4.21.0-okd-scos.11

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.21.0-okd-scos.11

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable
- upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable

Upgrades from:

Untested upgrades: 4.20.0-0.okd-scos-2026-02-07-001639, 4.21.0-0.okd-scos-nightly-2026-05-05-004704, 4.21.0-0.okd-scos-nightly-2026-05-05-124704, 4.21.0-0.okd-scos-nightly-2026-05-06-005227, 4.21.0-0.okd-scos-nightly-2026-05-06-125327, 4.21.0-0.okd-scos-nightly-2026-05-07-014546, 4.21.0-0.okd-scos-nightly-2026-05-07-134546

4.21.0-okd-scos.ec.19 (changes) - F F F S
4.21.0-okd-scos.10 (changes) - Success
4.21.0-okd-scos.9 (changes) - Success
4.21.0-okd-scos.7 (changes) - F F S
4.21.0-okd-scos.6 (changes) - Failed Success
4.21.0-okd-scos.5 (changes) - Success
4.21.0-okd-scos.4 (changes) - F F F
4.21.0-okd-scos.3 - Success
4.21.0-okd-scos.2 (changes) - Success
4.21.0-okd-scos.1 (changes) - Success
4.21.0-okd-scos.0 (changes) - Success
4.20.0-okd-scos.17 (changes) - F F F S

Upgrades to:

4.22.0-okd-scos.0 (changes) - Failed Success

Changes from 4.21.0-okd-scos.3

Created: 2026-05-07 21:21:28 +0000 UTC

Image Digest: sha256:4b930ee653c7e7671cf2d69e50a1898330556a09ac58b255fbe4b8addd53b290

Release 4.21.0-okd-scos.11 was created from registry.ci.openshift.org/origin/release-scos:4.21.0-0.okd-scos-nightly-2026-05-07-134546

Components

Kubectl 1.34.1
Kubernetes upgraded from 1.34.2 to 1.34.7
Kubernetes Tests 1.34.1
CentOS Stream CoreOS 10 upgraded from 10.0.20260125-0 to 10.0.20260414-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
EventTTL (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
IngressControllerDynamicConfigurationManager (0 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
KMSEncryptionProvider (0 tests)	Disabled	Disabled	Enabled	Enabled	Disabled (Changed)	Disabled (Changed)
KMSEncryption (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Removed images

cluster-kube-cluster-api-operator
installer-altinfra
installer-etcd-artifacts
installer-kube-apiserver-artifacts
libvirt-machine-controllers

Rebuilt images without code change

agent-installer-node-agent git e5713826 sha256:904d9f78d3963a0513d737156a4dcecf5813753bdcaa760891922fb58fa2f562
apiserver-network-proxy git 35ba137a sha256:2d62ed21c89cc67f402fe323a5f8e7ba4a87146dd91e9a14e665c81a58a01b6b
aws-cluster-api-controllers git 10ceef5e sha256:9d9766f42bef05f7956ae0a544262a634b9b8ce671b3a849e8ff1b8f670cd219
aws-ebs-csi-driver git 57eebffc sha256:c54f0704b9b04b18416b862a6c5e58420a032f79eb216e4ac4c3fa0af14efa0c
aws-karpenter-provider-aws git ff9c8d4e sha256:24d1845ec03fd84a9c976375d14414909e9da061d6c9111465d3a274eb058d9d
aws-kms-encryption-provider git 19e7b623 sha256:444dbbc841b0bae3fe4e4cc4b830fedd4da49ea210e20559efbdc016cd20ad5c
aws-machine-controllers git 938565c9 sha256:26354eb0e39665dade866d3a58d6f3f886aae408c23bfd6d1d2dc5a77f385cd8
aws-pod-identity-webhook git 5cd42ed1 sha256:859e1819551c1a99c781e4355e986cb3ea177acbe72316cda74e552b963fb6bb
azure-machine-controllers git b8b8cb1c sha256:57e816b41fe2ad6f0299c69ff993deaa66cb6207d0b77f331b2b9bbe97c11273
azure-workload-identity-webhook git 3f2a6e0d sha256:681872d9ae6bdadd4c9d425bb3c990636af972d80537370a84ff57ced61860e5
baremetal-machine-controllers git 4e6a729c sha256:5477b713b7f521c09a5ac2d6b3f01e0efcd839750165ebcdcd91fba0d12b3cae
cluster-autoscaler-operator git dec12ba6 sha256:b8686e294548a8f55b0f8792a83fbeb36c2611d2be1a520d30467ffab9dc9e25
cluster-bootstrap git dc0d4a5c sha256:077cf4edbd1965f2241d16527ef460bc824b791b9c05644fce3bb4128726de4c
cluster-capi-controllers git a957484a sha256:76c98c07e4c0fc298b77fa951643d4289991c05f4b26e1e1eb62856c648e3063
cluster-capi-operator git 80728a61 sha256:30efd9e8aea62a9215d689af8459f15e82e94f1c1813f206da83bd759846a8f1
cluster-cloud-controller-manager-operator git 6148c0cc sha256:301a8704f33d5e26296e60dc6853ef7b3dd45a11a3b425610d19f1af5313a3d9
cluster-control-plane-machine-set-operator git 2dde33fb sha256:5d82abc5fdee1b06f91673a2e125f85b9384dbf321e1b5711d504a3509191ac6
cluster-dns-operator git 41a53fed sha256:24e113dea01f4e396a1f9421dffb672575e6115eb27ab76aa72871dc27f979f0
cluster-kube-controller-manager-operator git 395de967 sha256:baaf5b44552b13f727571b87d67b6fdf0c822803c178039acedd78421cbaf51f
cluster-kube-storage-version-migrator-operator git 8a42beeb sha256:005fec22bb4b04d61fa0224b62603d6c001fd02b4a99f6cf49ff738ade00add4
cluster-machine-approver git d864813c sha256:3ea122c4146fc351435fbe0feb4e31b83acae9af00b0337e089e87d52accd576
cluster-openshift-controller-manager-operator git 2617a201 sha256:e11e237accc45114771e68c21fe109ad0cf5db712e002bc8129d38e408cd0282
cluster-policy-controller git 8b775487 sha256:d061e3f5372059cd78c6f0c25d0656c7f2faf28314956e4dd5af7237f10a0d74
cluster-samples-operator git 11ed1942 sha256:d8bbd0be67a4a202d7bf6e0ca9bb8d220c7d3e7ef6262920424e81942cc7e2ca
cluster-update-keys git b3cae8f2 sha256:a2ef7a7a59205d67a99790c4db1bcc87fb6d5fe2ee88f063428b49dea516b383
configmap-reloader git 16114b8d sha256:b411891a5aa778e6487355dfbd22eb5444b9a76d864e95fa6a103321c4bbc504
container-networking-plugins git 747ad66c sha256:29a32b5c1bc4383ae9fde913789bc239c05097f91e386e2885fb6ecb08edc804
containernetworking-plugins-microshift git 747ad66c sha256:dabe74aaa2e1939b1f17b236fc484bcd32c2cad43e1ea6b2273e1a531820a7b9
coredns git 7486e9e4 sha256:ff6ba6274db0da671875c40ba1b9974aeb036b1d2af648bb77474df745fe00fc
csi-external-attacher git 344669a2 sha256:ce6365bb49e07d9f86e38b7f5c351fcc3c28f3760c55883c3b1130dfe01033aa
csi-external-provisioner git f18190fb sha256:1500e3534239b71467f865f2366c1f35577af3c7a6bae5ec794417564b541f9a
csi-external-resizer git d880a1ec sha256:37f15932218e94e4d1e65c70f47105a510d4218b1458d8f0c1a1c99e7708c3f4
csi-external-snapshot-metadata git af250fdb sha256:097fe6c8136a41d28cd1a37829fe8fbb57740fa5a183765b07fdb12642c03aa8
csi-external-snapshotter git 9098db0e sha256:7036babf202f4f5f85b353f5c0ba857a83a053e6ee89d71fb9a2ac97e4b82d26
csi-livenessprobe git 78dacb7c sha256:df135960e9c15c8d5dca2f5ca8b2d1c13586db6f788759bebd57f25b831221d4
csi-node-driver-registrar git d29f3f7a sha256:db536aacb57bba66e6da2d0c21bd6f51133d7c8198a545e3fff6a390f3094d55
csi-snapshot-controller git 9098db0e sha256:15307b520f0afb2c6933445907ad356b537455575b83b67b66385b34957ef904
docker-registry git 602f51c7 sha256:8639db17dbbe83918c60d1b40844ed9e3e2e1b934fa9da218e7e50d5e5ab08b1
egress-router-cni git 5e0f8d1b sha256:dcf23425890582f5e52556721cf9e20bdcf29c3dced3425321cc8d1e43fa6b53
etcd git 806f690e sha256:d2045d8c9119cd9861ff6902ba283ac21758b2aca3c7a4df78038988d82ff2a3
gcp-machine-controllers git 91f71c9a sha256:c3dd3ecd824b81b6abba4603c0fd4e184ad1c03c555f85d8f343880e9d054a5e
gcp-workload-identity-federation-webhook git d481e5cb sha256:d4633ae01dafe98460f56a470cc3e91abeb18cdf9d0b38dff16f3b7d25af9d78
ibm-cloud-controller-manager git c566572b sha256:18375458cdd1aab24f02a234f089d7fa8b9ef457d47124aa401c21dabe6231d7
ibm-vpc-block-csi-driver-operator git 00bc7407 sha256:4d2ae7cea012205ffa433cf077ece1610422a3d596046da09e8be0597f2fc79b
ironic-static-ip-manager git b95b05fe sha256:e0b3ee64f334f65d716250a9731672af682d05f7fded752676e0f69896d63fff
kube-rbac-proxy git cd636680 sha256:db030f099778c59611b6d6c1f5a5b48d09d7f2cb67ef9d0f32a6bd425b66ebcf
kube-state-metrics git cb0aa591 sha256:91b2156c366522f74a6199fbe5e56ea59f1559e4300d948c03761dc8bf4af2ae
kube-storage-version-migrator git ce5ff17e sha256:ae0e39048a589e0acfc4eabac5842fcb071ad67cf9417152fe6e88db3566d6ef
machine-os-images git 9a8e96a6 sha256:15e04eaaba9cc8d872a5367abeaf92ad31244899a3f8095f6779194dfbea82f7
metallb-frr git c82bfaad sha256:91e6445d28d53ee50b890c2e465845369253854ae2f153b2862832014cc7a224
multus-admission-controller git d95feb67 sha256:9d3bfe1462cf09b25d86c42a29468d9e0ea669475ed2b2b1b54710e883770242
multus-route-override-cni git 08af4127 sha256:1cd182232ab762e139beed617a3582feebbaf3417f5bb0f5056b078ff4af2298
multus-whereabouts-ipam-cni git d691040e sha256:3adf923d9acbbd1c928cce7086c3316783dc2ef7e3ec1d1d465447d8c92ad320
must-gather git b4b434c4 sha256:a743f7b460c92d4167293e1d53e593dd3ec5caed9dab6d362c66fab350a0afc0
network-interface-bond-cni git 297eeb43 sha256:80941bffedb7d68e5e3e494040e0c7cdb2770a9110bced344a2bf1ff6ce6b22a
network-metrics-daemon git 844fa588 sha256:844d085dd63a6a96b18815e0d23e32fc641904c10e2aec98b97a40c3df5c1cfe
network-tools git d6717e45 sha256:49a3056bb60070386ba769e1d52b5a6eff4ae500ebc202038a2a5cc8ddcfead3
nutanix-cloud-controller-manager git 33b7bec6 sha256:81179d94b3cf6e0eda52f76aec81c96fa21da8d117e9cc6aa29e46dafc6c9b77
nutanix-machine-controllers git b15a665c sha256:73946acb43e65f2df02d0e9da30a08e43913229f472af94113ff3c2317dadedc
oauth-apiserver git 71c41b2d sha256:15cf433c85c17ece6f169bccb221e13b2b6249c0d11d4e495b6fb3af76a4e327
oauth-proxy git 7f518c02 sha256:bd59d8b888c8a0c38f48ca78d8164b55833a333c6dfed81b731e07cd48ff0054
openshift-apiserver git 64dea074 sha256:909fe3dcca2dac05d45dec6f7a914bdae3a33c40a58ac080a690218a4ecbdb7f
openshift-controller-manager git 438d52e7 sha256:d473e6fd6cb76a6cef5350ca982eb9f5cc48538071fedde33ed5290d2d2aa4fc
openshift-state-metrics git ab605a4b sha256:70b32fb71be76dc4276c3928d7c1ab3530b869d3494f50297f76b3404e45ade9
openstack-resource-controller git 70f5ad34 sha256:8a89162d602bede7fb31713816448d13ee9a80ebd95533a23596c9f4c5a6b56f
powervs-cloud-controller-manager git 969a04e9 sha256:7a381df70d92080e84695228cf34e85396dc684fe35df8bab8ab91a2e591afc6
powervs-machine-controllers git 551974ef sha256:2c5ddb6644c22b85184144daed59a3d2527a00f1f728349f173290e7cdb38d3e
prom-label-proxy git 610c11b5 sha256:053c6d235f37f3b3bcb2168d3d5504005818fd96b320e97291ad3b4ed580b4b8
prometheus-alertmanager git 3dbe0b64 sha256:3aee034f7737b55d508a4cefd9b49493e7ce5d31f3dc16d2028edae99bb97fcc
prometheus-node-exporter git 39d72873 sha256:3ed9ee7fa48696573712c900e3276b5cc2be693b6d492fdb3a962623801df7f6
volume-data-source-validator git 8b929332 sha256:2d7615bec6ffcce11e749aa1d44fd83ac7310b5a38eb2df87ea2fc8904dd099e
vsphere-cloud-controller-manager git f69584d6 sha256:392fc1a881007468b70c949f4e23bcf46f08603e9008783fe4d7d4bbad48ba5f
vsphere-cluster-api-controllers git 6626b299 sha256:7a38834af46a4169dbe7020b3d487ffb1a7634486c320f7a9eb95ef7a730b369

