AIPCC kserve storage v3.5.0+rhaiv.0

tag to build kserve-storage AIPCC wheels

odh-v3.5-EA2

What's Changed

• Sync upstream 20260423 0828 by @pierDipi in #1436
• fix: skip INFERENCE_SERVICE_NAME injection on pre-existing deployments to avoid pod restart on upgrade (RHOAIENG-59268) by @andresllh in #1435
• 260424 sync upstream/master to odh/master by @vivekk16 in #1445
• refactor: restores CSR code and gate on CRD availability by @bartoszmajsak in #1327
• fix: clear stale LatestDeploymentReady/AuthProxyPreserved when proxy images match by @VedantMahabaleshwarkar in #1465
• update: llm-d version for ODH 3.5ea1 by @zdtsw in #1451
• feat: add kserve-module-operator scaffold by @Jooho in #1469
• fix: rename misnamed test file and fix permission fix job SCC by @VedantMahabaleshwarkar in #1366
• feat(kserve-module): add manifest rendering pipeline by @Jooho in #1480
• CI: Tekton pipeline sync by @odh-devops-app[bot] in #1500
• Code sync master -> release-v0.17 | May 14th 2026 by @israel-hdez in #1502
• [RHOAIENG-60419] volumes[2].name: must be no more than 63 characters by @spolti in #1496
• feat(kserve-module): add SSA deploy/GC/Rollback feature. by @Jooho in #1499
• fix(storage): update hf-xet to v1.5.0 to resolve HuggingFace download issues by @andresllh in #1475
• [RHOAIENG-63040] Fix merge step git config by @jlost in #1510
• refactor(ci): layered Makefile/script architecture for OpenShift E2E setup and teardown by @jlost in #1433
• chore: add maskarb to OWNERS by @maskarb in #1523
• Adding llm auth file from releasev0.15 branch by @andresllh in #1140
• feat(kserve-module): add status reporting with conditions and release info by @Jooho in #1521
• [RHOAIENG-63043] feat(ci): cache facebook/opt-125m in SeaweedFS to eliminate HuggingFace downloads by @jlost in #1501
• feat(kserve-module): add envtest integration test infrastructure by @Jooho in #1527
• RHOAIENG-59339: Avoid scheduler restarts on upgrades from 3.3 by @pierDipi in #1452
• feat(kserve-module): add dependency checking and CRD watch by @Jooho in #1525
• RHOAIENG-63946: Add activeDeadlineSeconds to SeaweedFS init jobs by @jira-autofix[bot] in #1535
• CI: Tekton pipeline sync by @odh-devops-app[bot] in #1544
• feat(kserve-module): add dependency integration tests by @Jooho in #1540
• feat(kserve-module): add dynamic watch for Subscription and LeaderWorkerSet CRDs by @Jooho in #1537
• chore: sync upstream/master to odh/master by @jlost in #1522
• ci: protect against skills/context poisoning by @bartoszmajsak in #1518
• refactor(rules): improves odh-specific code rules by @bartoszmajsak in #1554
• feat(kserve-module): add nim.opendatahub.io RBAC for account-editor/viewer roles by @Jooho in #1555
• feature(kserve-module): add dynamic watch integration test by @Jooho in #1549
• feat: centralize OpenShift operator subscription configurations by @Jooho in #1558
• feat(kserve-module): add E2E cluster setup script and make targets by @Jooho in #1562
• restoring odh exclusive s3 endpoint handling logic by @brettmthompson in #1551
• chore: sync master to release-v0.17 by @jlost in #1550
• CI: Tekton pipeline sync by @odh-devops-app[bot] in #1506
• feat(kserve-module): add E2E lifecycle tests, cert-manager RBAC, and testing doc by @Jooho in #1568
• fix(kserve-module): use explicit CRD names for irregular plural handling by @Jooho in #1596
• feat(kserve-module): add E2E status condition and drift correction tests by @Jooho in #1597
• ci(kserve-module): add E2E and precommit check GitHub Actions workflows by @Jooho in #1570
• Upstream Sync 20260604 by @vivekk16 in #1582
• [RHOAIENG-50812] add deployment profile support to OpenShift CI by @spolti in #1468
• Sync master to release v0.17 06052026 by @brettmthompson in #1585
• Add sast-shell-check taskRunSpecs to all pull pipelines by @mwaykole in #1587
• Sync master to release-v0.17 by @pierDipi in #1610
• RHOAIENG-60424: Add sast-shell-check taskRunSpecs to all push pipelines by @mwaykole in #1611
• refactor(isvc): isolate service reconciler ODH logic behind distro build tag by @bartoszmajsak in #1559
• refactor(localmodel): use receiver methods for platform hooks by @bartoszmajsak in #1566
• fix(build): add distro-builds rule and fix GOTAGS propagation gaps by @bartoszmajsak in #1567
• fix(kserve-module): prefer oc over kubectl and auto-detect platform by @Jooho in #1615
• fix(kserve-module): move drift test to lifecycle and replace sleep by @Jooho in #1621
• docs: add agent docs for ODH midstream KServe by @VedantMahabaleshwarkar in #1623
• feat(kserve-module): Add WVA sub-component ManagementState reconciliation and tests by @Jooho in #1609
• feat(llmisvc): gate TLS resources on enableLLMInferenceServiceTLS by @madhugoutham in #1595
• refactor(kserve-module): reuse path in fixtures by @Jooho in #1625
• fix: status update conflicts and suppress NotFound errors by @Jooho in #1624
• feat(kserve-module): add EnableLLMInferenceServiceTLS toggle by @madhugoutham in #1622
• chore: update llm-d routing-sidecar image tag to odh-v3.5-EA1 by @vivekk16 in #1636
• Sync master to release v0.17 by @vivekk16 in #1637

