Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.20.0-ec.5-aarch64

Team Approvals:

Tests:

• Informing jobs
  • aws-ovn-arm64 Succeeded periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-e2e-aws-ovn-arm64
  • ovn-upgrade Succeeded periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-e2e-upgrade-aws-ovn-arm64

Upgrades from:

• 4.20.0-ec.4 - Success

Upgrades to:

• 4.20.0-ec.6 (changes) - F F F F

---

Loading changelog, this may take a while ...

Changes from 4.20.0-ec.4

Created: 2025-07-31 10:08:32 +0000 UTC

Image Digest: sha256:6868aa579d1b25d028fdc317ad7409645f407aa1b5385e58f6a979cc9933c29a

Components

• Kubectl upgraded from 1.32.1 to 1.33.3
• Kubernetes upgraded from 1.32.6 to 1.33.2
• Kubernetes Tests upgraded from 1.32.5 to 1.33.2
• Red Hat Enterprise Linux CoreOS upgraded from 9.6.20250707-1 to 9.6.20250726-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
AWSEFSDriverVolumeMetrics (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GCPLabelsTags (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
HardwareSpeed (3 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
PersistentIPsForVirtualization (12 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MutatingAdmissionPolicy (3 tests)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
SigstoreImageVerification (5 tests)	Disabled	Disabled	Disabled (Changed)	Disabled (Changed)	Disabled (Changed)	Disabled (Changed)
DualReplica (4 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
ExternalSnapshotMetadata (0 tests)			Enabled (New)	Enabled (New)
ImageVolume (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NoRegistryClusterOperations (0 tests)				Enabled (New)

Rebuilt images without code change

• apiserver-network-proxy git 26a4e67d sha256:b9fb7bab8a1dacf05992fe0d1f18dc45ca9d8f15fe994620fe7476b40dfd9fbf
• aws-karpenter-provider-aws git b37141b0 sha256:bdd8caac29964bb7716a1e3346585a0dec2649ce5fb5826b190f6af95902871e
• aws-kms-encryption-provider git 088dcaf7 sha256:5392a410cdbf401ad66f879597eeda3926937358b95ea3eff7cb2b0fc21884e1
• aws-pod-identity-webhook git a2ecb150 sha256:b69d3515aa87b7549e470d2cf8306cc584990790b2f639819d833e935835957e
• azure-cloud-controller-manager git d469d04e sha256:4c15f5f12e12f3e52b14917bab69cca034945a9226bfef055e313e92a737ae60
• azure-cloud-node-manager git d469d04e sha256:36af2edce17c245f975b62e20f6302231fa5f6ab530efcbd870de9f953d2fb50
• azure-kms-encryption-provider git ea0b9944 sha256:581f18091d5c7dc076ac7f94762ff9caee55036a46b893f27405b48506bc578f
• azure-workload-identity-webhook git 88b18175 sha256:2728c0d80716328912ca97878455dc613ac6e1107cce09c7ca88c0116e950756
• baremetal-cluster-api-controllers git f782ba74 sha256:eac300e49d7ba9351d21434367c7dc2b2eb8d56156a3547e27514bd9641c7731
• baremetal-machine-controllers git fb678fec sha256:1f60cbb7bffc62a68ea1bb7e01f2cdcfd099ef6f8990a21a86b5f081f0500579
• cluster-autoscaler git 74faa33e sha256:3452f88b8b49dd2a0eb0b6ef74d75cb005f599da989ea082a1c9f0d577265df6
• cluster-autoscaler-operator git 4eb64d55 sha256:dfd7c0f7ea5e5d913c10f5ce2d2768f43941c5025a8bbeec546d59c3bfe81c2e
• cluster-baremetal-operator git c6838e27 sha256:56e0e8d4b4f0cce83bf52c95aeb58f5a7ff6267e942799e336032acdcaa4c2a9
• cluster-bootstrap git 74abc555 sha256:a60e46564ad6a0578a6597802e79247994d80d5fc38402c569479919c5a64ae7
• cluster-csi-snapshot-controller-operator git ef2152f5 sha256:318ea98bdd5b589372ef5be077e867d8b58e5e000e9d54858631adeaf8022bd3
• cluster-image-registry-operator git b06a3d85 sha256:b95881394dc27384a034089e470e3dc32e4a7592f2634d2d0286d3bf8498c39f
• cluster-kube-cluster-api-operator git 3ec30377 sha256:f37185317609065807832bdcc25a5096e5509f798011046b561350c43bc522c9
• cluster-kube-storage-version-migrator-operator git 436cf857 sha256:3f47229523caacdf4df532e4a81ea5eb515cf19d3052ea8c1ac17b737a6e0b3c
• cluster-openshift-apiserver-operator git 6867bc1c sha256:9d9046f2e9feeb9a4515d820e84831d5cef9a55f210eafe58a18ea90fe71078f
• configmap-reloader git 2438d7c8 sha256:644f31e40ed38ab8966cf9cc2f8337e4a5e3ea3072c75e3d8c14a1a692affa0e
• coredns git a69279e3 sha256:5711b44dc130714d14cbba9f7fb9144379dc26507978fb4fe65e21226128571e
• docker-builder git ff595e4b sha256:3c81d71f91611166c6ac04aa3d6659f7e67fffecaa62a4292a260221d7f7f008
• docker-registry git aa11fcc8 sha256:f4cf924faaf078b36c775b0098edb19febc4833982f5cdc53f909cc98772dffe
• driver-toolkit git 9d55fd1a sha256:370de396e60b983398b4bc93a523fcae930bc12d04e08e7c6f038856e6481297
• egress-router-cni git 85353bb9 sha256:6cb9a3aac7aef8e95d59a50444f6cfc164b088d888b5ee7f4c4d417e1bf05ab4
• gcp-pd-csi-driver git 9e7c68ce sha256:0f1ef9e15d4f097112323d966f1190128a626cdfdb83e9d2e5eff4b58e973f54
• gcp-pd-csi-driver-operator git 6907007f sha256:8eeadfaa34080c8b87e1bb222b3f14823676db72570ba51e67a0d5c4f0e80a9f
• gcp-workload-identity-federation-webhook git b36788ed sha256:eeb4e0de1f6678b14cfa2ce27e09192f7d7227fcd9fb35a63c414a5e069c707b
• haproxy-router git b41f9d05 sha256:b5b602a91d3a3ed9ebd9e3e8cb6e9e4d79d53a58d0f5d21fd225365b03086b3c
• insights-runtime-exporter git 01a901de sha256:231e6c27ab8231a05bed75138187fc2393b165dc5bc0e11bcb67e2cb48697b47
• insights-runtime-extractor git 01a901de sha256:4e9711659d480daa50a8a63432a02cbf692f7a4f0230341f9045aea65a8efcb3
• ironic-machine-os-downloader git 6c92e542 sha256:1fae3a8add5b3d33072a8c0b23edaf1ddfccbe5886677aa53a2df70cecbb7cab
• ironic-static-ip-manager git fa5b8b8b sha256:40a98d8476c2c61ae1dafd189d74905d1b56a5d02a779354d618305a1af0eb4b
• kube-metrics-server git cfa5ee9f sha256:242eed4f60c9395be1309a2dbb3a5eeeaaac7e593606b9a71cd6919f6969665a
• kube-rbac-proxy git bc1ca29e sha256:214c1ce472c176b21db7d39f379681b102ee52130cb90fb3adb2a218f7e80f73
• kube-state-metrics git a8c9a5f0 sha256:ea93eabb2e6aabe6bb3e3cd7d504a76558d1298a386ef80daf433d210f925e3a
• kubevirt-cloud-controller-manager git 3f4542ec sha256:198c26911d736f2c4a1d2d378bd1fbf28b137c9b5dc3c2cfcfe8017e8c15399d
• kubevirt-csi-driver git 8b8dd30e sha256:c9f855e363f30b1212a7aeea81dee277f7004723f79145ee3b04f361ef8987b6
• libvirt-machine-controllers git a336f0b5 sha256:326484d9a39af7f455c5de867ce5c42fd8f10ab3b3fb3c43193d2306d68feb2c
• machine-os-images git 3b804341 sha256:88526df20216a501c79eea9caa55800ac8473d2ac4d2eef2bc37699ca0c49e2c
• metallb-frr git b239af95 sha256:343207268f4907e4fbd49981c304703341a63a71a2e672057cec59e1c5e6bddc
• multus-cni git cf0f68ec sha256:8d69c86e24d03dfddfb0b775ffb61757de27c5842cc7248f0d4fe910dd1f77cb
• multus-cni-microshift git cf0f68ec sha256:15d2d5ca16f9957ca49e57fde1ad58642d396cfeb1979a79b4b0f806916dc02d
• multus-networkpolicy git 278ec20e sha256:e76d4d877df1a7ecaefc69158b6b12a975094c154be024ff3df0d7f0bd1e3732
• multus-route-override-cni git 391c1b03 sha256:dc65f12bcb5e2959726c785f4e8274f29b8e98b92c5483d9e89a1a1560a0edfd
• network-interface-bond-cni git 54ad71ee sha256:86e0fc786985634b8338a92ed672c10cbfea094d0fd570cd4e1922a095393030
• network-metrics-daemon git 5ec8c6bd sha256:956f7edded1270dbc594fc519e212520bc734a58fbc1577a8533c616a0281793
• network-tools git 16f4c78d sha256:3c59bf1840c566bbf8f0224596a1fa8bc4f39b5148168f724d6b15dcc14f6dbd
• oauth-proxy git d9c18ed4 sha256:1c61727bfa290f15f1bdcdd3192c7127a309a5f57ca6e51c93318725ba710653
• openshift-state-metrics git b04e2ef0 sha256:55e23ac7f27e739914ea35b3887dc8c6b16a2aba49111c00f0fbafc518e8944d
• openstack-cluster-api-controllers git 30944900 sha256:9504115f4e89ce6f77b510717d5a53667061821648a6826e2523fbcd7ce635a1
• openstack-machine-api-provider git 888b25c2 sha256:01715d5e75a9515b7ca92f768d0ecdbb07a5c139ef3549470213632f8c173d36
• openstack-resource-controller git bf0d2c88 sha256:dc4ffd4b43a9cf52a90a6f6dbfcb948a4f823df3cfc56232b5034c8d03778bf2
• ovirt-csi-driver git 1db726a9 sha256:f452d256a3a68d74493724de646d9c995f726e508cd08a3a82b0fe033c8b06f1
• ovirt-csi-driver-operator git 76db379d sha256:e9c663a4463929bbeb69570eb46b07d4c1df6d3c701be052aa716b71209bc26c
• prom-label-proxy git 3162eb7f sha256:e1a2132c0ac0888c14b771f82750144e029796a45084d5f806a8a623e91c2bf4
• prometheus-node-exporter git 56f6158e sha256:b59fb2ebbb3353d61057628a8be9ab8aed3471ec961cecbe57ecb577b61c89af
• service-ca-operator git 4dfa6916 sha256:a8fa779414d920c3018ce09dd863882cfd7f11771cd5fea64085f0dff283b4df
• telemeter git 4c6036ee sha256:a7bdcd4716b57aba831f704440eaea7be4e5e0515244a2f164a8bec388ad6bcb
• thanos git 798d8365 sha256:df1fdc0d63cbb778dd35b001315a92820de4c767bdc8f586f45087ad836d57e9

