# 4.13.0-0.nightly-2024-11-05-184501

Created: 2024-11-05 18:50:20 +0000 UTC

Image Digest: `sha256:f7d0380e01cb823ddbc6157b0a5b2ae36b4074c04a3904fc7c242d7b5820d687`


## Changes from 4.12.68

### Components

* Kubernetes upgraded from 1.25.16 to 1.26.15
* Red Hat Enterprise Linux CoreOS upgraded from 412.86.202410300039-0 to 413.92.202411050056-0


### New images

* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [4d1c58e2](https://github.com/openshift/cloud-provider-nutanix/commit/4d1c58e2b97f00e64ab4332d18dfdd531fb9cc4e) `sha256:824a15a1426bd3c7cb894ad48b072277df6168ed961818c9eae55cb2030ec007`
* [ovn-kubernetes-microshift-rhel-9](https://github.com/openshift/ovn-kubernetes) git [72f151a6](https://github.com/openshift/ovn-kubernetes/commit/72f151a69b6c549828382f87c42b914b938a8dc9) `sha256:78c2d3783f057f0f13212b70ba17ced8c9a8bad3f45ad28a467430d9432c19aa`
* [ovn-kubernetes-rhel-9](https://github.com/openshift/ovn-kubernetes) git [72f151a6](https://github.com/openshift/ovn-kubernetes/commit/72f151a69b6c549828382f87c42b914b938a8dc9) `sha256:ebe10925d222eeca7132f86ff9dbc9fafbefa314f077897067db05fcfff4b591`
* rhel-coreos `sha256:0603f33eb56c5d37c4a65ab82a4f4c34cc229876429a8bd9ce60b330374359f0`
* rhel-coreos-extensions `sha256:60e4b745500456451c0d0419a6472968a67d93148bb7612a6ae56e13bdd33aec`


### Removed images

* openstack-machine-controllers
* ovn-kubernetes
* ovn-kubernetes-microshift
* rhel-coreos-8
* rhel-coreos-8-extensions


### Rebuilt images without code change

* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [f56c606a](https://github.com/openshift/apiserver-network-proxy/commit/f56c606ae15041b0c981e654ab577d2b0a3a0a8f) `sha256:71e597fbbdcf0667ed47fafeb01bc8872c816e4c382b32cbd27c1dd1aa91eb43`
* machine-os-content `sha256:221b089293c38b51caf0f8ac36103196c8444e46ef036f17904935652c5e3601`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/ec6e27b020dd607995b494589c607442cb1639d6)

* [OCPBUGS-13611](https://issues.redhat.com/browse/OCPBUGS-13611): Update version go-http-metrics/gin (#6919) [#6919](https://github.com/openshift/assisted-service/pull/6919)
* [MGMT-17595](https://issues.redhat.com/browse/MGMT-17595): Bump x/net to v0.24.0 to mitigate CVE-2023-45288 (#6215) [#6215](https://github.com/openshift/assisted-service/pull/6215)
* [MGMT-17588](https://issues.redhat.com/browse/MGMT-17588): Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#6202) [#6202](https://github.com/openshift/assisted-service/pull/6202)
* [MGMT-17541](https://issues.redhat.com/browse/MGMT-17541): Replace broken golangci reference (#6196) [#6196](https://github.com/openshift/assisted-service/pull/6196)
* NO-ISSUE: replace postgres images as current one disappeared from quay (#6133) [#6133](https://github.com/openshift/assisted-service/pull/6133)
* [MGMT-15150](https://issues.redhat.com/browse/MGMT-15150): Use same installer binary for all platform types (#5346) [#5346](https://github.com/openshift/assisted-service/pull/5346)
* [MGMT-13947](https://issues.redhat.com/browse/MGMT-13947): Revert assisted boot reporter service (#5292) [#5292](https://github.com/openshift/assisted-service/pull/5292)
* [OCPBUGS-13083](https://issues.redhat.com/browse/OCPBUGS-13083): Support by-path root device hints (#5213) [#5213](https://github.com/openshift/assisted-service/pull/5213)
* [OCPBUGS-13356](https://issues.redhat.com/browse/OCPBUGS-13356): Fix 'vendor' root device hint evaluation (#5204) [#5204](https://github.com/openshift/assisted-service/pull/5204)
* manifests: Add a shebang to NM dispatcher script (#5085) [#5085](https://github.com/openshift/assisted-service/pull/5085)
* bminventory: throw Bad Request error on arm64 Nutanix clusters (#4906) [#4906](https://github.com/openshift/assisted-service/pull/4906)
* Revert "MGMT-13471: SNO installation with OCP 4.13 lacks proper dnsmasq configuration (#4939)" (#5012) [#4939](https://github.com/openshift/assisted-service/pull/4939)
* NO-ISSUE: customize the image path for disk creation (#5010) [#5010](https://github.com/openshift/assisted-service/pull/5010)
* [MGMT-13445](https://issues.redhat.com/browse/MGMT-13445): Update Assisted Installer with the new LVMS requirements (#4986) [#4986](https://github.com/openshift/assisted-service/pull/4986)
* [MGMT-12956](https://issues.redhat.com/browse/MGMT-12956): Add feature IDs for ppc64le and s390x (#5008) [#5008](https://github.com/openshift/assisted-service/pull/5008)
* add 4.13 multi ec.3 dev preview images (#5005) [#5005](https://github.com/openshift/assisted-service/pull/5005)
* NO-ISSUE: Bump gorm.io/gorm from 1.23.8 to 1.24.5 (#5006) [#5006](https://github.com/openshift/assisted-service/pull/5006)
* [MGMT-13580](https://issues.redhat.com/browse/MGMT-13580): GC orphan hosts (#4997) [#4997](https://github.com/openshift/assisted-service/pull/4997)
* Make get_image_without_tag work when registry has a port (#5007) [#5007](https://github.com/openshift/assisted-service/pull/5007)
* [MGMT-13374](https://issues.redhat.com/browse/MGMT-13374): support Nutanix in kube-api (#4996) [#4996](https://github.com/openshift/assisted-service/pull/4996)
* Updating ose-agent-installer-api-server images to be consistent with ART (#4752) [#4752](https://github.com/openshift/assisted-service/pull/4752)
* Revert "Increase timeout waiting for image-service (#4871)" (#5001) [#4871](https://github.com/openshift/assisted-service/pull/4871)
* Use the correct env var for the hub release image mirror (#4998) [#4998](https://github.com/openshift/assisted-service/pull/4998)
* [MGMT-12547](https://issues.redhat.com/browse/MGMT-12547): Enhancement doc "api-for-skipping-validations" (#4870) [#4870](https://github.com/openshift/assisted-service/pull/4870)
* Add registry config for ironic agent image (#4995) [#4995](https://github.com/openshift/assisted-service/pull/4995)
* [MGMT-13274](https://issues.redhat.com/browse/MGMT-13274): Update time-synced-between-host-and-service message to remove bad advice (#4994) [#4994](https://github.com/openshift/assisted-service/pull/4994)
* [MGMT-13521](https://issues.redhat.com/browse/MGMT-13521): Clearer messaging when non-overlapping-subnets validation is pending. (#4993) [#4993](https://github.com/openshift/assisted-service/pull/4993)
* [MGMT-13204](https://issues.redhat.com/browse/MGMT-13204): Implement skipping of host and cluster validations (#4907) [#4907](https://github.com/openshift/assisted-service/pull/4907)
* [MGMT-13708](https://issues.redhat.com/browse/MGMT-13708): allow overriding image service image in subscription (#4985) [#4985](https://github.com/openshift/assisted-service/pull/4985)
* [MGMT-13454](https://issues.redhat.com/browse/MGMT-13454): Group Host and boot logs to a single tarball (#4975) [#4975](https://github.com/openshift/assisted-service/pull/4975)
* [MGMT-13711](https://issues.redhat.com/browse/MGMT-13711): it takes the assisted-service few minutes to notice that the cluster installation is completed (#4988) [#4988](https://github.com/openshift/assisted-service/pull/4988)
* [MGMT-13620](https://issues.redhat.com/browse/MGMT-13620): Make worker to use custom MCP if it was set as part of the host DB record (#4976) [#4976](https://github.com/openshift/assisted-service/pull/4976)
* [MGMT-13549](https://issues.redhat.com/browse/MGMT-13549): Day1 implementation for K8S node labels (#4972) [#4972](https://github.com/openshift/assisted-service/pull/4972)
* NO-ISSUE: Add logs to supported-platforms (#4982) [#4982](https://github.com/openshift/assisted-service/pull/4982)
* [MGMT-13045](https://issues.redhat.com/browse/MGMT-13045): Enhancement document for node labeling (#4826) [#4826](https://github.com/openshift/assisted-service/pull/4826)
* [MGMT-13682](https://issues.redhat.com/browse/MGMT-13682): Gather host logs on failure in day2 flow (#4983) [#4983](https://github.com/openshift/assisted-service/pull/4983)
* [MGMT-13292](https://issues.redhat.com/browse/MGMT-13292): Add the installed version of the OLM operators in the monitor operators response (#4961) [#4961](https://github.com/openshift/assisted-service/pull/4961)
* [MGMT-13471](https://issues.redhat.com/browse/MGMT-13471): SNO installation with OCP 4.13 lacks proper dnsmasq configuration (#4939) [#4939](https://github.com/openshift/assisted-service/pull/4939)
* [MGMT-13487](https://issues.redhat.com/browse/MGMT-13487): handle day2 cluster authz (#4973) [#4973](https://github.com/openshift/assisted-service/pull/4973)
* NO-ISSUE: added ENABLE_ORG_TENANCY to deploy-test target (#4974) [#4974](https://github.com/openshift/assisted-service/pull/4974)
* [MGMT-11805](https://issues.redhat.com/browse/MGMT-11805): `docs/change-iso-password.sh` lint (#4971) [#4971](https://github.com/openshift/assisted-service/pull/4971)
* NO-ISSUE: Add scenarios to consider to enhancement template (#4964) [#4964](https://github.com/openshift/assisted-service/pull/4964)
* [MGMT-11805](https://issues.redhat.com/browse/MGMT-11805): Dedicated `.sh` file for the `docs/change-iso-password.sh` script (#4970) [#4970](https://github.com/openshift/assisted-service/pull/4970)
* [MGMT-13526](https://issues.redhat.com/browse/MGMT-13526): Fix wrong subscription name on pre-release versions (#4957) [#4957](https://github.com/openshift/assisted-service/pull/4957)
* [MGMT-13203](https://issues.redhat.com/browse/MGMT-13203): Create REST points for validation ignore feature. (#4927) [#4927](https://github.com/openshift/assisted-service/pull/4927)
* Allow Agent installer to use aarch64 (#4441) [#4441](https://github.com/openshift/assisted-service/pull/4441)
* [MGMT-13505](https://issues.redhat.com/browse/MGMT-13505): allow to edit ignition url in kube-api (#4967) [#4967](https://github.com/openshift/assisted-service/pull/4967)
* [MGMT-13447](https://issues.redhat.com/browse/MGMT-13447): Fix LVM subscription name is empty on SNO CNV (#4963) [#4963](https://github.com/openshift/assisted-service/pull/4963)
* [MGMT-13548](https://issues.redhat.com/browse/MGMT-13548): add feature-support-level list for 4.13 (#4962) [#4962](https://github.com/openshift/assisted-service/pull/4962)
* NO-ISSUE: Add destroy to deploy_capi_cluster.sh (#4960) [#4960](https://github.com/openshift/assisted-service/pull/4960)
* [MGMT-13302](https://issues.redhat.com/browse/MGMT-13302): Return a bad request if the user wants to install not supported operator for arm64 cluster (#4930) [#4930](https://github.com/openshift/assisted-service/pull/4930)
* [MGMT-12535](https://issues.redhat.com/browse/MGMT-12535): Service implementation for verify-vips (#4925) [#4925](https://github.com/openshift/assisted-service/pull/4925)
* Remove references to edge-infrastrcuture/psql image (#4950) [#4950](https://github.com/openshift/assisted-service/pull/4950)
* NO-ISSUE: Add logs to getOLMOperators LVm flow (#4959) [#4959](https://github.com/openshift/assisted-service/pull/4959)
* [MGMT-13462](https://issues.redhat.com/browse/MGMT-13462): Fix disk encryption validation pending (#4958) [#4958](https://github.com/openshift/assisted-service/pull/4958)
* Add automatic `ShellCheck` linting for `assisted-boot-reporter.sh` (#4945) [#4945](https://github.com/openshift/assisted-service/pull/4945)
* [MGMT-12329](https://issues.redhat.com/browse/MGMT-12329): Implements assisted boot reporter and add to ignition (#4543) [#4543](https://github.com/openshift/assisted-service/pull/4543)
* OKD: update to OKD 4.12 (#4922) [#4922](https://github.com/openshift/assisted-service/pull/4922)
* Verify detached annotation (#4941) [#4941](https://github.com/openshift/assisted-service/pull/4941)
* NO-ISSUE: skipper error when podman is missing (#4953) [#4953](https://github.com/openshift/assisted-service/pull/4953)
* [MGMT-13493](https://issues.redhat.com/browse/MGMT-13493): stream model data instead of DB data (#4947) [#4947](https://github.com/openshift/assisted-service/pull/4947)
* Enable converged flow by default (#4935) [#4935](https://github.com/openshift/assisted-service/pull/4935)
* [MGMT-13305](https://issues.redhat.com/browse/MGMT-13305): Fix invalid lvms version installed on 4.11 (#4942) [#4942](https://github.com/openshift/assisted-service/pull/4942)
* NO-ISSUE: add method to access log (#4944) [#4944](https://github.com/openshift/assisted-service/pull/4944)
* [MGMT-12714](https://issues.redhat.com/browse/MGMT-12714): Define RAID drive type (#4937) [#4937](https://github.com/openshift/assisted-service/pull/4937)
* Fix support_level value for 4.12 to fully supported (#4938) [#4938](https://github.com/openshift/assisted-service/pull/4938)
* [MGMT-13008](https://issues.redhat.com/browse/MGMT-13008): ignition size validation on register infraenv (#4934) [#4934](https://github.com/openshift/assisted-service/pull/4934)
* [MGMT-13317](https://issues.redhat.com/browse/MGMT-13317): missing transition on refresh when media is disconnected (#4931) [#4931](https://github.com/openshift/assisted-service/pull/4931)
* [MGMT-12996](https://issues.redhat.com/browse/MGMT-12996): enhancement for dynamic OCP fetching (#4893) [#4893](https://github.com/openshift/assisted-service/pull/4893)
* NO-ISSUE: Update 4.13 release images to ec.2 (#4933) [#4933](https://github.com/openshift/assisted-service/pull/4933)
* [MGMT-12193](https://issues.redhat.com/browse/MGMT-12193): Add enhancement doc for collecting on-prem data (#4457) [#4457](https://github.com/openshift/assisted-service/pull/4457)
* NO-ISSUE: rename event that was erroneusly named as InfraEnv (#4928) [#4928](https://github.com/openshift/assisted-service/pull/4928)
* NO-ISSUE: explicitly declare timeout (#4926) [#4926](https://github.com/openshift/assisted-service/pull/4926)
* [MGMT-13432](https://issues.redhat.com/browse/MGMT-13432): fire and forget kafka messages for event notification (#4924) [#4924](https://github.com/openshift/assisted-service/pull/4924)
* remove testing log message (#4920) [#4920](https://github.com/openshift/assisted-service/pull/4920)
* [MGMT-13327](https://issues.redhat.com/browse/MGMT-13327): MGMT-13300: Add support with 4.13 dev preview images (#4898) [#4898](https://github.com/openshift/assisted-service/pull/4898)
* update lvm subscription and the min version for lvm (#4899) [#4899](https://github.com/openshift/assisted-service/pull/4899)
* Disable installation on FC disks (#4918) [#4918](https://github.com/openshift/assisted-service/pull/4918)
* [MGMT-13229](https://issues.redhat.com/browse/MGMT-13229): Allow setting Joined to sno installation stages (#4903) [#4903](https://github.com/openshift/assisted-service/pull/4903)
* Revert "bm_inventory: use HTTPS if possible for day2 workers (#4150)" (#4781) [#4150](https://github.com/openshift/assisted-service/pull/4150)
* [MGMT-12697](https://issues.redhat.com/browse/MGMT-12697): Add `ENABLE_REJECT_UNKNOWN_FIELDS` to SaaS template (#4916) [#4916](https://github.com/openshift/assisted-service/pull/4916)
* [MGMT-12292](https://issues.redhat.com/browse/MGMT-12292): stream events to kafka stream (#4823) [#4823](https://github.com/openshift/assisted-service/pull/4823)
* [MGMT-12975](https://issues.redhat.com/browse/MGMT-12975): Update 4.12 release image to use GA version (#4912) [#4912](https://github.com/openshift/assisted-service/pull/4912)
* [MGMT-13342](https://issues.redhat.com/browse/MGMT-13342): Git fails to trust git repository because of mismatch with files (#4908) [#4908](https://github.com/openshift/assisted-service/pull/4908)
* [MGMT-12970](https://issues.redhat.com/browse/MGMT-12970): don't reset auto-assign for irrelevant hosts (#4891) [#4891](https://github.com/openshift/assisted-service/pull/4891)
* bump version for hacking LSO catalog (#4753) [#4753](https://github.com/openshift/assisted-service/pull/4753)
* Fix iPXE ZTP host connectivity during initramfs (#4902) [#4902](https://github.com/openshift/assisted-service/pull/4902)
* [MGMT-13138](https://issues.redhat.com/browse/MGMT-13138): Improve messaging over host connectivity. (#4895) [#4895](https://github.com/openshift/assisted-service/pull/4895)
* [MGMT-12405](https://issues.redhat.com/browse/MGMT-12405): Enclose API endpoint with brackets if IPv6 address (#4900) [#4900](https://github.com/openshift/assisted-service/pull/4900)
* [MGMT-13008](https://issues.redhat.com/browse/MGMT-13008): validation for ignition image size (#4894) [#4894](https://github.com/openshift/assisted-service/pull/4894)
* Setting minikube registry addon to use images from quay.io (#4897) [#4897](https://github.com/openshift/assisted-service/pull/4897)
* [MGMT-10785](https://issues.redhat.com/browse/MGMT-10785): report failing cluster operators (#4864) [#4864](https://github.com/openshift/assisted-service/pull/4864)
* BMH: add another fallback location for spoke's root CA (#4883) [#4883](https://github.com/openshift/assisted-service/pull/4883)
* [MGMT-13240](https://issues.redhat.com/browse/MGMT-13240): Create ip hint file in sno installation even if there is (#4892) [#4892](https://github.com/openshift/assisted-service/pull/4892)
* [MGMT-13271](https://issues.redhat.com/browse/MGMT-13271): Update 4.12 release images to use the latest rc version (#4890) [#4890](https://github.com/openshift/assisted-service/pull/4890)
* [MGMT-12312](https://issues.redhat.com/browse/MGMT-12312): Adds node-boot log type (#4529) [#4529](https://github.com/openshift/assisted-service/pull/4529)
* NO-ISSUE: When comparing VIPs, compare only IPs (#4882) [#4882](https://github.com/openshift/assisted-service/pull/4882)
* [MGMT-12423](https://issues.redhat.com/browse/MGMT-12423): Watch for Agent changes in ClusterDeployment (#4793) [#4793](https://github.com/openshift/assisted-service/pull/4793)
* [MGMT-7878](https://issues.redhat.com/browse/MGMT-7878): storage config doc using MachineConfig manifest (#4873) [#4873](https://github.com/openshift/assisted-service/pull/4873)
* inventory: limit allowed Nutanix versions in API (#4878) [#4878](https://github.com/openshift/assisted-service/pull/4878)
* [MGMT-12655](https://issues.redhat.com/browse/MGMT-12655): Add installation disk ID to  Agent's status (#4865) [#4865](https://github.com/openshift/assisted-service/pull/4865)
* [MGMT-12655](https://issues.redhat.com/browse/MGMT-12655): Set Agent's installation disk ID only if hints exist (#4856) [#4856](https://github.com/openshift/assisted-service/pull/4856)
* [MGMT-10869](https://issues.redhat.com/browse/MGMT-10869): Forbid multiple machine networks in single-stack clusters (#4867) [#4867](https://github.com/openshift/assisted-service/pull/4867)
* [MGMT-11979](https://issues.redhat.com/browse/MGMT-11979): verify install-config for none platform (#4844) [#4844](https://github.com/openshift/assisted-service/pull/4844)
* Increase timeout waiting for image-service (#4871) [#4871](https://github.com/openshift/assisted-service/pull/4871)
* [MGMT-11090](https://issues.redhat.com/browse/MGMT-11090): Enhancement Doc: Assisted boot-reporter service (#4444) [#4444](https://github.com/openshift/assisted-service/pull/4444)
* [MGMT-12294](https://issues.redhat.com/browse/MGMT-12294): Run subsystem with deterministic openshift version (#4567) [#4567](https://github.com/openshift/assisted-service/pull/4567)
* [MGMT-13192](https://issues.redhat.com/browse/MGMT-13192): dualstack SNO cluster fails to complete - getting error (#4869) [#4869](https://github.com/openshift/assisted-service/pull/4869)
* Add ppc64le & s390x RHCOS ISOs to configmap - rebase (#4796) [#4796](https://github.com/openshift/assisted-service/pull/4796)
* [MGMT-13081](https://issues.redhat.com/browse/MGMT-13081): Re-enable and fix a negative NNState subsystem test (#4866) [#4866](https://github.com/openshift/assisted-service/pull/4866)
* [MGMT-12273](https://issues.redhat.com/browse/MGMT-12273): Updated logging in PreNetworkConfig script. (#4859) [#4859](https://github.com/openshift/assisted-service/pull/4859)
* [MGMT-13081](https://issues.redhat.com/browse/MGMT-13081): CI to use CentOS8 (#4845) [#4845](https://github.com/openshift/assisted-service/pull/4845)
* [MGMT-12894](https://issues.redhat.com/browse/MGMT-12894): Use the hub release image when determining the ironic agent image (#4798) [#4798](https://github.com/openshift/assisted-service/pull/4798)
* [MGMT-12951](https://issues.redhat.com/browse/MGMT-12951): change log message from lvmo to lvms (#4857) [#4857](https://github.com/openshift/assisted-service/pull/4857)
* [MGMT-13170](https://issues.redhat.com/browse/MGMT-13170): Fix nil pointer dereference in validation if host inventory is nil (#4861) [#4861](https://github.com/openshift/assisted-service/pull/4861)
* [MGMT-13132](https://issues.redhat.com/browse/MGMT-13132): Respond with 409 when rejecting registration (#4858) [#4858](https://github.com/openshift/assisted-service/pull/4858)
* [MGMT-12978](https://issues.redhat.com/browse/MGMT-12978): Handle multiple images with the same OCP version (#4817) [#4817](https://github.com/openshift/assisted-service/pull/4817)
* [MGMT-13080](https://issues.redhat.com/browse/MGMT-13080): [Nutanix] - UMN and machine_network = [] - bootstrap is in insufficient (#4847) [#4847](https://github.com/openshift/assisted-service/pull/4847)
* NO-ISSUE: Small numbering issue in doc, amendment (#4852) [#4852](https://github.com/openshift/assisted-service/pull/4852)
* [MGMT-12154](https://issues.redhat.com/browse/MGMT-12154): Updating documentation to make Day 2 import process clearer. (#4848) [#4848](https://github.com/openshift/assisted-service/pull/4848)
* NO-ISSUE: Bump golang.org/x/sys from 0.1.0 to 0.3.0 (#4850) [#4850](https://github.com/openshift/assisted-service/pull/4850)
* NO-ISSUE: Bump github.com/go-openapi/spec from 0.20.6 to 0.20.7 (#4851) [#4851](https://github.com/openshift/assisted-service/pull/4851)
* [MGMT-13040](https://issues.redhat.com/browse/MGMT-13040): Check cluster state before delete (#4849) [#4849](https://github.com/openshift/assisted-service/pull/4849)
* [MGMT-13098](https://issues.redhat.com/browse/MGMT-13098): fix missing networks on V2GetClusterInstallConfig (#4842) [#4842](https://github.com/openshift/assisted-service/pull/4842)
* NO-ISSUE: improve UpdateMachineCidr (#4846) [#4846](https://github.com/openshift/assisted-service/pull/4846)
* [MGMT-12794](https://issues.redhat.com/browse/MGMT-12794): allow to edit ProvisionRequirement post install (#4843) [#4843](https://github.com/openshift/assisted-service/pull/4843)
* [MGMT-12875](https://issues.redhat.com/browse/MGMT-12875): fail gracefully when konnectivity is missing (#4830) [#4830](https://github.com/openshift/assisted-service/pull/4830)
* [MGMT-6536](https://issues.redhat.com/browse/MGMT-6536): select default cidr in SNO based on default route metrics (#4770) [#4770](https://github.com/openshift/assisted-service/pull/4770)
* [MGMT-12535](https://issues.redhat.com/browse/MGMT-12535): Swagger changes for vip verification (#4841) [#4841](https://github.com/openshift/assisted-service/pull/4841)
* Revert "MGMT-12794: allow to edit ACI post install (#4831)" (#4839) [#4831](https://github.com/openshift/assisted-service/pull/4831)
* [MGMT-13080](https://issues.redhat.com/browse/MGMT-13080): UMN if machine cidr not set no need to validate bootstrap (#4835) [#4835](https://github.com/openshift/assisted-service/pull/4835)
* NO-ISSUE: Bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.4.3 (#4834) [#4834](https://github.com/openshift/assisted-service/pull/4834)
* NO-ISSUE: Bump github.com/go-openapi/strfmt from 0.21.2 to 0.21.3 (#4833) [#4833](https://github.com/openshift/assisted-service/pull/4833)
* [MGMT-12794](https://issues.redhat.com/browse/MGMT-12794): allow to edit ACI post install (#4831) [#4831](https://github.com/openshift/assisted-service/pull/4831)
* [MGMT-11979](https://issues.redhat.com/browse/MGMT-11979): verify install-config manifest in subsystem (#4816) [#4816](https://github.com/openshift/assisted-service/pull/4816)
* NO-ISSUE: disable invalid nmstate test (#4832) [#4832](https://github.com/openshift/assisted-service/pull/4832)
* NO-ISSUE: Pass HA mode of the cluster to network validations (#4774) [#4774](https://github.com/openshift/assisted-service/pull/4774)
* [MGMT-12743](https://issues.redhat.com/browse/MGMT-12743): adds enhancement proposal for shorter image URLs (#4703) [#4703](https://github.com/openshift/assisted-service/pull/4703)
* [MGMT-13038](https://issues.redhat.com/browse/MGMT-13038): Git fails to trust git repository because of mismatch with files (#4822) [#4822](https://github.com/openshift/assisted-service/pull/4822)
* [MGMT-13036](https://issues.redhat.com/browse/MGMT-13036): add emptyDir mount for filesystem cache and ephemeral-storage policy (#4821) [#4821](https://github.com/openshift/assisted-service/pull/4821)
* [MGMT-12755](https://issues.redhat.com/browse/MGMT-12755): Disallow periods in cluster name (#4778) [#4778](https://github.com/openshift/assisted-service/pull/4778)
* NO-ISSUE: Bump github.com/aws/aws-sdk-go from 1.44.51 to 1.44.163 (#4818) [#4818](https://github.com/openshift/assisted-service/pull/4818)
* Provide the inspector URL to the ironic ignition builder (#4779) [#4779](https://github.com/openshift/assisted-service/pull/4779)
* NO-ISSUE: Move SaaS networking documentation to Telco Docs (#4429) [#4429](https://github.com/openshift/assisted-service/pull/4429)
* NO-ISSUE: Bump github.com/go-openapi/swag from 0.21.1 to 0.22.3 (#4813) [#4813](https://github.com/openshift/assisted-service/pull/4813)
* [MGMT-12978](https://issues.redhat.com/browse/MGMT-12978): Append -multi suffix to multi-arch images in SupportedVersions (#4811) [#4811](https://github.com/openshift/assisted-service/pull/4811)
* [MGMT-12880](https://issues.redhat.com/browse/MGMT-12880): Update the wording of statusRebootTimeout (#4805) [#4805](https://github.com/openshift/assisted-service/pull/4805)
* [MGMT-12911](https://issues.redhat.com/browse/MGMT-12911): Update assisted service operator docs with new icsp behavior (#4804) [#4804](https://github.com/openshift/assisted-service/pull/4804)
* [MGMT-12950](https://issues.redhat.com/browse/MGMT-12950): Disable compatible agent validation while installing (#4791) [#4791](https://github.com/openshift/assisted-service/pull/4791)
* [MGMT-12971](https://issues.redhat.com/browse/MGMT-12971): remove 4.12.0.0-0 as openshift hardcoded version in host monitor loop (#4806) [#4806](https://github.com/openshift/assisted-service/pull/4806)
* Bump OCP versions: 4.8, 4.11 (#4807) [#4807](https://github.com/openshift/assisted-service/pull/4807)
* NO-ISSUE: Bump github.com/stretchr/testify from 1.7.2 to 1.8.1 (#4535) [#4535](https://github.com/openshift/assisted-service/pull/4535)
* NO-ISSUE: Changing the way we handle an error from 'updateNetworkParams' from returning 'nil, err' to 'cluster, err' (#4714) [#4714](https://github.com/openshift/assisted-service/pull/4714)
* NO-ISSUE: Add multiarch OCP 4.12 release images (#4795) [#4795](https://github.com/openshift/assisted-service/pull/4795)
* NO-ISSUE: Add danmanor to approvers (#4801) [#4801](https://github.com/openshift/assisted-service/pull/4801)
* [MGMT-12445](https://issues.redhat.com/browse/MGMT-12445): Update host install progress response (#4787) [#4787](https://github.com/openshift/assisted-service/pull/4787)
* [MGMT-12697](https://issues.redhat.com/browse/MGMT-12697): Reject unknown json fields (#4794) [#4794](https://github.com/openshift/assisted-service/pull/4794)
* [MGMT-12366](https://issues.redhat.com/browse/MGMT-12366): Automatically calculate 2nd Machine Network from 2nd VIP (#4761) [#4761](https://github.com/openshift/assisted-service/pull/4761)
* [MGMT-12591](https://issues.redhat.com/browse/MGMT-12591): setting lvmo on non-SNO cluster should return bad request (#4742) [#4742](https://github.com/openshift/assisted-service/pull/4742)
* [MGMT-12237](https://issues.redhat.com/browse/MGMT-12237): Limit upgrade agent events (#4786) [#4786](https://github.com/openshift/assisted-service/pull/4786)
* Bump OCP versions: 4.10 (#4789) [#4789](https://github.com/openshift/assisted-service/pull/4789)
* [MGMT-12886](https://issues.redhat.com/browse/MGMT-12886): fetch CRDs by group in HASC ctrl (#4768) [#4768](https://github.com/openshift/assisted-service/pull/4768)
* [OCPBUGS-2953](https://issues.redhat.com/browse/OCPBUGS-2953): Fix regex to filter images by tag and by sha (#4767) [#4767](https://github.com/openshift/assisted-service/pull/4767)
* Refactor the versions handler into a proper cache (#4645) [#4645](https://github.com/openshift/assisted-service/pull/4645)
* [MGMT-12870](https://issues.redhat.com/browse/MGMT-12870): Add missing dual-stack VIP CRUD for KubeAPI (#4755) [#4755](https://github.com/openshift/assisted-service/pull/4755)
* NO-ISSUE: reduce build image size (#4775) [#4775](https://github.com/openshift/assisted-service/pull/4775)
* [MGMT-12433](https://issues.redhat.com/browse/MGMT-12433): remove text minimum Size 0GB in lvm (#4772) [#4772](https://github.com/openshift/assisted-service/pull/4772)
* Document the ironic agent image behavior for converged flow (#4771) [#4771](https://github.com/openshift/assisted-service/pull/4771)
* NO-ISSUE: Added ZTP workflows to hive integration README.md (#4762) [#4762](https://github.com/openshift/assisted-service/pull/4762)
* [MGMT-12471](https://issues.redhat.com/browse/MGMT-12471): Don't wait for console if it is disabled (#4594) [#4594](https://github.com/openshift/assisted-service/pull/4594)
* Set infra-env kernel params on preprovisioning image (#4757) [#4757](https://github.com/openshift/assisted-service/pull/4757)
* NO-ISSUE: use two logger instance for generic and ocm logging (#4734) [#4734](https://github.com/openshift/assisted-service/pull/4734)
* NO-ISSUE: extract client from reconcile context (#4720) [#4720](https://github.com/openshift/assisted-service/pull/4720)
* Update cluster-baremetal-operator and use GetIronicIP from there (#4491) [#4491](https://github.com/openshift/assisted-service/pull/4491)
* Bump OCP versions: 4.12, 4.9 (#4764) [#4764](https://github.com/openshift/assisted-service/pull/4764)
* NO-ISSUE: Set the correct RAM size in BMH HardwareDetails (#4453) [#4453](https://github.com/openshift/assisted-service/pull/4453)
* [TELCODOCS-831](https://issues.redhat.com/browse/TELCODOCS-831): Document capabilities exclusion (#4213) [#4213](https://github.com/openshift/assisted-service/pull/4213)
* [OCPBUGS-1683](https://issues.redhat.com/browse/OCPBUGS-1683): Assisted-install failing with None platform when multiple IP interfaces configured (#4750) [#4750](https://github.com/openshift/assisted-service/pull/4750)
* oMGMT-12169: Changing the cluster's validation message when disks size is not sufficient (#4729) [#4729](https://github.com/openshift/assisted-service/pull/4729)
* NO-ISSUE: edit HASC enhancement doc (#4756) [#4756](https://github.com/openshift/assisted-service/pull/4756)
* [MGMT-9915](https://issues.redhat.com/browse/MGMT-9915): Fix sample CRs for dual-stack VIPs (#4758) [#4758](https://github.com/openshift/assisted-service/pull/4758)
* [MGMT-12759](https://issues.redhat.com/browse/MGMT-12759): Reinstate assisted NMState Go binding (#4698) [#4698](https://github.com/openshift/assisted-service/pull/4698)
* [MGMT-9915](https://issues.redhat.com/browse/MGMT-9915): Prepare sample CRs for dual-stack VIPs (#4754) [#4754](https://github.com/openshift/assisted-service/pull/4754)
* NO-ISSUE: Fix wrong unit test for CIDR autoallocation (#4736) (#4459) [#4736](https://github.com/openshift/assisted-service/pull/4736)
* [MGMT-12366](https://issues.redhat.com/browse/MGMT-12366): Allow to use UpdateMachineCidr for multiple networks (#4747) [#4747](https://github.com/openshift/assisted-service/pull/4747)
* [MGMT-12863](https://issues.redhat.com/browse/MGMT-12863): Assisted Spoke install-config does not generate icsp with multiple mirror to entries (#4745) [#4745](https://github.com/openshift/assisted-service/pull/4745)
* Use policy/v1 for pod disruption budget (#4746) [#4746](https://github.com/openshift/assisted-service/pull/4746)
* Split the os versions handling from the release image handling (#4737) [#4737](https://github.com/openshift/assisted-service/pull/4737)
* Bump OCP versions: 4.12 (#4741) [#4741](https://github.com/openshift/assisted-service/pull/4741)
* [OKD-90](https://issues.redhat.com/browse/OKD-90): execute should throw a warning (#4739) [#4739](https://github.com/openshift/assisted-service/pull/4739)
* [OCPBUGS-4493](https://issues.redhat.com/browse/OCPBUGS-4493): do not mutate ACI post installation start (#4723) [#4723](https://github.com/openshift/assisted-service/pull/4723)
* NO-ISSUE: Fix wrong unit test for CIDR autoallocation (#4736) [#4736](https://github.com/openshift/assisted-service/pull/4736)
* Use the cluster version when extracting the ironic agent image from a release (#4727) [#4727](https://github.com/openshift/assisted-service/pull/4727)
* NO-ISSUE: Explicitly finish mock controllers in cluster transition tests (#4617) [#4617](https://github.com/openshift/assisted-service/pull/4617)
* [MGMT-12648](https://issues.redhat.com/browse/MGMT-12648): Update operator bundle channel (#4732) [#4732](https://github.com/openshift/assisted-service/pull/4732)
* [MGMT-12634](https://issues.redhat.com/browse/MGMT-12634): Create new allow-add-hosts endpoint (#4661) [#4661](https://github.com/openshift/assisted-service/pull/4661)
* Move API handlers to a separate struct (#4728) [#4728](https://github.com/openshift/assisted-service/pull/4728)
* [MGMT-11506](https://issues.redhat.com/browse/MGMT-11506): Present a more useful validation message for packet loss (#4717) [#4717](https://github.com/openshift/assisted-service/pull/4717)
* NO-ISSUE:  Verify that GORM embedded structure is always part of containing structure (#4730) [#4730](https://github.com/openshift/assisted-service/pull/4730)
* [MGMT-12662](https://issues.redhat.com/browse/MGMT-12662): Add API documentation for Live ISO kernel arguments customization (#4669) [#4669](https://github.com/openshift/assisted-service/pull/4669)
* [MGMT-9915](https://issues.redhat.com/browse/MGMT-9915): Enhancement for dual-stack VIPs (#4245) [#4245](https://github.com/openshift/assisted-service/pull/4245)
* [MGMT-12423](https://issues.redhat.com/browse/MGMT-12423): Use pointers when collecting Agents from ACI (#4570) [#4570](https://github.com/openshift/assisted-service/pull/4570)
* Bump OCP versions: 4.11 (#4722) [#4722](https://github.com/openshift/assisted-service/pull/4722)
* NO-ISSUE: Bump github.com/moby/moby (#4721) [#4721](https://github.com/openshift/assisted-service/pull/4721)
* [MGMT-12400](https://issues.redhat.com/browse/MGMT-12400): enable pprof when debug mode for memory profiling (#4712) [#4712](https://github.com/openshift/assisted-service/pull/4712)
* [MGMT-12797](https://issues.redhat.com/browse/MGMT-12797): Missing dual-stack VIP values in SNO cluster (#4710) [#4710](https://github.com/openshift/assisted-service/pull/4710)
* [MGMT-12749](https://issues.redhat.com/browse/MGMT-12749): BMH: add fallback location for spoke's root CA (#4696) [#4696](https://github.com/openshift/assisted-service/pull/4696)
* OKD: extract manifests if available (#4715) [#4715](https://github.com/openshift/assisted-service/pull/4715)
* [MGMT-11455](https://issues.redhat.com/browse/MGMT-11455): Add formal API to allow users to set an additional trust bundle (#4447) [#4447](https://github.com/openshift/assisted-service/pull/4447)
* [MGMT-12806](https://issues.redhat.com/browse/MGMT-12806): Allow registration when pending for input (#4718) [#4718](https://github.com/openshift/assisted-service/pull/4718)
* [MGMT-10376](https://issues.redhat.com/browse/MGMT-10376): Adding a feature usage flag for setting UserManagedNetworking flag in a non-SNO configuration (#4579) [#4579](https://github.com/openshift/assisted-service/pull/4579)
* [MGMT-11386](https://issues.redhat.com/browse/MGMT-11386): approve day2 CSRs for an agent without BMH (#4691) [#4691](https://github.com/openshift/assisted-service/pull/4691)
* Bump OCP versions: 4.8 (#4702) [#4702](https://github.com/openshift/assisted-service/pull/4702)
* [MGMT-12423](https://issues.redhat.com/browse/MGMT-12423): Additional debug logs when collecting Agents from ACI (#4704) [#4704](https://github.com/openshift/assisted-service/pull/4704)
* [MGMT-11536](https://issues.redhat.com/browse/MGMT-11536): refresh cluster after host deletion (#4666) [#4666](https://github.com/openshift/assisted-service/pull/4666)
* [MGMT-12388](https://issues.redhat.com/browse/MGMT-12388): Forbid dual-stack VIPs for OpenShift pre-4.12 (#4694) [#4694](https://github.com/openshift/assisted-service/pull/4694)
* docs: add platform integration enhancement (#4192) [#4192](https://github.com/openshift/assisted-service/pull/4192)
* NO-ISSUE: move grafana dashboards to other repository (#4701) [#4701](https://github.com/openshift/assisted-service/pull/4701)
* Bump OCP versions: 4.10, 4.12 (#4693) [#4693](https://github.com/openshift/assisted-service/pull/4693)
* NO-ISSUE: Enable state machine documentation (#4680) [#4680](https://github.com/openshift/assisted-service/pull/4680)
* Remove ValidateAccessToMultiarch function (#4630) [#4630](https://github.com/openshift/assisted-service/pull/4630)
* Revert "MGMT-11506: Present a more useful validation message for packet loss (#4358)" (#4695) [#4358](https://github.com/openshift/assisted-service/pull/4358)
* [MGMT-12666](https://issues.redhat.com/browse/MGMT-12666): Document Unauthenticated Registries (#4692) [#4692](https://github.com/openshift/assisted-service/pull/4692)
* [MGMT-12616](https://issues.redhat.com/browse/MGMT-12616): Reject register after install (#4665) [#4665](https://github.com/openshift/assisted-service/pull/4665)
* [MGMT-12723](https://issues.redhat.com/browse/MGMT-12723): Fix log formatting in inventory.go (#4679) [#4679](https://github.com/openshift/assisted-service/pull/4679)
* [MGMT-12635](https://issues.redhat.com/browse/MGMT-12635): Add icsp-file support for all oc commands (#4684) [#4684](https://github.com/openshift/assisted-service/pull/4684)
* [MGMT-12627](https://issues.redhat.com/browse/MGMT-12627): Add Multiple VIPs support for state machine validators (#4643) [#4643](https://github.com/openshift/assisted-service/pull/4643)
* [MGMT-12389](https://issues.redhat.com/browse/MGMT-12389): Add feature usage for dual-stack VIPs (#4596) [#4596](https://github.com/openshift/assisted-service/pull/4596)
* [MGMT-12360](https://issues.redhat.com/browse/MGMT-12360): Pass multiple VIPs down to install-config on OCP >=4.12 (#4573) [#4573](https://github.com/openshift/assisted-service/pull/4573)
* MGMT-12684 add envoy as sidecar to produce access log (#4670) [#4670](https://github.com/openshift/assisted-service/pull/4670)
* Small doc addition for OLM operator plugins (#4689) [#4689](https://github.com/openshift/assisted-service/pull/4689)
* Bump OCP versions: 4.11 (#4688) [#4688](https://github.com/openshift/assisted-service/pull/4688)
* [MGMT-12355](https://issues.redhat.com/browse/MGMT-12355): API and Ingress VIPs CRUD implementation (#4568) [#4568](https://github.com/openshift/assisted-service/pull/4568)
* bm_inventory: use HTTPS if possible for day2 workers (#4150) [#4150](https://github.com/openshift/assisted-service/pull/4150)
* NO-ISSUE: Bump github.com/go-openapi/errors from 0.20.2 to 0.20.3 (#4681) [#4681](https://github.com/openshift/assisted-service/pull/4681)
* [MGMT-12678](https://issues.redhat.com/browse/MGMT-12678): Deprecate API and Ingress VIP (Singular) (#4668) [#4668](https://github.com/openshift/assisted-service/pull/4668)
* NO-ISSUE: add unauthenticatedRegistries to HASC on deploy (#4676) [#4676](https://github.com/openshift/assisted-service/pull/4676)
* [MGMT-11813](https://issues.redhat.com/browse/MGMT-11813): how to install HASC doc (#4663) [#4663](https://github.com/openshift/assisted-service/pull/4663)
* Bump OCP versions: 4.11 (#4674) [#4674](https://github.com/openshift/assisted-service/pull/4674)
* [MGMT-12686](https://issues.redhat.com/browse/MGMT-12686): Allow installing on FC disks (#4671) [#4671](https://github.com/openshift/assisted-service/pull/4671)
* Bump OCP versions: 4.9 (#4667) [#4667](https://github.com/openshift/assisted-service/pull/4667)
* [MGMT-8789](https://issues.redhat.com/browse/MGMT-8789): Improve UX setting PUBLIC_CONTAINER_REGISTRIES (#4552) [#4552](https://github.com/openshift/assisted-service/pull/4552)
* [MGMT-12466](https://issues.redhat.com/browse/MGMT-12466): Add feature usage for discovery kernel arguments (#4659) [#4659](https://github.com/openshift/assisted-service/pull/4659)
* [MGMT-12379](https://issues.redhat.com/browse/MGMT-12379): PlatformType is not validated when installing SNO cluster. (#4656) [#4656](https://github.com/openshift/assisted-service/pull/4656)
* Bump OCP versions: 4.12, 4.10 (#4662) [#4662](https://github.com/openshift/assisted-service/pull/4662)
* NO-ISSUE: log build version (#4658) [#4658](https://github.com/openshift/assisted-service/pull/4658)
* [OKD-90](https://issues.redhat.com/browse/OKD-90): Support automated extraction of OKD RPMs (#4650) [#4650](https://github.com/openshift/assisted-service/pull/4650)
* [MGMT-12332](https://issues.redhat.com/browse/MGMT-12332): Kube API subsystem tests for kernel arguments (#4647) [#4647](https://github.com/openshift/assisted-service/pull/4647)
* [MGMT-12552](https://issues.redhat.com/browse/MGMT-12552): Add UT for day-2 agent status updates (#4657) (#4660) [#4657](https://github.com/openshift/assisted-service/pull/4657)
* [MGMT-12552](https://issues.redhat.com/browse/MGMT-12552): Add UT for day-2 agent status updates (#4657) [#4657](https://github.com/openshift/assisted-service/pull/4657)
* [MGMT-11506](https://issues.redhat.com/browse/MGMT-11506): Present a more useful validation message for packet loss (#4358) [#4358](https://github.com/openshift/assisted-service/pull/4358)
* [MGMT-12592](https://issues.redhat.com/browse/MGMT-12592): added webhooks tests to hypershift e2e (#4648) [#4648](https://github.com/openshift/assisted-service/pull/4648)
* [MGMT-12552](https://issues.redhat.com/browse/MGMT-12552): Day-2 agent stuck with status_info rebooting although the node is already part of the cluster (#4652) [#4652](https://github.com/openshift/assisted-service/pull/4652)
* [MGMT-11740](https://issues.redhat.com/browse/MGMT-11740): WebHook configuration in HASC (#4582) [#4582](https://github.com/openshift/assisted-service/pull/4582)
* [MGMT-12605](https://issues.redhat.com/browse/MGMT-12605): Remove duplicated tests: Dual-stack UpdateCluster (#4644) [#4644](https://github.com/openshift/assisted-service/pull/4644)
* NO-ISSUE: Explicitly finish mock controller in host tests (#4632) [#4632](https://github.com/openshift/assisted-service/pull/4632)
* Bump OCP versions: 4.10, 4.8 (#4646) [#4646](https://github.com/openshift/assisted-service/pull/4646)
* [MGMT-11810](https://issues.redhat.com/browse/MGMT-11810): added deploy_hypershift_cluster script (#4577) [#4577](https://github.com/openshift/assisted-service/pull/4577)
* [MGMT-8357](https://issues.redhat.com/browse/MGMT-8357): change 'local' deployment method to 'minikube' (#4642) [#4642](https://github.com/openshift/assisted-service/pull/4642)
* NO-ISSUE: Explicitly finish mock controller in host command tests (#4633) [#4633](https://github.com/openshift/assisted-service/pull/4633)
* NO-ISSUE: Explicitly finish mock controller in host transition tests (#4631) [#4631](https://github.com/openshift/assisted-service/pull/4631)
* [MGMT-12500](https://issues.redhat.com/browse/MGMT-12500): DPU cpu arch can be aarch64 and not arm64, adding aarch64 to (#4628) [#4628](https://github.com/openshift/assisted-service/pull/4628)
* NO-ISSUE: Explicitly finish mock controller in cluster tests (#4618) [#4618](https://github.com/openshift/assisted-service/pull/4618)
* [MGMT-12318](https://issues.redhat.com/browse/MGMT-12318): improve condition message of missing secret (#4641) [#4641](https://github.com/openshift/assisted-service/pull/4641)
* Versions tech debt cleanup (#4640) [#4640](https://github.com/openshift/assisted-service/pull/4640)
* [MGMT-11087](https://issues.redhat.com/browse/MGMT-11087): Replaced HPP with ODF LVMO on CNV for a single-node … (#4434) [#4434](https://github.com/openshift/assisted-service/pull/4434)
* [MGMT-12555](https://issues.redhat.com/browse/MGMT-12555): Try avoid deadlocks when updating cluster or host (#4624) [#4624](https://github.com/openshift/assisted-service/pull/4624)
* NO-ISSUE: add stage logs to grafana (#4638) [#4638](https://github.com/openshift/assisted-service/pull/4638)
* [MGMT-12332](https://issues.redhat.com/browse/MGMT-12332): Subsystem tests for discovery kernel arguments (#4616) [#4616](https://github.com/openshift/assisted-service/pull/4616)
* NO-ISSUE: Explicitly finish mock controller in ignition tests (#4634) [#4634](https://github.com/openshift/assisted-service/pull/4634)
* NO-ISSUE: fix attach-disk failure (#4629) [#4629](https://github.com/openshift/assisted-service/pull/4629)
* [MGMT-12318](https://issues.redhat.com/browse/MGMT-12318): added conditions for spoke kubeconfig secret (#4623) [#4623](https://github.com/openshift/assisted-service/pull/4623)
* nutanix: remove worker MachineSet too (#4621) [#4621](https://github.com/openshift/assisted-service/pull/4621)
* [MGMT-8357](https://issues.redhat.com/browse/MGMT-8357): Support kind hub-cluster (#4613) [#4613](https://github.com/openshift/assisted-service/pull/4613)
* [MGMT-12435](https://issues.redhat.com/browse/MGMT-12435): Add a way to apply patches to core manifests (#4583) [#4583](https://github.com/openshift/assisted-service/pull/4583)
* Disable converged flow by default (#4626) [#4626](https://github.com/openshift/assisted-service/pull/4626)
* Describe openshift_version in os_image better (#4620) [#4620](https://github.com/openshift/assisted-service/pull/4620)
* [MGMT-12068](https://issues.redhat.com/browse/MGMT-12068): kube api support for discovery kernel arguments (#4566) [#4566](https://github.com/openshift/assisted-service/pull/4566)
* [MGMT-12572](https://issues.redhat.com/browse/MGMT-12572): Remove duplicated tests: V2UpdateCluster (#4625) [#4625](https://github.com/openshift/assisted-service/pull/4625)
* [MGMT-12552](https://issues.redhat.com/browse/MGMT-12552): Day-2 agent stuck with status_info rebooting although the node is already part of the cluster (#4610) [#4610](https://github.com/openshift/assisted-service/pull/4610)
* [MGMT-12489](https://issues.redhat.com/browse/MGMT-12489): We should validate that inventory is not nil while returning (#4611) [#4611](https://github.com/openshift/assisted-service/pull/4611)
* NO-ISSUE: Bump github.com/google/go-cmp from 0.5.8 to 0.5.9 (#4615) [#4615](https://github.com/openshift/assisted-service/pull/4615)
* [MGMT-12557](https://issues.redhat.com/browse/MGMT-12557): remove duplicated unit tests: monitored operators (#4612) [#4612](https://github.com/openshift/assisted-service/pull/4612)
* [MGMT-12545](https://issues.redhat.com/browse/MGMT-12545): Rename "discovery kernel arguments" to "kernel argument" in infra-env context (#4605) [#4605](https://github.com/openshift/assisted-service/pull/4605)
* [MGMT-12492](https://issues.redhat.com/browse/MGMT-12492): update statusRebootTimeout info message to ask the user to (#4586) [#4586](https://github.com/openshift/assisted-service/pull/4586)
* Bump OCP versions: 4.12 (#4608) [#4608](https://github.com/openshift/assisted-service/pull/4608)
* [MGMT-12299](https://issues.redhat.com/browse/MGMT-12299): Changing the message user sees when the cluster doesn't contain the correct composition of control plane nodes and workers (#4537) [#4537](https://github.com/openshift/assisted-service/pull/4537)
* [OCPBUGSM-46219](https://issues.redhat.com/browse/OCPBUGSM-46219): OCPBUGSM-46220: Update golang version to 1.18.1. (#4598) [#4598](https://github.com/openshift/assisted-service/pull/4598)
* [MGMT-12478](https://issues.redhat.com/browse/MGMT-12478): AgentClusterInstall remains in installed state when using ignitionEndpoint (#4604) [#4604](https://github.com/openshift/assisted-service/pull/4604)
* [MGMT-12500](https://issues.redhat.com/browse/MGMT-12500): Add AI support for a DPU worker (#4588) [#4588](https://github.com/openshift/assisted-service/pull/4588)
* Bump OCP versions: 4.10, 4.11 (#4602) [#4602](https://github.com/openshift/assisted-service/pull/4602)
* [MGMT-12528](https://issues.redhat.com/browse/MGMT-12528): Disable network scanning for very large IPv4 subnets (#4601) [#4601](https://github.com/openshift/assisted-service/pull/4601)
* NO-ISSUE: add warning and info panel to log dashboard (#4572) [#4572](https://github.com/openshift/assisted-service/pull/4572)
* [MGMT-12507](https://issues.redhat.com/browse/MGMT-12507): Remove duplicated unit tests: RegisterHost and GetNextSteps (#4595) [#4595](https://github.com/openshift/assisted-service/pull/4595)
* [MGMT-9915](https://issues.redhat.com/browse/MGMT-9915): Create utility functions to get cluster's VIPs (#4575) [#4575](https://github.com/openshift/assisted-service/pull/4575)
* MGMT-12098 Remove legacy auto reset host (#4599) [#4599](https://github.com/openshift/assisted-service/pull/4599)
* [MGMT-12053](https://issues.redhat.com/browse/MGMT-12053): Add support for aditional kernel arguments when serving iPXE (#4541) [#4541](https://github.com/openshift/assisted-service/pull/4541)
* MGMT-12522 Fix unit test DB connection failure (#4597) [#4597](https://github.com/openshift/assisted-service/pull/4597)
* Remove useless getReleaseImage function (#4593) [#4593](https://github.com/openshift/assisted-service/pull/4593)
* Allow nightly 4.12 builds to use the converged flow (#4592) [#4592](https://github.com/openshift/assisted-service/pull/4592)
* [MGMT-12389](https://issues.redhat.com/browse/MGMT-12389): Create flag for per-version support of dual-stack VIPs (#4565) [#4565](https://github.com/openshift/assisted-service/pull/4565)
* [MGMT-12354](https://issues.redhat.com/browse/MGMT-12354): Migrate single VIP values to the new data structure (#4562) [#4562](https://github.com/openshift/assisted-service/pull/4562)
* [MGMT-12423](https://issues.redhat.com/browse/MGMT-12423): Add debug logs for counting unsynced agents (#4571) [#4571](https://github.com/openshift/assisted-service/pull/4571)
* [MGMT-12398](https://issues.redhat.com/browse/MGMT-12398): Regression fix: Move host stage to "Done" only when not in KubeAPI mode. (#4587) [#4587](https://github.com/openshift/assisted-service/pull/4587)
* [MGMT-12462](https://issues.redhat.com/browse/MGMT-12462): Fix assisted-service swagger file (#4580) [#4580](https://github.com/openshift/assisted-service/pull/4580)
* Remove redundant boto3 dependency (#4585) [#4585](https://github.com/openshift/assisted-service/pull/4585)
* NO-ISSUE: Rename misleading network utility function (#4574) [#4574](https://github.com/openshift/assisted-service/pull/4574)
* Bump OCP versions: 4.9 (#4576) [#4576](https://github.com/openshift/assisted-service/pull/4576)
* [MGMT-12305](https://issues.redhat.com/browse/MGMT-12305): Fix a vulnerability which could cause a denial of service on version v0.3.7 of golang.org/x/text/language. (#4525) [#4525](https://github.com/openshift/assisted-service/pull/4525)
* [MGMT-12422](https://issues.redhat.com/browse/MGMT-12422): Fix bm platform update failure when cluster platform different from bm/none (#4564) [#4564](https://github.com/openshift/assisted-service/pull/4564)
* [MGMT-12363](https://issues.redhat.com/browse/MGMT-12363): Changing the message which the service sends when the right amount of dedicated control plane nodes is achieved (#4546) [#4546](https://github.com/openshift/assisted-service/pull/4546)
* [MGMT-12425](https://issues.redhat.com/browse/MGMT-12425): Removal of problematic validation. (#4563) [#4563](https://github.com/openshift/assisted-service/pull/4563)
* NO-ISSUE: add logs dashboard (#4569) [#4569](https://github.com/openshift/assisted-service/pull/4569)
* [MGMT-12083](https://issues.redhat.com/browse/MGMT-12083): Create enhancement document for discovery kernel parameters (#4420) [#4420](https://github.com/openshift/assisted-service/pull/4420)
* Bump OCP versions: 4.10, 4.11 (#4561) [#4561](https://github.com/openshift/assisted-service/pull/4561)
* [MGMT-12318](https://issues.redhat.com/browse/MGMT-12318): handle conditions in HASC (#4555) [#4555](https://github.com/openshift/assisted-service/pull/4555)
* [MGMT-12353](https://issues.redhat.com/browse/MGMT-12353): Add dual-stack VIP fields to the Rest API (#4548) [#4548](https://github.com/openshift/assisted-service/pull/4548)
* Ensure the preprovisioningimage arch matches the infraenv (#4520) [#4520](https://github.com/openshift/assisted-service/pull/4520)
* [MGMT-11752](https://issues.redhat.com/browse/MGMT-11752): enhancement doc: ai on zero worker hypershift (#4325) [#4325](https://github.com/openshift/assisted-service/pull/4325)
* [MGMT-9023](https://issues.redhat.com/browse/MGMT-9023): Add hyperthreading feature usage (#4514) [#4514](https://github.com/openshift/assisted-service/pull/4514)
* [MGMT-11805](https://issues.redhat.com/browse/MGMT-11805): Don't go through the API for setting a discovery password (#4560) [#4560](https://github.com/openshift/assisted-service/pull/4560)
* Add url auth for getting a single infra-env (#4559) [#4559](https://github.com/openshift/assisted-service/pull/4559)
* NO-ISSUE: add initialDelaySeconds for readiness probe (#4557) [#4557](https://github.com/openshift/assisted-service/pull/4557)
* [MGMT-12380](https://issues.redhat.com/browse/MGMT-12380): Improve message of vip validation failure (#4553) [#4553](https://github.com/openshift/assisted-service/pull/4553)
* [MGMT-12368](https://issues.redhat.com/browse/MGMT-12368): Verify that Kernel Arguments API does not change in the future (#4547) [#4547](https://github.com/openshift/assisted-service/pull/4547)
* [MGMT-12056](https://issues.redhat.com/browse/MGMT-12056): changing the default behavior of the network type for the CD/ACI controller - following OCP move to default OVNKubernetes network type from version 4.12 or higher, AI should install clusters accordingly (#4485) [#4485](https://github.com/openshift/assisted-service/pull/4485)
* [MGMT-12353](https://issues.redhat.com/browse/MGMT-12353): Add dual-stack VIP fields to the KubeAPI (#4549) [#4549](https://github.com/openshift/assisted-service/pull/4549)
* NO-ISSUE: Document how to add OCM capabilities (#4528) [#4528](https://github.com/openshift/assisted-service/pull/4528)
* Bump to 4.12.0-ec.5 (#4554) [#4554](https://github.com/openshift/assisted-service/pull/4554)
* [MGMT-12214](https://issues.redhat.com/browse/MGMT-12214): extract reconciler logic for using HASC (#4540) [#4540](https://github.com/openshift/assisted-service/pull/4540)
* [MGMT-11750](https://issues.redhat.com/browse/MGMT-11750): ensure namespace exists on spoke cluster (HASC) (#4534) [#4534](https://github.com/openshift/assisted-service/pull/4534)
* Bump OCP versions: 4.8 (#4550) [#4550](https://github.com/openshift/assisted-service/pull/4550)
* [Full changelog](https://github.com/openshift/assisted-service/compare/844e6efd0d1c9d583afdefc6bc5ae744471ef9c1...ec6e27b020dd607995b494589c607442cb1639d6)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/492b912ecb2e9f34204f3cb615de2960ded2574f)

* [MGMT-17595](https://issues.redhat.com/browse/MGMT-17595): Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#835) [#835](https://github.com/openshift/assisted-installer/pull/835)
* [MGMT-17588](https://issues.redhat.com/browse/MGMT-17588): Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#829) [#829](https://github.com/openshift/assisted-installer/pull/829)
* [MGMT-17541](https://issues.redhat.com/browse/MGMT-17541): Replace broken golangci reference (#826) [#826](https://github.com/openshift/assisted-installer/pull/826)
* [MGMT-13586](https://issues.redhat.com/browse/MGMT-13586): Wait for ETCD Bootstrap to complete (#670) (#717) [#670](https://github.com/openshift/assisted-installer/pull/670)
* Updating ose-agent-installer-csr-approver images to be consistent with ART (#587) [#587](https://github.com/openshift/assisted-installer/pull/587)
* NO-ISSUE: controller logs optimizations (#646) [#646](https://github.com/openshift/assisted-installer/pull/646)
* NO-ISSUE: Bump golang.org/x/sync (#644) [#644](https://github.com/openshift/assisted-installer/pull/644)
* [MULTIARCH-3387](https://issues.redhat.com/browse/MULTIARCH-3387): Set boot device to target disk for powervm (#626) [#626](https://github.com/openshift/assisted-installer/pull/626)
* [MGMT-13710](https://issues.redhat.com/browse/MGMT-13710): assisted-installer-controller hangs for 2 minutes before uploading the ingress CA (#638) [#638](https://github.com/openshift/assisted-installer/pull/638)
* NO-ISSUE: Bump golang.org/x/net from 0.5.0 to 0.7.0 (#640) [#640](https://github.com/openshift/assisted-installer/pull/640)
* NO-ISSUE: Replace iotil by os and io in order to fix lint issues (#642) [#642](https://github.com/openshift/assisted-installer/pull/642)
* NO-ISSUE: Bump openshift/release from golang-1.18 to golang-1.19 (#612) [#612](https://github.com/openshift/assisted-installer/pull/612)
* [MGMT-13568](https://issues.redhat.com/browse/MGMT-13568): Add pause mcp while setting new role labels (#623) [#623](https://github.com/openshift/assisted-installer/pull/623)
* [MGMT-13292](https://issues.redhat.com/browse/MGMT-13292): Add the installed version of the OLM operators in the monitor operators response (#622) [#622](https://github.com/openshift/assisted-installer/pull/622)
* Remove uninitialized taint from vSphere nodes (#629) [#629](https://github.com/openshift/assisted-installer/pull/629)
* [OCPBUGS-7149](https://issues.redhat.com/browse/OCPBUGS-7149): IPv6 multinode spoke no moving from rebooting/configuring stage (#627) [#627](https://github.com/openshift/assisted-installer/pull/627)
* [MGMT-13507](https://issues.redhat.com/browse/MGMT-13507): Apply node labels only when node is Ready (#620) [#620](https://github.com/openshift/assisted-installer/pull/620)
* [MGMT-13463](https://issues.redhat.com/browse/MGMT-13463): Assisted-controller can fail to send summary logs and we will not have any logs (#619) [#619](https://github.com/openshift/assisted-installer/pull/619)
* [MGMT-10785](https://issues.redhat.com/browse/MGMT-10785): report failing cluster operators controller -> service (#617) [#617](https://github.com/openshift/assisted-installer/pull/617)
* [MGMT-13229](https://issues.redhat.com/browse/MGMT-13229): SNO: Start controller when node is not ready, right after joined (#613) [#613](https://github.com/openshift/assisted-installer/pull/613)
* [MGMT-13385](https://issues.redhat.com/browse/MGMT-13385): Installation fail due to race condition in etcd bootstrap strategy (#618) [#618](https://github.com/openshift/assisted-installer/pull/618)
* [MGMT-13131](https://issues.redhat.com/browse/MGMT-13131): shorten SNO installation duration (#615) [#615](https://github.com/openshift/assisted-installer/pull/615)
* NO-ISSUE: Bump golang.org/x/net from 0.4.0 to 0.5.0 (#611) [#611](https://github.com/openshift/assisted-installer/pull/611)
* [MGMT-13141](https://issues.redhat.com/browse/MGMT-13141): assisted-installer-controller shouldn't try to update BMH if (#610) [#610](https://github.com/openshift/assisted-installer/pull/610)
* Updating ose-agent-installer-orchestrator images to be consistent with ART (#588) [#588](https://github.com/openshift/assisted-installer/pull/588)
* NO-ISSUE: Bump github.com/operator-framework/api from 0.17.1 to 0.17.3 (#609) [#609](https://github.com/openshift/assisted-installer/pull/609)
* [MGMT-12908](https://issues.redhat.com/browse/MGMT-12908): Labeling nodes as quick as possible and fixing hostname possible issue (#601) [#601](https://github.com/openshift/assisted-installer/pull/601)
* NO-ISSUE: Bump github.com/thoas/go-funk from 0.9.2 to 0.9.3 (#608) [#608](https://github.com/openshift/assisted-installer/pull/608)
* Bump assisted-service to v1.0.10-0.20221222230528-2b0f66c4cdcd (#604) [#604](https://github.com/openshift/assisted-installer/pull/604)
* NO-ISSUE: Bump github.com/operator-framework/api from 0.17.2 to 0.17.3 (#603) [#603](https://github.com/openshift/assisted-installer/pull/603)
* [MGMT-12339](https://issues.redhat.com/browse/MGMT-12339): Update host install progress on cleanup error (#597) [#597](https://github.com/openshift/assisted-installer/pull/597)
* [MGMT-12984](https://issues.redhat.com/browse/MGMT-12984): Add more logs to LVM cleanup (#600) [#600](https://github.com/openshift/assisted-installer/pull/600)
* NO-ISSUE: Bump github.com/onsi/gomega from 1.24.1 to 1.24.2 (#599) [#599](https://github.com/openshift/assisted-installer/pull/599)
* [MGMT-12339](https://issues.redhat.com/browse/MGMT-12339): Add extra step to force clean disks with LVM volumes (#583) [#583](https://github.com/openshift/assisted-installer/pull/583)
* Remove jira tickets prefix requirements (#594) [#594](https://github.com/openshift/assisted-installer/pull/594)
* NO-ISSUE: Bump golang.org/x/net from 0.2.0 to 0.4.0 (#593) [#593](https://github.com/openshift/assisted-installer/pull/593)
* [MGMT-12471](https://issues.redhat.com/browse/MGMT-12471): Don't crash if operator isn't monitored by service (#589) [#589](https://github.com/openshift/assisted-installer/pull/589)
* NO-ISSUE: Bump github.com/go-openapi/runtime from 0.24.2 to 0.25.0 (#585) [#585](https://github.com/openshift/assisted-installer/pull/585)
* NO-ISSUE: Bump github.com/operator-framework/api from 0.17.1 to 0.17.2 (#584) [#584](https://github.com/openshift/assisted-installer/pull/584)
* NO-ISSUE: Bump sigs.k8s.io/controller-runtime from 0.12.3 to 0.13.1 (#569) [#569](https://github.com/openshift/assisted-installer/pull/569)
* NO-ISSUE: Bump github.com/onsi/gomega from 1.22.1 to 1.24.1 (#577) [#577](https://github.com/openshift/assisted-installer/pull/577)
* NO-ISSUE: Bump k8s.io/client-go from 0.24.4 to 0.25.4 (#576) [#576](https://github.com/openshift/assisted-installer/pull/576)
* [OCPBUGSM-46219](https://issues.redhat.com/browse/OCPBUGSM-46219): OCPBUGSM-46220: Update golang version to 1.18.1. (#581) [#581](https://github.com/openshift/assisted-installer/pull/581)
* [MGMT-12471](https://issues.redhat.com/browse/MGMT-12471): Don't wait for console if it is disabled (#574) [#574](https://github.com/openshift/assisted-installer/pull/574)
* NO-ISSUE: change all 'go get' commands to 'go install' (#580) [#580](https://github.com/openshift/assisted-installer/pull/580)
* NO-ISSUE: Log informative error in case subscription doesn't have CSV (#573) [#573](https://github.com/openshift/assisted-installer/pull/573)
* [MGMT-12467](https://issues.redhat.com/browse/MGMT-12467): Remove special handling for installing OCP < 4.7 (#571) [#571](https://github.com/openshift/assisted-installer/pull/571)
* [MGMT-12469](https://issues.redhat.com/browse/MGMT-12469): Add resolv.conf content to controller logs in order to improve dns issue visibility (#572) [#572](https://github.com/openshift/assisted-installer/pull/572)
* [OCPBUGS-3166](https://issues.redhat.com/browse/OCPBUGS-3166): assisted-installer: pod creation fails due to violations of security policies in 4.12 (#568) [#568](https://github.com/openshift/assisted-installer/pull/568)
* NO-ISSUE: improvement on gathering controller logs, validating that buffer is not empty (#567) [#567](https://github.com/openshift/assisted-installer/pull/567)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/bc8fd423f1f7b47c46a9d97ede546f989785015d...492b912ecb2e9f34204f3cb615de2960ded2574f)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/6ee27bc3b9e57763c16d795b355afb890256ff32)

* [MGMT-17595](https://issues.redhat.com/browse/MGMT-17595): Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#706) [#706](https://github.com/openshift/assisted-installer-agent/pull/706)
* NO-ISSUE: Quick fix for broken ignition download test in 4.13 release (#700) [#700](https://github.com/openshift/assisted-installer-agent/pull/700)
* [MGMT-17588](https://issues.redhat.com/browse/MGMT-17588): Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#702) [#702](https://github.com/openshift/assisted-installer-agent/pull/702)
* [MGMT-17541](https://issues.redhat.com/browse/MGMT-17541): Replace broken golangci reference (#697) [#697](https://github.com/openshift/assisted-installer-agent/pull/697)
* [MGMT-13111](https://issues.redhat.com/browse/MGMT-13111): Freeze on `404 Not Found` (#628) [#628](https://github.com/openshift/assisted-installer-agent/pull/628)
* [OCPBUGS-16373](https://issues.redhat.com/browse/OCPBUGS-16373): Ignore arping errors on RHEL 9 (#577) [#577](https://github.com/openshift/assisted-installer-agent/pull/577)
* [MGMT-15661](https://issues.redhat.com/browse/MGMT-15661): Update to latest ghw version (#594) (#596) [#594](https://github.com/openshift/assisted-installer-agent/pull/594)
* [OCPBUGS-15557](https://issues.redhat.com/browse/OCPBUGS-15557): vendor agent-installer-utils to v0.0.0-20230707155933-79b142ede77d (#565) [#565](https://github.com/openshift/assisted-installer-agent/pull/565)
* [OCPBUGS-14848](https://issues.redhat.com/browse/OCPBUGS-14848): Filter out hidden devices (#559) [#559](https://github.com/openshift/assisted-installer-agent/pull/559)
* MGMT-14319 chronyc segfaulting Running chronyc on host and not in container (#535) [#535](https://github.com/openshift/assisted-installer-agent/pull/535)
* [OCPBUGS-8695](https://issues.redhat.com/browse/OCPBUGS-8695): vendor agent-installer-utils to v0.0.0-20230310220517-8506fbb6a346 (#518) [#518](https://github.com/openshift/assisted-installer-agent/pull/518)
* [MGMT-13946](https://issues.redhat.com/browse/MGMT-13946): Ignore Proliant Gen 11 serial (#523) [#523](https://github.com/openshift/assisted-installer-agent/pull/523)
* [OCPBUGS-8677](https://issues.redhat.com/browse/OCPBUGS-8677): vendor agent-installer-utils to v0.0.0-20230308101916-306b7995977e (#515) [#515](https://github.com/openshift/assisted-installer-agent/pull/515)
* [OCPBUGS-8390](https://issues.redhat.com/browse/OCPBUGS-8390): vendor agent-installer-utils to v0.0.0-20230307094740-57807526b660 (#512) (#513) [#512](https://github.com/openshift/assisted-installer-agent/pull/512)
* [AGENT-565](https://issues.redhat.com/browse/AGENT-565): revendor agent-utils (#508) [#508](https://github.com/openshift/assisted-installer-agent/pull/508)
* vendor agent-installer-utils to v0.0.0-20230228190135-5b30a39dadf6 (#506) [#506](https://github.com/openshift/assisted-installer-agent/pull/506)
* vendor agent-installer-utils (#505) [#505](https://github.com/openshift/assisted-installer-agent/pull/505)
* NO-ISSUE: Bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#504) [#504](https://github.com/openshift/assisted-installer-agent/pull/504)
* NO-ISSUE: Bump github.com/coreos/ignition/v2 from 2.14.0 to 2.15.0 (#502) [#502](https://github.com/openshift/assisted-installer-agent/pull/502)
* [MGMT-13758](https://issues.redhat.com/browse/MGMT-13758): In connectivity check, ARPING checks should not run on nics without valid IPv4 address (#501) [#501](https://github.com/openshift/assisted-installer-agent/pull/501)
* Updating ose-agent-installer-node-agent images to be consistent with ART (#469) [#469](https://github.com/openshift/assisted-installer-agent/pull/469)
* [AGENT-502](https://issues.redhat.com/browse/AGENT-502): Add agent based installer agent-tui (#482) [#482](https://github.com/openshift/assisted-installer-agent/pull/482)
* Make the agent team be the OWNERS of the Dockerfile.ocp file (#498) [#498](https://github.com/openshift/assisted-installer-agent/pull/498)
* Add sg3_utils package (#497) [#497](https://github.com/openshift/assisted-installer-agent/pull/497)
* NO-ISSUE: Bump github.com/onsi/gomega from 1.26.0 to 1.27.1 (#495) [#495](https://github.com/openshift/assisted-installer-agent/pull/495)
* [MGMT-13665](https://issues.redhat.com/browse/MGMT-13665): Bring full journal by default in log gather (#492) [#492](https://github.com/openshift/assisted-installer-agent/pull/492)
* NO-ISSUE: Bump golang.org/x/sys from 0.4.0 to 0.5.0 (#491) [#491](https://github.com/openshift/assisted-installer-agent/pull/491)
* Remove S.M.A.R.T. collection (#489) [#489](https://github.com/openshift/assisted-installer-agent/pull/489)
* Update Dockerfile.assisted_installer_agent (#487) [#487](https://github.com/openshift/assisted-installer-agent/pull/487)
* NO-ISSUE: Bump github.com/onsi/gomega from 1.25.0 to 1.26.0 (#488) [#488](https://github.com/openshift/assisted-installer-agent/pull/488)
* [MULTIARCH-3239](https://issues.redhat.com/browse/MULTIARCH-3239): - Add multipath FC disk check for Power (#483) [#483](https://github.com/openshift/assisted-installer-agent/pull/483)
* NO-ISSUE: Bump github.com/onsi/gomega from 1.24.2 to 1.25.0 (#486) [#486](https://github.com/openshift/assisted-installer-agent/pull/486)
* [MGMT-13420](https://issues.redhat.com/browse/MGMT-13420): Adding cleanup of next-step-runner before starting it. (#484) [#484](https://github.com/openshift/assisted-installer-agent/pull/484)
* [MGMT-12535](https://issues.redhat.com/browse/MGMT-12535): Add step verify vips (#476) [#476](https://github.com/openshift/assisted-installer-agent/pull/476)
* [MGMT-12906](https://issues.redhat.com/browse/MGMT-12906): Refactor connectivity check (#471) [#471](https://github.com/openshift/assisted-installer-agent/pull/471)
* NO-ISSUE: Bump github.com/thoas/go-funk from 0.9.2 to 0.9.3 (#474) [#474](https://github.com/openshift/assisted-installer-agent/pull/474)
* NO-ISSUE: Bump github.com/itchyny/gojq from 0.12.9 to 0.12.11 (#473) [#473](https://github.com/openshift/assisted-installer-agent/pull/473)
* NO-ISSUE: Bump github.com/onsi/gomega from 1.22.1 to 1.24.2 (#472) [#472](https://github.com/openshift/assisted-installer-agent/pull/472)
* [MGMT-11885](https://issues.redhat.com/browse/MGMT-11885): disk_speed_check: escape colons when calling fio (#427) (#464) [#427](https://github.com/openshift/assisted-installer-agent/pull/427)
* [MGMT-12827](https://issues.redhat.com/browse/MGMT-12827): Don't try to rename when there is no usable NIC (#466) [#466](https://github.com/openshift/assisted-installer-agent/pull/466)
* NO-ISSUE: Bump github.com/go-openapi/runtime from 0.24.2 to 0.25.0 (#465) [#465](https://github.com/openshift/assisted-installer-agent/pull/465)
* [MGMT-12537](https://issues.redhat.com/browse/MGMT-12537): detect virtualized environment (#451) [#451](https://github.com/openshift/assisted-installer-agent/pull/451)
* NO-ISSUE: Stop retry when backoff expires or context is cancelled (#462) [#462](https://github.com/openshift/assisted-installer-agent/pull/462)
* [MGMT-12793](https://issues.redhat.com/browse/MGMT-12793): Tang unit tests should not query external URLs (#463) [#463](https://github.com/openshift/assisted-installer-agent/pull/463)
* [OCPBUGS-3157](https://issues.redhat.com/browse/OCPBUGS-3157): The connectivity check fails if an interface has a link-local address (#461) [#461](https://github.com/openshift/assisted-installer-agent/pull/461)
* Remove validation on commit messages (#460) [#460](https://github.com/openshift/assisted-installer-agent/pull/460)
* [MGMT-12760](https://issues.redhat.com/browse/MGMT-12760): Don't panic when retrying after no response (#459) [#459](https://github.com/openshift/assisted-installer-agent/pull/459)
* [OCPBUGSM-46219](https://issues.redhat.com/browse/OCPBUGSM-46219): OCPBUGSM-46220: Update golang version to 1.18.1. (#452) [#452](https://github.com/openshift/assisted-installer-agent/pull/452)
* [MGMT-12711](https://issues.redhat.com/browse/MGMT-12711): Verify that L2 connectivity checks are received grouped by ip+mac instead of just mac (#456) [#456](https://github.com/openshift/assisted-installer-agent/pull/456)
* [MGMT-11551](https://issues.redhat.com/browse/MGMT-11551): Retry when service fails (#438) [#438](https://github.com/openshift/assisted-installer-agent/pull/438)
* [MGMT-11970](https://issues.redhat.com/browse/MGMT-11970): Detect and handle IP conflicts (#433) [#433](https://github.com/openshift/assisted-installer-agent/pull/433)
* NO-ISSUE: Bump github.com/spf13/afero from 1.9.0 to 1.9.3 (#454) [#454](https://github.com/openshift/assisted-installer-agent/pull/454)
* [MGMT-11551](https://issues.redhat.com/browse/MGMT-11551): Retry when service fails (#442) [#442](https://github.com/openshift/assisted-installer-agent/pull/442)
* [MGMT-8460](https://issues.redhat.com/browse/MGMT-8460): Automatically rename discovered hosts (#449) [#449](https://github.com/openshift/assisted-installer-agent/pull/449)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/ce915b7d0a3d3b225b6a190d2babf20cc864d22e...6ee27bc3b9e57763c16d795b355afb890256ff32)


### [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud/tree/e41e11ccf25fa74e4cfb4ace124f35cffc0191a7)

* [OCPBUGS-21238](https://issues.redhat.com/browse/OCPBUGS-21238): Bump golang.org/x/net to v0.19.0 [#43](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/43)
* Update OWNERS [#29](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/29)
* Update OWNERS [#27](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/27)
* Updating ose-alibaba-cloud-controller-manager images to be consistent with ART [#26](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/26)
* [Full changelog](https://github.com/openshift/cloud-provider-alibaba-cloud/compare/191c9e34c1e70cf585d78f6293f95a2b89061a48...e41e11ccf25fa74e4cfb4ace124f35cffc0191a7)


### [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver/tree/6384f904d041b761670532ac183271b8110707f2)

* [OCPBUGS-21329](https://issues.redhat.com/browse/OCPBUGS-21329): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#37](https://github.com/openshift/alibaba-cloud-csi-driver/pull/37)
* [OCPBUGS-16377](https://issues.redhat.com/browse/OCPBUGS-16377): [release-4.13] UPSTREAM: 763: Bump (golang.org/x/net): to address CVE-2022-41723 [#31](https://github.com/openshift/alibaba-cloud-csi-driver/pull/31)
* [OCPBUGS-6349](https://issues.redhat.com/browse/OCPBUGS-6349): UPSTREAM: 730: Fix CVE 2022 41717 [#24](https://github.com/openshift/alibaba-cloud-csi-driver/pull/24)
* [Bug 1877261](https://bugzilla.redhat.com/show_bug.cgi?id=1877261): UPSTREAM: 673: Feature/support disk waiting during mount [#23](https://github.com/openshift/alibaba-cloud-csi-driver/pull/23)
* Updating ose-alibaba-cloud-csi-driver images to be consistent with ART [#20](https://github.com/openshift/alibaba-cloud-csi-driver/pull/20)
* [OCPBUGS-6222](https://issues.redhat.com/browse/OCPBUGS-6222): UPSTREAM: 682: fix gofmt [#21](https://github.com/openshift/alibaba-cloud-csi-driver/pull/21)
* [Bug 2067785](https://bugzilla.redhat.com/show_bug.cgi?id=2067785): Bump prometheus/client_golang to v1.11.1 [#18](https://github.com/openshift/alibaba-cloud-csi-driver/pull/18)
* [Full changelog](https://github.com/openshift/alibaba-cloud-csi-driver/compare/4d3b1125cfd3acfe3fbafa4c83543bbb89de97a2...6384f904d041b761670532ac183271b8110707f2)


### [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator/tree/7e415973dda671d82ae58d0107af274ff053db5c)

* [OCPBUGS-21428](https://issues.redhat.com/browse/OCPBUGS-21428): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#65](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/65)
* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#55](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/55)
* [STOR-1019](https://issues.redhat.com/browse/STOR-1019): Bump to k8s 1.26 libs for OCP 4.13 [#44](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/44)
* [STOR-947](https://issues.redhat.com/browse/STOR-947): support disabling default StorageClass via ClusterCSIDriver [#41](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/41)
* [Bug 2106736](https://bugzilla.redhat.com/show_bug.cgi?id=2106736): Add multiplePVsSameID capability [#43](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/43)
* [STOR-1078](https://issues.redhat.com/browse/STOR-1078): Add hostPaths necessary for SELinux mounts [#42](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/42)
* Updating ose-alibaba-disk-csi-driver-operator images to be consistent with ART [#40](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/40)
* [OCPBUGS-4347](https://issues.redhat.com/browse/OCPBUGS-4347): set TLS cipher suites in Kube RBAC sidecars [#39](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/39)
* [Full changelog](https://github.com/openshift/alibaba-disk-csi-driver-operator/compare/99bcda8da7c9c2e4415f30b82371f0b79d527d3d...7e415973dda671d82ae58d0107af274ff053db5c)


