# 4.21.0-okd-scos.4

Created: 2026-02-09 05:30:37 +0000 UTC

Image Digest: `sha256:9733b23a5e176d5bc7fabe01853e6c3eb5717a305eeac818d723b75721e60042`

Promoted from registry.ci.openshift.org/origin/release-scos:4.21.0-0.okd-scos-2026-02-08-205057


## Changes from 4.21.0-okd-scos.ec.19

### Components

* Kubectl 1.34.1
* Kubernetes 1.34.2
* Kubernetes Tests 1.34.1
* CentOS Stream CoreOS upgraded from 10.0.20260109-0 to 10.0.20260203-0


### Rebuilt images without code change

* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [35ba137a](https://github.com/openshift/apiserver-network-proxy/commit/35ba137ab96d01f0b8df729ff5ad93ac2fdad800) `sha256:9feb6c778e0a3aa19f1b2b5e2d8785465d7e1f616d133cbc36678e673a11306e`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/1574e1fa7ee0118e3c2a6ca9653f4c38e6c888ac)

* [AGENT-1431](https://issues.redhat.com/browse/AGENT-1431): Backport feature NoRegistryClusterInstall to 4.21 [#8806](https://github.com/openshift/assisted-service/pull/8806)
* [OCPBUGS-72519](https://issues.redhat.com/browse/OCPBUGS-72519): Fix YAML marshaling for Kubernetes types in disconnected ignition [#8736](https://github.com/openshift/assisted-service/pull/8736)
* [Full changelog](https://github.com/openshift/assisted-service/compare/184287279c2ecbe5df4e83862cb7a3a33977ffc7...1574e1fa7ee0118e3c2a6ca9653f4c38e6c888ac)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/f44c7af8595bb4f0343cb3282b98204f43438234)

* [AGENT-1431](https://issues.redhat.com/browse/AGENT-1431): Backport feature NoRegistryClusterInstall to 4.21 [#248](https://github.com/openshift/agent-installer-utils/pull/248)
* [OCPBUGS-74935](https://issues.redhat.com/browse/OCPBUGS-74935): Update Konflux references [#220](https://github.com/openshift/agent-installer-utils/pull/220)
* [OCPBUGS-74304](https://issues.redhat.com/browse/OCPBUGS-74304): Increase Konflux build pipeline memory [#243](https://github.com/openshift/agent-installer-utils/pull/243)
* [OCPBUGS-71230](https://issues.redhat.com/browse/OCPBUGS-71230): bump github.com/sirupsen/logrus to v1.9.3 [#234](https://github.com/openshift/agent-installer-utils/pull/234)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/1c822ebc321e039b89d6952e3e781af9fa43c6f1...f44c7af8595bb4f0343cb3282b98204f43438234)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/d3789c528621d54b0d46b40795acd9c635b2982d)

* [OCPBUGS-74215](https://issues.redhat.com/browse/OCPBUGS-74215): [release-4.21] Add VAC manifest for tests in AWS EBS [#485](https://github.com/openshift/csi-operator/pull/485)
* [Full changelog](https://github.com/openshift/csi-operator/compare/d739d8cacd23ca3545de402da9e5f49e547d1456...d3789c528621d54b0d46b40795acd9c635b2982d)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/5cd42ed1e5151f45f0134593e9cfebdb6517b385)

* [OCPBUGS-74170](https://issues.redhat.com/browse/OCPBUGS-74170): Fix GOTOOLCHAIN env var [#213](https://github.com/openshift/aws-pod-identity-webhook/pull/213)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/0da6737b69c6676d9f9bc8b3fcc7f46fbe521096...5cd42ed1e5151f45f0134593e9cfebdb6517b385)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/5d6af81d7ab9b289c3def6c0350313118d63923a)