agent-installer-api-server

OCPBUGS-81843: Prefer multipath disk in ABI disk selection #10112
OCPBUGS-79580: Fix multi-document YAML parsing for NMStateConfig #10058
AGENT-1431: Backport feature NoRegistryClusterInstall to 4.21 #8806
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-81642: fix: allow workers to join TNA cluster when 1 master + arbiter are ready #2066
OCPBUGS-77536: Fix root partition before copying IRI registry data #2038
Full changelog

agent-installer-ui

MGMT-24152: UI allows editing pull secret in draft cluster (#3674) #3674
Update OWNERS file (#3654) #3654
Bump happy-dom from 20.0.2 to 20.8.9 (#3525) #3525
fix operators list in ABI below the sea (#3599) #3599
OCPBUGS-81589: bump react-router-dom-v5-compat to ^6.30.3 to address CVE-2026-22029 (#3581) #3581
OCPBUGS-83303: bump axios to ^1.15.0 for fixing CVE-2026-40175 (#3583) #3583
OCPBUGS-81587: upgrade lodash and lodash-es to 4.17.23 to address CVE-2025-13465 (#3535) #3535
Add support for release branches in PR workflow (#3528) #3528
populate default values in local ui from infraEnv (#3503) #3503
Full changelog

agent-installer-utils

OCPBUGS-83852: Pass environment through to podman #292
OCPBUGS-82588: Update OCP version in Konflux #285
OCPBUGS-82539: Update Konflux references #265
OCPBUGS-81645: Update operator versions #282
OCPBUGS-78393: Update Konflux release version to 4.21.5 #270
OCPBUGS-78188: Add a flag to provide a custom appliance image #273
OCPBUGS-78144: Update to use the 4.21 Catalog #271
OCPBUGS-77538: (Backport) Override prefilled rendezvousIP #263
OCPBUGS-77302: Remove multiple redhat-operator-index catalogs #262
OCPBUGS-77236: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 2f3015a #222
OCPBUGS-77220: Update Konflux references #251
OCPBUGS-76590: Update Konflux files to build 4.21.1 #254
OCPBUGS-76411: Include additional operators in OVE config #253
AGENT-1431: Backport feature NoRegistryClusterInstall to 4.21 #248
OCPBUGS-74935: Update Konflux references #220
Full changelog

aws-cloud-controller-manager

OCPCLOUD-3341: Updates ecr-credential-provider make target #134
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-80844: Bump google.golang.org/grpc to v1.79.3 #539
OCPBUGS-78779: Fix readonly root fs in Azure init containers #528
OCPBUGS-78155: Add only to tags to volume object, if volume is not already tagged #521
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-69804: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:765f4352a0be4a8f1160e83293fa8668a5f349b1 (765f435) into release-4.21 #154
Full changelog

azure-cluster-api-controllers

OCPBUGS-80740: Bump google.golang.org/grpc to v1.79.3 #383
Full changelog

azure-disk-csi-driver

UPSTREAM: 3569: OCPBUGS-80741: Bump grpc to v1.79.3 #137
OCPBUGS-78012: 4.21 rebase v1.34.2 #126
OCPBUGS-69655: fix ASH static provision segmentation fault #118
OCPBUGS-67305: fix: disk creation failure in AzureStack env #116
Full changelog

azure-file-csi-driver

UPSTREAM: 3023: OCPBUGS-80744: Bump grpc to v1.79.3 #125
Full changelog

azure-kms-encryption-provider

OCPBUGS-62405: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.21 #23
Full changelog

azure-service-operator

OCPBUGS-80713: Bump google.golang.org/grpc to v1.79.3 #28
OCPBUGS-83864: UPSTREAM: <carry>: add openshift/e2e-tests.sh #24
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-84225: ibmcloud: bump vpc-go-sdk and capibm #10514
OCPBUGS-82439: [release-4.21] Mount pullsecret manifest to UI container #10489
OCPBUGS-79074: [release 4.21] - Allow all instance types in the install config for GCP #10417
OCPBUGS-79378: Use correct Project ID with GCP Shared VPC #10423
OCPBUGS-79424: Do not discard NMStateConfig when agent-config is on disk for unconfigured-ignition #10428
OCPBUGS-79421: Fix race condition: wait for agent-register-infraenv before showing UI URL #10425
no-jira: fix SC2328 shellcheck errors #10424
OCPBUGS-77900: Add c8g* to tested_instance_types_aarch64 #10366
OCPBUGS-79375: Don’t auto-calculate RendezvousIP in unconfigured-ignition #10410
OCPBUGS-78696: [release-4.21] : Disable LoadBalancer in cloud config when Octavia is unavailable #10399
OCPBUGS-78241: Increase timeout for waiting control plane #10383
OCPBUGS-77504: fix wavelength zone name regex #10343
OCPBUGS-77551: Increase size of /var/ostreecontainer mount #10346
OCPBUGS-73878: handle SSH rule deletion for Azure private #10225
OCPBUGS-76358: [release-4.21] Fix destroy bootstrap command for Azure #10293
AGENT-1431: Backport feature NoRegistryClusterInstall to 4.21 #10250
OCPBUGS-74672: [release-4.21] GCP: skip AI zones #10272
Full changelog

baremetal-operator

OCPBUGS-65683: OCPBUGS-78835: PR2774 and PR2793 backports [release-4.21] #469
Bug OCPBUGS-76492: BMO fails to start servicing despite updates to HFC spec #459
Full changelog

baremetal-runtimecfg

OCPBUGS-77168: Install dbus-tools, needed in pkg/monitor/dnsmasqmonitor.go #383
Full changelog

cli, cli-artifacts, deployer, tools

MCO-1961: Allow multiple machine-os versions #2244
COS-4005: Allow periods in display name labels for version validation #2243
OCPBUGS-77486: Makefile: Strip debugging symbols by default #2211
OCPBUGS-77168: Install subscription-manager in required images #2208
Full changelog

cloud-credential-operator

OCPBUGS-79367: google.golang.org/grpc v1.79.3 #993
OCPBUGS-78199: Fix infrastructure resource name filtering in watch predicate #988
OCPBUGS-71222: test-ext: remove kubernetes module dependency #958
OCPBUGS-74545: Resolve nil pointer exception in hasResourceTags #969
Full changelog

cloud-network-config-controller

OCPBUGS-77154: Refrain from adding Egress IP to public LB backend pool #205
Full changelog

cluster-authentication-operator

OCPBUGS-81677: Do not return error when an IdP returns 500 during a grant check #868
OCPBUGS-74418: Bump library-go to get KMS #847
OCPBUGS-74418: carry test assertion #848
OCPBUGS-74418: Conditionally add the KMS plugin volume mount to the oauth-apiserver container #846
OCPBUGS-74418: Add KMS test scenarios #844
Full changelog

cluster-autoscaler

OCPBUGS-78684: allow clusterapi provider to skip paused resources #410
OCPBUGS-76296: Pick upstream commits to Fix VPA recommender concurrent access panic #404
Full changelog

cluster-baremetal-operator

OCPBUGS-78580: Allow ProvisioningCIDR for unmanaged network #576
OCPBUGS-77418: Fix ironic-proxy service routing for port 6385 #560
OCPBUGS-77035: Update kubebuilder tools to more latest version #558
OCPBUGS-74204: Fix libguestfs /tmp access in machine-os-downloader init container #551
OCPBUGS-70163: Remove the writable ironic CA cert volume mount at /certs/ca/ironic path, ironic will use the writable /conf mount if needed #541
Full changelog

cluster-config-api

OCPBUGS-83756: fix(config/v1): define constants for authentication types as typed constants #2815
CNTRLPLANE-2796: promote the event-ttl feature #2809
OCPBUGS-82578: [release-4.21] postpone the removal of the DeploymentConfig API #2801
OCPBUGS-74418: Introduce KMSEncryption feature gate #2670
OCPBUGS-76408: Move DynamicConfigurationManager back to TPNU #2703
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-82971: Fix PDB unhealthyPodEvictionPolicy field name #272
OCPBUGS-74301: Re-add serving cert volume mount to hypershift guest cluster manifest #267
Full changelog

cluster-etcd-operator

OCPBUGS-77921: Prefer to remove members where they have another healthy machine in the same failure domain index #1563
OCPBUGS-77097: Wait for revision stability before removing etcd members #1555
OCPBUGS-74489: configure inertia for all controllers, bump to 10m #1535
Full changelog

cluster-ingress-operator

OCPBUGS-82544: set trustBundleName in Istio global values #1418
OCPBUGS-77432, OCPBUGS-77433: Ensure canary cert matches the default ingress controller’s cert #1367
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-83855: Allow setting the oauthMetadata when auth type is None #2116
OCPBUGS-78548: [release-4.21] : Always set service-account-jwks-uri to LB URL even with custom issuer #2071
OCPBUGS-78784: [4.21] move event-ttl test to its own suite #2073
OCPBUGS-74418: Bump library-go to get KMS #2063
OCPBUGS-77969: Add support for event-ttl cases and go test cases in Kube API Server Operator #2066
OCPBUGS-74418: Carry test assertion #2064
OCPBUGS-74418: Conditionally add the KMS plugin volume mount to the kube-apiserver container #2061
OCPBUGS-74418: Add KMS test scenarios #2054
OCPBUGS-74181: SCC: allow image volume type for all SCCs #2007
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-83737: add /var/run/kubernetes as emptyDir #641
CNTRLPLANE-2843: chore: update OWNERS #619
Full changelog

