# 4.19.0-okd-scos.13

Created: 2025-08-09 03:01:35 +0000 UTC

Image Digest: `sha256:1fe046efa7100a5e7cffe6eadf7c8c702f3a69c956af6e1c06bd245ef7783ec4`

Promoted from registry.ci.openshift.org/origin/release-scos:4.19.0-0.okd-scos-2025-08-08-095749


## Changes from 4.19.0-okd-scos.6

### Components

* Kubectl 1.32.1
* Kubernetes upgraded from 1.32.5 to 1.32.7
* Kubernetes Tests upgraded from 1.32.5 to 1.32.6
* CentOS Stream CoreOS upgraded from 9.0.20250611-0 to 9.0.20250731-1


### New images

* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [b37141b0](https://github.com/openshift/aws-karpenter-provider-aws/commit/b37141b051bdf790eb7e8f45b95f6bd7dc8140f4) `sha256:ec94a7b2d6c7cd96ae6e240c07735a08b450a33bbd1d103d9c9d218636276b24`


### Rebuilt images without code change

* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [227f7537](https://github.com/openshift/cluster-autoscaler-operator/commit/227f7537c3b459d4940522809df60b2dfca738ed) `sha256:f539eb3cfebd4801084621a6fa0d07b64a946c98abd0a0aa60ed9bc4c406753e`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/be6aa91006d445bdaace0fdf6ed16b105ce930ee)

* [MGMT-21287](https://issues.redhat.com/browse/MGMT-21287): Remove NHO dependency in SNR (#7894) [#7894](https://github.com/openshift/assisted-service/pull/7894)
* NO-ISSUE: Add NHO and FAR back to the virtualization bundle (#7870) [#7870](https://github.com/openshift/assisted-service/pull/7870)
* [MGMT-20893](https://issues.redhat.com/browse/MGMT-20893): Remove Remediation operators from virtualization bundle (#7814) [#7814](https://github.com/openshift/assisted-service/pull/7814)
* [OCPBUGS-57361](https://issues.redhat.com/browse/OCPBUGS-57361): Use hostname to match hosts to BMH ignition (#7794) [#7794](https://github.com/openshift/assisted-service/pull/7794)
* [Full changelog](https://github.com/openshift/assisted-service/compare/d4d43dd72253e7c8c3ce4a3a1779aef3f59b251a...be6aa91006d445bdaace0fdf6ed16b105ce930ee)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/f2d7fdb22c82e9561f607d93ce80c22a43ea39cd)

* [OCPBUGS-60107](https://issues.redhat.com/browse/OCPBUGS-60107): Add ISOBuilder Release notes [#137](https://github.com/openshift/agent-installer-utils/pull/137)
* [OCPBUGS-59731](https://issues.redhat.com/browse/OCPBUGS-59731): add back NHR and FAR operators [#131](https://github.com/openshift/agent-installer-utils/pull/131)
* [OCPBUGS-58285](https://issues.redhat.com/browse/OCPBUGS-58285): OVE ISOBuilder works only if and when the script is ex… [#121](https://github.com/openshift/agent-installer-utils/pull/121)
* [OCPBUGS-59254](https://issues.redhat.com/browse/OCPBUGS-59254): invalid default channel configuration for package "mtv… [#126](https://github.com/openshift/agent-installer-utils/pull/126)
* [OCPBUGS-59666](https://issues.redhat.com/browse/OCPBUGS-59666): Enable 'q' and 'c' hotkeys for quit and configure network [#129](https://github.com/openshift/agent-installer-utils/pull/129)
* [OCPBUGS-57922](https://issues.redhat.com/browse/OCPBUGS-57922): Update operators list in ISOBuilder [#118](https://github.com/openshift/agent-installer-utils/pull/118)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/8cc39210ed284ff6c597815dee379ef4bfeb9d77...f2d7fdb22c82e9561f607d93ce80c22a43ea39cd)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/778bbd27922126b112451f54f57b439f6a28951b)

* [OCPBUGS-59241](https://issues.redhat.com/browse/OCPBUGS-59241), [OCPBUGS-59242](https://issues.redhat.com/browse/OCPBUGS-59242): bump github.com/golang/glog to v1.2.5 [#558](https://github.com/openshift/cluster-api-provider-aws/pull/558)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/802452086a937fc7ac01e26542a05c697b363933...778bbd27922126b112451f54f57b439f6a28951b)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/e5d84763b378fff025540cb9a459dcf1bdfd903d)

* [OCPBUGS-59893](https://issues.redhat.com/browse/OCPBUGS-59893): Remove stale conditions [#411](https://github.com/openshift/csi-operator/pull/411)
* [Full changelog](https://github.com/openshift/csi-operator/compare/b61e357915000a5f6dc50aad2cabeb1ac55e2e3c...e5d84763b378fff025540cb9a459dcf1bdfd903d)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/2e2909cf1317cb84285de3c73f6acadb9e8a31f2)

* [OCPBUGS-59888](https://issues.redhat.com/browse/OCPBUGS-59888): Add support to disable CAPZ components through a manager flag [#347](https://github.com/openshift/cluster-api-provider-azure/pull/347)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/7dc22457e9e0bae7329d0bb4a4705781f04446af...2e2909cf1317cb84285de3c73f6acadb9e8a31f2)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/04987a4f8fbf36196044db0e1863cb0febf4a88e)

* [OCPBUGS-56163](https://issues.redhat.com/browse/OCPBUGS-56163): [release-4.19] Update virtualmachines service to armcompute/v5 SDK [#144](https://github.com/openshift/machine-api-provider-azure/pull/144)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/249e31eba655572a52f44c6065bc251341544883...04987a4f8fbf36196044db0e1863cb0febf4a88e)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/249d7428c51fe85cabdab6394c4aed86fc24d398)

