5.1.0-0.okd-scos-nightly-2026-10-14-130639

Download installer and client with:

oc adm release extract --tools registry.ci.openshift.org/origin/release-scos:5.1.0-0.okd-scos-nightly-2026-10-14-130639

Qualifiers (status api): None

Tests:

Blocking jobs
- aws Failed (2 retries) periodic-ci-openshift-release-main-okd-scos-5.1-e2e-aws-ovn
- aws-upgrade Pending (2 retries) periodic-ci-openshift-release-main-okd-scos-5.1-e2e-aws-ovn-upgrade
Informing jobs
- agent-single-node-ipv6 Failed periodic-ci-openshift-release-main-okd-scos-5.1-e2e-agent-single-node-ipv6
- aws-ovn-techpreview Failed (2 retries) periodic-ci-openshift-release-main-okd-scos-5.1-e2e-aws-ovn-techpreview
- aws-upgrade-minor Failed periodic-ci-openshift-release-main-okd-scos-5.1-upgrade-from-okd-scos-5.0-e2e-aws-ovn-upgrade
- gcp Failed periodic-ci-openshift-release-main-okd-scos-5.1-e2e-gcp
- vsphere Failed periodic-ci-openshift-release-main-okd-scos-5.1-e2e-vsphere-ovn
Async jobs
- claude-payload-agent Succeeded periodic-ci-openshift-release-main-claude-payload-agent-okd-scos-no-slack

Upgrades from:

Changes from 5.1.0-0.okd-scos-nightly-2026-09-28-151039

Created: 2026-10-14 13:06:55 +0000 UTC

Image Digest: sha256:9df81ac6b11ab6cbe8b9a340d0ce9fa2d9abd870a6e7946ec7ba21e4b9c541e4

Components

Kubectl 1.36.2
Kubernetes upgraded from 1.36.4 to 1.37.1
Kubernetes Tests 1.36.2
CentOS Stream CoreOS 10 upgraded from 10.0.20260819-0 to 10.0.20261008-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
OLMLifecycleAndCompatibility (0 tests)	Disabled	Disabled (Changed)	Disabled	Disabled (Changed)	Disabled	Disabled (Changed)	Disabled	Disabled (Changed)
AuthenticationComponentProxy (0 tests)	Disabled	Enabled (Changed)	Disabled	Enabled	Disabled	Enabled (Changed)	Disabled	Enabled
DRADeviceTaintRules (0 tests)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)
ControllerManagerConfig (0 tests)				Enabled (New)
MACSecurity (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)

New images

azure-karpenter-provider-azure git 69774110 sha256:a25f7e54ed5e8d286c96ff9af7fbb4244918a3508e0b8abe5597ef49b82242e9

Removed images

configmap-reloader

Rebuilt images without code change

agent-installer-utils git cc9b847e sha256:dfd1f33acfad696dce42ca36432f93b12b6750946d6c33dc76cf6b562379288e
aws-cloud-controller-manager git e44d1350 sha256:44054b3133e7f8fb0c6b08b84a2906fa2e50c70217edf36354ee9ef0204f9740
aws-cluster-api-controllers git 3bf5bb70 sha256:4fe286b97713614207d178f6dae735db210f1481fb0143d7a0aefc267bde1029
aws-ebs-csi-driver git f0c5dd9f sha256:12e31d70e8d09d2a729726be2d513b2e0168b9bfe56bdf8ffd2b4b43882bda78
aws-kms-encryption-provider git f4d8aaa2 sha256:31e96496d0df97d5d393c316c53673a9d5a074fcdd5140603b9fbfdbe11379c5
aws-machine-controllers git f8155b0e sha256:af5f1fa2fbe8a683c6962e1312cb9bf06d1f4534e4f8b06fd7ee3b90944524d3
aws-node-termination-handler git b64c6ab9 sha256:d7192d227ede37084566034284c2d06cc731573c89a5bd46b0a4debd39568b42
aws-pod-identity-webhook git 0d33a459 sha256:34dd9782275d6754fe69b18bf72fe765ff9b316601b2ff9d9d98da14ba764945
azure-cloud-controller-manager git 2b2ba3b7 sha256:088233903d567b231d751f3e4cd655872947cda959fd77b4259580f571262a57
azure-cloud-node-manager git 2b2ba3b7 sha256:a2776f7a72c7e678f32444c20a46f38ced304259338374f39e4ec3c1ec738809
azure-file-csi-driver git 9dc3d1eb sha256:41edc7f2fe7a629e4997626b33a117c2559f78395a5198fea9ac237fd8dc7870
azure-kms-encryption-provider git 4bbe983b sha256:4e7ea5d1bf2c1836974dbbb8e56117e30ff9156bdf1dc41e0358ea51e4eab53b
azure-machine-controllers git 4ba9605f sha256:afeaccf4a6f3791a07f50b7b2ac5e2c2fcaae41dc74b2e93cc6abf19c44fb569
azure-service-operator git b371cd04 sha256:0c1302617e4042053180cad3e75acf9cb86a6cb2b1bbcab683bf64b2013c9d93
azure-workload-identity-webhook git 3f118b30 sha256:1bf2159365efc0c1bed39611f6f9962a6842ca36a67f8beb762eb513eac9399d
baremetal-machine-controllers git 26162bf3 sha256:cc41e280699edde8506336b2a20b50804197ebf6903d338ab33e04c6182cb26c
baremetal-runtimecfg git a8a259f5 sha256:7043055d9c124a5d0b80860e9b8fc98370a2e03d0b07b137b51aaa939758b11f
cloud-credential-operator git 82a5b445 sha256:47679cb3a6c0343a82e9d396a23ebf46823289509b1e24529576c011938c7d36
cluster-autoscaler git a819db45 sha256:d2aec8fd7c57b2948d6a978df0c02c2ab0d7e6a38c37961a12c19d8cb10ba718
cluster-bootstrap git 641ed6cf sha256:f7498be44bdea614dc881aebdfa89f8cf088bdcf043cbb5bc531719a67fc8b21
cluster-capi-controllers git ad313404 sha256:2f049c32c133fc11cc3a1af359b389a65ecb2c2aa27b3eb8096fbe7ef5163aef
cluster-cloud-controller-manager-operator git 9ca11878 sha256:813353a5ad9333ef2c5cfb97821d387f94fe4c03d7d24131050f748ab9047af2
cluster-image-registry-operator git 440b9296 sha256:84d97e969b6cff6862d69f3b122f5de0758f782ea0fb35ea1d57a70789a4c667
cluster-kube-storage-version-migrator-operator git 01da4b3e sha256:7489e47fece2b87abf1c0ad58a73aa61064cee14ab820d730f483407feb89821
cluster-policy-controller git c9e9a348 sha256:652a6bb8ac69fed13089b1f63e281933eeaee8160c42a9e5e55d1797ce0dbf3d
cluster-samples-operator git a4147d33 sha256:7c4f6197d94e357aec858ba801455327fd77e4344e2af8c65c4a2c953071a0ba
cluster-update-keys git 9607604d sha256:f489ac9a4d3cd5e1fff2d8c9dee5891d61a1030e10832328b1fe57dfe108fba8
coredns git 83aefed3 sha256:26cae5421814cd009137cbc92ae3e92bf2182b3e015d0a9fc152c498924b661c
csi-driver-manila git fb1be731 sha256:d1eedb83ef3eafe19ea51e1b095e93e15758d3bd409a1e49a66b82a33460a2e3
csi-driver-nfs git 69f816f6 sha256:c1e84e14e33837a26b37d529d127d54d46feac84fbef8143191b794b31c58d38
csi-external-attacher git 3fd668b3 sha256:67ad8cc162c6519a0f76df0e4fae123b056e8ae3dc54f29a4e21a9c20aa6adce
csi-external-provisioner git 7ff338c9 sha256:90ba4ffe4a86660627313360c41839862141e8d6523cbb9ef1dae0aa2bd45e43
csi-external-resizer git 14aa7028 sha256:ad44a5777971ebaa91bab4911bbb56f28359c938fc7193d289df8524cdaf28b6
csi-external-snapshot-metadata git 2059d60e sha256:fff948597daad02610ff3b4721b2fe76bda77dad06decdedf6da06185bf2cd41
csi-external-snapshotter git a019d1a9 sha256:e786522c98c2156c1a3cb8222732be964204c0f9740a18b78f49415b64490393
csi-livenessprobe git 4d22ba87 sha256:a71ab4d67c1d23fcd33e1e8fd792649349f05c5769a3cbdd81348e98edc47d5e
csi-node-driver-registrar git 5766960d sha256:bddaf769c1ea4270769fe357c46978acf973c2a32a102a41ba0c8d198f6de6d0
csi-snapshot-controller git a019d1a9 sha256:8006faf7024ca83bffdd5ccf635d0de9700d8f02c6c07a4be1f3f26fa1e367ab
docker-builder git eb6fab81 sha256:07f1cf11153fce523c45b7da89d6454fde6c02b4d3b3645c4b6ab37bc73ea8e6
docker-registry git ad28258b sha256:b280bccdeada11d314eae3e7774a1e80147f17b3ce5590dc8d60a9769b0d5775
driver-toolkit git b63b175a sha256:71982f549e8de1d01d64a665380e8dc2e4a750a5fd21bf874ce0243e3f35e8ad
etcd git 8480451b sha256:df54d8a0f6db4725995eeb5b35840cbe5d4aca48c2bd5d4cdc3304db3ff0343e
gcp-cloud-controller-manager git 51c32646 sha256:44af30ad62e6bba230fa648bc60f94636eed4bae9394997da11b8dd8e2de2199
gcp-cluster-api-controllers git 897628ca sha256:7de29125bb08965d57786c6a4ec635d5f9817a97d7bb2b63f46bca80873fdfde
gcp-pd-csi-driver git ce7b501e sha256:0c0051c018b04c66da03a756158c7605bf6121a03af14c1d31577ce2c163e4df
gcp-workload-identity-federation-webhook git 4501ff2f sha256:6c782a74bce379282ca657c639c3a281224a46a5d249beefec6a5c5378f0fc1b
ibm-cloud-controller-manager git 11bc35dd sha256:23c5767d1867b4676f5ef0e4ca7864884162ed41d50ace5ae4dd403b55c3b568
ibm-vpc-block-csi-driver git 8f1f7d63 sha256:01091d05c575af8a703cc8de8ca25df594eb7245ee6a2be83e5d811b447af3a3
ibmcloud-machine-controllers git c2439897 sha256:10358e66652d96dc0b769bec9b47bcce68e40fae9e63264d31baf4795f369939
insights-runtime-exporter git 23a0d856 sha256:714ccab584b32af296cbc6a550c8ba2af3c0c246f3111605edc3aaf8c78e3069
insights-runtime-extractor git 23a0d856 sha256:d8d3f4b86b335d3c5ada267ede26585d21779f093f2410393b5c7b83060d9917
installer-etcd-artifacts git 8480451b sha256:77698757c7bb444244d03390a985b3932d8d28c343eb2c1d527b6bf9d288298f
ironic-machine-os-downloader git f8e41b2e sha256:f115aa37590deae5d30df02213baf45b420554bfe9be6de52a4f7996d20655e7
ironic-static-ip-manager git 486a0418 sha256:b70d9f5efe39f854d2db93d7c28c9ddd061bcd630a0af1aa17b3606ffab4f3b1
kube-state-metrics git 4ee3abf7 sha256:db69c220f840a5f44e7560c345742f485759e1e42f95e469e4927da96395747c
kube-vip git b272a734 sha256:1248ce394c1cd565734c5834ae8c9490669873b818f8afdc7e5df1e70e636a27
kubevirt-cloud-controller-manager git 69b58793 sha256:c58c33013990129bd521e1cb951bb5d8fba7d0eaf39f7c7a1283d054b0c68c19
kubevirt-csi-driver git 5dc8df62 sha256:3704ca9fc4198cf15c38f1ceac639b2cfc377cec749670e9ee78914317d3f4a5
machine-image-customization-controller git 87f4774b sha256:3b42c96f15a9ba66d25130cd2b54d250de3fc05356c59855ca38d16817f1131d
machine-os-images git 3fca30d8 sha256:073b523d22e403678dba4a463c118c57aa84d4a1afbaa41d4e7466b53b246fcc
metallb-frr git 567c9101 sha256:5d1c45f9a20678a8338828932b21f3780c73bbc8436c768e823fbe0196b31256
multus-networkpolicy git 39e9cccf sha256:f0edded9227e2af994bb270f202f8e777d660bdcc9c65b30d862ff5abc200783
network-interface-bond-cni git b8723844 sha256:b5a05e5c55d1c40d66add32f012c40cd1348ca25be57d6a3f9cb5c2edb085cb6
network-metrics-daemon git f2abba74 sha256:9cdbf398438008fe2c8e508e7e695946a4c7b9e5e25fcd88ac4bdd950fca730b
network-tools git 03ae0e81 sha256:19c3114783d1b3e3f1879a796b9705dba0fe892c97677d259646c792ad1b3db5
nutanix-cloud-controller-manager git eded4633 sha256:e2c37c1a1f08c1f8687433c979c8c693156aa884147a43f73b7e1b16ca57c0d7
nutanix-machine-controllers git 249b7c8e sha256:68cf06ea2e414b8f62580912f74fd916e699665bc054688c558827b4669745e9
oauth-apiserver git dd82b4a7 sha256:9f242cf80af81b206f1f630daa11530187ba7ddb91c2bc191a360db27fa3389a
oauth-server git 0a5bbfdd sha256:4489c9e2c05f320ed1c58a04f6956d741bd2004c567ee66bc76aa3c4b14e05ac
openshift-apiserver git 34196aab sha256:ec4f26f7c69cd4cd76f8f1bc86d7eef1a0442264744a038401a22016b1233dd8
openshift-state-metrics git de9762d4 sha256:55df5433cc9e27cc9629d95ba1d73fe55cd26dd5058b3e9d6aa0e1e434f746db
openstack-cinder-csi-driver git fb1be731 sha256:cf07da9111d5a424e33ae4dd2c73bde73bb0bb811f4558d51eafa992296669de
openstack-cloud-controller-manager git fb1be731 sha256:86ce87c0d03440a6009da19c269adbbd0a81775d3c2bd2920f3debb669db1dc9
openstack-machine-api-provider git 310df6f1 sha256:e84634163612fce6fd19bf40bdac177a7720021f47a16212d50f3a36bda7a1c6
openstack-resource-controller git 64203711 sha256:e3887a49756e7f18046b3e4521b54be3979fa7803eea2bdbb0723c5930a0f3a9
powervs-block-csi-driver git cfe345c7 sha256:76ddaa51ba2b296443fe2311e3938686ca4e27f0fbf6aae5a7560c001fcc4203
powervs-cloud-controller-manager git 00d531b7 sha256:5eb68919705880a284addd45f53e911763dced8936fc75280af932a09a5ad25c
prom-label-proxy git 769aeb6a sha256:ed3f494b13b11ee15ca95bb77a5cde68a2aa0523658b1e10166c270e9da5b73e
prometheus git a734e977 sha256:ddd59f3185c23077b0ab1dbdad65cb9531cbae3d27bb31462ebdee23f26fe33b
prometheus-alertmanager git f126069d sha256:ecedde72ea667b011ee2093790ca76b157bd94c801281fe0fa1bccbb32c99cb1
prometheus-config-reloader git 551af86c sha256:201a201ab66d019941b5f579f5f87441fd4bfec41f7f4c42f7ea5238518588a2
prometheus-node-exporter git d54be631 sha256:0bb12f90d301b43971df77a3c4d9e7f9742f022cb75f4786935c81309da03190
prometheus-operator git 551af86c sha256:4fea44a57818aa39be62fa93f1acde5fdf5c8a97d6af4de24a8bc1cc01f1464b
prometheus-operator-admission-webhook git 551af86c sha256:bde97e15b9ee00b24d16d502bcbf24ebd3e0c7a4f6fa9caca50f5f5335bc889d
route-controller-manager git a158fff7 sha256:51af47652082eabc107e537dcc34528512c38f0dba50b4b05f62ff69a9fb799b
service-ca-operator git ed872ba1 sha256:97d706b212be8935c903b368fe52a9ebe3ce84bfc259511e36c4ce3586895557
telemeter git 7efb8766 sha256:64b70d9ea8db0a79f4853ea3798329a62ea7898b6edd678e51be85ae06f91abd
thanos git dd928fe0 sha256:c0b69db95e09cfdd85ef535031717cb0cb89acb6a4fdc517061aedbc8752186e
vsphere-cloud-controller-manager git eb29de19 sha256:6564f2abf70f3677feec5f460a788e9f83856f495f6b2e9e20dda46558925e6b
vsphere-csi-driver git 06229f5e sha256:84feb009dc6deabd18d0a11bd47e3537ceb924420481224433eaf0856ac450fc
vsphere-csi-driver-syncer git 06229f5e sha256:43f4013a1f75408b4fe63978df755ebe2b4ba8705c89bee375db7beb9798580c
vsphere-problem-detector git 14a2d338 sha256:179bc0154e0ffad28fdfaada127200858006a16ab4d1e37b80011d8ae3671ee9

