Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.20.0-okd-scos.ec.13

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Failed (2 retries) release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next

Upgrades from:

• 4.20.0-okd-scos.ec.10 (changes) - F F F
• 4.19.0-okd-scos.15 (changes) - Success

---

Loading changelog, this may take a while ...

Changes from 4.20.0-okd-scos.ec.9

Created: 2025-08-25 07:40:08 +0000 UTC

Image Digest: sha256:dc1ea1088ca27a957fe42993bf8c2e85b7a46556e83d48eb342ee3d33e352d61

Release 4.20.0-okd-scos.ec.13 was created from registry.ci.openshift.org/origin/release-scos:4.20.0-0.okd-scos-2025-08-24-131702

Components

• Kubectl 1.33.3
• Kubernetes upgraded from 1.33.2 to 1.33.4
• Kubernetes Tests upgraded from 1.33.2 to 1.33.3
• CentOS Stream CoreOS upgraded from 10.0.20250715-0 to 10.0.20250819-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ChunkSizeMiB (5 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
HardwareSpeed (3 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
InsightsRuntimeExtractor (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
OnClusterBuild (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
HighlyAvailableArbiter (8 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
SigstoreImageVerification (5 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
StoragePerformantSecurityPolicy (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
UpgradeStatus (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
VSphereMultiDisk (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ImageVolume (7 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterVersionOperatorConfiguration (0 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
DualReplica (5 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
SELinuxMount (17 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
AWSClusterHostedDNSInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureClusterHostedDNSInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GCPClusterHostedDNSInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GCPCustomAPIEndpointsInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
IrreconcilableMachineConfig (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NoRegistryClusterOperations (0 tests)				Enabled (New)

New images

• csi-external-snapshot-metadata git 693a8264 sha256:031cbf0e64eeb8eee817698c947b2103a4eb1571deff45c8da646d8af5785ba0

Rebuilt images without code change

• multus-whereabouts-ipam-cni git 43c89591 sha256:b3c3b9e57b0d86f3900e41aaa2bf2ecf6f5b978f29308040bf4584aaf68e6657

agent-installer-api-server

• NO-ISSUE: [master] Bump OCP versions: 4.19 (#7948) #7948
• NO-ISSUE: [master] Bump OCP versions: 4.18, 4.16, 4.14 (#7941) #7941
• MGMT-21274: Report duration of monitored hosts (#7933) #7933
• NO-ISSUE: Add yoavsc0302 to OWNERS_ALIASES file (#7939) #7939
• NO-ISSUE: [master] Bump OCP versions: 4.12 (#7927) #7927
• OCPBUGS-59393: Fix IsMachineCidrEqualsToCalculatedCidr validation to handle unnormalized IPv6 addresses (#7923) #7923
• NO-ISSUE: support setting TNA_CLUSTERS_SUPPORT when deploying with assisted-test-infra (#7922) #7922
• NO-ISSUE: Associate MetalLB operator with the Virtualization bundle (#7920) #7920
• NO-ISSUE: [master] Bump OCP versions: 4.15, 4.17 (#7924) #7924
• NO-ISSUE: [master] Bump OCP versions: 4.19 (#7921) #7921
• MGMT-21063: Use mac address to configure dhcp on kargs (#7888) #7888
• Set AIUI_CHAT_API_URL for podman deployment (#7911) #7911
• MGMT-14822: Add MetalLB operator (#7824) #7824
• NO-ISSUE: [master] Bump OCP versions: 4.20, 4.14 (#7917) #7917
• ACM-22740: Approve CSRs for a host before marking as Done (#7903) #7903
• NO-ISSUE: [master] Bump OCP versions: 4.16, 4.18 (#7904) #7904
• MGMT-20474: New route to provide a detailed list of features (#7862) #7862
• NO-ISSUE: [master] Bump OCP versions: 4.19 (#7902) #7902
• NO-ISSUE: Remove unused variables from cluster monitor loop (#7887) #7887
• MGMT-21266: Report duration of monitored clusters (#7886) #7886
• MGMT-21312: Index hosts by cluster id (#7891) #7891
• MGMT-21287: Remove NHO dependency in SNR (#7889) #7889
• NO-ISSUE: [master] Bump OCP versions: 4.15, 4.17 (#7881) #7881
• MGMT-20726: Allow prefix for PVC and secret naming (#7746) #7746
• MGMT-21252: Make l3_connected_addresses output deterministic (#7879) #7879
• MGMT-20973: Cluster events - filtering deleted hosts ends with an error (#7854) #7854
• MGMT-21253: RefreshSchedulableMastersForcedTrue lead to extra reads from DB (#7880) #7880
• NO-ISSUE: [master] Bump OCP versions: 4.19 (#7875) #7875
• NO-ISSUE: Add NHO and FAR back to the virtualization bundle (#7869) #7869
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• NO-ISSUE: Update Konflux references (#1216) #1216
• NO-ISSUE: Add yoavsc0302 to OWNERS_ALIASES file (#1213) #1213
• NO-ISSUE: Update Konflux references (#1212) #1212
• MGMT-20756: assisted installer naive string concatenation for partition finding (#1198) #1198
• NO-ISSUE: Update Konflux references (#1202) #1202
• Full changelog

agent-installer-node-agent

• NO-ISSUE: Add yoavsc0302 to OWNERS_ALIASES file (#1089) #1089
• NO-ISSUE: Update Konflux references (#1078) #1078
• MGMT-20141: collecting and uploading ironic-agent logs (#1028) #1028
• Full changelog

agent-installer-utils

• AGENT-1256: Fix hyperconverged and kube descheduler contents #140
• AGENT-1256: Version the ISO builder configuration and script #128
• AGENT-1254: Switch to agent-installer-ui image #132
• AGENT-1205: Do not include agent-tui and related services #123
• OCPBUGS-60019: Add ISOBuilder Release notes #135
• AGENT-1270: use agent-preinstall-image-builder image for building the ISO #134
• NO-ISSUE: Move mtv-operator back to v2.8 for 4.20 #133
• OCPBUGS-59724: add back NHR and FAR operators #130
• Full changelog

aws-cloud-controller-manager

• OCPCLOUD-2928: Merge https://github.com/kubernetes/cloud-provider-aws:master (b0e098d) into main #106
• Full changelog

aws-cluster-api-controllers

• OCPCLOUD-2919: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:main (645f38e) into main #565
• NO-JIRA: Update OWNERS #561
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-60655: Disable LUN stress test for azure-file #418
• OCPBUGS-60464: Bump library-go to fix panic #417
• STOR-2394: Bump all deps for 4.20 #408
• STOR-2479: Add CredentialsRequest for the EFS node DaemonSet #389
• STOR-2330: Add labels to subscribe openstack cinder and manila CSI driver controllers to NPs #409
• OCPBUGS-57395: Remove stale conditions #406
• Full changelog

aws-machine-controllers

• OCPCLOUD-2935: Bump k8s dependencies to 1.33; go 1.24 #136
• NO-JIRA: Update OWNERS #135
• Full changelog

azure-cluster-api-controllers

• NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.20.2 (2a4b30d) into master #345
• NO-JIRA: Update OWNERS #344
• Full changelog

azure-machine-controllers

• OCPCLOUD-2932: Bump 1.33 #160
• NO-JIRA: Update OWNERS #161
• Full changelog

azure-service-operator

• NO-JIRA: Update OWNERS #10
• Full changelog

baremetal-installer, installer, installer-artifacts

• CORS-3652: RHCOS Stream Marketplace Images #9329
• OCPBUGS-60634: Added logic to clean up potential leftover spbm entity configs #9894
• OCPBUGS-60600: node-joner ignore error if SSH key was not found #9908
• CORS-4061: migrate AWS SDK to v2 in quota/aws #9890
• CORS-4056: migrate AWS SDK to v2 in asset/machines/aws #9889
• OCPBUGS-57364: custom-dns: Set PrivateZone and PublicZone to nil in the DNS manifest #9886
• OCPBUGS-55499: Misleading error when confidentialCompute: Enabled #9848
• OCPBUGS-60162: reject installation into byo vpc/subnets owned by another cluster #9883
• OCPBUGS-60545: Azure: change LB and pubic IP skus to Standard #9898
• AGENT-1205: Update agent-installer-ui tar path #9896
• OCPBUGS-59104: Set kernel dual-stack arg for all platforms #9865
• OCPBUGS-51299: Add default values for validation to kms keys #9781
• OCPBUGS-53473: Validate clusterNetwork hostPrefix #9594
• no-jira: dev docs - add rr capi debugging #9887
• OCPBUGS-60197: PowerVS: config variables not honored #9877
• CORS-4078: centralize v2 aws client constructions #9882
• OCPBUGS-50517: [Nuanix] installer should add the shared category to the preloaded rhcos image PC object #9450
• MGMT-21212: Enable dual-stack clusters with image-based installations #9847
• OCPBUGS-60284: Upgrading Cluster-API-Provider-Nutanix version from 1.5.4 to 1.7.0 #9869
• OCPBUGS-60240: baremetal: always set external v6 URL on dualstack #9874
• CORS-4177: clusterapi: use default envtest timeouts #9871
• CORS-4067: Add support for single zone NAT gateway #9753
• CORS-4178: handle deleting AWS egress-only internet gateway #9873
• OCPEDGE-1997: bump(ocp/api): pull in HighlyAvailableArbiter promotion #9870
• AGENT-1205: Extract agent-tui during boot for interactive workflow #9828
• SPLAT-2355: Added vSphere support for disk setup #9863
• CORS-4083, CORS-4084, CORS-4085: Add Azure custom-dns support in Tech Preview #9861
• OCPBUGS-59542: Generated Nutanix MachineSets for Autoscaling with Failure Domains #9864
• no-jira: OWNERS: add splat team as approvers #9862
• CORS-3992: skip dns zone validation with custom DNS #9859
• no-jira: Bump openshift/api to get renamed Featuregates #9854
• OCPEDGE-1994: bump(ocp/api): pull in updated DualReplica #9849
• SPLAT-2295: Setup additional disks via machine configs #9706
• OCPBUGS-59630: Update RHCOS 4.20 bootimage metadata to 9.6.20250701-0 #9844
• no-jira: images: bump images to go 1.24 #9850
• CORS-3916, CORS-3920: Use gcp custom endpoints in the installer #9535
• OCPBUGS-59430: Fail install config validation when base domain is invalid #9840
• OCPBUGS-59678: PowerVS Support VPC and TG ids #9818
• OCPBUGS-57732: Catch gcp destroy cases where the operation is nil #9823
• Full changelog

baremetal-operator

• METAL-1380: Sync july 24 #427
• METAL-1238: Add annotation to install metal3 CRDs in hypershift hosted clusters #426
• Full changelog

baremetal-runtimecfg

• CORS-4175: Extend in-cluster DNS support to Azure #366
• no-jira: Bump openshift/api version to bring updates to AzurePlatformStatus #367
• Full changelog

cli, cli-artifacts, deployer, tools

• OTA-1601: Better the Updating Cluster Operators table #2077
• OCPBUGS-58393: oc login: Preserve ExecProvider on oc login -u #2075
• OCPBUGS-60281: Fix panic in oc describe templateinstance when Secret is nil #2073
• OTA-1560: pkg/cli/admin/upgrade: Promote ‘recommend’ to general availability #2076
• NO-JIRA: Update containers/image and docker versions #2067
• OTA-1600: pkg/cli/admin/upgrade/recommend: Don’t error on unaccepted issues when the feature gate is off #2069
• Full changelog

cloud-credential-operator

• NO-JIRA: Add a badge in the repo’s README file to auto-refresh the wiki weekly. #898
• OCPBUGS-34993: ccoctl azure dnszone-resource-group-name now optional #897
• OCPBUGS-59889: Add retry logic for Azure federated identity credential creation #878
• CCO-641: update dependencies #887
• NO-JIRA: Drop lleshchi from OWNERS #889
• OCPBUGS-43783: openstack: Set annotation even when credentials mode is unset #873
• OCPBUGS-59402: github.com/golang/glog v1.2.5 #888
• Full changelog

cloud-network-config-controller

• CORENET-5958: Rebase k8s to 1.33 #176
• NO-JIRA: Update OWNERS #177
• Full changelog

cluster-authentication-operator

• OCPBUGS-59909: Don’t cache server errors when checking for password grant support #781
• CNTRLPLANE-5: Wire a feature-gates config observer for oauth-apiserver. #773
• AUTH-543: OIDC/OAuth resource configuration #740
• AUTH-543, OCPBUGS-57808: (deps): Bump to Go 1.24 and k8s 1.33 #775
• Full changelog

cluster-autoscaler

• OCPBUGS-54231: revert openshift replica fix #369
• Full changelog

cluster-autoscaler-operator

• AUTOSCALE-244: Prepare for 4.20 and fix missing volumeattachments rbac #351
• AUTOSCALE-125: newPodScaleUpDelay field for CA #349
• Full changelog

cluster-baremetal-operator

• METAL-1546: Set privileged to true for ironic-proxy container so it works with ironic-image custom directories #502
• METAL-1508: Change deprecated pointer to ptr #495
• OCPBUGS-53392: Remove webhookport (9447) as HostPort #496
• METAL-1238: Enable CBO to run on hosted clusters #494
• Full changelog

cluster-capi-controllers

• NO-JIRA: Update OWNERS #244
• Full changelog

cluster-capi-operator

• OSASINFRA-3690, OSASINFRA-3691: Add OpenStack CAPI-MAPI translation layer #188
• NO-JIRA: Improve ergonomics of running tests #342
• OCPBUGS-57195: Fix infra machine template deletion #326
• OCPCLOUD-2992: migration e2e for creating machine with authoritativeAPI ClusterAPI #320
• OCPCLOUD-2566: Adds MAPI Machine VAP and test suites #321
• OCPCLOUD-2916: Bump to CAPI v1.10, k8s v1.33, go 1.24 #341
• NO-JIRA: Get openshift/api directory from packages #339
• OCPCLOUD-2979: ingress network policy for metrics #325
• OCPCLOUD-2992: migration e2e for creating machinesets #330
• NO-JIRA: Update OWNERS #335
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-53300: Adds service for cloud-controller-manager #399
• OCPCLOUD-2940: Update dependencies for Kubernetes 1.33 #396
• OCPBUGS-53300: Update service selector to match deployment label #398
• NO-JIRA: Update OWNERS #397
• Full changelog