* [OCPBUGS-56963](https://issues.redhat.com/browse/OCPBUGS-56963): Make swift containers removal not fatal for UPI. [#9765](https://github.com/openshift/installer/pull/9765)
* [OCPBUGS-58403](https://issues.redhat.com/browse/OCPBUGS-58403): When AWS_PROFILE is invalid ask for credentials [#9829](https://github.com/openshift/installer/pull/9829)
* [OCPBUGS-58073](https://issues.redhat.com/browse/OCPBUGS-58073): Refactor removing loadbalancer in OpenStack. [#9808](https://github.com/openshift/installer/pull/9808)
* [OCPBUGS-58263](https://issues.redhat.com/browse/OCPBUGS-58263): allow to deploy single nodes with UPI [#9812](https://github.com/openshift/installer/pull/9812)
* [OCPBUGS-57901](https://issues.redhat.com/browse/OCPBUGS-57901): vSphere - remove unit tests using nip.io [#9802](https://github.com/openshift/installer/pull/9802)
* [OCPBUGS-58060](https://issues.redhat.com/browse/OCPBUGS-58060): MCO: consider custom AMI for edge compute machine pool [#9807](https://github.com/openshift/installer/pull/9807)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/installer/compare/e1b37acef872454997045f6b14119808a473357a...249d7428c51fe85cabdab6394c4aed86fc24d398)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/f4e49d5f3b0a2a3ee7a2cc7716bc8d70f33f3506)

* [OCPBUGS-59133](https://issues.redhat.com/browse/OCPBUGS-59133): Unblock BMH direct deletion when detached annotation is present [#423](https://github.com/openshift/baremetal-operator/pull/423)
* [OCPBUGS-56765](https://issues.redhat.com/browse/OCPBUGS-56765): Make firmware update handle only a subset of `Spec.Updates` [#420](https://github.com/openshift/baremetal-operator/pull/420)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/aa46a5a6144b865dbcdb8af35d13a790377542d4...f4e49d5f3b0a2a3ee7a2cc7716bc8d70f33f3506)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/33a1d92344c6b56721a745fbe2e41d3ca899aa78)

* [OCPBUGS-57781](https://issues.redhat.com/browse/OCPBUGS-57781): iptables: Switch PREROUTING REDIRECT rule to DNAT instead [#352](https://github.com/openshift/baremetal-runtimecfg/pull/352)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/b94d92874ab36d9d3ee26dda59f172611fca18fb...33a1d92344c6b56721a745fbe2e41d3ca899aa78)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/298429ba9831d1d72b89edd9beb82a6ee665c3b7)

* [OCPBUGS-58077](https://issues.redhat.com/browse/OCPBUGS-58077): Return error in case of error [#2052](https://github.com/openshift/oc/pull/2052)
* [Full changelog](https://github.com/openshift/oc/compare/fa1fd955cefab1204764bc98d754ed855ba6dca4...298429ba9831d1d72b89edd9beb82a6ee665c3b7)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/a5d62675b21911cdff2bfd257a85ef0b5a793731)

* [OCPBUGS-59401](https://issues.redhat.com/browse/OCPBUGS-59401): github.com/golang/glog v1.2.5 [#890](https://github.com/openshift/cloud-credential-operator/pull/890)
* [OCPBUGS-58246](https://issues.redhat.com/browse/OCPBUGS-58246): ccoctl: only add owned tag to azure resources on create [#881](https://github.com/openshift/cloud-credential-operator/pull/881)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/675dad516b5d96d4ecaa2df6461e2145204850f4...a5d62675b21911cdff2bfd257a85ef0b5a793731)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/b8e06f4f46570e6a14b0dcd37f27b46a2a02555b)

* [OCPBUGS-59638](https://issues.redhat.com/browse/OCPBUGS-59638): fix checkpoint gc of unknown recommenders [#366](https://github.com/openshift/kubernetes-autoscaler/pull/366)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/f746d442e69be1cf82cef1c473ddc0ab8a15d22f...b8e06f4f46570e6a14b0dcd37f27b46a2a02555b)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/0c3beae1a216187270d60af49117a82e74de4020)

* [OCPBUGS-57504](https://issues.redhat.com/browse/OCPBUGS-57504): Treat ResourceNotFound as non-fatal [#484](https://github.com/openshift/cluster-baremetal-operator/pull/484)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/c937e467ef097482b65f18c09ede444798bf8bd9...0c3beae1a216187270d60af49117a82e74de4020)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/cf9e6e9bf7f28ac52ea7b2f0af6b0b80cd7c32b9)

* [OCPBUGS-59228](https://issues.redhat.com/browse/OCPBUGS-59228), [OCPBUGS-59229](https://issues.redhat.com/browse/OCPBUGS-59229): fix: clusteroperator: do not update status.relatedobjects if only order changed [#332](https://github.com/openshift/cluster-capi-operator/pull/332)
* [OCPBUGS-57449](https://issues.redhat.com/browse/OCPBUGS-57449): mapi2capi: Create new machine template when changing MAPI providerSpec [#317](https://github.com/openshift/cluster-capi-operator/pull/317)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/ee69183571b592073a7163c5aef34d1a970a8c19...cf9e6e9bf7f28ac52ea7b2f0af6b0b80cd7c32b9)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/5a484a0f3d97801bd3f1cc2db69e477fa9d13a9a)

* [OCPBUGS-59847](https://issues.redhat.com/browse/OCPBUGS-59847): Adds service for cloud-controller-manager [#402](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/402)
* [OCPBUGS-59847](https://issues.redhat.com/browse/OCPBUGS-59847): Update service selector to match deployment label [#401](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/401)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/7ddcbe3dd3a7b836ec0c882032944dcded78f866...5a484a0f3d97801bd3f1cc2db69e477fa9d13a9a)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/1d890f9a4e6f0090040b5c31527397f1d34d1b96)

