4.20.0-ec.6

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.20.0-ec.6-ppc64le

Team Approvals:

No tests for this release

Upgrades from:

Untested upgrades: 4.19.0, 4.19.1, 4.19.2, 4.19.3, 4.19.4, 4.19.5, 4.19.6, 4.19.7, 4.19.8, 4.19.9, 4.20.0-ec.0, 4.20.0-ec.2, 4.20.0-ec.3, 4.20.0-ec.4, 4.20.0-ec.5

Changes from 4.20.0-ec.5

Created: 2025-08-27 03:40:48 +0000 UTC

Image Digest: sha256:6181a31ec6b799f78a4ad1e78bee64d974aaa4430f7c0c937bd8f2780926f94c

Components

Kubectl 1.33.3
Kubernetes upgraded from 1.33.2 to 1.33.3
Kubernetes Tests upgraded from 1.33.2 to 1.33.3
Red Hat Enterprise Linux CoreOS upgraded from 9.6.20250726-0 to 9.6.20250815-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ChunkSizeMiB (5 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
OnClusterBuild (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
HighlyAvailableArbiter (8 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
VSphereMultiDisk (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
SigstoreImageVerification (5 tests)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
SELinuxMount (17 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
AWSClusterHostedDNSInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureClusterHostedDNSInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GCPClusterHostedDNSInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GCPCustomAPIEndpointsInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
IrreconcilableMachineConfig (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

apiserver-network-proxy git 26a4e67d sha256:b97494e39c1bd4ba34f9854716a30117491d1a71ac670b1697eabf3369bd2bc5
aws-karpenter-provider-aws git b37141b0 sha256:b4d9939fd4d673f08c3a60f8fd31d7cd0407af81ab10b90d7ac1b4a1cf37d4a5
aws-kms-encryption-provider git 088dcaf7 sha256:4824ce494e5696a9b3bdce45f80b3a08c9fd988eacefac6fc2dcb9bbf8547014
azure-kms-encryption-provider git ea0b9944 sha256:27920aca1fd45541041f304953eb47247f357bcd9c1882f59fa4f926944958fc
azure-service-operator git 6e2f3626 sha256:6f18a91630fd936294efd8d11fc186c28a554ecd5147c42899cac80f99341c39
baremetal-cluster-api-controllers git f782ba74 sha256:b9dbd00b318ff82240a23c688a15230e5be3799757452e84cfcee0b3b951dce1
baremetal-machine-controllers git fb678fec sha256:347f78ae34c5ccc3350818911827b61d335901fac1f31486d9ebd77a86aeafdf
cloud-network-config-controller git 467e50fe sha256:dfd7e907efb83264e21a8065523f95f7aa201302bc8de600c2de7bb6cca24835
cluster-autoscaler git 74faa33e sha256:7c7f098f537eca34ed4d15104c36b03f84d8e5ecf41643d77433e2782702b6f9
cluster-bootstrap git 74abc555 sha256:c80d549592a690b7079017c55c30b7089ca03fb43eb0db6ff5c275852ffae650
cluster-capi-controllers git de1db297 sha256:08918881a68dbd8fec1465f1674605bbd3a2af352a39371364e4a45a0ba9f963
cluster-kube-cluster-api-operator git 3ec30377 sha256:41cc8d060d36abdff76ddf4fab640ebe6bd83763b874c9d1cea2e13d28888aad
cluster-kube-scheduler-operator git f9b5b319 sha256:001dccb7a47754f0a5adc4dce9592ecfb0809166464f1083ef50ed8aa0a164a5
cluster-kube-storage-version-migrator-operator git 436cf857 sha256:b27aa1ca7d6f9d8f79de71e306e886678187bd7978092c7d1b2bca79f004b7ab
cluster-olm-operator git e4917368 sha256:7460c86a4cd67db0b0f8d2de726d729cb22ca2c3d7d04d643fec6c4f2253b6ef
cluster-openshift-controller-manager-operator git dfaeb8d5 sha256:770fe048ad62fee60278e4fd5ee222269b3cee776ebf8e4909bd556fad9c7ca8
cluster-policy-controller git 3e753854 sha256:d33d45538998ad9b3f0c703d66f6e9bb49fd3befeef67f24f3cd98177e07c038
configmap-reloader git 2438d7c8 sha256:a9d3351ac8ce3895c1fb202700c36af9e91553effb38d5a306c19a70683d79a3
container-networking-plugins git 184a9601 sha256:809d68f395613f3773e20ee9603cea09dd043aa65e2193a199429044a597ac8a
containernetworking-plugins-microshift git 184a9601 sha256:3211aa6db905e2d368a7992dea0250bac30aa69a8fa7c4811965c77048976fe3
csi-driver-manila git 5c322e89 sha256:fdcf2e02254acfe77a0021350899b7da781a4f0f11873dcda18c52beb3dffc87
csi-driver-nfs git 1abaf844 sha256:fdd141274e338ebe85b1ac21fca3b672493e868d34727b78bcec8353e75fdadd
csi-external-attacher git 45239149 sha256:591a9c3b3fbba6f32983241bea502c90df755427bf328c3c487a85ef900d5eaf
csi-external-provisioner git 81fca036 sha256:9f1449408b61311320d4d70162a13d850d2f2de92d4734a55c5725ee4342d696
csi-external-resizer git 9cd710b1 sha256:becabe42df8d158ffac4d74ba45ebbff49aeb041215c5d2590b0f5af94aadd5b
csi-external-snapshotter git 42604822 sha256:15b74462a655766de4cccb04aea16b11ee201c968bc7e4ae9dfd9cfa352a39f2
csi-livenessprobe git 1d6d6b27 sha256:ac46ba4a13a768d290c03bfd2846cc434217153c0c9a77cb2806055e7edbc3af
csi-node-driver-registrar git 3a2c732e sha256:cc3401d449a688f48d404e2b9fdd1d2558627380ff85fad4c560acafca3e04c5
csi-snapshot-controller git 42604822 sha256:270d21373da75eaa8bdbc6545851141eb1a0901c60b9c0508e3fb2f4bac3f8f6
docker-builder git ff595e4b sha256:7f772e6618ce13db97bb76416af7cafeb1ba4ab4c0c9feedca50713160bd16bc
driver-toolkit git 9d55fd1a sha256:2ebf8a3424c7064aeb4019fa5d109418e01a769bb19de2aa299acfeae850ddda
egress-router-cni git 85353bb9 sha256:49045c7237e6c6db34888501321aa4b5169b0dda65c1fa9a560a33a1f5d652d4
etcd git b5ad2681 sha256:f8206bd3e3814b81c44ec79528b78f4703b4abc6b06aa8e28f8b0aef11265fb0
gcp-cloud-controller-manager git e217ae23 sha256:f028d99cf9d6d70c2515a0ab7a8afc349c35dcf4adfa6bce98b43491f6c412c6
gcp-cluster-api-controllers git 65539c71 sha256:1315044934428446e8fda2e4fc1c34276f717b6e3e54660ae6e6a0a469cd40be
gcp-workload-identity-federation-webhook git b36788ed sha256:842e2d80fd52d4fd2e64dfc7dd9f2ffe7a2c7f1a1f6bc4fbc2ed8c176f483223
ibmcloud-cluster-api-controllers git 8b6396a4 sha256:3912afa112c3bc3f007a9774cc9c40ec8767e613e4f68a0be8efef5d0984a7b7
keepalived-ipfailover git bb4535b7 sha256:bd32c822a7f304bc20ae0a330bbfbb81d4ebb0d97407e9bf902a6880cd7fecb2
kube-metrics-server git cfa5ee9f sha256:41dfc2b64ba96760e6f29d2161d05d178e16e2319d19dbcef93ca81cb2d105a4
kube-rbac-proxy git bc1ca29e sha256:d1c36fbb8e6d9d7bf4ba811464784e97b80b68d9037acb05798cc6e7cd11c865
kube-state-metrics git a8c9a5f0 sha256:f08d201fa04b1a8cfd47ebb1c74522e591dc050edc17379812109b3741b11b99
kubevirt-cloud-controller-manager git 3f4542ec sha256:2d60e1a8202998710627fd41ace1239706d21a04fbd42cbb9617784cfc376578
kubevirt-csi-driver git 8b8dd30e sha256:a344099d59d1b586b494260d7b93f19ebc02efb011abdc8e2eb3f2f6d064acb9
libvirt-machine-controllers git a336f0b5 sha256:bb363779219e9ed4599771f8b8d5e8d020abbb88b22ff3c9ff550bb1827cc2aa
multus-admission-controller git fc73c803 sha256:d9e230d85e05d538a398e0a10e774ddec8f7c26a0d982ee3ab95d37e2bf4e298
multus-cni git cf0f68ec sha256:4210f7cff67ace24d8773115d272e604f0ae3c8919c0afba0d5db5f2ec07d80c
multus-cni-microshift git cf0f68ec sha256:759afadaa5f4bca6b72b3bb8e7b93c07cb91c82ff7eaa5032734987042b93cf0
multus-networkpolicy git 278ec20e sha256:fcd45775e65035b6fd609aacb3c89c611665e0223081fe6d53b259e6c14be2c3
multus-route-override-cni git 391c1b03 sha256:756178134b8048a61c38f5e436d1e5b5741c1e9435c5f6936c5a4f512e593169
multus-whereabouts-ipam-cni git 43c89591 sha256:7470005ea4019b56829bb0417ce94737d9810e1ad3cb193f16b5879c0c2bfa76
network-interface-bond-cni git 54ad71ee sha256:e97d0d620b0fa518c23dcbdd3914b2744d57202cfc91bc0925c963f1f6c36931
oauth-proxy git d9c18ed4 sha256:65392587135707231363b150a923306cf038d74f49534afa6d2955789db254f5
oauth-server git 81098796 sha256:1b86211d28a7c9040984ba592bf9a9ac55d8e9778957703e215eb6bffe092a9c
openshift-apiserver git 98a1f038 sha256:43862e78bf8a16118542e4f53a782190e3421697233858f78c260336b05c1da5
openshift-controller-manager git bd60afcd sha256:6391586bef9f9bb595214410fc61cd53d66bee566c15c5298bc3a2752a84eb18
openshift-state-metrics git b04e2ef0 sha256:59288dc9293e6b42e5d849d8d55ac2bcbb961ec515589be8cce302ea911e9b14
openstack-cinder-csi-driver git 5c322e89 sha256:23c7704eb1bb47718030e071a8c321d4c7e405c41517659c4dd1627f03c8b3f4
openstack-cloud-controller-manager git 5c322e89 sha256:13cb14cd5cee485c23edfe627de226dca680d1a3aa9f47afaca268d6616ba8d3
openstack-cluster-api-controllers git 30944900 sha256:2dae62db4d0fbb4e8f373ce0ed89d8494addc117973110aba770210c08f09d0c
openstack-machine-api-provider git 888b25c2 sha256:fa6677a64f362130c27b1ec316b21356268b70cf8e2e381e5cee239acdc4282e
openstack-resource-controller git bf0d2c88 sha256:9dbb5db9246d1babd0ef2b43c41e8ad14fc3851ed7a8139c4396608adf0d6ded
ovirt-csi-driver git 1db726a9 sha256:8d2a862dffc55bbdb84e7b183ba8cc93f01f6afb3fe1c10b9750b22e0f876ae3
ovirt-csi-driver-operator git 76db379d sha256:fe7121bd10a807221de7afc3fcfbba599bf9b1401fd182b963bb8c8b34656b0d
powervs-block-csi-driver-operator git bf47a45c sha256:8ef8df21820830ee86998e9400717d937027136945c868aea635691fc7b151da
prometheus git e3c32a9a sha256:923f044f6e7348f5854a16f0675364762ca1174834027f3f65654c11d9cc0ec5
prometheus-alertmanager git 419f2843 sha256:1543452b80167210716190775308104f96ad2b9869608d5772d0ceb84cbe0fe1
prometheus-node-exporter git 56f6158e sha256:7c3e20c61e166bb62a85515f8d69b685415132e7d5b10050a77a5c7c7ca692e8
route-controller-manager git bf2fa662 sha256:2c01ff093b1846b8fbe3afafef3281bf7835bb8da1de466761315b4c9466041e
telemeter git 4c6036ee sha256:c873d47604bee99b2a1f8c255d036feb7bd289eecdcea3734cbbbd6c174ea545