* [OCPBUGS-74398](https://issues.redhat.com/browse/OCPBUGS-74398), [OCPCLOUD-3101](https://issues.redhat.com/browse/OCPCLOUD-3101): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.22.0 (4523016) into release-4.21 [#361](https://github.com/openshift/cluster-api-provider-azure/pull/361)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/b80578abd9d7e6b0d0e9fa070f7ee88adc3bbb85...5d6af81d7ab9b289c3def6c0350313118d63923a)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/acb34201ac99cb59d386efe851b6ce9f890cf1ea)

* [AGENT-1431](https://issues.redhat.com/browse/AGENT-1431): Backport feature NoRegistryClusterInstall to 4.21 [#10250](https://github.com/openshift/installer/pull/10250)
* [OCPBUGS-74672](https://issues.redhat.com/browse/OCPBUGS-74672): [release-4.21] GCP: skip AI zones [#10272](https://github.com/openshift/installer/pull/10272)
* [OSDOCS-17769](https://issues.redhat.com/browse/OSDOCS-17769): [release-4.21] Add AWS m7 instance types [#10266](https://github.com/openshift/installer/pull/10266)
* [OCPBUGS-74493](https://issues.redhat.com/browse/OCPBUGS-74493): add support for NVIDIA H100 and H200 enabled machine series [#10259](https://github.com/openshift/installer/pull/10259)
* [OCPBUGS-74414](https://issues.redhat.com/browse/OCPBUGS-74414): Remove region option for the GCP Private Service Connect Endpoint [#10253](https://github.com/openshift/installer/pull/10253)
* [OCPBUGS-73891](https://issues.redhat.com/browse/OCPBUGS-73891): add newly detected instance types for Azure during 4.21 regression test [#10227](https://github.com/openshift/installer/pull/10227)
* [Full changelog](https://github.com/openshift/installer/compare/a6c94ff2839258d0653650c82e93b593bac6988f...acb34201ac99cb59d386efe851b6ce9f890cf1ea)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/a5a9a72ad5738bfd44d639454c92b5e3b9200fb4)

* [OCPBUGS-68369](https://issues.redhat.com/browse/OCPBUGS-68369): Abort inspection/cleaning before powering off during deletion [#449](https://github.com/openshift/baremetal-operator/pull/449)
* [OCPBUGS-74365](https://issues.redhat.com/browse/OCPBUGS-74365): Fix invalidDNSNameinvalidipv6 test for Go 1.24+ [#450](https://github.com/openshift/baremetal-operator/pull/450)
* [OCPBUGS-67294](https://issues.redhat.com/browse/OCPBUGS-67294): Require PreprovisioningImage for deprovisioning when cleaning is enabled [#443](https://github.com/openshift/baremetal-operator/pull/443)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/eb6f984eeedf6918f531aa3c461f01d59dae9426...a5a9a72ad5738bfd44d639454c92b5e3b9200fb4)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/19a2243fe780f1aa9b5c8d80bd413a8721cc2e8c)

* [OCPBUGS-73911](https://issues.redhat.com/browse/OCPBUGS-73911): Fix unit test failure by updating ruby version to 3.3 [#2186](https://github.com/openshift/oc/pull/2186)
* [Full changelog](https://github.com/openshift/oc/compare/f192695743103be9ceb109526a89f4fd468e9be2...19a2243fe780f1aa9b5c8d80bd413a8721cc2e8c)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/958e8af67fa66358635cada2a78ea3dc91a432c2)

* [OCPBUGS-74204](https://issues.redhat.com/browse/OCPBUGS-74204): Fix libguestfs /tmp access in machine-os-downloader init container [#551](https://github.com/openshift/cluster-baremetal-operator/pull/551)
* [OCPBUGS-70163](https://issues.redhat.com/browse/OCPBUGS-70163): Remove the writable ironic CA cert volume mount at /certs/ca/ironic path, ironic will use the writable /conf mount if needed [#541](https://github.com/openshift/cluster-baremetal-operator/pull/541)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/46c1f95085beb893d3fd164e7c4d7a6730820520...958e8af67fa66358635cada2a78ea3dc91a432c2)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/80728a61725bb6ec7f4515c2ac2b3a249f3c5742)

