# 4.17.60

Created: 2026-11-09 17:01:56 +0000 UTC

Image Digest: `sha256:0bc58e2a8b27d8618160594e249d135768b9f257f79e711688f46b457af4c816`


## Changes from 4.17.59

### Components

* Kubectl 1.30.5
* Kubernetes 1.30.14
* Kubernetes Tests 1.30.14
* Red Hat Enterprise Linux CoreOS upgraded from 417.94.202610010234-0 to 417.94.202611061051-0


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [11f678ed](https://github.com/openshift/assisted-service/commit/11f678ed6998c56deebdeeaec1ac755c655c694f) `sha256:8f56189e31c732ce5b35f91fd6859f74c532cea6efe2200b3fdda4e6f2202aa3`
* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [e755d585](https://github.com/openshift/assisted-installer/commit/e755d585d2405fc4f7b4414ae8f263e4e3ef589d) `sha256:089d440edeed6ae6ab915c98b37b7b6707601648278700f0783c6b184be72477`
* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [aee1535a](https://github.com/openshift/assisted-installer-agent/commit/aee1535a922442712eafd1058d6464cda4d9335b) `sha256:1d48aa2613638cd17eb27f18f718197089e4d940d39fcdd4321ebdf87708a6b0`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [e755d585](https://github.com/openshift/assisted-installer/commit/e755d585d2405fc4f7b4414ae8f263e4e3ef589d) `sha256:b50e72a8769f3cb30199e72a9b936dface6063139e114093ab88066ae26afbf7`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [b3595281](https://github.com/openshift/agent-installer-utils/commit/b359528186b9df8ff5796f2bbfdab7f6bbaad491) `sha256:5c2627212a18b105fe886cdee9970a954b10f926deae94312dad496aad2ff15a`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [ea660559](https://github.com/openshift/apiserver-network-proxy/commit/ea6605595cf1a0c94fb0fa82a2ceec15970da655) `sha256:da8188f82149136964518051ace609eb83ddc487a83f9552992fc6cbadd03738`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [9b1719e3](https://github.com/openshift/aws-encryption-provider/commit/9b1719e3c46f18fe763ee7cdf34012a969550b0b) `sha256:b0f9a609afb56bbb9e6a6425e7766519b9c41947fcece07f06ac405664041e47`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [cc562120](https://github.com/openshift/azure-kubernetes-kms/commit/cc562120ff540e237cc170b8a82a8cbbc3a32ad2) `sha256:e79ba001bd90e2c7a0e6daddac67d3d72dc6dc76e96d1017a03a8e687bd5e35a`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [41b34248](https://github.com/openshift/cluster-api-provider-metal3/commit/41b3424801977f102b00bb5c7e8fe15d65d3ade5) `sha256:8f766a25f4c485581390656fd78d395e01848dfcdac26ff33047754400cec5a4`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [ae674d78](https://github.com/openshift/cluster-api-provider-baremetal/commit/ae674d7808379c454f972ff0cccac8bb9adcc98f) `sha256:663a801bf5dd010574c2c2ab76a7745358db56a8a542df68577922a769f89968`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [087a24f2](https://github.com/openshift/baremetal-operator/commit/087a24f21f11bc85a6d922c156bda6270e7eadfa) `sha256:1464166fbbfb9cdaaa3991126145a21f7dadb64ed0d31639b156efb4873aede4`
* [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [6a11cde3](https://github.com/openshift/cloud-credential-operator/commit/6a11cde3b4cf42a9382c01f537f012f6df487899) `sha256:50d96c12eb9e9a4594de5b31994cbd1c1c2e42ff376a698adade189e2560d218`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [241af368](https://github.com/openshift/cloud-network-config-controller/commit/241af368428cb2deedeaf8e21d237aa01216292a) `sha256:2efd6bb0f1d9cc90ffd2033821e5c031ffeb267d12d4514176adc9c5fb5267ae`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [efa6fd9b](https://github.com/openshift/kubernetes-autoscaler/commit/efa6fd9b220e841591d8be2208cdec4ffc826429) `sha256:050308e9cc381d8e28616d5a0182cf0195e335dece93c2234703cf91afa63f6d`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [bb407dd1](https://github.com/openshift/cluster-autoscaler-operator/commit/bb407dd17744ed46ac9eedde23e2a8cd7371bfc9) `sha256:115c82a77ceefb8885d0ddafeb38d28cb803fc2b6f8e589376597c88b3cc7dc7`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [95dd9129](https://github.com/openshift/cluster-bootstrap/commit/95dd9129fa44410a0103fe087d13e27dddecab19) `sha256:1b1c4fc00968424f1ca4bc881daadb8fc60ec402fc34fb73035100dbf6832aad`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [3b417931](https://github.com/openshift/cluster-api/commit/3b417931b1e94534cbde2c435c262befad8a57f1) `sha256:e52069c349c2d73405db57c2a2911830bb606edc118c434615398648f86b6cd0`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [17abd1d9](https://github.com/openshift/cluster-capi-operator/commit/17abd1d9c801288347f4134965b268389a90c342) `sha256:d3d335cd5ff45da8e0062a144ee94de35b083013332c2ceb7d6a866997689624`
* [cluster-config-api](https://github.com/openshift/api) git [92c55bf0](https://github.com/openshift/api/commit/92c55bf0f372c222dc02f17685c383d18e2c2e8b) `sha256:dfbdda803220d4b59ea3bb3fbdf564e568901af85cdfa222277023a21cc2e1dd`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [cfd318de](https://github.com/openshift/cluster-config-operator/commit/cfd318de9718f1c73b40d99900125bdca41482ef) `sha256:e71db23eecddfc1543ebefc71acde67ae81aa8042cd17739cd35f7013940bed2`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [f7e01c2f](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/f7e01c2f91628b25d1578c0a752f9b55c4233625) `sha256:87d6b70ef2adaa8323420eaab07deba64e339ae813291584f00831cc949f97a9`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [a07cc2b5](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/a07cc2b522f7f78ee985a33118b5f93c9c2bde8f) `sha256:3dbf021f2a6f35a2191536fc3b0afb4311b0c6c2a0ffa57db619e2b764fbc00c`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [1a0cea11](https://github.com/openshift/cluster-image-registry-operator/commit/1a0cea11ec4ba91416b698ab2e87d03a09a0e367) `sha256:049a624871aed5eae99660ca5eebeb1f7674542890270aedd295cf550e3f4b09`
