# 4.20.0-okd-scos.ec.11

Created: 2025-08-10 03:31:41 +0000 UTC

Image Digest: `sha256:0563a34a68780158b455005fd2855620f09d27230764ef537e7a3dbd0168e5bc`

Promoted from registry.ci.openshift.org/origin/release-scos:4.20.0-0.okd-scos-2025-08-06-090541


## Changes from 4.20.0-okd-scos.ec.9

### Components

* Kubectl 1.33.3
* Kubernetes upgraded from 1.33.2 to 1.33.3
* Kubernetes Tests 1.33.2
* CentOS Stream CoreOS 10.0.20250715-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| HardwareSpeed <br/> (3 tests)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed) |
| VSphereMultiDisk <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| DualReplica <br/> (4 tests)| Disabled| Disabled| Enabled| Enabled| Enabled<br/>(Changed)| Enabled<br/>(Changed) |
| AWSClusterHostedDNSInstall <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| AzureClusterHostedDNSInstall <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| GCPClusterHostedDNSInstall <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| GCPCustomAPIEndpointsInstall <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| ImageVolume <br/> (7 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| IrreconcilableMachineConfig <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| NoRegistryClusterOperations <br/> (0 tests)|  |  |  | Enabled<br/>(New)|  |   |


### Rebuilt images without code change

* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [43c89591](https://github.com/openshift/whereabouts-cni/commit/43c8959152a6ca8afdc73eaed624286628c2c22e) `sha256:b3c3b9e57b0d86f3900e41aaa2bf2ecf6f5b978f29308040bf4584aaf68e6657`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/563812dd639576865eca1ddd57cec507dbf2e50a)

* [MGMT-21063](https://issues.redhat.com/browse/MGMT-21063): Use mac address to configure dhcp on kargs (#7888) [#7888](https://github.com/openshift/assisted-service/pull/7888)
* Set AIUI_CHAT_API_URL for podman deployment (#7911) [#7911](https://github.com/openshift/assisted-service/pull/7911)
* [MGMT-14822](https://issues.redhat.com/browse/MGMT-14822): Add MetalLB operator (#7824) [#7824](https://github.com/openshift/assisted-service/pull/7824)
* NO-ISSUE: [master] Bump OCP versions: 4.20, 4.14 (#7917) [#7917](https://github.com/openshift/assisted-service/pull/7917)
* [ACM-22740](https://issues.redhat.com/browse/ACM-22740): Approve CSRs for a host before marking as Done (#7903) [#7903](https://github.com/openshift/assisted-service/pull/7903)
* NO-ISSUE: [master] Bump OCP versions: 4.16, 4.18 (#7904) [#7904](https://github.com/openshift/assisted-service/pull/7904)
* [MGMT-20474](https://issues.redhat.com/browse/MGMT-20474): New route to provide a detailed list of features (#7862) [#7862](https://github.com/openshift/assisted-service/pull/7862)
* NO-ISSUE: [master] Bump OCP versions: 4.19 (#7902) [#7902](https://github.com/openshift/assisted-service/pull/7902)
* NO-ISSUE: Remove unused variables from cluster monitor loop (#7887) [#7887](https://github.com/openshift/assisted-service/pull/7887)
* [MGMT-21266](https://issues.redhat.com/browse/MGMT-21266): Report duration of monitored clusters (#7886) [#7886](https://github.com/openshift/assisted-service/pull/7886)
* [MGMT-21312](https://issues.redhat.com/browse/MGMT-21312): Index hosts by cluster id (#7891) [#7891](https://github.com/openshift/assisted-service/pull/7891)
* [MGMT-21287](https://issues.redhat.com/browse/MGMT-21287): Remove NHO dependency in SNR (#7889) [#7889](https://github.com/openshift/assisted-service/pull/7889)
* NO-ISSUE: [master] Bump OCP versions: 4.15, 4.17 (#7881) [#7881](https://github.com/openshift/assisted-service/pull/7881)
* [MGMT-20726](https://issues.redhat.com/browse/MGMT-20726): Allow prefix for PVC and secret naming (#7746) [#7746](https://github.com/openshift/assisted-service/pull/7746)
* [MGMT-21252](https://issues.redhat.com/browse/MGMT-21252): Make l3_connected_addresses output deterministic (#7879) [#7879](https://github.com/openshift/assisted-service/pull/7879)
* [MGMT-20973](https://issues.redhat.com/browse/MGMT-20973): Cluster events - filtering deleted hosts ends with an error (#7854) [#7854](https://github.com/openshift/assisted-service/pull/7854)
* [MGMT-21253](https://issues.redhat.com/browse/MGMT-21253): RefreshSchedulableMastersForcedTrue lead to extra reads from DB (#7880) [#7880](https://github.com/openshift/assisted-service/pull/7880)
* NO-ISSUE: [master] Bump OCP versions: 4.19 (#7875) [#7875](https://github.com/openshift/assisted-service/pull/7875)
* NO-ISSUE: Add NHO and FAR back to the virtualization bundle (#7869) [#7869](https://github.com/openshift/assisted-service/pull/7869)
* [Full changelog](https://github.com/openshift/assisted-service/compare/22e84e35c2c7a5e5686362fb40d02849595962fc...563812dd639576865eca1ddd57cec507dbf2e50a)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/432a19b1aea23b768b43bb6a65b8dcfacbff6e9b)

* [MGMT-20141](https://issues.redhat.com/browse/MGMT-20141): collecting and uploading ironic-agent logs (#1028) [#1028](https://github.com/openshift/assisted-installer-agent/pull/1028)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/5b673d4107baca27b99ba58e25aba03539c6d193...432a19b1aea23b768b43bb6a65b8dcfacbff6e9b)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/1f4b9a8ce9942a999840e9e6b46bce96ff142b50)

* [OCPBUGS-60019](https://issues.redhat.com/browse/OCPBUGS-60019): Add ISOBuilder Release notes [#135](https://github.com/openshift/agent-installer-utils/pull/135)
* [AGENT-1270](https://issues.redhat.com/browse/AGENT-1270): use agent-preinstall-image-builder image for building the ISO [#134](https://github.com/openshift/agent-installer-utils/pull/134)
* NO-ISSUE: Move mtv-operator back to v2.8 for 4.20 [#133](https://github.com/openshift/agent-installer-utils/pull/133)
* [OCPBUGS-59724](https://issues.redhat.com/browse/OCPBUGS-59724): add back NHR and FAR operators [#130](https://github.com/openshift/agent-installer-utils/pull/130)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/f37e25e980eb14a82b770aa9722bb6718c278f30...1f4b9a8ce9942a999840e9e6b46bce96ff142b50)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/bb88da16b29d63573861351afc5ca8c4547775d6)

* [OCPCLOUD-2928](https://issues.redhat.com/browse/OCPCLOUD-2928): Merge https://github.com/kubernetes/cloud-provider-aws:master (b0e098d) into main [#106](https://github.com/openshift/cloud-provider-aws/pull/106)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/3408f0cdb3c0cec49433a2ab3cff6e1d44e4a58e...bb88da16b29d63573861351afc5ca8c4547775d6)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/d35191344745f7b00167f932b42e1d51d14865fc)

* NO-JIRA: Update OWNERS [#561](https://github.com/openshift/cluster-api-provider-aws/pull/561)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/18b206943b2b5f67d70aeb91cc50e7d7b2769422...d35191344745f7b00167f932b42e1d51d14865fc)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/13780425da561ab636e8e9f723801917b170e8dc)

* [STOR-2330](https://issues.redhat.com/browse/STOR-2330): Add labels to subscribe openstack cinder and manila CSI driver controllers to NPs [#409](https://github.com/openshift/csi-operator/pull/409)
* [OCPBUGS-57395](https://issues.redhat.com/browse/OCPBUGS-57395): Remove stale conditions [#406](https://github.com/openshift/csi-operator/pull/406)
* [Full changelog](https://github.com/openshift/csi-operator/compare/a7f0c3ab58181f06a2bb21f0421ebb003f4eecac...13780425da561ab636e8e9f723801917b170e8dc)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/d1cc300e80d2c02c234a04b8c72b71e720bc311f)

* [OCPCLOUD-2935](https://issues.redhat.com/browse/OCPCLOUD-2935): Bump k8s dependencies to 1.33; go 1.24 [#136](https://github.com/openshift/machine-api-provider-aws/pull/136)
* NO-JIRA: Update OWNERS [#135](https://github.com/openshift/machine-api-provider-aws/pull/135)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/65dc832aa22488325bcd7c99acf029c9d39f4783...d1cc300e80d2c02c234a04b8c72b71e720bc311f)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/cb8b5b6a485971a95c5a74508d76ab19b23cbf29)

* NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.20.2 (2a4b30d) into master [#345](https://github.com/openshift/cluster-api-provider-azure/pull/345)
* NO-JIRA: Update OWNERS [#344](https://github.com/openshift/cluster-api-provider-azure/pull/344)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/48ebcc043072231e1ad71da42d434e8453ba964e...cb8b5b6a485971a95c5a74508d76ab19b23cbf29)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/4927cc2be4f629e367d2a79a310900c7cced3f6c)

* [OCPCLOUD-2932](https://issues.redhat.com/browse/OCPCLOUD-2932): Bump 1.33 [#160](https://github.com/openshift/machine-api-provider-azure/pull/160)
* NO-JIRA: Update OWNERS [#161](https://github.com/openshift/machine-api-provider-azure/pull/161)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/116c073bd71e47e5a561e9b4fd5bbb8fa6dc3128...4927cc2be4f629e367d2a79a310900c7cced3f6c)


### [azure-service-operator](https://github.com/openshift/azure-service-operator/tree/6e2f362623720f7b6d634fbc424fbc61e4b481ae)

* NO-JIRA: Update OWNERS [#10](https://github.com/openshift/azure-service-operator/pull/10)
* [Full changelog](https://github.com/openshift/azure-service-operator/compare/da77082464e616555909c26238a647edc5ae4195...6e2f362623720f7b6d634fbc424fbc61e4b481ae)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/7c491b3698c78ebcf07d56cabd288808e797ac6e)