* [OCPBUGS-74650](https://issues.redhat.com/browse/OCPBUGS-74650): fix: e2e: workaround for flakes caused by OCPBUGS-74571, until it is fixed [#450](https://github.com/openshift/cluster-capi-operator/pull/450)
* [OCPBUGS-73908](https://issues.redhat.com/browse/OCPBUGS-73908): Remove references to cluster-api-operator image [#445](https://github.com/openshift/cluster-capi-operator/pull/445)
* [OCPBUGS-69772](https://issues.redhat.com/browse/OCPBUGS-69772), [OCPCLOUD-3105](https://issues.redhat.com/browse/OCPCLOUD-3105): make use of sigs.k8s.io/cluster-api's v1beta2 [#435](https://github.com/openshift/cluster-capi-operator/pull/435)
* [OCPBUGS-69417](https://issues.redhat.com/browse/OCPBUGS-69417): fix: e2e: CAPI creation issue/scale-down wait issue/machine nodeRef comparison issue [#433](https://github.com/openshift/cluster-capi-operator/pull/433)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/c68e5901d0d29ae5dc7b648fc3d4afdcb94ab135...80728a61725bb6ec7f4515c2ac2b3a249f3c5742)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/2dde33fb94aae47b460a5f6a672d06c9ee4225d8)

* [OCPBUGS-74588](https://issues.redhat.com/browse/OCPBUGS-74588): Bump openshift/api to get latest AWSMachineProviderConfig type [#386](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/386)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/737457067d0b1a85cd2d9a9eba930fd7d7bd4e40...2dde33fb94aae47b460a5f6a672d06c9ee4225d8)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/43ad01e88038be54792f16f0d692b96da1244404)

* [OCPBUGS-74301](https://issues.redhat.com/browse/OCPBUGS-74301): Re-add serving cert volume mount to hypershift guest cluster manifest [#267](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/267)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/186ad6f430ae3f8f8e777e912efa6670033857e5...43ad01e88038be54792f16f0d692b96da1244404)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/d584457479db6980f9b4bdfac86b42531651015f)

* [OCPBUGS-74489](https://issues.redhat.com/browse/OCPBUGS-74489): configure inertia for all controllers, bump to 10m [#1535](https://github.com/openshift/cluster-etcd-operator/pull/1535)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/2e46bfdf639578074b824bd63eaf3ab8b1cc14ea...d584457479db6980f9b4bdfac86b42531651015f)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/1d68351b053987df54b4e6fef60b480b72cfd714)

* [OCPBUGS-74181](https://issues.redhat.com/browse/OCPBUGS-74181): SCC: allow image volume type for all SCCs [#2007](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2007)
* [OCPBUGS-73561](https://issues.redhat.com/browse/OCPBUGS-73561): Update openshift/library-go to get new default TLS configuration [#1999](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1999)
* [OCPBUGS-61297](https://issues.redhat.com/browse/OCPBUGS-61297): revert dev cert rotation [#1984](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1984)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/33061a03e93d8000e7514fccabadf8cfb9d185c6...1d68351b053987df54b4e6fef60b480b72cfd714)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/7809937c07c5dbfa272bfbe87d99e09104bf3fc9)

* [OCPBUGS-74592](https://issues.redhat.com/browse/OCPBUGS-74592): [release-4.21] NO-JIRA: pkg/operator: Fix wrong ClusterOperator name [#605](https://github.com/openshift/cluster-kube-scheduler-operator/pull/605)
* [release 4.21] OCPBUGS-74265: Add OPERATOR_IMAGE_VERSION to recovery container [#603](https://github.com/openshift/cluster-kube-scheduler-operator/pull/603)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/4f59ea50a588e9afa714e30e7502eca8b570751b...7809937c07c5dbfa272bfbe87d99e09104bf3fc9)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/edfb52319f871c7009db54f68e90da0e12021e73)