* [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator) git [17253375](https://github.com/openshift/cluster-ingress-operator/commit/1725337535e32158f37471a2286c9142f100ff41) `sha256:5ba84e5fa5ac74e80a813048c9b671509bd92518ea6921d76e0f068e7589e330`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [c1947350](https://github.com/openshift/cluster-api-operator/commit/c1947350f996bcc50c549c9e83382179d6455247) `sha256:09dcea52e8d2280683710869f0fe77aa5c2ff0a63ad838cfa644823fa93cc74d`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [0097f210](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/0097f21060a7e10679567eb57b87feb4f55230e3) `sha256:99fe908095d6b5c380afedf42fee06e45422630fede42808d217b998789fc713`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [acc2380e](https://github.com/openshift/cluster-machine-approver/commit/acc2380eb52e4f83ba07f9d04b44a36cbc47a48c) `sha256:28cea650ffb7a5e481730acbfd665d508eea6fe630569668e2501557c5126e2f`
* [cluster-network-operator](https://github.com/openshift/cluster-network-operator) git [dc98c59e](https://github.com/openshift/cluster-network-operator/commit/dc98c59e223f325acb113a697771e737266876a5) `sha256:c243a62d47f82be09b2d1ce2afc8ba99a27f0971a2f8c90af3cc3e93ac1e3c8e`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [fe37d7cf](https://github.com/openshift/cluster-node-tuning-operator/commit/fe37d7cf96ef3280f1bd41c55372b520fdf6c821) `sha256:9e7b12ac886048283aa14132cbe183e7c384ead31d4892421b8d347ce26d209e`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [8c61cd4b](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/8c61cd4bcf3719137950e3ac287346013b471a08) `sha256:10cf34dac1b907176d4f3e0d4ec9d26a5f91133518bb13d3ebdf1437dc882c59`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [b05a249d](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/b05a249d6919978217aefa7060951af078eac931) `sha256:f45153d706e685be92bfec904c48e3f2db20478a1f0d7a755e50e84ba7a170cf`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [7209e90d](https://github.com/openshift/cluster-policy-controller/commit/7209e90d4205dc16bf0c83fb556c3d955d942d6b) `sha256:5e9bdebe96994f05f2c66ae58a40c9b7c53531aa7e4c4b58306bac31a7f0f158`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [63022033](https://github.com/openshift/cluster-update-keys/commit/6302203333a9a7f22dc3e4ecd280028e8a8bfb86) `sha256:00f1bae1602caea70da67f6ad362d983b5424acdb7901fc1219c8ad9976f734d`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [62d56d6a](https://github.com/openshift/configmap-reload/commit/62d56d6a8b7ce26889cce1ba55ab4c958398967c) `sha256:f0d4589880dc79dba07cb74774a4ec1f889d9e4299264bc76840e178224de8df`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [621348df](https://github.com/openshift/containernetworking-plugins/commit/621348df96a03f642716845a15dc4043cc5f85f1) `sha256:06a134d327b3a2898a832ab60ba67b449b2f7c34f6272fa45630a516a17b3405`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [621348df](https://github.com/openshift/containernetworking-plugins/commit/621348df96a03f642716845a15dc4043cc5f85f1) `sha256:a99187dcd15c1e8a81bce1d805edd3563bacd8723009024a2a9fff99cefb2b99`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [a56e0cba](https://github.com/openshift/csi-driver-nfs/commit/a56e0cbacf27e90ffda7de9a6a470911a17a52c2) `sha256:45122e42be3dc5fc521cd1e757db252366f79e17587b8231651151b37cf2c447`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [66aee5b0](https://github.com/openshift/csi-driver-shared-resource/commit/66aee5b045bf2b32f6ccbf7a62c1151b8889811a) `sha256:67e149023d67c7e0d29a3567ed227394e8f4ebb09c3f9ff8c8d04d8b491bb81a`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [95be6bdf](https://github.com/openshift/csi-driver-shared-resource-operator/commit/95be6bdf8da55c75b9d5027f0e32a0cd2f070d8a) `sha256:bde0fd13fbc91a0ffd0e31749671cf3075a5b98a4ea53042798884c2b64b0196`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [66aee5b0](https://github.com/openshift/csi-driver-shared-resource/commit/66aee5b045bf2b32f6ccbf7a62c1151b8889811a) `sha256:634c969fc481e9a1247685ac82363d540166c2cfbb75a1d4f09aa8e7fe405d64`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [3dd2253e](https://github.com/openshift/csi-node-driver-registrar/commit/3dd2253ed70cb565a63a208fa667d55f3222fb19) `sha256:dc7697a2791292118119ba8cc87f0402758b7f6e3a25cfc9460c13312b49d982`
* [docker-builder](https://github.com/openshift/builder) git [865c7982](https://github.com/openshift/builder/commit/865c79826e67f14dbce7cb0a21313bbb82b1fad0) `sha256:ed2c453a036f42a313cbed90053d32aaa0fe4067ffac0ca378a9b31ac0495fa4`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [859518f6](https://github.com/openshift/driver-toolkit/commit/859518f6952407a56ddf7d0562c98fe27e9e0efe) `sha256:bb6e358f7e59498099f96b5b5a05f14a15925dbddc259db747da34dc166a8e56`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [3193a756](https://github.com/openshift/egress-router-cni/commit/3193a756d60e14f7139992e2e42b7036955652e7) `sha256:2e73579e6c6459b1b712cc502def16e217a82265166739ff4a6724fe4ff18c88`
