# 4.13.13

Created: 2023-09-14 09:13:41 +0000 UTC

Image Digest: `sha256:d62495768e335c79a215ba56771ff5ae97e3cbb2bf49ed8fb3f6cefabcdc0f17`

Promoted from registry.ci.openshift.org/ocp/release:4.13.0-0.nightly-2023-09-12-074803


## Changes from 4.13.1

### Components

* Kubernetes upgraded from 1.26.3 to 1.26.7
* Red Hat Enterprise Linux CoreOS upgraded from 413.92.202305231734-0 to 413.92.202309112228-0


### Rebuilt images without code change

* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [6160d183](https://github.com/openshift/assisted-installer/commit/6160d18379195ac3f65ab3898429936a95522fd0) `sha256:e2082ed174072e71435611a4805ed6832fb42861e42a7bf675a3b2de41cbd8ab`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [6160d183](https://github.com/openshift/assisted-installer/commit/6160d18379195ac3f65ab3898429936a95522fd0) `sha256:ba7c701881c61d370afac63145ce2da775f6bc725cd58213781b4a47cf8c2db5`
* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [b5200baa](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/b5200baa784513b77437809c63fcc80cfd53c9df) `sha256:aa5a8c7ed32771a2bfa5a31c3fb4e5d5ffc997b79cf73e4379886525cb176adf`
* [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba) git [4c0f96a6](https://github.com/openshift/cluster-api-provider-alibaba/commit/4c0f96a692dee91100d7085c05a68f3efb7e281d) `sha256:9318a5c7785679df61210df5225293b3072af0eb7566d4d17e3a05d23973e11f`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [946daa07](https://github.com/openshift/cloud-provider-aws/commit/946daa07dbf49c4a1860a1c3fc4c05fa685c6590) `sha256:2c3b58cc936f549383b7308d379c8c534e2c72efa9b896c08129796765e49e95`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [ba3b3a31](https://github.com/openshift/machine-api-provider-aws/commit/ba3b3a31ca9efcc984015280965a4b28ffd740e0) `sha256:c473f1827817b865805151589c537d20d6178995301303dd7ce2f7af229297c6`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [2c0c0ec9](https://github.com/openshift/machine-api-provider-azure/commit/2c0c0ec9d486f737044033f5010a91e117c4e492) `sha256:1f5aa584d9a5a34258d14ed5bc22aaa624829033ee842e0620cd3e43aa826455`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [c58c53bf](https://github.com/openshift/kubernetes-autoscaler/commit/c58c53bf7a82ee46414c7f7c0f2e0e438da93eeb) `sha256:6edc769dde4effaea5a1b439d02a4d4f277d6fd21099888106edd407093517f3`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [ee908b6b](https://github.com/openshift/cluster-bootstrap/commit/ee908b6bb91dee3e61aface46d53a00b4e9288a2) `sha256:cb59c1e9dceb57ba6fe468a26bc9d32e0439a655d4954dc0e8eb35d5dd27bda2`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [ce1c9a35](https://github.com/openshift/cluster-capi-operator/commit/ce1c9a359ec9ab0c5526cd8594ea59bb52044026) `sha256:5e444e7e7212eaa0d8dcba4bd3fb695ffdc13571fd8a9bb8ee355fd8f09982d8`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [97b486cb](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/97b486cb22d56c7ea17b6829606ae0c555bcc426) `sha256:d97f98b1e4849837c0d87bb1c31688e8ee90c577ef0387698b4e73bc944c5cbe`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [3ed61e2b](https://github.com/openshift/cluster-image-registry-operator/commit/3ed61e2b86c3ff0eddc66baa038a6b30a579ce15) `sha256:40d751c499838abe79e6490f4e2f70075a24e88b9b89451ed780331c95c961b2`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [56b97078](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/56b970786d152344f0d4762c8271d20e5fc9d28b) `sha256:3aeff89d5126708be7616aea34cb88470145a71c82b81646e64b8919d4b54491`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [9f475980](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/9f475980d1e6a70f0e9400aec6f15e5f5a6132b6) `sha256:a5b9aa311829214f31da58bf3b747deddad206efa594c03bfe4033047386a29a`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [ce66cd54](https://github.com/openshift/cluster-machine-approver/commit/ce66cd5420829c20837662770451ee1c64294d47) `sha256:cbc247e602020d57ed9a8bfcd73b170322829e6d1e1effb18214880e3c563dd6`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [9a8aba8c](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/9a8aba8cad6491a31e743a7e366d758351482d88) `sha256:1cd154c611a84db7a634c39d6fa6e42f1bfbaed5d62079a3edebb96e000e6146`
* [cluster-platform-operators-manager](https://github.com/openshift/platform-operators) git [471a8068](https://github.com/openshift/platform-operators/commit/471a80685581ff95fec3bee818f6ee409836eb8e) `sha256:6b7dfcbacf59ee1513e4f73f132acd3334c3d5aa2d09193b5d0a4b869e13966d`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [9adad592](https://github.com/openshift/configmap-reload/commit/9adad592e7d9bd5a723add16488e68365a64977f) `sha256:69311c6ac7faba2110c9f1efd3c5140042a928f7701b303f8acbc4d0631e238c`
* [coredns](https://github.com/openshift/coredns) git [5560e4ad](https://github.com/openshift/coredns/commit/5560e4ad8c343c211f0b2f9d85ce7331b20b87cb) `sha256:550ebebef790e9968fde5c2f52e86dd134367e47464313ed8e75fe020632c692`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [2b914c21](https://github.com/openshift/csi-driver-nfs/commit/2b914c2161722ebf11f9275fa29e00a0b1306da1) `sha256:611d6e43120e47489f8403b980dcb30692c5bb1b0278077ed6df56f65d3b3550`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [318c84a5](https://github.com/openshift/csi-driver-shared-resource-operator/commit/318c84a5cd3ffa9d92d7e7bf6c8dc4008dc132cf) `sha256:cb294eac2099497ca89ad2eeff70cdb06ec6957675fcc3d7c8dc56f768fa1022`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [d719bdcf](https://github.com/openshift/driver-toolkit/commit/d719bdcfa49bc18b729117ee513a86a1ddecb63a) `sha256:5aa7f59881dc97ff7bbeb04c68370b524008419d2513d4eb90d17d0bfc682696`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [38ddff06](https://github.com/openshift/machine-api-provider-gcp/commit/38ddff06b72b364d1c994582d7ae3f119ef5d1a8) `sha256:48d8c7477af67ad6b6cea923ded427965416f87e9b7995aa6a2f841db8143b86`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [d221afa4](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/d221afa4bee0d722a97f49c0212dfb7954f49b93) `sha256:90be20febffda827e9c1899ddb9b304c3c11e68264c6baeb32bc60a0d03ac33d`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [b2e40105](https://github.com/openshift/k8s-prometheus-adapter/commit/b2e401059a11d23923adba51eeb82cbd5d75b7fc) `sha256:bc2e6bfc4f4dc7674dbfd08f005dc0c19372d030fb1a27590cad7a2f2b75dada`
* [keepalived-ipfailover](https://github.com/openshift/images) git [04659348](https://github.com/openshift/images/commit/04659348dbad0cd9b56596d5977d2934fa01d509) `sha256:7f3f806393f7cd4a6110ab4c7c181f39960302ec0769436bff69aa7f187b1650`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [4b969848](https://github.com/openshift/kube-state-metrics/commit/4b9698489404f06195ba8a4646d58d67e13501d4) `sha256:003407ddaf4d30339a316ce6a951ce0ea3615ba5ce8501d5f10cc6ee748d0eca`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [bad104d1](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/bad104d13ba95bc850f5aaf96436f793d7985864) `sha256:7c7da95865257b7a2b776e4d08498de33bf1a3deb9409824af5769da32d557ba`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [ee2033ec](https://github.com/openshift/cloud-provider-kubevirt/commit/ee2033ecd471dc9fc08d101c421a04916f4f55c5) `sha256:8ac233a9b240b573c27f04053b5dfd0b2c905b356661e6a0fa7d234c58bc55e0`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [efa0b943](https://github.com/openshift/kubevirt-csi-driver/commit/efa0b9432bf0f44a965dc978ada75ea9b0f3e511) `sha256:fe35f8d9bafe5b4ddda18a9386854f683cf43d0498ec023e6ba293b743160aa9`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [e55e92c1](https://github.com/openshift/cluster-api-provider-libvirt/commit/e55e92c14b2cd4925f8489f5f074015a64ed5713) `sha256:1b68e042663d21f1ff04a34124c02da858798ec8d077fc971e2673661d8d8be1`
* machine-os-content `sha256:a74e3cab8415be98bc13acb78cc11514866df7731612c34d205052e495f342b3`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [b14856ff](https://github.com/openshift/machine-os-images/commit/b14856ffbc8fbe1f986cf1b7b835bbeaa786ce5e) `sha256:6326b4e2b2682d58f254eff200f467aea404d3abca32195cf95393e7ad54fa6b`
* [must-gather](https://github.com/openshift/must-gather) git [5eca0cb6](https://github.com/openshift/must-gather/commit/5eca0cb65ea6dd13f907d1f7493ed237f07e3906) `sha256:c7ba6e80b1914b8399679117588e008a7417d74931be592a9f5a4a740089d07c`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [e72c8ad1](https://github.com/openshift/network-metrics-daemon/commit/e72c8ad1581132817c09e23295f55425a14a5c58) `sha256:42073525882ce1556bdb61040906435a3e8829845828d20b73287b23eefbcc25`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [4d1c58e2](https://github.com/openshift/cloud-provider-nutanix/commit/4d1c58e2b97f00e64ab4332d18dfdd531fb9cc4e) `sha256:c8be0fbeda402eb124db62c1e7ff5090383af66a25a6f7cb67653023c2f35ea0`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [be43191e](https://github.com/openshift/machine-api-provider-nutanix/commit/be43191e5b20c7d6a5755a39a22d31e7734b241a) `sha256:163d72fca51fdaf0a681042ae1c77dfd6636e72bceafd4a43a5a5beea1660ab7`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [41c2dfea](https://github.com/openshift/oauth-apiserver/commit/41c2dfea104b3c686a00b068654843b48b4db53f) `sha256:0324c3f4b8831aed262dc7a7ed88bc74cd9b59290e094804e303921936b06492`
* [oauth-server](https://github.com/openshift/oauth-server) git [b841149f](https://github.com/openshift/oauth-server/commit/b841149f2ec0c1ffcb0393e6f70b1e4547f3b18e) `sha256:b48e825b47dd3aec8161db836d29132fb10b462aa5f006f8b57c8a7985fb3063`
* [olm-rukpak](https://github.com/openshift/operator-framework-rukpak) git [66b3e551](https://github.com/openshift/operator-framework-rukpak/commit/66b3e551fc2730beb4c46d478166b38766c5f346) `sha256:00b56969ea474a9307ea6cd59292882fc75f358ac30f8ea96f6c156da2e2d2f5`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [0b827682](https://github.com/openshift/openshift-apiserver/commit/0b82768216c0c0ffb171457fce71b3806c586e7c) `sha256:f9b63247a5e1e94af8651fd57f452269da216ad6b55c01d05461869f64f39d4f`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [7beb8807](https://github.com/openshift/openshift-state-metrics/commit/7beb8807e2c0092b5e580a29903ff060140d8ff0) `sha256:34026a12425fdffe238e05081edcc4e1b7d61dfd5d9fe69023e32ff2bf65ad20`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [36f48b76](https://github.com/openshift/machine-api-provider-openstack/commit/36f48b76303aea04f997cda658ca5e25841a079c) `sha256:af7c4714ef09b4fb936a106f924647baea38ba928e892078a25d9a5a197056ca`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [f21b470f](https://github.com/openshift/ovirt-csi-driver/commit/f21b470f4927f97eca93a0a390cffccd7d724043) `sha256:b432f5c53dddd0eb73eba6e46cef0e7e5a70dbd594bafa010e316cba08ce86ed`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [22d89b3f](https://github.com/openshift/cluster-api-provider-ovirt/commit/22d89b3fd9e2e395a62f71092487d26c8940052e) `sha256:61e827d8e36cb7e180e8ac7d0de6219d7b662e008fbf5f3a89828a86a5a0d993`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [13036562](https://github.com/openshift/cloud-provider-powervs/commit/130365622eb0c59e102049529695c8326d616213) `sha256:19ee965ffe5c55457c45a263fbf83a1eee654ddf64894b36c6742c2a7da90884`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [bf49c5c1](https://github.com/openshift/machine-api-provider-powervs/commit/bf49c5c1b07137baa766b4d78b9e9c2650ef59ad) `sha256:cc9336ec515e716a0397710b2732cd369c63b7cc4ac8eff5a667a8b6513d0e09`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [b501d5e2](https://github.com/openshift/prom-label-proxy/commit/b501d5e2aff82d46a141223636b522aeae95b915) `sha256:29abf4df12bcff5193959ffc6918634b88fd2ba8f9d512a53402ae784bd19848`
* [prometheus](https://github.com/openshift/prometheus) git [8279148f](https://github.com/openshift/prometheus/commit/8279148fd0d8b2aa2a1613a2e9810aea80f487df) `sha256:2572eff86dc111203c5de6ce7325cc061ddb4bd737e09a1639313f3a9ed07a9c`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [f44d574d](https://github.com/openshift/prometheus-alertmanager/commit/f44d574d8e170d6788cfbf2bdbc866d3e1fc1054) `sha256:c8bb0a1430d21684cacce5e4300a6fd6ed53d76f5fb90e43d5f832bae0637f28`
* rhel-coreos `sha256:97ce093e9434448486e5c98fdfa452517e385498e0d365a7f7f36a24f0ea5e97`
* rhel-coreos-extensions `sha256:0ba79bbcd5022df7f595c62f8657c59b215360393ba2e8b633a750ee3573f587`
* [thanos](https://github.com/openshift/thanos) git [43238be3](https://github.com/openshift/thanos/commit/43238be385374e76ca6148a6780ddff9ebca3d11) `sha256:2e5055241000d77116048513ddabffd9cbbae0f6eb691d9e468b4c1cc00acefa`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [24e08ddf](https://github.com/openshift/cluster-api-provider-vsphere/commit/24e08ddf65fd387ea7c71e229b13e47d6cd3643f) `sha256:9ea704686cd1f41c1e1071eef2935198bc9d98287c033c97fd43565d4d91d9d8`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/06189bcdb0bea068f8ac51a3550fcdcbde522a76)

* [MGMT-15150](https://issues.redhat.com/browse/MGMT-15150): Use same installer binary for all platform types (#5346) [#5346](https://github.com/openshift/assisted-service/pull/5346)
* [MGMT-13947](https://issues.redhat.com/browse/MGMT-13947): Revert assisted boot reporter service (#5292) [#5292](https://github.com/openshift/assisted-service/pull/5292)
* [Full changelog](https://github.com/openshift/assisted-service/compare/8db33dbd81fe23f2a7f2ec69231b23015e2ae53b...06189bcdb0bea068f8ac51a3550fcdcbde522a76)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/18863d3b7e3ddf52c2901db2e9f381862ebc7642)

