# 4.21.0-okd-scos.ec.6

Created: 2025-11-03 05:00:35 +0000 UTC

Image Digest: `sha256:ec01c346fdd2a4e8f17ac7dcc882b0f88512d5c8578aa8c0a3a3f08622c1166c`

Promoted from registry.ci.openshift.org/origin/release-scos:4.21.0-0.okd-scos-2025-11-02-154600


## Changes from 4.21.0-okd-scos.ec.5

### Components

* Kubectl 1.34.1
* Kubernetes 1.34.1
* Kubernetes Tests 1.34.1
* CentOS Stream CoreOS 10.0.20251023-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| IngressControllerDynamicConfigurationManager <br/> (0 tests)| Disabled| Disabled| Enabled| Enabled| Disabled<br/>(Changed)| Disabled<br/>(Changed) |
| OSStreams <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/53571e1b19b7090f444d7315efa546569af0cc22)

* [MGMT-21848](https://issues.redhat.com/browse/MGMT-21848): Allow matching host's disk using byPath [#8113](https://github.com/openshift/assisted-service/pull/8113)
* NO-ISSUE: [master] Bump OCP versions: 4.20, 4.14, 4.16, 4.18 [#8219](https://github.com/openshift/assisted-service/pull/8219)
* [MGMT-21230](https://issues.redhat.com/browse/MGMT-21230): Use XTS for disk encryption [#8115](https://github.com/openshift/assisted-service/pull/8115)
* [MGMT-21870](https://issues.redhat.com/browse/MGMT-21870): Add new parameters for bundle routes [#8101](https://github.com/openshift/assisted-service/pull/8101)
* [MGMT-22038](https://issues.redhat.com/browse/MGMT-22038): Only check TNF version for day-1 bound hosts [#8213](https://github.com/openshift/assisted-service/pull/8213)
* [MGMT-22025](https://issues.redhat.com/browse/MGMT-22025): Filter out irrelevant RHCOS images in operator deployment scripts [#8194](https://github.com/openshift/assisted-service/pull/8194)
* [MGMT-20681](https://issues.redhat.com/browse/MGMT-20681): Improve discovery ISO password change script [#7683](https://github.com/openshift/assisted-service/pull/7683)
* [MGMT-21624](https://issues.redhat.com/browse/MGMT-21624): Fix dual-stack primary IPv6 migrations and update [#8145](https://github.com/openshift/assisted-service/pull/8145)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-service/compare/78af25e12ad5193f735b674dfa1646ec76fb9e8f...53571e1b19b7090f444d7315efa546569af0cc22)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/77712c5ba9f3fd144d5010b0945310512c9370a4)

* [MGMT-20756](https://issues.redhat.com/browse/MGMT-20756): assisted installer naive string concatenation for partiti… [#1308](https://github.com/openshift/assisted-installer/pull/1308)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/6d73d9c7d2f132f466bff6088f434c750ec8793f...77712c5ba9f3fd144d5010b0945310512c9370a4)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/d7c8b24192df63bffc85f78d4124127036d97a3e)

* [AGENT-1302](https://issues.redhat.com/browse/AGENT-1302): Check for presence of registry instead of WorkflowType [#157](https://github.com/openshift/agent-installer-utils/pull/157)
* [OCPBUGS-63487](https://issues.redhat.com/browse/OCPBUGS-63487): AGENT-1203: Simplify isobuilder [#173](https://github.com/openshift/agent-installer-utils/pull/173)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/2cd801170c3460598e4479132f6561cd0e0249b5...d7c8b24192df63bffc85f78d4124127036d97a3e)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/27f0449461cd77dea5e3706af6e7caf9e9f4dca4)

* [OCPCLOUD-3092](https://issues.redhat.com/browse/OCPCLOUD-3092): Merge https://github.com/kubernetes/cloud-provider-aws:master (bea9adf) into main [#112](https://github.com/openshift/cloud-provider-aws/pull/112)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/68e446aa659a54d85c93bf00aa28725bdcfd7ac7...27f0449461cd77dea5e3706af6e7caf9e9f4dca4)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/83e2b4afdd362051c1fb587f98f5ce3bc4f9c9ca)