* [etcd](https://github.com/openshift/etcd) git [0d9e0a90](https://github.com/openshift/etcd/commit/0d9e0a907c4aea7c4b2bff627478785fb99511f5) `sha256:16601664b0e97c3ccca4582316c619de0f1b6ed31cf711a6fb4cc5d28577f41c`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [8ce997d7](https://github.com/openshift/cloud-provider-gcp/commit/8ce997d7b2fc615ce23788512246fb9955c7c711) `sha256:5d93eb260e358e4bedadec2c74661237d1d19ad70db018f7ec28cd5fbee0a210`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [f2203376](https://github.com/openshift/cluster-api-provider-gcp/commit/f2203376a8a2d8eecec7b85dc28b756b49d8c469) `sha256:71b20cc0abf443c9b808466e03977c99aedc9330f57e28c74c284d25278f6300`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [96fa4696](https://github.com/openshift/machine-api-provider-gcp/commit/96fa4696da4229c4ac5bccd392750725ca5c4dc8) `sha256:23314d21be8b63b3fd6e6b79d14dd2ad384bdbaa6ae037a2796b4bca0b103f0e`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [a6cc81b5](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/a6cc81b5ff924e190c701c509fdfea67e6615ff9) `sha256:90dbda1580aa75b7d69241bd78c206efb8c75cfa27dbf12234d112dc6409bb8c`
* [keepalived-ipfailover](https://github.com/openshift/images) git [e3879e9e](https://github.com/openshift/images/commit/e3879e9e36d64c6be08b621a50ad5d3ee343dc3e) `sha256:bed88d77a15877644c4b8cfc8acbe3909e93c12ac5f76671e65f09874d669602`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [df9ac952](https://github.com/openshift/kubernetes-metrics-server/commit/df9ac95276c08cff0b295c3eeb52c835abf95900) `sha256:055d3320d22b9f6659683aabc0e03ff2d3938e85df9a2a6be3c39cb6ad25e786`
* [kube-proxy](https://github.com/openshift/sdn) git [fd50551b](https://github.com/openshift/sdn/commit/fd50551b5c640fb4bda787faaab32f8b641839e9) `sha256:e1b84f703233fecacadcc9e01b740bcc2f6e3c422278edd5368b0e7f5dfe4025`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [f708b5ec](https://github.com/openshift/kube-rbac-proxy/commit/f708b5ecf87b948864e4f68d0724cda5de13a9d9) `sha256:dc7d0ded0f21e517e9280426ba23b12e894b4909017a4afecfd43787d67a95fc`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [69b07ae0](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/69b07ae04918806079f1a4fbc2f110453bc8db19) `sha256:d281f7524d1b748b78d268e0934535a4d2817672210c505399e37d7084d61d64`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [d7d7a591](https://github.com/openshift/cloud-provider-kubevirt/commit/d7d7a59127ef9020cbf6339a313e7eb7346c95f6) `sha256:ef812ce5a4e8ccb5d95b233e43b5376083274d2b58feaeb730dde83c27d35634`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [b4ad2d68](https://github.com/openshift/kubevirt-csi-driver/commit/b4ad2d68d25572212ca92d42bb209d103d3589d6) `sha256:311cf43e6bbedd95ee1389e03ed1bb53b07142d97a3b6592daca097f9edd406d`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [931afe11](https://github.com/openshift/cluster-api-provider-libvirt/commit/931afe11b155006f805d0b029e46416e632d1a14) `sha256:8d05de35ddec28bf6bc49d5862af98d23326df80fe64ddfe69c3604270f3db8c`
* [machine-api-operator](https://github.com/openshift/machine-api-operator) git [d3564c17](https://github.com/openshift/machine-api-operator/commit/d3564c17a7e52bdf5f92d78948ef814973ee126d) `sha256:a4dcf8e1ab606f590b3077dd6f9379ff0d4b1b27471ae2d9af48fd6a7188fd3b`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [cc250001](https://github.com/openshift/machine-os-images/commit/cc250001ddce8bd6342942f045ff7f9930c74040) `sha256:90a40e10ee5c91a54d4b88328a6e43dfb1bd155a3c57d0b76448faad9283b023`
* [metallb-frr](https://github.com/openshift/frr) git [b575d5df](https://github.com/openshift/frr/commit/b575d5dfac5319d7d296922de69c73baea6d142d) `sha256:9b0794e2074291d0bc97b48c7d29a647fc58bbc4aaa1561e45f16f6395b4b9da`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [4d0b1703](https://github.com/openshift/multus-networkpolicy/commit/4d0b170379c4e158d976b4dd7bccbed5835fdede) `sha256:2675230d19926d0f9b72c9232632a2c8874de16ba0d15c8e79444757dbed3983`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:32790f614d519c95d3b7b0ce03bb599a3d6106ea46aea1c5fd442268750003da`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [40cfb3dc](https://github.com/openshift/whereabouts-cni/commit/40cfb3dca70a4d37dff426c0ec1c77efcb399e1b) `sha256:e14e8b6b2ca91f9636a66b6405a0148f8fc502713898e22439a970708eff29fe`
* [must-gather](https://github.com/openshift/must-gather) git [ea72c2eb](https://github.com/openshift/must-gather/commit/ea72c2eb404f9fe9282be70d1af7689f8f139fee) `sha256:2ac49e65af09ff5612129362de4d71e6a75810ae7a0d186725090c9b4861c970`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [8f7cc925](https://github.com/openshift/bond-cni/commit/8f7cc9253b83072c273c28cff64b00eb6ef3b38a) `sha256:1e31be0e51f9a25db225ed70b364a2accfa3398d86981312e39df84441fd5e6e`
