# 5.0.0-okd-scos.6
Created: 2026-11-09 22:30:04 +0000 UTC
Image Digest: `sha256:ea7e0f4296e3f6e5eee0319ec64a36978059d239babec748a1da558e6187746f`
Promoted from registry.ci.openshift.org/origin/release-scos:5.0.0-0.okd-scos-nightly-2026-11-09-060342
## Changes from 5.0.0-okd-scos.2
### Components
* Kubectl 1.36.2
* Kubernetes 1.36.5
* Kubernetes Tests 1.36.2
* CentOS Stream CoreOS 10 upgraded from 10.0.20260819-0 to 10.0.20261108-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | OKD
Hypershift | OKD
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: |
| OLMLifecycleAndCompatibility
(0 tests)| Disabled| Disabled
(Changed)| Disabled| Disabled
(Changed)| Disabled| Disabled| Disabled| Enabled
(Changed) |
| DRADeviceTaintRules
(0 tests)| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed)| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed) |
### Rebuilt images without code change
* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [a75a7c93](https://github.com/openshift/assisted-installer-agent/commit/a75a7c931350d762396c5c7578246b841d9ffaff) `sha256:94f642cf515e3e1f2336ebf202197aeb08ddd285a33dc9030b1fa7b36491dee4`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [d6ec9243](https://github.com/openshift/apiserver-network-proxy/commit/d6ec9243d24050d7d7ad7f939e45f821171f000e) `sha256:48162df069d9bfc567aab933aaec4ee422bbb0cb1d3c6668bf9d067df814e50a`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [278e8c07](https://github.com/openshift/cloud-provider-aws/commit/278e8c07a72a50e7d3f28fc743c38c64f008f5aa) `sha256:0c05a1d06482fee772fe8987f70eca4bc03bb272054306548f2082c17916718c`
* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [812216c6](https://github.com/openshift/cluster-api-provider-aws/commit/812216c630c78dcc9d8d104d6d15366d7271ff59) `sha256:0a3219815676b5faa174afee0a01d4f7a66a7fb06a05ebfa89de71ce17ae3e09`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [d8ba4583](https://github.com/openshift/aws-karpenter-provider-aws/commit/d8ba4583eda5714f006524d6c05390d55842f830) `sha256:682823c946d59927b921afab09307ee37f16509b5121282ed5788e665ea68b58`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [9b18930d](https://github.com/openshift/aws-encryption-provider/commit/9b18930d2db9521a08faa7165488bdcf6482b9cf) `sha256:e80972bde48c90d85de6a9690569a764d54b1e4d5d5a6b5dbc23737aff7b26bc`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [791ca0f9](https://github.com/openshift/machine-api-provider-aws/commit/791ca0f9584cd7c170e545528e5588238bbe77cd) `sha256:aa21fa12ecf0a60dadfdca1f0e40cffcc78a7feec973479955e04eadb2bd2a35`
* [aws-node-termination-handler](https://github.com/openshift/aws-node-termination-handler) git [ed93e0e3](https://github.com/openshift/aws-node-termination-handler/commit/ed93e0e393ab94fb8286bc0da9f98918d20475a3) `sha256:de1a986fb2a01ce8abfeec094396977884472cbf46bf60da19105234e0cb93cd`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [0d33a459](https://github.com/openshift/aws-pod-identity-webhook/commit/0d33a4596e2a22d188fe74c4a6497c37c2528c1f) `sha256:a98f15811691903ab70c9c25fef40ce2ddcdec523014e47ec6d0cf472e746858`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [95f0a12c](https://github.com/openshift/cloud-provider-azure/commit/95f0a12ce3f7f3770d099d3610a376f06cc713df) `sha256:fb39fbcc110456438573b830eba27b29dd063dd728d77e3104c2866bf09070b0`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [95f0a12c](https://github.com/openshift/cloud-provider-azure/commit/95f0a12ce3f7f3770d099d3610a376f06cc713df) `sha256:5e55c15212e3633331239811b2467b9ef4fcafb4bb450efea6d8c31912dfd8a4`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [64091ea1](https://github.com/openshift/azure-disk-csi-driver/commit/64091ea10ac93fd62b83c63b4b7379063aca9058) `sha256:0e21cd430f2d242da7b0338bff005d6a066cdde4233aea25bb8297d93172ddd1`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [9719f03e](https://github.com/openshift/azure-file-csi-driver/commit/9719f03e539db9b122ce1cdde47f75f205a82750) `sha256:dedccd018c7a5f2d23278880cd4e91e44832daa9de254fe8b89c33f92fd6721d`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [9bc8029d](https://github.com/openshift/azure-kubernetes-kms/commit/9bc8029d8fd9360d18053884db1b806db7defbb2) `sha256:e1e4f169ebaeabe1413069d5dbc94f7b8f91892fb5304d8ad6a21fde183a6f3d`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [4ff6c6b8](https://github.com/openshift/machine-api-provider-azure/commit/4ff6c6b8730c1253918f1f5261b9c12cab2e5903) `sha256:58ac334fd60c39051e695bd672dfff528abfa6c69cbbc390f371ec93659936ae`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [26f483f0](https://github.com/openshift/azure-service-operator/commit/26f483f05301e430d384053862923c40864e755e) `sha256:5a99b14c3e1a8582f20bb9ba3efd975cad0862e85fad5f216854d54b3bb3fafe`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [37434579](https://github.com/openshift/azure-workload-identity/commit/374345793cac5c9ed3323ba6b91934eae5fa0b41) `sha256:7ed71b968b3796278682e427359a06c851e1e1ac45139b3b6ae0ab11f14696cb`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [7f3bfffd](https://github.com/openshift/cluster-api-provider-baremetal/commit/7f3bfffd7b7703cd601dbf83f6bfc56a190d017d) `sha256:9ac16e6a05e211db8ad5e2ad958a54d927bf495c4f3f08c33069fa77ee57b306`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [34bbeb37](https://github.com/openshift/baremetal-operator/commit/34bbeb376836bf01793d4e70d29065d619ebcaa1) `sha256:82c312a4254146e8f0f590bd165920fa1a7c4fe0513eae55fbfbe9c1b3120c72`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [3cde6907](https://github.com/openshift/baremetal-runtimecfg/commit/3cde69071d3f6d5f2bc79b1cb55e5394021fcbb8) `sha256:fb6abbd17aa0ff9f2baa4c1ea6817c67ffcc3cb864066ca9430a8f27d7ad75b4`
* [cli](https://github.com/openshift/oc) git [4b0a124d](https://github.com/openshift/oc/commit/4b0a124d300cef187037bda6f1b04caa69ab8b62) `sha256:97c86618c814196473809ed4739f62ccecc75f033bbd69f4b3fe342ee62fbdec`
* [cli-artifacts](https://github.com/openshift/oc) git [4b0a124d](https://github.com/openshift/oc/commit/4b0a124d300cef187037bda6f1b04caa69ab8b62) `sha256:aae801d2ec9ba5f698a44ff00c8d8b3d9609045ab972150cd59ff1ad21188076`
* [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [b187feee](https://github.com/openshift/cloud-credential-operator/commit/b187feee66f4ce0f992059b21a97a2ae88e4cdd9) `sha256:d3db6b5a43bb854bb9055b7fbe051d5de14c1166ada667d37d596e6d22f98c26`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [7afccf2d](https://github.com/openshift/cloud-network-config-controller/commit/7afccf2d78f6cb5dd3181de1588c5063bd995d7d) `sha256:5cf0e236c3d85458845c64cbf7f26b68f23630e49d31e164e59167d824cb49eb`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [f393f542](https://github.com/openshift/kubernetes-autoscaler/commit/f393f54229e6c3ae74c35ae72012af92d31c03d3) `sha256:c70560bcad14b4694b92e69075463cfb748838bcd3391f43ed25222909f7497f`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [e48fe117](https://github.com/openshift/cluster-autoscaler-operator/commit/e48fe1179ad671757b5a40688e2d125c1f326e8b) `sha256:1da9a00375ab3edb284428a92d16b389f1e88acb13276186d2f19f734f35153c`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [ab74989b](https://github.com/openshift/cluster-bootstrap/commit/ab74989bad5e19d8e137b2175decf4c5b4c1ae22) `sha256:f7185c2ea9f6564b3a448d51754e9c366012cb20af540e79d1ed6ab55f88a76f`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [6f2e5dcc](https://github.com/openshift/cluster-api/commit/6f2e5dcc9e83873e25772fa7c7e10e99b696bb0d) `sha256:23ec1fd4268ccb91d301a57b0205336fb48deeb35ae870bd77beb502e17615ba`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [0d06adb9](https://github.com/openshift/cluster-capi-operator/commit/0d06adb94113a8f9bc76b754ae6e906d4020a9d6) `sha256:a5575f1e0ffcfbdc846f9fdd4b95f16926e1ae67c1c13cdc62fe37ef4c40354c`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [c00cf58d](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/c00cf58dd81954ca100757f6a2d2af8d84770fd5) `sha256:ea0bd51207099c2c2bca0a3b25e8d9f344f86354cf9e91a2e22170e6c497c982`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [6b40834f](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/6b40834f1fa1430c458734d396b39775f1232647) `sha256:af077d4d8657674c3b28144bbe67c45138dd53a4441b81a88860a96bd7f7fdea`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [c0ed09e3](https://github.com/openshift/cluster-dns-operator/commit/c0ed09e329e9001629518604a58205e3fbe8284a) `sha256:2eac3c78def038a75cf5438a07e8a5eadc7bc36c833ba8120096b6466e431cfe`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [8135895a](https://github.com/openshift/cluster-image-registry-operator/commit/8135895ad26c69d538fb972767350397b479a647) `sha256:17fb8c0644d9e3435f273e612896c5edb97e30dd828bc0bb56c9e594fc472435`
