# 4.14.37

Created: 2024-09-16 17:48:10 +0000 UTC

Image Digest: `sha256:14e6ba3975e6c73b659fa55af25084b20ab38a543772ca70e184b903db73092b`


## Changes from 4.14.24

### Components

* Kubernetes upgraded from 1.27.13 to 1.27.16
* Red Hat Enterprise Linux CoreOS upgraded from 414.92.202404301839-0 to 414.92.202409041930-0


### Rebuilt images without code change

* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [5d64ad00](https://github.com/openshift/assisted-installer/commit/5d64ad00cc9a2f045895dfccc43fe8d81027e745) `sha256:454fc9bb27d066fcb0f663b97a5f6cc90e09a9afde6a6b1397f05e01ae9fabcb`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [5d64ad00](https://github.com/openshift/assisted-installer/commit/5d64ad00cc9a2f045895dfccc43fe8d81027e745) `sha256:4fd45a8906c485ceeb56967327f70d0e9a128e37b48b57ad8d2d4bf5db29f938`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [ad853769](https://github.com/openshift/agent-installer-utils/commit/ad8537697818870b53b6262041f0dfa78a3b41c2) `sha256:b594c2175f09d6a58188f5e924deebafee76683bbd17422352cb87a3b32cebc2`
* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [8ba0b37a](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/8ba0b37a45510404a842d6dbd84d40a18008e81d) `sha256:8a84cd05e78388cb32d6fab30a14a3736e8f23cff9c9e8e438ed6c448fec026c`
* [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver) git [3dc363d3](https://github.com/openshift/alibaba-cloud-csi-driver/commit/3dc363d364c43c1fb03e223147e25d9057273428) `sha256:d507cf4dde410e911959651f97a0eacda1a2af332c81eb6f72785311a7218d27`
* [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [8853e6ef](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/8853e6ef4966018b96f9d8bfbf99df3a984bb454) `sha256:50981da83a3fbb8585ee7137ab2851e1324f21b8fc18429149cd09adc1de83c2`
* [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba) git [27f105d3](https://github.com/openshift/cluster-api-provider-alibaba/commit/27f105d3b722e19f76b72588d36eeae9dac0a444) `sha256:86f2a7ebd426d1bc3547ae2305115705937b95165b1ca0aa61f96edc522b396f`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [a3c0e6b7](https://github.com/openshift/apiserver-network-proxy/commit/a3c0e6b7016017e26603f9990bce2891374f3ca1) `sha256:8413a927a0dfd1417a76c6ce8a8158ae21a36dad076261465668f3a41ffd0446`
* [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator) git [609879c3](https://github.com/openshift/aws-ebs-csi-driver-operator/commit/609879c3f1b9a65936e385f798398a2d1673aacd) `sha256:7280ddff2170bfbadf95b385f386f3a2c5f728632e21c35a1e2437971066d1b8`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [e292817c](https://github.com/openshift/machine-api-provider-aws/commit/e292817c27d83d6cba27def4461a9795bd3a68a7) `sha256:0feae1d0bb3be4ee95905aebf6cdfd418912e3757d3533ebca233c5a67b9d0c2`
* [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator) git [91893576](https://github.com/openshift/azure-disk-csi-driver-operator/commit/918935767350f9f330b9d6a9c3ee03e9869e7828) `sha256:6fecab0d7605cfb0bc32adc76a75ec610cec705c16f7f1d9ba211fb79875c472`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [fb20cdac](https://github.com/openshift/cluster-api-provider-baremetal/commit/fb20cdac93ab9647e9c9cabafb45c7811789b477) `sha256:11c01f06a2867ff772bd75204be772b6ebff4a990f12b69b5c97de71bccad0d2`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [9203d4d5](https://github.com/openshift/cluster-authentication-operator/commit/9203d4d5a83c86d4c51050a2c58e5ffe6e8d137e) `sha256:908a790492f66597b462fe8d9309bab83e5dc3a9ff7c03fe0bf998526b20628d`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [9d87281f](https://github.com/openshift/kubernetes-autoscaler/commit/9d87281f73fc26a5fac17c50dcf63c2de17f619a) `sha256:e3bab8c77c859a96049dc55f1aabec8fb2d85f05a76f2c80594e751f2b7d4f7a`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [93fba13f](https://github.com/openshift/cluster-bootstrap/commit/93fba13f576831ba0953190663ab26aaf5766984) `sha256:4ca39bc6c27abf145a9be328ad329d506b55926aa594e0191ba6fbcb33dc463f`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [ae83c553](https://github.com/openshift/cluster-api/commit/ae83c5533706d539dc492229eebd67533468e48b) `sha256:c82feb7990a9bc9ae5718c8ea3bc67da71050909e12ec29634ab63ea9e2bf1da`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [91fa980a](https://github.com/openshift/cluster-config-operator/commit/91fa980a5be1d3c91786ff41a0a9394adb75671f) `sha256:97f1d2ced4788f0c6c0707f3a52fd25f75fb9708d3a43a85bfafcf272234dd6d`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [d4a11625](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/d4a1162514ecbf248b04e6e8625d17bc2b775ccd) `sha256:b593f26c9d4a5d156474f35b4a24631b3a2d0e607afdd5726c24ff06a77d057f`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [b287d08b](https://github.com/openshift/cluster-api-operator/commit/b287d08b3dabe6b3b67b87a8a284f19ed12a165e) `sha256:ee1c1e67b8df1882a9015b96039f6f00aa3184753bed80c7fcc448553545b97f`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [4e059638](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/4e059638c2cbf003551ee699106dc024760eece3) `sha256:2d4d587e68cd7053d8ae67232ca18c6830caf26e2809218744ddf507ef5f2505`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [33f630dc](https://github.com/openshift/cluster-kube-scheduler-operator/commit/33f630dc1f890ca59c5e57fb5b6cc24a3f22a1d4) `sha256:b5e0205cd7fdb943d695d8dab9e36f3eada1f17ac7b51c082202dc6b2a29015a`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [9cd9922a](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/9cd9922a42a64fe058718f10e3b4123b943bb55f) `sha256:aeaa6e37fc81ed83bc40d911159608fe267f0d53bdf61192888240be0e4c373c`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [711b4f6e](https://github.com/openshift/cluster-machine-approver/commit/711b4f6eeb038f8c7bd88db3ea51ebad350a116d) `sha256:eed8435b25a5ea03ca829b573b94211bf021c9109e9592857aaa1ec49d98ed3b`
* [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [0dbbb613](https://github.com/openshift/cluster-olm-operator/commit/0dbbb6132ced379602040731ff889eebb4202e73) `sha256:1dd311d9806b1d46c47383659d2f435a5f47190df155793ff4f402db7777784c`
* [cluster-platform-operators-manager](https://github.com/openshift/platform-operators) git [08fb27e7](https://github.com/openshift/platform-operators/commit/08fb27e72e32ea0a06ab02b3b746114148d96c25) `sha256:7b115ce31ac50c2ef29fedf73b7e505c61764b18caa765b560e409c0cba59468`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [219f6f6f](https://github.com/openshift/cluster-policy-controller/commit/219f6f6f072d867201d4923d39fd8bcaecbe7c59) `sha256:80f0655a2af0bf779eebf21a23c73d856cf354103266c7529f7385a8bcaa8a20`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [61a34659](https://github.com/openshift/cluster-samples-operator/commit/61a34659e4499188ab6f790e3a07aba8be9e9bdd) `sha256:3768a056d0cc62928fbb3583e474ffba590596e4deb9eddc2eac636b0ef67eea`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [e0c26a08](https://github.com/openshift/cluster-update-keys/commit/e0c26a084139906e866d9eec89f05d2d3211b334) `sha256:e35e18dae33f9e5992c9b54d0bfbc0b24e754f1a7c003ccee1b4488c0f9cabef`
* [cluster-version-operator](https://github.com/openshift/cluster-version-operator) git [af210dc6](https://github.com/openshift/cluster-version-operator/commit/af210dc66d38bce5793155aac8bfb6220a7085d9) `sha256:dc3debfd952d0758d709a873dc5072f39d6f38299d153816eed8752a6bf6ea9f`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [716a0c33](https://github.com/openshift/configmap-reload/commit/716a0c33bb693127fba3b3512622710785a59e8e) `sha256:050ddd463bf282bf3689b6da98838e2dd65e85040265c82aea50c4f261ee49fd`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [bab8a4f7](https://github.com/openshift/containernetworking-plugins/commit/bab8a4f7a868f47f87171c2ef5c1e0b9ae388407) `sha256:ddba97a22e5572c083a1f04d548e9c6d1431eda17441582c45f6c626ef825fa5`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [697083a8](https://github.com/openshift/cloud-provider-openstack/commit/697083a8e5e1f68978458a0a00c426e094665271) `sha256:c59557131583b8ba46fde388a3910544b2038ee5a6016bcbae492b4efc38d3e6`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [d93a218f](https://github.com/openshift/csi-driver-manila-operator/commit/d93a218ff323960eb1dea529f0173f069ccfab42) `sha256:9a44bdaf9a79786e6fa300cad636d36cb674f54c940b7b1cfea85ae4b79dd3b9`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [e1dd4537](https://github.com/openshift/csi-driver-nfs/commit/e1dd45373456cf8e47a58d6764212317fb2f8a97) `sha256:5e6e3ab51dc2a6ee46794885678f300c485c27f9859b79649c971d4a96a1b1f9`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [9232c1ff](https://github.com/openshift/csi-driver-shared-resource/commit/9232c1ff48df333dadc9f7dc275649866e55ced0) `sha256:b483e7d1dc6901a22c611449fe5912bd1b8053c4d004bc3259dc22802e782c91`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [c273cd52](https://github.com/openshift/csi-driver-shared-resource-operator/commit/c273cd52b791e69da41ac23fafb6d926c0530276) `sha256:8544028f89cef8f05d47684cdc8be2dba877994673cd619049d66f2af3643295`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [9232c1ff](https://github.com/openshift/csi-driver-shared-resource/commit/9232c1ff48df333dadc9f7dc275649866e55ced0) `sha256:452ae58bb7839d6c0b67b8a0d4711c9a736685ea47fc1e37ad350f8462a0ea90`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [06e8ce0d](https://github.com/openshift/csi-external-attacher/commit/06e8ce0d36f7c23f0906327cd66ec6bd15165366) `sha256:abb50ef9f2674ed92bab341b61c45e3e99253dfa362a2f8b3a818a40790ab23c`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [59a701a4](https://github.com/openshift/csi-external-resizer/commit/59a701a4c8cd3105e272b12afdb1e62e411b2772) `sha256:a8a389eaf4861b9b9076833866fbde39b6dac0c5cba9420941763eaaef0c3e52`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [a6834536](https://github.com/openshift/csi-external-snapshotter/commit/a6834536936b16dcd9ee81a8753a2ef6dc208541) `sha256:2c335b41723a104ab8a5100159850ad4c7bd4f47ffb44082ccb572cfb3cfba27`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [a9bcbde1](https://github.com/openshift/csi-livenessprobe/commit/a9bcbde134a17d3335f68a49aaad4befa8d7cc08) `sha256:f4e82176de3dd6a1abeb8e88de337b8aebde7f7f1c70da5616ce5004c1fddbee`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [9dcaa7f5](https://github.com/openshift/csi-node-driver-registrar/commit/9dcaa7f5b7573e7ef9dbec1439abc32171003799) `sha256:6b049fdc599e8d046f7db72a08ae98420322ae9bd1375b51e12e0c85f86e41c4`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [a6834536](https://github.com/openshift/csi-external-snapshotter/commit/a6834536936b16dcd9ee81a8753a2ef6dc208541) `sha256:d911be33e5b46cef81341b7bbc662e13dcf7f52ea45e57b73e5ebeee7e98b70a`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [a6834536](https://github.com/openshift/csi-external-snapshotter/commit/a6834536936b16dcd9ee81a8753a2ef6dc208541) `sha256:225563d0993bb141ace74a659b84531be8b73f5ccbb2c39eee3d865d0f6960d4`
* [docker-registry](https://github.com/openshift/image-registry) git [f03c2404](https://github.com/openshift/image-registry/commit/f03c24040cea924f846aca8b4e02bf802159a238) `sha256:6eb7500a3e1d14234562e395762eb368123882dd8418cef5cb3df2a54f7c8dd7`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [cafed17b](https://github.com/openshift/driver-toolkit/commit/cafed17b0c2b4cf8d8310304888787ed7adf7474) `sha256:0f2c1a3a6c23f27a9aed6c66a7360ad6ab7295d3b83eb2b8642600a8c54337f8`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [09e96a91](https://github.com/openshift/cloud-provider-gcp/commit/09e96a91c4c95e4f8a3d77bae81875c570dd9e3c) `sha256:df8186c3f18760aef04d2ca947b7be1f5e26e9ab82273cd402b0573ba1abd090`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [d99fb31a](https://github.com/openshift/cluster-api-provider-gcp/commit/d99fb31aa7280f6b5da00880a64b4774600817a2) `sha256:9a3946a442dd7d3085a15dc7be3d0d8c2182db4512e4618b1f2de067f7552cf5`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [a676e6b6](https://github.com/openshift/machine-api-provider-gcp/commit/a676e6b6a8eefee8b921b47674c6fb9c0b1b5125) `sha256:9834bc5b8b84585709371ec8f9dbc96278637ab6725a2bf198af93e5811f88b4`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [8a626fe5](https://github.com/openshift/gcp-pd-csi-driver/commit/8a626fe5354a7cb28e31034dc8afe9c00d4b5a03) `sha256:1a6c6dd15064194986bd26b88aba77f3a464bfbf57f06c6fa723246ccd8ae1ef`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [95d55a04](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/95d55a043a60b584a9fe28d37825761282305840) `sha256:bce090d8e9ca3a9559c5c431a27c9615d0be199ca9a7f42ac7750f62cbabdb12`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [446871ff](https://github.com/openshift/cloud-provider-ibm/commit/446871ff7626c4199836929f5bc777aba2a5f001) `sha256:98fc7cd9ed8b32dfb29f3c6fb5d126be9429568afd5d20e1b03749fc58d30753`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [004ecde5](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/004ecde5e7e5394abdb9fe62b3063fd20300bb9c) `sha256:6768e5158da3f477451b44ef45f2db7480b15b97193c9b788e6af853e84b5b98`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [c28b2232](https://github.com/openshift/machine-api-provider-ibmcloud/commit/c28b2232ab1c0dcd951a23b324506eaab510389c) `sha256:cbd0b53a126721a43af0cf228df2bc502b62a09658b7c59900aa9b5d6ecf94dd`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [7b56c306](https://github.com/openshift/ironic-rhcos-downloader/commit/7b56c30661e39b212fc632e8e184c70b14dcf3a2) `sha256:a4772f6fdcea1b6d524087e82caffc6ca70e1295f3f68120106ebb54734c93fd`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [c038d5a4](https://github.com/openshift/ironic-static-ip-manager/commit/c038d5a43e7355099d8f9845a8b14052437b787e) `sha256:655a2b8f1e6cb80edb81ecaa79f66be169282e0cba35132b058221eb694f3cd1`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [801a912b](https://github.com/openshift/k8s-prometheus-adapter/commit/801a912b3a60d7e840fb1ff38b5ca992f47327fd) `sha256:46cc3b658880f160b5e5bd7f3fb51360998c82cd9ceaa413b600ccb8611b5137`