### [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba/tree/4c0f96a692dee91100d7085c05a68f3efb7e281d)

* Update OWNERS [#40](https://github.com/openshift/cluster-api-provider-alibaba/pull/40)
* Updating ose-alibaba-machine-controllers images to be consistent with ART [#39](https://github.com/openshift/cluster-api-provider-alibaba/pull/39)
* Update OWNERS [#38](https://github.com/openshift/cluster-api-provider-alibaba/pull/38)
* [Full changelog](https://github.com/openshift/cluster-api-provider-alibaba/compare/b9287c05091424c4d21fd95454020ccc225f5bcb...4c0f96a692dee91100d7085c05a68f3efb7e281d)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/95c03b7b838f7c78efe8957b50c50a22cd625be7)

* [OCPBUGS-32073](https://issues.redhat.com/browse/OCPBUGS-32073): update for CVE-2023-45288 [release-4.13] [#84](https://github.com/openshift/cloud-provider-aws/pull/84)
* [OCPBUGS-27964](https://issues.redhat.com/browse/OCPBUGS-27964): bump go.opentelemetry.io [#72](https://github.com/openshift/cloud-provider-aws/pull/72)
* [OCPBUGS-20738](https://issues.redhat.com/browse/OCPBUGS-20738): Update golang.org/x/net to v0.17.0 [#54](https://github.com/openshift/cloud-provider-aws/pull/54)
* Update OWNERS [#35](https://github.com/openshift/cloud-provider-aws/pull/35)
* Merge https://github.com/kubernetes/cloud-provider-aws:master into master [#34](https://github.com/openshift/cloud-provider-aws/pull/34)
* Updating ose-aws-cloud-controller-manager images to be consistent with ART [#30](https://github.com/openshift/cloud-provider-aws/pull/30)
* Update OWNERS [#31](https://github.com/openshift/cloud-provider-aws/pull/31)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/f90fb443bc71b2319d8cce276b280c26d0f18fb7...95c03b7b838f7c78efe8957b50c50a22cd625be7)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/27360a3967ed742a9eb1b0c2ed539d99ec6b9424)

* [OCPBUGS-32470](https://issues.redhat.com/browse/OCPBUGS-32470): UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called [#509](https://github.com/openshift/cluster-api-provider-aws/pull/509)
* [OCPBUGS-20836](https://issues.redhat.com/browse/OCPBUGS-20836): bump golang.org/x/net to v0.17.0 [#482](https://github.com/openshift/cluster-api-provider-aws/pull/482)
* [OCPBUGS-15512](https://issues.redhat.com/browse/OCPBUGS-15512): Pass right SGs for IsExternallyManaged on creation [#468](https://github.com/openshift/cluster-api-provider-aws/pull/468)
* [OCPBUGS-8481](https://issues.redhat.com/browse/OCPBUGS-8481): [release-4.13] Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:release-2.0 (28bc9b8) into release-4.13 [#458](https://github.com/openshift/cluster-api-provider-aws/pull/458)
* Update OWNERS [#457](https://github.com/openshift/cluster-api-provider-aws/pull/457)
* Updating ose-aws-cluster-api-controllers images to be consistent with ART [#454](https://github.com/openshift/cluster-api-provider-aws/pull/454)
* Update OWNERS [#455](https://github.com/openshift/cluster-api-provider-aws/pull/455)
* Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:main into master [#453](https://github.com/openshift/cluster-api-provider-aws/pull/453)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/16156accbe3b9bcedbe39ef988170e1f644fcd75...27360a3967ed742a9eb1b0c2ed539d99ec6b9424)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/8205d51c798f8fea91eb6c1702fb63e7d6c17005)

* [OCPBUGS-33363](https://issues.redhat.com/browse/OCPBUGS-33363): [release-4.13] UPSTREAM: 1919: Add reserved-volume-attachments [#266](https://github.com/openshift/aws-ebs-csi-driver/pull/266)
* [OCPBUGS-20939](https://issues.redhat.com/browse/OCPBUGS-20939): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#240](https://github.com/openshift/aws-ebs-csi-driver/pull/240)
* [OCPBUGS-13811](https://issues.redhat.com/browse/OCPBUGS-13811): Volume unmount repeats after successful unmount, preventing pod delete [#225](https://github.com/openshift/aws-ebs-csi-driver/pull/225)
* [STOR-1019](https://issues.redhat.com/browse/STOR-1019): Pin k8s.io/dynamic-resource-allocation to v0.26.1 [#217](https://github.com/openshift/aws-ebs-csi-driver/pull/217)
* [OCPBUGS-6355](https://issues.redhat.com/browse/OCPBUGS-6355): Rebase to v1.15.0 for OCP 4.13 [#215](https://github.com/openshift/aws-ebs-csi-driver/pull/215)
* Updating ose-aws-ebs-csi-driver images to be consistent with ART [#214](https://github.com/openshift/aws-ebs-csi-driver/pull/214)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/bbab20f9559a1be6f39fed8e604712d41f507b49...8205d51c798f8fea91eb6c1702fb63e7d6c17005)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/8f05d9cd9f35c40ab0929577a9650a02c88a2be0)

* [OCPBUGS-33363](https://issues.redhat.com/browse/OCPBUGS-33363): Explicitly reserve 1 attachment for the root disk [#307](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/307)
* [OCPBUGS-21034](https://issues.redhat.com/browse/OCPBUGS-21034): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#281](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/281)
* [OCPBUGS-13036](https://issues.redhat.com/browse/OCPBUGS-13036): 4.13: Bump (golang.org/x/net): to address CVE-2022-41723 [#220](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/220)
* [OCPBUGS-13828](https://issues.redhat.com/browse/OCPBUGS-13828): assets/hypershift/controller_sa: Set controller ServiceAccount imagePullSecrets [#224](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/224)
* [OCPBUGS-10645](https://issues.redhat.com/browse/OCPBUGS-10645): Hypershift: set control plane operand properties [#206](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/206)
* [OCPBUGS-10405](https://issues.redhat.com/browse/OCPBUGS-10405): feat: add workload annotation to deployment and daemonset [#199](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/199)
* [STOR-875](https://issues.redhat.com/browse/STOR-875): Implement custom keys in AWS EBS CSI driver operator [#185](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/185)
* [OCPBUGS-7837](https://issues.redhat.com/browse/OCPBUGS-7837): do not inject-proxy when deploying in hypershift control plane [#186](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/186)
* Bump github.com/spf13/cobra from 1.6.0 to 1.6.1 [#182](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/182)
* Add ok-to-test label to dependabot PRs [#184](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/184)
* Bump k8s.io/klog/v2 from 2.80.1 to 2.90.0 [#183](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/183)
* add dependabot config for gomod updates [#181](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/181)
* [STOR-1019](https://issues.redhat.com/browse/STOR-1019): Bump to k8s 1.26 libs for OCP 4.13 [#179](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/179)
* [STOR-947](https://issues.redhat.com/browse/STOR-947): support disabling default StorageClass via ClusterCSIDriver [#173](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/173)
* [#177] fix 404 in readme [#178](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/178)
* [Bug 2106736](https://bugzilla.redhat.com/show_bug.cgi?id=2106736): Add multiplePVsSameID capability [#175](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/175)
* [STOR-1078](https://issues.redhat.com/browse/STOR-1078): Add hostPaths necessary for SELinux mounts [#174](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/174)
* Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART [#172](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/172)
* [OCPBUGS-4491](https://issues.redhat.com/browse/OCPBUGS-4491): hypershift: use correct kubeconfig secret [#169](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/169)
* [OCPBUGS-4347](https://issues.redhat.com/browse/OCPBUGS-4347): set TLS cipher suites in Kube RBAC sidecars [#168](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/168)
* [OCPBUGS-3990](https://issues.redhat.com/browse/OCPBUGS-3990): Add HyperShift specific priorityClass [#167](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/167)
* [OCPBUGS-3978](https://issues.redhat.com/browse/OCPBUGS-3978): Don't deploy VolumeSnapshotClass in static controller [#165](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/165)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/71bb7838f93bc88e679b0a967fbf1660cdf8aff1...8f05d9cd9f35c40ab0929577a9650a02c88a2be0)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/e1a57b5e4ce731e8f90cd2c0d4ded81e40fa7a37)

* [OCPBUGS-24563](https://issues.redhat.com/browse/OCPBUGS-24563): Reduce metrics cardinality [#96](https://github.com/openshift/machine-api-provider-aws/pull/96)
* [OCPBUGS-21568](https://issues.redhat.com/browse/OCPBUGS-21568): Update golang.org/x/net to v0.17.0 [#89](https://github.com/openshift/machine-api-provider-aws/pull/89)
* [OCPBUGS-13092](https://issues.redhat.com/browse/OCPBUGS-13092): Bump x/net package to v0.9.0 [#70](https://github.com/openshift/machine-api-provider-aws/pull/70)
* Update OWNERS [#61](https://github.com/openshift/machine-api-provider-aws/pull/61)
* : Update tooling [#58](https://github.com/openshift/machine-api-provider-aws/pull/58)
* Updating ose-machine-api-provider-aws images to be consistent with ART [#54](https://github.com/openshift/machine-api-provider-aws/pull/54)
* [OCPCLOUD-1802](https://issues.redhat.com/browse/OCPCLOUD-1802): Port to ginkgo v2 [#55](https://github.com/openshift/machine-api-provider-aws/pull/55)
* Update OWNERS [#56](https://github.com/openshift/machine-api-provider-aws/pull/56)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/440886d004a6ecbc45d5bc04c2f703fb0efaa632...e1a57b5e4ce731e8f90cd2c0d4ded81e40fa7a37)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/ae01a272aff73b1390ee4c3934cc2382370a1660)

* [OCPBUGS-32882](https://issues.redhat.com/browse/OCPBUGS-32882): Upgrade go-jose module to 2.6.3 [#190](https://github.com/openshift/aws-pod-identity-webhook/pull/190)
* [OCPBUGS-21331](https://issues.redhat.com/browse/OCPBUGS-21331): Upgrade golang/x/net for CVE-2023-39325 [#184](https://github.com/openshift/aws-pod-identity-webhook/pull/184)
* NO-ISSUE: Sync OWNERS with team members [#177](https://github.com/openshift/aws-pod-identity-webhook/pull/177)
* snyk: exclude vendor/ [#172](https://github.com/openshift/aws-pod-identity-webhook/pull/172)
* [OCPBUGS-12555](https://issues.redhat.com/browse/OCPBUGS-12555): Update builder to OCP4.13/go1.19 [#164](https://github.com/openshift/aws-pod-identity-webhook/pull/164)
* Updating ose-aws-pod-identity-webhook images to be consistent with ART [#158](https://github.com/openshift/aws-pod-identity-webhook/pull/158)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/31917a5f3e7557916b8e92a0a9ae529ab176f738...ae01a272aff73b1390ee4c3934cc2382370a1660)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/bf9bd02236e13c426d58c9828685dd6c598ff15f)

* [OCPBUGS-21419](https://issues.redhat.com/browse/OCPBUGS-21419): Bump golang.org/x/net to v0.18.0 [#94](https://github.com/openshift/cloud-provider-azure/pull/94)
* [OCPBUGS-17145](https://issues.redhat.com/browse/OCPBUGS-17145): Increase service idle max timeout to 100 minutes [#81](https://github.com/openshift/cloud-provider-azure/pull/81)
* [OCPBUGS-13952](https://issues.redhat.com/browse/OCPBUGS-13952): Update x/net package to v0.8.0 [#68](https://github.com/openshift/cloud-provider-azure/pull/68)
* [OCPBUGS-13011](https://issues.redhat.com/browse/OCPBUGS-13011): Allow deprecated beta topology labels to be applied for those not ready to migrate [#66](https://github.com/openshift/cloud-provider-azure/pull/66)
* [OCPBUGS-8326](https://issues.redhat.com/browse/OCPBUGS-8326): update kubernetes dependencies to 1.26 [#56](https://github.com/openshift/cloud-provider-azure/pull/56)
* Update OWNERS [#54](https://github.com/openshift/cloud-provider-azure/pull/54)
* Updating ose-azure-cloud-node-manager images to be consistent with ART [#51](https://github.com/openshift/cloud-provider-azure/pull/51)
* Updating ose-azure-cloud-controller-manager images to be consistent with ART [#52](https://github.com/openshift/cloud-provider-azure/pull/52)
* Update OWNERS [#53](https://github.com/openshift/cloud-provider-azure/pull/53)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/2193ccfa8575aeb0520a25b77ec963097a66cd6e...bf9bd02236e13c426d58c9828685dd6c598ff15f)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/3f757a8f2ada44c7124f5d0205feb29b0fff1977)

* [OCPBUGS-36022](https://issues.redhat.com/browse/OCPBUGS-36022): Update go-retryablehttp to v0.7.7 [#314](https://github.com/openshift/cluster-api-provider-azure/pull/314)
* [OCPBUGS-21503](https://issues.redhat.com/browse/OCPBUGS-21503): bump golang.org/x/net to v0.17.0 [#288](https://github.com/openshift/cluster-api-provider-azure/pull/288)
* [OCPBUGS-12557](https://issues.redhat.com/browse/OCPBUGS-12557): Bump x/net package to v0.10.0 [#278](https://github.com/openshift/cluster-api-provider-azure/pull/278)
* [OCPBUGS-8481](https://issues.redhat.com/browse/OCPBUGS-8481): [release-4.13] Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:release-1.7 (741a29d) into release-4.13 [#270](https://github.com/openshift/cluster-api-provider-azure/pull/270)
* Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:main into master [#267](https://github.com/openshift/cluster-api-provider-azure/pull/267)
* Updating ose-azure-cluster-api-controllers images to be consistent with ART [#268](https://github.com/openshift/cluster-api-provider-azure/pull/268)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/a1b2a37b7d31951708a8f6e1db201fe0c1ff687a...3f757a8f2ada44c7124f5d0205feb29b0fff1977)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/b6d3fbcbf312f03247092323a88a43873b693f22)

* [OCPBUGS-23216](https://issues.redhat.com/browse/OCPBUGS-23216): Update to v1.26.7 [#63](https://github.com/openshift/azure-disk-csi-driver/pull/63)
* [OCPBUGS-20688](https://issues.redhat.com/browse/OCPBUGS-20688): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#55](https://github.com/openshift/azure-disk-csi-driver/pull/55)
* [OCPBUGS-16318](https://issues.redhat.com/browse/OCPBUGS-16318): 4.13: UPSTREAM: 1744: fix: CVE-2022-41723 [#44](https://github.com/openshift/azure-disk-csi-driver/pull/44)
* Bug OCPBUGS-7408: UPSTREAM: 1725: Pin k8s.io/dynamic-resource-allocation version [#38](https://github.com/openshift/azure-disk-csi-driver/pull/38)
* [STOR-1016](https://issues.redhat.com/browse/STOR-1016): Rebase to v1.26.1 for OCP 4.13 [#37](https://github.com/openshift/azure-disk-csi-driver/pull/37)
* Updating ose-azure-disk-csi-driver images to be consistent with ART [#35](https://github.com/openshift/azure-disk-csi-driver/pull/35)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/a930c89beac514d4d98f6055bf6cfe78eeec25a5...b6d3fbcbf312f03247092323a88a43873b693f22)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/8534d7563e209e12eec38a2027cd1d9efd530071)

* [OCPBUGS-20766](https://issues.redhat.com/browse/OCPBUGS-20766): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#102](https://github.com/openshift/azure-disk-csi-driver-operator/pull/102)
* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#86](https://github.com/openshift/azure-disk-csi-driver-operator/pull/86)
* [STOR-873](https://issues.redhat.com/browse/STOR-873): Implement custom keys in Azure Disk CSI driver operator [#68](https://github.com/openshift/azure-disk-csi-driver-operator/pull/68)
* [OCPBUGS-7617](https://issues.redhat.com/browse/OCPBUGS-7617): Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars [#69](https://github.com/openshift/azure-disk-csi-driver-operator/pull/69)
* [OCPBUGS-6658](https://issues.redhat.com/browse/OCPBUGS-6658): Disable managed identity authentication [#67](https://github.com/openshift/azure-disk-csi-driver-operator/pull/67)
* [STOR-1019](https://issues.redhat.com/browse/STOR-1019): Bump to k8s 1.26 libs for OCP 4.13 [#66](https://github.com/openshift/azure-disk-csi-driver-operator/pull/66)
* [STOR-947](https://issues.redhat.com/browse/STOR-947): support disabling default StorageClass via ClusterCSIDriver [#63](https://github.com/openshift/azure-disk-csi-driver-operator/pull/63)
* [STOR-1078](https://issues.redhat.com/browse/STOR-1078): Add hostPaths necessary for SELinux mounts [#64](https://github.com/openshift/azure-disk-csi-driver-operator/pull/64)
* [Bug 2106736](https://bugzilla.redhat.com/show_bug.cgi?id=2106736): Add multiplePVsSameID capability [#65](https://github.com/openshift/azure-disk-csi-driver-operator/pull/65)
* Updating ose-azure-disk-csi-driver-operator images to be consistent with ART [#62](https://github.com/openshift/azure-disk-csi-driver-operator/pull/62)
* [OCPBUGS-4347](https://issues.redhat.com/browse/OCPBUGS-4347): set TLS cipher suites in Kube RBAC sidecars [#61](https://github.com/openshift/azure-disk-csi-driver-operator/pull/61)
* [OCPBUGS-3659](https://issues.redhat.com/browse/OCPBUGS-3659): Don't expose metrics port to whole network [#60](https://github.com/openshift/azure-disk-csi-driver-operator/pull/60)
* [OCPBUGS-1904](https://issues.redhat.com/browse/OCPBUGS-1904): Only deploy VolumeSnapshotClass when CRD exists [#56](https://github.com/openshift/azure-disk-csi-driver-operator/pull/56)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/988b8cc8ead51c2904c6cb75446529bfe3674ee3...8534d7563e209e12eec38a2027cd1d9efd530071)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/15e6f80ec4be826cd5d03ef4126be0dd171b506e)

* [OCPBUGS-41678](https://issues.redhat.com/browse/OCPBUGS-41678): bump mount-utils to treat ENODEV error as corrupted mount [#81](https://github.com/openshift/azure-file-csi-driver/pull/81)
* [OCPBUGS-20862](https://issues.redhat.com/browse/OCPBUGS-20862): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#38](https://github.com/openshift/azure-file-csi-driver/pull/38)
* [OCPBUGS-16321](https://issues.redhat.com/browse/OCPBUGS-16321): 4.13: UPSTREAM: 1211: fix: CVE-2022-41723 [#30](https://github.com/openshift/azure-file-csi-driver/pull/30)
* [OCPBUGS-7943](https://issues.redhat.com/browse/OCPBUGS-7943): Pin k8s.io/dynamic-resource-allocation to v0.26.0 [#24](https://github.com/openshift/azure-file-csi-driver/pull/24)
* [STOR-1010](https://issues.redhat.com/browse/STOR-1010): Rebase to v1.25.1 for OCP 4.13 [#23](https://github.com/openshift/azure-file-csi-driver/pull/23)
* Updating azure-file-csi-driver images to be consistent with ART [#21](https://github.com/openshift/azure-file-csi-driver/pull/21)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/15aade4d58785b54ac732a660f1359132d27f9b9...15e6f80ec4be826cd5d03ef4126be0dd171b506e)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/70e0530255150e513061730f7624c9c235ee7c38)

* [OCPBUGS-20964](https://issues.redhat.com/browse/OCPBUGS-20964): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#77](https://github.com/openshift/azure-file-csi-driver-operator/pull/77)
* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#67](https://github.com/openshift/azure-file-csi-driver-operator/pull/67)
* [OCPBUGS-6658](https://issues.redhat.com/browse/OCPBUGS-6658): Disable managed identity authentication [#47](https://github.com/openshift/azure-file-csi-driver-operator/pull/47)
* [STOR-1019](https://issues.redhat.com/browse/STOR-1019): Bump to k8s 1.26 libs for OCP 4.13 [#46](https://github.com/openshift/azure-file-csi-driver-operator/pull/46)
* [STOR-947](https://issues.redhat.com/browse/STOR-947): support disabling default StorageClass via ClusterCSIDriver [#42](https://github.com/openshift/azure-file-csi-driver-operator/pull/42)
* [STOR-1078](https://issues.redhat.com/browse/STOR-1078): Add hostPaths necessary for SELinux mounts [#43](https://github.com/openshift/azure-file-csi-driver-operator/pull/43)
* [Bug 2106736](https://bugzilla.redhat.com/show_bug.cgi?id=2106736): Add multiplePVsSameID capability [#44](https://github.com/openshift/azure-file-csi-driver-operator/pull/44)
* Updating azure-file-csi-driver-operator images to be consistent with ART [#41](https://github.com/openshift/azure-file-csi-driver-operator/pull/41)
* [OCPBUGS-4347](https://issues.redhat.com/browse/OCPBUGS-4347): set TLS cipher suites in Kube RBAC sidecars [#40](https://github.com/openshift/azure-file-csi-driver-operator/pull/40)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/060ba825fead5953bef544017ef4b3d0cbabe3e5...70e0530255150e513061730f7624c9c235ee7c38)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/62f6e0f3091262a84e1d6240e2086f35635b5b5b)

* [OCPBUGS-29906](https://issues.redhat.com/browse/OCPBUGS-29906): Don't create availability set when using spot instances [#104](https://github.com/openshift/machine-api-provider-azure/pull/104)
* [OCPBUGS-24563](https://issues.redhat.com/browse/OCPBUGS-24563): Reduce metrics cardinality [#89](https://github.com/openshift/machine-api-provider-azure/pull/89)
* [OCPBUGS-20758](https://issues.redhat.com/browse/OCPBUGS-20758): Bump x/net package to v0.18.0 [#83](https://github.com/openshift/machine-api-provider-azure/pull/83)
* [OCPBUGS-13053](https://issues.redhat.com/browse/OCPBUGS-13053): Bump x/net to v.0.7.0 [#61](https://github.com/openshift/machine-api-provider-azure/pull/61)
* [CORS-2517](https://issues.redhat.com/browse/CORS-2517): migrate from ADAL to azidentity [#48](https://github.com/openshift/machine-api-provider-azure/pull/48)
* [CFE-677](https://issues.redhat.com/browse/CFE-677): Add user defined tags to all azure resources created [#45](https://github.com/openshift/machine-api-provider-azure/pull/45)
* [OCPBUGS-7696](https://issues.redhat.com/browse/OCPBUGS-7696): Fix empty clusterName references for GenerateMachinePublicIPName [#52](https://github.com/openshift/machine-api-provider-azure/pull/52)
* : Update k8s to 1.26 [#50](https://github.com/openshift/machine-api-provider-azure/pull/50)
* Update OWNERS [#51](https://github.com/openshift/machine-api-provider-azure/pull/51)
* [OCPCLOUD-1811](https://issues.redhat.com/browse/OCPCLOUD-1811): Modernize test tooling [#44](https://github.com/openshift/machine-api-provider-azure/pull/44)
* [OCPBUGS-5235](https://issues.redhat.com/browse/OCPBUGS-5235): Fix mapi_instance_create_failed metric with accelerated networking [#46](https://github.com/openshift/machine-api-provider-azure/pull/46)
* [OCPBUGS-5546](https://issues.redhat.com/browse/OCPBUGS-5546): Machine Actuator should not set metadata.name [#47](https://github.com/openshift/machine-api-provider-azure/pull/47)
* Update OWNERS [#43](https://github.com/openshift/machine-api-provider-azure/pull/43)
* Updating ose-machine-api-provider-azure images to be consistent with ART [#40](https://github.com/openshift/machine-api-provider-azure/pull/40)
* [OCPCLOUD-1803](https://issues.redhat.com/browse/OCPCLOUD-1803): Port to ginkgo v2 [#42](https://github.com/openshift/machine-api-provider-azure/pull/42)
* [OCPBUGS-3540](https://issues.redhat.com/browse/OCPBUGS-3540): Fix MachineCreation condition having wrong status [#39](https://github.com/openshift/machine-api-provider-azure/pull/39)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/6b5bfffdcf6315871d6c296025db7d0812132868...62f6e0f3091262a84e1d6240e2086f35635b5b5b)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/22d34573ae3c910c9f03d9ee7c11ee7f03da10b8)

* [OCPBUGS-39217](https://issues.redhat.com/browse/OCPBUGS-39217): Add yq v4 to ci image [#8922](https://github.com/openshift/installer/pull/8922)
* [OCPBUGS-36088](https://issues.redhat.com/browse/OCPBUGS-36088): [release-4.13]: bump go-retryablehttp for CVE fix [#8659](https://github.com/openshift/installer/pull/8659)
* [OCPBUGS-29124](https://issues.redhat.com/browse/OCPBUGS-29124): IBMCloud: Handle disk delete errors [#7989](https://github.com/openshift/installer/pull/7989)
* [OCPBUGS-37168](https://issues.redhat.com/browse/OCPBUGS-37168): Add yq-v4 to the upi-installer image for CI [#8743](https://github.com/openshift/installer/pull/8743)
* [OCPBUGS-35976](https://issues.redhat.com/browse/OCPBUGS-35976): [release-4.13] bump github.com/containers/image for CVE fix [#8651](https://github.com/openshift/installer/pull/8651)
* [OCPBUGS-33732](https://issues.redhat.com/browse/OCPBUGS-33732): preserve category name when trying to find tag category [#8419](https://github.com/openshift/installer/pull/8419)
* [OCPBUGS-33062](https://issues.redhat.com/browse/OCPBUGS-33062): openstack: Honour worker server group policy [#8323](https://github.com/openshift/installer/pull/8323)
* [OCPBUGS-32359](https://issues.redhat.com/browse/OCPBUGS-32359): Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility [#8284](https://github.com/openshift/installer/pull/8284)
* [OCPBUGS-22979](https://issues.redhat.com/browse/OCPBUGS-22979): IBMCloud: Add eu-es region [#7685](https://github.com/openshift/installer/pull/7685)
* [OCPBUGS-30629](https://issues.redhat.com/browse/OCPBUGS-30629): baremetal: populate customDeploy in advance [#8129](https://github.com/openshift/installer/pull/8129)
* [OCPBUGS-29627](https://issues.redhat.com/browse/OCPBUGS-29627): update RHCOS 4.13 bootimage metadata to 413.92.202402131523-0 [#8038](https://github.com/openshift/installer/pull/8038)
* [OCPBUGS-30000](https://issues.redhat.com/browse/OCPBUGS-30000): [release-4.13] Bump containerd for vulnerability fix [#8073](https://github.com/openshift/installer/pull/8073)
* [OCPBUGS-28654](https://issues.redhat.com/browse/OCPBUGS-28654): Fix depreciated typo [#7963](https://github.com/openshift/installer/pull/7963)
* [OCPBUGS-27453](https://issues.redhat.com/browse/OCPBUGS-27453): baremetal: correct external_http_url for v6-only BMCs [#7934](https://github.com/openshift/installer/pull/7934)
* [OCPBUGS-23499](https://issues.redhat.com/browse/OCPBUGS-23499): update RHCOS 4.13 bootimage metadata to 413.92.202401100947-0 [#7920](https://github.com/openshift/installer/pull/7920)
* [OCPBUGS-25420](https://issues.redhat.com/browse/OCPBUGS-25420): destroy: gcp: fix destroying regional disks [#7840](https://github.com/openshift/installer/pull/7840)
* [OCPBUGS-23464](https://issues.redhat.com/browse/OCPBUGS-23464): Add KMS encryption keys if provided [#7746](https://github.com/openshift/installer/pull/7746)
* [OCPBUGS-23141](https://issues.redhat.com/browse/OCPBUGS-23141): Specify google cloud CLI to version 447.0.0 [#7706](https://github.com/openshift/installer/pull/7706)
* [OCPBUGS-22939](https://issues.redhat.com/browse/OCPBUGS-22939): azure: validation: validate defaultMachinePlatform [#7679](https://github.com/openshift/installer/pull/7679)
* [OCPBUGS-14551](https://issues.redhat.com/browse/OCPBUGS-14551): [vSphere] Upi installation failed due to VMs for master and worker node creation failed [#7229](https://github.com/openshift/installer/pull/7229)
* [OCPBUGS-19307](https://issues.redhat.com/browse/OCPBUGS-19307): Implement workaround to allow SNO installations for OKD/FCOS [#7480](https://github.com/openshift/installer/pull/7480)
* [OCPBUGS-18787](https://issues.redhat.com/browse/OCPBUGS-18787): vSphere set bootstrap/master efi [#7481](https://github.com/openshift/installer/pull/7481)
* [OCPBUGS-19320](https://issues.redhat.com/browse/OCPBUGS-19320): [release-4.13] for vsphere ipi add cluster domain to the uploaded vm configs so that… [#7498](https://github.com/openshift/installer/pull/7498)
* [OCPBUGS-20141](https://issues.redhat.com/browse/OCPBUGS-20141): [release-4.13] Use updated ansible-core for Openstack image [#7559](https://github.com/openshift/installer/pull/7559)
* [OCPBUGS-19670](https://issues.redhat.com/browse/OCPBUGS-19670): [release-4.13] Allow different service account for xpn installs in gcp [#7524](https://github.com/openshift/installer/pull/7524)
* [OCPBUGS-19773](https://issues.redhat.com/browse/OCPBUGS-19773): Increase bootstrap timeout for vSphere platform by 30 mins [#7530](https://github.com/openshift/installer/pull/7530)
* [OCPBUGS-16383](https://issues.redhat.com/browse/OCPBUGS-16383): [release-4.13] Default dataStore is returned the name instead the inventoryPath [#7343](https://github.com/openshift/installer/pull/7343)
* [OCPBUGS-13681](https://issues.redhat.com/browse/OCPBUGS-13681): FCOS: bump to latest stable version [#7188](https://github.com/openshift/installer/pull/7188)
* [OCPBUGS-11093](https://issues.redhat.com/browse/OCPBUGS-11093): Azure: don't set default subscriptionID for disk encryption sets [#7432](https://github.com/openshift/installer/pull/7432)
* [OCPBUGS-17809](https://issues.redhat.com/browse/OCPBUGS-17809): Allow destroy for C2S isolated (us-iso and us-isob) partitions [#7427](https://github.com/openshift/installer/pull/7427)
* [OCPBUGS-15231](https://issues.redhat.com/browse/OCPBUGS-15231): new Aws secret regions support [#7264](https://github.com/openshift/installer/pull/7264)
* [OCPBUGS-15222](https://issues.redhat.com/browse/OCPBUGS-15222): terraform: aws: secret regions now support ALIAS record [#7262](https://github.com/openshift/installer/pull/7262)
* [OCPBUGS-17823](https://issues.redhat.com/browse/OCPBUGS-17823): CORS-2445: GCP: Add osImage to the install config [#7431](https://github.com/openshift/installer/pull/7431)
* [OCPBUGS-14432](https://issues.redhat.com/browse/OCPBUGS-14432): Replica validations [#7423](https://github.com/openshift/installer/pull/7423)
* [OCPBUGS-13865](https://issues.redhat.com/browse/OCPBUGS-13865): vSphere Add ova sha query; additional debugging [#7198](https://github.com/openshift/installer/pull/7198)
* [OCPBUGS-16640](https://issues.redhat.com/browse/OCPBUGS-16640): [release-4.13] Update azure cli version to 2.49.0 [#7357](https://github.com/openshift/installer/pull/7357)
* [OCPBUGS-16777](https://issues.redhat.com/browse/OCPBUGS-16777): update RHCOS 4.13 bootimage metadata to 413.92.202307260246-0 [#7410](https://github.com/openshift/installer/pull/7410)
* [CORS-2764](https://issues.redhat.com/browse/CORS-2764): AWS Shared VPC Backport [release-4.13] [#7362](https://github.com/openshift/installer/pull/7362)
* [OCPBUGS-17104](https://issues.redhat.com/browse/OCPBUGS-17104): [release-4.13] vsphere terraform bump [#7383](https://github.com/openshift/installer/pull/7383)
* [OCPBUGS-17397](https://issues.redhat.com/browse/OCPBUGS-17397): backport openstack UPI for ansible 2.10 [#7385](https://github.com/openshift/installer/pull/7385)
* [OCPBUGS-15290](https://issues.redhat.com/browse/OCPBUGS-15290): GCP: ic: improve project validation [#7361](https://github.com/openshift/installer/pull/7361)
* [OCPBUGS-16390](https://issues.redhat.com/browse/OCPBUGS-16390): Allow override of networkType [#7344](https://github.com/openshift/installer/pull/7344)
* [OCPBUGS-16673](https://issues.redhat.com/browse/OCPBUGS-16673): Fix timing issue between network services [#7358](https://github.com/openshift/installer/pull/7358)
* [OCPBUGS-14711](https://issues.redhat.com/browse/OCPBUGS-14711): Convert Rendezvous IPv6 address to canonical format [#7237](https://github.com/openshift/installer/pull/7237)
* [OCPBUGS-16066](https://issues.redhat.com/browse/OCPBUGS-16066): Use correct SELinux label. Make rename atomic. [#7315](https://github.com/openshift/installer/pull/7315)
* [OCPBUGS-14599](https://issues.redhat.com/browse/OCPBUGS-14599): Log additional host info at warning level [#7233](https://github.com/openshift/installer/pull/7233)
* [OCPBUGS-15866](https://issues.redhat.com/browse/OCPBUGS-15866): Use the same names for public LB in IPI and UPI Azure [#7302](https://github.com/openshift/installer/pull/7302)
* [OCPBUGS-16124](https://issues.redhat.com/browse/OCPBUGS-16124): azure: skip LB creation when not needed [#7322](https://github.com/openshift/installer/pull/7322)
* [OCPBUGS-13812](https://issues.redhat.com/browse/OCPBUGS-13812): ic: azure: validate diskTypes in AzureStack [#7195](https://github.com/openshift/installer/pull/7195)
* [OCPBUGS-15230](https://issues.redhat.com/browse/OCPBUGS-15230): azure: skip NSG creation when BYO vnet [#7263](https://github.com/openshift/installer/pull/7263)
* [OCPBUGS-15591](https://issues.redhat.com/browse/OCPBUGS-15591): [release-4.13] gcp: add confidential compute support for boostrap TF [#7298](https://github.com/openshift/installer/pull/7298)
* [OCPBUGS-15187](https://issues.redhat.com/browse/OCPBUGS-15187): images: installer: add xz to the container [#7260](https://github.com/openshift/installer/pull/7260)
* [OCPBUGS-14867](https://issues.redhat.com/browse/OCPBUGS-14867): Shorten SNO installation duration by releasing CPC lease [#7241](https://github.com/openshift/installer/pull/7241)
* [OCPBUGS-13752](https://issues.redhat.com/browse/OCPBUGS-13752): Set AdditionalTrustBundle in override when mirroring not enabled [#7191](https://github.com/openshift/installer/pull/7191)
* [OCPBUGS-15289](https://issues.redhat.com/browse/OCPBUGS-15289): gcp use preconfigured private zone for installation [#7271](https://github.com/openshift/installer/pull/7271)
* [OCPBUGS-14916](https://issues.redhat.com/browse/OCPBUGS-14916): Replace with govc docker image and fix ibmcli folder permission issue [#7245](https://github.com/openshift/installer/pull/7245)
* [OCPBUGS-13323](https://issues.redhat.com/browse/OCPBUGS-13323): update RHCOS 4.13 bootimage metadata to 413.92.202306140611-0 [#7248](https://github.com/openshift/installer/pull/7248)
* [OCPBUGS-14860](https://issues.redhat.com/browse/OCPBUGS-14860): GCP XPN Private Cluster Fails with no Public Zone [#7240](https://github.com/openshift/installer/pull/7240)
* [OCPBUGS-13765](https://issues.redhat.com/browse/OCPBUGS-13765): Support /dev/disk/by-path root device hints [#7193](https://github.com/openshift/installer/pull/7193)
* [OCPBUGS-14171](https://issues.redhat.com/browse/OCPBUGS-14171): Ignore IAM Roles that the Installer is not authorized to access [#7210](https://github.com/openshift/installer/pull/7210)
* [OCPBUGS-11530](https://issues.redhat.com/browse/OCPBUGS-11530): [release-4.13] add project filter to gcp usage api requests [#7045](https://github.com/openshift/installer/pull/7045)
* [OCPBUGS-10493](https://issues.redhat.com/browse/OCPBUGS-10493): Nutanix Hostname of the VM is not set when using DHCP network config [#7016](https://github.com/openshift/installer/pull/7016)
* [OCPBUGS-14027](https://issues.redhat.com/browse/OCPBUGS-14027): GCP XPN: Pass instance service acct in manual mode [#7204](https://github.com/openshift/installer/pull/7204)
* [OCPBUGS-11775](https://issues.redhat.com/browse/OCPBUGS-11775): Log additional info when status is pending-user-action [#7090](https://github.com/openshift/installer/pull/7090)
* [OCPBUGS-13086](https://issues.redhat.com/browse/OCPBUGS-13086): Bootstrap on aws should have same metadata service type as on other nodes [#7162](https://github.com/openshift/installer/pull/7162)
* [OCPBUGS-12886](https://issues.redhat.com/browse/OCPBUGS-12886): use python3 for cloud sdk [#7140](https://github.com/openshift/installer/pull/7140)
* [OCPBUGS-11799](https://issues.redhat.com/browse/OCPBUGS-11799): update RHCOS 4.13 bootimage metadata to 413.92.202305021736-0 [#7156](https://github.com/openshift/installer/pull/7156)
* [OCPBUGS-12910](https://issues.redhat.com/browse/OCPBUGS-12910): openstack: Add netcat to the Installer image [#7144](https://github.com/openshift/installer/pull/7144)
* [OCPBUGS-11845](https://issues.redhat.com/browse/OCPBUGS-11845), [OCPBUGS-11846](https://issues.redhat.com/browse/OCPBUGS-11846), [OCPBUGS-11847](https://issues.redhat.com/browse/OCPBUGS-11847): CVE: bump hashicorp/vault  version [#7097](https://github.com/openshift/installer/pull/7097)
* [OCPBUGS-5140](https://issues.redhat.com/browse/OCPBUGS-5140): [Alibaba] update the bandwidth value of EIP [#7010](https://github.com/openshift/installer/pull/7010)
* [OCPBUGS-11261](https://issues.redhat.com/browse/OCPBUGS-11261): Fix and improve locking session and AWS Metadata access [#7129](https://github.com/openshift/installer/pull/7129)
* [OCPBUGS-12179](https://issues.redhat.com/browse/OCPBUGS-12179): agent: copy also symbolic link when storing agent-tui related files into the agent ISO [#7113](https://github.com/openshift/installer/pull/7113)
* [OCPBUGS-11950](https://issues.redhat.com/browse/OCPBUGS-11950): vsphere, nutanix survey: relax vip in machine cidr [#7107](https://github.com/openshift/installer/pull/7107)
* [OCPBUGS-11529](https://issues.redhat.com/browse/OCPBUGS-11529): [release-4.13] gather: azure: fix collecting VM serial logs [#7077](https://github.com/openshift/installer/pull/7077)
* [OCPBUGS-10658](https://issues.redhat.com/browse/OCPBUGS-10658): openstack: No master primarySubnet control-plane if portTarget is set [#7008](https://github.com/openshift/installer/pull/7008)
* [OCPBUGS-11789](https://issues.redhat.com/browse/OCPBUGS-11789): update RHCOS 4.13 bootimage metadata to 413.92.202304131328-0 [#7093](https://github.com/openshift/installer/pull/7093)
* [OCPBUGS-11659](https://issues.redhat.com/browse/OCPBUGS-11659): Upgrade libnmstate version used [#7082](https://github.com/openshift/installer/pull/7082)
* [OCPBUGS-11661](https://issues.redhat.com/browse/OCPBUGS-11661): AWS - Remove ACLs from s3 ign [#7083](https://github.com/openshift/installer/pull/7083)
* [OCPBUGS-11010](https://issues.redhat.com/browse/OCPBUGS-11010): vSphere - finding networks use full path cluster [#7043](https://github.com/openshift/installer/pull/7043)
* [OCPBUGS-10892](https://issues.redhat.com/browse/OCPBUGS-10892): Don't log password values [#7024](https://github.com/openshift/installer/pull/7024)
* [OCPBUGS-11093](https://issues.redhat.com/browse/OCPBUGS-11093): pkg/asset/installconfig: set subscriptionID [#7049](https://github.com/openshift/installer/pull/7049)
* [OCPBUGS-11188](https://issues.redhat.com/browse/OCPBUGS-11188): Use 100 GB as minimum disk size in validations [#7053](https://github.com/openshift/installer/pull/7053)
* [OCPBUGS-10989](https://issues.redhat.com/browse/OCPBUGS-10989): Properly handle invalid agent command [#7034](https://github.com/openshift/installer/pull/7034)
* [OCPBUGS-10903](https://issues.redhat.com/browse/OCPBUGS-10903): IBMCloud: Fix SSH Private bootstrap [#7027](https://github.com/openshift/installer/pull/7027)
* [OCPBUGS-11011](https://issues.redhat.com/browse/OCPBUGS-11011): Do not remove host default configuration unless network configuration is provided for it [#7044](https://github.com/openshift/installer/pull/7044)
* [OCPBUGS-11040](https://issues.redhat.com/browse/OCPBUGS-11040): remove container-runtime flag from kubelet config [#7048](https://github.com/openshift/installer/pull/7048)
* [OCPBUGS-11054](https://issues.redhat.com/browse/OCPBUGS-11054): GCP: add europe-west12 region to the survey as supported region [#7046](https://github.com/openshift/installer/pull/7046)
* [OCPBUGS-11004](https://issues.redhat.com/browse/OCPBUGS-11004): Kubelet Client Cert should include system:serviceaccounts group [#7039](https://github.com/openshift/installer/pull/7039)
* [OCPBUGS-10902](https://issues.redhat.com/browse/OCPBUGS-10902): IBMCloud set dnsrecords offset [#7026](https://github.com/openshift/installer/pull/7026)
* rhcos: Bump to 413.92.202303281804-0 [#7041](https://github.com/openshift/installer/pull/7041)
* [OCPBUGS-10657](https://issues.redhat.com/browse/OCPBUGS-10657): Do not always output warning msg when releaseImage is digest [#7007](https://github.com/openshift/installer/pull/7007)
* [OCPBUGS-10656](https://issues.redhat.com/browse/OCPBUGS-10656): Verify output file exists when `oc image extract` is run [#7006](https://github.com/openshift/installer/pull/7006)
* [OCPBUGS-10813](https://issues.redhat.com/browse/OCPBUGS-10813): bootstrap-pivot: skip pivot in SCOS Live ISO [#7020](https://github.com/openshift/installer/pull/7020)
* [OCPBUGS-8511](https://issues.redhat.com/browse/OCPBUGS-8511): baremetal: do not use port 80 for httpd [#7022](https://github.com/openshift/installer/pull/7022)
* [OCPBUGS-10214](https://issues.redhat.com/browse/OCPBUGS-10214): CVE-2023-25173: bump containerd [#7013](https://github.com/openshift/installer/pull/7013)
* [OCPBUGS-10597](https://issues.redhat.com/browse/OCPBUGS-10597): fix agent tui showing up multiple times [#6989](https://github.com/openshift/installer/pull/6989)
* [OCPBUGS-6265](https://issues.redhat.com/browse/OCPBUGS-6265): Shorten SNO installation duration by releasing CVO lease [#6979](https://github.com/openshift/installer/pull/6979)
* [OCPBUGS-10585](https://issues.redhat.com/browse/OCPBUGS-10585): rhcos: Update to 413.92.202303190222-0 [#6997](https://github.com/openshift/installer/pull/6997)
* [OCPBUGS-10499](https://issues.redhat.com/browse/OCPBUGS-10499): [release-4.13] CVE: bump mongo-go-driver for fix [#6986](https://github.com/openshift/installer/pull/6986)
* [OCPBUGS-10436](https://issues.redhat.com/browse/OCPBUGS-10436): Sort userTags in Machine and Machineset manifests [#6983](https://github.com/openshift/installer/pull/6983)
* [OCPBUGS-10213](https://issues.redhat.com/browse/OCPBUGS-10213): aws: bump aws-sdk-go version [#6969](https://github.com/openshift/installer/pull/6969)
* update RHCOS 4.13 bootimage metadata [#6955](https://github.com/openshift/installer/pull/6955)
* [OCPBUGS-8463](https://issues.redhat.com/browse/OCPBUGS-8463): [release-4.13] OpenStack Failure domains [#6948](https://github.com/openshift/installer/pull/6948)
* [OCPBUGS-8312](https://issues.redhat.com/browse/OCPBUGS-8312): Power VS: Add resourceGroup to infrastructure manifest [#6930](https://github.com/openshift/installer/pull/6930)
* [OCPBUGS-8353](https://issues.redhat.com/browse/OCPBUGS-8353): Disable 'create pxe-files' command [#6939](https://github.com/openshift/installer/pull/6939)
* [OCPBUGS-8463](https://issues.redhat.com/browse/OCPBUGS-8463): [release-4.13] openstack: consistent TechPreview-only feature validation [#6934](https://github.com/openshift/installer/pull/6934)
* [OCPBUGS-8341](https://issues.redhat.com/browse/OCPBUGS-8341): Pass Capabilites from install-config to cluster [#6936](https://github.com/openshift/installer/pull/6936)
* [OCPBUGS-8343](https://issues.redhat.com/browse/OCPBUGS-8343): Disable systemd status while TUI showing [#6938](https://github.com/openshift/installer/pull/6938)
* [OCPBUGS-8342](https://issues.redhat.com/browse/OCPBUGS-8342): Specify filename for default registries.conf [#6937](https://github.com/openshift/installer/pull/6937)
* [SPLAT-636](https://issues.redhat.com/browse/SPLAT-636): Create edge compute pool to support AWS Local Zones [#6931](https://github.com/openshift/installer/pull/6931)
* [OPNET-199](https://issues.redhat.com/browse/OPNET-199): Allow v6-primary dual stack on baremetal [#6881](https://github.com/openshift/installer/pull/6881)
* Generate CSI driver manifests [#6856](https://github.com/openshift/installer/pull/6856)
* Azure: use managed storage account for boot logs [#6848](https://github.com/openshift/installer/pull/6848)
* [OCPBUGS-7015](https://issues.redhat.com/browse/OCPBUGS-7015): Relax MachineCIDR check for vSphere, Nutanix [#6915](https://github.com/openshift/installer/pull/6915)
* [ARMOCP-417](https://issues.redhat.com/browse/ARMOCP-417): enable arm64 for agent installer [#6401](https://github.com/openshift/installer/pull/6401)
* [AGENT-502](https://issues.redhat.com/browse/AGENT-502): Enable agent tui [#6898](https://github.com/openshift/installer/pull/6898)
* GCP: conditionally create bootstrap service account [#6853](https://github.com/openshift/installer/pull/6853)
* vsphere: Remove bostrt from approver/reviewer group [#6918](https://github.com/openshift/installer/pull/6918)
* [OCPBUGS-7860](https://issues.redhat.com/browse/OCPBUGS-7860): azure: session: fix unclear auth error messages [#6901](https://github.com/openshift/installer/pull/6901)
* [OCPBUGS-7991](https://issues.redhat.com/browse/OCPBUGS-7991): vSphere - only create RP when cluster is not empty [#6905](https://github.com/openshift/installer/pull/6905)
* Support the new fields in NutanixMachineProviderConfig [#6841](https://github.com/openshift/installer/pull/6841)
* openstack-manifests: Option to run selected test cases [#6908](https://github.com/openshift/installer/pull/6908)
* [AGENT-526](https://issues.redhat.com/browse/AGENT-526): Refactor Agent InstallConfig embedding [#6796](https://github.com/openshift/installer/pull/6796)
* [OCPBUGS-7993](https://issues.redhat.com/browse/OCPBUGS-7993): hack/build-coreos-manifest: support OKD [#6906](https://github.com/openshift/installer/pull/6906)
* bump version of ovirt terraform provider [#6883](https://github.com/openshift/installer/pull/6883)
* [OCPBUGS-7622](https://issues.redhat.com/browse/OCPBUGS-7622): Ignore CPMS file if not exist [#6887](https://github.com/openshift/installer/pull/6887)
* linter: enable reporting about exported names lacking comments [#6880](https://github.com/openshift/installer/pull/6880)
* [CFE-757](https://issues.redhat.com/browse/CFE-757): Fix issues reported by QE [#6870](https://github.com/openshift/installer/pull/6870)
* [OCPBUGS-7579](https://issues.redhat.com/browse/OCPBUGS-7579): azure: fix certificate-based auth with passpharse [#6871](https://github.com/openshift/installer/pull/6871)
* Update alias for Metal Platform [#6884](https://github.com/openshift/installer/pull/6884)
* [CORS-2496](https://issues.redhat.com/browse/CORS-2496): Default `2xlarge` instead of `xlarge` in AWS when the control-plane is single-node [#6814](https://github.com/openshift/installer/pull/6814)
* [OSASINFRA-3090](https://issues.redhat.com/browse/OSASINFRA-3090): External LB support for on-prem platforms [#6812](https://github.com/openshift/installer/pull/6812)
* [Bug 1904573](https://bugzilla.redhat.com/show_bug.cgi?id=1904573): baremetal container modify /etc/passwd group writable [#6872](https://github.com/openshift/installer/pull/6872)
* [SPLAT-823](https://issues.redhat.com/browse/SPLAT-823): Zonal GA, single terraform, deprecate legacy platform spec [#6770](https://github.com/openshift/installer/pull/6770)
* openstack: Fix missing docs link [#6852](https://github.com/openshift/installer/pull/6852)
* [OCPBUGS-7180](https://issues.redhat.com/browse/OCPBUGS-7180): update RHCOS 4.13 bootimage metadata [#6861](https://github.com/openshift/installer/pull/6861)
* Removes m1kola from azure-reviewers [#6865](https://github.com/openshift/installer/pull/6865)
* [OCPBUGS-7495](https://issues.redhat.com/browse/OCPBUGS-7495): Convert platform type for AgentClusterInstall [#6855](https://github.com/openshift/installer/pull/6855)
* [CFE-582](https://issues.redhat.com/browse/CFE-582): Generate Infrastructure CR with the azure user defined tags [#6310](https://github.com/openshift/installer/pull/6310)
* [AGENT-456](https://issues.redhat.com/browse/AGENT-456): Remove connectivity checks from bash script [#6846](https://github.com/openshift/installer/pull/6846)
* integration: Don't pass host data in the install-config [#6795](https://github.com/openshift/installer/pull/6795)
* linter: bump version to sync with CI [#6859](https://github.com/openshift/installer/pull/6859)
* [OCPBUGS-4954](https://issues.redhat.com/browse/OCPBUGS-4954): IBMCloud: Handle COS reclamations [#6845](https://github.com/openshift/installer/pull/6845)
* [CFE-757](https://issues.redhat.com/browse/CFE-757): Fix issues reported by QE [#6820](https://github.com/openshift/installer/pull/6820)
* [CORS-2386](https://issues.redhat.com/browse/CORS-2386): IBMCloud: Add networkResourceGroupName [#6613](https://github.com/openshift/installer/pull/6613)
* IBMCloud: Add tests for installconfig metadata [#6348](https://github.com/openshift/installer/pull/6348)
* [OCPBUGS-1048](https://issues.redhat.com/browse/OCPBUGS-1048): if tag categories don't exist, the installation will fail to bootstrap [#6327](https://github.com/openshift/installer/pull/6327)
* [CFE-586](https://issues.redhat.com/browse/CFE-586): Apply user defined tags on created azure resources [#6354](https://github.com/openshift/installer/pull/6354)
* [OCPBUGS-7356](https://issues.redhat.com/browse/OCPBUGS-7356): data/manifests/bootkube/cvo-overrides: Default to stable-4.13 [#6689](https://github.com/openshift/installer/pull/6689)
* [OCPBUGS-6777](https://issues.redhat.com/browse/OCPBUGS-6777): Fix file check for loading openshift manifests [#6821](https://github.com/openshift/installer/pull/6821)
* [AGENT-505](https://issues.redhat.com/browse/AGENT-505): Embed agent files in initrd [#6842](https://github.com/openshift/installer/pull/6842)
* installer dev build settings to enable delve [#6835](https://github.com/openshift/installer/pull/6835)
* [OCPBUGS-7261](https://issues.redhat.com/browse/OCPBUGS-7261): Update AgentConfig template [#6840](https://github.com/openshift/installer/pull/6840)
* [OCPBUGS-4549](https://issues.redhat.com/browse/OCPBUGS-4549): azure: fix MS Graph calls on Gov cloud [#6844](https://github.com/openshift/installer/pull/6844)
* openstack-manifests: Add a debug option [#6839](https://github.com/openshift/installer/pull/6839)
* OpenStack: Fix distribution of zones on 32-bit systems [#6834](https://github.com/openshift/installer/pull/6834)
* [OCPBUGS-6422](https://issues.redhat.com/browse/OCPBUGS-6422): CVE-2022-41717: bump net/http for fix [#6801](https://github.com/openshift/installer/pull/6801)
* [CNF-6357](https://issues.redhat.com/browse/CNF-6357): feat: add CPU Partitioning flag into the install config [#6430](https://github.com/openshift/installer/pull/6430)
* [SPLAT-820](https://issues.redhat.com/browse/SPLAT-820): multi-zone is no longer tech preview [#6782](https://github.com/openshift/installer/pull/6782)
* destroy: vsphere: move API calls to client abstraction and add unit tests [#6604](https://github.com/openshift/installer/pull/6604)
* Add support for confidential compute [#6799](https://github.com/openshift/installer/pull/6799)
* Add Adam [#6824](https://github.com/openshift/installer/pull/6824)
* [OCPBUGS-5234](https://issues.redhat.com/browse/OCPBUGS-5234): azurestack: upi: fix compute scale up [#6735](https://github.com/openshift/installer/pull/6735)
* [CNF-6362](https://issues.redhat.com/browse/CNF-6362): feat: add support for nto rendering during bootstrap [#6691](https://github.com/openshift/installer/pull/6691)
* [OCPBUGS-4997](https://issues.redhat.com/browse/OCPBUGS-4997): Set the configured proxy settings for agent installer [#6827](https://github.com/openshift/installer/pull/6827)
* azure: Add error message when authorizer fails. [#6551](https://github.com/openshift/installer/pull/6551)
* [OCPBUGS-6486](https://issues.redhat.com/browse/OCPBUGS-6486): fixing ovirt installation on iSCSI [#6816](https://github.com/openshift/installer/pull/6816)
* [OCPBUGS-6270](https://issues.redhat.com/browse/OCPBUGS-6270): Don't require vSphere details for agent installer [#6793](https://github.com/openshift/installer/pull/6793)
* [OCPBUGS-6722](https://issues.redhat.com/browse/OCPBUGS-6722): bootimage: move secure execution artifact to separate artifact [#6811](https://github.com/openshift/installer/pull/6811)
* PowerVS: Check for potential network conflict in existing CCs [#6798](https://github.com/openshift/installer/pull/6798)
* [OCPBUGS-6663](https://issues.redhat.com/browse/OCPBUGS-6663): Check platform baremetal settings against default values [#6809](https://github.com/openshift/installer/pull/6809)
* [AGENT-455](https://issues.redhat.com/browse/AGENT-455): Check registry and rendezvous host access at startup [#6767](https://github.com/openshift/installer/pull/6767)
* [OCPBUGS-4549](https://issues.redhat.com/browse/OCPBUGS-4549): destroy: azure: handle `nil` responses from msgraph sdk [#6717](https://github.com/openshift/installer/pull/6717)
* [AGENT-505](https://issues.redhat.com/browse/AGENT-505): Embed agent-tui binary in the agent ISO [#6786](https://github.com/openshift/installer/pull/6786)
* PowerVS: Remove region requirement [#6772](https://github.com/openshift/installer/pull/6772)
* [Bug 2072202](https://bugzilla.redhat.com/show_bug.cgi?id=2072202): Check for reachability of API and API-Int URLs later in bootkube [#6611](https://github.com/openshift/installer/pull/6611)
* [Bug 2067847](https://bugzilla.redhat.com/show_bug.cgi?id=2067847): prometheus/client_golang: Denial of service using InstrumentHandlerCounter [#6391](https://github.com/openshift/installer/pull/6391)
* [CORS-2479](https://issues.redhat.com/browse/CORS-2479): bootstrap: set 0644 mode for registries.conf [#6789](https://github.com/openshift/installer/pull/6789)
* GCP: Remove the BYOH code [#6771](https://github.com/openshift/installer/pull/6771)
* [AGENT-453](https://issues.redhat.com/browse/AGENT-453): Create interactive console service for agent installer [#6756](https://github.com/openshift/installer/pull/6756)
* [OCPBUGS-5959](https://issues.redhat.com/browse/OCPBUGS-5959): bump RHCOS 4.13 bootimage metadata [#6790](https://github.com/openshift/installer/pull/6790)
* [CORS-2469](https://issues.redhat.com/browse/CORS-2469): upi: Document removal of CPMS for UPI installation [#6727](https://github.com/openshift/installer/pull/6727)
* [Bug 2070744](https://bugzilla.redhat.com/show_bug.cgi?id=2070744): Fix infinite loop error [#6515](https://github.com/openshift/installer/pull/6515)
* [CORS-1558](https://issues.redhat.com/browse/CORS-1558): Add uninstall complete after destroy code [#6572](https://github.com/openshift/installer/pull/6572)
* [AGENT-504](https://issues.redhat.com/browse/AGENT-504): Agent extract binary [#6777](https://github.com/openshift/installer/pull/6777)
* [OCPBUGS-5182](https://issues.redhat.com/browse/OCPBUGS-5182): validate additional confidential VM types [#6733](https://github.com/openshift/installer/pull/6733)
* [OCPBUGS-5461](https://issues.redhat.com/browse/OCPBUGS-5461): Allow NO_PROXY to contain IPs [#6776](https://github.com/openshift/installer/pull/6776)
* [OCPBUGS-3253](https://issues.redhat.com/browse/OCPBUGS-3253): Warn if agent assets detected when using non-agent waitfor [#6740](https://github.com/openshift/installer/pull/6740)
* [OCPBUGS-4654](https://issues.redhat.com/browse/OCPBUGS-4654): azure: upi: use Image Gallery in ARM templates [#6684](https://github.com/openshift/installer/pull/6684)
* [OCPBUGS-5184](https://issues.redhat.com/browse/OCPBUGS-5184): azure: validate Windows-only VM types [#6734](https://github.com/openshift/installer/pull/6734)
* [CORS-2449](https://issues.redhat.com/browse/CORS-2449): gcp: Set pre-created CPMS to Active state [#6752](https://github.com/openshift/installer/pull/6752)
* [OCPBUGS-1612](https://issues.redhat.com/browse/OCPBUGS-1612): vsphere: set default resource pool when missing failure domain topology [#6409](https://github.com/openshift/installer/pull/6409)
* Generate the cloudproviderconfig manifests for integration of nutanix-ccm to OCP [#6269](https://github.com/openshift/installer/pull/6269)
* [CORS-2405](https://issues.redhat.com/browse/CORS-2405): Create ControlPlaneMachineSet CRDs [#6632](https://github.com/openshift/installer/pull/6632)
* [OCPBUGS-5734](https://issues.redhat.com/browse/OCPBUGS-5734): make VIP 168.63.129.16 noProxy in all clouds except Public [#6761](https://github.com/openshift/installer/pull/6761)
* [OCPBUGS-1695](https://issues.redhat.com/browse/OCPBUGS-1695): Update FCOS to latest 37.20221127.3.0 stable [#6487](https://github.com/openshift/installer/pull/6487)
* [OCPBUGS-5770](https://issues.redhat.com/browse/OCPBUGS-5770): CVE-2021-4238: goutils: update for randomness fix [#6763](https://github.com/openshift/installer/pull/6763)
* BUG 2110982: GCP skip public loadbalancer ip addresses [#6755](https://github.com/openshift/installer/pull/6755)
* [AGENT-501](https://issues.redhat.com/browse/AGENT-501): Make it easier to change node zero IP and SERVICE_BASE_URL [#6747](https://github.com/openshift/installer/pull/6747)
* [MGMT-12839](https://issues.redhat.com/browse/MGMT-12839): Add Shielded VMs options to gcp mpool and TF [#6698](https://github.com/openshift/installer/pull/6698)
* [OCPBUGS-5324](https://issues.redhat.com/browse/OCPBUGS-5324): CVE-2021-4235 go-yaml: Denial of Service in go-yaml [#6741](https://github.com/openshift/installer/pull/6741)
* [OCPBUGS-881](https://issues.redhat.com/browse/OCPBUGS-881): fail to create install-config.yaml as apiVIP and ingress VIP are not in machine networks [#6469](https://github.com/openshift/installer/pull/6469)
* [SPLAT-901](https://issues.redhat.com/browse/SPLAT-901): set default for variables that are deprecated by failure_domains [#6750](https://github.com/openshift/installer/pull/6750)
* [OCPBUGS-1769](https://issues.redhat.com/browse/OCPBUGS-1769): Check for AWS STS installation before trying to get all IAM Roles [#6666](https://github.com/openshift/installer/pull/6666)
* GCP XPN: remove tech preview feature gate [#6754](https://github.com/openshift/installer/pull/6754)
* Expose Azure useImageGallery parameter in the MachineSets() call [#6737](https://github.com/openshift/installer/pull/6737)
* [OCPBUGS-2088](https://issues.redhat.com/browse/OCPBUGS-2088): Validate that the rendevousIP is assigned to a master [#6716](https://github.com/openshift/installer/pull/6716)
* [ARO-1796](https://issues.redhat.com/browse/ARO-1796): Update Azure SDK for go to v63.1.0+incompatible [#6746](https://github.com/openshift/installer/pull/6746)
* openstack: Revert Gophercloud workaround [#6663](https://github.com/openshift/installer/pull/6663)
* [SPLAT-900](https://issues.redhat.com/browse/SPLAT-900): provision VMs in to failure domains [#6738](https://github.com/openshift/installer/pull/6738)
* [OCPBUGS-4874](https://issues.redhat.com/browse/OCPBUGS-4874): Remove order dependency for agent CLI string [#6739](https://github.com/openshift/installer/pull/6739)
* [CORS-2449](https://issues.redhat.com/browse/CORS-2449): Create CPMS manifest [#6695](https://github.com/openshift/installer/pull/6695)
* [OCPBUGS-2881](https://issues.redhat.com/browse/OCPBUGS-2881): Destroy the service and host project dns records [#6534](https://github.com/openshift/installer/pull/6534)
* Bug OCPBUGS-3921: OpenStack: fix bootstrap destroy cmd [#6617](https://github.com/openshift/installer/pull/6617)
* [OCPBUGS-3706](https://issues.redhat.com/browse/OCPBUGS-3706): Improve error reporting from agent wait-for install-complete [#6730](https://github.com/openshift/installer/pull/6730)
* Better logic to derive vpcRegion/Zone from vpcName/Subnets [#6665](https://github.com/openshift/installer/pull/6665)
* update tested instance types on 4.12 [#6731](https://github.com/openshift/installer/pull/6731)
* Updating ose-baremetal-installer images to be consistent with ART [#6678](https://github.com/openshift/installer/pull/6678)
* [OCPBUGS-5151](https://issues.redhat.com/browse/OCPBUGS-5151): baremetal: Extra time for provisioning interface [#6729](https://github.com/openshift/installer/pull/6729)
* [OCPBUGS-3032](https://issues.redhat.com/browse/OCPBUGS-3032): Report status on the console immediately [#6697](https://github.com/openshift/installer/pull/6697)
* Updating ose-installer images to be consistent with ART [#6675](https://github.com/openshift/installer/pull/6675)
* [OSASINFRA-3057](https://issues.redhat.com/browse/OSASINFRA-3057): openstack: Document Image Registry migration to Swift [#6710](https://github.com/openshift/installer/pull/6710)
* openstack: Rely on Go's stdlib for errors [#6656](https://github.com/openshift/installer/pull/6656)
* Updating ose-installer-artifacts images to be consistent with ART [#6693](https://github.com/openshift/installer/pull/6693)
* cmd: update import of deprecated terminal package [#6594](https://github.com/openshift/installer/pull/6594)
* GCP: Tfvars will determine the user has create firewall permissions [#6679](https://github.com/openshift/installer/pull/6679)
* [OCPBUGS-4941](https://issues.redhat.com/browse/OCPBUGS-4941): OpenStack: Force JSON content-type in Swift object listing [#6707](https://github.com/openshift/installer/pull/6707)
* PowerVS: Defer cancel when calling contextWithTimeout [#6700](https://github.com/openshift/installer/pull/6700)
* linter: fix issues since revision 75173a17cf [#6712](https://github.com/openshift/installer/pull/6712)
* [OCPBUGS-2996](https://issues.redhat.com/browse/OCPBUGS-2996): bump RHCOS 4.13 bootimage metadata [#6703](https://github.com/openshift/installer/pull/6703)
* [CORS-2340](https://issues.redhat.com/browse/CORS-2340): hack: replace deprecated go-lint [#6601](https://github.com/openshift/installer/pull/6601)
* [OCPBUGS-3706](https://issues.redhat.com/browse/OCPBUGS-3706): Wait longer for baremetal [#6688](https://github.com/openshift/installer/pull/6688)
* Fix import order using the gci tool [#6643](https://github.com/openshift/installer/pull/6643)
* Switch back to gp2 ebs volume type for bootstrap instance [#6692](https://github.com/openshift/installer/pull/6692)
* [OCPBUGS-2891](https://issues.redhat.com/browse/OCPBUGS-2891): aws: destroy: delete ELB listeners [#6528](https://github.com/openshift/installer/pull/6528)
* Consolidate loadsdk debug statements [#6686](https://github.com/openshift/installer/pull/6686)
* OWNERS_ALIASES: Remove lucab [#6696](https://github.com/openshift/installer/pull/6696)
* [OCPBUGS-4549](https://issues.redhat.com/browse/OCPBUGS-4549): azure: replace deprecated AD Graph API [#6614](https://github.com/openshift/installer/pull/6614)
* Save rendezvous IP in a file 'rendezvousIP' alongside the ISO [#6683](https://github.com/openshift/installer/pull/6683)
* [OCPBUGS-3987](https://issues.redhat.com/browse/OCPBUGS-3987): Check nmstateconfig content in agent-config.yaml [#6674](https://github.com/openshift/installer/pull/6674)
* [CORS-2147](https://issues.redhat.com/browse/CORS-2147): Add documentation for the client certs authentication [#6505](https://github.com/openshift/installer/pull/6505)
* [OCPBUGS-4367](https://issues.redhat.com/browse/OCPBUGS-4367): Fix missing debug messages when getting baseISO [#6662](https://github.com/openshift/installer/pull/6662)
* Use backoff functions in PowerVS destroy logic [#6591](https://github.com/openshift/installer/pull/6591)
* [OCPBUGS-3032](https://issues.redhat.com/browse/OCPBUGS-3032): Report agent installation problems on the console [#6544](https://github.com/openshift/installer/pull/6544)
* [OCPBUGS-3668](https://issues.redhat.com/browse/OCPBUGS-3668): fully qualified username must be provided [#6596](https://github.com/openshift/installer/pull/6596)
* [OCPBUGS-1560](https://issues.redhat.com/browse/OCPBUGS-1560): vsphere zonal, terraform depends on ova import [#6498](https://github.com/openshift/installer/pull/6498)
* Agent integration tests proposal [#6598](https://github.com/openshift/installer/pull/6598)
* [CORS-2291](https://issues.redhat.com/browse/CORS-2291): terraform: save logs to a file [#6532](https://github.com/openshift/installer/pull/6532)
* [OCPBUGS-3196](https://issues.redhat.com/browse/OCPBUGS-3196): Set ip=dhcp,dhcp6 for master nodes on dualstack [#6626](https://github.com/openshift/installer/pull/6626)
* [OCPBUGS-2130](https://issues.redhat.com/browse/OCPBUGS-2130): import ova resource cluster path fix [#6519](https://github.com/openshift/installer/pull/6519)
* [OCPBUGS-2498](https://issues.redhat.com/browse/OCPBUGS-2498): ose-installer-container: vault: insufficient certificate revocation list checking [#6493](https://github.com/openshift/installer/pull/6493)
* Wait longer for VM to obtain IP from DHCP in PowerVS [#6651](https://github.com/openshift/installer/pull/6651)
* platformprovisioncheck: fix shadowing of `err` variable [#6595](https://github.com/openshift/installer/pull/6595)
* Alibaba: add the tags of the machine nodes [#6535](https://github.com/openshift/installer/pull/6535)
* Azure: use azidentity with adapter [#6003](https://github.com/openshift/installer/pull/6003)
* [OCPBUGS-4125](https://issues.redhat.com/browse/OCPBUGS-4125): Enable CVO unmanage overrides in bootstrap-in-place installations [#6649](https://github.com/openshift/installer/pull/6649)
* openstack: Refactor TFVars generation [#6465](https://github.com/openshift/installer/pull/6465)
* Update OpenStack spec dependencies [#6382](https://github.com/openshift/installer/pull/6382)
* [OCPBUGS-3164](https://issues.redhat.com/browse/OCPBUGS-3164): hold bootkube service until bootstrap has pivoted [#6488](https://github.com/openshift/installer/pull/6488)
* [OCPBUGS-4355](https://issues.redhat.com/browse/OCPBUGS-4355): Fix return value from execute() [#6646](https://github.com/openshift/installer/pull/6646)
* [OCPBUGS-4328](https://issues.redhat.com/browse/OCPBUGS-4328): images: updating images to be consistent with ART [#6641](https://github.com/openshift/installer/pull/6641)
* vSphere Zonal: validate dns and external load balancer [#6612](https://github.com/openshift/installer/pull/6612)
* GCP: remove private zone manipulation [#6610](https://github.com/openshift/installer/pull/6610)
* Replace deprecated io/ioutil package [#6602](https://github.com/openshift/installer/pull/6602)
* ibmcloud plugin "permission denied" [#6627](https://github.com/openshift/installer/pull/6627)
* [Bug 2105570](https://bugzilla.redhat.com/show_bug.cgi?id=2105570): out-of-bounds read in golang.org/x/text/language leads to DoS [#6389](https://github.com/openshift/installer/pull/6389)
* [OCPBUGS-3524](https://issues.redhat.com/browse/OCPBUGS-3524): data: azurerm: restore RHCOS SA access configuration [#6583](https://github.com/openshift/installer/pull/6583)
* [OCPBUGS-3405](https://issues.redhat.com/browse/OCPBUGS-3405): Redact pull secret from agent-gather [#6574](https://github.com/openshift/installer/pull/6574)
* Adding aarch64 instance types for azure [#6531](https://github.com/openshift/installer/pull/6531)
* [OCPBUGS-2931](https://issues.redhat.com/browse/OCPBUGS-2931): Azure Stack: use managed images for compute nodes [#6540](https://github.com/openshift/installer/pull/6540)
* [OCPBUGS-3985](https://issues.redhat.com/browse/OCPBUGS-3985): Pass featureset to kas [#6579](https://github.com/openshift/installer/pull/6579)
* mv ibmcloud to /bin folder [#6624](https://github.com/openshift/installer/pull/6624)
* [OCPBUGS-3278](https://issues.redhat.com/browse/OCPBUGS-3278): (Agent) Do not require host data in platform baremetal section in installconfig [#6573](https://github.com/openshift/installer/pull/6573)
* [OCPBUGS-3277](https://issues.redhat.com/browse/OCPBUGS-3277): Restart create-cluster-and-infraenv.service if it fails [#6577](https://github.com/openshift/installer/pull/6577)
* [OCPBUGS-3933](https://issues.redhat.com/browse/OCPBUGS-3933): OpenStack: Force JSON content-type in Swift [#6615](https://github.com/openshift/installer/pull/6615)
* add ibmcloud cli to image [#6600](https://github.com/openshift/installer/pull/6600)
* Update vSphere Owner files [#6607](https://github.com/openshift/installer/pull/6607)
* [OCPBUGS-2384](https://issues.redhat.com/browse/OCPBUGS-2384): [Alibaba] fix the creation of public record [#5671](https://github.com/openshift/installer/pull/5671)
* docs: fix broken link to default kubelet.service taint [#6593](https://github.com/openshift/installer/pull/6593)
* [OCPBUGS-3186](https://issues.redhat.com/browse/OCPBUGS-3186): IBMCloud: Confirm Zones and BYON Subnets [#6553](https://github.com/openshift/installer/pull/6553)
* [OCPBUGS-3123](https://issues.redhat.com/browse/OCPBUGS-3123): Pass FeatureSet to cluster config render [#6576](https://github.com/openshift/installer/pull/6576)
* [OCPBUGS-2738](https://issues.redhat.com/browse/OCPBUGS-2738): Uplift terraform-provider-ironic to 0.3.0 [#6511](https://github.com/openshift/installer/pull/6511)
* [OCPBUGS-3382](https://issues.redhat.com/browse/OCPBUGS-3382): Fix cluster wide proxy [#6571](https://github.com/openshift/installer/pull/6571)
* [OCPBUGS-3280](https://issues.redhat.com/browse/OCPBUGS-3280): Automatically retry install [#6567](https://github.com/openshift/installer/pull/6567)
* [OCPBUGS-3304](https://issues.redhat.com/browse/OCPBUGS-3304): Always use first matching mirror in assisted-service [#6563](https://github.com/openshift/installer/pull/6563)
* [OCPBUGS-2841](https://issues.redhat.com/browse/OCPBUGS-2841): (AGENT) only support amd64 archs [#6546](https://github.com/openshift/installer/pull/6546)
* [OCPBUGS-3214](https://issues.redhat.com/browse/OCPBUGS-3214): Always add router CAs to kubeconfig, even if console is not available [#6557](https://github.com/openshift/installer/pull/6557)
* Update apiVersion for lso operator group [#6558](https://github.com/openshift/installer/pull/6558)
* [OCPBUGS-2513](https://issues.redhat.com/browse/OCPBUGS-2513): Set PublicContainerRegistries for entries in mirror [#6545](https://github.com/openshift/installer/pull/6545)
* [OCPBUGS-1627](https://issues.redhat.com/browse/OCPBUGS-1627): [vsphere-zones] Fix user folders [#6412](https://github.com/openshift/installer/pull/6412)
* [OCPBUGS-1704](https://issues.redhat.com/browse/OCPBUGS-1704): gcp: fail during validation if service usage is not enabled [#6516](https://github.com/openshift/installer/pull/6516)
* [OCPBUGS-3287](https://issues.redhat.com/browse/OCPBUGS-3287): agent ased installation fix for dual stack vips [#6530](https://github.com/openshift/installer/pull/6530)
* [OCPBUGS-3096](https://issues.redhat.com/browse/OCPBUGS-3096): Static linking the terraform and providers binaries [#6548](https://github.com/openshift/installer/pull/6548)
* [OCPBUGS-2911](https://issues.redhat.com/browse/OCPBUGS-2911): Use project after creation [#6552](https://github.com/openshift/installer/pull/6552)
* [OCPBUGS-3110](https://issues.redhat.com/browse/OCPBUGS-3110): azure: Fix client certs authentication [#6527](https://github.com/openshift/installer/pull/6527)
* [OCPBUGS-2847](https://issues.redhat.com/browse/OCPBUGS-2847): GCP XPN Featuregates [#6522](https://github.com/openshift/installer/pull/6522)
* [OCPBUGS-2758](https://issues.redhat.com/browse/OCPBUGS-2758): Provide datastore as full path [#6547](https://github.com/openshift/installer/pull/6547)
* [Bug 2074299](https://bugzilla.redhat.com/show_bug.cgi?id=2074299): update golang.org/x/crypto to address security vulnerabilities [#6388](https://github.com/openshift/installer/pull/6388)
* [OCPBUGS-2966](https://issues.redhat.com/browse/OCPBUGS-2966): Add GCP CreateFirewallRules to tech preview [#6533](https://github.com/openshift/installer/pull/6533)
* [OCPBUGS-1791](https://issues.redhat.com/browse/OCPBUGS-1791): add bootstrap configmap during the SNO reboot [#6521](https://github.com/openshift/installer/pull/6521)
* [OCPBUGS-2290](https://issues.redhat.com/browse/OCPBUGS-2290): Power VS Check for existing DNS permitted network and public gateway [#6481](https://github.com/openshift/installer/pull/6481)
* Add linux/arm64 binary to installer-artifacts [#6514](https://github.com/openshift/installer/pull/6514)
* [OCPBUGS-1033](https://issues.redhat.com/browse/OCPBUGS-1033): support multiple documents in the same extra manifest file [#6492](https://github.com/openshift/installer/pull/6492)
* [OCPBUGS-3018](https://issues.redhat.com/browse/OCPBUGS-3018): Use result from List function after checking error [#6541](https://github.com/openshift/installer/pull/6541)
* [OCPBUGS-2144](https://issues.redhat.com/browse/OCPBUGS-2144): Azure: Set appropriate architecture for gen v1 image [#6517](https://github.com/openshift/installer/pull/6517)
* go-fmt: apply formatting with golang 1.19 [#6497](https://github.com/openshift/installer/pull/6497)
* [OCPBUGS-2895](https://issues.redhat.com/browse/OCPBUGS-2895): Azure: Fix DiskEncryptionSet regex validation [#6513](https://github.com/openshift/installer/pull/6513)
* [Full changelog](https://github.com/openshift/installer/compare/798aeaaf61fbc22669b6bad2edc058ea6949d733...22d34573ae3c910c9f03d9ee7c11ee7f03da10b8)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/336497557b48d67635a7be2bf26ae6a885a67560)

* [OCPBUGS-29822](https://issues.redhat.com/browse/OCPBUGS-29822): Extend metal3remediation aggregation role [#212](https://github.com/openshift/cluster-api-provider-baremetal/pull/212)
* [OCPBUGS-21701](https://issues.redhat.com/browse/OCPBUGS-21701): Uplift x/net to v0.17.0 [#199](https://github.com/openshift/cluster-api-provider-baremetal/pull/199)
* [OCPBUGS-16084](https://issues.redhat.com/browse/OCPBUGS-16084): Fix Metal3Remediation CRD install order [#194](https://github.com/openshift/cluster-api-provider-baremetal/pull/194)
* [OCPBUGS-12692](https://issues.redhat.com/browse/OCPBUGS-12692): Use go 1.19 and uplift x/net to 0.7.0 [#192](https://github.com/openshift/cluster-api-provider-baremetal/pull/192)
* Metal3 remediation backport [#184](https://github.com/openshift/cluster-api-provider-baremetal/pull/184)
* [OCPBUGS-6282](https://issues.redhat.com/browse/OCPBUGS-6282): update kubernetes to 0.24.9 to fix CVE-2022-41717 [#186](https://github.com/openshift/cluster-api-provider-baremetal/pull/186)
* Updating baremetal-machine-controller images to be consistent with ART [#185](https://github.com/openshift/cluster-api-provider-baremetal/pull/185)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/24a47014aa42d649008687c5bd81771d6477c33c...336497557b48d67635a7be2bf26ae6a885a67560)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/f6db335c7a6fe564a6ef56a98b71e230e685fc6f)

* [OCPBUGS-30629](https://issues.redhat.com/browse/OCPBUGS-30629): Do not update instance_info and deploy_interface for active nodes [#337](https://github.com/openshift/baremetal-operator/pull/337)
* [OCPBUGS-23504](https://issues.redhat.com/browse/OCPBUGS-23504): hack for deploying V6-only clusters from dualstack hubs [#321](https://github.com/openshift/baremetal-operator/pull/321)
* [OCPBUGS-21167](https://issues.redhat.com/browse/OCPBUGS-21167): Uplift x/net to v0.17.0 [#309](https://github.com/openshift/baremetal-operator/pull/309)
* [OCPBUGS-17365](https://issues.redhat.com/browse/OCPBUGS-17365): Trigger reconcile on Secret change [#295](https://github.com/openshift/baremetal-operator/pull/295)
* [OCPBUGS-16013](https://issues.redhat.com/browse/OCPBUGS-16013): Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.6 to 3.5.9 [#292](https://github.com/openshift/baremetal-operator/pull/292)
* [OCPBUGS-17229](https://issues.redhat.com/browse/OCPBUGS-17229): Set minimum TLS version for webhook to 1.2 [#294](https://github.com/openshift/baremetal-operator/pull/294)
* [OCPBUGS-13374](https://issues.redhat.com/browse/OCPBUGS-13374): Do not try to update images for nodes in transient states [#282](https://github.com/openshift/baremetal-operator/pull/282)
* [OCPBUGS-13927](https://issues.redhat.com/browse/OCPBUGS-13927): Deleting unmanaged BMH get stuck fix [#281](https://github.com/openshift/baremetal-operator/pull/281)
* [OCPBUGS-12363](https://issues.redhat.com/browse/OCPBUGS-12363): release-4.13: Use same settings for provisioner and controller logs [#275](https://github.com/openshift/baremetal-operator/pull/275)
* [OCPBUGS-13082](https://issues.redhat.com/browse/OCPBUGS-13082): Allow by-path devices in root device hints [#277](https://github.com/openshift/baremetal-operator/pull/277)
* [OCPBUGS-12708](https://issues.redhat.com/browse/OCPBUGS-12708): Supported forced reboot of preprovisioning images [#272](https://github.com/openshift/baremetal-operator/pull/272)
* [OCPBUGS-12828](https://issues.redhat.com/browse/OCPBUGS-12828): [release 4.13] Store htpasswd files in Secrets instead of ConfigMaps [#273](https://github.com/openshift/baremetal-operator/pull/273)
* [OCPBUGS-11870](https://issues.redhat.com/browse/OCPBUGS-11870): Create nodes with namespace already prepended [#265](https://github.com/openshift/baremetal-operator/pull/265)
* [OCPBUGS-11983](https://issues.redhat.com/browse/OCPBUGS-11983): Revert live-iso validation [#268](https://github.com/openshift/baremetal-operator/pull/268)
* [OCPBUGS-11213](https://issues.redhat.com/browse/OCPBUGS-11213): backport: Delay delete of detached hosts [#261](https://github.com/openshift/baremetal-operator/pull/261)
* [OCPBUGS-3029](https://issues.redhat.com/browse/OCPBUGS-3029): Merge upstream [#255](https://github.com/openshift/baremetal-operator/pull/255)
* Merge upstream [#253](https://github.com/openshift/baremetal-operator/pull/253)
* Updating ose-baremetal-operator images to be consistent with ART [#248](https://github.com/openshift/baremetal-operator/pull/248)
* Merge upstream [#249](https://github.com/openshift/baremetal-operator/pull/249)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/9152e200990c26194a70c25033a71583e2775066...f6db335c7a6fe564a6ef56a98b71e230e685fc6f)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/1280cf541c220af73b9886379dad2dfa4921f73b)