* [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator) git [ec33ea1e](https://github.com/openshift/cluster-kube-apiserver-operator/commit/ec33ea1e2bde9b77b29f12a450bb548980cb5e3d) `sha256:a3438427622242b8541fbdbd936827b1b3600667126b035f19a7c4e4cbae483d`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [e0d271fc](https://github.com/openshift/cluster-kube-scheduler-operator/commit/e0d271fceb3727138177e017f860a8ff79738bb3) `sha256:a51825c01136593af8d9f14ad80d0fd3ec7872205137ed983641a47e3813e5ce`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [01d7a12d](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/01d7a12d27c2b52c6ece97ec0b60c71fe0e493d3) `sha256:dfecd6851660daabd2a354cead826e4d5a72c84aad7dd1b44dfd0e58ee138f80`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [228ec940](https://github.com/openshift/cluster-olm-operator/commit/228ec940921e4443b2724ef512c0d211d4a38ba7) `sha256:141ce6a362ba021b8ceeddfcce783eb0fd15c17e96694f744873019b9d575bcc`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [8da2f1fc](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/8da2f1fcb1e76e8b1b97b16ca7bbfa7116287eb8) `sha256:239590822b43104aa767ca5538a701beaec2317833713de7f634fa4de333bc0e`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [469bbf21](https://github.com/openshift/cluster-policy-controller/commit/469bbf211d35eee0df4422bda7e9e600b080f0f2) `sha256:f6aa5af63a3cf3e8b97f1ddfff30950164817954e4aa038ba135264521f3a225`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [e7c64303](https://github.com/openshift/cluster-storage-operator/commit/e7c64303284066d2595be06f7f01502bed12af24) `sha256:fab7deb5e9c9af3813dc580102c5b9d396fb477a642dd157a76e7fec9da625e0`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [9607604d](https://github.com/openshift/cluster-update-keys/commit/9607604d35acee234051bd0da8a14321b4edd38e) `sha256:24a552370c49f24c3a5fd111deb46e07bfd5d49076f707361d47a080b720ec8b`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [4e585cf9](https://github.com/openshift/configmap-reload/commit/4e585cf9bb144a6a1e58004abb33e5bbcc9594e8) `sha256:755d72f854d2ff035956e1effa3ad37fb57d53c5c67c8f0c4b15160414eff33d`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [23278182](https://github.com/openshift/containernetworking-plugins/commit/23278182eec51396cca07cc1e202898411e2d11d) `sha256:2f4be251ca51b9facb27970600bca9edee6bb41470e89fbaf2cec158e1f0115a`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [23278182](https://github.com/openshift/containernetworking-plugins/commit/23278182eec51396cca07cc1e202898411e2d11d) `sha256:5f4088663f189e1e08910539e7313788c4fbd80e557ea243211681d289923500`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [f32d78f4](https://github.com/openshift/cloud-provider-openstack/commit/f32d78f4758c69c67b453a83e1345a417b4a63c9) `sha256:cfd6c3058333d65a82ca9a8e43ac755da5cb63b3434c678d584de7f6887d8f21`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [beb9567b](https://github.com/openshift/csi-driver-nfs/commit/beb9567b4ef15656a88c1c71e0b08e7bf2e96aaa) `sha256:76df38d8cb1d24ed7df04fed89f23d2e23bd5c7d1c70ebfa522516a36ce431bb`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [3fd668b3](https://github.com/openshift/csi-external-attacher/commit/3fd668b3f07dd382e5c7b6239d50f7988f652e64) `sha256:d3a66449a1f16a38e92678d42fa4d5f1d876d2eeb84af18ccf33f2f8e70bd433`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [7ff338c9](https://github.com/openshift/csi-external-provisioner/commit/7ff338c9d1296f0e5d4d8080a76bb191c8f3be30) `sha256:0a83ab0e75f8683a7fa89891c830eb95dd8262345529f3302cb4f4abe82b7831`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [14aa7028](https://github.com/openshift/csi-external-resizer/commit/14aa7028f485e95c800bb7ffbf9b66a2bf75ceaf) `sha256:ea84e2bc58f99817f0b922b7a1983b39aaaf91cc1ad30d776f5e6107a86b9628`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [ce497b1e](https://github.com/openshift/csi-external-snapshot-metadata/commit/ce497b1ed7da0b3e9ab51c1cbdc19c54f69361a0) `sha256:b56b2e25370496815b2ac51f85f6037a5c6d91193ee0af98816ff5347006d30a`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [a019d1a9](https://github.com/openshift/csi-external-snapshotter/commit/a019d1a9d9e1d26ffd0b2e0d911733180fa608b2) `sha256:e72cc16c6ad5f84483ed179787256c99bf17dcc613ca5914d5a1b8d1f98878f8`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [cab57d51](https://github.com/openshift/csi-livenessprobe/commit/cab57d511106916bba6953977106f06b2fec01fd) `sha256:ed0e2537ebe1367e98e15a4789bc1823e367a31a300d67c69174422888f7d39f`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [5766960d](https://github.com/openshift/csi-node-driver-registrar/commit/5766960d82ffb9ef84d15e903ae57d0a6781ef11) `sha256:2dbda8fec054e5bb9c982013c0de4e25ceec2d9c660d9704d67aaa12afdf2760`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [a019d1a9](https://github.com/openshift/csi-external-snapshotter/commit/a019d1a9d9e1d26ffd0b2e0d911733180fa608b2) `sha256:999ddee1fca8326c77788a4e3f636bff78f944f5d1deecf7962f1612e86dd3e1`
* [deployer](https://github.com/openshift/oc) git [4b0a124d](https://github.com/openshift/oc/commit/4b0a124d300cef187037bda6f1b04caa69ab8b62) `sha256:074dbd7538a8e4aec1a4f4473037e89edf277881389a963e4d0364289e197dc7`
* [docker-builder](https://github.com/openshift/builder) git [a5718a4f](https://github.com/openshift/builder/commit/a5718a4f8c8260a997c7f2546b94edd9dcac68aa) `sha256:b388a8571a5b8d43c4a6c90a4ced414d140a7701a1cb922ac5937c56459b7384`
* [docker-registry](https://github.com/openshift/image-registry) git [ab9f8492](https://github.com/openshift/image-registry/commit/ab9f84929eee9019fb5aede74316ea321f99e575) `sha256:60d59f401c2fe3fb732085835ce9671c3dcef035aa2394f181a7c61e71ff92fc`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [b63b175a](https://github.com/openshift/driver-toolkit/commit/b63b175a79b9fe0c29f6ed63df3c2d7862ba408a) `sha256:62d2b68639be48247ccad3903cda154f170cadc734785e82705e661136d4eaf1`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [bc639044](https://github.com/openshift/egress-router-cni/commit/bc639044a3aee89f1f9547ad0539481b8d808516) `sha256:fb229fc5005bffe16e61c510166e18b838fc58c2c66ac76e3ed4b4d586bb6f6e`
* [etcd](https://github.com/openshift/etcd) git [7cf5f0db](https://github.com/openshift/etcd/commit/7cf5f0dbc98a20dc8b765151ab8b53f3019e3c81) `sha256:ad4a3fe6cdad64b6863421eaf085c5a57a29bef8090bdf52fb6041fdb83c4321`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [51c32646](https://github.com/openshift/cloud-provider-gcp/commit/51c326465b3160124b8097953b42e44f1056da5a) `sha256:a956305b684c970836cac6633e8153fd48e408051bc9467d1c46b41585ba642a`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [5f226182](https://github.com/openshift/cluster-api-provider-gcp/commit/5f2261824f63b608c8911b92bd140d324381ae21) `sha256:fb499b678288f12b6f6df54b7381a7cebcfcfe1d15b4dcfa235ea341c833d99e`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [981fb466](https://github.com/openshift/gcp-pd-csi-driver/commit/981fb466b5565a755df52bcb6c626d8f7fb82980) `sha256:a2f51375d4096df0f426ba250aa9a321e756b009f8cdc9de4352c3fc027e059c`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [4501ff2f](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/4501ff2f53576c31df0511b69444e65e1eeba745) `sha256:6314764c617436b5cdfb0615f51c0fcc16bae4646ee7ac1960cf52399cb210e8`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [11bc35dd](https://github.com/openshift/cloud-provider-ibm/commit/11bc35dd6fd5163259023a6f1dfcc59ce813ab5f) `sha256:193acd6b424af9aea8a2d06c3a34cf0bc7c3d6ae7c8ec18b6414e40cbe697735`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [ff30ef52](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/ff30ef526a2be17abd82d9c02f6dae9907c9d3f0) `sha256:e7ebf8f616faf809589941e95c7b4b585d2dbfc9061d98f406a74f6ba0bad0c7`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [76a37f0c](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/76a37f0c259508d3c9d3bf2bead5a8b1953a5c82) `sha256:b251048095e45a648994d994e2e163eaf399a074b4cfafb8b9a327ea833d6019`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [2615d13b](https://github.com/openshift/machine-api-provider-ibmcloud/commit/2615d13b730255b21ccb401d3dc039006c54a4fe) `sha256:71ec0319656328cd6d8c19da54b3b637385136069528c1809f7fd85242a91b64`