agent-installer-api-server

NO-ISSUE: [master] Bump OCP versions: 5.0 #11204
MGMT-19216: Add node selector and tolerations to our webhook #11049
ACM-44934: CVE-2026-88031 Bump github.com/go-openapi/loads, github.com/go-openapi/analysis, github.com/go-openapi/validate, github.com/go-openapi/strfmt to fix CVE-2026-88031 through introducers update (models module) #11165
MGMT-25133: Accept OpenSSH authorized_keys options in SSH key validation #10830
ACM-44934: CVE-2026-88031 Bump go.mongodb.org/mongo-driver to v1.17.10 through indirect dependency conversion (api module) #11164
ACM-47334: CVE-2026-63209 Bump github.com/klauspost/compress to v1.18.7 through indirect dependency conversion #11149
NO-ISSUE: upgrade Go to 1.26.7 #11119
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 4.19 #11197
ACM-47458: CVE-2026-84304 Bump google.golang.org/grpc to v1.83.1 using replace directive (api module) #11185
ACM-44934: CVE-2026-88031 Bump go.mongodb.org/mongo-driver to v1.17.10 through indirect dependency conversion (client module) #11195
ACM-47334: CVE-2026-63209 Bump github.com/klauspost/compress to v1.18.7 using replace directive (api module) #11155
ACM-47334: CVE-2026-63209 Bump github.com/klauspost/compress to v1.18.7 using replace directive (models module) #11156
ACM-47334: CVE-2026-63209 Bump github.com/klauspost/compress to v1.18.7 using replace directive (client module) #11157
ACM-47458: CVE-2026-84304 Bump google.golang.org/grpc to v1.83.1 through indirect dependency conversion #11139
NO-ISSUE: [master] Bump OCP versions: 4.22, 4.20, 4.21 #11094
MGMT-25505: moving seaweedfs to our own repo #11085
MGMT-25497: Use OCP version for disconnected iso images #11062
ACM-39262: chain PostgreSQL hops for EUS skip-upgrades #10882
MGMT-24807: OpenShift AI validation message is confusing — doesn’t state role and shows a different (lower) CPU/RAM number than the aggregated worker-role requirement #10969
MGMT-23594: Installation should not be stopped if we can’t pull the must gather image #10935
OCPBUGS-104857: Disk validation falsely reports iSCSI host IP conflict when iBFT initiator uses DHCP (flags=7) on dual-homed host #11007
NO-ISSUE: [master] Bump OCP versions: 4.14, 4.20, 5.0, 4.22, 4.16, 4.21, 4.18, 4.19, 4.17 #11084
MGMT-25505: minio was deprecated #11050
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

ACM-44932: CVE-2026-88031 Bump go.mongodb.org/mongo-driver to v1.17.10 through indirect dependency conversion #2443
MGMT-25001: Bump Go to 1.26.7 for stdlib CVEs #2432
NO-ISSUE: Update module github.com/golangci/golangci-lint to v2.14.0 #2389
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #2417
NO-ISSUE: Refresh RPM lockfiles #2418
Full changelog

agent-installer-node-agent

OCPBUGS-130445: CVE-2026-78662 Bump golang.org/x/crypto to v0.56.0 #1719
ACM-44931: CVE-2026-88031 Bump go.mongodb.org/mongo-driver to v1.17.10 through indirect dependency conversion #1716
MGMT-24979: Bump Go to 1.26.7 for stdlib CVEs #1696
MGMT-25508: Exclude ASPEED 1a03:2000 from GPU inventory #1694
MGMT-23804: GPU inventory incorrectly includes non-GPU PCI devices (DPU/SmartNIC devices) #1670
MGMT-25157: CVE-2026-17106 Bump github.com/moby/go-archive to v0.3.0 through indirect dependency conversion #1630
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #1676
NO-ISSUE: Refresh RPM lockfiles #1684
Full changelog

agent-installer-ui

Remove Assisted Chatbot (#4091) #4091
Red Hat Konflux purge assisted-ui-chatbot-saas-main (#4111) #4111
MGMT-25125: Implement Offline Openshift Versions Dropdown (#4107) #4107
chore(deps): update dependency ip-address to ^10.7.3 (#4109) #4109
chore(deps): update dependency immutable to ^5.1.9 (#4108) #4108
Bump joi from 17.13.7 to 17.13.8 (#4100) #4100
Upgrade Axios to 1.20.0 (#4105) #4105
Bump compression from 1.8.1 to 1.8.2 (#4104) #4104
Bump postcss-selector-parser from 7.1.5 to 7.1.6 (#4103) #4103
Bump source-map-js from 1.2.1 to 1.2.2 (#4102) #4102
Bump proxy-addr from 2.0.7 to 2.0.8 (#4101) #4101
CVE Upgrade (#4099) #4099
MGMT-25084: Upgrade axios to 1.20.0 (#4098) #4098
chore(deps): update dependency dompurify to ^3.4.16 (#4094) #4094
chore(deps): update dependency @types/node to ^24.19.1 (#4093) #4093
Do not show limited support level warning in disconnected flow (#4087) #4087
Update OpenShift version for OVE (#4084) #4084
Bump ip-address from 10.4.0 to 10.5.1 (#4083) #4083
Bump undici from 7.29.0 to 7.30.0 (#4082) #4082
chore(deps): update konflux references (#4072) #4072
remove disconvering word from StaticIP for Disconnected mode (#4079) #4079
chore(deps): update dependency ajv to ^8.20.0 (#4077) #4077
Full changelog

agentic-skills

GITOPS-11460: Add argo team onboard skill #54
GITOPS-11457, GITOPS-11458: Add argo-operations and argo-repo-audit skills #53
GITOPS-11459: Add argo-cluster-debug Skill Knowledge #55
GITOPS-10499: Add Argo knowledge skill #38
Full changelog

apiserver-network-proxy

CNTRLPLANE-4019: Merge upstream master (4f8517c1) into main #116
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, gcp-pd-csi-driver-operator, openstack-cinder-csi-driver-operator

