5.0.0-0.okd-scos-nightly-2026-05-21-144233

Download installer and client with:

oc adm release extract --tools registry.ci.openshift.org/origin/release-scos:5.0.0-0.okd-scos-nightly-2026-05-21-144233

Team Approvals:

Tests:

Blocking jobs
- aws Pending periodic-ci-openshift-release-main-okd-scos-5.0-e2e-aws-ovn
Informing jobs
- agent-single-node-ipv6 Succeeded periodic-ci-openshift-release-main-okd-scos-5.0-e2e-agent-single-node-ipv6
- aws-ovn-techpreview Pending periodic-ci-openshift-release-main-okd-scos-5.0-e2e-aws-ovn-techpreview
- aws-upgrade Pending periodic-ci-openshift-release-main-okd-scos-5.0-e2e-aws-ovn-upgrade
- aws-upgrade-minor Pending periodic-ci-openshift-release-main-okd-scos-5.0-upgrade-from-okd-scos-4.22-e2e-aws-ovn-upgrade
- gcp Failed periodic-ci-openshift-release-main-okd-scos-5.0-e2e-gcp
- vsphere Pending periodic-ci-openshift-release-main-okd-scos-5.0-e2e-vsphere-ovn

Upgrades from:

Changes from 5.0.0-0.okd-scos-nightly-2026-05-06-020259

Created: 2026-05-21 14:42:59 +0000 UTC

Image Digest: sha256:8c83fe2d6f05241a9f66e571a1739ff89f3075bb0414a61994111dba245d8530

Components

Kubectl 1.35.2
Kubernetes 1.35.3
Kubernetes Tests 1.35.1
CentOS Stream CoreOS 10 upgraded from 10.0.20260428-0 to 10.0.20260520-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
RouteExternalCertificate (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
EVPN (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
MutatingAdmissionPolicy (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
NetworkObservabilityInstall (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
OLMLifecycleAndCompatibility (0 tests)				Enabled (New)				Enabled (New)

agent-installer-api-server

NO-ISSUE: [master] Bump OCP versions: 4.21, 4.22 #10348
NO-ISSUE: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26 #10354
NO-ISSUE: Fix resource leak and inconsistency in manifest download #10322
MGMT-21834: deprecate supported-platforms endpoint #10122
NO-ISSUE: [master] Bump OCP versions: 4.14, 4.19, 4.18, 4.21, 4.20, 4.16 #10342
NO-ISSUE: fix typo: ‘occured’ -> ‘occurred’ in main.go error wraps #10316
NO-ISSUE: increase the timout waiting for assisted-image-service #10327
MGMT-20634: Revert mac-identifier and global DNS workarounds as RHEL-91250 and RHEL-72440 resolved #10318
ACM-33836: CVE-2026-35469 bump github.com/moby/spdystream #10314
NO-ISSUE: [master] Bump OCP versions: 4.22, 4.13, 4.16, 4.17 #10296
NO-ISSUE: [master] Bump OCP versions: 4.21, 4.20, 4.18, 4.19 #10287
MGMT-19930: upgrade PostgreSQL stack to pgx v5 and ocm-sdk-go v0.1.499 #10230
NO-ISSUE: [master] Bump OCP versions: 4.21 #10284
Full changelog

agent-installer-node-agent

NO-ISSUE: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26 #1461
NO-ISSUE: Upgrade linter #1453
Full changelog

agent-installer-ui

Bump ws from 8.18.3 to 8.20.1 (#3726) #3726
fix monted pull secret parsing (#3692) #3692
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.9-1778675823 (#3720) #3720
chore(deps): update dependency qs to ^6.15.2 (#3719) #3719
chore(deps): update konflux references (#3718) #3718
chore(deps): update dependency dpdm to v4 (#3555) #3555
Implement useAgents hook for the CIM wizard (#3711) #3711
Ugrade axios to 1.15.2 (#3710) #3710
chore(deps): update dependency qs to ^6.15.1 (#3678) #3678
chore(deps): update dependency eslint to ^8.57.1 (#3677) #3677
chore(deps): update konflux references (#3707) #3707
chore(deps): update dependency redux to ^4.2.1 (#3708) #3708
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.9-1778171507 (#3709) #3709
Bump fast-uri from 3.1.0 to 3.1.2 (#3706) #3706
OCPBUGS-84038 | [Below the sea UI] Lack of visual feedback (spinner) on disabled “Next” button during background validation (#3687) #3687
MGMT-23490: Refactor Troubleshooting Web Console (#3688) #3688
Bump basic-ftp from 5.3.0 to 5.3.1 (#3698) #3698
Bump ip-address from 7.1.0 to 10.1.1 (#3689) #3689
Read from aipVIPs and ingressVIPs in getClusterProperties function (#3661) #3661
Memoize the wizard footer on CIM Review step (#3686) #3686
MGMT-19002: [nmstate] UI form view missing autoconf field for ipv6 (#3681) #3681
Full changelog

agent-installer-utils

OCPBUGS-86036: Filter out link-local IPv6 addresses #305
OCPBUGS-85524: update konflux references #286
Full changelog

apiserver-network-proxy

CNTRLPLANE-3380: Merge https://github.com/kubernetes-sigs/apiserver-network-proxy:master (588e629) into main #109
CNTRLPLANE-3380: Update OWNERS with HyperShift core team #107
Full changelog

aws-cloud-controller-manager

OCPBUGS-85643: UPSTREAM: <drop>: bump google.golang.org/grpc to v1.79.3 #154
Full changelog

aws-cluster-api-controllers

OCPBUGS-85567: Bump github.com/go-jose/go-jose/v4 to 4.1.4 #607
NO-JIRA: manifests-gen: scope provider webhooks to capi namespace #605
Full changelog

aws-ebs-csi-driver

NO-ISSUE: UPSTREAM: 2911: CVE-2026-33186: bump google.golang.org/grpc v1.80.0 #315
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-85457: Add init container for Manila node daemonset #552
OCPBUGS-84052: Mount writable /tmp in SMB CSI driver #545
Full changelog

aws-kms-encryption-provider

CNTRLPLANE-3380: Update OWNERS with HyperShift core team #45
Full changelog

aws-machine-controllers

OCPBUGS-83873: Changed timeout for node ready logic in OTE #185
Full changelog

aws-node-termination-handler

CNTRLPLANE-3380: Update OWNERS with HyperShift core team #7
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-85641, OCPBUGS-85642: UPSTREAM: <drop>: bump google.golang.org/grpc to v1.79.3 #184
Full changelog

azure-cluster-api-controllers

NO-JIRA: manifests-gen: scope provider webhooks to capi namespace #387
Full changelog

azure-disk-csi-driver

OCPBUGS-78197: check for node name in waitForDiskManagedByTobeRemoved #144
Full changelog

azure-kms-encryption-provider

CNTRLPLANE-3380: Update OWNERS with HyperShift core team #35
CNTRLPLANE-3204: feat: add workload identity support to Azure KMS plugin #33
Full changelog

baremetal-cluster-api-controllers

NO-JIRA: manifests-gen: scope provider webhooks to capi namespace #79
Full changelog

baremetal-installer, installer, installer-artifacts

CORS-4005: refactor worker manifest serialization #10407
OCPEDGE-2115: types: support MAC address as alternative identifier for fencing credential #10513
METAL-1731: baremetal: Add coreos.openshift.io/stream label to BMH and hostSelector #10502
OCPBUGS-78126: baremetal: fix gather bootstrap failing with provisioningNetwork Disabled #10395
SPLAT-2452: Add SetSecurityGroups IAM permission to master nodes for BYO SG support for AWS NLBs #10512
MCO-2164: use machine-config-osimagestream to avoid hard-coding image tag names #10416
no-jira: images: bump UPI image dependencies to 4.22 #10538
MCO-2200: refactored node-joiner to use embedded rhcos data #10537
OCPBUGS-79536: Removing AWS security group OVNDB ports as they are no longer used #10441
OCPBUGS-85232: PowerVS: Add port 80 security group rule #10541
no-jira: tests: verify AWS instance type minimum cpu and mem requirement tests #10536
NO-JIRA: pkg/types/nutanix: warn about unused context #10430
SPLAT-2710: Added vSphere day 2 support #10529
OCPBUGS-67159: openstack: Reserve addresses for load balancer #10375
Full changelog

cli, cli-artifacts, deployer, tools

NO-JIRA: Bump go-jose dependency #2269
NO-JIRA: Making oc cli case blocking #2260
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cloud-credential-operator