* [kube-proxy](https://github.com/openshift/sdn) git [1a9befcb](https://github.com/openshift/sdn/commit/1a9befcb519d0b6c6a0907d514493f1d88aacf45) `sha256:3863fa7dcd481c4f7c81f0aa90a6aaa68eb3b3fc4ffa14e55f6072a358bcf52e`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [1a646b98](https://github.com/openshift/kube-rbac-proxy/commit/1a646b98d8864e53accb726531d86f084ab13977) `sha256:7cb7a07aeaa4fbe45e528818dadaee589f3c0fb01644bb8187aba6b565bc90a0`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [db0c5499](https://github.com/openshift/kube-state-metrics/commit/db0c54994a6aad9155a94513eaa3480c1812f45e) `sha256:808c7e0e892fdfa93c7e40a91d422997e16ab5a0a32faa3ce025174d90942a57`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [8558e14a](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/8558e14a116804168506d06e96eac5a79913a6eb) `sha256:b55360a77894febdbec519b0e579bda6e70a2bdd2b8ad1e94b87ab560dd67e63`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [7d96f56d](https://github.com/openshift/cloud-provider-kubevirt/commit/7d96f56d4bbc8449fdddbdbc630d9337097f0030) `sha256:0caa3067c7d8ca34ca30c3bcf695066a68d331f9c9336c5eb158d2a29adad7d7`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [48fafc4a](https://github.com/openshift/kubevirt-csi-driver/commit/48fafc4a9edc202c5ff674b5f631568b4d62f7f5) `sha256:70512c910e4aec149ee5085c1a34c2eede3171b3167afc4b4caf23661490ea76`
* [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [8926a294](https://github.com/openshift/kuryr-kubernetes/commit/8926a294348d3791040748774b0ac0892b968494) `sha256:1d69b118ab5c25298e3fa774292647f9b4df4a567b282ddab619b7433c327b09`
* [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [8926a294](https://github.com/openshift/kuryr-kubernetes/commit/8926a294348d3791040748774b0ac0892b968494) `sha256:5a3b6ce9c26dff957fb2677ced1794d8e48e06e16e513d70a060242a4f8539c6`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [34dfccba](https://github.com/openshift/cluster-api-provider-libvirt/commit/34dfccba84a23b871d4f29dcec55929c11696e91) `sha256:3f349a8be29c217b389553699aa75b26aafbd6a83bade2179d6fe5378667aaa2`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [2a6627ba](https://github.com/openshift/image-customization-controller/commit/2a6627bafcbb00437ab97308fe1d7df9039104ad) `sha256:e8f4de05891cb8a4df5b8985a2a15f9893463e03c154df72c55d25f2efe5ef2d`
* machine-os-content `sha256:514995f55831d625f19cc5d188eb29419a0a49c98273e301c40e67e74dc33470`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [d3a4a6c3](https://github.com/openshift/machine-os-images/commit/d3a4a6c3b46e26fa260de80465b45879311e23c4) `sha256:7823117ee6ac74a0fe012e70cabe06ebce9ef1ecd91f02a54a166a63952dacd5`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [6fb20810](https://github.com/openshift/monitoring-plugin/commit/6fb208108720b9a35782f7d4f6738010ec97ba85) `sha256:78ebad5f78c34540edf40fbbdfaa3efe846b4dd77b26d1964909584815c86586`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [5e74b0fa](https://github.com/openshift/multus-admission-controller/commit/5e74b0fa273076f4a73db00dd0081032f0325405) `sha256:d18741dcda81568a1c6b4508f8f0d4a4fcc2947f1c6abcf76abbd921102206b1`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [cd6eae10](https://github.com/openshift/multus-networkpolicy/commit/cd6eae10a368d23b94530cdc2a2c2f2356d8cc02) `sha256:30af804c0e2c9d6a7a3470477eb86a52c192c80a401ce4898d9c7a8a7f402900`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [078aee5c](https://github.com/openshift/route-override-cni/commit/078aee5c466ffc79126a34b85953534c6674f28c) `sha256:b10821f5adfeadce3ba9bdbfe5e8de22eb0860d6439af867c2f8318119c20f0e`
* [must-gather](https://github.com/openshift/must-gather) git [833e1de9](https://github.com/openshift/must-gather/commit/833e1de991e2319439fb48550c86d2d44d412501) `sha256:2ae072de711dec29d9a8568e8e31f4fccdd64512737ee5baff636d7da5a1f4f3`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [29f61f6b](https://github.com/openshift/bond-cni/commit/29f61f6b05d958c40e7213937064f26a63a8e6d9) `sha256:8b645350f02c0edd2b2e23dc2b9459a622f1dfe960a9cfb55519c8dec7e24bba`
* [network-tools](https://github.com/openshift/network-tools) git [e79d8173](https://github.com/openshift/network-tools/commit/e79d8173c5628065da85425bc7e4cb1d94f3c919) `sha256:42e7ccc74a314182dc274d886d7942e77c7013839e665a646a8b2fa743b73750`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [bc568865](https://github.com/openshift/cloud-provider-nutanix/commit/bc568865fe7d5cd598c89e7f189de9e07150f29a) `sha256:1287a68c6919708be887c480c110822d5d1d5483decee650c7dd02f179ea84c5`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [a4a2f270](https://github.com/openshift/oauth-proxy/commit/a4a2f270a57af830508e8cef52d4c8d4f4dfba76) `sha256:105307b602ac74649f868e1ea0aab7b8621ea1ecfd58ceca669dcf32f538798e`
* [oauth-server](https://github.com/openshift/oauth-server) git [35f4739f](https://github.com/openshift/oauth-server/commit/35f4739f342a5838fe6ceaf7a459c78f3777166d) `sha256:c22dec50f2cad85ab26dea95b246324cac20e95bf67bcf74d06144b84251227e`
* [oc-mirror](https://github.com/openshift/oc-mirror) git [a0733c17](https://github.com/openshift/oc-mirror/commit/a0733c17322f96d14f9158604fe74f1bfecc4a53) `sha256:11992befd56e4e4d061948caf27b16db38f7d818158a538833edb80cbdb00573`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [a333cb0b](https://github.com/openshift/operator-framework-catalogd/commit/a333cb0b558abf8d9f8da0eccd5618d767629050) `sha256:1d83612563cc877ced4b4e262a9dcb832b0f2cc08457604251256c77874ba522`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [fb6fb278](https://github.com/openshift/operator-framework-operator-controller/commit/fb6fb278d987faacb4da17b96a109da261fbb962) `sha256:2a0e0841734373599a62ddd3a4f408e1c6c66e9825eb0a42b39e152c4f627b02`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [dff4b0f4](https://github.com/openshift/openshift-state-metrics/commit/dff4b0f47e639fe2382e8c4c17208fccaacfcbdf) `sha256:82554e959ac8047ef0a93c31282bd68dde1a8f6c663372e08c7ea8d038453ad8`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [697083a8](https://github.com/openshift/cloud-provider-openstack/commit/697083a8e5e1f68978458a0a00c426e094665271) `sha256:66233c016b78599dc6a26864000fd14aec58748f91444ea9a131f2f1d6d859eb`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [697083a8](https://github.com/openshift/cloud-provider-openstack/commit/697083a8e5e1f68978458a0a00c426e094665271) `sha256:5e3eb54bbe47c2fdea0c376b4877cab7e9eb260553a84cd5bb979cceca5017c2`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [f21b470f](https://github.com/openshift/ovirt-csi-driver/commit/f21b470f4927f97eca93a0a390cffccd7d724043) `sha256:0c20d679680c18423f310563633a3c382dfad6a5eb6e6933f9c75569c5170cb5`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [2fa33aa7](https://github.com/openshift/ovirt-csi-driver-operator/commit/2fa33aa7f05da8640a8695372364f2367febd12a) `sha256:4cacd9c34a143bc0bca7f66e17989a8ace04c6fafd9fe8d41b11359128ca9519`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [5d708631](https://github.com/openshift/cluster-api-provider-ovirt/commit/5d708631fca37aff0ede7d7f8fc9ba76c7fcee47) `sha256:1354e446ebd2598852f1b2e76bbbb23bf22cef6403fc9d36dd390eef85abd129`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [7436369a](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/7436369afce33811e543b13fcbea8d1e1ff65502) `sha256:6d68a77662d068a16ca19f905152551cc6b7242c22e1255860d7fffdacdabb9f`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [32c1028e](https://github.com/openshift/cloud-provider-powervs/commit/32c1028ecf58851eb1270f47351a4423ba081c3b) `sha256:6266ffccee637e8f72210a771ae289058eb5037bb3e05b4b53ad5c51eab3078a`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [1a957dae](https://github.com/openshift/machine-api-provider-powervs/commit/1a957dae3a7c9c36752b4869854a90e6b88eaf7e) `sha256:1cdd1814dc6edc9b7d6f1b1d102995b823a3150b94eab14063c0e35e72f39c2d`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [af40ed09](https://github.com/openshift/prom-label-proxy/commit/af40ed09f69fab6c4bf054436f537a3e569d5f02) `sha256:1bfc97902fb043350ae68dc06bbcf0c416af647c8ba424b0b1e4832b8fa8e719`
* [prometheus](https://github.com/openshift/prometheus) git [b7c61bcb](https://github.com/openshift/prometheus/commit/b7c61bcba6ff69bbb91d1a4b86ba7191653776cd) `sha256:044daf61b3df0592dfa8115c664410301d3ffe4bdd1d4b53cb6d9faffba8ddae`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [e3725166](https://github.com/openshift/prometheus-alertmanager/commit/e3725166cf8ef228f1672b00d063c488b69687aa) `sha256:f742c204b5345f11254ec6e78903913a8f90370c04916594a6e2df02478e222e`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [a4b845a7](https://github.com/openshift/prometheus-operator/commit/a4b845a7ae4e1ffb62eae963406481f1c3456bfe) `sha256:e8af3aa1cc7b97d0e53075ed6fb15035a60fcb284b15b9f48d23c22b60001284`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [5ee0a9d9](https://github.com/openshift/node_exporter/commit/5ee0a9d957a04756ba76623a8bbc12be9949109f) `sha256:e8d7455046b58dcf817c68cc9eec449d2095b62258c6ab64f7303f133f847702`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [a4b845a7](https://github.com/openshift/prometheus-operator/commit/a4b845a7ae4e1ffb62eae963406481f1c3456bfe) `sha256:f30cb467e1541241b8ae177941f60d0298728ddfc694f1f1f6957ff072487bf8`
* [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [a4b845a7](https://github.com/openshift/prometheus-operator/commit/a4b845a7ae4e1ffb62eae963406481f1c3456bfe) `sha256:8409297012b22358d163aaa617f35750568b05c45dc5bd57bfa398e2a56d71d7`
* rhel-coreos `sha256:d8bfae1166e8556d3f4e83fb934fef8b41107afccb66f748cd0b6eab806031f3`
* rhel-coreos-extensions `sha256:1e49b4c76c255f76365b8695cca2f1afca25ca3f3fbd2bf3ed5fad57affaebb7`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [1a5e72f4](https://github.com/openshift/route-controller-manager/commit/1a5e72f41b21f5ebcd6f9dd8227d92ad1fffbb1e) `sha256:f0d1681049d7ab768447ab83e69654dce8a3ee20ae465e1507a70831a9936fd3`
* [sdn](https://github.com/openshift/sdn) git [1a9befcb](https://github.com/openshift/sdn/commit/1a9befcb519d0b6c6a0907d514493f1d88aacf45) `sha256:55226a14fab1c834b0f8fca7db7f8d7388c593330e55b99dcb7c0aec72b3b6c9`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [3c3f82f7](https://github.com/openshift/service-ca-operator/commit/3c3f82f7112ee4b5656e5c554f9887acdf881175) `sha256:c4a9b68e8d0a63f38958ce58943f91af02da63fc6d9517f483775815d87238ee`
* [thanos](https://github.com/openshift/thanos) git [a2671250](https://github.com/openshift/thanos/commit/a26712509e3f9c511926ca9d8bba3e3ea8e95ada) `sha256:f5f89dcf205d6f3feacfb7843d28ffb3de895d45a998d9b9672ec123abcb6f5a`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [b04567f7](https://github.com/openshift/cloud-provider-vsphere/commit/b04567f77273f6c338ece9fda29c0a65297130d5) `sha256:d8fe47470e08dc90867922d8924c7df5afcaa11041d3b58cde438e21c527e880`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [5d5105f9](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/5d5105f93e02ba0c4c07890b3db630b11d839abf) `sha256:b5cfa99798b7e72cc2cbd0fc865fc8d50d40c85f72cd8ccfa51e74e6f4626284`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/60d5e86b6b7b9fbf8e7e4d1ca12e5b59a32d18c4)