* [CORS-4083](https://issues.redhat.com/browse/CORS-4083), [CORS-4084](https://issues.redhat.com/browse/CORS-4084), [CORS-4085](https://issues.redhat.com/browse/CORS-4085): Add Azure custom-dns support in Tech Preview [#9861](https://github.com/openshift/installer/pull/9861)
* [OCPBUGS-59542](https://issues.redhat.com/browse/OCPBUGS-59542): Generated Nutanix MachineSets for Autoscaling with Failure Domains [#9864](https://github.com/openshift/installer/pull/9864)
* no-jira: OWNERS: add splat team as approvers [#9862](https://github.com/openshift/installer/pull/9862)
* [CORS-3992](https://issues.redhat.com/browse/CORS-3992): skip dns zone validation with custom DNS [#9859](https://github.com/openshift/installer/pull/9859)
* no-jira: Bump openshift/api to get renamed Featuregates [#9854](https://github.com/openshift/installer/pull/9854)
* [OCPEDGE-1994](https://issues.redhat.com/browse/OCPEDGE-1994): bump(ocp/api): pull in updated DualReplica [#9849](https://github.com/openshift/installer/pull/9849)
* [SPLAT-2295](https://issues.redhat.com/browse/SPLAT-2295): Setup additional disks via machine configs [#9706](https://github.com/openshift/installer/pull/9706)
* [OCPBUGS-59630](https://issues.redhat.com/browse/OCPBUGS-59630): Update RHCOS 4.20 bootimage metadata to 9.6.20250701-0 [#9844](https://github.com/openshift/installer/pull/9844)
* no-jira: images: bump images to go 1.24 [#9850](https://github.com/openshift/installer/pull/9850)
* [CORS-3916](https://issues.redhat.com/browse/CORS-3916), [CORS-3920](https://issues.redhat.com/browse/CORS-3920): Use gcp custom endpoints in the installer [#9535](https://github.com/openshift/installer/pull/9535)
* [OCPBUGS-59430](https://issues.redhat.com/browse/OCPBUGS-59430): Fail install config validation when base domain is invalid [#9840](https://github.com/openshift/installer/pull/9840)
* [OCPBUGS-59678](https://issues.redhat.com/browse/OCPBUGS-59678): PowerVS Support VPC and TG ids [#9818](https://github.com/openshift/installer/pull/9818)
* [OCPBUGS-57732](https://issues.redhat.com/browse/OCPBUGS-57732): Catch gcp destroy cases where the operation is nil [#9823](https://github.com/openshift/installer/pull/9823)
* [Full changelog](https://github.com/openshift/installer/compare/771e512a26d57c7825cf838d2eb73d50d33ae1c3...7c491b3698c78ebcf07d56cabd288808e797ac6e)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/a7d0035a144d5b51c1401426bbe7ce518f24f154)

* [METAL-1380](https://issues.redhat.com/browse/METAL-1380): Sync july 24 [#427](https://github.com/openshift/baremetal-operator/pull/427)
* [METAL-1238](https://issues.redhat.com/browse/METAL-1238): Add annotation to install metal3 CRDs in hypershift hosted clusters [#426](https://github.com/openshift/baremetal-operator/pull/426)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/1563591d664d4e1d777ee735fc16442143ead42f...a7d0035a144d5b51c1401426bbe7ce518f24f154)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/1073b975a85824a68503e7ecb933f7c48edbc393)

* [OTA-1600](https://issues.redhat.com/browse/OTA-1600): pkg/cli/admin/upgrade/recommend: Don't error on unaccepted issues when the feature gate is off [#2069](https://github.com/openshift/oc/pull/2069)
* [Full changelog](https://github.com/openshift/oc/compare/ea45cd5d407a1fc9805d051f3946e8a8fc1ca4da...1073b975a85824a68503e7ecb933f7c48edbc393)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/c00e90bb299ea249514a35beef0649abac0bb6fe)

* [OCPBUGS-59889](https://issues.redhat.com/browse/OCPBUGS-59889): Add retry logic for Azure federated identity credential creation [#878](https://github.com/openshift/cloud-credential-operator/pull/878)
* [CCO-641](https://issues.redhat.com/browse/CCO-641): update dependencies [#887](https://github.com/openshift/cloud-credential-operator/pull/887)
* NO-JIRA: Drop lleshchi from OWNERS [#889](https://github.com/openshift/cloud-credential-operator/pull/889)
* [OCPBUGS-43783](https://issues.redhat.com/browse/OCPBUGS-43783): openstack: Set annotation even when credentials mode is unset [#873](https://github.com/openshift/cloud-credential-operator/pull/873)
* [OCPBUGS-59402](https://issues.redhat.com/browse/OCPBUGS-59402): github.com/golang/glog v1.2.5 [#888](https://github.com/openshift/cloud-credential-operator/pull/888)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/b7c95a496231075c4e85d3c780174049109bf1f9...c00e90bb299ea249514a35beef0649abac0bb6fe)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/467e50feff5a56afbf9ccefc025781c9ccff8eca)

* [CORENET-5958](https://issues.redhat.com/browse/CORENET-5958): Rebase k8s to 1.33 [#176](https://github.com/openshift/cloud-network-config-controller/pull/176)
* NO-JIRA: Update OWNERS [#177](https://github.com/openshift/cloud-network-config-controller/pull/177)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/5a926cec71534ad52a99946ff8f27164dc5768f5...467e50feff5a56afbf9ccefc025781c9ccff8eca)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/fcfc8c7403f55bfaff0b9b763ef10cce4504e0b8)

* [AUTH-543](https://issues.redhat.com/browse/AUTH-543), [OCPBUGS-57808](https://issues.redhat.com/browse/OCPBUGS-57808): (deps): Bump to Go 1.24 and k8s 1.33 [#775](https://github.com/openshift/cluster-authentication-operator/pull/775)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/2db55352e5ec809e5a123b2a4f7a498960d9f3ea...fcfc8c7403f55bfaff0b9b763ef10cce4504e0b8)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/2ab4313c49cffc9a3340f76a5607907340dce03d)

* [AUTOSCALE-125](https://issues.redhat.com/browse/AUTOSCALE-125): newPodScaleUpDelay field for CA [#349](https://github.com/openshift/cluster-autoscaler-operator/pull/349)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/4eb64d55394024674a71c0241e0c45946e2721b1...2ab4313c49cffc9a3340f76a5607907340dce03d)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/fcb8f932a942a4dd3c2d8389e1fd50826f295ff4)

* [METAL-1508](https://issues.redhat.com/browse/METAL-1508): Change deprecated pointer to ptr [#495](https://github.com/openshift/cluster-baremetal-operator/pull/495)
* [OCPBUGS-53392](https://issues.redhat.com/browse/OCPBUGS-53392): Remove webhookport (9447) as HostPort [#496](https://github.com/openshift/cluster-baremetal-operator/pull/496)
* [METAL-1238](https://issues.redhat.com/browse/METAL-1238): Enable CBO to run on hosted clusters [#494](https://github.com/openshift/cluster-baremetal-operator/pull/494)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/c6838e2773d0ad22539da7c177470f7e02ac1466...fcb8f932a942a4dd3c2d8389e1fd50826f295ff4)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/de1db2970e7fede7101e5a8188e74942ab6665e3)

* NO-JIRA: Update OWNERS [#244](https://github.com/openshift/cluster-api/pull/244)
* [Full changelog](https://github.com/openshift/cluster-api/compare/33d21d224be0e943c2ac05eaa763324f35f69d36...de1db2970e7fede7101e5a8188e74942ab6665e3)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/5f82c0a97d838ce4c02b70f10b8690be7be4858f)

* [OCPCLOUD-2916](https://issues.redhat.com/browse/OCPCLOUD-2916): Bump to CAPI v1.10, k8s v1.33, go 1.24 [#341](https://github.com/openshift/cluster-capi-operator/pull/341)
* NO-JIRA: Get openshift/api directory from packages [#339](https://github.com/openshift/cluster-capi-operator/pull/339)
* [OCPCLOUD-2979](https://issues.redhat.com/browse/OCPCLOUD-2979): ingress network policy for metrics [#325](https://github.com/openshift/cluster-capi-operator/pull/325)
* [OCPCLOUD-2992](https://issues.redhat.com/browse/OCPCLOUD-2992): migration e2e for creating machinesets [#330](https://github.com/openshift/cluster-capi-operator/pull/330)
* NO-JIRA: Update OWNERS [#335](https://github.com/openshift/cluster-capi-operator/pull/335)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/89f5a58dd743ea5f3fd71333d73d9ef8805352cd...5f82c0a97d838ce4c02b70f10b8690be7be4858f)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/86f8c6dd7fce9d42cfbe5ac1d4b2528ba726f9c4)

* [OCPBUGS-53300](https://issues.redhat.com/browse/OCPBUGS-53300): Adds service for cloud-controller-manager [#399](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/399)
* [OCPCLOUD-2940](https://issues.redhat.com/browse/OCPCLOUD-2940): Update dependencies for Kubernetes 1.33 [#396](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/396)
* [OCPBUGS-53300](https://issues.redhat.com/browse/OCPBUGS-53300): Update service selector to match deployment label [#398](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/398)
* NO-JIRA: Update OWNERS [#397](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/397)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/49bbba7d40ac07ee30bed4bc5e59ffa37c7175a2...86f8c6dd7fce9d42cfbe5ac1d4b2528ba726f9c4)


### [cluster-config-api](https://github.com/openshift/api/tree/f0c2a502ca3bdbd96f6ddcda7914560a67c5b29b)

* [OCPNODE-3006](https://issues.redhat.com/browse/OCPNODE-3006): add back SigstoreImageVerification to techPreview [#2406](https://github.com/openshift/api/pull/2406)
* [MCO-1759](https://issues.redhat.com/browse/MCO-1759): Add NonReconcilableMC Feature Gate [#2429](https://github.com/openshift/api/pull/2429)
* Update crd-schema.json to release 1.33 branch [#2436](https://github.com/openshift/api/pull/2436)
* Update KAL to include omitzero functionality on optional fields [#2431](https://github.com/openshift/api/pull/2431)
* [OCPNODE-3372](https://issues.redhat.com/browse/OCPNODE-3372): Update defaultRuntime doc to show options and set default to crun [#2370](https://github.com/openshift/api/pull/2370)
* [CORS-4155](https://issues.redhat.com/browse/CORS-4155): Add Feature gate and update Infrastructure CR for Azure Cluster Hosted DNS [#2404](https://github.com/openshift/api/pull/2404)
* [SPLAT-2346](https://issues.redhat.com/browse/SPLAT-2346): Moving VSphereMultiDisk FeatureGate to GA [#2428](https://github.com/openshift/api/pull/2428)
* features: add installer replacement feature gates [#2423](https://github.com/openshift/api/pull/2423)
* Remove "techpreview" filter on verify job [#2422](https://github.com/openshift/api/pull/2422)
* Update KAL to latest [#2420](https://github.com/openshift/api/pull/2420)
* [OCPNODE-3006](https://issues.redhat.com/browse/OCPNODE-3006): Add clusterimgepolicy/imagepolicy to payload [#2384](https://github.com/openshift/api/pull/2384)
* [AGENT-1262](https://issues.redhat.com/browse/AGENT-1262): add NoRegistryClusterOperations feature gate [#2417](https://github.com/openshift/api/pull/2417)
* [OCPBUGS-55661](https://issues.redhat.com/browse/OCPBUGS-55661): Remove HardwareSpeed featuregate [#2416](https://github.com/openshift/api/pull/2416)
* [OCPNODE-3121](https://issues.redhat.com/browse/OCPNODE-3121): Make FeatureGateImageVolume TechPreview [#2403](https://github.com/openshift/api/pull/2403)
* [OCPEDGE-1875](https://issues.redhat.com/browse/OCPEDGE-1875): feat: promote tnf from devpreview to techpreview [#2413](https://github.com/openshift/api/pull/2413)
* [Full changelog](https://github.com/openshift/api/compare/bc3bc4882520e35b09cf3f943dbcca477d660e76...f0c2a502ca3bdbd96f6ddcda7914560a67c5b29b)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/63165d1871a5b1b8c0e75814a376e3e26d46b15b)

