# 4.21.0-okd-scos.11

Created: 2026-05-07 21:21:28 +0000 UTC

Image Digest: `sha256:4b930ee653c7e7671cf2d69e50a1898330556a09ac58b255fbe4b8addd53b290`

Promoted from registry.ci.openshift.org/origin/release-scos:4.21.0-0.okd-scos-nightly-2026-05-07-134546


## Changes from 4.21.0-okd-scos.10

### Components

* Kubectl 1.34.1
* Kubernetes upgraded from 1.34.6 to 1.34.7
* Kubernetes Tests 1.34.1
* CentOS Stream CoreOS 10 10.0.20260414-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| EventTTL <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |


### Rebuilt images without code change

* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [8c41cb86](https://github.com/openshift/insights-runtime-extractor/commit/8c41cb8680f29a915d33e4954fc5ff7f5352411b) `sha256:ca417010aade8379eb44502ae2f00dced849b5eb50a99a81929a900d54271c71`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [9a8e96a6](https://github.com/openshift/machine-os-images/commit/9a8e96a60bb6d8e3c86c2780fd4212e80f5d28e5) `sha256:15e04eaaba9cc8d872a5367abeaf92ad31244899a3f8095f6779194dfbea82f7`
* [network-tools](https://github.com/openshift/network-tools) git [d6717e45](https://github.com/openshift/network-tools/commit/d6717e453a098d551c9e2d2868e1f5317c41e688) `sha256:49a3056bb60070386ba769e1d52b5a6eff4ae500ebc202038a2a5cc8ddcfead3`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [b714ab87](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/b714ab87d079db5ef3c4097520db40cd289b025e) `sha256:c56fa9f7018ae39ef0deed7a38fcfe631c3e5fbe12e18eeb7e538dea320254c8`


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/6aa17a242c19cd2f679e9c936c140b36b454ee11)

* [MGMT-24152](https://issues.redhat.com/browse/MGMT-24152): UI allows editing pull secret in draft cluster (#3674) [#3674](https://github.com/openshift-assisted/assisted-installer-ui/pull/3674)
* Update OWNERS file (#3654) [#3654](https://github.com/openshift-assisted/assisted-installer-ui/pull/3654)
* Bump happy-dom from 20.0.2 to 20.8.9 (#3525) [#3525](https://github.com/openshift-assisted/assisted-installer-ui/pull/3525)
* fix operators list in ABI below the sea (#3599) [#3599](https://github.com/openshift-assisted/assisted-installer-ui/pull/3599)
* [OCPBUGS-81589](https://issues.redhat.com/browse/OCPBUGS-81589): bump react-router-dom-v5-compat to ^6.30.3 to address CVE-2026-22029 (#3581) [#3581](https://github.com/openshift-assisted/assisted-installer-ui/pull/3581)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/ee65fdf86a7eb6f647af1f6611f9211bec0911d6...6aa17a242c19cd2f679e9c936c140b36b454ee11)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/fbdd6224573dd050002b4c805d8a1d2d843d3cd7)

* [OCPBUGS-83852](https://issues.redhat.com/browse/OCPBUGS-83852): Pass environment through to podman [#292](https://github.com/openshift/agent-installer-utils/pull/292)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/9406b13fca3707d83dae24327dbd47409f82fbcf...fbdd6224573dd050002b4c805d8a1d2d843d3cd7)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/90163f35b18ff6c437335beda68f17ee9c1e6bb8)

* [OCPBUGS-80844](https://issues.redhat.com/browse/OCPBUGS-80844): Bump google.golang.org/grpc to v1.79.3 [#539](https://github.com/openshift/csi-operator/pull/539)
* [Full changelog](https://github.com/openshift/csi-operator/compare/181ea25a74b12d1641ef2e0021228311e56626de...90163f35b18ff6c437335beda68f17ee9c1e6bb8)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/ebf58aac3fc6746fe2037f2166f1226b73b424f4)

