# 5.0.0-ec.4
Created: 2026-07-03 09:09:12 +0000 UTC
Image Digest: `sha256:f7c253a7a868ed7458ca2236159caa63f8a5c8c66c6b9744b8ecbca45aaed778`
## Changes from 5.0.0-ec.3
### Components
* Kubectl 1.35.2
* Kubernetes 1.35.3
* Kubernetes Tests 1.35.1
* Red Hat Enterprise Linux CoreOS 10.2 upgraded from 10.2.20260521-0 to 10.2.20260627-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | OKD
Hypershift | OKD
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: |
| AWSClusterHostedDNSInstall
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled |
| AWSServiceLBNetworkSecurityGroup
(0 tests)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled
(Changed)| Enabled| Enabled| Enabled |
| OSStreams
(0 tests)| Disabled| Enabled
(Changed)| Enabled| Enabled| Disabled| Enabled
(Changed)| Enabled| Enabled |
| ExternalSnapshotMetadata
(0 tests)| Disabled| Disabled| Enabled| Enabled| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed) |
| VSphereMultiVCenterDay2
(0 tests)| Disabled| Disabled| Enabled| Enabled| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed) |
| MachineAPIMigrationAzure
(0 tests)| | | | | | | | |
| MachineAPIMigrationBareMetal
(0 tests)| | | | | | | | |
| MachineAPIMigrationGCP
(0 tests)| | | | | | | | |
| MachineAPIMigrationPowerVS
(0 tests)| | | | | | | | |
| SELinuxMountGAReadiness
(0 tests)| | | Enabled
(New)| Enabled
(New)| | | Enabled
(New)| Enabled
(New) |
### New images
* [karpenter-operator](https://github.com/openshift/karpenter-operator) git [01d708f6](https://github.com/openshift/karpenter-operator/commit/01d708f6cedaa55252fedb1db24c7455678bfb81) `sha256:ae9f742e56c03ed51c2fc6e35b9adcda06bb625db88cb71154626c522b9006fe`
### Rebuilt images without code change
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [6ca6eea2](https://github.com/openshift/aws-encryption-provider/commit/6ca6eea2f3a9d0b090ff63ba5b8e342d5686c9a8) `sha256:482e414f45b884518e35a2c18d129448c90ee8de6f75e378bbea900de82edbb9`
* [aws-node-termination-handler](https://github.com/openshift/aws-node-termination-handler) git [e4ff2aae](https://github.com/openshift/aws-node-termination-handler/commit/e4ff2aaec292db42de9f3eef4908ba1c421a2a6c) `sha256:a3399da81fd8e0723561932a4190bb640ec61d8ba5ab08dcce0e55d54ee638c0`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [f2b0db19](https://github.com/openshift/cluster-api-provider-baremetal/commit/f2b0db1919fff1344bc68948894c6775c0bf24a3) `sha256:19fd5279ac9001d570b86b2aaa4ec9a36eaf20d66cb7372c6c43a38fdffec51f`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [02af1a9f](https://github.com/openshift/kubernetes-autoscaler/commit/02af1a9fd6bcb87745979980fbbf9a2b0671dddb) `sha256:c6f3113d50bf6a89d09f80a885a4a6aeb7551d346891cc9fdb6e92a40f9d9236`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [7b1593a4](https://github.com/openshift/cluster-bootstrap/commit/7b1593a47898b6a97dc457efaca464624e9f2afa) `sha256:38346cfcee8e13da9603a38dc2a4df64b1df5147738dd3d222557c06f9d97909`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [d43423b5](https://github.com/openshift/cluster-kube-scheduler-operator/commit/d43423b583269eea8236040424609c3f108ac9c4) `sha256:654568e0e2448a55d96d2f9d80d47cbe1097b1e6c0030022b9b30ecdcd3491cd`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [34f95b07](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/34f95b07f4afbc47558e54e4fa2710fd692e615e) `sha256:2017b213be60216ca602d8def77a18d29fa01d150d80c47efc55480078a347bd`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [d6f73950](https://github.com/openshift/containernetworking-plugins/commit/d6f73950658d258e0ddbf2a4ac92e13ac840158b) `sha256:c01cf3af03dc0c309c7f89433f67df559c284fb201ec8a33ed1eac32e3980240`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [d6f73950](https://github.com/openshift/containernetworking-plugins/commit/d6f73950658d258e0ddbf2a4ac92e13ac840158b) `sha256:a0798ae4dd0b831f78a4bdaefdc0a4994a32f8fa9754d2d74c97a11046eeadb1`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [f8bb5994](https://github.com/openshift/cloud-provider-openstack/commit/f8bb5994f3cee8ee2bb5cca25e3e9783ad7dd57c) `sha256:17479ed745e503eaf526db64fcb83bf4a1c0e570bfbed64f072f8c7fd3ec6645`
* [docker-builder](https://github.com/openshift/builder) git [2cda03a9](https://github.com/openshift/builder/commit/2cda03a93696d4620703848471b3b873b0b2fa1e) `sha256:c87c786b43d7689fc1ec9e71737a306bc5d4845150d3581151282dd02fb43fef`
* [docker-registry](https://github.com/openshift/image-registry) git [57039cd2](https://github.com/openshift/image-registry/commit/57039cd2d9c87547cdf9a8d1dc7cb94f1ca089f7) `sha256:15302f919ad4edac56587eb4cd087a95092edeea76054551b07eb613bae1414a`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [d37f51e0](https://github.com/openshift/egress-router-cni/commit/d37f51e057620bdee564f68dcfde955acf033d3e) `sha256:7bfe300023f9adb30388b79d7c99e806e55499825f9508893cd185514c140792`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [38c16c46](https://github.com/openshift/kubernetes-metrics-server/commit/38c16c4698d131ab0e2da0d4b4b76d5322a89bab) `sha256:9e12e488ab8d433d3fe3e7eb50e625cb1133983cd4ba268ffd9a4d168b24626a`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [d12e2746](https://github.com/openshift/kube-rbac-proxy/commit/d12e274605248f6c59373240a7eae7a7a357dcb3) `sha256:26c097f9012d53bc567311e8ceefbdc0970a07d08f1122059015a75f0f0f87f3`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [72835e43](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/72835e43c7754356645e41031f3a99926b4d42e6) `sha256:c4cd1e2232bdcc3c12fb0486821fac41c3b923400d2e93ba6107ca010438eb78`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [76dd5a6f](https://github.com/openshift/cloud-provider-kubevirt/commit/76dd5a6fa9e86573bf3dfb79be17edf832e3bae1) `sha256:f9e5bb206669baa33ead4ffd49da1d397862c39dd2e15082da1efb0f7c934c09`
* [multus-cni](https://github.com/openshift/multus-cni) git [b4ec7d82](https://github.com/openshift/multus-cni/commit/b4ec7d8239ce4bd3ed949bce9816a013377b44c7) `sha256:8e6024f199eaceffbd001e195c38589a1f7a2f1532c828b382bfe18870e642f4`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [b4ec7d82](https://github.com/openshift/multus-cni/commit/b4ec7d8239ce4bd3ed949bce9816a013377b44c7) `sha256:e59e008e8c49fdda3fcd644b3099dcf443f524ff710a47d3ef399988ddcf6328`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [932bdaa4](https://github.com/openshift/multus-networkpolicy/commit/932bdaa4250d0a1db41a1a1fcac8192f2757211c) `sha256:32c15659a8fd3ced4905290e5c17779d5746333493e5b7d372dfd3809e751a69`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [08af4127](https://github.com/openshift/route-override-cni/commit/08af4127c77976510cad1c096d9aca977d8ae5af) `sha256:d139d004ccc3004bf86f343f97d47cf969acf9e2cf394189943c8bb54f498d9c`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [d691040e](https://github.com/openshift/whereabouts-cni/commit/d691040e509bb20c26b5e8366c0d6f3bb45a5e02) `sha256:e87f8734bd14506fa97be97a2a94da76753b7d9f3adedb527273de022ad2143f`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [5b233ea1](https://github.com/openshift/network-metrics-daemon/commit/5b233ea1d80733c1b00c6bad65dec0620dbf783a) `sha256:f40e5c685a4b726b22a6be12e4584738e647e49324a66ccc8aa3021572c66dd8`
* [oauth-server](https://github.com/openshift/oauth-server) git [f892602b](https://github.com/openshift/oauth-server/commit/f892602b822782e0080abc70c6cd1d178f11e684) `sha256:c2018a204b151968997d2c1c22959aefd899e031eeb42791283e72c6a23fa9de`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [5631cf49](https://github.com/openshift/openshift-controller-manager/commit/5631cf493b006cbc72a8600a7435813272d71940) `sha256:bd4b475ca64d425459294c0f9351c2edd5a2a620c4b5428abdf3d17c90370921`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [f8bb5994](https://github.com/openshift/cloud-provider-openstack/commit/f8bb5994f3cee8ee2bb5cca25e3e9783ad7dd57c) `sha256:7fb04dbe07ebe334d3dfeb76850c068f28752ef6b9b9881a8b471e2711280544`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [f8bb5994](https://github.com/openshift/cloud-provider-openstack/commit/f8bb5994f3cee8ee2bb5cca25e3e9783ad7dd57c) `sha256:8a15580203ed284cfa994540b22474bf0f29a183820e6c9324798772e7d37b27`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [e88cf81d](https://github.com/openshift/machine-api-provider-powervs/commit/e88cf81dd9ad174f395b86f9cdc40fa30cb06bf4) `sha256:9583d1738baf2d8cbb596b424686f5a8ec89d77bcf79395e99ddf5567af86cdd`
### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/7844aebf98b6018a3f1ae684b412589d0386a48f)
* [OCPBUGS-93368](https://issues.redhat.com/browse/OCPBUGS-93368): Simplify IRI api dependency [#10528](https://github.com/openshift/assisted-service/pull/10528)
* NO-ISSUE: Refresh RPM lockfiles RPM lockfile refresh [SECURITY] [#10523](https://github.com/openshift/assisted-service/pull/10523)
* [MGMT-24443](https://issues.redhat.com/browse/MGMT-24443): watch configmap for CNI config update [#10384](https://github.com/openshift/assisted-service/pull/10384)
* [OCPBUGS-91974](https://issues.redhat.com/browse/OCPBUGS-91974): Stop setting DevPreviewNoUpgrade for TNF clusters [#10507](https://github.com/openshift/assisted-service/pull/10507)
* [MGMT-24635](https://issues.redhat.com/browse/MGMT-24635): Incorrect grammar in OpenShift AI GPU validation message [#10511](https://github.com/openshift/assisted-service/pull/10511)
* [ACM-35864](https://issues.redhat.com/browse/ACM-35864): CVE-2026-39828/39829/39830 Bump golang.org/x/crypto to v0.52.0 [#10495](https://github.com/openshift/assisted-service/pull/10495)
* [MGMT-24453](https://issues.redhat.com/browse/MGMT-24453): upgrade to golang 1.26 for assisted-service [#10396](https://github.com/openshift/assisted-service/pull/10396)
* [MGMT-24610](https://issues.redhat.com/browse/MGMT-24610): Get OCP lifecycle data via api/v2 and update the product's name [#10478](https://github.com/openshift/assisted-service/pull/10478)
* [ACM-34978](https://issues.redhat.com/browse/ACM-34978): apply disk encryption defaults on cluster create and update [#10442](https://github.com/openshift/assisted-service/pull/10442)
* [OCPBUGS-87099](https://issues.redhat.com/browse/OCPBUGS-87099): Add sourcedir /run/chrony-dhcp to generated chrony.conf [#10479](https://github.com/openshift/assisted-service/pull/10479)
* [MGMT-21368](https://issues.redhat.com/browse/MGMT-21368): Log slow queries gorm [#10457](https://github.com/openshift/assisted-service/pull/10457)
* [MGMT-23234](https://issues.redhat.com/browse/MGMT-23234): [BE] Improve the UX around the amd/nvidia operators selection - add profile to selection [#10387](https://github.com/openshift/assisted-service/pull/10387)
* [MGMT-24398](https://issues.redhat.com/browse/MGMT-24398), [MGMT-24399](https://issues.redhat.com/browse/MGMT-24399): Migrate test versions to OCP version builder [#10412](https://github.com/openshift/assisted-service/pull/10412)
* [MGMT-22787](https://issues.redhat.com/browse/MGMT-22787): Limit inventory output [#10374](https://github.com/openshift/assisted-service/pull/10374)
* [ACM-35140](https://issues.redhat.com/browse/ACM-35140): CVE-2025-58058 Bump github.com/ulikunitz/xz to v0.5.15 [#10450](https://github.com/openshift/assisted-service/pull/10450)
* NO-ISSUE: [master] Bump OCP versions: 5.0, 4.21 [#10472](https://github.com/openshift/assisted-service/pull/10472)
* [ACM-35141](https://issues.redhat.com/browse/ACM-35141): CVE-2025-58058 Bump github.com/ulikunitz/xz to v0.5.15 through indirect dependency conversion [#10461](https://github.com/openshift/assisted-service/pull/10461)
* [MGMT-24571](https://issues.redhat.com/browse/MGMT-24571): Fix initrd PPI reboot loop by comparing correct image URL [#10456](https://github.com/openshift/assisted-service/pull/10456)
* NO-ISSUE: [master] Bump OCP versions: 4.19 [#10449](https://github.com/openshift/assisted-service/pull/10449)
* [MGMT-24551](https://issues.redhat.com/browse/MGMT-24551): Add vNIC NFD rule and refine NIC subsystem matchers [#10448](https://github.com/openshift/assisted-service/pull/10448)
* [MGMT-24336](https://issues.redhat.com/browse/MGMT-24336): Bump LSO catalog fallback to v4.22 for OCP 5.0 [#10437](https://github.com/openshift/assisted-service/pull/10437)
* [MGMT-24410](https://issues.redhat.com/browse/MGMT-24410): Fixes for installer cache [#10397](https://github.com/openshift/assisted-service/pull/10397)
* [MGMT-24550](https://issues.redhat.com/browse/MGMT-24550): Migrate NFD NodeFeatureRule apiVersion to nfd.k8s-sigs.io [#10444](https://github.com/openshift/assisted-service/pull/10444)
* [OCPEDGE-2692](https://issues.redhat.com/browse/OCPEDGE-2692): feat: support MAC address fencing credentials in ABI flow [#10385](https://github.com/openshift/assisted-service/pull/10385)
* [MGMT-24339](https://issues.redhat.com/browse/MGMT-24339): Prepare 4.22 stable versions assisted-service upstream [#10440](https://github.com/openshift/assisted-service/pull/10440)
* NO-ISSUE: [master] Bump OCP versions: 4.22 [#10445](https://github.com/openshift/assisted-service/pull/10445)
* NO-ISSUE: Update OCP 5.0 OS images to use released 4.22 RHCOS [#10441](https://github.com/openshift/assisted-service/pull/10441)
* [MGMT-24495](https://issues.redhat.com/browse/MGMT-24495): Fix S3 additional_name and file_name [#10432](https://github.com/openshift/assisted-service/pull/10432)
* [MGMT-24496](https://issues.redhat.com/browse/MGMT-24496): Allow spaces between the value and unit for installcache [#10433](https://github.com/openshift/assisted-service/pull/10433)
* [Full changelog](https://github.com/openshift/assisted-service/compare/6676a6d8755afa66a2fb0c8b23bc79417196e469...7844aebf98b6018a3f1ae684b412589d0386a48f)
### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/c41e0c7d465a9357a49036b350368f008730080e)
* [MGMT-24453](https://issues.redhat.com/browse/MGMT-24453): upgrade to golang 1.26 [#2171](https://github.com/openshift/assisted-installer/pull/2171)
* NO-ISSUE: Refresh RPM lockfiles [#2182](https://github.com/openshift/assisted-installer/pull/2182)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/7c400e88587c5c52a14500ac4c228fa3f99a9d60...c41e0c7d465a9357a49036b350368f008730080e)
### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/bdf48b99ec8ca8ce67669fabd59a9669faa0e64e)
* NO-ISSUE: Refresh RPM lockfiles RPM lockfile refresh [SECURITY] [#1520](https://github.com/openshift/assisted-installer-agent/pull/1520)
* NO-ISSUE: Update module github.com/golangci/golangci-lint to v2.12.2 [#1515](https://github.com/openshift/assisted-installer-agent/pull/1515)
* [MGMT-24453](https://issues.redhat.com/browse/MGMT-24453): upgrade to golang 1.26 [#1509](https://github.com/openshift/assisted-installer-agent/pull/1509)
* [MGMT-22787](https://issues.redhat.com/browse/MGMT-22787): Log inventory when it's too big [#1510](https://github.com/openshift/assisted-installer-agent/pull/1510)
* [MGMT-22787](https://issues.redhat.com/browse/MGMT-22787): Limit inventory output [#1474](https://github.com/openshift/assisted-installer-agent/pull/1474)
* [MGMT-24376](https://issues.redhat.com/browse/MGMT-24376): Report InfiniBand NIC speed from HCA sysfs path [#1492](https://github.com/openshift/assisted-installer-agent/pull/1492)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/b5ecd18f8be9eac3fc6052b24dce306333e6cb8a...bdf48b99ec8ca8ce67669fabd59a9669faa0e64e)
### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/c52e7a7021da1cb083a252649ec3ca28503f1ab4)
* [AGENT-1536](https://issues.redhat.com/browse/AGENT-1536): bump mtv-operator channel to release-v2.12 [#309](https://github.com/openshift/agent-installer-utils/pull/309)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/546c1a9f71cff62e7eb85e7e70cd0c66ecd66c13...c52e7a7021da1cb083a252649ec3ca28503f1ab4)
### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/8264c02deda9abb6cd9a6a5c23305428431473c2)
* NO-JIRA: Merge https://github.com/kubernetes-sigs/apiserver-network-proxy:master (6eff182) into main [#111](https://github.com/openshift/apiserver-network-proxy/pull/111)
* NO-JIRA: Update OpenShift carry patches for Go 1.26 / OpenShift 5.0 [#113](https://github.com/openshift/apiserver-network-proxy/pull/113)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/c2014a5055dd4a3d32acdac070ee4e6b5207686f...8264c02deda9abb6cd9a6a5c23305428431473c2)
### [aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, azure-workload-identity-webhook, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibmcloud-machine-controllers, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, kube-proxy, machine-image-customization-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/a466682e3867da746be24d7d56c6641612721d6c)
* [OCPBUGS-84961](https://issues.redhat.com/browse/OCPBUGS-84961): UPSTREAM: <carry>: fix kubernetes/conformance to filter on [Conformance] label [#2694](https://github.com/openshift/kubernetes/pull/2694)
* [AUTOSCALE-812](https://issues.redhat.com/browse/AUTOSCALE-812): Add NodeSelectorAdjuster admission plugin for standalone clusters [#2695](https://github.com/openshift/kubernetes/pull/2695)
* [OCPBUGS-84961](https://issues.redhat.com/browse/OCPBUGS-84961): add kubernetes/conformance umbrella suite [#2682](https://github.com/openshift/kubernetes/pull/2682)
* [Full changelog](https://github.com/openshift/kubernetes/compare/872bd3722d0954b31459f715fbd4fb7612aaf338...a466682e3867da746be24d7d56c6641612721d6c)
### [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws/tree/9d3e33c99a323659ae02d1121fe36141ccf292f0)
* [OCPBUGS-87402](https://issues.redhat.com/browse/OCPBUGS-87402): Updating aws-karpenter-provider-aws-container image to be consistent with ART for 5.0 [#30](https://github.com/openshift/aws-karpenter-provider-aws/pull/30)
* [Full changelog](https://github.com/openshift/aws-karpenter-provider-aws/compare/f0be9c72e5bf25caeb2ca45c14e67e4d397a52cb...9d3e33c99a323659ae02d1121fe36141ccf292f0)
### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/ca3d747de321b88a2c606e546851d1841d2fab9f)
* [CNTRLPLANE-3660](https://issues.redhat.com/browse/CNTRLPLANE-3660): Add AGENTS.md, ARCHITECTURE.md, CLAUDE.md, update CONTRIBUTING.md [#49](https://github.com/openshift/azure-kubernetes-kms/pull/49)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/5367d3988bf7c629254ef77dbbbea058f48fdc47...ca3d747de321b88a2c606e546851d1841d2fab9f)
### [azure-service-operator](https://github.com/openshift/azure-service-operator/tree/0611cd27b9eaa4a1fa8e0ab8ddc85352a61903e0)
* [OCPBUGS-87382](https://issues.redhat.com/browse/OCPBUGS-87382): Updating ose-azure-service-operator-container image to be consistent with ART for 5.0 [#33](https://github.com/openshift/azure-service-operator/pull/33)
* [Full changelog](https://github.com/openshift/azure-service-operator/compare/0827c1fb110ea136fc7abb7b3ac8be062335d00d...0611cd27b9eaa4a1fa8e0ab8ddc85352a61903e0)
### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/29a96694bfc3b59d1fa95acf2ad87077cc1d3108)
* [OCPBUGS-87254](https://issues.redhat.com/browse/OCPBUGS-87254): Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 5.0 [#84](https://github.com/openshift/cluster-api-provider-metal3/pull/84)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/986fd4de877f197710e1a3ac9ea2a9de3824928f...29a96694bfc3b59d1fa95acf2ad87077cc1d3108)
### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/a4e07b0b8ca5c1a1ae7524aa725c74e431abeb7e)
* [OCPBUGS-87841](https://issues.redhat.com/browse/OCPBUGS-87841): gather: redact pull-secret auth tokens from machineconfigs.json [#10660](https://github.com/openshift/installer/pull/10660)
* [OCPBUGS-93627](https://issues.redhat.com/browse/OCPBUGS-93627): destroy/aws: delete vpc endpoints earlier [#10661](https://github.com/openshift/installer/pull/10661)
* [OCPBUGS-91975](https://issues.redhat.com/browse/OCPBUGS-91975), [OCPBUGS-91976](https://issues.redhat.com/browse/OCPBUGS-91976): Include bootstrap gather in agent-gather archive [#10501](https://github.com/openshift/installer/pull/10501)
* no-jira: dynamically set CVO upgrade version [#10655](https://github.com/openshift/installer/pull/10655)
* [CORS-4334](https://issues.redhat.com/browse/CORS-4334): Konnectivity [#10344](https://github.com/openshift/installer/pull/10344)
* [OCPBUGS-88303](https://issues.redhat.com/browse/OCPBUGS-88303): pkg/types/gcp: apply defaultMachinePlatform values [#10617](https://github.com/openshift/installer/pull/10617)
* NO-ISSUE: Add AI skill for modifying install-config [#10645](https://github.com/openshift/installer/pull/10645)
* [OCPBUGS-90537](https://issues.redhat.com/browse/OCPBUGS-90537): allow agent TUI to be shown also for rhcos10 base ISO [#10640](https://github.com/openshift/installer/pull/10640)
* [OCPBUGS-43501](https://issues.redhat.com/browse/OCPBUGS-43501): fix kargs handling in ABI Minimal ISO [#10578](https://github.com/openshift/installer/pull/10578)
* [OCPBUGS-88562](https://issues.redhat.com/browse/OCPBUGS-88562): Use yum install vs yum update tzdata [#10623](https://github.com/openshift/installer/pull/10623)
* [OCPBUGS-89645](https://issues.redhat.com/browse/OCPBUGS-89645): Revert: Ensure ssh keys strict permissions after bootstrap pivot [#10633](https://github.com/openshift/installer/pull/10633)
* [OCPBUGS-89645](https://issues.redhat.com/browse/OCPBUGS-89645): Ensure ssh keys strict permissions after bootstrap pivot [#10631](https://github.com/openshift/installer/pull/10631)
* [OCPBUGS-88701](https://issues.redhat.com/browse/OCPBUGS-88701): Exclude bind-mounted crypto policies from rsync [#10627](https://github.com/openshift/installer/pull/10627)
* no-jira: add rochacbruno to owners file [#10619](https://github.com/openshift/installer/pull/10619)
* [CORS-3893](https://issues.redhat.com/browse/CORS-3893): Create nat rule and associate to NIC [#10361](https://github.com/openshift/installer/pull/10361)
* [MCO-2181](https://issues.redhat.com/browse/MCO-2181): Fix linter error [#10622](https://github.com/openshift/installer/pull/10622)
* [MCO-2181](https://issues.redhat.com/browse/MCO-2181): Fix ART build version parsing panic in removeGoVersionPrefix [#10621](https://github.com/openshift/installer/pull/10621)
* [MCO-2181](https://issues.redhat.com/browse/MCO-2181): Default version switchover [#10533](https://github.com/openshift/installer/pull/10533)
* [OCPBUGS-86498](https://issues.redhat.com/browse/OCPBUGS-86498): openstack: add tzdata dependency to CI image [#10573](https://github.com/openshift/installer/pull/10573)
* [SPLAT-2795](https://issues.redhat.com/browse/SPLAT-2795): Enhanced vSphere cloud config to include node network cidr information [#10614](https://github.com/openshift/installer/pull/10614)
* no-jira: coderabbit: fix tools format [#10616](https://github.com/openshift/installer/pull/10616)
* [OCPBUGS-87493](https://issues.redhat.com/browse/OCPBUGS-87493): Updating ose-baremetal-installer-container image to be consistent with ART for 5.0 [#10602](https://github.com/openshift/installer/pull/10602)
* [CORS-4503](https://issues.redhat.com/browse/CORS-4503): bump cluster-api to v1.12.8 [#10587](https://github.com/openshift/installer/pull/10587)
* [OCPBUGS-87484](https://issues.redhat.com/browse/OCPBUGS-87484): Updating ose-installer-container image to be consistent with ART for 5.0 [#10601](https://github.com/openshift/installer/pull/10601)
* [CORS-3898](https://issues.redhat.com/browse/CORS-3898): Add IPv6 DNS records for dual-stack [#10330](https://github.com/openshift/installer/pull/10330)
* [OCPBUGS-87519](https://issues.redhat.com/browse/OCPBUGS-87519): Updating ose-installer-artifacts-container image to be consistent with ART for 5.0 [#10603](https://github.com/openshift/installer/pull/10603)
* [CORS-4404](https://issues.redhat.com/browse/CORS-4404): pkg/quota: GCP, allow unauthenticated [#10611](https://github.com/openshift/installer/pull/10611)
* [CORS-3895](https://issues.redhat.com/browse/CORS-3895): Add IPv6 backend pools and load balancing rules for dual-stack [#10329](https://github.com/openshift/installer/pull/10329)
* [CORS-4236](https://issues.redhat.com/browse/CORS-4236): aws: support worker machine pool management with ClusterAPI [#10577](https://github.com/openshift/installer/pull/10577)
* [OCPBUGS-76928](https://issues.redhat.com/browse/OCPBUGS-76928): Remove workaround to normalize ISO files extensions [#10315](https://github.com/openshift/installer/pull/10315)
* [OCPBUGS-86471](https://issues.redhat.com/browse/OCPBUGS-86471): baremetal: fix hostSelector for default stream [#10571](https://github.com/openshift/installer/pull/10571)
* [OCPBUGS-85509](https://issues.redhat.com/browse/OCPBUGS-85509): Add omitempty to vSphere and Nutanix MachinePool slice fields [#10551](https://github.com/openshift/installer/pull/10551)
* [Full changelog](https://github.com/openshift/installer/compare/b052deaf4378b6efcde486796d88aa8c834059c8...a4e07b0b8ca5c1a1ae7524aa725c74e431abeb7e)
### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/5d3be9399c46e8789a6e735672c5fb7abc4b46bd)
* [OCPBUGS-64617](https://issues.redhat.com/browse/OCPBUGS-64617): Merge upstream [#499](https://github.com/openshift/baremetal-operator/pull/499)
* NO-ISSUE: Merge upstream [#489](https://github.com/openshift/baremetal-operator/pull/489)
* [OCPBUGS-87490](https://issues.redhat.com/browse/OCPBUGS-87490): Updating ose-baremetal-operator-container image to be consistent with ART for 5.0 [#488](https://github.com/openshift/baremetal-operator/pull/488)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/7a005472c3461a960aa983a325eddc504f836365...5d3be9399c46e8789a6e735672c5fb7abc4b46bd)
### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/079091da0e619331ec79b87e466781efe2445411)
* [OCPBUGS-87329](https://issues.redhat.com/browse/OCPBUGS-87329): Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 5.0 [#393](https://github.com/openshift/baremetal-runtimecfg/pull/393)
* NO-ISSUE: Bump go to 1.25.10 and x/net to v0.55.0 to fix CVE-2026-33814 [#392](https://github.com/openshift/baremetal-runtimecfg/pull/392)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/cf62f8c7ac7494096e99997a53ceb48e997c1273...079091da0e619331ec79b87e466781efe2445411)
### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/df12d888651c93004027efc0d58ea84a886ce8f7)
* NO-JIRA: Fix tar slip path traversal in codesign archive extraction [#2291](https://github.com/openshift/oc/pull/2291)
* NO-JIRA: accept risks e2e becomes blocking [#2280](https://github.com/openshift/oc/pull/2280)
* [OTA-1956](https://issues.redhat.com/browse/OTA-1956): oc adm release new: Include base image's image-references in pruning [#2287](https://github.com/openshift/oc/pull/2287)
* [OCPBUGS-88342](https://issues.redhat.com/browse/OCPBUGS-88342): openshift-clients RPM has a hard dependency on bash-completion [#2289](https://github.com/openshift/oc/pull/2289)
* [OCPBUGS-87534](https://issues.redhat.com/browse/OCPBUGS-87534): Updating openshift-enterprise-deployer-container image to be consistent with ART for 5.0 [#2284](https://github.com/openshift/oc/pull/2284)
* [Full changelog](https://github.com/openshift/oc/compare/d1f312bb855e741cadb8b3ac419d2cb3f3fd7ba5...df12d888651c93004027efc0d58ea84a886ce8f7)
### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/72a5a4676668c7105203aa7ec1b33a74ff23f75e)
* [OCPBUGS-87029](https://issues.redhat.com/browse/OCPBUGS-87029): nutanix: fix ccoctl to accept directory for --credentials-source-filepath [#1036](https://github.com/openshift/cloud-credential-operator/pull/1036)
* NO-ISSUE: Update OWNERS: remove 2uasimojo, suhanime [#1038](https://github.com/openshift/cloud-credential-operator/pull/1038)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/833d9a3e986b917d22e063444031b3a1bda3195f...72a5a4676668c7105203aa7ec1b33a74ff23f75e)
### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/0b49df2bc4b10110463f1aa2a5fc475ebaeef9ab)
* [CORENET-7297](https://issues.redhat.com/browse/CORENET-7297): Add CodeRabbit AI review configuration [#227](https://github.com/openshift/cloud-network-config-controller/pull/227)
* [OCPBUGS-87475](https://issues.redhat.com/browse/OCPBUGS-87475): Updating ose-cloud-network-config-controller-container image to be consistent with ART for 5.0 [#224](https://github.com/openshift/cloud-network-config-controller/pull/224)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/2d69ad953cfaa419e9b6221da9edb152ded91e0b...0b49df2bc4b10110463f1aa2a5fc475ebaeef9ab)
### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/60f4dee2ea47070dbc5bf34042db50fb2e63f7c1)
* [CNTRLPLANE-3720](https://issues.redhat.com/browse/CNTRLPLANE-3720): Add human and agent context files [#933](https://github.com/openshift/cluster-authentication-operator/pull/933)
* NO-JIRA: Bump library-go [#932](https://github.com/openshift/cluster-authentication-operator/pull/932)
* NO-JIRA: Update openshift dependencies [#931](https://github.com/openshift/cluster-authentication-operator/pull/931)
* NO-JIRA: add kms preflight to NP to allow egress [#928](https://github.com/openshift/cluster-authentication-operator/pull/928)
* NO-JIRA: Store authentication-operator image as OPERATOR_IMAGE [#927](https://github.com/openshift/cluster-authentication-operator/pull/927)
* NO-JIRA: Automatic agentic rebase: Update library-go to b0f5231 [#923](https://github.com/openshift/cluster-authentication-operator/pull/923)
* [CNTRLPLANE-3210](https://issues.redhat.com/browse/CNTRLPLANE-3210): Update external OIDC config generation to support external claims sourcing [#880](https://github.com/openshift/cluster-authentication-operator/pull/880)
* NO-JIRA: add preflight command [#920](https://github.com/openshift/cluster-authentication-operator/pull/920)
* [CNTRLPLANE-3363](https://issues.redhat.com/browse/CNTRLPLANE-3363): Register health monitor as command [#918](https://github.com/openshift/cluster-authentication-operator/pull/918)
* NO-JIRA: kms: bump library-go to get KMS plugin security context [#916](https://github.com/openshift/cluster-authentication-operator/pull/916)
* [CNTRLPLANE-3545](https://issues.redhat.com/browse/CNTRLPLANE-3545): bump library-go to get CA bundle wiring [#913](https://github.com/openshift/cluster-authentication-operator/pull/913)
* NO-JIRA: Automatic agentic rebase: Update library-go to 7fd5f33 [#915](https://github.com/openshift/cluster-authentication-operator/pull/915)
* NO-JIRA: Automatic agentic rebase: Update library-go to 0469313 [#912](https://github.com/openshift/cluster-authentication-operator/pull/912)
* [OCPBUGS-86221](https://issues.redhat.com/browse/OCPBUGS-86221): Update the well-known readiness controller to properly set cluster-operator conditions [#901](https://github.com/openshift/cluster-authentication-operator/pull/901)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/abbfbd5314f9803b638abe05946acad1e7eea6fa...60f4dee2ea47070dbc5bf34042db50fb2e63f7c1)
### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/f8fc286e8fe102766b191410e66dfc2554bbe17f)
* [OCPBUGS-87827](https://issues.redhat.com/browse/OCPBUGS-87827): only use central TLS profile when the cluster says to [#378](https://github.com/openshift/cluster-autoscaler-operator/pull/378)
* [OCPBUGS-87339](https://issues.redhat.com/browse/OCPBUGS-87339): Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 5.0 [#377](https://github.com/openshift/cluster-autoscaler-operator/pull/377)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/825c44c051df38bbf98c9fcc885a0288204edfe1...f8fc286e8fe102766b191410e66dfc2554bbe17f)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/3c65cfcd29414ddf50c0f4c3cdf6030dfd715d2f)
* [METAL-1730](https://issues.redhat.com/browse/METAL-1730): Pass IMAGE_SHARED_DIR to image-customization-controller [#590](https://github.com/openshift/cluster-baremetal-operator/pull/590)
* [OCPBUGS-87290](https://issues.redhat.com/browse/OCPBUGS-87290): Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 5.0 [#611](https://github.com/openshift/cluster-baremetal-operator/pull/611)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/ad7efaabc975e8318056ee74986dec3d135914ed...3c65cfcd29414ddf50c0f4c3cdf6030dfd715d2f)
### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/4917d86210f4decb58a7added337c209335d1314)
* [OCPBUGS-87327](https://issues.redhat.com/browse/OCPBUGS-87327): Updating ose-cluster-api-container image to be consistent with ART for 5.0 [#301](https://github.com/openshift/cluster-api/pull/301)
* [Full changelog](https://github.com/openshift/cluster-api/compare/0a73a6858bf14e1b82d2c7477dbb392d882f6a21...4917d86210f4decb58a7added337c209335d1314)
### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/4cf948fcb3967aceedbebd1c35cc8368857c160d)
* NO-JIRA: fix machine sync e2e test flake [#612](https://github.com/openshift/cluster-capi-operator/pull/612)
* [OCPCLOUD-3569](https://issues.redhat.com/browse/OCPCLOUD-3569): Initial import of rough provider tooling documentation [#609](https://github.com/openshift/cluster-capi-operator/pull/609)
* [OCPCLOUD-3570](https://issues.redhat.com/browse/OCPCLOUD-3570): e2e skip Cluster API authoritative MachineSets in GetFirstMAPIMachineSet [#610](https://github.com/openshift/cluster-capi-operator/pull/610)
* NO-JIRA: Fix races in machineset sync units [#551](https://github.com/openshift/cluster-capi-operator/pull/551)
* NO-JIRA: Fix a race in MachineSet e2es [#605](https://github.com/openshift/cluster-capi-operator/pull/605)
* [OCPCLOUD-3455](https://issues.redhat.com/browse/OCPCLOUD-3455): refine AWS CredentialsRequest permissions [#601](https://github.com/openshift/cluster-capi-operator/pull/601)
* [OCPBUGS-91667](https://issues.redhat.com/browse/OCPBUGS-91667): Bump capi-installer resync to 12 hours [#608](https://github.com/openshift/cluster-capi-operator/pull/608)
* [OCPCLOUD-3009](https://issues.redhat.com/browse/OCPCLOUD-3009): Bootstrap OTE framework [#597](https://github.com/openshift/cluster-capi-operator/pull/597)
* NO-JIRA: Bump cluster-api-actuator-pkg to fix MachineSet scale tests [#598](https://github.com/openshift/cluster-capi-operator/pull/598)
* [OCPBUGS-87001](https://issues.redhat.com/browse/OCPBUGS-87001): Move installer and revision controllers to their own deployment [#576](https://github.com/openshift/cluster-capi-operator/pull/576)
* NO-JIRA: Fix continous reconciliation of VAPs due to server-side defaulting [#581](https://github.com/openshift/cluster-capi-operator/pull/581)
* [OCPBUGS-86770](https://issues.redhat.com/browse/OCPBUGS-86770): Fix OpenStack identityRef conversion and add e2e test [#575](https://github.com/openshift/cluster-capi-operator/pull/575)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/05c113ea5edd0aaf43e34c4a534a673d457449c1...4cf948fcb3967aceedbebd1c35cc8368857c160d)
### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/4f8df24f1c4176888643e2d3cedd6a33ae76fd4b)
* NO-JIRA: manifests: Shift operator Deployment and ClusterOperator after CredentialsRequests [#478](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/478)
* [TRT-2754](https://issues.redhat.com/browse/TRT-2754): Revert "Updates clusteroperator_controller progressing" [#477](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/477)
* [OCPBUGS-64852](https://issues.redhat.com/browse/OCPBUGS-64852): Updates clusteroperator_controller progressing [#473](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/473)
* [OCPBUGS-64852](https://issues.redhat.com/browse/OCPBUGS-64852): Progressing fix [#467](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/467)
* [SPLAT-2792](https://issues.redhat.com/browse/SPLAT-2792): Fixed issue where old vCenters not removed from new cloud config [#469](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/469)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/a9cbda8731035e6abf577e6840d3bd2f4c7a075c...4f8df24f1c4176888643e2d3cedd6a33ae76fd4b)