* [network-tools](https://github.com/openshift/network-tools) git [e59e7b25](https://github.com/openshift/network-tools/commit/e59e7b258e2baa5815bc13763804694615896ab0) `sha256:26e8bc8aa4158b51c2cecd18942fa7e82dbf54a79f31bce95632f1297640871e`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [c740e056](https://github.com/openshift/operator-framework-catalogd/commit/c740e05677bbeb20cbb601e8b261c07a81cf0a8a) `sha256:c8d1f8e9ece5a96a7042bccd47f76fd42396ed731f90dac16d485800e658e0ee`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [fa8d10c5](https://github.com/openshift/operator-framework-operator-controller/commit/fa8d10c53339688c290fe3e8867df7124de04c42) `sha256:6bdfa23ae3d699cba34fecef973d1a043e040be187dff9636fa2273dc0230643`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [79a42c56](https://github.com/openshift/openshift-apiserver/commit/79a42c566a8c7857d23623d296c80a70fc2b8148) `sha256:c06247de9422e7e11ea4a20c649ac81b10609a691c1438efc4f69bf0d7dab9a4`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [5593c5f7](https://github.com/openshift/cluster-api-provider-openstack/commit/5593c5f7f70758cec5e9feac54eb248fbd6d75d8) `sha256:232401ec9bfc7428b3b17a3db1b32d9a22cace3d3aa3ed998123102a4165f3e1`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [3b926d20](https://github.com/openshift/machine-api-provider-openstack/commit/3b926d2094bab3c6759252b7681cc36473b29021) `sha256:ede82a652568483e50bb4f6a16d06fbab14924f34e40120f685eaa1f0d1dae3c`
* [operator-framework-tools](https://github.com/openshift/operator-framework-olm) git [c9ad6fd8](https://github.com/openshift/operator-framework-olm/commit/c9ad6fd83727301129cfd1a2b165bf29949529a8) `sha256:c0fe001db64c30d6c1afaacc6d0e5af1a766d4bf13ff7f10f18cf75cea060ef0`
* [operator-lifecycle-manager](https://github.com/openshift/operator-framework-olm) git [c9ad6fd8](https://github.com/openshift/operator-framework-olm/commit/c9ad6fd83727301129cfd1a2b165bf29949529a8) `sha256:633762eebb20a109c8cceb7851b75e8219dd1b2e06e93627c7b04a7aeef3b3f7`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [5cf36fde](https://github.com/operator-framework/operator-marketplace/commit/5cf36fde25cf22b7f58b0a3242f82cadd18acc6f) `sha256:3c77fc5969ad4329b8f33b6fdb659b284461532bdd306d1b96b39a65ac8b77f6`
* [operator-registry](https://github.com/openshift/operator-framework-olm) git [c9ad6fd8](https://github.com/openshift/operator-framework-olm/commit/c9ad6fd83727301129cfd1a2b165bf29949529a8) `sha256:508333bbe2c0069d7853a935f65c8c5aae6b445c43773d13a35028e5484d8b4f`
* [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes) git [12f4e7e1](https://github.com/openshift/ovn-kubernetes/commit/12f4e7e12f583767c8e9549408e36bbf4000b1b4) `sha256:e90e07b7bfb6d92ae8798c72535854ab4f93839ee7dbe051ad2e5f07968025ef`
* [ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes) git [12f4e7e1](https://github.com/openshift/ovn-kubernetes/commit/12f4e7e12f583767c8e9549408e36bbf4000b1b4) `sha256:c1f7377520d5a83dfb6e7fc23cda074b5a220cf0eeddf24bdb63025e7cc63ef3`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [f67fdda4](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/f67fdda42e37905fbc67fa8b4c47874f60441848) `sha256:24303c09cafd6bf170ea462844ff2f088dc58d8aad678da3a3e504308164d4cf`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [aa1b744e](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/aa1b744e13a0930844f24d9fb6fd9bd2164592e9) `sha256:5c9d3bdc2dd5e3ff549609c2be1ddc5ce1b38536d1f6390608477c74542258da`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [9f61dc19](https://github.com/openshift/cloud-provider-powervs/commit/9f61dc1910671da364a7f9ba74f901b609ed1844) `sha256:699c962cc009f0cd4759b54c93c1b4f487560e36a6fde23faf2f462f89d55469`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [b7478d7e](https://github.com/openshift/machine-api-provider-powervs/commit/b7478d7e98f4596d01e84193222f17d4c13a2a09) `sha256:3c7d40060c0c51cd898504307f335d14cf77d78d417d82e9b5d5f1751edf1544`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [06ec4e3a](https://github.com/openshift/prom-label-proxy/commit/06ec4e3af0f27ae6e8ece0d31ff1e802b7d08a50) `sha256:f672ce0f00097f2ff75eb5f4241717144c8a7fd8327379743c0779a045236baa`
* [prometheus](https://github.com/openshift/prometheus) git [8b2b7087](https://github.com/openshift/prometheus/commit/8b2b70879280211b7ebd0b44ea02bddc2cba825e) `sha256:b6ca83379380421062a46594976b999005fcdab6415e2644cc53b6f75b257a66`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [bed9c9bd](https://github.com/openshift/prometheus-alertmanager/commit/bed9c9bd31940eeed0e082906a581bac40a3f7aa) `sha256:9c61665ddad347b77ffb645f58c40ec6773f2c92c7bb190d2dcd9fedf8f1cd2e`
* rhel-coreos `sha256:a45faecd599e627de6c85fedbd2626360182c5563724ef810bd74186195806a9`
* rhel-coreos-extensions `sha256:0b68bf295ebb03908b10b01272926f4affed835bec114fd3f81a0dbae97f2735`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [2cb0a44d](https://github.com/openshift/service-ca-operator/commit/2cb0a44d1245cf2f5d7bdf2072484cdfdfa50eaa) `sha256:70f35ca037a8257f641d07c1e3764a0d97a4bbbd08dabd041dc416457fdc3e39`
* [telemeter](https://github.com/openshift/telemeter) git [15895a06](https://github.com/openshift/telemeter/commit/15895a068e7e89b14292fde4601208c3eeb3a715) `sha256:87789482c881d16f682cc3dd03269ee41c2e3c5ebd779ebe748e7c62fa961990`
* [thanos](https://github.com/openshift/thanos) git [51fe5fa4](https://github.com/openshift/thanos/commit/51fe5fa45f6df55266ca874287b47b2825f01b32) `sha256:2e3b69580f2171e7797f7bceef4b2cf48c44db4dbcda37004c9412b796eced2f`