* [OCPCLOUD-3072](https://issues.redhat.com/browse/OCPCLOUD-3072): Add support for AMD SEV-SNP [#141](https://github.com/openshift/machine-api-provider-aws/pull/141)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/c0db2c534eecde0ef97488f579f259fe5374877a...83e2b4afdd362051c1fb587f98f5ce3bc4f9c9ca)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/aa6480c632b84371b8030b3f3f722d3d49601b02)

* [OCPCLOUD-3093](https://issues.redhat.com/browse/OCPCLOUD-3093): Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (aa50e43) into main [#148](https://github.com/openshift/cloud-provider-azure/pull/148)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/145769371cd4b2a96a87bc85badf4c4c159ab0d9...aa6480c632b84371b8030b3f3f722d3d49601b02)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/5684032e6958672f98d727fd69d6231eb545f0f2)

* no-jira: Prune unused terraform packages [#10051](https://github.com/openshift/installer/pull/10051)
* [OCPBUGS-63711](https://issues.redhat.com/browse/OCPBUGS-63711): Remove pending items on gcp no-op [#10049](https://github.com/openshift/installer/pull/10049)
* [CORS-4275](https://issues.redhat.com/browse/CORS-4275): Add Windows support [#10041](https://github.com/openshift/installer/pull/10041)
* [OCPBUGS-63632](https://issues.redhat.com/browse/OCPBUGS-63632): Update RHCOS 4.21 bootimage metadata to 9.6.20251023-0 [#10036](https://github.com/openshift/installer/pull/10036)
* [Full changelog](https://github.com/openshift/installer/compare/d7dc7513604d9b9e5f9e99bcfe129fc2abe418f4...5684032e6958672f98d727fd69d6231eb545f0f2)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/9ae657dff111d36d75300c4823b7aae4b504c7e4)

* [OCPBUGS-63683](https://issues.redhat.com/browse/OCPBUGS-63683): Replace IPv4-mapped IPv6 addresses with valid IPv6 in tests [#2123](https://github.com/openshift/oc/pull/2123)
* [Full changelog](https://github.com/openshift/oc/compare/18719cca1fc8abae4c120e85b46696961406cc29...9ae657dff111d36d75300c4823b7aae4b504c7e4)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/650842fbd764695c8ece96faa67c22b0f20f8912)

* NO-JIRA: docs: token migration to use next-bound-service-account-signing-key [#932](https://github.com/openshift/cloud-credential-operator/pull/932)
* [OCPBUGS-63541](https://issues.redhat.com/browse/OCPBUGS-63541): ccoctl: add public-key-file flag to create-all [#933](https://github.com/openshift/cloud-credential-operator/pull/933)
* [OCPBUGS-63561](https://issues.redhat.com/browse/OCPBUGS-63561): ccoctl: use pagination when listing resources in aws [#935](https://github.com/openshift/cloud-credential-operator/pull/935)
* NO-JIRA: Update output directory when extracting issuer URL [#925](https://github.com/openshift/cloud-credential-operator/pull/925)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/55ba10bb43235c2b11de0f495c72f89d2054da8b...650842fbd764695c8ece96faa67c22b0f20f8912)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/ef85dc990f42ef2b02c40c1b5ec0b6ea95b635ab)

* [OCPCLOUD-3104](https://issues.redhat.com/browse/OCPCLOUD-3104): pkg/util/sync: fix ignoring the Cluster API conversion-data annotation [#403](https://github.com/openshift/cluster-capi-operator/pull/403)
* NO-JIRA: machinesync: improve createOrUpdateCAPIMachine and implement unit tests [#396](https://github.com/openshift/cluster-capi-operator/pull/396)
* [OCPCLOUD-3104](https://issues.redhat.com/browse/OCPCLOUD-3104): sync: allow Cluster API v1beta2 version for ownerrefs and set Cluster v1beta2 ControlPlaneInitialized [#391](https://github.com/openshift/cluster-capi-operator/pull/391)
* [OCPCLOUD-2636](https://issues.redhat.com/browse/OCPCLOUD-2636): Warn users when attempting to change Authoritative API but Synchronized condition is false [#398](https://github.com/openshift/cluster-capi-operator/pull/398)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/a1a97d62e7847436ff8b60843b79536e3f0cc517...ef85dc990f42ef2b02c40c1b5ec0b6ea95b635ab)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/7cb9d6a0f6bf28aad902a6adf019cedf0bc7bbb3)