cluster-monitoring-operator

OCPBUGS-80765: bump 4.21 grpc to v1.79.3 #2875
OCPBUGS-74425: Include kube_pod_labels in minimal profile #2797
OCPBUGS-77908: [release-4.21] add app.kubernetes.io/part-of=openshift-monitoring label to thanos-ruler pod #2840
OCPBUGS-76541: Fix NodeRAIDDegraded & NodeRAIDDiskFailure alerts #2815
OCPBUGS-77271: AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change #2829
OCPBUGS-74622: update expr for AlertmanagerClusterFailedToSendAlerts to exclude value 0 #2804
Full changelog

cluster-network-operator

OCPBUGS-83422: wait for patch port to apply drop garp flows #2946
OCPBUGS-76333: Silence ovnkube-lib.sh to avoid mass of logs to collectors #2900
OCPBUGS-77147: Add config override for openflow-probe #2917
OCPBUGS-76285: Remove duplicated openssl parameter #2899
Full changelog

cluster-node-tuning-operator

OCPBUGS-81122: CNF-21333: [4.21]:perfprof: enable exec-cpu-affinity by default #1484
OCPBUGS-76375: AA: E2E: LLC: Add tests related to odd cpus #1467
OCPBUGS-77464: E2E: Add test case to check Infrastructure pods affinity #1476
OCPBUGS-78173: workloadhints: use IsVM to skip BM-only tests #1480
Full changelog

cluster-olm-operator

OCPBUGS-80769: Bump google.golang.org/grpc to v1.79.3 #197
OCPBUGS-76269: add resources to clusterOperator relatedObjects #170
OCPBUGS-81311: Fix golangci-lint timeout in CI #189
OCPBUGS-77826: cluster-olm-operator sets Progressing=True during upgrade #177
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-74418: Bump library-go to get KMS #666
OCPBUGS-74418: Conditionally add the KMS plugin volume mount to the openshift-apiserver container #664
OCPBUGS-74418: Add KMS test scenarios #656
Full changelog

cluster-storage-operator

OCPBUGS-79531: volume-data-source-validator should run on master nodes #687
OCPBUGS-74569: add vsphere permissions for checking if users is authorized to see metrics #660
Full changelog

cluster-version-operator

OCPBUGS-77256: Implement mTLS authentication and authorization for CVO metrics endpoint #1326
Full changelog

console

OCPBUGS-85040: Remove PII from events #16401
OCPBUGS-84967: Add bottom pagination to ConsoleDataView for mobile responsiveness #16396
OCPBUGS-84858: Fix ConsoleDataView filter order: Name and Label shoul… #16386
OCPBUGS-83494: remove dev to admin links as dev monitoring views are enabled #16164
OCPBUGS-83572: fix Developer Sandbox telemetry #16286
OCPBUGS-83418: Fix resource log dropdown TypeError #16281
OCPBUGS-81517: Follow up on fixing the remaining issues in the multi-group impersonation feature #16236
OCPBUGS-81714: Add missing i18n translations for Pagination component #16255
OCPBUGS-79351: Make folder field optional for vsphere #16189
OCPBUGS-79040: Fix incorrect OLMv1 documentation URL #16186
OCPBUGS-81308: Fix VolumeSnapshot and VolumeSnapshotContent tables sorting #16216
OCPBUGS-79037: Fix useOperatorCatalogCategories hook. #16185
OCPBUGS-81330: Fix entire app suspending to load perspective switcher icon #16226
OCPBUGS-81488: Add robots.txt policy to console #16227
OCPBUGS-80931: Hide filter category selector when only one filter exists #16199
OCPBUGS-77246: AsyncComponent type improvements #16058
OCPBUGS-79035: Fix TypeError in OLS code import to console #16184
OCPBUGS-78799: Fix search component to not pass ALL_NAMESPACES_KEY to… #16170
OCPBUGS-79533: enable keyboard shortcut for DataViewTextFilter #16195
OCPBUGS-78927, OCPBUGS-78928: OLM prompts for GCP Workload Identity parameters during Kiali Operato… #16176
OCPBUGS-78308: “Import from Git” should not force HTTPS/443 for Git providers (GitHub/GitLab/Bitbucket) #16050
OCPBUGS-78599: Migrate InstallPlan components table to PatternFly Table #16159
OCPBUGS-78599: Reset pagination page when changing namespace #16158
OCPBUGS-77029: Fixed Metrics page React error #306 by exporting QueryBrowser component #16038
OCPBUGS-77251: Fix editing secrets with mixed text and binary data #16060
OCPBUGS-77561: Fix ConsolePluginStatus icon #16090
OCPBUGS-75000: Clean up old session cookies to prevent accumulation #15985
OCPBUGS-77957: [CI] Fix the VolumeSnapshot CRUD flaky test failures #16118
OCPBUGS-77882: Fix infinite recursion in project access form #16112
OCPBUGS-65948: prep for 4.21 GA SDK publish #16116
OCPBUGS-76385: Workloads - Edit pod count and Edit parallelism : Content is in English #16005
OCPBUGS-76387: DataView Pagination page menus : i18n misses #16007
OCPBUGS-76386: i18n upload/download routine task - 4.21 / 281 (Latest) #16006
OCPBUGS-77430: run and enforce yarn dedupe #16075
CONSOLE-5011: migrate to yarn berry #16059
OCPBUGS-76389: Use Actions button instead of kebab menu on Subscription details page #16008
OCPBUGS-74998: Fix referenceFor parameter in SubscriptionDetailsPage #15984
Full changelog

console-operator

OCPBUGS-82037: Redeploy console pods upon cert rotation #1139
OCPBUGS-78929: Remove orphaned console-conversion-webhook deployment and related resource #1128
Sync Dockerfile.ocp image #1126
OCPBUGS-72562: Add missing relatedObjects + small refactoring #1090
OCPBUGS-74686: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads #1104
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

UPSTREAM-SYNC: Sync release-4.21 with upstream release-1.34 #371
Full changelog

csi-driver-nfs

OCPBUGS-80783: CVE-2026-33186: bump google.golang.org/grpc v1.79.3 #176
Full changelog

docker-builder

OCPBUGS-70149: bump buildah to 1.39.7 to fix CVE-2025-52881 #495
Full changelog

driver-toolkit

OCPBUGS-78535: Support ubi minimal base image #186
OCPBUGS-77887: Clean up cruft in /var/cache/dnf #183
Full changelog

gcp-cloud-controller-manager

OCPBUGS-83615: Fix OSD ILB bug #108
Full changelog

gcp-cluster-api-controllers

OCPBUGS-74915: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.11.0 (1cb204d) into release-4.21 #262
Full changelog

gcp-pd-csi-driver

OCPBUGS-77716: Support Downward API node name #101
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-77494: Pass node name to csi-driver container #173
OCPBUGS-77310: Add RBAC permission for node driver to get Node objects #171
Full changelog

haproxy-router

OCPBUGS-79374: Lower verbosity for parseIPList empty list logging #752
Full changelog

hyperkube, kube-proxy, pod

“OCPBUGS-83608: Bump to k8s v1.34.7” #2647
NO-JIRA: UPSTREAM: <carry>: Add jacobsee and jubittajohn to DOWNSTREAM_OWNERS #2636
OCPBUGS-78991: Bump 1.34.6 to release-4.21 #2634
OCPBUGS-77475: Bump v1.34.5 to release-4.21 #2601
OCPBUGS-76516: Bump v1.34.4 #2590
OCPBUGS-74975: UPSTREAM: 136594: raise kubelet CSI init backoff to cover ~140s DNS delays #2580
Full changelog

hypershift

OCPBUGS-76447: Add UserAgent telemetry to CPO Azure SDK clients #7685
OCPBUGS-81745: [release-4.21] Honor AWS AMI override in NodePool token generation #8170
OCPBUGS-81836: OCPBUGS-81670: fix(cpo-v2): preserve HCCO modifications to OCM Controllers field #8157
OCPBUGS-81490: fix(cpo): skip router LB services for ARO HCP #8135
OCPBUGS-77966: fix: global-pull-secret-syncer pod ~15-minute delay scheduling on new nodes #8129
OCPBUGS-81287: fix(release): allow multiple machine-os component versions #8103
OCPBUGS-81285: fix(releaseinfo): allow periods in version display name regex #8102
OCPBUGS-78933: fix(cpo): Don’t remove HCP Ingress from routes when CapabilityRoute is disabled #8014
CNTRLPLANE-3006: Azure web identity webhook 4.21 #7997
OCPBUGS-78957: fix(hostedcluster): Remove referenced resource annotations regardless of hcp status #7975
OCPBUGS-78473: Fix deadlock when changing release image during initial provisioning #7954
OCPBUGS-78484: fix(catalogs): update catalog image version cap to 4.21 #7956
OCPBUGS-77456: Add dynamic NodePort range validation #7820
OCPBUGS-77647: remove resource limits from Agent CAPI provider #7844
OCPBUGS-78304: Fix context cancel accumulation in getMirrorFromICSPOrIDMS #7891
OCPBUGS-78196: fix(sync-global-pullsecret): compare content ignoring trailing newlines #7914
CNTRLPLANE-2812: feat(aro): Swift support #7826
OCPBUGS-77365: Fix ignition-server pod restarts due to MIRRORED_RELEASE_IMAGE flapping #7834
OCPBUGS-75930: [release-4.21] fix(cpo): Correct route labeling logic for HCP router infrastructure #7641
OCPBUGS-75884: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7632
fix: OCPBUGS-74104: Fix CVE-2025-58183 #7545
OCPBUGS-71133: fix(ingress): clear LoadBalancerSourceRanges when AllowedCIDRBlocks is removed #7433
OCPBUGS-74893: fix: add hypershift.openshift.io/nodepool-globalps-enabled label to be ignored in cluster-autoscaler deployment #7618
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-77203: [release-4.21] standardize build paths #121
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-66393: Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.21 #133
Full changelog

ibmcloud-machine-controllers

OCPBUGS-77445: [release-4.21] bump vpc go sdk #81
NO-JIRA: Modernize test infrastructure to align with other MAPI providers #84
Full changelog

insights-operator

OCPBUGS-81573: kubeletconfig gatherer #1266
OCPBUGS-79534: [release-4.21] Add OpenTelemetry CR Gatherer #1258
OCPBUGS-76960: Extends the time for the extractor liveness probe #1233
Full changelog

insights-runtime-exporter, insights-runtime-extractor

Updating ose-insights-runtime-extractor-container image to be consistent with ART for 4.21 #78
Updating ose-insights-runtime-exporter-container image to be consistent with ART for 4.21 #77
Updating ose-insights-runtime-exporter-container image to be consistent with ART for 4.21 #75
Updating ose-insights-runtime-exporter-container image to be consistent with ART for 4.21 #71
Updating ose-insights-runtime-extractor-container image to be consistent with ART for 4.21 #72
Revert “Bump Go to 1.25” #73
Bump Go to 1.25 #70
OCPBUGS-77491: remove dnf cache from the container images #64
Fix EAP 8.1 e2e test #65
Full changelog

