# 4.12.38

Created: 2023-10-12 13:40:13 +0000 UTC

Image Digest: `sha256:09e50f5d863fdcecdb4a7e3fe2c78e5bec992f10be032acadc317c0d66c79700`

Promoted from registry.ci.openshift.org/ocp/release:4.12.0-0.nightly-2023-10-12-030017


## Changes from 4.12.20

### Components

* Kubernetes upgraded from 1.25.10 to 1.25.14
* Red Hat Enterprise Linux CoreOS upgraded from 412.86.202305310359-0 to 412.86.202310111011-0


### Rebuilt images without code change

* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [a7aa6000](https://github.com/openshift/assisted-installer-agent/commit/a7aa60002fc11c7320dd17c1681feb9956dd288f) `sha256:a694a3e608e48289f2f86d69d70448c459d0a99d61b2f176206678b4c3e6701e`
* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [1959de0e](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/1959de0e3f2c3457c32fd2f545fe5ca65f12cd6c) `sha256:a054a203b4223d82be3366c157eebcddce847221335970bcc1ae1e50e842b353`
* [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver) git [664d8cb0](https://github.com/openshift/alibaba-cloud-csi-driver/commit/664d8cb0a1f1263bad3797ac3cd3f910664dce8b) `sha256:435eb3a9f140c4feb229ac21117ca0cde06e5bad7d7213c4ea83061344d59328`
* [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba) git [b9287c05](https://github.com/openshift/cluster-api-provider-alibaba/commit/b9287c05091424c4d21fd95454020ccc225f5bcb) `sha256:9cba18f6b508908682df024831e05e1fc5a7a7c5030a4ebd21973400f5fd177c`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [7fb891f4](https://github.com/openshift/cloud-provider-aws/commit/7fb891f4a534ff4f0a12a50ca3e13db8833560be) `sha256:b08c22c078902f502e0218863a8712dbd27b012cf27068e09a820868648b508a`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [b82e889d](https://github.com/openshift/machine-api-provider-aws/commit/b82e889d6eb39f72b0246175315ec0a7e5ac4126) `sha256:b8475781e0e92822d55f8bf9218669b017331d55b8adef2ff587c66f6e3c282a`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [6197630b](https://github.com/openshift/aws-pod-identity-webhook/commit/6197630be12b6a6df32f647e368e5664307fd04b) `sha256:682a0406306d6571a81baf2fba5a4b2f79adb87c735f0b3de8e99d95a19815e2`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [d1d4f770](https://github.com/openshift/cluster-api-provider-azure/commit/d1d4f7700ca6c2d576fe43c988222c62545cdb00) `sha256:c9f292e77b27b0f0b970ac46db7d7337deb8d9690bd0cf28a7d3edd86a7602ad`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [ba105788](https://github.com/openshift/azure-disk-csi-driver/commit/ba10578832b8389cd81373ef72bcc3749094ed27) `sha256:9f46405b0f89558b083719c3998cc7a06246fb38852454840035b16ea637eae9`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [746fab2b](https://github.com/openshift/azure-file-csi-driver/commit/746fab2b699a791064088a3544b8db06fbd50628) `sha256:494091d03eb6d5c558082c9c55a214518c0484a0df94f4d258bde340f65dd3f7`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [63dcaf1e](https://github.com/openshift/cluster-api-provider-baremetal/commit/63dcaf1e98d673ac1c00bcb0119397c7fb1d3ef4) `sha256:490a93a82d73d4118d39e35697524bd4806003fbc5f275cd9be4515ac2646f04`
* [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [d4f6bcaa](https://github.com/openshift/cloud-credential-operator/commit/d4f6bcaa06269bf2745b42de240ccdf15be4de37) `sha256:1d893399666d8a521ebc6864f675cd1a71e87f1d5d27114630218844de97121f`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [6ab8e62b](https://github.com/openshift/kubernetes-autoscaler/commit/6ab8e62b7089dabaded0de89be3a9621f92b7653) `sha256:a5973f96085fb80f83c70ffd0ecf1c1f55ebf7cda9548cfb8575c17485673b74`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [8b232255](https://github.com/openshift/cluster-autoscaler-operator/commit/8b2322559f794ffcb4580a9c11c3b5e16fc8e306) `sha256:df10841a4904e27b2bdcdbc94a7914557984d0b3c1f023903ea6c5886e051a48`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [f9c215c4](https://github.com/openshift/cluster-api/commit/f9c215c4f298710ccf76676395465685b5d15268) `sha256:2fc2ee087ea60fcaa450d506c6c4ff7e3bb010e75f8f0e3308c57291988f662b`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [3bfe36aa](https://github.com/openshift/cluster-capi-operator/commit/3bfe36aa9d1abbdfb11facf86a7ec6510abc390a) `sha256:b0f3e2bf7578dddb596c93943223032d0c15a55ad36efda0b779bdbffb7d41e1`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [103cb2ec](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/103cb2ecf326e92f9d1d8d99324d2896d28afc58) `sha256:4387db6c7688472009a01b676b1a152b84c401827ef6fdc5213021b304818fb6`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [06bd5f66](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/06bd5f665f2b9e70dee288a7e55f3c5038c330ac) `sha256:e4d9857dab7071f2a3e4cc4e012bdb223f35d0c280254501f8f572e2ffd39933`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [e9a895af](https://github.com/openshift/cluster-image-registry-operator/commit/e9a895af74906435bea0bb230773a3bc1898abc6) `sha256:b17aa7755033eed5c205462fd14ee0770d37561006d4d72025717d39c58e0466`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [7bb05468](https://github.com/openshift/cluster-api-operator/commit/7bb05468cc7d1c0752c81ca3f9e5d8e19c966f24) `sha256:bdf372b751fc1daf7726ed7abed81538088572cd268dd0c7b89528029d1d66d0`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [12d050ab](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/12d050abd0cf37dae8973d453930bcf494a2499b) `sha256:42aeaaa55f25f45a3b38a3cba27d1b09db4ff7abdfc980827102c6969416dc2a`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [60081982](https://github.com/openshift/cluster-machine-approver/commit/60081982654993534de29d224d6a42c251762420) `sha256:d6a4b0cca5c0dbfbe3936a3e614cd73fd21ee01e3dfab76ca7d67fdfc2d8b651`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [d1915d13](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/d1915d130481541b8bacb5b98eddbc1541809d0a) `sha256:d0d0f412a3b71dcf5a4797ad63102d8f25ba5929596f277ebf4ece3b37aa68e0`
* [cluster-platform-operators-manager](https://github.com/openshift/platform-operators) git [d40fae81](https://github.com/openshift/platform-operators/commit/d40fae81256939670a8fd96b3822fbf1edf21d98) `sha256:9d82659c138baf5c7289a4e8f5a4e7bab7ae992f1569e7ba12b9ae2102e42932`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [2796e173](https://github.com/openshift/cluster-update-keys/commit/2796e1732615521e818be82663058e0a3f1b3941) `sha256:222330b621caabbdf4bc368501b431ee808687f430a608e672e9f952c2fd6f52`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [e4d9170e](https://github.com/openshift/configmap-reload/commit/e4d9170e71bdf8a79e9cde94dac53575a30f46f3) `sha256:502d33d8294549a5c757cbda56f64c8dcabcd5f3e8f9a3b73aac3763f8c4cdf1`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [6d237727](https://github.com/openshift/containernetworking-plugins/commit/6d237727d7af8981b373cb62509dce1fe19d35b8) `sha256:553738115619921b194eb99df4f53c1a0f920a443cd0cfcbbbf8ce192b22aa6f`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [d9099257](https://github.com/openshift/csi-driver-nfs/commit/d90992573acb3df6c7fbb6dbe1b215125d26fc34) `sha256:337c48a33191c3fa255c10e35e70fc5c9e7ce83abe3bd0b1f5530bd12f6e3070`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [20cffc04](https://github.com/openshift/csi-driver-shared-resource/commit/20cffc04d37e0ac2ea5014c08513c8408715179c) `sha256:fa70e06e32fd3ffa17a179c8d847ba2da322f4154d8b211dcb4d0e4bf99135a3`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [3201431c](https://github.com/openshift/csi-driver-shared-resource-operator/commit/3201431c8f52827d599556fd041049ec121cc067) `sha256:004c9303b073818f375ff937a78ebb2586e435122b273a1feaa342ff0532022a`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [20cffc04](https://github.com/openshift/csi-driver-shared-resource/commit/20cffc04d37e0ac2ea5014c08513c8408715179c) `sha256:cd7ff268bbcf7113b7aed636b27b8bc0d099b724daeb213835c472d0b4aca3f5`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [6945eef8](https://github.com/openshift/csi-external-attacher/commit/6945eef88ccf4e57545fea636113afe4103058bc) `sha256:4d2e36b8f9428d5522be5e1d80241c97ce3760a605eb45821397740dde5573af`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [140851f6](https://github.com/openshift/csi-external-provisioner/commit/140851f6c0e70cf917b3361808b31628c68ea8a5) `sha256:6ddb4787beda2026a8c1a88cba7664215b1774a90f5fdafe1269de8a1504ea73`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [239d751f](https://github.com/openshift/csi-external-resizer/commit/239d751f51743214417dd5058645c2c1d390d1b5) `sha256:54b43b0e1773bc28b24613e0ab9cf59d1d0a79ee185d2e5823243b735619fb75`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [7e232566](https://github.com/openshift/csi-external-snapshotter/commit/7e2325666da25db833027acee53344fd0a6cd9e3) `sha256:36fc868a380da2d36d2ed0873d1d39ea3e365264b2ba5629791e03a8375cb017`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [9cb05642](https://github.com/openshift/csi-livenessprobe/commit/9cb056421c5a2e37435dbedbd7d73de8db1e094a) `sha256:2a97a0ec0555391bd681cd14cd2e789d4099cef797a3626cfccc3bd63ce22804`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [805d5ac2](https://github.com/openshift/csi-node-driver-registrar/commit/805d5ac247137b02e6081e3eb7aa1fb9f4c7b4b2) `sha256:40064e19757e2e87c53812666f036f9f426e5f0623ea54514fb9ea5e6348f3e3`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [7e232566](https://github.com/openshift/csi-external-snapshotter/commit/7e2325666da25db833027acee53344fd0a6cd9e3) `sha256:16d1bb0caf060c192ec4aecf3060120a0d46d4005d70632c3e6597baa2ffa464`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [7e232566](https://github.com/openshift/csi-external-snapshotter/commit/7e2325666da25db833027acee53344fd0a6cd9e3) `sha256:74cd5c33f19576f134d4e6a90ac1f2570ba5f9f3401e0b8c046fac5ffee6d41e`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [6e5c04c0](https://github.com/openshift/driver-toolkit/commit/6e5c04c066a428047d1755478cf88b290d32ad8f) `sha256:04ab68f207f4fc1f41983491c22a1c340ba60c04cf68279fe9922f449ccf3d31`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [a92e4157](https://github.com/openshift/egress-router-cni/commit/a92e415791b531ca15ec84953550b71bd3534566) `sha256:5c0d8f8a18d25ea1bba6cad879aa1922b44e9bb0b0a736be4d699314ef9e1b4b`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [8d208a7f](https://github.com/openshift/cloud-provider-gcp/commit/8d208a7f549b0c039420f67ca7aeff43fc1dcdfc) `sha256:9fb7fd77256e3250aab346444da8204ee662d84e99df479dea1d057257ceef3e`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [eea0586c](https://github.com/openshift/cluster-api-provider-gcp/commit/eea0586cdf2bc859533fa874e1b6df536a6df40d) `sha256:7aec617151741e618ac5bd9c86c532cbc529fe48f6f83eaaa2bce568421f081a`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [e7cecfc1](https://github.com/openshift/machine-api-provider-gcp/commit/e7cecfc120f25169435e3b00ee020e996f487034) `sha256:83f32141a9f13cebc99f190a71990db8b6293db3aa2775db45c6086ff966d9e9`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [223d8464](https://github.com/openshift/gcp-pd-csi-driver/commit/223d84646af2611d801ad5633e9ce4088772cab4) `sha256:de5a288006f3600b1320e1d174c9bf33d1ac910f350c267d2e1f5c6497652b7d`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [e5f25fc6](https://github.com/openshift/cloud-provider-ibm/commit/e5f25fc64911215a3a78cab186cba49cbd51dec6) `sha256:f5e8e4ab576bbf7dae2adcfddb8b1e6a5287ccfa5ed1046c276bcf6fa2f46bf4`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [e0f7a3bc](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/e0f7a3bc39c7941dfb8b03f4c111f98edbe4792f) `sha256:26af1a08c2ce53fd84c6919d644395d53f03a4a6ea8d5e7172cae0df85cf44b8`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [f70fccea](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/f70fcceadbe82a58c92157df3e4d5a047e87fba0) `sha256:324f5e6a6a16f0dc41a57c7f52b6c65491198464d6067906e78ab1b155353e95`
