# 4.19.0-okd-scos.18

Created: 2025-09-08 11:47:59 +0000 UTC

Image Digest: `sha256:b71e0c849b0e0a38611ab667c4cb883dc7e8e1d11338dc3aef60d0ec50dd8693`

Promoted from registry.ci.openshift.org/origin/release-scos:4.19.0-0.okd-scos-2025-09-07-122738


## Changes from 4.19.0-okd-scos.12

### Components

* Kubectl 1.32.1
* Kubernetes upgraded from 1.32.7 to 1.32.8
* Kubernetes Tests 1.32.6
* CentOS Stream CoreOS upgraded from 9.0.20250731-1 to 9.0.20250827-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| MachineConfigNodes <br/> (13 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| PinnedImages <br/> (5 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| RouteAdvertisements <br/> (11 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |


### Rebuilt images without code change

* [stream-coreos](https://github.com/openshift/os) git [e97898c8](https://github.com/openshift/os/commit/e97898c8af9cad8e5375e4860a7d79c39a1c79fa) `sha256:210b83fcbbc41bbfadce649dfd4599b62d025a047017bcdcacc7f436cbd856b0`
* [stream-coreos-extensions](https://github.com/openshift/os) git [e97898c8](https://github.com/openshift/os/commit/e97898c8af9cad8e5375e4860a7d79c39a1c79fa) `sha256:1c76a94fe88c91d79160eff7d8b1527978bcb9d267fe5879d867fe47c6c69ba0`


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/edfddbc100302df013eb3303c41da28f074e8dd4)

* [OCPBUGS-60938](https://issues.redhat.com/browse/OCPBUGS-60938): Update ISOBuilder OCP 4.19 Dev Preview Release notes [#142](https://github.com/openshift/agent-installer-utils/pull/142)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/f2d7fdb22c82e9561f607d93ce80c22a43ea39cd...edfddbc100302df013eb3303c41da28f074e8dd4)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/e6ffce5ffcad6385976f241c9ef57a7fe4be6282)

* [OCPBUGS-60595](https://issues.redhat.com/browse/OCPBUGS-60595): Bump library-go [#420](https://github.com/openshift/csi-operator/pull/420)
* [Full changelog](https://github.com/openshift/csi-operator/compare/e5d84763b378fff025540cb9a459dcf1bdfd903d...e6ffce5ffcad6385976f241c9ef57a7fe4be6282)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/4acbb85b3398f844f327a05f1992f752aca1d430)

* [OCPBUGS-60832](https://issues.redhat.com/browse/OCPBUGS-60832): node-joner ignore error if SSH key was not found [#9910](https://github.com/openshift/installer/pull/9910)
* [OCPBUGS-61109](https://issues.redhat.com/browse/OCPBUGS-61109): Misleading error when confidentialCompute: Enabled [#9920](https://github.com/openshift/installer/pull/9920)
* [OCPBUGS-60925](https://issues.redhat.com/browse/OCPBUGS-60925): Update the RHCOS 4.19 bootimage metadata [#9915](https://github.com/openshift/installer/pull/9915)
* [OCPBUGS-60652](https://issues.redhat.com/browse/OCPBUGS-60652): PowerVS: config variables not honored [#9901](https://github.com/openshift/installer/pull/9901)
* [OCPBUGS-60666](https://issues.redhat.com/browse/OCPBUGS-60666): Azure: change LB and pubic IP skus to Standard [#9903](https://github.com/openshift/installer/pull/9903)
* [OCPBUGS-59607](https://issues.redhat.com/browse/OCPBUGS-59607): Refine check for supported SNO platforms [#9843](https://github.com/openshift/installer/pull/9843)
* Revert "Update RHCOS 4.19 bootimage metadata to 9.6.20250811-0" [#9906](https://github.com/openshift/installer/pull/9906)
* [OCPBUGS-60402](https://issues.redhat.com/browse/OCPBUGS-60402): baremetal: always set external v6 URL on dualstack [#9879](https://github.com/openshift/installer/pull/9879)
* [OCPBUGS-58905](https://issues.redhat.com/browse/OCPBUGS-58905): Update RHCOS 4.19 bootimage metadata to 9.6.20250811-0 [#9888](https://github.com/openshift/installer/pull/9888)
* [Full changelog](https://github.com/openshift/installer/compare/249d7428c51fe85cabdab6394c4aed86fc24d398...4acbb85b3398f844f327a05f1992f752aca1d430)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/2f969c7a1df33a398298df731505a508ad120db9)

