# 5.0.0-rc.5

Created: 2026-10-01 15:47:56 +0000 UTC

Image Digest: `sha256:489bb7e8cdd45286a149cbd4ca6d7a17f26236d97186fa367264fb9e7bd40983`


## Changes from 5.0.0-rc.4

### Components

* Kubectl 1.36.2
* Kubernetes upgraded from 1.36.3 to 1.36.4
* Kubernetes Tests 1.36.2
* Red Hat Enterprise Linux CoreOS 10.2 upgraded from 10.2.20260918-0 to 10.2.20260928-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | OKD<br/>Hypershift | OKD<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---:  |
| DRADeviceTaintRules <br/> (0 tests)|  |  |  |  |  |  |  |   |


### Rebuilt images without code change

* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [b1d92ca2](https://github.com/openshift/assisted-installer-agent/commit/b1d92ca20c3a276744861d8fb77745bb8f42ea9a) `sha256:cf5dfb591c6347be58e491c0d1ee2014e0bd7761d887db773617c246779871cc`
* [agentic-skills](https://github.com/openshift/agentic-skills) git [b199bef9](https://github.com/openshift/agentic-skills/commit/b199bef90aa2f1c5f307a302783e3c8cae26517e) `sha256:875514a3ae6af6ce72db632b89f60599e72557e42ffe24c523ae6a3e60cc2371`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [d6ec9243](https://github.com/openshift/apiserver-network-proxy/commit/d6ec9243d24050d7d7ad7f939e45f821171f000e) `sha256:94055bf630cd410ceb4ee327829f4219b7f293d5e7572094cceead8ed4e83ab9`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [d04b5262](https://github.com/openshift/aws-karpenter-provider-aws/commit/d04b52621a47868d907e986b37a01fcddeb8a23f) `sha256:ff2f415401f052051defc710f621b29b492df80926a32418b9b9e202af3ef9a9`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [9b18930d](https://github.com/openshift/aws-encryption-provider/commit/9b18930d2db9521a08faa7165488bdcf6482b9cf) `sha256:aa20df93576bcf811d88285fe925284418298159d986853afe5b04ba1642a145`
* [aws-node-termination-handler](https://github.com/openshift/aws-node-termination-handler) git [9b33cce5](https://github.com/openshift/aws-node-termination-handler/commit/9b33cce5107d71df5c65dbca6c08f1f71d9e6e8a) `sha256:5dddbc98bbedbd7fd5b798640193f0fd3c91768b35e0222acc4c1035dfc1ed54`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [6409e379](https://github.com/openshift/azure-kubernetes-kms/commit/6409e379fa979104a9515108608c22492bb803a7) `sha256:17f835e5e3c11505ba94a171e110c8b8b9e6e9243a02cc532d8bc92511986aee`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [0611cd27](https://github.com/openshift/azure-service-operator/commit/0611cd27b9eaa4a1fa8e0ab8ddc85352a61903e0) `sha256:ceda7b3013fdb96563926f5dd6f312ac44e10533b544dce21071501dd2dc59e7`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [ad4f1c2b](https://github.com/openshift/cluster-api-provider-metal3/commit/ad4f1c2bd7b527437496b71b5b93ee1439243d65) `sha256:529f0acd20286c2a596f0aa8e5d7bc66fb5c258f0f5435116487c41c979d9581`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [34bbeb37](https://github.com/openshift/baremetal-operator/commit/34bbeb376836bf01793d4e70d29065d619ebcaa1) `sha256:7ecbcf356742ac055472e19fb868cceec58910566ed0888db4f11af3e6eefe06`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [3a261a6f](https://github.com/openshift/baremetal-runtimecfg/commit/3a261a6f4a6211e8f4031611104ced4def436dde) `sha256:da8f82e6b8c48f00fc0c9e418a8f7c28cc08d542a2ada6cf062352caf97171e7`
* [cli](https://github.com/openshift/oc) git [4b0a124d](https://github.com/openshift/oc/commit/4b0a124d300cef187037bda6f1b04caa69ab8b62) `sha256:a7f4e3f76a8464d85f425bb525c8a5126397a7ad5e88c3041d4d15f013f98309`
* [cli-artifacts](https://github.com/openshift/oc) git [4b0a124d](https://github.com/openshift/oc/commit/4b0a124d300cef187037bda6f1b04caa69ab8b62) `sha256:73a63c0ece5a78b889039add1adf49d9d7fe6030b2a3b5fb7c77ced909c10fd1`
* [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [b187feee](https://github.com/openshift/cloud-credential-operator/commit/b187feee66f4ce0f992059b21a97a2ae88e4cdd9) `sha256:3786c8ef33d1216a41d9203fde6488d8020f7f098764ba22196ca8d5ad3df2ab`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [7afccf2d](https://github.com/openshift/cloud-network-config-controller/commit/7afccf2d78f6cb5dd3181de1588c5063bd995d7d) `sha256:a1e663d46975c8d693e3835340a1b105cc8894283f427aa1db32edf0fc778617`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [f393f542](https://github.com/openshift/kubernetes-autoscaler/commit/f393f54229e6c3ae74c35ae72012af92d31c03d3) `sha256:edd16858f4e5a660856567a8496e8961e4f86d942c1bce18d80173331bf9795c`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [e48fe117](https://github.com/openshift/cluster-autoscaler-operator/commit/e48fe1179ad671757b5a40688e2d125c1f326e8b) `sha256:16aafd38a1f4a14e58e98d456cda256195d3d2ef8a46f2084e9b5a03537fd82a`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [9573b4d6](https://github.com/openshift/cluster-bootstrap/commit/9573b4d6ef1638c013cde95ec29ddcc80e10cf87) `sha256:ce634ce3863c32f7de67b9330408c390e2e5e62a7fc804955339aea61f98a9db`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [0da197f8](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/0da197f80d941f537331f173bc7613d6729a2767) `sha256:9c9c6a1f3381133abc46f0d6f764c95bc0932d8fbdc10ff41c43f2c7b7721704`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [324996d8](https://github.com/openshift/cluster-config-operator/commit/324996d8fff21db132e0c4764600d4720adab4be) `sha256:701ab80196950d0521371e2a784387379100b04bd88f32d41a34546fbbbc4918`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [c00cf58d](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/c00cf58dd81954ca100757f6a2d2af8d84770fd5) `sha256:6bf2aac24947056eaf61502034236dc0af2519ea26a9a1275fbc71212b2dfce7`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [35ec0224](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/35ec0224eb0e5219d5eae012fb703223a6f3e1f7) `sha256:a27d85c19c5c8da66e69facd675d49f37ca0fa74ff64495cb3b376f80e4f1b62`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [c0ed09e3](https://github.com/openshift/cluster-dns-operator/commit/c0ed09e329e9001629518604a58205e3fbe8284a) `sha256:1c8f7ca7e8e9240d4139590e4016329594877807025a1bb07acf85369064f9ae`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [b6d3329d](https://github.com/openshift/cluster-image-registry-operator/commit/b6d3329d7059adba44dd0c3e9c0e9da264f9a551) `sha256:3a5a5167728fa7b9bf37a396f47780780aa593fbe5899d4c4bd7c3f3a68b5692`
* [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator) git [b8c26db7](https://github.com/openshift/cluster-kube-apiserver-operator/commit/b8c26db7c7c7e49476235ec83b2e81ef0996e242) `sha256:279df802fb99a23e15cf22efe6251978ef1deb6c46c8fd188fa9202a5bd831fd`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [1ee372e7](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/1ee372e7019b41fbcb4c64323142c4a06bf266d0) `sha256:69939d95f66fed888c1bc8a85d6350fc5468793b14d7277650294d0e36b38224`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [e0d271fc](https://github.com/openshift/cluster-kube-scheduler-operator/commit/e0d271fceb3727138177e017f860a8ff79738bb3) `sha256:2cc49a5be6e542263034b3ebb60fd66c78c4641b96b9147cefe5e75776bd9621`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [ec1db564](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/ec1db56482efc9dced72b44a1c2b6817dbfffe91) `sha256:027140d16fb186b9445980cfd61f0108f195612e48d5af4497e316154402d9c8`