* [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater) git [737d00c9](https://github.com/openshift/ibm-vpc-node-label-updater/commit/737d00c9dd2aa49dbe421e7bbc0df4f94239f78a) `sha256:80c4df656293e916a5f99004a94b7b4314f9c65932f8d54f6fb5676338758706`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [c1304c80](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/c1304c80d736559ced3049c076535d53020d5d9d) `sha256:b953a494d70d21bd3f92e66a644fb22f17405c213ccbf621b49ca32bdd469846`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [31a67dac](https://github.com/openshift/machine-api-provider-ibmcloud/commit/31a67daca92c374cb4d9a87928ec8c28528a0c0e) `sha256:6432358a188566f0cb3f0b5d07723a5d67d8ca47cf5697bc6be79da1050325a7`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [987e5da8](https://github.com/openshift/k8s-prometheus-adapter/commit/987e5da8ebf294300e16500b201fb72d03af8ed3) `sha256:5c7b46489389ce80bad709403ff2b5bafa272581ae36fa94b4f35060b6cfc9db`
* [keepalived-ipfailover](https://github.com/openshift/images) git [7e8a0105](https://github.com/openshift/images/commit/7e8a0105eb7369f3f92ad7b2581a2efffab5b28e) `sha256:b7645aa3974909450a3c194cb0f92ddfa921cdf5ee95bb9ef580bfff1ccde273`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [94f3fde7](https://github.com/openshift/kube-rbac-proxy/commit/94f3fde785a22afdc77768f5c346c7d3195274d2) `sha256:5dbab2c49fdabe46c43b03e08eba6bba957430598d22573f4e57520f21cdcbc6`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [9a1bf9b8](https://github.com/openshift/kube-state-metrics/commit/9a1bf9b8c6b2da07214eb934e4d1f86d1700a2ce) `sha256:c851659fb77fba2ec89ff9d4790359d101c19f8907f70f374f15d71be9157ffb`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [596745ce](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/596745cec38b8401d1d906bfb9d3d78fdaeabcde) `sha256:c030733b0efb6d13eaa1f4d43bf1e599b67c77d3601957544e832e8ad8cbfa1c`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [a19615cd](https://github.com/openshift/cloud-provider-kubevirt/commit/a19615cda3daf69008253d75cc848ac0ad397179) `sha256:376a814c7d31cd1e6edb8424242db3642b12378613f6ceb1fdb1e173831e19f3`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [f407c8a7](https://github.com/openshift/kubevirt-csi-driver/commit/f407c8a71c831a8f7911bf0b4a99bb6b16e0e0b6) `sha256:e53a501145a39687189cc152c7d999b906ae1173b1e22ea5a30d5896dbab55fa`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a2882f7a](https://github.com/openshift/cluster-api-provider-libvirt/commit/a2882f7aa56d4059a20bdc02486da905b5764062) `sha256:96186b6680a632d1d8c70d1b973de54180307df42b6045572fad7700ae09abf5`
* [machine-api-operator](https://github.com/openshift/machine-api-operator) git [a6c42a42](https://github.com/openshift/machine-api-operator/commit/a6c42a425610c1f634475f5e1014ee8b2dbd9437) `sha256:624c5e39ec4b4f4bea52ab558ba0fee954920f3542d047d541ea5d974dd8eb17`
* machine-os-content `sha256:3b6aff894b40c0ee6d89640cefdfc53a7300c778c57926a80d055c5912852364`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [566bf595](https://github.com/openshift/machine-os-images/commit/566bf59501f178bd80e410fda66cc424de6a4891) `sha256:3e1e9b9a13d8de961191f65f87da2de828ac259592a9e8c665f0350563a83a2e`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [5bd752a1](https://github.com/openshift/multus-admission-controller/commit/5bd752a1dfe37d5894cd59b66aff6fe4a6a64cfc) `sha256:8fe1cbf0d7b6a155d1b10c89c8d3b53359e6650dabf827deebd1f05d6e9bbd9a`
* [multus-cni](https://github.com/openshift/multus-cni) git [210e5408](https://github.com/openshift/multus-cni/commit/210e5408299551d74ef0129155ed665e7590b541) `sha256:a9d740ba35c95b4be818191e9ed06e9c54dbf5b68eeb59fba9e84a8ba72a8c91`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [421718ab](https://github.com/openshift/multus-networkpolicy/commit/421718ab8efebb735fd8e0ec5a3c94d78d1d7ac1) `sha256:cecf0e0cce853c714efa62079bc55ee0f64c7c0485344ca1fb8433b67170ff22`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [efd6ffbb](https://github.com/openshift/route-override-cni/commit/efd6ffbb275a133196e30edfe9f241e2a3b4f0c0) `sha256:1beeb27907396171afeb7e780046ac78147aedaafae562fbb65d259bc87ad82a`
* [must-gather](https://github.com/openshift/must-gather) git [5fd21761](https://github.com/openshift/must-gather/commit/5fd2176182e7aec687da553fe185b9f6f739bbb2) `sha256:ae145555b2bb7081ae1afe805a276af0b972fe527ad83e1e0e263f4040930f04`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [30386d6b](https://github.com/openshift/bond-cni/commit/30386d6b8d4f3b05931842b6a9b85f15c241b09a) `sha256:27c9211ee7d8b56e11b1b882b81ad9be481cb4124e604118538a6dd7bbb0c69e`
* [network-tools](https://github.com/openshift/network-tools) git [c76613c7](https://github.com/openshift/network-tools/commit/c76613c77c8785b91611bb3c4245bc34f3b14f76) `sha256:cd7aa534c28e3cd31c8a94389cfde921bb482bcf15c9d67ff7bb30671bb17de5`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [25aea2d4](https://github.com/openshift/machine-api-provider-nutanix/commit/25aea2d4b370e42e67edab85c15c9ed56b98e134) `sha256:8d172fb8be96878f63a7caf49af4d32a6a77174183f2bf62ad84923dd3289b6a`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [cfafdccf](https://github.com/openshift/oauth-apiserver/commit/cfafdccf09150ab55b8b853df16e4395ff3bda4b) `sha256:b4a08052c62917a405dfacf38b365650d7661b1c62f405f6476cd4ef4c1319e9`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [03e5b13b](https://github.com/openshift/oauth-proxy/commit/03e5b13b8b7087dd70abfd70efb4c5b92f800a4f) `sha256:4497bf0a0a758df0f328e83e98078baae3b9d160252c8aa0f072cb8b780e6cbe`
* [oc-mirror](https://github.com/openshift/oc-mirror) git [3ac49d9b](https://github.com/openshift/oc-mirror/commit/3ac49d9bd7c2193ede794e328dfa1142d7735f2e) `sha256:486058655245cd3ccc5f7108471ef71b7d1052af964ec3cde4bbe392c58be7e4`
* [olm-rukpak](https://github.com/openshift/operator-framework-rukpak) git [1b52bfeb](https://github.com/openshift/operator-framework-rukpak/commit/1b52bfeb6823c07702bd3b3fb63972ef8e5e718a) `sha256:890391ee6f716e14f7ab61c9309efa989228b2490b5438132c171fd3e2c9f542`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [635ed5cc](https://github.com/openshift/openshift-apiserver/commit/635ed5cc49f0d9668969a8a78bec91d426b4d26b) `sha256:9e78eed8c7120deab960cc328dcf69ddb8a034f526eba2033dfd8ad40b0f100a`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [b6528f9e](https://github.com/openshift/openshift-controller-manager/commit/b6528f9ea28164af9f1ceea0e50f18116fe3c90e) `sha256:3337fd2886ae340746deaa5f9ff60840a9bd8a571dd48c8a96ed27e8149fb5e9`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [4c711c74](https://github.com/openshift/openshift-state-metrics/commit/4c711c74a0857e55604d11bd975b32b9956db6a0) `sha256:0f042e9958e1ba2385916bd32b18769b9045c862d72d67cebc8313aaeab2803f`
* [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [8bd9c35f](https://github.com/openshift/cluster-api-provider-openstack/commit/8bd9c35fa7dfa81697f9e62b9ea598cba699ca02) `sha256:ea631e0e1df653927f75c95b879469b93cf904e12c007bd537c1e7124524b93d`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [64d58fb5](https://github.com/openshift/ovirt-csi-driver/commit/64d58fb5438d5f22550ab20951cad32a886952ef) `sha256:6f7a12ab1de8a45b5d113a0ee0253d91f848676c9edb06e675909f09a7c77368`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [03e8cb50](https://github.com/openshift/cluster-api-provider-ovirt/commit/03e8cb50f9ffa28b48d8aeaeb8410ab1598750d1) `sha256:f9de72a30a4b00ce4073754cde76937cba9e0ad063cd50b1bcd6e38a7d0d635e`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [5eb2b132](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/5eb2b132aef490ff8fec4784d8696c7758561e7e) `sha256:113a1af5c02436ac2f2b1518404ba6747dd620d8fc76be9700f6dafb9713ae03`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [b4da8bcc](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/b4da8bcc0ba35a656283c9781e0343a22fdcdfe7) `sha256:9614b2b97f0bf4c2cd6fad56a3069eac1bd1e072dd84d256522e080515481370`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [d8ddc10c](https://github.com/openshift/cloud-provider-powervs/commit/d8ddc10c99451542b42a725c5346ee7c174dae1f) `sha256:b727ce122e3a0c8179377b7ea612e547afeca2045c6937b46de70b118bce894b`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [3f498f79](https://github.com/openshift/machine-api-provider-powervs/commit/3f498f79cf7af3e4013cfcbfdcfb006ae64e19e9) `sha256:e14cf23a6f91cf4ef46525c555a60ceeed16e39cc3f6124b4104d2a3deffa0ee`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [b1907888](https://github.com/openshift/prom-label-proxy/commit/b1907888004888b977918cf911b189de736642b2) `sha256:bcacd16dd329cfb15810de42a69619c039e7b09c820a1442e5f20679a95c8b73`
* [prometheus](https://github.com/openshift/prometheus) git [c749fdb4](https://github.com/openshift/prometheus/commit/c749fdb468ee6d0ac586156832ad9b094c76d867) `sha256:26bef101cbe51b7eb91e6fe41f5a274a85aeba8364299d5366edc6a8d91d2ac3`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [86b18354](https://github.com/openshift/prometheus-alertmanager/commit/86b18354a463c04bb8d54b1e686d9fe54ff449e9) `sha256:1f6425caf3f889cb7615eefe2a334ddd37e34255d1ac1be6e0189545af774424`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [57e7c574](https://github.com/openshift/prometheus-operator/commit/57e7c5741af878b97e473827c5bd82462e996856) `sha256:f8add743497c5ec323d783e5207e848a3d08d5eae50d525d14ca6c425bbf0e3d`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [af2f49ca](https://github.com/openshift/node_exporter/commit/af2f49cac92d4ec56fd495c0ecfc0e0a4149eea5) `sha256:8c4cee456097757993868c8df368286bf57c3bc6ffbb24b10e0760a087a18880`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [57e7c574](https://github.com/openshift/prometheus-operator/commit/57e7c5741af878b97e473827c5bd82462e996856) `sha256:f19b5d02b07a1ae97965101a37280efcc1c611976b308b00ad0c6ba643ba318b`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [57e7c574](https://github.com/openshift/prometheus-operator/commit/57e7c5741af878b97e473827c5bd82462e996856) `sha256:6afd42b8e6a6e83a3b82cfd7a568ce252d68af01c1ac2d4cf00ee64cb4f9484e`
* rhel-coreos-8 `sha256:939352bd39a00212c04f180c4e6cce041bacbf4a4bbb32fd62dbac0932154f28`
* rhel-coreos-8-extensions `sha256:2548828e7832995f6eb5060d0e55176c4dbce8531e6aa355af0c4f2b7d44f3f7`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [299b7097](https://github.com/openshift/service-ca-operator/commit/299b7097a49385fdd4f86eccedc07f3a192e2504) `sha256:87b535be1f3afb1a0cffc8740d7fd5ead91ab48ad3ebe83f56d21ce1c136a086`
* [telemeter](https://github.com/openshift/telemeter) git [fc631fcb](https://github.com/openshift/telemeter/commit/fc631fcbec5c87612ab52476818b4f264b7ab849) `sha256:8e1332c1990b71e7aa68375067d0ca2cb81d09c42e73c9c97292ee33d7345840`
* [thanos](https://github.com/openshift/thanos) git [9f2b5ff5](https://github.com/openshift/thanos/commit/9f2b5ff512b8c396f7b4d006d7eafb5c7ca97fba) `sha256:325a283b585ddc55f0448ea28e445e58cba0bebef404cb950acd1906143b5335`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [e993e31f](https://github.com/openshift/cloud-provider-vsphere/commit/e993e31f6a3b02938b11fb2f18d67681d60d8922) `sha256:aaaf8698be7079a05b13522134074cd84b3eecb6afcd6af6302933a8e6d8b074`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [5c261b3b](https://github.com/openshift/cluster-api-provider-vsphere/commit/5c261b3bc8acb84fdf8263a67a80dd384fba698e) `sha256:2097f5005b9bcedefbd9d7519ccf8b6b7107ccd0b4b0cd48f5f02e164c2f2bc8`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [2fa9a1ec](https://github.com/openshift/vsphere-problem-detector/commit/2fa9a1ec0f5b502c18fb997837605c88be3ba793) `sha256:218f512ea779ee0c769e9897aa71458717bd6390d9c3cac5ba2548d0214b704e`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/8149b9ca554ae6e1d716daa9f1c4f322ad710e07)