* [MGMT-15661](https://issues.redhat.com/browse/MGMT-15661): Update to latest ghw version (#594) (#596) [#594](https://github.com/openshift/assisted-installer-agent/pull/594)
* [OCPBUGS-15557](https://issues.redhat.com/browse/OCPBUGS-15557): vendor agent-installer-utils to v0.0.0-20230707155933-79b142ede77d (#565) [#565](https://github.com/openshift/assisted-installer-agent/pull/565)
* [OCPBUGS-14848](https://issues.redhat.com/browse/OCPBUGS-14848): Filter out hidden devices (#559) [#559](https://github.com/openshift/assisted-installer-agent/pull/559)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/e8de0582db56699d32653df02241c4a104755e1b...18863d3b7e3ddf52c2901db2e9f381862ebc7642)


### [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver/tree/94667c6c213f07ec7613a6d6e831d64ee73181e1)

* [OCPBUGS-16377](https://issues.redhat.com/browse/OCPBUGS-16377): [release-4.13] UPSTREAM: 763: Bump (golang.org/x/net): to address CVE-2022-41723 [#31](https://github.com/openshift/alibaba-cloud-csi-driver/pull/31)
* [Full changelog](https://github.com/openshift/alibaba-cloud-csi-driver/compare/68c0ecfcdcfaa375450f0af1b7f8c6083e3f122f...94667c6c213f07ec7613a6d6e831d64ee73181e1)


### [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator/tree/c08d87a1d043dc04d3d3cb59be9265ee5ed29b06)

* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#55](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/55)
* [Full changelog](https://github.com/openshift/alibaba-disk-csi-driver-operator/compare/0f4b92ab502068edc6cad4c0d070f44c06842092...c08d87a1d043dc04d3d3cb59be9265ee5ed29b06)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/15cd4347b9384fac3d93029c6426dc15b964f557)

* [OCPBUGS-10187](https://issues.redhat.com/browse/OCPBUGS-10187): Updating ose-apiserver-network-proxy images to be consistent with ART [#30](https://github.com/openshift/apiserver-network-proxy/pull/30)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/61e198ca00b9426e2f7309cf2818ac74426486ff...15cd4347b9384fac3d93029c6426dc15b964f557)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/acb52a088682bf4019d616523881401526437fd3)

* [OCPBUGS-15512](https://issues.redhat.com/browse/OCPBUGS-15512): Pass right SGs for IsExternallyManaged on creation [#468](https://github.com/openshift/cluster-api-provider-aws/pull/468)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/4251ed32deecad37706c6b90ecb187882386609a...acb52a088682bf4019d616523881401526437fd3)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/923631d779405e7cb684c174fa42e589c318060f)

* [OCPBUGS-13811](https://issues.redhat.com/browse/OCPBUGS-13811): Volume unmount repeats after successful unmount, preventing pod delete [#225](https://github.com/openshift/aws-ebs-csi-driver/pull/225)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/d8fa531075bd9e3da26a58e05fc906bc84e2625e...923631d779405e7cb684c174fa42e589c318060f)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/baf14a425efed2764c79d630d5aecb4744066397)

* [OCPBUGS-13036](https://issues.redhat.com/browse/OCPBUGS-13036): 4.13: Bump (golang.org/x/net): to address CVE-2022-41723 [#220](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/220)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/b6dee5c3585cbc92967530cb178a09a52164bfde...baf14a425efed2764c79d630d5aecb4744066397)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/125a4b45d02ac7596406e43810398688b25ec91d)

* [OCPBUGS-12555](https://issues.redhat.com/browse/OCPBUGS-12555): Update builder to OCP4.13/go1.19 [#164](https://github.com/openshift/aws-pod-identity-webhook/pull/164)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/4969655df4169f19092e173b16c56c79d3a3383e...125a4b45d02ac7596406e43810398688b25ec91d)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/b8d243397ff297baf875a88132f84d8cef34b968)

* [OCPBUGS-17145](https://issues.redhat.com/browse/OCPBUGS-17145): Increase service idle max timeout to 100 minutes [#81](https://github.com/openshift/cloud-provider-azure/pull/81)
* [OCPBUGS-13952](https://issues.redhat.com/browse/OCPBUGS-13952): Update x/net package to v0.8.0 [#68](https://github.com/openshift/cloud-provider-azure/pull/68)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/7afcf26e2e9190337134e75e0981d25d05dc16c8...b8d243397ff297baf875a88132f84d8cef34b968)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/8846366f4ae63a63ab75a35761cca1c95dee3c84)

* [OCPBUGS-12557](https://issues.redhat.com/browse/OCPBUGS-12557): Bump x/net package to v0.10.0 [#278](https://github.com/openshift/cluster-api-provider-azure/pull/278)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/9885d4d37ed74d764eb83a826f3a7b013ed83d12...8846366f4ae63a63ab75a35761cca1c95dee3c84)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/89e21d61f6f23b2e89f1b24096e458d6ade8a40a)

* [OCPBUGS-16318](https://issues.redhat.com/browse/OCPBUGS-16318): 4.13: UPSTREAM: 1744: fix: CVE-2022-41723 [#44](https://github.com/openshift/azure-disk-csi-driver/pull/44)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/202e8afa8f1899d4cd1843d9e09cf8832ae0eff7...89e21d61f6f23b2e89f1b24096e458d6ade8a40a)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/842415aa35f7151c34645161ef6aede60354ae2a)

* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#86](https://github.com/openshift/azure-disk-csi-driver-operator/pull/86)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/67bda47232a73fe3877815d7901353f4f74ebeb0...842415aa35f7151c34645161ef6aede60354ae2a)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/60e0cb86a6055e420bfdb52530d0a0d6418f47fd)

* [OCPBUGS-16321](https://issues.redhat.com/browse/OCPBUGS-16321): 4.13: UPSTREAM: 1211: fix: CVE-2022-41723 [#30](https://github.com/openshift/azure-file-csi-driver/pull/30)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/fd94a035e3d9dedce048f7e5f271e7ed6bea822f...60e0cb86a6055e420bfdb52530d0a0d6418f47fd)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/a79311d87a15769d1bad162d80fb9cb978478a42)

* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#67](https://github.com/openshift/azure-file-csi-driver-operator/pull/67)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/994c32c927a69df33f83aed440cc150e8d270341...a79311d87a15769d1bad162d80fb9cb978478a42)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/74f59451f603d975b87a34cbd40af4da4dc14760)

* [OCPBUGS-17809](https://issues.redhat.com/browse/OCPBUGS-17809): Allow destroy for C2S isolated (us-iso and us-isob) partitions [#7427](https://github.com/openshift/installer/pull/7427)
* [OCPBUGS-15231](https://issues.redhat.com/browse/OCPBUGS-15231): new Aws secret regions support [#7264](https://github.com/openshift/installer/pull/7264)
* [OCPBUGS-15222](https://issues.redhat.com/browse/OCPBUGS-15222): terraform: aws: secret regions now support ALIAS record [#7262](https://github.com/openshift/installer/pull/7262)
* [OCPBUGS-17823](https://issues.redhat.com/browse/OCPBUGS-17823): CORS-2445: GCP: Add osImage to the install config [#7431](https://github.com/openshift/installer/pull/7431)
* [OCPBUGS-14432](https://issues.redhat.com/browse/OCPBUGS-14432): Replica validations [#7423](https://github.com/openshift/installer/pull/7423)
* [OCPBUGS-13865](https://issues.redhat.com/browse/OCPBUGS-13865): vSphere Add ova sha query; additional debugging [#7198](https://github.com/openshift/installer/pull/7198)
* [OCPBUGS-16640](https://issues.redhat.com/browse/OCPBUGS-16640): [release-4.13] Update azure cli version to 2.49.0 [#7357](https://github.com/openshift/installer/pull/7357)
* [OCPBUGS-16777](https://issues.redhat.com/browse/OCPBUGS-16777): update RHCOS 4.13 bootimage metadata to 413.92.202307260246-0 [#7410](https://github.com/openshift/installer/pull/7410)
* [CORS-2764](https://issues.redhat.com/browse/CORS-2764): AWS Shared VPC Backport [release-4.13] [#7362](https://github.com/openshift/installer/pull/7362)
* [OCPBUGS-17104](https://issues.redhat.com/browse/OCPBUGS-17104): [release-4.13] vsphere terraform bump [#7383](https://github.com/openshift/installer/pull/7383)
* [OCPBUGS-17397](https://issues.redhat.com/browse/OCPBUGS-17397): backport openstack UPI for ansible 2.10 [#7385](https://github.com/openshift/installer/pull/7385)
* [OCPBUGS-15290](https://issues.redhat.com/browse/OCPBUGS-15290): GCP: ic: improve project validation [#7361](https://github.com/openshift/installer/pull/7361)
* [OCPBUGS-16390](https://issues.redhat.com/browse/OCPBUGS-16390): Allow override of networkType [#7344](https://github.com/openshift/installer/pull/7344)
* [OCPBUGS-16673](https://issues.redhat.com/browse/OCPBUGS-16673): Fix timing issue between network services [#7358](https://github.com/openshift/installer/pull/7358)
* [OCPBUGS-14711](https://issues.redhat.com/browse/OCPBUGS-14711): Convert Rendezvous IPv6 address to canonical format [#7237](https://github.com/openshift/installer/pull/7237)
* [OCPBUGS-16066](https://issues.redhat.com/browse/OCPBUGS-16066): Use correct SELinux label. Make rename atomic. [#7315](https://github.com/openshift/installer/pull/7315)
* [OCPBUGS-14599](https://issues.redhat.com/browse/OCPBUGS-14599): Log additional host info at warning level [#7233](https://github.com/openshift/installer/pull/7233)
* [OCPBUGS-15866](https://issues.redhat.com/browse/OCPBUGS-15866): Use the same names for public LB in IPI and UPI Azure [#7302](https://github.com/openshift/installer/pull/7302)
* [OCPBUGS-16124](https://issues.redhat.com/browse/OCPBUGS-16124): azure: skip LB creation when not needed [#7322](https://github.com/openshift/installer/pull/7322)
* [OCPBUGS-13812](https://issues.redhat.com/browse/OCPBUGS-13812): ic: azure: validate diskTypes in AzureStack [#7195](https://github.com/openshift/installer/pull/7195)
* [OCPBUGS-15230](https://issues.redhat.com/browse/OCPBUGS-15230): azure: skip NSG creation when BYO vnet [#7263](https://github.com/openshift/installer/pull/7263)
* [OCPBUGS-15591](https://issues.redhat.com/browse/OCPBUGS-15591): [release-4.13] gcp: add confidential compute support for boostrap TF [#7298](https://github.com/openshift/installer/pull/7298)
* [OCPBUGS-15187](https://issues.redhat.com/browse/OCPBUGS-15187): images: installer: add xz to the container [#7260](https://github.com/openshift/installer/pull/7260)
* [OCPBUGS-14867](https://issues.redhat.com/browse/OCPBUGS-14867): Shorten SNO installation duration by releasing CPC lease [#7241](https://github.com/openshift/installer/pull/7241)
* [OCPBUGS-13752](https://issues.redhat.com/browse/OCPBUGS-13752): Set AdditionalTrustBundle in override when mirroring not enabled [#7191](https://github.com/openshift/installer/pull/7191)
* [OCPBUGS-15289](https://issues.redhat.com/browse/OCPBUGS-15289): gcp use preconfigured private zone for installation [#7271](https://github.com/openshift/installer/pull/7271)
* [OCPBUGS-14916](https://issues.redhat.com/browse/OCPBUGS-14916): Replace with govc docker image and fix ibmcli folder permission issue [#7245](https://github.com/openshift/installer/pull/7245)
* [OCPBUGS-13323](https://issues.redhat.com/browse/OCPBUGS-13323): update RHCOS 4.13 bootimage metadata to 413.92.202306140611-0 [#7248](https://github.com/openshift/installer/pull/7248)
* [OCPBUGS-14860](https://issues.redhat.com/browse/OCPBUGS-14860): GCP XPN Private Cluster Fails with no Public Zone [#7240](https://github.com/openshift/installer/pull/7240)
* [OCPBUGS-13765](https://issues.redhat.com/browse/OCPBUGS-13765): Support /dev/disk/by-path root device hints [#7193](https://github.com/openshift/installer/pull/7193)
* [OCPBUGS-14171](https://issues.redhat.com/browse/OCPBUGS-14171): Ignore IAM Roles that the Installer is not authorized to access [#7210](https://github.com/openshift/installer/pull/7210)
* [OCPBUGS-11530](https://issues.redhat.com/browse/OCPBUGS-11530): [release-4.13] add project filter to gcp usage api requests [#7045](https://github.com/openshift/installer/pull/7045)
* [OCPBUGS-10493](https://issues.redhat.com/browse/OCPBUGS-10493): Nutanix Hostname of the VM is not set when using DHCP network config [#7016](https://github.com/openshift/installer/pull/7016)
* [OCPBUGS-14027](https://issues.redhat.com/browse/OCPBUGS-14027): GCP XPN: Pass instance service acct in manual mode [#7204](https://github.com/openshift/installer/pull/7204)
* [Full changelog](https://github.com/openshift/installer/compare/2f227cc47f4e7ca6ed8edf0caf7c48283a82fc03...74f59451f603d975b87a34cbd40af4da4dc14760)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/7de328a2d332833257fde75368e624908a3eec13)

* [OCPBUGS-16084](https://issues.redhat.com/browse/OCPBUGS-16084): Fix Metal3Remediation CRD install order [#194](https://github.com/openshift/cluster-api-provider-baremetal/pull/194)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/d20bc578a4368130d10f41ad974bf147af9410f8...7de328a2d332833257fde75368e624908a3eec13)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/12e53b8aeee5bb4d576e88dad5611c798928249b)

* [OCPBUGS-17365](https://issues.redhat.com/browse/OCPBUGS-17365): Trigger reconcile on Secret change [#295](https://github.com/openshift/baremetal-operator/pull/295)
* [OCPBUGS-16013](https://issues.redhat.com/browse/OCPBUGS-16013): Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.6 to 3.5.9 [#292](https://github.com/openshift/baremetal-operator/pull/292)
* [OCPBUGS-17229](https://issues.redhat.com/browse/OCPBUGS-17229): Set minimum TLS version for webhook to 1.2 [#294](https://github.com/openshift/baremetal-operator/pull/294)
* [OCPBUGS-13374](https://issues.redhat.com/browse/OCPBUGS-13374): Do not try to update images for nodes in transient states [#282](https://github.com/openshift/baremetal-operator/pull/282)
* [OCPBUGS-13927](https://issues.redhat.com/browse/OCPBUGS-13927): Deleting unmanaged BMH get stuck fix [#281](https://github.com/openshift/baremetal-operator/pull/281)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/d17c8bce1af351ffa1393026b0c75369a5cb0fa4...12e53b8aeee5bb4d576e88dad5611c798928249b)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/dc50979bf902b9e217ab694b225f391529b92963)