New Contributors

• @jira-autofix[bot] made their first contribution in #1535
• @mwaykole made their first contribution in #1587
• @madhugoutham made their first contribution in #1595

Full Changelog: odh-v3.5-EA1...odh-v3.5-EA2

odh-v3.5-EA1

What's Changed

• [RHOAIENG-22171] Added option to build and push kserve images. by @andresllh in #609
• add checklist item for jira link by @VedantMahabaleshwarkar in #617
• 250514 sync master by @spolti in #614
• Allow OCI for multi-node/multi-gpu by @israel-hdez in #618
• Merge KServe upstream into ODH by @spolti in #621
• 250520 sync master by @spolti in #623
• Add pierDipi and bartoszmajsak to OWNERS by @pierDipi in #633
• RHOAIENG-26179: Deploy CMA / KEDA during E2E tests setup by @pierDipi in #631
• Add guide to create a new branch from an upstream release by @israel-hdez in #615
• Disallow Propagation of haproxy.router.openshift.io/timeout Annotation by @brettmthompson in #637
• RHOAIENG-25750: Split syncable and static params by @pierDipi in #640
• [master] Fix issue with OCI support for multi-node/multi-gpu by @israel-hdez in #628
• Revert "RHOAIENG-25750: Split syncable and static params" by @pierDipi in #642
• RHOAIENG-24134: KServe Support secure access to the metrics server with TriggerAuthentication for KEDA autoscaling by @pierDipi in #643
• Back-porting fixes for InferenceGraph by @israel-hdez in #647
• Adding fvt tests and setup for s3 storage with tls by @brettmthompson in #645
• Remove extra step that printed the old tag by @hdefazio in #654
• [Cherry pick] Python test fixes from upstream by @hdefazio in #659
• [Cherry pick] Stop and resume a model [Raw Deployment] (kserve#4455) by @hdefazio in #658
• [RHOAIENG-26152] created-fvt-test-for-knative-feature-schedulername by @andresllh in #657
• [RHOAIENG-27166] Fix flaky test failure with mc alias by @andresllh in #670
• [RHOAIENG-26313]-create-fvt-test-for-multi-container-probing by @andresllh in #665
• Resolve Resource Conflict In FVT Tests by @brettmthompson in #678
• [RHOAIENG-28024] update pip version by @Jooho in #684
• Docs on how to get a token for protected InferenceServices by @israel-hdez in #677
• Resolve inference endpoint using runtime protocol when applicable by @israel-hdez in #667
• Sync/250623 upstream master by @brettmthompson in #689
• Sync/250625 upstream master by @brettmthompson in #693
• [Cherry-pick] Stop and Resume a transformer by @hdefazio in #703
• fix keda raw e2e tests for odh by @VedantMahabaleshwarkar in #619
• [RHOAIENG-15553] Adding the kfp template to the odh/kfp docs. by @mholder6 in #650
• [Cherry pick] Stop and resume an explainer by @hdefazio in #705
• Restore zero initial scale behavior on master branch by @brettmthompson in #709
• Improve Model Load Status Check in s3-TLS FVT Tests by @brettmthompson in #714
• [master] Align support secure access to prometheus in Keda autoscaling to upstream API by @pierDipi in #740
• Updating s3 tls fvt tests to cover all new scenarios by @brettmthompson in #756
• 250717 sync master by @spolti in #752
• 250731 sync kserve/master into odh/master batch1 by @mholder6 in #805
• 250731 sync kserve/master into odh/master batch2 by @mholder6 in #810
• 250731 sync kserve/master into odh/master batch3 by @mholder6 in #820
