form-data from 4.0.5 to 4.0.6 to address CVE-2026-12143 (#3869) #3869
• patch CVE-2026-9277 and CVE-2026-42338 via yarn resolutions (#3851) #3851
• AGENT-1519 | [Below-the-sea UI] Allow the user to select IPv6 in the Networking Stack Type field (#3806) #3806
• MGMT-23950: [Staging] [UI] - Cluster name missing in page header for draft clusters (#3669) (#3835) #3669
• Fix disk encryption parsing for cluster details (#3737) (#3843) #3737
• MGMT-19002: [nmstate] UI form view missing autoconf field for ipv6 (#3681) (#3836) #3681
• Tweak discovery ISO modal sizing (#3792) (#3846) #3792
• MGMT-23490: Refactor Troubleshooting Web Console (#3688) (#3839) #3688
• OCPBUGS-88249, OCPBUGS-88400: Ensure axios version is resolved to 1.18.1 (#3857) #3857
• Pull secret appears editable in draft cluster but changes are not applied (#3597) (#3831) #3597
• MGMT-24099: UI redirects to Custom Manifest page before host discovery when cluster is OCI platform (#3739) (#3844) #3739
• Fix machine network autoselect to work with IPv6 only clusters (#3813) (#3848) #3813
• Fix nested expandable sections (#3798) #3798
• OCPBUGS-86813: Custom manifests are broken in local assisted UI (#3768) #3768
• OCPBUGS-86258: Static ip prefill for ove below the sea (#3767) #3767
• Operators section should not be displayed on review and installation progress pages when no operators are selected (#3750) #3750
• Remove Arbiter button (#3748) #3748
• fix monted pull secret parsing (#3724) #3724
• Allow to install SNO topology (#3721) #3721
• OCPBUGS-85230: Ensure follow-redirects pkg resolves to ^1.16.0 (#3705) #3705
• Full changelog

agent-installer-utils

• OCPBUGS-105451: Update Konflux references #337
• OCPBUGS-101760: Update Konflux references #329
• OCPBUGS-100105: Use Operator catalog in 4.22 for OVE #325
• AGENT-1568: Add lvms-operator to config #324
• OCPBUGS-99906: Update Konflux references #302
• OCPBUGS-99556: Use agent-preinstall-image-builder from quay-proxy #321
• OCPBUGS-98743: Update cluster-logging and loki operator versions #316
• OCPBUGS-89320: bump mtv-operator to release-v2.12 #310
• OCPBUGS-86042: Filter out link-local IPv6 addresses #306
• OCPBUGS-85525: update konflux references #296
• Full changelog

aws-cloud-controller-manager

• OCPBUGS-83898: UPSTREAM: <drop>: bump google.golang.org/grpc to v1.79.3 #155
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-84393: Bump github.com/go-jose/go-jose/v4 to 4.1.4 #606
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-83900: UPSTREAM: 2911: bump google.golang.org/grpc v1.80.0 to fix CVE-2026-33186 #316
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-109635: csi-driver-smb: DeleteVolume call fails to mkdir under /tmp #597
• OCPBUGS-91947: maxOpenShiftVersion should be bumped to 5.0 #572
• OCPBUGS-85532: Add init container for Manila node daemonset #555
• OCPBUGS-85116: Mount writable /tmp in SMB CSI driver #550
• Full changelog

aws-karpenter-provider-aws

• OCPBUGS-101842: Fix CVE-2026-33814 #35
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-88485: Bump golang.org/x/net from v0.49.0 to v0.55.0 #193
• OCPBUGS-85706, OCPBUGS-85707: UPSTREAM: <drop>: bump google.golang.org/grpc to v1.79.3 #185
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-105465: Address CVE-2026-39829 #396
• Full changelog

azure-disk-csi-driver

• OCPBUGS-106152: UPSTREAM: 3756: fix: optionally skip reading the config from the API server #163
• OCPBUGS-83633: Bump spdystream to v0.5.1 #150
• Full changelog

azure-file-csi-driver

• OCPBUGS-95536: Bump golang.org/x/crypto to v0.48.0-sec.1 #144
• Full changelog

azure-kms-encryption-provider

• CNTRLPLANE-4024: [release-4.22]: Correct Managed HSM endpoints #53
• Full changelog

azure-machine-controllers

• OCPBUGS-98074: Bump golang.org/x/crypto from v0.47.0 to v0.54.0 #205
• OCPBUGS-86996: Don’t permanently fail Machines after provisioning #195
• PIXAA-7: Leverage SpotRebalanceRecommendation for instance termination when available #198
• Full changelog

baremetal-cluster-api-controllers

• OCPBUGS-86688: Adopt existing Metal3 Remediation CRDs on upgrade #83
• Full changelog

baremetal-installer, installer, installer-artifacts

• Bug OCPBUGS-99399: baremetal: fix provisioning ISO kernel arguments #10703
• AGENT-1546: Backport NoRegistryClusterInstall feature to release-4.22 #10683
• OCPBUGS-87814: [release-4.22] Add omitempty to vSphere and Nutanix MachinePool slice fields #10606
• OCPBUGS-95555, OCPBUGS-99017: bump golang.org/x/crypto to 0.52.0 #10695
• OCPBUGS-98982: Update RHCOS-release-4.22 bootimage metadata to 9.8.20260715-1 / 10.2.20260715-0 #10692
• OCPBUGS-98701: cluster-api: disable diagnostics endpoint for local CAPI controllers #10685
• OCPBUGS-87812: [release-4.22] fix: reset associatedVCenter in failure domain validation loop #10604
• OCPBUGS-97964: destroy/aws: delete vpc endpoints earlier #10674
• no-jira: images: bump UPI image dependencies to 4.22 #10582
• OCPBUGS-84402: Bump go-jose/v4 to 4.1.4 #10597
• OCPBUGS-84643: Update RHCOS-release-4.22 bootimage metadata to 10.2.20260521-0 / 9.8.20260520-0 #10572
• OCPBUGS-85407: PowerVS: Add port 80 security group rule #10548
• OCPBUGS-85503: PowerVS: Fix supported system types retrieval #10521
• Full changelog

baremetal-operator

• OCPBUGS-83866: Include image URL and checksum in provisioning error message #500
• OCPBUGS-94109: cherry-pick reconciler optimizations #503
• OCPBUGS-97940: Add BMH finalizer on PreprovisioningImage #505
• OCPBUGS-87963: Fix preprovisioning network Secret lifecycle during BMH deletion #491
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-98547: bump x/crypto to the latest version #2309
• OCPBUGS-85066: Add required-scc annotation to node-joiner pod #2266
• Full changelog

cloud-credential-operator

• NO-JIRA: Revert “OCPBUGS-87828: Scope minted AWS IAM policies to cluster-owned resources” #1059
• OCPBUGS-87828: Scope minted AWS IAM policies to cluster-owned resources #1045
• Full changelog

cluster-autoscaler

• OCPBUGS-102038: [4.22] Fix OCPBUGS-102038 #434
• OCPBUGS-99551: [release-4.22] UPSTREAM: 10001: chore(clusterapi): add machine phase check for failed machines #431
• Full changelog

cluster-baremetal-operator

• OCPBUGS-99390: Cluster Operator baremetal did not report Progressing=True during a cluster update #634
• OCPBUGS-99501: Apply cluster TLS profile to ironic-proxy container #635
• OCPBUGS-87212: Add watcher for both TLS Adherence policy and profile changes #610
• OCPBUGS-86226: Fix empty IRONIC_BASE_URL #606
• OCPBUGS-85640: Fix webhook to validate the actual admission request object #602
• Full changelog

cluster-capi-operator

• OCPBUGS-96609: Bump golang.org/x/net to v0.56.0 to fix CVE-2026-27136 #624
• OCPBUGS-86353: fix: scope webhook to capi namespace, remove unused webhook endpoints #568
• NO-JIRA: Allow sustaining engineering to self serve dependency updates #555
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-94184: OCPBUGS-65582: [release-4.22] OCPBUGS-65582: manifests: Shift operator Deployment and ClusterOperator after CredentialsRequests #484
• SPLAT-2794: Create OTE Binary and add vSphere hybrid e2e tests #471
• OCPBUGS-92656: e2e/ccm-aws-ote: support to dual-stack IPv6 primary #480
• Full changelog

cluster-config-api

• OCPBUGS-105168: Add haproxyVersion in IngressController API #2971
• AGENT-1578: Promote NoRegistryClusterInstall feature to default #2979
• AGENT-1544: Backport NoRegistryClusterInstall feature to release-4.22 #2930
• OCPBUGS-98222: add new serviceAccountToken fs type #2922
• Promote EVPN Feature Gate to GA #2826
• OCPBUGS-85102: Add labelSelector to MachineSet status for scale subresource #2831
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-87968: Fixed issue where nameserver is not set when recreating cpms #409
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-88472: Fix group snapshots on HyperShift #280
• Full changelog

cluster-etcd-operator

• OCPBUGS-100120: Revert ‘OCPBUGS-88490: fix etcd operator deadlock when etcd-endpoints configmap is stale’ #1661
• OCPBUGS-90542: fix etcd operator deadlock when etcd-endpoints configmap is stale #1636
• OCPBUGS-86960: validate snapshot before destructive operations in cluster-restore-tnf.sh #1627
• And 2 elided commits (e.g. from squash or rebase merges)
• Full changelog

cluster-image-registry-operator

• OCPBUGS-96612: Bump golang.org/x/net from v0.47.0 to v0.55.0 #1355
• OCPBUGS-85342: Fix stale config cache causing incorrect deployment #1342
• Full changelog

cluster-ingress-operator

• OCPBUGS-98728: Add missing include annotations to IBM Cloud and PowerVS ingress CredentialsRequests #1506
• OCPBUGS-97563: Detect orphaned OSSM subscription after noOLM migration #1495
• OCPBUGS-91967: Guard OLM watches with capability check in gatewayclass controller #1481
• OCPBUGS-87164: Add referencegrants and backendtlspolicies to Gateway API RBAC #1461
• OCPBUGS-87167: Add configuration override for X-SSL strip #1468
• OCPBUGS-86074: Update grpc-go and x/net #1449
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-87844: Fix kube-apiserver-to-kubelet-signer refresh interval #2187
• OCPBUGS-85269: fsync static pod cert and manifest writes for crash durability #2143
• OCPBUGS-85260: operator should not override authentication config serviceAccountIssuer with the default one during the operator initialization #2142
• Full changelog

cluster-kube-storage-version-migrator-operator

• OCPBUGS-85570: add PodDisruptionBudget for migrator deployment #174
• OCPBUGS-84312: schedule migrator pods on control-plane nodes #162
• Full changelog

cluster-machine-approver

• OCPBUGS-86773: fix: use feature-gate annotation for CAPI manifests #305
• Full changelog

cluster-monitoring-operator

• OCPBUGS-104852: [release-4.22] e2e: scale down CVO and MCO to prevent node reboots during proxy config watch test #3052
• OCPBUGS-104536: Backport e2e stabilization 4.22 #3026
• OCPBUGS-100367: [release-4.22] fix: watch cluster wide proxy changes and apply changes accordingly #3020
• OCPBUGS-99748: fall back to kube-system/global-pull-secret for telemeter-client token #3001
• OCPBUGS-93722: [release-4.22] Prometheus: Information disclosure of Azure OAuth client secret via config API #2976
• OCPBUGS-92193: set Prometheus shards value explicitly #2974
• OCPBUGS-88321: fix(TestDocExamples) flake: use internal registry for test pods #2965
• OCPBUGS-86807: jsonnet: exclude ReplicationController from catch-all … #2940
• OCPBUGS-86990: increase lookup interval #2945
• OCPBUGS-86034: fix: use numeric ports in NetworkPolicies and add enforcement e2e test #2929
• Full changelog

cluster-network-operator

• OCPBUGS-105512: Remove version-specific CNI binary copy logic #3114
• OCPBUGS-99744: Bump frr-k8s MAX_FDS from 1024 to 65536 #3090
• OCPBUGS-97939: bump containernetworking/cni v0.8.0 -> v1.3.0 #3044
• OCPBUGS-86033: Revert “[release-4.22] OCPBUGS-90721: NVIDIA-596: Enable dpu healthcheck” #3042
• OCPBUGS-84739: Use dedicated service accounts for multus pods #2985
• OCPBUGS-90721: NVIDIA-596: Enable dpu healthcheck #3009
• OCPBUGS-89244: NVIDIA-554: DPU-host mode: use ConfigMap for OVN feature enablement instead of per-node script gating #3029
• OCPBUGS-88307: Remove –enable-interconnect flag from OVN-K manifests #3028
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-105873: BUG-FIX Latency Test #1583
• OCPBUGS-105535: Add missing annotations to NetworkPolicy manifests #1580
• OCPBUGS-99265: E2E: LLC: Pass fresh ctx variable to DeferCleanup functions #1567
• OCPBUGS-92011: e2e: fix: clear hugepages before switching kernelPageSize to 4k #1554
• OCPBUGS-99290: e2e: fix broken checks and rework netqueue tests to avoid ARM ethtool blackout flakes #1568
• OCPBUGS-98400: E2E: Add functional test cases checking GOMAXPROCS #1561
• OCPBUGS-98062: E2E: Fix tuned active profile check for wrapped performance profiles #1559
• OCPBUGS-87153: E2E: Refactor OVS affinity tests into shared helpers and add new workload-partitioning and control-plane reboot test cases. #1537
• OCPBUGS-93924: Let cri-o manage the GOMAXPROC for burstable pods #1555
• OCPBUGS-86071: perf: latency: compute memory resources dynamically #1520
• OCPBUGS-87891: Enable timer migrations for all use-cases #1542
• OCPBUGS-87158: e2e: Remove unnecessary len(numa) < 2 skip gates #1538
• OCPBUGS-84431: Bump github.com/moby/spdystream from v0.5.0 to v0.5.1 #1529
• OCPBUGS-86247: Revert stalld backend to sched_debug #1523
• OCPBUGS-86024: Requeue PerformanceStatus update when status write fails #1518
• Full changelog

