5.0.0-okd-scos.5

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:5.0.0-okd-scos.5

Qualifiers (status api): None

Tests:

Blocking jobs
- upgrade Pending release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable

Upgrades from:

Untested upgrades: 4.22.0-okd-scos.10, 5.0.0-okd-scos.0, 5.0.0-okd-scos.1, 5.0.0-okd-scos.2, 5.0.0-okd-scos.3, 5.0.0-okd-scos.4

5.0.0-okd-scos.ec.10 - Pending

Loading changelog, this may take a while ...

Changes from 5.0.0-okd-scos.ec.10

Created: 2026-11-05 10:55:47 +0000 UTC

Image Digest: sha256:29ed3ecc9819a5ee1c4c94f4b168d8e45d27fd3e32512d96c41860f5ada92ed9

Release 5.0.0-okd-scos.5 was created from registry.ci.openshift.org/origin/release-scos:5.0.0-0.okd-scos-nightly-2026-11-05-032847

Components

Kubectl 1.36.2
Kubernetes upgraded from 1.36.3 to 1.36.5
Kubernetes Tests 1.36.2
CentOS Stream CoreOS 10 upgraded from 10.0.20260819-0 to 10.0.20261014-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
OLMLifecycleAndCompatibility (0 tests)	Disabled	Disabled (Changed)	Disabled	Disabled (Changed)	Disabled	Disabled (Changed)	Disabled	Enabled
DRADeviceTaintRules (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)

Rebuilt images without code change

apiserver-network-proxy git d6ec9243 sha256:800c90ede6778c15e7977903182e40eebb13c26983d73f52a6a61fdcdadb5ea1
aws-cloud-controller-manager git 278e8c07 sha256:ee3fc794fef6bb63e69818f427097b60bd9471df02e879cd4e73713cd6f3a247
aws-kms-encryption-provider git 9b18930d sha256:d5faff003f294777312b245e68c9b967de29d0aec540d608a832639d13c4f1ad
aws-pod-identity-webhook git 0d33a459 sha256:658e24eab079c405966960b6764faa5507ba2a31d9056ac8815b3f2162df161a
azure-disk-csi-driver git 64091ea1 sha256:c27ade8e018a7f9154d315ce0fe9d417c0f346d4ad630e981bb522d12c8f1c97
azure-machine-controllers git 4ff6c6b8 sha256:53b550e6b1b3a4754cdda6c131d6b020f1071a65108add3f4a42460743b9b71b
baremetal-operator git 34bbeb37 sha256:abdb42ff64bba74f4553fe5a172855847ed85ee7e3dc9961cfa9063da865ffa9
cli git 4b0a124d sha256:2a4b0761ac6c3c385ba33b346d8062cf962acd11de5c61b251a2b0c4daa7eabf
cli-artifacts git 4b0a124d sha256:b25151a4fe339d516f989536360c2cfc235d38fbf6ff901a1f8f1719beabb525
cloud-credential-operator git b187feee sha256:080a703cb3189737bae7ca75a8d0816486f27a066ee90838a7271eae86b0f2ad
cloud-network-config-controller git 7afccf2d sha256:85277d3d83f759742e35d2a4e88d9dff7aa922e68ffb23aac36383ad9b8a5f8f
cluster-autoscaler git f393f542 sha256:f3e3193f41f88eed1149bcc15f449d99335773233d3b05b314da9ac2c4b029d2
cluster-autoscaler-operator git e48fe117 sha256:5e456913c67ea175bd2892897531c857f7ad591077994be03e620655eabc46b7
cluster-cloud-controller-manager-operator git 0da197f8 sha256:31a872bea7c2ef0029c02bbdcfe8ea9ad3bb096249567154e4555ee53cc88fa0
cluster-control-plane-machine-set-operator git c00cf58d sha256:34010beab0215612b801d36a78d9f3f91ae4217b44588d5cea3fd11782a17c6b
cluster-dns-operator git c0ed09e3 sha256:c30732011a34f494699a7427b9795bc085af9f799b8ec6808e26a65d27a7d4ed
cluster-olm-operator git 228ec940 sha256:eac3490dd92506b5545bd394b498cc7ebf6024a06e8c3911a58afb846363c964
cluster-openshift-controller-manager-operator git 8da2f1fc sha256:0d2ab22223db97fe32f3910aa7e0c683dc96965427c49c3776122aec4e3d413a
cluster-policy-controller git 469bbf21 sha256:713728a23e3a31e30800a1f8f948aeca9cef9674cfad9863ac3c37f1a2571d84
cluster-update-keys git 9607604d sha256:51599bb58f3e47a280c73fa010edaf20c85080a1403e650185a32c9eee40b2f4
csi-driver-nfs git beb9567b sha256:930d7941ec80f3d889b1ae13415d2d5a5615563099dc396b584da9dee00b5c3e
csi-external-attacher git 3fd668b3 sha256:311d0303025d24b92e27915c9b912a1abe6acd319d843fa7da30d653e3d98b0e
csi-external-provisioner git 7ff338c9 sha256:74b53004fd9fb79eb4c6ec4630c17e1941356a85f06b59cbb979d60d14f74dff
csi-external-resizer git 14aa7028 sha256:582bbcef8f74470c55b0b524b9fb93993139d9bcab461683e19fed155d30ca86
csi-external-snapshotter git a019d1a9 sha256:05b453fd970cc12a8b464bf79a324826400efad167553f46e0e50615d5fe126d
csi-node-driver-registrar git 5766960d sha256:2d2285516cdafd2e620115bb406674c8fdf45461f9bae6e627567a5e29b042be
csi-snapshot-controller git a019d1a9 sha256:e08f830986fae3522559e46ac41fdfd7651ee98e0c0a76d1d322f783833b4ce3
deployer git 4b0a124d sha256:51ea53ddcdf8c474bd91175d9271e50d56d8c31a88d475bf9e205fb9c33880df
driver-toolkit git b63b175a sha256:075f6db4a64ad9d150288ecc9003dfe29fe62a036b217697e9adfde3d096f910
egress-router-cni git bc639044 sha256:c37ff2407fa35f008dc326af658921818f7fb252ecf48568ec32a17d3c13e449
gcp-cloud-controller-manager git 51c32646 sha256:fae3427169c6ad48438ca0bb7dcfb8a783b9ae46b8dd1ca07cbbbea9214e6e60
gcp-workload-identity-federation-webhook git 4501ff2f sha256:9457fd81b7d40595cf6bae34cfdae2c17546653e842eea155d021cbcdc2ae40c
ibm-cloud-controller-manager git 11bc35dd sha256:a2187a754070421cf9942646cc113c3f79510b698f90084dd13ccc5761d27e84
ibmcloud-machine-controllers git 2615d13b sha256:3ec4907a6539f765b4efd20b692286b6790c479f07c9696dee37fd9e0f6a3ec2
ironic-agent git 601c9bf3 sha256:46573e1a0a40eb3e4e91e6dee03d167c6acdf46ba1e522b1eed470cfe907969a
ironic-machine-os-downloader git f8e41b2e sha256:edce66e637a840752e859a8f71a501406fd1728b6058a4ee253e3c3ae7bfa87d
ironic-static-ip-manager git 486a0418 sha256:ee2129796c1f9095406c8bf2f1652fdf7b53c58ab8cb5db5a6feac8daf203bbe
karpenter-operator git 56725605 sha256:759ab9386ffc0d9f7d529ef9dbd8cd07f5867b548b2d80f2d845bc758328d990
kube-vip git 1bb8a96e sha256:64a78fbd37335aef4cfeba8c8546c0b6b90f2ee20666331f052856c1e323bfcf
machine-image-customization-controller git e49b0968 sha256:356815c2813f21a74d4ed535d8b57760c48effbe6c30a8403559342ddb837d1d
multus-admission-controller git c0bdec9c sha256:4ee0dd2705ef33bade6f230ea9ce7bcb98bd9e8bb9716f41598b1b71e9cbaaa4
multus-cni git 8f597f4b sha256:91659341076e6538833f203dc50ae0dfd19b273ea1837fc40b9ec0cf320fd950
multus-cni-microshift git 8f597f4b sha256:5feecb4a89e8ddd75e2f2b54a97ce016466542a47b3912fd87ee7869e69a20da
multus-networkpolicy git bfbac502 sha256:8f7851d32f7f5b9f8ca782a0a8ebe7c8728b47e20fcc0f5081385fb66f89b17c
network-interface-bond-cni git 2c395f56 sha256:24ae8f8904026bfb1be11b43f4982b2ed89b4e0f5afbbd551b3bf6874bb9d72e
network-tools git 0b53ac3d sha256:c2aecd4eaba54e7f09c3e5dbfa94e4afc2644ef48b5d5d3ba923c5b1187774a2
nutanix-machine-controllers git 249b7c8e sha256:83b65f4fc340a70443595de3233043fe9f080c8aa6d2c5fe4848e60d36798c74
olm-catalogd git 49582d3d sha256:46ed568101a888f546b5592bca5e0e1db4e370b46757c001525bed1129f73aa5
olm-operator-controller git 49582d3d sha256:1af14b191a230c703e4bd27bd7c8112f14b2056d5aa080548e5db2a03c7518ce
openshift-controller-manager git 726a0562 sha256:5254a37600039926d35167368460d2ea176cfc38955768684508588feb4ee17f
openstack-resource-controller git 58dbc048 sha256:701b40e1bf27b4256fe5ac5bf0bc67196a95dc68112fd489ee8179d1bb92146a
operator-framework-tools git c3d56d20 sha256:696708fa8deca011eece563dbf7e66311455f050cceb51dd44182e0e3566129f
operator-lifecycle-manager git c3d56d20 sha256:3ffda630b6d2e8bf73e6b44eb8297a8a7aa3e631423e36769799ae715b783843
operator-marketplace git fa9e19b2 sha256:80fd98aec79f4992942683b86ad1afb2565337e5c28f2399b0ff58bf0b985e13
operator-registry git c3d56d20 sha256:0ab2df2d24901558cc9e26150a91afb80b00c93c9e1b0906b3880a669ba1b370
powervs-block-csi-driver git 5911994c sha256:55086f91be4b5ef6d57888b125f139e3fa39757d74d2a7050710200dbf1dbd2a
route-controller-manager git 59697cf7 sha256:6358f10f32785d5700092b0c2047938ad911da9c76f21c1cb3c641975f549c2f
service-ca-operator git ed872ba1 sha256:b5cd74f28a27b48002e18af72756f89668fdca60f7c70084d31a65b83b1a67db
tools git 4b0a124d sha256:b02e6159112c75e1323f4ef80b509badb49084f8c88477d3bfc61482494112c4
vsphere-cloud-controller-manager git eb29de19 sha256:1e05b22c71dbb64bd648b2f670260a9f5c892f6c6231fff34d041beb1307d8dd

