Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.19.0-okd-scos.16

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable
  • upgrade-minor Succeeded (1 retry) release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable

    • Attempt 1 Failed
    • Attempt 2 Succeeded

Upgrades from:

• 4.19.0-okd-scos.15 (changes) - Success
• 4.19.0-okd-scos.14 (changes) - Failed
• 4.19.0-okd-scos.13 (changes) - Success
• 4.19.0-okd-scos.12 (changes) - Failed
• 4.19.0-okd-scos.11 (changes) - Success
• 4.19.0-okd-scos.10 (changes) - Success
• 4.19.0-okd-scos.9 (changes) - Success
• 4.19.0-okd-scos.8 (changes) - Success
• 4.19.0-okd-scos.7 (changes) - Success
• 4.19.0-okd-scos.6 (changes) - Failed Success
• 4.19.0-okd-scos.5 (changes) - Success
• 4.19.0-okd-scos.4 - Success
• 4.19.0-okd-scos.3 (changes) - Success
• 4.19.0-okd-scos.2 (changes) - Success
• 4.19.0-okd-scos.1 (changes) - Failed
• 4.18.0-okd-scos.10 (changes) - Failed Success

Upgrades to:

• 4.19.0-okd-scos.19 (changes) - Success
• 4.19.0-okd-scos.18 (changes) - Success
• 4.19.0-okd-scos.17 (changes) - Success

---

Loading changelog, this may take a while ...

Changes from 4.19.0-okd-scos.4

Created: 2025-08-25 08:10:05 +0000 UTC

Image Digest: sha256:31666722dd7eeb9a63cc2fe368cbcb20c9f006a33651b21ed531de87df79f012

Release 4.19.0-okd-scos.16 was created from registry.ci.openshift.org/origin/release-scos:4.19.0-0.okd-scos-2025-08-22-102022

Components

• Kubectl 1.32.1
• Kubernetes upgraded from 1.32.5 to 1.32.7
• Kubernetes Tests upgraded from 1.32.5 to 1.32.6
• CentOS Stream CoreOS upgraded from 9.0.20250611-0 to 9.0.20250819-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

New images

• aws-karpenter-provider-aws git b37141b0 sha256:ec94a7b2d6c7cd96ae6e240c07735a08b450a33bbd1d103d9c9d218636276b24
• openstack-resource-controller git d00bab2b sha256:83a5c67cd3b2201997bbae393e7e23b9d84cbcd9eaaea126754c601a67d1bd57

Rebuilt images without code change

• cluster-autoscaler-operator git 227f7537 sha256:f539eb3cfebd4801084621a6fa0d07b64a946c98abd0a0aa60ed9bc4c406753e

agent-installer-api-server

• MGMT-21287: Remove NHO dependency in SNR (#7894) #7894
• NO-ISSUE: Add NHO and FAR back to the virtualization bundle (#7870) #7870
• MGMT-20893: Remove Remediation operators from virtualization bundle (#7814) #7814
• OCPBUGS-57361: Use hostname to match hosts to BMH ignition (#7794) #7794
• Full changelog

agent-installer-utils

• OCPBUGS-60107: Add ISOBuilder Release notes #137
• OCPBUGS-59731: add back NHR and FAR operators #131
• OCPBUGS-58285: OVE ISOBuilder works only if and when the script is ex… #121
• OCPBUGS-59254: invalid default channel configuration for package “mtv… #126
• OCPBUGS-59666: Enable ‘q’ and ‘c’ hotkeys for quit and configure network #129
• OCPBUGS-57922: Update operators list in ISOBuilder #118
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-59241, OCPBUGS-59242: bump github.com/golang/glog to v1.2.5 #558
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-59893: Remove stale conditions #411
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-59888: Add support to disable CAPZ components through a manager flag #347
• Full changelog

azure-machine-controllers

• OCPBUGS-56163: [release-4.19] Update virtualmachines service to armcompute/v5 SDK #144
• Full changelog

