4.20.0-0.okd-scos-2026-02-04-121636

Download installer and client with:

oc adm release extract --tools registry.ci.openshift.org/origin/release-scos:4.20.0-0.okd-scos-2026-02-04-121636

Team Approvals:

Tests:

Blocking jobs
- aws Succeeded (1 retry) periodic-ci-openshift-release-master-okd-scos-4.20-e2e-aws-ovn
  - Attempt 1 Failed
  - Attempt 2 Succeeded
Informing jobs
- agent-single-node-ipv6 Succeeded periodic-ci-openshift-release-master-okd-scos-4.20-e2e-agent-single-node-ipv6
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-master-okd-scos-4.20-e2e-aws-ovn-techpreview
- aws-upgrade Failed (1 retry) periodic-ci-openshift-release-master-okd-scos-4.20-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Failed
- aws-upgrade-minor Succeeded periodic-ci-openshift-release-master-okd-scos-4.20-upgrade-from-okd-scos-4.19-e2e-aws-ovn-upgrade
- gcp Succeeded periodic-ci-openshift-release-master-okd-scos-4.20-e2e-gcp
- vsphere Succeeded periodic-ci-openshift-release-master-okd-scos-4.20-e2e-vsphere-ovn

Upgrades from:

Upgrades to:

Changes from 4.19.0-0.okd-scos-2025-10-25-001830

Created: 2026-02-04 12:17:02 +0000 UTC

Image Digest: sha256:5cfd1a5a3da12f0f2604fd781c09aa6b21a1758d8a1cca9eadf0038892e53fe5

Components

Kubectl upgraded from 1.32.1 to 1.33.3
Kubernetes upgraded from 1.32.9 to 1.33.6
Kubernetes Tests upgraded from 1.32.8 to 1.33.4
CentOS Stream CoreOS upgraded from 9.0.20250827-0 to 10.0.20260203-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
AWSEFSDriverVolumeMetrics (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
BareMetalLoadBalancer (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ChunkSizeMiB (5 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
CloudDualStackNodeIPs (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
DisableKubeletCloudCredentialProviders (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GCPLabelsTags (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
HardwareSpeed (3 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
InsightsRuntimeExtractor (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MachineAPIProviderOpenStack (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MultiArchInstallAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MultiArchInstallGCP (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NodeDisruptionPolicy (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
OnClusterBuild (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
PersistentIPsForVirtualization (22 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
PlatformOperators (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
PrivateHostedZoneAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
SELinuxChangePolicy (19 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
StreamingCollectionEncodingToJSON (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
StreamingCollectionEncodingToProtobuf (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereDriverConfiguration (5 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereMultiVCenters (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ValidatingAdmissionPolicy (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ExternalOIDCWithUIDAndExtraClaimMappings (5 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
HighlyAvailableArbiter (8 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ProcMountType (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
SigstoreImageVerification (5 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
UpgradeStatus (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
UserNamespacesPodSecurityStandards (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
UserNamespacesSupport (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
VSphereMultiDisk (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
VSphereMultiNetworks (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ExternalOIDC (9 tests)	Enabled	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ImageVolume (7 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
PreconfiguredUDNAddresses (10 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StoragePerformantSecurityPolicy (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterVersionOperatorConfiguration (0 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
DualReplica (5 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
SELinuxMount (17 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
SigstoreImageVerificationPKI (0 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
AWSClusterHostedDNSInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AWSDedicatedHosts (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AWSServiceLBNetworkSecurityGroup (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureClusterHostedDNSInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureDedicatedHosts (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureMultiDisk (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
BootImageSkewEnforcement (0 tests)			Enabled (New)	Enabled (New)
ExternalSnapshotMetadata (0 tests)			Enabled (New)	Enabled (New)
GCPClusterHostedDNSInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GCPCustomAPIEndpointsInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ImageModeStatusReporting (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
IrreconcilableMachineConfig (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImagesAzure (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImagesvSphere (6 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MultiDiskSetup (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MutatingAdmissionPolicy (3 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NewOLMWebhookProviderOpenshiftServiceCA (0 tests)				Enabled (New)		Enabled (New)
NoRegistryClusterOperations (0 tests)				Enabled (New)		Enabled (New)
VSphereMixedNodeEnv (0 tests)			Enabled (New)	Enabled (New)

New images

csi-external-snapshot-metadata git 693a8264 sha256:6859cbb87d5978cb39f42b478c5a43f6c504699ce4c1212246d5e63d3f7b5616
volume-data-source-validator git 0e61642f sha256:8242047efa386101a51b87cc13f3b674359411eae432d04b72601e14fad774e8

Rebuilt images without code change

aws-karpenter-provider-aws git b37141b0 sha256:6ed83a36228d9cdcde7668059128b42322472cda4a1fbaba0e4b7b5f33c016b7
aws-kms-encryption-provider git 088dcaf7 sha256:ea4d5d880904d4c4de3731ef7e9fb46397e08dad0f7a394c5096b938e8673812
kubevirt-cloud-controller-manager git 3f4542ec sha256:609ecb961b89d7a0d0e80bd84862eb4c40c8cd774ee98461da3b2c0aefd01821
libvirt-machine-controllers git a336f0b5 sha256:dbd435ed9051c1162d9e99c6f98d215adc22a72ff21b9ea7bbc2d5df2ce1ede5
multus-route-override-cni git 391c1b03 sha256:7b57f6aec40aa42c8a0f7c0733491964f4933b78af3e141cf64ac0cfc3082b86
ovirt-csi-driver git 1db726a9 sha256:9caf16aa1fc875592fa298bd9533b927856bd38119f34e41ee9e8200ab3a0290

agent-installer-api-server

OCPBUGS-65901: Retry incomplete cluster registration in ABI #8429
OCPBUGS-57606: Updating ose-agent-installer-api-server-container image to be consist… #8399
OCPBUGS-63486: Align kube descheduler activation CR with OVE needs #8136
MGMT-20464: Fix NFD detection of NVIDIA GPUs #7696
And 140 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Update Konflux references (#1225) #1225
Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.20 (#1144) #1144
Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.20 (#1146) #1146
MGMT-21454: update Go to 1.24 and adapt unit-tests (#1220) #1220
NO-ISSUE: Update Konflux references (#1216) #1216
NO-ISSUE: Add yoavsc0302 to OWNERS_ALIASES file (#1213) #1213
NO-ISSUE: Update Konflux references (#1212) #1212
MGMT-20756: assisted installer naive string concatenation for partition finding (#1198) #1198
NO-ISSUE: Update Konflux references (#1202) #1202
NO-ISSUE: Update Konflux references (#1184) #1184
NO-ISSUE: Update Konflux references (#1177) #1177
MGMT-18518: Linter fixes & renovate config for linter and golang (#1147) #1147
NO-ISSUE: Update Konflux references (#1160) #1160
NO-ISSUE: Update Konflux references (#1156) #1156
MGMT-20868: Trust also system certs (#1145) #1145
NO-ISSUE: CVE-2025-30204 Update openshift-online/ocm-sdk-go to v0.1.467 (#1152) #1152
NO-ISSUE: Update Konflux references (#1149) #1149
MGMT-20858: apply-tag migration (#1143) #1143
NO-ISSUE: Update Konflux references (#1139) #1139
ACM-21380: Make ACM builds multi-arch (#1136) #1136
NO-ISSUE: Update Konflux references (#1131) #1131
NO-ISSUE: Update Konflux references (#1130) #1130
NO-ISSUE: Add konflux service account migration (#1129) #1129
NO-ISSUE: Modify Konflux YAMLs to ocm-2.15 (#1126) #1126
MGMT-11622: assisted-installer controller: operator status should be logged (#1079) #1079
Use rsync over cp to set up networking files for first boot (#1123) #1123
Konflux build pipeline service account migration for assisted-installer-controller-acm-ds-main (#1108) #1108
Konflux build pipeline service account migration for assisted-installer-ds-main (#1110) #1110
Konflux build pipeline service account migration for assisted-installer-controller-ds-main (#1109) #1109
Konflux build pipeline service account migration for assisted-installer-acm-ds-main (#1107) #1107
MGMT-20567: Enable HTTP endpoint for MCO ignition (#1117) #1117
NO-ISSUE: Update Konflux references (#1114) #1114
Full changelog

agent-installer-node-agent

OCPBUGS-57718: Update golang images to 1.24 for OpenShift 4.20 #1194
And 27 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-utils

OCPBUGS-75868: Increase Konflux build pipeline memory #247
OCPBUGS-68324: bump github.com/sirupsen/logrus to v1.9.3 #235
OCPBUGS-69834: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 20eb21c #208
OCPBUGS-69830: Update Konflux references #207
OCPBUGS-67306: Update Konflux release version to 4.20.8 #212
OCPBUGS-66431: Add Konflux PipelineRun params required by release pipeline #206
OCPBUGS-66425: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 13cf619 #186
OCPBUGS-66422: Update Konflux references #185
OCPBUGS-66406: Update Konflux release version to 4.20.6 #204
OCPBUGS-65715: Update 4.20 version to 4.20.4 #196
OCPBUGS-64694: Update 4.20 version to 4.20.2 #193
OCPBUGS-63585: AGENT-1203: Simplify isobuilder #189
OCPBUGS-63590: Update 4.20 version to 4.20.1 #190
OCPBUGS-63372: Backport Konflux changes #183
OCPBUGS-62749: Red Hat Konflux kflux-prd-rh02 update ove-ui-iso-4-20 #172
OCPBUGS-60920: Update ISOBuilder OCP 4.19 Dev Preview Release notes #141
AGENT-1252: Add Dockerfile for OVE UI ISO #138
AGENT-1256: Fix hyperconverged and kube descheduler contents #140
AGENT-1256: Version the ISO builder configuration and script #128
AGENT-1254: Switch to agent-installer-ui image #132
AGENT-1205: Do not include agent-tui and related services #123
OCPBUGS-60019: Add ISOBuilder Release notes #135
AGENT-1270: use agent-preinstall-image-builder image for building the ISO #134
NO-ISSUE: Move mtv-operator back to v2.8 for 4.20 #133
OCPBUGS-59724: add back NHR and FAR operators #130
OCPBUGS-59187: invalid default channel configuration for package “mtv… #124
OCPBUGS-58226: OVE ISOBuilder works only if and when the script is ex… #120
NO-ISSUE: Bump the 4.xx dependencies #119
OCPBUGS-57679: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.20 #116
OCPBUGS-57862: Update operators list in ISOBuilder #117
OCPBUGS-57346: Bump iso-builder appliance dependency #114
NO-ISSUE: Enable ‘q’ and ‘c’ hotkeys for quit and configure network #107
OCPBUGS-57297: Update mtv-operator to version used in 4.19 catalog #111
ART-13079: append .0 to go.mod version #105
OCPBUGS-56934: Disable ESC key on checks page #102
OCPBUGS-56977: OVE isobuilder fails on CentOS Stream 9 due to missing… #103
OCPBUGS-56880: Log error from nmtui and change modal background #101
OCPBUGS-56546: ISOBuilder- Remove default password for nodes #96
AGENT-1195: bump appliance to 936210 #98
OCPBUGS-56223: Fix nmtui redirection after quit #93
OCPBUGS-56147: Add operator CRs post-install in OVE build script #94
OCPBUGS-56210: OVE builder: Remove RHEL9 image from additionalImages #91
OCPBUGS-56112: configure the channel for each OLM operators #89
OCPBUGS-55769: Use internal image registry #78
AGENT-1195: bump appliance image to 4042ba #86
OCPBUGS-55708: Include RHEL 9 guest image to support VM launches via … #84
Full changelog

apiserver-network-proxy

OCPBUGS-57685: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.20 #84
ART-13079: append .0 to go.mod version #78
Full changelog

aws-cloud-controller-manager

OCPCLOUD-2928: Merge https://github.com/kubernetes/cloud-provider-aws:master (b0e098d) into main #106
OCPBUGS-57684: Updating ose-aws-cloud-controller-manager-container image to be consistent with ART for 4.20 #110
Full changelog

aws-cluster-api-controllers

OCPBUGS-61040: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.2 (d3a7da1) into release-4.20 #578
OCPBUGS-60943, OCPBUGS-61040, OCPBUGS-61044: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.0 (dcfaef0) into main #553
OCPCLOUD-2919: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:main (645f38e) into main #565
NO-JIRA: Update OWNERS #561
OCPBUGS-59243, OCPBUGS-59244: UPSTREAM: 5590: Bump golog v1.2.5 #557
OCPBUGS-53003: Remove references to master branch #551
OCPBUGS-55947: Update manifests to remove reliance on v1beta1 admission registration #549
Full changelog

aws-ebs-csi-driver

STOR-2402: Rebase to upstream v1.45.0 for OCP 4.20 #289
OCPBUGS-57707: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.20 #288
ART-12521: update go mod dependency for konflux #285
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-65895: allow all-egress for efs operator #473
OCPBUGS-65686: Bump gophercloud #470
OCPBUGS-63560: Add RBAC ClusterRole and Binding for driver node #456
OCPBUGS-62688: Add withCABundleDaemonSetHook() to AWS EFS operator #441
STOR-2477: Correct efs single-zone storageclass #404
OCPBUGS-60655: Disable LUN stress test for azure-file #418
OCPBUGS-60464: Bump library-go to fix panic #417
STOR-2394: Bump all deps for 4.20 #408
STOR-2479: Add CredentialsRequest for the EFS node DaemonSet #389
STOR-2330: Add labels to subscribe openstack cinder and manila CSI driver controllers to NPs #409
OCPBUGS-57395: Remove stale conditions #406
OCPBUGS-58254: Bump library-go #405
STOR-2331: Add labels to subscribe SMB CSI driver operator and controller to NPs #400
STOR-2330: Add labels to subscribe Azure disk and file CSI driver controllers to NPs #396
OCPBUGS-57768: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.20 #399
OCPBUGS-57739: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.20 #398
OCPBUGS-57700: Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.20 #397
OCPBUGS-57565: Updating csi-driver-manila-operator-container image to be consistent with ART for 4.20 #394
STOR-2331: Add labels to subscribe AWS-EFS CSI driver operator to NPs #391
OCPBUGS-57680: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.20 #395
STOR-2477: create-efs-volume: add single-zone support #390
OCPBUGS-57545: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.20 #393
Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.20 #392
STOR-2330: Add labels to subscribe AWS-EBS CSI driver controller to NPs #387
NO-JIRA: create-efs-volume: print files to log as a fallback #388
NO-JIRA: Update openstack approvers #385
OCPBUGS-54975: Fix Cinder, Manila driver metrics #379
OCPBUGS-56128: openstack-cinder: Set –with-topology flag for node driver also #383
STOR-2408: Bump OLM metadata to 4.20 #382
Full changelog

aws-machine-controllers

OCPBUGS-72570: Fix reconciler consistency checks in Update and Exists #164
OCPBUGS-63136: client: re-use a single file for building the session instead of randomly named files #148
OCPCLOUD-2935: Bump k8s dependencies to 1.33; go 1.24 #136
NO-JIRA: Update OWNERS #135
OCPBUGS-56849, OCPCLOUD-2985, OCPCLOUD-2986: Bump machine-api-operator to pull in authoritativeAPI fix #134
OCPBUGS-57724: Updating ose-machine-api-provider-aws-container image to be consistent with ART for 4.20 #133
OCPBUGS-57581: fix: machineset annotation controller: guard on status authoritativeAPI #132
OCPCLOUD-2717: bump openshift/api #131
OCPBUGS-56487: fix: make machineset annotation controller respect paused condition #129
OCPBUGS-55720: Update machine-api-operator pkg with fixes #127
Full changelog

aws-pod-identity-webhook

OCPBUGS-74169: Fix GOTOOLCHAIN env var #212
OCPBUGS-57618: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.20 #204
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPCLOUD-2927: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (bbb513c) into main #143
OCPBUGS-57834: Updating ose-azure-cloud-controller-manager-container image to be consistent with ART for 4.20 #147
OCPBUGS-57720: Updating ose-azure-cloud-node-manager-container image to be consistent with ART for 4.20 #145
Full changelog

azure-cluster-api-controllers

NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.20.2 (2a4b30d) into master #345
NO-JIRA: Update OWNERS #344
OCPCLOUD-2920: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.20.1 (e707afb) into master #341
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.19.4 (99a359a) into master #338
OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #337
Full changelog

azure-disk-csi-driver

STOR-2405: Rebase to upstream v1.33.1 for OCP 4.20 #108
OCPBUGS-57579: Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.20 #107
NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #103
Full changelog

azure-file-csi-driver

STOR-2407: Rebase to upstream v1.33.3 for OCP 4.20 #99
OCPBUGS-57884: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.20 #98
OCPBUGS-54897: UPSTREAM: 2515: allow deleting cross-subscription snapshots #92
Full changelog

azure-kms-encryption-provider

ART-13079: append .0 to go.mod version #17
Full changelog

azure-machine-controllers

OCPBUGS-65708: Set updateDomainCount to one when faultDomainCount is one #173
OCPBUGS-63535: Support DataDisks on Azure Stack Hub #165
OCPCLOUD-2932: Bump 1.33 #160
NO-JIRA: Update OWNERS #161
OCPBUGS-56849, OCPCLOUD-2985, OCPCLOUD-2986: Bump machine-api-operator to pull in authoritativeAPI fix #159
OCPBUGS-57671: Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.20 #158
OCPBUGS-55372: Fix regression on ASH with armcompute/v5 #155
OCPBUGS-56380: Fix failure when attempting to modify immutable availabilitySet #148
OCPBUGS-55372: Update virtualmachines service to armcompute/v5 SDK #141
Full changelog

azure-service-operator

NO-JIRA: Update OWNERS #10
OCPBUGS-57694: Updating ose-azure-service-operator-container image to be consistent with ART for 4.20 #9
Full changelog