### [aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, azure-workload-identity-webhook, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibmcloud-machine-controllers, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, machine-image-customization-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/cbb83c80af4c43d17eab5d8828706b67e4337294)

* [OCPBUGS-136162](https://issues.redhat.com/browse/OCPBUGS-136162): Fix kubeadm preflight host URL construction [#2842](https://github.com/openshift/kubernetes/pull/2842)
* [Full changelog](https://github.com/openshift/kubernetes/compare/4e295fa517e17429af4d8004e7a8028fe719e60f...cbb83c80af4c43d17eab5d8828706b67e4337294)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/eeb42e14fa22ab7453fb9ce680122a6cbd31ad8e)

* [OCPBUGS-103154](https://issues.redhat.com/browse/OCPBUGS-103154): Bump golang.org/x/net to v0.35.0-sec.4 [#10972](https://github.com/openshift/installer/pull/10972)
* [Full changelog](https://github.com/openshift/installer/compare/de6c46c003a6c5fdffc950cb51f561087ac13964...eeb42e14fa22ab7453fb9ce680122a6cbd31ad8e)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/e03f273e515f919d14a718c1cb5e3b1dce236848)

* [OCPBUGS-103159](https://issues.redhat.com/browse/OCPBUGS-103159): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#409](https://github.com/openshift/baremetal-runtimecfg/pull/409)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/745189508eec80ee07a921d1b2c227812db37237...e03f273e515f919d14a718c1cb5e3b1dce236848)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/28d0040e8fb48bd4b2ca492e01ebd0f168487adb)

* [OCPBUGS-102061](https://issues.redhat.com/browse/OCPBUGS-102061), [OCPBUGS-103161](https://issues.redhat.com/browse/OCPBUGS-103161): Use patched x/net fork v0.35.0-sec.4 [#2417](https://github.com/openshift/oc/pull/2417)
* [Full changelog](https://github.com/openshift/oc/compare/7189593997f243911aeeb6e473e76d5ad0fd1e50...28d0040e8fb48bd4b2ca492e01ebd0f168487adb)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/251bf348b980326ae2edaf16f27e70d73cecb030)

* [OCPBUGS-103168](https://issues.redhat.com/browse/OCPBUGS-103168): replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 [#989](https://github.com/openshift/cluster-authentication-operator/pull/989)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/9f93cafccca989417378a804f134f68fb4fea40d...251bf348b980326ae2edaf16f27e70d73cecb030)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/519676b249b496a573f6e28f34890420529c61e0)

* [OCPBUGS-103170](https://issues.redhat.com/browse/OCPBUGS-103170): Use patched x/net fork v0.35.0-sec.4 [#672](https://github.com/openshift/cluster-baremetal-operator/pull/672)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/16ed4727250a72342b3da7b280d3456f7055a6c9...519676b249b496a573f6e28f34890420529c61e0)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/fe105e6bc242b77274a9364de13a605402de5b0b)

* [OCPBUGS-103176](https://issues.redhat.com/browse/OCPBUGS-103176): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#514](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/514)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/6d4c0096477d7e15f31ef0492ad9382ea1be1ef1...fe105e6bc242b77274a9364de13a605402de5b0b)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/5b929d9b9f3c6c034cb90ddd405d8725fbac56d4)

* [OCPBUGS-103178](https://issues.redhat.com/browse/OCPBUGS-103178): Use patched x/net fork v0.35.0-sec.4 [#494](https://github.com/openshift/cluster-dns-operator/pull/494)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/81507f04686df3e16793b270084ead0a2a67fb38...5b929d9b9f3c6c034cb90ddd405d8725fbac56d4)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/1dc16edfad74463e003c473613672236ba0cf6f1)

* [OCPBUGS-103181](https://issues.redhat.com/browse/OCPBUGS-103181): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#1696](https://github.com/openshift/cluster-etcd-operator/pull/1696)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/bfffdcbac76071143cf554785ca2bde0ac69ac7e...1dc16edfad74463e003c473613672236ba0cf6f1)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/a7c640c2be82d1918dcf3ac91b0e6362e8e8864a)

* [OCPBUGS-103173](https://issues.redhat.com/browse/OCPBUGS-103173): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#2300](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2300)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/84e19b2149ab818a455b00717d790856c13ea387...a7c640c2be82d1918dcf3ac91b0e6362e8e8864a)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/91fe72a64d195b68b2c076f62e0513946a09e09b)

* [OCPBUGS-103172](https://issues.redhat.com/browse/OCPBUGS-103172): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#962](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/962)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/12f60539287eda85e99efbdcf85a1ecf59e021fa...91fe72a64d195b68b2c076f62e0513946a09e09b)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/64f0ede69f6e5afcfa47c96ce5b876c0ffbbb515)

* [OCPBUGS-103171](https://issues.redhat.com/browse/OCPBUGS-103171): [release-4.17] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#670](https://github.com/openshift/cluster-kube-scheduler-operator/pull/670)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/013ff606240919fcb46eb9a8b707598a9b049ee5...64f0ede69f6e5afcfa47c96ce5b876c0ffbbb515)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/1a4ef3b5a17cf1b018acbdf35c2055898d2d52fc)

* [OCPBUGS-129160](https://issues.redhat.com/browse/OCPBUGS-129160): don't delete admin-owned Alertmanager secrets on destroy [#3143](https://github.com/openshift/cluster-monitoring-operator/pull/3143)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/1179cda06fce0890dbd4529aadcbad77a82dd2ac...1a4ef3b5a17cf1b018acbdf35c2055898d2d52fc)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/9bdb00434f4b2977ad7d7868f3656c43abadece2)

* [OCPBUGS-103193](https://issues.redhat.com/browse/OCPBUGS-103193): bump golang.org/x/net to v0.35.0-sec.3 to fix CVE-2026-33814 [#246](https://github.com/openshift/cluster-olm-operator/pull/246)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/f289edc3bb99197984aa392b13dfef07b075bcce...9bdb00434f4b2977ad7d7868f3656c43abadece2)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/6fa6dfc70a6301451094b0e2f8f6be94d22816a2)