* [OCPBUGS-80740](https://issues.redhat.com/browse/OCPBUGS-80740): Bump google.golang.org/grpc to v1.79.3 [#383](https://github.com/openshift/cluster-api-provider-azure/pull/383)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/5d6af81d7ab9b289c3def6c0350313118d63923a...ebf58aac3fc6746fe2037f2166f1226b73b424f4)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/97fcceba8ad49fcf07dad02b83f1b0da3949aeb4)

* UPSTREAM: 3569: OCPBUGS-80741: Bump grpc to v1.79.3 [#137](https://github.com/openshift/azure-disk-csi-driver/pull/137)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/30e9538b918b1a43ea613832a4be305576dcbae4...97fcceba8ad49fcf07dad02b83f1b0da3949aeb4)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/45061e97a5e2b20b01cd55fee97e5dac43fd79e4)

* UPSTREAM: 3023: OCPBUGS-80744: Bump grpc to v1.79.3 [#125](https://github.com/openshift/azure-file-csi-driver/pull/125)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/c77d75f90b7f84dfc25ba3439bc5eff87c3a2755...45061e97a5e2b20b01cd55fee97e5dac43fd79e4)


### [azure-service-operator](https://github.com/openshift/azure-service-operator/tree/5e84c83176d7630f70802b35cb10cdf2b60fd6d3)

* [OCPBUGS-80713](https://issues.redhat.com/browse/OCPBUGS-80713): Bump google.golang.org/grpc to v1.79.3 [#28](https://github.com/openshift/azure-service-operator/pull/28)
* [OCPBUGS-83864](https://issues.redhat.com/browse/OCPBUGS-83864): UPSTREAM: &lt;carry&gt;: add openshift/e2e-tests.sh [#24](https://github.com/openshift/azure-service-operator/pull/24)
* [Full changelog](https://github.com/openshift/azure-service-operator/compare/17e574628ee7ef8aa694cfc0ab5e5232b651fbf8...5e84c83176d7630f70802b35cb10cdf2b60fd6d3)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/9a415c497e70d5234c473325cf17aeef78c03544)

* [OCPBUGS-84225](https://issues.redhat.com/browse/OCPBUGS-84225): ibmcloud: bump vpc-go-sdk and capibm [#10514](https://github.com/openshift/installer/pull/10514)
* [Full changelog](https://github.com/openshift/installer/compare/a8bea03c72112c0f859af3694676da9483baec99...9a415c497e70d5234c473325cf17aeef78c03544)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/65eb4b2193d0860c1c1f45b08ea7203694db909f)

* [OCPBUGS-81677](https://issues.redhat.com/browse/OCPBUGS-81677): Do not return error when an IdP returns 500 during a grant check [#868](https://github.com/openshift/cluster-authentication-operator/pull/868)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/d235c0bb7443119e12ec2c8db57035f652f1d871...65eb4b2193d0860c1c1f45b08ea7203694db909f)


### [cluster-config-api](https://github.com/openshift/api/tree/d6cd612317218735862945e2bafc4a4054be2798)

* [OCPBUGS-83756](https://issues.redhat.com/browse/OCPBUGS-83756): fix(config/v1): define constants for authentication types as typed constants [#2815](https://github.com/openshift/api/pull/2815)
* [CNTRLPLANE-2796](https://issues.redhat.com/browse/CNTRLPLANE-2796): promote the event-ttl feature [#2809](https://github.com/openshift/api/pull/2809)
* [Full changelog](https://github.com/openshift/api/compare/e010a985205d75f9ff375051c6886afe0e4db220...d6cd612317218735862945e2bafc4a4054be2798)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/6c70966cd2011f861843e85efb8bf08c3a938fe1)

* [OCPBUGS-82544](https://issues.redhat.com/browse/OCPBUGS-82544): set trustBundleName in Istio global values [#1418](https://github.com/openshift/cluster-ingress-operator/pull/1418)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/c2ed7331f378e499b2092f04ca7aaf8b3a075274...6c70966cd2011f861843e85efb8bf08c3a938fe1)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/48fea876be028efe968520eb2051ef5d28123a94)