* [OCPBUGS-74622](https://issues.redhat.com/browse/OCPBUGS-74622): update expr for AlertmanagerClusterFailedToSendAlerts to exclude value 0 [#2804](https://github.com/openshift/cluster-monitoring-operator/pull/2804)
* [OCPBUGS-74202](https://issues.redhat.com/browse/OCPBUGS-74202): move endpointslice RBAC to Role [#2795](https://github.com/openshift/cluster-monitoring-operator/pull/2795)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/fa0bed2be659cad3dd792ef310375773afeb72cd...edfb52319f871c7009db54f68e90da0e12021e73)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/0b156e3a60bcf64068c8ddb4f5204f2ca4d9758c)

* [OCPBUGS-76285](https://issues.redhat.com/browse/OCPBUGS-76285): Remove duplicated openssl parameter [#2899](https://github.com/openshift/cluster-network-operator/pull/2899)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/05d65e63fd668e97c1b7f45837ba66075f478d6d...0b156e3a60bcf64068c8ddb4f5204f2ca4d9758c)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/dd362d767167a8ac1889d2ee2a719cf68fac0522)

* [OCPBUGS-74569](https://issues.redhat.com/browse/OCPBUGS-74569): add vsphere permissions for checking if users is authorized to see metrics [#660](https://github.com/openshift/cluster-storage-operator/pull/660)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/dc5d5f1f47ce949339f3bced4021f3768ed1c57c...dd362d767167a8ac1889d2ee2a719cf68fac0522)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/6fb3e84b9738a7a57a00d72cd6bc6f84d6c8e16e)

* [OCPBUGS-74009](https://issues.redhat.com/browse/OCPBUGS-74009): lib/resourcemerge/core: Reconcile ConfigMap binaryData too [#1295](https://github.com/openshift/cluster-version-operator/pull/1295)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/2e80794d2ab57eff6420e8bb5e882e12f4b6600d...6fb3e84b9738a7a57a00d72cd6bc6f84d6c8e16e)


### [console](https://github.com/openshift/console/tree/984efb6ad2c5c64edf839f2ec27dd610ca85bd8d)

* [OCPBUGS-74998](https://issues.redhat.com/browse/OCPBUGS-74998): Fix referenceFor parameter in SubscriptionDetailsPage [#15984](https://github.com/openshift/console/pull/15984)
* [OCPBUGS-74887](https://issues.redhat.com/browse/OCPBUGS-74887): Add null checks to CRB subject [#15974](https://github.com/openshift/console/pull/15974)
* [OCPBUGS-74587](https://issues.redhat.com/browse/OCPBUGS-74587): '0 of pods' are shown in Status column on DaemonSets list page. [#15953](https://github.com/openshift/console/pull/15953)
* [OCPBUGS-74695](https://issues.redhat.com/browse/OCPBUGS-74695): Bump lodash to latest [#15962](https://github.com/openshift/console/pull/15962)
* [OCPBUGS-74157](https://issues.redhat.com/browse/OCPBUGS-74157): Do not resolve disabled catalog type extensions [#15930](https://github.com/openshift/console/pull/15930)
* [OCPBUGS-73870](https://issues.redhat.com/browse/OCPBUGS-73870): Update the perspective name in dev-console guided tour [#15922](https://github.com/openshift/console/pull/15922)
* [OCPBUGS-73770](https://issues.redhat.com/browse/OCPBUGS-73770): update operator details when changing channels [#15917](https://github.com/openshift/console/pull/15917)
* [OCPBUGS-73871](https://issues.redhat.com/browse/OCPBUGS-73871): i18n upload/download routine task - 4.21 / 281 [#15923](https://github.com/openshift/console/pull/15923)
* [OCPBUGS-69931](https://issues.redhat.com/browse/OCPBUGS-69931), [OCPBUGS-69932](https://issues.redhat.com/browse/OCPBUGS-69932): apiVersion is empty on YAML creation page - Runtime error occurs when create MachineConfig with default yaml from… [#15871](https://github.com/openshift/console/pull/15871)
* [Full changelog](https://github.com/openshift/console/compare/4a47100d3f4ef855a9a98278631f148cda31dbe4...984efb6ad2c5c64edf839f2ec27dd610ca85bd8d)