* [MGMT-15150](https://issues.redhat.com/browse/MGMT-15150): Use same installer binary for all platform types (#5347) [#5347](https://github.com/openshift/assisted-service/pull/5347)
* [Full changelog](https://github.com/openshift/assisted-service/compare/084c6c42312e610ba27b0eb47bceaf9e946c73a6...8149b9ca554ae6e1d716daa9f1c4f322ad710e07)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/61115db06f970b8fab00f8e0beeb49d4db3ee041)

* [MGMT-13586](https://issues.redhat.com/browse/MGMT-13586): Wait for ETCD Bootstrap to complete (#670) (#726) [#670](https://github.com/openshift/assisted-installer/pull/670)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/bb9c2fee04cd5bd1736fb1590db728643ba27ea1...61115db06f970b8fab00f8e0beeb49d4db3ee041)


### [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator/tree/27200d77ed35fa98e172bacd1457d2ff768ac211)

* [OCPBUGS-18417](https://issues.redhat.com/browse/OCPBUGS-18417): set TLS cipher suites in Kube RBAC sidecars [#58](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/58)
* [Full changelog](https://github.com/openshift/alibaba-disk-csi-driver-operator/compare/e324a71cb6c48ce4944cdc8dcc96bbf5fa55ba32...27200d77ed35fa98e172bacd1457d2ff768ac211)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/f1e6d94ca51afe169bc038acb0b06cedea16d617)

* [OCPBUGS-19266](https://issues.redhat.com/browse/OCPBUGS-19266): Updating ose-apiserver-network-proxy images to be consistent with ART [#33](https://github.com/openshift/apiserver-network-proxy/pull/33)
* [OCPBUGS-10187](https://issues.redhat.com/browse/OCPBUGS-10187): Updating ose-apiserver-network-proxy images to be consistent with ART [#30](https://github.com/openshift/apiserver-network-proxy/pull/30)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/61e198ca00b9426e2f7309cf2818ac74426486ff...f1e6d94ca51afe169bc038acb0b06cedea16d617)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/e3a8e43349986d8a9ca99749b9289a4151f5ee1a)

* [OCPBUGS-15548](https://issues.redhat.com/browse/OCPBUGS-15548): Pass right SGs for IsExternallyManaged on creation [#469](https://github.com/openshift/cluster-api-provider-aws/pull/469)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/15ff2acd6c2fa8b6220448669e5d27013abda669...e3a8e43349986d8a9ca99749b9289a4151f5ee1a)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/86fc1cd92a27b2bf1e51a88184fe534e8a202b4d)

* [OCPBUGS-14281](https://issues.redhat.com/browse/OCPBUGS-14281): Volume unmount repeats after successful unmount, preventing pod delete [#226](https://github.com/openshift/aws-ebs-csi-driver/pull/226)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/15841171ef177fa651384e1dad16b53bcaf6e0ef...86fc1cd92a27b2bf1e51a88184fe534e8a202b4d)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/fa3c8fb2a217626feea5fb2877ce4b8b8591c926)

* [OCPBUGS-18417](https://issues.redhat.com/browse/OCPBUGS-18417): set TLS cipher suites in Kube RBAC sidecars [#265](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/265)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/a76f01dbfd2d53a89e8e9b19ff41d6fc0c056c5c...fa3c8fb2a217626feea5fb2877ce4b8b8591c926)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/8bc8af271daa54e2836435a5343a374aa58393ae)

* [OCPBUGS-17159](https://issues.redhat.com/browse/OCPBUGS-17159): Increase service idle max timeout to 100 minutes [#82](https://github.com/openshift/cloud-provider-azure/pull/82)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/6ff1c8e52ad75cb72682b022952c174a41c1e471...8bc8af271daa54e2836435a5343a374aa58393ae)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/0dab032efc868963ee0003d1f62d80e4f24f6a20)

* [OCPBUGS-18417](https://issues.redhat.com/browse/OCPBUGS-18417): set TLS cipher suites in Kube RBAC sidecars [#95](https://github.com/openshift/azure-disk-csi-driver-operator/pull/95)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/6b1d69d29271e0183885b0d27a3293579fd37e02...0dab032efc868963ee0003d1f62d80e4f24f6a20)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/27de52643819b9ce6bb18694247524a5de7353b0)

* [OCPBUGS-18417](https://issues.redhat.com/browse/OCPBUGS-18417): set TLS cipher suites in Kube RBAC sidecars [#71](https://github.com/openshift/azure-file-csi-driver-operator/pull/71)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/0a02fa02dd5623413d07c226987ac1d3181774fa...27de52643819b9ce6bb18694247524a5de7353b0)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/e7f42fa8c9f2ef8d7b95b3f3420c681c8c05e2e6)

* [OCPBUGS-17960](https://issues.redhat.com/browse/OCPBUGS-17960): Machine Actuator should not set metadata.name [#71](https://github.com/openshift/machine-api-provider-azure/pull/71)
* [OCPBUGS-17221](https://issues.redhat.com/browse/OCPBUGS-17221): Add user defined Tags to NIC Azure resources [#69](https://github.com/openshift/machine-api-provider-azure/pull/69)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/cfb76acd1429fa8be4925cf15789f1dc62252d7f...e7f42fa8c9f2ef8d7b95b3f3420c681c8c05e2e6)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/6a2d2e940acca3ebebe86827fda35c95b7b09d1e)

* [OCPBUGS-20145](https://issues.redhat.com/browse/OCPBUGS-20145): [release-4.12] Use updated ansible-core for Openstack image [#7560](https://github.com/openshift/installer/pull/7560)
* [OCPBUGS-18646](https://issues.redhat.com/browse/OCPBUGS-18646): Allow destroy for C2S isolated (us-iso and us-isob) partitions [#7474](https://github.com/openshift/installer/pull/7474)
* [OCPBUGS-10992](https://issues.redhat.com/browse/OCPBUGS-10992): bootstrap-pivot: skip pivot in SCOS Live ISO [#7035](https://github.com/openshift/installer/pull/7035)
* [CORS-2792](https://issues.redhat.com/browse/CORS-2792): AWS Shared VPC Backport [release-4.12] [#7435](https://github.com/openshift/installer/pull/7435)
* [OCPBUGS-18320](https://issues.redhat.com/browse/OCPBUGS-18320): CORS-2445: GCP: Add osImage to the install config [#7454](https://github.com/openshift/installer/pull/7454)
* [OCPBUGS-17404](https://issues.redhat.com/browse/OCPBUGS-17404): backport openstack UPI for ansible 2.10 [#7399](https://github.com/openshift/installer/pull/7399)
* [OCPBUGS-16778](https://issues.redhat.com/browse/OCPBUGS-16778): bump RHCOS 4.12 bootimage metadata to 412.86.202308081039-0 [#7420](https://github.com/openshift/installer/pull/7420)
* [OCPBUGS-17467](https://issues.redhat.com/browse/OCPBUGS-17467): Allow override of networkType [#7406](https://github.com/openshift/installer/pull/7406)
* [OCPBUGS-17174](https://issues.redhat.com/browse/OCPBUGS-17174): Set AdditionalTrustBundle in override when mirroring not enabled [#7386](https://github.com/openshift/installer/pull/7386)
* [OCPBUGS-16382](https://issues.redhat.com/browse/OCPBUGS-16382): azure: skip LB creation when not needed [#7342](https://github.com/openshift/installer/pull/7342)
* [OCPBUGS-14868](https://issues.redhat.com/browse/OCPBUGS-14868): Shorten SNO installation duration by releasing CPC lease [#7242](https://github.com/openshift/installer/pull/7242)
* [OCPBUGS-14495](https://issues.redhat.com/browse/OCPBUGS-14495): Support /dev/disk/by-path root device hints [#7227](https://github.com/openshift/installer/pull/7227)
* [OCPBUGS-16151](https://issues.redhat.com/browse/OCPBUGS-16151): ic: azure: validate diskTypes in AzureStack [#7331](https://github.com/openshift/installer/pull/7331)
* [OCPBUGS-11199](https://issues.redhat.com/browse/OCPBUGS-11199): azure: upi: use Image Gallery in ARM templates [#7054](https://github.com/openshift/installer/pull/7054)
* [OCPBUGS-13940](https://issues.redhat.com/browse/OCPBUGS-13940): bump RHCOS 4.12 bootimage metadata to 412.86.202306132230-0 [#7249](https://github.com/openshift/installer/pull/7249)
* [OCPBUGS-14664](https://issues.redhat.com/browse/OCPBUGS-14664): Shorten SNO installation duration by releasing CVO lease [#7235](https://github.com/openshift/installer/pull/7235)
* [OCPBUGS-7400](https://issues.redhat.com/browse/OCPBUGS-7400): Check for AWS STS installation before trying to get all IAM Roles [#7175](https://github.com/openshift/installer/pull/7175)
* [OCPBUGS-13819](https://issues.redhat.com/browse/OCPBUGS-13819): Bootstrap on aws should have same metadata service type as on other nodes [#7196](https://github.com/openshift/installer/pull/7196)
* [Full changelog](https://github.com/openshift/installer/compare/f1065bd536f60c2fadde82c083f23a8aeb8126dd...6a2d2e940acca3ebebe86827fda35c95b7b09d1e)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/968ceb05491ec0b5531728d76dfe04ccc08845ea)