### [cluster-config-api](https://github.com/openshift/api/tree/3d22ba1007502a22d83aebecb29457d8ef124c5a)
* [SPLAT-2588](https://issues.redhat.com/browse/SPLAT-2588): Promoting AWSServiceLBNetworkSecurityGroup on hypershift [#2838](https://github.com/openshift/api/pull/2838)
* [STOR-2771](https://issues.redhat.com/browse/STOR-2771): Add SELinuxMountGAReadiness FG [#2882](https://github.com/openshift/api/pull/2882)
* [OCPEDGE-2746](https://issues.redhat.com/browse/OCPEDGE-2746): Add MutableTopology feature gated infra spec.controlPlaneTopology [#2891](https://github.com/openshift/api/pull/2891)
* [OCPNODE-4125](https://issues.redhat.com/browse/OCPNODE-4125): Introduce to v1 CRIOCredentialProviderConfig [#2725](https://github.com/openshift/api/pull/2725)
* [STOR-2966](https://issues.redhat.com/browse/STOR-2966): Promote ExternalSnapshotMetadata feature gate to TechPreviewNoUpgrade [#2887](https://github.com/openshift/api/pull/2887)
* [OCPBUGS-63219](https://issues.redhat.com/browse/OCPBUGS-63219): Add protocol to AWS NLB parameters [#2661](https://github.com/openshift/api/pull/2661)
* [SSCSI-245](https://issues.redhat.com/browse/SSCSI-245): Add Secrets Store CSI driver configuration to ClusterCSIDriver API [#2846](https://github.com/openshift/api/pull/2846)
* [OCPCLOUD-3368](https://issues.redhat.com/browse/OCPCLOUD-3368): Adding cabilities for crdcompatibilitychecker and capi CRs [#2884](https://github.com/openshift/api/pull/2884)
* [SPLAT-2588](https://issues.redhat.com/browse/SPLAT-2588): fix hypershift topology variant to match Sippy classification [#2899](https://github.com/openshift/api/pull/2899)
* [CNTRLPLANE-2449](https://issues.redhat.com/browse/CNTRLPLANE-2449): feat: implement OpenAPIModelNamer interface [#2856](https://github.com/openshift/api/pull/2856)
* [OCPBUGS-90053](https://issues.redhat.com/browse/OCPBUGS-90053): add new serviceAccountToken fs type [#2894](https://github.com/openshift/api/pull/2894)
* operator/v1: replace anyOf with CEL XValidation for maxConnections [#2861](https://github.com/openshift/api/pull/2861)
* [CNTRLPLANE-3513](https://issues.redhat.com/browse/CNTRLPLANE-3513): add kms health reports [#2881](https://github.com/openshift/api/pull/2881)
* [NE-2278](https://issues.redhat.com/browse/NE-2278): Move ingresscontroller api file to proper name [#2892](https://github.com/openshift/api/pull/2892)
* [CORS-4029](https://issues.redhat.com/browse/CORS-4029): Promote AWS ClusterHostedDNSInstall to Default [#2775](https://github.com/openshift/api/pull/2775)
* Revert "TRT-2701: Revert "SPLAT-2793: Promoted VSphereMultiVCenterDay2 feature gate to TP"" [#2886](https://github.com/openshift/api/pull/2886)
* NO-JIRA: tools: fix verify-codegen in git worktrees [#2888](https://github.com/openshift/api/pull/2888)
* [OCPCLOUD-3540](https://issues.redhat.com/browse/OCPCLOUD-3540): Add MachineAPIMigration platform-specific featuregates for Azure, BareMetal, GCP, and PowerVS [#2889](https://github.com/openshift/api/pull/2889)
* [PIXAA-13](https://issues.redhat.com/browse/PIXAA-13): evals for api review command [#2606](https://github.com/openshift/api/pull/2606)
* [MCO-2294](https://issues.redhat.com/browse/MCO-2294): promote OSStreams to GA in self-managed clusters [#2849](https://github.com/openshift/api/pull/2849)
* [TRT-2701](https://issues.redhat.com/browse/TRT-2701): Revert "SPLAT-2793: Promoted VSphereMultiVCenterDay2 feature gate to TP" [#2885](https://github.com/openshift/api/pull/2885)
* Monitoring API: remove maximum retention days prometheus [#2851](https://github.com/openshift/api/pull/2851)
* [SPLAT-2793](https://issues.redhat.com/browse/SPLAT-2793): Promoted VSphereMultiVCenterDay2 feature gate to TP [#2879](https://github.com/openshift/api/pull/2879)
* [OCPBUGS-87497](https://issues.redhat.com/browse/OCPBUGS-87497): Updating ose-cluster-config-api-container image to be consistent with ART for 5.0 [#2878](https://github.com/openshift/api/pull/2878)
* [CNTRLPLANE-3395](https://issues.redhat.com/browse/CNTRLPLANE-3395): Lower maximum allowed etcd quota from 32 to 16GiB [#2840](https://github.com/openshift/api/pull/2840)
* [Full changelog](https://github.com/openshift/api/compare/1194f4c62539275cd6dec231cc2bf7e0a010bd94...3d22ba1007502a22d83aebecb29457d8ef124c5a)
### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/a346b395960addcf7140551c78f86281d92d7dd2)
* [CNTRLPLANE-2270](https://issues.redhat.com/browse/CNTRLPLANE-2270): OTE scaffolding and E2E tests [#492](https://github.com/openshift/cluster-config-operator/pull/492)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/2697a43188018b6e76a5acbd672d59bc2f77b79e...a346b395960addcf7140551c78f86281d92d7dd2)
### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/046a4ea83e45c3c1d5eb2d3ffc55a7e7d17fcc3c)
* [OCPBUGS-86860](https://issues.redhat.com/browse/OCPBUGS-86860): Fixed issue where nameserver is not set when recreating cpms [#406](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/406)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/85f92f79174d6df783f631eb3187f0e11e89cc96...046a4ea83e45c3c1d5eb2d3ffc55a7e7d17fcc3c)
### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/d7262f23f8c661ef6a215377b9571b615a1ae0b8)
* [STOR-2954](https://issues.redhat.com/browse/STOR-2954): feat: have CVO inject the centralized TLS configuration into the operator's config [#276](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/276)
* [STOR-3003](https://issues.redhat.com/browse/STOR-3003): Update group snapshot CRDs to support both v1 and v1beta2 APIs [#282](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/282)
* [OCPBUGS-87354](https://issues.redhat.com/browse/OCPBUGS-87354): Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 5.0 [#277](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/277)
* [OCPBUGS-87252](https://issues.redhat.com/browse/OCPBUGS-87252): Fix group snapshots on HyperShift [#278](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/278)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/108f37f0e378accc322cbeb68136ec500ec35b94...d7262f23f8c661ef6a215377b9571b615a1ae0b8)
### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/8395f9054f235aec2cd5185019d201146c9827ed)
* [OCPBUGS-87391](https://issues.redhat.com/browse/OCPBUGS-87391): Updating ose-cluster-dns-operator-container image to be consistent with ART for 5.0 [#478](https://github.com/openshift/cluster-dns-operator/pull/478)
* [NE-2391](https://issues.redhat.com/browse/NE-2391): Add progressive disclosure AI agent context [#471](https://github.com/openshift/cluster-dns-operator/pull/471)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/65d60f9c12297a91ee89359e90f591fd44e661b0...8395f9054f235aec2cd5185019d201146c9827ed)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/2b9daad1b36fc88a7d67e53f5210c760e9ff7800)
* [OCPBUGS-87522](https://issues.redhat.com/browse/OCPBUGS-87522): Updating cluster-etcd-operator-container image to be consistent with ART for 5.0 [#1629](https://github.com/openshift/cluster-etcd-operator/pull/1629)
* NO-JIRA: update build-machinery-go to pull in updated verify [#1642](https://github.com/openshift/cluster-etcd-operator/pull/1642)
* NO-JIRA: quote bootstrap IP in bootkube etcd endpoints manifest [#1640](https://github.com/openshift/cluster-etcd-operator/pull/1640)
* [OCPEDGE-2770](https://issues.redhat.com/browse/OCPEDGE-2770): fix: handle default-port BMC URLs in Phase 3 address matching [#1638](https://github.com/openshift/cluster-etcd-operator/pull/1638)
* [OCPBUGS-88318](https://issues.redhat.com/browse/OCPBUGS-88318): fix cluster-restore-tnf.sh IP auto-detection when hostname diverges from node name [#1633](https://github.com/openshift/cluster-etcd-operator/pull/1633)
* [OCPBUGS-88490](https://issues.redhat.com/browse/OCPBUGS-88490): fix etcd operator deadlock when etcd-endpoints configmap is stale [#1631](https://github.com/openshift/cluster-etcd-operator/pull/1631)
* [OCPEDGE-2736](https://issues.redhat.com/browse/OCPEDGE-2736): feat: support MAC-based fencing secrets in update-fencing-credentials.sh [#1630](https://github.com/openshift/cluster-etcd-operator/pull/1630)
* NO-JIRA: Update vendored openshift/api and test for backendQuotaGiB max=16 [#1635](https://github.com/openshift/cluster-etcd-operator/pull/1635)
* [ETCD-704](https://issues.redhat.com/browse/ETCD-704): cluster-restore.sh: move extra /var/lib/etcd files to backup [#1628](https://github.com/openshift/cluster-etcd-operator/pull/1628)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/2abd78c6f6e8315e53b2f40f4f6eca9a889ec3b9...2b9daad1b36fc88a7d67e53f5210c760e9ff7800)
### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/d30e780bad20389fd85eaac6dbb6e1ffae958bbe)
* [CNTRLPLANE-3658](https://issues.redhat.com/browse/CNTRLPLANE-3658): Add AGENTS.md, ARCHITECTURE.md, CLAUDE.md, update CONTRIBUTING.md [#1352](https://github.com/openshift/cluster-image-registry-operator/pull/1352)
* [OCPBUGS-66225](https://issues.redhat.com/browse/OCPBUGS-66225): Fix image-registry Degraded=True blips during upgrades [#1350](https://github.com/openshift/cluster-image-registry-operator/pull/1350)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/aee833aab65ab5a5aa29a04ca9a55bfb0c3e4fe3...d30e780bad20389fd85eaac6dbb6e1ffae958bbe)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/8908668eac379bd29431c70f195618efa0337522)
* Revert "NE-2664: deploy haproxy as sidecar (#1439)" [#1483](https://github.com/openshift/cluster-ingress-operator/pull/1483)
* [NE-2664](https://issues.redhat.com/browse/NE-2664): deploy haproxy as sidecar [#1439](https://github.com/openshift/cluster-ingress-operator/pull/1439)
* [OCPBUGS-90505](https://issues.redhat.com/browse/OCPBUGS-90505): Guard OLM watches with capability check in gatewayclass controller [#1479](https://github.com/openshift/cluster-ingress-operator/pull/1479)
* [OCPBUGS-65476](https://issues.redhat.com/browse/OCPBUGS-65476): Add openshift-ingress-operator ClusterRole to ClusterO… [#1313](https://github.com/openshift/cluster-ingress-operator/pull/1313)
* [OCPBUGS-87445](https://issues.redhat.com/browse/OCPBUGS-87445): Updating ose-cluster-ingress-operator-container image to be consistent with ART for 5.0 [#1463](https://github.com/openshift/cluster-ingress-operator/pull/1463)
* NO-JIRA: Add aswinsuryan (asuryana@redhat.com) to OWNERS [#1466](https://github.com/openshift/cluster-ingress-operator/pull/1466)
* [OCPBUGS-87205](https://issues.redhat.com/browse/OCPBUGS-87205): Add configuration override for X-SSL strip [#1465](https://github.com/openshift/cluster-ingress-operator/pull/1465)
* [NE-2692](https://issues.redhat.com/browse/NE-2692): Replace iptables with nftables in TestConnectTimeout e2e test [#1443](https://github.com/openshift/cluster-ingress-operator/pull/1443)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/140e0bf13b3d01c369672c766c44b4be0b4ec78c...8908668eac379bd29431c70f195618efa0337522)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/5e0353a93bfa9a7dbe3a5afe9e9e3b0aa66fe585)
* NO-JIRA: Bump library-go [#2212](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2212)
* NO-JIRA: Update openshift dependencies [#2211](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2211)
* NO-JIRA: add kms preflight to NP to allow egress [#2209](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2209)
* [CNTRLPLANE-3518](https://issues.redhat.com/browse/CNTRLPLANE-3518): add openshift/kms parent to kms test suites [#2195](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2195)
* NO-JIRA: Automatic agentic rebase: Update library-go to b0f5231 [#2205](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2205)
* NO-JIRA: add preflight command [#2201](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2201)
* [CNTRLPLANE-3363](https://issues.redhat.com/browse/CNTRLPLANE-3363): Register health monitor as command [#2198](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2198)
* NO-JIRA: kms: bump library-go to get KMS plugin security context [#2188](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2188)
* [CNTRLPLANE-3545](https://issues.redhat.com/browse/CNTRLPLANE-3545): bump library-go to get CA bundle wiring [#2189](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2189)
* NO-JIRA: Automatic agentic rebase: Update library-go to 7fd5f33 [#2191](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2191)
* [OCPBUGS-86699](https://issues.redhat.com/browse/OCPBUGS-86699): Fix kube-apiserver-to-kubelet-signer refresh interval [#2174](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2174)
* NO-JIRA: Automatic agentic rebase: Update library-go to 0469313 [#2184](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2184)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/24b60d04b3478e04a728fb0ae1385abc6a478d20...5e0353a93bfa9a7dbe3a5afe9e9e3b0aa66fe585)
### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/c35307f04313369c9ba4dcab3308506a3987065e)
* NO-JIRA: fix lock failure cases [#939](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/939)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/9d636ab4992bd501006d2b0c1d3ac512666c6ca7...c35307f04313369c9ba4dcab3308506a3987065e)
### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/f5d3bfe64bda67ffb8299af01ebf2722287edf04)
* [STOR-2954](https://issues.redhat.com/browse/STOR-2954): feat: have CVO inject the centralized TLS configuration into the operator's config [#176](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/176)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/42647ceeb54e36b5f7c827302f443c10788407ec...f5d3bfe64bda67ffb8299af01ebf2722287edf04)
### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/1ae3f157b88c167a7dbe06c36d6e55a82f7fd4f0)
* [OCPBUGS-87331](https://issues.redhat.com/browse/OCPBUGS-87331): Updating ose-cluster-machine-approver-container image to be consistent with ART for 5.0 [#306](https://github.com/openshift/cluster-machine-approver/pull/306)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/e602d35f4c8778143d51872bd6e58759ad15b01e...1ae3f157b88c167a7dbe06c36d6e55a82f7fd4f0)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/2b502a5c620bf10837655f72eec520d4078d5fa7)
* [OCPBUGS-92085](https://issues.redhat.com/browse/OCPBUGS-92085): set Prometheus shards value explicitly [#2972](https://github.com/openshift/cluster-monitoring-operator/pull/2972)
* [MON-4527](https://issues.redhat.com/browse/MON-4527): ClusterMonitoring NodeExporterConfig logic [#2919](https://github.com/openshift/cluster-monitoring-operator/pull/2919)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2971](https://github.com/openshift/cluster-monitoring-operator/pull/2971)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2967](https://github.com/openshift/cluster-monitoring-operator/pull/2967)
* NO-JIRA: test: add alertmanager test to catch broken UI embeds during automated bumps [#2968](https://github.com/openshift/cluster-monitoring-operator/pull/2968)
* NO-JIRA: test: merge UWM tests and improve resilience [#2964](https://github.com/openshift/cluster-monitoring-operator/pull/2964)
* [OCPBUGS-90089](https://issues.redhat.com/browse/OCPBUGS-90089): chore(test): clean up remote write config in TestPrometheusRemoteWrite [#2962](https://github.com/openshift/cluster-monitoring-operator/pull/2962)
* [OCPBUGS-90090](https://issues.redhat.com/browse/OCPBUGS-90090): chore(test): wait for full config restore in TestTelemeterRemoteWrite cleanup [#2961](https://github.com/openshift/cluster-monitoring-operator/pull/2961)
* [OCPBUGS-90100](https://issues.redhat.com/browse/OCPBUGS-90100): chore(TestPrometheusMetrics): use targets API instead of promQL [#2963](https://github.com/openshift/cluster-monitoring-operator/pull/2963)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2960](https://github.com/openshift/cluster-monitoring-operator/pull/2960)
* [OCPBUGS-87800](https://issues.redhat.com/browse/OCPBUGS-87800): fix(TestDocExamples) flake: use internal registry for test pods [#2957](https://github.com/openshift/cluster-monitoring-operator/pull/2957)
* [OCPBUGS-87799](https://issues.redhat.com/browse/OCPBUGS-87799): fix TestTelemetryReport flake by waiting for rate() on raw metrics [#2958](https://github.com/openshift/cluster-monitoring-operator/pull/2958)
* [MON-4485](https://issues.redhat.com/browse/MON-4485): Use EndpointSlices SD for KSM [#2879](https://github.com/openshift/cluster-monitoring-operator/pull/2879)
* [OCPBUGS-86782](https://issues.redhat.com/browse/OCPBUGS-86782): fix: wait for SCC use before creating Alertmanager operands [#2938](https://github.com/openshift/cluster-monitoring-operator/pull/2938)
* [MON-4486](https://issues.redhat.com/browse/MON-4486): Use EndpointSlices SD for OSM [#2880](https://github.com/openshift/cluster-monitoring-operator/pull/2880)
* [MON-4581](https://issues.redhat.com/browse/MON-4581): Update component minimal profiles [#2950](https://github.com/openshift/cluster-monitoring-operator/pull/2950)
* [MON-4522](https://issues.redhat.com/browse/MON-4522): manifests: merge KubeStateMetricsConfig from ClusterMonitoring CRD [#2951](https://github.com/openshift/cluster-monitoring-operator/pull/2951)
* NO-ISSUE: Fix typo in KubeDeploymentReplicasMismatch alert description [#2955](https://github.com/openshift/cluster-monitoring-operator/pull/2955)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2954](https://github.com/openshift/cluster-monitoring-operator/pull/2954)
* [MON-4524](https://issues.redhat.com/browse/MON-4524): manifests: merge OpenShiftStateMetricsConfig from ClusterMonitoring CRD [#2952](https://github.com/openshift/cluster-monitoring-operator/pull/2952)
* [OCPBUGS-87267](https://issues.redhat.com/browse/OCPBUGS-87267): Updating cluster-monitoring-operator-container image to be consistent with ART for 5.0 [#2949](https://github.com/openshift/cluster-monitoring-operator/pull/2949)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/67978b16bd5fec2c37f66b8a4d4fd270408e824e...2b502a5c620bf10837655f72eec520d4078d5fa7)
### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/7b341b420baeb655d65e551a1f04e3bcbe2631f1)
* [OCPBUGS-83800](https://issues.redhat.com/browse/OCPBUGS-83800): add remaining CNO NetworkPolicies [take 2] [#3001](https://github.com/openshift/cluster-network-operator/pull/3001)
* [OCPBUGS-81741](https://issues.redhat.com/browse/OCPBUGS-81741): Watch Network and Infrastructure in proxyconfig controller [#2968](https://github.com/openshift/cluster-network-operator/pull/2968)
* [CORENET-7297](https://issues.redhat.com/browse/CORENET-7297): Add CodeRabbit configuration for automated PR reviews [#3035](https://github.com/openshift/cluster-network-operator/pull/3035)
* NO-JIRA: Update openshift/api and openshift/client-go to latest [#3023](https://github.com/openshift/cluster-network-operator/pull/3023)
* [CORENET-7116](https://issues.redhat.com/browse/CORENET-7116): Fix security job - exclude vendor and upgrade to SHA256 [#3019](https://github.com/openshift/cluster-network-operator/pull/3019)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/6dc18040e7c214f6a1db25b6f5ef4642c6c6a186...7b341b420baeb655d65e551a1f04e3bcbe2631f1)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/8b4b292a427c90a45988432380c37196fba7e9d7)
* [CNF-24293](https://issues.redhat.com/browse/CNF-24293): Let cri-o manage the GOMAXPROC for burstable pods [#1547](https://github.com/openshift/cluster-node-tuning-operator/pull/1547)
* NO-JIRA: cleanup: remove utils/errors [#1536](https://github.com/openshift/cluster-node-tuning-operator/pull/1536)
* [OCPBUGS-91745](https://issues.redhat.com/browse/OCPBUGS-91745): e2e: fix: clear hugepages before switching kernelPageSize to 4k [#1550](https://github.com/openshift/cluster-node-tuning-operator/pull/1550)
* NO-JIRA: E2E: Remove checking of container runtime since crun is default [#1545](https://github.com/openshift/cluster-node-tuning-operator/pull/1545)
* [OCPBUGS-83863](https://issues.redhat.com/browse/OCPBUGS-83863): Strip debug symbols from Go binaries [#1525](https://github.com/openshift/cluster-node-tuning-operator/pull/1525)
* NO-JIRA: Update upstream build image [#1541](https://github.com/openshift/cluster-node-tuning-operator/pull/1541)
* [OCPBUGS-87293](https://issues.redhat.com/browse/OCPBUGS-87293): Updating cluster-node-tuning-operator-container image to be consistent with ART for 5.0 [#1540](https://github.com/openshift/cluster-node-tuning-operator/pull/1540)
* [OCPBUGS-86541](https://issues.redhat.com/browse/OCPBUGS-86541): Enable timer migrations for all use-cases [#1534](https://github.com/openshift/cluster-node-tuning-operator/pull/1534)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/434478751a92e4da294f25761f1e11bd6dd17b12...8b4b292a427c90a45988432380c37196fba7e9d7)
### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/795384212aa1ec66d3c176b33bd7ecc6a38fd560)
* [OCPBUGS-88736](https://issues.redhat.com/browse/OCPBUGS-88736): Apply cluster TLS security profile to the metrics server [#214](https://github.com/openshift/cluster-olm-operator/pull/214)
* [OCPBUGS-87296](https://issues.redhat.com/browse/OCPBUGS-87296): Updating ose-cluster-olm-operator-container image to be consistent with ART for 5.0 [#212](https://github.com/openshift/cluster-olm-operator/pull/212)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/46f78fd08ea2178cf7610eccf8a5d92b250e0219...795384212aa1ec66d3c176b33bd7ecc6a38fd560)
### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/ec1966f2ba07c78e248fe218cbd15564d828a8dc)
* NO-JIRA: Bump library-go [#723](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/723)
* NO-JIRA: Update openshift dependencies [#722](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/722)
* NO-JIRA: add preflight command [#714](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/714)
* NO-JIRA: add kms preflight to NP to allow egress [#720](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/720)
* NO-JIRA: Automatic agentic rebase: Update library-go to b0f5231 [#716](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/716)
* [CNTRLPLANE-3363](https://issues.redhat.com/browse/CNTRLPLANE-3363): Register health monitor as command [#713](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/713)
* NO-JIRA: kms: bump library-go to get KMS plugin security context [#711](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/711)
* [CNTRLPLANE-3545](https://issues.redhat.com/browse/CNTRLPLANE-3545): bump library-go to get CA bundle wiring [#709](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/709)
* NO-JIRA: Automatic agentic rebase: Update library-go to 7fd5f33 [#710](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/710)
* NO-JIRA: Automatic agentic rebase: Update library-go to 0469313 [#707](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/707)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/ab2058390df89cd475db792622d66d0a85b46015...ec1966f2ba07c78e248fe218cbd15564d828a8dc)
### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/050c1ee6aeb0838daf75858fd853cca1e0098fa9)
* NO-JIRA: update OWNERS file [#190](https://github.com/openshift/cluster-policy-controller/pull/190)
* [OCPBUGS-90053](https://issues.redhat.com/browse/OCPBUGS-90053): add serviceAccountToken volume type to psalabelsyncer [#189](https://github.com/openshift/cluster-policy-controller/pull/189)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/bb429f5b2a7d77791110b06d8ec5c017183e3ab9...050c1ee6aeb0838daf75858fd853cca1e0098fa9)
### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/eee95babd52053191e29355108f7daf149dfbf8f)
* [OCPBUGS-87454](https://issues.redhat.com/browse/OCPBUGS-87454): Updating ose-cluster-samples-operator-container image to be consistent with ART for 5.0 [#700](https://github.com/openshift/cluster-samples-operator/pull/700)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/0bfb6b3c2f558c9098c438082bffb44eb8f07099...eee95babd52053191e29355108f7daf149dfbf8f)
### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/1715686df95688a690e8071c88112aaf3983f4c8)
* [OCPBUGS-88299](https://issues.redhat.com/browse/OCPBUGS-88299): Let gcp-pd csi driver operator to use SCC `hostnetwork-v2` [#713](https://github.com/openshift/cluster-storage-operator/pull/713)
* [STOR-2954](https://issues.redhat.com/browse/STOR-2954): feat: have CVO inject the centralized TLS configuration into the operator's config [#703](https://github.com/openshift/cluster-storage-operator/pull/703)
* [OCPBUGS-87464](https://issues.redhat.com/browse/OCPBUGS-87464): Updating ose-cluster-storage-operator-container image to be consistent with ART for 5.0 [#706](https://github.com/openshift/cluster-storage-operator/pull/706)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/8dfdf2ef3310358f3559a5481df43b98b2294791...1715686df95688a690e8071c88112aaf3983f4c8)
### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/9607604d35acee234051bd0da8a14321b4edd38e)
* [OCPBUGS-87492](https://issues.redhat.com/browse/OCPBUGS-87492): Updating ose-cluster-update-keys-container image to be consistent with ART for 5.0 [#101](https://github.com/openshift/cluster-update-keys/pull/101)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/3b5c59cc6461663751bc510b4f9f1954ed8c9b50...9607604d35acee234051bd0da8a14321b4edd38e)
### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/dd0a8410467a09cd181216e191825d4088ea2115)
* [OTA-1966](https://issues.redhat.com/browse/OTA-1966): Add readiness checks and wire into proposal controller [#1395](https://github.com/openshift/cluster-version-operator/pull/1395)
* [OCPBUGS-60579](https://issues.redhat.com/browse/OCPBUGS-60579): install: Remove manual BoundServiceAccountTokenVolume configuration [#1411](https://github.com/openshift/cluster-version-operator/pull/1411)
* [OTA-1956](https://issues.redhat.com/browse/OTA-1956): pkg/payload: Add Images map and tolerate unknown template fields during upgrades [#1410](https://github.com/openshift/cluster-version-operator/pull/1410)
* [OCPBUGS-36246](https://issues.redhat.com/browse/OCPBUGS-36246): Improve resource merge diffs [#1409](https://github.com/openshift/cluster-version-operator/pull/1409)
* NO-JIRA: Add coverage for syncAvailableUpdates [#1375](https://github.com/openshift/cluster-version-operator/pull/1375)
* NO-JIRA: Add thread-safe AddSchemes() to fix concurrent map writes [#1401](https://github.com/openshift/cluster-version-operator/pull/1401)
* [OTA-1996](https://issues.redhat.com/browse/OTA-1996): Add e2e tests for TLS profile update [#1393](https://github.com/openshift/cluster-version-operator/pull/1393)
* NO-JIRA: Risk from alert e2e blocking [#1399](https://github.com/openshift/cluster-version-operator/pull/1399)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/7d7dea4f133834852d95d0327bb922c93fa9dbd6...dd0a8410467a09cd181216e191825d4088ea2115)
### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/ce80869a83b55ebbdc21a5550ec5747645203bd2)
* [OCPBUGS-87510](https://issues.redhat.com/browse/OCPBUGS-87510): Updating configmap-reload-container image to be consistent with ART for 5.0 [#83](https://github.com/openshift/configmap-reload/pull/83)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/94e41c4c6a5832dfd19750173d6544784ba235ec...ce80869a83b55ebbdc21a5550ec5747645203bd2)
### [console](https://github.com/openshift/console/tree/c7f0a381cc07df0b368936505f6c24fa91d83849)
* [CONSOLE-5235](https://issues.redhat.com/browse/CONSOLE-5235): Migrate basic app Cypress e2e tests to Playwright [#16431](https://github.com/openshift/console/pull/16431)
* [CONSOLE-4951](https://issues.redhat.com/browse/CONSOLE-4951): Add Health tab to Node View, remove events tab [#16581](https://github.com/openshift/console/pull/16581)
* [CONSOLE-5271](https://issues.redhat.com/browse/CONSOLE-5271): Address docs review feedback from PR #16551 [#16655](https://github.com/openshift/console/pull/16655)
* [OCPBUGS-85485](https://issues.redhat.com/browse/OCPBUGS-85485): Append id_token_hint to OIDC logout redirect URL [#16548](https://github.com/openshift/console/pull/16548)
* [CONSOLE-5315](https://issues.redhat.com/browse/CONSOLE-5315): Get Node inventory card items from extensions [#16582](https://github.com/openshift/console/pull/16582)
* [OCPBUGS-90555](https://issues.redhat.com/browse/OCPBUGS-90555): [release-5.0] webpack-dev-server: Information disclosure and denial of service via improper proxy configuration [#16667](https://github.com/openshift/console/pull/16667)
* [OCPBUGS-81749](https://issues.redhat.com/browse/OCPBUGS-81749): Add SSAR checks to gate OLM actions [#16554](https://github.com/openshift/console/pull/16554)
* [HELM-728](https://issues.redhat.com/browse/HELM-728): Persist secrets for Helm upgrade [#16432](https://github.com/openshift/console/pull/16432)
* [CONSOLE-4950](https://issues.redhat.com/browse/CONSOLE-4950): Add high availability section to Configuration [#16555](https://github.com/openshift/console/pull/16555)
* [CONSOLE-5277](https://issues.redhat.com/browse/CONSOLE-5277): Improve ResourceName data-test uniqueness and fix e2e test patterns [#16679](https://github.com/openshift/console/pull/16679)
* [CONSOLE-5277](https://issues.redhat.com/browse/CONSOLE-5277): Migrate console e2e CRUD tests to Playwright [#16556](https://github.com/openshift/console/pull/16556)
* [OCPBUGS-91965](https://issues.redhat.com/browse/OCPBUGS-91965): Add catalog item-type for OLMv1 operator catalog [#16666](https://github.com/openshift/console/pull/16666)
* [OCPBUGS-59569](https://issues.redhat.com/browse/OCPBUGS-59569): Disable create button until CRD is available [#16633](https://github.com/openshift/console/pull/16633)
* [OCPBUGS-87201](https://issues.redhat.com/browse/OCPBUGS-87201): Fix RoleBindings tab error for non-cluster-admin users [#16639](https://github.com/openshift/console/pull/16639)
* [CONSOLE-5271](https://issues.redhat.com/browse/CONSOLE-5271), [CONSOLE-5272](https://issues.redhat.com/browse/CONSOLE-5272): Improve operator lifecycle UI [#16551](https://github.com/openshift/console/pull/16551)
* [CONSOLE-5118](https://issues.redhat.com/browse/CONSOLE-5118): Add OLS integration for cluster update workflows [#16131](https://github.com/openshift/console/pull/16131)
* NO-JIRA: Small updates post #16585 changes [#16624](https://github.com/openshift/console/pull/16624)
* [OCPBUGS-88739](https://issues.redhat.com/browse/OCPBUGS-88739): Projects cannot be filtered by display name [#16632](https://github.com/openshift/console/pull/16632)
* [OCPBUGS-69920](https://issues.redhat.com/browse/OCPBUGS-69920): use RFC 5737 documentation IP in PV template [#16641](https://github.com/openshift/console/pull/16641)
* [OCPBUGS-86182](https://issues.redhat.com/browse/OCPBUGS-86182): Fix ColumnManagementModal not showing NamespaceColumnHelpText [#16637](https://github.com/openshift/console/pull/16637)
* [OCPBUGS-88450](https://issues.redhat.com/browse/OCPBUGS-88450): Use fixed artifacts directory to prevent stale temp dir accumulation [#16606](https://github.com/openshift/console/pull/16606)
* [OCPBUGS-89230](https://issues.redhat.com/browse/OCPBUGS-89230): Fix sidebar not toggling at small viewport widths [#16634](https://github.com/openshift/console/pull/16634)
* [OCPBUGS-87864](https://issues.redhat.com/browse/OCPBUGS-87864): CVE-2026-4800 [#16595](https://github.com/openshift/console/pull/16595)
* [OCPBUGS-88451](https://issues.redhat.com/browse/OCPBUGS-88451): Remove redundant waitFor calls in Playwright e2e tests, re-enable flaking tests after getting started fix [#16583](https://github.com/openshift/console/pull/16583)
* [CONSOLE-5037](https://issues.redhat.com/browse/CONSOLE-5037), [CONSOLE-5354](https://issues.redhat.com/browse/CONSOLE-5354): Migrate useTranslation to pass namespace explicitly [#16609](https://github.com/openshift/console/pull/16609)
* [OCPBUGS-87996](https://issues.redhat.com/browse/OCPBUGS-87996): Bump fast-uri to 3.1.2 to fix CVE-2026-6322 [#16604](https://github.com/openshift/console/pull/16604)
* [CONSOLE-5355](https://issues.redhat.com/browse/CONSOLE-5355), [OCPBUGS-88319](https://issues.redhat.com/browse/OCPBUGS-88319): Allow customizing skipImportPrefixes when building Console plugins and begin adoption of api types package [#16585](https://github.com/openshift/console/pull/16585)
* [OCPBUGS-87930](https://issues.redhat.com/browse/OCPBUGS-87930), [OCPBUGS-87982](https://issues.redhat.com/browse/OCPBUGS-87982): Bump protobufjs and shell-quote [#16586](https://github.com/openshift/console/pull/16586)
* [OCPBUGS-85545](https://issues.redhat.com/browse/OCPBUGS-85545): Fix guided tour modal flash on page reload [#16462](https://github.com/openshift/console/pull/16462)
* [OCPBUGS-87969](https://issues.redhat.com/browse/OCPBUGS-87969): Directly use RhUi icons where possible [#16591](https://github.com/openshift/console/pull/16591)
* [OCPBUGS-87904](https://issues.redhat.com/browse/OCPBUGS-87904): Good faith application of docs reviews [#16584](https://github.com/openshift/console/pull/16584)
* [OCPBUGS-86894](https://issues.redhat.com/browse/OCPBUGS-86894): reduce startup API calls and prioritize critical fetches [#16533](https://github.com/openshift/console/pull/16533)
* [CONSOLE-5271](https://issues.redhat.com/browse/CONSOLE-5271), [CONSOLE-5272](https://issues.redhat.com/browse/CONSOLE-5272): Add operator lifecycle metadata to installed operators table [#16428](https://github.com/openshift/console/pull/16428)
* [OCPBUGS-86338](https://issues.redhat.com/browse/OCPBUGS-86338): Bump immutable.js to v3.8.3 [#16480](https://github.com/openshift/console/pull/16480)
* [CONSOLE-5336](https://issues.redhat.com/browse/CONSOLE-5336): Add CreateContainerError filter to pod list status filters [#16559](https://github.com/openshift/console/pull/16559)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/ec1ce9ae7581ffc27725f4f61770ab898b62b111...c7f0a381cc07df0b368936505f6c24fa91d83849)
### [console-operator](https://github.com/openshift/console-operator/tree/58e10b0ac1a23d864ee9eae2631c705c3b670a4c)
* [OCPBUGS-91663](https://issues.redhat.com/browse/OCPBUGS-91663): Clean up old temp directories in downloads pod [#1176](https://github.com/openshift/console-operator/pull/1176)
* [OCPBUGS-64688](https://issues.redhat.com/browse/OCPBUGS-64688): use ObservedGeneration to determine Progressing status [#1169](https://github.com/openshift/console-operator/pull/1169)
* [OCPBUGS-38676](https://issues.redhat.com/browse/OCPBUGS-38676): Add retry for transient API errors to prevent Degraded blips [#1164](https://github.com/openshift/console-operator/pull/1164)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console-operator/compare/658550c71d5664068572d217a58ae7bcc2eb6847...58e10b0ac1a23d864ee9eae2631c705c3b670a4c)
### [coredns](https://github.com/openshift/coredns/tree/97f7cc327ab5df7d6da38137b7be338efa9a3551)
* NO-JIRA: Add aswinsuryan (asuryana@redhat.com) to OWNERS [#188](https://github.com/openshift/coredns/pull/188)
* [Full changelog](https://github.com/openshift/coredns/compare/3c21b066c9bd86caa06f790dcd1c046667875d46...97f7cc327ab5df7d6da38137b7be338efa9a3551)
### [csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/2fc1e7dd8459fcf6a92cd43e99593fc847f746e2)
* [OCPBUGS-85106](https://issues.redhat.com/browse/OCPBUGS-85106): Add required-scc annotation to EFS and SMB operator deployments [#569](https://github.com/openshift/csi-operator/pull/569)
* [OCPBUGS-90151](https://issues.redhat.com/browse/OCPBUGS-90151): hack/update-metadata.sh: allow MAX_OCP_VERSION override [#571](https://github.com/openshift/csi-operator/pull/571)
* [STOR-2996](https://issues.redhat.com/browse/STOR-2996): Sync gcp pd csi driver operator to legacy subdir [#570](https://github.com/openshift/csi-operator/pull/570)
