# 5.0.0-okd-scos.ec.5

Created: 2026-07-13 15:14:26 +0000 UTC

Image Digest: `sha256:b7c575489b5bf92f01dcad057d9ece2eb6fe84bd0cbc13d40bc1f773199478a5`

Promoted from registry.ci.openshift.org/origin/release-scos:5.0.0-0.okd-scos-nightly-2026-07-13-101154


## Changes from 5.0.0-okd-scos.ec.4

### Components

* Kubectl 1.35.2
* Kubernetes 1.35.3
* Kubernetes Tests 1.35.1
* CentOS Stream CoreOS 10 upgraded from 10.0.20260614-0 to 10.0.20260702-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | OKD<br/>Hypershift | OKD<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---:  |
| VSphereMixedNodeEnv <br/> (0 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled |
| ExternalOIDCExternalClaimsSourcing <br/> (0 tests)| Disabled| Disabled| Enabled| Enabled| Disabled| Disabled| Enabled<br/>(Changed)| Enabled<br/>(Changed) |
| AuthenticationComponentProxy <br/> (0 tests)|  |  |  | Enabled<br/>(New)|  |  |  | Enabled<br/>(New) |
| IngressComponentRouteLabels <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)|  |  | Enabled<br/>(New)| Enabled<br/>(New) |
| IngressControllerMultipleHAProxyVersions <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)|  |  | Enabled<br/>(New)| Enabled<br/>(New) |
| KarpenterOperator <br/> (0 tests)|  |  |  | Enabled<br/>(New)|  |  |  |   |


### New images

* [installer-etcd-artifacts](https://github.com/openshift/etcd) git [bf6c0094](https://github.com/openshift/etcd/commit/bf6c0094589afdf6c814a28c24f8f1bb5a577816) `sha256:2e9bb10956454e7180f411f88a976b09ef83847450e58e41b9032eb679c31163`
* [installer-kube-apiserver-artifacts](https://github.com/openshift/kubernetes) git [a466682e](https://github.com/openshift/kubernetes/commit/a466682e3867da746be24d7d56c6641612721d6c) `sha256:fac12f13b01a0692eb292e4e250d2aef2a8685602f982e0623b8dad79980770b`


### Rebuilt images without code change

* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [8264c02d](https://github.com/openshift/apiserver-network-proxy/commit/8264c02deda9abb6cd9a6a5c23305428431473c2) `sha256:25ce494d4a94b2e33ec75442a16dd52f77f5ee78eb8405c182bdf2ae46d090b9`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [5060934b](https://github.com/openshift/cloud-provider-aws/commit/5060934bc9ff325acf4bd0728bf37166255a501f) `sha256:d9f27857c6033ff832889adff176e8938f2bbb698c83385d023f3d5369c93a4e`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [8b8c4cef](https://github.com/openshift/aws-ebs-csi-driver/commit/8b8c4cef02ec9b670e2709f2aacc0ed72420be90) `sha256:569a0af1ef89b84920e4dffc33ff02234e64d60556ef53cd6ac860df4776f5c6`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [6ca6eea2](https://github.com/openshift/aws-encryption-provider/commit/6ca6eea2f3a9d0b090ff63ba5b8e342d5686c9a8) `sha256:84cb4a10af722156e1cd7b44d42fb6d20295ccd131080f838e60796faa32acd9`
* [aws-node-termination-handler](https://github.com/openshift/aws-node-termination-handler) git [e4ff2aae](https://github.com/openshift/aws-node-termination-handler/commit/e4ff2aaec292db42de9f3eef4908ba1c421a2a6c) `sha256:3885eb646f32c66710911228c6b542fafb42d098d558f0479c053e0e03336a4e`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [52af3f1a](https://github.com/openshift/cluster-api-provider-azure/commit/52af3f1a3ecffec69c621e80bc80adf67ecec7c0) `sha256:a4d951b39445387cb34b1616bf32ab3500ff2b636cd6776528106e3b930b5bbd`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [ca3d747d](https://github.com/openshift/azure-kubernetes-kms/commit/ca3d747de321b88a2c606e546851d1841d2fab9f) `sha256:ddbd33d6d70373a4ea9e64eb6545cc245f3199c3f0ef62bedd1c5a216faeb85b`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [bb01d0df](https://github.com/openshift/machine-api-provider-azure/commit/bb01d0dfee4abfe7274ff96cba280ad81ad99936) `sha256:3822bec73cdeba7e69f6d9b715e31d6f98573296cee043b8ddb068b8a0d65731`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [0611cd27](https://github.com/openshift/azure-service-operator/commit/0611cd27b9eaa4a1fa8e0ab8ddc85352a61903e0) `sha256:755ce4f7a33285e98bd25d2ee8d2eb79e8f8123ecd4fe9c068f2b6c0991f66bf`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [29a96694](https://github.com/openshift/cluster-api-provider-metal3/commit/29a96694bfc3b59d1fa95acf2ad87077cc1d3108) `sha256:3c3217feffe56fdfdf5aa2b2c4ef64bb4cc778b26802705ba70ce0a4412a2a5c`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [f2b0db19](https://github.com/openshift/cluster-api-provider-baremetal/commit/f2b0db1919fff1344bc68948894c6775c0bf24a3) `sha256:4e0caa122cddfbeb30f9851e8558279a2c77ee2d70e6fd297c06bb8101edc481`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [5d3be939](https://github.com/openshift/baremetal-operator/commit/5d3be9399c46e8789a6e735672c5fb7abc4b46bd) `sha256:dd016c21d3f2ae2cb5b9b98401119e68af7927865663939a189124320ddfb353`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [079091da](https://github.com/openshift/baremetal-runtimecfg/commit/079091da0e619331ec79b87e466781efe2445411) `sha256:57b8811dfe034b767e1aee313571dd7fcaae79722b85b1b60c69e858158bfdd1`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [0b49df2b](https://github.com/openshift/cloud-network-config-controller/commit/0b49df2bc4b10110463f1aa2a5fc475ebaeef9ab) `sha256:ab446440739be935aea0f35a4f96a17cba942fa3a34051bb837c38b616cd6c5d`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [f8fc286e](https://github.com/openshift/cluster-autoscaler-operator/commit/f8fc286e8fe102766b191410e66dfc2554bbe17f) `sha256:c92b4fefb5e3b59c00e5afd4412a6abdbbc3a4c43090d6601c45f635aaf5efc1`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [7b1593a4](https://github.com/openshift/cluster-bootstrap/commit/7b1593a47898b6a97dc457efaca464624e9f2afa) `sha256:ab6ccaf19614cf0409cce20e8dc1edc1cece654b884d65680a02679a159e6533`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [1ae3f157](https://github.com/openshift/cluster-machine-approver/commit/1ae3f157b88c167a7dbe06c36d6e55a82f7fd4f0) `sha256:bcea4ef8cb2bc1e3ddfde2652719823437aa005a9ab96b6e2a04c2befe93dcab`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [79538421](https://github.com/openshift/cluster-olm-operator/commit/795384212aa1ec66d3c176b33bd7ecc6a38fd560) `sha256:e9f612bf9a0b663e5f41a0d53b4bf133abc7f0baafc2ca2f39316d7770beb880`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [34f95b07](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/34f95b07f4afbc47558e54e4fa2710fd692e615e) `sha256:4686a7f27642c95f528cdfc9be9b9ca1a0326cba038d1d0b5423d2bfa6b9c782`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [050c1ee6](https://github.com/openshift/cluster-policy-controller/commit/050c1ee6aeb0838daf75858fd853cca1e0098fa9) `sha256:1b5e6b7d7f6c13f26f94ec66a1a34e1988bc1752fccd411e6f256e874f5e8ba1`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [eee95bab](https://github.com/openshift/cluster-samples-operator/commit/eee95babd52053191e29355108f7daf149dfbf8f) `sha256:f6eac94d7c031fd6af9e020ce705c650ebf2e35acd97c71470221ab02e5d839f`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [9607604d](https://github.com/openshift/cluster-update-keys/commit/9607604d35acee234051bd0da8a14321b4edd38e) `sha256:5a4e1eac109d132a25b6d79ef515e9657054db05b7d909c575fc546789a51f76`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [ce80869a](https://github.com/openshift/configmap-reload/commit/ce80869a83b55ebbdc21a5550ec5747645203bd2) `sha256:05bca1e329c35c0fcb7b371b354899e9ff89d56d271947c6da0b940b89ce5976`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [d6f73950](https://github.com/openshift/containernetworking-plugins/commit/d6f73950658d258e0ddbf2a4ac92e13ac840158b) `sha256:ec4f87aecf3ffc94e87e5463cfb774e9f306a94e2eedd4af9c75c8a6107a7622`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [d6f73950](https://github.com/openshift/containernetworking-plugins/commit/d6f73950658d258e0ddbf2a4ac92e13ac840158b) `sha256:8b88c7e8024584946128f62d85c5d1279b4ef4edd0bf893888ec3c241954bd97`
* [coredns](https://github.com/openshift/coredns) git [97f7cc32](https://github.com/openshift/coredns/commit/97f7cc327ab5df7d6da38137b7be338efa9a3551) `sha256:063098151ad0eb47178839a741507f7fcb1b8ff201bbbb62c37522638fb06489`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [f8bb5994](https://github.com/openshift/cloud-provider-openstack/commit/f8bb5994f3cee8ee2bb5cca25e3e9783ad7dd57c) `sha256:3d0adbb505ddec91fc5436501dac67a108b4e6d65dec1187a3f5d5367b3af217`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [a40a98e2](https://github.com/openshift/csi-driver-nfs/commit/a40a98e2027a63e2a8ddd3589ee3c5142104dbd6) `sha256:98a77202a9d5957492387711609d5113073b894fdb310fb23204d5f9936ec8e8`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [96ebfa73](https://github.com/openshift/csi-external-attacher/commit/96ebfa733c06c3398555d164c788e310908fecf6) `sha256:5d91f233a6aaa35a78a39e4ba009130ede5c91f90fc6eb809e826406f74fecda`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [bdf440fa](https://github.com/openshift/csi-external-provisioner/commit/bdf440fab8a48e4b76cf0902ad5ba17a20881a8b) `sha256:92d82742fadc6ab8168cfca3e0999a5a9d45dabe9babf20d6a583d3123abeee3`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [c608adfc](https://github.com/openshift/csi-external-resizer/commit/c608adfc7e82c7c59221bb9d22642a1902cace43) `sha256:17bdd09b0488b791fcc3282d158eab96e36195ba91c222824a87fbd23e4f83f1`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [239703c6](https://github.com/openshift/csi-external-snapshot-metadata/commit/239703c637e005cf785892d214d219add70e3533) `sha256:3621d6a87c08ff01b4031ba7388126239127ee4452254616be8d79c34558b7de`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [f649d2c7](https://github.com/openshift/csi-livenessprobe/commit/f649d2c76f2484b73c70007801eb81ab4be63635) `sha256:7b38ac01bbf5d68371c82e6e3063440033f70b1498c6a9680711bc020d03fc79`
* [docker-builder](https://github.com/openshift/builder) git [2cda03a9](https://github.com/openshift/builder/commit/2cda03a93696d4620703848471b3b873b0b2fa1e) `sha256:294486e3659c5ab63606ea625f8c376e375223b52eee0238d3ec252717bf4c13`
* [etcd](https://github.com/openshift/etcd) git [bf6c0094](https://github.com/openshift/etcd/commit/bf6c0094589afdf6c814a28c24f8f1bb5a577816) `sha256:b3e39ec9edaa2341c242c4a6e46a7021f002098c6743023c1e1abf97176ca1fa`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [1a542ecb](https://github.com/openshift/cloud-provider-gcp/commit/1a542ecb49b1b26ea7ecd6344a9ebe7dbe09b6b6) `sha256:fd8c40e0cb57513100e8abb3a493b98d29a35d593395e6881ddc828b62ed72ba`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [ffbf9c2a](https://github.com/openshift/cluster-api-provider-gcp/commit/ffbf9c2a410aa425c29c4628fa250d2e949b6876) `sha256:abe3d142201c86fa16b6efe8c3e73889c2b5f5681db762051bb0df86bc50a2f5`
* [hyperkube](https://github.com/openshift/kubernetes) git [a466682e](https://github.com/openshift/kubernetes/commit/a466682e3867da746be24d7d56c6641612721d6c) `sha256:1a6eee109ebc548b8d37f45418fd7436e27c0985d11f08eca53d9f3f1c0c6f55`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [ef8fcc28](https://github.com/openshift/cloud-provider-ibm/commit/ef8fcc288d9248cd149f181e7f5c896f4a10eb3b) `sha256:633c3a2c83ce36f6ba450614f285a0612cfce545e23c6ed32f4a618002e270d4`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [f78abbb3](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/f78abbb3502a875b7ddf769cf6b7c1b8e3ebba29) `sha256:9e977f88b5389a89ce2d29696e4009f8c2dc11e63101d84a7836d17ec4696150`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [e6d299f7](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/e6d299f720a76dd25fcdc304d408f43c33a42fb6) `sha256:d11bc47bd1043f985f1b1c203e0f9ecdf0d45597fe570bd7df6298d43b5ce002`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [0fdc00b1](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/0fdc00b1c1f411da3c385e27e63d909761ad1aa9) `sha256:d46a023fe3058cf2d4a97fd323d51f36a4e1f813b7cd7d5f5d702ad67d0aa9a1`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [80a91b3f](https://github.com/openshift/machine-api-provider-ibmcloud/commit/80a91b3fb96a4fb74ed03e895d617b462ad21db2) `sha256:3a773379706d29cf6ebc2aa39b83ada2fb6037c3d14e8634b02ad65ba86bc946`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [ce30b4f9](https://github.com/openshift/insights-runtime-extractor/commit/ce30b4f9bc3ec867b976886a5207d36c50a396d9) `sha256:b6646fdb1274158d9b2e45ba3d9017ff99fd59957918d8836e0ac358ceece56d`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [ce30b4f9](https://github.com/openshift/insights-runtime-extractor/commit/ce30b4f9bc3ec867b976886a5207d36c50a396d9) `sha256:436c7cc00e62d43e6b514026a7972ad9265cae49be25d8fa9c09c9e9474a657c`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [f8e41b2e](https://github.com/openshift/ironic-rhcos-downloader/commit/f8e41b2ed8915474a99e3eb34b54692afb0611da) `sha256:4d15673a0f21703bcbccda6282b7c34e630ecec9e0732435531a2155b14fbabd`
* [kube-proxy](https://github.com/openshift/kubernetes) git [a466682e](https://github.com/openshift/kubernetes/commit/a466682e3867da746be24d7d56c6641612721d6c) `sha256:c88c5ad3e84c5e769a603a3a8d37caf3fc4e581b77617c7b208f7eb185bcc5bf`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [b5df9039](https://github.com/openshift/kube-state-metrics/commit/b5df90392fbb08eb4c48e8a07f35b34a4c846312) `sha256:4839ac97e9b3837804b5865b4f780512f6f13ae75b809edd09659ab7312ba6f3`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [72835e43](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/72835e43c7754356645e41031f3a99926b4d42e6) `sha256:fb31294ff585995c8c9f6db888c58962c215af64029da7935a7bc507e104ecc4`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [76dd5a6f](https://github.com/openshift/cloud-provider-kubevirt/commit/76dd5a6fa9e86573bf3dfb79be17edf832e3bae1) `sha256:3a89792aba477e40b4c424398c9a2788233968be49da7867aadb6b865115b540`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [7ff99994](https://github.com/openshift/kubevirt-csi-driver/commit/7ff99994ecc3a675fac6f9aa7fa418cdb0dca32b) `sha256:e3fd10eccc9ecb1785cf859de85ff57d7370ed35d4a2cb513ef704254a1dc94c`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [7a348422](https://github.com/openshift/image-customization-controller/commit/7a348422137de33a9bfa6368b3797686ff4e8f98) `sha256:5b7e9d5cfdb77b4b81e5f220bfcc932a95ace16458eb35ff20c798181c2ab833`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [4bb2e206](https://github.com/openshift/multus-admission-controller/commit/4bb2e2069c3e4f11fbc4c1befd6dc1c41fa802b7) `sha256:0c845c96bf722187cd38cc610cc8a90928e38f9e4eedb835556c68030d19e294`
* [multus-cni](https://github.com/openshift/multus-cni) git [b4ec7d82](https://github.com/openshift/multus-cni/commit/b4ec7d8239ce4bd3ed949bce9816a013377b44c7) `sha256:f2e17bec4054a9c288ccee7be3df950f9dda8281931aa4169c9c44914757a745`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [b4ec7d82](https://github.com/openshift/multus-cni/commit/b4ec7d8239ce4bd3ed949bce9816a013377b44c7) `sha256:e79ffd239aec05b3b9691fbce37106db53b8b0e32126b02d48c0f1c60e4a3e42`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [932bdaa4](https://github.com/openshift/multus-networkpolicy/commit/932bdaa4250d0a1db41a1a1fcac8192f2757211c) `sha256:c44bc59e70e350b169f85e5f2339e4c7651ffc654f8d07fb597cb5b9ca468aaf`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [08af4127](https://github.com/openshift/route-override-cni/commit/08af4127c77976510cad1c096d9aca977d8ae5af) `sha256:e9328e2a35e020ae6e22aecc3367e90261b968e43752f6670b05b0f4a2198be0`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [d691040e](https://github.com/openshift/whereabouts-cni/commit/d691040e509bb20c26b5e8366c0d6f3bb45a5e02) `sha256:8018414189c388e3a7f8dc96af4e5623324134b6a3f92d493a44385cd28fb194`
* [must-gather](https://github.com/openshift/must-gather) git [16ac27ee](https://github.com/openshift/must-gather/commit/16ac27eedcc79f5b57d77eb01e6b187b84fe7daa) `sha256:729a0b5cff315f58d970d76b2dc6a3e77ae17b1185dfce5ee09d00e920371ec0`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [5b233ea1](https://github.com/openshift/network-metrics-daemon/commit/5b233ea1d80733c1b00c6bad65dec0620dbf783a) `sha256:584f962875c863a28514f54e8be929969561e099f2fc5f8a2b03087661b0e235`
* [network-tools](https://github.com/openshift/network-tools) git [0b53ac3d](https://github.com/openshift/network-tools/commit/0b53ac3dccf59cd169555bf18c207122374bf003) `sha256:897a217481e3713f635260b420d7baa2f9cc1f376fbb430ab3e563f9cf3ee8e2`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [b8b84ebc](https://github.com/openshift/machine-api-provider-nutanix/commit/b8b84ebcda147113477af9a4edbcdfb03e22875c) `sha256:d78f4fb64cb4187c0b04f0fde6148a0c207762204f7942a865e90d69abd13a0a`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [9e9722dd](https://github.com/openshift/oauth-apiserver/commit/9e9722dd2f3f71ec891e3413a8a8cdd6dbfe872f) `sha256:9cfa879dfbfb4799ccf478045c4bd208fba94f04fa6310221e35e74377231586`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [2b9ee007](https://github.com/openshift/oauth-proxy/commit/2b9ee007290b0e1cb85737f3b37075343f9f4857) `sha256:95d872d667524821cd73c41b45342ed18d5c894b41cdd752eb1fc6db1039c7df`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [5631cf49](https://github.com/openshift/openshift-controller-manager/commit/5631cf493b006cbc72a8600a7435813272d71940) `sha256:dcbbceb53a7980ce2d1e53d9e982c5ad463609e97e52bd08e4d05aee8b078c88`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [0e12f5d6](https://github.com/openshift/openshift-state-metrics/commit/0e12f5d6df02b37b0353a747d144e8069c3d0c2a) `sha256:20f80d3e42cdff18a534295848ccad181122ccc0938a3dfb8dfd58702bd4940d`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [f8bb5994](https://github.com/openshift/cloud-provider-openstack/commit/f8bb5994f3cee8ee2bb5cca25e3e9783ad7dd57c) `sha256:763ef58b02ac0178fcd48e003a1c56ee61631ef1917e50b46ce48c2ab74379b4`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [f8bb5994](https://github.com/openshift/cloud-provider-openstack/commit/f8bb5994f3cee8ee2bb5cca25e3e9783ad7dd57c) `sha256:fc2c31f8ee0c4dbd67c444c62cab78591835c305f355f781940934a521ff4225`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [76198b24](https://github.com/openshift/cluster-api-provider-openstack/commit/76198b243458ca266eb8b87bbcf69a7b7c3eec7f) `sha256:6d3681ac9ca7e6e3688b011fa3ea7900c04ec29985bf1f5b305fba6fef0753c6`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [6b30092b](https://github.com/openshift/machine-api-provider-openstack/commit/6b30092b0a1196b016f4300b79c895f0e7f2e9a8) `sha256:a087321d053b7c9274b336eafd5be9319c58ef908c431f0f9ecf58c4a514a618`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [58dbc048](https://github.com/openshift/openstack-resource-controller/commit/58dbc0482c144c21effee2476947889122a518eb) `sha256:2731c54f65309a30c21decee57ad298bc0e0f32dfbbdcf5b2c76a97c5b8b8465`
* [pod](https://github.com/openshift/kubernetes) git [a466682e](https://github.com/openshift/kubernetes/commit/a466682e3867da746be24d7d56c6641612721d6c) `sha256:e369aa6218dabc11dfb717ed213f5ffde8788715edebbb1151ef74b0c7a7f9cb`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [e7c2c09b](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/e7c2c09bd0507f8bd5a6dc3921024a379f4a8af0) `sha256:c5ab9434a9cc5d0346f38e4303a300830a13b4bca456fb8c33d58675ae43e9b1`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [ab04496a](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/ab04496a6855098853048c957c499f2a63200f8e) `sha256:e4b06b287d31e26184d2b2d6c125e058a8fc6f7adbefd9943395ff85a9caf252`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [e88cf81d](https://github.com/openshift/machine-api-provider-powervs/commit/e88cf81dd9ad174f395b86f9cdc40fa30cb06bf4) `sha256:a3e9ce72dbbb471b72cbb9bb62eff612936ebbcddee6f8d0eec6f3166bb8dfad`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [4ab9ff73](https://github.com/openshift/prom-label-proxy/commit/4ab9ff73c665319352288fe0b9b9e1df71832525) `sha256:fa2f6f9bceda580b5571ae518aa3944d0c11f02e7b5ea500e9ceb770f49c384d`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [c30580cb](https://github.com/openshift/prometheus-alertmanager/commit/c30580cbb1af27356599c785720ee5043440e84a) `sha256:84b309ed9868dd51cc496678fabfbb324d5382835946efd51ccdc31632253787`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [6a36acbd](https://github.com/openshift/prometheus-operator/commit/6a36acbd5ecd5a308bc81267f3b0567f93377247) `sha256:3139f8025f5b617b144f3dc835b3378fb88de3a12b79b5f7c1a13e5d2fa3448c`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [45dec4eb](https://github.com/openshift/node_exporter/commit/45dec4ebf58ec9fb7083411ee4b6d46c01140c5f) `sha256:260cbd8e1e87fdb608de51b1f55285acf50a871f20a8e632a589e4c6355e0431`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [6a36acbd](https://github.com/openshift/prometheus-operator/commit/6a36acbd5ecd5a308bc81267f3b0567f93377247) `sha256:be7af42bfb0b8eab96cf0ad05545143042b4c253db970ab2a61d2eef4cc99904`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [6a36acbd](https://github.com/openshift/prometheus-operator/commit/6a36acbd5ecd5a308bc81267f3b0567f93377247) `sha256:c04f2ebe56daab272d05b85d991b09a958ba27c809e56bd4d91a967cbc2d9bc9`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [01ccbfb9](https://github.com/openshift/route-controller-manager/commit/01ccbfb991fdbc559820a04c4932fc5ddf2339d0) `sha256:6934f2bba9ddc9e0d3d71e46c81022987a2cae5c5d676607224e611bbf3f461b`
* [thanos](https://github.com/openshift/thanos) git [779d690d](https://github.com/openshift/thanos/commit/779d690da4fafe809a689f02e889e6fd9ffd4405) `sha256:b511436f55df72d2c51d7ce5c8dcab919c6992ffa2d6956fcc6e0b9be8a796db`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [a6c21eee](https://github.com/openshift/volume-data-source-validator/commit/a6c21eee63d1fae58b63d8493aeb0fd662d1c91e) `sha256:988078be83c5b7731d3f23b44d65321c23dac223af511f2736b4f5669485255c`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [a1553877](https://github.com/openshift/cloud-provider-vsphere/commit/a15538776eb26d20ab2969740cee25f9b4442302) `sha256:2d0c88df4e3740440f68e759dc8491ea9073af48a5da6c71112b39760ee7c3a6`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [cd9a63d6](https://github.com/openshift/cluster-api-provider-vsphere/commit/cd9a63d6ef3eedebc687ec6b675db1a1ad947ebb) `sha256:27d08865ac3de086c3572f2adca81a2cd7d0f2a688e7fab6a93450d8335d9e21`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [6b18bb29](https://github.com/openshift/vmware-vsphere-csi-driver/commit/6b18bb29fc45383c21aa6c7513d151e443aa305e) `sha256:15cb8bbb094eff0d5f9e0f7685e12e41952e546f7784a12f7622f9dd9b3f22a7`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [030ff0e3](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/030ff0e326205bcacaddb901d6b3cb6ab4db63dd) `sha256:848468681dcde41cea0072330bd0efc6dd0eb0b2e71176553e2d8cac52a5f29e`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [6b18bb29](https://github.com/openshift/vmware-vsphere-csi-driver/commit/6b18bb29fc45383c21aa6c7513d151e443aa305e) `sha256:e49d02197dfba8ce4a4f2c293198c3f4280b28c0a19f7ddb3b924c3c16c2afd2`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [34586ec4](https://github.com/openshift/vsphere-problem-detector/commit/34586ec43cc2a94c098ac27cf0f2b89f1460b323) `sha256:88b5b153cae5fd11c6aac5c19d6c092770e3ea0e644a940960cd6ea19529aa7e`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/ad9783f44c2b9e147e8897b8cde00bfe06410d74)