agent-installer-api-server

NO-ISSUE: [master] Bump OCP versions: 4.12 (#7927) #7927
OCPBUGS-59393: Fix IsMachineCidrEqualsToCalculatedCidr validation to handle unnormalized IPv6 addresses (#7923) #7923
NO-ISSUE: support setting TNA_CLUSTERS_SUPPORT when deploying with assisted-test-infra (#7922) #7922
NO-ISSUE: Associate MetalLB operator with the Virtualization bundle (#7920) #7920
NO-ISSUE: [master] Bump OCP versions: 4.15, 4.17 (#7924) #7924
NO-ISSUE: [master] Bump OCP versions: 4.19 (#7921) #7921
MGMT-21063: Use mac address to configure dhcp on kargs (#7888) #7888
Set AIUI_CHAT_API_URL for podman deployment (#7911) #7911
MGMT-14822: Add MetalLB operator (#7824) #7824
NO-ISSUE: [master] Bump OCP versions: 4.20, 4.14 (#7917) #7917
ACM-22740: Approve CSRs for a host before marking as Done (#7903) #7903
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.18 (#7904) #7904
MGMT-20474: New route to provide a detailed list of features (#7862) #7862
NO-ISSUE: [master] Bump OCP versions: 4.19 (#7902) #7902
NO-ISSUE: Remove unused variables from cluster monitor loop (#7887) #7887
MGMT-21266: Report duration of monitored clusters (#7886) #7886
MGMT-21312: Index hosts by cluster id (#7891) #7891
MGMT-21287: Remove NHO dependency in SNR (#7889) #7889
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Add yoavsc0302 to OWNERS_ALIASES file (#1213) #1213
NO-ISSUE: Update Konflux references (#1212) #1212
MGMT-20756: assisted installer naive string concatenation for partition finding (#1198) #1198
NO-ISSUE: Update Konflux references (#1202) #1202
Full changelog

agent-installer-node-agent

NO-ISSUE: Add yoavsc0302 to OWNERS_ALIASES file (#1089) #1089
NO-ISSUE: Update Konflux references (#1078) #1078
Full changelog

agent-installer-utils

AGENT-1254: Switch to agent-installer-ui image #132
AGENT-1205: Do not include agent-tui and related services #123
OCPBUGS-60019: Add ISOBuilder Release notes #135
AGENT-1270: use agent-preinstall-image-builder image for building the ISO #134
NO-ISSUE: Move mtv-operator back to v2.8 for 4.20 #133
Full changelog

aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, azure-workload-identity-webhook, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibmcloud-machine-controllers, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, kube-proxy, machine-image-customization-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector

OCPBUGS-59641: cleanup: fetch individual PodResourceInfo from allocated resource state #2410
NO-JIRA: add rphillips as downstream kubelet approver #2414
UPSTREAM: <drop>: OKD-276: Fix InPlacePodVerticalScaling tests #2407
CNTRLPLANE-5: UPSTREAM: 132960: Configure JSON content type for generic webhook RESTClient. #2362
OCPBUGS-52169: Workload partitioning of static init containers #2224
OCPBUGS-59756: Fix IntOrString cost estimation when schema has a MaxLength constraint #2375
OCPBUGS-46422: Disable ServiceCIDR tests #2382
CNTRLPLANE-940: Add CEL expression compile validation for Authentication admission #2353
STOR-2370: Storage performant security policy #2344
OCPBUGS-59603: Restore “Bump external snapshotter for vgs tests” #2392
OCPBUGS-59533: Rebase v1.33.3 to master/4.20 #2369
OCPBUGS-57666: Adjust durations for PodLifecycleSleepAction e2e tests #2363
STOR-2481: UPSTREAM: <carry>: Skip SELinux test with Feature:SELinuxMountReadWriteteOncePodOnly #2389
OCPBUGS-60047: disable slow and flaky tests rather than labeling them #2390
OCPBUGS-56785: UPSTREAM: 132028: podresources: list: use active pods #2361
NO-JIRA: UPSTREAM: <drop>: Revert “Bump external snapshotter for vgs tests” #2387
OCPBUGS-59603: Bump the external-snapshotter for vgs tests #2373
TRT-2068: Skip specific LoadBalancer test for “none” platform #2383
TRT-2068: Reintroduce non-suite annotation removal #2331
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-51299: Add default values for validation to kms keys #9781
OCPBUGS-53473: Validate clusterNetwork hostPrefix #9594
no-jira: dev docs - add rr capi debugging #9887
OCPBUGS-60197: PowerVS: config variables not honored #9877
CORS-4078: centralize v2 aws client constructions #9882
OCPBUGS-50517: [Nuanix] installer should add the shared category to the preloaded rhcos image PC object #9450
MGMT-21212: Enable dual-stack clusters with image-based installations #9847
OCPBUGS-60284: Upgrading Cluster-API-Provider-Nutanix version from 1.5.4 to 1.7.0 #9869
OCPBUGS-60240: baremetal: always set external v6 URL on dualstack #9874
CORS-4177: clusterapi: use default envtest timeouts #9871
CORS-4067: Add support for single zone NAT gateway #9753
CORS-4178: handle deleting AWS egress-only internet gateway #9873
OCPEDGE-1997: bump(ocp/api): pull in HighlyAvailableArbiter promotion #9870
AGENT-1205: Extract agent-tui during boot for interactive workflow #9828
SPLAT-2355: Added vSphere support for disk setup #9863
CORS-4083, CORS-4084, CORS-4085: Add Azure custom-dns support in Tech Preview #9861
OCPBUGS-59542: Generated Nutanix MachineSets for Autoscaling with Failure Domains #9864
no-jira: OWNERS: add splat team as approvers #9862
CORS-3992: skip dns zone validation with custom DNS #9859
no-jira: Bump openshift/api to get renamed Featuregates #9854
OCPEDGE-1994: bump(ocp/api): pull in updated DualReplica #9849
SPLAT-2295: Setup additional disks via machine configs #9706
OCPBUGS-59630: Update RHCOS 4.20 bootimage metadata to 9.6.20250701-0 #9844
no-jira: images: bump images to go 1.24 #9850
Full changelog

baremetal-operator

METAL-1380: Sync july 24 #427
METAL-1238: Add annotation to install metal3 CRDs in hypershift hosted clusters #426
Full changelog

baremetal-runtimecfg

CORS-4175: Extend in-cluster DNS support to Azure #366
no-jira: Bump openshift/api version to bring updates to AzurePlatformStatus #367
Full changelog

cli, cli-artifacts, deployer, tools

OTA-1601: Better the Updating Cluster Operators table #2077
OCPBUGS-58393: oc login: Preserve ExecProvider on oc login -u #2075
OCPBUGS-60281: Fix panic in oc describe templateinstance when Secret is nil #2073
OTA-1560: pkg/cli/admin/upgrade: Promote ‘recommend’ to general availability #2076
NO-JIRA: Update containers/image and docker versions #2067
OTA-1600: pkg/cli/admin/upgrade/recommend: Don’t error on unaccepted issues when the feature gate is off #2069
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cloud-credential-operator

OCPBUGS-34993: ccoctl azure dnszone-resource-group-name now optional #897
OCPBUGS-59889: Add retry logic for Azure federated identity credential creation #878
CCO-641: update dependencies #887
NO-JIRA: Drop lleshchi from OWNERS #889
OCPBUGS-43783: openstack: Set annotation even when credentials mode is unset #873
Full changelog

cluster-authentication-operator

CNTRLPLANE-5: Wire a feature-gates config observer for oauth-apiserver. #773
AUTH-543: OIDC/OAuth resource configuration #740
Full changelog

cluster-autoscaler-operator

AUTOSCALE-125: newPodScaleUpDelay field for CA #349
Full changelog

cluster-baremetal-operator

METAL-1508: Change deprecated pointer to ptr #495
OCPBUGS-53392: Remove webhookport (9447) as HostPort #496
METAL-1238: Enable CBO to run on hosted clusters #494
Full changelog

cluster-capi-operator

NO-JIRA: Improve ergonomics of running tests #342
OCPBUGS-57195: Fix infra machine template deletion #326
OCPCLOUD-2992: migration e2e for creating machine with authoritativeAPI ClusterAPI #320
OCPCLOUD-2566: Adds MAPI Machine VAP and test suites #321
OCPCLOUD-2916: Bump to CAPI v1.10, k8s v1.33, go 1.24 #341
NO-JIRA: Get openshift/api directory from packages #339
OCPCLOUD-2979: ingress network policy for metrics #325
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-53300: Adds service for cloud-controller-manager #399
OCPCLOUD-2940: Update dependencies for Kubernetes 1.33 #396
Full changelog

cluster-config-api

OCPBUGS-55665: Remove featuregate ChunkSizeMib #2438
Fix feature promotion check single node variant name #2445
OCPBUGS-54287: MachineOSConfig name should match MachineConfigPool #2399
MCO-1744: Add knobs to allow irreconcilable changes #2433
Update KAL to support new guidance on required and optional fields #2440
Remove OnClusterBuild fg #2437
CNTRLPLANE-368: improve OIDC field validations for Authentication resources #2409
STOR-2481: Promote SELinuxMount feature gate #2426
Add new ImageBuildDegraded status option for MCO #2439
OCPEDGE-1945: feat: promote HighlyAvailableArbiter feature to default #2401
OCPNODE-3006: add back SigstoreImageVerification to techPreview #2406
MCO-1759: Add NonReconcilableMC Feature Gate #2429
Update crd-schema.json to release 1.33 branch #2436
Update KAL to include omitzero functionality on optional fields #2431
OCPNODE-3372: Update defaultRuntime doc to show options and set default to crun #2370
CORS-4155: Add Feature gate and update Infrastructure CR for Azure Cluster Hosted DNS #2404
SPLAT-2346: Moving VSphereMultiDisk FeatureGate to GA #2428
features: add installer replacement feature gates #2423
Full changelog

cluster-config-operator

OCPEDGE-1970: bump(ocp/api): pull in HighlyAvailableArbiter promotion #446
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-52448: Remove gathering of failure domains from machine sets #356
OCPBUGS-59919: Prevent activation of CPMS with deletionTimestamp #364
OCPBUGS-59919: Fix authoritativeAPI recreate loop #365
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-60242: Use protobuf when connecting to kube client #217
STOR-2465: Add ExternalSnapshotMetadata CRD #239
STOR-2394: Bump all deps for 4.20 #240
Full changelog

cluster-dns-operator

OCPBUGS-59781: Read only root filesystem #439
NO-JIRA: Add rikatz to OWNERS #442
Full changelog

cluster-etcd-operator

OCPBUGS-60547: Revert “Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace” #1469
NO-JIRA: Add more unit tests for JobController #1459
OCPEDGE-1998: TNF: Use pcmk_delay_base on 1st fence device to prevent fencing races #1463
OCPBUGS-60237: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1464
NO-JIRA: hack/generate.sh provides helpful errors when missing tools #1465
NO-JIRA: create dedicated cluster-wide informer #1457
ETCD-590: start to refactor the probe injection #1456
OCPBUGS-57859: Updating cluster-etcd-operator-container image to be consistent with ART for 4.20 #1452
NO-JIRA: Migrate bindata to go:embed #1445
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-image-registry-operator