* [OCPBUGS-129480](https://issues.redhat.com/browse/OCPBUGS-129480): Restrict samples operator access to the global pull-secret [#733](https://github.com/openshift/cluster-samples-operator/pull/733)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/1d2ba42214637c7ed7e5e3e0aec257e9b949d061...6fa6dfc70a6301451094b0e2f8f6be94d22816a2)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/a3da8d647911554718b28762e5d2a9829acc4602)

* [OCPBUGS-103187](https://issues.redhat.com/browse/OCPBUGS-103187): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#734](https://github.com/openshift/cluster-storage-operator/pull/734)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/a039f8a2e73771f76e799ed497535705037f3bf5...a3da8d647911554718b28762e5d2a9829acc4602)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/367d573e56de4f3dbe88a97ec515bd5acecbe141)

* [OCPBUGS-103186](https://issues.redhat.com/browse/OCPBUGS-103186): Bump golang.org/x/net to v0.35.0-sec.3 [#1460](https://github.com/openshift/cluster-version-operator/pull/1460)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/b855c68099755979a053f60a49300d3502f44325...367d573e56de4f3dbe88a97ec515bd5acecbe141)


### [console](https://github.com/openshift/console/tree/c61250ec246c8990b9f8474fbf4ba30259143323)

* [OCPBUGS-127155](https://issues.redhat.com/browse/OCPBUGS-127155): [release-4.17] inkify-it: Denial of Service via crafted mailto: links [#17382](https://github.com/openshift/console/pull/17382)
* [Full changelog](https://github.com/openshift/console/compare/b61b5d90e1cd21fe13b05dc2d164c7d84627e358...c61250ec246c8990b9f8474fbf4ba30259143323)


### [console-operator](https://github.com/openshift/console-operator/tree/22228bba3d9289e11282f907e2278724df09b315)

* [OCPBUGS-103205](https://issues.redhat.com/browse/OCPBUGS-103205): Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 [#1224](https://github.com/openshift/console-operator/pull/1224)
* [Full changelog](https://github.com/openshift/console-operator/compare/e8032813321ac4c2daec869a7703c31cd9b2acf4...22228bba3d9289e11282f907e2278724df09b315)


### [coredns](https://github.com/openshift/coredns/tree/532fc381de0b06d1e11715ed16ffc4f4e263b078)

* [OCPBUGS-103200](https://issues.redhat.com/browse/OCPBUGS-103200): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#206](https://github.com/openshift/coredns/pull/206)
* [Full changelog](https://github.com/openshift/coredns/compare/fe89d27d6f2b27baf686c89c4c1c1ceb88fe3567...532fc381de0b06d1e11715ed16ffc4f4e263b078)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/83846faf670b4d253debe6b6dbca996b605843b5)

* [OCPBUGS-103277](https://issues.redhat.com/browse/OCPBUGS-103277), [OCPBUGS-103279](https://issues.redhat.com/browse/OCPBUGS-103279): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork- #421 [#421](https://github.com/openshift/cloud-provider-openstack/pull/421)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/3358ea3f5ed8835aa760ee5cf02b9980bcdeb528...83846faf670b4d253debe6b6dbca996b605843b5)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/af4b4f2020919dd1035e20af7f4da90e66b4d73c)

* [OCPBUGS-103201](https://issues.redhat.com/browse/OCPBUGS-103201): Use patched x/net fork v0.35.0-sec.4 [#263](https://github.com/openshift/csi-driver-manila-operator/pull/263)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/efc99a2a5e72ec3d3ecd1792fdd9225e74ac6ea8...af4b4f2020919dd1035e20af7f4da90e66b4d73c)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/26244f2233c9627bef9dd8c3ba87e9301bf02e4a)

* [OCPBUGS-103210](https://issues.redhat.com/browse/OCPBUGS-103210): Bump golang.org/x/net to v0.35.0-sec.4 [#116](https://github.com/openshift/csi-external-attacher/pull/116)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/8d93b8a3560410cb2ff3dd6d285fea822720edd4...26244f2233c9627bef9dd8c3ba87e9301bf02e4a)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/4aef9e77fe00ca2665bd2ed4995109618f367369)

* [OCPBUGS-92864](https://issues.redhat.com/browse/OCPBUGS-92864): Replace golang.org/x/crypto with github.com/openshift-sustaining/crypto@v0.33.0-sec.5 to address CVE-2026-46597 [#162](https://github.com/openshift/csi-external-provisioner/pull/162)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/88d1fdf1716d5d69bc88fdab27677185b440e155...4aef9e77fe00ca2665bd2ed4995109618f367369)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/f1c3090c58ddc2c50a02c8427fb79b5c788b0ce9)

* [OCPBUGS-80084](https://issues.redhat.com/browse/OCPBUGS-80084): Patching openshift-sustaining/grpc-go v1.71.3-sec.1 [#204](https://github.com/openshift/csi-external-resizer/pull/204)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/96012dea4582fd44513410d90b6db640fce5613a...f1c3090c58ddc2c50a02c8427fb79b5c788b0ce9)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/cc5ce2e5028f15429772766f6a5f4a2f93d26505)

* [OCPBUGS-103212](https://issues.redhat.com/browse/OCPBUGS-103212), [OCPBUGS-103215](https://issues.redhat.com/browse/OCPBUGS-103215): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 [#229](https://github.com/openshift/csi-external-snapshotter/pull/229)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/59c396dfa5bd6f1cb42c42cbc3ad66dd5898348c...cc5ce2e5028f15429772766f6a5f4a2f93d26505)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/6e58d04f7b94e3bf3e070a665ffc1f6caf4a6c2b)

* [OCPBUGS-103203](https://issues.redhat.com/browse/OCPBUGS-103203): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#110](https://github.com/openshift/csi-livenessprobe/pull/110)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/e7d841dc545b9fb3a8a3303b8cac62d35620905b...6e58d04f7b94e3bf3e070a665ffc1f6caf4a6c2b)