agent-installer-api-server

OCPBUGS-130354: Add ovnKubernetesConfig to install-config definition- #11116 #11116
OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #11028
OCPBUGS-126900: Allow agent-installer invoker to have a suffix #10978
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-133398: Preserve firstboot network config across OS image replacement #2487
OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #2382
OCPBUGS-126900: Allow agent-installer invoker to have a suffix #2347
Full changelog

agent-installer-node-agent

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #1664
OCPBUGS-87404: Updating ose-agent-installer-node-agent-container image to be consistent with ART for 5.0 #1491
Full changelog

agent-installer-ui

Don’t show Static IP steps in OVE below the sea (#4145) #4145
Hide the network type control in OVE (#4143) #4143
Add to OVE custom manifest workaround filter (#4140) #4140
OCPBUGS-121366: Move IPv6 Technology Preview badge out of the header (#4138) #4138
Update GH actions to @v7 (#4130) #4130
Do not show limited support level warning in disconnected flow (#4088) #4088
OCPBUGS-121378: Do not show IRI custom manifests in the disconnected UI (#4048) (#4053) #4048
Remove stale OCM_REFRESH_TOKEN code (#4024) #4024
Full changelog

agent-installer-utils

OCPBUGS-127048: Quote variable expansion in skopeo inspect invocation #354
OCPBUGS-127042: Refresh rendezvous IP selection list #353
OCPBUGS-127008: Fix agent TUI timeout #350
Full changelog

aws-cluster-api-controllers

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #660
OCPBUGS-128250: UPSTREAM: <carry>: remove redundant GitHub summary verification #659
Full changelog

aws-ebs-csi-driver

OCPBUGS-104249: Address CVE-2026-33814 #344
OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #343
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, gcp-pd-csi-driver-operator, openstack-cinder-csi-driver-operator

OCPBUGS-126441: openstack-manila: Consume CA cert from CCO secret #636
OCPBUGS-128798: Unresolved ${TLS_CIPHER_SUITES} for Custom TLS 1.3 profile #641
: [release-5.0] OCPBUGS-128035: Enable pod-delete-after-umount CSI suite for driver OCP manifests #628
OCPBUGS-120666: fix(gcp-pd): do not apply guest-cluster resources against the management cluster on HyperShift #623
Full changelog

aws-karpenter-provider-aws

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #48
OCPBUGS-127053: Align simulated with actual allocatable resources #47
Full changelog

aws-machine-controllers

OCPBUGS-128830: Fixed dedicated host tests to check for machineset to exist #226
Full changelog

aws-node-termination-handler

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #16
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-122326: skip public ip check for azure stack #216
Full changelog

azure-cluster-api-controllers

OCPBUGS-132938: Carry VM Reapply recovery #416
OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #414
Full changelog

azure-file-csi-driver

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #168
Full changelog

azure-kms-encryption-provider

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #66
Full changelog

azure-service-operator

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #48
Full changelog

azure-workload-identity-webhook

OCPBUGS-104262: Bump golang.org/x/net to v0.53.0 to address CVE-2026-33814 #58
OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #71
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-96812: Bump x/net to v0.60.0 #116
OCPBUGS-104273: Bump golang.org/x/net to v0.53.0 #108
OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #109
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-132707: azure: omit empty machine security profiles #11016
OCPBUGS-134756: PowerVC: fix two issues with cherry-pick 10966 #11037
OCPBUGS-133316: PowerVC: Support non admin user #11020
OCPBUGS-133520: Update RHCOS-release-5.0 bootimage metadata to 10.2.20261026-0 / 9.8.20261026-0 #11025
OCPBUGS-132355: unconfigured-ignition must include nmstateconfig.yaml when present #11012
OCPBUGS-131972: support InfraEnv AdditionalNTPSources in unconfigured-ignition #11001
OCPBUGS-129582: Removed PowerVS InstallConfig debug log statement exposing sensitive information #10955
OCPBUGS-130584: Add internalJoinSubnet to installConfigOverrides #10968
OCPBUGS-122006: Warn about ignored install-config fields in ABI #10861
OCPBUGS-128501: gcp: restrict global KMS location check to defaultMachinePlatform #10929
OCPBUGS-126592: Update RHCOS-release-5.0 bootimage metadata to 9.8.20260921-0 / 10.2.20260922-0 #10923
OCPBUGS-126900: use different INSTALL_INVOKER for unconfigured ignition #10900
OCPBUGS-126682: Inject the pull-secret as podman secret in the agent-installer-ui container #10887
Full changelog

baremetal-machine-controllers

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #281
OCPBUGS-123652: Fix race that can provision multiple hosts #280
OCPBUGS-104256: Bump golang.org/x/net to v0.58.0 to address CVE-2026-33814 #263
Full changelog

baremetal-runtimecfg

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #416
Full changelog

cluster-authentication-operator

OCPBUGS-127139: fix CVE-2026-41178 by updating otel to v1.44.0 #1008
OCPBUGS-127499: Add high contrast support to oauth templates #1013
OCPBUGS-122387: Update build-machinery-go vendor dependency #998
Full changelog

cluster-baremetal-operator

OCPBUGS-122243: Make HostPath VolumeMounts ReadOnly for image customization container #659
OCPBUGS-123600: Add attach_non_bootable_iso OTE test #665
OCPBUGS-123600: Add bmo_validations and ncsi_reject_poweroff OTE test #657
Full changelog

cluster-bootstrap

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #150
OCPBUGS-122387: Update build-machinery-go vendor dependency #147
Full changelog

cluster-capi-controllers

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #315
OCPBUGS-128250: UPSTREAM: <carry>: remove redundant GitHub summary verification #314
Full changelog

cluster-capi-operator

OCPBUGS-128732: add ec2:ModifyInstanceMetadataOptions to AWS CredentialsRequest #684
OCPBUGS-128290: Pass original TLSProfileSpec to security profile watcher #679
Full changelog

cluster-config-api

OCPBUGS-112658: [5.0] enable DRADeviceTaintRules feature gate in TPNU/DevPreview #3094
OCPBUGS-130323: Rename console ingress helper type #3089
OCPBUGS-126809: Enable OLMLifecycleAndCompatibility by default in version 5+ #3064
OCPBUGS-123648: [5.0] register DRADeviceTaintRules in all feature sets #3040
Full changelog

cluster-config-operator

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #520
OCPBUGS-87358: Updating ose-cluster-config-operator-container image to be consistent with ART for 5.0 #493
OCPBUGS-122387: Update build-machinery-go vendor dependency #502
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-128798: Unresolved ${TLS_CIPHER_SUITES} for Custom TLS 1.3 profile #300
Full changelog

cluster-etcd-operator

OCPBUGS-133396: Add TNF ownership for docs/tnf #1726
OCPBUGS-133381: force installer revision when external-etcd-pod ConfigMap is created #1738
OCPBUGS-114736: [TNF] lifecycle part 2 - update setup deadlock fix & conditions cleanup #1727
OCPBUGS-128762: TNF: wait for etcd-bootstrap member removal before setup #1722
OCPBUGS-127274: fix(tnf): set read-only root filesystems #1716
OCPBUGS-127061: allow TLS 1.3 profiles without ciphers #1714
OCPBUGS-123640: fix: add missing workload paritioning annotation on cert-watcher daemonset #1709
OCPBUGS-121354: feat: add cert-watcher DaemonSet to restart etcd on CA bundle rotation #1702
Full changelog

cluster-image-registry-operator

OCPBUGS-128764: Add 2m degraded inertia to ImagePrunerController #1383
OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #1380
OCPBUGS-128565: Revert “imageconfig: preserve ImageStreamImportMode during upgrade race” #1381
OCPBUGS-121350: imageconfig: Preserve ImageStreamImportMode during upgrade race #1367
OCPBUGS-100042: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 5.0 #1359
Full changelog

cluster-ingress-operator

OCPBUGS-132553: Allow disabling endpoint address validation #1632
OCPBUGS-132923: discover AWS subnets from CAPI with MAPI fallback #1644
OCPBUGS-129426: Enable readOnlyRootFilesystem for cluster ingress components #1610
OCPBUGS-131938: [OSSM Wave 05] Bump to OSSM 3.4.3 and Istio v1.30.5 #1625
OCPBUGS-126741: Bump to OSSM 3.4.2 and Istio v1.30.4 #1600
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-123648: apienablement: enable resource.k8s.io/v1beta2 when DeviceTaintRule is enabled #2321
OCPBUGS-122387: Update build-machinery-go vendor dependency #2311
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-122387: Update build-machinery-go vendor dependency #968
OCPBUGS-111832: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 5.0 #954
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-122387: Update build-machinery-go vendor dependency #677
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #184
Full changelog

cluster-machine-approver

OCPBUGS-135091: Add NetworkPolicy manifests to openshift-cluster-machine-approver namespace #348
OCPBUGS-128455: Revert EgressIP validation backport #338
OCPBUGS-127107: fix: retry serving CSRs while Machine addresses populate #322
Full changelog

cluster-monitoring-operator

OCPBUGS-130771: amcfg: remove client-side TLS enforcement for additional alertmanager configs #3155
OCPBUGS-129135: don’t delete admin-owned Alertmanager secrets on destroy #3137
OCPBUGS-128817: filter ciphers not supported by Thanos #3146
OCPBUGS-127465: fix(e2e): use Job with backoffLimit for TestDocExamples #3104
OCPBUGS-127422: Fix flaky TestTelemetryReport/rate_issues #3098
OCPBUGS-126958: restore node-exporter textfile metrics with read-only rootfs #3096
Full changelog

cluster-network-operator

OCPBUGS-129114: fix(ovn-kubernetes): disable local DB probes #3185
OCPBUGS-130581: Added global overrides for OVN-Kubernetes #3191
OCPBUGS-115004: Add ConfigMap hash annotation to networking console plugin deployment #3144
OCPBUGS-128644: Fix issues when NetObserv fails to install #3181
OCPBUGS-115428: Adds rendering of enable-multi-network-policy in ovnkube-node #3149
OCPBUGS-107980: CVE-2026-41178 - bump go.opentelemetry.io/otel to v1.44.0 #3133
Full changelog

cluster-node-tuning-operator

OCPBUGS-114740: E2E: Minor fixes to Memory Manager and hugepages split tests #1622
OCPBUGS-129644: E2E: Add labels to ovsdpdk tests #1659
OCPBUGS-129611: E2E: Fix no-op Get() assertions in mixedcpus #1658
OCPBUGS-127373: E2E: ovsDpdk remaining cases and consolidate suite #1643
OCPBUGS-114738: E2E: Fix ovs dynamic pinning, kubelet and mustgather tests #1621
OCPBUGS-129433: Makefile: Modify pao-functests-update-only to run tier-0 and tier-1 tests #1654
OCPBUGS-128909: Prevent offlined CPUs from being re-onlined after reboot by udev hotplug rule #1648
OCPBUGS-128813: E2E: PPC: replace no-op log-on-match with actual assertions (4 sites) #1647
OCPBUGS-127360: E2E: add missing matcher to offlined CPU Expect() calls #1642
OCPBUGS-123795: apis: add missing fields to apis v1 #1636
OCPBUGS-123511: e2e: make OVS dynamic pinning tests compatible with ovsDpdk CPUs #1631
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-127160: fix CVE-2026-41178 by updating otel to v1.44.0 #785
OCPBUGS-122387: Update build-machinery-go vendor dependency #771
Full changelog