azure-workload-identity-webhook

OCPBUGS-57692: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.20 #37
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-58307: Merge upstream #49
OCPBUGS-57555: Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.20 #48
OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #44
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-74674: [release-4.20] GCP: skip AI zones #10273
OCPBUGS-74551: add support for NVIDIA H100 and H200 enabled machine series #10263
OCPBUGS-66356: Update the RHCOS 4.20 bootimage metadata to 9.6.20260112-0 #10247
OCPBUGS-73681: pkg/asset/manifests/azure: save cidr blocks #10208
OCPBUGS-73785: ensure deterministic zone ordering for control plane machines #10219
OCPBUGS-71212: Increase agent-installer pre-network-manager timeout #10199
OCPBUGS-65767: Add StandardFXmdsv2Family to azure tested instance type list #10104
OCPBUGS-66231: Use separate tmpfs for ostree checkout on live ISO #10140
OCPBUGS-65763: continue to update 02_storage.json using new property storageAccountId #10103
OCPBUGS-66257: CORS-4249: bump ARO marketplace images #10142
OCPBUGS-66207, OCPBUGS-66208: Fix console info for interactive agent installer #10136
Revert “OCPBUGS-65586: Update the RHCOS 4.20 bootimage metadata to 9.6.202511…” #10093
OCPBUGS-65586: Update the RHCOS 4.20 bootimage metadata to 9.6.202511… #10084
OCPBUGS-64924: Azure UPI ARM template: use storageAccountId #10069
OCPBUGS-64595: Remove pending items on gcp no-op #10056
OCPBUGS-63633: Update the RHCOS 4.20 bootimage metadata to 9.6.20251023-0 #10037
OCPBUGS-63461: Prevent duplicate noProxy when adding nodes #10028
OCPBUGS-62920: AGENT-1269: Use agent-installer-ui image from release #10009
OCPBUGS-62343: [release-4.20] vSphere 7 deprecation #9973
OCPBUGS-62124: Update the RHCOS 4.20 bootimage metadata #9997
OCPBUGS-62948: Add an option in image-based installation to specify architecture #9943
OCPBUGS-62935: Add MTU validation for networkConfig #10010
OCPBUGS-62846: None: Allow IPv6 Primary DualStack installs on platforms None and External #10005
OCPBUGS-62656: Set agent-extract-tui start timeout #9990
OCPBUGS-62640: Wildcards not reliable for copying container files #9986
OCPBUGS-62297: Set default for PrivateDNSZone Project ID #9968
OCPBUGS-61528: Allow user to BYO private zone without specifying name #9936
OCPBUGS-61552: Shellcheck fix 4.20 #9938
CORS-4044, CORS-4045, CORS-4046, CORS-4047, CORS-4048, CORS-4049, CORS-4050, CORS-4051: Add private dns zone section to GCP install config #9792
OCPBUGS-60949: Update the RHCOS 4.20 bootimage metadata #9916
OCPBUGS-60687: PowerVS: Add lon04 support #9905
SPLAT-2463: Added ability to configure CoresPerSocket #9912
CORS-3652: RHCOS Stream Marketplace Images #9329
OCPBUGS-60634: Added logic to clean up potential leftover spbm entity configs #9894
OCPBUGS-60600: node-joner ignore error if SSH key was not found #9908
CORS-4061: migrate AWS SDK to v2 in quota/aws #9890
CORS-4056: migrate AWS SDK to v2 in asset/machines/aws #9889
OCPBUGS-57364: custom-dns: Set PrivateZone and PublicZone to nil in the DNS manifest #9886
OCPBUGS-55499: Misleading error when confidentialCompute: Enabled #9848
OCPBUGS-60162: reject installation into byo vpc/subnets owned by another cluster #9883
OCPBUGS-60545: Azure: change LB and pubic IP skus to Standard #9898
AGENT-1205: Update agent-installer-ui tar path #9896
OCPBUGS-59104: Set kernel dual-stack arg for all platforms #9865
OCPBUGS-51299: Add default values for validation to kms keys #9781
OCPBUGS-53473: Validate clusterNetwork hostPrefix #9594
no-jira: dev docs - add rr capi debugging #9887
OCPBUGS-60197: PowerVS: config variables not honored #9877
CORS-4078: centralize v2 aws client constructions #9882
OCPBUGS-50517: [Nuanix] installer should add the shared category to the preloaded rhcos image PC object #9450
MGMT-21212: Enable dual-stack clusters with image-based installations #9847
OCPBUGS-60284: Upgrading Cluster-API-Provider-Nutanix version from 1.5.4 to 1.7.0 #9869
OCPBUGS-60240: baremetal: always set external v6 URL on dualstack #9874
CORS-4177: clusterapi: use default envtest timeouts #9871
CORS-4067: Add support for single zone NAT gateway #9753
CORS-4178: handle deleting AWS egress-only internet gateway #9873
OCPEDGE-1997: bump(ocp/api): pull in HighlyAvailableArbiter promotion #9870
AGENT-1205: Extract agent-tui during boot for interactive workflow #9828
SPLAT-2355: Added vSphere support for disk setup #9863
CORS-4083, CORS-4084, CORS-4085: Add Azure custom-dns support in Tech Preview #9861
OCPBUGS-59542: Generated Nutanix MachineSets for Autoscaling with Failure Domains #9864
no-jira: OWNERS: add splat team as approvers #9862
CORS-3992: skip dns zone validation with custom DNS #9859
no-jira: Bump openshift/api to get renamed Featuregates #9854
OCPEDGE-1994: bump(ocp/api): pull in updated DualReplica #9849
SPLAT-2295: Setup additional disks via machine configs #9706
OCPBUGS-59630: Update RHCOS 4.20 bootimage metadata to 9.6.20250701-0 #9844
no-jira: images: bump images to go 1.24 #9850
CORS-3916, CORS-3920: Use gcp custom endpoints in the installer #9535
OCPBUGS-59430: Fail install config validation when base domain is invalid #9840
OCPBUGS-59678: PowerVS Support VPC and TG ids #9818
OCPBUGS-57732: Catch gcp destroy cases where the operation is nil #9823
OCPBUGS-57527: Add descriptions back to the aws survey #9816
MGMT-20992: feat: update determineTopologies function #9815
OCPBUGS-59220: Refine check for supported SNO platforms to include IBMCloud #9836
no-jira: Revert “Merge pull request #9736 from barbacbd/CORS-4058” #9837
OKD-241: Use CentOS Stream 10 bootimages #9817
CORS-4062: Migrate endpoints in pkg/types/aws/platform.go to sdk v2 #9759
OCPBUGS-57202: pkg/asset/tls: extend ShortCertRotation certs validity to 2 hours #9820
CORS-4058: Remove AWS SDK V1 from destroy/aws #9736
CORS-4053: Migrate AWS SDK to v2 in cluster/aws #9762
CORS-4054: Migrate from SDK v1 to v2 in installconfig #9760
OCPBUGS-58352: Increase timeout on gcp wait for operation #9825
OSASINFRA-3238: Improve API and Ingress VIPs validation #9438
SPLAT-2294: Azure - add mpool datadisks #9810
OCPEDGE-1740: feat: add arbiter role support to ABI #9780
CORS-4060: Migrate AWS sdk to v2 in infrastructure #9764
OCPBUGS-18658, OCPBUGS-45256: Unify agent install-complete with installer #7678
OCPBUGS-57923: When AWS_PROFILE is invalid ask for credentials #9803
OCPBUGS-57812: Updating ose-installer-container image to be consistent with ART for 4.20 #9799
OCPBUGS-58216: allow to deploy single nodes with UPI #9763
OCPBUGS-57856: Updating ose-installer-artifacts-container image to be consistent with ART for 4.20 #9801
OCPBUGS-57822: Updating ose-baremetal-installer-container image to be consistent with ART for 4.20 #9800
OCPBUGS-41879: vSphere - if regions are the same cannot dup zones #9787
OCPBUGS-18510: Refactor removing loadbalancer in OpenStack. #9724
OCPBUGS-57803: MCO: consider custom AMI for edge compute machine pool #9798
OCPBUGS-57192: Checking for selected PE retrieved data and returning errors for missing values #9785
CORS-4059: migrate gather code AWS SDK v2 #9737
no-jira: Update Generated Files #9784
CORS-3796: Update CVO channel to latest #9790
CORS-3795: Updating the release image to 4.20 #9789
CORS-4057: migrate EC2 quota checking code AWS SDK v2 #9740
OCPBUGS-57535: vSphere - remove unit tests using nip.io #9793
OCPBUGS-57021: Use less permissive access for /var/lib/etcd for SNO #9769
CFE-1119: Removes instances of deprecated experimentalPropagateUserTags #8917
OCPBUGS-56658: Prompt User for AWS Creds when none are found #9751
CORS-3998: Remove base domain from metadata #9711
OCPBUGS-56616: pkg/types/validation: Validate all SSH public keys #9770
OCPBUGS-51299: Set default project and location for KMS key manifest #9767
AGENT-997: Internal dev docs for authentication-authorization #9224
OCPBUGS-57000: Revert “CORS-3883: Remove user-assigned identity from ARM template” #9766
SPLAT-2045: [vsphere] promote multi-nic to default #9493
no-jira: Bump CAPZ Version #9704
NO-JIRA: openstack docs: Fix type of clusterOSImageProperties #9754
OCPBUGS-54885: Validate agent diskEncryption fields #9674
OCPBUGS-54413: Make swift containers removal not fatal for UPI. #9728
OCPBUGS-56808: Remove configv1.GCPServiceEndpointNameTagManager references #9749
no-jira: add unit tests for vsphere VIPS/machinenetworks population #9744
OCPBUGS-56713: update the punctuation #9746
OCPBUGS-54487: Power VS: Provide detailed error when entered VPCName cannot be found #9634
CORS-4066: Remove the function to check if multiarch is enabled/allowed #9750
OCPBUGS-6508: Update Control Plane replica validation for Single Node OpenShift #9048
CORS-3682: log falsy conditions when CAPI infra/machine provisioning failed #9722
MGMT-20702, OCPBUGS-56601: Avoid duplicate machine networks #9743
OCPBUGS-55671: AWS Mutliarch feature gate is enabled by default #9729
OCPBUGS-55672: Remove MultiArchInstallGCP featuregate #9725
OCPBUGS-56645: Update RHCOS 4.20 bootimage metadata to 9.6.20250523-0 #9741
OCPBUGS-56008: Remove unnecessary validation #9739
OCPBUGS-56268: pkg/types/azure: remove SystemAssignedID docs #9717
no-jira: Update team osasinfra #9732
OCPBUGS-56008: don’t expect identity on ASH #9733
OCPBUGS-56008: default Azure to create VM user-assigned identities #9718
NO-JIRA: add the instance types which test PASS #9723
OCPBUGS-55905: Update RHCOS 4.20 bootimage metadata to 9.6.20250513-0 #9720
OCPBUGS-56262: Added better logging for vSphere destroy #9716
OCPBUGS-56079: apply fixes for yaml-lint errors #9708
OCPBUGS-53107: Set appropriate KillMode for systemd services #9562
OCPBUGS-55683: Pre-create password files for agent installer OVE #9679
OCPEDGE-1673: [TNF] Render secret manifests from fencing credentials block. #9635
OCPBUGS-47719: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9693
OCPBUGS-55817: add Lsv4 and Lasv4 series as tested #9696
OCPBUGS-55772: Add support for Azure TDX confidential VM type #9691
no-jira: add jcpowermac to nutanix review/approve groups #9697
CORS-3960, OCPBUGS-55952: Remove Terraform Build Artifacts #9667
no-jira: add PeaceRebel (Bipin) to coreos approvers & reviewers list #9687
OCPBUGS-54502: ensure ctrplane nodes can access bootstrap MCS #9689
OCPBUGS-54566: Apply defaults then validate confidentialCompute #9637
OCPBUGS-55722: azure stack: switch cloud provider to standard lb #9686
no-jira: fixes to get shellcheck to pass #9669
OCPBUGS-53116: AWS Destroy use AWS SDK v2 #9644
OCPEDGE-1707: Add Disable Certificate Verification API #9640
no-jira: azure: add tested instance types for CORS-3634 and CORS-3771 #9683
OCPBUGS-45805: Check for nil in case of proxy crash/deleted #9488
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

baremetal-machine-controllers

OCPBUGS-57693: Updating baremetal-machine-controller-container image to be consistent with ART for 4.20 #236
Full changelog

baremetal-operator

OCPBUGS-74084: Require PreprovisioningImage for deprovisioning when cleaning is enabled #446
OCPBUGS-63538: Create a PreprovisioningImage for servicing if needed #435
OCPBUGS-69667: Change architecture default to match controller #440
METAL-1380: Sync july 24 #427
METAL-1238: Add annotation to install metal3 CRDs in hypershift hosted clusters #426
OCPBUGS-57472: merge from upstream #424
OCPBUGS-54634: Merge upstream #419
OCPBUGS-57817: Updating ose-baremetal-operator-container image to be consistent with ART for 4.20 #422
OCPBUGS-54629, OCPBUGS-54965: merge upstream #418
OCPBUGS-55717: Merge upstream #414
Full changelog

baremetal-runtimecfg

CORS-4175: Extend in-cluster DNS support to Azure #366
no-jira: Bump openshift/api version to bring updates to AzurePlatformStatus #367
NO-ISSUE: Update OWNERS #353
OCPBUGS-57607: Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.20 #350
MGMT-20739: Add control-plane-topology as an arg to dynkeepalived and temporarily add a dummy backend when installing TNF/TNA with assisted-installer #348
OCPBUGS-55971: Re-add ENABLE_NODEIP_DEBUG env var #347
OCPBUGS-57065: iptables: Switch PREROUTING REDIRECT rule to DNAT instead #349
NO-ISSUE: Add emy as reviewer #346
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-74969: Fix unit test failure by updating ruby version to 3.3 #2194
OCPBUGS-74965: Clear defaultNodeSelector to run on any node #2193
OCPBUGS-66241: Fall back to simpler behavior, if setsid,ps,pkill are not installed #2158
OCPBUGS-65481: pkg/cli/admin/upgrade: Tighten force warnings #2140
OCPBUGS-65523: fix(must-gather): do not set node affinity if nodename is set #2142
OCPBUGS-64791: Rely on overall available disk space of the mounted volume #2133
OCPBUGS-64773: oc adm must-gather: Wrap gather in a session #2132
OCPBUGS-61757: pkg/cli/admin/upgrade/recommend: Enable precheck and accept gates #2097
OCPBUGS-59951: must-gather: Fix usage checker for custom commands #2068
OCPBUGS-60989: pkg/cli/admin/release/info: Mention elided first-parent, non-merge commits #2086
OCPBUGS-60877: pkg/cli/admin/inspectalerts: Pass through –certificate-authority, etc. #2083
NO-JIRA: Remove mentioning about IRC channel in README #2082
OTA-1601: Better the Updating Cluster Operators table #2077
OCPBUGS-58393: oc login: Preserve ExecProvider on oc login -u #2075
OCPBUGS-60281: Fix panic in oc describe templateinstance when Secret is nil #2073
OTA-1560: pkg/cli/admin/upgrade: Promote ‘recommend’ to general availability #2076
NO-JIRA: Update containers/image and docker versions #2067
OTA-1600: pkg/cli/admin/upgrade/recommend: Don’t error on unaccepted issues when the feature gate is off #2069
CNTRLPLANE-1054: Update k8s dependencies to 1.33 with bumping the other dependencies #2058
OCPBUGS-50992: Help with must-gather scheduling through suggesting preferance of nodes #2060
Revert “WRKLDS-1713: Remove schema1” #2059
OTA-1575: pkg/cli/admin/upgrade/recommend: “accepted … via ConditionalUpdateRisk” #2040
CORENET-5412: adm, inspect, ns: Collect UserDefinedNetwork CRs #2011
OCPNODE-3426: Introduce a dedicated Pod label for the purpose of identifying debug pods #2055
NO-JIRA: Simplify TarEntryCallback #2047
OCPBUGS-55048: Return error in case of error #2049
OCPSTRAT-2147: Upgrade to go 1.24 and OCP 4.20 #2046
OCPBUGS-57635: Revert “OCPBUGS-56691: Rely on overall available disk space of the mounted volume” #2042
OCPBUGS-56691: Rely on overall available disk space of the mounted volume #2028
WRKLDS-1713: Remove schema1 #2037
WRKLDS-1716: oc image serve: Remove as deprecated #2033
OTA-1539: pkg/cli/admin/upgrade/recommend: Add a –quiet option #2023
OTA-1532: pkg/cli/admin/upgrade/recommend: New, feature-gated –accept #2017
OCPBUGS-49897: avoid transfering permissions when copying artifacts from node-joiner pod #2031
OCPBUGS-56598: pkg/cli/admin/mustgather: Include ClusterVersion in fallback inspect #2025
OCPBUGS-55220: Replace colon to hypen in the filename while extracting tar on Windows #2022
NO-JIRA: OCPBUGS-46604: Clarify behavior of since-time flag in oc adm must-gather command #2019
WRKLDS-1103: Adding sos.conf file for default sos config into the tools image #2003
NO-JIRA: make ‘oc status’ compatible with bare kube #1947
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

cloud-credential-operator

OCPBUGS-65798: ccoctl azure: retry custom role creation on consistency errors #948
OCPBUGS-63690: ccoctl: use pagination when listing resources in aws #941
OCPBUGS-63546: ccoctl: add public-key-file flag to create-all #936
OCPBUGS-61586: set cloud-credential-operator as default-container #916
OCPBUGS-61225: ccoctl: aws to use proper issuer url on subsequent runs #912
NO-JIRA: docs: update sts migration to cause less service interruption #903
NO-JIRA: Add a badge in the repo’s README file to auto-refresh the wiki weekly. #898
OCPBUGS-34993: ccoctl azure dnszone-resource-group-name now optional #897
OCPBUGS-59889: Add retry logic for Azure federated identity credential creation #878
CCO-641: update dependencies #887
NO-JIRA: Drop lleshchi from OWNERS #889
OCPBUGS-43783: openstack: Set annotation even when credentials mode is unset #873
OCPBUGS-59402: github.com/golang/glog v1.2.5 #888
CCO-682: Update to k8s v0.33.2 #885
OCPBUGS-59511: add read only filesystem #884
OCPBUGS-53454: ccoctl: only add owned tag to azure resources on create #876
CCO-681: Add network policies with default deny #871
OCPBUGS-57840: Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.20 #877
CCO-649: make update-go-dependencies to also update indirects #875
OCPBUGS-57296: Remove duplicate cluster role rules #864
OCPBUGS-57349: Use constant for first parameter of fmt.Errorf #874
CCO-645: Add new clock parameter when using library-go:NewKubeRecorder #872
OCPBUGS-55777: Add missing Role, RoleBinding #860
OCPBUGS-56607: Azure: resolve nil pointer exception when role assignment exists #861
OCPBUGS-53429: Render: configure proxy on bootstrap static pod #855
OCPBUGS-55777: Sync OpenStack CA Bundles from legacy location #850
OCPBUGS-54829: golang.org/x/net v0.38.0 #851
Full changelog

cloud-network-config-controller

OCPBUGS-64742: Fix capacity calculation #188
OCPBUGS-63542: Change the capacity struct from int to ptrOfInt #185
CORENET-5958: Rebase k8s to 1.33 #176
NO-JIRA: Update OWNERS #177
OCPBUGS-57778: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.20 #175
Full changelog