* [OCPBUGS-60110](https://issues.redhat.com/browse/OCPBUGS-60110): Re-add ENABLE_NODEIP_DEBUG env var [#365](https://github.com/openshift/baremetal-runtimecfg/pull/365)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/33a1d92344c6b56721a745fbe2e41d3ca899aa78...2f969c7a1df33a398298df731505a508ad120db9)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/dd9b5c3785154a172607d15997df2b1e6ae54d53)

* [OCPBUGS-60617](https://issues.redhat.com/browse/OCPBUGS-60617): ccoctl azure dnszone-resource-group-name now optional [#900](https://github.com/openshift/cloud-credential-operator/pull/900)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/a5d62675b21911cdff2bfd257a85ef0b5a793731...dd9b5c3785154a172607d15997df2b1e6ae54d53)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/c53c7153b62ff36cc725707297a4bbb7ea4f62e5)

* [OCPBUGS-60900](https://issues.redhat.com/browse/OCPBUGS-60900): revert openshift replica fix [#374](https://github.com/openshift/kubernetes-autoscaler/pull/374)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/b8e06f4f46570e6a14b0dcd37f27b46a2a02555b...c53c7153b62ff36cc725707297a4bbb7ea4f62e5)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/38dbc972321dd339464ffd4a92d2bb6f9b01d761)

* [OCPBUGS-60286](https://issues.redhat.com/browse/OCPBUGS-60286): Remove webhookport (9447) as HostPort [#498](https://github.com/openshift/cluster-baremetal-operator/pull/498)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/0c3beae1a216187270d60af49117a82e74de4020...38dbc972321dd339464ffd4a92d2bb6f9b01d761)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/68b46d78d8f181c3707aeb0c738780a89c3c19ae)

* [OCPBUGS-60950](https://issues.redhat.com/browse/OCPBUGS-60950): Default cloud.conf if no configmap is found [#412](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/412)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/5a484a0f3d97801bd3f1cc2db69e477fa9d13a9a...68b46d78d8f181c3707aeb0c738780a89c3c19ae)


### [cluster-config-api](https://github.com/openshift/api/tree/5b2b8cafdd825e60f37a3ce6f8dac0ad1732293e)

* [MCO-1766](https://issues.redhat.com/browse/MCO-1766): Promote PinnedImageSets feature gate to default [#2377](https://github.com/openshift/api/pull/2377)
* [MCO-1720](https://issues.redhat.com/browse/MCO-1720): Promote MachineConfigNode feature gate to default [#2376](https://github.com/openshift/api/pull/2376)
* [CORENET-6148](https://issues.redhat.com/browse/CORENET-6148): Promote RouteAdvertisements feature gate to default feature set [#2425](https://github.com/openshift/api/pull/2425)
* [OCPBUGS-60414](https://issues.redhat.com/browse/OCPBUGS-60414): MachineOSConfig name should match MachineConfigPool [#2449](https://github.com/openshift/api/pull/2449)
* Update crd-schema.json to release 1.33 branch [#2447](https://github.com/openshift/api/pull/2447)
* [Full changelog](https://github.com/openshift/api/compare/97812373b6b447ff6b55d3e2625b4f62aff1a16f...5b2b8cafdd825e60f37a3ce6f8dac0ad1732293e)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/4d6a1658537e8bb4e2e0cc2370557ab6077850ee)

* [OCPBUGS-60443](https://issues.redhat.com/browse/OCPBUGS-60443): Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace [#1472](https://github.com/openshift/cluster-etcd-operator/pull/1472)
* [OCPBUGS-59802](https://issues.redhat.com/browse/OCPBUGS-59802): add missing informer syncs [#1454](https://github.com/openshift/cluster-etcd-operator/pull/1454)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/1d890f9a4e6f0090040b5c31527397f1d34d1b96...4d6a1658537e8bb4e2e0cc2370557ab6077850ee)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/3335b120ecbae4a792373a814474aeebde58d6c2)