* [installer-etcd-artifacts](https://github.com/openshift/etcd) git [7cf5f0db](https://github.com/openshift/etcd/commit/7cf5f0dbc98a20dc8b765151ab8b53f3019e3c81) `sha256:fd22d9216d27d0b2a7effb8b15caa090ea8a910d44bc82fb3b0791db51bd5e37`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [f8e41b2e](https://github.com/openshift/ironic-rhcos-downloader/commit/f8e41b2ed8915474a99e3eb34b54692afb0611da) `sha256:6237feba241ff4832bce4b17a426bd8a7201fe8b3566b213971fdc91613ce194`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [486a0418](https://github.com/openshift/ironic-static-ip-manager/commit/486a041897d703d55ef59c98e2b20a01588a0b4c) `sha256:8d8555f0fe7f3571ba07830be3c537717bf4defc231c3a26d320eb3d00a969f6`
* [karpenter-operator](https://github.com/openshift/karpenter-operator) git [56725605](https://github.com/openshift/karpenter-operator/commit/56725605325c54693ebed5b0983d5d0478a87fca) `sha256:a8cd860e8cdabe27de23f31da51b97363a5bd20cc8d3ddbe5da9ce183c20c5c7`
* [keepalived-ipfailover](https://github.com/openshift/images) git [3f1cf083](https://github.com/openshift/images/commit/3f1cf0830f196a6755b8baf179fc0401188251c4) `sha256:b0bd6529fd5e2b58634adadfcfba1059e46fd6330bce3de5c00d47cd7b99de6b`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [87f46bce](https://github.com/openshift/kubernetes-metrics-server/commit/87f46bcece52a9690a4bf5684448e5ddb721d8e3) `sha256:d3921983a223af03c625293767a53672d81a06d7b325868df9db9893046c704d`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [f51eb63a](https://github.com/openshift/kube-state-metrics/commit/f51eb63aea78184f30069ccbeaa2fa346dc9e88d) `sha256:7231d2c49de649e2c93d13e84e2f14e2b658ef6e5e147f2a99c118cd068206dc`
* [kube-vip](https://github.com/openshift/kube-vip) git [1bb8a96e](https://github.com/openshift/kube-vip/commit/1bb8a96eb31eaacc7cb49a9e8e397b66e62d87e9) `sha256:b355b87b54cd31ca4baf7bb78a4d53846c8a4eba39671ef492515eef274c6699`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [05905d2f](https://github.com/openshift/kubevirt-csi-driver/commit/05905d2f805968e1c86cb97b2be1440590a48ef3) `sha256:a886b72f7054dc783d26634cf431217f780f03114c01c2343627174c28c8187d`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [e49b0968](https://github.com/openshift/image-customization-controller/commit/e49b096880f17296d42a77443dc14d732683333d) `sha256:88039a50d01ca0d50688ec98efcab86fe0f2d45df71942b78f481dfa9f16c030`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [631d5def](https://github.com/openshift/machine-os-images/commit/631d5def9be9903585e92dcde6a877362f12586b) `sha256:4bde0057e41437073e195d3fa40e4614c2ec1a81def2c2cb419308bbf7c87ff3`
* [metallb-frr](https://github.com/openshift/frr) git [f47b9e07](https://github.com/openshift/frr/commit/f47b9e073cb4dc03d0b4259d711a156052185044) `sha256:cd90ad06ea2f021c8a43d432ffcffa0a86550022fde14a854a61903660caf0d9`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [c0bdec9c](https://github.com/openshift/multus-admission-controller/commit/c0bdec9ce6a1a69985fdba5481c47fb34461eb6c) `sha256:ab48e5e95a88fc7388af1eb376b3877755aae95bfc4b25e24d662dda31af2228`
* [multus-cni](https://github.com/openshift/multus-cni) git [8f597f4b](https://github.com/openshift/multus-cni/commit/8f597f4b90dffe1d1cb9aee558fe53a0046c9e35) `sha256:9ba083736a19ae2f11b00671f8f9f74e0f639374ec6c74b3c0a10ba99d0c92ef`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [8f597f4b](https://github.com/openshift/multus-cni/commit/8f597f4b90dffe1d1cb9aee558fe53a0046c9e35) `sha256:b15acb83c1d5083c722bcb11d24ec9760bf05fcf3ea387ea530ddf6546d2fd8b`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [bfbac502](https://github.com/openshift/multus-networkpolicy/commit/bfbac5025c056c4bf53aeeef50c4bcf466f5eb11) `sha256:c14641d991c217063c35ae79eeb8aea0e49edb659535d8af697a74dc08567ee5`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [0c111164](https://github.com/openshift/route-override-cni/commit/0c111164a2c5c7f315aa58f257b7fa862e1c6b51) `sha256:debf14e597e271fb87ed70ffd8c732a65ed93bfae3dee952a4365c4676126208`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [77810eb0](https://github.com/openshift/whereabouts-cni/commit/77810eb02c634bee98b8bda17adb6adf69716d02) `sha256:86ef2174d54a2255c5ee40f984fb9734bb8cb0b0dcd9121d2172cb9ff448111e`
* [must-gather](https://github.com/openshift/must-gather) git [f4c72a69](https://github.com/openshift/must-gather/commit/f4c72a69ebedddead25591da3a115bc4b0bc49ca) `sha256:a94765629ce2a6d05a90b05a9d580e6173133d82f2bae882c810ddef37b1cbb3`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [2c395f56](https://github.com/openshift/bond-cni/commit/2c395f566f259f1a1726409e2472029fa52918c9) `sha256:c5a0633ee24d47e3a2789b835fbb01f1b9f836a94e527e3c23fa6ca86a3308ec`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [82a60353](https://github.com/openshift/network-metrics-daemon/commit/82a60353740a54e16ae88e9cbd963a00f7f74a33) `sha256:5d2ec713c7fa0306b168bf95ec23c877069084b04ad331e34db785d2e6741239`
* [network-tools](https://github.com/openshift/network-tools) git [0b53ac3d](https://github.com/openshift/network-tools/commit/0b53ac3dccf59cd169555bf18c207122374bf003) `sha256:c0e24e763ea960ee710873f06d21bb2e28a7cf4baa9a22a657fc609449048797`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [8c2be29f](https://github.com/openshift/cloud-provider-nutanix/commit/8c2be29f4939788e2dff59f00e6be8d2225897cc) `sha256:b0167c1dfdbfb8fcf5e47d3dbaca5c76d5994bbc3845ca9e76339016a3fff7d0`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [249b7c8e](https://github.com/openshift/machine-api-provider-nutanix/commit/249b7c8edfca8f25413dc76bc5a216fbe12a9ab1) `sha256:1b38dc4b22bf9fe0a9cad8425d51d448a2567f83bee47f80696588ad1bca4334`
* [oauth-server](https://github.com/openshift/oauth-server) git [e1a28882](https://github.com/openshift/oauth-server/commit/e1a28882b283cf0be80628c7aaae83cb9020afd0) `sha256:0c5fa81f724319590c735503d0c9164319abf73c5b2b3c1e87437fdb1c16b6d1`
* [olm-catalogd](https://github.com/openshift/operator-framework-operator-controller) git [49582d3d](https://github.com/openshift/operator-framework-operator-controller/commit/49582d3d95fd5e5c8e2d232bf0d5568860514e5d) `sha256:6e3d236271dbc7f6942d97f83f3bda916eb2e97dcbd5632c51e5f8f882e8574b`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [49582d3d](https://github.com/openshift/operator-framework-operator-controller/commit/49582d3d95fd5e5c8e2d232bf0d5568860514e5d) `sha256:daf97fdc5e19ece0db7e5b5b79b96c38ff34755cc6b9fae98805797818388e32`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [726a0562](https://github.com/openshift/openshift-controller-manager/commit/726a0562818b68faccfa130ae7ea17ff42915418) `sha256:6ad79b72133b59616d03a669256c2a83aab152cc0e4d4c025b40a908c25cb2b9`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [f32d78f4](https://github.com/openshift/cloud-provider-openstack/commit/f32d78f4758c69c67b453a83e1345a417b4a63c9) `sha256:34e4890a6f86b55316e0d554be9e06cafdb476e752206111a59b71b5a45cbff9`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [f32d78f4](https://github.com/openshift/cloud-provider-openstack/commit/f32d78f4758c69c67b453a83e1345a417b4a63c9) `sha256:7251ed121680d327719056b1467229f77d949b7449281360e5f5787ea90d9301`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [58dbc048](https://github.com/openshift/openstack-resource-controller/commit/58dbc0482c144c21effee2476947889122a518eb) `sha256:81322a1128ed7851d1d67d0bfed89fd52680a298d52cda29c6c3a4e5fa147ee0`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [fa9e19b2](https://github.com/operator-framework/operator-marketplace/commit/fa9e19b2ae7ad8de20b345e3bd736923f5c516cc) `sha256:6ef12b0b414df7bf88e96b87f6024e298e4531f5bb89dc1884aa8aba3851f12c`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [5911994c](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/5911994c5d70906e0f0972411176392ada9942d1) `sha256:b9d7a21d06031d471ecd94ef7a30798e980f008fbcd6a7ae8e04984448d20180`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [eda65d2c](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/eda65d2c294355914b10b491f4d3d6b93931c27f) `sha256:ec6048a1174d997546a003cd757c001b43d7f3ce320f3944f11acfed487698cd`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [412a7c3b](https://github.com/openshift/cloud-provider-powervs/commit/412a7c3b090cf1b5846da3a4ff27bdef528a7062) `sha256:ed6f808569e54d4e757e39868ca8500427e533531a6de846d0f7ce3ded2b48d6`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [6a214d5e](https://github.com/openshift/prom-label-proxy/commit/6a214d5e8a141eb8a07e74d1cdb8a9a80be22015) `sha256:91cf23aabb329df1aed8dfc8a333634f1202fd6cbaf9e135746225c8e7d49b02`