OCPBUGS-59734: fix(azure): resolve credential caching issues around UAMI support #1238
OSASINFRA-3756: Add support for token-based authentication in clouds.yaml configuration file #1221
OCPBUGS-58424: mount /etc/pki/ca-trust/extracted/pem/ as empty dir #1239
Full changelog

cluster-ingress-operator

OCPBUGS-60302: e2e - Reduce flakiness in testGatewayAPIResourcesProtection #1265
NE-2096: Bump to OSSM 3.1.0 and Istio 1.26.2 #1257
NO-JIRA: Add rikatz to OWNERS #1259
OCPBUGS-59894: Update GatewayAPI test to check if deployment has 1 or more pod #1250
NE-2108: docs - correct Istio version format in ossm-overrides.md #1253
NE-2108: Add OSSM channel and version override annotations #1246
NE-2104: desiredIstio: Enable GIE if InferencePool found #1245
OCPBUGS-59839: desiredIstio: Delete trustBundleName #1243
Full changelog

cluster-kube-apiserver-operator

RFE-4153: enabled readonly filesystem #1864
Revert “Revert “OCPBUGS-56551: certregenerationcontroller: start configInformers again”” #1891
CNTRLPLANE-1248: set up openshift-tests-extension and add a sanity test #1892
OCPBUGS-55217: Optimistically update Kube Server and Client CA bundles #1812
OCPBUGS-59527: certrotationcontroller: extend node-system-admin-signer lifetime #1872
OCPBUGS-59626: operator: don’t react to events all namespaces #1874
OCPNODE-2559: SCC: add nested-podman and restricted-v3 #1847
NO-JIRA: Add negative tests of GOAWAY-chance #1882
OCPBUGS-44842: Set not-before/not-after annotations #1873
OCPBUGS-50489: Add missing service ports to apiserver service #1875
Full changelog

cluster-kube-controller-manager-operator

RFE-4154: Remove readOnlyRootFilesystem from KCM container #856
NO-JIRA: targetconfigcontroller: set description for csr-controller-ca #851
OCPBUGS-53290: Missing endpoint slices for open ports the operator uses #848
Full changelog

cluster-machine-approver

NO-JIRA: Fix some lints and nits #273
Full changelog

cluster-monitoring-operator

MON-4312: Adding new accelerator to the accelerator configmap #2636
MON-4318: Add debug image manifest to CMO #2623
OCPBUGS-60221: remove managed_cluster from reserved external labels #2641
NO-JIRA: Use label matchers for Rules API in prom-label-proxy #2640
NO-JIRA: [bot] Synchronize versions of the downstream components #2639
NO-JIRA: [bot] Synchronize versions of the downstream components #2620
MON-4299: chore(thanos): replace CLI args that will disappear in future versions #2626
Full changelog

cluster-network-operator

OCPBUGS-60264: Fix multus webhook match condition for spec changes #2772
MGMT-20706: fix DPU host mode support for OVN templates #2740
CORENET-6279: ovn-k, virt: update IPAMClaim CRD #2770
CORENET-6247: Set runAsUser for ovnkube-control-plane #2757
CORENET-5957: Rebase k8s to 1.33 #2723
NO-JIRA: Update CNO reviewers/approvers #2756
CORENET-6228: Allow network-node-identity to be enabled for IBMCloud PlatformType #2755
NO-JIRA: remove PersistentIPsForVirt FG #2759
CORENET-6127: ovn-k: Enable OVN-K feature when PreconfiguredUDNAddresses is enabled #2734
Full changelog

cluster-node-tuning-operator

E2E: RPS: avoid multiple profile updates (#1378) #1378
Return 401 Unauthorized without client cert (#1377) #1377
E2E: skip stalld test case checking sched_fifo (#1374) #1374
Bump vendor dependencies (#1367) #1367
CNF-16638: Disable RPS by default (#1370) #1370
Full changelog

cluster-openshift-apiserver-operator

: NO-JIRA: Bump to Go 1.24 and k8s 1.33 #620
Full changelog

cluster-samples-operator

OCPBUGS-59325: Periodic sync of OKD samples #630
OCPBUGS-60179: Bump Kubernetes Version to v0.33.3 #644
OCPBUGS-60179: Bump Kubernetes Version to v0.33.3 - update Dockerfile.okd #645
Full changelog

cluster-storage-operator

STOR-2330: Add labels to subscribe ibm-powervs-block CSI driver operator to NPs #600
STOR-2370: Add e2e storage performant policy #593
STOR-2330: Add labels to subscribe ibm-vpc-block CSI driver operator to NPs #599
OCPBUGS-60064: hypershift: add app label to csdriveroperators running in HCP #603
STOR-2330: Add labels to subscribe openstack cinder and manila CSI driver operators to NPs #601
STOR-2330: Add RBAC rule to let ibm-vpc-block-csi-driver-operator manage NetworkPolicy #602
STOR-2394: Bump all deps for 4.20 #598
Full changelog

cluster-update-keys

OCPNODE-3006: OCPBUGS-59860: OpenShift verification uses v1 CRD #74
Full changelog

cluster-version-operator

OCPBUGS-57585: CVO protects /metrics with authorization #1215
OTA-1480: Add readonlyRootFilesystem #1208
NO-JIRA: Generate junitfile for unit tests #1217
Full changelog

console

OCPBUGS-59862: Only show a link to OperatorHub if the logged in user has access to view OperatorHub #15340
OCPBUGS-59204: Alignment of / and : within imagestream tag selection form fields #15399
NO-JIRA: Update CHANGELOG for latest 4.20 prerelease plugin SDK package publish #15407
OCPBUGS-45297: Refactor DroppableEditYAML #15386
CONSOLE-4680: Refactor bindings.jsx menuActions to accept actions fro… #15372
ODC-7806: Migrate enzyme “packages/dev-console” unit tests to React Testing Library #15335
CONSOLE-4609: Refactor testHook to RTL, add useWarningModal #15389
ODC-7810: Migrate enzyme “packages/topology” unit tests to React Testing Library #15293
OCPBUGS-60373: QuickStarts Link buttons to other quickstarts are duplicate #15387
CONSOLE-4713: Refactor PodConnect and Terminal to TypeScript #15377
OCPBUGS-60010: Fix i18n string for event stream (again) #15384
OCPBUGS-56155: Click ‘View operator details’ in Plugin available popover will close the modal #15316
OCPBUGS-60130: Remove ancient X-XSS-Protection header #15360
OCPBUGS-59382: OpenShift Console’s “Start Job” action overrides configured “backoffLimit” to “6” #15357
CONSOLE-4600: Migrate Enzyme “tests/components/factory and modals” unit tests to RTL #15281
OCPBUGS-60151: Update Guided tour -> Guided Tour in help menus #15363
CONSOLE-4617: follow-on fix for DetailsItem popover #15361
OCPBUGS-59001: Bump helm version #15282
CONSOLE-4688: Dropdown -> ConsoleSelect #15284
CONSOLE-4616: add additionalPrinterColumns to CustomResource list page #15350
OCPBUGS-44972: Make sure CSP violations are only reported to telemetry once per day per browser #14778
CONSOLE-4703: Remove routes component in console #15343
OCPBUGS-60056: update timestamp unit test to be more stable #15356
ODC-7811: enzyme -> RTL: webterminal-plugin #15352
CONSOLE-4617: add additionalPrinterColumns to CustomResource details page #15336
OCPBUGS-60010: Fix i18n string for event stream #15351
CONSOLE-4705: Convert some files to TypeScript #15348
CONSOLE-4688: Use PF instead of noSelection Dropdown #15342
OCPBUGS-59563: Resolving API Version Conflicts in Tekton Pipeline Runs #15307
OCPBUGS-59215: switch to dev perspective for /dev-monitoring #15268
OCPBUGS-59725: Refactor RegistryPollIntervalModal #15337
OCPBUGS-55946: Move ACM perspective back to perspective selector. #15310
CONSOLE-4704: Update ThemeContext type #15339
OCPBUGS-57481: fix: Fix negative CPU util graphs #15332
OCPBUGS-58469: Fix hot reload in GlobalConfigPage component #15287
OCPBUGS-59196: fix runtime exception in CreateYAMLInner #15341
CONSOLE-4699: Update dynamic demo plugin e2e tests #15319
CONSOLE-4608: Drop createModalLauncher from helm-plugin and use useOverlay hook instead #15303
And 6 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-58094: Consolidate telemetry values oscilation #1034
CONSOLE-4665: Vendor ConsolePluginCRD v1alpha1 changes #1018
OCPBUGS-60219: make console operator responsible for creating oauth client #1032
OCPBUGS-57854: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.20 #996
OCPBUGS-57736: bump github.com/openshift/client-go #1030
Full changelog

coredns

OCPBUGS-57652: Updating coredns-container image to be consistent with ART for 4.20 #136
NO-JIRA: Add rikatz to OWNERS #147
OCPBUGS-60008: UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy #146
Full changelog

csi-driver-manila-operator, openstack-cinder-csi-driver-operator

STOR-2394: Bump all deps for 4.20 #408
STOR-2479: Add CredentialsRequest for the EFS node DaemonSet #389
STOR-2330: Add labels to subscribe openstack cinder and manila CSI driver controllers to NPs #409
OCPBUGS-57395: Remove stale conditions #406
Full changelog

docker-registry

OSASINFRA-3756: Bump docker-distribution to support v3token authentication for swift #439
Full changelog

gcp-machine-controllers

OCPCLOUD-2931: Update Kubernetes deps to v1.33 #123
Full changelog

gcp-pd-csi-driver

STOR-2396: Rebase to upstream v1.20.0 for OCP 4.20 #79
Full changelog

gcp-pd-csi-driver-operator

STOR-2394: Bump all deps for 4.20 #147
Full changelog

haproxy-router

NO-JIRA: Add rikatz to OWNERS #665
OCPBUGS-55506: Prevent startup failures due to name resolution #656
Full changelog

