Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.22.0-ec.3-aarch64

Team Approvals:

No tests for this release

Upgrades from:

---

Changes from 4.22.0-ec.2

Created: 2026-02-27 16:15:07 +0000 UTC

Image Digest: sha256:fdef38e830a1929f58397ac99cfc6abacaefb092dae12eb432d50aad790ef667

Components

• Kubectl 1.34.1
• Kubernetes 1.34.2
• Kubernetes Tests 1.34.1
• Red Hat Enterprise Linux CoreOS upgraded from 9.6.20260130-0 to 9.8.20260221-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
AdditionalRoutingCapabilities (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AdminNetworkPolicy (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
CPMSMachineNamePrefix (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NetworkDiagnosticsConfig (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NetworkLiveMigration (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NetworkSegmentation (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
PreconfiguredUDNAddresses (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
RouteAdvertisements (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VolumeAttributesClass (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ManagedBootImagesCPMS (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
MutableCSINodeAllocatableCount (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
IngressControllerDynamicConfigurationManager (0 tests)	Disabled	Disabled	Enabled	Enabled	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)
CRIOCredentialProviderConfig (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
DRAPartitionableDevices (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
GatewayAPIWithoutOLM (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)

Rebuilt images without code change

• apiserver-network-proxy git e55ca10b sha256:1e48058435e7f0155e1769e2ddaca5790bad77bbe8b2200754fd7638cb2ed434
• aws-cluster-api-controllers git f8b9cb05 sha256:efc859f3a9ac1ba584765bb9d042eb4d0c81b38a5a2333b9a19def3c9c531aae
• aws-kms-encryption-provider git 19e7b623 sha256:b8f986325301430bf7f99320f5c1cc58b0fcff90955d39538fde22d1deabc77c
• aws-machine-controllers git 1b75971c sha256:baf2a1714d2a2f051ce38b547e6ffff67ba01072949868ccbb467533074ca880
• aws-pod-identity-webhook git 3e5b2ce4 sha256:2637d2d238cf7011771198de8f8d7c57427b3fb83754d127c2e7ac3b5e6f4b39
• azure-cloud-controller-manager git 8584b9a8 sha256:eb04630616b874bee4903087ddb288c15ab2834df38809b6eca98fb3199e7c28
• azure-cloud-node-manager git 8584b9a8 sha256:c3268a67052e46a461ba98e36f8ee0b5d158da839e74b640856beb512b733fb9
• azure-disk-csi-driver git 04aee47f sha256:3a9d0a997d4c8cede646263e3ac1911b75afba86f7e9a7b8494ce3478ba11d79
• azure-file-csi-driver git c25b3a5c sha256:9c2215ee2adedc1a57a989d498ebfedf2e42a9391e06480b26901cee3ffbf35c
• azure-kms-encryption-provider git 99b9a3a3 sha256:50bb92cedd725fc80c9d2cf61865fcd326d59b12807e18c5f2bdd0b94f45660e
• azure-machine-controllers git 60f6443b sha256:20a76a5dc40c4fce97bcb0b2deb556ce467cf77f74bd6c4e86827d7307440774
• azure-service-operator git 17e57462 sha256:efa7551e651df6a7f6b3065cdad87fb98565e0681422cc84019599727c032f84
• azure-workload-identity-webhook git e59e405a sha256:04a9582131b944f93a063325a1a29fa62ccc3576dfdeed7433e33160f7d83f00
• baremetal-cluster-api-controllers git c7f56e10 sha256:07e5487926859ef3f95759e4fdfd21343e397d7a87a56cb3c2488c077cc0248e
• baremetal-machine-controllers git 650cb6f3 sha256:2c64c6933eb4b93ba54daf429b48b02cdfb437e23757665464ffccb93bb814ad
• cloud-network-config-controller git 03572385 sha256:fc664c4203d20fea4e7154d1fd9c7ed271db02541e6677fcdfea1fcb46dbba93
• cluster-bootstrap git dc0d4a5c sha256:ebf10f5c9930dc99c6c036da0dbb0b8774869dfb433ba30981e225d09ab21c0a
• cluster-cloud-controller-manager-operator git 8f8c56ee sha256:ce81335b33555381f217efb73da58038347ad3aac0a179ba0a7d10d44cc3fb38
• cluster-config-operator git b04cc2d7 sha256:5033e77d6544ed43d8e7a9affe1900ba31e12aa25d3a2c6f190bc13edb195a1b
• cluster-csi-snapshot-controller-operator git 7b633539 sha256:f4cfc7c57ed6efb3845af58984024fe438dd0be6b4ee9359ce5a641e5517e77b
• cluster-kube-storage-version-migrator-operator git d29bfd21 sha256:7e10c22519a8fc5cd804fe5ec30fb8f9a835eb69d21b1d2ccea96d47f2b27e8a
• cluster-policy-controller git 8b775487 sha256:18890faffc1bc436b21745dab10f1be5eb143a9236146f4bdf7259251679809e
• cluster-samples-operator git 4a32fd6f sha256:59b0f7f2524c739d76077fec688152d771c3633bd9d40a6f6aed9ae243cedab1
• configmap-reloader git 0bc91e4d sha256:202618ecd8c4b7f13e1d2343686856ea208f966cf112e07549933fbb07abab23
• container-networking-plugins git 747ad66c sha256:c6e2034e73a4680807b4cf03a928f126fcf7ff482f6b2189da95e247f728e43e
• containernetworking-plugins-microshift git 747ad66c sha256:a50647b1e447588d3707ec077d844eba09e92f47707e86fe06ef551d1d5ebd88
• coredns git 9798af85 sha256:ceca1e125f989f0f04646eebb8c0db29f66367da1407b7f5753b51e1b76d9258
• csi-external-attacher git cb0b279d sha256:208c517aa2fad052e89df382453ec7d1f84e33824ef03d3d1b8b0f79e9e1841a
• csi-external-provisioner git fef79c56 sha256:b20e58762936611ac80009a80cca817d6e512001ed69e3a328e1ff2b12e93574
• csi-external-resizer git 15afb444 sha256:ed275c2a10c6b681645650c8e4e014fcaf51506772ffec2709088b661661a25f
• csi-external-snapshot-metadata git ec2a8dd3 sha256:af5ecfaf9f6a9ea0f72fa3b19bb1cf789b9389775bd94a66b3eef133c5fe0068
• csi-external-snapshotter git d20b90a9 sha256:c57cea18488b26a9e5d158c8b1990debf3b3d6c95440d5851fe7d01a21d7260e
• csi-livenessprobe git 966a3bf9 sha256:737b7c558cdd0adc370da5bec856d0dc1d9266d8212298e115b7e0ae78ca5596
• csi-node-driver-registrar git 65d7aa73 sha256:b4c227de907084e4349738fd04e60dafd7a70d725f587db7cfb49ef0aa60db27
• csi-snapshot-controller git d20b90a9 sha256:b75aebec9dc3d66e7aa3571ca05b714edba7486bb330b81bb10e9d4542a2a358
• docker-registry git d4cce000 sha256:938e2e6ad99ce9be876805176746008d4b28fc3989bf8afe97fe40386a8e6351
• driver-toolkit git 411e7ca5 sha256:73c87b4e0ae674892d1c4f6dc566b5feaad8dcd2fdfd3a569011bb782dee2a55
• egress-router-cni git 5e0f8d1b sha256:2b98d5f16dcb9f493b33256e8f0b3393fe4e947ae2610d723be9b88496ceb366
• gcp-cloud-controller-manager git 8732386c sha256:e5c8944f4606d53a7f9cf993c7b0384fab4ee654eba6aabd838a4114badb21c2
• gcp-machine-controllers git 80740861 sha256:25ee9f1a6f1afc50d091b41fc97913a8530cce62c8cb754f49e689d8251080be
• ironic-machine-os-downloader git 2a772c47 sha256:8250dd74c076e27160058ee38f0fb59cfece7bda1c4b3eb8660fd523f7490ea3
• ironic-static-ip-manager git a379d09f sha256:1286203ed865bebd84254a60fd5de522138510ec0b624061267fb85a4b843d5d
• kube-metrics-server git 8d55e22c sha256:f5da0d701d99af2a93e7404abb28f1170d359857e9ba6310bb5b979555e77584
• kube-rbac-proxy git c7ab76fd sha256:7f6ba06c2f65b8ef8cb3511b81aa75e2b973a41133396cc3467afbd95f23ce0e
• kube-storage-version-migrator git 73b468ab sha256:58fba24ee7c991a4eed8e130fc00bcee06d16fa154ffb030e730a0ca94ac2edb
• kubevirt-csi-driver git 9e2dbddf sha256:d7b673e67afb4df58d6f3105281c0c94723bea8dec069909d19d899178bec74f
• libvirt-machine-controllers git 76effeca sha256:ceda64cce5fe624cb8c58643a2750ddfc1ff776d7bfb0b9406ae177bccf89c23
• machine-api-operator git 4610a83e sha256:20bb6d10d28723e32a1623541784fe55e93c964d7d5e134213cb078b60675464
• metallb-frr git 074b1797 sha256:f5d3cc108ea7e248be2bb6a913a4418ea83df2355ad11c422d7d492f2686a61c
• multus-admission-controller git ce94b849 sha256:db982ac3ff8bbb5d0770d16a8021cc01f9c416766de9a87278fa03378e8f408d
• multus-cni git 93556f99 sha256:e3617312befef3924dca3fc412870f33062b60bd7606c508a89b741dfd3e7982
• multus-cni-microshift git 93556f99 sha256:4a78525b5807956eb12f9db42fe3fa26e5ad85a18fa991a6f5f7794ae01c214b
• multus-networkpolicy git 129b7fea sha256:9561cf243fd93ac9ed96d5789f4bb6898c5e8cee3000d86d8fc1c2dd1a25803c
• multus-route-override-cni git 08af4127 sha256:db74ecff67f3354973cda27fcd271e00175a254907307dc4506178dfd6db6bfb
• multus-whereabouts-ipam-cni git d691040e sha256:558ccc967e4ae7d256761434d4eca61772d55d7dabf44a25a1ebcc85dedd606d
• network-interface-bond-cni git 297eeb43 sha256:2d415e670e9eaffa7761ef3a70a7738a08729cdc109b92ef0cf417136536cc77
• oauth-proxy git 714292f5 sha256:fa3732213d77613e00bdfb35cf90a49b7765c2f98715aa74b9af57d322ee85c4
• openstack-cinder-csi-driver git 51d2a6f9 sha256:95a4a2af5b73bf574b099a70faf286cdfb54fb5af0a371d70bb6529b1d501632
• openstack-cloud-controller-manager git 51d2a6f9 sha256:9d944164fedd44675801c1544756612fe24300e874a25e1eca44a422740cf99e
• openstack-cluster-api-controllers git 7c6fdb46 sha256:6bd2f141a933d4ecda397d23e4835b3355664c62e4016c39c31edc8f440e3a70
• openstack-resource-controller git 6a62845e sha256:6e29f3b51638ceafc9354a41ba02fb75bb80e8c9f7c586faf955eec75185ba7f
• prom-label-proxy git 0e4a77f9 sha256:9d1ad7cd1d0edfaf3c522c5ae9bcb33c5135dcddf4cd7acfe6fa9d2f145e241f
• prometheus-node-exporter git b548e3ed sha256:ee68b92883a6b3c755d1d9ea9340f1407cb19ac7444f1e45bd6170c02676a651
• service-ca-operator git 503e4f5f sha256:e43fe9dd646e16a1fcb5afa46bb288461bd25cb80a4210c7e708d86a0b8cb92c
• thanos git e324870c sha256:9398cef9fdba11dd8dd9ca084231ab6e52d81a750527f6e4bbf61c64ba74efb2
• volume-data-source-validator git d25fefa9 sha256:fe35b86e557fe405ef50922cd3a8635490afda6253e7f81fcfe191b22ea61796

agent-installer-api-server

• ACM-29247: (Revert) infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #9865
• NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.19, 4.22, 4.21 #9752
• MGMT-22907: Prepare 4.21 stable and 4.22 candidate versions assisted-service upstream #8831
• NO-ISSUE: Use renovate to update rpms.lock.yaml #9619
• ACM-29247: (FIX) infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #9505
• NO-ISSUE: Update module github.com/go-logr/logr to v1.4.3 #9357
• NO-ISSUE: [master] Bump OCP versions: 4.21, 4.20, 4.18, 4.19, 4.17 #8912
• ACM-29247: infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #8870
• MGMT-22942: Temporarily mirror CAPI image and OCP 4.20 release for disconnected CAPI CI #8819
• MGMT-23047: Ensure cluster is installed when adding an osImageVersion… #8818
• MGMT-22998: Add documentation to add node to an upgraded cluster #8810
• MGMT-23164: Bug: Assisted Installer fails for OCP < 4.16 due to missing libvirt dependency #8869
• MGMT-22406: Include primary_ip_stack in cluster event notifications #8846
• MGMT-22385: Skip ip= kernel args for Day2 iSCSI/multipath with unknown network #8837
• NO-ISSUE: Update setup-envtest version to release-0.22 #8856
• MGMT-22885: Implement third-party CNI backend support #8797
• NO-ISSUE: Modify Konflux YAMLs to ocm-2.17 #8850
• NO-ISSUE: Update operator bundle channel to ocm-2.17 #8847
• MGMT-23115: add FIPS feature usage tracking #8845
• MGMT-23077: Revert “MGMT-21038: Prevent from inventory set host RequestedHostname directly” #8840
• OCPEDGE-2367: Add support for platform none and external on TNA clusters topology #8830
• MGMT-22731: Add To Renovate Tool - Update UBI-minimal Version Automatically #8802
• MGMT-22523: Bump AMD DeviceConfig driver version to 6.4.3 #8823
• MGMT-23000: Fix when a BMH is paused in non-converged flow #8812
• MGMT-22287: Remove OCP 4.12 support from assisted-service #8794
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• ACM-29247: (Revert) infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #1998
• NO-ISSUE: Update module github.com/jackc/pgtype to v1.14.4 #1664
• NO-ISSUE: Use renovate to update rpms.lock.yaml #1515
• NO-ISSUE: Update github.com/alecthomas/units digest to 0f3dac3 #1524
• ACM-29247: infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #1511
• MGMT-22731: Add To Renovate Tool - Update UBI-minimal Version Automatically #1487
• NO-ISSUE: Modify Konflux YAMLs to ocm-2.17 #1498
• Revert “NO-ISSUE: test for FF ACM 2.17” #1496
• NO-ISSUE: test for FF ACM 2.17 #1495
• Full changelog