* [OCPBUGS-18582](https://issues.redhat.com/browse/OCPBUGS-18582): Move haproxy firewall rule check earlier in loop [#271](https://github.com/openshift/baremetal-runtimecfg/pull/271)
* [OCPBUGS-17423](https://issues.redhat.com/browse/OCPBUGS-17423): Don't render config with incomplete unicast peer list [#267](https://github.com/openshift/baremetal-runtimecfg/pull/267)
* [OCPBUGS-14487](https://issues.redhat.com/browse/OCPBUGS-14487): Support IPv6 VIP for setup with multipe IPv6 addresses [#259](https://github.com/openshift/baremetal-runtimecfg/pull/259)
* [OCPBUGS-15101](https://issues.redhat.com/browse/OCPBUGS-15101): Use machine-config state instead of comparing roles [#261](https://github.com/openshift/baremetal-runtimecfg/pull/261)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/f0c1297c424d2ce8d20b376c488f8ada595b39b9...dc50979bf902b9e217ab694b225f391529b92963)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/17b7accf8fd25125ce015cf4bea7d3cd3f336317)

* [OCPBUGS-13527](https://issues.redhat.com/browse/OCPBUGS-13527): Bump x org deps 4.13 [#1422](https://github.com/openshift/oc/pull/1422)
* [OCPBUGS-16055](https://issues.redhat.com/browse/OCPBUGS-16055): mcs cert: account for environments that use IP directly [#1500](https://github.com/openshift/oc/pull/1500)
* [OCPBUGS-16193](https://issues.redhat.com/browse/OCPBUGS-16193): reboot: set ignition version to 3.1 [#1508](https://github.com/openshift/oc/pull/1508)
* [OCPBUGS-16172](https://issues.redhat.com/browse/OCPBUGS-16172): Add tls-server-name when property exists in kubeconfig [#1506](https://github.com/openshift/oc/pull/1506)
* handle the error case of node retrieval while waiting for reboot [#1484](https://github.com/openshift/oc/pull/1484)
* bring some cert rotation helpers back into 4.13 [#1474](https://github.com/openshift/oc/pull/1474)
* [OCPBUGS-14249](https://issues.redhat.com/browse/OCPBUGS-14249): preserve explicit release image in ClusterVersion [#1435](https://github.com/openshift/oc/pull/1435)
* [OCPBUGS-14180](https://issues.redhat.com/browse/OCPBUGS-14180): Remove closed centos7 registry from newapp unit tests [#1432](https://github.com/openshift/oc/pull/1432)
* [Full changelog](https://github.com/openshift/oc/compare/92b1a3d0e5d092430b523f6541aa0c504b2222b3...17b7accf8fd25125ce015cf4bea7d3cd3f336317)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/0621fcaf818f57ab05602259c1eb14db07b68dce)

* [OCPBUGS-12565](https://issues.redhat.com/browse/OCPBUGS-12565): CVE-2022-41723 ose-cloud-credential-operator-container: net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding [openshift-4] [#543](https://github.com/openshift/cloud-credential-operator/pull/543)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d3b5ffa30529cfb744715145919b58de6872656f...0621fcaf818f57ab05602259c1eb14db07b68dce)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/4f190d6b8c06257071e01b4d75ea9ae33fd20885)

* [OCPBUGS-15856](https://issues.redhat.com/browse/OCPBUGS-15856): Azure: Handle already existing IP configurations [#116](https://github.com/openshift/cloud-network-config-controller/pull/116)
* [OCPBUGS-14635](https://issues.redhat.com/browse/OCPBUGS-14635): increase GCP egress ip capacity to 100 from 10 [#113](https://github.com/openshift/cloud-network-config-controller/pull/113)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/71ccef5299dc865106a86f6f514041dbe33086bb...4f190d6b8c06257071e01b4d75ea9ae33fd20885)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/a044dd9175d25911b799082fb189e4886391807b)

* [OCPBUGS-15258](https://issues.redhat.com/browse/OCPBUGS-15258): Correctly link oauth apiserver ServiceMonitor with its Service [#617](https://github.com/openshift/cluster-authentication-operator/pull/617)
* [OCPBUGS-13763](https://issues.redhat.com/browse/OCPBUGS-13763): dont log tokens [#618](https://github.com/openshift/cluster-authentication-operator/pull/618)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/a69e6b75c9a98bddae0e5ebdfd84c72f3fc72242...a044dd9175d25911b799082fb189e4886391807b)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/29a00c91292ecf6512e35d6f01c2d5b8696c17ca)

* [OCPBUGS-17098](https://issues.redhat.com/browse/OCPBUGS-17098): update x/net dependency to 0.7.0 [#280](https://github.com/openshift/cluster-autoscaler-operator/pull/280)
* [OCPBUGS-16768](https://issues.redhat.com/browse/OCPBUGS-16768): add nutanix labels that should be ignored [#278](https://github.com/openshift/cluster-autoscaler-operator/pull/278)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/99a0e2bacb4beacc58ea0c203c247f35fdf57ee1...29a00c91292ecf6512e35d6f01c2d5b8696c17ca)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/ee42773269a65998812435c0f1ab0c08cd8154f5)

* [OCPBUGS-15472](https://issues.redhat.com/browse/OCPBUGS-15472): Limit role binding to openshift-machine-api namespace [#346](https://github.com/openshift/cluster-baremetal-operator/pull/346)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/db283115e0b424e404307602701f1b6295c2f856...ee42773269a65998812435c0f1ab0c08cd8154f5)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/507f873307be10d8ddbbbe0fecba68aea7c2b5c1)

* [OCPBUGS-12567](https://issues.redhat.com/browse/OCPBUGS-12567): Bump x/net package to v0.10.0 [#176](https://github.com/openshift/cluster-api/pull/176)
* [Full changelog](https://github.com/openshift/cluster-api/compare/0142186bad9acc2d7950663129a4ef82c32a5610...507f873307be10d8ddbbbe0fecba68aea7c2b5c1)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/ef4594ef3f4ca535aa1d34878b79184323ecf481)

* [OCPBUGS-17101](https://issues.redhat.com/browse/OCPBUGS-17101): update x/net dependency to 0.7.0 [#269](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/269)
* [OCPBUGS-15746](https://issues.redhat.com/browse/OCPBUGS-15746): Alibaba platforms should not be upgradeable [#260](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/260)
* [OCPBUGS-13011](https://issues.redhat.com/browse/OCPBUGS-13011): Add beta topology labels flag to Azure cloud node manager [#250](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/250)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/ecb49c59ae21b6beb7c3071e80c5c847f1ba7fbe...ef4594ef3f4ca535aa1d34878b79184323ecf481)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/a9e658abf7de525b411ff005b65e061e39f58bd6)

* [CORS-2766](https://issues.redhat.com/browse/CORS-2766): AWS Shared VPC API Bump [release-4.13] [#337](https://github.com/openshift/cluster-config-operator/pull/337)
* [OCPBUGS-16164](https://issues.redhat.com/browse/OCPBUGS-16164): retire LatencySensitive featureset [#329](https://github.com/openshift/cluster-config-operator/pull/329)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/923b864e76c6e8eb1bfcd66bb73327588dd8b75a...a9e658abf7de525b411ff005b65e061e39f58bd6)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/42f323cd02b4e86ed630ed6649e32f9a876b3444)

* [OCPBUGS-15330](https://issues.redhat.com/browse/OCPBUGS-15330): Fix lint issue [#222](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/222)
* [OCPBUGS-15161](https://issues.redhat.com/browse/OCPBUGS-15161): Surface cpms vs machine diff [#218](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/218)
* [OCPBUGS-14024](https://issues.redhat.com/browse/OCPBUGS-14024): Check ProviderSpec before generating MachineInfo [#211](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/211)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/9740b7ebfb127dfaa251506714e6c8cb41f0ae2b...42f323cd02b4e86ed630ed6649e32f9a876b3444)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/c6768d4537b7c2969b77fea26429b2822c0ec844)

* [OCPBUGS-11449](https://issues.redhat.com/browse/OCPBUGS-11449): Enable topology-aware hints if, and only if, nodes have zones [#367](https://github.com/openshift/cluster-dns-operator/pull/367)
* [OCPBUGS-15225](https://issues.redhat.com/browse/OCPBUGS-15225): Add support for protocolStrategy API field to enable force_tcp configuration [#372](https://github.com/openshift/cluster-dns-operator/pull/372)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/d96022a4d0d091955d73e7e99fc8cc81db56c86a...c6768d4537b7c2969b77fea26429b2822c0ec844)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/f8b2f77f9e480cae8f5fbda13fd2b54b61d276ee)

* [OCPBUGS-16804](https://issues.redhat.com/browse/OCPBUGS-16804): reset snapshot default counts to avoid file already lo… [#1080](https://github.com/openshift/cluster-etcd-operator/pull/1080)
* [OCPBUGS-12487](https://issues.redhat.com/browse/OCPBUGS-12487): update golang.org/x/net/http2 [#1075](https://github.com/openshift/cluster-etcd-operator/pull/1075)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/4a9be58b44eee435cfa28b97f5f4c0d816424717...f8b2f77f9e480cae8f5fbda13fd2b54b61d276ee)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/2ecad04e6dcd3338b7180529a9f55cb13dff276d)

* [OCPBUGS-17733](https://issues.redhat.com/browse/OCPBUGS-17733): [release-4.13] remove shared VPC cred request [#972](https://github.com/openshift/cluster-ingress-operator/pull/972)
* [NE-1341](https://issues.redhat.com/browse/NE-1341): Add support for AWS shared VPC in another account [#966](https://github.com/openshift/cluster-ingress-operator/pull/966)
* [OCPBUGS-15434](https://issues.redhat.com/browse/OCPBUGS-15434): [release-4.13] Fix invalid DNS name formatting for GCP [#958](https://github.com/openshift/cluster-ingress-operator/pull/958)
* [OCPBUGS-15515](https://issues.redhat.com/browse/OCPBUGS-15515): Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record [#955](https://github.com/openshift/cluster-ingress-operator/pull/955)
* [OCPBUGS-12743](https://issues.redhat.com/browse/OCPBUGS-12743): bump controller-runtime to fix the multi namespace cache indexing [#921](https://github.com/openshift/cluster-ingress-operator/pull/921)
* [OCPBUGS-13964](https://issues.redhat.com/browse/OCPBUGS-13964), [OCPBUGS-13967](https://issues.redhat.com/browse/OCPBUGS-13967): Handle mTLS CRLs, and fix accidental CRL duplication [#935](https://github.com/openshift/cluster-ingress-operator/pull/935)
* [OCPBUGS-12918](https://issues.redhat.com/browse/OCPBUGS-12918): gatewayclass: Update for OSSM 2.4 API change [#917](https://github.com/openshift/cluster-ingress-operator/pull/917)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/7262c34b3a6434b49851ff5f0cceec87a2ee9706...2ecad04e6dcd3338b7180529a9f55cb13dff276d)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/64248a87ca421b5f28d2d472c48cd29a465e75f8)

* [OCPBUGS-15853](https://issues.redhat.com/browse/OCPBUGS-15853): pkg/operator/configobserver: check that the serving certificate refer… [#1522](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1522)
* [OCPBUGS-17081](https://issues.redhat.com/browse/OCPBUGS-17081): make webhook connection failure a warning in log [#1532](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1532)
* [OCPBUGS-13763](https://issues.redhat.com/browse/OCPBUGS-13763): dont log jwt tokens [#1499](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1499)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/02ea4a4120dd0f8eb49d070b1fe420ed6d1debba...64248a87ca421b5f28d2d472c48cd29a465e75f8)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/8d627a55e6d765019f4879ea20e2016e6cc0be63)

* [OCPBUGS-13093](https://issues.redhat.com/browse/OCPBUGS-13093): Bump golang.org/x/net [#20](https://github.com/openshift/cluster-api-operator/pull/20)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/b8428eb60d727565fefa4e37c845d704913cf0c5...8d627a55e6d765019f4879ea20e2016e6cc0be63)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/5c00da0816faf0f15e643f05666c963d862a8299)

* [OCPBUGS-14651](https://issues.redhat.com/browse/OCPBUGS-14651): disable debug pporf with unauthenticated port for 4.13 [#480](https://github.com/openshift/cluster-kube-scheduler-operator/pull/480)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/dc5cba57ddcdb5a4b43240d1c2ab908fa953d887...5c00da0816faf0f15e643f05666c963d862a8299)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/547c850b30e2183f8a6c9842c82ce672ba72cc76)

* [OCPBUGS-11016](https://issues.redhat.com/browse/OCPBUGS-11016): Node Exporter ignores network interface under name "cali[a-f0-9]*" [#1927](https://github.com/openshift/cluster-monitoring-operator/pull/1927)
* [OCPBUGS-16023](https://issues.redhat.com/browse/OCPBUGS-16023): Add the trusted CA bundle in UWM Prometheus pods [#2041](https://github.com/openshift/cluster-monitoring-operator/pull/2041)
* [OCPBUGS-15469](https://issues.redhat.com/browse/OCPBUGS-15469): Limit the value of GOMAXPROCS on node-exporter to 4. [#2021](https://github.com/openshift/cluster-monitoring-operator/pull/2021)
* [OCPBUGS-14251](https://issues.redhat.com/browse/OCPBUGS-14251): Add new web console usage metrics [#1976](https://github.com/openshift/cluster-monitoring-operator/pull/1976)
* [OCPBUGS-12488](https://issues.redhat.com/browse/OCPBUGS-12488): go.mod: update golang.org/x/net to v0.7.0 [#1957](https://github.com/openshift/cluster-monitoring-operator/pull/1957)
* [OCPBUGS-13007](https://issues.redhat.com/browse/OCPBUGS-13007): Add build number to rules [#1964](https://github.com/openshift/cluster-monitoring-operator/pull/1964)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/1563f682454aa22db0ac381fb4616efa6931dea6...547c850b30e2183f8a6c9842c82ce672ba72cc76)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/f91c5b944183bf189d866ecd8c6bbdb1b638f86b)