* [OCPBUGS-83855](https://issues.redhat.com/browse/OCPBUGS-83855): Allow setting the oauthMetadata when auth type is None [#2116](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2116)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/8ee10fb411a0c7f0e91b3e6d9e3bd3843a93e882...48fea876be028efe968520eb2051ef5d28123a94)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/5ef1df3be41d38ddae9b3d22ce51ba486939e9f1)

* [OCPBUGS-83737](https://issues.redhat.com/browse/OCPBUGS-83737): add /var/run/kubernetes as emptyDir [#641](https://github.com/openshift/cluster-kube-scheduler-operator/pull/641)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/e60e39de9cdd273dadd341d0f56350f504db9623...5ef1df3be41d38ddae9b3d22ce51ba486939e9f1)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/bf38adbf16e68196077430da0fa282d6d5fd33de)

* [OCPBUGS-83422](https://issues.redhat.com/browse/OCPBUGS-83422): wait for patch port to apply drop garp flows [#2946](https://github.com/openshift/cluster-network-operator/pull/2946)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/259ea6b026f6663fa720a1e11c913a61122402f9...bf38adbf16e68196077430da0fa282d6d5fd33de)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/03bedb913bce9c7deabf7868e5cbefc57cf3490b)

* [OCPBUGS-80769](https://issues.redhat.com/browse/OCPBUGS-80769): Bump google.golang.org/grpc to v1.79.3 [#197](https://github.com/openshift/cluster-olm-operator/pull/197)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/e8a985a1cd375c1d83e951a1586d11203a1204e2...03bedb913bce9c7deabf7868e5cbefc57cf3490b)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/e403475164a4de23d358a93106a35353ec29f3d7)

* [OCPBUGS-79531](https://issues.redhat.com/browse/OCPBUGS-79531): volume-data-source-validator should run on master nodes [#687](https://github.com/openshift/cluster-storage-operator/pull/687)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/dd362d767167a8ac1889d2ee2a719cf68fac0522...e403475164a4de23d358a93106a35353ec29f3d7)


### [console](https://github.com/openshift/console/tree/7986a98d2e80e84f9e7e5279d272226f445c7a84)

* [OCPBUGS-85040](https://issues.redhat.com/browse/OCPBUGS-85040): Remove PII from events [#16401](https://github.com/openshift/console/pull/16401)
* [OCPBUGS-84967](https://issues.redhat.com/browse/OCPBUGS-84967): Add bottom pagination to ConsoleDataView for mobile responsiveness [#16396](https://github.com/openshift/console/pull/16396)
* [OCPBUGS-84858](https://issues.redhat.com/browse/OCPBUGS-84858): Fix ConsoleDataView filter order: Name and Label shoul… [#16386](https://github.com/openshift/console/pull/16386)
* [OCPBUGS-83494](https://issues.redhat.com/browse/OCPBUGS-83494): remove dev to admin links as dev monitoring views are enabled [#16164](https://github.com/openshift/console/pull/16164)
* [OCPBUGS-83572](https://issues.redhat.com/browse/OCPBUGS-83572): fix Developer Sandbox telemetry [#16286](https://github.com/openshift/console/pull/16286)
* [Full changelog](https://github.com/openshift/console/compare/3c2cad367fb4545d54ff2f5da9175b12d4f269be...7986a98d2e80e84f9e7e5279d272226f445c7a84)


### [console-operator](https://github.com/openshift/console-operator/tree/2b3dcd53e99ef44f442850df9e1543e7be674404)

* [OCPBUGS-82037](https://issues.redhat.com/browse/OCPBUGS-82037): Redeploy console pods upon cert rotation [#1139](https://github.com/openshift/console-operator/pull/1139)
* [Full changelog](https://github.com/openshift/console-operator/compare/c3ac99413caaa8fb892b597bab18239697476ce5...2b3dcd53e99ef44f442850df9e1543e7be674404)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/a123414456212431a2843d4e3a4f7250182402e4)