• [RHOAIENG-31248] - KServe http: TLS handshake error from XXXXXX: remo… by @spolti in #816
• [Sync]2025-0815 from upstream kserve master to odh kserve master by @Jooho in #844
• Revert "[Sync]2025-0815 from upstream kserve master to odh kserve master" by @Jooho in #849
• [Sync]2025-0815 from upstream kserve master to odh kserve master by @Jooho in #851
• modify keda autoscaling e2e test to work with ODH by @VedantMahabaleshwarkar in #873
• Fix indentation issue on go unit test:check-coverage workflow by @hdefazio in #881
• [Sync]2025-0822 from upstream kserve master to odh kserve master by @vivekk16 in #866
• Support for Configurable oauth-proxy Timeout by @brettmthompson in #919
• Adding serverless to raw migration script by @andresllh in #896
• [RHOAIENG-33172] - ModelMesh to RawDeployment migration helper by @spolti in #893
• [RHOAIENG-32520] - Update kube-rbac-proxy image by @spolti in #901
• Revert and Resync [Sync]2025-0822 from upstream KServe master to ODH master (preserve history) by @vivekk16 in #924
• Add vivekk16 to OWNERS by @vivekk16 in #956
• Update README.md for Migration by @vivekk16 in #966
• Minor fixes by @spolti in #959
• [RHOAIENG-34931] - Storage Initializer can't handle versioned models storage by @spolti in #968
• Update minio image to use what upstream uses by @mholder6 in #975
• [RHOAIENG-31086] - IG test for raw deployment by @spolti in #973
• 20251118 sync upstream by @mholder6 in #976
• Revert "20251118 sync upstream" by @mholder6 in #991
• [RHOAIENG-36758] - Investigate and Optimize KServe Unit Test Executio… by @spolti in #992
• [RHOAIENG-36673] - Investigate and Refactor KServe E2E Test Suite for… by @spolti in #987
• Sync upstream kserve/kserve - Batch 1 (commits 1-13 + dependencies) by @andresllh in #1006
• [Sync Upstream] Batch 2: Autoscaling, LLMISVC improvements, and Time Series API by @andresllh in #1007
• Add self to OWNERS; remove hdefazio, rnetser by @jlost in #1016
• RHOAIENG-39707: Fix S3 TLS StorageSpec E2E Test Failures by @jlost in #1015
• [RHOAIENG-39626] - KServe E2E Tests with Skip Markers - Comprehensive… by @spolti in #1024
• [RHOAIENG-13818] - Cleanup, remove disabled GH Actions by @spolti in #1027
• chore: bump github.com/kedacore/keda/v2 from 2.16.1 to 2.17.3 by @jlost in #1034
• [RHOAIENG-38500] Remove deprecated create-release workflow by @vivekk16 in #1054
• add pipelines for odh ci builds by @MohammadiIram in #1051
• update component names by @MohammadiIram in #1059
• Sync 260121 kserve upstream odh - align git history by @spolti in #1063
• Revert "Sync 260121 kserve upstream odh - align git history" by @spolti in #1066
• Sync 260121 kserve upstream odh by @spolti in #1067
• Sync 260122 kserve upstream odh by @spolti in #1074
• Revert "Sync 260122 kserve upstream odh" by @spolti in #1076
• Sync 260122 kserve upstream odh by @spolti in #1077
• Sync 260123 kserve upstream odh by @spolti in #1079
• Sync 260128 kserve upstream odh by @spolti in #1083
• Sync 260129 kserve upstream odh by @spolti in #1086
• [RHOAIENG-35346] Add ODH operator installation support with custom PR manifests for e2e test setup by @mholder6 in #1023
• Delete .tekton directory by @MohammadiIram in #1093
• Fix serverless-to-raw.sh bug where a null display name woul...