OCPBUGS-82165: Add retry logic for concurrent IAM policy changes in GCP #1014
OCPBUGS-58181: Fix nil pointer dereference in ensureRolesAssignedToManagedIdentity #987
CCO-683: Remove go-autorest dependency for Azure Stack Cloud configuration #1024
CCO-845: use AlwaysAllow UnhealthyPodEvictionPolicy option in PDBs #1019
Full changelog

cluster-authentication-operator

NO-JIRA: Bump auth with latest library-go changes #900
CNTRLPLANE-3210: Refactor externaloidc controller to support different configuration generation logic #893
CNTRLPLANE-3364: add the kms suite and migrate the kms tests of auth-o to ote #895
CNTRLPLANE-3237: Bump library-go and sync plugin changes #896
CNTRLPLANE-3237: Bump library-go and sync encryption tests with APIServerEncryption struct change #894
CNTRLPLANE-3431: enable tls config injection #892
NO-JIRA: Bump latest library-go changes #890
OCPBUGS-69977: Fix OAuth page showing OKD branding instead of OpenShift #887
Full changelog

cluster-autoscaler-operator

AUTOSCALE-660: add enforce node group min size flag #374
Full changelog

cluster-baremetal-operator

OCPBUGS-85824: Fix empty IRONIC_BASE_URL #603
OCPBUGS-85496: Fix webhook to validate the actual admission request object #601
Full changelog

cluster-capi-controllers

NO-JIRA: manifests-gen: scope provider webhooks to capi namespace #292
Full changelog

cluster-capi-operator

NO-JIRA: Allow sustaining engineering to self serve dependency updates #553
OCPBUGS-84815: fix: scope webhook to capi namespace, remove unused webhook endpoints #543
OCPCLOUD-2664: Update operatorstatus to write correct sub-Conditions #552
OCPCLOUD-3429: Mount provider images with image volumes #527
NO-JIRA: manifests-gen: scope provider webhooks to capi namespace #544
Full changelog

cluster-cloud-controller-manager-operator

OCPCLOUD-3436: use AlwaysAllow UnhealthyPodEvictionPolicy option in PDBs #457
Full changelog

cluster-config-api

MON-4579: Remove NodeSelector and Tolerations from NodeExporterConfig #2837
CORENET-6714: Enable Network Observability on Day 0 #2752
OCPBUGS-74511: remove RouteExternalCertificate feature gate #2693
CNTRLPLANE-3361: update vault kms plugin validation #2836
OCPSTRAT-3036: Promote MutatingAdmissionPolicy feature to Default #2832
OPRUN-4590: Add OLMLifecycleAndCompatibility feature gate #2824
CNTRLPLANE-3237: Rename KMSConfig Struct to KMSPluginConfig #2833
SRVKP-11558: remove deprecated k8s.io/api packages removed in v0.36.0 #2834
CORENET-6861: Promote EVPN Feature Gate #2799
Revert “OCPBUGS-83492: Allow :ref suffix in additionalLayerStores path for stargz-store to support lazy image pulling” #2823
Full changelog

cluster-config-operator

SPLAT-2747: Updated kube cloud config controller to react to feature gate updates #489
Full changelog

cluster-etcd-operator

NO-JIRA: Fixed spelling in files and file names #1624
OCPEDGE-2604, OCPEDGE-2605: feat: add update-fencing-credentials.sh script for TNF fencing credentials rotation #1611
CNTRLPLANE-3392: Migrating etcd otp cases to ote #1612
Full changelog

cluster-image-registry-operator

NO-JIRA: fix flaky TestGlobalTLSCopy unit test #1341
OCPBUGS-84725: Fix stale config cache causing incorrect deployment #1329
Full changelog

cluster-ingress-operator

OCPBUGS-83923: Update grpc-go and x/net #1447
NE-2662: use AlwaysAllow UnhealthyPodEvictionPolicy option in PDBs #1431
OCPBUGS-80966: Fix malformed PEM bundle when tls.crt lacks trailing newline #1405
OCPBUGS-84773: Allow host network connections to the ingress canary #1430
Full changelog

cluster-kube-apiserver-operator

NO-JIRA: Add KMS dummy case #2161
NO-JIRA: Bump latest library-go changes #2160
CNTRLPLANE-3238: Add New kms suite #2156
CNTRLPLANE-3237: Bump library-go and sync plugin changes #2155
CNTRLPLANE-3237: pull https://github.com/openshift/library-go/pull/2220 #2150
OCPSTRAT-3036: Temporarily extend MutatingAdmissionPolicy runtime-config range to <1.37.0 #2148
CNTRLPLANE-3347: Migrate testKMSEncryptionOnOff to ote #2127
OCPBUGS-78016: Use SkipInClusterAuthenticationLookup in check-endpoints #2113
Full changelog

cluster-kube-scheduler-operator

WRKLDS-1126: e2e network policy tests #637
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-65984: add PodDisruptionBudget for migrator deployment #172
Full changelog

cluster-monitoring-operator

MON-4566: chore: add telemetry_report tool to help with telemetry change review #2885
MON-4529: manifests: merge PrometheusOperatorAdmissionWebhookConfig from ClusterMonitoring CRD #2923
OCPBUGS-85709: fix: use numeric ports in NetworkPolicies and add enforcement e2e test #2925
NO-JIRA: [bot] Synchronize versions of the downstream components #2921
OCPBUGS-83284: validate more CMO configmap fields #2877
MON-4524: MetricsServerConfig resources merge #2907
NO-JIRA: [bot] Synchronize versions of the downstream components #2918
Full changelog

cluster-network-operator

OCPBUGS-84519: Add terminationMessagePolicy to missing ovn-kubernetes containers #3004
NVIDIA-596: Enable dpu healthcheck #2941
TRT-2657: Revert “add remaining CNO NetworkPolicies” (#2959) #2999
OCPBUGS-83800: add remaining CNO NetworkPolicies #2959
NVIDIA-554: DPU-host mode: use ConfigMap for OVN feature enablement instead of per-node script gating #2944
Full changelog

cluster-node-tuning-operator

OCPBUGS-83865: Revert stalld backend to sched_debug #1515
NO-JIRA: E2E: remove obsolete ContainerRuntimeConfig runtime-switch test #1510
OCPBUGS-80952: perf: latency: compute memory resources dynamically #1517
OCPBUGS-62277: Requeue PerformanceStatus update when status write fails #1495
NO-JIRA: ote: embed extended testdata in cluster-node-tuning-operator-test-ext binary #1512
TRT-2659: Revert #1499 “NO-JIRA: ote: embed extended testdata in cluster-node-tuning-operator-test-ext binary” #1511
NO-JIRA: e2e: fix tuned deferred tests on Hypershift #1494
NO-JIRA: test/extended: scope oc process to NTO namespace #1508
NO-JIRA: ote: embed extended testdata in cluster-node-tuning-operator-test-ext binary #1499
Full changelog

cluster-olm-operator

OPRUN-4599: dynamically resolve catalog image tag from OCP release version #203
OCPBUGS-62517: Scale to replicas=2 and enable PDB on HighlyAvailable topology #202
Full changelog

cluster-openshift-apiserver-operator

NO-JIRA: Bump latest library-go changes #692
CNTRLPLANE-3364: add the kms suite and migrate the kms tests of oas-o to ote #690
CNTRLPLANE-3237: Bump library-go and sync encryption tests with APIServerEncryption struct change #689
NO-JIRA: Bump latest library-go changes #688
Full changelog

cluster-openshift-controller-manager-operator

CNTRLPLANE-2907: e2e network policy tests #428
Full changelog

cluster-version-operator

OTA-1935: pkg: Use risk.Source framework to feed Upgradeable #1368
OTA-1967: Take official CRDs from the OpenShift Lightspeed operator #1387
MON-4477: chore: add permissions on endpointslice to Prometheus Role and use serviceDiscoveryRole: EndpointSlice in ServiceMonitors #1305
Full changelog