* [OCPBUGS-34641](https://issues.redhat.com/browse/OCPBUGS-34641): Invalid Pull-Secret when using password which contains a colon character (#6416) [#6416](https://github.com/openshift/assisted-service/pull/6416)
* [OCPBUGS-31631](https://issues.redhat.com/browse/OCPBUGS-31631): Deploy dual stack with IPv6 on top of bond/vlan fails (#6322) [#6322](https://github.com/openshift/assisted-service/pull/6322)
* [Full changelog](https://github.com/openshift/assisted-service/compare/5a1b7ea3776fddff93f66dae7963ac5dda3ab524...60d5e86b6b7b9fbf8e7e4d1ca12e5b59a32d18c4)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/7020f88445f88bdddd4901f2ae33bd684127c3a5)

* [OCPBUGS-33404](https://issues.redhat.com/browse/OCPBUGS-33404): Make removable disks eligible (#725) [#725](https://github.com/openshift/assisted-installer-agent/pull/725)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/1ef82f3a3397c0f5b3864c37bf8dcba4235e84fc...7020f88445f88bdddd4901f2ae33bd684127c3a5)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/9a7820e81baa6ba8885b47a71416026036d53d79)

* [OCPBUGS-38786](https://issues.redhat.com/browse/OCPBUGS-38786): Ensure that addresses are added in network device index order [#93](https://github.com/openshift/cloud-provider-aws/pull/93)
* [OCPBUGS-32066](https://issues.redhat.com/browse/OCPBUGS-32066): update for CVE-2023-45288 [release-4.14] [#83](https://github.com/openshift/cloud-provider-aws/pull/83)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/607e2dde6cde137b5c14d5f7687847f6df4cae94...9a7820e81baa6ba8885b47a71416026036d53d79)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/4efe12cbfebbb27fe78b07da4f7e7f264a9812fb)

* [OCPBUGS-34856](https://issues.redhat.com/browse/OCPBUGS-34856): UPSTREAM: <carry>: Fix instance PrivateDNSName when domain-name is set in dhcpOpts [#516](https://github.com/openshift/cluster-api-provider-aws/pull/516)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/54a95bd18a84153e23430476fc218035255e3a0e...4efe12cbfebbb27fe78b07da4f7e7f264a9812fb)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/4622deecace538b375edc782a19cb5da977ae458)

* [OCPBUGS-35123](https://issues.redhat.com/browse/OCPBUGS-35123): CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#271](https://github.com/openshift/aws-ebs-csi-driver/pull/271)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/918bb4e9106bbd7498d0d5b3b44ec6df392789b5...4622deecace538b375edc782a19cb5da977ae458)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/2c864ca0f09e038c4b0c82215ef1a6f60fb54e63)

* [OCPBUGS-32884](https://issues.redhat.com/browse/OCPBUGS-32884): Upgrade go-jose module to 2.6.3 [#189](https://github.com/openshift/aws-pod-identity-webhook/pull/189)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/ad7aa0ae2c85eca233fbe1afc35e64452a880a1c...2c864ca0f09e038c4b0c82215ef1a6f60fb54e63)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/d9800e1edcbe9bab5a7ca628cf05fc54cb46f5a9)

* [OCPBUGS-23829](https://issues.redhat.com/browse/OCPBUGS-23829): Bump otelgrpc to v0.49.0 [#124](https://github.com/openshift/cloud-provider-azure/pull/124)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/f0e7cbbcf37fb44c34a192ecffaf40a6639c8bea...d9800e1edcbe9bab5a7ca628cf05fc54cb46f5a9)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/8c2203f9d13e91a3a7e4825067b01a9f7fe0fd4f)

* [OCPBUGS-36023](https://issues.redhat.com/browse/OCPBUGS-36023): Update go-retryablehttp to v0.7.7 [#313](https://github.com/openshift/cluster-api-provider-azure/pull/313)
* [OCPBUGS-35125](https://issues.redhat.com/browse/OCPBUGS-35125): Bump x/crypto to v0.24.0 [#307](https://github.com/openshift/cluster-api-provider-azure/pull/307)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/7ad2773c64f0757ea92a18594f0aad59c6a55cde...8c2203f9d13e91a3a7e4825067b01a9f7fe0fd4f)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/6d3558a3b5ae9d383988495cc64dc05b4bba0382)

* [OCPBUGS-35126](https://issues.redhat.com/browse/OCPBUGS-35126): CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#82](https://github.com/openshift/azure-disk-csi-driver/pull/82)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/b19eec11854e89a3e45f27455ce54d19c25f375b...6d3558a3b5ae9d383988495cc64dc05b4bba0382)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/f28a507244d4629404365c89b422f04b9d8d7943)

* [OCPBUGS-33039](https://issues.redhat.com/browse/OCPBUGS-33039): Rebase v1.29.5 for OCP 4.14 [#66](https://github.com/openshift/azure-file-csi-driver/pull/66)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/f401f53684e5aa1e94036612770ca7ee10f55b24...f28a507244d4629404365c89b422f04b9d8d7943)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/4469d80589595dd5d05f0f0f296505800e3ad527)

* [OCPBUGS-33039](https://issues.redhat.com/browse/OCPBUGS-33039): add token audience for Azure File [#104](https://github.com/openshift/azure-file-csi-driver-operator/pull/104)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/354c55d8a8035218eff47c1b64b80c6352ac9537...4469d80589595dd5d05f0f0f296505800e3ad527)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/d526284e26f37f36f9d5297faa801ea117d81f48)

* [CFE-1050](https://issues.redhat.com/browse/CFE-1050): Added support of capacity reservation group [#109](https://github.com/openshift/machine-api-provider-azure/pull/109)
* [OCPBUGS-35133](https://issues.redhat.com/browse/OCPBUGS-35133): Bump x/crypto to v0.24.0 [#112](https://github.com/openshift/machine-api-provider-azure/pull/112)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/8666a367160c23175f97c5df9db7c1844405865e...d526284e26f37f36f9d5297faa801ea117d81f48)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/bcb88d949151223362ecefc12f4e90566599e0e7)

* [OCPBUGS-32894](https://issues.redhat.com/browse/OCPBUGS-32894): Upgrade go-jose module to 2.6.3 [#19](https://github.com/openshift/azure-workload-identity/pull/19)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/43a15be6ce6a5154be812db3dd55e871b529eefb...bcb88d949151223362ecefc12f4e90566599e0e7)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/a8c141497478741629645e70b1dc7019992d4778)

* [OCPBUGS-39411](https://issues.redhat.com/browse/OCPBUGS-39411): Added yq to ci image [#8943](https://github.com/openshift/installer/pull/8943)
* [OCPBUGS-36180](https://issues.redhat.com/browse/OCPBUGS-36180): baremetal IPI without provisioning network failing on provisioning-interface.service [#8712](https://github.com/openshift/installer/pull/8712)
* [OCPBUGS-36089](https://issues.redhat.com/browse/OCPBUGS-36089): [release-4.14] bump go-retryablehttp for CVE fix [#8658](https://github.com/openshift/installer/pull/8658)
* [OCPBUGS-37183](https://issues.redhat.com/browse/OCPBUGS-37183): ic: fix typo in warning message [#8771](https://github.com/openshift/installer/pull/8771)
* [OCPBUGS-37068](https://issues.redhat.com/browse/OCPBUGS-37068): update RHCOS 4.14 bootimage metadata to 414.92.202407091253-0 [#8748](https://github.com/openshift/installer/pull/8748)
* [OCPBUGS-36748](https://issues.redhat.com/browse/OCPBUGS-36748): Add yq-v4 to the upi-installer image for CI [#8684](https://github.com/openshift/installer/pull/8684)
* [OCPBUGS-35827](https://issues.redhat.com/browse/OCPBUGS-35827): If host is offline or disconnected don't check ver [#8634](https://github.com/openshift/installer/pull/8634)
* [OCPBUGS-35826](https://issues.redhat.com/browse/OCPBUGS-35826): [release-4.14] bump github.com/containers/image for CVE fix [#8633](https://github.com/openshift/installer/pull/8633)
* [OCPBUGS-35485](https://issues.redhat.com/browse/OCPBUGS-35485): [release-4.14] aws: terraform: add spot instance support for masters [#8605](https://github.com/openshift/installer/pull/8605)
* [OCPBUGS-34024](https://issues.redhat.com/browse/OCPBUGS-34024): go.mod: bump aws-sdk-go for ca-west-1 support [#8440](https://github.com/openshift/installer/pull/8440)
* [OCPBUGS-33401](https://issues.redhat.com/browse/OCPBUGS-33401): PowerVS: Add composite_instance to listServiceInstances [#8479](https://github.com/openshift/installer/pull/8479)
* [CORS-2951](https://issues.redhat.com/browse/CORS-2951): Add deprecation notice for OpenShiftSDN for 4.14 users [#8518](https://github.com/openshift/installer/pull/8518)
* [OCPBUGS-28611](https://issues.redhat.com/browse/OCPBUGS-28611): remove retired serial NCv2 from azure tested instance type list on x86 [#7960](https://github.com/openshift/installer/pull/7960)
* [OCPBUGS-27394](https://issues.redhat.com/browse/OCPBUGS-27394): preserve category name when trying to find tag category [#7926](https://github.com/openshift/installer/pull/7926)
* [Full changelog](https://github.com/openshift/installer/compare/b6dcee134a2aa62ea0b00e559dc18376cf31b960...a8c141497478741629645e70b1dc7019992d4778)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/68e882497c1ff28c6a7361c5f188819edc823c5a)