agent-installer-node-agent

• NO-ISSUE: Use renovate to update rpms.lock.yaml #1343
• MGMT-23123: fix bootkube.logs missing from bootstrap logs on success #1320
• MGMT-22731: Add To Renovate Tool - Update UBI-minimal Version Automatically #1309
• NO-ISSUE: Modify Konflux YAMLs to ocm-2.17 #1318
• Full changelog

agent-installer-utils

• OCPBUGS-76367: Include additional operators in OVE config #252
• OCPBUGS-76343: Add lso operator to appliance config #249
• OCPBUGS-74933: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 2f3015a #221
• OCPBUGS-74932: Update Konflux references #219
• Full changelog

aws-cloud-controller-manager

• SPLAT-2220: tests/ote: introduce openshift-only e2e to validate feature by feature gate #126
• TRT-2536: UPSTREAM: <carry>: Fix OTE list tests when SingleReplica #125
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-74521: UPSTREAM: 2806, 2816: Remove VolumeAttributesClass FeatureGate #300
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-76298: missing readOnlyRootFilesystem in AWS init containers #506
• OCPBUGS-74971: Fix azure-disk secret namespace/name args #502
• OCPBUGS-74521: Remove VolumeAttributesClass FeatureGate #503
• Full changelog

aws-karpenter-provider-aws

• AUTOSCALE-485: rebase to 1.8.6 #25
• AUTOSCALE-293: partially ignore drift on ec2nodeclass userdata field #21
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-53004: Remove references to master branch #336
• Full changelog

baremetal-installer, installer, installer-artifacts

• OKD-259: Add Validatation for the OKD Featureset to Prevent it From Being Enabled on OCP Clusters #10260
• OCPBUGS-54298: Installer should validate mirror registry pull secret #10239
• OCPBUGS-56846: validate azure user-assigned identity existence #10220
• CORS-4055: migrate CCO permission check to AWS SDK v2 #10262
• OCPBUGS-63065: Expand Azure userTags to support Azure Government Cloud #10015
• OCPBUGS-55407: set DNS zone for Azure Stack Hub private clusters #10233
• CORS-4302: Add N4A instance types to accepted in Installer #10292
• CORS-4142: ensure lbType is NLB when dual-stack is configured #10256
• MCO-2031: OS Image Stream to install-config schema #10192
• CORS-4055: migrate EC2 API calls to AWS SDK v2 #10244
• OCPBUGS-60162: reject byo vpc/subnets with CAPI owned cluster tag #9913
• OCPBUGS-41570: Ensure correct mask for bootstrap external IP #8987
• OCPEDGE-2276: Add support for platform None and External in TNA clusters #10286
• OCPEDGE-2276: Add support for platform None in TNA (Two-Node Arbiter) clusters #10236
• CORS-4055: migrate credential provider check to AWS SDK v2 #10261
• CORS-4328: configure AWS CCM NodeIPFamilies for dual-stack support #10257
• CORS-4055, CORS-4078: migrate ELB/ELBv2 API calls to AWS SDK v2 #10258
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

baremetal-operator

• NO-ISSUE: Merge upstream #455
• Bug OCPBUGS-75006: BMO fails to start servicing despite updates to HFC spec #457
• Full changelog

baremetal-runtimecfg

• OCPBUGS-76394: Install dbus-tools, needed in pkg/monitor/dnsmasqmonitor.go #380
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-76394: Ignore group ownership on rpm -V #2206
• OCPBUGS-76394: Install subscription-manager in cli image #2200
• Revert “CNTRLPLANE-2656: Fixing oc client cases for microshift and metal ipv6 profiles” #2198
• CNTRLPLANE-2656: Fixing oc client cases for microshift and metal ipv6 profiles #2192
• Full changelog

cloud-credential-operator

• CCO-767: test-ext: Migrate openshift-tests-private E2E cases #961
• CCO-813: Update kubernetes v1.35 and golang v1.25 #967
• OCPBUGS-74384: Resolve nil pointer exception in hasResourceTags #966
• Full changelog

cluster-authentication-operator

• CNTRLPLANE-2247: Add Test encryption provider migration #838
• CNTRLPLANE-2247: Adding KMS TestKMSEncryptionOnOff test for AUTH #834
• Full changelog

cluster-autoscaler

• OCPBUGS-66405: Pick upstream commits to Fix VPA recommender concurrent access panic #403
• AUTOSCALE-482, AUTOSCALE-483: 1.35.0 Upstream rebase #401
• OCPBUGS-74005: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.22 #399
• Full changelog

cluster-autoscaler-operator

• AUTOSCALE-483: Prepare for 4.22 #361
• Full changelog

cluster-baremetal-operator

• OCPBUGS-77027: Update kubebuilder tools to more latest version #556
• OCPBUGS-72548: Fix ironic-proxy service routing for port 6385 #546
• Full changelog

cluster-capi-controllers

• OCPCLOUD-3320: Use new manifests-gen #259
• Full changelog

cluster-capi-operator

• OCPCLOUD-3005: Add MWC/VWC to compatibility requirements RBAC #466
• NO-JIRA: Adds test-standards skill for claude #468
• OCPCLOUD-3005: Initial implementation of CompatibilityRequirement reconciler and webhook #458
• OCPBUGS-77036, OCPCLOUD-3342: provider images disconnected support #463
• OCPCLOUD-3005: Bootstrap compatibility requirements deployment #457
• OCPCLOUD-3327: Rewrite manifests-gen to support upgrade safety #434
• NO-JIRA: Fix NetworkPolicy for openshift-capi-operator namespace #453
• OCPCLOUD-3327: Fix up related objects #452
• Full changelog

cluster-config-api

• MCO-2126: Add defaultStream field to OSImageStream spec #2709
• Prefer feature-gate manifest inclusion for merged CRDs #2712
• CORS-4096: Add DNS Record Type for IPv6 Domain mapping #2361
• OCPBUGS-74512: Remove CPMSMachineNamePrefix featuregate #2677
• OCPCLOUD-3214: Add ClusterAPI config #2564
• SPLAT-2615: Added support for dynamic AWS dedicated hosts #2650
• config/v1: TLSSecurityProfile: align with Mozilla v5.7 guidelines for Go by removing unsupported go ciphers #2697
• NE-2480: Add featuregate for Gateway API without OLM #2691
• Feature gate CVO application of CompatibilityRequirement CRD #2701
• Update integration test timeout and make parallel where possible #2702
• STOR-2878: Graduate MutableCSINodeAllocatableCount to GA #2673
• OCPBUGS-67232: Move DynamicConfigurationManager back to TPNU #2621
• OCPNODE-4078: Add DRAPartitionableDevices to TechPreviewNoUpgrade #2694
• OCPBUGS-74521: Remove VolumeAttributesClass FeatureGate #2675
• MON-4031: Add prometheusOperatorConfig API #2481
• Remove graduated SDN feature gates #2672
• OCPNODE-3863: Add CRIOCredentialProviderConfig API #2557
• add Insights capability to Insights CRDs #2682
• CodeRabbit should not be looking at openapi generated content #2688
• MCO-1931: Promote ManagedBootImagesCPMS feature gate to the Default featureset #2679
• Full changelog

cluster-control-plane-machine-set-operator

• TRT-2542: Revert Fix framework initialization #391
• OCPBUGS-74343: Fix framework initialization #384
• OCPBUGS-74512: Remove CPMSMachineNamePrefix feature gate #387
• Full changelog

cluster-dns-operator

• NE-2414: Use trafficDistribution: PreferSameNode for openshift-dns Service #457
• Full changelog

cluster-etcd-operator

• OCPBUGS-74151: Wait for revision stability before removing etcd members #1540
• NO-JIRA: fix: add missing priority class from status checker #1552
• OCPEDGE-2097: Add pacemaker health check for ExternalEtcd clusters #1487
• OCPEDGE-2231: [TNF] feat: Allow podman-etcd and kubelet resource-agent to restart on start failure #1513
• Full changelog

cluster-image-registry-operator

• IR-350: keeps registry tls config in sync with cluster #1278
• OCPBUGS-62626: only report Progressing=True when progressing towards new configuration #1286
• NO-JIRA: fix TestImageRegistryRemovedWithImages flake #1288
• Full changelog

cluster-ingress-operator

• NO-JIRA: Add coderabbit to CIO #1348
• OCPBUGS-58145: reload serving cert on rotation #1285
• NE-2481: bump k8s libraries to v0.35.0 #1356
• NE-2434: E2E test for internal LoadBalancer Annotations #1353
• Full changelog

cluster-kube-apiserver-operator

• NO-JIRA: Test encryption provider migration #2028
• OCPBUGS-70298: remove kube-apiserver user from crb #2012
• CNTRLPLANE-2247: Adding KMS TestKMSEncryptionOnOff test #2027
• Full changelog

cluster-kube-controller-manager-operator

• CORS-4220: pass dualstack cluster cidrs as an comma-separated list argument #889
• Full changelog

cluster-kube-scheduler-operator

• CNTRLPLANE-2649: Add 30-minute timeout to preferred host e2e test #616
• CNTRLPLANE-2649: Migrate to Ginkgo-based e2e serial and parallel test suite #611
• CNTRLPLANE-2649: OTE infrastructure #608
• Full changelog

cluster-machine-approver

• OCPBUGS-69815: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.22 #289
• MON-4476: chore: add permissions on endpointslice to Prometheus Role and use serviceDiscoveryRole: EndpointSlice in ServiceMonitors #288
• Full changelog

cluster-monitoring-operator

• OCPBUGS-73957: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.22 #2790
• NO-ISSUE: test/e2e: add Func suffix to assertion helpers for consistency #2803
• OCPBUGS-74673: Fix NodeRAIDDegraded & NodeRAIDDiskFailure alerts #2799
• OCPBUGS-69397: Move console control plane health queries to their own… #2778
• Full changelog

cluster-network-operator

• CORENET-6610: Add EVPN APIs #2881
• OCPBUGS-60077: Silence ovnkube-lib.sh to avoid mass of logs to collectors #2761
• CNF-20883: Align templates frrk8s #2874
• OCPBUGS-74401: Remove duplicated openssl parameter #2889
• NO-JIRA: Remove references to AdminNetworkPolicy, NetworkSegmentation, RouteAdvertisements and PreconfiguredUDNAddresses featuregates #2891
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-74027: AA: E2E: LLC: Add tests related to odd cpus #1458
• CNF-20755: e2e: Add housekeeping IRQ load balancing tests #1456
• Full changelog

cluster-olm-operator

• NO-ISSUE: Bump golangci to v2 #174
• NO-ISSUE: Add pedjak as reviewer and approver #171
• OCPBUGS-65505: add resources to clusterOperator relatedObjects #166
• Full changelog

cluster-openshift-apiserver-operator

• NO-JIRA: Create test namespace for KMS migration scenario #650
• CNTRLPLANE-2247: Adding KMS TestKMSEncryptionOnOff test for OAS #649
• CNTRLPLANE-2247: Adding KMS TestKMSEncryptionOnOff test for Routes #644
• Full changelog

cluster-openshift-controller-manager-operator

• no-jira: refactor: use the configured clock source during startup #411
• CNTRLPLANE-2620: propagate global tls config to operand #407
• Full changelog

cluster-storage-operator

• TRT-2542: Revert #661 “OCPBUGS-74530: Remove featuregate StoragePerformantSecurityPolicy” #664
• OCPBUGS-74530: Remove featuregate StoragePerformantSecurityPolicy #661
• Full changelog

cluster-update-keys

• revert ‘OCPNODE-3978: Second run at expanding the default ClusterImagePolicy for openshift component images #96
• OCPNODE-3978: Second run at expanding the default ClusterImagePolicy for openshift component images #95
• TRT-2537: Revert “OCPNODE-3978: Extend the default ClusterImagePolicy for openshift component images” #94
• OCPNODE-3978: Extend the default ClusterImagePolicy for openshift component images #75
• Full changelog

cluster-version-operator

• OTA-1861: cmd/cluster-version-operator/render: Add –cluster-version-manifest-path option #1315
• TRT-2549: Revert “Add a serial e2e for accept-risks” #1319
• OTA-1546: Add a serial e2e for accept-risks #1310
• NO-JIRA: Add docs about places running e2e tests #1312
• OCPBUGS-74028: Updating cluster-version-operator-container image to be consistent with ART for 4.22 #1296
• OCPSTRAT-2485: Introduce feature gate based inclusion/exclusion of manifests #1273
• NO-JIRA: More flexible timeout option for oc-cli #1311
• Full changelog