OCPBUGS-120762: restrict azure-file secrets ClusterRole to get and create verbs #639
STOR-3141, STOR-3142: EFS, Samba: Ship Network Policies in the operator bundle #629
OCPBUGS-127462: Unresolved ${TLS_CIPHER_SUITES} for Custom TLS 1.3 profile #638
Full changelog

aws-karpenter-provider-aws

NO-JIRA: Update Karpenter owner aliases #50
Full changelog

azure-cluster-api-controllers

OCPCLOUD-3690: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.27.0 (3d9e0c3) into main #412
Full changelog

azure-disk-csi-driver

NO-JIRA: Add coderabbit config #183
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-128431: Go HTTP/2: Denial of Service via malformed PRIORITY_UPDATE frame - CVE-2026-33814 #110
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-127102: Add internalJoinSubnet to installConfigOverrides #10963
OCPBUGS-127058: Azure DualStack: Allow IPv6 CIDRs to be provided first #10954
OCPBUGS-129534: golangci: avoid var-naming package-name flake #10953
CORS-4689: aws: update CAPA controller to v2.12.1 #10949
SPLAT-2976: multi-disk close install-config validation gaps #10934
TRT-3001: Revert #10152 “OCPBUGS-76925: Update no_proxy list to include AWS DNS resolver for UserProvisionedDNS” #10951
OCPBUGS-127394: Removed PowerVS InstallConfig debug log statement exposing sensitive information #10898
OCPBUGS-128718: validate AssignIpv6AddressOnCreation on BYO subnets for DualStackIPv4Primary #10933
OCPBUGS-76925: Update no_proxy list to include AWS DNS resolver for UserProvisionedDNS #10152
OCPBUGS-105321: pki: switch to ECDSA defaults and thread PKI profile to leaf certs #10743
OCPBUGS-127240: gcp: restrict global KMS location check to defaultMachinePlatform #10907
Full changelog

baremetal-operator

OCPBUGS-120721: Test int64 BIOS bounds #528
Full changelog

cli, cli-artifacts, deployer, tools

: NO-JIRA: fix(set volumes): mention configmap in invalid volume type error #2437
OCPBUGS-120725: Return error when markers are not all replaced #2429
OCPBUGS-60768: properly indent multiline node messages in upgrade status output #2341
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cloud-network-config-controller

OCPBUGS-124549: deps: bump google.golang.org/api and google.golang.org/grpc to v1.84.0 #275
OSASINFRA-4400: make openstack allowed address pairs configurable #230
Full changelog

cluster-authentication-operator

CNTRLPLANE-4719: deps: Rebase to 1.37 and update other deps #1024
NO-JIRA: bump openshift/api https://github.com/openshift/api/pull/3083 #1022
NO-JIRA: bump library-go https://github.com/openshift/library-go/pull/2518 #1020
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2512 #1016
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2474 #1014
CNTRLPLANE-3237: encryption/assertion: bring back the preflight assertion for CAO and OAS-O #1011
Full changelog

cluster-autoscaler-operator

OCPBUGS-130317: add machinepools to CAPI ClusterRole for autoscaler #406
AUTOSCALE-949: Release chore CAO bump to k8s 1.37 and OCP 5.1 #404
AUTOSCALE-709: implement conditions and authoritative API #402
Full changelog

cluster-baremetal-operator

NO-ISSUE: Add deployment diagrams to README #680
Full changelog

cluster-capi-operator

OCPBUGS-127650: openstack: allow to specify UserManaged load balancer #678
OCPBUGS-128384: Extend InfraTemplate reconciliation wait #681
OCPBUGS-123094: Update MongoDB Go driver to v1.17.10 #676
OCPBUGS-128576: add ec2:ModifyInstanceMetadataOptions to AWS CredentialsRequest #682
NO-JIRA: Update actuator testutils builder paths #683
OCPBUGS-128356: Remove unnecessary ClusterOperator test status update #680
Full changelog

cluster-config-api

NE-2922: Promote Ingress operator API to v1 #3079
OCPBUGS-123649: enable DRADeviceTaintRules feature gate in TPNU #3072
OCPEDGE-3075: feat: add spec.infrastructureTopology to Infrastructure API #3056
Fix CustomNoUpgrade rendering with omitted overrides #3080
NO-JIRA: change KMS preflight result validation #3083
OCPBUGS-129172: Loosen CAPI skew validations #3077
Support Quay CI payloads and add Kubernetes v1.37.1 envtest tools #3082
CNTRLPLANE-4604: promoting AuthenticationComponentProxy feature gate to Default feature set #3075
STOR-2859: Add APIs for disabling force detach in KCM operator #2668
Rename Console ingress helper type to ConsoleIngress #3070
CORENET-7617: features: Add ovn-kuberntes MACSecurity feature gate #3062
CNTRLPLANE-4518: authentication: add v1alpha1 external OIDC configuration API #3061
MCO-2535: add skew enforcement validations for CAPI MachineManagers #3058
OCPSTRAT-3618: Rebase 1.37 #2945
OCPBUGS-126808: Enable OLMLifecycleAndCompatibility by default in version 5+ #3045
Full changelog

cluster-config-operator

OCPBUGS-130339: Read OpenShift API server replicas from deployment #524
Full changelog

cluster-control-plane-machine-set-operator

OCPCLOUD-3658: bump Kubernetes dependencies to 1.37 #423
OCPCLOUD-3707: feat(tls): add support for TLS groups/curve preferences #424
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-127462: Unresolved ${TLS_CIPHER_SUITES} for Custom TLS 1.3 profile #298
Full changelog

cluster-dns-operator

NO-JIRA: Add pedjak to OWNERS #490
OCPBUGS-87970: Stop using legacy topology-aware hints for DNS #501
NE-2126: Migrating DNS test cases from QE repo #491
OCPBUGS-53192: Update code reference to use the default branch name ‘main’ #488
Full changelog

cluster-etcd-operator

NO-JIRA: move TNF scripts to bindata/etcd/tnf with TNF OWNERS #1728
NO-JIRA: Update the tests to skip if OCPFeatureGate:AutomatedEtcdBackup is not enabled #1731
OCPBUGS-100304: write force_new_cluster as a claim timestamp #1721
OCPBUGS-112390: [TNF] lifecycle part 2 - update setup deadlock fix & conditions cleanup #1668
NO-JIRA: Add TNF ownership for docs/tnf #1725
OCPBUGS-123169: add static linter for workload partitioning annotations #1707
Full changelog

cluster-ingress-operator

OCPBUGS-129664: Bump to ossm 3.4.3 and Istio 1.30.5 #1606
OCPBUGS-126999: Support ambient AWS credentials in tests #1602
NE-2922: Remove duplicate operator Ingress CRD from CIO payload #1613
NE-2879: Update GitHub issue template URLs #1578
OCPBUGS-105442: improve Sail RBAC verification diagnostics #1601
NE-2834: Replace deprecated math/rand.Read in e2e test #1533
OCPBUGS-115108: derive ingress Degraded grace #1583
OCPBUGS-125752: discover AWS subnets from CAPI with MAPI fallback #1592
OCPBUGS-128253: Wait for AWS NLB SG baseline #1604
OCPBUGS-53193: Update code references to use the default branch name ‘main’ #1591
NE-2570: Simplify TLS profile validation #1594
Full changelog

cluster-kube-apiserver-operator

TRT-3013: Revert “Use 300s shutdown delay on AWS” #2346
NO-JIRA: bump openshift/api https://github.com/openshift/api/pull/3083 #2339
OCPBUGS-86789: Extend AWS shutdown delay to 300s #2267
CNTRLPLANE-4408: Support the ExternalOIDCAsWebhook feature gate #2325
NO-JIRA: bump library-go https://github.com/openshift/library-go/pull/2518 #2337
CNTRLPLANE-3237: update deprecated API usage alerts for kube 1.37 #2334
OCPSTRAT-3618: Bump to golang-1.26-openshift-5.1 image #2268
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2474 #2327
CNTRLPLANE-3237: encryption/assertion: bring back the preflight assertion for CAO and OAS-O #2320
Full changelog

cluster-kube-controller-manager-operator

OCPSTRAT-3618: Rebase 1.37 #953
Full changelog

cluster-kube-scheduler-operator

OCPSTRAT-3618: Rebase 1.37 #660
Full changelog

cluster-machine-approver

OCPCLOUD-3659: bump Kubernetes dependencies to 1.37 #340
NO-JIRA: Add OTE #341
Full changelog

cluster-monitoring-operator

NO-JIRA: configure custom features for monitoring-plugin #3149
OCPBUGS-128640: filter ciphers not supported by Thanos #3134
OCPBUGS-11267, OCPBUGS-123539: tidy up RBAC permissions on secrets and configmaps for Prometheus operators #3053
ART-22049: remove references to configmap-reloader image #3051
NO-JIRA: [bot] Synchronize versions of the downstream components #3118
NO-ISSUE: [bot] Update jsonnet dependencies #3117
OCPBUGS-125779: don’t delete admin-owned Alertmanager secrets on destroy #3133
Full changelog

cluster-network-operator

OCPBUGS-130570: Added global overrides for OVN-Kubernetes #2851
OCPBUGS-123509: multus: Refresh ignored namespaces on namespace changes #3167
CORENET-7399: Expand golangci-lint configuration with comprehensive linter set #3164
OCPBUGS-127174: Fix issues when NetObserv fails to install #3171
Full changelog

cluster-node-tuning-operator

OSDOCS-22738: Fix hexadecimal typos in PerformanceProfile device comments #1640
OCPBUGS-129451: E2E: remove always-skipped IRQ load balance test #1653
OCPBUGS-129613: E2E: Add labels to ovsdpdk tests #1657
NO-JIRA: Update OWNERS file #1655
OCPBUGS-129449: E2E: Fix flaky test_id:64099 reboot assertion #1652
OCPBUGS-115749: Tighten operator RBAC to least privilege #1639
OCPBUGS-66217: PerformanceProfile and Tuned CRDs during bootstrap #1596
OCPBUGS-127113: E2E: Fix no-op Get() assertions in mixedcpus #1571
OCPBUGS-129448: E2E: check against available cpus instead of online cpuset #1645
OCPBUGS-129450: E2E: LLC: Fix assertions of odd cpus allocations #1644
OCPBUGS-129165: Makefile: Modify pao-functests-update-only to run tier-0 and tier-1 tests #1651
OCPBUGS-105474: Prevent offlined CPUs from being re-onlined after reboot by udev hotplug rule #1618
OCPBUGS-126458: E2E: PPC: replace no-op log-on-match with actual assertions (4 sites) #1638
Full changelog

cluster-olm-operator

NO-ISSUE: Support object-controller (ClusterObjectSet) component #255
OPRUN-4768: Apply TLS curve preferences to metrics server #248
Full changelog

cluster-openshift-apiserver-operator

NO-JIRA: bump openshift/api https://github.com/openshift/api/pull/3083 #798
NO-JIRA: Open bump library-go https://github.com/openshift/library-go/pull/2518 #797
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2512 #794
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2474 #792
CNTRLPLANE-3237: encryption/assertion: bring back the preflight assertion for CAO and OAS-O #787
Full changelog

cluster-storage-operator

OCPBUGS-120762: restrict azure-file secrets ClusterRole to get/list/watch/create #750
OCPBUGS-127462: Unresolved ${TLS_CIPHER_SUITES} for Custom TLS 1.3 profile #748
Full changelog

cluster-update-console-plugin

OCPBUGS-128825: Re-analyse deletes AgenticRun for fresh cluster data #26
NO-JIRA: Update OWNERS file #27
Full changelog

cluster-version-operator

OCPBUGS-8252: pkg/cvo: report unresolvable desired releases #1467
OCPBUGS-129378: skip console plugin deployment on OCP < 5.0 #1482
NO-ISSUE: docs/user/tasks-*by-number-and-component.svg: Update to 5.0 #1485
NO-JIRA: pkg/cvo: add architecture label to cluster_version_payload #1480
NO-ISSUE: test/cvo: set needRecover before mutating cluster resources #1477
Full changelog

console

OCPBUGS-130732: Add security response headers #17376
CONSOLE-5065: Update dynamicModulePatternFlyPackages and related imports #17379
HELM-863: Show Helm nav tab regardless of HelmChartRepository/ProjectHelmChartRepository instance existence #17338
CONSOLE-5564: Add rearrangable columns to ConsoleDataView #17370
CONSOLE-5549: Add performance profiling for the dashboards page #17346
CONSOLE-5560: table column extension follow ups #17363
CONSOLE-5560: Add ConsoleDataView table column extensions #17351
OCPBUGS-84497: Cap rendered alerts in notification drawer and dashboards #17324
CONSOLE-5544: Migrate OLM tables to ConsoleDataView #17342
CONSOLE-5540: Migrate metal3, container-security, and shipwright tables to ConsoleDataView #17340
CONSOLE-5099: Add kubeconfig download for ServiceAccounts and current user #17199
OCPBUGS-128719: fix incorrect breakpoint in code editor sidebar #17336
CONSOLE-5539: Migrate knative tables to ConsoleDataView #17326
OCPBUGS-128465: Fix flaky namespace selection and eliminate cross-file contention in OLM Data Grid e2e specs #17329
HELM-859: Guard against null/missing urls in Helm charts #17280
And 7 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

