# 4.20.0-okd-scos.ec.3

Created: 2025-06-10 20:45:56 +0000 UTC

Image Digest: `sha256:c180fea0effe7fb680baa93bb8e7b8ae5b4f0c42cd65c57fd3682686fe1d0b77`

Promoted from registry.ci.openshift.org/origin/release-scos:4.20.0-0.okd-scos-2025-06-10-064608


## Changes from 4.20.0-okd-scos.ec.2

### Components

* Kubectl 1.32.1
* Kubernetes 1.32.5
* Kubernetes Tests upgraded from 1.32.4 to 1.32.5
* CentOS Stream CoreOS 9.0.20250521-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| RouteAdvertisements <br/> (11 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| AWSServiceLBNetworkSecurityGroup <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| BootImageSkewEnforcement <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)|  |   |
| ManagedBootImagesAzure <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### Rebuilt images without code change

* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [686fdac5](https://github.com/openshift/driver-toolkit/commit/686fdac595884ade83fef7b2b9c41169bf3fcb21) `sha256:51ea49bcbff8f93d028ba0af6fc24b32b40f76a98b437bab7c02b21b66731e09`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/52692a1d7cdf2dcdf3a589b6780d5c14df9dd526)

* [MGMT-20464](https://issues.redhat.com/browse/MGMT-20464): Fix NFD detection of NVIDIA GPUs [#7696](https://github.com/openshift/assisted-service/pull/7696)
* [Full changelog](https://github.com/openshift/assisted-service/compare/f3be96d526cd629620843057a999d200e0a06843...52692a1d7cdf2dcdf3a589b6780d5c14df9dd526)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/6305db202125cf5eeef7f1f278ae44d2e0902728)

* NO-ISSUE: Update Konflux references (#1131) [#1131](https://github.com/openshift/assisted-installer/pull/1131)
* NO-ISSUE: Update Konflux references (#1130) [#1130](https://github.com/openshift/assisted-installer/pull/1130)
* NO-ISSUE: Add konflux service account migration (#1129) [#1129](https://github.com/openshift/assisted-installer/pull/1129)
* NO-ISSUE: Modify Konflux YAMLs to ocm-2.15 (#1126) [#1126](https://github.com/openshift/assisted-installer/pull/1126)
* [MGMT-11622](https://issues.redhat.com/browse/MGMT-11622): assisted-installer controller: operator status should be logged (#1079) [#1079](https://github.com/openshift/assisted-installer/pull/1079)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/346daa419ff97f71a8f85f48c482d85505f7d942...6305db202125cf5eeef7f1f278ae44d2e0902728)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/5d7b155d460329c5dd88e9e44e02a578ef877370)

* NO-ISSUE: Modify Konflux YAMLs to ocm-2.15 (#1009) [#1009](https://github.com/openshift/assisted-installer-agent/pull/1009)
* NO-ISSUE: Update Konflux references (#1003) [#1003](https://github.com/openshift/assisted-installer-agent/pull/1003)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/d19761ec5c7d3e19d616953f628683fd19ce4896...5d7b155d460329c5dd88e9e44e02a578ef877370)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/cc6569cc7ceef97b240e6120ac1cda63eba2aa32)

* [ART-13079](https://issues.redhat.com/browse/ART-13079): append .0 to go.mod version [#105](https://github.com/openshift/agent-installer-utils/pull/105)
* [OCPBUGS-56934](https://issues.redhat.com/browse/OCPBUGS-56934): Disable ESC key on checks page [#102](https://github.com/openshift/agent-installer-utils/pull/102)
* [OCPBUGS-56977](https://issues.redhat.com/browse/OCPBUGS-56977): OVE isobuilder fails on CentOS Stream 9 due to missing… [#103](https://github.com/openshift/agent-installer-utils/pull/103)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/b3e70cc03fe10b1f82524edf1bc4a97f55ac4a19...cc6569cc7ceef97b240e6120ac1cda63eba2aa32)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/26a4e67d80752e9ec961c518f57283adb70616e8)

* [ART-13079](https://issues.redhat.com/browse/ART-13079): append .0 to go.mod version [#78](https://github.com/openshift/apiserver-network-proxy/pull/78)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/1e82311cc3ab84cb3481fb018981d304e075ce4e...26a4e67d80752e9ec961c518f57283adb70616e8)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/7b6516635b7760a548415a0006b8e14ec4cf23aa)

* [STOR-2330](https://issues.redhat.com/browse/STOR-2330): Add labels to subscribe AWS-EBS CSI driver controller to NPs [#387](https://github.com/openshift/csi-operator/pull/387)
* NO-JIRA: create-efs-volume: print files to log as a fallback [#388](https://github.com/openshift/csi-operator/pull/388)
* [Full changelog](https://github.com/openshift/csi-operator/compare/dc854202e27e426e4c763c6bfeca81a7824c2140...7b6516635b7760a548415a0006b8e14ec4cf23aa)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/ea0b9944dddcc7043065a1fab5fca72dd17450da)