baremetal-installer, installer, installer-artifacts

• Revert “Update RHCOS 4.19 bootimage metadata to 9.6.20250811-0” #9906
• OCPBUGS-60402: baremetal: always set external v6 URL on dualstack #9879
• OCPBUGS-58905: Update RHCOS 4.19 bootimage metadata to 9.6.20250811-0 #9888
• OCPBUGS-56963: Make swift containers removal not fatal for UPI. #9765
• OCPBUGS-58403: When AWS_PROFILE is invalid ask for credentials #9829
• OCPBUGS-58073: Refactor removing loadbalancer in OpenStack. #9808
• OCPBUGS-58263: allow to deploy single nodes with UPI #9812
• OCPBUGS-57901: vSphere - remove unit tests using nip.io #9802
• OCPBUGS-58060: MCO: consider custom AMI for edge compute machine pool #9807
• OCPBUGS-56020: AWS Destroy use AWS SDK v2 #9703
• OCPBUGS-57394: Prompt User for AWS Creds when none are found #9782
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

baremetal-operator

• OCPBUGS-59133: Unblock BMH direct deletion when detached annotation is present #423
• OCPBUGS-56765: Make firmware update handle only a subset of Spec.Updates #420
• Full changelog

baremetal-runtimecfg

• OCPBUGS-60110: Re-add ENABLE_NODEIP_DEBUG env var #365
• OCPBUGS-57781: iptables: Switch PREROUTING REDIRECT rule to DNAT instead #352
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-58077: Return error in case of error #2052
• OCPBUGS-56905: avoid transfering permissions when copying artifacts from node-joiner pod #2032
• Full changelog

cloud-credential-operator

• OCPBUGS-60617: ccoctl azure dnszone-resource-group-name now optional #900
• OCPBUGS-59401: github.com/golang/glog v1.2.5 #890
• OCPBUGS-58246: ccoctl: only add owned tag to azure resources on create #881
• Full changelog

cluster-autoscaler

• OCPBUGS-59638: fix checkpoint gc of unknown recommenders #366
• Full changelog

cluster-baremetal-operator

• OCPBUGS-60286: Remove webhookport (9447) as HostPort #498
• OCPBUGS-57504: Treat ResourceNotFound as non-fatal #484
• OCPBUGS-56644: Allow provisioningIP when network disabled #474
• Full changelog

cluster-capi-operator

• OCPBUGS-59228, OCPBUGS-59229: fix: clusteroperator: do not update status.relatedobjects if only order changed #332
• OCPBUGS-57449: mapi2capi: Create new machine template when changing MAPI providerSpec #317
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-59847: Adds service for cloud-controller-manager #402
• OCPBUGS-59847: Update service selector to match deployment label #401
• Full changelog

cluster-config-api

• OCPBUGS-60414: MachineOSConfig name should match MachineConfigPool #2449
• Update crd-schema.json to release 1.33 branch #2447
• Full changelog

cluster-etcd-operator

• OCPBUGS-59285: fix ordering on bootstrap IP selection #1446
• OCPBUGS-45731: Updating cluster-etcd-operator-container image to be consistent with ART for 4.19 #1376
• OCPBUGS-59313: add missing ports to svc and pod spec #1447
• OCPBUGS-57956: feat: update logic to list arbiter nodes #1437
• OCPBUGS-57490: Comply with OCP pod standards for TNF jobs #1434
• Full changelog

cluster-image-registry-operator

• OCPBUGS-60517: fix(azure): resolve credential caching issues around UAMI support #1243
• Full changelog

cluster-ingress-operator

• NE-2102: Bump to OSSM 3.1.0 and Istio 1.26.2 #1264
• NO-JIRA: [release-4.19] docs - correct Istio version format in ossm-overrides.md #1255
• OCPBUGS-60204: Update GatewayAPI test to check if deployment has 1 or more pod #1260
• NE-2109: Add OSSM channel and version override annotations #1252
• NE-2105: desiredIstio: Enable GIE if InferencePool found #1251
• NE-2103: Bump to OSSM 3.0.1 and Istio 1.24.4 #1244
• OCPBUGS-58394: desiredIstio: Do not enable a default PDB #1241
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-59957: Add missing service ports to apiserver service #1880
• Revert “[release-4.19] OCPBUGS-58116: certregenerationcontroller: start configInformers again” #1867
• OCPBUGS-58116: certregenerationcontroller: start configInformers again #1861
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-60132: Missing endpoint slices for open ports the operator uses #853
• Full changelog

cluster-monitoring-operator

• OCPBUGS-59932: operator: increase wait time till degraded to max 4 times 5m #2629
• Full changelog