* [OCPBUGS-87449](https://issues.redhat.com/browse/OCPBUGS-87449): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 5.0 [#566](https://github.com/openshift/csi-operator/pull/566)
* [STOR-2920](https://issues.redhat.com/browse/STOR-2920): Bump OLM metadata to 5.0 [#568](https://github.com/openshift/csi-operator/pull/568)
* [STOR-2996](https://issues.redhat.com/browse/STOR-2996): Add gcp pd csi driver operator to legacy subdir [#562](https://github.com/openshift/csi-operator/pull/562)
* [OCPBUGS-87270](https://issues.redhat.com/browse/OCPBUGS-87270): Updating csi-driver-manila-operator-container image to be consistent with ART for 5.0 [#563](https://github.com/openshift/csi-operator/pull/563)
* [OCPBUGS-87236](https://issues.redhat.com/browse/OCPBUGS-87236): Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 5.0 [#561](https://github.com/openshift/csi-operator/pull/561)
* [OCPBUGS-87387](https://issues.redhat.com/browse/OCPBUGS-87387): Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 5.0 [#565](https://github.com/openshift/csi-operator/pull/565)
* [OCPBUGS-87368](https://issues.redhat.com/browse/OCPBUGS-87368): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 5.0 [#564](https://github.com/openshift/csi-operator/pull/564)
* [OCPBUGS-87470](https://issues.redhat.com/browse/OCPBUGS-87470): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 5.0 [#567](https://github.com/openshift/csi-operator/pull/567)
* [OCPBUGS-87219](https://issues.redhat.com/browse/OCPBUGS-87219): Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 5.0 [#560](https://github.com/openshift/csi-operator/pull/560)
* [Full changelog](https://github.com/openshift/csi-operator/compare/5021458d94df6f749bfb61b5eab719129a27c836...2fc1e7dd8459fcf6a92cd43e99593fc847f746e2)
### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/a40a98e2027a63e2a8ddd3589ee3c5142104dbd6)
* [OCPBUGS-87515](https://issues.redhat.com/browse/OCPBUGS-87515): Updating csi-driver-nfs-container image to be consistent with ART for 5.0 [#196](https://github.com/openshift/csi-driver-nfs/pull/196)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/f733db66fcd02f714fcc6feef9d0c2ed9135c347...a40a98e2027a63e2a8ddd3589ee3c5142104dbd6)
### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/96ebfa733c06c3398555d164c788e310908fecf6)
* [OCPBUGS-87274](https://issues.redhat.com/browse/OCPBUGS-87274): Updating csi-attacher-container image to be consistent with ART for 5.0 [#109](https://github.com/openshift/csi-external-attacher/pull/109)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/98b1f4acf9c004687ef55e9f187703768933bb56...96ebfa733c06c3398555d164c788e310908fecf6)
### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/bdf440fab8a48e4b76cf0902ad5ba17a20881a8b)
* NO-ISSUE: Bump github.com/moby/spdystream to v0.5.1 [#138](https://github.com/openshift/csi-external-provisioner/pull/138)
* [OCPBUGS-87526](https://issues.redhat.com/browse/OCPBUGS-87526): Updating csi-provisioner-container image to be consistent with ART for 5.0 [#137](https://github.com/openshift/csi-external-provisioner/pull/137)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/2ccbf8c35aa2e5b851116706c018ff44f0bb7d08...bdf440fab8a48e4b76cf0902ad5ba17a20881a8b)
### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/c608adfc7e82c7c59221bb9d22642a1902cace43)
* [OCPBUGS-87511](https://issues.redhat.com/browse/OCPBUGS-87511): Updating ose-csi-external-resizer-container image to be consistent with ART for 5.0 [#197](https://github.com/openshift/csi-external-resizer/pull/197)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/4e74a4aa52a2046d6b97a47dff7a60ddb73d0bbd...c608adfc7e82c7c59221bb9d22642a1902cace43)
### [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata/tree/239703c637e005cf785892d214d219add70e3533)
* [STOR-2965](https://issues.redhat.com/browse/STOR-2965): Rebase to v1.0.0 for OCP 5.0 [#18](https://github.com/openshift/csi-external-snapshot-metadata/pull/18)
* [OCPBUGS-87248](https://issues.redhat.com/browse/OCPBUGS-87248): Updating csi-external-snapshot-metadata-container image to be consistent with ART for 5.0 [#17](https://github.com/openshift/csi-external-snapshot-metadata/pull/17)
* [Full changelog](https://github.com/openshift/csi-external-snapshot-metadata/compare/7652318579a38838931a5be492cee3573c7c8ecf...239703c637e005cf785892d214d219add70e3533)
### [csi-external-snapshotter, csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter/tree/e695e2bd0b548afd0fce049d86d4af29dd34e574)
* [TRT-2702](https://issues.redhat.com/browse/TRT-2702): Revert "STOR-3004: Rebase external-snapshotter to v8.6.0" [#220](https://github.com/openshift/csi-external-snapshotter/pull/220)
* [STOR-3004](https://issues.redhat.com/browse/STOR-3004): Rebase external-snapshotter to v8.6.0 [#219](https://github.com/openshift/csi-external-snapshotter/pull/219)
* [OCPBUGS-87250](https://issues.redhat.com/browse/OCPBUGS-87250): Updating ose-csi-external-snapshotter-container image to be consistent with ART for 5.0 [#217](https://github.com/openshift/csi-external-snapshotter/pull/217)
* [OCPBUGS-87466](https://issues.redhat.com/browse/OCPBUGS-87466): Updating ose-csi-snapshot-controller-container image to be consistent with ART for 5.0 [#218](https://github.com/openshift/csi-external-snapshotter/pull/218)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/77d02e52a442c1a98457797bf8eb5777489aabae...e695e2bd0b548afd0fce049d86d4af29dd34e574)
### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/f649d2c76f2484b73c70007801eb81ab4be63635)
* [OCPBUGS-87448](https://issues.redhat.com/browse/OCPBUGS-87448): Updating csi-livenessprobe-container image to be consistent with ART for 5.0 [#93](https://github.com/openshift/csi-livenessprobe/pull/93)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/4d5e959a182b4db70dc52302bd89eebfec40d5a5...f649d2c76f2484b73c70007801eb81ab4be63635)
### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/f0378629c970bc897439caaa85c4aec0971c1130)
* [OCPBUGS-87513](https://issues.redhat.com/browse/OCPBUGS-87513): Updating csi-node-driver-registrar-container image to be consistent with ART for 5.0 [#106](https://github.com/openshift/csi-node-driver-registrar/pull/106)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/cf174b30fad107d354afb0f0b09030a7c97fd296...f0378629c970bc897439caaa85c4aec0971c1130)
### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/9e5bed0f68cc7aef416d2a48522c7d195e5dbb17)
* [OCPBUGS-69851](https://issues.redhat.com/browse/OCPBUGS-69851): Updating Dockerfile.rhel10 base image from base-rhel9 to base-rhel10. [#195](https://github.com/openshift/driver-toolkit/pull/195)
* [OCPBUGS-69851](https://issues.redhat.com/browse/OCPBUGS-69851): Adding driver-toolkit-10 as a new payload component for RHEL 10. [#193](https://github.com/openshift/driver-toolkit/pull/193)
* [OCPBUGS-69851](https://issues.redhat.com/browse/OCPBUGS-69851): Parameterizing the e2e test to validate both DTK and DTK-10. [#194](https://github.com/openshift/driver-toolkit/pull/194)
* [OCPBUGS-69851](https://issues.redhat.com/browse/OCPBUGS-69851): Updating the e2e job to also work on Openshift-5 payloads. [#192](https://github.com/openshift/driver-toolkit/pull/192)
* [OCPBUGS-87225](https://issues.redhat.com/browse/OCPBUGS-87225): Updating driver-toolkit-container image to be consistent with ART for 5.0 [#191](https://github.com/openshift/driver-toolkit/pull/191)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/dc6927de4444956b521131f5f142b6922195834b...9e5bed0f68cc7aef416d2a48522c7d195e5dbb17)
### [etcd](https://github.com/openshift/etcd/tree/bf6c0094589afdf6c814a28c24f8f1bb5a577816)
* [OCPBUGS-87363](https://issues.redhat.com/browse/OCPBUGS-87363): Updating ose-etcd-container image to be consistent with ART for 5.0 [#384](https://github.com/openshift/etcd/pull/384)
* [Full changelog](https://github.com/openshift/etcd/compare/c543fe15324510d13e896c31232ecd5d100d9de5...bf6c0094589afdf6c814a28c24f8f1bb5a577816)
### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/1a542ecb49b1b26ea7ecd6344a9ebe7dbe09b6b6)
* [OCPBUGS-87279](https://issues.redhat.com/browse/OCPBUGS-87279): Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART for 5.0 [#120](https://github.com/openshift/cloud-provider-gcp/pull/120)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/808c2a2d59dc0584d31484fe49085ba1de7bed74...1a542ecb49b1b26ea7ecd6344a9ebe7dbe09b6b6)
### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/ffbf9c2a410aa425c29c4628fa250d2e949b6876)
* [OCPBUGS-87462](https://issues.redhat.com/browse/OCPBUGS-87462): Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART for 5.0 [#298](https://github.com/openshift/cluster-api-provider-gcp/pull/298)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/8ae492a86a67ccb75790b2874bb6d6447270e110...ffbf9c2a410aa425c29c4628fa250d2e949b6876)
### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/af29978573161a98d41f1baae67d05da7398a646)
* [OCPBUGS-87524](https://issues.redhat.com/browse/OCPBUGS-87524): Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 5.0 [#170](https://github.com/openshift/machine-api-provider-gcp/pull/170)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/065e2b608a027ba47fce02aaabb986e6c650e6d6...af29978573161a98d41f1baae67d05da7398a646)
### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/3b9e6d19109ebfafa13f638f469071027f82b744)
* [OCPBUGS-87399](https://issues.redhat.com/browse/OCPBUGS-87399): Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 5.0 [#123](https://github.com/openshift/gcp-pd-csi-driver/pull/123)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/c58c624fef4cbac80e0efa1d40e8c359d257a1cd...3b9e6d19109ebfafa13f638f469071027f82b744)
### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/936b1710729592015497bea76b27f787ec742f3e)
* [OCPBUGS-88299](https://issues.redhat.com/browse/OCPBUGS-88299): Avoid controller pods run as root [#194](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/194)
* [OCPBUGS-87273](https://issues.redhat.com/browse/OCPBUGS-87273): Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 5.0 [#190](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/190)
* [OCPBUGS-87867](https://issues.redhat.com/browse/OCPBUGS-87867): [5.0] VolumeSnapshot snapshot-c9v52 is not ready within 5m0s… [#192](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/192)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/684ef36213cdb8b8acbb014a63819c7bb410c746...936b1710729592015497bea76b27f787ec742f3e)
### [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook/tree/73d67a587c98f1e2aec3969c59a66458096cd80c)
* NO-ISSUE: Update OWNERS: remove 2uasimojo, suhanime, lleshchi [#20](https://github.com/openshift/gcp-workload-identity-federation-webhook/pull/20)
* [Full changelog](https://github.com/openshift/gcp-workload-identity-federation-webhook/compare/d7675f312ffdc8501032ff8217776cd7172b6bb0...73d67a587c98f1e2aec3969c59a66458096cd80c)
### [haproxy-router](https://github.com/openshift/router/tree/2a6e5d1fe0879778088728603a8bf256dbb4cedb)
* [OCPBUGS-87552](https://issues.redhat.com/browse/OCPBUGS-87552): Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 5.0 [#791](https://github.com/openshift/router/pull/791)
* [NE-2664](https://issues.redhat.com/browse/NE-2664): add option to separate router and haproxy containers [#772](https://github.com/openshift/router/pull/772)
* [OCPBUGS-87508](https://issues.redhat.com/browse/OCPBUGS-87508): Updating ose-haproxy-router-base-container image to be consistent with ART for 5.0 [#790](https://github.com/openshift/router/pull/790)
* [OCPBUGS-87205](https://issues.redhat.com/browse/OCPBUGS-87205): Strip X-SSL-Client-* headers for plain HTTP [#787](https://github.com/openshift/router/pull/787)
* [Full changelog](https://github.com/openshift/router/compare/a86164c8ebaed55a2a28451fa913a04f10cc9a72...2a6e5d1fe0879778088728603a8bf256dbb4cedb)
### [hypershift](https://github.com/openshift/hypershift/tree/2d2b2d0805d36dcf401fdb5f3d913b9f7984ce42)
* [OCPBUGS-86648](https://issues.redhat.com/browse/OCPBUGS-86648): move IP addresses from dnsNames to ips in etcd peer cert [#8847](https://github.com/openshift/hypershift/pull/8847)
* NO-JIRA: docs: add required pod-security annotation for GCP hosted clusters [#8850](https://github.com/openshift/hypershift/pull/8850)
* [CNTRLPLANE-3716](https://issues.redhat.com/browse/CNTRLPLANE-3716): Update GitHub Actions docs with slash-command workflows [#8822](https://github.com/openshift/hypershift/pull/8822)
* [OSDOCS-19432](https://issues.redhat.com/browse/OSDOCS-19432): docs: add cluster capabilities how-to and contributor guide [#8371](https://github.com/openshift/hypershift/pull/8371)
* [OCPBUGS-76530](https://issues.redhat.com/browse/OCPBUGS-76530): Fix intermittent etcd peer communication failures [#8479](https://github.com/openshift/hypershift/pull/8479)
* [OCPBUGS-81312](https://issues.redhat.com/browse/OCPBUGS-81312): fix(cpo): use KubeAPIServerDNSName for OAuth LoginURL when set [#8433](https://github.com/openshift/hypershift/pull/8433)
* [OCPBUGS-84114](https://issues.redhat.com/browse/OCPBUGS-84114), [OSASINFRA-4368](https://issues.redhat.com/browse/OSASINFRA-4368): Update CAPO to latest stable release [#8687](https://github.com/openshift/hypershift/pull/8687)
* [CNTRLPLANE-597](https://issues.redhat.com/browse/CNTRLPLANE-597): Surface HCCO reconciliation failures in HostedCluster status [#8340](https://github.com/openshift/hypershift/pull/8340)
* [OCPBUGS-92013](https://issues.redhat.com/browse/OCPBUGS-92013): fix NodePool stuck in UpdatingVersion/UpdatingConfig due to stale conversion-data annotation [#8821](https://github.com/openshift/hypershift/pull/8821)
* [CNTRLPLANE-3526](https://issues.redhat.com/browse/CNTRLPLANE-3526): Add spec.monitoring API for metrics forwarding [#8626](https://github.com/openshift/hypershift/pull/8626)
* NO-JIRA: add blog section with June 2026 progress report [#8816](https://github.com/openshift/hypershift/pull/8816)
* [OCPBUGS-91656](https://issues.redhat.com/browse/OCPBUGS-91656): fix(test): add retry logic to GetLogs in Karpenter kubelet propagatio… [#8805](https://github.com/openshift/hypershift/pull/8805)
* [OCPBUGS-86415](https://issues.redhat.com/browse/OCPBUGS-86415): Use canonical image for kube-apiserver-proxy static pod [#8742](https://github.com/openshift/hypershift/pull/8742)
* [OCPBUGS-92034](https://issues.redhat.com/browse/OCPBUGS-92034): fix registry override matching for digest and tag separators [#8824](https://github.com/openshift/hypershift/pull/8824)
* [OCPBUGS-91997](https://issues.redhat.com/browse/OCPBUGS-91997): Apply MetricsSet relabel configs to KAS ServiceMonitor [#8715](https://github.com/openshift/hypershift/pull/8715)
* [OCPBUGS-91650](https://issues.redhat.com/browse/OCPBUGS-91650): bump consolidateAfter to 60s in karpenter e2e base NodePool [#8820](https://github.com/openshift/hypershift/pull/8820)
* [CNTRLPLANE-596](https://issues.redhat.com/browse/CNTRLPLANE-596): Add --kubeconfig flag to HyperShift and HCP CLI [#8402](https://github.com/openshift/hypershift/pull/8402)
* NO-JIRA: Exclude generated delegating client from codecov [#8825](https://github.com/openshift/hypershift/pull/8825)
* [CNTRLPLANE-3276](https://issues.redhat.com/browse/CNTRLPLANE-3276): Add Azure ExternalPrivateService and endpoint access transition test [#8718](https://github.com/openshift/hypershift/pull/8718)
* [OCPBUGS-57453](https://issues.redhat.com/browse/OCPBUGS-57453): fix(cpo): use Status.DNSZoneID before querying AWS Route53 [#8615](https://github.com/openshift/hypershift/pull/8615)
* [CNTRLPLANE-2916](https://issues.redhat.com/browse/CNTRLPLANE-2916): restore conditional deletion of openshift-ingress NetworkPolicy [#8754](https://github.com/openshift/hypershift/pull/8754)
* [CNTRLPLANE-3352](https://issues.redhat.com/browse/CNTRLPLANE-3352): fix GHA reusable workflow for fork PRs [#8818](https://github.com/openshift/hypershift/pull/8818)
* [CNTRLPLANE-502](https://issues.redhat.com/browse/CNTRLPLANE-502): Add CRD breaking changes validation to HyperShift CI [#8535](https://github.com/openshift/hypershift/pull/8535)
* NO-JIRA: chore(deps): weekly dependabot consolidation [#8784](https://github.com/openshift/hypershift/pull/8784)
* [CNTRLPLANE-3352](https://issues.redhat.com/browse/CNTRLPLANE-3352): force HTTPS for GHA plugin dependency clones [#8815](https://github.com/openshift/hypershift/pull/8815)
* [OCPBUGS-90663](https://issues.redhat.com/browse/OCPBUGS-90663): fix(test): use Eventually for auth-config ConfigMap assertions [#8799](https://github.com/openshift/hypershift/pull/8799)
* NO-JIRA: docs: Add private topology DNS architecture documentation [#8803](https://github.com/openshift/hypershift/pull/8803)
* [CNTRLPLANE-3145](https://issues.redhat.com/browse/CNTRLPLANE-3145): refactor(hostedcluster): segregate reconcile loop into error-collecting blocks [#7908](https://github.com/openshift/hypershift/pull/7908)
* [OCPBUGS-86949](https://issues.redhat.com/browse/OCPBUGS-86949): Guard HCCO KubeletConfig CM deletion against transient source absence [#8672](https://github.com/openshift/hypershift/pull/8672)
* NO-JIRA: fix(ci): switch to openshift-developer plugin bundle for GHA workflows [#8809](https://github.com/openshift/hypershift/pull/8809)
* [CNTRLPLANE-3611](https://issues.redhat.com/browse/CNTRLPLANE-3611): propagate tls profile to aws-pod-identity-webhook [#8713](https://github.com/openshift/hypershift/pull/8713)
* NO-JIRA: fix(ci): increase reusable workflow timeout to 90 minutes [#8797](https://github.com/openshift/hypershift/pull/8797)
* [OCPBUGS-55621](https://issues.redhat.com/browse/OCPBUGS-55621): Replace konnectivity Dial with DialContext in konnectivity-https-proxy/cmd.go [#8550](https://github.com/openshift/hypershift/pull/8550)
* [OCPBUGS-85585](https://issues.redhat.com/browse/OCPBUGS-85585): tighten registry override matching to strict longest-prefix across release-image consumers [#8509](https://github.com/openshift/hypershift/pull/8509)