cluster-config-api

• machineconfiguration/OWNERS: Drop me #2446
• OTA-923: Promote ClusterVersionOperatorConfiguration to TechPreview #2457
• OCPNODE-3121: Graduate ImageVolume to GA #2453
• STOR-2549: Move StoragePerformantSecurityPolicy GA #2456
• OTA-1580: Promote UpgradeStatus to Default #2418
• CORS-4184: Add STS IAMCredentials and OAuth Service for GCP Endpoint Overrides #2444
• OWNERS: update approvers/reviewers #2455
• OCPBUGS-58212 Remove InsightsRuntimeExtractor Feature gate #2419
• OCPNODE-3187: Promote SigstoreVerificatoin to Default #2340
• OCPBUGS-55665: Remove featuregate ChunkSizeMib #2438
• Fix feature promotion check single node variant name #2445
• OCPBUGS-54287: MachineOSConfig name should match MachineConfigPool #2399
• MCO-1744: Add knobs to allow irreconcilable changes #2433
• Update KAL to support new guidance on required and optional fields #2440
• Remove OnClusterBuild fg #2437
• CNTRLPLANE-368: improve OIDC field validations for Authentication resources #2409
• STOR-2481: Promote SELinuxMount feature gate #2426
• Add new ImageBuildDegraded status option for MCO #2439
• OCPEDGE-1945: feat: promote HighlyAvailableArbiter feature to default #2401
• OCPNODE-3006: add back SigstoreImageVerification to techPreview #2406
• MCO-1759: Add NonReconcilableMC Feature Gate #2429
• Update crd-schema.json to release 1.33 branch #2436
• Update KAL to include omitzero functionality on optional fields #2431
• OCPNODE-3372: Update defaultRuntime doc to show options and set default to crun #2370
• CORS-4155: Add Feature gate and update Infrastructure CR for Azure Cluster Hosted DNS #2404
• SPLAT-2346: Moving VSphereMultiDisk FeatureGate to GA #2428
• features: add installer replacement feature gates #2423
• Remove “techpreview” filter on verify job #2422
• Update KAL to latest #2420
• OCPNODE-3006: Add clusterimgepolicy/imagepolicy to payload #2384
• AGENT-1262: add NoRegistryClusterOperations feature gate #2417
• OCPBUGS-55661: Remove HardwareSpeed featuregate #2416
• OCPNODE-3121: Make FeatureGateImageVolume TechPreview #2403
• OCPEDGE-1875: feat: promote tnf from devpreview to techpreview #2413
• Full changelog

cluster-config-operator

• OCPEDGE-1970: bump(ocp/api): pull in HighlyAvailableArbiter promotion #446
• OCPEDGE-1876: bump(o/api,k8s/api,go-version) #445
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-52448: Remove gathering of failure domains from machine sets #356
• OCPBUGS-59919: Prevent activation of CPMS with deletionTimestamp #364
• OCPBUGS-59919: Fix authoritativeAPI recreate loop #365
• OCPCLOUD-2937: Bump k8s dependencies to 1.33; go 1.24 #360
• NO-JIRA: Update OWNERS #361
• Full changelog

cluster-csi-snapshot-controller-operator

• CNTRLPLANE-385: enable readonly root filesystem #242
• OCPBUGS-60242: Use protobuf when connecting to kube client #217
• STOR-2465: Add ExternalSnapshotMetadata CRD #239
• STOR-2394: Bump all deps for 4.20 #240
• Full changelog

cluster-dns-operator

• OCPBUGS-59781: Read only root filesystem #439
• NO-JIRA: Add rikatz to OWNERS #442
• Full changelog

cluster-etcd-operator

• OCPBUGS-60237: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1471
• OCPBUGS-60522: Set terminationMessagePolicy to FallbackToLogsOnError on TNF job pods #1468
• OCPBUGS-60547: Revert “Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace” #1469
• NO-JIRA: Add more unit tests for JobController #1459
• OCPEDGE-1998: TNF: Use pcmk_delay_base on 1st fence device to prevent fencing races #1463
• OCPBUGS-60237: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1464
• NO-JIRA: hack/generate.sh provides helpful errors when missing tools #1465
• NO-JIRA: create dedicated cluster-wide informer #1457
• ETCD-590: start to refactor the probe injection #1456
• OCPBUGS-57859: Updating cluster-etcd-operator-container image to be consistent with ART for 4.20 #1452
• NO-JIRA: Migrate bindata to go:embed #1445
• OCPBUGS-44570: add missing informer syncs #1449
• NO-JIRA: Update owners file #1451
• Full changelog

cluster-image-registry-operator

• OCPBUGS-59734: fix(azure): resolve credential caching issues around UAMI support #1238
• OSASINFRA-3756: Add support for token-based authentication in clouds.yaml configuration file #1221
• OCPBUGS-58424: mount /etc/pki/ca-trust/extracted/pem/ as empty dir #1239
• Full changelog

cluster-ingress-operator

• OCPBUGS-59139: Increase assertExpectedDNSRecords timeouts #1271
• NE-2066: Set degraded=true when OSSM 3 can’t be installed #1268
• OCPBUGS-60620: e2e: Deflake tests by using ReplicaSet for test workload #1262
• OCPBUGS-54966: Improve detection of missing DNSRecord for Gateway #1212
• OCPBUGS-60302: e2e - Reduce flakiness in testGatewayAPIResourcesProtection #1265
• NE-2096: Bump to OSSM 3.1.0 and Istio 1.26.2 #1257
• NO-JIRA: Add rikatz to OWNERS #1259
• OCPBUGS-59894: Update GatewayAPI test to check if deployment has 1 or more pod #1250
• NE-2108: docs - correct Istio version format in ossm-overrides.md #1253
• NE-2108: Add OSSM channel and version override annotations #1246
• NE-2104: desiredIstio: Enable GIE if InferencePool found #1245
• OCPBUGS-59839: desiredIstio: Delete trustBundleName #1243
• NE-2022: Bump to OSSM 3.0.1 and Istio 1.24.4 #1227
• Full changelog

cluster-kube-apiserver-operator

• CNTRLPLANE-1248: Add README to test extension #1904
• OCPBUGS-60628: certrotation: ensure that all rotated secrets/configmaps have RefreshOnlyWhenExpired set #1900
• CNTRLPLANE-1248: Standardized scaffolding for tests extension #1899
• RFE-4153: enabled readonly filesystem #1864
• Revert “Revert “OCPBUGS-56551: certregenerationcontroller: start configInformers again”” #1891
• CNTRLPLANE-1248: set up openshift-tests-extension and add a sanity test #1892
• OCPBUGS-55217: Optimistically update Kube Server and Client CA bundles #1812
• OCPBUGS-59527: certrotationcontroller: extend node-system-admin-signer lifetime #1872
• OCPBUGS-59626: operator: don’t react to events all namespaces #1874
• OCPNODE-2559: SCC: add nested-podman and restricted-v3 #1847
• NO-JIRA: Add negative tests of GOAWAY-chance #1882
• OCPBUGS-44842: Set not-before/not-after annotations #1873
• OCPBUGS-50489: Add missing service ports to apiserver service #1875
• Full changelog

cluster-kube-controller-manager-operator

• CNTRLPLANE-1275: set up openshift-tests-extension and add a sanity test #859
• OCPBUGS-60473: Optimistically update Kube Server and Client CA bundles #854
• RFE-4154: Remove readOnlyRootFilesystem from KCM container #856
• NO-JIRA: targetconfigcontroller: set description for csr-controller-ca #851
• OCPBUGS-53290: Missing endpoint slices for open ports the operator uses #848
• RFE-4154: Fix readonly filesystem error when kcm trying to mkdir on /etc/kubern… #847
• Full changelog

cluster-machine-approver

• NO-JIRA: Fix some lints and nits #273
• OCPCLOUD-2939: Bump k8s 1.33 #272
• NO-JIRA: Update OWNERS #274
• Full changelog

cluster-monitoring-operator

• OCPBUGS-34568, OCPBUGS-35095, OCPBUGS-60689, OCPBUGS-60691, OCPBUGS-60692: non-HA alert cases #2630
• OCPBUGS-58475: Enforce secure TLS settings in CMO server #2647
• NO-JIRA: [bot] Synchronize versions of the downstream components #2642
• MON-4312: Adding new accelerator to the accelerator configmap #2636
• MON-4318: Add debug image manifest to CMO #2623
• OCPBUGS-60221: remove managed_cluster from reserved external labels #2641
• NO-JIRA: Use label matchers for Rules API in prom-label-proxy #2640
• NO-JIRA: [bot] Synchronize versions of the downstream components #2639
• NO-JIRA: [bot] Synchronize versions of the downstream components #2620
• MON-4299: chore(thanos): replace CLI args that will disappear in future versions #2626
• OCPBUGS-58475: Enforce secure TLS settings in CMO #2618
• OCPBUGS-57215: operator: increase wait time till degraded to max 4 times 5m #2624
• Full changelog

cluster-network-operator

• MGMT-21485: Enable dpu-host mode that matches DPF requirements #2778
• CORENET-6276: Use priorityClass from HostedControlPlane for OVN and NNI #2769
• CORENET-6290: Restrict access to mounted secrets in ovnkube-control-plane #2774
• OCPBUGS-55962: Allow overriding OVN-Kubernetes configuration #2752
• OCPBUGS-60264: Fix multus webhook match condition for spec changes #2772
• MGMT-20706: fix DPU host mode support for OVN templates #2740
• CORENET-6279: ovn-k, virt: update IPAMClaim CRD #2770
• CORENET-6247: Set runAsUser for ovnkube-control-plane #2757
• CORENET-5957: Rebase k8s to 1.33 #2723
• NO-JIRA: Update CNO reviewers/approvers #2756
• CORENET-6228: Allow network-node-identity to be enabled for IBMCloud PlatformType #2755
• NO-JIRA: remove PersistentIPsForVirt FG #2759
• CORENET-6127: ovn-k: Enable OVN-K feature when PreconfiguredUDNAddresses is enabled #2734
• OCPBUGS-59134, OCPBUGS-59135: Annotate whereabouts-controller #2749
• NO-JIRA: deprecate exportloopref #2750
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-60461: E2E: llc test fix: Get updated Performance profile before modifying (#1373) #1373
• Fix hack/update-codegen.sh (#1379) #1379
• E2E: RPS: avoid multiple profile updates (#1378) #1378
• Return 401 Unauthorized without client cert (#1377) #1377
• E2E: skip stalld test case checking sched_fifo (#1374) #1374
• Bump vendor dependencies (#1367) #1367
• CNF-16638: Disable RPS by default (#1370) #1370
• Sync the upstream and downstream Containerfiles (#1368) #1368
• machineconfig: log kernelType (#1366) #1366
• feat: add arbiter role to default pinning gen (#1364) #1364
• Full changelog

cluster-olm-operator

• OPRUN-4034: Handle CustomNoUpgrade better #134
• OCPBUGS-58992: Bump helm to v3.18.4 #132
• OPRUN-4026: Add support for all NoUpgrades #131
• Full changelog

cluster-openshift-apiserver-operator

• CNTRLPLANE-1257: Add README to test extension #624
• CNTRLPLANE-1257: set up openshift-tests-extension and add a sanity test #623
• : NO-JIRA: Bump to Go 1.24 and k8s 1.33 #620
• Full changelog

cluster-policy-controller

• CNTRLPLANE-1054: rebase k8s (1.33.2), openshift (4.20) and other underlying dependencies #164
• Full changelog

cluster-samples-operator

• OCPBUGS-60665: Periodic sync of supported OCP samples #646
• OCPBUGS-60606: Periodic sync of OKD samples - Return to Open Liberty 25.0.0.3 to fix failing tests #649
• OCPBUGS-59325: Periodic sync of OKD samples #630
• OCPBUGS-60179: Bump Kubernetes Version to v0.33.3 #644
• OCPBUGS-60179: Bump Kubernetes Version to v0.33.3 - update Dockerfile.okd #645
• Full changelog

cluster-storage-operator

• STOR-2463: add csi-external-snapshot-metadata to image-references #606
• STOR-2549: Remove TP label from VAP files #607
• STOR-2330: Add labels to subscribe ibm-powervs-block CSI driver operator to NPs #600
• STOR-2370: Add e2e storage performant policy #593
• STOR-2330: Add labels to subscribe ibm-vpc-block CSI driver operator to NPs #599
• OCPBUGS-60064: hypershift: add app label to csdriveroperators running in HCP #603
• STOR-2330: Add labels to subscribe openstack cinder and manila CSI driver operators to NPs #601
• STOR-2330: Add RBAC rule to let ibm-vpc-block-csi-driver-operator manage NetworkPolicy #602
• STOR-2394: Bump all deps for 4.20 #598
• Full changelog

cluster-update-keys

• OCPNODE-3006: OCPBUGS-59860: OpenShift verification uses v1 CRD #74
• Full changelog

cluster-version-operator

• OCPBUGS-57585: CVO protects /metrics with authorization #1215
• OTA-1480: Add readonlyRootFilesystem #1208
• NO-JIRA: Generate junitfile for unit tests #1217
• OTA-1578: Disable ResourceReconciliationIssues condition #1216
• Full changelog

