Back to index

Download installer and client with:

oc adm release extract --tools registry.ci.openshift.org/origin/release-scos:5.0.0-0.okd-scos-nightly-2026-08-06-054424

Qualifiers (status api): None

Tests:

• Blocking jobs
  • aws Failed (2 retries) periodic-ci-openshift-release-main-okd-scos-5.0-e2e-aws-ovn

    • Attempt 1 Failed
    • Attempt 2 Failed
    • Attempt 3 Failed
• Informing jobs
  • agent-single-node-ipv6 Failed periodic-ci-openshift-release-main-okd-scos-5.0-e2e-agent-single-node-ipv6
  • aws-ovn-techpreview Failed (2 retries) periodic-ci-openshift-release-main-okd-scos-5.0-e2e-aws-ovn-techpreview

    • Attempt 1 Failed
    • Attempt 2 Failed
    • Attempt 3 Failed
  • aws-upgrade Failed (1 retry) periodic-ci-openshift-release-main-okd-scos-5.0-e2e-aws-ovn-upgrade

    • Attempt 1 Failed
    • Attempt 2 Failed
  • aws-upgrade-minor Failed periodic-ci-openshift-release-main-okd-scos-5.0-upgrade-from-okd-scos-4.22-e2e-aws-ovn-upgrade
  • gcp Failed periodic-ci-openshift-release-main-okd-scos-5.0-e2e-gcp
  • vsphere Failed periodic-ci-openshift-release-main-okd-scos-5.0-e2e-vsphere-ovn
• Async jobs
  • claude-payload-agent Succeeded periodic-ci-openshift-release-main-claude-payload-agent-okd-scos-no-slack

Upgrades from:

• 5.0.0-0.okd-scos-nightly-2026-07-24-032429 - Failed Failed
• 4.22.0-0.okd-scos-2026-08-05-173256 (changes) - Failed

---

Changes from 5.0.0-0.okd-scos-nightly-2026-07-24-032429

Created: 2026-08-06 05:51:34 +0000 UTC

Image Digest: sha256:f61856be489f19a1dfeed74e037f0053e14bfecd1f0b9151666db80682804304

Components

• Kubectl 1.36.2
• Kubernetes 1.36.2
• Kubernetes Tests upgraded from 1.35.1 to 1.36.2
• CentOS Stream CoreOS 10 upgraded from 10.0.20260721-0 to 10.0.20260729-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
NewOLMPreflightPermissionChecks (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
RouteExternalCertificate (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AWSDualStackInstall (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
IngressControllerMultipleHAProxyVersions (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
CRIOCredentialProviderConfig (0 tests)	Disabled	Enabled (Changed)	Disabled (Changed)	Enabled	Disabled	Enabled (Changed)	Disabled (Changed)	Enabled
NoRegistryClusterInstall (0 tests)	Disabled	Enabled (Changed)	Disabled	Enabled	Disabled	Enabled (Changed)	Disabled	Enabled
OLMLifecycleAndCompatibility (0 tests)	Disabled	Enabled (Changed)	Disabled	Enabled	Disabled	Enabled (Changed)	Disabled	Enabled
BGPBasedVIPManagement (0 tests)			Enabled (New)	Enabled (New)
GatewayAPIManagementMode (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)

New images

• agentic-skills git 39429747 sha256:5a433314a1a5b81f3e27a79226ac8ab8a4c6c65de8b4101c3bc3ce2ca1b7be94

Rebuilt images without code change

• apiserver-network-proxy git 8264c02d sha256:4ddc76d6e3470e6a75a7472b6a6a3e4799a14b0bd93c988d85648a6220501f0e
• aws-ebs-csi-driver git 8b8c4cef sha256:6e322e9c6619b7b6bfccf1165a2d6a6384f853c7dcea7b57e4a94f64655943f7
• aws-kms-encryption-provider git 6ca6eea2 sha256:c537482d93d7d9d290135dee71214c2c216c424f714385db6405174cec651f99
• aws-node-termination-handler git e4ff2aae sha256:bbf5a9d3ad4b93631a0e5326a9f0087181d17b8a2784ebc69f6286b1155aff48
• aws-pod-identity-webhook git 0d33a459 sha256:f5afc1eb3bde3f602fd5d63825b300ab0514c27d36d36515da0b43c6d9d8ed52
• azure-kms-encryption-provider git ca3d747d sha256:4fcbea8dbd7949b247d9c34b3525c1a3b94052b4a0fca8da78315b8f7e8e0496
• azure-service-operator git 0611cd27 sha256:f9b5a359f584caf78fe77f83c5c64864164f8fa288066242a36434644ce9043d
• azure-workload-identity-webhook git 2b4705c5 sha256:bbd5fedece03c43fa229a0a6a15f5eacc5d57d6606a502bd6b00afa41f9a175f
• baremetal-machine-controllers git f2b0db19 sha256:5b8eeac567fbcba30d4d060373c7e8bb00920daa0673275e4a2adcdc8e4b208e
• baremetal-runtimecfg git 66007361 sha256:1b31fc3007ea9f0a1fe58c56d73e84b68f6a4074ae7cb6a3df77fafa143675e7
• cluster-bootstrap git 7b1593a4 sha256:650c1d94b15441963d907011f838c644762731c6523b1d990b75f5bb00032190
• cluster-kube-controller-manager-operator git 4e72164b sha256:85b144cc159d725b63119a2f8bfcae1813ff4658a3f658dddf5e1b52529d2e81
• cluster-kube-scheduler-operator git 56fa3254 sha256:3837bf2754bee1f56c51e1cd3702664eb3f6efcaf4c18d01a12da275f79d9607
• cluster-kube-storage-version-migrator-operator git f5d3bfe6 sha256:4889c58a297428546810ad2acbd6cc76f95884be2cc45f4b88d99043b8fee3df
• cluster-openshift-controller-manager-operator git 34f95b07 sha256:fb9493bc41bbba5da330421bfec774795a067cae7ebd1f3275a55935fa75d4b7
• cluster-policy-controller git 01afc4aa sha256:ade5b3b9ddb9ad822184c3e10fdb6e8154d1a86601d15ee5d4c9acd95e5219bf
• cluster-samples-operator git eee95bab sha256:2418fefef1970aaf93e7eec40a2c389f0811388dfe459ba185684a1e734ababd
• cluster-update-keys git 9607604d sha256:3cd4d89d21f59867fc959f37d9110818e6947b86d5f4605a18193c7825f891ac
• configmap-reloader git ce80869a sha256:0f7229a1f915e51d0724b33a8011a8c407064ed16a4b8ca5d2a4d269a10a83ce
• container-networking-plugins git d6f73950 sha256:3da67c19f4b5058263549a321dde5b5a545f67893106a2ad03aec60965262c83
• containernetworking-plugins-microshift git d6f73950 sha256:e0d1222b7e8067bd7507451d92fe7c33ece8a707bd6c783a1dbb4c5ee3a9e832
• coredns git 37aaba89 sha256:f7aff18b8e0f232e546d6d4eac198bc7423adc3e3d94fd0861b004d1319299f7
• csi-driver-nfs git beb9567b sha256:8ff52a53182771451e0420c55e90c6b711f4681c19bd16dcbaf4c542ecdb47d5
• csi-external-snapshot-metadata git 239703c6 sha256:30fd1213c6f8bd85e06ed0b681921f6434a496b4417bc9f367400a761eca4312
• docker-builder git 2cda03a9 sha256:015aff136fd140214e061ee7d6f22220deb6d0fa3f230f6d700e46f71fd8f121
• etcd git 64f8851a sha256:2dd13fc1301ff598e901b6a9b522c04be31ad1052adf5678cc35c6aef07a67ec
• gcp-pd-csi-driver git 2dad9ff8 sha256:9948df777bf956110d911fa62f71fec6e46ab81a9640e55c62e93172d3407273
• ibm-vpc-block-csi-driver-operator git be4fd017 sha256:515db8e5d6938e53a3c5f6ed76fd490b5d16262036cb8e74e90f57b22d63d78b
• ironic-machine-os-downloader git f8e41b2e sha256:f26d4e704eb14c7ab62dc3c16d817ba7a2794a6acb30cae9030e077be47d95b6
• ironic-static-ip-manager git 486a0418 sha256:269d774e041ed5197d920df1ef3e8a3543ca2a78bbab624e1336a623b687f296
• kube-rbac-proxy git 43c114bc sha256:9d7995a389e7689fbd5808fd7447b78efd49f39993e983cb9fadff065c302597
• kube-state-metrics git 019ecc7d sha256:3780bfb3742f7a6fc3ced3fdfdd4d54119cd96c3700c7fe01fbe8e0b8519e1d5
• kube-storage-version-migrator git 72835e43 sha256:1a088631449ee6527035f3b0261bf26fa2ccc11b1e998ec8a0fa58b2c7aaa42f
• kubevirt-cloud-controller-manager git 5eb884ab sha256:0acbdd48df17b52a22561152448985b7cd9e592294eab6fc3187f792c2409bd5
• kubevirt-csi-driver git 7ff99994 sha256:44abdc51378ad36014bae0d58357a7e36ebc537dbb95ed6ed29b447071d0a26d
• machine-image-customization-controller git 7a348422 sha256:545721b7676e852603208ac23677d377ec8dc97ca749f7d5063be407137a892e
• metallb-frr git 5d3b12b6 sha256:ee3ff1ee0e7776f1aeb39b0be2119de86d89a9db9188423c4ad80cd0aae34151
• multus-admission-controller git 4bb2e206 sha256:105310e5a4002f0d9d195d413a19c85b38df218ec47390328de15ac55288972f
• multus-networkpolicy git 932bdaa4 sha256:2d1357894fed667b3758c0504a68a2eed8c8617890d6d334454f01e24a006b6d
• multus-route-override-cni git 08af4127 sha256:eec6b183da2e754918abb894ea3d9f4da13df9fec65394eb9cf0fa2430b47c4f
• multus-whereabouts-ipam-cni git d918bda2 sha256:86c1e01ea0e2477b147083f84a96ce2d30a4fbe580ec17c4152a7dd887097cfe
• network-interface-bond-cni git 19d390fd sha256:bbf43218dcdbf81e75b2491986061d3cc045d3b6dd7e4258adac1476211af917
• network-metrics-daemon git e0fc86da sha256:4f06e2d5d20ac433ee6178518041399d1211a20ba0f506ba909d98a171be8281
• network-tools git 0b53ac3d sha256:fb288184f1fc543d974196c4e155098ee173521e1eb41307462907160c91541f
• nutanix-cloud-controller-manager git dc584c6b sha256:c2bcb749f8de27f77c9ac2fa0275748472f93b1556d11d03f85cc61987b973ae
• openshift-controller-manager git 5631cf49 sha256:d5aa9d8dc89ed87266d8e26749b698cd5be623d38c0ad924cc1564f26e221e32
• openshift-state-metrics git 0e12f5d6 sha256:071d5f72ce578950bb79e91203f9941ea597cbe5cfac46ca796c975973712ed7
• openstack-machine-api-provider git 6b30092b sha256:19a56fb5b4693f01934d2e02f37b43921b481c6dc64f53019f6be0e3368a537c
• openstack-resource-controller git 58dbc048 sha256:e7747a60bafe1a7c59d6378c31dbec582c927c249989619961394a9a27f22362
• powervs-block-csi-driver git e7c2c09b sha256:88087129fb02908d6ccac5fb675688f367f3083788ec63d945dfbed60764fd7e
• powervs-block-csi-driver-operator git f90431bf sha256:06688fc8144f3881172ce154ea439555319ae7923b74bac8007fde8747f6315f
• powervs-machine-controllers git e88cf81d sha256:39f5c11a1b2dfd29fa6c5ddd6cd223f2ea5a618ee31ab9239ed586e2dcfd85d2
• prom-label-proxy git 4ab9ff73 sha256:b3450af1b6dcbfd2569b80c5b41f7a0be781f0e5178f1e941ed785ba1f11a76b
• route-controller-manager git 59697cf7 sha256:e3d12b7acef673099113ea31e6eb690b1abdc787591839d1a9ab6510c0f70bb7
• telemeter git 22ba1701 sha256:334e0466aab59c26a7c28263eec78f805c4e55c6ef7e24df2285fca119175874
• vsphere-cluster-api-controllers git 557fdf1a sha256:09bef9c523a958905a8e797dee270af18b41d461ee76ae67e86cad9bfcc720fd
• vsphere-csi-driver git 6b18bb29 sha256:a7ded7317038d52e1fe3fd8965643224b9e82692c6f0e6f494f62931de826e48
• vsphere-csi-driver-syncer git 6b18bb29 sha256:bc7e3168200a4573581cf5c4cc1497ff3842543d2f00d56b602ea5c572ab0b3b

agent-installer-api-server

• MGMT-24827: Resource-scoped auth for urlAuth endpoints #10667
• MGMT-24831: Add ntpSources field to InfraEnv and AgentClusterInstall CRDs #10756
• ACM-30180: Honor cluster TLS security profile in Infrastructure Operator #10734
• NO-ISSUE: [master] Bump OCP versions: 4.22 #10735
• MGMT-24939: (assisted-service) Upgrade operator-sdk from v1.10.1 to v1.42.3 (kubebuilder v3→v4 migration) #10716
• NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 5.0 #10733
• MGMT-24903: Fall back to CoreOS image from worker ignition for day-2 persistent-boot #10717
• MULTIARCH-6274: agent: Enable platform external s390x #10424
• MGMT-24352: Reset finalizing timeout on transition from installing-pending-user-action #10293
• OCPBUGS-97919: fix: use typed credentials key to support MAC-based fencing in ABI flow #10477
• ACM-38238: Assisted-installer repos: Set Up Set up Renovate configuration to automatically create Hive API Synchronization PRs #10711
• OCPBUGS-91733: manifest_generator add a label to LUKS root #10676
• NO-ISSUE: [master] Bump OCP versions: 4.18, 4.19 #10724
• NO-ISSUE: Refresh RPM lockfiles RPM lockfile refresh [SECURITY] #10718
• NO-ISSUE: [master] Bump OCP versions: 4.20, 4.21, 4.22 #10715
• NO-ISSUE: [master] Bump OCP versions: 4.13, 4.18, 4.19 #10710
• ACM-35865: CVE-2026-39828 Bump golang.org/x/crypto to v0.52.0 using replace directive (client module) #10617
• And 3 elided commits (e.g. from squash or rebase merges)
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• OCPBUGS-96799: Bump golang.org/x/net from v0.48.0 to v0.55.0 #2244
• OCPBUGS-96696: Wait for all nodes to join before exiting for ABI #2230
• ACM-38238: Assisted-installer repos: Set Up Set up Renovate configuration to automatically create Hive API Synchronization PRs #2224
• Full changelog