odh-v3.4

What's Changed

• fix: prevent flaky InferenceGraph auth deletion tests by @pierDipi in #1221
• fix(llmisvc): defer migration until webhooks are serving by @bartoszmajsak in #1251
• chore: remove no longer used odh-specific workflow by @israel-hdez in #1254
• RHOAIENG-54004: add recommended-accelerators annotation and fix description key on accelerator configs by @KillianGolds in #1249
• Enable ARM builds for llmisvc controller by @pierDipi in #1255
• fix: comment out non-existent build-odh-kserve-llmisvc-controller taskRunSpec by @jlost in #1252
• Fix CI setup for llmisvc by @andresllh in #1196
• Sync 0.17 from master by @pierDipi in #1266
• fix(llmisvc): match --enable-cert-reload=true flag form in cert hash skip by @bartoszmajsak in #1269
• fix(ci): inject KSERVE_NAMESPACE into E2E test environment by @bartoszmajsak in #1253
• Fix isvc e2e tests by @pierDipi in #1258
• Cleanup scc rolebinding on force stop by @pierDipi in #1260
• fix(llmisvc): autoscaling config logging by @Gregory-Pereira in #1289
• master from kserve:master by @pierDipi in #1264
• [pull] master from kserve:master by @pull[bot] in #1193
• ci: wire llmisvc-controller into Konflux group testing (release-v0.17) by @jlost in #1292
• Bump Tekton push image tags to 3.4 by @jlost in #1248
• RHOAIENG-48857: fix port conflict in multi-container probing test by @jlost in #1100
• feat(llmisvc): add WVA autoscaling config to ODH overlay by @vivekk16 in #1297
• chore: migrate ODH vars to v5.8 replacements [RHOAIENG-11436] by @jlost in #1149
• fix(llmisvc): update Spyre configs for continuous batching by @KillianGolds in #1312
• fix(build): pin setup-envtest to release-0.19 by @jlost in #1315
• fix: clusterStorageContainer image and resources in ODH overlay by @spolti in #1311
• CI: Tekton pipeline sync by @odh-devops-app[bot] in #1308
• drop vllm --> kserve_vllm metrics renaming by @Gregory-Pereira in #1299
• feat: add ONNX model class support for MLServer by @Jooho in #1317
• [release-v0.17] feat: add ONNX model class support for MLServer by @openshift-cherrypick-robot in #1333
• feat: isolate OpenShift localmodel changes behind distro build tags for modelcache by @VedantMahabaleshwarkar in #1220
• feat(rules): add CodeRabbit rules for clean merges by @bartoszmajsak in #1318
• Sync/upstream merge part1 by @mholder6 in #1332
• Revert "Merge pull request #1332..." by @mholder6 in #1348
• ci: add Konflux pull-request and group-test pipelines for master by @jlost in #1265
• fix(llmisvc): always set status.URL with a discovered address by @pierDipi in #1351
• Sync/20260402 upstream main by @mholder6 in #1352
• feat(llmisvc): add Intel Gaudi accelerator LLMInferenceServiceConfig by @KillianGolds in #1331
• [RHOAIENG-56198] fix: rebase group-test Dockerfiles to ubi9 by @jlost in #1355
• fix: dockerfile for llmisvc to run non root on xks in odh by @andresllh in #1363
• fix(ci): [RHOAIENG-56051] harden OLM CSV waits and Kuadrant/RHCL deploy by @jlost in #1301
• feat(llmisvc): propagate imagePullSecrets from default SA by @pierDipi in #1314
• feat(llmisvc): add customizeManagerOptions hook for distro cache config by @bartoszmajsak in #1192
• fix: add back the patch to remove clusterServingRuntime by @spolti in #1313
• feat: sync release v0.17 from odh/master by @pierDipi in #1296
• add back the patch to remove clusterServingRuntime by @spolti in #1372
• ClusterStorageContainer image and resources in ODH overlay (#1311) by @spolti in #1371
• ci: improve e2e test scripts for local runs and llmisvc builds by @jlost in #1356
• ci: guard against silent build breakage from build tag drift by @bartoszmajsak in #1370
• Sync/20260403 upstream main by @mholder6 in #1359
• Sync master to release v0.17 by @vivekk16 in #1388