* [OCPBUGS-60517](https://issues.redhat.com/browse/OCPBUGS-60517): fix(azure): resolve credential caching issues around UAMI support [#1243](https://github.com/openshift/cluster-image-registry-operator/pull/1243)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/328419e7a2aba288a3405e76449f84d42b1952b3...3335b120ecbae4a792373a814474aeebde58d6c2)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/ddd78734833eb45f2cd5fba677fe50e4ae9f063b)

* [NE-2102](https://issues.redhat.com/browse/NE-2102): Bump to OSSM 3.1.0 and Istio 1.26.2 [#1264](https://github.com/openshift/cluster-ingress-operator/pull/1264)
* NO-JIRA: [release-4.19] docs - correct Istio version format in ossm-overrides.md [#1255](https://github.com/openshift/cluster-ingress-operator/pull/1255)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/f459344e20415fd3eb6f312c6b100ebb2cc996c9...ddd78734833eb45f2cd5fba677fe50e4ae9f063b)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/80c1fc3d81e3392ef7b056c8833185c8bdf6f599)

* [OCPBUGS-60121](https://issues.redhat.com/browse/OCPBUGS-60121): [release-4.19] Set goaway chance to 0.001 [#1887](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1887)
* [OCPBUGS-60677](https://issues.redhat.com/browse/OCPBUGS-60677): certrotation: ensure that all rotated secrets/configmaps have RefreshOnlyWhenExpired set [#1901](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1901)
* [OCPBUGS-60495](https://issues.redhat.com/browse/OCPBUGS-60495): certrotationcontroller: extend node-system-admin-signer lifetime [#1897](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1897)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/e2ad6c193a3a0ee71a2bd128d5a4692ad8a6776a...80c1fc3d81e3392ef7b056c8833185c8bdf6f599)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/bb6470c3cfbb1ecdaf78acac340e6a307bcd5231)

* [OCPBUGS-61185](https://issues.redhat.com/browse/OCPBUGS-61185): Consume latest OCP API in 4.19 [#2790](https://github.com/openshift/cluster-network-operator/pull/2790)
* [OCPBUGS-60983](https://issues.redhat.com/browse/OCPBUGS-60983): Update CNO reviewers/approvers [#2765](https://github.com/openshift/cluster-network-operator/pull/2765)
* [OCPBUGS-60761](https://issues.redhat.com/browse/OCPBUGS-60761): Allow overriding OVN-Kubernetes configuration [#2781](https://github.com/openshift/cluster-network-operator/pull/2781)
* [OCPBUGS-60534](https://issues.redhat.com/browse/OCPBUGS-60534): Fix multus webhook match condition for spec changes [#2777](https://github.com/openshift/cluster-network-operator/pull/2777)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/f17bb7a589e7a9516c35aa0a3bd1bbc55f071ebd...bb6470c3cfbb1ecdaf78acac340e6a307bcd5231)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/f1ff5dac295d07083e6c5decb80e157a9e87bcc9)

* [OCPBUGS-60796](https://issues.redhat.com/browse/OCPBUGS-60796): E2E: llc test fix:  Get updated Performance profile before modifying (#1381) [#1381](https://github.com/openshift/cluster-node-tuning-operator/pull/1381)
* [OCPBUGS-59633](https://issues.redhat.com/browse/OCPBUGS-59633): E2E add test to verify guaranteed pod is running after kubelet restart (#1365) [#1365](https://github.com/openshift/cluster-node-tuning-operator/pull/1365)
* [OCPBUGS-60855](https://issues.redhat.com/browse/OCPBUGS-60855): e2e: arm: add validation tests for hugepages with 4k and 64k kernelPageSize (#1383) [#1383](https://github.com/openshift/cluster-node-tuning-operator/pull/1383)
* E2E: skip stalld test case checking sched_fifo (#1385) [#1385](https://github.com/openshift/cluster-node-tuning-operator/pull/1385)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/61b6637d88503c5ddaace05a3e7a3f0b04d49183...f1ff5dac295d07083e6c5decb80e157a9e87bcc9)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/975ad328d5965a4e297b5b5eb0a7098976d50b09)