* [OCPBUGS-59285](https://issues.redhat.com/browse/OCPBUGS-59285): fix ordering on bootstrap IP selection [#1446](https://github.com/openshift/cluster-etcd-operator/pull/1446)
* [OCPBUGS-45731](https://issues.redhat.com/browse/OCPBUGS-45731): Updating cluster-etcd-operator-container image to be consistent with ART for 4.19 [#1376](https://github.com/openshift/cluster-etcd-operator/pull/1376)
* [OCPBUGS-59313](https://issues.redhat.com/browse/OCPBUGS-59313): add missing ports to svc and pod spec [#1447](https://github.com/openshift/cluster-etcd-operator/pull/1447)
* [OCPBUGS-57956](https://issues.redhat.com/browse/OCPBUGS-57956): feat: update logic to list arbiter nodes [#1437](https://github.com/openshift/cluster-etcd-operator/pull/1437)
* [OCPBUGS-57490](https://issues.redhat.com/browse/OCPBUGS-57490): Comply with OCP pod standards for TNF jobs [#1434](https://github.com/openshift/cluster-etcd-operator/pull/1434)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/e654299baac2e333b86db9d5f8ec69dabbff0e3c...1d890f9a4e6f0090040b5c31527397f1d34d1b96)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/f459344e20415fd3eb6f312c6b100ebb2cc996c9)

* [OCPBUGS-60204](https://issues.redhat.com/browse/OCPBUGS-60204): Update GatewayAPI test to check if deployment has 1 or more pod [#1260](https://github.com/openshift/cluster-ingress-operator/pull/1260)
* [NE-2109](https://issues.redhat.com/browse/NE-2109): Add OSSM channel and version override annotations [#1252](https://github.com/openshift/cluster-ingress-operator/pull/1252)
* [NE-2105](https://issues.redhat.com/browse/NE-2105): desiredIstio: Enable GIE if InferencePool found [#1251](https://github.com/openshift/cluster-ingress-operator/pull/1251)
* [NE-2103](https://issues.redhat.com/browse/NE-2103): Bump to OSSM 3.0.1 and Istio 1.24.4 [#1244](https://github.com/openshift/cluster-ingress-operator/pull/1244)
* [OCPBUGS-58394](https://issues.redhat.com/browse/OCPBUGS-58394): desiredIstio: Do not enable a default PDB [#1241](https://github.com/openshift/cluster-ingress-operator/pull/1241)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/6d54169d4c6643ae9b6ff81b3a21b929934062fa...f459344e20415fd3eb6f312c6b100ebb2cc996c9)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/e2ad6c193a3a0ee71a2bd128d5a4692ad8a6776a)

* [OCPBUGS-59957](https://issues.redhat.com/browse/OCPBUGS-59957): Add missing service ports to apiserver service [#1880](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1880)
* Revert "[release-4.19] OCPBUGS-58116: certregenerationcontroller: start configInformers again" [#1867](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1867)
* [OCPBUGS-58116](https://issues.redhat.com/browse/OCPBUGS-58116): certregenerationcontroller: start configInformers again [#1861](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1861)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/34bd8a7860802d310b4b0c124dc7975b6fa52773...e2ad6c193a3a0ee71a2bd128d5a4692ad8a6776a)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/3dfbb67635ce056fd55c360937be9868a3cf8ad5)

* [OCPBUGS-60132](https://issues.redhat.com/browse/OCPBUGS-60132): Missing endpoint slices for open ports the operator uses [#853](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/853)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/cec410b7f877a6eef57968889a644b848bdb540a...3dfbb67635ce056fd55c360937be9868a3cf8ad5)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/b9fd02fe0dfee74ae25f93ed67deda8bf4529419)

* [OCPBUGS-59932](https://issues.redhat.com/browse/OCPBUGS-59932): operator: increase wait time till degraded to max 4 times 5m [#2629](https://github.com/openshift/cluster-monitoring-operator/pull/2629)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/e4ecf3131005f74d21d9b2dd2003ceab8678a17f...b9fd02fe0dfee74ae25f93ed67deda8bf4529419)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/f17bb7a589e7a9516c35aa0a3bd1bbc55f071ebd)

* [OCPBUGS-60095](https://issues.redhat.com/browse/OCPBUGS-60095): Add release version annotation to whereabouts-controller/whereabouts-token-watcher [#2762](https://github.com/openshift/cluster-network-operator/pull/2762)
* [OCPBUGS-59645](https://issues.redhat.com/browse/OCPBUGS-59645): [release-4.19] BGP related backports [#2748](https://github.com/openshift/cluster-network-operator/pull/2748)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/2a1d6159a44bf8aa26bba9981f144006a1d99990...f17bb7a589e7a9516c35aa0a3bd1bbc55f071ebd)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/61b6637d88503c5ddaace05a3e7a3f0b04d49183)

* [OCPBUGS-52853](https://issues.redhat.com/browse/OCPBUGS-52853): Do not add iommu.passthrough to ARM by default (#1358) [#1358](https://github.com/openshift/cluster-node-tuning-operator/pull/1358)
* [OCPBUGS-58144](https://issues.redhat.com/browse/OCPBUGS-58144): E2E: Additional Functional tests for align cpus by UncoreCache Feature (#1348) [#1348](https://github.com/openshift/cluster-node-tuning-operator/pull/1348)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/174ae084670fb9775fe901053bfc3284facf9afa...61b6637d88503c5ddaace05a3e7a3f0b04d49183)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/c09f715fa8592f79d2436218779614b13cd9c592)

* [OCPBUGS-56253](https://issues.redhat.com/browse/OCPBUGS-56253): sync Azure File permissions with upstream docs #2 [#580](https://github.com/openshift/cluster-storage-operator/pull/580)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/94ed00846022ffffba2fcb0444c46beb0b9a2108...c09f715fa8592f79d2436218779614b13cd9c592)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/f165654c6db20683b2f609561450917efe3066ff)

* [OCPBUGS-60168](https://issues.redhat.com/browse/OCPBUGS-60168): CVO protects /metrics with authorization [#1222](https://github.com/openshift/cluster-version-operator/pull/1222)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/06f6aa6e22eadcc38d57f5786c50ceef38bb4d5e...f165654c6db20683b2f609561450917efe3066ff)