* [ART-13079](https://issues.redhat.com/browse/ART-13079): append .0 to go.mod version [#17](https://github.com/openshift/azure-kubernetes-kms/pull/17)
* NO-JIRA: Add OCP engineers to OWNERS for KMS [#15](https://github.com/openshift/azure-kubernetes-kms/pull/15)
* [CNTRLPLANE-373](https://issues.redhat.com/browse/CNTRLPLANE-373): Add Support for UserAssignedIdentityCredential for Kubernetes-KMS [#14](https://github.com/openshift/azure-kubernetes-kms/pull/14)
* [OCPBUGS-45592](https://issues.redhat.com/browse/OCPBUGS-45592): Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.19 [#9](https://github.com/openshift/azure-kubernetes-kms/pull/9)
* [OCPBUGS-53496](https://issues.redhat.com/browse/OCPBUGS-53496): bump golang-jwt v4 [#10](https://github.com/openshift/azure-kubernetes-kms/pull/10)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/d4fb1b6db34b00c12f27003f09ca8e7218ece54e...ea0b9944dddcc7043065a1fab5fca72dd17450da)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/60197d277fbbeb339559ae77c66611fcdaa415e9)

* [OCPBUGS-55372](https://issues.redhat.com/browse/OCPBUGS-55372): Fix regression on ASH with armcompute/v5 [#155](https://github.com/openshift/machine-api-provider-azure/pull/155)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/edb2a0011557ad6f8bd2dceb0a240d2f30722dd8...60197d277fbbeb339559ae77c66611fcdaa415e9)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/c535daf5de539730836dbf42f095b511233ba9cd)

* [CORS-3998](https://issues.redhat.com/browse/CORS-3998): Remove base domain from metadata [#9711](https://github.com/openshift/installer/pull/9711)
* [OCPBUGS-56616](https://issues.redhat.com/browse/OCPBUGS-56616): pkg/types/validation: Validate all SSH public keys [#9770](https://github.com/openshift/installer/pull/9770)
* [OCPBUGS-51299](https://issues.redhat.com/browse/OCPBUGS-51299): Set default project and location for KMS key manifest [#9767](https://github.com/openshift/installer/pull/9767)
* [AGENT-997](https://issues.redhat.com/browse/AGENT-997): Internal dev docs for authentication-authorization [#9224](https://github.com/openshift/installer/pull/9224)
* [OCPBUGS-57000](https://issues.redhat.com/browse/OCPBUGS-57000): Revert "CORS-3883: Remove user-assigned identity from ARM template" [#9766](https://github.com/openshift/installer/pull/9766)
* [SPLAT-2045](https://issues.redhat.com/browse/SPLAT-2045): [vsphere] promote multi-nic to default [#9493](https://github.com/openshift/installer/pull/9493)
* [Full changelog](https://github.com/openshift/installer/compare/4bec6f4bd400208c6fe2c79d83b1a7dea15f447a...c535daf5de539730836dbf42f095b511233ba9cd)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/303f33ba3dae6f17572b572fa7ac67dd5d7d4bce)

* [WRKLDS-1716](https://issues.redhat.com/browse/WRKLDS-1716): oc image serve: Remove as deprecated [#2033](https://github.com/openshift/oc/pull/2033)
* [OTA-1539](https://issues.redhat.com/browse/OTA-1539): pkg/cli/admin/upgrade/recommend: Add a --quiet option [#2023](https://github.com/openshift/oc/pull/2023)
* [OTA-1532](https://issues.redhat.com/browse/OTA-1532): pkg/cli/admin/upgrade/recommend: New, feature-gated --accept [#2017](https://github.com/openshift/oc/pull/2017)
* [Full changelog](https://github.com/openshift/oc/compare/49459b55564a51d3edf64da16d836bd25e0f9917...303f33ba3dae6f17572b572fa7ac67dd5d7d4bce)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/92e68ab82307581388f9131087090e734387f104)

* [OCPBUGS-55777](https://issues.redhat.com/browse/OCPBUGS-55777): Add missing Role, RoleBinding [#860](https://github.com/openshift/cloud-credential-operator/pull/860)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/f95f61d7630900641d5440b3de516451e8114be7...92e68ab82307581388f9131087090e734387f104)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/ad0f9dd387a015976bd6e4dd26e2522875da0344)

