# 4.18.0-okd-scos.ec.3

Created: 2025-02-03 18:58:58 +0000 UTC

Image Digest: `sha256:43d52190f8c7b1aa6d91ebc988ad491dc986f79055d81fbff57297934e15a69d`

Promoted from registry.ci.openshift.org/origin/release-scos:4.18.0-0.okd-scos-2025-02-02-055057


## Changes from 4.18.0-okd-scos.ec.1

### Components

* Kubectl 1.31.1
* Kubernetes 1.31.4
* Kubernetes Tests 1.31.1
* CentOS Stream CoreOS upgraded from 418.9.202501200632-0 to 418.9.202501310632-0


### Rebuilt images without code change

* stream-coreos `sha256:71c90cc92da5c92f87675a3b72836dfe9ab11620e8472c87ade94a85a38e07b0`
* stream-coreos-extensions `sha256:046f5adb4ec2f71d067b0b7b4a135bcdfb03b6977e0b28999be8314c353abe60`


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/9432fd3e2cb63bc282f2d0b1ac8ab8f6691b49ab)

* [OCPBUGS-48609](https://issues.redhat.com/browse/OCPBUGS-48609): openstack-manila: update PodDisruptionBudget name [#355](https://github.com/openshift/csi-operator/pull/355)
* [Full changelog](https://github.com/openshift/csi-operator/compare/c451e9416dfe0cabd5d1cbae04ec57315c0ea57c...9432fd3e2cb63bc282f2d0b1ac8ab8f6691b49ab)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/6cced6667a8e896c191bd678f740d2b7e0629538)

* [OCPBUGS-48705](https://issues.redhat.com/browse/OCPBUGS-48705): update max data disk count table [#96](https://github.com/openshift/azure-disk-csi-driver/pull/96)
* [OCPBUGS-48682](https://issues.redhat.com/browse/OCPBUGS-48682): Rebase to upstream v1.31.1 for OCP 4.18 and downgrade golang to 1.22 [#95](https://github.com/openshift/azure-disk-csi-driver/pull/95)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/dcf47660bacecf44e7e8054b253613e17f9a2be5...6cced6667a8e896c191bd678f740d2b7e0629538)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/f1621a112f46ebdad3d2dc429464d6e075573679)

* [OCPBUGS-49599](https://issues.redhat.com/browse/OCPBUGS-49599): Envtest: Configure IPv6 service network for API Service [#9418](https://github.com/openshift/installer/pull/9418)
* [OCPBUGS-46533](https://issues.redhat.com/browse/OCPBUGS-46533): Add note about additional networks using IPv6 [#9324](https://github.com/openshift/installer/pull/9324)
* [OCPBUGS-49383](https://issues.redhat.com/browse/OCPBUGS-49383): [release-4.18] MGMT-19771: Convert IDS to proper IDMS manifest [#9400](https://github.com/openshift/installer/pull/9400)
* [OCPBUGS-49148](https://issues.redhat.com/browse/OCPBUGS-49148): [Nutanix] Installation failed with timeout when uploading images to PC [#9399](https://github.com/openshift/installer/pull/9399)
* [OCPBUGS-48757](https://issues.redhat.com/browse/OCPBUGS-48757): Add new tested azure arm instance type to doc [#9390](https://github.com/openshift/installer/pull/9390)
* [OCPBUGS-48671](https://issues.redhat.com/browse/OCPBUGS-48671): Find instances by label GCP [#9382](https://github.com/openshift/installer/pull/9382)
* [OCPBUGS-48581](https://issues.redhat.com/browse/OCPBUGS-48581): Run iscsiadm for agent-based iSCSI installations [#9379](https://github.com/openshift/installer/pull/9379)
* [OCPBUGS-48611](https://issues.redhat.com/browse/OCPBUGS-48611): Destroy all private cluster backend service resources [#9380](https://github.com/openshift/installer/pull/9380)
* [Full changelog](https://github.com/openshift/installer/compare/cb44e344cb308bfd352e9ebf2ba41a4b940b80b0...f1621a112f46ebdad3d2dc429464d6e075573679)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/36c93092776f8d964b4d09fa4c4f299d1ab55a08)