* NO-ISSUE: Refresh RPM lockfiles RPM lockfile refresh [#10581](https://github.com/openshift/assisted-service/pull/10581)
* [MGMT-18886](https://issues.redhat.com/browse/MGMT-18886): OS Streams [#10428](https://github.com/openshift/assisted-service/pull/10428)
* NO-ISSUE: hive-operator was migrated from community-operators to upstream-community-operators [#10600](https://github.com/openshift/assisted-service/pull/10600)
* [MGMT-24682](https://issues.redhat.com/browse/MGMT-24682): Remove LSO and LVMS as CNV operator dependencies [#10541](https://github.com/openshift/assisted-service/pull/10541)
* [MGMT-24705](https://issues.redhat.com/browse/MGMT-24705): CVE-2026-53488 Bump github.com/containerd/containerd to v1.7.33 through indirect dependency conversion [#10572](https://github.com/openshift/assisted-service/pull/10572)
* [ACM-36420](https://issues.redhat.com/browse/ACM-36420): CVE-2026-39821 Bump golang.org/x/net to v0.55.0 [#10548](https://github.com/openshift/assisted-service/pull/10548)
* NO-ISSUE: [master] Bump OCP versions: 4.21, 4.22, 4.20 [#10568](https://github.com/openshift/assisted-service/pull/10568)
* [MGMT-24400](https://issues.redhat.com/browse/MGMT-24400): Document TestVersion API and usage guidance [#10426](https://github.com/openshift/assisted-service/pull/10426)
* NO-ISSUE: [master] Bump OCP versions: 4.20, 4.21, 4.18, 4.19, 4.13, 4.22, 4.16, 5.0 [#10546](https://github.com/openshift/assisted-service/pull/10546)
* [MGMT-24673](https://issues.redhat.com/browse/MGMT-24673): PATCH /v2/clusters/{id} does not return updated operator_bundles [#10536](https://github.com/openshift/assisted-service/pull/10536)
* NO-ISSUE: Update linter version [#10509](https://github.com/openshift/assisted-service/pull/10509)
* [APPSRE-14691](https://issues.redhat.com/browse/APPSRE-14691): add monitoring.rhobs/v1 ServiceMonitors for COO compatibility [#10540](https://github.com/openshift/assisted-service/pull/10540)
* [OCPBUGS-93368](https://issues.redhat.com/browse/OCPBUGS-93368): Simplify IRI api dependency [#10528](https://github.com/openshift/assisted-service/pull/10528)
* [Full changelog](https://github.com/openshift/assisted-service/compare/fa8eb3d7b72d49f8ea01a30f09037d7e9a53081e...ad9783f44c2b9e147e8897b8cde00bfe06410d74)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/019fed042d5aff7e5d390f00d4e4e8a712e4da40)

* NO-ISSUE: Bump linter [#2199](https://github.com/openshift/assisted-installer/pull/2199)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/c41e0c7d465a9357a49036b350368f008730080e...019fed042d5aff7e5d390f00d4e4e8a712e4da40)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/f84fd71b5732db9c0caf2d11672d579b2c3ea588)

* [MGMT-24703](https://issues.redhat.com/browse/MGMT-24703): CVE-2026-53488 Bump github.com/containerd/containerd to v1.7.33 through indirect dependency conversion [#1531](https://github.com/openshift/assisted-installer-agent/pull/1531)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/bdf48b99ec8ca8ce67669fabd59a9669faa0e64e...f84fd71b5732db9c0caf2d11672d579b2c3ea588)


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/3aadc22a8cc9849b0907ba6082b759b8c51c90cb)

* Upgrade brace-expansion to ^5.0.8 (#3855) [#3855](https://github.com/openshift-assisted/assisted-installer-ui/pull/3855)
* [OCPBUGS-96781](https://issues.redhat.com/browse/OCPBUGS-96781): Bump webpack-dev-server to 5.2.5 (#3822) [#3822](https://github.com/openshift-assisted/assisted-installer-ui/pull/3822)
* chore(deps): update dependency tar to ^7.5.19 (#3826) [#3826](https://github.com/openshift-assisted/assisted-installer-ui/pull/3826)
* no-jira: Bump axios to latest (1.18.1) (#3856) [#3856](https://github.com/openshift-assisted/assisted-installer-ui/pull/3856)
* [OCPBUGS-97734](https://issues.redhat.com/browse/OCPBUGS-97734): Increase default imageStorage to 100Gi and raise minimum to 50Gi (#3820) [#3820](https://github.com/openshift-assisted/assisted-installer-ui/pull/3820)
* Show all operators on cluster installation page (#3849) [#3849](https://github.com/openshift-assisted/assisted-installer-ui/pull/3849)
* Update OWNERS file (#3850) [#3850](https://github.com/openshift-assisted/assisted-installer-ui/pull/3850)
* chore(deps): update dependency serialize-javascript to ^7.0.7 (#3825) [#3825](https://github.com/openshift-assisted/assisted-installer-ui/pull/3825)
* chore(deps): update konflux references (#3824) [#3824](https://github.com/openshift-assisted/assisted-installer-ui/pull/3824)
* Bump js-yaml from 3.14.1 to 4.3.0 (#3814) [#3814](https://github.com/openshift-assisted/assisted-installer-ui/pull/3814)
* Fix dependency ordering (#3812) [#3812](https://github.com/openshift-assisted/assisted-installer-ui/pull/3812)
* Fix machine network autoselect to work with IPv6 only clusters (#3813) [#3813](https://github.com/openshift-assisted/assisted-installer-ui/pull/3813)
* Upgrade shell-quote to ^1.8.4 (#3800) [#3800](https://github.com/openshift-assisted/assisted-installer-ui/pull/3800)
* [ACM-35000](https://issues.redhat.com/browse/ACM-35000): Update @openshift-assisted/ui-lib for dynamic plugin SDK 4.22 and react-router 7 compatibility (#3804) [#3804](https://github.com/openshift-assisted/assisted-installer-ui/pull/3804)
* Reflect selected operators correctly  (#3805) [#3805](https://github.com/openshift-assisted/assisted-installer-ui/pull/3805)
* chore(deps): update dependency qs to ^6.15.3 (#3809) [#3809](https://github.com/openshift-assisted/assisted-installer-ui/pull/3809)
* [MGMT-24431](https://issues.redhat.com/browse/MGMT-24431): Add inventory truncation validation handling to Assisted Installer UI (#3807) [#3807](https://github.com/openshift-assisted/assisted-installer-ui/pull/3807)
* chore(deps): update konflux references (#3794) [#3794](https://github.com/openshift-assisted/assisted-installer-ui/pull/3794)
* chore(deps): update dependency ip-address to ^10.2.0 (#3808) [#3808](https://github.com/openshift-assisted/assisted-installer-ui/pull/3808)
* Upgrade ip-address to ^10.1.1 (#3802) [#3802](https://github.com/openshift-assisted/assisted-installer-ui/pull/3802)
* Upgrade ws to ^8.21.0 (#3803) [#3803](https://github.com/openshift-assisted/assisted-installer-ui/pull/3803)
* Upgade tar to ^7.5.11 (#3801) [#3801](https://github.com/openshift-assisted/assisted-installer-ui/pull/3801)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/17da3a80f7c338e39f67568842af373fbd3be284...3aadc22a8cc9849b0907ba6082b759b8c51c90cb)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/001a8f25faafa0290483617c2f73fdf15dbc25fc)

* [AGENT-1552](https://issues.redhat.com/browse/AGENT-1552): Add lvms-operator to config [#311](https://github.com/openshift/agent-installer-utils/pull/311)
* [OCPBUGS-98101](https://issues.redhat.com/browse/OCPBUGS-98101): Use build platform with more disk space [#312](https://github.com/openshift/agent-installer-utils/pull/312)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/c52e7a7021da1cb083a252649ec3ca28503f1ab4...001a8f25faafa0290483617c2f73fdf15dbc25fc)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/c2dd5cd7921fa56b05f7c95b333ee3f59f850bc5)

* 🐛 OCPBUGS-85337: set imagePullPolicy IfNotPresent on provider workloads [#619](https://github.com/openshift/cluster-api-provider-aws/pull/619)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/90f95c204e7897f567643951b36ed2010f658469...c2dd5cd7921fa56b05f7c95b333ee3f59f850bc5)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/1f648349427a0f61e3022f8ec20f270394dc80c5)

* [STOR-3030](https://issues.redhat.com/browse/STOR-3030): feat(operator): detect GCP Dedicated and use hyperdisk-balanced StorageClass [#573](https://github.com/openshift/csi-operator/pull/573)
* [STOR-2996](https://issues.redhat.com/browse/STOR-2996): Sync gcp pd csi driver operator to legacy subdir (2) [#575](https://github.com/openshift/csi-operator/pull/575)
* [STOR-2996](https://issues.redhat.com/browse/STOR-2996): Run unit-tests in /legacy subdir [#574](https://github.com/openshift/csi-operator/pull/574)
* [OCPBUGS-85106](https://issues.redhat.com/browse/OCPBUGS-85106): Add required-scc annotation to EFS and SMB operator deployments [#569](https://github.com/openshift/csi-operator/pull/569)
* [Full changelog](https://github.com/openshift/csi-operator/compare/15814dd6702eb673cedb9bdc116a112363e6559a...1f648349427a0f61e3022f8ec20f270394dc80c5)


### [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws/tree/d8187d40117d334c5bb6e4b4f9613b617dc8e45c)

* NO-JIRA: add finalizers resources to chart rbac [#31](https://github.com/openshift/aws-karpenter-provider-aws/pull/31)
* [Full changelog](https://github.com/openshift/aws-karpenter-provider-aws/compare/9d3e33c99a323659ae02d1121fe36141ccf292f0...d8187d40117d334c5bb6e4b4f9613b617dc8e45c)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/10718580c265686b6af85caab68eed263eee2a41)

* NO-JIRA: Cache region validation response and close AWS sessions [#190](https://github.com/openshift/machine-api-provider-aws/pull/190)
* [OCPBUGS-87410](https://issues.redhat.com/browse/OCPBUGS-87410): Updating ose-machine-api-provider-aws-container image to be consistent with ART for 5.0 [#193](https://github.com/openshift/machine-api-provider-aws/pull/193)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/015a38c0b149fbbc22d261c162493fd801018d4d...10718580c265686b6af85caab68eed263eee2a41)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/631a2f5496d1cb29eaaedac38c199a8c3ba9b0af)

* [OCPBUGS-87337](https://issues.redhat.com/browse/OCPBUGS-87337): Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 5.0 [#218](https://github.com/openshift/aws-pod-identity-webhook/pull/218)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/dd3da573f41d7f4b78dd605373c5f1e441cb8e35...631a2f5496d1cb29eaaedac38c199a8c3ba9b0af)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/d04449b95a54a9f41669d701ed63153575cced1e)

* [OCPBUGS-87408](https://issues.redhat.com/browse/OCPBUGS-87408), [OCPBUGS-87500](https://issues.redhat.com/browse/OCPBUGS-87500): Art consistency openshift 5.0 azure fix [#194](https://github.com/openshift/cloud-provider-azure/pull/194)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/2aea5dfd437a32bd8e543c2e938af43eb1771fce...d04449b95a54a9f41669d701ed63153575cced1e)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/e87f776402d402a3e291e24fa737fe4e5e9617aa)

* [STOR-2923](https://issues.redhat.com/browse/STOR-2923): Rebase to upstream v1.34.4 for OCP 4.23/5.0 [#149](https://github.com/openshift/azure-disk-csi-driver/pull/149)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/2745f1f1d2f1172d58f18bdb42c754451da976c2...e87f776402d402a3e291e24fa737fe4e5e9617aa)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/f7724fbf3ad694f957bd99fafa2fa7b658462624)

* [OCPBUGS-93742](https://issues.redhat.com/browse/OCPBUGS-93742): Bump golang.org/x/crypto/ssh to v0.53.0 [#141](https://github.com/openshift/azure-file-csi-driver/pull/141)
* [OCPBUGS-89331](https://issues.redhat.com/browse/OCPBUGS-89331): Bump github.com/kata-containers/kata-containers/src/runtime to address CVE-2026-41326 [#138](https://github.com/openshift/azure-file-csi-driver/pull/138)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/cbbedb7f65b48da21e367cc7d41d6b74c282f79c...f7724fbf3ad694f957bd99fafa2fa7b658462624)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/2b4705c5d999339ce17d47a9b2a637d238891dae)

* [OCPBUGS-87379](https://issues.redhat.com/browse/OCPBUGS-87379): Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 5.0 [#56](https://github.com/openshift/azure-workload-identity/pull/56)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/40d201db10263abbb9f4ace0a4ea0c63c20bbfc2...2b4705c5d999339ce17d47a9b2a637d238891dae)


### [baremetal-installer](https://github.com/openshift/installer/tree/7adbf7cc743214d2a176a4552fd9db4a0371ec5b)

* [OCPBUGS-98157](https://issues.redhat.com/browse/OCPBUGS-98157): redact machineconfigs.json from "gather bootstrap" [#10678](https://github.com/openshift/installer/pull/10678)
* [CORS-4518](https://issues.redhat.com/browse/CORS-4518): Migrate containers libs to new mono repo [#10599](https://github.com/openshift/installer/pull/10599)
* [CNTRLPLANE-2012](https://issues.redhat.com/browse/CNTRLPLANE-2012): Refactor TLS cert generation to support configurable key algorithms [#10594](https://github.com/openshift/installer/pull/10594)
* [CORS-4334](https://issues.redhat.com/browse/CORS-4334): konnectivity: remove hostNetwork from konnectivity agent [#10662](https://github.com/openshift/installer/pull/10662)
* [OCPCLOUD-3368](https://issues.redhat.com/browse/OCPCLOUD-3368): bumping o/api for new crdcompatibilitychecker and capi capabilities [#10618](https://github.com/openshift/installer/pull/10618)
* [CORS-4528](https://issues.redhat.com/browse/CORS-4528): Remove OPENSHIFT_INSTALL_EXPERIMENTAL_DUAL_STACK [#10654](https://github.com/openshift/installer/pull/10654)
* no-jira: fix vCenter validation error to use correct field name [#10663](https://github.com/openshift/installer/pull/10663)
* [OCPBUGS-92792](https://issues.redhat.com/browse/OCPBUGS-92792): vsphere - fix CNS volume destroy to aggregate errors [#10658](https://github.com/openshift/installer/pull/10658)
* [CORS-4466](https://issues.redhat.com/browse/CORS-4466): aws: expand public subnet CIDR in public-only mode [#10542](https://github.com/openshift/installer/pull/10542)
* [CNTRLPLANE-2012](https://issues.redhat.com/browse/CNTRLPLANE-2012): Add PKI config types, validation, and CR manifest generation [#10593](https://github.com/openshift/installer/pull/10593)
* [OCPBUGS-87841](https://issues.redhat.com/browse/OCPBUGS-87841): gather: redact pull-secret auth tokens from machineconfigs.json [#10660](https://github.com/openshift/installer/pull/10660)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/installer/compare/4644679c432fba5e65712308000ef81c365a7f2f...7adbf7cc743214d2a176a4552fd9db4a0371ec5b)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/22c69c0ff5da7e390b42880141e43d555e38ef41)

* NO-JIRA: Fix go vet warning in process.go [#2304](https://github.com/openshift/oc/pull/2304)
* NO-JIRA: Bump gitignore dependency [#2303](https://github.com/openshift/oc/pull/2303)
* [CNTRLPLANE-3786](https://issues.redhat.com/browse/CNTRLPLANE-3786): bump x/crypto to the latest version [#2301](https://github.com/openshift/oc/pull/2301)
* NO-JIRA: Move test/e2e/accept.go to its own folder [#2294](https://github.com/openshift/oc/pull/2294)
* [CNTRLPLANE-3665](https://issues.redhat.com/browse/CNTRLPLANE-3665): Add ARCHITECTURE.md, adopt shared CONTRIBUTING.md, slim README [#2293](https://github.com/openshift/oc/pull/2293)
* NO-JIRA: Fix tar slip path traversal in codesign archive extraction [#2291](https://github.com/openshift/oc/pull/2291)
* [Full changelog](https://github.com/openshift/oc/compare/74e525a6a4523a23a5db585c411943b0a0a338da...22c69c0ff5da7e390b42880141e43d555e38ef41)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/672b790022dbea667460b1a0467b6a0bc39c544b)