cluster-olm-operator

• OCPBUGS-94187: Scale to replicas=2 and enable PDB on HighlyAvailable topology [release-4.22] #215
• Full changelog

cluster-openshift-apiserver-operator

• OCPBUGS-100168: Allow Prometheus to scrape check-endpoints metrics on port 17698 #743
• OCPBUGS-105443: Add HostToContainer mountPropagation to node-pullsecrets volume mount #748
• Full changelog

cluster-openshift-controller-manager-operator

• OCPBUGS-86054: e2e network policy tests #436
• Full changelog

cluster-policy-controller

• OCPBUGS-98222: add serviceAccountToken volume type to psalabelsyncer #192
• Full changelog

cluster-samples-operator

• OKD-379: Fix missing namespace in database template image triggers #701
• Full changelog

cluster-storage-operator

• OCPBUGS-96622: Bump golang.org/x/net to v0.55.0 #722
• Full changelog

cluster-version-operator

• OCPBUGS-104545: pkg/cvo/egress: Disable Proxy respect on HyperShift #1438
• OCPBUGS-98572: Tolerate unknown template fields during payload loading #1421
• OCPBUGS-77681: Updating cluster-version-operator-container image to be consistent with ART for 4.22 #1331
• Full changelog

console

• OCPBUGS-95402: Fix orphaned shell processes in pod terminal on WebSocket disconnect #16694
• Fix for OCPBUGS-101812: CVE-2026-69152 #16930
• Fix for OCPBUGS-105894: CVE-2026-73086 #16965
• OCPBUGS-87832: Use stable username hash for user-settings ConfigMap names #16565
• OCPBUGS-105611: [release-4.22] Fix leading whitespace in Quick Start execute code snippets #16951
• OCPBUGS-89705: Fix CVE-2026-12143 form-data CRLF injection #16644
• OCPBUGS-100059: quickstart page i18n misses (Fix Quick Starts i18n bundle lookup for zh-CN) #16869
• OCPBUGS-100317: Fix pod terminal not rendering until resize #16892
• OCPBUGS-100307: Re-enable Knative Cypress e2e tests #16889
• Fix OCPBUGS-98791: CVE-2026-48801 #16852
• OCPBUGS-99545: ‘0 B’ is shown on details page when create pvc with ‘EiB’ unit #16807
• OCPBUGS-99548: Incorrect translations for ‘CatalogSources’ and ‘OperatorGroups’ in l… #16809
• OCPBUGS-99259: Disable Knative e2e Cypress tests in CI #16784
• OCPBUGS-98437: CVE-2026-59869 bump js-yaml #16768
• OCPBUGS-97600: Fix devfile sample import by adding fallback for parent resolution failures #16706
• OCPBUGS-88028: Bump follow-redirects from 1.15.3 to 1.16.0 to fix CVE-2026-40895 #16665
• OCPBUGS-95580: Fix unnecessary error on Node Terminal tab #16696
• OCPBUGS-88748: [release-4.22] webpack-dev-server: Information disclosure and denial of service via improper proxy configuration #16656
• OCPBUGS-89337: Use fixed artifacts directory to prevent stale temp dir accumulation #16638
• OCPBUGS-90636: Fix RoleBindings tab error for non-cluster-admin users #16662
• OCPBUGS-90495: Projects cannot be filtered by display name #16652
• OCPBUGS-90110: Fix ColumnManagementModal not showing NamespaceColumnHelpText #16643
• Fix for OCPBUGS-84470: CVE-2026-4800 #16573
• OCPBUGS-87933, OCPBUGS-87985: Bump protobufjs and shell-quote #16619
• OCPBUGS-87997: Bump fast-uri to 3.1.2 to fix CVE-2026-6322 #16605
• OCPBUGS-88304: Allow VolumeSnapshot restore when parent PVC is deleted #16592
• OCPBUGS-87096: fixing severity not showing number of issues #16575
• OCPBUGS-86580: Fix macOS Option key in pod terminal #16504
• OCPBUGS-77804: Update Console 4.22 plugin SDK CHANGELOG #16521
• OCPBUGS-86700: Fix and re-enable operator e2e tests disabled for createRoot #16518
• OCPBUGS-77804: prep for 4.22 GA SDK publish #16508
• OCPBUGS-86410: Fix Shipwright detail pages crashing with React error #310 #16485
• OCPBUGS-86239: Adapt dashboard Prometheus polling interval based on query response time #16469
• OCPBUGS-84963: Remove DataViewToolbar wrapper from bottom pagination #16483
• OCPBUGS-86227: Show empty state instead of 403 error for users without projects #16467
• OCPBUGS-86222: Use ETag conditional requests for OpenAPI v2 fetching #16466
• OCPBUGS-86228: Re-enable add-flow-ci.feature e2e tests disabled for createRoot adoption #16468
• OCPBUGS-86064: Enable Topology e2e tests #16458
• OCPBUGS-83940: bump gRPC-Go to v1.79.3 #16443
• OCPBUGS-83416: [release-4.22] CVE-2026-26996 Bump minimatch library #16278
• OCPBUGS-85505: Add Suspense boundary to LazyRoutePage for plugin routes #16438
• OCPBUGS-85494: Prevent binary secret data corruption when editing #16435
• NO-JIRA: enable multi-architecture yarn builds #16415
• OCPBUGS-85196: Remove @console imports from SDK dist #16407
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

console-operator

• OCPBUGS-81121: clone bump documentation base url #1154
• OCPBUGS-100387: Sort plugin list to make them deterministic #1165
• OCPBUGS-97828, OCPBUGS-97829: Stabilize telemetry config to prevent continuous console pod rollouts #1183
• OCPBUGS-94186: Add retry for transient API errors to prevent Degraded blips #1181
• OCPBUGS-94188: use ObservedGeneration to determine Progressing status #1180
• OCPBUGS-92829: Clean up old temp directories in downloads pod #1177
• OCPBUGS-86118: Add unit and e2e test coverage for cert rotation redeployment #1161
• OCPBUGS-83941: bump gRPC-Go package #1157
• NETOBSERV-2296: add missing annotations on netobserv quickstart #1097
• OCPBUGS-85507: feat: use 2 replicas for console on tnf #1155
• Full changelog

container-networking-plugins, containernetworking-plugins-microshift

• OCPBUGS-83942: Bump grpc to 1.79.3 to address CVE-2026-33186 #243
• OCPBUGS-87165: CI build root image tag sync with ART 4.22 #240
• Full changelog

coredns

• OCPBUGS-86189: [release-4.22] OCPBUGS-83943: Bump gRPC to v1.79.3 to resolve CVE-2026-33186 #185
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-83552: Bump google.golang.org/grpc to 1.79.3 #395
• UPSTREAM-SYNC: Sync release-4.22 with upstream release-1.35 #381
• Full changelog

csi-driver-nfs

• OCPBUGS-84434: Bump github.com/moby/spdystream@v0.5.1 #190
• Full changelog

csi-external-provisioner

• OCPBUGS-84435: Bump github.com/moby/spdystream to v0.5.1 in 4.22 #136
• Full changelog

csi-external-resizer

• OCPBUGS-82031: Bump google.golang.org/grpc to v1.79.3 #199
• Full changelog

csi-external-snapshot-metadata

• OCPBUGS-83948: Bump google.golang.org/grpc to v1.79.3 #19
• Full changelog

csi-external-snapshotter, csi-snapshot-controller

• OCPBUGS-88723: UPSTREAM: 1392: Fix VolumeSnapshotContent deletion #222
• OCPBUGS-83949, OCPBUGS-83952: Bump google.golang.org/grpc to v1.79.3 #216
• Full changelog

csi-node-driver-registrar

• OCPBUGS-84436: Bump github.com/moby/spdystream to v0.5.1 #105
• Full changelog

egress-router-cni

• OCPBUGS-97939: bump containernetworking/cni to v1.3.0 #103
• Full changelog

etcd

• OCPBUGS-82497: Rebase v3.6.13 for openshift-4.22 #393
• Full changelog

gcp-cloud-controller-manager

• OCPBUGS-83965, OCPBUGS-84447: Update grpc and spdy dependencies #117
• Full changelog

gcp-cluster-api-controllers

• UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.12.0 (b9b055d) into release-4.22 #294
• Full changelog

gcp-pd-csi-driver-operator

• OCPBUGS-86574: VolumeSnapshot snapshot-c9v52 is not ready within 5m0s… #193
• OCPBUGS-83968: Bump google.golang.org/grpc to v1.79.3 #183
• Full changelog

haproxy-router

• OCPBUGS-87166: Prevent SSRF via FQDN-typed EndpointSlices #813
• OCPBUGS-87167: Strip X-SSL-* headers for plain HTTP #793
• OCPBUGS-83969: Bump google.golang.org/grpc to v1.79.3 #776
• Full changelog

hyperkube, kube-proxy, pod

• OCPBUGS-98604: Add NodeSelectorAdjuster admission plugin for HCP clusters #2718
• NO-JIRA: Update openshift-hack/rebase.sh #2733
• OCPBUGS-96637: Bump golang.org/x/net from v0.47.0 to v0.55.0 #2737
• OCPBUGS-91744, OCPBUGS-93526, OCPBUGS-93551, OCPBUGS-95549, OCPBUGS-95556: Bump golang.org/x/crypto/ssh to v0.52.0 #2725
• OCPBUGS-99766: UPSTREAM: <carry>: upkeep cpu partitioning admission webhook #2724
• OCPBUGS-90148: Rebase v1.35.6 in release-4.22 #2707
• OCPBUGS-93787: backport kubernetes/conformance umbrella suite #2705
• OCPBUGS-86898: Fix performance related issues when selinux metrics are emitted #2676
• OCPBUGS-85499: Bump Kubernetes v1.35.5 to release-4.22 #2664
• OCPBUGS-85415: [release-4.22] Improve WatchList test robustness #2663
• Full changelog

hypershift

• OCPBUGS-98328: fix(kubevirt): use only first MachineInternalIP per family in EndpointSlice endpoints #8979
• CNTRLPLANE-3774: [release-4.22] fix: control-plane-operator: improve opaque conditions #9058
• OCPBUGS-111083: fix(hcco): run kas-connection-checker as non-root #9320
• OCPBUGS-105866: remove redhat-marketplace catalog from HyperShift #9289
• OCPBUGS-105591: [release-4.22] use in-cluster service for oauth-server #9127
• OCPBUGS-96711: Apply MetricsSet relabel configs to KAS ServiceMonitor #8901
• OCPBUGS-105421: fix(upsert): add desired-state hash to detect spec field removals #9259
• OCPBUGS-101964: [release-4.22] OCPBUGS-98213: fix router component ordering to prevent missing HAProxy backends #9212
• OCPBUGS-100332: fix(konnectivity): conditionally prefer IPv4 based on HCP network config [release-4.22] #9191
• OCPBUGS-100141: Add proxy env vars to AWS cloud-controller-manager deployment #9156
• OCPBUGS-94518: add ACR pull identity to worker cloud.conf and VMSS #8865
• OCPBUGS-100299: Avoid printing errors twice #9183
• OCPBUGS-94170: fix registry override matching and propagation to init containers #8877
• OCPBUGS-100176: Remove hardcoded quay.io credentials from EnsureGlobalPullSecret test #9169
• OCPBUGS-90086: [release-4.22] clear stale EtcdRecoveryActive failure condition when etcd is healthy #8806
• OCPBUGS-99554: fix(backport): konnectivity agent auth to 4.22 #9077
• OCPBUGS-99299: [release-4.22] OCPBUGS-86296: Propagate management cluster proxy env vars to konnectivity sidecar #8592
• CNTRLPLANE-3884: Add spec.monitoring API for metrics forwarding #8872
• OCPBUGS-97921: fix(nodepool): skip CNI-internal IPs in ClusterNetworkCIDRConflict check #8948
• OCPBUGS-98627: Skip Azure topology LB scope override for ARO HCP IngressController #8998
• OCPBUGS-98220: fix(cpo,hcco): prevent premature KAS convergence during KMS key rotation [release-4.22] #8972
• OCPBUGS-90083: Fix NodePool reconciliation failure when updating mirrored immutable ConfigMaps #8811
• OCPBUGS-89236: Handle CA bundle aggregation delay by requeuing revocation #8746
• CNTRLPLANE-3749: feat(api,cpo): add observedGeneration to ControlPlaneComponentStatus #8868
• OCPBUGS-93921: bump catalog image version cap from 4.21 to 4.22 #8861
• OCPBUGS-88325: fix(cpo) delete terminated MCD pods to retry in-place upgrades #8729
• OCPBUGS-87364: Gate Route watch on management cluster capability #8692
• CNTRLPLANE-3661: add etcd data re-encryption after encryption key rotation (#8219) #8790
• OCPBUGS-88356: fix(cpo): deduplicate VPC endpoint subnets by AZ #8724
• CNTRLPLANE-3619: backport API-driven Azure topology and private connectivity (Phase 1) #8721
• OCPBUGS-90563: Fix metrics-proxy unbounded memory growth #8788
• OCPBUGS-89352: build(operator): drop hypershift-no-cgo from operator container images #8756
• OCPBUGS-86912: [release-4.22] Stop controllers fighting over HCP status #8632
• OCPBUGS-86039: OCPBUGS-62177: [release-4.22] Verify cert revocation against all KAS pods #8538
• OCPBUGS-86578: bootstrap serving certs at hypershift operator startup #8599
• OCPBUGS-86354: add Konflux pipeline definitions for CPO 4.22 #8608
• OCPBUGS-86354: set limits for aro.openshift.io/swift-nic in request overrides for ARO swift #8564
• OCPBUGS-85620: Fix webhook TLS failure after service-ca to self-managed cert migration #8513
• OCPBUGS-83836: add missing RBAC for webhook configurations #8295
• OCPBUGS-84939: [release-4.22] add CP pull-secret watches for in-place propagation #8408
• OCPBUGS-86026: Fix metrics-proxy deployment failure due to dots in volume names #8534
• OCPBUGS-85779: Add AWS ISO domains to konnectivity IsCloudAPI #8447
• OCPBUGS-85659: Clarify –base-domain flag default behavior #8525
• ACM-33601: use the latest ubi9 nginx image #8465
• Full changelog

