# 4.21.0-ec.0
Created: 2025-09-17 00:42:16 +0000 UTC
Image Digest: `sha256:254783c8928b9d8b0ed4cb5257602c8995fa721b1f3b8c83b9a49690f5ccdd79`
## Changes from 4.20.0-ec.6
### Components
* Kubectl 1.33.3
* Kubernetes upgraded from 1.33.3 to 1.33.4
* Kubernetes Tests 1.33.3
* Red Hat Enterprise Linux CoreOS upgraded from 9.6.20250815-0 to 9.6.20250904-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: |
| InsightsRuntimeExtractor
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ImageVolume
(7 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| SigstoreImageVerification
(5 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| StoragePerformantSecurityPolicy
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| UpgradeStatus
(1 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| ClusterVersionOperatorConfiguration
(0 tests)| Disabled| Disabled| Enabled| Enabled| Enabled
(Changed)| Enabled
(Changed) |
| NoRegistryClusterOperations
(0 tests)| Disabled| Disabled| Disabled| Enabled| Disabled| Enabled
(Changed) |
| AWSDualStackInstall
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| AzureDualStackInstall
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| GCPDualStackInstall
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
### New images
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [693a8264](https://github.com/openshift/csi-external-snapshot-metadata/commit/693a826455777eaafc677bb2195dc071d184243b) `sha256:0e5cd2154de14f7d6cca8e40bdd6aa76fa23e38a17d2cc2b88fd7bbf4da53a1f`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [0e61642f](https://github.com/openshift/volume-data-source-validator/commit/0e61642f8d898ee199e42f37319864851dd3627f) `sha256:86129b25840a6b408681541e7fa4da63d66b0a29b6293b7f9baa2dc77573f892`
### Rebuilt images without code change
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [b37141b0](https://github.com/openshift/aws-karpenter-provider-aws/commit/b37141b051bdf790eb7e8f45b95f6bd7dc8140f4) `sha256:166ce327500e3d1acf7cb126cc77da203d310b1fb647d1d773131432ed22c1e9`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [088dcaf7](https://github.com/openshift/aws-encryption-provider/commit/088dcaf73f980b977ef4f5d2f99e2a93deb87eef) `sha256:a9b202bec794ed97c82bc9bd7bccd3cd4bcd04f8682b557166e91b6b611e9791`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [ea0b9944](https://github.com/openshift/azure-kubernetes-kms/commit/ea0b9944dddcc7043065a1fab5fca72dd17450da) `sha256:5281b79cb796ef6c76ada7bb151b611a052e969eb39de2085bff168f970ec5f9`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [6e2f3626](https://github.com/openshift/azure-service-operator/commit/6e2f362623720f7b6d634fbc424fbc61e4b481ae) `sha256:60d268b2dc8a877c1bd8018cdc4f3525ba9a96e0140e7631f1ccaee4dce5720e`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [f782ba74](https://github.com/openshift/cluster-api-provider-metal3/commit/f782ba747ed353721c84ceb754ca8403f94adb6a) `sha256:8a8c8d18f0e6d03a24b61af5eb711baa06eecceac0fece5a9d6a39eb6d3e0c22`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [fb678fec](https://github.com/openshift/cluster-api-provider-baremetal/commit/fb678fec5f7e08348b281341481f33a848204e50) `sha256:b3a06c1e5e24239235915189106847d97077db6004449cfb2986ac001e4a6f66`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [a7d0035a](https://github.com/openshift/baremetal-operator/commit/a7d0035a144d5b51c1401426bbe7ce518f24f154) `sha256:a64984aa6131db7dec568a102d52a1abbe9568cc7483cb8a8d99af421a1e4332`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [6553765e](https://github.com/openshift/baremetal-runtimecfg/commit/6553765e71c7f8d7db120af94473c9c0cb44d453) `sha256:8e129dff7ace5f37838c7b19d6c04a6a866443914ecdad8a4769ee4d311a7c2e`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [467e50fe](https://github.com/openshift/cloud-network-config-controller/commit/467e50feff5a56afbf9ccefc025781c9ccff8eca) `sha256:79e342a145270eed4199c6f6cd3625fda725ff43b3176087658f59a05ca957e7`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [74abc555](https://github.com/openshift/cluster-bootstrap/commit/74abc555111bac56a67957ef517ef086e4643c50) `sha256:55d9e1be6788792332934f06395e1aeccf3b4e745267608f849287748097d8b0`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [de1db297](https://github.com/openshift/cluster-api/commit/de1db2970e7fede7101e5a8188e74942ab6665e3) `sha256:c8f955784801554d8b9f16a0d162888b1cf768b1658268dd08a55d8d1e07fb07`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [0bbafe24](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/0bbafe24ade564bc62554251f36de90d524abcde) `sha256:11417ab9d94d91ee91072c7b3965e9c99c87f2789a0e89a674130b4a700a6f41`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [b04c7c12](https://github.com/openshift/cluster-image-registry-operator/commit/b04c7c121851704973a94a50e42af1425045899c) `sha256:e527e11500b75edcafd1fe5c77cc547f9c22261252024b68d1303ed73496ce1a`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [3ec30377](https://github.com/openshift/cluster-api-operator/commit/3ec30377ffff951dc9c0fc2257d290e4b4958465) `sha256:fe7bba599b472f0b1dc503c6faef65c0b8068956082aaa726540f953046892dd`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [f9b5b319](https://github.com/openshift/cluster-kube-scheduler-operator/commit/f9b5b31943f2be768af6373def4c8946a30d0ed6) `sha256:8ea7068f4ebe4b91cc9a4f3367032821c3dc2b17eace5edd976a6c3a75a7c488`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [ce275058](https://github.com/openshift/cluster-machine-approver/commit/ce2750589129dd20b3d1b6a5e7bb8c392d658c5c) `sha256:f1c01702dd9cebfb847a30c5c28083daa52b42f63eb489c20f9a290054e29a88`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [e4917368](https://github.com/openshift/cluster-olm-operator/commit/e4917368b6a547f97a0fb411fea90de246d1417e) `sha256:162a61defd6ac2a13a1856bc9292b272169defef39c1b3f7b4cb5f3b19e782ac`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [dfaeb8d5](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/dfaeb8d5fdf1f43df37916ec3d70f57ddebb1028) `sha256:abdf41752ce87a9677daed8a33af21776631706f19843434bc4b477511ebb07a`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [3e753854](https://github.com/openshift/cluster-policy-controller/commit/3e7538547c8f209c72083097a4ebaada6e9c46c5) `sha256:8066fdcf01a95b9a508488842e68066f9248c3160db0a5e72b9e5f1cb76a56e0`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [2438d7c8](https://github.com/openshift/configmap-reload/commit/2438d7c8e495201361d87da205649bc38fc4822b) `sha256:e7cb0b55c7321f82186da75a4beaef7ca70fc58bb590cc83dc9bf441a27430f6`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [184a9601](https://github.com/openshift/containernetworking-plugins/commit/184a96011a8cacb72319cdccb904271a99c5928d) `sha256:acd821e905cec9df5c217cfe58fb437c62d5559c5e7b975be5e2524c4bf08e01`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [184a9601](https://github.com/openshift/containernetworking-plugins/commit/184a96011a8cacb72319cdccb904271a99c5928d) `sha256:7542d0eed0a41195bfca18fad7a61cd8d1d63a33b3fb347fe879693c1cb9a3e6`
* [coredns](https://github.com/openshift/coredns) git [6f39336e](https://github.com/openshift/coredns/commit/6f39336e6da9dc77b2db140a96773c413d50a665) `sha256:8c2441ede68646d8c79e2cd01cb88f4f0844f2737107299f69769493cbe8750b`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [45239149](https://github.com/openshift/csi-external-attacher/commit/45239149cb387bcc51d944b802db0e804dc02688) `sha256:5f981868703363cdbec6a8d4f096e1afb1a21afb89b2830db371c98891f4a7b7`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [81fca036](https://github.com/openshift/csi-external-provisioner/commit/81fca03694bca1bae8606d8970472330e1e4fcad) `sha256:776a0791047533752d08b56d693e03cd1d7547fe78586e247951ea685e844368`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [9cd710b1](https://github.com/openshift/csi-external-resizer/commit/9cd710b1f1f0ce002af0af76709401ace3e48051) `sha256:9f072a5e7e67ef2989267ece30e46ecaf967a0726b4d4113f6afb68aca226528`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [42604822](https://github.com/openshift/csi-external-snapshotter/commit/42604822c25eb2aa0ecb017c24e328221b238eb9) `sha256:d6898ccf8552ed38b13451fbcec8e66f6468d0fe45178702bc683b1291eba3c5`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [1d6d6b27](https://github.com/openshift/csi-livenessprobe/commit/1d6d6b27460e58f24110c72ec9c96afe2c1d891d) `sha256:94c2501a169cc39eb0d865393bbde6fceeb44c1b1ae0f889df821a1beec955eb`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [3a2c732e](https://github.com/openshift/csi-node-driver-registrar/commit/3a2c732e73b19c947945256e9ea0581653988ab0) `sha256:633115a539404c629eed91cd3187529191346646a96c6eb1f763da50ceb9c8a8`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [42604822](https://github.com/openshift/csi-external-snapshotter/commit/42604822c25eb2aa0ecb017c24e328221b238eb9) `sha256:18b783ea699ed6ffcbb23efbc7eff6d349b0c0bec26c2c1e09b836be3f4bf5d5`
* [docker-builder](https://github.com/openshift/builder) git [ff595e4b](https://github.com/openshift/builder/commit/ff595e4bbf5301039fc62f0cdd7b5610605f633e) `sha256:bd5616573a014a3879a010d3fffe62fdb6a26e426d07bb5b63bf3aa3376801a1`
* [docker-registry](https://github.com/openshift/image-registry) git [88753376](https://github.com/openshift/image-registry/commit/887533765ee92e061fd44ad0b032aefd5b9b4e3c) `sha256:a7e8aeca1b5c1465594342ecccb05a05e656a5b652409af4fb15888859fe0834`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [9d55fd1a](https://github.com/openshift/driver-toolkit/commit/9d55fd1aaba05830f857132bd149ee3cf18cc20f) `sha256:80eb92bbb2bc65c446463ecd11faf1f02529062100d75f65b2fd8ba834e01004`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [b36788ed](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/b36788edd4c559cffd5f7f1b2e3e51b98c3e92b8) `sha256:b27e9330e88d6509ad454eb2cf732a769240c96d49f39509cb3b2467eae89307`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [36ab30f9](https://github.com/openshift/cloud-provider-ibm/commit/36ab30f90e87de0daa926d20ccda88c41abed191) `sha256:5d684fe91a26fe10bd5e4d7757e573880e638ab4b558f3ee96c9914464010363`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [19801353](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/19801353c97d08b1333177be45c848082af0643c) `sha256:19c3c4a5b99ba27baf5bec067cc7ecb1f86c280efcdc9d54c11e43b5a4eed163`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [21f405cc](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/21f405cce9573eee1c4f1cf95c0eb601ae77ed99) `sha256:351b7cc43c4450efe22f123e10bbe3518e62aa597c0cb2490b1e00dc29f6edf4`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [8b6396a4](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/8b6396a4c78f4791b7f3c5ec404a78b499f8546b) `sha256:aa087dc986f15725a43a36ee0b1bf7ec3ed889e012cc98f54bd3fa13eb5246d6`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [035805df](https://github.com/openshift/machine-api-provider-ibmcloud/commit/035805df5277c9f9c0cd9d4a44f59a08ab3ce031) `sha256:00f6968033b4ce54674318e8f553038e6112855ace93773be3c1d18adc050133`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [3d378369](https://github.com/openshift/insights-runtime-extractor/commit/3d3783698b20f5c27e4f35051b1450e47e789068) `sha256:a83c09ce770a0cb7834391761235489b54ad878316f2b4ca32c94cd99920db8d`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [3d378369](https://github.com/openshift/insights-runtime-extractor/commit/3d3783698b20f5c27e4f35051b1450e47e789068) `sha256:50c0f73e087305d3df10963299263b174819559bea666c6c02fce9aead732b38`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [cfa5ee9f](https://github.com/openshift/kubernetes-metrics-server/commit/cfa5ee9f1c94d7faec36de970033b9e329326f38) `sha256:51f97466ab865b6b1b3e0d9f1d71ccc50b5759ac1a15d4335bfb2406571ac8e6`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [a8c9a5f0](https://github.com/openshift/kube-state-metrics/commit/a8c9a5f08f675ae9afbaafdc47d7d2acb4a3709d) `sha256:1d14781d6eed1f84bfe80ada3757378db93ec23f265a6d0cfd1ddd208d9f2914`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [0f8a4eb8](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/0f8a4eb84ace9b746cf25d51d80dacf34ca5f953) `sha256:a5c3d74ecf5c55f711c94782a3f198861df27481da7c11ec766de390620de93f`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:4f40f3cb5f6f1dc6f9a1615fce00ed94c78174d7e6d51bacc98852e99ff8bccf`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [8b8dd30e](https://github.com/openshift/kubevirt-csi-driver/commit/8b8dd30ecd302e2b260c666702dffb19abf7c1aa) `sha256:20186d51c9310c8a7d56bf8bd377813fd144790726e6c056a505d78137fb6aaa`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:ab6791356bc923ebc8c87305729c47735e38bc7f2b2b605e4ab3eb84b4544ffd`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [64bfec79](https://github.com/openshift/machine-os-images/commit/64bfec79ae03b50b1da5b614a4cca2937ea9927d) `sha256:1d32bf95eb589300a0fc5ba56cc3b8adf728e8c1101de68ed06af89c687b3925`