* [MULTIARCH-5990](https://issues.redhat.com/browse/MULTIARCH-5990): IBM Cloud Staging Endpoint Support for `ccoctl` [#1062](https://github.com/openshift/cloud-credential-operator/pull/1062)
* [CCO-847](https://issues.redhat.com/browse/CCO-847): Resolve ci/prow/security job failures [#1048](https://github.com/openshift/cloud-credential-operator/pull/1048)
* [OCPBUGS-96892](https://issues.redhat.com/browse/OCPBUGS-96892): Revert "OCPBUGS-87829: Scope minted AWS IAM policies to cluster-owned resources" [#1057](https://github.com/openshift/cloud-credential-operator/pull/1057)
* [OCPBUGS-95187](https://issues.redhat.com/browse/OCPBUGS-95187): Reclassify ec2:ModifyNetworkInterfaceAttribute as unscoped [#1053](https://github.com/openshift/cloud-credential-operator/pull/1053)
* [OCPBUGS-33994](https://issues.redhat.com/browse/OCPBUGS-33994): Don't unnecessarily re-reconcile when secrets are externally managed [#1042](https://github.com/openshift/cloud-credential-operator/pull/1042)
* [OCPBUGS-87505](https://issues.redhat.com/browse/OCPBUGS-87505): Updating ose-cloud-credential-operator-container image to be consistent with ART for 5.0 [#1037](https://github.com/openshift/cloud-credential-operator/pull/1037)
* [OCPBUGS-87829](https://issues.redhat.com/browse/OCPBUGS-87829): Scope minted AWS IAM policies to cluster-owned resources [#1043](https://github.com/openshift/cloud-credential-operator/pull/1043)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/72a5a4676668c7105203aa7ec1b33a74ff23f75e...672b790022dbea667460b1a0467b6a0bc39c544b)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/6a43170712f2da9405235824ceea3dd531570642)

* [OCPBUGS-87480](https://issues.redhat.com/browse/OCPBUGS-87480): Updating ose-cluster-authentication-operator-container image to be consistent with ART for 5.0 [#934](https://github.com/openshift/cluster-authentication-operator/pull/934)
* [CNTRLPLANE-2589](https://issues.redhat.com/browse/CNTRLPLANE-2589): Migrate test/e2e-encryption to OpenShift Tests Extension framework [#944](https://github.com/openshift/cluster-authentication-operator/pull/944)
* [CNTRLPLANE-2589](https://issues.redhat.com/browse/CNTRLPLANE-2589): Migrate test/e2e-encryption-rotation to OpenShift Tests Extension framework [#943](https://github.com/openshift/cluster-authentication-operator/pull/943)
* NO-JIRA: Automatic agentic rebase: Update library-go to fd74bb5 [#940](https://github.com/openshift/cluster-authentication-operator/pull/940)
* [CNTRLPLANE-2589](https://issues.redhat.com/browse/CNTRLPLANE-2589): Migrate test/e2e-encryption-perf to OpenShift Tests Extension framework [#926](https://github.com/openshift/cluster-authentication-operator/pull/926)
* NO-JIRA: bump library-go funcs [#935](https://github.com/openshift/cluster-authentication-operator/pull/935)
* NO-JIRA: Add test for KMS to KMS migration [#938](https://github.com/openshift/cluster-authentication-operator/pull/938)
* NO-JIRA: Bump library-go for sync [#936](https://github.com/openshift/cluster-authentication-operator/pull/936)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/60f4dee2ea47070dbc5bf34042db50fb2e63f7c1...6a43170712f2da9405235824ceea3dd531570642)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/5313828166550a946438f683333450d7b06942e9)

* NO-JIRA: add coderabbit configuration file [#422](https://github.com/openshift/kubernetes-autoscaler/pull/422)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/02af1a9fd6bcb87745979980fbbf9a2b0671dddb...5313828166550a946438f683333450d7b06942e9)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/0d634647457a992eb69e140e4e22cd159986b397)

* [METAL-1833](https://issues.redhat.com/browse/METAL-1833): Add multi_arch_worker OTE test [#625](https://github.com/openshift/cluster-baremetal-operator/pull/625)
* [METAL-1833](https://issues.redhat.com/browse/METAL-1833): Add cbo OTE test [#619](https://github.com/openshift/cluster-baremetal-operator/pull/619)
* [METAL-1833](https://issues.redhat.com/browse/METAL-1833): Fix ironic auth tests to run inside metal3-ironic pod [#626](https://github.com/openshift/cluster-baremetal-operator/pull/626)
* [METAL-1833](https://issues.redhat.com/browse/METAL-1833): Fix hermetic build compatibility for go-bindata [#623](https://github.com/openshift/cluster-baremetal-operator/pull/623)
* Bug OCPBUGS-90496: Remove metadata.namespace from cluster-scoped ClusterRoleBinding [#616](https://github.com/openshift/cluster-baremetal-operator/pull/616)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/b1ff82e4955de63cf5c93cea981c17c1b0926658...0d634647457a992eb69e140e4e22cd159986b397)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/75dfb8c5ee880caacb736841eb9954a0be75567c)

* [CORS-4534](https://issues.redhat.com/browse/CORS-4534): UPSTREAM: &lt;carry&gt;: Enable MachineTaintPropagation feature gate [#303](https://github.com/openshift/cluster-api/pull/303)
* [OCPBUGS-85337](https://issues.redhat.com/browse/OCPBUGS-85337): set imagePullPolicy IfNotPresent on provider workloads [#302](https://github.com/openshift/cluster-api/pull/302)
* [Full changelog](https://github.com/openshift/cluster-api/compare/4917d86210f4decb58a7added337c209335d1314...75dfb8c5ee880caacb736841eb9954a0be75567c)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/5fbc7d6ca9c4c06d76d0b46969a7db192dac180a)

* [OCPCLOUD-3553](https://issues.redhat.com/browse/OCPCLOUD-3553): change webhook failurePolicy to Fail [#620](https://github.com/openshift/cluster-capi-operator/pull/620)
* [OCPCLOUD-1645](https://issues.redhat.com/browse/OCPCLOUD-1645): Scope capi-controllers RBAC to least-privilege [#585](https://github.com/openshift/cluster-capi-operator/pull/585)
* [OCPCLOUD-3451](https://issues.redhat.com/browse/OCPCLOUD-3451): Scope capi-operator and capi-installer RBAC to least-privilege [#607](https://github.com/openshift/cluster-capi-operator/pull/607)
* [OCPBUGS-88035](https://issues.redhat.com/browse/OCPBUGS-88035): Add e2e test verifying CAPI EC2 instance ownership tag [#594](https://github.com/openshift/cluster-capi-operator/pull/594)
* [OCPBUGS-92817](https://issues.redhat.com/browse/OCPBUGS-92817): delete MAPI MachineSets before CAPI in e2e cleanup [#611](https://github.com/openshift/cluster-capi-operator/pull/611)
* NO-JIRA: Bump golang.org/x/net to 0.56.0 to fix CVE [#617](https://github.com/openshift/cluster-capi-operator/pull/617)
* [OCPBUGS-85337](https://issues.redhat.com/browse/OCPBUGS-85337): fix(manifests-gen): set imagePullPolicy IfNotPresent on provider workloads [#618](https://github.com/openshift/cluster-capi-operator/pull/618)
* [OCPBUGS-87268](https://issues.redhat.com/browse/OCPBUGS-87268): Updating ose-cluster-capi-operator-container image to be consistent with ART for 5.0 [#582](https://github.com/openshift/cluster-capi-operator/pull/582)
* NO-JIRA: fix machine sync e2e test flake [#612](https://github.com/openshift/cluster-capi-operator/pull/612)
* [OCPCLOUD-3569](https://issues.redhat.com/browse/OCPCLOUD-3569): Initial import of rough provider tooling documentation [#609](https://github.com/openshift/cluster-capi-operator/pull/609)
* [OCPCLOUD-3570](https://issues.redhat.com/browse/OCPCLOUD-3570): e2e skip Cluster API authoritative MachineSets in GetFirstMAPIMachineSet [#610](https://github.com/openshift/cluster-capi-operator/pull/610)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/60a95f868ee5fd743ad6b4976f84a3c833368286...5fbc7d6ca9c4c06d76d0b46969a7db192dac180a)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/a1fd4479e4e166f40778b10406238dd95427b26b)

* [OCPBUGS-64852](https://issues.redhat.com/browse/OCPBUGS-64852): Fixes progressing=True condition reporting [#488](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/488)
* [TRT-2777](https://issues.redhat.com/browse/TRT-2777): Revert #479 "Revert 'TRT-2754: Revert Updates clusteroperator_controller progressing'" [#487](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/487)
* [OCPBUGS-64852](https://issues.redhat.com/browse/OCPBUGS-64852): Revert "TRT-2754: Revert "Updates clusteroperator_controller progressing"" [#479](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/479)
* [OCPBUGS-87334](https://issues.redhat.com/browse/OCPBUGS-87334): update Dockerfile base image to ocp/5.0 [#483](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/483)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/4f8df24f1c4176888643e2d3cedd6a33ae76fd4b...a1fd4479e4e166f40778b10406238dd95427b26b)


### [cluster-config-api](https://github.com/openshift/api/tree/d8a1748da7dce3a6292cec8d0822c2d5e1e4318b)

* [OCPNODE-4604](https://issues.redhat.com/browse/OCPNODE-4604): Upgrade v1 criocp payload resource [#2900](https://github.com/openshift/api/pull/2900)
* [CONSOLE-5163](https://issues.redhat.com/browse/CONSOLE-5163): Add labels field to Ingress componentRoutes [#2845](https://github.com/openshift/api/pull/2845)
* tooling: Update `verify-feature-promotion` logic for installer-focused features [#2903](https://github.com/openshift/api/pull/2903)
* [CNTRLPLANE-3751](https://issues.redhat.com/browse/CNTRLPLANE-3751): osin: Add ProxyTrustedCA field to OAuthConfig [#2917](https://github.com/openshift/api/pull/2917)
* Integrate models-schema into codegen and fix openapi verify issues [#2904](https://github.com/openshift/api/pull/2904)
* [CNTRLPLANE-3629](https://issues.redhat.com/browse/CNTRLPLANE-3629): features: promote ExternalOIDCExternalClaimsSourcing to TechPreviewNoUpgrade [#2893](https://github.com/openshift/api/pull/2893)
* [CNTRLPLANE-3745](https://issues.redhat.com/browse/CNTRLPLANE-3745): Add AuthenticationComponentProxy API for component-scoped proxy [#2909](https://github.com/openshift/api/pull/2909)
* [NE-2217](https://issues.redhat.com/browse/NE-2217): Add haproxyVersion in IngressController API [#2895](https://github.com/openshift/api/pull/2895)
* [SSCSI-245](https://issues.redhat.com/browse/SSCSI-245): Rename rotationPollIntervalSeconds to minimumRefreshAge [#2906](https://github.com/openshift/api/pull/2906)
* [OCPBUGS-94869](https://issues.redhat.com/browse/OCPBUGS-94869): fix(crd): adjust storage settings for CRIOCredentialProviderConfig [#2913](https://github.com/openshift/api/pull/2913)
* [AGENT-1522](https://issues.redhat.com/browse/AGENT-1522): Graduate InternalReleaseImage from v1alpha1 to v1 [#2880](https://github.com/openshift/api/pull/2880)
* [PIXAA-16](https://issues.redhat.com/browse/PIXAA-16): Updates API review skill [#2910](https://github.com/openshift/api/pull/2910)
* [NE-2729](https://issues.redhat.com/browse/NE-2729): Add feature gate for multiple HAProxy versions [#2852](https://github.com/openshift/api/pull/2852)
* CORENET-6714 Adding documentation [#2907](https://github.com/openshift/api/pull/2907)
* MON: rename remote write SafeAuthorization to Authorization [#2901](https://github.com/openshift/api/pull/2901)
* [AUTOSCALE-827](https://issues.redhat.com/browse/AUTOSCALE-827): add KarpenterOperator feature gate [#2898](https://github.com/openshift/api/pull/2898)
* Add Protobuf generation to the codegen utility [#1385](https://github.com/openshift/api/pull/1385)
* [SPLAT-2718](https://issues.redhat.com/browse/SPLAT-2718): Promote VSphereMixedNodeEnv to GA [#2798](https://github.com/openshift/api/pull/2798)
* [Full changelog](https://github.com/openshift/api/compare/3d22ba1007502a22d83aebecb29457d8ef124c5a...d8a1748da7dce3a6292cec8d0822c2d5e1e4318b)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/a02c879931c6108326c0a514df0ce2e390f3536c)

* [CNTRLPLANE-2270](https://issues.redhat.com/browse/CNTRLPLANE-2270): Update README with operator responsibilities [#496](https://github.com/openshift/cluster-config-operator/pull/496)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/a346b395960addcf7140551c78f86281d92d7dd2...a02c879931c6108326c0a514df0ce2e390f3536c)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/452cee8c1f4efb683fb6bcb15b61366695d98e1e)

* [OCPBUGS-87338](https://issues.redhat.com/browse/OCPBUGS-87338): Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART for 5.0 [#408](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/408)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/046a4ea83e45c3c1d5eb2d3ffc55a7e7d17fcc3c...452cee8c1f4efb683fb6bcb15b61366695d98e1e)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/ef7a4c8b7f5c5e6cba4486dcc37f50521e7bc655)

* [STOR-2967](https://issues.redhat.com/browse/STOR-2967): Update SnapshotMetadataService CRD asset from v1alpha1 to v1beta1 [#279](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/279)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/d7262f23f8c661ef6a215377b9571b615a1ae0b8...ef7a4c8b7f5c5e6cba4486dcc37f50521e7bc655)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/2e6634547bd3ac0f08350bc2235447ddf06db2b2)

* NO-JIRA: Add aswinsuryan (asuryana@redhat.com) to OWNERS [#479](https://github.com/openshift/cluster-dns-operator/pull/479)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/8395f9054f235aec2cd5185019d201146c9827ed...2e6634547bd3ac0f08350bc2235447ddf06db2b2)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/831d5e6296e75b42d7cbf33fd26cd88f3b7472ea)

* [OCPEDGE-2705](https://issues.redhat.com/browse/OCPEDGE-2705): Add TNF Pacemaker metrics controller [#1634](https://github.com/openshift/cluster-etcd-operator/pull/1634)
* [CNTRLPLANE-2847](https://issues.redhat.com/browse/CNTRLPLANE-2847): Support PKI customization [#1593](https://github.com/openshift/cluster-etcd-operator/pull/1593)
* [CNTRLPLANE-3727](https://issues.redhat.com/browse/CNTRLPLANE-3727): Agentic context docs and contributing guide [#1639](https://github.com/openshift/cluster-etcd-operator/pull/1639)
* [OCPBUGS-66334](https://issues.redhat.com/browse/OCPBUGS-66334): remove version check from guard precheck [#1520](https://github.com/openshift/cluster-etcd-operator/pull/1520)
* [OCPBUGS-87522](https://issues.redhat.com/browse/OCPBUGS-87522): Updating cluster-etcd-operator-container image to be consistent with ART for 5.0 [#1629](https://github.com/openshift/cluster-etcd-operator/pull/1629)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/7432b62cb6c80c86918f26c9d5d85e31fb863e04...831d5e6296e75b42d7cbf33fd26cd88f3b7472ea)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/35ad96dc9fa4ac89028e22ef624d1187a57607bd)

* [OCPBUGS-96818](https://issues.redhat.com/browse/OCPBUGS-96818): bump golang.org/x/net [#1353](https://github.com/openshift/cluster-image-registry-operator/pull/1353)
* [OCPBUGS-85107](https://issues.redhat.com/browse/OCPBUGS-85107): fix required-scc annotation on image-pruner pods [#1351](https://github.com/openshift/cluster-image-registry-operator/pull/1351)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/d30e780bad20389fd85eaac6dbb6e1ffae958bbe...35ad96dc9fa4ac89028e22ef624d1187a57607bd)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/7b7406ee0d4bf03de360d53c9cc4a83ee14332cc)

* [NE-2664](https://issues.redhat.com/browse/NE-2664): deploy haproxy as sidecar [#1484](https://github.com/openshift/cluster-ingress-operator/pull/1484)
* [OCPBUGS-86833](https://issues.redhat.com/browse/OCPBUGS-86833): Detect orphaned OSSM subscription after noOLM migration [#1475](https://github.com/openshift/cluster-ingress-operator/pull/1475)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/8908668eac379bd29431c70f195618efa0337522...7b7406ee0d4bf03de360d53c9cc4a83ee14332cc)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/ec48ccc58abf89708dcdb1a477ed260d7754a17d)

* [OCPBUGS-38661](https://issues.redhat.com/browse/OCPBUGS-38661): Add 10-minute degraded inertia for StaticPodsDegraded [#2221](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2221)
* [CNTRLPLANE-3234](https://issues.redhat.com/browse/CNTRLPLANE-3234): wire KMS health reporter status writer [#2224](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2224)
* [OCPBUGS-38661](https://issues.redhat.com/browse/OCPBUGS-38661): Add 10-minute degraded inertia for NodeControllerDegraded [#2219](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2219)
* NO-JIRA: Automatic agentic rebase: Update library-go to fd74bb5 [#2216](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2216)
* [CNTRLPLANE-3721](https://issues.redhat.com/browse/CNTRLPLANE-3721): Add developer/agent documentation: CONTRIBUTING.md, AGENTS.md, ARCHITECTURE.md [#2213](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2213)
* [API-1768](https://issues.redhat.com/browse/API-1768): e2e network policy tests [#2097](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2097)
* NO-JIRA: Add test for kms to kms migration [#2215](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2215)
* NO-JIRA: Bump library-go for sync [#2214](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2214)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/5e0353a93bfa9a7dbe3a5afe9e9e3b0aa66fe585...ec48ccc58abf89708dcdb1a477ed260d7754a17d)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/209d5915dc12d517be79430e4bf4e8b0f88e405b)

* [OCPBUGS-38662](https://issues.redhat.com/browse/OCPBUGS-38662): Add 10-minute degraded inertia for StaticPodsDegraded [#948](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/948)
* [OCPBUGS-38662](https://issues.redhat.com/browse/OCPBUGS-38662): Add 10-minute degraded inertia for NodeControllerDegraded [#947](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/947)
* NO-JIRA: Use %w for error wrapping consistently [#946](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/946)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/c35307f04313369c9ba4dcab3308506a3987065e...209d5915dc12d517be79430e4bf4e8b0f88e405b)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/4d89ee063475ec33671b7f255bf6e304bb11e235)

* [OCPBUGS-38663](https://issues.redhat.com/browse/OCPBUGS-38663): Add 10-minute degraded inertia for StaticPodsDegraded [#655](https://github.com/openshift/cluster-kube-scheduler-operator/pull/655)
* [OCPBUGS-38663](https://issues.redhat.com/browse/OCPBUGS-38663): Add 10-minute degraded inertia for NodeControllerDegraded [#654](https://github.com/openshift/cluster-kube-scheduler-operator/pull/654)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/d43423b583269eea8236040424609c3f108ac9c4...4d89ee063475ec33671b7f255bf6e304bb11e235)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/f5d3bfe64bda67ffb8299af01ebf2722287edf04)

* [STOR-2954](https://issues.redhat.com/browse/STOR-2954): feat: have CVO inject the centralized TLS configuration into the operator's config [#176](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/176)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/42647ceeb54e36b5f7c827302f443c10788407ec...f5d3bfe64bda67ffb8299af01ebf2722287edf04)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/81d1a317a59d2b51ca83a282dd23b3b9563f0974)

* [OU-1389](https://issues.redhat.com/browse/OU-1389): config path to point to correct directory [#2981](https://github.com/openshift/cluster-monitoring-operator/pull/2981)
* [OCPBUGS-93756](https://issues.redhat.com/browse/OCPBUGS-93756): update github.com/prometheus/prometheus [#2979](https://github.com/openshift/cluster-monitoring-operator/pull/2979)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/2b502a5c620bf10837655f72eec520d4078d5fa7...81d1a317a59d2b51ca83a282dd23b3b9563f0974)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/d46aa4c5f37dba622ee78279cedfdf2775324fe1)

* [NVIDIA-882](https://issues.redhat.com/browse/NVIDIA-882): DPU host: add configurable mgmt-port-resource-count [#3024](https://github.com/openshift/cluster-network-operator/pull/3024)
* [OCPBUGS-88531](https://issues.redhat.com/browse/OCPBUGS-88531): Propagate restart-date annotation to CNO operand pod templates [#3030](https://github.com/openshift/cluster-network-operator/pull/3030)
* NO-JIRA: Update OWNERS file [#3045](https://github.com/openshift/cluster-network-operator/pull/3045)
* [OCPBUGS-87977](https://issues.redhat.com/browse/OCPBUGS-87977): Bump github.com/containernetworking/cni v0.8.0 -&gt; v1.3.0 [#3031](https://github.com/openshift/cluster-network-operator/pull/3031)
* [CORENET-7114](https://issues.redhat.com/browse/CORENET-7114): Add OCP centralized TLS profile support [#3014](https://github.com/openshift/cluster-network-operator/pull/3014)
* [CORENET-7266](https://issues.redhat.com/browse/CORENET-7266): Add path-specific review instructions to CodeRabbit config [#3039](https://github.com/openshift/cluster-network-operator/pull/3039)
* [OCPBUGS-83800](https://issues.redhat.com/browse/OCPBUGS-83800): add remaining CNO NetworkPolicies [take 2] [#3001](https://github.com/openshift/cluster-network-operator/pull/3001)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/a95f01f7abe520b3c315d1cb262840fb686126b7...d46aa4c5f37dba622ee78279cedfdf2775324fe1)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/35d8129e2d0ebaf0a76f4b93d22387234bf4acac)

