What's Changed

• [redhat-3.14] NO-ISSUE: fix(ci): use unique intermediate tags for multi-arch builds by @openshift-cherrypick-robot in #5425
• [redhat-3.14] PROJQUAY-10946: chore(deps): bump authlib from 1.6.7 to 1.6.9 by @openshift-cherrypick-robot in #5433
• [redhat-3.14] deps: upgrade of jsrsasign to 11.1.1 (PROJQUAY-11056) by @nindsimonv in #5558
• PROJQUAY-10997: chore: fix CVE-2026-30922 in pyasn1 by @rhdmalone in #5576
• [redhat-3.14] deps: upgrade of PyJWT to 2.12.0 (PROJQUAY-10913) by @nindsimonv in #5568
• [redhat-3.14] deps: regenerate requirements-build.txt (PROJQUAY-10913) by @nindsimonv in #5620
• PROJQUAY-10807: fix: add callback URL validation to export action logs by @harishsurf in #5670
• [redhat-3.14] PROJQUAY-11084: deps: updated immutable version to 5.1.5 by @namansharma18899 in #5641
• NOISSUE: changelog: v3.14.7 Changelog Bump by @github-actions[bot] in #5682
• PROJQUAY-11216: fix(mirror): reject unknown fields in mirror create request by @Marcusk19 in #5683

Full Changelog: v3.14.6...v3.14.7

What's Changed

• NO-ISSUE: fix(ci): add missing POSTGRES_PASSWORD for clair-db by @shaonrh in #5561
• [redhat-3.17] PROJQUAY-11025: fix(web): use distinct labels for NEVER_RUN and SYNC_NOW org mirror repo statuses by @tlwu2013 in #5471
• [redhat-3.17] PROJQUAY-7025: fix(api): grant superusers full visibility on foreign orgs and repos by @openshift-cherrypick-robot in #5281
• [redhat-3.17] NO-ISSUE: chore: sync branches by @jbpratt in #5573
• PROJQUAY-10999: chore: fix CVE-2026-30922 in pyasn1 by @rhdmalone in #5520
• [redhat-3.17] deps: upgrade of PyJWT to 2.12.0 (PROJQUAY-10915) by @nindsimonv in #5565
• [redhat-3.17] PROJQUAY-11158: fix(web): restore Auto-Prune Policies tab for user namespace orgs by @openshift-cherrypick-robot in #5607
• [redhat-3.17] PROJQUAY-11026: fix(ui,api): disable Sync Now button while repos are actively syncing by @openshift-cherrypick-robot in #5538
• [redhat-3.17] PROJQUAY-10820: feat(org-mirror): mark repos as Skipped when source is deleted or filtered out by @openshift-cherrypick-robot in #5616
• PROJQUAY-11161: fix(mirror): Add allowed_hosts parameter to registry adapter by @AbhishekBandarupalle in #5614
• [redhat-3.17] NO-ISSUE: fix(web): add missing react-redux dependency by @openshift-cherrypick-robot in #5631
• [redhat-3.17] NO-ISSUE: fix(web): improve logo visibility by @openshift-cherrypick-robot in #5637
• [redhat-3.17] PROJQUAY-11178: fix(web): proxy cache config blocked when FEATURE_IMMUTABLE_TAGS disabled by @openshift-cherrypick-robot in #5651
• [redhat-3.17] PROJQUAY-10664: fix: add checks to export action logs callback URL by @openshift-cherrypick-robot in #5665
• NO-ISSUE: chore: v3.17.1 Changelog Bump by @github-actions[bot] in #5666
• [redhat-3.17] PROJQUAY-11206: deps: updated immutable version to 5.1.5 by @openshift-cherrypick-robot in #5680