* [SPLAT-2297](https://issues.redhat.com/browse/SPLAT-2297): Added new cmd flag to launch of vSphere CCM [#394](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/394)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/040e5a525c4338991416d159ccad68f5d70b0103...7cb9d6a0f6bf28aad902a6adf019cedf0bc7bbb3)


### [cluster-config-api](https://github.com/openshift/api/tree/1b67472a2ba8e5bfd3614c272ce6a090b49498e4)

* [OCPBUGS-62987](https://issues.redhat.com/browse/OCPBUGS-62987): Move DynamicConfigurationManager back to DevPreview [#2552](https://github.com/openshift/api/pull/2552)
* envtest-releases: add v1.34.1 to index [#2553](https://github.com/openshift/api/pull/2553)
* [MCO-1941](https://issues.redhat.com/browse/MCO-1941): Add OSStream FeatureGate [#2549](https://github.com/openshift/api/pull/2549)
* hack: switch to `/usr/bin/env bash` [#2551](https://github.com/openshift/api/pull/2551)
* [Full changelog](https://github.com/openshift/api/compare/8691c3014652a8ced9d3304efb4a0cd76c3a35b2...1b67472a2ba8e5bfd3614c272ce6a090b49498e4)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/344babe6a957f1606c677b009939302659264dfb)

* [OCPCLOUD-3084](https://issues.redhat.com/browse/OCPCLOUD-3084): Bump k8s dependencies to 1.34 [#371](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/371)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/182b2cbe40fc10849e3ca83826bf238e3c52ea42...344babe6a957f1606c677b009939302659264dfb)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/18a8bcc73fa65bea263b549c35705337191abf15)

* [OCPBUGS-63543](https://issues.redhat.com/browse/OCPBUGS-63543): fix: update redfish url validation [#1504](https://github.com/openshift/cluster-etcd-operator/pull/1504)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/f93a30626b9e9570f2e99df21ca3e2e357217e82...18a8bcc73fa65bea263b549c35705337191abf15)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/5969101cd1b417261a9a71b329fb560df974670e)

* [OCPBUGS-63519](https://issues.redhat.com/browse/OCPBUGS-63519): port 9193 need to be internal and port 9194 need to have a service [#279](https://github.com/openshift/cluster-machine-approver/pull/279)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/ebd357dcd29972bbe17c8e439df51cd5ffb64783...5969101cd1b417261a9a71b329fb560df974670e)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/e3f7168eb38ce068443c685b8311412b7f3d753d)

* [OCPBUGS-62310](https://issues.redhat.com/browse/OCPBUGS-62310): Fix KSM deny-list typo [#2677](https://github.com/openshift/cluster-monitoring-operator/pull/2677)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2712](https://github.com/openshift/cluster-monitoring-operator/pull/2712)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/af22cdb1e9094d8fa094b4f336acaa4e70584710...e3f7168eb38ce068443c685b8311412b7f3d753d)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/aec3a2086170d69b4ee3ec129f9c8e9cde5acb32)

* [OCPBUGS-60032](https://issues.redhat.com/browse/OCPBUGS-60032): Configure CVO to delete default-account role binding [#2758](https://github.com/openshift/cluster-network-operator/pull/2758)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/c563eb4e4e99f708e6b56da1c3da2c9e797b49fc...aec3a2086170d69b4ee3ec129f9c8e9cde5acb32)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/be65dc63b504cdd483e0fd4b95d473b71a738d3b)

* [OCPBUGS-60218](https://issues.redhat.com/browse/OCPBUGS-60218): PPC: ghw: filter out namespaces dir [#1403](https://github.com/openshift/cluster-node-tuning-operator/pull/1403)
* NO-ISSUE: pkg/metrics/server: Log client-CA-bundle handling [#1412](https://github.com/openshift/cluster-node-tuning-operator/pull/1412)
* NO-JIRA: Address false reports of bootcmdline conflicts [#1371](https://github.com/openshift/cluster-node-tuning-operator/pull/1371)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/186dee8d4ead13aa268e669a3a7078e5c47bb011...be65dc63b504cdd483e0fd4b95d473b71a738d3b)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/39ffd1b8f70dc4c75ab6eb9a04889343e28c964f)