agent-installer-node-agent

• NO-ISSUE: Refresh RPM lockfiles RPM lockfile refresh #1578
• MGMT-24903: Preserve encapsulated MachineConfig in filtered ignition #1568
• NO-ISSUE: Refresh RPM lockfiles RPM lockfile refresh #1555
• Full changelog

agent-installer-ui

• Bump ip-address from 10.2.0 to 10.3.1 (#3938) #3938
• Add OptionalConfigurationStep (#3927) #3927
• chore(deps): update konflux references (#3933) #3933
• Bump undici from 7.28.0 to 7.29.0 (#3940) #3940
• Bump fast-uri from 3.1.4 to 3.1.5 (#3939) #3939
• chore(deps): update dependency minimatch to ^10.2.6 (#3936) #3936
• NO-ISSUE: Silence TypeScript deprecation warning (#3937) #3937
• chore(deps): update dependency brace-expansion to ^5.0.9 (#3935) #3935
• Keep NMState resources when deleting BMC hosts (#3931) #3931
• Block installation when custom-manifests-requirements-satisfied validation fails (#3923) #3923
• Upgrade react-router to ^7.18.1 (#3925) #3925
• MGMT-24641: Attempt to choose 5 masters for standalone cluster blocked (#3912) #3912
• Bump tar from 7.5.20 to 7.5.22 (#3921) #3921
• Bump postcss from 8.5.15 to 8.5.23 (#3920) #3920
• Bump uuid from 8.3.2 to 14.0.1 (#3919) #3919
• chore(deps): update dependency brace-expansion to ^5.0.8 (#3916) #3916
• chore(deps): update dependency dompurify to ^3.4.12 (#3917) #3917
• chore(deps): update konflux references (#3913) #3913
• Full changelog

agent-installer-utils

• OCPBUGS-101759: Update Konflux references #331
• OCPBUGS-99905: Update Konflux references #303
• OCPBUGS-99745: Use Operator catalog in 4.22 for OVE #323
• OCPBUGS-87367: Updating ose-agent-installer-utils-container image to be consistent with ART for 5.0 #308
• Full changelog

aws-cloud-controller-manager

• OCPCLOUD-3643: Merge https://github.com/kubernetes/cloud-provider-aws:master (63ec440) into main #160
• Full changelog

aws-cluster-api-controllers

• ✨ OCPCLOUD-3538,OCPCLOUD-3556: Exclude unsupported CAPI CRDs and scope ClusterRole #618
• 🌱 OCPCLOUD-3599: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.13.0 (a84670f) into main #623
• :seedling: OCPBUGS-95028: bump golang.org/x/net to v0.55.0 for CVE-2026-25681 #622
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, gcp-pd-csi-driver-operator, openstack-cinder-csi-driver-operator

• STOR-3060, STOR-3061: implement TLS adherence for AWS EFS and SMB CSI driver operator #587
• STOR-2998: Copy the test manifests from the legacy dir to a top-level test dir #589
• STOR-2997: Auto generate assets for gcp pd csi driver #585
• OCPBUGS-99199: Add networking.k8s.io group policy #579
• STOR-2914: Bump all deps for 5.0.0 #582
• OCPBUGS-99200: Add networking.k8s.io group policy #581
• OCPBUGS-99490: Apply some static assets earlier, before starting controllers #584
• Full changelog

aws-karpenter-provider-aws

• OCPBUGS-100043: Updating aws-karpenter-provider-aws-container image to be consistent with ART for 5.0 #34
• Full changelog

aws-machine-controllers

• OCPCLOUD-3615: Bump k8s to 1.36 and Go to 1.26 #197
• OCPBUGS-47508: Add max-concurrent-reconciles flag to machine actuator #195
• NO-JIRA: Bump golang.org/x/crypto to fix CVE #194
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPCLOUD-3591: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (4128235) into main #164
• Full changelog

azure-cluster-api-controllers

• 🚀 OCPCLOUD-3600: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.26.0 (19ff821) into main #388
• Full changelog

azure-disk-csi-driver

• OCPBUGS-96820: Bump golang.org/x/net from v0.52.0 to v0.55.0 #156
• Full changelog

azure-file-csi-driver

• STOR-2928: Rebase to v1.35.5 for OCP 5.0 #143
• Full changelog

azure-machine-controllers

• OCPCLOUD-3616: Bump k8s to 1.36 and Go to 1.26 #206
• OCPBUGS-92024, OCPBUGS-98075: bump golang.org/x/crypto to v0.54.0 to fix CVEs #203
• OCPBUGS-96854: bump golang.org/x/net to v0.55.0 #204
• Full changelog

baremetal-cluster-api-controllers

• OCPBUGS-98546: Remove dangling symlink #87
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-78995: Azure Machines: Accept explicit image ID #10712
• OCPBUGS-104455: Add a 10sec restart interval for ICC service, so that there is enough time for CRDs to become available #10739
• no-jira: Update hack scripts to set min go version to 1.26 #10738
• CORS-4516: GCP: Configure cloud provider to use mounted creds #10733
• OCPBUGS-98102: Add validations Azure Dualstack #10677
• CORS-4537: GCP: gracefully handle 503 in disk type check #10732
• CORS-3898: azure: Fix the dualstack errors #10656
• OCPEDGE-2788: agent: split fencing credentials placement by identification key #10684
• OCPBUGS-99164: bootstrap: replace envsubst with sed in konnectivity.sh #10728
• CORS-4542: restrict ClusterAPI machine management to only supported platforms #10717
• CORS-4425: gcp: add OS image validation for sovereign clouds #10709
• CNTRLPLANE-2012: Wire signer certs to read PKI config via SignerKeyParams #10595
• OCPBUGS-63133: PowerVS: Error out if VPC does not exist #10137
• OCPBUGS-98696: baremetal: fix provisioning ISO kernel arguments #10702
• no-jira: bump k8s packages to v0.36 #10713
• CORS-4428: gcp: reject PSC endpoint overrides for sovereign clouds #10708
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

baremetal-operator

• NO-ISSUE: Merge upstream 2026-07-30 #516
• NO-ISSUE: Merge upstream 2026-07-25 #513
• Full changelog

cli, cli-artifacts, deployer

• OCPBUGS-101781: Isolate OCP-42982 kubeconfig writes #2337
• OTA-1814: Handle accept risks with different commands #2336
• OCPBUGS-100310: oc login –exec-plugin oc-oidc fails to refresh expired token against Microsoft Entra ID #2332
• Revert “TRT-2817: Revert “Merge pull request #2279 from nbottari9/1814-duplicate-warning”” #2322
• OCPBUGS-99757: Include extra scopes in OIDC token cache key #2323
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

cloud-credential-operator

• CCO-837: Replace deprecated golang/mock with go.uber.org/mock #1069
• NO-ISSUE: Add patrickdillon to OWNERS #1071
• CCO-834, CCO-835, CCO-836: Upgrade to Kubernetes 1.36 with CI and e2e tests #1066
• CORS-4524: Enable GCP custom universe domain support for CCO #1068
• Full changelog

cloud-network-config-controller

• CORS-4523: support GCP custom universe domain #249
• NO-JIRA: Update OWNERS file #229
• CORENET-7047: CNCC K8s rebase to 1.36.2 #223
• Full changelog

cluster-authentication-operator

• NO-JIRA: Bump library-go #962
• CNTRLPLANE-3762: Include system cert pool in proxy resolver transport #961
• CNTRLPLANE-3762: Clear IdP validation hash when all identity providers are removed #960
• NO-JIRA: Update openshift/* #959
• CNTRLPLANE-3762: Add support for component-scoped proxy #946
• CNTRLPLANE-3237: creates the kms status provider from the operator client- #741 #958
• NO-JIRA: add KMS preflight deploy e2e to encryption-kms-2 #956
• CNTRLPLANE-3375: bugfix: make switched controller clear status conditions on delegate controller shutdown #955
• CNTRLPLANE-3361: Update openshift/* #957
• NO-JIRA: Automatic agentic rebase: Update library-go to d8f45c2 #954
• Full changelog

cluster-autoscaler

• OCPBUGS-99660: Fix VPA checkpoint overwrite bug #433
• Full changelog

cluster-autoscaler-operator

• NO-JIRA: Add /release-chores chore cycle skill #382
• OCPBUGS-100034: Dump kube RBAC proxy and do metrics endpoint authn & authz in process #381
• Full changelog

cluster-baremetal-operator

• OCPBUGS-100033: Migrate metrics from kube-rbac-proxy sidecar to controller-runtime’s SecureServing #638
• OCPBUGS-66101: set Progressing=True during cluster update #599
• OCPQE-32094: Address review feedback from PR #622 #637
• METAL-1922: Bump BMO to latest downstream main branch, update the supported TLS groups for BMO #639
• METAL-1833: Add host_fw_components tests to CBO test extension #622
• METAL-1795: Add TLS group/curve support #632
• Full changelog

cluster-capi-controllers

• OCPCLOUD-3434, OCPCLOUD-3556: Exclude unsupported CAPI CRDs and scope ClusterRole #304
• Full changelog

cluster-capi-operator

• OCPCLOUD-3647: Consolidate install-time object processing in toBoxcutterRevision #633
• NO-JIRA: resolve placeholder version for k8s.io/autoscaler APIs #642
• OCPBUGS-100143: e2e: skip CRD Compatibility Checker tests on External topology clusters #638
• NO-JIRA: go.mod: pin k8s.io/cri-streaming to v0.36.2 #639
• OCPBUGS-100246: Fix e2es on CAPI-native clusters #641
• OCPCLOUD-3571: Add OTE e2e tests for ClusterAPIMachineManagementAWS feature gate #613
• OCPCLOUD-3538, OCPCLOUD-3556: manifests-gen: enable KRM plugins and add exclude/rename-resources transformers #621
• OCPBUGS-84321: ClusterAPIMachineManagement: capi-controllers: excessive restarts of during cluster installation #614
• OCPCLOUD-3507: Add OTE e2e tests for ClusterAPIMachineManagement feature gate #606
• NO-JIRA: Fix buildComponentList godoc #632
• Full changelog

cluster-cloud-controller-manager-operator

• CORS-4516: GCP: Update Required Permissions #493
• OCPCLOUD-3610: Update to K8s 1.36.3 dependencies #496
• OCPBUGS-99755: OTE: fix AWS endpoint resolution for non-standard partitions #494
• Full changelog

cluster-config-api

• NE-2777, NE-2778: Implement Gateway API management knob #2890
• Use regex instead of format help for KMS secret name validation #2966
• OCPBUGS-74511: Remove RouteExternalCertificate feature gate #2962
• MON-4607: add zoneinfo to NodeExporterCollectorConfig CRD types #2948
• AGENT-1493: Promote NoRegistryClusterInstall Feature to Default #2859
• MON-4620: expose remote-write protocol version #2958
• CORS-4417: Add UniverseDomain field to GCPPlatformStatus #2963
• OCPNODE-4622: Promote CRIOCredentialProviderConfig feature gate Default #2844
• NE-2823: Promote Multi HAProxy Versions feature to default #2947
• MON-4616: add support for dmmultipath collector #2956
• CORS-4387: Promote AWS DualStack to Default #2797
• CNTRLPLANE-3237: Kms plugin health report clean up #2931
• OPRUN-4705: Remove NewOLMPreflightPermissionChecks FeatureGate #2957
• SPLAT-2827: Added vSphere failure domain to vcenter check #2932
• Check all hypershift variants when the featuregate is not platform specific #2951
• OCPBUGS-80958: NodeUID in status to detect replaced node with same name #2821
• OPRUN-4691: Promote OLMLifecycleAndCompatibility feature gate to Default #2920
• OPNET-780: Add BGPBasedVIPManagement feature gate and BGP VIP management fields #2923
• Full changelog

cluster-config-operator

• OCPBUGS-104562: Mark kube-cloud-config recreation test disruptive #497
• MON-4499: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #468
• Full changelog

cluster-control-plane-machine-set-operator

• NO-JIRA: Fix flaky unit-test harness races and tight timeouts #416
• OCPCLOUD-3611: Bump Kubernetes dependencies to 1.36 #414
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

cluster-csi-snapshot-controller-operator

• STOR-3005: Remove v1beta2 group snapshot API #283
• Full changelog

cluster-dns-operator

• OCPBUGS-86009: Fix dns operator reporting Progressing=True on scale up #477
• NE-2817: Gate operator metrics TLS on tlsAdherence via ShouldHonorClusterTLSProfile #484
• Full changelog

cluster-etcd-operator

• OCPBUGS-84695: feat(tnf): TNF job controller framework and lifecycle management #1655
• NO-JIRA: add ceo disruptive suite to sippy’s disruptive #1667
• OCPBUGS-100294: fix TNFNodeInMaintenance PromQL label mismatch #1664
• OCPBUGS-94106: Add APIServer informer to EnvVarController cache sync #1659
• OCPBUGS-100072: Revert ‘OCPBUGS-88490: fix etcd operator deadlock when etcd-endpoints configmap is stale’ #1660
• OCPEDGE-2094: Add console notifications for pacemaker health events #1654
• CNTRLPLANE-3609: update TestEtcdDBScaling to also include the validation check for BackendQuotaGiB #1656
• OCPEDGE-2118: Record Kubernetes events for etcd transition lifecycle #1653
• OCPEDGE-2707: Add TNF Pacemaker PrometheusRule alerts #1650
• Full changelog