### [console-operator](https://github.com/openshift/console-operator/tree/bdf006d0b1f6653b36f2b44a4d3bb16d1a5cb0b5)

* [OCPBUGS-74152](https://issues.redhat.com/browse/OCPBUGS-74152): Fix PDB blocking node drains during cluster upgrades + update donwloads deployment [#1103](https://github.com/openshift/console-operator/pull/1103)
* [OCPBUGS-72550](https://issues.redhat.com/browse/OCPBUGS-72550): Add missing console annotation to the quickstart [#1089](https://github.com/openshift/console-operator/pull/1089)
* [CM-821](https://issues.redhat.com/browse/CM-821), [ESO-277](https://issues.redhat.com/browse/ESO-277), [OCPBUGS-69766](https://issues.redhat.com/browse/OCPBUGS-69766), [SSCSI-235](https://issues.redhat.com/browse/SSCSI-235): Add quickstart guides for secrets management operators [#1084](https://github.com/openshift/console-operator/pull/1084)
* [Full changelog](https://github.com/openshift/console-operator/compare/e056fd6e1cd0935df6ae7b57957f1b1ab2dc78df...bdf006d0b1f6653b36f2b44a4d3bb16d1a5cb0b5)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/e2d0c20eab31c513764507a6d8774de2aef3db2c)

* [OCPBUGS-74915](https://issues.redhat.com/browse/OCPBUGS-74915): Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.11.0 (1cb204d) into release-4.21 [#262](https://github.com/openshift/cluster-api-provider-gcp/pull/262)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/085f35d033a51fbb4784f6553ff9176960b0da97...e2d0c20eab31c513764507a6d8774de2aef3db2c)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/73b5939d71b7e3ded7ce418049dc28a5c3a2bb09)

* [OCPBUGS-74222](https://issues.redhat.com/browse/OCPBUGS-74222): [release-4.21] Add VAC manifest to support tests on GCP PD [#167](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/167)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/f8782653af61f43542e3403f35d682649973b769...73b5939d71b7e3ded7ce418049dc28a5c3a2bb09)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/0df353502309af2497270ddf993bb866e2f2b5a9)

* [OCPBUGS-74975](https://issues.redhat.com/browse/OCPBUGS-74975): UPSTREAM: 136594: raise kubelet CSI init backoff to cover ~140s DNS delays [#2580](https://github.com/openshift/kubernetes/pull/2580)
* [OCPBUGS-73910](https://issues.redhat.com/browse/OCPBUGS-73910): UPSTREAM: 135340: cbor: bump limits [#2565](https://github.com/openshift/kubernetes/pull/2565)
* [Full changelog](https://github.com/openshift/kubernetes/compare/f80fdf620b057bc3c66a6feb8b6cdc9f33f2c5c9...0df353502309af2497270ddf993bb866e2f2b5a9)


### [hypershift](https://github.com/openshift/hypershift/tree/c20bbad4d528bfb51687f02684ef5eb79669b850)

* [OCPBUGS-74893](https://issues.redhat.com/browse/OCPBUGS-74893): fix: add hypershift.openshift.io/nodepool-globalps-enabled label to be ignored in cluster-autoscaler deployment [#7618](https://github.com/openshift/hypershift/pull/7618)
* [OCPBUGS-74648](https://issues.redhat.com/browse/OCPBUGS-74648): feat(cpo): check components have rolled out before setting available [#7604](https://github.com/openshift/hypershift/pull/7604)
* [Full changelog](https://github.com/openshift/hypershift/compare/6fb603c54baa899b853e5761ecad55b5579a7c92...c20bbad4d528bfb51687f02684ef5eb79669b850)