console

• CONSOLE-5021: Enable consistent-type-imports #16031
• HELM-598: Add new server endpoint for installing OCI charts without Helm repository #15863
• CONSOLE-5011: migrate to yarn berry #15986
• OCPBUGS-76554: Ban CJS imports of PF react-icons #16023
• OCPBUGS-76283: Show modal when downloading pod logs #16014
• NO-JIRA: New microcopy-review skill and context simplification #16009
• CONSOLE-5055: AsyncComponent type improvements #16002
• OCPBUGS-76553: i18n miss in CustomIconModal #16021
• CONSOLE-5012: Create shared error modal launcher using React Context #15946
• CONSOLE-4991, ODC-6264: Jest 30 followup #16010
• CONSOLE-5064: Properly mock PluginStore in unit tests #16017
• CONSOLE-5012: Migrate remaining modals to useOverlay pattern #15990
• CONSOLE-4976: Add ClusterExtension creation form and unit tests #15955
• CONSOLE-3769: Phase 2 of using OpenShift Dynamic Plugin SDK #15904
• CONSOLE-4990: Migrate from history object to React Router v6/v7 hooks #15956
• OCPBUGS-73871: i18n upload/download routine task - 4.21 / 281 (Latest) #15976
• OCPBUGS-74974: Use Actions button instead of kebab menu on Subscription details page #15983
• CONSOLE-5043: Remove defaultProps from operator-hub-item-details #16003
• OCPBUGS-74538: User without access on causes NamespaceBar to reset to All projects when used via dynamic plugin #15996
• CONSOLE-5044: TypeScript port of events.jsx #15944
• CONSOLE-4987: Conditionally render Guided Tour based on capability and disable it for Console E2E tests #15926
• OCPBUGS-74639: Number links for failed pods/nodes on ‘Cluster inventory’ card are not linked to filtered table list #15979
• NO-JIRA: Convert useTechPreviewFlagProvider to static function #15960
• CONSOLE-5015: Refactor file-input to use PF #15952
• OCPBUGS-74137: DataView Pagination page menus : i18n misses #15982
• OCPBUGS-74349: Worklodas - Edit pod count and Edit parallelism : Content is in English #15980
• CONSOLE-5029: Refactor withDashboardResources in with-dashboard-resources.tsx into … #15927
• CONSOLE-5012: Additional modal migrations to overlay pattern #15940
• NO-JIRA: Add guidance for avoiding deprecated components #15969
• OCPBUGS-74647: Fix referenceFor parameter in SubscriptionDetailsPage #15957
• OCPBUGS-65967: Clean up old session cookies to prevent accumulation #15837
• CONSOLE-5012: Migrate modals to overlay pattern #15939
• OCPBUGS-65828: Reduce log noise from transient async cache failures #15821
• OCPBUGS-70329: Auto-linkify URLs in status card alert messages #15880
• CONSOLE-5039: Remove useSafetyFirst #15937
• CONSOLE-4943: Add Machine Set, MachineConfigPool, and VMs columns to Nodes list view #15909
• OCPBUGS-74241: Add null checks to CRB subject #15943
• OCPBUGS-72585: Do not resolve disabled catalog type extensions #15908
• CONSOLE-5012: Migrate delete modals and PVC modals to overlay pattern #15932
• OCPBUGS-74369: Bump lodash to latest #15947
• NO-JIRA: Suppress ResizeObserver-related windowError #15958
• OCPBUGS-72260: ‘0 of pods’ are shown in Status column on DaemonSets list page. #15928
• NO-JIRA: Suppress ResizeObserver-related e2e errors #15950
• CONSOLE-5041: Replace testHook with renderHook from RTL #15936
• NO-JIRA: SDK post-publish tasks #15942
• OCPBUGS-74178: Direct AI agents to AGENTS.md documentation hub #15938
• NO-JIRA: Moving the oc and kubectl delete,apply,create commands from deny to ask permissions #15941
• NO-JIRA: Prepare for 4.22-prerelease.1 release #15933
• CONSOLE-5050: Make shared modules peerDeps in SDK #15934
• CONSOLE-3769: Refactor weird getResourceSidebarSamples #15915
• CONSOLE-5042: Remove React.FCC #15929
• And 9 elided commits (e.g. from squash or rebase merges)
• Full changelog

console-operator

• OCPBUGS-65622: add service account to downloads deployment #1087
• OCPBUGS-62307: Remove orphaned console-conversion-webhook deployment and related resource #1053
• Full changelog

csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibmcloud-cluster-api-controllers, ibmcloud-machine-controllers, kube-proxy, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector

• OCPBUGS-66338: UPSTREAM: 135629: selinux: Fix the controller to ignore finished pods #2538
• OCPBUGS-67200: UPSTREAM: 136202: raise kubelet CSI init backoff to cover ~140s DNS delays #2578
• Full changelog

docker-builder

• OCPBUGS-70150: bump buildah to 1.39.7 to fix CVE-2025-52881 #494
• Full changelog

etcd

• OCPBUGS-69868: Updating ose-etcd-container image to be consistent with ART for 4.22 #353
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-74913: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.11.0 (1cb204d) into master #261
• Full changelog

gcp-pd-csi-driver

• OCPBUGS-74521: UPSTREAM: 2175: Move VAC storage API to v1 from v1beta1 #97
• Full changelog

gcp-pd-csi-driver-operator

• OCPBUGS-74521: Remove VolumeAttributesClass FeatureGate #168
• STOR-2792: STOR-2842: Enable Hyperdisk-balanced High Availability disks #158
• STOR-2793: Add volume snapshot class of type images #165
• Full changelog

gcp-workload-identity-federation-webhook

• CCO-730: Revendor upstream changes #14
• Full changelog

haproxy-router

• NE-2483: bump k8s libraries to v0.35.0 #729
• Full changelog

hypershift

• OCPBUGS-70152: Correct route labeling logic for HCP router infratructure #7605
• CNTRLPLANE-2216: feat(aws): migrate route53 to AWS SDK v2 #7726
• OCPBUGS-43449: Remove UltraSSD_LRS from DiskStorageAccountType for OS Disks #7727
• CNTRLPLANE-644: Unify Validate/Complete Function Signatures Across Providers #7577
• OCPBUGS-65879: Fix image-overrides annotation removal propagation to HCP #7533
• CNTRLPLANE-2740: Add KAS liveness readiness sidecar to OAS and OAuth API Server #7722
• OCPBUGS-34662: Manage AWS EBS CSI driver metrics serving certificates via CPO #7538
• OCPBUGS-73915: Use openshift golang builder for MCE builds #7735
• NO-JIRA: Remove .claude/settings.json #7751
• OCPBUGS-62177: Fix certificate revocation validation across all KAS pods #7405
• CNTRLPLANE-2696: docs(azure): add managed Azure control plane authentication documentation #7653
• NO-JIRA: test(e2e): add CloudController field to GCP ServiceAccountsEmails structs #7739
• AUTOSCALE-485: bump karpenter-aws dependencies to 1.8.6 #7611
• TRT-2554: Revert #7489 “CNTRLPLANE-2203: add ControlPlaneConnectionAvailable condition” #7734
• GCP-367: Implement GCP Cloud Controller Manager component #7677
• OCPBUGS-72596: Fix node-tuning-operator metrics port configuration #7468
• CNTRLPLANE-2203: add ControlPlaneConnectionAvailable condition #7489
• GCP-386: feat(gcp): enable DNS delegation for hosted cluster ingress via DNSEndpoint #7702
• NO-JIRA: ci: fix bug in leader election detection #7696
• GCP-308: test: verify control plane workloads have resource requests #7623
• OCPBUGS-60707: Fix user-ca-bundle cleanup when additionalTrustBundle is removed #6900
• CNTRLPLANE-2736: Rename review-agent-single-pr to address-review-comments #7709
• CNTRLPLANE-2215: feat(aws): migrate S3 to AWS SDK v2 #7678
• NO-JIRA: test(nodepool): add unit tests for scale-from-zero annotations #7688
• OCPBUGS-55151: Move proxy certificate validation from metrics collector to reconcile loop #7536
• CNTRLPLANE-418: Aro swift private #7613
• CNTRLPLANE-2700: docs: add HCP networking requirements documentation #7654
• CNTRLPLANE-2675: chore(cpo): move infrastructure reconciliation to infra package #7658
• GCP-216: feat(nodepool): add GCP platform support #7631
• GCP-199: add DNS management to Control Plane Operator #7639
• AUTOSCALE-492: karpenter-ignition controller #7582
• OCPBUGS-66966: loop over node-pool conditions updating in order #7325
• SREP-715: New option to dump data plane content through the kube API server service exposed in HCP namespaces #6533
• OCPBUGS-74620: test(e2e): increase default node ready timeout to 45 minutes #7629
• OCPBUGS-74498: Add UserAgent telemetry to CPO Azure SDK clients #7620
• OCPBUGS-74931: fix(hcco): gate image registry workaround to pre-4.20 releases #7634
• NO-JIRA: docs(aws): add AWS PrivateLink architecture documentation #7645
• NO-JIRA: chore(ai): Add skills for dev workflow #7636
• CNTRLPLANE-2709: Update Dependabot to use conventional commits #7672
• CNTRLPLANE-2703: Disable Renovate dependency updates #7657
• OCPBUGS-74988: fix(test): resolve E2E flakes in global-pull-secret-syncer DaemonSet readiness checks #7627
• CNTRLPLANE-2214: Migrate STS to AWS SDK v2 #7386
• NO-JIRA:Docs: update documentation URL from netlify to pages.dev #7622
• GCP-366: add CloudController service account for CCM #7617
• NO-JIRA: ci: Improves the isLeaderElectionFailure function: #7589
• NO-JIRA: Fix teardown flag timing in e2e tests #7586
• CNTRLPLANE-2548: add direct Jira REST API integration to pr-report #7532
• OCPSTRAT-2437: add unit test for custom HAProxy image annotation #7458
• CNTRLPLANE-1708: Enable EnsureGlobalPullSecret AtLeast Version418 #7624
• CNTRLPLANE-418: fix shared ingress AllowedCIDRs to use fc_src for PROXY protocol #7587
• AUTOSCALE-535: default block device mappings #7583
• OCPBUGS-69447: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7399
• GCP-198: add PSC endpoint controller for customer-side management #7603
• CNTRLPLANE-2650: docs(ci): add security requirement for Jira agent issues #7626
• CNTRLPLANE-2650: docs: add AI-assisted CI jobs documentation #7598
• OCPBUGS-62760: Pre-pull images to avoid startup delays and flaky e2e #7382
• Full changelog

insights-operator

• OCPBUGS-66233: Custom Obfuscation unmarshal #1216
• CCXDEV-15561: Improve test coverage 3 #1213
• Full changelog

insights-runtime-exporter, insights-runtime-extractor

• OCPBUGS-76464: remove dnf cache from the container images #62
• chore: Update JBoss EAP 8.1 runtime samples #61
• Full changelog

ironic

• NO-ISSUE: Update requirements.cachito with latest openshift forks commits #793
• NO-ISSUE: Update requirements.cachito with latest openshift forks commits #789
• NO-ISSUE: Update requirements.cachito with latest openshift forks commits #784
• NO-ISSUE: Update requirements.cachito with latest openshift forks commits #783
• NO-ISSUE: Update requirements.cachito with latest openshift forks commits #773
• ART-14497: Fix ART builds with -minimal #779
• NO-ISSUE: Bump openstacksdk version to 4.9.0 #776
• Full changelog

ironic-agent

• NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #242
• Full changelog

keepalived-ipfailover

• OCPBUGS-76286: openshift-enterprise-base: remove subscription-manager, dbus, systemd #221
• Full changelog

kube-state-metrics

• OCPBUGS-73993: Updating kube-state-metrics-container image to be consistent with ART for 4.22 #129
• Full changelog

kubevirt-cloud-controller-manager

• NO-JIRA: Upstream Sync - 2026-01-27 #60
• Full changelog

machine-config-operator

• MCO-2032: Avoid MCPs duplication at install time #5518
• MCO-2131: Break e2e-ocl test suite into 2 #5669
• MCO-2120: Rework OS Image Stream label classification #5650
• OCPBUGS-24003: mcd_config_drift not working properly #5632
• MCO-2035: Add a prometheus alert to indicate scaling risk #5615
• MCO-2036: Enable boot image updates by default for vsphere and Azure #5583
• OCPNODE-3880: bump openshift/client-go #5663
• OCPBUGS-76444: pkg/daemon/update: Remove kernel-rt-kvm #5654
• MCO-2110: Migrate security tests #5621
• OCPNODE-3880: Bump openshift/api #5655
• OCPBUGS-23418: Machine-config controller should not log about non-existent pull-secret changes #5625
• OCPBUGS-76450: reduce MCO image size #5644
• NO-ISSUE: Fix cleanup verification timeouts in e2e-ocl tests #5652
• OCPBUGS-74692: Write all units when forcefile exists to recover from systemd unit config drift #5612
• OCPBUGS-63699: Remove MCD liveness probe #5623
• MCO-1984: Add Component Readiness tests for boot image skew enforcement #5547
• TRT-2543: Revert #5586 “MCO-2065: Move systemctl execs to dbus calls” #5638
• OCPBUGS-75916: crio: disable short_name_mode until we introduce ctrcfg api for it #5628
• NO-ISSUE: Make TestImagePrunerErrors flexible to registry behavior changes #5613
• OCPEDGE-2216: feat: increase reserved memory for tnf masters #5592
• MCO-2065: Move systemctl execs to dbus calls #5586
• NO-ISSUE: Fix-up AMI update script to work from CI image #5626
• NO-ISSUE: Update AMI script and list #5616
• MCO-1877: MCO-1879: MCO-1882: MCO-1884: Implement boot image skew enforcement MVP #5428
• MCO-1924: MCO-500: Migrate direct runGetOut() to use CommandRunner in the MCD #5546
• NO-JIRA: Fix OSImageStream validating admission policies for OKD #5618
• MCO-1953: Refactor functionality to grab machines by state for calculating MCP status #5541
• OCPBUGS-20561: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5601
• MCO-2090: migrate nodedisruptionpolicy tests from the private reposit… #5602
• NO-JIRA: Pass TAGS argument to the machine-config-controller image build #5611
• AGENT-1395: IRI followup changes #5562
• Full changelog