ironic

OCPBUGS-84853: Bump pyasn to 0.5.1-5 #823
OCPBUGS-82298: Bump sushy hash to include Supermicro ARS-111GL-NHR fix #840
ART-14497: Fix ART builds with -minimal #809
OCPBUGS-76934: Bump keystonemiddleware version to 10.9.0-0.20260216145500.557d173 for CVE-2026-22797 fix #791
OCPBUGS-76474: Update requirements.cachito for 4.21 with heartbeat inspection fix commit #785
OCPBUGS-76282: Update ironic hash #780
OCPBUGS-74603: fix for minimal builds #774
OCPBUGS-74428: Bump eventlet version to latest bugfix #771
OCPBUGS-70156: Set the tls cacert path to writable mount when the IRONIC_CACERT_FILE is unset #753
Full changelog

ironic-agent

OCPBUGS-74603: fixes for minimal builds #241
Full changelog

ironic-machine-os-downloader

OCPBUGS-74204: Export TMPDIR to be available to child processes #112
Full changelog

keepalived-ipfailover

OCPBUGS-78048: openshift-enterprise-base: remove subscription-manager, dbus, systemd #226
Full changelog

kube-metrics-server

OCPBUGS-80716: Bump google.golang.org/grpc to v1.79.3 #61
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-76994: [release-4.21] Sync Upstream 2026-01-27 #61
Full changelog

kubevirt-csi-driver

OCPBUGS-79038: Add annotation-based fallback for infra VM node ID resolution #83
Full changelog

machine-api-operator

OCPBUGS-77943: Remove cluster-api-provider-libvirt references #1473
Full changelog

machine-config-operator

OCPBUGS-84941: Fix ssh and password rollbacks #5987
OCPBUGS-84970: Fix encapsulated IGN version #5996
OCPBUGS-84878: Update AMI Whitelist #5915
OCPBUGS-84253: improve JSON unmarshalling for secret decoding #5877
OCPBUGS-83874: Allow enablement of systemd units with existing files #5869
OCPBUGS-83708: Update AMI Whitelist #5857
OCPBUGS-83390: Use HA leader election defaults for MCO on SNO #5838
OCPBUGS-81711: When adding new nodes, MCD executes commands after setting the nodes’ state as Done #5836
OCPBUGS-79482: Skip boot image updates until cluster is stable #5804
OCPBUGS-79426: Update AMI Whitelist #5798
OCPBUGS-79372: set default-timeout-stop to 200s globally #5793
OCPBUGS-78800: Re-order logger setting to eliminate race condition #5779
OCPBUGS-78528: Fix e2e iri tests #5759
OCPBUGS-78201: kubelet: Less aggressive low memory reservation #5756
OCPBUGS-77833: Update AMI Whitelist #5743
OCPBUGS-77689: Create admin-ack gates for azure/vsphere clusters upgrading to 4.22 #5735
OCPBUGS-77577: Fix failure domain matching during vsphere boot image updates #5727
OCPBUGS-77534: Update AMI Whitelist #5722
OCPBUGS-77354: Clean up vsphere login error logging #5705
OCPBUGS-76555: Remove MCD liveness probe #5651
OCPBUGS-77072: mcd_config_drift not working properly #5675
OCPBUGS-76823: reduce MCO image size #5657
OCPBUGS-76833: Machine-config controller should not log about non-existent pull-secret changes #5659
OCPBUGS-73805: Prevent unnecessary systemd unit disable #5648
MCO-2017: Backport OSImageStreams to 4.21 #5515
OCPBUGS-76356: crio: disable short_name_mode until we introduce ctrcfg api for it #5636
OCPBUGS-76359: Update AMI script and list #5639
OCPBUGS-76271: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5624
AGENT-1431: Backport InternalReleaseImage support #5610
OCPBUGS-74145: enable nodeip-configuration for platform external #5581
Full changelog

machine-image-customization-controller

OCPBUGS-78536: Return error when network data Secret lacks nmstate key #171
OCPBUGS-77031: Add IPA messages for console and SSH login #163
OCPBUGS-77490: Clean up dnf cache to reduce container image size #164
Full changelog

monitoring-plugin

NO-JIRA: release-4.21 e2e-monitoring and e2e-coo working #904
OCPBUGS-83494: [release-4.21] feat: re enable dev console views #856
OCPBUGS-83304: [release-4.21] openshift4/ose-monitoring-plugin-rhel9: Axios: Remote Code Execution via Prototype Pollution escalation #890
OCPBUGS-82302: [release-4.21] fix: re encode params when redirecting from graph to query-browser #871
OCPBUGS-78358: fix for CVE-2025-69873 #845
NO-JIRA: [release-4.21] e2e-monitoring fixing loop on legacy dashboard #828
OCPBUGS-77227: [openshift-4.21] CVE-2026-25639 openshift4/ose-monitoring-plugin-rhel9:Axios affected by Denial of Service via proto Key in mergeConfig #795
OU-1062: [release-4.21] feat: mark alert menu active for incidents tab #761
NO-JIRA: [release-4.21] simplify frontend build in Dockerfile.art #808
OCPBUGS-74909: fix: update vulnerable dependencies #751
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-82064: Bump CNI version to 1.1.0 #284
Full changelog

multus-networkpolicy

OCPBUGS-77489: Clean up dnf cache #100
Full changelog

networking-console-plugin

OCPBUGS-81620: Update lodash to 4.18.1 for CVE-2026-4800 #372
OCPBUGS-83388: Fix CVE-2026-34043 in serialize-javascript #369
OCPBUGS-82161: Migrate to npm #359
OCPBUGS-66283, OCPBUGS-67252, OCPBUGS-70285, OCPBUGS-74473: Fix CVEs via upgrading yarn.lock #346
CNV-59877: Fix permissions request for NADs #353
OCPBUGS-77887: Clean up cruft in /var/cache/dnf #361
OCPBUGS-77225: Fix NAD creation using default namespace instead of selected one #349
CNV-77540: fix Enable MultiNetworkPolicies lead to invalid URL #341
CNV-74687: Fixing the title and redirect when deleting a vm network #340
Full changelog

oauth-server

OCPBUGS-77454: groupmapper: avoid mutating original group users slice when removing user #213
Full changelog

oc-mirror

OCPBUGS-82546: Only print catalog rebuild message if there are catalogs to rebuild #1388
OCPBUGS-82543: Fix printing collection messages with 0 collection items #1387
OCPBUGS-81743: Remove status field from CatalogSource, ClusterCatalog… #1383
CLID-549, OCPBUGS-78458: Update Dockerfile.tests to run Go integration tests #1371
OCPBUGS-77222: Fix registriesd “unknown userid” failure for arbitrary UIDs #1358
OCPBUGS-76126: Fix reg config detection for explicit false values #1349
OCPBUGS-74981: fix conversion issue for catalog #1346
OCPBUGS-74577: fix duplicated channel bug in filtered catalogs #1345
Full changelog

olm-catalogd, olm-operator-controller

OCPBUGS-79059: update OCP-75441 to support multi-arch[release-4.21] #671
OCPBUGS-74967: [release-4.21] enhance qe cases to make it more stable #626
Full changelog

openstack-cluster-api-controllers

UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.13 into release-4.21 #394
Full changelog

openstack-machine-api-provider

OCPBUGS-76789: Fix make test #156
OCPBUGS-69644: Don’t record event for every reconcile #146
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-80847, OCPBUGS-80848, OCPBUGS-80849: Bump google.golang.org/grpc to v1.79.3 for CVE-2026-33186[Release-4.21] #1289
OCPBUGS-79398: Fix SA restore resourceVersion conflict error #1266
OCPBUGS-79400: Fix nil pointer dereference in sortUnpackJobs when sorting non-failed jobs #1265
OCPBUGS-79380: enhance case to make it pass per test bundle change #1263
OCPBUGS-78558: Re-Apply Fix admin context race condition in parallel tests #1261
OCPBUGS-77712: Update NetworkPolicy egress to support HyperShift custom API ports #1246
OCPBUGS-77067: Remove the collect-profiles info from the microshift kustomization file #1234
OCPBUGS-76325: [release-4.21]remove qe case of testing collect-profiles #1222
OCPBUGS-76266: Remove the collect-profiles job #1220
Full changelog

operator-marketplace

OCPBUGS-77580: Update NetworkPolicy egress to support HyperShift custom API ports #729
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-81634, OCPBUGS-83814: Branch Sync release-4.22 to release-4.21 [04-16-2026] #3145
OCPBUGS-83566: Branch Sync release-4.22 to release-4.21 [03-25-2026] #3087
OCPBUGS-81475: node: fix serviceUpdateNotNeeded nil pointer comparison #3098
OCPBUGS-77257, OCPBUGS-78094: Branch Sync release-4.22 to release-4.21 [03-23-2026] #3080
OCPBUGS-78771: Branch Sync release-4.22 to release-4.21 [03-11-2026] #3050
OCPBUGS-76472: OCPBUGS-72532: Branch Sync release-4.22 to release-4.21 [12-19-2025] #3022
OCPBUGS-77147: Minimize ACLs by combining ipBlocks into single ACL #2995
OCPBUGS-77309: Clear stale conntrack UDP entries for nodePorts #3002
OCPBUGS-77046, OCPBUGS-77086: [release-4.21] combined backport PR for 2 escalations #2984
Full changelog

powervs-block-csi-driver

OCPBUGS-80852: Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 #127
OCPBUGS-82924: Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 #121
Full changelog

powervs-block-csi-driver-operator

Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.21 #107
OCPBUGS-80853: Fix CVE-2026-33186 by bumping google.golang.org/grpc to v1.79.3 #106
Full changelog

prometheus

OCPBUGS-78581: [release-4.21] chore(kubernetes): deduplicate warning logs from the API #298
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-77295: backport upstream fix to reconcile resources with inconsistent status #365
OCPBUGS-74477: Validate webhookURL secret for MSTeams receiver in AlertmanagerConfig CRD #359
Full changelog

route-controller-manager

OCPBUGS-76641: filter ingress namespace on UnmanagedRoutes metric #73
Full changelog

stream-coreos, stream-coreos-extensions

OCPBUGS-82523: post-process: Remove workaround for openvswitch additional group #1926
- [release-4.21] extensions: Add rhel-9.6-server-ose-4.21 #1914
NO-JIRA: [release-4.21] extensions: Fix repo name to match 4.21 #1913
COS-3946: Backport rhel-10.2 support to release-4.21 branch #1898
NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches #1889
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

telemeter

OCPBUGS-80868: Bump google.golang.org/grpc to v1.79.3 #589
OCPBUGS-81817: [release-1.21] Fix CVE-2026-34986 #593
Full changelog

tests

OCPBUGS-84978: Skip image-registry operator tests for Libvirt platform in upgrade jobs. #31123
OCPBUGS-84947: test: add monitortest to detect pods stuck in Pending state #31117
OCPBUGS-84947: Add [Late] test to collect CRI-O goroutine dumps via SIGUSR1 #31118
OCPBUGS-81638: Manual cherry-pick node swap feature testcases to 4.21 #30973
OCPBUGS-82064: Assert CNI version greater than equal to 1.0.0 #30977
OCPBUGS-81638: Add openshift/disruptive-longrunning testsuite in release-4.21 branch #30976
OCPBUGS-78780: changed http to https for three places to reduce test false positives and false negatives #30902
OCPBUGS-79365: Verify etc pod should start with oom_score_adj as system-node-critical #30916
OCPBUGS-78485: run resource request/limit check early #30879
OCPBUGS-78192: Exclude disruption during NoExecuteTaintManager serial tests #30857
OCPBUGS-78064: Update optimized builds test to use rpm -qa instead of dnf #30856
OCPBUGS-78064: Allow test to tolerate running on minimal images #30852
OCPBUGS-77823: add the missing namespace from managed openshift #30838
OCPBUGS-77826: Remove exception for monitoring OLM Progression condition #30839
OCPBUGS-77097: Add test for CPMS OnDelete strategy with full master replacement #30802
: OCPBUGS-76856:cert tests: mark TLS registry test as informing #30779
OCPBUGS-76529: Fix flakiness in MutableCSINodeAllocatableCount test #30772
OCPBUGS-76955: co/kube-storage-version-migrator reports Available=False in a non-upgrade job #30740
OCPBUGS-75513: adjust olm test to pass on a degraded run #30749
OCPBUGS-75513: update test logic for degraded cluster run #30748
Full changelog

thanos

OCPBUGS-84492: Revert “OCPBUGS-80870: CVE-2026-33186 openshift4/ose-thanos-rhel9: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation [openshift-4.21]” #180
OCPBUGS-80870: CVE-2026-33186 openshift4/ose-thanos-rhel9: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation [openshift-4.21] #174
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-80878: Bump google.golang.org/grpc to 1.79.3 #171
Full changelog

vsphere-csi-driver-operator

OCPBUGS-74701: Fix update of stable-generation annotation #330
Full changelog

vsphere-problem-detector

OCPBUGS-74706: fix concurrent map writes #207
Full changelog

Node Image Info

Loading node image info, this may take a while ...