cluster-authentication-operator

OCPBUGS-66315: externaloidc: return errors when node statuses cannot be used to determine oidc state #814
OCPBUGS-61896: set appropriate rolling update settings #792
OCPBUGS-63319: (bugfix): configure status controller to remove unset versions #802
OCPBUGS-64668: Update OIDC e2e test to expect admission-time validation error of invalid CEL expression #804
NO-JIRA: Bump library go rm co dep #782
OCPBUGS-59909: Don’t cache server errors when checking for password grant support #781
CNTRLPLANE-5: Wire a feature-gates config observer for oauth-apiserver. #773
AUTH-543: OIDC/OAuth resource configuration #740
AUTH-543, OCPBUGS-57808: (deps): Bump to Go 1.24 and k8s 1.33 #775
CNTRLPLANE-333: Add generation logic for new uid and extra fields in the Authentication CR #763
NO-JIRA: add logging when rendering bootstrap manifests #770
CNTRLPLANE-939: test/e2e-oidc: poll test preconditions for a short time instead of checking once #769
CNTRLPLANE-939: Create separate make rule for e2e oidc tests #768
AUTH-544: Extend e2e test to leverage new functionality #737
Full changelog

cluster-autoscaler

OCPBUGS-63675: update node info processors to include unschedulable nodes #391
OCPBUGS-63495: refactor cloud provider options #387
AUTOSCALE-242, AUTOSCALE-244: 1.33.0 upstream rebase #365
OCPBUGS-54231: revert openshift replica fix #369
AUTOSCALE-284: Rename Cluster Autoscaler component in OWNERS file #360
OCPBUGS-57710: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.20 #357
Full changelog

cluster-autoscaler-operator

AUTOSCALE-244: Allow cluster-operator service account to patch machinesets/scale subresource #352
AUTOSCALE-244: Prepare for 4.20 and fix missing volumeattachments rbac #351
AUTOSCALE-125: newPodScaleUpDelay field for CA #349
AUTOSCALE-284: Rename Cluster Autoscaler component in OWNERS file #347
NO-JIRA: Remove tombstones yamls #348
OCPBUGS-57621: Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.20 #346
OCPBUGS-42875: mitigate operator Degraded status flapping #344
OCPBUGS-57041: update cluster provider type early #343
NO-JIRA: Add autoscale members to OWNERS file #345
Full changelog

cluster-baremetal-operator

OCPBUGS-73916: Fix DNS resolution for metal3 service endpoints by adding trailing dots #548
OCPBUGS-71203: Mount /etc/pki/ca-trust to machine-os-images & Enable runtime extraction of aarch64 images #543
OCPBUGS-62316: Always have a service for ironic-api port #511
METAL-1546: Set privileged to true for ironic-proxy container so it works with ironic-image custom directories #502
METAL-1508: Change deprecated pointer to ptr #495
OCPBUGS-53392: Remove webhookport (9447) as HostPort #496
METAL-1238: Enable CBO to run on hosted clusters #494
OCPBUGS-57419: Do not log “new CO status” unnecessarily #481
Revert “METAL-1404: Add annotation to enable CBO install via CVO in Hosted Clusters” #491
OCPBUGS-57591: Golang 1.24 and openshift 4.20 #488
METAL-1404: Add annotation to enable CBO install via CVO in Hosted Clusters #464
METAL-1437: Add (unsupported) overrides for the ironic agent image #483
OCPBUGS-56723: Treat ResourceNotFound as non-fatal #482
NO-ISSUE: Remove inactive OWNERS #480
OCPBUGS-54244: no default for provisioningIP when provisioningInterface is set #476
OCPBUGS-54965: Inform BMO when provisioning network is disabled #473
NO-ISSUE: Makefile: don’t run all linters when running unit tests #475
NO-ISSUE: Silence a bogus error with newer golangci-lint #477
OCPBUGS-52483: Allow provisioningIP when network disabled #466
Full changelog

cluster-bootstrap

OCPBUGS-57533: Updating ose-cluster-bootstrap-container image to be consistent with ART for 4.20 #117
Full changelog

cluster-capi-controllers

NO-JIRA: Update OWNERS #244
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api:v1.10.2 (5255664) into master #240
OCPCLOUD-2917: Merge https://github.com/kubernetes-sigs/cluster-api:v1.10.1 (647a1b7) into master #238
OCPBUGS-55947: Regenerate manifests to drop v1beta1 admissionregistration usage #236
Full changelog

cluster-capi-operator

OCPBUGS-62755: kubeconfig controller: do not error on token secret not yet populated #377
OCPBUGS-61770: Fix conversion of Machines without MachineSet #362
OCPBUGS-61044: Finish bumping CAPA to v2.9.0 #350
OCPCLOUD-2871: Machine conversion for the delete-machine annotation and unit tests #347
OCPCLOUD-2711: Implement VAP to prevent usage of unsupported AWSMachineSpec fields #333
NO-JIRA: lint: Replace tenv with usetesting #346
OSASINFRA-3690, OSASINFRA-3691: Add OpenStack CAPI-MAPI translation layer #188
NO-JIRA: Improve ergonomics of running tests #342
OCPBUGS-57195: Fix infra machine template deletion #326
OCPCLOUD-2992: migration e2e for creating machine with authoritativeAPI ClusterAPI #320
OCPCLOUD-2566: Adds MAPI Machine VAP and test suites #321
OCPCLOUD-2916: Bump to CAPI v1.10, k8s v1.33, go 1.24 #341
NO-JIRA: Get openshift/api directory from packages #339
OCPCLOUD-2979: ingress network policy for metrics #325
OCPCLOUD-2992: migration e2e for creating machinesets #330
NO-JIRA: Update OWNERS #335
OCPBUGS-56805, OCPBUGS-58880: fix: clusteroperator: do not update status.relatedobjects if only order changed #331
NO-JIRA: migration controllers: add comment for authority propagation logic #327
OCPCLOUD-2992: add machineset migration e2e utils #323
NO-JIRA: Remove manifest for validating-webhook-configuration #324
OCPBUGS-57563: Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.20 #319
OCPBUGS-56010: Fix compareMAPIMachineSets function #315
OCPBUGS-54705: mapi2capi: Create new machine template when changing MAPI providerSpec #295
OCPBUGS-57013: Fix reset sync status in migration controllers #313
NO-JIRA: Assorted cleanups #312
OCPBUGS-57040: Fix failure to retry unpause #309
OCPBUGS-56604: fix: ensure CAPI machineset is created not paused when authoritative #299
OCPBUGS-56709: fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller #301
OCPBUGS-56487: fix: watch CAPI resources in the migration controllers #300
OCPCLOUD-2943: MachineSet deletion logic #286
OCPCLOUD-2893: Add related objects to must-gather config #267
OCPBUGS-55985: fix: machine: propagate non-authoritative deletion #290
OCPBUGS-55947: Should not use v1beta1 of the AdmissionRegistration API group #289
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63164: ccm: disable unused secure-serving port and webhook #419
OCPBUGS-59251: Default cloud.conf if no configmap is found #404
OCPBUGS-53300: Adds service for cloud-controller-manager #399
OCPCLOUD-2940: Update dependencies for Kubernetes 1.33 #396
OCPBUGS-53300: Update service selector to match deployment label #398
NO-JIRA: Update OWNERS #397
OCPBUGS-57613: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.20 #392
OCPCLOUD-2978: add deny all network policy #395
NO-JIRA: Remove old deployment which is deleted #393
OCPBUGS-56508: Fix config-sync-controller logging #389
Full changelog

cluster-config-api

CORENET-6431: network, virt: Graduate PreconfiguredUDNAddresses feature gate #2546
OCPBUGS-66204: Introduce ClosedClientConnectionPolicy to IngressController API #2609
OCPBUGS-66135: Add HTTPKeepAliveTimeout to IngressController API #2607
OCPBUGS-64843: payload-command: remove authentication CR from hypershift payload #2573
OCPBUGS-64940: Promote BYO OIDC features #2515
OCPBUGS-62280: ConsoleLink CRD has incorrect additionalPrinterColumns entry #2509
OCPBUGS-62256: ConsoleLink CRD has incorrect additionalPrinterColumns entry #2508
OCPBUGS-61977: Add ‘AGE’ print column to MachineConfigNode object #2497
OCPBUGS-56778: Disable PSA for 4.20 #2475
OCPBUGS-60901: Add default value for MachineHealthCheck’s maxUnhealthy to the description #2462
AGENT-1262: set NoRegistryClusterOperations as techPreviewNoUpgrade #2432
machineconfiguration/OWNERS: Drop me #2446
OTA-923: Promote ClusterVersionOperatorConfiguration to TechPreview #2457
OCPNODE-3121: Graduate ImageVolume to GA #2453
STOR-2549: Move StoragePerformantSecurityPolicy GA #2456
OTA-1580: Promote UpgradeStatus to Default #2418
CORS-4184: Add STS IAMCredentials and OAuth Service for GCP Endpoint Overrides #2444
OWNERS: update approvers/reviewers #2455
OCPBUGS-58212 Remove InsightsRuntimeExtractor Feature gate #2419
OCPNODE-3187: Promote SigstoreVerificatoin to Default #2340
OCPBUGS-55665: Remove featuregate ChunkSizeMib #2438
Fix feature promotion check single node variant name #2445
OCPBUGS-54287: MachineOSConfig name should match MachineConfigPool #2399
MCO-1744: Add knobs to allow irreconcilable changes #2433
Update KAL to support new guidance on required and optional fields #2440
Remove OnClusterBuild fg #2437
CNTRLPLANE-368: improve OIDC field validations for Authentication resources #2409
STOR-2481: Promote SELinuxMount feature gate #2426
Add new ImageBuildDegraded status option for MCO #2439
OCPEDGE-1945: feat: promote HighlyAvailableArbiter feature to default #2401
OCPNODE-3006: add back SigstoreImageVerification to techPreview #2406
MCO-1759: Add NonReconcilableMC Feature Gate #2429
Update crd-schema.json to release 1.33 branch #2436
Update KAL to include omitzero functionality on optional fields #2431
OCPNODE-3372: Update defaultRuntime doc to show options and set default to crun #2370
CORS-4155: Add Feature gate and update Infrastructure CR for Azure Cluster Hosted DNS #2404
SPLAT-2346: Moving VSphereMultiDisk FeatureGate to GA #2428
features: add installer replacement feature gates #2423
Remove “techpreview” filter on verify job #2422
Update KAL to latest #2420
OCPNODE-3006: Add clusterimgepolicy/imagepolicy to payload #2384
AGENT-1262: add NoRegistryClusterOperations feature gate #2417
OCPBUGS-55661: Remove HardwareSpeed featuregate #2416
OCPNODE-3121: Make FeatureGateImageVolume TechPreview #2403
OCPEDGE-1875: feat: promote tnf from devpreview to techpreview #2413
OCPBUGS-55668: ipam, virt: remove the PersistentIPsForVirt FG #2309
OCPBUGS-59574: Revert #2398 “Revert \“Revert \“CNTRLPLANE-72: remove RoleBindingRestriction CRD from payload\”\“” #2414
STOR-2462: Add ExternalSnapshotMetadata FeatureGate #2381
Revert “Revert “CNTRLPLANE-72: remove RoleBindingRestriction CRD from payload”” #2398
CONSOLE-4665: Disable serving of old v1alpha1 CRD version #2411
Fix kubebuilder tools/envtest index for v1.33.2 (add v prefix) #2410
makefile: bump-publish-kubebuilder-tools to 1.33.2 #2408
envtest-releases: add 1.33.2 to index #2407
Monitoring API: Add AlertmanagerMainConfig #2148
OAPE-232/OCPBUGS-55653: Remove GCPLabelsTags featuregate #2372
CNTRLPLANE-371: Update to Kubernetes v1.33.2 #2252
Disable schema checker overlap with KAL #2397
OCPBUGS-55674: remove AWSEFSDriverVolumeMetrics featuregate #2395
Register v1 (cluster)imagepolicy #2394
Update KAL and GolangCI-Lint to v2 #2321
Enable MutatingAdmissionPolicy in Dev/TechPreview #2385
SPLAT-2299: FeatureGate - MultiDiskSetup #2388
Revert “CNTRLPLANE-72: remove RoleBindingRestriction CRD from payload” #2389
OCPBUGS-55465: Drop on-by-default ValidatingAdmissionPolicy featuregate #2306
STOR-2370: Add featuregates for storage performant security policies #2382
CNTRLPLANE-72: remove RoleBindingRestriction CRD from payload #2138
OCPBUGS-34194: Modify api description for join, transit and masquerade subnets #2320
OCPBUGS-57828: Updating ose-cluster-config-api-container image to be consistent with ART for 4.20 #2375
NO-JIRA: Fix typos in the doc about clusterversion.spec.channel #2371
MCO-1524: Promote PinnedImageSet feature gate to default feature set #2269
MCO-1064: Promote MachineConfigNode feature gate to default #2288
Adding feature gate for image mode status reporting #2373
OCPNODE-3008: Add v1 type ClusterImagePolicy and ImagePolicy #2310
OCPBUGS-55663: Remove NodeDisruptionPolicy featuregate #2359
Register MutatingAdmissionPolicy in feature gates #2349
WRKLDS-1676: OCM config: Remove obsolete fields #2364
OCPBUGS-55652: Remove PrivateHostedZoneAWS feature gate #2338
CNTRLPLANE-337: authentication: oidc: make username claim mapping required #2352
NO-ISSUE: Remove redundant image stream #2358
Promote RouteAdvertisements feature gate to default feature set #2225
MCO-1671: Add feature gates for azure boot image updates & skew management #2353
SPLAT-2137: FG for Service Type LB NLB with Security Group #2354
OCPBUGS-56725: Add max length validation for apiserver namedCertificates #2342
Remove DataGather state print column #2350
OCPBUGS-44462: Remove PlatformOperators from feature list #2333
CORENET-6004: Add PreconfiguredUDNAddresses featuregate #2348
OCPCLOUD-2717: Deprecate DeleteOnTermination for EBS volumes #2341
SPLAT-2175: introduce AzureDedicatedHosts feature gate #2293
OCPBUGS-52556: Revert v1alpha1 removal #2343
SPLAT-2044: [vsphere] promote multi-nic to default #2204
OCPBUGS-55671: Remove MultiArchInstallAWS featuregate #2336
CNTRLPLANE-371: Remove SELinuxChangePolicy gate #2334
OCPNODE-3262: promote featuregate SigstoreImageVerificationPKI to techpreview #2328
OCPBUGS-55672: Remove MultiArchInstallGCP featuregate #2332
CORS-4041: Remove the TagManager from the GCP Custom Endpoints #2323
SPLAT-2213: Added vSphere mixed node env feature gate #2326
OCPBUGS-56382: Fix validation for Resource field in MOSB API #2327
OPRUN-3860: Add NewOLMWebhookProviderOpenshiftServiceCA feature gate #2324
OCPBUGS-55664: remove VSphereDriverConfiguration feature gate #2319
CNTRLPLANE-367: Update Authentication API GoDoc for OIDC-related fields #2314
OCPNODE-2557, OCPNODE-3225: features: set user namespace features on by default #2305
OCPBUGS-55662: Drop BareMetalLoadBalancer feature gate #2312
CCXDEV-14850: align insights DataGather with config #2248
Remove upstream on-by-default cloud feature gates (CloudDualStackNodeIPs, DisableKubeletCloudCredentialProviders) #2249
SPLAT-2168: introduce AWSDedicatedHosts feature gate #2291
OCPBUGS-55666: Remove MachineAPIProviderOpenStack feature gate #2307
MCO-1657: FeatureGate for Bootimage updates for the vSphere platform #2301
SPLAT-2072: Removed VSphereMultiVCenters feature gate #2231
SPLAT-2158: Azure Multi Disk feature gate #2289
README: Add criteria for featuregate test result windows and flake handling #2302
Full changelog

cluster-config-operator

CNTRLPLANE-1311: set up openshift-tests-extension of cluster-config-operator and add a sanity test #448
OCPEDGE-1970: bump(ocp/api): pull in HighlyAvailableArbiter promotion #446
OCPEDGE-1876: bump(o/api,k8s/api,go-version) #445
OCPBUGS-57187: featuregates: always complete featuregates when feature set is CustomNoUpgrade #440
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-52448: Remove gathering of failure domains from machine sets #356
OCPBUGS-59919: Prevent activation of CPMS with deletionTimestamp #364
OCPBUGS-59919: Fix authoritativeAPI recreate loop #365
OCPCLOUD-2937: Bump k8s dependencies to 1.33; go 1.24 #360
NO-JIRA: Update OWNERS #361
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-62258: add all-egress label to deployments on HCP and IBM #244
CNTRLPLANE-385: enable readonly root filesystem #242
OCPBUGS-60242: Use protobuf when connecting to kube client #217
STOR-2465: Add ExternalSnapshotMetadata CRD #239
STOR-2394: Bump all deps for 4.20 #240
STOR-2340: Subscribe to Network Policies for csi-snapshot-controller + operator #238
OCPBUGS-57655: Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.20 #237
Full changelog

cluster-dns-operator

OCPBUGS-59781: Read only root filesystem #445
OCPBUGS-59781: Read only root filesystem #439
NO-JIRA: Add rikatz to OWNERS #442
OCPBUGS-57704: Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.20 #438
Full changelog

cluster-etcd-operator

OCPBUGS-74624: Add priority field to prevent early shutdown #1508
OCPBUGS-63677: Backport 1504 1514 release.420 #1516
OCPBUGS-62738: CNTRLPLANE-1315:Add OpenShift Tests Extension (OTE) for cluster-etcd-operator #1491
OCPBUGS-63249: Ensure revision.json persists on ungraceful shutdown #1501
OCPBUGS-60941: add individual context to the health check #1474
OCPBUGS-60237: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1471
OCPBUGS-60522: Set terminationMessagePolicy to FallbackToLogsOnError on TNF job pods #1468
OCPBUGS-60547: Revert “Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace” #1469
NO-JIRA: Add more unit tests for JobController #1459
OCPEDGE-1998: TNF: Use pcmk_delay_base on 1st fence device to prevent fencing races #1463
OCPBUGS-60237: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1464
NO-JIRA: hack/generate.sh provides helpful errors when missing tools #1465
NO-JIRA: create dedicated cluster-wide informer #1457
ETCD-590: start to refactor the probe injection #1456
OCPBUGS-57859: Updating cluster-etcd-operator-container image to be consistent with ART for 4.20 #1452
NO-JIRA: Migrate bindata to go:embed #1445
OCPBUGS-44570: add missing informer syncs #1449
NO-JIRA: Update owners file #1451
OCPBUGS-50488: add missing ports to svc and pod spec #1444
OCPBUGS-55404: fix ordering on bootstrap IP selection #1443
OCPBUGS-58294: Use 1 pod manifest only, set fields dynamically, deduplicate job creation #1439
OCPBUGS-57372: Wait for 2 cp nodes before starting TNF jobs #1431
CNTRLPLANE-806: Explicitly use podman-etcd from two-node-ha extension #1438
CNTRLPLANE-805: Add TNF pacemaker fencing setup #1421
OCPBUGS-57779: feat: update logic to list arbiter nodes #1435
OCPEDGE-1920: Comply with OCP pod standards for TNF jobs #1430
NO-JIRA: remove grafana-dashboard-etcd #1429
OCPBUGS-56199: increase tnf job timeouts #1426
CNTRLPLANE-340: Issue shorter certs when ShortCertRotation feature gate is set #1315
OCPBUGS-55757: adjust alerts according to platform #1422
OCPBUGS-55111: Remove ‘meta’ keyword from pcs resource create command #1417
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-image-registry-operator