ibm-cloud-controller-manager

• OCPBUGS-83973: Upgrade grpc for CVE-2026-33186 #105
• Full changelog

ibm-vpc-block-csi-driver

• OCPBUGS-83974: Bump google.golang.org/grpc to v1.79.3 #147
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-83774: Bump google.golang.org/grpc to v1.79.3 #171
• Full changelog

ibmcloud-machine-controllers

• OCPBUGS-96641: bump golang.org/x/net to v0.57.0 #99
• Full changelog

insights-operator

• OCPBUGS-105227: secrets and configmap revisions count gathering #1339
• OCPBUGS-100173: Update installer dependency to use tagged version #1332
• OCPBUGS-100154: [release-4.22] Fix indentation bug on livenessProbe #1330
• OCPBUGS-96642: [release-4.22] Upgrade Golang and net library #1327
• OCPBUGS-98383: controlplanemachinesets gatherer #1318
• OCPBUGS-98153: update HyperShift deployment manifest #1315
• OCPBUGS-98381: Optimize the CPU usage of insights-runtime-extractor #1317
• OCPBUGS-88026: fall back to kube-system/global-pull-secret for Insights token #1305
• OCPBUGS-86818: extractor controller #1296
• OCPBUGS-86013: add trusted-ca-bundle to gatherin job #1290
• Full changelog

ironic

• OCPBUGS-100167: Update openstack-ironic commit hash for CVE-2026-44918 #874
• OCPBUGS-88478: Update openstack-ironic commit hash in requirements.cachito that addresses CVE-2026-43003 #860
• OCPBUGS-98873: Selectively backport Redfish firmware update fix to 4.22 #870
• OCPBUGS-84369: selectively backport servicing patches to 4.22 #848
• Full changelog

ironic-agent

• OCPBUGS-99897: Bump ironic-python-agent pinned commit for CVE-2026-66138 #294
• OCPBUGS-88478: Update commit SHA in requirements.cachito to address CVE-2026-43003 #266
• OCPBUGS-95061: Replace individual package removal with a single rpm -e loop #282
• OCPBUGS-95061: Replace dnf remove with rpm -e to prevent dependency removal #270
• Full changelog

keepalived-ipfailover

• OCPBUGS-99767: Reinstall tzdata if /usr/share/zoneinfo is missing #247
• Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.22 #229
• OCPBUGS-72552: Updating openshift-enterprise-base-rhel9-minimal-container image to be consistent with ART for 4.22 #220
• Full changelog

kube-state-metrics

• OCPBUGS-87957: embed timezone data in kube-state-metrics binary #150
• OCPBUGS-87957: fix: don’t panic on CronJobs with unparseable schedules #147
• OCPBUGS-86653: [Backport] Handle DeletedFinalStateUnknown panic #142
• Full changelog

kubevirt-cloud-controller-manager

• OCPBUGS-69842: Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART for 4.22 #59
• Full changelog

kubevirt-csi-driver

• OCPBUGS-83883: Bump google.golang.org/grpc to v1.79.3 #107
• Full changelog

machine-api-operator

• OCPBUGS-85102: Populate status label selector for scale subresource #1497
• Full changelog

machine-config-operator

• OCPBUGS-105929: Fix duplicate template error and e2es #6397
• Fixes OCPBUGS-105190: increase LRU cache and prefetch timeout for PinnedImageSet #6372
• OCPBUGS-105447: fix nil pointer panic in IRI controller informer race #6390
• OCPBUGS-105212: [release-4.22] Part2 Migrate OCB test-case #6374
• OCPBUGS-105213: Update AMI Whitelist #6375
• OCPBUGS-104563: Use providerSpec.Template in vSphere machineset reconciliation #6370
• OCPBUGS-100583: [release-4.22] Part 1 Migrate OCB test cases from openshift-tests-private #6361
• OCPBUGS-104576: [release-4.22] Add extension verification failure test cases OCP-89090 and OCP-89095 #6367
• OCPBUGS-104451: [release-4.22] fix fencing_validator ocdebug fence dispatch race condition #6360
• OCPBUGS-100293: Fix TC 43278 failing when release payload has no MCO commit info #6351
• AGENT-1548: Backport NoRegistryClusterInstall feature to release-4.22 #6323
• OCPBUGS-99712: Add TC 88940- Apply password only if changes exist #6339
• OCPBUGS-98962: [release4.22] MCO-1997: MCO-2297: MCO-2440 Add osImagestream test-cases #6301
• OCPBUGS-93804: move cleanUpDuplicatedMC to avoid double reboot on first updated Master node #6240
• OCPBUGS-97904: Inject proxy into MCC deployment #6275
• OCPBUGS-96145: Update AMI Whitelist #6260
• OCPBUGS-89329: Fix kubelet certificate wait loop in criometricsproxy.yaml #6200
• OCPBUGS-93743: Fix bootupd workaround in old nodes #6239
• OCPBUGS-92026: OCPEDGE-2474: TNF - Add fencing taint/untaint alert agent scripts #6230
• OCPBUGS-92022: MCO-2275: Migrate OS layering tests from openshift-tests-private #6218
• [release:4.22] OCPBUGS-88330: MCO-2209 MCO-2213 MCO-2207: Migrate security, daemon, and kernel TCs from mco.go #6171
• OCPBUGS-91958: Boot image skew check silently passes when MachineSets are reconcile-skipped #6227
• OCPBUGS-91954: Make vsphere template updates atomic #6226
• OCPBUGS-88184: Replace wildcard permissions with explicit verbs and resources in MCC ClusterRole #6170
• OCPBUGS-88683: Process rebuild annotation on machine-os-builder restart #6190
• OCPBUGS-87981: Fix MCP.status.osImageStream #6164
• OCPBUGS-88496: Update custom containerfile OCB test to work in a disconnected environment #6188
• OCPBUGS-88001: Add mco_extensions.go e2e test suite for MCO extension install, enable, and validation #6184
• OCPBUGS-88329: In OCB to check when a image is removed the old build is triggered again and the MC should start updating directly and no new MOSB should be triggred #6175
• OCPBUGS-87019: fix: update arbiter crio config #6142
• OCPBUGS-88487: make test 69755 more stable #6186
• OCPBUGS-88331: [release-4.22] Remove skopeo-install script #6176
• OCPBUGS-84679: add RootCA cert to the sysContextBuilder certs #5897
• OCPBUGS-87840: vSphere boot image hot loop detection is non-functional due to stable template names #6157
• OCPBUGS-87900: [release-4.22] OCPBUGS-87181: MCO-2211: MCO-2210: MCO-2234 MCO-Migrate MCO tests from openshift-tests-private #6148
• OCPBUGS-88114: Skip chrony-wait on first node join #6168
• OCPBUGS-88120: daemon: don’t pull/extract extensions for all OS updates #6169
• OCPBUGS-87811: [release-4.22] OCPBUGS-87550: Update TC-88366 to check osImageStream status after update completes #6153
• OCPBUGS-87161: [release-4.22] OCPBUGS-87027: MCO-2212: MCO-2213: Migrate mco_observability and mco_daemon test-suite #6143
• OCPBUGS-86865: Stabilize ocl 4.22 #6115
• OCPBUGS-86985: MCO-2297: Add OCP-88366 and OCP-88814 for osImageStream with osImageURL #6083
• OCPBUGS-87163: Remove trailing newline (\n) characters in klog message strings #6147
• OCPBUGS-86893: Add version guard for OSStream rendering #6123
• OCPBUGS-86997: [release-4.22] OCPBUGS-86984: MCO-2273: MCO-2215: MCO-2183: Migrate remaining TCs from mco.go to MCO, units, kublet suite #6126
• OCPBUGS-86297: configure-ovs: copy lldp mode to br-ex port #6073
• OCPBUGS-86870: Update AMI Whitelist #6116
• OCPBUGS-86732: remove tests using base images older than 4.13 #6104
• OCPBUGS-86769: Adapt test ‘54922 - daemon: add check before updating kernel #6103
• MCO-2233: Migrate Kernel related MCO test-cases #5860
• OCPBUGS-86262: Verify extension packages are installed #6071
• OCPBUGS-85127: Fix wrong early exit during kubelet MCs regeneration #6009
• OCPBUGS-86267: Fix CVE-2026-33186 #6072
• OCPBUGS-85341: Apply password only if changes exist #6053
• OCPBUGS-86047: Manually uncordoned nodes are not automatically re-cordoned #6060
• OCPBUGS-85124: use --delete-if-present for karg removal #6007
• OCPBUGS-85626: only check password hash in /etc/shadow #6042
• OCPBUGS-85651: BareMetal skew e2e fails patching provisioning CR after CBO webhook fix #6047
• OCPBUGS-85198: Add terminationMessagePolicy to build pod containers #6012
• OCPBUGS-85481: Add fix for ossImagestream status #6026
• OCPBUGS-84813: Include RootCA in the temporal CC #5904
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

machine-os-images

• OCPBUGS-87872: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #96
• OCPBUGS-85477: Force rebuild for OCP 4.22 #88
• Full changelog

metallb-frr

• OCPBUGS-86568: Generate fallback BGP router-id on IPv6-only nodes #133
• Full changelog

monitoring-plugin

• OCPBUGS-98787: replace outdated react-linkify dependency #1145
• OCPBUGS-98432: fix for CVE-2026-59869 #1114
• OU-1240: Makefile and package.json to enable test-frontend-ci #1094
• OCPBUGS-99032: Fix CVE-2026-49978 - bump DOMPurify to >= 3.4.7 #1085
• OCPBUGS-99234: graph redirect query parameter #1070
• OU-651: Fix AlertRules page to display user defined loki alerts #1057
• Fix for OCPBUGS-89698: CVE-2026-12143 #1053
• Fix for OCPBUGS-91628: CVE-2026-45736 #1023
• NO-JIRA: fix unit test severitySort and incidents #1036
• Fix for OCPBUGS-94005: CVE-2026-13676 #1028
• OU-1396: [release-4.22] fix: use replace to set variables to avoid navigation trap #1019
• OCPBUGS-87979: [release-4.22] fast-uri: URI authority bypass due to improper delimiter handling #989
• OCPBUGS-88413: [release-4.22] Fix CVE-2026-44494: bump axios to ^1.16.0 via overrides #997
• OU-1360: reset queries when namespace changes in dev perspective #934
• OU-1366: prevent namespace and project desync #935
• Full changelog

multus-admission-controller

• OCPBUGS-85569: Bump Go version to 1.25.0 for ML-KEM/PQC support #116
• Full changelog

network-interface-bond-cni

• OCPBUGS-97943: Update OWNERS for release-4.22 #119
• Full changelog

networking-console-plugin

• OCPBUGS-98788: Updating linkify-it to 5.0.2 to fix CVE-2026-48801 #464
• OCPBUGS-92205: Updated doc links based on release #438
• OCPBUGS-92196: fixed translations of pod column titles #437
• OCPBUGS-88314: Trim subnet input in UDN creation form #431
• CNV-90049: [UDN] Add condition column to the list page #432
• OCPBUGS-88025: Fix empty state Create button links #429
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