HELM-850: Address review feedback on Helm CLI download descriptions #1235
RFE-4149: Read only filesystem - temp directory mount #1014
TRT-3005: Revert #1227 “OCPSTRAT-3567: Replace console allow-all NetworkPolicy with scoped policies” #1241
NO-JIRA: Update API and client-go dependencies for Console ingress helper rename #1236
OCPSTRAT-3567: Replace console allow-all NetworkPolicy with scoped policies #1227
OCPBUGS-86719: Use zero-downtime rollout strategy for console pods #1168
CNTRLPLANE-4564: Update to the latest openshift/api and rebase to 1.37 #1237
OCPBUGS-109666: fix the name of the Helm release in EAP 8.1 quickstart #1208
OCPBUGS-121388: Make console status flush cancellation-aware #1228
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

CORENET-7231: Update OWNERS file #241
Full changelog

egress-router-cni

OCPBUGS-55356: Fix invalid IPv6 sysctl key for enabling IP forwarding #112
Full changelog

gcp-machine-controllers

OCPBUGS-90560: resolve boot disk image at reconcile time #181
Full changelog

haproxy-router, haproxy-router-haproxy28, haproxy-router-haproxy32

OCPBUGS-88730: Validate positive rate limits #850
NE-2126: Migrating Route test cases from QE repo #848
NO-JIRA: Add pedjak to OWNERS #847
OCPBUGS-84250: Add debug logging when dynamic update fails #836
Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

OCPBUGS-112749: Deflake pod resize deferred tests #2765
OCPBUGS-129642: UPSTREAM: <carry>: bump cadvisor for statseq fix #2819
OCPSTRAT-3618: Daemonset test has changed names -> needs corrected env selector #2813
: OCPBUGS-123651: UPSTREAM: <carry>: Add needed labels to RHEL pause image #2809
OCPSTRAT-3618: Rebase 1.37 #2738
Full changelog

hypershift

OCPBUGS-129581: Preserve supplied Unmanaged etcd credentials #9941
OCPBUGS-114415: intermittent timeouts in TestDialDirectWithProxy #9960
TRT-3008: revert(ingressoperator): restore HAProxy 2.8 wiring #9976
OCPBUGS-129420: Propagate configured NodePool labels and taints with native capacity #9919
OCPBUGS-49661: fix(cpo): report real ValidAWSKMSConfig condition #9953
OCPCLOUD-3708: feat(machine-approver): plumb TLS curve preferences #9743
CNTRLPLANE-3646: enable all platform agnostic and specific e2e v2 tests for AWS #9701
GCP-504: NodePool Platform Conditions #8917
CNTRLPLANE-4575: add DeterministicLBIP feature gate #9898
NE-2913: Remove HAProxy 2.8 reference #9703
OCPBUGS-129006: Converge Azure private DNS network links safely #9896
NO-JIRA: ci(deps): bump actions/actions-runner from 2.337.0 to 2.338.0 #9956
NO-JIRA: Require GCP workload identity mutation on 5.1 and later #9936
NO-JIRA: build(deps): bump the azure-github-dependencies group across 1 directory with 3 updates #9777
OCPBUGS-129491: ensure e2e v1 AWS OIDC providers are tagged with e2e metadata #9933
NO-JIRA: chore(owners): add CI operator config owners #9938
CNTRLPLANE-4480: feat(api): promote HCPUserFacingOperatorLogs feature gate to Default #9724
AUTOSCALE-1008: feat(karpenter-operator): monitor operand rollout status for version tracking #9654
AUTOSCALE-995: implement cpu options #9623
CNTRLPLANE-4600: remove all reported deadcode candidates #9904
CNTRLPLANE-4565: Promote ingress and Azure private OAuth v2 tests to blocking #9918
AUTOSCALE-947: fix(karpenter): defer EC2NodeClass reconcile to standalone operator #9746
OCPBUGS-104597: fix(etcdbackup): correctly classify Azure client-secret credentials from Velero BSL secrets #9321
CNTRLPLANE-4565: Remove duplicated v1 AWS E2E checks #9881
CNTRLPLANE-4337: Extract cluster-foundation ownership with characterization #9905
NO-JIRA: strip DWARF info from linter plugins to fix macOS dyld crash #9909
OCPBUGS-112277: Skip PodDisruptionBudgets for SingleReplica control planes #9394
OCPBUGS-128613: validate Azure HostedCluster subnet ID #9825
OCPBUGS-127429: Enable DeviceTaintRule API for hosted clusters #9518
CNTRLPLANE-550: Refactor HyperShift CLI for cross-platform consistency and testability #9570
GCP-967: Add GCP workload identity webhook support #9549
CNTRLPLANE-4558: Update Dockerfile and Containerfile images for Kubernetes 1.37 #9873
OCPBUGS-126889: preserve wrapped Azure credential reconcile errors #9704
OCPBUGS-129003: Refresh performance-profile conditions at the same generation #9891
MULTIARCH-5567: Added support to create multi-arch (s390x & x86) NodePools with KubeVirt platform on heterogeneous management clusters #9586
OCPBUGS-128975: Count only successful upsert updates #9872
OCPBUGS-109196: fix(nodepool): validate KubeVirt additionalNetworks NAD namespace #9299
NO-JIRA: docs: fix stale N-2 version skew references to N-3 #8999
AUTOSCALE-977: feat(karpenter): defer default NodeClass to standalone operator #9695
CNTRLPLANE-4562: add kubeClientQPS and kubeClientBurst to ClusterAutoscaling #9857
CNTRLPLANE-4548: fix: move combined-pull-secret creation to top-level CPO #9844
CNTRLPLANE-4553: Remove duplicate release trigger and draft mode #9880
CNTRLPLANE-4553: Compact yq JSON output for GITHUB_OUTPUT in tag workflow #9879
CNTRLPLANE-4553: Add workflows permission and manual trigger for tag creation #9877
CNTRLPLANE-4552: request HO v0.1.86 tag #9848
CNTRLPLANE-4553: use runner.temp and detect arch for release workflow tool installs #9851
CNTRLPLANE-4335: Extract RBAC reconciliation into dedicated module #9726
CNTRLPLANE-3890: Add product-cli unit tests for HCP create cluster #9591
CNTRLPLANE-4550: improve HO hotfix documentation and fix template #9845
OCPSTRAT-3686: Emit release-manifests/image-references from the operator build #9854
CNTRLPLANE-4556: Bump Kubernetes dependencies to 1.37 #9568
OCPBUGS-77307: Generate KubeVirt nmstate network config conditionally #9381
CNTRLPLANE-4553: install release workflow binaries to user-writable path #9849
CNTRLPLANE-4465: group MintMaker Go dependency updates by module #9715
CNTRLPLANE-4379: add release automation workflows for PR-based tagging #9566
CNTRLPLANE-3341: Extract support/imageregistry package from support/util #9832
CNTRLPLANE-3901: Add product-cli unit tests for IAM-Infra (Azure) #9180
CCO-848: feat(cloud_credential_operator): inject centralized TLS configuration #9409
OCPBUGS-109641: fix slice bounds out of range panic in getAvailableCandidates #9309
CNTRLPLANE-4090: deduplicate internal constants by migrating consumers to shared packages #9804
ACM-38185: chore(owners): add ACM HyperShift owners for product-cli #9082
CNTRLPLANE-4538: add August 2026 progress report #9839
NO-JIRA: nodepool: log when user-data/token Secrets are deleted #9819
OCPSTRAT-3686: Use git tag for hypershift nightly tag pipeline #9826
NO-JIRA: chore(deps): refresh rpm lockfiles (main) [SECURITY] #9667
OCPBUGS-127651: fix(operator): prevent deadlock when CRD conversion webhook caBundle is missing #9782
NO-JIRA: Remove Claude-powered PR comment workflows #9830
OCPBUGS-99659: reconcile NetworkPolicies for KubeVirt HCP router mode #9619
CNTRLPLANE-3902: Add product-cli unit tests for kubeconfig #9217
GCP-1148: Make zone required for cluster and nodepool creation #9708
CNTRLPLANE-3900: Add shared cmd/ unit tests for destroy cluster #9166
CNTRLPLANE-1053: Validate KAS reachability via SVC URL in KubeAPIDNSName e2e test #9355
NO-JIRA: build(deps): bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0 #9776
CNTRLPLANE-3344: Extract support/reconcilerpolicy package from support/util #9734
OCPBUGS-98099: test(e2e): isolate legacy Karpenter upgrade workload #9806
CNTRLPLANE-4497: add azure-orphaned-role-assignments tool #9745
OCPBUGS-128500: Gate custom ingress strategy E2E coverage to 4.21+ #9814
OCPSTRAT-3686: import nightly release tags #9809
OCPBUGS-114937: Add readiness probe to kube-scheduler control plane deployment #9789
OCPBUGS-128466: reconcile aggregated docs #9808
NO-JIRA: chore(owners): refresh owner aliases #9805
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-127462: Unresolved ${TLS_CIPHER_SUITES} for Custom TLS 1.3 profile #194
Full changelog

ibmcloud-cluster-api-controllers

UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.15.0 (5704e48) into main #184
Full changelog

insights-operator

CCXDEV-16671: add GPU node topology gatherer #1364
NO-JIRA: add permissions to fetch MaasModelRefs #1388
CCXDEV-16669: gather externalModels #1379
CCXDEV-16670: add MaaSModelRef gatherer #1377
Full changelog

ironic

NO-ISSUE: Update requirements.cachito with latest openshift forks commits #929
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #924
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #923
Full changelog

ironic-agent

NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #321
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #320
Full changelog

karpenter-operator

NO-JIRA: add Deployment manifest golden-file testing #53
AUTOSCALE-969: add defaultNodeClass method for azure #54
NO-JIRA: refactor: align controller conventions #55
OCPBUGS-116223: fix: report ClusterOperator status on unsupported platforms #50
AUTOSCALE-1045: feat: add OpenShiftAzureNodeClass API and controller #44
NO-JIRA: update controller and logging guidance in agents.md #51
AUTOSCALE-1057: Implement karpenter operator metric and add test #48
NO-JIRA: fix: require EBS in block device mappings #47
NO-JIRA: fix: align controller logging with controller-runtime guidelines #49
NO-JIRA: chore: enforce consistent import aliases #46
AUTOSCALE-1043: add pod monitor for karpenter and operator #45
NO-JIRA: chore: version local build tool binaries #37
AUTOSCALE-947: feat: migrate EC2NodeClass controller from HyperShift #43
AUTOSCALE-1008: Add label and annotation for MonitorOperandsRolloutStatus tracking #39
AUTOSCALE-977: feat: reconcile default NodeClass #38
AUTOSCALE-856: Add Azure Karpenter provider image reference #41
Full changelog

keepalived-ipfailover

NO-JIRA: Enable CentOS Stream 10 OKD package repositories in base image #254
Full changelog

kube-metrics-server

NO-JIRA: synchronize OWNERS from cluster-monitoring-operator #80
NO-ISSUE: [bot] Bump openshift/kubernetes-metrics-server to v0.9.0 #72
Full changelog

kube-rbac-proxy

NO-JIRA: Merge upstream v0.23.0 #162
Full changelog

kube-storage-version-migrator

OCPBUGS-126583: Bump golang.org/x/net to v0.55.0 to address CVE-2026-33814 #266
NO-JIRA: Bump Go builder and CI images from 1.24 to 1.26 for openshift-5.1 #265
Full changelog

machine-api-operator

OCPBUGS-90560: remove GCP boot disk image defaulting from admission webhook #1525
OCPBUGS-90560: add RBAC for GCP boot image resolution #1560
OCPCLOUD-3660: bump to Kubernetes 1.37 #1570
OCPBUGS-129369: fix race in VAP MachineSet e2e test cleanup #1572
SPLAT-2983: Use Machine API vSphere credentials in e2e tests #1568
Full changelog