* [OCPBUGS-49604](https://issues.redhat.com/browse/OCPBUGS-49604): Address `github.com/docker/docker` CVE [#1967](https://github.com/openshift/oc/pull/1967)
* [Full changelog](https://github.com/openshift/oc/compare/fd653741e664d1f498af2885f4f2f48cd401677e...36c93092776f8d964b4d09fa4c4f299d1ab55a08)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/4674e81c349b841a139af8a5b5041722ec2f7b2f)

* [OCPBUGS-46416](https://issues.redhat.com/browse/OCPBUGS-46416): UPSTREAM: <carry>: 🐛(metrics) Initialize metrics for autoscaler errors, scale events, and pod evictions [#333](https://github.com/openshift/kubernetes-autoscaler/pull/333)
* [OCPBUGS-45146](https://issues.redhat.com/browse/OCPBUGS-45146): [release-4.18] VPA: Update OWNERS file [#323](https://github.com/openshift/kubernetes-autoscaler/pull/323)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/bc0c32824d3637ec08a950bb3c802dce767e6970...4674e81c349b841a139af8a5b5041722ec2f7b2f)


### [cluster-config-api](https://github.com/openshift/api/tree/d15841be6bdeeb556cac490a084cb3ffb2aee215)

* [OCPBUGS-48377](https://issues.redhat.com/browse/OCPBUGS-48377): Add IdleCloseOnResponse field to IngressControllerSpec [#2178](https://github.com/openshift/api/pull/2178)
* [OCPBUGS-48502](https://issues.redhat.com/browse/OCPBUGS-48502): StaticPodOperatorStatus validation should reject downgrades and concurrent node rollouts [#2152](https://github.com/openshift/api/pull/2152)
* [Full changelog](https://github.com/openshift/api/compare/29859d55727bb0b6294838e93898424ac57e4c04...d15841be6bdeeb556cac490a084cb3ffb2aee215)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/4616940d5e04f53b5bed811449b89acf2bb11514)

* [OCPBUGS-48443](https://issues.redhat.com/browse/OCPBUGS-48443): ovn-k, rbac: Enable users read & modify UserDefinedNetwork CRs [#2627](https://github.com/openshift/cluster-network-operator/pull/2627)
* (https://issues.redhat.com//browse/SDN-5426): (C)UDN CRD: add IPAM section and IPAM.Mode field [#2629](https://github.com/openshift/cluster-network-operator/pull/2629)
* [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Disable adding/removing the UDN namespace label [#2626](https://github.com/openshift/cluster-network-operator/pull/2626)
* [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Add host isolation mounts to ovnkube-node [#2620](https://github.com/openshift/cluster-network-operator/pull/2620)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/911d8ef7e9e6d70bb68aeaae0849b206d9b487b5...4616940d5e04f53b5bed811449b89acf2bb11514)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/b707be66f55efc54a9b348cd7f4b5fdcf5a58679)

* [OCPBUGS-49404](https://issues.redhat.com/browse/OCPBUGS-49404): E2E: Add test cases to verify PerPodPowerManagement with PPC (#1293) [#1293](https://github.com/openshift/cluster-node-tuning-operator/pull/1293)
* use ROLE_WORKER_CNF environment variable to determine mcp name (#1287) [#1287](https://github.com/openshift/cluster-node-tuning-operator/pull/1287)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/90fc6ab88c08cfc23778ea5377de0a216854580d...b707be66f55efc54a9b348cd7f4b5fdcf5a58679)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/de85e478a2f3dcc712ce5f02b56279cb116357f5)