cluster-storage-operator

OCPBUGS-128248: Fix the un-upgradeable message #747
OCPBUGS-128798: Unresolved ${TLS_CIPHER_SUITES} for Custom TLS 1.3 profile #752
OCPBUGS-128248: Use KCS link in the un-upgradeable message #745
OCPBUGS-123152: Backport gcp pd hypershift release 5.0 #743
Full changelog

cluster-version-operator

OCPBUGS-129016: skip console plugin deployment on OCP < 5.0 #1481
OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #1479
Full changelog

configmap-reloader

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #86
Full changelog

console

OCPBUGS-135131: Fix missing Impersonate action on RoleBinding detail page #17450
OCPBUGS-136156: Remove incorrect msg in maintenance modal #17461
OCPBUGS-135090: Remove the redundant detailsPage wrapper #17447
OCPBUGS-135079: [release-5.0] Allow blob image sources in the default CSP #17446
OCPBUGS-133720: Preserve revealed Secret values across page rerenders #17436
OCPBUGS-130325: Show Helm nav tab regardless of HelmChartRepository/ProjectHelmChartRepository instance existence #17383
OCPBUGS-132337: Restore ConfigMap and BuildConfig form view edit actions #17400
OCPBUGS-123725: Fix empty vSphere connection details after upgrade #17186
OCPBUGS-86614: prep for 5.0 SDK publish #17393
OCPBUGS-130863: playwright test fixes + SDK publish + rename theme #17386
OCPBUGS-130324: Guard against null/missing urls in Helm charts #17344
OCPBUGS-129474: Cap rendered alerts in notification drawer and dashboards #17367
OCPBUGS-128861: fix incorrect breakpoint in code editor sidebar #17343
OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #17320
OCPBUGS-127461: Console does not offer ReadWriteOncePod (RWOP) for AWS EBS CSI StorageClasses #17289
OCPBUGS-128463: provide PatternFly dynamic modules without Console consuming them #17325
OCPBUGS-127187: Add CSP violation detection to Playwright #17218
OCPBUGS-127019: restore some old test-prow-e2e scenarios #17198
OCPBUGS-127051: Post qa-verify evidence via gh’s native –attach instead of base64 #17200
OCPBUGS-120722: Helm backend test flake: parallel packages race on global pkill chartmuseum #17144
OCPBUGS-126894: i18n upload/download routine task - version 4.²³⁄₅.0 (Additional) #17195
OCPBUGS-126884: Keep notification bell visible when read notifications exist #17194
OCPBUGS-114008: Strip version tag from OCI chart URL to prevent doubl… #17097
OCPBUGS-122258: Handle Prometheus percentage strings #17161
OCPBUGS-123616: increase httpRetry and update yarn #17181
OCPBUGS-123202: Fix Namespace column hidden on Node Pods tab with active namespace #17175
OCPBUGS-123647: i18n upload/download routine task - version 4.²³⁄₅.0 #17183
OCPBUGS-120694: Installed Operators page fails with catalogsources “forbidden … at the cluster scope” error #17142
OCPBUGS-121974: Migrate OLM Cypress tests to Playwright #17149
OCPBUGS-120712: Update stale comment #17143
OCPBUGS-115209: Fix webhook creation in Git for PAC #17123
OCPBUGS-120668: improve playwright reliability #17138
And 4 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-130323: Update API and client-go dependencies for Console ingress helper rename #1245
OCPBUGS-132033: Address review feedback on Helm CLI download descriptions #1243
OCPBUGS-113613: Handle disabled Ingress capability in HyperShift #1215
OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #1234
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #251
NO-JIRA: Fix Go builders in CI #250
Full changelog

coredns

OCPBUGS-133771: validate DNS requests before unpacking #222
OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #218
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-108037: Bump go.opentelemetry.io/otel to v1.44.0 in 5.0 #427
Full changelog

csi-external-snapshot-metadata

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #31
Full changelog

csi-livenessprobe

OCPBUGS-107993: Bump go.opentelemetry.io/otel to v1.44.0 to address CVE-2026-41178 #95
Full changelog

docker-builder

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #570
OCPBUGS-95492, OCPBUGS-98108: Bump golang.org/x/crypto to fix CVE-2025-22869,CVE-2025-47913,CVE-2026-46597,CVE-2026-39829,CVE-2026-39832 #550
Full changelog

docker-registry

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #489
OCPBUGS-87287: Updating openshift-enterprise-registry-container image to be consistent with ART for 5.0 #472
Full changelog

etcd, installer-etcd-artifacts

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #418
Update Dockerfile references from golang-1.25 to golang-1.26 #417
Full changelog

gcp-cluster-api-controllers

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #315
Full changelog

gcp-machine-controllers

OCPBUGS-130795: resolve boot disk image at reconcile time #201
OCPBUGS-129163: Wait for RUNNING before providerID; retry stockout #198
Full changelog

gcp-pd-csi-driver

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #136
Full changelog

haproxy-router, haproxy-router-haproxy28, haproxy-router-haproxy32

OCPBUGS-132553: Allow disabling endpoint address validation #874
OCPBUGS-123650: External certificate routes admit slowly at scale #873
OCPBUGS-123650: Lock DeleteFunc to stop SARCompleted overwriting rejection #846
Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

OCPBUGS-132930: UPSTREAM: 140661: admission/namespace/lifecycle: allow updates to resources in deleted namespaces #2828
OCPBUGS-130593: [5.0] Deflake pod resize deferred tests #2818
OCPBUGS-127122: UPSTREAM: <carry>: Add needed labels to RHEL pause image #2810
NO-JIRA: Rebase v1.36.5 in release-5.0 #2802
UPSTREAM: 142167: Refuse UNC symlink targets in Windows subPath resolution #2795
NOJIRA: add explicit merge commit message #2792
OCPBUGS-127122: UPSTREAM: <carry>: Use FROM scratch for RHEL pause image #2786
NO-JIRA: Rebase release-5.0 to Kubernetes v1.36.4 #2776
OCPBUGS-108014: UPSTREAM: <carry>: bump otel to v1.44.0 to fix CVE-2026-41178 #2762
Full changelog

hypershift

OCPBUGS-135943: classify WebIdentityErr by cause to prevent false invalid creds #10177
Sync approver aliases with main for release-5.0 #10194
OCPBUGS-129438: fix(nodepool): rebuild CAPI selectors deterministically on reconcile #9932
OCPBUGS-130639: [release-5.0] fix leaked VPC endpoint and hypershift.local DNS records on AWS HC deletion #9947
OCPBUGS-134555: Add periodic resync and reduce backoff ceiling for HCCO resources controller #10134
OCPBUGS-133415: Etcd recovery on unreachable nodes #10101
OCPBUGS-133261: CVO upgrades stuck in Upgradeable=False (ResourceDeletesInProgress) #10093
OCPBUGS-133307: Manage GCP worker firewall rules in CPO #10096
OCPBUGS-127161: etcd initialization bugs after etcdctl snapshot restore #9834
OCPBUGS-131061: Fix IPv6 endpoint authorities in CPO #10002
OCPBUGS-130868: Preserve supplied Unmanaged etcd credentials #9989
ACM-48074: remove OCP 5.1 from release-5.0 supported versions #9997
OCPBUGS-128589: fix(api): add missing + prefix to kubebuilder annotation on networkType #9906
OCPBUGS-127430: [5.0] Enable DeviceTaintRule API for hosted clusters #9914
OCPBUGS-121866: Generate KubeVirt nmstate network config conditionally #9894
OCPBUGS-129118: Count only successful upsert updates #9899
CNTRLPLANE-4568: add kubeClientQPS and kubeClientBurst to ClusterAutoscaling #9885
OCPBUGS-128504: fix: mount combined-pull-secret in OpenShift API Server #9883
OCPBUGS-128396: [release-5.0]: fix(globalps): schedule global-pull-secret-syncer on karpenter nodes #9799
OCPBUGS-127000: Updating ose-hypershift-container image to be consistent with ART for 5.0 #9713
OCPBUGS-126441: openstack: Start populating cacert in clouds.yaml #9655
OCPBUGS-123155: complete GCP PD wiring in HyperShift #9598
ACM-41684: Switch hypershift-operator runtime to PQC base image #9452
CNTRLPLANE-4159: Maintain ingress serving cert for HostedCluster ingress #9604
OCPBUGS-122276: fix(hcco): run kas-connection-checker as non-root #9694
ACM-41684: Switch hypershift-operator runtime to PQC base image #9590
OCPBUGS-112730: fix(certs): normalize IP SANs to stop dual-stack KAS cert churn #9495
OCPBUGS-122229: filter AWS-reserved tag keys before calling DeleteTags #9576
OCPBUGS-123150: [release-5.0] CNTRLPLANE-3626: feat(ignition-server, ignition-server-proxy): inject centralized TLS configuration #9408
OCPBUGS-123793: Use multiarch CI build root on release-5.0 #9633
OCPBUGS-123146: Updating ose-hypershift-container image to be consistent with ART for 5.0 #9597
OCPBUGS-117010: preserve immutable AWS load balancer annotations #9489
OCPBUGS-114435: fix(konnectivity): enable –sync-forever to restore lost agent-server tunnels #9430
OCPBUGS-113998: fix(azure): skip KMS validation for private Key Vaults on ARO HCP #9405
OCPBUGS-115188, OCPBUGS-121650: backport safe-to-evict annotation and operator health probes fixes #9534
OCPBUGS-98883, OCPBUGS-98887: bump haproxy to 3.0.5-6.el10_2.2 for CVE fix #9336
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #170
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-131837: disable snapshot tests for ibm-vpc-block-csi-driver #201
OCPBUGS-128798: Unresolved ${TLS_CIPHER_SUITES} for Custom TLS 1.3 profile #196
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #188
OCPBUGS-108009: UPSTREAM: 2933: Bump all go.opentelemetry.io/otel modules to v1.44.0 #186
Full changelog

insights-operator

OCPBUGS-123492: gather InferenceService from the KServe operator #1366
OCPBUGS-132682: add CVO annotations to secret gatherer RBAC- #1399 #1404
OCPBUGS-130926: add permissions to fetch MaasModelRefs #1391
OCPBUGS-129610: gather MaasModelRefs #1386
OCPBUGS-114055: multiclusterhub gatherer #1361
OCPBUGS-122039: add insights-runtime-extractor-scc missing fields #1363
Full changelog