hypershift

OCPBUGS-56914: fix: Do not admit OAuth route by private router unless it has external DNS #6218
OCPBUGS-56430: fix: Add recovery monitoring stack fixes #6642
CNTRLPLANE-1271: HyperShift Operator CPO override for Azure. versions 4.19.6 - 4.19.9 #6662
CNTRLPLANE-1270: Fix ProjectDevelopmentStreamTemplates #6661
OCPBUGS-60381: feat(validations): add wildcard support to DNS SAN conflict detection #6643
CNTRLPLANE-1251, CNTRLPLANE-1255: Introduce ProjectDevelopmentStreams #6632
OCPBUGS-57450: fix: routes are not used in case of IBM Cloud #6622
NO-JIRA: docs(agents): add AGENTS.md and centralize assistant guidance #6634
NO-JIRA: feat(rules): Add cursor rules for PR and Code review #6633
OCPBUGS-60399: wrap EnsureKubeAPIDNSNameCustomCert and EnsureGlobalPullSecret in their own test #6536
OCPBUGS-59880: add HostedCluster config requirements for DR #6522
NO-JIRA: feat(docs): Add new videos section in the documentation #6635
CNTRLPLANE-946: test(e2e): Add e2e test for ExternalOIDCWithUIDAndExtra feature set #6631
CNTRLPLANE-996: feat(e2e): Use ROSAManagedPolicies by default #6534
CNTRLPLANE-1234: update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.24.4-1754467841 #6608
OCPBUGS-57336: fix(hostedcluster): remove additionalTrustBundle from hcp when removed from HostedCluster #6605
CNTRLPLANE-993: feat(CPOv2): Monitor operands rollout status #6492
NO-JIRA: Update ingress-and-dns.md - update Metallb install link #6619
OCPBUGS-60187: chore: Split shared proxy acls #6621
NO-JIRA: Fix typo causing ‘make verify’ to fail #6620
CNTRLPLANE-995: Fix incorrect usage of util.UpdateObject #6615
CNTRLPLANE-1034: chore: Relax the kas healthcheck for aro when AllowedCIDRBlocks #6614
OCPBUGS-60190: chore: Improve security context uid allocation to reuse released uids #6612
NO-JIRA: docs: Document workloadContext #6589
CNTRLPLANE-204: feat: Add Shared Ingress Config Generator #6555
NO-JIRA: chore: Add cursor rule statements for unit tests #6611
NO-JIRA: test(e2e): add new test for external OIDC #6419
OCPBUGS-57626: order ICSPs for determinism of OPENSHIFT_IMG_OVERRIDES #6607
NO-JIRA: docs: enhance commit message formatting and gitlint configuration #6613
CNTRLPLANE-995: Fix Default SG day2 tags feature being triggered without changes #6603
CNTRLPLANE-1190: Support control plane overrides by platform #6523
OCPBUGS-60064: fix(OCPBUGS-60064): add missing app label to some components #6591
CNTRLPLANE-1186: update github.com/golang/groupcache digest to 2c02b82 #6389
CNTRLPLANE-1228: Update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.24.4-1753853351 #6541
OCPBUGS-58061: Always compress and encode payload in token secret for inplace upgrades #6352
CNTRLPLANE-1225: feat(konflux): Use hermetic builds for CPO #6595
CNTRLPLANE-1197: Add EnsureGlobalPullSecret to be executed in 4.19 test suite #6508
OCPBUGS-59194: fix(OCPBUGS-59194): Allow HCCO to set registry managementState to Removed #6593
NO-JIRA: feat(azure): Add deletion scripts and cleanup documentation for managed Azure clusters #6560
OCPBUGS-59886: Add selinux-warning-controller to KCM #6550
CNTRLPLANE-1116: build(gitlint): add gitlint to verify target #6559
CORENET-6229: Use networking.advertiseAddress for CNO apiserver override for IBMCloud PlatformType #6553
OCPBUGS-59736: Add support for generating a SC UID per namespace if SCC are not avalable #6520
CNTRLPLANE-263: Remove all AzureManaged* CRDs #6518
CNTRLPLANE-262: Support print operator version in CLI #5821
CNTRLPLANE-1198, CNTRLPLANE-1199: Bump AllowedCIDRBlocks limit #6556
NO-JIRA: refactor(azure): extract AKS managed identity setup into separate script #6488
CNTRLPLANE-1116: Fix CI git commits for run-gitlint #6519
OCPBUGS-59959: Set explicit FSGroup and RunAsUser for etcd when there’s no SCC #6548
NO-JIRA: add CLAUDE.md with comprehensive development guidance #6549
CNTRLPLANE-1191: add sa-token-issuer-private-key-path flag to create cluster aws #6526
CNTRLPLANE-1184: update registry.access.redhat.com/ubi10/ubi docker tag to v10.0-1752573517 #6343
OCPBUGS-59927: Fix MCE 2.10 konflux EC violations #6531
MGMT-20948: Enable Multus Disabling for NetworkType=Other #6358
NO-JIRA: fix(cmd): match infraID exactly on OIDC provider delete #6538
NO-JIRA: fix(test/e2e): add KCM leader elect failure msg to isLeaderElectionFailure #6537
CNTRLPLANE-777: Create an Arm64 NodePool e2e Test for ARO HCP #6509
CNTRLPLANE-996: feat(cli): Add support for using ROSA managed policies #6467
CNTRLPLANE-204: feat(shared-ingress): Add reloader sidecar to avoid restarts on config changes #6447
MGMT-20826: Add CLI validation to ensure Console is disabled when Ingress is disabled #6479
NO-JIRA: feat(cmd/dump): add CronJobs to dump #6494
OCPBUGS-53265: Use the image reference for the cache in the image metadata provider #6155
OCPBUGS-59835: MCE 2.10 konflux #6524
OCPBUGS-57336: Delete unused AdditionalTrustBundle from CP namespace #6504
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

insights-operator

fix: incorrect anonymization of domains (#1111) #1111
feat: add permissions to gather clusterrole (#1106) #1106
feat: Allow on-demand gathering during initial periodic run (#1109) #1109
Full changelog

insights-runtime-exporter, insights-runtime-extractor

Liborfuka ocp420 new tests #51
Sidecar containers test case #44
test: Fix JBoss EAP 8.0 version #50
Full changelog

kube-storage-version-migrator

OCPBUGS-57556: Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.20 #222
Full changelog

machine-api-operator

fix for OCPBUGS-55135: userDataSecret.name should be a Required value on AWS #1399
SPLAT-2381: Fixed e2e test to generate machines with cluster name prefix #1398
OCPCLOUD-2980: add ingress/egress network policy v2 #1396
Full changelog

machine-config-operator

OCPBUGS-60526: Remove escape chars when installing extensions in OCL Containerfile #5247
NO-JIRA: clean up node cluster dashboard #4612
OCPEDGE-1733: feat: consolidate arbiter template files #5232
OCPBUGS-59723: Reintroduce cronjob that deletes MCN v1alpha1 CRD #5238
OCPBUGS-60287: Remove OnClusterBuild FG #5241
NO-ISSUE: Revert “OCPBUGS-59723: Add mechanism to delete MCN v1alpha1 CRD in 4.16+ clusters” #5237
OCPBUGS-59723: Add mechanism to delete MCN v1alpha1 CRD in 4.16+ clusters #5215
MCO-1810: Support kernelType in OCL #5172
OCPBUGS-60119: Invalid architecture value found in annotation during 4.19 update #5222
MCO-1777: Run build as an init container for OCL #5200
MCO-1811: add MachineConfigControllerPoolAlert runbook to alert #5214
TRT-2232: Revert #5148 “OCPBUGS-58023: Prevent unnecessary systemd unit disable” #5213
OCPNODE-3522: Generate deterministic order namespacedPolicyJSON #5196
OCPNODE-3466: Remove containernetworking-plugins directory from crio.conf #5173
NO-ISSUE: Balance runtime of e2e-gcp-op shards #5203
OCPBUGS-58023: Prevent unnecessary systemd unit disable #5148
MCO-1773: Pick up openshift/kubernetes 1.33 rebase updates #5182
OCPBUGS-59780: ARO clusters cannot scale on upgrade to 4.19 #5195
OCPBUGS-58443: In OCL for reboot, after applying ssh/file/password based MC the MCP is stuck in updating state #5191
OCPBUGS-57484, OPNET-681: Support migration to NMState #5064
OCPNODE-3006: Migrate ClusterImagePolicy/ImagePolicy to v1 #5143
OCPBUGS-43406: Add workaround fix for static pod race #5185
MCO-1813: Simplify boot image reconciliation with Go generics #5183
Full changelog

machine-os-images

METAL-1509: Add aarch64 images #65
Full changelog

metallb-frr

OCPBUGS-57696: Updating ose-frr-container image to be consistent with ART for 4.20 #101
Full changelog

monitoring-plugin

NO-JIRA: update to expect NodeJS v22+ #504
OU-848: Dependency update of dynamic plugin sdk and typescript #499
OU-960: data-test injection on source code and UI automation refactoring #500
OCPBUGS-60198: fix legend height to avoid scroll overlap #494
NO-JIRA: improve consistency in tab string #497
OU-963: add translation string test #492
NO-JIRA: update the i18n #491
NO-JIRA: refactor incidents to add typescript #475
OCPBUGS-55455: feat: add alerting rules tab to dev console #487
NO-JIRA: automation failed in the periodic job #486
OU-944: automation refactoring #485
Full changelog

must-gather

ETCD-738: Partial Revert of #489 (#498) #498
Full changelog

network-metrics-daemon

Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.20 (#107) #107
create .snyk file to skip vendor folder (#108) #108
OCPBUGS-59612: Bump github.com/golang/glog to v1.2.4 (#109) #109
no-jira: Replace e2e test image (#118) #118
Full changelog

network-tools

NO-JIRA:Update OWNERS file #152
Full changelog

networking-console-plugin

CNV-52160: VLAN fields #268
CNV-52160: add awareness checkbox #267
CNV-52160: edit project mapping #266
CNV-52160: Creation form #257
CNV-52160: Vmnetwork details page #263
NO-JIRA: fix(i18n): use right namespace #262
OCPBUGS-60122: Fix ingress details #258
CNV-52160: add vm network list #256
Full changelog

oauth-apiserver

CNTRLPLANE-1259: set up openshift-tests-extension and add a sanity test #138
Full changelog

oc-mirror

Bump the oc-mirror-v2 group in /v2 with 5 updates (#1245) #1245
Bump the oc-mirror-v2 group in /v2 with 2 updates (#1243) #1243
CLID-389: v2: validate access to destination registry (#1201) #1201
reduces the dependabot config interval (#1242) #1242
Bump the oc-mirror-v2 group across 1 directory with 5 updates (#1241) #1241
Bump github.com/docker/docker in /v2 in the go_modules group (#1239) #1239
clid-415: adds a warn message to v1 (#1238) #1238
Bump the oc-mirror-v2 group in /v2 with 17 updates (#1232) #1232
OCPBUGS-59949: fixes the result output showing the wrong total (#1236) #1236
prevents panic when helm chart is nil (#1233) #1233
OCPBUGS-59646: revert #1220 and print a warning instead (#1228) #1228
updates dependabot config (#1231) #1231
OCPBUGS-55114: v2/operator: support manifest lists with one arch (#1140) #1140
NO-JIRA: OKD compatibility - Allow custom value for SignatureURL (#1165) #1165
Full changelog

olm-catalogd

NO-ISSUE: Synchronize From Upstream Repositories #444
NO-ISSUE: Synchronize From Upstream Repositories #435
NO-ISSUE: Synchronize From Upstream Repositories #431
NO-ISSUE: Synchronize From Upstream Repositories #421
And 10 elided commits (e.g. from squash or rebase merges)
Full changelog

olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #435
NO-ISSUE: Synchronize From Upstream Repositories #431
NO-ISSUE: Synchronize From Upstream Repositories #421
And 10 elided commits (e.g. from squash or rebase merges)
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

NO-ISSUE: Enable readonlyRootFilesystem by default #1043
NO-ISSUE: Synchronize From Upstream Repositories #1046
NO-ISSUE: Synchronize From Upstream Repositories #1045
Full changelog

operator-marketplace

OCPBUGS-59566, OCPBUGS-59570: Move Network Policy manifests #652
OCPBUGS-60060: (fix) Update the operator-ibm-cloud-managed with the same configuration applied to operator manually #649
OPRUN-3888, OPRUN-3889: Upgrade catalog images from 4.19 to 4.20 #650
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