* [prometheus](https://github.com/openshift/prometheus) git [127adf44](https://github.com/openshift/prometheus/commit/127adf44c2af0612f812594fd10a9e06392146ed) `sha256:174b22579f29cd7778ea3d00fa3ecb2db593c758f3173ae700686aa765a4f6ec`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [7c923dc6](https://github.com/openshift/prometheus-alertmanager/commit/7c923dc6e56f150807d8f643da8357d315415c7f) `sha256:8092da9b97aa35aa59692718620009492505a13bf7dba8a3c39f72d5d2b6526f`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [ae80a6d7](https://github.com/openshift/node_exporter/commit/ae80a6d76915cb4461533c270cd580604049eb22) `sha256:a114de38b3ba39e041abdf129982036e6382e900457a1a7c3fdd257743afa7b1`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [59697cf7](https://github.com/openshift/route-controller-manager/commit/59697cf7af4517dd44e28179a57f7f35b6ea0e22) `sha256:bd9deaf020363a24c367f4e8587b9eb97a9c88067d137873cbd05c29dd46c954`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [ed872ba1](https://github.com/openshift/service-ca-operator/commit/ed872ba14b615ca5726ae90e987268877a0b0b20) `sha256:e6fa11a8fc1765ef2b32af7f679c0695ee181a1f0237e7c06dc225016369b0d6`
* [telemeter](https://github.com/openshift/telemeter) git [5eb6dff8](https://github.com/openshift/telemeter/commit/5eb6dff8fd9d22d61b33df7af0af51f57fc2eebb) `sha256:7cc8f8f725152ac82a5382d42f52222b289d36bd3b2d5e19857cb1cc8cae5eab`
* [tools](https://github.com/openshift/oc) git [4b0a124d](https://github.com/openshift/oc/commit/4b0a124d300cef187037bda6f1b04caa69ab8b62) `sha256:d75c6fe0f8b4c42f572b335f027d587bf46ced3e541d66242998c82cec5d6f06`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [42a87e53](https://github.com/openshift/volume-data-source-validator/commit/42a87e53d18314300ffc1d91845f2667ea3812a7) `sha256:fcad76a9740f68c1299f893aa02032b2746a317fcfdbb08fd7f5a47fbe3202d9`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [eb29de19](https://github.com/openshift/cloud-provider-vsphere/commit/eb29de194594bad8e5bc572102f1008cb26655a7) `sha256:e567d2179d1378f8706bcd8d07a5cd6dd11341a7d78ee0b482adcb9666bd158e`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [26421b3e](https://github.com/openshift/cluster-api-provider-vsphere/commit/26421b3ebde423b80f50350b51907f28a9346ead) `sha256:2412f07deaa8c2da869076c1d7ff47924cf01d7d91f409481399b9cba4cda2cf`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [595da688](https://github.com/openshift/vmware-vsphere-csi-driver/commit/595da68887893073d28ca736b2a0c6ab1b8e0d97) `sha256:8acca730ffa455b01a5ba394948818982b084fc2272e328ac56d8827f1b936b7`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [bb8cb277](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/bb8cb2770fe6e99080ad4ea919e389923408617a) `sha256:66687358b35d51c27575656d546b1c2b309199056f427fccb74d19cf9cac531b`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [595da688](https://github.com/openshift/vmware-vsphere-csi-driver/commit/595da68887893073d28ca736b2a0c6ab1b8e0d97) `sha256:9b75390f6465d971408f297817278baf8aa158f8268b9d6ae4d90d98b720892c`
### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/25f92c67e44fd08c5f282664cdd569bb8a0f63aa)
* [OCPBUGS-130354](https://issues.redhat.com/browse/OCPBUGS-130354): Add ovnKubernetesConfig to install-config definition- #11116 [#11116](https://github.com/openshift/assisted-service/pull/11116)
* [Full changelog](https://github.com/openshift/assisted-service/compare/ec0bb5a1196c6fd1cbd3376dd453a85ce8d4ddb4...25f92c67e44fd08c5f282664cdd569bb8a0f63aa)
### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/cff7ab8663f5e64e86279ef45973f7967e2a2b07)
* [OCPBUGS-133398](https://issues.redhat.com/browse/OCPBUGS-133398): Preserve firstboot network config across OS image replacement [#2487](https://github.com/openshift/assisted-installer/pull/2487)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/2da79ae52e7f22ab9f44aff4301ea8143cd8ff85...cff7ab8663f5e64e86279ef45973f7967e2a2b07)
### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/7d4b1f19594e199c7e7bc78f6670273c6ecb7312)
* Don't show Static IP steps in OVE below the sea (#4145) [#4145](https://github.com/openshift-assisted/assisted-installer-ui/pull/4145)
* Hide the network type control in OVE (#4143) [#4143](https://github.com/openshift-assisted/assisted-installer-ui/pull/4143)
* Add to OVE custom manifest workaround filter (#4140) [#4140](https://github.com/openshift-assisted/assisted-installer-ui/pull/4140)
* [OCPBUGS-121366](https://issues.redhat.com/browse/OCPBUGS-121366): Move IPv6 Technology Preview badge out of the header (#4138) [#4138](https://github.com/openshift-assisted/assisted-installer-ui/pull/4138)
* Update GH actions to @v7 (#4130) [#4130](https://github.com/openshift-assisted/assisted-installer-ui/pull/4130)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/b1c53f528a8219dd5660b4bc7cdc0c6429d807fa...7d4b1f19594e199c7e7bc78f6670273c6ecb7312)
### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/04d25625e8af0d2e560d586cfeb90ff799c02269)
* [OCPBUGS-137922](https://issues.redhat.com/browse/OCPBUGS-137922): Update cluster-logging and loki operator version [#362](https://github.com/openshift/agent-installer-utils/pull/362)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/449d4e9e9d2f08330d2d31ad80517caf990652c3...04d25625e8af0d2e560d586cfeb90ff799c02269)
### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/82257735dc9552a20b4e48ab86fa3963cf4e3b04)
* [OCPBUGS-104249](https://issues.redhat.com/browse/OCPBUGS-104249): Address CVE-2026-33814 [#344](https://github.com/openshift/aws-ebs-csi-driver/pull/344)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/34dbd7674b5a39e1d3c65eedfd9fab85004e2353...82257735dc9552a20b4e48ab86fa3963cf4e3b04)
### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, gcp-pd-csi-driver-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/3974a8b545f06a7f18f442cdcf472b69475d83ad)
* [OCPBUGS-126441](https://issues.redhat.com/browse/OCPBUGS-126441): openstack-manila: Consume CA cert from CCO secret [#636](https://github.com/openshift/csi-operator/pull/636)
* [Full changelog](https://github.com/openshift/csi-operator/compare/a441aefa2b3ac425dd7b68c34927bcdd66713571...3974a8b545f06a7f18f442cdcf472b69475d83ad)
### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/cbd7a43d41087a875642be71ad33ecf48e74ac7e)
* [OCPBUGS-132938](https://issues.redhat.com/browse/OCPBUGS-132938): Carry VM Reapply recovery [#416](https://github.com/openshift/cluster-api-provider-azure/pull/416)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/01c1957cacd76b4123e4b7947d2e9d208c9cd1af...cbd7a43d41087a875642be71ad33ecf48e74ac7e)
### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/75697aee19c7210714bf9c93cb7dc17da585cb3f)
* [OCPBUGS-96812](https://issues.redhat.com/browse/OCPBUGS-96812): Bump x/net to v0.60.0 [#116](https://github.com/openshift/cluster-api-provider-metal3/pull/116)
* [OCPBUGS-104273](https://issues.redhat.com/browse/OCPBUGS-104273): Bump golang.org/x/net to v0.53.0 [#108](https://github.com/openshift/cluster-api-provider-metal3/pull/108)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/18b98547b7c5635a840a5ec4449c9ef8cb6a06e9...75697aee19c7210714bf9c93cb7dc17da585cb3f)
### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/8647f26b2920740cea868af125a419d483a277b0)
* [OCPBUGS-132707](https://issues.redhat.com/browse/OCPBUGS-132707): azure: omit empty machine security profiles [#11016](https://github.com/openshift/installer/pull/11016)
* [OCPBUGS-134756](https://issues.redhat.com/browse/OCPBUGS-134756): PowerVC: fix two issues with cherry-pick 10966 [#11037](https://github.com/openshift/installer/pull/11037)
* [OCPBUGS-133316](https://issues.redhat.com/browse/OCPBUGS-133316): PowerVC: Support non admin user [#11020](https://github.com/openshift/installer/pull/11020)
* [OCPBUGS-133520](https://issues.redhat.com/browse/OCPBUGS-133520): Update RHCOS-release-5.0 bootimage metadata to 10.2.20261026-0 / 9.8.20261026-0 [#11025](https://github.com/openshift/installer/pull/11025)
* [OCPBUGS-132355](https://issues.redhat.com/browse/OCPBUGS-132355): unconfigured-ignition must include nmstateconfig.yaml when present [#11012](https://github.com/openshift/installer/pull/11012)