* NO-JIRA: fix(ci): add --verbose flag required by stream-json output format [#8796](https://github.com/openshift/hypershift/pull/8796)
* [CNTRLPLANE-3568](https://issues.redhat.com/browse/CNTRLPLANE-3568): test(e2e): verify AWS additional-tags propagation to guest infrastruc… [#8712](https://github.com/openshift/hypershift/pull/8712)
* ci: stream Claude output in GHA workflow logs [#8778](https://github.com/openshift/hypershift/pull/8778)
* [OCPBUGS-88685](https://issues.redhat.com/browse/OCPBUGS-88685): Fix metrics-proxy unbounded memory growth [#8740](https://github.com/openshift/hypershift/pull/8740)
* [CNTRLPLANE-3584](https://issues.redhat.com/browse/CNTRLPLANE-3584): Enable resource metrics for kube-scheduler endpoints [#8680](https://github.com/openshift/hypershift/pull/8680)
* [CNTRLPLANE-3645](https://issues.redhat.com/browse/CNTRLPLANE-3645): docs: add retrospective guidelines [#8777](https://github.com/openshift/hypershift/pull/8777)
* [CNTRLPLANE-3093](https://issues.redhat.com/browse/CNTRLPLANE-3093), [CNTRLPLANE-3095](https://issues.redhat.com/browse/CNTRLPLANE-3095), [CNTRLPLANE-3096](https://issues.redhat.com/browse/CNTRLPLANE-3096), [CNTRLPLANE-3098](https://issues.redhat.com/browse/CNTRLPLANE-3098): lower Azure WI webhook test version gate to 4.20 [#8323](https://github.com/openshift/hypershift/pull/8323)
* [CNTRLPLANE-3641](https://issues.redhat.com/browse/CNTRLPLANE-3641): ci: replace COMMUNITY_FORK_TOKEN PAT with GitHub App token [#8776](https://github.com/openshift/hypershift/pull/8776)
* [AROSLSRE-687](https://issues.redhat.com/browse/AROSLSRE-687): propagate HCP Azure resource ID annotation to control plane namespace [#8312](https://github.com/openshift/hypershift/pull/8312)
* [ARO-24037](https://issues.redhat.com/browse/ARO-24037), [OCPBUGS-86616](https://issues.redhat.com/browse/OCPBUGS-86616): feat(azure): add ACR pull identity to worker cloud.conf and VMSS [#8472](https://github.com/openshift/hypershift/pull/8472)
* NO-JIRA: chore(deps): weekly dependabot consolidation [#8684](https://github.com/openshift/hypershift/pull/8684)
* [CNTRLPLANE-3641](https://issues.redhat.com/browse/CNTRLPLANE-3641): fix restructure-commits GHA to force push without confirmation [#8771](https://github.com/openshift/hypershift/pull/8771)
* [CNTRLPLANE-3023](https://issues.redhat.com/browse/CNTRLPLANE-3023): Add CEL rule to prevent osImageStream removal [#8719](https://github.com/openshift/hypershift/pull/8719)
* [CNTRLPLANE-3641](https://issues.redhat.com/browse/CNTRLPLANE-3641): add restructure-commits and rebase GHA workflows [#8770](https://github.com/openshift/hypershift/pull/8770)
* [CNTRLPLANE-3636](https://issues.redhat.com/browse/CNTRLPLANE-3636): Add upgrade-from-.0 periodic jobs to OCP branching checklist [#8764](https://github.com/openshift/hypershift/pull/8764)
* [CNTRLPLANE-3640](https://issues.redhat.com/browse/CNTRLPLANE-3640): Fix address-review-comments GHA credential file deleted during run [#8769](https://github.com/openshift/hypershift/pull/8769)
* [CNTRLPLANE-3026](https://issues.redhat.com/browse/CNTRLPLANE-3026): Decouple AWS AMI resolution for dual-stream support [#8699](https://github.com/openshift/hypershift/pull/8699)
* [CNTRLPLANE-3332](https://issues.redhat.com/browse/CNTRLPLANE-3332), [CNTRLPLANE-3333](https://issues.redhat.com/browse/CNTRLPLANE-3333): Add control plane metrics forwarding recipe and Grafana dashboard [#8332](https://github.com/openshift/hypershift/pull/8332)
* [ROSAENG-8224](https://issues.redhat.com/browse/ROSAENG-8224): feat(operator): add --hcp-egress-block-cidrs flag to stabilize NetworkPolicy egress exceptions [#8689](https://github.com/openshift/hypershift/pull/8689)
* [CNTRLPLANE-3633](https://issues.redhat.com/browse/CNTRLPLANE-3633): docs: add presubmit e2e triage guide [#8741](https://github.com/openshift/hypershift/pull/8741)
* [OCPBUGS-89231](https://issues.redhat.com/browse/OCPBUGS-89231): version-gate TestPullSecretUnavailable to 4.23+ [#8744](https://github.com/openshift/hypershift/pull/8744)
* [CNTRLPLANE-3552](https://issues.redhat.com/browse/CNTRLPLANE-3552): Multi-stream CoreOS metadata parsing and stream resolution [#8669](https://github.com/openshift/hypershift/pull/8669)
* [ACM-34234](https://issues.redhat.com/browse/ACM-34234): build(cli): rename hcp archives to include OS and arch in filename [#8649](https://github.com/openshift/hypershift/pull/8649)
* [CNTRLPLANE-3515](https://issues.redhat.com/browse/CNTRLPLANE-3515): test(e2e): add day-2 label/taint no-rollout verification [#8595](https://github.com/openshift/hypershift/pull/8595)
* NO-JIRA: Add Sippy/CR test name annotations to v2 e2e tests [#8739](https://github.com/openshift/hypershift/pull/8739)
* [OCPBUGS-54790](https://issues.redhat.com/browse/OCPBUGS-54790): Move packageserver PDB from guest cluster to management cluster [#8459](https://github.com/openshift/hypershift/pull/8459)
* [OCPBUGS-84577](https://issues.redhat.com/browse/OCPBUGS-84577): clear stale EtcdRecoveryActive failure condition when etcd is healthy [#8406](https://github.com/openshift/hypershift/pull/8406)
* [CNTRLPLANE-3575](https://issues.redhat.com/browse/CNTRLPLANE-3575): test(controlplane-component): verify setDefaultOptions preserves exis… [#8731](https://github.com/openshift/hypershift/pull/8731)
* NO-JIRA: docs: improve AGENTS.md and DEVELOPMENT.md guidance for AI agents [#8703](https://github.com/openshift/hypershift/pull/8703)
* [OCPBUGS-85778](https://issues.redhat.com/browse/OCPBUGS-85778): Fix NodePool reconciliation failure when updating mirrored immutable ConfigMaps [#8543](https://github.com/openshift/hypershift/pull/8543)
* [OCPBUGS-86662](https://issues.redhat.com/browse/OCPBUGS-86662): Optimize CPO deployment polling interval in tests of additional trust bundle propagation [#8617](https://github.com/openshift/hypershift/pull/8617)
* NO-JIRA: ci(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 [#8727](https://github.com/openshift/hypershift/pull/8727)
* [CNTRLPLANE-3271](https://issues.redhat.com/browse/CNTRLPLANE-3271): add External OIDC e2e tests for v2 framework [#8674](https://github.com/openshift/hypershift/pull/8674)
* [OCPBUGS-84555](https://issues.redhat.com/browse/OCPBUGS-84555): fix(cpo): include serving cert CAs in bootstrap and external admin kubeconfigs [#8311](https://github.com/openshift/hypershift/pull/8311)
* NO-JIRA: chore: add unit test naming and placement conventions [#8722](https://github.com/openshift/hypershift/pull/8722)
* NO-JIRA: build(operator): drop hypershift-no-cgo from operator container images [#8601](https://github.com/openshift/hypershift/pull/8601)
* [CNTRLPLANE-3617](https://issues.redhat.com/browse/CNTRLPLANE-3617): Increase address-review-comments max turns to 200 [#8723](https://github.com/openshift/hypershift/pull/8723)
* [CNTRLPLANE-3617](https://issues.redhat.com/browse/CNTRLPLANE-3617): Increase address-review-comments timeout to 45 minutes [#8720](https://github.com/openshift/hypershift/pull/8720)
* [OCPBUGS-82443](https://issues.redhat.com/browse/OCPBUGS-82443): fix(cpo): deduplicate VPC endpoint subnets by AZ [#8651](https://github.com/openshift/hypershift/pull/8651)
* [CNTRLPLANE-3020](https://issues.redhat.com/browse/CNTRLPLANE-3020): Adopt coreos/stream-metadata-go upstream library [#8673](https://github.com/openshift/hypershift/pull/8673)
* NO-JIRA: ci: add gopls and pre-commit plugins to address-review workflow [#8702](https://github.com/openshift/hypershift/pull/8702)
* NO-JIRA: fix address-review-comments workflow for fork PRs [#8706](https://github.com/openshift/hypershift/pull/8706)
* NO-JIRA: Add gitlint to pre-commit hooks [#8701](https://github.com/openshift/hypershift/pull/8701)
* [CNTRLPLANE-3584](https://issues.redhat.com/browse/CNTRLPLANE-3584): Add kube-scheduler ServiceMonitor with CA-signed serving certs [#8489](https://github.com/openshift/hypershift/pull/8489)
* NO-JIRA: Improve AI skill quality and restructure AGENTS.md [#8690](https://github.com/openshift/hypershift/pull/8690)
* [CNTRLPLANE-3555](https://issues.redhat.com/browse/CNTRLPLANE-3555): Add ARCHITECTURE.md to repository root [#8668](https://github.com/openshift/hypershift/pull/8668)
* [OCPBUGS-84308](https://issues.redhat.com/browse/OCPBUGS-84308): fix(cpo) delete terminated MCD pods to retry in-place upgrades [#8434](https://github.com/openshift/hypershift/pull/8434)
* And 3 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/hypershift/compare/a101e6697af02eba43e6cfd04fc4c00277b72a64...2d2b2d0805d36dcf401fdb5f3d913b9f7984ce42)
### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/0fdc00b1c1f411da3c385e27e63d909761ad1aa9)
* [OCPBUGS-87499](https://issues.redhat.com/browse/OCPBUGS-87499): Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 5.0 [#163](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/163)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/a26ad7ece37d9ae974d4384d6a4676ccb7666cd9...0fdc00b1c1f411da3c385e27e63d909761ad1aa9)
### [insights-operator](https://github.com/openshift/insights-operator/tree/1eb28cdcfa1ec93afce5fdb582243c2ee47fc4e4)
* [CCXDEV-16450](https://issues.redhat.com/browse/CCXDEV-16450): document disableRuntimeExtractor config option [#1312](https://github.com/openshift/insights-operator/pull/1312)
* Bug OCPBUGS-90497: Remove metadata.namespace from cluster-scoped resources [#1307](https://github.com/openshift/insights-operator/pull/1307)
* [OCPBUGS-87889](https://issues.redhat.com/browse/OCPBUGS-87889): fall back to kube-system/global-pull-secret for Insights token [#1302](https://github.com/openshift/insights-operator/pull/1302)
* [OCPBUGS-87289](https://issues.redhat.com/browse/OCPBUGS-87289): Updating ose-insights-operator-container image to be consistent with ART for 5.0 [#1301](https://github.com/openshift/insights-operator/pull/1301)
* [Full changelog](https://github.com/openshift/insights-operator/compare/7c39d495feefbbeb977bd164eb0dc7a5fa4c7ac7...1eb28cdcfa1ec93afce5fdb582243c2ee47fc4e4)
### [insights-runtime-exporter, insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor/tree/ce30b4f9bc3ec867b976886a5207d36c50a396d9)
* [OCPBUGS-87370](https://issues.redhat.com/browse/OCPBUGS-87370): Updating ose-insights-runtime-exporter-container image to be consistent with ART for 5.0 [#84](https://github.com/openshift/insights-runtime-extractor/pull/84)
* [OCPBUGS-87473](https://issues.redhat.com/browse/OCPBUGS-87473): Updating ose-insights-runtime-extractor-container image to be consistent with ART for 5.0 [#85](https://github.com/openshift/insights-runtime-extractor/pull/85)
* [Full changelog](https://github.com/openshift/insights-runtime-extractor/compare/70256457b507ec09737800ee7ea022143ed6c3c2...ce30b4f9bc3ec867b976886a5207d36c50a396d9)
### [keepalived-ipfailover](https://github.com/openshift/images/tree/34acc695df8c51e7ff10a853fb13ad1928ac2e04)
* NO-JIRA: Update ipfailover/OWNERS to reflect current NID team [#240](https://github.com/openshift/images/pull/240)
* [ART-20722](https://issues.redhat.com/browse/ART-20722): Skip PQ crypto-policies setup for CentOS/OKD builds [#241](https://github.com/openshift/images/pull/241)
* [ART-19728](https://issues.redhat.com/browse/ART-19728): Add Dockerfile.rhel10 [#239](https://github.com/openshift/images/pull/239)
* [Full changelog](https://github.com/openshift/images/compare/f5dba030c456e9d8b5804929e3f3b98072cdc08b...34acc695df8c51e7ff10a853fb13ad1928ac2e04)
### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/b5df90392fbb08eb4c48e8a07f35b34a4c846312)
* NO-ISSUE: [bot] Bump openshift/kube-state-metrics to v2.19.1 [#146](https://github.com/openshift/kube-state-metrics/pull/146)
* [OCPBUGS-87374](https://issues.redhat.com/browse/OCPBUGS-87374): Updating kube-state-metrics-container image to be consistent with ART for 5.0 [#145](https://github.com/openshift/kube-state-metrics/pull/145)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/3b41710783bab83b33e6d8f2033be3a9fbce6a9d...b5df90392fbb08eb4c48e8a07f35b34a4c846312)
### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/7ff99994ecc3a675fac6f9aa7fa418cdb0dca32b)
* [OCPBUGS-92795](https://issues.redhat.com/browse/OCPBUGS-92795): Sync upstream 04/30/2026 [#97](https://github.com/openshift/kubevirt-csi-driver/pull/97)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/771b562d4875296007850a4d3709a7ae1c6ed3e2...7ff99994ecc3a675fac6f9aa7fa418cdb0dca32b)
### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/bd501fc8f16e6ce158add5ae335e9920a277fe68)
* [OCPBUGS-87360](https://issues.redhat.com/browse/OCPBUGS-87360): Updating ose-machine-api-operator-container image to be consistent with ART for 5.0 [#1507](https://github.com/openshift/machine-api-operator/pull/1507)
* [SPLAT-2790](https://issues.redhat.com/browse/SPLAT-2790): Added new VAP for vSphere infra validation against current cpms and machines [#1510](https://github.com/openshift/machine-api-operator/pull/1510)
* NO-JIRA: fix: honor --stderrthreshold flag when --logtostderr is enabled [#1485](https://github.com/openshift/machine-api-operator/pull/1485)
* [OCPBUGS-66940](https://issues.redhat.com/browse/OCPBUGS-66940): fix default image for confidential VMs [#1443](https://github.com/openshift/machine-api-operator/pull/1443)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/d7772c62914781cd312b5e6db24532d694a8a140...bd501fc8f16e6ce158add5ae335e9920a277fe68)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/0e0f89b580ef7b792bbd302724e185644a595fa1)
* [OCPBUGS-88333](https://issues.redhat.com/browse/OCPBUGS-88333): Fix bootupd workaround in old nodes [#6199](https://github.com/openshift/machine-config-operator/pull/6199)
* [OCPBUGS-91982](https://issues.redhat.com/browse/OCPBUGS-91982): Bootstrap MCS logging entire ignition [#6231](https://github.com/openshift/machine-config-operator/pull/6231)
* [OCPNODE-4443](https://issues.redhat.com/browse/OCPNODE-4443): Add runc upgradeable guard to block upgrades on RHEL 10 streams [#5891](https://github.com/openshift/machine-config-operator/pull/5891)
* NO-ISSUE: Remove stub upgrade test [#6224](https://github.com/openshift/machine-config-operator/pull/6224)
* [OCPBUGS-86448](https://issues.redhat.com/browse/OCPBUGS-86448): Skip no-op MCN SSA calls [#6217](https://github.com/openshift/machine-config-operator/pull/6217)
* [OCPBUGS-87962](https://issues.redhat.com/browse/OCPBUGS-87962): Boot image skew check silently passes when MachineSets are reconcile-skipped [#6162](https://github.com/openshift/machine-config-operator/pull/6162)
* [OCPBUGS-86826](https://issues.redhat.com/browse/OCPBUGS-86826): Make vsphere template updates atomic [#6117](https://github.com/openshift/machine-config-operator/pull/6117)
* [OKD-305](https://issues.redhat.com/browse/OKD-305): Remove migration code(for runc->crun) [#5682](https://github.com/openshift/machine-config-operator/pull/5682)
* [OCPBUGS-91746](https://issues.redhat.com/browse/OCPBUGS-91746): temporarily remove sandboxed-containers from extensions test [#6213](https://github.com/openshift/machine-config-operator/pull/6213)
* [OCPBUGS-91746](https://issues.redhat.com/browse/OCPBUGS-91746): Remove sandboxed-containers (kata-containers) from extended-priv tests [#6221](https://github.com/openshift/machine-config-operator/pull/6221)
* [MCO-2275](https://issues.redhat.com/browse/MCO-2275): Migrate OS layering tests from openshift-tests-private [#6081](https://github.com/openshift/machine-config-operator/pull/6081)
* [MCO-2257](https://issues.redhat.com/browse/MCO-2257): ensure MCO tests pass in both RHEL9 and RHEL10 [#6055](https://github.com/openshift/machine-config-operator/pull/6055)
* [OCPBUGS-90092](https://issues.redhat.com/browse/OCPBUGS-90092): remove runc from containerruntimeconfig test [#6206](https://github.com/openshift/machine-config-operator/pull/6206)
* [OCPBUGS-86181](https://issues.redhat.com/browse/OCPBUGS-86181): Update ImageModeStatusReporting MCN property and condition transition tests to be resilient on SNO topology [#6107](https://github.com/openshift/machine-config-operator/pull/6107)
* [OCPBUGS-89325](https://issues.redhat.com/browse/OCPBUGS-89325): fix test 74644 so that it pass in rhel10 [#6198](https://github.com/openshift/machine-config-operator/pull/6198)
* [OCPBUGS-88726](https://issues.redhat.com/browse/OCPBUGS-88726): Fix streams in imagemode tests [#6195](https://github.com/openshift/machine-config-operator/pull/6195)
* [OCPBUGS-86978](https://issues.redhat.com/browse/OCPBUGS-86978): modify tests to use rhel10 as the default stream [#6167](https://github.com/openshift/machine-config-operator/pull/6167)
* [MCO-1972](https://issues.redhat.com/browse/MCO-1972): Add test OCP-88202: off-cluster and on-cluster layering implementation [#6043](https://github.com/openshift/machine-config-operator/pull/6043)
* [OCPBUGS-87905](https://issues.redhat.com/browse/OCPBUGS-87905): Process rebuild annotation on machine-os-builder restart [#6160](https://github.com/openshift/machine-config-operator/pull/6160)
* [MCO-2344](https://issues.redhat.com/browse/MCO-2344): Revert MCO-2343 [#6185](https://github.com/openshift/machine-config-operator/pull/6185)
* [OCPBUGS-61583](https://issues.redhat.com/browse/OCPBUGS-61583): Update custom containerfile OCB test to work in a disconnected environment [#6161](https://github.com/openshift/machine-config-operator/pull/6161)
* [OCPBUGS-88315](https://issues.redhat.com/browse/OCPBUGS-88315): Automation fix- Add fix for TC 59424 [#6173](https://github.com/openshift/machine-config-operator/pull/6173)
* [AGENT-1517](https://issues.redhat.com/browse/AGENT-1517): move helpers in iri e2e main test [#6159](https://github.com/openshift/machine-config-operator/pull/6159)