insights-runtime-exporter, insights-runtime-extractor

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #93
Full changelog

ironic

OCPBUGS-130800, OCPBUGS-130831: Bump urllib3 to 2.8.0 with hatchling fix for CVE-2026-97687,CVE-2026-97689 #935
OCPBUGS-129567: Lenovo hardware gets stuck on rebooting #928
OCPBUGS-128481: Fix SameFileError #927
OCPBUGS-98475: bump sushy to include fix #918
Bug OCPBUGS-123709: Bumping sushy hash to include jobstate fixes #914
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #897
Full changelog

keepalived-ipfailover

OCPBUGS-87506: Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 5.0 #238
Full changelog

kube-metrics-server

NO-ISSUE: synchronize OWNERS from main branch [release-5.0] #87
Full changelog

kube-rbac-proxy

OCPBUGS-129323: Address CVE-2026-84304 #176
OCPBUGS-128068: Bump golang.org/x/net from v0.52.0 to v0.58.0 to resolve CVE-2026-39821 (release-5.0) #164
OCPBUGS-129318: Address CVE-2026-29181 #181
Full changelog

kube-state-metrics

NO-ISSUE: synchronize OWNERS from main branch [release-5.0] #183
OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #170
Full changelog

kube-storage-version-migrator

OCPBUGS-104371: Bump golang.org/x/net to v0.55.0 to address CVE-2026-33814 #258
OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #264
OCPBUGS-87255: Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 5.0 #243
OCPBUGS-122387: Update build-machinery-go vendor dependency #260
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-104361: Fix CVE-2026-33814 - bump golang.org/x/net to sustaining fork v0.50.0-sec.4 #101
OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #99
Full changelog

kubevirt-csi-driver

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #120
Full changelog

machine-api-operator

OCPBUGS-130795: remove GCP boot disk image defaulting from admission webhook #1582
OCPBUGS-130795: add RBAC for GCP boot image resolution #1581
OCPBUGS-129504: fix race in VAP MachineSet e2e test cleanup #1575
OCPBUGS-128566: [release-5.0] Reduce vCenter API load in the vSphere machine controller #1566
OCPBUGS-125793: Add opt-in kube-rbac-proxy sidecar for pprof endpoint (AWS) #1556
Full changelog

machine-config-operator

OCPBUGS-132755: Handle restrictive policies for layered OS updates #6688
OCPBUGS-134739: Fix MCN stale current config edge case #6693
OCPBUGS-133366: Add machineconfignode, pinnedimageset, machineosconfig, machineosbuild, and osimagestream resources to relatedObjects #6680
OCPBUGS-133334: stabilize test 66436 - disable weak SSH cipher suites #6678
OCPBUGS-131014: MCD fails to rollback from OCL to stock RHCOS when extensions are installed #6654
OCPBUGS-127483: Split wait-for-ipsec-connect into two services to avoid ipsec restart #6583
OCPBUGS-132359: only enable signed policy when testing … #6667
OCPBUGS-131619: Increase timeout for ImagePulledFromRegistry=Unknown transition in ImageModeStatusReporting test #6660
OCPBUGS-130888: Update cleanup for test PolarionID:84219 to wait for node to be removed #6653
OCPBUGS-128536: Revert “OCPBUGS-91746: temporarily remove sandboxed-containers from extensions test” and “OCPBUGS-91746: Remove sandboxed-containers (kata-containers) from extended-priv tests” #6597
OCPBUGS-129537: Remove reverse (rhel10 to rhel9) OSStreams upgrade tests #6639
OCPBUGS-129431: logout vCenter clients after use #6635
OCPBUGS-129374: Fix layered OS updates on older nodes #6632
OCPBUGS-129269: Boot image controller skips MachineSets that don’t match any failure domain #6628
OCPBUGS-128927: Filter cosign signature tags from the IRI release lookup #6615
OCPBUGS-127192: Run nmstatectl format in nmstate-configuration #6572
OCPBUGS-127447: Nodes created with 4.13 base images cannot join the cluster #6580
OCPBUGS-119104: drop GCD health-check ranges in openshift-gcp-routes #6555
OCPBUGS-123664: Correctly handle MC deletion in image mode when no new build is required #6546
OCPBUGS-122277: Fix IsBootImageUpdateSupported to include vSphere and Azure platforms #6530
OCPBUGS-126703: Add ‘..’ block, max-length, and cross-store uniqueness #6483
OCPBUGS-122238: [TNF] Add infinite retry on untaint systemd unit #6553
OCPBUGS-122915: Mount /etc/container in mosb #6537
OCPBUGS-122217: Dump compact cache to CM for persistence #6525
OCPBUGS-121942: Replace wildcard permissions with explicit verbs in MachineConfigServer ClusterRole #6514
OCPBUGS-123672: Pass missing proxy vars to bootstrap MCC #6548
OCPBUGS-114854: CVE-2026-15792 openshift4/ose-machine-config-rhel9-operator: BuildKit: Denial of Service via malicious client request [openshift-5.0] #6519
OCPBUGS-122284: updateLayeredOS deploy-from-self when skopeo < 1.22.2 #6534
Full changelog

machine-os-images

OCPBUGS-127128: [release-5.0] Fix OKD/SCOS builds to use centos CoreOS streams #119
Full changelog

metallb-frr

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #139
Full changelog

monitoring-plugin

OU-1589: [release-5.0] sanitize linkified URLs in alert annotations #1383
OCPBUGS-132867: fix metrics series color squares #1375
OU-1392: [release-5.0] fix: parse datetime ranges from the specified format rather than browser specific apis #1348
OCPBUGS-119704: Bump fast-uri to fix CVE-2026-84292 #1332
OU-1600: fix: sort agentic runs by created to avoid getting stalled runs related to alerts #1327
OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #1307
NO-JIRA: [release-5.0] Sanitize alert runbook URLs #1290
OCPBUGS-114748: [release-5.0] DOMPurify: Cross-Site Scripting via IN_PLACE sanitization #1265
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

multus-route-override-cni

NO-JIRA: Update CI builders to Go 1.26 #82
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #437
NO-JIRA: Update CI builders to Go 1.26 #436
Full changelog

must-gather

OCPBUGS-123521: Add windows_exporter log collection #566
OCPBUGS-122387: Update build-machinery-go vendor dependency #564
Full changelog

network-metrics-daemon

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #159
Full changelog

networking-console-plugin

maintenance: Bump the npm group with 70 updates #660
OCPBUGS-135361: removed clearing of spec.selector/ports on switch to ExternalName service type #653
OCPNETUI-168: Update Owners file #645
maintenance: Bump the npm group with 32 updates #638
OCPNETUI-183: migrate to @kubevirt-ui-ext/kubevirt-api #627
Reset form state using correct default values #625
maintenance: Bump the npm group with 23 updates #622
maintenance: Bump the npm group with 20 updates #599
OCPNETUI-146: dependency cleanup #590
OCPNETUI-146: reassign dev and prod dependencies #583
maintenance: Bump the npm group with 26 updates #577
maintenance: Bump the npm group across 1 directory with 16 updates #562
OCPNETUI-146: Align shared modules with Console #560
maintenance: Bump the npm group with 10 updates #547
maintenance: Bump the npm group across 1 directory with 216 updates #542
maintenance: Bump terser-webpack-plugin from 5.4.0 to 5.6.1 #531
maintenance: Bump loader-runner from 4.3.1 to 4.3.2 #530
OCPNETUI-78: Remove unused Dockerfile.art #517
OCPNETUI-78: Sync Dockerfile and Dockerfile.art #495
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-104356: Bump golang.org/x/net to v0.58.0 to address CVE-2026-33814 #72
OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #86
Full changelog

oauth-apiserver

OCPBUGS-115299: fix CVE-2026-41178 by bumping otel to v1.44.0 #227
OCPBUGS-122387: Update build-machinery-go vendor dependency #229
Full changelog

oauth-proxy

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #391
ACM-37203: Add support for configurable TLS profiles #380
Full changelog

oauth-server

OCPBUGS-127499: Add high contrast support to oauth templates #286
OCPBUGS-122387: Update build-machinery-go vendor dependency #261
Full changelog

openshift-apiserver

OCPBUGS-127175: update otel to 1.44.0 to fix CVE-2026-41178 #689
Full changelog

openshift-state-metrics

NO-ISSUE: synchronize OWNERS from main branch #145
OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #141
Full changelog

openstack-cluster-api-controllers

OCPBUGS-104396: Replace golang.org/x/net with openshift-sustaining/net v0.50.0-sec.4 for CVE-2026-33814 [release-5.0] #436
Full changelog

openstack-machine-api-provider

OCPBUGS-104369: Fix CVE-2026-33814 - bump golang.org/x/net to v0.53.0 #196
OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #192
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-133284: Add arkadeepsen, martinkennelly and pperiyasamy to OWNERS file #3573
OCPBUGS-131017: [release-5.0] node: prioritize default network before primary UDN fan-out #3542
OCPBUGS-128643: EIP duplicate MAC race during node shutdown #3489
OCPBUGS-122282: egressip: set IFA_PROTO on EgressIP addresses to prevent nmstate persistence #3437
OCPBUGS-127013: [release-5.0] e2e: exclude machine network subnets from UDN/BGP allocators #3466
OCPBUGS-122287: Fix wrong infrastructure-locked role when namespace is missing #3438
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-128798: Unresolved ${TLS_CIPHER_SUITES} for Custom TLS 1.3 profile #126
Full changelog

powervs-cloud-controller-manager

OCPBUGS-108069: Bump otel to address CVE-2026-41178 #112
OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #113
OCPBUGS-101730, OCPBUGS-104390, OCPBUGS-108069: Bump x/net to address CVEs #111
Full changelog

powervs-machine-controllers

OCPBUGS-101735, OCPBUGS-104397, OCPBUGS-109539, OCPBUGS-96858: Bump x/net and otel to address CVEs #153
OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #151
OCPBUGS-113646: Update dependencies to k8s 1.36 #148
Full changelog

prom-label-proxy

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #414
NO-ISSUE: synchronize OWNERS from main branch [release-5.0] #410
Full changelog

prometheus

NO-ISSUE: synchronize OWNERS from main branch #392
Full changelog

prometheus-alertmanager

NO-JIRA: synchronize OWNERS with main #194
OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #187
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