* [OCPBUGS-60152](https://issues.redhat.com/browse/OCPBUGS-60152): hypershift: add app label to csdriveroperators running in HCP [#604](https://github.com/openshift/cluster-storage-operator/pull/604)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/c09f715fa8592f79d2436218779614b13cd9c592...975ad328d5965a4e297b5b5eb0a7098976d50b09)


### [console](https://github.com/openshift/console/tree/98aa524f3d164a91250447fb4c7e5dd341687da7)

* NO-JIRA: Update CHANGELOG in relation to 4.18 plugin SDK package publish [#15457](https://github.com/openshift/console/pull/15457)
* [OCPBUGS-60420](https://issues.redhat.com/browse/OCPBUGS-60420): QuickStarts Link buttons to other quickstarts are duplicate [#15391](https://github.com/openshift/console/pull/15391)
* [OCPBUGS-50571](https://issues.redhat.com/browse/OCPBUGS-50571): Make sure CSP violations are only reported to telemetry once per day per browser [#15366](https://github.com/openshift/console/pull/15366)
* [OCPBUGS-60279](https://issues.redhat.com/browse/OCPBUGS-60279): Remove ancient `X-XSS-Protection` header [#15381](https://github.com/openshift/console/pull/15381)
* [OCPBUGS-60038](https://issues.redhat.com/browse/OCPBUGS-60038): Resolving API Version Conflicts in Tekton Pipeline Runs [#15354](https://github.com/openshift/console/pull/15354)
* [OCPBUGS-60294](https://issues.redhat.com/browse/OCPBUGS-60294): OpenShift Console's "Start Job" action overrides configured "backoffLimit" to "6" [#15382](https://github.com/openshift/console/pull/15382)
* NO-JIRA: Update CHANGELOG for latest 4.19 plugin SDK package publish [#15406](https://github.com/openshift/console/pull/15406)
* [OCPBUGS-60039](https://issues.redhat.com/browse/OCPBUGS-60039): Fix i18n string for event stream (again) [#15388](https://github.com/openshift/console/pull/15388)
* [OCPBUGS-60039](https://issues.redhat.com/browse/OCPBUGS-60039): Fix i18n string for event stream [#15355](https://github.com/openshift/console/pull/15355)
* [Full changelog](https://github.com/openshift/console/compare/6fbae6bc7a4507a7858f8e0878bb7af23f41ad62...98aa524f3d164a91250447fb4c7e5dd341687da7)


### [coredns](https://github.com/openshift/coredns/tree/4f64931403bf747b78bccb40ad877b08da534e23)

* [OCPBUGS-60246](https://issues.redhat.com/browse/OCPBUGS-60246): UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy [#148](https://github.com/openshift/coredns/pull/148)
* [Full changelog](https://github.com/openshift/coredns/compare/74776b850522c912db5fbadf7353f1eab669bd2a...4f64931403bf747b78bccb40ad877b08da534e23)


### [etcd, installer-etcd-artifacts](https://github.com/openshift/etcd/tree/eb0acd5c92a830da18d7d0d789f7a8ecac860620)

* [OCPBUGS-61041](https://issues.redhat.com/browse/OCPBUGS-61041): Revert "OCPBUGS-52181: Ensure cluster id changes during force-new-cluster" [#340](https://github.com/openshift/etcd/pull/340)
* [Full changelog](https://github.com/openshift/etcd/compare/a5421dfe551a2e9c911a75062a4cdeb7473f5c26...eb0acd5c92a830da18d7d0d789f7a8ecac860620)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/b5229e8311fe15cd8e9a70de2279868726b19f84)

