5.0.0-0.okd-scos-nightly-2026-07-30-152724

Download installer and client with:

oc adm release extract --tools registry.ci.openshift.org/origin/release-scos:5.0.0-0.okd-scos-nightly-2026-07-30-152724

Qualifiers (status api): None

Tests:

Blocking jobs
- aws Failed (2 retries) periodic-ci-openshift-release-main-okd-scos-5.0-e2e-aws-ovn
Informing jobs
- agent-single-node-ipv6 Failed periodic-ci-openshift-release-main-okd-scos-5.0-e2e-agent-single-node-ipv6
- aws-ovn-techpreview Failed (2 retries) periodic-ci-openshift-release-main-okd-scos-5.0-e2e-aws-ovn-techpreview
- aws-upgrade Failed (2 retries) periodic-ci-openshift-release-main-okd-scos-5.0-e2e-aws-ovn-upgrade
- aws-upgrade-minor Failed periodic-ci-openshift-release-main-okd-scos-5.0-upgrade-from-okd-scos-4.22-e2e-aws-ovn-upgrade
- gcp Failed periodic-ci-openshift-release-main-okd-scos-5.0-e2e-gcp
- vsphere Failed periodic-ci-openshift-release-main-okd-scos-5.0-e2e-vsphere-ovn
Async jobs
- claude-payload-agent Succeeded periodic-ci-openshift-release-main-claude-payload-agent-okd-scos-no-slack

Upgrades from:

Changes from 4.22.0-0.okd-scos-2026-07-20-164337

Created: 2026-07-30 15:34:42 +0000 UTC

Image Digest: sha256:4029c29b993b4120dbbff4b57f3d5d60059dbc1dba223e366e49326cc4e6c8b2

Components

Kubectl upgraded from 1.35.2 to 1.36.2
Kubernetes upgraded from 1.35.3 to 1.36.2
Kubernetes Tests 1.35.1
CentOS Stream CoreOS 10 upgraded from 10.0.20260702-0 to 10.0.20260729-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
AzureClusterHostedDNSInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NewOLMPreflightPermissionChecks (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AWSDualStackInstall (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
IngressControllerDynamicConfigurationManager (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
OLMLifecycleAndCompatibility (0 tests)	Disabled	Enabled (Changed)	Disabled	Enabled	Disabled	Enabled (Changed)	Disabled	Enabled
BGPBasedVIPManagement (0 tests)			Enabled (New)	Enabled (New)
GCPSovereignCloudInstall (0 tests)			Enabled (New)	Enabled (New)
IngressComponentRouteLabels (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)

New images

agentic-skills git 52f3897e sha256:d3d8781aa3d00a05ab7002badfa2f41e14c0a137d494f8b6c3dc5de75ac5b24f
aws-node-termination-handler git e4ff2aae sha256:d9732995bf7a90d402d02288b7e89068bb4e17a6944126177ee72085e6515b75
cluster-update-console-plugin git e222a514 sha256:c86463e487bc05c368d08800fbad70256ad32ac77c7cb178aa2a7aa743bb7fb0
haproxy-router-haproxy28 git 62487206 sha256:269454060ffc225d80b31a2e67bb88cab69deb3f0273412600efb0d82f2ede29
haproxy-router-haproxy32 git 62487206 sha256:96533ab96f0c51e714bc833093209e25ed92dae2b79029ecccd69d7b897f3f26
karpenter-operator git efeda90b sha256:e75e882c35dcceca2c8eeba82ee6cff6e7e79a5d1fa04f243b0caaac2757c45e

Removed images

installer-altinfra

Rebuilt images without code change

apiserver-network-proxy git 8264c02d sha256:47e3af29d61b07158bb09329955aa06d8aad42eebd7462f18070fcc5ac2a2c48
aws-ebs-csi-driver git 8b8c4cef sha256:afee8275e3dbbd1e3d76e980d311cda75b242478da57e047881f5af0c13004eb
aws-kms-encryption-provider git 6ca6eea2 sha256:16f08001f81f9359732cbb0d7972ad935d1c9bf59497b634f75d6fcbcbb6a5bd
azure-disk-csi-driver git e87f7764 sha256:586d2430d22cfc58180b743891f2536e9f40c7276440a1d14c4ca57a6ad38b57
azure-kms-encryption-provider git ca3d747d sha256:a18f965f14efad4e6ab8a38eb3592680cfbd1dbdfb41941dada805e3f8026b48
azure-service-operator git 0611cd27 sha256:9a7c37ff5420c2f588de85b7aa335334a9049f752e3c8bad1db5f5f87c147e94
azure-workload-identity-webhook git 2b4705c5 sha256:bbb9c740e860f7f868e7a7e3fabcae3505e8dc3bc221c3751b139db73dc0b2ca
baremetal-machine-controllers git f2b0db19 sha256:056f54fe0ce7704ab9c9a34bdaeaa7f8a4841134f3ebffb1480f15ffe13cdd09
cluster-bootstrap git 7b1593a4 sha256:0f0546f5603e1b1aedd41e1aa8e212f9d743966428bff4ef38732b77f98a4c1e
cluster-kube-cluster-api-operator git aec49344 sha256:7f80eb8bc334c89d862585495f1f3409617a53fe73fcb225170050662c9f34d2
cluster-kube-storage-version-migrator-operator git f5d3bfe6 sha256:4a3548501827f66e4eb9660310552439a6b6c381da8fb5d2bdaaa419dd2be1fe
cluster-openshift-controller-manager-operator git 34f95b07 sha256:f5cc7ea6e78927944dd041e4e27170d7544b32a80218c9965454b892ce1253b2
cluster-samples-operator git eee95bab sha256:75198fe369b106977d30621ec9ab02a48d6f01dbc1d986b444b630974785be0e
cluster-update-keys git 9607604d sha256:5a4e1eac109d132a25b6d79ef515e9657054db05b7d909c575fc546789a51f76
configmap-reloader git ce80869a sha256:5efcd6d638766552498c92e05c8758e9f1bb899bd1987115bbff225d00647c93
container-networking-plugins git d6f73950 sha256:8a349e8f944f1590c161568b56934de41dca71c7172b35df2ce4ff9942a1f699
containernetworking-plugins-microshift git d6f73950 sha256:c879c3b4c4bb7f26ac0a553e09718d876427ce281d5a7565d2632813f8c110d3
csi-external-snapshot-metadata git 239703c6 sha256:f61ba4e0b6484f4e26111ab44aba6e3da8bdb550ea1f310e23542ca642a79c92
docker-builder git 2cda03a9 sha256:bd6a86441a9dd908f4bc6517711da61bcb770aee635c15994d9390ec830d908f
egress-router-cni git a923d37c sha256:2e840f1c80509441deec0fe3597cfbee7d959c4c59202f3cc6b237255b910835
gcp-machine-controllers git 1d098131 sha256:4b4c0b82c2c9638f0c6106c01aea7cad2bb2cc43dc578414c4235b9d854ba3b2
insights-runtime-exporter git ce30b4f9 sha256:71537afd22db812177ab30c896010bd02a48863613df0b28faee24a316cd60d2
insights-runtime-extractor git ce30b4f9 sha256:0dd5476b2ce113fb938be56a366f32d6aec2db85ea399e202c244b1bb7807c5f
installer-kube-apiserver-artifacts git a466682e sha256:fac12f13b01a0692eb292e4e250d2aef2a8685602f982e0623b8dad79980770b
ironic-machine-os-downloader git f8e41b2e sha256:703228895f6a5c180e0a827442f6501a6a177ec7e845bc8b6b94faa080858606
ironic-static-ip-manager git 486a0418 sha256:b84c794da8c165d5cc941f4229922035452251ca92ef13e6da0be44bbfe89687
kube-storage-version-migrator git 72835e43 sha256:f45325a01c1ca92288db85ca9acb3530a8c6960e7b4d075ee4b10d78d6fcb2d3
kubevirt-csi-driver git 7ff99994 sha256:b95323da743192c70e2ea7bbeb806d9779f1c0b21cd2a7fd5b36b5af0e78c6dd
machine-image-customization-controller git 7a348422 sha256:871b3681fa45f56382b172df1660192d5645d39ded445ad68c8426ff16e4f2cb
machine-os-images git 7e514b05 sha256:365c2b0b43c427468537e0bbfcd33b7256258688759116228b889f61d7a462cc
metallb-frr git 5d3b12b6 sha256:699328e96650e2c73c59bf56a29d4b670bfddedbc8849a79396d5a5df8bc2dea
multus-admission-controller git 4bb2e206 sha256:306886b0ee375f8463cb5372e971b4ad39749bdbdfa4733bede3b254936dbf29
multus-networkpolicy git 932bdaa4 sha256:d34377438ca1b172eea2b027e41704a25179a2949ee1c421430aed41cabaebab
multus-route-override-cni git 08af4127 sha256:b8f09c72bf0c7bdea9741dc8942e72ee3c6ad6c48be5a36f955d9f0453f8c4bb
network-tools git 0b53ac3d sha256:13c6784ddd166f8f1a0b8bfff6b20607f027efa1c26d544bd3c28d4126ec21de
nutanix-cloud-controller-manager git dc584c6b sha256:b0b31a94393f3a734e699b6e0e3cd5e18b9b6281707fcaf747253c0c07cc2a62
openshift-controller-manager git 5631cf49 sha256:186bdf527066670a24e1efa483e061d5a6a0d34534c56baab242711b13748cfa
openshift-state-metrics git 0e12f5d6 sha256:d65364139f734670968c66806b2f4c22fef16bd2ce184ab7cb2c22761f2a3337
openstack-machine-api-provider git 6b30092b sha256:ca451944c1ba5b45b4337a32a8feccc7d652d3389556b017edd9a85b55a619d3
openstack-resource-controller git 58dbc048 sha256:f2fc8683bb663975ff5d8d6fb091182a1683cc21cd4e681671f10e9076b5ce3e
powervs-block-csi-driver git e7c2c09b sha256:e46d8775880ddfce5f0e9a1bb269a526637dcbc80d705d984e3a26b162296267
powervs-machine-controllers git e88cf81d sha256:0fd6ae85eb0621648be2624c28325d72a5b854f450b63942df17b58959e3cac0
prom-label-proxy git 4ab9ff73 sha256:a38a3bf114efd68cd4f2c6040f0a09a982920a7f2aebc792ce441cb1df546e58
telemeter git 22ba1701 sha256:484a0065d764d7e623a403e592fd9f77441641d89c5aad281dd7bd295dee61e5
volume-data-source-validator git a6c21eee sha256:cd2e243ac8bcb105ba813aa8c2141c365e1ec6db4c3ed6a12d32f49d449b3bfc
vsphere-csi-driver git 6b18bb29 sha256:910d036d966243b40934852a783316d15c2a79fae106c42057f26d6f56a104be
vsphere-csi-driver-syncer git 6b18bb29 sha256:a34bca0c869a1738af50e77b4fe25dddc268adc7a80985998142a4cf6db31d7e

agent-installer-api-server

NO-ISSUE: [master] Bump OCP versions: 4.18, 4.19 #10724
NO-ISSUE: Refresh RPM lockfiles RPM lockfile refresh [SECURITY] #10718
NO-ISSUE: [master] Bump OCP versions: 4.20, 4.21, 4.22 #10715
NO-ISSUE: [master] Bump OCP versions: 4.13, 4.18, 4.19 #10710
ACM-35865: CVE-2026-39828 Bump golang.org/x/crypto to v0.52.0 using replace directive (client module) #10617
MGMT-23744: CVE-2026-33997 Bump docker/docker to v28.5.2 #10685
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 4.22, 4.21, 4.19, 4.20, 4.18 #10692
MGMT-24667: Fix disconnected ZTP spoke installs for OCP 5.0 OSImageStream images #10527
MGMT-24699: Assisted Service IPv6 CIDR comparison may fail with non-normalized CIDRs #10569
MGMT-24327: upgrade assisted-service postgresql from 15 to 16 #10519
ACM-35865: CVE-2026-39828 Bump golang.org/x/crypto to v0.52.0 using replace directive (api module) #10618
ACM-35865: CVE-2026-39828 Bump golang.org/x/crypto to v0.52.0 using replace directive (models module) #10616
NO-ISSUE: [master] Bump OCP versions: 4.18, 5.0, 4.20, 4.16, 4.22, 4.19, 4.21, 4.14, 4.17 #10622
MGMT-24786: Add resource-scoped authorization for local auth tokens #10603
NO-ISSUE: Refresh RPM lockfiles RPM lockfile refresh #10581
MGMT-18886: OS Streams #10428
NO-ISSUE: hive-operator was migrated from community-operators to upstream-community-operators #10600
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

ACM-38238: Assisted-installer repos: Set Up Set up Renovate configuration to automatically create Hive API Synchronization PRs #2224
MGMT-24702: CVE-2026-53488 Bump github.com/containerd/containerd to v1.7.33 #2204
Full changelog

agent-installer-node-agent

NO-ISSUE: Refresh RPM lockfiles RPM lockfile refresh #1555
Full changelog

agent-installer-ui

Keep NMState resources when deleting BMC hosts (#3931) #3931
Block installation when custom-manifests-requirements-satisfied validation fails (#3923) #3923
Upgrade react-router to ^7.18.1 (#3925) #3925
MGMT-24641: Attempt to choose 5 masters for standalone cluster blocked (#3912) #3912
Bump tar from 7.5.20 to 7.5.22 (#3921) #3921
Bump postcss from 8.5.15 to 8.5.23 (#3920) #3920
Bump uuid from 8.3.2 to 14.0.1 (#3919) #3919
chore(deps): update dependency brace-expansion to ^5.0.8 (#3916) #3916
chore(deps): update dependency dompurify to ^3.4.12 (#3917) #3917
chore(deps): update konflux references (#3913) #3913
Bump shell-quote from 1.8.4 to 1.10.0 (#3909) #3909
Bump body-parser from 1.20.4 to 1.20.6 (#3911) #3911
Bump fast-uri from 3.1.2 to 3.1.4 (#3910) #3910
OCPBUGS-99039: Bump dompurify to 3.4.7+ in 5.0 (#3894) #3894
Update build_tools (#3901) #3901
Fix operator Learn more documentation links and remove duplicates (#3899) #3899
chore(deps): update dependency sanitize-html to ^2.17.6 (#3897) #3897
Bump websocket-driver from 0.7.4 to 0.7.5 (#3891) #3891
chore(deps): update dependency tar to ^7.5.20 (#3898) #3898
chore(deps): update konflux references (#3896) #3896
Upgrade node version in Containerfile (#3872) #3872
Apply patches (#3819) #3819
Upgrade path-to-regexp to ^8.4.2 (#3862) #3862
Upgrade sanitize-html to ^2.17.4 (#3861) #3861
Dedupe yarn.lock (#3863) #3863
Upgrade terser-webpack-plugin to ^5.6.1 (#3818) #3818
chore(deps): update typescript type definitions (non-major) (#3867) #3867
chore(deps): update dependency axios to ^1.18.1 (#3868) #3868
chore(deps): update konflux references (#3866) #3866
Upgrade brace-expansion to ^5.0.8 (#3855) #3855
OCPBUGS-96781: Bump webpack-dev-server to 5.2.5 (#3822) #3822
chore(deps): update dependency tar to ^7.5.19 (#3826) #3826
no-jira: Bump axios to latest (1.18.1) (#3856) #3856
OCPBUGS-97734: Increase default imageStorage to 100Gi and raise minimum to 50Gi (#3820) #3820
Show all operators on cluster installation page (#3849) #3849
Full changelog

agent-installer-utils

OCPBUGS-99905: Update Konflux references #303
OCPBUGS-99745: Use Operator catalog in 4.22 for OVE #323
OCPBUGS-87367: Updating ose-agent-installer-utils-container image to be consistent with ART for 5.0 #308
OCPBUGS-99425: Use agent-preinstall-image-builder from quay-proxy #319
OCPBUGS-98692: Update cluster-logging and loki operator versions #315
AGENT-1552: Add lvms-operator to config #311
OCPBUGS-98101: Use build platform with more disk space #312
Full changelog

aws-cloud-controller-manager

OCPCLOUD-3643: Merge https://github.com/kubernetes/cloud-provider-aws:master (63ec440) into main #160
Full changelog

aws-cluster-api-controllers

🌱 OCPCLOUD-3599: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.13.0 (a84670f) into main #623
:seedling: OCPBUGS-95028: bump golang.org/x/net to v0.55.0 for CVE-2026-25681 #622
:rocket: UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.12.1 (13af066) into main #621
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, gcp-pd-csi-driver-operator, openstack-cinder-csi-driver-operator

STOR-2997: Auto generate assets for gcp pd csi driver #585
OCPBUGS-99199: Add networking.k8s.io group policy #579
STOR-2914: Bump all deps for 5.0.0 #582
OCPBUGS-99200: Add networking.k8s.io group policy #581
OCPBUGS-99490: Apply some static assets earlier, before starting controllers #584
STOR-2997: Minimal implementation of GCP PD CSI driver operator #576
STOR-3030: feat(operator): detect GCP Dedicated and use hyperdisk-balanced StorageClass #573
Full changelog

aws-karpenter-provider-aws

AUTOSCALE-644: Release chores 5.0 for Karpenter #33
Full changelog

aws-machine-controllers

OCPCLOUD-3615: Bump k8s to 1.36 and Go to 1.26 #197
OCPBUGS-47508: Add max-concurrent-reconciles flag to machine actuator #195
NO-JIRA: Bump golang.org/x/crypto to fix CVE #194
Full changelog

aws-pod-identity-webhook

OCPCLOUD-3583: Update aws-pod-identity-webhook to k8s 1.36 #220
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPCLOUD-3591: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (4128235) into main #164
Full changelog

azure-cluster-api-controllers

🚀 OCPCLOUD-3600: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.26.0 (19ff821) into main #388
🐛 OCPBUGS-85337: set imagePullPolicy IfNotPresent on provider workloads #393
Full changelog

azure-file-csi-driver

STOR-2928: Rebase to v1.35.5 for OCP 5.0 #143
OCPBUGS-93742: Bump golang.org/x/crypto/ssh to v0.53.0 #141
Full changelog

azure-machine-controllers

OCPCLOUD-3616: Bump k8s to 1.36 and Go to 1.26 #206
OCPBUGS-92024, OCPBUGS-98075: bump golang.org/x/crypto to v0.54.0 to fix CVEs #203
OCPBUGS-96854: bump golang.org/x/net to v0.55.0 #204
Full changelog

baremetal-cluster-api-controllers

🐛 OCPBUGS-85337: set imagePullPolicy IfNotPresent on provider workloads #85
OCPBUGS-98329: Grant capi-installer permission on ConfigMap #86
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-99164: bootstrap: replace envsubst with sed in konnectivity.sh #10728
CORS-4542: restrict ClusterAPI machine management to only supported platforms #10717
CORS-4425: gcp: add OS image validation for sovereign clouds #10709
CNTRLPLANE-2012: Wire signer certs to read PKI config via SignerKeyParams #10595
OCPBUGS-63133: PowerVS: Error out if VPC does not exist #10137
OCPBUGS-98696: baremetal: fix provisioning ISO kernel arguments #10702
no-jira: bump k8s packages to v0.36 #10713
CORS-4428: gcp: reject PSC endpoint overrides for sovereign clouds #10708
CORS-4514: Set sovereign cloud defaults for machine types #10706
CORS-4537: Add API-backed disk type availability validation #10687
no-jira: azure: Disable shared access key by default #10574
CORS-4507: aws: support edge machine pool management with ClusterAPI #10625
CNTRLPLANE-2847: bootstrap: pass rendered manifests and payload version to etcd render #10679
CORS-3997: azure: update default instance types from v3 to AMD Dasv5 #10565
OCPBUGS-98141, OCPBUGS-99018: bump golang.org/x/crypto to v0.52.0 #10690
CORS-4539: Support sovereign cloud service account email format for gcp/gcd #10691
CORS-4538: Use metadata project ID for sovereign cloud gather #10688
NO-ISSUE: Remove workaround for boot image version mismatch #10665
OCPBUGS-98586: Don’t wait on oc delete in konnectivity_cleanup #10682
OCPBUGS-98529: cluster-api: disable diagnostics endpoint for local CAPI controllers #10681
CORS-4423: GCP: Use WithCredentialsJSON when Possible #10624
OCPBUGS-98157: redact machineconfigs.json from “gather bootstrap” #10678
CORS-4518: Migrate containers libs to new mono repo #10599
CNTRLPLANE-2012: Refactor TLS cert generation to support configurable key algorithms #10594
CORS-4334: konnectivity: remove hostNetwork from konnectivity agent #10662
OCPCLOUD-3368: bumping o/api for new crdcompatibilitychecker and capi capabilities #10618
CORS-4528: Remove OPENSHIFT_INSTALL_EXPERIMENTAL_DUAL_STACK #10654
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

baremetal-operator

NO-ISSUE: Merge upstream 2026-07-25 #513
METAL-1900: Merge upstream #510
Full changelog

baremetal-runtimecfg

OCPBUGS-99496: Detect bootstrap apiserver shutdown via /readyz #396
Full changelog