machine-image-customization-controller

• OCPBUGS-76461: Clean up dnf cache to reduce container image size #162
• OCPBUGS-22175: Add IPA messages for console and SSH login #158
• Full changelog

machine-os-images

• METAL-1720: Add aarch64 symlinks for initramfs #79
• Full changelog

monitoring-plugin

• OU-1195: List OCP namespaces in Create Dashboard ProjectSelector #765
• OU-1231: customizable dashboards automation testing fixes after merge to main #771
• NO-JIRA: Init Coderabbit config #770
• OU-1189: automation for kebab management actions for perses dashboards #757
• COO-1562: update acm alerting UI test case #753
• OBSINTA-1063: Add incidents e2e command #740
• OU-1213: IncidentPage add error state #750
• OU-1062: feat: mark alert menu active for incidents tab #754
• OU-1205: feat: force rounded dates for consecutive intervals #748
• OU-915: create dashboards and rbac #746
• OU-1039: add info alert to the Incident page #741
• NO-JIRA: fix: update vulnerable dependencies #742
• COO-1515: add the cluster-health-analyzer feature #736
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

must-gather

• no-jira: chore: ensure scripts are properly formatted #524
• no-jira: test: add basic UT for collection-scripts #521
• Full changelog

network-metrics-daemon

• OCPBUGS-74026: Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.22 #141
• Full changelog

network-tools

• NO-JIRA: Comment submariner team members until they’re ready for OVNK bugs #171
• Full changelog

oauth-apiserver

• CNTRLPLANE-2436: bump(k8s)=1.34.1 #164
• Full changelog

oauth-server

• CNTRLPLANE-2437: bump(k8s)=1.34.1 #208
• Full changelog

oc-mirror

• CLID-513: operator catalogs pinned by digest in ISC #1333
• OCPBUGS-75013: Fix reg config detection for explicit false values #1348
• OCPBUGS-73760: fix conversion issue for catalog #1338
• Full changelog

olm-catalogd, olm-operator-controller

• NO-ISSUE: Synchronize From Upstream Repositories #640
• NO-ISSUE: Synchronize From Upstream Repositories #639
• NO-ISSUE: Synchronize From Upstream Repositories #637
• OPRUN-4441: fix(ote): Fix up own-namespace invalid configuration test #634
• NO-ISSUE: Synchronize From Upstream Repositories #633
• NO-ISSUE: Synchronize From Upstream Repositories #632
• NO-ISSUE: Synchronize From Upstream Repositories #630
• OPRUN-4439: Update test-operator startup script to fix pod probe endpoints #629
• NO-ISSUE: add 85889 automation #603
• NO-ISSUE: add 83979 automation #602
• NO-ISSUE: Synchronize From Upstream Repositories #625
• OPRUN-4441: fix(ote): fix SingleOwnNamespace test for Boxcutter runtime compatibility and use as operator-controller dep from root instead of upstream release #628
• OCPQE-31553: adjust watchnamespace qe case based on change #623
• OPRUN-4439: Fix test operator controller pod probes #614
• NO-ISSUE: Synchronize From Upstream Repositories #622
• Full changelog

openshift-apiserver

• CNTRLPLANE-2438: chore: bump(k8s)=1.34.1 #592
• Full changelog

openshift-controller-manager

• CNTRLPLANE-2620: bump github.com/openshift/library-go #427
• Full changelog

openshift-state-metrics

• OCPBUGS-74036: Updating openshift-state-metrics-container image to be consistent with ART for 4.22 #129
• Full changelog

openstack-machine-api-provider

• OCPBUGS-76788: Fix make test #154
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-77006: Remove the collect-profiles info from the microshift kustomization file #1233
• NO-ISSUE: Synchronize From Upstream Repositories #1228
• NO-ISSUE: UPSTREAM:<carry>: automate OCP-40945 #1209
• NO-ISSUE: Synchronize From Upstream Repositories #1226
• OCPBUGS-76323: OCPQE-31553:remove qe case of testing collect-profiles #1221
• NO-ISSUE: UPSTREAM: : migrate bandrade test cases to OTE #1193
• OCPBUGS-31547: Remove the collect-profiles job #1215
• OCPBUGS-26404: Add retry logic for SNO cluster detection in leader election configuration #1210
• OCPQE-31553: continue to adjust case per collect-profiles change #1218
• OPRUN-4407: automate OCP-87276 #1212
• OCPQE-31558, OCPQE-31559: Update QE test cases to align with the removal of the redhat-marketplace catalog #1217
• OCPQE-31553: change to check collect-profile networkpolicy dynamically #1216
• Full changelog

operator-marketplace

• OPRUN-4456: chore(deps): upgrade Go module dependencies (edge) #724
• NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.27.5 to 2.28.1 #720
• NO-ISSUE: Bump sigs.k8s.io/controller-runtime from 0.23.0 to 0.23.1 in the k8s-dependencies group #718
• NO-ISSUE: Bump github.com/onsi/gomega from 1.39.0 to 1.39.1 #719
• OCPBUGS-65581: marketplace-operator sets Progressing=True during upgrade #713
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• CORENET-6840: Exclude NetSeg tests for SingleReplica topology #2973
• OCPBUGS-61864: DownStream Merge [01-27-2026] #2962
• CORENET-6168: skip new NetSeg Localnet test #2963
• OCPBUGS-69753: Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.22 #2907
• OCPBUGS-61524, OCPBUGS-66994: DownStream Merge [01-03-2026] #2917
• CORENET-6170: Add OCP tests extension #2461
• Full changelog

prometheus

• OCPBUGS-74015: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.22 #286
• Full changelog

prometheus-alertmanager

• OCPBUGS-74035: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.22 #112
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• OCPBUGS-73982: Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.22 #355
• Full changelog

rhel-coreos, rhel-coreos-extensions

• NO-JIRA: packages-openshift: Fix repo versions #1895
• NO-JIRA: extensions: add a label for extensions image discovery #1894
• COS-3900: Start using rhel-10.2 #1892
• NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches #1891
• No-JIRA: move the OKD SIG repo to 4.22 #1890
• NO-JIRA: OWNERS: add user Rolv-Apneseth #1882
• NO-JIRA: Update to track 4.22 and rhel-9.8 #1881
• NO-JIRA: rhel-10.1: enable rhel-10.1-fast-datapath #1885
• NO-JIRA: packages-openshift: enable rhel-10.1-fast-datapath #1884
• OCPNODE-4010: package: add ose-crio-credential-provider #1879
• OCPBUGS-70162: extensions/rhel-10.1: Re-enable ipsec #1878
• NO-JIRA: drop use of rhel-9.6-appstream-containernetworking repo #1877
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

route-controller-manager

• OCPBUGS-20536: bump library-go version #70
• NE-2484: bump k8s libraries to v0.35.0 and cr to v0.23.1 #72
• Full changelog

telemeter

• SREP-3493: deduplicate cluster:usage:control_plane:instance_hours output series #579
• SREP-3493: add cluster:usage:control_plane:instance_hours #578
• SREP-3493: ROSA HCP billing for control planes #577
• OCPBUGS-73928: Updating telemeter-container image to be consistent with ART for 4.22 #575
• Full changelog

tests

• Revert “ OCPNODE-3932: Add automated tests for non-CNV swap configuration” #30804
• TRT-2372: check that each of the required architectures is available for each image in the images command #30799
• OCPBUGS-74151: Add test for CPMS OnDelete strategy with full master replacement #30760
• OCPNODE-3932: Add automated tests for non-CNV swap configuration #30794
• OCPBUGS-76551: Temporarily skip MCO tests creating custom MCPS with RHEL10 machines #30793
• NO-JIRA:fixing CNV’s must-gather image ci failure #30784
• NO-ISSUE: Automated - Update synthetic test data #30781
• NO-JIRA: Remove RouteAdvertisements feature gate check #30787
• OCPNODE-4093: Readme updates for Node tests #30773
• NO-JIRA: Simplify zstd:chunked image test to use prebuilt image. #30739
• OCPBUGS-60853: cert tests: mark TLS registry test as informing #30585
• TRT-2545: Allow pathological Failed/ImagePullBackOff events in must-gather name #30776
• OCPBUGS-76327: Fix flakiness in MutableCSINodeAllocatableCount test #30766
• NO-JIRA: ote: fix duplicated topology label on SingleReplica #30759
• NO-ISSUE: Automated - Update synthetic test data #30694
• NO-JIRA: Ignore state transitions on upgrade failures and SNO #30762
• SPLAT-2337: CCM-AWS OTE binary and skips #30747
• NO-JIRA: Fix discrepancies in use of failure message vs output #30752
• OCPEDGE-2166: test(two-node): stablize tnf recovery suite #30716
• NO-JIRA: Fix OKD featureset test as it should only run if the current featureset is Default #30757
• OCPBUGS-74917, TRT-2504: Claude command to manage watch request limits, split test by operator/component #30750
• TRT-2540: Revert #30657 “OCPNODE-3944: Create e2e automation in origin for case OCP-84149” #30761
• CNTRLPLANE-2196: reg ote bin for cluster auth operator #30735
• NO-JIRA: upkeep: add collection of errors for crio tests #30743
• OCPEDGE-1484: [TNF] kubelet disruption test #30290
• OKD-259: Test OKD Feature set Against OKD and OCP clusters #30693
• OCPNODE-3944: Create e2e automation in origin for case OCP-84149 #30657
• OCPEDGE-2355: feat: skip unsupported commatrix tests for two node #30720
• OCPEDGE-2274: fix: change arbiter topology test to verify pods do not run on arbiter nodes #30737
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Package List

• cri-o-1.35.0-2.rhaos4.22.git7deb12c.el9
• kernel-5.14.0-686.el9
• openshift-kubelet-4.22.0-202602130027.p2.g047d962.assembly.stream.el9
• systemd-252-64.el9

Full list (558 packages)