machine-config-operator

OCPBUGS-128286: only enable signed policy when testing signed payloads #6611
OCPBUGS-99751: Verify MOSC existence via API before serving layered image #6352
OCPBUGS-124571: Bump version of google.golang.org/grpc #6633
SPLAT-2996: use component-scoped vSphere credentials for boot image updates #6641
OCPBUGS-126565: OCPBUGS-127020: Enable readOnlyRootFilesystem: true for machine-config-operator container #6568
MCO-2522: Adapt all extended e2e test cases to use ManagedMachine… #6621
OCPBUGS-129112: Skip GCP reconcile for unknown arch #6625
OCPBUGS-85519: Add IRI credentials to the internal registry pull secret #6067
OCPBUGS-128811: Remove reverse (rhel10 to rhel9) OSStreams upgrade tests #6638
OCPBUGS-128535: Revert “OCPBUGS-91746: Remove sandboxed-containers (kata-containers) from extended-priv tests” #6613
MCO-1989: Fix RHEL9-specific MCD Logic for RHEL10/CentOS10 for adaptability #6515
OCPBUGS-121959: Make NIC persistence unconditional instead of version-specific #6516
OCPBUGS-128716: logout vCenter clients after use #6629
AGENT-1454: Enforce APIServer TLS profile on IRI registry #6592
OCPBUGS-128457: Fix layered OS updates on older nodes #6630
OCPBUGS-128676: Boot image controller skips MachineSets that don’t match any failure domain #6606
OPNET-782: Render BGP VIP static pods instead of keepalived #6326
OCPBUGS-128659: Filter cosign signature tags from the IRI release lookup #6604
MCO-2522: Create ManagedMachineSet interface #6602
NO-ISSUE: Initial version of the create MCO test plan skill #6560
OCPBUGS-128535: Revert “OCPBUGS-91746: temporarily remove sandboxed-containers from extensions test” #6596
NO-ISSUE: Fix typo in controller #6595
NO-ISSUE: Increase timeout for ImagePulledFromRegistry=Unknown in non-SNO suites #6598
SPLAT-2376: test/extended: add Azure machine pool disk setup tests #6559
OCPBUGS-105412: Updated openshift/api vendor #6586
Full changelog

monitoring-plugin

NO-JIRA: Add alerting GET endpoints to OpenAPI #1344
NO-JIRA: fix: provide SA token to console bridge to access remote dashboards from local dev env #1351
NO-JIRA: fix: patch vulnerable dependencies #1318
NO-JIRA: Add alert management API #1339
OU-1392: fix: parse datetime ranges from the specified format rather than browser specific apis #1308
OU-1483: automation - perses rbac stability and group permission for all users #1326
OU-1600: fix: sort agentic runs by created to avoid getting stalled runs related to alerts #1325
OU-1436: refactor to prepare for alert management #1324
OU-1212: Create Observability Services landing page #1289
NO-JIRA: update devspace to sync backend and config changes #1322
NO-JIRA: prevent importing feature files in shared files #1323
OU-1528: Swapping namespaces in Alerts optimized #1305
Full changelog

multus-admission-controller

CORENET-7234: Update OWNERS file #118
NO-JIRA: Bump to Ginkgo v2 2.33.0 #142
CORENET-7567: Add TLS curve preferences configuration support #143
Full changelog

multus-cni, multus-cni-microshift

CORENET-7619: DS Merge 10/12/26 #370
Full changelog

multus-route-override-cni

CORENET-7631: Update the minimum Go version #84
CORENET-7631: Bump Kubernetes to 1.37 and Go to 1.26.8 #83
CORENET-7237: Update OWNERS file #70
Full changelog

multus-whereabouts-ipam-cni

CORENET-7230: Update OWNERS file #414
Full changelog

must-gather

OCPBUGS-122049: gather_ppc: collect per-node ethtool channel data #562
Full changelog

networking-console-plugin

OCPNETUI-140: dependency cleanup #589
OCPNETUI-140: reassign dev and prod dependencies #582
OCPNETUI-56: Add hot-cluster E2E workflows, composite actions, and Dockerfile.ci #497
OCPBUGS-105361: Create UDN modal now supports secondary UDN creation #579
maintenance: bump the npm group with 26 updates #575
OCPBUGS-98590: Added validation to NAD creation pages #553
maintenance: bump the npm group across 1 directory with 17 updates #563
OCPNETUI-140: Align shared modules with Console #546
Full changelog

oauth-proxy

NO-JIRA: watcher: fix undying goroutine #378
Full changelog

olm-catalogd, olm-operator-controller

OCPBUGS-97746, OPRUN-4738, OPRUN-4774, OPRUN-4775: Synchronize From Upstream Repositories #819
ocpbugs-115274: fix webhook finalizer flake #798
Full changelog

openshift-controller-manager

CNTRLPLANE-4583: bump(k8s.io): 1.37.1 #462
Full changelog

openstack-cluster-api-controllers

UPSTREAM-SYNC: Re-baseline main onto clean upstream merge to unblock rebasebot #446
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-126127: test: bump test extension gRPC to v1.83.2 #1382
Full changelog

operator-marketplace

NO-ISSUE: Bump github.com/onsi/gomega from 1.43.1 to 1.44.0 #797
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-128662: DownStream Merge [10-08-2026] #3517
NO-JIRA: DownStream Merge [09-28-2026] #3479
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-127462: Unresolved ${TLS_CIPHER_SUITES} for Custom TLS 1.3 profile #124
Full changelog

powervs-machine-controllers

OCPBUGS-127383: Bump x/net and opentelemetry to address CVEs #150
OCPBUGS-114428: Bump google.golang.org/protobuf to v1.36.12 #147
OCPBUGS-112023: Update dependencies to k8s 1.36 #146
Full changelog

stream-coreos, stream-coreos-extensions

OCPBUGS-123732: Re-enable sandboxed-containers extension for 5.0 #1971
Full changelog

tests

NETOBSERV-2563: Add network observability e2e tests #31342
OCPEDGE-2985: Assert PacemakerFencingEvent after real fencing #31703
NE-2913: Update deprecated HAProxy versions in upgrade test #31701
OCPBUGS-130621: Clean up component proxy login resources #31729
OCPBUGS-86789: Revert “Make early request monitor test informing” #31590
OCPBUGS-86789: Move external ip policy test to disruptive-longrunning #31638
NO-ISSUE: Automated - Update synthetic test data #31698
OCPBUGS-123649: allow v1beta2 DRA API in discovery test #31566
OCPBUGS-129615: Allow Prometheus auth test to reach console metrics #31723
NO-JIRA: Document shrink-only retry allowlist policy #31710
OCPBUGS-129175: Handle offline or removed nodes in TNF replacement test #31708
NO-JIRA: Add cluster-machine-approver OTE suite #31706
OCPBUGS-129012: Parallel SSA ClusterOperator test races with sig-arch operator version check #31699
NO-ISSUE: Revert “Add CustomResourcePublishOpenAPI conformance test to retry allowlist” #31694
OCPQUAL-42: Refresh retry allowlist against 5.0 and 5.1 CI data #31551
CNTRLPLANE-3483: Add e2e test Hot reloading changes of the external OIDC configuration #31678
OCPBUGS-122386: e2e-analysis: add –skip-readiness-checks flag for degraded cluster lanes #31635
NO-ISSUE: Automated - Update synthetic test data #31682
OCPSTRAT-3618: Mirror glibc-dns-testing 2.0.0 for the k8s 1.37 rebase(revert in rebase PR) #31683
INTEROP-9204: Add –extension-local-binaries flag for local extension binary loading #31652
trt-2972: use matcher details #31676
OCPBUGS-128397: Skip router verbosity rollout for degraded TNF tests #31680
OPCT-460: Increase timeout for external IP policy test to accommodate in-cluster rollouts #31636
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

volume-data-source-validator

NO-JIRA: Add coderabbit config #23
Full changelog

vsphere-cluster-api-controllers

OCPCLOUD-3691: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.17.0 (2509b8e) into main #116
Full changelog

vsphere-csi-driver-operator

OCPBUGS-127462: Unresolved ${TLS_CIPHER_SUITES} for Custom TLS 1.3 profile #367
Full changelog

Node Image Info

Loading node image info, this may take a while ...

CentOS Stream CoreOS 10 (`stream-coreos`)

Package List

cri-o-1.37.2-1.el10s
kernel-6.12.0-273.el10
openshift-kubelet-5.1.0-202610051813.p2.g421570e.assembly.stream.el10
systemd-257-34.el10

Full list (493 packages)