cli, cli-artifacts, deployer

Revert “TRT-2817: Revert “Merge pull request #2279 from nbottari9/1814-duplicate-warning”” #2322
OCPBUGS-99757: Include extra scopes in OIDC token cache key #2323
TRT-2817: Revert “Merge pull request #2279 from nbottari9/1814-duplicate-warning” #2320
NO-JIRA: Bump k8s dependencies to 1.36 along with openshift #2318
OTA-1814: fix(alerts): Remove duplicate information in the recommend command #2279
NO-JIRA: Handle wrapped ENOTSUP error #2311
NO-JIRA: First try newer iotop-c and fallback to older one #2317
NO-JIRA: Register the e2e tests for accept in the subfolder #2300
NO-JIRA: Fix staticcheck warnings in pkg/cli/admin/mustgather #2306
NO-JIRA: Fix go vet warning in process.go #2304
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

cloud-credential-operator

CORS-4524: Enable GCP custom universe domain support for CCO #1068
MULTIARCH-5990: IBM Cloud Staging Endpoint Support for ccoctl #1062
Full changelog

cloud-network-config-controller

CORENET-7047: CNCC K8s rebase to 1.36.2 #223
Full changelog

cluster-authentication-operator

NO-JIRA: Update openshift/* #959
CNTRLPLANE-3762: Add support for component-scoped proxy #946
CNTRLPLANE-3237: creates the kms status provider from the operator client- #741 #958
NO-JIRA: add KMS preflight deploy e2e to encryption-kms-2 #956
CNTRLPLANE-3375: bugfix: make switched controller clear status conditions on delegate controller shutdown #955
CNTRLPLANE-3361: Update openshift/* #957
NO-JIRA: Automatic agentic rebase: Update library-go to d8f45c2 #954
CNTRLPLANE-3237: encryptionstatusprovider: implement UpdateKMSEncryptionStatus #953
CNTRLPLANE-3237: encryptionstatusprovider: use AuthenticationInterface instead of Clientset #952
CNTRLPLANE-3237: intro authenticationEncryptionStatusProvider #951
NO-JIRA: kms to kms key identifier check #941
NO-JIRA: Bump library-go to sync #948
CNTRLPLANE-3234: wire KMS health reporter status writer #947
OCPBUGS-87480: Updating ose-cluster-authentication-operator-container image to be consistent with ART for 5.0 #934
Full changelog

cluster-autoscaler

OCPBUGS-92799: UPSTREAM: 10001: chore(clusterapi): add machine phase check for failed machines #430
AUTOSCALE-637: Fix VPA E2E vendoring #429
AUTOSCALE-555: adding openshift provider #417
NO-JIRA: add coderabbit configuration file #422
Full changelog

cluster-autoscaler-operator

AUTOSCALE-642: Release chores 5.0 #380
NO-JIRA: add coderabbit configuration file #375
NO-JIRA: update owners file with autoscale team members #379
AUTOSCALE-555: change default cloud provider to openshift #368
Full changelog

cluster-baremetal-operator

METAL-1833: Add host_fw_components tests to CBO test extension #622
METAL-1795: Add TLS group/curve support #632
OCPBUGS-99278: Apply cluster TLS profile to ironic-proxy container #633
OCPBUGS-99220: static-ip-manager should be optional #631
OCPBUGS-66101: Set Progressing=True during cluster update #629
METAL-1833: Add nic_validation OTE test #627
Full changelog

cluster-capi-controllers

🚀 OCPCLOUD-3598: Merge https://github.com/kubernetes-sigs/cluster-api:v1.13.4 (27f4644) into main #298
CORS-4534: UPSTREAM: <carry>: Enable MachineTaintPropagation feature gate #303
OCPBUGS-85337: set imagePullPolicy IfNotPresent on provider workloads #302
Full changelog

cluster-capi-operator

OCPCLOUD-3571: Add OTE e2e tests for ClusterAPIMachineManagementAWS feature gate #613
OCPCLOUD-3538, OCPCLOUD-3556: manifests-gen: enable KRM plugins and add exclude/rename-resources transformers #621
OCPBUGS-84321: ClusterAPIMachineManagement: capi-controllers: excessive restarts of during cluster installation #614
OCPCLOUD-3507: Add OTE e2e tests for ClusterAPIMachineManagement feature gate #606
NO-JIRA: Fix buildComponentList godoc #632
CORS-4512: aws: allow privateDNSName and assignPrimaryIPv6 field on CAPI machines in dual-stack clusters #592
CORS-4512: aws: set IPv6 block on AWSCluster in dual-stack clusters #593
OCPCLOUD-3607: Bump K8S to 1.36 #628
OCPCLOUD-3368: Adding annotations to manifests for CVO to identify #588
OCPCLOUD-3366: crdcompatibility: add validation for CRDData.Type field #625
OCPCLOUD-3542: Add CRD Compatibility Checker OTE e2e tests #599
OCPBUGS-98329: Add aggregated cluster role for extended per-provider RBAC #623
OCPCLOUD-3539: add topology-aware operator for CRD Compatibility Checker #600
OCPCLOUD-3553: change webhook failurePolicy to Fail #620
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-99755: OTE: fix AWS endpoint resolution for non-standard partitions #494
SPLAT-2713: Reapply “Merge pull request #476” to bring in e2e for BYO SG for AWS NLB #492
OCPBUGS-98617: Fixes daemonset Progressing=True logic #490
Revert #476 “SPLAT-2713: Update AWS CCM e2e test module version” #491
SPLAT-2713: Update AWS CCM e2e test module version #476
OCPBUGS-64852: Fixes progressing=True condition reporting #488
TRT-2777: Revert #479 “Revert ‘TRT-2754: Revert Updates clusteroperator_controller progressing’” #487
Full changelog

cluster-config-api

MON-4616: add support for dmmultipath collector #2956
CORS-4387: Promote AWS DualStack to Default #2797
CNTRLPLANE-3237: Kms plugin health report clean up #2931
OPRUN-4705: Remove NewOLMPreflightPermissionChecks FeatureGate #2957
SPLAT-2827: Added vSphere failure domain to vcenter check #2932
Check all hypershift variants when the featuregate is not platform specific #2951
OCPBUGS-80958: NodeUID in status to detect replaced node with same name #2821
OPRUN-4691: Promote OLMLifecycleAndCompatibility feature gate to Default #2920
OPNET-780: Add BGPBasedVIPManagement feature gate and BGP VIP management fields #2923
CNTRLPLANE-3361: Align with latest beta API of Vault #2936
Update KAL to latest #2939
NE-2569: Promote Dynamic Configuration Manager to Default #2788
Adapt publish kubebuilder tools to ocp5 + publish k8s v1.36 kubebuilder tools #2941
CNTRLPLANE-3237: Add KMS preflight check API to operator/v1 #2916
CORS-4435: GCP Sovereign Cloud Feature Gate #2810
OCPSTRAT-3036: Rebase 1.36.2 #2813
OCPBUGS-91634: CAPI: Fix ImageDigestFormat validation to allow deep registry paths #2918
Sippy timestamp filter should use Millisecond unix timestamp for proper filtering #2928
Remove AzureClusterHostedDNSInstall Featuregate #2902
OCPNODE-4604: Upgrade v1 criocp payload resource #2900
CONSOLE-5163: Add labels field to Ingress componentRoutes #2845
tooling: Update verify-feature-promotion logic for installer-focused features #2903
CNTRLPLANE-3751: osin: Add ProxyTrustedCA field to OAuthConfig #2917
Integrate models-schema into codegen and fix openapi verify issues #2904
Full changelog

cluster-config-operator

MON-4499: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #468
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-87338: Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART for 5.0 #408
Full changelog

cluster-csi-snapshot-controller-operator

STOR-2914: Bump all deps for 5.0.0 #285
Full changelog

cluster-dns-operator

OCPBUGS-86009: Fix dns operator reporting Progressing=True on scale up #477
NE-2817: Gate operator metrics TLS on tlsAdherence via ShouldHonorClusterTLSProfile #484
NE-2765: Bump Kubernetes to 1.36.2 and Go to 1.26 #483
NE-2743: Support centralized TLS security profiles for CDO metrics #482
NO-JIRA: Add aswinsuryan (asuryana@redhat.com) to OWNERS #479
Full changelog

cluster-etcd-operator

OCPBUGS-94106: Add APIServer informer to EnvVarController cache sync #1659
OCPBUGS-100072: Revert ‘OCPBUGS-88490: fix etcd operator deadlock when etcd-endpoints configmap is stale’ #1660
OCPEDGE-2094: Add console notifications for pacemaker health events #1654
CNTRLPLANE-3609: update TestEtcdDBScaling to also include the validation check for BackendQuotaGiB #1656
OCPEDGE-2118: Record Kubernetes events for etcd transition lifecycle #1653
OCPEDGE-2707: Add TNF Pacemaker PrometheusRule alerts #1650
CNTRLPLANE-2847: render: Read FeatureGate CR from rendered manifests #1648
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-image-registry-operator

OCPBUGS-99257: Improve GCS KMS encryption error handling and documentation #1344
CORENET-7355: Remove redundant ingress rule from image-registry netpol #1354
OCPBUGS-96818: bump golang.org/x/net #1353
Full changelog

cluster-ingress-operator

NE-2742: Apply cluster TLS security profile to operator metrics and canary endpoints #1501
OCPBUGS-86841: Add BackendTLSPolicy to Gateway API e2e CRD test coverage #1523
CORS-4451: GCP: Set Universe Domain #1515
NE-2809: Add upgradeable logic for HAProxy version #1517
OCPBUGS-99775: Update TestHTTPHeaderBufferSize for HAProxy 3.2 response code change #1524
OCPBUGS-90616: Add GRPCRoute to Gateway API e2e CRD test coverage #1482
NE-2737: Add support for TLS curves in router deployment configuration #1478
NE-2764: Bump Kubernetes to 1.36.2 and Go to 1.26 #1505
OCPBUGS-98310: Bump sail-operator install library to OSSM 3.4.0 #1508
NE-2219: Select HAProxy version from IngressController API #1498
TRT-2793: Revert Bump sail-operator install library to OSSM 3.4.0 #1507
OCPBUGS-98310: vendor sail-operator install library from OSSM 3.4 #1456
NE-2218: Add new HAProxy 2.8 and 3.2 image references #1499
Full changelog

cluster-kube-apiserver-operator

NO-JIRA: Update openshift/* #2249
CNTRLPLANE-3237: creates the kms status provider from the operator client #2248
MON-4502: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #2036
NO-JIRA: add KMS preflight deploy e2e to encryption-kms-2 #2246
CNTRLPLANE-3361: Update openshift/* #2247
CNTRLPLANE-3861: Add KMS plugin sidecar revision readiness check #2220
NO-JIRA: Automatic agentic rebase: Update library-go to d8f45c2 #2238
NO-JIRA: Add KMS key ID identifier #2237
CNTRLPLANE-3237: encryptionstatusprovider: use KubeAPIServersGetter instead of Clientset #2235
NO-JIRA: Refactor KMS cases #2229
CNTRLPLANE-3237: intro kubeAPIServerEncryptionStatusProvider #2230
NO-JIRA: Remove old test files #2232
OCPSTRAT-3036: Rebase 1.36.2 #2129
NO-JIRA: Bump library-go to sync #2227
NO-JIRA: Remove old helper and assertion func #2223
OCPBUGS-38661: Add 10-minute degraded inertia for StaticPodsDegraded #2221
CNTRLPLANE-3234: wire KMS health reporter status writer #2224
Full changelog

cluster-kube-controller-manager-operator

OCPSTRAT-3036: Rebase 1.36.2 #930
OCPBUGS-38662: Add 10-minute degraded inertia for StaticPodsDegraded #948
Full changelog

cluster-kube-scheduler-operator

OCPSTRAT-3036: Rebase 1.36.2 #646
OCPBUGS-38663: Add 10-minute degraded inertia for StaticPodsDegraded #655
Full changelog

cluster-machine-approver

NO-JIRA: Bump envtest to 1.36.2 #314
OCPCLOUD-3612: Bump k8s v1.36, go 1.26 #311
Full changelog

cluster-monitoring-operator

NO-JIRA: [bot] Synchronize versions of the downstream components #3014
NO-JIRA: chore: pin GOTOOLCHAIN in update-go-deps + update Go dependencies #3006
NO-JIRA: increase golangci-lint timeout #3011
MON-4624: enable the nvmesubsystem collector by default #3005
NO-JIRA: [bot] Synchronize versions of the downstream components #2994
MON-4413: support MessageVersion v2.0 for remote-write #2977
OCPBUGS-85522: disable kubelet Endpoints in prometheus-operator #2931
NO-JIRA: test: adjust e2e tests on retention settings #2999
MON-4615: add option to disable the dmmultipath collector #2996
NO-JIRA: Revert “MON-3697: use maximumStartupDurationSeconds instead of container patch” #2982
MON-4558: enable zoneinfo node-exporter collector via config #2986
OCPBUGS-98450: fall back to kube-system/global-pull-secret for telemeter-client token #2985
NO-ISSUE: Update prometheus-operator dependencies #2966
OU-1389: manually pass features to monitoring plugin #2987
OCPBUGS-99019: jsonnet: exclude AlertmanagerClusterFailedPeers from shipped rules #2993
MON-4523: ClusterMonitoring prometheusConfig #2953
Full changelog

cluster-network-operator

NO-JIRA: vendor: bump github.com/openshift/api to latest master #3089
OCPBUGS-88063: ovn-kubernetes: Move MNP from ConfigMap to CLI flags #3072
CNTRLPLANE-3213: Enable configurable PKI for managed certificate rotation #2958
CORENET-6581: Add transport label to CUDN telemetry recording rule #2978
OCPBUGS-98619: Bump frr-k8s MAX_FDS from 1024 to 65536 #3054
Revert “Enable Network Observability on Day 0” (#2925) #3086
CORENET-6714: Enable Network Observability on Day 0 #2925
OCPBUGS-99074: Align frr-k8s 5.0 CRDs #3070
CORENET-7046: Bump Kubernetes to 1.36.2 and OCP to 5.0 #3017
CORENET-7125: iptables to nftables #3038
NO-JIRA: Refresh Reviewers & Approvers lists #3048
OCPBUGS-62144: Makes sure rendering for egress IP reachabilityTimeout triggers restart of ovnkube (node/control) pods #2955
CORENET-7267: Add pre-merge and custom checks to CodeRabbit configuration #3037
NVIDIA-882: DPU host: add configurable mgmt-port-resource-count #3024
OCPBUGS-88531: Propagate restart-date annotation to CNO operand pod templates #3030
NO-JIRA: Update OWNERS file #3045
Full changelog

cluster-node-tuning-operator

OCPBUGS-97809: e2e: fix broken checks and rework netqueue tests to avoid ARM ethtool blackout flakes #1557
OCPBUGS-98915: E2E: LLC: Pass fresh ctx variable to DeferCleanup functions #1562
CNF-23471: Dedicate cpus for dpdk vswitch #1546
OCPBUGS-98399: E2E: Add functional test cases checking GOMAXPROCS #1556
Full changelog

cluster-olm-operator

OCPBUGS-95475: chore: bump containerd to 1.7.33 #223
OPRUN-4676: support service account deprecation for OCP 5.0 #222
OPRUN-4696: fix upgrade block message and add 5.0 cluster unit tests #216
NO-ISSUE: Remove stale reviewers/approvers, add trgeiger #220
Full changelog

cluster-openshift-apiserver-operator

NO-JIRA: Update openshift/* #742
CNTRLPLANE-3237: creates the kms status provider from the operator client #741
NO-JIRA: add KMS preflight deploy e2e to encryption-kms-2 #739
CNTRLPLANE-3361: Update openshift/* #740
NO-JIRA: Automatic agentic rebase: Update library-go to d8f45c2 #737
CNTRLPLANE-3237: encryptionstatusprovider: implement UpdateKMSEncryptionStatus #736
CNTRLPLANE-3237: encryptionstatusprovider: use OpenShiftAPIServerInterface instead of Clientset #735
NO-JIRA: kms to kms key identifier check #728
OCPBUGS-87507: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 5.0 #705
CNTRLPLANE-3237: intro openShiftAPIServerEncryptionStatusProvider #734
NO-JIRA: Bump library-go to sync #732
CNTRLPLANE-3234: wire KMS health reporter status writer #730
OCPBUGS-86583: Allow Prometheus to scrape check-endpoints metrics on port 17698 #729
Full changelog

cluster-policy-controller

OCPSTRAT-3036: Bump to Kube v1.36.2 #197
Full changelog

cluster-storage-operator

OCPBUGS-99492: NetworkPolicies should use numeric ports instead of named ports #720
STOR-3013: Add e2e test for SELinuxMount upgrade readiness #715
STOR-2914: Bump all deps for 5.0.0 #719
STOR-3011: Implement CSO upgrade check and Prometheus alerts for SELinuxMount readiness #714
Full changelog

cluster-version-operator

OTA-1997: Allow the CVO to use the agentic-skills payload image when creating proposals #1433
OTA-2084: Register agenticrunv1alpha1 in the Runtime client scheme #1434
OTA-2084: pkg/agenticrun/controller: Inline AgenticRun prompt, dropping the ConfigMap #1432
TRT-2842: Revert #1427 “OTA-1997: Allow the CVO to use the agentic-skills payload image when creating proposals.” #1431
OTA-1997: Allow the CVO to use the agentic-skills payload image when creating proposals. #1427
OTA-2084, OTA-2097: pkg/agenticrun/controller: Additional logging to AgenticRun CRD detection #1428
OTA-2084: Conditionally deploy console plugin when AgenticRun CRD is present #1425
NO-JIRA: Fix make build target cd issue #1404
OTA-2064: Rename Proposal API to AgenticRun #1422
OTA-1967: install: Drop Lightspeed CustomResourceDefinitions (Proposal, etc.) #1412
OTA-1956: install: Split multi-document YAML and add missing annotations #1423
OCPCLOUD-3368: bumping with o/api changes to reflect new capabilities (crdcompatibilitychecker+capi) #1403
TRT-2776: Revert #1398 “install: Split multi-document YAML and add missing annotations” #1420
Full changelog

console

HELM-731: Upgrade helm in console #16607
OCPBUGS-98489: CVE-2026-59869 bump js-yaml #16760
CONSOLE-5415, OCPBUGS-94037: Bump react-router to ~7.18.1 #16726
NO-ISSUE: Add empty Prow techPreview e2e entrypoint scripts #16766
NO-ISSUE: Match operator lifecycle versions by major.minor only #16698
CONSOLE-3956: Replace custom Shortcut components with PF ShortcutGrid #16207
NO-ISSUE: Skip OLMv0-specific e2e tests when techPreview is enabled #16759
CONSOLE-5423: Add rspack support for dynamic plugins #16752
CONSOLE-5421: Rename “Self-support” to “Unsupported” and stack support phase date #16742
CONSOLE-5196: Fix flaky Playwright e2e tests caused by OAuth redirect timing #16740
CONSOLE-5306: Surface Playwright report link in Prow Spyglass #16743
OCPBUGS-50016, OCPBUGS-86587: Bump to PF 6.6.0 #16750
OCPBUGS-88715: Bump follow-redirects from 1.15.3 to 1.16.0 to remediate CVE-2026-40895 #16590
CONSOLE-5356: Add optional onSubmit parameter to useLabelsModal hook #16560
CONSOLE-5124: Multi-domain console backend support #16686
NO-ISSUE: Return self-support when date is before all lifecycle phases #16699
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