* [OCPBUGS-48755](https://issues.redhat.com/browse/OCPBUGS-48755): add shannon and aroyoredhat as owners [#594](https://github.com/openshift/cluster-samples-operator/pull/594)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/b8c40ed790a90b4629ad72973a367bdc7138d35a...de85e478a2f3dcc712ce5f02b56279cb116357f5)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/d0086059867b069dbc9eec2ae84d79c2119b5b4c)

* [OCPBUGS-45738](https://issues.redhat.com/browse/OCPBUGS-45738): Remove unecessary resources from the guest cluster [#547](https://github.com/openshift/cluster-storage-operator/pull/547)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/f441f1634837bef0cd32dbb9dd7099faecde3b8d...d0086059867b069dbc9eec2ae84d79c2119b5b4c)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/3646a107905b6c9c28cf52c5ae129a1e0d9cc9b4)

* [OCPBUGS-46410](https://issues.redhat.com/browse/OCPBUGS-46410): Set `openshift.io/required-scc`: privileged annotation in `version` pods [#1129](https://github.com/openshift/cluster-version-operator/pull/1129)
* [OCPBUGS-45327](https://issues.redhat.com/browse/OCPBUGS-45327): deps: bump golang.org/x/net to 0.31.0 [#1116](https://github.com/openshift/cluster-version-operator/pull/1116)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/710197713c0325dcd08801e1f5583416e51936d8...3646a107905b6c9c28cf52c5ae129a1e0d9cc9b4)


### [console](https://github.com/openshift/console/tree/7bb8f0d706d0a4c86750adb82bc02791f1fa6002)

* [OCPBUGS-47803](https://issues.redhat.com/browse/OCPBUGS-47803): prefer OpenShift release version in telemetry events [#14661](https://github.com/openshift/console/pull/14661)
* [OCPBUGS-48181](https://issues.redhat.com/browse/OCPBUGS-48181): Add ocm url to csp allowlist [#14670](https://github.com/openshift/console/pull/14670)
* [Full changelog](https://github.com/openshift/console/compare/156e453d91b70790eddbfd19be6fd362848ac759...7bb8f0d706d0a4c86750adb82bc02791f1fa6002)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/838d2484157f076bbb81f1b584898aec6f051c2f)

* [OCPBUGS-48725](https://issues.redhat.com/browse/OCPBUGS-48725): Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.18 [#174](https://github.com/openshift/csi-external-snapshotter/pull/174)
* [OCPBUGS-48723](https://issues.redhat.com/browse/OCPBUGS-48723): Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART for 4.18 [#173](https://github.com/openshift/csi-external-snapshotter/pull/173)
* [OCPBUGS-48721](https://issues.redhat.com/browse/OCPBUGS-48721): Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.18 [#172](https://github.com/openshift/csi-external-snapshotter/pull/172)
* [OCPBUGS-48403](https://issues.redhat.com/browse/OCPBUGS-48403): Bring groupsnapshot beta feature to 4.18 [#171](https://github.com/openshift/csi-external-snapshotter/pull/171)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/f52ce8b8b0799a341caf1fb864bba5d9d040a856...838d2484157f076bbb81f1b584898aec6f051c2f)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/6ea235614f445951c7a4b5525f64f51548461a0d)

* [OCPBUGS-48586](https://issues.redhat.com/browse/OCPBUGS-48586): Do not check for PodCIDR when determining if node is in the default subnetwork. [#73](https://github.com/openshift/cloud-provider-gcp/pull/73)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/7b60fffb9eabb5a27163213a1e9c995357d47c4c...6ea235614f445951c7a4b5525f64f51548461a0d)


### [haproxy-router](https://github.com/openshift/router/tree/061909a4c397c048e6def163fda5d227c75f176b)

* [OCPBUGS-49717](https://issues.redhat.com/browse/OCPBUGS-49717): Update default_pub_keys.pem to use SHA256 [#648](https://github.com/openshift/router/pull/648)
* [Full changelog](https://github.com/openshift/router/compare/be831fa5808df9facf7df4f5cdbf2472c504b60d...061909a4c397c048e6def163fda5d227c75f176b)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/e18ecb4c7c8e2d8ca398f0ecdf76119d9f471cf3)