* [OCPBUGS-62173](https://issues.redhat.com/browse/OCPBUGS-62173): Add TLS config observer to update opcon/catd [#145](https://github.com/openshift/cluster-olm-operator/pull/145)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/a3291461c201b5f64d24ef511a85327d36e2a999...39ffd1b8f70dc4c75ab6eb9a04889343e28c964f)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/2647d9e33f87c4dd88fc4706c386896124ffc7b0)

* NO-JIRA: Remove ibm-cloud-managed-cleanup yaml [#586](https://github.com/openshift/cluster-storage-operator/pull/586)
* [STOR-2560](https://issues.redhat.com/browse/STOR-2560): Add readOnlyRootFilesystem to hypershift and ibm-cloud-managed [#629](https://github.com/openshift/cluster-storage-operator/pull/629)
* NO-JIRA: Update OCP documentation links to latest versions [#636](https://github.com/openshift/cluster-storage-operator/pull/636)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/6812180770ce6ab2c990bc9a7f1743ce46d27a68...2647d9e33f87c4dd88fc4706c386896124ffc7b0)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/420e6d07d80f501cbed3d5ce6f6596323d4fdce5)

* [OTA-1585](https://issues.redhat.com/browse/OTA-1585): test: Include the compressed tests binary in the CVO container image [#1236](https://github.com/openshift/cluster-version-operator/pull/1236)
* NO-JIRA: Clean up code to remove ReconciliationIssues [#1253](https://github.com/openshift/cluster-version-operator/pull/1253)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/52cc813dfc6645792a2fb47fddc39104d6bc3744...420e6d07d80f501cbed3d5ce6f6596323d4fdce5)


### [console](https://github.com/openshift/console/tree/bed7e7c2c9f28dff28e6d806e215cb011abb49ea)

* [CONSOLE-4601](https://issues.redhat.com/browse/CONSOLE-4601): Migration of tests from Enzyme to React Testing Library [#15510](https://github.com/openshift/console/pull/15510)
* [OCPBUGS-63471](https://issues.redhat.com/browse/OCPBUGS-63471): Render a button if there is 1 action [#15636](https://github.com/openshift/console/pull/15636)
* [OCPBUGS-63382](https://issues.redhat.com/browse/OCPBUGS-63382): Display missing environment var values and correct styling [#15625](https://github.com/openshift/console/pull/15625)
* [CONSOLE-4835](https://issues.redhat.com/browse/CONSOLE-4835): Migrate `topology` to dynamic [#15617](https://github.com/openshift/console/pull/15617)
* [CONSOLE-4630](https://issues.redhat.com/browse/CONSOLE-4630): Add children prop to some places [#15548](https://github.com/openshift/console/pull/15548)
* NO-JIRA: reintroduce load bearing import cycles [#15651](https://github.com/openshift/console/pull/15651)
* [OCPBUGS-63707](https://issues.redhat.com/browse/OCPBUGS-63707): Never allow OTHER_CATEGORY in categories [#15660](https://github.com/openshift/console/pull/15660)
* [OCPBUGS-60937](https://issues.redhat.com/browse/OCPBUGS-60937): Updated PromQL to include component specific namespace [#15438](https://github.com/openshift/console/pull/15438)
* [OCPBUGS-62296](https://issues.redhat.com/browse/OCPBUGS-62296): Preserve path on perspective switch [#15541](https://github.com/openshift/console/pull/15541)
* [CONSOLE-4837](https://issues.redhat.com/browse/CONSOLE-4837): Migrate `console-app` to dynamic [#15620](https://github.com/openshift/console/pull/15620)
* [OCPBUGS-62939](https://issues.redhat.com/browse/OCPBUGS-62939): "View events" and 'View all events' point to the same page on 'Overview'-&gt;'Activity' card. [#15606](https://github.com/openshift/console/pull/15606)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/a7062ee5e3c14092ec7cd2dee8638d2af765616c...bed7e7c2c9f28dff28e6d806e215cb011abb49ea)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/f0f7a14152fba5ce86346c58ac282f55dc380231)