CONSOLE-5431: Add allow-all NetworkPolicy to openshift-console namespace #1199
TRT-2858: Revert “Merge pull request #1196 from ingvagabund/tls-injection-to-console” #1200
CONSOLE-5432: Add NetworkPolicy manifests for openshift-console-operator namespace #1198
CNTRLPLANE-3423: feat: inject centralized TLS into console operand #1196
NO-JIRA: Revert “Merge pull request #1170 from logonoff/http2” #1194
CONSOLE-5433: Add default-deny NetworkPolicy for openshift-console-user-settings namespace #1195
OCPBUGS-93982: gate Progressing on version transition and operand rollout status #1188
HELM-639: Update Helm download manifests for Helm 3 and Helm 4. #1175
CONSOLE-5122: Multi-domain console route, ConfigMap, and OAuth support #1184
OCPBUGS-67134: add grace period before reporting Available=False #1179
TRT-2780: Revert #1178 #1186
OCPBUGS-93982: skip generation check when deployment was just updated #1178
Full changelog

coredns

NE-2744: UPSTREAM: 8227: fix(tls): use Go TLS defaults #194
OCPBUGS-87352: Updating coredns-container image to be consistent with ART for 5.0 #189
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-96822: Bump golang.org/x/net to v0.55.0 #405
Full changelog

csi-driver-nfs

OCPBUGS-97795: Bump golang.org/x/crypto to v0.53.0 #197
Full changelog

csi-external-attacher

STOR-2931: Rebase to upstream v4.12.0 for OCP 5.0 #110
Full changelog

csi-external-provisioner

STOR-2931: Rebase to upstream v6.3.0 for OCP 5.0 #146
Full changelog

csi-external-resizer

STOR-2931: Rebase to upstream v2.2.1 for OCP 5.0 #198
Full changelog

csi-external-snapshotter, csi-snapshot-controller

OCPBUGS-99009: [external-snapshotter] SnapshotContentObjectDeleteError event fired when VolumeSnapshotContent is already deleted #226
Full changelog

csi-livenessprobe

STOR-2931: Rebase to upstream v2.19.0 for OCP 5.0 #94
Full changelog

csi-node-driver-registrar

STOR-2931: Rebase to upstream v2.17.0 for OCP 5.0 #108
Full changelog

docker-registry

OCPBUGS-96818: bump golang.com/x/crypto #473
Full changelog

driver-toolkit

OCPBUGS-82502: Fix e2e test duplicate output from oc run -i –rm #198
MGMT-24788: Fix pod deletion message contaminating RHCOS kernel version string #197
Full changelog

etcd

OCPBUGS-94014: Rebase v3.6.13 on main (5.0/4.23) #392
OCPBUGS-87363: Updating ose-etcd-container image to be consistent with ART for 5.0 #384
OCPBUGS-85258: 5.0 rebase 3.6.11 #375
OCPBUGS-82495: 5.0/4.23 rebase 3.6.10 #368
OCPBUGS-74168: Remove unused ART dockerfiles #356
Full changelog

gcp-cloud-controller-manager

OCPCLOUD-3592: Merge https://github.com/kubernetes/cloud-provider-gcp:master (b01dfd6) into main #104
OCPBUGS-84569: Fix node.kubernetes.io/exclude-from-external-load-balancers on masters #121
Full changelog

gcp-cluster-api-controllers

OCPCLOUD-3601: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.13.0 (be0534e) into main #300
🐛 OCPBUGS-85337: set imagePullPolicy IfNotPresent on provider workloads #299
Full changelog

gcp-pd-csi-driver

STOR-2915: Update go.opentelemetry.io/otel and otel/sdk to v1.43.0 #125
STOR-2915: Rebase to upstream v1.26.0 for OCP 5.0 #124
Full changelog

gcp-workload-identity-federation-webhook

OCPCLOUD-3585: Update gcp-workload-identity-federation-webhook to k8s 1.36 #21
Full changelog

haproxy-router

NE-2829: images/router/f5: Delete F5 router Dockerfile #826
OCPBUGS-77056: Revert #825 “Make external cert validation asynchronous (v2 — race condition fixes)” #829
OCPBUGS-77056: Make external cert validation asynchronous (v2 — race condition fixes) #825
NO-JIRA: Add default coderabbit for the repo #798
TRT-2841: Revert “OCPBUGS-77056: Make external cert validation asynchronous (Resurrection)” #824
OCPBUGS-77056: Make external cert validation asynchronous (Resurrection) #822
NE-2220: Update HAProxy RPM in the router container to 3.2.19 #792
NE-2741: Implement TLS Curves Support for Metrics Endpoints #811
TRT-2813: Revert “Make external cert validation asynchronous” #817
NE-2766: Bump Kubernetes to 1.36.2 and Go to 1.26 #814
OCPBUGS-77056: Make external cert validation asynchronous #745
OCPBUGS-87204: Prevent SSRF via FQDN-typed EndpointSlices #812
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-85262: Re-enable kubectl kuberc commands e2e tests #2731
OCPBUGS-92798: Add NodeSelectorAdjuster admission plugin for standalone clusters (part 2) #2717
STOR-2961: UPSTREAM: 138768: move VolumeGroupSnapshot to V1 #2723
CNTRLPLANE-3323: Update openshift-hack/rebase.sh #2701
OCPBUGS-98100: e2e: storage snapshot tests should read custom timeouts from manifest #2719
OCPBUGS-92836: UPSTREAM: <carry>: upkeep cpu partitioning admission webhook #2713
STOR-2963: Save SELinuxWarningController upgradeability to a ConfigMap #2720
OCPBUGS-90520: UPSTREAM: 140211: Promote regression-issue-74839 to 1.5 #2709
OCPBUGS-99058: Disable DRA extended resource test that requires dedicated DRA infrastructure #2721
OCPSTRAT-3036: Rebase 1.36.2 #2653
Full changelog