NO-ISSUE: synchronize OWNERS from main branch #411
Full changelog

prometheus-node-exporter

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #213
NO-ISSUE: synchronize OWNERS from main branch [release-5.0] #211
Full changelog

stream-coreos, stream-coreos-extensions

OCPBUGS-115309: Re-enable sandboxed-containers extension for 5.0 #1965
Full changelog

telemeter

OCPBUGS-122387: Remove unintended tools/vendor from release-5.0 #627
OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #623
Full changelog

tests

OCPBUGS-129437: Increase timeout for external IP policy test to accommodate in-cluster rollouts #31718
OCPBUGS-133005: Further optimize oc must gather tests to improve efficiency #31798
OCPBUGS-130586: e2e-analysis: add –skip-readiness-checks flag for degraded cluster lanes #31727
OCPBUGS-132902: Allow etcd probe error due to tls config change #31796
NETOBSERV-2563: Add network observability e2e tests with disconnected skips #31772
OCPBUGS-132327: make webhook build resolution wait phase-independent #31774
OCPBUGS-131833: Handle offline or removed nodes in TNF replacement test #31725
OCPBUGS-112658: allow v1beta2 DRA API in discovery test #31728
OCPBUGS-128800: assert PHC recovery after network disruption instead of logging it #31690
OCPBUGS-128791: Improve TNF recovery test stability: AfterEach cleanup, migration-threshold, east-west fixes #31693
OCPBUGS-127449: Make operator log scraper and monitor tests topology-aware #31671
OCPBUGS-128380: Add CSI storage test for pod delete after host umount of mounted volume #31670
OCPBUGS-127400: Redact OAuth tokens from test cleanup logs #31668
OCPBUGS-127419: Fix node replacement test timestamp filter and allow job retry #31577
OCPBUGS-123600: Register cluster-baremetal-tests-ext in extension registry #31641
[release-5.0] OCPBUGS-121193: Fixed Flakiness of Webhook test - ClusterResourceQuota validation #31642
Revert “OCPBUGS-83412: monitortests: skip PodSecurityViolation invariant when OpenShiftPodSecurityAdmission is disabled” #31604
OKD-454: [release-5.0] Skip OKD job name check for cluster-bot launch jobs #31629
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

thanos

OCPBUGS-129060: Bump github.com/klauspost/compress to fix CVE-2026-63209 #226
OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #216
Full changelog

volume-data-source-validator

OCPBUGS-104423: Bump golang.org/x/net to version 0.57.0 that fixes CVE-2026-33814 #18
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #129
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-122387: Bump google.golang.org/protobuf to v1.36.12 #212
OCPBUGS-126888: Fix credential exposure in logs (CWE-532) #203
OCPBUGS-126711: UPSTREAM: 4272: Fix crash in syncer when node can’t be found #202
Full changelog

vsphere-csi-driver-operator

OCPBUGS-128798: Unresolved ${TLS_CIPHER_SUITES} for Custom TLS 1.3 profile #369
Full changelog

vsphere-problem-detector

OCPBUGS-132740: Skip node checks for non-vSphere nodes #251
Full changelog

Node Image Info

Loading node image info, this may take a while ...

CentOS Stream CoreOS 10 (`stream-coreos`)

Package List

cri-o-1.36.4-1.el10s
kernel-6.12.0-275.el10
openshift-kubelet-5.0.0-202610251549.p2.gb8b2c80.assembly.stream.el10
systemd-257-34.el10

Full list (493 packages)