### [insights-operator](https://github.com/openshift/insights-operator/tree/599209e2705e68bedfc21f842f5c3f379b8f27c3)

* [OCPBUGS-74479](https://issues.redhat.com/browse/OCPBUGS-74479): set Progressing condition on cluster update [#1217](https://github.com/openshift/insights-operator/pull/1217)
* [OCPBUGS-74233](https://issues.redhat.com/browse/OCPBUGS-74233): [bugfix] The ConfigMap value for StoragePath is ignored on basic routine [#1214](https://github.com/openshift/insights-operator/pull/1214)
* [Full changelog](https://github.com/openshift/insights-operator/compare/489fae2342784478008f86f2159cbc9d38d119db...599209e2705e68bedfc21f842f5c3f379b8f27c3)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/75c9f480e468209972b16fd562dc1baf3b3ace17)

* [OCPBUGS-76359](https://issues.redhat.com/browse/OCPBUGS-76359): Update AMI script and list [#5639](https://github.com/openshift/machine-config-operator/pull/5639)
* [OCPBUGS-76271](https://issues.redhat.com/browse/OCPBUGS-76271): machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] [#5624](https://github.com/openshift/machine-config-operator/pull/5624)
* [AGENT-1431](https://issues.redhat.com/browse/AGENT-1431): Backport InternalReleaseImage support [#5610](https://github.com/openshift/machine-config-operator/pull/5610)
* [OCPBUGS-74145](https://issues.redhat.com/browse/OCPBUGS-74145): enable nodeip-configuration for platform external [#5581](https://github.com/openshift/machine-config-operator/pull/5581)
* [OCPBUGS-74542](https://issues.redhat.com/browse/OCPBUGS-74542): Stale operator metrics Service and ServiceMonitor resources need to be deleted [#5600](https://github.com/openshift/machine-config-operator/pull/5600)
* [OCPBUGS-74431](https://issues.redhat.com/browse/OCPBUGS-74431): CVE-2025-58183 ose-machine-config-operator-container: Unbounded allocation when parsing GNU sparse map [openshift-4.21] [#5596](https://github.com/openshift/machine-config-operator/pull/5596)
* [OCPBUGS-73819](https://issues.redhat.com/browse/OCPBUGS-73819): Set `NodeDegraded` MCN condition when node state annotation is set to `Degraded` [#5554](https://github.com/openshift/machine-config-operator/pull/5554)
* [OCPBUGS-74103](https://issues.redhat.com/browse/OCPBUGS-74103): Fix up bootstrap-e2e [#5568](https://github.com/openshift/machine-config-operator/pull/5568)
* [OCPBUGS-73872](https://issues.redhat.com/browse/OCPBUGS-73872): CPMS boot image config should not override standard MachineSet configuration [#5559](https://github.com/openshift/machine-config-operator/pull/5559)
* [OCPBUGS-74102](https://issues.redhat.com/browse/OCPBUGS-74102): Fixes the issue in the test TestKubeletConfigMaxPods when AutoNodeSizing is enabled by default [#5567](https://github.com/openshift/machine-config-operator/pull/5567)
* [OCPBUGS-71196](https://issues.redhat.com/browse/OCPBUGS-71196): Enable existing units without content [#5561](https://github.com/openshift/machine-config-operator/pull/5561)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/f20ca236ffead6b7603c4f42a35c49fbed328bc3...75c9f480e468209972b16fd562dc1baf3b3ace17)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/4b2b90bb04e9c73a1c4fa1c62124d07abf455bea)