hypershift

OCPBUGS-98654: delete_hosted_cluster.sh fails to run with no –dns-zone-rg-name flag #8945
NO-JIRA: docs: fix ARCHITECTURE.md to reflect current CPO image resolution #9179
OCPBUGS-100087: Replace exponential backoff with fixed-interval requeue in CRR controller #9148
OCPBUGS-99783: fix(e2e): check pre-upgrade HO version for shared role support #8891
CNTRLPLANE-3709: test(azure): enable Global Pull Secret test in Azure CI #9073
CNTRLPLANE-3956: Make EnsureGlobalPullSecret e2e test informing #9167
CNTRLPLANE-2539: Move generation of the CAPI Provider Role #8305
NO-JIRA: docs: add hash migration impact guidance and CPO data-plane component docs #9161
CNTRLPLANE-3897: Add product-cli unit tests for create nodepool #9121
CNTRLPLANE-3600: Bump k8s to v0.36.2, controller-runtime to v0.24.1, CAPI to v1.12.8 #8695
CNTRLPLANE-3944: Regenerate requirements.txt files with pinned –hash entries #9135
AUTOSCALE-166: fix yq dependency for running upstream karpenter tests #9060
OCPBUGS-99288: Add proxy env vars to AWS cloud-controller-manager deployment #9053
CNTRLPLANE-3604: Add CAPI migration flag placeholder #9145
CNTRLPLANE-3564: test(awsprivatelink): add unit test for NoSuchHostedZone handling dur… #9141
NO-JIRA: build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.1 #9113
NO-JIRA: build(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.1 in /hack/tools #9111
CNTRLPLANE-3888: docs: add on-demand jira-agent triggering and plugin install instructions #9079
OCPBUGS-54776: fix(ignition-server): log MCS output on HTTP request failures #8936
CNTRLPLANE-400: feat(remediationAllowed in NP): propagate MHC RemediationAllowed to NodePool Ready condition #9019
NO-JIRA: align control-plane Dockerfile builder image with main Dockerfile #9138
OCPBUGS-99768: fix OSImageStream e2e test and Makefile test-changed for OCP 5.0 #9115
CNTRLPLANE-3893: Add product-cli unit tests for destroy cluster #9116
NO-JIRA: ci(deps): bump actions/checkout from 6.0.2 to 7.0.1 #9090
NO-JIRA: ci(deps): bump actions/setup-python from 6.2.0 to 7.0.0 #9089
NO-JIRA: ci(deps): bump actions/setup-go from 6.4.0 to 7.0.0 #9029
OCPBUGS-86494: fix(nodepool): preserve KubeVirt userdata Secrets during NodePool rollout #8581
CNTRLPLANE-3910: Fix e2e test reliability for mirroring tests and test-changed target #9086
CNTRLPLANE-3919: data race in TestEnqueueNodePoolsForCloudConfig #9095
NO-JIRA: chore(konflux): update Tekton task bundles to latest versions #9081
NE-2815: feat: configure HAProxy version selection #9040
CNTRLPLANE-3791: fix: revert api-lint –whole-files to avoid surfacing pre-existing violations #9071
OCPBUGS-99014: Authenticate Konnectivity agents with cluster CA #9031
CNTRLPLANE-3032: test: add e2e v2 tests for NodePool OSImageStream #9033
OCPBUGS-98744: compare post-upgrade RHCOS version against pre-upgrade instead of release metadata #9014
OCPBUGS-98462: add jitter to AWS endpoint service requeue delay #8996
OCPBUGS-98465: prevent DS crash in pull secret verifier and add propagation diagnostics #8991
OCPBUGS-99289: Exclude aggregated docs page from search index #9043
CNTRLPLANE-3199: add etcd backup infrastructure and docs for self-managed Azure #8785
CNTRLPLANE-3862: fix(ci): reintroduce verify-ci make target for GHA verify workflow #9045
CNTRLPLANE-3859: Restructure pre-commit push hooks for faster local feedback #9042
CNTRLPLANE-3434: add ho-release-gate pipeline for nightly promotion #8602
NO-JIRA: fix(cpo): regenerate stale ModernTLS test fixtures #9041
CNTRLPLANE-647: Expose v4/v6InternalSubnet OVN-Kubernetes configuration in HostedCluster API #8249
ARO-27360: Add ACR pull identity configured metric #8840
ARO-24037: gate cloud config on hash to prevent serving stale content #8946
CNTRLPLANE-3615: add tls security profile configuration for the etcd #8871
OCPBUGS-88312: use in-cluster service for oauth-server #8772
CNTRLPLANE-3791: make pre-commit hooks resilient to mock generation failures #9016
NO-JIRA: update Tekton task bundles to latest versions #9038
OCPBUGS-98384: fix bastion cleanup KeyPair leak by capturing infraID/region eagerly #8982
CNTRLPLANE-3674: Add Jira Agent onboarding guide #8814
CNTRLPLANE-3825: move test conventions to TESTING.md #9036
OCPSTRAT-3150: Add etcd sharding by resource kind support #8705
OCPBUGS-98695: add Azure CPO overrides for 4.22 #9010
NO-JIRA: ci(deps): bump actions/setup-node from 6.4.0 to 7.0.0 #9030
CNTRLPLANE-3763: tag bastion resources with e2e provenance #9022
OCPBUGS-98575: feat: inject hosted cluster TLS security profile into packageserver #9001
AUTOSCALE-870: add KarpenterOperator tech-preview FeatureGate #8976
CNTRLPLANE-3774: fix: control-plane-operator: improve opaque conditions #8804
CNTRLPLANE-3695: refactor(hcco): extract machine-config-daemon pod name format to constant #8988
CNTRLPLANE-3820: add cleanleaked tool for AWS leaked resource cleanup #8964
SPLAT-2743: aws/ccm - remove inline iam policy patch #8835
NO-JIRA: Add validateOnUpdateTableInput to envtest and fix test specs #9015
OCPBUGS-98461: requeue CRR on transiently unavailable resources #8997
OCPBUGS-98718: retry CreateVpcEndpoint on AWS throttle errors #9012
CNTRLPLANE-3030: feat(nodepool,ignition-server): consume os-stream and add ValidOSImageStream condition #8792
OCPBUGS-88738: clean up orphaned mirrored ConfigMaps on NodePool deletion #8890
OCPBUGS-97830: Add wait-for-etcd init container to oauth-apiserver #8940
fix(ci): make race detection opt-out for pre-push hook #9003
CNTRLPLANE-3763: tag CLI and e2e AWS resources with infra-id, cluster-name, and source #8909
OCPBUGS-93462: Fix stale resourceVersion in HCCO patchHCPStatusCondition #8902
OCPBUGS-98466: retry Prometheus query exec on transient konnectivity 502 #8995
OCPBUGS-98464: handle stale DaemonSet in GlobalPullSecret test #8990
SPLAT-2741: Add SetSecurityGroups perms for AWS CCM for BYO SG on AWS NLB #8401
OCPBUGS-98571: Skip Azure topology LB scope override for ARO HCP IngressController #8992
CNTRLPLANE-3553: Wire usesRunc detection into RHEL stream resolution #8832
OCPBUGS-88531: Remove CPO-side restart logic for CNO operands #8751
CNTRLPLANE-3831: skip UpstreamParity OIDC tests on releases before 4.23 #8987
OCPBUGS-98086: fix(cpo,hcco): prevent premature KAS convergence during KMS key rotation #8970
OCPBUGS-78310: fix(cli): initialize controller-runtime logger in product-cli #8955
OCPBUGS-63720: orphan machines when managed identity is invalid on clus… #8296
OCPBUGS-98387: Add retry logic to fix Azure self-managed e2e presubmit failures #8983
OCPBUGS-93785: fix(cpo): initialize nil resource requests map before applying overrides #8924
OCPBUGS-91650: disable consolidation in karpenter upgrade test #8874
CNTRLPLANE-3553: Wire osImageStream into NodePool controller (hash, token, status, validation) #8730
NO-JIRA: chore: Resolve git SHA for PULL_BASE_SHA in makefile #8980
OCPBUGS-95615: fix(kubevirt): use only first MachineInternalIP per family in EndpointSlice endpoints #8892
CNTRLPLANE-3824: Fix verify-crd-schema in git worktrees #8975
GCP-859: scope PSC NAT subnet discovery to the management cluster VPC #8927
CNTRLPLANE-3761: replace git clean with find for mock cleanup #8973
NO-JIRA: chore: update core-reviewers membership #8967
OTA-1764: feat(cvo): add TLS cipher suites and minimum version flags #8013
AROSLSRE-1158: add –install-scope flag to hypershift install #8725
NO-JIRA: chore(deps): weekly dependabot consolidation #8849
CNTRLPLANE-3616: setting min-tls-version for the konnectivity-server container #8866
CNTRLPLANE-3766: add chai-bot CI daily health report instructions #8918
NO-JIRA: Remove address-review-comments GHA workflow #8943
CNTRLPLANE-3698: fix(install): replace context.TODO() with proper ctx parameter #8932
CNTRLPLANE-3771: fix /rebase GHA workflow for fork PRs #8934
NO-JIRA: chore: update github actions runner image to go 1.26.4 #8888
AROSLSRE-830: Add etcd EndpointSlice self-registration to fix DNS resolution delays #8613
OCPBUGS-92086: GetVnetID is empty when running setup_all.sh in Managed AKS #8830
OCPBUGS-84269: fix(nodepool): skip CNI-internal IPs in ClusterNetworkCIDRConflict check #8230
CNTRLPLANE-3619: add azure CPO overrides for 4.22.0-4.22.3 #8908
CNTRLPLANE-3696: Remove stale TODO about ImagePullPolicy in DNS operator #8923
NO-JIRA: Fall back to AWS SDK default credential chain when no explicit credentials provided #8889
CNTRLPLANE-3697: Expand unit test coverage for KAS config params #8922
CNTRLPLANE-3306: add ExternalOIDCWithUpstreamParity e2e tests #8287
CNTRLPLANE-3624: e2e v2 test for control-plane-pki-operator TLS configuration #8793
OCPBUGS-94238: Add missing CLI IAM role policy entry #8883
NO-JIRA: Add missing verify targets to GitHub Actions workflow #8870
NO-JIRA: fix(e2e-v2): gate ConfigOperatorReconciliationSucceeded on 4.23+ #8875
CNTRLPLANE-3532: Add shared status patching helpers with optimistic locking #8782
OCPBUGS-94178: Remove –skip-crd-migration-phases flags from CAPI deployment #8881
NO-JIRA: add Konflux CI scripts reference and document validate-pr-override-images #8852
CNTRLPLANE-3529: Add operator IAM role creation command and install role ARN flags #8636
CNTRLPLANE-3737: Add find-push-pipelinerun script #8851
GCP-841: remove ClusterResourceSet feature gate from CAPG manager args #8795
GCP-866: chore(owners): add floresroger to gcp-reviewers #8863
CNTRLPLANE-3733: add –blog flag to /pr-report skill #8848
CNTRLPLANE-3577: test(nodepool): add NodeDrainTimeout propagation tests #8737
CNTRLPLANE-3576: add RestartDateAnnotation propagation tests #8733
CNTRLPLANE-3565: test and fix destroy grace period lifecycle #8789
OTA-1956: Skip ConsolePlugin manifests during CVO bootstrap #8839
OCPBUGS-92791: fix(configrefs): exclude componentRoutes secrets from management cluster sync #8838
CNTRLPLANE-3624: add tls security profile configuration for the control-plane-pki-operator #8768
CNTRLPLANE-3686: feat(api,cpo): add observedGeneration to ControlPlaneComponentStatus #8819
OCPBUGS-86025: Close HTTP response bodies to prevent goroutine and connection leaks #8560
OCPBUGS-92206: bump catalog image version cap from 4.21 to 4.22 #8836
OCPBUGS-86648: move IP addresses from dnsNames to ips in etcd peer cert #8847
NO-JIRA: docs: add required pod-security annotation for GCP hosted clusters #8850
CNTRLPLANE-3716: Update GitHub Actions docs with slash-command workflows #8822
OSDOCS-19432: docs: add cluster capabilities how-to and contributor guide #8371
OCPBUGS-76530: Fix intermittent etcd peer communication failures #8479
OCPBUGS-81312: fix(cpo): use KubeAPIServerDNSName for OAuth LoginURL when set #8433
OCPBUGS-84114, OSASINFRA-4368: Update CAPO to latest stable release #8687
CNTRLPLANE-597: Surface HCCO reconciliation failures in HostedCluster status #8340
OCPBUGS-92013: fix NodePool stuck in UpdatingVersion/UpdatingConfig due to stale conversion-data annotation #8821
CNTRLPLANE-3526: Add spec.monitoring API for metrics forwarding #8626
NO-JIRA: add blog section with June 2026 progress report #8816
OCPBUGS-91656: fix(test): add retry logic to GetLogs in Karpenter kubelet propagatio… #8805
OCPBUGS-86415: Use canonical image for kube-apiserver-proxy static pod #8742
OCPBUGS-92034: fix registry override matching for digest and tag separators #8824
OCPBUGS-91997: Apply MetricsSet relabel configs to KAS ServiceMonitor #8715
OCPBUGS-91650: bump consolidateAfter to 60s in karpenter e2e base NodePool #8820
CNTRLPLANE-596: Add –kubeconfig flag to HyperShift and HCP CLI #8402
NO-JIRA: Exclude generated delegating client from codecov #8825
CNTRLPLANE-3276: Add Azure ExternalPrivateService and endpoint access transition test #8718
OCPBUGS-57453: fix(cpo): use Status.DNSZoneID before querying AWS Route53 #8615
CNTRLPLANE-2916: restore conditional deletion of openshift-ingress NetworkPolicy #8754
CNTRLPLANE-3352: fix GHA reusable workflow for fork PRs #8818
CNTRLPLANE-502: Add CRD breaking changes validation to HyperShift CI #8535
NO-JIRA: chore(deps): weekly dependabot consolidation #8784
CNTRLPLANE-3352: force HTTPS for GHA plugin dependency clones #8815
OCPBUGS-90663: fix(test): use Eventually for auth-config ConfigMap assertions #8799
NO-JIRA: docs: Add private topology DNS architecture documentation #8803
CNTRLPLANE-3145: refactor(hostedcluster): segregate reconcile loop into error-collecting blocks #7908
OCPBUGS-86949: Guard HCCO KubeletConfig CM deletion against transient source absence #8672
NO-JIRA: fix(ci): switch to openshift-developer plugin bundle for GHA workflows #8809
CNTRLPLANE-3611: propagate tls profile to aws-pod-identity-webhook #8713
NO-JIRA: fix(ci): increase reusable workflow timeout to 90 minutes #8797
OCPBUGS-55621: Replace konnectivity Dial with DialContext in konnectivity-https-proxy/cmd.go #8550
OCPBUGS-85585: tighten registry override matching to strict longest-prefix across release-image consumers #8509
NO-JIRA: fix(ci): add –verbose flag required by stream-json output format #8796
CNTRLPLANE-3568: test(e2e): verify AWS additional-tags propagation to guest infrastruc… #8712
ci: stream Claude output in GHA workflow logs #8778
OCPBUGS-88685: Fix metrics-proxy unbounded memory growth #8740
CNTRLPLANE-3584: Enable resource metrics for kube-scheduler endpoints #8680
CNTRLPLANE-3645: docs: add retrospective guidelines #8777
CNTRLPLANE-3093, CNTRLPLANE-3095, CNTRLPLANE-3096, CNTRLPLANE-3098: lower Azure WI webhook test version gate to 4.20 #8323
CNTRLPLANE-3641: ci: replace COMMUNITY_FORK_TOKEN PAT with GitHub App token #8776
AROSLSRE-687: propagate HCP Azure resource ID annotation to control plane namespace #8312
ARO-24037, OCPBUGS-86616: feat(azure): add ACR pull identity to worker cloud.conf and VMSS #8472
NO-JIRA: chore(deps): weekly dependabot consolidation #8684
CNTRLPLANE-3641: fix restructure-commits GHA to force push without confirmation #8771
CNTRLPLANE-3023: Add CEL rule to prevent osImageStream removal #8719
CNTRLPLANE-3641: add restructure-commits and rebase GHA workflows #8770
CNTRLPLANE-3636: Add upgrade-from-.0 periodic jobs to OCP branching checklist #8764
CNTRLPLANE-3640: Fix address-review-comments GHA credential file deleted during run #8769
CNTRLPLANE-3026: Decouple AWS AMI resolution for dual-stream support #8699
CNTRLPLANE-3332, CNTRLPLANE-3333: Add control plane metrics forwarding recipe and Grafana dashboard #8332
ROSAENG-8224: feat(operator): add –hcp-egress-block-cidrs flag to stabilize NetworkPolicy egress exceptions #8689
CNTRLPLANE-3633: docs: add presubmit e2e triage guide #8741
OCPBUGS-89231: version-gate TestPullSecretUnavailable to 4.23+ #8744
CNTRLPLANE-3552: Multi-stream CoreOS metadata parsing and stream resolution #8669
ACM-34234: build(cli): rename hcp archives to include OS and arch in filename #8649
CNTRLPLANE-3515: test(e2e): add day-2 label/taint no-rollout verification #8595
NO-JIRA: Add Sippy/CR test name annotations to v2 e2e tests #8739
OCPBUGS-54790: Move packageserver PDB from guest cluster to management cluster #8459
OCPBUGS-84577: clear stale EtcdRecoveryActive failure condition when etcd is healthy #8406
CNTRLPLANE-3575: test(controlplane-component): verify setDefaultOptions preserves exis… #8731
NO-JIRA: docs: improve AGENTS.md and DEVELOPMENT.md guidance for AI agents #8703
OCPBUGS-85778: Fix NodePool reconciliation failure when updating mirrored immutable ConfigMaps #8543
OCPBUGS-86662: Optimize CPO deployment polling interval in tests of additional trust bundle propagation #8617
NO-JIRA: ci(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 #8727
CNTRLPLANE-3271: add External OIDC e2e tests for v2 framework #8674
OCPBUGS-84555: fix(cpo): include serving cert CAs in bootstrap and external admin kubeconfigs #8311
NO-JIRA: chore: add unit test naming and placement conventions #8722
NO-JIRA: build(operator): drop hypershift-no-cgo from operator container images #8601
CNTRLPLANE-3617: Increase address-review-comments max turns to 200 #8723
CNTRLPLANE-3617: Increase address-review-comments timeout to 45 minutes #8720
OCPBUGS-82443: fix(cpo): deduplicate VPC endpoint subnets by AZ #8651
CNTRLPLANE-3020: Adopt coreos/stream-metadata-go upstream library #8673
NO-JIRA: ci: add gopls and pre-commit plugins to address-review workflow #8702
NO-JIRA: fix address-review-comments workflow for fork PRs #8706
NO-JIRA: Add gitlint to pre-commit hooks #8701
CNTRLPLANE-3584: Add kube-scheduler ServiceMonitor with CA-signed serving certs #8489
NO-JIRA: Improve AI skill quality and restructure AGENTS.md #8690
CNTRLPLANE-3555: Add ARCHITECTURE.md to repository root #8668
OCPBUGS-84308: fix(cpo) delete terminated MCD pods to retry in-place upgrades #8434
OCPBUGS-87217: fix: add CPU partitioning workload annotation to control-plane-metrics-forwarder #8686
CNTRLPLANE-3599: Remove controller-runtime v0.19.7 pin for k8s 1.36 bump #8683
CNTRLPLANE-3550: Add missing v2 test suites to Azure self-managed test matrix #8658
NO-JIRA: chore(deps): weekly dependabot consolidation #8634
NO-JIRA: test(e2e/v2): sweep AGENTS.md conformance violations #8659
OCPBUGS-87018: Revert conditional deletion of openshift-ingress NetworkPolicy #8662
NO-JIRA: move CONTRIBUTING.md to repo root and update CI guidance #8329
CNTRLPLANE-3548: Add v2 e2e test framework documentation #8641
OCPBUGS-86008: Gate Route watch on management cluster capability #8484
Revert “OCPBUGS-86774: Pin azure-cli to 2.72.0 in e2e Dockerfile” #8652
OCPBUGS-77268: reconcile HCP when pull secret is unavailable #8352
GCP-298: Add GCP e2e v2 test artifacts directory structure documentation #8446
CNTRLPLANE-2207: Upgrade to CAPI 1.11 #8594
NO-JIRA: chore(ci): enforce v2 e2e AGENTS.md standards via CodeRabbit #8660
CNTRLPLANE-1357: add KMSv2 secret encryption e2e v2 test for Self Managed Azure #8653
CNTRLPLANE-3167: Auto-detect credential type for HCPEtcdBackup #8368
NO-JIRA: Fix Azure private/topology CEL validation rules #8490
GCP-688: Port remaining v1 TestCreateCluster gaps to v2 e2e #8590
NO-JIRA: feat(skills): add validate-pr-override-images skill #8616
OCPSTRAT-1677: Add Spot instances documentation #8485
OCPBUGS-43444: Allow kubevirt-csi storageclass default to be changed by user #8597
CNTRLPLANE-3510: Enable additional golangci-lint linters #8567
OCPBUGS-86306: Stop controllers fighting over HCP status #8562
CNTRLPLANE-3535: Add codecov carryforward flags to stabilize project coverage checks #8642
OCPSTRAT-1677: fix(cpo): increase NTH default workers from 10 to 20 #8500
NO-JIRA: feat(ci): add skopeo and gh CLI to ARC runner image #8627
OCPBUGS-85584: Fix stale api.openshift.com labels on HostedControlPlane #8507
NO-JIRA: ci(runner): update base image to actions-runner v2.334.0 #8643
CNTRLPLANE-3533: Add Dockerfiles to codecov ignore list #8640
OCPBUGS-86774: Pin azure-cli to 2.72.0 in e2e Dockerfile #8638
NO-JIRA: ci(deps): bump google-github-actions/auth from 2.1.13 to 3.0.0 #8630
NO-JIRA: ci(deps): bump actions/checkout from 4.3.1 to 6.0.2 #8631
NO-JIRA: Fix HCCO deployment location in AGENTS.md #8635
CNTRLPLANE-3534: ci: add –allowedTools to address-review-comments workflow #8639
OCPBUGS-86238: add CPO overrides for ARO swift-nic resource limits #8610
OCPBUGS-81544: requeue when AutoNodeEnabled is progressing #8497
NO-JIRA: add address-review-comments workflow #8621
NO-JIRA: De-duplicate Azure self-managed documentation #8566
CNTRLPLANE-3531: Remove EFS-backed Go build cache from CI runners #8637
CNTRLPLANE-3329: Rebuild runner image on gocacheprog and pipeline changes #8633
CNTRLPLANE-3329: Fix gocacheprog cache corruption with atomic writes #8624
NO-JIRA: fix(karpenter): start node cleanup when CAPI Cluster is deleted #8589
OCPBUGS-85151: Re-enable serviceaccount-pull-secrets controller when registry managementState changes from Removed #8522
OCPBUGS-85243: Set aws-load-balancer-scheme on public HCP router service #8458
OCPBUGS-38898: fix kubeadmin password hash reconciliation to compare password against stored hash #8358
OCPBUGS-84303: fix(api): add IPv6 OVN join subnet config to prevent dual-stack routing collision #8421
NO-JIRA: clone ai-helpers into workspace for plugin file access #8620
NO-JIRA: bump claude max-turns to 50 in WIF test #8619
NO-JIRA: test ai-sbom plugin and verify plugin loading #8614
CNTRLPLANE-3329: Use GOCACHEPROG for zero-copy EFS build cache #8576
NO-JIRA: replace container image with workflow-step plugin setup #8611
NO-JIRA: use ai-helpers container image for Claude WIF test #8609
NO-JIRA: fix Claude WIF test workflow HOME for ARC runners #8600
NO-JIRA: fix Claude WIF test workflow for ARC runners #8598
NO-JIRA: test Claude Code WIF auth in GitHub Actions #8588
OCPBUGS-86296: Propagate management cluster proxy env vars to konnectivity sidecar #8569
OCPBUGS-65730: add –tls-cipher-suites to oauth-apiserver deployment #8554
OCPBUGS-85351: Revert “fix(azure): prevent externalDNSDomain from shadowing cluster apps domain” #8585
OCPBUGS-84955: bootstrap serving certs at hypershift operator startup #8545
ci(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 #8574
CNTRLPLANE-3040: add regression tests for CAS pause/unpause replica clamping #8262
NO-JIRA: chore(deps): weekly dependabot consolidation #8578
GCP-688: Port v1 E2E validations to envtest, unit tests, and v2 Ginkgo specs #8511
NO-JIRA: fix(e2e): lower pull secret in-place propagation test gate to 4.22 #8553
OCPBUGS-86075: docs(nodepool): fixing incomplete stuck node drain documentation in section Scaling To Zero #8544
CNTRLPLANE-3222: Port v1 lifecycle tests to v2 Ginkgo framework #8527
AUTOSCALE-692: remove default debug log level from karpenter container #8561
OCPBUGS-86310: Handle CA bundle aggregation delay by requeuing revocation #8563
CNTRLPLANE-3329: Use fuse-overlayfs for build cache instead of full copy #8568
NO-JIRA: fix(e2e): use public multi-arch image for ARM64 karpenter test #8532
OCPBUGS-86238: set limits for aro.openshift.io/swift-nic in request overrides for ARO swift #8552
OCPBUGS-85351: fix(azure): prevent externalDNSDomain from shadowing cluster apps domain #8480
CNTRLPLANE-3371: Fix AllowedCIDRs e2e test for Route-based KAS #8469
NO-JIRA: build(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 in /hack/tools #8547
NO-JIRA: Update Konflux Tekton task bundles #8557
NO-JIRA: chore(deps): weekly dependabot consolidation #8464
CNTRLPLANE-3070: Support KMS on self-managed Azure without affecting ARO HCP #8088
OCPBUGS-59142: fix ValidReleaseImage condition message to show minor version #8519
NO-JIRA: Add onboarding guide for new HCP team members #8132
OCPBUGS-85011: fix(cpo): use check-first pattern for EBS CSI operator serving cert #8418
CNTRLPLANE-3329: Extend EFS-backed build cache to lint, verify, and envtest workflows #8495
NO-JIRA: ci(deps): bump cloudflare/wrangler-action from 3.15.0 to 4.0.0 #8524
OCPBUGS-85763: Fix metrics-proxy deployment failure due to dots in volume names #8530
GCP-636: feat(gcp): support for managing GCP OIDC discovery documents #8413
OCPBUGS-84307: Clarify –base-domain flag default behavior #8381
AUTOSCALE-681: various karpenter and karpenterupgrade test fixes #8510
CNTRLPLANE-3329: Replace actions/cache with EFS-backed build cache in unit tests #8494
OCPBUGS-85577: Update external-dns image from 1.1.0-3 to 1.2.1 #8506
OCPBUGS-77827: fix(api): add missing has() guards to servingCerts CEL validation rule #8331
CNTRLPLANE-3380: docs: add aws-node-termination-handler to repositories list #8514
OCPBUGS-85580: Fix webhook TLS failure after service-ca to self-managed cert migration #8504
build(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 in /hack/tools #8481
OCPBUGS-85344: Add version gates for 4.22 backward compatibility in e2e tests #8466
AUTOSCALE-681: remove TechPreviewNoUpgrade gate from karpenter upgrade test #8498
CNTRLPLANE-3329: Mount EFS-backed Go build cache PV on ARC runner pods #8493
NO-JIRA: docs: add repositories page listing team-owned repos #8505
CNTRLPLANE-3329: Add nightly CronJob to warm EFS-backed Go build cache #8496
CNTRLPLANE-3324: Restore non-obvious comments after gocyclo refactor #8487
AUTOSCALE-558: Expose KubeletConfig on OpenShiftEC2Nodeclass as structured fields + preserveunknown/overflow #8192
NO-JIRA: Fix docs deploy preview by replacing gh CLI with curl #8488
CNTRLPLANE-2946: Move AWS NLB annotation inside LoadBalancer strategy block #7993
OCPBUGS-78539: re-add crash toleration for dns-operator during upgrades #8483
CNTRLPLANE-3384: Remove unconditional low-quality log messages from controllers #8428
OCPBUGS-84971: Gate AWSDefaultSecurityGroupDeleted condition to AWS platform #8415
CNTRLPLANE-3324: Enable gocyclo linter and reduce cyclomatic complexity #8309
NO-JIRA: fix(karpenter): resolve HCP karpenter finalizer when AutoNode is disabled #8404
OCPBUGS-62177: verify cert revocation against all KAS pods #8263
NO-JIRA: Document CEL over webhooks policy for AI agents #8478
NO-JIRA: docs(kubevirt): add how-to for configuring VMs with JSON patches #8473
CNTRLPLANE-1741: Migrate gomaxprocs-webhook pipelines to use common-operator-build #7122
NO-JIRA: docs: update api-sme agent and api/AGENTS.md conventions #8477
OCPBUGS-81686: fix(authentication): use v2 auth validation for CEL and expression support. #8246
OCPBUGS-85084: fix(ci): use explicit lease in dependabot commit fix push #8476
OCPBUGS-75887: fix(inplaceupgrader): include node name in degraded upgrade error message #8244
NO-JIRA: fix(e2e): prevent agent unbinding and node reboots during backup/restore #8356
NO-JIRA: Update GHA docs for reusable workflow pattern #8453
GCP-413: add image registry v2 e2e tests for hosted clusters #8412
NO-JIRA: docs: make CLAUDE.md a symlink to AGENTS.md across the repo #8444
CNTRLPLANE-2778: feat(tooling): overhaul pr-report skill and Python script #7754
ACM-33601: use the latest ubi9 nginx image #8432
GCP-414: add image registry operational guide #8455
OCPBUGS-84528: clarify pull secret in-place update behavior and add CP watches #8327
OCPBUGS-84955: Add render-sensitive flag to hypershift install render #8436
OCPBUGS-84857: bump go builder and ubi images #8437
GCP-410: fix(gcp): add registry SA WIF binding for image registry GCS access #8445
CNTRLPLANE-3381: CPO: Surface cloud resource deletion timeout as a status condition #8426
OCPBUGS-85084: fix(ci): rewrite dependabot commit messages to pass gitlint #8435
NO-JIRA: docs: detail release branch e2e config steps in branch-process guide #8441
CNTRLPLANE-3222: Migrate self-managed Azure e2e tests to v2 Ginkgo framework #8204
GCP-412: add envtest cases for GCP imageRegistry CEL validation #8411
CNTRLPLANE-2939: Coordinate CRD lifecycle with Cluster CAPI Operator #7996
OCPBUGS-77040: Add AWS ISO domains to konnectivity IsCloudAPI #8251
OCPBUGS-83328: fix skipProxyForKAS to use standard NO_PROXY matching #8254
OCPBUGS-84969: fix(e2e): wait for Karpenter node cleanup in parallel tests to prevent vCPU flake #8414
CNTRLPLANE-3343: Extract support/k8sutil package from support/util #8396
TRT-2653: Revert #8357 “OCPBUGS-84572: fix(cpo): generate EBS CSI driver operator serving cert in CPO” #8417
NO-JIRA: chore(deps): weekly dependabot consolidation #8410
NO-JIRA: Skip TestKarpenter for releases < 4.22 #8409
CNTRLPLANE-3351: e2e: add opt-in CPU resource request overrides for control plane components #8385
OCPBUGS-84509: Add AWS LB Controller cross-zone load balancing annotation #8344
OCPBUGS-84572: fix(cpo): generate EBS CSI driver operator serving cert in CPO #8357
OCPBUGS-81631: fix(metrics): remove noisy vCPU log for non-AWS platforms #8169
NO-JIRA: Extend timeout for CRD removal during integration tests #8366
NO-JIRA: chore(deps): weekly dependabot consolidation #8395
OCPBUGS-83868: prevent IAM resource leaks during cluster destroy #8303
GCP-635: feat(gcp): make JWKS file optional when OIDC issuer URL is provided #8339
OCPBUGS-83757: Remove network dependencies from unit tests #8277
ci(deps): bump actions/setup-go from 5.6.0 to 6.4.0 #8393
OCPBUGS-84508: Fix NLB name parsing for EKS Auto Mode hostnames #8343
AUTOSCALE-615: include Karpenter node vCPUs in billing metric #8265
CNTRLPLANE-3352: Convert GHA callers to use reusable workflows @main #8387
CNTRLPLANE-3342: Extract support/netutil package from support/util #8360
CNTRLPLANE-3352: Add reusable GHA workflow definitions #8386
GCP-410: feat(gcp): add HCCO credential propagation for GCP image registry #7896
OCPBUGS-84551: fix(ingress): set FIPS_ENABLED env var on ingress operator #8375
CNTRLPLANE-3307: add unit tests for Azure Private Link Service controllers #8285
CNTRLPLANE-3160: Drop AutoNodeKarpenter feature gate and promote EC2NodeClass to v1 #8166
NO-JIRA: Improve commit and PR guidance in AGENTS.md #8373
OCPBUGS-83790: change Azure workload identity webhook FailurePolicy from Fail to Ignore #8288
NO-JIRA: chore(deps): weekly dependabot consolidation #8334
NO-JIRA: Add API dependency import restriction tool #8364
SPLAT-2587: aws/ccm: introduce configuration to CCM managed Security Groups for NLB #7460
NO-JIRA: add –max-depth flag to nav order verification #8372
NO-JIRA: Do not import external dependencies into API packages #8355
CNTRLPLANE-3340: Extract support/podspec package from support/util #8354
OCPBUGS-84251: fix(azure): detect and replace stale role assignments on cluster re-creation #8322
OCPBUGS-84236: Guard Infrastructure CR lookup in AWSEndpointServiceReconciler #8315
fix: OCPBUGS-78575: create virt-launcher NetworkPolicy on external infra cluster #8056
CNTRLPLANE-3330: ci: improve unit test speed with sharding and parallelism #8330
CNTRLPLANE-3313: add Etcd Snapshot Backup (Tech Preview) DR documentation #8299
CNTRLPLANE-2834: add e2e test for etcd snapshot backup method on AWS #8231
docs: NO-JIRA: clarify serialization tag behaviour in api/AGENTS.md #8328
OCPBUGS-84248: Remove hardcoded quay.io credentials from EnsureGlobalPullSecret test #8320
NO-JIRA: ci(deps): bump GitHub Actions dependencies #8333
OCPBUGS-77529: clean stale mock files before make generate function #8237
OCPBUGS-79471: fix(test): reduce e2e autorepair flakes from unhealthy node conditions #8278
NO-JIRA: docs: clarify that control plane downgrades are not supported #8314
CNTRLPLANE-2204: improve AllNodesHealthy and AllMachinesReady conditions #8247
GCP-431: feat: Add CNCC support for GCP WIF in HyperShift #7824