* [OCPEDGE-1876](https://issues.redhat.com/browse/OCPEDGE-1876): bump(o/api,k8s/api,go-version) [#445](https://github.com/openshift/cluster-config-operator/pull/445)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/49a189058e033ddeffd8bf3283f24831862aefc3...63165d1871a5b1b8c0e75814a376e3e26d46b15b)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/2a40ef78a7223f818f195512265b9f4dacd8bf4f)

* [OCPBUGS-59919](https://issues.redhat.com/browse/OCPBUGS-59919): Prevent activation of CPMS with deletionTimestamp [#364](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/364)
* [OCPBUGS-59919](https://issues.redhat.com/browse/OCPBUGS-59919): Fix authoritativeAPI recreate loop [#365](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/365)
* [OCPCLOUD-2937](https://issues.redhat.com/browse/OCPCLOUD-2937): Bump k8s dependencies to 1.33; go 1.24 [#360](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/360)
* NO-JIRA: Update OWNERS [#361](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/361)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/1dbf0c7a5d513dedcc18de0ee5fb34e18b8b53f2...2a40ef78a7223f818f195512265b9f4dacd8bf4f)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/03ace5c4c19ecaab20c715c697a61c777afbff41)

* [STOR-2465](https://issues.redhat.com/browse/STOR-2465): Add ExternalSnapshotMetadata CRD [#239](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/239)
* [STOR-2394](https://issues.redhat.com/browse/STOR-2394): Bump all deps for 4.20 [#240](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/240)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/ef2152f52b992addcbe24b402f1ddbf180049d85...03ace5c4c19ecaab20c715c697a61c777afbff41)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/c1a9de088af890d66dc46d187610a35c0f373e82)

* NO-JIRA: create dedicated cluster-wide informer [#1457](https://github.com/openshift/cluster-etcd-operator/pull/1457)
* [ETCD-590](https://issues.redhat.com/browse/ETCD-590): start to refactor the probe injection [#1456](https://github.com/openshift/cluster-etcd-operator/pull/1456)
* [OCPBUGS-57859](https://issues.redhat.com/browse/OCPBUGS-57859): Updating cluster-etcd-operator-container image to be consistent with ART for 4.20 [#1452](https://github.com/openshift/cluster-etcd-operator/pull/1452)
* NO-JIRA: Migrate bindata to go:embed [#1445](https://github.com/openshift/cluster-etcd-operator/pull/1445)
* [OCPBUGS-44570](https://issues.redhat.com/browse/OCPBUGS-44570): add missing informer syncs [#1449](https://github.com/openshift/cluster-etcd-operator/pull/1449)
* NO-JIRA: Update owners file [#1451](https://github.com/openshift/cluster-etcd-operator/pull/1451)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/c37c6fff8863c2d5254cfd14e32ab37409d63cf0...c1a9de088af890d66dc46d187610a35c0f373e82)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/c2c37cad52b2375216dca78cd1e322d2c35454de)

* [OCPBUGS-59894](https://issues.redhat.com/browse/OCPBUGS-59894): Update GatewayAPI test to check if deployment has 1 or more pod [#1250](https://github.com/openshift/cluster-ingress-operator/pull/1250)
* [NE-2108](https://issues.redhat.com/browse/NE-2108): docs - correct Istio version format in ossm-overrides.md [#1253](https://github.com/openshift/cluster-ingress-operator/pull/1253)
* [NE-2108](https://issues.redhat.com/browse/NE-2108): Add OSSM channel and version override annotations [#1246](https://github.com/openshift/cluster-ingress-operator/pull/1246)
* [NE-2104](https://issues.redhat.com/browse/NE-2104): desiredIstio: Enable GIE if InferencePool found [#1245](https://github.com/openshift/cluster-ingress-operator/pull/1245)
* [OCPBUGS-59839](https://issues.redhat.com/browse/OCPBUGS-59839): desiredIstio: Delete trustBundleName [#1243](https://github.com/openshift/cluster-ingress-operator/pull/1243)
* [NE-2022](https://issues.redhat.com/browse/NE-2022): Bump to OSSM 3.0.1 and Istio 1.24.4 [#1227](https://github.com/openshift/cluster-ingress-operator/pull/1227)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/cbc0b217b655f1f0ce0becc9145c2a6042beabea...c2c37cad52b2375216dca78cd1e322d2c35454de)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/3b26613903789b4cf2da1140cddee5c786c618f6)

* [OCPBUGS-59527](https://issues.redhat.com/browse/OCPBUGS-59527): certrotationcontroller: extend node-system-admin-signer lifetime [#1872](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1872)
* [OCPBUGS-59626](https://issues.redhat.com/browse/OCPBUGS-59626): operator: don't react to events all namespaces [#1874](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1874)
* [OCPNODE-2559](https://issues.redhat.com/browse/OCPNODE-2559): SCC: add nested-podman and restricted-v3 [#1847](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1847)
* NO-JIRA: Add negative tests of GOAWAY-chance [#1882](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1882)
* [OCPBUGS-44842](https://issues.redhat.com/browse/OCPBUGS-44842): Set not-before/not-after annotations [#1873](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1873)
* [OCPBUGS-50489](https://issues.redhat.com/browse/OCPBUGS-50489): Add missing service ports to apiserver service [#1875](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1875)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/2a82fec138d1d868e4bfa6f4ded847032b2bfc24...3b26613903789b4cf2da1140cddee5c786c618f6)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/ada9c680b367615ab823db9163a1deb69a39395b)

* NO-JIRA: targetconfigcontroller: set description for csr-controller-ca [#851](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/851)
* [OCPBUGS-53290](https://issues.redhat.com/browse/OCPBUGS-53290): Missing endpoint slices for open ports the operator uses [#848](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/848)
* [RFE-4154](https://issues.redhat.com/browse/RFE-4154): Fix readonly filesystem error when kcm trying to mkdir on /etc/kubern… [#847](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/847)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/404585e8f8165938341ba9a7dea640a7bdb171e1...ada9c680b367615ab823db9163a1deb69a39395b)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/ce2750589129dd20b3d1b6a5e7bb8c392d658c5c)

* NO-JIRA: Fix some lints and nits [#273](https://github.com/openshift/cluster-machine-approver/pull/273)
* [OCPCLOUD-2939](https://issues.redhat.com/browse/OCPCLOUD-2939): Bump k8s 1.33 [#272](https://github.com/openshift/cluster-machine-approver/pull/272)
* NO-JIRA: Update OWNERS [#274](https://github.com/openshift/cluster-machine-approver/pull/274)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/e1c0d584133d66743663559b1a58f0b107d002b8...ce2750589129dd20b3d1b6a5e7bb8c392d658c5c)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/0a8cea5d0848113b6c07c29901c6d62409d074c5)

* [MON-4299](https://issues.redhat.com/browse/MON-4299): chore(thanos): replace CLI args that will disappear in future versions [#2626](https://github.com/openshift/cluster-monitoring-operator/pull/2626)
* [OCPBUGS-58475](https://issues.redhat.com/browse/OCPBUGS-58475): Enforce secure TLS settings in CMO [#2618](https://github.com/openshift/cluster-monitoring-operator/pull/2618)
* [OCPBUGS-57215](https://issues.redhat.com/browse/OCPBUGS-57215): operator: increase wait time till degraded to max 4 times 5m [#2624](https://github.com/openshift/cluster-monitoring-operator/pull/2624)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/5bfa3b972373eed2a597d183caab48b5f3370e74...0a8cea5d0848113b6c07c29901c6d62409d074c5)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/ad26055ee15ec30555e543fa62d9db1c1388ee98)

* NO-JIRA: Update CNO reviewers/approvers [#2756](https://github.com/openshift/cluster-network-operator/pull/2756)
* [CORENET-6228](https://issues.redhat.com/browse/CORENET-6228): Allow network-node-identity to be enabled for IBMCloud PlatformType [#2755](https://github.com/openshift/cluster-network-operator/pull/2755)
* NO-JIRA: remove PersistentIPsForVirt FG [#2759](https://github.com/openshift/cluster-network-operator/pull/2759)
* [CORENET-6127](https://issues.redhat.com/browse/CORENET-6127): ovn-k: Enable OVN-K feature when PreconfiguredUDNAddresses is enabled [#2734](https://github.com/openshift/cluster-network-operator/pull/2734)
* [OCPBUGS-59134](https://issues.redhat.com/browse/OCPBUGS-59134), [OCPBUGS-59135](https://issues.redhat.com/browse/OCPBUGS-59135): Annotate whereabouts-controller [#2749](https://github.com/openshift/cluster-network-operator/pull/2749)
* NO-JIRA: deprecate exportloopref [#2750](https://github.com/openshift/cluster-network-operator/pull/2750)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/5b682383db2b132985354172cfaa3a033ad058e0...ad26055ee15ec30555e543fa62d9db1c1388ee98)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/1385086c4efe5d214b21aed6fcd2ffcfbde79fb6)

* [CNF-16638](https://issues.redhat.com/browse/CNF-16638): Disable RPS by default (#1370) [#1370](https://github.com/openshift/cluster-node-tuning-operator/pull/1370)
* Sync the upstream and downstream Containerfiles (#1368) [#1368](https://github.com/openshift/cluster-node-tuning-operator/pull/1368)
* machineconfig: log kernelType (#1366) [#1366](https://github.com/openshift/cluster-node-tuning-operator/pull/1366)
* feat: add arbiter role to default pinning gen (#1364) [#1364](https://github.com/openshift/cluster-node-tuning-operator/pull/1364)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/eacfe9fc9d8c133cbfd257f5b5dab69ac546e142...1385086c4efe5d214b21aed6fcd2ffcfbde79fb6)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/e4917368b6a547f97a0fb411fea90de246d1417e)