cluster-image-registry-operator

• CORS-4520: GCP Universe Domain Support #1356
• Full changelog

cluster-ingress-operator

• OCPBUGS-100435: Set Accepted=False and Prometheus alert for ListenerSets on managed Gateways #1539
• TRT-2874: Revert #1513 “NE-2836: Set Accepted=False and Prometheus alert for ListenerSets on managed Gateways” #1537
• NE-2833: Replace deprecated io/ioutil usage #1531
• NE-2823: Bump API to promote Multi HAProxy Versions feature #1535
• OCPBUGS-85680: Re-fetch infraConfig on every periodic loop iteration #1458
• OCPBUGS-31521: Don’t publish duplicate DNS records #1229
• NE-2836: Set Accepted=False and Prometheus alert for ListenerSets on managed Gateways #1513
• OCPBUGS-63219: Support NLB protocol to configure proxy protocol and client IP preservation #1426
• OCPBUGS-100186: Rename network policy in TestContainerLoggingMinLength #1532
• NE-2585: Bump GWAPI to v1.5.1 and Istio v1.30.1 #1530
• NE-2796: Respect OpenShift TLS Profiles during Istio/GatewayAPI installation #1480
• NE-2742: Apply cluster TLS security profile to operator metrics and canary endpoints #1501
• OCPBUGS-86841: Add BackendTLSPolicy to Gateway API e2e CRD test coverage #1523
• CORS-4451: GCP: Set Universe Domain #1515
• NE-2809: Add upgradeable logic for HAProxy version #1517
• OCPBUGS-99775: Update TestHTTPHeaderBufferSize for HAProxy 3.2 response code change #1524
• Full changelog

cluster-kube-apiserver-operator

• NO-JIRA: Bump library-go #2255
• NO-JIRA: Update openshift/* #2249
• CNTRLPLANE-3237: creates the kms status provider from the operator client #2248
• MON-4502: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #2036
• NO-JIRA: add KMS preflight deploy e2e to encryption-kms-2 #2246
• CNTRLPLANE-3361: Update openshift/* #2247
• CNTRLPLANE-3861: Add KMS plugin sidecar revision readiness check #2220
• NO-JIRA: Automatic agentic rebase: Update library-go to d8f45c2 #2238
• Full changelog

cluster-machine-approver

• OCPBUGS-100160: Fix status controller unit-test teardown race #312
• NO-JIRA: Bump envtest to 1.36.2 #314
• OCPCLOUD-3612: Bump k8s v1.36, go 1.26 #311
• Full changelog

cluster-monitoring-operator

• MON-4577: restrict alertmanager gossip mesh ports to same-instance pods #3032
• NO-JIRA: [bot] Synchronize versions of the downstream components #3035
• NO-JIRA: Allow to pass custom arguments to e2e test command #3033
• NO-JIRA: tasks: pass context to MetricsServerTask methods instead of storing it #3025
• NO-JIRA: [bot] Synchronize versions of the downstream components #3017
• NO-JIRA: chore: update Prometheus-operator to v0.93.0 #3010
• MON-4630: support the dmmultipath collector in the config CRD #3015
• : OCPBUGS-91735: fix: watch cluster wide proxy changes and apply changes accordingly #3004
• NO-JIRA: test: make TestDocExamples and TestNetworkPolicy more stable #3013
• NO-JIRA: add metrics for the validating webhook #2838
• NO-JIRA: e2e: defer subtest resource cleanup in TestPrometheusRemoteWrite #3016
• NO-JIRA: [bot] Synchronize versions of the downstream components #3014
• NO-JIRA: chore: pin GOTOOLCHAIN in update-go-deps + update Go dependencies #3006
• NO-JIRA: increase golangci-lint timeout #3011
• MON-4624: enable the nvmesubsystem collector by default #3005
• NO-JIRA: [bot] Synchronize versions of the downstream components #2994
• MON-4413: support MessageVersion v2.0 for remote-write #2977
• OCPBUGS-85522: disable kubelet Endpoints in prometheus-operator #2931
• NO-JIRA: test: adjust e2e tests on retention settings #2999
• MON-4615: add option to disable the dmmultipath collector #2996
• NO-JIRA: Revert “MON-3697: use maximumStartupDurationSeconds instead of container patch” #2982
• MON-4558: enable zoneinfo node-exporter collector via config #2986
• Full changelog

cluster-network-operator

• OCPBUGS-98918: Use service-ca certificates for network-check-source metrics #3097
• OCPBUGS-99460: Fix connectivity check for nodes named with IP address #3083
• CORENET-5658: Bump ovn-controller CPU request to 50m to prevent CPU starvation #3051
• CORENET-6714: Enable Network Observability on Day 0 #3087
• CORENET-7054: Use TLS profile to render CLI args for deployed components #3043
• CORENET-5972: Consume openvswitch-ipsec systemd service for OVN IPsec deployment #2662
• NO-JIRA: vendor: bump github.com/openshift/api to latest master #3089
• OCPBUGS-88063: ovn-kubernetes: Move MNP from ConfigMap to CLI flags #3072
• CNTRLPLANE-3213: Enable configurable PKI for managed certificate rotation #2958
• CORENET-6581: Add transport label to CUDN telemetry recording rule #2978
• OCPBUGS-98619: Bump frr-k8s MAX_FDS from 1024 to 65536 #3054
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-99461: Add missing annotations to NetworkPolicy manifests #1569
• MON-4506: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #1468
• OCPBUGS-100115: E2E: LLC: Restore uncore cache annotation to true #1570
• NO-JIRA: owners: update #1563
• Full changelog

cluster-olm-operator

• OPRUN-4665: Update k8s dependencies from v0.35.1 to v0.36.2 and OpenShift dependencies to latest #217
• OCPBUGS-95475: chore: bump containerd to 1.7.33 #223
• Full changelog

cluster-openshift-apiserver-operator

• Revert “NO-JIRA: Disable WatchList feature gate due to the missing support of Project watch” #681
• NO-JIRA: Bump library-go #745
• NO-JIRA: Update openshift/* #742
• CNTRLPLANE-3237: creates the kms status provider from the operator client #741
• NO-JIRA: add KMS preflight deploy e2e to encryption-kms-2 #739
• CNTRLPLANE-3361: Update openshift/* #740
• NO-JIRA: Automatic agentic rebase: Update library-go to d8f45c2 #737
• Full changelog

cluster-storage-operator

• OCPBUGS-101758: Fix SELinuxMountGAReadiness on HyperShift #721
• STOR-2918: update AWS EBS CSI credentials request policy to mirror upstream #717
• STOR-3056: inject TLS adherence from API to vsphere problem detector configmap #718
• OCPBUGS-99492: NetworkPolicies should use numeric ports instead of named ports #720
• STOR-3013: Add e2e test for SELinuxMount upgrade readiness #715
• STOR-2914: Bump all deps for 5.0.0 #719
• Full changelog

cluster-update-console-plugin

• OCPBUGS-104520: Use latest analysis result instead of first #22
• OTA-2088: Fix identified bugs from video recordings #20
• OTA-2068: Add Tech Preview badge to Cluster Update page header and approval buttons #19
• Full changelog

cluster-version-operator

• OCPBUGS-79358: pkg/cvo/egress: Disable Proxy respect on HyperShift #1357
• NO-JIRA: fix(pkg/cincinnati): log the correct root CA pool size #1413
• OTA-1997: Allow the CVO to use the agentic-skills payload image when creating proposals #1433
• OTA-2084: Register agenticrunv1alpha1 in the Runtime client scheme #1434
• OTA-2084: pkg/agenticrun/controller: Inline AgenticRun prompt, dropping the ConfigMap #1432
• TRT-2842: Revert #1427 “OTA-1997: Allow the CVO to use the agentic-skills payload image when creating proposals.” #1431
• OTA-1997: Allow the CVO to use the agentic-skills payload image when creating proposals. #1427
• OTA-2084, OTA-2097: pkg/agenticrun/controller: Additional logging to AgenticRun CRD detection #1428
• Full changelog

console

• NO-JIRA: Prepare for publishing new 4.23 prerelease plugin SDK packages #16905
• CONSOLE-5424: Add minimize action for toast notifications #16762
• CONSOLE-5118: Improve AI assessment prompts #16880
• CONSOLE-5241: Migrate knative-ci.feature Cypress tests to Playwright #16658
• CONSOLE-5065: Bump @openshift/dynamic-plugin-sdk to 9.1.0 #16897
• CONSOLE-5425: Add rspack native bindings for linux/s390x and linux/ppc64le #16890
• CONSOLE-5196: Fix Playwright e2e flakes across multiple test suites #16881
• CONSOLE-5196: Increase Playwright CI retries and abort after 10 failures #16887
• OCPBUGS-99434: Show toast notification for invalid Helm Chart repositories #16792
• CONSOLE-5417: Migrate dev-console Cypress tests to Playwright (batch 4) #16767
• CONSOLE-5065: Align Console useResolvedExtensions hook with upstream plugin SDK #16815
• OCPBUGS-99491: Fix Installed Operators table row cells ignoring column management #16817
• CONSOLE-5439: Migrate to eslint 9 #16878
• CONSOLE-5409: Add Playwright e2e test for operator lifecycle metadata UI #16701
• CONSOLE-5196: Replace page.locator with getByTestId in Playwright tests #16873
• OCPBUGS-90080: Validate chart URL in /api/helm/verify to prevent SSRF #16786
• CONSOLE-5400: Make Node management enhancements flagged by OpenShift 5 #16797
• CONSOLE-5196: Fix Playwright e2e flakes and CI reliability #16863
• NO-JIRA: Remove generated plugin manifest JSON schema files #16875
• CONSOLE-5428: i18next-cli migration follow up #16864
• RFE-4925: Fix inconsistent Search page filter default (use Name) #16601
• HELM-763: Add secrets for Helm release upgrade #16787
• CONSOLE-5397: Log perspective overrides when starting Bridge #16838
• NO-JIRA: Remove plugin sdk build from yarn dev #16850
• OCPBUGS-33836: quickstart page i18n misses (Fix Quick Starts i18n bundle lookup for zh-CN) #16819
• OCPBUGS-99418: Bump protobufjs to 7.6.5 to fix CVE-2026-59877, CVE-2026-48712, CVE-2026-41242 #16813
• OCPBUGS-84564: remove block volume mode in case of ocs-storagecluster-ceph-nfs #16397
• OCPBUGS-86280: Guard against null plugin route components #16587
• CONSOLE-5434: Replace Popper with PF components #16831
• CNTRLPLANE-3423: feat: inject centralized TLS into console operand #16804
• NO-JIRA: Make regular notification icon outlined by default #16811
• OCPBUGS-94168: Fix CVE-2026-13149 brace-expansion DoS vulnerability #16812
• OCPBUGS-72369: i18n format missing for Request/limit unit labels on deploy image page #16805
• OCPBUGS-57309: ‘0 B’ is shown on details page when create pvc with ‘EiB’ unit #16800
• OCPBUGS-77379: Incorrect translations for ‘CatalogSources’ and ‘OperatorGroups’ in l… #16801
• OCPBUGS-99475: Fix virtualized table row overlap after react-virtualized 9.22.6 upgrade #16798
• CONSOLE-5428: migrate to i18next-cli #16796
• NO-JIRA: Move jest config out of package.json #16799
• CONSOLE-5425: Migrate to rspack #16761
• OCPBUGS-99226: Disable Knative e2e cypress test #16782
• OCPBUGS-99052: recover from reverse proxy panic on browser disconnect #16776
• OTA-2066: AIA mitigations #16763
• CONSOLE-5065: Clean up Console extension code reference processing #16115
• CONSOLE-5426: remove GraphQL proxy endpoint #16769
• OCPBUGS-79520: Fix kebab actions on Installed Operators list page #16682
• And 6 elided commits (e.g. from squash or rebase merges)
• Full changelog

console-operator

• OSDOCS-20110: Add Helm 3 CLI download links alongside Helm 4 #1197
• OCPBUGS-99943: set API-server-defaulted fields on deployment specs to prevent excessive update events #1201
• CONSOLE-5431: Add allow-all NetworkPolicy to openshift-console namespace #1199
• TRT-2858: Revert “Merge pull request #1196 from ingvagabund/tls-injection-to-console” #1200
• CONSOLE-5432: Add NetworkPolicy manifests for openshift-console-operator namespace #1198
• CNTRLPLANE-3423: feat: inject centralized TLS into console operand #1196
• NO-JIRA: Revert “Merge pull request #1170 from logonoff/http2” #1194
• CONSOLE-5433: Add default-deny NetworkPolicy for openshift-console-user-settings namespace #1195
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-96822: Bump golang.org/x/net to v0.55.0 #405
• Full changelog

csi-external-attacher

• STOR-2931: Rebase to upstream v4.12.0 for OCP 5.0 #110
• Full changelog

csi-external-provisioner

• STOR-2931: Rebase to upstream v6.3.0 for OCP 5.0 #146
• Full changelog

csi-external-resizer

• STOR-2931: Rebase to upstream v2.2.1 for OCP 5.0 #198
• Full changelog

csi-external-snapshotter, csi-snapshot-controller

• OCPBUGS-99009: [external-snapshotter] SnapshotContentObjectDeleteError event fired when VolumeSnapshotContent is already deleted #226
• Full changelog

csi-livenessprobe

• STOR-2931: Rebase to upstream v2.19.0 for OCP 5.0 #94
• Full changelog

csi-node-driver-registrar

• STOR-2931: Rebase to upstream v2.17.0 for OCP 5.0 #108
• Full changelog

docker-registry

• CORS-4520: GCP: Support Alternate Universe Domain #474
• Full changelog

driver-toolkit

• OCPBUGS-82502: Fix e2e test duplicate output from oc run -i –rm #198
• Full changelog

egress-router-cni

• NO-JIRA: Update OWNERS file #104
• Full changelog

gcp-cloud-controller-manager

• CORS-4516: Support setting universe domain in client options #131
• OCPCLOUD-3592: Merge https://github.com/kubernetes/cloud-provider-gcp:master (b01dfd6) into main #104
• Full changelog

gcp-cluster-api-controllers

• OCPCLOUD-3601: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.13.0 (be0534e) into main #300
• Full changelog

gcp-machine-controllers

• OCPCLOUD-3617: Update to Kubernetes 1.36 dependencies #182
• CORS-4521: Support Alternate Universe Domain #180
• Full changelog