* [OCPBUGS-18342](https://issues.redhat.com/browse/OCPBUGS-18342): Fix bond-cni's default directory in multus manifest [#1977](https://github.com/openshift/cluster-network-operator/pull/1977)
* [OCPBUGS-13920](https://issues.redhat.com/browse/OCPBUGS-13920): add Hypershift release-image annotation to multus [#1817](https://github.com/openshift/cluster-network-operator/pull/1817)
* [OCPBUGS-18099](https://issues.redhat.com/browse/OCPBUGS-18099): [release-4.13] Use encapsulation=true for IBM Cloud [#1932](https://github.com/openshift/cluster-network-operator/pull/1932)
* [OCPBUGS-17721](https://issues.redhat.com/browse/OCPBUGS-17721): Enhance check controller to remove old check objects [#1950](https://github.com/openshift/cluster-network-operator/pull/1950)
* [OCPBUGS-17457](https://issues.redhat.com/browse/OCPBUGS-17457): prevent creation of multiple cni-sysctl-allowlist-ds pods [#1936](https://github.com/openshift/cluster-network-operator/pull/1936)
* [OCPBUGS-11539](https://issues.redhat.com/browse/OCPBUGS-11539): Hypershift: Add RollingUpdate parameters to multus-admission-controller [#1774](https://github.com/openshift/cluster-network-operator/pull/1774)
* [OCPBUGS-15977](https://issues.redhat.com/browse/OCPBUGS-15977): Add logic to pick the openshift-sdn shims from right directories [#1880](https://github.com/openshift/cluster-network-operator/pull/1880)
* [OCPBUGS-15962](https://issues.redhat.com/browse/OCPBUGS-15962): Add logic to pick the ovn-k8s-cni-overlay binary from the right dir [#1877](https://github.com/openshift/cluster-network-operator/pull/1877)
* Change rhel7/8 to rhel8/9 [#1869](https://github.com/openshift/cluster-network-operator/pull/1869)
* [OCPBUGS-15476](https://issues.redhat.com/browse/OCPBUGS-15476): Add release version annotation to whereabouts-reconciler [#1853](https://github.com/openshift/cluster-network-operator/pull/1853)
* [OCPBUGS-15139](https://issues.redhat.com/browse/OCPBUGS-15139): Remove nodeSelector for architecture in whereabouts daemonset [#1840](https://github.com/openshift/cluster-network-operator/pull/1840)
* [OCPBUGS-14871](https://issues.redhat.com/browse/OCPBUGS-14871): Do not rely on ControlPlaneTopology do determine if running in HyperShift [#1837](https://github.com/openshift/cluster-network-operator/pull/1837)
* [OCPBUGS-13809](https://issues.redhat.com/browse/OCPBUGS-13809): Use `IfNotPresent` instead of `Always` in OVNK upgrades pre-puller [#1813](https://github.com/openshift/cluster-network-operator/pull/1813)
* [OCPBUGS-14367](https://issues.redhat.com/browse/OCPBUGS-14367): High API requests due to allowlist and operconfig reconcilers running too often [#1824](https://github.com/openshift/cluster-network-operator/pull/1824)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/3ed6bef191d49ede92ab8f7f684826a1b7967928...f91c5b944183bf189d866ecd8c6bbdb1b638f86b)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/73cf3baf414f482e498779609656e28e381a0cec)

* [OCPBUGS-18063](https://issues.redhat.com/browse/OCPBUGS-18063): cgroup: Match the name of the cgroup to what is expected by kubelet (#774) [#774](https://github.com/openshift/cluster-node-tuning-operator/pull/774)
* update tsc karg to tsc=reliable (#757) [#757](https://github.com/openshift/cluster-node-tuning-operator/pull/757)
* [OCPBUGS-17845](https://issues.redhat.com/browse/OCPBUGS-17845): deflake ht aware test (#763) [#763](https://github.com/openshift/cluster-node-tuning-operator/pull/763)
* [OCPBUGS-17794](https://issues.redhat.com/browse/OCPBUGS-17794): rps: use default rps mask kernel API (#760) [#760](https://github.com/openshift/cluster-node-tuning-operator/pull/760)
* Improve render error handling (#755) [#755](https://github.com/openshift/cluster-node-tuning-operator/pull/755)
* nto:tuned: remove sched_min_granularity_ns settings (#726) [#726](https://github.com/openshift/cluster-node-tuning-operator/pull/726)
* Fix a race in e2e test rollback.go code (#740) [#740](https://github.com/openshift/cluster-node-tuning-operator/pull/740)
* E2E: Add memory manager sanity test case (#573) (#695) [#573](https://github.com/openshift/cluster-node-tuning-operator/pull/573)
* e2e: latency testing: increase the expected threshold (#709) [#709](https://github.com/openshift/cluster-node-tuning-operator/pull/709)
* Do not rollback settings on TuneD exit (#704) [#704](https://github.com/openshift/cluster-node-tuning-operator/pull/704)
* Switch to rslave/HostToContainer volume mount propagation (#705) [#705](https://github.com/openshift/cluster-node-tuning-operator/pull/705)
* e2e: perf-prof: disable truncating gomega output (#707) [#707](https://github.com/openshift/cluster-node-tuning-operator/pull/707)
* [OCPBUGS-14895](https://issues.redhat.com/browse/OCPBUGS-14895): Do not fail creating cgroups if they exist already (#684) [#684](https://github.com/openshift/cluster-node-tuning-operator/pull/684)
* [OCPBUGS-14331](https://issues.redhat.com/browse/OCPBUGS-14331): Fix updating numa core siblings map in GetCpuSiblings function (#669) [#669](https://github.com/openshift/cluster-node-tuning-operator/pull/669)
* render: remove uid from render-sync target (#594) (#609) [#594](https://github.com/openshift/cluster-node-tuning-operator/pull/594)
* Remove cpu-quota.crio.io: disable annotation (#670) [#670](https://github.com/openshift/cluster-node-tuning-operator/pull/670)
* Add PerformanceProfiles to 'oc adm must-gather' (#657) [#657](https://github.com/openshift/cluster-node-tuning-operator/pull/657)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/7333da210d37eedcb3e1829bce5f6136d006d12d...73cf3baf414f482e498779609656e28e381a0cec)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/ea4f097def493950e6e65068284084935b8ce4d9)

* [OCPBUGS-13763](https://issues.redhat.com/browse/OCPBUGS-13763): dont log tokens [#541](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/541)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/aaa3cec4118d3743fd15f6197e348e86f7e48c7d...ea4f097def493950e6e65068284084935b8ce4d9)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/8d2af85d0b6dcf09256bd9fecc5d36ac77bc41d1)

* [OCPBUGS-14091](https://issues.redhat.com/browse/OCPBUGS-14091): [4.13] fix ClusterResourceQuotas to work for all api resources including custom resources [#116](https://github.com/openshift/cluster-policy-controller/pull/116)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/4aa5ecd04fa2a35a5ae07a13707bd2e0239432a9...8d2af85d0b6dcf09256bd9fecc5d36ac77bc41d1)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/f785bad1227439dfdb627538b3f7ecd0eb28f33c)

* [OCPBUGS-15756](https://issues.redhat.com/browse/OCPBUGS-15756): Update Jenkins and Jenkins Agent Base image versions [#505](https://github.com/openshift/cluster-samples-operator/pull/505)
* [OCPBUGS-14598](https://issues.redhat.com/browse/OCPBUGS-14598): Updating to use Jenkins 4.13 images [#503](https://github.com/openshift/cluster-samples-operator/pull/503)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/318d124ed3bcde76cbe960f6bef203728e34d1c6...f785bad1227439dfdb627538b3f7ecd0eb28f33c)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/98120d5f97b9fa0e83e4e99f9f466072ce7ca9d6)

* [OCPBUGS-15378](https://issues.redhat.com/browse/OCPBUGS-15378): decrease severity for MultipleDefaultStorageClasses alert [#383](https://github.com/openshift/cluster-storage-operator/pull/383)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/6479617c1e9e92cc664d0e8c26ba62191320f4e4...98120d5f97b9fa0e83e4e99f9f466072ce7ca9d6)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/5b725937d51e9f089c3f99e27e4ee77a6d2cbbcd)

* Adding the new CI Signer public key [#50](https://github.com/openshift/cluster-update-keys/pull/50)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/2796e1732615521e818be82663058e0a3f1b3941...5b725937d51e9f089c3f99e27e4ee77a6d2cbbcd)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/2ba8f8d7bc59f596db65d47e80ef8765ae340c34)

* [OCPBUGS-16613](https://issues.redhat.com/browse/OCPBUGS-16613): Add admin-gate ack-4.13-kube-1.27-api-removals-in-4.14 [#948](https://github.com/openshift/cluster-version-operator/pull/948)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/e08a27913bc6c6d0ca0663dc131d1183773cca10...2ba8f8d7bc59f596db65d47e80ef8765ae340c34)


### [console](https://github.com/openshift/console/tree/875f16fa464ed8f2f0b9e86a5652ac085ebd5097)

* [OCPBUGS-18335](https://issues.redhat.com/browse/OCPBUGS-18335): Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers [#13120](https://github.com/openshift/console/pull/13120)
* [OCPBUGS-17876](https://issues.redhat.com/browse/OCPBUGS-17876): Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn't exists [#13095](https://github.com/openshift/console/pull/13095)
* [OCPBUGS-16668](https://issues.redhat.com/browse/OCPBUGS-16668): Dynamic plugin translation support for plurals broken [#13041](https://github.com/openshift/console/pull/13041)
* [OCPBUGS-17181](https://issues.redhat.com/browse/OCPBUGS-17181): Creation of GH webhook and attaching it to repo while importing from git using PAC [#13060](https://github.com/openshift/console/pull/13060)
* [OCPBUGS-16040](https://issues.redhat.com/browse/OCPBUGS-16040): fix bug where binary secret values are corrupted on edit and add test coverage [#13048](https://github.com/openshift/console/pull/13048)
* [OCPBUGS-16659](https://issues.redhat.com/browse/OCPBUGS-16659): Fix RTE in bridge. [#13038](https://github.com/openshift/console/pull/13038)
* [OCPBUGS-16158](https://issues.redhat.com/browse/OCPBUGS-16158): "Duplicate RoleBinding" leads to "Unsupported value" error [#13008](https://github.com/openshift/console/pull/13008)
* [OCPBUGS-16434](https://issues.redhat.com/browse/OCPBUGS-16434): Fix stop PLR option [#13031](https://github.com/openshift/console/pull/13031)
* [OCPBUGS-14265](https://issues.redhat.com/browse/OCPBUGS-14265): Regression: OpenShift Console no-longer filters SecretList when displaying ServiceAccount [#12865](https://github.com/openshift/console/pull/12865)
* [OCPBUGS-13641](https://issues.redhat.com/browse/OCPBUGS-13641): Do not fetch catalog sources on CSV or Subscription details pages. [#12811](https://github.com/openshift/console/pull/12811)
* [OCPBUGS-16421](https://issues.redhat.com/browse/OCPBUGS-16421): When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. [#13030](https://github.com/openshift/console/pull/13030)
* [OCPBUGS-15998](https://issues.redhat.com/browse/OCPBUGS-15998): Upload JAR file does not work if the Cluster Samples Operator is disabled [#12992](https://github.com/openshift/console/pull/12992)
* [OCPBUGS-15810](https://issues.redhat.com/browse/OCPBUGS-15810): only show pipelines doc link for downstream [#12981](https://github.com/openshift/console/pull/12981)
* [OCPBUGS-15982](https://issues.redhat.com/browse/OCPBUGS-15982): get Kamelets from the camel-k-operator namespace as well [#12988](https://github.com/openshift/console/pull/12988)
* [OCPBUGS-16244](https://issues.redhat.com/browse/OCPBUGS-16244): Fix operator backed catalog page when copied CSVs disabled [#13019](https://github.com/openshift/console/pull/13019)
* [OCPBUGS-15194](https://issues.redhat.com/browse/OCPBUGS-15194): Remove tech preview badge from Pipeline repository pages [#12916](https://github.com/openshift/console/pull/12916)
* [OCPBUGS-10326](https://issues.redhat.com/browse/OCPBUGS-10326): re-enable operator-install-single-namespace.spec.ts test [#12653](https://github.com/openshift/console/pull/12653)
* [OCPBUGS-15848](https://issues.redhat.com/browse/OCPBUGS-15848): The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. [#12976](https://github.com/openshift/console/pull/12976)
* [OCPBUGS-15890](https://issues.redhat.com/browse/OCPBUGS-15890): Use proxy with web socket connection and monitoring dashboard [#12978](https://github.com/openshift/console/pull/12978)
* [OCPBUGS-15720](https://issues.redhat.com/browse/OCPBUGS-15720), [OCPBUGS-15721](https://issues.redhat.com/browse/OCPBUGS-15721), [OCPBUGS-15722](https://issues.redhat.com/browse/OCPBUGS-15722): Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions [#12963](https://github.com/openshift/console/pull/12963)
* [OCPBUGS-14426](https://issues.redhat.com/browse/OCPBUGS-14426): account for single object in status.conditions instead… [#12875](https://github.com/openshift/console/pull/12875)
* [OCPBUGS-14267](https://issues.redhat.com/browse/OCPBUGS-14267): Add Pipeline metrics unsupported empty page [#12864](https://github.com/openshift/console/pull/12864)
* [OCPBUGS-15410](https://issues.redhat.com/browse/OCPBUGS-15410): Add Git Repository (PAC) doesn't setup GitLab and Bitbucket configuration correct [#12936](https://github.com/openshift/console/pull/12936)
* [OCPBUGS-15787](https://issues.redhat.com/browse/OCPBUGS-15787): Remove access review check for PipelineResource from Pipeline section [#12967](https://github.com/openshift/console/pull/12967)
* [OCPBUGS-15228](https://issues.redhat.com/browse/OCPBUGS-15228): Create helm release page doesn't show a YAML editor when schema isn't available (httpd-imagestreams chart) [#12937](https://github.com/openshift/console/pull/12937)
* [release 4.13] OCPBUGS-15360: Serverless functions UI warning is misleading [#12931](https://github.com/openshift/console/pull/12931)
* [OCPBUGS-14166](https://issues.redhat.com/browse/OCPBUGS-14166): Fixed Make Serverless Form Error [#12857](https://github.com/openshift/console/pull/12857)
* [OCPBUGS-14336](https://issues.redhat.com/browse/OCPBUGS-14336): use service port name instead targetPort in the Pipeline Event listener route [#12870](https://github.com/openshift/console/pull/12870)
* [OCPBUGS-14310](https://issues.redhat.com/browse/OCPBUGS-14310): Could not import multiple resources via JSON (while YAML supports this) [#12868](https://github.com/openshift/console/pull/12868)
* [OCPBUGS-15335](https://issues.redhat.com/browse/OCPBUGS-15335): Delete annotation 'tekton.dev/v1beta1TaskRuns' when rerun the PLR [#12927](https://github.com/openshift/console/pull/12927)
* [OCPBUGS-15130](https://issues.redhat.com/browse/OCPBUGS-15130): Helm Repository "Edit" button results in 404 [#12909](https://github.com/openshift/console/pull/12909)
* [OCPBUGS-14189](https://issues.redhat.com/browse/OCPBUGS-14189): Corrected Labels for resolving the bug related to the Create Route Checkbox [#12858](https://github.com/openshift/console/pull/12858)
* [OCPBUGS-13642](https://issues.redhat.com/browse/OCPBUGS-13642): Fix OLM k8sResourcePrefix descriptor dropdown behavior [#12812](https://github.com/openshift/console/pull/12812)
* [OCPBUGS-11974](https://issues.redhat.com/browse/OCPBUGS-11974): Add page title to Devconsole pages [#12844](https://github.com/openshift/console/pull/12844)
* [OCPBUGS-15465](https://issues.redhat.com/browse/OCPBUGS-15465), [OCPBUGS-15481](https://issues.redhat.com/browse/OCPBUGS-15481): Remove PipelineResource CRD check because it's not installed with PO 1.11 anymore and disable operator-uninstall test [#12949](https://github.com/openshift/console/pull/12949)
* [OCPBUGS-14943](https://issues.redhat.com/browse/OCPBUGS-14943): visiting Configurations page returns error Cannot read… [#12897](https://github.com/openshift/console/pull/12897)
* [OCPBUGS-12785](https://issues.redhat.com/browse/OCPBUGS-12785): Project admin can update and view subscription from operator details page [#12780](https://github.com/openshift/console/pull/12780)
* [OCPBUGS-14574](https://issues.redhat.com/browse/OCPBUGS-14574): only copy workload annotations to debug pod [#12879](https://github.com/openshift/console/pull/12879)
* [OCPBUGS-14258](https://issues.redhat.com/browse/OCPBUGS-14258): Add vSphere cluster field. [#12862](https://github.com/openshift/console/pull/12862)
* [OCPBUGS-14195](https://issues.redhat.com/browse/OCPBUGS-14195): Topology UI doesn't recognize Serverless Rust function for proper UI icon [#12860](https://github.com/openshift/console/pull/12860)
* [OCPBUGS-10527](https://issues.redhat.com/browse/OCPBUGS-10527): When there are 2 pipelines displayed in the dropdown menu, selecting one, unchecks the Add Pipeline checkbox [#12658](https://github.com/openshift/console/pull/12658)
* [OCPBUGS-14165](https://issues.redhat.com/browse/OCPBUGS-14165): propagate labels to pipeline resources [#12856](https://github.com/openshift/console/pull/12856)
* [Full changelog](https://github.com/openshift/console/compare/6f58e088705d4c66e10b1d418a115e295fa5ac7b...875f16fa464ed8f2f0b9e86a5652ac085ebd5097)