* [OCPBUGS-17703](https://issues.redhat.com/browse/OCPBUGS-17703): Trigger reconcile on Secret change [#298](https://github.com/openshift/baremetal-operator/pull/298)
* [OCPBUGS-17459](https://issues.redhat.com/browse/OCPBUGS-17459): Set minimum TLS version for webhook to 1.2 [#297](https://github.com/openshift/baremetal-operator/pull/297)
* [OCPBUGS-14188](https://issues.redhat.com/browse/OCPBUGS-14188): Deleting unmanaged BMH get stuck fix [#283](https://github.com/openshift/baremetal-operator/pull/283)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/787d96ed20b683cc38076e93a6136623fd93df02...968ceb05491ec0b5531728d76dfe04ccc08845ea)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/23c6c0e30abc58af62059160feee51bf3ed1e0d3)

* [OCPBUGS-18606](https://issues.redhat.com/browse/OCPBUGS-18606): Move haproxy firewall rule check earlier in loop [#272](https://github.com/openshift/baremetal-runtimecfg/pull/272)
* [OCPBUGS-17715](https://issues.redhat.com/browse/OCPBUGS-17715): Don't render config with incomplete unicast peer list [#268](https://github.com/openshift/baremetal-runtimecfg/pull/268)
* [OCPBUGS-15315](https://issues.redhat.com/browse/OCPBUGS-15315): Use machine-config state instead of comparing roles [#262](https://github.com/openshift/baremetal-runtimecfg/pull/262)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/128a1c48d892270baa5144c9c19ec926c07ce43f...23c6c0e30abc58af62059160feee51bf3ed1e0d3)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/ac58b184e8bf6ad7a8e5d387ec4f76bc2b7c3d9a)

* [OCPBUGS-16173](https://issues.redhat.com/browse/OCPBUGS-16173): Add tls-server-name when property exists in kubeconfig [#1507](https://github.com/openshift/oc/pull/1507)
* [OCPBUGS-1283](https://issues.redhat.com/browse/OCPBUGS-1283): Bump golang.org/x dependencies [#1421](https://github.com/openshift/oc/pull/1421)
* [OCPBUGS-16056](https://issues.redhat.com/browse/OCPBUGS-16056): mcs cert: account for environments that use IP directly [#1501](https://github.com/openshift/oc/pull/1501)
* [OCPBUGS-16194](https://issues.redhat.com/browse/OCPBUGS-16194): reboot: set ignition version to 3.1 [#1509](https://github.com/openshift/oc/pull/1509)
* handle the error case of node retrieval while waiting for reboot [#1485](https://github.com/openshift/oc/pull/1485)
* bring some cert rotation helpers back into 4.12 [fix unit-tests] [#1478](https://github.com/openshift/oc/pull/1478)
* [OCPBUGS-14647](https://issues.redhat.com/browse/OCPBUGS-14647): [release-4.12] Do not set master node selector if there's no masters [#1366](https://github.com/openshift/oc/pull/1366)
* [Full changelog](https://github.com/openshift/oc/compare/97c75d06a0f795872975e1d2335a2a932ca1b917...ac58b184e8bf6ad7a8e5d387ec4f76bc2b7c3d9a)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/d05b0abca416426868d770addd5b7f4d8b4d4541)

* [OCPBUGS-16325](https://issues.redhat.com/browse/OCPBUGS-16325): Azure: Handle already existing IP configurations [#117](https://github.com/openshift/cloud-network-config-controller/pull/117)
* [OCPBUGS-14717](https://issues.redhat.com/browse/OCPBUGS-14717): increase GCP egress ip capacity to 100 from 10 [#114](https://github.com/openshift/cloud-network-config-controller/pull/114)
* [OCPBUGS-13802](https://issues.redhat.com/browse/OCPBUGS-13802): sync CloudPrivateIpConfig when node is missing [#112](https://github.com/openshift/cloud-network-config-controller/pull/112)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/0e1ddc658777ce86ff9a2786b6e9aace60a0f70f...d05b0abca416426868d770addd5b7f4d8b4d4541)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/fe4212ab101ff47fc72bde475d39f30158969974)

* [OCPBUGS-13346](https://issues.redhat.com/browse/OCPBUGS-13346): dont log jwt tokens [#622](https://github.com/openshift/cluster-authentication-operator/pull/622)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/bb764848318a3f33275b75229a734e8bda5f471c...fe4212ab101ff47fc72bde475d39f30158969974)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/5f4795c4e1750b84eaaee30ff0b0795c0fdd9e4d)

* [OCPBUGS-19557](https://issues.redhat.com/browse/OCPBUGS-19557): Guard against nil PlatformStatus [#367](https://github.com/openshift/cluster-baremetal-operator/pull/367)
* [OCPBUGS-16169](https://issues.redhat.com/browse/OCPBUGS-16169): use proxying for inspector in addition to ironic [#349](https://github.com/openshift/cluster-baremetal-operator/pull/349)
* [OCPBUGS-15715](https://issues.redhat.com/browse/OCPBUGS-15715): Limit role binding to openshift-machine-api namespace [#347](https://github.com/openshift/cluster-baremetal-operator/pull/347)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/8164b8ba38c35d6c1a41efcc369f8963f612de6c...5f4795c4e1750b84eaaee30ff0b0795c0fdd9e4d)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/138a1cf2b98578acb4ccf098736bdf08614d2d6a)

* [OCPBUGS-14386](https://issues.redhat.com/browse/OCPBUGS-14386): Update dependencies and image [#91](https://github.com/openshift/cluster-bootstrap/pull/91)
* Add API team to the OWNERS [#97](https://github.com/openshift/cluster-bootstrap/pull/97)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/f22d1c60c188a4b5ce1731a8b1db7c20067dc7e9...138a1cf2b98578acb4ccf098736bdf08614d2d6a)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/c589595f3839f6347226c9dd7945925ed3fd0985)

* [CORS-2794](https://issues.redhat.com/browse/CORS-2794): AWS Shared VPC API Bump [release-4.12] [#344](https://github.com/openshift/cluster-config-operator/pull/344)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/4c6e171d26cc3c302c6d6193060344456bc381a1...c589595f3839f6347226c9dd7945925ed3fd0985)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/119d7a734d3bda3380c32b6af716ab4e16846f13)

* [OCPBUGS-14960](https://issues.redhat.com/browse/OCPBUGS-14960): Check ProviderSpec before generating MachineInfo [#216](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/216)
* [OCPBUGS-15198](https://issues.redhat.com/browse/OCPBUGS-15198): Surface cpms vs machines diff [#219](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/219)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/7e26923cfaf30d5293a1458a62ff7a854cc7c023...119d7a734d3bda3380c32b6af716ab4e16846f13)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/ffebbf4e92267a380fee92e3e3ead6a27670adc6)

* [OCPBUGS-19933](https://issues.redhat.com/browse/OCPBUGS-19933): update-node-resolver.sh: Check for errors from >> [#385](https://github.com/openshift/cluster-dns-operator/pull/385)
* [OCPBUGS-19933](https://issues.redhat.com/browse/OCPBUGS-19933): ensure original hosts file contents are preserved [#383](https://github.com/openshift/cluster-dns-operator/pull/383)
* [OCPBUGS-15251](https://issues.redhat.com/browse/OCPBUGS-15251): Add support for protocolStrategy API field to enable force_tcp configuration [#378](https://github.com/openshift/cluster-dns-operator/pull/378)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/1c136fe38b8cd5c0de99577d23157f884728d20b...ffebbf4e92267a380fee92e3e3ead6a27670adc6)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/e49f1a396e694f58de57fbcc413c2bb9849cef08)

* [OCPBUGS-19837](https://issues.redhat.com/browse/OCPBUGS-19837): Update staticpod file permissions to conform with CIS benchmarks [#1128](https://github.com/openshift/cluster-etcd-operator/pull/1128)
* [OCPBUGS-17808](https://issues.redhat.com/browse/OCPBUGS-17808): reset snapshot default counts to avoid file already lo… [#1100](https://github.com/openshift/cluster-etcd-operator/pull/1100)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/c316ecad3fd151e1eefe6af82d37ad108807b23d...e49f1a396e694f58de57fbcc413c2bb9849cef08)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/0bb8ffc455b1f38c5cc378a66fe12bd61be471f1)

* [NE-1372](https://issues.redhat.com/browse/NE-1372): Add support for AWS shared VPC in another account #966 [#971](https://github.com/openshift/cluster-ingress-operator/pull/971)
* [OCPBUGS-13049](https://issues.redhat.com/browse/OCPBUGS-13049): bump controller-runtime to fix the multi namespace cache indexing [#922](https://github.com/openshift/cluster-ingress-operator/pull/922)
* [OCPBUGS-15467](https://issues.redhat.com/browse/OCPBUGS-15467): Add missing AWS permission for ListTagsForResources [#954](https://github.com/openshift/cluster-ingress-operator/pull/954)
* [OCPBUGS-16620](https://issues.redhat.com/browse/OCPBUGS-16620): Deflake TestRouterCompressionOperation [#963](https://github.com/openshift/cluster-ingress-operator/pull/963)
* [OCPBUGS-16621](https://issues.redhat.com/browse/OCPBUGS-16621): Fix TestClientTLS flakes [#964](https://github.com/openshift/cluster-ingress-operator/pull/964)
* [OCPBUGS-15644](https://issues.redhat.com/browse/OCPBUGS-15644): Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record [#959](https://github.com/openshift/cluster-ingress-operator/pull/959)
* [OCPBUGS-14454](https://issues.redhat.com/browse/OCPBUGS-14454), [OCPBUGS-14455](https://issues.redhat.com/browse/OCPBUGS-14455): Handle mTLS CRLs, and fix accidental CRL duplication [#941](https://github.com/openshift/cluster-ingress-operator/pull/941)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/21c38d53ccc9e2b96f412ca58b8208ecfb6e6294...0bb8ffc455b1f38c5cc378a66fe12bd61be471f1)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/fe5e2a108165f10bdab3e75e933d93fe359b2660)

* [OCPBUGS-19837](https://issues.redhat.com/browse/OCPBUGS-19837): Update staticpod file permissions to conform with CIS benchmarks [#1559](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1559)
* [OCPBUGS-17139](https://issues.redhat.com/browse/OCPBUGS-17139): make webhook connection failure a warning in log [#1533](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1533)
* [OCPBUGS-13346](https://issues.redhat.com/browse/OCPBUGS-13346): dont log jwt tokens [#1524](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1524)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/2076f3d0e4fea6fca54028ec7831407173ea81f5...fe5e2a108165f10bdab3e75e933d93fe359b2660)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/7f494d33fabb11f2cfaf16e8588ddcb69f7765c5)