CentOS Stream CoreOS 10 (`stream-coreos`)

Package List

cri-o-1.34.4-1.el10s
kernel-6.12.0-219.el10
openshift-kubelet-4.21.0-202604030310.p2.gdfffacd.assembly.stream.el9
systemd-257-23.el10

Full list (483 packages)

NetworkManager-1:1.56.0-1.el10
NetworkManager-cloud-setup-1:1.56.0-1.el10
NetworkManager-libnm-1:1.56.0-1.el10
NetworkManager-ovs-1:1.56.0-1.el10
NetworkManager-tui-1:1.56.0-1.el10
WALinuxAgent-udev-2.14.0.1-3.el10
aardvark-dns-2:1.17.0-1.el10
acl-2.3.2-4.el10
afterburn-5.10.0-1.el10
afterburn-dracut-5.10.0-1.el10
alternatives-1.30-2.el10
amd-gpu-firmware-20260130-22.el10
amd-ucode-firmware-20260130-22.el10
attr-2.5.2-5.el10
audit-4.0.3-5.el10
audit-libs-4.0.3-5.el10
audit-rules-4.0.3-5.el10
authselect-1.5.2-1.el10
authselect-libs-1.5.2-1.el10
avahi-libs-0.9~rc2-3.el10
azure-vm-utils-0.7.0-1.el10
basesystem-11-22.el10
bash-5.2.26-6.el10
bash-completion-1:2.11-16.el10
bind-libs-32:9.18.33-15.el10
bind-license-32:9.18.33-15.el10
bind-utils-32:9.18.33-15.el10
bootc-1.14.1-1.el10
bootupd-0.2.32-1.el10
bsdtar-3.7.7-7.el10
bubblewrap-0.10.0-3.el10
bzip2-1.0.8-25.el10
bzip2-libs-1.0.8-25.el10
c-ares-1.34.6-1.el10
ca-certificates-2025.2.80_v9.0.305-102.el10
catatonit-5:0.2.1-4.el10
centos-gpg-keys-10.0-21.el10
centos-release-cloud-1-1.el10s
centos-release-nfv-common-1-5.el10s
centos-release-virt-common-1-1.el10s
centos-stream-release-10.0-21.el10
centos-stream-repos-10.0-21.el10
checkpolicy-3.10-1.el10
chrony-4.8-1.el10
cifs-utils-7.5-2.el10
clevis-22-1.el10
clevis-dracut-22-1.el10
clevis-luks-22-1.el10
clevis-pin-tpm2-0.5.3-9.el10
clevis-systemd-22-1.el10
cloud-utils-growpart-0.33-11.el10
composefs-1.0.8-1.el10
composefs-libs-1.0.8-1.el10
conmon-3:2.2.1-3.el10
conmon-rs-0.6.6-2.el10s
console-login-helper-messages-0.21.3-10.el10
console-login-helper-messages-issuegen-0.21.3-10.el10
console-login-helper-messages-profile-0.21.3-10.el10
container-selinux-4:2.246.0-1.el10
containers-common-6:5.8-2.el10
containers-common-extra-6:5.8-2.el10
coreos-installer-0.26.0-1.el10
coreos-installer-bootinfra-0.26.0-1.el10
coreutils-9.5-7.el10
coreutils-common-9.5-7.el10
cpio-2.15-3.el10
cracklib-2.9.11-8.el10
cracklib-dicts-2.9.11-8.el10
cri-o-1.34.4-1.el10s
cri-tools-1.34.0-2.el10s
criu-4.2-3.el10
criu-libs-4.2-3.el10
crun-1.26-2.el10
crypto-policies-20260216-1.git0e54016.el10
crypto-policies-scripts-20260216-1.git0e54016.el10
cryptsetup-2.8.1-2.el10
cryptsetup-libs-2.8.1-2.el10
curl-8.12.1-4.el10
cyrus-sasl-gssapi-2.1.28-27.el10
cyrus-sasl-lib-2.1.28-27.el10
dbus-1:1.14.10-5.el10
dbus-broker-36-4.el10
dbus-common-1:1.14.10-5.el10
dbus-libs-1:1.14.10-5.el10
dbus-tools-1:1.14.10-5.el10
device-mapper-10:1.02.210-2.el10
device-mapper-event-10:1.02.210-2.el10
device-mapper-event-libs-10:1.02.210-2.el10
device-mapper-libs-10:1.02.210-2.el10
device-mapper-multipath-0.9.9-19.el10
device-mapper-multipath-libs-0.9.9-19.el10
device-mapper-persistent-data-1.3.0-1.el10
diffutils-3.10-8.el10
dmidecode-1:3.6-5.el10
dnf-4.20.0-23.el10
dnf-data-4.20.0-23.el10
dnsmasq-2.90-5.el10
dosfstools-4.2-12.el10
dracut-107-4.el10
dracut-network-107-4.el10
dracut-squash-107-4.el10
duktape-2.7.0-10.el10
e2fsprogs-1.47.1-5.el10
e2fsprogs-libs-1.47.1-5.el10
efi-filesystem-6-8.el10
efibootmgr-18-8.el10
efivar-libs-39-3.el10
elfutils-default-yama-scope-0.194-2.el10
elfutils-libelf-0.194-2.el10
elfutils-libs-0.194-2.el10
erofs-utils-1.8.10-1.el10
ethtool-2:6.15-2.el10
expat-2.7.3-1.el10
fcoe-utils-1.0.34-11.gitb233050.el10
file-5.45-9.el10
file-libs-5.45-9.el10
filesystem-3.18-17.el10
findutils-1:4.10.0-5.el10
firewalld-filesystem-2.4.0-1.el10
flatpak-session-helper-1.16.0-9.el10
fstrm-0.6.1-12.el10
fuse-common-3.16.2-5.el10
fuse-libs-2.9.9-25.el10
fuse3-3.16.2-5.el10
fuse3-libs-3.16.2-5.el10
fwupd-2.0.19-2.el10
gawk-5.3.0-6.el10
gdbm-1:1.23-14.el10
gdbm-libs-1:1.23-14.el10
gettext-envsubst-0.22.5-6.el10
gettext-libs-0.22.5-6.el10
gettext-runtime-0.22.5-6.el10
git-core-2.52.0-1.el10
glib2-2.80.4-12.el10
glibc-2.39-117.el10
glibc-common-2.39-117.el10
glibc-gconv-extra-2.39-117.el10
glibc-minimal-langpack-2.39-117.el10
gmp-1:6.2.1-12.el10
gnupg2-2.4.5-4.el10
gnutls-3.8.10-3.el10
gobject-introspection-1.79.1-6.el10
gpgme-1.23.2-6.el10
grep-3.11-10.el10
grub2-common-1:2.12-45.el10
grub2-efi-x64-1:2.12-45.el10
grub2-pc-1:2.12-45.el10
grub2-pc-modules-1:2.12-45.el10
grub2-tools-1:2.12-45.el10
grub2-tools-minimal-1:2.12-45.el10
gssproxy-0.9.2-10.el10
gzip-1.13-3.el10
hostname-3.23-14.el10
hwdata-0.379-10.8.el10
ignition-2.26.0-2.el10
ignition-grub-2.26.0-2.el10
ima-evm-utils-1.6.2-5.el10
info-7.1-6.el10
inih-58-3.el10
intel-gpu-firmware-20260130-22.el10
ipcalc-1.0.3-12.el10
iproute-6.17.0-2.el10
iproute-tc-6.17.0-2.el10
iptables-libs-1.8.11-12.el10
iptables-nft-1.8.11-12.el10
iputils-20240905-5.el10
irqbalance-2:1.9.4-6.el10
iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10
iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el10
isns-utils-libs-0.103-1.el10
jansson-2.14-3.el10
jose-14-102.el10
jq-1.7.1-11.el10
json-c-0.18-3.el10
json-glib-1.8.0-5.el10
kbd-2.6.4-7.el10
kbd-legacy-2.6.4-7.el10
kbd-misc-2.6.4-7.el10
kdump-utils-1.0.58-15.el10
kernel-6.12.0-219.el10
kernel-core-6.12.0-219.el10
kernel-modules-6.12.0-219.el10
kernel-modules-core-6.12.0-219.el10
kernel-modules-extra-6.12.0-219.el10
kexec-tools-2.0.32-3.el10
keyutils-1.6.3-5.el10
keyutils-libs-1.6.3-5.el10
kmod-31-13.el10
kmod-libs-31-13.el10
kpartx-0.9.9-19.el10
krb5-libs-1.21.3-9.el10
less-661-3.el10
libacl-2.3.2-4.el10
libaio-0.3.111-22.el10
libarchive-3.7.7-7.el10
libassuan-2.5.6-6.el10
libattr-2.5.2-5.el10
libbasicobjects-0.1.1-58.el10
libblkid-2.40.2-19.el10
libbpf-2:1.7.0-1.el10
libcap-2.69-7.el10
libcap-ng-0.8.4-6.el10
libcbor-0.11.0-3.el10
libcollection-0.7.0-58.el10
libcom_err-1.47.1-5.el10
libcomps-0.1.21-3.el10
libconfig-1.7.3-10.el10
libcurl-minimal-8.12.1-4.el10
libdhash-0.5.0-58.el10
libdnf-0.73.1-14.el10
libdnf-plugin-subscription-manager-1.30.14-1.el10
libdrm-2.4.128-1.el10
libeconf-0.6.2-4.el10
libedit-3.1-52.20230828cvs.el10
libev-4.33-15.el10
libevent-2.1.12-16.el10
libfdisk-2.40.2-19.el10
libffi-3.4.4-10.el10
libfido2-1.14.0-7.el10
libgcc-14.3.1-4.4.el10
libgcrypt-1.11.0-6.el10
libgomp-14.3.1-4.4.el10
libgpg-error-1.50-2.el10
libibverbs-61.0-1.el10
libicu-74.2-5.el10
libidn2-2.3.7-3.el10
libini_config-1.3.1-58.el10
libipa_hbac-2.12.0-1.el10
libjcat-0.2.2-2.el10
libjose-14-102.el10
libkcapi-1.5.0-3.el10
libkcapi-hasher-1.5.0-3.el10
libkcapi-hmaccalc-1.5.0-3.el10
libksba-1.6.7-2.el10
libldb-4.23.5-105.el10
libluksmeta-10-1.el10
libmaxminddb-1.9.1-4.el10
libmicrohttpd-1:1.0.0-3.el10
libmnl-1.0.5-7.el10
libmodulemd-2.15.0-12.el10
libmount-2.40.2-19.el10
libmspack-0.10.1-0.14.alpha.el10
libndp-1.9-2.el10
libnet-1.3-7.el10