cluster-network-operator

• OCPBUGS-60761: Allow overriding OVN-Kubernetes configuration #2781
• OCPBUGS-60534: Fix multus webhook match condition for spec changes #2777
• OCPBUGS-60095: Add release version annotation to whereabouts-controller/whereabouts-token-watcher #2762
• OCPBUGS-59645: [release-4.19] BGP related backports #2748
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-52853: Do not add iommu.passthrough to ARM by default (#1358) #1358
• OCPBUGS-58144: E2E: Additional Functional tests for align cpus by UncoreCache Feature (#1348) #1348
• OCPBUGS-57148: E2E: Functional tests for align cpus by UncoreCache Feature (#1336) #1336
• Full changelog

cluster-olm-operator

• OCPBUGS-56825: fix olm.maxOpenShiftVersion float parsing #122
• Full changelog

cluster-storage-operator

• OCPBUGS-56253: sync Azure File permissions with upstream docs #2 #580
• Full changelog

cluster-version-operator

• OCPBUGS-60168: CVO protects /metrics with authorization #1222
• Full changelog

console

• OCPBUGS-60279: Remove ancient X-XSS-Protection header #15381
• OCPBUGS-60038: Resolving API Version Conflicts in Tekton Pipeline Runs #15354
• OCPBUGS-60294: OpenShift Console’s “Start Job” action overrides configured “backoffLimit” to “6” #15382
• NO-JIRA: Update CHANGELOG for latest 4.19 plugin SDK package publish #15406
• OCPBUGS-60039: Fix i18n string for event stream (again) #15388
• OCPBUGS-60039: Fix i18n string for event stream #15355
• OCPBUGS-56651: Recognize Detached BMH status #15083
• OCPBUGS-58214: Incorrect i18n translations in 4.19 batch #15218
• OCPBUGS-59790: Move alertmanager settings route #15331
• OCPBUGS-59639: Fixing no resources found message can not be shown completely #15320
• OCPBUGS-59810: Default name is comprised of ‘-’ on ‘Add to favorites’ page when language is Korean/Japanese/Chinese. #15333
• OCPBUGS-56280: Follow-on fix. Add new “plugins-order” flag to bridge cli args #15168
• OCPBUGS-59199: Deleted objects remain in favorites and cause 404 errors #15267
• OCPBUGS-59557: add data-test attrs to console plugins table #15305
• OCPBUGS-59513: Update model flags when plugins load #15298
• OCPBUGS-58331: change ‘/metrics/usage’ endpoint to ‘/api/metrics/usage’ #15273
• OCPBUGS-58433: Add the Origin header to the HeaderBlacklist in the co… #15246
• OCPBUGS-59315: Not able to launch terminal window from OCP web console due to console plugin conflicts #15280
• OCPBUGS-58217: fix missing form styles in Create PVC page + Clone PVC… #15260
• OCPBUGS-58183: ContainerResource metric data for HPAs isn’t visible i… #15213
• OCPBUGS-58316: Implement sessions in openshift authenticator #15234
• OCPBUGS-58375: fix bug where / in console.tab/horizontalNav href breaks navigation #15239
• OCPBUGS-58377: fix runtime error when editing HPA using the form #15240
• OCPBUGS-58090: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15204
• NO-JIRA: Update Console plugin SDK changelogs #15212
• OCPBUGS-57390: i18n upload/download routine task - Sprint 270 #15175
• OCPBUGS-57755: Add the ability to launch multiple modals with useModal hook #15189
• OCPBUGS-57113: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console. #15180
• OCPBUGS-57391: OpenShift console PVC clone cannot use B as the unit #15176
• OCPBUGS-57384: Update vSphere configuration form to support CM YAML f… #15174
• OCPBUGS-56950: UI for search by label is distorted in topology #15111
• OCPBUGS-56841: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15100
• Full changelog

console-operator

• OCPBUGS-59488: Update downloads deployment configuration to use master node selector #1016
• OCPBUGS-59618: Fetch synced CM for the CertificateAuthority issuer + Wire synced OIDC Auth CM to Console #1028
• OCPBUGS-56280: Add plugins order to console config #988
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

coredns

• OCPBUGS-60246: UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy #148
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-57799: Rebase release-4.19 onto release-1.31 #331
• Full changelog

docker-builder

• OCPBUGS-57173: S2I build cpu limits observed by assemble are limited to 1 cpu #471
• Full changelog

gcp-machine-controllers

• OCPBUGS-59386: Add max-concurrent-reconciles flag to machine actuator #125
• Full changelog