oauth-proxy

• OCPBUGS-93565: update x/crypto to v0.52.0 and x/net to v0.55.0 #369
• OCPBUGS-86213: Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART for 4.22 #366
• Full changelog

oauth-server

• OCPBUGS-84381: Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 #233
• Full changelog

oc-mirror

• OCPBUGS-105777: fix for CVE-2026-39829 #1501
• OCPBUGS-98716: Include index image sub-digests in dry run mapping.txt #1474
• OCPBUGS-93773: Make dry-run also generate cluster-resources #1457
• OCPBUGS-97946: skip manifest list signatures #1469
• OCPBUGS-88484: Include tag+digest images in both IDMS and ITMS #1442
• OCPBUGS-87806: fixes race condition when mirroring operator catalogs #1434
• OCPBUGS-84389: Upgrade go-jose to v4.1.4 to fix CVE-2026-34986 #1419
• Full changelog

olm-catalogd, olm-operator-controller

• OCPBUGS-100305: Fix cache path to avoid /var/cache/dnf conflict #783
• OCPBUGS-99298: increase catalog HTTP client timeout from 10s to 5m #768
• OCPBUGS-94187: enable OLMv1 topology-based deployment scaling e2e test #761
• OCPBUGS-94187: Backport HA topology deployment scaling to release-4.22 #758
• Full changelog

openshift-apiserver

• OCPBUGS-87022: fix concurrent map race in project authorization cache #653
• OCPBUGS-84454: Address CVE-2026-35469 #651
• Full changelog

openstack-machine-api-provider

• OCPBUGS-97826: Revendor CAPO #175
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-99043: Branch Sync main to release-4.22 [08-13-2026] #3394
• OCPBUGS-105515, OCPBUGS-105604: Branch Sync main to release-4.22 [08-10-2026] #3373
• OCPBUGS-95560: Branch Sync main to release-4.22 [08-04-2026] #3358
• OCPBUGS-100119, OCPBUGS-95064: Branch Sync main to release-4.22 [07-28-2026] #3333
• OCPBUGS-99043: Branch Sync main to release-4.22 [07-16-2026] #3304
• OCPBUGS-88733, OCPBUGS-88734: Branch Sync main to release-4.22 [06-16-2026] #3252
• OCPBUGS-88718: Branch Sync main to release-4.22 [06-10-2026] #3244
• OCPBUGS-87214: Branch Sync main to release-4.22 [06-05-2026] #3232
• OCPBUGS-84384: CORENET-6537: OTE: Add external container support to infra provider #3147
• Full changelog

prometheus

• OCPBUGS-93919: fix(tsdb): temporarily ignore Direct IO enablement errors on unsupported filesystems #339
• OCPBUGS-92818: bump x/crypto, x/net, and otel dependencies to fix CVEs #337
• OCPBUGS-88666: remote: validate snappy decoded length before allocation in read endpoint #330
• OCPBUGS-86248: fix: TLS client cert rotation when no CA is configured #313
• OCPBUGS-84010: bump google.golang.org/grpc to v1.79.3 [release-4.22] #310
• Full changelog

prometheus-alertmanager

• OCPBUGS-98185: build(deps): bump github.com/hashicorp/memberlist from 0.5.4 to 0.6.0 #157
• OCPBUGS-99442: embed tzdata in the alertmanager binary #141
• Full changelog

route-controller-manager

• OCPBUGS-86184: OCPBUGS-83892: Update grpc-go and x/net #90
• Full changelog

stream-coreos, stream-coreos-extensions

• OCPBUGS-105444: NetworkManager-ovs has moved to RHCOS #1956
• NO-JIRA: Containerfile: restore meta.json as last layer in image #1950
• And 7 elided commits (e.g. from squash or rebase merges)
• Full changelog

tests

• OCPBUGS-100438: retry GetVotingMemberNames on transient etcd client fails #31506
• OCPBUGS-88711: Backport node_e2e test migrations #31306
• AGENT-1549: Backport NoRegistryClusterInstall feature to release-4.22 #31406
• SPLAT-2802: Added VVCDO OTE binary to extensionBinary list #31321
• SPLAT-2794: Added 3CMO OTE binary to extensionBinary list #31303
• OCPBUGS-90522: Use AdminPolicyBasedExternalRoute CR for external gateway test #31317
• OCPBUGS-87838: support Parents field on origin test suites #31270
• OCPBUGS-92656: bump openshift-tests-extension to fix klog stdout parsing on 4.22 #31349
• OCPBUGS-92048: fix PDB AlwaysAllow test failure on IPv6-primary dualstack clusters #31337
• OCPBUGS-92047: Fix AWS DualStack CI jobs consistently encounter 2 EgressFirewall Test Failures #31336
• OCPBUGS-85708: Raise OpenStack operator watch limits #31183
• OCPBUGS-85655: Validate no WAL corruption when both nodes shutdown gracefully #31174
• OCPBUGS-85515: Verify dynamic revision bump for etcd during kernel crash #31166
• OCPBUGS-85339: Add e2e tests for KubeletEnsureSecretPulledImages feature gate #31148
• Full changelog

thanos

• OCPBUGS-105471: UPSTREAM: <carry>: bump google.golang.org/grpc to v1.82.1 (GHSA-hrxh-6v49-42gf) #199
• COO-2034, OCPBUGS-105219, OCPBUGS-105223, OCPBUGS-105224: [release-4.22] vendor: bump vulnerable Go dependencies for GovCloud CVE remediation #197
• OCPBUGS-96898: Address CVE-2026-39882 #192
• OCPBUGS-92813: Fix CVE-2026-39883 #191
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-95573: Bump golang.org/x/crypto/ssh to v0.48.0-sec.1 #189
• OCPBUGS-92190: Rebase 3.6.2 on 422 #188
• OCPBUGS-83636: Bump spdystream to v0.5.1 #180
• Full changelog

vsphere-csi-driver-operator

• SPLAT-2802: Port vSphere hybrid OTE to release-4.22 #349
• Full changelog

vsphere-problem-detector

• OCPBUGS-86866: Fixed compute cluster permission logic for single fd with read-only custom resourcepool #221
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

CentOS Stream CoreOS 10 (stream-coreos)

Package List

• cri-o-1.35.5-1.el10s
• kernel-6.12.0-254.el10
• openshift-kubelet-4.22.0-202606041959.p2.g7250fd5.assembly.stream.el9
• systemd-257-31.el10

Full list (493 packages)