Revert “TRT-2243: Revert “OCPBUGS-56202: DownStream Merge [07-25-2025]”” #2715
OCPBUGS-57882: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.20 #2643
TRT-2243: Revert “OCPBUGS-56202: DownStream Merge [07-25-2025]” #2706
NO-JIRA: Bump OVN to 25.03 #2701
OCPBUGS-56202: DownStream Merge [07-25-2025] #2693
Full changelog

powervs-block-csi-driver

no-jira: Add Kishen V as a reviewer #101
Full changelog

powervs-cloud-controller-manager

No-Jira: Bump golang and Update oauth2 package in go.mod #87
Full changelog

powervs-machine-controllers

OCPCLOUD-3027: Bump k8s 1.33 #121
Full changelog

prom-label-proxy

NO-JIRA: [bot] Bump openshift/prom-label-proxy to v0.12.0 #384
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

NO-JIRA: [bot] Bump openshift/prometheus-operator to v0.84.1 #337
Full changelog

rhel-coreos, rhel-coreos-extensions

Merge #1854
Full changelog

service-ca-operator

NO-JIRA: Update Owners #269
OCPBUGS-57703: Updating ose-service-ca-operator-container image to be consistent with ART for 4.20 #268
Full changelog

tests

OCPBUGS-60375: Use ubi9 as latest imagestream for perl #30117
OCPBUGS-60530: Log full stack traces for panics in monitortest cleanup #30118
OCPBUGS-60562: SigstoreImageVerification:update waitForMCP different config name #30115
OCPEDGE-1755: Add TNF E2E tests for ungraceful node shutdown #29986
OCPBUGS-60238: images/tests: Remove rteval #30077
NO-JIRA: Ensure Platform Prometheus targets are protected #30014
OCPBUGS-60375: Fix perl hotdeploy test #30114
OTA-1580: Further tests for oc adm upgrade status #30109
NO-JIRA: Add compat_otp package with openshift-tests-private (OTP) util implementation #30081
OCPBUGS-60375: Remove Perl 5.32 on UBI8 #30092
CNTRLPLANE-945: oidc: configure an oidc client secret for the console to consume #30094
NO-JIRA: [TNF] add Two Node Fencing exception to accept less than two etcd endpoints #30058
OCPBUGS-58037: increase timeout of image extract test #30068
OCPNODE-3520: UserNamespaces: Increase build timeout duration #30071
OPRUN-4055: [OLMv1] Remove olmv1.go tests since those has been executed by OTE #30072
TRT-2226: Exclude ephemeral cni-sysctl-allowlist-ds from maxUnavailable/maxSurge check #30095
CNTRLPLANE-945: OIDC/enable skipped tests #30087
CNTRLPLANE-1248: Enable OTE for cluster-kube-apiserver Operator #30078
STOR-2370: Add openshift-test tags for CSO #30042
OCPEDGE-1969: add recovery tests for TNA #30022
CNTRLPLANE-945: oidc: fix test issues #30040
OTA-1580: Monitortest framework test for oc adm upgrade status #30031
OCPBUGS-59603: Fix vgs tests #30008
OCPBUGS-57032: Add wait.Poll retry logic to checkUpgradeability with 30s timeout #30062
OCPNODE-3004: ImageVolume: Increase timeout duration #30070
OTA-1559: test/extended/cli/admin: Add ‘oc adm upgrade recommend’ smoke test #29831
NO-JIRA: Export GetIPFamilyForCluster #30065
NO-JIRA: Allow only including / excluding specific extension images #29980
NO-JIRA: Update extended/networking OWNERS #30026
NO-JIRA: Update image mirroring instructions to avoid using external binary #30060
TRT-2197: use fixed seed for test ordering #29997
NO-JIRA: Get enabled featuregates from metrics endpoint #29952
CORENET-6203: Enable test for LGW L2 #30009
OPRUN-3964: [olmv1] - Remove test [sig-olmv1][OCPFeatureGate:NewOLM] OLMv1 CRDs should be installed migrated to operator-controller repository/OTE #30036
OCPBUGS-56506: Don’t check for remote node subnet BGP routes #30029
OCPNODE-3004: Increase the time to wait until the pod becomes ImagePullBackOff #30030
OCPBUGS-59218: feat(azure): skip metrics collection for ARO HCP hypershift #30006
NO-JIRA: Revert “OCPBUGS-55238: spyglass: hide disruption events for localhost” #30034
TRT-2224: Fix edge case where failures are not counted #30039
TRT-2163: incluster disruption images #30007
OCPNODE-3004: Accept ErrImagePull for non-existent image volume test. #30027
OCPNODE-3454: OCPFeatureGate:SigstoreImageVerification update test on v1 (Cluster)ImagePolicy #29973
CNTRLPLANE-945: Add tests for ExternalOIDC and ExternalOIDCWithUIDAndExtraClaimMappings features #29917
OCPNODE-3004: Add ImageVolume e2e tests #30015
Full changelog

thanos

MON-4299: update to 0.39.2 #163
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Package List

cri-o-1.33.3-5.rhaos4.20.giteaa7ec8.el9
kernel-5.14.0-570.35.1.el9_6
openshift-kubelet-4.20.0-202508152244.p0.g7b25b18.assembly.stream.el9
systemd-252-51.el9_6.1

Full list (554 packages)