* [OPRUN-4034](https://issues.redhat.com/browse/OPRUN-4034): Handle CustomNoUpgrade better [#134](https://github.com/openshift/cluster-olm-operator/pull/134)
* [OCPBUGS-58992](https://issues.redhat.com/browse/OCPBUGS-58992): Bump helm to v3.18.4 [#132](https://github.com/openshift/cluster-olm-operator/pull/132)
* [OPRUN-4026](https://issues.redhat.com/browse/OPRUN-4026): Add support for all NoUpgrades [#131](https://github.com/openshift/cluster-olm-operator/pull/131)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/080065d96cfbb86f8ca87015326251f86949d1a3...e4917368b6a547f97a0fb411fea90de246d1417e)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/216cf83ffe631a7dbe58c7eb87acb39983f36a46)

* : NO-JIRA:  Bump to Go 1.24 and k8s 1.33 [#620](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/620)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/6867bc1cff74ab2305a19a51f6e0bf1cff1a5954...216cf83ffe631a7dbe58c7eb87acb39983f36a46)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/3e7538547c8f209c72083097a4ebaada6e9c46c5)

* [CNTRLPLANE-1054](https://issues.redhat.com/browse/CNTRLPLANE-1054): rebase k8s (1.33.2), openshift (4.20) and other underlying dependencies [#164](https://github.com/openshift/cluster-policy-controller/pull/164)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/748524784686a5f397490563882cbfb88f9acd01...3e7538547c8f209c72083097a4ebaada6e9c46c5)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/6f5f3f925288fdbdb7bd6ff776cd4d6c20376a9e)

* [STOR-2330](https://issues.redhat.com/browse/STOR-2330): Add labels to subscribe ibm-vpc-block CSI driver operator to NPs [#599](https://github.com/openshift/cluster-storage-operator/pull/599)
* [OCPBUGS-60064](https://issues.redhat.com/browse/OCPBUGS-60064): hypershift: add app label to csdriveroperators running in HCP [#603](https://github.com/openshift/cluster-storage-operator/pull/603)
* [STOR-2330](https://issues.redhat.com/browse/STOR-2330): Add labels to subscribe openstack cinder and manila CSI driver operators to NPs [#601](https://github.com/openshift/cluster-storage-operator/pull/601)
* [STOR-2330](https://issues.redhat.com/browse/STOR-2330): Add RBAC rule to let ibm-vpc-block-csi-driver-operator manage NetworkPolicy [#602](https://github.com/openshift/cluster-storage-operator/pull/602)
* [STOR-2394](https://issues.redhat.com/browse/STOR-2394): Bump all deps for 4.20 [#598](https://github.com/openshift/cluster-storage-operator/pull/598)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/ec7aee5e41122d7e2f3b2b718b900ba2358d6ec1...6f5f3f925288fdbdb7bd6ff776cd4d6c20376a9e)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/9de00ba8fb8330b3a1b440396dc2c5dbe974119b)

* [OCPBUGS-57585](https://issues.redhat.com/browse/OCPBUGS-57585): CVO protects /metrics with authorization [#1215](https://github.com/openshift/cluster-version-operator/pull/1215)
* [OTA-1480](https://issues.redhat.com/browse/OTA-1480): Add readonlyRootFilesystem [#1208](https://github.com/openshift/cluster-version-operator/pull/1208)
* NO-JIRA: Generate junitfile for unit tests [#1217](https://github.com/openshift/cluster-version-operator/pull/1217)
* [OTA-1578](https://issues.redhat.com/browse/OTA-1578): Disable `ResourceReconciliationIssues` condition [#1216](https://github.com/openshift/cluster-version-operator/pull/1216)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/0947d3e52970499e02041e4de6bc584fac053eac...9de00ba8fb8330b3a1b440396dc2c5dbe974119b)


### [console](https://github.com/openshift/console/tree/29374f38308c4ebe9ea461a5d69eb3e4956c7086)

* [CONSOLE-4688](https://issues.redhat.com/browse/CONSOLE-4688): `Dropdown` -&gt; `ConsoleSelect` [#15284](https://github.com/openshift/console/pull/15284)
* [CONSOLE-4616](https://issues.redhat.com/browse/CONSOLE-4616): add additionalPrinterColumns to CustomResource list page [#15350](https://github.com/openshift/console/pull/15350)
* [OCPBUGS-44972](https://issues.redhat.com/browse/OCPBUGS-44972): Make sure CSP violations are only reported to telemetry once per day per browser [#14778](https://github.com/openshift/console/pull/14778)
* [CONSOLE-4703](https://issues.redhat.com/browse/CONSOLE-4703): Remove routes component in console [#15343](https://github.com/openshift/console/pull/15343)
* [OCPBUGS-60056](https://issues.redhat.com/browse/OCPBUGS-60056): update timestamp unit test to be more stable [#15356](https://github.com/openshift/console/pull/15356)
* [ODC-7811](https://issues.redhat.com/browse/ODC-7811): enzyme -&gt; RTL: webterminal-plugin [#15352](https://github.com/openshift/console/pull/15352)
* [CONSOLE-4617](https://issues.redhat.com/browse/CONSOLE-4617): add additionalPrinterColumns to CustomResource details page [#15336](https://github.com/openshift/console/pull/15336)
* [OCPBUGS-60010](https://issues.redhat.com/browse/OCPBUGS-60010): Fix i18n string for event stream [#15351](https://github.com/openshift/console/pull/15351)
* [CONSOLE-4705](https://issues.redhat.com/browse/CONSOLE-4705): Convert some files to TypeScript [#15348](https://github.com/openshift/console/pull/15348)
* [CONSOLE-4688](https://issues.redhat.com/browse/CONSOLE-4688): Use PF instead of `noSelection` `Dropdown` [#15342](https://github.com/openshift/console/pull/15342)
* [OCPBUGS-59563](https://issues.redhat.com/browse/OCPBUGS-59563): Resolving API Version Conflicts in Tekton Pipeline Runs [#15307](https://github.com/openshift/console/pull/15307)
* [OCPBUGS-59215](https://issues.redhat.com/browse/OCPBUGS-59215): switch to dev perspective for `/dev-monitoring` [#15268](https://github.com/openshift/console/pull/15268)
* [OCPBUGS-59725](https://issues.redhat.com/browse/OCPBUGS-59725): Refactor `RegistryPollIntervalModal` [#15337](https://github.com/openshift/console/pull/15337)
* [OCPBUGS-55946](https://issues.redhat.com/browse/OCPBUGS-55946): Move ACM perspective back to perspective selector. [#15310](https://github.com/openshift/console/pull/15310)
* [CONSOLE-4704](https://issues.redhat.com/browse/CONSOLE-4704): Update ThemeContext type [#15339](https://github.com/openshift/console/pull/15339)
* [OCPBUGS-57481](https://issues.redhat.com/browse/OCPBUGS-57481): fix: Fix negative CPU util graphs [#15332](https://github.com/openshift/console/pull/15332)
* [OCPBUGS-58469](https://issues.redhat.com/browse/OCPBUGS-58469): Fix hot reload in GlobalConfigPage component [#15287](https://github.com/openshift/console/pull/15287)
* [OCPBUGS-59196](https://issues.redhat.com/browse/OCPBUGS-59196): fix runtime exception in CreateYAMLInner [#15341](https://github.com/openshift/console/pull/15341)
* [CONSOLE-4699](https://issues.redhat.com/browse/CONSOLE-4699): Update dynamic demo plugin e2e tests [#15319](https://github.com/openshift/console/pull/15319)
* [CONSOLE-4608](https://issues.redhat.com/browse/CONSOLE-4608): Drop createModalLauncher from helm-plugin and use useOverlay hook instead [#15303](https://github.com/openshift/console/pull/15303)
* [ODC-7802](https://issues.redhat.com/browse/ODC-7802): Remove custom Drawer and Tabs from web-terminal [#15077](https://github.com/openshift/console/pull/15077)
* [ODC-7620](https://issues.redhat.com/browse/ODC-7620): Use PF `isLoading` in CreateProjectModal [#15318](https://github.com/openshift/console/pull/15318)
* [OCPBUGS-57466](https://issues.redhat.com/browse/OCPBUGS-57466): Default name is comprised of '-' on 'Add to favorites' page when language is Korean/Japanese/Chinese. [#15314](https://github.com/openshift/console/pull/15314)
* [OCPBUGS-56248](https://issues.redhat.com/browse/OCPBUGS-56248): Improve Console plugin API doc gen script [#15167](https://github.com/openshift/console/pull/15167)
* [OCPBUGS-56466](https://issues.redhat.com/browse/OCPBUGS-56466): The warning msg 'CPU and memory resource requests must be set' still shows up after deployment has resource requests set. [#15117](https://github.com/openshift/console/pull/15117)
* [CONSOLE-4669](https://issues.redhat.com/browse/CONSOLE-4669): Refactor Alertmanager forms to only use PatternFly comp… [#15275](https://github.com/openshift/console/pull/15275)
* [OCPBUGS-59771](https://issues.redhat.com/browse/OCPBUGS-59771): Move alertmanager settings route [#15325](https://github.com/openshift/console/pull/15325)
* NO-JIRA: Update README.md by adding removing co-disabled styling [#15323](https://github.com/openshift/console/pull/15323)
* [CONSOLE-4700](https://issues.redhat.com/browse/CONSOLE-4700): Address tech debt in `TogglePlay` and `ButtonBar` [#15308](https://github.com/openshift/console/pull/15308)
* [OCPBUGS-57654](https://issues.redhat.com/browse/OCPBUGS-57654): Updating openshift-enterprise-console-container image to be consistent with ART for 4.20 [#15186](https://github.com/openshift/console/pull/15186)
* [ODC-7803](https://issues.redhat.com/browse/ODC-7803): Add custom icons in import flow [#15242](https://github.com/openshift/console/pull/15242)
* [OCPBUGS-59231](https://issues.redhat.com/browse/OCPBUGS-59231): PipelinesList: increase width of ns column [#15311](https://github.com/openshift/console/pull/15311)
* [Full changelog](https://github.com/openshift/console/compare/57af4ef2c53fa65801ea48fb79eef4872b135be9...29374f38308c4ebe9ea461a5d69eb3e4956c7086)


### [console-operator](https://github.com/openshift/console-operator/tree/6ad68cc9ac63570a4a199aa3082741befb3b37c4)

* [OCPBUGS-57854](https://issues.redhat.com/browse/OCPBUGS-57854): Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.20 [#996](https://github.com/openshift/console-operator/pull/996)
* [OCPBUGS-57736](https://issues.redhat.com/browse/OCPBUGS-57736): bump github.com/openshift/client-go [#1030](https://github.com/openshift/console-operator/pull/1030)
* [OCPBUGS-45300](https://issues.redhat.com/browse/OCPBUGS-45300): Wire synced OIDC Auth CM to Console [#1024](https://github.com/openshift/console-operator/pull/1024)
* [Full changelog](https://github.com/openshift/console-operator/compare/ba70c7a7cb03901600ed4fe04ecb46c7c0ce7143...6ad68cc9ac63570a4a199aa3082741befb3b37c4)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/184a96011a8cacb72319cdccb904271a99c5928d)