* [cluster-network-operator](https://github.com/openshift/cluster-network-operator) git [3b484353](https://github.com/openshift/cluster-network-operator/commit/3b484353063fe95156373f7cf51c5ba13f501256) `sha256:421c681073d8f5b694c10fe4b3713fa80e9d9bcf9f9e6a9e3fb5a3356fc9c3f6`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [228ec940](https://github.com/openshift/cluster-olm-operator/commit/228ec940921e4443b2724ef512c0d211d4a38ba7) `sha256:528c1a23e9664e17c13d32dd2014a6feccd26eaf279fcdc74886a53304202dae`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [d56fffed](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/d56fffed57ce229b53b4cb1eba63311360051806) `sha256:514aae770f99daa2739f77ff8ad556e8ce911aaf5ee4dc3deb3bde670ed2a96c`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [8da2f1fc](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/8da2f1fcb1e76e8b1b97b16ca7bbfa7116287eb8) `sha256:0147a66b1262759397191b379012329befc3c0c07817bb78ff92eb5ecb5b46e0`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [469bbf21](https://github.com/openshift/cluster-policy-controller/commit/469bbf211d35eee0df4422bda7e9e600b080f0f2) `sha256:ee28b9c299039374a7b1de012a9e9f1300004064da6d9a269f4019cb70587dc3`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [ba80c7ef](https://github.com/openshift/cluster-samples-operator/commit/ba80c7efd89885b08dc890eb5aefb994ee1e7ab9) `sha256:6325bd5091c3edb50f8ced6812c5197b4af554bff8dd9a40b47b58d6e650266f`
* [cluster-update-console-plugin](https://github.com/openshift/cluster-update-console-plugin) git [8e684dc0](https://github.com/openshift/cluster-update-console-plugin/commit/8e684dc03729798295e1b2b059826a5a5abe76c8) `sha256:4f9e67c34d707aa23125a0e424759d008bfa9d4a0d54ceee2b7ba59576f63524`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [9607604d](https://github.com/openshift/cluster-update-keys/commit/9607604d35acee234051bd0da8a14321b4edd38e) `sha256:d07b604e92fbb1012a2e2506daa70efccb035137c22abb92e05c228529ec3b45`
* [cluster-version-operator](https://github.com/openshift/cluster-version-operator) git [219aba7d](https://github.com/openshift/cluster-version-operator/commit/219aba7debd16c83bb6ccdccf156af921ce54dfe) `sha256:ffa04b678a283c2d5358ea04ca3be9854a6a499e6709b4a93dd59a5f0386415e`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [ce80869a](https://github.com/openshift/configmap-reload/commit/ce80869a83b55ebbdc21a5550ec5747645203bd2) `sha256:0a90fab11e6dec906b2f49628c1236a17704e05cac21e25037a24dedcf1d98e6`
* [console-operator](https://github.com/openshift/console-operator) git [63049512](https://github.com/openshift/console-operator/commit/630495120bc5ddc9e05cd6defc2102690ced6301) `sha256:fe68a3d91c5f18ade7d376b055cde284f37af37095e50ceec1e03f437743369e`
* [coredns](https://github.com/openshift/coredns) git [37aaba89](https://github.com/openshift/coredns/commit/37aaba896e97f4b9a091aab6d36f2213b8854474) `sha256:fc0d273eba4d7bd6d3a013c06950daf625fcff0f95c1b36d2389296557e6e120`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [aa9a8100](https://github.com/openshift/cloud-provider-openstack/commit/aa9a8100e87ff13abf4dd6343c84c9f4948debef) `sha256:72645a899f4ecb97372580d42a1b12442050b9f7af35edc00fbf724a5386c1de`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [beb9567b](https://github.com/openshift/csi-driver-nfs/commit/beb9567b4ef15656a88c1c71e0b08e7bf2e96aaa) `sha256:a35728efcd497a27ffc1fdcb563d6b8363558f62163385b981c4ba7502c6a03b`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [3fd668b3](https://github.com/openshift/csi-external-attacher/commit/3fd668b3f07dd382e5c7b6239d50f7988f652e64) `sha256:085878144be4ecc5e23fdbb1a33067d260d724d64a1e842c1855c68dd439f766`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [7ff338c9](https://github.com/openshift/csi-external-provisioner/commit/7ff338c9d1296f0e5d4d8080a76bb191c8f3be30) `sha256:0272bbaec5ca60da38b01dac249462df85b753c2a715e5be5b8b6ef7b0a0e5d0`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [14aa7028](https://github.com/openshift/csi-external-resizer/commit/14aa7028f485e95c800bb7ffbf9b66a2bf75ceaf) `sha256:84153202c56c65d67af7ad1d822fa35cde7cef75f08b875f820f1afb118045ec`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [b929f296](https://github.com/openshift/csi-external-snapshot-metadata/commit/b929f29695d4a1ab21a70868f681d463a673380f) `sha256:50e68ed3a4990830aed4290148d4195a512851fd44c3192c7deef3d9eb5c9e55`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [a019d1a9](https://github.com/openshift/csi-external-snapshotter/commit/a019d1a9d9e1d26ffd0b2e0d911733180fa608b2) `sha256:bfae208483c4aa7975d79fbee0148a82d805da08f6680d23844c0e8b74475089`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [cab57d51](https://github.com/openshift/csi-livenessprobe/commit/cab57d511106916bba6953977106f06b2fec01fd) `sha256:365d163ab8ff2414cccb8103411dcdf680eae256b0493e3eeb3c71dd74b5a29d`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [5766960d](https://github.com/openshift/csi-node-driver-registrar/commit/5766960d82ffb9ef84d15e903ae57d0a6781ef11) `sha256:a02395ede6c9800ab85928758359b3cddb5cf9606d80aeda4f1357912da67856`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [a019d1a9](https://github.com/openshift/csi-external-snapshotter/commit/a019d1a9d9e1d26ffd0b2e0d911733180fa608b2) `sha256:2d489ac21bbb57ef75fc9fbcfb92edd98e9283cd792d8f6d986e0ffcdc90610d`
* [deployer](https://github.com/openshift/oc) git [4b0a124d](https://github.com/openshift/oc/commit/4b0a124d300cef187037bda6f1b04caa69ab8b62) `sha256:6be4a5b60065a3c56b4b5335d76b84e76c76966781200d6b8883be2c5b9456c9`
* [docker-builder](https://github.com/openshift/builder) git [1e532435](https://github.com/openshift/builder/commit/1e53243554dead3d84297e341651c5eb83eb37a4) `sha256:9baee87e2176b73c758ccf6ad8599e4aafeab424e98022dbf987caf81a24ef89`
* [docker-registry](https://github.com/openshift/image-registry) git [9436b227](https://github.com/openshift/image-registry/commit/9436b2271fc9b687bda31e335bacc4031dcba80a) `sha256:75818855672454abcf1dadef6dc101eda45bd2bb2ed58e214b7152d2cf8e4c3d`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [b63b175a](https://github.com/openshift/driver-toolkit/commit/b63b175a79b9fe0c29f6ed63df3c2d7862ba408a) `sha256:c61ba831a895a835005581fabfe98d72711c50d953e4151a6f0f0e31340bc912`
* [driver-toolkit-10](https://github.com/openshift/driver-toolkit) git [b63b175a](https://github.com/openshift/driver-toolkit/commit/b63b175a79b9fe0c29f6ed63df3c2d7862ba408a) `sha256:447c302ad9f9e41a63daf0f457ee4a31a52914c6ef43b9486b044cad29dc7781`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [bc639044](https://github.com/openshift/egress-router-cni/commit/bc639044a3aee89f1f9547ad0539481b8d808516) `sha256:e38ef8df4245fdcc31b3efebc5d4ef3ca1e33abdc1bd4130016a0dfd4cb47ae6`