* [OCPBUGS-48079](https://issues.redhat.com/browse/OCPBUGS-48079), [OCPBUGS-48515](https://issues.redhat.com/browse/OCPBUGS-48515): Fix status ratcheting 4.18 [#2175](https://github.com/openshift/kubernetes/pull/2175)
* [OCPBUGS-48403](https://issues.redhat.com/browse/OCPBUGS-48403): Bump openshift-eng/openshift-tests-extension to main [#2188](https://github.com/openshift/kubernetes/pull/2188)
* [OCPBUGS-49437](https://issues.redhat.com/browse/OCPBUGS-49437): Fix Portworx plugin's CSI translation to copy secret name & namespace [#2187](https://github.com/openshift/kubernetes/pull/2187)
* [OCPBUGS-48403](https://issues.redhat.com/browse/OCPBUGS-48403): Bring groupsnapshot beta feature to 4.18 [#2169](https://github.com/openshift/kubernetes/pull/2169)
* [Full changelog](https://github.com/openshift/kubernetes/compare/11e2f11d1e0ce2fadc11906f2bcbba1ddbb2da2f...e18ecb4c7c8e2d8ca398f0ecdf76119d9f471cf3)


### [hypershift](https://github.com/openshift/hypershift/tree/05039f3446362d68dca2d032898f55f91976928e)

* [OCPBUGS-49671](https://issues.redhat.com/browse/OCPBUGS-49671): Fix IsProgressing condition in HostedClusters [#5513](https://github.com/openshift/hypershift/pull/5513)
* [OCPBUGS-48689](https://issues.redhat.com/browse/OCPBUGS-48689): Add Tenant ID to Azure API & Remove Credentials from CPO [#5501](https://github.com/openshift/hypershift/pull/5501)
* [OCPBUGS-49620](https://issues.redhat.com/browse/OCPBUGS-49620): [release-4.18]: fix overwriting PKI operator HCP conditions [#5500](https://github.com/openshift/hypershift/pull/5500)
* [OCPBUGS-48689](https://issues.redhat.com/browse/OCPBUGS-48689): Remove client secret references now Workload Identity is supported [#5470](https://github.com/openshift/hypershift/pull/5470)
* [OCPBUGS-48748](https://issues.redhat.com/browse/OCPBUGS-48748): correct aro azureFile config and permissions [#5459](https://github.com/openshift/hypershift/pull/5459)
* [OCPBUGS-48689](https://issues.redhat.com/browse/OCPBUGS-48689): Implement Workload Identity in Azure for Data Plane Components [#5451](https://github.com/openshift/hypershift/pull/5451)
* [OCPBUGS-48632](https://issues.redhat.com/browse/OCPBUGS-48632): Compare contents of user-ca-bundle-config.yaml to the correct configmap [#5442](https://github.com/openshift/hypershift/pull/5442)
* [Full changelog](https://github.com/openshift/hypershift/compare/3498d5490139a035a2d1dee2e6fb54ab20715d64...05039f3446362d68dca2d032898f55f91976928e)


### [ironic](https://github.com/openshift/ironic-image/tree/3ed02cb9ec6171a279808b1eb09d1fa7b0db98f5)

* [OCPBUGS-45637](https://issues.redhat.com/browse/OCPBUGS-45637): Ensure ironic caches node information [#615](https://github.com/openshift/ironic-image/pull/615)
* [Full changelog](https://github.com/openshift/ironic-image/compare/6aca641789426d8e49e903253e05f280ff7de0c9...3ed02cb9ec6171a279808b1eb09d1fa7b0db98f5)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/d6090f11285d3b9a9262290f17bc3f90eb3dd8e5)