OCPBUGS-59734: fix(azure): resolve credential caching issues around UAMI support #1238
OSASINFRA-3756: Add support for token-based authentication in clouds.yaml configuration file #1221
OCPBUGS-58424: mount /etc/pki/ca-trust/extracted/pem/ as empty dir #1239
NO-JIRA: Set ownership annotation for image-registry-ca CA bundle #1225
OCPBUGS-57577: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.20 #1226
OCPSTRAT-1076: Add readonlyRootFilesystem #1215
OCPBUGS-56606: bump github.com/golang-jwt/jwt #1212
OCPBUGS-56361: bump golang.org/x/oauth2 to the latest version #1206
Full changelog

cluster-ingress-operator

NO-JIRA: Add new NID team members to OWNERS #1317
OCPBUGS-66135: Implement HTTPKeepAliveTimeout tuning option #1312
OCPBUGS-66204: Implement ClosedClientConnectionPolicy field #1314
OCPBUGS-65664: IngressOperator not exposing some metrics for degraded… #1305
OCPBUGS-53432: deflake TestIngressControllerCustomEndpoints by proper waiting for CCM to be ready #1267
OCPBUGS-59139: Increase assertExpectedDNSRecords timeouts #1271
NE-2066: Set degraded=true when OSSM 3 can’t be installed #1268
OCPBUGS-60620: e2e: Deflake tests by using ReplicaSet for test workload #1262
OCPBUGS-54966: Improve detection of missing DNSRecord for Gateway #1212
OCPBUGS-60302: e2e - Reduce flakiness in testGatewayAPIResourcesProtection #1265
NE-2096: Bump to OSSM 3.1.0 and Istio 1.26.2 #1257
NO-JIRA: Add rikatz to OWNERS #1259
OCPBUGS-59894: Update GatewayAPI test to check if deployment has 1 or more pod #1250
NE-2108: docs - correct Istio version format in ossm-overrides.md #1253
NE-2108: Add OSSM channel and version override annotations #1246
NE-2104: desiredIstio: Enable GIE if InferencePool found #1245
OCPBUGS-59839: desiredIstio: Delete trustBundleName #1243
NE-2022: Bump to OSSM 3.0.1 and Istio 1.24.4 #1227
OCPBUGS-58358: desiredIstio: Do not enable a default PDB #1240
OCPBUGS-57728: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.20 #1236
OCPBUGS-55652: Removed PrivateHostedZoneAWS from component #1230
OCPBUGS-54745: status: Conditionally add CRDs to relatedObjects #1217
OCPBUGS-55317: Check capabilities before watching OLM resource #1232
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-65679: enable resource v1beta2 api if DynamicResourceAllocation is enabled #1929
OCPBUGS-62057: OpenShift cluster got degraded after rotating the kube-apiserver-service-network-signer cert #1961
OCPBUGS-64689: Add priority field to prevent early shutdown #1955
OCPBUGS-55670: revert dev cert rotation #1906
Revert “OCPBUGS-57049: certrotation: move test case name outside of AutoRegenerateAfterOfflineExpiry” #1907
OCPBUGS-57049: certrotation: move test case name outside of AutoRegenerateAfterOfflineExpiry #1870
CNTRLPLANE-1248: Add README to test extension #1904
OCPBUGS-60628: certrotation: ensure that all rotated secrets/configmaps have RefreshOnlyWhenExpired set #1900
CNTRLPLANE-1248: Standardized scaffolding for tests extension #1899
RFE-4153: enabled readonly filesystem #1864
Revert “Revert “OCPBUGS-56551: certregenerationcontroller: start configInformers again”” #1891
CNTRLPLANE-1248: set up openshift-tests-extension and add a sanity test #1892
OCPBUGS-55217: Optimistically update Kube Server and Client CA bundles #1812
OCPBUGS-59527: certrotationcontroller: extend node-system-admin-signer lifetime #1872
OCPBUGS-59626: operator: don’t react to events all namespaces #1874
OCPNODE-2559: SCC: add nested-podman and restricted-v3 #1847
NO-JIRA: Add negative tests of GOAWAY-chance #1882
OCPBUGS-44842: Set not-before/not-after annotations #1873
OCPBUGS-50489: Add missing service ports to apiserver service #1875
OCPBUGS-58232: Don’t wait for 2 etcd members when the cluster is TNF installed with assisted-installer #1866
OCPBUGS-43521: Set goaway chance to 0.001 #1863
NO-JIRA: Update the deprecated API usage alerts for 1.33. #1871
Revert “OCPBUGS-56551: certregenerationcontroller: start configInformers again” #1869
CNTRLPLANE-371: Update to Kubernetes v1.33.2 #1849
OCPBUGS-57811: Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.20 #1865
OCPBUGS-58158: Enable watch termination grace period #1862
NO-JIRA: Enable watch termination grace period #1846
OCPBUGS-56551: certregenerationcontroller: start configInformers again #1853
OCPBUGS-55465: Stop serving admissionregistration.k8s.io/v1beta1. #1836
CNTRLPLANE-79: Disable oauth admission plugins #1810
NO-JIRA: remove unused yaml #1856
NO-JIRA: Enable MutatingAdmissionPolicy group version #1854
NO-JIRA: Use new PSS annotation #1833
OCPBUGS-55013: SCC: add hostmount-anyuid-v2 #1834
OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects - reapply #1831
OCPBUGS-52466: bump library-go to bring in updated audit policies #1837
OCPBUGS-55274: Change validity / refresh for some certs which should not be affected by dev cycle rotation change #1832
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-63173: Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.20 #62
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-64684: Add priority field to prevent early shutdown #890
OCPBUGS-55217: Throttle resourcesynccontroller on pairs with dual writers. #882
OCPBUGS-61323: CNTRLPLANE-1275:Fixing arch issue #870
CNTRLPLANE-1275: Add JUnit reporter configuration and README for OTE #863
CNTRLPLANE-1275: set up openshift-tests-extension and add a sanity test #859
OCPBUGS-60473: Optimistically update Kube Server and Client CA bundles #854
RFE-4154: Remove readOnlyRootFilesystem from KCM container #856
NO-JIRA: targetconfigcontroller: set description for csr-controller-ca #851
OCPBUGS-53290: Missing endpoint slices for open ports the operator uses #848
RFE-4154: Fix readonly filesystem error when kcm trying to mkdir on /etc/kubern… #847
CNTRLPLANE-371: Update Kubernetes to v1.33.2 #840
Revert “Revert “CNTRLPLANE-343: certrotationcontroller: use minutes instead of days when FeatureShortCertRotation is enabled”” #843
Revert “CNTRLPLANE-343: certrotationcontroller: use minutes instead of days when FeatureShortCertRotation is enabled” #842
CNTRLPLANE-343: certrotationcontroller: use minutes instead of days when FeatureShortCertRotation is enabled #817
WRKLDS-954: pkg/operator: Remove expired conditional resources #839
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-74624: Add priority field to prevent early shutdown #586
OCPBUGS-61544: add readonlyRootFilesystem #576
OCPSTRAT-2001: Add readOnlyRootFilesystem to kube-scheduler-operator #568
OCPSTRAT-2001: Add readonlyRootFilesystem #564
CNTRLPLANE-371: Update to Kubernetes v1.33.2 #562
OCPBUGS-57855: Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART for 4.20 #566
OCPNODE-3192: enable the scheduler plugin if the feature gate DynamicResourceAllocation is enabled #561
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-61325: CNTRLPLANE-1306:Fixing arch issue #131
CNTRLPLANE-1306: set up openshift-tests-extension and add a sanity test #126
OCPBUGS-57807: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.20 #124
Full changelog

cluster-machine-approver

OCPBUGS-63587: port 9193 need to be internal and port 9194 need to have a service #280
NO-JIRA: Fix some lints and nits #273
OCPCLOUD-2939: Bump k8s 1.33 #272
NO-JIRA: Update OWNERS #274
OCPBUGS-57610: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.20 #271
OCPBUGS-19856: Improve log message when searching for node by InternalDNS #269
No-Jira: ignore test file csr_check_test.go #270
Full changelog

cluster-monitoring-operator

OCPBUGS-74623: update expr for AlertmanagerClusterFailedToSendAlerts to exclude value 0 #2805
OCPBUGS-67166: Add the collection of MTV migration metrics #2772
OCPBUGS-62978: add tls configuration for the monitoring plugin deployment #2718
OCPBUGS-62829: Remove cluster from non-multicluster dashboards #2701
OCPBUGS-64577: Fix KSM deny-list typo #2729
OCPBUGS-63408: chore(prometheus/remotewrite): [release-4.20] clarify that the in-cluster proxy env vars set in prometheus container can be used in all configs that support proxyConfig.proxyFromEnvironment #2721
OCPBUGS-62979: Remove AlertManager endpoints when disabled #2710
OCPBUGS-62750: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.20 #2692
OCPBUGS-62308: test: remove image registry e2e tests #2686
OCPBUGS-61680: add flag --watch-referenced-objects-in-all-namespaces to prometheus-operator #2667
OCPBUGS-61207: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2661
OCPBUGS-61166: Revert “MON-4343: Cleanup deprecate pa config” #2659
OCPBUGS-60948: Add selinux_warning_controller_selinux_volume_conflict to telemetry #2653
MON-4343: Cleanup deprecate pa config #2651
NO-JIRA: [bot] Synchronize versions of the downstream components #2654
NO-JIRA: chore: drop check for AlertmanagerV1 #2650
OCPBUGS-56158: Bump prometheus-operator to v0.85.0 #2652
OCPBUGS-34568, OCPBUGS-35095, OCPBUGS-60689, OCPBUGS-60691, OCPBUGS-60692: non-HA alert cases #2630
OCPBUGS-58475: Enforce secure TLS settings in CMO server #2647
NO-JIRA: [bot] Synchronize versions of the downstream components #2642
MON-4312: Adding new accelerator to the accelerator configmap #2636
MON-4318: Add debug image manifest to CMO #2623
OCPBUGS-60221: remove managed_cluster from reserved external labels #2641
NO-JIRA: Use label matchers for Rules API in prom-label-proxy #2640
NO-JIRA: [bot] Synchronize versions of the downstream components #2639
NO-JIRA: [bot] Synchronize versions of the downstream components #2620
MON-4299: chore(thanos): replace CLI args that will disappear in future versions #2626
OCPBUGS-58475: Enforce secure TLS settings in CMO #2618
OCPBUGS-57215: operator: increase wait time till degraded to max 4 times 5m #2624
MON-4255: Bump prometheus-operator dependencies to v0.84.0 #2619
MON-4255: Bump prometheus-operator to v0.83 #2614
OCPBUGS-57561: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.20 #2611
MON-4288: set up openshift-tests-extension and add a sanity test #2616
MON-4282: Multi-tenant support for KSM’s CRS #2595
NO-JIRA: [bot] Synchronize versions of the downstream components #2615
OCPBUGS-58427: pkg/manifests: don’t reset annotations for metrics client CA #2612
OCPBUGS-57184: chore(alerts): adjust PrometheusPossibleNarrowSelectors description and add link to to-be-added runbook #2608
NO-JIRA: [bot] Synchronize versions of the downstream components #2607
NO-JIRA: [bot] Synchronize versions of the downstream components #2606
OCPBUGS-18282: provide more context in externalLabels unmarshalling error #2605
NO-JIRA: metrics-client-ca: set owner annotation #2602
OCPBUGS-18282: prevent use of reserved labels keys in Prometheus externalLabels #2604
MON-4242: chore(metrics-server): allow setting log verbosity #2599
NO-JIRA: [bot] Synchronize versions of the downstream components #2603
OCPBUGS-33691: mixin: longer rate interval for Alertmanager[Cluster]FailedToSendAlerts #2598
NO-JIRA: [bot] Synchronize versions of the downstream components #2600
MON-4200: disable –auto-gomemlimit for Prometheus on SNO until we can ensure it won’t result in excessive CPU usage #2549
Full changelog

cluster-network-operator

CORENET-6311, OCPBUGS-74139: Skip running _stackmanager for libreswan 5.3+ #2872
OCPBUGS-73365: fix(hypershift): use net.JoinHostPort for URL construction #2876
OCPBUGS-66253: Add kubevirt platform to dual-stack supported platforms #2860
OCPBUGS-66412: Fix whereabouts-token-watcher DaemonSet improvements #2850
OCPBUGS-66164: [release-4.20] CORENET-6465: Remove unneeded logging config from managed ovn-kubernetes #2838
OCPBUGS-66162: [release-4.20] CORENET-6488: Preserve custom resource requests on ovn-control-plane pods #2835
OCPBUGS-46422: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes [4.20] #2827
OCPBUGS-64733: api, l2udn: subnets must be masked #2823
OCPBUGS-62678: Tweak iptables-alerter to try to avoid crictl bug #2811
OCPBUGS-62273: Fix EgressIP stale GARP post reboot + pod restart #2806
OCPBUGS-61779: Relax label req. of DPU/DPU Host/Smart NIC #2800
OCPBUGS-61370: Set maxUnavailable 10% on MultiNetworkPolicy DS #2793
CORENET-6306: Set RunAsUser for network-node-identity #2780
OCPBUGS-57815: Updating cluster-network-operator-container image to be consistent with ART for 4.20 #2728
CORENET-6092, CORENET-6130, CORENET-6261: Implement PreconfiguredUDNAddresses API changes #2743
MGMT-21485: Enable dpu-host mode that matches DPF requirements #2778
CORENET-6276: Use priorityClass from HostedControlPlane for OVN and NNI #2769
CORENET-6290: Restrict access to mounted secrets in ovnkube-control-plane #2774
OCPBUGS-55962: Allow overriding OVN-Kubernetes configuration #2752
OCPBUGS-60264: Fix multus webhook match condition for spec changes #2772
MGMT-20706: fix DPU host mode support for OVN templates #2740
CORENET-6279: ovn-k, virt: update IPAMClaim CRD #2770
CORENET-6247: Set runAsUser for ovnkube-control-plane #2757
CORENET-5957: Rebase k8s to 1.33 #2723
NO-JIRA: Update CNO reviewers/approvers #2756
CORENET-6228: Allow network-node-identity to be enabled for IBMCloud PlatformType #2755
NO-JIRA: remove PersistentIPsForVirt FG #2759
CORENET-6127: ovn-k: Enable OVN-K feature when PreconfiguredUDNAddresses is enabled #2734
OCPBUGS-59134, OCPBUGS-59135: Annotate whereabouts-controller #2749
NO-JIRA: deprecate exportloopref #2750
CORENET-5881: Reconfigure NBDB for route advertisements in LGW #2735
OCPBUGS-58448: fg, virt: remove FeatureGatePersistentIPsForVirtualization #2737
OCPBUGS-58155: CNO must skip watching IngressController if Ingress capability is disabled in HyperShift #2731
OCPBUGS-57643: Add release version annotation to whereabouts-controller/whereabouts-token-watcher #2727
OCPBUGS-55763: stop frr from listening for incoming connection in the bgp daemon #2708
CNF-18237: Align frrk8s manifests to upstream #2730
CNF-18236: FRRK8s webhook: webhook liveness / readiness from metrics to webhook #2716
NO-JIRA: remove unused clusterrolebinding default-account-cluster-network-operator #2725
OCPBUGS-56086: Validate NAD name and spec only in multus admission controller #2718
CORENET-5704: Consume latest vendoring from ocp api repo #2720
OCPBUGS-56878: whereabouts-config is a reserved name for user interaction. #2707
CNTRLPLANE-341: Issue shorter certificates when ShortRotation featuregate is enabled #2556
OCPBUGS-56051: Configure the terminationMessagePolicy for all containers deployed in HyperShift #2709
OCPBUGS-51093, OCPBUGS-55157: Pass ‘–gateway-mode’ flag for ovnkube-cluster-manager #2696
OCPBUGS-55488: Remove environment variables related to ARO HCP MIv2 for CNO #2686
Full changelog

cluster-node-tuning-operator

OCPBUGS-70349: Remove CgroupModeV1 reference from the code #1437
OCPBUGS-62721: E2E: skip SMT disabled test when L3 cache spans entire NUMA node #1404
OCPBUGS-63751: PPC: ghw: filter out namespaces dir #1421
OCPBUGS-64832: e2e:hugepages: changing tests to use hugepages-allocator tool #1427
OCPBUGS-64588: e2e:llc: skip test when no BM worker is found #1422
OCPBUGS-63010: E2E: Add test cases related to schedulable control plane nodes #1409
OCPBUGS-62889: E2E: llc: make sure to remove any trailing newspaces #1408
OCPBUGS-63334: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1415
OCPBUGS-62214: E2E: Add function to check control plane nodes are schedulable. #1398
OCPBUGS-62023: release-4.20: e2e: set of fixes/changes to ovs pinning testing #1394
OCPBUGS-62017: E2E: llc: Create testing namespace before Runtime tests #1393
And 36 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-olm-operator