* [etcd](https://github.com/openshift/etcd) git [609b11ed](https://github.com/openshift/etcd/commit/609b11ed8fc404fb95572d7c87e3243a1206cdb7) `sha256:51393e223d01b9f88db45b440b4e2665fc229135e63d85692cde6f155303b554`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [51c32646](https://github.com/openshift/cloud-provider-gcp/commit/51c326465b3160124b8097953b42e44f1056da5a) `sha256:edcebe697a75c42971843092c48f736abd64fb7edf6899f090b52e7ab9cb3657`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [dbcbfe70](https://github.com/openshift/cluster-api-provider-gcp/commit/dbcbfe70efa75f192309f2d0f8daae2c6a441e90) `sha256:9c1eb0f1d252d38cd90514cc397d2dbfd17677279f326ae637d20fe987735d66`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [91033fc5](https://github.com/openshift/machine-api-provider-gcp/commit/91033fc5b42f58acdad7be8c89a0012f5f2c9b5b) `sha256:ed7145de81b43a115a68fca58849de61430db79e1e50fedc1c189bc22c298b5f`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [049c0b96](https://github.com/openshift/gcp-pd-csi-driver/commit/049c0b96742c40fdd4384920afe17cefa5fa3d27) `sha256:00c00a41da5eb94308660802ee63c7ae0bc22a891e8f77cc23a04f39222c5628`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [4501ff2f](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/4501ff2f53576c31df0511b69444e65e1eeba745) `sha256:a93491815cc72a61f8ddbd896cdab0c2b2193fa7da8dfe3d0d017eae546c2e13`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [3604a6c4](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/3604a6c42f3002800e5cad2a012aacaf9b5f7405) `sha256:3406b6ea040c24f5cc3d66b47a1d26b0fd3bd31a340a8d61bafdd085e96021aa`
* [insights-operator](https://github.com/openshift/insights-operator) git [2f616dc4](https://github.com/openshift/insights-operator/commit/2f616dc436db2e35d70c9a049be98c185f684243) `sha256:bd808a8cc5fd0cd1b20c833ae51335864ea197d21b991ab5488cb7cf3e5e255f`
* [insights-runtime-exporter](https://github.com/openshift/insights-runtime-extractor) git [7c9aa149](https://github.com/openshift/insights-runtime-extractor/commit/7c9aa14915e639edd20bc0869747487e2e73fe51) `sha256:474ec7e3cd58ac3b764047ccb486b1803009b1b7a8f0b5a84a2e8ec220b4be3b`
* [insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor) git [7c9aa149](https://github.com/openshift/insights-runtime-extractor/commit/7c9aa14915e639edd20bc0869747487e2e73fe51) `sha256:5a73ac253be7047b73fd4e7fb594184eaca6949c80100513bd06f4f1c65b9249`
* [karpenter-operator](https://github.com/openshift/karpenter-operator) git [56725605](https://github.com/openshift/karpenter-operator/commit/56725605325c54693ebed5b0983d5d0478a87fca) `sha256:5e20060a59318a0e5c5bd5a78ad817209cdf6d6be06753e97a765cf9a69f1bd3`
* [keepalived-ipfailover](https://github.com/openshift/images) git [3f1cf083](https://github.com/openshift/images/commit/3f1cf0830f196a6755b8baf179fc0401188251c4) `sha256:da0dbd6ac6482714fc54110281b128c47e1945464c89dd8b3998e49c607d8f83`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [3d2e9cd0](https://github.com/openshift/kubernetes-metrics-server/commit/3d2e9cd0469d636e32dc0e4d4b6f65957eb27d71) `sha256:ecb93e8a66926b18e62da5383802d17b747b8f9f53a0d76d82641bf8743c27f9`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [43c114bc](https://github.com/openshift/kube-rbac-proxy/commit/43c114bc124f59e2fc3223dea8e0a8f4cdeed18d) `sha256:0d8279fde0326d9978d0bf4d19aa99bd33d9bae89c97667d3aed502018770993`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [019ecc7d](https://github.com/openshift/kube-state-metrics/commit/019ecc7d533333dfd3bf8893e78cd7ec6e282f01) `sha256:1bf4e40f81a99a32cbcb8f37db75666e814f7f868c4971eba14ede89c517a0be`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [05d6b0c4](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/05d6b0c4537954b2b115c793646fb598756bb303) `sha256:6307a2dfceaebcfdabf75a7160b5c12a55a79068e94047cedc486c0b9fecc12a`
* [kube-vip](https://github.com/openshift/kube-vip) git [1bb8a96e](https://github.com/openshift/kube-vip/commit/1bb8a96eb31eaacc7cb49a9e8e397b66e62d87e9) `sha256:da67a9909d457effaeb9fd441a1b29475daeb633835d93b5c5d20c77e63a35e7`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [5eb884ab](https://github.com/openshift/cloud-provider-kubevirt/commit/5eb884abcd2ff17ae8d7b2691ca12494597c08a6) `sha256:78d5cf13dd002c9042cf206d493062ad8c1d2cd7fed465890d0c34cfe7f38555`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [00dd0030](https://github.com/openshift/kubevirt-csi-driver/commit/00dd0030fdfcdb6937ebefd8fb92363a8f78ef73) `sha256:c5c01133ed5a10e5ec79665324803f6a65cffea69ef7b3b420745cdef7cc0a70`
* [machine-api-operator](https://github.com/openshift/machine-api-operator) git [15ce1906](https://github.com/openshift/machine-api-operator/commit/15ce1906da17ac8cf0f0d58b5f1babcc503ad8c6) `sha256:9ba541263469f037c04d8a8e9505f345bd62faa46af51adf75722173f8e62108`
* [metallb-frr](https://github.com/openshift/frr) git [54a6ea48](https://github.com/openshift/frr/commit/54a6ea48902d81460536b81ea6bdceb89c12e622) `sha256:32d6c7c5a4bdebbc8d43d7405a68af61468263276829b78c4242a9fbc9b02f24`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [e8610c3c](https://github.com/openshift/monitoring-plugin/commit/e8610c3c8b35ec0758523c21a2e60aa8c7e59914) `sha256:109ccc39a6a4e995bae798b1053f086dc399d787d93486def84ae299ab3fa559`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [c0bdec9c](https://github.com/openshift/multus-admission-controller/commit/c0bdec9ce6a1a69985fdba5481c47fb34461eb6c) `sha256:f4d5ebe29b23864f5ce6290be23885e02499dc16c57f741086bace469127d69a`
* [multus-cni](https://github.com/openshift/multus-cni) git [8f597f4b](https://github.com/openshift/multus-cni/commit/8f597f4b90dffe1d1cb9aee558fe53a0046c9e35) `sha256:7ece208c00d4bc10181ffa053312ea83bbc7ff9fd007f4610ad842ef5f40740c`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [8f597f4b](https://github.com/openshift/multus-cni/commit/8f597f4b90dffe1d1cb9aee558fe53a0046c9e35) `sha256:5a0329ebb0e9e6261d89e71b7a467798fc251e32598bde888c8afd69f6633886`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [bfbac502](https://github.com/openshift/multus-networkpolicy/commit/bfbac5025c056c4bf53aeeef50c4bcf466f5eb11) `sha256:cb769c5f90c4038d491d34c6a7a8b5720fa7cc0caed5a3363787ad77c794e83d`
* [must-gather](https://github.com/openshift/must-gather) git [f4c72a69](https://github.com/openshift/must-gather/commit/f4c72a69ebedddead25591da3a115bc4b0bc49ca) `sha256:55a5ddf88e6d14edccaf324646504b107e11243af6bcd64a29804cb1710ab91e`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [2c395f56](https://github.com/openshift/bond-cni/commit/2c395f566f259f1a1726409e2472029fa52918c9) `sha256:f368378b96eeceee54cc8b48064f6cb4fdc46edc27d9d3bc465d49cb668e1812`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [20e6b987](https://github.com/openshift/network-metrics-daemon/commit/20e6b987ea44e7cf0805662e8fec44d625b6f278) `sha256:3de8f6a1ae3e0fe9c7c5ec1492c154361297e81a416d87ec6011a2e5c259df36`
* [network-tools](https://github.com/openshift/network-tools) git [0b53ac3d](https://github.com/openshift/network-tools/commit/0b53ac3dccf59cd169555bf18c207122374bf003) `sha256:84c1f37033f52e10c3f333985174824dbc95b247cdeae282ff2e3407f002bda8`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [a59e07d7](https://github.com/openshift/oauth-apiserver/commit/a59e07d789b5a2531e94053cfe7c53edde90e931) `sha256:7caab0b22713f3cbb582e57f105bec3c3109c29ab226b59c705b3eb12d5716ae`