gcp-workload-identity-federation-webhook

• OCPCLOUD-3585: Update gcp-workload-identity-federation-webhook to k8s 1.36 #21
• Full changelog

haproxy-router, haproxy-router-haproxy28, haproxy-router-haproxy32

• NE-2826: Fix staticcheck warnings across multiple packages #815
• “NO-JIRA: Add AGENTS.md” #710
• NE-2829: images/router/f5: Delete F5 router Dockerfile #826
• OCPBUGS-77056: Revert #825 “Make external cert validation asynchronous (v2 — race condition fixes)” #829
• OCPBUGS-77056: Make external cert validation asynchronous (v2 — race condition fixes) #825
• NO-JIRA: Add default coderabbit for the repo #798
• TRT-2841: Revert “OCPBUGS-77056: Make external cert validation asynchronous (Resurrection)” #824
• OCPBUGS-77056: Make external cert validation asynchronous (Resurrection) #822
• Full changelog

hyperkube, kube-proxy, pod

• OCPBUGS-85262: Re-enable kubectl kuberc commands e2e tests #2731
• OCPBUGS-92798: Add NodeSelectorAdjuster admission plugin for standalone clusters (part 2) #2717
• STOR-2961: UPSTREAM: 138768: move VolumeGroupSnapshot to V1 #2723
• CNTRLPLANE-3323: Update openshift-hack/rebase.sh #2701
• OCPBUGS-98100: e2e: storage snapshot tests should read custom timeouts from manifest #2719
• OCPBUGS-92836: UPSTREAM: <carry>: upkeep cpu partitioning admission webhook #2713
• STOR-2963: Save SELinuxWarningController upgradeability to a ConfigMap #2720
• Full changelog

hypershift

• GCP-896: chore: add gbarabasz to gcp-reviewers alias #9000
• CNTRLPLANE-3979: Add missing ProjectDevelopmentStream 4.14 #9225
• CNTRLPLANE-3863: emit lifecycle-aware JUnit for informing e2e tests #9168
• NO-JIRA: add e2e-approvers owner alias, grant Dan Mace e2e role #9216
• NO-JIRA: build(deps): bump the k8s-dependencies group across 1 directory with 12 updates #9189
• OCPBUGS-100184: Wait for Azure ignition DNS before creating workers #9172
• OCPBUGS-100279: isolate Claude from push credentials in PR workflows #9214
• OCPBUGS-98983: improve guest cluster state management reliability #9198
• STOR-2918: update AWS EBS CSI credentials request policy to mirror upstream #8954
• OCPBUGS-100301: fix(hostedcluster): handle Unknown status in ClusterVersionFailing inversion #9186
• OCPBUGS-89689: (karpenter) use completed release image for unpinned NodeClaims during CP upgrade #8957
• NO-JIRA: build(deps): bump the misc-dependencies group across 1 directory with 6 updates #9164
• CNTRLPLANE-3863: add e2e v2 test flow document #9151
• docs: add July 2026 progress report blog post #9057
• OCPBUGS-100302: fix(metrics): only report limited support when label … #9185
• NO-JIRA: build(deps): bump github.com/google/cel-go from 0.28.1 to 0.29.0 #9125
• CNTRLPLANE-3943: feat(destroy): add –force flag to strip finalizers on grace period expiry #9134
• STOR-2954: inject centralized TLS configuration for storage operators #8887
• Revert “CNTRLPLANE-3890: Add product-cli unit tests for HCP create cluster” #9201
• CNTRLPLANE-3871: resolve RHEL stream dynamically for boot images #9099
• NO-JIRA: build(deps): bump the sigs-k8s-dependencies group across 1 directory with 8 updates #9177
• CNTRLPLANE-3890: Add product-cli unit tests for HCP create cluster #9107
• CNTRLPLANE-3646: wire up AWS v2 e2e lifecycle test coverage #9174
• OCPBUGS-100140: bracket IPv6 in OAuth issuer and callback URLs #9120
• AUTOSCALE-644: bump karpenter deps to 1.13.0 #9170
• CNTRLPLANE-3976: Document management cluster vs hosted cluster feature gates #9182
• OCPBUGS-97804: Avoid printing errors twice #8931
• CNTRLPLANE-3887: test(e2e): add metricsSet filtering coverage to metrics forwarder test #9078
• OCPBUGS-86843: fix(konnectivity): conditionally prefer IPv4 based on HCP network config #9140
• OCPBUGS-91511: Fix CPO infinite requeue during deletion when OIDC provider is gone #8894
• OCPBUGS-98654: delete_hosted_cluster.sh fails to run with no –dns-zone-rg-name flag #8945
• NO-JIRA: docs: fix ARCHITECTURE.md to reflect current CPO image resolution #9179
• OCPBUGS-100087: Replace exponential backoff with fixed-interval requeue in CRR controller #9148
• OCPBUGS-99783: fix(e2e): check pre-upgrade HO version for shared role support #8891
• CNTRLPLANE-3709: test(azure): enable Global Pull Secret test in Azure CI #9073
• CNTRLPLANE-3956: Make EnsureGlobalPullSecret e2e test informing #9167
• CNTRLPLANE-2539: Move generation of the CAPI Provider Role #8305
• NO-JIRA: docs: add hash migration impact guidance and CPO data-plane component docs #9161
• CNTRLPLANE-3897: Add product-cli unit tests for create nodepool #9121
• CNTRLPLANE-3600: Bump k8s to v0.36.2, controller-runtime to v0.24.1, CAPI to v1.12.8 #8695
• CNTRLPLANE-3944: Regenerate requirements.txt files with pinned –hash entries #9135
• AUTOSCALE-166: fix yq dependency for running upstream karpenter tests #9060
• OCPBUGS-99288: Add proxy env vars to AWS cloud-controller-manager deployment #9053
• CNTRLPLANE-3604: Add CAPI migration flag placeholder #9145
• CNTRLPLANE-3564: test(awsprivatelink): add unit test for NoSuchHostedZone handling dur… #9141
• NO-JIRA: build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.1 #9113
• NO-JIRA: build(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.1 in /hack/tools #9111
• CNTRLPLANE-3888: docs: add on-demand jira-agent triggering and plugin install instructions #9079
• OCPBUGS-54776: fix(ignition-server): log MCS output on HTTP request failures #8936
• CNTRLPLANE-400: feat(remediationAllowed in NP): propagate MHC RemediationAllowed to NodePool Ready condition #9019
• NO-JIRA: align control-plane Dockerfile builder image with main Dockerfile #9138
• OCPBUGS-99768: fix OSImageStream e2e test and Makefile test-changed for OCP 5.0 #9115
• CNTRLPLANE-3893: Add product-cli unit tests for destroy cluster #9116
• NO-JIRA: ci(deps): bump actions/checkout from 6.0.2 to 7.0.1 #9090
• NO-JIRA: ci(deps): bump actions/setup-python from 6.2.0 to 7.0.0 #9089
• NO-JIRA: ci(deps): bump actions/setup-go from 6.4.0 to 7.0.0 #9029
• OCPBUGS-86494: fix(nodepool): preserve KubeVirt userdata Secrets during NodePool rollout #8581
• CNTRLPLANE-3910: Fix e2e test reliability for mirroring tests and test-changed target #9086
• CNTRLPLANE-3919: data race in TestEnqueueNodePoolsForCloudConfig #9095
• Full changelog

ibm-cloud-controller-manager

• OCPCLOUD-3593: Rebase from upstream IBM-Cloud/cloud-provider-ibm release-1.36 (K8s 1.36.2) #109
• Full changelog

ibm-vpc-block-csi-driver

• NO-JIRA: standardize build paths #155
• Full changelog

ibmcloud-cluster-api-controllers

• 🚀 OCPCLOUD-3602: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.14.0 (5d081d1) into main #161
• Full changelog

ibmcloud-machine-controllers

• OCPCLOUD-3618: Bump k8s 1.36 #100
• OCPBUGS-96827: bump golang.org/x/net to v0.57.0 #98
• Full changelog

insights-operator

• NO-JIRA: remove katarina #1336
• CCXDEV-16629: Add network policy #1331
• CCXDEV-15210: secrets and configmap revisions count gathering #1316
• OCPBUGS-98690: Fix indentation bug on livenessProbe #1320
• OCPBUGS-96894: Update net and crypto libraries #1321
• Full changelog

insights-runtime-exporter, insights-runtime-extractor

• NO-JIRA: Add new owners required for managing OCP CI config #86
• Full changelog

installer-etcd-artifacts

• OCPBUGS-94014: Rebase v3.6.13 on main (5.0/4.23) #392
• Full changelog

installer-kube-apiserver-artifacts

• OCPBUGS-85262: Re-enable kubectl kuberc commands e2e tests #2731
• OCPBUGS-92798: Add NodeSelectorAdjuster admission plugin for standalone clusters (part 2) #2717
• STOR-2961: UPSTREAM: 138768: move VolumeGroupSnapshot to V1 #2723
• CNTRLPLANE-3323: Update openshift-hack/rebase.sh #2701
• OCPBUGS-98100: e2e: storage snapshot tests should read custom timeouts from manifest #2719
• OCPBUGS-92836: UPSTREAM: <carry>: upkeep cpu partitioning admission webhook #2713
• STOR-2963: Save SELinuxWarningController upgradeability to a ConfigMap #2720
• OCPBUGS-90520: UPSTREAM: 140211: Promote regression-issue-74839 to 1.5 #2709
• OCPBUGS-99058: Disable DRA extended resource test that requires dedicated DRA infrastructure #2721
• OCPSTRAT-3036: Rebase 1.36.2 #2653
• Full changelog

ironic

• NO-ISSUE: Update requirements.cachito with latest openshift forks commits #873
• NO-ISSUE: Merge upstream 2026 07 24 #872
• NO-ISSUE: Filter blank lines from build-packages-list.ocp in Dockerfile #869
• METAL-1912: Add PQC support until we have pqc minimal images available #871
• Full changelog

ironic-agent

• NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #297
• NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #295
• NO-ISSUE: Filter blank lines from build-packages-list.ocp in Dockerfile #292
• NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #293
• Full changelog

karpenter-operator

• AUTOSCALE-871: allow Karpenter Operator to run in ManagementCluster mode #19
• no-jira: change karpenter CR singleton name to default #17
• Full changelog

keepalived-ipfailover

• OCPBUGS-99649: Reinstall tzdata if /usr/share/zoneinfo is missing #246
• Full changelog

kube-metrics-server

• OCPBUGS-93753: Bump openshift/kubernetes-metrics-server to v0.9.0 #71
• Full changelog

machine-api-operator

• OCPBUGS-85110: Move required-scc annotation to pod template for machine-api-controllers #1511
• OCPBUGS-100056: fix: skip Multisubnet test for single network infra #1527
• OCPBUGS-99903: Fixing test issue where error result was for other resource type #1524
• OCPBUGS-100067: Deduplicate unchanged status upgrade events #1526
• CORS-4521: GCP: Add regional permission #1523
• OCPCLOUD-3614: bump k8s and openshift deps #1520
• Full changelog

machine-config-operator

• MCO-2275: Part2 Migrate MCO OCB #6340
• MCO-1814, MCO-2377: Setup metrics for builds, Add metric to gather how many people are using OCL #6316
• OCPNODE-4040: Use single KubeletConfigAccepted condition type with True/False status #5854
• OCPBUGS-92182: OCPBUGS-99219: Use providerSpec.Template in vSphere machineset reconciliation #6234
• OCPBUGS-99696: Add extension verification failure test cases OCP-89090 and OCP-89095 #6333
• MCO-2485: Mark scale-up test as ‘informing’ #6364
• OCPBUGS-100458: Adapt bootimage tests for CAPI migration #6363
• MCO-1540: Set up events for builds #6252
• MCO-2482: Revert “MCO-2470: Disable scale-up test support for AWS and vSphere” #6356
• TRT-2875: Revert #6303 “MCO-2205: Make ImageModeStatusReporting MCP count test more resilient on SNO” #6359
• MCO-2205: Make ImageModeStatusReporting MCP count test more resilient on SNO #6303
• OCPBUGS-98316: Fix SHA idempotency test in nmstate-configuration.sh #6291
• OCPBUGS-100389: machine-config-daemon-firstboot: disable ostree fsync during bootstrap #6122
• MCO-2275: Part 1 Migrate OCB test cases from openshift-tests-private #6080
• NO-ISSUE: test MCC proxy. Refactor TC 52373 proxy test. #6355
• MCO-2468: Cache backed OSImageStreams for PIS #6329
• NO-ISSUE: Fix setArchitectureAndCheckStatus corrupting multi-label annotations #6347
• OCPBUGS-100277: Fix TC 43278 failing when release payload has no MCO commit info #6349
• NO-ISSUE: Fix incorrect OSImageStreams log #6338
• MCO-2244: Update MCO dependencies to Kubernetes 1.36 #6321
• MCO-2470: Disable scale-up test support for AWS and vSphere #6344
• NO-ISSUE: fix fencing_validator ocdebug fence dispatch race condition #6341
• OCPBUGS-82139: Add control-plane NoSchedule taint support alongside master taint #6313
• NO-JIRA: vendor: bump github.com/openshift/api to latest master #6334
• NO-ISSUE: Use context instead of discrete signal #6337
• OCPNODE-4518: Block runc on RHEL 10 via OSImageURL stream class inspection #6238
• MCO-2380: MCO-2381: Expose MachineOSBuild Status Conditions on Paused MachineConfigPools and add E2E Tests for Paused Pool Builds #6282
• MCO-2414: Add unit tests for osImageStream #6312
• NO-ISSUE: extended tests, restore initial maxUnavailable when modified #6336
• OCPBUGS-99695: Add TC 88940- Apply password only if changes exist #6328
• NO-ISSUE: add AWS marketplace polarion ID test #6330
• MCO-2184: Adapt scale extended tests to support osstreams #6299
• Full changelog

machine-os-images

• OCPBUGS-86888: Add IDMS mirror support for disconnected aarch64 ISO extraction #108
• Full changelog

multus-cni, multus-cni-microshift

• OCPBUGS-86046, OCPBUGS-94044: DS Merge 07/24/2026 #335
• CORENET-7233: Update OWNERS file #304
• Full changelog