libnetfilter_conntrack-1.0.9-12.el10
libnfnetlink-1.0.2-3.el10
libnfsidmap-1:2.8.3-7.el10
libnftnl-1.3.0-3.el10
libnghttp2-1.68.0-4.el10
libnl3-3.11.0-1.el10
libnvme-1.16.1-3.el10
libpath_utils-0.2.1-58.el10
libpcap-14:1.10.4-7.el10
libpciaccess-0.16-16.el10
libpkgconf-2.1.0-3.el10
libpwquality-1.4.5-12.el10
libref_array-0.1.5-58.el10
librepo-1.19.0-1.el10
libseccomp-2.5.6-1.el10
libselinux-3.10-1.el10
libselinux-utils-3.10-1.el10
libsemanage-3.10-1.el10
libsepol-3.10-1.el10
libsmartcols-2.40.2-19.el10
libsmbclient-4.23.5-105.el10
libsolv-0.7.33-2.el10
libss-1.47.1-5.el10
libsss_certmap-2.12.0-1.el10
libsss_idmap-2.12.0-1.el10
libsss_nss_idmap-2.12.0-1.el10
libsss_sudo-2.12.0-1.el10
libstdc++-14.3.1-4.4.el10
libtalloc-2.4.3-100.el10
libtasn1-4.20.0-1.el10
libtdb-1.4.14-100.el10
libtevent-0.17.1-100.el10
libtirpc-1.3.5-1.el10
libtool-ltdl-2.4.7-14.el10
libunistring-1.1-10.el10
liburing-2.12-1.el10
libusb1-1.0.29-3.el10
libutempter-1.2.1-15.el10
libuuid-2.40.2-19.el10
libuv-1:1.51.0-1.el10
libverto-0.3.2-10.el10
libverto-libev-0.3.2-10.el10
libwbclient-4.23.5-105.el10
libxcrypt-4.4.36-10.el10
libxml2-2.12.5-10.el10
libxmlb-0.3.24-1.el10
libxslt-1.1.39-8.el10
libyaml-0.2.5-16.el10
libzstd-1.5.5-9.el10
linux-firmware-20260130-22.el10
linux-firmware-whence-20260130-22.el10
lldpad-1.1.1-4.gitf1dd9eb.el10
lmdb-libs-0.9.32-4.el10
logrotate-3.22.0-5.el10
lsof-4.98.0-7.el10
lua-libs-5.4.6-7.el10
luksmeta-10-1.el10
lvm2-10:2.03.36-2.el10
lvm2-libs-10:2.03.36-2.el10
lz4-libs-1.9.4-8.el10
lzo-2.10-14.el10
makedumpfile-1.7.8-1.el10
mdadm-4.4-3.el10
microcode_ctl-4:20260210-1.el10
mokutil-2:0.7.2-4.el10
mpdecimal-2.5.1-12.el10
mpfr-4.2.1-8.el10
nano-8.1-3.el10
ncurses-base-6.4-15.20240127.el10
ncurses-libs-6.4-15.20240127.el10
net-tools-2.0-0.73.20160912git.el10
netavark-2:1.17.2-1.el10
nettle-3.10.1-1.el10
newt-0.52.24-5.el10
nfs-utils-1:2.8.3-7.el10
nftables-1:1.1.5-3.el10
nmap-ncat-4:7.92-5.el10
nmstate-2.2.59-1.el10
npth-1.6-21.el10
nss-altfiles-2.23.0-6.el10
numactl-libs-2.0.19-3.el10
numad-0.5-50.20251104git.el10
nvidia-gpu-firmware-20260130-22.el10
nvme-cli-2.16-2.el10
oniguruma-6.9.9-7.el10
open-vm-tools-13.0.10-1.el10
openldap-2.6.10-1.el10
openshift-clients-4.21.0-202603290052.p2.g9d9df34.assembly.stream.el9
openshift-kubelet-4.21.0-202604030310.p2.gdfffacd.assembly.stream.el9
openssh-9.9p1-24.el10
openssh-clients-9.9p1-24.el10
openssh-server-9.9p1-24.el10
openssl-1:3.5.5-2.el10
openssl-fips-provider-1:3.5.5-2.el10
openssl-libs-1:3.5.5-2.el10
openvswitch-selinux-extra-policy-1.0-36.el10s
openvswitch3.5-3.5.3-5.el10s
os-prober-1.81-9.el10
ose-aws-ecr-image-credential-provider-4.21.0-202603171946.p2.gfdc7f3f.assembly.stream.el9
ose-azure-acr-image-credential-provider-4.21.0-202603171055.p2.g83b3f9e.assembly.stream.el9
ose-crio-credential-provider-4.21.0-202603171055.p2.g83d4961.assembly.stream.el9
ose-gcp-gcr-image-credential-provider-4.21.0-202603171055.p2.g8732386.assembly.stream.el9
ostree-2025.7-1.el10
ostree-grub2-2025.7-1.el10
ostree-libs-2025.7-1.el10
p11-kit-0.26.2-1.el10
p11-kit-trust-0.26.2-1.el10
pam-1.6.1-10.el10
pam-libs-1.6.1-10.el10
passt-0^20251210.gd04c480-3.el10
passt-selinux-0^20251210.gd04c480-3.el10
pciutils-3.13.0-6.el10
pciutils-libs-3.13.0-6.el10
pcre2-10.44-1.el10.3
pcre2-syntax-10.44-1.el10.3
pkgconf-2.1.0-3.el10
pkgconf-m4-2.1.0-3.el10
pkgconf-pkg-config-2.1.0-3.el10
podman-7:5.8.0-2.el10
podman-sequoia-0.4.0~pqc.2-1.el10
policycoreutils-3.10-2.el10
policycoreutils-python-utils-3.10-2.el10
polkit-125-4.el10
polkit-libs-125-4.el10
popt-1.19-8.el10
procps-ng-4.0.4-11.el10
protobuf-c-1.5.0-6.el10
psmisc-23.6-8.el10
python3-3.12.12-6.el10
python3-audit-4.0.3-5.el10
python3-charset-normalizer-3.4.2-1.el10
python3-cloud-what-1.30.14-1.el10
python3-dateutil-1:2.9.0.post0-1.el10
python3-dbus-1.3.2-8.el10
python3-decorator-5.1.1-12.el10
python3-distro-1.9.0-5.el10
python3-dnf-4.20.0-23.el10
python3-dnf-plugin-versionlock-4.7.0-10.el10
python3-dnf-plugins-core-4.7.0-10.el10
python3-gobject-base-3.46.0-7.el10
python3-gobject-base-noarch-3.46.0-7.el10
python3-hawkey-0.73.1-14.el10
python3-idna-3.7-4.el10
python3-iniparse-0.5-10.el10
python3-inotify-0.9.6-36.el10
python3-libcomps-0.1.21-3.el10
python3-libdnf-0.73.1-14.el10
python3-librepo-1.19.0-1.el10
python3-libs-3.12.12-6.el10
python3-libselinux-3.10-1.el10
python3-libsemanage-3.10-1.el10
python3-pip-wheel-23.3.2-7.el10
python3-policycoreutils-3.10-2.el10
python3-requests-2.32.4-1.el10
python3-rpm-4.19.1.1-23.el10
python3-setools-4.6.0-3.el10
python3-six-1.16.0-16.el10
python3-subscription-manager-rhsm-1.30.14-1.el10
python3-systemd-235-11.el10
python3-urllib3-1.26.19-3.el10
qemu-guest-agent-18:10.1.0-16.el10
quota-1:4.09-10.el10
quota-nls-1:4.09-10.el10
rdma-core-61.0-1.el10
readline-8.2-11.el10
rpcbind-1.2.7-3.el10
rpm-4.19.1.1-23.el10
rpm-build-libs-4.19.1.1-23.el10
rpm-libs-4.19.1.1-23.el10
rpm-ostree-2026.1-4.el10
rpm-ostree-libs-2026.1-4.el10
rpm-plugin-selinux-4.19.1.1-23.el10
rpm-sequoia-1.10.1.1-2.el10
rpm-sign-libs-4.19.1.1-23.el10
rsync-3.4.1-3.el10
samba-client-libs-4.23.5-105.el10
samba-common-4.23.5-105.el10
samba-common-libs-4.23.5-105.el10
sed-4.9-5.el10
selinux-policy-42.1.19-1.el10
selinux-policy-targeted-42.1.19-1.el10
setup-2.14.5-7.el10
sg3_utils-1.48-7.el10
sg3_utils-libs-1.48-7.el10
shadow-utils-2:4.15.0-11.el10
shadow-utils-subid-2:4.15.0-11.el10
shared-mime-info-2.3-8.el10
shim-x64-15.8-5.el10
skopeo-2:1.22.0-2.el10
slang-2.3.3-8.el10
snappy-1.1.10-7.el10
socat-1.7.4.4-8.el10
sqlite-libs-3.46.1-5.el10
ssh-key-dir-0.1.4-9.el10
sssd-2.12.0-1.el10
sssd-ad-2.12.0-1.el10
sssd-client-2.12.0-1.el10
sssd-common-2.12.0-1.el10
sssd-common-pac-2.12.0-1.el10
sssd-ipa-2.12.0-1.el10
sssd-krb5-2.12.0-1.el10
sssd-krb5-common-2.12.0-1.el10
sssd-ldap-2.12.0-1.el10
sssd-nfs-idmap-2.12.0-1.el10
sssd-proxy-2.12.0-1.el10
stalld-1.26.3-1.el10
strace-6.12-3.el10
subscription-manager-1.30.14-1.el10
subscription-manager-rhsm-certificates-20220623-6.el10
sudo-1.9.17-4.p2.el10
systemd-257-23.el10
systemd-journal-remote-257-23.el10
systemd-libs-257-23.el10
systemd-pam-257-23.el10
systemd-udev-257-23.el10
tar-2:1.35-11.el10
tmux-3.3a-13.20230918gitb202a2f.el10
toolbox-0.3-3.el10
tpm2-tools-5.7-5.el10
tpm2-tss-4.1.3-6.el10
tpm2-tss-fapi-4.1.3-6.el10
tzdata-2026a-1.el10
unbound-anchor-1.24.2-7.el10
unbound-libs-1.24.2-7.el10
userspace-rcu-0.14.0-7.el10
util-linux-2.40.2-19.el10
util-linux-core-2.40.2-19.el10
vim-data-2:9.1.083-9.el10
vim-minimal-2:9.1.083-9.el10
virt-what-1.27-3.el10
which-2.21-44.el10
xfsprogs-6.16.0-1.el10
xmlsec1-1:1.2.39-3.el10
xmlsec1-openssl-1:1.2.39-3.el10
xz-1:5.6.2-4.el10
xz-libs-1:5.6.2-4.el10
zlib-ng-compat-2.2.3-3.el10
zram-generator-1.1.2-14.el10
zstd-1.5.5-9.el10

Changed:

NetworkManager 1:1.55.91-1.el10 → 1:1.56.0-1.el10
NetworkManager-cloud-setup 1:1.55.91-1.el10 → 1:1.56.0-1.el10
NetworkManager-libnm 1:1.55.91-1.el10 → 1:1.56.0-1.el10
NetworkManager-ovs 1:1.55.91-1.el10 → 1:1.56.0-1.el10
NetworkManager-tui 1:1.55.91-1.el10 → 1:1.56.0-1.el10
WALinuxAgent-udev 2.14.0.1-2.el10 → 2.14.0.1-3.el10
aardvark-dns 2:1.16.0-2.el10 → 2:1.17.0-1.el10
amd-gpu-firmware 20260107-21.el10 → 20260130-22.el10
amd-ucode-firmware 20260107-21.el10 → 20260130-22.el10
authselect 1.5.0-8.el10 → 1.5.2-1.el10
authselect-libs 1.5.0-8.el10 → 1.5.2-1.el10
avahi-libs 0.9~rc2-2.el10 → 0.9~rc2-3.el10
bind-libs 32:9.18.33-13.el10 → 32:9.18.33-15.el10
bind-license 32:9.18.33-13.el10 → 32:9.18.33-15.el10
bind-utils 32:9.18.33-13.el10 → 32:9.18.33-15.el10
bootc 1.12.1-2.el10 → 1.14.1-1.el10
bsdtar 3.7.7-4.el10 → 3.7.7-7.el10
catatonit 5:0.2.1-1.el10 → 5:0.2.1-4.el10
centos-gpg-keys 10.0-19.el10 → 10.0-21.el10
centos-stream-release 10.0-19.el10 → 10.0-21.el10
centos-stream-repos 10.0-19.el10 → 10.0-21.el10
checkpolicy 3.9-1.el10 → 3.10-1.el10
cifs-utils 7.4-1.el10 → 7.5-2.el10
clevis 21-9.el10 → 22-1.el10
clevis-dracut 21-9.el10 → 22-1.el10
clevis-luks 21-9.el10 → 22-1.el10
clevis-systemd 21-9.el10 → 22-1.el10
conmon 3:2.1.13-1.el10 → 3:2.2.1-3.el10
container-selinux 4:2.244.0-1.el10 → 4:2.246.0-1.el10
containers-common 5:0.64.0-4.el10 → 6:5.8-2.el10
containers-common-extra 5:0.64.0-4.el10 → 6:5.8-2.el10
coreos-installer 0.25.0-1.el10 → 0.26.0-1.el10
coreos-installer-bootinfra 0.25.0-1.el10 → 0.26.0-1.el10
coreutils 9.5-6.el10 → 9.5-7.el10
coreutils-common 9.5-6.el10 → 9.5-7.el10
criu 4.2-1.el10 → 4.2-3.el10
criu-libs 4.2-1.el10 → 4.2-3.el10
crun 1.25.1-1.el10 → 1.26-2.el10
crypto-policies 20251127-1.git27c2902.el10 → 20260216-1.git0e54016.el10
crypto-policies-scripts 20251127-1.git27c2902.el10 → 20260216-1.git0e54016.el10
device-mapper 10:1.02.206-3.el10 → 10:1.02.210-2.el10
device-mapper-event 10:1.02.206-3.el10 → 10:1.02.210-2.el10
device-mapper-event-libs 10:1.02.206-3.el10 → 10:1.02.210-2.el10
device-mapper-libs 10:1.02.206-3.el10 → 10:1.02.210-2.el10
device-mapper-multipath 0.9.9-15.el10 → 0.9.9-19.el10
device-mapper-multipath-libs 0.9.9-15.el10 → 0.9.9-19.el10
dnf 4.20.0-19.el10 → 4.20.0-23.el10
dnf-data 4.20.0-19.el10 → 4.20.0-23.el10
dracut 107-3.el10 → 107-4.el10
dracut-network 107-3.el10 → 107-4.el10
dracut-squash 107-3.el10 → 107-4.el10
efi-filesystem 6-6.el10 → 6-8.el10
elfutils-default-yama-scope 0.194-1.el10 → 0.194-2.el10
elfutils-libelf 0.194-1.el10 → 0.194-2.el10
elfutils-libs 0.194-1.el10 → 0.194-2.el10
file 5.45-8.el10 → 5.45-9.el10
file-libs 5.45-8.el10 → 5.45-9.el10
flatpak-session-helper 1.16.0-7.el10 → 1.16.0-9.el10
fwupd 1.9.31-1.el10 → 2.0.19-2.el10
glib2 2.80.4-11.el10 → 2.80.4-12.el10
glibc 2.39-99.el10 → 2.39-117.el10
glibc-common 2.39-99.el10 → 2.39-117.el10
glibc-gconv-extra 2.39-99.el10 → 2.39-117.el10
glibc-minimal-langpack 2.39-99.el10 → 2.39-117.el10
gnupg2 2.4.5-3.el10 → 2.4.5-4.el10
gnutls 3.8.10-2.el10 → 3.8.10-3.el10
grub2-common 1:2.12-36.el10 → 1:2.12-45.el10
grub2-efi-x64 1:2.12-36.el10 → 1:2.12-45.el10
grub2-pc 1:2.12-36.el10 → 1:2.12-45.el10
grub2-pc-modules 1:2.12-36.el10 → 1:2.12-45.el10
grub2-tools 1:2.12-36.el10 → 1:2.12-45.el10
grub2-tools-minimal 1:2.12-36.el10 → 1:2.12-45.el10
hwdata 0.379-10.6.el10 → 0.379-10.8.el10
ignition 2.25.1-1.el10 → 2.26.0-2.el10
ignition-grub 2.25.1-1.el10 → 2.26.0-2.el10
ima-evm-utils 1.6.2-4.el10 → 1.6.2-5.el10
intel-gpu-firmware 20260107-21.el10 → 20260130-22.el10
iproute 6.17.0-1.el10 → 6.17.0-2.el10
iproute-tc 6.17.0-1.el10 → 6.17.0-2.el10
kdump-utils 1.0.58-7.el10 → 1.0.58-15.el10
kernel 6.12.0-191.el10 → 6.12.0-219.el10
kernel-core 6.12.0-191.el10 → 6.12.0-219.el10
kernel-modules 6.12.0-191.el10 → 6.12.0-219.el10
kernel-modules-core 6.12.0-191.el10 → 6.12.0-219.el10
kernel-modules-extra 6.12.0-191.el10 → 6.12.0-219.el10
kexec-tools 2.0.32-2.el10 → 2.0.32-3.el10
kmod 31-12.el10 → 31-13.el10
kmod-libs 31-12.el10 → 31-13.el10
kpartx 0.9.9-15.el10 → 0.9.9-19.el10
krb5-libs 1.21.3-8.el10 → 1.21.3-9.el10
libarchive 3.7.7-4.el10 → 3.7.7-7.el10
libblkid 2.40.2-13.el10 → 2.40.2-19.el10
libdnf 0.73.1-12.el10 → 0.73.1-14.el10
libdnf-plugin-subscription-manager 1.30.11-1.el10 → 1.30.14-1.el10
libfdisk 2.40.2-13.el10 → 2.40.2-19.el10
libgcc 14.3.1-4.2.el10 → 14.3.1-4.4.el10
libgomp 14.3.1-4.2.el10 → 14.3.1-4.4.el10
libibverbs 57.0-2.el10 → 61.0-1.el10
libldb 4.23.4-101.el10 → 4.23.5-105.el10
libmount 2.40.2-13.el10 → 2.40.2-19.el10
libnfsidmap 1:2.8.3-3.el10 → 1:2.8.3-7.el10
libnftnl 1.3.0-2.el10 → 1.3.0-3.el10
libnghttp2 1.64.0-2.el10 → 1.68.0-4.el10
libnvme 1.16.1-2.el10 → 1.16.1-3.el10
libselinux 3.9-3.el10 → 3.10-1.el10
libselinux-utils 3.9-3.el10 → 3.10-1.el10
libsemanage 3.9-2.el10 → 3.10-1.el10
libsepol 3.9-1.el10 → 3.10-1.el10
libsmartcols 2.40.2-13.el10 → 2.40.2-19.el10
libsmbclient 4.23.4-101.el10 → 4.23.5-105.el10
libsolv 0.7.33-1.el10 → 0.7.33-2.el10
libstdc++ 14.3.1-4.2.el10 → 14.3.1-4.4.el10
libtool-ltdl 2.4.7-13.el10 → 2.4.7-14.el10
libuuid 2.40.2-13.el10 → 2.40.2-19.el10
libwbclient 4.23.4-101.el10 → 4.23.5-105.el10
libxml2 2.12.5-9.el10 → 2.12.5-10.el10
linux-firmware 20260107-21.el10 → 20260130-22.el10
linux-firmware-whence 20260107-21.el10 → 20260130-22.el10
lvm2 10:2.03.32-3.el10 → 10:2.03.36-2.el10
lvm2-libs 10:2.03.32-3.el10 → 10:2.03.36-2.el10
microcode_ctl 4:20251111-1.el10 → 4:20260210-1.el10
mpfr 4.2.1-6.el10 → 4.2.1-8.el10
ncurses-base 6.4-14.20240127.el10 → 6.4-15.20240127.el10
ncurses-libs 6.4-14.20240127.el10 → 6.4-15.20240127.el10
netavark 2:1.16.0-1.el10 → 2:1.17.2-1.el10
nfs-utils 1:2.8.3-3.el10 → 1:2.8.3-7.el10
nmstate 2.2.57-1.el10 → 2.2.59-1.el10
nss-altfiles 2.23.0-5.el10 → 2.23.0-6.el10
nvidia-gpu-firmware 20260107-21.el10 → 20260130-22.el10
open-vm-tools 13.0.5-1.el10 → 13.0.10-1.el10
openshift-clients 4.21.0-202601170322.p2.g19a2243.assembly.stream.el9 → 4.21.0-202603290052.p2.g9d9df34.assembly.stream.el9
openshift-kubelet 4.21.0-202601200721.p2.g4d58ab3.assembly.stream.el9 → 4.21.0-202604030310.p2.gdfffacd.assembly.stream.el9
openssh 9.9p1-19.el10 → 9.9p1-24.el10
openssh-clients 9.9p1-19.el10 → 9.9p1-24.el10
openssh-server 9.9p1-19.el10 → 9.9p1-24.el10
openssl 1:3.5.1-6.el10 → 1:3.5.5-2.el10
openssl-fips-provider 1:3.5.1-6.el10 → 1:3.5.5-2.el10
openssl-libs 1:3.5.1-6.el10 → 1:3.5.5-2.el10
openvswitch3.5 3.5.0-6.el10s → 3.5.3-5.el10s
ose-aws-ecr-image-credential-provider 4.21.0-202601070814.p2.g3365bc9.assembly.stream.el9 → 4.21.0-202603171946.p2.gfdc7f3f.assembly.stream.el9
ose-azure-acr-image-credential-provider 4.21.0-202601070814.p2.g83b3f9e.assembly.stream.el9 → 4.21.0-202603171055.p2.g83b3f9e.assembly.stream.el9
ose-crio-credential-provider 4.21.0-202601151825.p2.g41ac31f.assembly.stream.el9 → 4.21.0-202603171055.p2.g83d4961.assembly.stream.el9
ose-gcp-gcr-image-credential-provider 4.21.0-202601070814.p2.g8732386.assembly.stream.el9 → 4.21.0-202603171055.p2.g8732386.assembly.stream.el9
p11-kit 0.26.1-1.el10 → 0.26.2-1.el10
p11-kit-trust 0.26.1-1.el10 → 0.26.2-1.el10
pam 1.6.1-9.el10 → 1.6.1-10.el10
pam-libs 1.6.1-9.el10 → 1.6.1-10.el10
passt 0^20251210.gd04c480-2.el10 → 0^20251210.gd04c480-3.el10
passt-selinux 0^20251210.gd04c480-2.el10 → 0^20251210.gd04c480-3.el10
podman 7:5.6.0-2.el10 → 7:5.8.0-2.el10
policycoreutils 3.9-2.el10 → 3.10-2.el10
policycoreutils-python-utils 3.9-2.el10 → 3.10-2.el10
procps-ng 4.0.4-9.el10 → 4.0.4-11.el10
python3 3.12.12-3.el10 → 3.12.12-6.el10
python3-cloud-what 1.30.11-1.el10 → 1.30.14-1.el10
python3-dnf 4.20.0-19.el10 → 4.20.0-23.el10
python3-hawkey 0.73.1-12.el10 → 0.73.1-14.el10
python3-libdnf 0.73.1-12.el10 → 0.73.1-14.el10
python3-libs 3.12.12-3.el10 → 3.12.12-6.el10
python3-libselinux 3.9-3.el10 → 3.10-1.el10
python3-libsemanage 3.9-2.el10 → 3.10-1.el10
python3-policycoreutils 3.9-2.el10 → 3.10-2.el10
python3-rpm 4.19.1.1-21.el10 → 4.19.1.1-23.el10
python3-setools 4.6.0-2.el10 → 4.6.0-3.el10
python3-subscription-manager-rhsm 1.30.11-1.el10 → 1.30.14-1.el10
python3-urllib3 1.26.19-2.el10 → 1.26.19-3.el10
qemu-guest-agent 18:10.1.0-11.el10 → 18:10.1.0-16.el10
rdma-core 57.0-2.el10 → 61.0-1.el10
rpm 4.19.1.1-21.el10 → 4.19.1.1-23.el10
rpm-build-libs 4.19.1.1-21.el10 → 4.19.1.1-23.el10
rpm-libs 4.19.1.1-21.el10 → 4.19.1.1-23.el10
rpm-ostree 2025.12-1.el10 → 2026.1-4.el10
rpm-ostree-libs 2025.12-1.el10 → 2026.1-4.el10
rpm-plugin-selinux 4.19.1.1-21.el10 → 4.19.1.1-23.el10
rpm-sequoia 1.9.0.3-1.el10 → 1.10.1.1-2.el10
rpm-sign-libs 4.19.1.1-21.el10 → 4.19.1.1-23.el10
samba-client-libs 4.23.4-101.el10 → 4.23.5-105.el10
samba-common 4.23.4-101.el10 → 4.23.5-105.el10
samba-common-libs 4.23.4-101.el10 → 4.23.5-105.el10
sed 4.9-3.el10 → 4.9-5.el10
selinux-policy 42.1.14-1.el10 → 42.1.19-1.el10
selinux-policy-targeted 42.1.14-1.el10 → 42.1.19-1.el10
shadow-utils 2:4.15.0-9.el10 → 2:4.15.0-11.el10
shadow-utils-subid 2:4.15.0-9.el10 → 2:4.15.0-11.el10
skopeo 2:1.20.0-1.el10 → 2:1.22.0-2.el10
subscription-manager 1.30.11-1.el10 → 1.30.14-1.el10
sudo 1.9.17-2.p2.el10 → 1.9.17-4.p2.el10
systemd 257-21.el10 → 257-23.el10
systemd-journal-remote 257-21.el10 → 257-23.el10
systemd-libs 257-21.el10 → 257-23.el10
systemd-pam 257-21.el10 → 257-23.el10
systemd-udev 257-21.el10 → 257-23.el10
tar 2:1.35-10.el10 → 2:1.35-11.el10
toolbox 0.3-1.el10 → 0.3-3.el10
tpm2-tools 5.7-4.el10 → 5.7-5.el10
tpm2-tss 4.1.3-5.el10 → 4.1.3-6.el10
tpm2-tss-fapi 4.1.3-5.el10 → 4.1.3-6.el10
tzdata 2025c-1.el10 → 2026a-1.el10
unbound-anchor 1.20.0-15.el10 → 1.24.2-7.el10
unbound-libs 1.20.0-15.el10 → 1.24.2-7.el10
util-linux 2.40.2-13.el10 → 2.40.2-19.el10
util-linux-core 2.40.2-13.el10 → 2.40.2-19.el10
vim-data 2:9.1.083-6.el10 → 2:9.1.083-9.el10
vim-minimal 2:9.1.083-6.el10 → 2:9.1.083-9.el10