agent-installer-api-server

• NO-ISSUE: [master] Bump OCP versions: 4.15, 4.17 (#7881) #7881
• MGMT-20726: Allow prefix for PVC and secret naming (#7746) #7746
• MGMT-21252: Make l3_connected_addresses output deterministic (#7879) #7879
• MGMT-20973: Cluster events - filtering deleted hosts ends with an error (#7854) #7854
• MGMT-21253: RefreshSchedulableMastersForcedTrue lead to extra reads from DB (#7880) #7880
• NO-ISSUE: [master] Bump OCP versions: 4.19 (#7875) #7875
• NO-ISSUE: Add NHO and FAR back to the virtualization bundle (#7869) #7869
• MGMT-20608: Add more operators to the virtualization bundle: COO, NUMA resources and OADP (#7828) #7828
• NO-ISSUE: Set additionalTrustBundle boolean to false on ABI flow (#7868) #7868
• Add documentation for the bmh cluster reference annotation (#7864) #7864
• NO-ISSUE: [master] Bump OCP versions: 4.13, 4.18, 4.16 (#7866) #7866
• ACM-21309: Support ForceInsecurePolicy for overriding policy.json in discover ignition (#7807) #7807
• NO-ISSUE: Update rpm lockfiles for acm (hermetic) builds (#7863) #7863
• NO-ISSUE: [master] Bump OCP versions: 4.19 (#7858) #7858
• OCPBUGS-59300: Bump glog to v1.2.5 (#7855) #7855
• NO-ISSUE: [master] Bump OCP versions: 4.20 (#7853) #7853
• Remove refs to shellcheck (#7847) #7847
• NO-ISSUE: [master] Bump OCP versions: 4.15, 4.12, 4.19, 4.17 (#7841) #7841
• MGMT-20549: Add cluster validation for openshift-ai if cluster has no gpu (#7777) #7777
• MGMT-20674: Openshift-ai is adding as dependencies all gpu vendor when there is no host (#7779) #7779
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• NO-ISSUE: Update Konflux references (#1184) #1184
• NO-ISSUE: Update Konflux references (#1177) #1177
• Full changelog

agent-installer-node-agent

• MGMT-20141: collecting and uploading ironic-agent logs (#1028) #1028
• NO-ISSUE: Update Konflux references (#1064) #1064
• NO-ISSUE: Update Konflux references (#1043) #1043
• OCPBUGS-59297: Bump glog to 1.25 (#1061) #1061
• NO-ISSUE: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.24 (#1052) #1052
• NO-ISSUE: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.23 (#1038) #1038
• Full changelog

agent-installer-utils

• OCPBUGS-59724: add back NHR and FAR operators #130
• OCPBUGS-59187: invalid default channel configuration for package “mtv… #124
• Full changelog

aws-cloud-controller-manager

• OCPBUGS-57684: Updating ose-aws-cloud-controller-manager-container image to be consistent with ART for 4.20 #110
• Full changelog

aws-cluster-api-controllers

• NO-JIRA: Update OWNERS #561
• OCPBUGS-59243, OCPBUGS-59244: UPSTREAM: 5590: Bump golog v1.2.5 #557
• Full changelog

aws-ebs-csi-driver

• STOR-2402: Rebase to upstream v1.45.0 for OCP 4.20 #289
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-58254: Bump library-go #405
• Full changelog

aws-machine-controllers

• OCPCLOUD-2935: Bump k8s dependencies to 1.33; go 1.24 #136
• NO-JIRA: Update OWNERS #135
• Full changelog

azure-cluster-api-controllers

• NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.20.2 (2a4b30d) into master #345
• NO-JIRA: Update OWNERS #344
• Full changelog

azure-disk-csi-driver

• STOR-2405: Rebase to upstream v1.33.1 for OCP 4.20 #108
• Full changelog

azure-file-csi-driver

• STOR-2407: Rebase to upstream v1.33.3 for OCP 4.20 #99
• Full changelog

azure-machine-controllers

• OCPCLOUD-2932: Bump 1.33 #160
• NO-JIRA: Update OWNERS #161
• Full changelog

azure-service-operator

• NO-JIRA: Update OWNERS #10
• Full changelog

baremetal-installer, installer, installer-artifacts

• CORS-3916, CORS-3920: Use gcp custom endpoints in the installer #9535
• OCPBUGS-59430: Fail install config validation when base domain is invalid #9840
• OCPBUGS-59678: PowerVS Support VPC and TG ids #9818
• OCPBUGS-57732: Catch gcp destroy cases where the operation is nil #9823
• OCPBUGS-57527: Add descriptions back to the aws survey #9816
• MGMT-20992: feat: update determineTopologies function #9815
• OCPBUGS-59220: Refine check for supported SNO platforms to include IBMCloud #9836
• no-jira: Revert “Merge pull request #9736 from barbacbd/CORS-4058” #9837
• OKD-241: Use CentOS Stream 10 bootimages #9817
• CORS-4062: Migrate endpoints in pkg/types/aws/platform.go to sdk v2 #9759
• OCPBUGS-57202: pkg/asset/tls: extend ShortCertRotation certs validity to 2 hours #9820
• CORS-4058: Remove AWS SDK V1 from destroy/aws #9736
• CORS-4053: Migrate AWS SDK to v2 in cluster/aws #9762
• CORS-4054: Migrate from SDK v1 to v2 in installconfig #9760
• OCPBUGS-58352: Increase timeout on gcp wait for operation #9825
• Full changelog

baremetal-operator

• OCPBUGS-57472: merge from upstream #424
• OCPBUGS-54634: Merge upstream #419
• Full changelog

baremetal-runtimecfg

• NO-ISSUE: Update OWNERS #353
• Full changelog

cli, cli-artifacts, deployer, tools

• CNTRLPLANE-1054: Update k8s dependencies to 1.33 with bumping the other dependencies #2058
• OCPBUGS-50992: Help with must-gather scheduling through suggesting preferance of nodes #2060
• Revert “WRKLDS-1713: Remove schema1” #2059
• OTA-1575: pkg/cli/admin/upgrade/recommend: “accepted … via ConditionalUpdateRisk” #2040
• CORENET-5412: adm, inspect, ns: Collect UserDefinedNetwork CRs #2011
• Full changelog

cloud-credential-operator

• OCPBUGS-59402: github.com/golang/glog v1.2.5 #888
• CCO-682: Update to k8s v0.33.2 #885
• OCPBUGS-59511: add read only filesystem #884
• Full changelog

cloud-network-config-controller

• CORENET-5958: Rebase k8s to 1.33 #176
• NO-JIRA: Update OWNERS #177
• OCPBUGS-57778: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.20 #175
• Full changelog

cluster-authentication-operator

• AUTH-543, OCPBUGS-57808: (deps): Bump to Go 1.24 and k8s 1.33 #775
• Full changelog

cluster-capi-controllers

• NO-JIRA: Update OWNERS #244
• Full changelog

cluster-capi-operator

• OCPCLOUD-2992: migration e2e for creating machinesets #330
• NO-JIRA: Update OWNERS #335
• OCPBUGS-56805, OCPBUGS-58880: fix: clusteroperator: do not update status.relatedobjects if only order changed #331
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-53300: Update service selector to match deployment label #398
• NO-JIRA: Update OWNERS #397
• OCPBUGS-57613: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.20 #392
• OCPCLOUD-2978: add deny all network policy #395
• Full changelog

cluster-config-api

• Remove “techpreview” filter on verify job #2422
• Update KAL to latest #2420
• OCPNODE-3006: Add clusterimgepolicy/imagepolicy to payload #2384
• AGENT-1262: add NoRegistryClusterOperations feature gate #2417
• OCPBUGS-55661: Remove HardwareSpeed featuregate #2416
• OCPNODE-3121: Make FeatureGateImageVolume TechPreview #2403
• OCPEDGE-1875: feat: promote tnf from devpreview to techpreview #2413
• OCPBUGS-55668: ipam, virt: remove the PersistentIPsForVirt FG #2309
• OCPBUGS-59574: Revert #2398 “Revert \“Revert \“CNTRLPLANE-72: remove RoleBindingRestriction CRD from payload\”\“” #2414
• STOR-2462: Add ExternalSnapshotMetadata FeatureGate #2381
• Revert “Revert “CNTRLPLANE-72: remove RoleBindingRestriction CRD from payload”” #2398
• CONSOLE-4665: Disable serving of old v1alpha1 CRD version #2411
• Fix kubebuilder tools/envtest index for v1.33.2 (add v prefix) #2410
• makefile: bump-publish-kubebuilder-tools to 1.33.2 #2408
• envtest-releases: add 1.33.2 to index #2407
• Monitoring API: Add AlertmanagerMainConfig #2148
• OAPE-232/OCPBUGS-55653: Remove GCPLabelsTags featuregate #2372
• CNTRLPLANE-371: Update to Kubernetes v1.33.2 #2252
• Disable schema checker overlap with KAL #2397
• OCPBUGS-55674: remove AWSEFSDriverVolumeMetrics featuregate #2395
• Register v1 (cluster)imagepolicy #2394
• Update KAL and GolangCI-Lint to v2 #2321
• Enable MutatingAdmissionPolicy in Dev/TechPreview #2385
• Full changelog

cluster-config-operator

• OCPEDGE-1876: bump(o/api,k8s/api,go-version) #445
• Full changelog

cluster-control-plane-machine-set-operator

• OCPCLOUD-2937: Bump k8s dependencies to 1.33; go 1.24 #360
• NO-JIRA: Update OWNERS #361
• Full changelog

cluster-dns-operator

• OCPBUGS-57704: Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.20 #438
• Full changelog

cluster-etcd-operator

• OCPBUGS-44570: add missing informer syncs #1449
• NO-JIRA: Update owners file #1451
• OCPBUGS-50488: add missing ports to svc and pod spec #1444
• OCPBUGS-55404: fix ordering on bootstrap IP selection #1443
• Full changelog

cluster-ingress-operator

• NE-2022: Bump to OSSM 3.0.1 and Istio 1.24.4 #1227
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-58232: Don’t wait for 2 etcd members when the cluster is TNF installed with assisted-installer #1866
• OCPBUGS-43521: Set goaway chance to 0.001 #1863
• NO-JIRA: Update the deprecated API usage alerts for 1.33. #1871
• Revert “OCPBUGS-56551: certregenerationcontroller: start configInformers again” #1869
• CNTRLPLANE-371: Update to Kubernetes v1.33.2 #1849
• Full changelog