NetworkManager-1:1.58.0-1.el10
NetworkManager-cloud-setup-1:1.58.0-1.el10
NetworkManager-libnm-1:1.58.0-1.el10
NetworkManager-ovs-1:1.58.0-1.el10
NetworkManager-tui-1:1.58.0-1.el10
WALinuxAgent-udev-2.14.0.1-3.el10
aardvark-dns-4:2.1.0-1.el10
acl-2.4.0-2.el10
afterburn-5.11.0-1.el10
afterburn-dracut-5.11.0-1.el10
alternatives-1.30-2.el10
amd-gpu-firmware-20260812-27.el10
amd-ucode-firmware-20260812-27.el10
attr-2.6.0-2.el10
audit-4.2.1-3.el10
audit-libs-4.2.1-3.el10
audit-rules-4.2.1-3.el10
authselect-1.5.3-1.el10
authselect-libs-1.5.3-1.el10
azure-vm-utils-0.7.0-1.el10
basesystem-11-22.el10
bash-5.2.26-6.el10
bash-completion-1:2.11-16.el10
bind-libs-32:9.18.33-28.el10
bind-license-32:9.18.33-28.el10
bind-utils-32:9.18.33-28.el10
bootc-1.16.13-1.el10
bootupd-0.2.35-1.el10
bsdtar-3.7.7-11.el10
bubblewrap-0.10.0-3.el10
bzip2-1.0.8-25.el10
bzip2-libs-1.0.8-25.el10
c-ares-1.34.8-1.el10
ca-certificates-2026.2.90_v9.0.316-100.0.el10
catatonit-5:0.2.1-4.el10
centos-gpg-keys-10.0-23.el10
centos-release-cloud-1-1.el10s
centos-release-nfv-common-1-5.el10s
centos-release-virt-common-1-1.el10s
centos-stream-release-10.0-23.el10
centos-stream-repos-10.0-23.el10
checkpolicy-3.11-2.el10
chrony-4.8-2.el10
cifs-utils-7.7-2.el10
clevis-23-2.el10
clevis-dracut-23-2.el10
clevis-luks-23-2.el10
clevis-pin-tpm2-0.5.5-1.el10
clevis-systemd-23-2.el10
cloud-utils-growpart-0.33-11.el10
composefs-1.0.8-1.el10
composefs-libs-1.0.8-1.el10
conmon-3:2.2.1-4.el10
conmon-rs-0.6.6-2.el10s
console-login-helper-messages-0.21.3-10.el10
console-login-helper-messages-issuegen-0.21.3-10.el10
console-login-helper-messages-profile-0.21.3-10.el10
container-selinux-4:2.250.0-1.el10
containers-common-6:6.0-3.el10
containers-common-extra-6:6.0-3.el10
coreos-installer-0.27.0-2.el10
coreos-installer-bootinfra-0.27.0-2.el10
coreutils-9.5-14.el10
coreutils-common-9.5-14.el10
cpio-2.15-3.el10
cracklib-2.9.11-8.el10
cracklib-dicts-2.9.11-8.el10
cri-o-1.36.4-1.el10s
cri-tools-1.36.0-1.el10s
criu-4.2-9.el10
criu-libs-4.2-9.el10
crun-1.30.1-1.el10
crypto-policies-20260811-1.git4dcd294.el10
crypto-policies-scripts-20260811-1.git4dcd294.el10
cryptsetup-2.8.6-2.el10
cryptsetup-libs-2.8.6-2.el10
curl-8.12.1-7.el10
cyrus-sasl-gssapi-2.1.28-27.el10
cyrus-sasl-lib-2.1.28-27.el10
dbus-1:1.14.10-6.el10
dbus-broker-36-5.el10
dbus-common-1:1.14.10-6.el10
dbus-libs-1:1.14.10-6.el10
dbus-tools-1:1.14.10-6.el10
device-mapper-10:1.02.215-3.el10
device-mapper-event-10:1.02.215-3.el10
device-mapper-event-libs-10:1.02.215-3.el10
device-mapper-libs-10:1.02.215-3.el10
device-mapper-multipath-0.9.9-20.el10
device-mapper-multipath-libs-0.9.9-20.el10
device-mapper-persistent-data-1.3.2-1.el10
diffutils-3.10-8.el10
dmidecode-1:3.6-5.el10
dnf-4.20.0-28.el10
dnf-data-4.20.0-28.el10
dnsmasq-2.90-8.el10
dosfstools-4.2-12.el10
dracut-107-11.el10
dracut-network-107-11.el10
dracut-squash-107-11.el10
duktape-2.7.0-10.el10
e2fsprogs-1.47.1-5.el10
e2fsprogs-libs-1.47.1-5.el10
efi-filesystem-6-8.el10
efibootmgr-18-9.el10
efivar-libs-39-3.el10
elfutils-default-yama-scope-0.195-1.el10
elfutils-libelf-0.195-1.el10
elfutils-libs-0.195-1.el10
erofs-utils-1.8.10-1.el10
ethtool-2:6.19-1.el10
expat-2.7.3-4.el10
fcoe-utils-1.0.34-11.gitb233050.el10
file-5.45-12.el10
file-libs-5.45-12.el10
filesystem-3.18-17.el10
findutils-1:4.10.0-5.el10
firewalld-filesystem-2.4.3-4.el10
flatpak-session-helper-1.18.0-2.el10
fstrm-0.6.1-12.el10
fuse-common-3.16.2-5.el10
fuse-libs-2.9.9-25.el10
fuse3-3.16.2-5.el10
fuse3-libs-3.16.2-5.el10
fwupd-2.1.6-1.el10
gawk-5.3.0-7.el10
gdbm-1:1.26-15.el10
gdbm-libs-1:1.26-15.el10
gettext-envsubst-0.22.5-6.el10
gettext-libs-0.22.5-6.el10
gettext-runtime-0.22.5-6.el10
git-core-2.52.0-1.el10
glib2-2.80.4-22.el10
glibc-2.39-141.el10
glibc-common-2.39-141.el10
glibc-gconv-extra-2.39-141.el10
glibc-minimal-langpack-2.39-141.el10
gmp-1:6.2.1-12.el10
gnupg2-2.4.5-5.el10
gnutls-3.8.10-5.el10
gobject-introspection-1.79.1-7.el10
gpgme-1.23.2-6.el10
grep-3.11-10.el10
grub2-common-1:2.12-57.el10
grub2-efi-x64-1:2.12-57.el10
grub2-pc-1:2.12-57.el10
grub2-pc-modules-1:2.12-57.el10
grub2-tools-1:2.12-57.el10
grub2-tools-minimal-1:2.12-57.el10
gssproxy-0.9.2-10.el10
gzip-1.13-4.el10
hostname-3.23-14.el10
hwdata-0.379-10.10.el10
ignition-2.27.0-2.el10
ignition-grub-2.27.0-2.el10
ima-evm-utils-1.6.2-6.el10
info-7.1-6.el10
inih-58-3.el10
intel-gpu-firmware-20260812-27.el10
ipcalc-1.0.3-12.el10
iproute-7.0.0-2.el10
iproute-tc-7.0.0-2.el10
iptables-libs-1.8.11-16.el10
iptables-nft-1.8.11-16.el10
iputils-20240905-5.el10
irqbalance-2:1.9.4-6.el10
iscsi-initiator-utils-6.2.1.11-4.git4b3e853.el10
iscsi-initiator-utils-iscsiuio-6.2.1.11-4.git4b3e853.el10
isns-utils-libs-0.103-2.el10
jansson-2.14-3.el10
jose-14-102.el10
jq-1.7.1-13.el10
json-c-0.18-3.el10
json-glib-1.8.0-5.el10
kbd-2.6.4-8.el10
kbd-legacy-2.6.4-8.el10
kbd-misc-2.6.4-8.el10
kdump-utils-1.0.61-2.el10
kernel-6.12.0-275.el10
kernel-core-6.12.0-275.el10
kernel-modules-6.12.0-275.el10
kernel-modules-core-6.12.0-275.el10
kernel-modules-extra-6.12.0-275.el10
kexec-tools-2.0.32-3.el10
keyutils-1.6.3-5.el10
keyutils-libs-1.6.3-5.el10
kmod-31-13.el10
kmod-libs-31-13.el10
kpartx-0.9.9-20.el10
krb5-libs-1.21.3-11.el10
less-661-3.el10
libacl-2.4.0-2.el10
libaio-0.3.112-1.el10
libarchive-3.7.7-11.el10
libassuan-2.5.6-6.el10
libattr-2.6.0-2.el10
libbasicobjects-0.1.1-58.el10
libblkid-2.40.2-23.el10
libbpf-2:1.7.0-2.el10
libcap-2.69-7.el10
libcap-ng-0.9.3-2.el10
libcbor-0.11.0-3.el10
libcollection-0.7.0-58.el10
libcom_err-1.47.1-5.el10
libcomps-0.1.21-3.el10
libconfig-1.7.3-10.el10
libcurl-minimal-8.12.1-7.el10
libdhash-0.5.0-58.el10
libdnf-0.73.1-17.el10
libdnf-plugin-subscription-manager-1.30.16-1.el10
libdrm-2.4.128-1.el10
libeconf-0.6.2-4.el10
libedit-3.1-52.20230828cvs.el10
libev-4.33-15.el10
libevent-2.1.13-1.el10
libfdisk-2.40.2-23.el10
libffi-3.4.4-10.el10
libfido2-1.14.0-7.el10
libgcc-14.4.1-3.el10
libgcrypt-1.11.0-7.el10
libgomp-14.4.1-3.el10
libgpg-error-1.50-2.el10
libibverbs-62.0-3.el10
libicu-74.2-5.el10
libidn2-2.3.7-3.el10
libini_config-1.3.1-58.el10
libipa_hbac-2.13.1-3.el10
libjcat-0.2.2-2.el10
libjose-14-102.el10
libkcapi-1.5.1-1.el10
libkcapi-hasher-1.5.1-1.el10
libkcapi-hmaccalc-1.5.1-1.el10
libksba-1.6.7-2.el10
libldb-4.24.5-101.el10
libluksmeta-10-1.el10
libmaxminddb-1.9.1-4.el10
libmicrohttpd-1:1.0.0-3.el10
libmnl-1.0.5-7.el10
libmodulemd-2.15.0-12.el10
libmount-2.40.2-23.el10
libmspack-0.10.1-0.14.alpha.el10
libndp-1.9-2.el10
libnet-1.3-7.el10
libnetfilter_conntrack-1.0.9-12.el10
libnfnetlink-1.0.2-3.el10
libnfsidmap-1:2.8.3-9.el10
libnftnl-1.3.0-3.el10
libnghttp2-1.68.0-6.el10
libnl3-3.11.0-1.el10
libnvme-1.16.2-1.el10
libpath_utils-0.2.1-58.el10
libpcap-14:1.10.4-8.el10
libpciaccess-0.16-16.el10
libpkgconf-2.1.0-3.el10
libpwquality-1.4.5-13.el10
libref_array-0.1.5-58.el10
librepo-1.19.0-1.el10
libseccomp-2.5.6-1.el10
libselinux-3.11-3.el10
libselinux-utils-3.11-3.el10
libsemanage-3.11-3.el10
libsepol-3.11-2.el10
libsmartcols-2.40.2-23.el10
libsmbclient-4.24.5-101.el10
libsolv-0.7.33-7.el10
libss-1.47.1-5.el10
libsss_certmap-2.13.1-3.el10
libsss_idmap-2.13.1-3.el10
libsss_nss_idmap-2.13.1-3.el10
libsss_sudo-2.13.1-3.el10
libstdc++-14.4.1-3.el10
libtalloc-2.4.4-100.el10
libtasn1-4.20.0-5.el10
libtdb-1.4.15-100.el10
libtevent-0.17.1-100.el10
libtirpc-1.3.5-1.el10
libtool-ltdl-2.4.7-14.el10
libunistring-1.1-10.el10
liburing-2.12-1.el10
libusb1-1.0.30-1.el10
libutempter-1.2.1-15.el10
libuuid-2.40.2-23.el10
libuv-1:1.52.1-1.el10
libverto-0.3.2-10.el10
libverto-libev-0.3.2-10.el10
libwbclient-4.24.5-101.el10
libxcrypt-4.4.36-10.el10
libxml2-2.12.5-15.el10
libxmlb-0.3.28-1.el10
libxslt-1.1.39-10.el10
libyaml-0.2.5-16.el10
libzstd-1.5.5-9.el10
linux-firmware-20260812-27.el10
linux-firmware-whence-20260812-27.el10
lldpad-1.1.1-4.gitf1dd9eb.el10
lmdb-libs-0.9.32-4.el10
logrotate-3.22.0-5.el10
lsof-4.98.0-7.el10
lua-libs-5.4.8-1.el10
luksmeta-10-1.el10
lvm2-10:2.03.41-3.el10
lvm2-libs-10:2.03.41-3.el10
lz4-libs-1.9.4-8.el10
lzo-2.10-14.el10
makedumpfile-1.7.8-2.el10
mdadm-4.6-1.el10
microcode_ctl-4:20260812-1.el10
mokutil-2:0.7.2-8.el10
mpdecimal-2.5.1-12.el10
mpfr-4.2.1-8.el10
nano-8.1-3.el10
ncurses-base-6.4-15.20240127.el10
ncurses-libs-6.4-15.20240127.el10
net-tools-2.0-0.73.20160912git.el10
netavark-4:2.1.0-1.el10
nettle-3.10.1-1.el10
newt-0.52.24-5.el10
nfs-utils-1:2.8.3-9.el10
nftables-1:1.1.5-6.el10
nmap-ncat-4:7.92-5.el10
nmstate-2.2.62-2.el10
npth-1.6-21.el10
nss-altfiles-2.23.0-6.el10
numactl-2.0.19-3.el10
numactl-libs-2.0.19-3.el10
numad-0.5-50.20251104git.el10
nvidia-gpu-firmware-20260812-27.el10
nvme-cli-2.16-3.el10
oniguruma-6.9.9-7.el10
open-vm-tools-13.1.0-1.el10
openldap-2.6.13-1.el10
openshift-clients-5.0.0-202610221550.p2.g4b0a124.assembly.stream.el10
openshift-kubelet-5.0.0-202610251549.p2.gb8b2c80.assembly.stream.el10
openssh-9.9p1-33.el10
openssh-clients-9.9p1-33.el10
openssh-server-9.9p1-33.el10
openssl-1:3.5.8-1.el10
openssl-fips-provider-1:3.5.8-1.el10
openssl-libs-1:3.5.8-1.el10
openvswitch-selinux-extra-policy-1.0-36.el10s
openvswitch3.5-3.5.3-5.el10s
os-prober-1.81-9.el10
ose-aws-ecr-image-credential-provider-5.0.0-202610221550.p2.g278e8c0.assembly.stream.el10
ose-azure-acr-image-credential-provider-5.0.0-202610221550.p2.g95f0a12.assembly.stream.el10
ose-crio-credential-provider-5.0.0-202610221550.p2.g83d4961.assembly.stream.el10
ose-gcp-gcr-image-credential-provider-5.0.0-202610221550.p2.g51c3264.assembly.stream.el10
ostree-2026.4-1.el10
ostree-grub2-2026.4-1.el10
ostree-libs-2026.4-1.el10
p11-kit-0.26.4-1.el10
p11-kit-trust-0.26.4-1.el10
pam-1.6.1-11.el10
pam-libs-1.6.1-11.el10
passt-0^20260728.gf8df3f1-1.el10
passt-selinux-0^20260728.gf8df3f1-1.el10
pciutils-3.13.0-6.el10
pciutils-libs-3.13.0-6.el10
pcre2-10.44-1.4.el10
pcre2-syntax-10.44-1.4.el10
pkgconf-2.1.0-3.el10
pkgconf-m4-2.1.0-3.el10
pkgconf-pkg-config-2.1.0-3.el10
podman-7:6.1.0-2.el10
podman-sequoia-0.4.0~pqc.3-1.el10
policycoreutils-3.11-1.el10
policycoreutils-python-utils-3.11-1.el10
polkit-125-6.el10
polkit-libs-125-6.el10
popt-1.19-9.el10
procps-ng-4.0.4-13.el10
protobuf-c-1.5.0-6.el10
psmisc-23.6-8.el10
python3-3.12.15-1.el10
python3-audit-4.2.1-3.el10
python3-charset-normalizer-3.4.2-1.el10
python3-cloud-what-1.30.16-1.el10
python3-dateutil-1:2.9.0.post0-1.el10
python3-dbus-1.3.2-8.el10
python3-decorator-5.1.1-12.el10
python3-distro-1.9.0-5.el10
python3-dnf-4.20.0-28.el10
python3-dnf-plugin-versionlock-4.7.0-12.el10
python3-dnf-plugins-core-4.7.0-12.el10
python3-file-magic-5.45-12.el10
python3-gobject-base-3.46.0-7.el10
python3-gobject-base-noarch-3.46.0-7.el10
python3-hawkey-0.73.1-17.el10
python3-idna-3.7-6.el10
python3-iniparse-0.5-10.el10
python3-inotify-0.9.6-36.el10
python3-libcomps-0.1.21-3.el10
python3-libdnf-0.73.1-17.el10
python3-librepo-1.19.0-1.el10
python3-libs-3.12.15-1.el10
python3-libselinux-3.11-3.el10
python3-libsemanage-3.11-3.el10
python3-packaging-24.2-2.el10
python3-pexpect-4.9.0-6.el10
python3-pip-wheel-23.3.2-11.el10
python3-policycoreutils-3.11-1.el10
python3-ptyprocess-0.7.0-9.el10
python3-pyyaml-6.0.1-19.el10
python3-requests-2.32.4-1.el10
python3-rpm-4.19.1.1-25.el10
python3-setools-4.7.1-1.1.el10
python3-setuptools-69.0.3-12.el10
python3-six-1.16.0-16.el10
python3-subscription-manager-rhsm-1.30.16-1.el10
python3-systemd-235-11.el10
python3-urllib3-1.26.19-4.el10
qemu-guest-agent-18:11.1.0-1.el10
quota-1:4.09-10.el10
quota-nls-1:4.09-10.el10
rdma-core-62.0-3.el10
readline-8.2-11.el10
rpcbind-1.2.9-1.el10
rpm-4.19.1.1-25.el10
rpm-build-libs-4.19.1.1-25.el10
rpm-libs-4.19.1.1-25.el10
rpm-ostree-2026.3-2.el10
rpm-ostree-libs-2026.3-2.el10
rpm-plugin-audit-4.19.1.1-25.el10
rpm-plugin-selinux-4.19.1.1-25.el10
rpm-plugin-syslog-4.19.1.1-25.el10
rpm-sequoia-1.10.2.3-1.el10
rpm-sign-libs-4.19.1.1-25.el10
rsync-3.4.4-1.el10
samba-client-libs-4.24.5-101.el10
samba-common-4.24.5-101.el10
samba-core-libs-4.24.5-101.el10
samba-ndr-libs-4.24.5-101.el10
sed-4.9-5.el10
selinux-policy-42.1.27-2.el10
selinux-policy-targeted-42.1.27-2.el10
setup-2.14.5-7.el10
sg3_utils-1.48-11.el10
sg3_utils-libs-1.48-11.el10
shadow-utils-2:4.15.0-13.el10
shadow-utils-subid-2:4.15.0-13.el10
shared-mime-info-2.3-8.el10
shim-x64-16.1-1.el10
skopeo-3:1.24.0-2.el10
slang-2.3.3-8.el10
snappy-1.1.10-7.el10
socat-1.7.4.4-9.el10
sos-4.11.2-6.el10.2
sqlite-libs-3.46.1-6.el10
ssh-key-dir-0.1.4-9.el10
sssd-2.13.1-3.el10
sssd-ad-2.13.1-3.el10
sssd-client-2.13.1-3.el10
sssd-common-2.13.1-3.el10
sssd-common-pac-2.13.1-3.el10
sssd-ipa-2.13.1-3.el10
sssd-krb5-2.13.1-3.el10
sssd-krb5-common-2.13.1-3.el10
sssd-ldap-2.13.1-3.el10
sssd-nfs-idmap-2.13.1-3.el10
sssd-proxy-2.13.1-3.el10
stalld-1.26.3-1.el10
strace-6.12-3.el10
subscription-manager-1.30.16-1.el10
subscription-manager-rhsm-certificates-20220623-6.el10
sudo-1.9.17-13.p2.el10
systemd-257-34.el10
systemd-journal-remote-257-34.el10
systemd-libs-257-34.el10
systemd-pam-257-34.el10
systemd-udev-257-34.el10
tar-2:1.35-13.el10
tmux-3.3a-14.20230918gitb202a2f.el10
toolbox-0.3-3.el10
tpm2-tools-5.7-6.el10
tpm2-tss-4.1.3-6.el10
tpm2-tss-fapi-4.1.3-6.el10
tzdata-2026e-1.el10
unbound-anchor-1.26.1-2.el10
unbound-libs-1.26.1-2.el10
userspace-rcu-0.14.0-7.el10
util-linux-2.40.2-23.el10
util-linux-core-2.40.2-23.el10
vim-data-2:9.1.083-24.el10
vim-minimal-2:9.1.083-24.el10
virt-what-1.27-3.el10
which-2.21-44.el10
xfsprogs-6.16.0-1.el10
xmlsec1-1:1.2.39-3.el10
xmlsec1-openssl-1:1.2.39-3.el10
xz-1:5.6.2-5.el10
xz-libs-1:5.6.2-5.el10
zlib-ng-compat-2.2.3-3.el10
zram-generator-1.1.2-14.el10
zstd-1.5.5-9.el10