* [OCPBUGS-38940](https://issues.redhat.com/browse/OCPBUGS-38940): [OCP] Ability to disable agent power off after deployment [#374](https://github.com/openshift/baremetal-operator/pull/374)
* [OCPBUGS-34814](https://issues.redhat.com/browse/OCPBUGS-34814): PreprovisioningImage should not be created on poweroff [#359](https://github.com/openshift/baremetal-operator/pull/359)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/937b5fd7a151920c48f2d9588911e66b903a6e38...68e882497c1ff28c6a7361c5f188819edc823c5a)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/0ba9e555eeb173d42e5adf6f65e982e17acfdb9d)

* [OCPBUGS-37502](https://issues.redhat.com/browse/OCPBUGS-37502): Fix handling of ELB Node IP detection [#324](https://github.com/openshift/baremetal-runtimecfg/pull/324)
* [OCPBUGS-35846](https://issues.redhat.com/browse/OCPBUGS-35846): Add support for OVN HostCidrs annotation [#321](https://github.com/openshift/baremetal-runtimecfg/pull/321)
* [OCPBUGS-32524](https://issues.redhat.com/browse/OCPBUGS-32524): Decrease log level when detecting node IP [#306](https://github.com/openshift/baremetal-runtimecfg/pull/306)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/13046b3bc0fc92b92582e50de0b1df6a359450a7...0ba9e555eeb173d42e5adf6f65e982e17acfdb9d)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/44b3ac26e654777e0283759d45a2b3351823fc5e)

* [OCPBUGS-35475](https://issues.redhat.com/browse/OCPBUGS-35475): Remove some of newapp unit tests relying on external deprecated images [#1802](https://github.com/openshift/oc/pull/1802)
* [OCPBUGS-35447](https://issues.redhat.com/browse/OCPBUGS-35447): bump go-git to 5.11.0 [#1799](https://github.com/openshift/oc/pull/1799)
* [Full changelog](https://github.com/openshift/oc/compare/f7b14a92857ad1f28be2e2eaec3ae8229d4c2761...44b3ac26e654777e0283759d45a2b3351823fc5e)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/58a3f24647053b93504af8ffaaf557d8b427d148)

* [OCPBUGS-38378](https://issues.redhat.com/browse/OCPBUGS-38378): Update google.golang.org/grpc v1.65.0 [#750](https://github.com/openshift/cloud-credential-operator/pull/750)
* [OCPBUGS-37823](https://issues.redhat.com/browse/OCPBUGS-37823): GCP passthrough permissions check to ignore problematic permissions. [#741](https://github.com/openshift/cloud-credential-operator/pull/741)
* [OCPBUGS-37062](https://issues.redhat.com/browse/OCPBUGS-37062): Update cloud.google.com/go/storage v1.43.0 [#742](https://github.com/openshift/cloud-credential-operator/pull/742)
* [OCPBUGS-37420](https://issues.redhat.com/browse/OCPBUGS-37420): SNYK ignore go-client misreporting [#739](https://github.com/openshift/cloud-credential-operator/pull/739)
* [OCPBUGS-37276](https://issues.redhat.com/browse/OCPBUGS-37276): Update to azidentity v1.7.0 [#732](https://github.com/openshift/cloud-credential-operator/pull/732)
* [OCPBUGS-36029](https://issues.redhat.com/browse/OCPBUGS-36029): IBM/go-sdk-core update to v5.17.4 [#721](https://github.com/openshift/cloud-credential-operator/pull/721)
* [OCPBUGS-36716](https://issues.redhat.com/browse/OCPBUGS-36716): AWS STS should not error when a credentailsRequest does not have awsSTSIAMRoleARN [#713](https://github.com/openshift/cloud-credential-operator/pull/713)
* [OCPBUGS-32899](https://issues.redhat.com/browse/OCPBUGS-32899): Upgrade go-jose module to 2.6.3 [#697](https://github.com/openshift/cloud-credential-operator/pull/697)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/a687275254ad8fbba07cefa4992c8727199f1534...58a3f24647053b93504af8ffaaf557d8b427d148)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/1bd04641f210d19370f782086949f827bfb7a264)

* [OCPBUGS-34197](https://issues.redhat.com/browse/OCPBUGS-34197): Avoid panic when looking up attachedOutboundRule.ID in azure [#147](https://github.com/openshift/cloud-network-config-controller/pull/147)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/f350a68fc59fadeff0555b0dab614f3449953230...1bd04641f210d19370f782086949f827bfb7a264)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/32854baae386c4d6854d7fd8658fdff75588e919)

* [OCPBUGS-31976](https://issues.redhat.com/browse/OCPBUGS-31976): Update x/net to v0.25.0 [#322](https://github.com/openshift/cluster-autoscaler-operator/pull/322)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/5d436c6bb9fc269651256efabca9f7df9fb8f325...32854baae386c4d6854d7fd8658fdff75588e919)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/ea627d3e8bd0e6296de157846bfc0c9a78d23b0a)

* [OCPBUGS-22943](https://issues.redhat.com/browse/OCPBUGS-22943): Add tls-cipher-suites to baremetal-kube-rbac-proxy [#379](https://github.com/openshift/cluster-baremetal-operator/pull/379)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/270579c644f97dd9f2e8e771c939833ffee1dd3e...ea627d3e8bd0e6296de157846bfc0c9a78d23b0a)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/60cc3e65ff4817e43fe3114bccbbdb14374bac2c)

* [OCPBUGS-37974](https://issues.redhat.com/browse/OCPBUGS-37974): fix: sort CredentialsRequest manifests after namespace [#194](https://github.com/openshift/cluster-capi-operator/pull/194)
* [OCPBUGS-36369](https://issues.redhat.com/browse/OCPBUGS-36369): Revert cluster-api-operator go.sum hash [#184](https://github.com/openshift/cluster-capi-operator/pull/184)
* [OCPBUGS-35128](https://issues.redhat.com/browse/OCPBUGS-35128): Bump x/crypto to v0.24.0 [#177](https://github.com/openshift/cluster-capi-operator/pull/177)
* [OCPBUGS-35957](https://issues.redhat.com/browse/OCPBUGS-35957): Fix gcp providers-list.yaml branch [#178](https://github.com/openshift/cluster-capi-operator/pull/178)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/b4c4fb13a40c2c71b8f21fe379befad95e341a77...60cc3e65ff4817e43fe3114bccbbdb14374bac2c)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/a0b9c0d70748ff24de5a40874207de3ea5bfa91e)

* [OCPBUGS-34556](https://issues.redhat.com/browse/OCPBUGS-34556): update azure and ash tolerations on node manager [#347](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/347)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/33a706e8a2430fa67f4472dbd0f61cea8de6bd6f...a0b9c0d70748ff24de5a40874207de3ea5bfa91e)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/bcb227e2c5775ce4f33416de60df0eb974549ff2)

* [CFE-1087](https://issues.redhat.com/browse/CFE-1087): API Bump for capacity Reservation [#319](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/319)
* [OCPBUGS-35520](https://issues.redhat.com/browse/OCPBUGS-35520): Wait for ControlPlaneMachineSet to be created when waiting for it to be updated [#309](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/309)
* [OCPBUGS-35338](https://issues.redhat.com/browse/OCPBUGS-35338): Improved debugging of API listing errors [#303](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/303)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/074a22ce411beae063af06423ecf3458c67e9cc3...bcb227e2c5775ce4f33416de60df0eb974549ff2)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/0ea96c98243f4f0afae3331fc3766200a4c038b5)

* [OCPBUGS-5943](https://issues.redhat.com/browse/OCPBUGS-5943): Enable topology-aware hints iff nodes in >=2 zones [#416](https://github.com/openshift/cluster-dns-operator/pull/416)
* [OCPBUGS-5943](https://issues.redhat.com/browse/OCPBUGS-5943): Ignore max unavailable for status [#400](https://github.com/openshift/cluster-dns-operator/pull/400)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/5553a22698ac7fce2cc401ed5884eb1bdb36a02d...0ea96c98243f4f0afae3331fc3766200a4c038b5)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/a85f3135b23924ceb5bb5c05ab72af99b23ba061)

* [OCPBUGS-34495](https://issues.redhat.com/browse/OCPBUGS-34495): return errors in wait-for-ceo [#1266](https://github.com/openshift/cluster-etcd-operator/pull/1266)
* [OCPBUGS-31392](https://issues.redhat.com/browse/OCPBUGS-31392): remove etcd-health-probe log [#1258](https://github.com/openshift/cluster-etcd-operator/pull/1258)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/d275b4e76bbc3d4fc2407709090eea98d2e0c599...a85f3135b23924ceb5bb5c05ab72af99b23ba061)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/5e20c16e033590346cbfb0329c699fc8ab329d05)

* [OCPBUGS-36035](https://issues.redhat.com/browse/OCPBUGS-36035): go.*,vendor: bump go-retryablehttp [#1069](https://github.com/openshift/cluster-image-registry-operator/pull/1069)
* [OCPBUGS-33147](https://issues.redhat.com/browse/OCPBUGS-33147): azure-path-fix: get client secret from k8s secret [#1058](https://github.com/openshift/cluster-image-registry-operator/pull/1058)
* [OCPBUGS-34668](https://issues.redhat.com/browse/OCPBUGS-34668): pkg/storage/s3: use force path style in favour of virtual hosted style config [#1051](https://github.com/openshift/cluster-image-registry-operator/pull/1051)
* [OCPBUGS-33409](https://issues.redhat.com/browse/OCPBUGS-33409): azurepathfix: check if platform status is nil before accessing it [#1033](https://github.com/openshift/cluster-image-registry-operator/pull/1033)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/367570eb0bbce5e1374c083ef1af8075c05e8d32...5e20c16e033590346cbfb0329c699fc8ab329d05)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/e302d85665274cb299d873eb624867384e5c37b1)

* [OCPBUGS-36467](https://issues.redhat.com/browse/OCPBUGS-36467): Allow operator to update Route spec.subdomain [#1101](https://github.com/openshift/cluster-ingress-operator/pull/1101)
* [OCPBUGS-36555](https://issues.redhat.com/browse/OCPBUGS-36555): Implement connect timeout tuning option [#1105](https://github.com/openshift/cluster-ingress-operator/pull/1105)
* [OCPBUGS-36461](https://issues.redhat.com/browse/OCPBUGS-36461): Add Regexp Anchor to TestAll [#1098](https://github.com/openshift/cluster-ingress-operator/pull/1098)
* [OCPBUGS-35399](https://issues.redhat.com/browse/OCPBUGS-35399): Internal service changed: fix target port logic [#1086](https://github.com/openshift/cluster-ingress-operator/pull/1086)
* [OCPBUGS-34973](https://issues.redhat.com/browse/OCPBUGS-34973): TestHostNetworkPortBinding: Delete t.Parallel() [#1077](https://github.com/openshift/cluster-ingress-operator/pull/1077)
* [OCPBUGS-34410](https://issues.redhat.com/browse/OCPBUGS-34410): Don't add clientca-configmap finalizer if deleting [#1063](https://github.com/openshift/cluster-ingress-operator/pull/1063)
* [OCPBUGS-34407](https://issues.redhat.com/browse/OCPBUGS-34407): Use centos7 tag for quay.io/centos7/httpd-24-centos7 image [#1061](https://github.com/openshift/cluster-ingress-operator/pull/1061)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/d876f5ab48e3748057ec196d90b6f7aae633b081...e302d85665274cb299d873eb624867384e5c37b1)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/1fe5769f9c30c79140484b11340f40e5208b5d2c)

* [OCPBUGS-31354](https://issues.redhat.com/browse/OCPBUGS-31354): add SNO control plane high cpu usage alert [#1707](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1707)
* [OCPBUGS-33930](https://issues.redhat.com/browse/OCPBUGS-33930): add a controller that reconciles SCCs' volumes [#1681](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1681)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/2eab0f9e27db4399bf8885d62ca338c3d02fdd35...1fe5769f9c30c79140484b11340f40e5208b5d2c)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/08c27f1f9cecaaf6a5e1a2044a4ed6ac9102b3a3)