### [console](https://github.com/openshift/console/tree/6fbae6bc7a4507a7858f8e0878bb7af23f41ad62)

* [OCPBUGS-56651](https://issues.redhat.com/browse/OCPBUGS-56651): Recognize Detached BMH status [#15083](https://github.com/openshift/console/pull/15083)
* [OCPBUGS-58214](https://issues.redhat.com/browse/OCPBUGS-58214): Incorrect i18n translations in 4.19 batch [#15218](https://github.com/openshift/console/pull/15218)
* [OCPBUGS-59790](https://issues.redhat.com/browse/OCPBUGS-59790): Move alertmanager settings route [#15331](https://github.com/openshift/console/pull/15331)
* [OCPBUGS-59639](https://issues.redhat.com/browse/OCPBUGS-59639): Fixing no resources found message can not be shown completely [#15320](https://github.com/openshift/console/pull/15320)
* [OCPBUGS-59810](https://issues.redhat.com/browse/OCPBUGS-59810): Default name is comprised of '-' on 'Add to favorites' page when language is Korean/Japanese/Chinese. [#15333](https://github.com/openshift/console/pull/15333)
* [OCPBUGS-56280](https://issues.redhat.com/browse/OCPBUGS-56280): Follow-on fix. Add new "plugins-order" flag to bridge cli args [#15168](https://github.com/openshift/console/pull/15168)
* [OCPBUGS-59199](https://issues.redhat.com/browse/OCPBUGS-59199): Deleted objects remain in favorites and cause 404 errors [#15267](https://github.com/openshift/console/pull/15267)
* [OCPBUGS-59557](https://issues.redhat.com/browse/OCPBUGS-59557): add data-test attrs to console plugins table [#15305](https://github.com/openshift/console/pull/15305)
* [OCPBUGS-59513](https://issues.redhat.com/browse/OCPBUGS-59513): Update model flags when plugins load [#15298](https://github.com/openshift/console/pull/15298)
* [OCPBUGS-58331](https://issues.redhat.com/browse/OCPBUGS-58331): change '/metrics/usage' endpoint to '/api/metrics/usage' [#15273](https://github.com/openshift/console/pull/15273)
* [OCPBUGS-58433](https://issues.redhat.com/browse/OCPBUGS-58433): Add the Origin header to the HeaderBlacklist in the co… [#15246](https://github.com/openshift/console/pull/15246)
* [OCPBUGS-59315](https://issues.redhat.com/browse/OCPBUGS-59315): Not able to launch terminal window from OCP web console due to console plugin conflicts [#15280](https://github.com/openshift/console/pull/15280)
* [OCPBUGS-58217](https://issues.redhat.com/browse/OCPBUGS-58217): fix missing form styles in Create PVC page + Clone PVC… [#15260](https://github.com/openshift/console/pull/15260)
* [OCPBUGS-58183](https://issues.redhat.com/browse/OCPBUGS-58183): ContainerResource metric data for HPAs isn't visible i… [#15213](https://github.com/openshift/console/pull/15213)
* [OCPBUGS-58316](https://issues.redhat.com/browse/OCPBUGS-58316): Implement sessions in openshift authenticator [#15234](https://github.com/openshift/console/pull/15234)
* [OCPBUGS-58375](https://issues.redhat.com/browse/OCPBUGS-58375): fix bug where / in console.tab/horizontalNav href breaks navigation [#15239](https://github.com/openshift/console/pull/15239)
* [OCPBUGS-58377](https://issues.redhat.com/browse/OCPBUGS-58377): fix runtime error when editing HPA using the form [#15240](https://github.com/openshift/console/pull/15240)
* [OCPBUGS-58090](https://issues.redhat.com/browse/OCPBUGS-58090): Cannot read properties of undefined (reading 'node-role.kubernetes.io/master') error while accessing node logs from console [#15204](https://github.com/openshift/console/pull/15204)
* NO-JIRA: Update Console plugin SDK changelogs [#15212](https://github.com/openshift/console/pull/15212)
* [Full changelog](https://github.com/openshift/console/compare/477eb1aa13f3eb4adb82d2fdc82cd23f5295a101...6fbae6bc7a4507a7858f8e0878bb7af23f41ad62)


### [console-operator](https://github.com/openshift/console-operator/tree/3861c72d7928d87bafa94260b6a0038b21821843)

* [OCPBUGS-59488](https://issues.redhat.com/browse/OCPBUGS-59488): Update downloads deployment configuration to use master node selector [#1016](https://github.com/openshift/console-operator/pull/1016)
* [OCPBUGS-59618](https://issues.redhat.com/browse/OCPBUGS-59618): Fetch synced CM for the CertificateAuthority issuer + Wire synced OIDC Auth CM to Console [#1028](https://github.com/openshift/console-operator/pull/1028)
* [OCPBUGS-56280](https://issues.redhat.com/browse/OCPBUGS-56280): Add plugins order to console config [#988](https://github.com/openshift/console-operator/pull/988)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console-operator/compare/0cb29273c8b1efec6ca591d5259a69d34e5ce51f...3861c72d7928d87bafa94260b6a0038b21821843)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/4fd69cf5c0b71fb477271c69d6ddd4b276b18092)

* [OCPBUGS-59386](https://issues.redhat.com/browse/OCPBUGS-59386): Add max-concurrent-reconciles flag to machine actuator [#125](https://github.com/openshift/machine-api-provider-gcp/pull/125)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/9c99902f29b77e842400ad37925fcb67820d3675...4fd69cf5c0b71fb477271c69d6ddd4b276b18092)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/063b256caae5fbe3b6f2a5b1c35339220c7b4188)

* [OCPBUGS-59749](https://issues.redhat.com/browse/OCPBUGS-59749): 4.19: UPSTREAM: 2116: Remove check on snapshot create support for multi-writer HyperDisk-HA and let such validations occur at the PD control plane layer [#80](https://github.com/openshift/gcp-pd-csi-driver/pull/80)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/3aeac35b36ea59188761c2980451217b2099e5da...063b256caae5fbe3b6f2a5b1c35339220c7b4188)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/138db5223eea57e4408598a32320896c216724e1)