• NetworkManager-1:1.58.0-1.el10
• NetworkManager-cloud-setup-1:1.58.0-1.el10
• NetworkManager-libnm-1:1.58.0-1.el10
• NetworkManager-ovs-1:1.58.0-1.el10
• NetworkManager-tui-1:1.58.0-1.el10
• WALinuxAgent-udev-2.14.0.1-3.el10
• aardvark-dns-4:2.0.0-2.el10
• acl-2.4.0-2.el10
• afterburn-5.10.0-2.el10
• afterburn-dracut-5.10.0-2.el10
• alternatives-1.30-2.el10
• amd-gpu-firmware-20260722-25.el10
• amd-ucode-firmware-20260722-25.el10
• attr-2.6.0-2.el10
• audit-4.0.3-5.el10
• audit-libs-4.0.3-5.el10
• audit-rules-4.0.3-5.el10
• authselect-1.5.3-1.el10
• authselect-libs-1.5.3-1.el10
• azure-vm-utils-0.7.0-1.el10
• basesystem-11-22.el10
• bash-5.2.26-6.el10
• bash-completion-1:2.11-16.el10
• bind-libs-32:9.18.33-19.el10
• bind-license-32:9.18.33-19.el10
• bind-utils-32:9.18.33-19.el10
• bootc-1.16.6-1.el10
• bootupd-0.2.35-1.el10
• bsdtar-3.7.7-8.el10
• bubblewrap-0.10.0-3.el10
• bzip2-1.0.8-25.el10
• bzip2-libs-1.0.8-25.el10
• c-ares-1.34.6-4.el10
• ca-certificates-2025.2.80_v9.0.305-102.el10
• catatonit-5:0.2.1-4.el10
• centos-gpg-keys-10.0-23.el10
• centos-release-cloud-1-1.el10s
• centos-release-nfv-common-1-5.el10s
• centos-release-virt-common-1-1.el10s
• centos-stream-release-10.0-23.el10
• centos-stream-repos-10.0-23.el10
• checkpolicy-3.11-1.el10
• chrony-4.8-2.el10
• cifs-utils-7.6-2.el10
• clevis-23-2.el10
• clevis-dracut-23-2.el10
• clevis-luks-23-2.el10
• clevis-pin-tpm2-0.5.5-1.el10
• clevis-systemd-23-2.el10
• cloud-utils-growpart-0.33-11.el10
• composefs-1.0.8-1.el10
• composefs-libs-1.0.8-1.el10
• conmon-3:2.2.1-4.el10
• conmon-rs-0.6.6-2.el10s
• console-login-helper-messages-0.21.3-10.el10
• console-login-helper-messages-issuegen-0.21.3-10.el10
• console-login-helper-messages-profile-0.21.3-10.el10
• container-selinux-4:2.250.0-1.el10
• containers-common-6:6.0-2.el10
• containers-common-extra-6:6.0-2.el10
• coreos-installer-0.26.0-1.el10
• coreos-installer-bootinfra-0.26.0-1.el10
• coreutils-9.5-12.el10
• coreutils-common-9.5-12.el10
• cpio-2.15-3.el10
• cracklib-2.9.11-8.el10
• cracklib-dicts-2.9.11-8.el10
• cri-o-1.35.5-1.el10s
• cri-tools-1.35.0-1.el10s
• criu-4.2-8.el10
• criu-libs-4.2-8.el10
• crun-1.28-1.el10
• crypto-policies-20260708-1.git988eb15.el10
• crypto-policies-scripts-20260708-1.git988eb15.el10
• cryptsetup-2.8.6-2.el10
• cryptsetup-libs-2.8.6-2.el10
• curl-8.12.1-6.el10
• cyrus-sasl-gssapi-2.1.28-27.el10
• cyrus-sasl-lib-2.1.28-27.el10
• dbus-1:1.14.10-6.el10
• dbus-broker-36-4.el10
• dbus-common-1:1.14.10-6.el10
• dbus-libs-1:1.14.10-6.el10
• dbus-tools-1:1.14.10-6.el10
• device-mapper-10:1.02.215-3.el10
• device-mapper-event-10:1.02.215-3.el10
• device-mapper-event-libs-10:1.02.215-3.el10
• device-mapper-libs-10:1.02.215-3.el10
• device-mapper-multipath-0.9.9-19.el10
• device-mapper-multipath-libs-0.9.9-19.el10
• device-mapper-persistent-data-1.3.2-1.el10
• diffutils-3.10-8.el10
• dmidecode-1:3.6-5.el10
• dnf-4.20.0-26.el10
• dnf-data-4.20.0-26.el10
• dnsmasq-2.90-7.el10
• dosfstools-4.2-12.el10
• dracut-107-9.el10
• dracut-network-107-9.el10
• dracut-squash-107-9.el10
• duktape-2.7.0-10.el10
• e2fsprogs-1.47.1-5.el10
• e2fsprogs-libs-1.47.1-5.el10
• efi-filesystem-6-8.el10
• efibootmgr-18-9.el10
• efivar-libs-39-3.el10
• elfutils-default-yama-scope-0.195-1.el10
• elfutils-libelf-0.195-1.el10
• elfutils-libs-0.195-1.el10
• erofs-utils-1.8.10-1.el10
• ethtool-2:6.19-1.el10
• expat-2.7.3-2.el10
• fcoe-utils-1.0.34-11.gitb233050.el10
• file-5.45-12.el10
• file-libs-5.45-12.el10
• filesystem-3.18-17.el10
• findutils-1:4.10.0-5.el10
• firewalld-filesystem-2.4.3-2.el10
• flatpak-session-helper-1.18.0-1.el10
• fstrm-0.6.1-12.el10
• fuse-common-3.16.2-5.el10
• fuse-libs-2.9.9-25.el10
• fuse3-3.16.2-5.el10
• fuse3-libs-3.16.2-5.el10
• fwupd-2.1.6-1.el10
• gawk-5.3.0-6.el10
• gdbm-1:1.23-14.el10
• gdbm-libs-1:1.23-14.el10
• gettext-envsubst-0.22.5-6.el10
• gettext-libs-0.22.5-6.el10
• gettext-runtime-0.22.5-6.el10
• git-core-2.52.0-1.el10
• glib2-2.80.4-14.el10
• glibc-2.39-133.el10
• glibc-common-2.39-133.el10
• glibc-gconv-extra-2.39-133.el10
• glibc-minimal-langpack-2.39-133.el10
• gmp-1:6.2.1-12.el10
• gnupg2-2.4.5-5.el10
• gnutls-3.8.10-4.el10
• gobject-introspection-1.79.1-7.el10
• gpgme-1.23.2-6.el10
• grep-3.11-10.el10
• grub2-common-1:2.12-54.el10
• grub2-efi-x64-1:2.12-54.el10
• grub2-pc-1:2.12-54.el10
• grub2-pc-modules-1:2.12-54.el10
• grub2-tools-1:2.12-54.el10
• grub2-tools-minimal-1:2.12-54.el10
• gssproxy-0.9.2-10.el10
• gzip-1.13-3.el10
• hostname-3.23-14.el10
• hwdata-0.379-10.9.el10
• ignition-2.26.0-4.el10
• ignition-grub-2.26.0-4.el10
• ima-evm-utils-1.6.2-6.el10
• info-7.1-6.el10
• inih-58-3.el10
• intel-gpu-firmware-20260722-25.el10
• ipcalc-1.0.3-12.el10
• iproute-7.0.0-2.el10
• iproute-tc-7.0.0-2.el10
• iptables-libs-1.8.11-15.el10
• iptables-nft-1.8.11-15.el10
• iputils-20240905-5.el10
• irqbalance-2:1.9.4-6.el10
• iscsi-initiator-utils-6.2.1.11-2.git4b3e853.el10
• iscsi-initiator-utils-iscsiuio-6.2.1.11-2.git4b3e853.el10
• isns-utils-libs-0.103-1.el10
• jansson-2.14-3.el10
• jose-14-102.el10
• jq-1.7.1-13.el10
• json-c-0.18-3.el10
• json-glib-1.8.0-5.el10
• kbd-2.6.4-7.el10
• kbd-legacy-2.6.4-7.el10
• kbd-misc-2.6.4-7.el10
• kdump-utils-1.0.58-15.el10
• kernel-6.12.0-254.el10
• kernel-core-6.12.0-254.el10
• kernel-modules-6.12.0-254.el10
• kernel-modules-core-6.12.0-254.el10
• kernel-modules-extra-6.12.0-254.el10
• kexec-tools-2.0.32-3.el10
• keyutils-1.6.3-5.el10
• keyutils-libs-1.6.3-5.el10
• kmod-31-13.el10
• kmod-libs-31-13.el10
• kpartx-0.9.9-19.el10
• krb5-libs-1.21.3-11.el10
• less-661-3.el10
• libacl-2.4.0-2.el10
• libaio-0.3.112-1.el10
• libarchive-3.7.7-8.el10
• libassuan-2.5.6-6.el10
• libattr-2.6.0-2.el10
• libbasicobjects-0.1.1-58.el10
• libblkid-2.40.2-20.el10
• libbpf-2:1.7.0-2.el10
• libcap-2.69-7.el10
• libcap-ng-0.9.3-2.el10
• libcbor-0.11.0-3.el10
• libcollection-0.7.0-58.el10
• libcom_err-1.47.1-5.el10
• libcomps-0.1.21-3.el10
• libconfig-1.7.3-10.el10
• libcurl-minimal-8.12.1-6.el10
• libdhash-0.5.0-58.el10
• libdnf-0.73.1-17.el10
• libdnf-plugin-subscription-manager-1.30.15-1.el10
• libdrm-2.4.128-1.el10
• libeconf-0.6.2-4.el10
• libedit-3.1-52.20230828cvs.el10
• libev-4.33-15.el10
• libevent-2.1.12-16.el10
• libfdisk-2.40.2-20.el10
• libffi-3.4.4-10.el10
• libfido2-1.14.0-7.el10
• libgcc-14.4.1-1.el10
• libgcrypt-1.11.0-7.el10
• libgomp-14.4.1-1.el10
• libgpg-error-1.50-2.el10
• libibverbs-62.0-2.el10
• libicu-74.2-5.el10
• libidn2-2.3.7-3.el10
• libini_config-1.3.1-58.el10
• libipa_hbac-2.13.1-2.el10
• libjcat-0.2.2-2.el10
• libjose-14-102.el10
• libkcapi-1.5.0-3.el10
• libkcapi-hasher-1.5.0-3.el10
• libkcapi-hmaccalc-1.5.0-3.el10
• libksba-1.6.7-2.el10
• libldb-4.24.5-100.el10
• libluksmeta-10-1.el10
• libmaxminddb-1.9.1-4.el10
• libmicrohttpd-1:1.0.0-3.el10
• libmnl-1.0.5-7.el10
• libmodulemd-2.15.0-12.el10
• libmount-2.40.2-20.el10
• libmspack-0.10.1-0.14.alpha.el10
• libndp-1.9-2.el10
• libnet-1.3-7.el10
• libnetfilter_conntrack-1.0.9-12.el10
• libnfnetlink-1.0.2-3.el10
• libnfsidmap-1:2.8.3-8.el10
• libnftnl-1.3.0-3.el10
• libnghttp2-1.68.0-5.el10
• libnl3-3.11.0-1.el10
• libnvme-1.16.2-1.el10
• libpath_utils-0.2.1-58.el10
• libpcap-14:1.10.4-7.el10
• libpciaccess-0.16-16.el10