* UPSTREAM-SYNC: Sync release-4.21 with upstream release-1.34 [#371](https://github.com/openshift/cloud-provider-openstack/pull/371)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/bf508c062084dc6dec20480f7d173f047ad4f2d6...a123414456212431a2843d4e3a4f7250182402e4)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/ebfd16d227b3af490f4327a8a040f6c9657a3b01)

* [OCPBUGS-80783](https://issues.redhat.com/browse/OCPBUGS-80783): CVE-2026-33186: bump google.golang.org/grpc v1.79.3 [#176](https://github.com/openshift/csi-driver-nfs/pull/176)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/49f2d86fb6172d9d8909ed0f70cb3bc71a4f7c01...ebfd16d227b3af490f4327a8a040f6c9657a3b01)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/e27accef1fa99089410e4b0894db21a392d9bf99)

* [OCPBUGS-83615](https://issues.redhat.com/browse/OCPBUGS-83615): Fix OSD ILB bug [#108](https://github.com/openshift/cloud-provider-gcp/pull/108)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/8732386c3ddcb98dae624f7bb925ed0ef8d077d5...e27accef1fa99089410e4b0894db21a392d9bf99)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/ae1604b0cb7cc72e353d0b8311c6d62c34143661)

* "OCPBUGS-83608: Bump to k8s v1.34.7" [#2647](https://github.com/openshift/kubernetes/pull/2647)
* [Full changelog](https://github.com/openshift/kubernetes/compare/dfffacdf0ad6e9aa75664c7b3167dd2ddbfc17ba...ae1604b0cb7cc72e353d0b8311c6d62c34143661)


### [hypershift](https://github.com/openshift/hypershift/tree/6202ab927f91ca188e621b62c802d8f3e5de1c48)

* [OCPBUGS-76447](https://issues.redhat.com/browse/OCPBUGS-76447): Add UserAgent telemetry to CPO Azure SDK clients [#7685](https://github.com/openshift/hypershift/pull/7685)
* [Full changelog](https://github.com/openshift/hypershift/compare/b722bf60dae6e8de25039ec555a702bd815485f1...6202ab927f91ca188e621b62c802d8f3e5de1c48)


### [ironic](https://github.com/openshift/ironic-image/tree/6e93d7a042c96f1db6307549d348da8f6f89b06a)

* [OCPBUGS-84853](https://issues.redhat.com/browse/OCPBUGS-84853): Bump pyasn to 0.5.1-5 [#823](https://github.com/openshift/ironic-image/pull/823)
* [OCPBUGS-82298](https://issues.redhat.com/browse/OCPBUGS-82298): Bump sushy hash to include Supermicro ARS-111GL-NHR fix [#840](https://github.com/openshift/ironic-image/pull/840)
* [Full changelog](https://github.com/openshift/ironic-image/compare/d23a6091f362d46421276749a5faa9871dbc20e7...6e93d7a042c96f1db6307549d348da8f6f89b06a)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/ff4f3e2a6d2b0e8a860831b98733cff152cfddd3)

* [OCPBUGS-80716](https://issues.redhat.com/browse/OCPBUGS-80716): Bump google.golang.org/grpc to v1.79.3 [#61](https://github.com/openshift/kubernetes-metrics-server/pull/61)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/ed76a5e8051caae6519342ae189088b8ddd09979...ff4f3e2a6d2b0e8a860831b98733cff152cfddd3)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/1a0b9eee54cc8b45c91c5780bac2dbc32a6585ee)