* [OCPBUGS-59534](https://issues.redhat.com/browse/OCPBUGS-59534): Rebase v1.32.7 to 4.19 [#2367](https://github.com/openshift/kubernetes/pull/2367)
* [OCPBUGS-57886](https://issues.redhat.com/browse/OCPBUGS-57886): Bump 4.19 1.32.6 [#2340](https://github.com/openshift/kubernetes/pull/2340)
* NO-JIRA: UPSTREAM: <carry>: Update rebase.sh to handle go versions major.minor.patch [#2341](https://github.com/openshift/kubernetes/pull/2341)
* [OCPBUGS-58175](https://issues.redhat.com/browse/OCPBUGS-58175): Fix flake caused by invalid detection of active policies in VAP integration tests [#2347](https://github.com/openshift/kubernetes/pull/2347)
* [OCPBUGS-55937](https://issues.redhat.com/browse/OCPBUGS-55937): UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated. [#2290](https://github.com/openshift/kubernetes/pull/2290)
* [Full changelog](https://github.com/openshift/kubernetes/compare/fadb78e720779ed1b29f32170f3e9dd32584a7e6...138db5223eea57e4408598a32320896c216724e1)


### [hypershift](https://github.com/openshift/hypershift/tree/7ed7c357e69292e169686f009a516c4bad55a0ff)

* [CNTRLPLANE-1034](https://issues.redhat.com/browse/CNTRLPLANE-1034): chore: Relax the kas healthcheck for aro when AllowedCIDRBlocks [#6617](https://github.com/openshift/hypershift/pull/6617)
* [OCPBUGS-60100](https://issues.redhat.com/browse/OCPBUGS-60100): feat: let ARO honour cp namespace annotation for default SC uids in 4.19 [#6592](https://github.com/openshift/hypershift/pull/6592)
* [CNTRLPLANE-1226](https://issues.redhat.com/browse/CNTRLPLANE-1226): feat(konflux): Make CPO builds hermetic [#6596](https://github.com/openshift/hypershift/pull/6596)
* [CNTRLPLANE-1213](https://issues.redhat.com/browse/CNTRLPLANE-1213): New API to support specifying cluster-autoscaler flags [#6558](https://github.com/openshift/hypershift/pull/6558)
* [OCPBUGS-57331](https://issues.redhat.com/browse/OCPBUGS-57331): Set default security context on everything [#6257](https://github.com/openshift/hypershift/pull/6257)
* [OCPSTRAT-2173](https://issues.redhat.com/browse/OCPSTRAT-2173): feat(hcco): add support for hosted OIDC client secrets [#6525](https://github.com/openshift/hypershift/pull/6525)
* [OCPBUGS-58300](https://issues.redhat.com/browse/OCPBUGS-58300): remove annotation is not working [#6465](https://github.com/openshift/hypershift/pull/6465)
* [CNTRLPLANE-1189](https://issues.redhat.com/browse/CNTRLPLANE-1189): Global PullSecret daemonSet implementation [#6507](https://github.com/openshift/hypershift/pull/6507)
* NO-JIRA: fix: set terminationMessagePolicy to FallbackToLogsOnError for olm-collect-profiles [#6493](https://github.com/openshift/hypershift/pull/6493)
* [CNTRLPLANE-1034](https://issues.redhat.com/browse/CNTRLPLANE-1034): sharedingress: Add support for kube-apiserver whitelist CIDRs [#6502](https://github.com/openshift/hypershift/pull/6502)
* [OCPBUGS-58683](https://issues.redhat.com/browse/OCPBUGS-58683): fix(hcco): Don't use a default OIDC client secret name when no secret name is provided [#6398](https://github.com/openshift/hypershift/pull/6398)
* [OCPBUGS-59674](https://issues.redhat.com/browse/OCPBUGS-59674): Initial Changes to Support Self-managed Azure [#6481](https://github.com/openshift/hypershift/pull/6481)
* [OCPBUGS-59547](https://issues.redhat.com/browse/OCPBUGS-59547): Remove code associated with Managed Identity v2 for ARO HCP for 4.19 [#6459](https://github.com/openshift/hypershift/pull/6459)
* [OCPBUGS-59493](https://issues.redhat.com/browse/OCPBUGS-59493): Remove unused jq and rsync rpms [#6457](https://github.com/openshift/hypershift/pull/6457)
* [OCPBUGS-59101](https://issues.redhat.com/browse/OCPBUGS-59101): Configure ClusterServiceLoadBalancerHea… [#6409](https://github.com/openshift/hypershift/pull/6409)
* NO-JIRA: chore(deps): update konflux references [#6383](https://github.com/openshift/hypershift/pull/6383)
* NO-JIRA: [release-4.19] CNTRLPLANE-1042: Disable createClusterNone for azure and scope down verifyResourceGroupLocationsMatch check [#6392](https://github.com/openshift/hypershift/pull/6392)
* [OCPBUGS-57660](https://issues.redhat.com/browse/OCPBUGS-57660): [release-4.19] CORENET-6094: CNO: add FRR-k8s image [#6374](https://github.com/openshift/hypershift/pull/6374)
* [OCPBUGS-58335](https://issues.redhat.com/browse/OCPBUGS-58335): Support proxy authentication when user/pass is included in URL [#6370](https://github.com/openshift/hypershift/pull/6370)
* [CNTRLPLANE-1044](https://issues.redhat.com/browse/CNTRLPLANE-1044): chore(deps): update konflux references [#6342](https://github.com/openshift/hypershift/pull/6342)
* [ACM-21713](https://issues.redhat.com/browse/ACM-21713): adding .git in .dockerignore to fix version info [#6318](https://github.com/openshift/hypershift/pull/6318)
* [CNV-61396](https://issues.redhat.com/browse/CNV-61396): Sync RBAC for expansion support in kubevirt CSI driver [#6255](https://github.com/openshift/hypershift/pull/6255)
* [CNTRLPLANE-374](https://issues.redhat.com/browse/CNTRLPLANE-374): hcco: handle post-install creation of OIDC client secrets [#6296](https://github.com/openshift/hypershift/pull/6296)
* [OCPBUGS-57485](https://issues.redhat.com/browse/OCPBUGS-57485): Don't use /version for haproxy health checks [#6292](https://github.com/openshift/hypershift/pull/6292)
* [Full changelog](https://github.com/openshift/hypershift/compare/be8f469666af1578821c8aa01337e03e5c09eb33...7ed7c357e69292e169686f009a516c4bad55a0ff)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/940ac1c27e5548f738219b8c2ea4d1b6924e60e5)