OCPBUGS-83410: fix, cno, skip cloud-network-config-controller check on non-cloud platforms #8238
Revert “OCPBUGS-83730: Add *.apps wildcard to base domain Private DNS zone for Azure private clusters” #8301
NO-JIRA: docs: add jira:ready-to-solve to agentic SDLC workflow #8304
OCPBUGS-83397: Fix concurrent CRD reconciliation race #8266
NO-JIRA: MCE 5.0 branch cut #8290
OCPBUGS-83751: add missing RBAC for webhook configurations #8276
OCPBUGS-83730: Add *.apps wildcard to base domain Private DNS zone for Azure private clusters #8273
NO-JIRA: chore: pass COMMIT_HASH build arg to support git worktrees #8279
OCPBUGS-78539: revert temporary crash toleration for dns-operator #7994
CNTRLPLANE-3296: fix: auto-create python venv in Makefile for verify targets #8269
OCPSTRAT-2499: docs(e2e): add AI agent guidance for v2 test framework #8207
AUTOSCALE-490: increase autonode test coverage #7979
OCPBUGS-83604: fix(kubevirt): filter link-local addresses from EndpointSlice endpoints #8264
NO-JIRA: fix(test): set 1h time limit on e2e capacity reservations #8208
NO-JIRA: docs(agents): add CRD API machinery fundamentals and envtest docs #8236
OCPBUGS-83585: Wait for CRD removal in GenerateCRDInstallTest to fix flaky envtest #8261
NO-JIRA: drop redundant api_ux_validation e2e test #8210
CNTRLPLANE-3255: enable CodeRabbit reviews on draft PRs #8250
CNTRLPLANE-635: Enable nilness and unparam checks in golangci-lint #8258
AUTOSCALE-590: karpenter version logging verification #8058
CNTRLPLANE-3259: Add sdminonne, clebs, and Nirshal to core-reviewers #8252
ci(claude): add konflux-build command for manual non-expiring builds #7964
NO-JIRA: fix(e2e): handle uint64 underflow in karpenter version computation for 5.x #8227
CNTRLPLANE-3174: Add unit tests for v2 CPO controller packages #8215
OCPBUGS-83538: fix(metrics-proxy): resolve ports from pods instead of deployments #8221
CNTRLPLANE-3260: fix(ci): split docs-preview into build+deploy to eliminate pwn request #8256
CNTRLPLANE-3203: Add autoscaling documentation for self-managed Azure #8239
NO-JIRA: add ENVTEST_JOBS knob for parallel envtest execution #8243
CNTRLPLANE-3260: ci: harden GitHub Actions workflows #8253
CNTRLPLANE-3214: add envtest suites for HCPEtcdBackup CRD validation #8199
CNTRLPLANE-3254: Sort how-to guides alphabetically and add CI enforcement #8248
OCPBUGS-67228: fix(shared-ingress): bump haproxy to 3.0.5-4.el10_1.1 #7370
CNTRLPLANE-3065: docs: add Agentic Software Development Life Cycle page #8235
OCPCLOUD-3347: feat(machine-approver): add TLS configuration options to deployment manifests #8019
OCPBUGS-83389: fix(supportedversion): normalize OCP 5.x versions for skew and release validation #8225
SREP-4438: refactor(karpenter): tidy Cincinnati version resolution #8206
NO-JIRA: revert: remove .git/ from .dockerignore #8201
CNTRLPLANE-3197: add release-4.22 branch to renovate configuration #8196
CNTRLPLANE-3197: update builder images from 4.22 to 4.23 #8194
CNTRLPLANE-3216: Add codecov.yml validation to make verify #8202
GCP-368: add GCP CCM v2 e2e tests #7840
CNTRLPLANE-3233: ci(gha): add release-4.22 branch to GitHub Actions workflows #8217
CNTRLPLANE-3197: update latest supported version from 4.22 to 4.23 #8193
CNTRLPLANE-3174: Add unit tests for CPO controller packages #8184
CNTRLPLANE-3215: fix envtest GHA workflow path filters for CRD test suites #8200
CNTRLPLANE-2078: add unit tests for AWS Route53 and IAM #8079
OCPBUGS-82301: fix(catalogs): use semver comparison for catalog version cap to handle OCP 5.0 #8195
NO-JIRA: control-plane-pki-operator: fix Event emission logic, format #8190
OCPBUGS-82192: fix(webhookcerts): handle upgrade from service-ca managed certs #8189
OCPBUGS-82159: fix(ignition-server): use major+minor version comparison for OCP 5.0 payloads #8182
CNTRLPLANE-2511: refactor(cpo): move OAuth internal LB annotation into ReconcileService #8185
CNTRLPLANE-2511: Support OAuth LoadBalancer with Azure Private Link Service #8149
OCPBUGS-81644: fix(cli): fix Azure destroy cluster leaving vnet/nsg resource groups for private topology #8151
OCPBUGS-33097: Remove deprecated OVNSbDb service type from default strategy mappings #8164
CNTRLPLANE-3174: test: Add unit tests for product-cli, token-minter, and sync-fg-configmap #8178
CNTRLPLANE-3050: feat(ci): use Konflux-built image for GitHub Actions runners #8092
CNTRLPLANE-2841: test(e2e): add metrics-forwarder e2e test verifying data-plane scraping #8147
CNTRLPLANE-3037: Create separate assets package specifically for CRD management #8150
GCP-462: Add GCP hosted cluster documentation #8027
NO-JIRA: docs(ci): add sync-community-fork token rotation guide #8173
CNTRLPLANE-2841: feat(HCCO): reintroduce guest cluster metrics forwarder for control plane metrics #8146
NO-JIRA: fix(e2e): handle rate limiter context deadline error during cleanup #8137
NO-JIRA: fix(ci): remove catch-all pattern from codecov ignore list #8171
CNTRLPLANE-2511: Allow LoadBalancer publishing strategy for OAuthServer on self-managed Azure #8148
NO-JIRA: chore(ci): add client/ to codecov ignore list #8167
NO-JIRA: feat(e2e): add Azure platform support for backup/restore tests #8144
OCPBUGS-74960: prevent resource leak on deletion and handle DependencyViolation #7868
NO-JIRA: docs: expand custom images guide with Dockerfile.dev and CPO override #8155
CNTRLPLANE-3042: Parallelize make verify targets for faster local development #8051
NO-JIRA: ci: fix codecov ignore patterns for docs and nested files #8156
OCPBUGS-81270: fix(external-dns): mitigate Azure DNS API throttling #8098
NO-JIRA: ci: ignore non-Go files in codecov coverage analysis #8154
OCPBUGS-67240: Ignition generalize image download errors #7673
NO-JIRA: fix(Makefile): auto-detect upstream remote for lint #8152
OCPBUGS-79539: fix(cpo-v2): preserve HCCO modifications to OCM Controllers field #8072
AUTOSCALE-582: wire CRD sync and CEL adjustments into karpenter-api target #8119
CNTRLPLANE-3111: docs: add service publishing strategies reference documentation #8107
NO-JIRA: ci: make docs deploy preview non-blocking #8145
Revert “CNTRLPLANE-2841: feat(HCCO): add guest cluster metrics forwarder for control plane metrics” #8141
NO-JIRA: fix(e2e): handle dual RHCOS payloads in Karpenter drift OS image check #8128
OCPBUGS-50003: add ConfigMap fallback and EC2 error caching for vCPU metrics resolution #6723
CNTRLPLANE-2172: feat(azure): add private endpoint access topology for self-managed HostedClusters #7821
CNTRLPLANE-2841: feat(HCCO): add guest cluster metrics forwarder for control plane metrics #7790
CNTRLPLANE-2797: hypershift-operator webhooks port 9443 respect cluster TLS security profile #8078
OCPBUGS-50603: Create dedicated identity for KAS bootstrap container #6827
Revert “NO-JIRA: test(e2e): extend AWS guest resource cleanup timeout” #8138
NO-JIRA: ci: improve CI efficiency and codecov configuration #8113
NO-JIRA: test(e2e): add KubeVirt platform to backup/restore e2e test #8131
OCPBUGS-81162: fix(cpo): skip router LB services for ARO HCP #8087
NO-JIRA: ci: enable paths filter on envtest workflows #8125
NO-JIRA: test(e2e): extend AWS guest resource cleanup timeout #8124
NO-JIRA: fix(test): deep copy CRDs inside envtest retry loop #8127
NO-JIRA: chore(docs-agg): remove document count from aggregated file #8126
NO-JIRA: ci: separate envtest from unit tests in CI workflow #8120
OCPBUGS-80926: consolidate disaster-recovery prerequisites into dedicated page #8080
CNTRLPLANE-3116: fix(ci): drop pip cache from docs-preview workflow #8116
NO-JIRA: fix(api): regenerate feature gate manifests for ExternalOIDCWithUpstreamParity #8117
OCPBUGS-78763: fix: global-pull-secret daemonset node labeling race condition causes pods not to be scheduled on Replace upgrade strategy nodes in time #7981
CNTRLPLANE-3037: Introduce envtest for integration tests alternative #8089
CNTRLPLANE-3116: ci(docs): migrate docs-preview job to GitHub Actions #8109
CNTRLPLANE-244: fix(ci): configure Codecov PR comments and add unit tests #8085
NO-JIRA: chore(deps): weekly dependabot consolidation #8077
OCPBUGS-78931: add KubeVirt-specific backup settings #8022
OCPBUGS-81284: fix(release): allow multiple machine-os component versions #8101
NO-JIRA: fix(aws): load credentials from –aws-creds file using SDK v2 #8095
NO-JIRA: chore(ci): update hypershift-ci-2 manifests #8062
CNTRLPLANE-2678: Adapt etcd-backup command and add HO namespace manifests #8040
CNTRLPLANE-2551: Hypershift integration for API Auth Config changes #7774
GCP-447: inject token-minter as native sidecar init container #7965
AUTOSCALE-538, AUTOSCALE-539: Add Autonode status node counts + enabled condition to HostedCluster API #7794
CNTRLPLANE-244: ci: add Codecov integration to unit test workflow #8060
CNTRLPLANE-3050: Pre-build lint tools and fix Konflux pipeline triggers #8052
CNTRLPLANE-2838: feat(CPO): add metrics-proxy control plane component #7752
CNTRLPLANE-2787: Introduce BASE_DOMAIN env var for E2E test configuration #7930
CNTRLPLANE-2786: Extend controller architecture diagram with consumes relationship #8029
IR-350: add tls security profile configuration for the image registry operator #8011
AUTOSCALE-571: fix(karpenter): don’t associate public IP addresses for the default OpenshiftEC2NodeClass #7853
NO-JIRA: feat(e2e): skip SupportedVersionSkew condition on OCP < 4.21 in backup/restore tests #8067
CNTRLPLANE-2076: remove v2 import aliases left from SDK migration #8063
AUTOSCALE-559: PrivateLink plumbing for karpenter ec2nodeclass subnets #7791
STOR-2770: Generate Azure Disk and File CSI Driver Operator metrics serving certs by HCP controller #7970
CNTRLPLANE-2678: Add fetch-etcd-certs CPO subcommand for HCPEtcdBackup #8010
NO-JIRA: revert(api): remove APIServer Route CEL validation for Azure #8074
CNTRLPLANE-2172: feat(api): add Azure private endpoint access and PrivateLinkService CRD #8055
OCPSTRAT-2831: chore(owners): add cblecker to core-reviewers and core-approvers #8018
OCPBUGS-79428: Add recipe for ACM/MCE HyperShift Operator overrides #8057
CNTRLPLANE-2076: complete SDK v1 removal and post-migration cleanup #8038
CNTRLPLANE-2049: update GCP validation error expectations in TestOnCreateAPIUX #8037
CNTRLPLANE-3046: feat(ci): add monitoring and alerting for ARC runners #8044
CNTRLPLANE-3049: split verify checks into individual GitHub Actions workflows #8049
OCPBUGS-79352: fix(oapi): force WatchList feature gate to disabled for openshift-apiserver #8035
OCPBUGS-79071: Fix AWSEndpointService private-router teardown stuck on active VPC Endpoint connections #8030
CNTRLPLANE-3041: Override ARO/HCP 4.20 CPO with Azure Pod Identity backport #8025
CNTRLPLANE-3054: Apply init task 0.3 migration to fix broken Konflux pipelines #8053
OCPBUGS-70301: force-remove karpenter finalizer when guest KAS is down #7939
CNTRLPLANE-3047: fix(ci): use community fork token for checkout credential helper #8050
CNTRLPLANE-2788: validate memory quantity in KubeVirt nodepool create #7884
NO-JIRA: chore(ci): update Konflux Tekton tasks to latest versions #8048
CNTRLPLANE-3048: refactor gh-actions-runner pipelines and improve CEL triggers #8045
OCPBUGS-79369: Add Konflux archived PipelineRun skill and update task discovery #8043
CNTRLPLANE-3047: add workflow to sync hypershift-community fork #8042
NO-JIRA: chore(claude): add restructure-commits plugin command #7927
CNTRLPLANE-2986: feat(ci): Add self-hosted GitHub Actions runners for HyperShift #7980
NO-JIRA: fix(ci): pass –upgrade-versions to konflux task update skill #8036
CNTRLPLANE-2998: Migrate SQS to AWS SDK v2 #8015
NO-JIRA: refactor(oadp): unify backup/restore e2e test with platform auto-detection #7971
OCPBUGS-78996: fix(test): create SQS queue dynamically in spot termination handler e2e test #8007
CNTRLPLANE-2049: fix(api): audit and improve GCP API validation rules #8003
CNTRLPLANE-2081: Migrate RAM and ARN to AWS SDK v2 #7986
OCPBUGS-78778: fix(cpo): Don’t remove HCP Ingress from routes when CapabilityRoute is disabled #8001
NO-JIRA: Disable parent ownership for api subdir #8009
NO-JIRA: fix(api): replace CEL url() validators with regex to fix CRD cost budget #8004
OCPBUGS-78544: Update base images to address multiple CVEs flagged by MSFT security scans #7983
OCPBUGS-78705: Bootstrap CVO manifests should be filtered based on feature-set annotation #7984
NO-JIRA: fix(api): extend kubeapilinter scope to all non-vendor API types #8002
NO-JIRA: build(e2e): include hypershift binary in Dockerfile.e2e #7919
CNTRLPLANE-2925: add NodePool.Status.NodesInfo for node version distribution #7917
OCPSTRAT-2336: Adjust karpenter API to OpenShift conventions #7952
OCPBUGS-78539: chore(e2e): add temporary crash toleration for dns-operator #7978
CNTRLPLANE-2172: fix(e2e): register Azure private platform e2e flags #7977
NO-JIRA: chore(owners): require api-approvers approval for api/ changes #7972
Update Kube API Linter config for new APIs #7982
NO-JIRA: add .gitattributes to collapse generated files in PR diffs #7918
CNTRLPLANE-2910: feat(cpo): add Azure workload identity webhook as KAS sidecar #7867
CNTRLPLANE-2077: refactor(cleanzones): migrate AWS SDK from v1 to v2 #7960
CNTRLPLANE-2219: feat(aws): migrate ec2 to AWS SDK v2 #7871
GCP-440: Fix GCP boot image discovery from CoreOS stream metadata #7881
NO-JIRA: fix(oadp): correct Agent platform API group in backup/restore resources #7974
OCPBUGS-78356: fix(sharedingress): coalesce HAProxy reloads to prevent reload storms #7945
CNTRLPLANE-2172: fix(operator): accept Azure as valid private-platform value #7968
NO-JIRA: Rename cilium directory to v1.15.1 #7888
OCPBUGS-70354: add serviceAccount to global-pull-secret-syncer #7439
NO-JIRA: feat(e2e): add OIDC IAM fix and NodePool validation to backup/restore #7837
CNTRLPLANE-2172: feat(install): register Azure private platform flags #7912
CNTRLPLANE-2978: Add Azure CPO override for OCP 4.20 #7955
OCPBUGS-65687: fix(cpo): prevent informer creation for inaccessible resource types #7819
GCP-441: correct CCM crash toleration key to match pod label #7926
CNTRLPLANE-2916: conditionally create openshift-ingress network policy based on route labeling #7872
NO-JIRA: chore: add .git/ to .dockerignore #7944
NO-JIRA: fix(test): add aws-node-termination-handler to safe-evict audited list #7816
NO-JIRA: test(scheduler): add pair loss recovery unit coverage #7848
OCPBUGS-67262: fix(e2e): Use NodePool replicas as authoritative source for expected node count instead of CountAvailableNodes #7378
OCPBUGS-77160: include NMStateConfig in Agent platform OADP backup resources #7847
AUTOSCALE-571: fix(karpenter): select existing private subnets for default OpenshiftEC2NodeClass #7933
OCPBUGS-78198: fix(catalogs): update catalog image version cap to 4.21 #7915
OCPBUGS-78184: fix(hostedcluster): Remove referenced resource annotations regardless of hcp status #7913
CNTRLPLANE-2203: reintroduce ControlPlaneConnectionAvailable condition with conformance fix #7746
OCPBUGS-78185: Fix deadlock when changing release image during initial provisioning #7910
CNTRLPLANE-634: Make external-dns interval and AWS zones cache duration configurable #7931
OCPBUGS-78045: allow autonode provisioned arm instances #7893
OCPBUGS-78329: fix(releaseinfo): allow periods in version display name regex #7940
OCPBUGS-78223: add NodePool Rollouts reference documentation #7923
NO-JIRA: chore(gitignore): add .claude/worktrees/ to .gitignore #7938
OCPBUGS-78189: fix(e2e): fix nil deref in validateAWSGuestResourcesDeletedFunc #7911
OCPBUGS-77514: E2E filter rolling upgrade verification to current MachineSet #7864
OCPBUGS-77703: fix(api): add omitempty to NodePoolAutoScaling.Min for N-1 compatibility #7849
GCP-411: Add comprehensive unit tests for ReconcileInfrastructure #7895
NO-JIRA: fix KubeVirtAdvancedMultinetTest IPv6 and apk errors #7860
NO-JIRA: chore(e2e): increase nodepool condition check timeout #7906
CNTRLPLANE-2789: add StatefulSet test case to controlplane-component reconcile tests #7764
NO-JIRA: Add CodeRabbit config to exclude autogenerated files #7905
CNTRLPLANE-2933: add docs recipe for SPO configuration in HCP environments #7886
CNTRLPLANE-2031: test(e2e): add comprehensive backup and restore test suite #7745
CNTRLPLANE-2588: docs: add dependabot triage agent to AI CI jobs documentation #7889
CNTRLPLANE-2793: Cache MCS TLS certificate generation in ignition provider #7841
ROSAENG-132: fix(karpenter): Set Ready condition to False when version resolution fails #7866
NO-JIRA: api: fix AutoNode types to comply with OpenShift API conventions #7859
NO-JIRA: chore(deps): weekly dependabot consolidation #7876
OCPBUGS-39604: Include shared ingress resources in render output for proper uninstall cleanup #7836
OCPBUGS-76645: Make generated container names k8s compliant #7711
OCPBUGS-77254: fix(globalps): watch Machine updates to fix node labeling race condition #7803
GCP-441: tolerate 1 restart for GCP CCM token-minter race condition #7865
NO-JIRA: chore(deps): weekly dependabot consolidation #7863
OCPBUGS-77477: fix(awsutil): handle smithy errors in AWSErrorCode #7827
SREP-3855: unpause leaked child objects on deleting clusters (OCPBUGS-77530) #7861
CNTRLPLANE-2218: feat(aws): migrate ELB/ELBV2 to AWS SDK v2 #7825
OCPBUGS-77621: fix(nodepool): preserve ignition-reached annotation on token secret after restore #7851
OCPBUGS-76337: feat(scale-from-zero): add DescribeInstanceTypes IAM permission #7648
GCP-391: Add ImageRegistry GSA field and IAM binding for Image Registry Operator #7828
CNTRLPLANE-2801: fix(router): deploy router services for private ARO and remove KAS/OAPI dependencies #7845
CNTRLPLANE-2842: Fix context cancel accumulation in getMirrorFromICSPOrIDMS #7846
CNTRLPLANE-2801: api: remove redundant kubebuilder enum marker from KeyVaultAccess field #7835
NO-JIRA: bug(metrics): fix typo in hypershift_cluster_waiting_initial_availability_duration_seconds metric #7730
CNTRLPLANE-2840: fix(endpoint-resolver): sort pods by name for deterministic ordering #7854
CNTRLPLANE-2808: bump golang.org/x dependencies in / and /api modules #7818
CNTRLPLANE-2840: feat(CPO): add endpoint-resolver control plane component #7786
CNTRLPLANE-2794: Re-add TestGetDigest and TestGetManifest with mockgen mocks #7777
OCPBUGS-77034: fix(ho): add nil guard for Platform.AWS in metrics collector #7747
GCP-295: Add GCP platform support to E2E test framework #7697
OCPBUGS-76997: remove resource limits from Agent CAPI provider #7812
OCPBUGS-60936: fix(hccp): remove immutable field from kubeletconfigmap #6726
OCPBUGS-77311: handle HostedCluster deletion in secretJanitor to prevent stuck cluster deletions #7779
OCPBUGS-60185: Remove non-deterministic registry override computation from ignition-server #7811
CNTRLPLANE-2784: Document IAM policies for PowerVS credential fields #7778
CNTRLPLANE-2801: add Key Vault private endpoint TCP relay via private router #7701
CNTRLPLANE-2217: feat(aws): migrate kms and Resource Tagging to AWS SDK v2 #7795
CNTRLPLANE-2807: Fix version showing <unknown> in git worktree builds #7814
OCPBUGS-65636: add service account to konnectivity-agent #7309
NO-JIRA: docs(pki): add CA hierarchy diagram and trust distribution details #7799
CNTRLPLANE-2799: Unit test HCP availability and Ready flag reconciliation #7796
OCPBUGS-67262: fix(sync-global-pullsecret): compare content ignoring trailing newlines #7638
GCP-386: scope externaldns RBAC to GCP platform only #7781
OCPBUGS-76350: Honor AWS AMI override in NodePool token generation #7675
OCPBUGS-60185: Fix ignition-server pod restarts due to MIRRORED_RELEASE_IMAGE flapping #7588
NO-JIRA: docs(agents): add multi-module structure guidance to AGENTS.md #7797
OCPBUGS-76452: update OAuth certificate configuration doc #7785
GCP-402: Add gcp-project and gcp-region flags to hypershift install #7710
GCP-376: Add service account for storage #7676
GCP-367: enable multizone support in CCM cloud config #7731
OCPBUGS-77224: fix(routing): add Azure platform to LabelHCPRoutes() switch #7789
CNTRLPLANE-2220: feat(aws): migrate iam to AWS SDK v2 #7765
NO-JIRA: Skip ./dev directory in codespell checks #7775
NO-JIRA: MCE 2.17 konflux pipielines #7736
NO-JIRA: chore: add powervs-reviewers to OWNERS_ALIASES and OWNERS #7782
OCPBUGS-59876: feat: implement CLI-based OIDC disaster recovery command #7210
OCPBUGS-62177: revert CRR controller changes #7784
OCPBUGS-65824: Add dynamic NodePort range validation to prevent cluster creation failures #7652
CNTRLPLANE-2740: Set unhealthyPodEvictionPolicy to AlwaysAllow on all PDBs #7721
OCPBUGS-32770: fix(kubevirt): require CAPK image to be explicitly specified #7615
OCPBUGS-62177: fix(pki): use pod container port instead of kubeconfig service port #7744
CNTRLPLANE-1987: Ensure Azure HCP CLI infra commands work correctly #7436
NO-JIRA: fix(e2e): retry guest cluster API calls in EnsureFeatureGateStatus #7723
OCPBUGS-70152: Correct route labeling logic for HCP router infratructure #7605
CNTRLPLANE-2216: feat(aws): migrate route53 to AWS SDK v2 #7726
OCPBUGS-43449: Remove UltraSSD_LRS from DiskStorageAccountType for OS Disks #7727
CNTRLPLANE-644: Unify Validate/Complete Function Signatures Across Providers #7577
OCPBUGS-65879: Fix image-overrides annotation removal propagation to HCP #7533
CNTRLPLANE-2740: Add KAS liveness readiness sidecar to OAS and OAuth API Server #7722
OCPBUGS-34662: Manage AWS EBS CSI driver metrics serving certificates via CPO #7538
OCPBUGS-73915: Use openshift golang builder for MCE builds #7735
NO-JIRA: Remove .claude/settings.json #7751
OCPBUGS-62177: Fix certificate revocation validation across all KAS pods #7405
CNTRLPLANE-2696: docs(azure): add managed Azure control plane authentication documentation #7653
NO-JIRA: test(e2e): add CloudController field to GCP ServiceAccountsEmails structs #7739
AUTOSCALE-485: bump karpenter-aws dependencies to 1.8.6 #7611
TRT-2554: Revert #7489 “CNTRLPLANE-2203: add ControlPlaneConnectionAvailable condition” #7734
GCP-367: Implement GCP Cloud Controller Manager component #7677
OCPBUGS-72596: Fix node-tuning-operator metrics port configuration #7468
CNTRLPLANE-2203: add ControlPlaneConnectionAvailable condition #7489
GCP-386: feat(gcp): enable DNS delegation for hosted cluster ingress via DNSEndpoint #7702
NO-JIRA: ci: fix bug in leader election detection #7696
GCP-308: test: verify control plane workloads have resource requests #7623
OCPBUGS-60707: Fix user-ca-bundle cleanup when additionalTrustBundle is removed #6900
CNTRLPLANE-2736: Rename review-agent-single-pr to address-review-comments #7709
CNTRLPLANE-2215: feat(aws): migrate S3 to AWS SDK v2 #7678
NO-JIRA: test(nodepool): add unit tests for scale-from-zero annotations #7688
OCPBUGS-55151: Move proxy certificate validation from metrics collector to reconcile loop #7536
CNTRLPLANE-418: Aro swift private #7613
CNTRLPLANE-2700: docs: add HCP networking requirements documentation #7654
CNTRLPLANE-2675: chore(cpo): move infrastructure reconciliation to infra package #7658
GCP-216: feat(nodepool): add GCP platform support #7631
GCP-199: add DNS management to Control Plane Operator #7639
AUTOSCALE-492: karpenter-ignition controller #7582
OCPBUGS-66966: loop over node-pool conditions updating in order #7325
SREP-715: New option to dump data plane content through the kube API server service exposed in HCP namespaces #6533
OCPBUGS-74620: test(e2e): increase default node ready timeout to 45 minutes #7629
OCPBUGS-74498: Add UserAgent telemetry to CPO Azure SDK clients #7620
OCPBUGS-74931: fix(hcco): gate image registry workaround to pre-4.20 releases #7634
NO-JIRA: docs(aws): add AWS PrivateLink architecture documentation #7645
NO-JIRA: chore(ai): Add skills for dev workflow #7636
CNTRLPLANE-2709: Update Dependabot to use conventional commits #7672
CNTRLPLANE-2703: Disable Renovate dependency updates #7657
OCPBUGS-74988: fix(test): resolve E2E flakes in global-pull-secret-syncer DaemonSet readiness checks #7627
CNTRLPLANE-2214: Migrate STS to AWS SDK v2 #7386
NO-JIRA:Docs: update documentation URL from netlify to pages.dev #7622
GCP-366: add CloudController service account for CCM #7617
NO-JIRA: ci: Improves the isLeaderElectionFailure function: #7589
NO-JIRA: Fix teardown flag timing in e2e tests #7586
CNTRLPLANE-2548: add direct Jira REST API integration to pr-report #7532
OCPSTRAT-2437: add unit test for custom HAProxy image annotation #7458
CNTRLPLANE-1708: Enable EnsureGlobalPullSecret AtLeast Version418 #7624
CNTRLPLANE-418: fix shared ingress AllowedCIDRs to use fc_src for PROXY protocol #7587
AUTOSCALE-535: default block device mappings #7583
OCPBUGS-69447: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7399
GCP-198: add PSC endpoint controller for customer-side management #7603
CNTRLPLANE-2650: docs(ci): add security requirement for Jira agent issues #7626
CNTRLPLANE-2650: docs: add AI-assisted CI jobs documentation #7598
OCPBUGS-62760: Pre-pull images to avoid startup delays and flaky e2e #7382
OCPBUGS-74247: CAPI image overrides aware of registry config #7575
CNTRLPLANE-1137: Add support for external CNI provider Cilium #7423
GCP-176: feat(gcp): add WIF credentials support for control plane op… #7600
NO-JIRA: test(assets): add unit test for CAPI resources file paths #7601
CNTRLPLANE-2580: feat(claude): update /update-konflux-tasks to work without log file #7591
GCP-213: feat(platform): add Google Cloud Platform support with CAPG Deployment #7305
OCPBUGS-62944: forceful termination of instances during HCP AutoNode deletion #7281
NO-JIRA: build: bump Go version to 1.25.3 #7592
CNTRLPLANE-1388: Spot with termination handler #7567
CNTRLPLANE-1892: chore(e2ev2): fixup GCP API checks #7555
NO-JIRA: ci: update build root image to Go 1.25 #7584
CNTRLPLANE-1988: Add Azure support to product CLI for self-managed customers #7407
AUTOSCALE-373: Proper ROSA instance tagging for AutoNode #6939
OCPBUGS-63345: AWS credential metric to distinguish unknown from invalid status #7075
OCPBUGS-74336: feat(cpo): check components have rolled out before setting available #7434
NO-JIRA: chore(deps): weekly dependabot consolidation #7563
OCPBUGS-64576: fix(dump): Fix dump command failure when EC2NodeClass resource is not registered #7147
CNTRLPLANE-2559: feat(contrib): add request serving setup utility #7534
CNV-76520: ci: allow restart of kubevirt-cloud-controller-manager #7469
NO-JIRA: fix(test): shorten scale-from-zero test name to avoid IAM role length limit #7558
OTA-1833: Adopt a new FeatureSet OKD #7557
OCPBUGS-62761: chore(e2e): remove KAS check from capi pod #7485
OCPBUGS-73817: fix: add hypershift.openshift.io/nodepool-globalps-enabled label to be ignored in cluster-autoscaler deployment #7480
OCPBUGS-65885: added 1.34 required ELBv2 perms to CCM role #7339
API-1835: Scaffold dynamic informers #7477
CNTRLPLANE-2579: feat(konflux): add script to update pipeline task bundles to latest trusted versions #7553
OCPBUGS-58397: feat(KubeVirt): configure External evictionStrategy on VMs #6380
GCP-197: add GCPPrivateServiceConnect controller for managing Service Attachments for Private Service Connect #7302
NO-JIRA: fix(e2e): TestNodePoolAutoscalingScaleFromZero for 4.20 and later only #7556
CNTRLPLANE-2291: feat(claude): add fix-hypershift-repo-robot-pr command #7438
CNTRLPLANE-2568: Update Konflux Tekton tasks to latest versions #7551
NO-JIRA: test(ingress): add test for clearing LoadBalancerSourceRanges #7544
NO-JIRA: fix(claude): fix Claude Code subagents frontmatter #7550
NO-JIRA: chore(deps): bump github.com/opencontainers/selinux from 1.11.0 to 1.13.0 #7462
OCPBUGS-55399: Add NTO Service and ServiceMonitor #7355
NO-JIRA: test(autoscaling): make GPU annotation optional in scale-from-zero test #7484
OCPBUGS-73914: Update Tekton tasks to pass enterprise contract validation #7535
NO-JIRA: chore(deps): bump github.com/cloudflare/circl from 1.3.7 to 1.6.1 in /hack/tools #7463
NO-JIRA: Add karpenter approvers and reviewers #7488
NO-JIRA: chore(ho): update lower bound version checks for OCP 5 #7472
NO-JIRA: fix(docs): strip markdown links from aggregated documentation #7487
NO-JIRA: chore(deps): bump github-dependencies group with 17 updates #7455
OCPBUGS-73847: fix(cli): use /tags endpoint for all release streams to enable RC filtering #7483
OCPBUGS-67234: fix(hostedcluster): unpause CAPI cluster when deleting paused HostedCluster #7389
OCPBUGS-72258: use InfraStatus.APIPort for custom DNS kubeconfig #7470
API-1835: Scaffold OpenShiftManager controller #7445
CNTRLPLANE-1768: feat(api): add support for graceful service account signing key rotation #7324
OCPBUGS-66205: [kubevirt] Make L3 migration labeling conditional #7308
NO-JIRA: chore(deps): bump Azure SDK and misc-dependencies groups #7464
NO-JIRA: chore(tekton): update Konflux task digests to latest versions #7465
OCPBUGS-70320: enable scale-up from zero with InPlace upgrade #7427
NO-JIRA: Add review process docs to CONTRIBUTING.md #7426
CNTRLPLANE-208: Document needed Azure infrastructure #7361
NO-JIRA: fix(deps): update k8s.io/utils digest to 914a6e7 #7450
NO-JIRA: chore(deps): bump misc-dependencies group with 11 updates #7437
OCPBUGS-72411: fix(cno): use brackets only for IPv6 in server URL #7447
NO-JIRA: chore(konflux): update Tekton tasks to latest versions #7451
OCPBUGS-72397: Fix Konflux EC voilation, update deprecated base … #7442
NO-JIRA: docs(konflux): add IMAGE_RELEASE_PROCESS.md #7432
NO-JIRA: test(e2e): fix AKS e2e test flakiness #7410
CNTRLPLANE-1978: add e2e tests for DataPlaneConnectionAvailable condition #7291
AUTOSCALE-473: Add HostedCluster annotation for karpenter ec2nodeclass instanceProfile #7392
NO-JIRA: fix(awseps): cache local zone ID in non-shared VPC case #7409
OCPBUGS-66211: fix(azure): preserve defaulted values in Infrastructure status #7393
OCPBUGS-69761: fix(ingress): clear LoadBalancerSourceRanges when AllowedCIDRBlocks is removed #7425
GCP-258: Use PullAlways for :latest image tags in control plane components #7313
OCPBUGS-63698: fix(azure): remove CSI secret ownership from hypershift-operator #7157
OCPBUGS-66154: add OAuth certificate configuration doc #7351
OCPBUGS-67224: fix(Portieris): Fix Portieris by mounting emptyDir to ‘./.trust’ work dir #7368
CNTRLPLANE-1622: Enable nodepool autoscaling min zero #6975
And 29 elided commits (e.g. from squash or rebase merges)
Full changelog