### [console-operator](https://github.com/openshift/console-operator/tree/997e23f7305b376ad99d6f85b237f1b83d97bf87)

* [OCPBUGS-18192](https://issues.redhat.com/browse/OCPBUGS-18192): Add haproxy timeout annotation to console routes [#787](https://github.com/openshift/console-operator/pull/787)
* [OCPBUGS-16241](https://issues.redhat.com/browse/OCPBUGS-16241): Add missing watch permission for helm-chartrepos-viewers [#778](https://github.com/openshift/console-operator/pull/778)
* [OCPBUGS-14039](https://issues.redhat.com/browse/OCPBUGS-14039): Backport #774 and #763 [#779](https://github.com/openshift/console-operator/pull/779)
* [Full changelog](https://github.com/openshift/console-operator/compare/c5f3b24448f6a7bf5dd5d145008df85e04ec5968...997e23f7305b376ad99d6f85b237f1b83d97bf87)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/dbf24deae8df2b7ccc4c468fddcbb4a19214afa5)

* [OCPBUGS-17728](https://issues.redhat.com/browse/OCPBUGS-17728): Default CNI binaries to RHEL 8 [#117](https://github.com/openshift/containernetworking-plugins/pull/117)
* Add rhel9 binary [#102](https://github.com/openshift/containernetworking-plugins/pull/102)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/4655073266cb14756783bb06378224048f0dd3e3...dbf24deae8df2b7ccc4c468fddcbb4a19214afa5)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/c59255a34811a412bb9c7af4d176d8cdebf04367)

* [OCPBUGS-15973](https://issues.redhat.com/browse/OCPBUGS-15973): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.26 into release-4.13 [#202](https://github.com/openshift/cloud-provider-openstack/pull/202)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/af5c48da935694ed5263a5a163318b52564977df...c59255a34811a412bb9c7af4d176d8cdebf04367)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/b1295cd1a5978faa503c199d59d129e3ecfe2aeb)

* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#195](https://github.com/openshift/csi-driver-manila-operator/pull/195)
* [OCPBUGS-17160](https://issues.redhat.com/browse/OCPBUGS-17160): Don't cache OpenStack client [#196](https://github.com/openshift/csi-driver-manila-operator/pull/196)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/e540ced4cc5deba7ce3309931d797fe9eb8b9573...b1295cd1a5978faa503c199d59d129e3ecfe2aeb)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/f797d453f112aab86f3b7705c00ea871c2351d4a)

* [OCPBUGS-12484](https://issues.redhat.com/browse/OCPBUGS-12484), [OCPBUGS-12527](https://issues.redhat.com/browse/OCPBUGS-12527), [OCPBUGS-14505](https://issues.redhat.com/browse/OCPBUGS-14505): Mitigating CVE-2022-41723 [#140](https://github.com/openshift/csi-driver-shared-resource/pull/140)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/d4685ceb2b13ac6ce60e1b7997a99dea7173649d...f797d453f112aab86f3b7705c00ea871c2351d4a)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/e9d59a2d66491d60d43488e05af7b4b673c722fd)

* [OCPBUGS-16637](https://issues.redhat.com/browse/OCPBUGS-16637): [release-4.13] UPSTREAM: 415: fix: CVE-2022-41723 [#56](https://github.com/openshift/csi-external-attacher/pull/56)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/335d78a21fd46fc7faea74b7716f66f112da8eaf...e9d59a2d66491d60d43488e05af7b4b673c722fd)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/f1fa8099e31e57452b7cf6f2e1ca288ae21ce78f)

* [OCPBUGS-16609](https://issues.redhat.com/browse/OCPBUGS-16609): [release-4.13] UPSTREAM: 880: Bump golang.org/x/net [#67](https://github.com/openshift/csi-external-provisioner/pull/67)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/0dc83f5f1bd118247eaf0f91030c321da9c88aa3...f1fa8099e31e57452b7cf6f2e1ca288ae21ce78f)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/974ac363a4f95b810ebb6f09ba26dedf1c8b8a4a)

* [OCPBUGS-16639](https://issues.redhat.com/browse/OCPBUGS-16639): [release-4.13] UPSTREAM: 268: Bump golang.org/x/net [#143](https://github.com/openshift/csi-external-resizer/pull/143)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/3b2067091212995ce901d65504e794177632c55c...974ac363a4f95b810ebb6f09ba26dedf1c8b8a4a)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/3f52ee74753f7823f102c239d0750784b64b6398)

* [OCPBUGS-16638](https://issues.redhat.com/browse/OCPBUGS-16638): [release-4.13] UPSTREAM: 815: updated go module files [#103](https://github.com/openshift/csi-external-snapshotter/pull/103)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/e7114303c69b82fec51ab65ba15ec7b58be3b12f...3f52ee74753f7823f102c239d0750784b64b6398)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/a888237c9ab43eab0ca992f0b18eff114ea4ade1)

* [OCPBUGS-16600](https://issues.redhat.com/browse/OCPBUGS-16600): [release-4.13] UPSTREAM: 179: fix: CVE-2022-41723 [#46](https://github.com/openshift/csi-livenessprobe/pull/46)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/c785aa6755bf96a4d39b4a804b7a826485965227...a888237c9ab43eab0ca992f0b18eff114ea4ade1)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/5f13d5e6f5b06a99995e0697d83bbdb36efceb46)

* [OCPBUGS-16608](https://issues.redhat.com/browse/OCPBUGS-16608): [release-4.13] UPSTREAM: 284: Bump golang.org/x/net [#48](https://github.com/openshift/csi-node-driver-registrar/pull/48)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/ee27c345e10faa88b1cf6436ac7922a7e5318a18...5f13d5e6f5b06a99995e0697d83bbdb36efceb46)


### [docker-builder](https://github.com/openshift/builder/tree/1fec8a28a78b81aabc2bcbe8ac4843c8b7938230)

* [OCPBUGS-15606](https://issues.redhat.com/browse/OCPBUGS-15606): Add the git-lfs package [#352](https://github.com/openshift/builder/pull/352)
* [OCPBUGS-10002](https://issues.redhat.com/browse/OCPBUGS-10002), [OCPBUGS-8159](https://issues.redhat.com/browse/OCPBUGS-8159), [OCPBUGS-8191](https://issues.redhat.com/browse/OCPBUGS-8191): Mitigate CVE-2023-26054 [#348](https://github.com/openshift/builder/pull/348)
* [Full changelog](https://github.com/openshift/builder/compare/72c106db1fbdec85f02477b86b02ca3dd8a873c6...1fec8a28a78b81aabc2bcbe8ac4843c8b7938230)


### [docker-registry](https://github.com/openshift/image-registry/tree/db5611baf44422aab052b27870291d07dbce45bf)

* [OCPBUGS-18321](https://issues.redhat.com/browse/OCPBUGS-18321): bump docker-distribution [#376](https://github.com/openshift/image-registry/pull/376)
* [Full changelog](https://github.com/openshift/image-registry/compare/f414ba7310818c39af1eaf8239e056cb6f146128...db5611baf44422aab052b27870291d07dbce45bf)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/756e38455b8e08a34510e188673c77503dca3ff1)

* Add rhel9 binary [#71](https://github.com/openshift/egress-router-cni/pull/71)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/879b72bf6305ef394291ed1b4c5eeb3b11917633...756e38455b8e08a34510e188673c77503dca3ff1)


### [etcd](https://github.com/openshift/etcd/tree/3734896c1ab0eb955e49374d30b0cf4d84b9deff)

* [OCPBUGS-18398](https://issues.redhat.com/browse/OCPBUGS-18398): UPSTREAM <carry>: update build images to rhel9 [#212](https://github.com/openshift/etcd/pull/212)
* [OCPBUGS-15859](https://issues.redhat.com/browse/OCPBUGS-15859): [4.13] Rebase openshift/etcd to 3.5.9 [#204](https://github.com/openshift/etcd/pull/204)
* [Full changelog](https://github.com/openshift/etcd/compare/f70da9d78221bc3e6bf8ac14c0c4ecc106f4f57d...3734896c1ab0eb955e49374d30b0cf4d84b9deff)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/efaf4dc692072338d472f086c9f691c71f4a028d)

* [OCPBUGS-12603](https://issues.redhat.com/browse/OCPBUGS-12603): Bump x/net package to v0.10.0 [#32](https://github.com/openshift/cloud-provider-gcp/pull/32)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/9b7ca987656ad184730a6b430dcd846f5bc75db5...efaf4dc692072338d472f086c9f691c71f4a028d)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/eaeccca9082e1c02ad3422ff49e69cc595bd2ec6)

* [OCPBUGS-12604](https://issues.redhat.com/browse/OCPBUGS-12604): Bump x/net package to v0.10.0 [#196](https://github.com/openshift/cluster-api-provider-gcp/pull/196)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/baf133cb8c200c1200363c97442382a9f9dab011...eaeccca9082e1c02ad3422ff49e69cc595bd2ec6)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/c30195c5c3148bf6e00795b49a79954e6d920130)

* [OCPBUGS-16331](https://issues.redhat.com/browse/OCPBUGS-16331): 4.13: UPSTREAM: 1169: Fix CVE-2022-41723 [#38](https://github.com/openshift/gcp-pd-csi-driver/pull/38)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/c5ae6f5d4a62ecc686259cc680514f1ae9f1f733...c30195c5c3148bf6e00795b49a79954e6d920130)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/6534fed3d667750a54fb6750bffc09bee61832e8)

* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#80](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/80)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/d151ef0f5268ccdedf5bb43b649d4cab13b21d68...6534fed3d667750a54fb6750bffc09bee61832e8)


### [haproxy-router](https://github.com/openshift/router/tree/54fb4419e676ed99daa42e726cce5e71442529ac)

* [OCPBUGS-17107](https://issues.redhat.com/browse/OCPBUGS-17107): properly handle weight=0 [#501](https://github.com/openshift/router/pull/501)
* [OCPBUGS-13964](https://issues.redhat.com/browse/OCPBUGS-13964), [OCPBUGS-13967](https://issues.redhat.com/browse/OCPBUGS-13967): Handle mTLS CRLs, and fix accidental CRL duplication [#485](https://github.com/openshift/router/pull/485)
* [Full changelog](https://github.com/openshift/router/compare/e28644631982fb4596e065d3ae85099f0886829d...54fb4419e676ed99daa42e726cce5e71442529ac)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/c7ee51f5bc2ac79fb9ec8dc9f9e8d9ca588b3124)

* [OCPBUGS-18677](https://issues.redhat.com/browse/OCPBUGS-18677): UPSTREAM: <carry>: Force using host go always and use host libriaries [#1689](https://github.com/openshift/kubernetes/pull/1689)
* [OCPBUGS-17187](https://issues.redhat.com/browse/OCPBUGS-17187): Update to Kubernetes 1.26.7 [#1649](https://github.com/openshift/kubernetes/pull/1649)
* [OCPBUGS-17145](https://issues.redhat.com/browse/OCPBUGS-17145): Increase service idle max timeout to 100 minutes [#1657](https://github.com/openshift/kubernetes/pull/1657)
* [OCPBUGS-15866](https://issues.redhat.com/browse/OCPBUGS-15866): remove readiness check for cache exclusion [#1625](https://github.com/openshift/kubernetes/pull/1625)
* [OCPBUGS-15866](https://issues.redhat.com/browse/OCPBUGS-15866): UPSTREAM: <drop>: hack/update-vendor.sh [#1637](https://github.com/openshift/kubernetes/pull/1637)
* [OCPBUGS-15246](https://issues.redhat.com/browse/OCPBUGS-15246): Bump to k8s 1.26.6 [#1610](https://github.com/openshift/kubernetes/pull/1610)
* [OCPBUGS-8738](https://issues.redhat.com/browse/OCPBUGS-8738): bump apiserver-lib-go [#1611](https://github.com/openshift/kubernetes/pull/1611)
* [OCPBUGS-14589](https://issues.redhat.com/browse/OCPBUGS-14589): [release-4.13] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 [#1596](https://github.com/openshift/kubernetes/pull/1596)
* [OCPBUGS-13747](https://issues.redhat.com/browse/OCPBUGS-13747): 4.13: kubelet/cm: disable cpu load balancing on slices when using static cpu manager policy [#1580](https://github.com/openshift/kubernetes/pull/1580)
* [OCPBUGS-14048](https://issues.redhat.com/browse/OCPBUGS-14048): Bump to k8s 1.26.5 [#1586](https://github.com/openshift/kubernetes/pull/1586)
* [Full changelog](https://github.com/openshift/kubernetes/compare/b40493584076fb1ab29f3bed1d05d16cbc5b17f1...c7ee51f5bc2ac79fb9ec8dc9f9e8d9ca588b3124)