OPRUN-4034: Handle CustomNoUpgrade better #134
OCPBUGS-58992: Bump helm to v3.18.4 #132
OPRUN-4026: Add support for all NoUpgrades #131
OCPSTRAT-2075: add missing tmp mounting to fix write to read only fil… #129
OPRUN-3999: Validate feature-gate arguments #128
OPRUN-3970: Add support for experimental manifests #127
OCPBUGS-57601: Updating ose-cluster-olm-operator-container image to be consistent with ART for 4.20 #124
OCPSTRAT-1976: Add readonlyRootFilesystem #120
OCPBUGS-56903: fix: report correct next version when incompatible operators are installed #123
OCPBUGS-56813: fix olm.maxOpenShiftVersion float parsing #121
OPRUN-3904: Add static network policies to govern namespace and controller pod #118
OPRUN-3861: Webhook support feature flag #119
OPRUN-3883: Add network-policy support #117
Full changelog

cluster-openshift-apiserver-operator

CNTRLPLANE-1257: Add README to test extension #624
CNTRLPLANE-1257: set up openshift-tests-extension and add a sanity test #623
: NO-JIRA: Bump to Go 1.24 and k8s 1.33 #620
NO-JIRA: operator: annotate image-import-ca configmap with owner #616
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-61607: set up openshift-tests-extension for cluster-openshift-controller-manager-operator and add a sanity test #396
CNTRLPLANE-926: Add readonlyRootFilesystem #392
CNTRLPLANE-1054: Update k8s deps to 1.33.2 #393
WRKLDS-844: sync: Use more descriptive variable name #390
WRKLDS-844: pkg/operator: Split OCM/RCM status conditions #387
WRKLDS-954: pkg/operator: Remove expired conditional resources #388
WRKLDS-1676: ocm deployment: Add POD_NAME #386
WRKLDS-1676: controller manager config: Set leaderElection.name #385
Full changelog

cluster-policy-controller

OCPBUGS-62053: fix(psalabelsyncer): return an error instead of panic when converting an unknown volume #168
CNTRLPLANE-1054: rebase k8s (1.33.2), openshift (4.20) and other underlying dependencies #164
Full changelog

cluster-samples-operator

OCPBUGS-63507: references to github.com/sclorg/django-ex.git now also refer to the branch #655
OCPBUGS-60665: Periodic sync of supported OCP samples #646
OCPBUGS-60606: Periodic sync of OKD samples - Return to Open Liberty 25.0.0.3 to fix failing tests #649
OCPBUGS-59325: Periodic sync of OKD samples #630
OCPBUGS-60179: Bump Kubernetes Version to v0.33.3 #644
OCPBUGS-60179: Bump Kubernetes Version to v0.33.3 - update Dockerfile.okd #645
OCPBUGS-59324: Periodic sync of supported OCP samples #631
OCPBUGS-57745: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.20 #643
NO-JIRA: cleanup hello-openshift yaml #642
Full changelog

cluster-storage-operator

OCPBUGS-70343: volume-data-source-validator must use IfNotPresent image pull policy #653
OCPBUGS-62668, OCPBUGS-62993: Move metrics to vsphere driver #630
OCPBUGS-62175: add all-egress label to deployments on HCP and IBM #622
OCPBUGS-61249: Fix logging e2e also faster cleanup #613
OCPBUGS-60948: Rename the SELinuxMount metric to :count #609
STOR-1064: add volume-data-source-validator controller #592
STOR-2576: Collect overall SELinux warning controller metrics #608
STOR-2463: add csi-external-snapshot-metadata to image-references #606
STOR-2549: Remove TP label from VAP files #607
STOR-2330: Add labels to subscribe ibm-powervs-block CSI driver operator to NPs #600
STOR-2370: Add e2e storage performant policy #593
STOR-2330: Add labels to subscribe ibm-vpc-block CSI driver operator to NPs #599
OCPBUGS-60064: hypershift: add app label to csdriveroperators running in HCP #603
STOR-2330: Add labels to subscribe openstack cinder and manila CSI driver operators to NPs #601
STOR-2330: Add RBAC rule to let ibm-vpc-block-csi-driver-operator manage NetworkPolicy #602
STOR-2394: Bump all deps for 4.20 #598
STOR-2330: Add labels to subscribe vSphere CSI driver operator to NPs #597
STOR-2340: Add Network Policies and subscriptions for CSO and VPD (redux) #596
OCPBUGS-58368: Revert #589 “STOR-2340: Add Network Policies and subscriptions for CSO and VPD” #595
OCPBUGS-44128: OCPBUGS-44127: Sync azure permissions #582
STOR-2340: Add Network Policies and subscriptions for CSO and VPD #589
STOR-2330: Add labels to subscribe Azure disk and file CSI driver operators to NPs #587
STOR-2330: Add labels to subscribe GCP PD CSI driver operator to NPs #591
Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.20 #588
STOR-2330: Add labels to subscribe AWS-EBS CSI driver operator to NPs #584
STOR-2330: Network Policies for CSI drivers and operators #579
OSASINFRA-3675: Add credentialRequest for manila namespace #573
OCPBUGS-56201: improve message template for PodStartupStorageOperationsFailing alert #583
NO-JIRA: Update openstack approvers #581
OCPBUGS-54491: sync Azure File permissions with upstream docs #2 #578
Full changelog

cluster-update-keys

Revert “OCPNODE-3611: manifests.rhel/0000_90_openshift-cluster-image-policy: Drop TechPreviewNoUpgrade limitation” #83
OCPNODE-3611: manifests.rhel/0000_90_openshift-cluster-image-policy: Drop TechPreviewNoUpgrade limitation #82
OCPNODE-3006: OCPBUGS-59860: OpenShift verification uses v1 CRD #74
NO-ISSUE: OWNERS: Add Mrunal, remove folks who are no longer active in OpenShift-core #77
OCPNODE-3006: Drop openshift policy to DevPreviewNoUpgrade for ClusterImagePolicy to v1 #76
OCPBUGS-57820: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.20 #73
Full changelog

cluster-version-operator

OCPBUGS-64828: lib/resourcemerge: Add support for hostUsers flag #1259
OCPBUGS-70180: [release-4.20] OCPBUGS-70180: Unify capitalization when comparing architectures for available updates #1281
OCPBUGS-63001: Add ClusterVersionOperator manifests to TechPreviewNoUpgrade clusters in 4.20 #1247
OCPBUGS-62867: temporarily disable metrics auth for hypershift clusters #1244
OCPBUGS-57585: CVO protects /metrics with authorization #1215
OTA-1480: Add readonlyRootFilesystem #1208
NO-JIRA: Generate junitfile for unit tests #1217
OTA-1578: Disable ResourceReconciliationIssues condition #1216
OTA-1521: Add a default-deny network policy for CVO namespace #1198
OCPBUGS-57756: Updating cluster-version-operator-container image to be consistent with ART for 4.20 #1204
OTA-1531: [⁶⁄₆] cvo: use early gate checker to avoid delayed initialization #1196
NO-JIRA: test: remove unnecessary integration tests layers #1202
NO-JIRA: tests: fix make integration-test target #1203
NO-JIRA: Add myself as an approver #1201
OCPBUGS-56114: Fix ImplicitlyEnabledCapabilities #1191
OTA-1531: [5/x] cvo: read cluster FeatureGate early #1190
OTA-1403: Update and Verify Test Metadata Using Makefile #1179
OTA-1531: [4/x] cvo: extract config informer creation #1189
OTA-1010: Add a new version of GetImplicitlyEnabledCapabilities #1133
OTA-1531: [3/x] cvo: read version from release metadata on startup #1188
OTA-1531: [2/x] cvo: refactor LoadUpdate #1185
OTA-1531: [1/x] cvo: refactor option processing #1184
OTA-209: Add sync logic to the CVO configuration controller #1170
OCPBUGS-53062: add the ports Field into the CVO’s container spec #1180
NO-JIRA: Makefile: verify -> verify-yaml #1183
Full changelog

configmap-reloader

OCPBUGS-57846: Updating configmap-reload-container image to be consistent with ART for 4.20 #72
MON-4257: Bump configmap-reload to v0.15.0 #71
ART-13079: append .0 to go.mod version #67
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Package List

cri-o-1.33.4-1.el10s
kernel-6.12.0-192.el10
openshift-kubelet-4.20.0-202601070847.p2.g33a825e.assembly.stream.el9
systemd-257-21.el10

Full list (479 packages)

NetworkManager-1:1.55.91-1.el10
NetworkManager-cloud-setup-1:1.55.91-1.el10
NetworkManager-libnm-1:1.55.91-1.el10
NetworkManager-ovs-1:1.55.91-1.el10
NetworkManager-tui-1:1.55.91-1.el10
WALinuxAgent-udev-2.14.0.1-2.el10
aardvark-dns-2:1.16.0-2.el10
acl-2.3.2-4.el10
afterburn-5.10.0-1.el10
afterburn-dracut-5.10.0-1.el10
alternatives-1.30-2.el10
amd-gpu-firmware-20260107-21.el10
amd-ucode-firmware-20260107-21.el10
attr-2.5.2-5.el10
audit-4.0.3-5.el10
audit-libs-4.0.3-5.el10
audit-rules-4.0.3-5.el10
authselect-1.5.0-8.el10
authselect-libs-1.5.0-8.el10
avahi-libs-0.9~rc2-2.el10
azure-vm-utils-0.7.0-1.el10
basesystem-11-22.el10
bash-5.2.26-6.el10
bash-completion-1:2.11-16.el10
bind-libs-32:9.18.33-13.el10
bind-license-32:9.18.33-13.el10
bind-utils-32:9.18.33-13.el10
bootc-1.12.1-2.el10
bootupd-0.2.32-1.el10
bsdtar-3.7.7-4.el10
bubblewrap-0.10.0-3.el10
bzip2-1.0.8-25.el10
bzip2-libs-1.0.8-25.el10
c-ares-1.34.6-1.el10
ca-certificates-2025.2.80_v9.0.305-102.el10
catatonit-5:0.2.1-1.el10
centos-gpg-keys-10.0-19.el10
centos-release-cloud-1-1.el10s
centos-release-nfv-common-1-5.el10s
centos-release-virt-common-1-1.el10s
centos-stream-release-10.0-19.el10
centos-stream-repos-10.0-19.el10
checkpolicy-3.9-1.el10
chrony-4.8-1.el10
cifs-utils-7.4-1.el10
clevis-21-9.el10
clevis-dracut-21-9.el10
clevis-luks-21-9.el10
clevis-pin-tpm2-0.5.3-9.el10
clevis-systemd-21-9.el10
cloud-utils-growpart-0.33-11.el10
composefs-1.0.8-1.el10
composefs-libs-1.0.8-1.el10
conmon-3:2.1.13-1.el10
conmon-rs-0.6.6-2.el10s
console-login-helper-messages-0.21.3-10.el10
console-login-helper-messages-issuegen-0.21.3-10.el10
console-login-helper-messages-profile-0.21.3-10.el10
container-selinux-4:2.244.0-1.el10
containers-common-5:0.64.0-4.el10
containers-common-extra-5:0.64.0-4.el10
coreos-installer-0.25.0-1.el10
coreos-installer-bootinfra-0.25.0-1.el10
coreutils-9.5-6.el10
coreutils-common-9.5-6.el10
cpio-2.15-3.el10
cracklib-2.9.11-8.el10
cracklib-dicts-2.9.11-8.el10
cri-o-1.33.4-1.el10s
cri-tools-1.33.0-2.el10s
criu-4.2-1.el10
criu-libs-4.2-1.el10
crun-1.25.1-1.el10
crypto-policies-20251127-1.git27c2902.el10
crypto-policies-scripts-20251127-1.git27c2902.el10
cryptsetup-2.8.1-2.el10
cryptsetup-libs-2.8.1-2.el10
curl-8.12.1-4.el10
cyrus-sasl-gssapi-2.1.28-27.el10
cyrus-sasl-lib-2.1.28-27.el10
dbus-1:1.14.10-5.el10
dbus-broker-36-4.el10
dbus-common-1:1.14.10-5.el10
dbus-libs-1:1.14.10-5.el10
dbus-tools-1:1.14.10-5.el10
device-mapper-10:1.02.206-3.el10
device-mapper-event-10:1.02.206-3.el10
device-mapper-event-libs-10:1.02.206-3.el10
device-mapper-libs-10:1.02.206-3.el10
device-mapper-multipath-0.9.9-15.el10
device-mapper-multipath-libs-0.9.9-15.el10
device-mapper-persistent-data-1.3.0-1.el10
diffutils-3.10-8.el10
dmidecode-1:3.6-5.el10
dnf-4.20.0-19.el10
dnf-data-4.20.0-19.el10
dnsmasq-2.90-5.el10
dosfstools-4.2-12.el10
dracut-107-3.el10
dracut-network-107-3.el10
dracut-squash-107-3.el10
duktape-2.7.0-10.el10
e2fsprogs-1.47.1-5.el10
e2fsprogs-libs-1.47.1-5.el10
efi-filesystem-6-6.el10
efibootmgr-18-8.el10
efivar-libs-39-3.el10
elfutils-default-yama-scope-0.194-1.el10
elfutils-libelf-0.194-1.el10
elfutils-libs-0.194-1.el10
erofs-utils-1.8.10-1.el10
ethtool-2:6.15-2.el10
expat-2.7.3-1.el10
file-5.45-8.el10
file-libs-5.45-8.el10
filesystem-3.18-17.el10
findutils-1:4.10.0-5.el10
firewalld-filesystem-2.4.0-1.el10
flatpak-session-helper-1.16.0-9.el10
fstrm-0.6.1-12.el10
fuse-common-3.16.2-5.el10
fuse-libs-2.9.9-25.el10
fuse3-3.16.2-5.el10
fuse3-libs-3.16.2-5.el10
fwupd-1.9.31-1.el10
gawk-5.3.0-6.el10
gdbm-1:1.23-14.el10
gdbm-libs-1:1.23-14.el10
gettext-envsubst-0.22.5-6.el10
gettext-libs-0.22.5-6.el10
gettext-runtime-0.22.5-6.el10
git-core-2.52.0-1.el10
glib2-2.80.4-11.el10
glibc-2.39-99.el10
glibc-common-2.39-99.el10
glibc-gconv-extra-2.39-99.el10
glibc-minimal-langpack-2.39-99.el10
gmp-1:6.2.1-12.el10
gnupg2-2.4.5-3.el10
gnutls-3.8.10-2.el10
gobject-introspection-1.79.1-6.el10
gpgme-1.23.2-6.el10
grep-3.11-10.el10
grub2-common-1:2.12-36.el10
grub2-efi-x64-1:2.12-36.el10
grub2-pc-1:2.12-36.el10
grub2-pc-modules-1:2.12-36.el10
grub2-tools-1:2.12-36.el10
grub2-tools-minimal-1:2.12-36.el10
gssproxy-0.9.2-10.el10
gzip-1.13-3.el10
hostname-3.23-14.el10
hwdata-0.379-10.6.el10
ignition-2.25.1-1.el10
ignition-grub-2.25.1-1.el10
ima-evm-utils-1.6.2-4.el10
info-7.1-6.el10
inih-58-3.el10
intel-gpu-firmware-20260107-21.el10
ipcalc-1.0.3-12.el10
iproute-6.17.0-1.el10
iproute-tc-6.17.0-1.el10
iptables-libs-1.8.11-12.el10
iptables-nft-1.8.11-12.el10
iputils-20240905-5.el10
irqbalance-2:1.9.4-6.el10
iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10
iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el10
isns-utils-libs-0.103-1.el10
jansson-2.14-3.el10
jose-14-102.el10
jq-1.7.1-11.el10
json-c-0.18-3.el10
json-glib-1.8.0-5.el10
kbd-2.6.4-7.el10
kbd-legacy-2.6.4-7.el10
kbd-misc-2.6.4-7.el10
kdump-utils-1.0.58-10.el10
kernel-6.12.0-192.el10
kernel-core-6.12.0-192.el10
kernel-modules-6.12.0-192.el10
kernel-modules-core-6.12.0-192.el10
kernel-modules-extra-6.12.0-192.el10
kexec-tools-2.0.32-3.el10
keyutils-1.6.3-5.el10
keyutils-libs-1.6.3-5.el10
kmod-31-12.el10
kmod-libs-31-12.el10
kpartx-0.9.9-15.el10
krb5-libs-1.21.3-8.el10
less-661-3.el10
libacl-2.3.2-4.el10
libaio-0.3.111-22.el10
libarchive-3.7.7-4.el10
libassuan-2.5.6-6.el10
libattr-2.5.2-5.el10
libbasicobjects-0.1.1-58.el10
libblkid-2.40.2-15.el10
libbpf-2:1.7.0-1.el10
libcap-2.69-7.el10
libcap-ng-0.8.4-6.el10
libcbor-0.11.0-3.el10
libcollection-0.7.0-58.el10
libcom_err-1.47.1-5.el10
libcomps-0.1.21-3.el10
libcurl-minimal-8.12.1-4.el10
libdhash-0.5.0-58.el10
libdnf-0.73.1-12.el10
libdnf-plugin-subscription-manager-1.30.12-1.el10
libdrm-2.4.128-1.el10
libeconf-0.6.2-4.el10
libedit-3.1-52.20230828cvs.el10
libev-4.33-15.el10
libevent-2.1.12-16.el10
libfdisk-2.40.2-15.el10
libffi-3.4.4-10.el10
libfido2-1.14.0-7.el10
libgcc-14.3.1-4.3.el10
libgcrypt-1.11.0-6.el10
libgomp-14.3.1-4.3.el10
libgpg-error-1.50-2.el10
libgudev-238-7.el10
libgusb-0.4.9-4.el10
libibverbs-57.0-2.el10
libicu-74.2-5.el10
libidn2-2.3.7-3.el10
libini_config-1.3.1-58.el10
libipa_hbac-2.12.0-1.el10
libjcat-0.2.2-2.el10
libjose-14-102.el10
libkcapi-1.5.0-3.el10
libkcapi-hasher-1.5.0-3.el10
libkcapi-hmaccalc-1.5.0-3.el10
libksba-1.6.7-2.el10
libldb-4.23.5-100.el10
libluksmeta-10-1.el10
libmaxminddb-1.9.1-4.el10
libmicrohttpd-1:1.0.0-3.el10
libmnl-1.0.5-7.el10
libmodulemd-2.15.0-12.el10
libmount-2.40.2-15.el10
libmspack-0.10.1-0.14.alpha.el10
libndp-1.9-2.el10
libnet-1.3-7.el10
libnetfilter_conntrack-1.0.9-12.el10
libnfnetlink-1.0.2-3.el10
libnfsidmap-1:2.8.3-3.el10
libnftnl-1.3.0-2.el10
libnghttp2-1.64.0-2.el10
libnl3-3.11.0-1.el10
libnvme-1.16.1-2.el10
libpath_utils-0.2.1-58.el10
libpcap-14:1.10.4-7.el10
libpciaccess-0.16-16.el10
libpkgconf-2.1.0-3.el10
libpwquality-1.4.5-12.el10
libref_array-0.1.5-58.el10
librepo-1.19.0-1.el10
libseccomp-2.5.6-1.el10
libselinux-3.9-3.el10
libselinux-utils-3.9-3.el10
libsemanage-3.9-2.el10
libsepol-3.9-1.el10
libsmartcols-2.40.2-15.el10
libsmbclient-4.23.5-100.el10
libsolv-0.7.33-2.el10
libss-1.47.1-5.el10
libsss_certmap-2.12.0-1.el10
libsss_idmap-2.12.0-1.el10
libsss_nss_idmap-2.12.0-1.el10
libsss_sudo-2.12.0-1.el10
libstdc++-14.3.1-4.3.el10
libtalloc-2.4.3-100.el10
libtasn1-4.20.0-1.el10
libtdb-1.4.14-100.el10
libtevent-0.17.1-100.el10
libtirpc-1.3.5-1.el10
libtool-ltdl-2.4.7-13.el10
libunistring-1.1-10.el10
liburing-2.12-1.el10
libusb1-1.0.29-3.el10
libutempter-1.2.1-15.el10
libuuid-2.40.2-15.el10
libuv-1:1.51.0-1.el10
libverto-0.3.2-10.el10
libverto-libev-0.3.2-10.el10
libwbclient-4.23.5-100.el10
libxcrypt-4.4.36-10.el10
libxml2-2.12.5-9.el10
libxmlb-0.3.24-1.el10
libxslt-1.1.39-8.el10
libyaml-0.2.5-16.el10
libzstd-1.5.5-9.el10
linux-firmware-20260107-21.el10
linux-firmware-whence-20260107-21.el10
lmdb-libs-0.9.32-4.el10
logrotate-3.22.0-5.el10
lsof-4.98.0-7.el10
lua-libs-5.4.6-7.el10
luksmeta-10-1.el10
lvm2-10:2.03.32-3.el10
lvm2-libs-10:2.03.32-3.el10
lz4-libs-1.9.4-8.el10
lzo-2.10-14.el10
makedumpfile-1.7.8-1.el10
mdadm-4.4-3.el10
microcode_ctl-4:20251111-1.el10
mokutil-2:0.7.2-4.el10
mpdecimal-2.5.1-12.el10
mpfr-4.2.1-6.el10
nano-8.1-3.el10
ncurses-base-6.4-14.20240127.el10
ncurses-libs-6.4-14.20240127.el10
net-tools-2.0-0.73.20160912git.el10
netavark-2:1.16.0-1.el10
nettle-3.10.1-1.el10
newt-0.52.24-5.el10
nfs-utils-1:2.8.3-3.el10
nftables-1:1.1.5-3.el10
nmap-ncat-4:7.92-5.el10
nmstate-2.2.57-1.el10
npth-1.6-21.el10
nss-altfiles-2.23.0-5.el10
numactl-libs-2.0.19-3.el10
nvidia-gpu-firmware-20260107-21.el10
nvme-cli-2.16-2.el10
oniguruma-6.9.9-7.el10
open-vm-tools-13.0.5-1.el10
openldap-2.6.10-1.el10
openshift-clients-4.20.0-202602032049.p2.g040daf8.assembly.stream.el9
openshift-kubelet-4.20.0-202601070847.p2.g33a825e.assembly.stream.el9
openssh-9.9p1-19.el10
openssh-clients-9.9p1-19.el10
openssh-server-9.9p1-19.el10
openssl-1:3.5.5-1.el10
openssl-fips-provider-1:3.5.5-1.el10
openssl-libs-1:3.5.5-1.el10
openvswitch-selinux-extra-policy-1.0-36.el10s
openvswitch3.5-3.5.0-6.el10s
os-prober-1.81-9.el10
ose-aws-ecr-image-credential-provider-4.20.0-202601070847.p2.gbb88da1.assembly.stream.el9
ose-azure-acr-image-credential-provider-4.20.0-202601070847.p2.gd469d04.assembly.stream.el9
ose-gcp-gcr-image-credential-provider-4.20.0-202601070847.p2.gf940e72.assembly.stream.el9
ostree-2025.7-1.el10
ostree-grub2-2025.7-1.el10
ostree-libs-2025.7-1.el10
p11-kit-0.26.1-1.el10
p11-kit-trust-0.26.1-1.el10
pam-1.6.1-9.el10
pam-libs-1.6.1-9.el10
passt-0^20251210.gd04c480-2.el10
passt-selinux-0^20251210.gd04c480-2.el10
pciutils-3.13.0-6.el10
pciutils-libs-3.13.0-6.el10
pcre2-10.44-1.el10.3
pcre2-syntax-10.44-1.el10.3
pkgconf-2.1.0-3.el10
pkgconf-m4-2.1.0-3.el10
pkgconf-pkg-config-2.1.0-3.el10
podman-7:5.6.0-2.el10
policycoreutils-3.9-2.el10
policycoreutils-python-utils-3.9-2.el10
polkit-125-4.el10
polkit-libs-125-4.el10
popt-1.19-8.el10
procps-ng-4.0.4-9.el10
protobuf-c-1.5.0-6.el10
psmisc-23.6-8.el10
python3-3.12.12-3.el10
python3-audit-4.0.3-5.el10
python3-charset-normalizer-3.4.2-1.el10
python3-cloud-what-1.30.12-1.el10
python3-dateutil-1:2.9.0.post0-1.el10
python3-dbus-1.3.2-8.el10
python3-decorator-5.1.1-12.el10
python3-distro-1.9.0-5.el10
python3-dnf-4.20.0-19.el10
python3-dnf-plugin-versionlock-4.7.0-10.el10
python3-dnf-plugins-core-4.7.0-10.el10
python3-gobject-base-3.46.0-7.el10
python3-gobject-base-noarch-3.46.0-7.el10
python3-hawkey-0.73.1-12.el10
python3-idna-3.7-4.el10
python3-iniparse-0.5-10.el10
python3-inotify-0.9.6-36.el10
python3-libcomps-0.1.21-3.el10
python3-libdnf-0.73.1-12.el10
python3-librepo-1.19.0-1.el10
python3-libs-3.12.12-3.el10
python3-libselinux-3.9-3.el10
python3-libsemanage-3.9-2.el10
python3-pip-wheel-23.3.2-7.el10
python3-policycoreutils-3.9-2.el10
python3-requests-2.32.4-1.el10
python3-rpm-4.19.1.1-21.el10
python3-setools-4.6.0-2.el10
python3-six-1.16.0-16.el10
python3-subscription-manager-rhsm-1.30.12-1.el10
python3-systemd-235-11.el10
python3-urllib3-1.26.19-3.el10
qemu-guest-agent-18:10.1.0-11.el10
quota-1:4.09-10.el10
quota-nls-1:4.09-10.el10
rdma-core-57.0-2.el10
readline-8.2-11.el10
rpcbind-1.2.7-3.el10
rpm-4.19.1.1-21.el10
rpm-build-libs-4.19.1.1-21.el10
rpm-libs-4.19.1.1-21.el10
rpm-ostree-2026.1-1.el10
rpm-ostree-libs-2026.1-1.el10
rpm-plugin-selinux-4.19.1.1-21.el10
rpm-sequoia-1.9.0.3-1.el10
rpm-sign-libs-4.19.1.1-21.el10
rsync-3.4.1-3.el10
samba-client-libs-4.23.5-100.el10
samba-common-4.23.5-100.el10
samba-common-libs-4.23.5-100.el10
sed-4.9-3.el10
selinux-policy-42.1.15-1.el10
selinux-policy-targeted-42.1.15-1.el10
setup-2.14.5-7.el10
sg3_utils-1.48-7.el10
sg3_utils-libs-1.48-7.el10
shadow-utils-2:4.15.0-9.el10
shadow-utils-subid-2:4.15.0-9.el10
shared-mime-info-2.3-8.el10
shim-x64-15.8-5.el10
skopeo-2:1.20.0-1.el10
slang-2.3.3-8.el10
snappy-1.1.10-7.el10
socat-1.7.4.4-8.el10
sqlite-libs-3.46.1-5.el10
ssh-key-dir-0.1.4-9.el10
sssd-2.12.0-1.el10
sssd-ad-2.12.0-1.el10
sssd-client-2.12.0-1.el10
sssd-common-2.12.0-1.el10
sssd-common-pac-2.12.0-1.el10
sssd-ipa-2.12.0-1.el10
sssd-krb5-2.12.0-1.el10
sssd-krb5-common-2.12.0-1.el10
sssd-ldap-2.12.0-1.el10
sssd-nfs-idmap-2.12.0-1.el10
sssd-proxy-2.12.0-1.el10
stalld-1.26.3-1.el10
strace-6.12-3.el10
subscription-manager-1.30.12-1.el10
subscription-manager-rhsm-certificates-20220623-6.el10
sudo-1.9.17-2.p2.el10
systemd-257-21.el10
systemd-journal-remote-257-21.el10
systemd-libs-257-21.el10
systemd-pam-257-21.el10
systemd-udev-257-21.el10
tar-2:1.35-10.el10
tmux-3.3a-13.20230918gitb202a2f.el10
toolbox-0.3-1.el10
tpm2-tools-5.7-4.el10
tpm2-tss-4.1.3-5.el10
tpm2-tss-fapi-4.1.3-5.el10
tzdata-2025c-1.el10
unbound-anchor-1.20.0-15.el10
unbound-libs-1.20.0-15.el10
userspace-rcu-0.14.0-7.el10
util-linux-2.40.2-15.el10
util-linux-core-2.40.2-15.el10
vim-data-2:9.1.083-6.el10
vim-minimal-2:9.1.083-6.el10
virt-what-1.27-3.el10
which-2.21-44.el10
xfsprogs-6.16.0-1.el10
xmlsec1-1:1.2.39-3.el10
xmlsec1-openssl-1:1.2.39-3.el10
xz-1:5.6.2-4.el10
xz-libs-1:5.6.2-4.el10
zlib-ng-compat-2.2.3-3.el10
zram-generator-1.1.2-14.el10
zstd-1.5.5-9.el10