Changed:

afterburn 5.10.0-2.el10 → 5.11.0-1.el10
afterburn-dracut 5.10.0-2.el10 → 5.11.0-1.el10
amd-gpu-firmware 20260812-26.el10 → 20260812-27.el10
amd-ucode-firmware 20260812-26.el10 → 20260812-27.el10
bind-libs 32:9.18.33-19.el10 → 32:9.18.33-28.el10
bind-license 32:9.18.33-19.el10 → 32:9.18.33-28.el10
bind-utils 32:9.18.33-19.el10 → 32:9.18.33-28.el10
bootc 1.16.7-1.el10 → 1.16.13-1.el10
bsdtar 3.7.7-10.el10 → 3.7.7-11.el10
c-ares 1.34.6-4.el10 → 1.34.8-1.el10
checkpolicy 3.11-1.el10 → 3.11-2.el10
cifs-utils 7.6-2.el10 → 7.7-2.el10
containers-common 6:6.0-2.el10 → 6:6.0-3.el10
containers-common-extra 6:6.0-2.el10 → 6:6.0-3.el10
coreos-installer 0.26.0-1.el10 → 0.27.0-2.el10
coreos-installer-bootinfra 0.26.0-1.el10 → 0.27.0-2.el10
coreutils 9.5-13.el10 → 9.5-14.el10
coreutils-common 9.5-13.el10 → 9.5-14.el10
crun 1.29.1-1.el10 → 1.30.1-1.el10
curl 8.12.1-6.el10 → 8.12.1-7.el10
dbus-broker 36-4.el10 → 36-5.el10
device-mapper-multipath 0.9.9-19.el10 → 0.9.9-20.el10
device-mapper-multipath-libs 0.9.9-19.el10 → 0.9.9-20.el10
dnf 4.20.0-27.el10 → 4.20.0-28.el10
dnf-data 4.20.0-27.el10 → 4.20.0-28.el10
dnsmasq 2.90-7.el10 → 2.90-8.el10
dracut 107-10.el10 → 107-11.el10
dracut-network 107-10.el10 → 107-11.el10
dracut-squash 107-10.el10 → 107-11.el10
expat 2.7.3-2.el10 → 2.7.3-4.el10
gawk 5.3.0-6.el10 → 5.3.0-7.el10
gdbm 1:1.23-14.el10 → 1:1.26-15.el10
gdbm-libs 1:1.23-14.el10 → 1:1.26-15.el10
glib2 2.80.4-15.el10 → 2.80.4-22.el10
glibc 2.39-136.el10 → 2.39-141.el10
glibc-common 2.39-136.el10 → 2.39-141.el10
glibc-gconv-extra 2.39-136.el10 → 2.39-141.el10
glibc-minimal-langpack 2.39-136.el10 → 2.39-141.el10
gnutls 3.8.10-4.el10 → 3.8.10-5.el10
grub2-common 1:2.12-55.el10 → 1:2.12-57.el10
grub2-efi-x64 1:2.12-55.el10 → 1:2.12-57.el10
grub2-pc 1:2.12-55.el10 → 1:2.12-57.el10
grub2-pc-modules 1:2.12-55.el10 → 1:2.12-57.el10
grub2-tools 1:2.12-55.el10 → 1:2.12-57.el10
grub2-tools-minimal 1:2.12-55.el10 → 1:2.12-57.el10
gzip 1.13-3.el10 → 1.13-4.el10
ignition 2.26.0-4.el10 → 2.27.0-2.el10
ignition-grub 2.26.0-4.el10 → 2.27.0-2.el10
intel-gpu-firmware 20260812-26.el10 → 20260812-27.el10
kbd 2.6.4-7.el10 → 2.6.4-8.el10
kbd-legacy 2.6.4-7.el10 → 2.6.4-8.el10
kbd-misc 2.6.4-7.el10 → 2.6.4-8.el10
kernel 6.12.0-260.el10 → 6.12.0-275.el10
kernel-core 6.12.0-260.el10 → 6.12.0-275.el10
kernel-modules 6.12.0-260.el10 → 6.12.0-275.el10
kernel-modules-core 6.12.0-260.el10 → 6.12.0-275.el10
kernel-modules-extra 6.12.0-260.el10 → 6.12.0-275.el10
kpartx 0.9.9-19.el10 → 0.9.9-20.el10
libarchive 3.7.7-10.el10 → 3.7.7-11.el10
libblkid 2.40.2-20.el10 → 2.40.2-23.el10
libcurl-minimal 8.12.1-6.el10 → 8.12.1-7.el10
libdnf-plugin-subscription-manager 1.30.15-1.el10 → 1.30.16-1.el10
libevent 2.1.12-16.el10 → 2.1.13-1.el10
libfdisk 2.40.2-20.el10 → 2.40.2-23.el10
libgcc 14.4.1-2.el10 → 14.4.1-3.el10
libgomp 14.4.1-2.el10 → 14.4.1-3.el10
libipa_hbac 2.13.1-2.el10 → 2.13.1-3.el10
libkcapi 1.5.0-3.el10 → 1.5.1-1.el10
libkcapi-hasher 1.5.0-3.el10 → 1.5.1-1.el10
libkcapi-hmaccalc 1.5.0-3.el10 → 1.5.1-1.el10
libmount 2.40.2-20.el10 → 2.40.2-23.el10
libpcap 14:1.10.4-7.el10 → 14:1.10.4-8.el10
libselinux 3.11-1.el10 → 3.11-3.el10
libselinux-utils 3.11-1.el10 → 3.11-3.el10
libsemanage 3.11-1.el10 → 3.11-3.el10
libsepol 3.11-1.el10 → 3.11-2.el10
libsmartcols 2.40.2-20.el10 → 2.40.2-23.el10
libsolv 0.7.33-6.el10 → 0.7.33-7.el10
libsss_certmap 2.13.1-2.el10 → 2.13.1-3.el10
libsss_idmap 2.13.1-2.el10 → 2.13.1-3.el10
libsss_nss_idmap 2.13.1-2.el10 → 2.13.1-3.el10
libsss_sudo 2.13.1-2.el10 → 2.13.1-3.el10
libstdc++ 14.4.1-2.el10 → 14.4.1-3.el10
libuuid 2.40.2-20.el10 → 2.40.2-23.el10
linux-firmware 20260812-26.el10 → 20260812-27.el10
linux-firmware-whence 20260812-26.el10 → 20260812-27.el10
makedumpfile 1.7.8-1.el10 → 1.7.8-2.el10
mdadm 4.4-4.el10 → 4.6-1.el10
microcode_ctl 4:20260210-1.el10 → 4:20260812-1.el10
mokutil 2:0.7.2-5.el10 → 2:0.7.2-8.el10
netavark 4:2.0.0-2.el10 → 4:2.1.0-1.el10
nmstate 2.2.61-2.el10 → 2.2.62-2.el10
nvidia-gpu-firmware 20260812-26.el10 → 20260812-27.el10
nvme-cli 2.16-2.el10 → 2.16-3.el10
openshift-clients 5.0.0-202608132118.p2.g4b0a124.assembly.stream.el10 → 5.0.0-202610221550.p2.g4b0a124.assembly.stream.el10
openshift-kubelet 5.0.0-202608140807.p2.g7b29fb0.assembly.stream.el10 → 5.0.0-202610251549.p2.gb8b2c80.assembly.stream.el10
openssh 9.9p1-29.el10 → 9.9p1-33.el10
openssh-clients 9.9p1-29.el10 → 9.9p1-33.el10
openssh-server 9.9p1-29.el10 → 9.9p1-33.el10
openssl 1:3.5.7-3.el10 → 1:3.5.8-1.el10
openssl-fips-provider 1:3.5.7-3.el10 → 1:3.5.8-1.el10
openssl-libs 1:3.5.7-3.el10 → 1:3.5.8-1.el10
ose-aws-ecr-image-credential-provider 5.0.0-202607281540.p2.g278e8c0.assembly.stream.el10 → 5.0.0-202610221550.p2.g278e8c0.assembly.stream.el10
ose-azure-acr-image-credential-provider 5.0.0-202608060825.p2.gb99e4ce.assembly.stream.el10 → 5.0.0-202610221550.p2.g95f0a12.assembly.stream.el10
ose-crio-credential-provider 5.0.0-202603041733.p2.g83d4961.assembly.stream.el10 → 5.0.0-202610221550.p2.g83d4961.assembly.stream.el10
ose-gcp-gcr-image-credential-provider 5.0.0-202608040132.p2.g51c3264.assembly.stream.el10 → 5.0.0-202610221550.p2.g51c3264.assembly.stream.el10
ostree 2026.3-1.el10 → 2026.4-1.el10
ostree-grub2 2026.3-1.el10 → 2026.4-1.el10
ostree-libs 2026.3-1.el10 → 2026.4-1.el10
pcre2 10.44-1.el10.3 → 10.44-1.4.el10
pcre2-syntax 10.44-1.el10.3 → 10.44-1.4.el10
podman 7:6.1.0-1.el10 → 7:6.1.0-2.el10
popt 1.19-8.el10 → 1.19-9.el10
python3 3.12.13-3.el10 → 3.12.15-1.el10
python3-cloud-what 1.30.15-1.el10 → 1.30.16-1.el10
python3-dnf 4.20.0-27.el10 → 4.20.0-28.el10
python3-libs 3.12.13-3.el10 → 3.12.15-1.el10
python3-libselinux 3.11-1.el10 → 3.11-3.el10
python3-libsemanage 3.11-1.el10 → 3.11-3.el10
python3-setools 4.7.0-1.el10 → 4.7.1-1.1.el10
python3-subscription-manager-rhsm 1.30.15-1.el10 → 1.30.16-1.el10
qemu-guest-agent 18:10.1.0-26.el10 → 18:11.1.0-1.el10
rpcbind 1.2.9-0.el10 → 1.2.9-1.el10
rpm-ostree 2026.2-2.el10 → 2026.3-2.el10
rpm-ostree-libs 2026.2-2.el10 → 2026.3-2.el10
selinux-policy 42.1.26-1.el10 → 42.1.27-2.el10
selinux-policy-targeted 42.1.26-1.el10 → 42.1.27-2.el10
sg3_utils 1.48-10.el10 → 1.48-11.el10
sg3_utils-libs 1.48-10.el10 → 1.48-11.el10
skopeo 3:1.24.0-1.el10 → 3:1.24.0-2.el10
sos 4.11.2-5.el10 → 4.11.2-6.el10.2
sssd 2.13.1-2.el10 → 2.13.1-3.el10
sssd-ad 2.13.1-2.el10 → 2.13.1-3.el10
sssd-client 2.13.1-2.el10 → 2.13.1-3.el10
sssd-common 2.13.1-2.el10 → 2.13.1-3.el10
sssd-common-pac 2.13.1-2.el10 → 2.13.1-3.el10
sssd-ipa 2.13.1-2.el10 → 2.13.1-3.el10
sssd-krb5 2.13.1-2.el10 → 2.13.1-3.el10
sssd-krb5-common 2.13.1-2.el10 → 2.13.1-3.el10
sssd-ldap 2.13.1-2.el10 → 2.13.1-3.el10
sssd-nfs-idmap 2.13.1-2.el10 → 2.13.1-3.el10
sssd-proxy 2.13.1-2.el10 → 2.13.1-3.el10
subscription-manager 1.30.15-1.el10 → 1.30.16-1.el10
sudo 1.9.17-9.p2.el10 → 1.9.17-13.p2.el10
systemd 257-32.el10 → 257-34.el10
systemd-journal-remote 257-32.el10 → 257-34.el10
systemd-libs 257-32.el10 → 257-34.el10
systemd-pam 257-32.el10 → 257-34.el10
systemd-udev 257-32.el10 → 257-34.el10
tar 2:1.35-11.el10 → 2:1.35-13.el10
tzdata 2026c-1.el10 → 2026e-1.el10
unbound-anchor 1.26.0-1.el10 → 1.26.1-2.el10
unbound-libs 1.26.0-1.el10 → 1.26.1-2.el10
util-linux 2.40.2-20.el10 → 2.40.2-23.el10
util-linux-core 2.40.2-20.el10 → 2.40.2-23.el10
vim-data 2:9.1.083-22.el10 → 2:9.1.083-24.el10
vim-minimal 2:9.1.083-22.el10 → 2:9.1.083-24.el10
xz 1:5.6.2-4.el10 → 1:5.6.2-5.el10
xz-libs 1:5.6.2-4.el10 → 1:5.6.2-5.el10