### [hypershift](https://github.com/openshift/hypershift/tree/6a3bb3180df640629e70d64d91cca3d070c5aac3)

* [OCPBUGS-17182](https://issues.redhat.com/browse/OCPBUGS-17182): add need-management-kas-access label to olm-collect-profiles pods [#2871](https://github.com/openshift/hypershift/pull/2871)
* [OCPBUGS-16225](https://issues.redhat.com/browse/OCPBUGS-16225): Add missing probes to two services [#2821](https://github.com/openshift/hypershift/pull/2821)
* fix(olm): Use 4.13 catalog source images [#2978](https://github.com/openshift/hypershift/pull/2978)
* Updated secret permissions for openshift-route-controller-manager [#2923](https://github.com/openshift/hypershift/pull/2923)
* [HOSTEDCP-1121](https://issues.redhat.com/browse/HOSTEDCP-1121): Ensure SG reconciliation for aws endpoint [#2885](https://github.com/openshift/hypershift/pull/2885)
* chore(deps): update rhtap references (release-4.13) [#2921](https://github.com/openshift/hypershift/pull/2921)
* Revert "HOSTEDCP-1110: [backport-4.13] Allow HCP Specification to Support ICSP & IDMS" [#2931](https://github.com/openshift/hypershift/pull/2931)
* chore(deps): update rhtap references (release-4.13) [#2904](https://github.com/openshift/hypershift/pull/2904)
* Update RHTAP references (release-4.13) [#2866](https://github.com/openshift/hypershift/pull/2866)
* [HOSTEDCP-1046](https://issues.redhat.com/browse/HOSTEDCP-1046): Add ImageDigestMirrorSet to Config API comment [#2870](https://github.com/openshift/hypershift/pull/2870)
* [HOSTEDCP-1046](https://issues.redhat.com/browse/HOSTEDCP-1046): Add IDMS to the list of valid config manifests [#2863](https://github.com/openshift/hypershift/pull/2863)
* Update RHTAP references (release-4.13) [#2833](https://github.com/openshift/hypershift/pull/2833)
* [HOSTEDCP-1110](https://issues.redhat.com/browse/HOSTEDCP-1110): [backport-4.13] Allow HCP Specification to Support ICSP & IDMS [#2839](https://github.com/openshift/hypershift/pull/2839)
* [OCPBUGS-15743](https://issues.redhat.com/browse/OCPBUGS-15743): Let getMachinesForNodePool return machines ordered by creation Timestamp [#2767](https://github.com/openshift/hypershift/pull/2767)
* 4.13: Add management cluster KAS network policy [#2786](https://github.com/openshift/hypershift/pull/2786)
* Leader election config update. [#2801](https://github.com/openshift/hypershift/pull/2801)
* [OCPBUGS-16160](https://issues.redhat.com/browse/OCPBUGS-16160): fix deletion bug when hostedzone is already deleted [#2813](https://github.com/openshift/hypershift/pull/2813)
* [HOSTEDCP-1061](https://issues.redhat.com/browse/HOSTEDCP-1061): [release-4.13] Implement dedicated request serving nodes for HostedClusters [#2809](https://github.com/openshift/hypershift/pull/2809)
* Update RHTAP references (release-4.13) [#2816](https://github.com/openshift/hypershift/pull/2816)
* [OCPBUGS-16057](https://issues.redhat.com/browse/OCPBUGS-16057): use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort [#2798](https://github.com/openshift/hypershift/pull/2798)
* OCPBUGS-14862 Improve clarity around hypershift operator permissions [#2810](https://github.com/openshift/hypershift/pull/2810)
* [HOSTEDCP-1101](https://issues.redhat.com/browse/HOSTEDCP-1101): Add snyk-secret HO RHTAP scripts [#2799](https://github.com/openshift/hypershift/pull/2799)
* [OCPBUGS-16125](https://issues.redhat.com/browse/OCPBUGS-16125): [release-4.13] Update vendored dependencies [#2797](https://github.com/openshift/hypershift/pull/2797)
* [OCPBUGS-15774](https://issues.redhat.com/browse/OCPBUGS-15774): autoscaling balance similar groups [#2805](https://github.com/openshift/hypershift/pull/2805)
* [OCPBUGS-15965](https://issues.redhat.com/browse/OCPBUGS-15965): Reject VPCE Connections during VPCE Service cleanup [#2789](https://github.com/openshift/hypershift/pull/2789)
* Update RHTAP references (release-4.13) [#2751](https://github.com/openshift/hypershift/pull/2751)
* [OCPBUGS-15171](https://issues.redhat.com/browse/OCPBUGS-15171): Skip AWS resource deletion for 'Unknown' OIDC state [#2701](https://github.com/openshift/hypershift/pull/2701)
* [HOSTEDCP-1008](https://issues.redhat.com/browse/HOSTEDCP-1008): Add NodePoolTransitionSeconds metric [#2758](https://github.com/openshift/hypershift/pull/2758)
* [OCPBUGS-15281](https://issues.redhat.com/browse/OCPBUGS-15281): Check OwningIngressController also in Labels [#2715](https://github.com/openshift/hypershift/pull/2715)
* [HOSTEDCP-1060](https://issues.redhat.com/browse/HOSTEDCP-1060): refactor ignition-server reconcilation and add ignition-server proxy [#2748](https://github.com/openshift/hypershift/pull/2748)
* [HOSTEDCP-1073](https://issues.redhat.com/browse/HOSTEDCP-1073): enforce blocked rollout of HCP [#2735](https://github.com/openshift/hypershift/pull/2735)
* [HOSTEDCP-1003](https://issues.redhat.com/browse/HOSTEDCP-1003): Set AWS conditions only for AWS platform [#2670](https://github.com/openshift/hypershift/pull/2670)
* OCPBUGS-15268 properly handle user CA bundle not existing [#2710](https://github.com/openshift/hypershift/pull/2710)
* [OCPBUGS-15301](https://issues.redhat.com/browse/OCPBUGS-15301): [release-4.13] fix(oauth): Do not proxy IBM Cloud IAM endpoints [#2696](https://github.com/openshift/hypershift/pull/2696)
* [OCPBUGS-14030](https://issues.redhat.com/browse/OCPBUGS-14030): Include default ingress CA in root CA bundle [#2599](https://github.com/openshift/hypershift/pull/2599)
* [OCPBUGS-14490](https://issues.redhat.com/browse/OCPBUGS-14490): Enable HCCO to reconcile over the OperatorHub's disableAllDefaultSources object [#2645](https://github.com/openshift/hypershift/pull/2645)
* [OCPBUGS-14801](https://issues.redhat.com/browse/OCPBUGS-14801): Set `DisableStrictZoneCheck = true` in the AWS Cloud Provider config [#2666](https://github.com/openshift/hypershift/pull/2666)
* [HOSTEDCP-1048](https://issues.redhat.com/browse/HOSTEDCP-1048): Add impersonate feature to the CLI and document HC dump procedure [#2681](https://github.com/openshift/hypershift/pull/2681)
* [OCPBUGS-14872](https://issues.redhat.com/browse/OCPBUGS-14872): Honor global ingress configuration LoadBalancer type on AWS [#2677](https://github.com/openshift/hypershift/pull/2677)
* [OCPBUGS-14436](https://issues.redhat.com/browse/OCPBUGS-14436): Add ClusterUpgradeDuration metric [#2637](https://github.com/openshift/hypershift/pull/2637)
* [HOSTEDCP-1009](https://issues.redhat.com/browse/HOSTEDCP-1009): Allow external-dns image to be set in install cli [#2652](https://github.com/openshift/hypershift/pull/2652)
* Red Hat Trusted App Pipeline update hypershift-operator-release-413 [#2641](https://github.com/openshift/hypershift/pull/2641)
* Red Hat Trusted App Pipeline purge hypershift [#2640](https://github.com/openshift/hypershift/pull/2640)
* [OCPBUGS-13735](https://issues.redhat.com/browse/OCPBUGS-13735): Cluster-api SA can't create events and fix permissions wrongly included [#2610](https://github.com/openshift/hypershift/pull/2610)
* [OCPBUGS-14242](https://issues.redhat.com/browse/OCPBUGS-14242): Remove external-dns --events flag [#2621](https://github.com/openshift/hypershift/pull/2621)
* [OCPBUGS-14155](https://issues.redhat.com/browse/OCPBUGS-14155): Reconcile oauthDeployment annotations even if kubeadmin secret is not found [#2613](https://github.com/openshift/hypershift/pull/2613)
* [OCPBUGS-13399](https://issues.redhat.com/browse/OCPBUGS-13399): Fix errors from HCP controller removeServiceCAAnnotationAndSecret() [#2552](https://github.com/openshift/hypershift/pull/2552)
* [HOSTEDCP-1010](https://issues.redhat.com/browse/HOSTEDCP-1010): Set ETCD Storage Size as immutable field and equalised the default size among both api versions [#2611](https://github.com/openshift/hypershift/pull/2611)
* [HOSTEDCP-947](https://issues.redhat.com/browse/HOSTEDCP-947): Increases default etcd PV size to 8Gi [#2569](https://github.com/openshift/hypershift/pull/2569)
* [HOSTEDCP-926](https://issues.redhat.com/browse/HOSTEDCP-926): Send metric when HO/CPO decide to skip cloud resource deletion [#2594](https://github.com/openshift/hypershift/pull/2594)
* [HOSTEDCP-975](https://issues.redhat.com/browse/HOSTEDCP-975): Backport nodepools metrics [#2601](https://github.com/openshift/hypershift/pull/2601)
* Red Hat Trusted App Pipeline update hypershift [#2603](https://github.com/openshift/hypershift/pull/2603)
* [Full changelog](https://github.com/openshift/hypershift/compare/3f61d88560660a04c860f2cb5fb355b8fb9142b8...6a3bb3180df640629e70d64d91cca3d070c5aac3)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/59edd923386b36f2cad99150b7fd11fb7bbb1688)

* [OCPBUGS-12612](https://issues.redhat.com/browse/OCPBUGS-12612): Update x/net to v0.7.0 [#52](https://github.com/openshift/cloud-provider-ibm/pull/52)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/1640c42033631b3e8847c9867772666e898dfd01...59edd923386b36f2cad99150b7fd11fb7bbb1688)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/42b5c256657da2de184c3e5ec9c619131ed1cd57)

* [OCPBUGS-16378](https://issues.redhat.com/browse/OCPBUGS-16378): 4.13: UPSTREAM: 157: K8S and grpc package upgrade [#40](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/40)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/66dcaf9a0591ec321828cec5ee24f0a4df0e5080...42b5c256657da2de184c3e5ec9c619131ed1cd57)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/ce92007db2dfd6cd8b9b9c7cfcfaeec801e76097)

* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#73](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/73)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/e83df2f32ae88c84c15a12741a970607b20228ec...ce92007db2dfd6cd8b9b9c7cfcfaeec801e76097)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/96ff048184ce4005bd8a4ae6ef1146ba0fa230ac)

* [OCPBUGS-14073](https://issues.redhat.com/browse/OCPBUGS-14073): UPSTREAM: 20: Bump (golang.org/x/net): to address CVE-2022-41723 [#24](https://github.com/openshift/ibm-vpc-node-label-updater/pull/24)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/283a614ee34e83afa065338dee25d4ee202c8aeb...96ff048184ce4005bd8a4ae6ef1146ba0fa230ac)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/bb253a0c607f7d1f8139ffd401bd6c9c432090d1)

* [OCPBUGS-12616](https://issues.redhat.com/browse/OCPBUGS-12616): Bump x/net to v0.7.0 [#23](https://github.com/openshift/machine-api-provider-ibmcloud/pull/23)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/c75f7e3e7a3b7525aa2d540f86fd7477e7800608...bb253a0c607f7d1f8139ffd401bd6c9c432090d1)


### [insights-operator](https://github.com/openshift/insights-operator/tree/f87e4120ed55da397a323ddbc7fe1a5edb0f088c)

* [OCPBUGS-14773](https://issues.redhat.com/browse/OCPBUGS-14773): extend configmap gatherer to get gateway-mode-config (#788) (#791) [#788](https://github.com/openshift/insights-operator/pull/788)
* [release-4.13 ]OCPBUGS-15031: fix the config serialization & add test (#794) (#796) [#794](https://github.com/openshift/insights-operator/pull/794)
* [OCPBUGS-14318](https://issues.redhat.com/browse/OCPBUGS-14318): gather PDBs only from openshift namespaces (#786) [#786](https://github.com/openshift/insights-operator/pull/786)
* [Full changelog](https://github.com/openshift/insights-operator/compare/0babf2b1fa2d68eae51a578f40fcdfb722fe485a...f87e4120ed55da397a323ddbc7fe1a5edb0f088c)


### [ironic](https://github.com/openshift/ironic-image/tree/fc1cca95711797767336878bfb9e2e4b9801ecfa)

* [OCPBUGS-17837](https://issues.redhat.com/browse/OCPBUGS-17837): Fix PROVISIONING_MACS unbound [#393](https://github.com/openshift/ironic-image/pull/393)
* [OCPBUGS-17158](https://issues.redhat.com/browse/OCPBUGS-17158): [4.13] Update packages with latest bugfix [#388](https://github.com/openshift/ironic-image/pull/388)
* [OCPBUGS-17551](https://issues.redhat.com/browse/OCPBUGS-17551): Expand regex for fcos/okd packages list [#390](https://github.com/openshift/ironic-image/pull/390)
* Bug OCPBUGS-15235: Incrementing Ironic versions to include backported SNMPv3 FIPS fix. [#383](https://github.com/openshift/ironic-image/pull/383)
* [OCPBUGS-13587](https://issues.redhat.com/browse/OCPBUGS-13587): Add python-flask dependency [#372](https://github.com/openshift/ironic-image/pull/372)
* [OCPBUGS-14135](https://issues.redhat.com/browse/OCPBUGS-14135): ironic.conf.j2: Bump min_command_interval to 30 on SCOS [#378](https://github.com/openshift/ironic-image/pull/378)
* Bug OCPBUGS-13334: Bump ironic version to include fix to OCPBUGS-13334. [#366](https://github.com/openshift/ironic-image/pull/366)
* [Full changelog](https://github.com/openshift/ironic-image/compare/798f79f2d37fe93502ac0e78f24830a9c4ffdcd9...fc1cca95711797767336878bfb9e2e4b9801ecfa)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/c4141b13ec85e9642f60bcb55b50055c691f0b6b)