* [OCPBUGS-26929](https://issues.redhat.com/browse/OCPBUGS-26929): Add .snyk file to ignore vendor and test files [#295](https://github.com/openshift/baremetal-runtimecfg/pull/295)
* [OCPBUGS-22207](https://issues.redhat.com/browse/OCPBUGS-22207): deps: upgrade x/sys [#282](https://github.com/openshift/baremetal-runtimecfg/pull/282)
* [OCPBUGS-20081](https://issues.redhat.com/browse/OCPBUGS-20081): Increase timeout for bootstrap kubeapi [#278](https://github.com/openshift/baremetal-runtimecfg/pull/278)
* [OCPBUGS-18582](https://issues.redhat.com/browse/OCPBUGS-18582): Move haproxy firewall rule check earlier in loop [#271](https://github.com/openshift/baremetal-runtimecfg/pull/271)
* [OCPBUGS-17423](https://issues.redhat.com/browse/OCPBUGS-17423): Don't render config with incomplete unicast peer list [#267](https://github.com/openshift/baremetal-runtimecfg/pull/267)
* [OCPBUGS-14487](https://issues.redhat.com/browse/OCPBUGS-14487): Support IPv6 VIP for setup with multipe IPv6 addresses [#259](https://github.com/openshift/baremetal-runtimecfg/pull/259)
* [OCPBUGS-15101](https://issues.redhat.com/browse/OCPBUGS-15101): Use machine-config state instead of comparing roles [#261](https://github.com/openshift/baremetal-runtimecfg/pull/261)
* [OCPBUGS-13066](https://issues.redhat.com/browse/OCPBUGS-13066): Update x/net and parent dependencies [#246](https://github.com/openshift/baremetal-runtimecfg/pull/246)
* [OCPBUGS-13230](https://issues.redhat.com/browse/OCPBUGS-13230): Verify kubelet version in upgrade check [#248](https://github.com/openshift/baremetal-runtimecfg/pull/248)
* [OCPBUGS-12862](https://issues.redhat.com/browse/OCPBUGS-12862): In keepalived config print structs instead of pointers [#242](https://github.com/openshift/baremetal-runtimecfg/pull/242)
* [OCPBUGS-12804](https://issues.redhat.com/browse/OCPBUGS-12804): Make nested dual stack VIP configs respect EnableUnicast [#239](https://github.com/openshift/baremetal-runtimecfg/pull/239)
* [OCPBUGS-11138](https://issues.redhat.com/browse/OCPBUGS-11138): fix isUpgradeStillRunning() [#231](https://github.com/openshift/baremetal-runtimecfg/pull/231)
* [OPNET-197](https://issues.redhat.com/browse/OPNET-197): Extend logic for detecting Node IP [#218](https://github.com/openshift/baremetal-runtimecfg/pull/218)
* [OPNET-210](https://issues.redhat.com/browse/OPNET-210): Support preferIPv6 for IPI too [#223](https://github.com/openshift/baremetal-runtimecfg/pull/223)
* Extend utility functions for address manipulation [#221](https://github.com/openshift/baremetal-runtimecfg/pull/221)
* [OCPBUGS-3127](https://issues.redhat.com/browse/OCPBUGS-3127): 5 minutes timeout for getSuitableIPs [#219](https://github.com/openshift/baremetal-runtimecfg/pull/219)
* [OPNET-133](https://issues.redhat.com/browse/OPNET-133): Enabling remote worker feature only for baremetal platform [#224](https://github.com/openshift/baremetal-runtimecfg/pull/224)
* node-ip: fix user-managed-lb flag [#222](https://github.com/openshift/baremetal-runtimecfg/pull/222)
* [OPNET-214](https://issues.redhat.com/browse/OPNET-214): node-ip: adjust logic for user-managed-lb [#220](https://github.com/openshift/baremetal-runtimecfg/pull/220)
* [OCPBUGS-6004](https://issues.redhat.com/browse/OCPBUGS-6004): filter ovn fd69::2 ip from list of ips in case ovn [#215](https://github.com/openshift/baremetal-runtimecfg/pull/215)
* Add mko as reviewer and approver [#216](https://github.com/openshift/baremetal-runtimecfg/pull/216)
* [OPNET-133](https://issues.redhat.com/browse/OPNET-133): Support remote worker in onprem installations [#207](https://github.com/openshift/baremetal-runtimecfg/pull/207)
* Updating baremetal-runtimecfg images to be consistent with ART [#211](https://github.com/openshift/baremetal-runtimecfg/pull/211)
* Remove creydr as a reviewer and approver [#209](https://github.com/openshift/baremetal-runtimecfg/pull/209)
* Add mandre and tsorya as approvers [#208](https://github.com/openshift/baremetal-runtimecfg/pull/208)
* [OCPBUGS-2988](https://issues.redhat.com/browse/OCPBUGS-2988): If primary ip address was already created no need to choose new ip [#200](https://github.com/openshift/baremetal-runtimecfg/pull/200)
* [OCPBUGS-2994](https://issues.redhat.com/browse/OCPBUGS-2994): Adding timeout for kubeapi calls for keepalived monitor [#201](https://github.com/openshift/baremetal-runtimecfg/pull/201)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/474ed48e840fdb7bf859d769cd673b29705a7b91...1280cf541c220af73b9886379dad2dfa4921f73b)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/d192e901ece237d9ae1580d73e78f423ec2ef322)

* [OCPBUGS-30288](https://issues.redhat.com/browse/OCPBUGS-30288): oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators [#1700](https://github.com/openshift/oc/pull/1700)
* [OCPBUGS-25418](https://issues.redhat.com/browse/OCPBUGS-25418): Add client version in must-gather summary [#1635](https://github.com/openshift/oc/pull/1635)
* [OCPBUGS-24461](https://issues.redhat.com/browse/OCPBUGS-24461): Overwrite template's namespace with the explicit one [#1617](https://github.com/openshift/oc/pull/1617)
* [AUTH-443](https://issues.redhat.com/browse/AUTH-443): Add OAuth2 Authorization Code Grant Flow for login [#1599](https://github.com/openshift/oc/pull/1599)
* [OCPBUGS-22815](https://issues.redhat.com/browse/OCPBUGS-22815): regeneratemco: explicitly check for PlatformStatus field [#1593](https://github.com/openshift/oc/pull/1593)
* [OCPBUGS-20298](https://issues.redhat.com/browse/OCPBUGS-20298): Use quay redis image instead docker mysql [#1566](https://github.com/openshift/oc/pull/1566)
* [OCPBUGS-19942](https://issues.redhat.com/browse/OCPBUGS-19942): Truncate existing files when writing from inspect [#1553](https://github.com/openshift/oc/pull/1553)
* [OCPBUGS-13527](https://issues.redhat.com/browse/OCPBUGS-13527): Bump x org deps 4.13 [#1422](https://github.com/openshift/oc/pull/1422)
* [OCPBUGS-16055](https://issues.redhat.com/browse/OCPBUGS-16055): mcs cert: account for environments that use IP directly [#1500](https://github.com/openshift/oc/pull/1500)
* [OCPBUGS-16193](https://issues.redhat.com/browse/OCPBUGS-16193): reboot: set ignition version to 3.1 [#1508](https://github.com/openshift/oc/pull/1508)
* [OCPBUGS-16172](https://issues.redhat.com/browse/OCPBUGS-16172): Add tls-server-name when property exists in kubeconfig [#1506](https://github.com/openshift/oc/pull/1506)
* handle the error case of node retrieval while waiting for reboot [#1484](https://github.com/openshift/oc/pull/1484)
* bring some cert rotation helpers back into 4.13 [#1474](https://github.com/openshift/oc/pull/1474)
* [OCPBUGS-14249](https://issues.redhat.com/browse/OCPBUGS-14249): preserve explicit release image in ClusterVersion [#1435](https://github.com/openshift/oc/pull/1435)
* [OCPBUGS-14180](https://issues.redhat.com/browse/OCPBUGS-14180): Remove closed centos7 registry from newapp unit tests [#1432](https://github.com/openshift/oc/pull/1432)
* [OCPBUGS-10773](https://issues.redhat.com/browse/OCPBUGS-10773): bump repo sclorg/s2i-ruby-container location for newapp test [#1381](https://github.com/openshift/oc/pull/1381)
* [OCPBUGS-10378](https://issues.redhat.com/browse/OCPBUGS-10378): Add microshift into generate-docs [#1372](https://github.com/openshift/oc/pull/1372)
* Microshift command docs [#1357](https://github.com/openshift/oc/pull/1357)
* Do not set master node selector if there's no masters [#1347](https://github.com/openshift/oc/pull/1347)
* [OCPBUGS-7190](https://issues.redhat.com/browse/OCPBUGS-7190): Reuse LDAP connection when performing group sync [#1336](https://github.com/openshift/oc/pull/1336)
* Adding `CommitDate` to the Changelog json output [#1348](https://github.com/openshift/oc/pull/1348)
* [OCPBUGS-7780](https://issues.redhat.com/browse/OCPBUGS-7780): pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates [#1346](https://github.com/openshift/oc/pull/1346)
* Use registry.k8s.io and update image version [#1343](https://github.com/openshift/oc/pull/1343)
* Add icsp file convert command [#1238](https://github.com/openshift/oc/pull/1238)
* OWNERS_ALIASES: Update approvers: add David, remove Jack [#1340](https://github.com/openshift/oc/pull/1340)
* oc debug: Use own fields instead directly depending on Attach's [#1337](https://github.com/openshift/oc/pull/1337)
* Updating ose-tools images to be consistent with ART [#1308](https://github.com/openshift/oc/pull/1308)
* [WRKLDS-594](https://issues.redhat.com/browse/WRKLDS-594): Bump to v1.26.1 [#1329](https://github.com/openshift/oc/pull/1329)
* [OCPBUGS-3473](https://issues.redhat.com/browse/OCPBUGS-3473): oc adm release new: allow specifying crio and kernel versions [#1287](https://github.com/openshift/oc/pull/1287)
* [OCPBUGS-6011](https://issues.redhat.com/browse/OCPBUGS-6011): Fix kube version from 1.24.1 to 1.25.2 [#1325](https://github.com/openshift/oc/pull/1325)
* Removing unwanted character from changelog output [#1326](https://github.com/openshift/oc/pull/1326)
* [WRKLDS-629](https://issues.redhat.com/browse/WRKLDS-629): release run-namspace functionality [#1322](https://github.com/openshift/oc/pull/1322)
* [OCPBUGS-5010](https://issues.redhat.com/browse/OCPBUGS-5010): Remove must-gather pod after it completes when explicit namespace is used [#1320](https://github.com/openshift/oc/pull/1320)
* Enable Changelog to output in JSON [#1321](https://github.com/openshift/oc/pull/1321)
* [IR-261](https://issues.redhat.com/browse/IR-261): Add --import-mode to 'tag' [#1312](https://github.com/openshift/oc/pull/1312)
* [IR-260](https://issues.redhat.com/browse/IR-260): Add CLI flag to set ImportMode when importing a tag [#1289](https://github.com/openshift/oc/pull/1289)
* [OCPBUGS-4906](https://issues.redhat.com/browse/OCPBUGS-4906): oc process: Set original namespace if it differs [#1318](https://github.com/openshift/oc/pull/1318)
* Updating ose-cli-artifacts images to be consistent with ART [#1309](https://github.com/openshift/oc/pull/1309)
* Update errors when debug pod fails [#1314](https://github.com/openshift/oc/pull/1314)
* Expose events command to land k8s 1.26 [#1315](https://github.com/openshift/oc/pull/1315)
* handle admission webhook lists and CRD conversion webhooks [#1301](https://github.com/openshift/oc/pull/1301)
* [OTA-818](https://issues.redhat.com/browse/OTA-818): pkg/cli/admin/upgrade: Support --to-multi-arch per OTA-818 [#1285](https://github.com/openshift/oc/pull/1285)
* [WRKLDS-629](https://issues.redhat.com/browse/WRKLDS-629): oc adm must-gather: unhidden --run-namespace flag [#1313](https://github.com/openshift/oc/pull/1313)
* [FDN-112](https://issues.redhat.com/browse/FDN-112): Parse any jira reference from commit text, not just OCPBUGS [#1306](https://github.com/openshift/oc/pull/1306)
* [IR-266](https://issues.redhat.com/browse/IR-266): Add image manifests to 'describe image' [#1310](https://github.com/openshift/oc/pull/1310)
* Updating openshift-enterprise-deployer images to be consistent with ART [#1307](https://github.com/openshift/oc/pull/1307)
* Handle non-amd64 command pulls from amd64 payload [#1259](https://github.com/openshift/oc/pull/1259)
* [OCPBUGS-4517](https://issues.redhat.com/browse/OCPBUGS-4517): oc adm release: Support extracting commands in specified architectures [#1305](https://github.com/openshift/oc/pull/1305)
* Rename registry.svc.ci.openshift.org to registry.ci.openshift.org [#1304](https://github.com/openshift/oc/pull/1304)
* [OCPBUGS-3526](https://issues.redhat.com/browse/OCPBUGS-3526): Proceed archive if Lsetxattr gets unsupported error [#1296](https://github.com/openshift/oc/pull/1296)
* Updating openshift-enterprise-cli images to be consistent with ART [#1302](https://github.com/openshift/oc/pull/1302)
* [OCPBUGS-4280](https://issues.redhat.com/browse/OCPBUGS-4280): oc import-image: reflect import image error [#1300](https://github.com/openshift/oc/pull/1300)
* pkg/cli/admin/release/info: Render multi-arch release information [#1292](https://github.com/openshift/oc/pull/1292)
* pkg/cli/admin/upgrade: Drop "force" from "No updates available" [#1291](https://github.com/openshift/oc/pull/1291)
* [OCPBUGS-3714](https://issues.redhat.com/browse/OCPBUGS-3714): pkg/cli/admin/upgrade: Report on Failing!=False conditions [#900](https://github.com/openshift/oc/pull/900)
* switch the deployer pod to use apply client to avoid conflicts [#1288](https://github.com/openshift/oc/pull/1288)
* release: extract linux/arm64 binaries from all payloads [#1276](https://github.com/openshift/oc/pull/1276)
* go.mod: update github.com/containers/image [#1278](https://github.com/openshift/oc/pull/1278)
* Promote ardaguclu to oc approver [#1280](https://github.com/openshift/oc/pull/1280)
* [Full changelog](https://github.com/openshift/oc/compare/d691257345aeeec951c763e11658a944037f9b39...d192e901ece237d9ae1580d73e78f423ec2ef322)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/1c2c2aa11f28e705e3d31085b22cbe533e335787)

* [OCPBUGS-43340](https://issues.redhat.com/browse/OCPBUGS-43340): Update github.com/sirupsen/logrus v1.8.3 [#770](https://github.com/openshift/cloud-credential-operator/pull/770)
* [OCPBUGS-37834](https://issues.redhat.com/browse/OCPBUGS-37834): Resolve SNYK errors in security job. [#743](https://github.com/openshift/cloud-credential-operator/pull/743)
* [OCPBUGS-37421](https://issues.redhat.com/browse/OCPBUGS-37421): SNYK ignore go-client misreporting [#740](https://github.com/openshift/cloud-credential-operator/pull/740)
* [OCPBUGS-36028](https://issues.redhat.com/browse/OCPBUGS-36028): IBM/go-sdk-core update to v5.17.4 [#722](https://github.com/openshift/cloud-credential-operator/pull/722)
* [OCPBUGS-32898](https://issues.redhat.com/browse/OCPBUGS-32898): Upgrade go-jose module to 2.6.3 [#698](https://github.com/openshift/cloud-credential-operator/pull/698)
* [OCPBUGS-27912](https://issues.redhat.com/browse/OCPBUGS-27912): Resolve all outstanding snyk vulnerabilities [#651](https://github.com/openshift/cloud-credential-operator/pull/651)
* NO-JIRA: Removing andrew from OWNERS [#644](https://github.com/openshift/cloud-credential-operator/pull/644)
* [OCPBUGS-25369](https://issues.redhat.com/browse/OCPBUGS-25369): Discover AWS dns suffix from partition and region. [#640](https://github.com/openshift/cloud-credential-operator/pull/640)
* [OCPBUGS-21367](https://issues.redhat.com/browse/OCPBUGS-21367): Upgrade golang/x/net for CVE-2023-39325 [#623](https://github.com/openshift/cloud-credential-operator/pull/623)
* snyk: exclude vendor/ [#616](https://github.com/openshift/cloud-credential-operator/pull/616)
* [OCPBUGS-12565](https://issues.redhat.com/browse/OCPBUGS-12565): CVE-2022-41723 ose-cloud-credential-operator-container: net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding [openshift-4] [#543](https://github.com/openshift/cloud-credential-operator/pull/543)
* [OCPBUGS-13692](https://issues.redhat.com/browse/OCPBUGS-13692): Determine AWS partition based on region for readOnlyAnonUserPolicyTemplate bucket ARN. [#538](https://github.com/openshift/cloud-credential-operator/pull/538)
* [OCPBUGS-11706](https://issues.redhat.com/browse/OCPBUGS-11706): ccoctl: Enable public anon read access to default OIDC S3 bucket [#528](https://github.com/openshift/cloud-credential-operator/pull/528)
* [OCPBUGS-10822](https://issues.redhat.com/browse/OCPBUGS-10822): Adding missing workload annotations [#524](https://github.com/openshift/cloud-credential-operator/pull/524)
* [OCPBUGS-6370](https://issues.redhat.com/browse/OCPBUGS-6370): Bump k8s dependencies from v0.25.3 to v0.26.1 [#511](https://github.com/openshift/cloud-credential-operator/pull/511)
* Add lleshchi to OWNERS file [#513](https://github.com/openshift/cloud-credential-operator/pull/513)
* [OCPBUGS-6977](https://issues.redhat.com/browse/OCPBUGS-6977): Set pod identity webhook replicas=1 when infrastructure topology is SingleReplica [#512](https://github.com/openshift/cloud-credential-operator/pull/512)
* Make pod-identity-webhook deployment HA by default [#492](https://github.com/openshift/cloud-credential-operator/pull/492)
* OWNERS: add jstuever [#510](https://github.com/openshift/cloud-credential-operator/pull/510)
* azure: move away from ADAL and AD Graph [#502](https://github.com/openshift/cloud-credential-operator/pull/502)
* Updating ose-cloud-credential-operator images to be consistent with ART [#509](https://github.com/openshift/cloud-credential-operator/pull/509)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/7a0370568a558c37e63cebc095c9e5b913dfedf6...1c2c2aa11f28e705e3d31085b22cbe533e335787)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/d377281c10ab68ea3faf4775f015c1651004b0ff)

* [OCPBUGS-32180](https://issues.redhat.com/browse/OCPBUGS-32180): Avoid nil pointer panic while assigning private IP on Azure [#139](https://github.com/openshift/cloud-network-config-controller/pull/139)
* [OCPBUGS-22299](https://issues.redhat.com/browse/OCPBUGS-22299): Azure: skip backend pool if attached to an outbound rule [#126](https://github.com/openshift/cloud-network-config-controller/pull/126)
* [OCPBUGS-15856](https://issues.redhat.com/browse/OCPBUGS-15856): Azure: Handle already existing IP configurations [#116](https://github.com/openshift/cloud-network-config-controller/pull/116)
* [OCPBUGS-14635](https://issues.redhat.com/browse/OCPBUGS-14635): increase GCP egress ip capacity to 100 from 10 [#113](https://github.com/openshift/cloud-network-config-controller/pull/113)
* [OCPBUGS-13127](https://issues.redhat.com/browse/OCPBUGS-13127): sync CloudPrivateIpConfig when node is missing [#106](https://github.com/openshift/cloud-network-config-controller/pull/106)
* [OCPBUGS-10990](https://issues.redhat.com/browse/OCPBUGS-10990): pull project name from subnet uri [#101](https://github.com/openshift/cloud-network-config-controller/pull/101)
* Add MovePrivateIP and its OpenStack implementation [#95](https://github.com/openshift/cloud-network-config-controller/pull/95)
* Kube 1.26 rebase for cloud-network-config-controller [#97](https://github.com/openshift/cloud-network-config-controller/pull/97)
* OpenStack: Fix race condition in TestGetNodeEgressIPConfiguration [#96](https://github.com/openshift/cloud-network-config-controller/pull/96)
* azure: use azidentity with an adapter [#70](https://github.com/openshift/cloud-network-config-controller/pull/70)
* Add ApplicationSecurityGroups to InterfaceIPConfiguration [#91](https://github.com/openshift/cloud-network-config-controller/pull/91)
* Fix typos in README.md [#90](https://github.com/openshift/cloud-network-config-controller/pull/90)
* [OCPBUGS-4724](https://issues.redhat.com/browse/OCPBUGS-4724): OpenStack: Support multi AZ environments [#87](https://github.com/openshift/cloud-network-config-controller/pull/87)
* Updating ose-cloud-network-config-controller images to be consistent with ART [#86](https://github.com/openshift/cloud-network-config-controller/pull/86)
* [OCPBUGS-3993](https://issues.redhat.com/browse/OCPBUGS-3993): OpenStack: Only return egressIPConfiguration for first InternalIP [#77](https://github.com/openshift/cloud-network-config-controller/pull/77)
* Fix azure log message for assigning and releasing an IP [#76](https://github.com/openshift/cloud-network-config-controller/pull/76)
* [OCPBUGS-1430](https://issues.redhat.com/browse/OCPBUGS-1430): Add assigned egress ips into capacity [#69](https://github.com/openshift/cloud-network-config-controller/pull/69)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/c086bed76ee3d3b3fe9f516f873414e7b4348acd...d377281c10ab68ea3faf4775f015c1651004b0ff)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/1801056c175da7d1e8d5507fa4558564740c7f4d)

* [OCPBUGS-28760](https://issues.redhat.com/browse/OCPBUGS-28760): Fix http2 [4.13] [#654](https://github.com/openshift/cluster-authentication-operator/pull/654)
* [AUTH-443](https://issues.redhat.com/browse/AUTH-443): Add openshift-cli-client OAuth Client [#641](https://github.com/openshift/cluster-authentication-operator/pull/641)
* [OCPBUGS-22210](https://issues.redhat.com/browse/OCPBUGS-22210): increase timeout for probes [#638](https://github.com/openshift/cluster-authentication-operator/pull/638)
* [OCPBUGS-15258](https://issues.redhat.com/browse/OCPBUGS-15258): Correctly link oauth apiserver ServiceMonitor with its Service [#617](https://github.com/openshift/cluster-authentication-operator/pull/617)
* [OCPBUGS-13763](https://issues.redhat.com/browse/OCPBUGS-13763): dont log tokens [#618](https://github.com/openshift/cluster-authentication-operator/pull/618)
* [OCPBUGS-4343](https://issues.redhat.com/browse/OCPBUGS-4343): update apf configuration to use v1beta3 [#604](https://github.com/openshift/cluster-authentication-operator/pull/604)
* [OCPBUGS-10044](https://issues.redhat.com/browse/OCPBUGS-10044): update openshift/api to get new apiserver schema [#605](https://github.com/openshift/cluster-authentication-operator/pull/605)
* [OCPBUGS-7785](https://issues.redhat.com/browse/OCPBUGS-7785): migrate to using lease objects for leader election [#602](https://github.com/openshift/cluster-authentication-operator/pull/602)
* [API-1509](https://issues.redhat.com/browse/API-1509): Enable AESGCM encryption [#598](https://github.com/openshift/cluster-authentication-operator/pull/598)
* [OCPBUGS-6189](https://issues.redhat.com/browse/OCPBUGS-6189): art image update [#596](https://github.com/openshift/cluster-authentication-operator/pull/596)
* [OCPBUGS-3929](https://issues.redhat.com/browse/OCPBUGS-3929): update apf configuration to use v1beta2 [#592](https://github.com/openshift/cluster-authentication-operator/pull/592)
* [OCPBUGS-3440](https://issues.redhat.com/browse/OCPBUGS-3440): Restart authentication operator if console capability is enabled [#589](https://github.com/openshift/cluster-authentication-operator/pull/589)
* [OCPBUGS-3441](https://issues.redhat.com/browse/OCPBUGS-3441): Update cluster-authentication-operator not to go degraded without console [4.13] [#587](https://github.com/openshift/cluster-authentication-operator/pull/587)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/4f7f6b1af4b674b24270e65c40728b19071ab3e3...1801056c175da7d1e8d5507fa4558564740c7f4d)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/c38cc4ec048d14d8e9cdda5008ab9f235fa5fdb2)

* [OCPBUGS-40929](https://issues.redhat.com/browse/OCPBUGS-40929): update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 [#317](https://github.com/openshift/kubernetes-autoscaler/pull/317)
* [OCPBUGS-31702](https://issues.redhat.com/browse/OCPBUGS-31702): add check for taint.value == nil [#295](https://github.com/openshift/kubernetes-autoscaler/pull/295)
* [OCPBUGS-30874](https://issues.redhat.com/browse/OCPBUGS-30874): Fix unstructured taint parsing in Cluster API provider [#289](https://github.com/openshift/kubernetes-autoscaler/pull/289)
* [OCPBUGS-23272](https://issues.redhat.com/browse/OCPBUGS-23272): Rebase 4.13 branch onto cluster autoscaler 1.26.4 [#268](https://github.com/openshift/kubernetes-autoscaler/pull/268)
* [OCPCLOUD-1851](https://issues.redhat.com/browse/OCPCLOUD-1851): Upstream rebase to CA 1.26.1 and VPA 0.13 [#250](https://github.com/openshift/kubernetes-autoscaler/pull/250)
* Update OWNERS [#251](https://github.com/openshift/kubernetes-autoscaler/pull/251)
* Updating vertical-pod-autoscaler images to be consistent with ART [#248](https://github.com/openshift/kubernetes-autoscaler/pull/248)
* Update OWNERS [#249](https://github.com/openshift/kubernetes-autoscaler/pull/249)
* Updating atomic-openshift-cluster-autoscaler images to be consistent with ART [#246](https://github.com/openshift/kubernetes-autoscaler/pull/246)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/f4975eeb107b16df2d7138c85348388daba97a74...c38cc4ec048d14d8e9cdda5008ab9f235fa5fdb2)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/0007e9081f1d7aecd652c0843815be4844f67453)

* [OCPBUGS-31992](https://issues.redhat.com/browse/OCPBUGS-31992): Update x/net to v0.25.0 [#324](https://github.com/openshift/cluster-autoscaler-operator/pull/324)
* [OCPBUGS-20770](https://issues.redhat.com/browse/OCPBUGS-20770): Bump x/net package to v0.18.0 [#299](https://github.com/openshift/cluster-autoscaler-operator/pull/299)
* [OCPBUGS-17056](https://issues.redhat.com/browse/OCPBUGS-17056): Address long acquire times during update [#289](https://github.com/openshift/cluster-autoscaler-operator/pull/289)
* [OCPBUGS-17098](https://issues.redhat.com/browse/OCPBUGS-17098): update x/net dependency to 0.7.0 [#280](https://github.com/openshift/cluster-autoscaler-operator/pull/280)
* [OCPBUGS-16768](https://issues.redhat.com/browse/OCPBUGS-16768): add nutanix labels that should be ignored [#278](https://github.com/openshift/cluster-autoscaler-operator/pull/278)
* [Bug 1943194](https://bugzilla.redhat.com/show_bug.cgi?id=1943194): update GPU resource limits type to have validation [#268](https://github.com/openshift/cluster-autoscaler-operator/pull/268)
* Update OWNERS [#270](https://github.com/openshift/cluster-autoscaler-operator/pull/270)
* revert GPU label changes from pr 223 [#267](https://github.com/openshift/cluster-autoscaler-operator/pull/267)
* : Update tooling in Cluster Autoscaler Operator [#266](https://github.com/openshift/cluster-autoscaler-operator/pull/266)
* Add infrastructures resource to config.openshift.io [#265](https://github.com/openshift/cluster-autoscaler-operator/pull/265)
* Allow infrastructures.config.openshift.io to be listed [#264](https://github.com/openshift/cluster-autoscaler-operator/pull/264)
* Register configv1 types to schemes [#262](https://github.com/openshift/cluster-autoscaler-operator/pull/262)
* Updating ose-cluster-autoscaler-operator images to be consistent with ART [#259](https://github.com/openshift/cluster-autoscaler-operator/pull/259)
* : Update CAO to ignore platform related zone labels [#260](https://github.com/openshift/cluster-autoscaler-operator/pull/260)
* Update OWNERS [#261](https://github.com/openshift/cluster-autoscaler-operator/pull/261)
* : Set default container for operator [#258](https://github.com/openshift/cluster-autoscaler-operator/pull/258)
* Add client certificate and key to service monitor [#249](https://github.com/openshift/cluster-autoscaler-operator/pull/249)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/29a6e57c10cf027f5f04e9bcb2e8842497f63bf6...0007e9081f1d7aecd652c0843815be4844f67453)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/cc237f106bbe804c1e16c2781c8a2a73fb5a1099)

* [OCPBUGS-31993](https://issues.redhat.com/browse/OCPBUGS-31993): bump x/net to 0.23.0 [#439](https://github.com/openshift/cluster-baremetal-operator/pull/439)
* [OCPBUGS-23504](https://issues.redhat.com/browse/OCPBUGS-23504): hack for deploying V6-only clusters from dualstack hubs [#391](https://github.com/openshift/cluster-baremetal-operator/pull/391)
* [OCPBUGS-23444](https://issues.redhat.com/browse/OCPBUGS-23444): Update the deprecated field APIServerInternalIP to APIServerInternalIPs [#385](https://github.com/openshift/cluster-baremetal-operator/pull/385)
* [OCPBUGS-20867](https://issues.redhat.com/browse/OCPBUGS-20867): Uplift x/net to v0.17.0 [#370](https://github.com/openshift/cluster-baremetal-operator/pull/370)
* [OCPBUGS-19369](https://issues.redhat.com/browse/OCPBUGS-19369): Guard against nil PlatformStatus [#363](https://github.com/openshift/cluster-baremetal-operator/pull/363)
* [OCPBUGS-15472](https://issues.redhat.com/browse/OCPBUGS-15472): Limit role binding to openshift-machine-api namespace [#346](https://github.com/openshift/cluster-baremetal-operator/pull/346)
* [OCPBUGS-12685](https://issues.redhat.com/browse/OCPBUGS-12685): Uplift x/net to 0.7.0 [#340](https://github.com/openshift/cluster-baremetal-operator/pull/340)
* [OCPBUGS-11985](https://issues.redhat.com/browse/OCPBUGS-11985): use proxying for inspector in addition to ironic [#338](https://github.com/openshift/cluster-baremetal-operator/pull/338)
* [OCPBUGS-10689](https://issues.redhat.com/browse/OCPBUGS-10689): Add ironic IP to no_proxy [#332](https://github.com/openshift/cluster-baremetal-operator/pull/332)
* [OCPBUGS-5181](https://issues.redhat.com/browse/OCPBUGS-5181): also use BMH.ConsumerRef for linking to master Machines [#320](https://github.com/openshift/cluster-baremetal-operator/pull/320)
* [OCPBUGS-6375](https://issues.redhat.com/browse/OCPBUGS-6375): update kubernetes to 0.24.9 to fix CVE-2022-41717 [#323](https://github.com/openshift/cluster-baremetal-operator/pull/323)
* Enable running CBO from GCP [#316](https://github.com/openshift/cluster-baremetal-operator/pull/316)
* Enable running CBO from Azure [#309](https://github.com/openshift/cluster-baremetal-operator/pull/309)
* Updating ose-cluster-baremetal-operator images to be consistent with ART [#312](https://github.com/openshift/cluster-baremetal-operator/pull/312)
* [OCPBUGS-4712](https://issues.redhat.com/browse/OCPBUGS-4712): delete ironic-proxy/image-cache when not needed [#315](https://github.com/openshift/cluster-baremetal-operator/pull/315)
* [OCPBUGS-1844](https://issues.redhat.com/browse/OCPBUGS-1844): enable DNS in the provisioning dnsmasq [#303](https://github.com/openshift/cluster-baremetal-operator/pull/303)
* Ensure we set ipv6 url in external url var [#310](https://github.com/openshift/cluster-baremetal-operator/pull/310)
* [OCPBUGS-4689](https://issues.redhat.com/browse/OCPBUGS-4689): Do not fail the reconciler when no master Machines exist [#313](https://github.com/openshift/cluster-baremetal-operator/pull/313)
* Update dependencies [#305](https://github.com/openshift/cluster-baremetal-operator/pull/305)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/537a74cd0b0cc48189684a273013c32d1269ddd9...cc237f106bbe804c1e16c2781c8a2a73fb5a1099)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/ee908b6bb91dee3e61aface46d53a00b4e9288a2)

* [OCPBUGS-10923](https://issues.redhat.com/browse/OCPBUGS-10923): Waiting for 2 masters in HA mode case [#83](https://github.com/openshift/cluster-bootstrap/pull/83)
* [OCPBUGS-6234](https://issues.redhat.com/browse/OCPBUGS-6234): Bump dependencies and image [#74](https://github.com/openshift/cluster-bootstrap/pull/74)
* Add API team to reviewers [#75](https://github.com/openshift/cluster-bootstrap/pull/75)
* Add API team to the OWNERS [#73](https://github.com/openshift/cluster-bootstrap/pull/73)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/138a1cf2b98578acb4ccf098736bdf08614d2d6a...ee908b6bb91dee3e61aface46d53a00b4e9288a2)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/12f767b2bd5de1a2641962f5d86d8564333afc65)

* [OCPBUGS-21531](https://issues.redhat.com/browse/OCPBUGS-21531): bump golang.org/x/net to v0.17.0 [#185](https://github.com/openshift/cluster-api/pull/185)
* [OCPBUGS-12567](https://issues.redhat.com/browse/OCPBUGS-12567): Bump x/net package to v0.10.0 [#176](https://github.com/openshift/cluster-api/pull/176)
* [OCPBUGS-8481](https://issues.redhat.com/browse/OCPBUGS-8481): [release-4.13] Merge https://github.com/kubernetes-sigs/cluster-api:release-1.3 (eb18352) into release-4.13 [#169](https://github.com/openshift/cluster-api/pull/169)
* Sync OWNERS file [#168](https://github.com/openshift/cluster-api/pull/168)
* Updating ose-cluster-api images to be consistent with ART [#165](https://github.com/openshift/cluster-api/pull/165)
* Merge https://github.com/kubernetes-sigs/cluster-api:main into master [#163](https://github.com/openshift/cluster-api/pull/163)
* UPSTREAM: <carry>: bump build root image to golang-1.19 [#164](https://github.com/openshift/cluster-api/pull/164)
* [Full changelog](https://github.com/openshift/cluster-api/compare/03d89f216e0f2c3e1b2a647b0e37d52bbfdaefee...12f767b2bd5de1a2641962f5d86d8564333afc65)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/b247793dd364f280ad097f5266b4164740e43a44)

* [OCPBUGS-21082](https://issues.redhat.com/browse/OCPBUGS-21082): bump golang.org/x/net to v0.17.0 [#137](https://github.com/openshift/cluster-capi-operator/pull/137)
* [OCPBUGS-10967](https://issues.redhat.com/browse/OCPBUGS-10967): feat: add workload annotations [#108](https://github.com/openshift/cluster-capi-operator/pull/108)
* [OCPBUGS-8481](https://issues.redhat.com/browse/OCPBUGS-8481): [release-4.13] Bump CAPI, CAPI providers, go 1.19 [#103](https://github.com/openshift/cluster-capi-operator/pull/103)
* Update OWNERS [#102](https://github.com/openshift/cluster-capi-operator/pull/102)
* Bump ginkgo v2.7.0 [#99](https://github.com/openshift/cluster-capi-operator/pull/99)
* fix indentation for webhook manifests [#94](https://github.com/openshift/cluster-capi-operator/pull/94)
* Fix assets [#95](https://github.com/openshift/cluster-capi-operator/pull/95)
* Updating ose-cluster-capi-operator images to be consistent with ART [#90](https://github.com/openshift/cluster-capi-operator/pull/90)
* Fix panics in e2e tests [#89](https://github.com/openshift/cluster-capi-operator/pull/89)
* Update OWNERS [#93](https://github.com/openshift/cluster-capi-operator/pull/93)
* [OCPCLOUD-1808](https://issues.redhat.com/browse/OCPCLOUD-1808): Bump ginkgo v2 [#92](https://github.com/openshift/cluster-capi-operator/pull/92)
* Update AWS assets [#91](https://github.com/openshift/cluster-capi-operator/pull/91)
* [Bug 2087043](https://bugzilla.redhat.com/show_bug.cgi?id=2087043): Update manifests to release-4.13 [#83](https://github.com/openshift/cluster-capi-operator/pull/83)
* Don't patch objects if there are no changes [#88](https://github.com/openshift/cluster-capi-operator/pull/88)
* [Bug 2116686](https://bugzilla.redhat.com/show_bug.cgi?id=2116686): OCPBUGS-1493: Add provider webhook [#85](https://github.com/openshift/cluster-capi-operator/pull/85)
* Fix lint [#86](https://github.com/openshift/cluster-capi-operator/pull/86)
* Add header to generated manifests [#84](https://github.com/openshift/cluster-capi-operator/pull/84)
* Update annotations [#82](https://github.com/openshift/cluster-capi-operator/pull/82)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/60a36d8320ddfd196840a1597e61c065603778ee...b247793dd364f280ad097f5266b4164740e43a44)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/38f638f020ff1e34d33fd44c42b0351912a74486)

* [OCPBUGS-35562](https://issues.redhat.com/browse/OCPBUGS-35562): update azure and ash tolerations on node manager [#353](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/353)
* [OCPBUGS-35562](https://issues.redhat.com/browse/OCPBUGS-35562): update unit tests [release-4.13] [#354](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/354)
* [OCPBUGS-21169](https://issues.redhat.com/browse/OCPBUGS-21169): Bump golang.org/x/net to v0.18.0 [#296](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/296)
* [OCPBUGS-17101](https://issues.redhat.com/browse/OCPBUGS-17101): update x/net dependency to 0.7.0 [#269](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/269)
* [OCPBUGS-15746](https://issues.redhat.com/browse/OCPBUGS-15746): Alibaba platforms should not be upgradeable [#260](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/260)
* [OCPBUGS-13011](https://issues.redhat.com/browse/OCPBUGS-13011): Add beta topology labels flag to Azure cloud node manager [#250](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/250)
* [OCPBUGS-10334](https://issues.redhat.com/browse/OCPBUGS-10334): add rbac permission for Nutanix CCM manager [#237](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/237)
* [OCPBUGS-5036](https://issues.redhat.com/browse/OCPBUGS-5036): Restart pods if related configuration was changed [#227](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/227)
* : Update k8s packages to 1.26 [#225](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/225)
* Update OWNERS [#226](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/226)
* vSphere: If only one failuredomain do not config labels [#224](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/224)
* : Modernize tooling [#221](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/221)
* [OCPBUGS-6658](https://issues.redhat.com/browse/OCPBUGS-6658): Clear useManagedIdentityExtension if it's set [#223](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/223)
* Replace YAML parse failure warning with info message [#222](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/222)
* Integrate ccm-nutanix to OCP via CCCMO [#201](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/201)
* [OCPCLOUD-1817](https://issues.redhat.com/browse/OCPCLOUD-1817): vSphere cloud-config yaml converter [#218](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/218)
* Fixup go modules after library-go update [#219](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/219)
* Update library-go dependency to move vSphere to out of tree [#214](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/214)
* Change verbosity level for some logs [#215](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/215)
* [OCPCLOUD-1807](https://issues.redhat.com/browse/OCPCLOUD-1807): Port to ginkgo v2 [#210](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/210)
* Update OWNERS [#211](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/211)
* [OCPBUGS-4074](https://issues.redhat.com/browse/OCPBUGS-4074): Try to limit groups for the REST mapper discovery [#207](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/207)
* Updating ose-cluster-cloud-controller-manager-operator images to be consistent with ART [#209](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/209)
* : Set default container for operator [#208](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/208)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/3b1f0843e2bd25fb4e39659ef47424f67ccaa727...38f638f020ff1e34d33fd44c42b0351912a74486)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/a6d56530c7156bef726005d640c3ded3565104ec)

* [OCPBUGS-28802](https://issues.redhat.com/browse/OCPBUGS-28802): Add required PSa labels [#404](https://github.com/openshift/cluster-config-operator/pull/404)
* : OCPBUGS-21269: bump library-go to include switch to HTTP/1.1 [#372](https://github.com/openshift/cluster-config-operator/pull/372)
* [CORS-2766](https://issues.redhat.com/browse/CORS-2766): AWS Shared VPC API Bump [release-4.13] [#337](https://github.com/openshift/cluster-config-operator/pull/337)
* [OCPBUGS-16164](https://issues.redhat.com/browse/OCPBUGS-16164): retire LatencySensitive featureset [#329](https://github.com/openshift/cluster-config-operator/pull/329)
* [OCPBUGS-10038](https://issues.redhat.com/browse/OCPBUGS-10038): update openshift/api to get new apiserver schema [#291](https://github.com/openshift/cluster-config-operator/pull/291)
* [OCPBUGS-8710](https://issues.redhat.com/browse/OCPBUGS-8710): bump o/api for the updated featureflags [#290](https://github.com/openshift/cluster-config-operator/pull/290)
* update openshift/api to get new techprevew apiserver schema [#286](https://github.com/openshift/cluster-config-operator/pull/286)
* [CFE-601](https://issues.redhat.com/browse/CFE-601): Update openshift/api package version [#279](https://github.com/openshift/cluster-config-operator/pull/279)
* [OSASINFRA-3097](https://issues.redhat.com/browse/OSASINFRA-3097): update openshift/api to get External LB fields [#278](https://github.com/openshift/cluster-config-operator/pull/278)
* [OCPBUGS-6185](https://issues.redhat.com/browse/OCPBUGS-6185): Update go version and ART images [#280](https://github.com/openshift/cluster-config-operator/pull/280)
* [OCPBUGS-4207](https://issues.redhat.com/browse/OCPBUGS-4207): Revert "Increase verbosity level to track probe timeouts" [#274](https://github.com/openshift/cluster-config-operator/pull/274)
* Update go.mod api,client-go to register crd [#270](https://github.com/openshift/cluster-config-operator/pull/270)
* [OCPBUGS-3123](https://issues.redhat.com/browse/OCPBUGS-3123): add --feature-set option to render options [#271](https://github.com/openshift/cluster-config-operator/pull/271)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/92c3b10237c1ebf7ab7a0c744db3949377614e52...a6d56530c7156bef726005d640c3ded3565104ec)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/c9d5fa380a02478dd6d07df9461f7202b42de066)

* [OCPBUGS-35380](https://issues.redhat.com/browse/OCPBUGS-35380): Improved debugging of API listing errors [#304](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/304)
* [OCPBUGS-30156](https://issues.redhat.com/browse/OCPBUGS-30156): Never delete a Machine when there's a single Machine in an index [#286](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/286)
* [OCPBUGS-21364](https://issues.redhat.com/browse/OCPBUGS-21364): Bump golang.org/x/net to v0.17.0 [#259](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/259)
* [OCPBUGS-20482](https://issues.redhat.com/browse/OCPBUGS-20482): fix: e2e: add gcp custom type to test framework [#249](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/249)
* [OCPBUGS-17055](https://issues.redhat.com/browse/OCPBUGS-17055): Address long acquire times during update [#240](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/240)
* [OCPBUGS-15330](https://issues.redhat.com/browse/OCPBUGS-15330): Fix lint issue [#222](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/222)
* [OCPBUGS-15161](https://issues.redhat.com/browse/OCPBUGS-15161): Surface cpms vs machine diff [#218](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/218)
* [OCPBUGS-14024](https://issues.redhat.com/browse/OCPBUGS-14024): Check ProviderSpec before generating MachineInfo [#211](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/211)
* [OCPBUGS-13888](https://issues.redhat.com/browse/OCPBUGS-13888): fix double machine creation on stale cache [#208](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/208)
* [OCPBUGS-11968](https://issues.redhat.com/browse/OCPBUGS-11968): Prioritise machine mapping over alphabetical mapping [#198](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/198)
* [OCPBUGS-11506](https://issues.redhat.com/browse/OCPBUGS-11506): E2E periodics test timeout failures improvement [#187](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/187)
* [OCPBUGS-11460](https://issues.redhat.com/browse/OCPBUGS-11460): Use PlatformStatus instead of PlatformSpec to determine platform [#186](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/186)
* [OCPBUGS-11354](https://issues.redhat.com/browse/OCPBUGS-11354): controlplanemachineset: start watching control plane nodes [#184](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/184)
* [OCPBUGS-10771](https://issues.redhat.com/browse/OCPBUGS-10771): updates: manually requeue when waiting for replicas being ready [#181](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/181)
* [OCPBUGS-8424](https://issues.redhat.com/browse/OCPBUGS-8424): machine's node must be ready for CPMS machine to be ready [#173](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/173)
* e2e: periodics: remove test with cluster-wide-proxy [#170](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/170)
* Update ginkgo to 2.8.1 [#169](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/169)
* Update OWNERS [#168](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/168)
* Migrate test utils to actuator-pkg repository [#159](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/159)
* [OCPCLOUD-1869](https://issues.redhat.com/browse/OCPCLOUD-1869): Bump k8s 1.26, go 1.19 [#164](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/164)
* [OCPBUGS-6760](https://issues.redhat.com/browse/OCPBUGS-6760): webhooks: disable mandatory TargetPools validation on GCP [#165](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/165)
* golangci-lint: fix header year linting [#162](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/162)
* [OCPCLOUD-1740](https://issues.redhat.com/browse/OCPCLOUD-1740): e2e periodic test: machine replacement with cluster wide proxy [#156](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/156)
* [OCPBUGS-996](https://issues.redhat.com/browse/OCPBUGS-996): Reverts "Reverts "Add logic to handle extra updated machines in a single index + minor fixes"" [#112](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/112)
* Add testing strategy documentation [#155](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/155)
* Updating ose-cluster-control-plane-machine-set-operator images to be consistent with ART [#150](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/150)
* Update OWNERS [#154](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/154)
* [OCPCLOUD-1753](https://issues.redhat.com/browse/OCPCLOUD-1753): integration: rollingUpdate: test rebalances machines across failure domains [#153](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/153)
* [OCPCLOUD-1752](https://issues.redhat.com/browse/OCPCLOUD-1752): integration: rollingUpdate: test replaces a not needing update, deleted Machine [#152](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/152)
* [OCPBUGS-4297](https://issues.redhat.com/browse/OCPBUGS-4297): Fix stale cache issue on createMachine [#149](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/149)
* [OCPCLOUD-1798](https://issues.redhat.com/browse/OCPCLOUD-1798): e2e test: remove common test, unnecessary presubmit aftereach [#148](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/148)
* [OCPCLOUD-1744](https://issues.redhat.com/browse/OCPCLOUD-1744): e2e presubmit: update to newest machine triggers inactive ControlPlaneMachineSet regeneration [#147](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/147)
* Check OnDelete strategy rebalances machines [#146](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/146)
* [OCPCLOUD-1750](https://issues.redhat.com/browse/OCPCLOUD-1750): e2e presubmit test: activating ControlPlaneMachineSet adds owner references [#145](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/145)
* Add integration test for fulling rolling update replacement [#140](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/140)
* [OCPCLOUD-1746](https://issues.redhat.com/browse/OCPCLOUD-1746): e2e presubmit test: activating ControlPlaneMachineSet doesn't cause rollout [#143](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/143)
* Increase unit test timeout to 10m [#144](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/144)
* Check on delete strategy correctly replaces machines [#139](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/139)
* Ensure stable output from RunCheckUntil [#142](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/142)
* [OCPCLOUD-1742](https://issues.redhat.com/browse/OCPCLOUD-1742): e2e presubmit tests: generated ControlPlaneMachineSet replicas updated [#141](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/141)
* [OCPCLOUD-1741](https://issues.redhat.com/browse/OCPCLOUD-1741): e2e presubmit tests: ControlPlaneMachineSet uninstall [#138](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/138)
* Check OnDelete strategy updates status [#137](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/137)
* : Ensure CPMS tests work on GCP [#135](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/135)
* : Generate CPMS for GCP [#133](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/133)
* : Enable CPMS for GCP [#132](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/132)
* Add support for Azure e2e tests [#131](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/131)
* Add RollingUpdate presubmit to test replacement of outdated machine [#129](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/129)
* [OCPBUGS-3320](https://issues.redhat.com/browse/OCPBUGS-3320): Deduplicate Failure Domains for the CPMS [#130](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/130)
* Add full veritcal scaling rolling update periodic test [#127](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/127)
* Azure: Generate ControlPlaneMachineSet for clusters t… [#128](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/128)
* Set up basic E2E test framework [#126](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/126)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/8df44eaee8f4a31754d77f3f3a18ff59878efc72...c9d5fa380a02478dd6d07df9461f7202b42de066)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/c068540d9976ba0fd272e2848de9b0d31a2b7a17)

* [OCPBUGS-32334](https://issues.redhat.com/browse/OCPBUGS-32334): create suitable role and roleBinding for csi-snapshot-webhook [#206](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/206)
* [OCPBUGS-21461](https://issues.redhat.com/browse/OCPBUGS-21461): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#168](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/168)
* [OCPBUGS-10645](https://issues.redhat.com/browse/OCPBUGS-10645): Hypershift: set Deployment properties [#147](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/147)
* [STOR-1019](https://issues.redhat.com/browse/STOR-1019): Bump to k8s 1.26 libs for OCP 4.13 [#140](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/140)
* Updating ose-cluster-csi-snapshot-controller-operator images to be consistent with ART [#139](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/139)
* Add apiGroup to all role/clusterrole references [#136](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/136)
* [OCPBUGS-4490](https://issues.redhat.com/browse/OCPBUGS-4490): hypershift: use correct kubeconfig secret for csi-snapshot-controller [#137](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/137)
* [OCPBUGS-3973](https://issues.redhat.com/browse/OCPBUGS-3973): Don't remove PDB on SNO clusters [#133](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/133)
* [OCPBUGS-3990](https://issues.redhat.com/browse/OCPBUGS-3990): Add HyperShift specific priorityClass [#132](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/132)
* [Bug 2066664](https://bugzilla.redhat.com/show_bug.cgi?id=2066664): Remove wildcard use in Roles [#131](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/131)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/f573eded61847fc153874615b29704d93ddcad8d...c068540d9976ba0fd272e2848de9b0d31a2b7a17)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/461047ef545f66b383352eb8931af18c5a637586)

* [OCPBUGS-11449](https://issues.redhat.com/browse/OCPBUGS-11449): Enable topology-aware hints iff nodes in >=2 zones [#418](https://github.com/openshift/cluster-dns-operator/pull/418)
* [OCPBUGS-11449](https://issues.redhat.com/browse/OCPBUGS-11449): Ignore max unavailable for status [#417](https://github.com/openshift/cluster-dns-operator/pull/417)
* [OCPBUGS-11449](https://issues.redhat.com/browse/OCPBUGS-11449): Set DNS DaemonSet's maxSurge value to 10% [#366](https://github.com/openshift/cluster-dns-operator/pull/366)
* [OCPBUGS-21534](https://issues.redhat.com/browse/OCPBUGS-21534): Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator [#390](https://github.com/openshift/cluster-dns-operator/pull/390)
* [OCPBUGS-11449](https://issues.redhat.com/browse/OCPBUGS-11449): Enable topology-aware hints if, and only if, nodes have zones [#367](https://github.com/openshift/cluster-dns-operator/pull/367)
* [OCPBUGS-15225](https://issues.redhat.com/browse/OCPBUGS-15225): Add support for protocolStrategy API field to enable force_tcp configuration [#372](https://github.com/openshift/cluster-dns-operator/pull/372)
* [OCPBUGS-4359](https://issues.redhat.com/browse/OCPBUGS-4359): update-node-resolver.sh: Check for errors from >> [#355](https://github.com/openshift/cluster-dns-operator/pull/355)
* [OCPBUGS-6382](https://issues.redhat.com/browse/OCPBUGS-6382): Address CVE-2022-41717 [#353](https://github.com/openshift/cluster-dns-operator/pull/353)
* [OCPBUGS-7648](https://issues.redhat.com/browse/OCPBUGS-7648): Bump vendored k8s libraries to 0.26.1 and controller-runtime to 0.14.4 [#356](https://github.com/openshift/cluster-dns-operator/pull/356)
* [OCPBUGS-4359](https://issues.redhat.com/browse/OCPBUGS-4359): ensure original hosts file contents are preserved [#352](https://github.com/openshift/cluster-dns-operator/pull/352)
* Updating ose-cluster-dns-operator images to be consistent with ART [#351](https://github.com/openshift/cluster-dns-operator/pull/351)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/e955534113ef9a65ad055198eab63ba7d60fbd21...461047ef545f66b383352eb8931af18c5a637586)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/2b384ac0d231264e3d8278725bc0a65a5f6bff7b)

* [OCPBUGS-35077](https://issues.redhat.com/browse/OCPBUGS-35077): return errors in wait-for-ceo [#1273](https://github.com/openshift/cluster-etcd-operator/pull/1273)
* [OCPBUGS-31988](https://issues.redhat.com/browse/OCPBUGS-31988): update golang x net [#1255](https://github.com/openshift/cluster-etcd-operator/pull/1255)
* [OCPBUGS-30248](https://issues.redhat.com/browse/OCPBUGS-30248): fix panic in health check timeouts [#1217](https://github.com/openshift/cluster-etcd-operator/pull/1217)
* [OCPBUGS-30245](https://issues.redhat.com/browse/OCPBUGS-30245): [4.13] Replace nodelister with master nodelister everywhere [#1216](https://github.com/openshift/cluster-etcd-operator/pull/1216)
* [OCPBUGS-23572](https://issues.redhat.com/browse/OCPBUGS-23572): Add annotation in the etcd-guard static pod for worklo… [#1163](https://github.com/openshift/cluster-etcd-operator/pull/1163)
* [OCPBUGS-23106](https://issues.redhat.com/browse/OCPBUGS-23106): [4.13] Remove z-upgrades from UpgradeBackupController [#1154](https://github.com/openshift/cluster-etcd-operator/pull/1154)
* Revert "[release-4.13] OCPBUGS-23044: remove revision stability check from bootstrap complet…" [#1166](https://github.com/openshift/cluster-etcd-operator/pull/1166)
* [OCPBUGS-22783](https://issues.redhat.com/browse/OCPBUGS-22783): relax readiness to local serializable requests [#1144](https://github.com/openshift/cluster-etcd-operator/pull/1144)
* [OCPBUGS-23044](https://issues.redhat.com/browse/OCPBUGS-23044): remove revision stability check from bootstrap complet… [#1151](https://github.com/openshift/cluster-etcd-operator/pull/1151)
* [OCPBUGS-21155](https://issues.redhat.com/browse/OCPBUGS-21155): fixing CVE-2023-39325 by updating dependencies [#1143](https://github.com/openshift/cluster-etcd-operator/pull/1143)
* [OCPBUGS-20488](https://issues.redhat.com/browse/OCPBUGS-20488): prioritize podman pull in etcdctl dl [#1136](https://github.com/openshift/cluster-etcd-operator/pull/1136)
* [OCPBUGS-19378](https://issues.redhat.com/browse/OCPBUGS-19378): [4.13] Backports of backup/restore fixes [#1117](https://github.com/openshift/cluster-etcd-operator/pull/1117)
* [OCPBUGS-19825](https://issues.redhat.com/browse/OCPBUGS-19825): Update staticpod file permissions to conform with CIS benchmarks [#1125](https://github.com/openshift/cluster-etcd-operator/pull/1125)
* [OCPBUGS-16804](https://issues.redhat.com/browse/OCPBUGS-16804): reset snapshot default counts to avoid file already lo… [#1080](https://github.com/openshift/cluster-etcd-operator/pull/1080)
* [OCPBUGS-12487](https://issues.redhat.com/browse/OCPBUGS-12487): update golang.org/x/net/http2 [#1075](https://github.com/openshift/cluster-etcd-operator/pull/1075)
* [OCPBUGS-11683](https://issues.redhat.com/browse/OCPBUGS-11683): Revert Add Controller health to CEO liveness probe [#1050](https://github.com/openshift/cluster-etcd-operator/pull/1050)
* [OCPBUGS-12450](https://issues.redhat.com/browse/OCPBUGS-12450): Fix Flake TestAttemptToScaleDown/scale_down_only_by_one_machine_at_a_time [#1032](https://github.com/openshift/cluster-etcd-operator/pull/1032)
* [OCPBUGS-11683](https://issues.redhat.com/browse/OCPBUGS-11683): Add Controller health to CEO liveness probe [#1039](https://github.com/openshift/cluster-etcd-operator/pull/1039)
* [OCPBUGS-10960](https://issues.redhat.com/browse/OCPBUGS-10960): skip machine deletion during boostrap [#1036](https://github.com/openshift/cluster-etcd-operator/pull/1036)
* [OCPBUGS-9957](https://issues.redhat.com/browse/OCPBUGS-9957): Garbage collect grafana-dashboard-etcd [#1023](https://github.com/openshift/cluster-etcd-operator/pull/1023)
* document adaptation with ceo [#1013](https://github.com/openshift/cluster-etcd-operator/pull/1013)
* [ETCD-385](https://issues.redhat.com/browse/ETCD-385): Prefer ipv6 on bootstrap in v6-primary dual stack [#1012](https://github.com/openshift/cluster-etcd-operator/pull/1012)
* [OCPBUGS-7729](https://issues.redhat.com/browse/OCPBUGS-7729): increase live/ready timeout and failure thresholds [#1009](https://github.com/openshift/cluster-etcd-operator/pull/1009)
* [OCPBUGS-4343](https://issues.redhat.com/browse/OCPBUGS-4343): update apf configuration to use v1beta3 [#968](https://github.com/openshift/cluster-etcd-operator/pull/968)
* [OCPBUGS-7374](https://issues.redhat.com/browse/OCPBUGS-7374): set default timeouts in etcdcli [#1003](https://github.com/openshift/cluster-etcd-operator/pull/1003)
* fail early on missing node status envs [#1002](https://github.com/openshift/cluster-etcd-operator/pull/1002)
* updating library-go for CVE-2022-41717 [#997](https://github.com/openshift/cluster-etcd-operator/pull/997)
* Updating cluster-etcd-operator images to be consistent with ART [#969](https://github.com/openshift/cluster-etcd-operator/pull/969)
* pkg/operator/etcdmemberscontroller: Slugify "No quorum" to "NoQuorum" [#993](https://github.com/openshift/cluster-etcd-operator/pull/993)
* pkg/operator/defragcontroller: Fix "stabalize" -> "stabilize" typo [#990](https://github.com/openshift/cluster-etcd-operator/pull/990)
* Update reviewers and approvers [#985](https://github.com/openshift/cluster-etcd-operator/pull/985)
* [OCPBUGS-5304](https://issues.redhat.com/browse/OCPBUGS-5304): should not scale-down when all members are healthy [#978](https://github.com/openshift/cluster-etcd-operator/pull/978)
* [OCPBUGS-1123](https://issues.redhat.com/browse/OCPBUGS-1123): only allow TLS1.2/1.3 ciphersuites in etcd and CEO [#970](https://github.com/openshift/cluster-etcd-operator/pull/970)
* [OCPBUGS-2852](https://issues.redhat.com/browse/OCPBUGS-2852): later bootstrap removal in delayed scaling [#964](https://github.com/openshift/cluster-etcd-operator/pull/964)
* certificate code cleanup [#935](https://github.com/openshift/cluster-etcd-operator/pull/935)
* [OCPBUGS-3929](https://issues.redhat.com/browse/OCPBUGS-3929): update apf configuration to use v1beta2 [#966](https://github.com/openshift/cluster-etcd-operator/pull/966)
* add test for bootstrap teardown controller [#955](https://github.com/openshift/cluster-etcd-operator/pull/955)
* add CEO overview slides [#963](https://github.com/openshift/cluster-etcd-operator/pull/963)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/4bf4f66a77b9149d92496b439f14bb9306d1f19c...2b384ac0d231264e3d8278725bc0a65a5f6bff7b)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/19ee668b5c3f9037e1353ca9e5e3e0ca924ae31e)

* [OCPBUGS-36034](https://issues.redhat.com/browse/OCPBUGS-36034): go.*,vendor: bump go-retryablehttp [#1070](https://github.com/openshift/cluster-image-registry-operator/pull/1070)
* [OCPBUGS-29935](https://issues.redhat.com/browse/OCPBUGS-29935): pkg/storage/s3: enable bucket key on encryption settings [#1007](https://github.com/openshift/cluster-image-registry-operator/pull/1007)
* [OCPBUGS-22126](https://issues.redhat.com/browse/OCPBUGS-22126): increase storage account key cache expiration [#940](https://github.com/openshift/cluster-image-registry-operator/pull/940)
* [OCPBUGS-20698](https://issues.redhat.com/browse/OCPBUGS-20698): mitigate effects of rapid reset [#946](https://github.com/openshift/cluster-image-registry-operator/pull/946)
* [OCPBUGS-10716](https://issues.redhat.com/browse/OCPBUGS-10716): fix storage selection on IBM cloud [#851](https://github.com/openshift/cluster-image-registry-operator/pull/851)
* [OCPBUGS-6797](https://issues.redhat.com/browse/OCPBUGS-6797): Add nil validation for IBM Cloud and Power VS infrastructure status in ibmcos [#845](https://github.com/openshift/cluster-image-registry-operator/pull/845)
* [MULTIARCH-3212](https://issues.redhat.com/browse/MULTIARCH-3212): Use IBM COS as storage backend for PowerVS [#843](https://github.com/openshift/cluster-image-registry-operator/pull/843)
* [OCPBUGS-6621](https://issues.redhat.com/browse/OCPBUGS-6621): bump aws-sdk-go [#844](https://github.com/openshift/cluster-image-registry-operator/pull/844)
* Add UserTags while creating Azure Storage Account [#829](https://github.com/openshift/cluster-image-registry-operator/pull/829)
* [IR-341](https://issues.redhat.com/browse/IR-341): bump openshift/api [#828](https://github.com/openshift/cluster-image-registry-operator/pull/828)
* [IR-270](https://issues.redhat.com/browse/IR-270): allow registry to create image objects [#823](https://github.com/openshift/cluster-image-registry-operator/pull/823)
* [OCPBUGS-6175](https://issues.redhat.com/browse/OCPBUGS-6175): OpenStack: Add support for Proxy [#833](https://github.com/openshift/cluster-image-registry-operator/pull/833)
* [IR-308](https://issues.redhat.com/browse/IR-308): Add support for External platform [#825](https://github.com/openshift/cluster-image-registry-operator/pull/825)
* [OCPBUGS-4090](https://issues.redhat.com/browse/OCPBUGS-4090): swift: Retry connecting to OpenStack [#819](https://github.com/openshift/cluster-image-registry-operator/pull/819)
* [IR-311](https://issues.redhat.com/browse/IR-311): storage: azure: use azidentity with an adapter [#807](https://github.com/openshift/cluster-image-registry-operator/pull/807)
* [Bug 2065166](https://bugzilla.redhat.com/show_bug.cgi?id=2065166): Remove roles/iam.serviceAccountUser role [#824](https://github.com/openshift/cluster-image-registry-operator/pull/824)
* Updating ose-cluster-image-registry-operator images to be consistent with ART [#821](https://github.com/openshift/cluster-image-registry-operator/pull/821)
* [IR-314](https://issues.redhat.com/browse/IR-314): Bump dependencies [#816](https://github.com/openshift/cluster-image-registry-operator/pull/816)
* Add config for golangci-lint and fix errors [#820](https://github.com/openshift/cluster-image-registry-operator/pull/820)
* hack/test-go.sh: generate coverage reports [#818](https://github.com/openshift/cluster-image-registry-operator/pull/818)
* [OCPBUGS-3974](https://issues.redhat.com/browse/OCPBUGS-3974): check for nil pointer before dereferencing [#814](https://github.com/openshift/cluster-image-registry-operator/pull/814)
* [Bug 2066388](https://bugzilla.redhat.com/show_bug.cgi?id=2066388): Add example for s3.regionEndpoint [#815](https://github.com/openshift/cluster-image-registry-operator/pull/815)
* [OCPBUGS-2941](https://issues.redhat.com/browse/OCPBUGS-2941): Bump gophercloud [#808](https://github.com/openshift/cluster-image-registry-operator/pull/808)
* add myself to OWNERS [#809](https://github.com/openshift/cluster-image-registry-operator/pull/809)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/77fd1a927087cd73330897a63016c23614ac3201...19ee668b5c3f9037e1353ca9e5e3e0ca924ae31e)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/a45f7a3a44ead85d2e36a57723fc05fc0919c63e)

* [OCPBUGS-43095](https://issues.redhat.com/browse/OCPBUGS-43095): Add alert for RFC 7230 violation in Transfer-Encoding headers [#1161](https://github.com/openshift/cluster-ingress-operator/pull/1161)
* [OCPBUGS-43095](https://issues.redhat.com/browse/OCPBUGS-43095): Add e2e test for duplicate Transfer-Encoding headers [#1150](https://github.com/openshift/cluster-ingress-operator/pull/1150)
* [OCPBUGS-36551](https://issues.redhat.com/browse/OCPBUGS-36551): Add Regexp Anchor to TestAll [#1104](https://github.com/openshift/cluster-ingress-operator/pull/1104)
* [OCPBUGS-35453](https://issues.redhat.com/browse/OCPBUGS-35453): [release-4.13] internal service changed fix target port logic [#1089](https://github.com/openshift/cluster-ingress-operator/pull/1089)
* [OCPBUGS-35094](https://issues.redhat.com/browse/OCPBUGS-35094): TestHostNetworkPortBinding: Delete t.Parallel() [#1082](https://github.com/openshift/cluster-ingress-operator/pull/1082)
* [OCPBUGS-34765](https://issues.redhat.com/browse/OCPBUGS-34765): Don't add clientca-configmap finalizer if deleting [#1073](https://github.com/openshift/cluster-ingress-operator/pull/1073)
* [OCPBUGS-34409](https://issues.redhat.com/browse/OCPBUGS-34409): desiredRouterDeployment: Set HostPort if needed [#1062](https://github.com/openshift/cluster-ingress-operator/pull/1062)
* [OCPBUGS-33990](https://issues.redhat.com/browse/OCPBUGS-33990): Avoid spurious updates for internalTrafficPolicy [Backport to 4.13] [#1055](https://github.com/openshift/cluster-ingress-operator/pull/1055)
* [OCPBUGS-34476](https://issues.redhat.com/browse/OCPBUGS-34476): Use centos7 tag for quay.io/centos7/httpd-24-centos7 image [#1065](https://github.com/openshift/cluster-ingress-operator/pull/1065)
* [OCPBUGS-20781](https://issues.redhat.com/browse/OCPBUGS-20781): Bump golang.org/x/net for CVE-2023-44487 [#987](https://github.com/openshift/cluster-ingress-operator/pull/987)
* [OCPBUGS-22402](https://issues.redhat.com/browse/OCPBUGS-22402): test/e2e: Don't use openshift/origin-node [#991](https://github.com/openshift/cluster-ingress-operator/pull/991)
* [OCPBUGS-17733](https://issues.redhat.com/browse/OCPBUGS-17733): [release-4.13] remove shared VPC cred request [#972](https://github.com/openshift/cluster-ingress-operator/pull/972)
* [NE-1341](https://issues.redhat.com/browse/NE-1341): Add support for AWS shared VPC in another account [#966](https://github.com/openshift/cluster-ingress-operator/pull/966)
* [OCPBUGS-15434](https://issues.redhat.com/browse/OCPBUGS-15434): [release-4.13] Fix invalid DNS name formatting for GCP [#958](https://github.com/openshift/cluster-ingress-operator/pull/958)
* [OCPBUGS-15515](https://issues.redhat.com/browse/OCPBUGS-15515): Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record [#955](https://github.com/openshift/cluster-ingress-operator/pull/955)
* [OCPBUGS-12743](https://issues.redhat.com/browse/OCPBUGS-12743): bump controller-runtime to fix the multi namespace cache indexing [#921](https://github.com/openshift/cluster-ingress-operator/pull/921)
* [OCPBUGS-13964](https://issues.redhat.com/browse/OCPBUGS-13964), [OCPBUGS-13967](https://issues.redhat.com/browse/OCPBUGS-13967): Handle mTLS CRLs, and fix accidental CRL duplication [#935](https://github.com/openshift/cluster-ingress-operator/pull/935)
* [OCPBUGS-12918](https://issues.redhat.com/browse/OCPBUGS-12918): gatewayclass: Update for OSSM 2.4 API change [#917](https://github.com/openshift/cluster-ingress-operator/pull/917)
* [OCPBUGS-13157](https://issues.redhat.com/browse/OCPBUGS-13157): Deflake TestRouterCompressionOperation [#926](https://github.com/openshift/cluster-ingress-operator/pull/926)
* [OCPBUGS-13071](https://issues.redhat.com/browse/OCPBUGS-13071): Fix TestClientTLS flakes [#923](https://github.com/openshift/cluster-ingress-operator/pull/923)
* [OCPBUGS-4054](https://issues.redhat.com/browse/OCPBUGS-4054): configurable-route: Don't use NewKindWithCache [#860](https://github.com/openshift/cluster-ingress-operator/pull/860)
* [NE-1186](https://issues.redhat.com/browse/NE-1186): Test_getRR: Fix typo: "excepted" → "expected" [#883](https://github.com/openshift/cluster-ingress-operator/pull/883)
* [CORS-2467](https://issues.redhat.com/browse/CORS-2467): dns: azure: use azidentity with an adapter [#846](https://github.com/openshift/cluster-ingress-operator/pull/846)
* [NE-1105](https://issues.redhat.com/browse/NE-1105): Add support for Gateway API [#890](https://github.com/openshift/cluster-ingress-operator/pull/890)
* [OCPBUGS-7424](https://issues.redhat.com/browse/OCPBUGS-7424): Bump vendored k8s libraries to 1.26.1 [#888](https://github.com/openshift/cluster-ingress-operator/pull/888)
* [CFE-679](https://issues.redhat.com/browse/CFE-679): Add user defined tags to the created DNS resources [#874](https://github.com/openshift/cluster-ingress-operator/pull/874)
* [OCPBUGS-6247](https://issues.redhat.com/browse/OCPBUGS-6247): Updating ose-cluster-ingress-operator images to be consistent with ART [#862](https://github.com/openshift/cluster-ingress-operator/pull/862)
* [CORS-2072](https://issues.redhat.com/browse/CORS-2072): GCP - Parse Zone ID with a project ID embedded [#855](https://github.com/openshift/cluster-ingress-operator/pull/855)
* [NE-1092](https://issues.redhat.com/browse/NE-1092): Add proxy protocol support for IBMCloud loadbalancers [#812](https://github.com/openshift/cluster-ingress-operator/pull/812)
* [OCPBUGS-6384](https://issues.redhat.com/browse/OCPBUGS-6384): Address CVE-2022-41717 [#876](https://github.com/openshift/cluster-ingress-operator/pull/876)
* [OCPBUGS-4827](https://issues.redhat.com/browse/OCPBUGS-4827): Add missing AWS permission for ListTagsForResources [#868](https://github.com/openshift/cluster-ingress-operator/pull/868)
* [OCPBUGS-6701](https://issues.redhat.com/browse/OCPBUGS-6701): Avoid spurious updates for scope in IngressClass [#879](https://github.com/openshift/cluster-ingress-operator/pull/879)
* [OCPBUGS-6698](https://issues.redhat.com/browse/OCPBUGS-6698): Fix conflict error message in ensureNodePortService [#877](https://github.com/openshift/cluster-ingress-operator/pull/877)
* [OCPBUGS-6700](https://issues.redhat.com/browse/OCPBUGS-6700): updateIngressClass: Fix log message [#878](https://github.com/openshift/cluster-ingress-operator/pull/878)
* [NE-1124](https://issues.redhat.com/browse/NE-1124): Add support for External platform to CIO [#873](https://github.com/openshift/cluster-ingress-operator/pull/873)
* [OCPBUGS-4573](https://issues.redhat.com/browse/OCPBUGS-4573): Target metrics port by name in internal service [#864](https://github.com/openshift/cluster-ingress-operator/pull/864)
* [OCPBUGS-434](https://issues.redhat.com/browse/OCPBUGS-434): Absorb PodsScheduled condition into MinAvailable [#854](https://github.com/openshift/cluster-ingress-operator/pull/854)
* [OCPBUGS-4759](https://issues.redhat.com/browse/OCPBUGS-4759): Do not manage DNS for an ingresscontroller with domain mismatch in GCP [#866](https://github.com/openshift/cluster-ingress-operator/pull/866)
* [OCPBUGS-4703](https://issues.redhat.com/browse/OCPBUGS-4703): Replace liveness-grace-period-seconds annotation [#863](https://github.com/openshift/cluster-ingress-operator/pull/863)
* [OCPBUGS-3404](https://issues.redhat.com/browse/OCPBUGS-3404): Bump openshift/api for matchExpressions doc fix [#856](https://github.com/openshift/cluster-ingress-operator/pull/856)
* [OPNET-133](https://issues.redhat.com/browse/OPNET-133): Support remote worker [#858](https://github.com/openshift/cluster-ingress-operator/pull/858)
* [OCPBUGS-1725](https://issues.redhat.com/browse/OCPBUGS-1725): Ingress controller should not have affinity policy in single-replica clusters [#810](https://github.com/openshift/cluster-ingress-operator/pull/810)
* [OCPBUGS-1807](https://issues.redhat.com/browse/OCPBUGS-1807): Fix bad `handleSingleNode4Dot11Upgrade` log message [#808](https://github.com/openshift/cluster-ingress-operator/pull/808)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/85e2d05159b7b4b2f16c8a95815c7d9927b68597...a45f7a3a44ead85d2e36a57723fc05fc0919c63e)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/1448124e32fe47d95c6ae3f6e275599a65498ee5)

* [OCPBUGS-34062](https://issues.redhat.com/browse/OCPBUGS-34062): [4.13] add a controller that reconciles SCCs' volumes [#1677](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1677)
* [OCPBUGS-25922](https://issues.redhat.com/browse/OCPBUGS-25922): [release-4.13] dashboard: use recording rules for most metrics [#1611](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1611)
* : OCPBUGS-24023: Add workload partitioning annotation [#1591](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1591)
* : OCPBUGS-20880: bump library-go to include switch to HTTP/1.1 [#1573](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1573)
* [OCPBUGS-19825](https://issues.redhat.com/browse/OCPBUGS-19825): Update staticpod file permissions to conform with CIS benchmarks [#1558](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1558)
* [OCPBUGS-15853](https://issues.redhat.com/browse/OCPBUGS-15853): pkg/operator/configobserver: check that the serving certificate refer… [#1522](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1522)
* [OCPBUGS-17081](https://issues.redhat.com/browse/OCPBUGS-17081): make webhook connection failure a warning in log [#1532](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1532)
* [OCPBUGS-13763](https://issues.redhat.com/browse/OCPBUGS-13763): dont log jwt tokens [#1499](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1499)
* [OCPBUGS-4343](https://issues.redhat.com/browse/OCPBUGS-4343): update apf configuration to use v1beta3 [#1470](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1470)
* [OCPBUGS-10712](https://issues.redhat.com/browse/OCPBUGS-10712): PSA Violation alert: add ocp_namespace label [#1473](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1473)
* [OCPBUGS-10042](https://issues.redhat.com/browse/OCPBUGS-10042): update openshift/api to get new apiserver schema [#1472](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1472)
* [OCPBUGS-8710](https://issues.redhat.com/browse/OCPBUGS-8710): turn PSa to logging mode by default again [#1463](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1463)
* [OCPBUGS-5939](https://issues.redhat.com/browse/OCPBUGS-5939): revert dev cert rotation for 4.13 [#1465](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1465)
* [OCPBUGS-8712](https://issues.redhat.com/browse/OCPBUGS-8712): API-1509: Enable AES-GCM encryption [#1458](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1458)
* [OCPBUGS-8475](https://issues.redhat.com/browse/OCPBUGS-8475): Disable TestBoundTokenSignerController [#1457](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1457)
* [STOR-1051](https://issues.redhat.com/browse/STOR-1051): Allow CSI inline volumes in all SCCs [#1434](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1434)
* [WRKLDS-705](https://issues.redhat.com/browse/WRKLDS-705): Bump openshift/api to enable DynamicResourceAllocation through TechPreviewNoUpgrade [#1447](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1447)
* bump(api) [#1444](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1444)
* bump(*) [#1442](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1442)
* Update OWNERS to remove/replace adambkaplan [#1438](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1438)
* [OCPBUGS-5873](https://issues.redhat.com/browse/OCPBUGS-5873): dashboard: use apiserver_storage_objects metric [#1432](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1432)
* [API-1520](https://issues.redhat.com/browse/API-1520): Update SLO alerts based on upstream improvements [#1431](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1431)
* [WRKLDS-649](https://issues.redhat.com/browse/WRKLDS-649): Guard pod set readiness probe endpoint explicitly [#1437](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1437)
* update APIRemovedInNextRelease alerts [#1436](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1436)
* [OCPBUGS-6202](https://issues.redhat.com/browse/OCPBUGS-6202): Updating ose-cluster-kube-apiserver-operator images to be consistent with ART [#1415](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1415)
* [OCPBUGS-6258](https://issues.redhat.com/browse/OCPBUGS-6258): bump(k8s): 1.26.1 [#1433](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1433)
* increase audit log size to contain an entire upgrade+e2e run [#1430](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1430)
* [OCPBUGS-3985](https://issues.redhat.com/browse/OCPBUGS-3985): enable pod security admission for techpreview [#1403](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1403)
* [OCPBUGS-272](https://issues.redhat.com/browse/OCPBUGS-272): Remove duplicate find word in error msg for degraded webhook [#1428](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1428)
* Fix typo in PodSecurityViolation alert's description [#1391](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1391)
* make the bootstrap kube-apiserver honor cluster-wide featuregates [#1419](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1419)
* remove use of deprecated klog flags [#1427](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1427)
* Revert "drop log-file flag removed in 1.26" [#1425](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1425)
* make api team approver [#1377](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1377)
* drop log-file flag removed in 1.26 [#1420](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1420)
* bump(api) [#1418](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1418)
* Drop flags removed in k8s 1.26 [#1417](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1417)
* [OCPBUGS-3041](https://issues.redhat.com/browse/OCPBUGS-3041): guard controller: set an explicit hostname to avoid name collisions [#1410](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1410)
* [STOR-829](https://issues.redhat.com/browse/STOR-829): Enable CSIInlineVolumeSecurity admission plugin [#1385](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1385)
* [OCPBUGS-3985](https://issues.redhat.com/browse/OCPBUGS-3985): update for featureset rendering [#1409](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1409)
* [OCPBUGS-3929](https://issues.redhat.com/browse/OCPBUGS-3929): update apf configuration to use v1beta2 [#1408](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1408)
* bootstrap-kube-apiserver: specify resources.requests [#1398](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1398)
* [OCPBUGS-1601](https://issues.redhat.com/browse/OCPBUGS-1601): CVE-2022-3259: enable HSTS for kube-apiserver [#1392](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1392)
* [Bug 2100429](https://bugzilla.redhat.com/show_bug.cgi?id=2100429): Allow ephemeral volumes in all SCCs [#1380](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1380)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/09d7ddbaba9eb5715313e716476e6a33848d045c...1448124e32fe47d95c6ae3f6e275599a65498ee5)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/18c076b1b56e06086fc3e4ea89d6922cca2d6b4a)

* [OCPBUGS-20981](https://issues.redhat.com/browse/OCPBUGS-20981): bump golang.org/x/net to v0.17.0 [#28](https://github.com/openshift/cluster-api-operator/pull/28)
* [OCPBUGS-13093](https://issues.redhat.com/browse/OCPBUGS-13093): Bump golang.org/x/net [#20](https://github.com/openshift/cluster-api-operator/pull/20)
* Merge https://github.com/kubernetes-sigs/cluster-api-operator:main (e6bc25c) into main [#13](https://github.com/openshift/cluster-api-operator/pull/13)
* Update OWNERS [#14](https://github.com/openshift/cluster-api-operator/pull/14)
* yaml was malformed - correcting it [#12](https://github.com/openshift/cluster-api-operator/pull/12)
* Update OWNERS [#11](https://github.com/openshift/cluster-api-operator/pull/11)
* [Bug 2087043](https://bugzilla.redhat.com/show_bug.cgi?id=2087043): Merge https://github.com/kubernetes-sigs/cluster-api-operator:main into main [#9](https://github.com/openshift/cluster-api-operator/pull/9)
* Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART [#10](https://github.com/openshift/cluster-api-operator/pull/10)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/d50f7322addd997cc73a0ba8294eadb977974c3f...18c076b1b56e06086fc3e4ea89d6922cca2d6b4a)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/dac7113696160d1170d9b3773afa4a4b7cb2099b)

* [OCPBUGS-27066](https://issues.redhat.com/browse/OCPBUGS-27066): bump(library-go)=release-4.13 [#788](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/788)
* [OCPBUGS-21103](https://issues.redhat.com/browse/OCPBUGS-21103): Drop flags removed in k8s 1.26 [4.13] [#766](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/766)
* [OCPBUGS-21078](https://issues.redhat.com/browse/OCPBUGS-21078): Bump deps to address CVE-2023-44487 [4.13] [#758](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/758)
* [OCPBUGS-19825](https://issues.redhat.com/browse/OCPBUGS-19825): Update staticpod file permissions to conform with CIS benchmarks [#752](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/752)
* [OCPBUGS-11353](https://issues.redhat.com/browse/OCPBUGS-11353): AWS should not use external-cloud-volume-plugin post CSI migration [#734](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/734)
* [OCPBUGS-11146](https://issues.redhat.com/browse/OCPBUGS-11146): KCMO and MCO must set env var for CSI migration [#718](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/718)
* [OCPBUGS-11222](https://issues.redhat.com/browse/OCPBUGS-11222): do not degrade KCM when when monitoring stack rollout is in progress [#717](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/717)
* [OCPBUGS-7785](https://issues.redhat.com/browse/OCPBUGS-7785): migrate to using lease objects for leader election [#716](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/716)
* [OCPBUGS-8710](https://issues.redhat.com/browse/OCPBUGS-8710): Move PSa back to logging [#711](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/711)
* [OCPBUGS-7785](https://issues.redhat.com/browse/OCPBUGS-7785): migrate to using lease objects for leader election [#712](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/712)
* [WRKLDS-705](https://issues.redhat.com/browse/WRKLDS-705): Bump openshift/api to enable DynamicResourceAllocation through TechPreviewNoUpgrade [#701](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/701)
* [WRKLDS-649](https://issues.redhat.com/browse/WRKLDS-649): Guard pod set readiness probe endpoint explicitly [#693](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/693)
* [OCPBUGS-6259](https://issues.redhat.com/browse/OCPBUGS-6259): bump(k8s): 1.26.1 [#691](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/691)
* [OCPBUGS-3985](https://issues.redhat.com/browse/OCPBUGS-3985): Enforce PSA when techpreview is enabled [#663](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/663)
* Fixup vendor after library-go update [#689](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/689)
* Update library-go dependency to move vSphere to out of tree [#687](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/687)
* honor feature gates during bootstrapping [#686](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/686)
* remove use of deprecated klog flags [#685](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/685)
* [OCPBUGS-5269](https://issues.redhat.com/browse/OCPBUGS-5269): remove unnecessary leader election RBAC [#681](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/681)
* [OCPBUGS-5006](https://issues.redhat.com/browse/OCPBUGS-5006): add leader-elect-renew-deadline into defaultconfit.yaml [#678](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/678)
* Revert "Drop log flags removed in k8s 1.26" [#684](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/684)
* bump (openshift/api) for CSIMigration* feature gates [#682](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/682)
* Drop log flags removed in k8s 1.26 [#680](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/680)
* Drop flags removed in k8s 1.26 [#679](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/679)
* Bump library-go [#677](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/677)
* Fix typo in podsecurity-admission-label-syncer-controller cluster role [#671](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/671)
* Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART [#673](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/673)
* [OCPBUGS-3283](https://issues.redhat.com/browse/OCPBUGS-3283): remove unnecessary RBAC [#661](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/661)
* [OCPBUGS-4401](https://issues.redhat.com/browse/OCPBUGS-4401): limit cluster-policy-controller RBAC permissions [#670](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/670)
* [OCPBUGS-3041](https://issues.redhat.com/browse/OCPBUGS-3041): guard controller: set an explicit hostname to avoid name collisions [#664](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/664)
* remove not needed RemoveStaleConditionsController [#662](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/662)
* bootstrap-kube-controller-manager: specify resources.requests [#660](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/660)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/c3c07bebb7a644fe75bccd590fa088bcccd3749a...dac7113696160d1170d9b3773afa4a4b7cb2099b)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/2e7c269b358223b89632b35840e6a91cdc7bb9aa)