must-gather

• MG-233: compress service and window node logs (#554) #554
• Full changelog

networking-console-plugin

• OCPNETUI-58: Add Health and Backend health columns to Services and Routes list pages #457
• OCPNETUI-38: Virtual Machines tab on NAD/UDN/CUDN detail pages #442
• OCPNETUI-21, OCPNETUI-25: made form for creating services #453
• Full changelog

nutanix-machine-controllers

• OCPCLOUD-3619: Bump k8s 1.36 #139
• Full changelog

oauth-apiserver

• CNTRLPLANE-2445: K8s 1.35 rebase #179
• Full changelog

oauth-server

• RFE-9629: Add copy to clipboard buttons to display token page #200
• CNTRLPLANE-2446: K8s 1.35 rebase #215
• Full changelog

olm-catalogd, olm-operator-controller

• OCPBUGS-89330: Synchronize From Upstream Repositories #779
• NO-ISSUE: Synchronize From Upstream Repositories #776
• OPRUN-4436: fix(test): update PolarionID:87224 for 4.²³⁄₅.0 upgrade boundary #766
• OPRUN-4659, OPRUN-4666, OPRUN-4671, OPRUN-4672, OPRUN-4673, OPRUN-4674: Synchronize From Upstream Repositories + Remove spec.serviceAccount tests #767
• Full changelog

openshift-apiserver

• OCPBUGS-85429: hack/update-openapi-spec: prefer REGISTRY_AUTH_FILE over cluster profile pull secret #669
• OCPBUGS-78480: address review feedback on project watcher #664
• CNTRLPLANE-2449: K8s 1.35 rebase #616
• Full changelog

openstack-cluster-api-controllers

• OCPBUGS-94057: UPSTREAM: 3265: :bug: allow unconditional providerID updates in OpenStackMachine #425
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• NO-ISSUE: Synchronize From Upstream Repositories #1340
• OCPBUGS-96749, OCPBUGS-96752: Synchronize From Upstream Repositories #1338
• Full changelog

operator-marketplace

• NO-ISSUE: Bump github.com/prometheus/client_golang from 1.24.0 to 1.24.1 #772
• NO-ISSUE: Bump github.com/operator-framework/operator-lifecycle-manager from 0.45.0 to 0.46.0 #771
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• CORENET-7229: OTE: Add test list validation tooling #3221
• OCPBUGS-83863: Remove RHEL 8 binary build #3149
• OCPBUGS-87283, OCPBUGS-87530, OCPBUGS-87532, OCPBUGS-93623, OCPBUGS-95512, OCPBUGS-98138: DownStream Merge [07-31-2026] #3332
• OCPBUGS-65865, OCPBUGS-86223, OCPBUGS-89327: DownStream Merge [07-17-2026] #3298
• NO-JIRA: Update OWNERS File #3288
• Full changelog

powervs-cloud-controller-manager

• No-Jira: Bump cel-go to v0.29.0, grpc to v1.82.1 and x/text to v0.39.0 to address security vulnerabilities #107
• Full changelog

prometheus

• NO-JIRA: [bot] Bump openshift/prometheus to v3.13.2 #351
• OCPBUGS-100192: [bot] Bump openshift/prometheus to v3.13.2 #350
• Bump openshift/prometheus to v3.13.1 #347
• Full changelog

prometheus-alertmanager

• OCPBUGS-98190: bump github.com/hashicorp/memberlist from 0.5.4 to 0.6.0 #155
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• NO-ISSUE: [bot] Bump openshift/prometheus-operator to v0.93.0 #388
• OCPBUGS-96853: [bot] Bump openshift/prometheus-operator to v0.92.1 #385
• Full changelog

prometheus-node-exporter

• OCPBUGS-100376: fibre_channel: fix crash when attempting to dereference invalid count… #183
• Full changelog

service-ca-operator

• CNTRLPLANE-3898: Bump kubernetes dependencies to v1.36.2 #366
• MON-4515: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #319
• OCPBUGS-87390: Updating ose-service-ca-operator-container image to be consistent with ART for 5.0 #361
• NO-JIRA: Bump github.com/openshift/build-machinery-go #367
• CNTRLPLANE-3423: feat: inject centralized TLS into service-ca operand #365
• Full changelog

stream-coreos, stream-coreos-extensions

• NO-JIRA: Containerfile: restore meta.json as last layer in image #1950
• And 7 elided commits (e.g. from squash or rebase merges)
• Full changelog

tests

• Bug OCPBUGS-104497: Fix [sig-ci] prow job name OS version test for 4.23 rhcos9 #31481
• OCPBUGS-100392: Exclude openshift-debug-* namespaces from CPU Partitioning annotation check #31465
• NO-ISSUE: Automated - Update synthetic test data #31459
• Revert “TRT-2869: Revert “NO-JIRA: Re-enable tests for the recommend cmd if alertsByCVO”” #31462
• OCPBUGS-101912: derive cluster quota from namespace configmaps #31476
• STOR-3065: Add storage CSI tests for cloning PVC to a larger volume #31443
• OCPBUGS-100386: test: scope hosted etcd leader metrics by namespace #31456
• OCPBUGS-63219: Remove NLB hairpin workaround from dual-stack test #31453
• OCPBUGS-99899: add os name exception for runc jobs #31479
• CORENET-6714: Adding netobserv namespace exception for prometheus endpoint auth #31447
• OCPBUGS-100388: Fix project name collision in test framework #31464
• OCPBUGS-100385: MonitorTest: measure the union of ClusterOperator wait intervals #31457
• OCPBUGS-99397: remove custom MCP and pause master pool in mirror-set tests to prevent PDB drain deadlock and suite timeout #31408
• Revert: Fix APIs for openshift.io must have stable versions check #31468
• OCPBUGS-99916: exclude openshift-debug-* namespaces from best-effort QoS invariant #31437
• TRT-2869: Revert #31440 “NO-JIRA: Re-enable tests for the recommend cmd if alertsByCVO” #31460
• OCPBUGS-100308: Fix test APIs for openshift.io must have stable versions #31458
• OCPBUGS-99047: Fix flaky oc adm storage-admin test #31400
• OCPBUGS-84695: [TNF] Fix update-setup job discovery to limit check to active job #31451
• OCPBUGS-99921: Dump istiod logs and gateway state on GatewayAPI test failure #31454
• NO-JIRA: Re-enable tests for the recommend cmd if alertsByCVO #31440
• OCPBUGS-100183: Always tear down upgrade tests after setup failures #31450
• OCPBUGS-98576: Improve test output for nodes should be ready test #31419
• OCPBUGS-78480: handle bookmark events in project watch tests #31313
• NO-JIRA: Update minio image to use source with all supported architectures #31441
• OCPBUGS-85529: Fix IPv6 prefix in MultiNetworkPolicy test (/32 → /64) #31407
• OCPBUGS-99535: Skip Squid proxy configuration #31423
• NO-ISSUE: Skip additional storage support E2E test for on single-node - MCP rollouts timeout #31439
• CNTRLPLANE-3789: images: Add squid image used in CAO e2e tests #31434
• OTA-1814: Skip tests temporarily for the new output of the recommend cmd #31417
• STOR-3063: Add GCP regional PD e2e test for cross-zone data sync #31416
• CNTRLPLANE-3741: PKI config tests for service-ca and kube-apiserver-operator #31341
• NO-JIRA: Replace a bug id: 25739 -> 92835 #31345
• OCPNODE-4055: Add e2e testcase for additional storage support feature #31399
• NO-ISSUE: Automated - Update synthetic test data #31260
• OCPNODE-4494: e2e test case for RHCOS upgrade from 9 → 10 #31393
• OCPSTRAT-3036: Rebase 1.36.2 #31237
• NE-2789: Add a guard to skip IngressControllerMultipleHAProxyVersions tests if IngressController CRD lacks haproxyVersion field #31424
• NO-JIRA: chore(extended/prometheus): reduce targets-auth skip list and handle mTLS #31372
• NO-JIRA: Ensure Platform Prometheus targets are not scraped with insecure_skip_verify #31373
• NO-JIRA: Add e2e test to detect named ports in NetworkPolicies #31375
• OCPQUAL-20: Regenerate retry allowlist from 5.0 CI data #31411
• OCPBUGS-87079: Add polling and longer waits in the EgressFirewall tests to avoid flakiness #31376
• NE-2789: Create 5 e2e test cases to help graduate the featuregate: IngressControllerMultipleHAProxyVersions #31392
• OCPBUGS-85696: Adding logs and exponential backoff on execPod #31352
• NO-JIRA: .devcontainer: bump Fedora base image to 44 for Go 1.26 #31413
• CONSOLE-5209: Add e2e tests for IngressComponentRouteLabels feature gate #31385
• OCPNODE-4538: Add e2e tests for DRA Partitionable Devices (KEP-4815) #31230
• TRT-2689: Add verify-apm to the verify target #31379
• OCPBUGS-99166: wait for default ServiceAccount before creating IRI test pod #31401
• MCO-2371: Add back “should match os version” test #31301
• AGENT-1522: bump InternalReleaseImage to v1 #31294
• NO-ISSUE: Fix longrunning suite for node test cases #31339
• Full changelog

thanos

• OCPBUGS-104611: vendor: bump vulnerable Go dependencies for CVE remediation #198
• NO-JIRA: [bot] Bump openshift/thanos to v0.42.4 #196
• NO-ISSUE: [bot] Bump openshift/thanos to v0.42.3 #195
• Full changelog

tools

• OCPBUGS-101781: Isolate OCP-42982 kubeconfig writes #2337
• OTA-1814: Handle accept risks with different commands #2336
• OCPBUGS-100310: oc login –exec-plugin oc-oidc fails to refresh expired token against Microsoft Entra ID #2332
• Revert “TRT-2817: Revert “Merge pull request #2279 from nbottari9/1814-duplicate-warning”” #2322
• OCPBUGS-99757: Include extra scopes in OIDC token cache key #2323
• TRT-2817: Revert “Merge pull request #2279 from nbottari9/1814-duplicate-warning” #2320
• NO-JIRA: Bump k8s dependencies to 1.36 along with openshift #2318
• OTA-1814: fix(alerts): Remove duplicate information in the recommend command #2279
• NO-JIRA: Handle wrapped ENOTSUP error #2311
• NO-JIRA: First try newer iotop-c and fallback to older one #2317
• And 3 elided commits (e.g. from squash or rebase merges)
• Full changelog

volume-data-source-validator

• STOR-2917: Rebase to v1.7.0 for OCP 5.0 #16
• Full changelog

vsphere-cloud-controller-manager

• OCPCLOUD-3596: Merge https://github.com/kubernetes/cloud-provider-vsphere:master (ed5683c) into main #118
• Full changelog

vsphere-csi-driver-operator

• STOR-3062: Remove the validation webhook #351
• Full changelog

vsphere-problem-detector

• OCPBUGS-87906: Fixed GetVCenter to handle removed FDs better #224
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

CentOS Stream CoreOS 10 (stream-coreos)

Package List

• cri-o-1.35.5-1.el10s
• kernel-6.12.0-251.el10
• openshift-kubelet-4.22.0-202606041959.p2.g7250fd5.assembly.stream.el9
• systemd-257-30.el10

Full list (493 packages)