* NO-JIRA: add logging when rendering bootstrap manifests [#770](https://github.com/openshift/cluster-authentication-operator/pull/770)
* [CNTRLPLANE-939](https://issues.redhat.com/browse/CNTRLPLANE-939): test/e2e-oidc: poll test preconditions for a short time instead of checking once [#769](https://github.com/openshift/cluster-authentication-operator/pull/769)
* [CNTRLPLANE-939](https://issues.redhat.com/browse/CNTRLPLANE-939): Create separate make rule for e2e oidc tests [#768](https://github.com/openshift/cluster-authentication-operator/pull/768)
* [AUTH-544](https://issues.redhat.com/browse/AUTH-544): Extend e2e test to leverage new functionality [#737](https://github.com/openshift/cluster-authentication-operator/pull/737)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/ceeb021d7562cf3d669ed7293f46b2a50e848c73...ad0f9dd387a015976bd6e4dd26e2522875da0344)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/1a41444beb4d424f4173bccc47cf58c535fc5fd9)

* [OCPBUGS-57041](https://issues.redhat.com/browse/OCPBUGS-57041): update cluster provider type early [#343](https://github.com/openshift/cluster-autoscaler-operator/pull/343)
* NO-JIRA: Add autoscale members to OWNERS file [#345](https://github.com/openshift/cluster-autoscaler-operator/pull/345)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/227f7537c3b459d4940522809df60b2dfca738ed...1a41444beb4d424f4173bccc47cf58c535fc5fd9)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/0c734f42441495068a7dfab43f071ae6da133f09)

* [OCPBUGS-57013](https://issues.redhat.com/browse/OCPBUGS-57013): Fix reset sync status in migration controllers [#313](https://github.com/openshift/cluster-capi-operator/pull/313)
* NO-JIRA: Assorted cleanups [#312](https://github.com/openshift/cluster-capi-operator/pull/312)
* [OCPBUGS-57040](https://issues.redhat.com/browse/OCPBUGS-57040): Fix failure to retry unpause [#309](https://github.com/openshift/cluster-capi-operator/pull/309)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/4716dec0713326fd309b7e468b1b582120d2ce5e...0c734f42441495068a7dfab43f071ae6da133f09)


### [cluster-config-api](https://github.com/openshift/api/tree/c8c30d5b3acc2ec3be9c2a6debc7d3109ce90076)

* [CNTRLPLANE-337](https://issues.redhat.com/browse/CNTRLPLANE-337): authentication: oidc: make username claim mapping required [#2352](https://github.com/openshift/api/pull/2352)
* NO-ISSUE: Remove redundant image stream [#2358](https://github.com/openshift/api/pull/2358)
* Promote RouteAdvertisements feature gate to default feature set [#2225](https://github.com/openshift/api/pull/2225)
* [MCO-1671](https://issues.redhat.com/browse/MCO-1671): Add feature gates for azure boot image updates & skew management [#2353](https://github.com/openshift/api/pull/2353)
* [SPLAT-2137](https://issues.redhat.com/browse/SPLAT-2137): FG for Service Type LB NLB with Security Group [#2354](https://github.com/openshift/api/pull/2354)
* [OCPBUGS-56725](https://issues.redhat.com/browse/OCPBUGS-56725): Add max length validation for apiserver namedCertificates [#2342](https://github.com/openshift/api/pull/2342)
* Remove DataGather state print column [#2350](https://github.com/openshift/api/pull/2350)
* [Full changelog](https://github.com/openshift/api/compare/e041b5efb8e499c3b3ee2ab356523a8899466fda...c8c30d5b3acc2ec3be9c2a6debc7d3109ce90076)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/be41be00b822b820b03a7190732e3fc983efddf3)

* [OCPBUGS-55652](https://issues.redhat.com/browse/OCPBUGS-55652): Removed PrivateHostedZoneAWS from component [#1230](https://github.com/openshift/cluster-ingress-operator/pull/1230)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/21ac32d9862437b5c563540edd721c9cae5f1e8c...be41be00b822b820b03a7190732e3fc983efddf3)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/ca4b9ee6d89df69493939272ebb7998710b4e911)

* NO-JIRA: [bot] Synchronize versions of the downstream components [#2607](https://github.com/openshift/cluster-monitoring-operator/pull/2607)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/34568a9c7f7a0eeb1e8948d03cfc4049adf72362...ca4b9ee6d89df69493939272ebb7998710b4e911)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/d3599812f322426f63924896b5f563141eef396b)

* [CORENET-5704](https://issues.redhat.com/browse/CORENET-5704): Consume latest vendoring from ocp api repo [#2720](https://github.com/openshift/cluster-network-operator/pull/2720)
* [OCPBUGS-56878](https://issues.redhat.com/browse/OCPBUGS-56878): whereabouts-config is a reserved name for user interaction. [#2707](https://github.com/openshift/cluster-network-operator/pull/2707)
* [CNTRLPLANE-341](https://issues.redhat.com/browse/CNTRLPLANE-341): Issue shorter certificates when ShortRotation featuregate is enabled [#2556](https://github.com/openshift/cluster-network-operator/pull/2556)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/fca1273844fb1b968d109f7ca7c3d5e96f234179...d3599812f322426f63924896b5f563141eef396b)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/df3b43e9788cd195660f26d1358fd379ef37f5f1)