cluster-kube-controller-manager-operator

• RFE-4154: Fix readonly filesystem error when kcm trying to mkdir on /etc/kubern… #847
• CNTRLPLANE-371: Update Kubernetes to v1.33.2 #840
• Full changelog

cluster-kube-scheduler-operator

• OCPSTRAT-2001: Add readOnlyRootFilesystem to kube-scheduler-operator #568
• OCPSTRAT-2001: Add readonlyRootFilesystem #564
• CNTRLPLANE-371: Update to Kubernetes v1.33.2 #562
• Full changelog

cluster-machine-approver

• OCPCLOUD-2939: Bump k8s 1.33 #272
• NO-JIRA: Update OWNERS #274
• OCPBUGS-57610: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.20 #271
• Full changelog

cluster-monitoring-operator

• OCPBUGS-58475: Enforce secure TLS settings in CMO #2618
• OCPBUGS-57215: operator: increase wait time till degraded to max 4 times 5m #2624
• MON-4255: Bump prometheus-operator dependencies to v0.84.0 #2619
• MON-4255: Bump prometheus-operator to v0.83 #2614
• OCPBUGS-57561: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.20 #2611
• MON-4288: set up openshift-tests-extension and add a sanity test #2616
• MON-4282: Multi-tenant support for KSM’s CRS #2595
• NO-JIRA: [bot] Synchronize versions of the downstream components #2615
• OCPBUGS-58427: pkg/manifests: don’t reset annotations for metrics client CA #2612
• Full changelog

cluster-network-operator

• OCPBUGS-59134, OCPBUGS-59135: Annotate whereabouts-controller #2749
• NO-JIRA: deprecate exportloopref #2750
• CORENET-5881: Reconfigure NBDB for route advertisements in LGW #2735
• OCPBUGS-58448: fg, virt: remove FeatureGatePersistentIPsForVirtualization #2737
• OCPBUGS-58155: CNO must skip watching IngressController if Ingress capability is disabled in HyperShift #2731
• Full changelog

cluster-node-tuning-operator

• Sync the upstream and downstream Containerfiles (#1368) #1368
• machineconfig: log kernelType (#1366) #1366
• feat: add arbiter role to default pinning gen (#1364) #1364
• OCPBUGS-59354: E2E add test to verify guaranteed pod is running after kubelet restart (#1361) #1361
• Bump to golangci-lint 2.x (#1360) #1360
• NO-JIRA: performance profile: internal cleanup (#1359) #1359
• Add support for running binaries from NVIDIA driver directory (#1353) #1353
• Full changelog

cluster-olm-operator

• OPRUN-4034: Handle CustomNoUpgrade better #134
• OCPBUGS-58992: Bump helm to v3.18.4 #132
• OPRUN-4026: Add support for all NoUpgrades #131
• OCPSTRAT-2075: add missing tmp mounting to fix write to read only fil… #129
• OPRUN-3999: Validate feature-gate arguments #128
• OPRUN-3970: Add support for experimental manifests #127
• Full changelog

cluster-openshift-controller-manager-operator

• CNTRLPLANE-926: Add readonlyRootFilesystem #392
• CNTRLPLANE-1054: Update k8s deps to 1.33.2 #393
• Full changelog

cluster-policy-controller

• CNTRLPLANE-1054: rebase k8s (1.33.2), openshift (4.20) and other underlying dependencies #164
• Full changelog

cluster-samples-operator

• OCPBUGS-59324: Periodic sync of supported OCP samples #631
• Full changelog

cluster-storage-operator

• STOR-2330: Add labels to subscribe vSphere CSI driver operator to NPs #597
• STOR-2340: Add Network Policies and subscriptions for CSO and VPD (redux) #596
• Full changelog

cluster-update-keys

• NO-ISSUE: OWNERS: Add Mrunal, remove folks who are no longer active in OpenShift-core #77
• OCPNODE-3006: Drop openshift policy to DevPreviewNoUpgrade for ClusterImagePolicy to v1 #76
• Full changelog

cluster-version-operator

• OTA-1578: Disable ResourceReconciliationIssues condition #1216
• Full changelog

console

• ODC-7802: Remove custom Drawer and Tabs from web-terminal #15077
• ODC-7620: Use PF isLoading in CreateProjectModal #15318
• OCPBUGS-57466: Default name is comprised of ‘-’ on ‘Add to favorites’ page when language is Korean/Japanese/Chinese. #15314
• OCPBUGS-56248: Improve Console plugin API doc gen script #15167
• OCPBUGS-56466: The warning msg ‘CPU and memory resource requests must be set’ still shows up after deployment has resource requests set. #15117
• CONSOLE-4669: Refactor Alertmanager forms to only use PatternFly comp… #15275
• OCPBUGS-59771: Move alertmanager settings route #15325
• NO-JIRA: Update README.md by adding removing co-disabled styling #15323
• CONSOLE-4700: Address tech debt in TogglePlay and ButtonBar #15308
• OCPBUGS-57654: Updating openshift-enterprise-console-container image to be consistent with ART for 4.20 #15186
• ODC-7803: Add custom icons in import flow #15242
• OCPBUGS-59231: PipelinesList: increase width of ns column #15311
• OCPBUGS-59550: add data-test attrs to console plugins table #15302
• OCPBUGS-58858: Update model flags when plugins load #15296
• CONSOLE-4633, CONSOLE-4672, CONSOLE-4682: Refactor JobActionFactory, ReplicationControllerFactory and remove global menuActions for job.tsx #15279
• CONSOLE-4491: Deanonymize Developer Sandbox users #15201
• CONSOLE-4499, CONSOLE-4654, CONSOLE-4656, CONSOLE-4657: Implement some CodeEditor RFEs #15254
• CONSOLE-4623: Add support for optional Console plugin dependencies #15183
• CONSOLE-4634: Refactor DeploymentActionFactory to hook form. #15209
• OCPBUGS-59195: Clicking on container dropdown button has no response when pod log is in fullscreen. #15278
• CONSOLE-4663: Replace Bootstrap .has-feedback with custom rule #15264
• CONSOLE-4659: Replace Bootstrap Responsive utilities with PatternFly … #15261
• ODC-7807: Migrate enzyme test to react testing library for helm-plugin #15244
• OCPBUGS-59277: update guided tour selector for Software catalog #15277
• CONSOLE-4655: Replace Bootstrap List group with PatternFly List #15259
• CONSOLE-4653: Allow custom icons in template annotation #15248
• ODC-6775: Jest 21 -> 22 #14939
• OCPBUGS-32157: Always show edit-yaml header if defined #15274
• OCPBUGS-55340: Not able to launch terminal window from OCP web console due to console plugin conflicts #15255
• CONSOLE-4578: OpenShift ConsoleCONSOLE-4578 Move “Installed Operators” from “Operators” to “Ecosystem” nav section #15187
• OCPBUGS-57715: Fix Made - Clicking Cancel on YAML Creation now redirects to Secrets Page #15253
• OCPBUGS-59163: Show possible enum values in ExploreTypeSidebar #15265
• CONSOLE-4662: remove screenfull #15262
• CONSOLE-4658: Replace Bootstrap Small text with PatternFly Extra Smal… #15256
• CONSOLE-4619: Fix ExternalLinkWithCopy visual regression #15266
• ODC-7794: Add event-source, channel, and broker form page automation in CI #15226
• ODC-7779: Tests to enable the developer perspective through UI #15179
• CONSOLE-4619: _blank removal followup #15251
• OCPBUGS-43792: Make assumption about allowedDynamicPluginNames array order explicit #15249
• OCPBUGS-52835: change ‘/metrics/usage’ endpoint to ‘/api/metrics/usage’ #15252
• CONSOLE-4642: replace Bootstrap radio with PatternFly equivalent #15217
• OCPBUGS-56803: Deleted objects remain in favorites and cause 404 errors #15193
• OCPBUGS-58334: hide Namespace column in MachineSets list when project… #15247
• Full changelog

console-operator

• OCPBUGS-45300: Wire synced OIDC Auth CM to Console #1024
• OCPBUGS-45300: Fetch synced CM for the CertificateAuthority issuer #1017
• OCPBUGS-59099: Bump docs version #1015
• OCPBUGS-58434: Console-operator should report plugin services as relatedObjects #1012
• NO-JIRA: Remove ocs-install-tour #1003
• Full changelog

container-networking-plugins, containernetworking-plugins-microshift

• OCPBUGS-59568: stop installing rpms that are already in the base image #206
• Full changelog

csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibmcloud-cluster-api-controllers, ibmcloud-machine-controllers, kube-proxy, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector

• CNTRLPLANE-371: Update to Kubernetes v1.33.2 #2314
• Full changelog

csi-external-attacher

• STOR-2392: Rebase to upstream v4.9.0 for OCP 4.20 #86
• Full changelog

csi-external-provisioner

• STOR-2392: Rebase to upstream v5.3.0 for OCP 4.20 #115
• Full changelog

csi-external-resizer

• STOR-2392: Rebase to upstream v1.14.0 for OCP 4.20 #171
• Full changelog

csi-external-snapshotter, csi-snapshot-controller

• STOR-2392: Rebase to upstream v8.3.0 for OCP 4.20 #181
• OCPBUGS-55689: UPSTREAM: 1303: Fix requeueing snapshot content after deletion error #180
• Full changelog

csi-livenessprobe

• STOR-2392: Rebase to upstream v2.16.0 for OCP 4.20 #75
• Full changelog

csi-node-driver-registrar

• STOR-2392: Rebase to upstream v2.14.0 for OCP 4.20 #82
• Full changelog

etcd

• OCPBUGS-57675: Updating ose-etcd-container image to be consistent with ART for 4.20 #334
• Full changelog

gcp-cloud-controller-manager

• NO-JIRA: Update OWNERS #83
• Full changelog

gcp-cluster-api-controllers

• NO-JIRA: Update OWNERS #246
• Full changelog

gcp-machine-controllers

• NO-JIRA: Update OWNERS #127
• OCPBUGS-59376: Add max-concurrent-reconciles flag to machine actuator #124
• Full changelog