* [OCPBUGS-27065](https://issues.redhat.com/browse/OCPBUGS-27065): bump(library-go)=release-4.13 [#528](https://github.com/openshift/cluster-kube-scheduler-operator/pull/528)
* [OCPBUGS-21811](https://issues.redhat.com/browse/OCPBUGS-21811): Bump deps to address CVE-2023-44487 [#502](https://github.com/openshift/cluster-kube-scheduler-operator/pull/502)
* [OCPBUGS-19825](https://issues.redhat.com/browse/OCPBUGS-19825): Update staticpod file permissions to conform with CIS benchmarks [#497](https://github.com/openshift/cluster-kube-scheduler-operator/pull/497)
* [OCPBUGS-14651](https://issues.redhat.com/browse/OCPBUGS-14651): disable debug pporf with unauthenticated port for 4.13 [#480](https://github.com/openshift/cluster-kube-scheduler-operator/pull/480)
* [OCPBUGS-7785](https://issues.redhat.com/browse/OCPBUGS-7785): migrate to using lease objects for leader election [#477](https://github.com/openshift/cluster-kube-scheduler-operator/pull/477)
* [OCPBUGS-7785](https://issues.redhat.com/browse/OCPBUGS-7785): migrate to using lease objects for leader election [#470](https://github.com/openshift/cluster-kube-scheduler-operator/pull/470)
* [WRKLDS-705](https://issues.redhat.com/browse/WRKLDS-705): Bump openshift/api to enable DynamicResourceAllocation through TechPreviewNoUpgrade [#463](https://github.com/openshift/cluster-kube-scheduler-operator/pull/463)
* [WRKLDS-649](https://issues.redhat.com/browse/WRKLDS-649): Guard pod set readiness probe endpoint explicitly [#459](https://github.com/openshift/cluster-kube-scheduler-operator/pull/459)
* [OCPBUGS-6261](https://issues.redhat.com/browse/OCPBUGS-6261): bump(k8s): 1.26.1 [#460](https://github.com/openshift/cluster-kube-scheduler-operator/pull/460)
* Add client certificate and key to service monitor [#434](https://github.com/openshift/cluster-kube-scheduler-operator/pull/434)
* remove use of deprecated klog flags [#457](https://github.com/openshift/cluster-kube-scheduler-operator/pull/457)
* Revert "Drop log flags removed in k8s 1.26" [#456](https://github.com/openshift/cluster-kube-scheduler-operator/pull/456)
* bump (openshift/api) for CSIMigration* feature gates [#455](https://github.com/openshift/cluster-kube-scheduler-operator/pull/455)
* Drop log flags removed in k8s 1.26 [#454](https://github.com/openshift/cluster-kube-scheduler-operator/pull/454)
* Drop flags removed in k8s 1.26 [#453](https://github.com/openshift/cluster-kube-scheduler-operator/pull/453)
* [OCPBUGS-3041](https://issues.redhat.com/browse/OCPBUGS-3041): guard controller: set an explicit hostname to avoid name collisions [#446](https://github.com/openshift/cluster-kube-scheduler-operator/pull/446)
* bootstrap-kube-scheduler: specify resources.requests [#445](https://github.com/openshift/cluster-kube-scheduler-operator/pull/445)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/48cd96c9dc27c801beff17fa5ea8c3dac374f10d...2e7c269b358223b89632b35840e6a91cdc7bb9aa)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/721de5d64083b17c22f6b784bb2c78af39d7b3b0)

* : OCPBUGS-21355: bump library-go to include switch to HTTP/1.1 [#97](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/97)
* [OCPBUGS-6240](https://issues.redhat.com/browse/OCPBUGS-6240): Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART [#87](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/87)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/1a251f4d00c050404dc313c698279da435d08c07...721de5d64083b17c22f6b784bb2c78af39d7b3b0)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/25fe7b4bd96baba2eef8c0c22521fdc8c08f981d)

* [OCPBUGS-21447](https://issues.redhat.com/browse/OCPBUGS-21447): Bump x/net package to v0.18.0 [#213](https://github.com/openshift/cluster-machine-approver/pull/213)
* [OCPBUGS-23368](https://issues.redhat.com/browse/OCPBUGS-23368): Filter non node CSRs in metrics [#210](https://github.com/openshift/cluster-machine-approver/pull/210)
* [OCPBUGS-11227](https://issues.redhat.com/browse/OCPBUGS-11227): Update node client allowed usages [#190](https://github.com/openshift/cluster-machine-approver/pull/190)
* [OCPBUGS-11227](https://issues.redhat.com/browse/OCPBUGS-11227): Update isNodeClientCert to allow for new key usages [#187](https://github.com/openshift/cluster-machine-approver/pull/187)
* [OCPBUGS-11227](https://issues.redhat.com/browse/OCPBUGS-11227): approver: fix ECDSA approvals in 1.27 [#185](https://github.com/openshift/cluster-machine-approver/pull/185)
* Update OWNERS [#179](https://github.com/openshift/cluster-machine-approver/pull/179)
* : Update tooling for CMA [#178](https://github.com/openshift/cluster-machine-approver/pull/178)
* [OCPCLOUD-1805](https://issues.redhat.com/browse/OCPCLOUD-1805): Port to ginkgo v2 [#176](https://github.com/openshift/cluster-machine-approver/pull/176)
* Updating ose-cluster-machine-approver images to be consistent with ART [#174](https://github.com/openshift/cluster-machine-approver/pull/174)
* Update OWNERS [#177](https://github.com/openshift/cluster-machine-approver/pull/177)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/7b08a4de4a08da8cdb341948e0902395eb0da961...25fe7b4bd96baba2eef8c0c22521fdc8c08f981d)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/3aa76870066af1d0266ab39201856ba711fd08d7)

* [OCPBUGS-33581](https://issues.redhat.com/browse/OCPBUGS-33581): label for infra nodes for metric cluster:capacity_cpu_cores:sum [#2344](https://github.com/openshift/cluster-monitoring-operator/pull/2344)
* [OCPBUGS-28767](https://issues.redhat.com/browse/OCPBUGS-28767): fix generation of telemeter token hash [#2305](https://github.com/openshift/cluster-monitoring-operator/pull/2305)
* [OCPBUGS-25388](https://issues.redhat.com/browse/OCPBUGS-25388): Add RHACM telemetry metric for 4.13 [#2203](https://github.com/openshift/cluster-monitoring-operator/pull/2203)
* [OCPBUGS-21457](https://issues.redhat.com/browse/OCPBUGS-21457): Set the new --disable-http2 flag for prometheus-adapter to disable HTTP2 [#2146](https://github.com/openshift/cluster-monitoring-operator/pull/2146)
* [OCPBUGS-22920](https://issues.redhat.com/browse/OCPBUGS-22920): jsonnet: pin commits [#2144](https://github.com/openshift/cluster-monitoring-operator/pull/2144)
* [OCPBUGS-22842](https://issues.redhat.com/browse/OCPBUGS-22842): [release-4.13] add RHACS telemetry metrics [#2139](https://github.com/openshift/cluster-monitoring-operator/pull/2139)
* [OCPBUGS-22308](https://issues.redhat.com/browse/OCPBUGS-22308): fix: force HTTP/1.1 connections [#2134](https://github.com/openshift/cluster-monitoring-operator/pull/2134)
* [OCPBUGS-21250](https://issues.redhat.com/browse/OCPBUGS-21250): upgrade golang.org/x/net to v0.17.0 [#2122](https://github.com/openshift/cluster-monitoring-operator/pull/2122)
* [OCPBUGS-22099](https://issues.redhat.com/browse/OCPBUGS-22099): Extend remote write test timeout [#2127](https://github.com/openshift/cluster-monitoring-operator/pull/2127)
* [OCPBUGS-11016](https://issues.redhat.com/browse/OCPBUGS-11016): Node Exporter ignores network interface under name "cali[a-f0-9]*" [#1927](https://github.com/openshift/cluster-monitoring-operator/pull/1927)
* [OCPBUGS-16023](https://issues.redhat.com/browse/OCPBUGS-16023): Add the trusted CA bundle in UWM Prometheus pods [#2041](https://github.com/openshift/cluster-monitoring-operator/pull/2041)
* [OCPBUGS-15469](https://issues.redhat.com/browse/OCPBUGS-15469): Limit the value of GOMAXPROCS on node-exporter to 4. [#2021](https://github.com/openshift/cluster-monitoring-operator/pull/2021)
* [OCPBUGS-14251](https://issues.redhat.com/browse/OCPBUGS-14251): Add new web console usage metrics [#1976](https://github.com/openshift/cluster-monitoring-operator/pull/1976)
* [OCPBUGS-12488](https://issues.redhat.com/browse/OCPBUGS-12488): go.mod: update golang.org/x/net to v0.7.0 [#1957](https://github.com/openshift/cluster-monitoring-operator/pull/1957)
* [OCPBUGS-13007](https://issues.redhat.com/browse/OCPBUGS-13007): Add build number to rules [#1964](https://github.com/openshift/cluster-monitoring-operator/pull/1964)
* [OCPBUGS-13397](https://issues.redhat.com/browse/OCPBUGS-13397): Uncomment cluster:vsphere_infrastructure_failure_domains:max [#1962](https://github.com/openshift/cluster-monitoring-operator/pull/1962)
* 4.13: OCPBUGS-11294: Add vSphere CSI migration to telemetry [#1929](https://github.com/openshift/cluster-monitoring-operator/pull/1929)
* [OCPBUGS-11536](https://issues.redhat.com/browse/OCPBUGS-11536): node-exporter: disable btrfs collector [#1941](https://github.com/openshift/cluster-monitoring-operator/pull/1941)
* [OCPBUGS-10895](https://issues.redhat.com/browse/OCPBUGS-10895): add startup probe for prometheus-adapter [#1923](https://github.com/openshift/cluster-monitoring-operator/pull/1923)
* [OCPBUGS-11333](https://issues.redhat.com/browse/OCPBUGS-11333): jsonnet: Add prometheus container in UWM [#1934](https://github.com/openshift/cluster-monitoring-operator/pull/1934)
* [OCPBUGS-10793](https://issues.redhat.com/browse/OCPBUGS-10793): bugfix in Node Exporter argument setting [#1922](https://github.com/openshift/cluster-monitoring-operator/pull/1922)
* [OCPBUGS-10476](https://issues.redhat.com/browse/OCPBUGS-10476): turn off netlink mode of netclass collector in Node Exporter. [#1919](https://github.com/openshift/cluster-monitoring-operator/pull/1919)
* [MON-2973](https://issues.redhat.com/browse/MON-2973): test/e2e: Add cleanup func for alertmanager uwm secret test [#1907](https://github.com/openshift/cluster-monitoring-operator/pull/1907)
* [MON-2693](https://issues.redhat.com/browse/MON-2693): Scrape profiles [#1785](https://github.com/openshift/cluster-monitoring-operator/pull/1785)
* [MON-2959](https://issues.redhat.com/browse/MON-2959): test/e2e: Add test for alertmanager secret platform [#1899](https://github.com/openshift/cluster-monitoring-operator/pull/1899)
* [MON-2904](https://issues.redhat.com/browse/MON-2904): add nodeExporter.collectors.buddyinfo settings. [#1891](https://github.com/openshift/cluster-monitoring-operator/pull/1891)
* [MON-2895](https://issues.redhat.com/browse/MON-2895): toggle netlink implementation of netclass collector [#1894](https://github.com/openshift/cluster-monitoring-operator/pull/1894)
* [MON-2932](https://issues.redhat.com/browse/MON-2932): jsonnet/dashboards: add role template variable to node related dashbo… [#1879](https://github.com/openshift/cluster-monitoring-operator/pull/1879)
* [MON-2900](https://issues.redhat.com/browse/MON-2900): add nodeExporter.collectors.netclass settings. [#1893](https://github.com/openshift/cluster-monitoring-operator/pull/1893)
* Update jsonnet dependencies [#1903](https://github.com/openshift/cluster-monitoring-operator/pull/1903)
* [MON-2951](https://issues.redhat.com/browse/MON-2951): create Routes only with ingress operator [#1885](https://github.com/openshift/cluster-monitoring-operator/pull/1885)
* [OCPBUGS-7391](https://issues.redhat.com/browse/OCPBUGS-7391): wait for service CA secrets [#1900](https://github.com/openshift/cluster-monitoring-operator/pull/1900)
* Synchronize versions of the downstream components [#1902](https://github.com/openshift/cluster-monitoring-operator/pull/1902)
* [MON-2973](https://issues.redhat.com/browse/MON-2973): pkg/manifests: Allow configuring secrets in alertmanager (UWM) [#1884](https://github.com/openshift/cluster-monitoring-operator/pull/1884)
* Synchronize versions of the downstream components [#1898](https://github.com/openshift/cluster-monitoring-operator/pull/1898)
* pkg/operator: fix typo in info logs [#1896](https://github.com/openshift/cluster-monitoring-operator/pull/1896)
* [MON-2901](https://issues.redhat.com/browse/MON-2901): add nodeExporter.collectors.netdev settings. [#1888](https://github.com/openshift/cluster-monitoring-operator/pull/1888)
* [STOR-1154](https://issues.redhat.com/browse/STOR-1154): Add vSphere topology to telemetry [#1886](https://github.com/openshift/cluster-monitoring-operator/pull/1886)
* Add nodeExporter.collectors.tcpstat settings. [#1876](https://github.com/openshift/cluster-monitoring-operator/pull/1876)
* Synchronize versions of the downstream components [#1887](https://github.com/openshift/cluster-monitoring-operator/pull/1887)
* [MON-2959](https://issues.redhat.com/browse/MON-2959): Allow configuring secrets in alertmanager (platform) [#1882](https://github.com/openshift/cluster-monitoring-operator/pull/1882)
* Update jsonnet dependencies [#1880](https://github.com/openshift/cluster-monitoring-operator/pull/1880)
* Synchronize versions of the downstream components [#1878](https://github.com/openshift/cluster-monitoring-operator/pull/1878)
* pkg/manifests/manifests.go: move constants to jsonnet [#1873](https://github.com/openshift/cluster-monitoring-operator/pull/1873)
* Synchronize versions of the downstream components [#1877](https://github.com/openshift/cluster-monitoring-operator/pull/1877)
* add nodeExporter.collectors.cpufreq settings. [#1855](https://github.com/openshift/cluster-monitoring-operator/pull/1855)
* Update jsonnet dependencies [#1869](https://github.com/openshift/cluster-monitoring-operator/pull/1869)
* Fix 'make run-local' target [#1874](https://github.com/openshift/cluster-monitoring-operator/pull/1874)
* *: remove kube-rbac-proxy sidecar container [#1870](https://github.com/openshift/cluster-monitoring-operator/pull/1870)
* [OCPBUGS-2729](https://issues.redhat.com/browse/OCPBUGS-2729): unify ignored network device list of Node Exporter. [#1871](https://github.com/openshift/cluster-monitoring-operator/pull/1871)
* [OCPBUGS-5353](https://issues.redhat.com/browse/OCPBUGS-5353): unstack dashboards with limit markers. [#1868](https://github.com/openshift/cluster-monitoring-operator/pull/1868)
* Update jsonnet dependencies [#1865](https://github.com/openshift/cluster-monitoring-operator/pull/1865)
* Synchronize versions of the downstream components [#1867](https://github.com/openshift/cluster-monitoring-operator/pull/1867)
* Update jsonnet dependencies [#1864](https://github.com/openshift/cluster-monitoring-operator/pull/1864)
* Synchronize versions of the downstream components [#1863](https://github.com/openshift/cluster-monitoring-operator/pull/1863)
* [OCPBUGS-4521](https://issues.redhat.com/browse/OCPBUGS-4521): check that all targets are up after certificate recreation [#1848](https://github.com/openshift/cluster-monitoring-operator/pull/1848)
* Synchronize versions of the downstream components [#1861](https://github.com/openshift/cluster-monitoring-operator/pull/1861)
* [OCPBUGS-4219](https://issues.redhat.com/browse/OCPBUGS-4219): Adds runbook link to PrometheusRuleFailures [#1860](https://github.com/openshift/cluster-monitoring-operator/pull/1860)
* [MON-2807](https://issues.redhat.com/browse/MON-2807): Use bearer token file for remote write authentication with telemeter [#1733](https://github.com/openshift/cluster-monitoring-operator/pull/1733)
* [OCPBUGS-1998](https://issues.redhat.com/browse/OCPBUGS-1998): pkg/client: Update daemonset degrade condition [#1812](https://github.com/openshift/cluster-monitoring-operator/pull/1812)
* Synchronize versions of the downstream components [#1859](https://github.com/openshift/cluster-monitoring-operator/pull/1859)
* [Bug 2114515](https://bugzilla.redhat.com/show_bug.cgi?id=2114515): jsonnet: ignore `/var/lib/ibmc-s3fs/` mountpoints [#1854](https://github.com/openshift/cluster-monitoring-operator/pull/1854)
* Synchronize versions of the downstream components [#1853](https://github.com/openshift/cluster-monitoring-operator/pull/1853)
* Synchronize versions of the downstream components [#1852](https://github.com/openshift/cluster-monitoring-operator/pull/1852)
* [OCPBUGS-4793](https://issues.redhat.com/browse/OCPBUGS-4793): fix object reference in Kubernetes events [#1842](https://github.com/openshift/cluster-monitoring-operator/pull/1842)
* Synchronize versions of the downstream components [#1849](https://github.com/openshift/cluster-monitoring-operator/pull/1849)
* Updating cluster-monitoring-operator images to be consistent with ART [#1846](https://github.com/openshift/cluster-monitoring-operator/pull/1846)
* [OCPBUGS-2729](https://issues.redhat.com/browse/OCPBUGS-2729): Node Exporter ignore virtual network device 'enP.*'. [#1843](https://github.com/openshift/cluster-monitoring-operator/pull/1843)
* Unpin and update jsonnet dependencies [#1818](https://github.com/openshift/cluster-monitoring-operator/pull/1818)
* [OCPBUGS-2141](https://issues.redhat.com/browse/OCPBUGS-2141): compute doc link in PVC not configured message [#1836](https://github.com/openshift/cluster-monitoring-operator/pull/1836)
* Synchronize versions of the downstream components [#1838](https://github.com/openshift/cluster-monitoring-operator/pull/1838)
* go.mod: switch to go 1.19 [#1839](https://github.com/openshift/cluster-monitoring-operator/pull/1839)
* Synchronize versions of the downstream components [#1835](https://github.com/openshift/cluster-monitoring-operator/pull/1835)
* [OCPBUGS-2260](https://issues.redhat.com/browse/OCPBUGS-2260): add alert KubePodNotScheduled to group openshift-kubernetes.rules [#1830](https://github.com/openshift/cluster-monitoring-operator/pull/1830)
* Synchronize versions of the downstream components [#1831](https://github.com/openshift/cluster-monitoring-operator/pull/1831)
* Remove deprecated option from kube-state-metrics args [#1832](https://github.com/openshift/cluster-monitoring-operator/pull/1832)
* [OCPBUGS-4184](https://issues.redhat.com/browse/OCPBUGS-4184): use mTLS authentication for metrics scraping [#1827](https://github.com/openshift/cluster-monitoring-operator/pull/1827)
* [OCPBUGS-4168](https://issues.redhat.com/browse/OCPBUGS-4168): Increase startupProbe for prometheus [#1824](https://github.com/openshift/cluster-monitoring-operator/pull/1824)
* [OCPBUGS-4181](https://issues.redhat.com/browse/OCPBUGS-4181): Fixes externalURL field for Prometheus and Alertmanager [#1826](https://github.com/openshift/cluster-monitoring-operator/pull/1826)
* Synchronize versions of the downstream components [#1823](https://github.com/openshift/cluster-monitoring-operator/pull/1823)
* [OCPBUGS-1453](https://issues.redhat.com/browse/OCPBUGS-1453): Fixed TargetDown expression to join on the proper label [#1767](https://github.com/openshift/cluster-monitoring-operator/pull/1767)
* [Bug 2095719](https://bugzilla.redhat.com/show_bug.cgi?id=2095719): Updates CreateOrUpdateServiceAccounts [#1745](https://github.com/openshift/cluster-monitoring-operator/pull/1745)
* [OCPBUGS-4024](https://issues.redhat.com/browse/OCPBUGS-4024): test: increase timeout when checking remote write metrics [#1817](https://github.com/openshift/cluster-monitoring-operator/pull/1817)
* [OCPBUGS-3331](https://issues.redhat.com/browse/OCPBUGS-3331): Pin Jsonnet Deps + Update go.mod for 4.12 + Patch Alert KubePodNotRead [#1816](https://github.com/openshift/cluster-monitoring-operator/pull/1816)
* Revert "OCPBUGS-3331: Pin Jsonnet Deps + Update go.mod for 4.12" [#1815](https://github.com/openshift/cluster-monitoring-operator/pull/1815)
* [OCPBUGS-3331](https://issues.redhat.com/browse/OCPBUGS-3331): Pin Jsonnet Deps + Update go.mod for 4.12 [#1814](https://github.com/openshift/cluster-monitoring-operator/pull/1814)
* Switch ksm registry to registry.k8s.io [#1809](https://github.com/openshift/cluster-monitoring-operator/pull/1809)
* [MGDAPI-4488](https://issues.redhat.com/browse/MGDAPI-4488): RHOAM fleet wide observability metrics [#1771](https://github.com/openshift/cluster-monitoring-operator/pull/1771)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/ee4a20d4d0214c9c8fdacaede3482683436d36e0...3aa76870066af1d0266ab39201856ba711fd08d7)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/df5cf2735b29eb5ca630ec89579ab2bb7a7425b2)

* [OCPBUGS-43856](https://issues.redhat.com/browse/OCPBUGS-43856): manifests/02-cncc-credentials: Set skipServiceCheck for GCP [#2547](https://github.com/openshift/cluster-network-operator/pull/2547)
* [OCPBUGS-38403](https://issues.redhat.com/browse/OCPBUGS-38403): Add missing runbook for OVNKubernetesNorthdInactive [#2471](https://github.com/openshift/cluster-network-operator/pull/2471)
* [OCPBUGS-37941](https://issues.redhat.com/browse/OCPBUGS-37941): update whereabouts crd [#2458](https://github.com/openshift/cluster-network-operator/pull/2458)
* [OCPBUGS-30150](https://issues.redhat.com/browse/OCPBUGS-30150): ipsec: fix openssl typo [#2290](https://github.com/openshift/cluster-network-operator/pull/2290)
* [OCPBUGS-29674](https://issues.redhat.com/browse/OCPBUGS-29674): add env var in whereabouts-reconciler daemonset [#2279](https://github.com/openshift/cluster-network-operator/pull/2279)
* [OCPBUGS-29301](https://issues.redhat.com/browse/OCPBUGS-29301): Update ingressconfig_controller to use field Manager [#2267](https://github.com/openshift/cluster-network-operator/pull/2267)
* [OCPBUGS-28208](https://issues.redhat.com/browse/OCPBUGS-28208): ipsec: fix oopsy from 2e3fc8e (cherry-pick of 980c08318e) [#2222](https://github.com/openshift/cluster-network-operator/pull/2222)
* [OCPBUGS-28777](https://issues.redhat.com/browse/OCPBUGS-28777): fix whereabouts conformance test failures [#2241](https://github.com/openshift/cluster-network-operator/pull/2241)
* [OCPBUGS-27958](https://issues.redhat.com/browse/OCPBUGS-27958): Add ConfigMap mount to the whereabouts-reconciler DaemonSet [#2220](https://github.com/openshift/cluster-network-operator/pull/2220)
* NO-JIRA: add kyrtapz as reviewer and approver for release 4.13 [#2229](https://github.com/openshift/cluster-network-operator/pull/2229)
* [OCPBUGS-22293](https://issues.redhat.com/browse/OCPBUGS-22293): remove all managed fields used by old manager [#2094](https://github.com/openshift/cluster-network-operator/pull/2094)
* [OCPBUGS-24570](https://issues.redhat.com/browse/OCPBUGS-24570): Disable weak SSH cipher suitesRm weak ciphers 4.13 [#2163](https://github.com/openshift/cluster-network-operator/pull/2163)
* [OCPBUGS-21716](https://issues.redhat.com/browse/OCPBUGS-21716): Bump golang.org/x/net and github.com/openshift/library-go [#2123](https://github.com/openshift/cluster-network-operator/pull/2123)
* [OCPBUGS-22896](https://issues.redhat.com/browse/OCPBUGS-22896): run update-codegen after adding maxLogFiles cfg [#2162](https://github.com/openshift/cluster-network-operator/pull/2162)
* [OCPBUGS-22971](https://issues.redhat.com/browse/OCPBUGS-22971): HyperShift: Use the local konnectivity proxy when checking proxy readiness [#2098](https://github.com/openshift/cluster-network-operator/pull/2098)
* [OCPBUGS-22896](https://issues.redhat.com/browse/OCPBUGS-22896): Remove oldest ovn acl log files when file limit exceeded [#2097](https://github.com/openshift/cluster-network-operator/pull/2097)
* [SDN-4184](https://issues.redhat.com/browse/SDN-4184): Limit OVN-Kubernetes RBAC permissions [#2093](https://github.com/openshift/cluster-network-operator/pull/2093)
* [OCPBUGS-20278](https://issues.redhat.com/browse/OCPBUGS-20278): Edited multus-admission-controller deployment config to not add autoount a service account token [#1885](https://github.com/openshift/cluster-network-operator/pull/1885)
* [OCPBUGS-19894](https://issues.redhat.com/browse/OCPBUGS-19894): remove prestop hooks for northd, sbdbd and nbdb [#2001](https://github.com/openshift/cluster-network-operator/pull/2001)
* [OCPBUGS-18722](https://issues.redhat.com/browse/OCPBUGS-18722): IBMCloud specific: patch out management workload for dataplane component thats needed for bootstrapping [#1994](https://github.com/openshift/cluster-network-operator/pull/1994)
* [OCPBUGS-18342](https://issues.redhat.com/browse/OCPBUGS-18342): Fix bond-cni's default directory in multus manifest [#1977](https://github.com/openshift/cluster-network-operator/pull/1977)
* [OCPBUGS-13920](https://issues.redhat.com/browse/OCPBUGS-13920): add Hypershift release-image annotation to multus [#1817](https://github.com/openshift/cluster-network-operator/pull/1817)
* [OCPBUGS-18099](https://issues.redhat.com/browse/OCPBUGS-18099): [release-4.13] Use encapsulation=true for IBM Cloud [#1932](https://github.com/openshift/cluster-network-operator/pull/1932)
* [OCPBUGS-17721](https://issues.redhat.com/browse/OCPBUGS-17721): Enhance check controller to remove old check objects [#1950](https://github.com/openshift/cluster-network-operator/pull/1950)
* [OCPBUGS-17457](https://issues.redhat.com/browse/OCPBUGS-17457): prevent creation of multiple cni-sysctl-allowlist-ds pods [#1936](https://github.com/openshift/cluster-network-operator/pull/1936)
* [OCPBUGS-11539](https://issues.redhat.com/browse/OCPBUGS-11539): Hypershift: Add RollingUpdate parameters to multus-admission-controller [#1774](https://github.com/openshift/cluster-network-operator/pull/1774)
* [OCPBUGS-15977](https://issues.redhat.com/browse/OCPBUGS-15977): Add logic to pick the openshift-sdn shims from right directories [#1880](https://github.com/openshift/cluster-network-operator/pull/1880)
* [OCPBUGS-15962](https://issues.redhat.com/browse/OCPBUGS-15962): Add logic to pick the ovn-k8s-cni-overlay binary from the right dir [#1877](https://github.com/openshift/cluster-network-operator/pull/1877)
* Change rhel7/8 to rhel8/9 [#1869](https://github.com/openshift/cluster-network-operator/pull/1869)
* [OCPBUGS-15476](https://issues.redhat.com/browse/OCPBUGS-15476): Add release version annotation to whereabouts-reconciler [#1853](https://github.com/openshift/cluster-network-operator/pull/1853)
* [OCPBUGS-15139](https://issues.redhat.com/browse/OCPBUGS-15139): Remove nodeSelector for architecture in whereabouts daemonset [#1840](https://github.com/openshift/cluster-network-operator/pull/1840)
* [OCPBUGS-14871](https://issues.redhat.com/browse/OCPBUGS-14871): Do not rely on ControlPlaneTopology do determine if running in HyperShift [#1837](https://github.com/openshift/cluster-network-operator/pull/1837)
* [OCPBUGS-13809](https://issues.redhat.com/browse/OCPBUGS-13809): Use `IfNotPresent` instead of `Always` in OVNK upgrades pre-puller [#1813](https://github.com/openshift/cluster-network-operator/pull/1813)
* [OCPBUGS-14367](https://issues.redhat.com/browse/OCPBUGS-14367): High API requests due to allowlist and operconfig reconcilers running too often [#1824](https://github.com/openshift/cluster-network-operator/pull/1824)
* [OCPBUGS-11750](https://issues.redhat.com/browse/OCPBUGS-11750): fix reconciliation process of the allowlist controller [#1793](https://github.com/openshift/cluster-network-operator/pull/1793)
* [OCPBUGS-13155](https://issues.redhat.com/browse/OCPBUGS-13155): HyperShift: Support HostedControlPlane node selector [#1802](https://github.com/openshift/cluster-network-operator/pull/1802)
* [OCPBUGS-12854](https://issues.redhat.com/browse/OCPBUGS-12854): AUTH: update cluster-reader to include k8s.ovn.org [#1797](https://github.com/openshift/cluster-network-operator/pull/1797)
* [OCPBUGS-11558](https://issues.redhat.com/browse/OCPBUGS-11558): multus-admission-controller should not run as root under Hypershift [#1776](https://github.com/openshift/cluster-network-operator/pull/1776)
* [OCPBUGS-11750](https://issues.redhat.com/browse/OCPBUGS-11750): Fix allowlist ds template [#1779](https://github.com/openshift/cluster-network-operator/pull/1779)
* [OCPBUGS-11424](https://issues.redhat.com/browse/OCPBUGS-11424): Backport changes to whereabouts reconciler [#1769](https://github.com/openshift/cluster-network-operator/pull/1769)
* [OCPBUGS-11503](https://issues.redhat.com/browse/OCPBUGS-11503): update 4.13 Dockerfile to use rhel-8 and go 1.19 [#1772](https://github.com/openshift/cluster-network-operator/pull/1772)
* [OCPBUGS-11257](https://issues.redhat.com/browse/OCPBUGS-11257): Split out konnectivity certs [#1761](https://github.com/openshift/cluster-network-operator/pull/1761)
* [OCPBUGS-11156](https://issues.redhat.com/browse/OCPBUGS-11156): Cno 4.13 kubernetes 1.26 [#1758](https://github.com/openshift/cluster-network-operator/pull/1758)
* [OCPBUGS-10873](https://issues.redhat.com/browse/OCPBUGS-10873): use annotation on the daemonset to update hybrid overlay [#1751](https://github.com/openshift/cluster-network-operator/pull/1751)
* [OCPBUGS-10890](https://issues.redhat.com/browse/OCPBUGS-10890): HyperShift: Add POD_NAME env to ovnkube-node [#1750](https://github.com/openshift/cluster-network-operator/pull/1750)
* [OCPBUGS-10710](https://issues.redhat.com/browse/OCPBUGS-10710): operConfig reconcile can return nil error on failure [#1746](https://github.com/openshift/cluster-network-operator/pull/1746)
* [OCPBUGS-10440](https://issues.redhat.com/browse/OCPBUGS-10440): Point libreswan to proper nss location [#1741](https://github.com/openshift/cluster-network-operator/pull/1741)
* [OCPBUGS-10271](https://issues.redhat.com/browse/OCPBUGS-10271): OVN-K alerts: add OVS overflow alerts [#1723](https://github.com/openshift/cluster-network-operator/pull/1723)
* [OCPBUGS-9968](https://issues.redhat.com/browse/OCPBUGS-9968): HyperShift: Set affinity, tolerations and co-location for all hcp resources created by CNO [#1733](https://github.com/openshift/cluster-network-operator/pull/1733)
* [OCPBUGS-9926](https://issues.redhat.com/browse/OCPBUGS-9926): Enable configuration of node healthz server on ovnkube [#1730](https://github.com/openshift/cluster-network-operator/pull/1730)
* [SDN-3730](https://issues.redhat.com/browse/SDN-3730): OVN IC: migrate master alerts to cluster manager [#1716](https://github.com/openshift/cluster-network-operator/pull/1716)
* Allow cidr expansion [#1707](https://github.com/openshift/cluster-network-operator/pull/1707)
* Enables nodeSelector to be used in egress firewall rule [#1720](https://github.com/openshift/cluster-network-operator/pull/1720)
* Add ovnk alert for resource retry failure [#1674](https://github.com/openshift/cluster-network-operator/pull/1674)
* [OCPBUGS-6730](https://issues.redhat.com/browse/OCPBUGS-6730), [SDN-3221](https://issues.redhat.com/browse/SDN-3221): ovn-kubernetes: use RHEL9-based images [#1712](https://github.com/openshift/cluster-network-operator/pull/1712)
* [OCPBUGS-4343](https://issues.redhat.com/browse/OCPBUGS-4343): update apf configuration to use v1beta3 [#1633](https://github.com/openshift/cluster-network-operator/pull/1633)
* Jira OCPBUGS-7774: Print RawCNIConfig in its string representation [#1718](https://github.com/openshift/cluster-network-operator/pull/1718)
* [OCPBUGS-6235](https://issues.redhat.com/browse/OCPBUGS-6235): Updating cluster-network-operator images to be consistent with ART [#1656](https://github.com/openshift/cluster-network-operator/pull/1656)
* Allow updates to pods [#1717](https://github.com/openshift/cluster-network-operator/pull/1717)
* [OCPBUGS-5559](https://issues.redhat.com/browse/OCPBUGS-5559): add default noProxy config for Azure [#1672](https://github.com/openshift/cluster-network-operator/pull/1672)
* always create env.sh when run_vs_existing_cluster [#1711](https://github.com/openshift/cluster-network-operator/pull/1711)
* [OCPBUGS-7354](https://issues.redhat.com/browse/OCPBUGS-7354): Revert "Revert "OCPBUGS-5842: Use pods oc vs host"" [#1714](https://github.com/openshift/cluster-network-operator/pull/1714)
* ovn-k, multi-homing: enable the feature [#1699](https://github.com/openshift/cluster-network-operator/pull/1699)
* Revert "OCPBUGS-5842: Use pods oc vs host" [#1713](https://github.com/openshift/cluster-network-operator/pull/1713)
* [OCPBUGS-5842](https://issues.redhat.com/browse/OCPBUGS-5842): Use pods oc vs host [#1681](https://github.com/openshift/cluster-network-operator/pull/1681)
* [OCPBUGS-4417](https://issues.redhat.com/browse/OCPBUGS-4417): Added missing API field podref to OverlappingRangeIPReservation CRD [#1677](https://github.com/openshift/cluster-network-operator/pull/1677)
* [OCPBUGS-6651](https://issues.redhat.com/browse/OCPBUGS-6651): HyperShift: Add .hypershift.local to no proxy list [#1692](https://github.com/openshift/cluster-network-operator/pull/1692)
* [OCPBUGS-6651](https://issues.redhat.com/browse/OCPBUGS-6651): HyperShift: Do not use proxy for internal routes [#1694](https://github.com/openshift/cluster-network-operator/pull/1694)
* remove TLS_RSA_WITH_AES_128_CBC_SHA256 cipher [#1680](https://github.com/openshift/cluster-network-operator/pull/1680)
* ovn-kubernetes: Allow node_mgmt_port_netdev_flags for non-DPU modes [#1676](https://github.com/openshift/cluster-network-operator/pull/1676)
* [OCPBUGS-3272](https://issues.redhat.com/browse/OCPBUGS-3272): Unhealthy Readiness Probe failing ci [#1665](https://github.com/openshift/cluster-network-operator/pull/1665)
* [OCPBUGS-5306](https://issues.redhat.com/browse/OCPBUGS-5306): ovn-kubernetes: ignore NB/SB readiness checks and dbchecker when not RAFT member [#1673](https://github.com/openshift/cluster-network-operator/pull/1673)
* [OCPBUGS-5802](https://issues.redhat.com/browse/OCPBUGS-5802): Update github.com/Masterminds/sprig to v3 [#1679](https://github.com/openshift/cluster-network-operator/pull/1679)
* [OCPBUGS-5306](https://issues.redhat.com/browse/OCPBUGS-5306): OVN-Kubernetes: Stop sorting master node addresses [#1675](https://github.com/openshift/cluster-network-operator/pull/1675)
* Allow SDN migration from Kuryr to OVNKubernetes [#1639](https://github.com/openshift/cluster-network-operator/pull/1639)
* update 'make install.tools' for golangci-lint [#1670](https://github.com/openshift/cluster-network-operator/pull/1670)
* Fix CNO crashing when Kuryr without MTU is set [#1669](https://github.com/openshift/cluster-network-operator/pull/1669)
* [OCPBUGS-2947](https://issues.redhat.com/browse/OCPBUGS-2947): Disable the drop-icmp container 'oc' pprof webserver on Azure [#1607](https://github.com/openshift/cluster-network-operator/pull/1607)
* [OCPBUGS-4350](https://issues.redhat.com/browse/OCPBUGS-4350): Fix handling of deployment and statefulset updates [#1648](https://github.com/openshift/cluster-network-operator/pull/1648)
* [OCPBUGS-2532](https://issues.redhat.com/browse/OCPBUGS-2532): Fix default disable-udp-aggregation value on s390x [#1655](https://github.com/openshift/cluster-network-operator/pull/1655)
* Fix info log formatting [#1650](https://github.com/openshift/cluster-network-operator/pull/1650)
* Support RHOBS monitoring for HyperShift [#1644](https://github.com/openshift/cluster-network-operator/pull/1644)
* [OCPBUGS-3916](https://issues.redhat.com/browse/OCPBUGS-3916): SDN alerts: Add `$labels.node` to `SDNPodNotRady` metric [#1637](https://github.com/openshift/cluster-network-operator/pull/1637)
* The allowlist daemonset should set a priority class. [#1647](https://github.com/openshift/cluster-network-operator/pull/1647)
* Bug OCPBUGS-736: Kuryr: If set use MTU from Config for svc net [#1586](https://github.com/openshift/cluster-network-operator/pull/1586)
* [OCPBUGS-3883](https://issues.redhat.com/browse/OCPBUGS-3883): HyperShift: Co-locate OVN-Kubernetes master with other hcp pods [#1627](https://github.com/openshift/cluster-network-operator/pull/1627)
* [OCPBUGS-2532](https://issues.redhat.com/browse/OCPBUGS-2532): Disable UDP aggregation on s390x [#1629](https://github.com/openshift/cluster-network-operator/pull/1629)
* Jira OCPBUGS-3777: IPsec: Fix broken counter++ expression [#1623](https://github.com/openshift/cluster-network-operator/pull/1623)
* [OCPBUGS-3114](https://issues.redhat.com/browse/OCPBUGS-3114): HyperShift: Do not accept empty infrastructure name [#1611](https://github.com/openshift/cluster-network-operator/pull/1611)
* HyperShift: Fix typo in control-plane-component label value [#1626](https://github.com/openshift/cluster-network-operator/pull/1626)
* Remove references to the hosts kubeconfig [#1612](https://github.com/openshift/cluster-network-operator/pull/1612)
* [OCPBUGS-3744](https://issues.redhat.com/browse/OCPBUGS-3744): SDN: /var/run mount cleanup [#1625](https://github.com/openshift/cluster-network-operator/pull/1625)
* [OCPBUGS-3460](https://issues.redhat.com/browse/OCPBUGS-3460): CNI binary copy should account for the possibility of symlinks [#1614](https://github.com/openshift/cluster-network-operator/pull/1614)
* [OCPBUGS-2598](https://issues.redhat.com/browse/OCPBUGS-2598): ipsec: Run ovs-monitor-ipsec in the foreground and change probes [#1606](https://github.com/openshift/cluster-network-operator/pull/1606)
* [SDN-3508](https://issues.redhat.com/browse/SDN-3508): HyperShift: Render cncc with proxy settings of the management cluster [#1577](https://github.com/openshift/cluster-network-operator/pull/1577)
* [NP-607](https://issues.redhat.com/browse/NP-607): update microshift ovnk manifests [#1589](https://github.com/openshift/cluster-network-operator/pull/1589)
* [Bug 1896533](https://bugzilla.redhat.com/show_bug.cgi?id=1896533): moved SetDegraded call out of object loop to process all items first [#1600](https://github.com/openshift/cluster-network-operator/pull/1600)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/28db40f169f64f881b0628c19bf7c64a7a9a2467...df5cf2735b29eb5ca630ec89579ab2bb7a7425b2)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/978a6c56e163f119f757d7116fa99d6b05f7d7f5)

* E2E: workload hints: compare existing profile with changes being made to avoid mcp getting stuck (#1069) [#1069](https://github.com/openshift/cluster-node-tuning-operator/pull/1069)
* [OCPBUGS-33030](https://issues.redhat.com/browse/OCPBUGS-33030): [release-4.13][manual]Reduce number of reboots in offline tests (#1048) [#1048](https://github.com/openshift/cluster-node-tuning-operator/pull/1048)
* Scheduler plugin: ignore IRQs (#1027) [#1027](https://github.com/openshift/cluster-node-tuning-operator/pull/1027)
* irqbalance: set banned cpus list to 0 (#1003) [#1003](https://github.com/openshift/cluster-node-tuning-operator/pull/1003)
* [OCPBUGS-24353](https://issues.redhat.com/browse/OCPBUGS-24353): rps: cherry-picks of rps fixes (#865) [#865](https://github.com/openshift/cluster-node-tuning-operator/pull/865)
* Disable HTTP/2 for webhook and metrics servers (#846) [#846](https://github.com/openshift/cluster-node-tuning-operator/pull/846)
* Remove obsolete protocols and weak ciphers (#843) [#843](https://github.com/openshift/cluster-node-tuning-operator/pull/843)
* [OCPBUGS-18493](https://issues.redhat.com/browse/OCPBUGS-18493): e2e: deflake IRQ load-balancing (#782) [#782](https://github.com/openshift/cluster-node-tuning-operator/pull/782)
* Use RHEL9 as a base (#829) [#829](https://github.com/openshift/cluster-node-tuning-operator/pull/829)
* [OCPBUGS-17943](https://issues.redhat.com/browse/OCPBUGS-17943): Add rtentsk plugin to pp tuned profile Signed-off-by: Brent Rowsell <browsell@redhat.com> (#796) [#796](https://github.com/openshift/cluster-node-tuning-operator/pull/796)
* nto: avoid timeout when there are too many CSV (#818) [#818](https://github.com/openshift/cluster-node-tuning-operator/pull/818)
* [OCPBUGS-19459](https://issues.redhat.com/browse/OCPBUGS-19459): check for object being nil (#820) [#820](https://github.com/openshift/cluster-node-tuning-operator/pull/820)
* Add kubeconfig path for IBM Managed OpenShift (#814) [#814](https://github.com/openshift/cluster-node-tuning-operator/pull/814)
* [OCPBUGS-14137](https://issues.redhat.com/browse/OCPBUGS-14137): e2e: perfprof: add SNO device recovery test (#653) (#806) [#653](https://github.com/openshift/cluster-node-tuning-operator/pull/653)
* [OCPBUGS-18868](https://issues.redhat.com/browse/OCPBUGS-18868): [release-4.14] e2e: add expected max latancy to hwlatdetec test & rename constant (#788) (#808) [#788](https://github.com/openshift/cluster-node-tuning-operator/pull/788)
* Sync DaemonSet if operand image changes (#786) [#786](https://github.com/openshift/cluster-node-tuning-operator/pull/786)
* Revert "Revert "Release leader election on manager exit (#773)" (#797)" (#802) [#773](https://github.com/openshift/cluster-node-tuning-operator/pull/773)
* [OCPBUGS-19351](https://issues.redhat.com/browse/OCPBUGS-19351): Keep Profile status.bootcmdline around (#803) [#803](https://github.com/openshift/cluster-node-tuning-operator/pull/803)
* Revert "Release leader election on manager exit (#773)" (#797) [#773](https://github.com/openshift/cluster-node-tuning-operator/pull/773)
* Release leader election on manager exit (#773) [#773](https://github.com/openshift/cluster-node-tuning-operator/pull/773)
* Tighten the rules for modifying Tuned Profiles (#766) [#766](https://github.com/openshift/cluster-node-tuning-operator/pull/766)
* [OCPBUGS-18063](https://issues.redhat.com/browse/OCPBUGS-18063): cgroup: Match the name of the cgroup to what is expected by kubelet (#774) [#774](https://github.com/openshift/cluster-node-tuning-operator/pull/774)
* update tsc karg to tsc=reliable (#757) [#757](https://github.com/openshift/cluster-node-tuning-operator/pull/757)
* [OCPBUGS-17845](https://issues.redhat.com/browse/OCPBUGS-17845): deflake ht aware test (#763) [#763](https://github.com/openshift/cluster-node-tuning-operator/pull/763)
* [OCPBUGS-17794](https://issues.redhat.com/browse/OCPBUGS-17794): rps: use default rps mask kernel API (#760) [#760](https://github.com/openshift/cluster-node-tuning-operator/pull/760)
* Improve render error handling (#755) [#755](https://github.com/openshift/cluster-node-tuning-operator/pull/755)
* nto:tuned: remove sched_min_granularity_ns settings (#726) [#726](https://github.com/openshift/cluster-node-tuning-operator/pull/726)
* Fix a race in e2e test rollback.go code (#740) [#740](https://github.com/openshift/cluster-node-tuning-operator/pull/740)
* E2E: Add memory manager sanity test case (#573) (#695) [#573](https://github.com/openshift/cluster-node-tuning-operator/pull/573)
* e2e: latency testing: increase the expected threshold (#709) [#709](https://github.com/openshift/cluster-node-tuning-operator/pull/709)
* Do not rollback settings on TuneD exit (#704) [#704](https://github.com/openshift/cluster-node-tuning-operator/pull/704)
* Switch to rslave/HostToContainer volume mount propagation (#705) [#705](https://github.com/openshift/cluster-node-tuning-operator/pull/705)
* e2e: perf-prof: disable truncating gomega output (#707) [#707](https://github.com/openshift/cluster-node-tuning-operator/pull/707)
* [OCPBUGS-14895](https://issues.redhat.com/browse/OCPBUGS-14895): Do not fail creating cgroups if they exist already (#684) [#684](https://github.com/openshift/cluster-node-tuning-operator/pull/684)
* [OCPBUGS-14331](https://issues.redhat.com/browse/OCPBUGS-14331): Fix updating numa core siblings map in GetCpuSiblings function (#669) [#669](https://github.com/openshift/cluster-node-tuning-operator/pull/669)
* render: remove uid from render-sync target (#594) (#609) [#594](https://github.com/openshift/cluster-node-tuning-operator/pull/594)
* Remove cpu-quota.crio.io: disable annotation (#670) [#670](https://github.com/openshift/cluster-node-tuning-operator/pull/670)
* Add PerformanceProfiles to 'oc adm must-gather' (#657) [#657](https://github.com/openshift/cluster-node-tuning-operator/pull/657)
* [OCPBUGS-11709](https://issues.redhat.com/browse/OCPBUGS-11709): pao e2e: skip hugepages and numa tests properly (#643) [#643](https://github.com/openshift/cluster-node-tuning-operator/pull/643)
* e2e: Fix RPS test for multi-worker cluster (#648) [#648](https://github.com/openshift/cluster-node-tuning-operator/pull/648)
* OCPBUGS-12978 use WatchNamespace() when deleting Profiles (#645) [#645](https://github.com/openshift/cluster-node-tuning-operator/pull/645)
* [OCPBUGS-11336](https://issues.redhat.com/browse/OCPBUGS-11336): pao e2e: fix update test suit timeouts (#642) [#642](https://github.com/openshift/cluster-node-tuning-operator/pull/642)
* Address CVE-2022-41723 (#633) [#633](https://github.com/openshift/cluster-node-tuning-operator/pull/633)
* [OCPBUGS-13148](https://issues.redhat.com/browse/OCPBUGS-13148): Configure cpu balancing cpu sets for all clusters (#647) [#647](https://github.com/openshift/cluster-node-tuning-operator/pull/647)
* Revert PR558 and PR585 partially (#640) [#640](https://github.com/openshift/cluster-node-tuning-operator/pull/640)
* workload-hints: disable stalld when rt disabled (#604) [#604](https://github.com/openshift/cluster-node-tuning-operator/pull/604)
* e2e: add missing test id (#629) [#629](https://github.com/openshift/cluster-node-tuning-operator/pull/629)
* Remove subPaths, they are broken (#624) [#624](https://github.com/openshift/cluster-node-tuning-operator/pull/624)
* [OCPNODE-1539](https://issues.redhat.com/browse/OCPNODE-1539): perf profile: add script for preparing cgroups for CPU load balance disabling (#617) [#617](https://github.com/openshift/cluster-node-tuning-operator/pull/617)
* Update NTO-generated MC on MachineCount <= 1 (#620) [#620](https://github.com/openshift/cluster-node-tuning-operator/pull/620)
* [OCPBUGS-11336](https://issues.redhat.com/browse/OCPBUGS-11336): e2e: profile updates tests revised (#618) [#618](https://github.com/openshift/cluster-node-tuning-operator/pull/618)
* [OCPBUGS-11813](https://issues.redhat.com/browse/OCPBUGS-11813): performance-profile: enable crun for high-performance runtime (#616) [#616](https://github.com/openshift/cluster-node-tuning-operator/pull/616)
* A new env var NO_BZ_CHECKS disables Bz and Jira status checks (#614) [#614](https://github.com/openshift/cluster-node-tuning-operator/pull/614)
* Revert #567 and cleanup PPC-generated TuneD config (#615) [#615](https://github.com/openshift/cluster-node-tuning-operator/pull/615)
* Skip tests depending on Jira or Bz issue status (#599) [#599](https://github.com/openshift/cluster-node-tuning-operator/pull/599)
* Recent 4.13 RHCOS incorporated RHEL9 kernel based on 5.14 which (#606) [#606](https://github.com/openshift/cluster-node-tuning-operator/pull/606)
* Remove the preStop hook for openshift-tuned (#596) [#596](https://github.com/openshift/cluster-node-tuning-operator/pull/596)
* Fix updating nodeSelector test (#598) [#598](https://github.com/openshift/cluster-node-tuning-operator/pull/598)
* Fix failing HyperShift presubmits (#578) [#578](https://github.com/openshift/cluster-node-tuning-operator/pull/578)
* Add a script to validate upstream TuneD (#577) [#577](https://github.com/openshift/cluster-node-tuning-operator/pull/577)
* [CNF-5900](https://issues.redhat.com/browse/CNF-5900): feat: added support for generating workload partitioning files (#431) [#431](https://github.com/openshift/cluster-node-tuning-operator/pull/431)
* Re enable node selector tests in update tests (#574) [#574](https://github.com/openshift/cluster-node-tuning-operator/pull/574)
* Handle different # of CPUs are in the same MCP (#558) [#558](https://github.com/openshift/cluster-node-tuning-operator/pull/558)
* composable OCP: make NTO components optional (#524) [#524](https://github.com/openshift/cluster-node-tuning-operator/pull/524)
* Update to TuneD v2.20.0 (#565) [#565](https://github.com/openshift/cluster-node-tuning-operator/pull/565)
* Remove trailing spaces from test names (#570) [#570](https://github.com/openshift/cluster-node-tuning-operator/pull/570)
* Remove optimization to allow full resync (#567) [#567](https://github.com/openshift/cluster-node-tuning-operator/pull/567)
* Report host-level sysctls in conflict with TuneD ones (#566) [#566](https://github.com/openshift/cluster-node-tuning-operator/pull/566)
* E2E: Per Core Runtime Tuning Test automation (#509) [#509](https://github.com/openshift/cluster-node-tuning-operator/pull/509)
* Add test case to check single rx queue on veth interface (#562) [#562](https://github.com/openshift/cluster-node-tuning-operator/pull/562)
* Add update-manifests Makefile target (#560) [#560](https://github.com/openshift/cluster-node-tuning-operator/pull/560)
* render: initialize klog flag (#538) [#538](https://github.com/openshift/cluster-node-tuning-operator/pull/538)
* Refactor IRQ load balancing enable/disable test (#561) [#561](https://github.com/openshift/cluster-node-tuning-operator/pull/561)
* update to ginkgo 2 (#517) [#517](https://github.com/openshift/cluster-node-tuning-operator/pull/517)
* Skip watch on CA ConfigMap in HyperShift (#550) [#550](https://github.com/openshift/cluster-node-tuning-operator/pull/550)
* update owners 20230109 (#542) [#542](https://github.com/openshift/cluster-node-tuning-operator/pull/542)
* Add authentication to the /metrics endpoint (#541) [#541](https://github.com/openshift/cluster-node-tuning-operator/pull/541)
* Run node selector tests only if we 2 non Performanceworker nodes (#532) [#532](https://github.com/openshift/cluster-node-tuning-operator/pull/532)
* Updating profile new lane (#536) [#536](https://github.com/openshift/cluster-node-tuning-operator/pull/536)
* Remove trailing space from test name (#540) [#540](https://github.com/openshift/cluster-node-tuning-operator/pull/540)
* skip multiple ranges test if cores < 20 and use core as key to delete cpu siblings (#537) [#537](https://github.com/openshift/cluster-node-tuning-operator/pull/537)
* Generate must-gather data (#442) [#442](https://github.com/openshift/cluster-node-tuning-operator/pull/442)
* e2e:latency: count LATENCY_TEST_DELAY in timeout (#535) [#535](https://github.com/openshift/cluster-node-tuning-operator/pull/535)
* E2E: Network stack Pinning tests (#501) [#501](https://github.com/openshift/cluster-node-tuning-operator/pull/501)
* refactor: move command func to seperate file (#522) [#522](https://github.com/openshift/cluster-node-tuning-operator/pull/522)
* performance-profile: render: make target for render sync (#528) [#528](https://github.com/openshift/cluster-node-tuning-operator/pull/528)
* Switch to golang 1.19 (#521) [#521](https://github.com/openshift/cluster-node-tuning-operator/pull/521)
* Add Containerfile for RHEL-9 (#519) [#519](https://github.com/openshift/cluster-node-tuning-operator/pull/519)
* Fix two irqbalance tests - smp affinity vs online (#518) [#518](https://github.com/openshift/cluster-node-tuning-operator/pull/518)
* Fix default hard eviction threshold when PCC is applied (#505) [#505](https://github.com/openshift/cluster-node-tuning-operator/pull/505)
* e2e: performance profile: add logs and minor fixes (#485) [#485](https://github.com/openshift/cluster-node-tuning-operator/pull/485)
* PPCreator: If rt-kernel enabled, power consumption mode default cannot be selected (#512) [#512](https://github.com/openshift/cluster-node-tuning-operator/pull/512)
* Configuration hotfixes documentation fixes (#513) [#513](https://github.com/openshift/cluster-node-tuning-operator/pull/513)
* E2E: Automation offline CPUs test (#380) [#380](https://github.com/openshift/cluster-node-tuning-operator/pull/380)
* pao: latency-tests: read test log directly from pod (#499) [#499](https://github.com/openshift/cluster-node-tuning-operator/pull/499)
* Configure ktimers scheduler prio same as ksoftirqs (#507) [#507](https://github.com/openshift/cluster-node-tuning-operator/pull/507)
* Run rps mask tests when Reserved cpu are not nil (#483) [#483](https://github.com/openshift/cluster-node-tuning-operator/pull/483)
* Set RPS for all rx queues (#495) [#495](https://github.com/openshift/cluster-node-tuning-operator/pull/495)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/20966da941ab8773261b5b4c133f3a1716699243...978a6c56e163f119f757d7116fa99d6b05f7d7f5)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/9abb220ac11f370f323f2c248d3ee377394c88b8)

* : OCPBUGS-20707: bump library-go to include switch to HTTP/1.1 [#555](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/555)
* [OCPBUGS-22210](https://issues.redhat.com/browse/OCPBUGS-22210): increase timeout for probes [#553](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/553)
* [OCPBUGS-13763](https://issues.redhat.com/browse/OCPBUGS-13763): dont log tokens [#541](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/541)
* [OCPBUGS-10043](https://issues.redhat.com/browse/OCPBUGS-10043): update openshift/api to get new apiserver schema [#529](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/529)
* [OCPBUGS-7785](https://issues.redhat.com/browse/OCPBUGS-7785): migrate to using lease objects for leader election [#527](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/527)
* [API-1509](https://issues.redhat.com/browse/API-1509): Enable AESGCM encryption [#521](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/521)
* [OCPBUGS-4343](https://issues.redhat.com/browse/OCPBUGS-4343): update apf configuration to use v1beta3 [#509](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/509)
* [OCPBUGS-6233](https://issues.redhat.com/browse/OCPBUGS-6233): Bump dependencies and images [#517](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/517)
* [OCPBUGS-5300](https://issues.redhat.com/browse/OCPBUGS-5300): routes/status resources can leak sensitive data, exclude it from audit [#511](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/511)
* make api team approver [#506](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/506)
* [OCPBUGS-3929](https://issues.redhat.com/browse/OCPBUGS-3929): update apf configuration to use v1beta2 [#508](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/508)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/b870fc67ef5a0e92df5e5bed1ba0cb1cf197d8c6...9abb220ac11f370f323f2c248d3ee377394c88b8)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/6e7e7835519d30ea22e4c4954039bab21de19c80)

* [OCPBUGS-38455](https://issues.redhat.com/browse/OCPBUGS-38455): Update opentelemetry to mitigate CVE [#365](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/365)
* [OCPBUGS-20796](https://issues.redhat.com/browse/OCPBUGS-20796): bump(k8s,openshift) to address CVE-2023-44487 [#310](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/310)
* [OCPBUGS-7785](https://issues.redhat.com/browse/OCPBUGS-7785): migrate to using lease objects for leader election [#281](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/281)
* [OCPBUGS-4343](https://issues.redhat.com/browse/OCPBUGS-4343): update apf configuration to use v1beta3 [#273](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/273)
* Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART [#274](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/274)
* [WRKLDS-594](https://issues.redhat.com/browse/WRKLDS-594): bump(k8s): 1.26.1 [#277](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/277)
* [OCPBUGS-5275](https://issues.redhat.com/browse/OCPBUGS-5275): remove unnecessary RBAC for leader-locking-ingress-to-route-controller [#276](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/276)
* [OCPBUGS-3929](https://issues.redhat.com/browse/OCPBUGS-3929): update apf configuration to use v1beta2 [#272](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/272)
* let deployer pods patch/apply replication controllers [#270](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/270)
* [Bug 2111979](https://bugzilla.redhat.com/show_bug.cgi?id=2111979): Set openshift.io/run-level to nil in openshift-controller-manager nam… [#269](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/269)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/ab963d8ad0387788c947b884a96eb9b2fed470b6...6e7e7835519d30ea22e4c4954039bab21de19c80)


### [cluster-platform-operators-manager](https://github.com/openshift/platform-operators/tree/312c5f24b5711a764350de899b83443a87296983)

* [OCPBUGS-20998](https://issues.redhat.com/browse/OCPBUGS-20998): [release-4.13] Bump golang.org/x/net to v0.17.0 [#97](https://github.com/openshift/platform-operators/pull/97)
* [OCPBUGS-10404](https://issues.redhat.com/browse/OCPBUGS-10404): feat: add workload pinning annotations [#84](https://github.com/openshift/platform-operators/pull/84)
* [OCPBUGS-6395](https://issues.redhat.com/browse/OCPBUGS-6395): Upgrade golang/x/net to v0.4.0 to fix CVE-2022-41717 [#79](https://github.com/openshift/platform-operators/pull/79)
* Update owners file [#80](https://github.com/openshift/platform-operators/pull/80)
* Updating ose-cluster-platform-operators-manager images to be consistent with ART [#78](https://github.com/openshift/platform-operators/pull/78)
* [Full changelog](https://github.com/openshift/platform-operators/compare/c930dc745f23ee5bde8b48d13557976186c21c7c...312c5f24b5711a764350de899b83443a87296983)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/3b0d075530fdbfdacdfe574151a3313f5231459c)

* [OCPBUGS-21103](https://issues.redhat.com/browse/OCPBUGS-21103): Bump deps to address CVE-2023-44487 [4.13] [#135](https://github.com/openshift/cluster-policy-controller/pull/135)
* [OCPBUGS-14091](https://issues.redhat.com/browse/OCPBUGS-14091): [4.13] fix ClusterResourceQuotas to work for all api resources including custom resources [#116](https://github.com/openshift/cluster-policy-controller/pull/116)
* [OCPBUGS-13731](https://issues.redhat.com/browse/OCPBUGS-13731): external template and route Informer [#112](https://github.com/openshift/cluster-policy-controller/pull/112)
* [OCPBUGS-11473](https://issues.redhat.com/browse/OCPBUGS-11473): psalabelsyncer: handle empty namespace of a rolebinding subject [#108](https://github.com/openshift/cluster-policy-controller/pull/108)
* [OCPBUGS-8710](https://issues.redhat.com/browse/OCPBUGS-8710): psalabelsyncer: invert the enforce/log logic to default to logging [#106](https://github.com/openshift/cluster-policy-controller/pull/106)
* update psa dependency version [#103](https://github.com/openshift/cluster-policy-controller/pull/103)
* update controller-manager dependency to point to v0.25.0 [#101](https://github.com/openshift/cluster-policy-controller/pull/101)
* [OCPBUGS-723](https://issues.redhat.com/browse/OCPBUGS-723): clusterquotareconciliation: do not sync quota monitor cache with no monitors registered [#94](https://github.com/openshift/cluster-policy-controller/pull/94)
* [OCPBUGS-3985](https://issues.redhat.com/browse/OCPBUGS-3985): enforce pod security admission when techpreview is enabled [#89](https://github.com/openshift/cluster-policy-controller/pull/89)
* Updating cluster-policy-controller images to be consistent with ART [#91](https://github.com/openshift/cluster-policy-controller/pull/91)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/cb8862b0042ac2e7130a7c018e3e083ebc46705e...3b0d075530fdbfdacdfe574151a3313f5231459c)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/bcc08e9609e9c39d212857efd27d67753c64d91e)

* [OCPBUGS-22390](https://issues.redhat.com/browse/OCPBUGS-22390): Sync library to remove invalid dockerhub references for OKD [#521](https://github.com/openshift/cluster-samples-operator/pull/521)
* [OCPBUGS-15756](https://issues.redhat.com/browse/OCPBUGS-15756): Update Jenkins and Jenkins Agent Base image versions [#505](https://github.com/openshift/cluster-samples-operator/pull/505)
* [OCPBUGS-14598](https://issues.redhat.com/browse/OCPBUGS-14598): Updating to use Jenkins 4.13 images [#503](https://github.com/openshift/cluster-samples-operator/pull/503)
* [OCPBUGS-13029](https://issues.redhat.com/browse/OCPBUGS-13029): Update Cluster Sample Operator dependencies and libraries for OCP 4.13 [#501](https://github.com/openshift/cluster-samples-operator/pull/501)
* [OCPBUGS-10965](https://issues.redhat.com/browse/OCPBUGS-10965): Add network tools imagestreams [#496](https://github.com/openshift/cluster-samples-operator/pull/496)
* update Jenkins to use v4.12 imagestreams [#491](https://github.com/openshift/cluster-samples-operator/pull/491)
* [OCPBUGS-855](https://issues.redhat.com/browse/OCPBUGS-855): When setting allowedRegistries urls the openshift-samples operator is degraded [#487](https://github.com/openshift/cluster-samples-operator/pull/487)
* [OCPBUGS-6811](https://issues.redhat.com/browse/OCPBUGS-6811): Update Cluster Sample Operator dependencies and libraries for OCP 4.13 [#485](https://github.com/openshift/cluster-samples-operator/pull/485)
* Change importMode to preserveOriginal for Openshift imagestreams [#482](https://github.com/openshift/cluster-samples-operator/pull/482)
* [OCPBUGS-6579](https://issues.redhat.com/browse/OCPBUGS-6579): update sample imagestreams with latest 4.11 image using specific image tag reference [#483](https://github.com/openshift/cluster-samples-operator/pull/483)
* [OCPBUGS-4357](https://issues.redhat.com/browse/OCPBUGS-4357): Bump k8s master [#476](https://github.com/openshift/cluster-samples-operator/pull/476)
* [OCPBUGS-4166](https://issues.redhat.com/browse/OCPBUGS-4166): Update Cluster Sample Operator dependencies and libraries for OCP 4.13 [#474](https://github.com/openshift/cluster-samples-operator/pull/474)
* [OCPBUGS-3426](https://issues.redhat.com/browse/OCPBUGS-3426): Update Cluster Sample Operator dependencies and libraries for OCP 4.12 [#471](https://github.com/openshift/cluster-samples-operator/pull/471)
* Updating ose-cluster-samples-operator images to be consistent with ART [#470](https://github.com/openshift/cluster-samples-operator/pull/470)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/f1b49e34512d38bf908183318edd1f9f9aeef883...bcc08e9609e9c39d212857efd27d67753c64d91e)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/b38c26ae676c9e775f901a04c072848fd8726b90)

* [OCPBUGS-33468](https://issues.redhat.com/browse/OCPBUGS-33468): Fix problem-detector proxy setting [#473](https://github.com/openshift/cluster-storage-operator/pull/473)
* [OCPBUGS-21284](https://issues.redhat.com/browse/OCPBUGS-21284): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#406](https://github.com/openshift/cluster-storage-operator/pull/406)
* [OCPBUGS-18132](https://issues.redhat.com/browse/OCPBUGS-18132): Add patch for allowing configmap updates via clusterrole [#396](https://github.com/openshift/cluster-storage-operator/pull/396)
* [OCPBUGS-19036](https://issues.redhat.com/browse/OCPBUGS-19036): Fix PodStartupStorageOperationsFailing alert [#397](https://github.com/openshift/cluster-storage-operator/pull/397)
* [OCPBUGS-15378](https://issues.redhat.com/browse/OCPBUGS-15378): decrease severity for MultipleDefaultStorageClasses alert [#383](https://github.com/openshift/cluster-storage-operator/pull/383)
* [OCPBUGS-13004](https://issues.redhat.com/browse/OCPBUGS-13004): OCPBUGS-13005: 4.13: bump prometheus [#367](https://github.com/openshift/cluster-storage-operator/pull/367)
* [OCPBUGS-12478](https://issues.redhat.com/browse/OCPBUGS-12478): Add management workloads annotations [#366](https://github.com/openshift/cluster-storage-operator/pull/366)
* [OCPBUGS-11146](https://issues.redhat.com/browse/OCPBUGS-11146): cluster-storage-operator must re-create in-tree StorageClass [#351](https://github.com/openshift/cluster-storage-operator/pull/351)
* [OCPBUGS-11341](https://issues.redhat.com/browse/OCPBUGS-11341): [release-4.13]: Add missing workload label to openshift-manila-csi-driver NS [#356](https://github.com/openshift/cluster-storage-operator/pull/356)
* [OCPBUGS-10645](https://issues.redhat.com/browse/OCPBUGS-10645): Hypershift: set control plane operand properties [#354](https://github.com/openshift/cluster-storage-operator/pull/354)
* [OCPBUGS-8498](https://issues.redhat.com/browse/OCPBUGS-8498): assets: csi: hypershift: add pull-secret to aws-ebs-csi-driver-operator ServiceAccount [#348](https://github.com/openshift/cluster-storage-operator/pull/348)
* [BUILD-571](https://issues.redhat.com/browse/BUILD-571): enable shared resource operator to run in an hypershift guest cluster [#342](https://github.com/openshift/cluster-storage-operator/pull/342)
* [STOR-875](https://issues.redhat.com/browse/STOR-875): Implement custom keys in AWS EBS CSI driver operator [#338](https://github.com/openshift/cluster-storage-operator/pull/338)
* [OCPBUGS-5410](https://issues.redhat.com/browse/OCPBUGS-5410): add ReEncrypt KMS permissions [#345](https://github.com/openshift/cluster-storage-operator/pull/345)
* [BUILD-407](https://issues.redhat.com/browse/BUILD-407): Revert "remove tech preview feature gate for shared resources" [#343](https://github.com/openshift/cluster-storage-operator/pull/343)
* [OCPBUGS-6992](https://issues.redhat.com/browse/OCPBUGS-6992): Add UID to CSO Pod to be able to run with custom SCCs [#344](https://github.com/openshift/cluster-storage-operator/pull/344)
* [MULTIARCH-3203](https://issues.redhat.com/browse/MULTIARCH-3203): Hypershift changes for CSO moved to CP on PowerVS CSI driver operator [#331](https://github.com/openshift/cluster-storage-operator/pull/331)
* [STOR-1123](https://issues.redhat.com/browse/STOR-1123): Add alert about topology misconfiguration [#334](https://github.com/openshift/cluster-storage-operator/pull/334)
* [STOR-1128](https://issues.redhat.com/browse/STOR-1128): Stop creating an in-tree SC for vSphere [#340](https://github.com/openshift/cluster-storage-operator/pull/340)
* [OCPBUGS-7483](https://issues.redhat.com/browse/OCPBUGS-7483): Revert "Merge pull request #332 from bertinatto/default-sc" [#339](https://github.com/openshift/cluster-storage-operator/pull/339)
* [STOR-1128](https://issues.redhat.com/browse/STOR-1128): Remove defaultstorageclass controller [#332](https://github.com/openshift/cluster-storage-operator/pull/332)
* [BUILD-407](https://issues.redhat.com/browse/BUILD-407): remove tech preview feature gate for shared resources [#335](https://github.com/openshift/cluster-storage-operator/pull/335)
* [OCPBUGS-7300](https://issues.redhat.com/browse/OCPBUGS-7300): hypershift: remove inject-proxy annotation from aws-ebs-csi-driver-operator deployment [#336](https://github.com/openshift/cluster-storage-operator/pull/336)
* [STOR-1019](https://issues.redhat.com/browse/STOR-1019): Bump to k8s 1.26 libs for OCP 4.13 [#333](https://github.com/openshift/cluster-storage-operator/pull/333)
* Updating cluster-storage-operator images to be consistent with ART [#330](https://github.com/openshift/cluster-storage-operator/pull/330)
* [OCPBUGS-4173](https://issues.redhat.com/browse/OCPBUGS-4173): Restart vsphere-problem-detector after credentials change [#328](https://github.com/openshift/cluster-storage-operator/pull/328)
* [OCPBUGS-4508](https://issues.redhat.com/browse/OCPBUGS-4508): User real node name in failing mount alerts [#329](https://github.com/openshift/cluster-storage-operator/pull/329)
* [Bug 2066664](https://bugzilla.redhat.com/show_bug.cgi?id=2066664): Remove wildcard use in rules for CSI operators and drivers [#270](https://github.com/openshift/cluster-storage-operator/pull/270)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/21ebf328f53182111eb7dce344487ba633d09b1a...b38c26ae676c9e775f901a04c072848fd8726b90)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/6314bbbe6267585ca299f782569a623f13dd3664)

* [OCPBUGS-43886](https://issues.redhat.com/browse/OCPBUGS-43886): keys: Update Red Hat keys to use SHA256 signatures [#67](https://github.com/openshift/cluster-update-keys/pull/67)
* Adding the new CI Signer public key [#50](https://github.com/openshift/cluster-update-keys/pull/50)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/2796e1732615521e818be82663058e0a3f1b3941...6314bbbe6267585ca299f782569a623f13dd3664)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/24517b23286b636f50390f9167b41b84da8514cf)

* [OCPBUGS-27049](https://issues.redhat.com/browse/OCPBUGS-27049): pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls [#1019](https://github.com/openshift/cluster-version-operator/pull/1019)
* [OCPBUGS-20744](https://issues.redhat.com/browse/OCPBUGS-20744): [4.13] Bump http-related deps [#989](https://github.com/openshift/cluster-version-operator/pull/989)
* [OCPBUGS-19472](https://issues.redhat.com/browse/OCPBUGS-19472): Reconcile Volumes in SCCs and flag Upgradeable=False when detecting modified SCC [#969](https://github.com/openshift/cluster-version-operator/pull/969)
* [OCPBUGS-20321](https://issues.redhat.com/browse/OCPBUGS-20321): pkg/cvo/sync_worker: Always enable the DeploymentConfig capability [#981](https://github.com/openshift/cluster-version-operator/pull/981)
* [OCPBUGS-19828](https://issues.redhat.com/browse/OCPBUGS-19828): pkg/clusterconditions/promql: Warm cache with 1s delay [#974](https://github.com/openshift/cluster-version-operator/pull/974)
* [OCPBUGS-20263](https://issues.redhat.com/browse/OCPBUGS-20263): pkg/clusterconditions/cache: Avoid panic on all-fresh-cache evaluation [#980](https://github.com/openshift/cluster-version-operator/pull/980)
* [OCPBUGS-16613](https://issues.redhat.com/browse/OCPBUGS-16613): Add admin-gate ack-4.13-kube-1.27-api-removals-in-4.14 [#948](https://github.com/openshift/cluster-version-operator/pull/948)
* [OCPBUGS-11435](https://issues.redhat.com/browse/OCPBUGS-11435): Update dnsPolicy to allow consistent resolution of the internal LB [#923](https://github.com/openshift/cluster-version-operator/pull/923)
* [OCPBUGS-10221](https://issues.redhat.com/browse/OCPBUGS-10221): pkg/cvo/availableupdates: Prioritize conditional risks for largest target version [#912](https://github.com/openshift/cluster-version-operator/pull/912)
* pkg/cvo: code cleanups [#902](https://github.com/openshift/cluster-version-operator/pull/902)
* [OCPBUGS-7419](https://issues.redhat.com/browse/OCPBUGS-7419): Trigger new sync round on ClusterOperator Available changes [#904](https://github.com/openshift/cluster-version-operator/pull/904)
* install/0000_90_cluster-version-operator_02_servicemonitor: Add ClusterReleaseNotAccepted [#906](https://github.com/openshift/cluster-version-operator/pull/906)
* [OCPBUGS-6097](https://issues.redhat.com/browse/OCPBUGS-6097): CVO hotloops on ImageStream and logs the information incorrectly [#894](https://github.com/openshift/cluster-version-operator/pull/894)
* [OCPBUGS-6292](https://issues.redhat.com/browse/OCPBUGS-6292): Update golang.org/x/net/http2 for CVE-2022-41717 [#901](https://github.com/openshift/cluster-version-operator/pull/901)
* [Bug 2090680](https://bugzilla.redhat.com/show_bug.cgi?id=2090680): RetrievePayload: Improve timeouts and cover behavior with tests [#896](https://github.com/openshift/cluster-version-operator/pull/896)
* pkg/cvo: Set 'controller' in our ownerReferences [#900](https://github.com/openshift/cluster-version-operator/pull/900)
* pkg/cvo/sync_worker: Fix "The sync worker already has a pending notification" formatting [#898](https://github.com/openshift/cluster-version-operator/pull/898)
* vendor: update openshift/api for NodeTuning capability [#883](https://github.com/openshift/cluster-version-operator/pull/883)
* [Bug 2089138](https://bugzilla.redhat.com/show_bug.cgi?id=2089138): CVO hotloops on ValidatingWebhookConfiguration [#893](https://github.com/openshift/cluster-version-operator/pull/893)
* logging: consistently use RFC3339 in log messages [#889](https://github.com/openshift/cluster-version-operator/pull/889)
* [OCPBUGS-702](https://issues.redhat.com/browse/OCPBUGS-702): Fix removing `caBundle` field of CRDs when `...inject-cabundle=true` [#870](https://github.com/openshift/cluster-version-operator/pull/870)
* lib/validation: Drop "a previous version" from desiredUpdate validation [#888](https://github.com/openshift/cluster-version-operator/pull/888)
* Adding David to approvers list and removing Jack [#891](https://github.com/openshift/cluster-version-operator/pull/891)
* upgradeable: improve logging and refactor [#886](https://github.com/openshift/cluster-version-operator/pull/886)
* start.go: simplify code for computing sync period [#887](https://github.com/openshift/cluster-version-operator/pull/887)
* [OCPBUGS-5505](https://issues.redhat.com/browse/OCPBUGS-5505): Set upgradeability check throttling period to 2m [#882](https://github.com/openshift/cluster-version-operator/pull/882)
* Revert "pkg/cvo/updatepayload.go: timeout payload retrieval" [#881](https://github.com/openshift/cluster-version-operator/pull/881)
* pkg/cincinnati: Set User-Agent for Cincinnati requests [#839](https://github.com/openshift/cluster-version-operator/pull/839)
* [Bug 2090680](https://bugzilla.redhat.com/show_bug.cgi?id=2090680): pkg/cvo/updatepayload.go: timeout payload retrieval [#846](https://github.com/openshift/cluster-version-operator/pull/846)
* tests: fix rare nil dereference in `TestCache` [#875](https://github.com/openshift/cluster-version-operator/pull/875)
* pkg/payload: code cleanups [#877](https://github.com/openshift/cluster-version-operator/pull/877)
* [OTA-817](https://issues.redhat.com/browse/OTA-817): Support ClusterVersion spec DesiredUpdate Architecture field [#860](https://github.com/openshift/cluster-version-operator/pull/860)
* [OCPBUGS-4986](https://issues.redhat.com/browse/OCPBUGS-4986): pkg/payload/precondition: Do not claim warnings would have blocked [#876](https://github.com/openshift/cluster-version-operator/pull/876)
* [OTA-844](https://issues.redhat.com/browse/OTA-844): pkg/cvo/metrics: Add 'reason' to cluster_operator_up [#868](https://github.com/openshift/cluster-version-operator/pull/868)
* [OTA-560](https://issues.redhat.com/browse/OTA-560): Improve developer-oriented docs [#871](https://github.com/openshift/cluster-version-operator/pull/871)
* Updating cluster-version-operator images to be consistent with ART [#873](https://github.com/openshift/cluster-version-operator/pull/873)
* [OCPBUGS-1443](https://issues.redhat.com/browse/OCPBUGS-1443): Avoid using a lister before client caches sync [#874](https://github.com/openshift/cluster-version-operator/pull/874)
* [OTA-560](https://issues.redhat.com/browse/OTA-560): Modernize README.md to be user-centered [#869](https://github.com/openshift/cluster-version-operator/pull/869)
* Build CVO from UBI8 instead of obsolete `origin-v4.0:base` [#872](https://github.com/openshift/cluster-version-operator/pull/872)
* [Bug 2089093](https://bugzilla.redhat.com/show_bug.cgi?id=2089093): CVO hotloops on OperatorGroup due to the diff of "upgradeStrategy" [#862](https://github.com/openshift/cluster-version-operator/pull/862)
* update library-go to pick up feature-set annotation change [#853](https://github.com/openshift/cluster-version-operator/pull/853)
* Add myself as approver and David Hurta as a reviewer [#864](https://github.com/openshift/cluster-version-operator/pull/864)
* [OCPBUGS-1458](https://issues.redhat.com/browse/OCPBUGS-1458): Allow CVO to update `KUBERNETES_SERVICE_HOST` with LB address [#851](https://github.com/openshift/cluster-version-operator/pull/851)
* pkg/cvo/cvo_scenarios_test.go: Remove status check from TestCVO_UpgradeFailedPayloadLoadWithCapsChanges [#857](https://github.com/openshift/cluster-version-operator/pull/857)
* resourcemerge: cleanup deprecated function calls [#858](https://github.com/openshift/cluster-version-operator/pull/858)
* [OCPBUGS-2727](https://issues.redhat.com/browse/OCPBUGS-2727): Do not fail precondition check for UnknownUpdate [#856](https://github.com/openshift/cluster-version-operator/pull/856)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/8e2c472a67964065c8aa271f85ef7f7e57726ac4...24517b23286b636f50390f9167b41b84da8514cf)


### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/9adad592e7d9bd5a723add16488e68365a64977f)

* Updating configmap-reload images to be consistent with ART [#48](https://github.com/openshift/configmap-reload/pull/48)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/e4d9170e71bdf8a79e9cde94dac53575a30f46f3...9adad592e7d9bd5a723add16488e68365a64977f)