* NO-JIRA: [release-4.21] fix: remove unnecessary package.lock [#729](https://github.com/openshift/monitoring-plugin/pull/729)
* [OCPBUGS-71223](https://issues.redhat.com/browse/OCPBUGS-71223): fix: update qs vulnerable dependency [#718](https://github.com/openshift/monitoring-plugin/pull/718)
* [OU-1145](https://issues.redhat.com/browse/OU-1145): remove random multiplication [#703](https://github.com/openshift/monitoring-plugin/pull/703)
* NO-JIRA: [release-4.21] automation - dev user scenarios fixes with namespace level changes [#698](https://github.com/openshift/monitoring-plugin/pull/698)
* [OCPBUGS-67297](https://issues.redhat.com/browse/OCPBUGS-67297): [release-4.21] fix: upgrade node-forge vulnerable dependency [#685](https://github.com/openshift/monitoring-plugin/pull/685)
* NO-JIRA: [release-4.21] - automation - monitoring stabilization presubmit [#687](https://github.com/openshift/monitoring-plugin/pull/687)
* [OU-1130](https://issues.redhat.com/browse/OU-1130): Add missing commits to 4.21 [#682](https://github.com/openshift/monitoring-plugin/pull/682)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/a243f0667e8d8ec61078d2417d9fff46ec752634...4b2b90bb04e9c73a1c4fa1c62124d07abf455bea)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/11492b3193c4ab3ba6494e7fc79a6eb4551616b1)

* [CNV-77540](https://issues.redhat.com/browse/CNV-77540): fix Enable MultiNetworkPolicies lead to invalid URL [#341](https://github.com/openshift/networking-console-plugin/pull/341)
* [CNV-74687](https://issues.redhat.com/browse/CNV-74687): Fixing the title and redirect when deleting a vm network [#340](https://github.com/openshift/networking-console-plugin/pull/340)
* [CNV-76879](https://issues.redhat.com/browse/CNV-76879): Allow passing the physical network name via URL parameter in the VM network wizard [#332](https://github.com/openshift/networking-console-plugin/pull/332)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/482f1e7dbf737c7864e6d2a1bd9e9e3066d6c048...11492b3193c4ab3ba6494e7fc79a6eb4551616b1)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/71c41b2d8abb0c6ad90dca286baf5d03c1340646)

* NO-JIRA: (chore): update OWNERS file [#167](https://github.com/openshift/oauth-apiserver/pull/167)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/cd7a88e42d42751ebf2e00618d7ca201c61978fc...71c41b2d8abb0c6ad90dca286baf5d03c1340646)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/7f518c02931f8c5c1c3aa5d2192a905f973b2b34)

* [OCPBUGS-74131](https://issues.redhat.com/browse/OCPBUGS-74131): test/e2e - do not use ambiguous container image short names [#344](https://github.com/openshift/oauth-proxy/pull/344)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/39f8426add0e2b669cae3232c3fb793ad1b6bb07...7f518c02931f8c5c1c3aa5d2192a905f973b2b34)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/520cd16bfe17c495b197dbb0c09afdaf6700a8c7)

* [OCPBUGS-74577](https://issues.redhat.com/browse/OCPBUGS-74577): fix duplicated channel bug in filtered catalogs [#1345](https://github.com/openshift/oc-mirror/pull/1345)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/38b29a1d4a2e825ee10bed72ad2d92056b3d36f2...520cd16bfe17c495b197dbb0c09afdaf6700a8c7)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/dfc0e537df7af5f9785b90da40e77a268d345c6a)

* [OCPBUGS-74967](https://issues.redhat.com/browse/OCPBUGS-74967): [release-4.21] enhance qe cases to make it more stable [#626](https://github.com/openshift/operator-framework-operator-controller/pull/626)
* [OCPBUGS-74633](https://issues.redhat.com/browse/OCPBUGS-74633): config watchnamespace api cases [#620](https://github.com/openshift/operator-framework-operator-controller/pull/620)
* [OCPBUGS-74562](https://issues.redhat.com/browse/OCPBUGS-74562): enhance ocp-79770 [#617](https://github.com/openshift/operator-framework-operator-controller/pull/617)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/bc5f350745f86a8fa60caccff6c3ea1ecf2ac977...dfc0e537df7af5f9785b90da40e77a268d345c6a)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/54812afb9bf190563aa1815b5c16d4ccacecb67e)