NetworkManager-1:1.58.0-1.el10
NetworkManager-cloud-setup-1:1.58.0-1.el10
NetworkManager-libnm-1:1.58.0-1.el10
NetworkManager-ovs-1:1.58.0-1.el10
NetworkManager-tui-1:1.58.0-1.el10
WALinuxAgent-udev-2.14.0.1-3.el10
aardvark-dns-4:2.1.0-1.el10
acl-2.4.0-2.el10
afterburn-5.11.0-1.el10
afterburn-dracut-5.11.0-1.el10
alternatives-1.30-2.el10
amd-gpu-firmware-20260812-26.el10
amd-ucode-firmware-20260812-26.el10
attr-2.6.0-2.el10
audit-4.2.1-3.el10
audit-libs-4.2.1-3.el10
audit-rules-4.2.1-3.el10
authselect-1.5.3-1.el10
authselect-libs-1.5.3-1.el10
azure-vm-utils-0.7.0-1.el10
basesystem-11-22.el10
bash-5.2.26-6.el10
bash-completion-1:2.11-16.el10
bind-libs-32:9.18.33-28.el10
bind-license-32:9.18.33-28.el10
bind-utils-32:9.18.33-28.el10
bootc-1.16.13-1.el10
bootupd-0.2.35-1.el10
bsdtar-3.7.7-11.el10
bubblewrap-0.10.0-3.el10
bzip2-1.0.8-25.el10
bzip2-libs-1.0.8-25.el10
c-ares-1.34.8-1.el10
ca-certificates-2026.2.90_v9.0.316-100.0.el10
catatonit-5:0.2.1-4.el10
centos-gpg-keys-10.0-23.el10
centos-release-cloud-1-1.el10s
centos-release-nfv-common-1-5.el10s
centos-release-virt-common-1-1.el10s
centos-stream-release-10.0-23.el10
centos-stream-repos-10.0-23.el10
checkpolicy-3.11-2.el10
chrony-4.8-2.el10
cifs-utils-7.7-2.el10
clevis-23-2.el10
clevis-dracut-23-2.el10
clevis-luks-23-2.el10
clevis-pin-tpm2-0.5.5-1.el10
clevis-systemd-23-2.el10
cloud-utils-growpart-0.33-11.el10
composefs-1.0.8-1.el10
composefs-libs-1.0.8-1.el10
conmon-3:2.2.1-4.el10
conmon-rs-0.6.6-2.el10s
console-login-helper-messages-0.21.3-10.el10
console-login-helper-messages-issuegen-0.21.3-10.el10
console-login-helper-messages-profile-0.21.3-10.el10
container-selinux-4:2.250.0-1.el10
containers-common-6:6.0-3.el10
containers-common-extra-6:6.0-3.el10
coreos-installer-0.26.0-1.el10
coreos-installer-bootinfra-0.26.0-1.el10
coreutils-9.5-14.el10
coreutils-common-9.5-14.el10
cpio-2.15-3.el10
cracklib-2.9.11-8.el10
cracklib-dicts-2.9.11-8.el10
cri-o-1.37.2-1.el10s
cri-tools-1.37.0-1.el10s
criu-4.2-9.el10
criu-libs-4.2-9.el10
crun-1.30.1-1.el10
crypto-policies-20260811-1.git4dcd294.el10
crypto-policies-scripts-20260811-1.git4dcd294.el10
cryptsetup-2.8.6-2.el10
cryptsetup-libs-2.8.6-2.el10
curl-8.12.1-6.el10
cyrus-sasl-gssapi-2.1.28-27.el10
cyrus-sasl-lib-2.1.28-27.el10
dbus-1:1.14.10-6.el10
dbus-broker-36-5.el10
dbus-common-1:1.14.10-6.el10
dbus-libs-1:1.14.10-6.el10
dbus-tools-1:1.14.10-6.el10
device-mapper-10:1.02.215-3.el10
device-mapper-event-10:1.02.215-3.el10
device-mapper-event-libs-10:1.02.215-3.el10
device-mapper-libs-10:1.02.215-3.el10
device-mapper-multipath-0.9.9-20.el10
device-mapper-multipath-libs-0.9.9-20.el10
device-mapper-persistent-data-1.3.2-1.el10
diffutils-3.10-8.el10
dmidecode-1:3.6-5.el10
dnf-4.20.0-28.el10
dnf-data-4.20.0-28.el10
dnsmasq-2.90-8.el10
dosfstools-4.2-12.el10
dracut-107-11.el10
dracut-network-107-11.el10
dracut-squash-107-11.el10
duktape-2.7.0-10.el10
e2fsprogs-1.47.1-5.el10
e2fsprogs-libs-1.47.1-5.el10
efi-filesystem-6-8.el10
efibootmgr-18-9.el10
efivar-libs-39-3.el10
elfutils-default-yama-scope-0.195-1.el10
elfutils-libelf-0.195-1.el10
elfutils-libs-0.195-1.el10
erofs-utils-1.8.10-1.el10
ethtool-2:6.19-1.el10
expat-2.7.3-4.el10
fcoe-utils-1.0.34-11.gitb233050.el10
file-5.45-12.el10
file-libs-5.45-12.el10
filesystem-3.18-17.el10
findutils-1:4.10.0-5.el10
firewalld-filesystem-2.4.3-4.el10
flatpak-session-helper-1.18.0-2.el10
fstrm-0.6.1-12.el10
fuse-common-3.16.2-5.el10
fuse-libs-2.9.9-25.el10
fuse3-3.16.2-5.el10
fuse3-libs-3.16.2-5.el10
fwupd-2.1.6-1.el10
gawk-5.3.0-7.el10
gdbm-1:1.26-15.el10
gdbm-libs-1:1.26-15.el10
gettext-envsubst-0.22.5-6.el10
gettext-libs-0.22.5-6.el10
gettext-runtime-0.22.5-6.el10
git-core-2.52.0-1.el10
glib2-2.80.4-22.el10
glibc-2.39-141.el10
glibc-common-2.39-141.el10
glibc-gconv-extra-2.39-141.el10
glibc-minimal-langpack-2.39-141.el10
gmp-1:6.2.1-12.el10
gnupg2-2.4.5-5.el10
gnutls-3.8.10-5.el10
gobject-introspection-1.79.1-7.el10
gpgme-1.23.2-6.el10
grep-3.11-10.el10
grub2-common-1:2.12-57.el10
grub2-efi-x64-1:2.12-57.el10
grub2-pc-1:2.12-57.el10
grub2-pc-modules-1:2.12-57.el10
grub2-tools-1:2.12-57.el10
grub2-tools-minimal-1:2.12-57.el10
gssproxy-0.9.2-10.el10
gzip-1.13-4.el10
hostname-3.23-14.el10
hwdata-0.379-10.10.el10
ignition-2.27.0-2.el10
ignition-grub-2.27.0-2.el10
ima-evm-utils-1.6.2-6.el10
info-7.1-6.el10
inih-58-3.el10
intel-gpu-firmware-20260812-26.el10
ipcalc-1.0.3-12.el10
iproute-7.0.0-2.el10
iproute-tc-7.0.0-2.el10
iptables-libs-1.8.11-16.el10
iptables-nft-1.8.11-16.el10
iputils-20240905-5.el10
irqbalance-2:1.9.4-6.el10
iscsi-initiator-utils-6.2.1.11-4.git4b3e853.el10
iscsi-initiator-utils-iscsiuio-6.2.1.11-4.git4b3e853.el10
isns-utils-libs-0.103-2.el10
jansson-2.14-3.el10
jose-14-102.el10
jq-1.7.1-13.el10
json-c-0.18-3.el10
json-glib-1.8.0-5.el10
kbd-2.6.4-8.el10
kbd-legacy-2.6.4-8.el10
kbd-misc-2.6.4-8.el10
kdump-utils-1.0.61-2.el10
kernel-6.12.0-273.el10
kernel-core-6.12.0-273.el10
kernel-modules-6.12.0-273.el10
kernel-modules-core-6.12.0-273.el10
kernel-modules-extra-6.12.0-273.el10
kexec-tools-2.0.32-3.el10
keyutils-1.6.3-5.el10
keyutils-libs-1.6.3-5.el10
kmod-31-13.el10
kmod-libs-31-13.el10
kpartx-0.9.9-20.el10
krb5-libs-1.21.3-11.el10
less-661-3.el10
libacl-2.4.0-2.el10
libaio-0.3.112-1.el10
libarchive-3.7.7-11.el10
libassuan-2.5.6-6.el10
libattr-2.6.0-2.el10
libbasicobjects-0.1.1-58.el10
libblkid-2.40.2-23.el10
libbpf-2:1.7.0-2.el10
libcap-2.69-7.el10
libcap-ng-0.9.3-2.el10
libcbor-0.11.0-3.el10
libcollection-0.7.0-58.el10
libcom_err-1.47.1-5.el10
libcomps-0.1.21-3.el10
libconfig-1.7.3-10.el10
libcurl-minimal-8.12.1-6.el10
libdhash-0.5.0-58.el10
libdnf-0.73.1-17.el10
libdnf-plugin-subscription-manager-1.30.16-1.el10
libdrm-2.4.128-1.el10
libeconf-0.6.2-4.el10
libedit-3.1-52.20230828cvs.el10
libev-4.33-15.el10
libevent-2.1.13-1.el10
libfdisk-2.40.2-23.el10
libffi-3.4.4-10.el10
libfido2-1.14.0-7.el10
libgcc-14.4.1-3.el10
libgcrypt-1.11.0-7.el10
libgomp-14.4.1-3.el10
libgpg-error-1.50-2.el10
libibverbs-62.0-3.el10
libicu-74.2-5.el10
libidn2-2.3.7-3.el10
libini_config-1.3.1-58.el10
libipa_hbac-2.13.1-3.el10
libjcat-0.2.2-2.el10
libjose-14-102.el10
libkcapi-1.5.1-1.el10
libkcapi-hasher-1.5.1-1.el10
libkcapi-hmaccalc-1.5.1-1.el10
libksba-1.6.7-2.el10
libldb-4.24.5-101.el10
libluksmeta-10-1.el10
libmaxminddb-1.9.1-4.el10
libmicrohttpd-1:1.0.0-3.el10
libmnl-1.0.5-7.el10
libmodulemd-2.15.0-12.el10
libmount-2.40.2-23.el10
libmspack-0.10.1-0.14.alpha.el10
libndp-1.9-2.el10
libnet-1.3-7.el10
libnetfilter_conntrack-1.0.9-12.el10
libnfnetlink-1.0.2-3.el10
libnfsidmap-1:2.8.3-9.el10
libnftnl-1.3.0-3.el10
libnghttp2-1.68.0-6.el10
libnl3-3.11.0-1.el10
libnvme-1.16.2-1.el10
libpath_utils-0.2.1-58.el10
libpcap-14:1.10.4-7.el10
libpciaccess-0.16-16.el10
libpkgconf-2.1.0-3.el10
libpwquality-1.4.5-13.el10
libref_array-0.1.5-58.el10
librepo-1.19.0-1.el10
libseccomp-2.5.6-1.el10
libselinux-3.11-3.el10
libselinux-utils-3.11-3.el10
libsemanage-3.11-3.el10
libsepol-3.11-2.el10
libsmartcols-2.40.2-23.el10
libsmbclient-4.24.5-101.el10
libsolv-0.7.33-7.el10
libss-1.47.1-5.el10
libsss_certmap-2.13.1-3.el10
libsss_idmap-2.13.1-3.el10
libsss_nss_idmap-2.13.1-3.el10
libsss_sudo-2.13.1-3.el10
libstdc++-14.4.1-3.el10
libtalloc-2.4.4-100.el10
libtasn1-4.20.0-5.el10
libtdb-1.4.15-100.el10
libtevent-0.17.1-100.el10
libtirpc-1.3.5-1.el10
libtool-ltdl-2.4.7-14.el10
libunistring-1.1-10.el10
liburing-2.12-1.el10
libusb1-1.0.30-1.el10
libutempter-1.2.1-15.el10
libuuid-2.40.2-23.el10
libuv-1:1.52.1-1.el10
libverto-0.3.2-10.el10
libverto-libev-0.3.2-10.el10
libwbclient-4.24.5-101.el10
libxcrypt-4.4.36-10.el10
libxml2-2.12.5-15.el10
libxmlb-0.3.28-1.el10
libxslt-1.1.39-10.el10
libyaml-0.2.5-16.el10
libzstd-1.5.5-9.el10
linux-firmware-20260812-26.el10
linux-firmware-whence-20260812-26.el10
lldpad-1.1.1-4.gitf1dd9eb.el10
lmdb-libs-0.9.32-4.el10
logrotate-3.22.0-5.el10
lsof-4.98.0-7.el10
lua-libs-5.4.8-1.el10
luksmeta-10-1.el10
lvm2-10:2.03.41-3.el10
lvm2-libs-10:2.03.41-3.el10
lz4-libs-1.9.4-8.el10
lzo-2.10-14.el10
makedumpfile-1.7.8-2.el10
mdadm-4.6-1.el10
microcode_ctl-4:20260812-1.el10
mokutil-2:0.7.2-8.el10
mpdecimal-2.5.1-12.el10
mpfr-4.2.1-8.el10
nano-8.1-3.el10
ncurses-base-6.4-15.20240127.el10
ncurses-libs-6.4-15.20240127.el10
net-tools-2.0-0.73.20160912git.el10
netavark-4:2.1.0-1.el10
nettle-3.10.1-1.el10
newt-0.52.24-5.el10
nfs-utils-1:2.8.3-9.el10
nftables-1:1.1.5-6.el10
nmap-ncat-4:7.92-5.el10
nmstate-2.2.62-2.el10
npth-1.6-21.el10
nss-altfiles-2.23.0-6.el10
numactl-2.0.19-3.el10
numactl-libs-2.0.19-3.el10
numad-0.5-50.20251104git.el10
nvidia-gpu-firmware-20260812-26.el10
nvme-cli-2.16-2.el10
oniguruma-6.9.9-7.el10
open-vm-tools-13.1.0-1.el10
openldap-2.6.13-1.el10
openshift-clients-5.1.0-202610051813.p2.g0bdef3b.assembly.stream.el10
openshift-kubelet-5.1.0-202610051813.p2.g421570e.assembly.stream.el10
openssh-9.9p1-32.el10
openssh-clients-9.9p1-32.el10
openssh-server-9.9p1-32.el10
openssl-1:3.5.8-1.el10
openssl-fips-provider-1:3.5.8-1.el10
openssl-libs-1:3.5.8-1.el10
openvswitch-selinux-extra-policy-1.0-36.el10s
openvswitch3.5-3.5.3-5.el10s
os-prober-1.81-9.el10
ose-aws-ecr-image-credential-provider-5.1.0-202610051813.p2.ge44d135.assembly.stream.el10
ose-azure-acr-image-credential-provider-5.1.0-202610051813.p2.g2b2ba3b.assembly.stream.el10
ose-crio-credential-provider-5.1.0-202610051813.p2.g83d4961.assembly.stream.el10
ose-gcp-gcr-image-credential-provider-5.1.0-202610051813.p2.g51c3264.assembly.stream.el10
ostree-2026.4-1.el10
ostree-grub2-2026.4-1.el10
ostree-libs-2026.4-1.el10
p11-kit-0.26.4-1.el10
p11-kit-trust-0.26.4-1.el10
pam-1.6.1-11.el10
pam-libs-1.6.1-11.el10
passt-0^20260728.gf8df3f1-1.el10
passt-selinux-0^20260728.gf8df3f1-1.el10
pciutils-3.13.0-6.el10
pciutils-libs-3.13.0-6.el10
pcre2-10.44-1.4.el10
pcre2-syntax-10.44-1.4.el10
pkgconf-2.1.0-3.el10
pkgconf-m4-2.1.0-3.el10
pkgconf-pkg-config-2.1.0-3.el10
podman-7:6.1.0-2.el10
podman-sequoia-0.4.0~pqc.3-1.el10
policycoreutils-3.11-1.el10
policycoreutils-python-utils-3.11-1.el10
polkit-125-6.el10
polkit-libs-125-6.el10
popt-1.19-9.el10
procps-ng-4.0.4-13.el10
protobuf-c-1.5.0-6.el10
psmisc-23.6-8.el10
python3-3.12.14-1.el10
python3-audit-4.2.1-3.el10
python3-charset-normalizer-3.4.2-1.el10
python3-cloud-what-1.30.16-1.el10
python3-dateutil-1:2.9.0.post0-1.el10
python3-dbus-1.3.2-8.el10
python3-decorator-5.1.1-12.el10
python3-distro-1.9.0-5.el10
python3-dnf-4.20.0-28.el10
python3-dnf-plugin-versionlock-4.7.0-12.el10
python3-dnf-plugins-core-4.7.0-12.el10
python3-file-magic-5.45-12.el10
python3-gobject-base-3.46.0-7.el10
python3-gobject-base-noarch-3.46.0-7.el10
python3-hawkey-0.73.1-17.el10
python3-idna-3.7-6.el10
python3-iniparse-0.5-10.el10
python3-inotify-0.9.6-36.el10
python3-libcomps-0.1.21-3.el10
python3-libdnf-0.73.1-17.el10
python3-librepo-1.19.0-1.el10
python3-libs-3.12.14-1.el10
python3-libselinux-3.11-3.el10
python3-libsemanage-3.11-3.el10
python3-packaging-24.2-2.el10
python3-pexpect-4.9.0-6.el10
python3-pip-wheel-23.3.2-11.el10
python3-policycoreutils-3.11-1.el10
python3-ptyprocess-0.7.0-9.el10
python3-pyyaml-6.0.1-19.el10
python3-requests-2.32.4-1.el10
python3-rpm-4.19.1.1-25.el10
python3-setools-4.7.1-1.1.el10
python3-setuptools-69.0.3-12.el10
python3-six-1.16.0-16.el10
python3-subscription-manager-rhsm-1.30.16-1.el10
python3-systemd-235-11.el10
python3-urllib3-1.26.19-4.el10
qemu-guest-agent-18:10.1.0-28.el10
quota-1:4.09-10.el10
quota-nls-1:4.09-10.el10
rdma-core-62.0-3.el10
readline-8.2-11.el10
rpcbind-1.2.9-0.el10
rpm-4.19.1.1-25.el10
rpm-build-libs-4.19.1.1-25.el10
rpm-libs-4.19.1.1-25.el10
rpm-ostree-2026.3-2.el10
rpm-ostree-libs-2026.3-2.el10
rpm-plugin-audit-4.19.1.1-25.el10
rpm-plugin-selinux-4.19.1.1-25.el10
rpm-plugin-syslog-4.19.1.1-25.el10
rpm-sequoia-1.10.2.3-1.el10
rpm-sign-libs-4.19.1.1-25.el10
rsync-3.4.4-1.el10
samba-client-libs-4.24.5-101.el10
samba-common-4.24.5-101.el10
samba-core-libs-4.24.5-101.el10
samba-ndr-libs-4.24.5-101.el10
sed-4.9-5.el10
selinux-policy-42.1.27-2.el10
selinux-policy-targeted-42.1.27-2.el10
setup-2.14.5-7.el10
sg3_utils-1.48-11.el10
sg3_utils-libs-1.48-11.el10
shadow-utils-2:4.15.0-13.el10
shadow-utils-subid-2:4.15.0-13.el10
shared-mime-info-2.3-8.el10
shim-x64-16.1-1.el10
skopeo-3:1.24.0-2.el10
slang-2.3.3-8.el10
snappy-1.1.10-7.el10
socat-1.7.4.4-9.el10
sos-4.11.2-5.el10
sqlite-libs-3.46.1-6.el10
ssh-key-dir-0.1.4-9.el10
sssd-2.13.1-3.el10
sssd-ad-2.13.1-3.el10
sssd-client-2.13.1-3.el10
sssd-common-2.13.1-3.el10
sssd-common-pac-2.13.1-3.el10
sssd-ipa-2.13.1-3.el10
sssd-krb5-2.13.1-3.el10
sssd-krb5-common-2.13.1-3.el10
sssd-ldap-2.13.1-3.el10
sssd-nfs-idmap-2.13.1-3.el10
sssd-proxy-2.13.1-3.el10
stalld-1.26.3-1.el10
strace-6.12-3.el10
subscription-manager-1.30.16-1.el10
subscription-manager-rhsm-certificates-20220623-6.el10
sudo-1.9.17-10.p2.el10
systemd-257-34.el10
systemd-journal-remote-257-34.el10
systemd-libs-257-34.el10
systemd-pam-257-34.el10
systemd-udev-257-34.el10
tar-2:1.35-13.el10
tmux-3.3a-14.20230918gitb202a2f.el10
toolbox-0.3-3.el10
tpm2-tools-5.7-6.el10
tpm2-tss-4.1.3-6.el10
tpm2-tss-fapi-4.1.3-6.el10
tzdata-2026e-1.el10
unbound-anchor-1.26.1-2.el10
unbound-libs-1.26.1-2.el10
userspace-rcu-0.14.0-7.el10
util-linux-2.40.2-23.el10
util-linux-core-2.40.2-23.el10
vim-data-2:9.1.083-23.el10
vim-minimal-2:9.1.083-23.el10
virt-what-1.27-3.el10
which-2.21-44.el10
xfsprogs-6.16.0-1.el10
xmlsec1-1:1.2.39-3.el10
xmlsec1-openssl-1:1.2.39-3.el10
xz-1:5.6.2-5.el10
xz-libs-1:5.6.2-5.el10
zlib-ng-compat-2.2.3-3.el10
zram-generator-1.1.2-14.el10
zstd-1.5.5-9.el10