* Change /master to /control-plane node label (#1327) [#1327](https://github.com/openshift/cluster-node-tuning-operator/pull/1327)
* NO-JIRA: E2E: Additional Functional tests for align cpus by UncoreCache Feature (#1324) [#1324](https://github.com/openshift/cluster-node-tuning-operator/pull/1324)
* Update performance_profile.md (#1329) [#1329](https://github.com/openshift/cluster-node-tuning-operator/pull/1329)
* fix: stop referencing non existing git references in go.mod (#1332) [#1332](https://github.com/openshift/cluster-node-tuning-operator/pull/1332)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/b2c146e566da800b4101749c00a0b759aac3e9ec...df3b43e9788cd195660f26d1358fd379ef37f5f1)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/e55b291900d64618709de34fdcfbf544b351dd76)

* [OCPSTRAT-1976](https://issues.redhat.com/browse/OCPSTRAT-1976): Add readonlyRootFilesystem [#120](https://github.com/openshift/cluster-olm-operator/pull/120)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/9434c5af4a1409406eb99e8b3beedccf402ff42b...e55b291900d64618709de34fdcfbf544b351dd76)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/f9d61b5fe17a95139cea2c21e3b7cd42cc992579)

* [STOR-2330](https://issues.redhat.com/browse/STOR-2330): Add labels to subscribe AWS-EBS CSI driver operator to NPs [#584](https://github.com/openshift/cluster-storage-operator/pull/584)
* [STOR-2330](https://issues.redhat.com/browse/STOR-2330): Network Policies for CSI drivers and operators [#579](https://github.com/openshift/cluster-storage-operator/pull/579)
* [OSASINFRA-3675](https://issues.redhat.com/browse/OSASINFRA-3675): Add credentialRequest for manila namespace [#573](https://github.com/openshift/cluster-storage-operator/pull/573)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/424839c6f921eb888a0d751c1940603d7562bb77...f9d61b5fe17a95139cea2c21e3b7cd42cc992579)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/546f3c2d648c1afb259380df2ea8da22f98560ea)

* NO-JIRA: test: remove unnecessary integration tests layers [#1202](https://github.com/openshift/cluster-version-operator/pull/1202)
* NO-JIRA: tests: fix `make integration-test` target [#1203](https://github.com/openshift/cluster-version-operator/pull/1203)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/4eb58779f3cb6911c1abb09bdeaf4d98dd6e4972...546f3c2d648c1afb259380df2ea8da22f98560ea)


### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/111a8d9fd299dbd6b023dc11d219a5a0da0bd79e)

* [ART-13079](https://issues.redhat.com/browse/ART-13079): append .0 to go.mod version [#67](https://github.com/openshift/configmap-reload/pull/67)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/9bfbde8676cca7b45efc4f76f683bd26fe65893d...111a8d9fd299dbd6b023dc11d219a5a0da0bd79e)


### [console](https://github.com/openshift/console/tree/dee70049885c75dde04bc3fbdac45fa6c051cda2)

* [OCPBUGS-56985](https://issues.redhat.com/browse/OCPBUGS-56985): Getting "Oh no something went wrong" error message in web console. [#15147](https://github.com/openshift/console/pull/15147)
* [CONSOLE-4550](https://issues.redhat.com/browse/CONSOLE-4550): Remove usage of Bootstrap grid in Console [#15119](https://github.com/openshift/console/pull/15119)
* [OCPBUGS-56999](https://issues.redhat.com/browse/OCPBUGS-56999): Cannot read properties of undefined (reading 'node-role.kubernetes.io/master') error while accessing node logs from console [#15122](https://github.com/openshift/console/pull/15122)
* [OCPBUGS-57147](https://issues.redhat.com/browse/OCPBUGS-57147): Disable tests A-02-TC02 and A-02-TC05 [#15146](https://github.com/openshift/console/pull/15146)
* [OCPBUGS-56804](https://issues.redhat.com/browse/OCPBUGS-56804): clarify verbiage for Lightspeed hide button [#15144](https://github.com/openshift/console/pull/15144)
* [OCPBUGS-56050](https://issues.redhat.com/browse/OCPBUGS-56050): Cannot read properties of undefined (reading 'filter') error while accessing nodes from console [#15121](https://github.com/openshift/console/pull/15121)
* [OCPBUGS-56044](https://issues.redhat.com/browse/OCPBUGS-56044): fix VirtualizedTable runtime error if sortColumn is no… [#15112](https://github.com/openshift/console/pull/15112)
* [OCPBUGS-56986](https://issues.redhat.com/browse/OCPBUGS-56986): Fix runtime error when navigating alert actions [#15118](https://github.com/openshift/console/pull/15118)
* [OCPBUGS-49709](https://issues.redhat.com/browse/OCPBUGS-49709): Add useOverlay hook to dynamic plugin SDK and deprecate useModal hook [#14707](https://github.com/openshift/console/pull/14707)
* [OCPBUGS-56179](https://issues.redhat.com/browse/OCPBUGS-56179): Add isAllNamespacesKey function to dynamic plugin API [#15066](https://github.com/openshift/console/pull/15066)
* [OCPBUGS-56707](https://issues.redhat.com/browse/OCPBUGS-56707): fix bug where Roles list was displaying invalid data f… [#15115](https://github.com/openshift/console/pull/15115)
* [OCPBUGS-56917](https://issues.redhat.com/browse/OCPBUGS-56917), [OCPBUGS-56922](https://issues.redhat.com/browse/OCPBUGS-56922): Remove ExternalLink and Timestamp reexport [#15110](https://github.com/openshift/console/pull/15110)
* [Full changelog](https://github.com/openshift/console/compare/e3c9276872baa6a900d8761ca9fd79ce0d156844...dee70049885c75dde04bc3fbdac45fa6c051cda2)