Changed:

NetworkManager 1:1.54.0-1.el9 → 1:1.55.91-1.el10
NetworkManager-cloud-setup 1:1.54.0-1.el9 → 1:1.55.91-1.el10
NetworkManager-libnm 1:1.54.0-1.el9 → 1:1.55.91-1.el10
NetworkManager-ovs 1:1.54.0-1.el9 → 1:1.55.91-1.el10
NetworkManager-tui 1:1.54.0-1.el9 → 1:1.55.91-1.el10
WALinuxAgent-udev 2.13.1.1-3.el9 → 2.14.0.1-2.el10
aardvark-dns 2:1.16.0-1.el9 → 2:1.16.0-2.el10
acl 2.3.1-4.el9 → 2.3.2-4.el10
afterburn 5.9.0-1.el9 → 5.10.0-1.el10
afterburn-dracut 5.9.0-1.el9 → 5.10.0-1.el10
alternatives 1.24-2.el9 → 1.30-2.el10
attr 2.5.1-3.el9 → 2.5.2-5.el10
audit 3.1.5-7.el9 → 4.0.3-5.el10
audit-libs 3.1.5-7.el9 → 4.0.3-5.el10
authselect 1.2.6-3.el9 → 1.5.0-8.el10
authselect-libs 1.2.6-3.el9 → 1.5.0-8.el10
avahi-libs 0.8-23.el9 → 0.9~rc2-2.el10
basesystem 11-13.el9 → 11-22.el10
bash 5.1.8-9.el9 → 5.2.26-6.el10
bash-completion 1:2.11-5.el9 → 1:2.11-16.el10
bind-libs 32:9.16.23-31.el9 → 32:9.18.33-13.el10
bind-license 32:9.16.23-31.el9 → 32:9.18.33-13.el10
bind-utils 32:9.16.23-31.el9 → 32:9.18.33-13.el10
bootc 1.5.1-1.el9 → 1.12.1-2.el10
bootupd 0.2.28-3.el9 → 0.2.32-1.el10
bsdtar 3.5.3-6.el9 → 3.7.7-4.el10
bubblewrap 0.6.3-1.el9 → 0.10.0-3.el10
bzip2 1.0.8-10.el9 → 1.0.8-25.el10
bzip2-libs 1.0.8-10.el9 → 1.0.8-25.el10
c-ares 1.19.1-2.el9 → 1.34.6-1.el10
ca-certificates 2024.2.69_v8.0.303-91.4.el9 → 2025.2.80_v9.0.305-102.el10
centos-gpg-keys 9.0-30.el9 → 10.0-19.el10
centos-release-cloud 1-1.el9s → 1-1.el10s
centos-release-nfv-common 1-5.el9s → 1-5.el10s
centos-release-virt-common 1-4.el9s → 1-1.el10s
centos-stream-release 9.0-30.el9 → 10.0-19.el10
centos-stream-repos 9.0-30.el9 → 10.0-19.el10
checkpolicy 3.6-1.el9 → 3.9-1.el10
chrony 4.6.1-2.el9 → 4.8-1.el10
cifs-utils 7.2-1.el9 → 7.4-1.el10
clevis 21-208.el9 → 21-9.el10
clevis-dracut 21-208.el9 → 21-9.el10
clevis-luks 21-208.el9 → 21-9.el10
clevis-systemd 21-208.el9 → 21-9.el10
cloud-utils-growpart 0.33-1.el9 → 0.33-11.el10
composefs 1.0.8-1.el9 → 1.0.8-1.el10
composefs-libs 1.0.8-1.el9 → 1.0.8-1.el10
conmon 3:2.1.13-1.el9 → 3:2.1.13-1.el10
conmon-rs 0.6.6-2.el9s → 0.6.6-2.el10s
console-login-helper-messages 0.21.3-1.el9 → 0.21.3-10.el10
console-login-helper-messages-issuegen 0.21.3-1.el9 → 0.21.3-10.el10
console-login-helper-messages-profile 0.21.3-1.el9 → 0.21.3-10.el10
container-selinux 4:2.240.0-1.el9 → 4:2.244.0-1.el10
containers-common 4:1-134.el9 → 5:0.64.0-4.el10
coreos-installer 0.24.0-1.el9 → 0.25.0-1.el10
coreos-installer-bootinfra 0.24.0-1.el9 → 0.25.0-1.el10
coreutils 8.32-39.el9 → 9.5-6.el10
coreutils-common 8.32-39.el9 → 9.5-6.el10
cpio 2.13-16.el9 → 2.15-3.el10
cracklib 2.9.6-27.el9 → 2.9.11-8.el10
cracklib-dicts 2.9.6-27.el9 → 2.9.11-8.el10
cri-o 1.32.4-1.el9s → 1.33.4-1.el10s
cri-tools 1.32.0-2.el9s → 1.33.0-2.el10s
criu 3.19-3.el9 → 4.2-1.el10
criu-libs 3.19-3.el9 → 4.2-1.el10
crun 1.23-1.el9 → 1.25.1-1.el10
crypto-policies 20250804-1.git2c74f3d.el9 → 20251127-1.git27c2902.el10
crypto-policies-scripts 20250804-1.git2c74f3d.el9 → 20251127-1.git27c2902.el10
cryptsetup 2.7.2-4.el9 → 2.8.1-2.el10
cryptsetup-libs 2.7.2-4.el9 → 2.8.1-2.el10
curl 7.76.1-31.el9 → 8.12.1-4.el10
cyrus-sasl-gssapi 2.1.27-21.el9 → 2.1.28-27.el10
cyrus-sasl-lib 2.1.27-21.el9 → 2.1.28-27.el10
dbus 1:1.12.20-8.el9 → 1:1.14.10-5.el10
dbus-broker 28-7.el9 → 36-4.el10
dbus-common 1:1.12.20-8.el9 → 1:1.14.10-5.el10
dbus-libs 1:1.12.20-8.el9 → 1:1.14.10-5.el10
dbus-tools 1:1.12.20-8.el9 → 1:1.14.10-5.el10
device-mapper 9:1.02.206-2.el9 → 10:1.02.206-3.el10
device-mapper-event 9:1.02.206-2.el9 → 10:1.02.206-3.el10
device-mapper-event-libs 9:1.02.206-2.el9 → 10:1.02.206-3.el10
device-mapper-libs 9:1.02.206-2.el9 → 10:1.02.206-3.el10
device-mapper-multipath 0.8.7-39.el9 → 0.9.9-15.el10
device-mapper-multipath-libs 0.8.7-39.el9 → 0.9.9-15.el10
device-mapper-persistent-data 1.1.0-1.el9 → 1.3.0-1.el10
diffutils 3.7-12.el9 → 3.10-8.el10
dmidecode 1:3.6-1.el9 → 1:3.6-5.el10
dnf 4.14.0-31.el9 → 4.20.0-19.el10
dnf-data 4.14.0-31.el9 → 4.20.0-19.el10
dnsmasq 2.85-17.el9 → 2.90-5.el10
dosfstools 4.2-3.el9 → 4.2-12.el10
dracut 057-102.git20250818.el9 → 107-3.el10
dracut-network 057-102.git20250818.el9 → 107-3.el10
dracut-squash 057-102.git20250818.el9 → 107-3.el10
e2fsprogs 1.46.5-8.el9 → 1.47.1-5.el10
e2fsprogs-libs 1.46.5-8.el9 → 1.47.1-5.el10
efi-filesystem 6-4.el9 → 6-6.el10
efibootmgr 16-12.el9 → 18-8.el10
efivar-libs 38-3.el9 → 39-3.el10
elfutils-default-yama-scope 0.193-1.el9 → 0.194-1.el10
elfutils-libelf 0.193-1.el9 → 0.194-1.el10
elfutils-libs 0.193-1.el9 → 0.194-1.el10
ethtool 2:6.15-1.el9 → 2:6.15-2.el10
expat 2.5.0-5.el9 → 2.7.3-1.el10
file 5.39-16.el9 → 5.45-8.el10
file-libs 5.39-16.el9 → 5.45-8.el10
filesystem 3.16-5.el9 → 3.18-17.el10
findutils 1:4.8.0-7.el9 → 1:4.10.0-5.el10
firewalld-filesystem 1.3.4-15.el9 → 2.4.0-1.el10
flatpak-session-helper 1.12.9-4.el9 → 1.16.0-9.el10
fstrm 0.6.1-3.el9 → 0.6.1-12.el10
fuse-common 3.10.2-9.el9 → 3.16.2-5.el10
fuse-libs 2.9.9-17.el9 → 2.9.9-25.el10
fuse3 3.10.2-9.el9 → 3.16.2-5.el10
fuse3-libs 3.10.2-9.el9 → 3.16.2-5.el10
fwupd 1.9.31-1.el9 → 1.9.31-1.el10
gawk 5.1.0-6.el9 → 5.3.0-6.el10
gdbm-libs 1:1.23-1.el9 → 1:1.23-14.el10
gettext-libs 0.21-8.el9 → 0.22.5-6.el10
git-core 2.47.3-1.el9 → 2.52.0-1.el10
glib2 2.68.4-16.el9 → 2.80.4-11.el10
glibc 2.34-228.el9 → 2.39-99.el10
glibc-common 2.34-228.el9 → 2.39-99.el10
glibc-gconv-extra 2.34-228.el9 → 2.39-99.el10
glibc-minimal-langpack 2.34-228.el9 → 2.39-99.el10
gmp 1:6.2.0-13.el9 → 1:6.2.1-12.el10
gnupg2 2.3.3-4.el9 → 2.4.5-3.el10
gnutls 3.8.3-9.el9 → 3.8.10-2.el10
gobject-introspection 1.68.0-11.el9 → 1.79.1-6.el10
gpgme 1.15.1-6.el9 → 1.23.2-6.el10
grep 3.6-5.el9 → 3.11-10.el10
grub2-common 1:2.06-113.el9 → 1:2.12-36.el10
grub2-efi-x64 1:2.06-113.el9 → 1:2.12-36.el10
grub2-pc 1:2.06-113.el9 → 1:2.12-36.el10
grub2-pc-modules 1:2.06-113.el9 → 1:2.12-36.el10
grub2-tools 1:2.06-113.el9 → 1:2.12-36.el10
grub2-tools-minimal 1:2.06-113.el9 → 1:2.12-36.el10
gssproxy 0.8.4-7.el9 → 0.9.2-10.el10
gzip 1.12-1.el9 → 1.13-3.el10
hostname 3.23-6.el9 → 3.23-14.el10
hwdata 0.348-9.20.el9 → 0.379-10.6.el10
ignition 2.22.0-2.el9 → 2.25.1-1.el10
ignition-grub 2.22.0-2.el9 → 2.25.1-1.el10
ima-evm-utils 1.6.2-2.el9 → 1.6.2-4.el10
info 6.7-15.el9 → 7.1-6.el10
inih 49-6.el9 → 58-3.el10
ipcalc 1.0.0-5.el9 → 1.0.3-12.el10
iproute 6.14.0-2.el9 → 6.17.0-1.el10
iproute-tc 6.14.0-2.el9 → 6.17.0-1.el10
iptables-libs 1.8.10-11.el9 → 1.8.11-12.el10
iptables-nft 1.8.10-11.el9 → 1.8.11-12.el10
iputils 20210202-14.el9 → 20240905-5.el10
irqbalance 2:1.9.4-4.el9 → 2:1.9.4-6.el10
iscsi-initiator-utils 6.2.1.11-0.git4b3e853.el9 → 6.2.1.11-0.git4b3e853.el10
iscsi-initiator-utils-iscsiuio 6.2.1.11-0.git4b3e853.el9 → 6.2.1.11-0.git4b3e853.el10
isns-utils-libs 0.101-4.el9 → 0.103-1.el10
jansson 2.14-1.el9 → 2.14-3.el10
jose 14-1.el9 → 14-102.el10
jq 1.6-19.el9 → 1.7.1-11.el10
json-c 0.14-11.el9 → 0.18-3.el10
json-glib 1.6.6-1.el9 → 1.8.0-5.el10
kbd 2.4.0-11.el9 → 2.6.4-7.el10
kbd-legacy 2.4.0-11.el9 → 2.6.4-7.el10
kbd-misc 2.4.0-11.el9 → 2.6.4-7.el10
kernel 5.14.0-611.el9 → 6.12.0-192.el10
kernel-core 5.14.0-611.el9 → 6.12.0-192.el10
kernel-modules 5.14.0-611.el9 → 6.12.0-192.el10
kernel-modules-core 5.14.0-611.el9 → 6.12.0-192.el10
kernel-modules-extra 5.14.0-611.el9 → 6.12.0-192.el10
kexec-tools 2.0.29-10.el9 → 2.0.32-3.el10
keyutils 1.6.3-1.el9 → 1.6.3-5.el10
keyutils-libs 1.6.3-1.el9 → 1.6.3-5.el10
kmod 28-11.el9 → 31-12.el10
kmod-libs 28-11.el9 → 31-12.el10
kpartx 0.8.7-39.el9 → 0.9.9-15.el10
krb5-libs 1.21.1-8.el9 → 1.21.3-8.el10
less 590-6.el9 → 661-3.el10
libacl 2.3.1-4.el9 → 2.3.2-4.el10
libaio 0.3.111-13.el9 → 0.3.111-22.el10
libarchive 3.5.3-6.el9 → 3.7.7-4.el10
libassuan 2.5.5-3.el9 → 2.5.6-6.el10
libattr 2.5.1-3.el9 → 2.5.2-5.el10
libbasicobjects 0.1.1-53.el9 → 0.1.1-58.el10
libblkid 2.37.4-21.el9 → 2.40.2-15.el10
libbpf 2:1.5.0-2.el9 → 2:1.7.0-1.el10
libcap 2.48-10.el9 → 2.69-7.el10
libcap-ng 0.8.2-7.el9 → 0.8.4-6.el10
libcbor 0.7.0-5.el9 → 0.11.0-3.el10
libcollection 0.7.0-53.el9 → 0.7.0-58.el10
libcom_err 1.46.5-8.el9 → 1.47.1-5.el10
libcomps 0.1.18-1.el9 → 0.1.21-3.el10
libdhash 0.5.0-53.el9 → 0.5.0-58.el10
libdnf 0.69.0-16.el9 → 0.73.1-12.el10
libdnf-plugin-subscription-manager 1.29.47-1.el9 → 1.30.12-1.el10
libdrm 2.4.123-2.el9 → 2.4.128-1.el10
libeconf 0.4.1-4.el9 → 0.6.2-4.el10
libedit 3.1-38.20210216cvs.el9 → 3.1-52.20230828cvs.el10
libev 4.33-6.el9 → 4.33-15.el10
libevent 2.1.12-8.el9 → 2.1.12-16.el10
libfdisk 2.37.4-21.el9 → 2.40.2-15.el10
libffi 3.4.2-8.el9 → 3.4.4-10.el10
libfido2 1.13.0-2.el9 → 1.14.0-7.el10
libgcc 11.5.0-11.el9 → 14.3.1-4.3.el10
libgcrypt 1.10.0-11.el9 → 1.11.0-6.el10
libgomp 11.5.0-11.el9 → 14.3.1-4.3.el10
libgpg-error 1.42-5.el9 → 1.50-2.el10
libgudev 237-1.el9 → 238-7.el10
libgusb 0.3.8-2.el9 → 0.4.9-4.el10
libibverbs 57.0-1.el9 → 57.0-2.el10
libicu 67.1-10.el9 → 74.2-5.el10
libidn2 2.3.0-7.el9 → 2.3.7-3.el10
libini_config 1.3.1-53.el9 → 1.3.1-58.el10
libipa_hbac 2.9.7-4.el9 → 2.12.0-1.el10
libjcat 0.1.6-3.el9 → 0.2.2-2.el10
libjose 14-1.el9 → 14-102.el10
libkcapi 1.4.0-2.el9 → 1.5.0-3.el10
libkcapi-hmaccalc 1.4.0-2.el9 → 1.5.0-3.el10
libksba 1.5.1-7.el9 → 1.6.7-2.el10
libldb 4.22.4-5.el9 → 4.23.5-100.el10
libluksmeta 9-12.el9 → 10-1.el10
libmaxminddb 1.5.2-4.el9 → 1.9.1-4.el10
libmicrohttpd 1:0.9.72-5.el9 → 1:1.0.0-3.el10
libmnl 1.0.4-16.el9 → 1.0.5-7.el10
libmodulemd 2.13.0-2.el9 → 2.15.0-12.el10
libmount 2.37.4-21.el9 → 2.40.2-15.el10
libmspack 0.10.1-0.7.alpha.el9 → 0.10.1-0.14.alpha.el10
libndp 1.9-1.el9 → 1.9-2.el10
libnet 1.2-7.el9 → 1.3-7.el10
libnetfilter_conntrack 1.0.9-1.el9 → 1.0.9-12.el10
libnfnetlink 1.0.1-23.el9 → 1.0.2-3.el10
libnfsidmap 1:2.5.4-38.el9 → 1:2.8.3-3.el10