* [metallb-frr](https://github.com/openshift/frr) git [fc0fe74f](https://github.com/openshift/frr/commit/fc0fe74f94b415b28d772dbc61f6323171a11b50) `sha256:9ae996c1dc1819b57e2b6ea8b4241cab1d5b3608d8bdba156a1606d723a1c94b`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [fc73c803](https://github.com/openshift/multus-admission-controller/commit/fc73c803caa1140e5a9115ceeb0e38504b001722) `sha256:206b2dca0713b97805a4486bfe5123be2874baebadda7f47e4f2fab9b2fa91c2`
* [multus-cni](https://github.com/openshift/multus-cni) git [cf0f68ec](https://github.com/openshift/multus-cni/commit/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe) `sha256:532a5692c62b132471479530f262ec08df2ddd52f7a1b8bdc38993837f6446bd`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [cf0f68ec](https://github.com/openshift/multus-cni/commit/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe) `sha256:e0823d4033f5d4f45966d4d428031bce7013b7b24960054454799c31055c7f10`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:16c7aafd19e0f856579a1d2b71e330c5423ad616fb3c695644a19a03a6eccc5d`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [43c89591](https://github.com/openshift/whereabouts-cni/commit/43c8959152a6ca8afdc73eaed624286628c2c22e) `sha256:85720af1d704664de35d93e88403c3ff1315d2cd647b74777b2a4184ed54b5f3`
* [must-gather](https://github.com/openshift/must-gather) git [f0c64742](https://github.com/openshift/must-gather/commit/f0c64742c79afce5e367ca2c7b830ad448abe1df) `sha256:36b6e3c8880f29ae61cc9527552a3dc71bd69893f9a03691cbbae079b3dd9c8c`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [b81340a9](https://github.com/openshift/network-metrics-daemon/commit/b81340a9fc6963fa3d64d215a12e8528ca797131) `sha256:36718606e10846e11b62a9e7a2b486a7781712d744ef6b34058cca0bf526a93e`
* [networking-console-plugin](https://github.com/openshift/networking-console-plugin) git [f09c58b9](https://github.com/openshift/networking-console-plugin/commit/f09c58b909fd6479e0099f7962ef73b70e280685) `sha256:2952e656b87ee04389a904ea2d88fa2317b8e91c4ec5188147d337babc1304d0`
* [oauth-server](https://github.com/openshift/oauth-server) git [81098796](https://github.com/openshift/oauth-server/commit/81098796234cbe75e656ffddd8a015953e0bb1c7) `sha256:3ca36e2ecfdba9ddbe6d0c5caa1130c5317f1a6162a26e50b734fa3cc132f74b`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [b04e2ef0](https://github.com/openshift/openshift-state-metrics/commit/b04e2ef05498c2a4504bd9396a3290c4f263fc37) `sha256:de62599cfbdb42a0b1ca63d6a8eeb47f1342975b2aacebfb665921c315a97ef8`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [30944900](https://github.com/openshift/cluster-api-provider-openstack/commit/30944900c974852654db4125082d616f9be4b1a6) `sha256:656d56a89fbb28bd2ca507d4b171c145690ae5c304a2ebbe6962b8c20ccbeebe`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [bf0d2c88](https://github.com/openshift/openstack-resource-controller/commit/bf0d2c88d6bf9bd90b24c979ea63dc37606b45fc) `sha256:56fc9a995003e819460a15ef13e3159bd041271efae64dfb29d57330e0e543d5`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:9ae79afa39ed9cd6b5846c100ee16f61ffcc04e10ce4c65ac6b0efce2586e6b0`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [76db379d](https://github.com/openshift/ovirt-csi-driver-operator/commit/76db379d075fdae94ca604f3fa83b0612b36ef8d) `sha256:9fc7232e3e009bcd0131067bc4cf3acb4bae3c14cd86b0c9c741daeede611bb7`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [f2529aee](https://github.com/openshift/prom-label-proxy/commit/f2529aee3dc2e9065de08b035d53151e007136fd) `sha256:b4d51f905e1675d02eef06dff99afddde44bdd3f4b2eada8a66694781f2058e8`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [419f2843](https://github.com/openshift/prometheus-alertmanager/commit/419f2843332265d44982920d6fb4db220ec26f91) `sha256:c3cfe08a80ff1d301cee8f70bb0e5bc4ea34eba9ef679ed780fca3aa617aef52`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [56f6158e](https://github.com/openshift/node_exporter/commit/56f6158e797ab80e5e0da2cb0ba701cb02902ef7) `sha256:0c84b3d1f30599187ed77cadd9ba6cb0c2d7b258750e6dbc06177c3a70a03ff7`
* [rhel-coreos](https://github.com/openshift/os) git [63e9aa40](https://github.com/openshift/os/commit/63e9aa4008eb65a02a2d70c9c086cbd8e18e149f) `sha256:13c26488a89937f736ae9d3232fe75c0b325cef572c085a5ee19c73eb4b6b70f`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [63e9aa40](https://github.com/openshift/os/commit/63e9aa4008eb65a02a2d70c9c086cbd8e18e149f) `sha256:a4b9e86ba8fd44b09a5a9fda482770b850fd4aa9ab85e995d2f69900d31126a5`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [bf2fa662](https://github.com/openshift/route-controller-manager/commit/bf2fa662f57f233d8541f94c4953e0dcd7a5ab20) `sha256:b0939fb179abf7def210d3ad11bf51fea0986abac78fc4012b91436da887bedb`
* [telemeter](https://github.com/openshift/telemeter) git [4c6036ee](https://github.com/openshift/telemeter/commit/4c6036eeb851ad6e0e837e214a2d08ffc8f0d1d0) `sha256:f1acf28a73fea588d4da5512a214423df1dc9b4a4aed070bbc2c48f45a06eaec`
* [thanos](https://github.com/openshift/thanos) git [c0951032](https://github.com/openshift/thanos/commit/c0951032b34b832d0f5467e616999490a284101b) `sha256:db5108869168351557a36bf530acbdf2fce8c2d59bccff7597e425be85636734`
### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/d81ac6569ccedffd1a5a05ffc4767dec27e418cb)
* NO-ISSUE: [master] Bump OCP versions: 4.14, 4.16, 4.19, 4.17, 4.18, 4.15, 4.20 (#7987) [#7987](https://github.com/openshift/assisted-service/pull/7987)
* NO-ISSUE: Update Konflux references (#7984) [#7984](https://github.com/openshift/assisted-service/pull/7984)
* [MGMT-21688](https://issues.redhat.com/browse/MGMT-21688): Order pre-nm-config after NM-wait-online to fix race on full ISO (#7977) [#7977](https://github.com/openshift/assisted-service/pull/7977)
* [MGMT-19854](https://issues.redhat.com/browse/MGMT-19854): Fix Agent deletion across namespaces and prevent duplicate host IDs (#7966) [#7966](https://github.com/openshift/assisted-service/pull/7966)
* [MGMT-21658](https://issues.redhat.com/browse/MGMT-21658): Move virtualization bundle operators to supported (#7969) [#7969](https://github.com/openshift/assisted-service/pull/7969)
* [MGMT-21278](https://issues.redhat.com/browse/MGMT-21278): Add metric to track Cluster/Host Monitoring cycle time (#7961) [#7961](https://github.com/openshift/assisted-service/pull/7961)
* NO-ISSUE: Update Konflux references (#7964) [#7964](https://github.com/openshift/assisted-service/pull/7964)
* [ACM-21902](https://issues.redhat.com/browse/ACM-21902): Merge system ca-bundle into spoke client (#7935) [#7935](https://github.com/openshift/assisted-service/pull/7935)
* [MGMT-19758](https://issues.redhat.com/browse/MGMT-19758): TNF clusters (#7867) [#7867](https://github.com/openshift/assisted-service/pull/7867)
* [MGMT-21395](https://issues.redhat.com/browse/MGMT-21395): Add monitoring label and Prometheus RBAC for supported OLM operators (#7949) [#7949](https://github.com/openshift/assisted-service/pull/7949)
* NO-ISSUE: Update Konflux references (#7810) [#7810](https://github.com/openshift/assisted-service/pull/7810)
* NO-ISSUE: [master] Bump OCP versions: 4.19 (#7948) [#7948](https://github.com/openshift/assisted-service/pull/7948)
* NO-ISSUE: [master] Bump OCP versions: 4.18, 4.16, 4.14 (#7941) [#7941](https://github.com/openshift/assisted-service/pull/7941)
* [MGMT-21274](https://issues.redhat.com/browse/MGMT-21274): Report duration of monitored hosts (#7933) [#7933](https://github.com/openshift/assisted-service/pull/7933)
* NO-ISSUE: Add yoavsc0302 to OWNERS_ALIASES file (#7939) [#7939](https://github.com/openshift/assisted-service/pull/7939)
* [Full changelog](https://github.com/openshift/assisted-service/compare/4ef833fbd2b910022db047983563b90ab46835be...d81ac6569ccedffd1a5a05ffc4767dec27e418cb)
### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/a68b920cd884948e90ba31811e2577a5d54535cc)
* NO-ISSUE: Update Konflux references (#1235) [#1235](https://github.com/openshift/assisted-installer/pull/1235)
* NO-ISSUE: Update Konflux references (#1225) [#1225](https://github.com/openshift/assisted-installer/pull/1225)
* Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.20 (#1144) [#1144](https://github.com/openshift/assisted-installer/pull/1144)
* Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.20 (#1146) [#1146](https://github.com/openshift/assisted-installer/pull/1146)
* [MGMT-21454](https://issues.redhat.com/browse/MGMT-21454): update Go to 1.24 and adapt unit-tests (#1220) [#1220](https://github.com/openshift/assisted-installer/pull/1220)
* NO-ISSUE: Update Konflux references (#1216) [#1216](https://github.com/openshift/assisted-installer/pull/1216)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/7552020777916700241bba7021ce1d4777923bcc...a68b920cd884948e90ba31811e2577a5d54535cc)
### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/f6aa4cd4b00d18ba7f5fa3b0a039049c851e2ffd)
* NO-ISSUE: Update Konflux references (#1086) [#1086](https://github.com/openshift/assisted-installer-agent/pull/1086)
* Update ghw package to v0.19.0 to resolve LVMs issue (#1093) [#1093](https://github.com/openshift/assisted-installer-agent/pull/1093)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/8857831ffeed8a38c87c7d9c93ce1542216b745a...f6aa4cd4b00d18ba7f5fa3b0a039049c851e2ffd)
### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/3ae48f72fc311267ce09fa3f1088b3719f51a138)
* [AGENT-1286](https://issues.redhat.com/browse/AGENT-1286): Red Hat Konflux kflux-prd-rh02 update agent-installer-utils [#143](https://github.com/openshift/agent-installer-utils/pull/143)
* [OCPBUGS-60920](https://issues.redhat.com/browse/OCPBUGS-60920): Update ISOBuilder OCP 4.19 Dev Preview Release notes [#141](https://github.com/openshift/agent-installer-utils/pull/141)
* [AGENT-1252](https://issues.redhat.com/browse/AGENT-1252): Add Dockerfile for OVE UI ISO [#138](https://github.com/openshift/agent-installer-utils/pull/138)
* [AGENT-1256](https://issues.redhat.com/browse/AGENT-1256): Fix hyperconverged and kube descheduler contents [#140](https://github.com/openshift/agent-installer-utils/pull/140)