* [OCPBUGS-59568](https://issues.redhat.com/browse/OCPBUGS-59568): stop installing rpms that are already in the base image [#206](https://github.com/openshift/containernetworking-plugins/pull/206)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/b09f487cf0529098b2065ca169ae85ccec955796...184a96011a8cacb72319cdccb904271a99c5928d)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/5c322e892803723250d4b7b303cf5eea20ff68b2)

* [OCPBUGS-59650](https://issues.redhat.com/browse/OCPBUGS-59650): Rebase main onto release-1.33 [#334](https://github.com/openshift/cloud-provider-openstack/pull/334)
* [OCPBUGS-58497](https://issues.redhat.com/browse/OCPBUGS-58497): CARRY: don't ignore json files [#337](https://github.com/openshift/cloud-provider-openstack/pull/337)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/ca6214b484e8eea6135508fb1c76fb38cdd952bb...5c322e892803723250d4b7b303cf5eea20ff68b2)


### [etcd, installer-etcd-artifacts](https://github.com/openshift/etcd/tree/b5ad268120ccd50185b9ec00ff1c4e5aca379f84)

* [OCPBUGS-57675](https://issues.redhat.com/browse/OCPBUGS-57675): Updating ose-etcd-container image to be consistent with ART for 4.20 [#334](https://github.com/openshift/etcd/pull/334)
* [Full changelog](https://github.com/openshift/etcd/compare/a5421dfe551a2e9c911a75062a4cdeb7473f5c26...b5ad268120ccd50185b9ec00ff1c4e5aca379f84)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/e217ae233e8a8fc445bbdcf83d3527896ea33768)

* NO-JIRA: Update OWNERS [#83](https://github.com/openshift/cloud-provider-gcp/pull/83)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/aabc00058c2b9bbceb8c57652e803120312cb2b3...e217ae233e8a8fc445bbdcf83d3527896ea33768)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/65539c71b4c292fc0f4eeb572dfe490af63063d9)

* NO-JIRA: Update OWNERS [#246](https://github.com/openshift/cluster-api-provider-gcp/pull/246)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/91841f54b67c11ff48f4f2d7c7162f8ce4a1ca5d...65539c71b4c292fc0f4eeb572dfe490af63063d9)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/01515888c83526ec235b7bc3a27df6eba3034b00)

* [OCPCLOUD-2931](https://issues.redhat.com/browse/OCPCLOUD-2931): Update Kubernetes deps to v1.33 [#123](https://github.com/openshift/machine-api-provider-gcp/pull/123)
* NO-JIRA: Update OWNERS [#127](https://github.com/openshift/machine-api-provider-gcp/pull/127)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/0519d67600b976ff4e080b5bfdfd314cfe7b7e3a...01515888c83526ec235b7bc3a27df6eba3034b00)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/500ab5d31ad382805070c8ae329a9a34163ebc99)

* [STOR-2396](https://issues.redhat.com/browse/STOR-2396): Rebase to upstream v1.20.0 for OCP 4.20 [#79](https://github.com/openshift/gcp-pd-csi-driver/pull/79)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/9e7c68ce9b0075d926ff59e23ca8840ad8fda21f...500ab5d31ad382805070c8ae329a9a34163ebc99)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/e0ad050a84bab669e0f11e080fc4c388ef417bba)

* [STOR-2394](https://issues.redhat.com/browse/STOR-2394): Bump all deps for 4.20 [#147](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/147)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/6907007f86e4623088bad036eb167f0813e6a20c...e0ad050a84bab669e0f11e080fc4c388ef417bba)


### [haproxy-router](https://github.com/openshift/router/tree/6723dce855196c4554c9bee5581f4fbdf479eb80)

* [OCPBUGS-55506](https://issues.redhat.com/browse/OCPBUGS-55506): Prevent startup failures due to name resolution [#656](https://github.com/openshift/router/pull/656)
* [Full changelog](https://github.com/openshift/router/compare/b41f9d05467fb7b3f6c2dafa6ac4b5e25164c0b6...6723dce855196c4554c9bee5581f4fbdf479eb80)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/af2432127b48ef583ab50b1d9b573de450142e8b)

* [OCPBUGS-59533](https://issues.redhat.com/browse/OCPBUGS-59533): Rebase v1.33.3 to master/4.20 [#2369](https://github.com/openshift/kubernetes/pull/2369)
* [OCPBUGS-57666](https://issues.redhat.com/browse/OCPBUGS-57666): Adjust durations for PodLifecycleSleepAction e2e tests [#2363](https://github.com/openshift/kubernetes/pull/2363)
* [STOR-2481](https://issues.redhat.com/browse/STOR-2481): UPSTREAM: &lt;carry&gt;: Skip SELinux test with Feature:SELinuxMountReadWriteteOncePodOnly [#2389](https://github.com/openshift/kubernetes/pull/2389)
* [OCPBUGS-60047](https://issues.redhat.com/browse/OCPBUGS-60047): disable slow and flaky tests rather than labeling them [#2390](https://github.com/openshift/kubernetes/pull/2390)
* [OCPBUGS-56785](https://issues.redhat.com/browse/OCPBUGS-56785): UPSTREAM: 132028: podresources: list: use active pods [#2361](https://github.com/openshift/kubernetes/pull/2361)
* NO-JIRA: UPSTREAM: &lt;drop&gt;: Revert "Bump external snapshotter for vgs tests" [#2387](https://github.com/openshift/kubernetes/pull/2387)
* [OCPBUGS-59603](https://issues.redhat.com/browse/OCPBUGS-59603): Bump the external-snapshotter for vgs tests [#2373](https://github.com/openshift/kubernetes/pull/2373)
* [TRT-2068](https://issues.redhat.com/browse/TRT-2068): Skip specific LoadBalancer test for "none" platform [#2383](https://github.com/openshift/kubernetes/pull/2383)
* [TRT-2068](https://issues.redhat.com/browse/TRT-2068): Reintroduce non-suite annotation removal [#2331](https://github.com/openshift/kubernetes/pull/2331)
* [Full changelog](https://github.com/openshift/kubernetes/compare/b94367cabf3edea99cfd7ecf7e8bafdc908d83ca...af2432127b48ef583ab50b1d9b573de450142e8b)