### [coredns](https://github.com/openshift/coredns/tree/a69279e3393b269099dcaae967570741d4c5e469)

* [ART-13079](https://issues.redhat.com/browse/ART-13079): append .0 to go.mod version [#132](https://github.com/openshift/coredns/pull/132)
* [Full changelog](https://github.com/openshift/coredns/compare/7a1451db77a68161d58af9b6ca2c9388d578310a...a69279e3393b269099dcaae967570741d4c5e469)


### [docker-builder](https://github.com/openshift/builder/tree/8992516833415869ed4212a869efb741a278f03b)

* [OCPBUGS-56106](https://issues.redhat.com/browse/OCPBUGS-56106): S2I build cpu limits observed by assemble are limited to 1 cpu [#470](https://github.com/openshift/builder/pull/470)
* [Full changelog](https://github.com/openshift/builder/compare/f2e5d60196778fd5452b345d93fc821218e3d2f3...8992516833415869ed4212a869efb741a278f03b)


### [docker-registry](https://github.com/openshift/image-registry/tree/b2734984266eec0f80a5d51d6eb8fd7c25dc336c)

* [OCPBUGS-56483](https://issues.redhat.com/browse/OCPBUGS-56483): bump jwt and oauth dependencies [#427](https://github.com/openshift/image-registry/pull/427)
* [Full changelog](https://github.com/openshift/image-registry/compare/59376a751cdc4c936b22aa228bf2ceb889b471f3...b2734984266eec0f80a5d51d6eb8fd7c25dc336c)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/73b1f33974c180779728c0c7b0af875cb269cfba)

* Revert "TRT-2068: Reintroduce removal of non-suite annotation rules, and fix topology selector" [#2329](https://github.com/openshift/kubernetes/pull/2329)
* [TRT-2068](https://issues.redhat.com/browse/TRT-2068): Reintroduce removal of non-suite annotation rules, and fix topology selector [#2322](https://github.com/openshift/kubernetes/pull/2322)
* [OCPNODE-3010](https://issues.redhat.com/browse/OCPNODE-3010): openshift-hack: enable userns e2e tests [#2239](https://github.com/openshift/kubernetes/pull/2239)
* [Full changelog](https://github.com/openshift/kubernetes/compare/886f7c90e4bd137f91ebfb7d0cb55d476e719643...73b1f33974c180779728c0c7b0af875cb269cfba)