console

• CONSOLE-4661: Align LogViewer toolbar with CodeEditor toolbar #15414
• ODC-7802: Add e2e for custom icon flow #15416
• CONSOLE-4689: Replace deprecated “withHandlePromise” with “usePromiseHandler” in console #15346
• CONSOLE-4235: Bump xterm to 5.5.0 #15408
• CONSOLE-4500: Segment Analytics integration code cleanup #15288
• CONSOLE-4630: React.SFC -> FCC #15421
• CONSOLE-4609: Refactor toggleCloudShellExpanded #15365
• ODC-7808: Migrate enzyme “packages/knative-plugin” unit tests to React Testing Library #15390
• CONSOLE-4688: Remove maxMenuHeight from ConsoleSelect #15415
• CONSOLE-4631: Run ‘react’ namespace import codemod #15412
• CONSOLE-4692: Enable SNC to true in access-modes, admission-webhook-warnings, cluster-configuration #15401
• CONSOLE-4686: Refactor subscription.tsx menuActions to accept actions… #15395
• OCPBUGS-59862: Only show a link to OperatorHub if the logged in user has access to view OperatorHub #15340
• OCPBUGS-59204: Alignment of / and : within imagestream tag selection form fields #15399
• NO-JIRA: Update CHANGELOG for latest 4.20 prerelease plugin SDK package publish #15407
• OCPBUGS-45297: Refactor DroppableEditYAML #15386
• CONSOLE-4680: Refactor bindings.jsx menuActions to accept actions fro… #15372
• ODC-7806: Migrate enzyme “packages/dev-console” unit tests to React Testing Library #15335
• CONSOLE-4609: Refactor testHook to RTL, add useWarningModal #15389
• ODC-7810: Migrate enzyme “packages/topology” unit tests to React Testing Library #15293
• OCPBUGS-60373: QuickStarts Link buttons to other quickstarts are duplicate #15387
• CONSOLE-4713: Refactor PodConnect and Terminal to TypeScript #15377
• OCPBUGS-60010: Fix i18n string for event stream (again) #15384
• OCPBUGS-56155: Click ‘View operator details’ in Plugin available popover will close the modal #15316
• OCPBUGS-60130: Remove ancient X-XSS-Protection header #15360
• OCPBUGS-59382: OpenShift Console’s “Start Job” action overrides configured “backoffLimit” to “6” #15357
• CONSOLE-4600: Migrate Enzyme “tests/components/factory and modals” unit tests to RTL #15281
• OCPBUGS-60151: Update Guided tour -> Guided Tour in help menus #15363
• CONSOLE-4617: follow-on fix for DetailsItem popover #15361
• OCPBUGS-59001: Bump helm version #15282
• CONSOLE-4688: Dropdown -> ConsoleSelect #15284
• CONSOLE-4616: add additionalPrinterColumns to CustomResource list page #15350
• OCPBUGS-44972: Make sure CSP violations are only reported to telemetry once per day per browser #14778
• CONSOLE-4703: Remove routes component in console #15343
• OCPBUGS-60056: update timestamp unit test to be more stable #15356
• ODC-7811: enzyme -> RTL: webterminal-plugin #15352
• CONSOLE-4617: add additionalPrinterColumns to CustomResource details page #15336
• OCPBUGS-60010: Fix i18n string for event stream #15351
• CONSOLE-4705: Convert some files to TypeScript #15348
• CONSOLE-4688: Use PF instead of noSelection Dropdown #15342
• OCPBUGS-59563: Resolving API Version Conflicts in Tekton Pipeline Runs #15307
• OCPBUGS-59215: switch to dev perspective for /dev-monitoring #15268
• OCPBUGS-59725: Refactor RegistryPollIntervalModal #15337
• OCPBUGS-55946: Move ACM perspective back to perspective selector. #15310
• CONSOLE-4704: Update ThemeContext type #15339
• OCPBUGS-57481: fix: Fix negative CPU util graphs #15332
• OCPBUGS-58469: Fix hot reload in GlobalConfigPage component #15287
• OCPBUGS-59196: fix runtime exception in CreateYAMLInner #15341
• CONSOLE-4699: Update dynamic demo plugin e2e tests #15319
• CONSOLE-4608: Drop createModalLauncher from helm-plugin and use useOverlay hook instead #15303
• ODC-7802: Remove custom Drawer and Tabs from web-terminal #15077
• ODC-7620: Use PF isLoading in CreateProjectModal #15318
• OCPBUGS-57466: Default name is comprised of ‘-’ on ‘Add to favorites’ page when language is Korean/Japanese/Chinese. #15314
• OCPBUGS-56248: Improve Console plugin API doc gen script #15167
• OCPBUGS-56466: The warning msg ‘CPU and memory resource requests must be set’ still shows up after deployment has resource requests set. #15117
• CONSOLE-4669: Refactor Alertmanager forms to only use PatternFly comp… #15275
• OCPBUGS-59771: Move alertmanager settings route #15325
• NO-JIRA: Update README.md by adding removing co-disabled styling #15323
• CONSOLE-4700: Address tech debt in TogglePlay and ButtonBar #15308
• OCPBUGS-57654: Updating openshift-enterprise-console-container image to be consistent with ART for 4.20 #15186
• ODC-7803: Add custom icons in import flow #15242
• OCPBUGS-59231: PipelinesList: increase width of ns column #15311
• Full changelog

console-operator

• OCPBUGS-58094: Consolidate telemetry values oscilation #1034
• CONSOLE-4665: Vendor ConsolePluginCRD v1alpha1 changes #1018
• OCPBUGS-60219: make console operator responsible for creating oauth client #1032
• OCPBUGS-57854: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.20 #996
• OCPBUGS-57736: bump github.com/openshift/client-go #1030
• OCPBUGS-45300: Wire synced OIDC Auth CM to Console #1024
• Full changelog

container-networking-plugins, containernetworking-plugins-microshift

• OCPBUGS-59568: stop installing rpms that are already in the base image #206
• Full changelog

coredns

• OCPBUGS-57652: Updating coredns-container image to be consistent with ART for 4.20 #136
• NO-JIRA: Add rikatz to OWNERS #147
• OCPBUGS-60008: UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy #146
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OSPRH-18263: UPSTREAM: 2915 [manila-csi-plugin] Support muilple share rules #349
• OCPBUGS-59650: Rebase main onto release-1.33 #334
• OCPBUGS-58497: CARRY: don’t ignore json files #337
• Full changelog

docker-registry

• OSASINFRA-3756: Bump docker-distribution to support v3token authentication for swift #439
• Full changelog

egress-router-cni

• CORENET-6300: Port egress-router CNI plugin from iptables to nftables #90
• Full changelog

etcd, installer-etcd-artifacts

• OCPBUGS-57675: Updating ose-etcd-container image to be consistent with ART for 4.20 #334
• Full changelog

gcp-cloud-controller-manager

• NO-JIRA: UPSTREAM: 894: Adding SyncMutex to nodeipam unit tests #88
• OCPCLOUD-2926: Merge https://github.com/kubernetes/cloud-provider-gcp:master (c0af057) into main #77
• NO-JIRA: Update OWNERS #83
• Full changelog

gcp-cluster-api-controllers

• NO-JIRA: Update OWNERS #246
• Full changelog

gcp-machine-controllers

• OCPCLOUD-2931: Update Kubernetes deps to v1.33 #123
• NO-JIRA: Update OWNERS #127
• Full changelog

gcp-pd-csi-driver

• STOR-2396: Rebase to upstream v1.20.0 for OCP 4.20 #79
• Full changelog

gcp-pd-csi-driver-operator

• STOR-2394: Bump all deps for 4.20 #147
• Full changelog

haproxy-router

• NO-JIRA: Add rikatz to OWNERS #665
• OCPBUGS-55506: Prevent startup failures due to name resolution #656
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• NO-JIRA: UPSTREAM: <carry>: Filter featuregates by FeatureGate label instead of using OffByDefault label #2398
• OCPBUGS-60507: Bump 1.33.4 #2416
• STOR-2530: Storage performant security policy (update audit labels) #2409
• STOR-1064: improve CRD handling in VolumePopulator test #2419
• OCPBUGS-59641: cleanup: fetch individual PodResourceInfo from allocated resource state #2410
• NO-JIRA: add rphillips as downstream kubelet approver #2414
• UPSTREAM: <drop>: OKD-276: Fix InPlacePodVerticalScaling tests #2407
• CNTRLPLANE-5: UPSTREAM: 132960: Configure JSON content type for generic webhook RESTClient. #2362
• OCPBUGS-52169: Workload partitioning of static init containers #2224
• OCPBUGS-59756: Fix IntOrString cost estimation when schema has a MaxLength constraint #2375
• OCPBUGS-46422: Disable ServiceCIDR tests #2382
• CNTRLPLANE-940: Add CEL expression compile validation for Authentication admission #2353
• STOR-2370: Storage performant security policy #2344
• OCPBUGS-59603: Restore “Bump external snapshotter for vgs tests” #2392
• OCPBUGS-59533: Rebase v1.33.3 to master/4.20 #2369
• OCPBUGS-57666: Adjust durations for PodLifecycleSleepAction e2e tests #2363
• STOR-2481: UPSTREAM: <carry>: Skip SELinux test with Feature:SELinuxMountReadWriteteOncePodOnly #2389
• OCPBUGS-60047: disable slow and flaky tests rather than labeling them #2390
• OCPBUGS-56785: UPSTREAM: 132028: podresources: list: use active pods #2361
• NO-JIRA: UPSTREAM: <drop>: Revert “Bump external snapshotter for vgs tests” #2387
• OCPBUGS-59603: Bump the external-snapshotter for vgs tests #2373
• TRT-2068: Skip specific LoadBalancer test for “none” platform #2383
• TRT-2068: Reintroduce non-suite annotation removal #2331
• Full changelog