* [OCPBUGS-49606](https://issues.redhat.com/browse/OCPBUGS-49606): MCO CO degrades are stuck on until master pool updates complete [#4818](https://github.com/openshift/machine-config-operator/pull/4818)
* [OCPBUGS-48329](https://issues.redhat.com/browse/OCPBUGS-48329): Add clarification to invalid maxUnavailable alert [#4789](https://github.com/openshift/machine-config-operator/pull/4789)
* [OCPBUGS-48829](https://issues.redhat.com/browse/OCPBUGS-48829): Auto-recover from MC with invalid extension [#4805](https://github.com/openshift/machine-config-operator/pull/4805)
* [OCPBUGS-29201](https://issues.redhat.com/browse/OCPBUGS-29201): GCP Custom-DNS: Update services that run on control plane nodes [#4802](https://github.com/openshift/machine-config-operator/pull/4802)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/da8e8b51fda20798d8690901f01b80eb010f34db...d6090f11285d3b9a9262290f17bc3f90eb3dd8e5)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/a5a82997a17cdcee03e9a4a58ac42c694d4174aa)

* [OU-649](https://issues.redhat.com/browse/OU-649): fix net/http vulnerable dependency [#339](https://github.com/openshift/monitoring-plugin/pull/339)
* [OU-645](https://issues.redhat.com/browse/OU-645): Fix virtualization perspective routes and routing [#327](https://github.com/openshift/monitoring-plugin/pull/327)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/abef22c13414d05240661a76a3bdd90f31c4da9f...a5a82997a17cdcee03e9a4a58ac42c694d4174aa)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/74f285c3d6c642d96039067a5e99e8db85b146f9)

* NO-JIRA: fix entrypoint.sh for new SCOS builds [#336](https://github.com/openshift/whereabouts-cni/pull/336)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/ad5fa490131e906fde543ec40b9df82e077172c7...74f285c3d6c642d96039067a5e99e8db85b146f9)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/9f60c8a135fbc130c516ed25da80156a539327e7)

* [CNV-55457](https://issues.redhat.com/browse/CNV-55457): Remove project modal [#204](https://github.com/openshift/networking-console-plugin/pull/204)
* [CNV-55234](https://issues.redhat.com/browse/CNV-55234): do not show all namesapces in cudn namespace column [#201](https://github.com/openshift/networking-console-plugin/pull/201)
* [CNV-55129](https://issues.redhat.com/browse/CNV-55129): Disable udn button [#200](https://github.com/openshift/networking-console-plugin/pull/200)
* [OCPBUGS-49367](https://issues.redhat.com/browse/OCPBUGS-49367): show MTU and sort on list [#199](https://github.com/openshift/networking-console-plugin/pull/199)
* [CNV-54828](https://issues.redhat.com/browse/CNV-54828): fix udn create button [#198](https://github.com/openshift/networking-console-plugin/pull/198)
* [CNV-55239](https://issues.redhat.com/browse/CNV-55239): Cluster udn through matchlabel [#195](https://github.com/openshift/networking-console-plugin/pull/195)
* [CNV-55085](https://issues.redhat.com/browse/CNV-55085): remove layer configuration [#194](https://github.com/openshift/networking-console-plugin/pull/194)
* [OCPBUGS-48802](https://issues.redhat.com/browse/OCPBUGS-48802): fix nad misspelled [#193](https://github.com/openshift/networking-console-plugin/pull/193)
* [OCPBUGS-48703](https://issues.redhat.com/browse/OCPBUGS-48703): replace edit with save [#187](https://github.com/openshift/networking-console-plugin/pull/187)
* [CNV-54825](https://issues.redhat.com/browse/CNV-54825): do not allow deleting udns [#192](https://github.com/openshift/networking-console-plugin/pull/192)
* [OCPBUGS-48680](https://issues.redhat.com/browse/OCPBUGS-48680): fix service name [#186](https://github.com/openshift/networking-console-plugin/pull/186)
* [CNV-55131](https://issues.redhat.com/browse/CNV-55131): remove the primary name to the udn creation form [#182](https://github.com/openshift/networking-console-plugin/pull/182)
* [CNV-54827](https://issues.redhat.com/browse/CNV-54827): fix select label on ClusterUserDefinedNetwork [#176](https://github.com/openshift/networking-console-plugin/pull/176)
* [OCPBUGS-48562](https://issues.redhat.com/browse/OCPBUGS-48562): fix path-to-regex CVE [#175](https://github.com/openshift/networking-console-plugin/pull/175)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/3e588cef3ad35ec7417adc0b85dcbcdda1d582b5...9f60c8a135fbc130c516ed25da80156a539327e7)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/eb818d4c5bea5ac4d42242bac3b2ef11005eb5ad)