### [hypershift](https://github.com/openshift/hypershift/tree/ed434991335ce3a7228284a07d75562f1cae04b1)

* [OCPBUGS-60064](https://issues.redhat.com/browse/OCPBUGS-60064): fix(OCPBUGS-60064): add missing app label to some components [#6591](https://github.com/openshift/hypershift/pull/6591)
* [CNTRLPLANE-1186](https://issues.redhat.com/browse/CNTRLPLANE-1186): update github.com/golang/groupcache digest to 2c02b82 [#6389](https://github.com/openshift/hypershift/pull/6389)
* [CNTRLPLANE-1228](https://issues.redhat.com/browse/CNTRLPLANE-1228): Update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.24.4-1753853351 [#6541](https://github.com/openshift/hypershift/pull/6541)
* [OCPBUGS-58061](https://issues.redhat.com/browse/OCPBUGS-58061): Always compress and encode payload in token secret for inplace upgrades [#6352](https://github.com/openshift/hypershift/pull/6352)
* [CNTRLPLANE-1225](https://issues.redhat.com/browse/CNTRLPLANE-1225): feat(konflux): Use hermetic builds for CPO [#6595](https://github.com/openshift/hypershift/pull/6595)
* [CNTRLPLANE-1197](https://issues.redhat.com/browse/CNTRLPLANE-1197): Add EnsureGlobalPullSecret to be executed in 4.19 test suite [#6508](https://github.com/openshift/hypershift/pull/6508)
* [OCPBUGS-59194](https://issues.redhat.com/browse/OCPBUGS-59194): fix(OCPBUGS-59194): Allow HCCO to set registry managementState to Removed [#6593](https://github.com/openshift/hypershift/pull/6593)
* NO-JIRA: feat(azure): Add deletion scripts and cleanup documentation for managed Azure clusters [#6560](https://github.com/openshift/hypershift/pull/6560)
* [OCPBUGS-59886](https://issues.redhat.com/browse/OCPBUGS-59886): Add selinux-warning-controller to KCM [#6550](https://github.com/openshift/hypershift/pull/6550)
* [CNTRLPLANE-1116](https://issues.redhat.com/browse/CNTRLPLANE-1116): build(gitlint): add gitlint to verify target [#6559](https://github.com/openshift/hypershift/pull/6559)
* [CORENET-6229](https://issues.redhat.com/browse/CORENET-6229): Use networking.advertiseAddress for CNO apiserver override for IBMCloud PlatformType [#6553](https://github.com/openshift/hypershift/pull/6553)
* [OCPBUGS-59736](https://issues.redhat.com/browse/OCPBUGS-59736): Add support for generating a SC UID per namespace if SCC are not avalable [#6520](https://github.com/openshift/hypershift/pull/6520)
* [CNTRLPLANE-263](https://issues.redhat.com/browse/CNTRLPLANE-263): Remove all AzureManaged* CRDs [#6518](https://github.com/openshift/hypershift/pull/6518)
* [CNTRLPLANE-262](https://issues.redhat.com/browse/CNTRLPLANE-262): Support print operator version in CLI [#5821](https://github.com/openshift/hypershift/pull/5821)
* [CNTRLPLANE-1198](https://issues.redhat.com/browse/CNTRLPLANE-1198), [CNTRLPLANE-1199](https://issues.redhat.com/browse/CNTRLPLANE-1199): Bump AllowedCIDRBlocks limit [#6556](https://github.com/openshift/hypershift/pull/6556)
* NO-JIRA: refactor(azure): extract AKS managed identity setup into separate script [#6488](https://github.com/openshift/hypershift/pull/6488)
* [CNTRLPLANE-1116](https://issues.redhat.com/browse/CNTRLPLANE-1116): Fix CI git commits for run-gitlint [#6519](https://github.com/openshift/hypershift/pull/6519)
* [OCPBUGS-59959](https://issues.redhat.com/browse/OCPBUGS-59959): Set explicit FSGroup and RunAsUser for etcd when there's no SCC [#6548](https://github.com/openshift/hypershift/pull/6548)
* NO-JIRA: add CLAUDE.md with comprehensive development guidance [#6549](https://github.com/openshift/hypershift/pull/6549)
* [CNTRLPLANE-1191](https://issues.redhat.com/browse/CNTRLPLANE-1191): add sa-token-issuer-private-key-path flag to create cluster aws [#6526](https://github.com/openshift/hypershift/pull/6526)
* [CNTRLPLANE-1184](https://issues.redhat.com/browse/CNTRLPLANE-1184): update registry.access.redhat.com/ubi10/ubi docker tag to v10.0-1752573517 [#6343](https://github.com/openshift/hypershift/pull/6343)
* [OCPBUGS-59927](https://issues.redhat.com/browse/OCPBUGS-59927): Fix MCE 2.10 konflux EC violations [#6531](https://github.com/openshift/hypershift/pull/6531)
* [MGMT-20948](https://issues.redhat.com/browse/MGMT-20948): Enable Multus Disabling for NetworkType=Other [#6358](https://github.com/openshift/hypershift/pull/6358)
* NO-JIRA: fix(cmd): match infraID exactly on OIDC provider delete [#6538](https://github.com/openshift/hypershift/pull/6538)
* NO-JIRA: fix(test/e2e): add KCM leader elect failure msg to isLeaderElectionFailure [#6537](https://github.com/openshift/hypershift/pull/6537)
* [CNTRLPLANE-777](https://issues.redhat.com/browse/CNTRLPLANE-777): Create an Arm64 NodePool e2e Test for ARO HCP [#6509](https://github.com/openshift/hypershift/pull/6509)
* [CNTRLPLANE-996](https://issues.redhat.com/browse/CNTRLPLANE-996): feat(cli): Add support for using ROSA managed policies [#6467](https://github.com/openshift/hypershift/pull/6467)
* [CNTRLPLANE-204](https://issues.redhat.com/browse/CNTRLPLANE-204): feat(shared-ingress): Add reloader sidecar to avoid restarts on config changes [#6447](https://github.com/openshift/hypershift/pull/6447)
* [MGMT-20826](https://issues.redhat.com/browse/MGMT-20826): Add CLI validation to ensure Console is disabled when Ingress is disabled [#6479](https://github.com/openshift/hypershift/pull/6479)
* NO-JIRA: feat(cmd/dump): add CronJobs to dump [#6494](https://github.com/openshift/hypershift/pull/6494)
* [OCPBUGS-53265](https://issues.redhat.com/browse/OCPBUGS-53265): Use the image reference for the cache in the image metadata provider [#6155](https://github.com/openshift/hypershift/pull/6155)
* [OCPBUGS-59835](https://issues.redhat.com/browse/OCPBUGS-59835): MCE 2.10 konflux [#6524](https://github.com/openshift/hypershift/pull/6524)
* [OCPBUGS-57336](https://issues.redhat.com/browse/OCPBUGS-57336): Delete unused AdditionalTrustBundle from CP namespace [#6504](https://github.com/openshift/hypershift/pull/6504)
* Fix OCPBUGS-54720: HCP payload doesn't respect multiple [#6486](https://github.com/openshift/hypershift/pull/6486)
* [OCPSTRAT-2173](https://issues.redhat.com/browse/OCPSTRAT-2173): feat(hcco): add support for hosted OIDC client secrets [#6375](https://github.com/openshift/hypershift/pull/6375)
* [OCPBUGS-43824](https://issues.redhat.com/browse/OCPBUGS-43824): Help fix flaky NTO tests [#6480](https://github.com/openshift/hypershift/pull/6480)
* feat(shared-ingress): Fix Konflux hermetic build config [#6503](https://github.com/openshift/hypershift/pull/6503)
* [CNTRLPLANE-1116](https://issues.redhat.com/browse/CNTRLPLANE-1116): add gitlint support for conventional commit enforcement [#6462](https://github.com/openshift/hypershift/pull/6462)
* NO-JIRA: feat(contrib): add kubelet config daemonset [#6495](https://github.com/openshift/hypershift/pull/6495)
* NO-JIRA: Fix a typo in the documentation [#6501](https://github.com/openshift/hypershift/pull/6501)
* NO-JIRA: increase the pod limit per node in AKS cluster [#6487](https://github.com/openshift/hypershift/pull/6487)
* NO-JIRA: Add new doc from HCP OADP Plugin [#6299](https://github.com/openshift/hypershift/pull/6299)
* [OCPBUGS-59759](https://issues.redhat.com/browse/OCPBUGS-59759): fix(konflux): Add missing backslash for dot escaping [#6491](https://github.com/openshift/hypershift/pull/6491)
* NO-JIRA: test: replace context.Background/TODO with t.Context in unit tests [#6475](https://github.com/openshift/hypershift/pull/6475)
* NO-JIRA: Dummy change to shared-ingress Containerfile to trigger a build [#6478](https://github.com/openshift/hypershift/pull/6478)
* NO-JIRA: test: remove CPOv2 annotation from upgrade test [#6485](https://github.com/openshift/hypershift/pull/6485)
* [OCPBUGS-57316](https://issues.redhat.com/browse/OCPBUGS-57316): hypershift version in CLI returns panics for Server Version when HyperShift operator is deployed [#6473](https://github.com/openshift/hypershift/pull/6473)
* [CNTRLPLANE-980](https://issues.redhat.com/browse/CNTRLPLANE-980): chore(contrib): add ansible playbook for setting up external OIDC [#6294](https://github.com/openshift/hypershift/pull/6294)
* NO-JIRA: test/e2e: skip kubevirt pods when checking labels, tolerations, and term msg policy [#6476](https://github.com/openshift/hypershift/pull/6476)
* NO-JIRA: test/e2e: add TerminationMessagePolicyFallbackToLogsOnError check to 4.19 [#6291](https://github.com/openshift/hypershift/pull/6291)
* [CNTRLPLANE-735](https://issues.redhat.com/browse/CNTRLPLANE-735): Document steps to configure Microsoft backup extension in AKS [#6456](https://github.com/openshift/hypershift/pull/6456)
* [Full changelog](https://github.com/openshift/hypershift/compare/d5884761640027a4d4d78fe1711597a9cef867a7...ed434991335ce3a7228284a07d75562f1cae04b1)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/36ab30f90e87de0daa926d20ccda88c41abed191)

* NO-JIRA: Update OWNERS [#83](https://github.com/openshift/cloud-provider-ibm/pull/83)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/16c646d541324a2c55e838ccb160d245275cf098...36ab30f90e87de0daa926d20ccda88c41abed191)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/19801353c97d08b1333177be45c848082af0643c)

* [STOR-2393](https://issues.redhat.com/browse/STOR-2393): Rebase to upstream v5.2.16 for OCP 4.20 [#102](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/102)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/176b6ef1136c45b8e3cb24a48458a251deca99bc...19801353c97d08b1333177be45c848082af0643c)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/21f405cce9573eee1c4f1cf95c0eb601ae77ed99)

* [STOR-2330](https://issues.redhat.com/browse/STOR-2330): Add labels to subscribe ibm-vpc-block CSI driver controller and node pods to NPs [#148](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/148)
* [STOR-2394](https://issues.redhat.com/browse/STOR-2394): Bump all deps for 4.20 [#147](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/147)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/79dbb30095540581facfecc77c77b968006e2d08...21f405cce9573eee1c4f1cf95c0eb601ae77ed99)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/8b6396a4c78f4791b7f3c5ec404a78b499f8546b)

* NO-JIRA: Update OWNERS [#117](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/117)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/ca6e538ea29299cbe27e88a2b75e6b70d32203fc...8b6396a4c78f4791b7f3c5ec404a78b499f8546b)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/035805df5277c9f9c0cd9d4a44f59a08ab3ce031)

* [OCPCLOUD-2930](https://issues.redhat.com/browse/OCPCLOUD-2930): Bump k8s 1.33 [#67](https://github.com/openshift/machine-api-provider-ibmcloud/pull/67)
* NO-JIRA: Update OWNERS [#68](https://github.com/openshift/machine-api-provider-ibmcloud/pull/68)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/2d5193e919a2d573a7a5855fbb2914c5334cab2f...035805df5277c9f9c0cd9d4a44f59a08ab3ce031)


### [insights-operator](https://github.com/openshift/insights-operator/tree/b5185da3774733e7109fd25e56a621831011908f)

* feat: add permissions to gather clusterrole (#1106) [#1106](https://github.com/openshift/insights-operator/pull/1106)
* feat: Allow on-demand gathering during initial periodic run (#1109) [#1109](https://github.com/openshift/insights-operator/pull/1109)
* [Full changelog](https://github.com/openshift/insights-operator/compare/7f8b40d9ccab7d83f183c5942044892c263d9c14...b5185da3774733e7109fd25e56a621831011908f)


### [insights-runtime-exporter, insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor/tree/3d3783698b20f5c27e4f35051b1450e47e789068)

* Liborfuka ocp420 new tests [#51](https://github.com/openshift/insights-runtime-extractor/pull/51)
* Sidecar containers test case [#44](https://github.com/openshift/insights-runtime-extractor/pull/44)
* test: Fix JBoss EAP 8.0 version [#50](https://github.com/openshift/insights-runtime-extractor/pull/50)
* [Full changelog](https://github.com/openshift/insights-runtime-extractor/compare/01a901de1766a8c0605617123f7ac3146dffd38b...3d3783698b20f5c27e4f35051b1450e47e789068)


### [ironic](https://github.com/openshift/ironic-image/tree/41e831251856f30dcc7e1a4c83f5cca51f820642)

* [METAL-1461](https://issues.redhat.com/browse/METAL-1461): update config to allow Ironic to work with ironic-prometheus-exporter [#674](https://github.com/openshift/ironic-image/pull/674)
* [METAL-1379](https://issues.redhat.com/browse/METAL-1379): Bump ironic to include NIC Firmware Updates [#672](https://github.com/openshift/ironic-image/pull/672)
* [METAL-1414](https://issues.redhat.com/browse/METAL-1414): Use Python 3.12 to build and run ironic [#658](https://github.com/openshift/ironic-image/pull/658)
* [Full changelog](https://github.com/openshift/ironic-image/compare/47553c851c9094da640fbd0c968efc3eea4a62c3...41e831251856f30dcc7e1a4c83f5cca51f820642)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/db01e6fb97180004fb6800f61aefe72689f2933d)

* [METAL-1414](https://issues.redhat.com/browse/METAL-1414): Use python3.12 to build and run ironic-agent [#191](https://github.com/openshift/ironic-agent-image/pull/191)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/928c0c14c55fe6c5c7df690990eaf469a70e612f...db01e6fb97180004fb6800f61aefe72689f2933d)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/0f8a4eb84ace9b746cf25d51d80dacf34ca5f953)

* [OCPBUGS-57556](https://issues.redhat.com/browse/OCPBUGS-57556): Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.20 [#222](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/222)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/caf798560ad386b4a254e855ace3e3f2d7db6d8d...0f8a4eb84ace9b746cf25d51d80dacf34ca5f953)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/7c2a7004121df71cbec5802e4965876dcd34f5d0)