hypershift

• CNTRLPLANE-935: e2e test for new Azure metrics #6315
• OSASINFRA-3675: Add credentials to openshift-manila-csi-driver namespace for Hypershift #6683
• STOR-1064: add validator image to CSO manifest #6686
• OCPBUGS-59194: fix(registry): delete ValidatingAdmissionPolicy and binding during HCP deletion for ARO cleanup #6616
• OCPBUGS-60653: test(e2e): Workaround for external oidc tests to bypass the teardown … #6684
• CNTRLPLANE-1209: exposing IPv4OVNKubernetesConfig for hcp’s ClusterNetworking #6554
• NO-JIRA: Update-overrides for ARO HCP Fixes #6685
• NO-JIRA: docs(cursor): add Jira creation rule for CNTRLPLANE/OCPBUGS with components and story template #6680
• NO-JIRA: fix(doc): remove note about mandatory annotation in BM deployment #6682
• OCPBUGS-60651: fix mce 2.10 Konflux EC violation #6676
• OCPBUGS-60602: Cache Azure KMS TokenCredential for ARO HCP and clarify CPO credentials cache naming #6673
• OCPBUGS-56914: fix: Do not admit OAuth route by private router unless it has external DNS #6218
• OCPBUGS-56430: fix: Add recovery monitoring stack fixes #6642
• CNTRLPLANE-1271: HyperShift Operator CPO override for Azure. versions 4.19.6 - 4.19.9 #6662
• CNTRLPLANE-1270: Fix ProjectDevelopmentStreamTemplates #6661
• OCPBUGS-60381: feat(validations): add wildcard support to DNS SAN conflict detection #6643
• CNTRLPLANE-1251, CNTRLPLANE-1255: Introduce ProjectDevelopmentStreams #6632
• OCPBUGS-57450: fix: routes are not used in case of IBM Cloud #6622
• NO-JIRA: docs(agents): add AGENTS.md and centralize assistant guidance #6634
• NO-JIRA: feat(rules): Add cursor rules for PR and Code review #6633
• OCPBUGS-60399: wrap EnsureKubeAPIDNSNameCustomCert and EnsureGlobalPullSecret in their own test #6536
• OCPBUGS-59880: add HostedCluster config requirements for DR #6522
• NO-JIRA: feat(docs): Add new videos section in the documentation #6635
• CNTRLPLANE-946: test(e2e): Add e2e test for ExternalOIDCWithUIDAndExtra feature set #6631
• CNTRLPLANE-996: feat(e2e): Use ROSAManagedPolicies by default #6534
• CNTRLPLANE-1234: update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.24.4-1754467841 #6608
• OCPBUGS-57336: fix(hostedcluster): remove additionalTrustBundle from hcp when removed from HostedCluster #6605
• CNTRLPLANE-993: feat(CPOv2): Monitor operands rollout status #6492
• NO-JIRA: Update ingress-and-dns.md - update Metallb install link #6619
• OCPBUGS-60187: chore: Split shared proxy acls #6621
• NO-JIRA: Fix typo causing ‘make verify’ to fail #6620
• CNTRLPLANE-995: Fix incorrect usage of util.UpdateObject #6615
• CNTRLPLANE-1034: chore: Relax the kas healthcheck for aro when AllowedCIDRBlocks #6614
• OCPBUGS-60190: chore: Improve security context uid allocation to reuse released uids #6612
• NO-JIRA: docs: Document workloadContext #6589
• CNTRLPLANE-204: feat: Add Shared Ingress Config Generator #6555
• NO-JIRA: chore: Add cursor rule statements for unit tests #6611
• NO-JIRA: test(e2e): add new test for external OIDC #6419
• OCPBUGS-57626: order ICSPs for determinism of OPENSHIFT_IMG_OVERRIDES #6607
• NO-JIRA: docs: enhance commit message formatting and gitlint configuration #6613
• CNTRLPLANE-995: Fix Default SG day2 tags feature being triggered without changes #6603
• CNTRLPLANE-1190: Support control plane overrides by platform #6523
• OCPBUGS-60064: fix(OCPBUGS-60064): add missing app label to some components #6591
• CNTRLPLANE-1186: update github.com/golang/groupcache digest to 2c02b82 #6389
• CNTRLPLANE-1228: Update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.24.4-1753853351 #6541
• OCPBUGS-58061: Always compress and encode payload in token secret for inplace upgrades #6352
• CNTRLPLANE-1225: feat(konflux): Use hermetic builds for CPO #6595
• CNTRLPLANE-1197: Add EnsureGlobalPullSecret to be executed in 4.19 test suite #6508
• OCPBUGS-59194: fix(OCPBUGS-59194): Allow HCCO to set registry managementState to Removed #6593
• NO-JIRA: feat(azure): Add deletion scripts and cleanup documentation for managed Azure clusters #6560
• OCPBUGS-59886: Add selinux-warning-controller to KCM #6550
• CNTRLPLANE-1116: build(gitlint): add gitlint to verify target #6559
• CORENET-6229: Use networking.advertiseAddress for CNO apiserver override for IBMCloud PlatformType #6553
• OCPBUGS-59736: Add support for generating a SC UID per namespace if SCC are not avalable #6520
• CNTRLPLANE-263: Remove all AzureManaged* CRDs #6518
• CNTRLPLANE-262: Support print operator version in CLI #5821
• CNTRLPLANE-1198, CNTRLPLANE-1199: Bump AllowedCIDRBlocks limit #6556
• NO-JIRA: refactor(azure): extract AKS managed identity setup into separate script #6488
• CNTRLPLANE-1116: Fix CI git commits for run-gitlint #6519
• OCPBUGS-59959: Set explicit FSGroup and RunAsUser for etcd when there’s no SCC #6548
• NO-JIRA: add CLAUDE.md with comprehensive development guidance #6549
• CNTRLPLANE-1191: add sa-token-issuer-private-key-path flag to create cluster aws #6526
• CNTRLPLANE-1184: update registry.access.redhat.com/ubi10/ubi docker tag to v10.0-1752573517 #6343
• OCPBUGS-59927: Fix MCE 2.10 konflux EC violations #6531
• MGMT-20948: Enable Multus Disabling for NetworkType=Other #6358
• NO-JIRA: fix(cmd): match infraID exactly on OIDC provider delete #6538
• NO-JIRA: fix(test/e2e): add KCM leader elect failure msg to isLeaderElectionFailure #6537
• CNTRLPLANE-777: Create an Arm64 NodePool e2e Test for ARO HCP #6509
• CNTRLPLANE-996: feat(cli): Add support for using ROSA managed policies #6467
• CNTRLPLANE-204: feat(shared-ingress): Add reloader sidecar to avoid restarts on config changes #6447
• MGMT-20826: Add CLI validation to ensure Console is disabled when Ingress is disabled #6479
• NO-JIRA: feat(cmd/dump): add CronJobs to dump #6494
• OCPBUGS-53265: Use the image reference for the cache in the image metadata provider #6155
• OCPBUGS-59835: MCE 2.10 konflux #6524
• OCPBUGS-57336: Delete unused AdditionalTrustBundle from CP namespace #6504
• Fix OCPBUGS-54720: HCP payload doesn’t respect multiple #6486
• OCPSTRAT-2173: feat(hcco): add support for hosted OIDC client secrets #6375
• OCPBUGS-43824: Help fix flaky NTO tests #6480
• feat(shared-ingress): Fix Konflux hermetic build config #6503
• CNTRLPLANE-1116: add gitlint support for conventional commit enforcement #6462
• NO-JIRA: feat(contrib): add kubelet config daemonset #6495
• NO-JIRA: Fix a typo in the documentation #6501
• NO-JIRA: increase the pod limit per node in AKS cluster #6487
• NO-JIRA: Add new doc from HCP OADP Plugin #6299
• OCPBUGS-59759: fix(konflux): Add missing backslash for dot escaping #6491
• NO-JIRA: test: replace context.Background/TODO with t.Context in unit tests #6475
• NO-JIRA: Dummy change to shared-ingress Containerfile to trigger a build #6478
• NO-JIRA: test: remove CPOv2 annotation from upgrade test #6485
• OCPBUGS-57316: hypershift version in CLI returns panics for Server Version when HyperShift operator is deployed #6473
• CNTRLPLANE-980: chore(contrib): add ansible playbook for setting up external OIDC #6294
• NO-JIRA: test/e2e: skip kubevirt pods when checking labels, tolerations, and term msg policy #6476
• NO-JIRA: test/e2e: add TerminationMessagePolicyFallbackToLogsOnError check to 4.19 #6291
• CNTRLPLANE-735: Document steps to configure Microsoft backup extension in AKS #6456
• Full changelog

ibm-cloud-controller-manager

• NO-JIRA: Update OWNERS #83
• Full changelog

ibm-vpc-block-csi-driver

• STOR-2393: Rebase to upstream v5.2.16 for OCP 4.20 #102
• Full changelog

ibm-vpc-block-csi-driver-operator

• STOR-2330: Add labels to subscribe ibm-vpc-block CSI driver controller and node pods to NPs #148
• STOR-2394: Bump all deps for 4.20 #147
• Full changelog

ibmcloud-cluster-api-controllers

• NO-JIRA: Update OWNERS #117
• Full changelog

ibmcloud-machine-controllers

• OCPCLOUD-2930: Bump k8s 1.33 #67
• NO-JIRA: Update OWNERS #68
• Full changelog

insights-operator

• fix: incorrect anonymization of domains (#1111) #1111
• feat: add permissions to gather clusterrole (#1106) #1106
• feat: Allow on-demand gathering during initial periodic run (#1109) #1109
• Full changelog

insights-runtime-exporter, insights-runtime-extractor

• Liborfuka ocp420 new tests #51
• Sidecar containers test case #44
• test: Fix JBoss EAP 8.0 version #50
• Full changelog

ironic

• METAL-1461: Add IPE and Gunicorn packages #680
• METAL-1503: Upstream sync 20250728 #673
• METAL-1419: Update ironic project hashes #677
• METAL-1461: update config to allow Ironic to work with ironic-prometheus-exporter #674
• METAL-1379: Bump ironic to include NIC Firmware Updates #672
• METAL-1414: Use Python 3.12 to build and run ironic #658
• Full changelog

ironic-agent

• OCPBUGS-45385: Ignore USB network devices #195
• METAL-1419: Update ironic projects hashes #193
• METAL-1414: Use python3.12 to build and run ironic-agent #191
• Full changelog

kube-storage-version-migrator

• OCPBUGS-57556: Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.20 #222
• Full changelog

machine-api-operator

• OCPBUGS-60145: Added [Serial] to serial e2e tests #1404
• fix for OCPBUGS-55135: userDataSecret.name should be a Required value on AWS #1399
• SPLAT-2381: Fixed e2e test to generate machines with cluster name prefix #1398
• OCPCLOUD-2980: add ingress/egress network policy v2 #1396
• Revert “OCPCLOUD-2980: add ingress/egress network policy” #1395
• OCPCLOUD-2980: add ingress/egress network policy #1387
• Full changelog

machine-config-operator

• OPNET-683: Automatically copy over configs applied by MCO #5162
• MCO-1743: Irreconcilable validations reporting #5254
• MCO-1536: Add new ImageBuildDegraded status option to MCP #5251
• OCPBUGS-57979: Update Kubelet Config MachineConfig upon FeatureGate update #5228
• OCPBUGS-60559: Update the OnClusterBuild payload tests to reflect the validation rule requiring MCP & MOSC names to match #5249
• OCPBUGS-60526: Remove escape chars when installing extensions in OCL Containerfile #5247
• NO-JIRA: clean up node cluster dashboard #4612
• OCPEDGE-1733: feat: consolidate arbiter template files #5232
• OCPBUGS-59723: Reintroduce cronjob that deletes MCN v1alpha1 CRD #5238
• OCPBUGS-60287: Remove OnClusterBuild FG #5241
• NO-ISSUE: Revert “OCPBUGS-59723: Add mechanism to delete MCN v1alpha1 CRD in 4.16+ clusters” #5237
• OCPBUGS-59723: Add mechanism to delete MCN v1alpha1 CRD in 4.16+ clusters #5215
• MCO-1810: Support kernelType in OCL #5172
• OCPBUGS-60119: Invalid architecture value found in annotation during 4.19 update #5222
• MCO-1777: Run build as an init container for OCL #5200
• MCO-1811: add MachineConfigControllerPoolAlert runbook to alert #5214
• TRT-2232: Revert #5148 “OCPBUGS-58023: Prevent unnecessary systemd unit disable” #5213
• OCPNODE-3522: Generate deterministic order namespacedPolicyJSON #5196
• OCPNODE-3466: Remove containernetworking-plugins directory from crio.conf #5173
• NO-ISSUE: Balance runtime of e2e-gcp-op shards #5203
• OCPBUGS-58023: Prevent unnecessary systemd unit disable #5148
• MCO-1773: Pick up openshift/kubernetes 1.33 rebase updates #5182
• OCPBUGS-59780: ARO clusters cannot scale on upgrade to 4.19 #5195
• OCPBUGS-58443: In OCL for reboot, after applying ssh/file/password based MC the MCP is stuck in updating state #5191
• OCPBUGS-57484, OPNET-681: Support migration to NMState #5064
• OCPNODE-3006: Migrate ClusterImagePolicy/ImagePolicy to v1 #5143
• OCPBUGS-43406: Add workaround fix for static pod race #5185
• MCO-1813: Simplify boot image reconciliation with Go generics #5183
• NO-ISSUE: Split gcp-op into two tests #5197
• MCO-1815: vSphere bootimage update reconciliation should handle bootimage name diverging #5187
• OCPBUGS-58191: fixes image registry secret handling #5171
• OCPBUGS-55971: Enable debug logging for nodeip-configuration #5043
• OCPBUGS-59776: Revert “OCPBUGS-52302: Fix timing of Spec.ConfigVersion.Desired update in MCN” #5190
• OCPBUGS-52302: Fix timing of Spec.ConfigVersion.Desired update in MCN #5121
• OCPBUGS-59672: TestMCNPoolNameCustom should clean up resources properly #5184
• Full changelog

machine-image-customization-controller

• METAL-1509: Add support for multi arch image files #144
• Full changelog

machine-os-images

• METAL-1509: Add aarch64 images #65
• Full changelog

metallb-frr

• OCPBUGS-57696: Updating ose-frr-container image to be consistent with ART for 4.20 #101
• Full changelog

monitoring-plugin

• OU-932: automation - metrics #503
• NO-JIRA: README.md update #507
• NO-JIRA: test: Fix operator sidebar navigation #505
• OU-692: Update montioring-plugin to NodeJS v22 #506
• OU-849: upgrade jsx pre-procesor to “react-jsx” #502
• NO-JIRA: update to expect NodeJS v22+ #504
• OU-848: Dependency update of dynamic plugin sdk and typescript #499
• OU-960: data-test injection on source code and UI automation refactoring #500
• OCPBUGS-60198: fix legend height to avoid scroll overlap #494
• NO-JIRA: improve consistency in tab string #497
• OU-963: add translation string test #492
• NO-JIRA: update the i18n #491
• NO-JIRA: refactor incidents to add typescript #475
• OCPBUGS-55455: feat: add alerting rules tab to dev console #487
• NO-JIRA: automation failed in the periodic job #486
• OU-944: automation refactoring #485
• OU-863: feat: add disconnected to line chart #477
• OU-388: add units selector to the metrics page #480
• OU-939: Fix virt persepective new silence link #472
• OU-594: [Incidents] UI is not embedded in the Alerting section #465
• OU-503: regression automation testing for monitoring alerting #471
• Full changelog

must-gather

• ETCD-738: Partial Revert of #489 (#498) #498
• Full changelog

network-metrics-daemon

• Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.20 (#107) #107
• create .snyk file to skip vendor folder (#108) #108
• OCPBUGS-59612: Bump github.com/golang/glog to v1.2.4 (#109) #109
• no-jira: Replace e2e test image (#118) #118
• Full changelog

network-tools

• NO-JIRA:Remove Tim from members list #153
• OCPBUGS-57894: Updating ose-network-tools-container image to be consistent with ART for 4.20 #150
• NO-JIRA:Update OWNERS file #152
• Full changelog

networking-console-plugin

• CNV-52160: VLAN fields #268
• CNV-52160: add awareness checkbox #267
• CNV-52160: edit project mapping #266
• CNV-52160: Creation form #257
• CNV-52160: Vmnetwork details page #263
• NO-JIRA: fix(i18n): use right namespace #262
• OCPBUGS-60122: Fix ingress details #258
• CNV-52160: add vm network list #256
• OCPBUGS-49652: Fix requiremenets with no value #254
• Full changelog

nutanix-cloud-controller-manager

• OCPBUGS-59794: Adding nil checks to avoid Panic #47
• OCPCLOUD-2924: Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (109de6e) into main #44
• Full changelog

nutanix-machine-controllers

• OCPCLOUD-2929: Align dependencies with k8s 1.33 and Go 1.24 for 4.20 #120
• NO-JIRA: Update OWNERS #118
• Full changelog

oauth-apiserver

• CNTRLPLANE-1259: Add README to test extension #141
• CNTRLPLANE-1259: Update Jira component name to oauth-apiserver #140
• OCPBUGS-57611: Updating ose-oauth-apiserver-container image to be consistent with ART for 4.20 #137
• CNTRLPLANE-1259: set up openshift-tests-extension and add a sanity test #138
• Full changelog