* [OCPBUGS-52542](https://issues.redhat.com/browse/OCPBUGS-52542): CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork [#118](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/118)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/877ef8cd546facbc2416c194128557a25b95d141...940ac1c27e5548f738219b8c2ea4d1b6924e60e5)


### [insights-operator](https://github.com/openshift/insights-operator/tree/8fffce910f39cf33efa97a24a894c84cf3f3d1f6)

* feat: copy proxy envs from IO pod to gathering pods (#1103) [#1103](https://github.com/openshift/insights-operator/pull/1103)
* [OCPBUGS-56781](https://issues.redhat.com/browse/OCPBUGS-56781): Enhance insights-runtime-extractor errors (#1089) [#1089](https://github.com/openshift/insights-operator/pull/1089)
* [Full changelog](https://github.com/openshift/insights-operator/compare/02f44737de3a93330de16f138b0f688fe1daefce...8fffce910f39cf33efa97a24a894c84cf3f3d1f6)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/fdef30c84b3d45ede364500984221c3f492b1415)

* NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-19). [#223](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/223)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/4ab93e07bb7c525990ef21a11caae2122ace63f6...fdef30c84b3d45ede364500984221c3f492b1415)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/f535e9a1a27ebfeca0fa1ac33f19383f46629141)

* "[release-4.19] OCPBUGS-58239: Implement volume expansion" [#64](https://github.com/openshift/kubevirt-csi-driver/pull/64)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/e3027025743b10d8a1df75afcf9c28d4ac8dbf3f...f535e9a1a27ebfeca0fa1ac33f19383f46629141)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/7cf7a446c086a97cb15766cb100b468573192b8e)

* [OCPBUGS-59386](https://issues.redhat.com/browse/OCPBUGS-59386): Enabled 10 concurrent reconciles on GCP [#1391](https://github.com/openshift/machine-api-operator/pull/1391)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/5eb6a3610eed1f873926eaf4db17669cdb308a1c...7cf7a446c086a97cb15766cb100b468573192b8e)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/1b3ce4ea5b1943283ed703f55800a8f08d26e4a8)

* [OCPBUGS-60080](https://issues.redhat.com/browse/OCPBUGS-60080): use channel to signal controller shutdown [#5217](https://github.com/openshift/machine-config-operator/pull/5217)
* [OCPBUGS-59928](https://issues.redhat.com/browse/OCPBUGS-59928), [OPNET-681](https://issues.redhat.com/browse/OPNET-681): Support migration to NMState [#5208](https://github.com/openshift/machine-config-operator/pull/5208)
* [OCPBUGS-59899](https://issues.redhat.com/browse/OCPBUGS-59899): Add workaround fix for static pod race [#5204](https://github.com/openshift/machine-config-operator/pull/5204)
* [OCPBUGS-59978](https://issues.redhat.com/browse/OCPBUGS-59978): ARO cert rotate fix [#5210](https://github.com/openshift/machine-config-operator/pull/5210)
* [OCPBUGS-59720](https://issues.redhat.com/browse/OCPBUGS-59720): TestMCNPoolNameCustom should clean up resources properly [#5186](https://github.com/openshift/machine-config-operator/pull/5186)
* [OCPBUGS-56750](https://issues.redhat.com/browse/OCPBUGS-56750): Support NODEIP_HINT in IPI deployments too [#5082](https://github.com/openshift/machine-config-operator/pull/5082)
* [OCPBUGS-58894](https://issues.redhat.com/browse/OCPBUGS-58894): Remove podman-etcd machine config source [#5169](https://github.com/openshift/machine-config-operator/pull/5169)
* [OCPBUGS-59208](https://issues.redhat.com/browse/OCPBUGS-59208): Backport QE ported test for OCL component readiness [#5125](https://github.com/openshift/machine-config-operator/pull/5125)
* [OCPBUGS-58820](https://issues.redhat.com/browse/OCPBUGS-58820): Add control-plane label for master nodes on legacy clusters [#5168](https://github.com/openshift/machine-config-operator/pull/5168)
* [OCPBUGS-57327](https://issues.redhat.com/browse/OCPBUGS-57327): Do not set cpu system reserve below the default value [#5117](https://github.com/openshift/machine-config-operator/pull/5117)
* [OCPBUGS-57689](https://issues.redhat.com/browse/OCPBUGS-57689): Ensure the build controller restarts on upgrade [#5127](https://github.com/openshift/machine-config-operator/pull/5127)
* [OCPBUGS-57930](https://issues.redhat.com/browse/OCPBUGS-57930): OCPBUGS-57506: Boot image controller should correctly handle marketplace boot images [#5135](https://github.com/openshift/machine-config-operator/pull/5135)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/37599558c086c22c11655523316bb1e6fb9eddc2...1b3ce4ea5b1943283ed703f55800a8f08d26e4a8)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/ca8edb7a12b7a884a07122490502509d28a3c7a0)

* [OCPBUGS-60129](https://issues.redhat.com/browse/OCPBUGS-60129): feat: add alerting rules tab to dev console [#488](https://github.com/openshift/monitoring-plugin/pull/488)
* [OU-943](https://issues.redhat.com/browse/OU-943): remove broken useEffect [#484](https://github.com/openshift/monitoring-plugin/pull/484)
* [OU-943](https://issues.redhat.com/browse/OU-943): Manual Cherry Pick [#474](https://github.com/openshift/monitoring-plugin/pull/474)
* [OU-594](https://issues.redhat.com/browse/OU-594): Manual cherry pick incidents tab 4 19 [#479](https://github.com/openshift/monitoring-plugin/pull/479)
* [OU-863](https://issues.redhat.com/browse/OU-863): [release-4.19] Manual cherry pick add disconnect option [#482](https://github.com/openshift/monitoring-plugin/pull/482)
* [OU-939](https://issues.redhat.com/browse/OU-939): Fix virt persepective new silence link [#478](https://github.com/openshift/monitoring-plugin/pull/478)
* [OU-928](https://issues.redhat.com/browse/OU-928): reset showgraph state when unmounting button [#462](https://github.com/openshift/monitoring-plugin/pull/462)
* [OU-744](https://issues.redhat.com/browse/OU-744): [release-4.19]: fix: set correct pf color for gradient background on legacy dashboards legend [#457](https://github.com/openshift/monitoring-plugin/pull/457)
* [OU-880](https://issues.redhat.com/browse/OU-880): [release-4.19] Manual cherry pick ou 880 [#458](https://github.com/openshift/monitoring-plugin/pull/458)
* [OU-842](https://issues.redhat.com/browse/OU-842): [release-4.19] fix: override notistack dependency to avoid conflict [#455](https://github.com/openshift/monitoring-plugin/pull/455)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/73a8e79b19fd6f89ff13b760e00d010ffae4c065...ca8edb7a12b7a884a07122490502509d28a3c7a0)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/381c36baaad8e45ba10cca43aeeaf00dfc907462)