* [OCPBUGS-60510](https://issues.redhat.com/browse/OCPBUGS-60510): Unrevert bump to v1.32.8 [#2439](https://github.com/openshift/kubernetes/pull/2439)
* [OCPBUGS-61021](https://issues.redhat.com/browse/OCPBUGS-61021): UPSTREAM: &lt;carry&gt;: Revert "Rebase v1.32.8 to 4.19" [#2433](https://github.com/openshift/kubernetes/pull/2433)
* [OCPBUGS-60510](https://issues.redhat.com/browse/OCPBUGS-60510): Rebase v1.32.8 to 4.19 [#2412](https://github.com/openshift/kubernetes/pull/2412)
* [OCPBUGS-60074](https://issues.redhat.com/browse/OCPBUGS-60074): UPSTREAM: 132028: podresources: list: use active pods [#2391](https://github.com/openshift/kubernetes/pull/2391)
* [Full changelog](https://github.com/openshift/kubernetes/compare/138db5223eea57e4408598a32320896c216724e1...b5229e8311fe15cd8e9a70de2279868726b19f84)


### [hypershift](https://github.com/openshift/hypershift/tree/edfa49d7396105759a6019f6ce16be00331c6440)

* [OCPBUGS-61031](https://issues.redhat.com/browse/OCPBUGS-61031): [release-4.19]: set default goaway-chance to 0.001 [#6712](https://github.com/openshift/hypershift/pull/6712)
* [OCPBUGS-60483](https://issues.redhat.com/browse/OCPBUGS-60483): feat(validations): add wildcard support to DNS SAN conflict detection [#6648](https://github.com/openshift/hypershift/pull/6648)
* [OCPBUGS-60147](https://issues.redhat.com/browse/OCPBUGS-60147): Always compress and encode payload in token secret for inplace upgrades [#6606](https://github.com/openshift/hypershift/pull/6606)
* [OCPBUGS-60152](https://issues.redhat.com/browse/OCPBUGS-60152): add missing app label to some components [#6636](https://github.com/openshift/hypershift/pull/6636)
* [OCPBUGS-60125](https://issues.redhat.com/browse/OCPBUGS-60125): fix(OCPBUGS-60125): Allow HCCO to set registry managementState to Removed; delete VAP during HC deletion [#6689](https://github.com/openshift/hypershift/pull/6689)
* [OCPBUGS-60648](https://issues.redhat.com/browse/OCPBUGS-60648): Cache Azure KMS TokenCredential for ARO HCP and clarify CPO credentials cache naming [#6677](https://github.com/openshift/hypershift/pull/6677)
* [OCPBUGS-60100](https://issues.redhat.com/browse/OCPBUGS-60100): fix: add dynamic security context uid to 4.19 missing components [#6675](https://github.com/openshift/hypershift/pull/6675)
* [OCPBUGS-57141](https://issues.redhat.com/browse/OCPBUGS-57141): HCP payload doesn't respect multiple mirrors [#6517](https://github.com/openshift/hypershift/pull/6517)
* [CNTRLPLANE-1270](https://issues.redhat.com/browse/CNTRLPLANE-1270): Red Hat Konflux update control-plane-operator-4-19 [#6660](https://github.com/openshift/hypershift/pull/6660)
* Red Hat Konflux purge control-plane-operator-4-19 [#6659](https://github.com/openshift/hypershift/pull/6659)
* [CNTRLPLANE-1267](https://issues.redhat.com/browse/CNTRLPLANE-1267): conditional builds for mce-2.9 [#6657](https://github.com/openshift/hypershift/pull/6657)
* [OCPBUGS-57588](https://issues.redhat.com/browse/OCPBUGS-57588): Update PSA from v1beta1 to v1 [#6302](https://github.com/openshift/hypershift/pull/6302)
* [OCPBUGS-59805](https://issues.redhat.com/browse/OCPBUGS-59805): Router publish strategy related changes for IBM Cloud platform [#6490](https://github.com/openshift/hypershift/pull/6490)
* [OCPBUGS-59933](https://issues.redhat.com/browse/OCPBUGS-59933): Use the image reference for the cache in the image metadata provider [#6535](https://github.com/openshift/hypershift/pull/6535)
* [CNTRLPLANE-1016](https://issues.redhat.com/browse/CNTRLPLANE-1016): Support day2 tags changes for AWS default SecurityGroup [#6455](https://github.com/openshift/hypershift/pull/6455)
* [Full changelog](https://github.com/openshift/hypershift/compare/7ed7c357e69292e169686f009a516c4bad55a0ff...edfa49d7396105759a6019f6ce16be00331c6440)