* [olm-catalogd](https://github.com/openshift/operator-framework-operator-controller) git [49582d3d](https://github.com/openshift/operator-framework-operator-controller/commit/49582d3d95fd5e5c8e2d232bf0d5568860514e5d) `sha256:f9381e23ec1332c3403c9a78799846c378b10f117c6c7f2ba8d93591b17c281d`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [49582d3d](https://github.com/openshift/operator-framework-operator-controller/commit/49582d3d95fd5e5c8e2d232bf0d5568860514e5d) `sha256:7b8f0134c7e88402d219cde9b15b8d8a63ceac26edb1887e5650fb1160c56677`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [ab031522](https://github.com/openshift/openshift-apiserver/commit/ab0315228cde432c8cd62df012b791a66a72c7b3) `sha256:a3f862b08831af16018cb84f607df2c952ceb8edbed3d475f58c4c88f1ed8405`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [726a0562](https://github.com/openshift/openshift-controller-manager/commit/726a0562818b68faccfa130ae7ea17ff42915418) `sha256:bc1352516eba016ffa75518a96eb1cceffdfb06c73b2627548ef35d63ff1ab8b`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [3b4ea3e7](https://github.com/openshift/openshift-state-metrics/commit/3b4ea3e753d97fea66e0f52c8282a711358b4ff7) `sha256:066da97a1c17b14841bc9646227ccb5ece81e82ab16495c17fccf5d4264439f1`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [aa9a8100](https://github.com/openshift/cloud-provider-openstack/commit/aa9a8100e87ff13abf4dd6343c84c9f4948debef) `sha256:a164e9f5f9765e9ba4e4cd7ce1406008b224cdde934efca0c1f918dc4825d2e7`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [aa9a8100](https://github.com/openshift/cloud-provider-openstack/commit/aa9a8100e87ff13abf4dd6343c84c9f4948debef) `sha256:4e3109723403415278b5dba5bae1ff8b77f834cc6eff857bdc8a498d19c4e8c7`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [9f64446f](https://github.com/openshift/cluster-api-provider-openstack/commit/9f64446f441ff7bcebd123a0dc35d4156c309681) `sha256:36f5d3a8159804095c77c305c19f5b7499a8b8de6e5f37812b2d3786482570ac`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [6b30092b](https://github.com/openshift/machine-api-provider-openstack/commit/6b30092b0a1196b016f4300b79c895f0e7f2e9a8) `sha256:9f56e798fc3e9867c26b14f45c6fd6aeec26d2e83a3be311fec4065e64eeff42`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [58dbc048](https://github.com/openshift/openstack-resource-controller/commit/58dbc0482c144c21effee2476947889122a518eb) `sha256:3687bdb2bfcb55d53f369ba8ff599953c71e502a1ee920b4f78fc7155be4a566`
* [operator-framework-tools](https://github.com/openshift/operator-framework-olm) git [c3d56d20](https://github.com/openshift/operator-framework-olm/commit/c3d56d2021bbb8d57bc359fabded3b35b253f55e) `sha256:b091438cee31dc34620a33680603941d5f67bb826ef3ebeddabcb92596a54cdd`
* [operator-lifecycle-manager](https://github.com/openshift/operator-framework-olm) git [c3d56d20](https://github.com/openshift/operator-framework-olm/commit/c3d56d2021bbb8d57bc359fabded3b35b253f55e) `sha256:23e5de1f72c5213f7f82c90c518bf8a371b4f726b76000bd3fa83a26cd592e94`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [fa9e19b2](https://github.com/operator-framework/operator-marketplace/commit/fa9e19b2ae7ad8de20b345e3bd736923f5c516cc) `sha256:a7f39fc94b4ba2c131edea726486f44928ba07487d853f4ab20aa5da44c55799`
* [operator-registry](https://github.com/openshift/operator-framework-olm) git [c3d56d20](https://github.com/openshift/operator-framework-olm/commit/c3d56d2021bbb8d57bc359fabded3b35b253f55e) `sha256:4236e7950c300df5aef98ead88cfe12eb37d78fd0187eda1fbc810db42c370bc`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [5911994c](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/5911994c5d70906e0f0972411176392ada9942d1) `sha256:daa538ba9e9684d3ded06310d2c0925f8897049463eaba6fb1d5a07babd94efb`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [f90431bf](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/f90431bfe8ca93850450b2b24fae152d2385ca08) `sha256:d592886820d1c6a7302985224c0e06b513515db012e7e6fdcc36dd092f22b6d9`
* [prometheus](https://github.com/openshift/prometheus) git [01d83356](https://github.com/openshift/prometheus/commit/01d8335673aa6f88f5742ef510e133efee88a7bf) `sha256:a1495ad9f83831a559c94d0a0e96b8a232fc3ec40b0cea05fc2e2744ae483b06`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [89bdff8b](https://github.com/openshift/prometheus-alertmanager/commit/89bdff8b5b885e4a3d0f7d0327fe39221f3d2dce) `sha256:340857f3440f19b696cccba2669cf97866e66ba03e40abbe424b4c330854a678`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [67895c7c](https://github.com/openshift/prometheus-operator/commit/67895c7c968f42e97efec58f4140fffae4832028) `sha256:167e412f951312b1caceb76f240be933489615d0baf66a07224a44a8639812b8`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [67895c7c](https://github.com/openshift/prometheus-operator/commit/67895c7c968f42e97efec58f4140fffae4832028) `sha256:3d6fe40586d32f0b360a31e7658f8c01f3f61b095fe5bd96dd5df639161a4772`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [67895c7c](https://github.com/openshift/prometheus-operator/commit/67895c7c968f42e97efec58f4140fffae4832028) `sha256:e723434405a5aeddb6f319ccdc27b2c17167d1cd1d744dafb1d02d1c92079f7b`
* [rhel-coreos](https://github.com/openshift/os) git [7324ccd3](https://github.com/openshift/os/commit/7324ccd30e5b2b3146639cb610bfe92c743c91a1) `sha256:7ecbff8e1487903c419f695ce8d5bf9c3d27d45bfb7218302202ec8c9b9b8639`
* [rhel-coreos-10](https://github.com/openshift/os) git [7324ccd3](https://github.com/openshift/os/commit/7324ccd30e5b2b3146639cb610bfe92c743c91a1) `sha256:2ab169015c5b183d5e22085a37f05a6d769478ad645920e8e546a694abf05a1d`
* [rhel-coreos-10-extensions](https://github.com/openshift/os) git [7324ccd3](https://github.com/openshift/os/commit/7324ccd30e5b2b3146639cb610bfe92c743c91a1) `sha256:f336cf4508bf401f87e1615926449bbda4ab53a9724e2d5f0e830f9e626f7084`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [7324ccd3](https://github.com/openshift/os/commit/7324ccd30e5b2b3146639cb610bfe92c743c91a1) `sha256:cede38f77382600b694d479af4935917d210f7b54ad08b915ef1744959e693ea`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [59697cf7](https://github.com/openshift/route-controller-manager/commit/59697cf7af4517dd44e28179a57f7f35b6ea0e22) `sha256:4ad2415ea59b992fb40205342c8eba90d00c57eb739ee6185f86a7c0668151f2`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [ed872ba1](https://github.com/openshift/service-ca-operator/commit/ed872ba14b615ca5726ae90e987268877a0b0b20) `sha256:d3ada37e3719a5e4256f2d2f64fc1dcc639fefa3f3039ee75dee2c95bdd50676`
* [telemeter](https://github.com/openshift/telemeter) git [22ba1701](https://github.com/openshift/telemeter/commit/22ba1701333f3fd26490cc15b89ddf21df3f67f6) `sha256:c77ca92ed83f1e38272617c835c02fbd99513ca91cc81c05383b9ba86b77b27f`
* [thanos](https://github.com/openshift/thanos) git [2a09eb84](https://github.com/openshift/thanos/commit/2a09eb84b92ccd71d5f1f11e0dda6d5aa9624e19) `sha256:be9c8cb26a2a20abc1f4dca6fd375462f6355b54a357f05727d4629303851278`
* [tools](https://github.com/openshift/oc) git [4b0a124d](https://github.com/openshift/oc/commit/4b0a124d300cef187037bda6f1b04caa69ab8b62) `sha256:4b3824cd7c25cbc1fc08836e6862192c7d3c581d3b88212dd12ba2862dba2d2c`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/9d3ba858ccb93831d99281659a3578e13bab9464)