* [OCPBUGS-84941](https://issues.redhat.com/browse/OCPBUGS-84941): Fix ssh and password rollbacks [#5987](https://github.com/openshift/machine-config-operator/pull/5987)
* [OCPBUGS-84970](https://issues.redhat.com/browse/OCPBUGS-84970): Fix encapsulated IGN version [#5996](https://github.com/openshift/machine-config-operator/pull/5996)
* [OCPBUGS-84878](https://issues.redhat.com/browse/OCPBUGS-84878): Update AMI Whitelist [#5915](https://github.com/openshift/machine-config-operator/pull/5915)
* [OCPBUGS-84253](https://issues.redhat.com/browse/OCPBUGS-84253): improve JSON unmarshalling for secret decoding [#5877](https://github.com/openshift/machine-config-operator/pull/5877)
* [OCPBUGS-83874](https://issues.redhat.com/browse/OCPBUGS-83874): Allow enablement of systemd units with existing files [#5869](https://github.com/openshift/machine-config-operator/pull/5869)
* [OCPBUGS-83708](https://issues.redhat.com/browse/OCPBUGS-83708): Update AMI Whitelist [#5857](https://github.com/openshift/machine-config-operator/pull/5857)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/042006de3967c7b187614eaaf88d197be4d4052f...1a0b9eee54cc8b45c91c5780bac2dbc32a6585ee)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/908df0253d40b38864d24fc24de17f4598db24ba)

* NO-JIRA: release-4.21 e2e-monitoring and e2e-coo working [#904](https://github.com/openshift/monitoring-plugin/pull/904)
* [OCPBUGS-83494](https://issues.redhat.com/browse/OCPBUGS-83494): [release-4.21] feat: re enable dev console views [#856](https://github.com/openshift/monitoring-plugin/pull/856)
* [OCPBUGS-83304](https://issues.redhat.com/browse/OCPBUGS-83304): [release-4.21] openshift4/ose-monitoring-plugin-rhel9: Axios: Remote Code Execution via Prototype Pollution escalation [#890](https://github.com/openshift/monitoring-plugin/pull/890)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/2a248a094ad4986a83c4004198cf9b04e703625f...908df0253d40b38864d24fc24de17f4598db24ba)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/268037d76fd97d29f39eae2f25f0a2b2910cb30e)

* [OCPBUGS-81620](https://issues.redhat.com/browse/OCPBUGS-81620): Update lodash to 4.18.1 for CVE-2026-4800 [#372](https://github.com/openshift/networking-console-plugin/pull/372)
* [OCPBUGS-83388](https://issues.redhat.com/browse/OCPBUGS-83388): Fix CVE-2026-34043 in serialize-javascript [#369](https://github.com/openshift/networking-console-plugin/pull/369)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/953140486451e0beb91d403042d612c6b4ea9a08...268037d76fd97d29f39eae2f25f0a2b2910cb30e)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/994deebef2836ca75003dd15372f7110d2448fa6)

* [OCPBUGS-82546](https://issues.redhat.com/browse/OCPBUGS-82546): Only print catalog rebuild message if there are catalogs to rebuild [#1388](https://github.com/openshift/oc-mirror/pull/1388)
* [OCPBUGS-82543](https://issues.redhat.com/browse/OCPBUGS-82543): Fix printing collection messages with 0 collection items [#1387](https://github.com/openshift/oc-mirror/pull/1387)
* [OCPBUGS-81743](https://issues.redhat.com/browse/OCPBUGS-81743): Remove status field from CatalogSource, ClusterCatalog... [#1383](https://github.com/openshift/oc-mirror/pull/1383)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/12f1b068e9928aa68e5505fc16fcaaac3dfd27d3...994deebef2836ca75003dd15372f7110d2448fa6)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/f4f439d4ce40c1175188c81591284dcc9fe6facf)

* UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.13 into release-4.21 [#394](https://github.com/openshift/cluster-api-provider-openstack/pull/394)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/e1c0f2f9e2e70843d5c42dfe3bddf70530a97b0f...f4f439d4ce40c1175188c81591284dcc9fe6facf)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/bed9d823d441b1722e023f9f7f9b2cd56f79e2b2)

* [OCPBUGS-80847](https://issues.redhat.com/browse/OCPBUGS-80847), [OCPBUGS-80848](https://issues.redhat.com/browse/OCPBUGS-80848), [OCPBUGS-80849](https://issues.redhat.com/browse/OCPBUGS-80849): Bump google.golang.org/grpc to v1.79.3 for CVE-2026-33186[Release-4.21] [#1289](https://github.com/openshift/operator-framework-olm/pull/1289)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/d7462e05f60c0ad13a2dce6ea516cbc624cae203...bed9d823d441b1722e023f9f7f9b2cd56f79e2b2)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/9c42aa99b17d87875bdfd152976f96c2e589a4d8)