### [console](https://github.com/openshift/console/tree/1584fb1629ca1a9e88768dce3678854f00ee490f)

* [OCPBUGS-41594](https://issues.redhat.com/browse/OCPBUGS-41594): Redirects to new PipelineRun logs URL from old PipelineRun logs URL [#14263](https://github.com/openshift/console/pull/14263)
* [OCPBUGS-35259](https://issues.redhat.com/browse/OCPBUGS-35259): fix vCenter cluster being empty [#13952](https://github.com/openshift/console/pull/13952)
* [OCPBUGS-32147](https://issues.redhat.com/browse/OCPBUGS-32147): Bump graphql-go to v1.3.0 [#13922](https://github.com/openshift/console/pull/13922)
* [OCPBUGS-33978](https://issues.redhat.com/browse/OCPBUGS-33978): Helm Plugin's Catalog incorrectly renders a single index entry into multiple tiles [#13872](https://github.com/openshift/console/pull/13872)
* [OCPBUGS-34342](https://issues.redhat.com/browse/OCPBUGS-34342): Fix PipelineRun Logs tab navigation [#13890](https://github.com/openshift/console/pull/13890)
* [OCPBUGS-24395](https://issues.redhat.com/browse/OCPBUGS-24395): Extra space is in the translation text(Chinese) of 'Create rolebinding' and 'replicate rolebinding' [#13405](https://github.com/openshift/console/pull/13405)
* [OCPBUGS-33777](https://issues.redhat.com/browse/OCPBUGS-33777): restrict Masthead logo to max-height to 60px [#13860](https://github.com/openshift/console/pull/13860)
* [OCPBUGS-33749](https://issues.redhat.com/browse/OCPBUGS-33749): Add visual connector between VMs and non VMs workloads [#13857](https://github.com/openshift/console/pull/13857)
* [OCPBUGS-33382](https://issues.redhat.com/browse/OCPBUGS-33382): Routes created by devfiles do not always use HTTPS [#13827](https://github.com/openshift/console/pull/13827)
* [OCPBUGS-33650](https://issues.redhat.com/browse/OCPBUGS-33650): fix issues with Edit Route form [#13851](https://github.com/openshift/console/pull/13851)
* [OCPBUGS-32500](https://issues.redhat.com/browse/OCPBUGS-32500): PipelineRuns in Console show wrong status or load indefinitely [#13780](https://github.com/openshift/console/pull/13780)
* [OCPBUGS-31077](https://issues.redhat.com/browse/OCPBUGS-31077): Pipeline Name gets changed to "new-pipeline" on the Edit Pipeline YAML/Builder [#13683](https://github.com/openshift/console/pull/13683)
* [OCPBUGS-31595](https://issues.redhat.com/browse/OCPBUGS-31595): Fix operands list endpoint. [#13714](https://github.com/openshift/console/pull/13714)
* [OCPBUGS-29063](https://issues.redhat.com/browse/OCPBUGS-29063): add additional check to determine if file is binary [#13579](https://github.com/openshift/console/pull/13579)
* [OCPBUGS-28788](https://issues.redhat.com/browse/OCPBUGS-28788): Copy response code from proxied plugin requests [#13561](https://github.com/openshift/console/pull/13561)
* [OCPBUGS-29243](https://issues.redhat.com/browse/OCPBUGS-29243): Add a new allowInsecure option to the internet proxy [#13593](https://github.com/openshift/console/pull/13593)
* [OCPBUGS-27406](https://issues.redhat.com/browse/OCPBUGS-27406): Add Pipeline metrics tab using plugin [#13525](https://github.com/openshift/console/pull/13525)
* [OCPBUGS-23483](https://issues.redhat.com/browse/OCPBUGS-23483): add access to create, edit and delete silences for developer user from developer perspective [#13349](https://github.com/openshift/console/pull/13349)
* [OCPBUGS-25427](https://issues.redhat.com/browse/OCPBUGS-25427): Fix plugin proxy handler [#13449](https://github.com/openshift/console/pull/13449)
* [OCPBUGS-25465](https://issues.redhat.com/browse/OCPBUGS-25465): fix runtime error on Node details Overview when Machin… [#13452](https://github.com/openshift/console/pull/13452)
* [OCPBUGS-25146](https://issues.redhat.com/browse/OCPBUGS-25146): add access review for impersonate [#13437](https://github.com/openshift/console/pull/13437)
* [OCPBUGS-24591](https://issues.redhat.com/browse/OCPBUGS-24591): ConsolePlugin metrics must no longer be grouped by the vendor [#13424](https://github.com/openshift/console/pull/13424)
* [OCPBUGS-22241](https://issues.redhat.com/browse/OCPBUGS-22241): Save also the location.search and .hash values in localStorage to restore them after login [#13271](https://github.com/openshift/console/pull/13271)
* [OCPBUGS-24240](https://issues.redhat.com/browse/OCPBUGS-24240): Subsequent PipelineRuns take initial PipelineRun name into account [#13385](https://github.com/openshift/console/pull/13385)
* [OCPBUGS-23497](https://issues.redhat.com/browse/OCPBUGS-23497): Cannot Edit Shipwright Build [#13352](https://github.com/openshift/console/pull/13352)
* [OCPBUGS-11316](https://issues.redhat.com/browse/OCPBUGS-11316): Fix description for BuildAdapter SDK extension [#12703](https://github.com/openshift/console/pull/12703)
* [OCPBUGS-22986](https://issues.redhat.com/browse/OCPBUGS-22986): Correct logout process [#13310](https://github.com/openshift/console/pull/13310)
* [OCPBUGS-23065](https://issues.redhat.com/browse/OCPBUGS-23065): remove expandable toggle for conditional update risk d… [#13316](https://github.com/openshift/console/pull/13316)
* [OCPBUGS-22784](https://issues.redhat.com/browse/OCPBUGS-22784): add support for new features annotations while preservi… [#13299](https://github.com/openshift/console/pull/13299)
* [OCPBUGS-19532](https://issues.redhat.com/browse/OCPBUGS-19532): use active namespace in Create cta href of create action for operator backed [#13179](https://github.com/openshift/console/pull/13179)
* [OCPBUGS-18271](https://issues.redhat.com/browse/OCPBUGS-18271): update the KnativeServing API version to v1beta1 for global-config extension [#13112](https://github.com/openshift/console/pull/13112)
* [OCPBUGS-20232](https://issues.redhat.com/browse/OCPBUGS-20232): show all the legends for Pipeline metrics in PipelineRun TaskRun Duration chart [#13224](https://github.com/openshift/console/pull/13224)
* [OCPBUGS-20231](https://issues.redhat.com/browse/OCPBUGS-20231): fetch TaskRuns without selector and reduces the get TaskRuns requests [#13223](https://github.com/openshift/console/pull/13223)
* [OCPBUGS-20330](https://issues.redhat.com/browse/OCPBUGS-20330): Check if filtered object contains name property [#13227](https://github.com/openshift/console/pull/13227)
* [OCPBUGS-13285](https://issues.redhat.com/browse/OCPBUGS-13285): add multipath device type to LocalVolumeSet [#12804](https://github.com/openshift/console/pull/12804)
* [OCPBUGS-17481](https://issues.redhat.com/browse/OCPBUGS-17481): Fix that "Delete application" doesn't work in topology when Pipelines operator is not installed [#13083](https://github.com/openshift/console/pull/13083)
* [OCPBUGS-18764](https://issues.redhat.com/browse/OCPBUGS-18764): Fixed Edit Application form for Knative Services [#13147](https://github.com/openshift/console/pull/13147)
* [OCPBUGS-18538](https://issues.redhat.com/browse/OCPBUGS-18538): OCP console mandate secret for repository creation [#13135](https://github.com/openshift/console/pull/13135)
* [OCPBUGS-18679](https://issues.redhat.com/browse/OCPBUGS-18679): [knative] Don't rely on openshift/hello-openshift as a sample image [#13140](https://github.com/openshift/console/pull/13140)
* [OCPBUGS-18289](https://issues.redhat.com/browse/OCPBUGS-18289): Not able to import the repository with .tekton directory and func.yaml file present [#13116](https://github.com/openshift/console/pull/13116)
* [OCPBUGS-18443](https://issues.redhat.com/browse/OCPBUGS-18443): Fix crash when filtering the quick start catalog [#13127](https://github.com/openshift/console/pull/13127)
* [OCPBUGS-18312](https://issues.redhat.com/browse/OCPBUGS-18312): Web console slowness on Project>Project access page [#13119](https://github.com/openshift/console/pull/13119)
* [OCPBUGS-18335](https://issues.redhat.com/browse/OCPBUGS-18335): Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers [#13120](https://github.com/openshift/console/pull/13120)
* [OCPBUGS-17876](https://issues.redhat.com/browse/OCPBUGS-17876): Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn't exists [#13095](https://github.com/openshift/console/pull/13095)
* [OCPBUGS-16668](https://issues.redhat.com/browse/OCPBUGS-16668): Dynamic plugin translation support for plurals broken [#13041](https://github.com/openshift/console/pull/13041)
* [OCPBUGS-17181](https://issues.redhat.com/browse/OCPBUGS-17181): Creation of GH webhook and attaching it to repo while importing from git using PAC [#13060](https://github.com/openshift/console/pull/13060)
* [OCPBUGS-16040](https://issues.redhat.com/browse/OCPBUGS-16040): fix bug where binary secret values are corrupted on edit and add test coverage [#13048](https://github.com/openshift/console/pull/13048)
* [OCPBUGS-16659](https://issues.redhat.com/browse/OCPBUGS-16659): Fix RTE in bridge. [#13038](https://github.com/openshift/console/pull/13038)
* [OCPBUGS-16158](https://issues.redhat.com/browse/OCPBUGS-16158): "Duplicate RoleBinding" leads to "Unsupported value" error [#13008](https://github.com/openshift/console/pull/13008)
* [OCPBUGS-16434](https://issues.redhat.com/browse/OCPBUGS-16434): Fix stop PLR option [#13031](https://github.com/openshift/console/pull/13031)
* [OCPBUGS-14265](https://issues.redhat.com/browse/OCPBUGS-14265): Regression: OpenShift Console no-longer filters SecretList when displaying ServiceAccount [#12865](https://github.com/openshift/console/pull/12865)
* [OCPBUGS-13641](https://issues.redhat.com/browse/OCPBUGS-13641): Do not fetch catalog sources on CSV or Subscription details pages. [#12811](https://github.com/openshift/console/pull/12811)
* [OCPBUGS-16421](https://issues.redhat.com/browse/OCPBUGS-16421): When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. [#13030](https://github.com/openshift/console/pull/13030)
* [OCPBUGS-15998](https://issues.redhat.com/browse/OCPBUGS-15998): Upload JAR file does not work if the Cluster Samples Operator is disabled [#12992](https://github.com/openshift/console/pull/12992)
* [OCPBUGS-15810](https://issues.redhat.com/browse/OCPBUGS-15810): only show pipelines doc link for downstream [#12981](https://github.com/openshift/console/pull/12981)
* [OCPBUGS-15982](https://issues.redhat.com/browse/OCPBUGS-15982): get Kamelets from the camel-k-operator namespace as well [#12988](https://github.com/openshift/console/pull/12988)
* [OCPBUGS-16244](https://issues.redhat.com/browse/OCPBUGS-16244): Fix operator backed catalog page when copied CSVs disabled [#13019](https://github.com/openshift/console/pull/13019)
* [OCPBUGS-15194](https://issues.redhat.com/browse/OCPBUGS-15194): Remove tech preview badge from Pipeline repository pages [#12916](https://github.com/openshift/console/pull/12916)
* [OCPBUGS-10326](https://issues.redhat.com/browse/OCPBUGS-10326): re-enable operator-install-single-namespace.spec.ts test [#12653](https://github.com/openshift/console/pull/12653)
* [OCPBUGS-15848](https://issues.redhat.com/browse/OCPBUGS-15848): The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. [#12976](https://github.com/openshift/console/pull/12976)
* [OCPBUGS-15890](https://issues.redhat.com/browse/OCPBUGS-15890): Use proxy with web socket connection and monitoring dashboard [#12978](https://github.com/openshift/console/pull/12978)
* [OCPBUGS-15720](https://issues.redhat.com/browse/OCPBUGS-15720), [OCPBUGS-15721](https://issues.redhat.com/browse/OCPBUGS-15721), [OCPBUGS-15722](https://issues.redhat.com/browse/OCPBUGS-15722): Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions [#12963](https://github.com/openshift/console/pull/12963)
* [OCPBUGS-14426](https://issues.redhat.com/browse/OCPBUGS-14426): account for single object in status.conditions instead… [#12875](https://github.com/openshift/console/pull/12875)
* [OCPBUGS-14267](https://issues.redhat.com/browse/OCPBUGS-14267): Add Pipeline metrics unsupported empty page [#12864](https://github.com/openshift/console/pull/12864)
* [OCPBUGS-15410](https://issues.redhat.com/browse/OCPBUGS-15410): Add Git Repository (PAC) doesn't setup GitLab and Bitbucket configuration correct [#12936](https://github.com/openshift/console/pull/12936)
* [OCPBUGS-15787](https://issues.redhat.com/browse/OCPBUGS-15787): Remove access review check for PipelineResource from Pipeline section [#12967](https://github.com/openshift/console/pull/12967)
* [OCPBUGS-15228](https://issues.redhat.com/browse/OCPBUGS-15228): Create helm release page doesn't show a YAML editor when schema isn't available (httpd-imagestreams chart) [#12937](https://github.com/openshift/console/pull/12937)
* [release 4.13] OCPBUGS-15360: Serverless functions UI warning is misleading [#12931](https://github.com/openshift/console/pull/12931)
* [OCPBUGS-14166](https://issues.redhat.com/browse/OCPBUGS-14166): Fixed Make Serverless Form Error [#12857](https://github.com/openshift/console/pull/12857)
* [OCPBUGS-14336](https://issues.redhat.com/browse/OCPBUGS-14336): use service port name instead targetPort in the Pipeline Event listener route [#12870](https://github.com/openshift/console/pull/12870)
* [OCPBUGS-14310](https://issues.redhat.com/browse/OCPBUGS-14310): Could not import multiple resources via JSON (while YAML supports this) [#12868](https://github.com/openshift/console/pull/12868)
* [OCPBUGS-15335](https://issues.redhat.com/browse/OCPBUGS-15335): Delete annotation 'tekton.dev/v1beta1TaskRuns' when rerun the PLR [#12927](https://github.com/openshift/console/pull/12927)
* [OCPBUGS-15130](https://issues.redhat.com/browse/OCPBUGS-15130): Helm Repository "Edit" button results in 404 [#12909](https://github.com/openshift/console/pull/12909)
* [OCPBUGS-14189](https://issues.redhat.com/browse/OCPBUGS-14189): Corrected Labels for resolving the bug related to the Create Route Checkbox [#12858](https://github.com/openshift/console/pull/12858)
* [OCPBUGS-13642](https://issues.redhat.com/browse/OCPBUGS-13642): Fix OLM k8sResourcePrefix descriptor dropdown behavior [#12812](https://github.com/openshift/console/pull/12812)
* [OCPBUGS-11974](https://issues.redhat.com/browse/OCPBUGS-11974): Add page title to Devconsole pages [#12844](https://github.com/openshift/console/pull/12844)
* [OCPBUGS-15465](https://issues.redhat.com/browse/OCPBUGS-15465), [OCPBUGS-15481](https://issues.redhat.com/browse/OCPBUGS-15481): Remove PipelineResource CRD check because it's not installed with PO 1.11 anymore and disable operator-uninstall test [#12949](https://github.com/openshift/console/pull/12949)
* [OCPBUGS-14943](https://issues.redhat.com/browse/OCPBUGS-14943): visiting Configurations page returns error Cannot read… [#12897](https://github.com/openshift/console/pull/12897)
* [OCPBUGS-12785](https://issues.redhat.com/browse/OCPBUGS-12785): Project admin can update and view subscription from operator details page [#12780](https://github.com/openshift/console/pull/12780)
* [OCPBUGS-14574](https://issues.redhat.com/browse/OCPBUGS-14574): only copy workload annotations to debug pod [#12879](https://github.com/openshift/console/pull/12879)
* [OCPBUGS-14258](https://issues.redhat.com/browse/OCPBUGS-14258): Add vSphere cluster field. [#12862](https://github.com/openshift/console/pull/12862)
* [OCPBUGS-14195](https://issues.redhat.com/browse/OCPBUGS-14195): Topology UI doesn't recognize Serverless Rust function for proper UI icon [#12860](https://github.com/openshift/console/pull/12860)
* [OCPBUGS-10527](https://issues.redhat.com/browse/OCPBUGS-10527): When there are 2 pipelines displayed in the dropdown menu, selecting one, unchecks the Add Pipeline checkbox [#12658](https://github.com/openshift/console/pull/12658)
* [OCPBUGS-14165](https://issues.redhat.com/browse/OCPBUGS-14165): propagate labels to pipeline resources [#12856](https://github.com/openshift/console/pull/12856)
* [OCPBUGS-13959](https://issues.redhat.com/browse/OCPBUGS-13959): Wait with CRD/model translation until i18n bundles are loaded [#12842](https://github.com/openshift/console/pull/12842)
* [OCPBUGS-13783](https://issues.redhat.com/browse/OCPBUGS-13783): fix runtime error on OperatorHub details pages [#12830](https://github.com/openshift/console/pull/12830)
* [OCPBUGS-12770](https://issues.redhat.com/browse/OCPBUGS-12770): fix buildconfig form ns [#12776](https://github.com/openshift/console/pull/12776)
* [OCPBUGS-12850](https://issues.redhat.com/browse/OCPBUGS-12850): add support for minimal status of tekton [#12784](https://github.com/openshift/console/pull/12784)
* [OCPBUGS-12740](https://issues.redhat.com/browse/OCPBUGS-12740): update helm release empty state text [#12773](https://github.com/openshift/console/pull/12773)
* [OCPBUGS-11866](https://issues.redhat.com/browse/OCPBUGS-11866): delete associated pipeline, triggertemplate and eventlistener when deleting app [#12730](https://github.com/openshift/console/pull/12730)
* [OCPBUGS-12186](https://issues.redhat.com/browse/OCPBUGS-12186): Pipeline doesn't render correctly when displayed but looks fine in edit mode [#12748](https://github.com/openshift/console/pull/12748)
* [OCPBUGS-11218](https://issues.redhat.com/browse/OCPBUGS-11218): use PipelineRun template from 'pipelines-as-code-pipelinerun-go' configMap for Go runtime [#12696](https://github.com/openshift/console/pull/12696)
* [OCPBUGS-12273](https://issues.redhat.com/browse/OCPBUGS-12273): When Creating Sample Devfile from the Samples Page, Topology Icon is not set [#12757](https://github.com/openshift/console/pull/12757)
* [OCPBUGS-12272](https://issues.redhat.com/browse/OCPBUGS-12272): Importing a kn Service shows a non-working Open URL decorator also when the Add Route checkbox was unselected [#12756](https://github.com/openshift/console/pull/12756)
* [OCPBUGS-12173](https://issues.redhat.com/browse/OCPBUGS-12173): taskrun ui fails when using object type results [#12745](https://github.com/openshift/console/pull/12745)
* [OCPBUGS-10832](https://issues.redhat.com/browse/OCPBUGS-10832): Edit Deployment (and DC) form doesn't enable Save button when changing strategy type [#12674](https://github.com/openshift/console/pull/12674)
* [OCPBUGS-11919](https://issues.redhat.com/browse/OCPBUGS-11919): Reduce metrics cardinality by grouping well-known and other perspectives and plugins [#12742](https://github.com/openshift/console/pull/12742)
* [OCPBUGS-10266](https://issues.redhat.com/browse/OCPBUGS-10266): Fixes argocd link for non-KAM added application envs [#12649](https://github.com/openshift/console/pull/12649)
* [OCPBUGS-10265](https://issues.redhat.com/browse/OCPBUGS-10265): Fixes resource status alignment issue [#12648](https://github.com/openshift/console/pull/12648)
* [OCPBUGS-10299](https://issues.redhat.com/browse/OCPBUGS-10299): Fixes card sizes not even issue when commit info is not available on Environments page [#12651](https://github.com/openshift/console/pull/12651)
* [OCPBUGS-12172](https://issues.redhat.com/browse/OCPBUGS-12172): Users don't know what type of resource is being created by Import from Git or Deploy Image flows [#12744](https://github.com/openshift/console/pull/12744)
* [OCPBUGS-10678](https://issues.redhat.com/browse/OCPBUGS-10678): Do not show builder ImageStreams without `sampleRepo` as samples [#12668](https://github.com/openshift/console/pull/12668)
* [OCPBUGS-11232](https://issues.redhat.com/browse/OCPBUGS-11232): fix All projects selection on Pipelines page in dev perspective [#12698](https://github.com/openshift/console/pull/12698)
* [OCPBUGS-11390](https://issues.redhat.com/browse/OCPBUGS-11390): Move operator install status to it's own route/page [#12706](https://github.com/openshift/console/pull/12706)
* [OCPBUGS-11107](https://issues.redhat.com/browse/OCPBUGS-11107): Fix alerts source display values [#12688](https://github.com/openshift/console/pull/12688)
* [OCPBUGS-11248](https://issues.redhat.com/browse/OCPBUGS-11248): fix translation string for Image pull secret created alert [#12699](https://github.com/openshift/console/pull/12699)
* [OCPBUGS-10833](https://issues.redhat.com/browse/OCPBUGS-10833): update the default pipelineRun template name [#12675](https://github.com/openshift/console/pull/12675)
* [OCPBUGS-10679](https://issues.redhat.com/browse/OCPBUGS-10679): Show type of sample on the samples view [#12639](https://github.com/openshift/console/pull/12639)
* [OCPBUGS-10474](https://issues.redhat.com/browse/OCPBUGS-10474): OpenShift pipeline TaskRun(s) column Duration is not present as column in UI [#12656](https://github.com/openshift/console/pull/12656)
* [OCPBUGS-7632](https://issues.redhat.com/browse/OCPBUGS-7632): fix issue where project deletion fails [#12618](https://github.com/openshift/console/pull/12618)
* [ODC-7232](https://issues.redhat.com/browse/ODC-7232), [ODC-7233](https://issues.redhat.com/browse/ODC-7233): Add new auth, serverconfig and usage metrics [#12527](https://github.com/openshift/console/pull/12527)
* [OCPBUGS-6994](https://issues.redhat.com/browse/OCPBUGS-6994): when ACM is installed and no previous perspective is set, default perspective to All Clusters [#12542](https://github.com/openshift/console/pull/12542)
* [OCPBUGS-6762](https://issues.redhat.com/browse/OCPBUGS-6762): Increase filter input width to accomodate placeholder text [#12610](https://github.com/openshift/console/pull/12610)
* [OCPBUGS-8066](https://issues.redhat.com/browse/OCPBUGS-8066): add checks for Pipeline in AddServerlessFunction form [#12617](https://github.com/openshift/console/pull/12617)
* Correcting Knative Package Failures [#12012](https://github.com/openshift/console/pull/12012)
* [IR-267](https://issues.redhat.com/browse/IR-267): add details for submanifest to the ImageStreamTag [#12549](https://github.com/openshift/console/pull/12549)
* [OCPBUGS-5773](https://issues.redhat.com/browse/OCPBUGS-5773): Delete secret on async run error [#12557](https://github.com/openshift/console/pull/12557)
* [OCPBUGS-7970](https://issues.redhat.com/browse/OCPBUGS-7970): always close filter dropdown [#12590](https://github.com/openshift/console/pull/12590)
* [OCPBUGS-7971](https://issues.redhat.com/browse/OCPBUGS-7971): Monitoring: Fix "Label" filter on "Alerting rules" list page [#12592](https://github.com/openshift/console/pull/12592)
* [OCPBUGS-7031](https://issues.redhat.com/browse/OCPBUGS-7031): Pipelines repository list and creation form doesn't show Tech Preview status [#12541](https://github.com/openshift/console/pull/12541)
* [ODC-6669](https://issues.redhat.com/browse/ODC-6669): rename edit-deployment routes and components [#12400](https://github.com/openshift/console/pull/12400)
* [OCPBUGS-7308](https://issues.redhat.com/browse/OCPBUGS-7308): remove 'Download kubeconfig file' from ServiceAccounts [#12589](https://github.com/openshift/console/pull/12589)
* [Bug 2076619](https://bugzilla.redhat.com/show_bug.cgi?id=2076619): Modified git import flow module to handle create button enable-disable issue [#11493](https://github.com/openshift/console/pull/11493)
* [OCPBUGS-7879](https://issues.redhat.com/browse/OCPBUGS-7879): fix devfile error [#12594](https://github.com/openshift/console/pull/12594)
* [OCPBUGS-7806](https://issues.redhat.com/browse/OCPBUGS-7806): Add NFS-export details for PersistentVolume details [#12571](https://github.com/openshift/console/pull/12571)
* chore(i18n): update translations: Completed-7034-OCP 4.13/Master Branch UI Localization- Sprint 230 [#12584](https://github.com/openshift/console/pull/12584)
* [OCPBUGS-3450](https://issues.redhat.com/browse/OCPBUGS-3450): Missing containerd and wicd service logs in Windows nodes [#12572](https://github.com/openshift/console/pull/12572)
* [OU-110](https://issues.redhat.com/browse/OU-110): Observe > Dashboards page: Use datasource defined in dashboard definition [#12422](https://github.com/openshift/console/pull/12422)
* [OCPBUGS-7668](https://issues.redhat.com/browse/OCPBUGS-7668): Bump helm pkg [#12582](https://github.com/openshift/console/pull/12582)
* Add additional alerts datasource extension [#12436](https://github.com/openshift/console/pull/12436)
* [OCPBUGS-4646](https://issues.redhat.com/browse/OCPBUGS-4646): delete application should delete all part-of resources [#12567](https://github.com/openshift/console/pull/12567)
* [OCPBUGS-7144](https://issues.redhat.com/browse/OCPBUGS-7144): fix alignment issue of info alert on Pipeline metrics page [#12563](https://github.com/openshift/console/pull/12563)
* Serverless function creation with Pipelines [#12552](https://github.com/openshift/console/pull/12552)
* [OCPBUGS-7421](https://issues.redhat.com/browse/OCPBUGS-7421): fix missing i18n error and validateDOMNesting warning [#12561](https://github.com/openshift/console/pull/12561)
* [OCPBUGS-1706](https://issues.redhat.com/browse/OCPBUGS-1706): Switch to use labelPlural for heading [#12585](https://github.com/openshift/console/pull/12585)
* [OCPBUGS-7195](https://issues.redhat.com/browse/OCPBUGS-7195): E2E correct sample page clicking [#12574](https://github.com/openshift/console/pull/12574)
* [OCPBUGS-3372](https://issues.redhat.com/browse/OCPBUGS-3372): Fix create silence error message adding response from the backend [#12577](https://github.com/openshift/console/pull/12577)
* [OCPBUGS-7117](https://issues.redhat.com/browse/OCPBUGS-7117): Expose endpoint to obtain copy login command URL for each cluster [#12553](https://github.com/openshift/console/pull/12553)
* [OCPBUGS-7399](https://issues.redhat.com/browse/OCPBUGS-7399): fix pipeline selection in Edit flow in devconsole [#12564](https://github.com/openshift/console/pull/12564)
* [OCPBUGS-266](https://issues.redhat.com/browse/OCPBUGS-266): add subject kind dropdown in the project access form [#12418](https://github.com/openshift/console/pull/12418)
* chore(i18n): update translations: Completed-7034-OCP 4.13/Master Branch UI Localization- Sprint 229 [#12568](https://github.com/openshift/console/pull/12568)
* [OCPBUGS-7427](https://issues.redhat.com/browse/OCPBUGS-7427): Associate wait time with method to decrease run time [#12559](https://github.com/openshift/console/pull/12559)
* [OCPBUGS-7089](https://issues.redhat.com/browse/OCPBUGS-7089), [OCPBUGS-7113](https://issues.redhat.com/browse/OCPBUGS-7113): move cluster menu to masthead to fix usability issues [#12480](https://github.com/openshift/console/pull/12480)
* [OCPBUGS-7418](https://issues.redhat.com/browse/OCPBUGS-7418): set default value for Scaling fields in Create Serverless Function form [#12562](https://github.com/openshift/console/pull/12562)
* [OCPBUGS-6610](https://issues.redhat.com/browse/OCPBUGS-6610): Developer - Topology : 'Filter by resource' drop-down i18n misses [#12522](https://github.com/openshift/console/pull/12522)
* [Bug 2115265](https://bugzilla.redhat.com/show_bug.cgi?id=2115265): Search page: LazyActionMenus are shown below Add/Remove from navigation button [#12187](https://github.com/openshift/console/pull/12187)
* [OCPBUGS-2479](https://issues.redhat.com/browse/OCPBUGS-2479): Right border radius is 0 for the pipeline visualization wrapper in dark mode [#12501](https://github.com/openshift/console/pull/12501)
* [OCPBUGS-1748](https://issues.redhat.com/browse/OCPBUGS-1748): PipelineRun templates must be fetched from OpenShift namespace [#12537](https://github.com/openshift/console/pull/12537)
* [OCPBUGS-7090](https://issues.redhat.com/browse/OCPBUGS-7090): Fix that Add to navigation does nothing when pinnedResource is {} [#12536](https://github.com/openshift/console/pull/12536)
* [OCPBUGS-5547](https://issues.redhat.com/browse/OCPBUGS-5547): Webhook Secret (1 of 2) is not removed when Knative Service is deleted [#12517](https://github.com/openshift/console/pull/12517)
* [OCPBUGS-5428](https://issues.redhat.com/browse/OCPBUGS-5428): Add missing SDK extensions descriptions [#12431](https://github.com/openshift/console/pull/12431)
* [OCPBUGS-6893](https://issues.redhat.com/browse/OCPBUGS-6893), [OCPBUGS-7199](https://issues.redhat.com/browse/OCPBUGS-7199): Fix different CI issues [#12554](https://github.com/openshift/console/pull/12554)
* [OCPBUGS-4008](https://issues.redhat.com/browse/OCPBUGS-4008): Make sure console refresh toast notification pops up wh… [#12470](https://github.com/openshift/console/pull/12470)
* [OCPBUGS-6757](https://issues.redhat.com/browse/OCPBUGS-6757): Get the Event type value from the latest PLR of the Repository [#12495](https://github.com/openshift/console/pull/12495)
* [CONSOLE-3334](https://issues.redhat.com/browse/CONSOLE-3334): Update copiedCSVsDisabled to contain managed clusters [#12374](https://github.com/openshift/console/pull/12374)
* [OCPBUGS-6967](https://issues.redhat.com/browse/OCPBUGS-6967): fix typeError while creating Serverless function [#12520](https://github.com/openshift/console/pull/12520)
* [OCPBUGS-6647](https://issues.redhat.com/browse/OCPBUGS-6647): Added translation to Last used in resource type dropdown [#12504](https://github.com/openshift/console/pull/12504)
* [OCPBUGS-5733](https://issues.redhat.com/browse/OCPBUGS-5733): Remove description field from the PLR parameters page [#12434](https://github.com/openshift/console/pull/12434)
* [ODC-7226](https://issues.redhat.com/browse/ODC-7226): update helm install and upgrade flow [#12502](https://github.com/openshift/console/pull/12502)
* [OCPBUGS-5948](https://issues.redhat.com/browse/OCPBUGS-5948): Better fix for runtime error in schema tab of api explorer when no schema exists [#12499](https://github.com/openshift/console/pull/12499)
* [OCPBUGS-186](https://issues.redhat.com/browse/OCPBUGS-186): PipelineRun task status overlaps status text [#12498](https://github.com/openshift/console/pull/12498)
* [ODC-7234](https://issues.redhat.com/browse/ODC-7234): Provide option to configure PAC on importing app via import from git flow [#12439](https://github.com/openshift/console/pull/12439)
* [HELM-479](https://issues.redhat.com/browse/HELM-479): Uninstall the Helm Charts Asynchronously [#12465](https://github.com/openshift/console/pull/12465)
* [OCPBUGS-6799](https://issues.redhat.com/browse/OCPBUGS-6799): Repositories list does not show the running pipelinerun as last pipelinerun [#12497](https://github.com/openshift/console/pull/12497)
* chore(i18n): update translations: : Completed-7034-OCP 4.12/Master Branch UI Localization- Sprint 225 & 228 [#12285](https://github.com/openshift/console/pull/12285)
* [OCPBUGS-6098](https://issues.redhat.com/browse/OCPBUGS-6098): Show Git icon and repo link as per the Git provider [#12456](https://github.com/openshift/console/pull/12456)
* [OCPBUGS-4883](https://issues.redhat.com/browse/OCPBUGS-4883): Default Git type to other info alert should get remove after changing the git type [#12384](https://github.com/openshift/console/pull/12384)
* [OCPBUGS-5997](https://issues.redhat.com/browse/OCPBUGS-5997): Add Git Repository (PAC) showed empty permission content and non-working help link until a git url is entered [#12445](https://github.com/openshift/console/pull/12445)
* [OCPBUGS-6660](https://issues.redhat.com/browse/OCPBUGS-6660): make Uninstall Operator checkbox instructions optional [#12471](https://github.com/openshift/console/pull/12471)
* add preferred tab per user for dev perspective Pipelines page and make PipelineRuns tab default for Repository details page [#12426](https://github.com/openshift/console/pull/12426)
* Query browser: Remove unused `wrapperClassName` prop [#12464](https://github.com/openshift/console/pull/12464)
* [OCPBUGS-2666](https://issues.redhat.com/browse/OCPBUGS-2666): Add RBAC check on Create a Project link in all-namespaces pages [#12279](https://github.com/openshift/console/pull/12279)
* add create serverless function form and add action on add page [#12396](https://github.com/openshift/console/pull/12396)
* Update ODC owner files [#12430](https://github.com/openshift/console/pull/12430)
* [ODC-7225](https://issues.redhat.com/browse/ODC-7225): Update Helm Releases list page and the details page [#12432](https://github.com/openshift/console/pull/12432)
* [Bug 2084452](https://bugzilla.redhat.com/show_bug.cgi?id=2084452): PodDisruptionBudgets help message should be semantic [#12084](https://github.com/openshift/console/pull/12084)
* [OCPBUGS-5948](https://issues.redhat.com/browse/OCPBUGS-5948): Fix runtime error in schema editor when theres no match for g/v/k in swagger definitions [#12469](https://github.com/openshift/console/pull/12469)
* [OCPBUGS-6049](https://issues.redhat.com/browse/OCPBUGS-6049): Do not show UpdateInProgress when status is Failing [#12449](https://github.com/openshift/console/pull/12449)
* [OCPBUGS-6634](https://issues.redhat.com/browse/OCPBUGS-6634): Enable building tectonic-console-builder on arm64 and fix the Dockerfile.product to work with no cached artifacts [#12444](https://github.com/openshift/console/pull/12444)
* [OCPBUGS-3228](https://issues.redhat.com/browse/OCPBUGS-3228): fix broken pipeline secret [#12460](https://github.com/openshift/console/pull/12460)
* [OCPBUGS-5851](https://issues.redhat.com/browse/OCPBUGS-5851): refactor descriptors test to remove interdependencies [#12453](https://github.com/openshift/console/pull/12453)
* [OCPBUGS-6053](https://issues.redhat.com/browse/OCPBUGS-6053): fix run-time error on Cluster Settings when availableUp… [#12450](https://github.com/openshift/console/pull/12450)
* [OCPBUGS-6272](https://issues.redhat.com/browse/OCPBUGS-6272): Start the pipeline with workspace [#12442](https://github.com/openshift/console/pull/12442)
* [OCPBUGS-4684](https://issues.redhat.com/browse/OCPBUGS-4684): In DeploymentConfig both the Form view and Yaml view are not in sync [#12416](https://github.com/openshift/console/pull/12416)
* [CONSOLE-3237](https://issues.redhat.com/browse/CONSOLE-3237): Add opt out when Console deletes operands [#12234](https://github.com/openshift/console/pull/12234)
* [OCPBUGS-5851](https://issues.redhat.com/browse/OCPBUGS-5851): delete existing operand via CLI to workaround failing t… [#12451](https://github.com/openshift/console/pull/12451)
* [OCPBUGS-1598](https://issues.redhat.com/browse/OCPBUGS-1598): updates toast wording to Workload [#12155](https://github.com/openshift/console/pull/12155)
* [ODC-7210](https://issues.redhat.com/browse/ODC-7210): Create Serverless function using the Import from the Git with Builder Images [#12411](https://github.com/openshift/console/pull/12411)
* [OCPBUGS-5016](https://issues.redhat.com/browse/OCPBUGS-5016): Editing Pipeline in the ocp console should show correct information [#12446](https://github.com/openshift/console/pull/12446)
* [OCPBUGS-5851](https://issues.redhat.com/browse/OCPBUGS-5851): Using OLM descriptor components deletes operand [#12433](https://github.com/openshift/console/pull/12433)
* [CONSOLE-3389](https://issues.redhat.com/browse/CONSOLE-3389): Use Cypress mock responses for multicluster cluster switcher and pod test [#12421](https://github.com/openshift/console/pull/12421)
* Correcting Pipelines Package Failures [#12073](https://github.com/openshift/console/pull/12073)
* [Bug 2110565](https://bugzilla.redhat.com/show_bug.cgi?id=2110565): PDB Remove add/edit/remove actions in Pod resource action menu [#12420](https://github.com/openshift/console/pull/12420)
* [OCPBUGS-5542](https://issues.redhat.com/browse/OCPBUGS-5542): Project dropdown order is not as smart as project list page order [#12428](https://github.com/openshift/console/pull/12428)
* [OCPBUGS-1852](https://issues.redhat.com/browse/OCPBUGS-1852): Subscription tab for operator doesn't land on correct URL [#12336](https://github.com/openshift/console/pull/12336)
* [OCPBUGS-4377](https://issues.redhat.com/browse/OCPBUGS-4377): Service name search ability while creating the Route from console [#12383](https://github.com/openshift/console/pull/12383)
* [OCPBUGS-5540](https://issues.redhat.com/browse/OCPBUGS-5540): fixes typo for milliseconds [#12423](https://github.com/openshift/console/pull/12423)
* [OCPBUGS-4894](https://issues.redhat.com/browse/OCPBUGS-4894): Disabled Serverless add actions should not be displayed for Knative Service [#12379](https://github.com/openshift/console/pull/12379)
* [OCPBUGS-4571](https://issues.redhat.com/browse/OCPBUGS-4571): Operator recommended namespace during installation incorrect. [#12387](https://github.com/openshift/console/pull/12387)
* [OU-121](https://issues.redhat.com/browse/OU-121): Monitoring: Convert Alerting list pages to use plugin SDK list filters [#12399](https://github.com/openshift/console/pull/12399)
* [OCPBUGS-5346](https://issues.redhat.com/browse/OCPBUGS-5346): Change vSphere connection health status icon [#12410](https://github.com/openshift/console/pull/12410)
* [OCPBUGS-3334](https://issues.redhat.com/browse/OCPBUGS-3334): Fix type inconsistencies and Readme for DynamicPlugins [#12263](https://github.com/openshift/console/pull/12263)
* [OCPBUGS-4047](https://issues.redhat.com/browse/OCPBUGS-4047): Fix secret CRUD test [#12407](https://github.com/openshift/console/pull/12407)
* [Bug 2083087](https://bugzilla.redhat.com/show_bug.cgi?id=2083087): Fix to provide an option to delete all app resources on delete-resource modal for D/DC/KSVC [#12390](https://github.com/openshift/console/pull/12390)
* [OCPBUGS-2145](https://issues.redhat.com/browse/OCPBUGS-2145): maxUnavailable and minAvailable on PDB creation page - i18n misses [#12373](https://github.com/openshift/console/pull/12373)
* [OCPBUGS-5287](https://issues.redhat.com/browse/OCPBUGS-5287): disable operator-install-single-namespace.spec.ts until… [#12406](https://github.com/openshift/console/pull/12406)
* [HELM-471](https://issues.redhat.com/browse/HELM-471): Modify list releases response [#12401](https://github.com/openshift/console/pull/12401)
* [OCPBUGS-4047](https://issues.redhat.com/browse/OCPBUGS-4047): disable key/value secrets test as they fail at a high rate [#12405](https://github.com/openshift/console/pull/12405)
* [OCPBUGS-1606](https://issues.redhat.com/browse/OCPBUGS-1606): Do not filter spoke cluster operators by arch/os [#12363](https://github.com/openshift/console/pull/12363)
* [OCPBUGS-4701](https://issues.redhat.com/browse/OCPBUGS-4701): display 'Control plane is hosted' alert only when isCl… [#12361](https://github.com/openshift/console/pull/12361)
* [ODC-7188](https://issues.redhat.com/browse/ODC-7188): On importing application via import from git flow pac should be configured for the application [#12335](https://github.com/openshift/console/pull/12335)
* [OCPBUGS-4279](https://issues.redhat.com/browse/OCPBUGS-4279): Upgrade pf 2022 13 [#12333](https://github.com/openshift/console/pull/12333)
* [OCPBUGS-3033](https://issues.redhat.com/browse/OCPBUGS-3033): Make all feature flags available in perspective extensi… [#12386](https://github.com/openshift/console/pull/12386)
* [OCPBUGS-4700](https://issues.redhat.com/browse/OCPBUGS-4700): only show upgrade details if cluster not externally man… [#12362](https://github.com/openshift/console/pull/12362)
* Health checks topology sidebar feature automation [#12394](https://github.com/openshift/console/pull/12394)
* [ODC-7184](https://issues.redhat.com/browse/ODC-7184): Show pre-pinned resources based on customization [#12354](https://github.com/openshift/console/pull/12354)
* [OCPBUGS-4781](https://issues.redhat.com/browse/OCPBUGS-4781): use /api/helm/release endpoint on helm release details page [#12397](https://github.com/openshift/console/pull/12397)
* [ODC-7185](https://issues.redhat.com/browse/ODC-7185): Allow admins to define pre-pinned resources using a form driven experience [#12353](https://github.com/openshift/console/pull/12353)
* [ODC-7183](https://issues.redhat.com/browse/ODC-7183): Provide a code snippet for adding pinned resources [#12349](https://github.com/openshift/console/pull/12349)
* [OCPBUGS-5164](https://issues.redhat.com/browse/OCPBUGS-5164): add support for version v1beta1 for knativeServing and knativeEventing [#12391](https://github.com/openshift/console/pull/12391)
* [OCPBUGS-5165](https://issues.redhat.com/browse/OCPBUGS-5165): Add DevSandbox specific telemetry config (to allow these cluster to enforce cluster type and opt-out) [#12392](https://github.com/openshift/console/pull/12392)
* Monitoring: Convert Targets list page to use plugin SDK list filters [#12342](https://github.com/openshift/console/pull/12342)
* [ODC-7182](https://issues.redhat.com/browse/ODC-7182): add pinnedResources to server flags [#12314](https://github.com/openshift/console/pull/12314)
* [OCPBUGS-3373](https://issues.redhat.com/browse/OCPBUGS-3373): Observe > Metrics > Monitors,  Error Message to indicate limited view due to user privileges [#12319](https://github.com/openshift/console/pull/12319)
* [OCPBUGS-3314](https://issues.redhat.com/browse/OCPBUGS-3314): Fix to use and set correct secretReference for build-config triggers [#12375](https://github.com/openshift/console/pull/12375)
* [OCPBUGS-2824](https://issues.redhat.com/browse/OCPBUGS-2824): The dropdown list component will be covered by deployment details page on Topology page [#12369](https://github.com/openshift/console/pull/12369)
* adds support for timeout and custom image in cloudshell [#12329](https://github.com/openshift/console/pull/12329)
* [OU-122](https://issues.redhat.com/browse/OU-122): Monitoring: Convert modals to use PatternFly directly [#12371](https://github.com/openshift/console/pull/12371)
* [Bug 1948666](https://bugzilla.redhat.com/show_bug.cgi?id=1948666): Fix to show correct help texts for each git repo status error code [#12237](https://github.com/openshift/console/pull/12237)
* [Bug 2005232](https://bugzilla.redhat.com/show_bug.cgi?id=2005232): Pods list page should only show Create Pod button to user has sufficient permission [#11999](https://github.com/openshift/console/pull/11999)
* [OCPBUGS-4975](https://issues.redhat.com/browse/OCPBUGS-4975): Add missing translation in ceph stoage plugin [#12380](https://github.com/openshift/console/pull/12380)
* [OCPBUGS-3767](https://issues.redhat.com/browse/OCPBUGS-3767): fixed node maintenance plugin route configuration for BareMetalNodesPage [#12359](https://github.com/openshift/console/pull/12359)
* [OCPBUGS-2525](https://issues.redhat.com/browse/OCPBUGS-2525): improve newly migrated ConsoleLink test [#12348](https://github.com/openshift/console/pull/12348)
* [MGMT-12787](https://issues.redhat.com/browse/MGMT-12787): Move MarkdownView to plugins-shared [#12328](https://github.com/openshift/console/pull/12328)
* [Bug 2100762](https://bugzilla.redhat.com/show_bug.cgi?id=2100762): Adding data-checked-state to radio inputs [#12256](https://github.com/openshift/console/pull/12256)
* [ODC-7177](https://issues.redhat.com/browse/ODC-7177): Add SBO label selector support for Topology page [#12283](https://github.com/openshift/console/pull/12283)
* Sidebar-of-knative-revision-and-service| Knative Serverless [#12351](https://github.com/openshift/console/pull/12351)
* [ODC-7179](https://issues.redhat.com/browse/ODC-7179): Allow users to see which pods are receiving traffic [#12272](https://github.com/openshift/console/pull/12272)
* [OCPBUGS-3761](https://issues.redhat.com/browse/OCPBUGS-3761): close the guided tour modal before any action [#12358](https://github.com/openshift/console/pull/12358)
* Domain-Mapping feature | Knative Serverless [#12343](https://github.com/openshift/console/pull/12343)
* [ODC-7172](https://issues.redhat.com/browse/ODC-7172): Update helm terms from install/uninstall to create/delete [#12337](https://github.com/openshift/console/pull/12337)
* [OCPBUGS-3033](https://issues.redhat.com/browse/OCPBUGS-3033): Update admin landing page if monitoring is disabled [#12292](https://github.com/openshift/console/pull/12292)
* [OCPBUGS-4691](https://issues.redhat.com/browse/OCPBUGS-4691): Fix that topology sidebar actions shows outdated data (Edit labels, Edit annotations, etc.) [#12365](https://github.com/openshift/console/pull/12365)
* [OCPBUGS-3951](https://issues.redhat.com/browse/OCPBUGS-3951): Do not disable dynamic plugin if extension coderef fail… [#12347](https://github.com/openshift/console/pull/12347)
* [CONSOLE-3371](https://issues.redhat.com/browse/CONSOLE-3371): Add missing children prop to ResourceLink [#12312](https://github.com/openshift/console/pull/12312)
* [HELM-450](https://issues.redhat.com/browse/HELM-450): Return secret for async install/upgrade [#12289](https://github.com/openshift/console/pull/12289)
* Updating openshift-enterprise-console images to be consistent with ART [#12350](https://github.com/openshift/console/pull/12350)
* [Bug 2110570](https://bugzilla.redhat.com/show_bug.cgi?id=2110570): Topology sidebar: Edit pod count shows not the latest replicas value when edit the count again [#12332](https://github.com/openshift/console/pull/12332)
* [OCPBUGS-3863](https://issues.redhat.com/browse/OCPBUGS-3863): Set proper return code for plugin handlers [#12346](https://github.com/openshift/console/pull/12346)
* Update helm and dev-console tests file [#12301](https://github.com/openshift/console/pull/12301)
* Monitoring: Convert remaining kebab menus to use PatternFly directly [#12326](https://github.com/openshift/console/pull/12326)
* [OCPBUGS-4540](https://issues.redhat.com/browse/OCPBUGS-4540): Fix NavSection bug [#12344](https://github.com/openshift/console/pull/12344)
* OU-75 New Query Added to the Beginning  of List [#12275](https://github.com/openshift/console/pull/12275)
* [OCPBUGS-2525](https://issues.redhat.com/browse/OCPBUGS-2525): migrate CRD extensions tests to Cypress to mitigate flakes [#12331](https://github.com/openshift/console/pull/12331)
* [OCPBUGS-4518](https://issues.redhat.com/browse/OCPBUGS-4518): Monitoring: Fix alert descriptions with duplicate resources [#12341](https://github.com/openshift/console/pull/12341)
* [OCPBUGS-4047](https://issues.redhat.com/browse/OCPBUGS-4047): delete each created secret in case first test attempt r… [#12316](https://github.com/openshift/console/pull/12316)
* [Bug 2077138](https://bugzilla.redhat.com/show_bug.cgi?id=2077138): update pf-quickstart version [#12298](https://github.com/openshift/console/pull/12298)
* [OCPBUGS-4252](https://issues.redhat.com/browse/OCPBUGS-4252): fix issue where node debug terminal doesn't load [#12322](https://github.com/openshift/console/pull/12322)
* [OCPBUGS-4110](https://issues.redhat.com/browse/OCPBUGS-4110): fixes misaligned form footer btn controls for WTO [#12306](https://github.com/openshift/console/pull/12306)
* [OCPBUGS-4415](https://issues.redhat.com/browse/OCPBUGS-4415): Disable shipwright tests again [#12334](https://github.com/openshift/console/pull/12334)
* Monitoring: Extract Alertmanager config related code [#12324](https://github.com/openshift/console/pull/12324)
* [OCPBUGS-3896](https://issues.redhat.com/browse/OCPBUGS-3896): Make aria-expanded state label reflect correct expanded state in the masthead navigation button [#12321](https://github.com/openshift/console/pull/12321)
* [OCPBUGS-3771](https://issues.redhat.com/browse/OCPBUGS-3771): Add managed cluster proxy endpoint env var to multicluster-environment.sh script [#12280](https://github.com/openshift/console/pull/12280)
* [OCPBUGS-4206](https://issues.redhat.com/browse/OCPBUGS-4206): fix getContainerStateValue i18n [#12318](https://github.com/openshift/console/pull/12318)
* [CONSOLE-3282](https://issues.redhat.com/browse/CONSOLE-3282): add Dynamic plugins to about modal [#12294](https://github.com/openshift/console/pull/12294)
* [OCPBUGS-4203](https://issues.redhat.com/browse/OCPBUGS-4203): remove padding from debug pod alert [#12317](https://github.com/openshift/console/pull/12317)
* Monitoring: Use PatternFly components instead of ActionButtons [#12302](https://github.com/openshift/console/pull/12302)
* [OCPBUGS-3761](https://issues.redhat.com/browse/OCPBUGS-3761): follow on fix to ensure Administrator perspective is se… [#12313](https://github.com/openshift/console/pull/12313)
* [OCPBUGS-3027](https://issues.redhat.com/browse/OCPBUGS-3027): Do not disable metrics when auth is disabled [#12287](https://github.com/openshift/console/pull/12287)
* Monitoring: Use PatternFly components instead of Breadcrumbs component [#12303](https://github.com/openshift/console/pull/12303)
* [OCPBUGS-1305](https://issues.redhat.com/browse/OCPBUGS-1305): Re-enable Shipwright e2e tests [#12049](https://github.com/openshift/console/pull/12049)
* Monitoring: Don't import EmptyBox [#12227](https://github.com/openshift/console/pull/12227)
* [OCPBUGS-2281](https://issues.redhat.com/browse/OCPBUGS-2281): Re-enable serverless e2e tests [#12243](https://github.com/openshift/console/pull/12243)
* [OCPBUGS-3476](https://issues.redhat.com/browse/OCPBUGS-3476): Show Tag label and tag name if tag is detected in repository PipelineRun list and details page [#12274](https://github.com/openshift/console/pull/12274)
* [OCPBUGS-3432](https://issues.redhat.com/browse/OCPBUGS-3432): Re-enable pipelines e2e tests [#12242](https://github.com/openshift/console/pull/12242)
* [OCPBUGS-2500](https://issues.redhat.com/browse/OCPBUGS-2500): Pan nodes into view if all nodes are not visible on load [#12260](https://github.com/openshift/console/pull/12260)
* [OCPBUGS-4026](https://issues.redhat.com/browse/OCPBUGS-4026): Fix rerender loop/crash when bindable-kinds is found but has no status [#12296](https://github.com/openshift/console/pull/12296)
* [OCPBUGS-4022](https://issues.redhat.com/browse/OCPBUGS-4022): Fix react warning when open console, add missing keys in navigation [#12295](https://github.com/openshift/console/pull/12295)
* [OCPBUGS-3024](https://issues.redhat.com/browse/OCPBUGS-3024): Add support for other Service types in Service list [#12232](https://github.com/openshift/console/pull/12232)
* [OCPBUGS-4012](https://issues.redhat.com/browse/OCPBUGS-4012): disabled Serverless add actions is not displayed in topology menu [#12297](https://github.com/openshift/console/pull/12297)
* [OCPBUGS-3776](https://issues.redhat.com/browse/OCPBUGS-3776): Update the tooltip to trigger only on mouseenter to remove focus trigger [#12290](https://github.com/openshift/console/pull/12290)
* [OCPBUGS-2480](https://issues.redhat.com/browse/OCPBUGS-2480): Task delete icon is not align properly on the Pipeline builder page [#12266](https://github.com/openshift/console/pull/12266)
* [CONSOLE-3350](https://issues.redhat.com/browse/CONSOLE-3350): Add a PR template for the console [#12257](https://github.com/openshift/console/pull/12257)
* [OCPBUGS-3648](https://issues.redhat.com/browse/OCPBUGS-3648): Fix more runtime error edge cases in ImageManifestVuln … [#12293](https://github.com/openshift/console/pull/12293)
* Monitoring: Refactor silence dropdowns to use PatternFly directly [#12196](https://github.com/openshift/console/pull/12196)
* [OCPBUGS-3395](https://issues.redhat.com/browse/OCPBUGS-3395): show event source, event sink card on add and associated action only if eventing is enabled [#12268](https://github.com/openshift/console/pull/12268)
* [OCPBUGS-3235](https://issues.redhat.com/browse/OCPBUGS-3235): Fix for initial showing of topology contents [#12264](https://github.com/openshift/console/pull/12264)
* [OCPBUGS-3761](https://issues.redhat.com/browse/OCPBUGS-3761): migrate Events integration test to Cypress to mitigate … [#12286](https://github.com/openshift/console/pull/12286)
* topology-headless-failures-correction [#12057](https://github.com/openshift/console/pull/12057)
* [OCPBUGS-2904](https://issues.redhat.com/browse/OCPBUGS-2904): If all the actions are disabled in add page, Details on/off toggle switch to be disabled [#12236](https://github.com/openshift/console/pull/12236)
* Monitoring: Import from the dynamic plugin SDK where possible and minor imports clean up [#12231](https://github.com/openshift/console/pull/12231)
* [OCPBUGS-2579](https://issues.redhat.com/browse/OCPBUGS-2579): Helm Charts and Samples are not disabled in topology actions if actions are disabled in customization [#12197](https://github.com/openshift/console/pull/12197)
* [OCPBUGS-1604](https://issues.redhat.com/browse/OCPBUGS-1604): Add cluster to query params of websocket requests [#12250](https://github.com/openshift/console/pull/12250)
* [OCPBUGS-2551](https://issues.redhat.com/browse/OCPBUGS-2551): show 403 error when normal user check operands on All … [#12267](https://github.com/openshift/console/pull/12267)
* [Bug 2092289](https://bugzilla.redhat.com/show_bug.cgi?id=2092289): Don't proxy CORS response headers [#12269](https://github.com/openshift/console/pull/12269)
* [OCPBUGS-3069](https://issues.redhat.com/browse/OCPBUGS-3069): add Release not accepted to Update status on Cluster Se… [#12251](https://github.com/openshift/console/pull/12251)
* Monitoring: Add popover help text for silence form's negative matchers [#12218](https://github.com/openshift/console/pull/12218)
* [OCPBUGS-3709](https://issues.redhat.com/browse/OCPBUGS-3709): URI encode subjectName in CreateRoleBinding [#12223](https://github.com/openshift/console/pull/12223)
* [OCPBUGS-3458](https://issues.redhat.com/browse/OCPBUGS-3458): improve display of RetrievedUpdate condition in Update status [#12261](https://github.com/openshift/console/pull/12261)
* [OCPBUGS-2306](https://issues.redhat.com/browse/OCPBUGS-2306): fix number spinner input [#12219](https://github.com/openshift/console/pull/12219)
* [Bug 2080260](https://bugzilla.redhat.com/show_bug.cgi?id=2080260): Fix runtime erros in ImageManifestVuln related pages [#12229](https://github.com/openshift/console/pull/12229)
* Create-knative-service-from-deployment-or-deployment-config feature [#12125](https://github.com/openshift/console/pull/12125)
* [OCPBUGS-1671](https://issues.redhat.com/browse/OCPBUGS-1671): frontend: use UBI httpd for StatefulSet template [#12195](https://github.com/openshift/console/pull/12195)
* [OCPBUGS-2735](https://issues.redhat.com/browse/OCPBUGS-2735): Switch spacing for inline radio & checkbox elements [#12253](https://github.com/openshift/console/pull/12253)
* Bump helm version  to 3.10.1 [#12246](https://github.com/openshift/console/pull/12246)
* [CONSOLE-3120](https://issues.redhat.com/browse/CONSOLE-3120): Allow operator to specify where to run with CSV suggested namespace template annotation [#12217](https://github.com/openshift/console/pull/12217)
* [OCPBUGS-3316](https://issues.redhat.com/browse/OCPBUGS-3316): Remove `refs-heads` from the branch name for Repository pipelineRun row [#12247](https://github.com/openshift/console/pull/12247)
* Monitoring: Move codicon font into monitoring/ dir [#12230](https://github.com/openshift/console/pull/12230)
* [OCPBUGS-2922](https://issues.redhat.com/browse/OCPBUGS-2922): Fix Console Plugin table sorting [#12238](https://github.com/openshift/console/pull/12238)
* Monitoring: Don't import CloseButton [#12226](https://github.com/openshift/console/pull/12226)
* [Bug 1993916](https://bugzilla.redhat.com/show_bug.cgi?id=1993916): Show tooltips for contextual information [#11860](https://github.com/openshift/console/pull/11860)
* [OCPBUGS-3172](https://issues.redhat.com/browse/OCPBUGS-3172): check that user can patch console operator config in s… [#12222](https://github.com/openshift/console/pull/12222)
* add capacity action for SS CSV list page [OCP 4.12 & ODF 4.11] [#12214](https://github.com/openshift/console/pull/12214)
* Monitoring: Fix type of bodyContent prop passed to PopoverField [#12211](https://github.com/openshift/console/pull/12211)
* [OCPBUGS-2961](https://issues.redhat.com/browse/OCPBUGS-2961): Change installed operator text when custom resource required. [#12228](https://github.com/openshift/console/pull/12228)
* [CONSOLE-3185](https://issues.redhat.com/browse/CONSOLE-3185): Improve information available for Pending or Failed plugins so user can better troubleshoot plugins [#12208](https://github.com/openshift/console/pull/12208)
* [CONSOLE-3246](https://issues.redhat.com/browse/CONSOLE-3246): Update i18next to version 21.x.x [#12124](https://github.com/openshift/console/pull/12124)
* [CONSOLE-3077](https://issues.redhat.com/browse/CONSOLE-3077): Promote ConsolePlugins API version to v1 in console repository [#12103](https://github.com/openshift/console/pull/12103)
* [OCPBUGS-1061](https://issues.redhat.com/browse/OCPBUGS-1061): Monitoring: Fix permission check for Prometheus & Alertmanager pollers [#12206](https://github.com/openshift/console/pull/12206)
* [Full changelog](https://github.com/openshift/console/compare/7e1a504f744ead2eb7142645276229b8e5e87b02...1584fb1629ca1a9e88768dce3678854f00ee490f)


### [console-operator](https://github.com/openshift/console-operator/tree/cb4657d2d8cc94b611bc9b1f4260f2776c30c0f0)

* [OCPBUGS-18674](https://issues.redhat.com/browse/OCPBUGS-18674): Reset console operator's conditions [#894](https://github.com/openshift/console-operator/pull/894)
* [OCPBUGS-30599](https://issues.redhat.com/browse/OCPBUGS-30599): Disable HTTP/2 for webhook [#875](https://github.com/openshift/console-operator/pull/875)
* [OCPBUGS-21008](https://issues.redhat.com/browse/OCPBUGS-21008): [release-4.13] Bump library-go and golang.org/x/net [#866](https://github.com/openshift/console-operator/pull/866)
* [OCPBUGS-6208](https://issues.redhat.com/browse/OCPBUGS-6208): Updating openshift-enterprise-console-operator images to be consistent with ART [#872](https://github.com/openshift/console-operator/pull/872)
* [OCPBUGS-24591](https://issues.redhat.com/browse/OCPBUGS-24591): ConsolePlugin metrics must no longer be grouped by the vendor [#821](https://github.com/openshift/console-operator/pull/821)
* [OCPBUGS-22333](https://issues.redhat.com/browse/OCPBUGS-22333): Make enabled plugins unique [#805](https://github.com/openshift/console-operator/pull/805)
* [OCPBUGS-18972](https://issues.redhat.com/browse/OCPBUGS-18972): Manual backport of #761 [#793](https://github.com/openshift/console-operator/pull/793)
* [OCPBUGS-18192](https://issues.redhat.com/browse/OCPBUGS-18192): Add haproxy timeout annotation to console routes [#787](https://github.com/openshift/console-operator/pull/787)
* [OCPBUGS-16241](https://issues.redhat.com/browse/OCPBUGS-16241): Add missing watch permission for helm-chartrepos-viewers [#778](https://github.com/openshift/console-operator/pull/778)
* [OCPBUGS-14039](https://issues.redhat.com/browse/OCPBUGS-14039): Backport #774 and #763 [#779](https://github.com/openshift/console-operator/pull/779)
* [OCPBUGS-12461](https://issues.redhat.com/browse/OCPBUGS-12461): Add new PrometheusRule to collect metrics for cluster-monitoring-operator [#758](https://github.com/openshift/console-operator/pull/758)
* [OCPBUGS-12722](https://issues.redhat.com/browse/OCPBUGS-12722): Proper cleanup of route sync conditions [#759](https://github.com/openshift/console-operator/pull/759)
* [OCPBUGS-11462](https://issues.redhat.com/browse/OCPBUGS-11462): Disable multicluster tech preview [#754](https://github.com/openshift/console-operator/pull/754)
* [OCPBUGS-2783](https://issues.redhat.com/browse/OCPBUGS-2783): Distinguish between route conditions and remove the old ones [#734](https://github.com/openshift/console-operator/pull/734)
* [CONSOLE-2843](https://issues.redhat.com/browse/CONSOLE-2843), [CONSOLE-3394](https://issues.redhat.com/browse/CONSOLE-3394): Add ManagedProxyServiceResolver for thanos-querier on all managed clusters [#707](https://github.com/openshift/console-operator/pull/707)
* [ACM-2781](https://issues.redhat.com/browse/ACM-2781): Have operator as a prerequisite [#717](https://github.com/openshift/console-operator/pull/717)
* [OCPBUGS-4008](https://issues.redhat.com/browse/OCPBUGS-4008): Add managed cluster config map resource version to cons… [#723](https://github.com/openshift/console-operator/pull/723)
* [OCPBUGS-6488](https://issues.redhat.com/browse/OCPBUGS-6488): Recover ConsoleNotificationSync after being degraded [#725](https://github.com/openshift/console-operator/pull/725)
* [OCPBUGS-6520](https://issues.redhat.com/browse/OCPBUGS-6520): Test if all tested resrouces are available before launching Unmanaged* e2e tests [#726](https://github.com/openshift/console-operator/pull/726)
* [PD-1365](https://issues.redhat.com/browse/PD-1365): Add quickstart - Get started with multicluster engine [#698](https://github.com/openshift/console-operator/pull/698)
* [ODC-7182](https://issues.redhat.com/browse/ODC-7182): Export pinned resources to console-config ConfigMap [#697](https://github.com/openshift/console-operator/pull/697)
* [OCPBUGS-4008](https://issues.redhat.com/browse/OCPBUGS-4008): Add `app: console` label to managed-clusters configmap [#705](https://github.com/openshift/console-operator/pull/705)
* [OCPBUGS-4630](https://issues.redhat.com/browse/OCPBUGS-4630): Bump docs docs link [#704](https://github.com/openshift/console-operator/pull/704)
* [CONSOLE-3355](https://issues.redhat.com/browse/CONSOLE-3355): Console operator should sync managed cluster 'copiedCSVsDisabled' flag to managed cluster config [#701](https://github.com/openshift/console-operator/pull/701)
* [OCPBUGS-1617](https://issues.redhat.com/browse/OCPBUGS-1617): Remove unused node.kubernetes.io/not-reachable toleration [#696](https://github.com/openshift/console-operator/pull/696)
* [ACM-2063](https://issues.redhat.com/browse/ACM-2063): Add host inventory quickstart [#699](https://github.com/openshift/console-operator/pull/699)
* [Bug 1770297](https://bugzilla.redhat.com/show_bug.cgi?id=1770297): State that odo is comunity supported [#695](https://github.com/openshift/console-operator/pull/695)
* [OCPBUGS-3109](https://issues.redhat.com/browse/OCPBUGS-3109): Change text colour for ConsoleNotification that notifies user that the cluster is being [#694](https://github.com/openshift/console-operator/pull/694)
* [CONSOLE-3286](https://issues.redhat.com/browse/CONSOLE-3286): Set disabledCopiedCSVs in console [#693](https://github.com/openshift/console-operator/pull/693)
* [Full changelog](https://github.com/openshift/console-operator/compare/32e6d25c4ac9fe71bb64fa7b30073a72547f4974...cb4657d2d8cc94b611bc9b1f4260f2776c30c0f0)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/614ca3c35e1847f38f0f427c04a064cd31ac5002)

* [OCPBUGS-20594](https://issues.redhat.com/browse/OCPBUGS-20594): build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 [backport 4.13] [#130](https://github.com/openshift/containernetworking-plugins/pull/130)
* [OCPBUGS-17728](https://issues.redhat.com/browse/OCPBUGS-17728): Default CNI binaries to RHEL 8 [#117](https://github.com/openshift/containernetworking-plugins/pull/117)
* Add rhel9 binary [#102](https://github.com/openshift/containernetworking-plugins/pull/102)
* Upstream sync Feb 2023 [#73](https://github.com/openshift/containernetworking-plugins/pull/73)
* [OCPBUGS-5292](https://issues.redhat.com/browse/OCPBUGS-5292): Fixes tuning regression with vlan path fix [#72](https://github.com/openshift/containernetworking-plugins/pull/72)
* [OCPBUGS-5292](https://issues.redhat.com/browse/OCPBUGS-5292): Revert "Fix path substitution to enable setting sysctls on vlan interfaces" (ocp 4.13) [#70](https://github.com/openshift/containernetworking-plugins/pull/70)
* Updating ose-containernetworking-plugins images to be consistent with ART [#69](https://github.com/openshift/containernetworking-plugins/pull/69)
* Upstream sync, Nov 2022 [#67](https://github.com/openshift/containernetworking-plugins/pull/67)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/1b33971993ca1013be9f24690c44560d2c58c70a...614ca3c35e1847f38f0f427c04a064cd31ac5002)


### [coredns](https://github.com/openshift/coredns/tree/e70f09779b20b28f85884c7b665f72f28694db00)

* [OCPBUGS-38431](https://issues.redhat.com/browse/OCPBUGS-38431): UPSTREAM: 6354: openshift: key cache on Checking Disabled (CD) bit [#129](https://github.com/openshift/coredns/pull/129)
* [OCPBUGS-28205](https://issues.redhat.com/browse/OCPBUGS-28205): UPSTREAM: 6277: openshift: Fix OCPBUGS-28205 [#113](https://github.com/openshift/coredns/pull/113)
* [OCPBUGS-21046](https://issues.redhat.com/browse/OCPBUGS-21046): UPSTREAM: <carry>: openshift: Address CVE-2023-39325 [#102](https://github.com/openshift/coredns/pull/102)
* [OCPBUGS-19985](https://issues.redhat.com/browse/OCPBUGS-19985): UPSTREAM: <carry>: openshift: Fix OCPBUGS-19985 [#97](https://github.com/openshift/coredns/pull/97)
* [OCPBUGS-7558](https://issues.redhat.com/browse/OCPBUGS-7558): Merge 1.10.1 [#88](https://github.com/openshift/coredns/pull/88)
* [OCPBUGS-6228](https://issues.redhat.com/browse/OCPBUGS-6228): Updating coredns images to be consistent with ART [#83](https://github.com/openshift/coredns/pull/83)
* [Full changelog](https://github.com/openshift/coredns/compare/cc1194ea004f6b4bcb132fd1c6cebee68666d38f...e70f09779b20b28f85884c7b665f72f28694db00)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/c3b7d2f5d7b6be7353edffd811fcd55e8bf0af32)

* Switch to a new CI [#2444](https://github.com/openshift/cloud-provider-openstack/pull/2444)
* update tags to v1.26.1 [#2119](https://github.com/openshift/cloud-provider-openstack/pull/2119)
* update tags to v1.26.0 release [#2070](https://github.com/openshift/cloud-provider-openstack/pull/2070)
* update go version in GHA [#1989](https://github.com/openshift/cloud-provider-openstack/pull/1989)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/2f1d9f8ac6af4364d8118c874b0071d9e9f3ee65...c3b7d2f5d7b6be7353edffd811fcd55e8bf0af32)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/596a53c8fb79eddf85bad8deb504536adf228128)

* [OCPBUGS-26224](https://issues.redhat.com/browse/OCPBUGS-26224): Fix selector for manila-csi-driver-controller-metrics service [#224](https://github.com/openshift/csi-driver-manila-operator/pull/224)
* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#195](https://github.com/openshift/csi-driver-manila-operator/pull/195)
* [OCPBUGS-17160](https://issues.redhat.com/browse/OCPBUGS-17160): Don't cache OpenStack client [#196](https://github.com/openshift/csi-driver-manila-operator/pull/196)
* [OCPBUGS-9942](https://issues.redhat.com/browse/OCPBUGS-9942): Bump go.mongodb.org/mongo-driver to v1.5.1 [#174](https://github.com/openshift/csi-driver-manila-operator/pull/174)
* [STOR-1019](https://issues.redhat.com/browse/STOR-1019): Bump to k8s 1.26 libs for OCP 4.13 [#167](https://github.com/openshift/csi-driver-manila-operator/pull/167)
* [OCPBUGS-6301](https://issues.redhat.com/browse/OCPBUGS-6301): Address CVE-2022-41717 [#165](https://github.com/openshift/csi-driver-manila-operator/pull/165)
* [Bug 2106736](https://bugzilla.redhat.com/show_bug.cgi?id=2106736): Add multiplePVsSameID capability [#164](https://github.com/openshift/csi-driver-manila-operator/pull/164)
* [STOR-1078](https://issues.redhat.com/browse/STOR-1078): Add hostPaths necessary for SELinux mounts [#162](https://github.com/openshift/csi-driver-manila-operator/pull/162)
* Updating csi-driver-manila-operator images to be consistent with ART [#161](https://github.com/openshift/csi-driver-manila-operator/pull/161)
* [OCPBUGS-4347](https://issues.redhat.com/browse/OCPBUGS-4347): set TLS cipher suites in Kube RBAC sidecars [#160](https://github.com/openshift/csi-driver-manila-operator/pull/160)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/8dab53208f3a161af85eedd6835c2701d337d5f9...596a53c8fb79eddf85bad8deb504536adf228128)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/2b914c2161722ebf11f9275fa29e00a0b1306da1)

* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#108](https://github.com/openshift/csi-driver-nfs/pull/108)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#106](https://github.com/openshift/csi-driver-nfs/pull/106)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#104](https://github.com/openshift/csi-driver-nfs/pull/104)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#103](https://github.com/openshift/csi-driver-nfs/pull/103)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#102](https://github.com/openshift/csi-driver-nfs/pull/102)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#101](https://github.com/openshift/csi-driver-nfs/pull/101)
* Updating csi-driver-nfs images to be consistent with ART [#100](https://github.com/openshift/csi-driver-nfs/pull/100)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#99](https://github.com/openshift/csi-driver-nfs/pull/99)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#98](https://github.com/openshift/csi-driver-nfs/pull/98)
* Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#97](https://github.com/openshift/csi-driver-nfs/pull/97)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/d90992573acb3df6c7fbb6dbe1b215125d26fc34...2b914c2161722ebf11f9275fa29e00a0b1306da1)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/01bbb23b627835354f6177b4b44cfc50bd6d9a2e)

* [OCPBUGS-28953](https://issues.redhat.com/browse/OCPBUGS-28953): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#168](https://github.com/openshift/csi-driver-shared-resource/pull/168)
* [OCPBUGS-23116](https://issues.redhat.com/browse/OCPBUGS-23116): Should reference configmaps instead of secrets [#153](https://github.com/openshift/csi-driver-shared-resource/pull/153)
* [OCPBUGS-20719](https://issues.redhat.com/browse/OCPBUGS-20719): bump golang.org/x/net to v0.17.0 [#147](https://github.com/openshift/csi-driver-shared-resource/pull/147)
* [OCPBUGS-12484](https://issues.redhat.com/browse/OCPBUGS-12484), [OCPBUGS-12527](https://issues.redhat.com/browse/OCPBUGS-12527), [OCPBUGS-14505](https://issues.redhat.com/browse/OCPBUGS-14505): Mitigating CVE-2022-41723 [#140](https://github.com/openshift/csi-driver-shared-resource/pull/140)
* Adding test scenariuos for Reserved Name Prefix for SharedSecret/SharedConfigMaps [#127](https://github.com/openshift/csi-driver-shared-resource/pull/127)
* [OCPBUGS-7272](https://issues.redhat.com/browse/OCPBUGS-7272): add version file to must-gather output [#125](https://github.com/openshift/csi-driver-shared-resource/pull/125)
* [OCPBUGS-7417](https://issues.redhat.com/browse/OCPBUGS-7417): Fix k8s.io/dynamic-resource-allocation error [#126](https://github.com/openshift/csi-driver-shared-resource/pull/126)
* [BUILD-550](https://issues.redhat.com/browse/BUILD-550): bump(*) kubernetes 1.26 [#123](https://github.com/openshift/csi-driver-shared-resource/pull/123)
* [BUILD-407](https://issues.redhat.com/browse/BUILD-407): reserve share names starting with openshift part one (code, unit test) [#122](https://github.com/openshift/csi-driver-shared-resource/pull/122)
* Updating ose-csi-driver-shared-resource-webhook images to be consistent with ART [#119](https://github.com/openshift/csi-driver-shared-resource/pull/119)
* Updating ose-csi-driver-shared-resource-mustgather images to be consistent with ART [#121](https://github.com/openshift/csi-driver-shared-resource/pull/121)
* Updating ose-csi-driver-shared-resource images to be consistent with ART [#120](https://github.com/openshift/csi-driver-shared-resource/pull/120)
* Update to go1.19 [#118](https://github.com/openshift/csi-driver-shared-resource/pull/118)
* [BUILD-531](https://issues.redhat.com/browse/BUILD-531): Rebase to Kubernetes 1.25 [#114](https://github.com/openshift/csi-driver-shared-resource/pull/114)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/d054948fbc78ef04c7a55ac2a4b3ac0ed5648585...01bbb23b627835354f6177b4b44cfc50bd6d9a2e)


### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/bc169d2d8d1cd128770d2202c6cc00e5328e4e73)

* [OCPBUGS-28958](https://issues.redhat.com/browse/OCPBUGS-28958): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#104](https://github.com/openshift/csi-driver-shared-resource-operator/pull/104)
* [OCPBUGS-20806](https://issues.redhat.com/browse/OCPBUGS-20806): bump golang.org/x/net to v0.17.0 [#87](https://github.com/openshift/csi-driver-shared-resource-operator/pull/87)
* [OCPBUGS-11432](https://issues.redhat.com/browse/OCPBUGS-11432): add openshift workload annotation to driver daemonset [#74](https://github.com/openshift/csi-driver-shared-resource-operator/pull/74)
* [BUILD-570](https://issues.redhat.com/browse/BUILD-570): hooks to allow operator to deploy on hypershift [#71](https://github.com/openshift/csi-driver-shared-resource-operator/pull/71)
* [BUILD-407](https://issues.redhat.com/browse/BUILD-407): remove pod wrapper types from validating webhook config [#69](https://github.com/openshift/csi-driver-shared-resource-operator/pull/69)
* [BUILD-407](https://issues.redhat.com/browse/BUILD-407): switch reserver share config from configmap to envvar; update webhook config to monitor share creates [#68](https://github.com/openshift/csi-driver-shared-resource-operator/pull/68)
* [STOR-1019](https://issues.redhat.com/browse/STOR-1019): Bump to k8s 1.26 libs for OCP 4.13 [#66](https://github.com/openshift/csi-driver-shared-resource-operator/pull/66)
* Add a .ci-operator.yaml file [#67](https://github.com/openshift/csi-driver-shared-resource-operator/pull/67)
* bump library-go to get ApplyCSIDriver changes [#65](https://github.com/openshift/csi-driver-shared-resource-operator/pull/65)
* Updating ose-csi-driver-shared-resource-operator images to be consistent with ART [#64](https://github.com/openshift/csi-driver-shared-resource-operator/pull/64)
* update to go1.19 [#63](https://github.com/openshift/csi-driver-shared-resource-operator/pull/63)
* [STOR-829](https://issues.redhat.com/browse/STOR-829): set security.openshift.io/csi-ephemeral-volume-profile label [#59](https://github.com/openshift/csi-driver-shared-resource-operator/pull/59)
* [OCPBUGS-3358](https://issues.redhat.com/browse/OCPBUGS-3358): Revert "[build-407] Mount shared secret and configmap list config path into shared driver node" [#61](https://github.com/openshift/csi-driver-shared-resource-operator/pull/61)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/cc297702e6d2d4fb5a2b57a734c26d0d0a7bec1c...bc169d2d8d1cd128770d2202c6cc00e5328e4e73)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/d92908438817984fc47558fdaa03805d8c3b256c)

* [OCPBUGS-21161](https://issues.redhat.com/browse/OCPBUGS-21161): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#61](https://github.com/openshift/csi-external-attacher/pull/61)
* [OCPBUGS-16637](https://issues.redhat.com/browse/OCPBUGS-16637): [release-4.13] UPSTREAM: 415: fix: CVE-2022-41723 [#56](https://github.com/openshift/csi-external-attacher/pull/56)
* [STOR-1020](https://issues.redhat.com/browse/STOR-1020): Rebase `external-attacher` to v4.1.0 for OCP 4.13 [#49](https://github.com/openshift/csi-external-attacher/pull/49)
* Updating csi-attacher images to be consistent with ART [#48](https://github.com/openshift/csi-external-attacher/pull/48)
* Update to go v1.19 [#45](https://github.com/openshift/csi-external-attacher/pull/45)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/fac7b8fd905b4c68beadc2c968e6f981385463e8...d92908438817984fc47558fdaa03805d8c3b256c)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/0bf126b77a721ddaa4706fcb41f8b7be8d292492)

* [OCPBUGS-20759](https://issues.redhat.com/browse/OCPBUGS-20759): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#73](https://github.com/openshift/csi-external-provisioner/pull/73)
* [OCPBUGS-16609](https://issues.redhat.com/browse/OCPBUGS-16609): [release-4.13] UPSTREAM: 880: Bump golang.org/x/net [#67](https://github.com/openshift/csi-external-provisioner/pull/67)
* [STOR-1020](https://issues.redhat.com/browse/STOR-1020): Rebase `external-provisioner` to v3.4.0 for OCP 4.13 [#60](https://github.com/openshift/csi-external-provisioner/pull/60)
* Updating csi-provisioner images to be consistent with ART [#59](https://github.com/openshift/csi-external-provisioner/pull/59)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/3aa7c527732e288c71119ea3e78fac739dfbd438...0bf126b77a721ddaa4706fcb41f8b7be8d292492)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/e8036caff2482648a18c1ac776cf9d2474569d10)

* [OCPBUGS-20908](https://issues.redhat.com/browse/OCPBUGS-20908): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#148](https://github.com/openshift/csi-external-resizer/pull/148)
* [OCPBUGS-16639](https://issues.redhat.com/browse/OCPBUGS-16639): [release-4.13] UPSTREAM: 268: Bump golang.org/x/net [#143](https://github.com/openshift/csi-external-resizer/pull/143)
* [STOR-1020](https://issues.redhat.com/browse/STOR-1020): Rebase `external-resizer` to v1.7.0 for OCP 4.13 [#136](https://github.com/openshift/csi-external-resizer/pull/136)
* Updating ose-csi-external-resizer images to be consistent with ART [#135](https://github.com/openshift/csi-external-resizer/pull/135)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/5b066ba420bd74ec5327978d2731da989d57d4f2...e8036caff2482648a18c1ac776cf9d2474569d10)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/c8a7a097f68b37ad06a87a4b5c480daeab45be85)

* [OCPBUGS-29728](https://issues.redhat.com/browse/OCPBUGS-29728): cherry-pick:release-4.13: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch [#141](https://github.com/openshift/csi-external-snapshotter/pull/141)
* [OCPBUGS-21011](https://issues.redhat.com/browse/OCPBUGS-21011): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#110](https://github.com/openshift/csi-external-snapshotter/pull/110)
* [OCPBUGS-16638](https://issues.redhat.com/browse/OCPBUGS-16638): [release-4.13] UPSTREAM: 815: updated go module files [#103](https://github.com/openshift/csi-external-snapshotter/pull/103)
* [STOR-1020](https://issues.redhat.com/browse/STOR-1020): Rebase `external-snapshotter` to v6.2.1 for OCP 4.13 [#88](https://github.com/openshift/csi-external-snapshotter/pull/88)
* Updating csi-snapshot-validation-webhook images to be consistent with ART [#87](https://github.com/openshift/csi-external-snapshotter/pull/87)
* Updating ose-csi-external-snapshotter images to be consistent with ART [#86](https://github.com/openshift/csi-external-snapshotter/pull/86)
* Updating ose-csi-snapshot-controller images to be consistent with ART [#85](https://github.com/openshift/csi-external-snapshotter/pull/85)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/6fdb648f67640dbb8b5eed10a1eab9830e6f8cdf...c8a7a097f68b37ad06a87a4b5c480daeab45be85)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/3587db51b8a672a2d3be2ac48ea107e474f33402)

* [OCPBUGS-20636](https://issues.redhat.com/browse/OCPBUGS-20636): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#51](https://github.com/openshift/csi-livenessprobe/pull/51)
* [OCPBUGS-16600](https://issues.redhat.com/browse/OCPBUGS-16600): [release-4.13] UPSTREAM: 179: fix: CVE-2022-41723 [#46](https://github.com/openshift/csi-livenessprobe/pull/46)
* [STOR-1020](https://issues.redhat.com/browse/STOR-1020): Rebase `csi-livenessprobe` to v2.9.0 for OCP 4.13 [#37](https://github.com/openshift/csi-livenessprobe/pull/37)
* Updating csi-livenessprobe images to be consistent with ART [#36](https://github.com/openshift/csi-livenessprobe/pull/36)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/e6545e71597df1da4635c266eb8f499fc376d970...3587db51b8a672a2d3be2ac48ea107e474f33402)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/9ea90f34485500a525fcaad3d79ee82a41402d47)