### [docker-registry](https://github.com/openshift/image-registry/tree/13618f00551d5dcf9fba8e902682171f6fa67cc1)

* [OCPBUGS-103223](https://issues.redhat.com/browse/OCPBUGS-103223): [release-4.17] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#481](https://github.com/openshift/image-registry/pull/481)
* [Full changelog](https://github.com/openshift/image-registry/compare/d0595c9e720caa5489628e49ed45a8eb85fa7b69...13618f00551d5dcf9fba8e902682171f6fa67cc1)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/395139386026bba828ca05c8bfed666dad91fac5)

* [OCPBUGS-103235](https://issues.redhat.com/browse/OCPBUGS-103235): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#144](https://github.com/openshift/gcp-pd-csi-driver/pull/144)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/907b8422fcdcb0f895c5a92bb796a93d6aed23b1...395139386026bba828ca05c8bfed666dad91fac5)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/3dc9a86d0324e5ba5c6c28306cfc30405bd8f067)

* [OCPBUGS-103225](https://issues.redhat.com/browse/OCPBUGS-103225): Use patched x/net fork v0.35.0-sec.4 [#217](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/217)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/5f27231835491f40506353f04b5a895773a1b53a...3dc9a86d0324e5ba5c6c28306cfc30405bd8f067)


### [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook/tree/653b08cc6e4833118d13fc1a1862174030721451)

* [OCPBUGS-103230](https://issues.redhat.com/browse/OCPBUGS-103230): Replace golang.org/x/net with github.com/openshift-sustaining/net v0.35.0-sec.4 [#27](https://github.com/openshift/gcp-workload-identity-federation-webhook/pull/27)
* [Full changelog](https://github.com/openshift/gcp-workload-identity-federation-webhook/compare/08579e9f60ab7f5f6c57f7e507c66a7ff0cc6d62...653b08cc6e4833118d13fc1a1862174030721451)


### [haproxy-router](https://github.com/openshift/router/tree/2f5cbd9eee4856abceeace9be26b26f51f806157)

* [OCPBUGS-103220](https://issues.redhat.com/browse/OCPBUGS-103220): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 to address CVE-2026-33814 [#845](https://github.com/openshift/router/pull/845)
* [Full changelog](https://github.com/openshift/router/compare/216fb937c4d84bdad2c44e2659e4a69235d062fc...2f5cbd9eee4856abceeace9be26b26f51f806157)


### [hypershift](https://github.com/openshift/hypershift/tree/16a7b50a548e2f9951395ff64c6f0b0825401ed6)

* Sync approver aliases with main for release-4.17 [#10188](https://github.com/openshift/hypershift/pull/10188)
* [Full changelog](https://github.com/openshift/hypershift/compare/858722705e2f6d7e7b1cba5ba5ed9e6c32a7e1a2...16a7b50a548e2f9951395ff64c6f0b0825401ed6)


### [insights-operator](https://github.com/openshift/insights-operator/tree/99dfadcb53e5dd2944eed17d0d83829247142924)

* [OCPBUGS-103241](https://issues.redhat.com/browse/OCPBUGS-103241): Bump golang.org/x/net to v0.35.0-sec.3 [#1356](https://github.com/openshift/insights-operator/pull/1356)
* [Full changelog](https://github.com/openshift/insights-operator/compare/2e91ecb38e819b2b191553461ff5dc61359115c9...99dfadcb53e5dd2944eed17d0d83829247142924)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/748de1c0867b7b29b5a9cc00ef34d845c5554529)

* [OCPBUGS-103237](https://issues.redhat.com/browse/OCPBUGS-103237): Use patched x/net fork v0.35.0-sec.4 [#163](https://github.com/openshift/kube-state-metrics/pull/163)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/e88f1b27fd66ab75d9b5fde8419e9efba0923236...748de1c0867b7b29b5a9cc00ef34d845c5554529)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/dce858fb2ef61223e31d8c8c8548b841ff6e9d82)

* [OCPBUGS-103252](https://issues.redhat.com/browse/OCPBUGS-103252): Use patched x/net fork v0.35.0-sec.4 [#6578](https://github.com/openshift/machine-config-operator/pull/6578)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/3bdd678e83da52e0754b393b82435eea968af3ed...dce858fb2ef61223e31d8c8c8548b841ff6e9d82)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/581000c8b25998d88d8db83f593717a6d6562fd8)

* [OCPBUGS-118233](https://issues.redhat.com/browse/OCPBUGS-118233): [release-4.17] Bump fast-uri to 3.1.7 to fix CVE-2026-84292 [#1336](https://github.com/openshift/monitoring-plugin/pull/1336)
* [OCPBUGS-98777](https://issues.redhat.com/browse/OCPBUGS-98777): [release-4.17] replace outdated react-linkify dependency [#1343](https://github.com/openshift/monitoring-plugin/pull/1343)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/ffd758f816979228ae5f5d8ec526e74efcbf149a...581000c8b25998d88d8db83f593717a6d6562fd8)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/afc6978cc2f88eea447fc10aea47078df8093ed1)

* [OCPBUGS-103264](https://issues.redhat.com/browse/OCPBUGS-103264): bump golang.org/x/net to v0.35.0-sec.3 to fix CVE-2026-33814 [#135](https://github.com/openshift/multus-admission-controller/pull/135)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/041b743a1172af3c8ace0cf046fe95bda7a9d5a2...afc6978cc2f88eea447fc10aea47078df8093ed1)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/184062f842c56ca62bd6603aa77a89160a6b3e0f)

* [OCPBUGS-103255](https://issues.redhat.com/browse/OCPBUGS-103255), [OCPBUGS-103257](https://issues.redhat.com/browse/OCPBUGS-103257): [release-4.17]  Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#358](https://github.com/openshift/multus-cni/pull/358)
* [Full changelog](https://github.com/openshift/multus-cni/compare/659299d118afc196d66b16a7714e17e6d11d0669...184062f842c56ca62bd6603aa77a89160a6b3e0f)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/88dbfcd26d195b90fea2dca4200509a29a65ecee)