hypershift

• Fix OCPBUGS-54720: HCP payload doesn’t respect multiple #6486
• OCPSTRAT-2173: feat(hcco): add support for hosted OIDC client secrets #6375
• OCPBUGS-43824: Help fix flaky NTO tests #6480
• feat(shared-ingress): Fix Konflux hermetic build config #6503
• CNTRLPLANE-1116: add gitlint support for conventional commit enforcement #6462
• NO-JIRA: feat(contrib): add kubelet config daemonset #6495
• NO-JIRA: Fix a typo in the documentation #6501
• NO-JIRA: increase the pod limit per node in AKS cluster #6487
• NO-JIRA: Add new doc from HCP OADP Plugin #6299
• OCPBUGS-59759: fix(konflux): Add missing backslash for dot escaping #6491
• NO-JIRA: test: replace context.Background/TODO with t.Context in unit tests #6475
• NO-JIRA: Dummy change to shared-ingress Containerfile to trigger a build #6478
• NO-JIRA: test: remove CPOv2 annotation from upgrade test #6485
• OCPBUGS-57316: hypershift version in CLI returns panics for Server Version when HyperShift operator is deployed #6473
• CNTRLPLANE-980: chore(contrib): add ansible playbook for setting up external OIDC #6294
• NO-JIRA: test/e2e: skip kubevirt pods when checking labels, tolerations, and term msg policy #6476
• NO-JIRA: test/e2e: add TerminationMessagePolicyFallbackToLogsOnError check to 4.19 #6291
• CNTRLPLANE-735: Document steps to configure Microsoft backup extension in AKS #6456
• NO-JIRA: chore(deps): update konflux references #6267
• OCPBUGS-59232: fix(test): resolve Azure DNS race condition in EnsureCustomAdminKubeconfigReachesTheKAS #6461
• MGMT-20826: Enable disabling of Ingress capability #6319
• NO-JIRA: unique clusterrole per hosted cluster for kubevirt CSI #6321
• CNTRLPLANE-952: New API to support specifying cluster-autoscaler flags #6236
• CNTRLPLANE-993: Skip azure 4.19 cp upgrade for now to let the 4.20 suite be covered. #6416
• CNTRLPLANE-204: feat(shared-ingress): Add socat tool to container image #6458
• OCPBUGS-43824: fix(test): reduce API call frequency to prevent rate limiting in NTO machineconfig test #6453
• OCPBUGS-58299: remove annotation is not working #6420
• MGMT-20793: Enable Disabling NodeTuning Capability #6356
• CNTRLPLANE-800: Remove code associated with Managed Identity v2 for ARO HCP #6105
• NO-JIRA: Update Created Azure Hosted Cluster on AKS doc #6451
• OCPBUGS-57742: Updating ose-hypershift-container image to be consistent with ART for 4.20 #6307
• CNTRLPLANE-1113: Add renovate configuration #6452
• CNTRLPLANE-201: migrate to konflux-built image for shared ingress #6381
• Revert “OCPBUGS-56701: Update the LookupDefaultOCPVersion function to use the multi-arch release API” #6445
• OCPBUGS-56701: Update the LookupDefaultOCPVersion function to use the multi-arch release API #6353
• OCPBUGS-58837: Override CPO image to apply KAS certificate hotfix #6402
• NO-JIRA: konflux: manually update task bundles #6418
• CNTRLPLANE-995: Support day2 tags changes for AWS default Security Group #6320
• NO-JIRA: Exit miv3 script early if cp file exists #6417
• NO-JIRA: Fix up contrib scripts for aro like env #6395
• MGMT-20771: Enable disabling of Console capability #6183
• OCPBUGS-57790: add custom kube-apiserver DNS name to shared ingress #6338
• OCPBUGS-58387: Add karpenter to skip api-server deps #6379
• OCPBUGS-58149: fix(hcco): Don’t fail for public OIDC clients with no client secret #6367
• NO-JIRA: Ensure that capi-provider deployment does not have outdated labels #6335
• OCPBUGS-57957: Increase MaxItems for Mirrors and ImageContentSources #6325
• Full changelog

insights-operator

• RFE-4152: Add missing readonlyRootFilesystem (#1104) #1104
• CCXDEV-15041: update on-demand gathering docs (#1097) #1097
• CCXDEV-15045: update code to use v1alpha2 api version (#1093) #1093
• Full changelog

ironic

• METAL-1379: Bump ironic to include NIC Firmware Updates #672
• METAL-1414: Use Python 3.12 to build and run ironic #658
• OCPBUGS-55298: Bump ironic to unresponsive bmc commit #670
• METAL-1496: Force download and install from source #669
• METAL-1496: Revert “OCPBUGS-55298: Bump ironic to latest” #668
• OCPBUGS-55298: Bump ironic to latest #667
• OCPBUGS-56755, OCPBUGS-57454: Bump sushy and ironic commit #666
• Full changelog

ironic-agent

• METAL-1414: Use python3.12 to build and run ironic-agent #191
• METAL-1496: Force download and install from source #192
• Full changelog

keepalived-ipfailover

• OCPBUGS-57842: Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.20 #211
• OCPBUGS-57831: Updating ose-egress-http-proxy-container image to be consistent with ART for 4.20 #210
• OCPBUGS-57624: Updating openshift-enterprise-egress-router-container image to be consistent with ART for 4.20 #209
• Full changelog

kube-storage-version-migrator

• OCPBUGS-38523: Reduce the page size on list requests to the Kube API server #211
• NO-JIRA: Add DOWNSTREAM_OWNERS. #219
• Full changelog

machine-api-operator

• Revert “OCPCLOUD-2980: add ingress/egress network policy” #1395
• OCPCLOUD-2980: add ingress/egress network policy #1387
• OCPCLOUD-2941: Bump k8s dependencies to 1.33; go 1.24 #1393
• OCPBUGS-59376: Enabled 10 concurrent reconciles on GCP #1390
• OCPBUGS-58429: Fixed test logic to wait for machines ready and clean up #1388
• Full changelog

machine-config-operator

• NO-ISSUE: Split gcp-op into two tests #5197
• MCO-1815: vSphere bootimage update reconciliation should handle bootimage name diverging #5187
• OCPBUGS-58191: fixes image registry secret handling #5171
• OCPBUGS-55971: Enable debug logging for nodeip-configuration #5043
• OCPBUGS-59776: Revert “OCPBUGS-52302: Fix timing of Spec.ConfigVersion.Desired update in MCN” #5190
• OCPBUGS-52302: Fix timing of Spec.ConfigVersion.Desired update in MCN #5121
• OCPBUGS-59672: TestMCNPoolNameCustom should clean up resources properly #5184
• OCPBUGS-58238: Image Mode creates new MOSBs when osbuilder is drained and it results in degraded MCPs #5161
• OCPBUGS-59367: Set our test suite as global #5179
• OCPBUGS-56115: Understand and eliminate noisy logs for MCN #5136
• OCPBUGS-57024: use channel to signal controller shutdown #5104
• NO-ISSUE: Add emy to baremetal-reviewers #5164
• MCO-1739: Tell origin our suite is disruptive and set timeout #5167
• MCO-1307: Add support for VSphere for BootImage Update #4677
• OCPBUGS-44290: Fix when machines are considered Degraded in MCP status based on MCN NodeDegraded condition #5110
• Full changelog

machine-image-customization-controller

• METAL-1484: Support using a block device as the base ISO #143
• Full changelog

monitoring-plugin

• OU-863: feat: add disconnected to line chart #477
• OU-388: add units selector to the metrics page #480
• OU-939: Fix virt persepective new silence link #472
• OU-594: [Incidents] UI is not embedded in the Alerting section #465
• OU-503: regression automation testing for monitoring alerting #471
• OU-930: use non-legacy store for accurate hideGraphs value #473
• NO-JIRA: Update README.md with how to development with local perses instance #442
• OU-721: reset showgraph state when unmounting button #459
• Full changelog

multus-admission-controller

• OCPBUGS-57749: Updating ose-multus-admission-controller-container image to be consistent with ART for 4.20 #98
• OCPBUGS-59304: Update the github.com/golang/glog module to v1.2.4 #99
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-58405: Ds merge 7/15/25 #372
• Full changelog

must-gather

• CORENET-5412: network: Gather OVN-Kubernetes CUDN CRs #486
• Full changelog

networking-console-plugin

• OCPBUGS-49652: Fix requiremenets with no value #254
• CNV-63471: Replace Bootstrap Grid CSS with PatternFly Grid and Table #253
• Full changelog

oauth-apiserver

• CNTRLPLANE-5: Accept client-go feature gates and unrecognized feature gates via –feature-gates. #136
• NO-JIRA: Bump to Kubernetes v1.32 #135
• Full changelog

oauth-server

• OCPBUGS-58267: Fix mixup with Spanish and French locale variable names #188
• OCPBUGS-57719: Updating oauth-server-container image to be consistent with ART for 4.20 #190
• Full changelog

oc-mirror

• adds build-machinery-go as a tool dependency (#1226) #1226
• OCPBUGS-59714: Detect images from a Helm Chart with an aliased chart dependency (#1038) #1038
• OCPBUGS-52562: Ensure release collection does not include duplicates (#1218) #1218
• OCPBUGS-59396: v2/archive: handle 0b mirror archive files (#1219) #1219
• OCPBUGS-54622: cli/delete: fix workflow mode name output (#1214) #1214
• OCPBUGS-59646: cmd: unpack v2 to $HOME instead of /tmp (#1220) #1220
• OCPBUGS-58956: bump helm for CVE fix (#1213) #1213
• OCPBUGS-56398: Bug fix not to overwrite log files (#1208) #1208
• OCPBUGS-58467: Add range check for –parallel-images and –parallel-l… (#1211) #1211
• Full changelog

olm-catalogd, olm-operator-controller

• NO-ISSUE: Synchronize From Upstream Repositories #411
• OPRUN-4017: Synchronize From Upstream Repositories #408
• NO-ISSUE: Synchronize From Upstream Repositories #405
• Full changelog

openshift-apiserver

• OCPBUGS-59262: Revert “Drop support for image manifest schema 1” #533
• Full changelog

openshift-controller-manager

• CNTRLPLANE-1054: Update k8s dependencies to 1.33.2 #405
• Full changelog

openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-59650: Rebase main onto release-1.33 #334
• OCPBUGS-58497: CARRY: don’t ignore json files #337
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• NO-ISSUE: Synchronize From Upstream Repositories #1044
• NO-ISSUE: Synchronize From Upstream Repositories #1041
• NO-ISSUE: Synchronize From Upstream Repositories #1039
• NO-ISSUE: Synchronize From Upstream Repositories #1038
• NO-ISSUE: Synchronize From Upstream Repositories #1035
• Full changelog

operator-marketplace

• OPRUN-3981: Upgrade Go from 1.23 to 1.24.3 and k8s deps to 1.33 for release 4.20 #647
• OPRUN-3981: Update dockerfile to use go 1.24 and OCP image 4.20 #645
• OPRUN-3902: Add static NetworkPolicy for marketplace-operator #644
• NO-ISSUE: Add readonlyRootFilesystem #634
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-59248: DownStream Merge [07-17-2025] #2676
• OCPBUGS-57578: Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.20 #2640
• OCPBUGS-49824, OCPBUGS-57179: DownStream Merge [07-09-2025] #2659
• NO-JIRA: Update OWNERS file: Add Patryk/Martin as approvers #2665
• OCPBUGS-55914, OCPBUGS-57433: DownStream Merge [06-18-2025] #2639
• Full changelog