ibm-cloud-controller-manager

OCPCLOUD-3593: Rebase from upstream IBM-Cloud/cloud-provider-ibm release-1.36 (K8s 1.36.2) #109
Full changelog

ibm-vpc-block-csi-driver

NO-JIRA: standardize build paths #155
STOR-2921: Rebase to v5.2.27 for OCP 5.0 #154
Full changelog

ibm-vpc-block-csi-driver-operator

STOR-2914: Bump all deps for 5.0.0 #176
STOR-2921: update deployment manifests from upstream #174
Full changelog

ibmcloud-cluster-api-controllers

🐛 OCPBUGS-85337: set imagePullPolicy IfNotPresent on provider workloads #164
Full changelog

ibmcloud-machine-controllers

OCPCLOUD-3618: Bump k8s 1.36 #100
OCPBUGS-96827: bump golang.org/x/net to v0.57.0 #98
OCPCLOUD-3641: Support configurable boot volume profile, size, IOPS and bandwidth #97
Full changelog

insights-operator

CCXDEV-15210: secrets and configmap revisions count gathering #1316
OCPBUGS-98690: Fix indentation bug on livenessProbe #1320
OCPBUGS-96894: Update net and crypto libraries #1321
CCXDEV-16524: gather alertmanager configuration #1322
NO-JIRA: Update misleading docs on the QEMU gatherer #1319
OCPBUGS-78774: kube-rbac-proxy must honor Central TLS configuration #1299
OCPBUGS-85109: move required-scc annotation to pod template in gathering job #1309
OCPBUGS-93805: update HyperShift deployment manifest #1313
Full changelog

installer-etcd-artifacts

OCPBUGS-87363: Updating ose-etcd-container image to be consistent with ART for 5.0 #384
OCPBUGS-85258: 5.0 rebase 3.6.11 #375
OCPBUGS-82495: 5.0/4.23 rebase 3.6.10 #368
OCPBUGS-74168: Remove unused ART dockerfiles #356
Full changelog

ironic

NO-ISSUE: Update requirements.cachito with latest openshift forks commits #867
Full changelog

ironic-agent

NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #295
NO-ISSUE: Filter blank lines from build-packages-list.ocp in Dockerfile #292
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #293
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #291
METAL-1878: [s2i] Move direct dependencies from packages to source #290
Full changelog

keepalived-ipfailover

OCPBUGS-99649: Reinstall tzdata if /usr/share/zoneinfo is missing #246
NE-2223: Bump HAProxy to 3.2 in egress DNS proxy #244
NE-2716: Replace iptables with nftables in origin-egress-router #242
Full changelog

kube-metrics-server

OCPBUGS-93753: Bump openshift/kubernetes-metrics-server to v0.9.0 #71
OCPBUGS-87412: Updating ose-kube-metrics-server-container image to be consistent with ART for 5.0 #69
Full changelog

kube-rbac-proxy

OCPBUGS-87245: Updating kube-rbac-proxy-container image to be consistent with ART for 5.0 #143
Full changelog

kube-state-metrics

OCPBUGS-99282: embed a copy of the timezone database #148
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-87345: Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART for 5.0 #75
Full changelog

machine-api-operator

OCPBUGS-99903: Fixing test issue where error result was for other resource type #1524
OCPBUGS-100067: Deduplicate unchanged status upgrade events #1526
CORS-4521: GCP: Add regional permission #1523
OCPCLOUD-3614: bump k8s and openshift deps #1520
SPLAT-2854: Fixing issue related to unintended VAP interactions #1518
SPLAT-2858: Fixing test issue where error result was for other resource type #1522
SPLAT-2813: Create VAP E2Es #1517
Full changelog

machine-config-operator

NO-ISSUE: Fix incorrect OSImageStreams log #6338
MCO-2244: Update MCO dependencies to Kubernetes 1.36 #6321
MCO-2470: Disable scale-up test support for AWS and vSphere #6344
NO-ISSUE: fix fencing_validator ocdebug fence dispatch race condition #6341
OCPBUGS-82139: Add control-plane NoSchedule taint support alongside master taint #6313
NO-JIRA: vendor: bump github.com/openshift/api to latest master #6334
NO-ISSUE: Use context instead of discrete signal #6337
OCPNODE-4518: Block runc on RHEL 10 via OSImageURL stream class inspection #6238
MCO-2380: MCO-2381: Expose MachineOSBuild Status Conditions on Paused MachineConfigPools and add E2E Tests for Paused Pool Builds #6282
MCO-2414: Add unit tests for osImageStream #6312
NO-ISSUE: extended tests, restore initial maxUnavailable when modified #6336
OCPBUGS-99695: Add TC 88940- Apply password only if changes exist #6328
NO-ISSUE: add AWS marketplace polarion ID test #6330
MCO-2184: Adapt scale extended tests to support osstreams #6299
CNTRLPLANE-3840: Remove ExternalTopologyMode guard from OSImageStream bootstrap #6308
MCO-2450: Enable OS ImageStreams in OKD #6314
MCO-1333: Validate OCL Containerfiles #6187
NO-ISSUE: Add reusable utilities for image inspection #6327
MCO-1944: Add NetworkPolicy Test case #6283
MCO-2413: Image inspection cache #6306
MCO-1847: adapt tc 52373 to new AWS marketplace feature #6324
MCO-1847: update AWS backdated images in extended tests #6320
CORENET-5972: Add openvswitch-ipsec package into ipsec plugin #4878
MCO-2408: Improve/Reduce code/duplicated logic in OsImageBuilderInNode #6270
MCO-2424: Fix cert rotation timeout #6309
MCO-1990: Irreconcilable configs test suite #6085
OCPBUGS-98745: MCO-2424: add missing RBAC for pkis resource in MCC ClusterRole #6307
MCO-2301: AWS Marketplace bootimage update support #6015
MCO-2407: Move OSImageStream sync to MCC #6278
MCO-2427: move password, bootimages and cpms suites to longduration suite #6302
OCPNODE-4604: upgrade CRIOCredentialProviderConfig to v1 #6220
OCPBUGS-98210: Fix imagestream detection with extra guard #6296
MCO-1997: MCO-2297: Add test for osImageStream #5881
AGENT-1522: bump InternalReleaseImage to v1 (and simply version dependency) #6280
OCPBUGS-98210: Use release payload image for OSImageStream rebuild detection #6284
OCPBUGS-98040: Bump golang.org/x/crypto to v0.54.0 #6286
OCPBUGS-10431: allow worker pools to set staticPodPath by relaxing validation to only block control plane pools #5724
CNTRLPLANE-3212: Enable configurable PKI for cert rotation #5842
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-86046, OCPBUGS-94044: DS Merge 07/24/2026 #335
CORENET-7233: Update OWNERS file #304
OCPBUGS-83863: Simplify Dockerfile to rhel9-only build #285
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-83863: Drop rhel8 builds, strip debug info #405
Full changelog

must-gather

OCPBUGS-87538: Updating ose-must-gather-container image to be consistent with ART for 5.0 #553
MG-247: collect imagedigestmirrorsets and imagetagmirrorset resources #538
OCPBUGS-85052: feat: add pacemaker resource to mustgather #556
Full changelog

network-interface-bond-cni

NO-JIRA: Sync from k8snetworkplumbingwg/bond-cni master (2026-07-07) #121
Full changelog

network-metrics-daemon

OCPBUGS-87459: Updating ose-network-metrics-daemon-container image to be consistent with ART for 5.0 #144
Full changelog

networking-console-plugin

OCPBUGS-98878: Override linkify-it to v5.0.2 and run npm audit fix (#452) #452
Full changelog

nutanix-machine-controllers

OCPCLOUD-3619: Bump k8s 1.36 #139
Full changelog

oauth-apiserver

CNTRLPLANE-2445: K8s 1.35 rebase #179
CNTRLPLANE-2449: feat: generate OpenAPI schemas from a running oauth-apiserver instance #211
Full changelog

oauth-server

RFE-9629: Add copy to clipboard buttons to display token page #200
CNTRLPLANE-2446: K8s 1.35 rebase #215
CNTRLPLANE-3751: Add dynamic proxy CA reload for outbound IdP transports #244
CNTRLPLANE-3751: Rebase onto 1.35 to be able to update openshift/api #247
OCPBUGS-87407: Updating oauth-server-container image to be consistent with ART for 5.0 #246
Full changelog

olm-catalogd, olm-operator-controller

OCPBUGS-89330: Synchronize From Upstream Repositories #779
NO-ISSUE: Synchronize From Upstream Repositories #776
OPRUN-4436: fix(test): update PolarionID:87224 for 4.²³⁄₅.0 upgrade boundary #766
OPRUN-4659, OPRUN-4666, OPRUN-4671, OPRUN-4672, OPRUN-4673, OPRUN-4674: Synchronize From Upstream Repositories + Remove spec.serviceAccount tests #767
NO-ISSUE: Remove stale reviewers/approvers, add trgeiger #769
OPRUN-4392, OPRUN-4393: Add OLMv1 progress deadline QE tests + fixes #755
OPRUN-4437: test: add allow-case for operator maxOCPVersion > cluster version #765
NO-ISSUE: Remove HelmChartSupport feature gate from experimental manifests #764
Full changelog

openshift-apiserver

OCPBUGS-78480: address review feedback on project watcher #664
CNTRLPLANE-2449: K8s 1.35 rebase #616
CNTRLPLANE-2449: feat: generate OpenAPI schemas from a running openshift-apiserver instance #645
Full changelog

openstack-cluster-api-controllers

OCPBUGS-94057: UPSTREAM: 3265: :bug: allow unconditional providerID updates in OpenStackMachine #425
🐛 OCPBUGS-85337: set imagePullPolicy IfNotPresent on provider workloads #424
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-96749, OCPBUGS-96752: Synchronize From Upstream Repositories #1338
NO-ISSUE: Remove stale reviewers/approvers, add trgeiger #1339
NO-ISSUE: Synchronize From Upstream Repositories #1337
NO-ISSUE: Synchronize From Upstream Repositories #1336
Full changelog

operator-marketplace

NO-ISSUE: Bump github.com/operator-framework/operator-lifecycle-manager from 0.45.0 to 0.46.0 #771
NO-ISSUE: Bump github.com/operator-framework/operator-lifecycle-manager from 0.43.0 to 0.45.0 #761
NO-ISSUE: Bump dependencies to kube 1.36 #766
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-65865, OCPBUGS-86223, OCPBUGS-89327: DownStream Merge [07-17-2026] #3298
NO-JIRA: Update OWNERS File #3288
NO-JIRA: DownStream Merge [07-02-2026] #3279
Full changelog

powervs-block-csi-driver-operator

STOR-2914: Bump all deps for 5.0.0 #119
Full changelog

powervs-cloud-controller-manager

NO-JIRA: Update OWNERS_ALIASES to modify approvers and reviewers #105
Full changelog

prometheus

Bump openshift/prometheus to v3.13.1 #347
NO-JIRA: [bot] Bump openshift/prometheus to v3.13.1 #345
NO-JIRA: chore: revert narrow selectors detection for le/quantile labels #344
Full changelog

prometheus-alertmanager

OCPBUGS-99435: embed tzdata in the alertmanager binary #140
Bump openshift/prometheus-alertmanager to v0.33.1 #139
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-96853: [bot] Bump openshift/prometheus-operator to v0.92.1 #385
Full changelog

prometheus-node-exporter

MON-4614: [bot] Bump openshift/node_exporter to v1.12.1 #182
Full changelog

route-controller-manager

NE-2767: Bump Kubernetes to 1.36.2 #100
OCPBUGS-92032: Dockerfile: Copy only build-required files in builder stage #99
Full changelog

service-ca-operator

MON-4515: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #319
OCPBUGS-87390: Updating ose-service-ca-operator-container image to be consistent with ART for 5.0 #361
NO-JIRA: Bump github.com/openshift/build-machinery-go #367
CNTRLPLANE-3423: feat: inject centralized TLS into service-ca operand #365
Full changelog

tests

NO-ISSUE: Always emit precondition validation synthetic test entry #31388
OCPBUGS-98956: use admin-client namespace creation for IRI workload test #31394
OCPNODE-4055: Add Additional Storage Support - API validation test cases #31384
NO-ISSUE: Remove Feature:NodeSwap tag and update README selectors #31389
OCPNODE-4604: allow registry.redhat.io reboot requried test #31383
OCPNODE-4604: upgrade to test v1 CRIOCredentialProviderConfig #31324
TRT-2689: Add devcontainer, APM config, and agentic CI scaffolding #31371
OCPBUGS-97603: Use framework-managed namespace for workload test #31366
OCPBUGS-84512: Remove exception terminationMessagePolicy=TerminationMessageFallbackToLogsOnError #31327
OCPNODE-4494: Testcase to test runc Upgrade case #31266
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

thanos

NO-ISSUE: [bot] Bump openshift/thanos to v0.42.3 #195
OCPBUGS-97627: [bot] Bump openshift/thanos to v0.42.2 #194
NO-JIRA: chore: revert narrow selectors detection for le/quantile labels #193
Full changelog

tools

NO-JIRA: Register the e2e tests for accept in the subfolder #2300
NO-JIRA: Fix staticcheck warnings in pkg/cli/admin/mustgather #2306
NO-JIRA: Fix go vet warning in process.go #2304
Full changelog

vsphere-cloud-controller-manager

OCPCLOUD-3596: Merge https://github.com/kubernetes/cloud-provider-vsphere:master (ed5683c) into main #118
Full changelog

vsphere-cluster-api-controllers

🚀 OCPCLOUD-3604: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.16.1 (5b57d1d) into main #112
🐛 OCPBUGS-85337: set imagePullPolicy IfNotPresent on provider workloads #114
Full changelog

vsphere-csi-driver-operator

STOR-3062: Remove the validation webhook #351
STOR-2914: Bump all deps for 5.0.0 #350
Full changelog

vsphere-problem-detector

STOR-2914: Bump all deps for 5.0.0 #226
Full changelog

Node Image Info

Loading node image info, this may take a while ...