* [OCPBUGS-39176](https://issues.redhat.com/browse/OCPBUGS-39176): Backport #2441 for 4.14 [#2449](https://github.com/openshift/cluster-monitoring-operator/pull/2449)
* [OCPBUGS-37468](https://issues.redhat.com/browse/OCPBUGS-37468): Backport of PR #2384 [#2433](https://github.com/openshift/cluster-monitoring-operator/pull/2433)
* [OCPBUGS-36565](https://issues.redhat.com/browse/OCPBUGS-36565): add runbook_url annotations [#2407](https://github.com/openshift/cluster-monitoring-operator/pull/2407)
* [OCPBUGS-37296](https://issues.redhat.com/browse/OCPBUGS-37296): Making sure proxy settings are correctly forwarded in the generated remote write configs [#2415](https://github.com/openshift/cluster-monitoring-operator/pull/2415)
* [OCPBUGS-36416](https://issues.redhat.com/browse/OCPBUGS-36416): inject trusted CA bundle into UWM Alertmanager [#2402](https://github.com/openshift/cluster-monitoring-operator/pull/2402)
* [OCPBUGS-34023](https://issues.redhat.com/browse/OCPBUGS-34023): fix KRP permissions for Thanos Querier [#2374](https://github.com/openshift/cluster-monitoring-operator/pull/2374)
* [OCPBUGS-33585](https://issues.redhat.com/browse/OCPBUGS-33585): fix Thanos ruler alert generator url [#2345](https://github.com/openshift/cluster-monitoring-operator/pull/2345)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/1839fb4d246aa49ad3689f765e720fc51a38ae5c...08c27f1f9cecaaf6a5e1a2044a4ed6ac9102b3a3)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/3c87787ef68fe7b8cff9c9f23ccb2217f5b92767)

* [OCPBUGS-37221](https://issues.redhat.com/browse/OCPBUGS-37221): Ensure that the node-identity webhook address contains colons for IPv6 [#2440](https://github.com/openshift/cluster-network-operator/pull/2440)
* [OCPBUGS-38073](https://issues.redhat.com/browse/OCPBUGS-38073): Fix IC distributed control plane alerts [#2463](https://github.com/openshift/cluster-network-operator/pull/2463)
* [OCPBUGS-37468](https://issues.redhat.com/browse/OCPBUGS-37468): Backport ipsec state metric [#2444](https://github.com/openshift/cluster-network-operator/pull/2444)
* [OCPBUGS-32706](https://issues.redhat.com/browse/OCPBUGS-32706): Add conditions for ignored-namespaces [#2380](https://github.com/openshift/cluster-network-operator/pull/2380)
* [OCPBUGS-36722](https://issues.redhat.com/browse/OCPBUGS-36722): update whereabouts crd [#2434](https://github.com/openshift/cluster-network-operator/pull/2434)
* [OCPBUGS-34885](https://issues.redhat.com/browse/OCPBUGS-34885): [release-4.14] Fix 4.13->4.14 upgrade with ipsec enabled [#2390](https://github.com/openshift/cluster-network-operator/pull/2390)
* [OCPBUGS-27925](https://issues.redhat.com/browse/OCPBUGS-27925), [OCPBUGS-30579](https://issues.redhat.com/browse/OCPBUGS-30579): [release-4.14] tighten conditions for the state transitions in IC upgrade [#2207](https://github.com/openshift/cluster-network-operator/pull/2207)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/d429c8bc14a64bd56fb9160b218bfa75a891219f...3c87787ef68fe7b8cff9c9f23ccb2217f5b92767)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/90ee23e0053c17001b52dd68b63eaa72c5a3e5f9)

* TuneD prior to kubelet in one-shot mode (#1137) [#1137](https://github.com/openshift/cluster-node-tuning-operator/pull/1137)
* [OCPBUGS-37754](https://issues.redhat.com/browse/OCPBUGS-37754): Remove tuned/rendered object (#1133) [#1133](https://github.com/openshift/cluster-node-tuning-operator/pull/1133)
* [OCPBUGS-37734](https://issues.redhat.com/browse/OCPBUGS-37734): Backport fix for OCPBUGS-36355 (#1126) [#1126](https://github.com/openshift/cluster-node-tuning-operator/pull/1126)
* [OCPBUGS-33929](https://issues.redhat.com/browse/OCPBUGS-33929): Negative net interface name does not reduce queues (#1074) [#1074](https://github.com/openshift/cluster-node-tuning-operator/pull/1074)
* Add a '.snyk' to silence static code analysis warnings (#1002) [#1002](https://github.com/openshift/cluster-node-tuning-operator/pull/1002)
* [OCPBUGS-30153](https://issues.redhat.com/browse/OCPBUGS-30153): fix rendering extra ctrcfgs (#978) [#978](https://github.com/openshift/cluster-node-tuning-operator/pull/978)
* fix extra-reboot on upgrade with paused mcp worker (#1053) [#1053](https://github.com/openshift/cluster-node-tuning-operator/pull/1053)
* [OCPBUGS-31694](https://issues.redhat.com/browse/OCPBUGS-31694): E2E: Workload hints test cases fixes (#1012) (#1052) [#1012](https://github.com/openshift/cluster-node-tuning-operator/pull/1012)
* Systemd processes not being moved to cpuset/systemd.slice fix (#1040) [#1040](https://github.com/openshift/cluster-node-tuning-operator/pull/1040)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/538dc74a33a0dc97978abe58cca6e4cf5f32e7fc...90ee23e0053c17001b52dd68b63eaa72c5a3e5f9)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/700dc111fd98c315648a78371b11be34fa4dbba3)

* [OCPBUGS-28247](https://issues.redhat.com/browse/OCPBUGS-28247): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#570](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/570)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/8bd86026e9eaab600dafa3c89c102f1cf86677fe...700dc111fd98c315648a78371b11be34fa4dbba3)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/accd87730fd3652584bef210626cab3b6d49271f)

* [OCPBUGS-33295](https://issues.redhat.com/browse/OCPBUGS-33295): Update opentelemetry to mitigate CVE-2023-47108 [#344](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/344)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/3985c55f99e1ea013be2db096059c09b2ed98118...accd87730fd3652584bef210626cab3b6d49271f)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/6c652a5e10dd7e6cbf5ec02a2e1afbc794c26192)

* [OCPBUGS-33467](https://issues.redhat.com/browse/OCPBUGS-33467): Fix problem-detector proxy setting [#472](https://github.com/openshift/cluster-storage-operator/pull/472)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/aab7b5bd3bebd6e0707723b057bc1993c8c8cf50...6c652a5e10dd7e6cbf5ec02a2e1afbc794c26192)


### [console](https://github.com/openshift/console/tree/beb6e56790786062f9052f3ee166c5262be98956)

* [OCPBUGS-38972](https://issues.redhat.com/browse/OCPBUGS-38972): Redirects to new PipelineRun logs URL from old PipelineRun logs URL [#14234](https://github.com/openshift/console/pull/14234)
* [OCPBUGS-38053](https://issues.redhat.com/browse/OCPBUGS-38053): fix BMH restart annotation [#14109](https://github.com/openshift/console/pull/14109)
* [OCPBUGS-33748](https://issues.redhat.com/browse/OCPBUGS-33748): Fix Pipeline details page with when expression using CEL expression [#13856](https://github.com/openshift/console/pull/13856)
* [OCPBUGS-32499](https://issues.redhat.com/browse/OCPBUGS-32499): Fixed some problems in topology Chinese translation text [#13779](https://github.com/openshift/console/pull/13779)
* [OCPBUGS-33942](https://issues.redhat.com/browse/OCPBUGS-33942): make sure folder is encapsulated with quotas [#13869](https://github.com/openshift/console/pull/13869)
* [OCPBUGS-35723](https://issues.redhat.com/browse/OCPBUGS-35723): Upgrade Pipeline trigger resources to v1beta1 [#13985](https://github.com/openshift/console/pull/13985)
* [OCPBUGS-33558](https://issues.redhat.com/browse/OCPBUGS-33558): Display "With Data upload form" in Create PVC drop down once [#13840](https://github.com/openshift/console/pull/13840)
* [OCPBUGS-33064](https://issues.redhat.com/browse/OCPBUGS-33064): Fix PipelineRun Logs tab navigation [#13673](https://github.com/openshift/console/pull/13673)
* [OCPBUGS-33321](https://issues.redhat.com/browse/OCPBUGS-33321): Helm Plugin's Catalog incorrectly renders a single index entry into multiple tiles [#13824](https://github.com/openshift/console/pull/13824)
* [OCPBUGS-33635](https://issues.redhat.com/browse/OCPBUGS-33635): restrict Masthead logo to max-height to 60px [#13847](https://github.com/openshift/console/pull/13847)
* [OCPBUGS-33640](https://issues.redhat.com/browse/OCPBUGS-33640): Add visual connector between VMs and non VMs workloads [#13848](https://github.com/openshift/console/pull/13848)
* [OCPBUGS-33462](https://issues.redhat.com/browse/OCPBUGS-33462): fix issues with Edit Route form [#13831](https://github.com/openshift/console/pull/13831)
* [OCPBUGS-33110](https://issues.redhat.com/browse/OCPBUGS-33110): change OperatorHub filter FIPS Mode to Designed for FIPS [#13804](https://github.com/openshift/console/pull/13804)
* [OCPBUGS-32697](https://issues.redhat.com/browse/OCPBUGS-32697): Routes created by devfiles do not always use HTTPS [#13787](https://github.com/openshift/console/pull/13787)
* [Full changelog](https://github.com/openshift/console/compare/646ce7a07f7790df387b3e6ba4d81b6f20b4cab0...beb6e56790786062f9052f3ee166c5262be98956)


### [console-operator](https://github.com/openshift/console-operator/tree/e5d3f29136a89a273ed48023ce3a89c27980cf4f)

* [OCPBUGS-31916](https://issues.redhat.com/browse/OCPBUGS-31916): use InfrastructureTopology for clusters using external CP as the console deploys on the worker nodes [#885](https://github.com/openshift/console-operator/pull/885)
* [Full changelog](https://github.com/openshift/console-operator/compare/855f3fcebb968880eca12713f01157aedee98d64...e5d3f29136a89a273ed48023ce3a89c27980cf4f)


### [coredns](https://github.com/openshift/coredns/tree/fdd6037bf7380a48358b269d78bc8c61c311342c)

* [OCPBUGS-37467](https://issues.redhat.com/browse/OCPBUGS-37467): UPSTREAM: 6354: openshift: key cache on Checking Disabled (CD) bit [#126](https://github.com/openshift/coredns/pull/126)
* [Full changelog](https://github.com/openshift/coredns/compare/7d3fa777871ed2e5a70715e7f3e71d3f01785330...fdd6037bf7380a48358b269d78bc8c61c311342c)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/e18ed7f00d8c80564a8dd5827013cd49f33ff0d7)

* [OCPBUGS-35112](https://issues.redhat.com/browse/OCPBUGS-35112): CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#99](https://github.com/openshift/csi-external-provisioner/pull/99)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/78a710fd2ccd6f87f7789c314349192d063f9f37...e18ed7f00d8c80564a8dd5827013cd49f33ff0d7)


### [docker-builder](https://github.com/openshift/builder/tree/52565caf1164c16e02bda3753f506b5b186b26ed)

* [CVE-2024](https://issues.redhat.com/browse/CVE-2024): 7387: Prevent Build Inputs "Zip-Slip" [#7](https://github.com/openshift/builder/pull/7)
* [Full changelog](https://github.com/openshift/builder/compare/9c104de024e5c52e224ffedfbab0e9053fb1efd6...52565caf1164c16e02bda3753f506b5b186b26ed)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/96f2f54fec843fc9e8dec826d7b3fa25cdf38d7f)

* [OCPBUGS-35143](https://issues.redhat.com/browse/OCPBUGS-35143): update to go 1.19 and k8s.io mods to v0.27.4 [#87](https://github.com/openshift/egress-router-cni/pull/87)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/afffdd455b65a944751f9155852781f9ddce0f5d...96f2f54fec843fc9e8dec826d7b3fa25cdf38d7f)