* [AGENT-1256](https://issues.redhat.com/browse/AGENT-1256): Version the ISO builder configuration and script [#128](https://github.com/openshift/agent-installer-utils/pull/128)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/a2eb918cc19da450c879882cc902b78f5594ffeb...3ae48f72fc311267ce09fa3f1088b3719f51a138)
### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/11b24a2c7452ef683a1d989f1016e6e815f5c112)
* [OCPBUGS-57685](https://issues.redhat.com/browse/OCPBUGS-57685): Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.20 [#84](https://github.com/openshift/apiserver-network-proxy/pull/84)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/26a4e67d80752e9ec961c518f57283adb70616e8...11b24a2c7452ef683a1d989f1016e6e815f5c112)
### [aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, azure-workload-identity-webhook, csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, gcp-cloud-controller-manager, gcp-cluster-api-controllers, gcp-machine-controllers, gcp-pd-csi-driver, gcp-pd-csi-driver-operator, hyperkube, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, kube-proxy, machine-image-customization-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/6efb6a95323fe35285877dcdade237444b35cae0)
* [OCPBUGS-60507](https://issues.redhat.com/browse/OCPBUGS-60507): Unrevert bump to v1.33.4 [#2441](https://github.com/openshift/kubernetes/pull/2441)
* [OCPBUGS-56594](https://issues.redhat.com/browse/OCPBUGS-56594): UPSTREAM: <carry>: backporting fix for concurrent map iteration and write [#2443](https://github.com/openshift/kubernetes/pull/2443)
* [OCPBUGS-61196](https://issues.redhat.com/browse/OCPBUGS-61196): UPSTREAM: 133625: Remove patch/update from ServiceCIDR API conformanc… [#2444](https://github.com/openshift/kubernetes/pull/2444)
* [OCPBUGS-60946](https://issues.redhat.com/browse/OCPBUGS-60946): UPSTREAM: 133425: Fix SELinux label comparison [#2417](https://github.com/openshift/kubernetes/pull/2417)
* [OCPBUGS-60851](https://issues.redhat.com/browse/OCPBUGS-60851): UPSTREAM: <carry>: Revert "Bump 1.33.4" [#2425](https://github.com/openshift/kubernetes/pull/2425)
* NO-JIRA: UPSTREAM: <carry>: Filter featuregates by FeatureGate label instead of using OffByDefault label [#2398](https://github.com/openshift/kubernetes/pull/2398)
* [OCPBUGS-60507](https://issues.redhat.com/browse/OCPBUGS-60507): Bump 1.33.4 [#2416](https://github.com/openshift/kubernetes/pull/2416)
* [STOR-2530](https://issues.redhat.com/browse/STOR-2530): Storage performant security policy (update audit labels) [#2409](https://github.com/openshift/kubernetes/pull/2409)
* [STOR-1064](https://issues.redhat.com/browse/STOR-1064): improve CRD handling in VolumePopulator test [#2419](https://github.com/openshift/kubernetes/pull/2419)
* [Full changelog](https://github.com/openshift/kubernetes/compare/7b25b18c196a8b62a1f7d3c4b6399464974de625...6efb6a95323fe35285877dcdade237444b35cae0)
### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/c805b240dc45c054ff83d57ae945772feef90ea4)
* [SPLAT-2465](https://issues.redhat.com/browse/SPLAT-2465): Changed LB VM creation to not be hard coded and use from variables.ps1 [#9926](https://github.com/openshift/installer/pull/9926)
* [OCPBUGS-61111](https://issues.redhat.com/browse/OCPBUGS-61111): Allow user to BYO private zone without specifying name [#9922](https://github.com/openshift/installer/pull/9922)
* [CORS-4044](https://issues.redhat.com/browse/CORS-4044), [CORS-4045](https://issues.redhat.com/browse/CORS-4045), [CORS-4046](https://issues.redhat.com/browse/CORS-4046), [CORS-4047](https://issues.redhat.com/browse/CORS-4047), [CORS-4048](https://issues.redhat.com/browse/CORS-4048), [CORS-4049](https://issues.redhat.com/browse/CORS-4049), [CORS-4050](https://issues.redhat.com/browse/CORS-4050), [CORS-4051](https://issues.redhat.com/browse/CORS-4051): Add private dns zone section to GCP install config [#9792](https://github.com/openshift/installer/pull/9792)
* [OCPBUGS-60949](https://issues.redhat.com/browse/OCPBUGS-60949): Update the RHCOS 4.20 bootimage metadata [#9916](https://github.com/openshift/installer/pull/9916)
* [OCPBUGS-60687](https://issues.redhat.com/browse/OCPBUGS-60687): PowerVS: Add lon04 support [#9905](https://github.com/openshift/installer/pull/9905)
* [SPLAT-2463](https://issues.redhat.com/browse/SPLAT-2463): Added ability to configure CoresPerSocket [#9912](https://github.com/openshift/installer/pull/9912)
* [CORS-3652](https://issues.redhat.com/browse/CORS-3652): RHCOS Stream Marketplace Images [#9329](https://github.com/openshift/installer/pull/9329)
* [OCPBUGS-60634](https://issues.redhat.com/browse/OCPBUGS-60634): Added logic to clean up potential leftover spbm entity configs [#9894](https://github.com/openshift/installer/pull/9894)
* [OCPBUGS-60600](https://issues.redhat.com/browse/OCPBUGS-60600): node-joner ignore error if SSH key was not found [#9908](https://github.com/openshift/installer/pull/9908)
* [CORS-4061](https://issues.redhat.com/browse/CORS-4061): migrate AWS SDK to v2 in quota/aws [#9890](https://github.com/openshift/installer/pull/9890)
* [CORS-4056](https://issues.redhat.com/browse/CORS-4056): migrate AWS SDK to v2 in asset/machines/aws [#9889](https://github.com/openshift/installer/pull/9889)
* [OCPBUGS-57364](https://issues.redhat.com/browse/OCPBUGS-57364): custom-dns: Set PrivateZone and PublicZone to nil in the DNS manifest [#9886](https://github.com/openshift/installer/pull/9886)
* [OCPBUGS-55499](https://issues.redhat.com/browse/OCPBUGS-55499): Misleading error when confidentialCompute: Enabled [#9848](https://github.com/openshift/installer/pull/9848)
* [OCPBUGS-60162](https://issues.redhat.com/browse/OCPBUGS-60162): reject installation into byo vpc/subnets owned by another cluster [#9883](https://github.com/openshift/installer/pull/9883)
* [OCPBUGS-60545](https://issues.redhat.com/browse/OCPBUGS-60545): Azure: change LB and pubic IP skus to Standard [#9898](https://github.com/openshift/installer/pull/9898)
* [AGENT-1205](https://issues.redhat.com/browse/AGENT-1205): Update agent-installer-ui tar path [#9896](https://github.com/openshift/installer/pull/9896)
* [OCPBUGS-59104](https://issues.redhat.com/browse/OCPBUGS-59104): Set kernel dual-stack arg for all platforms [#9865](https://github.com/openshift/installer/pull/9865)
* [Full changelog](https://github.com/openshift/installer/compare/3b1baa02860f3e0e190ffe9b076c133a5ce5b581...c805b240dc45c054ff83d57ae945772feef90ea4)
### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/a43428189603f12ae190703cb725f66f742fbe52)
* [OCPBUGS-59951](https://issues.redhat.com/browse/OCPBUGS-59951): must-gather: Fix usage checker for custom commands [#2068](https://github.com/openshift/oc/pull/2068)
* [OCPBUGS-60989](https://issues.redhat.com/browse/OCPBUGS-60989): pkg/cli/admin/release/info: Mention elided first-parent, non-merge commits [#2086](https://github.com/openshift/oc/pull/2086)
* [OCPBUGS-60877](https://issues.redhat.com/browse/OCPBUGS-60877): pkg/cli/admin/inspectalerts: Pass through --certificate-authority, etc. [#2083](https://github.com/openshift/oc/pull/2083)
* NO-JIRA: Remove mentioning about IRC channel in README [#2082](https://github.com/openshift/oc/pull/2082)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/oc/compare/1c54ec07271de9a954826ae08d9b1b1c423fe0f2...a43428189603f12ae190703cb725f66f742fbe52)
### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/69a6090e6d2ddedb585d9e0583628028ebe4b26f)
* [OCPBUGS-60078](https://issues.redhat.com/browse/OCPBUGS-60078): ccoctl: aws to use proper issuer url on subsequent runs [#904](https://github.com/openshift/cloud-credential-operator/pull/904)
* NO-JIRA: docs: update sts migration to cause less service interruption [#903](https://github.com/openshift/cloud-credential-operator/pull/903)
* NO-JIRA: Add a badge in the repo's README file to auto-refresh the wiki weekly. [#898](https://github.com/openshift/cloud-credential-operator/pull/898)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/57fbe1a2d19b6bee8d75564cd6cea2f399687b3d...69a6090e6d2ddedb585d9e0583628028ebe4b26f)
### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/11e57aa35590d3481288e09003c9109e0bfc62ce)
* NO-JIRA: Bump library go rm co dep [#782](https://github.com/openshift/cluster-authentication-operator/pull/782)
* [OCPBUGS-59909](https://issues.redhat.com/browse/OCPBUGS-59909): Don't cache server errors when checking for password grant support [#781](https://github.com/openshift/cluster-authentication-operator/pull/781)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/cc54807110ed0408b90fb2675bbc0514a9aaf551...11e57aa35590d3481288e09003c9109e0bfc62ce)
### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/d883d0e6dbb74f0839631ebc7a584669f0e955a3)
* [AUTOSCALE-242](https://issues.redhat.com/browse/AUTOSCALE-242), [AUTOSCALE-244](https://issues.redhat.com/browse/AUTOSCALE-244): 1.33.0 upstream rebase [#365](https://github.com/openshift/kubernetes-autoscaler/pull/365)
* [OCPBUGS-54231](https://issues.redhat.com/browse/OCPBUGS-54231): revert openshift replica fix [#369](https://github.com/openshift/kubernetes-autoscaler/pull/369)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/74faa33ea9c8ef8871b13d13574098f37b071fe9...d883d0e6dbb74f0839631ebc7a584669f0e955a3)
### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/147e5a7ff20b46ade7dd932b47e06ca82729f5e8)
* [AUTOSCALE-244](https://issues.redhat.com/browse/AUTOSCALE-244): Allow cluster-operator service account to patch machinesets/scale subresource [#352](https://github.com/openshift/cluster-autoscaler-operator/pull/352)
* [AUTOSCALE-244](https://issues.redhat.com/browse/AUTOSCALE-244): Prepare for 4.20 and fix missing volumeattachments rbac [#351](https://github.com/openshift/cluster-autoscaler-operator/pull/351)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/2ab4313c49cffc9a3340f76a5607907340dce03d...147e5a7ff20b46ade7dd932b47e06ca82729f5e8)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/7c032738a133c6061997d6a8062c841d9f164090)
* [METAL-1449](https://issues.redhat.com/browse/METAL-1449): optionally deploy IPE [#490](https://github.com/openshift/cluster-baremetal-operator/pull/490)
* [METAL-1546](https://issues.redhat.com/browse/METAL-1546): Set privileged to true for ironic-proxy container so it works with ironic-image custom directories [#502](https://github.com/openshift/cluster-baremetal-operator/pull/502)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/fcb8f932a942a4dd3c2d8389e1fd50826f295ff4...7c032738a133c6061997d6a8062c841d9f164090)
### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/64fd75d91fed293329d2cd681ea3fa703fad6bff)
* [OCPBUGS-54703](https://issues.redhat.com/browse/OCPBUGS-54703): Fix conversion of Machines without MachineSet [#351](https://github.com/openshift/cluster-capi-operator/pull/351)
* [OCPCLOUD-2992](https://issues.redhat.com/browse/OCPCLOUD-2992): migration e2e for deleting machine [#345](https://github.com/openshift/cluster-capi-operator/pull/345)
* [OCPBUGS-61044](https://issues.redhat.com/browse/OCPBUGS-61044): Finish bumping CAPA to v2.9.0 [#350](https://github.com/openshift/cluster-capi-operator/pull/350)
* [OCPCLOUD-2871](https://issues.redhat.com/browse/OCPCLOUD-2871): Machine conversion for the delete-machine annotation and unit tests [#347](https://github.com/openshift/cluster-capi-operator/pull/347)