NetworkManager-1:1.52.0-5.el9_6
NetworkManager-cloud-setup-1:1.52.0-5.el9_6
NetworkManager-libnm-1:1.52.0-5.el9_6
NetworkManager-ovs-1:1.52.0-5.el9_6
NetworkManager-team-1:1.52.0-5.el9_6
NetworkManager-tui-1:1.52.0-5.el9_6
WALinuxAgent-udev-2.7.0.6-11.el9_6.1
aardvark-dns-2:1.14.0-1.el9
acl-2.3.1-4.el9
adcli-0.9.2-1.el9
afterburn-5.7.0-1.el9
afterburn-dracut-5.7.0-1.el9
alternatives-1.24-2.el9
attr-2.5.1-3.el9
audit-3.1.5-4.el9
audit-libs-3.1.5-4.el9
authselect-1.2.6-3.el9
authselect-libs-1.2.6-3.el9
avahi-libs-0.8-22.el9_6.1
basesystem-11-13.el9
bash-5.1.8-9.el9
bash-completion-1:2.11-5.el9
bc-1.07.1-14.el9
bind-libs-32:9.16.23-31.el9_6
bind-license-32:9.16.23-31.el9_6
bind-utils-32:9.16.23-31.el9_6
binutils-2.35.2-63.el9
binutils-gold-2.35.2-63.el9
bootc-1.1.6-3.el9_6
bootupd-0.2.27-4.el9_6
bsdtar-3.5.3-5.el9_6
bubblewrap-0.4.1-8.el9_5
bzip2-1.0.8-10.el9_5
bzip2-libs-1.0.8-10.el9_5
c-ares-1.19.1-2.el9_4
ca-certificates-2024.2.69_v8.0.303-91.4.el9_4
checkpolicy-3.6-1.el9
chrony-4.6.1-1.el9
cifs-utils-7.1-2.el9
clevis-21-208.el9
clevis-dracut-21-208.el9
clevis-luks-21-208.el9
clevis-systemd-21-208.el9
cloud-utils-growpart-0.33-1.el9
composefs-1.0.8-1.el9
composefs-libs-1.0.8-1.el9
conmon-3:2.1.12-1.el9
conmon-rs-0.6.6-0.rhaos4.18.el9.1
console-login-helper-messages-0.21.3-1.el9
console-login-helper-messages-issuegen-0.21.3-1.el9
console-login-helper-messages-profile-0.21.3-1.el9
container-selinux-4:2.237.0-1.el9_6
containernetworking-plugins-1:1.6.2-2.el9_6
containers-common-2:1-117.el9_6
coreos-installer-0.23.0-1.el9
coreos-installer-bootinfra-0.23.0-1.el9
coreutils-8.32-39.el9
coreutils-common-8.32-39.el9
cpio-2.13-16.el9
cracklib-2.9.6-27.el9
cracklib-dicts-2.9.6-27.el9
cri-o-1.33.3-5.rhaos4.20.giteaa7ec8.el9
cri-tools-1.33.0-1.el9
criu-3.19-1.el9
criu-libs-3.19-1.el9
crun-1.22-1.el9_6
crypto-policies-20250128-1.git5269e22.el9
crypto-policies-scripts-20250128-1.git5269e22.el9
cryptsetup-2.7.2-3.el9_6.1
cryptsetup-libs-2.7.2-3.el9_6.1
curl-7.76.1-31.el9_6.1
cyrus-sasl-gssapi-2.1.27-21.el9
cyrus-sasl-lib-2.1.27-21.el9
dbus-1:1.12.20-8.el9
dbus-broker-28-7.el9
dbus-common-1:1.12.20-8.el9
dbus-libs-1:1.12.20-8.el9
device-mapper-9:1.02.202-6.el9
device-mapper-event-9:1.02.202-6.el9
device-mapper-event-libs-9:1.02.202-6.el9
device-mapper-libs-9:1.02.202-6.el9
device-mapper-multipath-0.8.7-35.el9_6.1
device-mapper-multipath-libs-0.8.7-35.el9_6.1
device-mapper-persistent-data-1.1.0-1.el9
diffutils-3.7-12.el9
dnf-4.14.0-25.el9
dnf-data-4.14.0-25.el9
dnsmasq-2.85-16.el9_4
dosfstools-4.2-3.el9
dracut-057-88.git20250311.el9_6
dracut-network-057-88.git20250311.el9_6
dracut-squash-057-88.git20250311.el9_6
e2fsprogs-1.46.5-7.el9
e2fsprogs-libs-1.46.5-7.el9
elfutils-debuginfod-client-0.192-6.el9_6
elfutils-default-yama-scope-0.192-6.el9_6
elfutils-libelf-0.192-6.el9_6
elfutils-libs-0.192-6.el9_6
ethtool-2:6.11-1.el9
expat-2.5.0-5.el9_6
file-5.39-16.el9
file-libs-5.39-16.el9
filesystem-3.16-5.el9
findutils-1:4.8.0-7.el9
firewalld-filesystem-1.3.4-9.el9_5
flashrom-1.2-10.el9
fstrm-0.6.1-3.el9
fuse-2.9.9-17.el9
fuse-common-3.10.2-9.el9
fuse-libs-2.9.9-17.el9
fuse-overlayfs-1.14-1.el9
fuse3-3.10.2-9.el9
fuse3-libs-3.10.2-9.el9
fwupd-1.9.26-1.el9
fwupd-plugin-flashrom-1.9.26-1.el9
gawk-5.1.0-6.el9
gawk-all-langpacks-5.1.0-6.el9
gdbm-libs-1:1.23-1.el9
gdisk-1.0.7-5.el9
geolite2-city-20191217-6.el9
geolite2-country-20191217-6.el9
gettext-0.21-8.el9
gettext-libs-0.21-8.el9
git-core-2.47.3-1.el9_6
glib2-2.68.4-16.el9_6.2
glibc-2.34-168.el9_6.23
glibc-common-2.34-168.el9_6.23
glibc-gconv-extra-2.34-168.el9_6.23
glibc-minimal-langpack-2.34-168.el9_6.23
glusterfs-6.0-57.4.el9
glusterfs-client-xlators-6.0-57.4.el9
glusterfs-fuse-6.0-57.4.el9
glusterfs-libs-6.0-57.4.el9
gmp-1:6.2.0-13.el9
gnupg2-2.3.3-4.el9
gnutls-3.8.3-6.el9
gobject-introspection-1.68.0-11.el9
gpgme-1.15.1-6.el9
grep-3.6-5.el9
groff-base-1.22.4-10.el9
grub2-common-1:2.06-104.el9_6
grub2-ppc64le-1:2.06-104.el9_6
grub2-ppc64le-modules-1:2.06-104.el9_6
grub2-tools-1:2.06-104.el9_6
grub2-tools-minimal-1:2.06-104.el9_6
gssproxy-0.8.4-7.el9
gzip-1.12-1.el9
hostname-3.23-6.el9
hwdata-0.348-9.18.el9
ignition-2.21.0-4.rhaos4.19.el9
ignition-grub-2.21.0-4.rhaos4.19.el9
ima-evm-utils-1.5-3.el9
info-6.7-15.el9
inih-49-6.el9
initscripts-service-10.11.8-4.el9
ipcalc-1.0.0-5.el9
iproute-6.11.0-1.el9
iproute-tc-6.11.0-1.el9
iptables-libs-1.8.10-11.el9_5
iptables-nft-1.8.10-11.el9_5
iputils-20210202-11.el9_6.1
irqbalance-2:1.9.4-2.el9
iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9
iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9
isns-utils-libs-0.101-4.el9
jansson-2.14-1.el9
jose-14-1.el9
jq-1.6-17.el9_6.2
json-c-0.14-11.el9
json-glib-1.6.6-1.el9
kbd-2.4.0-11.el9
kbd-legacy-2.4.0-11.el9
kbd-misc-2.4.0-11.el9
kernel-5.14.0-570.35.1.el9_6
kernel-core-5.14.0-570.35.1.el9_6
kernel-modules-5.14.0-570.35.1.el9_6
kernel-modules-core-5.14.0-570.35.1.el9_6
kernel-modules-extra-5.14.0-570.35.1.el9_6
kexec-tools-2.0.29-5.el9_6.2
keyutils-1.6.3-1.el9
keyutils-libs-1.6.3-1.el9
kmod-28-10.el9
kmod-libs-28-10.el9
kpartx-0.8.7-35.el9_6.1
krb5-libs-1.21.1-8.el9_6
less-590-5.el9
libacl-2.3.1-4.el9
libaio-0.3.111-13.el9
libarchive-3.5.3-5.el9_6
libassuan-2.5.5-3.el9
libatomic-11.5.0-5.el9_5
libattr-2.5.1-3.el9
libbasicobjects-0.1.1-53.el9
libblkid-2.37.4-21.el9
libbpf-2:1.5.0-1.el9
libbrotli-1.0.9-7.el9_5
libcap-2.48-9.el9_2
libcap-ng-0.8.2-7.el9
libcbor-0.7.0-5.el9
libcollection-0.7.0-53.el9
libcom_err-1.46.5-7.el9
libcomps-0.1.18-1.el9
libcurl-7.76.1-31.el9_6.1
libdaemon-0.14-23.el9
libdb-5.3.28-57.el9_6
libdhash-0.5.0-53.el9
libdnf-0.69.0-13.el9
libdnf-plugin-subscription-manager-1.29.45.1-1.el9_6
libeconf-0.4.1-4.el9
libedit-3.1-38.20210216cvs.el9
libev-4.33-6.el9
libevent-2.1.12-8.el9_4
libfdisk-2.37.4-21.el9
libffi-3.4.2-8.el9
libfido2-1.13.0-2.el9
libgcc-11.5.0-5.el9_5
libgcrypt-1.10.0-11.el9
libgomp-11.5.0-5.el9_5
libgpg-error-1.42-5.el9
libgudev-237-1.el9
libgusb-0.3.8-2.el9
libibverbs-54.0-1.el9
libicu-67.1-10.el9_6
libidn2-2.3.0-7.el9
libini_config-1.3.1-53.el9
libipa_hbac-2.9.6-4.el9_6.2
libjcat-0.1.6-3.el9
libjose-14-1.el9
libkcapi-1.4.0-2.el9
libkcapi-hmaccalc-1.4.0-2.el9
libksba-1.5.1-7.el9
libldb-4.21.3-7.el9_6
libluksmeta-9-12.el9
libmaxminddb-1.5.2-4.el9
libmicrohttpd-1:0.9.72-5.el9
libmnl-1.0.4-16.el9_4
libmodulemd-2.13.0-2.el9
libmount-2.37.4-21.el9
libndp-1.9-1.el9
libnet-1.2-7.el9
libnetfilter_conntrack-1.0.9-1.el9
libnfnetlink-1.0.1-23.el9_5
libnfsidmap-1:2.5.4-34.el9
libnftnl-1.2.6-4.el9_4
libnghttp2-1.43.0-6.el9
libnl3-3.11.0-1.el9
libnl3-cli-3.11.0-1.el9
libnvme-1.11.1-1.el9
libpath_utils-0.2.1-53.el9
libpcap-14:1.10.0-4.el9
libpkgconf-1.7.3-10.el9
libpsl-0.21.1-5.el9
libpwquality-1.4.4-8.el9
libref_array-0.1.5-53.el9
librepo-1.14.5-2.el9
libreport-filesystem-2.15.2-6.el9
librhsm-0.0.3-9.el9
librtas-2.0.6-1.el9
libseccomp-2.5.2-2.el9
libselinux-3.6-3.el9
libselinux-utils-3.6-3.el9
libsemanage-3.6-5.el9_6
libsepol-3.6-2.el9
libservicelog-1.1.19-4.el9
libsigsegv-2.13-4.el9
libslirp-4.4.0-8.el9
libsmartcols-2.37.4-21.el9
libsmbclient-4.21.3-7.el9_6
libsolv-0.7.24-3.el9
libss-1.46.5-7.el9
libssh-0.10.4-13.el9
libssh-config-0.10.4-13.el9
libsss_certmap-2.9.6-4.el9_6.2
libsss_idmap-2.9.6-4.el9_6.2
libsss_nss_idmap-2.9.6-4.el9_6.2
libsss_sudo-2.9.6-4.el9_6.2
libstdc++-11.5.0-5.el9_5
libtalloc-2.4.2-1.el9
libtasn1-4.16.0-9.el9
libtdb-1.4.12-1.el9
libteam-1.31-16.el9_1
libtevent-0.16.1-1.el9
libtirpc-1.3.3-9.el9
libtool-ltdl-2.4.6-46.el9
libunistring-0.9.10-15.el9
liburing-2.5-1.el9
libusbx-1.0.26-1.el9
libuser-0.63-16.el9
libutempter-1.2.1-6.el9
libuuid-2.37.4-21.el9
libuv-1:1.42.0-2.el9_4
libverto-0.3.2-3.el9
libverto-libev-0.3.2-3.el9
libwbclient-4.21.3-7.el9_6
libxcrypt-4.4.18-3.el9
libxml2-2.9.13-12.el9_6
libxmlb-0.3.10-1.el9
libyaml-0.2.5-7.el9
libzstd-1.5.5-1.el9
linux-firmware-20250716-151.3.el9_6
linux-firmware-whence-20250716-151.3.el9_6
lmdb-libs-0.9.29-3.el9
logrotate-3.18.0-9.el9
lsof-4.94.0-3.el9
lua-libs-5.4.4-4.el9
luksmeta-9-12.el9
lvm2-9:2.03.28-6.el9
lvm2-libs-9:2.03.28-6.el9
lz4-libs-1.9.3-5.el9
lzo-2.10-7.el9
mdadm-4.3-4.el9_5
mpfr-4.1.0-7.el9
nano-5.6.1-7.el9
ncurses-6.2-10.20210508.el9_6.2
ncurses-base-6.2-10.20210508.el9_6.2
ncurses-libs-6.2-10.20210508.el9_6.2
net-tools-2.0-0.64.20160912git.el9
netavark-2:1.14.1-1.el9_6
nettle-3.10.1-1.el9
newt-0.52.21-11.el9
nfs-utils-1:2.5.4-34.el9
nftables-1:1.0.9-3.el9
nmap-ncat-3:7.92-3.el9
nmstate-2.2.48-2.el9_6
npth-1.6-8.el9
nss-altfiles-2.18.1-20.el9
numactl-libs-2.0.19-1.el9
nvme-cli-2.11-6.el9_6
oniguruma-6.9.6-1.el9.6
openldap-2.6.8-4.el9
openshift-clients-4.20.0-202508150943.p0.g1c54ec0.assembly.stream.el9
openshift-kubelet-4.20.0-202508152244.p0.g7b25b18.assembly.stream.el9
openssh-8.7p1-45.el9
openssh-clients-8.7p1-45.el9
openssh-server-8.7p1-45.el9
openssl-1:3.2.2-6.el9_5.1
openssl-fips-provider-3.0.7-6.el9_5
openssl-fips-provider-so-3.0.7-6.el9_5
openssl-libs-1:3.2.2-6.el9_5.1
openvswitch-selinux-extra-policy-1.0-39.el9fdp
openvswitch3.5-3.5.1-33.el9fdp
os-prober-1.77-12.el9_5
ose-aws-ecr-image-credential-provider-4.19.0-202506111541.p0.g425c1c5.assembly.stream.el9
ose-azure-acr-image-credential-provider-4.20.0-202507171059.p0.gd469d04.assembly.stream.el9
ose-gcp-gcr-image-credential-provider-4.20.0-202508130315.p0.g0634bec.assembly.stream.el9
ostree-2025.1-1.el9
ostree-grub2-2025.1-1.el9
ostree-libs-2025.1-1.el9
p11-kit-0.25.3-3.el9_5
p11-kit-trust-0.25.3-3.el9_5
pam-1.5.1-25.el9_6
passt-0^20250217.ga1e48a0-10.el9_6
passt-selinux-0^20250217.ga1e48a0-10.el9_6
passwd-0.80-12.el9
pciutils-3.7.0-7.el9
pciutils-libs-3.7.0-7.el9
pcre-8.44-4.el9
pcre2-10.40-6.el9
pcre2-syntax-10.40-6.el9
perl-AutoLoader-5.74-481.1.el9_6
perl-B-1.80-481.1.el9_6
perl-Carp-1.50-460.el9
perl-Class-Struct-0.66-481.1.el9_6
perl-Data-Dumper-2.174-462.el9
perl-Digest-1.19-4.el9
perl-Digest-MD5-2.58-4.el9
perl-Encode-4:3.08-462.el9
perl-Errno-1.30-481.1.el9_6
perl-Exporter-5.74-461.el9
perl-Fcntl-1.13-481.1.el9_6
perl-File-Basename-2.85-481.1.el9_6
perl-File-Path-2.18-4.el9
perl-File-Temp-1:0.231.100-4.el9
perl-File-stat-1.09-481.1.el9_6
perl-FileHandle-2.03-481.1.el9_6
perl-Getopt-Long-1:2.52-4.el9
perl-Getopt-Std-1.12-481.1.el9_6
perl-HTTP-Tiny-0.076-462.el9
perl-IO-1.43-481.1.el9_6
perl-IO-Socket-IP-0.41-5.el9
perl-IO-Socket-SSL-2.073-2.el9
perl-IPC-Open3-1.21-481.1.el9_6
perl-MIME-Base64-3.16-4.el9
perl-Mozilla-CA-20200520-6.el9
perl-NDBM_File-1.15-481.1.el9_6
perl-Net-SSLeay-1.94-1.el9
perl-POSIX-1.94-481.1.el9_6
perl-PathTools-3.78-461.el9
perl-Pod-Escapes-1:1.07-460.el9
perl-Pod-Perldoc-3.28.01-461.el9
perl-Pod-Simple-1:3.42-4.el9
perl-Pod-Usage-4:2.01-4.el9
perl-Scalar-List-Utils-4:1.56-462.el9
perl-SelectSaver-1.02-481.1.el9_6
perl-Socket-4:2.031-4.el9
perl-Storable-1:3.21-460.el9
perl-Symbol-1.08-481.1.el9_6
perl-Term-ANSIColor-5.01-461.el9
perl-Term-Cap-1.17-460.el9
perl-Text-ParseWords-3.30-460.el9
perl-Text-Tabs+Wrap-2013.0523-460.el9
perl-Time-Local-2:1.300-7.el9
perl-URI-5.09-3.el9
perl-base-2.27-481.1.el9_6
perl-constant-1.33-461.el9
perl-if-0.60.800-481.1.el9_6
perl-interpreter-4:5.32.1-481.1.el9_6
perl-libnet-3.13-4.el9
perl-libs-4:5.32.1-481.1.el9_6
perl-mro-1.23-481.1.el9_6
perl-overload-1.31-481.1.el9_6
perl-overloading-0.02-481.1.el9_6
perl-parent-1:0.238-460.el9
perl-podlators-1:4.14-460.el9
perl-subs-1.03-481.1.el9_6
perl-vars-1.05-481.1.el9_6
pigz-2.8-1.el9
pkgconf-1.7.3-10.el9
pkgconf-m4-1.7.3-10.el9
pkgconf-pkg-config-1.7.3-10.el9
podman-5:5.4.0-12.el9_6
policycoreutils-3.6-2.1.el9
policycoreutils-python-utils-3.6-2.1.el9
polkit-0.117-13.el9
polkit-libs-0.117-13.el9
polkit-pkla-compat-0.1-21.el9
popt-1.18-8.el9
powerpc-utils-core-1.3.13-1.el9
ppc64-diag-rtas-2.7.9-6.el9
procps-ng-3.3.17-14.el9
protobuf-c-1.3.3-13.el9
psmisc-23.4-3.el9
publicsuffix-list-dafsa-20210518-3.el9
python-unversioned-command-3.9.21-2.el9_6.1
python3-3.9.21-2.el9_6.1
python3-audit-3.1.5-4.el9
python3-chardet-4.0.0-5.el9
python3-cloud-what-1.29.45.1-1.el9_6
python3-dateutil-1:2.8.1-7.el9
python3-dbus-1.2.18-2.el9
python3-decorator-4.4.2-6.el9
python3-distro-1.5.0-7.el9
python3-dnf-4.14.0-25.el9
python3-dnf-plugin-versionlock-4.3.0-20.el9
python3-dnf-plugins-core-4.3.0-20.el9
python3-gobject-base-3.40.1-6.el9
python3-gobject-base-noarch-3.40.1-6.el9
python3-gpg-1.15.1-6.el9
python3-hawkey-0.69.0-13.el9
python3-idna-2.10-7.el9_4.1
python3-iniparse-0.4-45.el9
python3-inotify-0.9.6-25.el9
python3-libcomps-0.1.18-1.el9
python3-libdnf-0.69.0-13.el9
python3-librepo-1.14.5-2.el9
python3-libs-3.9.21-2.el9_6.1
python3-libselinux-3.6-3.el9
python3-libsemanage-3.6-5.el9_6
python3-pip-wheel-21.3.1-1.el9
python3-policycoreutils-3.6-2.1.el9
python3-pysocks-1.7.1-12.el9
python3-pyyaml-5.4.1-6.el9
python3-requests-2.25.1-10.el9_6
python3-rpm-4.16.1.3-37.el9
python3-setools-4.4.4-1.el9
python3-setuptools-53.0.0-13.el9_6.1
python3-setuptools-wheel-53.0.0-13.el9_6.1
python3-six-1.15.0-9.el9
python3-subscription-manager-rhsm-1.29.45.1-1.el9_6
python3-systemd-234-19.el9
python3-urllib3-1.26.5-6.el9
qemu-guest-agent-17:9.1.0-15.el9_6.7
quota-1:4.09-4.el9
quota-nls-1:4.09-4.el9
rdma-core-54.0-1.el9
readline-8.1-4.el9
redhat-release-9.6-0.1.el9
redhat-release-eula-9.6-0.1.el9
rpcbind-1.2.6-7.el9
rpm-4.16.1.3-37.el9
rpm-build-libs-4.16.1.3-37.el9
rpm-libs-4.16.1.3-37.el9
rpm-ostree-2025.6-5.el9_6
rpm-ostree-libs-2025.6-5.el9_6
rpm-plugin-selinux-4.16.1.3-37.el9
rpm-plugin-systemd-inhibit-4.16.1.3-37.el9
rpm-sign-libs-4.16.1.3-37.el9
rsync-3.2.5-3.el9
runc-4:1.2.4-2.el9
samba-client-libs-4.21.3-7.el9_6
samba-common-4.21.3-7.el9_6
samba-common-libs-4.21.3-7.el9_6
sed-4.8-9.el9
selinux-policy-38.1.53-5.el9_6
selinux-policy-targeted-38.1.53-5.el9_6
servicelog-1.1.16-1.el9
setup-2.13.7-10.el9
sg3_utils-1.47-10.el9
sg3_utils-libs-1.47-10.el9
shadow-utils-2:4.9-12.el9
shadow-utils-subid-2:4.9-12.el9
shared-mime-info-2.1-5.el9
skopeo-2:1.18.1-2.el9_6
slang-2.3.2-11.el9
slirp4netns-1.3.2-1.el9
snappy-1.1.8-8.el9
socat-1.7.4.1-6.el9_6.1
sqlite-libs-3.34.1-8.el9_6
squashfs-tools-4.4-10.git1.el9
ssh-key-dir-0.1.4-1.el9
sssd-2.9.6-4.el9_6.2
sssd-ad-2.9.6-4.el9_6.2
sssd-client-2.9.6-4.el9_6.2
sssd-common-2.9.6-4.el9_6.2
sssd-common-pac-2.9.6-4.el9_6.2
sssd-ipa-2.9.6-4.el9_6.2
sssd-krb5-2.9.6-4.el9_6.2
sssd-krb5-common-2.9.6-4.el9_6.2
sssd-ldap-2.9.6-4.el9_6.2
sssd-nfs-idmap-2.9.6-4.el9_6.2
sssd-proxy-2.9.6-4.el9_6.2
stalld-1.19.8-2.el9_6
strace-6.12-1.el9
subscription-manager-1.29.45.1-1.el9_6
subscription-manager-rhsm-certificates-20220623-1.el9
sudo-1.9.5p2-10.el9_6.1
systemd-252-51.el9_6.1
systemd-journal-remote-252-51.el9_6.1
systemd-libs-252-51.el9_6.1
systemd-pam-252-51.el9_6.1
systemd-rpm-macros-252-51.el9_6.1
systemd-udev-252-51.el9_6.1
tar-2:1.34-7.el9
teamd-1.31-16.el9_1
tmux-3.2a-5.el9
toolbox-0.1.2-1.rhaos4.19.el9
tpm2-tools-5.2-4.el9
tpm2-tss-3.2.3-1.el9
tzdata-2025b-1.el9
unbound-libs-1.16.2-19.el9_6.1
usermode-1.114-6.el9
userspace-rcu-0.12.1-6.el9
util-linux-2.37.4-21.el9
util-linux-core-2.37.4-21.el9
vim-minimal-2:8.2.2637-22.el9_6
virt-what-1.27-1.el9
which-2.21-30.el9_6
xfsprogs-6.4.0-5.el9
xz-5.2.5-8.el9_0
xz-libs-5.2.5-8.el9_0
yajl-2.1.0-25.el9
zlib-1.2.11-40.el9
zram-generator-0.3.2-7.el9
zstd-1.5.5-1.el9