• NetworkManager-1:1.58~rc1-1.el10
• NetworkManager-cloud-setup-1:1.58~rc1-1.el10
• NetworkManager-libnm-1:1.58~rc1-1.el10
• NetworkManager-ovs-1:1.58~rc1-1.el10
• NetworkManager-tui-1:1.58~rc1-1.el10
• WALinuxAgent-udev-2.14.0.1-3.el10
• aardvark-dns-4:2.0.0-2.el10
• acl-2.3.2-4.el10
• afterburn-5.10.0-2.el10
• afterburn-dracut-5.10.0-2.el10
• alternatives-1.30-2.el10
• amd-gpu-firmware-20260722-25.el10
• amd-ucode-firmware-20260722-25.el10
• attr-2.6.0-2.el10
• audit-4.0.3-5.el10
• audit-libs-4.0.3-5.el10
• audit-rules-4.0.3-5.el10
• authselect-1.5.3-1.el10
• authselect-libs-1.5.3-1.el10
• azure-vm-utils-0.7.0-1.el10
• basesystem-11-22.el10
• bash-5.2.26-6.el10
• bash-completion-1:2.11-16.el10
• bind-libs-32:9.18.33-19.el10
• bind-license-32:9.18.33-19.el10
• bind-utils-32:9.18.33-19.el10
• bootc-1.16.2-1.el10
• bootupd-0.2.35-1.el10
• bsdtar-3.7.7-8.el10
• bubblewrap-0.10.0-3.el10
• bzip2-1.0.8-25.el10
• bzip2-libs-1.0.8-25.el10
• c-ares-1.34.6-4.el10
• ca-certificates-2025.2.80_v9.0.305-102.el10
• catatonit-5:0.2.1-4.el10
• centos-gpg-keys-10.0-23.el10
• centos-release-cloud-1-1.el10s
• centos-release-nfv-common-1-5.el10s
• centos-release-virt-common-1-1.el10s
• centos-stream-release-10.0-23.el10
• centos-stream-repos-10.0-23.el10
• checkpolicy-3.11-1.el10
• chrony-4.8-2.el10
• cifs-utils-7.6-2.el10
• clevis-23-2.el10
• clevis-dracut-23-2.el10
• clevis-luks-23-2.el10
• clevis-pin-tpm2-0.5.5-1.el10
• clevis-systemd-23-2.el10
• cloud-utils-growpart-0.33-11.el10
• composefs-1.0.8-1.el10
• composefs-libs-1.0.8-1.el10
• conmon-3:2.2.1-4.el10
• conmon-rs-0.6.6-2.el10s
• console-login-helper-messages-0.21.3-10.el10
• console-login-helper-messages-issuegen-0.21.3-10.el10
• console-login-helper-messages-profile-0.21.3-10.el10
• container-selinux-4:2.250.0-1.el10
• containers-common-6:6.0-2.el10
• containers-common-extra-6:6.0-2.el10
• coreos-installer-0.26.0-1.el10
• coreos-installer-bootinfra-0.26.0-1.el10
• coreutils-9.5-12.el10
• coreutils-common-9.5-12.el10
• cpio-2.15-3.el10
• cracklib-2.9.11-8.el10
• cracklib-dicts-2.9.11-8.el10
• cri-o-1.35.5-1.el10s
• cri-tools-1.35.0-1.el10s
• criu-4.2-8.el10
• criu-libs-4.2-8.el10
• crun-1.28-1.el10
• crypto-policies-20260708-1.git988eb15.el10
• crypto-policies-scripts-20260708-1.git988eb15.el10
• cryptsetup-2.8.6-1.el10
• cryptsetup-libs-2.8.6-1.el10
• curl-8.12.1-6.el10
• cyrus-sasl-gssapi-2.1.28-27.el10
• cyrus-sasl-lib-2.1.28-27.el10
• dbus-1:1.14.10-6.el10
• dbus-broker-36-4.el10
• dbus-common-1:1.14.10-6.el10
• dbus-libs-1:1.14.10-6.el10
• dbus-tools-1:1.14.10-6.el10
• device-mapper-10:1.02.215-3.el10
• device-mapper-event-10:1.02.215-3.el10
• device-mapper-event-libs-10:1.02.215-3.el10
• device-mapper-libs-10:1.02.215-3.el10
• device-mapper-multipath-0.9.9-19.el10
• device-mapper-multipath-libs-0.9.9-19.el10
• device-mapper-persistent-data-1.3.2-1.el10
• diffutils-3.10-8.el10
• dmidecode-1:3.6-5.el10
• dnf-4.20.0-26.el10
• dnf-data-4.20.0-26.el10
• dnsmasq-2.90-7.el10
• dosfstools-4.2-12.el10
• dracut-107-9.el10
• dracut-network-107-9.el10
• dracut-squash-107-9.el10
• duktape-2.7.0-10.el10
• e2fsprogs-1.47.1-5.el10
• e2fsprogs-libs-1.47.1-5.el10
• efi-filesystem-6-8.el10
• efibootmgr-18-9.el10
• efivar-libs-39-3.el10
• elfutils-default-yama-scope-0.195-1.el10
• elfutils-libelf-0.195-1.el10
• elfutils-libs-0.195-1.el10
• erofs-utils-1.8.10-1.el10
• ethtool-2:6.19-1.el10
• expat-2.7.3-2.el10
• fcoe-utils-1.0.34-11.gitb233050.el10
• file-5.45-12.el10
• file-libs-5.45-12.el10
• filesystem-3.18-17.el10
• findutils-1:4.10.0-5.el10
• firewalld-filesystem-2.4.3-2.el10
• flatpak-session-helper-1.18.0-1.el10
• fstrm-0.6.1-12.el10
• fuse-common-3.16.2-5.el10
• fuse-libs-2.9.9-25.el10
• fuse3-3.16.2-5.el10
• fuse3-libs-3.16.2-5.el10
• fwupd-2.1.6-1.el10
• gawk-5.3.0-6.el10
• gdbm-1:1.23-14.el10
• gdbm-libs-1:1.23-14.el10
• gettext-envsubst-0.22.5-6.el10
• gettext-libs-0.22.5-6.el10
• gettext-runtime-0.22.5-6.el10
• git-core-2.52.0-1.el10
• glib2-2.80.4-14.el10
• glibc-2.39-131.el10
• glibc-common-2.39-131.el10
• glibc-gconv-extra-2.39-131.el10
• glibc-minimal-langpack-2.39-131.el10
• gmp-1:6.2.1-12.el10
• gnupg2-2.4.5-5.el10
• gnutls-3.8.10-4.el10
• gobject-introspection-1.79.1-7.el10
• gpgme-1.23.2-6.el10
• grep-3.11-10.el10
• grub2-common-1:2.12-53.el10
• grub2-efi-x64-1:2.12-53.el10
• grub2-pc-1:2.12-53.el10
• grub2-pc-modules-1:2.12-53.el10
• grub2-tools-1:2.12-53.el10
• grub2-tools-minimal-1:2.12-53.el10
• gssproxy-0.9.2-10.el10
• gzip-1.13-3.el10
• hostname-3.23-14.el10
• hwdata-0.379-10.9.el10
• ignition-2.26.0-4.el10
• ignition-grub-2.26.0-4.el10
• ima-evm-utils-1.6.2-6.el10
• info-7.1-6.el10
• inih-58-3.el10
• intel-gpu-firmware-20260722-25.el10
• ipcalc-1.0.3-12.el10
• iproute-7.0.0-2.el10
• iproute-tc-7.0.0-2.el10
• iptables-libs-1.8.11-15.el10
• iptables-nft-1.8.11-15.el10
• iputils-20240905-5.el10
• irqbalance-2:1.9.4-6.el10
• iscsi-initiator-utils-6.2.1.11-2.git4b3e853.el10
• iscsi-initiator-utils-iscsiuio-6.2.1.11-2.git4b3e853.el10
• isns-utils-libs-0.103-1.el10
• jansson-2.14-3.el10
• jose-14-102.el10
• jq-1.7.1-13.el10
• json-c-0.18-3.el10
• json-glib-1.8.0-5.el10
• kbd-2.6.4-7.el10
• kbd-legacy-2.6.4-7.el10
• kbd-misc-2.6.4-7.el10
• kdump-utils-1.0.58-15.el10
• kernel-6.12.0-251.el10
• kernel-core-6.12.0-251.el10
• kernel-modules-6.12.0-251.el10
• kernel-modules-core-6.12.0-251.el10
• kernel-modules-extra-6.12.0-251.el10
• kexec-tools-2.0.32-3.el10
• keyutils-1.6.3-5.el10
• keyutils-libs-1.6.3-5.el10
• kmod-31-13.el10
• kmod-libs-31-13.el10
• kpartx-0.9.9-19.el10
• krb5-libs-1.21.3-11.el10
• less-661-3.el10
• libacl-2.3.2-4.el10
• libaio-0.3.112-1.el10
• libarchive-3.7.7-8.el10
• libassuan-2.5.6-6.el10
• libattr-2.6.0-2.el10
• libbasicobjects-0.1.1-58.el10
• libblkid-2.40.2-20.el10
• libbpf-2:1.7.0-2.el10
• libcap-2.69-7.el10
• libcap-ng-0.9.3-2.el10
• libcbor-0.11.0-3.el10
• libcollection-0.7.0-58.el10
• libcom_err-1.47.1-5.el10
• libcomps-0.1.21-3.el10
• libconfig-1.7.3-10.el10
• libcurl-minimal-8.12.1-6.el10
• libdhash-0.5.0-58.el10
• libdnf-0.73.1-17.el10
• libdnf-plugin-subscription-manager-1.30.15-1.el10
• libdrm-2.4.128-1.el10
• libeconf-0.6.2-4.el10
• libedit-3.1-52.20230828cvs.el10
• libev-4.33-15.el10
• libevent-2.1.12-16.el10
• libfdisk-2.40.2-20.el10
• libffi-3.4.4-10.el10
• libfido2-1.14.0-7.el10
• libgcc-14.4.1-1.el10
• libgcrypt-1.11.0-7.el10
• libgomp-14.4.1-1.el10
• libgpg-error-1.50-2.el10
• libibverbs-62.0-2.el10
• libicu-74.2-5.el10
• libidn2-2.3.7-3.el10
• libini_config-1.3.1-58.el10
• libipa_hbac-2.13.1-2.el10
• libjcat-0.2.2-2.el10
• libjose-14-102.el10
• libkcapi-1.5.0-3.el10
• libkcapi-hasher-1.5.0-3.el10
• libkcapi-hmaccalc-1.5.0-3.el10
• libksba-1.6.7-2.el10
• libldb-4.24.3-100.el10
• libluksmeta-10-1.el10
• libmaxminddb-1.9.1-4.el10
• libmicrohttpd-1:1.0.0-3.el10
• libmnl-1.0.5-7.el10
• libmodulemd-2.15.0-12.el10
• libmount-2.40.2-20.el10
• libmspack-0.10.1-0.14.alpha.el10
• libndp-1.9-2.el10
• libnet-1.3-7.el10
• libnetfilter_conntrack-1.0.9-12.el10
• libnfnetlink-1.0.2-3.el10
• libnfsidmap-1:2.8.3-8.el10
• libnftnl-1.3.0-3.el10
• libnghttp2-1.68.0-5.el10
• libnl3-3.11.0-1.el10
• libnvme-1.16.2-1.el10
• libpath_utils-0.2.1-58.el10
• libpcap-14:1.10.4-7.el10
• libpciaccess-0.16-16.el10
• libpkgconf-2.1.0-3.el10
• libpwquality-1.4.5-13.el10
• libref_array-0.1.5-58.el10
• librepo-1.19.0-1.el10
• libseccomp-2.5.6-1.el10
• libselinux-3.11-1.el10
• libselinux-utils-3.11-1.el10
• libsemanage-3.11-1.el10
• libsepol-3.11-1.el10
• libsmartcols-2.40.2-20.el10
• libsmbclient-4.24.3-100.el10
• libsolv-0.7.33-5.el10
• libss-1.47.1-5.el10
• libsss_certmap-2.13.1-2.el10
• libsss_idmap-2.13.1-2.el10
• libsss_nss_idmap-2.13.1-2.el10
• libsss_sudo-2.13.1-2.el10
• libstdc++-14.4.1-1.el10
• libtalloc-2.4.4-100.el10
• libtasn1-4.20.0-5.el10
• libtdb-1.4.15-100.el10
• libtevent-0.17.1-100.el10
• libtirpc-1.3.5-1.el10
• libtool-ltdl-2.4.7-14.el10
• libunistring-1.1-10.el10
• liburing-2.12-1.el10
• libusb1-1.0.30-1.el10
• libutempter-1.2.1-15.el10
• libuuid-2.40.2-20.el10
• libuv-1:1.52.1-1.el10
• libverto-0.3.2-10.el10
• libverto-libev-0.3.2-10.el10
• libwbclient-4.24.3-100.el10
• libxcrypt-4.4.36-10.el10
• libxml2-2.12.5-15.el10
• libxmlb-0.3.28-1.el10
• libxslt-1.1.39-10.el10
• libyaml-0.2.5-16.el10
• libzstd-1.5.5-9.el10
• linux-firmware-20260722-25.el10
• linux-firmware-whence-20260722-25.el10
• lldpad-1.1.1-4.gitf1dd9eb.el10
• lmdb-libs-0.9.32-4.el10
• logrotate-3.22.0-5.el10
• lsof-4.98.0-7.el10
• lua-libs-5.4.8-1.el10
• luksmeta-10-1.el10
• lvm2-10:2.03.41-3.el10
• lvm2-libs-10:2.03.41-3.el10
• lz4-libs-1.9.4-8.el10
• lzo-2.10-14.el10
• makedumpfile-1.7.8-1.el10
• mdadm-4.4-4.el10
• microcode_ctl-4:20260210-1.el10
• mokutil-2:0.7.2-5.el10
• mpdecimal-2.5.1-12.el10
• mpfr-4.2.1-8.el10
• nano-8.1-3.el10
• ncurses-base-6.4-15.20240127.el10
• ncurses-libs-6.4-15.20240127.el10
• net-tools-2.0-0.73.20160912git.el10
• netavark-4:2.0.0-2.el10
• nettle-3.10.1-1.el10
• newt-0.52.24-5.el10
• nfs-utils-1:2.8.3-8.el10
• nftables-1:1.1.5-5.el10
• nmap-ncat-4:7.92-5.el10
• nmstate-2.2.61-1.el10
• npth-1.6-21.el10
• nss-altfiles-2.23.0-6.el10
• numactl-2.0.19-3.el10
• numactl-libs-2.0.19-3.el10
• numad-0.5-50.20251104git.el10
• nvidia-gpu-firmware-20260722-25.el10
• nvme-cli-2.16-2.el10
• oniguruma-6.9.9-7.el10
• open-vm-tools-13.0.10-1.el10
• openldap-2.6.13-1.el10
• openshift-clients-4.22.0-202605222252.p2.g062bc54.assembly.stream.el9
• openshift-kubelet-4.22.0-202606041959.p2.g7250fd5.assembly.stream.el9
• openssh-9.9p1-28.el10
• openssh-clients-9.9p1-28.el10
• openssh-server-9.9p1-28.el10
• openssl-1:3.5.7-2.el10
• openssl-fips-provider-1:3.5.7-2.el10
• openssl-libs-1:3.5.7-2.el10
• openvswitch-selinux-extra-policy-1.0-36.el10s
• openvswitch3.5-3.5.3-5.el10s
• os-prober-1.81-9.el10
• ose-aws-ecr-image-credential-provider-4.22.0-202605191551.p2.gb4bad3f.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.22.0-202605292128.p2.g0e3fc8d.assembly.stream.el9
• ose-crio-credential-provider-4.22.0-202602261640.p2.g83d4961.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.22.0-202605192117.p2.gea31ab8.assembly.stream.el9
• ostree-2026.2-1.el10
• ostree-grub2-2026.2-1.el10
• ostree-libs-2026.2-1.el10
• p11-kit-0.26.4-1.el10
• p11-kit-trust-0.26.4-1.el10
• pam-1.6.1-11.el10
• pam-libs-1.6.1-11.el10
• passt-0^20260611.ga9c61ff-1.el10
• passt-selinux-0^20260611.ga9c61ff-1.el10
• pciutils-3.13.0-6.el10
• pciutils-libs-3.13.0-6.el10
• pcre2-10.44-1.el10.3
• pcre2-syntax-10.44-1.el10.3
• pkgconf-2.1.0-3.el10
• pkgconf-m4-2.1.0-3.el10
• pkgconf-pkg-config-2.1.0-3.el10
• podman-7:6.0.2-1.el10
• podman-sequoia-0.4.0~pqc.3-1.el10
• policycoreutils-3.11-1.el10
• policycoreutils-python-utils-3.11-1.el10
• polkit-125-6.el10
• polkit-libs-125-6.el10
• popt-1.19-8.el10
• procps-ng-4.0.4-13.el10
• protobuf-c-1.5.0-6.el10
• psmisc-23.6-8.el10
• python3-3.12.13-3.el10
• python3-audit-4.0.3-5.el10
• python3-charset-normalizer-3.4.2-1.el10
• python3-cloud-what-1.30.15-1.el10
• python3-dateutil-1:2.9.0.post0-1.el10
• python3-dbus-1.3.2-8.el10
• python3-decorator-5.1.1-12.el10
• python3-distro-1.9.0-5.el10
• python3-dnf-4.20.0-26.el10
• python3-dnf-plugin-versionlock-4.7.0-11.el10
• python3-dnf-plugins-core-4.7.0-11.el10
• python3-file-magic-5.45-12.el10
• python3-gobject-base-3.46.0-7.el10
• python3-gobject-base-noarch-3.46.0-7.el10
• python3-hawkey-0.73.1-17.el10
• python3-idna-3.7-4.el10
• python3-iniparse-0.5-10.el10
• python3-inotify-0.9.6-36.el10
• python3-libcomps-0.1.21-3.el10
• python3-libdnf-0.73.1-17.el10
• python3-librepo-1.19.0-1.el10
• python3-libs-3.12.13-3.el10
• python3-libselinux-3.11-1.el10
• python3-libsemanage-3.11-1.el10
• python3-packaging-24.2-2.el10
• python3-pexpect-4.9.0-6.el10
• python3-pip-wheel-23.3.2-11.el10
• python3-policycoreutils-3.11-1.el10
• python3-ptyprocess-0.7.0-9.el10
• python3-pyyaml-6.0.1-19.el10
• python3-requests-2.32.4-1.el10
• python3-rpm-4.19.1.1-25.el10
• python3-setools-4.7.0-1.el10
• python3-setuptools-69.0.3-12.el10
• python3-six-1.16.0-16.el10
• python3-subscription-manager-rhsm-1.30.15-1.el10
• python3-systemd-235-11.el10
• python3-urllib3-1.26.19-4.el10
• qemu-guest-agent-18:10.1.0-24.el10
• quota-1:4.09-10.el10
• quota-nls-1:4.09-10.el10
• rdma-core-62.0-2.el10
• readline-8.2-11.el10
• rpcbind-1.2.9-0.el10
• rpm-4.19.1.1-25.el10
• rpm-build-libs-4.19.1.1-25.el10
• rpm-libs-4.19.1.1-25.el10
• rpm-ostree-2026.2-1.el10
• rpm-ostree-libs-2026.2-1.el10
• rpm-plugin-audit-4.19.1.1-25.el10
• rpm-plugin-selinux-4.19.1.1-25.el10
• rpm-plugin-syslog-4.19.1.1-25.el10
• rpm-sequoia-1.10.2.3-1.el10
• rpm-sign-libs-4.19.1.1-25.el10
• rsync-3.4.4-1.el10
• samba-client-libs-4.24.3-100.el10
• samba-common-4.24.3-100.el10
• samba-core-libs-4.24.3-100.el10
• samba-ndr-libs-4.24.3-100.el10
• sed-4.9-5.el10
• selinux-policy-42.1.26-1.el10
• selinux-policy-targeted-42.1.26-1.el10
• setup-2.14.5-7.el10
• sg3_utils-1.48-10.el10
• sg3_utils-libs-1.48-10.el10
• shadow-utils-2:4.15.0-13.el10
• shadow-utils-subid-2:4.15.0-13.el10
• shared-mime-info-2.3-8.el10
• shim-x64-16.1-1.el10
• skopeo-2:1.23.0-1.el10
• slang-2.3.3-8.el10
• snappy-1.1.10-7.el10
• socat-1.7.4.4-9.el10
• sos-4.11.2-3.el10
• sqlite-libs-3.46.1-5.el10
• ssh-key-dir-0.1.4-9.el10
• sssd-2.13.1-2.el10
• sssd-ad-2.13.1-2.el10
• sssd-client-2.13.1-2.el10
• sssd-common-2.13.1-2.el10
• sssd-common-pac-2.13.1-2.el10
• sssd-ipa-2.13.1-2.el10
• sssd-krb5-2.13.1-2.el10
• sssd-krb5-common-2.13.1-2.el10
• sssd-ldap-2.13.1-2.el10
• sssd-nfs-idmap-2.13.1-2.el10
• sssd-proxy-2.13.1-2.el10
• stalld-1.26.3-1.el10
• strace-6.12-3.el10
• subscription-manager-1.30.15-1.el10
• subscription-manager-rhsm-certificates-20220623-6.el10
• sudo-1.9.17-9.p2.el10
• systemd-257-30.el10
• systemd-journal-remote-257-30.el10
• systemd-libs-257-30.el10
• systemd-pam-257-30.el10
• systemd-udev-257-30.el10
• tar-2:1.35-11.el10
• tmux-3.3a-14.20230918gitb202a2f.el10
• toolbox-0.3-3.el10
• tpm2-tools-5.7-5.el10
• tpm2-tss-4.1.3-6.el10
• tpm2-tss-fapi-4.1.3-6.el10
• tzdata-2026c-1.el10
• unbound-anchor-1.25.1-1.el10
• unbound-libs-1.25.1-1.el10
• userspace-rcu-0.14.0-7.el10
• util-linux-2.40.2-20.el10
• util-linux-core-2.40.2-20.el10
• vim-data-2:9.1.083-15.el10
• vim-minimal-2:9.1.083-15.el10
• virt-what-1.27-3.el10
• which-2.21-44.el10
• xfsprogs-6.16.0-1.el10
• xmlsec1-1:1.2.39-3.el10
• xmlsec1-openssl-1:1.2.39-3.el10
• xz-1:5.6.2-4.el10
• xz-libs-1:5.6.2-4.el10
• zlib-ng-compat-2.2.3-3.el10
• zram-generator-1.1.2-14.el10
• zstd-1.5.5-9.el10