* [OCPBUGS-98399](https://issues.redhat.com/browse/OCPBUGS-98399): E2E: Add functional test cases checking GOMAXPROCS [#1556](https://github.com/openshift/cluster-node-tuning-operator/pull/1556)
* [OCPBUGS-93863](https://issues.redhat.com/browse/OCPBUGS-93863): E2E: Fix tuned active profile check for wrapped performance profiles [#1549](https://github.com/openshift/cluster-node-tuning-operator/pull/1549)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/8b4b292a427c90a45988432380c37196fba7e9d7...35d8129e2d0ebaf0a76f4b93d22387234bf4acac)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/0296e27fd2034cf4365b97b4c1a103b3be4a6298)

* [CNTRLPLANE-3234](https://issues.redhat.com/browse/CNTRLPLANE-3234): wire KMS health reporter status writer [#730](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/730)
* [OCPBUGS-86583](https://issues.redhat.com/browse/OCPBUGS-86583): Allow Prometheus to scrape check-endpoints metrics on port 17698 [#729](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/729)
* NO-JIRA: Automatic agentic rebase: Update library-go to fd74bb5 [#727](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/727)
* NO-JIRA: update func from library-go [#724](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/724)
* NO-JIRA: Add test for KMS to KMS migration [#726](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/726)
* NO-JIRA: Bump library-go for sync [#725](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/725)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/ec1966f2ba07c78e248fe218cbd15564d828a8dc...0296e27fd2034cf4365b97b4c1a103b3be4a6298)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/8ac48254009fb4987bee1f3e00cbb8e4d730f545)

* [STOR-3011](https://issues.redhat.com/browse/STOR-3011): Implement CSO upgrade check and Prometheus alerts for SELinuxMount readiness [#714](https://github.com/openshift/cluster-storage-operator/pull/714)
* [STOR-2954](https://issues.redhat.com/browse/STOR-2954): Inject TLS from CVO to operators, update hypershift TLS based on CVO [#712](https://github.com/openshift/cluster-storage-operator/pull/712)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/1715686df95688a690e8071c88112aaf3983f4c8...8ac48254009fb4987bee1f3e00cbb8e4d730f545)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/b5833af1ada5a3036f60cc0c22d460908958e02a)

* [OCPCLOUD-3368](https://issues.redhat.com/browse/OCPCLOUD-3368): bumping with o/api changes to reflect new capabilities (crdcompatibilitychecker+capi) [#1403](https://github.com/openshift/cluster-version-operator/pull/1403)
* [TRT-2776](https://issues.redhat.com/browse/TRT-2776): Revert #1398 "install: Split multi-document YAML and add missing annotations" [#1420](https://github.com/openshift/cluster-version-operator/pull/1420)
* [OTA-1956](https://issues.redhat.com/browse/OTA-1956): install: Split multi-document YAML and add missing annotations [#1398](https://github.com/openshift/cluster-version-operator/pull/1398)
* [OTA-1966](https://issues.redhat.com/browse/OTA-1966): AGENTS: Drop 'Deploying CVO with Lightspeed Proposals' section [#1414](https://github.com/openshift/cluster-version-operator/pull/1414)
* [OTA-1836](https://issues.redhat.com/browse/OTA-1836): Fix empty lister for API server (simplified a bit) [#1397](https://github.com/openshift/cluster-version-operator/pull/1397)
* [OCPBUGS-84513](https://issues.redhat.com/browse/OCPBUGS-84513): set terminationMessagePolicy on update-payload pods [#1417](https://github.com/openshift/cluster-version-operator/pull/1417)
* NO-JIRA: CONTRIBUTING.md: Improve the review process wording [#1419](https://github.com/openshift/cluster-version-operator/pull/1419)
* [OTA-1966](https://issues.redhat.com/browse/OTA-1966): pkg/readiness/crd_compat: Drop unnecessary CustomResourceDefinition check [#1415](https://github.com/openshift/cluster-version-operator/pull/1415)
* NO-JIRA: Handle the tests on Microshift environment [#1416](https://github.com/openshift/cluster-version-operator/pull/1416)
* [OCPBUGS-87461](https://issues.redhat.com/browse/OCPBUGS-87461): Updating cluster-version-operator-container image to be consistent with ART for 5.0 [#1400](https://github.com/openshift/cluster-version-operator/pull/1400)
* [CNTRLPLANE-3429](https://issues.redhat.com/browse/CNTRLPLANE-3429): Respect configured cipher order for inject-tls [#1386](https://github.com/openshift/cluster-version-operator/pull/1386)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/dd0a8410467a09cd181216e191825d4088ea2115...b5833af1ada5a3036f60cc0c22d460908958e02a)


### [console](https://github.com/openshift/console/tree/bc58d0788f862ae05af0a910c701fd47b16b791b)

* [CONSOLE-5356](https://issues.redhat.com/browse/CONSOLE-5356): Add optional onSubmit parameter to useLabelsModal hook [#16560](https://github.com/openshift/console/pull/16560)
* [CONSOLE-5124](https://issues.redhat.com/browse/CONSOLE-5124): Multi-domain console backend support [#16686](https://github.com/openshift/console/pull/16686)
* NO-ISSUE: Return self-support when date is before all lifecycle phases [#16699](https://github.com/openshift/console/pull/16699)
* [CONSOLE-5398](https://issues.redhat.com/browse/CONSOLE-5398): Remove events card from node overview dashboard [#16697](https://github.com/openshift/console/pull/16697)
* [OCPBUGS-84721](https://issues.redhat.com/browse/OCPBUGS-84721): Fix WebSocket InvalidStateError in pod terminal [#16377](https://github.com/openshift/console/pull/16377)
* [CONSOLE-5306](https://issues.redhat.com/browse/CONSOLE-5306): Add Prow-compatible JUnit reporter for Playwright e2e tests [#16501](https://github.com/openshift/console/pull/16501)
* NO-JIRA: Prepare for publishing new 4.23 prerelease plugin SDK packages [#16713](https://github.com/openshift/console/pull/16713)
* [OCPBUGS-78980](https://issues.redhat.com/browse/OCPBUGS-78980): Update @graphql-codegen packages for Node.js 25 compatibility [#16240](https://github.com/openshift/console/pull/16240)
* [CONSOLE-5271](https://issues.redhat.com/browse/CONSOLE-5271): Gate lifecycle metadata on server-side OLM lifecycle flag [#16668](https://github.com/openshift/console/pull/16668)
* [OCPBUGS-94089](https://issues.redhat.com/browse/OCPBUGS-94089): Fix helm backend test setup reliability [#16687](https://github.com/openshift/console/pull/16687)
* [CONSOLE-5361](https://issues.redhat.com/browse/CONSOLE-5361): Add toast overflow and notification drawer integration [#16636](https://github.com/openshift/console/pull/16636)
* [CONSOLE-5183](https://issues.redhat.com/browse/CONSOLE-5183): Add persistent pod terminal sessions to Cloud Shell drawer [#16269](https://github.com/openshift/console/pull/16269)
* [OCPBUGS-83817](https://issues.redhat.com/browse/OCPBUGS-83817): Fix orphaned shell processes in pod terminal on WebSocket disconnect [#16307](https://github.com/openshift/console/pull/16307)
* [CONSOLE-5238](https://issues.redhat.com/browse/CONSOLE-5238): Remove unused telemetry Cypress integration tests [#16685](https://github.com/openshift/console/pull/16685)
* [CONSOLE-5283](https://issues.redhat.com/browse/CONSOLE-5283): Migrate dashboard Cypress tests to Playwright [#16669](https://github.com/openshift/console/pull/16669)
* [CONSOLE-5158](https://issues.redhat.com/browse/CONSOLE-5158): Add filter by group for nodes [#16253](https://github.com/openshift/console/pull/16253)
* [OCPBUGS-83799](https://issues.redhat.com/browse/OCPBUGS-83799): Fix Workloads sidebar ordering when DeploymentConfig capability is disabled [#16351](https://github.com/openshift/console/pull/16351)
* [CONSOLE-4954](https://issues.redhat.com/browse/CONSOLE-4954): Add Workload tab to Node view [#16574](https://github.com/openshift/console/pull/16574)
* [OCPBUGS-87353](https://issues.redhat.com/browse/OCPBUGS-87353): Updating openshift-enterprise-console-container image to be consistent with ART for 5.0 [#16558](https://github.com/openshift/console/pull/16558)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/c7f0a381cc07df0b368936505f6c24fa91d83849...bc58d0788f862ae05af0a910c701fd47b16b791b)


### [console-operator](https://github.com/openshift/console-operator/tree/da112ceea6da057747900b7e39a88ada9e320e9b)

* [TRT-2780](https://issues.redhat.com/browse/TRT-2780): Revert #1178 [#1186](https://github.com/openshift/console-operator/pull/1186)
* [OCPBUGS-93982](https://issues.redhat.com/browse/OCPBUGS-93982): skip generation check when deployment was just updated [#1178](https://github.com/openshift/console-operator/pull/1178)
* [CONSOLE-5271](https://issues.redhat.com/browse/CONSOLE-5271): Set olmLifecycleEnabled based on OLMLifecycleAndCompatibility FeatureGate [#1174](https://github.com/openshift/console-operator/pull/1174)
* [OCPBUGS-87517](https://issues.redhat.com/browse/OCPBUGS-87517): Updating openshift-enterprise-console-operator-container image to be consistent with ART for 5.0 [#1171](https://github.com/openshift/console-operator/pull/1171)
* [Full changelog](https://github.com/openshift/console-operator/compare/58e10b0ac1a23d864ee9eae2631c705c3b670a4c...da112ceea6da057747900b7e39a88ada9e320e9b)


### [csi-external-snapshotter, csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter/tree/b5e4b73f9a761ff8a59f31b982a63e1cdbb76ed8)

* [STOR-3004](https://issues.redhat.com/browse/STOR-3004): Rebase external-snapshotter to v8.6.0 [#224](https://github.com/openshift/csi-external-snapshotter/pull/224)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/e695e2bd0b548afd0fce049d86d4af29dd34e574...b5e4b73f9a761ff8a59f31b982a63e1cdbb76ed8)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/02d5345005aeb6aac2277818937501cdd1a3a88e)

* NO-ISSUE: Bump github.com/moby/spdystream to v0.5.1 [#107](https://github.com/openshift/csi-node-driver-registrar/pull/107)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/f0378629c970bc897439caaa85c4aec0971c1130...02d5345005aeb6aac2277818937501cdd1a3a88e)


### [docker-registry](https://github.com/openshift/image-registry/tree/eb1b09dc465a8d53c5683da40f5d5fd306fd945a)

* [OCPBUGS-96818](https://issues.redhat.com/browse/OCPBUGS-96818): bump golang.com/x/crypto [#473](https://github.com/openshift/image-registry/pull/473)
* [Full changelog](https://github.com/openshift/image-registry/compare/57039cd2d9c87547cdf9a8d1dc7cb94f1ca089f7...eb1b09dc465a8d53c5683da40f5d5fd306fd945a)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/7ec03cbba69b4dc86ee33e313bad32ae2ea2924e)

* [MGMT-24788](https://issues.redhat.com/browse/MGMT-24788): Fix pod deletion message contaminating RHCOS kernel version string [#197](https://github.com/openshift/driver-toolkit/pull/197)
* [OCPBUGS-69851](https://issues.redhat.com/browse/OCPBUGS-69851): Fix e2e test failure caused by TTY carriage returns in oc run output [#196](https://github.com/openshift/driver-toolkit/pull/196)
* [OCPBUGS-69851](https://issues.redhat.com/browse/OCPBUGS-69851): Updating Dockerfile.rhel10 base image from base-rhel9 to base-rhel10. [#195](https://github.com/openshift/driver-toolkit/pull/195)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/7905e32b1822a369ac59ca5da55a4ecd12658d97...7ec03cbba69b4dc86ee33e313bad32ae2ea2924e)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/a923d37cfe033853603240f862cb907ba997cb68)

* [OCPBUGS-87977](https://issues.redhat.com/browse/OCPBUGS-87977): bump containernetworking/cni to v1.3.0 [#102](https://github.com/openshift/egress-router-cni/pull/102)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/d37f51e057620bdee564f68dcfde955acf033d3e...a923d37cfe033853603240f862cb907ba997cb68)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/1d098131fa7123b9793e01dcdac4d0b18b9ef1ae)

* [OCPBUGS-91738](https://issues.redhat.com/browse/OCPBUGS-91738): golang.org/x/net bumped from v0.51.0 to v0.55.0 [#172](https://github.com/openshift/machine-api-provider-gcp/pull/172)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/af29978573161a98d41f1baae67d05da7398a646...1d098131fa7123b9793e01dcdac4d0b18b9ef1ae)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/e5a04641120fdae120db1c53cbed703f1ecf77e7)

* [STOR-2915](https://issues.redhat.com/browse/STOR-2915): Rebase to upstream v1.26.0 for OCP 5.0 [#124](https://github.com/openshift/gcp-pd-csi-driver/pull/124)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/3b9e6d19109ebfafa13f638f469071027f82b744...e5a04641120fdae120db1c53cbed703f1ecf77e7)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/csi-operator/tree/1f648349427a0f61e3022f8ec20f270394dc80c5)