* [OCPBUGS-20686](https://issues.redhat.com/browse/OCPBUGS-20686): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#53](https://github.com/openshift/csi-node-driver-registrar/pull/53)
* [OCPBUGS-16608](https://issues.redhat.com/browse/OCPBUGS-16608): [release-4.13] UPSTREAM: 284: Bump golang.org/x/net [#48](https://github.com/openshift/csi-node-driver-registrar/pull/48)
* [STOR-1020](https://issues.redhat.com/browse/STOR-1020): Rebase `csi-node-driver-registrar` to v2.7.0 for OCP 4.13 [#41](https://github.com/openshift/csi-node-driver-registrar/pull/41)
* Updating csi-node-driver-registrar images to be consistent with ART [#40](https://github.com/openshift/csi-node-driver-registrar/pull/40)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/c316b8963a0b0ff8d45f2b32c56de972d55bfd37...9ea90f34485500a525fcaad3d79ee82a41402d47)


### [docker-builder](https://github.com/openshift/builder/tree/2ec296b735a1dcb21e2ff098cda6ef1936a15b58)

* Replace 'coreydaley' with 'sayan-biswas' [#407](https://github.com/openshift/builder/pull/407)
* [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Add adambkaplan as approver [#405](https://github.com/openshift/builder/pull/405)
* [OCPBUGS-22468](https://issues.redhat.com/browse/OCPBUGS-22468): [release-4.13] Bump github.com/sigstore/rekor [#374](https://github.com/openshift/builder/pull/374)
* [OCPBUGS-23021](https://issues.redhat.com/browse/OCPBUGS-23021): Add -p flag to cp command to preserve timestamps [#371](https://github.com/openshift/builder/pull/371)
* [OCPBUGS-20709](https://issues.redhat.com/browse/OCPBUGS-20709): [release-4.13] Bump golang.org/x/net [#363](https://github.com/openshift/builder/pull/363)
* [OCPBUGS-15606](https://issues.redhat.com/browse/OCPBUGS-15606): Add the git-lfs package [#352](https://github.com/openshift/builder/pull/352)
* [OCPBUGS-10002](https://issues.redhat.com/browse/OCPBUGS-10002), [OCPBUGS-8159](https://issues.redhat.com/browse/OCPBUGS-8159), [OCPBUGS-8191](https://issues.redhat.com/browse/OCPBUGS-8191): Mitigate CVE-2023-26054 [#348](https://github.com/openshift/builder/pull/348)
* [OCPBUGS-11387](https://issues.redhat.com/browse/OCPBUGS-11387): bump(github.com/containers/common) to v0.51.2 [#336](https://github.com/openshift/builder/pull/336)
* Update CONTRIBUTING.md [#329](https://github.com/openshift/builder/pull/329)
* [OCPBUGS-7412](https://issues.redhat.com/browse/OCPBUGS-7412): Fix k8s.io/dynamic-resource-allocation error [#328](https://github.com/openshift/builder/pull/328)
* Modified clusterversion patch command [#327](https://github.com/openshift/builder/pull/327)
* [BUILD-549](https://issues.redhat.com/browse/BUILD-549): bump(*) kubernetes-1.26 [#326](https://github.com/openshift/builder/pull/326)
* [OCPBUGS-597](https://issues.redhat.com/browse/OCPBUGS-597): bump(github.com/containers/buildah) to v1.29.0 [#307](https://github.com/openshift/builder/pull/307)
* [OCPBUGS-6014](https://issues.redhat.com/browse/OCPBUGS-6014): manage-dockerfile: use the original form of HEALTHCHECK [#323](https://github.com/openshift/builder/pull/323)
* Updating openshift-enterprise-builder images to be consistent with ART [#319](https://github.com/openshift/builder/pull/319)
* Update to go1.19 [#320](https://github.com/openshift/builder/pull/320)
* [Full changelog](https://github.com/openshift/builder/compare/3f240815de70301cbce65bf6b2f85e67eaa3573c...2ec296b735a1dcb21e2ff098cda6ef1936a15b58)


### [docker-registry](https://github.com/openshift/image-registry/tree/47a15ac8b7233bb1de44c1364bbd787de2edaaf0)

* [OCPBUGS-19655](https://issues.redhat.com/browse/OCPBUGS-19655): increase rest.Config QPS and Burst [#383](https://github.com/openshift/image-registry/pull/383)
* [OCPBUGS-18321](https://issues.redhat.com/browse/OCPBUGS-18321): bump docker-distribution [#376](https://github.com/openshift/image-registry/pull/376)
* [OCPBUGS-6809](https://issues.redhat.com/browse/OCPBUGS-6809): bump openshift/docker-distribution [#361](https://github.com/openshift/image-registry/pull/361)
* [OCPBUGS-6621](https://issues.redhat.com/browse/OCPBUGS-6621): bump aws-sdk-go [#360](https://github.com/openshift/image-registry/pull/360)
* [IR-341](https://issues.redhat.com/browse/IR-341): bump openshift/api [#359](https://github.com/openshift/image-registry/pull/359)
* [IR-270](https://issues.redhat.com/browse/IR-270): support push by digest [#355](https://github.com/openshift/image-registry/pull/355)
* [IR-269](https://issues.redhat.com/browse/IR-269): Enable pull-through for manifest lists [#347](https://github.com/openshift/image-registry/pull/347)
* [IR-341](https://issues.redhat.com/browse/IR-341): bump openshift/api [#358](https://github.com/openshift/image-registry/pull/358)
* Updating openshift-enterprise-registry images to be consistent with ART [#356](https://github.com/openshift/image-registry/pull/356)
* [IR-314](https://issues.redhat.com/browse/IR-314): Use Distribution 2.8.1 [#354](https://github.com/openshift/image-registry/pull/354)
* [IR-264](https://issues.redhat.com/browse/IR-264): add basic tests for hard pruner [#353](https://github.com/openshift/image-registry/pull/353)
* [IR-268](https://issues.redhat.com/browse/IR-268): Support pull through with Manifest Lists [#345](https://github.com/openshift/image-registry/pull/345)
* add myself to OWNERS [#352](https://github.com/openshift/image-registry/pull/352)
* [Full changelog](https://github.com/openshift/image-registry/compare/9e75355ca282cf5abac5595585a4b089e6a95e6f...47a15ac8b7233bb1de44c1364bbd787de2edaaf0)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/d719bdcfa49bc18b729117ee513a86a1ddecb63a)

* Upgrade glibc, use dnf (#130) [#130](https://github.com/openshift/driver-toolkit/pull/130)
* Fixing the regexp used to get the correct GCC version. (#129) [#129](https://github.com/openshift/driver-toolkit/pull/129)
* Updating the docs to use `ubi9` instead of `ubi8`. (#128) [#128](https://github.com/openshift/driver-toolkit/pull/128)
* Moving to `rhel9` base image. (#125) [#125](https://github.com/openshift/driver-toolkit/pull/125)
* Remove abi since it was not in 9.2 rpms (#124) [#124](https://github.com/openshift/driver-toolkit/pull/124)
* Fixing `check-commits-count` to work on other branches than `master`. (#118) [#118](https://github.com/openshift/driver-toolkit/pull/118)
* Adding rpm-build to the Dockerfile (#116) [#116](https://github.com/openshift/driver-toolkit/pull/116)
* Adding a missing space to README.md. (#115) [#115](https://github.com/openshift/driver-toolkit/pull/115)
* Updating `README.md`. (#114) [#114](https://github.com/openshift/driver-toolkit/pull/114)
* Updating the README.md. (#112) [#112](https://github.com/openshift/driver-toolkit/pull/112)
* Updating driver-toolkit images to be consistent with ART (#111) [#111](https://github.com/openshift/driver-toolkit/pull/111)
* Adding documentation regarding the driver-toolkit imagestream. (#110) [#110](https://github.com/openshift/driver-toolkit/pull/110)
* Adding kernel-rpm-macros to the Dockerfile. (#106) [#106](https://github.com/openshift/driver-toolkit/pull/106)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/6e5c04c066a428047d1755478cf88b290d32ad8f...d719bdcfa49bc18b729117ee513a86a1ddecb63a)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/dfe03737f1562e81aa09101e4a48f039245bd339)

* [OCPBUGS-11648](https://issues.redhat.com/browse/OCPBUGS-11648): update go-yaml to v2.4.0 [#68](https://github.com/openshift/egress-router-cni/pull/68)
* Add rhel9 binary [#71](https://github.com/openshift/egress-router-cni/pull/71)
* Updating egress-router-cni images to be consistent with ART [#65](https://github.com/openshift/egress-router-cni/pull/65)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/a92e415791b531ca15ec84953550b71bd3534566...dfe03737f1562e81aa09101e4a48f039245bd339)


### [etcd](https://github.com/openshift/etcd/tree/a6b7ad436ea8139436c6e9a456fdacd09ec7f054)

* [OCPBUGS-32920](https://issues.redhat.com/browse/OCPBUGS-32920): Revert "Merge pull request #262 from Elbehery/rebase-etcd-3.5.13-open… [#266](https://github.com/openshift/etcd/pull/266)
* [OCPBUGS-31653](https://issues.redhat.com/browse/OCPBUGS-31653): Rebase etcd 3.5.13 openshift 4.13 [#262](https://github.com/openshift/etcd/pull/262)
* [ETCD-537](https://issues.redhat.com/browse/ETCD-537): Revert "bump build root go1.20" [#263](https://github.com/openshift/etcd/pull/263)
* [OCPBUGS-28734](https://issues.redhat.com/browse/OCPBUGS-28734): Rebase etcd 3.5.12 openshift 4.13 [#245](https://github.com/openshift/etcd/pull/245)
* [ETCD-537](https://issues.redhat.com/browse/ETCD-537): bump build root go1.20 [#252](https://github.com/openshift/etcd/pull/252)
* [OCPBUGS-26925](https://issues.redhat.com/browse/OCPBUGS-26925): Rebase etcd 3.5.11 openshift 4.13 [#239](https://github.com/openshift/etcd/pull/239)
* [OCPBUGS-22697](https://issues.redhat.com/browse/OCPBUGS-22697): [4.13] Carrying fixes for CVE-2023-44487 [#225](https://github.com/openshift/etcd/pull/225)
* [OCPBUGS-18497](https://issues.redhat.com/browse/OCPBUGS-18497): Updating ose-etcd images to be consistent with ART [#214](https://github.com/openshift/etcd/pull/214)
* [OCPBUGS-18398](https://issues.redhat.com/browse/OCPBUGS-18398): UPSTREAM <carry>: update build images to rhel9 [#212](https://github.com/openshift/etcd/pull/212)
* [OCPBUGS-15859](https://issues.redhat.com/browse/OCPBUGS-15859): [4.13] Rebase openshift/etcd to 3.5.9 [#204](https://github.com/openshift/etcd/pull/204)
* Update owners [#177](https://github.com/openshift/etcd/pull/177)
* Updating ose-etcd images to be consistent with ART [#181](https://github.com/openshift/etcd/pull/181)
* [OCPBUGS-5458](https://issues.redhat.com/browse/OCPBUGS-5458): UPSTREAM:<carry>: etcdserver: process the scenaro of the last WAL rec… [#175](https://github.com/openshift/etcd/pull/175)
* [OCPBUGS-3098](https://issues.redhat.com/browse/OCPBUGS-3098): Rebase openshift/etcd 4.13 onto v3.5.6 [#168](https://github.com/openshift/etcd/pull/168)
* Bug OCPBUGS-3098: UPSTREAM: <carry>: server/etcdmain: add configurable cipher list to gRPC proxy listener [#162](https://github.com/openshift/etcd/pull/162)
* [Full changelog](https://github.com/openshift/etcd/compare/bb82e891abeaddd57e1a07775874d71f2ddd9e85...a6b7ad436ea8139436c6e9a456fdacd09ec7f054)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/507fea9800dc63da95ce551d2fb03219d0b0597a)

* [OCPBUGS-21303](https://issues.redhat.com/browse/OCPBUGS-21303): Bump golang.org/x/net to v0.18.0 [#43](https://github.com/openshift/cloud-provider-gcp/pull/43)
* [OCPBUGS-12603](https://issues.redhat.com/browse/OCPBUGS-12603): Bump x/net package to v0.10.0 [#32](https://github.com/openshift/cloud-provider-gcp/pull/32)
* Update OWNERS [#27](https://github.com/openshift/cloud-provider-gcp/pull/27)
* Resolve dynamic resource allocation unknown revision [#26](https://github.com/openshift/cloud-provider-gcp/pull/26)
* [OCPBUGS-6406](https://issues.redhat.com/browse/OCPBUGS-6406): Merge https://github.com/kubernetes/cloud-provider-gcp:master into master [#18](https://github.com/openshift/cloud-provider-gcp/pull/18)
* Updating ose-gcp-cloud-controller-manager images to be consistent with ART [#24](https://github.com/openshift/cloud-provider-gcp/pull/24)
* Update OWNERS [#25](https://github.com/openshift/cloud-provider-gcp/pull/25)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/8a84952ec7ff1aa001f885b10ec583540f298c73...507fea9800dc63da95ce551d2fb03219d0b0597a)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/b8a2772574aacf16a998ff7c7ba24000eff60d07)

* [OCPBUGS-21398](https://issues.redhat.com/browse/OCPBUGS-21398): Bump golang.org/x/net to v0.17.0 [#204](https://github.com/openshift/cluster-api-provider-gcp/pull/204)
* [OCPBUGS-12604](https://issues.redhat.com/browse/OCPBUGS-12604): Bump x/net package to v0.10.0 [#196](https://github.com/openshift/cluster-api-provider-gcp/pull/196)
* [OCPBUGS-8481](https://issues.redhat.com/browse/OCPBUGS-8481): [release-4.13] Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:release-1.2 (1d8cf4c) into release-4.13 [#192](https://github.com/openshift/cluster-api-provider-gcp/pull/192)
* Update OWNERS [#190](https://github.com/openshift/cluster-api-provider-gcp/pull/190)
* Updating ose-gcp-cluster-api-controllers images to be consistent with ART [#187](https://github.com/openshift/cluster-api-provider-gcp/pull/187)
* Update OWNERS [#188](https://github.com/openshift/cluster-api-provider-gcp/pull/188)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/e00019faa4bd74f70826344a8cc085ba13768422...b8a2772574aacf16a998ff7c7ba24000eff60d07)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/e53a397d838137a37895fe668cba4857a82e7da2)

* [OCPBUGS-24563](https://issues.redhat.com/browse/OCPBUGS-24563): Reduce metrics cardinality. [#74](https://github.com/openshift/machine-api-provider-gcp/pull/74)
* [OCPBUGS-20851](https://issues.redhat.com/browse/OCPBUGS-20851): Bump x/net package to v0.18.0 [#68](https://github.com/openshift/machine-api-provider-gcp/pull/68)
* [OCPBUGS-13046](https://issues.redhat.com/browse/OCPBUGS-13046): Bump x/net to v0.7.0 [#50](https://github.com/openshift/machine-api-provider-gcp/pull/50)
* [OCPBUGS-7366](https://issues.redhat.com/browse/OCPBUGS-7366): New machine stuck in provisioning on VPC [#43](https://github.com/openshift/machine-api-provider-gcp/pull/43)
* [OCPCLOUD-1812](https://issues.redhat.com/browse/OCPCLOUD-1812): Update tooling & k8s 1.26 [#40](https://github.com/openshift/machine-api-provider-gcp/pull/40)
* Update OWNERS [#42](https://github.com/openshift/machine-api-provider-gcp/pull/42)
* Add support for confidential compute [#38](https://github.com/openshift/machine-api-provider-gcp/pull/38)
* [OCPBUGS-6431](https://issues.redhat.com/browse/OCPBUGS-6431): Bump golang.org/x/net to 0.5.0 [#39](https://github.com/openshift/machine-api-provider-gcp/pull/39)
* [MGMT-12838](https://issues.redhat.com/browse/MGMT-12838): Add Shielded VMs implementation [#33](https://github.com/openshift/machine-api-provider-gcp/pull/33)
* Updating ose-machine-api-provider-gcp images to be consistent with ART [#31](https://github.com/openshift/machine-api-provider-gcp/pull/31)
* Update OWNERS [#35](https://github.com/openshift/machine-api-provider-gcp/pull/35)
* [OCPBUGS-4574](https://issues.redhat.com/browse/OCPBUGS-4574): Machines with invalid zones stuck in no phase [#32](https://github.com/openshift/machine-api-provider-gcp/pull/32)
* [OCPCLOUD-1804](https://issues.redhat.com/browse/OCPCLOUD-1804): Port to ginkgo v2 [#34](https://github.com/openshift/machine-api-provider-gcp/pull/34)
* [OCPBUGS-3904](https://issues.redhat.com/browse/OCPBUGS-3904): Register unknown instance groups [#22](https://github.com/openshift/machine-api-provider-gcp/pull/22)
* [OCPBUGS-860](https://issues.redhat.com/browse/OCPBUGS-860): Set sync period for Machine controller [#24](https://github.com/openshift/machine-api-provider-gcp/pull/24)
* [OCPBUGS-1557](https://issues.redhat.com/browse/OCPBUGS-1557): refactor restartPolicyToBool function [#21](https://github.com/openshift/machine-api-provider-gcp/pull/21)
* [OCPCLOUD-1755](https://issues.redhat.com/browse/OCPCLOUD-1755): Register control plane machines to instance group [#20](https://github.com/openshift/machine-api-provider-gcp/pull/20)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/d6d8c1cc5b58ff7cf311bcb72dbeb00eb704511a...e53a397d838137a37895fe668cba4857a82e7da2)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/81e6074605854246cdab8425a7289ad83169571a)

* [OCPBUGS-20735](https://issues.redhat.com/browse/OCPBUGS-20735): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#46](https://github.com/openshift/gcp-pd-csi-driver/pull/46)
* [OCPBUGS-16331](https://issues.redhat.com/browse/OCPBUGS-16331): 4.13: UPSTREAM: 1169: Fix CVE-2022-41723 [#38](https://github.com/openshift/gcp-pd-csi-driver/pull/38)
* [Bug 1877261](https://bugzilla.redhat.com/show_bug.cgi?id=1877261): UPSTREAM: 973: filesystem is not resized when restoring [#32](https://github.com/openshift/gcp-pd-csi-driver/pull/32)
* [OCPBUGS-6411](https://issues.redhat.com/browse/OCPBUGS-6411): Rebase to v1.8.2 for OCP 4.13 [#31](https://github.com/openshift/gcp-pd-csi-driver/pull/31)
* Updating ose-gcp-pd-csi-driver images to be consistent with ART [#30](https://github.com/openshift/gcp-pd-csi-driver/pull/30)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/5dcfd6755ea1eff7dcf1c0c831b048eda1b41736...81e6074605854246cdab8425a7289ad83169571a)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/08c561b8292b4a5de3d5bc553a3e463b1f93ec0c)

* [OCPBUGS-20827](https://issues.redhat.com/browse/OCPBUGS-20827): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#88](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/88)
* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#80](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/80)
* [STOR-874](https://issues.redhat.com/browse/STOR-874): Implement custom keys in GCP PD CSI driver operator [#62](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/62)
* [STOR-1019](https://issues.redhat.com/browse/STOR-1019): Bump to k8s 1.26 libs for OCP 4.13 [#61](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/61)
* [STOR-947](https://issues.redhat.com/browse/STOR-947): support disabling default StorageClass via ClusterCSIDriver [#58](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/58)
* [Bug 2106736](https://bugzilla.redhat.com/show_bug.cgi?id=2106736): Add multiplePVsSameID capability [#60](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/60)
* [STOR-1078](https://issues.redhat.com/browse/STOR-1078): Add hostPaths necessary for SELinux mounts [#59](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/59)
* Updating ose-gcp-pd-csi-driver-operator images to be consistent with ART [#57](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/57)
* [OCPBUGS-4347](https://issues.redhat.com/browse/OCPBUGS-4347): set TLS cipher suites in Kube RBAC sidecars [#56](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/56)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/30e97ba511547edb057071b63498e1ca4c68ec16...08c561b8292b4a5de3d5bc553a3e463b1f93ec0c)


### [haproxy-router](https://github.com/openshift/router/tree/8b39926371f49a623ad814851533ab4d87f3af1a)

* [OCPBUGS-43095](https://issues.redhat.com/browse/OCPBUGS-43095): add duplicate_te_header_total metric [#626](https://github.com/openshift/router/pull/626)
* [OCPBUGS-34673](https://issues.redhat.com/browse/OCPBUGS-34673): Properly handle rewrite-target annotation [#608](https://github.com/openshift/router/pull/608)
* [OCPBUGS-33911](https://issues.redhat.com/browse/OCPBUGS-33911): Reject routes with MD5 certs [#600](https://github.com/openshift/router/pull/600)
* [OCPBUGS-33448](https://issues.redhat.com/browse/OCPBUGS-33448): Count active services before setting weight to 1 [#594](https://github.com/openshift/router/pull/594)
* [OCPBUGS-33280](https://issues.redhat.com/browse/OCPBUGS-33280): Route 'haproxy.router.openshift.io/timeout' value is not validated [#591](https://github.com/openshift/router/pull/591)
* [OCPBUGS-21117](https://issues.redhat.com/browse/OCPBUGS-21117): Bump golang.org/x/net to v0.17.0 to address CVE-2023-39325 [#531](https://github.com/openshift/router/pull/531)
* [OCPBUGS-17762](https://issues.redhat.com/browse/OCPBUGS-17762): haproxy/template: mitigate CVE-2023-40225 [#506](https://github.com/openshift/router/pull/506)
* [OCPBUGS-17107](https://issues.redhat.com/browse/OCPBUGS-17107): properly handle weight=0 [#501](https://github.com/openshift/router/pull/501)
* [OCPBUGS-13964](https://issues.redhat.com/browse/OCPBUGS-13964), [OCPBUGS-13967](https://issues.redhat.com/browse/OCPBUGS-13967): Handle mTLS CRLs, and fix accidental CRL duplication [#485](https://github.com/openshift/router/pull/485)
* [OCPBUGS-10519](https://issues.redhat.com/browse/OCPBUGS-10519): Revert "NE-1115: Update haproxy container builds to use haproxy 2.6" [#461](https://github.com/openshift/router/pull/461)
* [OCPBUGS-7542](https://issues.redhat.com/browse/OCPBUGS-7542): Bump vendored k8s libraries to 1.26 [#451](https://github.com/openshift/router/pull/451)
* [OCPBUGS-6336](https://issues.redhat.com/browse/OCPBUGS-6336): Address CVE-2022-41717 [#445](https://github.com/openshift/router/pull/445)
* [OCPBUGS-5073](https://issues.redhat.com/browse/OCPBUGS-5073): Count endpoints per port for weights and enabling active health checks [#439](https://github.com/openshift/router/pull/439)
* Updating ose-haproxy-router-base images to be consistent with ART [#431](https://github.com/openshift/router/pull/431)
* Updating openshift-enterprise-haproxy-router images to be consistent with ART [#432](https://github.com/openshift/router/pull/432)
* [NE-1115](https://issues.redhat.com/browse/NE-1115): Update haproxy container builds to use haproxy 2.6 [#430](https://github.com/openshift/router/pull/430)
* [Full changelog](https://github.com/openshift/router/compare/6a092687d2ed1b709403e3bdebc2f069c0ce4a01...8b39926371f49a623ad814851533ab4d87f3af1a)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/53fd427d5826f19785655e0f8c33642009e0a12b)

* [OCPBUGS-41678](https://issues.redhat.com/browse/OCPBUGS-41678): mount-utils: treat syscall.ENODEV as corrupted mount [#2083](https://github.com/openshift/kubernetes/pull/2083)
* [OCPBUGS-37280](https://issues.redhat.com/browse/OCPBUGS-37280): UPSTREAM: 126104: Add funcs in pkg/filesystem/util that can actually … [#2045](https://github.com/openshift/kubernetes/pull/2045)
* [OCPBUGS-28660](https://issues.redhat.com/browse/OCPBUGS-28660): UPSTREAM: <carry>: kubelet/cm: use MkdirAll when creating cpuset to ignore file exists error [#1875](https://github.com/openshift/kubernetes/pull/1875)
* UPSTREAM: <drop>: Bump golang.org/x/net to v0.23.0 [#1938](https://github.com/openshift/kubernetes/pull/1938)
* [OCPBUGS-31505](https://issues.redhat.com/browse/OCPBUGS-31505): Update to kubernetes 1.26.15 [#1930](https://github.com/openshift/kubernetes/pull/1930)
* Address CVE [#14](https://github.com/openshift/kubernetes/pull/14)
* [OCPBUGS-29663](https://issues.redhat.com/browse/OCPBUGS-29663): Update to kubernetes 1.26.14 [#1889](https://github.com/openshift/kubernetes/pull/1889)
* [OCPBUGS-12210](https://issues.redhat.com/browse/OCPBUGS-12210): Prevent partially filled HPA behaviors from crashing kube-controller-manager [#1876](https://github.com/openshift/kubernetes/pull/1876)
* [OCPBUGS-27370](https://issues.redhat.com/browse/OCPBUGS-27370): Update to kubernetes 1.26.13 [#1859](https://github.com/openshift/kubernetes/pull/1859)
* [OCPBUGS-25814](https://issues.redhat.com/browse/OCPBUGS-25814): Fix device uncertain errors on reboot - 4.13 [#1831](https://github.com/openshift/kubernetes/pull/1831)
* [OCPBUGS-25988](https://issues.redhat.com/browse/OCPBUGS-25988): Update to kubernetes 1.26.12 [#1839](https://github.com/openshift/kubernetes/pull/1839)
* [OCPBUGS-25767](https://issues.redhat.com/browse/OCPBUGS-25767): legacy-cloud-providers: prevent index out-of-range in getNextUnitNumber [#1834](https://github.com/openshift/kubernetes/pull/1834)
* [OCPBUGS-23521](https://issues.redhat.com/browse/OCPBUGS-23521): UPSTREAM: <carry>: support for both icsp and idms objects [#1798](https://github.com/openshift/kubernetes/pull/1798)
* [OCPBUGS-23567](https://issues.redhat.com/browse/OCPBUGS-23567): Update to kubernetes 1.26.11 [#1809](https://github.com/openshift/kubernetes/pull/1809)
* [OCPBUGS-18829](https://issues.redhat.com/browse/OCPBUGS-18829): cm: reorder setting of sched_load_balance for sandbox slice [#1696](https://github.com/openshift/kubernetes/pull/1696)
* [OCPBUGS-23287](https://issues.redhat.com/browse/OCPBUGS-23287): UPSTREAM: 121881: Use golang library instead of mklink [#1802](https://github.com/openshift/kubernetes/pull/1802)
* openshift-hack: Fix sporadic 141 errors in build-rpms [#1773](https://github.com/openshift/kubernetes/pull/1773)
* [OCPBUGS-20114](https://issues.redhat.com/browse/OCPBUGS-20114): UPSTREAM: <carry>: Do not allow nodes to set forbidden openshift labels [#1746](https://github.com/openshift/kubernetes/pull/1746)
* [OCPBUGS-21063](https://issues.redhat.com/browse/OCPBUGS-21063): [release-4.13] UPSTREAM: 121126: [1.26][CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 [#1759](https://github.com/openshift/kubernetes/pull/1759)
* [OCPBUGS-19885](https://issues.redhat.com/browse/OCPBUGS-19885): UPSTREAM: 120789: change rolling update logic to exclude sunsetting nodes [#1725](https://github.com/openshift/kubernetes/pull/1725)
* [OCPBUGS-18287](https://issues.redhat.com/browse/OCPBUGS-18287), [OCPBUGS-19480](https://issues.redhat.com/browse/OCPBUGS-19480): Update to Kubernetes 1.26.9 [#1715](https://github.com/openshift/kubernetes/pull/1715)
* [OCPBUGS-18677](https://issues.redhat.com/browse/OCPBUGS-18677): UPSTREAM: <carry>: Force using host go always and use host libriaries [#1689](https://github.com/openshift/kubernetes/pull/1689)
* [OCPBUGS-17187](https://issues.redhat.com/browse/OCPBUGS-17187): Update to Kubernetes 1.26.7 [#1649](https://github.com/openshift/kubernetes/pull/1649)
* [OCPBUGS-17145](https://issues.redhat.com/browse/OCPBUGS-17145): Increase service idle max timeout to 100 minutes [#1657](https://github.com/openshift/kubernetes/pull/1657)
* [OCPBUGS-15866](https://issues.redhat.com/browse/OCPBUGS-15866): remove readiness check for cache exclusion [#1625](https://github.com/openshift/kubernetes/pull/1625)
* [OCPBUGS-15866](https://issues.redhat.com/browse/OCPBUGS-15866): UPSTREAM: <drop>: hack/update-vendor.sh [#1637](https://github.com/openshift/kubernetes/pull/1637)
* [OCPBUGS-15246](https://issues.redhat.com/browse/OCPBUGS-15246): Bump to k8s 1.26.6 [#1610](https://github.com/openshift/kubernetes/pull/1610)
* [OCPBUGS-8738](https://issues.redhat.com/browse/OCPBUGS-8738): bump apiserver-lib-go [#1611](https://github.com/openshift/kubernetes/pull/1611)
* [OCPBUGS-14589](https://issues.redhat.com/browse/OCPBUGS-14589): [release-4.13] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 [#1596](https://github.com/openshift/kubernetes/pull/1596)
* [OCPBUGS-13747](https://issues.redhat.com/browse/OCPBUGS-13747): 4.13: kubelet/cm: disable cpu load balancing on slices when using static cpu manager policy [#1580](https://github.com/openshift/kubernetes/pull/1580)
* [OCPBUGS-14048](https://issues.redhat.com/browse/OCPBUGS-14048): Bump to k8s 1.26.5 [#1586](https://github.com/openshift/kubernetes/pull/1586)
* [OCPBUGS-11146](https://issues.redhat.com/browse/OCPBUGS-11146): Enable CSI migration configuration via env vars [#1514](https://github.com/openshift/kubernetes/pull/1514)
* [OCPBUGS-11823](https://issues.redhat.com/browse/OCPBUGS-11823): UPSTREAM: 117311: kube-aggregator: correctly use client-go TLS cache with custom dialer [#1549](https://github.com/openshift/kubernetes/pull/1549)
* [OCPBUGS-7268](https://issues.redhat.com/browse/OCPBUGS-7268): Extractor more fixes 4.13 [#1544](https://github.com/openshift/kubernetes/pull/1544)
* UPSTREAM: <carry>: OCPNODE-1548,OCPNODE-1584: disable load balancing on created cgroups when managed is enabled [#1543](https://github.com/openshift/kubernetes/pull/1543)
* [OCPBUGS-11669](https://issues.redhat.com/browse/OCPBUGS-11669): Bump to k8s 1.26.3 [#1540](https://github.com/openshift/kubernetes/pull/1540)
* [OCPBUGS-10432](https://issues.redhat.com/browse/OCPBUGS-10432): CSI Inline Volume admission plugin does not log object name correctly [#1515](https://github.com/openshift/kubernetes/pull/1515)
* [OCPBUGS-6201](https://issues.redhat.com/browse/OCPBUGS-6201): Updating openshift-enterprise-pod images to be consistent with ART [#1435](https://github.com/openshift/kubernetes/pull/1435)
* [OCPBUGS-7359](https://issues.redhat.com/browse/OCPBUGS-7359): Azure: move to kube-proxy LB probes, don't detach masters when unready [#1506](https://github.com/openshift/kubernetes/pull/1506)
* [OCPBUGS-10515](https://issues.redhat.com/browse/OCPBUGS-10515): UPSTREAM: 115328: apiserver: annotate early (server not ready) and late (during shutdown) requests [#1517](https://github.com/openshift/kubernetes/pull/1517)
* [OCPBUGS-8412](https://issues.redhat.com/browse/OCPBUGS-8412): Fix mounted volume expansion tests [#1502](https://github.com/openshift/kubernetes/pull/1502)
* [OCPBUGS-8308](https://issues.redhat.com/browse/OCPBUGS-8308): Bump to k8s 1.26.2 [#1495](https://github.com/openshift/kubernetes/pull/1495)
* [AUTH-336](https://issues.redhat.com/browse/AUTH-336): UPSTREAM: <carry>: PSa metrics: unset ocp_namespace on non-platform n… [#1489](https://github.com/openshift/kubernetes/pull/1489)
* Bump to k8s 1.26.1 [#1479](https://github.com/openshift/kubernetes/pull/1479)
* [OCPBUGS-7267](https://issues.redhat.com/browse/OCPBUGS-7267): add SeccompProfile to Pod and Container accessors/mutators [#1490](https://github.com/openshift/kubernetes/pull/1490)
* UPSTREAM: <drop>: OCPBUGS-5991: Kube APIServer panics in admission controller [#1488](https://github.com/openshift/kubernetes/pull/1488)
* [CNF-5901](https://issues.redhat.com/browse/CNF-5901): admission hook change for workload partition on all clusters [#1312](https://github.com/openshift/kubernetes/pull/1312)
* UPSTREAM: 113799: tests: network: Prefer internal IPs first [#1446](https://github.com/openshift/kubernetes/pull/1446)
* UPSTREAM: 115863: Remove global framework variable [#1480](https://github.com/openshift/kubernetes/pull/1480)
* UPSTREAM: <carry>: add new approvers [#1458](https://github.com/openshift/kubernetes/pull/1458)
* [OCPBUGS-7555](https://issues.redhat.com/browse/OCPBUGS-7555): UPSTREAM: <carry>: add default kubelet sysctls within rpm [#1475](https://github.com/openshift/kubernetes/pull/1475)
* [AUTH-336](https://issues.redhat.com/browse/AUTH-336): UPSTREAM: <carry>: PSa metrics: log platform namespaces in audit denies [#1454](https://github.com/openshift/kubernetes/pull/1454)
* add icsp validation: reject one of icsp idms.itms resources [#1310](https://github.com/openshift/kubernetes/pull/1310)
* UPSTREAM: 114027: make GetSubnetPrefix IP family agnostic [#1469](https://github.com/openshift/kubernetes/pull/1469)
* disable tests dependent on StackDriver [#1466](https://github.com/openshift/kubernetes/pull/1466)
* UPSTREAM: 115484: Don't explicitly set image version in tests [#1465](https://github.com/openshift/kubernetes/pull/1465)
* UPSTREAM: 114994: kubelet: fix readiness probes with pod termination [#1450](https://github.com/openshift/kubernetes/pull/1450)
* [OCPBUGS-6030](https://issues.redhat.com/browse/OCPBUGS-6030): Rebase onto kube v1.26 [#1432](https://github.com/openshift/kubernetes/pull/1432)
* Fix the mutated PodSpec extractor for warns if no SCC matches [#1453](https://github.com/openshift/kubernetes/pull/1453)
* [OCPBUGS-4900](https://issues.redhat.com/browse/OCPBUGS-4900): remove in-tree volume limits test now that CSIMigration is GA [#1448](https://github.com/openshift/kubernetes/pull/1448)
* [OCPBUGS-4658](https://issues.redhat.com/browse/OCPBUGS-4658): Apply shared defaulters to CRD-based routes. [#1440](https://github.com/openshift/kubernetes/pull/1440)
* [OCPBUGS-4657](https://issues.redhat.com/browse/OCPBUGS-4657): Bump library-go. [#1431](https://github.com/openshift/kubernetes/pull/1431)
* UPSTREAM: <carry>: make the PSA workload admission warnings honor the… [#1393](https://github.com/openshift/kubernetes/pull/1393)
* UPSTREAM: <carry>: Ensure balanced brackets in annotated test names [#1410](https://github.com/openshift/kubernetes/pull/1410)
* [STOR-829](https://issues.redhat.com/browse/STOR-829): Add CSIInlineVolumeSecurity admission plugin [#1384](https://github.com/openshift/kubernetes/pull/1384)
* [OCPBUGS-3501](https://issues.redhat.com/browse/OCPBUGS-3501): UPSTREAM: <carry>: Add host assignment plugin for CRD-based routes. [#1419](https://github.com/openshift/kubernetes/pull/1419)
* UPSTREAM: <drop>: Bump openshift/api. [#1424](https://github.com/openshift/kubernetes/pull/1424)
* [OCPBUGS-3499](https://issues.redhat.com/browse/OCPBUGS-3499): UPSTREAM: <carry>: Add validation plugin for CRD-based route parity. [#1416](https://github.com/openshift/kubernetes/pull/1416)
* [Bug 2117374](https://bugzilla.redhat.com/show_bug.cgi?id=2117374): UPSTREAM: <drop>: update apiserver-library-go to add message about wo… [#1395](https://github.com/openshift/kubernetes/pull/1395)
* Bug OCPBUGS-2991: Disable expansion in SC, if driver does not support it [#1402](https://github.com/openshift/kubernetes/pull/1402)
* [OCPBUGS-3093](https://issues.redhat.com/browse/OCPBUGS-3093): Tag AWS security groups at creation [#1411](https://github.com/openshift/kubernetes/pull/1411)
* UPSTREAM: <drop>: Bump library-go. [#1406](https://github.com/openshift/kubernetes/pull/1406)
* [OCPBUGS-2946](https://issues.redhat.com/browse/OCPBUGS-2946): Revert: 1340: tag AWS security group at creation [#1401](https://github.com/openshift/kubernetes/pull/1401)
* [OCPBUGS-3084](https://issues.redhat.com/browse/OCPBUGS-3084): UPSTREAM: 113481: kubelet: fix pod log line corruption when using timestamps and long lines [#1404](https://github.com/openshift/kubernetes/pull/1404)
* [Full changelog](https://github.com/openshift/kubernetes/compare/1eb868227a9b8ed70f88be1681321405094d7adf...53fd427d5826f19785655e0f8c33642009e0a12b)


### [hypershift](https://github.com/openshift/hypershift/tree/6daddeedbbd201813c51c0b978127884b96e4402)

* [OCPBUGS-39184](https://issues.redhat.com/browse/OCPBUGS-39184): fix: bump github.com/IBM/go-sdk-core/v5 [#4627](https://github.com/openshift/hypershift/pull/4627)
* [OCPBUGS-41515](https://issues.redhat.com/browse/OCPBUGS-41515): set Konnectivity cipher suites [#4284](https://github.com/openshift/hypershift/pull/4284)
* NO-JIRA: hack: make the e2e script generic [#4202](https://github.com/openshift/hypershift/pull/4202)
* [HOSTEDCP-1146](https://issues.redhat.com/browse/HOSTEDCP-1146): cpo: use CPO spec container image if it is a sha256 reference [#3296](https://github.com/openshift/hypershift/pull/3296)
* [OCPBUGS-22971](https://issues.redhat.com/browse/OCPBUGS-22971): Add konnectivity-proxy container to CNO [#3167](https://github.com/openshift/hypershift/pull/3167)
* [OCPBUGS-23455](https://issues.redhat.com/browse/OCPBUGS-23455): Use the same etcd snapshot for all replicas during etcd restore [#3205](https://github.com/openshift/hypershift/pull/3205)
* NO-JIRA: Red Hat Trusted App Pipeline purge hypershift-operator-release-413 [#3217](https://github.com/openshift/hypershift/pull/3217)
* chore(deps): update rhtap references (release-4.13) [#3043](https://github.com/openshift/hypershift/pull/3043)
* Update RHTAP references (release-4.13) [#2996](https://github.com/openshift/hypershift/pull/2996)
* [OCPBUGS-17182](https://issues.redhat.com/browse/OCPBUGS-17182): add need-management-kas-access label to olm-collect-profiles pods [#2871](https://github.com/openshift/hypershift/pull/2871)
* [OCPBUGS-16225](https://issues.redhat.com/browse/OCPBUGS-16225): Add missing probes to two services [#2821](https://github.com/openshift/hypershift/pull/2821)
* fix(olm): Use 4.13 catalog source images [#2978](https://github.com/openshift/hypershift/pull/2978)
* Updated secret permissions for openshift-route-controller-manager [#2923](https://github.com/openshift/hypershift/pull/2923)
* [HOSTEDCP-1121](https://issues.redhat.com/browse/HOSTEDCP-1121): Ensure SG reconciliation for aws endpoint [#2885](https://github.com/openshift/hypershift/pull/2885)
* chore(deps): update rhtap references (release-4.13) [#2921](https://github.com/openshift/hypershift/pull/2921)
* Revert "HOSTEDCP-1110: [backport-4.13] Allow HCP Specification to Support ICSP & IDMS" [#2931](https://github.com/openshift/hypershift/pull/2931)
* chore(deps): update rhtap references (release-4.13) [#2904](https://github.com/openshift/hypershift/pull/2904)
* Update RHTAP references (release-4.13) [#2866](https://github.com/openshift/hypershift/pull/2866)
* [HOSTEDCP-1046](https://issues.redhat.com/browse/HOSTEDCP-1046): Add ImageDigestMirrorSet to Config API comment [#2870](https://github.com/openshift/hypershift/pull/2870)
* [HOSTEDCP-1046](https://issues.redhat.com/browse/HOSTEDCP-1046): Add IDMS to the list of valid config manifests [#2863](https://github.com/openshift/hypershift/pull/2863)
* Update RHTAP references (release-4.13) [#2833](https://github.com/openshift/hypershift/pull/2833)
* [HOSTEDCP-1110](https://issues.redhat.com/browse/HOSTEDCP-1110): [backport-4.13] Allow HCP Specification to Support ICSP & IDMS [#2839](https://github.com/openshift/hypershift/pull/2839)
* [OCPBUGS-15743](https://issues.redhat.com/browse/OCPBUGS-15743): Let getMachinesForNodePool return machines ordered by creation Timestamp [#2767](https://github.com/openshift/hypershift/pull/2767)
* 4.13: Add management cluster KAS network policy [#2786](https://github.com/openshift/hypershift/pull/2786)
* Leader election config update. [#2801](https://github.com/openshift/hypershift/pull/2801)
* [OCPBUGS-16160](https://issues.redhat.com/browse/OCPBUGS-16160): fix deletion bug when hostedzone is already deleted [#2813](https://github.com/openshift/hypershift/pull/2813)
* [HOSTEDCP-1061](https://issues.redhat.com/browse/HOSTEDCP-1061): [release-4.13] Implement dedicated request serving nodes for HostedClusters [#2809](https://github.com/openshift/hypershift/pull/2809)
* Update RHTAP references (release-4.13) [#2816](https://github.com/openshift/hypershift/pull/2816)
* [OCPBUGS-16057](https://issues.redhat.com/browse/OCPBUGS-16057): use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort [#2798](https://github.com/openshift/hypershift/pull/2798)
* OCPBUGS-14862 Improve clarity around hypershift operator permissions [#2810](https://github.com/openshift/hypershift/pull/2810)
* [HOSTEDCP-1101](https://issues.redhat.com/browse/HOSTEDCP-1101): Add snyk-secret HO RHTAP scripts [#2799](https://github.com/openshift/hypershift/pull/2799)
* [OCPBUGS-16125](https://issues.redhat.com/browse/OCPBUGS-16125): [release-4.13] Update vendored dependencies [#2797](https://github.com/openshift/hypershift/pull/2797)
* [OCPBUGS-15774](https://issues.redhat.com/browse/OCPBUGS-15774): autoscaling balance similar groups [#2805](https://github.com/openshift/hypershift/pull/2805)
* [OCPBUGS-15965](https://issues.redhat.com/browse/OCPBUGS-15965): Reject VPCE Connections during VPCE Service cleanup [#2789](https://github.com/openshift/hypershift/pull/2789)
* Update RHTAP references (release-4.13) [#2751](https://github.com/openshift/hypershift/pull/2751)
* [OCPBUGS-15171](https://issues.redhat.com/browse/OCPBUGS-15171): Skip AWS resource deletion for 'Unknown' OIDC state [#2701](https://github.com/openshift/hypershift/pull/2701)
* [HOSTEDCP-1008](https://issues.redhat.com/browse/HOSTEDCP-1008): Add NodePoolTransitionSeconds metric [#2758](https://github.com/openshift/hypershift/pull/2758)
* [OCPBUGS-15281](https://issues.redhat.com/browse/OCPBUGS-15281): Check OwningIngressController also in Labels [#2715](https://github.com/openshift/hypershift/pull/2715)
* [HOSTEDCP-1060](https://issues.redhat.com/browse/HOSTEDCP-1060): refactor ignition-server reconcilation and add ignition-server proxy [#2748](https://github.com/openshift/hypershift/pull/2748)
* [HOSTEDCP-1073](https://issues.redhat.com/browse/HOSTEDCP-1073): enforce blocked rollout of HCP [#2735](https://github.com/openshift/hypershift/pull/2735)
* [HOSTEDCP-1003](https://issues.redhat.com/browse/HOSTEDCP-1003): Set AWS conditions only for AWS platform [#2670](https://github.com/openshift/hypershift/pull/2670)
* OCPBUGS-15268 properly handle user CA bundle not existing [#2710](https://github.com/openshift/hypershift/pull/2710)
* [OCPBUGS-15301](https://issues.redhat.com/browse/OCPBUGS-15301): [release-4.13] fix(oauth): Do not proxy IBM Cloud IAM endpoints [#2696](https://github.com/openshift/hypershift/pull/2696)
* [OCPBUGS-14030](https://issues.redhat.com/browse/OCPBUGS-14030): Include default ingress CA in root CA bundle [#2599](https://github.com/openshift/hypershift/pull/2599)
* [OCPBUGS-14490](https://issues.redhat.com/browse/OCPBUGS-14490): Enable HCCO to reconcile over the OperatorHub's disableAllDefaultSources object [#2645](https://github.com/openshift/hypershift/pull/2645)
* [OCPBUGS-14801](https://issues.redhat.com/browse/OCPBUGS-14801): Set `DisableStrictZoneCheck = true` in the AWS Cloud Provider config [#2666](https://github.com/openshift/hypershift/pull/2666)
* [HOSTEDCP-1048](https://issues.redhat.com/browse/HOSTEDCP-1048): Add impersonate feature to the CLI and document HC dump procedure [#2681](https://github.com/openshift/hypershift/pull/2681)
* [OCPBUGS-14872](https://issues.redhat.com/browse/OCPBUGS-14872): Honor global ingress configuration LoadBalancer type on AWS [#2677](https://github.com/openshift/hypershift/pull/2677)
* [OCPBUGS-14436](https://issues.redhat.com/browse/OCPBUGS-14436): Add ClusterUpgradeDuration metric [#2637](https://github.com/openshift/hypershift/pull/2637)
* [HOSTEDCP-1009](https://issues.redhat.com/browse/HOSTEDCP-1009): Allow external-dns image to be set in install cli [#2652](https://github.com/openshift/hypershift/pull/2652)
* Red Hat Trusted App Pipeline update hypershift-operator-release-413 [#2641](https://github.com/openshift/hypershift/pull/2641)
* Red Hat Trusted App Pipeline purge hypershift [#2640](https://github.com/openshift/hypershift/pull/2640)
* [OCPBUGS-13735](https://issues.redhat.com/browse/OCPBUGS-13735): Cluster-api SA can't create events and fix permissions wrongly included [#2610](https://github.com/openshift/hypershift/pull/2610)
* [OCPBUGS-14242](https://issues.redhat.com/browse/OCPBUGS-14242): Remove external-dns --events flag [#2621](https://github.com/openshift/hypershift/pull/2621)
* [OCPBUGS-14155](https://issues.redhat.com/browse/OCPBUGS-14155): Reconcile oauthDeployment annotations even if kubeadmin secret is not found [#2613](https://github.com/openshift/hypershift/pull/2613)
* [OCPBUGS-13399](https://issues.redhat.com/browse/OCPBUGS-13399): Fix errors from HCP controller removeServiceCAAnnotationAndSecret() [#2552](https://github.com/openshift/hypershift/pull/2552)
* [HOSTEDCP-1010](https://issues.redhat.com/browse/HOSTEDCP-1010): Set ETCD Storage Size as immutable field and equalised the default size among both api versions [#2611](https://github.com/openshift/hypershift/pull/2611)
* [HOSTEDCP-947](https://issues.redhat.com/browse/HOSTEDCP-947): Increases default etcd PV size to 8Gi [#2569](https://github.com/openshift/hypershift/pull/2569)
* [HOSTEDCP-926](https://issues.redhat.com/browse/HOSTEDCP-926): Send metric when HO/CPO decide to skip cloud resource deletion [#2594](https://github.com/openshift/hypershift/pull/2594)
* [HOSTEDCP-975](https://issues.redhat.com/browse/HOSTEDCP-975): Backport nodepools metrics [#2601](https://github.com/openshift/hypershift/pull/2601)
* Red Hat Trusted App Pipeline update hypershift [#2603](https://github.com/openshift/hypershift/pull/2603)
* [OCPBUGS-13594](https://issues.redhat.com/browse/OCPBUGS-13594): Sync proxy TrustedCA to guest cluster [#2556](https://github.com/openshift/hypershift/pull/2556)
* fix nil deref in DefaultWorkerSecurityGroupID check [#2574](https://github.com/openshift/hypershift/pull/2574)
* [OCPBUGS-13215](https://issues.redhat.com/browse/OCPBUGS-13215): Let the aws endpoint to use the hypershift owned SG [#2529](https://github.com/openshift/hypershift/pull/2529)
* [OCPBUGS-13497](https://issues.redhat.com/browse/OCPBUGS-13497): Add internal/external elb tags to subnets [#2553](https://github.com/openshift/hypershift/pull/2553)
* [OCPBUGS-13531](https://issues.redhat.com/browse/OCPBUGS-13531): Clean up existing VPC endpoint connections [#2554](https://github.com/openshift/hypershift/pull/2554)
* Stop triggering rollout on labels/taint change [#2548](https://github.com/openshift/hypershift/pull/2548)
* Fixes HCCO reconcile error for kubevirt csi driver [#2538](https://github.com/openshift/hypershift/pull/2538)
* Fix kubevirt csi daemonset reconcile loop [#2542](https://github.com/openshift/hypershift/pull/2542)
* [HOSTEDCP-980](https://issues.redhat.com/browse/HOSTEDCP-980): Include HostedClusterDegraded in hypershift_hostedclusters_failure_conditions metric [#2525](https://github.com/openshift/hypershift/pull/2525)
* Bug HOSTEDCP-788: [release-4.13] Configurable SRE MetricsSet [#2544](https://github.com/openshift/hypershift/pull/2544)
* ACM-5173 [backport 4.13] get pull secret instead of dockerconfigjson from mce credentials [#2487](https://github.com/openshift/hypershift/pull/2487)
* [OCPBUGS-13085](https://issues.redhat.com/browse/OCPBUGS-13085): Account for expectedState == false when capturing hostedClustersWithFailureCondition [#2516](https://github.com/openshift/hypershift/pull/2516)
* [OCPBUGS-13076](https://issues.redhat.com/browse/OCPBUGS-13076): Ensure ingress controllers are removed before load balancers [#2514](https://github.com/openshift/hypershift/pull/2514)
* [HOSTEDCP-937](https://issues.redhat.com/browse/HOSTEDCP-937): Add new metric to expose hypershift operator info [#2499](https://github.com/openshift/hypershift/pull/2499)
* Fixed assignment to entry in nil map [#2510](https://github.com/openshift/hypershift/pull/2510)
* [OCPBUGS-12786](https://issues.redhat.com/browse/OCPBUGS-12786): fix(hcco): Get OLM CatalogSource images from defined map [#2484](https://github.com/openshift/hypershift/pull/2484)
* add hyperv1.SilenceClusterAlertsLabel to HostedCluster on deletion [#2480](https://github.com/openshift/hypershift/pull/2480)
* [OCPBUGS-12844](https://issues.redhat.com/browse/OCPBUGS-12844): Delete kubeadmin secret when an idp is defined [#2491](https://github.com/openshift/hypershift/pull/2491)
* [HOSTEDCP-917](https://issues.redhat.com/browse/HOSTEDCP-917): Add publicAndPrivate <-> Private e2e test [#2490](https://github.com/openshift/hypershift/pull/2490)
* [OCPBUGS-12689](https://issues.redhat.com/browse/OCPBUGS-12689): hosted clusters default KAS PDA config should be consistent with OCP [#2496](https://github.com/openshift/hypershift/pull/2496)
* [HOSTEDCP-969](https://issues.redhat.com/browse/HOSTEDCP-969): Consolidate labels for metrics [#2497](https://github.com/openshift/hypershift/pull/2497)
* [HOSTEDCP-969](https://issues.redhat.com/browse/HOSTEDCP-969): Move metrics [#2495](https://github.com/openshift/hypershift/pull/2495)
* [OCPBUGS-12737](https://issues.redhat.com/browse/OCPBUGS-12737): Pass OPENSHIFT_RELEASE_IMAGE env variable to CNO [#2472](https://github.com/openshift/hypershift/pull/2472)
* [OCPBUGS-12225](https://issues.redhat.com/browse/OCPBUGS-12225): Add new OCP 4.13 storage admission plugin [#2462](https://github.com/openshift/hypershift/pull/2462)
* [OCPBUGS-12198](https://issues.redhat.com/browse/OCPBUGS-12198): remove ACL for aws bucket [#2457](https://github.com/openshift/hypershift/pull/2457)
* kubevirt: Block metadata server egress [#2439](https://github.com/openshift/hypershift/pull/2439)
* [HOSTEDCP-638](https://issues.redhat.com/browse/HOSTEDCP-638): Add latest ocp supported info to -v command for cli and operator [#2447](https://github.com/openshift/hypershift/pull/2447)
* add pull-secret to imagePullSecrets for NTO, CNO, and olm-collect-profiles [#2432](https://github.com/openshift/hypershift/pull/2432)
* e2e: Cleanup shared OIDC provider on SIGTERM [#2448](https://github.com/openshift/hypershift/pull/2448)
* [OCPBUGS-11842](https://issues.redhat.com/browse/OCPBUGS-11842): allow z-stream upgrade even if CVO Upgradeable is false [#2431](https://github.com/openshift/hypershift/pull/2431)
* Relax MCO API strict decoding [#2442](https://github.com/openshift/hypershift/pull/2442)
* Enable monitoring for hypershift & HCP namespace [#2429](https://github.com/openshift/hypershift/pull/2429)
* [OCPBUGS-11545](https://issues.redhat.com/browse/OCPBUGS-11545): Pass runAsUser to CNO so it can run its managed services with proper security context [#2392](https://github.com/openshift/hypershift/pull/2392)
* [OCPBUGS-10422](https://issues.redhat.com/browse/OCPBUGS-10422): Create new EC2 client for AWS identity provider health check [#2402](https://github.com/openshift/hypershift/pull/2402)
* [OCPBUGS-10995](https://issues.redhat.com/browse/OCPBUGS-10995): Honor scheduler profile in HostedCluster configuration [#2337](https://github.com/openshift/hypershift/pull/2337)
* [OCPBUGS-11725](https://issues.redhat.com/browse/OCPBUGS-11725): Update HostedCluster oauthCallbackURLTemplate [#2409](https://github.com/openshift/hypershift/pull/2409)
* [HOSTEDCP-568](https://issues.redhat.com/browse/HOSTEDCP-568): Update Konnectiviy socks5 proxy for IBM exception [#2404](https://github.com/openshift/hypershift/pull/2404)
* bug OCPBUGS-10422: Preserve false status of ValidAWSIdentityProvider condition [#2401](https://github.com/openshift/hypershift/pull/2401)
* [HOSTEDCP-802](https://issues.redhat.com/browse/HOSTEDCP-802): add cli flag to enable upgrade type [#2388](https://github.com/openshift/hypershift/pull/2388)
* [OCPBUGS-11606](https://issues.redhat.com/browse/OCPBUGS-11606): properly reconcile with user specified changes for in proxy configuration [#2394](https://github.com/openshift/hypershift/pull/2394)
* Let install apply to aggregate errors [#2375](https://github.com/openshift/hypershift/pull/2375)
* Revert "Create a second scheme that always registers prometheusoperatorv1 GVKs [#2376](https://github.com/openshift/hypershift/pull/2376)
* [HOSTEDCP-939](https://issues.redhat.com/browse/HOSTEDCP-939): [release-4.13] Setup shared OIDC provider for e2e clusters [#2364](https://github.com/openshift/hypershift/pull/2364)
* [OCPBUGS-10422](https://issues.redhat.com/browse/OCPBUGS-10422): Ensure identity provider health check condition is persisted and remove awsendpoint control plane finalizer if invalid aws creds [#2283](https://github.com/openshift/hypershift/pull/2283)
* [HOSTEDCP-850](https://issues.redhat.com/browse/HOSTEDCP-850): Fix nodepool autoscaler logic [#2363](https://github.com/openshift/hypershift/pull/2363)
* [HOSTEDCP-806](https://issues.redhat.com/browse/HOSTEDCP-806): Fix ValidAWSKMSConfig condition [#2361](https://github.com/openshift/hypershift/pull/2361)
* [OCPBUGS-10867](https://issues.redhat.com/browse/OCPBUGS-10867): Switch NTO metrics auth to certs generated by HCP controller [#2331](https://github.com/openshift/hypershift/pull/2331)
* OCPBUGS-10823 ensure well known public domains do not get proxied on image imports [#2353](https://github.com/openshift/hypershift/pull/2353)
* [OCPBUGS-10645](https://issues.redhat.com/browse/OCPBUGS-10645): Add storage operators perms. to watch HostedControlPlane [#2305](https://github.com/openshift/hypershift/pull/2305)
* [SDA-8706](https://issues.redhat.com/browse/SDA-8706): No more specifying the scrape interval at servicemonitors & podmonitors level [#2355](https://github.com/openshift/hypershift/pull/2355)
* [OCPBUGS-11013](https://issues.redhat.com/browse/OCPBUGS-11013): Do not proxy when guest cluster resolution fails [#2339](https://github.com/openshift/hypershift/pull/2339)
* [OCPBUGS-11055](https://issues.redhat.com/browse/OCPBUGS-11055): fix external APIServer address selection based on endpointAccess [#2349](https://github.com/openshift/hypershift/pull/2349)
* [HOSTEDCP-934](https://issues.redhat.com/browse/HOSTEDCP-934): [release-4.13] Validate PublishingStrategyMapping [#2343](https://github.com/openshift/hypershift/pull/2343)
* [HOSTEDCP-900](https://issues.redhat.com/browse/HOSTEDCP-900): Modified AWSPrivateLinkController and AWSEndpointServiceController to respect PausedUntil spec field [#2284](https://github.com/openshift/hypershift/pull/2284)
* [HOSTEDCP-903](https://issues.redhat.com/browse/HOSTEDCP-903): Propagate AWSEndpointService conditions [#2307](https://github.com/openshift/hypershift/pull/2307)
* [OCPBUGS-10792](https://issues.redhat.com/browse/OCPBUGS-10792): [release-4.13] Create a second scheme that always registers `prometheusoperatorv1` GVKs [#2312](https://github.com/openshift/hypershift/pull/2312)
* [HOSTEDCP-801](https://issues.redhat.com/browse/HOSTEDCP-801): [release-4.13] Expose external DNS for private cluster endpoints [#2313](https://github.com/openshift/hypershift/pull/2313)
* Update HCP version in capi cluster ref [#2266](https://github.com/openshift/hypershift/pull/2266)
* [OCPBUGS-10504](https://issues.redhat.com/browse/OCPBUGS-10504): Deletion of the VPCEnpoint on conflicting service names [#2309](https://github.com/openshift/hypershift/pull/2309)
* [HOSTEDCP-839](https://issues.redhat.com/browse/HOSTEDCP-839): Audit log sidecars for openshift-apiserver and openshift-oauth-apiserver [#2296](https://github.com/openshift/hypershift/pull/2296)
* [OCPBUGS-10586](https://issues.redhat.com/browse/OCPBUGS-10586): Use appropriate serving certificate for OAuth [#2294](https://github.com/openshift/hypershift/pull/2294)
* Validate etcd KMS config [#2260](https://github.com/openshift/hypershift/pull/2260)
* Force controleplane upgrade always [#2291](https://github.com/openshift/hypershift/pull/2291)
* Disable inplace upgrade e2e tests [#2303](https://github.com/openshift/hypershift/pull/2303)
* [HOSTEDCP-809](https://issues.redhat.com/browse/HOSTEDCP-809): Clone CA key/cert to TLS key/cert [#2262](https://github.com/openshift/hypershift/pull/2262)
* [OCPBUGS-8369](https://issues.redhat.com/browse/OCPBUGS-8369): Fix cleanup of volumes on cluster deletion [#2252](https://github.com/openshift/hypershift/pull/2252)
* [HOSTEDCP-904](https://issues.redhat.com/browse/HOSTEDCP-904): Add release automation and docs [#2236](https://github.com/openshift/hypershift/pull/2236)
* kms addition for pod identity workflow [#2214](https://github.com/openshift/hypershift/pull/2214)
* fix(ho): No network validation for IBM Cloud [#2225](https://github.com/openshift/hypershift/pull/2225)
* feat(HCCO): Block DNS operator delete until Cluster Version updated [#2223](https://github.com/openshift/hypershift/pull/2223)
* Add configuration for automatic labeling and label commands [#2238](https://github.com/openshift/hypershift/pull/2238)
* Skip pod restart check for NTO [#2239](https://github.com/openshift/hypershift/pull/2239)
* cpo: cno: follow image name change in release payload [#2230](https://github.com/openshift/hypershift/pull/2230)
* Added documentation around supported-versions configmap [#2220](https://github.com/openshift/hypershift/pull/2220)
* Add comment for BaseDomainPrefix [#2219](https://github.com/openshift/hypershift/pull/2219)
* Add condition to NodePool indicating whether a security group for it is available [#2216](https://github.com/openshift/hypershift/pull/2216)
* [HOSTEDCP-827](https://issues.redhat.com/browse/HOSTEDCP-827): Add root volume encryption e2e test [#2192](https://github.com/openshift/hypershift/pull/2192)
* fix(hypershift): reduce CAPI rbac access [#2173](https://github.com/openshift/hypershift/pull/2173)
* Validate Network Input for HostedCluster [#2215](https://github.com/openshift/hypershift/pull/2215)
* Add labels info [#2218](https://github.com/openshift/hypershift/pull/2218)
* [HOSTEDCP-826](https://issues.redhat.com/browse/HOSTEDCP-826): Customize DNS base domain prefix [#2213](https://github.com/openshift/hypershift/pull/2213)
* ensure reconcilation of apiserver port [#2197](https://github.com/openshift/hypershift/pull/2197)
* Cleanup default security group only if authorized [#2211](https://github.com/openshift/hypershift/pull/2211)
* [HOSTEDCP-593](https://issues.redhat.com/browse/HOSTEDCP-593): Update the pull secret source for ignition payload [#2187](https://github.com/openshift/hypershift/pull/2187)
* fix(ibmcloud): Explicitly set HCCO controllers [#2185](https://github.com/openshift/hypershift/pull/2185)
* Adding NTO again to find the issue with data recollection [#2152](https://github.com/openshift/hypershift/pull/2152)
* cli: Add --cli-root-volume-access-modes [#2188](https://github.com/openshift/hypershift/pull/2188)
* feat: Add pod gone check to prober + DNS operator leader elect [#2155](https://github.com/openshift/hypershift/pull/2155)
* [HOSTEDCP-833](https://issues.redhat.com/browse/HOSTEDCP-833): Add Golang check for 'go list' errors in Makefile [#2193](https://github.com/openshift/hypershift/pull/2193)
* [HOSTEDCP-833](https://issues.redhat.com/browse/HOSTEDCP-833): Set kubevirt.io/client-go version to fix ART Issue [#2194](https://github.com/openshift/hypershift/pull/2194)
* add KAS egress network policy [#2181](https://github.com/openshift/hypershift/pull/2181)
* cpo: kcm: add nfs pv recycler pod template [#2183](https://github.com/openshift/hypershift/pull/2183)
* Fix kubevirt how-to doc formatting issues [#2178](https://github.com/openshift/hypershift/pull/2178)
* Update cluster api provider kubevirt dependencies [#2157](https://github.com/openshift/hypershift/pull/2157)
* fix(cpo): Set restart annotation on multus-admission-controller [#2150](https://github.com/openshift/hypershift/pull/2150)
* fix(cpo): Remove OLM collect for IBM Cloud to reduce artifacts and rbac [#2141](https://github.com/openshift/hypershift/pull/2141)
* Add default NodePool name clarification to docs [#2186](https://github.com/openshift/hypershift/pull/2186)
* fix(cpo): Reduce CNO access if Calico used as network provider [#2159](https://github.com/openshift/hypershift/pull/2159)
* add PSA labels to openshift-infra in guest cluster [#2180](https://github.com/openshift/hypershift/pull/2180)
* Add cli flag to enable root volume encryption [#2177](https://github.com/openshift/hypershift/pull/2177)
* Update KubeVirt platform how-to documentation [#2108](https://github.com/openshift/hypershift/pull/2108)
* Filtering data recolection only for aws instances running [#2153](https://github.com/openshift/hypershift/pull/2153)
* Add PodMonitor for ingress-operator pods in HCP namespaces [#2136](https://github.com/openshift/hypershift/pull/2136)
* fix regex in registry operator pod monitor [#2171](https://github.com/openshift/hypershift/pull/2171)
* Add e2e test for hosted cluster behind a proxy [#2077](https://github.com/openshift/hypershift/pull/2077)
* Skip destroyAWSDefaultSecurityGroup if not AWS [#2167](https://github.com/openshift/hypershift/pull/2167)
* Give kubevirt csi controller get VMI RBAC [#2154](https://github.com/openshift/hypershift/pull/2154)
* set default PSA enforce to restricted [#2097](https://github.com/openshift/hypershift/pull/2097)
* Create default security group for AWS clusters [#2146](https://github.com/openshift/hypershift/pull/2146)
* [AUTH-323](https://issues.redhat.com/browse/AUTH-323): konnectivity: split away the rootCA from konnectivity trust [#2149](https://github.com/openshift/hypershift/pull/2149)
* Use KAS kubeconfig for PowerVS CCM instead of external kubeconfig [#2065](https://github.com/openshift/hypershift/pull/2065)
* Add e2e test for secrets encryption using kms [#2135](https://github.com/openshift/hypershift/pull/2135)
* [OSD-15099](https://issues.redhat.com/browse/OSD-15099): Delaying the creation of servicemonitor and podmonitor resources till the hostedcluster is Completed [#2147](https://github.com/openshift/hypershift/pull/2147)
* Add support for root volume encryption using KMS [#2143](https://github.com/openshift/hypershift/pull/2143)
* Check creation and deletion timestamps are not nil [#2132](https://github.com/openshift/hypershift/pull/2132)
* test: skip TestCreateClusterKms on non-AWS platforms [#2151](https://github.com/openshift/hypershift/pull/2151)
* expose silence alerts metric [#2142](https://github.com/openshift/hypershift/pull/2142)
* [AUTH-323](https://issues.redhat.com/browse/AUTH-323): pki: split out konnectivity certs from the rootCA [#1891](https://github.com/openshift/hypershift/pull/1891)
* Clarify docs for nodePool.spec.config [#2137](https://github.com/openshift/hypershift/pull/2137)
* fix(ho): Delete user-data secret for non-AWS platforms [#2134](https://github.com/openshift/hypershift/pull/2134)
* Revert "Refactored NTO MachineConfig InPlace and Replace E2E Tests" [#2145](https://github.com/openshift/hypershift/pull/2145)
* Basic immutability for NodePool [#2139](https://github.com/openshift/hypershift/pull/2139)
* Changes autoscalling replica number when the nodepool replica is not set [#2106](https://github.com/openshift/hypershift/pull/2106)
* Add external DNS health condition [#2130](https://github.com/openshift/hypershift/pull/2130)
* Adding supportability for Private HostedCluster to be migrated [#2089](https://github.com/openshift/hypershift/pull/2089)
* fix openshift-route-controller-manager ServiceMonitor regex [#2094](https://github.com/openshift/hypershift/pull/2094)
* fix(api): Fix deprecated API conversion [#1987](https://github.com/openshift/hypershift/pull/1987)
* OpenID add support for groups claim in the config [#2116](https://github.com/openshift/hypershift/pull/2116)
* fix(cpo): Restart registry operator on annotation [#2111](https://github.com/openshift/hypershift/pull/2111)
* fix(cpo): Allow KAS profiling disablement [#2110](https://github.com/openshift/hypershift/pull/2110)
* update to golang 1.19 and 4.13 base image [#2095](https://github.com/openshift/hypershift/pull/2095)
* Add e2e test for cluster creation with AWS KMS [#2093](https://github.com/openshift/hypershift/pull/2093)
* Refactoring NTO MachineConfig InPlace and Replace E2E Tests [#2051](https://github.com/openshift/hypershift/pull/2051)
* Fix CAPA crd generation [#2113](https://github.com/openshift/hypershift/pull/2113)
* AWS: remove finalizer from deleted awsmachines if lost STS [#2109](https://github.com/openshift/hypershift/pull/2109)
* Minor fixes to notes on Getting Started and NodePool Upgrades pages [#2117](https://github.com/openshift/hypershift/pull/2117)
* Add dns docs clarification for private topology [#2115](https://github.com/openshift/hypershift/pull/2115)
* fix(cpo): Separate RBAC for NTO + CNO [#2107](https://github.com/openshift/hypershift/pull/2107)
* Set k8s.io/kubernetes dependency to v0.23.3 [#2068](https://github.com/openshift/hypershift/pull/2068)
* Moving from HC Migration to Disaster Recovery in documentation [#1953](https://github.com/openshift/hypershift/pull/1953)
* test: skip ovnkube-master in crashing pods check [#2103](https://github.com/openshift/hypershift/pull/2103)
* bump openshift/api and go1.19 for fmt [#2096](https://github.com/openshift/hypershift/pull/2096)
* Fixing issue between UpdatingVersion and UpdatingConfig at InPlace Up… [#1978](https://github.com/openshift/hypershift/pull/1978)
* Add tags and rename cloud instance name suffix [#1779](https://github.com/openshift/hypershift/pull/1779)
* fix(ibmcloud): Initialize image registry config on creates and bad config [#2091](https://github.com/openshift/hypershift/pull/2091)
* [Full changelog](https://github.com/openshift/hypershift/compare/da93f69c5c56fe938e65115dd08428604ed42bed...6daddeedbbd201813c51c0b978127884b96e4402)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/b5bcaf9caa96561a32ec5e7b79ca41e173ecfe25)

* [OCPBUGS-24999](https://issues.redhat.com/browse/OCPBUGS-24999): Add Snyk file to exclude vendor directory on scan [#66](https://github.com/openshift/cloud-provider-ibm/pull/66)
* [OCPBUGS-21137](https://issues.redhat.com/browse/OCPBUGS-21137): Bump golang.org/x/net to v0.18.0 [#56](https://github.com/openshift/cloud-provider-ibm/pull/56)
* [OCPBUGS-12612](https://issues.redhat.com/browse/OCPBUGS-12612): Update x/net to v0.7.0 [#52](https://github.com/openshift/cloud-provider-ibm/pull/52)
* Update OWNERS [#46](https://github.com/openshift/cloud-provider-ibm/pull/46)
* [OCPBUGS-6415](https://issues.redhat.com/browse/OCPBUGS-6415): Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.26 (4d5076e) into master [#45](https://github.com/openshift/cloud-provider-ibm/pull/45)
* Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.26 into master [#38](https://github.com/openshift/cloud-provider-ibm/pull/38)
* Updating ose-ibm-cloud-controller-manager images to be consistent with ART [#43](https://github.com/openshift/cloud-provider-ibm/pull/43)
* Update OWNERS [#44](https://github.com/openshift/cloud-provider-ibm/pull/44)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/8bd0ea8fadbbb09ed912984d3dc6903a0aad0562...b5bcaf9caa96561a32ec5e7b79ca41e173ecfe25)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/54aaeff798c04decfb25cf552be760a90d53f97c)

* [OCPBUGS-36064](https://issues.redhat.com/browse/OCPBUGS-36064): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#74](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/74)
* [OCPBUGS-18143](https://issues.redhat.com/browse/OCPBUGS-18143): [IBM VPC] failed provisioning volume in proxy cluster [#47](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/47)
* [OCPBUGS-21230](https://issues.redhat.com/browse/OCPBUGS-21230): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#51](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/51)
* [OCPBUGS-16378](https://issues.redhat.com/browse/OCPBUGS-16378): 4.13: UPSTREAM: 157: K8S and grpc package upgrade [#40](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/40)
* [STOR-1011](https://issues.redhat.com/browse/STOR-1011): Rebase to v5.1.1 for OCP 4.13 [#31](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/31)
* Updating ose-ibm-vpc-block-csi-driver images to be consistent with ART [#29](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/29)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/921509f3833b7b69a08d63fddd13890125e974fa...54aaeff798c04decfb25cf552be760a90d53f97c)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/4c23f8185288d1030913f8d9097d75132ed7d158)

* [OCPBUGS-36070](https://issues.redhat.com/browse/OCPBUGS-36070): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#123](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/123)
* [OCPBUGS-21319](https://issues.redhat.com/browse/OCPBUGS-21319): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#82](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/82)
* [OCPBUGS-18143](https://issues.redhat.com/browse/OCPBUGS-18143): [IBM VPC] failed provisioning volume in proxy cluster [#76](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/76)
* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#73](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/73)
* [STOR-1019](https://issues.redhat.com/browse/STOR-1019): Bump to k8s 1.26 libs for OCP 4.13 [#51](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/51)
* [STOR-947](https://issues.redhat.com/browse/STOR-947): support disabling default StorageClass via ClusterCSIDriver [#48](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/48)
* [Bug 2106736](https://bugzilla.redhat.com/show_bug.cgi?id=2106736): Add multiplePVsSameID capability [#50](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/50)
* [STOR-1078](https://issues.redhat.com/browse/STOR-1078): Add hostPaths necessary for SELinux mounts [#49](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/49)
* Updating ose-ibm-vpc-block-csi-driver-operator images to be consistent with ART [#47](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/47)
* [STOR-1060](https://issues.redhat.com/browse/STOR-1060): Update deployment files for snapshot support [#45](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/45)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/f2b726d578e020d369902c14173307a6e13853b4...4c23f8185288d1030913f8d9097d75132ed7d158)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/b819827a4e45d01833f874b92ba30ccc39ccd19f)

* [OCPBUGS-36010](https://issues.redhat.com/browse/OCPBUGS-36010): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#43](https://github.com/openshift/ibm-vpc-node-label-updater/pull/43)
* [OCPBUGS-21432](https://issues.redhat.com/browse/OCPBUGS-21432): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#28](https://github.com/openshift/ibm-vpc-node-label-updater/pull/28)
* [OCPBUGS-14073](https://issues.redhat.com/browse/OCPBUGS-14073): UPSTREAM: 20: Bump (golang.org/x/net): to address CVE-2022-41723 [#24](https://github.com/openshift/ibm-vpc-node-label-updater/pull/24)
* [STOR-1011](https://issues.redhat.com/browse/STOR-1011): Rebase to v4.3.0 for OCP 4.13 [#18](https://github.com/openshift/ibm-vpc-node-label-updater/pull/18)
* Updating ibm-vpc-node-label-updater images to be consistent with ART [#16](https://github.com/openshift/ibm-vpc-node-label-updater/pull/16)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/f9da23ac8abe04dc1615763e120cd174bde6e617...b819827a4e45d01833f874b92ba30ccc39ccd19f)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/c4441f101083a8ffe01d4d6bb372a8b32a30a9a6)

* [OCPBUGS-21418](https://issues.redhat.com/browse/OCPBUGS-21418): UPSTREAM: <carry>: bump golang.org/x/net to v0.18.0 [#66](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/66)
* [OCPBUGS-12615](https://issues.redhat.com/browse/OCPBUGS-12615): Update IBM Packages [#55](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/55)
* Update OWNERS [#49](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/49)
* Updating ose-ibmcloud-cluster-api-controllers images to be consistent with ART [#44](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/44)
* Update OWNERS [#45](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/45)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/0fe74f674bf5a1e464a5e2f872def13e1a9bb2a9...c4441f101083a8ffe01d4d6bb372a8b32a30a9a6)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/bb253a0c607f7d1f8139ffd401bd6c9c432090d1)

* [OCPBUGS-12616](https://issues.redhat.com/browse/OCPBUGS-12616): Bump x/net to v0.7.0 [#23](https://github.com/openshift/machine-api-provider-ibmcloud/pull/23)
* Update OWNERS [#17](https://github.com/openshift/machine-api-provider-ibmcloud/pull/17)
* [OCPBUGS-6419](https://issues.redhat.com/browse/OCPBUGS-6419): Update dependencies for kubernetes 1.26 [#16](https://github.com/openshift/machine-api-provider-ibmcloud/pull/16)
* Updating ose-ibmcloud-machine-controllers images to be consistent with ART [#14](https://github.com/openshift/machine-api-provider-ibmcloud/pull/14)
* Update OWNERS [#15](https://github.com/openshift/machine-api-provider-ibmcloud/pull/15)
* [OCPCLOUD-1770](https://issues.redhat.com/browse/OCPCLOUD-1770): IBMCloud: Use public machine phases [#13](https://github.com/openshift/machine-api-provider-ibmcloud/pull/13)
* [CORS-2387](https://issues.redhat.com/browse/CORS-2387): IBMCloud: Add NetworkResourceGroup [#12](https://github.com/openshift/machine-api-provider-ibmcloud/pull/12)
* [OCPBUGS-1327](https://issues.redhat.com/browse/OCPBUGS-1327): IBMCloud: Replace stuck machine [#10](https://github.com/openshift/machine-api-provider-ibmcloud/pull/10)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/31a67daca92c374cb4d9a87928ec8c28528a0c0e...bb253a0c607f7d1f8139ffd401bd6c9c432090d1)


### [insights-operator](https://github.com/openshift/insights-operator/tree/162554e15ece3653649c9a61567d332a462f079a)

* [OCPBUGS-36475](https://issues.redhat.com/browse/OCPBUGS-36475): properly encode the URL for the advisor links (#962) (#965) [#962](https://github.com/openshift/insights-operator/pull/962)
* [OCPBUGS-33449](https://issues.redhat.com/browse/OCPBUGS-33449): anonymization - externalIP can be nil (#931) (#933) (#935) [#931](https://github.com/openshift/insights-operator/pull/931)
* [OCPBUGS-31991](https://issues.redhat.com/browse/OCPBUGS-31991): bump golang.org/x/net version (#927) [#927](https://github.com/openshift/insights-operator/pull/927)
* [OCPBUGS-28157](https://issues.redhat.com/browse/OCPBUGS-28157): Add extra check in ids to bypass validations (#905) [#905](https://github.com/openshift/insights-operator/pull/905)
* gather etcd_server_slow metrics (#902) (#909) [#902](https://github.com/openshift/insights-operator/pull/902)
* [OCPBUGS-23962](https://issues.redhat.com/browse/OCPBUGS-23962): adds helm information gather (#868) (#883) [#868](https://github.com/openshift/insights-operator/pull/868)
* [OCPBUGS-22958](https://issues.redhat.com/browse/OCPBUGS-22958): adds cluster storageclasses gather (#858) (#875) [#858](https://github.com/openshift/insights-operator/pull/858)
* [OCPBUGS-22953](https://issues.redhat.com/browse/OCPBUGS-22953): create Prometheus rules programmatically according the… (#860) [#860](https://github.com/openshift/insights-operator/pull/860)
* [OCPBUGS-22914](https://issues.redhat.com/browse/OCPBUGS-22914): remove username & password config options (#859) [#859](https://github.com/openshift/insights-operator/pull/859)
* [OCPBUGS-20750](https://issues.redhat.com/browse/OCPBUGS-20750): update dependencies (#840) [#840](https://github.com/openshift/insights-operator/pull/840)
* Add cherry-pick from 4.14 (#848) [#848](https://github.com/openshift/insights-operator/pull/848)
* [OCPBUGS-19476](https://issues.redhat.com/browse/OCPBUGS-19476): update Insights report config logging (#828) [#828](https://github.com/openshift/insights-operator/pull/828)
* [OCPBUGS-17661](https://issues.redhat.com/browse/OCPBUGS-17661): workload info gatherer, add external image repo (#816) [#816](https://github.com/openshift/insights-operator/pull/816)
* [OCPBUGS-14773](https://issues.redhat.com/browse/OCPBUGS-14773): extend configmap gatherer to get gateway-mode-config (#788) (#791) [#788](https://github.com/openshift/insights-operator/pull/788)
* [release-4.13 ]OCPBUGS-15031: fix the config serialization & add test (#794) (#796) [#794](https://github.com/openshift/insights-operator/pull/794)
* [OCPBUGS-14318](https://issues.redhat.com/browse/OCPBUGS-14318): gather PDBs only from openshift namespaces (#786) [#786](https://github.com/openshift/insights-operator/pull/786)
* [OCPBUGS-12618](https://issues.redhat.com/browse/OCPBUGS-12618): update golang.org/x/net version (#775) [#775](https://github.com/openshift/insights-operator/pull/775)
* [OCPBUGS-8243](https://issues.redhat.com/browse/OCPBUGS-8243): Collect info about monitoring pods pv (#753) [#753](https://github.com/openshift/insights-operator/pull/753)
* [OCPBUGS-11008](https://issues.redhat.com/browse/OCPBUGS-11008): update the cluster transfer interval to 12h (#762) [#762](https://github.com/openshift/insights-operator/pull/762)
* [OCPBUGS-10239](https://issues.redhat.com/browse/OCPBUGS-10239): service_accounts.go Marshal fix (#750) [#750](https://github.com/openshift/insights-operator/pull/750)
* test(clusterconfig): add unit test for silenced_alerts.go and rename it to gather_silenced_alerts.go (#728) [#728](https://github.com/openshift/insights-operator/pull/728)
* test(clusterconfig): add unit test for ingresses.go and rename it to gather_cluster_ingress.go  (#729) [#729](https://github.com/openshift/insights-operator/pull/729)
* test(oauth): add unit test for oauth.go and rename it to gather_cluster_oauth.go  (#738) [#738](https://github.com/openshift/insights-operator/pull/738)
* gather logs - update "FilterLogFromScanner" function and add some tests (#735) [#735](https://github.com/openshift/insights-operator/pull/735)
* Add unit tests to openshift sdn controller logs gatherer (#733) [#733](https://github.com/openshift/insights-operator/pull/733)
* [OCPBUGS-6731](https://issues.redhat.com/browse/OCPBUGS-6731): Anonymize env vars from containers: HTTP_PROXY, HTTPS_PROXY (#723) [#723](https://github.com/openshift/insights-operator/pull/723)
* [OCPBUGS-6832](https://issues.redhat.com/browse/OCPBUGS-6832): feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#726) [#726](https://github.com/openshift/insights-operator/pull/726)
* [OCPBUGS-6781](https://issues.redhat.com/browse/OCPBUGS-6781): Create gatherer for gathering machines. (#725) [#725](https://github.com/openshift/insights-operator/pull/725)
* chore(docs): update gathered documentation (#704) [#704](https://github.com/openshift/insights-operator/pull/704)
* arch docs update - explain disabled=true status more (#721) [#721](https://github.com/openshift/insights-operator/pull/721)
* operators gatherer - handle ingresscontroller relatedObject & simplify (#714) [#714](https://github.com/openshift/insights-operator/pull/714)
* Revert "OCPBUGS-5347: additional fix (#716)" (#717) [#716](https://github.com/openshift/insights-operator/pull/716)
* [OCPBUGS-5347](https://issues.redhat.com/browse/OCPBUGS-5347): additional fix (#716) [#716](https://github.com/openshift/insights-operator/pull/716)
* [OCPBUGS-5347](https://issues.redhat.com/browse/OCPBUGS-5347): do not periodically update Available clusteroperator co… (#709) [#709](https://github.com/openshift/insights-operator/pull/709)
* Update operator name in the OWNERS file (#712) [#712](https://github.com/openshift/insights-operator/pull/712)
* OCPBUGS-5257 do not get disabled rules (#706) [#706](https://github.com/openshift/insights-operator/pull/706)
* refactor(webhookconfigurations): remove asset method and split tests (#702) [#702](https://github.com/openshift/insights-operator/pull/702)
* refactor(scheduler): move GatherSchedulerLogs to its own file (#701) [#701](https://github.com/openshift/insights-operator/pull/701)
* chore(golanglint-ci) disabling some linters for *_test.go files (#703) [#703](https://github.com/openshift/insights-operator/pull/703)
* Update OpenShift versions & new Download time field (#705) [#705](https://github.com/openshift/insights-operator/pull/705)
* Updating ose-insights-operator images to be consistent with ART (#700) [#700](https://github.com/openshift/insights-operator/pull/700)
* Change of kube-system namespace configmap location according to docs.  (#694) [#694](https://github.com/openshift/insights-operator/pull/694)
* [OCPBUGS-3377](https://issues.redhat.com/browse/OCPBUGS-3377): fix: storage/ceph path structure (#691) [#691](https://github.com/openshift/insights-operator/pull/691)
* PR template preview and changelog update (#692) [#692](https://github.com/openshift/insights-operator/pull/692)
* Use cgroups memory usage data in the archive metadata (#693) [#693](https://github.com/openshift/insights-operator/pull/693)
* [Full changelog](https://github.com/openshift/insights-operator/compare/6b543885144d6eb40c7c8342dac15f80e77bb4fa...162554e15ece3653649c9a61567d332a462f079a)