### [hypershift](https://github.com/openshift/hypershift/tree/fd917876c05d8eab26487a895b39220874840b5e)

* [OCPBUGS-55892](https://issues.redhat.com/browse/OCPBUGS-55892): make image registry managed identity optional [#6127](https://github.com/openshift/hypershift/pull/6127)
* [CNV-61396](https://issues.redhat.com/browse/CNV-61396): Sync RBAC for expansion support in kubevirt CSI driver [#6226](https://github.com/openshift/hypershift/pull/6226)
* [OCPBUGS-57125](https://issues.redhat.com/browse/OCPBUGS-57125): Support deserializing monitoring manifests when RHOBS enabled [#6238](https://github.com/openshift/hypershift/pull/6238)
* [OCPBUGS-56966](https://issues.redhat.com/browse/OCPBUGS-56966): Fix ignition server route getting constantly recreated [#6225](https://github.com/openshift/hypershift/pull/6225)
* [OCPBUGS-57125](https://issues.redhat.com/browse/OCPBUGS-57125): Support RHOBS when loading cpov2 monitoring manifests by replacing the API group [#6228](https://github.com/openshift/hypershift/pull/6228)
* [OCPBUGS-53259](https://issues.redhat.com/browse/OCPBUGS-53259): Reuse hosted cluster release and metadata providers [#6095](https://github.com/openshift/hypershift/pull/6095)
* [OCPBUGS-54720](https://issues.redhat.com/browse/OCPBUGS-54720): HCP payload doesn't respect multiple mirrors [#6222](https://github.com/openshift/hypershift/pull/6222)
* [ARO-15626](https://issues.redhat.com/browse/ARO-15626): Disallow users from setting .spec.managementState to Removed in the image registry operator config on Azure [#6013](https://github.com/openshift/hypershift/pull/6013)
* NO-JIRA: cpo/oidc: remove validation functions that use default CEL compiler [#6221](https://github.com/openshift/hypershift/pull/6221)
* NO-JIRA: Create test fixtures for all resources in TestControlPlaneComponents [#6216](https://github.com/openshift/hypershift/pull/6216)
* [OCPBUGS-42938](https://issues.redhat.com/browse/OCPBUGS-42938): Support proxy authentication when user/pass is included in URL [#6207](https://github.com/openshift/hypershift/pull/6207)
* [OCPBUGS-30260](https://issues.redhat.com/browse/OCPBUGS-30260): Allow setting target node selector for control plane router [#3946](https://github.com/openshift/hypershift/pull/3946)
* [OCPBUGS-56930](https://issues.redhat.com/browse/OCPBUGS-56930): test/e2e: fix version gate checks on minor upgrade [#6219](https://github.com/openshift/hypershift/pull/6219)
* NO-JIRA: Follow up PR from #6192 [#6204](https://github.com/openshift/hypershift/pull/6204)
* [MGMT-20682](https://issues.redhat.com/browse/MGMT-20682): Enable disabling of openshift-samples capability [#6197](https://github.com/openshift/hypershift/pull/6197)
* [OCPBUGS-56430](https://issues.redhat.com/browse/OCPBUGS-56430): Add DR operations after HC restoration [#6195](https://github.com/openshift/hypershift/pull/6195)
* [CNTRLPLANE-936](https://issues.redhat.com/browse/CNTRLPLANE-936): fix(tekton): drop multiarch builds on PR [#6223](https://github.com/openshift/hypershift/pull/6223)
* [CNTRLPLANE-844](https://issues.redhat.com/browse/CNTRLPLANE-844): Delete legacy unused DeploymentConfig code [#6210](https://github.com/openshift/hypershift/pull/6210)
* [CNTRLPLANE-206](https://issues.redhat.com/browse/CNTRLPLANE-206): Add NetworkPolicy to shared-ingress [#6173](https://github.com/openshift/hypershift/pull/6173)
* [WRKLDS-1676](https://issues.redhat.com/browse/WRKLDS-1676): ocm: Make config compatible with library-go [#6203](https://github.com/openshift/hypershift/pull/6203)
* NO-JIRA: Fix documentation field name for KubeAPIServerDNSName [#6220](https://github.com/openshift/hypershift/pull/6220)
* [OCPBUGS-56814](https://issues.redhat.com/browse/OCPBUGS-56814): PodSecurityConfiguration  Kas config render from gate [#6213](https://github.com/openshift/hypershift/pull/6213)
* [Full changelog](https://github.com/openshift/hypershift/compare/390383818bec583923e9d706f090adc8e59e33dc...fd917876c05d8eab26487a895b39220874840b5e)


### [insights-operator](https://github.com/openshift/insights-operator/tree/b602a5b9e7329508a2dbd49e0acc78da872591e2)

* NO-JIRA: update github.com/openshift/api and openshift/client-go to latest version (#1092) [#1092](https://github.com/openshift/insights-operator/pull/1092)
* feat: add Progressing condition (#1090) [#1090](https://github.com/openshift/insights-operator/pull/1090)
* [Full changelog](https://github.com/openshift/insights-operator/compare/79cebd00176d6e3daed5e95999a7493a149969ac...b602a5b9e7329508a2dbd49e0acc78da872591e2)


### [ironic](https://github.com/openshift/ironic-image/tree/e61d9b0ff1f7b72e793930d8e01c10970891435f)

* [METAL-1376](https://issues.redhat.com/browse/METAL-1376): Make sushy support NetworkAdapters [#662](https://github.com/openshift/ironic-image/pull/662)
* [Full changelog](https://github.com/openshift/ironic-image/compare/d4e7a61935db396bcbda44614c2fd786e0f68674...e61d9b0ff1f7b72e793930d8e01c10970891435f)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/abeec89fe6f1b22b807af824e44adedcbdb65f39)