* [OCPBUGS-131972](https://issues.redhat.com/browse/OCPBUGS-131972): support InfraEnv AdditionalNTPSources in unconfigured-ignition [#11001](https://github.com/openshift/installer/pull/11001)
* [OCPBUGS-129582](https://issues.redhat.com/browse/OCPBUGS-129582): Removed PowerVS InstallConfig debug log statement exposing sensitive information [#10955](https://github.com/openshift/installer/pull/10955)
* [OCPBUGS-130584](https://issues.redhat.com/browse/OCPBUGS-130584): Add internalJoinSubnet to installConfigOverrides [#10968](https://github.com/openshift/installer/pull/10968)
* [Full changelog](https://github.com/openshift/installer/compare/eb06e33ff4f9c54303c6ccc243a0a1e7121285c8...8647f26b2920740cea868af125a419d483a277b0)
### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/5236c5de287346c54131d57fd359b5b4e6aa8f7a)
* [OCPBUGS-127139](https://issues.redhat.com/browse/OCPBUGS-127139): fix CVE-2026-41178 by updating otel to v1.44.0 [#1008](https://github.com/openshift/cluster-authentication-operator/pull/1008)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/f269e4bf4b133be83153f8711a991ac71e7bafc8...5236c5de287346c54131d57fd359b5b4e6aa8f7a)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/337a33b1759fdebbd7f736999cb97dd9e6195cd4)
* [OCPBUGS-137921](https://issues.redhat.com/browse/OCPBUGS-137921): Validate Provisioning fields passed to containers [#689](https://github.com/openshift/cluster-baremetal-operator/pull/689)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/20369c92cc64521d6937e926d85791fac5dd505a...337a33b1759fdebbd7f736999cb97dd9e6195cd4)
### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/2b68586f14dd1960c64798a3354797205c719b10)
* [OCPBUGS-137691](https://issues.redhat.com/browse/OCPBUGS-137691): Preserve legacy vcenters when Infra has no VCenters/FailureDomains [#534](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/534)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/0da197f80d941f537331f173bc7613d6729a2767...2b68586f14dd1960c64798a3354797205c719b10)
### [cluster-config-api](https://github.com/openshift/api/tree/70586205d5fa77e2a47a0373d1ea712c9a3e0b6a)
* [OCPBUGS-112658](https://issues.redhat.com/browse/OCPBUGS-112658): [5.0] enable DRADeviceTaintRules feature gate in TPNU/DevPreview [#3094](https://github.com/openshift/api/pull/3094)
* [OCPBUGS-130323](https://issues.redhat.com/browse/OCPBUGS-130323): Rename console ingress helper type [#3089](https://github.com/openshift/api/pull/3089)
* [Full changelog](https://github.com/openshift/api/compare/3063f49533e8e7b08a30bb68c45047c14a3b3822...70586205d5fa77e2a47a0373d1ea712c9a3e0b6a)
### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/7ceb4dd1e0da0fb6b0622642e2ec80f2121775a6)
* [OCPBUGS-104292](https://issues.redhat.com/browse/OCPBUGS-104292): Bump golang.org/x/net to v0.53.0 for CVE-2026-33814 [#527](https://github.com/openshift/cluster-config-operator/pull/527)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/66aaee528a6fa29463046e0af51336bb405b8fb8...7ceb4dd1e0da0fb6b0622642e2ec80f2121775a6)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/dc770522d0076e02bc454d4f53f4c3f8f9e2f0d6)
* [OCPBUGS-133396](https://issues.redhat.com/browse/OCPBUGS-133396): Add TNF ownership for docs/tnf [#1726](https://github.com/openshift/cluster-etcd-operator/pull/1726)
* [OCPBUGS-133381](https://issues.redhat.com/browse/OCPBUGS-133381): force installer revision when external-etcd-pod ConfigMap is created [#1738](https://github.com/openshift/cluster-etcd-operator/pull/1738)
* [OCPBUGS-114736](https://issues.redhat.com/browse/OCPBUGS-114736): [TNF] lifecycle part 2 - update setup deadlock fix & conditions cleanup [#1727](https://github.com/openshift/cluster-etcd-operator/pull/1727)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/f0587e37ea322e9277ae228335be72a5796b6b33...dc770522d0076e02bc454d4f53f4c3f8f9e2f0d6)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/84c07fda5ef3a362e894245f3634ff57cc9f0871)
* [OCPBUGS-132553](https://issues.redhat.com/browse/OCPBUGS-132553): Allow disabling endpoint address validation [#1632](https://github.com/openshift/cluster-ingress-operator/pull/1632)
* [OCPBUGS-132923](https://issues.redhat.com/browse/OCPBUGS-132923): discover AWS subnets from CAPI with MAPI fallback [#1644](https://github.com/openshift/cluster-ingress-operator/pull/1644)
* [OCPBUGS-129426](https://issues.redhat.com/browse/OCPBUGS-129426): Enable readOnlyRootFilesystem for cluster ingress components [#1610](https://github.com/openshift/cluster-ingress-operator/pull/1610)
* [OCPBUGS-131938](https://issues.redhat.com/browse/OCPBUGS-131938): [OSSM Wave 05] Bump to OSSM 3.4.3 and Istio v1.30.5 [#1625](https://github.com/openshift/cluster-ingress-operator/pull/1625)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/4ef55ea002a406a2e9193594ef583a24ddb4ff3b...84c07fda5ef3a362e894245f3634ff57cc9f0871)
### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/1ee372e7019b41fbcb4c64323142c4a06bf266d0)
* [OCPBUGS-122387](https://issues.redhat.com/browse/OCPBUGS-122387): Update build-machinery-go vendor dependency [#968](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/968)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/fdcaa390404f62f77bf2d0df0d0cd6da2f2b797d...1ee372e7019b41fbcb4c64323142c4a06bf266d0)
### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/c7596728b89d7a11750e668f8d8c801f559dfc8f)
* [OCPBUGS-135091](https://issues.redhat.com/browse/OCPBUGS-135091): Add NetworkPolicy manifests to openshift-cluster-machine-approver namespace [#348](https://github.com/openshift/cluster-machine-approver/pull/348)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/93c05fa0f59c67fdb35cd39dd55bdf8cd1f842a4...c7596728b89d7a11750e668f8d8c801f559dfc8f)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/fdd81d5b65b7f83dd3709dffa7f91845765a1369)
* [OCPBUGS-130771](https://issues.redhat.com/browse/OCPBUGS-130771): amcfg: remove client-side TLS enforcement for additional alertmanager configs [#3155](https://github.com/openshift/cluster-monitoring-operator/pull/3155)
* [OCPBUGS-129135](https://issues.redhat.com/browse/OCPBUGS-129135): don't delete admin-owned Alertmanager secrets on destroy [#3137](https://github.com/openshift/cluster-monitoring-operator/pull/3137)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/b272ab22a6cc8671e7b9f6fd0ac1c2e91940dd55...fdd81d5b65b7f83dd3709dffa7f91845765a1369)
### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/df46ddbcc728f5c8372726725f38bc289f4562a0)
* [OCPBUGS-129114](https://issues.redhat.com/browse/OCPBUGS-129114): fix(ovn-kubernetes): disable local DB probes [#3185](https://github.com/openshift/cluster-network-operator/pull/3185)
* [OCPBUGS-130581](https://issues.redhat.com/browse/OCPBUGS-130581): Added global overrides for OVN-Kubernetes [#3191](https://github.com/openshift/cluster-network-operator/pull/3191)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/f729b5d090ceeab5a2d7e3ad74387b1a1630fb89...df46ddbcc728f5c8372726725f38bc289f4562a0)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/9e8095860b2d30a6846c084e01fb2dd40335cefe)
* [OCPBUGS-114740](https://issues.redhat.com/browse/OCPBUGS-114740): E2E: Minor fixes to Memory Manager and hugepages split tests [#1622](https://github.com/openshift/cluster-node-tuning-operator/pull/1622)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/f3fb675b7b3ac7992ba3462d87f9f67336d86ba2...9e8095860b2d30a6846c084e01fb2dd40335cefe)
### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/02e1e59df526cb1e298220dbb5568e9761f37895)
* [OCPBUGS-127160](https://issues.redhat.com/browse/OCPBUGS-127160): fix CVE-2026-41178 by updating otel to v1.44.0 [#785](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/785)
* [OCPBUGS-122387](https://issues.redhat.com/browse/OCPBUGS-122387): Update build-machinery-go vendor dependency [#771](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/771)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/28420873a3c92985df8ec089e6513b16c4f2f3a0...02e1e59df526cb1e298220dbb5568e9761f37895)
### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/1749df0facdbe5a8c9661321a67d3a9a902cf202)
* [OCPBUGS-129016](https://issues.redhat.com/browse/OCPBUGS-129016): skip console plugin deployment on OCP < 5.0 [#1481](https://github.com/openshift/cluster-version-operator/pull/1481)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/df40add4381949115dd8dab476f474c44ce15b20...1749df0facdbe5a8c9661321a67d3a9a902cf202)