gcp-pd-csi-driver

• OCPBUGS-59749: 4.19: UPSTREAM: 2116: Remove check on snapshot create support for multi-writer HyperDisk-HA and let such validations occur at the PD control plane layer #80
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• OCPBUGS-60074: UPSTREAM: 132028: podresources: list: use active pods #2391
• OCPBUGS-59534: Rebase v1.32.7 to 4.19 #2367
• OCPBUGS-57886: Bump 4.19 1.32.6 #2340
• NO-JIRA: UPSTREAM: <carry>: Update rebase.sh to handle go versions major.minor.patch #2341
• OCPBUGS-58175: Fix flake caused by invalid detection of active policies in VAP integration tests #2347
• OCPBUGS-55937: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2290
• Full changelog

hypershift

• OCPBUGS-60648: Cache Azure KMS TokenCredential for ARO HCP and clarify CPO credentials cache naming #6677
• OCPBUGS-60100: fix: add dynamic security context uid to 4.19 missing components #6675
• OCPBUGS-57141: HCP payload doesn’t respect multiple mirrors #6517
• CNTRLPLANE-1270: Red Hat Konflux update control-plane-operator-4-19 #6660
• Red Hat Konflux purge control-plane-operator-4-19 #6659
• CNTRLPLANE-1267: conditional builds for mce-2.9 #6657
• OCPBUGS-57588: Update PSA from v1beta1 to v1 #6302
• OCPBUGS-59805: Router publish strategy related changes for IBM Cloud platform #6490
• OCPBUGS-59933: Use the image reference for the cache in the image metadata provider #6535
• CNTRLPLANE-1016: Support day2 tags changes for AWS default SecurityGroup #6455
• CNTRLPLANE-1034: chore: Relax the kas healthcheck for aro when AllowedCIDRBlocks #6617
• OCPBUGS-60100: feat: let ARO honour cp namespace annotation for default SC uids in 4.19 #6592
• CNTRLPLANE-1226: feat(konflux): Make CPO builds hermetic #6596
• CNTRLPLANE-1213: New API to support specifying cluster-autoscaler flags #6558
• OCPBUGS-57331: Set default security context on everything #6257
• OCPSTRAT-2173: feat(hcco): add support for hosted OIDC client secrets #6525
• OCPBUGS-58300: remove annotation is not working #6465
• CNTRLPLANE-1189: Global PullSecret daemonSet implementation #6507
• NO-JIRA: fix: set terminationMessagePolicy to FallbackToLogsOnError for olm-collect-profiles #6493
• CNTRLPLANE-1034: sharedingress: Add support for kube-apiserver whitelist CIDRs #6502
• OCPBUGS-58683: fix(hcco): Don’t use a default OIDC client secret name when no secret name is provided #6398
• OCPBUGS-59674: Initial Changes to Support Self-managed Azure #6481
• OCPBUGS-59547: Remove code associated with Managed Identity v2 for ARO HCP for 4.19 #6459
• OCPBUGS-59493: Remove unused jq and rsync rpms #6457
• OCPBUGS-59101: Configure ClusterServiceLoadBalancerHea… #6409
• NO-JIRA: chore(deps): update konflux references #6383
• NO-JIRA: [release-4.19] CNTRLPLANE-1042: Disable createClusterNone for azure and scope down verifyResourceGroupLocationsMatch check #6392
• OCPBUGS-57660: [release-4.19] CORENET-6094: CNO: add FRR-k8s image #6374
• OCPBUGS-58335: Support proxy authentication when user/pass is included in URL #6370
• CNTRLPLANE-1044: chore(deps): update konflux references #6342
• ACM-21713: adding .git in .dockerignore to fix version info #6318
• CNV-61396: Sync RBAC for expansion support in kubevirt CSI driver #6255
• CNTRLPLANE-374: hcco: handle post-install creation of OIDC client secrets #6296
• OCPBUGS-57485: Don’t use /version for haproxy health checks #6292
• chore(deps): update konflux references #6189
• ACM-21734 Fixing Konflux EC violations #6303
• NO-JIRA: cpov1: set TerminationMessagePolicy on oas-trust-anchor-generator #6295
• OCPBUGS-57299: Reuse hosted cluster release and metadata providers #6250
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-52542: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #118
• Full changelog