oc-mirror

• Bump helm.sh/helm/v3 in /v2 in the oc-mirror-v2 group (#1248) #1248
• Bump the oc-mirror-v2 group in /v2 with 5 updates (#1245) #1245
• Bump the oc-mirror-v2 group in /v2 with 2 updates (#1243) #1243
• CLID-389: v2: validate access to destination registry (#1201) #1201
• reduces the dependabot config interval (#1242) #1242
• Bump the oc-mirror-v2 group across 1 directory with 5 updates (#1241) #1241
• Bump github.com/docker/docker in /v2 in the go_modules group (#1239) #1239
• clid-415: adds a warn message to v1 (#1238) #1238
• Bump the oc-mirror-v2 group in /v2 with 17 updates (#1232) #1232
• OCPBUGS-59949: fixes the result output showing the wrong total (#1236) #1236
• prevents panic when helm chart is nil (#1233) #1233
• OCPBUGS-59646: revert #1220 and print a warning instead (#1228) #1228
• updates dependabot config (#1231) #1231
• OCPBUGS-55114: v2/operator: support manifest lists with one arch (#1140) #1140
• NO-JIRA: OKD compatibility - Allow custom value for SignatureURL (#1165) #1165
• adds build-machinery-go as a tool dependency (#1226) #1226
• OCPBUGS-59714: Detect images from a Helm Chart with an aliased chart dependency (#1038) #1038
• OCPBUGS-52562: Ensure release collection does not include duplicates (#1218) #1218
• OCPBUGS-59396: v2/archive: handle 0b mirror archive files (#1219) #1219
• OCPBUGS-54622: cli/delete: fix workflow mode name output (#1214) #1214
• OCPBUGS-59646: cmd: unpack v2 to $HOME instead of /tmp (#1220) #1220
• Full changelog

olm-catalogd, olm-operator-controller

• NO-ISSUE: Synchronize From Upstream Repositories #453
• NO-ISSUE: Synchronize From Upstream Repositories #449
• NO-ISSUE: Synchronize From Upstream Repositories #444
• NO-ISSUE: Synchronize From Upstream Repositories #435
• NO-ISSUE: Synchronize From Upstream Repositories #431
• NO-ISSUE: Synchronize From Upstream Repositories #421
• NO-ISSUE: Synchronize From Upstream Repositories #411
• Full changelog

openshift-apiserver

• CNTRLPLANE-1258: Add README to test extension #540
• OCPBUGS-47773: Bump library-go to fix route validation #535
• OCPBUGS-57858: Updating ose-openshift-apiserver-container image to be consistent with ART for 4.20 #538
• CNTRLPLANE-1258: set up openshift-tests-extension and add a sanity test #536
• Full changelog

openshift-controller-manager

• OCPBUGS-55650: Drop BuildCSIVolumes feature gate logic (Build CSI Volumes in OpenShift Builds is GA since 4.14) #407
• Full changelog

openstack-machine-api-provider

• OSASINFRA-3690: Bump machine-api-operator #136
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• NO-ISSUE: Update OWNERS to reflect current team makeup #1057
• NO-ISSUE: Synchronize From Upstream Repositories #1055
• NO-ISSUE: Enable readonlyRootFilesystem by default #1043
• NO-ISSUE: Synchronize From Upstream Repositories #1046
• NO-ISSUE: Synchronize From Upstream Repositories #1045
• NO-ISSUE: Synchronize From Upstream Repositories #1044
• Full changelog

operator-marketplace

• OCPBUGS-59566, OCPBUGS-59570: Move Network Policy manifests #652
• OCPBUGS-60060: (fix) Update the operator-ibm-cloud-managed with the same configuration applied to operator manually #649
• OPRUN-3888, OPRUN-3889: Upgrade catalog images from 4.19 to 4.20 #650
• OPRUN-3981: Upgrade Go from 1.23 to 1.24.3 and k8s deps to 1.33 for release 4.20 #647
• OPRUN-3981: Update dockerfile to use go 1.24 and OCP image 4.20 #645
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• NO-JIRA: DownStream Merge [08-21-2025] #2730
• OCPBUGS-55962: DownStream Merge [08-20-2025] #2729
• OCPBUGS-38735, OCPBUGS-53028, OCPBUGS-56506: DownStream Merge [08-16-2025] #2724
• OCPBUGS-57883: Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.20 #2644
• Revert “TRT-2243: Revert “OCPBUGS-56202: DownStream Merge [07-25-2025]”” #2715
• OCPBUGS-57882: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.20 #2643
• TRT-2243: Revert “OCPBUGS-56202: DownStream Merge [07-25-2025]” #2706
• NO-JIRA: Bump OVN to 25.03 #2701
• OCPBUGS-56202: DownStream Merge [07-25-2025] #2693
• OCPBUGS-59248: DownStream Merge [07-17-2025] #2676
• Full changelog

powervs-block-csi-driver

• no-jira: Add Kishen V as a reviewer #101
• Full changelog

powervs-block-csi-driver-operator

• CNTRLPLANE-1290: enable readOnlyRootFilesystem #87
• STOR-2394: Bump all deps for 4.20 #85
• Full changelog

powervs-cloud-controller-manager

• No-Jira: Bump golang and Update oauth2 package in go.mod #87
• Full changelog

powervs-machine-controllers

• OCPCLOUD-3027: Bump k8s 1.33 #121
• Full changelog

prom-label-proxy

• NO-JIRA: [bot] Bump openshift/prom-label-proxy to v0.12.0 #384
• Full changelog

prometheus

• MON-4300: update prometheus to 3.5 #260
• OCPBUGS-39089: Clarify prometheus pod NFS warning message #243
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• NO-JIRA: [bot] Bump openshift/prometheus-operator to v0.84.1 #337
• Full changelog

route-controller-manager

• OCPBUGS-59575: Update all dependencies #63
• Full changelog

service-ca-operator

• CNTRLPLANE-1260: Add README to test extension #272
• CNTRLPLANE-1260: set up openshift-tests-extension and add a sanity test #270
• NO-JIRA: Update Owners #269
• OCPBUGS-57703: Updating ose-service-ca-operator-container image to be consistent with ART for 4.20 #268
• Full changelog

stream-coreos, stream-coreos-extensions

• Merge #1854
• Full changelog

tests

• SREP-1622: Fix endpoint admission test namespace creation for ROSA #30134
• OCPNODE-3004: Run ImageVolume tests in all clusters. #30122
• OCPBUGS-52968: Drop the etcd should not log excessive took too long messages test #30143
• OCPBUGS-57477: Allow three long term flaky k8s tests to retry #30140
• OCPBUGS-60550: Increase curl timeout from 3s to 5s for egress firewall DNS rule test #30133
• OCPBUGS-60454: Update the Control Plane Machine name pattern to support the master’s names used on OpenStack #30125
• NO-JIRA: Stop ignoring the targets from openshift-cluster-version #30111
• OTA-1581: Skip UpgradeStatus test on HyperShift #30132
• STOR-1064: OCPBUGS-59256: bump kubernetes version to fix provisioning e2e test #30126
• OCPBUGS-52968: Expand and rate limit tests watching for etcd logging anomalies #30013
• Revert “TRT-2197: use fixed seed for test ordering” #30127
• NO-JIRA: fix: update arbiter test #30112
• OCPBUGS-59526: TLS registry update #30116
• OCPBUGS-57032: upgrade.go: wait some time after node upgrade #29960
• OCPBUGS-60530: Fix panics in inclusterapi disruption during ROSA jobs #30129
• MCO-1656: Component Readiness for vSphere Bootimage Update #29741
• CNTRLPLANE-945: suites/external-oidc: explicitly mark cluster stability as disruptive #30128
• OCPBUGS-60375: Use ubi9 as latest imagestream for perl #30117
• OCPBUGS-60530: Log full stack traces for panics in monitortest cleanup #30118
• OCPBUGS-60562: SigstoreImageVerification:update waitForMCP different config name #30115
• OCPEDGE-1755: Add TNF E2E tests for ungraceful node shutdown #29986
• OCPBUGS-60238: images/tests: Remove rteval #30077
• NO-JIRA: Ensure Platform Prometheus targets are protected #30014
• OCPBUGS-60375: Fix perl hotdeploy test #30114
• OTA-1580: Further tests for oc adm upgrade status #30109
• NO-JIRA: Add compat_otp package with openshift-tests-private (OTP) util implementation #30081
• OCPBUGS-60375: Remove Perl 5.32 on UBI8 #30092
• CNTRLPLANE-945: oidc: configure an oidc client secret for the console to consume #30094
• NO-JIRA: [TNF] add Two Node Fencing exception to accept less than two etcd endpoints #30058
• OCPBUGS-58037: increase timeout of image extract test #30068
• OCPNODE-3520: UserNamespaces: Increase build timeout duration #30071
• OPRUN-4055: [OLMv1] Remove olmv1.go tests since those has been executed by OTE #30072
• TRT-2226: Exclude ephemeral cni-sysctl-allowlist-ds from maxUnavailable/maxSurge check #30095
• CNTRLPLANE-945: OIDC/enable skipped tests #30087
• CNTRLPLANE-1248: Enable OTE for cluster-kube-apiserver Operator #30078
• STOR-2370: Add openshift-test tags for CSO #30042
• OCPEDGE-1969: add recovery tests for TNA #30022
• CNTRLPLANE-945: oidc: fix test issues #30040
• OTA-1580: Monitortest framework test for oc adm upgrade status #30031
• OCPBUGS-59603: Fix vgs tests #30008
• OCPBUGS-57032: Add wait.Poll retry logic to checkUpgradeability with 30s timeout #30062
• OCPNODE-3004: ImageVolume: Increase timeout duration #30070
• OTA-1559: test/extended/cli/admin: Add ‘oc adm upgrade recommend’ smoke test #29831
• NO-JIRA: Export GetIPFamilyForCluster #30065
• NO-JIRA: Allow only including / excluding specific extension images #29980
• NO-JIRA: Update extended/networking OWNERS #30026
• NO-JIRA: Update image mirroring instructions to avoid using external binary #30060
• TRT-2197: use fixed seed for test ordering #29997
• NO-JIRA: Get enabled featuregates from metrics endpoint #29952
• CORENET-6203: Enable test for LGW L2 #30009
• OPRUN-3964: [olmv1] - Remove test [sig-olmv1][OCPFeatureGate:NewOLM] OLMv1 CRDs should be installed migrated to operator-controller repository/OTE #30036
• OCPBUGS-56506: Don’t check for remote node subnet BGP routes #30029
• OCPNODE-3004: Increase the time to wait until the pod becomes ImagePullBackOff #30030
• OCPBUGS-59218: feat(azure): skip metrics collection for ARO HCP hypershift #30006
• NO-JIRA: Revert “OCPBUGS-55238: spyglass: hide disruption events for localhost” #30034
• TRT-2224: Fix edge case where failures are not counted #30039
• TRT-2163: incluster disruption images #30007
• OCPNODE-3004: Accept ErrImagePull for non-existent image volume test. #30027
• OCPNODE-3454: OCPFeatureGate:SigstoreImageVerification update test on v1 (Cluster)ImagePolicy #29973
• CNTRLPLANE-945: Add tests for ExternalOIDC and ExternalOIDCWithUIDAndExtraClaimMappings features #29917
• OCPNODE-3004: Add ImageVolume e2e tests #30015
• OCPBUGS-59750: Move the legacy container failures #30017
• OPRUN-3768: Add OLMv1 Single/OwnNamespace tests #29998
• OCPBUGS-55238: spyglass: hide disruption events for localhost #29710
• API-1802: chart template: show cert rotation events #29279
• NO-ISSUE: Automated - Update synthetic test data #29802
• OTA-1580: Add basic test for oc adm upgrade status CLI #29954
• Full changelog

thanos

• MON-4299: update to 0.39.2 #163
• Full changelog

vsphere-csi-driver-operator

• STOR-2394: Bump all deps for 4.20 #308
• STOR-2330: Add labels to subscribe vSphere CSI driver controller and webhook to NPs #307
• OCPBUGS-57708: Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.20 #306
• Full changelog

vsphere-problem-detector

• STOR-2394: Bump all deps for 4.20 #187
• OCPBUGS-59319: Check for number of FailureDomain-s in GetVCenter() #186
• OCPBUGS-57656: Updating ose-vsphere-problem-detector-container image to be consistent with ART for 4.20 #185
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Package List

• cri-o-1.33.3-1.el10s
• kernel-6.12.0-121.el10
• openshift-kubelet-4.20.0-202508152244.p0.g7b25b18.assembly.stream.el9
• systemd-257-13.el10

Full list (575 packages)