libnftnl 1.2.6-4.el9 → 1.3.0-2.el10
libnghttp2 1.43.0-6.el9 → 1.64.0-2.el10
libnl3 3.11.0-1.el9 → 3.11.0-1.el10
libnvme 1.13-1.el9 → 1.16.1-2.el10
libpath_utils 0.2.1-53.el9 → 0.2.1-58.el10
libpcap 14:1.10.0-4.el9 → 14:1.10.4-7.el10
libpciaccess 0.16-7.el9 → 0.16-16.el10
libpkgconf 1.7.3-10.el9 → 2.1.0-3.el10
libpwquality 1.4.4-8.el9 → 1.4.5-12.el10
libref_array 0.1.5-53.el9 → 0.1.5-58.el10
librepo 1.14.5-3.el9 → 1.19.0-1.el10
libseccomp 2.5.2-2.el9 → 2.5.6-1.el10
libselinux 3.6-3.el9 → 3.9-3.el10
libselinux-utils 3.6-3.el9 → 3.9-3.el10
libsemanage 3.6-5.el9 → 3.9-2.el10
libsepol 3.6-3.el9 → 3.9-1.el10
libsmartcols 2.37.4-21.el9 → 2.40.2-15.el10
libsmbclient 4.22.4-5.el9 → 4.23.5-100.el10
libsolv 0.7.24-3.el9 → 0.7.33-2.el10
libss 1.46.5-8.el9 → 1.47.1-5.el10
libsss_certmap 2.9.7-4.el9 → 2.12.0-1.el10
libsss_idmap 2.9.7-4.el9 → 2.12.0-1.el10
libsss_nss_idmap 2.9.7-4.el9 → 2.12.0-1.el10
libsss_sudo 2.9.7-4.el9 → 2.12.0-1.el10
libstdc++ 11.5.0-11.el9 → 14.3.1-4.3.el10
libtalloc 2.4.3-1.el9 → 2.4.3-100.el10
libtasn1 4.16.0-9.el9 → 4.20.0-1.el10
libtdb 1.4.13-1.el9 → 1.4.14-100.el10
libtevent 0.16.2-1.el9 → 0.17.1-100.el10
libtirpc 1.3.3-9.el9 → 1.3.5-1.el10
libtool-ltdl 2.4.6-46.el9 → 2.4.7-13.el10
libunistring 0.9.10-15.el9 → 1.1-10.el10
liburing 2.5-1.el9 → 2.12-1.el10
libutempter 1.2.1-6.el9 → 1.2.1-15.el10
libuuid 2.37.4-21.el9 → 2.40.2-15.el10
libuv 1:1.42.0-2.el9 → 1:1.51.0-1.el10
libverto 0.3.2-3.el9 → 0.3.2-10.el10
libverto-libev 0.3.2-3.el9 → 0.3.2-10.el10
libwbclient 4.22.4-5.el9 → 4.23.5-100.el10
libxcrypt 4.4.18-3.el9 → 4.4.36-10.el10
libxml2 2.9.13-12.el9 → 2.12.5-9.el10
libxmlb 0.3.10-1.el9 → 0.3.24-1.el10
libxslt 1.1.34-12.el9 → 1.1.39-8.el10
libyaml 0.2.5-7.el9 → 0.2.5-16.el10
libzstd 1.5.5-1.el9 → 1.5.5-9.el10
linux-firmware 20250812-155.el9 → 20260107-21.el10
linux-firmware-whence 20250812-155.el9 → 20260107-21.el10
lmdb-libs 0.9.29-3.el9 → 0.9.32-4.el10
logrotate 3.18.0-12.el9 → 3.22.0-5.el10
lsof 4.94.0-3.el9 → 4.98.0-7.el10
lua-libs 5.4.4-4.el9 → 5.4.6-7.el10
luksmeta 9-12.el9 → 10-1.el10
lvm2 9:2.03.32-2.el9 → 10:2.03.32-3.el10
lvm2-libs 9:2.03.32-2.el9 → 10:2.03.32-3.el10
lz4-libs 1.9.3-5.el9 → 1.9.4-8.el10
lzo 2.10-7.el9 → 2.10-14.el10
mdadm 4.4-2.el9 → 4.4-3.el10
microcode_ctl 4:20250812-1.el9 → 4:20251111-1.el10
mokutil 2:0.7.2-1.el9 → 2:0.7.2-4.el10
mpfr 4.1.0-7.el9 → 4.2.1-6.el10
nano 5.6.1-7.el9 → 8.1-3.el10
ncurses-base 6.2-12.20210508.el9 → 6.4-14.20240127.el10
ncurses-libs 6.2-12.20210508.el9 → 6.4-14.20240127.el10
net-tools 2.0-0.64.20160912git.el9 → 2.0-0.73.20160912git.el10
netavark 2:1.16.0-1.el9 → 2:1.16.0-1.el10
nettle 3.10.1-1.el9 → 3.10.1-1.el10
newt 0.52.21-11.el9 → 0.52.24-5.el10
nfs-utils 1:2.5.4-38.el9 → 1:2.8.3-3.el10
nftables 1:1.0.9-4.el9 → 1:1.1.5-3.el10
nmap-ncat 3:7.92-3.el9 → 4:7.92-5.el10
nmstate 2.2.49-1.el9 → 2.2.57-1.el10
npth 1.6-8.el9 → 1.6-21.el10
nss-altfiles 2.18.1-20.el9 → 2.23.0-5.el10
numactl-libs 2.0.19-3.el9 → 2.0.19-3.el10
nvme-cli 2.13-1.el9 → 2.16-2.el10
oniguruma 6.9.6-1.el9.6 → 6.9.9-7.el10
open-vm-tools 13.0.0-1.el9 → 13.0.5-1.el10
openldap 2.6.8-4.el9 → 2.6.10-1.el10
openshift-clients 4.19.0-202506301438.p0.g298429b.assembly.stream.el9 → 4.20.0-202602032049.p2.g040daf8.assembly.stream.el9
openshift-kubelet 4.19.0-202508252101.p2.g97b7f2e.assembly.stream.el9 → 4.20.0-202601070847.p2.g33a825e.assembly.stream.el9
openssh 8.7p1-46.el9 → 9.9p1-19.el10
openssh-clients 8.7p1-46.el9 → 9.9p1-19.el10
openssh-server 8.7p1-46.el9 → 9.9p1-19.el10
openssl 1:3.5.1-3.el9 → 1:3.5.5-1.el10
openssl-fips-provider 1:3.5.1-3.el9 → 1:3.5.5-1.el10
openssl-libs 1:3.5.1-3.el9 → 1:3.5.5-1.el10
openvswitch-selinux-extra-policy 1.0-36.el9s → 1.0-36.el10s
openvswitch3.5 3.5.1-31.el9s → 3.5.0-6.el10s
os-prober 1.77-12.el9 → 1.81-9.el10
ose-aws-ecr-image-credential-provider 4.19.0-202508252101.p2.g425c1c5.assembly.stream.el9 → 4.20.0-202601070847.p2.gbb88da1.assembly.stream.el9
ose-azure-acr-image-credential-provider 4.19.0-202508252101.p2.g7109d6b.assembly.stream.el9 → 4.20.0-202601070847.p2.gd469d04.assembly.stream.el9
ose-gcp-gcr-image-credential-provider 4.19.0-202508252101.p2.gd8d3aeb.assembly.stream.el9 → 4.20.0-202601070847.p2.gf940e72.assembly.stream.el9
ostree 2025.4-2.el9 → 2025.7-1.el10
ostree-grub2 2025.4-2.el9 → 2025.7-1.el10
ostree-libs 2025.4-2.el9 → 2025.7-1.el10
p11-kit 0.25.3-3.el9 → 0.26.1-1.el10
p11-kit-trust 0.25.3-3.el9 → 0.26.1-1.el10
pam 1.5.1-26.el9 → 1.6.1-9.el10
passt 0^20250512.g8ec1341-2.el9 → 0^20251210.gd04c480-2.el10
passt-selinux 0^20250512.g8ec1341-2.el9 → 0^20251210.gd04c480-2.el10
pciutils 3.7.0-7.el9 → 3.13.0-6.el10
pciutils-libs 3.7.0-7.el9 → 3.13.0-6.el10
pcre2 10.40-6.el9 → 10.44-1.el10.3
pcre2-syntax 10.40-6.el9 → 10.44-1.el10.3
pkgconf 1.7.3-10.el9 → 2.1.0-3.el10
pkgconf-m4 1.7.3-10.el9 → 2.1.0-3.el10
pkgconf-pkg-config 1.7.3-10.el9 → 2.1.0-3.el10
podman 5:5.6.0-1.el9 → 7:5.6.0-2.el10
policycoreutils 3.6-3.el9 → 3.9-2.el10
policycoreutils-python-utils 3.6-3.el9 → 3.9-2.el10
polkit 0.117-14.el9 → 125-4.el10
polkit-libs 0.117-14.el9 → 125-4.el10
popt 1.18-8.el9 → 1.19-8.el10
procps-ng 3.3.17-14.el9 → 4.0.4-9.el10
protobuf-c 1.3.3-13.el9 → 1.5.0-6.el10
psmisc 23.4-3.el9 → 23.6-8.el10
python3 3.9.23-2.el9 → 3.12.12-3.el10
python3-audit 3.1.5-7.el9 → 4.0.3-5.el10
python3-cloud-what 1.29.47-1.el9 → 1.30.12-1.el10
python3-dateutil 1:2.8.1-7.el9 → 1:2.9.0.post0-1.el10
python3-dbus 1.2.18-2.el9 → 1.3.2-8.el10
python3-decorator 4.4.2-6.el9 → 5.1.1-12.el10
python3-distro 1.5.0-7.el9 → 1.9.0-5.el10
python3-dnf 4.14.0-31.el9 → 4.20.0-19.el10
python3-dnf-plugin-versionlock 4.3.0-22.el9 → 4.7.0-10.el10
python3-dnf-plugins-core 4.3.0-22.el9 → 4.7.0-10.el10
python3-gobject-base 3.40.1-6.el9 → 3.46.0-7.el10
python3-gobject-base-noarch 3.40.1-6.el9 → 3.46.0-7.el10
python3-hawkey 0.69.0-16.el9 → 0.73.1-12.el10
python3-idna 2.10-7.el9.1 → 3.7-4.el10
python3-iniparse 0.4-45.el9 → 0.5-10.el10
python3-inotify 0.9.6-25.el9 → 0.9.6-36.el10
python3-libcomps 0.1.18-1.el9 → 0.1.21-3.el10
python3-libdnf 0.69.0-16.el9 → 0.73.1-12.el10
python3-librepo 1.14.5-3.el9 → 1.19.0-1.el10
python3-libs 3.9.23-2.el9 → 3.12.12-3.el10
python3-libselinux 3.6-3.el9 → 3.9-3.el10
python3-libsemanage 3.6-5.el9 → 3.9-2.el10
python3-pip-wheel 21.3.1-1.el9 → 23.3.2-7.el10
python3-policycoreutils 3.6-3.el9 → 3.9-2.el10
python3-requests 2.25.1-10.el9 → 2.32.4-1.el10
python3-rpm 4.16.1.3-39.el9 → 4.19.1.1-21.el10
python3-setools 4.4.4-1.el9 → 4.6.0-2.el10
python3-six 1.15.0-9.el9 → 1.16.0-16.el10
python3-subscription-manager-rhsm 1.29.47-1.el9 → 1.30.12-1.el10
python3-systemd 234-19.el9 → 235-11.el10
python3-urllib3 1.26.5-6.el9 → 1.26.19-3.el10
qemu-guest-agent 17:9.1.0-26.el9 → 18:10.1.0-11.el10
quota 1:4.09-4.el9 → 1:4.09-10.el10
quota-nls 1:4.09-4.el9 → 1:4.09-10.el10
rdma-core 57.0-1.el9 → 57.0-2.el10
readline 8.1-4.el9 → 8.2-11.el10
rpcbind 1.2.6-7.el9 → 1.2.7-3.el10
rpm 4.16.1.3-39.el9 → 4.19.1.1-21.el10
rpm-build-libs 4.16.1.3-39.el9 → 4.19.1.1-21.el10
rpm-libs 4.16.1.3-39.el9 → 4.19.1.1-21.el10
rpm-ostree 2025.10-1.el9 → 2026.1-1.el10
rpm-ostree-libs 2025.10-1.el9 → 2026.1-1.el10
rpm-plugin-selinux 4.16.1.3-39.el9 → 4.19.1.1-21.el10
rpm-sign-libs 4.16.1.3-39.el9 → 4.19.1.1-21.el10
rsync 3.2.5-3.el9 → 3.4.1-3.el10
samba-client-libs 4.22.4-5.el9 → 4.23.5-100.el10
samba-common 4.22.4-5.el9 → 4.23.5-100.el10
samba-common-libs 4.22.4-5.el9 → 4.23.5-100.el10
sed 4.8-9.el9 → 4.9-3.el10
selinux-policy 38.1.65-1.el9 → 42.1.15-1.el10
selinux-policy-targeted 38.1.65-1.el9 → 42.1.15-1.el10
setup 2.13.7-10.el9 → 2.14.5-7.el10
sg3_utils 1.47-10.el9 → 1.48-7.el10
sg3_utils-libs 1.47-10.el9 → 1.48-7.el10
shadow-utils 2:4.9-13.el9 → 2:4.15.0-9.el10
shadow-utils-subid 2:4.9-15.el9 → 2:4.15.0-9.el10
shared-mime-info 2.1-5.el9 → 2.3-8.el10
shim-x64 15.8-2.el9 → 15.8-5.el10
skopeo 2:1.20.0-1.el9 → 2:1.20.0-1.el10
slang 2.3.2-11.el9 → 2.3.3-8.el10
snappy 1.1.8-8.el9 → 1.1.10-7.el10
socat 1.7.4.1-8.el9 → 1.7.4.4-8.el10
sqlite-libs 3.34.1-8.el9 → 3.46.1-5.el10
ssh-key-dir 0.1.4-1.el9 → 0.1.4-9.el10
sssd 2.9.7-4.el9 → 2.12.0-1.el10
sssd-ad 2.9.7-4.el9 → 2.12.0-1.el10
sssd-client 2.9.7-4.el9 → 2.12.0-1.el10
sssd-common 2.9.7-4.el9 → 2.12.0-1.el10
sssd-common-pac 2.9.7-4.el9 → 2.12.0-1.el10
sssd-ipa 2.9.7-4.el9 → 2.12.0-1.el10
sssd-krb5 2.9.7-4.el9 → 2.12.0-1.el10
sssd-krb5-common 2.9.7-4.el9 → 2.12.0-1.el10
sssd-ldap 2.9.7-4.el9 → 2.12.0-1.el10
sssd-nfs-idmap 2.9.7-4.el9 → 2.12.0-1.el10
sssd-proxy 2.9.7-4.el9 → 2.12.0-1.el10
stalld 1.20.4-1.el9 → 1.26.3-1.el10
strace 6.12-1.el9 → 6.12-3.el10
subscription-manager 1.29.47-1.el9 → 1.30.12-1.el10
subscription-manager-rhsm-certificates 20220623-1.el9 → 20220623-6.el10
sudo 1.9.5p2-13.el9 → 1.9.17-2.p2.el10
systemd 252-55.el9 → 257-21.el10
systemd-journal-remote 252-55.el9 → 257-21.el10
systemd-libs 252-55.el9 → 257-21.el10
systemd-pam 252-55.el9 → 257-21.el10
systemd-udev 252-55.el9 → 257-21.el10
tar 2:1.34-7.el9 → 2:1.35-10.el10
tmux 3.2a-5.el9 → 3.3a-13.20230918gitb202a2f.el10
toolbox 0.2-2.el9 → 0.3-1.el10
tpm2-tools 5.2-6.el9 → 5.7-4.el10
tpm2-tss 3.2.3-1.el9 → 4.1.3-5.el10
tzdata 2025b-2.el9 → 2025c-1.el10
unbound-libs 1.16.2-21.el9 → 1.20.0-15.el10
userspace-rcu 0.12.1-6.el9 → 0.14.0-7.el10
util-linux 2.37.4-21.el9 → 2.40.2-15.el10
util-linux-core 2.37.4-21.el9 → 2.40.2-15.el10
vim-minimal 2:8.2.2637-22.el9 → 2:9.1.083-6.el10
virt-what 1.27-2.el9 → 1.27-3.el10
which 2.21-30.el9 → 2.21-44.el10
xfsprogs 6.4.0-7.el9 → 6.16.0-1.el10
xmlsec1 1.2.29-13.el9 → 1:1.2.39-3.el10
xmlsec1-openssl 1.2.29-13.el9 → 1:1.2.39-3.el10
xz 5.2.5-8.el9 → 1:5.6.2-4.el10
xz-libs 5.2.5-8.el9 → 1:5.6.2-4.el10
zram-generator 0.3.2-7.el9 → 1.1.2-14.el10
zstd 1.5.5-1.el9 → 1.5.5-9.el10