New Contributors

• @Gregory-Pereira made their first contribution in #1289

Full Changelog: odh-v3.4-EA2...odh-v3.4

odh-v3.4-EA2

What's Changed

• chore: use odh-3.4-EA1 for konflux in preparation for ODH release by @israel-hdez in #1106
• RHOAIENG-49060: [upgrade] Avoid storage-init rollout on new version for llmisvc by @pierDipi in #1105
• RHOAIENG-49060: [upgrade] Preserve previous config-text and restart scheduler to pick up newer signed TLS certs by @pierDipi in #1104
• chore: prepare for ODH 3.4-EA2 release by @israel-hdez in #1107
• e2e: adding kserve Konflux integration group testing infra by @dchourasia in #1094
• [RHOAIENG-50147] E2E CI: PKG_CONFIG_PATH unbound when activating kserve venv by @jlost in #1125
• fix: Reject root path and narrow path traversal check in createNewFile by @spolti in #1116
• [RHOAIENG-49196] - CVE-2026-26007: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves by @spolti in #1133
• [RHOAIENG-47668] - CVE-2026-24486: Python-Multipart Arbitrary File Write by @spolti in #1153
• Handle missing LeaderWorkerSet CRD in multi-node workload reconciliation by @pierDipi in #1158

Full Changelog: odh-v3.4-EA1...odh-v3.4-EA2

What's Changed

• [RHOAIENG-22171] Added option to build and push kserve images. by @andresllh in #609
• add checklist item for jira link by @VedantMahabaleshwarkar in #617
• 250514 sync master by @spolti in #614
• Allow OCI for multi-node/multi-gpu by @israel-hdez in #618
• Merge KServe upstream into ODH by @spolti in #621
• 250520 sync master by @spolti in #623
• Add pierDipi and bartoszmajsak to OWNERS by @pierDipi in #633
• RHOAIENG-26179: Deploy CMA / KEDA during E2E tests setup by @pierDipi in #631
• Add guide to create a new branch from an upstream release by @israel-hdez in #615
• Disallow Propagation of haproxy.router.openshift.io/timeout Annotation by @brettmthompson in #637
• RHOAIENG-25750: Split syncable and static params by @pierDipi in #640
• [master] Fix issue with OCI support for multi-node/multi-gpu by @israel-hdez in #628
• Revert "RHOAIENG-25750: Split syncable and static params" by @pierDipi in #642
• RHOAIENG-24134: KServe Support secure access to the metrics server with TriggerAuthentication for KEDA autoscaling by @pierDipi in #643
• Back-porting fixes for InferenceGraph by @israel-hdez in #647
• Adding fvt tests and setup for s3 storage with tls by @brettmthompson in #645
• Remove extra step that printed the old tag by @hdefazio in #654
• [Cherry pick] Python test fixes from upstream by @hdefazio in #659
• [Cherry pick] Stop and resume a model [Raw Deployment] (kserve#4455) by @hdefazio in #658
• [RHOAIENG-26152] created-fvt-test-for-knative-feature-schedulername by @andresllh in #657
• [RHOAIENG-27166] Fix flaky test failure with mc alias by @andresllh in #670
• [RHOAIENG-26313]-create-fvt-test-for-multi-container-probing by @andresllh in #665
• Resolve Resource Conflict In FVT Tests by @brettmthompson in #678
• [RHOAIENG-28024] update pip version by @Jooho in #684
• Docs on how to get a token for protected InferenceServices by @israel-hdez in #677
• Resolve inference endpoint using runtime protocol when applicable by @israel-hdez in #667
• Sync/250623 upstream master by @brettmthompson in #689