• NetworkManager-1:1.54.0-1.el10
• NetworkManager-cloud-setup-1:1.54.0-1.el10
• NetworkManager-libnm-1:1.54.0-1.el10
• NetworkManager-ovs-1:1.54.0-1.el10
• NetworkManager-tui-1:1.54.0-1.el10
• WALinuxAgent-udev-2.13.1.1-1.el10
• aardvark-dns-2:1.16.0-2.el10
• acl-2.3.2-4.el10
• adcli-0.9.2-9.el10
• afterburn-5.9.0-1.el10
• afterburn-dracut-5.9.0-1.el10
• alternatives-1.30-2.el10
• amd-gpu-firmware-20250812-19.el10
• amd-ucode-firmware-20250812-19.el10
• atheros-firmware-20250812-19.el10
• attr-2.5.2-5.el10
• audit-4.0.3-4.el10
• audit-libs-4.0.3-4.el10
• audit-rules-4.0.3-4.el10
• authselect-1.5.0-8.el10
• authselect-libs-1.5.0-8.el10
• avahi-libs-0.9~rc2-2.el10
• basesystem-11-22.el10
• bash-5.2.26-6.el10
• bash-completion-1:2.11-16.el10
• bind-libs-32:9.18.33-4.el10
• bind-license-32:9.18.33-4.el10
• bind-utils-32:9.18.33-4.el10
• binutils-2.41-57.el10
• binutils-gold-2.41-57.el10
• bootc-1.4.0-1.el10
• bootupd-0.2.28-2.el10
• brcmfmac-firmware-20250812-19.el10
• bsdtar-3.7.7-4.el10
• bubblewrap-0.10.0-3.el10
• bzip2-1.0.8-25.el10
• bzip2-libs-1.0.8-25.el10
• c-ares-1.25.0-6.el10
• ca-certificates-2024.2.69_v8.0.303-102.3.el10
• catatonit-5:0.2.1-1.el10
• centos-gpg-keys-10.0-10.el10
• centos-release-cloud-1-1.el10s
• centos-release-nfv-common-1-5.el10s
• centos-release-virt-common-1-1.el10s
• centos-stream-release-10.0-10.el10
• centos-stream-repos-10.0-10.el10
• checkpolicy-3.9-1.el10
• chrony-4.6.1-2.el10
• cifs-utils-7.2-1.el10
• cirrus-audio-firmware-20250812-19.el10
• clevis-21-8.el10
• clevis-dracut-21-8.el10
• clevis-luks-21-8.el10
• clevis-pin-tpm2-0.5.3-8.el10
• clevis-systemd-21-8.el10
• cloud-utils-growpart-0.33-11.el10
• composefs-1.0.8-1.el10
• composefs-libs-1.0.8-1.el10
• conmon-3:2.1.13-1.el10
• conmon-rs-0.6.6-2.el10s
• console-login-helper-messages-0.21.3-10.el10
• console-login-helper-messages-issuegen-0.21.3-10.el10
• console-login-helper-messages-profile-0.21.3-10.el10
• container-selinux-4:2.240.0-1.el10
• containers-common-5:0.64.0-4.el10
• containers-common-extra-5:0.64.0-4.el10
• coreos-installer-0.24.0-1.el10
• coreos-installer-bootinfra-0.24.0-1.el10
• coreutils-9.5-6.el10
• coreutils-common-9.5-6.el10
• cpio-2.15-3.el10
• cracklib-2.9.11-8.el10
• cracklib-dicts-2.9.11-8.el10
• cri-o-1.33.3-1.el10s
• cri-tools-1.33.0-2.el10s
• criu-3.19-9.el10
• criu-libs-3.19-9.el10
• crun-1.23-1.el10
• crypto-policies-20250804-1.git2ca4115.el10
• crypto-policies-scripts-20250804-1.git2ca4115.el10
• cryptsetup-2.7.5-2.el10
• cryptsetup-libs-2.7.5-2.el10
• curl-8.12.1-2.el10
• cyrus-sasl-gssapi-2.1.28-27.el10
• cyrus-sasl-lib-2.1.28-27.el10
• dbus-1:1.14.10-5.el10
• dbus-broker-36-4.el10
• dbus-common-1:1.14.10-5.el10
• dbus-libs-1:1.14.10-5.el10
• dbus-tools-1:1.14.10-5.el10
• device-mapper-10:1.02.206-3.el10
• device-mapper-event-10:1.02.206-3.el10
• device-mapper-event-libs-10:1.02.206-3.el10
• device-mapper-libs-10:1.02.206-3.el10
• device-mapper-multipath-0.9.9-11.el10
• device-mapper-multipath-libs-0.9.9-11.el10
• device-mapper-persistent-data-1.1.0-2.el10
• diffutils-3.10-8.el10
• dmidecode-1:3.6-3.el10
• dnf-4.20.0-18.el10
• dnf-data-4.20.0-18.el10
• dnsmasq-2.90-4.el10
• dosfstools-4.2-12.el10
• dracut-107-3.el10
• dracut-network-107-3.el10
• dracut-squash-107-3.el10
• duktape-2.7.0-10.el10
• e2fsprogs-1.47.1-4.el10
• e2fsprogs-libs-1.47.1-4.el10
• efi-filesystem-6-6.el10
• efibootmgr-18-8.el10
• efivar-libs-39-3.el10
• elfutils-debuginfod-client-0.193-1.el10
• elfutils-default-yama-scope-0.193-1.el10
• elfutils-libelf-0.193-1.el10
• elfutils-libs-0.193-1.el10
• erofs-utils-1.8.4-3.el10
• ethtool-2:6.15-1.el10
• expat-2.7.1-1.el10
• file-5.45-8.el10
• file-libs-5.45-8.el10
• filesystem-3.18-17.el10
• findutils-1:4.10.0-5.el10
• firewalld-filesystem-2.3.1-1.el10
• flashrom-1.3.0-8.el10
• flatpak-session-helper-1.16.0-5.el10
• fstrm-0.6.1-12.el10
• fuse-common-3.16.2-5.el10
• fuse-libs-2.9.9-25.el10
• fuse3-3.16.2-5.el10
• fuse3-libs-3.16.2-5.el10
• fwupd-1.9.26-3.el10
• fwupd-efi-1.6-3.el10
• fwupd-plugin-flashrom-1.9.26-3.el10
• gawk-5.3.0-6.el10
• gawk-all-langpacks-5.3.0-6.el10
• gdbm-1:1.23-14.el10
• gdbm-libs-1:1.23-14.el10
• geolite2-city-20191217-14.el10
• geolite2-country-20191217-14.el10
• gettext-envsubst-0.22.5-6.el10
• gettext-libs-0.22.5-6.el10
• gettext-runtime-0.22.5-6.el10
• git-core-2.47.3-1.el10
• glib2-2.80.4-8.el10
• glibc-2.39-46.el10
• glibc-common-2.39-46.el10
• glibc-gconv-extra-2.39-46.el10
• glibc-minimal-langpack-2.39-46.el10
• gmp-1:6.2.1-12.el10
• gnupg2-2.4.5-2.el10
• gnupg2-smime-2.4.5-2.el10
• gnutls-3.8.10-2.el10
• gobject-introspection-1.79.1-6.el10
• gpgme-1.23.2-6.el10
• grep-3.11-10.el10
• groff-base-1.23.0-10.el10
• grub2-common-1:2.12-26.el10
• grub2-efi-x64-1:2.12-26.el10
• grub2-pc-1:2.12-26.el10
• grub2-pc-modules-1:2.12-26.el10
• grub2-tools-1:2.12-26.el10
• grub2-tools-minimal-1:2.12-26.el10
• gssproxy-0.9.2-10.el10
• gzip-1.13-3.el10
• hostname-3.23-14.el10
• hwdata-0.379-10.5.el10
• ignition-2.22.0-1.el10
• ignition-grub-2.22.0-1.el10
• ima-evm-utils-1.6.2-2.el10
• info-7.1-6.el10
• inih-58-3.el10
• initscripts-service-10.26-2.el10
• intel-audio-firmware-20250812-19.el10
• intel-gpu-firmware-20250812-19.el10
• ipcalc-1.0.3-12.el10
• iproute-6.14.0-2.el10
• iproute-tc-6.14.0-2.el10
• iptables-libs-1.8.11-11.el10
• iptables-nft-1.8.11-11.el10
• iputils-20240905-4.el10
• irqbalance-2:1.9.4-5.el10
• iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10
• iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el10
• isns-utils-libs-0.103-1.el10
• jansson-2.14-3.el10
• jose-14-102.el10
• jq-1.7.1-11.el10
• json-c-0.18-3.el10
• json-glib-1.8.0-5.el10
• kbd-2.6.4-7.el10
• kbd-legacy-2.6.4-7.el10
• kbd-misc-2.6.4-7.el10
• kdump-utils-1.0.54-4.el10
• kernel-6.12.0-121.el10
• kernel-core-6.12.0-121.el10
• kernel-modules-6.12.0-121.el10
• kernel-modules-core-6.12.0-121.el10
• kernel-modules-extra-6.12.0-121.el10
• kernel-modules-extra-matched-6.12.0-121.el10
• kexec-tools-2.0.31-1.el10
• keyutils-1.6.3-5.el10
• keyutils-libs-1.6.3-5.el10
• kmod-31-11.el10
• kmod-libs-31-11.el10
• kpartx-0.9.9-11.el10
• krb5-libs-1.21.3-8.el10
• less-661-3.el10
• libacl-2.3.2-4.el10
• libaio-0.3.111-22.el10
• libarchive-3.7.7-4.el10
• libassuan-2.5.6-6.el10
• libattr-2.5.2-5.el10
• libbasicobjects-0.1.1-58.el10
• libblkid-2.40.2-10.el10
• libbpf-2:1.6.0-3.el10
• libcap-2.69-7.el10
• libcap-ng-0.8.4-6.el10
• libcbor-0.11.0-3.el10
• libcollection-0.7.0-58.el10
• libcom_err-1.47.1-4.el10
• libcomps-0.1.21-3.el10
• libcurl-minimal-8.12.1-2.el10
• libdhash-0.5.0-58.el10
• libdnf-0.73.1-12.el10
• libdnf-plugin-subscription-manager-1.30.10-1.el10
• libdrm-2.4.123-1.el10
• libeconf-0.6.2-4.el10
• libedit-3.1-52.20230828cvs.el10
• libev-4.33-14.el10
• libevent-2.1.12-16.el10
• libfdisk-2.40.2-10.el10
• libffi-3.4.4-10.el10
• libfido2-1.14.0-7.el10
• libgcc-14.3.1-2.1.el10
• libgcrypt-1.11.0-6.el10
• libgomp-14.3.1-2.1.el10
• libgpg-error-1.50-2.el10
• libgudev-238-7.el10
• libgusb-0.4.9-4.el10
• libibverbs-57.0-1.el10
• libicu-74.2-5.el10
• libidn2-2.3.7-3.el10
• libini_config-1.3.1-58.el10
• libipa_hbac-2.11.1-1.el10
• libjcat-0.2.2-2.el10
• libjose-14-102.el10
• libkcapi-1.5.0-3.el10
• libkcapi-hasher-1.5.0-3.el10
• libkcapi-hmaccalc-1.5.0-3.el10
• libksba-1.6.7-2.el10
• libldb-4.22.3-101.el10
• libluksmeta-9-26.el10
• libmaxminddb-1.9.1-4.el10
• libmicrohttpd-1:1.0.0-3.el10
• libmnl-1.0.5-7.el10
• libmodulemd-2.15.0-12.el10
• libmount-2.40.2-10.el10
• libmspack-0.10.1-0.14.alpha.el10
• libndp-1.9-2.el10
• libnet-1.3-7.el10
• libnetfilter_conntrack-1.0.9-12.el10
• libnfnetlink-1.0.2-3.el10
• libnfsidmap-1:2.8.3-0.el10
• libnftnl-1.2.8-2.el10
• libnghttp2-1.64.0-2.el10
• libnl3-3.11.0-1.el10
• libnvme-1.13-1.el10
• libpath_utils-0.2.1-58.el10
• libpcap-14:1.10.4-7.el10
• libpciaccess-0.16-16.el10
• libpkgconf-2.1.0-3.el10
• libpwquality-1.4.5-12.el10
• libref_array-0.1.5-58.el10
• librepo-1.18.0-5.el10
• libseccomp-2.5.6-1.el10
• libsecret-0.21.2-8.el10
• libselinux-3.9-1.el10
• libselinux-utils-3.9-1.el10
• libsemanage-3.9-1.el10
• libsepol-3.9-1.el10
• libsmartcols-2.40.2-10.el10
• libsmbclient-4.22.3-101.el10
• libsolv-0.7.29-8.el10
• libss-1.47.1-4.el10
• libsss_certmap-2.11.1-1.el10
• libsss_idmap-2.11.1-1.el10
• libsss_nss_idmap-2.11.1-1.el10
• libsss_sudo-2.11.1-1.el10
• libstdc++-14.3.1-2.1.el10
• libtalloc-2.4.3-100.el10
• libtasn1-4.20.0-1.el10
• libtdb-1.4.13-100.el10
• libtevent-0.16.2-100.el10
• libtirpc-1.3.5-1.el10
• libtool-ltdl-2.4.7-13.el10