• NetworkManager-1:1.54.3-2.el9
• NetworkManager-cloud-setup-1:1.54.3-2.el9
• NetworkManager-libnm-1:1.54.3-2.el9
• NetworkManager-ovs-1:1.54.3-2.el9
• NetworkManager-team-1:1.54.3-2.el9
• NetworkManager-tui-1:1.54.3-2.el9
• WALinuxAgent-udev-2.14.0.1-4.el9
• aardvark-dns-2:1.17.0-1.el9
• acl-2.3.1-4.el9
• adcli-0.9.3.1-3.el9
• adcli-selinux-0.9.3.1-3.el9
• afterburn-5.10.0-1.el9
• afterburn-dracut-5.10.0-1.el9
• alternatives-1.24-2.el9
• attr-2.5.1-3.el9
• audit-3.1.5-8.el9
• audit-libs-3.1.5-8.el9
• authselect-1.2.6-3.el9
• authselect-libs-1.2.6-3.el9
• avahi-libs-0.8-23.el9
• azure-vm-utils-0.7.0-1.el9
• basesystem-11-13.el9
• bash-5.1.8-9.el9
• bash-completion-1:2.11-5.el9
• bind-libs-32:9.16.23-40.el9
• bind-license-32:9.16.23-40.el9
• bind-utils-32:9.16.23-40.el9
• binutils-2.35.2-69.el9
• binutils-gold-2.35.2-69.el9
• bootc-1.12.1-1.el9
• bootupd-0.2.31-1.el9
• bsdtar-3.5.3-6.el9_6
• bubblewrap-0.6.3-1.el9
• bzip2-1.0.8-11.el9
• bzip2-libs-1.0.8-11.el9
• c-ares-1.19.1-2.el9_4
• ca-certificates-2025.2.80_v9.0.305-91.el9
• checkpolicy-3.6-1.el9
• chrony-4.8-1.el9
• cifs-utils-7.5-1.el9
• clevis-21-209.el9
• clevis-dracut-21-209.el9
• clevis-luks-21-209.el9
• clevis-systemd-21-209.el9
• cloud-utils-growpart-0.33-1.el9
• composefs-1.0.8-1.el9
• composefs-libs-1.0.8-1.el9
• conmon-3:2.2.1-1.el9
• conmon-rs-0.6.6-0.rhaos4.18.el9.1
• console-login-helper-messages-0.21.3-1.el9
• console-login-helper-messages-issuegen-0.21.3-1.el9
• console-login-helper-messages-profile-0.21.3-1.el9
• container-selinux-4:2.245.0-1.el9
• containernetworking-plugins-1:1.9.0-1.el9
• containers-common-5:5.8-1.el9
• coreos-installer-0.25.0-2.el9
• coreos-installer-bootinfra-0.25.0-2.el9
• coreutils-8.32-40.el9
• coreutils-common-8.32-40.el9
• cpio-2.13-16.el9
• cracklib-2.9.6-28.el9
• cracklib-dicts-2.9.6-28.el9
• cri-o-1.35.0-2.rhaos4.22.git7deb12c.el9
• cri-tools-1.34.0-3.el9
• criu-3.19-3.el9
• criu-libs-3.19-3.el9
• crun-1.26-1.el9
• crypto-policies-20251126-1.gite9c4db2.el9
• crypto-policies-scripts-20251126-1.gite9c4db2.el9
• cryptsetup-2.8.1-3.el9
• cryptsetup-libs-2.8.1-3.el9
• curl-7.76.1-40.el9
• cyrus-sasl-gssapi-2.1.27-22.el9
• cyrus-sasl-lib-2.1.27-22.el9
• dbus-1:1.12.20-8.el9
• dbus-broker-28-7.el9
• dbus-common-1:1.12.20-8.el9
• dbus-libs-1:1.12.20-8.el9
• device-mapper-9:1.02.206-2.el9_7.1
• device-mapper-event-9:1.02.206-2.el9_7.1
• device-mapper-event-libs-9:1.02.206-2.el9_7.1
• device-mapper-libs-9:1.02.206-2.el9_7.1
• device-mapper-multipath-0.8.7-44.el9
• device-mapper-multipath-libs-0.8.7-44.el9
• device-mapper-persistent-data-1.1.0-1.el9
• diffutils-3.7-12.el9
• dmidecode-1:3.6-2.el9
• dnf-4.14.0-33.el9
• dnf-data-4.14.0-33.el9
• dnsmasq-2.85-18.el9
• dosfstools-4.2-3.el9
• dracut-057-110.git20260130.el9
• dracut-network-057-110.git20260130.el9
• dracut-squash-057-110.git20260130.el9
• e2fsprogs-1.46.5-8.el9
• e2fsprogs-libs-1.46.5-8.el9
• efi-filesystem-6-4.el9
• efibootmgr-16-12.el9
• efivar-libs-38-3.el9
• elfutils-debuginfod-client-0.194-1.el9
• elfutils-default-yama-scope-0.194-1.el9
• elfutils-libelf-0.194-1.el9
• elfutils-libs-0.194-1.el9
• ethtool-2:6.15-2.el9
• expat-2.5.0-6.el9
• fcoe-utils-1.0.34-0.git14ef0d2.el9
• file-5.39-16.el9
• file-libs-5.39-16.el9
• filesystem-3.16-5.el9
• findutils-1:4.8.0-7.el9
• firewalld-filesystem-1.3.4-18.el9_7
• flashrom-1.2-10.el9
• fstrm-0.6.1-3.el9
• fuse-2.9.9-17.el9
• fuse-common-3.10.2-9.el9
• fuse-libs-2.9.9-17.el9
• fuse-overlayfs-1.16-1.el9
• fuse3-3.10.2-9.el9
• fuse3-libs-3.10.2-9.el9
• fwupd-1.9.31-1.el9
• fwupd-plugin-flashrom-1.9.31-1.el9
• gawk-5.1.0-6.el9
• gawk-all-langpacks-5.1.0-6.el9
• gdbm-libs-1:1.23-1.el9
• gdisk-1.0.7-5.el9
• geolite2-city-20191217-6.el9
• geolite2-country-20191217-6.el9
• gettext-0.21-8.el9
• gettext-libs-0.21-8.el9
• git-core-2.52.0-1.el9
• glib2-2.68.4-19.el9
• glibc-2.34-256.el9
• glibc-common-2.34-256.el9
• glibc-gconv-extra-2.34-256.el9
• glibc-minimal-langpack-2.34-256.el9
• glusterfs-6.0-57.4.el9
• glusterfs-client-xlators-6.0-57.4.el9
• glusterfs-fuse-6.0-57.4.el9
• glusterfs-libs-6.0-57.4.el9
• gmp-1:6.2.0-13.el9
• gnupg2-2.3.3-5.el9_7
• gnutls-3.8.10-3.el9
• gobject-introspection-1.68.0-11.el9
• gpgme-1.15.1-6.el9
• grep-3.6-5.el9
• groff-base-1.22.4-10.el9
• grub2-common-1:2.06-124.el9
• grub2-efi-aa64-1:2.06-124.el9
• grub2-tools-1:2.06-124.el9
• grub2-tools-minimal-1:2.06-124.el9
• gssproxy-0.8.4-7.el9
• gzip-1.12-1.el9
• hostname-3.23-6.el9
• hwdata-0.348-9.22.el9
• ignition-2.25.1-1.el9
• ignition-grub-2.25.1-1.el9
• ima-evm-utils-1.6.2-2.el9
• info-6.7-15.el9
• inih-49-6.el9
• initscripts-service-10.11.8-4.el9
• ipcalc-1.0.0-5.el9
• iproute-6.17.0-2.el9
• iproute-tc-6.17.0-2.el9
• iptables-libs-1.8.10-11.el9_5
• iptables-nft-1.8.10-11.el9_5
• iputils-20210202-15.el9_7
• irqbalance-2:1.9.4-5.el9
• iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el9
• iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el9
• isns-utils-libs-0.101-4.el9
• jansson-2.14-1.el9
• jose-14-1.el9
• jq-1.6-19.el9
• json-c-0.14-11.el9
• json-glib-1.6.6-1.el9
• kbd-2.4.0-11.el9
• kbd-legacy-2.4.0-11.el9
• kbd-misc-2.4.0-11.el9
• kernel-5.14.0-686.el9
• kernel-core-5.14.0-686.el9
• kernel-modules-5.14.0-686.el9
• kernel-modules-core-5.14.0-686.el9
• kernel-modules-extra-5.14.0-686.el9
• kexec-tools-2.0.29-17.el9
• keyutils-1.6.3-1.el9
• keyutils-libs-1.6.3-1.el9
• kmod-28-11.el9
• kmod-libs-28-11.el9
• kpartx-0.8.7-44.el9
• krb5-libs-1.21.1-8.el9_6
• less-590-6.el9
• libacl-2.3.1-4.el9
• libaio-0.3.111-13.el9
• libarchive-3.5.3-6.el9_6
• libassuan-2.5.5-3.el9
• libatomic-11.5.0-14.el9
• libattr-2.5.1-3.el9
• libbasicobjects-0.1.1-53.el9
• libblkid-2.37.4-25.el9
• libbpf-2:1.5.0-3.el9
• libbrotli-1.0.9-9.el9_7
• libcap-2.48-10.el9
• libcap-ng-0.8.2-7.el9
• libcbor-0.7.0-5.el9
• libcollection-0.7.0-53.el9
• libcom_err-1.46.5-8.el9
• libcomps-0.1.18-1.el9
• libconfig-1.7.2-9.el9
• libcurl-7.76.1-40.el9
• libdaemon-0.14-23.el9
• libdb-5.3.28-57.el9_6
• libdhash-0.5.0-53.el9
• libdnf-0.69.0-18.el9
• libdnf-plugin-subscription-manager-1.29.50-1.el9
• libeconf-0.4.1-5.el9
• libedit-3.1-39.20210216cvs.el9
• libev-4.33-6.el9
• libevent-2.1.12-8.el9_4
• libfdisk-2.37.4-25.el9
• libffi-3.4.2-8.el9
• libfido2-1.13.0-2.el9
• libgcc-11.5.0-14.el9
• libgcrypt-1.10.0-11.el9
• libgomp-11.5.0-14.el9
• libgpg-error-1.42-5.el9
• libgudev-237-1.el9
• libgusb-0.3.8-2.el9
• libibverbs-61.0-2.el9
• libicu-67.1-10.el9_6
• libidn2-2.3.0-7.el9
• libini_config-1.3.1-53.el9
• libipa_hbac-2.9.8-1.el9
• libjcat-0.1.6-3.el9
• libjose-14-1.el9
• libkcapi-1.4.0-2.el9
• libkcapi-hmaccalc-1.4.0-2.el9
• libksba-1.5.1-7.el9
• libldb-4.23.5-5.el9
• libluksmeta-10-1.el9
• libmaxminddb-1.5.2-4.el9
• libmicrohttpd-1:0.9.72-5.el9
• libmnl-1.0.4-16.el9_4
• libmodulemd-2.13.0-2.el9
• libmount-2.37.4-25.el9
• libndp-1.9-1.el9
• libnet-1.2-7.el9
• libnetfilter_conntrack-1.0.9-1.el9
• libnfnetlink-1.0.1-23.el9_5
• libnfsidmap-1:2.5.4-41.el9
• libnftnl-1.2.6-4.el9_4
• libnghttp2-1.43.0-6.el9
• libnl3-3.11.0-1.el9
• libnl3-cli-3.11.0-1.el9
• libnvme-1.16.1-2.el9
• libpath_utils-0.2.1-53.el9
• libpcap-14:1.10.0-4.el9
• libpciaccess-0.16-7.el9
• libpkgconf-1.7.3-10.el9
• libpsl-0.21.1-5.el9
• libpwquality-1.4.4-8.el9
• libref_array-0.1.5-53.el9
• librepo-1.19.0-1.el9
• libreport-filesystem-2.15.2-6.el9
• librhsm-0.0.3-9.el9
• libseccomp-2.5.2-2.el9
• libselinux-3.6-3.el9
• libselinux-utils-3.6-3.el9
• libsemanage-3.6-5.el9_6
• libsepol-3.6-3.el9
• libsigsegv-2.13-4.el9
• libslirp-4.4.0-8.el9
• libsmartcols-2.37.4-25.el9
• libsmbclient-4.23.5-5.el9
• libsolv-0.7.24-4.el9
• libss-1.46.5-8.el9
• libssh-0.10.4-17.el9_7
• libssh-config-0.10.4-17.el9_7
• libsss_certmap-2.9.8-1.el9
• libsss_idmap-2.9.8-1.el9
• libsss_nss_idmap-2.9.8-1.el9
• libsss_sudo-2.9.8-1.el9
• libstdc++-11.5.0-14.el9
• libtalloc-2.4.3-1.el9
• libtasn1-4.16.0-9.el9
• libtdb-1.4.14-1.el9
• libteam-1.31-16.el9_1
• libtevent-0.17.1-1.el9
• libtirpc-1.3.3-9.el9
• libtool-ltdl-2.4.6-46.el9
• libunistring-0.9.10-15.el9
• liburing-2.12-1.el9