* [OCPCLOUD-2711](https://issues.redhat.com/browse/OCPCLOUD-2711): Implement VAP to prevent usage of unsupported AWSMachineSpec fields [#333](https://github.com/openshift/cluster-capi-operator/pull/333)
* NO-JIRA: lint: Replace tenv with usetesting [#346](https://github.com/openshift/cluster-capi-operator/pull/346)
* [OSASINFRA-3690](https://issues.redhat.com/browse/OSASINFRA-3690), [OSASINFRA-3691](https://issues.redhat.com/browse/OSASINFRA-3691): Add OpenStack CAPI-MAPI translation layer [#188](https://github.com/openshift/cluster-capi-operator/pull/188)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/4337d04134301bfb8357c9e6044d727b85d89064...64fd75d91fed293329d2cd681ea3fa703fad6bff)
### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/e355ad389d1d09be1a83f024f54b15e844982d0a)
* [OCPBUGS-59251](https://issues.redhat.com/browse/OCPBUGS-59251): Default cloud.conf if no configmap is found [#404](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/404)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/86f8c6dd7fce9d42cfbe5ac1d4b2528ba726f9c4...e355ad389d1d09be1a83f024f54b15e844982d0a)
### [cluster-config-api](https://github.com/openshift/api/tree/a30da32c0ca818bc4e431a3b302d0baecddf6f8f)
* [CORS-4136](https://issues.redhat.com/browse/CORS-4136): Add Feature gates for AWS, Azure and GCP Dual Stack support [#2430](https://github.com/openshift/api/pull/2430)
* [OCPBUGS-60901](https://issues.redhat.com/browse/OCPBUGS-60901): Add default value for MachineHealthCheck's maxUnhealthy to the description [#2462](https://github.com/openshift/api/pull/2462)
* [AGENT-1262](https://issues.redhat.com/browse/AGENT-1262): set NoRegistryClusterOperations as techPreviewNoUpgrade [#2432](https://github.com/openshift/api/pull/2432)
* machineconfiguration/OWNERS: Drop me [#2446](https://github.com/openshift/api/pull/2446)
* [OTA-923](https://issues.redhat.com/browse/OTA-923): Promote `ClusterVersionOperatorConfiguration` to TechPreview [#2457](https://github.com/openshift/api/pull/2457)
* [OCPNODE-3121](https://issues.redhat.com/browse/OCPNODE-3121): Graduate ImageVolume to GA [#2453](https://github.com/openshift/api/pull/2453)
* [STOR-2549](https://issues.redhat.com/browse/STOR-2549): Move StoragePerformantSecurityPolicy GA [#2456](https://github.com/openshift/api/pull/2456)
* [OTA-1580](https://issues.redhat.com/browse/OTA-1580): Promote `UpgradeStatus` to Default [#2418](https://github.com/openshift/api/pull/2418)
* [CORS-4184](https://issues.redhat.com/browse/CORS-4184): Add STS IAMCredentials and OAuth Service for GCP Endpoint Overrides [#2444](https://github.com/openshift/api/pull/2444)
* OWNERS: update approvers/reviewers [#2455](https://github.com/openshift/api/pull/2455)
* OCPBUGS-58212 Remove InsightsRuntimeExtractor Feature gate [#2419](https://github.com/openshift/api/pull/2419)
* [OCPNODE-3187](https://issues.redhat.com/browse/OCPNODE-3187): Promote SigstoreVerificatoin to Default [#2340](https://github.com/openshift/api/pull/2340)
* [Full changelog](https://github.com/openshift/api/compare/88b2b21555f3c12755740b197cbd5b9b4ca11e19...a30da32c0ca818bc4e431a3b302d0baecddf6f8f)
### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/657754e2beaed6295ff28bb0f7813cb1c9ce35b2)
* [CNTRLPLANE-1311](https://issues.redhat.com/browse/CNTRLPLANE-1311): set up openshift-tests-extension of cluster-config-operator and add a sanity test [#448](https://github.com/openshift/cluster-config-operator/pull/448)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/f018aa0ec624fd2a06bf4f4806b5eec03794316b...657754e2beaed6295ff28bb0f7813cb1c9ce35b2)
### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/3880c9659829c9904e58a943050e8dfd4c9a79cb)
* [CNTRLPLANE-385](https://issues.redhat.com/browse/CNTRLPLANE-385): enable readonly root filesystem [#242](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/242)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/4c1ee7bae69aecce6893b4f5e8f8c74117c884d5...3880c9659829c9904e58a943050e8dfd4c9a79cb)
### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/63a93b05b131a3f7ee8b482a5cb4f0c1eac8660e)
* NO-JIRA: Add davidesalerno to OWNERS [#447](https://github.com/openshift/cluster-dns-operator/pull/447)
* [OCPBUGS-59781](https://issues.redhat.com/browse/OCPBUGS-59781): Read only root filesystem [#445](https://github.com/openshift/cluster-dns-operator/pull/445)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/1ed968a2fd1a609099a5deae2723fb619bf4c699...63a93b05b131a3f7ee8b482a5cb4f0c1eac8660e)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/215998939f5223da916622c71fd07d17656faf6b)
* [ETCD-590](https://issues.redhat.com/browse/ETCD-590): configure probes based on quota size [#1460](https://github.com/openshift/cluster-etcd-operator/pull/1460)
* NO-JIRA: Add priority field to prevent early shutdown [#1476](https://github.com/openshift/cluster-etcd-operator/pull/1476)
* [OCPBUGS-60941](https://issues.redhat.com/browse/OCPBUGS-60941): add individual context to the health check [#1474](https://github.com/openshift/cluster-etcd-operator/pull/1474)
* [OCPBUGS-60237](https://issues.redhat.com/browse/OCPBUGS-60237): Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace [#1471](https://github.com/openshift/cluster-etcd-operator/pull/1471)
* [OCPBUGS-60522](https://issues.redhat.com/browse/OCPBUGS-60522): Set terminationMessagePolicy to FallbackToLogsOnError on TNF job pods [#1468](https://github.com/openshift/cluster-etcd-operator/pull/1468)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/8b6738972a66c5b7543eb34a9dadd6b38d8d57bb...215998939f5223da916622c71fd07d17656faf6b)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/e3ae45d527d0d587b991d34ea276fb671fad0165)
* [OCPBUGS-60859](https://issues.redhat.com/browse/OCPBUGS-60859): Fix logic on gatewayapi test cleanup [#1273](https://github.com/openshift/cluster-ingress-operator/pull/1273)
* [OCPBUGS-53432](https://issues.redhat.com/browse/OCPBUGS-53432): deflake TestIngressControllerCustomEndpoints by proper waiting for CCM to be ready [#1267](https://github.com/openshift/cluster-ingress-operator/pull/1267)
* [OCPBUGS-59139](https://issues.redhat.com/browse/OCPBUGS-59139): Increase assertExpectedDNSRecords timeouts [#1271](https://github.com/openshift/cluster-ingress-operator/pull/1271)
* [NE-2066](https://issues.redhat.com/browse/NE-2066): Set degraded=true when OSSM 3 can't be installed [#1268](https://github.com/openshift/cluster-ingress-operator/pull/1268)
* [OCPBUGS-60620](https://issues.redhat.com/browse/OCPBUGS-60620): e2e: Deflake tests by using ReplicaSet for test workload [#1262](https://github.com/openshift/cluster-ingress-operator/pull/1262)
* [OCPBUGS-54966](https://issues.redhat.com/browse/OCPBUGS-54966): Improve detection of missing DNSRecord for Gateway [#1212](https://github.com/openshift/cluster-ingress-operator/pull/1212)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/afb2160975399f4249d9d100641ce32a33c262f1...e3ae45d527d0d587b991d34ea276fb671fad0165)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/0bec046c8c10682390e2a20ae4f416a2d8589f40)
* Revert "OCPBUGS-57049: certrotation: move test case name outside of AutoRegenerateAfterOfflineExpiry" [#1907](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1907)
* [OCPBUGS-57049](https://issues.redhat.com/browse/OCPBUGS-57049): certrotation: move test case name outside of AutoRegenerateAfterOfflineExpiry [#1870](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1870)
* [CNTRLPLANE-1248](https://issues.redhat.com/browse/CNTRLPLANE-1248): Add README to test extension [#1904](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1904)
* [OCPBUGS-60628](https://issues.redhat.com/browse/OCPBUGS-60628): certrotation: ensure that all rotated secrets/configmaps have RefreshOnlyWhenExpired set [#1900](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1900)
* [CNTRLPLANE-1248](https://issues.redhat.com/browse/CNTRLPLANE-1248): Standardized scaffolding for tests extension [#1899](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1899)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/36917f5efeab9d4bd102640345e95d571533c5a5...0bec046c8c10682390e2a20ae4f416a2d8589f40)
### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/3b20c534b1b92d46055147c4f82f69b2ad3044c9)
* [CNTRLPLANE-1275](https://issues.redhat.com/browse/CNTRLPLANE-1275): Fixing arch issue [#869](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/869)
* [CNTRLPLANE-1275](https://issues.redhat.com/browse/CNTRLPLANE-1275): Fixed hardcode arch issue [#866](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/866)
* [CNTRLPLANE-1275](https://issues.redhat.com/browse/CNTRLPLANE-1275): Add JUnit reporter configuration and README for OTE [#863](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/863)
* [CNTRLPLANE-1275](https://issues.redhat.com/browse/CNTRLPLANE-1275): set up openshift-tests-extension and add a sanity test [#859](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/859)
* [OCPBUGS-60473](https://issues.redhat.com/browse/OCPBUGS-60473): Optimistically update Kube Server and Client CA bundles [#854](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/854)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/604d31c26346b4d44bda63f50aeb376c91f9a31e...3b20c534b1b92d46055147c4f82f69b2ad3044c9)
### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/8f8e94713cf1f0fe373836b147fd8190340deef8)
* [CNTRLPLANE-1306](https://issues.redhat.com/browse/CNTRLPLANE-1306): Fixing arch issue [#130](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/130)
* [CNTRLPLANE-1306](https://issues.redhat.com/browse/CNTRLPLANE-1306): Fix arch issue [#128](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/128)
* [CNTRLPLANE-1306](https://issues.redhat.com/browse/CNTRLPLANE-1306): set up openshift-tests-extension and add a sanity test [#126](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/126)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/436cf8575fc51e15d4aee5191ddff0a34c58b8d4...8f8e94713cf1f0fe373836b147fd8190340deef8)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/4496a0a83b65e566038715a1f2405ba194c10439)
* [OCPBUGS-56568](https://issues.redhat.com/browse/OCPBUGS-56568): chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind [#2660](https://github.com/openshift/cluster-monitoring-operator/pull/2660)
* [OCPBUGS-61135](https://issues.redhat.com/browse/OCPBUGS-61135): Revert "MON-4343: Cleanup deprecate pa config" [#2658](https://github.com/openshift/cluster-monitoring-operator/pull/2658)
* [OCPBUGS-60948](https://issues.redhat.com/browse/OCPBUGS-60948): Add selinux_warning_controller_selinux_volume_conflict to telemetry [#2653](https://github.com/openshift/cluster-monitoring-operator/pull/2653)
* [MON-4343](https://issues.redhat.com/browse/MON-4343): Cleanup deprecate pa config [#2651](https://github.com/openshift/cluster-monitoring-operator/pull/2651)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2654](https://github.com/openshift/cluster-monitoring-operator/pull/2654)
* NO-JIRA: chore: drop check for AlertmanagerV1 [#2650](https://github.com/openshift/cluster-monitoring-operator/pull/2650)
* [OCPBUGS-56158](https://issues.redhat.com/browse/OCPBUGS-56158): Bump prometheus-operator to v0.85.0 [#2652](https://github.com/openshift/cluster-monitoring-operator/pull/2652)
* [OCPBUGS-34568](https://issues.redhat.com/browse/OCPBUGS-34568), [OCPBUGS-35095](https://issues.redhat.com/browse/OCPBUGS-35095), [OCPBUGS-60689](https://issues.redhat.com/browse/OCPBUGS-60689), [OCPBUGS-60691](https://issues.redhat.com/browse/OCPBUGS-60691), [OCPBUGS-60692](https://issues.redhat.com/browse/OCPBUGS-60692): non-HA alert cases [#2630](https://github.com/openshift/cluster-monitoring-operator/pull/2630)