• libunistring-1.1-10.el10
• liburing-2.5-5.el10
• libusb1-1.0.28-1.el10
• libutempter-1.2.1-15.el10
• libuuid-2.40.2-10.el10
• libuv-1:1.51.0-1.el10
• libverto-0.3.2-10.el10
• libverto-libev-0.3.2-10.el10
• libwbclient-4.22.3-101.el10
• libxcrypt-4.4.36-10.el10
• libxkbcommon-1.7.0-4.el10
• libxml2-2.12.5-9.el10
• libxmlb-0.3.15-7.el10
• libxslt-1.1.39-8.el10
• libyaml-0.2.5-16.el10
• libzstd-1.5.5-9.el10
• linux-firmware-20250812-19.el10
• linux-firmware-whence-20250812-19.el10
• lmdb-libs-0.9.32-4.el10
• logrotate-3.22.0-4.el10
• lsof-4.98.0-7.el10
• lua-libs-5.4.6-7.el10
• luksmeta-9-26.el10
• lvm2-10:2.03.32-3.el10
• lvm2-libs-10:2.03.32-3.el10
• lz4-libs-1.9.4-8.el10
• lzo-2.10-14.el10
• makedumpfile-1.7.7-2.el10
• mdadm-4.4-2.el10
• memstrack-0.2.5-6.el10
• microcode_ctl-4:20250512-1.el10
• mokutil-2:0.7.2-1.el10
• mpdecimal-2.5.1-12.el10
• mpfr-4.2.1-5.el10
• mt7xxx-firmware-20250812-19.el10
• nano-8.1-3.el10
• ncurses-6.4-14.20240127.el10
• ncurses-base-6.4-14.20240127.el10
• ncurses-libs-6.4-14.20240127.el10
• net-tools-2.0-0.73.20160912git.el10
• netavark-2:1.16.0-1.el10
• nettle-3.10.1-1.el10
• newt-0.52.24-5.el10
• nfs-utils-1:2.8.3-0.el10
• nftables-1:1.1.1-4.el10
• nmap-ncat-4:7.92-3.el10
• nmstate-2.2.48-1.el10
• npth-1.6-21.el10
• nss-altfiles-2.23.0-5.el10
• numactl-libs-2.0.19-1.el10
• nvidia-gpu-firmware-20250812-19.el10
• nvme-cli-2.13-2.el10
• nxpwireless-firmware-20250812-19.el10
• oniguruma-6.9.9-7.el10
• open-vm-tools-13.0.0-1.el10
• openldap-2.6.8-3.el10
• openshift-clients-4.20.0-202508150943.p0.g1c54ec0.assembly.stream.el9
• openshift-kubelet-4.20.0-202508152244.p0.g7b25b18.assembly.stream.el9
• openssh-9.9p1-11.el10
• openssh-clients-9.9p1-11.el10
• openssh-server-9.9p1-11.el10
• openssl-1:3.5.1-3.el10
• openssl-fips-provider-1:3.5.1-3.el10
• openssl-libs-1:3.5.1-3.el10
• openvswitch-selinux-extra-policy-1.0-36.el10s
• openvswitch3.5-3.5.0-6.el10s
• os-prober-1.81-9.el10
• ose-aws-ecr-image-credential-provider-4.20.0-202508191400.p2.gbb88da1.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.20.0-202507171059.p0.gd469d04.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.20.0-202508130315.p0.g0634bec.assembly.stream.el9
• ostree-2025.4-3.el10
• ostree-grub2-2025.4-3.el10
• ostree-libs-2025.4-3.el10
• p11-kit-0.25.5-7.el10
• p11-kit-server-0.25.5-7.el10
• p11-kit-trust-0.25.5-7.el10
• pam-1.6.1-8.el10
• pam-libs-1.6.1-8.el10
• passt-0^20250415.g8ec1341-1.el10
• passt-selinux-0^20250415.g8ec1341-1.el10
• pciutils-3.13.0-6.el10
• pciutils-libs-3.13.0-6.el10
• pcre2-10.44-1.el10.3
• pcre2-syntax-10.44-1.el10.3
• pcsc-lite-2.2.3-2.el10
• pcsc-lite-ccid-1.6.0-2.el10
• pcsc-lite-libs-2.2.3-2.el10
• perl-AutoLoader-5.74-514.el10
• perl-B-1.89-514.el10
• perl-Carp-1.54-511.el10
• perl-Class-Struct-0.68-514.el10
• perl-Data-Dumper-2.189-512.el10
• perl-Digest-1.20-511.el10
• perl-Digest-MD5-2.59-6.el10
• perl-DynaLoader-1.56-514.el10
• perl-Encode-4:3.21-511.el10
• perl-Errno-1.38-514.el10
• perl-Exporter-5.78-511.el10
• perl-Fcntl-1.18-514.el10
• perl-File-Basename-2.86-514.el10
• perl-File-Path-2.18-511.el10
• perl-File-Temp-1:0.231.100-512.el10
• perl-File-stat-1.14-514.el10
• perl-FileHandle-2.05-514.el10
• perl-Getopt-Long-1:2.58-3.el10
• perl-Getopt-Std-1.14-514.el10
• perl-HTTP-Tiny-0.088-512.el10
• perl-IO-1.55-514.el10
• perl-IO-Socket-IP-0.42-512.el10
• perl-IO-Socket-SSL-2.085-3.el10
• perl-IPC-Open3-1.22-514.el10
• perl-MIME-Base64-3.16-511.el10
• perl-Mozilla-CA-20231213-5.el10
• perl-NDBM_File-1.17-514.el10
• perl-Net-SSLeay-1.94-8.el10
• perl-POSIX-2.20-514.el10
• perl-PathTools-3.91-512.el10
• perl-Pod-Escapes-1:1.07-511.el10
• perl-Pod-Perldoc-3.28.01-512.el10
• perl-Pod-Simple-1:3.45-511.el10
• perl-Pod-Usage-4:2.03-511.el10
• perl-Scalar-List-Utils-5:1.63-511.el10
• perl-SelectSaver-1.02-514.el10
• perl-Socket-4:2.038-511.el10
• perl-Storable-1:3.32-511.el10
• perl-Symbol-1.09-514.el10
• perl-Term-ANSIColor-5.01-512.el10
• perl-Term-Cap-1.18-511.el10
• perl-Text-ParseWords-3.31-511.el10
• perl-Text-Tabs+Wrap-2024.001-511.el10
• perl-Time-Local-2:1.350-511.el10
• perl-URI-5.27-3.el10
• perl-base-2.27-514.el10
• perl-constant-1.33-512.el10
• perl-if-0.61.000-514.el10
• perl-interpreter-4:5.40.2-514.el10
• perl-libnet-3.15-512.el10
• perl-libs-4:5.40.2-514.el10
• perl-locale-1.12-514.el10
• perl-mro-1.29-514.el10
• perl-overload-1.37-514.el10
• perl-overloading-0.02-514.el10
• perl-parent-1:0.241-512.el10
• perl-podlators-1:5.01-511.el10
• perl-vars-1.05-514.el10
• pigz-2.8-7.el10
• pinentry-1.3.1-1.el10
• pkgconf-2.1.0-3.el10
• pkgconf-m4-2.1.0-3.el10
• pkgconf-pkg-config-2.1.0-3.el10
• podman-6:5.6.0-1.el10
• policycoreutils-3.9-1.el10
• policycoreutils-python-utils-3.9-1.el10
• polkit-125-4.el10
• polkit-libs-125-4.el10
• polkit-pkla-compat-0.1-30.el10
• popt-1.19-8.el10
• procps-ng-4.0.4-8.el10
• protobuf-c-1.5.0-6.el10
• psmisc-23.6-8.el10
• python-unversioned-command-3.12.11-2.el10
• python3-3.12.11-2.el10
• python3-audit-4.0.3-4.el10
• python3-charset-normalizer-3.4.2-1.el10
• python3-cloud-what-1.30.10-1.el10
• python3-dateutil-1:2.9.0.post0-1.el10
• python3-dbus-1.3.2-8.el10
• python3-decorator-5.1.1-12.el10
• python3-distro-1.9.0-5.el10
• python3-dnf-4.20.0-18.el10
• python3-dnf-plugin-versionlock-4.7.0-9.el10
• python3-dnf-plugins-core-4.7.0-9.el10
• python3-gobject-base-3.46.0-7.el10
• python3-gobject-base-noarch-3.46.0-7.el10
• python3-hawkey-0.73.1-12.el10
• python3-idna-3.7-4.el10
• python3-iniparse-0.5-10.el10
• python3-inotify-0.9.6-36.el10
• python3-libcomps-0.1.21-3.el10
• python3-libdnf-0.73.1-12.el10
• python3-librepo-1.18.0-5.el10
• python3-libs-3.12.11-2.el10
• python3-libselinux-3.9-1.el10
• python3-libsemanage-3.9-1.el10
• python3-pip-wheel-23.3.2-7.el10
• python3-policycoreutils-3.9-1.el10
• python3-requests-2.32.4-1.el10
• python3-rpm-4.19.1.1-18.el10
• python3-setools-4.5.1-5.el10
• python3-setuptools-69.0.3-12.el10
• python3-six-1.16.0-16.el10
• python3-subscription-manager-rhsm-1.30.10-1.el10
• python3-systemd-235-11.el10
• python3-urllib3-1.26.19-2.el10
• qemu-guest-agent-18:10.0.0-10.el10
• quota-1:4.09-9.el10
• quota-nls-1:4.09-9.el10
• rdma-core-57.0-1.el10
• readline-8.2-11.el10
• realtek-firmware-20250812-19.el10
• rpcbind-1.2.7-3.el10
• rpm-4.19.1.1-18.el10
• rpm-build-libs-4.19.1.1-18.el10
• rpm-libs-4.19.1.1-18.el10
• rpm-ostree-2025.10-1.el10
• rpm-ostree-libs-2025.10-1.el10
• rpm-plugin-audit-4.19.1.1-18.el10
• rpm-plugin-selinux-4.19.1.1-18.el10
• rpm-plugin-systemd-inhibit-4.19.1.1-18.el10
• rpm-sequoia-1.9.0.1-1.el10
• rpm-sign-libs-4.19.1.1-18.el10
• rsync-3.4.1-2.el10
• samba-client-libs-4.22.3-101.el10
• samba-common-4.22.3-101.el10
• samba-common-libs-4.22.3-101.el10
• sed-4.9-3.el10
• selinux-policy-42.1.6-1.el10
• selinux-policy-targeted-42.1.6-1.el10
• setup-2.14.5-7.el10
• sg3_utils-1.48-7.el10
• sg3_utils-libs-1.48-7.el10
• shadow-utils-2:4.15.0-6.el10
• shadow-utils-subid-2:4.15.0-8.el10
• shared-mime-info-2.3-8.el10
• shim-x64-15.8-5.el10
• skopeo-2:1.20.0-1.el10
• slang-2.3.3-8.el10
• snappy-1.1.10-7.el10
• socat-1.7.4.4-8.el10
• sqlite-libs-3.46.1-4.el10
• ssh-key-dir-0.1.4-9.el10
• sssd-2.11.1-1.el10
• sssd-ad-2.11.1-1.el10
• sssd-client-2.11.1-1.el10
• sssd-common-2.11.1-1.el10
• sssd-common-pac-2.11.1-1.el10
• sssd-ipa-2.11.1-1.el10
• sssd-krb5-2.11.1-1.el10
• sssd-krb5-common-2.11.1-1.el10
• sssd-ldap-2.11.1-1.el10
• sssd-nfs-idmap-2.11.1-1.el10
• sssd-proxy-2.11.1-1.el10
• stalld-1.20.2-2.el10
• strace-6.12-1.el10
• subscription-manager-1.30.10-1.el10
• subscription-manager-rhsm-certificates-20220623-6.el10
• sudo-1.9.15-9.p5.el10
• sudo-python-plugin-1.9.15-9.p5.el10
• systemd-257-13.el10
• systemd-journal-remote-257-13.el10
• systemd-libs-257-13.el10
• systemd-pam-257-13.el10
• systemd-udev-257-13.el10
• tar-2:1.35-7.el10
• tiwilink-firmware-20250812-19.el10
• tmux-3.3a-13.20230918gitb202a2f.el10
• toolbox-0.2-2.el10
• tpm2-tools-5.7-4.el10
• tpm2-tss-4.1.3-5.el10
• tpm2-tss-fapi-4.1.3-5.el10
• tzdata-2025b-2.el10
• unbound-anchor-1.20.0-13.el10
• unbound-libs-1.20.0-13.el10
• userspace-rcu-0.14.0-7.el10
• util-linux-2.40.2-10.el10
• util-linux-core-2.40.2-10.el10
• vim-data-2:9.1.083-5.el10
• vim-minimal-2:9.1.083-5.el10
• virt-what-1.27-3.el10
• which-2.21-44.el10
• xfsprogs-6.11.0-2.el10
• xkeyboard-config-2.41-3.el10
• xmlsec1-1:1.2.39-3.el10
• xmlsec1-openssl-1:1.2.39-3.el10
• xz-1:5.6.2-4.el10
• xz-libs-1:5.6.2-4.el10
• zlib-ng-compat-2.2.3-2.el10
• zram-generator-1.1.2-14.el10
• zstd-1.5.5-9.el10