• libusbx-1.0.26-1.el9
• libuser-0.63-17.el9
• libutempter-1.2.1-6.el9
• libuuid-2.37.4-25.el9
• libuv-1:1.42.0-2.el9_4
• libverto-0.3.2-3.el9
• libverto-libev-0.3.2-3.el9
• libwbclient-4.23.5-5.el9
• libxcrypt-4.4.18-3.el9
• libxml2-2.9.13-14.el9_7
• libxmlb-0.3.24-1.el9
• libyaml-0.2.5-7.el9
• libzstd-1.5.5-1.el9
• linux-firmware-20260130-160.el9
• linux-firmware-whence-20260130-160.el9
• lldpad-1.1.1-4.gitf1dd9eb.el9
• lmdb-libs-0.9.29-3.el9
• logrotate-3.18.0-12.el9
• lsof-4.94.0-3.el9
• lua-libs-5.4.4-4.el9
• luksmeta-10-1.el9
• lvm2-9:2.03.32-2.el9_7.1
• lvm2-libs-9:2.03.32-2.el9_7.1
• lz4-libs-1.9.3-5.el9
• lzo-2.10-7.el9
• mdadm-4.4-3.el9
• mokutil-2:0.7.2-4.el9
• mpfr-4.1.0-10.el9
• nano-5.6.1-7.el9
• ncurses-6.2-12.20210508.el9
• ncurses-base-6.2-12.20210508.el9
• ncurses-libs-6.2-12.20210508.el9
• net-tools-2.0-0.64.20160912git.el9
• netavark-2:1.17.2-1.el9
• nettle-3.10.1-1.el9
• newt-0.52.21-11.el9
• nfs-utils-1:2.5.4-41.el9
• nftables-1:1.0.9-6.el9_7
• nmap-ncat-3:7.92-5.el9
• nmstate-2.2.57-1.el9
• npth-1.6-8.el9
• nss-altfiles-2.18.1-20.el9
• numactl-libs-2.0.19-3.el9
• nvme-cli-2.16-1.el9
• oniguruma-6.9.6-1.el9.6
• openldap-2.6.8-4.el9
• openshift-clients-4.22.0-202602192221.p2.g3638445.assembly.stream.el9
• openshift-kubelet-4.22.0-202602130027.p2.g047d962.assembly.stream.el9
• openssh-9.9p1-3.el9
• openssh-clients-9.9p1-3.el9
• openssh-server-9.9p1-3.el9
• openssl-1:3.5.5-1.el9
• openssl-fips-provider-3.0.7-8.el9
• openssl-fips-provider-so-3.0.7-8.el9
• openssl-libs-1:3.5.5-1.el9
• openvswitch-selinux-extra-policy-1.0-39.el9fdp
• openvswitch3.5-3.5.2-51.el9fdp
• os-prober-1.77-12.el9_5
• ose-aws-ecr-image-credential-provider-4.22.0-202602190049.p2.g214f667.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.22.0-202601070821.p2.g8584b9a.assembly.stream.el9
• ose-crio-credential-provider-4.22.0-202602110933.p2.g83d4961.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.22.0-202601070821.p2.g8732386.assembly.stream.el9
• ostree-2025.7-1.el9
• ostree-libs-2025.7-1.el9
• p11-kit-0.26.2-1.el9
• p11-kit-trust-0.26.2-1.el9
• pam-1.5.1-28.el9
• passt-0^20251210.gd04c480-3.el9
• passt-selinux-0^20251210.gd04c480-3.el9
• passwd-0.80-12.el9
• pciutils-3.7.0-7.el9
• pciutils-libs-3.7.0-7.el9
• pcre-8.44-4.el9
• pcre2-10.40-6.el9
• pcre2-syntax-10.40-6.el9
• perl-AutoLoader-5.74-481.1.el9_6
• perl-B-1.80-481.1.el9_6
• perl-Carp-1.50-460.el9
• perl-Class-Struct-0.66-481.1.el9_6
• perl-Data-Dumper-2.174-462.el9
• perl-Digest-1.19-4.el9
• perl-Digest-MD5-2.58-4.el9
• perl-Encode-4:3.08-462.el9
• perl-Errno-1.30-481.1.el9_6
• perl-Exporter-5.74-461.el9
• perl-Fcntl-1.13-481.1.el9_6
• perl-File-Basename-2.85-481.1.el9_6
• perl-File-Path-2.18-4.el9
• perl-File-Temp-1:0.231.100-4.el9
• perl-File-stat-1.09-481.1.el9_6
• perl-FileHandle-2.03-481.1.el9_6
• perl-Getopt-Long-1:2.52-4.el9
• perl-Getopt-Std-1.12-481.1.el9_6
• perl-HTTP-Tiny-0.076-462.el9
• perl-IO-1.43-481.1.el9_6
• perl-IO-Socket-IP-0.41-5.el9
• perl-IO-Socket-SSL-2.073-2.el9
• perl-IPC-Open3-1.21-481.1.el9_6
• perl-MIME-Base64-3.16-4.el9
• perl-Mozilla-CA-20200520-6.el9
• perl-NDBM_File-1.15-481.1.el9_6
• perl-Net-SSLeay-1.94-3.el9
• perl-POSIX-1.94-481.1.el9_6
• perl-PathTools-3.78-461.el9
• perl-Pod-Escapes-1:1.07-460.el9
• perl-Pod-Perldoc-3.28.01-461.el9
• perl-Pod-Simple-1:3.42-4.el9
• perl-Pod-Usage-4:2.01-4.el9
• perl-Scalar-List-Utils-4:1.56-462.el9
• perl-SelectSaver-1.02-481.1.el9_6
• perl-Socket-4:2.031-4.el9
• perl-Storable-1:3.21-460.el9
• perl-Symbol-1.08-481.1.el9_6
• perl-Term-ANSIColor-5.01-461.el9
• perl-Term-Cap-1.17-460.el9
• perl-Text-ParseWords-3.30-460.el9
• perl-Text-Tabs+Wrap-2013.0523-460.el9
• perl-Time-Local-2:1.300-7.el9
• perl-URI-5.09-3.el9
• perl-base-2.27-481.1.el9_6
• perl-constant-1.33-461.el9
• perl-if-0.60.800-481.1.el9_6
• perl-interpreter-4:5.32.1-481.1.el9_6
• perl-libnet-3.13-4.el9
• perl-libs-4:5.32.1-481.1.el9_6
• perl-mro-1.23-481.1.el9_6
• perl-overload-1.31-481.1.el9_6
• perl-overloading-0.02-481.1.el9_6
• perl-parent-1:0.238-460.el9
• perl-podlators-1:4.14-460.el9
• perl-subs-1.03-481.1.el9_6
• perl-vars-1.05-481.1.el9_6
• pigz-2.8-1.el9
• pkgconf-1.7.3-10.el9
• pkgconf-m4-1.7.3-10.el9
• pkgconf-pkg-config-1.7.3-10.el9
• podman-6:5.8.0-1.el9
• policycoreutils-3.6-5.el9
• policycoreutils-python-utils-3.6-5.el9
• polkit-0.117-14.el9
• polkit-libs-0.117-14.el9
• polkit-pkla-compat-0.1-21.el9
• popt-1.18-8.el9
• procps-ng-3.3.17-14.el9
• protobuf-c-1.3.3-13.el9
• psmisc-23.4-3.el9
• publicsuffix-list-dafsa-20210518-3.el9
• python-unversioned-command-3.9.25-3.el9_7
• python3-3.9.25-3.el9_7
• python3-audit-3.1.5-8.el9
• python3-chardet-4.0.0-5.el9
• python3-cloud-what-1.29.50-1.el9
• python3-dateutil-1:2.9.0.post0-1.el9_7
• python3-dbus-1.2.18-2.el9
• python3-decorator-4.4.2-6.el9
• python3-distro-1.5.0-7.el9
• python3-dnf-4.14.0-33.el9
• python3-dnf-plugin-versionlock-4.3.0-26.el9
• python3-dnf-plugins-core-4.3.0-26.el9
• python3-gobject-base-3.40.1-6.el9
• python3-gobject-base-noarch-3.40.1-6.el9
• python3-gpg-1.15.1-6.el9
• python3-hawkey-0.69.0-18.el9
• python3-idna-2.10-7.el9_4.1
• python3-iniparse-0.4-45.el9
• python3-inotify-0.9.6-25.el9
• python3-libcomps-0.1.18-1.el9
• python3-libdnf-0.69.0-18.el9
• python3-librepo-1.19.0-1.el9
• python3-libs-3.9.25-3.el9_7
• python3-libselinux-3.6-3.el9
• python3-libsemanage-3.6-5.el9_6
• python3-pip-wheel-21.3.1-1.el9
• python3-policycoreutils-3.6-5.el9
• python3-pysocks-1.7.1-12.el9
• python3-pyyaml-5.4.1-6.el9
• python3-requests-2.25.1-10.el9_6
• python3-rpm-4.16.1.3-40.el9
• python3-setools-4.4.4-1.el9
• python3-setuptools-53.0.0-15.el9
• python3-setuptools-wheel-53.0.0-15.el9
• python3-six-1.15.0-9.el9
• python3-subscription-manager-rhsm-1.29.50-1.el9
• python3-systemd-234-19.el9
• python3-urllib3-1.26.5-6.el9_7.1
• qemu-guest-agent-17:10.1.0-14.el9
• quota-1:4.09-4.el9
• quota-nls-1:4.09-4.el9
• readline-8.1-4.el9
• redhat-release-9.8-0.6.el9
• redhat-release-eula-9.8-0.6.el9
• rpcbind-1.2.6-7.el9
• rpm-4.16.1.3-40.el9
• rpm-build-libs-4.16.1.3-40.el9
• rpm-libs-4.16.1.3-40.el9
• rpm-ostree-2026.1-3.el9
• rpm-ostree-libs-2026.1-3.el9
• rpm-plugin-selinux-4.16.1.3-40.el9
• rpm-plugin-systemd-inhibit-4.16.1.3-40.el9
• rpm-sign-libs-4.16.1.3-40.el9
• rsync-3.2.5-4.el9
• runc-4:1.4.0-1.el9
• samba-client-libs-4.23.5-5.el9
• samba-common-4.23.5-5.el9
• samba-common-libs-4.23.5-5.el9
• sed-4.8-9.el9
• selinux-policy-38.1.73-1.el9
• selinux-policy-targeted-38.1.73-1.el9
• setup-2.13.7-10.el9
• sg3_utils-1.47-10.el9
• sg3_utils-libs-1.47-10.el9
• shadow-utils-2:4.9-16.el9
• shadow-utils-subid-2:4.9-16.el9
• shared-mime-info-2.1-5.el9
• shim-aa64-16.1-7.el9
• skopeo-2:1.22.0-1.el9
• slang-2.3.2-11.el9
• slirp4netns-1.3.3-1.el9
• snappy-1.1.8-8.el9
• socat-1.7.4.1-8.el9
• sqlite-libs-3.34.1-9.el9_7
• squashfs-tools-4.4-10.git1.el9
• ssh-key-dir-0.1.4-1.el9
• sssd-2.9.8-1.el9
• sssd-ad-2.9.8-1.el9
• sssd-client-2.9.8-1.el9
• sssd-common-2.9.8-1.el9
• sssd-common-pac-2.9.8-1.el9
• sssd-ipa-2.9.8-1.el9
• sssd-krb5-2.9.8-1.el9
• sssd-krb5-common-2.9.8-1.el9
• sssd-ldap-2.9.8-1.el9
• sssd-nfs-idmap-2.9.8-1.el9
• sssd-proxy-2.9.8-1.el9
• stalld-1.26.3-1.el9
• strace-6.12-1.el9
• subscription-manager-1.29.50-1.el9
• subscription-manager-rhsm-certificates-20220623-1.el9
• sudo-1.9.17p2-2.el9
• systemd-252-64.el9
• systemd-journal-remote-252-64.el9
• systemd-libs-252-64.el9
• systemd-pam-252-64.el9
• systemd-rpm-macros-252-64.el9
• systemd-udev-252-64.el9
• tar-2:1.34-10.el9
• teamd-1.31-16.el9_1
• tmux-3.2a-5.el9
• toolbox-0.1.2-1.rhaos4.22.el9
• tpm2-tools-5.2-7.el9
• tpm2-tss-3.2.3-1.el9
• tzdata-2025c-1.el9
• unbound-libs-1.24.2-2.el9
• usermode-1.114-7.el9
• userspace-rcu-0.12.1-6.el9
• util-linux-2.37.4-25.el9
• util-linux-core-2.37.4-25.el9
• vim-minimal-2:8.2.2637-25.el9
• virt-what-1.27-2.el9
• which-2.21-30.el9
• xfsprogs-6.4.0-7.el9
• xz-5.2.5-8.el9_0
• xz-libs-5.2.5-8.el9_0
• yajl-2.1.0-25.el9
• zlib-1.2.11-40.el9
• zram-generator-1.1.2-1.el9
• zstd-1.5.5-1.el9