Changed:

afterburn 5.10.0-2.el10 → 5.11.0-1.el10
afterburn-dracut 5.10.0-2.el10 → 5.11.0-1.el10
bind-libs 32:9.18.33-19.el10 → 32:9.18.33-28.el10
bind-license 32:9.18.33-19.el10 → 32:9.18.33-28.el10
bind-utils 32:9.18.33-19.el10 → 32:9.18.33-28.el10
bootc 1.16.7-1.el10 → 1.16.13-1.el10
bsdtar 3.7.7-10.el10 → 3.7.7-11.el10
c-ares 1.34.6-4.el10 → 1.34.8-1.el10
checkpolicy 3.11-1.el10 → 3.11-2.el10
cifs-utils 7.6-2.el10 → 7.7-2.el10
containers-common 6:6.0-2.el10 → 6:6.0-3.el10
containers-common-extra 6:6.0-2.el10 → 6:6.0-3.el10
coreutils 9.5-13.el10 → 9.5-14.el10
coreutils-common 9.5-13.el10 → 9.5-14.el10
cri-o 1.36.4-1.el10s → 1.37.2-1.el10s
cri-tools 1.36.0-1.el10s → 1.37.0-1.el10s
crun 1.29.1-1.el10 → 1.30.1-1.el10
dbus-broker 36-4.el10 → 36-5.el10
device-mapper-multipath 0.9.9-19.el10 → 0.9.9-20.el10
device-mapper-multipath-libs 0.9.9-19.el10 → 0.9.9-20.el10
dnf 4.20.0-27.el10 → 4.20.0-28.el10
dnf-data 4.20.0-27.el10 → 4.20.0-28.el10
dnsmasq 2.90-7.el10 → 2.90-8.el10
dracut 107-10.el10 → 107-11.el10
dracut-network 107-10.el10 → 107-11.el10
dracut-squash 107-10.el10 → 107-11.el10
expat 2.7.3-2.el10 → 2.7.3-4.el10
gawk 5.3.0-6.el10 → 5.3.0-7.el10
gdbm 1:1.23-14.el10 → 1:1.26-15.el10
gdbm-libs 1:1.23-14.el10 → 1:1.26-15.el10
glib2 2.80.4-15.el10 → 2.80.4-22.el10
glibc 2.39-136.el10 → 2.39-141.el10
glibc-common 2.39-136.el10 → 2.39-141.el10
glibc-gconv-extra 2.39-136.el10 → 2.39-141.el10
glibc-minimal-langpack 2.39-136.el10 → 2.39-141.el10
gnutls 3.8.10-4.el10 → 3.8.10-5.el10
grub2-common 1:2.12-55.el10 → 1:2.12-57.el10
grub2-efi-x64 1:2.12-55.el10 → 1:2.12-57.el10
grub2-pc 1:2.12-55.el10 → 1:2.12-57.el10
grub2-pc-modules 1:2.12-55.el10 → 1:2.12-57.el10
grub2-tools 1:2.12-55.el10 → 1:2.12-57.el10
grub2-tools-minimal 1:2.12-55.el10 → 1:2.12-57.el10
gzip 1.13-3.el10 → 1.13-4.el10
ignition 2.26.0-4.el10 → 2.27.0-2.el10
ignition-grub 2.26.0-4.el10 → 2.27.0-2.el10
kbd 2.6.4-7.el10 → 2.6.4-8.el10
kbd-legacy 2.6.4-7.el10 → 2.6.4-8.el10
kbd-misc 2.6.4-7.el10 → 2.6.4-8.el10
kernel 6.12.0-260.el10 → 6.12.0-273.el10
kernel-core 6.12.0-260.el10 → 6.12.0-273.el10
kernel-modules 6.12.0-260.el10 → 6.12.0-273.el10
kernel-modules-core 6.12.0-260.el10 → 6.12.0-273.el10
kernel-modules-extra 6.12.0-260.el10 → 6.12.0-273.el10
kpartx 0.9.9-19.el10 → 0.9.9-20.el10
libarchive 3.7.7-10.el10 → 3.7.7-11.el10
libblkid 2.40.2-20.el10 → 2.40.2-23.el10
libdnf-plugin-subscription-manager 1.30.15-1.el10 → 1.30.16-1.el10
libevent 2.1.12-16.el10 → 2.1.13-1.el10
libfdisk 2.40.2-20.el10 → 2.40.2-23.el10
libgcc 14.4.1-2.el10 → 14.4.1-3.el10
libgomp 14.4.1-2.el10 → 14.4.1-3.el10
libipa_hbac 2.13.1-2.el10 → 2.13.1-3.el10
libkcapi 1.5.0-3.el10 → 1.5.1-1.el10
libkcapi-hasher 1.5.0-3.el10 → 1.5.1-1.el10
libkcapi-hmaccalc 1.5.0-3.el10 → 1.5.1-1.el10
libmount 2.40.2-20.el10 → 2.40.2-23.el10
libselinux 3.11-1.el10 → 3.11-3.el10
libselinux-utils 3.11-1.el10 → 3.11-3.el10
libsemanage 3.11-1.el10 → 3.11-3.el10
libsepol 3.11-1.el10 → 3.11-2.el10
libsmartcols 2.40.2-20.el10 → 2.40.2-23.el10
libsolv 0.7.33-6.el10 → 0.7.33-7.el10
libsss_certmap 2.13.1-2.el10 → 2.13.1-3.el10
libsss_idmap 2.13.1-2.el10 → 2.13.1-3.el10
libsss_nss_idmap 2.13.1-2.el10 → 2.13.1-3.el10
libsss_sudo 2.13.1-2.el10 → 2.13.1-3.el10
libstdc++ 14.4.1-2.el10 → 14.4.1-3.el10
libuuid 2.40.2-20.el10 → 2.40.2-23.el10
makedumpfile 1.7.8-1.el10 → 1.7.8-2.el10
mdadm 4.4-4.el10 → 4.6-1.el10
microcode_ctl 4:20260210-1.el10 → 4:20260812-1.el10
mokutil 2:0.7.2-5.el10 → 2:0.7.2-8.el10
netavark 4:2.0.0-2.el10 → 4:2.1.0-1.el10
nmstate 2.2.61-2.el10 → 2.2.62-2.el10
openshift-clients 5.1.0-202609211452.p2.g75a043d.assembly.stream.el10 → 5.1.0-202610051813.p2.g0bdef3b.assembly.stream.el10
openshift-kubelet 5.1.0-202609210107.p2.gd8d29a8.assembly.stream.el10 → 5.1.0-202610051813.p2.g421570e.assembly.stream.el10
openssh 9.9p1-29.el10 → 9.9p1-32.el10
openssh-clients 9.9p1-29.el10 → 9.9p1-32.el10
openssh-server 9.9p1-29.el10 → 9.9p1-32.el10
openssl 1:3.5.7-3.el10 → 1:3.5.8-1.el10
openssl-fips-provider 1:3.5.7-3.el10 → 1:3.5.8-1.el10
openssl-libs 1:3.5.7-3.el10 → 1:3.5.8-1.el10
ose-aws-ecr-image-credential-provider 5.1.0-202609162104.p2.ge44d135.assembly.stream.el10 → 5.1.0-202610051813.p2.ge44d135.assembly.stream.el10
ose-azure-acr-image-credential-provider 5.1.0-202609091748.p2.g2b2ba3b.assembly.stream.el10 → 5.1.0-202610051813.p2.g2b2ba3b.assembly.stream.el10
ose-crio-credential-provider 5.1.0-202608051207.p2.g83d4961.assembly.stream.el10 → 5.1.0-202610051813.p2.g83d4961.assembly.stream.el10
ose-gcp-gcr-image-credential-provider 5.1.0-202608051207.p2.g51c3264.assembly.stream.el10 → 5.1.0-202610051813.p2.g51c3264.assembly.stream.el10
ostree 2026.3-1.el10 → 2026.4-1.el10
ostree-grub2 2026.3-1.el10 → 2026.4-1.el10
ostree-libs 2026.3-1.el10 → 2026.4-1.el10
pcre2 10.44-1.el10.3 → 10.44-1.4.el10
pcre2-syntax 10.44-1.el10.3 → 10.44-1.4.el10
podman 7:6.1.0-1.el10 → 7:6.1.0-2.el10
popt 1.19-8.el10 → 1.19-9.el10
python3 3.12.13-3.el10 → 3.12.14-1.el10
python3-cloud-what 1.30.15-1.el10 → 1.30.16-1.el10
python3-dnf 4.20.0-27.el10 → 4.20.0-28.el10
python3-libs 3.12.13-3.el10 → 3.12.14-1.el10
python3-libselinux 3.11-1.el10 → 3.11-3.el10
python3-libsemanage 3.11-1.el10 → 3.11-3.el10
python3-setools 4.7.0-1.el10 → 4.7.1-1.1.el10
python3-subscription-manager-rhsm 1.30.15-1.el10 → 1.30.16-1.el10
qemu-guest-agent 18:10.1.0-26.el10 → 18:10.1.0-28.el10
rpm-ostree 2026.2-2.el10 → 2026.3-2.el10
rpm-ostree-libs 2026.2-2.el10 → 2026.3-2.el10
selinux-policy 42.1.26-1.el10 → 42.1.27-2.el10
selinux-policy-targeted 42.1.26-1.el10 → 42.1.27-2.el10
sg3_utils 1.48-10.el10 → 1.48-11.el10
sg3_utils-libs 1.48-10.el10 → 1.48-11.el10
skopeo 3:1.24.0-1.el10 → 3:1.24.0-2.el10
sssd 2.13.1-2.el10 → 2.13.1-3.el10
sssd-ad 2.13.1-2.el10 → 2.13.1-3.el10
sssd-client 2.13.1-2.el10 → 2.13.1-3.el10
sssd-common 2.13.1-2.el10 → 2.13.1-3.el10
sssd-common-pac 2.13.1-2.el10 → 2.13.1-3.el10
sssd-ipa 2.13.1-2.el10 → 2.13.1-3.el10
sssd-krb5 2.13.1-2.el10 → 2.13.1-3.el10
sssd-krb5-common 2.13.1-2.el10 → 2.13.1-3.el10
sssd-ldap 2.13.1-2.el10 → 2.13.1-3.el10
sssd-nfs-idmap 2.13.1-2.el10 → 2.13.1-3.el10
sssd-proxy 2.13.1-2.el10 → 2.13.1-3.el10
subscription-manager 1.30.15-1.el10 → 1.30.16-1.el10
sudo 1.9.17-9.p2.el10 → 1.9.17-10.p2.el10
systemd 257-32.el10 → 257-34.el10
systemd-journal-remote 257-32.el10 → 257-34.el10
systemd-libs 257-32.el10 → 257-34.el10
systemd-pam 257-32.el10 → 257-34.el10
systemd-udev 257-32.el10 → 257-34.el10
tar 2:1.35-11.el10 → 2:1.35-13.el10
tzdata 2026c-1.el10 → 2026e-1.el10
unbound-anchor 1.26.0-1.el10 → 1.26.1-2.el10
unbound-libs 1.26.0-1.el10 → 1.26.1-2.el10
util-linux 2.40.2-20.el10 → 2.40.2-23.el10
util-linux-core 2.40.2-20.el10 → 2.40.2-23.el10
vim-data 2:9.1.083-22.el10 → 2:9.1.083-23.el10
vim-minimal 2:9.1.083-22.el10 → 2:9.1.083-23.el10
xz 1:5.6.2-4.el10 → 1:5.6.2-5.el10
xz-libs 1:5.6.2-4.el10 → 1:5.6.2-5.el10