* [STOR-3030](https://issues.redhat.com/browse/STOR-3030): feat(operator): detect GCP Dedicated and use hyperdisk-balanced StorageClass [#573](https://github.com/openshift/csi-operator/pull/573)
* [STOR-2996](https://issues.redhat.com/browse/STOR-2996): Sync gcp pd csi driver operator to legacy subdir (2) [#575](https://github.com/openshift/csi-operator/pull/575)
* [STOR-2996](https://issues.redhat.com/browse/STOR-2996): Run unit-tests in /legacy subdir [#574](https://github.com/openshift/csi-operator/pull/574)
* [OCPBUGS-85106](https://issues.redhat.com/browse/OCPBUGS-85106): Add required-scc annotation to EFS and SMB operator deployments [#569](https://github.com/openshift/csi-operator/pull/569)
* [OCPBUGS-90151](https://issues.redhat.com/browse/OCPBUGS-90151): hack/update-metadata.sh: allow MAX_OCP_VERSION override [#571](https://github.com/openshift/csi-operator/pull/571)
* [STOR-2996](https://issues.redhat.com/browse/STOR-2996): Sync gcp pd csi driver operator to legacy subdir [#570](https://github.com/openshift/csi-operator/pull/570)
* [OCPBUGS-87449](https://issues.redhat.com/browse/OCPBUGS-87449): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 5.0 [#566](https://github.com/openshift/csi-operator/pull/566)
* [STOR-2920](https://issues.redhat.com/browse/STOR-2920): Bump OLM metadata to 5.0 [#568](https://github.com/openshift/csi-operator/pull/568)
* [STOR-2996](https://issues.redhat.com/browse/STOR-2996): Add gcp pd csi driver operator to legacy subdir [#562](https://github.com/openshift/csi-operator/pull/562)
* [OCPBUGS-87270](https://issues.redhat.com/browse/OCPBUGS-87270): Updating csi-driver-manila-operator-container image to be consistent with ART for 5.0 [#563](https://github.com/openshift/csi-operator/pull/563)
* [OCPBUGS-87236](https://issues.redhat.com/browse/OCPBUGS-87236): Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 5.0 [#561](https://github.com/openshift/csi-operator/pull/561)
* [OCPBUGS-87387](https://issues.redhat.com/browse/OCPBUGS-87387): Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 5.0 [#565](https://github.com/openshift/csi-operator/pull/565)
* [OCPBUGS-87368](https://issues.redhat.com/browse/OCPBUGS-87368): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 5.0 [#564](https://github.com/openshift/csi-operator/pull/564)
* [OCPBUGS-87470](https://issues.redhat.com/browse/OCPBUGS-87470): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 5.0 [#567](https://github.com/openshift/csi-operator/pull/567)
* [OCPBUGS-87219](https://issues.redhat.com/browse/OCPBUGS-87219): Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 5.0 [#560](https://github.com/openshift/csi-operator/pull/560)
* [OCPBUGS-42363](https://issues.redhat.com/browse/OCPBUGS-42363): Re-enable Azure Disk load test [#558](https://github.com/openshift/csi-operator/pull/558)
* [OCPBUGS-86023](https://issues.redhat.com/browse/OCPBUGS-86023): Add memory limits to SMB CSI sidecar containers [#557](https://github.com/openshift/csi-operator/pull/557)
* [OCPBUGS-85457](https://issues.redhat.com/browse/OCPBUGS-85457): Add init container for Manila node daemonset [#552](https://github.com/openshift/csi-operator/pull/552)
* [OCPBUGS-84052](https://issues.redhat.com/browse/OCPBUGS-84052): Mount writable /tmp in SMB CSI driver [#545](https://github.com/openshift/csi-operator/pull/545)
* [OSASINFRA-3675](https://issues.redhat.com/browse/OSASINFRA-3675): Rework authentication in Manila CSI Driver Operator [#373](https://github.com/openshift/csi-operator/pull/373)
* [OCPBUGS-80930](https://issues.redhat.com/browse/OCPBUGS-80930): Add VolumeAttributesClass e2e test manifests for Azure disk [#538](https://github.com/openshift/csi-operator/pull/538)
* [OCPBUGS-78291](https://issues.redhat.com/browse/OCPBUGS-78291): Allow azure-disk sidecars to read VolumeAttributeClasses [#525](https://github.com/openshift/csi-operator/pull/525)
* [STOR-2762](https://issues.redhat.com/browse/STOR-2762): Bump all deps for 4.22 [#526](https://github.com/openshift/csi-operator/pull/526)
* [OCPBUGS-77674](https://issues.redhat.com/browse/OCPBUGS-77674): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.22 [#516](https://github.com/openshift/csi-operator/pull/516)
* [OCPBUGS-77553](https://issues.redhat.com/browse/OCPBUGS-77553): Updating csi-driver-manila-operator-container image to be consistent with ART for 4.22 [#513](https://github.com/openshift/csi-operator/pull/513)
* [OCPBUGS-77612](https://issues.redhat.com/browse/OCPBUGS-77612): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.22 [#514](https://github.com/openshift/csi-operator/pull/514)
* [STOR-2884](https://issues.redhat.com/browse/STOR-2884): Add service to generate a TLS cert for EFS operator [#522](https://github.com/openshift/csi-operator/pull/522)
* [STOR-2884](https://issues.redhat.com/browse/STOR-2884): Add service to generate a TLS cert for SMB operator [#520](https://github.com/openshift/csi-operator/pull/520)
* NO-JIRA: Inherit any OpenShift global CodeRabbit setting [#519](https://github.com/openshift/csi-operator/pull/519)
* [OCPBUGS-77623](https://issues.redhat.com/browse/OCPBUGS-77623): Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.22 [#515](https://github.com/openshift/csi-operator/pull/515)
* [OCPBUGS-77571](https://issues.redhat.com/browse/OCPBUGS-77571): Add only to tags to volume object, if volume is not already tagged [#518](https://github.com/openshift/csi-operator/pull/518)
* [OCPBUGS-77497](https://issues.redhat.com/browse/OCPBUGS-77497): Fix readonly root fs in Azure init containers [#512](https://github.com/openshift/csi-operator/pull/512)
* NO-JIRA: Add coderabbit, including instructions [#509](https://github.com/openshift/csi-operator/pull/509)
* [STOR-2752](https://issues.redhat.com/browse/STOR-2752): Early chore: update OCP version in OLM metadata [#505](https://github.com/openshift/csi-operator/pull/505)
* Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.22 [#517](https://github.com/openshift/csi-operator/pull/517)
* [OCPBUGS-77378](https://issues.redhat.com/browse/OCPBUGS-77378): Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.22 [#510](https://github.com/openshift/csi-operator/pull/510)
* [OCPBUGS-77405](https://issues.redhat.com/browse/OCPBUGS-77405): Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.22 [#511](https://github.com/openshift/csi-operator/pull/511)
* [OCPBUGS-76298](https://issues.redhat.com/browse/OCPBUGS-76298): missing readOnlyRootFilesystem in AWS init containers [#506](https://github.com/openshift/csi-operator/pull/506)
* [OCPBUGS-74971](https://issues.redhat.com/browse/OCPBUGS-74971): Fix azure-disk secret namespace/name args [#502](https://github.com/openshift/csi-operator/pull/502)
* [OCPBUGS-74521](https://issues.redhat.com/browse/OCPBUGS-74521): Remove VolumeAttributesClass FeatureGate [#503](https://github.com/openshift/csi-operator/pull/503)
* [STOR-2523](https://issues.redhat.com/browse/STOR-2523): hypershift: Add desired-version annotation to controller Deployments and use DeploymentVersionController in csi driver operators [#457](https://github.com/openshift/csi-operator/pull/457)
* [OCPBUGS-70304](https://issues.redhat.com/browse/OCPBUGS-70304): Fix azure-file secret namespace/name [#500](https://github.com/openshift/csi-operator/pull/500)
* [OCPBUGS-66113](https://issues.redhat.com/browse/OCPBUGS-66113): Some containers do not have readOnlyRootFilesystem [#476](https://github.com/openshift/csi-operator/pull/476)
* [OCPBUGS-70085](https://issues.redhat.com/browse/OCPBUGS-70085): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.22 [#483](https://github.com/openshift/csi-operator/pull/483)
* [OCPBUGS-70339](https://issues.redhat.com/browse/OCPBUGS-70339): deploy prometheus role and binding on hypershift guest [#488](https://github.com/openshift/csi-operator/pull/488)
* [OCPBUGS-63698](https://issues.redhat.com/browse/OCPBUGS-63698): fix(azure): add token-minter for self-managed hosted clusters [#461](https://github.com/openshift/csi-operator/pull/461)
* [OCPBUGS-69739](https://issues.redhat.com/browse/OCPBUGS-69739): Updating csi-driver-manila-operator-container image to be consistent with ART for 4.22 [#480](https://github.com/openshift/csi-operator/pull/480)
* [OCPBUGS-69907](https://issues.redhat.com/browse/OCPBUGS-69907): Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.22 [#482](https://github.com/openshift/csi-operator/pull/482)
* [OCPBUGS-69710](https://issues.redhat.com/browse/OCPBUGS-69710): Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.22 [#479](https://github.com/openshift/csi-operator/pull/479)
* NO-JIRA: Add /sniff-test claude command [#486](https://github.com/openshift/csi-operator/pull/486)
* [OCPBUGS-69883](https://issues.redhat.com/browse/OCPBUGS-69883): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.22 [#481](https://github.com/openshift/csi-operator/pull/481)
* [OCPBUGS-69982](https://issues.redhat.com/browse/OCPBUGS-69982): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.22 [#484](https://github.com/openshift/csi-operator/pull/484)
* [OCPBUGS-69695](https://issues.redhat.com/browse/OCPBUGS-69695): Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.22 [#478](https://github.com/openshift/csi-operator/pull/478)
* [STOR-2543](https://issues.redhat.com/browse/STOR-2543): add VAC manifest for tests in AWS EBS [#475](https://github.com/openshift/csi-operator/pull/475)
* [STOR-1945](https://issues.redhat.com/browse/STOR-1945): STOR-2056: Add SupportedSizeRange for azurefile-nfs [#477](https://github.com/openshift/csi-operator/pull/477)
* NO-JIRA: Migrate away from deprecated ioutil [#474](https://github.com/openshift/csi-operator/pull/474)
* [CNTRLPLANE-1285](https://issues.redhat.com/browse/CNTRLPLANE-1285): enable readOnlyRootFilesystem [#419](https://github.com/openshift/csi-operator/pull/419)
* [OCPBUGS-65858](https://issues.redhat.com/browse/OCPBUGS-65858): allow all-egress for efs operator [#472](https://github.com/openshift/csi-operator/pull/472)
* [STOR-2538](https://issues.redhat.com/browse/STOR-2538): Migrate aws sdk to v2 [#442](https://github.com/openshift/csi-operator/pull/442)
* No-JIRA: Update owners [#471](https://github.com/openshift/csi-operator/pull/471)
* [STOR-2627](https://issues.redhat.com/browse/STOR-2627): Enable nodeAllocatableUpdatePeriodSeconds in AWS EBS [#435](https://github.com/openshift/csi-operator/pull/435)
* [OCPBUGS-65606](https://issues.redhat.com/browse/OCPBUGS-65606): adds the csi-external-resizer to the image-references [#469](https://github.com/openshift/csi-operator/pull/469)
* [STOR-2592](https://issues.redhat.com/browse/STOR-2592): Bump all deps for 4.21 and remove hypershift client [#468](https://github.com/openshift/csi-operator/pull/468)
* [STOR-2523](https://issues.redhat.com/browse/STOR-2523): Add hypershift managed-by labels for csi driver operators [#446](https://github.com/openshift/csi-operator/pull/446)
* [OCPBUGS-62802](https://issues.redhat.com/browse/OCPBUGS-62802): Add RBAC ClusterRole and Binding for driver node [#443](https://github.com/openshift/csi-operator/pull/443)
* NO-JIRA: add ai-helpers claude marketplace [#451](https://github.com/openshift/csi-operator/pull/451)
* NO-JIRA: Normalize generation of driver metrics RBAC proxy sidecar [#380](https://github.com/openshift/csi-operator/pull/380)
* [OCPBUGS-61436](https://issues.redhat.com/browse/OCPBUGS-61436), [OCPBUGS-61450](https://issues.redhat.com/browse/OCPBUGS-61450), [STOR-2600](https://issues.redhat.com/browse/STOR-2600): Bump OLM metadata to 4.21 [#430](https://github.com/openshift/csi-operator/pull/430)
* [OCPBUGS-62404](https://issues.redhat.com/browse/OCPBUGS-62404): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.21 [#438](https://github.com/openshift/csi-operator/pull/438)
* [STOR-1945](https://issues.redhat.com/browse/STOR-1945): STOR-2056: add Azure File NFS test manifest [#445](https://github.com/openshift/csi-operator/pull/445)
* [OCPBUGS-62374](https://issues.redhat.com/browse/OCPBUGS-62374): Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.21 [#437](https://github.com/openshift/csi-operator/pull/437)
* [MULTIARCH-5554](https://issues.redhat.com/browse/MULTIARCH-5554): update smb-csi-driver-operator support to add ppc64le [#428](https://github.com/openshift/csi-operator/pull/428)
* [OCPBUGS-62427](https://issues.redhat.com/browse/OCPBUGS-62427): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.21 [#439](https://github.com/openshift/csi-operator/pull/439)
* [OCPBUGS-62348](https://issues.redhat.com/browse/OCPBUGS-62348): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.21 [#436](https://github.com/openshift/csi-operator/pull/436)
* [OCPBUGS-61955](https://issues.redhat.com/browse/OCPBUGS-61955): Add withCABundleDaemonSetHook() to AWS EFS operator [#433](https://github.com/openshift/csi-operator/pull/433)
* [OCPBUGS-60637](https://issues.redhat.com/browse/OCPBUGS-60637): add runAsUser hook for operator deployment controller [#431](https://github.com/openshift/csi-operator/pull/431)
* NO-JIRA: Centralize injection of hosted-kubeconfig volume [#311](https://github.com/openshift/csi-operator/pull/311)
* NO-JIRA: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.21 [#429](https://github.com/openshift/csi-operator/pull/429)
* [OCPBUGS-54385](https://issues.redhat.com/browse/OCPBUGS-54385): Avoid informer resync [#432](https://github.com/openshift/csi-operator/pull/432)
* NO-JIRA: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.21 [#427](https://github.com/openshift/csi-operator/pull/427)
* NO-JIRA: Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.21 [#425](https://github.com/openshift/csi-operator/pull/425)
* NO-JIRA: azure-disk, azure-file sync code de-duplication [#303](https://github.com/openshift/csi-operator/pull/303)
* [STOR-2477](https://issues.redhat.com/browse/STOR-2477): Correct efs single-zone storageclass [#404](https://github.com/openshift/csi-operator/pull/404)
* [OCPBUGS-60655](https://issues.redhat.com/browse/OCPBUGS-60655): Disable LUN stress test for azure-file [#418](https://github.com/openshift/csi-operator/pull/418)
* [OCPBUGS-60464](https://issues.redhat.com/browse/OCPBUGS-60464): Bump library-go to fix panic [#417](https://github.com/openshift/csi-operator/pull/417)
* [STOR-2394](https://issues.redhat.com/browse/STOR-2394): Bump all deps for 4.20 [#408](https://github.com/openshift/csi-operator/pull/408)
* [STOR-2479](https://issues.redhat.com/browse/STOR-2479): Add CredentialsRequest for the EFS node DaemonSet [#389](https://github.com/openshift/csi-operator/pull/389)
* [STOR-2330](https://issues.redhat.com/browse/STOR-2330): Add labels to subscribe openstack cinder and manila CSI driver controllers to NPs [#409](https://github.com/openshift/csi-operator/pull/409)
* [OCPBUGS-57395](https://issues.redhat.com/browse/OCPBUGS-57395): Remove stale conditions [#406](https://github.com/openshift/csi-operator/pull/406)
* [OCPBUGS-58254](https://issues.redhat.com/browse/OCPBUGS-58254): Bump library-go [#405](https://github.com/openshift/csi-operator/pull/405)
* [STOR-2331](https://issues.redhat.com/browse/STOR-2331): Add labels to subscribe SMB CSI driver operator and controller to NPs [#400](https://github.com/openshift/csi-operator/pull/400)
* [STOR-2330](https://issues.redhat.com/browse/STOR-2330): Add labels to subscribe Azure disk and file CSI driver controllers to NPs [#396](https://github.com/openshift/csi-operator/pull/396)
* [OCPBUGS-57768](https://issues.redhat.com/browse/OCPBUGS-57768): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.20 [#399](https://github.com/openshift/csi-operator/pull/399)
* [OCPBUGS-57739](https://issues.redhat.com/browse/OCPBUGS-57739): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.20 [#398](https://github.com/openshift/csi-operator/pull/398)
* [OCPBUGS-57700](https://issues.redhat.com/browse/OCPBUGS-57700): Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.20 [#397](https://github.com/openshift/csi-operator/pull/397)
* [OCPBUGS-57565](https://issues.redhat.com/browse/OCPBUGS-57565): Updating csi-driver-manila-operator-container image to be consistent with ART for 4.20 [#394](https://github.com/openshift/csi-operator/pull/394)
* [STOR-2331](https://issues.redhat.com/browse/STOR-2331): Add labels to subscribe AWS-EFS CSI driver operator to NPs [#391](https://github.com/openshift/csi-operator/pull/391)
* [OCPBUGS-57680](https://issues.redhat.com/browse/OCPBUGS-57680): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.20 [#395](https://github.com/openshift/csi-operator/pull/395)
* [STOR-2477](https://issues.redhat.com/browse/STOR-2477): create-efs-volume: add single-zone support [#390](https://github.com/openshift/csi-operator/pull/390)
* [OCPBUGS-57545](https://issues.redhat.com/browse/OCPBUGS-57545): Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.20 [#393](https://github.com/openshift/csi-operator/pull/393)
* Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.20 [#392](https://github.com/openshift/csi-operator/pull/392)
* [STOR-2330](https://issues.redhat.com/browse/STOR-2330): Add labels to subscribe AWS-EBS CSI driver controller to NPs [#387](https://github.com/openshift/csi-operator/pull/387)
* NO-JIRA: create-efs-volume: print files to log as a fallback [#388](https://github.com/openshift/csi-operator/pull/388)
* NO-JIRA: Update openstack approvers [#385](https://github.com/openshift/csi-operator/pull/385)
* [OCPBUGS-54975](https://issues.redhat.com/browse/OCPBUGS-54975): Fix Cinder, Manila driver metrics [#379](https://github.com/openshift/csi-operator/pull/379)
* [OCPBUGS-56128](https://issues.redhat.com/browse/OCPBUGS-56128): openstack-cinder: Set --with-topology flag for node driver also [#383](https://github.com/openshift/csi-operator/pull/383)
* [STOR-2408](https://issues.redhat.com/browse/STOR-2408): Bump OLM metadata to 4.20 [#382](https://github.com/openshift/csi-operator/pull/382)
* [OCPBUGS-50493](https://issues.redhat.com/browse/OCPBUGS-50493): Use 127.0.0.1 for healtz http-endpoints [#364](https://github.com/openshift/csi-operator/pull/364)
* NO-JIRA: build only needed cmd in container image [#329](https://github.com/openshift/csi-operator/pull/329)
* [OCPBUGS-54382](https://issues.redhat.com/browse/OCPBUGS-54382): Correct ASH driver inject env config [#376](https://github.com/openshift/csi-operator/pull/376)
* [OSASINFRA-3652](https://issues.redhat.com/browse/OSASINFRA-3652): openstack-cinder: Use new --with-topology flag [#345](https://github.com/openshift/csi-operator/pull/345)
* [STOR-2126](https://issues.redhat.com/browse/STOR-2126): Enable readOnlyFileSystem [#370](https://github.com/openshift/csi-operator/pull/370)
* [OCPBUGS-54447](https://issues.redhat.com/browse/OCPBUGS-54447): Enable required driver services [#369](https://github.com/openshift/csi-operator/pull/369)
* [OCPBUGS-54180](https://issues.redhat.com/browse/OCPBUGS-54180): Disable remove-not-ready-taint for azure disk csi driver [#371](https://github.com/openshift/csi-operator/pull/371)
* [OCPBUGS-54230](https://issues.redhat.com/browse/OCPBUGS-54230): Bump library-go [#372](https://github.com/openshift/csi-operator/pull/372)
* [STOR-1877](https://issues.redhat.com/browse/STOR-1877): Run operators without root user control [#368](https://github.com/openshift/csi-operator/pull/368)
* [STOR-1880](https://issues.redhat.com/browse/STOR-1880): Role and ClusterRole with too wide permissions [#367](https://github.com/openshift/csi-operator/pull/367)
* [OCPBUGS-41827](https://issues.redhat.com/browse/OCPBUGS-41827): update injector to use a secret rather than an environment variable [#357](https://github.com/openshift/csi-operator/pull/357)
* NO-JIRA: Fixed typo in README.md [#348](https://github.com/openshift/csi-operator/pull/348)
* [STOR-2252](https://issues.redhat.com/browse/STOR-2252): Bump all deps [#361](https://github.com/openshift/csi-operator/pull/361)
* NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS [#363](https://github.com/openshift/csi-operator/pull/363)
* [CFE-1132](https://issues.redhat.com/browse/CFE-1132): EFS Access Point Tags Update DAY2 [#313](https://github.com/openshift/csi-operator/pull/313)
* [CFE-1131](https://issues.redhat.com/browse/CFE-1131): AWS Tags DAY2 Update [#297](https://github.com/openshift/csi-operator/pull/297)
* [STOR-2263](https://issues.redhat.com/browse/STOR-2263): correct smb csi driver test manifest [#360](https://github.com/openshift/csi-operator/pull/360)
* NO-JIRA: Remove `inject-proxy` annotations for aws-ebs, aws-efs node daemonsets [#308](https://github.com/openshift/csi-operator/pull/308)
* [OCPBUGS-48507](https://issues.redhat.com/browse/OCPBUGS-48507): openstack-manila: update PodDisruptionBudget name [#353](https://github.com/openshift/csi-operator/pull/353)
* [STOR-2078](https://issues.redhat.com/browse/STOR-2078): Enable VolumeAttributesClass on AWS EBS for resizer + provisioner [#314](https://github.com/openshift/csi-operator/pull/314)
* NO-JIRA: Update golang.org/x/net to v0.34.0 [#352](https://github.com/openshift/csi-operator/pull/352)
* [OCPBUGS-45073](https://issues.redhat.com/browse/OCPBUGS-45073): Support HCP labels [#332](https://github.com/openshift/csi-operator/pull/332)
* [STOR-2260](https://issues.redhat.com/browse/STOR-2260): Bump OLM metadata to 4.19 [#351](https://github.com/openshift/csi-operator/pull/351)
* [OCPBUGS-45591](https://issues.redhat.com/browse/OCPBUGS-45591): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.19 [#342](https://github.com/openshift/csi-operator/pull/342)
* [OCPBUGS-44723](https://issues.redhat.com/browse/OCPBUGS-44723): remove EFS driver metrics [#330](https://github.com/openshift/csi-operator/pull/330)
* [OCPBUGS-45374](https://issues.redhat.com/browse/OCPBUGS-45374): Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.19 [#337](https://github.com/openshift/csi-operator/pull/337)
* [OCPBUGS-45622](https://issues.redhat.com/browse/OCPBUGS-45622): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.19 [#343](https://github.com/openshift/csi-operator/pull/343)
* Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.19 [#341](https://github.com/openshift/csi-operator/pull/341)
* [OCPBUGS-45508](https://issues.redhat.com/browse/OCPBUGS-45508): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.19 [#340](https://github.com/openshift/csi-operator/pull/340)
* [OCPBUGS-45395](https://issues.redhat.com/browse/OCPBUGS-45395): Updating csi-driver-manila-operator-container image to be consistent with ART for 4.19 [#339](https://github.com/openshift/csi-operator/pull/339)
* [OCPBUGS-45352](https://issues.redhat.com/browse/OCPBUGS-45352): Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.19 [#336](https://github.com/openshift/csi-operator/pull/336)
* [OCPBUGS-45267](https://issues.redhat.com/browse/OCPBUGS-45267): openstack-manila: modify assets selectors [#335](https://github.com/openshift/csi-operator/pull/335)
* [OCPBUGS-43357](https://issues.redhat.com/browse/OCPBUGS-43357): support hcp tolerations [#326](https://github.com/openshift/csi-operator/pull/326)
* [OSASINFRA-3626](https://issues.redhat.com/browse/OSASINFRA-3626): Resize support with the OpenStack Manila CSI Driver [#322](https://github.com/openshift/csi-operator/pull/322)
* [STOR-2017](https://issues.redhat.com/browse/STOR-2017): Bump library-go and API [#325](https://github.com/openshift/csi-operator/pull/325)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#306](https://github.com/openshift/csi-operator/pull/306)
* NO-JIRA: ignore cmd/generator/main.go in .snyk [#295](https://github.com/openshift/csi-operator/pull/295)
* [OSASINFRA-3535](https://issues.redhat.com/browse/OSASINFRA-3535): openstack-cinder: Watch management cluster for cloud-provider config [#321](https://github.com/openshift/csi-operator/pull/321)
* [OCPBUGS-44340](https://issues.redhat.com/browse/OCPBUGS-44340): Fix error handling for starter controller [#318](https://github.com/openshift/csi-operator/pull/318)
* [OSASINFRA-3638](https://issues.redhat.com/browse/OSASINFRA-3638): Add support for Hypershift to Manila CSI [#312](https://github.com/openshift/csi-operator/pull/312)
* [OSASINFRA-3535](https://issues.redhat.com/browse/OSASINFRA-3535): Add support for Hypershift to Cinder CSI [#302](https://github.com/openshift/csi-operator/pull/302)
* NO-JIRA: Add openstack-approvers to root OWNERS [#315](https://github.com/openshift/csi-operator/pull/315)
* [OSASINFRA-3621](https://issues.redhat.com/browse/OSASINFRA-3621): Remove legacy csi-driver-manila-operator [#317](https://github.com/openshift/csi-operator/pull/317)
* [OSASINFRA-3618](https://issues.redhat.com/browse/OSASINFRA-3618): Add Cinder CSI support (part 3) [#298](https://github.com/openshift/csi-operator/pull/298)
* [OSASINFRA-3654](https://issues.redhat.com/browse/OSASINFRA-3654): Include OpenStack test manifest to test/e2e [#316](https://github.com/openshift/csi-operator/pull/316)
* [OSASINFRA-3620](https://issues.redhat.com/browse/OSASINFRA-3620): Add manila csi [#288](https://github.com/openshift/csi-operator/pull/288)
* NO-JIRA: Add OWNERS files for OpenStack-specific components/assets [#299](https://github.com/openshift/csi-operator/pull/299)
* [HOSTEDCP-2032](https://issues.redhat.com/browse/HOSTEDCP-2032): Set azure disk & file Secrets Store CSI Volume [#309](https://github.com/openshift/csi-operator/pull/309)
* [STOR-1844](https://issues.redhat.com/browse/STOR-1844): remove config/samba/manifests/preview symlink [#305](https://github.com/openshift/csi-operator/pull/305)
* [OCPBUGS-42325](https://issues.redhat.com/browse/OCPBUGS-42325): Set separate secrets for file and disk config on HyperShift [#290](https://github.com/openshift/csi-operator/pull/290)
* [OCPBUGS-43562](https://issues.redhat.com/browse/OCPBUGS-43562): Add missing proxy hook for `openstack-cinder` driver [#304](https://github.com/openshift/csi-operator/pull/304)
* [OCPBUGS-43653](https://issues.redhat.com/browse/OCPBUGS-43653): Add missing credentials secret hook [#307](https://github.com/openshift/csi-operator/pull/307)