prometheus

• MON-4300: update prometheus to 3.5 #260
• OCPBUGS-39089: Clarify prometheus pod NFS warning message #243
• Full changelog

prometheus-alertmanager

• OCPBUGS-59400: Include go-verify-deps expected files in gitignore #106
• OCPBUGS-57770: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.20 #103
• OCPBUGS-57770: fix: inconsistency vendored dir due to Konflux migration #105
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• MON-4255: Bump openshift/prometheus-operator to v0.84.0 #333
• Full changelog

rhel-coreos, rhel-coreos-extensions

• NO-JIRA: Add PeaceRebel (Bipin) to approvers list #1812
• COS-3418: add kola-denylist for skipping kola tests #1836
• NO-JIRA: Add Johan-Liebert1 (Pragyan Poudyal) to owners #1766
• Full changelog

route-controller-manager

• OCPBUGS-59575: Update all dependencies #63
• OCPBUGS-57616: Updating ose-route-controller-manager-container image to be consistent with ART for 4.20 #62
• Full changelog

tests

• OCPBUGS-59750: Move the legacy container failures #30017
• OPRUN-3768: Add OLMv1 Single/OwnNamespace tests #29998
• OCPBUGS-55238: spyglass: hide disruption events for localhost #29710
• API-1802: chart template: show cert rotation events #29279
• NO-ISSUE: Automated - Update synthetic test data #29802
• OTA-1580: Add basic test for oc adm upgrade status CLI #29954
• NO-JIRA: Skip cert collection tests on hypershift #28937
• OCPBUGS-59555: Add ubi10 images to image-ecosystem #30001
• OPRUN-3965: Enable OTE for Operator Controller (OLMv1) #29949
• NO-JIRA: fix: nil pointer reference in pod count #30002
• NO-JIRA: oc idle: Increase timeout of endpointslice status check #29994
• CNTRLPLANE-371: Update to Kubernetes v1.33.2 #29709
• MULTIARCH-5390: Reapply “Merge pull request #29808 from Prashanth684/4552-cvo-test” #29967
• Revert “Revert “Revert “trt-2163: return error”“” #30000
• OCPEDGE-1983: [TNF] Fix test suite filtering to include Disrupted tagged tests #29996
• OCPBUGS-59203: OCPBUGS-57524: Improve MCN test stability #29981
• OCPBUGS-59159: Adjust DNS success rate to 98.0% for SNO upgrade test. #29978
• MON-4288: register CMO tests extension #29974
• OCPBUGS-58354: disruptioninclusterapiserver: bump timeout to 10 mins #29970
• Revert “Revert “trt-2163: return error”” #29964
• OCPBUGS-59372: revert: remove openshift/two-node suite from tna tests #29991
• Revert “CNF-17748: Add a comparing between static entry test” #29993
• NO-JIRA: Improve performance of run-resourcewatch #29955
• NO-JIRA: OWNERS_ALIASES: Update OTA members / team lead #29953
• MON-4287: chore(test/extended/prometheus): bump the series limit of total series sent via telemetry from each cluster #29975
• MCO-1739: Add MCO’s OTE tests to origin #29922
• MCO-1797: Fix transient errors while checking status of PIS #29962
• OCPBUGS-59157: Ensure CSI tests are defined before OTE initialization #29979
• OCPBUGS-58895: bump watch count limits #29972
• OCPBUGS-58449: replace Php 8.1 ubi9 with Php 8.2 ubi9 in origin #29963
• TRT-2097: Fix a few things in suite selection #29971
• TRT-2097, TRT-2098: Migrate origin to use OTE, and implement extension-derived suites #29888
• NO-JIRA: test/extended/operators: skip wildcard certificate #29956
• Revert “trt-2163: return error” #29959
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Package List

• cri-o-1.33.2-9.rhaos4.20.gitac52d40.el9
• kernel-5.14.0-570.30.1.el9_6
• openshift-kubelet-4.20.0-202507171059.p0.gb94367c.assembly.stream.el9
• systemd-252-51.el9_6.1

Full list (555 packages)