* [SPLAT-2381](https://issues.redhat.com/browse/SPLAT-2381): Fixed e2e test to generate machines with cluster name prefix [#1398](https://github.com/openshift/machine-api-operator/pull/1398)
* [OCPCLOUD-2980](https://issues.redhat.com/browse/OCPCLOUD-2980): add ingress/egress network policy v2 [#1396](https://github.com/openshift/machine-api-operator/pull/1396)
* Revert "OCPCLOUD-2980: add ingress/egress network policy" [#1395](https://github.com/openshift/machine-api-operator/pull/1395)
* [OCPCLOUD-2980](https://issues.redhat.com/browse/OCPCLOUD-2980): add ingress/egress network policy [#1387](https://github.com/openshift/machine-api-operator/pull/1387)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/388c07321cafc738bfda06a6268a63b8d0c6a9d8...7c2a7004121df71cbec5802e4965876dcd34f5d0)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/0b5bfc6bfc6559ab8f3c63af7d530db37fb9f8cc)

* [MCO-1777](https://issues.redhat.com/browse/MCO-1777): Run build as an init container for OCL [#5200](https://github.com/openshift/machine-config-operator/pull/5200)
* [MCO-1811](https://issues.redhat.com/browse/MCO-1811): add MachineConfigControllerPoolAlert runbook to alert [#5214](https://github.com/openshift/machine-config-operator/pull/5214)
* [TRT-2232](https://issues.redhat.com/browse/TRT-2232): Revert #5148 "OCPBUGS-58023: Prevent unnecessary systemd unit disable" [#5213](https://github.com/openshift/machine-config-operator/pull/5213)
* [OCPNODE-3522](https://issues.redhat.com/browse/OCPNODE-3522): Generate deterministic order namespacedPolicyJSON [#5196](https://github.com/openshift/machine-config-operator/pull/5196)
* [OCPNODE-3466](https://issues.redhat.com/browse/OCPNODE-3466): Remove containernetworking-plugins directory from crio.conf [#5173](https://github.com/openshift/machine-config-operator/pull/5173)
* NO-ISSUE: Balance runtime of e2e-gcp-op shards [#5203](https://github.com/openshift/machine-config-operator/pull/5203)
* [OCPBUGS-58023](https://issues.redhat.com/browse/OCPBUGS-58023): Prevent unnecessary systemd unit disable [#5148](https://github.com/openshift/machine-config-operator/pull/5148)
* [MCO-1773](https://issues.redhat.com/browse/MCO-1773): Pick up openshift/kubernetes 1.33 rebase updates [#5182](https://github.com/openshift/machine-config-operator/pull/5182)
* [OCPBUGS-59780](https://issues.redhat.com/browse/OCPBUGS-59780): ARO clusters cannot scale on upgrade to 4.19 [#5195](https://github.com/openshift/machine-config-operator/pull/5195)
* [OCPBUGS-58443](https://issues.redhat.com/browse/OCPBUGS-58443): In OCL for reboot, after applying ssh/file/password based MC the MCP is stuck in updating state [#5191](https://github.com/openshift/machine-config-operator/pull/5191)
* [OCPBUGS-57484](https://issues.redhat.com/browse/OCPBUGS-57484), [OPNET-681](https://issues.redhat.com/browse/OPNET-681): Support migration to NMState [#5064](https://github.com/openshift/machine-config-operator/pull/5064)
* [OCPNODE-3006](https://issues.redhat.com/browse/OCPNODE-3006): Migrate ClusterImagePolicy/ImagePolicy to v1 [#5143](https://github.com/openshift/machine-config-operator/pull/5143)
* [OCPBUGS-43406](https://issues.redhat.com/browse/OCPBUGS-43406): Add workaround fix for static pod race [#5185](https://github.com/openshift/machine-config-operator/pull/5185)
* [MCO-1813](https://issues.redhat.com/browse/MCO-1813): Simplify boot image reconciliation with Go generics [#5183](https://github.com/openshift/machine-config-operator/pull/5183)
* NO-ISSUE: Split gcp-op into two tests [#5197](https://github.com/openshift/machine-config-operator/pull/5197)
* [MCO-1815](https://issues.redhat.com/browse/MCO-1815): vSphere bootimage update reconciliation should handle bootimage name diverging [#5187](https://github.com/openshift/machine-config-operator/pull/5187)
* [OCPBUGS-58191](https://issues.redhat.com/browse/OCPBUGS-58191): fixes image registry secret handling [#5171](https://github.com/openshift/machine-config-operator/pull/5171)
* [OCPBUGS-55971](https://issues.redhat.com/browse/OCPBUGS-55971): Enable debug logging for nodeip-configuration [#5043](https://github.com/openshift/machine-config-operator/pull/5043)
* [OCPBUGS-59776](https://issues.redhat.com/browse/OCPBUGS-59776): Revert "OCPBUGS-52302: Fix timing of `Spec.ConfigVersion.Desired` update in MCN" [#5190](https://github.com/openshift/machine-config-operator/pull/5190)
* [OCPBUGS-52302](https://issues.redhat.com/browse/OCPBUGS-52302): Fix timing of `Spec.ConfigVersion.Desired` update in MCN [#5121](https://github.com/openshift/machine-config-operator/pull/5121)
* [OCPBUGS-59672](https://issues.redhat.com/browse/OCPBUGS-59672): TestMCNPoolNameCustom should clean up resources properly [#5184](https://github.com/openshift/machine-config-operator/pull/5184)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/5a97a9a29a99e93f15b55242fefb7b41da4a4a82...0b5bfc6bfc6559ab8f3c63af7d530db37fb9f8cc)


### [metallb-frr](https://github.com/openshift/frr/tree/fc0fe74f94b415b28d772dbc61f6323171a11b50)

* [OCPBUGS-57696](https://issues.redhat.com/browse/OCPBUGS-57696): Updating ose-frr-container image to be consistent with ART for 4.20 [#101](https://github.com/openshift/frr/pull/101)
* [Full changelog](https://github.com/openshift/frr/compare/b239af953715538c0abf602c030545c72d740c91...fc0fe74f94b415b28d772dbc61f6323171a11b50)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/1bb9c3603e578efc122538b318de17282f189555)

* NO-JIRA: refactor incidents to add typescript [#475](https://github.com/openshift/monitoring-plugin/pull/475)
* [OCPBUGS-55455](https://issues.redhat.com/browse/OCPBUGS-55455): feat: add alerting rules tab to dev console [#487](https://github.com/openshift/monitoring-plugin/pull/487)
* NO-JIRA: automation failed in the periodic job [#486](https://github.com/openshift/monitoring-plugin/pull/486)
* [OU-944](https://issues.redhat.com/browse/OU-944): automation refactoring [#485](https://github.com/openshift/monitoring-plugin/pull/485)
* [OU-863](https://issues.redhat.com/browse/OU-863): feat: add disconnected to line chart [#477](https://github.com/openshift/monitoring-plugin/pull/477)
* [OU-388](https://issues.redhat.com/browse/OU-388): add units selector to the metrics page [#480](https://github.com/openshift/monitoring-plugin/pull/480)
* [OU-939](https://issues.redhat.com/browse/OU-939): Fix virt persepective new silence link [#472](https://github.com/openshift/monitoring-plugin/pull/472)
* [OU-594](https://issues.redhat.com/browse/OU-594): [Incidents] UI is not embedded in the Alerting section [#465](https://github.com/openshift/monitoring-plugin/pull/465)
* [OU-503](https://issues.redhat.com/browse/OU-503): regression automation testing for monitoring alerting [#471](https://github.com/openshift/monitoring-plugin/pull/471)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/dbc25beb5110a77fd0be0087c5beaebb48c623bb...1bb9c3603e578efc122538b318de17282f189555)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/b81340a9fc6963fa3d64d215a12e8528ca797131)

* Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.20 (#107) [#107](https://github.com/openshift/network-metrics-daemon/pull/107)
* create .snyk file to skip vendor folder (#108) [#108](https://github.com/openshift/network-metrics-daemon/pull/108)
* [OCPBUGS-59612](https://issues.redhat.com/browse/OCPBUGS-59612): Bump github.com/golang/glog to v1.2.4 (#109) [#109](https://github.com/openshift/network-metrics-daemon/pull/109)
* no-jira: Replace e2e test image (#118) [#118](https://github.com/openshift/network-metrics-daemon/pull/118)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/5ec8c6bde236feab19525c2d84f7d55f430f9e2b...b81340a9fc6963fa3d64d215a12e8528ca797131)


### [network-tools](https://github.com/openshift/network-tools/tree/4e89460d0cb07851bf39049ec30f7ed1c177e34e)

* NO-JIRA:Update OWNERS file [#152](https://github.com/openshift/network-tools/pull/152)
* [Full changelog](https://github.com/openshift/network-tools/compare/16f4c78d4a5f1e17d8da2f54aeeea26b40aa90c3...4e89460d0cb07851bf39049ec30f7ed1c177e34e)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/19747fee9e3918fe137d528806dbbf6f8b564275)

* NO-JIRA: fix(i18n): use right namespace [#262](https://github.com/openshift/networking-console-plugin/pull/262)
* [OCPBUGS-60122](https://issues.redhat.com/browse/OCPBUGS-60122): Fix ingress details [#258](https://github.com/openshift/networking-console-plugin/pull/258)
* [CNV-52160](https://issues.redhat.com/browse/CNV-52160): add vm network list [#256](https://github.com/openshift/networking-console-plugin/pull/256)
* [OCPBUGS-49652](https://issues.redhat.com/browse/OCPBUGS-49652): Fix requiremenets with no value [#254](https://github.com/openshift/networking-console-plugin/pull/254)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/da7c5e6ec92c1b870e18defec168de3984ebbf07...19747fee9e3918fe137d528806dbbf6f8b564275)


### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/8d229856471212c92834399c977baa751f4c461e)

* [OCPCLOUD-2924](https://issues.redhat.com/browse/OCPCLOUD-2924): Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (109de6e) into main [#44](https://github.com/openshift/cloud-provider-nutanix/pull/44)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/06b2e546a88858aed51667c266f54cf08c78ff05...8d229856471212c92834399c977baa751f4c461e)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/27175fdadb03425978e1fd3f5f27d462f54bec5e)

* NO-JIRA: Update OWNERS [#118](https://github.com/openshift/machine-api-provider-nutanix/pull/118)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/6df79c26c9f3a21487ec610dfeb97f115685a9ed...27175fdadb03425978e1fd3f5f27d462f54bec5e)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/236a0ae43f5f747c8ae731061f1fd8c929280fe2)