* [OCPBUGS-76266](https://issues.redhat.com/browse/OCPBUGS-76266): Remove the collect-profiles job [#1220](https://github.com/openshift/operator-framework-olm/pull/1220)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/67b24a854479ff5e92f98a928b07683bddfc91b6...54812afb9bf190563aa1815b5c16d4ccacecb67e)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/7c1eba6b75e8e458ef5d676c8fee086489824f9b)

* [OCPBUGS-73881](https://issues.redhat.com/browse/OCPBUGS-73881): Increase default catalog polling interval to 4h (240m) [#705](https://github.com/operator-framework/operator-marketplace/pull/705)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/6792bede6c2ed304046c8ef993b4e870378a8be1...7c1eba6b75e8e458ef5d676c8fee086489824f9b)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/190e114128b9f358d1d6a700c464797d4c3e36af)

* [OCPBUGS-74267](https://issues.redhat.com/browse/OCPBUGS-74267): release-4.21 fix(localnet, ipamless): Prevent LSP deletion on sync [#2940](https://github.com/openshift/ovn-kubernetes/pull/2940)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/25a714b82c643bcfdf5543cb467afa32dac06787...190e114128b9f358d1d6a700c464797d4c3e36af)


### [stream-coreos, stream-coreos-extensions](https://github.com/openshift/os/tree/e8f5a55a31574c1d1e415b23e939e20ddcfcc399)

* NO-JIRA: Remove (commented) WASM mentions [#1888](https://github.com/openshift/os/pull/1888)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/os/compare/f067e01e102f8d8ca2759ac00dea6ae4a7f67a95...e8f5a55a31574c1d1e415b23e939e20ddcfcc399)


### [tests](https://github.com/openshift/origin/tree/6708c9503223318f3e09a1be4151c3cb12cf56cd)

* [OCPBUGS-75513](https://issues.redhat.com/browse/OCPBUGS-75513): adjust olm test to pass on a degraded run [#30749](https://github.com/openshift/origin/pull/30749)
* [OCPBUGS-75513](https://issues.redhat.com/browse/OCPBUGS-75513): update test logic for degraded cluster run [#30748](https://github.com/openshift/origin/pull/30748)
* [OCPBUGS-74499](https://issues.redhat.com/browse/OCPBUGS-74499): Update MCN tests to better handle condition transitions through the "Unknown" state [#30729](https://github.com/openshift/origin/pull/30729)
* [OCPBUGS-74503](https://issues.redhat.com/browse/OCPBUGS-74503): VsphereConfigurationTestsRollOutTooOften event matcher should use broader regex [#30730](https://github.com/openshift/origin/pull/30730)
* [OCPBUGS-74372](https://issues.redhat.com/browse/OCPBUGS-74372): Add/RemoveSigtermProtection event matcher for SigstoreImageVerification test [#30723](https://github.com/openshift/origin/pull/30723)
* [OCPBUGS-74303](https://issues.redhat.com/browse/OCPBUGS-74303): Add filter for openshift-copy-to-node ns [#30715](https://github.com/openshift/origin/pull/30715)
* [OCPBUGS-74094](https://issues.redhat.com/browse/OCPBUGS-74094): Ignore repeated TopologyAwareHintsDisabled events [#30699](https://github.com/openshift/origin/pull/30699)
* [OCPBUGS-73808](https://issues.redhat.com/browse/OCPBUGS-73808): update watch request limits for cluster-autoscaler-operator [#30691](https://github.com/openshift/origin/pull/30691)
* [Full changelog](https://github.com/openshift/origin/compare/4a4e5866cdcd4ac74935b016746f7ce114a9809e...6708c9503223318f3e09a1be4151c3cb12cf56cd)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/a35d685a88aca94ed1d805c1079ebf14dfb81c9d)

* [OCPBUGS-74706](https://issues.redhat.com/browse/OCPBUGS-74706): fix concurrent map writes [#207](https://github.com/openshift/vsphere-problem-detector/pull/207)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/5ddf3f06b3c50c4500195d315cbea1688e45ba22...a35d685a88aca94ed1d805c1079ebf14dfb81c9d)