* [OCPBUGS-48842](https://issues.redhat.com/browse/OCPBUGS-48842): CLID-301: add --cache-dir command line option (#1044) [#1044](https://github.com/openshift/oc-mirror/pull/1044)
* [CLID-303](https://issues.redhat.com/browse/CLID-303): disables the selected bundle feature (#1046) [#1046](https://github.com/openshift/oc-mirror/pull/1046)
* [OCPBUGS-48837](https://issues.redhat.com/browse/OCPBUGS-48837): Generate ClusterCatalog resources for operator catalogs (#1039) [#1039](https://github.com/openshift/oc-mirror/pull/1039)
* [OCPBUGS-45059](https://issues.redhat.com/browse/OCPBUGS-45059): fixes the delete when catalog mirrored with v1 from disk (oci://) (#1042) [#1042](https://github.com/openshift/oc-mirror/pull/1042)
* fixes CVEs upgrading go-git dependency (#1029) [#1029](https://github.com/openshift/oc-mirror/pull/1029)
* [OCPBUGS-47688](https://issues.redhat.com/browse/OCPBUGS-47688): Fix ITMS and IDMS generated when mirror dest contains release namespace (#1026) [#1026](https://github.com/openshift/oc-mirror/pull/1026)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/9dde8cc20bd64043ebec9f4dcf602b6e58d2de03...eb818d4c5bea5ac4d42242bac3b2ef11005eb5ad)


### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/ab7ec240dd7675d7fb0416487adf9d7e096d6421)

* UPSTREAM: <drop>: Separate CA configuration for pulls vs catalogd services (#1673) [#1673](https://github.com/openshift/operator-framework-catalogd/pull/1673)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/8103bba32f7a96db7b91cd094eecf1cf33c81d30...ab7ec240dd7675d7fb0416487adf9d7e096d6421)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/859b4d2ed92e29ef3a380f65066ecc4511cec6ef)

* UPSTREAM: <drop>: Separate CA configuration for pulls vs catalogd services (#1673) [#1673](https://github.com/openshift/operator-framework-operator-controller/pull/1673)
* UPSTREAM: <drop>: Add support for SSL env vars to cert pool watcher (#1672) [#1672](https://github.com/openshift/operator-framework-operator-controller/pull/1672)
* UPSTREAM: 1552: Upgrade golang.org/x/net (#1552) [#1552](https://github.com/openshift/operator-framework-operator-controller/pull/1552)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/848adf32d19ffb9024d764ec026b857588f5f1bb...859b4d2ed92e29ef3a380f65066ecc4511cec6ef)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/775f6a1596b3971526db52a70e11d70e044896d5)