console

NO-JIRA: Add eslint-plugin-no-barrel-files #16476
OCPBUGS-84214: Fix Shipwright detail pages crashing with React error #310 #16474
CONSOLE-5197: Improve Playwright artifact collection and add safety checks #16463
OCPBUGS-71878: Show empty state instead of 403 error for users without projects #16464
OCPBUGS-82505: Re-enable add-flow-ci.feature e2e tests disabled for createRoot adoption #16285
NO-JIRA: Update Console plugin SDK CHANGELOG files #16465
CONSOLE-5280: Migrate cluster-settings Cypress tests to Playwright #16444
OCPBUGS-81521: Adapt dashboard Prometheus polling interval based on query response time #16441
CONSOLE-5245: Install and configure eslint-plugin-playwright for e2e directory #16433
CONSOLE-5197: Collect Playwright test artifacts for Prow CI #16453
OCPBUGS-85649: bump gRPC-Go package #16442
OCPBUGS-82513: Enable Topology e2e tests #16273
CONSOLE-5200: add qa-verify skill for automated PR visual verification #16429
OCPBUGS-84669: Fix ProjectLink to update active namespace in Redux #16430
CONSOLE-5212: Fix ESM compatibility for Playwright e2e tests #16445
OCPBUGS-79521: Restore list page text and row filter functionality #16440
OCPBUGS-59404: Allow VolumeSnapshot restore when parent PVC is deleted #16447
OCPBUGS-83569: [main] CVE-2026-26996 Bump minimatch library #16301
CONSOLE-5211: Add Cypress-to-Playwright migration skills and context #16315
CONSOLE-5229: Enable RTL ESLint rules in Knative tests by removing file-level no-container / no-node-access suppressions #16405
CONSOLE-5197: Add Playwright E2E test infrastructure for Prow/CI #16374
CONSOLE-5034: Migrate tile-view-page and value-from-pair to TypeScript #16412
OCPBUGS-85242: Add Suspense boundary to LazyRoutePage for plugin routes #16409
OCPBUGS-77952: Fix devfile sample import by adding fallback for parent resolution failures #16149
OCPBUGS-70273: Prevent binary secret data corruption when editing #16053
OCPBUGS-65950: Update template whenever settings are updated #16143
CONSOLE-5212: Migrate Playwright setup to project dependencies #16408
CONSOLE-5285: remove corepack dep for build-(frontend/demos), bump yarn #16426
OCPBUGS-81518: Increase Resource Dropdown visible items cap to 250. #16398
CONSOLE-5273: Expose useToast in the SDK #16400
OCPBUGS-59353: Fix authentication redirect loop on repeated 401 responses #15814
CONSOLE-5015: Migrate NameValueEditor to TypeScript and PatternFly drag-drop #16406
NO-JIRA: Add approvers and reviewers to helm-plugin OWNERS #16361
OCPBUGS-85043: Remove @console imports from SDK dist #16399
OCPBUGS-77931: Loosen default img-src CSP #16388
OCPBUGS-84324: Update outdated documentation links and references #16362
CONSOLE-5212: Set up Playwright e2e test infrastructure #16320
OCPBUGS-84844: VSphere plugin changes broke i18n translations - missing strings in locales/en/ #16384
OCPBUGS-80940: Fix SDK publish workflow for Yarn Berry #16392
HELM-613: Reject basic auth over non-HTTPS for Helm chart repositories #16317
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-85650: bump gRPC-Go package #1156
MON-4510: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #1106
OCPBUGS-85060: feat: use 2 replicas for console on tnf #1151
Full changelog

coredns

OCPBUGS-83943: Bump gRPC to v1.79.3 to resolve CVE-2026-33186 #183
Full changelog

csi-driver-nfs

UPSTREAM-SYNC: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main #179
Full changelog

csi-external-snapshotter, csi-snapshot-controller

OCPBUGS-77492: UPSTREAM: 1392: Fix VolumeSnapshotContent deletion #207
Full changelog

etcd

OCPBUGS-85258: 5.0 rebase 3.6.11 #375
OCPBUGS-82495: 5.0/4.23 rebase 3.6.10 #368
Full changelog

gcp-cloud-controller-manager

OCPBUGS-85551, OCPBUGS-85552: Upgrade spdystream and grpc to fix CVEs #115
Full changelog

gcp-cluster-api-controllers

UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.12.0 (b9b055d) into master #295
OCPBUGS-85101: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.11.2 (14609a0) into master #273
NO-JIRA: manifests-gen: scope provider webhooks to capi namespace #292
Full changelog

gcp-pd-csi-driver

UPSTREAM: 2297: OCPBUGS-83423: Bump google.golang.org/grpc to v1.79.3 #121
Full changelog

haproxy-router

OCPBUGS-86168: Bump google.golang.org/grpc to v1.79.3 #777
Reapply “OCPBUGS-55506: Prevent startup failures due to name resolution” #677
OCPBUGS-77263: create self-signed crt if failing to read default #740
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-77243: test: skip private registry test #2621
OCPBUGS-78044: Improve WatchList test robustness #2622
Full changelog

hypershift

NO-JIRA: fix(e2e): use public multi-arch image for ARM64 karpenter test #8532
OCPBUGS-86238: set limits for aro.openshift.io/swift-nic in request overrides for ARO swift #8552
OCPBUGS-85351: fix(azure): prevent externalDNSDomain from shadowing cluster apps domain #8480
CNTRLPLANE-3371: Fix AllowedCIDRs e2e test for Route-based KAS #8469
NO-JIRA: build(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 in /hack/tools #8547
NO-JIRA: Update Konflux Tekton task bundles #8557
NO-JIRA: chore(deps): weekly dependabot consolidation #8464
CNTRLPLANE-3070: Support KMS on self-managed Azure without affecting ARO HCP #8088
OCPBUGS-59142: fix ValidReleaseImage condition message to show minor version #8519
NO-JIRA: Add onboarding guide for new HCP team members #8132
OCPBUGS-85011: fix(cpo): use check-first pattern for EBS CSI operator serving cert #8418
CNTRLPLANE-3329: Extend EFS-backed build cache to lint, verify, and envtest workflows #8495
NO-JIRA: ci(deps): bump cloudflare/wrangler-action from 3.15.0 to 4.0.0 #8524
OCPBUGS-85763: Fix metrics-proxy deployment failure due to dots in volume names #8530
GCP-636: feat(gcp): support for managing GCP OIDC discovery documents #8413
OCPBUGS-84307: Clarify –base-domain flag default behavior #8381
AUTOSCALE-681: various karpenter and karpenterupgrade test fixes #8510
CNTRLPLANE-3329: Replace actions/cache with EFS-backed build cache in unit tests #8494
OCPBUGS-85577: Update external-dns image from 1.1.0-3 to 1.2.1 #8506
OCPBUGS-77827: fix(api): add missing has() guards to servingCerts CEL validation rule #8331
CNTRLPLANE-3380: docs: add aws-node-termination-handler to repositories list #8514
OCPBUGS-85580: Fix webhook TLS failure after service-ca to self-managed cert migration #8504
build(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 in /hack/tools #8481
OCPBUGS-85344: Add version gates for 4.22 backward compatibility in e2e tests #8466
AUTOSCALE-681: remove TechPreviewNoUpgrade gate from karpenter upgrade test #8498
CNTRLPLANE-3329: Mount EFS-backed Go build cache PV on ARC runner pods #8493
NO-JIRA: docs: add repositories page listing team-owned repos #8505
CNTRLPLANE-3329: Add nightly CronJob to warm EFS-backed Go build cache #8496
CNTRLPLANE-3324: Restore non-obvious comments after gocyclo refactor #8487
AUTOSCALE-558: Expose KubeletConfig on OpenShiftEC2Nodeclass as structured fields + preserveunknown/overflow #8192
NO-JIRA: Fix docs deploy preview by replacing gh CLI with curl #8488
CNTRLPLANE-2946: Move AWS NLB annotation inside LoadBalancer strategy block #7993
OCPBUGS-78539: re-add crash toleration for dns-operator during upgrades #8483
CNTRLPLANE-3384: Remove unconditional low-quality log messages from controllers #8428
OCPBUGS-84971: Gate AWSDefaultSecurityGroupDeleted condition to AWS platform #8415
CNTRLPLANE-3324: Enable gocyclo linter and reduce cyclomatic complexity #8309
NO-JIRA: fix(karpenter): resolve HCP karpenter finalizer when AutoNode is disabled #8404
OCPBUGS-62177: verify cert revocation against all KAS pods #8263
NO-JIRA: Document CEL over webhooks policy for AI agents #8478
NO-JIRA: docs(kubevirt): add how-to for configuring VMs with JSON patches #8473
CNTRLPLANE-1741: Migrate gomaxprocs-webhook pipelines to use common-operator-build #7122
NO-JIRA: docs: update api-sme agent and api/AGENTS.md conventions #8477
OCPBUGS-81686: fix(authentication): use v2 auth validation for CEL and expression support. #8246
OCPBUGS-85084: fix(ci): use explicit lease in dependabot commit fix push #8476
OCPBUGS-75887: fix(inplaceupgrader): include node name in degraded upgrade error message #8244
NO-JIRA: fix(e2e): prevent agent unbinding and node reboots during backup/restore #8356
NO-JIRA: Update GHA docs for reusable workflow pattern #8453
GCP-413: add image registry v2 e2e tests for hosted clusters #8412
NO-JIRA: docs: make CLAUDE.md a symlink to AGENTS.md across the repo #8444
CNTRLPLANE-2778: feat(tooling): overhaul pr-report skill and Python script #7754
ACM-33601: use the latest ubi9 nginx image #8432
GCP-414: add image registry operational guide #8455
OCPBUGS-84528: clarify pull secret in-place update behavior and add CP watches #8327
OCPBUGS-84955: Add render-sensitive flag to hypershift install render #8436
OCPBUGS-84857: bump go builder and ubi images #8437
GCP-410: fix(gcp): add registry SA WIF binding for image registry GCS access #8445
CNTRLPLANE-3381: CPO: Surface cloud resource deletion timeout as a status condition #8426
OCPBUGS-85084: fix(ci): rewrite dependabot commit messages to pass gitlint #8435
NO-JIRA: docs: detail release branch e2e config steps in branch-process guide #8441
CNTRLPLANE-3222: Migrate self-managed Azure e2e tests to v2 Ginkgo framework #8204
GCP-412: add envtest cases for GCP imageRegistry CEL validation #8411
Full changelog