Changed:

• aardvark-dns 2:2.0.0-1.el10 → 4:2.0.0-2.el10
• amd-gpu-firmware 20260624-24.el10 → 20260722-25.el10
• amd-ucode-firmware 20260624-24.el10 → 20260722-25.el10
• c-ares 1.34.6-1.el10 → 1.34.6-4.el10
• clevis 23-1.el10 → 23-2.el10
• clevis-dracut 23-1.el10 → 23-2.el10
• clevis-luks 23-1.el10 → 23-2.el10
• clevis-systemd 23-1.el10 → 23-2.el10
• container-selinux 4:2.249.0-1.el10 → 4:2.250.0-1.el10
• cri-o 1.36.2-1.el10s → 1.35.5-1.el10s
• cri-tools 1.36.0-1.el10s → 1.35.0-1.el10s
• criu 4.2-7.el10 → 4.2-8.el10
• criu-libs 4.2-7.el10 → 4.2-8.el10
• dbus 1:1.14.10-5.el10 → 1:1.14.10-6.el10
• dbus-common 1:1.14.10-5.el10 → 1:1.14.10-6.el10
• dbus-libs 1:1.14.10-5.el10 → 1:1.14.10-6.el10
• dbus-tools 1:1.14.10-5.el10 → 1:1.14.10-6.el10
• glib2 2.80.4-13.el10 → 2.80.4-14.el10
• glibc 2.39-130.el10 → 2.39-131.el10
• glibc-common 2.39-130.el10 → 2.39-131.el10
• glibc-gconv-extra 2.39-130.el10 → 2.39-131.el10
• glibc-minimal-langpack 2.39-130.el10 → 2.39-131.el10
• gobject-introspection 1.79.1-6.el10 → 1.79.1-7.el10
• grub2-common 1:2.12-51.el10 → 1:2.12-53.el10
• grub2-efi-x64 1:2.12-51.el10 → 1:2.12-53.el10
• grub2-pc 1:2.12-51.el10 → 1:2.12-53.el10
• grub2-pc-modules 1:2.12-51.el10 → 1:2.12-53.el10
• grub2-tools 1:2.12-51.el10 → 1:2.12-53.el10
• grub2-tools-minimal 1:2.12-51.el10 → 1:2.12-53.el10
• ignition 2.26.0-3.el10 → 2.26.0-4.el10
• ignition-grub 2.26.0-3.el10 → 2.26.0-4.el10
• intel-gpu-firmware 20260624-24.el10 → 20260722-25.el10
• iproute 6.17.0-2.el10 → 7.0.0-2.el10
• iproute-tc 6.17.0-2.el10 → 7.0.0-2.el10
• kernel 6.12.0-250.el10 → 6.12.0-251.el10
• kernel-core 6.12.0-250.el10 → 6.12.0-251.el10
• kernel-modules 6.12.0-250.el10 → 6.12.0-251.el10
• kernel-modules-core 6.12.0-250.el10 → 6.12.0-251.el10
• kernel-modules-extra 6.12.0-250.el10 → 6.12.0-251.el10
• libcap-ng 0.9.3-1.el10 → 0.9.3-2.el10
• libnghttp2 1.68.0-4.el10 → 1.68.0-5.el10
• libnvme 1.16.1-4.el10 → 1.16.2-1.el10
• libxml2 2.12.5-14.el10 → 2.12.5-15.el10
• libxslt 1.1.39-9.el10 → 1.1.39-10.el10
• linux-firmware 20260624-24.el10 → 20260722-25.el10
• linux-firmware-whence 20260624-24.el10 → 20260722-25.el10
• netavark 2:2.0.0-1.el10 → 4:2.0.0-2.el10
• nmstate 2.2.60-2.el10 → 2.2.61-1.el10
• nvidia-gpu-firmware 20260624-24.el10 → 20260722-25.el10
• openshift-clients 5.0.0-202607221344.p2.gcd086f9.assembly.stream.el10 → 4.22.0-202605222252.p2.g062bc54.assembly.stream.el9
• openshift-kubelet 5.0.0-202607191903.p2.g0f7d1a1.assembly.stream.el10 → 4.22.0-202606041959.p2.g7250fd5.assembly.stream.el9
• openssh 9.9p1-27.el10 → 9.9p1-28.el10
• openssh-clients 9.9p1-27.el10 → 9.9p1-28.el10
• openssh-server 9.9p1-27.el10 → 9.9p1-28.el10
• ose-aws-ecr-image-credential-provider 5.0.0-202606171004.p2.g5060934.assembly.stream.el10 → 4.22.0-202605191551.p2.gb4bad3f.assembly.stream.el9
• ose-azure-acr-image-credential-provider 5.0.0-202607011929.p2.gd04449b.assembly.stream.el10 → 4.22.0-202605292128.p2.g0e3fc8d.assembly.stream.el9
• ose-crio-credential-provider 5.0.0-202603041733.p2.g83d4961.assembly.stream.el10 → 4.22.0-202602261640.p2.g83d4961.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider 5.0.0-202607201932.p2.g30cc047.assembly.stream.el10 → 4.22.0-202605192117.p2.gea31ab8.assembly.stream.el9
• pam 1.6.1-10.el10 → 1.6.1-11.el10
• pam-libs 1.6.1-10.el10 → 1.6.1-11.el10
• podman 7:6.0.0-1.el10 → 7:6.0.2-1.el10
• python3 3.12.13-2.el10 → 3.12.13-3.el10
• python3-dnf-plugin-versionlock 4.7.0-10.el10 → 4.7.0-11.el10
• python3-dnf-plugins-core 4.7.0-10.el10 → 4.7.0-11.el10
• python3-libs 3.12.13-2.el10 → 3.12.13-3.el10
• selinux-policy 42.1.25-1.el10 → 42.1.26-1.el10
• selinux-policy-targeted 42.1.25-1.el10 → 42.1.26-1.el10
• sos 4.11.2-1.el10 → 4.11.2-3.el10
• systemd 257-29.el10 → 257-30.el10
• systemd-journal-remote 257-29.el10 → 257-30.el10
• systemd-libs 257-29.el10 → 257-30.el10
• systemd-pam 257-29.el10 → 257-30.el10
• systemd-udev 257-29.el10 → 257-30.el10
• tzdata 2026b-1.el10 → 2026c-1.el10

Extensions

Full list (112 packages)