### [insights-operator](https://github.com/openshift/insights-operator/tree/9fd1106b89d42891e4aa4eec7a1f328b211b83fe)

* feat: add permissions to gather clusterrole (#1112) [#1112](https://github.com/openshift/insights-operator/pull/1112)
* fix: incorrect anonymization of domains (#1114) [#1114](https://github.com/openshift/insights-operator/pull/1114)
* [Full changelog](https://github.com/openshift/insights-operator/compare/8fffce910f39cf33efa97a24a894c84cf3f3d1f6...9fd1106b89d42891e4aa4eec7a1f328b211b83fe)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/7cf9bf8a41b97b6defea060cda71968378dd2fbb)

* fix for OCPBUGS-60427: userDataSecret.name should be a Required value on AWS [#1403](https://github.com/openshift/machine-api-operator/pull/1403)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/7cf7a446c086a97cb15766cb100b468573192b8e...7cf9bf8a41b97b6defea060cda71968378dd2fbb)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/1a3a559a1c78f664e9812812c14e1b02687a96bc)

* [OCPBUGS-60110](https://issues.redhat.com/browse/OCPBUGS-60110): Enable debug logging for nodeip-configuration [#5221](https://github.com/openshift/machine-config-operator/pull/5221)
* [OCPBUGS-59871](https://issues.redhat.com/browse/OCPBUGS-59871): Understand and eliminate noisy logs for MCN [#5199](https://github.com/openshift/machine-config-operator/pull/5199)
* [OCPBUGS-60767](https://issues.redhat.com/browse/OCPBUGS-60767): Update the OnClusterBuild payload tests to reflect the validation rule requiring MCP & MOSC names to match [#5258](https://github.com/openshift/machine-config-operator/pull/5258)
* [OCPBUGS-60265](https://issues.redhat.com/browse/OCPBUGS-60265): Reintroduce cronjob that deletes MCN v1alpha1 CRD [#5243](https://github.com/openshift/machine-config-operator/pull/5243)
* [OCPBUGS-60224](https://issues.redhat.com/browse/OCPBUGS-60224): Invalid architecture value found in annotation during 4.19 update [#5227](https://github.com/openshift/machine-config-operator/pull/5227)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/1b3ce4ea5b1943283ed703f55800a8f08d26e4a8...1a3a559a1c78f664e9812812c14e1b02687a96bc)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/345d64d597581eb0cb3cd2c1cf06124446da79a5)

* NO-JIRA: [release-4.19] OCPBUGS-60296: fix legend height to avoid scroll overlap [#498](https://github.com/openshift/monitoring-plugin/pull/498)
* NO-JIRA: improve consistency in tab string [#496](https://github.com/openshift/monitoring-plugin/pull/496)
* : NO-JIRA: update the i18n [#495](https://github.com/openshift/monitoring-plugin/pull/495)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/ca8edb7a12b7a884a07122490502509d28a3c7a0...345d64d597581eb0cb3cd2c1cf06124446da79a5)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/e176bf605757d52e7ea8a33bb9e243bf67ccba97)

* [OCPBUGS-59760](https://issues.redhat.com/browse/OCPBUGS-59760): warn if tmp is `noexec` (#1234) [#1234](https://github.com/openshift/oc-mirror/pull/1234)
* [OCPBUGS-59976](https://issues.redhat.com/browse/OCPBUGS-59976): v2/operator: support manifest lists with one arch (#1230) [#1230](https://github.com/openshift/oc-mirror/pull/1230)
* [OCPBUGS-59949](https://issues.redhat.com/browse/OCPBUGS-59949): fixes the result output showing the wrong total (#1237) [#1237](https://github.com/openshift/oc-mirror/pull/1237)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/e91ec32c8c0195393280c734ba46de5a31637479...e176bf605757d52e7ea8a33bb9e243bf67ccba97)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/5b3063ff149f290bebca0783fc508dfbf07689a5)

* [OCPBUGS-56614](https://issues.redhat.com/browse/OCPBUGS-56614): legacy image pull secret rollback controller [#384](https://github.com/openshift/openshift-controller-manager/pull/384)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/a672407574befa9faf6a56078d6852229701f8c6...5b3063ff149f290bebca0783fc508dfbf07689a5)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/5c83a8adfd3fb0a5b3f2f8a26d3d05eefd5ba9d0)