ibm-cloud-controller-manager

OCPBUGS-83587: bump google.golang.org grpc v1.79.3 #106
Full changelog

ibm-vpc-block-csi-driver

NO-JIRA: Bump gRPC library to v1.79.3 and replace golang.org/x/net/context with context #149
Full changelog

ibmcloud-cluster-api-controllers

NO-JIRA: manifests-gen: scope provider webhooks to capi namespace #160
Full changelog

insights-operator

OCPBUGS-85710: add trusted-ca-bundle to gatherin job #1289
CCXDEV-16348: tls metrics #1275
OCPBUGS-77351: fix: add terminationMessagePolicy to runtime extractor containers #1286
NO-JIRA: remove BaiyangZhou from OWNERS #1273
OCPBUGS-85201: Bump google.golang.org/grpc to v1.79.3 #1288
Full changelog

ironic-agent

NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #254
NO-ISSUE: Remove openstack repo workaround #249
Full changelog

keepalived-ipfailover

OCPBUGS-84344: yum.conf: omit docs, weak deps #231
Full changelog

machine-api-operator

OCPBUGS-85416: Enable actuators to set terminal failure on Exists and Update #1499
SPLAT-2745: Changed vSphere cloud config to be read from openshift-config-managed #1495
Full changelog

machine-config-operator

AGENT-1517: fix iri deletion test #6070
OCPBUGS-83987: Fix CVE-2026-33186 #6065
OCPBUGS-84814: Skip chrony-wait on first node join #5990
MCO-2273: MCO-2215: MCO-2183: Migrate remaining TCs from mco.go to MCO, units, kublet suite #6024
AGENT-1517: disable iri-registry service on IRI delete #6041
OCPBUGS-85237: Manually uncordoned nodes are not automatically re-cordoned #6028
OCPBUGS-15157: Replace wildcard permissions with explicit verbs and resources in MCC ClusterRole #6000
OCPBUGS-65645: Verify extension packages are installed #6010
OCPBUGS-79502: Enable AutoSizingReserved for Hypershift workers #5847
NO-JIRA: daemon: expand os image presence check #6005
MCO-2212: MCO-2213: Migrate mco_observability and mco_daemon test-suite #5875
OCPBUGS-63650: configure-ovs: copy lldp mode to br-ex port #5698
OCPBUGS-85498: BareMetal skew e2e fails patching provisioning CR after CBO webhook fix #6031
OCPBUGS-85497: only check password hash in /etc/shadow #6030
NO-JIRA: Add fix for ossImagestream status #6018
MCO-2025: OCP-88366 and add OCP-88814 for osImageStream with osImageURL #6014
OCPBUGS-83830: Apply password only if changes exist #5889
AGENT-1514: Add ML-KEM verification test for IRI registry #6003
OCPBUGS-84516: Add terminationMessagePolicy to build pod containers #5993
OCPBUGS-85117: Fix 2 flakes happening in the ocl test suite #6004
OCPBUGS-84842: Bootloader update attempt should be conditional #5907
OCPBUGS-75894: use --delete-if-present for karg removal #5914
OCPBUGS-84661: Fix wrong early exit during kubelet MCs regeneration #5898
Full changelog

machine-image-customization-controller

METAL-1730: Add stream selection for multi-version support #175
Full changelog

machine-os-images

METAL-1730: Add stream symlinks for multi-stream support #83
OCPBUGS-85476: Force rebuild for OCP 5.0 #87
Full changelog

monitoring-plugin

OU-1275: remove byte order mark from dashboard text #960
COO-1776: fix: throw error for unsupported dashboard level datasources #948
OU-1269: Update monitoring-console-plugin for 4.22 #923
OU-1281: show disabled project bar while loading #936
OU-1351: prevent namespace and project desync #933
OU-1315: reset queries when namespace changes in dev perspective #932
OU-1348: fix: panel actions index so they are visible on click #928
OU-1347: fix: avoid throwing error to fallback to global datasource #920
OU-1203: upgrade perses dependencies #914
Full changelog

multus-admission-controller

OCPBUGS-85053: Bump Go version to 1.25.0 for ML-KEM/PQC support #115
Full changelog

must-gather

no-jira: collect OS Image Stream resource #533
CNV-41714: Add a collector for basic virt related data #539
Full changelog

network-interface-bond-cni

NO-JIRA: Fix diverged git histories via upstream merge #108
Full changelog

network-tools

NO-ISSUE: Add myself back to the bug script #177
NO-JIRA: Add mattedallo, marty-power, taanyas as reviewers #172
NO-JIRA: Refresh list of team members #176
Full changelog

networking-console-plugin

CONSOLE-5218: Add project documentation and rewrite README #417
Full changelog

oauth-apiserver

CNTRLPLANE-2518: Add support for sourcing external claims from a source that requires client credential authentication #197
CNTRLPLANE-2516: feat: externaloidc: add support for externally sourcing claims #195
Full changelog

oauth-proxy

OCPBUGS-69836: Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART for 4.22 #341
Full changelog

oc-mirror

OCPBUGS-64640: remove environment setup output #1384
CLID-623: Encapsulate unit test data into tests/unit #1407
CLID-479: OTE migration #1375
NO-JIRA: Update README.md for Enclave Support link #1404
CLID-612: Move integration tests within oc-mirror #1400
Full changelog

olm-catalogd, olm-operator-controller

OPRUN-4607: Remove test-experimenal-e2e #732
NO-ISSUE: Synchronize From Upstream Repositories #733
NO-ISSUE: Synchronize From Upstream Repositories #730
OPRUN-4608: UPSTREAM: <carry>: Delete openshift/registry.Dockerfile #729
NO-ISSUE: Synchronize From Upstream Repositories #726
OPRUN-4607: Fix flags passed to test-experimental-e2e #723
OCPBUGS-85508: Synchronize From Upstream Repositories #725
NO-ISSUE: Synchronize From Upstream Repositories #724
NO-ISSUE: Synchronize From Upstream Repositories #722
OCPBUGS-62517: Set replicas=1, PDB, and pod anti-affinity for HA topology #709
Full changelog

openshift-controller-manager

CNF-23051: Migrate away from deprecated ioutil #422
NO-JIRA: Add control-plane-approvers to OWNERS #438
Full changelog

openstack-cluster-api-controllers

NO-JIRA: manifests-gen: scope provider webhooks to capi namespace #416
Full changelog

openstack-resource-controller

UPSTREAM-SYNC: Sync main with latest upstream (release-2.0) #36
UPSTREAM-SYNC:Merge https://github.com/k-orc/openstack-resource-controller:release-1.0 into main #20
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OPRUN-4610: Revert lifecycle server changes #1300
OCPBUGS-54790: Fix packageserver PDB annotation for HyperShift #1297
OPRUN-4588: use AlwaysAllow UnhealthyPodEvictionPolicy option in PDBs #1280
NO-ISSUE: Synchronize From Upstream Repositories #1298
OPRUN-4601: use resource-based RBAC for lifecycle-server auth #1290
OCPBUGS-84642: Synchronize From Upstream Repositories #1291
OPRUN-4597: Fix lifecycle-server readiness probe to allow empty index #1288
Full changelog

operator-marketplace

NO-ISSUE: Bump github.com/fsnotify/fsnotify from 1.9.0 to 1.10.1 #747
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.28.3 #746
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