* [OSASINFRA-3954](https://issues.redhat.com/browse/OSASINFRA-3954): Rebase main onto release-1.34 [#354](https://github.com/openshift/cloud-provider-openstack/pull/354)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/b3f28b9752de18c7774545ad2659e07fd7799fba...f0f7a14152fba5ce86346c58ac282f55dc380231)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/78dacb7c661a62c78036c2737401afd3eb6fd04d)

* [STOR-2586](https://issues.redhat.com/browse/STOR-2586): Rebase to v2.17.0 for OCP 4.21 [#76](https://github.com/openshift/csi-livenessprobe/pull/76)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/1ed94a44d84b5e516bcbfafa129f7b2cdf474d92...78dacb7c661a62c78036c2737401afd3eb6fd04d)


### [etcd, installer-etcd-artifacts](https://github.com/openshift/etcd/tree/239c469ebe0bb90864de458d0ce8fc384c7f22b8)

* [OCPBUGS-63473](https://issues.redhat.com/browse/OCPBUGS-63473): 4.21 rebase 3.5.24 [#346](https://github.com/openshift/etcd/pull/346)
* [Full changelog](https://github.com/openshift/etcd/compare/e2b3dfdf037938f7f0c489438eaa1138fd3fadba...239c469ebe0bb90864de458d0ce8fc384c7f22b8)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/9ca60866127994f08fe5ce2b237ef0f3357986de)

* [OCPBUGS-61377](https://issues.redhat.com/browse/OCPBUGS-61377): UPSTREAM: &lt;carry&gt;: Re-enable temporarily disabled kuberc tests [#2501](https://github.com/openshift/kubernetes/pull/2501)
* NO-JIRA: enable CBOR tests [#2500](https://github.com/openshift/kubernetes/pull/2500)
* [OCPBUGS-62270](https://issues.redhat.com/browse/OCPBUGS-62270): UPSTREAM: &lt;carry&gt;:  Skip CPU resource status for workload-pinned pods [#2490](https://github.com/openshift/kubernetes/pull/2490)
* [Full changelog](https://github.com/openshift/kubernetes/compare/96593f323733d9ffc0fc70257ecad44a56df0ce3...9ca60866127994f08fe5ce2b237ef0f3357986de)


### [hypershift](https://github.com/openshift/hypershift/tree/7916f3f968a804eff1ffd5b83dd1af04aaec4e4a)

* [OCPBUGS-38358](https://issues.redhat.com/browse/OCPBUGS-38358): Fix nil pointer dereference in AWS CloudProviderConfig [#7129](https://github.com/openshift/hypershift/pull/7129)
* [OCPBUGS-60637](https://issues.redhat.com/browse/OCPBUGS-60637): feat(cpo): enable tests for UID security context in storage components [#6934](https://github.com/openshift/hypershift/pull/6934)
* [OCPBUGS-51136](https://issues.redhat.com/browse/OCPBUGS-51136): revert scc annotation for components in kube-system [#7130](https://github.com/openshift/hypershift/pull/7130)
* [OCPBUGS-62060](https://issues.redhat.com/browse/OCPBUGS-62060): fix(cmd/destory/aws): detach managed policies before deleting inline policies [#7033](https://github.com/openshift/hypershift/pull/7033)
* NO-JIRA: fix(ai): fix plugin marketplace name [#7127](https://github.com/openshift/hypershift/pull/7127)
* [CNTRLPLANE-1756](https://issues.redhat.com/browse/CNTRLPLANE-1756): fix(ai-skill): prevent security warning in git-commit-format skill [#7125](https://github.com/openshift/hypershift/pull/7125)
* [CNTRLPLANE-1644](https://issues.redhat.com/browse/CNTRLPLANE-1644): Request serving topology end to end test [#7031](https://github.com/openshift/hypershift/pull/7031)
* [OCPBUGS-62496](https://issues.redhat.com/browse/OCPBUGS-62496): fix: delete old profile during replacement [#7089](https://github.com/openshift/hypershift/pull/7089)
* [CNTRLPLANE-1650](https://issues.redhat.com/browse/CNTRLPLANE-1650): chore(tekton): consolidate main branch pipelines [#7053](https://github.com/openshift/hypershift/pull/7053)
* [OCPBUGS-63639](https://issues.redhat.com/browse/OCPBUGS-63639): add support for control-plane-operator hotfix builds [#7119](https://github.com/openshift/hypershift/pull/7119)
* [CNTRLPLANE-1687](https://issues.redhat.com/browse/CNTRLPLANE-1687): feat(e2e): add support for azure-workload-identities-file flag [#7101](https://github.com/openshift/hypershift/pull/7101)
* [CNTRLPLANE-1681](https://issues.redhat.com/browse/CNTRLPLANE-1681): chore(deps): update mvdan.cc/unparam digest to 0df0534 [#7049](https://github.com/openshift/hypershift/pull/7049)
* [Full changelog](https://github.com/openshift/hypershift/compare/7a63e46b0d154786852592eb5a01a79b82df0afe...7916f3f968a804eff1ffd5b83dd1af04aaec4e4a)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/c566572b2cf0120499e81181f1efb1e729e9c418)