New Contributors

• @AbhishekBandarupalle made their first contribution in #5614

Full Changelog: v3.17.0...v3.17.1

What's Changed

• [redhat-3.12] PROJQUAY-10946: chore(deps): bump authlib from 1.6.7 to 1.6.9 by @openshift-cherrypick-robot in #5432
• [redhat-3.12] deps: upgrade of jsrsasign to 11.1.1 (PROJQUAY-11046) by @nindsimonv in #5559
• PROJQUAY-10995: chore: fix CVE-2026-30922 in pyasn1 by @rhdmalone in #5577
• [redhat-3.12] deps: upgrade of PyJWT to 2.12.0 (PROJQUAY-10911) by @nindsimonv in #5569
• [redhat-3.12] deps: regenerate requirements-build.txt (PROJQUAY-10911) by @nindsimonv in #5621
• v3.12.16 Changelog Bump by @github-actions[bot] in #5650
• PROJQUAY-10805: add callback URL validation to export action logs by @harishsurf in #5672
• [redhat-3.12] PROJQUAY-11082: deps: updated immutable version to 5.1.5 by @namansharma18899 in #5642

Full Changelog: v3.12.15...v3.12.16

What's Changed

• [redhat-3.16] fix: use GitHub ARM runner for arm64 builds (PROJQUAY-0000) by @openshift-cherrypick-robot in #5041
• [redhat-3.16] fix(web): show error notification on org creation failure (PROJQUAY-9948) by @openshift-cherrypick-robot in #5055
• [redhat-3.16] chore: work around tox-docker gateway IP detection failure by @cubismod in #5066
• [redhat-3.16] chore: disable supervisord logfile writing by @openshift-cherrypick-robot in #5086
• [redhat-3.16] fix(storage): fall back to pure-Python rsa for CloudFront signing (PROJQUAY-10609) by @openshift-cherrypick-robot in #5122
• feat(web): add manifest track visualization for tags (PROJQUAY-9592) by @shaonrh in #5126
• fix(storage): downgrade OTEL log calls from ERROR to DEBUG (PROJQUAY-10384) by @Marcusk19 in #5120
• [redhat-3.16] PROJQUAY-1920: fix(config-tool): use dynamic redirect URL for OIDC validation by @openshift-cherrypick-robot in #5138
• NO-ISSUE: ci(lint): require PROJQUAY/NO-ISSUE prefix in PR titles by @jbpratt in #5143
• [redhat-3.16] NO-ISSUE: chore(ci): allow branch prefix for cherrypicks by @openshift-cherrypick-robot in #5146
• [redhat-3.16] PROJQUAY-10544: deps: updated axios version to 1.13.5 (PROJQUAY-10544) by @namansharma18899 in #5157
• [redhat-3.16] PROJQUAY-10419: deps: Update lodash to version 4.17.23 by @aroyoredhat in #5165
• [redhat-3.16] PROJQUAY-10625: fix(nginx): catch all react rewrite by @openshift-cherrypick-robot in #5172
• [redhat-3.16] PROJQUAY-10551: chore(deps): upgrade pillow to 12.1.1 for CVE-2026-25990 by @openshift-cherrypick-robot in #5133
• [redhat-3.16] deps: upgrade of cryptography from 44.0.1 to 46.0.5 (PROJQUAY-10533) by @nindsimonv in #5098
• [redhat-3.16] PROJQUAY-10652: deps: upgrade of minimatch to 3.1.5 by @nindsimonv in #5209
• NO-ISSUE: deps: Update requirements-build.txt by @aroyoredhat in #5229
• [redhat-3.16] PROJQUAY-10683: chore(deps): upgrade pypdf to 6.7.2 for CVE-2026-27628 by @openshift-cherrypick-robot in #5263
• [redhat-3.16] PROJQUAY-10506: deps: upgrade of Authlib to 1.6.6 by @openshift-cherrypick-robot in #5296
• [redhat-3.16] PROJQUAY-10855: deps: upgrade of Authlib to 1.6.7 by @openshift-cherrypick-robot in #5326
• [redhat-3.16] PROJQUAY-7025: fix(api): grant superusers full visibilty on foreign orgs and repos by @jbpratt in #5389
• [redhat-3.16] fix(ci): use unique intermediate tags for multi-arch builds (PROJQUAY-0000) by @openshift-cherrypick-robot in #5426
• v3.16.3 Changelog Bump by @github-actions[bot] in #5450
• [redhat-3.16] PROJQUAY-10946: chore(deps): bump authlib from 1.6.7 to 1.6.9 by @openshift-cherrypick-robot in #5429
• [redhat-3.16] deps: upgrade of jsrsasign to 11.1.1 (PROJQUAY-11065) by @nindsimonv in #5545
• PROJQUAY-10999: chore: fix CVE-2026-30922 in pyasn1 by @rhdmalone in #5524
• [redhat-3.16] deps: upgrade of PyJWT to 2.12.0 (PROJQUAY-10915) by @nindsimonv in #5566
• PROJQUAY-10803: fix: add checks to export action logs callback URL by @harishsurf in #5668