Changed:

• NetworkManager 1:1.53.92-1.el10 → 1:1.54.0-1.el10
• NetworkManager-cloud-setup 1:1.53.92-1.el10 → 1:1.54.0-1.el10
• NetworkManager-libnm 1:1.53.92-1.el10 → 1:1.54.0-1.el10
• NetworkManager-ovs 1:1.53.92-1.el10 → 1:1.54.0-1.el10
• NetworkManager-tui 1:1.53.92-1.el10 → 1:1.54.0-1.el10
• aardvark-dns 2:1.15.0-1.el10 → 2:1.16.0-2.el10
• afterburn 5.8.2-1.el10 → 5.9.0-1.el10
• afterburn-dracut 5.8.2-1.el10 → 5.9.0-1.el10
• amd-gpu-firmware 20250708-18.el10 → 20250812-19.el10
• amd-ucode-firmware 20250708-18.el10 → 20250812-19.el10
• atheros-firmware 20250708-18.el10 → 20250812-19.el10
• avahi-libs 0.9~rc2-1.el10 → 0.9~rc2-2.el10
• binutils 2.41-56.el10 → 2.41-57.el10
• binutils-gold 2.41-56.el10 → 2.41-57.el10
• bootc 1.3.0-2.el10 → 1.4.0-1.el10
• brcmfmac-firmware 20250708-18.el10 → 20250812-19.el10
• bsdtar 3.7.7-3.el10 → 3.7.7-4.el10
• centos-gpg-keys 10.0-9.el10 → 10.0-10.el10
• centos-stream-release 10.0-9.el10 → 10.0-10.el10
• centos-stream-repos 10.0-9.el10 → 10.0-10.el10
• checkpolicy 3.8-1.el10 → 3.9-1.el10
• cirrus-audio-firmware 20250708-18.el10 → 20250812-19.el10
• container-selinux 4:2.239.0-1.el10 → 4:2.240.0-1.el10
• containers-common 5:0.63.0-1.el10 → 5:0.64.0-4.el10
• containers-common-extra 5:0.63.0-1.el10 → 5:0.64.0-4.el10
• cri-o 1.33.1-2.el10s → 1.33.3-1.el10s
• crun 1.22-1.el10 → 1.23-1.el10
• crypto-policies 20250714-1.git95bf40e.el10 → 20250804-1.git2ca4115.el10
• crypto-policies-scripts 20250714-1.git95bf40e.el10 → 20250804-1.git2ca4115.el10
• dbus-broker 36-1.el10 → 36-4.el10
• device-mapper-multipath 0.9.9-10.el10 → 0.9.9-11.el10
• device-mapper-multipath-libs 0.9.9-10.el10 → 0.9.9-11.el10
• dnf 4.20.0-16.el10 → 4.20.0-18.el10
• dnf-data 4.20.0-16.el10 → 4.20.0-18.el10
• dracut 105-4.el10 → 107-3.el10
• dracut-network 105-4.el10 → 107-3.el10
• dracut-squash 105-4.el10 → 107-3.el10
• ethtool 2:6.11-5.el10 → 2:6.15-1.el10
• file 5.45-7.el10 → 5.45-8.el10
• file-libs 5.45-7.el10 → 5.45-8.el10
• firewalld-filesystem 2.3.0-2.el10 → 2.3.1-1.el10
• gdbm 1:1.23-11.el10 → 1:1.23-14.el10
• gdbm-libs 1:1.23-11.el10 → 1:1.23-14.el10
• glib2 2.80.4-4.el10 → 2.80.4-8.el10
• glibc 2.39-38.el10 → 2.39-46.el10
• glibc-common 2.39-38.el10 → 2.39-46.el10
• glibc-gconv-extra 2.39-38.el10 → 2.39-46.el10
• glibc-minimal-langpack 2.39-38.el10 → 2.39-46.el10
• gnutls 3.8.10-1.el10 → 3.8.10-2.el10
• grub2-common 1:2.12-19.el10 → 1:2.12-26.el10
• grub2-efi-x64 1:2.12-19.el10 → 1:2.12-26.el10
• grub2-pc 1:2.12-19.el10 → 1:2.12-26.el10
• grub2-pc-modules 1:2.12-19.el10 → 1:2.12-26.el10
• grub2-tools 1:2.12-19.el10 → 1:2.12-26.el10
• grub2-tools-minimal 1:2.12-19.el10 → 1:2.12-26.el10
• ignition 2.21.0-3.el10 → 2.22.0-1.el10
• ignition-grub 2.21.0-3.el10 → 2.22.0-1.el10
• intel-audio-firmware 20250708-18.el10 → 20250812-19.el10
• intel-gpu-firmware 20250708-18.el10 → 20250812-19.el10
• iproute 6.14.0-1.el10 → 6.14.0-2.el10
• iproute-tc 6.14.0-1.el10 → 6.14.0-2.el10
• iptables-libs 1.8.11-9.el10 → 1.8.11-11.el10
• iptables-nft 1.8.11-9.el10 → 1.8.11-11.el10
• iputils 20240905-3.el10 → 20240905-4.el10
• irqbalance 2:1.9.4-4.el10 → 2:1.9.4-5.el10
• kdump-utils 1.0.54-3.el10 → 1.0.54-4.el10
• kernel 6.12.0-105.el10 → 6.12.0-121.el10
• kernel-core 6.12.0-105.el10 → 6.12.0-121.el10
• kernel-modules 6.12.0-105.el10 → 6.12.0-121.el10
• kernel-modules-core 6.12.0-105.el10 → 6.12.0-121.el10
• kernel-modules-extra 6.12.0-105.el10 → 6.12.0-121.el10
• kpartx 0.9.9-10.el10 → 0.9.9-11.el10
• libarchive 3.7.7-3.el10 → 3.7.7-4.el10
• libbpf 2:1.6.0-2.el10 → 2:1.6.0-3.el10
• libdnf-plugin-subscription-manager 1.30.7-1.el10 → 1.30.10-1.el10
• libicu 74.2-4.el10 → 74.2-5.el10
• libipa_hbac 2.11.0-3.el10 → 2.11.1-1.el10
• libselinux 3.8-2.el10 → 3.9-1.el10
• libselinux-utils 3.8-2.el10 → 3.9-1.el10
• libsemanage 3.8.1-1.el10 → 3.9-1.el10
• libsepol 3.8-1.el10 → 3.9-1.el10
• libsss_certmap 2.11.0-3.el10 → 2.11.1-1.el10
• libsss_idmap 2.11.0-3.el10 → 2.11.1-1.el10
• libsss_nss_idmap 2.11.0-3.el10 → 2.11.1-1.el10
• libsss_sudo 2.11.0-3.el10 → 2.11.1-1.el10
• libuv 1:1.50.0-1.el10 → 1:1.51.0-1.el10
• libxml2 2.12.5-7.el10 → 2.12.5-9.el10
• libxslt 1.1.39-7.el10 → 1.1.39-8.el10
• linux-firmware 20250708-18.el10 → 20250812-19.el10
• linux-firmware-whence 20250708-18.el10 → 20250812-19.el10
• makedumpfile 1.7.7-1.el10 → 1.7.7-2.el10
• mt7xxx-firmware 20250708-18.el10 → 20250812-19.el10
• netavark 2:1.15.2-1.el10 → 2:1.16.0-1.el10
• nvidia-gpu-firmware 20250708-18.el10 → 20250812-19.el10
• nxpwireless-firmware 20250708-18.el10 → 20250812-19.el10
• open-vm-tools 12.5.0-1.el10 → 13.0.0-1.el10
• openshift-clients 4.20.0-202507031044.p0.gf0e1051.assembly.stream.el9 → 4.20.0-202508150943.p0.g1c54ec0.assembly.stream.el9
• openshift-kubelet 4.20.0-202507171059.p0.gb94367c.assembly.stream.el9 → 4.20.0-202508152244.p0.g7b25b18.assembly.stream.el9
• openssh 9.9p1-9.el10 → 9.9p1-11.el10
• openssh-clients 9.9p1-9.el10 → 9.9p1-11.el10
• openssh-server 9.9p1-9.el10 → 9.9p1-11.el10
• openssl 1:3.5.0-8.el10 → 1:3.5.1-3.el10
• openssl-libs 1:3.5.0-8.el10 → 1:3.5.1-3.el10
• ose-aws-ecr-image-credential-provider 4.20.0-202507092044.p0.g3408f0c.assembly.stream.el9 → 4.20.0-202508191400.p2.gbb88da1.assembly.stream.el9
• ose-azure-acr-image-credential-provider 4.20.0-202507042143.p0.gd469d04.assembly.stream.el9 → 4.20.0-202507171059.p0.gd469d04.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider 4.20.0-202506181842.p0.gaabc000.assembly.stream.el9 → 4.20.0-202508130315.p0.g0634bec.assembly.stream.el9
• ostree 2025.3-1.el10 → 2025.4-3.el10
• ostree-grub2 2025.3-1.el10 → 2025.4-3.el10
• ostree-libs 2025.3-1.el10 → 2025.4-3.el10
• pciutils 3.13.0-5.el10 → 3.13.0-6.el10
• pciutils-libs 3.13.0-5.el10 → 3.13.0-6.el10
• podman 6:5.5.1-1.el10 → 6:5.6.0-1.el10
• policycoreutils 3.8-2.el10 → 3.9-1.el10
• policycoreutils-python-utils 3.8-2.el10 → 3.9-1.el10
• polkit 125-3.el10 → 125-4.el10
• polkit-libs 125-3.el10 → 125-4.el10
• procps-ng 4.0.4-7.el10 → 4.0.4-8.el10
• python3-cloud-what 1.30.7-1.el10 → 1.30.10-1.el10
• python3-dateutil 1:2.8.2-15.el10 → 1:2.9.0.post0-1.el10
• python3-dnf 4.20.0-16.el10 → 4.20.0-18.el10
• python3-libselinux 3.8-2.el10 → 3.9-1.el10
• python3-libsemanage 3.8.1-1.el10 → 3.9-1.el10
• python3-policycoreutils 3.8-2.el10 → 3.9-1.el10
• python3-requests 2.32.3-2.el10 → 2.32.4-1.el10
• python3-rpm 4.19.1.1-17.el10 → 4.19.1.1-18.el10
• python3-setools 4.5.1-4.el10 → 4.5.1-5.el10
• python3-subscription-manager-rhsm 1.30.7-1.el10 → 1.30.10-1.el10
• qemu-guest-agent 18:10.0.0-7.el10 → 18:10.0.0-10.el10
• realtek-firmware 20250708-18.el10 → 20250812-19.el10
• rpm 4.19.1.1-17.el10 → 4.19.1.1-18.el10
• rpm-build-libs 4.19.1.1-17.el10 → 4.19.1.1-18.el10
• rpm-libs 4.19.1.1-17.el10 → 4.19.1.1-18.el10
• rpm-ostree 2025.9-1.el10 → 2025.10-1.el10
• rpm-ostree-libs 2025.9-1.el10 → 2025.10-1.el10
• rpm-plugin-audit 4.19.1.1-17.el10 → 4.19.1.1-18.el10
• rpm-plugin-selinux 4.19.1.1-17.el10 → 4.19.1.1-18.el10
• rpm-plugin-systemd-inhibit 4.19.1.1-17.el10 → 4.19.1.1-18.el10
• rpm-sign-libs 4.19.1.1-17.el10 → 4.19.1.1-18.el10
• selinux-policy 40.13.35-1.el10 → 42.1.6-1.el10
• selinux-policy-targeted 40.13.35-1.el10 → 42.1.6-1.el10
• shadow-utils-subid 2:4.15.0-6.el10 → 2:4.15.0-8.el10
• skopeo 2:1.19.0-2.el10 → 2:1.20.0-1.el10
• sssd 2.11.0-3.el10 → 2.11.1-1.el10
• sssd-ad 2.11.0-3.el10 → 2.11.1-1.el10
• sssd-client 2.11.0-3.el10 → 2.11.1-1.el10
• sssd-common 2.11.0-3.el10 → 2.11.1-1.el10
• sssd-common-pac 2.11.0-3.el10 → 2.11.1-1.el10
• sssd-ipa 2.11.0-3.el10 → 2.11.1-1.el10
• sssd-krb5 2.11.0-3.el10 → 2.11.1-1.el10
• sssd-krb5-common 2.11.0-3.el10 → 2.11.1-1.el10
• sssd-ldap 2.11.0-3.el10 → 2.11.1-1.el10
• sssd-nfs-idmap 2.11.0-3.el10 → 2.11.1-1.el10
• sssd-proxy 2.11.0-3.el10 → 2.11.1-1.el10
• stalld 1.19.8-2.el10 → 1.20.2-2.el10
• subscription-manager 1.30.7-1.el10 → 1.30.10-1.el10
• systemd 257-11.el10 → 257-13.el10
• systemd-journal-remote 257-11.el10 → 257-13.el10
• systemd-libs 257-11.el10 → 257-13.el10
• systemd-pam 257-11.el10 → 257-13.el10
• systemd-udev 257-11.el10 → 257-13.el10
• tiwilink-firmware 20250708-18.el10 → 20250812-19.el10
• toolbox 0.1.2-1.el10 → 0.2-2.el10
• tzdata 2025b-1.el10 → 2025b-2.el10
• unbound-anchor 1.20.0-10.el10 → 1.20.0-13.el10
• unbound-libs 1.20.0-10.el10 → 1.20.0-13.el10

Removed:

• conntrack-tools 1.4.8-3.el10
• libnetfilter_cthelper 1.0.1-1.el10
• libnetfilter_cttimeout 1.0.0-27.el10
• libnetfilter_queue 1.0.5-9.el10

Added:

• kernel-modules-extra-matched 6.12.0-121.el10
• openssl-fips-provider 1:3.5.1-3.el10

Extensions

Full list (48 packages)

• NetworkManager-libreswan-1.2.24-2.el10.x86_64
• bison-3.8.2-9.el10.x86_64
• cmake-filesystem-3.30.5-3.el10.x86_64
• cpp-14.3.1-2.1.el10.x86_64
• elfutils-libelf-devel-0.193-1.el10.x86_64
• flex-2.6.4-19.el10.x86_64
• gcc-14.3.1-2.1.el10.x86_64
• glibc-devel-2.39-46.el10.x86_64
• kernel-6.12.0-121.el10.x86_64
• kernel-core-6.12.0-121.el10.x86_64
• kernel-devel-6.12.0-121.el10.x86_64
• kernel-headers-6.12.0-121.el10.x86_64
• kernel-modules-6.12.0-121.el10.x86_64
• kernel-modules-extra-6.12.0-121.el10.x86_64
• kernel-rt-core-6.12.0-121.el10.x86_64
• kernel-rt-devel-6.12.0-121.el10.x86_64
• kernel-rt-modules-6.12.0-121.el10.x86_64
• kernel-rt-modules-core-6.12.0-121.el10.x86_64
• kernel-rt-modules-extra-6.12.0-121.el10.x86_64
• krb5-pkinit-1.21.3-8.el10.x86_64
• krb5-workstation-1.21.3-8.el10.x86_64
• ldns-1.8.3-18.el10.x86_64
• libkadm5-1.21.3-8.el10.x86_64
• libmpc-1.3.1-7.el10.x86_64
• libqb-2.0.8-6.el10.x86_64
• libreswan-5.3-1.el10.x86_64
• libxcrypt-devel-4.4.36-10.el10.x86_64
• libzstd-devel-1.5.5-9.el10.x86_64
• lm_sensors-libs-3.6.0-20.el10.x86_64
• m4-1.4.19-11.el10.x86_64
• make-1:4.4.1-9.el10.x86_64
• nspr-4.36.0-4.el10.x86_64
• nss-3.112.0-4.el10.x86_64
• nss-softokn-3.112.0-4.el10.x86_64
• nss-softokn-freebl-3.112.0-4.el10.x86_64
• nss-sysinit-3.112.0-4.el10.x86_64
• nss-tools-3.112.0-4.el10.x86_64
• nss-util-3.112.0-4.el10.x86_64
• openssl-devel-1:3.5.1-3.el10.x86_64
• openvswitch3.5-ipsec-3.5.0-6.el10s.x86_64
• pcp-conf-6.3.7-5.el10.x86_64
• pcp-libs-6.3.7-5.el10.x86_64
• protobuf-3.19.6-11.el10.x86_64
• python3-openvswitch3.5-3.5.0-6.el10s.x86_64
• sysstat-12.7.6-2.el10.x86_64
• usbguard-1.1.3-6.el10.x86_64
• usbguard-selinux-1.1.3-6.el10.noarch
• zlib-ng-compat-devel-2.2.3-2.el10.x86_64

CentOS Stream CoreOS base layer: 10.0.20250819-0