* [OCPCLOUD-3095](https://issues.redhat.com/browse/OCPCLOUD-3095): Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.34 (64b1744) into main [#82](https://github.com/openshift/cloud-provider-ibm/pull/82)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/e797cab574156c8c875968fb8dcdf27f1148eaf7...c566572b2cf0120499e81181f1efb1e729e9c418)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/ab36dcc19e6063bf55158b59588448151a200170)

* [STOR-2589](https://issues.redhat.com/browse/STOR-2589): Rebase to upstream v5.2.19 for OCP 4.21 [#113](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/113)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/0a6bb9018ec40d8b19f83d6914ae8ef3b0061c03...ab36dcc19e6063bf55158b59588448151a200170)


### [insights-operator](https://github.com/openshift/insights-operator/tree/b414946202b350698cb388b5aa32260716735d84)

* NO-JIRA: remove trailing commas from ConfigMap example [#1166](https://github.com/openshift/insights-operator/pull/1166)
* [OCPBUGS-63015](https://issues.redhat.com/browse/OCPBUGS-63015): QEMU logs are not gathered if there are pending status virt-launcher pods [#1164](https://github.com/openshift/insights-operator/pull/1164)
* [Full changelog](https://github.com/openshift/insights-operator/compare/65a10b7af60c6747031ea6f399ea63ad24f2d6ff...b414946202b350698cb388b5aa32260716735d84)


### [ironic](https://github.com/openshift/ironic-image/tree/679e491fe1e6ba4925431fdab40c19519ec4db34)

* [METAL-1597](https://issues.redhat.com/browse/METAL-1597): Fix update workflow [#708](https://github.com/openshift/ironic-image/pull/708)
* NO-ISSUE: Update ironic and sushy commit [#704](https://github.com/openshift/ironic-image/pull/704)
* [METAL-1597](https://issues.redhat.com/browse/METAL-1597): Install curl-minimal in update workflow [#706](https://github.com/openshift/ironic-image/pull/706)
* [METAL-1597](https://issues.redhat.com/browse/METAL-1597): Automatically update requirements.cachito [#705](https://github.com/openshift/ironic-image/pull/705)
* [Full changelog](https://github.com/openshift/ironic-image/compare/1f3b08115f6a459e81521becceb9841d7577285a...679e491fe1e6ba4925431fdab40c19519ec4db34)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/fb9c1e1faa73605e7bd52d509bba60d40151e5e1)

* [METAL-1597](https://issues.redhat.com/browse/METAL-1597): Fix update workflow [#204](https://github.com/openshift/ironic-agent-image/pull/204)
* [METAL-1597](https://issues.redhat.com/browse/METAL-1597): Install curl-minimal in update workflow [#202](https://github.com/openshift/ironic-agent-image/pull/202)
* [METAL-1597](https://issues.redhat.com/browse/METAL-1597): Automatically update requirements.cachito [#201](https://github.com/openshift/ironic-agent-image/pull/201)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/1d0016d8eddf4cd509d5a822a785dacac09e7f7e...fb9c1e1faa73605e7bd52d509bba60d40151e5e1)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/74107339f3c7f657c71ef96c4cef900bfbb5eacf)