* [OCPBUGS-19837](https://issues.redhat.com/browse/OCPBUGS-19837): Update staticpod file permissions to conform with CIS benchmarks [#754](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/754)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/1c2157df6e9031bf6abb9250d2bec901608fe5b4...7f494d33fabb11f2cfaf16e8588ddcb69f7765c5)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/4f0ac8dda3d83119a4ef81f893c53940889ac5f6)

* [OCPBUGS-19837](https://issues.redhat.com/browse/OCPBUGS-19837): Update staticpod file permissions to conform with CIS benchmarks [#499](https://github.com/openshift/cluster-kube-scheduler-operator/pull/499)
* [OCPBUGS-14652](https://issues.redhat.com/browse/OCPBUGS-14652): disable debug pporf with unauthenticated port for 4.12 [#481](https://github.com/openshift/cluster-kube-scheduler-operator/pull/481)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/845ae423e831b1cacf0bcae5e6528f1d21b5ddf2...4f0ac8dda3d83119a4ef81f893c53940889ac5f6)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/ee959ac1b7eead77d682249cae6373b4730295b7)

* [OCPBUGS-17125](https://issues.redhat.com/browse/OCPBUGS-17125): backport metrics collection profiles selector logic to prevent users from double scraping when they upgrade from 4.12 to 4.13 [#2047](https://github.com/openshift/cluster-monitoring-operator/pull/2047)
* [OCPBUGS-16028](https://issues.redhat.com/browse/OCPBUGS-16028): Add the trusted CA bundle in UWM Prometheus pods [#2042](https://github.com/openshift/cluster-monitoring-operator/pull/2042)
* [OCPBUGS-15473](https://issues.redhat.com/browse/OCPBUGS-15473): Limit the value of GOMAXPROCS on node-exporter to 4 [#2023](https://github.com/openshift/cluster-monitoring-operator/pull/2023)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/e7955c70f25a6bc6df907fe884082c3c9426a882...ee959ac1b7eead77d682249cae6373b4730295b7)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/c6d6aff9a41c3845e232fe307fdd3de6144adcf7)

* [OCPBUGS-17656](https://issues.redhat.com/browse/OCPBUGS-17656): prevent creation of multiple cni-sysctl-allowlist-ds pods [#1948](https://github.com/openshift/cluster-network-operator/pull/1948)
* [OCPBUGS-11547](https://issues.redhat.com/browse/OCPBUGS-11547): Hypershift: Add RollingUpdate parameters to multus-admission-controller [#1775](https://github.com/openshift/cluster-network-operator/pull/1775)
* [OCPBUGS-16142](https://issues.redhat.com/browse/OCPBUGS-16142): fix reconciliation process of the allowlist controller [#1891](https://github.com/openshift/cluster-network-operator/pull/1891)
* [release-4.12 ] OCPBUGS-11217:use annotation daemonset to update hybrid overlay [#1764](https://github.com/openshift/cluster-network-operator/pull/1764)
* [OCPBUGS-15588](https://issues.redhat.com/browse/OCPBUGS-15588): Add release version annotation to whereabouts-reconciler [#1856](https://github.com/openshift/cluster-network-operator/pull/1856)
* [OCPBUGS-13891](https://issues.redhat.com/browse/OCPBUGS-13891): [release-4.12] HyperShift: Support HostedControlPlane node selector [#1816](https://github.com/openshift/cluster-network-operator/pull/1816)
* [OCPBUGS-13067](https://issues.redhat.com/browse/OCPBUGS-13067): Fix tier label, privileged, HOSTNAME/NODENAME in whereabouts reconciler [backport 4.12] [#1829](https://github.com/openshift/cluster-network-operator/pull/1829)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/422174789356e3bd2af543ab6513e3491593837f...c6d6aff9a41c3845e232fe307fdd3de6144adcf7)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/84d400cb96233198a1864f95a5aa62575cead671)

* [OCPBUGS-19459](https://issues.redhat.com/browse/OCPBUGS-19459): check for object being nil (#821) [#821](https://github.com/openshift/cluster-node-tuning-operator/pull/821)
* [OCPBUGS-18868](https://issues.redhat.com/browse/OCPBUGS-18868): [release-4.14] e2e: add expected max latancy to hwlatdetec test & rename constant (#788) (#808) (#809) [#788](https://github.com/openshift/cluster-node-tuning-operator/pull/788)
* Release leader election on manager exit (#789) [#789](https://github.com/openshift/cluster-node-tuning-operator/pull/789)
* Fix a race in e2e test rollback.go code (#742) [#742](https://github.com/openshift/cluster-node-tuning-operator/pull/742)
* pao: e2e: Make script executable (#734) [#734](https://github.com/openshift/cluster-node-tuning-operator/pull/734)
* pao e2e: Split gcp-pao lane (#728) [#728](https://github.com/openshift/cluster-node-tuning-operator/pull/728)
* Do not rollback settings on TuneD exit (#711) [#711](https://github.com/openshift/cluster-node-tuning-operator/pull/711)
* [OCPBUGS-15800](https://issues.redhat.com/browse/OCPBUGS-15800): e2e: latency testing: increase the expected threshold and fix gomega truncating output (#710) [#710](https://github.com/openshift/cluster-node-tuning-operator/pull/710)
* Revert "Remove optimization to allow full resync (#569)" (#688) [#569](https://github.com/openshift/cluster-node-tuning-operator/pull/569)
* update owners 20230109 (#549) [#549](https://github.com/openshift/cluster-node-tuning-operator/pull/549)
* Add PerformanceProfiles to 'oc adm must-gather' (#667) [#667](https://github.com/openshift/cluster-node-tuning-operator/pull/667)
* [OCPBUGS-14472](https://issues.redhat.com/browse/OCPBUGS-14472): Fix updating numa core siblings map in GetCpuSiblings function (#675) [#675](https://github.com/openshift/cluster-node-tuning-operator/pull/675)
* Remove trailing spaces from test names (#572) [#572](https://github.com/openshift/cluster-node-tuning-operator/pull/572)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/8da149d157675464194f3cabc2899fa7023307d0...84d400cb96233198a1864f95a5aa62575cead671)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/99197928a584d45697eddbf5f652d8eb1d2ecf68)

* [OCPBUGS-13346](https://issues.redhat.com/browse/OCPBUGS-13346): dont log jwt tokens [#543](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/543)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/4c5b4882e20944d9c44272551053fccbe16d6451...99197928a584d45697eddbf5f652d8eb1d2ecf68)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/67ef456a781429a06bdc744aae89783cff25315d)

* [OCPBUGS-12442](https://issues.redhat.com/browse/OCPBUGS-12442): psalabelsyncer: handle empty namespace of a rolebinding subject [#111](https://github.com/openshift/cluster-policy-controller/pull/111)
* [OCPBUGS-14092](https://issues.redhat.com/browse/OCPBUGS-14092): [4.12] fix ClusterResourceQuotas to work for all api resources including custom resources [#117](https://github.com/openshift/cluster-policy-controller/pull/117)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/9aaf6fea45f75b813ccb7441b9c350fe35d1dd9f...67ef456a781429a06bdc744aae89783cff25315d)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/f1b49e34512d38bf908183318edd1f9f9aeef883)

* [OCPBUGS-15757](https://issues.redhat.com/browse/OCPBUGS-15757): Update Jenkins and Jenkins Agent Base image versions [#506](https://github.com/openshift/cluster-samples-operator/pull/506)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/6a815f9b4bcb50e01c1bed2ec945553d7e033a3f...f1b49e34512d38bf908183318edd1f9f9aeef883)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/7ac84a99b1be7acc759e55a2024ba364df999668)

* [OCPBUGS-18131](https://issues.redhat.com/browse/OCPBUGS-18131): Add patch for allowing configmap updates via clusterrole [#402](https://github.com/openshift/cluster-storage-operator/pull/402)
* [OCPBUGS-14307](https://issues.redhat.com/browse/OCPBUGS-14307): User real node name in failing mount alerts [#377](https://github.com/openshift/cluster-storage-operator/pull/377)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/8d10dcc9e04907d3f83a7fd3d9531c25d8bf8596...7ac84a99b1be7acc759e55a2024ba364df999668)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/f9785d6cab936fda57e498df2c31742b84fc4677)

* [OCPBUGS-14096](https://issues.redhat.com/browse/OCPBUGS-14096): Trigger new sync round on ClusterOperator Available changes [#938](https://github.com/openshift/cluster-version-operator/pull/938)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/f2620f65500d06c52419988cf3bf7def063b5eb2...f9785d6cab936fda57e498df2c31742b84fc4677)