* [OCPBUGS-81634](https://issues.redhat.com/browse/OCPBUGS-81634), [OCPBUGS-83814](https://issues.redhat.com/browse/OCPBUGS-83814): Branch Sync release-4.22 to release-4.21 [04-16-2026] [#3145](https://github.com/openshift/ovn-kubernetes/pull/3145)
* [OCPBUGS-83566](https://issues.redhat.com/browse/OCPBUGS-83566): Branch Sync release-4.22 to release-4.21 [03-25-2026] [#3087](https://github.com/openshift/ovn-kubernetes/pull/3087)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/020d072048b272c3ac77470b9a302cfd8ca0559e...9c42aa99b17d87875bdfd152976f96c2e589a4d8)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/114fe69249450f3bec773cba2956a8c06e7b0da9)

* [OCPBUGS-80852](https://issues.redhat.com/browse/OCPBUGS-80852): Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 [#127](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/127)
* [OCPBUGS-82924](https://issues.redhat.com/browse/OCPBUGS-82924): Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 [#121](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/121)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/791e12aba9ab7c4fed1e5f9554e5b9ec86342e1a...114fe69249450f3bec773cba2956a8c06e7b0da9)


### [telemeter](https://github.com/openshift/telemeter/tree/b79b872a65edd845891db70f6c9a184458a178da)

* [OCPBUGS-80868](https://issues.redhat.com/browse/OCPBUGS-80868): Bump google.golang.org/grpc to v1.79.3 [#589](https://github.com/openshift/telemeter/pull/589)
* [OCPBUGS-81817](https://issues.redhat.com/browse/OCPBUGS-81817): [release-1.21] Fix CVE-2026-34986 [#593](https://github.com/openshift/telemeter/pull/593)
* [Full changelog](https://github.com/openshift/telemeter/compare/a54acdfeb2d62c79516d099e37f3319205c903a7...b79b872a65edd845891db70f6c9a184458a178da)


### [tests](https://github.com/openshift/origin/tree/dd70a7b5215dbb87e7dccb7e752b49b2e375a9bd)

* [OCPBUGS-84978](https://issues.redhat.com/browse/OCPBUGS-84978): Skip image-registry operator tests for Libvirt platform in upgrade jobs. [#31123](https://github.com/openshift/origin/pull/31123)
* [OCPBUGS-84947](https://issues.redhat.com/browse/OCPBUGS-84947): test: add monitortest to detect pods stuck in Pending state [#31117](https://github.com/openshift/origin/pull/31117)
* [OCPBUGS-84947](https://issues.redhat.com/browse/OCPBUGS-84947): Add [Late] test to collect CRI-O goroutine dumps via SIGUSR1 [#31118](https://github.com/openshift/origin/pull/31118)
* [Full changelog](https://github.com/openshift/origin/compare/34379498817f3123c8e43433e7f1b2b7da6be429...dd70a7b5215dbb87e7dccb7e752b49b2e375a9bd)


### [thanos](https://github.com/openshift/thanos/tree/afeb1c85ba9ee06676a0e657bfa4f4139ccc47b3)

* [OCPBUGS-84492](https://issues.redhat.com/browse/OCPBUGS-84492): Revert "OCPBUGS-80870: CVE-2026-33186 openshift4/ose-thanos-rhel9: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation [openshift-4.21]" [#180](https://github.com/openshift/thanos/pull/180)
* [OCPBUGS-80870](https://issues.redhat.com/browse/OCPBUGS-80870): CVE-2026-33186 openshift4/ose-thanos-rhel9: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation [openshift-4.21] [#174](https://github.com/openshift/thanos/pull/174)
* [Full changelog](https://github.com/openshift/thanos/compare/6ea20ffaa35b7b31fe7ef9a99287bdd4a1c1e4e8...afeb1c85ba9ee06676a0e657bfa4f4139ccc47b3)