* [OSASINFRA-3628](https://issues.redhat.com/browse/OSASINFRA-3628): Make guest namespace configurable [#294](https://github.com/openshift/csi-operator/pull/294)
* [STOR-1844](https://issues.redhat.com/browse/STOR-1844): update OLM manifests to use stable channel [#300](https://github.com/openshift/csi-operator/pull/300)
* [OSASINFRA-3618](https://issues.redhat.com/browse/OSASINFRA-3618): Add Cinder CSI support (part 2) [#275](https://github.com/openshift/csi-operator/pull/275)
* [OCPBUGS-42939](https://issues.redhat.com/browse/OCPBUGS-42939): Correct aws efs csi driver config as removable [#293](https://github.com/openshift/csi-operator/pull/293)
* [OCPBUGS-38922](https://issues.redhat.com/browse/OCPBUGS-38922): add tag matching to Azure File storage class [#272](https://github.com/openshift/csi-operator/pull/272)
* [OCPBUGS-41365](https://issues.redhat.com/browse/OCPBUGS-41365): add ability to control kube rbac proxy container image… [#289](https://github.com/openshift/csi-operator/pull/289)
* NO-JIRA: Add SidecarConfig.WithPatches [#285](https://github.com/openshift/csi-operator/pull/285)
* NO-JIRA: Remove generated assets before generation [#287](https://github.com/openshift/csi-operator/pull/287)
* NO-JIRA: List all supported operators in README [#277](https://github.com/openshift/csi-operator/pull/277)
* [OSASINFRA-3611](https://issues.redhat.com/browse/OSASINFRA-3611): Add legacy csi-driver-manila-operator [#280](https://github.com/openshift/csi-operator/pull/280)
* NO-JIRA: Move doc on migrating CSI Driver in-tree [#279](https://github.com/openshift/csi-operator/pull/279)
* [OCPBUGS-41265](https://issues.redhat.com/browse/OCPBUGS-41265): Disable LUN stress test for azure-disk [#282](https://github.com/openshift/csi-operator/pull/282)
* [OSASINFRA-3609](https://issues.redhat.com/browse/OSASINFRA-3609): Update legacy/openstack-cinder-csi-driver-operator [#281](https://github.com/openshift/csi-operator/pull/281)
* [OSASINFRA-3609](https://issues.redhat.com/browse/OSASINFRA-3609): Add Cinder CSI support (part 1) [#278](https://github.com/openshift/csi-operator/pull/278)
* [STOR-1422](https://issues.redhat.com/browse/STOR-1422): Bump(openshift/api): to get EFS volume metrics GA [#273](https://github.com/openshift/csi-operator/pull/273)
* [OCPBUGS-40526](https://issues.redhat.com/browse/OCPBUGS-40526): Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.18 [#270](https://github.com/openshift/csi-operator/pull/270)
* [OCPBUGS-41149](https://issues.redhat.com/browse/OCPBUGS-41149): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.18 [#271](https://github.com/openshift/csi-operator/pull/271)
* [OCPBUGS-39591](https://issues.redhat.com/browse/OCPBUGS-39591): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.18 [#269](https://github.com/openshift/csi-operator/pull/269)
* [OCPBUGS-39445](https://issues.redhat.com/browse/OCPBUGS-39445): Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.18 [#268](https://github.com/openshift/csi-operator/pull/268)
* Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.18 [#267](https://github.com/openshift/csi-operator/pull/267)
* [OCPBUGS-38578](https://issues.redhat.com/browse/OCPBUGS-38578): Update aws-efs-csi-driver-operator image-references name [#264](https://github.com/openshift/csi-operator/pull/264)
* [STOR-1819](https://issues.redhat.com/browse/STOR-1819): Distribute OCP specific test manifest with create-efs-volume [#260](https://github.com/openshift/csi-operator/pull/260)
* [OCPBUGS-38620](https://issues.redhat.com/browse/OCPBUGS-38620): Some CSI driver containers missing terminationMessagePolicy [#262](https://github.com/openshift/csi-operator/pull/262)
* [STOR-2009](https://issues.redhat.com/browse/STOR-2009): Bump OLM metadata to 4.18 [#259](https://github.com/openshift/csi-operator/pull/259)
* [OCPBUGS-38578](https://issues.redhat.com/browse/OCPBUGS-38578): efs: fix tools image reference [#261](https://github.com/openshift/csi-operator/pull/261)
* [STOR-1993](https://issues.redhat.com/browse/STOR-1993): add init container in EFS CSI controller pod [#252](https://github.com/openshift/csi-operator/pull/252)
* [STOR-1819](https://issues.redhat.com/browse/STOR-1819): Add manifest with OCP specific test config [#258](https://github.com/openshift/csi-operator/pull/258)
* [STOR-1422](https://issues.redhat.com/browse/STOR-1422): Volume Metrics for EFS CSI Driver [#255](https://github.com/openshift/csi-operator/pull/255)
* [STOR-1819](https://issues.redhat.com/browse/STOR-1819): Add manifest with OCP specific test config [#254](https://github.com/openshift/csi-operator/pull/254)
* NO-JIRA: use service account namespace placeholder for smb role bindings [#250](https://github.com/openshift/csi-operator/pull/250)
* [STOR-2002](https://issues.redhat.com/browse/STOR-2002): add Azure File snapshot support [#253](https://github.com/openshift/csi-operator/pull/253)
* [OCPBUGS-37488](https://issues.redhat.com/browse/OCPBUGS-37488): add init container in EBS CSI controller pod [#248](https://github.com/openshift/csi-operator/pull/248)
* [STOR-1856](https://issues.redhat.com/browse/STOR-1856): add STS hook for EFS credentials request controller [#251](https://github.com/openshift/csi-operator/pull/251)
* [STOR-1874](https://issues.redhat.com/browse/STOR-1874): Use real HyperShift API [#236](https://github.com/openshift/csi-operator/pull/236)
* [OCPBUGS-37274](https://issues.redhat.com/browse/OCPBUGS-37274): Add FIPS_ENABLED to env vars for aws-efs-csi-driver (2) [#249](https://github.com/openshift/csi-operator/pull/249)
* [STOR-1856](https://issues.redhat.com/browse/STOR-1856): remove aws efs operator legacy dir [#244](https://github.com/openshift/csi-operator/pull/244)
* [STOR-1596](https://issues.redhat.com/browse/STOR-1596): Bump all deps for 4.17 [#240](https://github.com/openshift/csi-operator/pull/240)
* [STOR-1856](https://issues.redhat.com/browse/STOR-1856): STOR-1606: migrate legacy AWS EFS operator code to csi-operator [#237](https://github.com/openshift/csi-operator/pull/237)
* [OCPBUGS-36936](https://issues.redhat.com/browse/OCPBUGS-36936): Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.17 [#241](https://github.com/openshift/csi-operator/pull/241)
* [OCPBUGS-36948](https://issues.redhat.com/browse/OCPBUGS-36948): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.17 [#243](https://github.com/openshift/csi-operator/pull/243)
* [OCPBUGS-36942](https://issues.redhat.com/browse/OCPBUGS-36942): Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.17 [#242](https://github.com/openshift/csi-operator/pull/242)
* [STOR-1606](https://issues.redhat.com/browse/STOR-1606): Bump OLM metadata to 4.17 [#239](https://github.com/openshift/csi-operator/pull/239)
* [OCPBUGS-34451](https://issues.redhat.com/browse/OCPBUGS-34451): Bump go version to be consistent with ART [#238](https://github.com/openshift/csi-operator/pull/238)
* [STOR-1290](https://issues.redhat.com/browse/STOR-1290): don't pass credentials via environment variables in AWS EBS [#202](https://github.com/openshift/csi-operator/pull/202)
* [STOR-1856](https://issues.redhat.com/browse/STOR-1856): migrate AWS EFS operator to csi-operator [#232](https://github.com/openshift/csi-operator/pull/232)
* NO-JIRA: keep smb test storageclass consistent with official doc [#234](https://github.com/openshift/csi-operator/pull/234)
* [OCPBUGS-34667](https://issues.redhat.com/browse/OCPBUGS-34667): Ensure Node Metric Service is created in the openshift-cluster-csi-drivers namespace for both OpenShift and Hypershift [#233](https://github.com/openshift/csi-operator/pull/233)
* [OCPBUGS-34189](https://issues.redhat.com/browse/OCPBUGS-34189): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.17 [#227](https://github.com/openshift/csi-operator/pull/227)
* [OCPBUGS-32370](https://issues.redhat.com/browse/OCPBUGS-32370): Configure scraping of node metrics [#223](https://github.com/openshift/csi-operator/pull/223)
* [OCPBUGS-33776](https://issues.redhat.com/browse/OCPBUGS-33776): Adjust port for registrar sidecar in aws-ebs csi driver container [#225](https://github.com/openshift/csi-operator/pull/225)
* [OCPBUGS-32785](https://issues.redhat.com/browse/OCPBUGS-32785): add token audience for Azure File [#224](https://github.com/openshift/csi-operator/pull/224)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): auto-generate assets for CIFS/Samba driver [#217](https://github.com/openshift/csi-operator/pull/217)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): Add terminationMessagePolicy to all containers [#216](https://github.com/openshift/csi-operator/pull/216)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Delete static resources when ClusterCSIDriver is removed [#215](https://github.com/openshift/csi-operator/pull/215)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#170](https://github.com/openshift/csi-operator/pull/170)
* NO-JIRA: Remove unused assests for __azure-file__ [#213](https://github.com/openshift/csi-operator/pull/213)
* [OCPBUGS-31044](https://issues.redhat.com/browse/OCPBUGS-31044): Add cluster-wide proxy in the azure-file driver node container [#207](https://github.com/openshift/csi-operator/pull/207)
* [OCPBUGS-31306](https://issues.redhat.com/browse/OCPBUGS-31306): Azure Disk: Add cluster-wide proxy in the driver container in the node [#206](https://github.com/openshift/csi-operator/pull/206)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#214](https://github.com/openshift/csi-operator/pull/214)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add OLM metadata for SMB operator [#210](https://github.com/openshift/csi-operator/pull/210)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add test manifest for SMB CSI driver [#212](https://github.com/openshift/csi-operator/pull/212)
* [STOR-1818](https://issues.redhat.com/browse/STOR-1818): enable pvcDataSource capability for tests [#204](https://github.com/openshift/csi-operator/pull/204)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Simple rename of objects in `assets/overlays/samba/generated/standalone/` [#211](https://github.com/openshift/csi-operator/pull/211)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Add Dockerfile for Samba operator [#209](https://github.com/openshift/csi-operator/pull/209)
* Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 [#168](https://github.com/openshift/csi-operator/pull/168)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Minimal implementation of CIFS/Samba CSI driver operator [#205](https://github.com/openshift/csi-operator/pull/205)
* Bump google.golang.org/grpc from 1.61.0 to 1.62.1 [#190](https://github.com/openshift/csi-operator/pull/190)
* Bump github.com/go-openapi/swag from 0.22.9 to 0.23.0 [#198](https://github.com/openshift/csi-operator/pull/198)
* Bump github.com/emicklei/go-restful/v3 from 3.11.2 to 3.12.0 [#203](https://github.com/openshift/csi-operator/pull/203)
* Bump github.com/felixge/fgprof from 0.9.3 to 0.9.4 [#185](https://github.com/openshift/csi-operator/pull/185)
* [STOR-1794](https://issues.redhat.com/browse/STOR-1794): add location for azcopy logs [#200](https://github.com/openshift/csi-operator/pull/200)
* [OCPBUGS-23260](https://issues.redhat.com/browse/OCPBUGS-23260): Explicitly reserve 1 attachment for the root disk [#199](https://github.com/openshift/csi-operator/pull/199)
* Bump go.uber.org/zap from 1.26.0 to 1.27.0 [#173](https://github.com/openshift/csi-operator/pull/173)
* Bump the opentelemetry-dependencies group with 8 updates [#177](https://github.com/openshift/csi-operator/pull/177)
* Bump the golang-dependencies group with 6 updates [#191](https://github.com/openshift/csi-operator/pull/191)
* [OCPBUGS-30620](https://issues.redhat.com/browse/OCPBUGS-30620): remove legacy directory and duplicate Dockerfile.*.test files [#196](https://github.com/openshift/csi-operator/pull/196)
* [OCPBUGS-30469](https://issues.redhat.com/browse/OCPBUGS-30469): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#197](https://github.com/openshift/csi-operator/pull/197)
* NO-JIRA: Configure dependabot for security updates only [#174](https://github.com/openshift/csi-operator/pull/174)
* [OCPBUGS-30620](https://issues.redhat.com/browse/OCPBUGS-30620): move test manifests to top-level directory [#194](https://github.com/openshift/csi-operator/pull/194)
* [STOR-1464](https://issues.redhat.com/browse/STOR-1464): Enable RWOP tests in CI [#187](https://github.com/openshift/csi-operator/pull/187)
* [STOR-1762](https://issues.redhat.com/browse/STOR-1762): Add azure file hypershift [#163](https://github.com/openshift/csi-operator/pull/163)
* Bump the k8s-dependencies group with 6 updates [#172](https://github.com/openshift/csi-operator/pull/172)
* [STOR-1726](https://issues.redhat.com/browse/STOR-1726): Bump `openshift/api` dependency [#169](https://github.com/openshift/csi-operator/pull/169)
* [STOR-1750](https://issues.redhat.com/browse/STOR-1750): Build image from legacy folder [#162](https://github.com/openshift/csi-operator/pull/162)
* Bump the opentelemetry-dependencies group with 8 updates [#161](https://github.com/openshift/csi-operator/pull/161)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#156](https://github.com/openshift/csi-operator/pull/156)
* [OCPBUGS-26924](https://issues.redhat.com/browse/OCPBUGS-26924): Add healthcheck for node-driver-registrar container [#155](https://github.com/openshift/csi-operator/pull/155)
* Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.19.0 to 2.19.1 [#149](https://github.com/openshift/csi-operator/pull/149)
* [STOR-1750](https://issues.redhat.com/browse/STOR-1750): Add legacy azure file driver [#154](https://github.com/openshift/csi-operator/pull/154)
* Bump go.etcd.io/etcd/client/v3 from 3.5.11 to 3.5.12 [#150](https://github.com/openshift/csi-operator/pull/150)
* Bump github.com/evanphx/json-patch from 5.8.1+incompatible to 5.9.0+incompatible [#148](https://github.com/openshift/csi-operator/pull/148)
* Bump github.com/go-openapi/swag from 0.22.8 to 0.22.9 [#147](https://github.com/openshift/csi-operator/pull/147)
* Bump github.com/google/uuid from 1.5.0 to 1.6.0 [#144](https://github.com/openshift/csi-operator/pull/144)
* Bump google.golang.org/grpc from 1.60.1 to 1.61.0 [#145](https://github.com/openshift/csi-operator/pull/145)
* Bump the k8s-dependencies group with 3 updates [#146](https://github.com/openshift/csi-operator/pull/146)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#137](https://github.com/openshift/csi-operator/pull/137)
* Bump github.com/go-openapi/swag from 0.22.7 to 0.22.8 [#142](https://github.com/openshift/csi-operator/pull/142)
* Bump github.com/pkg/profile from 1.3.0 to 1.7.0 [#138](https://github.com/openshift/csi-operator/pull/138)
* Bump github.com/emicklei/go-restful/v3 from 3.11.0 to 3.11.2 [#141](https://github.com/openshift/csi-operator/pull/141)
* Bump go.uber.org/zap from 1.24.0 to 1.26.0 [#139](https://github.com/openshift/csi-operator/pull/139)
* Bump github.com/go-openapi/jsonreference from 0.20.2 to 0.20.4 [#140](https://github.com/openshift/csi-operator/pull/140)
* Bump github.com/go-openapi/swag from 0.22.4 to 0.22.7 [#136](https://github.com/openshift/csi-operator/pull/136)
* Bump github.com/prometheus/common from 0.45.0 to 0.46.0 [#135](https://github.com/openshift/csi-operator/pull/135)
* Bump the opentelemetry-dependencies group with 4 updates [#134](https://github.com/openshift/csi-operator/pull/134)
* Bump github.com/go-openapi/jsonpointer from 0.19.6 to 0.20.2 [#128](https://github.com/openshift/csi-operator/pull/128)
* Bump github.com/evanphx/json-patch from 5.6.0+incompatible to 5.8.1+incompatible [#125](https://github.com/openshift/csi-operator/pull/125)
* Bump the k8s-dependencies group with 5 updates [#133](https://github.com/openshift/csi-operator/pull/133)
* Bump go.etcd.io/etcd/client/v3 from 3.5.9 to 3.5.11 [#124](https://github.com/openshift/csi-operator/pull/124)
* [STOR-1722](https://issues.redhat.com/browse/STOR-1722): Add support hypershift for azure-disk [#73](https://github.com/openshift/csi-operator/pull/73)
* Bump github.com/go-logr/logr from 1.3.0 to 1.4.1 [#129](https://github.com/openshift/csi-operator/pull/129)
* [OCPBUGS-27267](https://issues.redhat.com/browse/OCPBUGS-27267): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 [#132](https://github.com/openshift/csi-operator/pull/132)
* Bump the opentelemetry-dependencies group with 2 updates [#122](https://github.com/openshift/csi-operator/pull/122)
* Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 [#123](https://github.com/openshift/csi-operator/pull/123)
* Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.9 to 3.5.11 [#119](https://github.com/openshift/csi-operator/pull/119)
* Bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 [#120](https://github.com/openshift/csi-operator/pull/120)
* NO-JIRA: Bump github.com/go-errors/errors from 1.4.2 to 1.5.1 [#106](https://github.com/openshift/csi-operator/pull/106)
* NO-JIRA: Bump google.golang.org/grpc from 1.59.0 to 1.60.1 [#104](https://github.com/openshift/csi-operator/pull/104)
* NO-JIRA: Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 [#103](https://github.com/openshift/csi-operator/pull/103)
* NO-JIRA: Bump github.com/google/uuid from 1.3.1 to 1.5.0 [#101](https://github.com/openshift/csi-operator/pull/101)
* [OCPBUGS-27056](https://issues.redhat.com/browse/OCPBUGS-27056): Update to RHEL9 and go 1.21 [#117](https://github.com/openshift/csi-operator/pull/117)
* NO-JIRA: Bump the golang-dependencies group with 5 updates [#109](https://github.com/openshift/csi-operator/pull/109)
* NO-JIRA: Bump github.com/prometheus/client_golang from 1.17.0 to 1.18.0 [#108](https://github.com/openshift/csi-operator/pull/108)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): AWS EBS operator: Release leadership on SIGTERM [#94](https://github.com/openshift/csi-operator/pull/94)
* NO-JIRA: Bump google.golang.org/protobuf from 1.31.0 to 1.32.0 [#107](https://github.com/openshift/csi-operator/pull/107)
* NO-JIRA: Add valid-reference label to dependabot PRs [#116](https://github.com/openshift/csi-operator/pull/116)
* [OCPBUGS-27050](https://issues.redhat.com/browse/OCPBUGS-27050): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.16 [#114](https://github.com/openshift/csi-operator/pull/114)
* [STOR-1713](https://issues.redhat.com/browse/STOR-1713): Don't ignore azure-disk-csi-driver-operator [#110](https://github.com/openshift/csi-operator/pull/110)
* NO-JIRA: Add dependabot configuration [#97](https://github.com/openshift/csi-operator/pull/97)
* [STOR-1696](https://issues.redhat.com/browse/STOR-1696): Add legacy azure disk [#88](https://github.com/openshift/csi-operator/pull/88)
* [OCPBUGS-24245](https://issues.redhat.com/browse/OCPBUGS-24245): Add selinux [#89](https://github.com/openshift/csi-operator/pull/89)
* [OCPBUGS-25125](https://issues.redhat.com/browse/OCPBUGS-25125): Add test AssetOrderer [#86](https://github.com/openshift/csi-operator/pull/86)
* [OCPBUGS-25557](https://issues.redhat.com/browse/OCPBUGS-25557): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#87](https://github.com/openshift/csi-operator/pull/87)
* [OCPBUGS-25125](https://issues.redhat.com/browse/OCPBUGS-25125): Create RBAC objects first [#84](https://github.com/openshift/csi-operator/pull/84)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#76](https://github.com/openshift/csi-operator/pull/76)
* NO-JIRA: Add "Quick start" section to `README.md` [#80](https://github.com/openshift/csi-operator/pull/80)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#85](https://github.com/openshift/csi-operator/pull/85)
* [OCPBUGS-25147](https://issues.redhat.com/browse/OCPBUGS-25147): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#81](https://github.com/openshift/csi-operator/pull/81)
* [OCPBUGS-23827](https://issues.redhat.com/browse/OCPBUGS-23827): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#77](https://github.com/openshift/csi-operator/pull/77)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#79](https://github.com/openshift/csi-operator/pull/79)
* [OCPBUGS-24905](https://issues.redhat.com/browse/OCPBUGS-24905): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#78](https://github.com/openshift/csi-operator/pull/78)
* [STOR-1500](https://issues.redhat.com/browse/STOR-1500): Switch to the new operator [#69](https://github.com/openshift/csi-operator/pull/69)
* Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART [#75](https://github.com/openshift/csi-operator/pull/75)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#71](https://github.com/openshift/csi-operator/pull/71)
* [STOR-1400](https://issues.redhat.com/browse/STOR-1400): Add support for Batch DescribeVolume [#74](https://github.com/openshift/csi-operator/pull/74)
* [STOR-1400](https://issues.redhat.com/browse/STOR-1400): Sync sidecar arguments with upstream [#72](https://github.com/openshift/csi-operator/pull/72)
* [STOR-1500](https://issues.redhat.com/browse/STOR-1500): Add log for the new operator [#70](https://github.com/openshift/csi-operator/pull/70)
* Pull the latest AWS EBS operator [#67](https://github.com/openshift/csi-operator/pull/67)
* Fix vendoring of golang.org/x/net [#68](https://github.com/openshift/csi-operator/pull/68)
* hack: remove existing path from .gitignore [#65](https://github.com/openshift/csi-operator/pull/65)
* Drop Guest prefix from client names [#64](https://github.com/openshift/csi-operator/pull/64)
* Update all generated assets in a single run [#63](https://github.com/openshift/csi-operator/pull/63)
* Verify generated assets in `make verify` [#62](https://github.com/openshift/csi-operator/pull/62)
* Move operator config into pkg/drivers [#61](https://github.com/openshift/csi-operator/pull/61)
* Add AWS EBS CSI driver operator starter [#58](https://github.com/openshift/csi-operator/pull/58)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#59](https://github.com/openshift/csi-operator/pull/59)
* [STOR-1455](https://issues.redhat.com/browse/STOR-1455): Add asset generator [#53](https://github.com/openshift/csi-operator/pull/53)
* Delegate to aws-ebs-csi-driver-operator for tests and verify [#57](https://github.com/openshift/csi-operator/pull/57)
* Add aws ebs operator legacy [#56](https://github.com/openshift/csi-operator/pull/56)
* Add ci-operator config [#54](https://github.com/openshift/csi-operator/pull/54)
* Clean the repository, it will be reused for all CSI driver operators [#52](https://github.com/openshift/csi-operator/pull/52)
* Obsolete the operator [#51](https://github.com/openshift/csi-operator/pull/51)
* Fix hostpath image sample to support dynamic registration [#47](https://github.com/openshift/csi-operator/pull/47)
* Add kubelet-registration-path flag to csi-driver-registrar [#44](https://github.com/openshift/csi-operator/pull/44)
* Fix golint error [#45](https://github.com/openshift/csi-operator/pull/45)
* Output error message when failed to get CSIDriverDeployment and requeued [#46](https://github.com/openshift/csi-operator/pull/46)
* Add -nometadata to go-bindata to stop updating generated files by every build [#43](https://github.com/openshift/csi-operator/pull/43)
* Disable automatic installation of the operator in OpenShift [#41](https://github.com/openshift/csi-operator/pull/41)
* Pass SecurityContext to sidecar containers [#40](https://github.com/openshift/csi-operator/pull/40)
* Move EBS deployment sample to the right place [#39](https://github.com/openshift/csi-operator/pull/39)
* Use correct context timeouts [#38](https://github.com/openshift/csi-operator/pull/38)
* Add EBS sample deployment file [#37](https://github.com/openshift/csi-operator/pull/37)
* Add leader election to the operator [#36](https://github.com/openshift/csi-operator/pull/36)
* Embed git version into the operator binary [#35](https://github.com/openshift/csi-operator/pull/35)
* Generate bindata during build [#34](https://github.com/openshift/csi-operator/pull/34)
* Add more unit tests [#33](https://github.com/openshift/csi-operator/pull/33)
* Add controller unit tests [#32](https://github.com/openshift/csi-operator/pull/32)
* Fix deletion of non-namespaced objects [#31](https://github.com/openshift/csi-operator/pull/31)
* Fix e2e test [#30](https://github.com/openshift/csi-operator/pull/30)
* Add e2e test [#29](https://github.com/openshift/csi-operator/pull/29)
* Update to operator-sdk 0.1.1 [#28](https://github.com/openshift/csi-operator/pull/28)
* Fix liveness probe version [#27](https://github.com/openshift/csi-operator/pull/27)
* ADd a RHEL7 dockerfile and standardize format [#26](https://github.com/openshift/csi-operator/pull/26)
* Documentation update [#23](https://github.com/openshift/csi-operator/pull/23)
* Add unit test for validation [#14](https://github.com/openshift/csi-operator/pull/14)
* Fix status.conditions json name [#11](https://github.com/openshift/csi-operator/pull/11)
* Add CRD printer columns [#12](https://github.com/openshift/csi-operator/pull/12)
* Add configuration of liveness probe. [#9](https://github.com/openshift/csi-operator/pull/9)
* Increase resync period [#10](https://github.com/openshift/csi-operator/pull/10)
* Add /var/lib/kubelet HostPath directory to node drivers [#8](https://github.com/openshift/csi-operator/pull/8)
* Fix role bindings [#7](https://github.com/openshift/csi-operator/pull/7)
* Add liveness probe. [#6](https://github.com/openshift/csi-operator/pull/6)
* Fix operator images [#5](https://github.com/openshift/csi-operator/pull/5)
* Add OpenShift manifests to operator image [#4](https://github.com/openshift/csi-operator/pull/4)
* Use label selector for informers. [#3](https://github.com/openshift/csi-operator/pull/3)
* Use constants where appropriate [#2](https://github.com/openshift/csi-operator/pull/2)
* Add initial operator [#1](https://github.com/openshift/csi-operator/pull/1)
* And 27 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/csi-operator/compare/936b1710729592015497bea76b27f787ec742f3e...1f648349427a0f61e3022f8ec20f270394dc80c5)