* [OCPBUGS-58849](https://issues.redhat.com/browse/OCPBUGS-58849): Update the github.com/golang/glog module to v1.2.4 [#100](https://github.com/openshift/multus-admission-controller/pull/100)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/9369858a409280dc6891cb817931978b77168de7...381c36baaad8e45ba10cca43aeeaf00dfc907462)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/0e1112cea12c707a93bd01d408c598dd070c8676)

* [OCPBUGS-59640](https://issues.redhat.com/browse/OCPBUGS-59640): Prevent accidental IP deallocation in statefulsets [#375](https://github.com/openshift/whereabouts-cni/pull/375)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/45624b6383012d7b69409635daa8e4d455da6e16...0e1112cea12c707a93bd01d408c598dd070c8676)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/89e4882698653fdd80fcee2e9d92e668cb02d2d1)

* [OCPBUGS-58851](https://issues.redhat.com/browse/OCPBUGS-58851): Bump github.com/golang/glog to v1.2.4 (#110) [#110](https://github.com/openshift/network-metrics-daemon/pull/110)
* [OCPBUGS-60172](https://issues.redhat.com/browse/OCPBUGS-60172): Replace e2e test image (#119) [#119](https://github.com/openshift/network-metrics-daemon/pull/119)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/5ec8c6bde236feab19525c2d84f7d55f430f9e2b...89e4882698653fdd80fcee2e9d92e668cb02d2d1)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/f74e8e006cd47ae9b7cab525796f53af8fb1da9c)

* [OCPBUGS-58836](https://issues.redhat.com/browse/OCPBUGS-58836): 4.19 kube 1.32 [#318](https://github.com/openshift/oauth-proxy/pull/318)
* [OCPBUGS-58343](https://issues.redhat.com/browse/OCPBUGS-58343): release 4.19 CVE fixes [#326](https://github.com/openshift/oauth-proxy/pull/326)
* [OCPBUGS-58276](https://issues.redhat.com/browse/OCPBUGS-58276): fix e2e tests [#323](https://github.com/openshift/oauth-proxy/pull/323)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/3d12ccbee45c5d4bcea8c232867df58a60c4382b...f74e8e006cd47ae9b7cab525796f53af8fb1da9c)


### [oauth-server](https://github.com/openshift/oauth-server/tree/14780f7c67d5929c3db84504d10625710fcf5fe0)

* [OCPBUGS-57282](https://issues.redhat.com/browse/OCPBUGS-57282): Updating oauth-server-container image to be consistent with ART for 4.19 [#183](https://github.com/openshift/oauth-server/pull/183)
* [Full changelog](https://github.com/openshift/oauth-server/compare/6acb955fc87e1d487093217ca949f08eb8dc88c3...14780f7c67d5929c3db84504d10625710fcf5fe0)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/e91ec32c8c0195393280c734ba46de5a31637479)

* [OCPBUGS-57362](https://issues.redhat.com/browse/OCPBUGS-57362): v2/mirror: retry in case of ContextDeadlineExceeded (#1199) [#1199](https://github.com/openshift/oc-mirror/pull/1199)
* [OCPBUGS-54622](https://issues.redhat.com/browse/OCPBUGS-54622): cli/delete: fix workflow mode name output (#1222) [#1222](https://github.com/openshift/oc-mirror/pull/1222)
* [OCPBUGS-59799](https://issues.redhat.com/browse/OCPBUGS-59799): Detect images from a Helm Chart with an aliased chart dependency (#1225) [#1225](https://github.com/openshift/oc-mirror/pull/1225)
* [OCPBUGS-59396](https://issues.redhat.com/browse/OCPBUGS-59396): v2/archive: handle 0b mirror archive files (#1223) [#1223](https://github.com/openshift/oc-mirror/pull/1223)
* [OCPBUGS-58193](https://issues.redhat.com/browse/OCPBUGS-58193): v2/archive: error d2m when no tar files found (#1200) (#1207) [#1200](https://github.com/openshift/oc-mirror/pull/1200)
* [OCPBUGS-58279](https://issues.redhat.com/browse/OCPBUGS-58279): v2/defaults Fix rate limiting issues by enabling exponential backoff retries (#1205) [#1205](https://github.com/openshift/oc-mirror/pull/1205)
* [OCPBUGS-58271](https://issues.redhat.com/browse/OCPBUGS-58271): Fixes the tag when rebuilt catalog by digest only (#1203) [#1203](https://github.com/openshift/oc-mirror/pull/1203)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/e8a1ce3d1973ef2fb5870ea6abe7ee6d7c0d8ae5...e91ec32c8c0195393280c734ba46de5a31637479)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/8f42f09b2a9faecefb6ab22afe4a75c1a8d5a584)

* UPSTREAM: <carry>: Safely handle changes to description fields (#2023) [#2023](https://github.com/openshift/operator-framework-operator-controller/pull/2023)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/416a2d35da535db1d50211dbc13b22a909cda781...8f42f09b2a9faecefb6ab22afe4a75c1a8d5a584)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/7fe57362c4f64c0d4caf52a0bb26a59b2799b227)