### [etcd](https://github.com/openshift/etcd/tree/5ed5044c5661c55d297ab0348056b50969af9627)

* [OCPBUGS-32813](https://issues.redhat.com/browse/OCPBUGS-32813): Revert "Merge pull request #261 from Elbehery/rebase-etcd-3.5.13-open… [#265](https://github.com/openshift/etcd/pull/265)
* [Full changelog](https://github.com/openshift/etcd/compare/b0c0321e61acdf93649ff4b753b2a399ffff411b...5ed5044c5661c55d297ab0348056b50969af9627)


### [haproxy-router](https://github.com/openshift/router/tree/c3a2430c09ccea623bb8a599ce56a6e267009620)

* [OCPBUGS-32634](https://issues.redhat.com/browse/OCPBUGS-32634): Properly handle rewrite-target annotation [#583](https://github.com/openshift/router/pull/583)
* [OCPBUGS-33797](https://issues.redhat.com/browse/OCPBUGS-33797): Reject routes with MD5 certs [#598](https://github.com/openshift/router/pull/598)
* [OCPBUGS-33389](https://issues.redhat.com/browse/OCPBUGS-33389): Count active services before setting weight to 1 [#592](https://github.com/openshift/router/pull/592)
* [OCPBUGS-30773](https://issues.redhat.com/browse/OCPBUGS-30773): OCPBUGS 6958 backport to 4.14 [#568](https://github.com/openshift/router/pull/568)
* [Full changelog](https://github.com/openshift/router/compare/3f833257249c8070da8f3fedd3ab6b3e8ef17cde...c3a2430c09ccea623bb8a599ce56a6e267009620)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/03a907c6d182353a0e9b83a224a6f0398406f6d5)

* [OCPBUGS-39413](https://issues.redhat.com/browse/OCPBUGS-39413): Return from EnsureHostInPool on all NIC errors [#2073](https://github.com/openshift/kubernetes/pull/2073)
* : OCPBUGS-38959: Upstream: 115702 kubelet: output log even file is rotated [#2060](https://github.com/openshift/kubernetes/pull/2060)
* NO-JIRA: update downstream owners [#2051](https://github.com/openshift/kubernetes/pull/2051)
* [OCPBUGS-37623](https://issues.redhat.com/browse/OCPBUGS-37623): Bump to Kubernetes v1.27.16 [#2043](https://github.com/openshift/kubernetes/pull/2043)
* [OCPBUGS-35553](https://issues.redhat.com/browse/OCPBUGS-35553): Disable vulncheck [#2010](https://github.com/openshift/kubernetes/pull/2010)
* [OCPBUGS-35553](https://issues.redhat.com/browse/OCPBUGS-35553): Bump k8s 1.27.15 [#1992](https://github.com/openshift/kubernetes/pull/1992)
* [OCPBUGS-33964](https://issues.redhat.com/browse/OCPBUGS-33964): UPSTREAM: 123055: Fix race condition between resizer and kubelet [#1973](https://github.com/openshift/kubernetes/pull/1973)
* UPSTREAM: <carry>: OCPBUGS-32473: fix cpu manager cpuset check [#1951](https://github.com/openshift/kubernetes/pull/1951)
* [OCPBUGS-33712](https://issues.redhat.com/browse/OCPBUGS-33712): Bump to Kubernetes v1.27.14 [#1970](https://github.com/openshift/kubernetes/pull/1970)
* [OCPBUGS-33417](https://issues.redhat.com/browse/OCPBUGS-33417): Provide SCC access via RBAC [#1965](https://github.com/openshift/kubernetes/pull/1965)
* [OCPBUGS-14373](https://issues.redhat.com/browse/OCPBUGS-14373): Fix flaky HPA e2e tests by not failing on context cancelled (#117669) [#1958](https://github.com/openshift/kubernetes/pull/1958)
* [Full changelog](https://github.com/openshift/kubernetes/compare/fd36fb9acf9a99270f4fca3f5817fd52c8bc58b4...03a907c6d182353a0e9b83a224a6f0398406f6d5)


### [hypershift](https://github.com/openshift/hypershift/tree/ab18b17d053050a413afcc54623393dacf6cffa6)

* NO-JIRA: PDB backports [#4661](https://github.com/openshift/hypershift/pull/4661)
* NO-JIRA: Konflux migration 4.14 [#4648](https://github.com/openshift/hypershift/pull/4648)
* [OCPBUGS-39230](https://issues.redhat.com/browse/OCPBUGS-39230): set proxy envvars on aws CCM [#4638](https://github.com/openshift/hypershift/pull/4638)
* [OCPBUGS-38791](https://issues.redhat.com/browse/OCPBUGS-38791): Let the CPO oidc check resolve through data plane [#4617](https://github.com/openshift/hypershift/pull/4617)
* NO-JIRA: Flaky cert validation test [#4633](https://github.com/openshift/hypershift/pull/4633)
* [HOSTEDCP-1897](https://issues.redhat.com/browse/HOSTEDCP-1897): [release-4.14] Allow setting Kube APIServer maximum requests in flight [#4553](https://github.com/openshift/hypershift/pull/4553)
* [OCPBUGS-37076](https://issues.redhat.com/browse/OCPBUGS-37076): Fixed audit-logs sigterm failing to terminate gracefully [#4369](https://github.com/openshift/hypershift/pull/4369)
* [OCPBUGS-38624](https://issues.redhat.com/browse/OCPBUGS-38624): remove weak ciphers from security profile [#4575](https://github.com/openshift/hypershift/pull/4575)
* [OCPBUGS-37173](https://issues.redhat.com/browse/OCPBUGS-37173): Add newline after TLS certs referenced by image.config [#4471](https://github.com/openshift/hypershift/pull/4471)
* [OCPBUGS-37172](https://issues.redhat.com/browse/OCPBUGS-37172): OCPBUGS-35899: Doubled machineHealthCheck timeout on Agent and None [#4490](https://github.com/openshift/hypershift/pull/4490)
* [OCPBUGS-36944](https://issues.redhat.com/browse/OCPBUGS-36944): [release-4.14] Add HTTP(s) konnectivity proxy and use it with OpenShift APIServer [#4360](https://github.com/openshift/hypershift/pull/4360)
* [HOSTEDCP-1795](https://issues.redhat.com/browse/HOSTEDCP-1795), [HOSTEDCP-1796](https://issues.redhat.com/browse/HOSTEDCP-1796): Customize the self-generated cert validity and rotation [#4473](https://github.com/openshift/hypershift/pull/4473)
* [OCPBUGS-37175](https://issues.redhat.com/browse/OCPBUGS-37175): Delete IDMS in dataplane once HCP ICS field is removed [#4472](https://github.com/openshift/hypershift/pull/4472)
* NO-JIRA: Konflux mce-2.4 pipeline fixes [#4464](https://github.com/openshift/hypershift/pull/4464)
* NO-JIRA: [release-4.14] OCPBUGS-36297: kubevirt-csi-driver: Pass infra kubeconfig in case of external infra [#4288](https://github.com/openshift/hypershift/pull/4288)
* NO-JIRA: [release-4.14] test/e2e: remove api budget checks [#4438](https://github.com/openshift/hypershift/pull/4438)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-2 (release-4.14) - abandoned [#4363](https://github.com/openshift/hypershift/pull/4363)
* NO-JIRA: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.21.10-1.1719562237 (release-4.14) - abandoned [#4326](https://github.com/openshift/hypershift/pull/4326)
* NO-JIRA: Update registry.access.redhat.com/ubi9-minimal Docker tag to v9.4-1134 (release-4.14) - abandoned [#4325](https://github.com/openshift/hypershift/pull/4325)
* [OCPBUGS-36518](https://issues.redhat.com/browse/OCPBUGS-36518): Run haproxy to connect to kas from data plane if noproxy settings contain kas [#4315](https://github.com/openshift/hypershift/pull/4315)
* [OCPBUGS-36159](https://issues.redhat.com/browse/OCPBUGS-36159): Generate default worker security group rules based on machineCIDR [#4270](https://github.com/openshift/hypershift/pull/4270)
* [OCPBUGS-35549](https://issues.redhat.com/browse/OCPBUGS-35549): Restrict image registry overrides to control plane component [#4223](https://github.com/openshift/hypershift/pull/4223)
* [OCPBUGS-35365](https://issues.redhat.com/browse/OCPBUGS-35365): fix router on 4.14 y-stream upgrade [#4205](https://github.com/openshift/hypershift/pull/4205)
* NO-JIRA: chore(deps): update konflux references (release-4.14) [#4257](https://github.com/openshift/hypershift/pull/4257)
* [OCPBUGS-35401](https://issues.redhat.com/browse/OCPBUGS-35401): Fix disconnected metadata inspection for nodepool [#4208](https://github.com/openshift/hypershift/pull/4208)
* [OCPBUGS-35482](https://issues.redhat.com/browse/OCPBUGS-35482): Add TrustedBundles to OAS container [#4216](https://github.com/openshift/hypershift/pull/4216)
* [OCPBUGS-35290](https://issues.redhat.com/browse/OCPBUGS-35290): [release-4.14] Backport etcd defrag [#4189](https://github.com/openshift/hypershift/pull/4189)
* NO-JIRA: chore(deps): update konflux references (release-4.14) [#4248](https://github.com/openshift/hypershift/pull/4248)
* [OCPBUGS-35183](https://issues.redhat.com/browse/OCPBUGS-35183): add AWS STS URL to OIDC provider audiences [#4179](https://github.com/openshift/hypershift/pull/4179)
* NO-JIRA: hack: make the e2e script generic [#4201](https://github.com/openshift/hypershift/pull/4201)
* chore(deps): update konflux references to 2be7c9c (release-4.14) [#4225](https://github.com/openshift/hypershift/pull/4225)
* NO-JIRA: Update Konflux references to 1025001 (release-4.14) [#4181](https://github.com/openshift/hypershift/pull/4181)
* NO-JIRA: chore(deps): update konflux references (release-4.14) [#4168](https://github.com/openshift/hypershift/pull/4168)
* [OCPBUGS-34856](https://issues.redhat.com/browse/OCPBUGS-34856): [release-4.14] OCPBUGS-34855: Add new permission required in CAPA [#4149](https://github.com/openshift/hypershift/pull/4149)
* NO-JIRA: test/e2e: fix prometheus serviceaccount handling against 4.16+ [#4159](https://github.com/openshift/hypershift/pull/4159)
* NO-JIRA: chore(deps): update rhtap references (release-4.14) [#4112](https://github.com/openshift/hypershift/pull/4112)
* NO-JIRA: chore(deps): update rhtap references to 9aec3ae (release-4.14) [#4073](https://github.com/openshift/hypershift/pull/4073)
* NO-JIRA: Remove CLI inspection of release image [#4061](https://github.com/openshift/hypershift/pull/4061)
* [OCPBUGS-33713](https://issues.redhat.com/browse/OCPBUGS-33713): Reconcile over ICSP/IDMS [#4059](https://github.com/openshift/hypershift/pull/4059)
* NO-JIRA: chore(deps): update rhtap references to 7cd8020 (release-4.14) [#4065](https://github.com/openshift/hypershift/pull/4065)
* [OCPBUGS-33844](https://issues.redhat.com/browse/OCPBUGS-33844): Fix disconnected metadata inspection [#4049](https://github.com/openshift/hypershift/pull/4049)
* [OCPBUGS-33843](https://issues.redhat.com/browse/OCPBUGS-33843): Recycler-pod image now points to the OCP Payload reference [#4048](https://github.com/openshift/hypershift/pull/4048)
* NO-JIRA: chore(deps): update rhtap references (release-4.14) [#4040](https://github.com/openshift/hypershift/pull/4040)
* [HOSTEDCP-1480](https://issues.redhat.com/browse/HOSTEDCP-1480): Update TLS cert hash creation with sha512 [#4025](https://github.com/openshift/hypershift/pull/4025)
* NO-JIRA:  Update RHTAP references (release-4.14) [#3995](https://github.com/openshift/hypershift/pull/3995)
* [HOSTEDCP-1552](https://issues.redhat.com/browse/HOSTEDCP-1552): Update RHTAP tekton files for 0.3 -> 0.4 migration [#3958](https://github.com/openshift/hypershift/pull/3958)
* [Full changelog](https://github.com/openshift/hypershift/compare/9fc5ac2a953ab14097bdbe1538e0cfdeb6e0a9a5...ab18b17d053050a413afcc54623393dacf6cffa6)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/ea2bc158887427c5278fb6a4c8c7a49d8e89c494)