### [ironic](https://github.com/openshift/ironic-image/tree/ae8747cdf85367fbce20485546132db992af628e)

* [OCPBUGS-37764](https://issues.redhat.com/browse/OCPBUGS-37764), [OCPBUGS-39384](https://issues.redhat.com/browse/OCPBUGS-39384): Include fixes for CVE-2024-44082 [#585](https://github.com/openshift/ironic-image/pull/585)
* [OCPBUGS-38509](https://issues.redhat.com/browse/OCPBUGS-38509): set min version for python3-webob [#557](https://github.com/openshift/ironic-image/pull/557)
* [OCPBUGS-33374](https://issues.redhat.com/browse/OCPBUGS-33374): bump werkzeug [#543](https://github.com/openshift/ironic-image/pull/543)
* [OCPBUGS-34898](https://issues.redhat.com/browse/OCPBUGS-34898): bump jinja2 [#538](https://github.com/openshift/ironic-image/pull/538)
* [OCPBUGS-37116](https://issues.redhat.com/browse/OCPBUGS-37116): Update eventlet version [#525](https://github.com/openshift/ironic-image/pull/525)
* [OCPBUGS-32363](https://issues.redhat.com/browse/OCPBUGS-32363): [4.13] remove unused prometheus-exporter [#488](https://github.com/openshift/ironic-image/pull/488)
* [OCPBUGS-32387](https://issues.redhat.com/browse/OCPBUGS-32387): Use unix sockets by default for reverse proxy communication [#476](https://github.com/openshift/ironic-image/pull/476)
* [OCPBUGS-29190](https://issues.redhat.com/browse/OCPBUGS-29190): Fix Inspector iPXE config for IPv6 addresses [#453](https://github.com/openshift/ironic-image/pull/453)
* [OCPBUGS-23978](https://issues.redhat.com/browse/OCPBUGS-23978): Ironic side of external_http_url (METAL-163) is not wired in correctly [#430](https://github.com/openshift/ironic-image/pull/430)
* [OCPBUGS-23506](https://issues.redhat.com/browse/OCPBUGS-23506): Uplift eventlet version [#427](https://github.com/openshift/ironic-image/pull/427)
* [OCPBUGS-23356](https://issues.redhat.com/browse/OCPBUGS-23356): Upgrade werkzeug dependency [#422](https://github.com/openshift/ironic-image/pull/422)
* [OCPBUGS-19078](https://issues.redhat.com/browse/OCPBUGS-19078): Handle Eject DVD 4.13 [#416](https://github.com/openshift/ironic-image/pull/416)
* [OCPBUGS-23072](https://issues.redhat.com/browse/OCPBUGS-23072): Use bash process substitution instead of pipe [#413](https://github.com/openshift/ironic-image/pull/413)
* [OCPBUGS-17837](https://issues.redhat.com/browse/OCPBUGS-17837): Fix PROVISIONING_MACS unbound [#393](https://github.com/openshift/ironic-image/pull/393)
* [OCPBUGS-17158](https://issues.redhat.com/browse/OCPBUGS-17158): [4.13] Update packages with latest bugfix [#388](https://github.com/openshift/ironic-image/pull/388)
* [OCPBUGS-17551](https://issues.redhat.com/browse/OCPBUGS-17551): Expand regex for fcos/okd packages list [#390](https://github.com/openshift/ironic-image/pull/390)
* Bug OCPBUGS-15235: Incrementing Ironic versions to include backported SNMPv3 FIPS fix. [#383](https://github.com/openshift/ironic-image/pull/383)
* [OCPBUGS-13587](https://issues.redhat.com/browse/OCPBUGS-13587): Add python-flask dependency [#372](https://github.com/openshift/ironic-image/pull/372)
* [OCPBUGS-14135](https://issues.redhat.com/browse/OCPBUGS-14135): ironic.conf.j2: Bump min_command_interval to 30 on SCOS [#378](https://github.com/openshift/ironic-image/pull/378)
* Bug OCPBUGS-13334: Bump ironic version to include fix to OCPBUGS-13334. [#366](https://github.com/openshift/ironic-image/pull/366)
* [OCPBUGS-12703](https://issues.redhat.com/browse/OCPBUGS-12703): Bump python-sushy [#362](https://github.com/openshift/ironic-image/pull/362)
* [OCPBUGS-11985](https://issues.redhat.com/browse/OCPBUGS-11985): allow inspector to also be proxied [#361](https://github.com/openshift/ironic-image/pull/361)
* Adding dep on python3-werkzeug >= 2.0.3-4 [#349](https://github.com/openshift/ironic-image/pull/349)
* [OCPBUGS-5461](https://issues.redhat.com/browse/OCPBUGS-5461): Add ironic IP to no_proxy [#346](https://github.com/openshift/ironic-image/pull/346)
* [OCPBUGS-5136](https://issues.redhat.com/browse/OCPBUGS-5136): Adding dosfstools and util-linux tools to ironic-image [#340](https://github.com/openshift/ironic-image/pull/340)
* [OCPBUGS-5068](https://issues.redhat.com/browse/OCPBUGS-5068): Configure Ironic iLO driver to use web server [#338](https://github.com/openshift/ironic-image/pull/338)
* [OCPBUGS-4635](https://issues.redhat.com/browse/OCPBUGS-4635): Update packages versions with latest available [#332](https://github.com/openshift/ironic-image/pull/332)
* [OCPBUGS-4492](https://issues.redhat.com/browse/OCPBUGS-4492): Handle a different error code for missing TransferProtocolType [#333](https://github.com/openshift/ironic-image/pull/333)
* Bug OCPBUGS-4305: Remove RDO distribution configuration (finally fixes #46) [#326](https://github.com/openshift/ironic-image/pull/326)
* Bug OCPBUGS-4225: Fix setting boot related attributes [#325](https://github.com/openshift/ironic-image/pull/325)
* Add support for OKD/SCOS [#320](https://github.com/openshift/ironic-image/pull/320)
* [OCPBUGS-3085](https://issues.redhat.com/browse/OCPBUGS-3085): Workaround for long time gap between operations in recent idrac [#319](https://github.com/openshift/ironic-image/pull/319)
* [OCPBUGS-1844](https://issues.redhat.com/browse/OCPBUGS-1844): Merge from upstream metal3-io/ironic-image [#321](https://github.com/openshift/ironic-image/pull/321)
* Allow dnsmasq to work as a DNS forwarder [#304](https://github.com/openshift/ironic-image/pull/304)
* Bug OCPBUGS-3480: Improve resiliency of eTag handling [#313](https://github.com/openshift/ironic-image/pull/313)
* Updating ironic images to be consistent with ART [#312](https://github.com/openshift/ironic-image/pull/312)
* Add DNS or GW for use by dnsmasq [#308](https://github.com/openshift/ironic-image/pull/308)
* [OCPBUGS-2992](https://issues.redhat.com/browse/OCPBUGS-2992): Don't save OS_ prefixed variables [#309](https://github.com/openshift/ironic-image/pull/309)
* [Full changelog](https://github.com/openshift/ironic-image/compare/4530d5eae40623a8d342dccbdd2755984c222318...ae8747cdf85367fbce20485546132db992af628e)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/92e3efb4c38dba903316d7cb88afa4bbaa04d259)

* [OCPBUGS-39384](https://issues.redhat.com/browse/OCPBUGS-39384): Include fixes for CVE-2024-44082 [#164](https://github.com/openshift/ironic-agent-image/pull/164)
* [OCPBUGS-38509](https://issues.redhat.com/browse/OCPBUGS-38509): set webob and bump werkzeug [#152](https://github.com/openshift/ironic-agent-image/pull/152)
* [OCPBUGS-29725](https://issues.redhat.com/browse/OCPBUGS-29725): Always add ignition to set hostname on /etc/hostname [#111](https://github.com/openshift/ironic-agent-image/pull/111)
* [OCPBUGS-19006](https://issues.redhat.com/browse/OCPBUGS-19006): backport hostname fixes [#89](https://github.com/openshift/ironic-agent-image/pull/89)
* Switch to udevadm command install instead of package [OKD] [#83](https://github.com/openshift/ironic-agent-image/pull/83)
* "Bug OCPBUGS-15777: Switch to udevadm command install instead of package" [#81](https://github.com/openshift/ironic-agent-image/pull/81)
* [OCPBUGS-8380](https://issues.redhat.com/browse/OCPBUGS-8380): Adding dep on python3-werkzeug >= 2.0.3-4 [#70](https://github.com/openshift/ironic-agent-image/pull/70)
* [OCPBUGS-4899](https://issues.redhat.com/browse/OCPBUGS-4899): make coreos-installer output available in the logs [#65](https://github.com/openshift/ironic-agent-image/pull/65)
* Updating ironic-agent images to be consistent with ART [#64](https://github.com/openshift/ironic-agent-image/pull/64)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/fc37dec83ae7cbd6878a5ddcc25126f424586095...92e3efb4c38dba903316d7cb88afa4bbaa04d259)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/ce2917794de5723248fe3302c8833f89fb54265a)

* [OCPBUGS-15734](https://issues.redhat.com/browse/OCPBUGS-15734): Binary should be compiled on rhel9 [#91](https://github.com/openshift/ironic-rhcos-downloader/pull/91)
* Updating ironic-rhcos-downloader images to be consistent with ART [#84](https://github.com/openshift/ironic-rhcos-downloader/pull/84)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/c65c1f1c19a9b62ef5f4a857e5ce86ad6fca3d29...ce2917794de5723248fe3302c8833f89fb54265a)


### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/4536724a8644fda91a74b23901ba1789eaff7179)

* [OCPBUGS-14315](https://issues.redhat.com/browse/OCPBUGS-14315): Flush addresses on provisioning interface with global scope only [#36](https://github.com/openshift/ironic-static-ip-manager/pull/36)
* Updating ironic-static-ip-manager images to be consistent with ART [#33](https://github.com/openshift/ironic-static-ip-manager/pull/33)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/a8ade8fe60ad5fb1ab225a514ec331123b256cff...4536724a8644fda91a74b23901ba1789eaff7179)


### [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter/tree/0fce7c7c97d56ba0a0ae4c6a2ba32e559b8a03d7)

* [OCPBUGS-21457](https://issues.redhat.com/browse/OCPBUGS-21457): upgrade golang.org/x/net to 0.17.0 to address CVE [#90](https://github.com/openshift/k8s-prometheus-adapter/pull/90)
* [OCPBUGS-20405](https://issues.redhat.com/browse/OCPBUGS-20405): limit number of simultaneous client requests [#78](https://github.com/openshift/k8s-prometheus-adapter/pull/78)
* [OCPBUGS-6458](https://issues.redhat.com/browse/OCPBUGS-6458): Bump golang.org/x/net to v0.4.0 for GO-2022-1144 [#67](https://github.com/openshift/k8s-prometheus-adapter/pull/67)
* Updating ose-prometheus-adapter images to be consistent with ART [#66](https://github.com/openshift/k8s-prometheus-adapter/pull/66)
* [Full changelog](https://github.com/openshift/k8s-prometheus-adapter/compare/36c06694097a1a09a8c4e1f70a9025187814cb1a...0fce7c7c97d56ba0a0ae4c6a2ba32e559b8a03d7)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/1a14e5c9896976b43767ab325a6fe35527a514a5)

* [OCPBUGS-6236](https://issues.redhat.com/browse/OCPBUGS-6236): Updating openshift-enterprise-egress-router images to be consistent with ART [#121](https://github.com/openshift/images/pull/121)
* [OCPBUGS-10519](https://issues.redhat.com/browse/OCPBUGS-10519): Revert "bump RHEL8 egress-dns-proxy image to haproxy26" [#135](https://github.com/openshift/images/pull/135)
* Add jupierce as approver / remove Clayton [#127](https://github.com/openshift/images/pull/127)
* rhel9 base image: Fix build failure [#126](https://github.com/openshift/images/pull/126)
* Dockerfile: add RHEL9 base image dockerfile [#124](https://github.com/openshift/images/pull/124)
* bump RHEL8 egress-dns-proxy image to haproxy26 [#125](https://github.com/openshift/images/pull/125)
* Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART [#122](https://github.com/openshift/images/pull/122)
* Updating ose-egress-http-proxy images to be consistent with ART [#120](https://github.com/openshift/images/pull/120)
* Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART [#123](https://github.com/openshift/images/pull/123)
* Updating openshift-enterprise-base images to be consistent with ART [#119](https://github.com/openshift/images/pull/119)
* [Full changelog](https://github.com/openshift/images/compare/7e8a0105eb7369f3f92ad7b2581a2efffab5b28e...1a14e5c9896976b43767ab325a6fe35527a514a5)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/569ea1116cb348a31ea757b0a76d21de6bc8bcba)

* [OCPBUGS-20771](https://issues.redhat.com/browse/OCPBUGS-20771): update x/net to v0.17.0 [#590](https://github.com/openshift/sdn/pull/590)
* [OCPBUGS-22932](https://issues.redhat.com/browse/OCPBUGS-22932): Change the permission of 80-openshift-network.conf to 600 [#582](https://github.com/openshift/sdn/pull/582)
* [OCPBUGS-14504](https://issues.redhat.com/browse/OCPBUGS-14504): Use the ovsver build arg to infer the openvswitch short version number [#572](https://github.com/openshift/sdn/pull/572)
* [OCPBUGS-15977](https://issues.redhat.com/browse/OCPBUGS-15977): Dockerfile: keep a RHEL-8 CNI shim binary in the default /opt/cni/bin dir [#558](https://github.com/openshift/sdn/pull/558)
* [OCPBUGS-15977](https://issues.redhat.com/browse/OCPBUGS-15977): Dockerfile changes to build both rhel8 and rhel9 binaries [#557](https://github.com/openshift/sdn/pull/557)
* [OCPBUGS-14278](https://issues.redhat.com/browse/OCPBUGS-14278): fix possible concurrent map read/write [#550](https://github.com/openshift/sdn/pull/550)
* [OCPBUGS-12234](https://issues.redhat.com/browse/OCPBUGS-12234): CVE-2018-17419 ose-node-container: dns: Denial of Service (DoS) [#536](https://github.com/openshift/sdn/pull/536)
* [OCPBUGS-13150](https://issues.redhat.com/browse/OCPBUGS-13150): EgressNetworkPolicy DNS resolution does not fall back to TCP [#540](https://github.com/openshift/sdn/pull/540)
* [OCPBUGS-12994](https://issues.redhat.com/browse/OCPBUGS-12994): Prefer local TCP endpoint for cluster DNS service [#533](https://github.com/openshift/sdn/pull/533)
* [OCPBUGS-11887](https://issues.redhat.com/browse/OCPBUGS-11887): save and delete the old egress network policy [#527](https://github.com/openshift/sdn/pull/527)
* [OCPBUGS-10624](https://issues.redhat.com/browse/OCPBUGS-10624): Fix race in Egress IP Tracker start [#520](https://github.com/openshift/sdn/pull/520)
* Drop non-conntrack-based Service support [#507](https://github.com/openshift/sdn/pull/507)
* [SDN-3635](https://issues.redhat.com/browse/SDN-3635): OSDN kube 1.26.0 rebase 2nd attempt [#510](https://github.com/openshift/sdn/pull/510)
* Revert "SDN-3635: OSDN kube 1.26.0 rebase" [#508](https://github.com/openshift/sdn/pull/508)
* [SDN-3635](https://issues.redhat.com/browse/SDN-3635): OSDN kube 1.26.0 rebase [#504](https://github.com/openshift/sdn/pull/504)
* [OCPBUGS-6714](https://issues.redhat.com/browse/OCPBUGS-6714): Initialize egress node monitoring struct with previous reachability status [#503](https://github.com/openshift/sdn/pull/503)
* [OCPBUGS-5842](https://issues.redhat.com/browse/OCPBUGS-5842): Add /usr/bin/oc to image [#495](https://github.com/openshift/sdn/pull/495)
* [OCPBUGS-4133](https://issues.redhat.com/browse/OCPBUGS-4133): rebase kube to kube 1.25.4 [#498](https://github.com/openshift/sdn/pull/498)
* Add Tim R and remove Casey from OWNERS [#493](https://github.com/openshift/sdn/pull/493)
* Handle race condition to setup default vnid flows [#490](https://github.com/openshift/sdn/pull/490)
* iptables: use container iptables, not host's [#496](https://github.com/openshift/sdn/pull/496)
* Update for 4.13 / go 1.19, including gofmt updates [#481](https://github.com/openshift/sdn/pull/481)
* [OCPBUGS-95](https://issues.redhat.com/browse/OCPBUGS-95): Retry IP re-assignment on failure [#480](https://github.com/openshift/sdn/pull/480)
* [OCPBUGS-95](https://issues.redhat.com/browse/OCPBUGS-95): Add node egress IP assignment resync [#463](https://github.com/openshift/sdn/pull/463)
* [Bug 2050230](https://bugzilla.redhat.com/show_bug.cgi?id=2050230): pass ResourceVersion:0 for kube List() calls [#471](https://github.com/openshift/sdn/pull/471)
* [Full changelog](https://github.com/openshift/sdn/compare/9706f967ca7bb1ade1a789123c71fe6cb55a025e...569ea1116cb348a31ea757b0a76d21de6bc8bcba)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/f35f954ae0550e6ebeb94e244401fc069dc346b8)

* [OCPBUGS-31987](https://issues.redhat.com/browse/OCPBUGS-31987): CVE-2023-45288 [4.13] [#107](https://github.com/openshift/kube-rbac-proxy/pull/107)
* [OCPBUGS-20702](https://issues.redhat.com/browse/OCPBUGS-20702): v0.15.0 downstream release 4.13 [#84](https://github.com/openshift/kube-rbac-proxy/pull/84)
* [OCPBUGS-12513](https://issues.redhat.com/browse/OCPBUGS-12513): go.mod: update golang.org/x/net to v0.7.0 [#68](https://github.com/openshift/kube-rbac-proxy/pull/68)
* [OCPBUGS-11643](https://issues.redhat.com/browse/OCPBUGS-11643): Updating kube-rbac-proxy images to be consistent with ART [#61](https://github.com/openshift/kube-rbac-proxy/pull/61)
* Merge upstream v0.14.0 on downstream [#63](https://github.com/openshift/kube-rbac-proxy/pull/63)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/c69fae7877557d64dce64f36e0a78751952571c4...f35f954ae0550e6ebeb94e244401fc069dc346b8)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/fd791df54d7271c1611090505509a03454168689)

* [OCPBUGS-20778](https://issues.redhat.com/browse/OCPBUGS-20778): bump x/net to v0.17.0 [#102](https://github.com/openshift/kube-state-metrics/pull/102)
* Bump openshift/kube-state-metrics to v2.8.1 [#90](https://github.com/openshift/kube-state-metrics/pull/90)
* [OCPBUGS-6320](https://issues.redhat.com/browse/OCPBUGS-6320): Merge `upstream/release-2.8` [#89](https://github.com/openshift/kube-state-metrics/pull/89)
* Updating kube-state-metrics images to be consistent with ART [#88](https://github.com/openshift/kube-state-metrics/pull/88)
* [OCPBUGS-4275](https://issues.redhat.com/browse/OCPBUGS-4275): Update github.com/prometheus/exporter-toolkit [#87](https://github.com/openshift/kube-state-metrics/pull/87)
* Bump openshift/kube-state-metrics to v2.7.0 [#82](https://github.com/openshift/kube-state-metrics/pull/82)
* [OCPBUGS-4089](https://issues.redhat.com/browse/OCPBUGS-4089): cherry-pick, do not expose ingress path metric when service is nil [#81](https://github.com/openshift/kube-state-metrics/pull/81)
* [OCPBUGS-3924](https://issues.redhat.com/browse/OCPBUGS-3924): cherry-pick, autoscaling/v2beta2 HorizontalPodAutoscaler is deprecated in v1.23+ [#80](https://github.com/openshift/kube-state-metrics/pull/80)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/748f71317b9d3e3e5a96b14131294e2695f26434...fd791df54d7271c1611090505509a03454168689)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/bad104d13ba95bc850f5aaf96436f793d7985864)

* [OCPBUGS-6231](https://issues.redhat.com/browse/OCPBUGS-6231): Update golang version and ART images [#188](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/188)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/596745cec38b8401d1d906bfb9d3d78fdaeabcde...bad104d13ba95bc850f5aaf96436f793d7985864)


### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/ee2033ecd471dc9fc08d101c421a04916f4f55c5)

* Updates the component owner field to match the new categories [#17](https://github.com/openshift/cloud-provider-kubevirt/pull/17)
* Updating ose-kubevirt-cloud-controller-manager images to be consistent with ART [#16](https://github.com/openshift/cloud-provider-kubevirt/pull/16)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/a19615cda3daf69008253d75cc848ac0ad397179...ee2033ecd471dc9fc08d101c421a04916f4f55c5)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/9d909f7f3a3efd27d7efb71bf0324796aa6e8788)

* "OCPBUGS-29791: [release-4.13] Address CVE-2024-1725: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs" [#35](https://github.com/openshift/kubevirt-csi-driver/pull/35)
* Auto sync upstream 2023 02 12 09 [#19](https://github.com/openshift/kubevirt-csi-driver/pull/19)
* Updating ose-kubevirt-csi-driver-rhel8 images to be consistent with ART [#18](https://github.com/openshift/kubevirt-csi-driver/pull/18)
* Upstream Sync Oct 31st [#16](https://github.com/openshift/kubevirt-csi-driver/pull/16)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/f407c8a71c831a8f7911bf0b4a99bb6b16e0e0b6...9d909f7f3a3efd27d7efb71bf0324796aa6e8788)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/36754b7b90928e26811e1c5ea13e7d0bd85709de)

* Bug OCPBUGS-16340: Fix np retry [#738](https://github.com/openshift/kuryr-kubernetes/pull/738)
* [OCPBUGS-15457](https://issues.redhat.com/browse/OCPBUGS-15457): Remove unneeded grpcio dependencies from RPM [#735](https://github.com/openshift/kuryr-kubernetes/pull/735)
* [OCPBUGS-13427](https://issues.redhat.com/browse/OCPBUGS-13427): KuryrPort cleanup: Fix issue of subport not found [#726](https://github.com/openshift/kuryr-kubernetes/pull/726)
* Bug OCPBUGS-11982: Fix ValueError when Pod has no IP address [#720](https://github.com/openshift/kuryr-kubernetes/pull/720)
* Merge https://opendev.org/openstack/kuryr-kubernetes:master into master [#713](https://github.com/openshift/kuryr-kubernetes/pull/713)
* Merge https://opendev.org/openstack/kuryr-kubernetes:master into master [#711](https://github.com/openshift/kuryr-kubernetes/pull/711)
* Merge https://opendev.org/openstack/kuryr-kubernetes:master into master [#710](https://github.com/openshift/kuryr-kubernetes/pull/710)
* Updating kuryr-cni images to be consistent with ART [#709](https://github.com/openshift/kuryr-kubernetes/pull/709)
* Updating kuryr-controller images to be consistent with ART [#708](https://github.com/openshift/kuryr-kubernetes/pull/708)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/8fd2f8b0f7e2849b1a7db252beba0c8250552e36...36754b7b90928e26811e1c5ea13e7d0bd85709de)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/d4b7a8ab790a970ce2f0374146248b2307df0185)

* "OCPBUGS-19927: libvirt: Don't force use of virtio console" [#268](https://github.com/openshift/cluster-api-provider-libvirt/pull/268)
* Update vendoring master [#251](https://github.com/openshift/cluster-api-provider-libvirt/pull/251)
* Updating ose-libvirt-machine-controllers images to be consistent with ART [#243](https://github.com/openshift/cluster-api-provider-libvirt/pull/243)
* Fix go fmt and update controller image tag [#242](https://github.com/openshift/cluster-api-provider-libvirt/pull/242)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/a2882f7aa56d4059a20bdc02486da905b5764062...d4b7a8ab790a970ce2f0374146248b2307df0185)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/a950acc5d06dda8089dbbe4b9d4ad95e7fe78b62)

* [OCPBUGS-43856](https://issues.redhat.com/browse/OCPBUGS-43856): install/0000_30_machine-api-operator_00_credentials-request: Set skipServiceCheck again for GCP [#1304](https://github.com/openshift/machine-api-operator/pull/1304)
* [OCPBUGS-32015](https://issues.redhat.com/browse/OCPBUGS-32015): Fix zone tag value reconciliation for vSphere machines [#1225](https://github.com/openshift/machine-api-operator/pull/1225)
* [OCPBUGS-31994](https://issues.redhat.com/browse/OCPBUGS-31994): Update x/net to v0.25.0 [#1245](https://github.com/openshift/machine-api-operator/pull/1245)
* NO-JIRA: [release-4.13] Fix data race conditions in unit tests [#1254](https://github.com/openshift/machine-api-operator/pull/1254)
* [OCPBUGS-25165](https://issues.redhat.com/browse/OCPBUGS-25165): Add Snyk file to exclude vendor directory on scan [#1194](https://github.com/openshift/machine-api-operator/pull/1194)
* [OCPBUGS-24277](https://issues.redhat.com/browse/OCPBUGS-24277): Update reference URL [#1188](https://github.com/openshift/machine-api-operator/pull/1188)
* [OCPBUGS-24277](https://issues.redhat.com/browse/OCPBUGS-24277): Use docs URL instead of KCS article [#1181](https://github.com/openshift/machine-api-operator/pull/1181)
* [OCPBUGS-21513](https://issues.redhat.com/browse/OCPBUGS-21513): Bump golang.org/x/net to v0.18.0 [#1175](https://github.com/openshift/machine-api-operator/pull/1175)
* [OCPBUGS-12626](https://issues.redhat.com/browse/OCPBUGS-12626): Update golang.org/x/net dependency [#1148](https://github.com/openshift/machine-api-operator/pull/1148)
* [OCPBUGS-10661](https://issues.redhat.com/browse/OCPBUGS-10661): Fix empty component version [#1130](https://github.com/openshift/machine-api-operator/pull/1130)
* [OCPBUGS-6063](https://issues.redhat.com/browse/OCPBUGS-6063): Add missed permission for a pod deletion on vsphere platform [#1121](https://github.com/openshift/machine-api-operator/pull/1121)
* Add Machine webhook to validate the new fields of NutanixMachineProviderConfig [#1117](https://github.com/openshift/machine-api-operator/pull/1117)
* [OCPBUGS-6063](https://issues.redhat.com/browse/OCPBUGS-6063): Forcefully delete unevicted pods within vSphere machine deletion procedure [#1118](https://github.com/openshift/machine-api-operator/pull/1118)
* : Update tooling for MAO [#1100](https://github.com/openshift/machine-api-operator/pull/1100)
* [OCPCLOUD-1852](https://issues.redhat.com/browse/OCPCLOUD-1852): Bump k8s dependencies to 1.26; go 1.19 [#1115](https://github.com/openshift/machine-api-operator/pull/1115)
* [OCPBUGS-3275](https://issues.redhat.com/browse/OCPBUGS-3275): Update machinehealthcheck dropping log from Error to Warning [#1116](https://github.com/openshift/machine-api-operator/pull/1116)
* Metal3 remediation backport [#1075](https://github.com/openshift/machine-api-operator/pull/1075)
* [OCPBUGS-6063](https://issues.redhat.com/browse/OCPBUGS-6063): Block machine deletion if extra disks are attached [#1114](https://github.com/openshift/machine-api-operator/pull/1114)
* Add webhook validation for ConfidentialCompute on GCP [#1112](https://github.com/openshift/machine-api-operator/pull/1112)
* Remove the openstack-machine-controllers image [#1111](https://github.com/openshift/machine-api-operator/pull/1111)
* [MGMT-12838](https://issues.redhat.com/browse/MGMT-12838): add webook validation for shieldedInstanceConfig on GCP [#1102](https://github.com/openshift/machine-api-operator/pull/1102)
* : Short circuit misfiring [#1107](https://github.com/openshift/machine-api-operator/pull/1107)
* [OCPCLOUD-1801](https://issues.redhat.com/browse/OCPCLOUD-1801): Port to ginkgo v2 [#1099](https://github.com/openshift/machine-api-operator/pull/1099)
* Add warning for unknown fields when unmarshaling the provider spec [#1106](https://github.com/openshift/machine-api-operator/pull/1106)
* [OCPBUGS-5018](https://issues.redhat.com/browse/OCPBUGS-5018): machine-api-termination-handler: run DaemonSet only on Linux [#1101](https://github.com/openshift/machine-api-operator/pull/1101)
* [OCPBUGS-4566](https://issues.redhat.com/browse/OCPBUGS-4566): Append annotations from machine template spec to the node [#1096](https://github.com/openshift/machine-api-operator/pull/1096)
* Updating ose-machine-api-operator images to be consistent with ART [#1095](https://github.com/openshift/machine-api-operator/pull/1095)
* [OCPCLOUD-1769](https://issues.redhat.com/browse/OCPCLOUD-1769): Make machine phases public consts [#1088](https://github.com/openshift/machine-api-operator/pull/1088)
* : Set default container for machine-api-operator [#1092](https://github.com/openshift/machine-api-operator/pull/1092)
* Revert custom role [#1097](https://github.com/openshift/machine-api-operator/pull/1097)
* Add permissions for regionBackendServices [#1094](https://github.com/openshift/machine-api-operator/pull/1094)
* : GCP Credentials req. using new API field permissions [#1087](https://github.com/openshift/machine-api-operator/pull/1087)
* Fix lint issues reported by golangci-lint [#1069](https://github.com/openshift/machine-api-operator/pull/1069)
* Increase timeout for machineset tests [#1091](https://github.com/openshift/machine-api-operator/pull/1091)
* Use StringDeref from k8s.io/utils instead of custrom implementation [#1090](https://github.com/openshift/machine-api-operator/pull/1090)
* docs: Add a reference to machine-config-server [#1089](https://github.com/openshift/machine-api-operator/pull/1089)
* Allow to use machine.openshift.io API in provider specs [#1085](https://github.com/openshift/machine-api-operator/pull/1085)
* [Bug 2095274](https://bugzilla.redhat.com/show_bug.cgi?id=2095274): vSphere, fix network existence check for network devices during machine creation [#1082](https://github.com/openshift/machine-api-operator/pull/1082)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/b6c243d139f4345a88d5678eb6ba6041a2abb405...a950acc5d06dda8089dbbe4b9d4ad95e7fe78b62)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/b1a8f6946397e7a04ebd7a43ad6a15cb543e6599)

* [OCPBUGS-38372](https://issues.redhat.com/browse/OCPBUGS-38372): Revert "MCD-pull: run after network-online.target in Azure" [#4527](https://github.com/openshift/machine-config-operator/pull/4527)
* [OCPBUGS-38295](https://issues.redhat.com/browse/OCPBUGS-38295): daemon/update: disable systemd unit before overwriting [#4522](https://github.com/openshift/machine-config-operator/pull/4522)
* [OCPBUGS-37783](https://issues.redhat.com/browse/OCPBUGS-37783): Openshift uncordoned compute-node that was intentionally cordoned [#4507](https://github.com/openshift/machine-config-operator/pull/4507)
* [OCPBUGS-37160](https://issues.redhat.com/browse/OCPBUGS-37160): MCD-pull: run after network-online.target in Azure [#4474](https://github.com/openshift/machine-config-operator/pull/4474)
* [OCPBUGS-36782](https://issues.redhat.com/browse/OCPBUGS-36782): daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages [#4464](https://github.com/openshift/machine-config-operator/pull/4464)
* [OCPBUGS-32208](https://issues.redhat.com/browse/OCPBUGS-32208): Run resolv-prepender entirely async [#4314](https://github.com/openshift/machine-config-operator/pull/4314)
* [OCPBUGS-33327](https://issues.redhat.com/browse/OCPBUGS-33327): make verify should use MCO's kube version [#4352](https://github.com/openshift/machine-config-operator/pull/4352)
* [OCPBUGS-29721](https://issues.redhat.com/browse/OCPBUGS-29721): Add existing kubeletconfig/ctrcfg mc-name-suffix annotation [#4206](https://github.com/openshift/machine-config-operator/pull/4206)
* [OCPBUGS-30285](https://issues.redhat.com/browse/OCPBUGS-30285): set nodeStatusReportFrequency [#4243](https://github.com/openshift/machine-config-operator/pull/4243)
* [OCPBUGS-28740](https://issues.redhat.com/browse/OCPBUGS-28740): crio: drop automatic image cleanup on upgrades [#4154](https://github.com/openshift/machine-config-operator/pull/4154)
* [OCPBUGS-29151](https://issues.redhat.com/browse/OCPBUGS-29151): fix nodeStatusUpdateFrequency [#4170](https://github.com/openshift/machine-config-operator/pull/4170)
* [OCPBUGS-24661](https://issues.redhat.com/browse/OCPBUGS-24661): daemon: Add support for new nmstate logic [#4036](https://github.com/openshift/machine-config-operator/pull/4036)
* [OCPBUGS-27816](https://issues.redhat.com/browse/OCPBUGS-27816): use *resource.Quantity to not automatically set 0 [#4141](https://github.com/openshift/machine-config-operator/pull/4141)
* [OCPBUGS-22272](https://issues.redhat.com/browse/OCPBUGS-22272), [OCPBUGS-27172](https://issues.redhat.com/browse/OCPBUGS-27172): kubelet: fix kubelet labels [#4120](https://github.com/openshift/machine-config-operator/pull/4120)
* [OCPBUGS-27096](https://issues.redhat.com/browse/OCPBUGS-27096): Azure Run ovs-configuration.service before dnsmasq.service [#4115](https://github.com/openshift/machine-config-operator/pull/4115)
* [OCPBUGS-19658](https://issues.redhat.com/browse/OCPBUGS-19658): After dual-stack conversion reconcile IPFamilies [#3935](https://github.com/openshift/machine-config-operator/pull/3935)
* [OCPBUGS-23468](https://issues.redhat.com/browse/OCPBUGS-23468): support icsp and idms objects [#4027](https://github.com/openshift/machine-config-operator/pull/4027)
* [OCPBUGS-23536](https://issues.redhat.com/browse/OCPBUGS-23536): Introduce kubelet-dependencies.target and firstboot-osupdate.target [#4043](https://github.com/openshift/machine-config-operator/pull/4043)
* [OCPBUGS-21052](https://issues.redhat.com/browse/OCPBUGS-21052): Update library-go and kube deps to latest version [#4011](https://github.com/openshift/machine-config-operator/pull/4011)
* [OCPBUGS-22205](https://issues.redhat.com/browse/OCPBUGS-22205): Consider ingress VIPs when selecting node IP [#3991](https://github.com/openshift/machine-config-operator/pull/3991)
* [OCPBUGS-18031](https://issues.redhat.com/browse/OCPBUGS-18031): on-prem: run resolv-prepender on NM reapply event [#3880](https://github.com/openshift/machine-config-operator/pull/3880)
* [OCPBUGS-22412](https://issues.redhat.com/browse/OCPBUGS-22412): bootstrap_test: always set APIVersion and Kind for DNS [#4002](https://github.com/openshift/machine-config-operator/pull/4002)
* [OCPBUGS-21721](https://issues.redhat.com/browse/OCPBUGS-21721): install/0000_90_machine-config-operator_90_deletion: Drop this file [#3983](https://github.com/openshift/machine-config-operator/pull/3983)
* [OCPBUGS-20333](https://issues.redhat.com/browse/OCPBUGS-20333): resolv-prepender: avoid pulling baremetalRuntimeCfgImage again if it … [#3962](https://github.com/openshift/machine-config-operator/pull/3962)
* [OCPBUGS-18803](https://issues.redhat.com/browse/OCPBUGS-18803): Soften grep pattern for ingress default router [#3908](https://github.com/openshift/machine-config-operator/pull/3908)
* [OCPBUGS-19958](https://issues.redhat.com/browse/OCPBUGS-19958): [release-4.13] Backport logspam PRs [#3950](https://github.com/openshift/machine-config-operator/pull/3950)
* [OCPBUGS-19675](https://issues.redhat.com/browse/OCPBUGS-19675): daemon: always use `podman cp` to copy extensions container content [#3938](https://github.com/openshift/machine-config-operator/pull/3938)
* [OCPBUGS-19400](https://issues.redhat.com/browse/OCPBUGS-19400): install: Recreate and delayed default ServiceAccount deletion [#3923](https://github.com/openshift/machine-config-operator/pull/3923)
* [OCPBUGS-19509](https://issues.redhat.com/browse/OCPBUGS-19509): Ignore invoking nbctl calls if its SDN [#3929](https://github.com/openshift/machine-config-operator/pull/3929)
* [OCPBUGS-19414](https://issues.redhat.com/browse/OCPBUGS-19414): The kubeconfig copied on to each node has 644 permissions [#3924](https://github.com/openshift/machine-config-operator/pull/3924)
* [OCPBUGS-18159](https://issues.redhat.com/browse/OCPBUGS-18159): Ensure azure-routes hack for internalLB hairpin traffic works for SGW [#3904](https://github.com/openshift/machine-config-operator/pull/3904)
* [OCPBUGS-16218](https://issues.redhat.com/browse/OCPBUGS-16218): Prevent NM from unsetting the hostname [#3805](https://github.com/openshift/machine-config-operator/pull/3805)
* [OCPBUGS-17997](https://issues.redhat.com/browse/OCPBUGS-17997): SSHkeys fails to write on upgrade to 4.13.rc3 [#3879](https://github.com/openshift/machine-config-operator/pull/3879)
* [OCPBUGS-18076](https://issues.redhat.com/browse/OCPBUGS-18076): daemon: create /etc/systemd/network directory on node [#3888](https://github.com/openshift/machine-config-operator/pull/3888)
* [OCPBUGS-17769](https://issues.redhat.com/browse/OCPBUGS-17769): Agent-based install process the container machine-config-controller will be oom [#3868](https://github.com/openshift/machine-config-operator/pull/3868)
* [OKD-174](https://issues.redhat.com/browse/OKD-174): Dockerfile: OKD: Reenable extensions image on SCOS [#3845](https://github.com/openshift/machine-config-operator/pull/3845)
* [OCPBUGS-17430](https://issues.redhat.com/browse/OCPBUGS-17430): The machine-config-controller pod restart in SNO+1 causing daemonsets to restart [#3841](https://github.com/openshift/machine-config-operator/pull/3841)
* [OCPBUGS-17163](https://issues.redhat.com/browse/OCPBUGS-17163): daemon: Always replace binary [#3833](https://github.com/openshift/machine-config-operator/pull/3833)
* [OCPBUGS-16888](https://issues.redhat.com/browse/OCPBUGS-16888): daemon: Make binary writing idempotent [#3826](https://github.com/openshift/machine-config-operator/pull/3826)
* [OCPBUGS-16888](https://issues.redhat.com/browse/OCPBUGS-16888): daemon: no need to reexec when target and source rhel version is same [#3824](https://github.com/openshift/machine-config-operator/pull/3824)
* [OCPBUGS-16622](https://issues.redhat.com/browse/OCPBUGS-16622): daemon: Copy matching binary to host, re-exec with it [#3812](https://github.com/openshift/machine-config-operator/pull/3812)
* [OCPNODE-1717](https://issues.redhat.com/browse/OCPNODE-1717): Update config node spec while explicitly updating the cgroups mode [#3793](https://github.com/openshift/machine-config-operator/pull/3793)
* 4.13: Revert rhel9 binaries builds [#3802](https://github.com/openshift/machine-config-operator/pull/3802)
* [OCPBUGS-14459](https://issues.redhat.com/browse/OCPBUGS-14459): daemon: Remove noisy log message [#3723](https://github.com/openshift/machine-config-operator/pull/3723)
* [OCPBUGS-15580](https://issues.redhat.com/browse/OCPBUGS-15580): 4.13: Dockerfile: update rhel7 nmstate pin [#3764](https://github.com/openshift/machine-config-operator/pull/3764)
* [OCPBUGS-15463](https://issues.redhat.com/browse/OCPBUGS-15463): Minor fix to support protectKernelDefaults field in Kubelet Config [#3757](https://github.com/openshift/machine-config-operator/pull/3757)
* 4.13: Dockerfile: use proper rhel9 image [#3771](https://github.com/openshift/machine-config-operator/pull/3771)
* 4.13: use rhel9 builder for daemon binary [#3760](https://github.com/openshift/machine-config-operator/pull/3760)
* [OCPBUGS-13311](https://issues.redhat.com/browse/OCPBUGS-13311): daemon: write certs in firstboot-complete path [#3702](https://github.com/openshift/machine-config-operator/pull/3702)
* [OCPBUGS-13404](https://issues.redhat.com/browse/OCPBUGS-13404), [OCPBUGS-14298](https://issues.redhat.com/browse/OCPBUGS-14298): Dockerfile: pin to nmstate-2.2.9-6.rhaos4.13.el8 [#3716](https://github.com/openshift/machine-config-operator/pull/3716)
* [OCPBUGS-14850](https://issues.redhat.com/browse/OCPBUGS-14850): Allow userfaultfd syscall to be used by unprivileged users [#3743](https://github.com/openshift/machine-config-operator/pull/3743)
* [OCPBUGS-13974](https://issues.redhat.com/browse/OCPBUGS-13974): MCO-496: Support ignition versions 3.3 + 3.4 but keep version 3.2 as default [#3714](https://github.com/openshift/machine-config-operator/pull/3714)
* [OCPBUGS-13138](https://issues.redhat.com/browse/OCPBUGS-13138): daemon: Don't traverse `/run/ostree/auth.json` symlink [#3697](https://github.com/openshift/machine-config-operator/pull/3697)
* [OCPBUGS-11302](https://issues.redhat.com/browse/OCPBUGS-11302): Fix regex dot in coredns config file [#3659](https://github.com/openshift/machine-config-operator/pull/3659)
* [OCPBUGS-12784](https://issues.redhat.com/browse/OCPBUGS-12784), [OCPBUGS-4476](https://issues.redhat.com/browse/OCPBUGS-4476): keepalived/ingress: change healthcheck script [#3687](https://github.com/openshift/machine-config-operator/pull/3687)
* [OCPBUGS-12919](https://issues.redhat.com/browse/OCPBUGS-12919): The MCD has a non-functional pivot command that should be removed [#3690](https://github.com/openshift/machine-config-operator/pull/3690)
* [OCPBUGS-10966](https://issues.redhat.com/browse/OCPBUGS-10966): configure-ovs: support UUID in vlan.parent [#3639](https://github.com/openshift/machine-config-operator/pull/3639)
* [OCPBUGS-13312](https://issues.redhat.com/browse/OCPBUGS-13312): daemon: event only on actual OS updates [#3703](https://github.com/openshift/machine-config-operator/pull/3703)
* [OCPBUGS-11598](https://issues.redhat.com/browse/OCPBUGS-11598): Do not trigger openshift-azure-routes/openshift-alibaba-routes service based on file existence [#3681](https://github.com/openshift/machine-config-operator/pull/3681)
* [OCPBUGS-11146](https://issues.redhat.com/browse/OCPBUGS-11146): update cloud provider flags on vSphere for storage options [#3655](https://github.com/openshift/machine-config-operator/pull/3655)
* [OCPBUGS-11778](https://issues.redhat.com/browse/OCPBUGS-11778): Fixing forcedns dispatcher script permission issue for assisted sno rhel9 upgrade [#3678](https://github.com/openshift/machine-config-operator/pull/3678)
* [OCPBUGS-11051](https://issues.redhat.com/browse/OCPBUGS-11051): Splitting NetworkManager-onprem.conf.yaml to 2 files: [#3642](https://github.com/openshift/machine-config-operator/pull/3642)
* [OCPBUGS-10946](https://issues.redhat.com/browse/OCPBUGS-10946): Fix kubelet.service node-ip for v6-primary dual-stack [#3638](https://github.com/openshift/machine-config-operator/pull/3638)
* [OCPBUGS-11507](https://issues.redhat.com/browse/OCPBUGS-11507): Accomodate ART limitation in parsing [[]] bash [#3671](https://github.com/openshift/machine-config-operator/pull/3671)
* [OCPBUGS-11507](https://issues.redhat.com/browse/OCPBUGS-11507): Persist static IP addressed NIC names from rhel8 [#3664](https://github.com/openshift/machine-config-operator/pull/3664)
* [OCPBUGS-11289](https://issues.redhat.com/browse/OCPBUGS-11289): daemon: write certificate in OnceFrom and HyperShift [#3658](https://github.com/openshift/machine-config-operator/pull/3658)
* [OCPBUGS-11040](https://issues.redhat.com/browse/OCPBUGS-11040): remove container runtime flag [#3641](https://github.com/openshift/machine-config-operator/pull/3641)
* [OCPBUGS-11068](https://issues.redhat.com/browse/OCPBUGS-11068): Enable base nodeip-configuration for vsphere upi [#3644](https://github.com/openshift/machine-config-operator/pull/3644)
* [OCPBUGS-8317](https://issues.redhat.com/browse/OCPBUGS-8317): Wrap podman commands in a while loop [#3605](https://github.com/openshift/machine-config-operator/pull/3605)
* [OCPBUGS-10367](https://issues.redhat.com/browse/OCPBUGS-10367): MCO-503: daemon: have a special path to sync in certs [#3612](https://github.com/openshift/machine-config-operator/pull/3612)
* [OCPBUGS-10427](https://issues.redhat.com/browse/OCPBUGS-10427): daemon: Drop duplicate `--authfile` used in `run` [#3616](https://github.com/openshift/machine-config-operator/pull/3616)
* [OCPBUGS-10220](https://issues.redhat.com/browse/OCPBUGS-10220): Remove hard requirement for the afterburn from early-running aws-related services [#3610](https://github.com/openshift/machine-config-operator/pull/3610)
* [COS-1926](https://issues.redhat.com/browse/COS-1926), [MCO-116](https://issues.redhat.com/browse/MCO-116), [OCPBUGS-8703](https://issues.redhat.com/browse/OCPBUGS-8703), [OCPBUGS-9951](https://issues.redhat.com/browse/OCPBUGS-9951): rhel coreos 9 4.13 katamari [#3604](https://github.com/openshift/machine-config-operator/pull/3604)
* [OCPBUGS-8702](https://issues.redhat.com/browse/OCPBUGS-8702): Revert "daemon: Temporarily copy auth file with more open perms on FCOS" [#3594](https://github.com/openshift/machine-config-operator/pull/3594)
* [OCPBUGS-8445](https://issues.redhat.com/browse/OCPBUGS-8445): Default the cgroup version to "v1" via base template controller [#3587](https://github.com/openshift/machine-config-operator/pull/3587)
* [OCPBUGS-8703](https://issues.redhat.com/browse/OCPBUGS-8703): Backport switchkernel 4.13 [#3595](https://github.com/openshift/machine-config-operator/pull/3595)
* [OPNET-208](https://issues.redhat.com/browse/OPNET-208): Prefer ipv6 on v6-primary dual stack deployments [#3565](https://github.com/openshift/machine-config-operator/pull/3565)
* [OCPBUGS-7719](https://issues.redhat.com/browse/OCPBUGS-7719): Add back cleanupDuplicateMC [#3559](https://github.com/openshift/machine-config-operator/pull/3559)
* [OCPBUGS-7903](https://issues.redhat.com/browse/OCPBUGS-7903): Pool degraded with error: rpm-ostree kargs: signal: terminated [#3572](https://github.com/openshift/machine-config-operator/pull/3572)
* Fixing platform path order as platform specific path should be the last [#3574](https://github.com/openshift/machine-config-operator/pull/3574)
* [MCO-417](https://issues.redhat.com/browse/MCO-417): MCO-418: MCD watches/create/update password with MachineConfig [#3539](https://github.com/openshift/machine-config-operator/pull/3539)
* Regenerate controllerconfig.crd.yaml [#3567](https://github.com/openshift/machine-config-operator/pull/3567)
* [OCPBUGS-7743](https://issues.redhat.com/browse/OCPBUGS-7743): Adding dnsmasq config for sno [#3551](https://github.com/openshift/machine-config-operator/pull/3551)
* [WRKLDS-705](https://issues.redhat.com/browse/WRKLDS-705): Bump openshift/api to enable DynamicResourceAllocation through TechPreviewNoUpgrade [#3568](https://github.com/openshift/machine-config-operator/pull/3568)
* [OCPBUGS-7909](https://issues.redhat.com/browse/OCPBUGS-7909): Fix permissions on resolv.conf [#3570](https://github.com/openshift/machine-config-operator/pull/3570)
* [OCPBUGS-7896](https://issues.redhat.com/browse/OCPBUGS-7896): MCO should not add keepalived pod manifests in case of VSPHERE UPI [#3569](https://github.com/openshift/machine-config-operator/pull/3569)
* [OCPNODE-1501](https://issues.redhat.com/browse/OCPNODE-1501): add protectKernelDefaults to kubelet config [#3556](https://github.com/openshift/machine-config-operator/pull/3556)
* [OPNET-197](https://issues.redhat.com/browse/OPNET-197): Remove node-ip from kubelet for dual-stack vSphere [#3518](https://github.com/openshift/machine-config-operator/pull/3518)
* [OSASINFRA-3091](https://issues.redhat.com/browse/OSASINFRA-3091): External LB support for on-prem platforms [#3519](https://github.com/openshift/machine-config-operator/pull/3519)
* [OCPBUGS-6682](https://issues.redhat.com/browse/OCPBUGS-6682): Switch from ifconfig to iproute2 [#3524](https://github.com/openshift/machine-config-operator/pull/3524)
* [OCPBUGS-1565](https://issues.redhat.com/browse/OCPBUGS-1565): Prevent possible split-brain scenario with keepalived unicast [#3342](https://github.com/openshift/machine-config-operator/pull/3342)
* Fix typo in ctrcfg,kcfg docs [#3547](https://github.com/openshift/machine-config-operator/pull/3547)
* [OPNET-133](https://issues.redhat.com/browse/OPNET-133): Enabling remote worker feature only for baremetal platform [#3540](https://github.com/openshift/machine-config-operator/pull/3540)
* [OCPBUGS-7207](https://issues.redhat.com/browse/OCPBUGS-7207): configure-ovs: fix mtu-migration cleanup [#3545](https://github.com/openshift/machine-config-operator/pull/3545)
* [OCPBUGS-630](https://issues.redhat.com/browse/OCPBUGS-630): controller: default overwrite to true for files [#3525](https://github.com/openshift/machine-config-operator/pull/3525)
* [Bug 2027000](https://bugzilla.redhat.com/show_bug.cgi?id=2027000): The user is ignored when we create a new file using a MachineConfig [#3541](https://github.com/openshift/machine-config-operator/pull/3541)
* [OCPNODE-1416](https://issues.redhat.com/browse/OCPNODE-1416): CGroupsV2 feature GA in MCO [#3520](https://github.com/openshift/machine-config-operator/pull/3520)
* Add doc for IDMS and ITMS CRDs [#3530](https://github.com/openshift/machine-config-operator/pull/3530)
* [OCPBUGS-5497](https://issues.redhat.com/browse/OCPBUGS-5497): MCDRebootError alarm disappears after 15 minutes [#3507](https://github.com/openshift/machine-config-operator/pull/3507)
* [OCPBUGS-6945](https://issues.redhat.com/browse/OCPBUGS-6945): Fixes node OS detection [#3529](https://github.com/openshift/machine-config-operator/pull/3529)
* [OCPBUGS-5888](https://issues.redhat.com/browse/OCPBUGS-5888): Don't switch to the "live" certificate bundle until after first ControllerConfig is generated [#3513](https://github.com/openshift/machine-config-operator/pull/3513)
* [Bug 2104978](https://bugzilla.redhat.com/show_bug.cgi?id=2104978): fix degraded pool state message [#3488](https://github.com/openshift/machine-config-operator/pull/3488)
* [OCPBUGS-5520](https://issues.redhat.com/browse/OCPBUGS-5520): MCDPivotError alert fires due temporary transient failures [#3523](https://github.com/openshift/machine-config-operator/pull/3523)
* Preserve logs from Podman executions [#3516](https://github.com/openshift/machine-config-operator/pull/3516)
* daemon: Add some comments on the firstboot reboot sleep [#3533](https://github.com/openshift/machine-config-operator/pull/3533)
* [OCPBUGS-3612](https://issues.redhat.com/browse/OCPBUGS-3612): configure-ovs: optionally generate configuration in /run [#3467](https://github.com/openshift/machine-config-operator/pull/3467)
* [OCPBUGS-3909](https://issues.redhat.com/browse/OCPBUGS-3909): Don't validate contents and mode for masked units [#3437](https://github.com/openshift/machine-config-operator/pull/3437)
* [OCPBUGS-3988](https://issues.redhat.com/browse/OCPBUGS-3988): haproxy - use curl for validation [#3512](https://github.com/openshift/machine-config-operator/pull/3512)
* [OCPBUGS-6213](https://issues.redhat.com/browse/OCPBUGS-6213): Update MCO images to be consistent with ART [#3514](https://github.com/openshift/machine-config-operator/pull/3514)
* [OCPBUGS-6004](https://issues.redhat.com/browse/OCPBUGS-6004): Adding network type parameter to nodeip-configuration service [#3491](https://github.com/openshift/machine-config-operator/pull/3491)
* [OCPBUGS-5188](https://issues.redhat.com/browse/OCPBUGS-5188): MCCDrainErr should reference the affected node [#3477](https://github.com/openshift/machine-config-operator/pull/3477)
* [OCPBUGS-6092](https://issues.redhat.com/browse/OCPBUGS-6092): Improvements for `configure-ovs.sh` [#3509](https://github.com/openshift/machine-config-operator/pull/3509)
* ctrcfg: update CRD to always allow crun [#3508](https://github.com/openshift/machine-config-operator/pull/3508)
* [OCPCLOUD-1818](https://issues.redhat.com/browse/OCPCLOUD-1818): Bump library-go to move vSphere to external CCM [#3484](https://github.com/openshift/machine-config-operator/pull/3484)
* [OCPBUGS-4049](https://issues.redhat.com/browse/OCPBUGS-4049): Only check image type if we are sure there is work that needs to be done [#3464](https://github.com/openshift/machine-config-operator/pull/3464)
* [OCPNODE-1330](https://issues.redhat.com/browse/OCPNODE-1330): Set the CGroups version explicitly to "v1" [#3486](https://github.com/openshift/machine-config-operator/pull/3486)
* Add CRD ImageDigestMirrorSet,ImageTagMirrorSet [#3037](https://github.com/openshift/machine-config-operator/pull/3037)
* [Bug 2113973](https://bugzilla.redhat.com/show_bug.cgi?id=2113973): Avoid 'too restrictive' SCC problems by being more explicit [#3502](https://github.com/openshift/machine-config-operator/pull/3502)
* [OCPBUGS-6018](https://issues.redhat.com/browse/OCPBUGS-6018): controller: don't render new MC until base MCs update [#3501](https://github.com/openshift/machine-config-operator/pull/3501)
* [OCPBUGS-904](https://issues.redhat.com/browse/OCPBUGS-904): Alerts from MCO are missing namespace [#3498](https://github.com/openshift/machine-config-operator/pull/3498)
* [OCPBUGS-5379](https://issues.redhat.com/browse/OCPBUGS-5379): There are not enough logs in case "oc extract" is stuck in mco first boot [#3493](https://github.com/openshift/machine-config-operator/pull/3493)
* [MCO-456](https://issues.redhat.com/browse/MCO-456): Fix e2e test jobs [#3492](https://github.com/openshift/machine-config-operator/pull/3492)
* [OCPBUGS-5872](https://issues.redhat.com/browse/OCPBUGS-5872): Wrap podman commands in a while loop [#3481](https://github.com/openshift/machine-config-operator/pull/3481)
* [OCPBUGS-5696](https://issues.redhat.com/browse/OCPBUGS-5696): remove goutils from dependency tree [#3480](https://github.com/openshift/machine-config-operator/pull/3480)
* Add mkowalsk as a bare metal reviewer and approver [#3482](https://github.com/openshift/machine-config-operator/pull/3482)
* install/0000_90_machine-config-operator_01_prometheus-rules: Use labels for MCC logs [#3470](https://github.com/openshift/machine-config-operator/pull/3470)
* fix unit test exit code propagation [#3476](https://github.com/openshift/machine-config-operator/pull/3476)
* [OCPBUGS-4769](https://issues.redhat.com/browse/OCPBUGS-4769): daemon: Explicitly pull image before running [#3471](https://github.com/openshift/machine-config-operator/pull/3471)
* [OCPBUGS-4521](https://issues.redhat.com/browse/OCPBUGS-4521): kubelet client certificate verification ca bundle should match kube-apiserver [#3458](https://github.com/openshift/machine-config-operator/pull/3458)
* Bump openshift/api and update CSIMigration* feature gates [#3469](https://github.com/openshift/machine-config-operator/pull/3469)
* [OCPBUGS-5001](https://issues.redhat.com/browse/OCPBUGS-5001): install/0000_90_machine-config-operator_01_prometheus-rules: Fix MachineConfigControllerPausedPoolKubeletCA runbook URIs [#3462](https://github.com/openshift/machine-config-operator/pull/3462)
* move envtest helpers into framework package for easier reuse [#3428](https://github.com/openshift/machine-config-operator/pull/3428)
* [OCPBUGS-2248](https://issues.redhat.com/browse/OCPBUGS-2248): [alicloud] provider ID not being set for kubelet [#3449](https://github.com/openshift/machine-config-operator/pull/3449)
* [MCO-420](https://issues.redhat.com/browse/MCO-420): Migrate drain alert to drain controller [#3424](https://github.com/openshift/machine-config-operator/pull/3424)
* Updating openshift-proxy-pull-test images to be consistent with ART [#3444](https://github.com/openshift/machine-config-operator/pull/3444)
* [OCPBUGS-4101](https://issues.redhat.com/browse/OCPBUGS-4101): Do not allow empty system reserved values [#3439](https://github.com/openshift/machine-config-operator/pull/3439)
* [Bug 1853264](https://bugzilla.redhat.com/show_bug.cgi?id=1853264): Fix unbound cardinality for MCDRebootErr and MCDPivotErr [#3406](https://github.com/openshift/machine-config-operator/pull/3406)
* [MCO-397](https://issues.redhat.com/browse/MCO-397): Add repo doc for using "Layering Phase 0", detail some of the tradeoffs/consequences/questions [#3426](https://github.com/openshift/machine-config-operator/pull/3426)
* [OCPBUGS-4656](https://issues.redhat.com/browse/OCPBUGS-4656): vsphere: check that /etc/hostname is not empty [#3451](https://github.com/openshift/machine-config-operator/pull/3451)
* [OCPBUGS-1761](https://issues.redhat.com/browse/OCPBUGS-1761): Imageinspect takes type of error into account, drop podman inspect fallback [#3413](https://github.com/openshift/machine-config-operator/pull/3413)
* Add templates for required sysctls max_map_count and arp_announce [#3440](https://github.com/openshift/machine-config-operator/pull/3440)
* [OPNET-133](https://issues.redhat.com/browse/OPNET-133): Support remote worker in onprem installations [#3431](https://github.com/openshift/machine-config-operator/pull/3431)
* [OCPBUGS-4039](https://issues.redhat.com/browse/OCPBUGS-4039): NM resolv prepender: correct permissions for systemd resolved config [#3432](https://github.com/openshift/machine-config-operator/pull/3432)
* [OCPBUGS-4039](https://issues.redhat.com/browse/OCPBUGS-4039): NM resolve prepender: remove extra quotes in OKD flow [#3430](https://github.com/openshift/machine-config-operator/pull/3430)
* [OCPBUGS-2921](https://issues.redhat.com/browse/OCPBUGS-2921): configure-ovs: copy IP method and warn about low MTU [#3411](https://github.com/openshift/machine-config-operator/pull/3411)
* daemon: Be very loud about failures of ostree-finalize-staged.service [#3404](https://github.com/openshift/machine-config-operator/pull/3404)
* [OCPBUGS-1491](https://issues.redhat.com/browse/OCPBUGS-1491): daemon: gate done state on uncordon completion [#3399](https://github.com/openshift/machine-config-operator/pull/3399)
* [OCPBUGS-3508](https://issues.redhat.com/browse/OCPBUGS-3508): Don't make https call to http endpoint [#3416](https://github.com/openshift/machine-config-operator/pull/3416)
* [OCPBUGS-1577](https://issues.redhat.com/browse/OCPBUGS-1577): On-prem: Ensure resolv-prepender respects NM dispatcher timeout [#3394](https://github.com/openshift/machine-config-operator/pull/3394)
* Cleanup BM owner aliases [#3405](https://github.com/openshift/machine-config-operator/pull/3405)
* [OCPBUGS-2935](https://issues.redhat.com/browse/OCPBUGS-2935): daemon: Stop setting I/O scheduler to bfq [#3415](https://github.com/openshift/machine-config-operator/pull/3415)
* [OCPBUGS-3621](https://issues.redhat.com/browse/OCPBUGS-3621): Revert "Substitute skopeo inspect for imageInspect/podman" [#3412](https://github.com/openshift/machine-config-operator/pull/3412)
* Unpin all pinned dependencies [#3403](https://github.com/openshift/machine-config-operator/pull/3403)
* [OCPBUGS-2988](https://issues.redhat.com/browse/OCPBUGS-2988): Mount /run/nodeip-configuration into keepalived containers [#3384](https://github.com/openshift/machine-config-operator/pull/3384)
* [OCPBUGS-1761](https://issues.redhat.com/browse/OCPBUGS-1761): Substitute skopeo inspect for imageInspect/podman, drop podman inspect fallback [#3390](https://github.com/openshift/machine-config-operator/pull/3390)
* [Bug 2100181](https://bugzilla.redhat.com/show_bug.cgi?id=2100181): baremetal: clean state generated by NM when run by dracut [#3208](https://github.com/openshift/machine-config-operator/pull/3208)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/952b12c5365dcd6334849007d71c83c9613be7ed...b1a8f6946397e7a04ebd7a43ad6a15cb543e6599)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/34a4abe6ec47fff69476695eccffdb27fe23780c)

* [OCPBUGS-27089](https://issues.redhat.com/browse/OCPBUGS-27089): configurable ironic agent vlan creation [#117](https://github.com/openshift/image-customization-controller/pull/117)
* [OCPBUGS-21549](https://issues.redhat.com/browse/OCPBUGS-21549): Uplift x/net to v0.17.0 [#105](https://github.com/openshift/image-customization-controller/pull/105)
* [OCPBUGS-19006](https://issues.redhat.com/browse/OCPBUGS-19006): Pass BareMetalHost name to IPA (take 2) [#98](https://github.com/openshift/image-customization-controller/pull/98)
* [OCPBUGS-14250](https://issues.redhat.com/browse/OCPBUGS-14250): Watch networkData Secrets for changes [#95](https://github.com/openshift/image-customization-controller/pull/95)
* [OCPBUGS-12694](https://issues.redhat.com/browse/OCPBUGS-12694): Uplift x/net to 0.7.0 [#86](https://github.com/openshift/image-customization-controller/pull/86)
* [OCPBUGS-6420](https://issues.redhat.com/browse/OCPBUGS-6420): update kubernetes to 0.24.9 to fix CVE-2022-41717 [#78](https://github.com/openshift/image-customization-controller/pull/78)
* Updating ose-image-customization-controller images to be consistent with ART [#74](https://github.com/openshift/image-customization-controller/pull/74)
* [OCPBUGS-5737](https://issues.redhat.com/browse/OCPBUGS-5737): Upgrade dependencies [#75](https://github.com/openshift/image-customization-controller/pull/75)
* Fix to work with rust-based nmstatectl [#73](https://github.com/openshift/image-customization-controller/pull/73)
* [OCPBUGS-2907](https://issues.redhat.com/browse/OCPBUGS-2907): use host IPC for the agent container [#68](https://github.com/openshift/image-customization-controller/pull/68)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/e456249dbf0c5456bd0671d41a4445bd266b3660...34a4abe6ec47fff69476695eccffdb27fe23780c)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/b14856ffbc8fbe1f986cf1b7b835bbeaa786ce5e)

* Force updating rhcos image to version 413.92.202303190222-0 [#27](https://github.com/openshift/machine-os-images/pull/27)
* Updating ose-machine-os-images images to be consistent with ART [#25](https://github.com/openshift/machine-os-images/pull/25)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/566bf59501f178bd80e410fda66cc424de6a4891...b14856ffbc8fbe1f986cf1b7b835bbeaa786ce5e)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/9b0656af8316420bf05a7d3a0969feded615ed64)

* [OCPBUGS-21353](https://issues.redhat.com/browse/OCPBUGS-21353): Update go.mod for CVE-2023-39325 [Release-4.13] [#72](https://github.com/openshift/multus-admission-controller/pull/72)
* [OCPBUGS-13709](https://issues.redhat.com/browse/OCPBUGS-13709): Bump golang.org/x/net from 0.0.0-20211209124913-491a49abca63 to 0.7.0 [#68](https://github.com/openshift/multus-admission-controller/pull/68)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/e27952fc813ac994e64f715a8690f3d36a9ec778...9b0656af8316420bf05a7d3a0969feded615ed64)


### [multus-cni](https://github.com/openshift/multus-cni/tree/12897bd18a928b8d0ea22fca0c05cee480285752)

* [OCPBUGS-28020](https://issues.redhat.com/browse/OCPBUGS-28020): Fix SAST scan issues for multus-cni-container [4.13] [#224](https://github.com/openshift/multus-cni/pull/224)
* [OCPBUGS-21076](https://issues.redhat.com/browse/OCPBUGS-21076): Update go.mod for CVE-2023-39325 [Release-4.13] [#195](https://github.com/openshift/multus-cni/pull/195)
* Add rhel9 binary for multus [#169](https://github.com/openshift/multus-cni/pull/169)
* [OCPBUGS-8398](https://issues.redhat.com/browse/OCPBUGS-8398): Multus entrypoint should regenerate kubeconfig if secret changes [backport 4.13] [#154](https://github.com/openshift/multus-cni/pull/154)
* [OCPBUGS-13759](https://issues.redhat.com/browse/OCPBUGS-13759): Bump golang.org/x/net from 0.1.0 to 0.7.0 (#1039) [#161](https://github.com/openshift/multus-cni/pull/161)
* [OCPBUGS-13814](https://issues.redhat.com/browse/OCPBUGS-13814): Fix multus to support CNI plugin which does not create interface [backport 4.13] [#163](https://github.com/openshift/multus-cni/pull/163)
* Multus 4.0 upstream sync, strike back [#146](https://github.com/openshift/multus-cni/pull/146)
* Updating multus-cni images to be consistent with ART [#142](https://github.com/openshift/multus-cni/pull/142)
* [Full changelog](https://github.com/openshift/multus-cni/compare/07d8af54f06652b283dc0aa8db68d438c4bfe741...12897bd18a928b8d0ea22fca0c05cee480285752)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/7176ab75edaf6328bb1da06ba55378815271d218)

* [OCPBUGS-12641](https://issues.redhat.com/browse/OCPBUGS-12641): CVE-2022-41723: Update vendors to fix dependabot alerts [#28](https://github.com/openshift/multus-networkpolicy/pull/28)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/644461f25fb6b45054d1a8be7a996670959a5a9d...7176ab75edaf6328bb1da06ba55378815271d218)


### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/ca3bbec5c75ebcd6814bdd74856b27db755c9fa3)

* Add rhel9 binary [#37](https://github.com/openshift/route-override-cni/pull/37)
* Dev/sync upstream [#30](https://github.com/openshift/route-override-cni/pull/30)
* Updating ose-multus-route-override-cni images to be consistent with ART [#28](https://github.com/openshift/route-override-cni/pull/28)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/efd6ffbb275a133196e30edfe9f241e2a3b4f0c0...ca3bbec5c75ebcd6814bdd74856b27db755c9fa3)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/9f8d13c74cfe33562c520a77b1a7dbf2e1bd1ef9)

* [OCPBUGS-37941](https://issues.redhat.com/browse/OCPBUGS-37941), [OCPBUGS-37944](https://issues.redhat.com/browse/OCPBUGS-37944): [release-4.13] Stateful fixes [#306](https://github.com/openshift/whereabouts-cni/pull/306)
* [OCPBUGS-27958](https://issues.redhat.com/browse/OCPBUGS-27958): Enable reconciler configuration [#241](https://github.com/openshift/whereabouts-cni/pull/241)
* [OCPBUGS-27367](https://issues.redhat.com/browse/OCPBUGS-27367): [release-4.13] Backport fix assignment [#236](https://github.com/openshift/whereabouts-cni/pull/236)
* [OCPBUGS-21512](https://issues.redhat.com/browse/OCPBUGS-21512): update golang.org/x/net to v0.17.0 [#208](https://github.com/openshift/whereabouts-cni/pull/208)
* [OCPBUGS-4417](https://issues.redhat.com/browse/OCPBUGS-4417): Denormalize IP name before checking if pod is alive [Backport 4.13] [#168](https://github.com/openshift/whereabouts-cni/pull/168)
* [OCPBUGS-15956](https://issues.redhat.com/browse/OCPBUGS-15956): Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#138](https://github.com/openshift/whereabouts-cni/pull/138)
* [Bug 16002](https://bugzilla.redhat.com/show_bug.cgi?id=16002): Change default binary to RHEL8 image [#144](https://github.com/openshift/whereabouts-cni/pull/144)
* Restores RHEL specific binary build in dockerfile and updates to rhel9/8 [#139](https://github.com/openshift/whereabouts-cni/pull/139)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/5993d022e7fad3a1bede89235502f1a90f618bf2...9f8d13c74cfe33562c520a77b1a7dbf2e1bd1ef9)


### [must-gather](https://github.com/openshift/must-gather/tree/288ef2fcfe63cbfab0af69a41b508c044ee890aa)

* [OCPBUGS-19928](https://issues.redhat.com/browse/OCPBUGS-19928): [release-4.13] Add csi-proxy logs collection in must-gather for Windows nodes [#383](https://github.com/openshift/must-gather/pull/383)
* Revert "OCPNODE-1499: Add CMA gather script" [#350](https://github.com/openshift/must-gather/pull/350)
* [OCPNODE-1499](https://issues.redhat.com/browse/OCPNODE-1499): Add CMA gather script [#348](https://github.com/openshift/must-gather/pull/348)
* [WINC-977](https://issues.redhat.com/browse/WINC-977): Update kube-proxy log file name [#347](https://github.com/openshift/must-gather/pull/347)
* Updating ose-must-gather images to be consistent with ART [#343](https://github.com/openshift/must-gather/pull/343)
* [WINC-958](https://issues.redhat.com/browse/WINC-958): Collect WICD logs from Windows nodes [#346](https://github.com/openshift/must-gather/pull/346)
* report correct version when multiple images invoked [#327](https://github.com/openshift/must-gather/pull/327)
* Added hostsubnets to group_resources in gather_network_logs script [#342](https://github.com/openshift/must-gather/pull/342)
* Remove no longer needed gather_admission_webhooks script [#325](https://github.com/openshift/must-gather/pull/325)
* Added PodNetworkConnectivityCheck gather script [#333](https://github.com/openshift/must-gather/pull/333)
* [Full changelog](https://github.com/openshift/must-gather/compare/dc23fd8103fdf54262f101c16b11102242d9d002...288ef2fcfe63cbfab0af69a41b508c044ee890aa)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/84bda2afb2ab260253b77d5d282df773cc6b3438)

* Add rhel9 binary [#56](https://github.com/openshift/bond-cni/pull/56)
* [OCPBUGS-11881](https://issues.redhat.com/browse/OCPBUGS-11881): Ignore missing links during delete command [#49](https://github.com/openshift/bond-cni/pull/49)
* Updating ose-network-interface-bond-cni images to be consistent with ART [#43](https://github.com/openshift/bond-cni/pull/43)
* [Full changelog](https://github.com/openshift/bond-cni/compare/30386d6b8d4f3b05931842b6a9b85f15c241b09a...84bda2afb2ab260253b77d5d282df773cc6b3438)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/3ef81a5c468171f22d626c544fd7f02adc156ceb)

* Updating ose-network-metrics-daemon images to be consistent with ART [#62](https://github.com/openshift/network-metrics-daemon/pull/62)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/fad45782360032bdde3a10b9a28ba30ecc14684f...3ef81a5c468171f22d626c544fd7f02adc156ceb)


### [network-tools](https://github.com/openshift/network-tools/tree/073feda14fbd894c4238d693afa38a06392f2360)

* Dockerfile: move to RHEL9 base image [#83](https://github.com/openshift/network-tools/pull/83)
* Updating ose-network-tools images to be consistent with ART [#75](https://github.com/openshift/network-tools/pull/75)
* [OCPBUGS-7106](https://issues.redhat.com/browse/OCPBUGS-7106): Get OVN-Kubernetes leader identity from the lease [#74](https://github.com/openshift/network-tools/pull/74)
* Rename subcomponent to ensure bugs are assigned correctly [#73](https://github.com/openshift/network-tools/pull/73)
* Updating ose-network-tools images to be consistent with ART [#72](https://github.com/openshift/network-tools/pull/72)
* [Full changelog](https://github.com/openshift/network-tools/compare/c76613c77c8785b91611bb3c4245bc34f3b14f76...073feda14fbd894c4238d693afa38a06392f2360)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/105c515996ed0856eca89e75b166e70331d95856)

* [OCPBUGS-24563](https://issues.redhat.com/browse/OCPBUGS-24563): Reduce metrics cardinality [#59](https://github.com/openshift/machine-api-provider-nutanix/pull/59)
* [OCPBUGS-25459](https://issues.redhat.com/browse/OCPBUGS-25459): Fix CI by running tests natively by default [#60](https://github.com/openshift/machine-api-provider-nutanix/pull/60)
* [OCPBUGS-10493](https://issues.redhat.com/browse/OCPBUGS-10493): Nutanix Hostname of the VM is not set when using DHCP network config [#44](https://github.com/openshift/machine-api-provider-nutanix/pull/44)
* Support categories and project fields of NutanixMachineProviderConfig [#38](https://github.com/openshift/machine-api-provider-nutanix/pull/38)
* : Port to ginkgo v2 [#41](https://github.com/openshift/machine-api-provider-nutanix/pull/41)
* Update OWNERS [#39](https://github.com/openshift/machine-api-provider-nutanix/pull/39)
* : Update k8s packages to 1.26 [#40](https://github.com/openshift/machine-api-provider-nutanix/pull/40)
* Update the component in OWNERS file [#36](https://github.com/openshift/machine-api-provider-nutanix/pull/36)
* Update OWNERS [#34](https://github.com/openshift/machine-api-provider-nutanix/pull/34)
* Updating ose-nutanix-machine-controllers images to be consistent with ART [#33](https://github.com/openshift/machine-api-provider-nutanix/pull/33)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/708c6daea2aba7d0de0b8c55590e1c777639829f...105c515996ed0856eca89e75b166e70331d95856)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/6a5971643b971170d28b96f676225b344c4cff3c)

* [OCPBUGS-31996](https://issues.redhat.com/browse/OCPBUGS-31996): bump x/net to 0.24.0 [#112](https://github.com/openshift/oauth-apiserver/pull/112)
* [OCPBUGS-28674](https://issues.redhat.com/browse/OCPBUGS-28674): Fix HTTP/2 deps for release-4.13 [#102](https://github.com/openshift/oauth-apiserver/pull/102)
* Updating ose-oauth-apiserver images to be consistent with ART [#87](https://github.com/openshift/oauth-apiserver/pull/87)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/1053f14213faf18c67162760598a8fc47a5ad4b5...6a5971643b971170d28b96f676225b344c4cff3c)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/44af5a3a021fd158c2e44d9951ad59a3d474cdf3)

* [OCPBUGS-16805](https://issues.redhat.com/browse/OCPBUGS-16805): Updating golang-github-openshift-oauth-proxy images to be consistent with ART [#261](https://github.com/openshift/oauth-proxy/pull/261)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/03e5b13b8b7087dd70abfd70efb4c5b92f800a4f...44af5a3a021fd158c2e44d9951ad59a3d474cdf3)


### [oauth-server](https://github.com/openshift/oauth-server/tree/eb54be281d8f215a6eaa6e10ed1b303c7d064bac)

* [AUTH-443](https://issues.redhat.com/browse/AUTH-443): update osin to latest version [#139](https://github.com/openshift/oauth-server/pull/139)
* [OCPBUGS-10888](https://issues.redhat.com/browse/OCPBUGS-10888): bump lib-go for group cache fix, kube 1.24->1.26 [#126](https://github.com/openshift/oauth-server/pull/126)
* [OCPBUGS-2457](https://issues.redhat.com/browse/OCPBUGS-2457): don't log request query and fragment on failed authn request [#118](https://github.com/openshift/oauth-server/pull/118)
* [OCPBUGS-2457](https://issues.redhat.com/browse/OCPBUGS-2457): don't log request query and fragment on failed authn request [#115](https://github.com/openshift/oauth-server/pull/115)
* [OCPBUGS-6238](https://issues.redhat.com/browse/OCPBUGS-6238): update art image [#116](https://github.com/openshift/oauth-server/pull/116)
* [Full changelog](https://github.com/openshift/oauth-server/compare/0c434f420b178093a2e940dfb2c445ff638d1914...eb54be281d8f215a6eaa6e10ed1b303c7d064bac)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/02367d7a9d25ca823fd52710a5a8484f09454884)