* [OCPBUGS-58475](https://issues.redhat.com/browse/OCPBUGS-58475): Enforce secure TLS settings in CMO server [#2647](https://github.com/openshift/cluster-monitoring-operator/pull/2647)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2642](https://github.com/openshift/cluster-monitoring-operator/pull/2642)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/db430aa2955638808603a98817aff73864139782...4496a0a83b65e566038715a1f2405ba194c10439)
### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/5aff8b2228dbc94bb302f8e907a660720268aac5)
* [CORENET-6327](https://issues.redhat.com/browse/CORENET-6327): Update linter [#2783](https://github.com/openshift/cluster-network-operator/pull/2783)
* [CORENET-6306](https://issues.redhat.com/browse/CORENET-6306): Set RunAsUser for network-node-identity [#2780](https://github.com/openshift/cluster-network-operator/pull/2780)
* [OCPBUGS-57815](https://issues.redhat.com/browse/OCPBUGS-57815): Updating cluster-network-operator-container image to be consistent with ART for 4.20 [#2728](https://github.com/openshift/cluster-network-operator/pull/2728)
* [CORENET-6092](https://issues.redhat.com/browse/CORENET-6092), [CORENET-6130](https://issues.redhat.com/browse/CORENET-6130), [CORENET-6261](https://issues.redhat.com/browse/CORENET-6261): Implement PreconfiguredUDNAddresses API changes [#2743](https://github.com/openshift/cluster-network-operator/pull/2743)
* [MGMT-21485](https://issues.redhat.com/browse/MGMT-21485): Enable dpu-host mode that matches DPF requirements [#2778](https://github.com/openshift/cluster-network-operator/pull/2778)
* [CORENET-6276](https://issues.redhat.com/browse/CORENET-6276): Use priorityClass from HostedControlPlane for OVN and NNI [#2769](https://github.com/openshift/cluster-network-operator/pull/2769)
* [CORENET-6290](https://issues.redhat.com/browse/CORENET-6290): Restrict access to mounted secrets in ovnkube-control-plane [#2774](https://github.com/openshift/cluster-network-operator/pull/2774)
* [OCPBUGS-55962](https://issues.redhat.com/browse/OCPBUGS-55962): Allow overriding OVN-Kubernetes configuration [#2752](https://github.com/openshift/cluster-network-operator/pull/2752)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/6688e9af512089c29308f68e22c156db56ea2d6e...5aff8b2228dbc94bb302f8e907a660720268aac5)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/3c890f038bc1da82298b2633c8c61f466e0b3e68)
* E2E: llc: Create testing namespace before Runtime tests (#1382) [#1382](https://github.com/openshift/cluster-node-tuning-operator/pull/1382)
* [OCPBUGS-60463](https://issues.redhat.com/browse/OCPBUGS-60463): E2E: ovs dynamic pinning test case fixes (#1376) [#1376](https://github.com/openshift/cluster-node-tuning-operator/pull/1376)
* [OCPBUGS-41219](https://issues.redhat.com/browse/OCPBUGS-41219): Only enable timer.migration on RT kernel (#1384) [#1384](https://github.com/openshift/cluster-node-tuning-operator/pull/1384)
* [OCPBUGS-60838](https://issues.redhat.com/browse/OCPBUGS-60838): e2e: arm: add validation tests for hugepages with 4k and 64k kernelPageSize (#1363) [#1363](https://github.com/openshift/cluster-node-tuning-operator/pull/1363)
* [OCPBUGS-60461](https://issues.redhat.com/browse/OCPBUGS-60461): E2E: llc test fix: Get updated Performance profile before modifying (#1373) [#1373](https://github.com/openshift/cluster-node-tuning-operator/pull/1373)
* Fix hack/update-codegen.sh (#1379) [#1379](https://github.com/openshift/cluster-node-tuning-operator/pull/1379)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/5217f8a3c378949f269cfddd854e53c47b4942d3...3c890f038bc1da82298b2633c8c61f466e0b3e68)
### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/9cfa5679a8ac1e5a68eea32179d9e069da85dfcf)
* [CNTRLPLANE-1257](https://issues.redhat.com/browse/CNTRLPLANE-1257): Add README to test extension [#624](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/624)
* [CNTRLPLANE-1257](https://issues.redhat.com/browse/CNTRLPLANE-1257): set up openshift-tests-extension and add a sanity test [#623](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/623)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/216cf83ffe631a7dbe58c7eb87acb39983f36a46...9cfa5679a8ac1e5a68eea32179d9e069da85dfcf)
### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/62b3623c6a2860e7a8cc368dbe76e767508cd261)
* [OCPBUGS-60665](https://issues.redhat.com/browse/OCPBUGS-60665): Periodic sync of supported OCP samples [#646](https://github.com/openshift/cluster-samples-operator/pull/646)
* [OCPBUGS-60606](https://issues.redhat.com/browse/OCPBUGS-60606): Periodic sync of OKD samples - Return to Open Liberty 25.0.0.3 to fix failing tests [#649](https://github.com/openshift/cluster-samples-operator/pull/649)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/adba804614f66141e016c4322ef9aa3df4ba7b3a...62b3623c6a2860e7a8cc368dbe76e767508cd261)
### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/cfcc1f7f1f2c702118cd4b182d04c12defac6d30)
* [OCPBUGS-61161](https://issues.redhat.com/browse/OCPBUGS-61161): Fix logging e2e also faster cleanup [#611](https://github.com/openshift/cluster-storage-operator/pull/611)
* [OCPBUGS-60948](https://issues.redhat.com/browse/OCPBUGS-60948): Rename the SELinuxMount metric to :count [#609](https://github.com/openshift/cluster-storage-operator/pull/609)
* [STOR-1064](https://issues.redhat.com/browse/STOR-1064): add volume-data-source-validator controller [#592](https://github.com/openshift/cluster-storage-operator/pull/592)
* [STOR-2576](https://issues.redhat.com/browse/STOR-2576): Collect overall SELinux warning controller metrics [#608](https://github.com/openshift/cluster-storage-operator/pull/608)
* [STOR-2463](https://issues.redhat.com/browse/STOR-2463): add csi-external-snapshot-metadata to image-references [#606](https://github.com/openshift/cluster-storage-operator/pull/606)
* [STOR-2549](https://issues.redhat.com/browse/STOR-2549): Remove TP label from VAP files [#607](https://github.com/openshift/cluster-storage-operator/pull/607)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/4d37b18cafc620f938bc289564a8de786d716edb...cfcc1f7f1f2c702118cd4b182d04c12defac6d30)
### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/c40e7b9b60c62690a25333fc54ae0d3705474afb)
* Revert "OCPNODE-3611: manifests.rhel/0000_90_openshift-cluster-image-policy: Drop TechPreviewNoUpgrade limitation" [#83](https://github.com/openshift/cluster-update-keys/pull/83)
* [OCPNODE-3611](https://issues.redhat.com/browse/OCPNODE-3611): manifests.rhel/0000_90_openshift-cluster-image-policy: Drop TechPreviewNoUpgrade limitation [#82](https://github.com/openshift/cluster-update-keys/pull/82)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/569dfed552ceeeeea1dd3dd5f97b33e3a5703137...c40e7b9b60c62690a25333fc54ae0d3705474afb)
### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/b21fbd24bd0512b38e9dab463383e662d1c92a01)
* [OTA-1531](https://issues.redhat.com/browse/OTA-1531): Rework error handling in FeatureGate processing [#1206](https://github.com/openshift/cluster-version-operator/pull/1206)
* NO-JIRA: Extend the development documentation regarding building and publishing a payload image [#1227](https://github.com/openshift/cluster-version-operator/pull/1227)
* NO-ISSUE: Update golang version to 1.24 in go.mod [#1230](https://github.com/openshift/cluster-version-operator/pull/1230)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/9de00ba8fb8330b3a1b440396dc2c5dbe974119b...b21fbd24bd0512b38e9dab463383e662d1c92a01)
### [console](https://github.com/openshift/console/tree/0748392def188dbb070308c32c1fbb3457624f95)
* NO-JIRA: Update plugin SDK CHANGELOG post 4.18 package publish [#15463](https://github.com/openshift/console/pull/15463)
* [OCPBUGS-61139](https://issues.redhat.com/browse/OCPBUGS-61139): Correct the ordering of Catalog categories to be alphabetized [#15454](https://github.com/openshift/console/pull/15454)
* [CONSOLE-4610](https://issues.redhat.com/browse/CONSOLE-4610): Drop use of ceateModalLauncher from Topology package [#15446](https://github.com/openshift/console/pull/15446)
* [OCPBUGS-61090](https://issues.redhat.com/browse/OCPBUGS-61090): fix typo in update approval strategy label [#15452](https://github.com/openshift/console/pull/15452)
* [CONSOLE-4683](https://issues.redhat.com/browse/CONSOLE-4683): Refactor group action factory [#15404](https://github.com/openshift/console/pull/15404)
* [OCPBUGS-60756](https://issues.redhat.com/browse/OCPBUGS-60756): delete pvc action item is placed in the middle of action list [#15447](https://github.com/openshift/console/pull/15447)
* [CONSOLE-4597](https://issues.redhat.com/browse/CONSOLE-4597): Migrate enzyme "__tests__/components/graphs" unit tests to React Testing Library [#15397](https://github.com/openshift/console/pull/15397)
* [OCPBUGS-52165](https://issues.redhat.com/browse/OCPBUGS-52165), [OCPBUGS-60753](https://issues.redhat.com/browse/OCPBUGS-60753): Fix issues with Raw/Download in resource logs page [#15436](https://github.com/openshift/console/pull/15436)
* NO-JIRA: Remove Lucifergene from Code Reviewers List [#15449](https://github.com/openshift/console/pull/15449)
* [CONSOLE-4607](https://issues.redhat.com/browse/CONSOLE-4607): Drop createModalLauncher from knative-plugin and use useOverlay hook instead [#15349](https://github.com/openshift/console/pull/15349)
* [ODC-7803](https://issues.redhat.com/browse/ODC-7803): Adjust `MAX_UPLOAD_SIZE` formula [#15428](https://github.com/openshift/console/pull/15428)
* [OCPBUGS-56091](https://issues.redhat.com/browse/OCPBUGS-56091): fix log line overlap when Wrap lines is enabled [#15426](https://github.com/openshift/console/pull/15426)
* [CONSOLE-4661](https://issues.redhat.com/browse/CONSOLE-4661): Fix double scrollbar [#15427](https://github.com/openshift/console/pull/15427)
* [CONSOLE-4235](https://issues.redhat.com/browse/CONSOLE-4235): Update Xterm.js CSS [#15425](https://github.com/openshift/console/pull/15425)
* [CONSOLE-4647](https://issues.redhat.com/browse/CONSOLE-4647): Refactor removeVolume action to use RemoveVolumeModal hook launcher [#15230](https://github.com/openshift/console/pull/15230)
* [CONSOLE-4661](https://issues.redhat.com/browse/CONSOLE-4661): Align LogViewer toolbar with CodeEditor toolbar [#15414](https://github.com/openshift/console/pull/15414)
* [ODC-7802](https://issues.redhat.com/browse/ODC-7802): Add e2e for custom icon flow [#15416](https://github.com/openshift/console/pull/15416)
* [CONSOLE-4689](https://issues.redhat.com/browse/CONSOLE-4689): Replace deprecated "withHandlePromise" with "usePromiseHandler" in console [#15346](https://github.com/openshift/console/pull/15346)
* [CONSOLE-4235](https://issues.redhat.com/browse/CONSOLE-4235): Bump xterm to 5.5.0 [#15408](https://github.com/openshift/console/pull/15408)
* [CONSOLE-4500](https://issues.redhat.com/browse/CONSOLE-4500): Segment Analytics integration code cleanup [#15288](https://github.com/openshift/console/pull/15288)
* [CONSOLE-4630](https://issues.redhat.com/browse/CONSOLE-4630): React.SFC -> FCC [#15421](https://github.com/openshift/console/pull/15421)
* [CONSOLE-4609](https://issues.redhat.com/browse/CONSOLE-4609): Refactor `toggleCloudShellExpanded` [#15365](https://github.com/openshift/console/pull/15365)
* [ODC-7808](https://issues.redhat.com/browse/ODC-7808): Migrate enzyme "packages/knative-plugin" unit tests to React Testing Library [#15390](https://github.com/openshift/console/pull/15390)