### [console](https://github.com/openshift/console/tree/e00ad8250392709522c6154fc07cbc281a230c1e)
* [OCPBUGS-135131](https://issues.redhat.com/browse/OCPBUGS-135131): Fix missing Impersonate action on RoleBinding detail page [#17450](https://github.com/openshift/console/pull/17450)
* [OCPBUGS-136156](https://issues.redhat.com/browse/OCPBUGS-136156): Remove incorrect msg in maintenance modal [#17461](https://github.com/openshift/console/pull/17461)
* [OCPBUGS-135090](https://issues.redhat.com/browse/OCPBUGS-135090): Remove the redundant detailsPage wrapper [#17447](https://github.com/openshift/console/pull/17447)
* [OCPBUGS-135079](https://issues.redhat.com/browse/OCPBUGS-135079): [release-5.0] Allow blob image sources in the default CSP [#17446](https://github.com/openshift/console/pull/17446)
* [OCPBUGS-133720](https://issues.redhat.com/browse/OCPBUGS-133720): Preserve revealed Secret values across page rerenders [#17436](https://github.com/openshift/console/pull/17436)
* [OCPBUGS-130325](https://issues.redhat.com/browse/OCPBUGS-130325): Show Helm nav tab regardless of HelmChartRepository/ProjectHelmChartRepository instance existence [#17383](https://github.com/openshift/console/pull/17383)
* [OCPBUGS-132337](https://issues.redhat.com/browse/OCPBUGS-132337): Restore ConfigMap and BuildConfig form view edit actions [#17400](https://github.com/openshift/console/pull/17400)
* [OCPBUGS-123725](https://issues.redhat.com/browse/OCPBUGS-123725): Fix empty vSphere connection details after upgrade [#17186](https://github.com/openshift/console/pull/17186)
* [OCPBUGS-86614](https://issues.redhat.com/browse/OCPBUGS-86614): prep for 5.0 SDK publish [#17393](https://github.com/openshift/console/pull/17393)
* [OCPBUGS-130863](https://issues.redhat.com/browse/OCPBUGS-130863): playwright test fixes + SDK publish + rename theme [#17386](https://github.com/openshift/console/pull/17386)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/28009425f828c6a82067430231ce6ce8017fff98...e00ad8250392709522c6154fc07cbc281a230c1e)
### [console-operator](https://github.com/openshift/console-operator/tree/be6cdf0e0dbdc6c1ebf8883d51439b55bc282c78)
* [OCPBUGS-130323](https://issues.redhat.com/browse/OCPBUGS-130323): Update API and client-go dependencies for Console ingress helper rename [#1245](https://github.com/openshift/console-operator/pull/1245)
* [OCPBUGS-132033](https://issues.redhat.com/browse/OCPBUGS-132033): Address review feedback on Helm CLI download descriptions [#1243](https://github.com/openshift/console-operator/pull/1243)
* [Full changelog](https://github.com/openshift/console-operator/compare/8682c553ccb55537a5457333706a26ae438eb3f9...be6cdf0e0dbdc6c1ebf8883d51439b55bc282c78)
### [coredns](https://github.com/openshift/coredns/tree/5929cdc03ef425d1db05552589cac0fd4adbd96a)
* [OCPBUGS-133771](https://issues.redhat.com/browse/OCPBUGS-133771): validate DNS requests before unpacking [#222](https://github.com/openshift/coredns/pull/222)
* [Full changelog](https://github.com/openshift/coredns/compare/bbbbf9a28f179e92c9481a2923c989ddeb84999b...5929cdc03ef425d1db05552589cac0fd4adbd96a)
### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/c3290f925e783a09e2faff9c9c470e55caa50549)
* [OCPBUGS-130795](https://issues.redhat.com/browse/OCPBUGS-130795): resolve boot disk image at reconcile time [#201](https://github.com/openshift/machine-api-provider-gcp/pull/201)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/4e309609acea989fdc9590295e56e2de0a1c6608...c3290f925e783a09e2faff9c9c470e55caa50549)
### [haproxy-router, haproxy-router-haproxy28, haproxy-router-haproxy32](https://github.com/openshift/router/tree/eb35a8aff38045e77800c8a3b10f9b3479098972)
* [OCPBUGS-132553](https://issues.redhat.com/browse/OCPBUGS-132553): Allow disabling endpoint address validation [#874](https://github.com/openshift/router/pull/874)
* [OCPBUGS-123650](https://issues.redhat.com/browse/OCPBUGS-123650): External certificate routes admit slowly at scale [#873](https://github.com/openshift/router/pull/873)
* [Full changelog](https://github.com/openshift/router/compare/a39a742e03e7be863c92c4b820025c6e0f78a7eb...eb35a8aff38045e77800c8a3b10f9b3479098972)
### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/b8b2c80fc60865caaa58f565f41d569355f124eb)
* [OCPBUGS-132930](https://issues.redhat.com/browse/OCPBUGS-132930): UPSTREAM: 140661: admission/namespace/lifecycle: allow updates to resources in deleted namespaces [#2828](https://github.com/openshift/kubernetes/pull/2828)
* [OCPBUGS-130593](https://issues.redhat.com/browse/OCPBUGS-130593): [5.0] Deflake pod resize deferred tests [#2818](https://github.com/openshift/kubernetes/pull/2818)
* [Full changelog](https://github.com/openshift/kubernetes/compare/bf3ef614b88993576f8c76728496ed0f2d61db47...b8b2c80fc60865caaa58f565f41d569355f124eb)
### [hypershift](https://github.com/openshift/hypershift/tree/45d994de5fd2836e0f098e6d704505da7b51dba3)
* [OCPBUGS-132917](https://issues.redhat.com/browse/OCPBUGS-132917): Filter nonstandard AZ subnets from AWS endpoints [#10090](https://github.com/openshift/hypershift/pull/10090)
* [OCPBUGS-136159](https://issues.redhat.com/browse/OCPBUGS-136159): Increase Cluster Autoscaler defaults to 200 QPS and 300 burst- #10006 [#10201](https://github.com/openshift/hypershift/pull/10201)
* [OCPBUGS-135943](https://issues.redhat.com/browse/OCPBUGS-135943): classify WebIdentityErr by cause to prevent false invalid creds [#10177](https://github.com/openshift/hypershift/pull/10177)
* Sync approver aliases with main for release-5.0 [#10194](https://github.com/openshift/hypershift/pull/10194)
* [OCPBUGS-129438](https://issues.redhat.com/browse/OCPBUGS-129438): fix(nodepool): rebuild CAPI selectors deterministically on reconcile [#9932](https://github.com/openshift/hypershift/pull/9932)
* [OCPBUGS-130639](https://issues.redhat.com/browse/OCPBUGS-130639): [release-5.0] fix leaked VPC endpoint and hypershift.local DNS records on AWS HC deletion [#9947](https://github.com/openshift/hypershift/pull/9947)
* [OCPBUGS-134555](https://issues.redhat.com/browse/OCPBUGS-134555): Add periodic resync and reduce backoff ceiling for HCCO resources controller [#10134](https://github.com/openshift/hypershift/pull/10134)
* [OCPBUGS-133415](https://issues.redhat.com/browse/OCPBUGS-133415): Etcd recovery on unreachable nodes [#10101](https://github.com/openshift/hypershift/pull/10101)
* [OCPBUGS-133261](https://issues.redhat.com/browse/OCPBUGS-133261): CVO upgrades stuck in Upgradeable=False (ResourceDeletesInProgress) [#10093](https://github.com/openshift/hypershift/pull/10093)
* [OCPBUGS-133307](https://issues.redhat.com/browse/OCPBUGS-133307): Manage GCP worker firewall rules in CPO [#10096](https://github.com/openshift/hypershift/pull/10096)
* [OCPBUGS-127161](https://issues.redhat.com/browse/OCPBUGS-127161): etcd initialization bugs after etcdctl snapshot restore [#9834](https://github.com/openshift/hypershift/pull/9834)
* [OCPBUGS-131061](https://issues.redhat.com/browse/OCPBUGS-131061): Fix IPv6 endpoint authorities in CPO [#10002](https://github.com/openshift/hypershift/pull/10002)
* [OCPBUGS-130868](https://issues.redhat.com/browse/OCPBUGS-130868): Preserve supplied Unmanaged etcd credentials [#9989](https://github.com/openshift/hypershift/pull/9989)
* [ACM-48074](https://issues.redhat.com/browse/ACM-48074): remove OCP 5.1 from release-5.0 supported versions [#9997](https://github.com/openshift/hypershift/pull/9997)
* [OCPBUGS-128589](https://issues.redhat.com/browse/OCPBUGS-128589): fix(api): add missing + prefix to kubebuilder annotation on networkType [#9906](https://github.com/openshift/hypershift/pull/9906)
* [OCPBUGS-127430](https://issues.redhat.com/browse/OCPBUGS-127430): [5.0] Enable DeviceTaintRule API for hosted clusters [#9914](https://github.com/openshift/hypershift/pull/9914)
* [Full changelog](https://github.com/openshift/hypershift/compare/449f32ab51795e584f7cbc80653e5b4f1424b29c...45d994de5fd2836e0f098e6d704505da7b51dba3)
### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/2382f03fcd576f84827d91a72798af01912663f8)
* [OCPBUGS-131837](https://issues.redhat.com/browse/OCPBUGS-131837): disable snapshot tests for ibm-vpc-block-csi-driver [#201](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/201)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/6f252012da7f6f27a08af2aae531288dbf871d15...2382f03fcd576f84827d91a72798af01912663f8)