CentOS Stream CoreOS 10 (`stream-coreos`)

Package List

cri-o-1.35.5-1.el10s
kernel-6.12.0-251.el10
openshift-kubelet-4.22.0-202606041959.p2.g7250fd5.assembly.stream.el9
systemd-257-30.el10

Full list (493 packages)

NetworkManager-1:1.58~rc1-1.el10
NetworkManager-cloud-setup-1:1.58~rc1-1.el10
NetworkManager-libnm-1:1.58~rc1-1.el10
NetworkManager-ovs-1:1.58~rc1-1.el10
NetworkManager-tui-1:1.58~rc1-1.el10
WALinuxAgent-udev-2.14.0.1-3.el10
aardvark-dns-4:2.0.0-2.el10
acl-2.3.2-4.el10
afterburn-5.10.0-2.el10
afterburn-dracut-5.10.0-2.el10
alternatives-1.30-2.el10
amd-gpu-firmware-20260722-25.el10
amd-ucode-firmware-20260722-25.el10
attr-2.6.0-2.el10
audit-4.0.3-5.el10
audit-libs-4.0.3-5.el10
audit-rules-4.0.3-5.el10
authselect-1.5.3-1.el10
authselect-libs-1.5.3-1.el10
azure-vm-utils-0.7.0-1.el10
basesystem-11-22.el10
bash-5.2.26-6.el10
bash-completion-1:2.11-16.el10
bind-libs-32:9.18.33-19.el10
bind-license-32:9.18.33-19.el10
bind-utils-32:9.18.33-19.el10
bootc-1.16.2-1.el10
bootupd-0.2.35-1.el10
bsdtar-3.7.7-8.el10
bubblewrap-0.10.0-3.el10
bzip2-1.0.8-25.el10
bzip2-libs-1.0.8-25.el10
c-ares-1.34.6-4.el10
ca-certificates-2025.2.80_v9.0.305-102.el10
catatonit-5:0.2.1-4.el10
centos-gpg-keys-10.0-23.el10
centos-release-cloud-1-1.el10s
centos-release-nfv-common-1-5.el10s
centos-release-virt-common-1-1.el10s
centos-stream-release-10.0-23.el10
centos-stream-repos-10.0-23.el10
checkpolicy-3.11-1.el10
chrony-4.8-2.el10
cifs-utils-7.6-2.el10
clevis-23-2.el10
clevis-dracut-23-2.el10
clevis-luks-23-2.el10
clevis-pin-tpm2-0.5.5-1.el10
clevis-systemd-23-2.el10
cloud-utils-growpart-0.33-11.el10
composefs-1.0.8-1.el10
composefs-libs-1.0.8-1.el10
conmon-3:2.2.1-4.el10
conmon-rs-0.6.6-2.el10s
console-login-helper-messages-0.21.3-10.el10
console-login-helper-messages-issuegen-0.21.3-10.el10
console-login-helper-messages-profile-0.21.3-10.el10
container-selinux-4:2.250.0-1.el10
containers-common-6:6.0-2.el10
containers-common-extra-6:6.0-2.el10
coreos-installer-0.26.0-1.el10
coreos-installer-bootinfra-0.26.0-1.el10
coreutils-9.5-12.el10
coreutils-common-9.5-12.el10
cpio-2.15-3.el10
cracklib-2.9.11-8.el10
cracklib-dicts-2.9.11-8.el10
cri-o-1.35.5-1.el10s
cri-tools-1.35.0-1.el10s
criu-4.2-8.el10
criu-libs-4.2-8.el10
crun-1.28-1.el10
crypto-policies-20260708-1.git988eb15.el10
crypto-policies-scripts-20260708-1.git988eb15.el10
cryptsetup-2.8.6-1.el10
cryptsetup-libs-2.8.6-1.el10
curl-8.12.1-6.el10
cyrus-sasl-gssapi-2.1.28-27.el10
cyrus-sasl-lib-2.1.28-27.el10
dbus-1:1.14.10-6.el10
dbus-broker-36-4.el10
dbus-common-1:1.14.10-6.el10
dbus-libs-1:1.14.10-6.el10
dbus-tools-1:1.14.10-6.el10
device-mapper-10:1.02.215-3.el10
device-mapper-event-10:1.02.215-3.el10
device-mapper-event-libs-10:1.02.215-3.el10
device-mapper-libs-10:1.02.215-3.el10
device-mapper-multipath-0.9.9-19.el10
device-mapper-multipath-libs-0.9.9-19.el10
device-mapper-persistent-data-1.3.2-1.el10
diffutils-3.10-8.el10
dmidecode-1:3.6-5.el10
dnf-4.20.0-26.el10
dnf-data-4.20.0-26.el10
dnsmasq-2.90-7.el10
dosfstools-4.2-12.el10
dracut-107-9.el10
dracut-network-107-9.el10
dracut-squash-107-9.el10
duktape-2.7.0-10.el10
e2fsprogs-1.47.1-5.el10
e2fsprogs-libs-1.47.1-5.el10
efi-filesystem-6-8.el10
efibootmgr-18-9.el10
efivar-libs-39-3.el10
elfutils-default-yama-scope-0.195-1.el10
elfutils-libelf-0.195-1.el10
elfutils-libs-0.195-1.el10
erofs-utils-1.8.10-1.el10
ethtool-2:6.19-1.el10
expat-2.7.3-2.el10
fcoe-utils-1.0.34-11.gitb233050.el10
file-5.45-12.el10
file-libs-5.45-12.el10
filesystem-3.18-17.el10
findutils-1:4.10.0-5.el10
firewalld-filesystem-2.4.3-2.el10
flatpak-session-helper-1.18.0-1.el10
fstrm-0.6.1-12.el10
fuse-common-3.16.2-5.el10
fuse-libs-2.9.9-25.el10
fuse3-3.16.2-5.el10
fuse3-libs-3.16.2-5.el10
fwupd-2.1.6-1.el10
gawk-5.3.0-6.el10
gdbm-1:1.23-14.el10
gdbm-libs-1:1.23-14.el10
gettext-envsubst-0.22.5-6.el10
gettext-libs-0.22.5-6.el10
gettext-runtime-0.22.5-6.el10
git-core-2.52.0-1.el10
glib2-2.80.4-14.el10
glibc-2.39-131.el10
glibc-common-2.39-131.el10
glibc-gconv-extra-2.39-131.el10
glibc-minimal-langpack-2.39-131.el10
gmp-1:6.2.1-12.el10
gnupg2-2.4.5-5.el10
gnutls-3.8.10-4.el10
gobject-introspection-1.79.1-7.el10
gpgme-1.23.2-6.el10
grep-3.11-10.el10
grub2-common-1:2.12-53.el10
grub2-efi-x64-1:2.12-53.el10
grub2-pc-1:2.12-53.el10
grub2-pc-modules-1:2.12-53.el10
grub2-tools-1:2.12-53.el10
grub2-tools-minimal-1:2.12-53.el10
gssproxy-0.9.2-10.el10
gzip-1.13-3.el10
hostname-3.23-14.el10
hwdata-0.379-10.9.el10
ignition-2.26.0-4.el10
ignition-grub-2.26.0-4.el10
ima-evm-utils-1.6.2-6.el10
info-7.1-6.el10
inih-58-3.el10
intel-gpu-firmware-20260722-25.el10
ipcalc-1.0.3-12.el10
iproute-7.0.0-2.el10
iproute-tc-7.0.0-2.el10
iptables-libs-1.8.11-15.el10
iptables-nft-1.8.11-15.el10
iputils-20240905-5.el10
irqbalance-2:1.9.4-6.el10
iscsi-initiator-utils-6.2.1.11-2.git4b3e853.el10
iscsi-initiator-utils-iscsiuio-6.2.1.11-2.git4b3e853.el10
isns-utils-libs-0.103-1.el10
jansson-2.14-3.el10
jose-14-102.el10
jq-1.7.1-13.el10
json-c-0.18-3.el10
json-glib-1.8.0-5.el10
kbd-2.6.4-7.el10
kbd-legacy-2.6.4-7.el10
kbd-misc-2.6.4-7.el10
kdump-utils-1.0.58-15.el10
kernel-6.12.0-251.el10
kernel-core-6.12.0-251.el10
kernel-modules-6.12.0-251.el10
kernel-modules-core-6.12.0-251.el10
kernel-modules-extra-6.12.0-251.el10
kexec-tools-2.0.32-3.el10
keyutils-1.6.3-5.el10
keyutils-libs-1.6.3-5.el10
kmod-31-13.el10
kmod-libs-31-13.el10
kpartx-0.9.9-19.el10
krb5-libs-1.21.3-11.el10
less-661-3.el10
libacl-2.3.2-4.el10
libaio-0.3.112-1.el10
libarchive-3.7.7-8.el10
libassuan-2.5.6-6.el10
libattr-2.6.0-2.el10
libbasicobjects-0.1.1-58.el10
libblkid-2.40.2-20.el10
libbpf-2:1.7.0-2.el10
libcap-2.69-7.el10
libcap-ng-0.9.3-2.el10
libcbor-0.11.0-3.el10
libcollection-0.7.0-58.el10
libcom_err-1.47.1-5.el10
libcomps-0.1.21-3.el10
libconfig-1.7.3-10.el10
libcurl-minimal-8.12.1-6.el10
libdhash-0.5.0-58.el10
libdnf-0.73.1-17.el10
libdnf-plugin-subscription-manager-1.30.15-1.el10
libdrm-2.4.128-1.el10
libeconf-0.6.2-4.el10
libedit-3.1-52.20230828cvs.el10
libev-4.33-15.el10
libevent-2.1.12-16.el10
libfdisk-2.40.2-20.el10
libffi-3.4.4-10.el10
libfido2-1.14.0-7.el10
libgcc-14.4.1-1.el10
libgcrypt-1.11.0-7.el10
libgomp-14.4.1-1.el10
libgpg-error-1.50-2.el10
libibverbs-62.0-2.el10
libicu-74.2-5.el10
libidn2-2.3.7-3.el10
libini_config-1.3.1-58.el10
libipa_hbac-2.13.1-2.el10
libjcat-0.2.2-2.el10
libjose-14-102.el10
libkcapi-1.5.0-3.el10
libkcapi-hasher-1.5.0-3.el10
libkcapi-hmaccalc-1.5.0-3.el10
libksba-1.6.7-2.el10
libldb-4.24.3-100.el10
libluksmeta-10-1.el10
libmaxminddb-1.9.1-4.el10
libmicrohttpd-1:1.0.0-3.el10
libmnl-1.0.5-7.el10
libmodulemd-2.15.0-12.el10
libmount-2.40.2-20.el10
libmspack-0.10.1-0.14.alpha.el10
libndp-1.9-2.el10
libnet-1.3-7.el10
libnetfilter_conntrack-1.0.9-12.el10
libnfnetlink-1.0.2-3.el10
libnfsidmap-1:2.8.3-8.el10
libnftnl-1.3.0-3.el10
libnghttp2-1.68.0-5.el10
libnl3-3.11.0-1.el10
libnvme-1.16.2-1.el10
libpath_utils-0.2.1-58.el10
libpcap-14:1.10.4-7.el10
libpciaccess-0.16-16.el10
libpkgconf-2.1.0-3.el10
libpwquality-1.4.5-13.el10
libref_array-0.1.5-58.el10
librepo-1.19.0-1.el10
libseccomp-2.5.6-1.el10
libselinux-3.11-1.el10
libselinux-utils-3.11-1.el10
libsemanage-3.11-1.el10
libsepol-3.11-1.el10
libsmartcols-2.40.2-20.el10
libsmbclient-4.24.3-100.el10
libsolv-0.7.33-5.el10
libss-1.47.1-5.el10
libsss_certmap-2.13.1-2.el10
libsss_idmap-2.13.1-2.el10
libsss_nss_idmap-2.13.1-2.el10
libsss_sudo-2.13.1-2.el10
libstdc++-14.4.1-1.el10
libtalloc-2.4.4-100.el10
libtasn1-4.20.0-5.el10
libtdb-1.4.15-100.el10
libtevent-0.17.1-100.el10
libtirpc-1.3.5-1.el10
libtool-ltdl-2.4.7-14.el10
libunistring-1.1-10.el10
liburing-2.12-1.el10
libusb1-1.0.30-1.el10
libutempter-1.2.1-15.el10
libuuid-2.40.2-20.el10
libuv-1:1.52.1-1.el10
libverto-0.3.2-10.el10
libverto-libev-0.3.2-10.el10
libwbclient-4.24.3-100.el10
libxcrypt-4.4.36-10.el10
libxml2-2.12.5-15.el10
libxmlb-0.3.28-1.el10
libxslt-1.1.39-10.el10
libyaml-0.2.5-16.el10
libzstd-1.5.5-9.el10
linux-firmware-20260722-25.el10
linux-firmware-whence-20260722-25.el10
lldpad-1.1.1-4.gitf1dd9eb.el10
lmdb-libs-0.9.32-4.el10
logrotate-3.22.0-5.el10
lsof-4.98.0-7.el10
lua-libs-5.4.8-1.el10
luksmeta-10-1.el10
lvm2-10:2.03.41-3.el10
lvm2-libs-10:2.03.41-3.el10
lz4-libs-1.9.4-8.el10
lzo-2.10-14.el10
makedumpfile-1.7.8-1.el10
mdadm-4.4-4.el10
microcode_ctl-4:20260210-1.el10
mokutil-2:0.7.2-5.el10
mpdecimal-2.5.1-12.el10
mpfr-4.2.1-8.el10
nano-8.1-3.el10
ncurses-base-6.4-15.20240127.el10
ncurses-libs-6.4-15.20240127.el10
net-tools-2.0-0.73.20160912git.el10
netavark-4:2.0.0-2.el10
nettle-3.10.1-1.el10
newt-0.52.24-5.el10
nfs-utils-1:2.8.3-8.el10
nftables-1:1.1.5-5.el10
nmap-ncat-4:7.92-5.el10
nmstate-2.2.61-1.el10
npth-1.6-21.el10
nss-altfiles-2.23.0-6.el10
numactl-2.0.19-3.el10
numactl-libs-2.0.19-3.el10
numad-0.5-50.20251104git.el10
nvidia-gpu-firmware-20260722-25.el10
nvme-cli-2.16-2.el10
oniguruma-6.9.9-7.el10
open-vm-tools-13.0.10-1.el10
openldap-2.6.13-1.el10
openshift-clients-4.22.0-202605222252.p2.g062bc54.assembly.stream.el9
openshift-kubelet-4.22.0-202606041959.p2.g7250fd5.assembly.stream.el9
openssh-9.9p1-28.el10
openssh-clients-9.9p1-28.el10
openssh-server-9.9p1-28.el10
openssl-1:3.5.7-2.el10
openssl-fips-provider-1:3.5.7-2.el10
openssl-libs-1:3.5.7-2.el10
openvswitch-selinux-extra-policy-1.0-36.el10s
openvswitch3.5-3.5.3-5.el10s
os-prober-1.81-9.el10
ose-aws-ecr-image-credential-provider-4.22.0-202605191551.p2.gb4bad3f.assembly.stream.el9
ose-azure-acr-image-credential-provider-4.22.0-202605292128.p2.g0e3fc8d.assembly.stream.el9
ose-crio-credential-provider-4.22.0-202602261640.p2.g83d4961.assembly.stream.el9
ose-gcp-gcr-image-credential-provider-4.22.0-202605192117.p2.gea31ab8.assembly.stream.el9
ostree-2026.2-1.el10
ostree-grub2-2026.2-1.el10
ostree-libs-2026.2-1.el10
p11-kit-0.26.4-1.el10
p11-kit-trust-0.26.4-1.el10
pam-1.6.1-11.el10
pam-libs-1.6.1-11.el10
passt-0^20260611.ga9c61ff-1.el10
passt-selinux-0^20260611.ga9c61ff-1.el10
pciutils-3.13.0-6.el10
pciutils-libs-3.13.0-6.el10
pcre2-10.44-1.el10.3
pcre2-syntax-10.44-1.el10.3
pkgconf-2.1.0-3.el10
pkgconf-m4-2.1.0-3.el10
pkgconf-pkg-config-2.1.0-3.el10
podman-7:6.0.2-1.el10
podman-sequoia-0.4.0~pqc.3-1.el10
policycoreutils-3.11-1.el10
policycoreutils-python-utils-3.11-1.el10
polkit-125-6.el10
polkit-libs-125-6.el10
popt-1.19-8.el10
procps-ng-4.0.4-13.el10
protobuf-c-1.5.0-6.el10
psmisc-23.6-8.el10
python3-3.12.13-3.el10
python3-audit-4.0.3-5.el10
python3-charset-normalizer-3.4.2-1.el10
python3-cloud-what-1.30.15-1.el10
python3-dateutil-1:2.9.0.post0-1.el10
python3-dbus-1.3.2-8.el10
python3-decorator-5.1.1-12.el10
python3-distro-1.9.0-5.el10
python3-dnf-4.20.0-26.el10
python3-dnf-plugin-versionlock-4.7.0-11.el10
python3-dnf-plugins-core-4.7.0-11.el10
python3-file-magic-5.45-12.el10
python3-gobject-base-3.46.0-7.el10
python3-gobject-base-noarch-3.46.0-7.el10
python3-hawkey-0.73.1-17.el10
python3-idna-3.7-4.el10
python3-iniparse-0.5-10.el10
python3-inotify-0.9.6-36.el10
python3-libcomps-0.1.21-3.el10
python3-libdnf-0.73.1-17.el10
python3-librepo-1.19.0-1.el10
python3-libs-3.12.13-3.el10
python3-libselinux-3.11-1.el10
python3-libsemanage-3.11-1.el10
python3-packaging-24.2-2.el10
python3-pexpect-4.9.0-6.el10
python3-pip-wheel-23.3.2-11.el10
python3-policycoreutils-3.11-1.el10
python3-ptyprocess-0.7.0-9.el10
python3-pyyaml-6.0.1-19.el10
python3-requests-2.32.4-1.el10
python3-rpm-4.19.1.1-25.el10
python3-setools-4.7.0-1.el10
python3-setuptools-69.0.3-12.el10
python3-six-1.16.0-16.el10
python3-subscription-manager-rhsm-1.30.15-1.el10
python3-systemd-235-11.el10
python3-urllib3-1.26.19-4.el10
qemu-guest-agent-18:10.1.0-24.el10
quota-1:4.09-10.el10
quota-nls-1:4.09-10.el10
rdma-core-62.0-2.el10
readline-8.2-11.el10
rpcbind-1.2.9-0.el10
rpm-4.19.1.1-25.el10
rpm-build-libs-4.19.1.1-25.el10
rpm-libs-4.19.1.1-25.el10
rpm-ostree-2026.2-1.el10
rpm-ostree-libs-2026.2-1.el10
rpm-plugin-audit-4.19.1.1-25.el10
rpm-plugin-selinux-4.19.1.1-25.el10
rpm-plugin-syslog-4.19.1.1-25.el10
rpm-sequoia-1.10.2.3-1.el10
rpm-sign-libs-4.19.1.1-25.el10
rsync-3.4.4-1.el10
samba-client-libs-4.24.3-100.el10
samba-common-4.24.3-100.el10
samba-core-libs-4.24.3-100.el10
samba-ndr-libs-4.24.3-100.el10
sed-4.9-5.el10
selinux-policy-42.1.26-1.el10
selinux-policy-targeted-42.1.26-1.el10
setup-2.14.5-7.el10
sg3_utils-1.48-10.el10
sg3_utils-libs-1.48-10.el10
shadow-utils-2:4.15.0-13.el10
shadow-utils-subid-2:4.15.0-13.el10
shared-mime-info-2.3-8.el10
shim-x64-16.1-1.el10
skopeo-2:1.23.0-1.el10
slang-2.3.3-8.el10
snappy-1.1.10-7.el10
socat-1.7.4.4-9.el10
sos-4.11.2-3.el10
sqlite-libs-3.46.1-5.el10
ssh-key-dir-0.1.4-9.el10
sssd-2.13.1-2.el10
sssd-ad-2.13.1-2.el10
sssd-client-2.13.1-2.el10
sssd-common-2.13.1-2.el10
sssd-common-pac-2.13.1-2.el10
sssd-ipa-2.13.1-2.el10
sssd-krb5-2.13.1-2.el10
sssd-krb5-common-2.13.1-2.el10
sssd-ldap-2.13.1-2.el10
sssd-nfs-idmap-2.13.1-2.el10
sssd-proxy-2.13.1-2.el10
stalld-1.26.3-1.el10
strace-6.12-3.el10
subscription-manager-1.30.15-1.el10
subscription-manager-rhsm-certificates-20220623-6.el10
sudo-1.9.17-9.p2.el10
systemd-257-30.el10
systemd-journal-remote-257-30.el10
systemd-libs-257-30.el10
systemd-pam-257-30.el10
systemd-udev-257-30.el10
tar-2:1.35-11.el10
tmux-3.3a-14.20230918gitb202a2f.el10
toolbox-0.3-3.el10
tpm2-tools-5.7-5.el10
tpm2-tss-4.1.3-6.el10
tpm2-tss-fapi-4.1.3-6.el10
tzdata-2026c-1.el10
unbound-anchor-1.25.1-1.el10
unbound-libs-1.25.1-1.el10
userspace-rcu-0.14.0-7.el10
util-linux-2.40.2-20.el10
util-linux-core-2.40.2-20.el10
vim-data-2:9.1.083-15.el10
vim-minimal-2:9.1.083-15.el10
virt-what-1.27-3.el10
which-2.21-44.el10
xfsprogs-6.16.0-1.el10
xmlsec1-1:1.2.39-3.el10
xmlsec1-openssl-1:1.2.39-3.el10
xz-1:5.6.2-4.el10
xz-libs-1:5.6.2-4.el10
zlib-ng-compat-2.2.3-3.el10
zram-generator-1.1.2-14.el10
zstd-1.5.5-9.el10