* [CONSOLE-4688](https://issues.redhat.com/browse/CONSOLE-4688): Remove maxMenuHeight from ConsoleSelect [#15415](https://github.com/openshift/console/pull/15415)
* [CONSOLE-4631](https://issues.redhat.com/browse/CONSOLE-4631): Run 'react' namespace import codemod [#15412](https://github.com/openshift/console/pull/15412)
* [CONSOLE-4692](https://issues.redhat.com/browse/CONSOLE-4692): Enable SNC to true in access-modes, admission-webhook-warnings, cluster-configuration [#15401](https://github.com/openshift/console/pull/15401)
* [CONSOLE-4686](https://issues.redhat.com/browse/CONSOLE-4686): Refactor subscription.tsx menuActions to accept actions… [#15395](https://github.com/openshift/console/pull/15395)
* And 6 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/9f4a18aaed3f9c71365d2fff91e2dc515bafbc5f...0748392def188dbb070308c32c1fbb3457624f95)
### [console-operator](https://github.com/openshift/console-operator/tree/76ae5dafe7640111fa8e9c7f745122e4844d4a5d)
* [OCPBUGS-60782](https://issues.redhat.com/browse/OCPBUGS-60782): pluginOrder field should only contain available plugins [#1038](https://github.com/openshift/console-operator/pull/1038)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console-operator/compare/8565552fb48fd38fb49496ac1c4341d3d9d9e696...76ae5dafe7640111fa8e9c7f745122e4844d4a5d)
### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/5e0f8d1b545899fda27c5e1cc8707d33cba1b534)
* [CORENET-6300](https://issues.redhat.com/browse/CORENET-6300): Port egress-router CNI plugin from iptables to nftables [#90](https://github.com/openshift/egress-router-cni/pull/90)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/85353bb936a289b8b817f7b437afacdf7458c667...5e0f8d1b545899fda27c5e1cc8707d33cba1b534)
### [etcd](https://github.com/openshift/etcd/tree/9c065d4d842c8de57806426c13201413b4d595e2)
* [OCPBUGS-60874](https://issues.redhat.com/browse/OCPBUGS-60874): Revert "OCPBUGS-52181: Ensure cluster id changes during force-new-cluster" [#339](https://github.com/openshift/etcd/pull/339)
* [Full changelog](https://github.com/openshift/etcd/compare/b5ad268120ccd50185b9ec00ff1c4e5aca379f84...9c065d4d842c8de57806426c13201413b4d595e2)
### [haproxy-router](https://github.com/openshift/router/tree/47274e213d8a511066a9492b73c9b8eccc353571)
* NO-JIRA: Add davidesalerno to OWNERS [#670](https://github.com/openshift/router/pull/670)
* [Full changelog](https://github.com/openshift/router/compare/7c50294cfbc9a7c0d3c715de56fb92dadeefb8e6...47274e213d8a511066a9492b73c9b8eccc353571)
### [hypershift](https://github.com/openshift/hypershift/tree/d29713d06741fb622fd0deed29c9c073b5c61495)
* [CNTRLPLANE-203](https://issues.redhat.com/browse/CNTRLPLANE-203): feat(sharedingress): add Azure Public IP tagging support for router service [#6730](https://github.com/openshift/hypershift/pull/6730)
* [OCPBUGS-61219](https://issues.redhat.com/browse/OCPBUGS-61219): fix: cleanup old PKI operator deployment during upgrades [#6758](https://github.com/openshift/hypershift/pull/6758)
* [OCPBUGS-61282](https://issues.redhat.com/browse/OCPBUGS-61282): rename CCM deployments to align with 4.19 [#6757](https://github.com/openshift/hypershift/pull/6757)
* NO-JIRA: fix(api): enhance API NodePool's API docs [#6753](https://github.com/openshift/hypershift/pull/6753)
* NO-JIRA: chore(tests): validate conditions after executing tests [#6738](https://github.com/openshift/hypershift/pull/6738)
* [OCPBUGS-60376](https://issues.redhat.com/browse/OCPBUGS-60376): fix token rotation causing Karpenter to stop working [#6561](https://github.com/openshift/hypershift/pull/6561)
* NO-JIRA: contrib: add utility for cleaning roles [#5945](https://github.com/openshift/hypershift/pull/5945)
* [CNTRLPLANE-267](https://issues.redhat.com/browse/CNTRLPLANE-267): Restructure the OWNERS usage in the whole repo [#5784](https://github.com/openshift/hypershift/pull/5784)
* [AUTOSCALE-332](https://issues.redhat.com/browse/AUTOSCALE-332): allow karpenter-operator to support rhobs monitoring [#6704](https://github.com/openshift/hypershift/pull/6704)
* [CNTRLPLANE-1370](https://issues.redhat.com/browse/CNTRLPLANE-1370): feat(supportedversion): add OCP 4.21 support; update e2e constants and tests [#6739](https://github.com/openshift/hypershift/pull/6739)
* NO-JIRA: docs(create-jira-items): document OCPBUGS issue creation and default versions [#6741](https://github.com/openshift/hypershift/pull/6741)
* [OCPBUGS-61066](https://issues.redhat.com/browse/OCPBUGS-61066): fix(cpo/ingress): do not set aws-load-balancer-subnets on private router Service [#6732](https://github.com/openshift/hypershift/pull/6732)
* chore(deps): update konflux references [#6725](https://github.com/openshift/hypershift/pull/6725)
* [CNTRLPLANE-1236](https://issues.redhat.com/browse/CNTRLPLANE-1236): feat(aws): support EC2 CapacityReservationPreference in NodePool [#6694](https://github.com/openshift/hypershift/pull/6694)
* [OCPBUGS-60152](https://issues.redhat.com/browse/OCPBUGS-60152): test/e2e: enable EnsureAppLabel check for 4.19 [#6697](https://github.com/openshift/hypershift/pull/6697)
* [CNTRLPLANE-202](https://issues.redhat.com/browse/CNTRLPLANE-202): feat(sharedingress): add infrastructure node scheduling preferences [#6709](https://github.com/openshift/hypershift/pull/6709)
* [CNTRLPLANE-1361](https://issues.redhat.com/browse/CNTRLPLANE-1361): fix(infra/azure): make role assignment creation idempotent and robust [#6722](https://github.com/openshift/hypershift/pull/6722)
* NO-JIRA: docs(rules): expand Jira item creation guidelines and epic details [#6705](https://github.com/openshift/hypershift/pull/6705)
* chore(deps): update konflux references [#6669](https://github.com/openshift/hypershift/pull/6669)
* NO-JIRA: fix(contrib): Make setup_aks_mi.sh executable [#6708](https://github.com/openshift/hypershift/pull/6708)
* [OCPBUGS-60891](https://issues.redhat.com/browse/OCPBUGS-60891): set default goaway-chance to 0.001 [#6696](https://github.com/openshift/hypershift/pull/6696)
* [OCPBUGS-60649](https://issues.redhat.com/browse/OCPBUGS-60649): add availibility-prober to all capi-providers [#6695](https://github.com/openshift/hypershift/pull/6695)
* [STOR-1064](https://issues.redhat.com/browse/STOR-1064): fix(cpo): add missing image to env replacement [#6691](https://github.com/openshift/hypershift/pull/6691)
* [OCPBUGS-60907](https://issues.redhat.com/browse/OCPBUGS-60907): Update Azure overrides to include HC deletion time bug fix [#6698](https://github.com/openshift/hypershift/pull/6698)
* [CNTRLPLANE-935](https://issues.redhat.com/browse/CNTRLPLANE-935): e2e test for new Azure metrics [#6315](https://github.com/openshift/hypershift/pull/6315)
* [OSASINFRA-3675](https://issues.redhat.com/browse/OSASINFRA-3675): Add credentials to openshift-manila-csi-driver namespace for Hypershift [#6683](https://github.com/openshift/hypershift/pull/6683)
* [STOR-1064](https://issues.redhat.com/browse/STOR-1064): add validator image to CSO manifest [#6686](https://github.com/openshift/hypershift/pull/6686)
* [OCPBUGS-59194](https://issues.redhat.com/browse/OCPBUGS-59194): fix(registry): delete ValidatingAdmissionPolicy and binding during HCP deletion for ARO cleanup [#6616](https://github.com/openshift/hypershift/pull/6616)
* [OCPBUGS-60653](https://issues.redhat.com/browse/OCPBUGS-60653): test(e2e): Workaround for external oidc tests to bypass the teardown … [#6684](https://github.com/openshift/hypershift/pull/6684)
* [CNTRLPLANE-1209](https://issues.redhat.com/browse/CNTRLPLANE-1209): exposing IPv4OVNKubernetesConfig for hcp's ClusterNetworking [#6554](https://github.com/openshift/hypershift/pull/6554)
* NO-JIRA: Update-overrides for ARO HCP Fixes [#6685](https://github.com/openshift/hypershift/pull/6685)
* NO-JIRA: docs(cursor): add Jira creation rule for CNTRLPLANE/OCPBUGS with components and story template [#6680](https://github.com/openshift/hypershift/pull/6680)
* NO-JIRA: fix(doc): remove note about mandatory annotation in BM deployment [#6682](https://github.com/openshift/hypershift/pull/6682)
* [OCPBUGS-60651](https://issues.redhat.com/browse/OCPBUGS-60651): fix mce 2.10 Konflux EC violation [#6676](https://github.com/openshift/hypershift/pull/6676)
* [OCPBUGS-60602](https://issues.redhat.com/browse/OCPBUGS-60602): Cache Azure KMS TokenCredential for ARO HCP and clarify CPO credentials cache naming [#6673](https://github.com/openshift/hypershift/pull/6673)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/hypershift/compare/c99da6383cc28db97842c028888e82b753f1cc8c...d29713d06741fb622fd0deed29c9c073b5c61495)
### [insights-operator](https://github.com/openshift/insights-operator/tree/b82259ab1186594ff62bd063ee5145ded9a09e95)
* remove me from the OWNERS list (#1127) [#1127](https://github.com/openshift/insights-operator/pull/1127)
* Revert "Rerun make update after read-only filesystem securitycontext added. (#1122)" (#1128) [#1122](https://github.com/openshift/insights-operator/pull/1122)
* Rerun make update after read-only filesystem securitycontext added. (#1122) [#1122](https://github.com/openshift/insights-operator/pull/1122)
* [OCPBUGS-60611](https://issues.redhat.com/browse/OCPBUGS-60611): virt launcher logs gatherer (#1110) [#1110](https://github.com/openshift/insights-operator/pull/1110)
* [Full changelog](https://github.com/openshift/insights-operator/compare/737b59bd13f6b7f8dcd4446b1d0d2cb3e554baa5...b82259ab1186594ff62bd063ee5145ded9a09e95)
### [keepalived-ipfailover](https://github.com/openshift/images/tree/9fd8d2569557a1860b065af24d8e89ba54654de8)
* Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.21 [#213](https://github.com/openshift/images/pull/213)
* [Full changelog](https://github.com/openshift/images/compare/bb4535b7069cab2de0174be29bccccde6d623b4f...9fd8d2569557a1860b065af24d8e89ba54654de8)
### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/b9134351be37c43408334047d8eb85d0ac01fe4e)
* [OCPBUGS-57550](https://issues.redhat.com/browse/OCPBUGS-57550): Updating kube-rbac-proxy-container image to be consistent with ART for 4.20 [#122](https://github.com/openshift/kube-rbac-proxy/pull/122)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/bc1ca29e2b6b50f15ece8db3990277276cacff0c...b9134351be37c43408334047d8eb85d0ac01fe4e)
### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/e3846e13997f0d6e93b4b2e740212379e4500dc2)
* [OCPBUGS-60901](https://issues.redhat.com/browse/OCPBUGS-60901): bump openshift/api [#1407](https://github.com/openshift/machine-api-operator/pull/1407)
* [OCPBUGS-60145](https://issues.redhat.com/browse/OCPBUGS-60145): Added [Serial] to serial e2e tests [#1404](https://github.com/openshift/machine-api-operator/pull/1404)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/d9777350195fbc4ccd9ebaba0b8ad63a7b09ed4b...e3846e13997f0d6e93b4b2e740212379e4500dc2)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/063455217c390b9196f1577378cbb8a6454de527)
* [OCPBUGS-56558](https://issues.redhat.com/browse/OCPBUGS-56558): Recheck `generatedByControllerVersion` annotation prior to deleting a degraded MC [#5259](https://github.com/openshift/machine-config-operator/pull/5259)
* [OCPBUGS-61016](https://issues.redhat.com/browse/OCPBUGS-61016): Fix wait failure on MCO pods [#5270](https://github.com/openshift/machine-config-operator/pull/5270)
* [OPNET-683](https://issues.redhat.com/browse/OPNET-683): Automatically copy over configs applied by MCO [#5162](https://github.com/openshift/machine-config-operator/pull/5162)