Changed:

NetworkManager 1:1.52.0-4.el9_6 → 1:1.52.0-5.el9_6
NetworkManager-cloud-setup 1:1.52.0-4.el9_6 → 1:1.52.0-5.el9_6
NetworkManager-libnm 1:1.52.0-4.el9_6 → 1:1.52.0-5.el9_6
NetworkManager-ovs 1:1.52.0-4.el9_6 → 1:1.52.0-5.el9_6
NetworkManager-team 1:1.52.0-4.el9_6 → 1:1.52.0-5.el9_6
NetworkManager-tui 1:1.52.0-4.el9_6 → 1:1.52.0-5.el9_6
WALinuxAgent-udev 2.7.0.6-11.el9 → 2.7.0.6-11.el9_6.1
bind-libs 32:9.16.23-29.el9_6 → 32:9.16.23-31.el9_6
bind-license 32:9.16.23-29.el9_6 → 32:9.16.23-31.el9_6
bind-utils 32:9.16.23-29.el9_6 → 32:9.16.23-31.el9_6
cri-o 1.33.2-9.rhaos4.20.gitac52d40.el9 → 1.33.3-5.rhaos4.20.giteaa7ec8.el9
crun 1.21-1.el9_6 → 1.22-1.el9_6
cryptsetup 2.7.2-3.el9_5 → 2.7.2-3.el9_6.1
cryptsetup-libs 2.7.2-3.el9_5 → 2.7.2-3.el9_6.1
curl 7.76.1-31.el9 → 7.76.1-31.el9_6.1
glibc 2.34-168.el9_6.20 → 2.34-168.el9_6.23
glibc-common 2.34-168.el9_6.20 → 2.34-168.el9_6.23
glibc-gconv-extra 2.34-168.el9_6.20 → 2.34-168.el9_6.23
glibc-minimal-langpack 2.34-168.el9_6.20 → 2.34-168.el9_6.23
kernel 5.14.0-570.30.1.el9_6 → 5.14.0-570.35.1.el9_6
kernel-core 5.14.0-570.30.1.el9_6 → 5.14.0-570.35.1.el9_6
kernel-modules 5.14.0-570.30.1.el9_6 → 5.14.0-570.35.1.el9_6
kernel-modules-core 5.14.0-570.30.1.el9_6 → 5.14.0-570.35.1.el9_6
kernel-modules-extra 5.14.0-570.30.1.el9_6 → 5.14.0-570.35.1.el9_6
kexec-tools 2.0.29-5.el9 → 2.0.29-5.el9_6.2
libcurl 7.76.1-31.el9 → 7.76.1-31.el9_6.1
libicu 67.1-9.el9 → 67.1-10.el9_6
libxml2 2.9.13-10.el9_6 → 2.9.13-12.el9_6
linux-firmware 20250604-151.2.el9_6 → 20250716-151.3.el9_6
linux-firmware-whence 20250604-151.2.el9_6 → 20250716-151.3.el9_6
ncurses 6.2-10.20210508.el9 → 6.2-10.20210508.el9_6.2
ncurses-base 6.2-10.20210508.el9 → 6.2-10.20210508.el9_6.2
ncurses-libs 6.2-10.20210508.el9 → 6.2-10.20210508.el9_6.2
nmstate 2.2.45-1.el9_6 → 2.2.48-2.el9_6
nvme-cli 2.11-5.el9 → 2.11-6.el9_6
openshift-clients 4.20.0-202507220613.p0.gea45cd5.assembly.stream.el9 → 4.20.0-202508150943.p0.g1c54ec0.assembly.stream.el9
openshift-kubelet 4.20.0-202507171059.p0.gb94367c.assembly.stream.el9 → 4.20.0-202508152244.p0.g7b25b18.assembly.stream.el9
openvswitch3.5 3.5.0-19.el9fdp → 3.5.1-33.el9fdp
ose-gcp-gcr-image-credential-provider 4.20.0-202507221915.p0.ge217ae2.assembly.stream.el9 → 4.20.0-202508130315.p0.g0634bec.assembly.stream.el9
passt 0^20250217.ga1e48a0-9.el9_6 → 0^20250217.ga1e48a0-10.el9_6
passt-selinux 0^20250217.ga1e48a0-9.el9_6 → 0^20250217.ga1e48a0-10.el9_6
perl-AutoLoader 5.74-481.el9 → 5.74-481.1.el9_6
perl-B 1.80-481.el9 → 1.80-481.1.el9_6
perl-Class-Struct 0.66-481.el9 → 0.66-481.1.el9_6
perl-Errno 1.30-481.el9 → 1.30-481.1.el9_6
perl-Fcntl 1.13-481.el9 → 1.13-481.1.el9_6
perl-File-Basename 2.85-481.el9 → 2.85-481.1.el9_6
perl-File-stat 1.09-481.el9 → 1.09-481.1.el9_6
perl-FileHandle 2.03-481.el9 → 2.03-481.1.el9_6
perl-Getopt-Std 1.12-481.el9 → 1.12-481.1.el9_6
perl-IO 1.43-481.el9 → 1.43-481.1.el9_6
perl-IPC-Open3 1.21-481.el9 → 1.21-481.1.el9_6
perl-NDBM_File 1.15-481.el9 → 1.15-481.1.el9_6
perl-POSIX 1.94-481.el9 → 1.94-481.1.el9_6
perl-SelectSaver 1.02-481.el9 → 1.02-481.1.el9_6
perl-Symbol 1.08-481.el9 → 1.08-481.1.el9_6
perl-base 2.27-481.el9 → 2.27-481.1.el9_6
perl-if 0.60.800-481.el9 → 0.60.800-481.1.el9_6
perl-interpreter 4:5.32.1-481.el9 → 4:5.32.1-481.1.el9_6
perl-libs 4:5.32.1-481.el9 → 4:5.32.1-481.1.el9_6
perl-mro 1.23-481.el9 → 1.23-481.1.el9_6
perl-overload 1.31-481.el9 → 1.31-481.1.el9_6
perl-overloading 0.02-481.el9 → 0.02-481.1.el9_6
perl-subs 1.03-481.el9 → 1.03-481.1.el9_6
perl-vars 1.05-481.el9 → 1.05-481.1.el9_6
python3-requests 2.25.1-9.el9 → 2.25.1-10.el9_6
qemu-guest-agent 17:9.1.0-15.el9_6.4 → 17:9.1.0-15.el9_6.7
sqlite-libs 3.34.1-7.el9_3 → 3.34.1-8.el9_6
stalld 1.19.6-1.el9 → 1.19.8-2.el9_6
which 2.21-29.el9 → 2.21-30.el9_6