Changed:

• NetworkManager 1:1.52.0-9.el9_6 → 1:1.54.3-2.el9
• NetworkManager-cloud-setup 1:1.52.0-9.el9_6 → 1:1.54.3-2.el9
• NetworkManager-libnm 1:1.52.0-9.el9_6 → 1:1.54.3-2.el9
• NetworkManager-ovs 1:1.52.0-9.el9_6 → 1:1.54.3-2.el9
• NetworkManager-team 1:1.52.0-9.el9_6 → 1:1.54.3-2.el9
• NetworkManager-tui 1:1.52.0-9.el9_6 → 1:1.54.3-2.el9
• WALinuxAgent-udev 2.7.0.6-11.el9_6.1 → 2.14.0.1-4.el9
• aardvark-dns 2:1.14.0-1.el9 → 2:1.17.0-1.el9
• adcli 0.9.2-1.el9 → 0.9.3.1-3.el9
• afterburn 5.9.0-1.el9_6 → 5.10.0-1.el9
• afterburn-dracut 5.9.0-1.el9_6 → 5.10.0-1.el9
• audit 3.1.5-4.el9 → 3.1.5-8.el9
• audit-libs 3.1.5-4.el9 → 3.1.5-8.el9
• avahi-libs 0.8-22.el9_6.1 → 0.8-23.el9
• bind-libs 32:9.16.23-31.el9_6.2 → 32:9.16.23-40.el9
• bind-license 32:9.16.23-31.el9_6.2 → 32:9.16.23-40.el9
• bind-utils 32:9.16.23-31.el9_6.2 → 32:9.16.23-40.el9
• binutils 2.35.2-63.el9_6.1 → 2.35.2-69.el9
• binutils-gold 2.35.2-63.el9_6.1 → 2.35.2-69.el9
• bootc 1.1.6-3.el9_6 → 1.12.1-1.el9
• bootupd 0.2.27-5.el9_6 → 0.2.31-1.el9
• bubblewrap 0.4.1-8.el9_5 → 0.6.3-1.el9
• bzip2 1.0.8-10.el9_5 → 1.0.8-11.el9
• bzip2-libs 1.0.8-10.el9_5 → 1.0.8-11.el9
• chrony 4.6.1-1.el9 → 4.8-1.el9
• cifs-utils 7.2-0.el9_6.2 → 7.5-1.el9
• clevis 21-208.el9 → 21-209.el9
• clevis-dracut 21-208.el9 → 21-209.el9
• clevis-luks 21-208.el9 → 21-209.el9
• clevis-systemd 21-208.el9 → 21-209.el9
• conmon 3:2.1.12-1.el9 → 3:2.2.1-1.el9
• container-selinux 4:2.237.0-2.el9_6 → 4:2.245.0-1.el9
• containernetworking-plugins 1:1.6.2-2.el9_6 → 1:1.9.0-1.el9
• containers-common 2:1-117.el9_6 → 5:5.8-1.el9
• coreos-installer 0.24.0-5.el9_6 → 0.25.0-2.el9
• coreos-installer-bootinfra 0.24.0-5.el9_6 → 0.25.0-2.el9
• coreutils 8.32-39.el9 → 8.32-40.el9
• coreutils-common 8.32-39.el9 → 8.32-40.el9
• cracklib 2.9.6-27.el9 → 2.9.6-28.el9
• cracklib-dicts 2.9.6-27.el9 → 2.9.6-28.el9
• cri-o 1.34.4-2.rhaos4.21.git70713d8.el9 → 1.35.0-2.rhaos4.22.git7deb12c.el9
• criu 3.19-1.2.el9_6 → 3.19-3.el9
• criu-libs 3.19-1.2.el9_6 → 3.19-3.el9
• crun 1.23.1-2.el9_6 → 1.26-1.el9
• crypto-policies 20250128-1.git5269e22.el9 → 20251126-1.gite9c4db2.el9
• crypto-policies-scripts 20250128-1.git5269e22.el9 → 20251126-1.gite9c4db2.el9
• cryptsetup 2.7.2-3.el9_6.1 → 2.8.1-3.el9
• cryptsetup-libs 2.7.2-3.el9_6.1 → 2.8.1-3.el9
• curl 7.76.1-31.el9_6.3 → 7.76.1-40.el9
• cyrus-sasl-gssapi 2.1.27-21.el9 → 2.1.27-22.el9
• cyrus-sasl-lib 2.1.27-21.el9 → 2.1.27-22.el9
• device-mapper 9:1.02.202-6.el9 → 9:1.02.206-2.el9_7.1
• device-mapper-event 9:1.02.202-6.el9 → 9:1.02.206-2.el9_7.1
• device-mapper-event-libs 9:1.02.202-6.el9 → 9:1.02.206-2.el9_7.1
• device-mapper-libs 9:1.02.202-6.el9 → 9:1.02.206-2.el9_7.1
• device-mapper-multipath 0.8.7-35.el9_6.3 → 0.8.7-44.el9
• device-mapper-multipath-libs 0.8.7-35.el9_6.3 → 0.8.7-44.el9
• dmidecode 1:3.6-1.el9 → 1:3.6-2.el9
• dnf 4.14.0-25.el9 → 4.14.0-33.el9
• dnf-data 4.14.0-25.el9 → 4.14.0-33.el9
• dnsmasq 2.85-17.el9_6 → 2.85-18.el9
• dracut 057-89.git20250311.el9_6 → 057-110.git20260130.el9
• dracut-network 057-89.git20250311.el9_6 → 057-110.git20260130.el9
• dracut-squash 057-89.git20250311.el9_6 → 057-110.git20260130.el9
• e2fsprogs 1.46.5-7.el9 → 1.46.5-8.el9
• e2fsprogs-libs 1.46.5-7.el9 → 1.46.5-8.el9
• efi-filesystem 6-2.el9_0 → 6-4.el9
• elfutils-debuginfod-client 0.192-6.el9_6 → 0.194-1.el9
• elfutils-default-yama-scope 0.192-6.el9_6 → 0.194-1.el9
• elfutils-libelf 0.192-6.el9_6 → 0.194-1.el9
• elfutils-libs 0.192-6.el9_6 → 0.194-1.el9
• ethtool 2:6.11-1.el9 → 2:6.15-2.el9
• expat 2.5.0-5.el9_6.1 → 2.5.0-6.el9
• firewalld-filesystem 1.3.4-15.el9_6 → 1.3.4-18.el9_7
• fuse-overlayfs 1.14-1.el9 → 1.16-1.el9
• fwupd 1.9.26-1.el9 → 1.9.31-1.el9
• fwupd-plugin-flashrom 1.9.26-1.el9 → 1.9.31-1.el9
• git-core 2.47.3-1.el9_6 → 2.52.0-1.el9
• glib2 2.68.4-16.el9_6.4 → 2.68.4-19.el9
• glibc 2.34-168.el9_6.24 → 2.34-256.el9
• glibc-common 2.34-168.el9_6.24 → 2.34-256.el9
• glibc-gconv-extra 2.34-168.el9_6.24 → 2.34-256.el9
• glibc-minimal-langpack 2.34-168.el9_6.24 → 2.34-256.el9
• gnupg2 2.3.3-4.el9_6.1 → 2.3.3-5.el9_7
• gnutls 3.8.3-6.el9_6.2 → 3.8.10-3.el9
• grub2-common 1:2.06-105.el9_6 → 1:2.06-124.el9
• grub2-efi-aa64 1:2.06-105.el9_6 → 1:2.06-124.el9
• grub2-tools 1:2.06-105.el9_6 → 1:2.06-124.el9
• grub2-tools-minimal 1:2.06-105.el9_6 → 1:2.06-124.el9
• hwdata 0.348-9.18.el9 → 0.348-9.22.el9
• ignition 2.21.0-6.el9_6 → 2.25.1-1.el9
• ignition-grub 2.21.0-6.el9_6 → 2.25.1-1.el9
• ima-evm-utils 1.5-3.el9 → 1.6.2-2.el9
• iproute 6.11.0-1.el9 → 6.17.0-2.el9
• iproute-tc 6.11.0-1.el9 → 6.17.0-2.el9
• iputils 20210202-11.el9_6.3 → 20210202-15.el9_7
• irqbalance 2:1.9.4-2.el9_6.2 → 2:1.9.4-5.el9
• iscsi-initiator-utils 6.2.1.9-1.gita65a472.el9 → 6.2.1.11-0.git4b3e853.el9
• iscsi-initiator-utils-iscsiuio 6.2.1.9-1.gita65a472.el9 → 6.2.1.11-0.git4b3e853.el9
• jq 1.6-17.el9_6.2 → 1.6-19.el9
• kernel 5.14.0-570.84.1.el9_6 → 5.14.0-686.el9
• kernel-core 5.14.0-570.84.1.el9_6 → 5.14.0-686.el9
• kernel-modules 5.14.0-570.84.1.el9_6 → 5.14.0-686.el9
• kernel-modules-core 5.14.0-570.84.1.el9_6 → 5.14.0-686.el9
• kernel-modules-extra 5.14.0-570.84.1.el9_6 → 5.14.0-686.el9
• kexec-tools 2.0.29-5.el9_6.2 → 2.0.29-17.el9
• kmod 28-10.el9 → 28-11.el9
• kmod-libs 28-10.el9 → 28-11.el9
• kpartx 0.8.7-35.el9_6.3 → 0.8.7-44.el9
• less 590-5.el9 → 590-6.el9
• libatomic 11.5.0-5.el9_5 → 11.5.0-14.el9
• libblkid 2.37.4-21.el9 → 2.37.4-25.el9
• libbpf 2:1.5.0-1.el9 → 2:1.5.0-3.el9
• libbrotli 1.0.9-7.el9_5 → 1.0.9-9.el9_7
• libcap 2.48-9.el9_2 → 2.48-10.el9
• libcom_err 1.46.5-7.el9 → 1.46.5-8.el9
• libcurl 7.76.1-31.el9_6.3 → 7.76.1-40.el9
• libdnf 0.69.0-13.el9 → 0.69.0-18.el9
• libdnf-plugin-subscription-manager 1.29.45.1-1.el9_6 → 1.29.50-1.el9
• libeconf 0.4.1-4.el9 → 0.4.1-5.el9
• libedit 3.1-38.20210216cvs.el9 → 3.1-39.20210216cvs.el9
• libfdisk 2.37.4-21.el9 → 2.37.4-25.el9
• libgcc 11.5.0-5.el9_5 → 11.5.0-14.el9
• libgomp 11.5.0-5.el9_5 → 11.5.0-14.el9
• libibverbs 54.0-2.el9_6 → 61.0-2.el9
• libipa_hbac 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• libldb 4.21.3-14.el9_6 → 4.23.5-5.el9
• libluksmeta 9-12.el9 → 10-1.el9
• libmount 2.37.4-21.el9 → 2.37.4-25.el9
• libnfsidmap 1:2.5.4-34.el9 → 1:2.5.4-41.el9
• libnvme 1.11.1-1.el9 → 1.16.1-2.el9
• librepo 1.14.5-2.el9 → 1.19.0-1.el9
• libsepol 3.6-2.el9 → 3.6-3.el9
• libsmartcols 2.37.4-21.el9 → 2.37.4-25.el9
• libsmbclient 4.21.3-14.el9_6 → 4.23.5-5.el9
• libsolv 0.7.24-3.el9 → 0.7.24-4.el9
• libss 1.46.5-7.el9 → 1.46.5-8.el9
• libssh 0.10.4-15.el9_6.1 → 0.10.4-17.el9_7
• libssh-config 0.10.4-15.el9_6.1 → 0.10.4-17.el9_7
• libsss_certmap 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• libsss_idmap 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• libsss_nss_idmap 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• libsss_sudo 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• libstdc++ 11.5.0-5.el9_5 → 11.5.0-14.el9
• libtalloc 2.4.2-1.el9 → 2.4.3-1.el9
• libtdb 1.4.12-1.el9 → 1.4.14-1.el9
• libtevent 0.16.1-1.el9 → 0.17.1-1.el9
• liburing 2.5-1.el9 → 2.12-1.el9
• libuser 0.63-16.el9 → 0.63-17.el9
• libuuid 2.37.4-21.el9 → 2.37.4-25.el9
• libwbclient 4.21.3-14.el9_6 → 4.23.5-5.el9
• libxml2 2.9.13-12.el9_6.1 → 2.9.13-14.el9_7
• libxmlb 0.3.10-1.el9 → 0.3.24-1.el9
• linux-firmware 20251111-151.8.el9_6 → 20260130-160.el9
• linux-firmware-whence 20251111-151.8.el9_6 → 20260130-160.el9
• logrotate 3.18.0-9.el9 → 3.18.0-12.el9
• luksmeta 9-12.el9 → 10-1.el9
• lvm2 9:2.03.28-6.el9 → 9:2.03.32-2.el9_7.1
• lvm2-libs 9:2.03.28-6.el9 → 9:2.03.32-2.el9_7.1
• mdadm 4.3-7.el9_6 → 4.4-3.el9
• mokutil 2:0.6.0-4.el9 → 2:0.7.2-4.el9
• mpfr 4.1.0-7.el9 → 4.1.0-10.el9
• ncurses 6.2-10.20210508.el9_6.2 → 6.2-12.20210508.el9
• ncurses-base 6.2-10.20210508.el9_6.2 → 6.2-12.20210508.el9
• ncurses-libs 6.2-10.20210508.el9_6.2 → 6.2-12.20210508.el9
• netavark 2:1.14.1-1.el9_6 → 2:1.17.2-1.el9
• nfs-utils 1:2.5.4-34.el9 → 1:2.5.4-41.el9
• nftables 1:1.0.9-4.el9_6 → 1:1.0.9-6.el9_7
• nmap-ncat 3:7.92-3.el9 → 3:7.92-5.el9
• nmstate 2.2.57-1.el9_6 → 2.2.57-1.el9
• numactl-libs 2.0.19-1.el9 → 2.0.19-3.el9
• nvme-cli 2.11-7.el9_6 → 2.16-1.el9
• openshift-clients 4.21.0-202601170322.p2.g19a2243.assembly.stream.el9 → 4.22.0-202602192221.p2.g3638445.assembly.stream.el9
• openshift-kubelet 4.21.0-202601200721.p2.g4d58ab3.assembly.stream.el9 → 4.22.0-202602130027.p2.g047d962.assembly.stream.el9
• openssh 8.7p1-45.el9_6.1 → 9.9p1-3.el9
• openssh-clients 8.7p1-45.el9_6.1 → 9.9p1-3.el9
• openssh-server 8.7p1-45.el9_6.1 → 9.9p1-3.el9
• openssl 1:3.2.2-7.el9_6.2 → 1:3.5.5-1.el9
• openssl-fips-provider 3.0.7-6.el9_5 → 3.0.7-8.el9
• openssl-fips-provider-so 3.0.7-6.el9_5 → 3.0.7-8.el9
• openssl-libs 1:3.2.2-7.el9_6.2 → 1:3.5.5-1.el9
• ose-aws-ecr-image-credential-provider 4.21.0-202601070814.p2.g3365bc9.assembly.stream.el9 → 4.22.0-202602190049.p2.g214f667.assembly.stream.el9
• ose-azure-acr-image-credential-provider 4.21.0-202601070814.p2.g83b3f9e.assembly.stream.el9 → 4.22.0-202601070821.p2.g8584b9a.assembly.stream.el9
• ose-crio-credential-provider 4.21.0-202601151825.p2.g41ac31f.assembly.stream.el9 → 4.22.0-202602110933.p2.g83d4961.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider 4.21.0-202601070814.p2.g8732386.assembly.stream.el9 → 4.22.0-202601070821.p2.g8732386.assembly.stream.el9
• ostree 2025.2-2.el9_6 → 2025.7-1.el9
• ostree-libs 2025.2-2.el9_6 → 2025.7-1.el9
• p11-kit 0.25.3-3.el9_5 → 0.26.2-1.el9
• p11-kit-trust 0.25.3-3.el9_5 → 0.26.2-1.el9
• pam 1.5.1-26.el9_6 → 1.5.1-28.el9
• passt 0^20250217.ga1e48a0-13.el9_6 → 0^20251210.gd04c480-3.el9
• passt-selinux 0^20250217.ga1e48a0-13.el9_6 → 0^20251210.gd04c480-3.el9
• perl-Net-SSLeay 1.94-1.el9 → 1.94-3.el9
• podman 5:5.4.0-18.el9_6 → 6:5.8.0-1.el9
• policycoreutils 3.6-2.1.el9 → 3.6-5.el9
• policycoreutils-python-utils 3.6-2.1.el9 → 3.6-5.el9
• polkit 0.117-13.el9 → 0.117-14.el9
• polkit-libs 0.117-13.el9 → 0.117-14.el9
• python-unversioned-command 3.9.21-2.el9_6.2 → 3.9.25-3.el9_7
• python3 3.9.21-2.el9_6.2 → 3.9.25-3.el9_7
• python3-audit 3.1.5-4.el9 → 3.1.5-8.el9
• python3-cloud-what 1.29.45.1-1.el9_6 → 1.29.50-1.el9
• python3-dateutil 1:2.8.1-7.el9 → 1:2.9.0.post0-1.el9_7
• python3-dnf 4.14.0-25.el9 → 4.14.0-33.el9
• python3-dnf-plugin-versionlock 4.3.0-20.el9 → 4.3.0-26.el9
• python3-dnf-plugins-core 4.3.0-20.el9 → 4.3.0-26.el9
• python3-hawkey 0.69.0-13.el9 → 0.69.0-18.el9
• python3-libdnf 0.69.0-13.el9 → 0.69.0-18.el9
• python3-librepo 1.14.5-2.el9 → 1.19.0-1.el9
• python3-libs 3.9.21-2.el9_6.2 → 3.9.25-3.el9_7
• python3-policycoreutils 3.6-2.1.el9 → 3.6-5.el9
• python3-rpm 4.16.1.3-37.el9 → 4.16.1.3-40.el9
• python3-setuptools 53.0.0-13.el9_6.1 → 53.0.0-15.el9
• python3-setuptools-wheel 53.0.0-13.el9_6.1 → 53.0.0-15.el9
• python3-subscription-manager-rhsm 1.29.45.1-1.el9_6 → 1.29.50-1.el9
• python3-urllib3 1.26.5-6.el9 → 1.26.5-6.el9_7.1
• qemu-guest-agent 17:9.1.0-15.el9_6.18 → 17:10.1.0-14.el9
• redhat-release 9.6-0.1.el9 → 9.8-0.6.el9
• redhat-release-eula 9.6-0.1.el9 → 9.8-0.6.el9
• rpm 4.16.1.3-37.el9 → 4.16.1.3-40.el9
• rpm-build-libs 4.16.1.3-37.el9 → 4.16.1.3-40.el9
• rpm-libs 4.16.1.3-37.el9 → 4.16.1.3-40.el9
• rpm-ostree 2025.6-5.el9_6 → 2026.1-3.el9
• rpm-ostree-libs 2025.6-5.el9_6 → 2026.1-3.el9
• rpm-plugin-selinux 4.16.1.3-37.el9 → 4.16.1.3-40.el9
• rpm-plugin-systemd-inhibit 4.16.1.3-37.el9 → 4.16.1.3-40.el9
• rpm-sign-libs 4.16.1.3-37.el9 → 4.16.1.3-40.el9
• rsync 3.2.5-3.el9 → 3.2.5-4.el9
• runc 4:1.2.5-5.el9_6 → 4:1.4.0-1.el9
• samba-client-libs 4.21.3-14.el9_6 → 4.23.5-5.el9
• samba-common 4.21.3-14.el9_6 → 4.23.5-5.el9
• samba-common-libs 4.21.3-14.el9_6 → 4.23.5-5.el9
• selinux-policy 38.1.53-5.el9_6 → 38.1.73-1.el9
• selinux-policy-targeted 38.1.53-5.el9_6 → 38.1.73-1.el9
• shadow-utils 2:4.9-12.el9 → 2:4.9-16.el9
• shadow-utils-subid 2:4.9-12.el9 → 2:4.9-16.el9
• shim-aa64 15.8-4.el9_3 → 16.1-7.el9
• skopeo 2:1.18.1-3.el9_6 → 2:1.22.0-1.el9
• slirp4netns 1.3.2-1.el9 → 1.3.3-1.el9
• socat 1.7.4.1-6.el9_6.1 → 1.7.4.1-8.el9
• sqlite-libs 3.34.1-8.el9_6 → 3.34.1-9.el9_7
• sssd 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• sssd-ad 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• sssd-client 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• sssd-common 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• sssd-common-pac 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• sssd-ipa 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• sssd-krb5 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• sssd-krb5-common 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• sssd-ldap 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• sssd-nfs-idmap 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• sssd-proxy 2.9.6-4.el9_6.3 → 2.9.8-1.el9
• stalld 1.20.4-1.el9_6 → 1.26.3-1.el9
• subscription-manager 1.29.45.1-1.el9_6 → 1.29.50-1.el9
• sudo 1.9.5p2-10.el9_6.2 → 1.9.17p2-2.el9
• systemd 252-51.el9_6.4 → 252-64.el9
• systemd-journal-remote 252-51.el9_6.4 → 252-64.el9
• systemd-libs 252-51.el9_6.4 → 252-64.el9
• systemd-pam 252-51.el9_6.4 → 252-64.el9
• systemd-rpm-macros 252-51.el9_6.4 → 252-64.el9
• systemd-udev 252-51.el9_6.4 → 252-64.el9
• tar 2:1.34-7.el9_6.2 → 2:1.34-10.el9
• toolbox 0.1.2-1.rhaos4.19.el9 → 0.1.2-1.rhaos4.22.el9
• tpm2-tools 5.2-4.el9 → 5.2-7.el9
• unbound-libs 1.16.2-19.el9_6.1 → 1.24.2-2.el9
• usermode 1.114-6.el9 → 1.114-7.el9
• util-linux 2.37.4-21.el9 → 2.37.4-25.el9
• util-linux-core 2.37.4-21.el9 → 2.37.4-25.el9
• vim-minimal 2:8.2.2637-22.el9_6.1 → 2:8.2.2637-25.el9
• virt-what 1.27-1.el9 → 1.27-2.el9
• which 2.21-30.el9_6 → 2.21-30.el9
• xfsprogs 6.4.0-5.el9 → 6.4.0-7.el9
• zram-generator 0.3.2-7.el9 → 1.1.2-1.el9