Removed:

libgudev 238-7.el10
libgusb 0.4.9-4.el10

Added:

fcoe-utils 1.0.34-11.gitb233050.el10
libconfig 1.7.3-10.el10
lldpad 1.1.1-4.gitf1dd9eb.el10
numad 0.5-50.20251104git.el10
podman-sequoia 0.4.0~pqc.2-1.el10

Extensions

Full list (112 packages)

NetworkManager-libreswan-1.2.30-2.el10.x86_64
binutils-2.41-65.el10.x86_64
binutils-gold-2.41-65.el10.x86_64
bison-3.8.2-9.el10.x86_64
cmake-filesystem-3.31.8-1.el10.x86_64
cpp-14.3.1-4.4.el10.x86_64
elfutils-debuginfod-client-0.194-2.el10.x86_64
elfutils-libelf-devel-0.194-2.el10.x86_64
flex-2.6.4-19.el10.x86_64
gcc-14.3.1-4.4.el10.x86_64
glibc-devel-2.39-117.el10.x86_64
groff-base-1.23.0-10.el10.x86_64
kernel-6.12.0-219.el10.x86_64
kernel-core-6.12.0-219.el10.x86_64
kernel-devel-6.12.0-219.el10.x86_64
kernel-headers-6.12.0-219.el10.x86_64
kernel-modules-6.12.0-219.el10.x86_64
kernel-modules-extra-6.12.0-219.el10.x86_64
kernel-rt-core-6.12.0-219.el10.x86_64
kernel-rt-devel-6.12.0-219.el10.x86_64
kernel-rt-modules-6.12.0-219.el10.x86_64
kernel-rt-modules-core-6.12.0-219.el10.x86_64
kernel-rt-modules-extra-6.12.0-219.el10.x86_64
krb5-pkinit-1.21.3-9.el10.x86_64
krb5-workstation-1.21.3-9.el10.x86_64
ldns-1.8.3-18.el10.x86_64
libkadm5-1.21.3-9.el10.x86_64
libmpc-1.3.1-7.el10.x86_64
libqb-2.0.8-6.el10.x86_64
libreswan-5.3-8.el10.x86_64
libreswan-minimal-5.3-8.el10.x86_64
libxcrypt-devel-4.4.36-10.el10.x86_64
libzstd-devel-1.5.5-9.el10.x86_64
lm_sensors-libs-3.6.0-20.el10.x86_64
m4-1.4.19-11.el10.x86_64
make-1:4.4.1-9.el10.x86_64
ncurses-6.4-15.20240127.el10.x86_64
nspr-4.36.0-8.el10.x86_64
nss-3.112.0-8.el10.x86_64
nss-softokn-3.112.0-8.el10.x86_64
nss-softokn-freebl-3.112.0-8.el10.x86_64
nss-sysinit-3.112.0-8.el10.x86_64
nss-tools-3.112.0-8.el10.x86_64
nss-util-3.112.0-8.el10.x86_64
openssl-devel-1:3.5.5-2.el10.x86_64
openvswitch3.5-ipsec-3.5.3-5.el10s.x86_64
pcp-conf-7.0.3-3.el10.x86_64
pcp-libs-7.0.3-3.el10.x86_64
perl-AutoLoader-5.74-514.el10.noarch
perl-B-1.89-514.el10.x86_64
perl-Carp-1.54-511.el10.noarch
perl-Class-Struct-0.68-514.el10.noarch
perl-Data-Dumper-2.189-512.el10.x86_64
perl-Digest-1.20-511.el10.noarch
perl-Digest-MD5-2.59-6.el10.x86_64
perl-DynaLoader-1.56-514.el10.x86_64
perl-Encode-4:3.21-511.el10.x86_64
perl-Errno-1.38-514.el10.x86_64
perl-Exporter-5.78-511.el10.noarch
perl-Fcntl-1.18-514.el10.x86_64
perl-File-Basename-2.86-514.el10.noarch
perl-File-Path-2.18-512.el10.noarch
perl-File-Temp-1:0.231.100-512.el10.noarch
perl-File-stat-1.14-514.el10.noarch
perl-FileHandle-2.05-514.el10.noarch
perl-Getopt-Long-1:2.58-3.el10.noarch
perl-Getopt-Std-1.14-514.el10.noarch
perl-HTTP-Tiny-0.088-512.el10.noarch
perl-IO-1.55-514.el10.x86_64
perl-IO-Socket-IP-0.42-512.el10.noarch
perl-IO-Socket-SSL-2.085-3.el10.noarch
perl-IPC-Open3-1.22-514.el10.noarch
perl-MIME-Base64-3.16-511.el10.x86_64
perl-Mozilla-CA-20231213-5.el10.noarch
perl-NDBM_File-1.17-514.el10.x86_64
perl-Net-SSLeay-1.94-8.el10.x86_64
perl-POSIX-2.20-514.el10.x86_64
perl-PathTools-3.91-512.el10.x86_64
perl-Pod-Escapes-1:1.07-511.el10.noarch
perl-Pod-Perldoc-3.28.01-512.el10.noarch
perl-Pod-Simple-1:3.45-511.el10.noarch
perl-Pod-Usage-4:2.03-511.el10.noarch
perl-Scalar-List-Utils-5:1.63-511.el10.x86_64
perl-SelectSaver-1.02-514.el10.noarch
perl-Socket-4:2.038-511.el10.x86_64
perl-Storable-1:3.32-511.el10.x86_64
perl-Symbol-1.09-514.el10.noarch
perl-Term-ANSIColor-5.01-512.el10.noarch
perl-Term-Cap-1.18-511.el10.noarch
perl-Text-ParseWords-3.31-511.el10.noarch
perl-Text-Tabs+Wrap-2024.001-511.el10.noarch
perl-Time-Local-2:1.350-511.el10.noarch
perl-URI-5.27-3.el10.noarch
perl-base-2.27-514.el10.noarch
perl-constant-1.33-512.el10.noarch
perl-if-0.61.000-514.el10.noarch
perl-interpreter-4:5.40.2-514.el10.x86_64
perl-libnet-3.15-512.el10.noarch
perl-libs-4:5.40.2-514.el10.x86_64
perl-locale-1.12-514.el10.noarch
perl-mro-1.29-514.el10.x86_64
perl-overload-1.37-514.el10.noarch
perl-overloading-0.02-514.el10.noarch
perl-parent-1:0.241-512.el10.noarch
perl-podlators-1:5.01-511.el10.noarch
perl-vars-1.05-514.el10.noarch
protobuf-3.19.6-15.el10.x86_64
python3-openvswitch3.5-3.5.3-5.el10s.x86_64
sysstat-12.7.6-4.el10.x86_64
usbguard-1.1.4-2.el10.x86_64
usbguard-selinux-1.1.4-2.el10.noarch
zlib-ng-compat-devel-2.2.3-3.el10.x86_64

CentOS Stream CoreOS base layer: 10 upgraded from 10.0.20260125-0 to 10.0.20260414-0

View changelog in Markdown or change previous release:

Source code for this page located on github