NO-JIRA: Revert “OCPBUGS-61065: Adding ovndb-raft-functions.sh to ovnk image” #3192
NO-JIRA: DownStream Merge [05-07-2026] #3177
TRT-2652: Allow OTE info and list tests commands to work without KUBECONFIG #3170
NO-JIRA: DownStream Merge [04-30-2026] #3169
Full changelog

prometheus

OCPBUGS-62118: fix TLS client cert rotation when no CA is configured #312
Full changelog

prometheus-alertmanager

NO-ISSUE: remove ui/app/dist/.build_stamp #133
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

NO-ISSUE: [bot] Bump openshift/prometheus-operator to v0.91.0 #380
Full changelog

route-controller-manager

OCPBUGS-83892: Update grpc-go and x/net #88
Full changelog

stream-coreos, stream-coreos-extensions

NO-JIRA: Make build-args files use 5.0 version and revert repo names change #1936
NO-JIRA: Update to track 5.0 #1930
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

telemeter

OCPBUGS-85082: update google.golang.org/grpc #601
NO-ISSUE: add .coderabbit.yaml #603
NO-ISSUE: bump golangci-lint to v2.11.3 #602
NO-ISSUE: update OWNERS #604
Full changelog

tests

CNTRLPLANE-3428: tls fix HyperShift guest-side CO wait and Custom profile handling #31194
TRT-2669: Revert #31112 “NO-JIRA: Remove fixed bugs on CO conditions (2)” #31201
AGENT-1517: refactored the logic to filter IRI related MachineConfigs #31179
OPRUN-4569: test: remove OLMv1 OTE exceptions; scope OLMv0 exceptions to SNO #31172
NO-JIRA: Remove fixed bugs on CO conditions (2) #31112
OCPBUGS-85378: Fix OCP E2E test - Object count when exceed openshift.io/image-tags will ban to create new image references in the project #31155
NO-ISSUE: Automated - Update synthetic test data #31181
NO-JIRA: Fix flaky storage-admin e2e test #31180
CNTRLPLANE-3428: tls: introduce narrow target types and migrate test functions #31160
Revert “OCPBUGS-85363: Fixed flakiness of oc set image E2E tests” #31188
OCPBUGS-85370: Raise OpenStack operator watch limits #31154
OCPBUGS-85363: Fixed flakiness of oc set image E2E tests #31152
OCPBUGS-85058: monitortests: allow etcd CO blips during TNF jobs on two-node upgrades #31138
OCPBUGS-85486: stage the creation of test pods to minimize etcd impact #31164
OCPNODE-4505: Automation creation of OCP-57401 #31142
OCPBUGS-83623: fix: add distruption tolerance for DualReplica (two-node) topology #31127
OCPBUGS-85531: Fixed flakiness in OCP E2E tests - oc debug image stream #31168
Revert “OPRUN-4569: test: remove OTE exceptions for OLM” #31171
OCPNODE-4108: add E2E tests for upstream dra-example-driver #31064
OPRUN-4569: test: remove OTE exceptions for OLM #31150
OCPEDGE-2386: Add tnf_etcd_disruption test with 5 new etcd resilience tests. #30880
NO-JIRA: Improve graceful shutdown LB test output with more details of late requests #31158
OCPNODE-4047: Implement kubelet TLS 1.3 via KubeletConfig on workers #31016
NO-ISSUE: Automated - Update synthetic test data #31146
CNTRLPLANE-3374: remove multus exception from monitor test #31130
CNTRLPLANE-3428: tls: extract annotation and ConfigMap update helpers #31156
OCPBUGS-83580: Skip dev fuse test on runc runtime #31140
OCPBUGS-84516: remove openshift-machine-config-operator exemption from terminationMessagePolicy monitor #31120
CNTRLPLANE-3387: Update list of pending namespaces in the required-scc monitor test #31135
NO-ISSUE: improve error reporting in cpumetriccollector #31132
no-jira: tls: deduplicate ConfigMap helpers into standalone functions #31136
OCPBUGS-84500: Verify dynamic revision bump for etcd during kernel crash #30915
OCPNODE-3983: Add e2e tests for KubeletEnsureSecretPulledImages feature gate #31102
OCPNODE-4381: Migrate OCP-38271 from openshift-tests-private #30960
OCPBUGS-85087: Allow OVN-Kubernetes CIDROverlap pathological events #31131
NO-JIRA: Increase pathological event thresholds for API server rollout scenarios #31122
CNTRLPLANE-2554: Add ExternalOIDCWithUpstreamParity e2e tests #31028
: no-jira: tls: extract injectTLSAnnotation constant #31125
OCPSTRAT-3036: Update etcd test data for k8s 1.36 release #31113
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-83600: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.15.3 (e917f8e) into master #107
NO-JIRA: manifests-gen: scope provider webhooks to capi namespace #106
Full changelog

Node Image Info

Loading node image info, this may take a while ...

CentOS Stream CoreOS 10 (`stream-coreos`)

Package List

cri-o-1.35.2-1.el10s
kernel-6.12.0-229.el10
openshift-kubelet-5.0.0-202605090145.p2.gf9b62a6.assembly.stream.el10
systemd-257-25.el10

Full list (485 packages)