Changed:

NetworkManager 1:1.56.1-1.el10 → 1:1.58~rc1-1.el10
NetworkManager-cloud-setup 1:1.56.1-1.el10 → 1:1.58~rc1-1.el10
NetworkManager-libnm 1:1.56.1-1.el10 → 1:1.58~rc1-1.el10
NetworkManager-ovs 1:1.56.1-1.el10 → 1:1.58~rc1-1.el10
NetworkManager-tui 1:1.56.1-1.el10 → 1:1.58~rc1-1.el10
aardvark-dns 2:2.0.0-1.el10 → 4:2.0.0-2.el10
amd-gpu-firmware 20260624-24.el10 → 20260722-25.el10
amd-ucode-firmware 20260624-24.el10 → 20260722-25.el10
attr 2.5.2-5.el10 → 2.6.0-2.el10
bind-libs 32:9.18.33-18.el10 → 32:9.18.33-19.el10
bind-license 32:9.18.33-18.el10 → 32:9.18.33-19.el10
bind-utils 32:9.18.33-18.el10 → 32:9.18.33-19.el10
c-ares 1.34.6-1.el10 → 1.34.6-4.el10
checkpolicy 3.10-1.el10 → 3.11-1.el10
cifs-utils 7.6-1.el10 → 7.6-2.el10
clevis 23-1.el10 → 23-2.el10
clevis-dracut 23-1.el10 → 23-2.el10
clevis-luks 23-1.el10 → 23-2.el10
clevis-systemd 23-1.el10 → 23-2.el10
container-selinux 4:2.249.0-1.el10 → 4:2.250.0-1.el10
containers-common 6:5.8-2.el10 → 6:6.0-2.el10
containers-common-extra 6:5.8-2.el10 → 6:6.0-2.el10
cri-o 1.36.2-1.el10s → 1.35.5-1.el10s
cri-tools 1.36.0-1.el10s → 1.35.0-1.el10s
criu 4.2-4.el10 → 4.2-8.el10
criu-libs 4.2-4.el10 → 4.2-8.el10
crypto-policies 20260525-1.gitf5f5370.el10 → 20260708-1.git988eb15.el10
crypto-policies-scripts 20260525-1.gitf5f5370.el10 → 20260708-1.git988eb15.el10
dbus 1:1.14.10-5.el10 → 1:1.14.10-6.el10
dbus-common 1:1.14.10-5.el10 → 1:1.14.10-6.el10
dbus-libs 1:1.14.10-5.el10 → 1:1.14.10-6.el10
dbus-tools 1:1.14.10-5.el10 → 1:1.14.10-6.el10
device-mapper 10:1.02.215-2.el10 → 10:1.02.215-3.el10
device-mapper-event 10:1.02.215-2.el10 → 10:1.02.215-3.el10
device-mapper-event-libs 10:1.02.215-2.el10 → 10:1.02.215-3.el10
device-mapper-libs 10:1.02.215-2.el10 → 10:1.02.215-3.el10
dnf 4.20.0-24.el10 → 4.20.0-26.el10
dnf-data 4.20.0-24.el10 → 4.20.0-26.el10
dracut 107-4.el10 → 107-9.el10
dracut-network 107-4.el10 → 107-9.el10
dracut-squash 107-4.el10 → 107-9.el10
expat 2.7.3-1.el10 → 2.7.3-2.el10
fwupd 2.0.19-2.el10 → 2.1.6-1.el10
glib2 2.80.4-13.el10 → 2.80.4-14.el10
glibc 2.39-126.el10 → 2.39-131.el10
glibc-common 2.39-126.el10 → 2.39-131.el10
glibc-gconv-extra 2.39-126.el10 → 2.39-131.el10
glibc-minimal-langpack 2.39-126.el10 → 2.39-131.el10
gobject-introspection 1.79.1-6.el10 → 1.79.1-7.el10
grub2-common 1:2.12-49.el10 → 1:2.12-53.el10
grub2-efi-x64 1:2.12-49.el10 → 1:2.12-53.el10
grub2-pc 1:2.12-49.el10 → 1:2.12-53.el10
grub2-pc-modules 1:2.12-49.el10 → 1:2.12-53.el10
grub2-tools 1:2.12-49.el10 → 1:2.12-53.el10
grub2-tools-minimal 1:2.12-49.el10 → 1:2.12-53.el10
ignition 2.26.0-3.el10 → 2.26.0-4.el10
ignition-grub 2.26.0-3.el10 → 2.26.0-4.el10
ima-evm-utils 1.6.2-5.el10 → 1.6.2-6.el10
intel-gpu-firmware 20260624-24.el10 → 20260722-25.el10
iproute 6.17.0-2.el10 → 7.0.0-2.el10
iproute-tc 6.17.0-2.el10 → 7.0.0-2.el10
iscsi-initiator-utils 6.2.1.11-0.git4b3e853.el10 → 6.2.1.11-2.git4b3e853.el10
iscsi-initiator-utils-iscsiuio 6.2.1.11-0.git4b3e853.el10 → 6.2.1.11-2.git4b3e853.el10
kernel 6.12.0-243.el10 → 6.12.0-251.el10
kernel-core 6.12.0-243.el10 → 6.12.0-251.el10
kernel-modules 6.12.0-243.el10 → 6.12.0-251.el10
kernel-modules-core 6.12.0-243.el10 → 6.12.0-251.el10
kernel-modules-extra 6.12.0-243.el10 → 6.12.0-251.el10
libaio 0.3.111-22.el10 → 0.3.112-1.el10
libattr 2.5.2-5.el10 → 2.6.0-2.el10
libcap-ng 0.9.3-1.el10 → 0.9.3-2.el10
libgcc 14.3.1-4.4.el10 → 14.4.1-1.el10
libgomp 14.3.1-4.4.el10 → 14.4.1-1.el10
libipa_hbac 2.13.1-1.el10 → 2.13.1-2.el10
libnfsidmap 1:2.8.3-7.el10 → 1:2.8.3-8.el10
libnghttp2 1.68.0-4.el10 → 1.68.0-5.el10
libnvme 1.16.1-3.el10 → 1.16.2-1.el10
libselinux 3.10-2.el10 → 3.11-1.el10
libselinux-utils 3.10-2.el10 → 3.11-1.el10
libsemanage 3.10-1.el10 → 3.11-1.el10
libsepol 3.10-2.el10 → 3.11-1.el10
libsss_certmap 2.13.1-1.el10 → 2.13.1-2.el10
libsss_idmap 2.13.1-1.el10 → 2.13.1-2.el10
libsss_nss_idmap 2.13.1-1.el10 → 2.13.1-2.el10
libsss_sudo 2.13.1-1.el10 → 2.13.1-2.el10
libstdc++ 14.3.1-4.4.el10 → 14.4.1-1.el10
libxml2 2.12.5-14.el10 → 2.12.5-15.el10
libxmlb 0.3.24-1.el10 → 0.3.28-1.el10
libxslt 1.1.39-9.el10 → 1.1.39-10.el10
linux-firmware 20260624-24.el10 → 20260722-25.el10
linux-firmware-whence 20260624-24.el10 → 20260722-25.el10
lvm2 10:2.03.41-2.el10 → 10:2.03.41-3.el10
lvm2-libs 10:2.03.41-2.el10 → 10:2.03.41-3.el10
mdadm 4.4-3.el10 → 4.4-4.el10
mokutil 2:0.7.2-4.el10 → 2:0.7.2-5.el10
netavark 2:1.17.2-2.el10 → 4:2.0.0-2.el10
nfs-utils 1:2.8.3-7.el10 → 1:2.8.3-8.el10
nmstate 2.2.60-2.el10 → 2.2.61-1.el10
nvidia-gpu-firmware 20260624-24.el10 → 20260722-25.el10
openshift-clients 5.0.0-202606220255.p2.g74e525a.assembly.stream.el10 → 4.22.0-202605222252.p2.g062bc54.assembly.stream.el9
openshift-kubelet 5.0.0-202606250141.p2.ga466682.assembly.stream.el10 → 4.22.0-202606041959.p2.g7250fd5.assembly.stream.el9
openssh 9.9p1-26.el10 → 9.9p1-28.el10
openssh-clients 9.9p1-26.el10 → 9.9p1-28.el10
openssh-server 9.9p1-26.el10 → 9.9p1-28.el10
openssl 1:3.5.5-3.el10 → 1:3.5.7-2.el10
openssl-fips-provider 1:3.5.5-3.el10 → 1:3.5.7-2.el10
openssl-libs 1:3.5.5-3.el10 → 1:3.5.7-2.el10
ose-aws-ecr-image-credential-provider 5.0.0-202606171004.p2.g5060934.assembly.stream.el10 → 4.22.0-202605191551.p2.gb4bad3f.assembly.stream.el9
ose-azure-acr-image-credential-provider 5.0.0-202606241438.p2.g2aea5df.assembly.stream.el10 → 4.22.0-202605292128.p2.g0e3fc8d.assembly.stream.el9
ose-crio-credential-provider 5.0.0-202603041733.p2.g83d4961.assembly.stream.el10 → 4.22.0-202602261640.p2.g83d4961.assembly.stream.el9
ose-gcp-gcr-image-credential-provider 5.0.0-202605141918.p2.g808c2a2.assembly.stream.el10 → 4.22.0-202605192117.p2.gea31ab8.assembly.stream.el9
ostree 2026.1-1.el10 → 2026.2-1.el10
ostree-grub2 2026.1-1.el10 → 2026.2-1.el10
ostree-libs 2026.1-1.el10 → 2026.2-1.el10
p11-kit 0.26.2-1.el10 → 0.26.4-1.el10
p11-kit-trust 0.26.2-1.el10 → 0.26.4-1.el10
pam 1.6.1-10.el10 → 1.6.1-11.el10
pam-libs 1.6.1-10.el10 → 1.6.1-11.el10
podman 7:5.8.3-1.el10 → 7:6.0.2-1.el10
policycoreutils 3.10-3.el10 → 3.11-1.el10
policycoreutils-python-utils 3.10-3.el10 → 3.11-1.el10
python3 3.12.13-2.el10 → 3.12.13-3.el10
python3-dnf 4.20.0-24.el10 → 4.20.0-26.el10
python3-dnf-plugin-versionlock 4.7.0-10.el10 → 4.7.0-11.el10
python3-dnf-plugins-core 4.7.0-10.el10 → 4.7.0-11.el10
python3-libs 3.12.13-2.el10 → 3.12.13-3.el10
python3-libselinux 3.10-2.el10 → 3.11-1.el10
python3-libsemanage 3.10-1.el10 → 3.11-1.el10
python3-policycoreutils 3.10-3.el10 → 3.11-1.el10
python3-setools 4.6.0-3.el10 → 4.7.0-1.el10
qemu-guest-agent 18:10.1.0-23.el10 → 18:10.1.0-24.el10
rpcbind 1.2.7-3.el10 → 1.2.9-0.el10
rpm-ostree 2026.1-4.el10 → 2026.2-1.el10
rpm-ostree-libs 2026.1-4.el10 → 2026.2-1.el10
rpm-sequoia 1.10.2.1-1.el10 → 1.10.2.3-1.el10
selinux-policy 42.1.24-1.el10 → 42.1.26-1.el10
selinux-policy-targeted 42.1.24-1.el10 → 42.1.26-1.el10
socat 1.7.4.4-8.el10 → 1.7.4.4-9.el10
sos 4.11.0-1.el10 → 4.11.2-3.el10
sssd 2.13.1-1.el10 → 2.13.1-2.el10
sssd-ad 2.13.1-1.el10 → 2.13.1-2.el10
sssd-client 2.13.1-1.el10 → 2.13.1-2.el10
sssd-common 2.13.1-1.el10 → 2.13.1-2.el10
sssd-common-pac 2.13.1-1.el10 → 2.13.1-2.el10
sssd-ipa 2.13.1-1.el10 → 2.13.1-2.el10
sssd-krb5 2.13.1-1.el10 → 2.13.1-2.el10
sssd-krb5-common 2.13.1-1.el10 → 2.13.1-2.el10
sssd-ldap 2.13.1-1.el10 → 2.13.1-2.el10
sssd-nfs-idmap 2.13.1-1.el10 → 2.13.1-2.el10
sssd-proxy 2.13.1-1.el10 → 2.13.1-2.el10
systemd 257-27.el10 → 257-30.el10
systemd-journal-remote 257-27.el10 → 257-30.el10
systemd-libs 257-27.el10 → 257-30.el10
systemd-pam 257-27.el10 → 257-30.el10
systemd-udev 257-27.el10 → 257-30.el10
tmux 3.3a-13.20230918gitb202a2f.el10 → 3.3a-14.20230918gitb202a2f.el10
tzdata 2026b-1.el10 → 2026c-1.el10
vim-data 2:9.1.083-13.el10 → 2:9.1.083-15.el10
vim-minimal 2:9.1.083-13.el10 → 2:9.1.083-15.el10

Extensions

Full list (112 packages)

NetworkManager-libreswan-1.2.30-2.el10.x86_64
binutils-2.41-65.el10.x86_64
binutils-gold-2.41-65.el10.x86_64
bison-3.8.2-9.el10.x86_64
cmake-filesystem-3.31.8-1.el10.x86_64
cpp-14.4.1-1.el10.x86_64
elfutils-debuginfod-client-0.195-1.el10.x86_64
elfutils-libelf-devel-0.195-1.el10.x86_64
flex-2.6.4-19.el10.x86_64
gcc-14.4.1-1.el10.x86_64
glibc-devel-2.39-131.el10.x86_64
groff-base-1.23.0-10.el10.x86_64
kernel-6.12.0-251.el10.x86_64
kernel-core-6.12.0-251.el10.x86_64
kernel-devel-6.12.0-251.el10.x86_64
kernel-headers-6.12.0-251.el10.x86_64
kernel-modules-6.12.0-251.el10.x86_64
kernel-modules-extra-6.12.0-251.el10.x86_64
kernel-rt-core-6.12.0-251.el10.x86_64
kernel-rt-devel-6.12.0-251.el10.x86_64
kernel-rt-modules-6.12.0-251.el10.x86_64
kernel-rt-modules-core-6.12.0-251.el10.x86_64
kernel-rt-modules-extra-6.12.0-251.el10.x86_64
krb5-pkinit-1.21.3-11.el10.x86_64
krb5-workstation-1.21.3-11.el10.x86_64
ldns-1.8.3-18.el10.x86_64
libkadm5-1.21.3-11.el10.x86_64
libmpc-1.3.1-7.el10.x86_64
libqb-2.0.8-6.el10.x86_64
libreswan-5.3.2-1.el10.x86_64
libreswan-minimal-5.3.2-1.el10.x86_64
libxcrypt-devel-4.4.36-10.el10.x86_64
libzstd-devel-1.5.5-9.el10.x86_64
lm_sensors-libs-3.6.0-20.el10.x86_64
m4-1.4.19-11.el10.x86_64
make-1:4.4.1-9.el10.x86_64
ncurses-6.4-15.20240127.el10.x86_64
nspr-4.39.0-5.el10.x86_64
nss-3.124.0-5.el10.x86_64
nss-softokn-3.124.0-5.el10.x86_64
nss-softokn-freebl-3.124.0-5.el10.x86_64
nss-sysinit-3.124.0-5.el10.x86_64
nss-tools-3.124.0-5.el10.x86_64
nss-util-3.124.0-5.el10.x86_64
openssl-devel-1:3.5.7-2.el10.x86_64
openvswitch3.5-ipsec-3.5.3-5.el10s.x86_64
pcp-conf-7.1.5-2.el10.x86_64
pcp-libs-7.1.5-2.el10.x86_64
perl-AutoLoader-5.74-514.el10.noarch
perl-B-1.89-514.el10.x86_64
perl-Carp-1.54-511.el10.noarch
perl-Class-Struct-0.68-514.el10.noarch
perl-Data-Dumper-2.189-512.el10.x86_64
perl-Digest-1.20-511.el10.noarch
perl-Digest-MD5-2.59-6.el10.x86_64
perl-DynaLoader-1.56-514.el10.x86_64
perl-Encode-4:3.21-511.el10.x86_64
perl-Errno-1.38-514.el10.x86_64
perl-Exporter-5.78-511.el10.noarch
perl-Fcntl-1.18-514.el10.x86_64
perl-File-Basename-2.86-514.el10.noarch
perl-File-Path-2.18-512.el10.noarch
perl-File-Temp-1:0.231.100-512.el10.noarch
perl-File-stat-1.14-514.el10.noarch
perl-FileHandle-2.05-514.el10.noarch
perl-Getopt-Long-1:2.58-3.el10.noarch
perl-Getopt-Std-1.14-514.el10.noarch
perl-HTTP-Tiny-0.088-512.el10.noarch
perl-IO-1.55-514.el10.x86_64
perl-IO-Socket-IP-0.42-512.el10.noarch
perl-IO-Socket-SSL-2.085-3.el10.noarch
perl-IPC-Open3-1.22-514.el10.noarch
perl-MIME-Base64-3.16-511.el10.x86_64
perl-Mozilla-CA-20231213-5.el10.noarch
perl-NDBM_File-1.17-514.el10.x86_64
perl-Net-SSLeay-1.94-9.el10.x86_64
perl-POSIX-2.20-514.el10.x86_64
perl-PathTools-3.91-512.el10.x86_64
perl-Pod-Escapes-1:1.07-511.el10.noarch
perl-Pod-Perldoc-3.28.01-512.el10.noarch
perl-Pod-Simple-1:3.45-511.el10.noarch
perl-Pod-Usage-4:2.03-511.el10.noarch
perl-Scalar-List-Utils-5:1.63-511.el10.x86_64
perl-SelectSaver-1.02-514.el10.noarch
perl-Socket-4:2.038-511.el10.x86_64
perl-Storable-1:3.32-511.el10.x86_64
perl-Symbol-1.09-514.el10.noarch
perl-Term-ANSIColor-5.01-512.el10.noarch
perl-Term-Cap-1.18-511.el10.noarch
perl-Text-ParseWords-3.31-511.el10.noarch
perl-Text-Tabs+Wrap-2024.001-511.el10.noarch
perl-Time-Local-2:1.350-511.el10.noarch
perl-URI-5.27-3.el10.noarch
perl-base-2.27-514.el10.noarch
perl-constant-1.33-512.el10.noarch
perl-if-0.61.000-514.el10.noarch
perl-interpreter-4:5.40.2-514.el10.x86_64
perl-libnet-3.15-512.el10.noarch
perl-libs-4:5.40.2-514.el10.x86_64
perl-locale-1.12-514.el10.noarch
perl-mro-1.29-514.el10.x86_64
perl-overload-1.37-514.el10.noarch
perl-overloading-0.02-514.el10.noarch
perl-parent-1:0.241-512.el10.noarch
perl-podlators-1:5.01-511.el10.noarch
perl-vars-1.05-514.el10.noarch
protobuf-3.19.6-15.el10.x86_64
python3-openvswitch3.5-3.5.3-5.el10s.x86_64
sysstat-12.7.6-4.el10.x86_64
usbguard-1.1.4-2.el10.x86_64
usbguard-selinux-1.1.4-2.el10.noarch
zlib-ng-compat-devel-2.2.3-3.el10.x86_64

CentOS Stream CoreOS base layer: 10 upgraded from 10.0.20260702-0 to 10.0.20260729-0

CNTRLPLANE-3552: Multi-stream CoreOS base layer: metadata parsing and stream resolution #8669

GCP-440: Fix GCP boot image discovery from CoreOS base layer: stream metadata #7881

View changelog in Markdown or change previous release:

Source code for this page located on github