* [OCPBUGS-103254](https://issues.redhat.com/browse/OCPBUGS-103254): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 to address CVE-2026-33814 [#154](https://github.com/openshift/network-metrics-daemon/pull/154)
* [OCPBUGS-130598](https://issues.redhat.com/browse/OCPBUGS-130598): add ./bin to PATH in check_golint.sh [#162](https://github.com/openshift/network-metrics-daemon/pull/162)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/f56bbf7af25fbae200c966378337db85c6b17126...88dbfcd26d195b90fea2dca4200509a29a65ecee)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/4412fa1f1222ef735cd4eed1cf0c28bed4d98cc0)

* [OCPNETUI-168](https://issues.redhat.com/browse/OCPNETUI-168): Update Owners file [#646](https://github.com/openshift/networking-console-plugin/pull/646)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/02524de642295b592ad52235f9e2d6e22edf92ff...4412fa1f1222ef735cd4eed1cf0c28bed4d98cc0)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/994f90899b6535140c535476f09aef88d4c1e8b6)

* [OCPBUGS-103267](https://issues.redhat.com/browse/OCPBUGS-103267): Replace golang.org/x/net with github.com/openshift-sustaining/net v0.35.0-sec.4 [#225](https://github.com/openshift/oauth-apiserver/pull/225)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/e078aeb29048d2b37e0b8e2657641a9207fd4d84...994f90899b6535140c535476f09aef88d4c1e8b6)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/62ea5f58fb0a844b23571e2dd928a7a1fe9bcd14)

* [OCPBUGS-136604](https://issues.redhat.com/browse/OCPBUGS-136604): [release-4.17] Sync OWNERS and OWNERS_ALIASES with master [#402](https://github.com/openshift/oauth-proxy/pull/402)
* [OCPBUGS-112108](https://issues.redhat.com/browse/OCPBUGS-112108): bugfix: rewrite open redirect strings to '/' [#385](https://github.com/openshift/oauth-proxy/pull/385)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/484a750a66e287c751116d4384b37281c9951a26...62ea5f58fb0a844b23571e2dd928a7a1fe9bcd14)


### [oauth-server](https://github.com/openshift/oauth-server/tree/0b4554d1a571ecf1659b821e337bd48bb048e297)

* [OCPBUGS-103265](https://issues.redhat.com/browse/OCPBUGS-103265): Replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 [#280](https://github.com/openshift/oauth-server/pull/280)
* [OCPBUGS-87070](https://issues.redhat.com/browse/OCPBUGS-87070): bugfix: default to english when Accept-Language header contains more than 1000 underscores [#273](https://github.com/openshift/oauth-server/pull/273)
* [Full changelog](https://github.com/openshift/oauth-server/compare/be35f2dd002c1b655397207edf65c112aa59388c...0b4554d1a571ecf1659b821e337bd48bb048e297)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/88cc22ff4099e072fb771cf897c602ca15620330)

* [OCPBUGS-130910](https://issues.redhat.com/browse/OCPBUGS-130910): v1 accept catalog root entries and relative symlink targets [#1595](https://github.com/openshift/oc-mirror/pull/1595)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/58375b70881938be8a1e08750507e4a40943f6fd...88cc22ff4099e072fb771cf897c602ca15620330)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/9a4e2d4dac6c46c1046d6438e4048bf0df9b0bc9)

* [OCPBUGS-103272](https://issues.redhat.com/browse/OCPBUGS-103272): Use patched x/net fork v0.35.0-sec.4 [#456](https://github.com/openshift/openshift-controller-manager/pull/456)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/967faa66125ae77148df87d8394d07112c4c0b8c...9a4e2d4dac6c46c1046d6438e4048bf0df9b0bc9)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/ebe70417102d920f9c6b461c6885ddccd6939956)

* NO-ISSUE: synchronize OWNERS from main branch [#150](https://github.com/openshift/openshift-state-metrics/pull/150)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/adf649209467aef8d5da1d17851fa991285edbc2...ebe70417102d920f9c6b461c6885ddccd6939956)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/3fa74cb46c31d769c98ddb83ceb1f54ab91e9ba1)

* [OCPBUGS-103280](https://issues.redhat.com/browse/OCPBUGS-103280): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#196](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/196)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/00ba71fd3736b00d019383fce2ec74a9c5f9414c...3fa74cb46c31d769c98ddb83ceb1f54ab91e9ba1)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/4db03df9eab1a25ff35839bb5f55b7302cf57620)

* NO-ISSUE: synchronize OWNERS from main branch [#416](https://github.com/openshift/prometheus-operator/pull/416)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/2c3a4e92762622587fe91f9f8d6de4f564a968e4...4db03df9eab1a25ff35839bb5f55b7302cf57620)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/a44c23e9d59e133d5572ef885edcf26e070b612d)

* [OCPBUGS-103292](https://issues.redhat.com/browse/OCPBUGS-103292): Use patched x/net fork v0.35.0-sec.4 [#195](https://github.com/openshift/node_exporter/pull/195)
* [Full changelog](https://github.com/openshift/node_exporter/compare/f9af0fe40cfdfc92d06ec1204e6d647c00d337b8...a44c23e9d59e133d5572ef885edcf26e070b612d)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/b5f700bef062d92668927de6817aeea62646fff6)

* [OCPBUGS-103135](https://issues.redhat.com/browse/OCPBUGS-103135): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#111](https://github.com/openshift/route-controller-manager/pull/111)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/1e53205fa2e239df3c39a78bb50fddce77b4f3e1...b5f700bef062d92668927de6817aeea62646fff6)


### [tests](https://github.com/openshift/origin/tree/187fdd8e58ad9b710d5d856a96e1c8f7b38b8cc5)

* [OCPBUGS-130857](https://issues.redhat.com/browse/OCPBUGS-130857): stage the creation of test pods to minimize etcd impact [#31741](https://github.com/openshift/origin/pull/31741)
* [Full changelog](https://github.com/openshift/origin/compare/5abe37f6f7844abc4d088595c0631734fb46864c...187fdd8e58ad9b710d5d856a96e1c8f7b38b8cc5)