### [insights-operator](https://github.com/openshift/insights-operator/tree/63f2a9615b4c49a07da42db1ce713c7154261504)
* [OCPBUGS-123492](https://issues.redhat.com/browse/OCPBUGS-123492): gather InferenceService from the KServe operator [#1366](https://github.com/openshift/insights-operator/pull/1366)
* [OCPBUGS-132682](https://issues.redhat.com/browse/OCPBUGS-132682): add CVO annotations to secret gatherer RBAC- #1399 [#1404](https://github.com/openshift/insights-operator/pull/1404)
* [OCPBUGS-130926](https://issues.redhat.com/browse/OCPBUGS-130926): add permissions to fetch MaasModelRefs [#1391](https://github.com/openshift/insights-operator/pull/1391)
* [Full changelog](https://github.com/openshift/insights-operator/compare/7eb596a73b1e6f1c15fadc3c98078ddca6530a0a...63f2a9615b4c49a07da42db1ce713c7154261504)
### [ironic](https://github.com/openshift/ironic-image/tree/8369803c4df5bb9ac004d63f26579e9d3c3e40d1)
* [OCPBUGS-130800](https://issues.redhat.com/browse/OCPBUGS-130800), [OCPBUGS-130831](https://issues.redhat.com/browse/OCPBUGS-130831): Bump urllib3 to 2.8.0 with hatchling fix for CVE-2026-97687,CVE-2026-97689 [#935](https://github.com/openshift/ironic-image/pull/935)
* [OCPBUGS-129567](https://issues.redhat.com/browse/OCPBUGS-129567): Lenovo hardware gets stuck on rebooting [#928](https://github.com/openshift/ironic-image/pull/928)
* [Full changelog](https://github.com/openshift/ironic-image/compare/cde72492a445bdfdbc36cb5c15b869c76dedef60...8369803c4df5bb9ac004d63f26579e9d3c3e40d1)
### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/5c817b4d048c2c0ea5c24e568bbc6e5687f72717)
* [OCPBUGS-130799](https://issues.redhat.com/browse/OCPBUGS-130799), [OCPBUGS-130830](https://issues.redhat.com/browse/OCPBUGS-130830): Bump urllib3 to 2.8.0 (CVE-2026-97689, CVE-2026-97687) [#326](https://github.com/openshift/ironic-agent-image/pull/326)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/601c9bf36bbc4a0796c4c55e59bfe3cc46252ed3...5c817b4d048c2c0ea5c24e568bbc6e5687f72717)
### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/14b6905aa3accb8bb16cd92f3438a9868597bd52)
* [OCPBUGS-129323](https://issues.redhat.com/browse/OCPBUGS-129323): Address CVE-2026-84304 [#176](https://github.com/openshift/kube-rbac-proxy/pull/176)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/2f8a556d09638faeb09b366e95ecb75279ce7c8a...14b6905aa3accb8bb16cd92f3438a9868597bd52)
### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/87fa52c72bb3245c90ba1dc3b0e3c02224c6b27b)
* [OCPBUGS-104371](https://issues.redhat.com/browse/OCPBUGS-104371): Bump golang.org/x/net to v0.55.0 to address CVE-2026-33814 [#258](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/258)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/236d1d76ab05fe757b53e722d10a0a920c1d49fd...87fa52c72bb3245c90ba1dc3b0e3c02224c6b27b)
### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/1dcf1ec97896555d9cf2594c638d8779692e29e0)
* [OCPBUGS-104361](https://issues.redhat.com/browse/OCPBUGS-104361): Fix CVE-2026-33814 - bump golang.org/x/net to sustaining fork v0.50.0-sec.4 [#101](https://github.com/openshift/cloud-provider-kubevirt/pull/101)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/b15ad4848697562553150b0c7474004462fceab1...1dcf1ec97896555d9cf2594c638d8779692e29e0)
### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/fcb64975b70e848f193ffd8e9beb1b2a413d84d1)
* [OCPBUGS-130795](https://issues.redhat.com/browse/OCPBUGS-130795): remove GCP boot disk image defaulting from admission webhook [#1582](https://github.com/openshift/machine-api-operator/pull/1582)
* [OCPBUGS-130795](https://issues.redhat.com/browse/OCPBUGS-130795): add RBAC for GCP boot image resolution [#1581](https://github.com/openshift/machine-api-operator/pull/1581)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/e700e7607f66e0ac74db3328955fe7d91dc4839d...fcb64975b70e848f193ffd8e9beb1b2a413d84d1)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/0e5e436ae771980e0a2c9f03aaf2446c76f8666f)
* [OCPBUGS-135085](https://issues.redhat.com/browse/OCPBUGS-135085): Replace wildcard permissions with explicit verbs in MachineOSBuilder ClusterRole [#6697](https://github.com/openshift/machine-config-operator/pull/6697)
* [OCPBUGS-136379](https://issues.redhat.com/browse/OCPBUGS-136379): Render waits for sub-controllers MCs [#6708](https://github.com/openshift/machine-config-operator/pull/6708)
* [OCPBUGS-132755](https://issues.redhat.com/browse/OCPBUGS-132755): Handle restrictive policies for layered OS updates [#6688](https://github.com/openshift/machine-config-operator/pull/6688)
* [OCPBUGS-134739](https://issues.redhat.com/browse/OCPBUGS-134739): Fix MCN stale current config edge case [#6693](https://github.com/openshift/machine-config-operator/pull/6693)
* [OCPBUGS-133366](https://issues.redhat.com/browse/OCPBUGS-133366): Add `machineconfignode`, `pinnedimageset`, `machineosconfig`, `machineosbuild`, and `osimagestream` resources to `relatedObjects` [#6680](https://github.com/openshift/machine-config-operator/pull/6680)
* [OCPBUGS-133334](https://issues.redhat.com/browse/OCPBUGS-133334): stabilize test 66436 - disable weak SSH cipher suites [#6678](https://github.com/openshift/machine-config-operator/pull/6678)
* [OCPBUGS-131014](https://issues.redhat.com/browse/OCPBUGS-131014): MCD fails to rollback from OCL to stock RHCOS when extensions are installed [#6654](https://github.com/openshift/machine-config-operator/pull/6654)
* [OCPBUGS-127483](https://issues.redhat.com/browse/OCPBUGS-127483): Split wait-for-ipsec-connect into two services to avoid ipsec restart [#6583](https://github.com/openshift/machine-config-operator/pull/6583)
* [OCPBUGS-132359](https://issues.redhat.com/browse/OCPBUGS-132359): only enable signed policy when testing … [#6667](https://github.com/openshift/machine-config-operator/pull/6667)
* [OCPBUGS-131619](https://issues.redhat.com/browse/OCPBUGS-131619): Increase timeout for `ImagePulledFromRegistry=Unknown` transition in ImageModeStatusReporting test [#6660](https://github.com/openshift/machine-config-operator/pull/6660)
* [OCPBUGS-130888](https://issues.redhat.com/browse/OCPBUGS-130888): Update cleanup for test `PolarionID:84219` to wait for node to be removed [#6653](https://github.com/openshift/machine-config-operator/pull/6653)
* [OCPBUGS-128536](https://issues.redhat.com/browse/OCPBUGS-128536): Revert "OCPBUGS-91746: temporarily remove sandboxed-containers from extensions test" and "OCPBUGS-91746: Remove sandboxed-containers (kata-containers) from extended-priv tests" [#6597](https://github.com/openshift/machine-config-operator/pull/6597)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/e3f6479a979898937cce9cbebf428823dae249fb...0e5e436ae771980e0a2c9f03aaf2446c76f8666f)
### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/3f924d990f3f4666ed7bb9d2fb448888aa7c9a7a)
* NO-JIRA: automation monitoring-dev fix [#1414](https://github.com/openshift/monitoring-plugin/pull/1414)
* [OU-1589](https://issues.redhat.com/browse/OU-1589): [release-5.0] sanitize linkified URLs in alert annotations [#1383](https://github.com/openshift/monitoring-plugin/pull/1383)
* [OCPBUGS-132867](https://issues.redhat.com/browse/OCPBUGS-132867): fix metrics series color squares [#1375](https://github.com/openshift/monitoring-plugin/pull/1375)
* [OU-1392](https://issues.redhat.com/browse/OU-1392): [release-5.0] fix: parse datetime ranges from the specified format rather than browser specific apis [#1348](https://github.com/openshift/monitoring-plugin/pull/1348)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/bde909332b62f154573dcf93dcf206f05c0dfd27...3f924d990f3f4666ed7bb9d2fb448888aa7c9a7a)
### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/d91e805c0c768b23b71de8e4cea8c4128cafc067)
* maintenance: Bump the npm group with 70 updates [#660](https://github.com/openshift/networking-console-plugin/pull/660)
* [OCPBUGS-135361](https://issues.redhat.com/browse/OCPBUGS-135361): removed clearing of spec.selector/ports on switch to ExternalName service type [#653](https://github.com/openshift/networking-console-plugin/pull/653)
* [OCPNETUI-168](https://issues.redhat.com/browse/OCPNETUI-168): Update Owners file [#645](https://github.com/openshift/networking-console-plugin/pull/645)
* maintenance: Bump the npm group with 32 updates [#638](https://github.com/openshift/networking-console-plugin/pull/638)
* [OCPNETUI-183](https://issues.redhat.com/browse/OCPNETUI-183): migrate to @kubevirt-ui-ext/kubevirt-api [#627](https://github.com/openshift/networking-console-plugin/pull/627)