* [OCPBUGS-60525](https://issues.redhat.com/browse/OCPBUGS-60525): Add NetworkPolicy as a supported kind [#1047](https://github.com/openshift/operator-framework-olm/pull/1047)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/8bcf1556a550efa7bb380ec315c077cf29438695...5c83a8adfd3fb0a5b3f2f8a26d3d05eefd5ba9d0)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/6ff66743c4fbd0c413cf4bb9933a1eb510aa42e4)

* [OCPBUGS-48709](https://issues.redhat.com/browse/OCPBUGS-48709), [OCPBUGS-60797](https://issues.redhat.com/browse/OCPBUGS-60797), [OCPBUGS-60979](https://issues.redhat.com/browse/OCPBUGS-60979): DownStream Merge Sync from 4.20 [08-22-2025] [#2733](https://github.com/openshift/ovn-kubernetes/pull/2733)
* [OCPBUGS-48709](https://issues.redhat.com/browse/OCPBUGS-48709): DownStream Merge Sync from 4.20 [08-06-2025] [#2704](https://github.com/openshift/ovn-kubernetes/pull/2704)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/e24389403dd961a14b6512e40cda7e3e5d0a4b20...6ff66743c4fbd0c413cf4bb9933a1eb510aa42e4)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/ff6e9a8e1ea2eebb552cdc64974f8f6e7e5cbd1a)

* [OCPBUGS-61134](https://issues.redhat.com/browse/OCPBUGS-61134): Use OS_GIT_VERSION in Makefile when found (for Konflux builds) [#124](https://github.com/openshift/machine-api-provider-powervs/pull/124)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/87f8e306940e6b0231e6b8fb655ca1e6f21ba95a...ff6e9a8e1ea2eebb552cdc64974f8f6e7e5cbd1a)


### [tests](https://github.com/openshift/origin/tree/e4547472c759ab77d577fb062922da08d998794b)

* [OCPBUGS-60244](https://issues.redhat.com/browse/OCPBUGS-60244): Wait 30s after the upgrade is complete to validate workloads [#30144](https://github.com/openshift/origin/pull/30144)
* [OCPBUGS-60797](https://issues.redhat.com/browse/OCPBUGS-60797): Don't check for remote node subnet BGP routes [#30156](https://github.com/openshift/origin/pull/30156)
* NO-JIRA: Update extended/networking OWNERS [#30088](https://github.com/openshift/origin/pull/30088)
* [OCPBUGS-60569](https://issues.redhat.com/browse/OCPBUGS-60569): images/tests: Remove rteval [#30124](https://github.com/openshift/origin/pull/30124)
* [OCPBUGS-60429](https://issues.redhat.com/browse/OCPBUGS-60429): Load our MCO's OTE binary [#30043](https://github.com/openshift/origin/pull/30043)
* [OCPBUGS-59757](https://issues.redhat.com/browse/OCPBUGS-59757): OCPBUGS-59758: Improve MCN test stability [#30018](https://github.com/openshift/origin/pull/30018)
* [OCPBUGS-60117](https://issues.redhat.com/browse/OCPBUGS-60117): Enable test for LGW L2 [#30052](https://github.com/openshift/origin/pull/30052)
* [OCPBUGS-60234](https://issues.redhat.com/browse/OCPBUGS-60234): Move the legacy container failures [#30073](https://github.com/openshift/origin/pull/30073)
* [Full changelog](https://github.com/openshift/origin/compare/1a15c85aaa9f0b6c1e7ed2f9776a6c1d98b5cb1f...e4547472c759ab77d577fb062922da08d998794b)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/4f3a1da10d7f060f4b6530e70bd03892d9c43277)

* [OCPBUGS-60535](https://issues.redhat.com/browse/OCPBUGS-60535): Check for number of FailureDomain-s in GetVCenter() [#188](https://github.com/openshift/vsphere-problem-detector/pull/188)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/32b15d87f5fd387dd5d04b96b7250a353240bf92...4f3a1da10d7f060f4b6530e70bd03892d9c43277)