* [MCO-2207](https://issues.redhat.com/browse/MCO-2207), [MCO-2209](https://issues.redhat.com/browse/MCO-2209), [MCO-2213](https://issues.redhat.com/browse/MCO-2213): Migrate security, daemon, and kernel TCs from mco.go [#6021](https://github.com/openshift/machine-config-operator/pull/6021)
* [OCPBUGS-68350](https://issues.redhat.com/browse/OCPBUGS-68350): In OCB to check when a image is removed the old build is triggered again and the MC should start updating directly and no new MOSB should be triggred [#6150](https://github.com/openshift/machine-config-operator/pull/6150)
* [OCPBUGS-74970](https://issues.redhat.com/browse/OCPBUGS-74970): Fix kubelet certificate wait loop in criometricsproxy.yaml [#6125](https://github.com/openshift/machine-config-operator/pull/6125)
* [OCPNODE-4487](https://issues.redhat.com/browse/OCPNODE-4487): replace --system-reserved flags with config drop-in [#6044](https://github.com/openshift/machine-config-operator/pull/6044)
* OWNERS: update current MCO team members [#6165](https://github.com/openshift/machine-config-operator/pull/6165)
* [OCPBUGS-87389](https://issues.redhat.com/browse/OCPBUGS-87389): Updating ose-machine-config-operator-container image to be consistent with ART for 5.0 [#6152](https://github.com/openshift/machine-config-operator/pull/6152)
* [OCPBUGS-87635](https://issues.redhat.com/browse/OCPBUGS-87635): Fix MCP.status.osImageStream [#6154](https://github.com/openshift/machine-config-operator/pull/6154)
* [OCPBUGS-87192](https://issues.redhat.com/browse/OCPBUGS-87192): Add mco_extensions.go e2e test suite for MCO extension install, enable, and validation [#6034](https://github.com/openshift/machine-config-operator/pull/6034)
* [MCO-2343](https://issues.redhat.com/browse/MCO-2343): Temporary make MCO default to rhel-9 [#6156](https://github.com/openshift/machine-config-operator/pull/6156)
* [OCPBUGS-86588](https://issues.redhat.com/browse/OCPBUGS-86588): vSphere boot image hot loop detection is non-functional due to stable template names [#6094](https://github.com/openshift/machine-config-operator/pull/6094)
* [OCPBUGS-85428](https://issues.redhat.com/browse/OCPBUGS-85428): Lowercase the start of all error messages [#6106](https://github.com/openshift/machine-config-operator/pull/6106)
* [MCO-2208](https://issues.redhat.com/browse/MCO-2208): MCO-2125: Migrate mco registry units [#6079](https://github.com/openshift/machine-config-operator/pull/6079)
* [OCPBUGS-86978](https://issues.redhat.com/browse/OCPBUGS-86978): adapt osimagestream tests to handle clusters defaulting to rhel-10 [#6099](https://github.com/openshift/machine-config-operator/pull/6099)
* [AGENT-1517](https://issues.redhat.com/browse/AGENT-1517): avoid running IRI deletion tests for standard e2e IRI tests [#6145](https://github.com/openshift/machine-config-operator/pull/6145)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/62b06d28399b348cb7238d32ad74b9a978c4292f...0e0f89b580ef7b792bbd302724e185644a595fa1)
### [machine-os-images](https://github.com/openshift/machine-os-images/tree/7e514b05e0825994d858d0a142e255abdd0e8f2d)
* NO-ISSUE: OWNERS: Remove me [#78](https://github.com/openshift/machine-os-images/pull/78)
* [OCPBUGS-87871](https://issues.redhat.com/browse/OCPBUGS-87871): Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs [#95](https://github.com/openshift/machine-os-images/pull/95)
* [OCPBUGS-87356](https://issues.redhat.com/browse/OCPBUGS-87356): Updating ose-machine-os-images-container image to be consistent with ART for 5.0 [#91](https://github.com/openshift/machine-os-images/pull/91)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/a8b4286c6b557f5278d62838917872bafbec10d9...7e514b05e0825994d858d0a142e255abdd0e8f2d)
### [metallb-frr](https://github.com/openshift/frr/tree/5d3b12b6ce0a7def4a7a4d1df7ff9e88deb430f5)
* [OCPBUGS-87384](https://issues.redhat.com/browse/OCPBUGS-87384): Updating ose-frr-container image to be consistent with ART for 5.0 [#134](https://github.com/openshift/frr/pull/134)
* [Full changelog](https://github.com/openshift/frr/compare/99c313cdedbad293f51a5665587dc4dab450cc28...5d3b12b6ce0a7def4a7a4d1df7ff9e88deb430f5)
### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/d5ffdd28dcf8863f9163fe930ffa0753b09161f3)
* [OU-1396](https://issues.redhat.com/browse/OU-1396): fix: use replace to set variables to avoid navigation trap [#1013](https://github.com/openshift/monitoring-plugin/pull/1013)
* [OCPBUGS-85473](https://issues.redhat.com/browse/OCPBUGS-85473): fix: escape regex variable values in regex matcher contexts [#1010](https://github.com/openshift/monitoring-plugin/pull/1010)
* [OBSINTA-1290](https://issues.redhat.com/browse/OBSINTA-1290): Incident Tests Stability [#887](https://github.com/openshift/monitoring-plugin/pull/887)
* [OBSINTA-1358](https://issues.redhat.com/browse/OBSINTA-1358): Fix COO_BUNDLE_IMAGE install path in Cypress Tests. [#994](https://github.com/openshift/monitoring-plugin/pull/994)
* [OU-1384](https://issues.redhat.com/browse/OU-1384): Add missing prop types [#1004](https://github.com/openshift/monitoring-plugin/pull/1004)
* [OU-1384](https://issues.redhat.com/browse/OU-1384): allow test cases to log to console [#1002](https://github.com/openshift/monitoring-plugin/pull/1002)
* [OBSINTA-1397](https://issues.redhat.com/browse/OBSINTA-1397): fix(perses): fall back to metadata.name when dashboard display name is missing [#998](https://github.com/openshift/monitoring-plugin/pull/998)
* [OU-1384](https://issues.redhat.com/browse/OU-1384): add displayNames to components missing them [#1003](https://github.com/openshift/monitoring-plugin/pull/1003)
* [OU-1384](https://issues.redhat.com/browse/OU-1384): remove global eslint disables [#995](https://github.com/openshift/monitoring-plugin/pull/995)
* [OCPBUGS-87980](https://issues.redhat.com/browse/OCPBUGS-87980): build: fix fast-uri vulnerable dependency [#971](https://github.com/openshift/monitoring-plugin/pull/971)
* [OBSINTA-1387](https://issues.redhat.com/browse/OBSINTA-1387): add OLS add-to-dashboard e2e test [#996](https://github.com/openshift/monitoring-plugin/pull/996)
* [OBSINTA-1387](https://issues.redhat.com/browse/OBSINTA-1387): add COO-LightSpeed show_timeseries e2e test [#985](https://github.com/openshift/monitoring-plugin/pull/985)
* [OU-1404](https://issues.redhat.com/browse/OU-1404): prevent re-entrant effect loop in ExternalPanelAddition [#991](https://github.com/openshift/monitoring-plugin/pull/991)
* [OCPBUGS-87485](https://issues.redhat.com/browse/OCPBUGS-87485): Updating monitoring-plugin-container image to be consistent with ART for 5.0 [#972](https://github.com/openshift/monitoring-plugin/pull/972)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/78b916b2c4f26304ae09842b51f339d0e756a5e7...d5ffdd28dcf8863f9163fe930ffa0753b09161f3)
### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/4bb2e2069c3e4f11fbc4c1befd6dc1c41fa802b7)
* [CORENET-7103](https://issues.redhat.com/browse/CORENET-7103): Add TLS configuration CLI flags [#121](https://github.com/openshift/multus-admission-controller/pull/121)
* [OCPBUGS-87456](https://issues.redhat.com/browse/OCPBUGS-87456): Updating ose-multus-admission-controller-container image to be consistent with ART for 5.0 [#119](https://github.com/openshift/multus-admission-controller/pull/119)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/12d99f3f29fe38f900d0c6400889e3d58c588f45...4bb2e2069c3e4f11fbc4c1befd6dc1c41fa802b7)
### [must-gather](https://github.com/openshift/must-gather/tree/16ac27eedcc79f5b57d77eb01e6b187b84fe7daa)
* [OCPBUGS-86136](https://issues.redhat.com/browse/OCPBUGS-86136): Add InternalReleaseImage to gather [#552](https://github.com/openshift/must-gather/pull/552)
* [Full changelog](https://github.com/openshift/must-gather/compare/37e5da519790dfb004d014ee00a26252b2294e41...16ac27eedcc79f5b57d77eb01e6b187b84fe7daa)
### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/466a73aba120221bc080e4bbb9857ce56a7b5cce)
* [OCPBUGS-87460](https://issues.redhat.com/browse/OCPBUGS-87460): Updating ose-network-interface-bond-cni-container image to be consistent with ART for 5.0 [#118](https://github.com/openshift/bond-cni/pull/118)
* [Full changelog](https://github.com/openshift/bond-cni/compare/2e9f050e81a02305f56698b19c249d4d03330dfd...466a73aba120221bc080e4bbb9857ce56a7b5cce)
### [network-tools](https://github.com/openshift/network-tools/tree/0b53ac3dccf59cd169555bf18c207122374bf003)
* NO-JIRA: Add members to script [#183](https://github.com/openshift/network-tools/pull/183)
* [OCPBUGS-87549](https://issues.redhat.com/browse/OCPBUGS-87549): Updating ose-network-tools-container image to be consistent with ART for 5.0 [#182](https://github.com/openshift/network-tools/pull/182)
* [Full changelog](https://github.com/openshift/network-tools/compare/b05fd6281beaad05e7de1f95b506679ca53d2b49...0b53ac3dccf59cd169555bf18c207122374bf003)
### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/35f8ec76aeffeab0452e36d39488ad00ac9c22c1)
* [OCPBUGS-92033](https://issues.redhat.com/browse/OCPBUGS-92033): fixed translations of pod column titles [#436](https://github.com/openshift/networking-console-plugin/pull/436)
* [OCPBUGS-42124](https://issues.redhat.com/browse/OCPBUGS-42124): Fix 'model does not exist' error when enabling MultiNetworkPolicies [#434](https://github.com/openshift/networking-console-plugin/pull/434)
* [OCPBUGS-87477](https://issues.redhat.com/browse/OCPBUGS-87477): Updating networking-console-plugin-container image to be consistent with ART for 5.0 [#427](https://github.com/openshift/networking-console-plugin/pull/427)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/f5d4e5c5a572e1fa9f289f94b8798c3fe9de65b4...35f8ec76aeffeab0452e36d39488ad00ac9c22c1)
### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/9e9722dd2f3f71ec891e3413a8a8cdd6dbfe872f)
* [CNTRLPLANE-3715](https://issues.redhat.com/browse/CNTRLPLANE-3715): Agentic-SDLC: Add human and agent context files [#210](https://github.com/openshift/oauth-apiserver/pull/210)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/97a820bd5412c2d3bb22f083152107ef41631c8c...9e9722dd2f3f71ec891e3413a8a8cdd6dbfe872f)
### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/2b9ee007290b0e1cb85737f3b37075343f9f4857)
* [OCPBUGS-92053](https://issues.redhat.com/browse/OCPBUGS-92053): update x/crypto to v0.52.0 and x/net to v0.55.0 [#368](https://github.com/openshift/oauth-proxy/pull/368)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/fa27a041c546f80152f1bb0deec777e406f38f87...2b9ee007290b0e1cb85737f3b37075343f9f4857)
### [oc-mirror](https://github.com/openshift/oc-mirror/tree/c3552e2d3df5dcc4eb939b6bcbb6541e5f26eed6)
* [OCPBUGS-90096](https://issues.redhat.com/browse/OCPBUGS-90096): Make dry-run also generate cluster-resources [#1394](https://github.com/openshift/oc-mirror/pull/1394)
* NO-JIRA: Adds dorzel as reviewer [#1456](https://github.com/openshift/oc-mirror/pull/1456)
* [CLID-602](https://issues.redhat.com/browse/CLID-602): Test for enclave scenario [#1411](https://github.com/openshift/oc-mirror/pull/1411)
* [OCPBUGS-89515](https://issues.redhat.com/browse/OCPBUGS-89515): v1/e2e: reduce helm download flakiness [#1446](https://github.com/openshift/oc-mirror/pull/1446)
* [OCPBUGS-88461](https://issues.redhat.com/browse/OCPBUGS-88461): fix(helm): tolerate v-prefix version mismatch in disk-to-mirror [#1430](https://github.com/openshift/oc-mirror/pull/1430)
* [CLID-616](https://issues.redhat.com/browse/CLID-616): bump operator-framework for `WriteFS` fix + add tests [#1428](https://github.com/openshift/oc-mirror/pull/1428)
* [OCPBUGS-86585](https://issues.redhat.com/browse/OCPBUGS-86585): Add regression test for secure-policy catalog OCI conv… [#1425](https://github.com/openshift/oc-mirror/pull/1425)
* [OCPBUGS-85331](https://issues.redhat.com/browse/OCPBUGS-85331): Include tag+digest images in both IDMS and ITMS [#1424](https://github.com/openshift/oc-mirror/pull/1424)
* [OCPBUGS-61001](https://issues.redhat.com/browse/OCPBUGS-61001): v2/clusterresources: add def namespace to UpdateService [#1262](https://github.com/openshift/oc-mirror/pull/1262)
* [CLID-589](https://issues.redhat.com/browse/CLID-589): Add OTE test binary to Dockerfile.art [#1429](https://github.com/openshift/oc-mirror/pull/1429)
* [OCPBUGS-87496](https://issues.redhat.com/browse/OCPBUGS-87496): Updating oc-mirror-plugin-container image to be consistent with ART for 5.0 [#1432](https://github.com/openshift/oc-mirror/pull/1432)
* [OCPBUGS-87496](https://issues.redhat.com/browse/OCPBUGS-87496): update images to be consistent with ART [#1433](https://github.com/openshift/oc-mirror/pull/1433)
* [OCPBUGS-81712](https://issues.redhat.com/browse/OCPBUGS-81712): fixes race condition when mirroring operator catalogs [#1390](https://github.com/openshift/oc-mirror/pull/1390)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/cd8e7ece819a933b2735d7d10fbbe3729daa17d8...c3552e2d3df5dcc4eb939b6bcbb6541e5f26eed6)
### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/0264de126b0c71017a950b7e944b3570369fb1aa)
* NO-ISSUE: Synchronize From Upstream Repositories [#754](https://github.com/openshift/operator-framework-operator-controller/pull/754)
* NO-ISSUE: Synchronize From Upstream Repositories [#752](https://github.com/openshift/operator-framework-operator-controller/pull/752)
* [OCPBUGS-85828](https://issues.redhat.com/browse/OCPBUGS-85828): Update catalogs for 4.23/5.0 [#734](https://github.com/openshift/operator-framework-operator-controller/pull/734)
* [OCPBUGS-86797](https://issues.redhat.com/browse/OCPBUGS-86797), [OPRUN-4415](https://issues.redhat.com/browse/OPRUN-4415): Synchronize From Upstream Repositories [#743](https://github.com/openshift/operator-framework-operator-controller/pull/743)
* [OCPBUGS-87383](https://issues.redhat.com/browse/OCPBUGS-87383): Updating ose-olm-operator-controller-container image to be consistent with ART for 5.0 [#749](https://github.com/openshift/operator-framework-operator-controller/pull/749)
* [OCPBUGS-87385](https://issues.redhat.com/browse/OCPBUGS-87385): Updating ose-olm-catalogd-container image to be consistent with ART for 5.0 [#750](https://github.com/openshift/operator-framework-operator-controller/pull/750)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/9fe71d5548bb4a1b1a8ce0c02b3c2a74dded0c59...0264de126b0c71017a950b7e944b3570369fb1aa)
### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/831ab1bd2e1cf4e2deacf8f243e22c34b89a38c5)
* [OCPBUGS-79070](https://issues.redhat.com/browse/OCPBUGS-79070): Fix: Preserve annotations when creating ImageStreamTag [#656](https://github.com/openshift/openshift-apiserver/pull/656)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/22f07f6e7825c572abf8214e6a376078d9048296...831ab1bd2e1cf4e2deacf8f243e22c34b89a38c5)
### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/0e12f5d6df02b37b0353a747d144e8069c3d0c2a)
* [OCPBUGS-87472](https://issues.redhat.com/browse/OCPBUGS-87472): Updating openshift-state-metrics-container image to be consistent with ART for 5.0 [#134](https://github.com/openshift/openshift-state-metrics/pull/134)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/e71e09969f11a47c87b87c43b762ad1d01f6b04f...0e12f5d6df02b37b0353a747d144e8069c3d0c2a)
### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/76198b243458ca266eb8b87bbcf69a7b7c3eec7f)
* [OCPBUGS-87266](https://issues.redhat.com/browse/OCPBUGS-87266): Updating openstack-cluster-api-controllers-container image to be consistent with ART for 5.0 [#422](https://github.com/openshift/cluster-api-provider-openstack/pull/422)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/4bc7bc64a57f67992ad074c55d4e8e57fe5ec2ea...76198b243458ca266eb8b87bbcf69a7b7c3eec7f)
### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/6b30092b0a1196b016f4300b79c895f0e7f2e9a8)
* [OCPBUGS-77061](https://issues.redhat.com/browse/OCPBUGS-77061): Vendor Downstream CAPO [#170](https://github.com/openshift/machine-api-provider-openstack/pull/170)
* [OCPBUGS-87494](https://issues.redhat.com/browse/OCPBUGS-87494): Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 5.0 [#169](https://github.com/openshift/machine-api-provider-openstack/pull/169)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/8a8c354b99ce83e3c05a91358aadec09944c2fce...6b30092b0a1196b016f4300b79c895f0e7f2e9a8)
### [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller/tree/58dbc0482c144c21effee2476947889122a518eb)
* [OCPBUGS-87486](https://issues.redhat.com/browse/OCPBUGS-87486): Updating openstack-resource-controller-container image to be consistent with ART for 5.0 [#39](https://github.com/openshift/openstack-resource-controller/pull/39)
* UPSTREAM-SYNC: Merge https://github.com/k-orc/openstack-resource-controller:release-2.0 into main [#38](https://github.com/openshift/openstack-resource-controller/pull/38)
* [Full changelog](https://github.com/openshift/openstack-resource-controller/compare/af431c7d76e7474d9f83c4803aa402c24f075534...58dbc0482c144c21effee2476947889122a518eb)
### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/93e5a5c64d445f71d98d70abc266b75af823370b)
* [TRT-2761](https://issues.redhat.com/browse/TRT-2761): Revert #1330 "NO-ISSUE: Synchronize From Upstream Repositories" [#1334](https://github.com/openshift/operator-framework-olm/pull/1334)
* NO-ISSUE: Synchronize From Upstream Repositories [#1330](https://github.com/openshift/operator-framework-olm/pull/1330)
* NO-ISSUE: Synchronize From Upstream Repositories [#1316](https://github.com/openshift/operator-framework-olm/pull/1316)
* [OCPBUGS-88013](https://issues.redhat.com/browse/OCPBUGS-88013): Updating operator-lifecycle-manager-container image to be consistent with ART for 5.0 [#1323](https://github.com/openshift/operator-framework-olm/pull/1323)
* [OCPBUGS-88012](https://issues.redhat.com/browse/OCPBUGS-88012): Updating ose-operator-framework-tools-container image to be consistent with ART for 5.0 [#1322](https://github.com/openshift/operator-framework-olm/pull/1322)