* Switch to udevadm command install instead of package [OKD] [#83](https://github.com/openshift/ironic-agent-image/pull/83)
* "Bug OCPBUGS-15777: Switch to udevadm command install instead of package" [#81](https://github.com/openshift/ironic-agent-image/pull/81)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/ee5bee32747e1053fc6add76fcdd98f5816b27ba...c4141b13ec85e9642f60bcb55b50055c691f0b6b)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/ce2917794de5723248fe3302c8833f89fb54265a)

* [OCPBUGS-15734](https://issues.redhat.com/browse/OCPBUGS-15734): Binary should be compiled on rhel9 [#91](https://github.com/openshift/ironic-rhcos-downloader/pull/91)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/2ba6060dc968488a495fbcd1250cfb186e4ada78...ce2917794de5723248fe3302c8833f89fb54265a)


### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/4536724a8644fda91a74b23901ba1789eaff7179)

* [OCPBUGS-14315](https://issues.redhat.com/browse/OCPBUGS-14315): Flush addresses on provisioning interface with global scope only [#36](https://github.com/openshift/ironic-static-ip-manager/pull/36)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/f524f2c9451ff0808beb54bece660640f58e8a3d...4536724a8644fda91a74b23901ba1789eaff7179)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/12a5bcfe56550165a550230d016f3a954b18ddbe)

* [OCPBUGS-15977](https://issues.redhat.com/browse/OCPBUGS-15977): Dockerfile: keep a RHEL-8 CNI shim binary in the default /opt/cni/bin dir [#558](https://github.com/openshift/sdn/pull/558)
* [OCPBUGS-15977](https://issues.redhat.com/browse/OCPBUGS-15977): Dockerfile changes to build both rhel8 and rhel9 binaries [#557](https://github.com/openshift/sdn/pull/557)
* [OCPBUGS-14278](https://issues.redhat.com/browse/OCPBUGS-14278): fix possible concurrent map read/write [#550](https://github.com/openshift/sdn/pull/550)
* [Full changelog](https://github.com/openshift/sdn/compare/d56dc6a393cf250704d2c4914c09533525caafba...12a5bcfe56550165a550230d016f3a954b18ddbe)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/f1205e66bf34421046288bc74aed0d69b8434206)

* [OCPBUGS-12513](https://issues.redhat.com/browse/OCPBUGS-12513): go.mod: update golang.org/x/net to v0.7.0 [#68](https://github.com/openshift/kube-rbac-proxy/pull/68)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/11b1439d48a47a408ae7e2dd851989f7b7b4f595...f1205e66bf34421046288bc74aed0d69b8434206)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/36754b7b90928e26811e1c5ea13e7d0bd85709de)

* Bug OCPBUGS-16340: Fix np retry [#738](https://github.com/openshift/kuryr-kubernetes/pull/738)
* [OCPBUGS-15457](https://issues.redhat.com/browse/OCPBUGS-15457): Remove unneeded grpcio dependencies from RPM [#735](https://github.com/openshift/kuryr-kubernetes/pull/735)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/3055dbe26667d6cf2d1f452a7dd97ca2113b606d...36754b7b90928e26811e1c5ea13e7d0bd85709de)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/370fdaa43c6964e2af6abbde2bf37789de509bec)

* [OCPBUGS-12626](https://issues.redhat.com/browse/OCPBUGS-12626): Update golang.org/x/net dependency [#1148](https://github.com/openshift/machine-api-operator/pull/1148)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/a23baf767a80a2a7e467be1c8ef9b32d40c66825...370fdaa43c6964e2af6abbde2bf37789de509bec)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/aeb7d050748a23e0474f98a447d490e3b72e0ae6)

* [OCPBUGS-16218](https://issues.redhat.com/browse/OCPBUGS-16218): Prevent NM from unsetting the hostname [#3805](https://github.com/openshift/machine-config-operator/pull/3805)
* [OCPBUGS-17997](https://issues.redhat.com/browse/OCPBUGS-17997): SSHkeys fails to write on upgrade to 4.13.rc3 [#3879](https://github.com/openshift/machine-config-operator/pull/3879)
* [OCPBUGS-18076](https://issues.redhat.com/browse/OCPBUGS-18076): daemon: create /etc/systemd/network directory on node [#3888](https://github.com/openshift/machine-config-operator/pull/3888)
* [OCPBUGS-17769](https://issues.redhat.com/browse/OCPBUGS-17769): Agent-based install process the container machine-config-controller will be oom [#3868](https://github.com/openshift/machine-config-operator/pull/3868)
* [OKD-174](https://issues.redhat.com/browse/OKD-174): Dockerfile: OKD: Reenable extensions image on SCOS [#3845](https://github.com/openshift/machine-config-operator/pull/3845)
* [OCPBUGS-17430](https://issues.redhat.com/browse/OCPBUGS-17430): The machine-config-controller pod restart in SNO+1 causing daemonsets to restart [#3841](https://github.com/openshift/machine-config-operator/pull/3841)
* [OCPBUGS-17163](https://issues.redhat.com/browse/OCPBUGS-17163): daemon: Always replace binary [#3833](https://github.com/openshift/machine-config-operator/pull/3833)
* [OCPBUGS-16888](https://issues.redhat.com/browse/OCPBUGS-16888): daemon: Make binary writing idempotent [#3826](https://github.com/openshift/machine-config-operator/pull/3826)
* [OCPBUGS-16888](https://issues.redhat.com/browse/OCPBUGS-16888): daemon: no need to reexec when target and source rhel version is same [#3824](https://github.com/openshift/machine-config-operator/pull/3824)
* [OCPBUGS-16622](https://issues.redhat.com/browse/OCPBUGS-16622): daemon: Copy matching binary to host, re-exec with it [#3812](https://github.com/openshift/machine-config-operator/pull/3812)
* [OCPNODE-1717](https://issues.redhat.com/browse/OCPNODE-1717): Update config node spec while explicitly updating the cgroups mode [#3793](https://github.com/openshift/machine-config-operator/pull/3793)
* 4.13: Revert rhel9 binaries builds [#3802](https://github.com/openshift/machine-config-operator/pull/3802)
* [OCPBUGS-14459](https://issues.redhat.com/browse/OCPBUGS-14459): daemon: Remove noisy log message [#3723](https://github.com/openshift/machine-config-operator/pull/3723)
* [OCPBUGS-15580](https://issues.redhat.com/browse/OCPBUGS-15580): 4.13: Dockerfile: update rhel7 nmstate pin [#3764](https://github.com/openshift/machine-config-operator/pull/3764)
* [OCPBUGS-15463](https://issues.redhat.com/browse/OCPBUGS-15463): Minor fix to support protectKernelDefaults field in Kubelet Config [#3757](https://github.com/openshift/machine-config-operator/pull/3757)
* 4.13: Dockerfile: use proper rhel9 image [#3771](https://github.com/openshift/machine-config-operator/pull/3771)
* 4.13: use rhel9 builder for daemon binary [#3760](https://github.com/openshift/machine-config-operator/pull/3760)
* [OCPBUGS-13311](https://issues.redhat.com/browse/OCPBUGS-13311): daemon: write certs in firstboot-complete path [#3702](https://github.com/openshift/machine-config-operator/pull/3702)
* [OCPBUGS-13404](https://issues.redhat.com/browse/OCPBUGS-13404), [OCPBUGS-14298](https://issues.redhat.com/browse/OCPBUGS-14298): Dockerfile: pin to nmstate-2.2.9-6.rhaos4.13.el8 [#3716](https://github.com/openshift/machine-config-operator/pull/3716)
* [OCPBUGS-14850](https://issues.redhat.com/browse/OCPBUGS-14850): Allow userfaultfd syscall to be used by unprivileged users [#3743](https://github.com/openshift/machine-config-operator/pull/3743)
* [OCPBUGS-13974](https://issues.redhat.com/browse/OCPBUGS-13974): MCO-496: Support ignition versions 3.3 + 3.4 but keep version 3.2 as default [#3714](https://github.com/openshift/machine-config-operator/pull/3714)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/1ae3805822dfee3263bfd553d49fd36c648fbd12...aeb7d050748a23e0474f98a447d490e3b72e0ae6)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/d9011619fe9640c17b612dd34063ae535ba7a159)

* [OCPBUGS-14250](https://issues.redhat.com/browse/OCPBUGS-14250): Watch networkData Secrets for changes [#95](https://github.com/openshift/image-customization-controller/pull/95)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/87651668b314426960ea4974429f3b0ed16c3f31...d9011619fe9640c17b612dd34063ae535ba7a159)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/f76d674edb07d7006f04748338c1013499c0e7ab)

* [OCPBUGS-13709](https://issues.redhat.com/browse/OCPBUGS-13709): Bump golang.org/x/net from 0.0.0-20211209124913-491a49abca63 to 0.7.0 [#68](https://github.com/openshift/multus-admission-controller/pull/68)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/d6d52a7a7df2243056c5db83cc10885ac2ca775b...f76d674edb07d7006f04748338c1013499c0e7ab)


### [multus-cni](https://github.com/openshift/multus-cni/tree/bb616eff56bf0b71ad85009360231f4686a6e4a9)

* Add rhel9 binary for multus [#169](https://github.com/openshift/multus-cni/pull/169)
* [OCPBUGS-8398](https://issues.redhat.com/browse/OCPBUGS-8398): Multus entrypoint should regenerate kubeconfig if secret changes [backport 4.13] [#154](https://github.com/openshift/multus-cni/pull/154)
* [OCPBUGS-13759](https://issues.redhat.com/browse/OCPBUGS-13759): Bump golang.org/x/net from 0.1.0 to 0.7.0 (#1039) [#161](https://github.com/openshift/multus-cni/pull/161)
* [Full changelog](https://github.com/openshift/multus-cni/compare/5d283fa3cf7f7e599c919ed7a37604f09df33062...bb616eff56bf0b71ad85009360231f4686a6e4a9)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/7b99c194d5d2b092a64dc7b8673ef96a399cc7a8)

* [OCPBUGS-12641](https://issues.redhat.com/browse/OCPBUGS-12641): CVE-2022-41723: Update vendors to fix dependabot alerts [#28](https://github.com/openshift/multus-networkpolicy/pull/28)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/98a0bad1071074f0c04c35ff209f0333c5d7274b...7b99c194d5d2b092a64dc7b8673ef96a399cc7a8)


### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/ca3bbec5c75ebcd6814bdd74856b27db755c9fa3)

* Add rhel9 binary [#37](https://github.com/openshift/route-override-cni/pull/37)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/6644ac7ba8481b2c7b035390d20d28ba4b55c5ab...ca3bbec5c75ebcd6814bdd74856b27db755c9fa3)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/7ea40205ffef4c3e047153f4655444245c2792d3)

* [OCPBUGS-4417](https://issues.redhat.com/browse/OCPBUGS-4417): Denormalize IP name before checking if pod is alive [Backport 4.13] [#168](https://github.com/openshift/whereabouts-cni/pull/168)
* [OCPBUGS-15956](https://issues.redhat.com/browse/OCPBUGS-15956): Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#138](https://github.com/openshift/whereabouts-cni/pull/138)
* [Bug 16002](https://bugzilla.redhat.com/show_bug.cgi?id=16002): Change default binary to RHEL8 image [#144](https://github.com/openshift/whereabouts-cni/pull/144)
* Restores RHEL specific binary build in dockerfile and updates to rhel9/8 [#139](https://github.com/openshift/whereabouts-cni/pull/139)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/9f36752562fc784c9b5bf3fb4d592aae19ea31ad...7ea40205ffef4c3e047153f4655444245c2792d3)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/84bda2afb2ab260253b77d5d282df773cc6b3438)

* Add rhel9 binary [#56](https://github.com/openshift/bond-cni/pull/56)
* [Full changelog](https://github.com/openshift/bond-cni/compare/937b1e6a35d6b533a417b0c313cc0e498fffdd3b...84bda2afb2ab260253b77d5d282df773cc6b3438)


### [network-tools](https://github.com/openshift/network-tools/tree/073feda14fbd894c4238d693afa38a06392f2360)

* Dockerfile: move to RHEL9 base image [#83](https://github.com/openshift/network-tools/pull/83)
* [Full changelog](https://github.com/openshift/network-tools/compare/b4098c67659217e36ac7077229b25bbe2c3e5f38...073feda14fbd894c4238d693afa38a06392f2360)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/44af5a3a021fd158c2e44d9951ad59a3d474cdf3)

* [OCPBUGS-16805](https://issues.redhat.com/browse/OCPBUGS-16805): Updating golang-github-openshift-oauth-proxy images to be consistent with ART [#261](https://github.com/openshift/oauth-proxy/pull/261)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/03e5b13b8b7087dd70abfd70efb4c5b92f800a4f...44af5a3a021fd158c2e44d9951ad59a3d474cdf3)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/07d39c8320141472b2c90a16a8d383c6f0be9ea3)

* [OCPBUGS-18556](https://issues.redhat.com/browse/OCPBUGS-18556): operator catalogs from oc-mirror fail to deploy because of invalid caches (#691) [#691](https://github.com/openshift/oc-mirror/pull/691)
* [OCPBUGS-18106](https://issues.redhat.com/browse/OCPBUGS-18106): manual cherrypick (#684) [#684](https://github.com/openshift/oc-mirror/pull/684)
* [OCPBUGS-17998](https://issues.redhat.com/browse/OCPBUGS-17998): fix: ICSP with incorrect mirror path (#685) [#685](https://github.com/openshift/oc-mirror/pull/685)
* [OCPBUGS-17453](https://issues.redhat.com/browse/OCPBUGS-17453): Fix " OCI index found, but accept header does not support OCI indexes (#677) [#677](https://github.com/openshift/oc-mirror/pull/677)
* [OCPBUGS-16372](https://issues.redhat.com/browse/OCPBUGS-16372): A variety of changes needed for correct operation with multi… (#661) [#661](https://github.com/openshift/oc-mirror/pull/661)
* [OCPBUGS-13871](https://issues.redhat.com/browse/OCPBUGS-13871): fix: changes on help info content (#654) [#654](https://github.com/openshift/oc-mirror/pull/654)
* Fix OCPBUGS-11840: ParseImageReference supports cases where both tag and digest are present in a ref (#637) [#637](https://github.com/openshift/oc-mirror/pull/637)
* Removes Ross and adds Jeremy in the OWNER file (#645) [#645](https://github.com/openshift/oc-mirror/pull/645)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/aee430b90e7e3920d9798669cafaf70294314d44...07d39c8320141472b2c90a16a8d383c6f0be9ea3)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/385057e57752b7b4f21ef32d7a7993d266a591eb)

* [OCPBUGS-11091](https://issues.redhat.com/browse/OCPBUGS-11091): mount build.Spec.Source.ConfigMaps for custom builder images [#257](https://github.com/openshift/openshift-controller-manager/pull/257)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/87de83867ac51730f506138ee790a56ca21d9fc9...385057e57752b7b4f21ef32d7a7993d266a591eb)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/90ee04bcfbfc0eb6173bc9fbea8c9f87ec1dea7d)

* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#125](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/125)
* [OCPBUGS-17071](https://issues.redhat.com/browse/OCPBUGS-17071): Fix SCC admission failure race during initial deployment [#124](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/124)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/14fcca54f20d18045e382cc0699f97e4a1e760ac...90ee04bcfbfc0eb6173bc9fbea8c9f87ec1dea7d)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/9957ffd6be55ffadf08c107191fa459e03af5f26)

* [OCPBUGS-18305](https://issues.redhat.com/browse/OCPBUGS-18305), [RHIBMCS-151](https://issues.redhat.com/browse/RHIBMCS-151): Copied csv listing backport [#548](https://github.com/openshift/operator-framework-olm/pull/548)
* [OCPBUGS-17791](https://issues.redhat.com/browse/OCPBUGS-17791): opm: always serve pprof endpoints, improve server allocations (#1129) [#540](https://github.com/openshift/operator-framework-olm/pull/540)
* Introduce DOWNSTREAM_OWNERS file [#538](https://github.com/openshift/operator-framework-olm/pull/538)
* Allow cpb to be statically compiled / exempt from FIPS compliance [#519](https://github.com/openshift/operator-framework-olm/pull/519)
* [OCPBUGS-15589](https://issues.redhat.com/browse/OCPBUGS-15589): fix dynamic conversion webhook [#499](https://github.com/openshift/operator-framework-olm/pull/499)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/ce46f5b97e4838c4508f6dc471cabc1199a8f0b9...9957ffd6be55ffadf08c107191fa459e03af5f26)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/f5687f3ed2ee12889d0122304492f0e752e35b8f)

* [OCPBUGS-18502](https://issues.redhat.com/browse/OCPBUGS-18502): remove a race condition [#532](https://github.com/operator-framework/operator-marketplace/pull/532)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/d569c22c518fc931ff48f66fb38064ddd976729f...f5687f3ed2ee12889d0122304492f0e752e35b8f)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/aca579dfc9aa1921849f9573f5179fcb2bf89f28)

* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#120](https://github.com/openshift/ovirt-csi-driver-operator/pull/120)
* [OCPBUGS-14653](https://issues.redhat.com/browse/OCPBUGS-14653): set upgrade condition of operator to false [#118](https://github.com/openshift/ovirt-csi-driver-operator/pull/118)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/3e49f77c34922a7e2ce675825cb5ff3bca3a6dbd...aca579dfc9aa1921849f9573f5179fcb2bf89f28)


### [ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9](https://github.com/openshift/ovn-kubernetes/tree/9547107f8f6758e5b4183fb233c575159c33ac0c)

* [OCPBUGS-18585](https://issues.redhat.com/browse/OCPBUGS-18585): Fix OVN SNATing on GR by enabling gateway_mtu on rtoe port of GR [#1855](https://github.com/openshift/ovn-kubernetes/pull/1855)
* [OCPBUGS-17123](https://issues.redhat.com/browse/OCPBUGS-17123): Remove stale egressip status entry [#1793](https://github.com/openshift/ovn-kubernetes/pull/1793)
* [OCPBUGS-18057](https://issues.redhat.com/browse/OCPBUGS-18057): [release-4.13] Create egress firewall with one db transaction [#1834](https://github.com/openshift/ovn-kubernetes/pull/1834)
* [OCPBUGS-17910](https://issues.redhat.com/browse/OCPBUGS-17910): Emit node events only when retry failure [#1825](https://github.com/openshift/ovn-kubernetes/pull/1825)
* [OCPBUGS-17503](https://issues.redhat.com/browse/OCPBUGS-17503): [release-4.13] libovsdb: give monitor setup time to process than normal transactions [#1807](https://github.com/openshift/ovn-kubernetes/pull/1807)
* [OCPBUGS-13175](https://issues.redhat.com/browse/OCPBUGS-13175): Check the status of a pod before trying to get its ip [#1724](https://github.com/openshift/ovn-kubernetes/pull/1724)
* [OCPBUGS-15496](https://issues.redhat.com/browse/OCPBUGS-15496): Fix default GW IPs retrieval [#1738](https://github.com/openshift/ovn-kubernetes/pull/1738)
* [OCPBUGS-17001](https://issues.redhat.com/browse/OCPBUGS-17001): Inactivity probe for ovndb connection [#1796](https://github.com/openshift/ovn-kubernetes/pull/1796)
* [OCPBUGS-17120](https://issues.redhat.com/browse/OCPBUGS-17120): Bump OVN to 23.06-23.06.0-51 [#1790](https://github.com/openshift/ovn-kubernetes/pull/1790)
* [OCPBUGS-16121](https://issues.redhat.com/browse/OCPBUGS-16121): [release-4.13]: Delete address sets after acls that reference them [#1762](https://github.com/openshift/ovn-kubernetes/pull/1762)
* [OCPBUGS-15368](https://issues.redhat.com/browse/OCPBUGS-15368): [release-4.13]: initial pods are not wired for hybrid overlay [#1721](https://github.com/openshift/ovn-kubernetes/pull/1721)
* [OCPBUGS-15651](https://issues.redhat.com/browse/OCPBUGS-15651): Improve syncNodes to remove stale data [#1731](https://github.com/openshift/ovn-kubernetes/pull/1731)
* [OCPBUGS-15586](https://issues.redhat.com/browse/OCPBUGS-15586): [release-4.13]: Allow hostNetwork ingress for network policies with empty namespace selector [#1745](https://github.com/openshift/ovn-kubernetes/pull/1745)
* Dockerfile: build both RHEL8 and RHEL9 shims [#1748](https://github.com/openshift/ovn-kubernetes/pull/1748)
* [OCPBUGS-15585](https://issues.redhat.com/browse/OCPBUGS-15585): [release-4.13] Fix egressFirewall create error handling [#1733](https://github.com/openshift/ovn-kubernetes/pull/1733)
* [OCPBUGS-14492](https://issues.redhat.com/browse/OCPBUGS-14492): Backport OVN component templates for NodePort services. [#1709](https://github.com/openshift/ovn-kubernetes/pull/1709)
* [OCPBUGS-15608](https://issues.redhat.com/browse/OCPBUGS-15608): Nuke old .rhel9 Dockerfiles [#1711](https://github.com/openshift/ovn-kubernetes/pull/1711)
* [OCPBUGS-13745](https://issues.redhat.com/browse/OCPBUGS-13745): [release-4.13] ovnkube-master pod failed to reconnect to ovn db due to ssl expire [#1675](https://github.com/openshift/ovn-kubernetes/pull/1675)
* [OCPBUGS-15372](https://issues.redhat.com/browse/OCPBUGS-15372): [release-4.13] Fix network policy to work with long namespace names [#1722](https://github.com/openshift/ovn-kubernetes/pull/1722)
* [OCPBUGS-14979](https://issues.redhat.com/browse/OCPBUGS-14979): Validate port before deleting conntrack flow [#1712](https://github.com/openshift/ovn-kubernetes/pull/1712)
* [OCPBUGS-15140](https://issues.redhat.com/browse/OCPBUGS-15140): Fix stale SNAT entries for completed pods [#1715](https://github.com/openshift/ovn-kubernetes/pull/1715)
* [OCPBUGS-14482](https://issues.redhat.com/browse/OCPBUGS-14482): Dockerfiles: sync RHEL9 dockerfiles to regular unused ones [#1695](https://github.com/openshift/ovn-kubernetes/pull/1695)
* [OCPBUGS-12864](https://issues.redhat.com/browse/OCPBUGS-12864): Drop packets were not properly SNATed [#1662](https://github.com/openshift/ovn-kubernetes/pull/1662)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/db0dbadc1a409f40345e921e991bd3e22c55490a...9547107f8f6758e5b4183fb233c575159c33ac0c)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/26d166e8f7d1f33eff1efd7ccab92a27a188f431)

* Updated golang.org/x/net/html dependency. [#44](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/44)
* Openshiftrelease 4.13 [#41](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/41)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/e0e89f1b778799e45b3d5095a9275e2802de376a...26d166e8f7d1f33eff1efd7ccab92a27a188f431)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/2d8e82b25c39fd0617632ae32fec070b7c5f8f21)

* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#34](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/34)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/b40850568a7c9de0f5493147d7126a12af889b45...2d8e82b25c39fd0617632ae32fec070b7c5f8f21)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/95a117826360e23e092be5bbee2da8dbcf44f17a)

* [OCPBUGS-12672](https://issues.redhat.com/browse/OCPBUGS-12672): update golang.org/x/net [#237](https://github.com/openshift/prometheus-operator/pull/237)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/9cd6788ed2cb30982c8b9d6ec8f8c7e72b30d7df...95a117826360e23e092be5bbee2da8dbcf44f17a)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/5409afd036445411969ed074e681c73f2df36909)

* [OCPBUGS-14274](https://issues.redhat.com/browse/OCPBUGS-14274): Upgrade golang.org/x/net to v0.10.0 to fix the CVE [#127](https://github.com/openshift/node_exporter/pull/127)
* [Full changelog](https://github.com/openshift/node_exporter/compare/10dc380d4ce996d2557b10991b3f7623a4551e21...5409afd036445411969ed074e681c73f2df36909)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/6667a6cbf9a87331fcc4407375118c0bb884c925)

* [OCPBUGS-14276](https://issues.redhat.com/browse/OCPBUGS-14276): Bump k8s to 1.26.5 [#26](https://github.com/openshift/route-controller-manager/pull/26)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/d7a8e22db412b6fabb7028ca0da8de8f3d9ac3c3...6667a6cbf9a87331fcc4407375118c0bb884c925)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/5984aac13df6c2f4440c67a1a14d32958bce9ec3)

* [OCPBUGS-16806](https://issues.redhat.com/browse/OCPBUGS-16806): Updating ose-service-ca-operator images to be consistent with ART [#214](https://github.com/openshift/service-ca-operator/pull/214)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/1b89fdce3fcccecdc5fdb705fe674cd4bfc58a2a...5984aac13df6c2f4440c67a1a14d32958bce9ec3)


### [telemeter](https://github.com/openshift/telemeter/tree/be81b43429dcbf70f6ca19a9360ba455c97a1639)

* [OCPBUGS-14418](https://issues.redhat.com/browse/OCPBUGS-14418): Update golang.org/x/net to lastest version [#463](https://github.com/openshift/telemeter/pull/463)
* [Full changelog](https://github.com/openshift/telemeter/compare/ee1ba4699b82ecb2033f886af12b9e2e451d2296...be81b43429dcbf70f6ca19a9360ba455c97a1639)


### [tests](https://github.com/openshift/origin/tree/62852a2a543c7e12a2bca8d7393b1e84eab700b9)

* [OCPBUGS-16241](https://issues.redhat.com/browse/OCPBUGS-16241): Update permission to incl. watch for helmchartrepositories for console users [#28054](https://github.com/openshift/origin/pull/28054)
* [OCPBUGS-16164](https://issues.redhat.com/browse/OCPBUGS-16164): allow cluster-config-operator to manage featuregate upgrade block [#28050](https://github.com/openshift/origin/pull/28050)
* [OCPBUGS-15892](https://issues.redhat.com/browse/OCPBUGS-15892): remove references to registry.centos.org [#28031](https://github.com/openshift/origin/pull/28031)
* [OCPBUGS-15746](https://issues.redhat.com/browse/OCPBUGS-15746): Skip CCM upgradable condition on AlibabaCloud [#28025](https://github.com/openshift/origin/pull/28025)
* [OCPBUGS-7762](https://issues.redhat.com/browse/OCPBUGS-7762): Bump with latest openshift/kubernetes at 4.13 [#27973](https://github.com/openshift/origin/pull/27973)
* [OCPBUGS-5029](https://issues.redhat.com/browse/OCPBUGS-5029): [release-4.13] OpenStack: Restore in-tree cinder provisioner tests [#27827](https://github.com/openshift/origin/pull/27827)
* [OCPBUGS-14342](https://issues.redhat.com/browse/OCPBUGS-14342): Increase timeout in sysctl allowlist test [#27956](https://github.com/openshift/origin/pull/27956)
* [OCPBUGS-13840](https://issues.redhat.com/browse/OCPBUGS-13840): Add missing error check in sysctl allowlist test [#27929](https://github.com/openshift/origin/pull/27929)
* [OCPBUGS-14127](https://issues.redhat.com/browse/OCPBUGS-14127): Move from registry.centos.org to quay.io [#27948](https://github.com/openshift/origin/pull/27948)
* [OCPBUGS-12700](https://issues.redhat.com/browse/OCPBUGS-12700): update-etcd-scaling-test [#27892](https://github.com/openshift/origin/pull/27892)
* [Full changelog](https://github.com/openshift/origin/compare/893ae5755c21bfabe8042f6e885dda7d80671b5c...62852a2a543c7e12a2bca8d7393b1e84eab700b9)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/0fe0c5c37d06893359f584e4b6f62d371703e9d1)

* [OCPBUGS-17103](https://issues.redhat.com/browse/OCPBUGS-17103): update x/net dependency to 0.7.0 [#46](https://github.com/openshift/cloud-provider-vsphere/pull/46)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/e9a65389e8c45d79dea428c0610b7fdd0b6f5be6...0fe0c5c37d06893359f584e4b6f62d371703e9d1)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/9079a510ebbe7bc0df6a06aae43b6dbada3adb32)

* [OCPBUGS-16398](https://issues.redhat.com/browse/OCPBUGS-16398): Rebase v3.0.2 [#83](https://github.com/openshift/vmware-vsphere-csi-driver/pull/83)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/5e0efc3911345f62ef6fa6ae7334d01fbf4de4bd...9079a510ebbe7bc0df6a06aae43b6dbada3adb32)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/ca160452421fe2ad3da0fd0451fcda765186f658)

* [OCPBUGS-18332](https://issues.redhat.com/browse/OCPBUGS-18332): disable controller hostNetwork [#166](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/166)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/ab111cf6a6f39b81ace6990dc56eb9ca14560614...ca160452421fe2ad3da0fd0451fcda765186f658)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/64f62bff177c6f2df6f106eacecc05e49e9a9828)

* [OCPBUGS-14571](https://issues.redhat.com/browse/OCPBUGS-14571): Check all storage classes including CSI storageclasses [#120](https://github.com/openshift/vsphere-problem-detector/pull/120)
* [OCPBUGS-14098](https://issues.redhat.com/browse/OCPBUGS-14098): In UPI clusters VSphere platform could be nil [#118](https://github.com/openshift/vsphere-problem-detector/pull/118)
* [OCPBUGS-14085](https://issues.redhat.com/browse/OCPBUGS-14085): Log vcenter version information [#117](https://github.com/openshift/vsphere-problem-detector/pull/117)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/e10dc55232d1bf9f11251f63abcb72fe75bedd75...64f62bff177c6f2df6f106eacecc05e49e9a9828)