NetworkManager-1:1.56.1-1.el10
NetworkManager-cloud-setup-1:1.56.1-1.el10
NetworkManager-libnm-1:1.56.1-1.el10
NetworkManager-ovs-1:1.56.1-1.el10
NetworkManager-tui-1:1.56.1-1.el10
WALinuxAgent-udev-2.14.0.1-3.el10
aardvark-dns-2:1.17.0-1.el10
acl-2.3.2-4.el10
afterburn-5.10.0-1.el10
afterburn-dracut-5.10.0-1.el10
alternatives-1.30-2.el10
amd-gpu-firmware-20260508-23.el10
amd-ucode-firmware-20260508-23.el10
attr-2.5.2-5.el10
audit-4.0.3-5.el10
audit-libs-4.0.3-5.el10
audit-rules-4.0.3-5.el10
authselect-1.5.2-1.el10
authselect-libs-1.5.2-1.el10
avahi-libs-0.9~rc2-3.el10
azure-vm-utils-0.7.0-1.el10
basesystem-11-22.el10
bash-5.2.26-6.el10
bash-completion-1:2.11-16.el10
bind-libs-32:9.18.33-18.el10
bind-license-32:9.18.33-18.el10
bind-utils-32:9.18.33-18.el10
bootc-1.15.2-1.el10
bootupd-0.2.34-1.el10
bsdtar-3.7.7-8.el10
bubblewrap-0.10.0-3.el10
bzip2-1.0.8-25.el10
bzip2-libs-1.0.8-25.el10
c-ares-1.34.6-1.el10
ca-certificates-2025.2.80_v9.0.305-102.el10
catatonit-5:0.2.1-4.el10
centos-gpg-keys-10.0-21.el10
centos-release-cloud-1-1.el10s
centos-release-nfv-common-1-5.el10s
centos-release-virt-common-1-1.el10s
centos-stream-release-10.0-21.el10
centos-stream-repos-10.0-21.el10
checkpolicy-3.10-1.el10
chrony-4.8-2.el10
cifs-utils-7.5-2.el10
clevis-22-1.el10
clevis-dracut-22-1.el10
clevis-luks-22-1.el10
clevis-pin-tpm2-0.5.5-1.el10
clevis-systemd-22-1.el10
cloud-utils-growpart-0.33-11.el10
composefs-1.0.8-1.el10
composefs-libs-1.0.8-1.el10
conmon-3:2.2.1-3.el10
conmon-rs-0.6.6-2.el10s
console-login-helper-messages-0.21.3-10.el10
console-login-helper-messages-issuegen-0.21.3-10.el10
console-login-helper-messages-profile-0.21.3-10.el10
container-selinux-4:2.247.0-1.el10
containers-common-6:5.8-2.el10
containers-common-extra-6:5.8-2.el10
coreos-installer-0.26.0-1.el10
coreos-installer-bootinfra-0.26.0-1.el10
coreutils-9.5-7.el10
coreutils-common-9.5-7.el10
cpio-2.15-3.el10
cracklib-2.9.11-8.el10
cracklib-dicts-2.9.11-8.el10
cri-o-1.35.2-1.el10s
cri-tools-1.36.0-1.el10s
criu-4.2-3.el10
criu-libs-4.2-3.el10
crun-1.27-1.el10
crypto-policies-20260216-1.git0e54016.el10
crypto-policies-scripts-20260216-1.git0e54016.el10
cryptsetup-2.8.6-1.el10
cryptsetup-libs-2.8.6-1.el10
curl-8.12.1-6.el10
cyrus-sasl-gssapi-2.1.28-27.el10
cyrus-sasl-lib-2.1.28-27.el10
dbus-1:1.14.10-5.el10
dbus-broker-36-4.el10
dbus-common-1:1.14.10-5.el10
dbus-libs-1:1.14.10-5.el10
dbus-tools-1:1.14.10-5.el10
device-mapper-10:1.02.210-2.el10
device-mapper-event-10:1.02.210-2.el10
device-mapper-event-libs-10:1.02.210-2.el10
device-mapper-libs-10:1.02.210-2.el10
device-mapper-multipath-0.9.9-19.el10
device-mapper-multipath-libs-0.9.9-19.el10
device-mapper-persistent-data-1.3.2-1.el10
diffutils-3.10-8.el10
dmidecode-1:3.6-5.el10
dnf-4.20.0-23.el10
dnf-data-4.20.0-23.el10
dnsmasq-2.90-5.el10
dosfstools-4.2-12.el10
dracut-107-4.el10
dracut-network-107-4.el10
dracut-squash-107-4.el10
duktape-2.7.0-10.el10
e2fsprogs-1.47.1-5.el10
e2fsprogs-libs-1.47.1-5.el10
efi-filesystem-6-8.el10
efibootmgr-18-9.el10
efivar-libs-39-3.el10
elfutils-default-yama-scope-0.195-1.el10
elfutils-libelf-0.195-1.el10
elfutils-libs-0.195-1.el10
erofs-utils-1.8.10-1.el10
ethtool-2:6.19-1.el10
expat-2.7.3-1.el10
fcoe-utils-1.0.34-11.gitb233050.el10
file-5.45-12.el10
file-libs-5.45-12.el10
filesystem-3.18-17.el10
findutils-1:4.10.0-5.el10
firewalld-filesystem-2.4.0-1.el10
flatpak-session-helper-1.16.0-9.el10
fstrm-0.6.1-12.el10
fuse-common-3.16.2-5.el10
fuse-libs-2.9.9-25.el10
fuse3-3.16.2-5.el10
fuse3-libs-3.16.2-5.el10
fwupd-2.0.19-2.el10
gawk-5.3.0-6.el10
gdbm-1:1.23-14.el10
gdbm-libs-1:1.23-14.el10
gettext-envsubst-0.22.5-6.el10
gettext-libs-0.22.5-6.el10
gettext-runtime-0.22.5-6.el10
git-core-2.52.0-1.el10
glib2-2.80.4-13.el10
glibc-2.39-124.el10
glibc-common-2.39-124.el10
glibc-gconv-extra-2.39-124.el10
glibc-minimal-langpack-2.39-124.el10
gmp-1:6.2.1-12.el10
gnupg2-2.4.5-4.el10
gnutls-3.8.10-4.el10
gobject-introspection-1.79.1-6.el10
gpg-pubkey-764429e6-55567027
gpgme-1.23.2-6.el10
grep-3.11-10.el10
grub2-common-1:2.12-45.el10
grub2-efi-x64-1:2.12-45.el10
grub2-pc-1:2.12-45.el10
grub2-pc-modules-1:2.12-45.el10
grub2-tools-1:2.12-45.el10
grub2-tools-minimal-1:2.12-45.el10
gssproxy-0.9.2-10.el10
gzip-1.13-3.el10
hostname-3.23-14.el10
hwdata-0.379-10.8.el10
ignition-2.26.0-2.el10
ignition-grub-2.26.0-2.el10
ima-evm-utils-1.6.2-5.el10
info-7.1-6.el10
inih-58-3.el10
intel-gpu-firmware-20260508-23.el10
ipcalc-1.0.3-12.el10
iproute-6.17.0-2.el10
iproute-tc-6.17.0-2.el10
iptables-libs-1.8.11-13.el10
iptables-nft-1.8.11-13.el10
iputils-20240905-5.el10
irqbalance-2:1.9.4-6.el10
iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10
iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el10
isns-utils-libs-0.103-1.el10
jansson-2.14-3.el10
jose-14-102.el10
jq-1.7.1-13.el10
json-c-0.18-3.el10
json-glib-1.8.0-5.el10
kbd-2.6.4-7.el10
kbd-legacy-2.6.4-7.el10
kbd-misc-2.6.4-7.el10
kdump-utils-1.0.58-15.el10
kernel-6.12.0-229.el10
kernel-core-6.12.0-229.el10
kernel-modules-6.12.0-229.el10
kernel-modules-core-6.12.0-229.el10
kernel-modules-extra-6.12.0-229.el10
kexec-tools-2.0.32-3.el10
keyutils-1.6.3-5.el10
keyutils-libs-1.6.3-5.el10
kmod-31-13.el10
kmod-libs-31-13.el10
kpartx-0.9.9-19.el10
krb5-libs-1.21.3-11.el10
less-661-3.el10
libacl-2.3.2-4.el10
libaio-0.3.111-22.el10
libarchive-3.7.7-8.el10
libassuan-2.5.6-6.el10
libattr-2.5.2-5.el10
libbasicobjects-0.1.1-58.el10
libblkid-2.40.2-19.el10
libbpf-2:1.7.0-1.el10
libcap-2.69-7.el10
libcap-ng-0.8.4-6.el10
libcbor-0.11.0-3.el10
libcollection-0.7.0-58.el10
libcom_err-1.47.1-5.el10
libcomps-0.1.21-3.el10
libconfig-1.7.3-10.el10
libcurl-minimal-8.12.1-6.el10
libdhash-0.5.0-58.el10
libdnf-0.73.1-15.el10
libdnf-plugin-subscription-manager-1.30.14-1.el10
libdrm-2.4.128-1.el10
libeconf-0.6.2-4.el10
libedit-3.1-52.20230828cvs.el10
libev-4.33-15.el10
libevent-2.1.12-16.el10
libfdisk-2.40.2-19.el10
libffi-3.4.4-10.el10
libfido2-1.14.0-7.el10
libgcc-14.3.1-4.4.el10
libgcrypt-1.11.0-6.el10
libgomp-14.3.1-4.4.el10
libgpg-error-1.50-2.el10
libibverbs-62.0-2.el10
libicu-74.2-5.el10
libidn2-2.3.7-3.el10
libini_config-1.3.1-58.el10
libipa_hbac-2.13.0-1.el10
libjcat-0.2.2-2.el10
libjose-14-102.el10
libkcapi-1.5.0-3.el10
libkcapi-hasher-1.5.0-3.el10
libkcapi-hmaccalc-1.5.0-3.el10
libksba-1.6.7-2.el10
libldb-4.23.5-107.el10
libluksmeta-10-1.el10
libmaxminddb-1.9.1-4.el10
libmicrohttpd-1:1.0.0-3.el10
libmnl-1.0.5-7.el10
libmodulemd-2.15.0-12.el10
libmount-2.40.2-19.el10
libmspack-0.10.1-0.14.alpha.el10
libndp-1.9-2.el10
libnet-1.3-7.el10
libnetfilter_conntrack-1.0.9-12.el10
libnfnetlink-1.0.2-3.el10
libnfsidmap-1:2.8.3-7.el10