* [OCPBUGS-88014](https://issues.redhat.com/browse/OCPBUGS-88014): Updating operator-registry-container image to be consistent with ART for 5.0 [#1324](https://github.com/openshift/operator-framework-olm/pull/1324)
* [OPRUN-4639](https://issues.redhat.com/browse/OPRUN-4639): Update to golang 1.26.3 and openshift-4.23 builders [#1317](https://github.com/openshift/operator-framework-olm/pull/1317)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/a1de734673fb56da500b6ea212a70d50bd5740ab...93e5a5c64d445f71d98d70abc266b75af823370b)
### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/a8006e26248b52c659315bd98eef227596964e41)
* NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.29.0 to 2.31.0 [#760](https://github.com/operator-framework/operator-marketplace/pull/760)
* NO-ISSUE: Bump github.com/onsi/gomega from 1.41.0 to 1.42.0 [#763](https://github.com/operator-framework/operator-marketplace/pull/763)
* NO-ISSUE: Bump github.com/operator-framework/operator-lifecycle-manager from 0.42.0 to 0.43.0 [#755](https://github.com/operator-framework/operator-marketplace/pull/755)
* [OCPBUGS-87398](https://issues.redhat.com/browse/OCPBUGS-87398): Updating marketplace-operator-container image to be consistent with ART for 5.0 [#758](https://github.com/operator-framework/operator-marketplace/pull/758)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/03428ca0b0885e297f29fced8be1790444c4d4de...a8006e26248b52c659315bd98eef227596964e41)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/f0527039dfc4901637721e7cecfdb9d0ea1c9c38)
* [CORENET-6592](https://issues.redhat.com/browse/CORENET-6592): Promote EVPN E2Es from informing to blocking tests [#3178](https://github.com/openshift/ovn-kubernetes/pull/3178)
* [CORENET-7116](https://issues.redhat.com/browse/CORENET-7116): Fix perma-failing security presubmit job [#3218](https://github.com/openshift/ovn-kubernetes/pull/3218)
* [OCPBUGS-79408](https://issues.redhat.com/browse/OCPBUGS-79408), [OCPBUGS-86503](https://issues.redhat.com/browse/OCPBUGS-86503): DownStream Merge [06-11-2026] [#3247](https://github.com/openshift/ovn-kubernetes/pull/3247)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/e9295c0d0d7caa1eda7cc9f2f3900c64096c943c...f0527039dfc4901637721e7cecfdb9d0ea1c9c38)
### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/e7c2c09bd0507f8bd5a6dc3921024a379f4a8af0)
* NO-JIRA: Update OWNERS_ALIASES to modify approvers and reviewers [#137](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/137)
* [OCPBUGS-87294](https://issues.redhat.com/browse/OCPBUGS-87294): Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 5.0 [#136](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/136)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/b5bc8bbd638c08e4df6ff4e382b4170b202733be...e7c2c09bd0507f8bd5a6dc3921024a379f4a8af0)
### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/ab04496a6855098853048c957c499f2a63200f8e)
* NO-JIRA: Update OWNERS to modify approvers and reviewers [#118](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/118)
* [OCPBUGS-87386](https://issues.redhat.com/browse/OCPBUGS-87386): Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 5.0 [#117](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/117)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/a56f9e95588f656435e2cc3b256d9782213a7813...ab04496a6855098853048c957c499f2a63200f8e)
### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/279b5927e540312bf3886267c9bcabc806d9f286)
* [OCPBUGS-87520](https://issues.redhat.com/browse/OCPBUGS-87520): Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART for 5.0 [#104](https://github.com/openshift/cloud-provider-powervs/pull/104)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/855eaaae59c78a00638d8426b4b1763e881d9e6f...279b5927e540312bf3886267c9bcabc806d9f286)
### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/4ab9ff73c665319352288fe0b9b9e1df71832525)
* NO-ISSUE: [bot] Bump openshift/prom-label-proxy to v0.14.0 [#398](https://github.com/openshift/prom-label-proxy/pull/398)
* [OCPBUGS-87514](https://issues.redhat.com/browse/OCPBUGS-87514): Updating prom-label-proxy-container image to be consistent with ART for 5.0 [#397](https://github.com/openshift/prom-label-proxy/pull/397)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/ce91b7a51d1aee390a70e3c418e0f5539ad117c5...4ab9ff73c665319352288fe0b9b9e1df71832525)
### [prometheus](https://github.com/openshift/prometheus/tree/6d5e6fee576a7e192b82209c6ce09855ca4bbaab)
* [OCPBUGS-92815](https://issues.redhat.com/browse/OCPBUGS-92815): bump golang.org/x/crypto to v0.53.0 [#334](https://github.com/openshift/prometheus/pull/334)
* Bump openshift/prometheus to v3.12.0 [#332](https://github.com/openshift/prometheus/pull/332)
* NO-JIRA: bump prometheus to v3.12.0 [#329](https://github.com/openshift/prometheus/pull/329)
* [OCPBUGS-87446](https://issues.redhat.com/browse/OCPBUGS-87446): Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 5.0 [#326](https://github.com/openshift/prometheus/pull/326)
* [Full changelog](https://github.com/openshift/prometheus/compare/1f1bc8a1d7d2af0828371c9c876c95365df0c3d7...6d5e6fee576a7e192b82209c6ce09855ca4bbaab)
### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/c30580cbb1af27356599c785720ee5043440e84a)
* NO-JIRA: bump to 0.33.0 [#138](https://github.com/openshift/prometheus-alertmanager/pull/138)
* NO-ISSUE: [bot] Bump openshift/prometheus-alertmanager to v0.32.2 [#135](https://github.com/openshift/prometheus-alertmanager/pull/135)
* [OCPBUGS-87471](https://issues.redhat.com/browse/OCPBUGS-87471): Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 5.0 [#136](https://github.com/openshift/prometheus-alertmanager/pull/136)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/4b911714a57e8a6959b95efaff939af29a2b249c...c30580cbb1af27356599c785720ee5043440e84a)
### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/6a36acbd5ecd5a308bc81267f3b0567f93377247)
* [OCPBUGS-87481](https://issues.redhat.com/browse/OCPBUGS-87481): Updating prometheus-config-reloader-container image to be consistent with ART for 5.0 [#383](https://github.com/openshift/prometheus-operator/pull/383)
* [OCPBUGS-87527](https://issues.redhat.com/browse/OCPBUGS-87527): Updating prometheus-operator-container image to be consistent with ART for 5.0 [#384](https://github.com/openshift/prometheus-operator/pull/384)
* [OCPBUGS-87341](https://issues.redhat.com/browse/OCPBUGS-87341): Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 5.0 [#382](https://github.com/openshift/prometheus-operator/pull/382)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/7546381db866dd10a33395d2c28ceeca3c1c1591...6a36acbd5ecd5a308bc81267f3b0567f93377247)
### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/45dec4ebf58ec9fb7083411ee4b6d46c01140c5f)
* [OCPBUGS-87295](https://issues.redhat.com/browse/OCPBUGS-87295): Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 5.0 [#181](https://github.com/openshift/node_exporter/pull/181)
* [Full changelog](https://github.com/openshift/node_exporter/compare/278f5e5ea25af9d05a7c04ea033a880354d471f6...45dec4ebf58ec9fb7083411ee4b6d46c01140c5f)
### [rhel-coreos, rhel-coreos-10, rhel-coreos-10-extensions, rhel-coreos-extensions](https://github.com/openshift/os/tree/d75a447b705c33cb96a43355eae4355c609d0784)
* NO-JIRA: extensions: templatize OCP version in repo names; drop kata from extensions [#1942](https://github.com/openshift/os/pull/1942)
* NO-JIRA: Add configs for 4.23; update build-args file naming [#1941](https://github.com/openshift/os/pull/1941)
* NO-JIRA: Set io.openshift.os.streamclass label on built images [#1940](https://github.com/openshift/os/pull/1940)
* [ART-14453](https://issues.redhat.com/browse/ART-14453): Use rpm-ostree install directly in legacy build pipeline [#1935](https://github.com/openshift/os/pull/1935)
* NO-JIRA: Make build-args files use 5.0 version and revert repo names change [#1936](https://github.com/openshift/os/pull/1936)
* NO-JIRA: Update to track 5.0 [#1930](https://github.com/openshift/os/pull/1930)
* [COS-4051](https://issues.redhat.com/browse/COS-4051): tree: add `labels.json` and security OCI labels for Clair scanning [#1919](https://github.com/openshift/os/pull/1919)
* NO-JIRA: FAQ: add a composeFS entry [#1931](https://github.com/openshift/os/pull/1931)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/os/compare/f41264dc5f1c1f0a389787ecc5aaec573d485b8e...d75a447b705c33cb96a43355eae4355c609d0784)
### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/01ccbfb991fdbc559820a04c4932fc5ddf2339d0)
* [OCPBUGS-87336](https://issues.redhat.com/browse/OCPBUGS-87336): Updating ose-route-controller-manager-container image to be consistent with ART for 5.0 [#98](https://github.com/openshift/route-controller-manager/pull/98)
* [OCPBUGS-86886](https://issues.redhat.com/browse/OCPBUGS-86886): modernize dependency of k8s imports [#92](https://github.com/openshift/route-controller-manager/pull/92)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/1916ceb059f500f06e8552f88bf38cd09f9522fd...01ccbfb991fdbc559820a04c4932fc5ddf2339d0)
### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/883c387c71c59767f08e21ca57c810b56ab16d01)
* [CNTRLPLANE-3718](https://issues.redhat.com/browse/CNTRLPLANE-3718): Add AI SDLC context files [#362](https://github.com/openshift/service-ca-operator/pull/362)
* [OCPBUGS-73938](https://issues.redhat.com/browse/OCPBUGS-73938): Watch CA bundle files for changes and reload dynamically [#329](https://github.com/openshift/service-ca-operator/pull/329)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/e7ccfa308e69ce4ad1f2afcd1d7c8ff25144374b...883c387c71c59767f08e21ca57c810b56ab16d01)
### [telemeter](https://github.com/openshift/telemeter/tree/a1dabee1951bd2878719a6da9d5d4304332ef0d4)
* [OCPBUGS-87222](https://issues.redhat.com/browse/OCPBUGS-87222): Updating telemeter-container image to be consistent with ART for 5.0 [#607](https://github.com/openshift/telemeter/pull/607)
* [Full changelog](https://github.com/openshift/telemeter/compare/33073dc20ca6c534c134f6a0f58e6bf8e162d4ac...a1dabee1951bd2878719a6da9d5d4304332ef0d4)
### [tests](https://github.com/openshift/origin/tree/6df9cfeba6d5782ad77b3f7bd4bd72f1fdddde07)
* [OCPNODE-4560](https://issues.redhat.com/browse/OCPNODE-4560): Migrate OCP-56266 verify kubelet/crio deletes netns when pod deleted [#31242](https://github.com/openshift/origin/pull/31242)
* [OCPBUGS-85426](https://issues.redhat.com/browse/OCPBUGS-85426): improve DCM tests to reduce flakiness in endpoints [#31173](https://github.com/openshift/origin/pull/31173)
* NO-ISSUE: monitor/haproxy: treat all-apiservers-down test as flake [#31343](https://github.com/openshift/origin/pull/31343)
* [OCPBUGS-90507](https://issues.redhat.com/browse/OCPBUGS-90507): Update CNV swap tests for mandatory drop-in directory [#31318](https://github.com/openshift/origin/pull/31318)
* [OCPQE-32077](https://issues.redhat.com/browse/OCPQE-32077): Add a monitortest for cluster region/zone/instance type autodl data [#31305](https://github.com/openshift/origin/pull/31305)
* [OCPBUGS-91825](https://issues.redhat.com/browse/OCPBUGS-91825): monitor/haproxy: tolerate install-phase apiserver bounces in all-down test [#31326](https://github.com/openshift/origin/pull/31326)
* [CNTRLPLANE-3629](https://issues.redhat.com/browse/CNTRLPLANE-3629): authentication: skip external oidc kube-apiserver configuration check when new architecture gate is enabled [#31314](https://github.com/openshift/origin/pull/31314)
* [OCPBUGS-91956](https://issues.redhat.com/browse/OCPBUGS-91956): Fix isNoOLMFeatureGateEnabled to check only the current cluster version [#31329](https://github.com/openshift/origin/pull/31329)
* [OCPBUGS-86789](https://issues.redhat.com/browse/OCPBUGS-86789): Make early request monitor test informing [#31323](https://github.com/openshift/origin/pull/31323)
* [OCPBUGS-85782](https://issues.redhat.com/browse/OCPBUGS-85782): Add extra wait after mco and cvo considers upgrade complete [#31289](https://github.com/openshift/origin/pull/31289)
* [OCPEDGE-2606](https://issues.redhat.com/browse/OCPEDGE-2606): e2e: add fencing credentials update and validation tests for dual-replica etcd [#31199](https://github.com/openshift/origin/pull/31199)
* NO-JIRA: Fix interval filtering bug in watchnodes tests [#31320](https://github.com/openshift/origin/pull/31320)
* [CNTRLPLANE-3540](https://issues.redhat.com/browse/CNTRLPLANE-3540): refactor(test/extended/tls): simplify the testing and remove duplication [#31277](https://github.com/openshift/origin/pull/31277)
* NO-JIRA:Added penetration tests important to Telco partners/customers [#31283](https://github.com/openshift/origin/pull/31283)
* [OCPBUGS-89351](https://issues.redhat.com/browse/OCPBUGS-89351): Fix flake in best-effort QoS test due to debug pods [#31312](https://github.com/openshift/origin/pull/31312)
* [TRT-2723](https://issues.redhat.com/browse/TRT-2723): Ignore NodeReady=False during a CNI rollout [#31319](https://github.com/openshift/origin/pull/31319)
* [OCPBUGS-84846](https://issues.redhat.com/browse/OCPBUGS-84846): Fix NetworkNotReady pathological event regex case mismatch [#31088](https://github.com/openshift/origin/pull/31088)
* [OCPBUGS-88719](https://issues.redhat.com/browse/OCPBUGS-88719): Use AdminPolicyBasedExternalRoute CR for external gateway test [#31293](https://github.com/openshift/origin/pull/31293)
* [OPNET-602](https://issues.redhat.com/browse/OPNET-602): Fail haproxy monitor test when log collection fails [#31292](https://github.com/openshift/origin/pull/31292)
* [OPNET-603](https://issues.redhat.com/browse/OPNET-603): Fail haproxy test when all kubeapi servers are down simultaneously [#31291](https://github.com/openshift/origin/pull/31291)
* [OPNET-601](https://issues.redhat.com/browse/OPNET-601): Add on-prem haproxy timeline to e2e interval chart [#31290](https://github.com/openshift/origin/pull/31290)
* [OCPBUGS-84500](https://issues.redhat.com/browse/OCPBUGS-84500): Update ocdebug to ssh [#31216](https://github.com/openshift/origin/pull/31216)
* [OCPNODE-4529](https://issues.redhat.com/browse/OCPNODE-4529): Migrate test case 44493 - configurable terminationGracePeriodSeconds for probes [#31170](https://github.com/openshift/origin/pull/31170)
* [AGENT-1535](https://issues.redhat.com/browse/AGENT-1535): Increase the time checking for IRI SCC uid-range [#31275](https://github.com/openshift/origin/pull/31275)
* [OCPSTRAT-3036](https://issues.redhat.com/browse/OCPSTRAT-3036): Open Deduplicate and use the jessie image [#31281](https://github.com/openshift/origin/pull/31281)
* NO-JIRA: Add Jacob and Jubitta as image approvers [#31279](https://github.com/openshift/origin/pull/31279)
* NO-JIRA: Adding minio image to allowed image [#31241](https://github.com/openshift/origin/pull/31241)
* [OCPBUGS-87001](https://issues.redhat.com/browse/OCPBUGS-87001): Update source of CAPI ImageVolumeAlreadyPresent events [#31286](https://github.com/openshift/origin/pull/31286)
* Use e2eskipper.Skipf to disable os version test until RHEL-10 switchover [#31297](https://github.com/openshift/origin/pull/31297)
* [TRT-2704](https://issues.redhat.com/browse/TRT-2704): Revert "MCO-2370: Temporarily disable the stream test" [#31295](https://github.com/openshift/origin/pull/31295)
* [MCO-2370](https://issues.redhat.com/browse/MCO-2370): Temporarily disable the stream test [#31287](https://github.com/openshift/origin/pull/31287)
* [OCPBUGS-87541](https://issues.redhat.com/browse/OCPBUGS-87541): Updating openshift-enterprise-tests-container image to be consistent with ART for 5.0 [#31265](https://github.com/openshift/origin/pull/31265)
* "OCPSTRAT-3036: Temporary 1.36 image fixes (revert in rebase PR)" [#31263](https://github.com/openshift/origin/pull/31263)
* [OCPNODE-4506](https://issues.redhat.com/browse/OCPNODE-4506), [OCPNODE-4539](https://issues.redhat.com/browse/OCPNODE-4539): Migrate ContainerRuntimeConfig tests (OCP-45351, OCP-46313) [#31153](https://github.com/openshift/origin/pull/31153)
* [OCPNODE-4516](https://issues.redhat.com/browse/OCPNODE-4516): PDB configured with 100% minAvailable - Migrate - 67564 [#31161](https://github.com/openshift/origin/pull/31161)
* [OCPBUGS-84961](https://issues.redhat.com/browse/OCPBUGS-84961): support Parents field on origin test suites [#31261](https://github.com/openshift/origin/pull/31261)
* NO-JIRA: Update hello-openshift base images from 4.16/4.17 to 4.22 [#31264](https://github.com/openshift/origin/pull/31264)
* no-jira: refactor(test/extended/tls): simplify the workflow, reduce code duplication [#31246](https://github.com/openshift/origin/pull/31246)
* [Full changelog](https://github.com/openshift/origin/compare/b1497b7eb0e558f8933943c55c473d2d9326ad4f...6df9cfeba6d5782ad77b3f7bd4bd72f1fdddde07)
### [thanos](https://github.com/openshift/thanos/tree/779d690da4fafe809a689f02e889e6fd9ffd4405)
* [OCPBUGS-92812](https://issues.redhat.com/browse/OCPBUGS-92812): Fix CVE-2026-39882 [#190](https://github.com/openshift/thanos/pull/190)
* [OCPBUGS-87269](https://issues.redhat.com/browse/OCPBUGS-87269): Updating ose-thanos-container image to be consistent with ART for 5.0 [#189](https://github.com/openshift/thanos/pull/189)
* [Full changelog](https://github.com/openshift/thanos/compare/5d9d0f387e5cc651470f27352b28674103bfdd77...779d690da4fafe809a689f02e889e6fd9ffd4405)
### [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator/tree/a6c21eee63d1fae58b63d8493aeb0fd662d1c91e)
* [OCPBUGS-87381](https://issues.redhat.com/browse/OCPBUGS-87381): Updating volume-data-source-validator-container image to be consistent with ART for 5.0 [#15](https://github.com/openshift/volume-data-source-validator/pull/15)
* [Full changelog](https://github.com/openshift/volume-data-source-validator/compare/8e176cec394709cac728423cbbb6c3c914be8485...a6c21eee63d1fae58b63d8493aeb0fd662d1c91e)