Added:

• adcli-selinux 0.9.3.1-3.el9
• azure-vm-utils 0.7.0-1.el9
• fcoe-utils 1.0.34-0.git14ef0d2.el9
• libconfig 1.7.2-9.el9
• libpciaccess 0.16-7.el9
• lldpad 1.1.1-4.gitf1dd9eb.el9

Extensions

Full list (136 packages)

• NetworkManager-libreswan-1.2.30-1.el9.aarch64
• bison-3.7.4-5.el9.aarch64
• corosync-3.1.10-1.el9.aarch64
• corosynclib-3.1.10-1.el9.aarch64
• cpp-11.5.0-14.el9.aarch64
• elfutils-libelf-devel-0.194-1.el9.aarch64
• fence-agents-all-4.10.0-110.el9.aarch64
• fence-agents-amt-ws-4.10.0-110.el9.noarch
• fence-agents-apc-4.10.0-110.el9.noarch
• fence-agents-apc-snmp-4.10.0-110.el9.noarch
• fence-agents-bladecenter-4.10.0-110.el9.noarch
• fence-agents-brocade-4.10.0-110.el9.noarch
• fence-agents-cisco-mds-4.10.0-110.el9.noarch
• fence-agents-cisco-ucs-4.10.0-110.el9.noarch
• fence-agents-common-4.10.0-110.el9.noarch
• fence-agents-drac5-4.10.0-110.el9.noarch
• fence-agents-eaton-snmp-4.10.0-110.el9.noarch
• fence-agents-emerson-4.10.0-110.el9.noarch
• fence-agents-eps-4.10.0-110.el9.noarch
• fence-agents-heuristics-ping-4.10.0-110.el9.noarch
• fence-agents-hpblade-4.10.0-110.el9.noarch
• fence-agents-ibmblade-4.10.0-110.el9.noarch
• fence-agents-ifmib-4.10.0-110.el9.noarch
• fence-agents-ilo-moonshot-4.10.0-110.el9.noarch
• fence-agents-ilo-mp-4.10.0-110.el9.noarch
• fence-agents-ilo-ssh-4.10.0-110.el9.noarch
• fence-agents-ilo2-4.10.0-110.el9.noarch
• fence-agents-intelmodular-4.10.0-110.el9.noarch
• fence-agents-ipdu-4.10.0-110.el9.noarch
• fence-agents-ipmilan-4.10.0-110.el9.noarch
• fence-agents-kdump-4.10.0-110.el9.aarch64
• fence-agents-mpath-4.10.0-110.el9.noarch
• fence-agents-redfish-4.10.0-110.el9.aarch64
• fence-agents-rhevm-4.10.0-110.el9.noarch
• fence-agents-rsa-4.10.0-110.el9.noarch
• fence-agents-rsb-4.10.0-110.el9.noarch
• fence-agents-sbd-4.10.0-110.el9.noarch
• fence-agents-scsi-4.10.0-110.el9.noarch
• fence-agents-vmware-rest-4.10.0-110.el9.noarch
• fence-agents-vmware-soap-4.10.0-110.el9.noarch
• fence-agents-wti-4.10.0-110.el9.noarch
• flex-2.6.4-9.el9.aarch64
• gcc-11.5.0-14.el9.aarch64
• glibc-devel-2.34-256.el9.aarch64
• gnutls-dane-3.8.10-3.el9.aarch64
• gnutls-utils-3.8.10-3.el9.aarch64
• ipmitool-1.8.18-27.el9.aarch64
• kernel-5.14.0-686.el9.aarch64
• kernel-64k-core-5.14.0-686.el9.aarch64
• kernel-64k-modules-5.14.0-686.el9.aarch64
• kernel-64k-modules-core-5.14.0-686.el9.aarch64
• kernel-64k-modules-extra-5.14.0-686.el9.aarch64
• kernel-core-5.14.0-686.el9.aarch64
• kernel-devel-5.14.0-686.el9.aarch64
• kernel-headers-5.14.0-686.el9.aarch64
• kernel-modules-5.14.0-686.el9.aarch64
• kernel-modules-extra-5.14.0-686.el9.aarch64
• krb5-pkinit-1.21.1-8.el9_6.aarch64
• krb5-workstation-1.21.1-8.el9_6.aarch64
• ldns-1.7.1-12.el9.aarch64
• libasan-11.5.0-14.el9.aarch64
• libkadm5-1.21.1-8.el9_6.aarch64
• libknet1-1.28-1.el9.aarch64
• libknet1-compress-bzip2-plugin-1.28-1.el9.aarch64
• libknet1-compress-lz4-plugin-1.28-1.el9.aarch64
• libknet1-compress-lzma-plugin-1.28-1.el9.aarch64
• libknet1-compress-lzo2-plugin-1.28-1.el9.aarch64
• libknet1-compress-plugins-all-1.28-1.el9.aarch64
• libknet1-compress-zlib-plugin-1.28-1.el9.aarch64
• libknet1-compress-zstd-plugin-1.28-1.el9.aarch64
• libknet1-crypto-nss-plugin-1.28-1.el9.aarch64
• libknet1-crypto-openssl-plugin-1.28-1.el9.aarch64
• libknet1-crypto-plugins-all-1.28-1.el9.aarch64
• libknet1-plugins-all-1.28-1.el9.aarch64
• libmpc-1.2.1-4.el9.aarch64
• libnozzle1-1.28-1.el9.aarch64
• libqb-2.0.8-1.el9.aarch64
• libreswan-5.2-1.el9fdp.aarch64
• libubsan-11.5.0-14.el9.aarch64
• libwsman1-2.8.1-2.el9.aarch64
• libxcrypt-devel-4.4.18-3.el9.aarch64
• libxslt-1.1.34-13.el9_6.aarch64
• libzstd-devel-1.5.5-1.el9.aarch64
• lm_sensors-libs-3.6.0-10.el9.aarch64
• m4-1.4.19-1.el9.aarch64
• make-1:4.3-8.el9.aarch64
• net-snmp-libs-1:5.9.1-17.el9_7.1.aarch64
• net-snmp-utils-1:5.9.1-17.el9_7.1.aarch64
• nspr-4.36.0-4.el9_4.aarch64
• nss-3.112.0-4.el9_4.aarch64
• nss-softokn-3.112.0-4.el9_4.aarch64
• nss-softokn-freebl-3.112.0-4.el9_4.aarch64
• nss-sysinit-3.112.0-4.el9_4.aarch64
• nss-tools-3.112.0-4.el9_4.aarch64
• nss-util-3.112.0-4.el9_4.aarch64
• openssl-devel-1:3.5.5-1.el9.aarch64
• openvswitch3.5-ipsec-3.5.2-51.el9fdp.aarch64
• openwsman-python3-2.8.1-2.el9.aarch64
• pacemaker-2.1.10-2.el9.aarch64
• pacemaker-cli-2.1.10-2.el9.aarch64
• pacemaker-cluster-libs-2.1.10-2.el9.aarch64
• pacemaker-libs-2.1.10-2.el9.aarch64
• pacemaker-schemas-2.1.10-2.el9.noarch
• pcp-conf-6.3.7-6.el9.aarch64
• pcp-libs-6.3.7-6.el9.aarch64
• pcs-0.11.11-1.el9.aarch64
• perl-TimeDate-1:2.33-6.el9.noarch
• protobuf-3.14.0-17.el9.aarch64
• python3-cffi-1.14.5-5.el9.aarch64
• python3-cryptography-36.0.1-5.el9.aarch64
• python3-lxml-4.6.5-3.el9.aarch64
• python3-openvswitch3.5-3.5.2-51.el9fdp.aarch64
• python3-ply-3.11-14.el9.noarch
• python3-pycparser-2.20-6.el9.noarch
• python3-pycurl-7.43.0.6-8.el9.aarch64
• python3-pyparsing-2.4.7-9.el9.noarch
• python3-tornado-6.4.2-2.el9_6.2.aarch64
• redhat-logos-90.6-1.el9.aarch64
• resource-agents-4.10.0-80.el9_7.11.aarch64
• ruby-3.0.7-165.el9_5.aarch64
• ruby-default-gems-3.0.7-165.el9_5.noarch
• ruby-libs-3.0.7-165.el9_5.aarch64
• rubygem-bigdecimal-3.0.0-165.el9_5.aarch64
• rubygem-bundler-2.2.33-165.el9_5.noarch
• rubygem-io-console-0.5.7-165.el9_5.aarch64
• rubygem-json-2.5.1-165.el9_5.aarch64
• rubygem-psych-3.3.2-165.el9_5.aarch64
• rubygem-rdoc-6.3.4.1-165.el9_5.noarch
• rubygem-rexml-3.2.5-165.el9_5.noarch
• rubygems-3.2.33-165.el9_5.noarch
• sbd-1.5.2-1.el9.aarch64
• sysstat-12.5.4-11.el9.aarch64
• telnet-1:0.17-85.el9.aarch64
• usbguard-1.1.4-2.el9.aarch64
• usbguard-selinux-1.1.4-2.el9.noarch
• zlib-devel-1.2.11-40.el9.aarch64

Red Hat Enterprise Linux CoreOS base layer: 9.8.20260221-0