### [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook/tree/a8f16141e4234fa2c9f6aeb8498622af6e4a080d)

* [OCPBUGS-87344](https://issues.redhat.com/browse/OCPBUGS-87344): Updating gcp-workload-identity-federation-webhook-container image to be consistent with ART for 5.0 [#19](https://github.com/openshift/gcp-workload-identity-federation-webhook/pull/19)
* [Full changelog](https://github.com/openshift/gcp-workload-identity-federation-webhook/compare/73d67a587c98f1e2aec3969c59a66458096cd80c...a8f16141e4234fa2c9f6aeb8498622af6e4a080d)


### [haproxy-router](https://github.com/openshift/router/tree/92a1fe6420e7fa5cff3ac1e4234b866e8f742c9f)

* [NE-2218](https://issues.redhat.com/browse/NE-2218): Add HAProxy standalone images for 2.8 and 3.2 [#780](https://github.com/openshift/router/pull/780)
* [OCPBUGS-87552](https://issues.redhat.com/browse/OCPBUGS-87552): Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 5.0 [#791](https://github.com/openshift/router/pull/791)
* [Full changelog](https://github.com/openshift/router/compare/3553702970b094986d91f218e3191487de46e476...92a1fe6420e7fa5cff3ac1e4234b866e8f742c9f)


### [hypershift](https://github.com/openshift/hypershift/tree/8ea96d7f8cfa3eb4e7dc93be96a04341fc5a2240)

* [OCPBUGS-98387](https://issues.redhat.com/browse/OCPBUGS-98387): Add retry logic to fix Azure self-managed e2e presubmit failures [#8983](https://github.com/openshift/hypershift/pull/8983)
* [OCPBUGS-93785](https://issues.redhat.com/browse/OCPBUGS-93785): fix(cpo): initialize nil resource requests map before applying overrides [#8924](https://github.com/openshift/hypershift/pull/8924)
* [OCPBUGS-91650](https://issues.redhat.com/browse/OCPBUGS-91650): disable consolidation in karpenter upgrade test [#8874](https://github.com/openshift/hypershift/pull/8874)
* [CNTRLPLANE-3553](https://issues.redhat.com/browse/CNTRLPLANE-3553): Wire osImageStream into NodePool controller (hash, token, status, validation) [#8730](https://github.com/openshift/hypershift/pull/8730)
* NO-JIRA: chore: Resolve git SHA for PULL_BASE_SHA in makefile [#8980](https://github.com/openshift/hypershift/pull/8980)
* [OCPBUGS-95615](https://issues.redhat.com/browse/OCPBUGS-95615): fix(kubevirt): use only first MachineInternalIP per family in EndpointSlice endpoints [#8892](https://github.com/openshift/hypershift/pull/8892)
* [CNTRLPLANE-3824](https://issues.redhat.com/browse/CNTRLPLANE-3824): Fix verify-crd-schema in git worktrees [#8975](https://github.com/openshift/hypershift/pull/8975)
* [GCP-859](https://issues.redhat.com/browse/GCP-859): scope PSC NAT subnet discovery to the management cluster VPC [#8927](https://github.com/openshift/hypershift/pull/8927)
* [CNTRLPLANE-3761](https://issues.redhat.com/browse/CNTRLPLANE-3761): replace git clean with find for mock cleanup [#8973](https://github.com/openshift/hypershift/pull/8973)
* NO-JIRA: chore: update core-reviewers membership [#8967](https://github.com/openshift/hypershift/pull/8967)
* [OTA-1764](https://issues.redhat.com/browse/OTA-1764): feat(cvo): add TLS cipher suites and minimum version flags [#8013](https://github.com/openshift/hypershift/pull/8013)
* [AROSLSRE-1158](https://issues.redhat.com/browse/AROSLSRE-1158): add --install-scope flag to hypershift install [#8725](https://github.com/openshift/hypershift/pull/8725)
* NO-JIRA: chore(deps): weekly dependabot consolidation [#8849](https://github.com/openshift/hypershift/pull/8849)
* [CNTRLPLANE-3616](https://issues.redhat.com/browse/CNTRLPLANE-3616): setting min-tls-version for the konnectivity-server container [#8866](https://github.com/openshift/hypershift/pull/8866)
* [CNTRLPLANE-3766](https://issues.redhat.com/browse/CNTRLPLANE-3766): add chai-bot CI daily health report instructions [#8918](https://github.com/openshift/hypershift/pull/8918)
* NO-JIRA: Remove address-review-comments GHA workflow [#8943](https://github.com/openshift/hypershift/pull/8943)
* [CNTRLPLANE-3698](https://issues.redhat.com/browse/CNTRLPLANE-3698): fix(install): replace context.TODO() with proper ctx parameter [#8932](https://github.com/openshift/hypershift/pull/8932)
* [CNTRLPLANE-3771](https://issues.redhat.com/browse/CNTRLPLANE-3771): fix /rebase GHA workflow for fork PRs [#8934](https://github.com/openshift/hypershift/pull/8934)
* NO-JIRA: chore: update github actions runner image to go 1.26.4 [#8888](https://github.com/openshift/hypershift/pull/8888)
* [AROSLSRE-830](https://issues.redhat.com/browse/AROSLSRE-830): Add etcd EndpointSlice self-registration to fix DNS resolution delays [#8613](https://github.com/openshift/hypershift/pull/8613)
* [OCPBUGS-92086](https://issues.redhat.com/browse/OCPBUGS-92086): GetVnetID is empty when running setup_all.sh in Managed AKS [#8830](https://github.com/openshift/hypershift/pull/8830)
* [OCPBUGS-84269](https://issues.redhat.com/browse/OCPBUGS-84269): fix(nodepool): skip CNI-internal IPs in ClusterNetworkCIDRConflict check [#8230](https://github.com/openshift/hypershift/pull/8230)
* [CNTRLPLANE-3619](https://issues.redhat.com/browse/CNTRLPLANE-3619): add azure CPO overrides for 4.22.0-4.22.3 [#8908](https://github.com/openshift/hypershift/pull/8908)
* [CNTRLPLANE-3696](https://issues.redhat.com/browse/CNTRLPLANE-3696): Remove stale TODO about ImagePullPolicy in DNS operator [#8923](https://github.com/openshift/hypershift/pull/8923)
* NO-JIRA: Fall back to AWS SDK default credential chain when no explicit credentials provided [#8889](https://github.com/openshift/hypershift/pull/8889)
* [CNTRLPLANE-3697](https://issues.redhat.com/browse/CNTRLPLANE-3697): Expand unit test coverage for KAS config params [#8922](https://github.com/openshift/hypershift/pull/8922)
* [CNTRLPLANE-3306](https://issues.redhat.com/browse/CNTRLPLANE-3306): add ExternalOIDCWithUpstreamParity e2e tests [#8287](https://github.com/openshift/hypershift/pull/8287)
* [CNTRLPLANE-3624](https://issues.redhat.com/browse/CNTRLPLANE-3624): e2e v2 test for control-plane-pki-operator TLS configuration [#8793](https://github.com/openshift/hypershift/pull/8793)
* [OCPBUGS-94238](https://issues.redhat.com/browse/OCPBUGS-94238): Add missing CLI IAM role policy entry [#8883](https://github.com/openshift/hypershift/pull/8883)
* NO-JIRA: Add missing verify targets to GitHub Actions workflow [#8870](https://github.com/openshift/hypershift/pull/8870)
* NO-JIRA: fix(e2e-v2): gate ConfigOperatorReconciliationSucceeded on 4.23+ [#8875](https://github.com/openshift/hypershift/pull/8875)
* [CNTRLPLANE-3532](https://issues.redhat.com/browse/CNTRLPLANE-3532): Add shared status patching helpers with optimistic locking [#8782](https://github.com/openshift/hypershift/pull/8782)
* [OCPBUGS-94178](https://issues.redhat.com/browse/OCPBUGS-94178): Remove --skip-crd-migration-phases flags from CAPI deployment [#8881](https://github.com/openshift/hypershift/pull/8881)
* NO-JIRA: add Konflux CI scripts reference and document validate-pr-override-images [#8852](https://github.com/openshift/hypershift/pull/8852)
* [CNTRLPLANE-3529](https://issues.redhat.com/browse/CNTRLPLANE-3529): Add operator IAM role creation command and install role ARN flags [#8636](https://github.com/openshift/hypershift/pull/8636)
* [CNTRLPLANE-3737](https://issues.redhat.com/browse/CNTRLPLANE-3737): Add find-push-pipelinerun script [#8851](https://github.com/openshift/hypershift/pull/8851)
* [GCP-841](https://issues.redhat.com/browse/GCP-841): remove ClusterResourceSet feature gate from CAPG manager args [#8795](https://github.com/openshift/hypershift/pull/8795)
* [GCP-866](https://issues.redhat.com/browse/GCP-866): chore(owners): add floresroger to gcp-reviewers [#8863](https://github.com/openshift/hypershift/pull/8863)
* [CNTRLPLANE-3733](https://issues.redhat.com/browse/CNTRLPLANE-3733): add --blog flag to /pr-report skill [#8848](https://github.com/openshift/hypershift/pull/8848)
* [CNTRLPLANE-3577](https://issues.redhat.com/browse/CNTRLPLANE-3577): test(nodepool): add NodeDrainTimeout propagation tests [#8737](https://github.com/openshift/hypershift/pull/8737)
* [CNTRLPLANE-3576](https://issues.redhat.com/browse/CNTRLPLANE-3576): add RestartDateAnnotation propagation tests [#8733](https://github.com/openshift/hypershift/pull/8733)
* [CNTRLPLANE-3565](https://issues.redhat.com/browse/CNTRLPLANE-3565): test and fix destroy grace period lifecycle [#8789](https://github.com/openshift/hypershift/pull/8789)
* [OTA-1956](https://issues.redhat.com/browse/OTA-1956): Skip ConsolePlugin manifests during CVO bootstrap [#8839](https://github.com/openshift/hypershift/pull/8839)
* [OCPBUGS-92791](https://issues.redhat.com/browse/OCPBUGS-92791): fix(configrefs): exclude componentRoutes secrets from management cluster sync [#8838](https://github.com/openshift/hypershift/pull/8838)
* [CNTRLPLANE-3624](https://issues.redhat.com/browse/CNTRLPLANE-3624): add tls security profile configuration for the control-plane-pki-operator [#8768](https://github.com/openshift/hypershift/pull/8768)
* [CNTRLPLANE-3686](https://issues.redhat.com/browse/CNTRLPLANE-3686): feat(api,cpo): add observedGeneration to ControlPlaneComponentStatus [#8819](https://github.com/openshift/hypershift/pull/8819)
* [OCPBUGS-86025](https://issues.redhat.com/browse/OCPBUGS-86025): Close HTTP response bodies to prevent goroutine and connection leaks [#8560](https://github.com/openshift/hypershift/pull/8560)
* [OCPBUGS-92206](https://issues.redhat.com/browse/OCPBUGS-92206): bump catalog image version cap from 4.21 to 4.22 [#8836](https://github.com/openshift/hypershift/pull/8836)
* [OCPBUGS-86648](https://issues.redhat.com/browse/OCPBUGS-86648): move IP addresses from dnsNames to ips in etcd peer cert [#8847](https://github.com/openshift/hypershift/pull/8847)
* And 3 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/hypershift/compare/c180b15368bd8d15da91460440a0026692e34e03...8ea96d7f8cfa3eb4e7dc93be96a04341fc5a2240)


### [insights-operator](https://github.com/openshift/insights-operator/tree/ad672d905ed6c2df22de2d2ccf6712e04abf10f9)

* [OCPBUGS-78774](https://issues.redhat.com/browse/OCPBUGS-78774): kube-rbac-proxy must honor Central TLS configuration [#1299](https://github.com/openshift/insights-operator/pull/1299)
* [OCPBUGS-85109](https://issues.redhat.com/browse/OCPBUGS-85109): move required-scc annotation to pod template in gathering job [#1309](https://github.com/openshift/insights-operator/pull/1309)
* [OCPBUGS-93805](https://issues.redhat.com/browse/OCPBUGS-93805): update HyperShift deployment manifest [#1313](https://github.com/openshift/insights-operator/pull/1313)
* [CCXDEV-1560](https://issues.redhat.com/browse/CCXDEV-1560): Optimize the CPU usage of insights-runtime-extractor [#1220](https://github.com/openshift/insights-operator/pull/1220)
* [CCXDEV-16159](https://issues.redhat.com/browse/CCXDEV-16159): controlplanemachinesets gatherer [#1294](https://github.com/openshift/insights-operator/pull/1294)
* [CCXDEV-16450](https://issues.redhat.com/browse/CCXDEV-16450): document disableRuntimeExtractor config option [#1312](https://github.com/openshift/insights-operator/pull/1312)
* [Full changelog](https://github.com/openshift/insights-operator/compare/4c4c3bbe8c4e617bc7dd03ee492cb74122970bd9...ad672d905ed6c2df22de2d2ccf6712e04abf10f9)


### [installer, installer-artifacts](https://github.com/openshift/installer/tree/7adbf7cc743214d2a176a4552fd9db4a0371ec5b)

* [OCPBUGS-98157](https://issues.redhat.com/browse/OCPBUGS-98157): redact machineconfigs.json from "gather bootstrap" [#10678](https://github.com/openshift/installer/pull/10678)
* [CORS-4518](https://issues.redhat.com/browse/CORS-4518): Migrate containers libs to new mono repo [#10599](https://github.com/openshift/installer/pull/10599)
* [CNTRLPLANE-2012](https://issues.redhat.com/browse/CNTRLPLANE-2012): Refactor TLS cert generation to support configurable key algorithms [#10594](https://github.com/openshift/installer/pull/10594)
* [CORS-4334](https://issues.redhat.com/browse/CORS-4334): konnectivity: remove hostNetwork from konnectivity agent [#10662](https://github.com/openshift/installer/pull/10662)
* [OCPCLOUD-3368](https://issues.redhat.com/browse/OCPCLOUD-3368): bumping o/api for new crdcompatibilitychecker and capi capabilities [#10618](https://github.com/openshift/installer/pull/10618)
* [CORS-4528](https://issues.redhat.com/browse/CORS-4528): Remove OPENSHIFT_INSTALL_EXPERIMENTAL_DUAL_STACK [#10654](https://github.com/openshift/installer/pull/10654)
* no-jira: fix vCenter validation error to use correct field name [#10663](https://github.com/openshift/installer/pull/10663)
* [OCPBUGS-92792](https://issues.redhat.com/browse/OCPBUGS-92792): vsphere - fix CNS volume destroy to aggregate errors [#10658](https://github.com/openshift/installer/pull/10658)
* [CORS-4466](https://issues.redhat.com/browse/CORS-4466): aws: expand public subnet CIDR in public-only mode [#10542](https://github.com/openshift/installer/pull/10542)
* [CNTRLPLANE-2012](https://issues.redhat.com/browse/CNTRLPLANE-2012): Add PKI config types, validation, and CR manifest generation [#10593](https://github.com/openshift/installer/pull/10593)
* [OCPBUGS-87841](https://issues.redhat.com/browse/OCPBUGS-87841): gather: redact pull-secret auth tokens from machineconfigs.json [#10660](https://github.com/openshift/installer/pull/10660)
* [OCPBUGS-93627](https://issues.redhat.com/browse/OCPBUGS-93627): destroy/aws: delete vpc endpoints earlier [#10661](https://github.com/openshift/installer/pull/10661)
* [OCPBUGS-91975](https://issues.redhat.com/browse/OCPBUGS-91975), [OCPBUGS-91976](https://issues.redhat.com/browse/OCPBUGS-91976): Include bootstrap gather in agent-gather archive [#10501](https://github.com/openshift/installer/pull/10501)
* no-jira: dynamically set CVO upgrade version [#10655](https://github.com/openshift/installer/pull/10655)
* [CORS-4334](https://issues.redhat.com/browse/CORS-4334): Konnectivity [#10344](https://github.com/openshift/installer/pull/10344)
* [OCPBUGS-88303](https://issues.redhat.com/browse/OCPBUGS-88303): pkg/types/gcp: apply defaultMachinePlatform values [#10617](https://github.com/openshift/installer/pull/10617)
* NO-ISSUE: Add AI skill for modifying install-config [#10645](https://github.com/openshift/installer/pull/10645)
* [OCPBUGS-90537](https://issues.redhat.com/browse/OCPBUGS-90537): allow agent TUI to be shown also for rhcos10 base ISO [#10640](https://github.com/openshift/installer/pull/10640)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/installer/compare/fec93616c1cc6fe9b58d2215a73f33afcb86f22c...7adbf7cc743214d2a176a4552fd9db4a0371ec5b)


### [ironic](https://github.com/openshift/ironic-image/tree/3320724e7b08113b20b518af155fb44aabc87093)

* [METAL-1878](https://issues.redhat.com/browse/METAL-1878): [s2i] Move direct dependencies from packages to source [#749](https://github.com/openshift/ironic-image/pull/749)
* NO-ISSUE: Merge upstream 2026 06 11 [#854](https://github.com/openshift/ironic-image/pull/854)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#864](https://github.com/openshift/ironic-image/pull/864)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#862](https://github.com/openshift/ironic-image/pull/862)
* [Full changelog](https://github.com/openshift/ironic-image/compare/f5123e096a6c29f82d102ab78a9b700592c6cb8d...3320724e7b08113b20b518af155fb44aabc87093)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/5d658b9a168b136153842afbce46ab0e874f404d)