• NetworkManager-1:1.52.0-4.el9_6
• NetworkManager-cloud-setup-1:1.52.0-4.el9_6
• NetworkManager-libnm-1:1.52.0-4.el9_6
• NetworkManager-ovs-1:1.52.0-4.el9_6
• NetworkManager-team-1:1.52.0-4.el9_6
• NetworkManager-tui-1:1.52.0-4.el9_6
• WALinuxAgent-udev-2.7.0.6-11.el9
• aardvark-dns-2:1.14.0-1.el9
• acl-2.3.1-4.el9
• adcli-0.9.2-1.el9
• afterburn-5.7.0-1.el9
• afterburn-dracut-5.7.0-1.el9
• alternatives-1.24-2.el9
• attr-2.5.1-3.el9
• audit-3.1.5-4.el9
• audit-libs-3.1.5-4.el9
• authselect-1.2.6-3.el9
• authselect-libs-1.2.6-3.el9
• avahi-libs-0.8-22.el9_6.1
• basesystem-11-13.el9
• bash-5.1.8-9.el9
• bash-completion-1:2.11-5.el9
• bind-libs-32:9.16.23-29.el9_6
• bind-license-32:9.16.23-29.el9_6
• bind-utils-32:9.16.23-29.el9_6
• binutils-2.35.2-63.el9
• binutils-gold-2.35.2-63.el9
• bootc-1.1.6-3.el9_6
• bootupd-0.2.27-4.el9_6
• bsdtar-3.5.3-5.el9_6
• bubblewrap-0.4.1-8.el9_5
• bzip2-1.0.8-10.el9_5
• bzip2-libs-1.0.8-10.el9_5
• c-ares-1.19.1-2.el9_4
• ca-certificates-2024.2.69_v8.0.303-91.4.el9_4
• checkpolicy-3.6-1.el9
• chrony-4.6.1-1.el9
• cifs-utils-7.1-2.el9
• clevis-21-208.el9
• clevis-dracut-21-208.el9
• clevis-luks-21-208.el9
• clevis-systemd-21-208.el9
• cloud-utils-growpart-0.33-1.el9
• composefs-1.0.8-1.el9
• composefs-libs-1.0.8-1.el9
• conmon-3:2.1.12-1.el9
• conmon-rs-0.6.6-0.rhaos4.18.el9.1
• conntrack-tools-1.4.7-4.el9_5
• console-login-helper-messages-0.21.3-1.el9
• console-login-helper-messages-issuegen-0.21.3-1.el9
• console-login-helper-messages-profile-0.21.3-1.el9
• container-selinux-4:2.237.0-1.el9_6
• containernetworking-plugins-1:1.6.2-2.el9_6
• containers-common-2:1-117.el9_6
• coreos-installer-0.23.0-1.el9
• coreos-installer-bootinfra-0.23.0-1.el9
• coreutils-8.32-39.el9
• coreutils-common-8.32-39.el9
• cpio-2.13-16.el9
• cracklib-2.9.6-27.el9
• cracklib-dicts-2.9.6-27.el9
• cri-o-1.33.2-9.rhaos4.20.gitac52d40.el9
• cri-tools-1.33.0-1.el9
• criu-3.19-1.el9
• criu-libs-3.19-1.el9
• crun-1.21-1.el9_6
• crypto-policies-20250128-1.git5269e22.el9
• crypto-policies-scripts-20250128-1.git5269e22.el9
• cryptsetup-2.7.2-3.el9_5
• cryptsetup-libs-2.7.2-3.el9_5
• curl-7.76.1-31.el9
• cyrus-sasl-gssapi-2.1.27-21.el9
• cyrus-sasl-lib-2.1.27-21.el9
• dbus-1:1.12.20-8.el9
• dbus-broker-28-7.el9
• dbus-common-1:1.12.20-8.el9
• dbus-libs-1:1.12.20-8.el9
• device-mapper-9:1.02.202-6.el9
• device-mapper-event-9:1.02.202-6.el9
• device-mapper-event-libs-9:1.02.202-6.el9
• device-mapper-libs-9:1.02.202-6.el9
• device-mapper-multipath-0.8.7-35.el9_6.1
• device-mapper-multipath-libs-0.8.7-35.el9_6.1
• device-mapper-persistent-data-1.1.0-1.el9
• diffutils-3.7-12.el9
• dmidecode-1:3.6-1.el9
• dnf-4.14.0-25.el9
• dnf-data-4.14.0-25.el9
• dnsmasq-2.85-16.el9_4
• dosfstools-4.2-3.el9
• dracut-057-88.git20250311.el9_6
• dracut-network-057-88.git20250311.el9_6
• dracut-squash-057-88.git20250311.el9_6
• e2fsprogs-1.46.5-7.el9
• e2fsprogs-libs-1.46.5-7.el9
• efi-filesystem-6-2.el9_0
• efibootmgr-16-12.el9
• efivar-libs-38-3.el9
• elfutils-debuginfod-client-0.192-6.el9_6
• elfutils-default-yama-scope-0.192-6.el9_6
• elfutils-libelf-0.192-6.el9_6
• elfutils-libs-0.192-6.el9_6
• ethtool-2:6.11-1.el9
• expat-2.5.0-5.el9_6
• file-5.39-16.el9
• file-libs-5.39-16.el9
• filesystem-3.16-5.el9
• findutils-1:4.8.0-7.el9
• firewalld-filesystem-1.3.4-9.el9_5
• flashrom-1.2-10.el9
• fstrm-0.6.1-3.el9
• fuse-2.9.9-17.el9
• fuse-common-3.10.2-9.el9
• fuse-libs-2.9.9-17.el9
• fuse-overlayfs-1.14-1.el9
• fuse3-3.10.2-9.el9
• fuse3-libs-3.10.2-9.el9
• fwupd-1.9.26-1.el9
• fwupd-plugin-flashrom-1.9.26-1.el9
• gawk-5.1.0-6.el9
• gawk-all-langpacks-5.1.0-6.el9
• gdbm-libs-1:1.23-1.el9
• gdisk-1.0.7-5.el9
• geolite2-city-20191217-6.el9
• geolite2-country-20191217-6.el9
• gettext-0.21-8.el9
• gettext-libs-0.21-8.el9
• git-core-2.47.3-1.el9_6
• glib2-2.68.4-16.el9_6.2
• glibc-2.34-168.el9_6.20
• glibc-common-2.34-168.el9_6.20
• glibc-gconv-extra-2.34-168.el9_6.20
• glibc-minimal-langpack-2.34-168.el9_6.20
• glusterfs-6.0-57.4.el9
• glusterfs-client-xlators-6.0-57.4.el9
• glusterfs-fuse-6.0-57.4.el9
• glusterfs-libs-6.0-57.4.el9
• gmp-1:6.2.0-13.el9
• gnupg2-2.3.3-4.el9
• gnutls-3.8.3-6.el9
• gobject-introspection-1.68.0-11.el9
• gpgme-1.15.1-6.el9
• grep-3.6-5.el9
• groff-base-1.22.4-10.el9
• grub2-common-1:2.06-104.el9_6
• grub2-efi-aa64-1:2.06-104.el9_6
• grub2-tools-1:2.06-104.el9_6
• grub2-tools-minimal-1:2.06-104.el9_6
• gssproxy-0.8.4-7.el9
• gzip-1.12-1.el9
• hostname-3.23-6.el9
• hwdata-0.348-9.18.el9
• ignition-2.21.0-4.rhaos4.19.el9
• ignition-grub-2.21.0-4.rhaos4.19.el9
• ima-evm-utils-1.5-3.el9
• info-6.7-15.el9
• inih-49-6.el9
• initscripts-service-10.11.8-4.el9
• ipcalc-1.0.0-5.el9
• iproute-6.11.0-1.el9
• iproute-tc-6.11.0-1.el9
• iptables-libs-1.8.10-11.el9_5
• iptables-nft-1.8.10-11.el9_5
• iputils-20210202-11.el9_6.1
• irqbalance-2:1.9.4-2.el9
• iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9
• iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9
• isns-utils-libs-0.101-4.el9
• jansson-2.14-1.el9
• jose-14-1.el9
• jq-1.6-17.el9_6.2
• json-c-0.14-11.el9
• json-glib-1.6.6-1.el9
• kbd-2.4.0-11.el9
• kbd-legacy-2.4.0-11.el9
• kbd-misc-2.4.0-11.el9
• kernel-5.14.0-570.30.1.el9_6
• kernel-core-5.14.0-570.30.1.el9_6
• kernel-modules-5.14.0-570.30.1.el9_6
• kernel-modules-core-5.14.0-570.30.1.el9_6
• kernel-modules-extra-5.14.0-570.30.1.el9_6
• kexec-tools-2.0.29-5.el9
• keyutils-1.6.3-1.el9
• keyutils-libs-1.6.3-1.el9
• kmod-28-10.el9
• kmod-libs-28-10.el9
• kpartx-0.8.7-35.el9_6.1
• krb5-libs-1.21.1-8.el9_6
• less-590-5.el9
• libacl-2.3.1-4.el9
• libaio-0.3.111-13.el9
• libarchive-3.5.3-5.el9_6
• libassuan-2.5.5-3.el9
• libatomic-11.5.0-5.el9_5
• libattr-2.5.1-3.el9
• libbasicobjects-0.1.1-53.el9
• libblkid-2.37.4-21.el9
• libbpf-2:1.5.0-1.el9
• libbrotli-1.0.9-7.el9_5
• libcap-2.48-9.el9_2
• libcap-ng-0.8.2-7.el9
• libcbor-0.7.0-5.el9
• libcollection-0.7.0-53.el9
• libcom_err-1.46.5-7.el9
• libcomps-0.1.18-1.el9
• libcurl-7.76.1-31.el9
• libdaemon-0.14-23.el9
• libdb-5.3.28-57.el9_6
• libdhash-0.5.0-53.el9
• libdnf-0.69.0-13.el9
• libdnf-plugin-subscription-manager-1.29.45.1-1.el9_6
• libeconf-0.4.1-4.el9
• libedit-3.1-38.20210216cvs.el9
• libev-4.33-6.el9
• libevent-2.1.12-8.el9_4
• libfdisk-2.37.4-21.el9
• libffi-3.4.2-8.el9
• libfido2-1.13.0-2.el9
• libgcc-11.5.0-5.el9_5
• libgcrypt-1.10.0-11.el9
• libgomp-11.5.0-5.el9_5
• libgpg-error-1.42-5.el9
• libgudev-237-1.el9
• libgusb-0.3.8-2.el9
• libibverbs-54.0-1.el9
• libicu-67.1-9.el9
• libidn2-2.3.0-7.el9
• libini_config-1.3.1-53.el9
• libipa_hbac-2.9.6-4.el9_6.2
• libjcat-0.1.6-3.el9
• libjose-14-1.el9
• libkcapi-1.4.0-2.el9
• libkcapi-hmaccalc-1.4.0-2.el9
• libksba-1.5.1-7.el9
• libldb-4.21.3-7.el9_6
• libluksmeta-9-12.el9
• libmaxminddb-1.5.2-4.el9
• libmicrohttpd-1:0.9.72-5.el9
• libmnl-1.0.4-16.el9_4
• libmodulemd-2.13.0-2.el9
• libmount-2.37.4-21.el9
• libndp-1.9-1.el9
• libnet-1.2-7.el9
• libnetfilter_conntrack-1.0.9-1.el9
• libnetfilter_cthelper-1.0.0-22.el9
• libnetfilter_cttimeout-1.0.0-19.el9
• libnetfilter_queue-1.0.5-1.el9
• libnfnetlink-1.0.1-23.el9_5
• libnfsidmap-1:2.5.4-34.el9
• libnftnl-1.2.6-4.el9_4
• libnghttp2-1.43.0-6.el9
• libnl3-3.11.0-1.el9
• libnl3-cli-3.11.0-1.el9
• libnvme-1.11.1-1.el9
• libpath_utils-0.2.1-53.el9
• libpcap-14:1.10.0-4.el9
• libpkgconf-1.7.3-10.el9
• libpsl-0.21.1-5.el9
• libpwquality-1.4.4-8.el9
• libref_array-0.1.5-53.el9
• librepo-1.14.5-2.el9
• libreport-filesystem-2.15.2-6.el9
• librhsm-0.0.3-9.el9
• libseccomp-2.5.2-2.el9
• libselinux-3.6-3.el9
• libselinux-utils-3.6-3.el9
• libsemanage-3.6-5.el9_6
• libsepol-3.6-2.el9
• libsigsegv-2.13-4.el9
• libslirp-4.4.0-8.el9
• libsmartcols-2.37.4-21.el9
• libsmbclient-4.21.3-7.el9_6
• libsolv-0.7.24-3.el9
• libss-1.46.5-7.el9
• libssh-0.10.4-13.el9
• libssh-config-0.10.4-13.el9
• libsss_certmap-2.9.6-4.el9_6.2
• libsss_idmap-2.9.6-4.el9_6.2
• libsss_nss_idmap-2.9.6-4.el9_6.2
• libsss_sudo-2.9.6-4.el9_6.2
• libstdc++-11.5.0-5.el9_5
• libtalloc-2.4.2-1.el9
• libtasn1-4.16.0-9.el9
• libtdb-1.4.12-1.el9
• libteam-1.31-16.el9_1
• libtevent-0.16.1-1.el9
• libtirpc-1.3.3-9.el9
• libtool-ltdl-2.4.6-46.el9
• libunistring-0.9.10-15.el9
• liburing-2.5-1.el9
• libusbx-1.0.26-1.el9
• libuser-0.63-16.el9
• libutempter-1.2.1-6.el9
• libuuid-2.37.4-21.el9
• libuv-1:1.42.0-2.el9_4
• libverto-0.3.2-3.el9
• libverto-libev-0.3.2-3.el9
• libwbclient-4.21.3-7.el9_6
• libxcrypt-4.4.18-3.el9
• libxml2-2.9.13-10.el9_6
• libxmlb-0.3.10-1.el9
• libyaml-0.2.5-7.el9
• libzstd-1.5.5-1.el9
• linux-firmware-20250604-151.2.el9_6
• linux-firmware-whence-20250604-151.2.el9_6
• lmdb-libs-0.9.29-3.el9
• logrotate-3.18.0-9.el9
• lsof-4.94.0-3.el9
• lua-libs-5.4.4-4.el9
• luksmeta-9-12.el9
• lvm2-9:2.03.28-6.el9
• lvm2-libs-9:2.03.28-6.el9
• lz4-libs-1.9.3-5.el9
• lzo-2.10-7.el9
• mdadm-4.3-4.el9_5
• mokutil-2:0.6.0-4.el9
• mpfr-4.1.0-7.el9
• nano-5.6.1-7.el9
• ncurses-6.2-10.20210508.el9
• ncurses-base-6.2-10.20210508.el9
• ncurses-libs-6.2-10.20210508.el9
• net-tools-2.0-0.64.20160912git.el9
• netavark-2:1.14.1-1.el9_6
• nettle-3.10.1-1.el9
• newt-0.52.21-11.el9
• nfs-utils-1:2.5.4-34.el9
• nftables-1:1.0.9-3.el9
• nmap-ncat-3:7.92-3.el9
• nmstate-2.2.45-1.el9_6
• npth-1.6-8.el9
• nss-altfiles-2.18.1-20.el9
• numactl-libs-2.0.19-1.el9
• nvme-cli-2.11-5.el9
• oniguruma-6.9.6-1.el9.6
• openldap-2.6.8-4.el9
• openshift-clients-4.20.0-202507220613.p0.gea45cd5.assembly.stream.el9
• openshift-kubelet-4.20.0-202507171059.p0.gb94367c.assembly.stream.el9
• openssh-8.7p1-45.el9
• openssh-clients-8.7p1-45.el9
• openssh-server-8.7p1-45.el9
• openssl-1:3.2.2-6.el9_5.1
• openssl-fips-provider-3.0.7-6.el9_5
• openssl-fips-provider-so-3.0.7-6.el9_5
• openssl-libs-1:3.2.2-6.el9_5.1
• openvswitch-selinux-extra-policy-1.0-39.el9fdp
• openvswitch3.5-3.5.0-19.el9fdp
• os-prober-1.77-12.el9_5
• ose-aws-ecr-image-credential-provider-4.19.0-202506111541.p0.g425c1c5.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.20.0-202507171059.p0.gd469d04.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.20.0-202507221915.p0.ge217ae2.assembly.stream.el9
• ostree-2025.1-1.el9
• ostree-libs-2025.1-1.el9
• p11-kit-0.25.3-3.el9_5
• p11-kit-trust-0.25.3-3.el9_5
• pam-1.5.1-25.el9_6
• passt-0^20250217.ga1e48a0-9.el9_6
• passt-selinux-0^20250217.ga1e48a0-9.el9_6
• passwd-0.80-12.el9
• pciutils-3.7.0-7.el9
• pciutils-libs-3.7.0-7.el9
• pcre-8.44-4.el9
• pcre2-10.40-6.el9
• pcre2-syntax-10.40-6.el9
• perl-AutoLoader-5.74-481.el9
• perl-B-1.80-481.el9
• perl-Carp-1.50-460.el9
• perl-Class-Struct-0.66-481.el9
• perl-Data-Dumper-2.174-462.el9
• perl-Digest-1.19-4.el9
• perl-Digest-MD5-2.58-4.el9
• perl-Encode-4:3.08-462.el9
• perl-Errno-1.30-481.el9
• perl-Exporter-5.74-461.el9
• perl-Fcntl-1.13-481.el9
• perl-File-Basename-2.85-481.el9
• perl-File-Path-2.18-4.el9
• perl-File-Temp-1:0.231.100-4.el9
• perl-File-stat-1.09-481.el9
• perl-FileHandle-2.03-481.el9
• perl-Getopt-Long-1:2.52-4.el9
• perl-Getopt-Std-1.12-481.el9
• perl-HTTP-Tiny-0.076-462.el9
• perl-IO-1.43-481.el9
• perl-IO-Socket-IP-0.41-5.el9
• perl-IO-Socket-SSL-2.073-2.el9
• perl-IPC-Open3-1.21-481.el9
• perl-MIME-Base64-3.16-4.el9
• perl-Mozilla-CA-20200520-6.el9
• perl-NDBM_File-1.15-481.el9
• perl-Net-SSLeay-1.94-1.el9
• perl-POSIX-1.94-481.el9
• perl-PathTools-3.78-461.el9
• perl-Pod-Escapes-1:1.07-460.el9
• perl-Pod-Perldoc-3.28.01-461.el9
• perl-Pod-Simple-1:3.42-4.el9
• perl-Pod-Usage-4:2.01-4.el9
• perl-Scalar-List-Utils-4:1.56-462.el9
• perl-SelectSaver-1.02-481.el9
• perl-Socket-4:2.031-4.el9
• perl-Storable-1:3.21-460.el9
• perl-Symbol-1.08-481.el9
• perl-Term-ANSIColor-5.01-461.el9
• perl-Term-Cap-1.17-460.el9
• perl-Text-ParseWords-3.30-460.el9
• perl-Text-Tabs+Wrap-2013.0523-460.el9
• perl-Time-Local-2:1.300-7.el9
• perl-URI-5.09-3.el9
• perl-base-2.27-481.el9
• perl-constant-1.33-461.el9
• perl-if-0.60.800-481.el9
• perl-interpreter-4:5.32.1-481.el9
• perl-libnet-3.13-4.el9
• perl-libs-4:5.32.1-481.el9
• perl-mro-1.23-481.el9
• perl-overload-1.31-481.el9
• perl-overloading-0.02-481.el9
• perl-parent-1:0.238-460.el9
• perl-podlators-1:4.14-460.el9
• perl-subs-1.03-481.el9
• perl-vars-1.05-481.el9
• pigz-2.8-1.el9
• pkgconf-1.7.3-10.el9
• pkgconf-m4-1.7.3-10.el9
• pkgconf-pkg-config-1.7.3-10.el9
• podman-5:5.4.0-12.el9_6
• policycoreutils-3.6-2.1.el9
• policycoreutils-python-utils-3.6-2.1.el9
• polkit-0.117-13.el9
• polkit-libs-0.117-13.el9
• polkit-pkla-compat-0.1-21.el9
• popt-1.18-8.el9
• procps-ng-3.3.17-14.el9
• protobuf-c-1.3.3-13.el9
• psmisc-23.4-3.el9
• publicsuffix-list-dafsa-20210518-3.el9
• python-unversioned-command-3.9.21-2.el9_6.1
• python3-3.9.21-2.el9_6.1
• python3-audit-3.1.5-4.el9
• python3-chardet-4.0.0-5.el9
• python3-cloud-what-1.29.45.1-1.el9_6
• python3-dateutil-1:2.8.1-7.el9
• python3-dbus-1.2.18-2.el9
• python3-decorator-4.4.2-6.el9
• python3-distro-1.5.0-7.el9
• python3-dnf-4.14.0-25.el9
• python3-dnf-plugin-versionlock-4.3.0-20.el9
• python3-dnf-plugins-core-4.3.0-20.el9
• python3-gobject-base-3.40.1-6.el9
• python3-gobject-base-noarch-3.40.1-6.el9
• python3-gpg-1.15.1-6.el9
• python3-hawkey-0.69.0-13.el9
• python3-idna-2.10-7.el9_4.1
• python3-iniparse-0.4-45.el9
• python3-inotify-0.9.6-25.el9
• python3-libcomps-0.1.18-1.el9
• python3-libdnf-0.69.0-13.el9
• python3-librepo-1.14.5-2.el9
• python3-libs-3.9.21-2.el9_6.1
• python3-libselinux-3.6-3.el9
• python3-libsemanage-3.6-5.el9_6
• python3-pip-wheel-21.3.1-1.el9
• python3-policycoreutils-3.6-2.1.el9
• python3-pysocks-1.7.1-12.el9
• python3-pyyaml-5.4.1-6.el9
• python3-requests-2.25.1-9.el9
• python3-rpm-4.16.1.3-37.el9
• python3-setools-4.4.4-1.el9
• python3-setuptools-53.0.0-13.el9_6.1
• python3-setuptools-wheel-53.0.0-13.el9_6.1
• python3-six-1.15.0-9.el9
• python3-subscription-manager-rhsm-1.29.45.1-1.el9_6
• python3-systemd-234-19.el9
• python3-urllib3-1.26.5-6.el9
• qemu-guest-agent-17:9.1.0-15.el9_6.4
• quota-1:4.09-4.el9
• quota-nls-1:4.09-4.el9
• readline-8.1-4.el9
• redhat-release-9.6-0.1.el9
• redhat-release-eula-9.6-0.1.el9
• rpcbind-1.2.6-7.el9
• rpm-4.16.1.3-37.el9
• rpm-build-libs-4.16.1.3-37.el9
• rpm-libs-4.16.1.3-37.el9
• rpm-ostree-2025.6-5.el9_6
• rpm-ostree-libs-2025.6-5.el9_6
• rpm-plugin-selinux-4.16.1.3-37.el9
• rpm-plugin-systemd-inhibit-4.16.1.3-37.el9
• rpm-sign-libs-4.16.1.3-37.el9
• rsync-3.2.5-3.el9
• runc-4:1.2.4-2.el9
• samba-client-libs-4.21.3-7.el9_6
• samba-common-4.21.3-7.el9_6
• samba-common-libs-4.21.3-7.el9_6
• sed-4.8-9.el9
• selinux-policy-38.1.53-5.el9_6
• selinux-policy-targeted-38.1.53-5.el9_6
• setup-2.13.7-10.el9
• sg3_utils-1.47-10.el9
• sg3_utils-libs-1.47-10.el9
• shadow-utils-2:4.9-12.el9
• shadow-utils-subid-2:4.9-12.el9
• shared-mime-info-2.1-5.el9
• shim-aa64-15.8-4.el9_3
• skopeo-2:1.18.1-2.el9_6
• slang-2.3.2-11.el9
• slirp4netns-1.3.2-1.el9
• snappy-1.1.8-8.el9
• socat-1.7.4.1-6.el9_6.1
• sqlite-libs-3.34.1-7.el9_3
• squashfs-tools-4.4-10.git1.el9
• ssh-key-dir-0.1.4-1.el9
• sssd-2.9.6-4.el9_6.2
• sssd-ad-2.9.6-4.el9_6.2
• sssd-client-2.9.6-4.el9_6.2
• sssd-common-2.9.6-4.el9_6.2
• sssd-common-pac-2.9.6-4.el9_6.2
• sssd-ipa-2.9.6-4.el9_6.2
• sssd-krb5-2.9.6-4.el9_6.2
• sssd-krb5-common-2.9.6-4.el9_6.2
• sssd-ldap-2.9.6-4.el9_6.2
• sssd-nfs-idmap-2.9.6-4.el9_6.2
• sssd-proxy-2.9.6-4.el9_6.2
• stalld-1.19.6-1.el9
• strace-6.12-1.el9
• subscription-manager-1.29.45.1-1.el9_6
• subscription-manager-rhsm-certificates-20220623-1.el9
• sudo-1.9.5p2-10.el9_6.1
• systemd-252-51.el9_6.1
• systemd-journal-remote-252-51.el9_6.1
• systemd-libs-252-51.el9_6.1
• systemd-pam-252-51.el9_6.1
• systemd-rpm-macros-252-51.el9_6.1
• systemd-udev-252-51.el9_6.1
• tar-2:1.34-7.el9
• teamd-1.31-16.el9_1
• tmux-3.2a-5.el9
• toolbox-0.1.2-1.rhaos4.19.el9
• tpm2-tools-5.2-4.el9
• tpm2-tss-3.2.3-1.el9
• tzdata-2025b-1.el9
• unbound-libs-1.16.2-19.el9_6.1
• usermode-1.114-6.el9
• userspace-rcu-0.12.1-6.el9
• util-linux-2.37.4-21.el9
• util-linux-core-2.37.4-21.el9
• vim-minimal-2:8.2.2637-22.el9_6
• virt-what-1.27-1.el9
• which-2.21-29.el9
• xfsprogs-6.4.0-5.el9
• xz-5.2.5-8.el9_0
• xz-libs-5.2.5-8.el9_0
• yajl-2.1.0-25.el9
• zlib-1.2.11-40.el9
• zram-generator-0.3.2-7.el9
• zstd-1.5.5-1.el9