Full Changelog: v3.16.2...v3.16.3

What's Changed

• [redhat-3.15] deps: Updated the react-router version to 7.13.0 (PROJQUAY-10238) by @namansharma18899 in #4978
• [redhat-3.15] fix(data): apply org_filter in get_org_wide_permissions() (PROJQUAY-0000) by @openshift-cherrypick-robot in #4997
• [redhat-3.15] fix(api): use usermanager for superuser check in org creation (PROJQUAY-9696) by @openshift-cherrypick-robot in #4990
• [redhat-3.15] fix: use GitHub ARM runner for arm64 builds (PROJQUAY-0000) by @openshift-cherrypick-robot in #5037
• [redhat-3.15] fix: Fix potential health check connection poisoning (PROJQUAY-10526) by @openshift-cherrypick-robot in #5036
• [redhat-3.15] fix(ci): use unique intermediate tags for multi-arch builds (PROJQUAY-0000) by @openshift-cherrypick-robot in #5047
• [redhat-3.15] chore: work around tox-docker gateway IP detection failure by @openshift-cherrypick-robot in #5067
• [redhat-3.15] chore: disable supervisord logfile writing by @openshift-cherrypick-robot in #5087
• PROJQUAY-10609: [redhat-3.15] fix(storage): fall back to pure-Python rsa for CloudFront signing by @openshift-cherrypick-robot in #5124
• [redhat-3.15] PROJQUAY-1920: fix(config-tool): use dynamic redirect URL for OIDC validation by @openshift-cherrypick-robot in #5139
• [redhat-3.15] NO-ISSUE: ci(lint): require PROJQUAY/NO-ISSUE prefix in PR titles by @openshift-cherrypick-robot in #5145
• [redhat-3.15] NO-ISSUE: chore(ci): allow branch prefix for cherrypicks by @openshift-cherrypick-robot in #5148
• [redhat-3.15] PROJQUAY-10419: deps: Update lodash to version 4.17.23 by @openshift-cherrypick-robot in #5166
• [redhat-3.15] PROJQUAY-10550: chore(deps): upgrade pillow to 12.1.1 for CVE-2026-25990 by @openshift-cherrypick-robot in #5177
• [redhat-3.15] deps: upgrade of cryptography from 44.0.1 to 46.0.5 (PROJQUAY-10532) by @nindsimonv in #5099
• [redhat-3.15] PROJQUAY-10543: deps: updated axios version to 1.13.5 by @namansharma18899 in #5178
• [redhat-3.15] PROJQUAY-10651: deps: upgrade of minimatch to 3.1.5 by @nindsimonv in #5221
• [redhat-3.15] NO-ISSUE: fix(ci): Update requirements-build.txt by @aroyoredhat in #5236
• [redhat-3.15] PROJQUAY-10682: chore(deps): upgrade pypdf to 6.7.2 for CVE-2026-27628 by @openshift-cherrypick-robot in #5267
• v3.15.4 Changelog Bump by @github-actions[bot] in #5290
• [redhat-3.15] PROJQUAY-10506: deps: upgrade of Authlib to 1.6.6 by @openshift-cherrypick-robot in #5299
• [redhat-3.15] PROJQUAY-10854: deps: upgrade of Authlib to 1.6.7 by @openshift-cherrypick-robot in #5333
• [redhat-3.15] PROJQUAY-10946: chore(deps): bump authlib from 1.6.7 to 1.6.9 by @openshift-cherrypick-robot in #5428
• [redhat-3.15] deps: upgrade of jsrsasign to 11.1.1 (PROJQUAY-11062) by @nindsimonv in #5557
• PROJQUAY-10998: chore: fix CVE-2026-30922 in pyasn1 by @rhdmalone in #5554
• [redhat-3.15] deps: upgrade of PyJWT to 2.12.0 (PROJQUAY-10914) by @nindsimonv in #5567
• [redhat-3.15] deps: upgrade of PyJWT to 2.12.0 (PROJQUAY-10914) by @nindsimonv in #5617
• PROJQUAY-10806: fix: add callback URL validation to export action logs by @harishsurf in #5669