* [OCPBUGS-57206](https://issues.redhat.com/browse/OCPBUGS-57206): Wire dry run option to Image API server operations [#524](https://github.com/openshift/openshift-apiserver/pull/524)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/18061bfe9586919421ed2bb342d9b326b1002bd7...7fe57362c4f64c0d4caf52a0bb26a59b2799b227)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/a672407574befa9faf6a56078d6852229701f8c6)

* [OCPBUGS-57951](https://issues.redhat.com/browse/OCPBUGS-57951): ignore error failing to find pull/push secrets [#401](https://github.com/openshift/openshift-controller-manager/pull/401)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/af43fe68a7d862959a797b66307a1277fffbc9df...a672407574befa9faf6a56078d6852229701f8c6)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/8bcf1556a550efa7bb380ec315c077cf29438695)

* [OCPBUGS-59258](https://issues.redhat.com/browse/OCPBUGS-59258): 🐛 add catalog-operator control-plane-specific tolerations to unpack jobs [#1037](https://github.com/openshift/operator-framework-olm/pull/1037)
* [OCPBUGS-58259](https://issues.redhat.com/browse/OCPBUGS-58259): Reduce Frequency of Update Requests for Copied CSVs (#3597) [release-4.19] [#1030](https://github.com/openshift/operator-framework-olm/pull/1030)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/4a6530a4cf4e8e81d8f04923f36dd36023f45902...8bcf1556a550efa7bb380ec315c077cf29438695)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/e24389403dd961a14b6512e40cda7e3e5d0a4b20)

* [OCPBUGS-48709](https://issues.redhat.com/browse/OCPBUGS-48709): DownStream Merge Sync from 4.20 [07-28-2025] [#2688](https://github.com/openshift/ovn-kubernetes/pull/2688)
* [OCPBUGS-48709](https://issues.redhat.com/browse/OCPBUGS-48709), [OCPBUGS-59530](https://issues.redhat.com/browse/OCPBUGS-59530): DownStream Merge Sync from 4.20 [07-17-2025] [#2675](https://github.com/openshift/ovn-kubernetes/pull/2675)
* [OCPBUGS-48709](https://issues.redhat.com/browse/OCPBUGS-48709): DownStream Merge Sync from 4.20 [07-09-2025] [#2660](https://github.com/openshift/ovn-kubernetes/pull/2660)
* [OCPBUGS-59106](https://issues.redhat.com/browse/OCPBUGS-59106): DownStream Merge Sync from 4.20 [06-18-2025] [#2642](https://github.com/openshift/ovn-kubernetes/pull/2642)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/0c8cdc93873c06b07973d147fc704d2224ac2faf...e24389403dd961a14b6512e40cda7e3e5d0a4b20)


### [stream-coreos, stream-coreos-extensions](https://github.com/openshift/os/tree/e97898c8af9cad8e5375e4860a7d79c39a1c79fa)

* Merge [#1853](https://github.com/openshift/os/pull/1853)
* Merge [#1851](https://github.com/openshift/os/pull/1851)
* [OCPBUGS-58122](https://issues.redhat.com/browse/OCPBUGS-58122): [TNF] OCP Two Node with Fencing symlink begone! [#1827](https://github.com/openshift/os/pull/1827)
* [Full changelog](https://github.com/openshift/os/compare/2acbcb0f9ef2e451f0138f1c33066fa6fa02ae20...e97898c8af9cad8e5375e4860a7d79c39a1c79fa)


### [tests](https://github.com/openshift/origin/tree/1a15c85aaa9f0b6c1e7ed2f9776a6c1d98b5cb1f)

* [OCPBUGS-60092](https://issues.redhat.com/browse/OCPBUGS-60092): feat(azure): skip metrics collection for ARO HCP hypershift [#30051](https://github.com/openshift/origin/pull/30051)
* [OCPBUGS-59398](https://issues.redhat.com/browse/OCPBUGS-59398): Skip MCN's node degrade test on 4.19 [#29990](https://github.com/openshift/origin/pull/29990)
* [OCPBUGS-59391](https://issues.redhat.com/browse/OCPBUGS-59391): [release-4.19]: OVNK BGP: Sync ovn-kubernetes bgp e2e tests [#29989](https://github.com/openshift/origin/pull/29989)
* [OCPBUGS-59226](https://issues.redhat.com/browse/OCPBUGS-59226): bump watch count limits [#29982](https://github.com/openshift/origin/pull/29982)
* [OCPBUGS-57886](https://issues.redhat.com/browse/OCPBUGS-57886): Bump 4.19 1.32.6 [#29933](https://github.com/openshift/origin/pull/29933)
* [OCPBUGS-58470](https://issues.redhat.com/browse/OCPBUGS-58470): Update IPsec e2e test to validate NAT-T encapsulation option [#29957](https://github.com/openshift/origin/pull/29957)
* [OCPBUGS-57206](https://issues.redhat.com/browse/OCPBUGS-57206): Backport pr 29834 to release-4.19 [#29903](https://github.com/openshift/origin/pull/29903)
* [OCPBUGS-58204](https://issues.redhat.com/browse/OCPBUGS-58204): Fix MCN test on agent compact FIPS jobs [#29943](https://github.com/openshift/origin/pull/29943)
* [OCPBUGS-58053](https://issues.redhat.com/browse/OCPBUGS-58053): [release-4.19] MCO-1768: Enable PIS testing on Metal [#29936](https://github.com/openshift/origin/pull/29936)
* [OCPBUGS-57436](https://issues.redhat.com/browse/OCPBUGS-57436): Add MCO test suite to 4.19 [#29918](https://github.com/openshift/origin/pull/29918)
* [OCPBUGS-57930](https://issues.redhat.com/browse/OCPBUGS-57930): Boot image controller should correctly handle marketplace boot images [#29935](https://github.com/openshift/origin/pull/29935)
* [OCPBUGS-57217](https://issues.redhat.com/browse/OCPBUGS-57217): Stabilize custom MCP cleanup on MCN tests [#29902](https://github.com/openshift/origin/pull/29902)
* [Full changelog](https://github.com/openshift/origin/compare/827e2ac2372ade0708488e95e3c8e98b083617a0...1a15c85aaa9f0b6c1e7ed2f9776a6c1d98b5cb1f)