• Sync/250625 upstream master by @brettmthompson in #693
• [Cherry-pick] Stop and Resume a transformer by @hdefazio in #703
• fix keda raw e2e tests for odh by @VedantMahabaleshwarkar in #619
• [RHOAIENG-15553] Adding the kfp template to the odh/kfp docs. by @mholder6 in #650
• [Cherry pick] Stop and resume an explainer by @hdefazio in #705
• Restore zero initial scale behavior on master branch by @brettmthompson in #709
• Improve Model Load Status Check in s3-TLS FVT Tests by @brettmthompson in #714
• [master] Align support secure access to prometheus in Keda autoscaling to upstream API by @pierDipi in #740
• Updating s3 tls fvt tests to cover all new scenarios by @brettmthompson in #756
• 250717 sync master by @spolti in #752
• 250731 sync kserve/master into odh/master batch1 by @mholder6 in #805
• 250731 sync kserve/master into odh/master batch2 by @mholder6 in #810
• 250731 sync kserve/master into odh/master batch3 by @mholder6 in #820
• [RHOAIENG-31248] - KServe http: TLS handshake error from XXXXXX: remo… by @spolti in #816
• [Sync]2025-0815 from upstream kserve master to odh kserve master by @Jooho in #844
• Revert "[Sync]2025-0815 from upstream kserve master to odh kserve master" by @Jooho in #849
• [Sync]2025-0815 from upstream kserve master to odh kserve master by @Jooho in #851
• modify keda autoscaling e2e test to work with ODH by @VedantMahabaleshwarkar in #873
• Fix indentation issue on go unit test:check-coverage workflow by @hdefazio in #881
• [Sync]2025-0822 from upstream kserve master to odh kserve master by @vivekk16 in #866
• Support for Configurable oauth-proxy Timeout by @brettmthompson in #919
• Adding serverless to raw migration script by @andresllh in #896
• [RHOAIENG-33172] - ModelMesh to RawDeployment migration helper by @spolti in #893
• [RHOAIENG-32520] - Update kube-rbac-proxy image by @spolti in #901
• Revert and Resync [Sync]2025-0822 from upstream KServe master to ODH master (preserve history) by @vivekk16 in #924
• Add vivekk16 to OWNERS by @vivekk16 in #956
• Update README.md for Migration by @vivekk16 in #966
• Minor fixes by @spolti in #959
• [RHOAIENG-34931] - Storage Initializer can't handle versioned models storage by @spolti in #968
• Update minio image to use what upstream uses by @mholder6 in #975
• [RHOAIENG-31086] - IG test for raw deployment by @spolti in #973
• 20251118 sync upstream by @mholder6 in #976
• Revert "20251118 sync upstream" by @mholder6 in #991
• [RHOAIENG-36758] - Investigate and Optimize KServe Unit Test Executio… by @spolti in #992
• [RHOAIENG-36673] - Investigate and Refactor KServe E2E Test Suite for… by @spolti in #987
• Sync upstream kserve/kserve - Batch 1 (commits 1-13 + dependencies) by @andresllh in #1006
• [Sync Upstream] Batch 2: Autoscaling, LLMISVC improvements, and Time Series API by @andresllh in #1007
• Add self to OWNERS; remove hdefazio, rnetser by @jlost in #1016
• RHOAIENG-39707: Fix S3 TLS StorageSpec E2E Test Failures by @jlost in #1015
• [RHOAIENG-39626] - KServe E2E Tests with Skip Markers - Comprehensive… by @spolti in #1024
• [RHOAIENG-13818] - Cleanup, remove disabled GH Actions by @spolti in #1027
• chore: bump github.com/kedacore/keda/v2 from 2.16.1 to 2.17.3 by @jlost in ht...