### [console](https://github.com/openshift/console/tree/dea60d8886dff5fb51a9b7430257ced99b709077)

* [OCPBUGS-13580](https://issues.redhat.com/browse/OCPBUGS-13580): Regression: OpenShift Console no-longer filters SecretList when displaying ServiceAccount [#12747](https://github.com/openshift/console/pull/12747)
* [OCPBUGS-19907](https://issues.redhat.com/browse/OCPBUGS-19907): Fixed Edit Application form for Knative Services [#13205](https://github.com/openshift/console/pull/13205)
* [OCPBUGS-19045](https://issues.redhat.com/browse/OCPBUGS-19045): Web console slowness on Project>Project access page [#13155](https://github.com/openshift/console/pull/13155)
* [OCPBUGS-18273](https://issues.redhat.com/browse/OCPBUGS-18273): Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn't exists [#13113](https://github.com/openshift/console/pull/13113)
* [OCPBUGS-18563](https://issues.redhat.com/browse/OCPBUGS-18563): OLM Pages work when copied CSVs are disabled [#13055](https://github.com/openshift/console/pull/13055)
* [OCPBUGS-17530](https://issues.redhat.com/browse/OCPBUGS-17530): fix bug where binary secret values are corrupted on edit and add test coverage [#13087](https://github.com/openshift/console/pull/13087)
* [OCPBUGS-18366](https://issues.redhat.com/browse/OCPBUGS-18366): Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers [#13122](https://github.com/openshift/console/pull/13122)
* [OCPBUGS-16660](https://issues.redhat.com/browse/OCPBUGS-16660): Manual cherry-pick of #12978 [#13039](https://github.com/openshift/console/pull/13039)
* [OCPBUGS-17192](https://issues.redhat.com/browse/OCPBUGS-17192): "Duplicate RoleBinding" leads to "Unsupported value" error [#13063](https://github.com/openshift/console/pull/13063)
* [OCPBUGS-16846](https://issues.redhat.com/browse/OCPBUGS-16846): Fix stop PLR option [#13051](https://github.com/openshift/console/pull/13051)
* [OCPBUGS-2182](https://issues.redhat.com/browse/OCPBUGS-2182): re-enable operator-install-single-namespace.spec.ts test [#13013](https://github.com/openshift/console/pull/13013)
* [OCPBUGS-16732](https://issues.redhat.com/browse/OCPBUGS-16732): When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. [#13047](https://github.com/openshift/console/pull/13047)
* [OCPBUGS-16046](https://issues.redhat.com/browse/OCPBUGS-16046), [OCPBUGS-16047](https://issues.redhat.com/browse/OCPBUGS-16047), [OCPBUGS-16048](https://issues.redhat.com/browse/OCPBUGS-16048): Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions [#12997](https://github.com/openshift/console/pull/12997)
* [OCPBUGS-15898](https://issues.redhat.com/browse/OCPBUGS-15898): account for single object in status.conditions instead… [#12982](https://github.com/openshift/console/pull/12982)
* [OCPBUGS-16139](https://issues.redhat.com/browse/OCPBUGS-16139): The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. [#13004](https://github.com/openshift/console/pull/13004)
* [OCPBUGS-15710](https://issues.redhat.com/browse/OCPBUGS-15710): Create helm release page doesn't show a YAML editor when schema isn't available (httpd-imagestreams chart) [#12962](https://github.com/openshift/console/pull/12962)
* [OCPBUGS-15849](https://issues.redhat.com/browse/OCPBUGS-15849): Add Pipeline metrics unsupported empty page [#12977](https://github.com/openshift/console/pull/12977)
* [OCPBUGS-9405](https://issues.redhat.com/browse/OCPBUGS-9405): [OSD] There is no error message shown on node label edi… [#12965](https://github.com/openshift/console/pull/12965)
* [OCPBUGS-15798](https://issues.redhat.com/browse/OCPBUGS-15798): Remove access review check for PipelineResource from Pipeline section [#12969](https://github.com/openshift/console/pull/12969)
* [OCPBUGS-13643](https://issues.redhat.com/browse/OCPBUGS-13643): Fix OLM k8sResourcePrefix descriptor dropdown behavior [#12813](https://github.com/openshift/console/pull/12813)
* [OCPBUGS-15569](https://issues.redhat.com/browse/OCPBUGS-15569): use service port name instead targetPort in the Pipeline Event listener route [#12958](https://github.com/openshift/console/pull/12958)
* [OCPBUGS-15535](https://issues.redhat.com/browse/OCPBUGS-15535): Delete annotation 'tekton.dev/v1beta1TaskRuns' when rerun the PLR [#12955](https://github.com/openshift/console/pull/12955)
* [OCPBUGS-15404](https://issues.redhat.com/browse/OCPBUGS-15404): Importing a kn Service shows a non-working Open URL decorator also when the Add Route checkbox was unselected [#12935](https://github.com/openshift/console/pull/12935)
* [OCPBUGS-15057](https://issues.redhat.com/browse/OCPBUGS-15057): only copy workload annotations to debug pod [#12903](https://github.com/openshift/console/pull/12903)
* [OCPBUGS-15099](https://issues.redhat.com/browse/OCPBUGS-15099): visiting Configurations page returns error Cannot read… [#12906](https://github.com/openshift/console/pull/12906)
* [OCPBUGS-15482](https://issues.redhat.com/browse/OCPBUGS-15482): Remove PipelineResource CRD check because it's not installed with PO 1.11 anymore [#12948](https://github.com/openshift/console/pull/12948)
* [OCPBUGS-14190](https://issues.redhat.com/browse/OCPBUGS-14190): When Creating Sample Devfile from the Samples Page, Topology Icon is not set [#12859](https://github.com/openshift/console/pull/12859)
* [Full changelog](https://github.com/openshift/console/compare/e5ab74062639c45fa7275c7ed4a6b99bb651a322...dea60d8886dff5fb51a9b7430257ced99b709077)


### [console-operator](https://github.com/openshift/console-operator/tree/beba7a83da0113b590d1cfcf31fbadab27c03b63)

* [OCPBUGS-15834](https://issues.redhat.com/browse/OCPBUGS-15834): Dockerfile: Shift ConsolePlugin CRD after the operator Deployment [#791](https://github.com/openshift/console-operator/pull/791)
* [OCPBUGS-18563](https://issues.redhat.com/browse/OCPBUGS-18563): OLM Pages work when copied CSVs are disabled [#780](https://github.com/openshift/console-operator/pull/780)
* [Full changelog](https://github.com/openshift/console-operator/compare/309915563e5f07545aa6ad035b4d379bd0828931...beba7a83da0113b590d1cfcf31fbadab27c03b63)


### [coredns](https://github.com/openshift/coredns/tree/8d756b0ccbb73b377df3378848c69b69d3918338)

* [OCPBUGS-20144](https://issues.redhat.com/browse/OCPBUGS-20144): UPSTREAM: <carry>: openshift: Fix OCPBUGS-20144 [#98](https://github.com/openshift/coredns/pull/98)
* [Full changelog](https://github.com/openshift/coredns/compare/9aaa7e0a86b69bafb9f544a0e5cb1873535a8f6b...8d756b0ccbb73b377df3378848c69b69d3918338)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/25e2824af9a2f4c6ba92a1274f5fe35e1bda51c8)

* [OCPBUGS-15971](https://issues.redhat.com/browse/OCPBUGS-15971): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.25 into release-4.12 [#198](https://github.com/openshift/cloud-provider-openstack/pull/198)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/03cc206a76c4f287e62d1570e648e0183fc07000...25e2824af9a2f4c6ba92a1274f5fe35e1bda51c8)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/a0d079a079603589b9e272465f99befb001c23db)

* [OCPBUGS-18475](https://issues.redhat.com/browse/OCPBUGS-18475): Don't cache OpenStack client [#202](https://github.com/openshift/csi-driver-manila-operator/pull/202)
* [OCPBUGS-18417](https://issues.redhat.com/browse/OCPBUGS-18417): set TLS cipher suites in Kube RBAC sidecars [#199](https://github.com/openshift/csi-driver-manila-operator/pull/199)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/af25a1f4319ee69d0852f10ecbd330450609f514...a0d079a079603589b9e272465f99befb001c23db)


### [docker-builder](https://github.com/openshift/builder/tree/1f99147cffbc3b92fe868aa9ccb7a11e82d91c18)

* [OCPBUGS-17228](https://issues.redhat.com/browse/OCPBUGS-17228): bump github.com/containers/buildah to v1.26.6 [#325](https://github.com/openshift/builder/pull/325)
* [OCPBUGS-15643](https://issues.redhat.com/browse/OCPBUGS-15643): Add the git-lfs package [#353](https://github.com/openshift/builder/pull/353)
* [Full changelog](https://github.com/openshift/builder/compare/0087881c60abd027f5cadddf42e834b67ecfe30f...1f99147cffbc3b92fe868aa9ccb7a11e82d91c18)


### [docker-registry](https://github.com/openshift/image-registry/tree/9e75355ca282cf5abac5595585a4b089e6a95e6f)

* [OCPBUGS-19306](https://issues.redhat.com/browse/OCPBUGS-19306): bump docker-distribution [#382](https://github.com/openshift/image-registry/pull/382)
* [Full changelog](https://github.com/openshift/image-registry/compare/95e39bf0e31a5af9ebcee698a69a4996a39e221a...9e75355ca282cf5abac5595585a4b089e6a95e6f)


### [etcd](https://github.com/openshift/etcd/tree/9f987a572bf0cbb244350f62731db57d9e05f9f7)

* [OCPBUGS-15860](https://issues.redhat.com/browse/OCPBUGS-15860): [4.12] Rebase openshift/etcd to 3.5.9 [#207](https://github.com/openshift/etcd/pull/207)
* [Full changelog](https://github.com/openshift/etcd/compare/c1d76ffd4b4cf0a0d2a6056a505fbef0b187c027...9f987a572bf0cbb244350f62731db57d9e05f9f7)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/bcca07e9d155d9350dc44e3d66383994425cc3a2)

* [OCPBUGS-18417](https://issues.redhat.com/browse/OCPBUGS-18417): set TLS cipher suites in Kube RBAC sidecars [#82](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/82)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/020aeb670fa7897ae3e564d052577042c26b1921...bcca07e9d155d9350dc44e3d66383994425cc3a2)


### [haproxy-router](https://github.com/openshift/router/tree/cac95bc112da79454f6f18bd30ca53adf7d3da63)

* [OCPBUGS-17766](https://issues.redhat.com/browse/OCPBUGS-17766): haproxy/template: mitigate CVE-2023-40225 [#507](https://github.com/openshift/router/pull/507)
* [OCPBUGS-18639](https://issues.redhat.com/browse/OCPBUGS-18639): properly handle weight=0 [#511](https://github.com/openshift/router/pull/511)
* [OCPBUGS-14454](https://issues.redhat.com/browse/OCPBUGS-14454), [OCPBUGS-14455](https://issues.redhat.com/browse/OCPBUGS-14455): Handle mTLS CRLs, and fix accidental CRL duplication [#491](https://github.com/openshift/router/pull/491)
* [Full changelog](https://github.com/openshift/router/compare/3065f6583f3925328fbdbfe95e3bc7bb7a084d33...cac95bc112da79454f6f18bd30ca53adf7d3da63)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/38a21989ed90b1765f3d4de868c8810ea4b9ff4a)

* [OCPBUGS-18288](https://issues.redhat.com/browse/OCPBUGS-18288), [OCPBUGS-19483](https://issues.redhat.com/browse/OCPBUGS-19483): Update to kubernetes 1.25.14 [#1719](https://github.com/openshift/kubernetes/pull/1719)
* [OCPBUGS-18768](https://issues.redhat.com/browse/OCPBUGS-18768): UPSTREAM: <carry>: Force using host go always and use host libriaries [#1694](https://github.com/openshift/kubernetes/pull/1694)
* [OCPBUGS-17188](https://issues.redhat.com/browse/OCPBUGS-17188): Update to Kubernetes 1.25.12 [#1669](https://github.com/openshift/kubernetes/pull/1669)
* [OCPBUGS-17159](https://issues.redhat.com/browse/OCPBUGS-17159): Increase service idle max timeout to 100 minutes [#1662](https://github.com/openshift/kubernetes/pull/1662)
* [OCPBUGS-8737](https://issues.redhat.com/browse/OCPBUGS-8737): UPSTREAM: <drop>: bump apiserver-library-go for scc fix [#1619](https://github.com/openshift/kubernetes/pull/1619)
* [OCPBUGS-15309](https://issues.redhat.com/browse/OCPBUGS-15309): Bump to k8s 1.25.11 [#1615](https://github.com/openshift/kubernetes/pull/1615)
* [OCPBUGS-14745](https://issues.redhat.com/browse/OCPBUGS-14745): [release-4.12] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 [#1600](https://github.com/openshift/kubernetes/pull/1600)
* [Full changelog](https://github.com/openshift/kubernetes/compare/3fe29064317f72fce3606a38883d66a91a7c43dc...38a21989ed90b1765f3d4de868c8810ea4b9ff4a)