* [OCPBUGS-126900](https://issues.redhat.com/browse/OCPBUGS-126900): Allow agent-installer invoker to have a suffix [#10978](https://github.com/openshift/assisted-service/pull/10978)
* [Full changelog](https://github.com/openshift/assisted-service/compare/8177722b388c34c334961352e9ab471ed4f8e95c...9d3ba858ccb93831d99281659a3578e13bab9464)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/c322faaa90c54af873bcf2102897c08d50c7ecdd)

* [OCPBUGS-126900](https://issues.redhat.com/browse/OCPBUGS-126900): Allow agent-installer invoker to have a suffix [#2347](https://github.com/openshift/assisted-installer/pull/2347)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/fa7eb52b083a161b122e1c543d487edb3de0955c...c322faaa90c54af873bcf2102897c08d50c7ecdd)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/449d4e9e9d2f08330d2d31ad80517caf990652c3)

* [OCPBUGS-127048](https://issues.redhat.com/browse/OCPBUGS-127048): Quote variable expansion in `skopeo inspect` invocation [#354](https://github.com/openshift/agent-installer-utils/pull/354)
* [OCPBUGS-127042](https://issues.redhat.com/browse/OCPBUGS-127042): Refresh rendezvous IP selection list [#353](https://github.com/openshift/agent-installer-utils/pull/353)
* [OCPBUGS-127008](https://issues.redhat.com/browse/OCPBUGS-127008): Fix agent TUI timeout [#350](https://github.com/openshift/agent-installer-utils/pull/350)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/33aa46920190a1c587599dfda77d9c1e3899e255...449d4e9e9d2f08330d2d31ad80517caf990652c3)


### [aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, azure-workload-identity-webhook, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibmcloud-machine-controllers, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, kube-proxy, machine-image-customization-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/2a6104ec563aeaa77c97352f4d28580eea7918d2)