Changed:

• avahi-libs 0.8-22.el9_6 → 0.8-22.el9_6.1
• bootupd 0.2.27-3.el9 → 0.2.27-4.el9_6
• cri-o 1.33.2-4.rhaos4.20.gitcb609a5.el9 → 1.33.2-9.rhaos4.20.gitac52d40.el9
• git-core 2.47.1-2.el9_6 → 2.47.3-1.el9_6
• glib2 2.68.4-16.el9 → 2.68.4-16.el9_6.2
• jq 1.6-17.el9 → 1.6-17.el9_6.2
• kernel 5.14.0-570.26.1.el9_6 → 5.14.0-570.30.1.el9_6
• kernel-core 5.14.0-570.26.1.el9_6 → 5.14.0-570.30.1.el9_6
• kernel-modules 5.14.0-570.26.1.el9_6 → 5.14.0-570.30.1.el9_6
• kernel-modules-core 5.14.0-570.26.1.el9_6 → 5.14.0-570.30.1.el9_6
• kernel-modules-extra 5.14.0-570.26.1.el9_6 → 5.14.0-570.30.1.el9_6
• libldb 4.21.3-5.el9_6 → 4.21.3-7.el9_6
• libsmbclient 4.21.3-5.el9_6 → 4.21.3-7.el9_6
• libwbclient 4.21.3-5.el9_6 → 4.21.3-7.el9_6
• libxml2 2.9.13-9.el9_6 → 2.9.13-10.el9_6
• linux-firmware 20250513-151.1.el9_6 → 20250604-151.2.el9_6
• linux-firmware-whence 20250513-151.1.el9_6 → 20250604-151.2.el9_6
• openshift-clients 4.20.0-202507031044.p0.gf0e1051.assembly.stream.el9 → 4.20.0-202507220613.p0.gea45cd5.assembly.stream.el9
• openshift-kubelet 4.20.0-202507032145.p0.ge52b13b.assembly.stream.el9 → 4.20.0-202507171059.p0.gb94367c.assembly.stream.el9
• ose-azure-acr-image-credential-provider 4.20.0-202507042143.p0.gd469d04.assembly.stream.el9 → 4.20.0-202507171059.p0.gd469d04.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider 4.20.0-202506181842.p0.gaabc000.assembly.stream.el9 → 4.20.0-202507221915.p0.ge217ae2.assembly.stream.el9
• podman 5:5.4.0-10.el9_6 → 5:5.4.0-12.el9_6
• samba-client-libs 4.21.3-5.el9_6 → 4.21.3-7.el9_6
• samba-common 4.21.3-5.el9_6 → 4.21.3-7.el9_6
• samba-common-libs 4.21.3-5.el9_6 → 4.21.3-7.el9_6
• unbound-libs 1.16.2-18.el9_6 → 1.16.2-19.el9_6.1