### [hypershift](https://github.com/openshift/hypershift/tree/6f1e70162329ed38cb7e58622fc79955e4338f02)

* [MULTIARCH-3709](https://issues.redhat.com/browse/MULTIARCH-3709): PowerVS - Add reuse resource flags to e2e test [#2994](https://github.com/openshift/hypershift/pull/2994)
* [MULTIARCH-3732](https://issues.redhat.com/browse/MULTIARCH-3732): PowerVS - Fix cluster deletion when existing resources passed [#2993](https://github.com/openshift/hypershift/pull/2993)
* [MULTIARCH-3733](https://issues.redhat.com/browse/MULTIARCH-3733): Add dev flags in destroy cluster powervs command [#2998](https://github.com/openshift/hypershift/pull/2998)
* Updated secret permissions for openshift-route-controller-manager [#2924](https://github.com/openshift/hypershift/pull/2924)
* fix(hcco): Add HCP label to HCCO by default [#2972](https://github.com/openshift/hypershift/pull/2972)
* fix(ignition): Add HCP label to ignition-server by default [#2949](https://github.com/openshift/hypershift/pull/2949)
* [OCPBUGS-16847](https://issues.redhat.com/browse/OCPBUGS-16847): use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort [#2855](https://github.com/openshift/hypershift/pull/2855)
* [release 4.12] OCPBUGS-11555: OAuth OpenShift deployment requires ConfigMap mount patch2 [#2803](https://github.com/openshift/hypershift/pull/2803)
* [OCPBUGS-16411](https://issues.redhat.com/browse/OCPBUGS-16411): fix deletion bug when hostedzone is already deleted [#2835](https://github.com/openshift/hypershift/pull/2835)
* Kas policy 4.12 [#2826](https://github.com/openshift/hypershift/pull/2826)
* Leader election config update. [#2800](https://github.com/openshift/hypershift/pull/2800)
* [OCPBUGS-15614](https://issues.redhat.com/browse/OCPBUGS-15614): Check OwningIngressController also in Labels [#2759](https://github.com/openshift/hypershift/pull/2759)
* [OCPBUGS-16086](https://issues.redhat.com/browse/OCPBUGS-16086): autoscaling balance similar groups [#2806](https://github.com/openshift/hypershift/pull/2806)
* [HOSTEDCP-1060](https://issues.redhat.com/browse/HOSTEDCP-1060): refactor ignition-server reconcilation and add ignition-server proxy [#2749](https://github.com/openshift/hypershift/pull/2749)
* [OCPBUGS-14873](https://issues.redhat.com/browse/OCPBUGS-14873): Update vendored openshift API for 4.12 [#2734](https://github.com/openshift/hypershift/pull/2734)
* [HOSTEDCP-1073](https://issues.redhat.com/browse/HOSTEDCP-1073): enforce blocked rollout of HCP [#2745](https://github.com/openshift/hypershift/pull/2745)
* properly handle user CA bundle not existing [#2711](https://github.com/openshift/hypershift/pull/2711)
* [OCPBUGS-15304](https://issues.redhat.com/browse/OCPBUGS-15304): [release-4.12] fix(oauth): Do not proxy IBM Cloud IAM endpoints [#2695](https://github.com/openshift/hypershift/pull/2695)
* [OCPBUGS-14873](https://issues.redhat.com/browse/OCPBUGS-14873): Honor global ingress configuration LoadBalancer type on AWS [#2678](https://github.com/openshift/hypershift/pull/2678)
* [OCPBUGS-14803](https://issues.redhat.com/browse/OCPBUGS-14803): Set `DisableStrictZoneCheck = true` in the AWS Cloud Provider config [#2667](https://github.com/openshift/hypershift/pull/2667)
* [release 4.12] OCPBUGS-11555: OAuth OpenShift deployment requires ConfigMap mount [#2512](https://github.com/openshift/hypershift/pull/2512)
* [OCPBUGS-14156](https://issues.redhat.com/browse/OCPBUGS-14156): Reconcile oauthDeployment annotations even if kubeadmin secret is not found [#2614](https://github.com/openshift/hypershift/pull/2614)
* [OCPBUGS-14031](https://issues.redhat.com/browse/OCPBUGS-14031): Include default ingress CA in root CA bundle [#2600](https://github.com/openshift/hypershift/pull/2600)
* [Full changelog](https://github.com/openshift/hypershift/compare/9b52fdc6e2100c7ff9588603ae4690de2d0ae733...6f1e70162329ed38cb7e58622fc79955e4338f02)


### [insights-operator](https://github.com/openshift/insights-operator/tree/6c16f871d3d93517d5eaafe0c07d47fbf9a289e6)

* [OCPBUGS-19476](https://issues.redhat.com/browse/OCPBUGS-19476): update Insights report config logging (#831) [#831](https://github.com/openshift/insights-operator/pull/831)
* [OCPBUGS-19405](https://issues.redhat.com/browse/OCPBUGS-19405): workload info gatherer, add external image repo (#823) [#823](https://github.com/openshift/insights-operator/pull/823)
* [OCPBUGS-15031](https://issues.redhat.com/browse/OCPBUGS-15031): fix the config serialization & add test (#794) (#800) [#794](https://github.com/openshift/insights-operator/pull/794)
* [OCPBUGS-15459](https://issues.redhat.com/browse/OCPBUGS-15459): gather PDBs only from openshift namespaces (#804) [#804](https://github.com/openshift/insights-operator/pull/804)
* [OCPBUGS-15414](https://issues.redhat.com/browse/OCPBUGS-15414): extend configmap gatherer to get gateway-mode-config (#788) (#791) (#801) [#788](https://github.com/openshift/insights-operator/pull/788)
* [Full changelog](https://github.com/openshift/insights-operator/compare/6ebf8086ad8f7b5aa3e5bd44693e829daa4032a3...6c16f871d3d93517d5eaafe0c07d47fbf9a289e6)


### [ironic](https://github.com/openshift/ironic-image/tree/e626e7e7af6af9a99331fc370e2c175db0918af8)

* [OCPBUGS-17642](https://issues.redhat.com/browse/OCPBUGS-17642): Expand regex for fcos/okd packages list [#392](https://github.com/openshift/ironic-image/pull/392)
* [OCPBUGS-16169](https://issues.redhat.com/browse/OCPBUGS-16169): allow inspector to also be proxied [#385](https://github.com/openshift/ironic-image/pull/385)
* [OCPBUGS-13586](https://issues.redhat.com/browse/OCPBUGS-13586): Add python-flask dependency [#373](https://github.com/openshift/ironic-image/pull/373)
* [Full changelog](https://github.com/openshift/ironic-image/compare/5140e3538d739f526902b71c1acba4e300b8a81a...e626e7e7af6af9a99331fc370e2c175db0918af8)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/a822924833c76efde334a1118996612e809f7880)

* [OCPBUGS-19008](https://issues.redhat.com/browse/OCPBUGS-19008): backport hostname fixes [#90](https://github.com/openshift/ironic-agent-image/pull/90)
* "Bug OCPBUGS-15831: Switch to udevadm command install instead of package" [#82](https://github.com/openshift/ironic-agent-image/pull/82)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/3bc48cdf24a45e0569108a4f75f8ccc6e486074d...a822924833c76efde334a1118996612e809f7880)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/c65c1f1c19a9b62ef5f4a857e5ce86ad6fca3d29)

* [OCPBUGS-15735](https://issues.redhat.com/browse/OCPBUGS-15735): Binary should be compiled on rhel9 [#92](https://github.com/openshift/ironic-rhcos-downloader/pull/92)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/a580a4479cb6988f3065ef3d4c5fcfcfc3609d12...c65c1f1c19a9b62ef5f4a857e5ce86ad6fca3d29)


### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/a8ade8fe60ad5fb1ab225a514ec331123b256cff)

* [OCPBUGS-14415](https://issues.redhat.com/browse/OCPBUGS-14415): Flush addresses on provisioning interface with global scope only [#37](https://github.com/openshift/ironic-static-ip-manager/pull/37)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/0c7fbba926e18978d7c0d6a5948d7722a07bbc12...a8ade8fe60ad5fb1ab225a514ec331123b256cff)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/dc9f9af9098af5d29801b12d33c123f02c21cae0)

* [OCPBUGS-18325](https://issues.redhat.com/browse/OCPBUGS-18325): Vendor o/k to consume update to prefer local TCP eps for DNS [#573](https://github.com/openshift/sdn/pull/573)
* [OCPBUGS-13785](https://issues.redhat.com/browse/OCPBUGS-13785): EgressNetworkPolicy DNS resolution does not fall back to TCP [#542](https://github.com/openshift/sdn/pull/542)
* [OCPBUGS-14304](https://issues.redhat.com/browse/OCPBUGS-14304): fix possible concurrent map read/write [#551](https://github.com/openshift/sdn/pull/551)
* [Full changelog](https://github.com/openshift/sdn/compare/659c92048300de6fabd415951fd6fd900e4f4d10...dc9f9af9098af5d29801b12d33c123f02c21cae0)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/8fd2f8b0f7e2849b1a7db252beba0c8250552e36)

* Bug OCPBUGS-16376: Fix np retry [#740](https://github.com/openshift/kuryr-kubernetes/pull/740)
* [OCPBUGS-15493](https://issues.redhat.com/browse/OCPBUGS-15493): Remove unneeded grpcio dependencies from RPM [#737](https://github.com/openshift/kuryr-kubernetes/pull/737)
* [OCPBUGS-13778](https://issues.redhat.com/browse/OCPBUGS-13778): KuryrPort cleanup: Fix issue of subport not found [#731](https://github.com/openshift/kuryr-kubernetes/pull/731)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/cc1d1fbddb54e023383267214c453a61ad40056e...8fd2f8b0f7e2849b1a7db252beba0c8250552e36)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/0611c23ed509f97f6b63b8ee2688a1be3956c319)

* [OCPBUGS-19779](https://issues.redhat.com/browse/OCPBUGS-19779): daemon: always use `podman cp` to copy extensions container content [#3944](https://github.com/openshift/machine-config-operator/pull/3944)
* [OCPBUGS-19515](https://issues.redhat.com/browse/OCPBUGS-19515): The kubeconfig copied on to each node has 644 permissions [#3931](https://github.com/openshift/machine-config-operator/pull/3931)
* [OCPBUGS-17862](https://issues.redhat.com/browse/OCPBUGS-17862): Agent-based install process the container machine-config-controller will be oom [#3875](https://github.com/openshift/machine-config-operator/pull/3875)
* [OCPBUGS-17461](https://issues.redhat.com/browse/OCPBUGS-17461): The machine-config-controller pod restart in SNO+1 causing daemonsets to restart [#3844](https://github.com/openshift/machine-config-operator/pull/3844)
* [OCPBUGS-15570](https://issues.redhat.com/browse/OCPBUGS-15570): configure-ovs: support UUID in vlan.parent [#3768](https://github.com/openshift/machine-config-operator/pull/3768)
* [OCPBUGS-16754](https://issues.redhat.com/browse/OCPBUGS-16754): daemon: Don't traverse `/run/ostree/auth.json` symlink [#3818](https://github.com/openshift/machine-config-operator/pull/3818)
* [OCPBUGS-11303](https://issues.redhat.com/browse/OCPBUGS-11303): Fix regex dot in coredns config file [#3660](https://github.com/openshift/machine-config-operator/pull/3660)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/4accd895aa8fe5ccbd166b9562fdcf5a2112c5ec...0611c23ed509f97f6b63b8ee2688a1be3956c319)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/30adb687218063f1f602e2eaa93a88c123364fbf)

* [OCPBUGS-19008](https://issues.redhat.com/browse/OCPBUGS-19008): Pass BareMetalHost name to IPA (take 2) [#101](https://github.com/openshift/image-customization-controller/pull/101)
* [OCPBUGS-18687](https://issues.redhat.com/browse/OCPBUGS-18687): Watch networkData Secrets for changes [#96](https://github.com/openshift/image-customization-controller/pull/96)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/27777d0e032119965c7ea5ce5b8f74bd885990bd...30adb687218063f1f602e2eaa93a88c123364fbf)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/e56594f9a848625d2997b0f159959114e8ff5970)

* [OCPBUGS-5953](https://issues.redhat.com/browse/OCPBUGS-5953): Denormalize IP name before checking if pod is alive [Backport 4.12] [#178](https://github.com/openshift/whereabouts-cni/pull/178)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/46d23d6dcf1a301a46a2904f78dbe9fc52fe93f5...e56594f9a848625d2997b0f159959114e8ff5970)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/74202ec3b360556526e9652dc25ba6e2f19d19bb)