* clid-415: adds a warn message to v1 (#1238) [#1238](https://github.com/openshift/oc-mirror/pull/1238)
* Bump the oc-mirror-v2 group in /v2 with 17 updates (#1232) [#1232](https://github.com/openshift/oc-mirror/pull/1232)
* [OCPBUGS-59949](https://issues.redhat.com/browse/OCPBUGS-59949): fixes the result output showing the wrong total (#1236) [#1236](https://github.com/openshift/oc-mirror/pull/1236)
* prevents panic when helm chart is nil (#1233) [#1233](https://github.com/openshift/oc-mirror/pull/1233)
* [OCPBUGS-59646](https://issues.redhat.com/browse/OCPBUGS-59646): revert #1220 and print a warning instead (#1228) [#1228](https://github.com/openshift/oc-mirror/pull/1228)
* updates dependabot config (#1231) [#1231](https://github.com/openshift/oc-mirror/pull/1231)
* [OCPBUGS-55114](https://issues.redhat.com/browse/OCPBUGS-55114): v2/operator: support manifest lists with one arch (#1140) [#1140](https://github.com/openshift/oc-mirror/pull/1140)
* NO-JIRA: OKD compatibility - Allow custom value for SignatureURL (#1165) [#1165](https://github.com/openshift/oc-mirror/pull/1165)
* adds build-machinery-go as a tool dependency (#1226) [#1226](https://github.com/openshift/oc-mirror/pull/1226)
* [OCPBUGS-59714](https://issues.redhat.com/browse/OCPBUGS-59714): Detect images from a Helm Chart with an aliased chart dependency (#1038) [#1038](https://github.com/openshift/oc-mirror/pull/1038)
* [OCPBUGS-52562](https://issues.redhat.com/browse/OCPBUGS-52562): Ensure release collection does not include duplicates (#1218) [#1218](https://github.com/openshift/oc-mirror/pull/1218)
* [OCPBUGS-59396](https://issues.redhat.com/browse/OCPBUGS-59396): v2/archive: handle 0b mirror archive files (#1219) [#1219](https://github.com/openshift/oc-mirror/pull/1219)
* [OCPBUGS-54622](https://issues.redhat.com/browse/OCPBUGS-54622): cli/delete: fix workflow mode name output (#1214) [#1214](https://github.com/openshift/oc-mirror/pull/1214)
* [OCPBUGS-59646](https://issues.redhat.com/browse/OCPBUGS-59646): cmd: unpack v2 to $HOME instead of /tmp (#1220) [#1220](https://github.com/openshift/oc-mirror/pull/1220)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/478da2f5895022d4f4d7354367d6b14ee6bd957f...236a0ae43f5f747c8ae731061f1fd8c929280fe2)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/1b06fc6fe694b12549b6e9680c9c3b174d10353e)

* NO-ISSUE: Synchronize From Upstream Repositories [#411](https://github.com/openshift/operator-framework-operator-controller/pull/411)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/681a9592e61fb561349ea7b7f2d50ed1bf0fef39...1b06fc6fe694b12549b6e9680c9c3b174d10353e)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/45b91529be7117e7445c6e411e5f86ac8f8feb29)

* NO-ISSUE: Synchronize From Upstream Repositories [#1044](https://github.com/openshift/operator-framework-olm/pull/1044)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/3a0bba161e46cf82ed1a571541972130a782f067...45b91529be7117e7445c6e411e5f86ac8f8feb29)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/a6dd165725d614df24bfa17268eaa89fa4de7ec8)

* [OPRUN-3888](https://issues.redhat.com/browse/OPRUN-3888), [OPRUN-3889](https://issues.redhat.com/browse/OPRUN-3889): Upgrade catalog images from 4.19 to 4.20 [#650](https://github.com/operator-framework/operator-marketplace/pull/650)
* [OPRUN-3981](https://issues.redhat.com/browse/OPRUN-3981): Upgrade Go from 1.23 to 1.24.3 and k8s deps to 1.33 for release 4.20 [#647](https://github.com/operator-framework/operator-marketplace/pull/647)
* [OPRUN-3981](https://issues.redhat.com/browse/OPRUN-3981): Update dockerfile to use go 1.24 and OCP image 4.20 [#645](https://github.com/operator-framework/operator-marketplace/pull/645)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/4be744152a4d85ee2f72d277fa638275cbb69793...a6dd165725d614df24bfa17268eaa89fa4de7ec8)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/1fde61ad03a950ba2236c29e9d00cb6166c9fe9b)

* [OCPBUGS-59248](https://issues.redhat.com/browse/OCPBUGS-59248): DownStream Merge [07-17-2025] [#2676](https://github.com/openshift/ovn-kubernetes/pull/2676)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/86953f3b2f20530d084b924189cee23319f5435a...1fde61ad03a950ba2236c29e9d00cb6166c9fe9b)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/bf47a45c36a57326fefe5a5be7db47ea3df19a9d)

* [STOR-2394](https://issues.redhat.com/browse/STOR-2394): Bump all deps for 4.20 [#85](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/85)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/19c90ea02274c1b5a0757c887ef8344f8351bdd6...bf47a45c36a57326fefe5a5be7db47ea3df19a9d)


### [prometheus](https://github.com/openshift/prometheus/tree/e3c32a9a3a4828106c3de1fcb0028625c50b3e1b)

* [MON-4300](https://issues.redhat.com/browse/MON-4300): update prometheus to 3.5 [#260](https://github.com/openshift/prometheus/pull/260)
* [OCPBUGS-39089](https://issues.redhat.com/browse/OCPBUGS-39089): Clarify prometheus pod NFS warning message [#243](https://github.com/openshift/prometheus/pull/243)
* [Full changelog](https://github.com/openshift/prometheus/compare/33cadbbc4c931979bfff43c56a969aaaede5aeab...e3c32a9a3a4828106c3de1fcb0028625c50b3e1b)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/bf2fa662f57f233d8541f94c4953e0dcd7a5ab20)

* [OCPBUGS-59575](https://issues.redhat.com/browse/OCPBUGS-59575): Update all dependencies [#63](https://github.com/openshift/route-controller-manager/pull/63)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/e148fabc13f735d5f59a94714031d8765abb9895...bf2fa662f57f233d8541f94c4953e0dcd7a5ab20)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/a6346e9d7cfd9e7243742ede7c795b5ac93498a4)

* [OCPBUGS-57703](https://issues.redhat.com/browse/OCPBUGS-57703): Updating ose-service-ca-operator-container image to be consistent with ART for 4.20 [#268](https://github.com/openshift/service-ca-operator/pull/268)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/4dfa6916f984d0fd7188380edc88b250738f07f7...a6346e9d7cfd9e7243742ede7c795b5ac93498a4)


### [tests](https://github.com/openshift/origin/tree/c60cd3894b31e34ad18bcb10df9903f677a71d2e)

* NO-JIRA: Update image mirroring instructions to avoid using external binary [#30060](https://github.com/openshift/origin/pull/30060)
* [TRT-2197](https://issues.redhat.com/browse/TRT-2197): use fixed seed for test ordering [#29997](https://github.com/openshift/origin/pull/29997)
* NO-JIRA: Get enabled featuregates from metrics endpoint [#29952](https://github.com/openshift/origin/pull/29952)
* [CORENET-6203](https://issues.redhat.com/browse/CORENET-6203): Enable test for LGW L2 [#30009](https://github.com/openshift/origin/pull/30009)
* [OPRUN-3964](https://issues.redhat.com/browse/OPRUN-3964): [olmv1] - Remove test [sig-olmv1][OCPFeatureGate:NewOLM] OLMv1 CRDs should be installed migrated to operator-controller repository/OTE [#30036](https://github.com/openshift/origin/pull/30036)
* [OCPBUGS-56506](https://issues.redhat.com/browse/OCPBUGS-56506): Don't check for remote node subnet BGP routes [#30029](https://github.com/openshift/origin/pull/30029)
* [OCPNODE-3004](https://issues.redhat.com/browse/OCPNODE-3004): Increase the time to wait until the pod becomes ImagePullBackOff [#30030](https://github.com/openshift/origin/pull/30030)
* [OCPBUGS-59218](https://issues.redhat.com/browse/OCPBUGS-59218): feat(azure): skip metrics collection for ARO HCP hypershift [#30006](https://github.com/openshift/origin/pull/30006)
* NO-JIRA: Revert "OCPBUGS-55238: spyglass: hide disruption events for localhost" [#30034](https://github.com/openshift/origin/pull/30034)
* [TRT-2224](https://issues.redhat.com/browse/TRT-2224): Fix edge case where failures are not counted [#30039](https://github.com/openshift/origin/pull/30039)
* [TRT-2163](https://issues.redhat.com/browse/TRT-2163): incluster disruption images [#30007](https://github.com/openshift/origin/pull/30007)
* [OCPNODE-3004](https://issues.redhat.com/browse/OCPNODE-3004): Accept ErrImagePull for non-existent image volume test. [#30027](https://github.com/openshift/origin/pull/30027)
* [OCPNODE-3454](https://issues.redhat.com/browse/OCPNODE-3454): OCPFeatureGate:SigstoreImageVerification update test on v1 (Cluster)ImagePolicy [#29973](https://github.com/openshift/origin/pull/29973)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): Add tests for ExternalOIDC and ExternalOIDCWithUIDAndExtraClaimMappings features [#29917](https://github.com/openshift/origin/pull/29917)
* [OCPNODE-3004](https://issues.redhat.com/browse/OCPNODE-3004): Add ImageVolume e2e tests [#30015](https://github.com/openshift/origin/pull/30015)
* [OCPBUGS-59750](https://issues.redhat.com/browse/OCPBUGS-59750): Move the legacy container failures [#30017](https://github.com/openshift/origin/pull/30017)
* [OPRUN-3768](https://issues.redhat.com/browse/OPRUN-3768): Add OLMv1 Single/OwnNamespace tests [#29998](https://github.com/openshift/origin/pull/29998)
* [OCPBUGS-55238](https://issues.redhat.com/browse/OCPBUGS-55238): spyglass: hide disruption events for localhost [#29710](https://github.com/openshift/origin/pull/29710)
* [API-1802](https://issues.redhat.com/browse/API-1802): chart template: show cert rotation events [#29279](https://github.com/openshift/origin/pull/29279)
* NO-ISSUE: Automated - Update synthetic test data [#29802](https://github.com/openshift/origin/pull/29802)
* [OTA-1580](https://issues.redhat.com/browse/OTA-1580): Add basic test for `oc adm upgrade status` CLI [#29954](https://github.com/openshift/origin/pull/29954)
* [Full changelog](https://github.com/openshift/origin/compare/af0e85d21e1c8f02c7c0272b4a7e6f0d6f9db314...c60cd3894b31e34ad18bcb10df9903f677a71d2e)


### [thanos](https://github.com/openshift/thanos/tree/c0951032b34b832d0f5467e616999490a284101b)

* [MON-4299](https://issues.redhat.com/browse/MON-4299): update to 0.39.2 [#163](https://github.com/openshift/thanos/pull/163)
* [Full changelog](https://github.com/openshift/thanos/compare/798d8365d9d5a9d79cded759266f46bbd4bee73b...c0951032b34b832d0f5467e616999490a284101b)