Full Changelog: v3.15.3...v3.15.4

What's Changed

• [redhat-3.10] deps: upgrade of jsrsasign to 11.1.1 (PROJQUAY-11041) by @nindsimonv in #5560
• chore: fix CVE-2026-30922 in pyasn1 (PROJQUAY-10994) by @rhdmalone in #5578
• [redhat-3.10] deps: upgrade of PyJWT to 2.12.0 (PROJQUAY-10910) by @nindsimonv in #5570
• [redhat-3.10] deps: regenerate requirements-build.txt (PROJQUAY-10910) by @nindsimonv in #5622
• v3.10.20 Changelog Bump by @github-actions[bot] in #5653
• [redhat-3.10] fix: add callback URL validation to export action logs (PROJQUAY-10811) by @harishsurf in #5675

Full Changelog: v3.10.19...v3.10.20

What's Changed

• [redhat-3.9] PROJQUAY-10946: chore(deps): bump authlib from 1.6.7 to 1.6.9 by @openshift-cherrypick-robot in #5434
• [redhat-3.9] deps: upgrade of jsrsasign to 11.1.1 (PROJQUAY-11068) by @nindsimonv in #5553
• [redhat-3.9] deps: upgrade of PyJWT to 2.12.0 (PROJQUAY-10916) by @nindsimonv in #5571
• chore: fix CVE-2026-30922 in pyasn1 (PROJQUAY-11160:) by @rhdmalone in #5612
• [redhat-3.9] deps: regenerate requirements-build.txt (PROJQUAY-10916) by @nindsimonv in #5649
• v3.9.20 Changelog Bump by @github-actions[bot] in #5652
• [redhat-3.9] fix: add callback URL validation to export action logs (PROJQUAY-10812) by @harishsurf in #5676