* Bump version to include v5.11.0 of go-git (#823) [#823](https://github.com/openshift/oc-mirror/pull/823)
* [OCPBUGS-385](https://issues.redhat.com/browse/OCPBUGS-385): Capability to override default channel (#749) (#791) [#749](https://github.com/openshift/oc-mirror/pull/749)
* [OCPBUGS-19429](https://issues.redhat.com/browse/OCPBUGS-19429): Fix cross EUS channel upgrade path calculation (#775) [#775](https://github.com/openshift/oc-mirror/pull/775)
* [OCPBUGS-21460](https://issues.redhat.com/browse/OCPBUGS-21460): Fix CVE-2023-44487 and CVE-2023-39325 (#714) [#714](https://github.com/openshift/oc-mirror/pull/714)
* Fix OCPBUGS-17546: pod catalogsource generated by oc-mirror will crashloopBackOff randomly (#700) [#700](https://github.com/openshift/oc-mirror/pull/700)
* Fix OCPBUGS-14402 (#675) [#675](https://github.com/openshift/oc-mirror/pull/675)
* [OCPBUGS-18556](https://issues.redhat.com/browse/OCPBUGS-18556): operator catalogs from oc-mirror fail to deploy because of invalid caches (#691) [#691](https://github.com/openshift/oc-mirror/pull/691)
* [OCPBUGS-18106](https://issues.redhat.com/browse/OCPBUGS-18106): manual cherrypick (#684) [#684](https://github.com/openshift/oc-mirror/pull/684)
* [OCPBUGS-17998](https://issues.redhat.com/browse/OCPBUGS-17998): fix: ICSP with incorrect mirror path (#685) [#685](https://github.com/openshift/oc-mirror/pull/685)
* [OCPBUGS-17453](https://issues.redhat.com/browse/OCPBUGS-17453): Fix " OCI index found, but accept header does not support OCI indexes (#677) [#677](https://github.com/openshift/oc-mirror/pull/677)
* [OCPBUGS-16372](https://issues.redhat.com/browse/OCPBUGS-16372): A variety of changes needed for correct operation with multi… (#661) [#661](https://github.com/openshift/oc-mirror/pull/661)
* [OCPBUGS-13871](https://issues.redhat.com/browse/OCPBUGS-13871): fix: changes on help info content (#654) [#654](https://github.com/openshift/oc-mirror/pull/654)
* Fix OCPBUGS-11840: ParseImageReference supports cases where both tag and digest are present in a ref (#637) [#637](https://github.com/openshift/oc-mirror/pull/637)
* Removes Ross and adds Jeremy in the OWNER file (#645) [#645](https://github.com/openshift/oc-mirror/pull/645)
* [OCPBUGS-13591](https://issues.redhat.com/browse/OCPBUGS-13591), [OCPBUGS-13592](https://issues.redhat.com/browse/OCPBUGS-13592): Limit the nested repository path while mirroring the images (#635) [#635](https://github.com/openshift/oc-mirror/pull/635)
* [CFE-658](https://issues.redhat.com/browse/CFE-658): Implementation of filtering by channel for OCI catalog (#628) [#628](https://github.com/openshift/oc-mirror/pull/628)
* Deprecate --use-oci-feature in favor of --include-local-oci-catalogs (#621) [#621](https://github.com/openshift/oc-mirror/pull/621)
* Update OWNERS for CFE team (#625) [#625](https://github.com/openshift/oc-mirror/pull/625)
* Revert adding '--cache-dir /tmp/cache' to catalog images (#616) [#616](https://github.com/openshift/oc-mirror/pull/616)
* [OCPBUGS-12259](https://issues.redhat.com/browse/OCPBUGS-12259): fix: skips bundles with 'skips' field on head bundle (#617) [#617](https://github.com/openshift/oc-mirror/pull/617)
* fix: work around OCPBUGS-6741 by explicitly setting --cache-dir (#606) [#606](https://github.com/openshift/oc-mirror/pull/606)
* [OCPBUGS-11908](https://issues.redhat.com/browse/OCPBUGS-11908): Fix (#607) [#607](https://github.com/openshift/oc-mirror/pull/607)
* OCPBUGS-10348 fix: changes to include the registry path (#602) [#602](https://github.com/openshift/oc-mirror/pull/602)
* Fix OCPBUGS-8156: Upgrade to containerd v1.6.18 (#596) [#596](https://github.com/openshift/oc-mirror/pull/596)
* fix extract dir for cincinnati-graph-data container (#584) [#584](https://github.com/openshift/oc-mirror/pull/584)
* Bugfix check imagesetconfig for valid oci protocol when oci feature is used (#595) [#595](https://github.com/openshift/oc-mirror/pull/595)
* Remove "unsupported" wording from info on console (#594) [#594](https://github.com/openshift/oc-mirror/pull/594)
* Bugfix for destination registry nested paths length (#583) [#583](https://github.com/openshift/oc-mirror/pull/583)
* Fix OCPBUGS-5168: Upgrade helm.sh/helm/v3 to v3.11.2 fixing CVE-2022-23526 and CVE-2022-23525 (#592) [#592](https://github.com/openshift/oc-mirror/pull/592)
* [OCPBUGS-10051](https://issues.redhat.com/browse/OCPBUGS-10051): fix: remove catalog reference from ImageContentSourcePolicy.yaml (#587) [#587](https://github.com/openshift/oc-mirror/pull/587)
* [OCPBUGS-8216](https://issues.redhat.com/browse/OCPBUGS-8216): fix: remove an unecessary error message (#581) [#581](https://github.com/openshift/oc-mirror/pull/581)
* docs: add information about unsupported scenario (#578) [#578](https://github.com/openshift/oc-mirror/pull/578)
* Updating oc-mirror-plugin images to be consistent with ART (#570) [#570](https://github.com/openshift/oc-mirror/pull/570)
* Fix usage of registries.conf for OCI feature (#569) [#569](https://github.com/openshift/oc-mirror/pull/569)
* [CFE-739](https://issues.redhat.com/browse/CFE-739): Add skip pruning flag and logic (#567) [#567](https://github.com/openshift/oc-mirror/pull/567)
* [CFE-749](https://issues.redhat.com/browse/CFE-749): add e2e test for oci catalog feature to include release and additiona… (#562) [#562](https://github.com/openshift/oc-mirror/pull/562)
* [CFE-764](https://issues.redhat.com/browse/CFE-764): Introduce v1alpha2.Operator.TargetCatalog  (#565) [#565](https://github.com/openshift/oc-mirror/pull/565)
* docs: adds clarification to imageset reference and examples (#555) [#555](https://github.com/openshift/oc-mirror/pull/555)
* [CFE-768](https://issues.redhat.com/browse/CFE-768): Update to allow for incremental and pruning for oci feature (#564) [#564](https://github.com/openshift/oc-mirror/pull/564)
* use new cincinnati endpoint to download tarball (#552) [#552](https://github.com/openshift/oc-mirror/pull/552)
* feat: OCI catalog filtering implementation (#559) [#559](https://github.com/openshift/oc-mirror/pull/559)
* [CFE-761](https://issues.redhat.com/browse/CFE-761): Improve user experience of oc-mirror with the OCI FBC feature (#557) [#557](https://github.com/openshift/oc-mirror/pull/557)
* Fix typo in diff.go (#556) [#556](https://github.com/openshift/oc-mirror/pull/556)
* Upgrade base image for oc-mirror to 4.13 (#560) [#560](https://github.com/openshift/oc-mirror/pull/560)
* [CFE-743](https://issues.redhat.com/browse/CFE-743): Update of golang version from 1.18.6 to 1.19.5 (#551) [#551](https://github.com/openshift/oc-mirror/pull/551)
* Fix flaky test Valid/OperatorTypeWithRelatedImgs (#549) [#549](https://github.com/openshift/oc-mirror/pull/549)
* [OCPBUGS-5891](https://issues.redhat.com/browse/OCPBUGS-5891): fix: adds logic that searches for the correct name when using a heads… (#547) [#547](https://github.com/openshift/oc-mirror/pull/547)
* New reviewers: Luigi Mario Zuccarelli, Sherine Khoury (#548) [#548](https://github.com/openshift/oc-mirror/pull/548)
* [CFE-657](https://issues.redhat.com/browse/CFE-657): Update to include release and additionalImages  with the new FBC feature (#535) [#535](https://github.com/openshift/oc-mirror/pull/535)
* [OCPBUGS-3414](https://issues.redhat.com/browse/OCPBUGS-3414): Fix: fixes issues encountered by QE (#536) [#536](https://github.com/openshift/oc-mirror/pull/536)
* [OCPBUGS-3414](https://issues.redhat.com/browse/OCPBUGS-3414): fix: Missing 'ImageContentSourcePolicy' and 'CatalogSou… (#533) [#533](https://github.com/openshift/oc-mirror/pull/533)
* [OCPBUGS-4516](https://issues.redhat.com/browse/OCPBUGS-4516): fix: oc-mirror does not work as expected relative path for OCI format copy (#531) [#531](https://github.com/openshift/oc-mirror/pull/531)
* [OCPBUGS-4365](https://issues.redhat.com/browse/OCPBUGS-4365): Fix cases where namespace or subnamespace may be empty (#529) [#529](https://github.com/openshift/oc-mirror/pull/529)
* [OCPBUGS-2851](https://issues.redhat.com/browse/OCPBUGS-2851): fix (#525) [#525](https://github.com/openshift/oc-mirror/pull/525)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/3f39dc6e5a01bae1c66fa8bc7c24553d032e2e4d...02367d7a9d25ca823fd52710a5a8484f09454884)


### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/7dde3cd3e7a7dbbc9b5d134cc4f69f1503ed0a68)

* : OCPBUGS-27594,OCPBUGS-27679: Update go-git to v5.11.0 [#75](https://github.com/openshift/operator-framework-rukpak/pull/75)
* [OCPBUGS-23403](https://issues.redhat.com/browse/OCPBUGS-23403): [release-4.13] Address http2 vulnerability [#58](https://github.com/openshift/operator-framework-rukpak/pull/58)
* [OCPBUGS-21363](https://issues.redhat.com/browse/OCPBUGS-21363): [release-4.13] Bump golang.org/x/net to v0.17.0 [#40](https://github.com/openshift/operator-framework-rukpak/pull/40)
* UPSTREAM: <carry>: add downstream owners [#42](https://github.com/openshift/operator-framework-rukpak/pull/42)
* [OCPBUGS-7683](https://issues.redhat.com/browse/OCPBUGS-7683): Bump helm to v3.11.1 to address CVE-2023-25165 [#19](https://github.com/openshift/operator-framework-rukpak/pull/19)
* [OCPBUGS-6447](https://issues.redhat.com/browse/OCPBUGS-6447): bump golang/x/net to v0.4.0 for CVE-2022-41717 [#17](https://github.com/openshift/operator-framework-rukpak/pull/17)
* Update owners file [#18](https://github.com/openshift/operator-framework-rukpak/pull/18)
* [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/bb06dd0133acc2d10fa5425d90557edc068f48a7...7dde3cd3e7a7dbbc9b5d134cc4f69f1503ed0a68)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/3a7ac1b91f496b0d4bf179debcd697daa75bc11b)

* [OCPBUGS-32446](https://issues.redhat.com/browse/OCPBUGS-32446): bump(x/net) to v0.23.0 [#430](https://github.com/openshift/openshift-apiserver/pull/430)
* : OCPBUGS-21449: Enable HTTP/2 CVE mitigation [#398](https://github.com/openshift/openshift-apiserver/pull/398)
* [OCPBUGS-6448](https://issues.redhat.com/browse/OCPBUGS-6448): Bump k8s 1.26.2 proof [#361](https://github.com/openshift/openshift-apiserver/pull/361)
* [OCPBUGS-8701](https://issues.redhat.com/browse/OCPBUGS-8701): Clear metadata.namespace on projects before write. [#357](https://github.com/openshift/openshift-apiserver/pull/357)
* Bump 1.26 proof [#354](https://github.com/openshift/openshift-apiserver/pull/354)
* [OCPBUGS-7689](https://issues.redhat.com/browse/OCPBUGS-7689): Fix a project validation error due to empty string value [#352](https://github.com/openshift/openshift-apiserver/pull/352)
* [OCPBUGS-6197](https://issues.redhat.com/browse/OCPBUGS-6197): Updating ose-openshift-apiserver images to be consistent with ART [#338](https://github.com/openshift/openshift-apiserver/pull/338)
* [IR-270](https://issues.redhat.com/browse/IR-270): support creation of image objects representing manifest lists [#349](https://github.com/openshift/openshift-apiserver/pull/349)
* [API-1492](https://issues.redhat.com/browse/API-1492): Bump kube-openapi for openapi-gen determinism fix. [#348](https://github.com/openshift/openshift-apiserver/pull/348)
* [IR-269](https://issues.redhat.com/browse/IR-269): Support multi-arch images in ImageStreamLayers [#309](https://github.com/openshift/openshift-apiserver/pull/309)
* [IR-269](https://issues.redhat.com/browse/IR-269): Bump openshift/api [#344](https://github.com/openshift/openshift-apiserver/pull/344)
* pkg/image: add myself to OWNERS [#342](https://github.com/openshift/openshift-apiserver/pull/342)
* [IR-270](https://issues.redhat.com/browse/IR-270): handle image metadata for manifest lists [#340](https://github.com/openshift/openshift-apiserver/pull/340)
* [IR-326](https://issues.redhat.com/browse/IR-326): support get of image stream images of a manifest list [#341](https://github.com/openshift/openshift-apiserver/pull/341)
* Use remaining route/v1 defaulters from library-go. [#334](https://github.com/openshift/openshift-apiserver/pull/334)
* [OCPBUGS-501](https://issues.redhat.com/browse/OCPBUGS-501): fix printer panic [#333](https://github.com/openshift/openshift-apiserver/pull/333)
* Drop dependency on internal types from route default test. [#332](https://github.com/openshift/openshift-apiserver/pull/332)
* move the deployer role and binding to the ocm-o [#331](https://github.com/openshift/openshift-apiserver/pull/331)
* Use shared route validation and defaulting from library-go. [#328](https://github.com/openshift/openshift-apiserver/pull/328)
* [IR-259](https://issues.redhat.com/browse/IR-259): changing image stream importMode increments its generation [#325](https://github.com/openshift/openshift-apiserver/pull/325)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/e9ad64992e81a10230e1759db6577db078f18b38...3a7ac1b91f496b0d4bf179debcd697daa75bc11b)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/f4c0771f69b4f6781965c0d557d3438500189688)

* [release 4.13] OCPBUGS-38407, OCPBUGS-38408: Update opentelemetry dependency [#326](https://github.com/openshift/openshift-controller-manager/pull/326)
* [OCPBUGS-41952](https://issues.redhat.com/browse/OCPBUGS-41952): Add adambkaplan as approver [#335](https://github.com/openshift/openshift-controller-manager/pull/335)
* [OCPBUGS-11091](https://issues.redhat.com/browse/OCPBUGS-11091): mount build.Spec.Source.ConfigMaps for custom builder images [#257](https://github.com/openshift/openshift-controller-manager/pull/257)
* Add explicit license [#248](https://github.com/openshift/openshift-controller-manager/pull/248)
* [BUILD-407](https://issues.redhat.com/browse/BUILD-407): Revert "remove tech preview feature gate for build csi volumes" [#251](https://github.com/openshift/openshift-controller-manager/pull/251)
* [BUILD-407](https://issues.redhat.com/browse/BUILD-407): remove tech preview feature gate for build csi volumes [#250](https://github.com/openshift/openshift-controller-manager/pull/250)
* [WRKLDS-594](https://issues.redhat.com/browse/WRKLDS-594): bump(k8s): 1.26.1 [#249](https://github.com/openshift/openshift-controller-manager/pull/249)
* Updating ose-openshift-controller-manager images to be consistent with ART [#247](https://github.com/openshift/openshift-controller-manager/pull/247)
* update the deploy pod to provide failure in pod [#246](https://github.com/openshift/openshift-controller-manager/pull/246)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/bde7e3af208ac9079de5646a3b47120dc762606f...f4c0771f69b4f6781965c0d557d3438500189688)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/9be421f0c013c7f134c1d7cfe1c0ee2f2ae8eaf6)

* [OCPBUGS-20723](https://issues.redhat.com/browse/OCPBUGS-20723): bump `x/net` to v0.17.0 [#108](https://github.com/openshift/openshift-state-metrics/pull/108)
* Updating openshift-state-metrics images to be consistent with ART [#92](https://github.com/openshift/openshift-state-metrics/pull/92)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/3d5dc18d2bee5ba7132560bf40790af997952d33...9be421f0c013c7f134c1d7cfe1c0ee2f2ae8eaf6)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/b50a649be8b691a6081487330da17e55d242a2e5)

* [OCPBUGS-21565](https://issues.redhat.com/browse/OCPBUGS-21565): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#136](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/136)
* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#125](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/125)
* [OCPBUGS-17071](https://issues.redhat.com/browse/OCPBUGS-17071): Fix SCC admission failure race during initial deployment [#124](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/124)
* [STOR-1019](https://issues.redhat.com/browse/STOR-1019): Bump to k8s 1.26 libs for OCP 4.13 [#107](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/107)
* [STOR-947](https://issues.redhat.com/browse/STOR-947): support disabling default StorageClass via ClusterCSIDriver [#103](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/103)
* [Bug 2106736](https://bugzilla.redhat.com/show_bug.cgi?id=2106736): Add multiplePVsSameID capability [#106](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/106)
* [STOR-1078](https://issues.redhat.com/browse/STOR-1078): Add hostPaths necessary for SELinux mounts [#105](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/105)
* Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART [#101](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/101)
* [OCPBUGS-4347](https://issues.redhat.com/browse/OCPBUGS-4347): set TLS cipher suites in Kube RBAC sidecars [#100](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/100)
* Bug OCPBUGS-2845: Add SecretHashAnnotation to node service [#96](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/96)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/d09e51ae44b3ac6d27236b515c1f7c6da847689d...b50a649be8b691a6081487330da17e55d242a2e5)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/27f786052c3d35154aa2d16413d20ec3447b502b)

* [OCPBUGS-34422](https://issues.redhat.com/browse/OCPBUGS-34422): Ensure portSecurity is correctly set in the Instance Ports [#119](https://github.com/openshift/machine-api-provider-openstack/pull/119)
* Bug OCPBUGS-19460: Set controller's SyncPeriod to 1 hour [#85](https://github.com/openshift/machine-api-provider-openstack/pull/85)
* [OCPBUGS-12630](https://issues.redhat.com/browse/OCPBUGS-12630): Address CVE-2022-41723 [#71](https://github.com/openshift/machine-api-provider-openstack/pull/71)
* [OCPBUGS-10558](https://issues.redhat.com/browse/OCPBUGS-10558): machineset_controller: Stop caching clouds credentials [#64](https://github.com/openshift/machine-api-provider-openstack/pull/64)
* [OCPBUGS-10298](https://issues.redhat.com/browse/OCPBUGS-10298): Use TenantID if ProjectID is empty [#62](https://github.com/openshift/machine-api-provider-openstack/pull/62)
* Add dual stack API and Ingress VIPs support [#58](https://github.com/openshift/machine-api-provider-openstack/pull/58)
* [OSASINFRA-3092](https://issues.redhat.com/browse/OSASINFRA-3092): Add support for external LB [#56](https://github.com/openshift/machine-api-provider-openstack/pull/56)
* [OCPBUGS-6432](https://issues.redhat.com/browse/OCPBUGS-6432): Address CVE-2022-41717 [#53](https://github.com/openshift/machine-api-provider-openstack/pull/53)
* Bump gophercloud [#50](https://github.com/openshift/machine-api-provider-openstack/pull/50)
* Updating ose-machine-api-provider-openstack images to be consistent with ART [#49](https://github.com/openshift/machine-api-provider-openstack/pull/49)
* Use machine/v1alpha1 from openshift/api [#46](https://github.com/openshift/machine-api-provider-openstack/pull/46)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/05657663c02be6d03d074d0f39a2b247cef9286a...27f786052c3d35154aa2d16413d20ec3447b502b)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/7f911e3e8fac2a544268e63131b03f2c155395f9)

* NO-ISSUE: [release-4.13] Backport e2e fixes [#876](https://github.com/openshift/operator-framework-olm/pull/876)
* [OCPBUGS-42146](https://issues.redhat.com/browse/OCPBUGS-42146): adds paginating lister for evaluating CRs' upgrade fitness versus new CRDs. [#871](https://github.com/openshift/operator-framework-olm/pull/871)
* [OCPBUGS-38254](https://issues.redhat.com/browse/OCPBUGS-38254): [CARRY] perform operator apiService certificate validity checks directly [#836](https://github.com/openshift/operator-framework-olm/pull/836)
* [OCPBUGS-38608](https://issues.redhat.com/browse/OCPBUGS-38608): (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) [#843](https://github.com/openshift/operator-framework-olm/pull/843)
* [OCPBUGS-32856](https://issues.redhat.com/browse/OCPBUGS-32856): bump go-jose to v2.6.3 [#780](https://github.com/openshift/operator-framework-olm/pull/780)
* [OCPBUGS-35241](https://issues.redhat.com/browse/OCPBUGS-35241): Unblock CI [#772](https://github.com/openshift/operator-framework-olm/pull/772)
* [OCPBUGS-27564](https://issues.redhat.com/browse/OCPBUGS-27564), [OCPBUGS-27569](https://issues.redhat.com/browse/OCPBUGS-27569), [OCPBUGS-27649](https://issues.redhat.com/browse/OCPBUGS-27649), [OCPBUGS-27654](https://issues.redhat.com/browse/OCPBUGS-27654): bump go-git/v5 to 5.11.0 [#682](https://github.com/openshift/operator-framework-olm/pull/682)
* [OCPBUGS-28228](https://issues.redhat.com/browse/OCPBUGS-28228): Registry Pod Controller Flag [#672](https://github.com/openshift/operator-framework-olm/pull/672)
* [OCPBUGS-27891](https://issues.redhat.com/browse/OCPBUGS-27891): [CARRY] SSC RBAC [#669](https://github.com/openshift/operator-framework-olm/pull/669)
* [OCPBUGS-8653](https://issues.redhat.com/browse/OCPBUGS-8653): bump golang-migrate to v4.16.1 (#1107) [#649](https://github.com/openshift/operator-framework-olm/pull/649)
* [OCPBUGS-20815](https://issues.redhat.com/browse/OCPBUGS-20815): [release-4.13] fix apiserver vulnerability [#616](https://github.com/openshift/operator-framework-olm/pull/616)
* [OCPBUGS-22133](https://issues.redhat.com/browse/OCPBUGS-22133): [release-4.13] Bump golang.org/x/net to v0.17.0 [#589](https://github.com/openshift/operator-framework-olm/pull/589)
* [OCPBUGS-18305](https://issues.redhat.com/browse/OCPBUGS-18305), [RHIBMCS-151](https://issues.redhat.com/browse/RHIBMCS-151): Copied csv listing backport [#548](https://github.com/openshift/operator-framework-olm/pull/548)
* [OCPBUGS-17791](https://issues.redhat.com/browse/OCPBUGS-17791): opm: always serve pprof endpoints, improve server allocations (#1129) [#540](https://github.com/openshift/operator-framework-olm/pull/540)
* Introduce DOWNSTREAM_OWNERS file [#538](https://github.com/openshift/operator-framework-olm/pull/538)
* Allow cpb to be statically compiled / exempt from FIPS compliance [#519](https://github.com/openshift/operator-framework-olm/pull/519)
* [OCPBUGS-15589](https://issues.redhat.com/browse/OCPBUGS-15589): fix dynamic conversion webhook [#499](https://github.com/openshift/operator-framework-olm/pull/499)
* [OCPBUGS-13321](https://issues.redhat.com/browse/OCPBUGS-13321): OCPBUGS-1684: Optimize certificate generation [#488](https://github.com/openshift/operator-framework-olm/pull/488)
* [OCPBUGS-11469](https://issues.redhat.com/browse/OCPBUGS-11469): [release4.13] exclude bundles with `olm.deprecated` property when rendering [#479](https://github.com/openshift/operator-framework-olm/pull/479)
* [OCPBUGS-794](https://issues.redhat.com/browse/OCPBUGS-794): remove dependence on OLM_VERSION file [#462](https://github.com/openshift/operator-framework-olm/pull/462)
* [OCPBUGS-7754](https://issues.redhat.com/browse/OCPBUGS-7754): update cluster policy operator dependency [#455](https://github.com/openshift/operator-framework-olm/pull/455)
* [OCPBUGS-948](https://issues.redhat.com/browse/OCPBUGS-948): Set openshift.io/scc label to empty [#445](https://github.com/openshift/operator-framework-olm/pull/445)
* update cpc dep [#448](https://github.com/openshift/operator-framework-olm/pull/448)
* [OCPBUGS-672](https://issues.redhat.com/browse/OCPBUGS-672): Catalog Pod Startup Probe Timeout [#446](https://github.com/openshift/operator-framework-olm/pull/446)
* [OCPBUGS-7102](https://issues.redhat.com/browse/OCPBUGS-7102): make plugin e2e tests skippable [#444](https://github.com/openshift/operator-framework-olm/pull/444)
* Packageserver version discoverability [#437](https://github.com/openshift/operator-framework-olm/pull/437)
* Thread Safety test for UpdateSubsSyncCounterStorage (#2918) [#438](https://github.com/openshift/operator-framework-olm/pull/438)
* [OCPBUGS-6741](https://issues.redhat.com/browse/OCPBUGS-6741): refactor FBC caching (#1051) [#435](https://github.com/openshift/operator-framework-olm/pull/435)
* [OCPBUGS-6344](https://issues.redhat.com/browse/OCPBUGS-6344): Upgrade golang/x/net to v0.4.0 to fix CVE-2022-41717 (#1059) [#434](https://github.com/openshift/operator-framework-olm/pull/434)
* [OCPBUGS-6241](https://issues.redhat.com/browse/OCPBUGS-6241): Fix art consistency [#433](https://github.com/openshift/operator-framework-olm/pull/433)
* [OCPBUGS-5523](https://issues.redhat.com/browse/OCPBUGS-5523): Catalog, fatal error: concurrent map read and map write [#429](https://github.com/openshift/operator-framework-olm/pull/429)
* [OCPBUGS-4955](https://issues.redhat.com/browse/OCPBUGS-4955): Set ImagePullPolicy of bundle unpacker to "IfNotPresent" for image digests [#425](https://github.com/openshift/operator-framework-olm/pull/425)
* [OCPBUGS-4757](https://issues.redhat.com/browse/OCPBUGS-4757): Default to legacy psa settings (#273) [#420](https://github.com/openshift/operator-framework-olm/pull/420)
* Updates to OWNERS file [#422](https://github.com/openshift/operator-framework-olm/pull/422)
* Bump go and k8s [#408](https://github.com/openshift/operator-framework-olm/pull/408)
* [OCPBUGS-1088](https://issues.redhat.com/browse/OCPBUGS-1088): Run collect-profile pod on management nodes [#394](https://github.com/openshift/operator-framework-olm/pull/394)
* provide the capability to filter mermaid output to a single package name / skipRange support (#1023) [#400](https://github.com/openshift/operator-framework-olm/pull/400)
* [OCPBUGS-1428](https://issues.redhat.com/browse/OCPBUGS-1428): fix service account token secret reference (#2862) [#396](https://github.com/openshift/operator-framework-olm/pull/396)
* [OCPBUGS-2556](https://issues.redhat.com/browse/OCPBUGS-2556): Order an operator CR's status.Component.Refs array (#2880) [#406](https://github.com/openshift/operator-framework-olm/pull/406)
* [OCPBUGS-1272](https://issues.redhat.com/browse/OCPBUGS-1272): Add pipe support to render-veneer basic command (#1026) [#401](https://github.com/openshift/operator-framework-olm/pull/401)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/b7e63d634cc7b2813d331d4a7e3e65209c669526...7f911e3e8fac2a544268e63131b03f2c155395f9)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/7efdbcad565ae7893539a79a944a97f9b39da97a)

* [OCPBUGS-32074](https://issues.redhat.com/browse/OCPBUGS-32074): update golang.org/x/net for CVE-2023-45288 [#566](https://github.com/operator-framework/operator-marketplace/pull/566)
* [OCPBUGS-20977](https://issues.redhat.com/browse/OCPBUGS-20977): [release-4.13] bump golang.org/x/net to 0.17.0 [#549](https://github.com/operator-framework/operator-marketplace/pull/549)
* [OCPBUGS-19085](https://issues.redhat.com/browse/OCPBUGS-19085): Updating marketplace-operator images to be consistent with ART [#538](https://github.com/operator-framework/operator-marketplace/pull/538)
* [OCPBUGS-18502](https://issues.redhat.com/browse/OCPBUGS-18502): remove a race condition [#532](https://github.com/operator-framework/operator-marketplace/pull/532)
* [OCPBUGS-12979](https://issues.redhat.com/browse/OCPBUGS-12979): update community index to 4.13 tag [#518](https://github.com/operator-framework/operator-marketplace/pull/518)
* [OCPBUGS-12789](https://issues.redhat.com/browse/OCPBUGS-12789): update image tag to 4.13 for all but community operators [#516](https://github.com/operator-framework/operator-marketplace/pull/516)
* [OCPBUGS-5466](https://issues.redhat.com/browse/OCPBUGS-5466): Default CatalogSource aren't always reverted to default settings [#504](https://github.com/operator-framework/operator-marketplace/pull/504)
* [OCPBUGS-6232](https://issues.redhat.com/browse/OCPBUGS-6232): Updating marketplace-operator images to be consistent with ART [#493](https://github.com/operator-framework/operator-marketplace/pull/493)
* [OCPBUGS-6323](https://issues.redhat.com/browse/OCPBUGS-6323): Upgrade golang/x/net to v0.4.0 to fix CVE-2022-41717 [#505](https://github.com/operator-framework/operator-marketplace/pull/505)
* [OCPBUGS-5423](https://issues.redhat.com/browse/OCPBUGS-5423): Remove PSA audit and warnings [#502](https://github.com/operator-framework/operator-marketplace/pull/502)
* [OCPBUGS-5423](https://issues.redhat.com/browse/OCPBUGS-5423): Run Default CatalogSource in Restricted mode [#498](https://github.com/operator-framework/operator-marketplace/pull/498)
* [OCPBUGS-4873](https://issues.redhat.com/browse/OCPBUGS-4873): Add audit-version and warn-version labels [#495](https://github.com/operator-framework/operator-marketplace/pull/495)
* Remove duplicate gprcPodConfig field in defaults [#496](https://github.com/operator-framework/operator-marketplace/pull/496)
* [OCPBUGS-4758](https://issues.redhat.com/browse/OCPBUGS-4758): Unenforce PSA Restrictions [#491](https://github.com/operator-framework/operator-marketplace/pull/491)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/38b9ed80140123508ab5012e8fa0b067e7aafc12...7efdbcad565ae7893539a79a944a97f9b39da97a)


### [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver/tree/54958deb4998e08696af0abe3585486a6b5b6800)

* [OCPBUGS-23155](https://issues.redhat.com/browse/OCPBUGS-23155): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#130](https://github.com/openshift/ovirt-csi-driver/pull/130)
* Updating ose-ovirt-csi-driver images to be consistent with ART [#124](https://github.com/openshift/ovirt-csi-driver/pull/124)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver/compare/87ab37895e56ea3c80be0163571fa593ce96d86b...54958deb4998e08696af0abe3585486a6b5b6800)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/b293972fe2c5eef4262130de621e75e5d0c37d8e)

* [OCPBUGS-23241](https://issues.redhat.com/browse/OCPBUGS-23241): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#127](https://github.com/openshift/ovirt-csi-driver-operator/pull/127)
* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#120](https://github.com/openshift/ovirt-csi-driver-operator/pull/120)
* [OCPBUGS-14653](https://issues.redhat.com/browse/OCPBUGS-14653): set upgrade condition of operator to false [#118](https://github.com/openshift/ovirt-csi-driver-operator/pull/118)
* [STOR-1019](https://issues.redhat.com/browse/STOR-1019): Bump to k8s 1.26 libs for OCP 4.13 [#113](https://github.com/openshift/ovirt-csi-driver-operator/pull/113)
* [STOR-947](https://issues.redhat.com/browse/STOR-947): support disabling default StorageClass via ClusterCSIDriver [#111](https://github.com/openshift/ovirt-csi-driver-operator/pull/111)
* Grant volumesnapshotcontents patch permissions to operator too [#112](https://github.com/openshift/ovirt-csi-driver-operator/pull/112)
* Updating ose-cluster-ovirt-csi-operator images to be consistent with ART [#110](https://github.com/openshift/ovirt-csi-driver-operator/pull/110)
* [OCPBUGS-4347](https://issues.redhat.com/browse/OCPBUGS-4347): set TLS cipher suites in Kube RBAC sidecars [#109](https://github.com/openshift/ovirt-csi-driver-operator/pull/109)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/e5e02335951010745a42f472a0656b5948ffdade...b293972fe2c5eef4262130de621e75e5d0c37d8e)


### [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt/tree/22d89b3fd9e2e395a62f71092487d26c8940052e)

* Fix swapped CPU socket and thread mapping [#172](https://github.com/openshift/cluster-api-provider-ovirt/pull/172)
* Updating ose-ovirt-machine-controllers images to be consistent with ART [#171](https://github.com/openshift/cluster-api-provider-ovirt/pull/171)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ovirt/compare/03e8cb50f9ffa28b48d8aeaeb8410ab1598750d1...22d89b3fd9e2e395a62f71092487d26c8940052e)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/16fa55557367097b075093d2549e0205558c7527)

* [OCPBUGS-36094](https://issues.redhat.com/browse/OCPBUGS-36094): Fix CVE-2024-6104 by updating http-retryable to 0.7.7 [#91](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/91)
* [OCPBUGS-33638](https://issues.redhat.com/browse/OCPBUGS-33638): Fix CVE2023-45288 by bumping x/net to v0.24.0 -4.13 [#82](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/82)
* [OCPBUGS-24728](https://issues.redhat.com/browse/OCPBUGS-24728): synk: ignore vendor dir [#61](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/61)
* [OCPBUGS-21089](https://issues.redhat.com/browse/OCPBUGS-21089): CVE-2023-39325 - Update net dependencies - 4.13 [#52](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/52)
* Update OWNERS add yussufsh [#54](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/54)
* Updated golang.org/x/net/html dependency. [#44](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/44)
* Openshiftrelease 4.13 [#41](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/41)
* [OCPBUGS-12950](https://issues.redhat.com/browse/OCPBUGS-12950): Updated net dependencies [#31](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/31)
* [OCPBUGS-6454](https://issues.redhat.com/browse/OCPBUGS-6454): update net deps [#23](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/23)
* Update OWNERS to Multi-Arch component [#22](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/22)
* Rebase to upstream v8 [#21](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/21)
* Updating ose-powervs-block-csi-driver images to be consistent with ART [#19](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/19)
* Rebase with upstream kubernetes-sigs/ibm-powervs-block-csi-driver. [#20](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/20)
* Rebase with upstream kubernetes-sigs/ibm-powervs-block-csi-driver. [#16](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/16)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/b78e8e7871bd50ff77a68fdae320775a17856373...16fa55557367097b075093d2549e0205558c7527)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/e70c980e2561788b710d710efc3e09974ad7374c)

* [OCPBUGS-25716](https://issues.redhat.com/browse/OCPBUGS-25716): snyk: ignore vendor dir [#61](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/61)
* [OCPBUGS-21186](https://issues.redhat.com/browse/OCPBUGS-21186): CVE-2023-39325 - Update net dependencies - 4.13 [#41](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/41)
* Update OWNERS add yussufsh [#45](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/45)
* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#34](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/34)
* [OCPBUGS-12656](https://issues.redhat.com/browse/OCPBUGS-12656): Updated net dependencies [#27](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/27)
* Adding storage team to OWNERS so they can perform lib-go updates. [#22](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/22)
* add proxy to node-update-controller [#18](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/18)
* [OCPBUGS-6455](https://issues.redhat.com/browse/OCPBUGS-6455): updating net deps [#15](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/15)
* Update OWNERS to Multi-Arch component [#14](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/14)
* Updating ose-powervs-block-csi-driver-operator images to be consistent with ART [#12](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/12)
* Updated operator folder and deployment name in the readme file [#11](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/11)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/7dadc08acb9f515735c6c3fdb417424d0c668d44...e70c980e2561788b710d710efc3e09974ad7374c)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/c040f3774af48d6d0bd8c31188626cb445be5b83)

* [OCPBUGS-36104](https://issues.redhat.com/browse/OCPBUGS-36104): UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.13 [#76](https://github.com/openshift/cloud-provider-powervs/pull/76)
* [OCPBUGS-24731](https://issues.redhat.com/browse/OCPBUGS-24731): UPSTREAM: <carry>: snyk code scan exclude vendor directory [#53](https://github.com/openshift/cloud-provider-powervs/pull/53)
* [OCPBUGS-21280](https://issues.redhat.com/browse/OCPBUGS-21280): CVE-2023-39325 - Update net dependencies - 4.13 [#46](https://github.com/openshift/cloud-provider-powervs/pull/46)
* [OCPBUGS-12657](https://issues.redhat.com/browse/OCPBUGS-12657): Updated net dependencies [#34](https://github.com/openshift/cloud-provider-powervs/pull/34)
* [OCPBUGS-6456](https://issues.redhat.com/browse/OCPBUGS-6456): update net deps [#27](https://github.com/openshift/cloud-provider-powervs/pull/27)
* Update OWNERS to Multi-Arch component [#26](https://github.com/openshift/cloud-provider-powervs/pull/26)
* Updating ose-powervs-cloud-controller-manager images to be consistent with ART [#25](https://github.com/openshift/cloud-provider-powervs/pull/25)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/4fb4334ca8aa9eb8290488359dd8d1cc5261da49...c040f3774af48d6d0bd8c31188626cb445be5b83)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/95154dd1870e26cb6ebb1b8cb6e68947c478f059)

* [OCPBUGS-41980](https://issues.redhat.com/browse/OCPBUGS-41980): Update go.mod to fix CVE - 4.13 [#87](https://github.com/openshift/machine-api-provider-powervs/pull/87)
* [OCPBUGS-24563](https://issues.redhat.com/browse/OCPBUGS-24563): Reduce metrics cardinality [#69](https://github.com/openshift/machine-api-provider-powervs/pull/69)
* [OCPBUGS-24741](https://issues.redhat.com/browse/OCPBUGS-24741): snyk code scan exclude vendor directory [#64](https://github.com/openshift/machine-api-provider-powervs/pull/64)
* [OCPBUGS-21880](https://issues.redhat.com/browse/OCPBUGS-21880): CVE-2023-39325 - Bump golang.org/x/net to v0.17.0 - 4.13 [#55](https://github.com/openshift/machine-api-provider-powervs/pull/55)
* [OCPBUGS-6457](https://issues.redhat.com/browse/OCPBUGS-6457): Update dependencies to Kube 1.26 [#38](https://github.com/openshift/machine-api-provider-powervs/pull/38)
* Update OWNERS to Multi-Arch component [#37](https://github.com/openshift/machine-api-provider-powervs/pull/37)
* Updating ose-powervs-machine-controllers images to be consistent with ART [#36](https://github.com/openshift/machine-api-provider-powervs/pull/36)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/8a37e70af86197341dfe33077565cc1f7c919333...95154dd1870e26cb6ebb1b8cb6e68947c478f059)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/b501d5e2aff82d46a141223636b522aeae95b915)

* Bump openshift/prom-label-proxy to v0.6.0 [#352](https://github.com/openshift/prom-label-proxy/pull/352)
* Updating prom-label-proxy images to be consistent with ART [#351](https://github.com/openshift/prom-label-proxy/pull/351)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/b1907888004888b977918cf911b189de736642b2...b501d5e2aff82d46a141223636b522aeae95b915)


### [prometheus](https://github.com/openshift/prometheus/tree/72886096272245e064297c480b24ac4895230c89)

* [OCPBUGS-26423](https://issues.redhat.com/browse/OCPBUGS-26423): Add Exemplars support for all time series [#191](https://github.com/openshift/prometheus/pull/191)
* [OCPBUGS-21240](https://issues.redhat.com/browse/OCPBUGS-21240): update golang.org/x/net to v0.17.0 [4.13] [#174](https://github.com/openshift/prometheus/pull/174)
* [OCPBUGS-12508](https://issues.redhat.com/browse/OCPBUGS-12508): go.mod: update golang.org/x/net to v0.7.0 [#161](https://github.com/openshift/prometheus/pull/161)
* Bump openshift/prometheus to v2.42.0 [#154](https://github.com/openshift/prometheus/pull/154)
* Bump openshift/prometheus to v2.41.0 [#153](https://github.com/openshift/prometheus/pull/153)
* Bump openshift/prometheus to v2.40.7 [#152](https://github.com/openshift/prometheus/pull/152)
* Bump openshift/prometheus to v2.40.6 [#151](https://github.com/openshift/prometheus/pull/151)
* Bump openshift/prometheus to v2.40.5 [#150](https://github.com/openshift/prometheus/pull/150)
* [OCPBUGS-4273](https://issues.redhat.com/browse/OCPBUGS-4273): Bump openshift/prometheus to v2.40.4 [#148](https://github.com/openshift/prometheus/pull/148)
* [OCPBUGS-2873](https://issues.redhat.com/browse/OCPBUGS-2873): fix certificate reloads after rotation [#145](https://github.com/openshift/prometheus/pull/145)
* Updating golang-github-prometheus-prometheus images to be consistent with ART [#147](https://github.com/openshift/prometheus/pull/147)
* [Full changelog](https://github.com/openshift/prometheus/compare/72ceaef4a59ec0cfb0639563ba9bd28928f4bcc0...72886096272245e064297c480b24ac4895230c89)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/df2f11e2ddc206ad1924ed766b4a394d84c9236f)

* [OCPBUGS-21043](https://issues.redhat.com/browse/OCPBUGS-21043): Bump golang.org/x/net to v0.17.0 [#81](https://github.com/openshift/prometheus-alertmanager/pull/81)
* Bump openshift/prometheus-alertmanager to v0.25.0 [#67](https://github.com/openshift/prometheus-alertmanager/pull/67)
* Updating golang-github-prometheus-alertmanager images to be consistent with ART [#65](https://github.com/openshift/prometheus-alertmanager/pull/65)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/914cad827e9a177b29b23e02eb48b4065da8dca2...df2f11e2ddc206ad1924ed766b4a394d84c9236f)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/30fdccd139b2c63a9207bd30509aec8ddec7ff5d)

* [OCPBUGS-20861](https://issues.redhat.com/browse/OCPBUGS-20861): Bump golang.org/x/net to v0.17.0 [#248](https://github.com/openshift/prometheus-operator/pull/248)
* [OCPBUGS-12672](https://issues.redhat.com/browse/OCPBUGS-12672): update golang.org/x/net [#237](https://github.com/openshift/prometheus-operator/pull/237)
* [OCPBUGS-6055](https://issues.redhat.com/browse/OCPBUGS-6055): [bot] Bump openshift/prometheus-operator to v0.63.0 [#216](https://github.com/openshift/prometheus-operator/pull/216)
* Bump openshift/prometheus-operator to v0.62.0 [#215](https://github.com/openshift/prometheus-operator/pull/215)
* Updating prometheus-operator-admission-webhook images to be consistent with ART [#214](https://github.com/openshift/prometheus-operator/pull/214)
* Updating prometheus-config-reloader images to be consistent with ART [#213](https://github.com/openshift/prometheus-operator/pull/213)
* Updating prometheus-operator images to be consistent with ART [#212](https://github.com/openshift/prometheus-operator/pull/212)
* [OCPBUGS-2778](https://issues.redhat.com/browse/OCPBUGS-2778): [bot] Bump openshift/prometheus-operator to v0.61.1 [#209](https://github.com/openshift/prometheus-operator/pull/209)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/d1e399d5cead91c677cee4a80a032f5057cb43e3...30fdccd139b2c63a9207bd30509aec8ddec7ff5d)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/59d699cac664bfbfe83ef6a1615e34e062fd283d)

* [OCPBUGS-21143](https://issues.redhat.com/browse/OCPBUGS-21143): upgrade golang.org/x/net to v0.17.0 [#135](https://github.com/openshift/node_exporter/pull/135)
* [OCPBUGS-14274](https://issues.redhat.com/browse/OCPBUGS-14274): Upgrade golang.org/x/net to v0.10.0 to fix the CVE [#127](https://github.com/openshift/node_exporter/pull/127)
* [OCPBUGS-6311](https://issues.redhat.com/browse/OCPBUGS-6311): addressing vulnerability GO-2022-1144 [#119](https://github.com/openshift/node_exporter/pull/119)
* Bump openshift/node_exporter to v1.5.0 [#118](https://github.com/openshift/node_exporter/pull/118)
* Updating golang-github-prometheus-node_exporter images to be consistent with ART [#117](https://github.com/openshift/node_exporter/pull/117)
* build(deps): bump github.com/prometheus/client_model from 0.2.0 to 0.3.0 [#114](https://github.com/openshift/node_exporter/pull/114)
* build(deps): bump github.com/jsimonetti/rtnetlink from 1.2.2 to 1.2.3 [#115](https://github.com/openshift/node_exporter/pull/115)
* [Full changelog](https://github.com/openshift/node_exporter/compare/99077a3c8c3b0fce152fe0affce1e31fc2c6efaa...59d699cac664bfbfe83ef6a1615e34e062fd283d)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/6667a6cbf9a87331fcc4407375118c0bb884c925)

* [OCPBUGS-14276](https://issues.redhat.com/browse/OCPBUGS-14276): Bump k8s to 1.26.5 [#26](https://github.com/openshift/route-controller-manager/pull/26)
* Update gomod mapping for k8s.io/dynamic-resource-allocation [#16](https://github.com/openshift/route-controller-manager/pull/16)
* Updating ose-route-controller-manager images to be consistent with ART [#13](https://github.com/openshift/route-controller-manager/pull/13)
* [WRKLDS-594](https://issues.redhat.com/browse/WRKLDS-594): bump(k8s): v1.26.1 [#15](https://github.com/openshift/route-controller-manager/pull/15)
* [OCPBUGS-4198](https://issues.redhat.com/browse/OCPBUGS-4198): do not depend on the API defaulting when creating Routes [#11](https://github.com/openshift/route-controller-manager/pull/11)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/0f141ce9d349fb30755e3d0d7f9f196a91782957...6667a6cbf9a87331fcc4407375118c0bb884c925)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/dba00dc5b1874904542bed87f49974bf64be168a)

* [OCPBUGS-28759](https://issues.redhat.com/browse/OCPBUGS-28759): Fix HTTP/2 (4.13) [#232](https://github.com/openshift/service-ca-operator/pull/232)
* [OCPBUGS-16806](https://issues.redhat.com/browse/OCPBUGS-16806): Updating ose-service-ca-operator images to be consistent with ART [#214](https://github.com/openshift/service-ca-operator/pull/214)
* [OCPBUGS-3195](https://issues.redhat.com/browse/OCPBUGS-3195): Return nil from start funcs after context is cancelled. [#202](https://github.com/openshift/service-ca-operator/pull/202)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/ef1d057db0bf8d0846d96e09cdd1f55998a1f80b...dba00dc5b1874904542bed87f49974bf64be168a)


### [telemeter](https://github.com/openshift/telemeter/tree/0634a6d029bfd8fd311e99ccf5f2fd45b5751fa8)

* [OCPBUGS-34829](https://issues.redhat.com/browse/OCPBUGS-34829): fix issuer check during JWT authentication 4.13 [#540](https://github.com/openshift/telemeter/pull/540)
* [OCPBUGS-21327](https://issues.redhat.com/browse/OCPBUGS-21327): [release-4.13]: Bump golang.org/x/net to v0.17.0 [#485](https://github.com/openshift/telemeter/pull/485)
* [OCPBUGS-14418](https://issues.redhat.com/browse/OCPBUGS-14418): Update golang.org/x/net to lastest version [#463](https://github.com/openshift/telemeter/pull/463)
* [OCPBUGS-6962](https://issues.redhat.com/browse/OCPBUGS-6962): Add 'agent-installer' value to 'install_type' label [#447](https://github.com/openshift/telemeter/pull/447)
* [OCPBUGS-6477](https://issues.redhat.com/browse/OCPBUGS-6477): Upgrade go version and dependencies [#448](https://github.com/openshift/telemeter/pull/448)
* server: Ensure logging level is flag is respected [#449](https://github.com/openshift/telemeter/pull/449)
* Add 'hypershift' value to 'install_type' label [#437](https://github.com/openshift/telemeter/pull/437)
* Replace 'hypershift-unknown' with 'unknown' [#438](https://github.com/openshift/telemeter/pull/438)
* Fix receive whitelist logic [#445](https://github.com/openshift/telemeter/pull/445)
* Bump snappy version and add debug logs [#444](https://github.com/openshift/telemeter/pull/444)
* Add metrics for telemeter receive path [#443](https://github.com/openshift/telemeter/pull/443)
* Log faulty tokens [#441](https://github.com/openshift/telemeter/pull/441)
* pkg/receive: Sanitize metric labels [#440](https://github.com/openshift/telemeter/pull/440)
* Updating telemeter images to be consistent with ART [#439](https://github.com/openshift/telemeter/pull/439)
* Add Daniel Mellado to OWNERS [#436](https://github.com/openshift/telemeter/pull/436)
* Add rules for cluster vCPU-hours [#435](https://github.com/openshift/telemeter/pull/435)
* [Full changelog](https://github.com/openshift/telemeter/compare/c9592ded3e9a8daa8dfddfb7b8d874a2aaf1972c...0634a6d029bfd8fd311e99ccf5f2fd45b5751fa8)


### [tests](https://github.com/openshift/origin/tree/19f80945645f4b368adfc0d7db5b6f7593684eae)

* [OCPBUGS-37921](https://issues.redhat.com/browse/OCPBUGS-37921): Removes dependency on samples operator images [#29007](https://github.com/openshift/origin/pull/29007)
* [OCPBUGS-35053](https://issues.redhat.com/browse/OCPBUGS-35053): updated timeout to 3 seconds to account for network timing issues [#28862](https://github.com/openshift/origin/pull/28862)
* [OCPBUGS-36501](https://issues.redhat.com/browse/OCPBUGS-36501): test/extended: skip etcd leader change check on hypershift [#28922](https://github.com/openshift/origin/pull/28922)
* [OCPBUGS-35857](https://issues.redhat.com/browse/OCPBUGS-35857): Use centos7 tag instead of latest for cmd images tests [#28895](https://github.com/openshift/origin/pull/28895)
* [OCPBUGS-33985](https://issues.redhat.com/browse/OCPBUGS-33985): Provide SCC access via RBAC [#28835](https://github.com/openshift/origin/pull/28835)
* [AUTH-443](https://issues.redhat.com/browse/AUTH-443): Add oauth-server redirect URI validation e2e tests [#28396](https://github.com/openshift/origin/pull/28396)
* [OCPBUGS-19378](https://issues.redhat.com/browse/OCPBUGS-19378): [4.13] backport etcd restore tests [#28267](https://github.com/openshift/origin/pull/28267)
* Bug OCPBUGS-17469: Correct condition for rejecting connection [#28151](https://github.com/openshift/origin/pull/28151)
* [OCPBUGS-20361](https://issues.redhat.com/browse/OCPBUGS-20361): Update image stream test to create a manifest list image by default [#28318](https://github.com/openshift/origin/pull/28318)
* [OCPBUGS-16241](https://issues.redhat.com/browse/OCPBUGS-16241): Update permission to incl. watch for helmchartrepositories for console users [#28054](https://github.com/openshift/origin/pull/28054)
* [OCPBUGS-16164](https://issues.redhat.com/browse/OCPBUGS-16164): allow cluster-config-operator to manage featuregate upgrade block [#28050](https://github.com/openshift/origin/pull/28050)
* [OCPBUGS-15892](https://issues.redhat.com/browse/OCPBUGS-15892): remove references to registry.centos.org [#28031](https://github.com/openshift/origin/pull/28031)
* [OCPBUGS-15746](https://issues.redhat.com/browse/OCPBUGS-15746): Skip CCM upgradable condition on AlibabaCloud [#28025](https://github.com/openshift/origin/pull/28025)
* [OCPBUGS-7762](https://issues.redhat.com/browse/OCPBUGS-7762): Bump with latest openshift/kubernetes at 4.13 [#27973](https://github.com/openshift/origin/pull/27973)
* [OCPBUGS-5029](https://issues.redhat.com/browse/OCPBUGS-5029): [release-4.13] OpenStack: Restore in-tree cinder provisioner tests [#27827](https://github.com/openshift/origin/pull/27827)
* [OCPBUGS-14342](https://issues.redhat.com/browse/OCPBUGS-14342): Increase timeout in sysctl allowlist test [#27956](https://github.com/openshift/origin/pull/27956)
* [OCPBUGS-13840](https://issues.redhat.com/browse/OCPBUGS-13840): Add missing error check in sysctl allowlist test [#27929](https://github.com/openshift/origin/pull/27929)
* [OCPBUGS-14127](https://issues.redhat.com/browse/OCPBUGS-14127): Move from registry.centos.org to quay.io [#27948](https://github.com/openshift/origin/pull/27948)
* [OCPBUGS-12700](https://issues.redhat.com/browse/OCPBUGS-12700): update-etcd-scaling-test [#27892](https://github.com/openshift/origin/pull/27892)
* [CCO-367](https://issues.redhat.com/browse/CCO-367): Allow CCO to be Upgradeable=False when credentialsMode=Manual [#27895](https://github.com/openshift/origin/pull/27895)
* [OCPBUGS-11449](https://issues.redhat.com/browse/OCPBUGS-11449): [release-4.13] Allow cluster daemonsets to use maxSurge [#27859](https://github.com/openshift/origin/pull/27859)
* [OCPBUGS-12878](https://issues.redhat.com/browse/OCPBUGS-12878): [release-4.13] Add (optional) dual-stack tests to the CNI certification test suite [#27877](https://github.com/openshift/origin/pull/27877)
* [OCPBUGS-12271](https://issues.redhat.com/browse/OCPBUGS-12271): test/extended: cpu-partitioning: skip cluster infrastructure for Hypershift [#27885](https://github.com/openshift/origin/pull/27885)
* Revert "TRT-889: Temp flake all azure disruption" [#27870](https://github.com/openshift/origin/pull/27870)
* [OCPBUGS-11307](https://issues.redhat.com/browse/OCPBUGS-11307): Add test for Egress Firewall node selector [#27845](https://github.com/openshift/origin/pull/27845)
* add specific test for failing cgroups path [#27855](https://github.com/openshift/origin/pull/27855)
* [OCPBUGS-11335](https://issues.redhat.com/browse/OCPBUGS-11335): fix: add namespace annotation helper for egress cni test [#27848](https://github.com/openshift/origin/pull/27848)
* [OCPBUGS-11315](https://issues.redhat.com/browse/OCPBUGS-11315): Increasing limits for Nodes OSUpdateStaged time test [#27847](https://github.com/openshift/origin/pull/27847)
* [OCPBUGS-11295](https://issues.redhat.com/browse/OCPBUGS-11295): e2e: Config v1 client shim for static configuration manifests with read-only operations [#27840](https://github.com/openshift/origin/pull/27840)
* [OCPBUGS-11146](https://issues.redhat.com/browse/OCPBUGS-11146): DisableSC test should ignore in-tree storage classes [#27831](https://github.com/openshift/origin/pull/27831)
* [OCPBUGS-10968](https://issues.redhat.com/browse/OCPBUGS-10968): fix: add poll to get deployment status and avoid false positive [#27825](https://github.com/openshift/origin/pull/27825)
* 4.13 disruption/alert data update [#27813](https://github.com/openshift/origin/pull/27813)
* [OCPBUGS-10662](https://issues.redhat.com/browse/OCPBUGS-10662): Add cpu partitioning tests [#27812](https://github.com/openshift/origin/pull/27812)
* [OCPBUGS-8488](https://issues.redhat.com/browse/OCPBUGS-8488): Realtime Kernel Tests [#27778](https://github.com/openshift/origin/pull/27778)
* [TRT-910](https://issues.redhat.com/browse/TRT-910): Temporarily flake ALL P99 disruption tests in 4.13 [#27810](https://github.com/openshift/origin/pull/27810)
* [OCPBUGS-9913](https://issues.redhat.com/browse/OCPBUGS-9913): add test for UnhealthyPodEvictionPolicy for PDBs [#27785](https://github.com/openshift/origin/pull/27785)
* [OCPBUGS-8412](https://issues.redhat.com/browse/OCPBUGS-8412): Bump(openshift/kubernetes): to get fix for resizing flake [#27792](https://github.com/openshift/origin/pull/27792)
* [OCPBUGS-9915](https://issues.redhat.com/browse/OCPBUGS-9915): Temp flake all azure disruption [#27786](https://github.com/openshift/origin/pull/27786)
* [OCPBUGS-8742](https://issues.redhat.com/browse/OCPBUGS-8742): Revert "Switch to readyz path for health probes on Azure" [#27784](https://github.com/openshift/origin/pull/27784)
* [OCPBUGS-8401](https://issues.redhat.com/browse/OCPBUGS-8401): Bump to 1.26.2 [#27769](https://github.com/openshift/origin/pull/27769)
* [OSASINFRA-3109](https://issues.redhat.com/browse/OSASINFRA-3109): networking: add a test for control plane LB [#27748](https://github.com/openshift/origin/pull/27748)
* Add additional comments with findings from k8s 1.26 bump [#27728](https://github.com/openshift/origin/pull/27728)
* [OCPBUGS-8092](https://issues.redhat.com/browse/OCPBUGS-8092): mark volume expansion test as Flaky [#27767](https://github.com/openshift/origin/pull/27767)
* Revert "Add vlan/macvlan/ipvlan incontainer master tests" [#27766](https://github.com/openshift/origin/pull/27766)
* [OCPBUGS-7519](https://issues.redhat.com/browse/OCPBUGS-7519): Revert Skip nfs tests temporarilly [#27762](https://github.com/openshift/origin/pull/27762)
* [TRT-800](https://issues.redhat.com/browse/TRT-800): Collect variant data for risk analysis [#27731](https://github.com/openshift/origin/pull/27731)
* Add tap plugin test [#27737](https://github.com/openshift/origin/pull/27737)
* Port alert backstop test to invariant, allow running alert/disruption invariants locally for developers [#27724](https://github.com/openshift/origin/pull/27724)
* Add vlan/macvlan/ipvlan incontainer master tests [#27700](https://github.com/openshift/origin/pull/27700)
* [STOR-1077](https://issues.redhat.com/browse/STOR-1077): promote CSIInlineVolumeAdmission feature gate to GA [#27713](https://github.com/openshift/origin/pull/27713)
* move disruption locators to monitorapi [#27760](https://github.com/openshift/origin/pull/27760)
* Switch to readyz path for health probes on Azure [#27753](https://github.com/openshift/origin/pull/27753)
* Fix defunct owners file in test/extended/util/annotate [#27750](https://github.com/openshift/origin/pull/27750)
* [OCPBUGS-7833](https://issues.redhat.com/browse/OCPBUGS-7833): Rework no optional capabilities rules [#27745](https://github.com/openshift/origin/pull/27745)
* [OCPVE-278](https://issues.redhat.com/browse/OCPVE-278): fix: multi build error, only add rt-tests for x86 [#27749](https://github.com/openshift/origin/pull/27749)
* Restore alert refactor with fix for disruption tests all being skipped [#27742](https://github.com/openshift/origin/pull/27742)
* [OCPBUGS-7519](https://issues.redhat.com/browse/OCPBUGS-7519): Skip nfs tests temporarilly [#27747](https://github.com/openshift/origin/pull/27747)
* [OCPVE-278](https://issues.redhat.com/browse/OCPVE-278): feat: add rt tests package to openshift-tests [#27740](https://github.com/openshift/origin/pull/27740)
* [OCPBUGS-7616](https://issues.redhat.com/browse/OCPBUGS-7616): Revert Revert "bump(k8s): 1.26" [#27738](https://github.com/openshift/origin/pull/27738)
* Revert "bump(k8s): 1.26" [#27736](https://github.com/openshift/origin/pull/27736)
* test/extended/authorization/rbac: Condition console RBAC on 'Console' capability [#27681](https://github.com/openshift/origin/pull/27681)
* Revert "Alert Testing on new Namespace and Level" [#27734](https://github.com/openshift/origin/pull/27734)
* [OCPBUGS-7488](https://issues.redhat.com/browse/OCPBUGS-7488): test flake: should not reconcile SC when state is Unmanaged [#27726](https://github.com/openshift/origin/pull/27726)
* Revert "perform build csi volume test on GA clusters" [#27730](https://github.com/openshift/origin/pull/27730)
* [OCPBUGS-1125](https://issues.redhat.com/browse/OCPBUGS-1125): remove reference to old guard pods [#27727](https://github.com/openshift/origin/pull/27727)
* bump(k8s): 1.26 [#27694](https://github.com/openshift/origin/pull/27694)
* Do not bail on producing artifacts when nodes are dead [#27729](https://github.com/openshift/origin/pull/27729)
* audit inspection [#27687](https://github.com/openshift/origin/pull/27687)
* Allow baremetal tests to run on Azure platform [#27573](https://github.com/openshift/origin/pull/27573)
* [OCPBUGS-6902](https://issues.redhat.com/browse/OCPBUGS-6902): Wait for DNS DS pods to be ready [#27715](https://github.com/openshift/origin/pull/27715)
* Chart CI cluster DNS problems in different color from disruption [#27719](https://github.com/openshift/origin/pull/27719)
* Add pathological events into spyglass charts [#27649](https://github.com/openshift/origin/pull/27649)
* [BUILD-407](https://issues.redhat.com/browse/BUILD-407): perform build csi volume test on GA clusters [#27720](https://github.com/openshift/origin/pull/27720)
* Kubevirt network connectivity tests [#27456](https://github.com/openshift/origin/pull/27456)
* [TRT-819](https://issues.redhat.com/browse/TRT-819): Add check for parse signature error [#27705](https://github.com/openshift/origin/pull/27705)
* Allow baremetal tests to run on GCP platform [#27618](https://github.com/openshift/origin/pull/27618)
* Add PDB to resource watch [#27721](https://github.com/openshift/origin/pull/27721)
* replace centos with ubi8 in build test dockerfile [#27718](https://github.com/openshift/origin/pull/27718)
* Add external disruption sampling in openshift test [#27717](https://github.com/openshift/origin/pull/27717)
* [STOR-950](https://issues.redhat.com/browse/STOR-950): Add CI job for skipping StorageClass creation [#27704](https://github.com/openshift/origin/pull/27704)
* [BUILD-407](https://issues.redhat.com/browse/BUILD-407): stage one of two of migrating shared resource from tech preview to GA [#27708](https://github.com/openshift/origin/pull/27708)
* Ensure NoColor for ginkgo in disruption/chamosmoney suite [#27709](https://github.com/openshift/origin/pull/27709)
* Alert Testing on new Namespace and Level [#27710](https://github.com/openshift/origin/pull/27710)
* [STOR-1066](https://issues.redhat.com/browse/STOR-1066): add e2e tests for CSIInlineVolumeAdmission plugin [#27682](https://github.com/openshift/origin/pull/27682)
* [OCPBUGS-3923](https://issues.redhat.com/browse/OCPBUGS-3923): adjust watch budget for monitoring components [#27623](https://github.com/openshift/origin/pull/27623)
* make supplemental groups test working again [#27664](https://github.com/openshift/origin/pull/27664)
* [AUTH-337](https://issues.redhat.com/browse/AUTH-337): PSa: add test for SCC-mutated PodSpec extraction [#27632](https://github.com/openshift/origin/pull/27632)
* [TRT-813](https://issues.redhat.com/browse/TRT-813): Disabling disruption fallback for upgrades [#27701](https://github.com/openshift/origin/pull/27701)
* bump timeout [#27695](https://github.com/openshift/origin/pull/27695)
* [OCPBUGS-6503](https://issues.redhat.com/browse/OCPBUGS-6503): upgrade/adminack: simplify polling and unblock "guaranteed" post-upgrade check [#27678](https://github.com/openshift/origin/pull/27678)
* Update S2i image tests for dotnet3.1 EOL [#27698](https://github.com/openshift/origin/pull/27698)
* extended: security: do not explicitly set api audience on token request [#27697](https://github.com/openshift/origin/pull/27697)
* Changes for NodeTuning cluster capability [#27657](https://github.com/openshift/origin/pull/27657)
* Skip the oc whoami --show-console test when the console capability is disabled [#27679](https://github.com/openshift/origin/pull/27679)
* Update etcd scaling test for CPMS supported platforms [#27497](https://github.com/openshift/origin/pull/27497)
* [TRT-803](https://issues.redhat.com/browse/TRT-803): FIxing test name [#27688](https://github.com/openshift/origin/pull/27688)
* Automated - Update synthetic test data [#27676](https://github.com/openshift/origin/pull/27676)
* Use ingress-canary route for testing instead of console since the console might be disabled [#27680](https://github.com/openshift/origin/pull/27680)
* ignore more repeated TopologyAwareHintsDisabled events [#27672](https://github.com/openshift/origin/pull/27672)
* Add result tag to the end of first line of an event message [#27656](https://github.com/openshift/origin/pull/27656)
* Automated - Update synthetic test data [#27658](https://github.com/openshift/origin/pull/27658)
* [USHIFT-720](https://issues.redhat.com/browse/USHIFT-720): skip server-side apply for rangeallocations [#27619](https://github.com/openshift/origin/pull/27619)
* ignore repeated TopologyAwareHintsDisabled events [#27666](https://github.com/openshift/origin/pull/27666)
* Update annotated rules for router tests [#27662](https://github.com/openshift/origin/pull/27662)
* Fix nil pointer dereference for createDNSPod. [#27663](https://github.com/openshift/origin/pull/27663)
* Revert "Remove dependency on some router tests on config.openshift.io api group" [#27661](https://github.com/openshift/origin/pull/27661)
* Don't emit failure junit testcase when a retry is skipped [#27652](https://github.com/openshift/origin/pull/27652)
* [OCPBUGS-5506](https://issues.redhat.com/browse/OCPBUGS-5506): DNS pod to be created on master node [#27650](https://github.com/openshift/origin/pull/27650)
* upgrade/adminack: guarantee one admin ack check post-upgrade [#27645](https://github.com/openshift/origin/pull/27645)
* Separate mcd error alert [#27648](https://github.com/openshift/origin/pull/27648)
* do not check for DeploymentConfig routers in router tests [#27642](https://github.com/openshift/origin/pull/27642)
* [WRKLDS-605](https://issues.redhat.com/browse/WRKLDS-605): Remove dependency on some router tests on config.openshift.io api group [#27643](https://github.com/openshift/origin/pull/27643)
* Fix missing disruption data again. [#27651](https://github.com/openshift/origin/pull/27651)
* Add result key value to each topological event test output line [#27641](https://github.com/openshift/origin/pull/27641)
* fix tech preview test [#27639](https://github.com/openshift/origin/pull/27639)
* Fix missing disruption uploads. [#27636](https://github.com/openshift/origin/pull/27636)
* Update CVO test ownership: -Jack and Vadim, +Petr [#27646](https://github.com/openshift/origin/pull/27646)
* Automated - Update synthetic test data [#27626](https://github.com/openshift/origin/pull/27626)
* Add Event intervals for Startup Probe failures [#27612](https://github.com/openshift/origin/pull/27612)
* Use cluster network MTU for bond interfaces [#27631](https://github.com/openshift/origin/pull/27631)
* Use create token instead serviceaccounts token command [#27629](https://github.com/openshift/origin/pull/27629)
* Fix intervalcreation incorrect year unit test bug [#27630](https://github.com/openshift/origin/pull/27630)
* Update ETCD storage data for k8s 1.26 [#27622](https://github.com/openshift/origin/pull/27622)
* Filter out dropped targets to minimize the size of target api result [#27594](https://github.com/openshift/origin/pull/27594)
* [NE-1068](https://issues.redhat.com/browse/NE-1068): Add test using chaos plugin to detect local DNS endpoint preference. [#27511](https://github.com/openshift/origin/pull/27511)
* OpenStack: Skip in-tree cinder provisioner tests [#27613](https://github.com/openshift/origin/pull/27613)
* Automated - Update synthetic test data [#27614](https://github.com/openshift/origin/pull/27614)
* Test failures that flaked on retry remain counted as failures [#27602](https://github.com/openshift/origin/pull/27602)
* Remove ambiguity when checking for api resources existence [#27583](https://github.com/openshift/origin/pull/27583)
* [OCPBUGS-4731](https://issues.redhat.com/browse/OCPBUGS-4731): oc status: clean job resource to prevent leaks [#27608](https://github.com/openshift/origin/pull/27608)
* Add tests for oc scc-subject-review and scc-review commands [#27572](https://github.com/openshift/origin/pull/27572)
* [TRT-703](https://issues.redhat.com/browse/TRT-703): Fix upgrade junit results not present in risk analysis [#27600](https://github.com/openshift/origin/pull/27600)
* Updating openshift-enterprise-tests images to be consistent with ART [#27607](https://github.com/openshift/origin/pull/27607)
* remove special cases for priority classes in the payload [#27606](https://github.com/openshift/origin/pull/27606)
* Automated - Update synthetic test data [#27601](https://github.com/openshift/origin/pull/27601)
* [OCPBUGS-4550](https://issues.redhat.com/browse/OCPBUGS-4550): Bump api-requests for console-operator on vsphere [#27605](https://github.com/openshift/origin/pull/27605)
* run resourcewatch fixes [#27596](https://github.com/openshift/origin/pull/27596)
* [OCPBUGS-4502](https://issues.redhat.com/browse/OCPBUGS-4502): Unskip service session affinity tests [#27597](https://github.com/openshift/origin/pull/27597)
* Automated - Update synthetic test data [#27587](https://github.com/openshift/origin/pull/27587)
* Add trozet to networking approvers [#27395](https://github.com/openshift/origin/pull/27395)
* Separate out "startupProbe failed" messages from pathological events test [#27590](https://github.com/openshift/origin/pull/27590)
* [OCPBUGS-4190](https://issues.redhat.com/browse/OCPBUGS-4190): 1sec [#27574](https://github.com/openshift/origin/pull/27574)
* [USHIFT-646](https://issues.redhat.com/browse/USHIFT-646): ushift: Graceful return to disable telemetry [#27578](https://github.com/openshift/origin/pull/27578)
* Round the ratio for excessive watch requests test [#27592](https://github.com/openshift/origin/pull/27592)
* [OCPVE-112](https://issues.redhat.com/browse/OCPVE-112): feat: support higher threshold for connection refused on sno [#27586](https://github.com/openshift/origin/pull/27586)
* Allow baremetal tests to run on AWS platform [#27569](https://github.com/openshift/origin/pull/27569)
* [USHIFT-644](https://issues.redhat.com/browse/USHIFT-644): Skip sig-cloud-provider tests [#27577](https://github.com/openshift/origin/pull/27577)
* Remove redundant messages that might contain non-xml charactor [#27582](https://github.com/openshift/origin/pull/27582)
* [USHIFT-647](https://issues.redhat.com/browse/USHIFT-647): ushift: fix loop variable capture in sig-cli [#27579](https://github.com/openshift/origin/pull/27579)
* [USHIFT-658](https://issues.redhat.com/browse/USHIFT-658): ushift: skip networking bond interface tests [#27584](https://github.com/openshift/origin/pull/27584)
* [TRT-662](https://issues.redhat.com/browse/TRT-662): include test count totals for analysis [#27585](https://github.com/openshift/origin/pull/27585)
* [OCPBUGS-2991](https://issues.redhat.com/browse/OCPBUGS-2991): Bump openshift/kubernetes to latest master v2 [#27580](https://github.com/openshift/origin/pull/27580)
* [TRT-691](https://issues.redhat.com/browse/TRT-691): use duplicateEventThreshold for ProbeTests [#27562](https://github.com/openshift/origin/pull/27562)
* Automated - Update synthetic test data [#27543](https://github.com/openshift/origin/pull/27543)
* Add separate tests for QPS exceeded and manifest unknown [#27542](https://github.com/openshift/origin/pull/27542)
* Test tuning cni whitelist update [#27447](https://github.com/openshift/origin/pull/27447)
* Introduce timeout for sippy risk analysis; add retries with backoff; add dated logging [#27564](https://github.com/openshift/origin/pull/27564)
* Remove unused cmd tests [#27495](https://github.com/openshift/origin/pull/27495)
* Fix risk analysis html to link to correct release and show bug keys [#27568](https://github.com/openshift/origin/pull/27568)
* Skip image-registry redirect test when non-permanent credentials used on GCP. [#27556](https://github.com/openshift/origin/pull/27556)
* Add Kuryr exception to "pods should successfully create sandboxes" test [#27435](https://github.com/openshift/origin/pull/27435)
* [Bug 2093339](https://bugzilla.redhat.com/show_bug.cgi?id=2093339): Reenable data source test [#27534](https://github.com/openshift/origin/pull/27534)
* Flake and improve alert tests [#27559](https://github.com/openshift/origin/pull/27559)
* Trim stdout and stderr to the last 4K bytes to keep log size manageable [#27560](https://github.com/openshift/origin/pull/27560)
* [OCPBUGS-3633](https://issues.redhat.com/browse/OCPBUGS-3633): Fix flake reporting for certain tests. [#27553](https://github.com/openshift/origin/pull/27553)
* Nginx 1.18 images will reach EOL in November 2022 [#27551](https://github.com/openshift/origin/pull/27551)
* make command errors easier to read [#27544](https://github.com/openshift/origin/pull/27544)
* [OCPBUGS-3633](https://issues.redhat.com/browse/OCPBUGS-3633): Revert "Merge pull request #27533 from dgoodwin/merge-alert-backstops" [#27547](https://github.com/openshift/origin/pull/27547)
* Replace CreateProject with SetupProject [#27271](https://github.com/openshift/origin/pull/27271)
* cosmetic fix for bad disruption substitution [#27510](https://github.com/openshift/origin/pull/27510)
* Separate out more tests from 'events should not repeat pathologically' test [#27539](https://github.com/openshift/origin/pull/27539)
* [OCPBUGSM-35025](https://issues.redhat.com/browse/OCPBUGSM-35025): reenable unidling ci tests [#27538](https://github.com/openshift/origin/pull/27538)
* [USHIFT-345](https://issues.redhat.com/browse/USHIFT-345), [USHIFT-348](https://issues.redhat.com/browse/USHIFT-348), [USHIFT-355](https://issues.redhat.com/browse/USHIFT-355): API Groups for cli, arch & network [#27540](https://github.com/openshift/origin/pull/27540)
* [Full changelog](https://github.com/openshift/origin/compare/daedb2e584a91e7384b765d0599ad096aa2e78df...19f80945645f4b368adfc0d7db5b6f7593684eae)


### [thanos](https://github.com/openshift/thanos/tree/70fb57fb209e5aa491417fc421a97d417a5530bc)

* [OCPBUGS-27206](https://issues.redhat.com/browse/OCPBUGS-27206): Bump otel/http to 0.44.0 [openshift-4.13.z] [#138](https://github.com/openshift/thanos/pull/138)
* [OCPBUGS-21157](https://issues.redhat.com/browse/OCPBUGS-21157): Bump golang.org/x/net to v0.17.0 [#125](https://github.com/openshift/thanos/pull/125)
* [OCPBUGS-12663](https://issues.redhat.com/browse/OCPBUGS-12663): go.mod: update golang.org/x/net to v0.7.0 [#109](https://github.com/openshift/thanos/pull/109)
* Bump openshift/thanos to v0.30.2 [#103](https://github.com/openshift/thanos/pull/103)
* v0.30.1 [#102](https://github.com/openshift/thanos/pull/102)
* Update to v0.29.0 [#96](https://github.com/openshift/thanos/pull/96)
* Updating thanos images to be consistent with ART [#93](https://github.com/openshift/thanos/pull/93)
* [Full changelog](https://github.com/openshift/thanos/compare/2867a6b552eaddefd73aa979f13e95f6df338070...70fb57fb209e5aa491417fc421a97d417a5530bc)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/f56d57ba990f7f4ce1a6b1f9842331e9259c94f1)

* [OCPBUGS-21506](https://issues.redhat.com/browse/OCPBUGS-21506): Bump golang.org/x/net to v0.18.0 [#55](https://github.com/openshift/cloud-provider-vsphere/pull/55)
* [OCPBUGS-17103](https://issues.redhat.com/browse/OCPBUGS-17103): update x/net dependency to 0.7.0 [#46](https://github.com/openshift/cloud-provider-vsphere/pull/46)
* [OCPCLOUD-1863](https://issues.redhat.com/browse/OCPCLOUD-1863): Merge https://github.com/kubernetes/cloud-provider-vsphere:master (d36b7fa) into master [#33](https://github.com/openshift/cloud-provider-vsphere/pull/33)
* [OCPBUGS-6464](https://issues.redhat.com/browse/OCPBUGS-6464): Merge https://github.com/kubernetes/cloud-provider-vsphere:master into master [#21](https://github.com/openshift/cloud-provider-vsphere/pull/21)
* Update OWNERS [#32](https://github.com/openshift/cloud-provider-vsphere/pull/32)
* Update OWNERS [#31](https://github.com/openshift/cloud-provider-vsphere/pull/31)
* Updating ose-vsphere-cloud-controller-manager images to be consistent with ART [#30](https://github.com/openshift/cloud-provider-vsphere/pull/30)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/e170dce5c1fe5d3a025ccd8264e78c4c987b1d7a...f56d57ba990f7f4ce1a6b1f9842331e9259c94f1)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/da63f2b930cdd6090904ee607319b40615b245f6)

* [OCPBUGS-21556](https://issues.redhat.com/browse/OCPBUGS-21556): bump golang.org/x/net to v0.17.0 [#23](https://github.com/openshift/cluster-api-provider-vsphere/pull/23)
* Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:release-1.5 (f4a58d1) into master [#10](https://github.com/openshift/cluster-api-provider-vsphere/pull/10)
* Updating ose-vsphere-cluster-api-controllers images to be consistent with ART [#8](https://github.com/openshift/cluster-api-provider-vsphere/pull/8)
* Update OWNERS [#9](https://github.com/openshift/cluster-api-provider-vsphere/pull/9)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/a61d43b751249c1a74376a48498571da1d665685...da63f2b930cdd6090904ee607319b40615b245f6)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/4d3036a6c7fe0c850bbadd942267426afe2ec16a)

* [OCPBUGS-21561](https://issues.redhat.com/browse/OCPBUGS-21561): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#91](https://github.com/openshift/vmware-vsphere-csi-driver/pull/91)
* [OCPBUGS-16398](https://issues.redhat.com/browse/OCPBUGS-16398): Rebase v3.0.2 [#83](https://github.com/openshift/vmware-vsphere-csi-driver/pull/83)
* [OCPBUGS-13563](https://issues.redhat.com/browse/OCPBUGS-13563): Fix node resync master [#79](https://github.com/openshift/vmware-vsphere-csi-driver/pull/79)
* [OCPBUGS-13162](https://issues.redhat.com/browse/OCPBUGS-13162): Rebase against 3.0.1 version [#77](https://github.com/openshift/vmware-vsphere-csi-driver/pull/77)
* [OCPBUGS-11672](https://issues.redhat.com/browse/OCPBUGS-11672): UPSTREAM: 2326: Update opencontainers/runc for CVE-2023-27561 [#69](https://github.com/openshift/vmware-vsphere-csi-driver/pull/69)
* [OCPBUGS-11786](https://issues.redhat.com/browse/OCPBUGS-11786), [OCPBUGS-11787](https://issues.redhat.com/browse/OCPBUGS-11787): Add .gitattributes [#70](https://github.com/openshift/vmware-vsphere-csi-driver/pull/70)
* [STOR-1014](https://issues.redhat.com/browse/STOR-1014): Rebase to v3.0.0-rc1 [#60](https://github.com/openshift/vmware-vsphere-csi-driver/pull/60)
* [OCPBUGS-6480](https://issues.redhat.com/browse/OCPBUGS-6480): Fix CVE and and fix bug with migrated datastore [#55](https://github.com/openshift/vmware-vsphere-csi-driver/pull/55)
* Updating vmware-vsphere-syncer images to be consistent with ART [#50](https://github.com/openshift/vmware-vsphere-csi-driver/pull/50)
* Updating ose-vmware-vsphere-csi-driver images to be consistent with ART [#51](https://github.com/openshift/vmware-vsphere-csi-driver/pull/51)
* [Bug 2067889](https://bugzilla.redhat.com/show_bug.cgi?id=2067889): Rebase driver on v2.7.0 [#49](https://github.com/openshift/vmware-vsphere-csi-driver/pull/49)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/e4c0e103ddbf264387d6efb26b612a4b915d362a...4d3036a6c7fe0c850bbadd942267426afe2ec16a)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/a9e5036e12facff0193d563b752847191fc9dc91)

* [OCPBUGS-21434](https://issues.redhat.com/browse/OCPBUGS-21434): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#174](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/174)
* [OCPBUGS-18132](https://issues.redhat.com/browse/OCPBUGS-18132): Block 4.14 upgrades with admin ack [#169](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/169)
* [OCPBUGS-18332](https://issues.redhat.com/browse/OCPBUGS-18332): disable controller hostNetwork [#166](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/166)
* [OCPBUGS-11294](https://issues.redhat.com/browse/OCPBUGS-11294): Add CSI migration metric [#146](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/146)
* [OCPBUGS-12478](https://issues.redhat.com/browse/OCPBUGS-12478): Add management workloads annotations [#151](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/151)
* [OCPBUGS-12468](https://issues.redhat.com/browse/OCPBUGS-12468): Add backoff for successful storage policy creations [#150](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/150)
* [OCPBUGS-11146](https://issues.redhat.com/browse/OCPBUGS-11146): Mark cluster un-upgradeable when CSI migration is disabled [#145](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/145)
* [OCPBUGS-7899](https://issues.redhat.com/browse/OCPBUGS-7899): Bump sidecar timeouts for vsphere [#141](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/141)
* [OCPBUGS-7482](https://issues.redhat.com/browse/OCPBUGS-7482): Do not enable topology features if only one failure-domains is defined [#140](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/140)
* [STOR-1120](https://issues.redhat.com/browse/STOR-1120): Add csi idempotency flags [#122](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/122)
* [STOR-1145](https://issues.redhat.com/browse/STOR-1145): Add metric for topology [#135](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/135)
* [OCPBUGS-5765](https://issues.redhat.com/browse/OCPBUGS-5765): Populate migration datastore url [#138](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/138)
* [STOR-1128](https://issues.redhat.com/browse/STOR-1128): Change the default SC to the CSI one [#134](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/134)
* [STOR-1019](https://issues.redhat.com/browse/STOR-1019): Bump to k8s 1.26 libs for OCP 4.13 [#136](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/136)
* [STOR-947](https://issues.redhat.com/browse/STOR-947): support disabling default StorageClass via ClusterCSIDriver [#126](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/126)
* [Bug 2106736](https://bugzilla.redhat.com/show_bug.cgi?id=2106736): Fix multiplePVsSameID value in tests [#132](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/132)
* [Bug 2106736](https://bugzilla.redhat.com/show_bug.cgi?id=2106736): Add multiplePVsSameID capability [#131](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/131)
* Updating ose-vmware-vsphere-csi-driver-operator images to be consistent with ART [#124](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/124)
* [STOR-1121](https://issues.redhat.com/browse/STOR-1121): Make policy creation idempotent [#125](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/125)
* [STOR-1078](https://issues.redhat.com/browse/STOR-1078): Add hostPaths necessary for SELinux mounts [#129](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/129)
* [OCPBUGS-1805](https://issues.redhat.com/browse/OCPBUGS-1805): Add multiple datacenters support [#115](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/115)
* [OCPBUGS-2083](https://issues.redhat.com/browse/OCPBUGS-2083): set TLS cipher suites in Kube RBAC sidecars [#117](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/117)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/d7cca470e82158e8240a09b3586f99e6a84f121f...a9e5036e12facff0193d563b752847191fc9dc91)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/3ad7408fb53a9377d9f5b2cf5ae38570a9ec5c59)

* [OCPBUGS-21577](https://issues.redhat.com/browse/OCPBUGS-21577): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#130](https://github.com/openshift/vsphere-problem-detector/pull/130)
* [OCPBUGS-14571](https://issues.redhat.com/browse/OCPBUGS-14571): Check all storage classes including CSI storageclasses [#120](https://github.com/openshift/vsphere-problem-detector/pull/120)
* [OCPBUGS-14098](https://issues.redhat.com/browse/OCPBUGS-14098): In UPI clusters VSphere platform could be nil [#118](https://github.com/openshift/vsphere-problem-detector/pull/118)
* [OCPBUGS-14085](https://issues.redhat.com/browse/OCPBUGS-14085): Log vcenter version information [#117](https://github.com/openshift/vsphere-problem-detector/pull/117)
* [OCPBUGS-11146](https://issues.redhat.com/browse/OCPBUGS-11146): Check migration status [#108](https://github.com/openshift/vsphere-problem-detector/pull/108)
* [OCPBUGS-10811](https://issues.redhat.com/browse/OCPBUGS-10811): Add build number to metrics [#103](https://github.com/openshift/vsphere-problem-detector/pull/103)
* [OCPBUGS-11287](https://issues.redhat.com/browse/OCPBUGS-11287): day 2 multi-zone configuration fails if tags are not defined [#105](https://github.com/openshift/vsphere-problem-detector/pull/105)
* [STOR-1019](https://issues.redhat.com/browse/STOR-1019): Bump to k8s 1.26 libs for OCP 4.13 [#99](https://github.com/openshift/vsphere-problem-detector/pull/99)
* typo [#95](https://github.com/openshift/vsphere-problem-detector/pull/95)
* [OCPBUGS-5508](https://issues.redhat.com/browse/OCPBUGS-5508): Add a count of zonal volumes [#96](https://github.com/openshift/vsphere-problem-detector/pull/96)
* Updating vsphere-problem-detector images to be consistent with ART [#94](https://github.com/openshift/vsphere-problem-detector/pull/94)
* [OCPBUGS-3713](https://issues.redhat.com/browse/OCPBUGS-3713): Derive the fully qualified vSphere username when checking permissions [#93](https://github.com/openshift/vsphere-problem-detector/pull/93)
* [Bug 2092811](https://bugzilla.redhat.com/show_bug.cgi?id=2092811): Lets remove datastore length checks for now [#91](https://github.com/openshift/vsphere-problem-detector/pull/91)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/f25ae2add899bbd4b63b476c2e6178cfbaf68ac4...3ad7408fb53a9377d9f5b2cf5ae38570a9ec5c59)