* NOJIRA: add explicit merge commit message [#2792](https://github.com/openshift/kubernetes/pull/2792)
* [OCPBUGS-127122](https://issues.redhat.com/browse/OCPBUGS-127122): UPSTREAM: &lt;carry&gt;: Use FROM scratch for RHEL pause image [#2786](https://github.com/openshift/kubernetes/pull/2786)
* NO-JIRA: Rebase release-5.0 to Kubernetes v1.36.4 [#2776](https://github.com/openshift/kubernetes/pull/2776)
* [Full changelog](https://github.com/openshift/kubernetes/compare/b376ee7b841bed5a51cb9520b37d87931c48a821...2a6104ec563aeaa77c97352f4d28580eea7918d2)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/e43280830436d7edddb488ce43a5709ef9396291)

* [OCPBUGS-126592](https://issues.redhat.com/browse/OCPBUGS-126592): Update RHCOS-release-5.0 bootimage metadata to 9.8.20260921-0 / 10.2.20260922-0 [#10923](https://github.com/openshift/installer/pull/10923)
* [OCPBUGS-126900](https://issues.redhat.com/browse/OCPBUGS-126900): use different INSTALL_INVOKER for unconfigured ignition [#10900](https://github.com/openshift/installer/pull/10900)
* [Full changelog](https://github.com/openshift/installer/compare/2060c6b26391f7dacd6fe19920b8b267f5f8f8b9...e43280830436d7edddb488ce43a5709ef9396291)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/baead0597929c02bc1ce8e8f5a275c7430c5cd26)

* [OCPBUGS-123652](https://issues.redhat.com/browse/OCPBUGS-123652): Fix race that can provision multiple hosts [#280](https://github.com/openshift/cluster-api-provider-baremetal/pull/280)
* [OCPBUGS-104256](https://issues.redhat.com/browse/OCPBUGS-104256): Bump golang.org/x/net to v0.58.0 to address CVE-2026-33814 [#263](https://github.com/openshift/cluster-api-provider-baremetal/pull/263)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/f2b0db1919fff1344bc68948894c6775c0bf24a3...baead0597929c02bc1ce8e8f5a275c7430c5cd26)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/f269e4bf4b133be83153f8711a991ac71e7bafc8)

* [OCPBUGS-127499](https://issues.redhat.com/browse/OCPBUGS-127499): Add high contrast support to oauth templates [#1013](https://github.com/openshift/cluster-authentication-operator/pull/1013)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/848c4c96d8e322b7987e44eecc4ad30e64ce5ed4...f269e4bf4b133be83153f8711a991ac71e7bafc8)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/20369c92cc64521d6937e926d85791fac5dd505a)

* [OCPBUGS-122243](https://issues.redhat.com/browse/OCPBUGS-122243): Make HostPath VolumeMounts ReadOnly for image customization container [#659](https://github.com/openshift/cluster-baremetal-operator/pull/659)
* [OCPBUGS-123600](https://issues.redhat.com/browse/OCPBUGS-123600): Add attach_non_bootable_iso OTE test [#665](https://github.com/openshift/cluster-baremetal-operator/pull/665)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/d7957265fdafbbb93bb2a0d4723fc9719da1378d...20369c92cc64521d6937e926d85791fac5dd505a)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/070008546d092b0f03b1d66dc69b71a96de17bd7)

* [OCPBUGS-128250](https://issues.redhat.com/browse/OCPBUGS-128250): UPSTREAM: &lt;carry&gt;: remove redundant GitHub summary verification [#314](https://github.com/openshift/cluster-api/pull/314)
* [Full changelog](https://github.com/openshift/cluster-api/compare/303d9786a5017d299b6e7fc702bb92f5cb4550cf...070008546d092b0f03b1d66dc69b71a96de17bd7)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/ae4883f8cb90b67e40eb08aaf52794cf07f26b8a)

* [OCPBUGS-128290](https://issues.redhat.com/browse/OCPBUGS-128290): Pass original TLSProfileSpec to security profile watcher [#679](https://github.com/openshift/cluster-capi-operator/pull/679)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/5afa8634c5bd26c8ed12dbecb0c31e79ed2fb39c...ae4883f8cb90b67e40eb08aaf52794cf07f26b8a)


### [cluster-config-api](https://github.com/openshift/api/tree/c1bf12f5d04823f92c88af6c9835890de13b3474)

* [OCPBUGS-123648](https://issues.redhat.com/browse/OCPBUGS-123648): [5.0] register DRADeviceTaintRules in all feature sets [#3040](https://github.com/openshift/api/pull/3040)
* [Full changelog](https://github.com/openshift/api/compare/31af9f93e31ecd483504b3302d78f67c5a077a9e...c1bf12f5d04823f92c88af6c9835890de13b3474)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/6f04db0c29856f1b0e93dbfd3303e5784c57175e)

* [OCPBUGS-127274](https://issues.redhat.com/browse/OCPBUGS-127274): fix(tnf): set read-only root filesystems [#1716](https://github.com/openshift/cluster-etcd-operator/pull/1716)
* [OCPBUGS-127061](https://issues.redhat.com/browse/OCPBUGS-127061): allow TLS 1.3 profiles without ciphers [#1714](https://github.com/openshift/cluster-etcd-operator/pull/1714)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/73835ffac883949ae5fcea3fd9eb0f4076ae711a...6f04db0c29856f1b0e93dbfd3303e5784c57175e)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/4ef55ea002a406a2e9193594ef583a24ddb4ff3b)

* [OCPBUGS-126741](https://issues.redhat.com/browse/OCPBUGS-126741): Bump to OSSM 3.4.2 and Istio v1.30.4 [#1600](https://github.com/openshift/cluster-ingress-operator/pull/1600)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/fe8a2bcf6342fab7aa19c47b4397a7d226962136...4ef55ea002a406a2e9193594ef583a24ddb4ff3b)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/93c05fa0f59c67fdb35cd39dd55bdf8cd1f842a4)

* [OCPBUGS-128455](https://issues.redhat.com/browse/OCPBUGS-128455): Revert EgressIP validation backport [#338](https://github.com/openshift/cluster-machine-approver/pull/338)
* [OCPBUGS-127107](https://issues.redhat.com/browse/OCPBUGS-127107): fix: retry serving CSRs while Machine addresses populate [#322](https://github.com/openshift/cluster-machine-approver/pull/322)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/11c03d0952f281ca9cfb62e528e5a0e24ae644ab...93c05fa0f59c67fdb35cd39dd55bdf8cd1f842a4)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/6c05ec734024129de0f58caacc5c4ef74d8ea385)