Removed:

conntrack-tools 1.4.7-4.el9_5
libnetfilter_cthelper 1.0.0-22.el9
libnetfilter_cttimeout 1.0.0-19.el9
libnetfilter_queue 1.0.5-1.el9

Extensions

Full list (133 packages)

NetworkManager-libreswan-1.2.24-1.el9.ppc64le
bison-3.7.4-5.el9.ppc64le
corosync-3.1.9-2.el9_6.ppc64le
corosynclib-3.1.9-2.el9_6.ppc64le
cpp-11.5.0-5.el9_5.ppc64le
elfutils-libelf-devel-0.192-6.el9_6.ppc64le
fence-agents-all-4.10.0-86.el9_6.8.ppc64le
fence-agents-amt-ws-4.10.0-86.el9_6.8.noarch
fence-agents-apc-4.10.0-86.el9_6.8.noarch
fence-agents-apc-snmp-4.10.0-86.el9_6.8.noarch
fence-agents-bladecenter-4.10.0-86.el9_6.8.noarch
fence-agents-brocade-4.10.0-86.el9_6.8.noarch
fence-agents-cisco-mds-4.10.0-86.el9_6.8.noarch
fence-agents-cisco-ucs-4.10.0-86.el9_6.8.noarch
fence-agents-common-4.10.0-86.el9_6.8.noarch
fence-agents-drac5-4.10.0-86.el9_6.8.noarch
fence-agents-eaton-snmp-4.10.0-86.el9_6.8.noarch
fence-agents-emerson-4.10.0-86.el9_6.8.noarch
fence-agents-eps-4.10.0-86.el9_6.8.noarch
fence-agents-heuristics-ping-4.10.0-86.el9_6.8.noarch
fence-agents-hpblade-4.10.0-86.el9_6.8.noarch
fence-agents-ibmblade-4.10.0-86.el9_6.8.noarch
fence-agents-ifmib-4.10.0-86.el9_6.8.noarch
fence-agents-ilo-moonshot-4.10.0-86.el9_6.8.noarch
fence-agents-ilo-mp-4.10.0-86.el9_6.8.noarch
fence-agents-ilo-ssh-4.10.0-86.el9_6.8.noarch
fence-agents-ilo2-4.10.0-86.el9_6.8.noarch
fence-agents-intelmodular-4.10.0-86.el9_6.8.noarch
fence-agents-ipdu-4.10.0-86.el9_6.8.noarch
fence-agents-ipmilan-4.10.0-86.el9_6.8.noarch
fence-agents-kdump-4.10.0-86.el9_6.8.ppc64le
fence-agents-lpar-4.10.0-86.el9_6.8.noarch
fence-agents-mpath-4.10.0-86.el9_6.8.noarch
fence-agents-redfish-4.10.0-86.el9_6.8.ppc64le
fence-agents-rhevm-4.10.0-86.el9_6.8.noarch
fence-agents-rsa-4.10.0-86.el9_6.8.noarch
fence-agents-rsb-4.10.0-86.el9_6.8.noarch
fence-agents-sbd-4.10.0-86.el9_6.8.noarch
fence-agents-scsi-4.10.0-86.el9_6.8.noarch
fence-agents-vmware-rest-4.10.0-86.el9_6.8.noarch
fence-agents-vmware-soap-4.10.0-86.el9_6.8.noarch
fence-agents-wti-4.10.0-86.el9_6.8.noarch
flex-2.6.4-9.el9.ppc64le
gcc-11.5.0-5.el9_5.ppc64le
glibc-devel-2.34-168.el9_6.23.ppc64le
gnutls-dane-3.8.3-6.el9.ppc64le
gnutls-utils-3.8.3-6.el9.ppc64le
ipmitool-1.8.18-27.el9.ppc64le
kernel-5.14.0-570.35.1.el9_6.ppc64le
kernel-core-5.14.0-570.35.1.el9_6.ppc64le
kernel-devel-5.14.0-570.35.1.el9_6.ppc64le
kernel-headers-5.14.0-570.35.1.el9_6.ppc64le
kernel-modules-5.14.0-570.35.1.el9_6.ppc64le
kernel-modules-extra-5.14.0-570.35.1.el9_6.ppc64le
krb5-pkinit-1.21.1-8.el9_6.ppc64le
krb5-workstation-1.21.1-8.el9_6.ppc64le
ldns-1.7.1-12.el9.ppc64le
libasan-11.5.0-5.el9_5.ppc64le
libkadm5-1.21.1-8.el9_6.ppc64le
libknet1-1.28-1.el9.ppc64le
libknet1-compress-bzip2-plugin-1.28-1.el9.ppc64le
libknet1-compress-lz4-plugin-1.28-1.el9.ppc64le
libknet1-compress-lzma-plugin-1.28-1.el9.ppc64le
libknet1-compress-lzo2-plugin-1.28-1.el9.ppc64le
libknet1-compress-plugins-all-1.28-1.el9.ppc64le
libknet1-compress-zlib-plugin-1.28-1.el9.ppc64le
libknet1-compress-zstd-plugin-1.28-1.el9.ppc64le
libknet1-crypto-nss-plugin-1.28-1.el9.ppc64le
libknet1-crypto-openssl-plugin-1.28-1.el9.ppc64le
libknet1-crypto-plugins-all-1.28-1.el9.ppc64le
libknet1-plugins-all-1.28-1.el9.ppc64le
libmpc-1.2.1-4.el9.ppc64le
libnozzle1-1.28-1.el9.ppc64le
libqb-2.0.8-1.el9.ppc64le
libreswan-5.2-1.el9fdp.ppc64le
libubsan-11.5.0-5.el9_5.ppc64le
libwsman1-2.6.8-23.el9.ppc64le
libxcrypt-devel-4.4.18-3.el9.ppc64le
libxslt-1.1.34-13.el9_6.ppc64le
libzstd-devel-1.5.5-1.el9.ppc64le
lm_sensors-libs-3.6.0-10.el9.ppc64le
m4-1.4.19-1.el9.ppc64le
make-1:4.3-8.el9.ppc64le
net-snmp-libs-1:5.9.1-17.el9.ppc64le
net-snmp-utils-1:5.9.1-17.el9.ppc64le
nspr-4.35.0-17.el9_2.ppc64le
nss-3.101.0-10.el9_2.ppc64le
nss-softokn-3.101.0-10.el9_2.ppc64le
nss-softokn-freebl-3.101.0-10.el9_2.ppc64le
nss-sysinit-3.101.0-10.el9_2.ppc64le
nss-tools-3.101.0-10.el9_2.ppc64le
nss-util-3.101.0-10.el9_2.ppc64le
openssl-devel-1:3.2.2-6.el9_5.1.ppc64le
openvswitch3.5-ipsec-3.5.1-33.el9fdp.ppc64le
openwsman-python3-2.6.8-23.el9.ppc64le
pacemaker-2.1.9-1.2.el9_6.ppc64le
pacemaker-cli-2.1.9-1.2.el9_6.ppc64le
pacemaker-cluster-libs-2.1.9-1.2.el9_6.ppc64le
pacemaker-libs-2.1.9-1.2.el9_6.ppc64le
pacemaker-schemas-2.1.9-1.2.el9_6.noarch
pcp-conf-6.3.7-1.el9_6.ppc64le
pcp-libs-6.3.7-1.el9_6.ppc64le
pcs-0.11.9-2.el9_6.1.ppc64le
perl-TimeDate-1:2.33-6.el9.noarch
protobuf-3.14.0-16.el9.ppc64le
python3-cffi-1.14.5-5.el9.ppc64le
python3-cryptography-36.0.1-4.el9.ppc64le
python3-lxml-4.6.5-3.el9.ppc64le
python3-openvswitch3.5-3.5.1-33.el9fdp.ppc64le
python3-ply-3.11-14.el9.noarch
python3-pycparser-2.20-6.el9.noarch
python3-pycurl-7.43.0.6-8.el9.ppc64le
python3-pyparsing-2.4.7-9.el9.noarch
python3-tornado-6.4.2-2.el9_6.2.ppc64le
redhat-logos-90.5-1.el9_6.1.ppc64le
resource-agents-4.10.0-71.el9_6.6.ppc64le
ruby-3.0.7-165.el9_5.ppc64le
ruby-default-gems-3.0.7-165.el9_5.noarch
ruby-libs-3.0.7-165.el9_5.ppc64le
rubygem-bigdecimal-3.0.0-165.el9_5.ppc64le
rubygem-bundler-2.2.33-165.el9_5.noarch
rubygem-io-console-0.5.7-165.el9_5.ppc64le
rubygem-json-2.5.1-165.el9_5.ppc64le
rubygem-psych-3.3.2-165.el9_5.ppc64le
rubygem-rdoc-6.3.4.1-165.el9_5.noarch
rubygem-rexml-3.2.5-165.el9_5.noarch
rubygems-3.2.33-165.el9_5.noarch
sbd-1.5.2-1.el9.ppc64le
sysstat-12.5.4-9.el9.ppc64le
telnet-1:0.17-85.el9.ppc64le
usbguard-1.0.0-16.el9.ppc64le
usbguard-selinux-1.0.0-16.el9.noarch
zlib-devel-1.2.11-40.el9.ppc64le

Red Hat Enterprise Linux CoreOS base layer: 9.6.20250815-0

View changelog in Markdown or change previous release:

Source code for this page located on github