* [OCPBUGS-48633](https://issues.redhat.com/browse/OCPBUGS-48633): prevent panic when no image and error are set [#484](https://github.com/openshift/openshift-apiserver/pull/484)
* [OCPBUGS-48633](https://issues.redhat.com/browse/OCPBUGS-48633): validate image property isn't nil before using [#485](https://github.com/openshift/openshift-apiserver/pull/485)
* [OCPBUGS-48633](https://issues.redhat.com/browse/OCPBUGS-48633): move on to the next digest/tag during failures [#482](https://github.com/openshift/openshift-apiserver/pull/482)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/4616af6c6be3f3094e68d29a8d3a7f2ab8ac8f5d...775f6a1596b3971526db52a70e11d70e044896d5)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/182471a8d72ee38d2ff82ce44db6903e66c4b22b)

* [OCPBUGS-48644](https://issues.redhat.com/browse/OCPBUGS-48644): Fix excessive catalog source snapshots cause severe performance regression [#950](https://github.com/openshift/operator-framework-olm/pull/950)
* [OCPBUGS-48660](https://issues.redhat.com/browse/OCPBUGS-48660): Fix concurrent namespace resolution [#946](https://github.com/openshift/operator-framework-olm/pull/946)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/803d920913e70ff12394ed2459ba2dfb9c4a2470...182471a8d72ee38d2ff82ce44db6903e66c4b22b)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/5a1e906724ed6d88161f8faaa90e4fe447689725)

* [OCPBUGS-49432](https://issues.redhat.com/browse/OCPBUGS-49432): Upgrade golang.org/x/net [release-4.18] [#584](https://github.com/operator-framework/operator-marketplace/pull/584)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/f0e073f8c4d4d50e0abd87cf35d630bdc4e7ee2a...5a1e906724ed6d88161f8faaa90e4fe447689725)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/5086614cde9fbec2cce4c8184ea407adaef5c2a3)

* [OCPBUGS-49736](https://issues.redhat.com/browse/OCPBUGS-49736), [OCPBUGS-49739](https://issues.redhat.com/browse/OCPBUGS-49739): [DownstreamMerge] 1-31-25 [#2432](https://github.com/openshift/ovn-kubernetes/pull/2432)
* [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710): DownStream Merge Sync from 4.19 [01-29-2025] [#2430](https://github.com/openshift/ovn-kubernetes/pull/2430)
* [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Downstream Merge [01-28-2025] [#2428](https://github.com/openshift/ovn-kubernetes/pull/2428)
* [OCPBUGS-48805](https://issues.redhat.com/browse/OCPBUGS-48805): Bump OVN to ovn24.09-24.09.1-10.el9fdp [#2424](https://github.com/openshift/ovn-kubernetes/pull/2424)
* NO-JIRA: DownStream Merge Sync from 4.19 [01-27-2025] [#2426](https://github.com/openshift/ovn-kubernetes/pull/2426)
* [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710): DownStream Merge Sync from 4.19 [01-22-2025] [#2422](https://github.com/openshift/ovn-kubernetes/pull/2422)
* [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710): DownStream Merge Sync from 4.19 [01-08-2025] [#2413](https://github.com/openshift/ovn-kubernetes/pull/2413)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/930d8645c00fd2273c4cbb6e1d3c057e0967f0a1...5086614cde9fbec2cce4c8184ea407adaef5c2a3)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/01fc505abcf3b83bba284a00258b6761a9b7ce8a)

* [OCPBUGS-44992](https://issues.redhat.com/browse/OCPBUGS-44992): bump openshift/api [#78](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/78)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/f367400b30ab573cfdfc133cb4040fd65650601c...01fc505abcf3b83bba284a00258b6761a9b7ce8a)


### [prometheus](https://github.com/openshift/prometheus/tree/8de8eb11dfe734331762bc8d4839ec3b47084743)

* [OCPBUGS-48313](https://issues.redhat.com/browse/OCPBUGS-48313): fix(main.go): avoid closing the query engine until it is guaranteed to no longer be in use [#242](https://github.com/openshift/prometheus/pull/242)
* [Full changelog](https://github.com/openshift/prometheus/compare/84b3db709fe196a384fc483f960a5b4504e7557a...8de8eb11dfe734331762bc8d4839ec3b47084743)