* [MCO-1743](https://issues.redhat.com/browse/MCO-1743): Irreconcilable validations reporting [#5254](https://github.com/openshift/machine-config-operator/pull/5254)
* [MCO-1536](https://issues.redhat.com/browse/MCO-1536): Add new ImageBuildDegraded status option to MCP [#5251](https://github.com/openshift/machine-config-operator/pull/5251)
* [OCPBUGS-57979](https://issues.redhat.com/browse/OCPBUGS-57979): Update Kubelet Config MachineConfig upon FeatureGate update [#5228](https://github.com/openshift/machine-config-operator/pull/5228)
* [OCPBUGS-60559](https://issues.redhat.com/browse/OCPBUGS-60559): Update the OnClusterBuild payload tests to reflect the validation rule requiring MCP & MOSC names to match [#5249](https://github.com/openshift/machine-config-operator/pull/5249)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/03a3677b298e05ba870cdf0f26f4db16f80e64ae...063455217c390b9196f1577378cbb8a6454de527)
### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/fba8b082f1bd01e67d9df1af5f2d06e9e3811f3c)
* [OU-988](https://issues.redhat.com/browse/OU-988): automation - cleanup for all scripts and fix on MP injection [#523](https://github.com/openshift/monitoring-plugin/pull/523)
* [RHINENG-20424](https://issues.redhat.com/browse/RHINENG-20424): Incident ID filter for the Incidents Page [#520](https://github.com/openshift/monitoring-plugin/pull/520)
* [OU-897](https://issues.redhat.com/browse/OU-897): automation OU-721 and hygiene of existing scripts [#519](https://github.com/openshift/monitoring-plugin/pull/519)
* NO-JIRA: automation - regression testing for metrics - changes [#516](https://github.com/openshift/monitoring-plugin/pull/516)
* [RHINENG-20424](https://issues.redhat.com/browse/RHINENG-20424): improved filters for severity and state [#515](https://github.com/openshift/monitoring-plugin/pull/515)
* [OU-501](https://issues.redhat.com/browse/OU-501): automation - dashboards legacy and export csv [#517](https://github.com/openshift/monitoring-plugin/pull/517)
* [OBSINTA-796](https://issues.redhat.com/browse/OBSINTA-796): Refactor Cypress Commands Structure [#518](https://github.com/openshift/monitoring-plugin/pull/518)
* NO-JIRA: Test config interactive setup [#510](https://github.com/openshift/monitoring-plugin/pull/510)
* [OBSINTA-776](https://issues.redhat.com/browse/OBSINTA-776): Incident detection tests [#509](https://github.com/openshift/monitoring-plugin/pull/509)
* [OU-781](https://issues.redhat.com/browse/OU-781): fix links in incidents table [#511](https://github.com/openshift/monitoring-plugin/pull/511)
* [OU-769](https://issues.redhat.com/browse/OU-769): implement a custom tooltip for incidents [#513](https://github.com/openshift/monitoring-plugin/pull/513)
* [OU-675](https://issues.redhat.com/browse/OU-675): Update UIPlugins to golang 1.24 [#512](https://github.com/openshift/monitoring-plugin/pull/512)
* [OU-932](https://issues.redhat.com/browse/OU-932): automation - metrics [#503](https://github.com/openshift/monitoring-plugin/pull/503)
* NO-JIRA: README.md update [#507](https://github.com/openshift/monitoring-plugin/pull/507)
* NO-JIRA: test: Fix operator sidebar navigation [#505](https://github.com/openshift/monitoring-plugin/pull/505)
* [OU-692](https://issues.redhat.com/browse/OU-692): Update montioring-plugin to NodeJS v22 [#506](https://github.com/openshift/monitoring-plugin/pull/506)
* [OU-849](https://issues.redhat.com/browse/OU-849): upgrade jsx pre-procesor to "react-jsx" [#502](https://github.com/openshift/monitoring-plugin/pull/502)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/bf09741e73706aefceb74554ed4362c760ef0fb8...fba8b082f1bd01e67d9df1af5f2d06e9e3811f3c)
### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/ef99d3d4cf1a15abfa55ef71b75c0eaa18a791ce)
* Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.21 (#75) [#75](https://github.com/openshift/multus-networkpolicy/pull/75)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/278ec20e795c3a590500e789716be7fcc4d7107b...ef99d3d4cf1a15abfa55ef71b75c0eaa18a791ce)
### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/dd3c4d0b886138d974022b963e72f2e90293abfe)
* [OCPBUGS-60846](https://issues.redhat.com/browse/OCPBUGS-60846): upstream sync 01092025 [#90](https://github.com/openshift/bond-cni/pull/90)
* [Full changelog](https://github.com/openshift/bond-cni/compare/54ad71eeeb2c9e13d3ee5d03685dff5e1b1a02dc...dd3c4d0b886138d974022b963e72f2e90293abfe)
### [network-tools](https://github.com/openshift/network-tools/tree/26d09174cbd92386469e777e3bf49bfa95d035d5)
* NO-JIRA: Bug backlog tooling: add arg for listing stale bugs (>4 months) [#158](https://github.com/openshift/network-tools/pull/158)
* NO-JIRA: add tooling to reduce bug backlog toil for viewing bz comment updates [#157](https://github.com/openshift/network-tools/pull/157)
* NO-JIRA:Remove Tim from members list [#153](https://github.com/openshift/network-tools/pull/153)
* [OCPBUGS-57894](https://issues.redhat.com/browse/OCPBUGS-57894): Updating ose-network-tools-container image to be consistent with ART for 4.20 [#150](https://github.com/openshift/network-tools/pull/150)
* [Full changelog](https://github.com/openshift/network-tools/compare/4e89460d0cb07851bf39049ec30f7ed1c177e34e...26d09174cbd92386469e777e3bf49bfa95d035d5)
### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/7033e0fa18593c8814cf14d0f10a9226d7d93c45)
* [CNTRLPLANE-5](https://issues.redhat.com/browse/CNTRLPLANE-5): Bump openshift/kubernetes-apiserver [#142](https://github.com/openshift/oauth-apiserver/pull/142)
* [CNTRLPLANE-1305](https://issues.redhat.com/browse/CNTRLPLANE-1305): Update openshift/oauth-apiserver to latest Kubernetes 1.33 version [#139](https://github.com/openshift/oauth-apiserver/pull/139)
* [CNTRLPLANE-1259](https://issues.redhat.com/browse/CNTRLPLANE-1259): Add README to test extension [#141](https://github.com/openshift/oauth-apiserver/pull/141)
* [CNTRLPLANE-1259](https://issues.redhat.com/browse/CNTRLPLANE-1259): Update Jira component name to oauth-apiserver [#140](https://github.com/openshift/oauth-apiserver/pull/140)
* [OCPBUGS-57611](https://issues.redhat.com/browse/OCPBUGS-57611): Updating ose-oauth-apiserver-container image to be consistent with ART for 4.20 [#137](https://github.com/openshift/oauth-apiserver/pull/137)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/9bdfbf687d1938005639c676dae80411fa5ba8f1...7033e0fa18593c8814cf14d0f10a9226d7d93c45)
### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/6649cb8a7c4dd7d1c4e03c9b0bc7594089fba991)
* [CNTRLPLANE-1313](https://issues.redhat.com/browse/CNTRLPLANE-1313): Update openshift/oauth-proxy to latest Kubernetes 1.33 version [#330](https://github.com/openshift/oauth-proxy/pull/330)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/d9c18ed44dc83a18bd26f7a30ee91a1fe556d6a1...6649cb8a7c4dd7d1c4e03c9b0bc7594089fba991)
### [oc-mirror](https://github.com/openshift/oc-mirror/tree/d42ff12456f3f227bfd42a769c4d5780dd1c6087)
* fixes parser issue in the dependabot yaml (#1251) [#1251](https://github.com/openshift/oc-mirror/pull/1251)
* Bump helm.sh/helm/v3 in /v2 in the oc-mirror-v2 group (#1248) [#1248](https://github.com/openshift/oc-mirror/pull/1248)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/830295b307bd69277365704448cbb3d520cf2b4a...d42ff12456f3f227bfd42a769c4d5780dd1c6087)
### [olm-catalogd](https://github.com/openshift/operator-framework-operator-controller/tree/e18d0b29945c357b49bfb36a5f2dc9bf7ac39616)
* NO-ISSUE: Synchronize From Upstream Repositories [#456](https://github.com/openshift/operator-framework-operator-controller/pull/456)
* [OCPBUGS-60868](https://issues.redhat.com/browse/OCPBUGS-60868): Revert "Handle service-ca cert availability/rotation" [#460](https://github.com/openshift/operator-framework-operator-controller/pull/460)
* NO-ISSUE: Synchronize From Upstream Repositories [#453](https://github.com/openshift/operator-framework-operator-controller/pull/453)
* NO-ISSUE: Synchronize From Upstream Repositories [#449](https://github.com/openshift/operator-framework-operator-controller/pull/449)
* And 14 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/82f63dc73b08b02294a04cd2105bad8fc776c2b6...e18d0b29945c357b49bfb36a5f2dc9bf7ac39616)
### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/e18d0b29945c357b49bfb36a5f2dc9bf7ac39616)
* NO-ISSUE: Synchronize From Upstream Repositories [#456](https://github.com/openshift/operator-framework-operator-controller/pull/456)
* [OCPBUGS-60868](https://issues.redhat.com/browse/OCPBUGS-60868): Revert "Handle service-ca cert availability/rotation" [#460](https://github.com/openshift/operator-framework-operator-controller/pull/460)
* NO-ISSUE: Synchronize From Upstream Repositories [#453](https://github.com/openshift/operator-framework-operator-controller/pull/453)
* NO-ISSUE: Synchronize From Upstream Repositories [#449](https://github.com/openshift/operator-framework-operator-controller/pull/449)
* NO-ISSUE: Synchronize From Upstream Repositories [#444](https://github.com/openshift/operator-framework-operator-controller/pull/444)
* And 14 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/1a9f810a3338d1d31b4a9a3d63a1390c67a2a8f7...e18d0b29945c357b49bfb36a5f2dc9bf7ac39616)
### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/e817f8439e1379485594f56d74c2160c44db0864)
* [CNTRLPLANE-5](https://issues.redhat.com/browse/CNTRLPLANE-5): Bump openshift/kubernetes-apiserver [#549](https://github.com/openshift/openshift-apiserver/pull/549)
* [OCPBUGS-57474](https://issues.redhat.com/browse/OCPBUGS-57474): ensure cache invalidation after a time [#547](https://github.com/openshift/openshift-apiserver/pull/547)
* [CNTRLPLANE-1304](https://issues.redhat.com/browse/CNTRLPLANE-1304): Update openshift/openshift-apiserver to latest Kubernetes 1.33 version [#539](https://github.com/openshift/openshift-apiserver/pull/539)
* [CNTRLPLANE-1258](https://issues.redhat.com/browse/CNTRLPLANE-1258): Add README to test extension [#540](https://github.com/openshift/openshift-apiserver/pull/540)
* [OCPBUGS-47773](https://issues.redhat.com/browse/OCPBUGS-47773): Bump library-go to fix route validation [#535](https://github.com/openshift/openshift-apiserver/pull/535)
* [OCPBUGS-57858](https://issues.redhat.com/browse/OCPBUGS-57858): Updating ose-openshift-apiserver-container image to be consistent with ART for 4.20 [#538](https://github.com/openshift/openshift-apiserver/pull/538)
* [CNTRLPLANE-1258](https://issues.redhat.com/browse/CNTRLPLANE-1258): set up openshift-tests-extension and add a sanity test [#536](https://github.com/openshift/openshift-apiserver/pull/536)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/98a1f03816ef55a7d03f57c3da0d740385c3793b...e817f8439e1379485594f56d74c2160c44db0864)
### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/49aaf599fb9024f36359f55bac6b3bb1482e24b8)
* [OCPBUGS-55650](https://issues.redhat.com/browse/OCPBUGS-55650): Drop BuildCSIVolumes feature gate logic (Build CSI Volumes in OpenShift Builds is GA since 4.14) [#407](https://github.com/openshift/openshift-controller-manager/pull/407)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/bd60afcd882e5be63825fb201cb55a5a48daceaa...49aaf599fb9024f36359f55bac6b3bb1482e24b8)
### [openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/c4fe3e8ad29e58f081f3883de0893c2025a097b2)
* [OSPRH-18263](https://issues.redhat.com/browse/OSPRH-18263): UPSTREAM: 2915 [manila-csi-plugin] Support muilple share rules [#349](https://github.com/openshift/cloud-provider-openstack/pull/349)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/5c322e892803723250d4b7b303cf5eea20ff68b2...c4fe3e8ad29e58f081f3883de0893c2025a097b2)