* [OCPBUGS-63738](https://issues.redhat.com/browse/OCPBUGS-63738): Revert "SPLAT-2526: Refactor openshift-tests-ext" [#1426](https://github.com/openshift/machine-api-operator/pull/1426)
* [SPLAT-2526](https://issues.redhat.com/browse/SPLAT-2526): Refactor openshift-tests-ext [#1423](https://github.com/openshift/machine-api-operator/pull/1423)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/2488b27fe5bcbcc83ac15e315cea545361858c76...74107339f3c7f657c71ef96c4cef900bfbb5eacf)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/a43523ef4c49e31e74e9ce9dec1c5178da666984)

* [MCO-1911](https://issues.redhat.com/browse/MCO-1911): Migrate the mco_password test suite from the private repository to the MCO repository [#5374](https://github.com/openshift/machine-config-operator/pull/5374)
* [MCO-1898](https://issues.redhat.com/browse/MCO-1898): MCS serves image-aware first-boot config [#5357](https://github.com/openshift/machine-config-operator/pull/5357)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/d4827961fb1f4d4e6ed882c1a84d96a3addc57fe...a43523ef4c49e31e74e9ce9dec1c5178da666984)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/d0fb01179c00727b12dd4c0e81c07b561e0b26bb)

* NO-JIRA: chore: make dockerfile consistent with konflux, add make podman-cross-build command [#619](https://github.com/openshift/monitoring-plugin/pull/619)
* [OU-1031](https://issues.redhat.com/browse/OU-1031): Show the alert request error to the user [#607](https://github.com/openshift/monitoring-plugin/pull/607)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/ad63db668e0561cab8d6255a730449d2c9bd74dc...d0fb01179c00727b12dd4c0e81c07b561e0b26bb)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/6dc33ccc26b8e899726b4717b04e373fc7ab73a1)

* [CLID-405](https://issues.redhat.com/browse/CLID-405): move v2 code to base folder [#1294](https://github.com/openshift/oc-mirror/pull/1294)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/1d7329e14f2f8986c89ec5805cb23f88a77db463...6dc33ccc26b8e899726b4717b04e373fc7ab73a1)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/b2e343a5706fb41b81faaf77d489f951c5da31fe)

* NO-ISSUE: Synchronize From Upstream Repositories [#538](https://github.com/openshift/operator-framework-operator-controller/pull/538)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/e34bd58715616961aafbd4279ccb3f4d4e90c8be...b2e343a5706fb41b81faaf77d489f951c5da31fe)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/4d2698b29ca486fdc0ef083df25b7bc58a22f483)

* NO-ISSUE: Synchronize From Upstream Repositories [#1134](https://github.com/openshift/operator-framework-olm/pull/1134)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/25904d88f5a7c13e7fd24c62a3df17719ba2ae83...4d2698b29ca486fdc0ef083df25b7bc58a22f483)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/ead8b7e18a400bb3efd8970972d4e1046b4456fd)

* NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.26.0 to 2.27.1 [#682](https://github.com/operator-framework/operator-marketplace/pull/682)
* NO-ISSUE: 🌱 Upgrade dependencies ( github.com/openshift/api, github.com/openshift/library-go and indirect github.com/prometheus/procfs ) [#681](https://github.com/operator-framework/operator-marketplace/pull/681)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/560e8fa9c941f5ff7d820d41fbfde81ba2ea39db...ead8b7e18a400bb3efd8970972d4e1046b4456fd)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/f16540770027ce1480bce084b5b916c07677df82)

* [OCPBUGS-50709](https://issues.redhat.com/browse/OCPBUGS-50709): DownStream Merge [10-28-2025] [#2832](https://github.com/openshift/ovn-kubernetes/pull/2832)
* [OCPBUGS-56749](https://issues.redhat.com/browse/OCPBUGS-56749): DownStream Merge [10-24-2025] [#2829](https://github.com/openshift/ovn-kubernetes/pull/2829)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/7dd6e74d49a194a146c331bcea0a88a524ecfcf7...f16540770027ce1480bce084b5b916c07677df82)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/39d728735779afef886bc10a8bc7cf72f54d51a0)