• libpkgconf-2.1.0-3.el10
• libpwquality-1.4.5-13.el10
• libref_array-0.1.5-58.el10
• librepo-1.19.0-1.el10
• libseccomp-2.5.6-1.el10
• libselinux-3.11-1.el10
• libselinux-utils-3.11-1.el10
• libsemanage-3.11-1.el10
• libsepol-3.11-1.el10
• libsmartcols-2.40.2-20.el10
• libsmbclient-4.24.5-100.el10
• libsolv-0.7.33-5.el10
• libss-1.47.1-5.el10
• libsss_certmap-2.13.1-2.el10
• libsss_idmap-2.13.1-2.el10
• libsss_nss_idmap-2.13.1-2.el10
• libsss_sudo-2.13.1-2.el10
• libstdc++-14.4.1-1.el10
• libtalloc-2.4.4-100.el10
• libtasn1-4.20.0-5.el10
• libtdb-1.4.15-100.el10
• libtevent-0.17.1-100.el10
• libtirpc-1.3.5-1.el10
• libtool-ltdl-2.4.7-14.el10
• libunistring-1.1-10.el10
• liburing-2.12-1.el10
• libusb1-1.0.30-1.el10
• libutempter-1.2.1-15.el10
• libuuid-2.40.2-20.el10
• libuv-1:1.52.1-1.el10
• libverto-0.3.2-10.el10
• libverto-libev-0.3.2-10.el10
• libwbclient-4.24.5-100.el10
• libxcrypt-4.4.36-10.el10
• libxml2-2.12.5-15.el10
• libxmlb-0.3.28-1.el10
• libxslt-1.1.39-10.el10
• libyaml-0.2.5-16.el10
• libzstd-1.5.5-9.el10
• linux-firmware-20260722-25.el10
• linux-firmware-whence-20260722-25.el10
• lldpad-1.1.1-4.gitf1dd9eb.el10
• lmdb-libs-0.9.32-4.el10
• logrotate-3.22.0-5.el10
• lsof-4.98.0-7.el10
• lua-libs-5.4.8-1.el10
• luksmeta-10-1.el10
• lvm2-10:2.03.41-3.el10
• lvm2-libs-10:2.03.41-3.el10
• lz4-libs-1.9.4-8.el10
• lzo-2.10-14.el10
• makedumpfile-1.7.8-1.el10
• mdadm-4.4-4.el10
• microcode_ctl-4:20260210-1.el10
• mokutil-2:0.7.2-5.el10
• mpdecimal-2.5.1-12.el10
• mpfr-4.2.1-8.el10
• nano-8.1-3.el10
• ncurses-base-6.4-15.20240127.el10
• ncurses-libs-6.4-15.20240127.el10
• net-tools-2.0-0.73.20160912git.el10
• netavark-4:2.0.0-2.el10
• nettle-3.10.1-1.el10
• newt-0.52.24-5.el10
• nfs-utils-1:2.8.3-8.el10
• nftables-1:1.1.5-6.el10
• nmap-ncat-4:7.92-5.el10
• nmstate-2.2.61-1.el10
• npth-1.6-21.el10
• nss-altfiles-2.23.0-6.el10
• numactl-2.0.19-3.el10
• numactl-libs-2.0.19-3.el10
• numad-0.5-50.20251104git.el10
• nvidia-gpu-firmware-20260722-25.el10
• nvme-cli-2.16-2.el10
• oniguruma-6.9.9-7.el10
• open-vm-tools-13.0.10-1.el10
• openldap-2.6.13-1.el10
• openshift-clients-4.22.0-202605222252.p2.g062bc54.assembly.stream.el9
• openshift-kubelet-4.22.0-202606041959.p2.g7250fd5.assembly.stream.el9
• openssh-9.9p1-28.el10
• openssh-clients-9.9p1-28.el10
• openssh-server-9.9p1-28.el10
• openssl-1:3.5.7-2.el10
• openssl-fips-provider-1:3.5.7-2.el10
• openssl-libs-1:3.5.7-2.el10
• openvswitch-selinux-extra-policy-1.0-36.el10s
• openvswitch3.5-3.5.3-5.el10s
• os-prober-1.81-9.el10
• ose-aws-ecr-image-credential-provider-4.22.0-202605191551.p2.gb4bad3f.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.22.0-202605292128.p2.g0e3fc8d.assembly.stream.el9
• ose-crio-credential-provider-4.22.0-202602261640.p2.g83d4961.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.22.0-202605192117.p2.gea31ab8.assembly.stream.el9
• ostree-2026.2-1.el10
• ostree-grub2-2026.2-1.el10
• ostree-libs-2026.2-1.el10
• p11-kit-0.26.4-1.el10
• p11-kit-trust-0.26.4-1.el10
• pam-1.6.1-11.el10
• pam-libs-1.6.1-11.el10
• passt-0^20260728.gf8df3f1-1.el10
• passt-selinux-0^20260728.gf8df3f1-1.el10
• pciutils-3.13.0-6.el10
• pciutils-libs-3.13.0-6.el10
• pcre2-10.44-1.el10.3
• pcre2-syntax-10.44-1.el10.3
• pkgconf-2.1.0-3.el10
• pkgconf-m4-2.1.0-3.el10
• pkgconf-pkg-config-2.1.0-3.el10
• podman-7:6.0.2-1.el10
• podman-sequoia-0.4.0~pqc.3-1.el10
• policycoreutils-3.11-1.el10
• policycoreutils-python-utils-3.11-1.el10
• polkit-125-6.el10
• polkit-libs-125-6.el10
• popt-1.19-8.el10
• procps-ng-4.0.4-13.el10
• protobuf-c-1.5.0-6.el10
• psmisc-23.6-8.el10
• python3-3.12.13-3.el10
• python3-audit-4.0.3-5.el10
• python3-charset-normalizer-3.4.2-1.el10
• python3-cloud-what-1.30.15-1.el10
• python3-dateutil-1:2.9.0.post0-1.el10
• python3-dbus-1.3.2-8.el10
• python3-decorator-5.1.1-12.el10
• python3-distro-1.9.0-5.el10
• python3-dnf-4.20.0-26.el10
• python3-dnf-plugin-versionlock-4.7.0-11.el10
• python3-dnf-plugins-core-4.7.0-11.el10
• python3-file-magic-5.45-12.el10
• python3-gobject-base-3.46.0-7.el10
• python3-gobject-base-noarch-3.46.0-7.el10
• python3-hawkey-0.73.1-17.el10
• python3-idna-3.7-4.el10
• python3-iniparse-0.5-10.el10
• python3-inotify-0.9.6-36.el10
• python3-libcomps-0.1.21-3.el10
• python3-libdnf-0.73.1-17.el10
• python3-librepo-1.19.0-1.el10
• python3-libs-3.12.13-3.el10
• python3-libselinux-3.11-1.el10
• python3-libsemanage-3.11-1.el10
• python3-packaging-24.2-2.el10
• python3-pexpect-4.9.0-6.el10
• python3-pip-wheel-23.3.2-11.el10
• python3-policycoreutils-3.11-1.el10
• python3-ptyprocess-0.7.0-9.el10
• python3-pyyaml-6.0.1-19.el10
• python3-requests-2.32.4-1.el10
• python3-rpm-4.19.1.1-25.el10
• python3-setools-4.7.0-1.el10
• python3-setuptools-69.0.3-12.el10
• python3-six-1.16.0-16.el10
• python3-subscription-manager-rhsm-1.30.15-1.el10
• python3-systemd-235-11.el10
• python3-urllib3-1.26.19-4.el10
• qemu-guest-agent-18:10.1.0-24.el10
• quota-1:4.09-10.el10
• quota-nls-1:4.09-10.el10
• rdma-core-62.0-2.el10
• readline-8.2-11.el10
• rpcbind-1.2.9-0.el10
• rpm-4.19.1.1-25.el10
• rpm-build-libs-4.19.1.1-25.el10
• rpm-libs-4.19.1.1-25.el10
• rpm-ostree-2026.2-1.el10
• rpm-ostree-libs-2026.2-1.el10
• rpm-plugin-audit-4.19.1.1-25.el10
• rpm-plugin-selinux-4.19.1.1-25.el10
• rpm-plugin-syslog-4.19.1.1-25.el10
• rpm-sequoia-1.10.2.3-1.el10
• rpm-sign-libs-4.19.1.1-25.el10
• rsync-3.4.4-1.el10
• samba-client-libs-4.24.5-100.el10
• samba-common-4.24.5-100.el10
• samba-core-libs-4.24.5-100.el10
• samba-ndr-libs-4.24.5-100.el10
• sed-4.9-5.el10
• selinux-policy-42.1.26-1.el10
• selinux-policy-targeted-42.1.26-1.el10
• setup-2.14.5-7.el10
• sg3_utils-1.48-10.el10
• sg3_utils-libs-1.48-10.el10
• shadow-utils-2:4.15.0-13.el10
• shadow-utils-subid-2:4.15.0-13.el10
• shared-mime-info-2.3-8.el10
• shim-x64-16.1-1.el10
• skopeo-2:1.23.0-1.el10
• slang-2.3.3-8.el10
• snappy-1.1.10-7.el10
• socat-1.7.4.4-9.el10
• sos-4.11.2-3.el10
• sqlite-libs-3.46.1-5.el10
• ssh-key-dir-0.1.4-9.el10
• sssd-2.13.1-2.el10
• sssd-ad-2.13.1-2.el10
• sssd-client-2.13.1-2.el10
• sssd-common-2.13.1-2.el10
• sssd-common-pac-2.13.1-2.el10
• sssd-ipa-2.13.1-2.el10
• sssd-krb5-2.13.1-2.el10
• sssd-krb5-common-2.13.1-2.el10
• sssd-ldap-2.13.1-2.el10
• sssd-nfs-idmap-2.13.1-2.el10
• sssd-proxy-2.13.1-2.el10
• stalld-1.26.3-1.el10
• strace-6.12-3.el10
• subscription-manager-1.30.15-1.el10
• subscription-manager-rhsm-certificates-20220623-6.el10
• sudo-1.9.17-9.p2.el10
• systemd-257-31.el10
• systemd-journal-remote-257-31.el10
• systemd-libs-257-31.el10
• systemd-pam-257-31.el10
• systemd-udev-257-31.el10
• tar-2:1.35-11.el10
• tmux-3.3a-14.20230918gitb202a2f.el10
• toolbox-0.3-3.el10
• tpm2-tools-5.7-5.el10
• tpm2-tss-4.1.3-6.el10
• tpm2-tss-fapi-4.1.3-6.el10
• tzdata-2026c-1.el10
• unbound-anchor-1.25.1-1.el10
• unbound-libs-1.25.1-1.el10
• userspace-rcu-0.14.0-7.el10
• util-linux-2.40.2-20.el10
• util-linux-core-2.40.2-20.el10
• vim-data-2:9.1.083-15.el10
• vim-minimal-2:9.1.083-15.el10
• virt-what-1.27-3.el10
• which-2.21-44.el10
• xfsprogs-6.16.0-1.el10
• xmlsec1-1:1.2.39-3.el10
• xmlsec1-openssl-1:1.2.39-3.el10
• xz-1:5.6.2-4.el10
• xz-libs-1:5.6.2-4.el10
• zlib-ng-compat-2.2.3-3.el10
• zram-generator-1.1.2-14.el10
• zstd-1.5.5-9.el10