* [ART-13079](https://issues.redhat.com/browse/ART-13079): append .0 to go.mod version [#101](https://github.com/openshift/ironic-rhcos-downloader/pull/101)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/dbe197724c9e2e5f7279665e5bcb16ff3bc8d97b...abeec89fe6f1b22b807af824e44adedcbdb65f39)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/2b36e46ab36a5a7581c9ed763e0a7646f90b94e7)

* Fix verify job failure with build-machinery bump [#214](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/214)
* [ART-13079](https://issues.redhat.com/browse/ART-13079): append .0 to go.mod version [#212](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/212)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/4c521b09f4dc55ac69234419e083f3815646f4a9...2b36e46ab36a5a7581c9ed763e0a7646f90b94e7)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/37689e5a475ea7a35952bda2a909ac048828cace)

* [OCPBUGS-57018](https://issues.redhat.com/browse/OCPBUGS-57018): Fixed test logic for UPI scenario [#1375](https://github.com/openshift/machine-api-operator/pull/1375)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/585f8cb7b21334d5c5d539337a5a7ea5b3f5acf8...37689e5a475ea7a35952bda2a909ac048828cace)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/c3a875dc58764b6dc05e89c9ab9bc53e2b64b44f)

* [OCPBUGS-45459](https://issues.redhat.com/browse/OCPBUGS-45459): Remove trailing period from hostnames [#4966](https://github.com/openshift/machine-config-operator/pull/4966)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/af994c8fc8299d78780e90eaba09b20a2ce08983...c3a875dc58764b6dc05e89c9ab9bc53e2b64b44f)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/4a3d2c1257beeab878216dc84ead598b58275583)

* [OU-842](https://issues.redhat.com/browse/OU-842): fix: override notistack dependency to avoid conflict [#422](https://github.com/openshift/monitoring-plugin/pull/422)
* NO-JIRA: chore: Update OWNERS [#420](https://github.com/openshift/monitoring-plugin/pull/420)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/f6ad03feddfcf26c43a38c45c6e00a4c927ae6e6...4a3d2c1257beeab878216dc84ead598b58275583)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/fdc6d599b78bd19a2c33b0df9ea7eca48557a129)

* [ART-13079](https://issues.redhat.com/browse/ART-13079): append .0 to go.mod version [#94](https://github.com/openshift/multus-admission-controller/pull/94)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/0b1b812e082285fd19da6bde67c905f3893bf0d7...fdc6d599b78bd19a2c33b0df9ea7eca48557a129)


### [network-tools](https://github.com/openshift/network-tools/tree/16f4c78d4a5f1e17d8da2f54aeeea26b40aa90c3)

* [ART-13079](https://issues.redhat.com/browse/ART-13079): append .0 to go.mod version [#145](https://github.com/openshift/network-tools/pull/145)
* [Full changelog](https://github.com/openshift/network-tools/compare/2e4fcb57fd0e82f82b50cbc5bbcb91812d5ba823...16f4c78d4a5f1e17d8da2f54aeeea26b40aa90c3)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/4e95e122621c16764023dedd38e6b94020f9e08b)

* [OCPBUGS-56929](https://issues.redhat.com/browse/OCPBUGS-56929): Add fileupload translation [#245](https://github.com/openshift/networking-console-plugin/pull/245)
* [OCPBUGS-49386](https://issues.redhat.com/browse/OCPBUGS-49386): Fix pod contenxt [#246](https://github.com/openshift/networking-console-plugin/pull/246)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/47bd50f187a94bcde180e127f399ef71dc8a0023...4e95e122621c16764023dedd38e6b94020f9e08b)


### [oauth-server](https://github.com/openshift/oauth-server/tree/c0332550a5f81bb84c109b2525bcbb3e11de83ca)

* Use newer build-machinery-go [#177](https://github.com/openshift/oauth-server/pull/177)
* [ART-13079](https://issues.redhat.com/browse/ART-13079): append .0 to go.mod version [#175](https://github.com/openshift/oauth-server/pull/175)
* [Full changelog](https://github.com/openshift/oauth-server/compare/c4dd54652cdde82fd3dfe2ef43b4f15f216791e3...c0332550a5f81bb84c109b2525bcbb3e11de83ca)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/38e8038a3ee5dc917ac72091d1127eba8c51a711)

* [OCPBUGS-55078](https://issues.redhat.com/browse/OCPBUGS-55078): skips signature mirroring for rebuilt operator catalogs (#1154) [#1154](https://github.com/openshift/oc-mirror/pull/1154)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/0d8b76a39369e615429db16e7470b7484e6dce68...38e8038a3ee5dc917ac72091d1127eba8c51a711)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/a565ae3cc5b358567ec2c310443de40add2547bc)