Extensions

Full list (113 packages)

NetworkManager-libreswan-1.2.31-1.el10.x86_64
binutils-2.41-66.el10.x86_64
binutils-gold-2.41-66.el10.x86_64
bison-3.8.2-9.el10.x86_64
cmake-filesystem-3.31.8-1.el10.x86_64
cpp-14.4.1-3.el10.x86_64
elfutils-debuginfod-client-0.195-1.el10.x86_64
elfutils-libelf-devel-0.195-1.el10.x86_64
flex-2.6.4-19.el10.x86_64
gcc-14.4.1-3.el10.x86_64
glibc-devel-2.39-141.el10.x86_64
groff-base-1.23.0-10.el10.x86_64
kernel-6.12.0-273.el10.x86_64
kernel-core-6.12.0-273.el10.x86_64
kernel-devel-6.12.0-273.el10.x86_64
kernel-headers-6.12.0-273.el10.x86_64
kernel-modules-6.12.0-273.el10.x86_64
kernel-modules-core-6.12.0-273.el10.x86_64
kernel-modules-extra-6.12.0-273.el10.x86_64
kernel-rt-core-6.12.0-273.el10.x86_64
kernel-rt-devel-6.12.0-273.el10.x86_64
kernel-rt-modules-6.12.0-273.el10.x86_64
kernel-rt-modules-core-6.12.0-273.el10.x86_64
kernel-rt-modules-extra-6.12.0-273.el10.x86_64
krb5-pkinit-1.21.3-11.el10.x86_64
krb5-workstation-1.21.3-11.el10.x86_64
ldns-1.8.3-19.el10.x86_64
libkadm5-1.21.3-11.el10.x86_64
libmpc-1.3.1-7.el10.x86_64
libqb-2.0.8-6.el10.x86_64
libreswan-5.4-1.el10.x86_64
libreswan-minimal-5.4-1.el10.x86_64
libxcrypt-devel-4.4.36-10.el10.x86_64
libzstd-devel-1.5.5-9.el10.x86_64
lm_sensors-libs-3.6.0-20.el10.x86_64
m4-1.4.19-11.el10.x86_64
make-1:4.4.1-9.el10.x86_64
ncurses-6.4-15.20240127.el10.x86_64
nspr-4.39.0-5.el10.x86_64
nss-3.124.0-5.el10.x86_64
nss-softokn-3.124.0-5.el10.x86_64
nss-softokn-freebl-3.124.0-5.el10.x86_64
nss-sysinit-3.124.0-5.el10.x86_64
nss-tools-3.124.0-5.el10.x86_64
nss-util-3.124.0-5.el10.x86_64
openssl-devel-1:3.5.8-1.el10.x86_64
openvswitch3.5-ipsec-3.5.3-5.el10s.x86_64
pcp-conf-7.1.5-6.el10.x86_64
pcp-libs-7.1.5-6.el10.x86_64
perl-AutoLoader-5.74-515.el10.noarch
perl-B-1.89-515.el10.x86_64
perl-Carp-1.54-511.el10.noarch
perl-Class-Struct-0.68-515.el10.noarch
perl-Data-Dumper-2.189-512.el10.x86_64
perl-Digest-1.20-511.el10.noarch
perl-Digest-MD5-2.59-6.el10.x86_64
perl-DynaLoader-1.56-515.el10.x86_64
perl-Encode-4:3.21-511.el10.x86_64
perl-Errno-1.38-515.el10.x86_64
perl-Exporter-5.78-511.el10.noarch
perl-Fcntl-1.18-515.el10.x86_64
perl-File-Basename-2.86-515.el10.noarch
perl-File-Path-2.18-512.el10.noarch
perl-File-Temp-1:0.231.100-512.el10.noarch
perl-File-stat-1.14-515.el10.noarch
perl-FileHandle-2.05-515.el10.noarch
perl-Getopt-Long-1:2.58-3.el10.noarch
perl-Getopt-Std-1.14-515.el10.noarch
perl-HTTP-Tiny-0.088-512.el10.noarch
perl-IO-1.55-515.el10.x86_64
perl-IO-Socket-IP-0.42-512.el10.noarch
perl-IO-Socket-SSL-2.085-3.el10.noarch
perl-IPC-Open3-1.22-515.el10.noarch
perl-MIME-Base64-3.16-511.el10.x86_64
perl-Mozilla-CA-20231213-5.el10.noarch
perl-NDBM_File-1.17-515.el10.x86_64
perl-Net-SSLeay-1.94-9.el10.x86_64
perl-POSIX-2.20-515.el10.x86_64
perl-PathTools-3.91-512.el10.x86_64
perl-Pod-Escapes-1:1.07-511.el10.noarch
perl-Pod-Perldoc-3.28.01-512.el10.noarch
perl-Pod-Simple-1:3.45-511.el10.noarch
perl-Pod-Usage-4:2.03-511.el10.noarch
perl-Scalar-List-Utils-5:1.63-511.el10.x86_64
perl-SelectSaver-1.02-515.el10.noarch
perl-Socket-4:2.038-511.el10.x86_64
perl-Storable-1:3.32-511.el10.x86_64
perl-Symbol-1.09-515.el10.noarch
perl-Term-ANSIColor-5.01-512.el10.noarch
perl-Term-Cap-1.18-511.el10.noarch
perl-Text-ParseWords-3.31-511.el10.noarch
perl-Text-Tabs+Wrap-2024.001-511.el10.noarch
perl-Time-Local-2:1.350-511.el10.noarch
perl-URI-5.27-3.el10.noarch
perl-base-2.27-515.el10.noarch
perl-constant-1.33-512.el10.noarch
perl-if-0.61.000-515.el10.noarch
perl-interpreter-4:5.40.2-515.el10.x86_64
perl-libnet-3.15-512.el10.noarch
perl-libs-4:5.40.2-515.el10.x86_64
perl-locale-1.12-515.el10.noarch
perl-mro-1.29-515.el10.x86_64
perl-overload-1.37-515.el10.noarch
perl-overloading-0.02-515.el10.noarch
perl-parent-1:0.241-512.el10.noarch
perl-podlators-1:5.01-511.el10.noarch
perl-vars-1.05-515.el10.noarch
protobuf-3.19.6-15.el10.x86_64
python3-openvswitch3.5-3.5.3-5.el10s.x86_64
sysstat-12.7.6-4.el10.x86_64
usbguard-1.1.4-2.el10.x86_64
usbguard-selinux-1.1.4-2.el10.noarch
zlib-ng-compat-devel-2.2.3-3.el10.x86_64

CentOS Stream CoreOS base layer: 10 upgraded from 10.0.20260819-0 to 10.0.20261008-0

View changelog in Markdown or change previous release:

Source code for this page located on github