odh-v3.4-EA1

What's Changed

• fix(llmisvc): use server state for Delete ownership verification by @bartoszmajsak in #1031
• [RHOAIENG-38500] Remove deprecated odh-create-release-tag workflow by @vivekk16 in #1055
• [RHOAIENG-44975] CVE-2026-21441 urllib3 vulnerable to decompression-b… by @spolti in #1053
• fix(llmisvc): handle NoMatchError when deleting resources with missing CRDs by @bartoszmajsak in #1056
• fix(validation): adds human-readable error messages for ParallelismSpec by @bartoszmajsak in #1029
• RHOAIENG-46740: xKS for LLMInferenceService by @pierDipi in #1062
• Update precise prefix routing example by @pierDipi in #1081
• Update precise-prefix-cache-scorer sample by @threcc in #1084
• Sync PipelineRuns from OKC by @odh-devops-app[bot] in #1091
• e2e: bumping up cert-manager version by @dchourasia in #1087
• [release-v0.15] Support auto-migration to InferencePool v1 by @KillianGolds in #1090
• RHOAIENG-34472: Fix conversion inf pool v1alpha2 -> v1 and evaluate v1 readiness by @pierDipi in #1099
• [0.15][RHOAIENG-39715] "Internal URL" has Incorrect Port for Headless by @jlost in #1073
• fix(build): Remove GOPATH dependency from OpenAPI script by @bartoszmajsak in #912
• Preserve existing auth proxy containers during 2.x to 3.x upgrade by @VedantMahabaleshwarkar in #1101

New Contributors

• @threcc made their first contribution in #1084
• @dchourasia made their first contribution in #1087

Full Changelog: odh-v3.3...odh-v3.4-EA1

odh-v3.3

What's Changed

• bump odh release tag by @spolti in #1019
• Cherry pick s3 tls fvt tests by @brettmthompson in #779
• refactor(llmisvc): centralize test namespace lifecycle management by @bartoszmajsak in #1030
• [RHOAIENG-13818] - Cleanup, remove disabled GH Actions by @spolti in #1038
• fix(llmisvc): update HTTPRoute parentRefs when custom gateway is referenced by @bartoszmajsak in #1028
• fix(test): add missing context argument in llmisvc integration test by @bartoszmajsak in #1044
• [RHOAIENG-42301] Fix CVE-2025-68156: Update expr-lang/expr to v1.17.7 by @mholder6 in #1041
• RHOAIENG-41828: Fix LLMInferenceService reconciliation for Gateway/HTTPRoute refs in baseRefs by @vivekk16 in #1045
• [RHOAIENG-42096] urllib3: Unbounded decompression chain leads to reso… by @spolti in #1035
• [0.15] chore: bump github.com/kedacore/keda/v2 from 2.16.1 to 2.17.3 by @jlost in #1043
• Add zmq port to scheduler service for precise prefix cache routing by @pierDipi in #1047
• feat(llmisvc): enhances Gateway API URL discovery by @bartoszmajsak in #1046
• [RHOAIENG-43637] - AIOHTTP's HTTP Parser auto_decompress feature is v… by @spolti in #1050