* [OCPBUGS-36065](https://issues.redhat.com/browse/OCPBUGS-36065): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#73](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/73)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/02471d9625339b1cd6d638e358a10c88b223d30e...ea2bc158887427c5278fb6a4c8c7a49d8e89c494)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/620220eae119f1fc51f0657563e96655d16a726d)

* [OCPBUGS-36071](https://issues.redhat.com/browse/OCPBUGS-36071): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#122](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/122)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/7fd94aa73f7e61cba93657cc2411e04e1b40e87b...620220eae119f1fc51f0657563e96655d16a726d)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/da6823b06c120347d64216a04e37543aec515dec)

* [OCPBUGS-36011](https://issues.redhat.com/browse/OCPBUGS-36011): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#42](https://github.com/openshift/ibm-vpc-node-label-updater/pull/42)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/44a2b9430e38e4dc0fe6ef0c08cd759ed97fd43f...da6823b06c120347d64216a04e37543aec515dec)


### [insights-operator](https://github.com/openshift/insights-operator/tree/8e8a0c1b3ad854934a3a93c2910f4406b6cad65d)

* Add missing permission for GatherClusterIngressCertificates (#984) [#984](https://github.com/openshift/insights-operator/pull/984)
* [OCPBUGS-37673](https://issues.redhat.com/browse/OCPBUGS-37673): Ingress controller related certificates' validate dates gathering (#976) [#976](https://github.com/openshift/insights-operator/pull/976)
* [OCPBUGS-36475](https://issues.redhat.com/browse/OCPBUGS-36475): properly encode the URL for the advisor links (#962) [#962](https://github.com/openshift/insights-operator/pull/962)
* [OCPBUGS-36380](https://issues.redhat.com/browse/OCPBUGS-36380): Collect aggregated Prometheus Alertmanager instances (#960) [#960](https://github.com/openshift/insights-operator/pull/960)
* [OCPBUGS-33193](https://issues.redhat.com/browse/OCPBUGS-33193): anonymization - externalIP can be nil (#931) (#933) [#931](https://github.com/openshift/insights-operator/pull/931)
* [Full changelog](https://github.com/openshift/insights-operator/compare/1c5bc2610d484737cece38bafcca56347edae35d...8e8a0c1b3ad854934a3a93c2910f4406b6cad65d)


### [ironic](https://github.com/openshift/ironic-image/tree/46e260f9e020fe29b969b7a12cc2999e9e1d3380)

* [OCPBUGS-33375](https://issues.redhat.com/browse/OCPBUGS-33375): bump werkzeug [#537](https://github.com/openshift/ironic-image/pull/537)
* [OCPBUGS-37410](https://issues.redhat.com/browse/OCPBUGS-37410): bump jinja2 [#530](https://github.com/openshift/ironic-image/pull/530)
* [OCPBUGS-37115](https://issues.redhat.com/browse/OCPBUGS-37115): Update eventlet version [#524](https://github.com/openshift/ironic-image/pull/524)
* Bug OCPBUGS-34657: Disable installation of .pyc files through pip [#512](https://github.com/openshift/ironic-image/pull/512)
* [METAL-1004](https://issues.redhat.com/browse/METAL-1004): Update ironic-lib to latest release-4.14 commit [#492](https://github.com/openshift/ironic-image/pull/492)
* [OCPBUGS-32364](https://issues.redhat.com/browse/OCPBUGS-32364): [4.14] remove unused prometheus-exporter [#487](https://github.com/openshift/ironic-image/pull/487)
* [OCPBUGS-32169](https://issues.redhat.com/browse/OCPBUGS-32169): [4.14] Add hybrid configuration for cachito [#482](https://github.com/openshift/ironic-image/pull/482)
* [Full changelog](https://github.com/openshift/ironic-image/compare/0e91ffa9ca6b95bad570e5e50972bfff8d9c0a00...46e260f9e020fe29b969b7a12cc2999e9e1d3380)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/7e82a52f0406df18362d4bdc7c5cc95a376be587)

* [OCPBUGS-33452](https://issues.redhat.com/browse/OCPBUGS-33452): update ironic-lib with latest fixes [#133](https://github.com/openshift/ironic-agent-image/pull/133)
* [METAL-1004](https://issues.redhat.com/browse/METAL-1004): Update ironic-lib to latest release-4.14 commit [#130](https://github.com/openshift/ironic-agent-image/pull/130)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/c355495f5c955f169df557d19bfeaf0c6df07259...7e82a52f0406df18362d4bdc7c5cc95a376be587)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/03e5f40783e1b573f3d07d7640619ad9592f9a77)

* [OCPBUGS-30414](https://issues.redhat.com/browse/OCPBUGS-30414): update unit tests in egress/dns-proxy [#173](https://github.com/openshift/images/pull/173)
* [Full changelog](https://github.com/openshift/images/compare/f08cee3389569256aa288c33bad701a2704ce9db...03e5f40783e1b573f3d07d7640619ad9592f9a77)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/07c2c43676cfebb527a85b2cd01201b2f6065d18)

* [CFE-1051](https://issues.redhat.com/browse/CFE-1051): Adding web-hook validation for capacityReservationGroupID [#1260](https://github.com/openshift/machine-api-operator/pull/1260)
* [OCPBUGS-31980](https://issues.redhat.com/browse/OCPBUGS-31980): Update x/net to v0.25.0 [#1236](https://github.com/openshift/machine-api-operator/pull/1236)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/27f5650db08bcbd3002a5203551b887a300185b9...07c2c43676cfebb527a85b2cd01201b2f6065d18)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/5409abac417622d748dfe58f392e79f1b83bbbe4)

* [OCPBUGS-32258](https://issues.redhat.com/browse/OCPBUGS-32258): Log network service output to console [#4320](https://github.com/openshift/machine-config-operator/pull/4320)
* [OCPBUGS-38371](https://issues.redhat.com/browse/OCPBUGS-38371): Revert "MCD-pull: run after network-online.target in Azure" [#4526](https://github.com/openshift/machine-config-operator/pull/4526)
* [OCPBUGS-37769](https://issues.redhat.com/browse/OCPBUGS-37769): Move StartLimitIntervalSec to Unit section [#4521](https://github.com/openshift/machine-config-operator/pull/4521)
* [OCPBUGS-30794](https://issues.redhat.com/browse/OCPBUGS-30794): Mount /run/nodeip-configuration into coredns containers [#4253](https://github.com/openshift/machine-config-operator/pull/4253)
* [OCPBUGS-37483](https://issues.redhat.com/browse/OCPBUGS-37483): Remove weights from ingress check script [#4485](https://github.com/openshift/machine-config-operator/pull/4485)
* [OCPBUGS-37738](https://issues.redhat.com/browse/OCPBUGS-37738): Openshift uncordoned compute-node that was intentionally cordoned [#4502](https://github.com/openshift/machine-config-operator/pull/4502)
* [OCPBUGS-36915](https://issues.redhat.com/browse/OCPBUGS-36915): Use NM's dns-change event for resolv.conf [#4473](https://github.com/openshift/machine-config-operator/pull/4473)
* [OCPBUGS-37223](https://issues.redhat.com/browse/OCPBUGS-37223): Copy RHEL9 binaries used in HCP [#4479](https://github.com/openshift/machine-config-operator/pull/4479)
* [OCPBUGS-36776](https://issues.redhat.com/browse/OCPBUGS-36776): daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages [#4463](https://github.com/openshift/machine-config-operator/pull/4463)
* [OCPBUGS-36593](https://issues.redhat.com/browse/OCPBUGS-36593): MCD-pull: run after network-online.target in Azure [#4456](https://github.com/openshift/machine-config-operator/pull/4456)
* [OCPBUGS-36356](https://issues.redhat.com/browse/OCPBUGS-36356): daemon/update: disable systemd unit before overwriting [#4447](https://github.com/openshift/machine-config-operator/pull/4447)
* [OCPBUGS-32472](https://issues.redhat.com/browse/OCPBUGS-32472): Delete state files on reboot only [#4331](https://github.com/openshift/machine-config-operator/pull/4331)
* [OCPBUGS-33590](https://issues.redhat.com/browse/OCPBUGS-33590): ovs-configure: fix `vlan_parent` calculation [#4361](https://github.com/openshift/machine-config-operator/pull/4361)
* [OCPBUGS-34716](https://issues.redhat.com/browse/OCPBUGS-34716): If multiple hostnames are returned, use the first one for the Node name [#4385](https://github.com/openshift/machine-config-operator/pull/4385)
* [OCPBUGS-17658](https://issues.redhat.com/browse/OCPBUGS-17658): Controller pod is spamming unknown field "spec.dns.spec.platform" message [#4383](https://github.com/openshift/machine-config-operator/pull/4383)
* [OCPBUGS-33643](https://issues.redhat.com/browse/OCPBUGS-33643): Don't error if the certs.d dir doesn't exist yet [#4362](https://github.com/openshift/machine-config-operator/pull/4362)
* [OCPBUGS-32341](https://issues.redhat.com/browse/OCPBUGS-32341): Remove the condition for checking the multiple ovs-if-br-ex profiles [#4325](https://github.com/openshift/machine-config-operator/pull/4325)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/c29fe458496f7351a1e5c60e3af04d400a3d95c1...5409abac417622d748dfe58f392e79f1b83bbbe4)


### [multus-cni](https://github.com/openshift/multus-cni/tree/4ed99c3a8b0aff168f50d166e82bce2a371c2dbb)

* [OCPBUGS-33478](https://issues.redhat.com/browse/OCPBUGS-33478): Fix CNI cache update function to prevent nil access [#232](https://github.com/openshift/multus-cni/pull/232)
* [Full changelog](https://github.com/openshift/multus-cni/compare/823eb514dda63e04bb6de25428334ef59420e316...4ed99c3a8b0aff168f50d166e82bce2a371c2dbb)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/873d155c6acf478c5363121d244c3fd687019eec)

* [OCPBUGS-37815](https://issues.redhat.com/browse/OCPBUGS-37815), [OCPBUGS-37817](https://issues.redhat.com/browse/OCPBUGS-37817): [release-4.14] align api calls timeout and skip pods marked for deletion [#309](https://github.com/openshift/whereabouts-cni/pull/309)
* [OCPBUGS-36722](https://issues.redhat.com/browse/OCPBUGS-36722): Return previous IP allocation for add cmd [#296](https://github.com/openshift/whereabouts-cni/pull/296)
* [OCPBUGS-35263](https://issues.redhat.com/browse/OCPBUGS-35263): Use IP to identify orphaned allocation to be deleted [#289](https://github.com/openshift/whereabouts-cni/pull/289)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/13aebf7480b626f199cb5dbce3f37405dfd486e1...873d155c6acf478c5363121d244c3fd687019eec)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/d8a8c94e523242b441b3714ae31e4c7608c0c797)

* Correct 4.16 owners file (#100) [#100](https://github.com/openshift/network-metrics-daemon/pull/100)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/69d0021a4b60db315f47d83bde1c455362a03808...d8a8c94e523242b441b3714ae31e4c7608c0c797)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/93a782e897c28724ae8cdf5251c2dc5502d83e6b)

* [OCPBUGS-29549](https://issues.redhat.com/browse/OCPBUGS-29549): IPI install fails on Nutanix when using DHCP [#70](https://github.com/openshift/machine-api-provider-nutanix/pull/70)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/6f50b1ac83fa493cdaa38fb0a05804882333172b...93a782e897c28724ae8cdf5251c2dc5502d83e6b)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/e1cd9d05b032fbe83df7f68c813309ad7df5d59e)

* [OCPBUGS-31982](https://issues.redhat.com/browse/OCPBUGS-31982): bump x/net to 0.24.0 [#110](https://github.com/openshift/oauth-apiserver/pull/110)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/8f5c90c74205a45787960a3bec1f12929a391471...e1cd9d05b032fbe83df7f68c813309ad7df5d59e)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/433fd32ed98ad482ecad9006e7765075a3beb7ae)

* [OCPBUGS-32445](https://issues.redhat.com/browse/OCPBUGS-32445): bump(x/net) to v0.23.0 [#429](https://github.com/openshift/openshift-apiserver/pull/429)
* [OCPBUGS-31509](https://issues.redhat.com/browse/OCPBUGS-31509): vendor upgrade runtime-utils [#426](https://github.com/openshift/openshift-apiserver/pull/426)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/9e9b51d26b393cceb2d5c7c9d5b04a4f71fc8a19...433fd32ed98ad482ecad9006e7765075a3beb7ae)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/9020ea1a10e50487d1d0f5b9b9773d01c1c0573b)