Removed:

NetworkManager-team 1:1.54.0-1.el9
adcli 0.9.2-1.el9
binutils 2.35.2-66.el9
binutils-gold 2.35.2-66.el9
containernetworking-plugins 1:1.7.1-1.el9
elfutils-debuginfod-client 0.193-1.el9
flashrom 1.2-10.el9
fuse 2.9.9-17.el9
fuse-overlayfs 1.15-1.el9
fwupd-plugin-flashrom 1.9.31-1.el9
gawk-all-langpacks 5.1.0-6.el9
gdisk 1.0.7-5.el9
geolite2-city 20191217-6.el9
geolite2-country 20191217-6.el9
gettext 0.21-8.el9
glusterfs 6.0-57.4.el9
glusterfs-client-xlators 6.0-57.4.el9
glusterfs-fuse 6.0-57.4.el9
glusterfs-libs 6.0-57.4.el9
groff-base 1.22.4-10.el9
initscripts-service 10.11.8-4.el9
libbrotli 1.0.9-7.el9
libcurl 7.76.1-31.el9
libdaemon 0.14-23.el9
libdb 5.3.28-57.el9
libnl3-cli 3.11.0-1.el9
libpsl 0.21.1-5.el9
libreport-filesystem 2.15.2-6.el9
libsigsegv 2.13-4.el9
libslirp 4.4.0-8.el9
libssh 0.10.4-13.el9
libssh-config 0.10.4-13.el9
libteam 1.31-16.el9
libusbx 1.0.26-1.el9
libuser 0.63-17.el9
libxcrypt-compat 4.4.18-3.el9
ncurses 6.2-12.20210508.el9
p11-kit-server 0.25.3-3.el9
passwd 0.80-12.el9
pcre 8.44-4.el9
perl-AutoLoader 5.74-483.el9
perl-B 1.80-483.el9
perl-Carp 1.50-460.el9
perl-Class-Struct 0.66-483.el9
perl-Data-Dumper 2.174-462.el9
perl-Digest 1.19-4.el9
perl-Digest-MD5 2.58-4.el9
perl-Encode 4:3.08-462.el9
perl-Errno 1.30-483.el9
perl-Exporter 5.74-461.el9
perl-Fcntl 1.13-483.el9
perl-File-Basename 2.85-483.el9
perl-File-Path 2.18-4.el9
perl-File-Temp 1:0.231.100-4.el9
perl-File-stat 1.09-483.el9
perl-FileHandle 2.03-483.el9
perl-Getopt-Long 1:2.52-4.el9
perl-Getopt-Std 1.12-483.el9
perl-HTTP-Tiny 0.076-462.el9
perl-IO 1.43-483.el9
perl-IO-Socket-IP 0.41-5.el9
perl-IO-Socket-SSL 2.073-2.el9
perl-IPC-Open3 1.21-483.el9
perl-MIME-Base64 3.16-4.el9
perl-Mozilla-CA 20200520-6.el9
perl-NDBM_File 1.15-483.el9
perl-Net-SSLeay 1.94-3.el9
perl-POSIX 1.94-483.el9
perl-PathTools 3.78-461.el9
perl-Pod-Escapes 1:1.07-460.el9
perl-Pod-Perldoc 3.28.01-461.el9
perl-Pod-Simple 1:3.42-4.el9
perl-Pod-Usage 4:2.01-4.el9
perl-Scalar-List-Utils 4:1.56-462.el9
perl-SelectSaver 1.02-483.el9
perl-Socket 4:2.031-4.el9
perl-Storable 1:3.21-460.el9
perl-Symbol 1.08-483.el9
perl-Term-ANSIColor 5.01-461.el9
perl-Term-Cap 1.17-460.el9
perl-Text-ParseWords 3.30-460.el9
perl-Text-Tabs+Wrap 2013.0523-460.el9
perl-Time-Local 2:1.300-7.el9
perl-URI 5.09-3.el9
perl-base 2.27-483.el9
perl-constant 1.33-461.el9
perl-if 0.60.800-483.el9
perl-interpreter 4:5.32.1-483.el9
perl-libnet 3.13-4.el9
perl-libs 4:5.32.1-483.el9
perl-mro 1.23-483.el9
perl-overload 1.31-483.el9
perl-overloading 0.02-483.el9
perl-parent 1:0.238-460.el9
perl-podlators 1:4.14-460.el9
perl-subs 1.03-483.el9
perl-vars 1.05-483.el9
pigz 2.5-4.el9
polkit-pkla-compat 0.1-21.el9
publicsuffix-list-dafsa 20210518-3.el9
python-unversioned-command 3.9.23-2.el9
python3-chardet 4.0.0-5.el9
python3-gpg 1.15.1-6.el9
python3-pysocks 1.7.1-12.el9
python3-pyyaml 5.4.1-6.el9
python3-setuptools 53.0.0-15.el9
python3-setuptools-wheel 53.0.0-15.el9
rpm-plugin-systemd-inhibit 4.16.1.3-39.el9
runc 4:1.3.0-1.el9
slirp4netns 1.3.3-1.el9
squashfs-tools 4.4-10.git1.el9
systemd-rpm-macros 252-55.el9
teamd 1.31-16.el9
usermode 1.114-7.el9
yajl 2.1.0-25.el9
zlib 1.2.11-41.el9

Added:

amd-gpu-firmware 20260107-21.el10
amd-ucode-firmware 20260107-21.el10
audit-rules 4.0.3-5.el10
azure-vm-utils 0.7.0-1.el10
catatonit 5:0.2.1-1.el10
clevis-pin-tpm2 0.5.3-9.el10
containers-common-extra 5:0.64.0-4.el10
duktape 2.7.0-10.el10
erofs-utils 1.8.10-1.el10
gdbm 1:1.23-14.el10
gettext-envsubst 0.22.5-6.el10
gettext-runtime 0.22.5-6.el10
intel-gpu-firmware 20260107-21.el10
kdump-utils 1.0.58-10.el10
libcurl-minimal 8.12.1-4.el10
libkcapi-hasher 1.5.0-3.el10
libusb1 1.0.29-3.el10
makedumpfile 1.7.8-1.el10
mpdecimal 2.5.1-12.el10
nvidia-gpu-firmware 20260107-21.el10
pam-libs 1.6.1-9.el10
python3-charset-normalizer 3.4.2-1.el10
rpm-sequoia 1.9.0.3-1.el10
tpm2-tss-fapi 4.1.3-5.el10
unbound-anchor 1.20.0-15.el10
vim-data 2:9.1.083-6.el10
zlib-ng-compat 2.2.3-3.el10

Extensions

Full list (111 packages)

NetworkManager-libreswan-1.2.30-1.el10.x86_64
binutils-2.41-60.el10.x86_64
binutils-gold-2.41-60.el10.x86_64
bison-3.8.2-9.el10.x86_64
cmake-filesystem-3.31.8-1.el10.x86_64
cpp-14.3.1-4.3.el10.x86_64
elfutils-debuginfod-client-0.194-1.el10.x86_64
elfutils-libelf-devel-0.194-1.el10.x86_64
flex-2.6.4-19.el10.x86_64
gcc-14.3.1-4.3.el10.x86_64
glibc-devel-2.39-99.el10.x86_64
groff-base-1.23.0-10.el10.x86_64
kernel-6.12.0-192.el10.x86_64
kernel-core-6.12.0-192.el10.x86_64
kernel-devel-6.12.0-192.el10.x86_64
kernel-headers-6.12.0-192.el10.x86_64
kernel-modules-6.12.0-192.el10.x86_64
kernel-modules-extra-6.12.0-192.el10.x86_64
kernel-rt-core-6.12.0-192.el10.x86_64
kernel-rt-devel-6.12.0-192.el10.x86_64
kernel-rt-modules-6.12.0-192.el10.x86_64
kernel-rt-modules-core-6.12.0-192.el10.x86_64
kernel-rt-modules-extra-6.12.0-192.el10.x86_64
krb5-pkinit-1.21.3-8.el10.x86_64
krb5-workstation-1.21.3-8.el10.x86_64
ldns-1.8.3-18.el10.x86_64
libkadm5-1.21.3-8.el10.x86_64
libmpc-1.3.1-7.el10.x86_64
libqb-2.0.8-6.el10.x86_64
libreswan-5.3-3.el10.x86_64
libxcrypt-devel-4.4.36-10.el10.x86_64
libzstd-devel-1.5.5-9.el10.x86_64
lm_sensors-libs-3.6.0-20.el10.x86_64
m4-1.4.19-11.el10.x86_64
make-1:4.4.1-9.el10.x86_64
ncurses-6.4-14.20240127.el10.x86_64
nspr-4.36.0-4.el10.x86_64
nss-3.112.0-4.el10.x86_64
nss-softokn-3.112.0-4.el10.x86_64
nss-softokn-freebl-3.112.0-4.el10.x86_64
nss-sysinit-3.112.0-4.el10.x86_64
nss-tools-3.112.0-4.el10.x86_64
nss-util-3.112.0-4.el10.x86_64
openssl-devel-1:3.5.5-1.el10.x86_64
openvswitch3.5-ipsec-3.5.0-6.el10s.x86_64
pcp-conf-7.0.3-1.el10.x86_64
pcp-libs-7.0.3-1.el10.x86_64
perl-AutoLoader-5.74-514.el10.noarch
perl-B-1.89-514.el10.x86_64
perl-Carp-1.54-511.el10.noarch
perl-Class-Struct-0.68-514.el10.noarch
perl-Data-Dumper-2.189-512.el10.x86_64
perl-Digest-1.20-511.el10.noarch
perl-Digest-MD5-2.59-6.el10.x86_64
perl-DynaLoader-1.56-514.el10.x86_64
perl-Encode-4:3.21-511.el10.x86_64
perl-Errno-1.38-514.el10.x86_64
perl-Exporter-5.78-511.el10.noarch
perl-Fcntl-1.18-514.el10.x86_64
perl-File-Basename-2.86-514.el10.noarch
perl-File-Path-2.18-512.el10.noarch
perl-File-Temp-1:0.231.100-512.el10.noarch
perl-File-stat-1.14-514.el10.noarch
perl-FileHandle-2.05-514.el10.noarch
perl-Getopt-Long-1:2.58-3.el10.noarch
perl-Getopt-Std-1.14-514.el10.noarch
perl-HTTP-Tiny-0.088-512.el10.noarch
perl-IO-1.55-514.el10.x86_64
perl-IO-Socket-IP-0.42-512.el10.noarch
perl-IO-Socket-SSL-2.085-3.el10.noarch
perl-IPC-Open3-1.22-514.el10.noarch
perl-MIME-Base64-3.16-511.el10.x86_64
perl-Mozilla-CA-20231213-5.el10.noarch
perl-NDBM_File-1.17-514.el10.x86_64
perl-Net-SSLeay-1.94-8.el10.x86_64
perl-POSIX-2.20-514.el10.x86_64
perl-PathTools-3.91-512.el10.x86_64
perl-Pod-Escapes-1:1.07-511.el10.noarch
perl-Pod-Perldoc-3.28.01-512.el10.noarch
perl-Pod-Simple-1:3.45-511.el10.noarch
perl-Pod-Usage-4:2.03-511.el10.noarch
perl-Scalar-List-Utils-5:1.63-511.el10.x86_64
perl-SelectSaver-1.02-514.el10.noarch
perl-Socket-4:2.038-511.el10.x86_64
perl-Storable-1:3.32-511.el10.x86_64
perl-Symbol-1.09-514.el10.noarch
perl-Term-ANSIColor-5.01-512.el10.noarch
perl-Term-Cap-1.18-511.el10.noarch
perl-Text-ParseWords-3.31-511.el10.noarch
perl-Text-Tabs+Wrap-2024.001-511.el10.noarch
perl-Time-Local-2:1.350-511.el10.noarch
perl-URI-5.27-3.el10.noarch
perl-base-2.27-514.el10.noarch
perl-constant-1.33-512.el10.noarch
perl-if-0.61.000-514.el10.noarch
perl-interpreter-4:5.40.2-514.el10.x86_64
perl-libnet-3.15-512.el10.noarch
perl-libs-4:5.40.2-514.el10.x86_64
perl-locale-1.12-514.el10.noarch
perl-mro-1.29-514.el10.x86_64
perl-overload-1.37-514.el10.noarch
perl-overloading-0.02-514.el10.noarch
perl-parent-1:0.241-512.el10.noarch
perl-podlators-1:5.01-511.el10.noarch
perl-vars-1.05-514.el10.noarch
protobuf-3.19.6-15.el10.x86_64
python3-openvswitch3.5-3.5.0-6.el10s.x86_64
sysstat-12.7.6-2.el10.x86_64
usbguard-1.1.4-2.el10.x86_64
usbguard-selinux-1.1.4-2.el10.noarch
zlib-ng-compat-devel-2.2.3-3.el10.x86_64

CentOS Stream CoreOS base layer: 10.0.20260203-0

View changelog in Markdown or change previous release:

Source code for this page located on github