• NetworkManager-libreswan-1.2.30-2.el10.x86_64
• binutils-2.41-65.el10.x86_64
• binutils-gold-2.41-65.el10.x86_64
• bison-3.8.2-9.el10.x86_64
• cmake-filesystem-3.31.8-1.el10.x86_64
• cpp-14.4.1-1.el10.x86_64
• elfutils-debuginfod-client-0.195-1.el10.x86_64
• elfutils-libelf-devel-0.195-1.el10.x86_64
• flex-2.6.4-19.el10.x86_64
• gcc-14.4.1-1.el10.x86_64
• glibc-devel-2.39-131.el10.x86_64
• groff-base-1.23.0-10.el10.x86_64
• kernel-6.12.0-251.el10.x86_64
• kernel-core-6.12.0-251.el10.x86_64
• kernel-devel-6.12.0-251.el10.x86_64
• kernel-headers-6.12.0-251.el10.x86_64
• kernel-modules-6.12.0-251.el10.x86_64
• kernel-modules-extra-6.12.0-251.el10.x86_64
• kernel-rt-core-6.12.0-251.el10.x86_64
• kernel-rt-devel-6.12.0-251.el10.x86_64
• kernel-rt-modules-6.12.0-251.el10.x86_64
• kernel-rt-modules-core-6.12.0-251.el10.x86_64
• kernel-rt-modules-extra-6.12.0-251.el10.x86_64
• krb5-pkinit-1.21.3-11.el10.x86_64
• krb5-workstation-1.21.3-11.el10.x86_64
• ldns-1.8.3-18.el10.x86_64
• libkadm5-1.21.3-11.el10.x86_64
• libmpc-1.3.1-7.el10.x86_64
• libqb-2.0.8-6.el10.x86_64
• libreswan-5.3.2-1.el10.x86_64
• libreswan-minimal-5.3.2-1.el10.x86_64
• libxcrypt-devel-4.4.36-10.el10.x86_64
• libzstd-devel-1.5.5-9.el10.x86_64
• lm_sensors-libs-3.6.0-20.el10.x86_64
• m4-1.4.19-11.el10.x86_64
• make-1:4.4.1-9.el10.x86_64
• ncurses-6.4-15.20240127.el10.x86_64
• nspr-4.39.0-5.el10.x86_64
• nss-3.124.0-5.el10.x86_64
• nss-softokn-3.124.0-5.el10.x86_64
• nss-softokn-freebl-3.124.0-5.el10.x86_64
• nss-sysinit-3.124.0-5.el10.x86_64
• nss-tools-3.124.0-5.el10.x86_64
• nss-util-3.124.0-5.el10.x86_64
• openssl-devel-1:3.5.7-2.el10.x86_64
• openvswitch3.5-ipsec-3.5.3-5.el10s.x86_64
• pcp-conf-7.1.5-2.el10.x86_64
• pcp-libs-7.1.5-2.el10.x86_64
• perl-AutoLoader-5.74-514.el10.noarch
• perl-B-1.89-514.el10.x86_64
• perl-Carp-1.54-511.el10.noarch
• perl-Class-Struct-0.68-514.el10.noarch
• perl-Data-Dumper-2.189-512.el10.x86_64
• perl-Digest-1.20-511.el10.noarch
• perl-Digest-MD5-2.59-6.el10.x86_64
• perl-DynaLoader-1.56-514.el10.x86_64
• perl-Encode-4:3.21-511.el10.x86_64
• perl-Errno-1.38-514.el10.x86_64
• perl-Exporter-5.78-511.el10.noarch
• perl-Fcntl-1.18-514.el10.x86_64
• perl-File-Basename-2.86-514.el10.noarch
• perl-File-Path-2.18-512.el10.noarch
• perl-File-Temp-1:0.231.100-512.el10.noarch
• perl-File-stat-1.14-514.el10.noarch
• perl-FileHandle-2.05-514.el10.noarch
• perl-Getopt-Long-1:2.58-3.el10.noarch
• perl-Getopt-Std-1.14-514.el10.noarch
• perl-HTTP-Tiny-0.088-512.el10.noarch
• perl-IO-1.55-514.el10.x86_64
• perl-IO-Socket-IP-0.42-512.el10.noarch
• perl-IO-Socket-SSL-2.085-3.el10.noarch
• perl-IPC-Open3-1.22-514.el10.noarch
• perl-MIME-Base64-3.16-511.el10.x86_64
• perl-Mozilla-CA-20231213-5.el10.noarch
• perl-NDBM_File-1.17-514.el10.x86_64
• perl-Net-SSLeay-1.94-9.el10.x86_64
• perl-POSIX-2.20-514.el10.x86_64
• perl-PathTools-3.91-512.el10.x86_64
• perl-Pod-Escapes-1:1.07-511.el10.noarch
• perl-Pod-Perldoc-3.28.01-512.el10.noarch
• perl-Pod-Simple-1:3.45-511.el10.noarch
• perl-Pod-Usage-4:2.03-511.el10.noarch
• perl-Scalar-List-Utils-5:1.63-511.el10.x86_64
• perl-SelectSaver-1.02-514.el10.noarch
• perl-Socket-4:2.038-511.el10.x86_64
• perl-Storable-1:3.32-511.el10.x86_64
• perl-Symbol-1.09-514.el10.noarch
• perl-Term-ANSIColor-5.01-512.el10.noarch
• perl-Term-Cap-1.18-511.el10.noarch
• perl-Text-ParseWords-3.31-511.el10.noarch
• perl-Text-Tabs+Wrap-2024.001-511.el10.noarch
• perl-Time-Local-2:1.350-511.el10.noarch
• perl-URI-5.27-3.el10.noarch
• perl-base-2.27-514.el10.noarch
• perl-constant-1.33-512.el10.noarch
• perl-if-0.61.000-514.el10.noarch
• perl-interpreter-4:5.40.2-514.el10.x86_64
• perl-libnet-3.15-512.el10.noarch
• perl-libs-4:5.40.2-514.el10.x86_64
• perl-locale-1.12-514.el10.noarch
• perl-mro-1.29-514.el10.x86_64
• perl-overload-1.37-514.el10.noarch
• perl-overloading-0.02-514.el10.noarch
• perl-parent-1:0.241-512.el10.noarch
• perl-podlators-1:5.01-511.el10.noarch
• perl-vars-1.05-514.el10.noarch
• protobuf-3.19.6-15.el10.x86_64
• python3-openvswitch3.5-3.5.3-5.el10s.x86_64
• sysstat-12.7.6-4.el10.x86_64
• usbguard-1.1.4-2.el10.x86_64
• usbguard-selinux-1.1.4-2.el10.noarch
• zlib-ng-compat-devel-2.2.3-3.el10.x86_64

CentOS Stream CoreOS base layer: 10 upgraded from 10.0.20260721-0 to 10.0.20260729-0

MGMT-24903: Fall back to CoreOS base layer: image from worker ignition for day-2 persistent-boot #10717

View changelog in Markdown or change previous release: 5.0.0-0.okd-scos-nightly-2026-08-05-1744245.0.0-0.okd-scos-nightly-2026-08-05-0544245.0.0-0.okd-scos-nightly-2026-08-04-1727045.0.0-0.okd-scos-nightly-2026-08-04-0527045.0.0-0.okd-scos-nightly-2026-07-24-0324295.0.0-0.okd-scos-nightly-2026-07-23-0324295.0.0-0.okd-scos-nightly-2026-07-16-1510235.0.0-0.okd-scos-nightly-2026-07-16-0310235.0.0-0.okd-scos-nightly-2026-07-15-151023───5.1.0-0.okd-scos-2026-08-06-182818───5.0.0-0.okd-scos-2026-08-06-2134595.0.0-0.okd-scos-2026-08-06-0934595.0.0-0.okd-scos-2026-08-05-2134595.0.0-0.okd-scos-2026-08-05-0934595.0.0-0.okd-scos-2026-08-04-2134595.0.0-0.okd-scos-2026-08-04-0934595.0.0-0.okd-scos-2026-07-23-0738335.0.0-0.okd-scos-2026-07-22-1643375.0.0-0.okd-scos-2026-07-22-0443375.0.0-0.okd-scos-2026-07-14-1913295.0.0-0.okd-scos-2026-07-14-0713295.0.0-0.okd-scos-2026-07-13-1913295.0.0-0.okd-scos-2026-07-13-0713295.0.0-0.okd-scos-2026-07-12-065100───4.23.0-0.okd-scos-nightly-2026-06-19-2121094.23.0-0.okd-scos-nightly-2026-06-19-0921094.23.0-0.okd-scos-nightly-2026-03-09-153314───4.23.0-0.okd-scos-2026-08-01-0343024.23.0-0.okd-scos-2026-07-31-1543024.23.0-0.okd-scos-2026-07-29-1405184.23.0-0.okd-scos-2026-03-09-153314───4.22.0-0.okd-scos-nightly-2026-08-06-1409124.22.0-0.okd-scos-nightly-2026-08-06-0209124.22.0-0.okd-scos-nightly-2026-08-05-1409124.22.0-0.okd-scos-nightly-2026-08-04-0139094.22.0-0.okd-scos-nightly-2026-08-03-1316484.22.0-0.okd-scos-nightly-2026-08-02-1316144.22.0-0.okd-scos-nightly-2026-08-01-1417194.22.0-0.okd-scos-nightly-2026-07-25-0220124.22.0-0.okd-scos-nightly-2026-07-24-0220124.22.0-0.okd-scos-nightly-2026-07-23-1420124.22.0-0.okd-scos-nightly-2026-07-23-0220124.22.0-0.okd-scos-nightly-2026-07-17-1404274.22.0-0.okd-scos-nightly-2026-07-17-0204274.22.0-0.okd-scos-nightly-2026-07-16-140426───4.22.0-0.okd-scos-2026-08-05-1732564.22.0-0.okd-scos-2026-08-04-0705334.22.0-0.okd-scos-2026-08-03-1444024.22.0-0.okd-scos-2026-08-01-0159544.22.0-0.okd-scos-2026-07-31-135954───4.21.0-0.okd-scos-nightly-2026-08-06-1314164.21.0-0.okd-scos-nightly-2026-08-06-0114164.21.0-0.okd-scos-nightly-2026-08-05-1314164.21.0-0.okd-scos-nightly-2026-08-05-0114164.21.0-0.okd-scos-nightly-2026-08-04-1314164.21.0-0.okd-scos-nightly-2026-08-04-0114164.21.0-0.okd-scos-nightly-2026-08-02-0120034.21.0-0.okd-scos-nightly-2026-07-25-0211304.21.0-0.okd-scos-nightly-2026-07-23-0211304.21.0-0.okd-scos-nightly-2026-07-22-1411304.21.0-0.okd-scos-nightly-2026-07-22-021130───4.21.0-0.okd-scos-2026-07-29-0152434.21.0-0.okd-scos-2026-07-28-1352434.21.0-0.okd-scos-2026-07-27-2036484.21.0-0.okd-scos-2026-07-22-1643374.21.0-0.okd-scos-2026-07-22-0443374.21.0-0.okd-scos-2026-07-21-1643374.21.0-0.okd-scos-2026-07-21-0443374.21.0-0.okd-scos-2026-07-20-1643374.21.0-0.okd-scos-2026-07-14-1808504.21.0-0.okd-scos-2026-07-14-012503───4.20.0-0.okd-scos-2026-02-10-1309514.20.0-0.okd-scos-2026-02-07-0016394.20.0-0.okd-scos-2026-02-06-1216394.20.0-0.okd-scos-2026-02-06-0016394.20.0-0.okd-scos-2026-02-05-1216384.20.0-0.okd-scos-2026-02-05-001637───4.19.0-0.okd-scos-2025-10-25-0018304.19.0-0.okd-scos-2025-10-24-1218294.19.0-0.okd-scos-2025-10-24-0018284.19.0-0.okd-scos-2025-10-23-1218284.19.0-0.okd-scos-2025-10-23-001828───4.18.0-0.okd-scos-2025-05-27-0825374.18.0-0.okd-scos-2025-05-26-2025374.18.0-0.okd-scos-2025-05-26-0825374.18.0-0.okd-scos-2025-05-23-0333574.18.0-0.okd-scos-2025-05-22-153357───4.17.0-0.okd-scos-2025-02-25-0904554.17.0-0.okd-scos-2025-02-24-2104554.17.0-0.okd-scos-2025-02-24-0904544.17.0-0.okd-scos-2025-02-23-2104544.17.0-0.okd-scos-2025-02-22-211215───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2025-06-27-1341344.15.0-0.okd-2025-06-17-1652194.15.0-0.okd-2025-05-02-1402244.15.0-0.okd-2025-04-03-2126204.15.0-0.okd-2025-04-02-1800124.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424───5.0.0-okd-scos.ec.65.0.0-okd-scos.ec.55.0.0-okd-scos.ec.45.0.0-okd-scos.ec.35.0.0-okd-scos.ec.25.0.0-okd-scos.ec.15.0.0-okd-scos.ec.0───4.22.0-okd-scos.ec.164.22.0-okd-scos.ec.154.22.0-okd-scos.ec.144.22.0-okd-scos.ec.134.22.0-okd-scos.ec.124.22.0-okd-scos.ec.114.22.0-okd-scos.ec.104.22.0-okd-scos.ec.94.22.0-okd-scos.ec.84.22.0-okd-scos.ec.74.22.0-okd-scos.ec.64.22.0-okd-scos.ec.54.22.0-okd-scos.ec.44.22.0-okd-scos.ec.34.22.0-okd-scos.ec.24.22.0-okd-scos.ec.14.22.0-okd-scos.ec.04.21.0-okd-scos.ec.194.21.0-okd-scos.ec.184.21.0-okd-scos.ec.174.21.0-okd-scos.ec.164.21.0-okd-scos.ec.154.21.0-okd-scos.ec.144.21.0-okd-scos.ec.134.21.0-okd-scos.ec.124.21.0-okd-scos.ec.114.21.0-okd-scos.ec.104.21.0-okd-scos.ec.94.21.0-okd-scos.ec.84.21.0-okd-scos.ec.74.21.0-okd-scos.ec.64.21.0-okd-scos.ec.54.21.0-okd-scos.ec.44.21.0-okd-scos.ec.34.21.0-okd-scos.ec.24.21.0-okd-scos.ec.14.21.0-okd-scos.ec.0───4.22.0-okd-scos.74.22.0-okd-scos.64.22.0-okd-scos.54.22.0-okd-scos.44.22.0-okd-scos.34.22.0-okd-scos.24.22.0-okd-scos.14.22.0-okd-scos.04.21.0-okd-scos.114.21.0-okd-scos.104.21.0-okd-scos.94.21.0-okd-scos.84.21.0-okd-scos.74.21.0-okd-scos.64.21.0-okd-scos.54.21.0-okd-scos.44.21.0-okd-scos.34.21.0-okd-scos.24.21.0-okd-scos.14.21.0-okd-scos.04.20.0-okd-scos.174.20.0-okd-scos.164.20.0-okd-scos.154.20.0-okd-scos.144.20.0-okd-scos.134.20.0-okd-scos.124.20.0-okd-scos.114.20.0-okd-scos.104.20.0-okd-scos.94.20.0-okd-scos.84.20.0-okd-scos.74.20.0-okd-scos.64.20.0-okd-scos.54.20.0-okd-scos.44.20.0-okd-scos.34.20.0-okd-scos.24.20.0-okd-scos.14.20.0-okd-scos.04.19.0-okd-scos.194.19.0-okd-scos.184.19.0-okd-scos.174.19.0-okd-scos.164.19.0-okd-scos.154.19.0-okd-scos.144.19.0-okd-scos.134.19.0-okd-scos.124.19.0-okd-scos.114.19.0-okd-scos.104.19.0-okd-scos.94.19.0-okd-scos.84.19.0-okd-scos.74.19.0-okd-scos.64.19.0-okd-scos.54.19.0-okd-scos.44.19.0-okd-scos.34.19.0-okd-scos.24.19.0-okd-scos.14.19.0-okd-scos.04.18.0-okd-scos.104.18.0-okd-scos.94.18.0-okd-scos.84.18.0-okd-scos.74.18.0-okd-scos.64.18.0-okd-scos.54.18.0-okd-scos.44.18.0-okd-scos.34.18.0-okd-scos.24.18.0-okd-scos.14.18.0-okd-scos.04.17.0-okd-scos.34.17.0-okd-scos.24.17.0-okd-scos.14.17.0-okd-scos.04.16.0-okd-scos.14.16.0-okd-scos.0

Source code for this page located on github