Full Changelog: v3.9.19...v3.9.20

What's Changed

• fix(ui): display quota consumed for organizations and user namespaces (PROJQUAY-9641) by @jbpratt in #4422
• sentry: added additional filtering for sentry events (PROJQUAY-9436) by @deshpandevlab in #4418
• fix(ui): remove team creation from robot user dropdown (PROJQUAY-9662) by @jbpratt in #4427
• fix(ui): display version and contact link on login page footer (PROJQUAY-9651) by @jbpratt in #4430
• fix(ui): Add OAuth token authorization flow for assigned users (PROJQUAY-9632) by @harishsurf in #4428
• revert: tracing improving otlp handling (PROJQUAY-8902) by @lechuk47 in #4438
• chore: implement lazy loading for route components by @jbpratt in #4439
• fix(ui): add user status labels to organizations table (PROJQUAY-9656) by @jbpratt in #4431
• fix(ui): add send recovery email option for superuser user management (PROJQUAY-9657) by @jbpratt in #4436
• deploy: remove GRPC service from the deployment template (PROJQUAY-0000) by @lechuk47 in #4440
• uibug: updated new UI to ask user to verify the mail when creating new account with email enabled (PROJQUAY-9655) by @deshpandevlab in #4432
• fix(web): use single quotes in container login commands (PROJQUAY-9683) by @jbpratt in #4446
• proxy: Drop error 403 token requests for anonymous pulls (PROJQUAY-9012) by @sharpenedblade in #4235
• fix(web): display relative time for application token dates with tooltip (PROJQUAY-9631) by @jbpratt in #4443
• fix(ui): fallback to user orgs when superuser API fails (PROJQUAY-9650) by @harishsurf in #4425
• fix(ui): superuser usage logs filter searches across all fields (PROJQUAY-9622) by @harishsurf in #4454
• fix(web): support shorthand organization and repository URLs with redirect (PROJQUAY-9580) by @jbpratt in #4456
• fix(ui): consolidate credential modals and fix state management issues (PROJQUAY-9630) by @jbpratt in #4472
• chore: add web/AGENTS.md by @jbpratt in #4478
• chore: migrate SidebarState and AlertState from Recoil to React Context by @jbpratt in #4445
• fix(web): display backend error message for INVITE_ONLY_USER_CREATION (PROJQUAY-9503) by @jbpratt in #4458
• chore(build): avoid npm caches in images when building locally (PROJQUAY-9604) by @dmesser in #4482
• chore: ctrf cypress reporting by @jbpratt in #4486
• chore: setup surge previews by @jbpratt in #4485
• chore: bump mypy python_version to 3.12 by @jbpratt in #4490
• fix(web): show correct error when email verification required (PROJQUAY-9661) by @jbpratt in #4489
• fix(web): redirect to username confirmation page after LDAP login (PROJQUAY-9735) by @jbpratt in #4500
• fix(web): use correct API endpoints for user namespace quota limits (PROJQUAY-9730) by @jbpratt in #4494
• chore: add ldap dev config by @jbpratt in #4497
• fix(web): hide change email/password for external auth in superuser panel (PROJQUAY-9747) by @jbpratt in #4503
• fix(web): hide Create User button for external authentication in superuser panel (PROJQUAY-9736) by @jbpratt in #4495
• fix(api): superuser panel access without SUPERUSERS_FULL_ACCESS (PROJQUAY-9693) by @HammerMeetNail in #4455
• chore: enable FEATURE_UI_V2 as default by @jbpratt in #4511
• bug: removing console warnings from repository page and usagelogs (PROJQUAY-9648) by @deshpandevlab in #4426
• deps: updated axios version to 1.12.0 (PROJQUAY-9782) by @namansharma18899 in #4429
• ui: fixing redirect on org deletion (PROJQUAY-9742) by @bcaton85 in #4514
• pullstats: updated bulk upsert function to track correct pull count and timestamp in case of race condition (PROJQUAY-9684) by @deshpandevlab in #4463
• fix(ui): Remove local dev test configs (PROJQUAY-9774) by @harishsurf in #4520