### [openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/a92ebd03f1d495e27a76b03e9db002e08fcb8ac8)
* [STOR-2477](https://issues.redhat.com/browse/STOR-2477): Correct efs single-zone storageclass [#404](https://github.com/openshift/csi-operator/pull/404)
* [OCPBUGS-60655](https://issues.redhat.com/browse/OCPBUGS-60655): Disable LUN stress test for azure-file [#418](https://github.com/openshift/csi-operator/pull/418)
* [OCPBUGS-60464](https://issues.redhat.com/browse/OCPBUGS-60464): Bump library-go to fix panic [#417](https://github.com/openshift/csi-operator/pull/417)
* [Full changelog](https://github.com/openshift/csi-operator/compare/f6bd51843459f4adee7224f1e43fd2e4b331b3b3...a92ebd03f1d495e27a76b03e9db002e08fcb8ac8)
### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/5085f184c7d2ed21f36e5e3fe65bf023b38afe67)
* [OSASINFRA-3690](https://issues.redhat.com/browse/OSASINFRA-3690): Bump machine-api-operator [#136](https://github.com/openshift/machine-api-provider-openstack/pull/136)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/888b25c20dd5e7c381b5c615ef4e20417d526d62...5085f184c7d2ed21f36e5e3fe65bf023b38afe67)
### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/e53cf3090214284bf913bd2d7165a0a9422635a0)
* NO-JIRA: Remove deleted yamls [#1032](https://github.com/openshift/operator-framework-olm/pull/1032)
* NO-ISSUE: Update OWNERS to reflect current team makeup [#1057](https://github.com/openshift/operator-framework-olm/pull/1057)
* NO-ISSUE: Synchronize From Upstream Repositories [#1055](https://github.com/openshift/operator-framework-olm/pull/1055)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/7fbd76cb6ac054673906b8e280fed91e761d52e4...e53cf3090214284bf913bd2d7165a0a9422635a0)
### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/50a2c3155adf642c43d5a0366c5226ed8d751466)
* [OCPBUGS-60669](https://issues.redhat.com/browse/OCPBUGS-60669): Add NetworkPolicy for hypershift [#656](https://github.com/operator-framework/operator-marketplace/pull/656)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/07c4ea769698d54db5aad7b9bebe6c23dfc4165a...50a2c3155adf642c43d5a0366c5226ed8d751466)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/9741174157381d7b87e2d21559cbe06b8f2b5ebf)
* [OCPBUGS-60844](https://issues.redhat.com/browse/OCPBUGS-60844): DownStream Merge [08-25-2025] [#2734](https://github.com/openshift/ovn-kubernetes/pull/2734)
* NO-JIRA: DownStream Merge [08-21-2025] [#2730](https://github.com/openshift/ovn-kubernetes/pull/2730)
* [OCPBUGS-55962](https://issues.redhat.com/browse/OCPBUGS-55962): DownStream Merge [08-20-2025] [#2729](https://github.com/openshift/ovn-kubernetes/pull/2729)
* [OCPBUGS-38735](https://issues.redhat.com/browse/OCPBUGS-38735), [OCPBUGS-53028](https://issues.redhat.com/browse/OCPBUGS-53028), [OCPBUGS-56506](https://issues.redhat.com/browse/OCPBUGS-56506): DownStream Merge [08-16-2025] [#2724](https://github.com/openshift/ovn-kubernetes/pull/2724)
* [OCPBUGS-57883](https://issues.redhat.com/browse/OCPBUGS-57883): Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.20 [#2644](https://github.com/openshift/ovn-kubernetes/pull/2644)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/a830940c3bc8474e9a3384a2d7a7d18a6a773748...9741174157381d7b87e2d21559cbe06b8f2b5ebf)
### [prometheus](https://github.com/openshift/prometheus/tree/d703f9b685380fdcfa4114f4cfd463e9b68ab00d)
* NO-JIRA: [bot] sync rh-manifest.txt [#261](https://github.com/openshift/prometheus/pull/261)
* [OCPBUGS-56568](https://issues.redhat.com/browse/OCPBUGS-56568): chore: compute highestTimestamp at queryManager level [#262](https://github.com/openshift/prometheus/pull/262)
* [Full changelog](https://github.com/openshift/prometheus/compare/e3c32a9a3a4828106c3de1fcb0028625c50b3e1b...d703f9b685380fdcfa4114f4cfd463e9b68ab00d)
### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/e2bd260c9d686192a5ed9b85dfd4a9f7a2a03666)
* [OCPBUGS-56158](https://issues.redhat.com/browse/OCPBUGS-56158): Bump openshift/prometheus-operator to v0.85.0 [#338](https://github.com/openshift/prometheus-operator/pull/338)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/cb32af68e19d19ccb58b224f8bf8cd0d826d0a67...e2bd260c9d686192a5ed9b85dfd4a9f7a2a03666)
### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/b0fe556a981964728306f803864af9d2881db967)
* [CNTRLPLANE-1260](https://issues.redhat.com/browse/CNTRLPLANE-1260): Add README to test extension [#272](https://github.com/openshift/service-ca-operator/pull/272)
* [CNTRLPLANE-1260](https://issues.redhat.com/browse/CNTRLPLANE-1260): set up openshift-tests-extension and add a sanity test [#270](https://github.com/openshift/service-ca-operator/pull/270)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/e3ddb2f992fea674ab37506f12b6138b59281b62...b0fe556a981964728306f803864af9d2881db967)
### [tests](https://github.com/openshift/origin/tree/2af38a7807699b3046a73f931884152a11271d21)
* NO-JIRA: Fix Node NotReady intervals being left open when a node is deleted [#30188](https://github.com/openshift/origin/pull/30188)
* [OCPBUGS-61194](https://issues.redhat.com/browse/OCPBUGS-61194): Mark etcd net overload logging test as a flake [#30210](https://github.com/openshift/origin/pull/30210)
* [CORENET-5329](https://issues.redhat.com/browse/CORENET-5329): revert primary udn test workaround from virt tests [#29386](https://github.com/openshift/origin/pull/29386)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): improve logging, add startup probe to Keycloak Deployment [#30184](https://github.com/openshift/origin/pull/30184)
* [CNTRLPLANE-1306](https://issues.redhat.com/browse/CNTRLPLANE-1306): Enable OTE for cluster-kube-storage-version-migrator-operator [#30199](https://github.com/openshift/origin/pull/30199)
* [OCPBUGS-60656](https://issues.redhat.com/browse/OCPBUGS-60656): OCPBUGS-60883: Fix PinnedImageSet test instability & update flow for tests using custom MCPs [#30136](https://github.com/openshift/origin/pull/30136)
* [CNTRLPLANE-1257](https://issues.redhat.com/browse/CNTRLPLANE-1257): Enable OTE for apiserver Operators and servers [#30120](https://github.com/openshift/origin/pull/30120)
* [OCPBUGS-57496](https://issues.redhat.com/browse/OCPBUGS-57496): Account for system:hosted-cluster-config service account in HyperShift [#30075](https://github.com/openshift/origin/pull/30075)
* [TRT-2260](https://issues.redhat.com/browse/TRT-2260): Create High CPU intervals for nodes [#30152](https://github.com/openshift/origin/pull/30152)
* trt-2257: annotate zstd as sig-builds [#30190](https://github.com/openshift/origin/pull/30190)
* [CORENET-6232](https://issues.redhat.com/browse/CORENET-6232): add PreconfiguredUDNAddresses FG tests [#30010](https://github.com/openshift/origin/pull/30010)
* [TRT-2268](https://issues.redhat.com/browse/TRT-2268): Add support for OTE test lifecycles [#30166](https://github.com/openshift/origin/pull/30166)
* [OCPBUGS-60842](https://issues.redhat.com/browse/OCPBUGS-60842): fix: add exception for csi snapshot controller on two node [#30153](https://github.com/openshift/origin/pull/30153)
* [OCPBUGS-56691](https://issues.redhat.com/browse/OCPBUGS-56691): Pass volume-percentage to 100 in must-gather executions [#30182](https://github.com/openshift/origin/pull/30182)
* [OPRUN-4089](https://issues.redhat.com/browse/OPRUN-4089): Remove OLMv1 Tests remaning since all is migrated to OTE/operator-controller repo [#30173](https://github.com/openshift/origin/pull/30173)
* trt-2257: separate builds tests [#30171](https://github.com/openshift/origin/pull/30171)
* NO-JIRA: test/extended: update auth-related test OWNERS [#30149](https://github.com/openshift/origin/pull/30149)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): oidc/keycloak: make keycloak client use environment proxy for HTTP requests [#30148](https://github.com/openshift/origin/pull/30148)
* NO-JIRA: Stop setting feature gate conditional [#30146](https://github.com/openshift/origin/pull/30146)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): monitor: auditloganalyzer: skip watch channels processing when cluster stability is explicitly marked as `Disruptive` [#30174](https://github.com/openshift/origin/pull/30174)
* [OPRUN-4056](https://issues.redhat.com/browse/OPRUN-4056): [OLMv1] Remove Preflight checks since those were migrated to OTE [#30074](https://github.com/openshift/origin/pull/30074)
* [SREP-1622](https://issues.redhat.com/browse/SREP-1622): Fix endpoint admission test namespace creation for ROSA [#30134](https://github.com/openshift/origin/pull/30134)
* [OCPNODE-3004](https://issues.redhat.com/browse/OCPNODE-3004): Run ImageVolume tests in all clusters. [#30122](https://github.com/openshift/origin/pull/30122)
* [OCPBUGS-52968](https://issues.redhat.com/browse/OCPBUGS-52968): Drop the etcd should not log excessive took too long messages test [#30143](https://github.com/openshift/origin/pull/30143)
* [OCPBUGS-57477](https://issues.redhat.com/browse/OCPBUGS-57477): Allow three long term flaky k8s tests to retry [#30140](https://github.com/openshift/origin/pull/30140)
* [OCPBUGS-60550](https://issues.redhat.com/browse/OCPBUGS-60550): Increase curl timeout from 3s to 5s for egress firewall DNS rule test [#30133](https://github.com/openshift/origin/pull/30133)
* [OCPBUGS-60454](https://issues.redhat.com/browse/OCPBUGS-60454): Update the Control Plane Machine name pattern to support the master's names used on OpenStack [#30125](https://github.com/openshift/origin/pull/30125)
* NO-JIRA: Stop ignoring the targets from openshift-cluster-version [#30111](https://github.com/openshift/origin/pull/30111)
* [OTA-1581](https://issues.redhat.com/browse/OTA-1581): Skip `UpgradeStatus` test on HyperShift [#30132](https://github.com/openshift/origin/pull/30132)
* [STOR-1064](https://issues.redhat.com/browse/STOR-1064): OCPBUGS-59256: bump kubernetes version to fix provisioning e2e test [#30126](https://github.com/openshift/origin/pull/30126)
* [OCPBUGS-52968](https://issues.redhat.com/browse/OCPBUGS-52968): Expand and rate limit tests watching for etcd logging anomalies [#30013](https://github.com/openshift/origin/pull/30013)
* Revert "TRT-2197: use fixed seed for test ordering" [#30127](https://github.com/openshift/origin/pull/30127)
* NO-JIRA: fix: update arbiter test [#30112](https://github.com/openshift/origin/pull/30112)
* [OCPBUGS-59526](https://issues.redhat.com/browse/OCPBUGS-59526): TLS registry update [#30116](https://github.com/openshift/origin/pull/30116)
* [OCPBUGS-57032](https://issues.redhat.com/browse/OCPBUGS-57032): upgrade.go: wait some time after node upgrade [#29960](https://github.com/openshift/origin/pull/29960)
* [OCPBUGS-60530](https://issues.redhat.com/browse/OCPBUGS-60530): Fix panics in inclusterapi disruption during ROSA jobs [#30129](https://github.com/openshift/origin/pull/30129)
* [MCO-1656](https://issues.redhat.com/browse/MCO-1656): Component Readiness for vSphere Bootimage Update [#29741](https://github.com/openshift/origin/pull/29741)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): suites/external-oidc: explicitly mark cluster stability as disruptive [#30128](https://github.com/openshift/origin/pull/30128)
* [Full changelog](https://github.com/openshift/origin/compare/8fadc16f70c3352ffca40ce00e4e211fa7a2d56c...2af38a7807699b3046a73f931884152a11271d21)