insights-operator

• feat: add permissions to gather clusterrole (#1112) #1112
• fix: incorrect anonymization of domains (#1114) #1114
• feat: copy proxy envs from IO pod to gathering pods (#1103) #1103
• OCPBUGS-56781: Enhance insights-runtime-extractor errors (#1089) #1089
• OCPBUGS-56780: Report an error when the insights-runtime-extractor is not running (#1088) #1088
• Full changelog

kube-storage-version-migrator

• NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-19). #223
• Full changelog

kubevirt-csi-driver

• ”[release-4.19] OCPBUGS-58239: Implement volume expansion” #64
• Full changelog

machine-api-operator

• fix for OCPBUGS-60427: userDataSecret.name should be a Required value on AWS #1403
• OCPBUGS-59386: Enabled 10 concurrent reconciles on GCP #1391
• Full changelog

machine-config-operator

• OCPBUGS-60265: Reintroduce cronjob that deletes MCN v1alpha1 CRD #5243
• OCPBUGS-60224: Invalid architecture value found in annotation during 4.19 update #5227
• OCPBUGS-60080: use channel to signal controller shutdown #5217
• OCPBUGS-59928, OPNET-681: Support migration to NMState #5208
• OCPBUGS-59899: Add workaround fix for static pod race #5204
• OCPBUGS-59978: ARO cert rotate fix #5210
• OCPBUGS-59720: TestMCNPoolNameCustom should clean up resources properly #5186
• OCPBUGS-56750: Support NODEIP_HINT in IPI deployments too #5082
• OCPBUGS-58894: Remove podman-etcd machine config source #5169
• OCPBUGS-59208: Backport QE ported test for OCL component readiness #5125
• OCPBUGS-58820: Add control-plane label for master nodes on legacy clusters #5168
• OCPBUGS-57327: Do not set cpu system reserve below the default value #5117
• OCPBUGS-57689: Ensure the build controller restarts on upgrade #5127
• OCPBUGS-57930: OCPBUGS-57506: Boot image controller should correctly handle marketplace boot images #5135
• OCPBUGS-57929: add MachineConfiguration to CO related objects #5132
• OCPBUGS-56623: Give keepalived container chroot cap #5074
• OCPBUGS-57064: Fix typo in MCN’s MachineConfigNodePinnedImageSetsDegraded message #5105
• Full changelog

monitoring-plugin

• NO-JIRA: [release-4.19] OCPBUGS-60296: fix legend height to avoid scroll overlap #498
• NO-JIRA: improve consistency in tab string #496
• : NO-JIRA: update the i18n #495
• OCPBUGS-60129: feat: add alerting rules tab to dev console #488
• OU-943: remove broken useEffect #484
• OU-943: Manual Cherry Pick #474
• OU-594: Manual cherry pick incidents tab 4 19 #479
• OU-863: [release-4.19] Manual cherry pick add disconnect option #482
• OU-939: Fix virt persepective new silence link #478
• OU-928: reset showgraph state when unmounting button #462
• OU-744: [release-4.19]: fix: set correct pf color for gradient background on legacy dashboards legend #457
• OU-880: [release-4.19] Manual cherry pick ou 880 #458
• OU-842: [release-4.19] fix: override notistack dependency to avoid conflict #455
• Full changelog

multus-admission-controller

• OCPBUGS-58849: Update the github.com/golang/glog module to v1.2.4 #100
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-59640: Prevent accidental IP deallocation in statefulsets #375
• Full changelog

network-interface-bond-cni

• NO-JIRA:Add ci-operator yaml file #75
• Full changelog

network-metrics-daemon

• OCPBUGS-58851: Bump github.com/golang/glog to v1.2.4 (#110) #110
• OCPBUGS-60172: Replace e2e test image (#119) #119
• Full changelog

oauth-proxy

• OCPBUGS-58836: 4.19 kube 1.32 #318
• OCPBUGS-58343: release 4.19 CVE fixes #326
• OCPBUGS-58276: fix e2e tests #323
• Full changelog

oauth-server

• OCPBUGS-57282: Updating oauth-server-container image to be consistent with ART for 4.19 #183
• Full changelog