Changed:

• NetworkManager 1:1.56.0-1.el10 → 1:1.58.0-1.el10
• NetworkManager-cloud-setup 1:1.56.0-1.el10 → 1:1.58.0-1.el10
• NetworkManager-libnm 1:1.56.0-1.el10 → 1:1.58.0-1.el10
• NetworkManager-ovs 1:1.56.0-1.el10 → 1:1.58.0-1.el10
• NetworkManager-tui 1:1.56.0-1.el10 → 1:1.58.0-1.el10
• aardvark-dns 2:1.17.0-1.el10 → 4:2.0.0-2.el10
• acl 2.3.2-4.el10 → 2.4.0-2.el10
• afterburn 5.10.0-1.el10 → 5.10.0-2.el10
• afterburn-dracut 5.10.0-1.el10 → 5.10.0-2.el10
• amd-gpu-firmware 20260130-22.el10 → 20260722-25.el10
• amd-ucode-firmware 20260130-22.el10 → 20260722-25.el10
• attr 2.5.2-5.el10 → 2.6.0-2.el10
• authselect 1.5.2-1.el10 → 1.5.3-1.el10
• authselect-libs 1.5.2-1.el10 → 1.5.3-1.el10
• bind-libs 32:9.18.33-15.el10 → 32:9.18.33-19.el10
• bind-license 32:9.18.33-15.el10 → 32:9.18.33-19.el10
• bind-utils 32:9.18.33-15.el10 → 32:9.18.33-19.el10
• bootc 1.15.1-2.el10 → 1.16.6-1.el10
• bootupd 0.2.32-2.el10 → 0.2.35-1.el10
• c-ares 1.34.6-1.el10 → 1.34.6-4.el10
• centos-gpg-keys 10.0-21.el10 → 10.0-23.el10
• centos-stream-release 10.0-21.el10 → 10.0-23.el10
• centos-stream-repos 10.0-21.el10 → 10.0-23.el10
• checkpolicy 3.10-1.el10 → 3.11-1.el10
• cifs-utils 7.5-2.el10 → 7.6-2.el10
• clevis 22-1.el10 → 23-2.el10
• clevis-dracut 22-1.el10 → 23-2.el10
• clevis-luks 22-1.el10 → 23-2.el10
• clevis-pin-tpm2 0.5.3-9.el10 → 0.5.5-1.el10
• clevis-systemd 22-1.el10 → 23-2.el10
• conmon 3:2.2.1-3.el10 → 3:2.2.1-4.el10
• container-selinux 4:2.247.0-1.el10 → 4:2.250.0-1.el10
• containers-common 6:5.8-2.el10 → 6:6.0-2.el10
• containers-common-extra 6:5.8-2.el10 → 6:6.0-2.el10
• coreutils 9.5-7.el10 → 9.5-12.el10
• coreutils-common 9.5-7.el10 → 9.5-12.el10
• cri-o 1.35.2-1.el10s → 1.35.5-1.el10s
• criu 4.2-3.el10 → 4.2-8.el10
• criu-libs 4.2-3.el10 → 4.2-8.el10
• crun 1.27-1.el10 → 1.28-1.el10
• crypto-policies 20260216-1.git0e54016.el10 → 20260708-1.git988eb15.el10
• crypto-policies-scripts 20260216-1.git0e54016.el10 → 20260708-1.git988eb15.el10
• cryptsetup 2.8.1-2.el10 → 2.8.6-2.el10
• cryptsetup-libs 2.8.1-2.el10 → 2.8.6-2.el10
• curl 8.12.1-5.el10 → 8.12.1-6.el10
• dbus 1:1.14.10-5.el10 → 1:1.14.10-6.el10
• dbus-common 1:1.14.10-5.el10 → 1:1.14.10-6.el10
• dbus-libs 1:1.14.10-5.el10 → 1:1.14.10-6.el10
• dbus-tools 1:1.14.10-5.el10 → 1:1.14.10-6.el10
• device-mapper 10:1.02.210-2.el10 → 10:1.02.215-3.el10
• device-mapper-event 10:1.02.210-2.el10 → 10:1.02.215-3.el10
• device-mapper-event-libs 10:1.02.210-2.el10 → 10:1.02.215-3.el10
• device-mapper-libs 10:1.02.210-2.el10 → 10:1.02.215-3.el10
• device-mapper-persistent-data 1.3.0-1.el10 → 1.3.2-1.el10
• dnf 4.20.0-23.el10 → 4.20.0-26.el10
• dnf-data 4.20.0-23.el10 → 4.20.0-26.el10
• dnsmasq 2.90-5.el10 → 2.90-7.el10
• dracut 107-4.el10 → 107-9.el10
• dracut-network 107-4.el10 → 107-9.el10
• dracut-squash 107-4.el10 → 107-9.el10
• elfutils-default-yama-scope 0.194-2.el10 → 0.195-1.el10
• elfutils-libelf 0.194-2.el10 → 0.195-1.el10
• elfutils-libs 0.194-2.el10 → 0.195-1.el10
• ethtool 2:6.15-2.el10 → 2:6.19-1.el10
• expat 2.7.3-1.el10 → 2.7.3-2.el10
• file 5.45-9.el10 → 5.45-12.el10
• file-libs 5.45-9.el10 → 5.45-12.el10
• firewalld-filesystem 2.4.0-1.el10 → 2.4.3-2.el10
• flatpak-session-helper 1.16.0-9.el10 → 1.18.0-1.el10
• fwupd 2.0.19-2.el10 → 2.1.6-1.el10
• glib2 2.80.4-12.el10 → 2.80.4-14.el10
• glibc 2.39-117.el10 → 2.39-133.el10
• glibc-common 2.39-117.el10 → 2.39-133.el10
• glibc-gconv-extra 2.39-117.el10 → 2.39-133.el10
• glibc-minimal-langpack 2.39-117.el10 → 2.39-133.el10
• gnupg2 2.4.5-4.el10 → 2.4.5-5.el10
• gnutls 3.8.10-3.el10 → 3.8.10-4.el10
• gobject-introspection 1.79.1-6.el10 → 1.79.1-7.el10
• grub2-common 1:2.12-45.el10 → 1:2.12-54.el10
• grub2-efi-x64 1:2.12-45.el10 → 1:2.12-54.el10
• grub2-pc 1:2.12-45.el10 → 1:2.12-54.el10
• grub2-pc-modules 1:2.12-45.el10 → 1:2.12-54.el10
• grub2-tools 1:2.12-45.el10 → 1:2.12-54.el10
• grub2-tools-minimal 1:2.12-45.el10 → 1:2.12-54.el10
• hwdata 0.379-10.8.el10 → 0.379-10.9.el10
• ignition 2.26.0-2.el10 → 2.26.0-4.el10
• ignition-grub 2.26.0-2.el10 → 2.26.0-4.el10
• ima-evm-utils 1.6.2-5.el10 → 1.6.2-6.el10
• intel-gpu-firmware 20260130-22.el10 → 20260722-25.el10
• iproute 6.17.0-2.el10 → 7.0.0-2.el10
• iproute-tc 6.17.0-2.el10 → 7.0.0-2.el10
• iptables-libs 1.8.11-12.el10 → 1.8.11-15.el10
• iptables-nft 1.8.11-12.el10 → 1.8.11-15.el10
• iscsi-initiator-utils 6.2.1.11-0.git4b3e853.el10 → 6.2.1.11-2.git4b3e853.el10
• iscsi-initiator-utils-iscsiuio 6.2.1.11-0.git4b3e853.el10 → 6.2.1.11-2.git4b3e853.el10
• jq 1.7.1-11.el10 → 1.7.1-13.el10
• kernel 6.12.0-224.el10 → 6.12.0-254.el10
• kernel-core 6.12.0-224.el10 → 6.12.0-254.el10
• kernel-modules 6.12.0-224.el10 → 6.12.0-254.el10
• kernel-modules-core 6.12.0-224.el10 → 6.12.0-254.el10
• kernel-modules-extra 6.12.0-224.el10 → 6.12.0-254.el10
• krb5-libs 1.21.3-9.el10 → 1.21.3-11.el10
• libacl 2.3.2-4.el10 → 2.4.0-2.el10
• libaio 0.3.111-22.el10 → 0.3.112-1.el10
• libattr 2.5.2-5.el10 → 2.6.0-2.el10
• libblkid 2.40.2-19.el10 → 2.40.2-20.el10
• libbpf 2:1.7.0-1.el10 → 2:1.7.0-2.el10
• libcap-ng 0.8.4-6.el10 → 0.9.3-2.el10
• libcurl-minimal 8.12.1-5.el10 → 8.12.1-6.el10
• libdnf 0.73.1-15.el10 → 0.73.1-17.el10
• libdnf-plugin-subscription-manager 1.30.14-1.el10 → 1.30.15-1.el10
• libfdisk 2.40.2-19.el10 → 2.40.2-20.el10
• libgcc 14.3.1-4.4.el10 → 14.4.1-1.el10
• libgcrypt 1.11.0-6.el10 → 1.11.0-7.el10
• libgomp 14.3.1-4.4.el10 → 14.4.1-1.el10
• libibverbs 61.0-1.el10 → 62.0-2.el10
• libipa_hbac 2.12.0-3.el10 → 2.13.1-2.el10
• libldb 4.23.5-107.el10 → 4.24.5-100.el10
• libmount 2.40.2-19.el10 → 2.40.2-20.el10
• libnfsidmap 1:2.8.3-7.el10 → 1:2.8.3-8.el10
• libnghttp2 1.68.0-4.el10 → 1.68.0-5.el10
• libnvme 1.16.1-3.el10 → 1.16.2-1.el10
• libpwquality 1.4.5-12.el10 → 1.4.5-13.el10
• libselinux 3.10-1.el10 → 3.11-1.el10
• libselinux-utils 3.10-1.el10 → 3.11-1.el10
• libsemanage 3.10-1.el10 → 3.11-1.el10
• libsepol 3.10-1.el10 → 3.11-1.el10
• libsmartcols 2.40.2-19.el10 → 2.40.2-20.el10
• libsmbclient 4.23.5-107.el10 → 4.24.5-100.el10
• libsolv 0.7.33-2.el10 → 0.7.33-5.el10
• libsss_certmap 2.12.0-3.el10 → 2.13.1-2.el10
• libsss_idmap 2.12.0-3.el10 → 2.13.1-2.el10
• libsss_nss_idmap 2.12.0-3.el10 → 2.13.1-2.el10
• libsss_sudo 2.12.0-3.el10 → 2.13.1-2.el10
• libstdc++ 14.3.1-4.4.el10 → 14.4.1-1.el10
• libtalloc 2.4.3-100.el10 → 2.4.4-100.el10
• libtasn1 4.20.0-1.el10 → 4.20.0-5.el10
• libtdb 1.4.14-100.el10 → 1.4.15-100.el10
• libusb1 1.0.29-3.el10 → 1.0.30-1.el10
• libuuid 2.40.2-19.el10 → 2.40.2-20.el10
• libuv 1:1.51.0-1.el10 → 1:1.52.1-1.el10
• libwbclient 4.23.5-107.el10 → 4.24.5-100.el10
• libxml2 2.12.5-10.el10 → 2.12.5-15.el10
• libxmlb 0.3.24-1.el10 → 0.3.28-1.el10
• libxslt 1.1.39-8.el10 → 1.1.39-10.el10
• linux-firmware 20260130-22.el10 → 20260722-25.el10
• linux-firmware-whence 20260130-22.el10 → 20260722-25.el10
• lvm2 10:2.03.36-2.el10 → 10:2.03.41-3.el10
• lvm2-libs 10:2.03.36-2.el10 → 10:2.03.41-3.el10
• mdadm 4.4-3.el10 → 4.4-4.el10
• mokutil 2:0.7.2-4.el10 → 2:0.7.2-5.el10
• netavark 2:1.17.2-1.el10 → 4:2.0.0-2.el10
• nfs-utils 1:2.8.3-7.el10 → 1:2.8.3-8.el10
• nftables 1:1.1.5-3.el10 → 1:1.1.5-6.el10
• nmstate 2.2.59-1.el10 → 2.2.61-1.el10
• nvidia-gpu-firmware 20260130-22.el10 → 20260722-25.el10
• openldap 2.6.10-1.el10 → 2.6.13-1.el10
• openshift-clients 4.22.0-202604110549.p2.g66dee73.assembly.stream.el9 → 4.22.0-202605222252.p2.g062bc54.assembly.stream.el9
• openshift-kubelet 4.22.0-202604271615.p2.gb0a9fa6.assembly.stream.el9 → 4.22.0-202606041959.p2.g7250fd5.assembly.stream.el9
• openssh 9.9p1-26.el10 → 9.9p1-28.el10
• openssh-clients 9.9p1-26.el10 → 9.9p1-28.el10
• openssh-server 9.9p1-26.el10 → 9.9p1-28.el10
• openssl 1:3.5.5-2.el10 → 1:3.5.7-2.el10
• openssl-fips-provider 1:3.5.5-2.el10 → 1:3.5.7-2.el10
• openssl-libs 1:3.5.5-2.el10 → 1:3.5.7-2.el10
• ose-aws-ecr-image-credential-provider 4.22.0-202603272150.p2.ge73d6a3.assembly.stream.el9 → 4.22.0-202605191551.p2.gb4bad3f.assembly.stream.el9
• ose-azure-acr-image-credential-provider 4.22.0-202603191400.p2.g4c7a764.assembly.stream.el9 → 4.22.0-202605292128.p2.g0e3fc8d.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider 4.22.0-202604110549.p2.g4d9707e.assembly.stream.el9 → 4.22.0-202605192117.p2.gea31ab8.assembly.stream.el9
• ostree 2026.1-1.el10 → 2026.2-1.el10
• ostree-grub2 2026.1-1.el10 → 2026.2-1.el10
• ostree-libs 2026.1-1.el10 → 2026.2-1.el10
• p11-kit 0.26.2-1.el10 → 0.26.4-1.el10
• p11-kit-trust 0.26.2-1.el10 → 0.26.4-1.el10
• pam 1.6.1-10.el10 → 1.6.1-11.el10
• pam-libs 1.6.1-10.el10 → 1.6.1-11.el10
• passt 0^20251210.gd04c480-3.el10 → 0^20260728.gf8df3f1-1.el10
• passt-selinux 0^20251210.gd04c480-3.el10 → 0^20260728.gf8df3f1-1.el10
• podman 7:5.8.2-1.el10 → 7:6.0.2-1.el10
• podman-sequoia 0.4.0~pqc.2-1.el10 → 0.4.0~pqc.3-1.el10
• policycoreutils 3.10-2.el10 → 3.11-1.el10
• policycoreutils-python-utils 3.10-2.el10 → 3.11-1.el10
• polkit 125-4.el10 → 125-6.el10
• polkit-libs 125-4.el10 → 125-6.el10
• procps-ng 4.0.4-11.el10 → 4.0.4-13.el10
• python3 3.12.13-2.el10 → 3.12.13-3.el10
• python3-cloud-what 1.30.14-1.el10 → 1.30.15-1.el10
• python3-dnf 4.20.0-23.el10 → 4.20.0-26.el10
• python3-dnf-plugin-versionlock 4.7.0-10.el10 → 4.7.0-11.el10
• python3-dnf-plugins-core 4.7.0-10.el10 → 4.7.0-11.el10
• python3-hawkey 0.73.1-15.el10 → 0.73.1-17.el10
• python3-libdnf 0.73.1-15.el10 → 0.73.1-17.el10
• python3-libs 3.12.13-2.el10 → 3.12.13-3.el10
• python3-libselinux 3.10-1.el10 → 3.11-1.el10
• python3-libsemanage 3.10-1.el10 → 3.11-1.el10
• python3-pip-wheel 23.3.2-7.el10 → 23.3.2-11.el10
• python3-policycoreutils 3.10-2.el10 → 3.11-1.el10
• python3-rpm 4.19.1.1-23.el10 → 4.19.1.1-25.el10
• python3-setools 4.6.0-3.el10 → 4.7.0-1.el10
• python3-subscription-manager-rhsm 1.30.14-1.el10 → 1.30.15-1.el10
• python3-urllib3 1.26.19-3.el10 → 1.26.19-4.el10
• qemu-guest-agent 18:10.1.0-16.el10 → 18:10.1.0-24.el10
• rdma-core 61.0-1.el10 → 62.0-2.el10
• rpcbind 1.2.7-3.el10 → 1.2.9-0.el10
• rpm 4.19.1.1-23.el10 → 4.19.1.1-25.el10
• rpm-build-libs 4.19.1.1-23.el10 → 4.19.1.1-25.el10
• rpm-libs 4.19.1.1-23.el10 → 4.19.1.1-25.el10
• rpm-ostree 2026.1-4.el10 → 2026.2-1.el10
• rpm-ostree-libs 2026.1-4.el10 → 2026.2-1.el10
• rpm-plugin-selinux 4.19.1.1-23.el10 → 4.19.1.1-25.el10
• rpm-sequoia 1.10.1.1-2.el10 → 1.10.2.3-1.el10
• rpm-sign-libs 4.19.1.1-23.el10 → 4.19.1.1-25.el10
• rsync 3.4.1-3.el10 → 3.4.4-1.el10
• samba-client-libs 4.23.5-107.el10 → 4.24.5-100.el10
• samba-common 4.23.5-107.el10 → 4.24.5-100.el10
• selinux-policy 42.1.19-1.el10 → 42.1.26-1.el10
• selinux-policy-targeted 42.1.19-1.el10 → 42.1.26-1.el10
• sg3_utils 1.48-7.el10 → 1.48-10.el10
• sg3_utils-libs 1.48-7.el10 → 1.48-10.el10
• shadow-utils 2:4.15.0-11.el10 → 2:4.15.0-13.el10
• shadow-utils-subid 2:4.15.0-11.el10 → 2:4.15.0-13.el10
• shim-x64 15.8-5.el10 → 16.1-1.el10
• skopeo 2:1.22.2-2.el10 → 2:1.23.0-1.el10
• socat 1.7.4.4-8.el10 → 1.7.4.4-9.el10
• sssd 2.12.0-3.el10 → 2.13.1-2.el10
• sssd-ad 2.12.0-3.el10 → 2.13.1-2.el10
• sssd-client 2.12.0-3.el10 → 2.13.1-2.el10
• sssd-common 2.12.0-3.el10 → 2.13.1-2.el10
• sssd-common-pac 2.12.0-3.el10 → 2.13.1-2.el10
• sssd-ipa 2.12.0-3.el10 → 2.13.1-2.el10
• sssd-krb5 2.12.0-3.el10 → 2.13.1-2.el10
• sssd-krb5-common 2.12.0-3.el10 → 2.13.1-2.el10
• sssd-ldap 2.12.0-3.el10 → 2.13.1-2.el10
• sssd-nfs-idmap 2.12.0-3.el10 → 2.13.1-2.el10
• sssd-proxy 2.12.0-3.el10 → 2.13.1-2.el10
• subscription-manager 1.30.14-1.el10 → 1.30.15-1.el10
• sudo 1.9.17-4.p2.el10 → 1.9.17-9.p2.el10
• systemd 257-24.el10 → 257-31.el10
• systemd-journal-remote 257-24.el10 → 257-31.el10
• systemd-libs 257-24.el10 → 257-31.el10
• systemd-pam 257-24.el10 → 257-31.el10
• systemd-udev 257-24.el10 → 257-31.el10
• tmux 3.3a-13.20230918gitb202a2f.el10 → 3.3a-14.20230918gitb202a2f.el10
• tzdata 2026a-1.el10 → 2026c-1.el10
• unbound-anchor 1.24.2-7.el10 → 1.25.1-1.el10
• unbound-libs 1.24.2-7.el10 → 1.25.1-1.el10
• util-linux 2.40.2-19.el10 → 2.40.2-20.el10
• util-linux-core 2.40.2-19.el10 → 2.40.2-20.el10
• vim-data 2:9.1.083-10.el10 → 2:9.1.083-15.el10
• vim-minimal 2:9.1.083-10.el10 → 2:9.1.083-15.el10