Extensions

Full list (114 packages)

NetworkManager-libreswan-1.2.31-1.el10.x86_64
binutils-2.41-66.el10.x86_64
binutils-gold-2.41-66.el10.x86_64
bison-3.8.2-9.el10.x86_64
cmake-filesystem-3.31.8-1.el10.x86_64
cpp-14.4.1-3.el10.x86_64
elfutils-debuginfod-client-0.195-1.el10.x86_64
elfutils-libelf-devel-0.195-1.el10.x86_64
flex-2.6.4-19.el10.x86_64
gcc-14.4.1-3.el10.x86_64
glibc-devel-2.39-141.el10.x86_64
groff-base-1.23.0-10.el10.x86_64
kernel-6.12.0-275.el10.x86_64
kernel-core-6.12.0-275.el10.x86_64
kernel-devel-6.12.0-280.el10.x86_64
kernel-headers-6.12.0-280.el10.x86_64
kernel-modules-6.12.0-275.el10.x86_64
kernel-modules-core-6.12.0-275.el10.x86_64
kernel-modules-extra-6.12.0-275.el10.x86_64
kernel-rt-core-6.12.0-280.el10.x86_64
kernel-rt-devel-6.12.0-280.el10.x86_64
kernel-rt-modules-6.12.0-280.el10.x86_64
kernel-rt-modules-core-6.12.0-280.el10.x86_64
kernel-rt-modules-extra-6.12.0-280.el10.x86_64
krb5-pkinit-1.21.3-11.el10.x86_64
krb5-workstation-1.21.3-11.el10.x86_64
ldns-1.8.3-19.el10.x86_64
libkadm5-1.21.3-11.el10.x86_64
libmpc-1.3.1-7.el10.x86_64
libqb-2.0.8-6.el10.x86_64
libreswan-5.4.1-1.el10.x86_64
libreswan-minimal-5.4.1-1.el10.x86_64
libxcrypt-devel-4.4.36-10.el10.x86_64
libzstd-devel-1.5.5-9.el10.x86_64
lm_sensors-libs-3.6.0-20.el10.x86_64
m4-1.4.19-11.el10.x86_64
make-1:4.4.1-9.el10.x86_64
ncurses-6.4-15.20240127.el10.x86_64
nspr-4.39.0-5.el10.x86_64
nss-3.124.0-5.el10.x86_64
nss-softokn-3.124.0-5.el10.x86_64
nss-softokn-freebl-3.124.0-5.el10.x86_64
nss-sysinit-3.124.0-5.el10.x86_64
nss-tools-3.124.0-5.el10.x86_64
nss-util-3.124.0-5.el10.x86_64
openssl-devel-1:3.5.8-1.el10.x86_64
openvswitch3.5-ipsec-3.5.3-5.el10s.x86_64
pcp-conf-7.1.5-6.el10.x86_64
pcp-libs-7.1.5-6.el10.x86_64
perl-AutoLoader-5.74-515.el10.noarch
perl-B-1.89-515.el10.x86_64
perl-Carp-1.54-511.el10.noarch
perl-Class-Struct-0.68-515.el10.noarch
perl-Data-Dumper-2.189-512.el10.x86_64
perl-Digest-1.20-511.el10.noarch
perl-Digest-MD5-2.59-6.el10.x86_64
perl-DynaLoader-1.56-515.el10.x86_64
perl-Encode-4:3.21-511.el10.x86_64
perl-Errno-1.38-515.el10.x86_64
perl-Exporter-5.78-511.el10.noarch
perl-Fcntl-1.18-515.el10.x86_64
perl-File-Basename-2.86-515.el10.noarch
perl-File-Path-2.18-512.el10.noarch
perl-File-Temp-1:0.231.100-512.el10.noarch
perl-File-stat-1.14-515.el10.noarch
perl-FileHandle-2.05-515.el10.noarch
perl-Getopt-Long-1:2.58-3.el10.noarch
perl-Getopt-Std-1.14-515.el10.noarch
perl-HTTP-Tiny-0.088-512.el10.noarch
perl-IO-1.55-515.el10.x86_64
perl-IO-Socket-IP-0.42-512.el10.noarch
perl-IO-Socket-SSL-2.085-3.el10.noarch
perl-IPC-Open3-1.22-515.el10.noarch
perl-MIME-Base64-3.16-511.el10.x86_64
perl-Mozilla-CA-20231213-5.el10.noarch
perl-NDBM_File-1.17-515.el10.x86_64
perl-Net-SSLeay-1.94-9.el10.x86_64
perl-POSIX-2.20-515.el10.x86_64
perl-PathTools-3.91-512.el10.x86_64
perl-Pod-Escapes-1:1.07-511.el10.noarch
perl-Pod-Perldoc-3.28.01-512.el10.noarch
perl-Pod-Simple-1:3.45-511.el10.noarch
perl-Pod-Usage-4:2.03-511.el10.noarch
perl-Scalar-List-Utils-5:1.63-511.el10.x86_64
perl-SelectSaver-1.02-515.el10.noarch
perl-Socket-4:2.038-511.el10.x86_64
perl-Storable-1:3.32-511.el10.x86_64
perl-Symbol-1.09-515.el10.noarch
perl-Term-ANSIColor-5.01-512.el10.noarch
perl-Term-Cap-1.18-511.el10.noarch
perl-Text-ParseWords-3.31-511.el10.noarch
perl-Text-Tabs+Wrap-2024.001-511.el10.noarch
perl-Time-Local-2:1.350-511.el10.noarch
perl-URI-5.27-4.el10.noarch
perl-Unicode-Normalize-1.32-511.el10.x86_64
perl-base-2.27-515.el10.noarch
perl-constant-1.33-512.el10.noarch
perl-if-0.61.000-515.el10.noarch
perl-interpreter-4:5.40.2-515.el10.x86_64
perl-libnet-3.15-512.el10.noarch
perl-libs-4:5.40.2-515.el10.x86_64
perl-locale-1.12-515.el10.noarch
perl-mro-1.29-515.el10.x86_64
perl-overload-1.37-515.el10.noarch
perl-overloading-0.02-515.el10.noarch
perl-parent-1:0.241-512.el10.noarch
perl-podlators-1:5.01-511.el10.noarch
perl-vars-1.05-515.el10.noarch
protobuf-3.19.6-15.el10.x86_64
python3-openvswitch3.5-3.5.3-5.el10s.x86_64
sysstat-12.7.6-4.el10.x86_64
usbguard-1.1.4-2.el10.x86_64
usbguard-selinux-1.1.4-2.el10.noarch
zlib-ng-compat-devel-2.2.3-3.el10.x86_64

CentOS Stream CoreOS base layer: 10 upgraded from 10.0.20260819-0 to 10.0.20261014-0

OCPBUGS-127128: [release-5.0] Fix OKD/SCOS builds to use centos CoreOS base layer: streams #119

View changelog in Markdown or change previous release:

Source code for this page located on github