* Reset form state using correct default values [#625](https://github.com/openshift/networking-console-plugin/pull/625)
* maintenance: Bump the npm group with 23 updates [#622](https://github.com/openshift/networking-console-plugin/pull/622)
* maintenance: Bump the npm group with 20 updates [#599](https://github.com/openshift/networking-console-plugin/pull/599)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/567d89b0d3e357b43733ce4c4cb67cd33137ae13...d91e805c0c768b23b71de8e4cea8c4128cafc067)
### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/d7210a22725ec41f3d15b3bf0fb402b4bc50eb48)
* [OCPBUGS-115299](https://issues.redhat.com/browse/OCPBUGS-115299): fix CVE-2026-41178 by bumping otel to v1.44.0 [#227](https://github.com/openshift/oauth-apiserver/pull/227)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/a59e07d789b5a2531e94053cfe7c53edde90e931...d7210a22725ec41f3d15b3bf0fb402b4bc50eb48)
### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/15cb0c0f27a03f6049df72e2b17907575d2b7737)
* [OCPBUGS-136597](https://issues.redhat.com/browse/OCPBUGS-136597): [release-5.0] Sync OWNERS and OWNERS_ALIASES with master [#409](https://github.com/openshift/oauth-proxy/pull/409)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/f4fb9013872724cf5ab5874904dcc41b40b48c66...15cb0c0f27a03f6049df72e2b17907575d2b7737)
### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/5bbe8e7ad5451909ad22caaa9e5d2a98840b468e)
* [OCPBUGS-127175](https://issues.redhat.com/browse/OCPBUGS-127175): update otel to 1.44.0 to fix CVE-2026-41178 [#689](https://github.com/openshift/openshift-apiserver/pull/689)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/ab0315228cde432c8cd62df012b791a66a72c7b3...5bbe8e7ad5451909ad22caaa9e5d2a98840b468e)
### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/24da765b7f06cec8ba36fffa68d11b500e81f8bd)
* NO-ISSUE: synchronize OWNERS from main branch [#145](https://github.com/openshift/openshift-state-metrics/pull/145)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/e2b0875109bf6b4c1dd5695c7afc0324669be0b4...24da765b7f06cec8ba36fffa68d11b500e81f8bd)
### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/e77483b082e5e77ffc2276d5a68e8c865ab245a8)
* [OCPBUGS-104396](https://issues.redhat.com/browse/OCPBUGS-104396): Replace golang.org/x/net with openshift-sustaining/net v0.50.0-sec.4 for CVE-2026-33814 [release-5.0] [#436](https://github.com/openshift/cluster-api-provider-openstack/pull/436)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/9f64446f441ff7bcebd123a0dc35d4156c309681...e77483b082e5e77ffc2276d5a68e8c865ab245a8)
### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/0b4a6d1ac12fe27b56392263291e0efd93db7791)
* [OCPBUGS-104369](https://issues.redhat.com/browse/OCPBUGS-104369): Fix CVE-2026-33814 - bump golang.org/x/net to v0.53.0 [#196](https://github.com/openshift/machine-api-provider-openstack/pull/196)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/52fb27200e4f95c0faf8b6472c81382e9d3b728c...0b4a6d1ac12fe27b56392263291e0efd93db7791)
### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/61311618b07654231c15a52c66070b121436aa50)
* [OCPBUGS-135357](https://issues.redhat.com/browse/OCPBUGS-135357): Drop hard coded upgradeable 4.23 or 5.0 [#1400](https://github.com/openshift/operator-framework-olm/pull/1400)
* [OCPBUGS-129498](https://issues.redhat.com/browse/OCPBUGS-129498): Restore registry-server startup probe FailureThreshold to 15 [release-5.0] [#1386](https://github.com/openshift/operator-framework-olm/pull/1386)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/c3d56d2021bbb8d57bc359fabded3b35b253f55e...61311618b07654231c15a52c66070b121436aa50)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/1e8e04173ca26331e78dc691210cbba5d3ed44c6)
* [OCPBUGS-135003](https://issues.redhat.com/browse/OCPBUGS-135003): Remove isEmptyStatusManagedField restriction from startup cleanup [#3584](https://github.com/openshift/ovn-kubernetes/pull/3584)
* [OCPBUGS-133284](https://issues.redhat.com/browse/OCPBUGS-133284): Add arkadeepsen, martinkennelly and pperiyasamy to OWNERS file [#3573](https://github.com/openshift/ovn-kubernetes/pull/3573)
* [OCPBUGS-131017](https://issues.redhat.com/browse/OCPBUGS-131017): [release-5.0] node: prioritize default network before primary UDN fan-out [#3542](https://github.com/openshift/ovn-kubernetes/pull/3542)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/42d40a0557e403ca93f7ae90b63dd3827c513f0b...1e8e04173ca26331e78dc691210cbba5d3ed44c6)
### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/6d3a937daed1376828643ba754aed6cc6e620da5)
* [OCPBUGS-101735](https://issues.redhat.com/browse/OCPBUGS-101735), [OCPBUGS-104397](https://issues.redhat.com/browse/OCPBUGS-104397), [OCPBUGS-109539](https://issues.redhat.com/browse/OCPBUGS-109539), [OCPBUGS-96858](https://issues.redhat.com/browse/OCPBUGS-96858): Bump x/net and otel to address CVEs [#153](https://github.com/openshift/machine-api-provider-powervs/pull/153)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/693963340a62fc986c8de5d4de76ff9fd66a53ae...6d3a937daed1376828643ba754aed6cc6e620da5)
### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/a66f3a8975d843f9a2dbee434833821190e1752e)
* NO-ISSUE: synchronize OWNERS from main branch [#411](https://github.com/openshift/prometheus-operator/pull/411)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/67895c7c968f42e97efec58f4140fffae4832028...a66f3a8975d843f9a2dbee434833821190e1752e)
### [stream-coreos, stream-coreos-extensions](https://github.com/openshift/os/tree/7324ccd30e5b2b3146639cb610bfe92c743c91a1)
* [OCPBUGS-115309](https://issues.redhat.com/browse/OCPBUGS-115309): Re-enable sandboxed-containers extension for 5.0 [#1965](https://github.com/openshift/os/pull/1965)
* [Full changelog](https://github.com/openshift/os/compare/d2f3751e77c4b79b1553d18758c2ea91f06f51fc...7324ccd30e5b2b3146639cb610bfe92c743c91a1)
### [tests](https://github.com/openshift/origin/tree/d4707bc839019f69ab1d95ae92a7aa68968fd29a)
* [OCPBUGS-129437](https://issues.redhat.com/browse/OCPBUGS-129437): Increase timeout for external IP policy test to accommodate in-cluster rollouts [#31718](https://github.com/openshift/origin/pull/31718)
* [OCPBUGS-133005](https://issues.redhat.com/browse/OCPBUGS-133005): Further optimize oc must gather tests to improve efficiency [#31798](https://github.com/openshift/origin/pull/31798)
* [OCPBUGS-130586](https://issues.redhat.com/browse/OCPBUGS-130586): e2e-analysis: add --skip-readiness-checks flag for degraded cluster lanes [#31727](https://github.com/openshift/origin/pull/31727)
* [OCPBUGS-132902](https://issues.redhat.com/browse/OCPBUGS-132902): Allow etcd probe error due to tls config change [#31796](https://github.com/openshift/origin/pull/31796)
* [NETOBSERV-2563](https://issues.redhat.com/browse/NETOBSERV-2563): Add network observability e2e tests with disconnected skips [#31772](https://github.com/openshift/origin/pull/31772)
* [OCPBUGS-132327](https://issues.redhat.com/browse/OCPBUGS-132327): make webhook build resolution wait phase-independent [#31774](https://github.com/openshift/origin/pull/31774)
* [OCPBUGS-131833](https://issues.redhat.com/browse/OCPBUGS-131833): Handle offline or removed nodes in TNF replacement test [#31725](https://github.com/openshift/origin/pull/31725)
* [OCPBUGS-112658](https://issues.redhat.com/browse/OCPBUGS-112658): allow v1beta2 DRA API in discovery test [#31728](https://github.com/openshift/origin/pull/31728)
* [Full changelog](https://github.com/openshift/origin/compare/85031f79aef4e26808f9358f78766c75fea4f9a7...d4707bc839019f69ab1d95ae92a7aa68968fd29a)
### [thanos](https://github.com/openshift/thanos/tree/2c1599d96f7eb74531f883dde971e208de0f64b8)
* [OCPBUGS-129060](https://issues.redhat.com/browse/OCPBUGS-129060): Bump github.com/klauspost/compress to fix CVE-2026-63209 [#226](https://github.com/openshift/thanos/pull/226)
* [Full changelog](https://github.com/openshift/thanos/compare/d0cde96c8decc617bbb4b221741d659cb09dc183...2c1599d96f7eb74531f883dde971e208de0f64b8)
### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/ada5a04b9f6696da747254a5e98aec496e0fbf7c)
* [OCPBUGS-132740](https://issues.redhat.com/browse/OCPBUGS-132740): Skip node checks for non-vSphere nodes [#251](https://github.com/openshift/vsphere-problem-detector/pull/251)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/14a2d33817c1ddd1d753cc76decea059376e30c9...ada5a04b9f6696da747254a5e98aec496e0fbf7c)