### [tests](https://github.com/openshift/origin/tree/4b725c23bcff735e5c257c56afd08e8b10c4b541)

* [OCPBUGS-49740](https://issues.redhat.com/browse/OCPBUGS-49740), [SDN-5625](https://issues.redhat.com/browse/SDN-5625): Backport net seg feat gate into udn virt tests [#29504](https://github.com/openshift/origin/pull/29504)
* [OCPBUGS-48460](https://issues.redhat.com/browse/OCPBUGS-48460), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Increases timeouts for live migration [#29518](https://github.com/openshift/origin/pull/29518)
* [OCPBUGS-48460](https://issues.redhat.com/browse/OCPBUGS-48460), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Bump UDN pod ready timeout [#29514](https://github.com/openshift/origin/pull/29514)
* [OCPBUGS-48460](https://issues.redhat.com/browse/OCPBUGS-48460), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): increase probe initialDelaySeconds from 1 to 5 [#29515](https://github.com/openshift/origin/pull/29515)
* [OCPBUGS-48460](https://issues.redhat.com/browse/OCPBUGS-48460), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Bump wait for UDN CR ready timeout [#29516](https://github.com/openshift/origin/pull/29516)
* [OCPBUGS-48460](https://issues.redhat.com/browse/OCPBUGS-48460), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): UDN: wait for moar openshift [#29495](https://github.com/openshift/origin/pull/29495)
* [OCPBUGS-48460](https://issues.redhat.com/browse/OCPBUGS-48460), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Fix live migration test detecting dualstack [#29488](https://github.com/openshift/origin/pull/29488)
* [OCPBUGS-48524](https://issues.redhat.com/browse/OCPBUGS-48524): add a monitor test to detect concurrent installer pod or static pod [#29480](https://github.com/openshift/origin/pull/29480)
* [OCPBUGS-48389](https://issues.redhat.com/browse/OCPBUGS-48389), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Backport UDN fixes from 4.19 into 4.18 [#29478](https://github.com/openshift/origin/pull/29478)
* [OCPBUGS-48403](https://issues.redhat.com/browse/OCPBUGS-48403): Add new images for group snapshot support [#29455](https://github.com/openshift/origin/pull/29455)
* [OCPBUGS-48438](https://issues.redhat.com/browse/OCPBUGS-48438): images: Fix layers test to work with manifestlisted imagestreams [#29442](https://github.com/openshift/origin/pull/29442)
* [OCPBUGS-48389](https://issues.redhat.com/browse/OCPBUGS-48389): virt: add GA placeholder test [#29438](https://github.com/openshift/origin/pull/29438)
* [OCPBUGS-48389](https://issues.redhat.com/browse/OCPBUGS-48389): virt, udn: primary UDN requires the net seg FG [#29412](https://github.com/openshift/origin/pull/29412)
* [Full changelog](https://github.com/openshift/origin/compare/1187d3a92874651cd075c4724dd160c1ca3faefb...4b725c23bcff735e5c257c56afd08e8b10c4b541)


### [thanos](https://github.com/openshift/thanos/tree/314589cf9b4e86507634ab3406deb08402fa7af9)

* [release 4.18]: OCPBUGS-48729: CVE 2024 45338 Update golang.org/x/net to v0.33 [#157](https://github.com/openshift/thanos/pull/157)
* [Full changelog](https://github.com/openshift/thanos/compare/f6f7cc4142f1bac5f223e3023527f1de42ef83bc...314589cf9b4e86507634ab3406deb08402fa7af9)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/73b303ebfdbb31da4879b1ae534cadbb16225135)

* [OCPBUGS-48113](https://issues.redhat.com/browse/OCPBUGS-48113): List only linux nodes [#280](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/280)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/8dcd87e0ffd97af96e1b642f06a6243953a8a254...73b303ebfdbb31da4879b1ae534cadbb16225135)