libnftnl-1.3.0-3.el10
libnghttp2-1.68.0-4.el10
libnl3-3.11.0-1.el10
libnvme-1.16.1-3.el10
libpath_utils-0.2.1-58.el10
libpcap-14:1.10.4-7.el10
libpciaccess-0.16-16.el10
libpkgconf-2.1.0-3.el10
libpwquality-1.4.5-12.el10
libref_array-0.1.5-58.el10
librepo-1.19.0-1.el10
libseccomp-2.5.6-1.el10
libselinux-3.10-2.el10
libselinux-utils-3.10-2.el10
libsemanage-3.10-1.el10
libsepol-3.10-1.el10
libsmartcols-2.40.2-19.el10
libsmbclient-4.23.5-107.el10
libsolv-0.7.33-2.el10
libss-1.47.1-5.el10
libsss_certmap-2.13.0-1.el10
libsss_idmap-2.13.0-1.el10
libsss_nss_idmap-2.13.0-1.el10
libsss_sudo-2.13.0-1.el10
libstdc++-14.3.1-4.4.el10
libtalloc-2.4.3-100.el10
libtasn1-4.20.0-1.el10
libtdb-1.4.14-100.el10
libtevent-0.17.1-100.el10
libtirpc-1.3.5-1.el10
libtool-ltdl-2.4.7-14.el10
libunistring-1.1-10.el10
liburing-2.12-1.el10
libusb1-1.0.29-3.el10
libutempter-1.2.1-15.el10
libuuid-2.40.2-19.el10
libuv-1:1.51.0-1.el10
libverto-0.3.2-10.el10
libverto-libev-0.3.2-10.el10
libwbclient-4.23.5-107.el10
libxcrypt-4.4.36-10.el10
libxml2-2.12.5-10.el10
libxmlb-0.3.24-1.el10
libxslt-1.1.39-8.el10
libyaml-0.2.5-16.el10
libzstd-1.5.5-9.el10
linux-firmware-20260508-23.el10
linux-firmware-whence-20260508-23.el10
lldpad-1.1.1-4.gitf1dd9eb.el10
lmdb-libs-0.9.32-4.el10
logrotate-3.22.0-5.el10
lsof-4.98.0-7.el10
lua-libs-5.4.8-1.el10
luksmeta-10-1.el10
lvm2-10:2.03.36-2.el10
lvm2-libs-10:2.03.36-2.el10
lz4-libs-1.9.4-8.el10
lzo-2.10-14.el10
makedumpfile-1.7.8-1.el10
mdadm-4.4-3.el10
microcode_ctl-4:20260210-1.el10
mokutil-2:0.7.2-4.el10
mpdecimal-2.5.1-12.el10
mpfr-4.2.1-8.el10
nano-8.1-3.el10
ncurses-base-6.4-15.20240127.el10
ncurses-libs-6.4-15.20240127.el10
net-tools-2.0-0.73.20160912git.el10
netavark-2:1.17.2-1.el10
nettle-3.10.1-1.el10
newt-0.52.24-5.el10
nfs-utils-1:2.8.3-7.el10
nftables-1:1.1.5-3.el10
nmap-ncat-4:7.92-5.el10
nmstate-2.2.60-2.el10
npth-1.6-21.el10
nss-altfiles-2.23.0-6.el10
numactl-2.0.19-3.el10
numactl-libs-2.0.19-3.el10
numad-0.5-50.20251104git.el10
nvidia-gpu-firmware-20260508-23.el10
nvme-cli-2.16-2.el10
oniguruma-6.9.9-7.el10
open-vm-tools-13.0.10-1.el10
openldap-2.6.13-1.el10
openshift-clients-5.0.0-202605131218.p2.g47f7428.assembly.stream.el10
openshift-kubelet-5.0.0-202605090145.p2.gf9b62a6.assembly.stream.el10
openssh-9.9p1-26.el10
openssh-clients-9.9p1-26.el10
openssh-server-9.9p1-26.el10
openssl-1:3.5.5-3.el10
openssl-fips-provider-1:3.5.5-3.el10
openssl-libs-1:3.5.5-3.el10
openvswitch-selinux-extra-policy-1.0-36.el10s
openvswitch3.5-3.5.3-5.el10s
os-prober-1.81-9.el10
ose-aws-ecr-image-credential-provider-5.0.0-202604141850.p2.g43906c2.assembly.stream.el10
ose-azure-acr-image-credential-provider-5.0.0-202604141850.p2.g92dac5f.assembly.stream.el10
ose-crio-credential-provider-5.0.0-202603041733.p2.g83d4961.assembly.stream.el10
ose-gcp-gcr-image-credential-provider-5.0.0-202605141918.p2.g808c2a2.assembly.stream.el10
ostree-2026.1-1.el10
ostree-grub2-2026.1-1.el10
ostree-libs-2026.1-1.el10
p11-kit-0.26.2-1.el10
p11-kit-trust-0.26.2-1.el10
pam-1.6.1-10.el10
pam-libs-1.6.1-10.el10
passt-0^20251210.gd04c480-3.el10
passt-selinux-0^20251210.gd04c480-3.el10
pciutils-3.13.0-6.el10
pciutils-libs-3.13.0-6.el10
pcre2-10.44-1.el10.3
pcre2-syntax-10.44-1.el10.3
pkgconf-2.1.0-3.el10
pkgconf-m4-2.1.0-3.el10
pkgconf-pkg-config-2.1.0-3.el10
podman-7:5.8.2-1.el10
podman-sequoia-0.4.0~pqc.2-1.el10
policycoreutils-3.10-2.el10
policycoreutils-python-utils-3.10-2.el10
polkit-125-6.el10
polkit-libs-125-6.el10
popt-1.19-8.el10
procps-ng-4.0.4-13.el10
protobuf-c-1.5.0-6.el10
psmisc-23.6-8.el10
python3-3.12.13-2.el10
python3-audit-4.0.3-5.el10
python3-charset-normalizer-3.4.2-1.el10
python3-cloud-what-1.30.14-1.el10
python3-dateutil-1:2.9.0.post0-1.el10
python3-dbus-1.3.2-8.el10
python3-decorator-5.1.1-12.el10
python3-distro-1.9.0-5.el10
python3-dnf-4.20.0-23.el10
python3-dnf-plugin-versionlock-4.7.0-10.el10
python3-dnf-plugins-core-4.7.0-10.el10
python3-gobject-base-3.46.0-7.el10
python3-gobject-base-noarch-3.46.0-7.el10
python3-hawkey-0.73.1-15.el10
python3-idna-3.7-4.el10
python3-iniparse-0.5-10.el10
python3-inotify-0.9.6-36.el10
python3-libcomps-0.1.21-3.el10
python3-libdnf-0.73.1-15.el10
python3-librepo-1.19.0-1.el10
python3-libs-3.12.13-2.el10
python3-libselinux-3.10-2.el10
python3-libsemanage-3.10-1.el10
python3-pip-wheel-23.3.2-7.el10
python3-policycoreutils-3.10-2.el10
python3-requests-2.32.4-1.el10
python3-rpm-4.19.1.1-23.el10
python3-setools-4.6.0-3.el10
python3-six-1.16.0-16.el10
python3-subscription-manager-rhsm-1.30.14-1.el10
python3-systemd-235-11.el10
python3-urllib3-1.26.19-3.el10
qemu-guest-agent-18:10.1.0-18.el10
quota-1:4.09-10.el10
quota-nls-1:4.09-10.el10
rdma-core-62.0-2.el10
readline-8.2-11.el10
rpcbind-1.2.7-3.el10
rpm-4.19.1.1-23.el10
rpm-build-libs-4.19.1.1-23.el10
rpm-libs-4.19.1.1-23.el10
rpm-ostree-2026.1-4.el10
rpm-ostree-libs-2026.1-4.el10
rpm-plugin-selinux-4.19.1.1-23.el10
rpm-sequoia-1.10.2.1-1.el10
rpm-sign-libs-4.19.1.1-23.el10
rsync-3.4.1-6.el10
samba-client-libs-4.23.5-107.el10
samba-common-4.23.5-107.el10
samba-common-libs-4.23.5-107.el10
sed-4.9-5.el10
selinux-policy-42.1.22-1.el10
selinux-policy-targeted-42.1.22-1.el10
setup-2.14.5-7.el10
sg3_utils-1.48-9.el10
sg3_utils-libs-1.48-9.el10
shadow-utils-2:4.15.0-11.el10
shadow-utils-subid-2:4.15.0-11.el10
shared-mime-info-2.3-8.el10
shim-x64-15.8-5.el10
skopeo-2:1.22.2-2.el10
slang-2.3.3-8.el10
snappy-1.1.10-7.el10
socat-1.7.4.4-8.el10
sqlite-libs-3.46.1-5.el10
ssh-key-dir-0.1.4-9.el10
sssd-2.13.0-1.el10
sssd-ad-2.13.0-1.el10
sssd-client-2.13.0-1.el10
sssd-common-2.13.0-1.el10
sssd-common-pac-2.13.0-1.el10
sssd-ipa-2.13.0-1.el10
sssd-krb5-2.13.0-1.el10
sssd-krb5-common-2.13.0-1.el10
sssd-ldap-2.13.0-1.el10
sssd-nfs-idmap-2.13.0-1.el10
sssd-proxy-2.13.0-1.el10
stalld-1.26.3-1.el10
strace-6.12-3.el10
subscription-manager-1.30.14-1.el10
subscription-manager-rhsm-certificates-20220623-6.el10
sudo-1.9.17-4.p2.el10
systemd-257-25.el10
systemd-journal-remote-257-25.el10
systemd-libs-257-25.el10
systemd-pam-257-25.el10
systemd-udev-257-25.el10
tar-2:1.35-11.el10
tmux-3.3a-13.20230918gitb202a2f.el10
toolbox-0.3-3.el10
tpm2-tools-5.7-5.el10
tpm2-tss-4.1.3-6.el10
tpm2-tss-fapi-4.1.3-6.el10
tzdata-2026b-1.el10
unbound-anchor-1.24.2-7.el10
unbound-libs-1.24.2-7.el10
userspace-rcu-0.14.0-7.el10
util-linux-2.40.2-19.el10
util-linux-core-2.40.2-19.el10
vim-data-2:9.1.083-10.el10
vim-minimal-2:9.1.083-10.el10
virt-what-1.27-3.el10
which-2.21-44.el10
xfsprogs-6.16.0-1.el10
xmlsec1-1:1.2.39-3.el10
xmlsec1-openssl-1:1.2.39-3.el10
xz-1:5.6.2-4.el10
xz-libs-1:5.6.2-4.el10
zlib-ng-compat-2.2.3-3.el10
zram-generator-1.1.2-14.el10
zstd-1.5.5-9.el10