oc-mirror

• OCPBUGS-59976: v2/operator: support manifest lists with one arch (#1230) #1230
• OCPBUGS-59949: fixes the result output showing the wrong total (#1237) #1237
• OCPBUGS-57362: v2/mirror: retry in case of ContextDeadlineExceeded (#1199) #1199
• OCPBUGS-54622: cli/delete: fix workflow mode name output (#1222) #1222
• OCPBUGS-59799: Detect images from a Helm Chart with an aliased chart dependency (#1225) #1225
• OCPBUGS-59396: v2/archive: handle 0b mirror archive files (#1223) #1223
• OCPBUGS-58193: v2/archive: error d2m when no tar files found (#1200) (#1207) #1200
• OCPBUGS-58279: v2/defaults Fix rate limiting issues by enabling exponential backoff retries (#1205) #1205
• OCPBUGS-58271: Fixes the tag when rebuilt catalog by digest only (#1203) #1203
• OCPBUGS-57387: v2/archive: fix sanitization of . (#1188) #1188
• OCPBUGS-57461: v2/operator: add rebuilt catalog to tar file (#1187) #1187
• upgrades distribution to v3.0.0 (#1194) #1194
• OCPBUGS-56117: Make v2 blockedImages use regular expressions (#1163) #1163
• OCPBUGS-57451: deletes cosign tag based signatures (#1180) #1180
• Full changelog

olm-catalogd, olm-operator-controller

• UPSTREAM: <carry>: Safely handle changes to description fields (#2023) #2023
• Full changelog

openshift-apiserver

• OCPBUGS-57206: Wire dry run option to Image API server operations #524
• Full changelog

openshift-controller-manager

• OCPBUGS-57951: ignore error failing to find pull/push secrets #401
• Full changelog

openstack-cluster-api-controllers

• OCPBUGS-57891: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into release-4.19 #366
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-60525: Add NetworkPolicy as a supported kind #1047
• OCPBUGS-59258: 🐛 add catalog-operator control-plane-specific tolerations to unpack jobs #1037
• OCPBUGS-58259: Reduce Frequency of Update Requests for Copied CSVs (#3597) [release-4.19] #1030
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-48709: DownStream Merge Sync from 4.20 [08-06-2025] #2704
• OCPBUGS-48709: DownStream Merge Sync from 4.20 [07-28-2025] #2688
• OCPBUGS-48709, OCPBUGS-59530: DownStream Merge Sync from 4.20 [07-17-2025] #2675
• OCPBUGS-48709: DownStream Merge Sync from 4.20 [07-09-2025] #2660
• OCPBUGS-59106: DownStream Merge Sync from 4.20 [06-18-2025] #2642
• OCPBUGS-57061, OCPBUGS-57062: DownStream Merge Sync from 4.20 [05-30-2025] #2596
• Full changelog

stream-coreos, stream-coreos-extensions

• Merge #1853
• Merge #1851
• OCPBUGS-58122: [TNF] OCP Two Node with Fencing symlink begone! #1827
• Full changelog

tests

• OCPBUGS-60569: images/tests: Remove rteval #30124
• OCPBUGS-60429: Load our MCO’s OTE binary #30043
• OCPBUGS-59757: OCPBUGS-59758: Improve MCN test stability #30018
• OCPBUGS-60117: Enable test for LGW L2 #30052
• OCPBUGS-60234: Move the legacy container failures #30073
• OCPBUGS-60092: feat(azure): skip metrics collection for ARO HCP hypershift #30051
• OCPBUGS-59398: Skip MCN’s node degrade test on 4.19 #29990
• OCPBUGS-59391: [release-4.19]: OVNK BGP: Sync ovn-kubernetes bgp e2e tests #29989
• OCPBUGS-59226: bump watch count limits #29982
• OCPBUGS-57886: Bump 4.19 1.32.6 #29933
• OCPBUGS-58470: Update IPsec e2e test to validate NAT-T encapsulation option #29957
• OCPBUGS-57206: Backport pr 29834 to release-4.19 #29903
• OCPBUGS-58204: Fix MCN test on agent compact FIPS jobs #29943
• OCPBUGS-58053: [release-4.19] MCO-1768: Enable PIS testing on Metal #29936
• OCPBUGS-57436: Add MCO test suite to 4.19 #29918
• OCPBUGS-57930: Boot image controller should correctly handle marketplace boot images #29935
• OCPBUGS-57217: Stabilize custom MCP cleanup on MCN tests #29902
• Full changelog

vsphere-problem-detector

• OCPBUGS-60535: Check for number of FailureDomain-s in GetVCenter() #188
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...