* Revert "Remove e2e tests that consistently fail in 4.12 (#74)" (#77) [#74](https://github.com/openshift/network-metrics-daemon/pull/74)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/5821b9a782150baf900c0488c3ef7660b4c3a60d...74202ec3b360556526e9652dc25ba6e2f19d19bb)


### [oauth-server](https://github.com/openshift/oauth-server/tree/0f83669be9b7caa6f82799b4bd2fd659d3b31aee)

* [OCPBUGS-13906](https://issues.redhat.com/browse/OCPBUGS-13906): don't log request query and fragment on failed authn request [#129](https://github.com/openshift/oauth-server/pull/129)
* [Full changelog](https://github.com/openshift/oauth-server/compare/00e2b154c6dec43b69b0b6be558e33df5ed43717...0f83669be9b7caa6f82799b4bd2fd659d3b31aee)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/db5a7df3758cf29a79425e5b067d8df96ce259ff)

* [OCPBUGS-18417](https://issues.redhat.com/browse/OCPBUGS-18417): set TLS cipher suites in Kube RBAC sidecars [#130](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/130)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/308a62d84a29b0d45c504fbe43a85fcb8e3199da...db5a7df3758cf29a79425e5b067d8df96ce259ff)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/05657663c02be6d03d074d0f39a2b247cef9286a)

* Bug OCPBUGS-19770: Set controller's SyncPeriod to 1 hour [#86](https://github.com/openshift/machine-api-provider-openstack/pull/86)
* [OCPBUGS-10607](https://issues.redhat.com/browse/OCPBUGS-10607): Use TenantID if ProjectID is empty [#66](https://github.com/openshift/machine-api-provider-openstack/pull/66)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/c6d1737cc8b0cc3e27823691d5cc26b1478b9169...05657663c02be6d03d074d0f39a2b247cef9286a)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/dea707139641e96ca2d3fa472c25f0ff966ca5b4)

* [OCPBUGS-18512](https://issues.redhat.com/browse/OCPBUGS-18512), [RHIBMCS-168](https://issues.redhat.com/browse/RHIBMCS-168): Copied csv listing backport [#559](https://github.com/openshift/operator-framework-olm/pull/559)
* Introduce DOWNSTREAM_OWNERS file [#541](https://github.com/openshift/operator-framework-olm/pull/541)
* Allow cpb to be statically compiled / exempt from FIPS compliance [#512](https://github.com/openshift/operator-framework-olm/pull/512)
* [OCPBUGS-15858](https://issues.redhat.com/browse/OCPBUGS-15858): fix dynamic conversion webhook [#503](https://github.com/openshift/operator-framework-olm/pull/503)
* [OCPBUGS-15737](https://issues.redhat.com/browse/OCPBUGS-15737): Re-enable psa plugin [#500](https://github.com/openshift/operator-framework-olm/pull/500)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/dd3cc9cbf5ccc16441f427b2d1386d6ca430f82f...dea707139641e96ca2d3fa472c25f0ff966ca5b4)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/a5465e26d6ce2a471496418f2c5cdd627da9cdb6)

* [OCPBUGS-18503](https://issues.redhat.com/browse/OCPBUGS-18503): remove a race condition [#533](https://github.com/operator-framework/operator-marketplace/pull/533)
* [OCPBUGS-14109](https://issues.redhat.com/browse/OCPBUGS-14109): Revert default catsrc diff changes [#519](https://github.com/operator-framework/operator-marketplace/pull/519)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/787275319a2820e8fa5ba304b6425250cbd2d145...a5465e26d6ce2a471496418f2c5cdd627da9cdb6)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/35c7cb909a646a522605196779622bd3fcbb1d11)

* [OCPBUGS-18417](https://issues.redhat.com/browse/OCPBUGS-18417): set TLS cipher suites in Kube RBAC sidecars [#121](https://github.com/openshift/ovirt-csi-driver-operator/pull/121)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/feb14fbb7c7e91fd721a23b5c7307469da5c1aec...35c7cb909a646a522605196779622bd3fcbb1d11)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/b98254032ba9e68e747cc35696ecdc6d216a6139)

* [OCPBUGS-14708](https://issues.redhat.com/browse/OCPBUGS-14708), [OCPBUGS-19089](https://issues.redhat.com/browse/OCPBUGS-19089), [OCPBUGS-19904](https://issues.redhat.com/browse/OCPBUGS-19904), [OCPBUGS-19906](https://issues.redhat.com/browse/OCPBUGS-19906): Dockerfile: bump OVN to ovn22.12-22.12.1-18.el8fdp [#1881](https://github.com/openshift/ovn-kubernetes/pull/1881)
* [OCPBUGS-18054](https://issues.redhat.com/browse/OCPBUGS-18054): Emit node events only when retry failure [#1837](https://github.com/openshift/ovn-kubernetes/pull/1837)
* [OCPBUGS-18652](https://issues.redhat.com/browse/OCPBUGS-18652): Do not return error if pod IP cannot be retrieved for `deletePeerPod` and perf improvements [#1903](https://github.com/openshift/ovn-kubernetes/pull/1903)
* [OCPBUGS-19432](https://issues.redhat.com/browse/OCPBUGS-19432): Remove stale egressip status entry [#1892](https://github.com/openshift/ovn-kubernetes/pull/1892)
* [OCPBUGS-18586](https://issues.redhat.com/browse/OCPBUGS-18586): Fix OVN SNATing on GR by enabling gateway_mtu on rtoe port of GR [#1856](https://github.com/openshift/ovn-kubernetes/pull/1856)
* [OCPBUGS-18058](https://issues.redhat.com/browse/OCPBUGS-18058): [release-4.12] Create egress firewall with one db transaction [#1835](https://github.com/openshift/ovn-kubernetes/pull/1835)
* [OCPBUGS-17675](https://issues.redhat.com/browse/OCPBUGS-17675): Don't return error on delete event that doesn't ave a chance to succeed. [#1814](https://github.com/openshift/ovn-kubernetes/pull/1814)
* [OCPBUGS-17522](https://issues.redhat.com/browse/OCPBUGS-17522): [release-4.12] libovsdb: give monitor setup time to process than normal transactions [#1808](https://github.com/openshift/ovn-kubernetes/pull/1808)
* [OCPBUGS-16336](https://issues.redhat.com/browse/OCPBUGS-16336): Backport support AllocateLoadBalancerNodePortsFalse [#1766](https://github.com/openshift/ovn-kubernetes/pull/1766)
* [OCPBUGS-15593](https://issues.redhat.com/browse/OCPBUGS-15593): ovnkube-master pod failed to reconnect to ovn db due to ssl expire [#1730](https://github.com/openshift/ovn-kubernetes/pull/1730)
* [OCPBUGS-15719](https://issues.redhat.com/browse/OCPBUGS-15719): [relase-4.12] Fix egressFirewall create error handling [#1746](https://github.com/openshift/ovn-kubernetes/pull/1746)
* [OCPBUGS-13744](https://issues.redhat.com/browse/OCPBUGS-13744): Improve syncNodes to remove stale data [#1732](https://github.com/openshift/ovn-kubernetes/pull/1732)
* [OCPBUGS-13885](https://issues.redhat.com/browse/OCPBUGS-13885): [release-4.12] Drop packets that were not properly SNATed [#1679](https://github.com/openshift/ovn-kubernetes/pull/1679)
* [OCPBUGS-15388](https://issues.redhat.com/browse/OCPBUGS-15388): Fix stale SNAT entries for completed pods [#1723](https://github.com/openshift/ovn-kubernetes/pull/1723)
* [OCPBUGS-15709](https://issues.redhat.com/browse/OCPBUGS-15709): [release-4.12] Remove non-existing functions test. [#1739](https://github.com/openshift/ovn-kubernetes/pull/1739)
* [OCPBUGS-15424](https://issues.redhat.com/browse/OCPBUGS-15424): [release-4.12] Fix network policy to work with long namespace names [#1725](https://github.com/openshift/ovn-kubernetes/pull/1725)
* [OCPBUGS-14982](https://issues.redhat.com/browse/OCPBUGS-14982): Validate port before deleting conntrack flow [#1713](https://github.com/openshift/ovn-kubernetes/pull/1713)
* [OCPBUGS-14041](https://issues.redhat.com/browse/OCPBUGS-14041): Fix bug that resulted in routes not be restored to a new vnic [#1681](https://github.com/openshift/ovn-kubernetes/pull/1681)
* [OCPBUGS-13953](https://issues.redhat.com/browse/OCPBUGS-13953): [release-4.12] Use loadbalancer.Name as client index [#1680](https://github.com/openshift/ovn-kubernetes/pull/1680)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/ce142ecac5f04888793667e87304591a0dcffb5b...b98254032ba9e68e747cc35696ecdc6d216a6139)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/0f141ce9d349fb30755e3d0d7f9f196a91782957)

* [OCPBUGS-14275](https://issues.redhat.com/browse/OCPBUGS-14275): Bump k8s to 1.25.10 [#27](https://github.com/openshift/route-controller-manager/pull/27)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/9e74d175e81ef6a2beb3718398e3fc99dded037c...0f141ce9d349fb30755e3d0d7f9f196a91782957)


### [tests](https://github.com/openshift/origin/tree/b771de0149ac986322d82b2d9315f4342148d398)

* [OCPBUGS-18527](https://issues.redhat.com/browse/OCPBUGS-18527): Ignore timeout and connection refused errors during upgrade tests for 4.12 [#28270](https://github.com/openshift/origin/pull/28270)
* [OCPBUGS-18309](https://issues.redhat.com/browse/OCPBUGS-18309): Add missing watch permission for console users [#28234](https://github.com/openshift/origin/pull/28234)
* [OCPBUGS-16696](https://issues.redhat.com/browse/OCPBUGS-16696): Wait for DNS DS pods to be ready [#28083](https://github.com/openshift/origin/pull/28083)
* [OCPBUGS-16243](https://issues.redhat.com/browse/OCPBUGS-16243): allow cluster-config-operator to manage featuregate upgrade block [#28055](https://github.com/openshift/origin/pull/28055)
* [OCPBUGS-15933](https://issues.redhat.com/browse/OCPBUGS-15933): remove references to registry.centos.org [#28033](https://github.com/openshift/origin/pull/28033)
* [CCO-367](https://issues.redhat.com/browse/CCO-367): Allow CCO to be Upgradeable=False when credentialsMode=Manual [#27941](https://github.com/openshift/origin/pull/27941)
* [Full changelog](https://github.com/openshift/origin/compare/ee1864ff11ea70c6cec497ecd49470a23fc636bb...b771de0149ac986322d82b2d9315f4342148d398)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/942e50171c92cfdc15d333c9ad913fe979d22b80)

* [OCPBUGS-14312](https://issues.redhat.com/browse/OCPBUGS-14312): Update 4.12 against v2.7.1 [#81](https://github.com/openshift/vmware-vsphere-csi-driver/pull/81)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/0eda8a0d61cdfc88e57d23b6c0b9f1b11ae7a731...942e50171c92cfdc15d333c9ad913fe979d22b80)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/1271ebf60c32e2141276a80740ce710304b415aa)

* [OCPBUGS-18131](https://issues.redhat.com/browse/OCPBUGS-18131): Block upgrade to 4.13 via  admin ack [#171](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/171)
* [OCPBUGS-18333](https://issues.redhat.com/browse/OCPBUGS-18333): disable controller hostNetwork [#167](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/167)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/64cb29dc4ccfe90b86f47745d14dc3eb0470b33c...1271ebf60c32e2141276a80740ce710304b415aa)