* NO-ISSUE: Synchronize From Upstream Repositories [#377](https://github.com/openshift/operator-framework-operator-controller/pull/377)
* NO-ISSUE: Synchronize From Upstream Repositories [#375](https://github.com/openshift/operator-framework-operator-controller/pull/375)
* NO-ISSUE: Synchronize From Upstream Repositories [#367](https://github.com/openshift/operator-framework-operator-controller/pull/367)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/694e8d7dd88a241ef742eccd60648983f96fbe6e...a565ae3cc5b358567ec2c310443de40add2547bc)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/08d9c6d5a7e956f8be0dc407c876ea08f9beb89b)

* NO-JIRA: Add Apache 2.0 License file [#523](https://github.com/openshift/openshift-apiserver/pull/523)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/71a2af271b093f2405564047f513d919357c584d...08d9c6d5a7e956f8be0dc407c876ea08f9beb89b)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/65c5f9de229b0518d4225f29002aa582372d96bf)

* [OCPBUGS-57198](https://issues.redhat.com/browse/OCPBUGS-57198): Make the pull secrets volume mounts in build containers read-only. [#387](https://github.com/openshift/openshift-controller-manager/pull/387)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/597799c02ce53c7294f557d21fc1a1e6407f9e62...65c5f9de229b0518d4225f29002aa582372d96bf)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/6c297011ed99f3377b75a00e94a7458fda214631)

* [ART-13079](https://issues.redhat.com/browse/ART-13079): append .0 to go.mod version [#121](https://github.com/openshift/openshift-state-metrics/pull/121)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/3106bcc3747c3c63e24775f096779b06a2436357...6c297011ed99f3377b75a00e94a7458fda214631)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/917ba603b67fa9d2f348f57e25e035ed7b31913f)

* NO-ISSUE: Synchronize From Upstream Repositories [#1013](https://github.com/openshift/operator-framework-olm/pull/1013)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/ebcdb8fb1eb274adbd248fc1f47d56b859c9fe8d...917ba603b67fa9d2f348f57e25e035ed7b31913f)


### [telemeter](https://github.com/openshift/telemeter/tree/a2fe07e8b692547d174a8cee15245f6bed30fdba)

* [ART-13079](https://issues.redhat.com/browse/ART-13079): append .0 to go.mod version [#559](https://github.com/openshift/telemeter/pull/559)
* [Full changelog](https://github.com/openshift/telemeter/compare/813fbc0ab9f6c59ff5ea8f6323d30481dc64ca8c...a2fe07e8b692547d174a8cee15245f6bed30fdba)


### [tests](https://github.com/openshift/origin/tree/1cef4af2b9c6573422ff6a384a37b317205b914c)

* [MCO-1652](https://issues.redhat.com/browse/MCO-1652): Add MCO disruptive suite [#29776](https://github.com/openshift/origin/pull/29776)
* [OCPBUGS-56786](https://issues.redhat.com/browse/OCPBUGS-56786): `RouteExternalCertificate` : Add fix for `None` platform type [#29868](https://github.com/openshift/origin/pull/29868)
* [OCPBUGS-56512](https://issues.redhat.com/browse/OCPBUGS-56512): updates ruby to version 3.3 [#29832](https://github.com/openshift/origin/pull/29832)
* [OCPBUGS-57049](https://issues.redhat.com/browse/OCPBUGS-57049): TLS registry: refactor testcase annotations [#29327](https://github.com/openshift/origin/pull/29327)
* [OCPBUGS-49441](https://issues.redhat.com/browse/OCPBUGS-49441): Use different certificates for gRPC interoperability test routes [#29757](https://github.com/openshift/origin/pull/29757)
* [OCPBUGS-56436](https://issues.redhat.com/browse/OCPBUGS-56436): Bump 4.20 1.32.5 [#29889](https://github.com/openshift/origin/pull/29889)
* [TRT-1854](https://issues.redhat.com/browse/TRT-1854): set network for MicroShift to OVNKubernetes [#29887](https://github.com/openshift/origin/pull/29887)
* add `smg247` as root approver [#29860](https://github.com/openshift/origin/pull/29860)
* [OCPBUGS-56037](https://issues.redhat.com/browse/OCPBUGS-56037): Stabilize custom MCP cleanup on MCN tests [#29874](https://github.com/openshift/origin/pull/29874)
* Revert "OCPNODE-2849: Add testcase to verify removal of cgroupv1 in OCP 4.19" [#29886](https://github.com/openshift/origin/pull/29886)
* [OCPBUGS-56698](https://issues.redhat.com/browse/OCPBUGS-56698): Skip tests modifying cluster/network.config when it is not permitted [#29859](https://github.com/openshift/origin/pull/29859)
* [OCPBUGS-54412](https://issues.redhat.com/browse/OCPBUGS-54412): Do not retry extension-sourced tests [#29867](https://github.com/openshift/origin/pull/29867)
* [Full changelog](https://github.com/openshift/origin/compare/37bb0576f88ca99724edfc48be70276dabb17de5...1cef4af2b9c6573422ff6a384a37b317205b914c)