Extensions

Full list (144 packages)

• NetworkManager-libreswan-1.2.24-1.el9.aarch64
• bison-3.7.4-5.el9.aarch64
• corosync-3.1.9-2.el9_6.aarch64
• corosynclib-3.1.9-2.el9_6.aarch64
• cpp-11.5.0-5.el9_5.aarch64
• crun-wasm-1.8.5-5.rhaos4.14.el9.aarch64
• elfutils-libelf-devel-0.192-6.el9_6.aarch64
• fence-agents-all-4.10.0-86.el9_6.7.aarch64
• fence-agents-amt-ws-4.10.0-86.el9_6.7.noarch
• fence-agents-apc-4.10.0-86.el9_6.7.noarch
• fence-agents-apc-snmp-4.10.0-86.el9_6.7.noarch
• fence-agents-bladecenter-4.10.0-86.el9_6.7.noarch
• fence-agents-brocade-4.10.0-86.el9_6.7.noarch
• fence-agents-cisco-mds-4.10.0-86.el9_6.7.noarch
• fence-agents-cisco-ucs-4.10.0-86.el9_6.7.noarch
• fence-agents-common-4.10.0-86.el9_6.7.noarch
• fence-agents-drac5-4.10.0-86.el9_6.7.noarch
• fence-agents-eaton-snmp-4.10.0-86.el9_6.7.noarch
• fence-agents-emerson-4.10.0-86.el9_6.7.noarch
• fence-agents-eps-4.10.0-86.el9_6.7.noarch
• fence-agents-heuristics-ping-4.10.0-86.el9_6.7.noarch
• fence-agents-hpblade-4.10.0-86.el9_6.7.noarch
• fence-agents-ibmblade-4.10.0-86.el9_6.7.noarch
• fence-agents-ifmib-4.10.0-86.el9_6.7.noarch
• fence-agents-ilo-moonshot-4.10.0-86.el9_6.7.noarch
• fence-agents-ilo-mp-4.10.0-86.el9_6.7.noarch
• fence-agents-ilo-ssh-4.10.0-86.el9_6.7.noarch
• fence-agents-ilo2-4.10.0-86.el9_6.7.noarch
• fence-agents-intelmodular-4.10.0-86.el9_6.7.noarch
• fence-agents-ipdu-4.10.0-86.el9_6.7.noarch
• fence-agents-ipmilan-4.10.0-86.el9_6.7.noarch
• fence-agents-kdump-4.10.0-86.el9_6.7.aarch64
• fence-agents-mpath-4.10.0-86.el9_6.7.noarch
• fence-agents-redfish-4.10.0-86.el9_6.7.aarch64
• fence-agents-rhevm-4.10.0-86.el9_6.7.noarch
• fence-agents-rsa-4.10.0-86.el9_6.7.noarch
• fence-agents-rsb-4.10.0-86.el9_6.7.noarch
• fence-agents-sbd-4.10.0-86.el9_6.7.noarch
• fence-agents-scsi-4.10.0-86.el9_6.7.noarch
• fence-agents-vmware-rest-4.10.0-86.el9_6.7.noarch
• fence-agents-vmware-soap-4.10.0-86.el9_6.7.noarch
• fence-agents-wti-4.10.0-86.el9_6.7.noarch
• flex-2.6.4-9.el9.aarch64
• fmt-9.1.0-1.el9.aarch64
• gcc-11.5.0-5.el9_5.aarch64
• glibc-devel-2.34-168.el9_6.20.aarch64
• gnutls-dane-3.8.3-6.el9.aarch64
• gnutls-utils-3.8.3-6.el9.aarch64
• ipmitool-1.8.18-27.el9.aarch64
• kernel-5.14.0-570.30.1.el9_6.aarch64
• kernel-64k-core-5.14.0-570.30.1.el9_6.aarch64
• kernel-64k-modules-5.14.0-570.30.1.el9_6.aarch64
• kernel-64k-modules-core-5.14.0-570.30.1.el9_6.aarch64
• kernel-64k-modules-extra-5.14.0-570.30.1.el9_6.aarch64
• kernel-core-5.14.0-570.30.1.el9_6.aarch64
• kernel-devel-5.14.0-570.30.1.el9_6.aarch64
• kernel-headers-5.14.0-570.30.1.el9_6.aarch64
• kernel-modules-5.14.0-570.30.1.el9_6.aarch64
• kernel-modules-extra-5.14.0-570.30.1.el9_6.aarch64
• krb5-pkinit-1.21.1-8.el9_6.aarch64
• krb5-workstation-1.21.1-8.el9_6.aarch64
• ldns-1.7.1-12.el9.aarch64
• libasan-11.5.0-5.el9_5.aarch64
• libkadm5-1.21.1-8.el9_6.aarch64
• libknet1-1.28-1.el9.aarch64
• libknet1-compress-bzip2-plugin-1.28-1.el9.aarch64
• libknet1-compress-lz4-plugin-1.28-1.el9.aarch64
• libknet1-compress-lzma-plugin-1.28-1.el9.aarch64
• libknet1-compress-lzo2-plugin-1.28-1.el9.aarch64
• libknet1-compress-plugins-all-1.28-1.el9.aarch64
• libknet1-compress-zlib-plugin-1.28-1.el9.aarch64
• libknet1-compress-zstd-plugin-1.28-1.el9.aarch64
• libknet1-crypto-nss-plugin-1.28-1.el9.aarch64
• libknet1-crypto-openssl-plugin-1.28-1.el9.aarch64
• libknet1-crypto-plugins-all-1.28-1.el9.aarch64
• libknet1-plugins-all-1.28-1.el9.aarch64
• libmpc-1.2.1-4.el9.aarch64
• libnozzle1-1.28-1.el9.aarch64
• libqb-2.0.8-1.el9.aarch64
• libreswan-5.2-1.el9fdp.aarch64
• libubsan-11.5.0-5.el9_5.aarch64
• libwsman1-2.6.8-23.el9.aarch64
• libxcrypt-devel-4.4.18-3.el9.aarch64
• libxslt-1.1.34-13.el9_6.aarch64
• libzstd-devel-1.5.5-1.el9.aarch64
• lld-17.0.6-1.el9.aarch64
• lld-libs-17.0.6-1.el9.aarch64
• llvm-17.0.6-5.el9.aarch64
• llvm-libs-17.0.6-5.el9.aarch64
• lm_sensors-libs-3.6.0-10.el9.aarch64
• m4-1.4.19-1.el9.aarch64
• make-1:4.3-8.el9.aarch64
• net-snmp-libs-1:5.9.1-17.el9.aarch64
• net-snmp-utils-1:5.9.1-17.el9.aarch64
• nspr-4.35.0-17.el9_2.aarch64
• nss-3.101.0-10.el9_2.aarch64
• nss-softokn-3.101.0-10.el9_2.aarch64
• nss-softokn-freebl-3.101.0-10.el9_2.aarch64
• nss-sysinit-3.101.0-10.el9_2.aarch64
• nss-tools-3.101.0-10.el9_2.aarch64
• nss-util-3.101.0-10.el9_2.aarch64
• openssl-devel-1:3.2.2-6.el9_5.1.aarch64
• openvswitch3.5-ipsec-3.5.0-19.el9fdp.aarch64
• openwsman-python3-2.6.8-23.el9.aarch64
• pacemaker-2.1.9-1.2.el9_6.aarch64
• pacemaker-cli-2.1.9-1.2.el9_6.aarch64
• pacemaker-cluster-libs-2.1.9-1.2.el9_6.aarch64
• pacemaker-libs-2.1.9-1.2.el9_6.aarch64
• pacemaker-schemas-2.1.9-1.2.el9_6.noarch
• pcp-conf-6.3.7-1.el9_6.aarch64
• pcp-libs-6.3.7-1.el9_6.aarch64
• pcs-0.11.9-2.el9_6.1.aarch64
• perl-TimeDate-1:2.33-6.el9.noarch
• protobuf-3.14.0-16.el9.aarch64
• python3-cffi-1.14.5-5.el9.aarch64
• python3-cryptography-36.0.1-4.el9.aarch64
• python3-lxml-4.6.5-3.el9.aarch64
• python3-openvswitch3.5-3.5.0-19.el9fdp.aarch64
• python3-ply-3.11-14.el9.noarch
• python3-pycparser-2.20-6.el9.noarch
• python3-pycurl-7.43.0.6-8.el9.aarch64
• python3-pyparsing-2.4.7-9.el9.noarch
• python3-tornado-6.4.2-2.el9_6.2.aarch64
• redhat-logos-90.5-1.el9_6.1.aarch64
• resource-agents-4.10.0-71.el9_6.5.aarch64
• ruby-3.0.7-165.el9_5.aarch64
• ruby-default-gems-3.0.7-165.el9_5.noarch
• ruby-libs-3.0.7-165.el9_5.aarch64
• rubygem-bigdecimal-3.0.0-165.el9_5.aarch64
• rubygem-bundler-2.2.33-165.el9_5.noarch
• rubygem-io-console-0.5.7-165.el9_5.aarch64
• rubygem-json-2.5.1-165.el9_5.aarch64
• rubygem-psych-3.3.2-165.el9_5.aarch64
• rubygem-rdoc-6.3.4.1-165.el9_5.noarch
• rubygem-rexml-3.2.5-165.el9_5.noarch
• rubygems-3.2.33-165.el9_5.noarch
• sbd-1.5.2-1.el9.aarch64
• spdlog-1.13.0-1.rhaos4.14.el9.aarch64
• sysstat-12.5.4-9.el9.aarch64
• telnet-1:0.17-85.el9.aarch64
• usbguard-1.0.0-16.el9.aarch64
• usbguard-selinux-1.0.0-16.el9.noarch
• wasmedge-0.14.0-2.rhaos4.20.el9.aarch64
• zlib-devel-1.2.11-40.el9.aarch64

Red Hat Enterprise Linux CoreOS base layer: 9.6.20250726-0