Removed:

• avahi-libs 0.9~rc2-3.el10
• gpg-pubkey 764429e6-55567027
• samba-common-libs 4.23.5-107.el10

Added:

• python3-file-magic 5.45-12.el10
• python3-packaging 24.2-2.el10
• python3-pexpect 4.9.0-6.el10
• python3-ptyprocess 0.7.0-9.el10
• python3-pyyaml 6.0.1-19.el10
• python3-setuptools 69.0.3-12.el10
• rpm-plugin-audit 4.19.1.1-25.el10
• rpm-plugin-syslog 4.19.1.1-25.el10
• samba-core-libs 4.24.5-100.el10
• samba-ndr-libs 4.24.5-100.el10
• sos 4.11.2-3.el10

Extensions

Full list (112 packages)

• NetworkManager-libreswan-1.2.30-2.el10.x86_64
• binutils-2.41-65.el10.x86_64
• binutils-gold-2.41-65.el10.x86_64
• bison-3.8.2-9.el10.x86_64
• cmake-filesystem-3.31.8-1.el10.x86_64
• cpp-14.4.1-1.el10.x86_64
• elfutils-debuginfod-client-0.195-1.el10.x86_64
• elfutils-libelf-devel-0.195-1.el10.x86_64
• flex-2.6.4-19.el10.x86_64
• gcc-14.4.1-1.el10.x86_64
• glibc-devel-2.39-133.el10.x86_64
• groff-base-1.23.0-10.el10.x86_64
• kernel-6.12.0-254.el10.x86_64
• kernel-core-6.12.0-254.el10.x86_64
• kernel-devel-6.12.0-254.el10.x86_64
• kernel-headers-6.12.0-254.el10.x86_64
• kernel-modules-6.12.0-254.el10.x86_64
• kernel-modules-extra-6.12.0-254.el10.x86_64
• kernel-rt-core-6.12.0-254.el10.x86_64
• kernel-rt-devel-6.12.0-254.el10.x86_64
• kernel-rt-modules-6.12.0-254.el10.x86_64
• kernel-rt-modules-core-6.12.0-254.el10.x86_64
• kernel-rt-modules-extra-6.12.0-254.el10.x86_64
• krb5-pkinit-1.21.3-11.el10.x86_64
• krb5-workstation-1.21.3-11.el10.x86_64
• ldns-1.8.3-18.el10.x86_64
• libkadm5-1.21.3-11.el10.x86_64
• libmpc-1.3.1-7.el10.x86_64
• libqb-2.0.8-6.el10.x86_64
• libreswan-5.3.2-1.el10.x86_64
• libreswan-minimal-5.3.2-1.el10.x86_64
• libxcrypt-devel-4.4.36-10.el10.x86_64
• libzstd-devel-1.5.5-9.el10.x86_64
• lm_sensors-libs-3.6.0-20.el10.x86_64
• m4-1.4.19-11.el10.x86_64
• make-1:4.4.1-9.el10.x86_64
• ncurses-6.4-15.20240127.el10.x86_64
• nspr-4.39.0-5.el10.x86_64
• nss-3.124.0-5.el10.x86_64
• nss-softokn-3.124.0-5.el10.x86_64
• nss-softokn-freebl-3.124.0-5.el10.x86_64
• nss-sysinit-3.124.0-5.el10.x86_64
• nss-tools-3.124.0-5.el10.x86_64
• nss-util-3.124.0-5.el10.x86_64
• openssl-devel-1:3.5.7-2.el10.x86_64
• openvswitch3.5-ipsec-3.5.3-5.el10s.x86_64
• pcp-conf-7.1.5-2.el10.x86_64
• pcp-libs-7.1.5-2.el10.x86_64
• perl-AutoLoader-5.74-514.el10.noarch
• perl-B-1.89-514.el10.x86_64
• perl-Carp-1.54-511.el10.noarch
• perl-Class-Struct-0.68-514.el10.noarch
• perl-Data-Dumper-2.189-512.el10.x86_64
• perl-Digest-1.20-511.el10.noarch
• perl-Digest-MD5-2.59-6.el10.x86_64
• perl-DynaLoader-1.56-514.el10.x86_64
• perl-Encode-4:3.21-511.el10.x86_64
• perl-Errno-1.38-514.el10.x86_64
• perl-Exporter-5.78-511.el10.noarch
• perl-Fcntl-1.18-514.el10.x86_64
• perl-File-Basename-2.86-514.el10.noarch
• perl-File-Path-2.18-512.el10.noarch
• perl-File-Temp-1:0.231.100-512.el10.noarch
• perl-File-stat-1.14-514.el10.noarch
• perl-FileHandle-2.05-514.el10.noarch
• perl-Getopt-Long-1:2.58-3.el10.noarch
• perl-Getopt-Std-1.14-514.el10.noarch
• perl-HTTP-Tiny-0.088-512.el10.noarch
• perl-IO-1.55-514.el10.x86_64
• perl-IO-Socket-IP-0.42-512.el10.noarch
• perl-IO-Socket-SSL-2.085-3.el10.noarch
• perl-IPC-Open3-1.22-514.el10.noarch
• perl-MIME-Base64-3.16-511.el10.x86_64
• perl-Mozilla-CA-20231213-5.el10.noarch
• perl-NDBM_File-1.17-514.el10.x86_64
• perl-Net-SSLeay-1.94-9.el10.x86_64
• perl-POSIX-2.20-514.el10.x86_64
• perl-PathTools-3.91-512.el10.x86_64
• perl-Pod-Escapes-1:1.07-511.el10.noarch
• perl-Pod-Perldoc-3.28.01-512.el10.noarch
• perl-Pod-Simple-1:3.45-511.el10.noarch
• perl-Pod-Usage-4:2.03-511.el10.noarch
• perl-Scalar-List-Utils-5:1.63-511.el10.x86_64
• perl-SelectSaver-1.02-514.el10.noarch
• perl-Socket-4:2.038-511.el10.x86_64
• perl-Storable-1:3.32-511.el10.x86_64
• perl-Symbol-1.09-514.el10.noarch
• perl-Term-ANSIColor-5.01-512.el10.noarch
• perl-Term-Cap-1.18-511.el10.noarch
• perl-Text-ParseWords-3.31-511.el10.noarch
• perl-Text-Tabs+Wrap-2024.001-511.el10.noarch
• perl-Time-Local-2:1.350-511.el10.noarch
• perl-URI-5.27-3.el10.noarch
• perl-base-2.27-514.el10.noarch
• perl-constant-1.33-512.el10.noarch
• perl-if-0.61.000-514.el10.noarch
• perl-interpreter-4:5.40.2-514.el10.x86_64
• perl-libnet-3.15-512.el10.noarch
• perl-libs-4:5.40.2-514.el10.x86_64
• perl-locale-1.12-514.el10.noarch
• perl-mro-1.29-514.el10.x86_64
• perl-overload-1.37-514.el10.noarch
• perl-overloading-0.02-514.el10.noarch
• perl-parent-1:0.241-512.el10.noarch
• perl-podlators-1:5.01-511.el10.noarch
• perl-vars-1.05-514.el10.noarch
• protobuf-3.19.6-15.el10.x86_64
• python3-openvswitch3.5-3.5.3-5.el10s.x86_64
• sysstat-12.7.6-4.el10.x86_64
• usbguard-1.1.4-2.el10.x86_64
• usbguard-selinux-1.1.4-2.el10.noarch
• zlib-ng-compat-devel-2.2.3-3.el10.x86_64

CentOS Stream CoreOS base layer: 10 upgraded from 10.0.20260428-0 to 10.0.20260806-0

OCPBUGS-87872: Add support for hermetic builds via Cachi2 prefetched CoreOS base layer: ISOs #96

View changelog in Markdown or change previous release: 4.22.0-okd-scos.74.22.0-okd-scos.64.22.0-okd-scos.54.22.0-okd-scos.44.22.0-okd-scos.34.22.0-okd-scos.24.22.0-okd-scos.14.22.0-okd-scos.04.21.0-okd-scos.114.21.0-okd-scos.104.21.0-okd-scos.94.21.0-okd-scos.84.21.0-okd-scos.74.21.0-okd-scos.64.21.0-okd-scos.54.21.0-okd-scos.44.21.0-okd-scos.34.21.0-okd-scos.24.21.0-okd-scos.14.21.0-okd-scos.04.20.0-okd-scos.174.20.0-okd-scos.164.20.0-okd-scos.154.20.0-okd-scos.144.20.0-okd-scos.134.20.0-okd-scos.124.20.0-okd-scos.114.20.0-okd-scos.104.20.0-okd-scos.94.20.0-okd-scos.84.20.0-okd-scos.74.20.0-okd-scos.64.20.0-okd-scos.54.20.0-okd-scos.44.20.0-okd-scos.34.20.0-okd-scos.24.20.0-okd-scos.14.20.0-okd-scos.04.19.0-okd-scos.194.19.0-okd-scos.184.19.0-okd-scos.174.19.0-okd-scos.164.19.0-okd-scos.154.19.0-okd-scos.144.19.0-okd-scos.134.19.0-okd-scos.124.19.0-okd-scos.114.19.0-okd-scos.104.19.0-okd-scos.94.19.0-okd-scos.84.19.0-okd-scos.74.19.0-okd-scos.64.19.0-okd-scos.54.19.0-okd-scos.44.19.0-okd-scos.34.19.0-okd-scos.24.19.0-okd-scos.14.19.0-okd-scos.04.18.0-okd-scos.104.18.0-okd-scos.94.18.0-okd-scos.84.18.0-okd-scos.74.18.0-okd-scos.64.18.0-okd-scos.54.18.0-okd-scos.44.18.0-okd-scos.34.18.0-okd-scos.24.18.0-okd-scos.14.18.0-okd-scos.04.17.0-okd-scos.34.17.0-okd-scos.24.17.0-okd-scos.14.17.0-okd-scos.04.16.0-okd-scos.14.16.0-okd-scos.0───5.1.0-0.okd-scos-2026-08-06-182818───5.0.0-0.okd-scos-nightly-2026-08-19-1508185.0.0-0.okd-scos-nightly-2026-08-18-2148135.0.0-0.okd-scos-nightly-2026-08-18-0948135.0.0-0.okd-scos-nightly-2026-08-14-1632575.0.0-0.okd-scos-nightly-2026-08-13-162723───5.0.0-0.okd-scos-2026-08-20-0656295.0.0-0.okd-scos-2026-08-19-1856295.0.0-0.okd-scos-2026-08-19-0656295.0.0-0.okd-scos-2026-08-18-1856295.0.0-0.okd-scos-2026-08-18-0656295.0.0-0.okd-scos-2026-08-17-1856295.0.0-0.okd-scos-2026-08-13-0934595.0.0-0.okd-scos-2026-08-12-2134595.0.0-0.okd-scos-2026-08-12-0934595.0.0-0.okd-scos-2026-08-11-213459───4.23.0-0.okd-scos-nightly-2026-06-19-2121094.23.0-0.okd-scos-nightly-2026-06-19-0921094.23.0-0.okd-scos-nightly-2026-03-09-153314───4.23.0-0.okd-scos-2026-08-01-0343024.23.0-0.okd-scos-2026-07-31-1543024.23.0-0.okd-scos-2026-07-29-1405184.23.0-0.okd-scos-2026-03-09-153314───4.22.0-0.okd-scos-nightly-2026-08-20-0201354.22.0-0.okd-scos-nightly-2026-08-19-1357264.22.0-0.okd-scos-nightly-2026-08-19-0116354.22.0-0.okd-scos-nightly-2026-08-18-1316354.22.0-0.okd-scos-nightly-2026-08-18-011635───4.22.0-0.okd-scos-2026-08-20-0922484.22.0-0.okd-scos-2026-08-19-2122484.22.0-0.okd-scos-2026-08-19-0922484.22.0-0.okd-scos-2026-08-14-1224334.22.0-0.okd-scos-2026-08-11-1536534.22.0-0.okd-scos-2026-08-10-0843394.22.0-0.okd-scos-2026-08-05-173256───4.21.0-0.okd-scos-nightly-2026-08-20-1308174.21.0-0.okd-scos-nightly-2026-08-20-0108174.21.0-0.okd-scos-nightly-2026-08-19-0309264.21.0-0.okd-scos-nightly-2026-08-18-1509264.21.0-0.okd-scos-nightly-2026-08-12-1324354.21.0-0.okd-scos-nightly-2026-08-12-0124354.21.0-0.okd-scos-nightly-2026-08-11-1322274.21.0-0.okd-scos-nightly-2026-08-11-012227───4.21.0-0.okd-scos-2026-07-29-0152434.21.0-0.okd-scos-2026-07-28-1352434.21.0-0.okd-scos-2026-07-27-2036484.21.0-0.okd-scos-2026-07-22-1643374.21.0-0.okd-scos-2026-07-22-0443374.21.0-0.okd-scos-2026-07-21-1643374.21.0-0.okd-scos-2026-07-21-0443374.21.0-0.okd-scos-2026-07-20-1643374.21.0-0.okd-scos-2026-07-14-1808504.21.0-0.okd-scos-2026-07-14-012503───4.20.0-0.okd-scos-2026-02-10-1309514.20.0-0.okd-scos-2026-02-07-0016394.20.0-0.okd-scos-2026-02-06-1216394.20.0-0.okd-scos-2026-02-06-0016394.20.0-0.okd-scos-2026-02-05-1216384.20.0-0.okd-scos-2026-02-05-001637───4.19.0-0.okd-scos-2025-10-25-0018304.19.0-0.okd-scos-2025-10-24-1218294.19.0-0.okd-scos-2025-10-24-0018284.19.0-0.okd-scos-2025-10-23-1218284.19.0-0.okd-scos-2025-10-23-001828───4.18.0-0.okd-scos-2025-05-27-0825374.18.0-0.okd-scos-2025-05-26-2025374.18.0-0.okd-scos-2025-05-26-0825374.18.0-0.okd-scos-2025-05-23-0333574.18.0-0.okd-scos-2025-05-22-153357───4.17.0-0.okd-scos-2025-02-25-0904554.17.0-0.okd-scos-2025-02-24-2104554.17.0-0.okd-scos-2025-02-24-0904544.17.0-0.okd-scos-2025-02-23-2104544.17.0-0.okd-scos-2025-02-22-211215───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2025-06-27-1341344.15.0-0.okd-2025-06-17-1652194.15.0-0.okd-2025-05-02-1402244.15.0-0.okd-2025-04-03-2126204.15.0-0.okd-2025-04-02-1800124.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───5.0.0-okd-scos.ec.75.0.0-okd-scos.ec.65.0.0-okd-scos.ec.55.0.0-okd-scos.ec.45.0.0-okd-scos.ec.35.0.0-okd-scos.ec.25.0.0-okd-scos.ec.15.0.0-okd-scos.ec.0───4.22.0-okd-scos.ec.164.22.0-okd-scos.ec.154.22.0-okd-scos.ec.144.22.0-okd-scos.ec.134.22.0-okd-scos.ec.124.22.0-okd-scos.ec.114.22.0-okd-scos.ec.104.22.0-okd-scos.ec.94.22.0-okd-scos.ec.84.22.0-okd-scos.ec.74.22.0-okd-scos.ec.64.22.0-okd-scos.ec.54.22.0-okd-scos.ec.44.22.0-okd-scos.ec.34.22.0-okd-scos.ec.24.22.0-okd-scos.ec.14.22.0-okd-scos.ec.04.21.0-okd-scos.ec.194.21.0-okd-scos.ec.184.21.0-okd-scos.ec.174.21.0-okd-scos.ec.164.21.0-okd-scos.ec.154.21.0-okd-scos.ec.144.21.0-okd-scos.ec.134.21.0-okd-scos.ec.124.21.0-okd-scos.ec.114.21.0-okd-scos.ec.104.21.0-okd-scos.ec.94.21.0-okd-scos.ec.84.21.0-okd-scos.ec.74.21.0-okd-scos.ec.64.21.0-okd-scos.ec.54.21.0-okd-scos.ec.44.21.0-okd-scos.ec.34.21.0-okd-scos.ec.24.21.0-okd-scos.ec.14.21.0-okd-scos.ec.0───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424

Source code for this page located on github