Changed:

NetworkManager 1:1.56.0-1.el10 → 1:1.56.1-1.el10
NetworkManager-cloud-setup 1:1.56.0-1.el10 → 1:1.56.1-1.el10
NetworkManager-libnm 1:1.56.0-1.el10 → 1:1.56.1-1.el10
NetworkManager-ovs 1:1.56.0-1.el10 → 1:1.56.1-1.el10
NetworkManager-tui 1:1.56.0-1.el10 → 1:1.56.1-1.el10
amd-gpu-firmware 20260130-22.el10 → 20260508-23.el10
amd-ucode-firmware 20260130-22.el10 → 20260508-23.el10
bind-libs 32:9.18.33-15.el10 → 32:9.18.33-18.el10
bind-license 32:9.18.33-15.el10 → 32:9.18.33-18.el10
bind-utils 32:9.18.33-15.el10 → 32:9.18.33-18.el10
bootc 1.15.1-2.el10 → 1.15.2-1.el10
bootupd 0.2.32-2.el10 → 0.2.34-1.el10
clevis-pin-tpm2 0.5.3-9.el10 → 0.5.5-1.el10
cri-tools 1.35.0-1.el10s → 1.36.0-1.el10s
cryptsetup 2.8.1-2.el10 → 2.8.6-1.el10
cryptsetup-libs 2.8.1-2.el10 → 2.8.6-1.el10
curl 8.12.1-5.el10 → 8.12.1-6.el10
device-mapper-persistent-data 1.3.0-1.el10 → 1.3.2-1.el10
elfutils-default-yama-scope 0.194-2.el10 → 0.195-1.el10
elfutils-libelf 0.194-2.el10 → 0.195-1.el10
elfutils-libs 0.194-2.el10 → 0.195-1.el10
ethtool 2:6.15-2.el10 → 2:6.19-1.el10
file 5.45-9.el10 → 5.45-12.el10
file-libs 5.45-9.el10 → 5.45-12.el10
glib2 2.80.4-12.el10 → 2.80.4-13.el10
glibc 2.39-117.el10 → 2.39-124.el10
glibc-common 2.39-117.el10 → 2.39-124.el10
glibc-gconv-extra 2.39-117.el10 → 2.39-124.el10
glibc-minimal-langpack 2.39-117.el10 → 2.39-124.el10
gnutls 3.8.10-3.el10 → 3.8.10-4.el10
intel-gpu-firmware 20260130-22.el10 → 20260508-23.el10
iptables-libs 1.8.11-12.el10 → 1.8.11-13.el10
iptables-nft 1.8.11-12.el10 → 1.8.11-13.el10
jq 1.7.1-11.el10 → 1.7.1-13.el10
kernel 6.12.0-224.el10 → 6.12.0-229.el10
kernel-core 6.12.0-224.el10 → 6.12.0-229.el10
kernel-modules 6.12.0-224.el10 → 6.12.0-229.el10
kernel-modules-core 6.12.0-224.el10 → 6.12.0-229.el10
kernel-modules-extra 6.12.0-224.el10 → 6.12.0-229.el10
krb5-libs 1.21.3-9.el10 → 1.21.3-11.el10
libcurl-minimal 8.12.1-5.el10 → 8.12.1-6.el10
libibverbs 61.0-1.el10 → 62.0-2.el10
libipa_hbac 2.12.0-3.el10 → 2.13.0-1.el10
libselinux 3.10-1.el10 → 3.10-2.el10
libselinux-utils 3.10-1.el10 → 3.10-2.el10
libsss_certmap 2.12.0-3.el10 → 2.13.0-1.el10
libsss_idmap 2.12.0-3.el10 → 2.13.0-1.el10
libsss_nss_idmap 2.12.0-3.el10 → 2.13.0-1.el10
libsss_sudo 2.12.0-3.el10 → 2.13.0-1.el10
linux-firmware 20260130-22.el10 → 20260508-23.el10
linux-firmware-whence 20260130-22.el10 → 20260508-23.el10
nmstate 2.2.59-1.el10 → 2.2.60-2.el10
nvidia-gpu-firmware 20260130-22.el10 → 20260508-23.el10
openldap 2.6.10-1.el10 → 2.6.13-1.el10
openshift-clients 4.22.0-202604110549.p2.g66dee73.assembly.stream.el9 → 5.0.0-202605131218.p2.g47f7428.assembly.stream.el10
openshift-kubelet 4.22.0-202604271615.p2.gb0a9fa6.assembly.stream.el9 → 5.0.0-202605090145.p2.gf9b62a6.assembly.stream.el10
openssl 1:3.5.5-2.el10 → 1:3.5.5-3.el10
openssl-fips-provider 1:3.5.5-2.el10 → 1:3.5.5-3.el10
openssl-libs 1:3.5.5-2.el10 → 1:3.5.5-3.el10
ose-aws-ecr-image-credential-provider 4.22.0-202603272150.p2.ge73d6a3.assembly.stream.el9 → 5.0.0-202604141850.p2.g43906c2.assembly.stream.el10
ose-azure-acr-image-credential-provider 4.22.0-202603191400.p2.g4c7a764.assembly.stream.el9 → 5.0.0-202604141850.p2.g92dac5f.assembly.stream.el10
ose-crio-credential-provider 4.22.0-202602261640.p2.g83d4961.assembly.stream.el9 → 5.0.0-202603041733.p2.g83d4961.assembly.stream.el10
ose-gcp-gcr-image-credential-provider 4.22.0-202604110549.p2.g4d9707e.assembly.stream.el9 → 5.0.0-202605141918.p2.g808c2a2.assembly.stream.el10
polkit 125-4.el10 → 125-6.el10
polkit-libs 125-4.el10 → 125-6.el10
procps-ng 4.0.4-11.el10 → 4.0.4-13.el10
python3-libselinux 3.10-1.el10 → 3.10-2.el10
qemu-guest-agent 18:10.1.0-16.el10 → 18:10.1.0-18.el10
rdma-core 61.0-1.el10 → 62.0-2.el10
rpm-sequoia 1.10.1.1-2.el10 → 1.10.2.1-1.el10
rsync 3.4.1-3.el10 → 3.4.1-6.el10
selinux-policy 42.1.19-1.el10 → 42.1.22-1.el10
selinux-policy-targeted 42.1.19-1.el10 → 42.1.22-1.el10
sg3_utils 1.48-7.el10 → 1.48-9.el10
sg3_utils-libs 1.48-7.el10 → 1.48-9.el10
sssd 2.12.0-3.el10 → 2.13.0-1.el10
sssd-ad 2.12.0-3.el10 → 2.13.0-1.el10
sssd-client 2.12.0-3.el10 → 2.13.0-1.el10
sssd-common 2.12.0-3.el10 → 2.13.0-1.el10
sssd-common-pac 2.12.0-3.el10 → 2.13.0-1.el10
sssd-ipa 2.12.0-3.el10 → 2.13.0-1.el10
sssd-krb5 2.12.0-3.el10 → 2.13.0-1.el10
sssd-krb5-common 2.12.0-3.el10 → 2.13.0-1.el10
sssd-ldap 2.12.0-3.el10 → 2.13.0-1.el10
sssd-nfs-idmap 2.12.0-3.el10 → 2.13.0-1.el10
sssd-proxy 2.12.0-3.el10 → 2.13.0-1.el10
systemd 257-24.el10 → 257-25.el10
systemd-journal-remote 257-24.el10 → 257-25.el10
systemd-libs 257-24.el10 → 257-25.el10
systemd-pam 257-24.el10 → 257-25.el10
systemd-udev 257-24.el10 → 257-25.el10
tzdata 2026a-1.el10 → 2026b-1.el10

Extensions

Full list (0 packages)

CentOS Stream CoreOS base layer: 10 upgraded from 10.0.20260428-0 to 10.0.20260520-0

View changelog in Markdown or change previous release:

Source code for this page located on github