• chore: remove prop-types dependency usage in favor of TypeScript types by @jbpratt in #4510
• fix(ui): Add missing operation types to usage logs chart (PROJQUAY-6881) by @harishsurf in #4530
• fix(ui): Add infinite scroll and load more button to usage logs (PROJQUAY-9717) by @harishsurf in #4525
• chore: add create-plan-from-issue CC command by @jbpratt in #4531
• fix(ui): Add "Requires fresh login" checks for superuser operations (PROJQUAY-9658) by @harishsurf in #4451
• fix(web): handle user deletion via Actions dropdown (PROJQUAY-9788) by @jbpratt in #4539
• fix: Added lazy initialization for redis to retry the connection after pod restart automatically connect when available (PROJQUAY-9791) by @deshpandevlab in #4538
• fix: allow global readonly superusers to access org logs without FULL_ACCESS (PROJQUAY-9790) by @HammerMeetNail in #4535
• fix(web): display backend-generated password in user creation (PROJQUAY-9780) by @jbpratt in #4542
• fix(web): use correct API endpoint for user quota (PROJQUAY-9785) by @jbpratt in #4541
• fix(ui): Add missing superuser routes to nginx to prevent 404 (PROJQUAY-9741) by @harishsurf in #4529
• fix(web): hide 'Last Updated' for OIDC team sync (PROJQUAY-9773) by @jbpratt in #4546
• fix: allow global readonly superusers to access all organization data without FULL_ACCESS (PROJQUAY-9798) by @HammerMeetNail in #4549
• fix(web): hide user tabs when superuser views other users (PROJQUAY-9753) by @jbpratt in #4547
• ui: paginating application tokens (PROJQUAY-9778) by @bcaton85 in #4523
• ui: rendering error for splunk logs (PROJQUAY-6934) by @bcaton85 in #4558
• chore: don't show status code to users by @jbpratt in #4540
• feat: add IRSA support when creating Quay.io clients (PROJQUAY-9228) by @cubismod in #4312
• fix(web): fix inline markdown code rendering (PROJQUAY-9809) by @jbpratt in #4569
• ui: allow for team creation while creating notification (PROJQUAY-9727) by @bcaton85 in #4570
• fix: allow global readonly superusers to access quota limit endpoints (PROJQUAY-9804) by @HammerMeetNail in #4567
• chore: extract logo selection logic into reusable hook by @jbpratt in #4566
• fix(web): fetch build logs from separate endpoint in superuser panel (PROJQUAY-9714) by @jbpratt in #4493
• fix(ui): Enable organization/user visibility for read-only superusers (PROJQUAY-6882) by @harishsurf in #4545
• ui: removing feedback banner (PROJQUAY-9811) by @bcaton85 in #4577
• chore: CI improvements by @jbpratt in #4586
• api: fixing recovery endpoint routing (PROJQUAY-9807) by @bcaton85 in #4578
• fix: Fix race conditions in pull metrics tracking and flushing (PROJQUAY-9776) by @deshpandevlab in #4561
• fix(ui): Add OAuth state parameter for CSRF protection (PROJQUAY-9805) by @harishsurf in #4562
• ui: adding redirect to update info page (PROJQUAY-9744) by @bcaton85 in #4579
• chore: add /about and /security static pages to new UI by @jbpratt in #4592
• ui: redirect new UI super user for fresh login when authentication type is OIDC (PROJQUAY-9748) by @Sunandadadi in #4571
• ui: normalize user settings tabs (PROJQUAY-9814) by @bcaton85 in #4597
• fix(ui): preserve mirroring credentials when updating tag pattern (PROJQUAY-9608) by @jbpratt in #4410
• chore: add service account annotations to the ROSA template (PROJQUAY-9228) by @cubismod in #4601
• chore: fix account settings navigation by @jbpratt in #4607
• fix(test): prevent MySQL deadlocks in parallel proxy model tests (PROJQUAY-0000) by @jbpratt in #4605
• chore: add repomirror to local dev by @jbpratt in #4600
• chore: Add Nodeport svc to handle Ingress traffic (PROJQUAY-0000) by @lechuk47 in #4612
• chore: Add Nodeport svc to handle Ingress traffic (PROJQUAY-0000) by @lechuk47 in #4618
• fix(web): add CSRF protection to ...