* [OCPBUGS-127465](https://issues.redhat.com/browse/OCPBUGS-127465): fix(e2e): use Job with backoffLimit for TestDocExamples [#3104](https://github.com/openshift/cluster-monitoring-operator/pull/3104)
* [OCPBUGS-127422](https://issues.redhat.com/browse/OCPBUGS-127422): Fix flaky TestTelemetryReport/rate_issues [#3098](https://github.com/openshift/cluster-monitoring-operator/pull/3098)
* [OCPBUGS-126958](https://issues.redhat.com/browse/OCPBUGS-126958): restore node-exporter textfile metrics with read-only rootfs [#3096](https://github.com/openshift/cluster-monitoring-operator/pull/3096)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/efeeabf10a9c46f7a82086d2c04c9fc6d93a2b22...6c05ec734024129de0f58caacc5c4ef74d8ea385)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/f6e3f382e8c2282f48722431eed38cdbc44d8e9f)

* [OCPBUGS-123795](https://issues.redhat.com/browse/OCPBUGS-123795): apis: add missing fields to apis v1 [#1636](https://github.com/openshift/cluster-node-tuning-operator/pull/1636)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/ea084dcf2a92e08a6686e89da49738383bbefd39...f6e3f382e8c2282f48722431eed38cdbc44d8e9f)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/1f558eec1a9848958510a1dd8d3c84a711840ca8)

* [OCPBUGS-128248](https://issues.redhat.com/browse/OCPBUGS-128248): Use KCS link in the un-upgradeable message [#745](https://github.com/openshift/cluster-storage-operator/pull/745)
* [OCPBUGS-123152](https://issues.redhat.com/browse/OCPBUGS-123152): Backport gcp pd hypershift release 5.0 [#743](https://github.com/openshift/cluster-storage-operator/pull/743)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/b2ee363241ad0425efd56badb6046884cadda97d...1f558eec1a9848958510a1dd8d3c84a711840ca8)


### [console](https://github.com/openshift/console/tree/d63818a73d0df1db4608a518d959da7068324730)

* [OCPBUGS-128463](https://issues.redhat.com/browse/OCPBUGS-128463): provide PatternFly dynamic modules without Console consuming them [#17325](https://github.com/openshift/console/pull/17325)
* [OCPBUGS-127187](https://issues.redhat.com/browse/OCPBUGS-127187): Add CSP violation detection to Playwright [#17218](https://github.com/openshift/console/pull/17218)
* [OCPBUGS-127019](https://issues.redhat.com/browse/OCPBUGS-127019): restore some old test-prow-e2e scenarios [#17198](https://github.com/openshift/console/pull/17198)
* [OCPBUGS-127051](https://issues.redhat.com/browse/OCPBUGS-127051): Post qa-verify evidence via gh's native --attach instead of base64 [#17200](https://github.com/openshift/console/pull/17200)
* [OCPBUGS-120722](https://issues.redhat.com/browse/OCPBUGS-120722): Helm backend test flake: parallel packages race on global pkill chartmuseum [#17144](https://github.com/openshift/console/pull/17144)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/9b11daac72c809bc734a3a6ede9fa6d087ac01d2...d63818a73d0df1db4608a518d959da7068324730)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/38989a55d844f751631dd23d9b86fde5a5195acc)

* NO-JIRA: Fix Go builders in CI [#250](https://github.com/openshift/containernetworking-plugins/pull/250)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/d253ee09d629b8172ffc9c3e4b571320fc63ee34...38989a55d844f751631dd23d9b86fde5a5195acc)


### [csi-driver-manila-operator, gcp-pd-csi-driver-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/f1931a0b51ffd400af6d8b800cee27692957c1e2)

* : [release-5.0] OCPBUGS-128035: Enable pod-delete-after-umount CSI suite for driver OCP manifests [#628](https://github.com/openshift/csi-operator/pull/628)
* [Full changelog](https://github.com/openshift/csi-operator/compare/57a5d72c6758cccafb9f14b1c28d1b2ea4510364...f1931a0b51ffd400af6d8b800cee27692957c1e2)


### [haproxy-router, haproxy-router-haproxy28, haproxy-router-haproxy32](https://github.com/openshift/router/tree/a39a742e03e7be863c92c4b820025c6e0f78a7eb)

* [OCPBUGS-123650](https://issues.redhat.com/browse/OCPBUGS-123650): Lock DeleteFunc to stop SARCompleted overwriting rejection [#846](https://github.com/openshift/router/pull/846)
* [Full changelog](https://github.com/openshift/router/compare/3381229146657d2e6bd94115dda0885f25cb3bed...a39a742e03e7be863c92c4b820025c6e0f78a7eb)


### [hypershift](https://github.com/openshift/hypershift/tree/3e9f6e8f3eefef70ef3404dabf0ca10ee866fb42)

* [OCPBUGS-127000](https://issues.redhat.com/browse/OCPBUGS-127000): Updating ose-hypershift-container image to be consistent with ART for 5.0 [#9713](https://github.com/openshift/hypershift/pull/9713)
* [OCPBUGS-126441](https://issues.redhat.com/browse/OCPBUGS-126441): openstack: Start populating cacert in clouds.yaml [#9655](https://github.com/openshift/hypershift/pull/9655)
* [OCPBUGS-123155](https://issues.redhat.com/browse/OCPBUGS-123155): complete GCP PD wiring in HyperShift [#9598](https://github.com/openshift/hypershift/pull/9598)
* [ACM-41684](https://issues.redhat.com/browse/ACM-41684): Switch hypershift-operator runtime to PQC base image [#9452](https://github.com/openshift/hypershift/pull/9452)
* [CNTRLPLANE-4159](https://issues.redhat.com/browse/CNTRLPLANE-4159): Maintain ingress serving cert for HostedCluster ingress [#9604](https://github.com/openshift/hypershift/pull/9604)
* [OCPBUGS-122276](https://issues.redhat.com/browse/OCPBUGS-122276): fix(hcco): run kas-connection-checker as non-root [#9694](https://github.com/openshift/hypershift/pull/9694)
* [Full changelog](https://github.com/openshift/hypershift/compare/f17305a432f02f3352c052c717e98db730a6edb4...3e9f6e8f3eefef70ef3404dabf0ca10ee866fb42)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/cafc37a760319b235d5301e3790f83e2de9d78f7)

* [OCPBUGS-127447](https://issues.redhat.com/browse/OCPBUGS-127447): Nodes created with 4.13 base images cannot join the cluster [#6580](https://github.com/openshift/machine-config-operator/pull/6580)
* [OCPBUGS-119104](https://issues.redhat.com/browse/OCPBUGS-119104): drop GCD health-check ranges in openshift-gcp-routes [#6555](https://github.com/openshift/machine-config-operator/pull/6555)
* [OCPBUGS-123664](https://issues.redhat.com/browse/OCPBUGS-123664): Correctly handle MC deletion in image mode when no new build is required [#6546](https://github.com/openshift/machine-config-operator/pull/6546)
* [OCPBUGS-122277](https://issues.redhat.com/browse/OCPBUGS-122277): Fix IsBootImageUpdateSupported to include vSphere and Azure platforms [#6530](https://github.com/openshift/machine-config-operator/pull/6530)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/ea7d971717f7c6fac339f5cf4ffbbccb23234edc...cafc37a760319b235d5301e3790f83e2de9d78f7)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/631d5def9be9903585e92dcde6a877362f12586b)