* [OCPBUGS-62727](https://issues.redhat.com/browse/OCPBUGS-62727): Bump openshift/node_exporter to v1.10.2 [#172](https://github.com/openshift/node_exporter/pull/172)
* [Full changelog](https://github.com/openshift/node_exporter/compare/e72c0718ad998d5113271537227a147e5af50330...39d728735779afef886bc10a8bc7cf72f54d51a0)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/87df21ba56cebef9c3ead023ceb8a5b5e4e277d6)

* [TRT-2385](https://issues.redhat.com/browse/TRT-2385): Remove all tests and add fake test that always passes [#289](https://github.com/openshift/service-ca-operator/pull/289)
* [CNTRLPLANE-1720](https://issues.redhat.com/browse/CNTRLPLANE-1720): Separate OTE scaffold for service-ca-operator [#285](https://github.com/openshift/service-ca-operator/pull/285)
* [CNTRLPLANE-1720](https://issues.redhat.com/browse/CNTRLPLANE-1720): Separate ote scaffold for test extension [#283](https://github.com/openshift/service-ca-operator/pull/283)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/b4fbf5e3cbf4455343a6682b9e3792244120454d...87df21ba56cebef9c3ead023ceb8a5b5e4e277d6)


### [tests](https://github.com/openshift/origin/tree/387947a603b155fae1aef09f9216ba95d3548527)

* [TRT-2386](https://issues.redhat.com/browse/TRT-2386): Revert "Revert "Merge pull request #30296 from hongkailiu/OTA-1637-reboot"" [#30438](https://github.com/openshift/origin/pull/30438)
* [OCPBUGS-63333](https://issues.redhat.com/browse/OCPBUGS-63333): Add Dot Net 9.0 to Origin Tests [#30401](https://github.com/openshift/origin/pull/30401)
* [STOR-2340](https://issues.redhat.com/browse/STOR-2340): Add e2e tests for storage network policy [#30359](https://github.com/openshift/origin/pull/30359)
* [TRT-2373](https://issues.redhat.com/browse/TRT-2373): Revert "Revert "Merge pull request openshift#30269 from hongkailiu/OTA-1626"" [#30426](https://github.com/openshift/origin/pull/30426)
* [CNTRLPLANE-1485](https://issues.redhat.com/browse/CNTRLPLANE-1485): fix(disruption): Using correct internal LB of apiserver for monitor test on ARO and Baremetal Hypershift [#30307](https://github.com/openshift/origin/pull/30307)
* [TRT-2386](https://issues.redhat.com/browse/TRT-2386): Revert #30296 "OTA-1637: ClusterOperators should not go Progressing only for a node reboot" [#30437](https://github.com/openshift/origin/pull/30437)
* NO-ISSUE: Automated - Update synthetic test data [#30416](https://github.com/openshift/origin/pull/30416)
* [OCPBUGS-63201](https://issues.redhat.com/browse/OCPBUGS-63201): Updated the upgrade duration limit to 100 minutes for ppc64le [#30390](https://github.com/openshift/origin/pull/30390)
* [CNF-18661](https://issues.redhat.com/browse/CNF-18661): Revert " flake the missing port 9194 and 9193 once the team will fix will remove it" [#30430](https://github.com/openshift/origin/pull/30430)
* [OTA-1637](https://issues.redhat.com/browse/OTA-1637): ClusterOperators should not go Progressing only for a node reboot [#30296](https://github.com/openshift/origin/pull/30296)
* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): tests: authorization/rbac: Align restricted-v3 rule [#30427](https://github.com/openshift/origin/pull/30427)
* [OCPBUGS-57334](https://issues.redhat.com/browse/OCPBUGS-57334): Redact bearertoken in TestContext [#29912](https://github.com/openshift/origin/pull/29912)
* [Full changelog](https://github.com/openshift/origin/compare/5d46d82f8f456217515ee7c209dadd39c344ff8c...387947a603b155fae1aef09f9216ba95d3548527)