What's Changed

• [redhat-3.10] fix: use GitHub ARM runner for arm64 builds (PROJQUAY-0000) by @openshift-cherrypick-robot in #5039
• [redhat-3.10] fix(ci): use unique intermediate tags for multi-arch builds (PROJQUAY-0000) by @openshift-cherrypick-robot in #5051
• [redhat-3.10] chore: work around tox-docker gateway IP detection failure by @openshift-cherrypick-robot in #5072
• [redhat-3.10] deps: upgrade of cryptography from 42.0.5 to 46.0.5 (PROJQUAY-10529) by @nindsimonv in #5103
• [redhat-3.10] chore: PROJQUAY-10547: upgrade pillow to 12.1.1 for CVE-2026-25990 by @rhdmalone in #5195
• [redhat-3.10] PROJQUAY-10540: deps: updated axios version to 1.13.5 by @namansharma18899 in #5182
• [redhat-3.10] deps: upgrade of minimatch to 3.1.5 (PROJQUAY-10648) by @nindsimonv in #5226
• [redhat-3.10] NO-ISSUE: fix(ci): Update requirements-build.txt by @nindsimonv in #5251
• [redhat-3.10] NO-ISSUE: Update setuptool to 78.1.1 and requirements-build.txt by @nindsimonv in #5273
• [redhat-3.10] chore(deps): upgrade pypdf to 6.7.2 for CVE-2026-27628 (PROJQUAY-10679) by @openshift-cherrypick-robot in #5284
• [redhat-3.10] PROJQUAY-10506: deps: upgrade of Authlib to 1.6.6 by @openshift-cherrypick-robot in #5305
• v3.10.19 Changelog Bump by @github-actions[bot] in #5318
• [redhat-3.10] PROJQUAY-10851: deps: upgrade of Authlib to 1.6.7 by @openshift-cherrypick-robot in #5337
• [redhat-3.10] PROJQUAY-10677: deps: Bump rollup to 2.80 by @openshift-cherrypick-robot in #5370
• [redhat-3.10] PROJQUAY-10946: chore(deps): bump authlib from 1.6.7 to 1.6.9 by @openshift-cherrypick-robot in #5431

Full Changelog: v3.10.18...v3.10.19

What's Changed

• [redhat-3.12] fix: use GitHub ARM runner for arm64 builds (PROJQUAY-0000) by @openshift-cherrypick-robot in #5038
• [redhat-3.12] fix(ci): use unique intermediate tags for multi-arch builds (PROJQUAY-0000) by @openshift-cherrypick-robot in #5049
• [redhat-3.12] chore: work around tox-docker gateway IP detection failure by @openshift-cherrypick-robot in #5071
• [redhat-3.12] NO-ISSUE: ci(lint): require PROJQUAY/NO-ISSUE prefix in PR titles by @openshift-cherrypick-robot in #5151
• [redhat-3.12] NO-ISSUE: chore(ci): allow branch prefix for cherrypicks by @openshift-cherrypick-robot in #5153
• [redhat-3.12] PROJQUAY-10419: deps: Update lodash to version 4.17.23 by @openshift-cherrypick-robot in #5169
• [redhat-3.12] deps: upgrade of cryptography from 42.0.5 to 46.0.5 (PROJQUAY-10530) by @nindsimonv in #5102
• [redhat-3.12] PROJQUAY-10666: chore(deps): upgrade pillow to 12.1.1 for CVE-2026-25990 by @rhdmalone in #5185
• [redhat-3.12] PROJQUAY-10629: deps: updated axios version to 1.13.5 by @namansharma18899 in #5181
• [redhat-3.12] PROJQUAY-10715: deps: upgrade of minimatch to 3.1.5 by @nindsimonv in #5225
• [redhat-3.12] NO-ISSUE: fix(ci): Update requirements-build.txt by @nindsimonv in #5250
• [redhat-3.12] NO-ISSUE: Update setuptool to 78.1.1 and requirements-build.txt by @nindsimonv in #5272
• [redhat-3.12] PROJQUAY-10799: chore(deps): upgrade pypdf to 6.7.2 for CVE-2026-27628 by @openshift-cherrypick-robot in #5282
• [redhat-3.12] PROJQUAY-10506: deps: upgrade of Authlib to 1.6.6 by @openshift-cherrypick-robot in #5304
• v3.12.15 Changelog Bump by @github-actions[bot] in #5315
• [redhat-3.12] PROJQUAY-10869: deps: upgrade of Authlib to 1.6.7 by @openshift-cherrypick-robot in #5336
• [redhat-3.12] PROJQUAY-10677: deps: Bump rollup to 2.80 by @aroyoredhat in #5359

Full Changelog: v3.12.14...v3.12.15