* [OCPBUGS-94115](https://issues.redhat.com/browse/OCPBUGS-94115): Replace individual package removal with a single rpm -e loop [#281](https://github.com/openshift/ironic-agent-image/pull/281)
* NO-ISSUE: Update requirements.cachito with latest ironic-python-agent [#267](https://github.com/openshift/ironic-agent-image/pull/267)
* [OCPBUGS-94115](https://issues.redhat.com/browse/OCPBUGS-94115): Replace dnf remove with rpm -e to prevent dependency removal [#269](https://github.com/openshift/ironic-agent-image/pull/269)
* NO-ISSUE: Add forgotten --no-index [#265](https://github.com/openshift/ironic-agent-image/pull/265)
* [METAL-1870](https://issues.redhat.com/browse/METAL-1870): Split OCP build into multi-stage with wheel-builder [#263](https://github.com/openshift/ironic-agent-image/pull/263)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/236b77a1f76aabf41d008b9d59e6a265c8b8a9fb...5d658b9a168b136153842afbce46ab0e874f404d)


### [karpenter-operator](https://github.com/openshift/karpenter-operator/tree/7a35066ed99bdab16a8ddb2f82260144621630cc)

* [AUTOSCALE-827](https://issues.redhat.com/browse/AUTOSCALE-827): apply KarpenterOperator feature gate to manifests [#14](https://github.com/openshift/karpenter-operator/pull/14)
* [Full changelog](https://github.com/openshift/karpenter-operator/compare/01d708f6cedaa55252fedb1db24c7455678bfb81...7a35066ed99bdab16a8ddb2f82260144621630cc)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/c0471a7e1f4d7ca01b7089ee2993ca659cd84594)

* [NE-2715](https://issues.redhat.com/browse/NE-2715): Update keepalived-ipfailover to replace iptables with nftables [#235](https://github.com/openshift/images/pull/235)
* [Full changelog](https://github.com/openshift/images/compare/34acc695df8c51e7ff10a853fb13ad1928ac2e04...c0471a7e1f4d7ca01b7089ee2993ca659cd84594)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/f4cd53392e69c6ba7c2d878ad929f6cdfb131b1d)

* NO-JIRA: Cleanup OWNERS list [#68](https://github.com/openshift/kubernetes-metrics-server/pull/68)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/38c16c4698d131ab0e2da0d4b4b76d5322a89bab...f4cd53392e69c6ba7c2d878ad929f6cdfb131b1d)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/43c114bc124f59e2fc3223dea8e0a8f4cdeed18d)

* [OCPBUGS-87245](https://issues.redhat.com/browse/OCPBUGS-87245): Updating kube-rbac-proxy-container image to be consistent with ART for 5.0 [#143](https://github.com/openshift/kube-rbac-proxy/pull/143)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/d12e274605248f6c59373240a7eae7a7a357dcb3...43c114bc124f59e2fc3223dea8e0a8f4cdeed18d)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/c0b2d2c9c112bc46d8b4ac1c92e7fd0f216ad826)

* NO-JIRA: Bump golang.org/x/net to 0.56.0 to fix CVE [#1514](https://github.com/openshift/machine-api-operator/pull/1514)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/bd501fc8f16e6ce158add5ae335e9920a277fe68...c0b2d2c9c112bc46d8b4ac1c92e7fd0f216ad826)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/4d59cd4cf18393469ecfdc5e89e43c8b3f427117)

* [AGENT-1522](https://issues.redhat.com/browse/AGENT-1522): bump InternalReleaseImage to v1 (and simply version dependency) [#6280](https://github.com/openshift/machine-config-operator/pull/6280)
* [OCPBUGS-98210](https://issues.redhat.com/browse/OCPBUGS-98210): Use release payload image for OSImageStream rebuild detection [#6284](https://github.com/openshift/machine-config-operator/pull/6284)
* [OCPBUGS-98040](https://issues.redhat.com/browse/OCPBUGS-98040): Bump golang.org/x/crypto to v0.54.0 [#6286](https://github.com/openshift/machine-config-operator/pull/6286)
* [OCPBUGS-10431](https://issues.redhat.com/browse/OCPBUGS-10431): allow worker pools to set staticPodPath by relaxing validation to only block control plane pools [#5724](https://github.com/openshift/machine-config-operator/pull/5724)
* [CNTRLPLANE-3212](https://issues.redhat.com/browse/CNTRLPLANE-3212): Enable configurable PKI for cert rotation [#5842](https://github.com/openshift/machine-config-operator/pull/5842)
* NO-ISSUE: Improve osimagestream pkg API [#6271](https://github.com/openshift/machine-config-operator/pull/6271)
* [OCPBUGS-92811](https://issues.redhat.com/browse/OCPBUGS-92811): Inject proxy into MCC deployment [#6237](https://github.com/openshift/machine-config-operator/pull/6237)
* [MCO-2152](https://issues.redhat.com/browse/MCO-2152): MCO-2153: MCO-2154: Create MCO network policies for pods [#6151](https://github.com/openshift/machine-config-operator/pull/6151)
* [OCPBUGS-57473](https://issues.redhat.com/browse/OCPBUGS-57473): create digest configmap without oc binary [#5794](https://github.com/openshift/machine-config-operator/pull/5794)
* [OCPBUGS-95030](https://issues.redhat.com/browse/OCPBUGS-95030): Update AMI Whitelist [#6253](https://github.com/openshift/machine-config-operator/pull/6253)
* [OCPBUGS-94000](https://issues.redhat.com/browse/OCPBUGS-94000): Remove sensitive ControllerConfig logging [#6245](https://github.com/openshift/machine-config-operator/pull/6245)
* NO-ISSUE: Remove dead code [#6203](https://github.com/openshift/machine-config-operator/pull/6203)
* [MCO-2393](https://issues.redhat.com/browse/MCO-2393): Use /proc/sys/crypto/fips_enabled for FIPS check in tests [#6233](https://github.com/openshift/machine-config-operator/pull/6233)
* [OCPBUGS-59958](https://issues.redhat.com/browse/OCPBUGS-59958): move cleanUpDuplicatedMC to avoid double reboot on first updated Master node [#6201](https://github.com/openshift/machine-config-operator/pull/6201)
* [OCPBUGS-88333](https://issues.redhat.com/browse/OCPBUGS-88333): Fix bootupd workaround in old nodes [#6199](https://github.com/openshift/machine-config-operator/pull/6199)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/c3ce5f2d89bae99230e4d763cd413bc312d5cac7...4d59cd4cf18393469ecfdc5e89e43c8b3f427117)


### [machine-os-images](https://github.com/locriandev/machine-os-images/tree/9a06f121e75727de9b6f97231f5ca01cb16ead3b)

* NO-ISSUE: OWNERS: Remove me [#78](https://github.com/locriandev/machine-os-images/pull/78)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/locriandev/machine-os-images/compare/8888cd22679abb0bc7ae1a22e50ed6c5f64ae9ba...9a06f121e75727de9b6f97231f5ca01cb16ead3b)


### [metallb-frr](https://github.com/openshift/frr/tree/5d3b12b6ce0a7def4a7a4d1df7ff9e88deb430f5)

* [OCPBUGS-87384](https://issues.redhat.com/browse/OCPBUGS-87384): Updating ose-frr-container image to be consistent with ART for 5.0 [#134](https://github.com/openshift/frr/pull/134)
* [OCPBUGS-85711](https://issues.redhat.com/browse/OCPBUGS-85711): Sync 2026-05-27 [#132](https://github.com/openshift/frr/pull/132)
* Bump to frr 10 [#127](https://github.com/openshift/frr/pull/127)
* [Full changelog](https://github.com/openshift/frr/compare/210c63f7ec61bd3377796518a755d617d8f6ca04...5d3b12b6ce0a7def4a7a4d1df7ff9e88deb430f5)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/9524ff2716a6f1fcb852b30de9264b79841de67e)

* Fix for OCPBUGS-94056: CVE-2026-13676 [#1032](https://github.com/openshift/monitoring-plugin/pull/1032)
* NO-JIRA: feat: keep current data while loading new data in perses dashboards [#1020](https://github.com/openshift/monitoring-plugin/pull/1020)
* NO-JIRA: enable coderabbit on main-alerts-management-api [#1021](https://github.com/openshift/monitoring-plugin/pull/1021)
* [OU-1409](https://issues.redhat.com/browse/OU-1409): feat: fetch lazily ai proposal for each row in the alert list [#1014](https://github.com/openshift/monitoring-plugin/pull/1014)
* NO-JIRA: perses and monitoring automation testing - stabilization [#924](https://github.com/openshift/monitoring-plugin/pull/924)
* NO-JIRA: fix: update vulnerable dependencies [#1015](https://github.com/openshift/monitoring-plugin/pull/1015)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/d5ffdd28dcf8863f9163fe930ffa0753b09161f3...9524ff2716a6f1fcb852b30de9264b79841de67e)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/19d390fd4d353619fdfb5e0070962d2ddf54b5bb)

* NO-JIRA: Sync from k8snetworkplumbingwg/bond-cni master (2026-07-07) [#121](https://github.com/openshift/bond-cni/pull/121)
* NO-JIRA: Update OWNERS: remove zshi-redhat [#120](https://github.com/openshift/bond-cni/pull/120)
* [Full changelog](https://github.com/openshift/bond-cni/compare/466a73aba120221bc080e4bbb9857ce56a7b5cce...19d390fd4d353619fdfb5e0070962d2ddf54b5bb)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/35f8ec76aeffeab0452e36d39488ad00ac9c22c1)

* [OCPBUGS-92033](https://issues.redhat.com/browse/OCPBUGS-92033): fixed translations of pod column titles [#436](https://github.com/openshift/networking-console-plugin/pull/436)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/daad90209a0d7ca20eff4fa67009f3771aebee9d...35f8ec76aeffeab0452e36d39488ad00ac9c22c1)


### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/dc584c6b2e895a6217f9e2dbed765209af1898a1)

* [OCPBUGS-87463](https://issues.redhat.com/browse/OCPBUGS-87463): Updating ose-nutanix-cloud-controller-manager-container image to be consistent with ART for 5.0 [#69](https://github.com/openshift/cloud-provider-nutanix/pull/69)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/61ec60465b92969966bc4b19637cdda75fb3105a...dc584c6b2e895a6217f9e2dbed765209af1898a1)


### [oauth-server](https://github.com/openshift/oauth-server/tree/79ea885db0e910f37c9a69388df9ee06a491a0bb)

* [OCPBUGS-87407](https://issues.redhat.com/browse/OCPBUGS-87407): Updating oauth-server-container image to be consistent with ART for 5.0 [#246](https://github.com/openshift/oauth-server/pull/246)
* [CNTRLPLANE-3687](https://issues.redhat.com/browse/CNTRLPLANE-3687): contextification files [#241](https://github.com/openshift/oauth-server/pull/241)
* NO-JIRA: chore: update OWNERS file to align with other control plane repos [#242](https://github.com/openshift/oauth-server/pull/242)
* [Full changelog](https://github.com/openshift/oauth-server/compare/f892602b822782e0080abc70c6cd1d178f11e684...79ea885db0e910f37c9a69388df9ee06a491a0bb)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/c86311fbce5d931b387b4d579e0e301406ce9c86)

* NO-ISSUE: Synchronize From Upstream Repositories [#760](https://github.com/openshift/operator-framework-operator-controller/pull/760)
* NO-ISSUE: Synchronize From Upstream Repositories [#759](https://github.com/openshift/operator-framework-operator-controller/pull/759)
* [OCPBUGS-92037](https://issues.redhat.com/browse/OCPBUGS-92037): Synchronize From Upstream Repositories [#757](https://github.com/openshift/operator-framework-operator-controller/pull/757)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/0264de126b0c71017a950b7e944b3570369fb1aa...c86311fbce5d931b387b4d579e0e301406ce9c86)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/00b41f2b10b173b37fb01bf71d72fcae2ff4c89a)

* [CNTRLPLANE-2449](https://issues.redhat.com/browse/CNTRLPLANE-2449): feat: generate OpenAPI schemas from a running openshift-apiserver instance [#645](https://github.com/openshift/openshift-apiserver/pull/645)
* [OCPBUGS-78480](https://issues.redhat.com/browse/OCPBUGS-78480): add watchlist new semantic support to project watcher [#661](https://github.com/openshift/openshift-apiserver/pull/661)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/831ab1bd2e1cf4e2deacf8f243e22c34b89a38c5...00b41f2b10b173b37fb01bf71d72fcae2ff4c89a)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/277e53cc3ad60306296e1269ea12b97c3558cfdc)

* NO-ISSUE: Synchronize From Upstream Repositories [#1337](https://github.com/openshift/operator-framework-olm/pull/1337)
* NO-ISSUE: Synchronize From Upstream Repositories [#1336](https://github.com/openshift/operator-framework-olm/pull/1336)
* [OCPBUGS-88737](https://issues.redhat.com/browse/OCPBUGS-88737): Update PSM/package server to support TLS profiles [#1328](https://github.com/openshift/operator-framework-olm/pull/1328)
* [OPRUN-4612](https://issues.redhat.com/browse/OPRUN-4612): Add E2E tests for ExperimentalListPackageCustomSchemas gRPC endpoint [#1327](https://github.com/openshift/operator-framework-olm/pull/1327)
* [TRT-2761](https://issues.redhat.com/browse/TRT-2761): Undo revert and fix applyClusterTLSProfile() [#1335](https://github.com/openshift/operator-framework-olm/pull/1335)
* [TRT-2761](https://issues.redhat.com/browse/TRT-2761): Revert #1330 "NO-ISSUE: Synchronize From Upstream Repositories" [#1334](https://github.com/openshift/operator-framework-olm/pull/1334)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/0adff33f0e0251265c6574319131f6918e9f8993...277e53cc3ad60306296e1269ea12b97c3558cfdc)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/7e3aaeefdac17e1dd690554c9f0549319d219214)

* [OCPBUGS-85829](https://issues.redhat.com/browse/OCPBUGS-85829): bump catalog versions to 5.0 [#756](https://github.com/operator-framework/operator-marketplace/pull/756)
* NO-ISSUE: Bump github.com/onsi/gomega from 1.42.0 to 1.42.1 [#765](https://github.com/operator-framework/operator-marketplace/pull/765)
* NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.31.0 to 2.32.0 [#764](https://github.com/operator-framework/operator-marketplace/pull/764)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/a8006e26248b52c659315bd98eef227596964e41...7e3aaeefdac17e1dd690554c9f0549319d219214)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/fc46681bd5720c0139c394eea3d2ab686a2cf46f)

* [OCPBUGS-86223](https://issues.redhat.com/browse/OCPBUGS-86223): DownStream Merge [06-15-2026] [#3249](https://github.com/openshift/ovn-kubernetes/pull/3249)
* [CORENET-6688](https://issues.redhat.com/browse/CORENET-6688): Bump the downstream OVN package to 26.03 [#3258](https://github.com/openshift/ovn-kubernetes/pull/3258)
* [CORENET-6592](https://issues.redhat.com/browse/CORENET-6592): Promote EVPN E2Es from informing to blocking tests [#3178](https://github.com/openshift/ovn-kubernetes/pull/3178)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/1061de79a517c523c70f631cfe4fdfee725dcc82...fc46681bd5720c0139c394eea3d2ab686a2cf46f)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/626c77c1b8c4b81b2d2f775f98f740dc09648061)

* NO-JIRA: Update OWNERS_ALIASES to modify approvers and reviewers [#105](https://github.com/openshift/cloud-provider-powervs/pull/105)
* No-Jira: Bump golang.org/x/crypto and golang.org/x/net to address security vulnerabilities [#106](https://github.com/openshift/cloud-provider-powervs/pull/106)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/279b5927e540312bf3886267c9bcabc806d9f286...626c77c1b8c4b81b2d2f775f98f740dc09648061)


### [prometheus](https://github.com/openshift/prometheus/tree/fb9f64e2410f196d83761048726ed94802f6b8f0)

* [OCPBUGS-92191](https://issues.redhat.com/browse/OCPBUGS-92191): fix(tsdb): temporarily ignore Direct IO enablement errors on unsupported filesystems [#338](https://github.com/openshift/prometheus/pull/338)
* [Full changelog](https://github.com/openshift/prometheus/compare/6d5e6fee576a7e192b82209c6ce09855ca4bbaab...fb9f64e2410f196d83761048726ed94802f6b8f0)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/6391e070d2ab026324b032a6fa5fc7d6be0d2cb5)

* [CNTRLPLANE-3423](https://issues.redhat.com/browse/CNTRLPLANE-3423): feat: have CVO inject the centralized TLS configuration into the operator's config [#359](https://github.com/openshift/service-ca-operator/pull/359)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/883c387c71c59767f08e21ca57c810b56ab16d01...6391e070d2ab026324b032a6fa5fc7d6be0d2cb5)


### [stream-coreos, stream-coreos-extensions](https://github.com/openshift/os/tree/5ffc1da076e834332482544182c22d984dbf76d2)

* [ART-19543](https://issues.redhat.com/browse/ART-19543): Refactor extensions build to use dnf download instead of rpm-ostree compose [#1945](https://github.com/openshift/os/pull/1945)
* [Full changelog](https://github.com/openshift/os/compare/d75a447b705c33cb96a43355eae4355c609d0784...5ffc1da076e834332482544182c22d984dbf76d2)


### [telemeter](https://github.com/openshift/telemeter/tree/22ba1701333f3fd26490cc15b89ddf21df3f67f6)

* [OCPBUGS-93760](https://issues.redhat.com/browse/OCPBUGS-93760): bump github.com/prometheus/prometheus [#611](https://github.com/openshift/telemeter/pull/611)
* [Full changelog](https://github.com/openshift/telemeter/compare/a1dabee1951bd2878719a6da9d5d4304332ef0d4...22ba1701333f3fd26490cc15b89ddf21df3f67f6)


### [tests](https://github.com/openshift/origin/tree/0f64c4954e83d3cd781f656464d167cc3a79f502)

* [TRT-2689](https://issues.redhat.com/browse/TRT-2689): Add devcontainer, APM config, and agentic CI scaffolding [#31371](https://github.com/openshift/origin/pull/31371)
* [OCPBUGS-97603](https://issues.redhat.com/browse/OCPBUGS-97603): Use framework-managed namespace for workload test [#31366](https://github.com/openshift/origin/pull/31366)
* [OCPBUGS-84512](https://issues.redhat.com/browse/OCPBUGS-84512): Remove exception terminationMessagePolicy=TerminationMessageFallbackToLogsOnError [#31327](https://github.com/openshift/origin/pull/31327)
* [OCPNODE-4494](https://issues.redhat.com/browse/OCPNODE-4494): Testcase to test runc Upgrade case [#31266](https://github.com/openshift/origin/pull/31266)
* [OCPBUGS-97822](https://issues.redhat.com/browse/OCPBUGS-97822): Wait for DNS before running http2 tests [#31368](https://github.com/openshift/origin/pull/31368)
* [CNTRLPLANE-2157](https://issues.redhat.com/browse/CNTRLPLANE-2157): Migrate test cases to Project API testing KubeAPI server functionality [#31310](https://github.com/openshift/origin/pull/31310)
* [OCPNODE-4554](https://issues.redhat.com/browse/OCPNODE-4554): Automate OCP-70203: ICSP and IDMS/ITMS can coexist in cluster [#31229](https://github.com/openshift/origin/pull/31229)
* NO-JIRA: e2e: extracting fencing credentials rotation into standalone test [#31340](https://github.com/openshift/origin/pull/31340)
* NO-JIRA: Fix Flaky e2e tests - Update the Cleanup order [#31347](https://github.com/openshift/origin/pull/31347)
* [OCPNODE-4604](https://issues.redhat.com/browse/OCPNODE-4604): add quay-proxy.ci.openshift.org as alllowed to reboot requried  test [#31356](https://github.com/openshift/origin/pull/31356)
* [OCPBUGS-84521](https://issues.redhat.com/browse/OCPBUGS-84521): remove openshift/cluster-machine-approver `terminationMessagePolicy` exemption [#31362](https://github.com/openshift/origin/pull/31362)
* [OCPBUGS-88742](https://issues.redhat.com/browse/OCPBUGS-88742): Fix nested container test mount check for BusyBox [#31361](https://github.com/openshift/origin/pull/31361)
* NO-ISSUE: Remove exception for OCPBUGS-45921 [#31346](https://github.com/openshift/origin/pull/31346)
* [OCPCLOUD-3010](https://issues.redhat.com/browse/OCPCLOUD-3010): Enable OTE for Cluster CAPI Operator [#31307](https://github.com/openshift/origin/pull/31307)
* [OCPNODE-4560](https://issues.redhat.com/browse/OCPNODE-4560): Migrate OCP-56266 verify kubelet/crio deletes netns when pod deleted [#31242](https://github.com/openshift/origin/pull/31242)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/origin/compare/f36c810ba26cd860199f536172d14636d3cf8d16...0f64c4954e83d3cd781f656464d167cc3a79f502)