* [CVE-2024](https://issues.redhat.com/browse/CVE-2024): 45496: Reduce Capabilities for Non-Build Containers [#7](https://github.com/openshift/openshift-controller-manager/pull/7)
* [release 4.14] OCPBUGS-33288: Update opentelemetry dependency [#295](https://github.com/openshift/openshift-controller-manager/pull/295)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/27209ef14fcfca236ddba24ac7289bb3d01be8e6...9020ea1a10e50487d1d0f5b9b9773d01c1c0573b)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/1713e9716ce9efe64bc87c3203e0f991e72132d2)

* [OCPBUGS-35337](https://issues.redhat.com/browse/OCPBUGS-35337): Correct out-of-bounds check [#173](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/173)
* [OCPBUGS-34792](https://issues.redhat.com/browse/OCPBUGS-34792): Make Cinder CSI Driver Topology feature configurable [#162](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/162)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/3a74316128f526245959b33958aac5bcb68bce99...1713e9716ce9efe64bc87c3203e0f991e72132d2)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/51f8e4d69014bfa7a8815662ab0117b6505a6e29)

* [OCPBUGS-32428](https://issues.redhat.com/browse/OCPBUGS-32428): Ensure portSecurity is correctly set in the Instance Ports [#109](https://github.com/openshift/machine-api-provider-openstack/pull/109)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/898587671ad3ed5c1844f549175411736ebcabc1...51f8e4d69014bfa7a8815662ab0117b6505a6e29)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/cf125801cfefb6ac61b6994ea83529cf0c4c5e17)

* [OCPBUGS-38544](https://issues.redhat.com/browse/OCPBUGS-38544): (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) [#842](https://github.com/openshift/operator-framework-olm/pull/842)
* [OCPBUGS-36949](https://issues.redhat.com/browse/OCPBUGS-36949): [CARRY] perform operator apiService certificate validity checks directly [#821](https://github.com/openshift/operator-framework-olm/pull/821)
* [OCPBUGS-37016](https://issues.redhat.com/browse/OCPBUGS-37016): Bump github.com/containers/image/v5 [#824](https://github.com/openshift/operator-framework-olm/pull/824)
* [OCPBUGS-36452](https://issues.redhat.com/browse/OCPBUGS-36452): Can't install operator on 4.15 after uninstalling it on a prior version [#811](https://github.com/openshift/operator-framework-olm/pull/811)
* [OCPBUGS-31969](https://issues.redhat.com/browse/OCPBUGS-31969), [OCPBUGS-31970](https://issues.redhat.com/browse/OCPBUGS-31970): UPSTREAM: <carry>: update golang.org/x/net for CVE-2023-45288 [#787](https://github.com/openshift/operator-framework-olm/pull/787)
* [OCPBUGS-35230](https://issues.redhat.com/browse/OCPBUGS-35230): Unblock CI [#771](https://github.com/openshift/operator-framework-olm/pull/771)
* [OCPBUGS-33356](https://issues.redhat.com/browse/OCPBUGS-33356): UPSTREAM: <carry>: bump go-jose [#743](https://github.com/openshift/operator-framework-olm/pull/743)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/dcfcfb3b2225bc8e59588e8df86700e3349697c4...cf125801cfefb6ac61b6994ea83529cf0c4c5e17)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/3ca78f1ca72fe96c35a6e89c65073f3ea1f0ebb9)

* [OCPBUGS-32067](https://issues.redhat.com/browse/OCPBUGS-32067): update golang.org/x/net for CVE-2023-45288 [#565](https://github.com/operator-framework/operator-marketplace/pull/565)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/a367cea6e2371a0db2957403de40958852f817b3...3ca78f1ca72fe96c35a6e89c65073f3ea1f0ebb9)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/7dbdae0a8b73d385123a1e8d679c640f84e4f9b9)

* [OCPBUGS-38263](https://issues.redhat.com/browse/OCPBUGS-38263): [release-4.14] Bump OVSDBTimeout and make it configurable [#2275](https://github.com/openshift/ovn-kubernetes/pull/2275)
* [OCPBUGS-38073](https://issues.redhat.com/browse/OCPBUGS-38073): Fix registering northd metrics on appropriate nodes [#2249](https://github.com/openshift/ovn-kubernetes/pull/2249)
* [OCPBUGS-37197](https://issues.redhat.com/browse/OCPBUGS-37197): [release-4.14] ovspinning: Set affinity of each thread [#2236](https://github.com/openshift/ovn-kubernetes/pull/2236)
* [OCPBUGS-36253](https://issues.redhat.com/browse/OCPBUGS-36253): EgressIP: Reload certificates for the grpc heatlhcheck server [#2213](https://github.com/openshift/ovn-kubernetes/pull/2213)
* [OCPBUGS-36554](https://issues.redhat.com/browse/OCPBUGS-36554): Handle IP fragments in SGW mode [#2219](https://github.com/openshift/ovn-kubernetes/pull/2219)
* [OCPBUGS-36703](https://issues.redhat.com/browse/OCPBUGS-36703): Bump ovn to 23.09.4-16 [#2222](https://github.com/openshift/ovn-kubernetes/pull/2222)
* [OCPBUGS-35009](https://issues.redhat.com/browse/OCPBUGS-35009): ipv6+all protocols conntrack flush [#2199](https://github.com/openshift/ovn-kubernetes/pull/2199)
* [OCPBUGS-34570](https://issues.redhat.com/browse/OCPBUGS-34570): Fix EIP GARP config overwritten by gateway update [#2188](https://github.com/openshift/ovn-kubernetes/pull/2188)
* [OCPBUGS-33721](https://issues.redhat.com/browse/OCPBUGS-33721): use a forked version of j-keck/arping that fixes a threading issue [#2170](https://github.com/openshift/ovn-kubernetes/pull/2170)
* [OCPBUGS-34076](https://issues.redhat.com/browse/OCPBUGS-34076): Reuse node-subnet from cache if exists [#2177](https://github.com/openshift/ovn-kubernetes/pull/2177)
* [OCPBUGS-34405](https://issues.redhat.com/browse/OCPBUGS-34405): [release-4.14] dns: fix deadlock in case of error [#2183](https://github.com/openshift/ovn-kubernetes/pull/2183)
* [OCPBUGS-33469](https://issues.redhat.com/browse/OCPBUGS-33469): drop-forwarding: Add ClusterSubnets to allowed forwarding CIDRs [#2160](https://github.com/openshift/ovn-kubernetes/pull/2160)
* [OCPBUGS-33537](https://issues.redhat.com/browse/OCPBUGS-33537): Improves service iptables efficiency on start up [#2164](https://github.com/openshift/ovn-kubernetes/pull/2164)
* [OCPBUGS-32104](https://issues.redhat.com/browse/OCPBUGS-32104): Periodically check the ovnkube-node certificate is not expired [#2117](https://github.com/openshift/ovn-kubernetes/pull/2117)
* [OCPBUGS-32319](https://issues.redhat.com/browse/OCPBUGS-32319): [release-4.14] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix [#2128](https://github.com/openshift/ovn-kubernetes/pull/2128)
* [Release 4.14] OCPBUGS-32987: Bump OVS [#2148](https://github.com/openshift/ovn-kubernetes/pull/2148)
* [OCPBUGS-32247](https://issues.redhat.com/browse/OCPBUGS-32247): [release-4.14] OVN bump to 23.09.0-139 [#2123](https://github.com/openshift/ovn-kubernetes/pull/2123)
* [OCPBUGS-29397](https://issues.redhat.com/browse/OCPBUGS-29397): 4.14 High CPU usage with APB CRD [#2118](https://github.com/openshift/ovn-kubernetes/pull/2118)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/ae7f5360d05b928ad10247f58ca9b8dd54242678...7dbdae0a8b73d385123a1e8d679c640f84e4f9b9)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/988f7109b4493f62cb13187bc190eae60c77d1e7)

* [OCPBUGS-36095](https://issues.redhat.com/browse/OCPBUGS-36095): Fix CVE-2024-6104 by updating http-retryable to 0.7.7 [#90](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/90)
* [OCPBUGS-33637](https://issues.redhat.com/browse/OCPBUGS-33637): Fix CVE2023-45288 by bumping x/net to v0.24.0 - 4.14 [#81](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/81)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/8ecfd7fd6a201844bb9a926146db70468345852b...988f7109b4493f62cb13187bc190eae60c77d1e7)


### [telemeter](https://github.com/openshift/telemeter/tree/1f7268163afc74f9f3c1ff89d8c0149760694e6c)

* [OCPBUGS-34830](https://issues.redhat.com/browse/OCPBUGS-34830): fix issuer check during JWT authentication 4.14 [#539](https://github.com/openshift/telemeter/pull/539)
* [OCPBUGS-32888](https://issues.redhat.com/browse/OCPBUGS-32888): update gopkg.in/square/go-jose.v2 to fix CVE-2024-28180 [#535](https://github.com/openshift/telemeter/pull/535)
* [Full changelog](https://github.com/openshift/telemeter/compare/c683f6571479cdb0e7577a22e9cf0f64d9ed77f9...1f7268163afc74f9f3c1ff89d8c0149760694e6c)


### [tests](https://github.com/openshift/origin/tree/3a80e947432d03c414cea7ded1dbf1fb943e2ecb)

* [OCPBUGS-36800](https://issues.redhat.com/browse/OCPBUGS-36800): Removes dependency on samples operator images [#28952](https://github.com/openshift/origin/pull/28952)
* #28775 FIX [release-4.14] OCPBUGS-33367: monitor test fix to wait before connecting to a non-existent dns on PowerVS and IBMCloud platforms [#28792](https://github.com/openshift/origin/pull/28792)
* #28745 FIX [release-4.14] OCPBUGS-33022: update egressFWTestE2E image which contains ping binary [#28899](https://github.com/openshift/origin/pull/28899)
* [OCPBUGS-36464](https://issues.redhat.com/browse/OCPBUGS-36464): test/extended: skip etcd leader change check on hypershift [#28921](https://github.com/openshift/origin/pull/28921)
* [OCPBUGS-35475](https://issues.redhat.com/browse/OCPBUGS-35475): Use centos7 tag instead of latest for cmd images tests [#28881](https://github.com/openshift/origin/pull/28881)
* [OCPBUGS-33417](https://issues.redhat.com/browse/OCPBUGS-33417): Provide SCC access via RBAC [#28806](https://github.com/openshift/origin/pull/28806)
* [OCPBUGS-33563](https://issues.redhat.com/browse/OCPBUGS-33563): Adjust the method of get the apiServer (release-4.14) [#28763](https://github.com/openshift/origin/pull/28763)
* [Full changelog](https://github.com/openshift/origin/compare/2989703229d271fd9636d824ed318ae6fbf7ecd3...3a80e947432d03c414cea7ded1dbf1fb943e2ecb)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/b5346ad9d07fc212c58ad52cd757fa31da3c5f77)

* [OCPBUGS-35136](https://issues.redhat.com/browse/OCPBUGS-35136): Bump x/crypto to v0.24.0 [#46](https://github.com/openshift/cluster-api-provider-vsphere/pull/46)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/72e998c300e17a7ba81d4a5a7624d69b0a104603...b5346ad9d07fc212c58ad52cd757fa31da3c5f77)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/0181d4f650241bc399e071941a561344f182a31d)

* [OCPBUGS-35138](https://issues.redhat.com/browse/OCPBUGS-35138): CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#123](https://github.com/openshift/vmware-vsphere-csi-driver/pull/123)
* [OCPBUGS-33798](https://issues.redhat.com/browse/OCPBUGS-33798): FailedPrecondition volume does not appear staged [#119](https://github.com/openshift/vmware-vsphere-csi-driver/pull/119)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/a5ed57f5120136bf08e134bf478186c82bfb81da...0181d4f650241bc399e071941a561344f182a31d)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/a9c08425f59d37495d655ee16d4fc7fa200a5ea8)

* [OCPBUGS-38347](https://issues.redhat.com/browse/OCPBUGS-38347): Drop event when CheckDefaultDatastore fails [#171](https://github.com/openshift/vsphere-problem-detector/pull/171)
* [OCPBUGS-35913](https://issues.redhat.com/browse/OCPBUGS-35913): Fix missing failure-domains [#162](https://github.com/openshift/vsphere-problem-detector/pull/162)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/ece171d2d5b5fa417d1aece9aa80714841c35cec...a9c08425f59d37495d655ee16d4fc7fa200a5ea8)