Full Changelog: odh-v3.2...odh-v3.3

odh-v3.2

What's Changed

• [RHOAIENG-31086] - IG test for raw deployment by @spolti in #971
• Auto-update annotation for isvc. (kserve#4342) by @andresllh in #977
• RHOAIENG-38674: Use uncached client to list pods by @VedantMahabaleshwarkar in #980
• [RHOAIENG-37560] - opendatahub namespace is created when KServe compo… by @spolti in #978
• Pin starlette to version 0.49.1 to fix CVE-2025-62727 by @hdefazio in #983
• RHOAIENG-38972: Allow stopping LLMInferenceService by @pierDipi in #974
• Do not register ClusterServingRuntime by @spolti in #990
• odh 3.1 release tag bump by @mholder6 in #988
• RHOAIENG-35937: Remove deprecated --disable-log-requests flag for vLLM 0.11+ compatibility by @vivekk16 in #1005
• RHOAIENG-40565: Versioned well known configs for LLMInferenceService by @pierDipi in #999
• Fix S3 CA Bundle Configuration by @brettmthompson in #1009
• RHOAIENG-41514: Bump llm-d components images to 0.4 by @pierDipi in #1002
• RHOAIENG-35937: fix: clear stale router and scheduler conditions on config changes by @vivekk16 in #1011
• [Cherry-pick] RHOAIENG-39955: Investigate and Refactor KServe E2E Test Suite for RawDeployment mode only by @spolti in #1013
• Cherry-picks for the release branch by @spolti in #1008
• Cherry-pick: [RHOAIENG-36758] Investigate and Optimize KServe Unit Test Execution Time by @spolti in #1012
• fix(llmisvc): adds missing generated clients by @bartoszmajsak in #984

Full Changelog: odh-v3.1...odh-v3.2

odh-v3.1

What's Changed

• bumping release tag to odh-v3.1 in push jobs by @brettmthompson in #954
• RHOAIENG-34916: CA Cert signing and validation by @pierDipi in #957
• RHOAIENG-37595: Change TLS certs mount path to not conflict with CA bundles by @pierDipi in #963
• chore: change default deployment mode to RawDeployment by @KillianGolds in #961
• choir: update kserve version by @Jooho in #965
• Add support for protocol in s3 endpoint by @brettmthompson in #964
• Improve ca bundle management for llmisvcs by @brettmthompson in #967
• Update samples to use the correct latest TLS cert directory by @pierDipi in #970
• Configure prefix-cache-scorer for P/D by @pierDipi in #969

Full Changelog: odh-v3.0...odh-v3.1

odh-v3.0

What's Changed

• Odh v2.35 release by @mholder6 in #910
• fix(webhook): relax HTTPRoute/Gateway validation by @bartoszmajsak in #911
• [llmisvc] docs/samples: Add READMEs and improve LLM inference examples by @pierDipi in #915
• Switch to official LWS operator (stable-v1.0) for OpenShift by @KillianGolds in #918
• Use flexible regex patterns to match kserve images from any registry by @Jooho in #927
• fix: Simplify image substitution by updating params.env before Kustomize by @Jooho in #929
• Add P/D and DP+EP docs regarding networking by @pierDipi in #925
• Add a guide on how to setup LLM Inference Service dependencies on OCP 4.18 by @pierDipi in #898
• fix: Skip validation for empty cpuModelcar and memoryModelcar fields by @KillianGolds in #930
• bump up llmd images to 0.3 by @Jooho in #916
• RHOAIENG-32956: Update kv-cache routing example by @pierDipi in #933
• Add metadata propagation for Kueue configurations to both Deployment and LeaderWorkerSet workloads by @hdefazio in #928
• Add listener hostname fallback with wildcard support for URL discovery by @pierDipi in #934
• fix: no disk space error when multiple arch image build. by @Jooho in #937
• Fix e2e tests llmisvc by @pierDipi in #935
• Only Completions Requests Go Through IGW by @brettmthompson in #938
• Add a guide for LLM Inference Service for GA and simple quickstart/Authentication tutorial by @Jooho in #904
• RHCL is now optional and status is reported accordingly by @pierDipi in #939
• set correct schema in .status.address.url when auth is disabled by @VedantMahabaleshwarkar in #942
• [release-v0.15] Support for Configurable oauth-proxy Timeout by @openshift-cherrypick-robot in #946
• [cherry-pick][RHOAIENG-32520] - Migrate oauth-proxy to kube-rbac-proxy image by @spolti in #951
• fix keda raw e2e tests for odh by @VedantMahabaleshwarkar in #952
• odh-v3.0 release prep by @brettmthompson in #953

Full Changelog: odh-v2.35...odh-v3.0