* [OCPBUGS-127128](https://issues.redhat.com/browse/OCPBUGS-127128): [release-5.0] Fix OKD/SCOS builds to use centos CoreOS streams [#119](https://github.com/openshift/machine-os-images/pull/119)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/bf618aac93c71a56e8249669c579f0a782742e2e...631d5def9be9903585e92dcde6a877362f12586b)


### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/0c111164a2c5c7f315aa58f257b7fa862e1c6b51)

* NO-JIRA: Update CI builders to Go 1.26 [#82](https://github.com/openshift/route-override-cni/pull/82)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/375ac966115fd03febd218a8331e8794560bd28e...0c111164a2c5c7f315aa58f257b7fa862e1c6b51)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/5853a398100c6b274165ef062906bdf91bba9e4b)

* NO-JIRA: Update CI builders to Go 1.26 [#436](https://github.com/openshift/whereabouts-cni/pull/436)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/4b0c2166726247e36a0125432609844045e48dc3...5853a398100c6b274165ef062906bdf91bba9e4b)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/4b73531b19eecb6a73dc2cb9e26606a06e1f8725)

* [OCPNETUI-146](https://issues.redhat.com/browse/OCPNETUI-146): Align shared modules with Console [#560](https://github.com/openshift/networking-console-plugin/pull/560)
* maintenance: Bump the npm group with 10 updates [#547](https://github.com/openshift/networking-console-plugin/pull/547)
* maintenance: Bump the npm group across 1 directory with 216 updates [#542](https://github.com/openshift/networking-console-plugin/pull/542)
* maintenance: Bump terser-webpack-plugin from 5.4.0 to 5.6.1 [#531](https://github.com/openshift/networking-console-plugin/pull/531)
* maintenance: Bump loader-runner from 4.3.1 to 4.3.2 [#530](https://github.com/openshift/networking-console-plugin/pull/530)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/4509d691e67664e9b3a911278fcbf38d54bb9cfc...4b73531b19eecb6a73dc2cb9e26606a06e1f8725)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/eb5344f3aba1752b569747c9c15210acff873666)

* [ACM-37203](https://issues.redhat.com/browse/ACM-37203): Add support for configurable TLS profiles [#380](https://github.com/openshift/oauth-proxy/pull/380)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/310d2f7b90762b407d6100eb3940bd5b2f348108...eb5344f3aba1752b569747c9c15210acff873666)


### [oauth-server](https://github.com/openshift/oauth-server/tree/e1a28882b283cf0be80628c7aaae83cb9020afd0)

* [OCPBUGS-127499](https://issues.redhat.com/browse/OCPBUGS-127499): Add high contrast support to oauth templates [#286](https://github.com/openshift/oauth-server/pull/286)
* [Full changelog](https://github.com/openshift/oauth-server/compare/6c2c889640ec53563021d0c0f09c4388cdcdb806...e1a28882b283cf0be80628c7aaae83cb9020afd0)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/1d2affb98c6ead7ef77bed3b0e169145e7f9d6cb)

* [OCPBUGS-122282](https://issues.redhat.com/browse/OCPBUGS-122282): egressip: set IFA_PROTO on EgressIP addresses to prevent nmstate persistence [#3437](https://github.com/openshift/ovn-kubernetes/pull/3437)
* [OCPBUGS-127013](https://issues.redhat.com/browse/OCPBUGS-127013): [release-5.0] e2e: exclude machine network subnets from UDN/BGP allocators [#3466](https://github.com/openshift/ovn-kubernetes/pull/3466)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/3ce12184bf66e8be8abe365f81ffdfa7dbb4dd76...1d2affb98c6ead7ef77bed3b0e169145e7f9d6cb)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/f4378c2d8cea286ad2ff2f57235c970bf90abaf5)

* [OCPBUGS-101730](https://issues.redhat.com/browse/OCPBUGS-101730), [OCPBUGS-104390](https://issues.redhat.com/browse/OCPBUGS-104390), [OCPBUGS-108069](https://issues.redhat.com/browse/OCPBUGS-108069): Bump x/net to address CVEs [#111](https://github.com/openshift/cloud-provider-powervs/pull/111)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/18eb5238fb2c86632edb24175f536d815f28ddf6...f4378c2d8cea286ad2ff2f57235c970bf90abaf5)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/467f6c5b9e880a62c442e6fc6f3f4877f4cd9d04)

* [OCPBUGS-113646](https://issues.redhat.com/browse/OCPBUGS-113646): Update dependencies to k8s 1.36 [#148](https://github.com/openshift/machine-api-provider-powervs/pull/148)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/28c928ff78def160837170991f084b0fe71ca9be...467f6c5b9e880a62c442e6fc6f3f4877f4cd9d04)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/6a214d5e8a141eb8a07e74d1cdb8a9a80be22015)

* [OCPBUGS-122387](https://issues.redhat.com/browse/OCPBUGS-122387): Bump google.golang.org/protobuf to v1.36.12 [#414](https://github.com/openshift/prom-label-proxy/pull/414)
* NO-ISSUE: synchronize OWNERS from main branch [release-5.0] [#410](https://github.com/openshift/prom-label-proxy/pull/410)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/4ab9ff73c665319352288fe0b9b9e1df71832525...6a214d5e8a141eb8a07e74d1cdb8a9a80be22015)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/d2f710d9f859e73f3e03adf69bd25e0014865a5e)

* NO-ISSUE: synchronize OWNERS from main branch [release-5.0] [#211](https://github.com/openshift/node_exporter/pull/211)
* [Full changelog](https://github.com/openshift/node_exporter/compare/b8af472104ce559c8fb9bf31fd4fc38bdbdc34e7...d2f710d9f859e73f3e03adf69bd25e0014865a5e)


### [tests](https://github.com/openshift/origin/tree/b19e60087bbee9ccceefc09908e69cf1b55ed6e7)

* [OCPBUGS-127400](https://issues.redhat.com/browse/OCPBUGS-127400): Redact OAuth tokens from test cleanup logs [#31668](https://github.com/openshift/origin/pull/31668)
* [OCPBUGS-127419](https://issues.redhat.com/browse/OCPBUGS-127419): Fix node replacement test timestamp filter and allow job retry [#31577](https://github.com/openshift/origin/pull/31577)
* [Full changelog](https://github.com/openshift/origin/compare/5469b61543bdbba51f6701bbc8882ccbd1fc3098...b19e60087bbee9ccceefc09908e69cf1b55ed6e7)


### [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator/tree/42a87e53d18314300ffc1d91845f2667ea3812a7)

* [OCPBUGS-104423](https://issues.redhat.com/browse/OCPBUGS-104423): Bump golang.org/x/net to version 0.57.0 that fixes CVE-2026-33814 [#18](https://github.com/openshift/volume-data-source-validator/pull/18)
* [Full changelog](https://github.com/openshift/volume-data-source-validator/compare/ee9cd7aba4e096a9a957386ef20777e8950df352...42a87e53d18314300ffc1d91845f2667ea3812a7)